openSSL PHP delivering to browser

onno182

I posted a question earlier but had no reply. I herein attempt to rephrase it.

I would like to know if this is possible, and if so how.

I do not have access to httpd.conf apache config file for openssl configuration with modssl.

I would like to know if it is possible to encapsulate ssl to browsers in just php. Like you would do with mod_ssl and apache, but this time completely in PHP. For example

PHP encrypts HTML data --------------------encrypted data--------------------->Client

I would like the client's web browser to decrypt the data using a private key. This means that php encrypts using a public key, and the client then decrypts using a private key.

The reason for this is that i have encrypted data using the openSSL php functions in the database (credit card details), which is encrypted with a public key. I want to be able to trasfer this to the client running internet explorer which will use the credit card details to key into a manual credit card payment system. I want to decrypt it at the client end transparently. i.e. having internet explorer do the work of decrypting using the installed PKCS12 certificate.

Any ideas?

Thanks in advance

dalecosp

onno182 wrote:
I do not have access to httpd.conf apache config file for openssl configuration with modssl.

So, that probably means you don't have access to the socket layer, either? 🙁

onno182

sorry for the late reply.

I can not use socket libs since its on a shared server.

I thought that it might be possible to do the following under apache:

| Clear Headers |
|type = encrypted |
-----------------------|
| Encrypted body|
| |
| |
| |
| |
|______________|

I thought that perhaps S/MIME could server as a data layer in encrypting this.

But after looking around on various forums i did not find any answers.

I think I will opt for a solution where i create a SOAP server in PHP, that is encrypted using the public key. Then write a client program in C#.net or something, to load the private key signature (in PKCS12 format) and then recieve the encrypted data in a windows form basis.

If it were a real client of mine, i most likey would have said "it aint possible without using https with a different setup to the regular". But this is a project that will be assessed academically at a University, so im perhaps going into more detail.

Thanks anyway for the suggestion.

Onno