CallHTTPWithSSL - Revision history

Stuboy: removed annoying & from pre areas

2018-06-22T16:26:23Z

removed annoying & from pre areas

← Older revision		Revision as of 16:26, 22 June 2018
Line 66:		Line 66:


	Does anyone know where the documentation for ~~create[[SecureRequest]]~~() is? It's not in the [[UniBasic]] Extensions manual...		Does anyone know where the documentation for createSecureRequest() is? It's not in the [[UniBasic]] Extensions manual...

	Sample [[UniBasic]] code:		Sample [[UniBasic]] code:
Line 80:		Line 80:
	CRT 'protocolLogging: ':X.RTN.CODE		CRT 'protocolLogging: ':X.RTN.CODE

	X.RTN.CODE = ~~create[[SecurityContext]]~~(X.CONTEXT, '')		X.RTN.CODE = createSecurityContext(X.CONTEXT, '')
	CRT '~~create[[SecurityContext]]~~: ':X.RTN.CODE		CRT 'createSecurityContext: ':X.RTN.CODE

	X.CERT.PATH="wsmoak_tomcat.cer"		X.CERT.PATH="wsmoak_tomcat.cer"
Line 93:		Line 93:
	X.DEPTH = 0		X.DEPTH = 0
	X.SERVER.OR.CLIENT = 2 ;* CLIENT		X.SERVER.OR.CLIENT = 2 ;* CLIENT
	X.RTN.CODE = ~~set[[AuthenticationDepth]]~~(X.CONTEXT, X.DEPTH, X.SERVER.OR.CLIENT)		X.RTN.CODE = setAuthenticationDepth(X.CONTEXT, X.DEPTH, X.SERVER.OR.CLIENT)
	CRT '~~set[[AuthenticationDepth]]~~: ':X.RTN.CODE		CRT 'setAuthenticationDepth: ':X.RTN.CODE

	X.RTN.CODE = ~~show[[SecurityContext]]~~(X.CONTEXT,X.CONFIG.INFO)		X.RTN.CODE = showSecurityContext(X.CONTEXT,X.CONFIG.INFO)
	CRT '~~show[[SecurityContext]]~~: ':X.RTN.CODE		CRT 'showSecurityContext: ':X.RTN.CODE
	SWAP @AM WITH CRLF IN X.CONFIG.INFO		SWAP @AM WITH CRLF IN X.CONFIG.INFO
	CRT X.CONFIG.INFO		CRT X.CONFIG.INFO
Line 103:		Line 103:
	URL="https://your.server.here/index.html"		URL="https://your.server.here/index.html"
	HTTP.METHOD="POST"		HTTP.METHOD="POST"
	X.RTN.CODE = ~~create[[SecureRequest]]~~(URL,HTTP.METHOD,X.HANDLE,X.CONTEXT)		X.RTN.CODE = createSecureRequest(URL,HTTP.METHOD,X.HANDLE,X.CONTEXT)
	CRT '~~create[[SecureRequest]]~~: ':X.RTN.CODE		CRT 'createSecureRequest: ':X.RTN.CODE

	X.RTN.CODE = submitRequest(X.HANDLE,'','',X.RESPONSE.HEADERS,X.RESPONSE.DATA,X.HTTP.STATUS)		X.RTN.CODE = submitRequest(X.HANDLE,'','',X.RESPONSE.HEADERS,X.RESPONSE.DATA,X.HTTP.STATUS)

Conversion script: link fix

2015-02-26T23:48:53Z

link fix

← Older revision		Revision as of 23:48, 26 February 2015
Line 6:		Line 6:
	X.DEPTH = 1 ;* Changed from 0 to 1 to allow signed by CA		X.DEPTH = 1 ;* Changed from 0 to 1 to allow signed by CA
	X.SERVER.OR.CLIENT = 2 ;* CLIENT		X.SERVER.OR.CLIENT = 2 ;* CLIENT
	X.RTN.CODE = ~~setAuthenticationDepth~~(X.CONTEXT, X.DEPTH, X.SERVER.OR.CLIENT)		X.RTN.CODE = set[[AuthenticationDepth]](X.CONTEXT, X.DEPTH, X.SERVER.OR.CLIENT)
	</pre>		</pre>

Line 13:		Line 13:
	01/20/2004 18:14:51 SSL Certificate Verification:		01/20/2004 18:14:51 SSL Certificate Verification:
	depth: 0		depth: 0
	subject: /C=CA/O=IBM/CN=www-927.ibm.com		subject: [[/C]]=CA[[/O]]=IBM[[/CN]]=www-927.ibm.com
	issuer: /C=US/O=Equifax/OU=Equifax Secure Certificate Authority		issuer: [[/C]]=US[[/O]]=Equifax[[/OU]]=Equifax Secure Certificate Authority
	</pre>		</pre>

Line 59:		Line 59:

