Re: HMAC-MD5 hash -- what the...
This WebDNA talk-list message is from 2003
It keeps the original formatting.
numero = 48844
interpreted = N
texte = I would think the 4.5 upgrade is worth the time you've already put into trying to program around it. I know I got a pretty good deal on it, check with our friends at SM.Aside from that I don't have an answer for the HMAC-MD5 algorithm.Good Luck in your search.On Sunday, March 23, 2003, at 01:23 AM, Terry Wilson wrote:>> Not to berate you, but this is ridiculous. >> >> You don't have to waste anytime! >> >> Put this in a webcat 4.5.1 page input your values for login and >> password and > > Bob, > > Maybe I didn't ask it right. Maybe I asked too many things in one > email. > > I am using WebCat 3. TCPConnect, and therefore AIM, only works on 4.5. > With WebCat 3, you have to use SIM, not AIM. > > If I decide to use 4.5 it will have to be on a whole separate machine, > something I'm reluctant to do. You and Velma have been nice enough to > provide your code several times already on the lists and through > private email, and that's not the problem. Even without your code, yes > it's somewhat complicated, but not outside the realm of my expertise. > The thing I _don't_ understand is SIM's fingerprint requirement with > the HMAC-MD5 generated hash. > > The fingerprint is NOT the same thing as the x_Tran_Key, which is just > something that's generated by the authnet site. I have that already. > > From Authorize.net docs: > > The fingerprint is a hash generated using an HMAC-MD5 algorithm on > the following fields [6 variables being used in the transaction]. > Sample of fingerprint generation: Fingerprint = HMAC-MD5 ([the six > fields in a specific manner]) > > Here is the sample PHP code authnet provides: > > =============== > // compute HMAC-MD5 > > // Uses PHP mhash extension. Pl sure to enable the extension > > function hmac ($key, $data) > > { > > return (bin2hex (mhash(MHASH_MD5, $data, $key))); > > } > > > > // Calculate and return fingerprint > > // Use when you need control on the HTML output > > function CalculateFP ($loginid, $txnkey, $amount, $sequence, $tstamp, > $currency = ) > > { > > return (hmac ($txnkey, $loginid . ^ . $sequence . ^ . $tstamp . > ^ . $amount . ^ . $currency)); > > } > > > > > > // Inserts the hidden variables in the HTML FORM required for SIM > > // Invokes hmac function to calculate fingerprint. > > > > function InsertFP ($loginid, $txnkey, $amount, $sequence, $currency = > ) > > { > > > > $tstamp = time (); > > > > $fingerprint = hmac ($txnkey, $loginid . ^ . $sequence . ^ . > $tstamp . ^ . $amount . ^ . $currency); > > > ======== > After looking at the code, and scouring the WebCat docs, I've come to > the conclusion that this is something WebCat cannot do. > > I hate to make this question even longer, but can I make this happen > with, say, AppleScript? > > Thanks, > Terry > > ------------------------------------------------------------- > This message is sent to you because you are subscribed to > the mailing list
. > To unsubscribe, E-mail to: > To switch to the DIGEST mode, E-mail to > > Web Archive of this list is at: http://webdna.smithmicro.com/ > Robert Minor ____________________________________ http://www.cybermill.com Development, Hosting, Colocation on a multihomed DS3.When my brother told me he had found Jesus, I thought Yahoo were rich but it turned out to be something different. ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Associated Messages, from the most recent to the oldest:
I would think the 4.5 upgrade is worth the time you've already put into trying to program around it. I know I got a pretty good deal on it, check with our friends at SM.Aside from that I don't have an answer for the HMAC-MD5 algorithm.Good Luck in your search.On Sunday, March 23, 2003, at 01:23 AM, Terry Wilson wrote:>> Not to berate you, but this is ridiculous. >> >> You don't have to waste anytime! >> >> Put this in a webcat 4.5.1 page input your values for login and >> password and > > Bob, > > Maybe I didn't ask it right. Maybe I asked too many things in one > email. > > I am using WebCat 3. TCPConnect, and therefore AIM, only works on 4.5. > With WebCat 3, you have to use SIM, not AIM. > > If I decide to use 4.5 it will have to be on a whole separate machine, > something I'm reluctant to do. You and Velma have been nice enough to > provide your code several times already on the lists and through > private email, and that's not the problem. Even without your code, yes > it's somewhat complicated, but not outside the realm of my expertise. > The thing I _don't_ understand is SIM's fingerprint requirement with > the HMAC-MD5 generated hash. > > The fingerprint is NOT the same thing as the x_Tran_Key, which is just > something that's generated by the authnet site. I have that already. > > From Authorize.net docs: > > The fingerprint is a hash generated using an HMAC-MD5 algorithm on > the following fields [6 variables being used in the transaction]. > Sample of fingerprint generation: Fingerprint = HMAC-MD5 ([the six > fields in a specific manner]) > > Here is the sample PHP code authnet provides: > > =============== > // compute HMAC-MD5 > > // Uses PHP mhash extension. Pl sure to enable the extension > > function hmac ($key, $data) > > { > > return (bin2hex (mhash(MHASH_MD5, $data, $key))); > > } > > > > // Calculate and return fingerprint > > // Use when you need control on the HTML output > > function CalculateFP ($loginid, $txnkey, $amount, $sequence, $tstamp, > $currency = ) > > { > > return (hmac ($txnkey, $loginid . ^ . $sequence . ^ . $tstamp . > ^ . $amount . ^ . $currency)); > > } > > > > > > // Inserts the hidden variables in the HTML FORM required for SIM > > // Invokes hmac function to calculate fingerprint. > > > > function InsertFP ($loginid, $txnkey, $amount, $sequence, $currency = > ) > > { > > > > $tstamp = time (); > > > > $fingerprint = hmac ($txnkey, $loginid . ^ . $sequence . ^ . > $tstamp . ^ . $amount . ^ . $currency); > > > ======== > After looking at the code, and scouring the WebCat docs, I've come to > the conclusion that this is something WebCat cannot do. > > I hate to make this question even longer, but can I make this happen > with, say, AppleScript? > > Thanks, > Terry > > ------------------------------------------------------------- > This message is sent to you because you are subscribed to > the mailing list . > To unsubscribe, E-mail to: > To switch to the DIGEST mode, E-mail to > > Web Archive of this list is at: http://webdna.smithmicro.com/ > Robert Minor ____________________________________ http://www.cybermill.com Development, Hosting, Colocation on a multihomed DS3.When my brother told me he had found Jesus, I thought Yahoo were rich but it turned out to be something different. ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Bob Minor
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
View Source from cache (1997)
Unexpected error (1997)
ShoppingCart removal (2002)
japanese characters (1997)
orderfile cannot be created (2003)
WebCat2b15MacPlugin - showing [math] (1997)
I think WebDNA-Talk died ... :( (1997)
[GROUPS] followup (1997)
[WebDNA] anyone have a good tcpconnect post snippet? (2009)
WebCat2b13MacPlugIn - [showif][search][/showif] (1997)
pc (1997)
[ShowCart] and GET vs. POST (1997)
DON'T use old cart file! (1997)
Range Comparisons (2000)
WebCatalog Technical Reference (1997)
Error: Permision deny. (2005)
Not really WebCat (1997)
Feature Request: ! character bug correct in [showif[variable]=] (2000)
[Sum] function? (1997)
[WebDNA] maybe silly suggestion? [founditems] (2015)