Smalltalk › Frameworks & Tools › Seaside › Seaside General

[ANN] Working SSL In Squeak

_‹ Previous Topic Next Topic _›

Classic

List

Threaded

2 messages Options

Ron Teitelbaum

[ANN] Working SSL In Squeak

All,

A while back I started an implementation of TLS 1.2. Rob Withers joined the effort a few weeks ago and is has made terrific progress. He reorganized everything, added a proper protocol stack, and now has the certificates working.

Our version now works with SSL3.0 and TLS 1.1, and DH or RSA using x509v3 Certificates. There are still a number of things that need to be done but we can now use squeak to connect as an SSL server and/or client. See the examples in the workspace that opens when you load the code. You will find our implementation at www.squeaksource.com/Cryptography. There are two Monticello Configuration files available to make loading easier. Load Cryptography-Configuration.mcm, and then Crypt-Xtra-Config.mcm.

We could use some help with testing, code review, documentation or any other help you would like to offer.

There is also support for MS CryptoAPI and CertificateStores for Microsoft in the MSCert package. In the future I will be working on integrating this functionality. I will also be adding support for KomHttp which is mostly completed but needs to be updated to support Rob’s new version.

We hope you find this useful and will keep us updated on your use and issues with our implementation. If you have any questions please let us know. Also again we would like to invite anyone with interest or experience with cryptography to join our Cryptography Team at http://lists.squeakfoundation.org/mailman/listinfo/cryptography .

Thanks and enjoy,

Ron Teitelbaum

President / Principal Software Engineer

US Medical Record Specialists

www.USMedRec.com

[hidden email]

Squeak Cryptography Team Leader

_______________________________________________
Seaside mailing list
[hidden email]
http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/seaside

Rob Withers

Re:[croquet] [ANN] Working SSL In Squeak

Hi all,

Let me add a few things to Ron's announcement. First off I added a HttpsUrl class and support to retrieve pages with these Urls. So you can do the following:

'https://www.fidelity.com' asUrl retrieveContents.

I tried to add support for a POST command, but I couldn't really test it because I couldn't find a WebBrowser. Do we still have one? I wanted to do my online banking in squeak! :-)

Second, without a patch the Monticello configurations won't work. Let me list the packages needed from the Cryptography repository. Load, in order:

CryptographyBase

Cryptography-Core

Cryptography-DES

Cryptography-DSA

Cryptography-ElGamal

Cryptography-RSA

Cryptography-SHA1

Cryptography-RC4

Cryptography-MD5

Cryptography-ASN1

Cryptography-X509

Cryptography-SSL

Lastly. you will need a DESPlugin, which you can find here: http://minnow.cc.gatech.edu/squeak/2410, including an updated one for Linux.

cheers,

Robert

On Oct 2, 2006, at 7:28 AM, Ron Teitelbaum wrote:

All,

A while back I started an implementation of TLS 1.2. Rob Withers joined the effort a few weeks ago and is has made terrific progress. He reorganized everything, added a proper protocol stack, and now has the certificates working.

Our version now works with SSL3.0 and TLS 1.1, and DH or RSA using x509v3 Certificates. There are still a number of things that need to be done but we can now use squeak to connect as an SSL server and/or client. See the examples in the workspace that opens when you load the code. You will find our implementation at www.squeaksource.com/Cryptography. There are two Monticello Configuration files available to make loading easier. Load Cryptography-Configuration.mcm, and then Crypt-Xtra-Config.mcm.

We could use some help with testing, code review, documentation or any other help you would like to offer.

There is also support for MS CryptoAPI and CertificateStores for Microsoft in the MSCert package. In the future I will be working on integrating this functionality. I will also be adding support for KomHttp which is mostly completed but needs to be updated to support Rob’s new version.

We hope you find this useful and will keep us updated on your use and issues with our implementation. If you have any questions please let us know. Also again we would like to invite anyone with interest or experience with cryptography to join our Cryptography Team athttp://lists.squeakfoundation.org/mailman/listinfo/cryptography .

Thanks and enjoy,

Ron Teitelbaum
President / Principal Software Engineer
US Medical Record Specialists
www.USMedRec.com
[hidden email]
Squeak Cryptography Team Leader