Re: Book to implement SSL -- WEB400

Hi Pugazh;

If you are doing it the programmatic way you have (at least) two choices -GSK or plain SSL. I have used the last (ssl.h) and it has all I require:

Besides you only have to initialize the SSL with a certificate from thecertificate store on your system i - you can find that by referring to yoursystem i in a browser and the port 2001 like


http://MySystemI:2001

and create a certificate. Place it under/QIBM/USERDATA/ICSS/CERT/CERTAUTH/DEFAULT.KDB - and then you are good togo.

You have at least five algorithms to provide when you are doing SSL - I usethe RSA version RC4/128 bit which has enough strength and is fast at thesame time .....


In IceBreak the underlying code looks like:

if (svr00r.SVPROT != PROTOCOL_HTTPS) {
   http.pSsl = SSL_Create(Socket , SSL_DONT_ENCRYPT);
} else {
  SSLInit sslinit;
  USHORT cipher = SSL_RSA_WITH_RC4_128_SHA;
  svr00r.SVCEPF.data[svr00r.SVCEPF.len] =0;
  if (BeginsWith(svr00r.SVCEPF.data , "*DFT")) {

sslinit.keyringFileName ="/QIBM/USERDATA/ICSS/CERT/CERTAUTH/DEFAULT.KDB";

  } else {
     sslinit.keyringFileName    = svr00r.SVCEPF.data;
  }
  svr00r.SVCEPW.data[svr00r.SVCEPW.len] =0;
  sslinit.keyringPassword    = svr00r.SVCEPW.data;
  sslinit.cipherSuiteList    = &cipher;
  sslinit.cipherSuiteListLen = 1;
  rc = SSL_Init(&sslinit);
  if (rc < 0) {

trace ( "SSL initialization failed reason %d error: %s", rc,strerror(errno)) ;

  }
  http.pSsl = SSL_Create(Socket , SSL_ENCRYPT);
/* set up parameters for handshake */
  http.pSsl->protocol = 0;
  http.pSsl->timeout = 0;
  http.pSsl->cipherSuiteList = &cipher;
  http.pSsl->cipherSuiteListLen = 1;
  rc = SSL_Handshake(http.pSsl, SSL_HANDSHAKE_AS_SERVER);
  if (rc < 0) {

trace ("SLL Handshake failed reason %d Error: %s", rc,strerror(errno));

  }
}



Finaly you have to terminate the SSL with SLL_Destroy ....

----- Original Message -----From: "Pugazh" <sapugazh@xxxxxxxxx>

To: <web400@xxxxxxxxxxxx>
Sent: Thursday, August 03, 2006 4:12 AM
Subject: [WEB400] Book to implement SSL

Guys,

Can any of you recommend any easy to follow books that
will help me implement SSL for my website, I need to
start completely from scratch?

Thnx


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
--
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/web400.