	<pre>		<pre>
	EXECUTE "!curl -k -o ./MYDIR/FNAME https://www.example.com"		EXECUTE "!curl -k -o .[[/MYDIR/FNAME]] https://www.example.com"
	OPEN 'MYDIR' TO MYDIR ELSE STOP 201,'MYDIR'		OPEN 'MYDIR' TO MYDIR ELSE STOP 201,'MYDIR'
	READ R FROM MYDIR, 'FNAME' ELSE STOP 'https get did not work'		READ R FROM MYDIR, 'FNAME' ELSE STOP 'https get did not work'
Line 66:		Line 66:


	Does anyone know where the documentation for ~~createSecureRequest~~() is? It's not in the UniBasic Extensions manual...		Does anyone know where the documentation for create[[SecureRequest]]() is? It's not in the [[UniBasic]] Extensions manual...

	Sample UniBasic code:		Sample [[UniBasic]] code:
	<pre>		<pre>
	* WENDY SMOAK		* WENDY SMOAK
Line 80:		Line 80:
	CRT 'protocolLogging: ':X.RTN.CODE		CRT 'protocolLogging: ':X.RTN.CODE

	X.RTN.CODE = ~~createSecurityContext~~(X.CONTEXT, '')		X.RTN.CODE = create[[SecurityContext]](X.CONTEXT, '')
	CRT '~~createSecurityContext~~: ':X.RTN.CODE		CRT 'create[[SecurityContext]]: ':X.RTN.CODE

	X.CERT.PATH="wsmoak_tomcat.cer"		X.CERT.PATH="wsmoak_tomcat.cer"
Line 93:		Line 93:
	X.DEPTH = 0		X.DEPTH = 0
	X.SERVER.OR.CLIENT = 2 ;* CLIENT		X.SERVER.OR.CLIENT = 2 ;* CLIENT
	X.RTN.CODE = ~~setAuthenticationDepth~~(X.CONTEXT, X.DEPTH, X.SERVER.OR.CLIENT)		X.RTN.CODE = set[[AuthenticationDepth]](X.CONTEXT, X.DEPTH, X.SERVER.OR.CLIENT)
	CRT '~~setAuthenticationDepth~~: ':X.RTN.CODE		CRT 'set[[AuthenticationDepth]]: ':X.RTN.CODE

	X.RTN.CODE = ~~showSecurityContext~~(X.CONTEXT,X.CONFIG.INFO)		X.RTN.CODE = show[[SecurityContext]](X.CONTEXT,X.CONFIG.INFO)
	CRT '~~showSecurityContext~~: ':X.RTN.CODE		CRT 'show[[SecurityContext]]: ':X.RTN.CODE
	SWAP @AM WITH CRLF IN X.CONFIG.INFO		SWAP @AM WITH CRLF IN X.CONFIG.INFO
	CRT X.CONFIG.INFO		CRT X.CONFIG.INFO
Line 103:		Line 103:
	URL="https://your.server.here/index.html"		URL="https://your.server.here/index.html"
	HTTP.METHOD="POST"		HTTP.METHOD="POST"
	X.RTN.CODE = ~~createSecureRequest~~(URL,HTTP.METHOD,X.HANDLE,X.CONTEXT)		X.RTN.CODE = create[[SecureRequest]](URL,HTTP.METHOD,X.HANDLE,X.CONTEXT)
	CRT '~~createSecureRequest~~: ':X.RTN.CODE		CRT 'create[[SecureRequest]]: ':X.RTN.CODE

	X.RTN.CODE = submitRequest(X.HANDLE,'','',X.RESPONSE.HEADERS,X.RESPONSE.DATA,X.HTTP.STATUS)		X.RTN.CODE = submitRequest(X.HANDLE,'','',X.RESPONSE.HEADERS,X.RESPONSE.DATA,X.HTTP.STATUS)

217.154.148.170: *

2004-01-20T18:20:41Z

New page

Priceless example!

Managed to connect to https://www-927.ibm.com/software/data/u2/support/u2techconnect/
by also changing...
<pre>
X.DEPTH = 1 ;* Changed from 0 to 1 to allow signed by CA
X.SERVER.OR.CLIENT = 2 ;* CLIENT
X.RTN.CODE = setAuthenticationDepth(X.CONTEXT, X.DEPTH, X.SERVER.OR.CLIENT)
</pre>

and using the 'Equifax Secure Certificate Authority' certificate instead of one generated by java keytool. I looked in the protocol log to discover that the equifax certificate was required:
<pre>
01/20/2004 18:14:51 SSL Certificate Verification:
depth: 0
subject: /C=CA/O=IBM/CN=www-927.ibm.com
issuer: /C=US/O=Equifax/OU=Equifax Secure Certificate Authority
</pre>

I'm on xp, so used
start > run mmc
file > add/remove snap in > certificates
certificates > trusted root cas > equifax
action > all tasks > export

to get an equifax.cer certificate file instead of wendy's wsmoak_tomcat.cer, but i imagine these are available on the web somewhere - would be a lot easier if IBM included all the standard root CA files somewhere.

