A consultant told me recently that he has clients using IIS. Those servers accept port 443 requests with no cert installed on the systems. I have no way to verify this, and our servers run Apache anyway.
I believe that Apache will refuse to accept secure traffic, or minimally, Apache will squawk quite loudly without an installed cert.
Will Apache route port 443 requests without a cert?
We are running 2.2.3 running on CentOS 5.
Thanks.
The default install of apache installs an untrusted ssl certificate that you can use, but the browser will complain when you try and connect to it.
Though, in general, if you need to use SSL, then you should invest in a certificate.