HTTPS authentication

[Cpt. Zeep]

On my current project i have requirement to do HTTPS user authentication.
'Till now i 've been doing authentication using sessions and checking login
and pass against MySql. Can you give me some info on authenticating users
via HTTPS, what are the requirements, can i use my existing scripts etc.
Many Thanx!

--
Relaxen und watch das blinkenlights...

[Michael Vilain]

In article <co**********@ls219.htnet.hr>,
"Cpt. Zeep" <ze**@nonesuch.com> wrote:

On my current project i have requirement to do HTTPS user authentication.
'Till now i 've been doing authentication using sessions and checking login
and pass against MySql. Can you give me some info on authenticating users
via HTTPS, what are the requirements, can i use my existing scripts etc.
Many Thanx!

Don't you have to buy a security certificate for the server you want to
authenticate against? Ain't cheap here in the States and it's a yearly
thing.

--
DeeDee, don't press that button! DeeDee! NO! Dee...

[Gary L. Burnore]

On Fri, 03 Dec 2004 08:35:07 -0800, "Michael Vilain
<vi****@spamcop.net>" wrote:

In article <co**********@ls219.htnet.hr>,
"Cpt. Zeep" <ze**@nonesuch.com> wrote:

On my current project i have requirement to do HTTPS user authentication.
'Till now i 've been doing authentication using sessions and checking login
and pass against MySql. Can you give me some info on authenticating users
via HTTPS, what are the requirements, can i use my existing scripts etc.
Many Thanx!

Don't you have to buy a security certificate for the server you want to
authenticate against? Ain't cheap here in the States and it's a yearly
thing.

No, it's not required. If you don't have a CERT, users will get a
popup first saying they don't have a cert. And no, not all CERTS are
expensive: http://www.freessl.com/starterssl/starterssl.html

1 year: $39US
2 years: $69US etc etc


--
gburnore@databasix dot com
---------------------------------------------------------------------------
How you look depends on where you go.
---------------------------------------------------------------------------
Gary L. Burnore | ÝÛ³ºÝ³Þ³ºÝ³³Ýۺݳ޳ºÝ³Ý³Þ³ºÝ³ÝÝÛ³
| ÝÛ³ºÝ³Þ³ºÝ³³Ýۺݳ޳ºÝ³Ý³Þ³ºÝ³ÝÝÛ³
DataBasix | ÝÛ³ºÝ³Þ³ºÝ³³Ýۺݳ޳ºÝ³Ý³Þ³ºÝ³ÝÝÛ³
| ÝÛ³ 3 4 1 4 2 ݳ޳ 6 9 0 6 9 ÝÛ³
Black Helicopter Repair Svcs Division | Official Proof of Purchase
================================================== =========================
Want one? GET one! http://signup.databasix.com
================================================== =========================

[Alvaro G Vicario]

*** Michael Vilain <vi****@spamcop.net> wrote/escribió (Fri, 03 Dec 2004
08:35:07 -0800):

Don't you have to buy a security certificate for the server you want to
authenticate against? Ain't cheap here in the States and it's a yearly
thing.

openssl (a free tool) allows to generate as many keys and certs as you
need. You only have to pay for a certificate if you want a trusted third
party to certify you are who you claim to be.
--
-- Álvaro G. Vicario - Burgos, Spain
-- Thank you for not e-mailing me your questions
--