--
Simon Lewington
ud@simonl.free-online.co.uk
-----

Fixed! IBM said to use
<pre>
X.USED.AS="2" ;* Used as an issuer certificate
X.FORMAT="2" ;* DER format
</pre>
in the code below. (Both of those used to be "1" when I started this.)

I re-read the manual, and I still don't know enough about SSL to have figured that out.

--
Wendy Smoak
wsmoak@asu.edu
----

Ian, yes, there's a reason. This is a simple test but eventually I need to POST over HTTPS to a third party. I can already do it over HTTP, but when I change to HTTPS, it breaks. So I switched to simple test code to see if I could find the problem.

--
Wendy

----
Wendy, is there are reason to do it from Basic? (other than for fun :-) cURL can download https

* http://hpux.cs.utah.edu/hppd/hpux/Networking/WWW/curl-7.9.8/
* http://curl.haxx.se/

you could do

<pre>
EXECUTE "!curl -k -o ./MYDIR/FNAME https://www.example.com"
OPEN 'MYDIR' TO MYDIR ELSE STOP 201,'MYDIR'
READ R FROM MYDIR, 'FNAME' ELSE STOP 'https get did not work'
</pre>
-----

Does anyone know where the documentation for createSecureRequest() is? It's not in the UniBasic Extensions manual...

Sample UniBasic code:
<pre>
* WENDY SMOAK

EQUATE CRLF TO CHAR(013):CHAR(010)

X.LOG.FILE = 'XWDS.HTTP.LOG'
X.LOG.ACTION = 'ON'
X.LOG.LEVEL = '10'
X.RTN.CODE = protocolLogging(X.LOG.FILE, X.LOG.ACTION, X.LOG.LEVEL)
CRT 'protocolLogging: ':X.RTN.CODE

X.RTN.CODE = createSecurityContext(X.CONTEXT, '')
CRT 'createSecurityContext: ':X.RTN.CODE

X.CERT.PATH="wsmoak_tomcat.cer"
;* changed next 2 lines from 1 to 2 per IBM
X.USED.AS="2" ;* Used as an issuer certificate
X.FORMAT="2" ;* DER format
X.ALGORITHM="1" ;* RSA key
X.RTN.CODE = addCertificate(X.CERT.PATH, X.USED.AS, X.FORMAT, X.ALGORITHM, X.CONTEXT)
CRT 'addCertificate: ':X.RTN.CODE

X.DEPTH = 0
X.SERVER.OR.CLIENT = 2 ;* CLIENT
X.RTN.CODE = setAuthenticationDepth(X.CONTEXT, X.DEPTH, X.SERVER.OR.CLIENT)
CRT 'setAuthenticationDepth: ':X.RTN.CODE

X.RTN.CODE = showSecurityContext(X.CONTEXT,X.CONFIG.INFO)
CRT 'showSecurityContext: ':X.RTN.CODE
SWAP @AM WITH CRLF IN X.CONFIG.INFO
CRT X.CONFIG.INFO

URL="https://your.server.here/index.html"
HTTP.METHOD="POST"
X.RTN.CODE = createSecureRequest(URL,HTTP.METHOD,X.HANDLE,X.CONTEXT)
CRT 'createSecureRequest: ':X.RTN.CODE

X.RTN.CODE = submitRequest(X.HANDLE,'','',X.RESPONSE.HEADERS,X.RESPONSE.DATA,X.HTTP.STATUS)
CRT 'submitRequest: ':X.RTN.CODE

CRT 'X.RESPONSE.HEADERS = ':X.RESPONSE.HEADERS
CRT 'X.RESPONSE.DATA = ':X.RESPONSE.DATA
CRT 'X.HTTP.STATUS = ':X.HTTP.STATUS

X.LOG.ACTION = 'OFF'
X.RTN.CODE = protocolLogging(X.LOG.FILE, X.LOG.ACTION, X.LOG.LEVEL)
CRT 'protocolLogging: ':X.RTN.CODE

</pre>

----

<b>Certificate</b>

The Certificate I'm using was generated and exported with 'keytool', which is a utility that is distributed with Sun's JDK, of which I'm using version 1.4.1_02.

http://java.sun.com/j2se/1.4.1/docs/tooldocs/solaris/keytool.html

The web server I'm using is Tomcat 4.1.24, and I followed these directions to enable SSL: http://jakarta.apache.org/tomcat/tomcat-4.1-doc/ssl-howto.html

The original .keystore file was generated with:
<pre>
> keytool -genkey -alias tomcat -keyalg RSA
</pre>

And then the .cer file was exported with:
<pre>
> keytool -export -alias tomcat -file wsmoak_tomcat.cer
</pre>