FW: SSL and dumbuser

>  >> Hi!
>>>
>>>  Just trying server stuff here, and found an hole in my knowledge:
>>>
>>>  I have to sign form with SSL certificate. So I generated keys and
>>>  that stuff, but now...

>So do have your server set up now to serve pages via SSL?

>If so, then all https links to files on your server will be encrypted.

No, pages don;t have to be encrypted.

>  >>
>>>  The submit form must look like this (about) :
>>>
>>>  <html>
>  >> <form name="up" action="https://blabla.com/u-pos.w";

>Is that URL on your server or the bank's?
>And what does "u-pos.w" do? is that a script or cgi of some kind?

It's bank's URL and u-pos.w is just their url which gets info from my
submited form.

>method="POST"
>>>  target="_top">
>>>  <input type="hidden" name="VK_SERVICE" value="1001">
>>>  <input type="hidden" name="VK_MSG" value="Carrots">
>>>  <input type="hidden" name="VK_MAC"  value="WHAT COMES HERE????">
>>>       <!-- must here be some cgi or what? -->
>>>  <input type="submit" value="GO!">
>>>  </form>
>>>  </html>
>
>This form should send data from the webstore to the bank for billing. Data
>should be signed with SSL signature (maybe OpenSSL) for verification for the
>bank. So there must be code like this: <input type="hidden" name="VK_MAC"
>value="execute an application (or cgi or ...) which generates an SSL
>signature">

>What does the bank recommend for a cgi to generate SSL signatures on
>the fly (I don't know of one offhand)?

When I submit this form to bank, one of the fields (VK_MAC) is my signature.
And there's one app which generates it every time I need.

Because I don;t know how to put link to application to the HTML. Like I want
that there;s allways some random number on the site, and I have app that
greates it for me. How like the HTML code looks like when theres link to
application?

>
>Here's one example: <input type="hidden" name="VK_MAC"
>  value="ed/rZV7mTDBeL1bdJJ2Jjc7hBfbxFUAgMAlhU8ONVpsnAC8D2Bffz8AgeTDvlFymv+B+
>8wyi3WGoALFvd9fbSyu/npDHgwK+YvfZrSWIdto3fJzF8qivnwRh7VK1Jlwr9RIjgQoTM+IAL4tm
>fUWyDH0u/Ud9QCYHTVhWn35nF6k=">
>

----
Tenon Intersystems' WebTen Mailing List
To unsubscribe: send mail to webten-request@xxxxxxxxx 
with the subject: unsubscribe
Find searchable Mailing List archives at
http://listsearch.blueworld.com/webtensearch.lasso