Re: HTTP Communications with USBank/SSL Tracer?

On Tue, 29 Oct 2002, Brad Stone wrote:

> I'm currently working on a project for a customer to upload
> a file to USBank.  Basically mimiking a user using a browser
> to sign on and then upload a file.
>
> I'm using GETURI to do this and I am having problems with
> the upload portion.  I keep getting an error from their
> server.
>
> If anyone is currently doing this please contact me off the
> list (or post here, that's ok too) as I would like to talk
> to you.  I do have requests into the USBank team but I'm not
> sure what type of responses I will get.
>

I haven't done this with USBank specifically, but I've done it with
other sites, does that help?

You might look at the code to my open-source HTTPAPI project, which
does SSL and also does the username/password signon.

http://www.scottklement.com/httpapi/

In the QRPGLESRC file there's a program called 'EXAMPLE7' which might
be a starting point.   If you can get that to work, you could see what
the code is doing differently than GETURI is...


> I have requests and responses that I am sending and
> receiving for both logging on and sending the file that I
> can show that may help.
>
> If I had a trace tool that did SSL, that would help as well,
> so if anyone knows of one, cool.  I'm all ears.  I use
> HTTPTracer for normal HTTP, but it wont decode the SSL
> information.
>

You could try SSLDump -- http://www.rtfm.com/ssldump/
I haven't tried it, but it sounds like it might be what you're looking
for.

Though, really, you SHOULDN'T be able to decode the SSL information.
That's kind-of the point of SSL, isn't it? :)