HMAC-MD5 hash -- what the...

This WebDNA talk-list message is from

2003


It keeps the original formatting.
numero = 48842
interpreted = N
texte = >Not to berate you, but this is ridiculous. > >You don't have to waste anytime! > >Put this in a webcat 4.5.1 page input your values for login and password andBob,Maybe I didn't ask it right. Maybe I asked too many things in one email.I am using WebCat 3. TCPConnect, and therefore AIM, only works on 4.5. With WebCat 3, you have to use SIM, not AIM.If I decide to use 4.5 it will have to be on a whole separate machine, something I'm reluctant to do. You and Velma have been nice enough to provide your code several times already on the lists and through private email, and that's not the problem. Even without your code, yes it's somewhat complicated, but not outside the realm of my expertise. The thing I _don't_ understand is SIM's fingerprint requirement with the HMAC-MD5 generated hash.The fingerprint is NOT the same thing as the x_Tran_Key, which is just something that's generated by the authnet site. I have that already. From Authorize.net docs:The fingerprint is a hash generated using an HMAC-MD5 algorithm on the following fields [6 variables being used in the transaction]. Sample of fingerprint generation: Fingerprint = HMAC-MD5 ([the six fields in a specific manner])Here is the sample PHP code authnet provides:=============== // compute HMAC-MD5// Uses PHP mhash extension. Pl sure to enable the extensionfunction hmac ($key, $data){return (bin2hex (mhash(MHASH_MD5, $data, $key)));}// Calculate and return fingerprint// Use when you need control on the HTML outputfunction CalculateFP ($loginid, $txnkey, $amount, $sequence, $tstamp, $currency = ){return (hmac ($txnkey, $loginid . ^ . $sequence . ^ . $tstamp . ^ . $amount . ^ . $currency));}// Inserts the hidden variables in the HTML FORM required for SIM// Invokes hmac function to calculate fingerprint.function InsertFP ($loginid, $txnkey, $amount, $sequence, $currency = ){$tstamp = time ();$fingerprint = hmac ($txnkey, $loginid . ^ . $sequence . ^ . $tstamp . ^ . $amount . ^ . $currency); ======== After looking at the code, and scouring the WebCat docs, I've come to the conclusion that this is something WebCat cannot do.I hate to make this question even longer, but can I make this happen with, say, AppleScript?Thanks, Terry------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/ Associated Messages, from the most recent to the oldest:

    
  1. Re: HMAC-MD5 hash -- what the... (Sal D'anna 2003)
  2. Re: HMAC-MD5 hash -- what the... (Clint Davis 2003)
  3. Re: HMAC-MD5 hash -- what the... (Terry Wilson 2003)
  4. Re: HMAC-MD5 hash -- what the... (Bob Minor 2003)
  5. HMAC-MD5 hash -- what the... (Terry Wilson 2003)
>Not to berate you, but this is ridiculous. > >You don't have to waste anytime! > >Put this in a webcat 4.5.1 page input your values for login and password andBob,Maybe I didn't ask it right. Maybe I asked too many things in one email.I am using WebCat 3. TCPConnect, and therefore AIM, only works on 4.5. With WebCat 3, you have to use SIM, not AIM.If I decide to use 4.5 it will have to be on a whole separate machine, something I'm reluctant to do. You and Velma have been nice enough to provide your code several times already on the lists and through private email, and that's not the problem. Even without your code, yes it's somewhat complicated, but not outside the realm of my expertise. The thing I _don't_ understand is SIM's fingerprint requirement with the HMAC-MD5 generated hash.The fingerprint is NOT the same thing as the x_Tran_Key, which is just something that's generated by the authnet site. I have that already. From Authorize.net docs:The fingerprint is a hash generated using an HMAC-MD5 algorithm on the following fields [6 variables being used in the transaction]. Sample of fingerprint generation: Fingerprint = HMAC-MD5 ([the six fields in a specific manner])Here is the sample PHP code authnet provides:=============== // compute HMAC-MD5// Uses PHP mhash extension. Pl sure to enable the extensionfunction hmac ($key, $data){return (bin2hex (mhash(MHASH_MD5, $data, $key)));}// Calculate and return fingerprint// Use when you need control on the HTML outputfunction CalculateFP ($loginid, $txnkey, $amount, $sequence, $tstamp, $currency = ){return (hmac ($txnkey, $loginid . ^ . $sequence . ^ . $tstamp . ^ . $amount . ^ . $currency));}// Inserts the hidden variables in the HTML FORM required for SIM// Invokes hmac function to calculate fingerprint.function InsertFP ($loginid, $txnkey, $amount, $sequence, $currency = ){$tstamp = time ();$fingerprint = hmac ($txnkey, $loginid . ^ . $sequence . ^ . $tstamp . ^ . $amount . ^ . $currency); ======== After looking at the code, and scouring the WebCat docs, I've come to the conclusion that this is something WebCat cannot do.I hate to make this question even longer, but can I make this happen with, say, AppleScript?Thanks, Terry------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/ Terry Wilson

DOWNLOAD WEBDNA NOW!

Top Articles:

Talk List

The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...

Related Readings:

Credit card processing - UK (1997) [TCPConnect] Errors (2003) test (2000) [WebDNA] [middle] (2015) Random letter and/or number (2001) Summary layout (1997) RE: Questions To Answer (1997) DreamWeaver Extensions (2000) RE: [WebDNA] Emailer with TLS & Authentication (2020) webcat NT (1998) Online reference (1997) Using WC for Bulk Emailings (1997) RE: Automatic Forwarding using WebCat (1997) rename a file (1997) tricky embedded[showifs/hideifs] (w/ code.. long) (2000) Search logic? (1998) Random (2000) Not seeing cart info on Invoice.tmpl (was PROBLEM) (1997) Its not that weird. (1997) [showif] based on data from [tcpconnect][tcpsend]? (2000)