|
Posted by Steven L Umbach on March 10, 2006, 9:24 pm
Please log in for more thread options
You may also want to post in the Microsoft.public.security.newsgroup. The
standard procedure is that you use a private key for signing and then the
receiver uses your public key to verify the signature but for encryption you
use an entities public key to encrypt the data and then the recipient uses
their private key to decrypt the data. Public keys are generally not secured
and freely distributed [while private keys must be secured] which would mean
in your scenario that it could be possible for someone other then the
intended recipient be able to derypt the data. That is the way that email
smine would work for secure email for instance. --- Steve
> Hi.
> Let me just start by saying that I have very very little experience with
> certificates. That being said, let me explain what I need:
> I'm creating a windows application that connects to our client's web
> service. The web service is set up with WSE 2.0 and requires me to
> encrypt
> and sign the data I send to it. I've been told that I need a server
> certificate installed on the server running my application. The
> certificate
> will be used to encrypt and sign the data that is being sent (using the
> certificate's private key). Then we have to export our certificate with a
> public key to our client so that they can use our certificate's public key
> to decrypt the data. Does this sound right?
>
> Anyway, my question is this: How do I create a request for this
> certificate? I know that I can create a request for a certificate in IIS,
> but it doesn't sound to me like this is the same kind of certificate that
> I
> would be installing if I was hosting a web site with SSL/HTTPS. After
> all,
> I'm not running any web applications on the server, just an application
> that
> needs to encrypt and sign data sent to a web service through HTTP. Am I
> wrong here? Is it the same kind of certificate I have to request? Or am I
> right, and if so, is there another way of creating a request?
>
> Any help is sooooo very much appreciated!!
>
> Thanks,
> Shawn
>
> PS. We are using Windows Server 2003
>
>
|