Re: FW: SSL and dumbuser

>>> <html>

>> <form name="up" action="https://blabla.com/u-pos.w";

Is that URL on your server or the bank's?
And what does "u-pos.w" do? is that a script or cgi of some kind?


It's bank's URL and u-pos.w is just their url which gets info from my
submited form.

OK - but if it's getting stuff submitted from a form on your site, it has to be some kind of CGI, or something that can process the form data.

method="POST"

  target="_top">
  <input type="hidden" name="VK_SERVICE" value="1001">
  <input type="hidden" name="VK_MSG" value="Carrots">
  <input type="hidden" name="VK_MAC"  value="WHAT COMES HERE????">
       <!-- must here be some cgi or what? -->
  <input type="submit" value="GO!">
  </form>
  </html>

This form should send data from the webstore to the bank for billing.

In the above form, it looks like all the fields are hidden, so this doesn't appear to be a form that a person uses to place an order, it looks like it's only purpose is to take data from your server and submit to the bank's - is that correct? Or does this depend on a site visitor to hit the submit button?

Data

should be signed with SSL signature (maybe OpenSSL) for verification for the
bank. So there must be code like this: <input type="hidden" name="VK_MAC"
value="execute an application (or cgi or ...) which generates an SSL
signature">

What does the bank recommend for a cgi to generate SSL signatures on
the fly (I don't know of one offhand)?


When I submit this form to bank, one of the fields (VK_MAC) is my signature.
And there's one app which generates it every time I need.

So you have an application that generates the signature you need? but you need to get that data into the form submission? How does this app work?

So as best I can tell so far, what you need is to make it so that each time the page with the form is requested, it is a dynamically generated page, and that the "VK_MAC" field contains the data from the app that makes your signature. Does that sound right?


Because I don;t know how to put link to application to the HTML. Like I want
that there;s allways some random number on the site, and I have app that
greates it for me. How like the HTML code looks like when theres link to
application?


Here's one example: <input type="hidden" name="VK_MAC"
  value="ed/rZV7mTDBeL1bdJJ2Jjc7hBfbxFUAgMAlhU8ONVpsnAC8D2Bffz8AgeTDvlFymv+B+
8wyi3WGoALFvd9fbSyu/npDHgwK+YvfZrSWIdto3fJzF8qivnwRh7VK1Jlwr9RIjgQoTM+IAL4tm
fUWyDH0u/Ud9QCYHTVhWn35nF6k=">


----
Tenon Intersystems' WebTen Mailing List
To unsubscribe: send mail to webten-request@xxxxxxxxx
with the subject: unsubscribe
Find searchable Mailing List archives at
http://listsearch.blueworld.com/webtensearch.lasso


--
    Stephanie J. Wright

---------------------------------------------------------------------
Tenon Intersystems                                       805-963-6983
1123 Chapala Street                                 swright@xxxxxxxxx
Santa Barbara, CA 93101                          http://www.tenon.com
---------------------------------------------------------------------

---- Tenon Intersystems' WebTen Mailing List To unsubscribe: send mail to webten-request@xxxxxxxxx with the subject: unsubscribe Find searchable Mailing List archives at http://listsearch.blueworld.com/webtensearch.lasso