SSL and CSP
Hi, I want to implement some cryptographic algorithms (instead of RSA, RC2/RC4 and DH) in custom CSP. I also want SSL communications (between Explorer and IIS, for instance) to be held using this CSP. As I understand, there is a library in W2K called SCHANNEL.DLL, which performs SSL as well. And it uses an existing CSP. So can I replace this CSP with my own on the client and server sides to achieve the desired results?
[422 byte] By [
Pos Ader] at [2007-11-17 14:34:14]

# 1 Re: SSL and CSP
Secure Channel (schannel.dll) supports network authentication and encryption using the industry standard TLS and SSL protocols. These can be accessed using the WinInet interface with HTTP (HTTPS). Authenticode supports object signing and verification. This has been used principally for determining origin and integrity of components downloaded over the Internet, though it may be used in other environments.
If you need some code examples, I can probably come up with some.
# 2 Re: SSL and CSP
sure..you can replace CSP with your own making...
you should make a DLL which is used to replace windows default CSP...and its signature file...
refer to msdn library...
# 4 Re: SSL and CSP
Doesn't Internet Explorer already handle SSL? It does at least handle server side SSL. If it does client side as well, what's then the point of creating your own CSP module (quite complicated task) and what does your CSP module has to do with SSL?
j0nas at 2007-11-10 3:44:58 >

# 5 Re: SSL and CSP
Most web clients and servers supports SSL (for instance IIS and Apache).
You'll need to install a x509 certificate (VeriSign can issue one for you) on the web server.
I'm sure there are a lot of information on net about "How to setup a SSL secured web server".
Good luck.
j0nas at 2007-11-10 3:45:57 >
