Beginning SSL Questions

Hi All-

We are going to start implementing SSL with Postgres v8.1.4 (finally got it working with Tomcat after a few long weeks!); and I've been doing some reading in the docs and on the mailing lists and I have a couple of questions before we start down this path:

- In the docs, it says that when using SSL in Postgres "This requires that OpenSSL is installed on both client and server systems and that support in PostgreSQL is enabled at build time" - is this correct? Or can we use the certificates and keystore file we generated using the Jave keytool implementing SSL with Tomcat?

- In perusing the mailing list, it appears that this is not going to be a 'simple' task...any pointers that anyone can give to me before we start? If possible, I'd like to avoid another hair-pulling three week task! =o)

Thanks in advance for any help and for your time!
-Jeanna