Page 1 of 1

PHP OpenSSL questions!!!

Posted: Sat Jul 10, 2010 12:22 am
by phpfanatic
Hi to all members....

I just want to get some idea and information about encryption. I had many idea now about what is encryption because i reported it many times to my class... .I have a problem here...We and my group mates is developing a online payment gateway (OPGW). I know that OPGW is very hard and difficult because it tackles about the security of your client. BTW, i am just a student taking up computer science..:) Let's go back to my problem. Before implementing the OPGW, our adviser told us to develop first a client-side application both OPGW and our schools server. They want us to make a simple web-based program that serve us OPGW and School server (SE). I have a difficulty on how to implement and use the OpenSSL library (which is available in the php.net). We use asymmetric PKI so that we can have a public and private key encryption process.

Here are my lists of questions about my project:

1. Where should i start generating my private key for the OPGW?
a. Is it during the log in form which is the password will be generated as private key?

2. Does the SE name will be act as a public key? (where in OPGW send encrypted data to SE by using the SE Public key)

that's all for now... .hope somebody can answer my questions so that i can gain idea and also knowledge before i graduate my course.. :) thanks!

Re: PHP OpenSSL questions!!!

Posted: Sat Jul 10, 2010 2:53 am
by requinix
What are you trying to implement with OpenSSL? Are you just aiming to have a secure user<->server connection? Because HTTPS takes care of all that.

Re: PHP OpenSSL questions!!!

Posted: Mon Jul 12, 2010 1:42 am
by phpfanatic
That is one of my problem also... I don't know how to start, I mean how to make a https webpage? :(

Re: PHP OpenSSL questions!!!

Posted: Mon Jul 12, 2010 3:21 am
by Apollo
This depends on your hosting provider mostly. Just request them to setup your site for SSL, you'll get some details you need for purchasing an SSL certificate (they can be obtained very cheap nowadays). Some hosters charge a little extra for hosting SSL sites (because their infrastructure requires SSL sites to have a unique IP and stuff).