|
| Iniciado por guest, 01,abr. 2014 10:19 - 5 respuestas |
| |
| | | |
|
| |
| Publicado el 01,abril 2014 - 10:19 |
Hi,
I have to secure XML files using a personal key (certificates), using the XML signature method.
The problem is the only thing I can find about these in windev is for the SOAP connection.
Does anyone know a method to "generate" these in windev for normal XML's ?
Thanks in advance,
David |
| |
| |
| | | |
|
| | |
| |
| Publicado el 01,abril 2014 - 12:10 |
Hi David,
If you need to encrypt your file using a public/private key algorithm (=Certificates), you may look at OpenSSL as a free solution to encrypt your xml file before sending it...
We use this to encrypt payment xml files over a secured ftp connection.
This is very secure since as well the tunnel as the content are encrypted.
Cheers,
Peter H. |
| |
| |
| | | |
|
| | |
| |
| Publicado el 01,abril 2014 - 12:53 |
Hi Peter,
thanks for your fast response, I will look into it.
But I'm afraid it's not really what I meant, our line is encrypted end to end using SSL.
But beside that we need to verify that the user sending the XML is authorized by the government.
The verification needs to be made using a hardware token assigned to that person.
So it's actually not encrypting the message, but putting a signature generated using the hardware token.
XML signature on wikipedia
Regards,
David |
| |
| |
| | | |
|
| | |
| |
| Publicado el 01,abril 2014 - 13:23 |
Hi David,
That's indeed something different...
Sorry, no experience with this.
Good luck!
Peter H. |
| |
| |
| | | |
|
| | |
| |
| Publicado el 01,abril 2014 - 15:54 |
Thanks anyway Peter,
I haven't fully solved the issue yet but as progression log I think I can accomplish what I want using CertificateSignString() in windev.
The problem I have now is that Windev talks about a string to sign.
I think that the signature is based on the POC (hardware token) in combination with the actual XML msg.
So you have to use the XML message as string and the key as certificate, and place the sign in the right node.
I will post an update when / if I know more.
Regards,
David |
| |
| |
| | | |
|
| | |
| |
| Publicado el 11,febrero 2015 - 01:36 |
| |
| |
| | | |
|
| | | | |
| | |
|