Implementing Security Driver for Client/Server Architecture.

Author: lalitpct@gmail.com (lalitpct)

In security testing we found that uniface client server application uses only base64 for encoding in network path. I was trying to implement some other form of encoding like DES etc , but could not do it there is no clear documentation on it. As shown below client.asn has usecappl as entry point in c program zsecdrv , which only does base64 encoding. client.asn ------------- .......... [USER_3GL] zsecdrv(usecappl) I read in the documention that "uenc" can be used to implement other encoding for the network path , does any one have idea how it can be done?

1 Comment

  1. Hi lalit, if you have access to a uniface installation with a samples directory, the following may give you a hint: C:\Programme\Compuware\Uniface 9.6.04\uniface\samples\3GL\security\zsecdrv.c plus the other files Greetings from Frankfurt/Germany, Uli


    Author: ulrich-merkel (ulrichmerkel@web.de)