Re: SSL and dumbuser

>> Hi!
Just trying server stuff here, and found an hole in my knowledge:
 I have to sign form with SSL certificate. So I generated keys and
 that stuff, but now...

So do have your server set up now to serve pages via SSL?

If so, then all https links to files on your server will be encrypted.

>>
The submit form must look like this (about) :

<html>
>> <form name="up" action="https://blabla.com/u-pos.w";


Is that URL on your server or the bank's?
And what does "u-pos.w" do? is that a script or cgi of some kind?

method="POST"

 target="_top">
 <input type="hidden" name="VK_SERVICE" value="1001">
 <input type="hidden" name="VK_MSG" value="Carrots">
 <input type="hidden" name="VK_MAC"  value="WHAT COMES HERE????">
      <!-- must here be some cgi or what? -->
 <input type="submit" value="GO!">
 </form>
 </html>

Please help!


 I'm not quite sure what the question is...  more info please and I
 will try to help.

Thank you for fast response

This form should send data from the webstore to the bank for billing. Data
should be signed with SSL signature (maybe OpenSSL) for verification for the
bank. So there must be code like this: <input type="hidden" name="VK_MAC"
value="execute an application (or cgi or ...) which generates an SSL
signature">

What does the bank recommend for a cgi to generate SSL signatures on the fly (I don't know of one offhand)?


Here's one example: <input type="hidden" name="VK_MAC"
 value="ed/rZV7mTDBeL1bdJJ2Jjc7hBfbxFUAgMAlhU8ONVpsnAC8D2Bffz8AgeTDvlFymv+B+
8wyi3WGoALFvd9fbSyu/npDHgwK+YvfZrSWIdto3fJzF8qivnwRh7VK1Jlwr9RIjgQoTM+IAL4tm
fUWyDH0u/Ud9QCYHTVhWn35nF6k=">

The code must be different every time.

--
    Stephanie J. Wright

---------------------------------------------------------------------
Tenon Intersystems                                       805-963-6983
1123 Chapala Street                                 swright@xxxxxxxxx
Santa Barbara, CA 93101                          http://www.tenon.com
---------------------------------------------------------------------

---- Tenon Intersystems' WebTen Mailing List To unsubscribe: send mail to webten-request@xxxxxxxxx with the subject: unsubscribe Find searchable Mailing List archives at http://listsearch.blueworld.com/webtensearch.lasso