Hi Chris,

The messages you sent just got to the mailing list. Here's my feedback.
If you find anything offending, my apologies, I have no intensions to do
that.

> Sent: Sunday, February 10, 2002 12:38 PM
> To: '[EMAIL PROTECTED]'
> Subject: RE: DES IV
> 
> 
> Well after wasting the weekend on this, I am just going to give up
> again.  So that makes for over a year trying to wasde through 
> these long
> documents only to find they do not help AT ALL in developing 
> a client to
> interface to the OPENSRS system.

The docs are quite useful, and if you search around, there has been
number of opensrs clients developed already, such as OpenSRS-PHP (which
is backend for communication with server) and I successfully built
front-end (it's partly still in works, but it works great) for it, with
no troubles at all.
 
> The document you refered me too only has made things worse, I 
> think.  I
> am trying to use DES, the document is for Blowfish.  But it 
> does help me
> know that the PDF's posted on the OPENSRS site are even more worthless
> than I thought.  The system obvisouly has many unpublished and
> proprietary routines in it that no one seems to understand.

Charles said they recommend Blowfish. "BTW - our suggestion is that you
use Blowfish, it's faster, stronger encryption." and that's why he gave
you docs for Blowfish.

All of the routines are in the docs, and if you look at the client
(reg_system.cgi and manage.cgi) it is not using any more calls than the
docs have. 

> Why can't the test server actually return some sort of error code or
> provide a test interface to see if we are on the right track?  Just
> dropping us off is SOOOOO frustrating.  

The server returns error code all the time (at least in my experiences).
Most likely your routines for sending and receiving data do not work
properly.

> I am getting to the checksum and then trying to send the MD5 'digest'
> back.  I try to encrypt it using DES, sending the server the DES
> encrypted block using the key I generated.  So I asked about it last
> week and got a little help from Charles and one of the OPENSRS staff.
> What perplexes me is that neither one seems to understand the 
> encryption
> parts of the system, which is the hard part of the whole 
> process.  This
> is troubling to me.

The OpenSRS-PHP works perfectly with both DES and Blowfish. If you can't
solve the authentication problem, you may want to look at the Perl or
PHP code to see how it is done there. Also, you should first send your
version to server and await version reply from the server, and
authenticate directly after that. I'm not sure, but I think the server
will not talk to you if you don't send it version or the authentication
is incorrect.

> What I do find out from Charles' reply is that there are many things
> going on in the encryption process and obvisouly what works 
> for Blowfish
> does not work for DES.  These are public symetric encryption 
> methods.  I
> went through and evaluated many articles and sample code to 
> come to the
> conclusion that this is not a public interface and PERL is 
> simply not an
> acceptable language for us and many others to work with.

Again, there is a quite a few OpenSRS clients around. The Perl one is
not the one and only.

> So with all this said and much venting included.  Please DOCUMENT the
> system properly so that we may right clients for our sites and
> management software to that we can properly promote domain 
> registration.

There is few errors in the documents, but not any severe ones that a
programmer couldn't deal with. I have found the docs quite helpful and
used them all the way.

> Thanks for bearing with my frustration and I just hope this 
> will finally
> help me get this stuff completed.  I have spent many weekends over the
> past year trying to figure this stuff out.

If you get cut-off from the server or don't receive errors at all, you
may want to check out the routines that encode all the data into XML,
and parse all the data from XML, as well as the routines that
communicate with the server.

> Chris Love
> 
> Extreme Web Works
> 
> www.extremewebworks.com
> 
> 919-836-0998

I'll be glad to help if I can be of any assistance.

mayo

Reply via email to