SSL protocol via custom module?



Hi

I have bought a ‘well known’ shopping cart program which I'm trying
to use with a ‘well known’ payment service provider.

There is unfortunately a problem with a Perl script not functioning
that each company says is the fault of the other. I am trying to
determine which one is correct 

The payment service provider says that in order for the process to
work, the server hosting my shopping cart must have SSL support. This
is apparently as the process uses a POST to send a simple
acknowledgement back to an HTTPS website, for handshaking purposes. The
payment service provider says that as the hosts system is a Linux box
it requires crypt::SSLeay and port 443 open.

However after a week of pushing the cart company they now say that that
SSL support is not required as their own module, an sc.pm file in
stored in the cgi-bin uploaded during the cart upload provides the SSL
support.

Searching for their scripts for lines like ‘new HTTP::Request
"POST","url"; certainly draws a blank.

The shopping cart scripts appear to post the information by calling a
function
::HTTPS_SendAndReceive('www.xxxx.com', 443,
'/xxx.dll/apc/apc', $sPostedData, 'POST', $::TRUE, $ssl_socket);

This seems to use another object in the a .pm file that seems to have
a lot encryption going on ie #
# Construct the MD5 object
#
$Self->{_MASTER_MD5} = instantiateMD5Object();
#
# Construct the SHA1 object
#
$Self->{_MASTER_SHA1} = instantiateSHA1Object();
#
# Some more initialisation
#
$Self->init();



My questions are this:
1) In your opinions is it possible to implement a function to replace
the POST command so that simple data can be sent to an HTTPS site.
2) If the answer is yes, would it require the Perl MD5 module?
3) If yes is it enough to have the module in
/usr/lib/perl5/site_perl/5.6.1/MD5.pm like my host says it is
4) Would all of the above negate the need for a module like
crypt::SSLeay?


Please reply with as much detail as possible as I am the middle man
between the payment provider, shopping cart and host. And they seem to
find it impossible to talk to each other.

Pete




/usr/lib/perl5/site_perl/5.6.1/MD5.pm

.



Relevant Pages

  • Re: SSL protocol via custom module?
    ... The payment service provider says that in order for the process to ... Is your shopping cart program designed and documented to work with this ...
    (comp.lang.perl.modules)
  • Re: Firewall settings to allow HTTPS connection to perl script?
    ... I have a problem with a shopping cart not working with a payment ... the payment service provider on a different HTTPS server. ... HTTPS payment service provider. ...
    (comp.security.firewalls)
  • Firewall settings to allow HTTPS connection to perl script?
    ... I have a problem with a shopping cart not working with a payment ... the payment service provider on a different HTTPS server. ... HTTPS payment service provider. ...
    (comp.security.firewalls)
  • bug report comersus Back Office Lite 6.0 and 6.0.1
    ... Comersus ASP shopping cart is a set of ASP scripts creating an online ... So by running this script one gives oneself full right to all the scripts, ... will add a line to the database: ...
    (Bugtraq)
  • Re: creating catalog/shopping cart
    ... Yes there are plenty of premade scripts - do a "Google" for "shopping cart ... I often use www.hotscripts.com - they have scripts for all sorts of applications ...
    (microsoft.public.frontpage.client)