Skip to main content

Implementing Security Driver for Client/Server Architecture.

Author: lalitpct@gmail.com (lalitpct)

In security testing we found that uniface client server application uses only base64 for encoding in network path. I was trying to implement some other form of encoding like DES etc , but could not do it there is no clear documentation on it. As shown below client.asn has usecappl as entry point in c program zsecdrv , which only does base64 encoding. client.asn ------------- .......... [USER_3GL] zsecdrv(usecappl) I read in the documention that "uenc" can be used to implement other encoding for the network path , does any one have idea how it can be done?

Implementing Security Driver for Client/Server Architecture.

Author: lalitpct@gmail.com (lalitpct)

In security testing we found that uniface client server application uses only base64 for encoding in network path. I was trying to implement some other form of encoding like DES etc , but could not do it there is no clear documentation on it. As shown below client.asn has usecappl as entry point in c program zsecdrv , which only does base64 encoding. client.asn ------------- .......... [USER_3GL] zsecdrv(usecappl) I read in the documention that "uenc" can be used to implement other encoding for the network path , does any one have idea how it can be done?

Hi lalit, if you have access to a uniface installation with a samples directory, the following may give you a hint: C:\\Programme\\Compuware\\Uniface 9.6.04\\uniface\\samples\\3GL\\security\\zsecdrv.c plus the other files Greetings from Frankfurt/Germany, Uli


Author: ulrich-merkel (ulrichmerkel@web.de)
Terms & ConditionsAccessibility statement