SSL with apache 2.0.58 & windows

I have Apache 2.0.58 running on a couple of windows machines. I want to be able to use SSL, but I'm confused about the different mechanisms involved.

Am I right in saying that both apache_ssl and mod_ssl both give apache a means of communicating with openssl? is that right?

It seems to me that apache_ssl and mod_ssl will not work with apache 2.x, only 1.3. Am I right on that? Do I have to downgrade to 1.3?

I'm running php & mysql & apache on a windows machine. Is version apache 1.3 ok for this? I thought v1.3 was a bit flakey with windows.

Do I have any other options?