Diese Seite mit anderen teilen ...

Informationen zum Thema:
Forum:
WinDev Forum
Beiträge im Thema:
6
Erster Beitrag:
vor 4 Jahren, 2 Monaten
Letzter Beitrag:
vor 2 Jahren, 3 Monaten
Beteiligte Autoren:
David van Pelt, Peter Holemans, Ola

XMLSignature

Startbeitrag von David van Pelt am 01.04.2014 08:19

Hi,

I have to secure XML files using a personal key (certificates), using the XML signature method.
The problem is the only thing I can find about these in windev is for the SOAP connection.
Does anyone know a method to "generate" these in windev for normal XML's ?

Thanks in advance,

David

Antworten:

Hi David,

If you need to encrypt your file using a public/private key algorithm (=Certificates), you may look at OpenSSL as a free solution to encrypt your xml file before sending it...

We use this to encrypt payment xml files over a secured ftp connection.
This is very secure since as well the tunnel as the content are encrypted.

Cheers,

Peter H.

von Peter Holemans - am 01.04.2014 10:10
Hi Peter,

thanks for your fast response, I will look into it.
But I'm afraid it's not really what I meant, our line is encrypted end to end using SSL.
But beside that we need to verify that the user sending the XML is authorized by the government.
The verification needs to be made using a hardware token assigned to that person.

So it's actually not encrypting the message, but putting a signature generated using the hardware token.
XML signature on wikipedia

Regards,

David

von David van Pelt - am 01.04.2014 10:53
Hi David,


That's indeed something different...
Sorry, no experience with this.

Good luck!

Peter H.

von Peter Holemans - am 01.04.2014 11:23
Thanks anyway Peter,

I haven't fully solved the issue yet but as progression log I think I can accomplish what I want using CertificateSignString() in windev.
The problem I have now is that Windev talks about a string to sign.
I think that the signature is based on the POC (hardware token) in combination with the actual XML msg.
So you have to use the XML message as string and the key as certificate, and place the sign in the right node.

I will post an update when / if I know more.

Regards,

David

von David van Pelt - am 01.04.2014 13:54
Hi David,

It seems I have an XML signature problem similar to yours. Have you found a solution?

Best regards
Ola

von Ola - am 10.03.2016 18:22
Zur Information:
MySnip.de hat keinen Einfluss auf die Inhalte der Beiträge. Bitte kontaktieren Sie den Administrator des Forums bei Problemen oder Löschforderungen über die Kontaktseite.
Falls die Kontaktaufnahme mit dem Administrator des Forums fehlschlägt, kontaktieren Sie uns bitte über die in unserem Impressum angegebenen Daten.