Re: SSPI and Crypto



comments inline

"Rpj" <Rpj@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:493D8F6E-BAB8-49F2-88CB-EF5701A02BD2@xxxxxxxxxxxxxxxx
Hi,

I have a few queries regarding Crypto and SSL services provided by
windows.
You can find them below. It would be really great if anyone helps me.

Question 1:
In windows, is SSPI the only way to invoke SSL? Are there any low level
SSL
calls (for example equivalent OpenSSL APIs) exposed to the user?
Nope. On Windows, SSPI is the low-level API for SSL operations. There are
other API's for SSL, but as I recall these all internally invoke the SSPI
functions.


Question 2:
Is PEM encoding supported in windows? If yes, what are the interfaces to
encode and decode certificates in the PEM format?

Question 3:

Are all the Crypto and SSL calls thread safe? If not, how to ensure thread
safeness in a multithreaded environment? Are there any locking callbacks
available in windows like OpenSSL?
The Crypto and SSL/SSPI functions are threadsafe, with a few fairly obvious
exceptions. For example, you can't encrypt using the same symmetric key at
the same time from multiple threads, since the encryption operation changes
the state of the key. Many of the Microsoft server applications such as IIS
use these function intensively, and you don't see them serializing their
crypto calls. :-)


Thanks in advance,

Regards,
Rpj


.



Relevant Pages

  • Re: Outlook over Internet Issues
    ... The certificate is provided by GoDaddy SSL ... configuration on Server or on the client. ... On the Windows Small Business Server 2003, ... How to Deploy RPC over HTTP for the First Time in Small Business Server ...
    (microsoft.public.windows.server.sbs)
  • Re: Cant Google or do my banking
    ... Thank you, I followed the link, and my SSL and TLS boxes are already checked. ... tried to access Google. ... I'm on Windows XP Home ...
    (microsoft.public.windowsxp.newusers)
  • Re: windows explorer failure
    ... Which version of Windows are you running? ... Connect to SSL Secured Web Sites by Using Internet Explorer in ... PRB Cannot Visit SSL Sites after You Enable FIPS Compliant Cryptography ... fdzimmy wrote: ...
    (microsoft.public.windowsupdate)
  • Re: Root Certificate
    ... their support about the same time as we did ours, ... most of these SSL issues are reproducable in Windows ... WinIE 6 and get a similar error when the cert only supports "domain.com". ...
    (microsoft.public.mac.office.entourage)
  • Re: SSL clients not working from Windows XP
    ... Another thing i have found out is that the SSL web site ... can only be accessed externally from some Windows XP PC's, ... >> To check your connection settings, click the Tools menu, ... >> and then click Internet Options. ...
    (microsoft.public.inetserver.iis.security)