Hi Evereone,
I have been struggled recently by a project intended to do web retrive
from secure web server. Specifically my task is to "POST" to a secure web
server (HTTPS) and then to retrieve the response sent by the server. (all
those should be done without browser). I have used the libwww library from
Perl successfully to do this kind of task from unsecure server. However I
could not do anything with the secure server. here is an example error
message:
Server: Netscape-FastTrack/2.01
Content-Length: 305
Content-Type: text/html
Client-Date: Thu, 05 Mar 1998 20:52:15 GMT
Client-Peer: 129.49.2.200:443
Client-SSL-Cert-Issuer: /C=US/O=RSA Data Security, Inc./OU=Secure Server
Certification Authority
Client-SSL-Cert-Subject: /C=US/SP=xxx xxxx/L=xxxxx xxxxx/O=xxxxx xxxxxxxxxxx
xx xxxx xx xxxxx xxxxx
xxx xxxx xx xxxxx xxxxx/OU=xxxx
xxxxxxxxxx/CN=xxxx.xx.xxxxxx.xxx
Client-SSL-Cipher: RC4-MD5
Client-SSL-Warning: Peer certificate not verified
Title: Server Error
<HTML><HEAD><TITLE>Server Error</TITLE></HEAD>
<BODY><H1>Server Error</H1>
This server has encountered an internal error which prevents it from
fulfilling your request. The most likely cause is a misconfiguration. Please
ask the administrator to look for messages in the server's error log.
</BODY></HTML>
my reasoning of the failure is that Server could not verify my
virtual browser (accomplished in libwww by UserAgent). Since it could not
authenticate the client, it refuse to send any encrypted data to this
fake browser. Is this right? My questions of using SSLeay to solve the
certificate issuses are:
1). Do I need to generte a client certificate using SSLeay and
include it in my Perl program so that the server could send back the
response?
2) Suppose I can generate the certificate in SSLeay, Will the server
Certificate Authority accept this certificate?
Any suggestions and comments are greately appreciated. Sample programs
are very welcome.
PS: I do get the crypt-SSLeay library and Net-SSleay.pm, however according
to the README from crypt-ssleay, I should wait for Eric's Perl implenmtation of
SSLeay. Are we close to that point? or I'd better use the C/C++?
--
-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
Jianzhong Ding, PH.D
(O):516-367-8896 (L):367-8371 (Graphics):367-8816
Fax:516-367-8873 Cold Spring Harbor Laboratory
email: [EMAIL PROTECTED] Cold Spring Harbor, NY 11724
-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
+-------------------------------------------------------------------------+
| Administrative requests should be sent to [EMAIL PROTECTED] |
| List service provided by Open Software Associates, http://www.osa.com/ |
+-------------------------------------------------------------------------+
