javascript Digital signature

Question

0.00/5 (No votes)

See more:

Hi,
I have an HTML input <form> with several input fields.
When the user enters appropriate data in the input fields, and clicks "Submit", the input field data must be digitally signed with one of his digital certificates, installed in his Internet Explorer.
The signing must be done from JavaScript/JScript (if possible), by calling standard functions from the standard MS Windows installation (no additional ActiveX, if possible).
The user certificate with his/her Public key must be included in the signature, everything base64 encoded.

CAPICOM may not be used, as it is deprecated by Microsoft (latest version back in 1997).

And if possible, the best way to verify the digital signature, again by standard Windows DLL(s), called, maybe, from command prompt?

Posted 14-Jul-11 23:03pm

parsoft

Add a Solution

2 solutions

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Shameel · Answer 1 · 2011-07-14T23:52:00

Solution 1

Why can't you use TLS (formerly SSL)?

Posted 14-Jul-11 23:52pm

Shameel

parsoft · Answer 2 · 2011-07-15T00:29:00

I use it. Server certificate, PKI - User authentication certificate, user CRLs etc., but there is a new requirement for explicit digital signature. It bewilders me, but things are complicated and the client wants "explicit digital signature" of the data in the form. :-)
I tried to dissuade him, but in vain. Besides, the communication path between me and the customer is somewhat complex, alas, and it seems there is nothing to be done :-(