ISAPI filter v SSL programming issue

From: Alexey Lyashenko (allsoft@ukr.net)
Date: 01/31/03 

From: "Alexey Lyashenko" <allsoft@ukr.net>
Date: Fri, 31 Jan 2003 06:01:12 -0800

Hi everybody

This question is actually for programmers - so if
inapropriate here please suggest related newsgroup.

We are developing ISAPI filter that must query some SSL
info from IIS, namely session cipher-suite (or just cipher)
value. The problem is that we are unable to get that value
using any of the documented APIs - server variables and
ServerSupportFunction.
We have discovered one such way - getting cipher code from
raw data when our filter is placed first in the list of
filter execution order - just before sspifilt.dll that
presumably handles all SLL coding job.
The problem is that placed first our filter will never
catch decoded raw data (while serving SSL requests) which
is also vital for its other functions.
We asked Microsoft on that issue (we also have Apache
webserver that does all that stuff) - but they never
answered.
If anybody has suggestions - we will appreciate them very
much.

Your sincerely
Alexey Lyashenko

Relevant Pages

  • Re: ISAPI filter v SSL programming issue
    ... > We are developing ISAPI filter that must query some SSL ... namely session cipher-suite ... > The problem is that placed first our filter will never ... > catch decoded raw data which ...
    (microsoft.public.inetserver.iis.security)
  • Re: SSL ISAPI Question
    ... > the SSL handshaking, decrypting and encrypting. ... > is the dwFlags value passed by the filter when it loaded last. ... IIS can't decrypt until it ... >> Host Headers don't work with SSL. ...
    (microsoft.public.inetserver.iis)
  • Re: ISAPI filter v SSL programming issue
    ... >> We are developing ISAPI filter that must query some SSL ... >> We have discovered one such way - getting cipher code ... >> The problem is that placed first our filter will never ... >> catch decoded raw data ...
    (microsoft.public.inetserver.iis.security)
  • Re: Unable to load SSL filter in IIS5.0 (sspifilt.dll)
    ... Your SSL inside the Firewall observation does not sounds like it has ... SSL is very straight forward on IIS. ... My recommendation would be to remove sspifilt.dll as a site filter, ...
    (microsoft.public.inetserver.iis)
  • Re: SSL ISAPI Question
    ... is the dwFlags value passed by the filter when it loaded last. ... As for your other question about SSL with host headers, ... > acted on the request to decrypt it yet when IIS tries to read the headers. ...
    (microsoft.public.inetserver.iis)