4D (4th Dimension) 6.0 serial key or number

Using SSL Protocol

---

version 2003 (Modified)

---

The 4D Web server can communicate in secured mode through the SSL protocol (Secured Socket Layer).

SSL Protocol Definition

The SSL protocol has been designed to secure data exchanges between two applications —mainly between a Web server and a browser. This protocol is widely used and is compatible with most Web browsers.

At the network level, the SSL protocol is inserted between the TCP/IP layer (low level) and the HTTP high level protocol. SSL has been designed mainly to work with HTTP.

Network configuration using SSL:

Note:

The SSL protocol can also be used to secure standard 4D Server client/server connections. For more information, refer to the section in the 4D Server Reference manual.

The SSL protocol is designed to authenticate the sender and receiver and to guarantee the confidentiality and integrity of the exchanged information:

Authentication: The sender and receiver identities are confirmed.

Confidentiality: The sent data is encrypted so that no third person can understand the message.

Integrity: The received data has not been changed, by accident or malevolently.

SSL uses a public key encryption technique based on a pair of asymmetric keys for encryption and decryption: a public key and a private key.

The private key is used to encrypt data. The sender (the web site) does not give it to anyone. The public key is used to decrypt the information and is sent to the receivers (Web browsers) through a certificate. When using SSL with the Internet, the certificate is delivered through a certification authority, such as Verisign®. The Web site pays the Certificate Authority to deliver a certificate which guaranties the server authentication and contains the public key allowing to exchange data in a secured mode.

Note

: For more information on the encryption method and the public and private key issues, refer to the command description.

How to get a certificate?

A 4D Web server working in secured mode means that you need a digital certificate from a certification authority. This certificate contains various information such as the site ID as well as the public key used to communicate with the site. This certificate is transmitted to the Web browsers connecting to this site. Once the certificate has been identified and accepted, the communication is made in secured mode.

Note:

A browser authorizes only the certificates issued by a certification authority referenced in its properties.

The certification authority is chosen according to several criteria. If the certification authority is well known, the certificate will be authorized by many browsers, however the price to pay will be expensive.

To get a SSL certificate:

1.

Generate a private key using the command.

Warning:

For security reasons, the private key should always be kept secret. Actually, it should always remain with the Web server machine. The file must be placed in the Database structure folder.

2.

Use the command to issue a certificate request.

3.

Send the certificate request to the chosen certificate authority.

To fill in a certificate request, you might need to contact the certification authority. The certification authority checks that the information transmitted are correct. The certificate request is generated in a BLOB using the PKCS format. This format allows to copy and paste the keys as text and to send them via E-mail without modifying the key content. For example, you can save the BLOB containing the certificate request in a text document (using the command), then open and copy and paste its content in a mail or a Web form to be sent to the certification authority.

4.

Once you get your certificate, create a text file named "cert.pem" and paste the contents of the certificate into it.

You can receive a certificate in different ways (usually by E-mail or HTML form). The 4D Web Server accepts all platform-related text formats for certificates (Mac OS, PC, Linux...). However, the certificate must be in PKCS format.

5.

Place the "cert.pem" file in the Database structure folder.

The Web server can now work in a secured mode. A certificate is valid between 6 months to a year.

SSL installation and activation within 4D

If you want to use the SSL protocol with the 4D Web server, the following components should be installed on the server, at different locations:

: Secured Layer Interface dedicated to the SSL management.

This file should be placed in the [4D Extensions] folder of the 4D application that publishes the database.

: document containing the private encryption key.

- with 4th Dimension or 4D Server, this file must be located in the database folder.

- with 4D Client, this file must be located in the 4D Client application folder.

: document containing the "certificate".

- with 4th Dimension or 4D Server, this file must be located in the database folder.

- with 4D Client, this file must be located in the 4D Client application folder.

Files required to implement SSL with 4D Web server (4th Dimension and 4D Server):

Files required to implement SSL with 4D Web server (4D Client):

Note: is also necessary to use the encryption commands and .

The installation of these elements makes it possible to use SSL for connections to the 4D Web server. However, in order for SSL connections to be accepted by the 4D Web server, you must "activate" the SSL. This parameter is accessible on the Configuration page of the Web theme in the database Preferences:

By default, the SSL connections are allowed. You can uncheck this option if you do not want to use SSL functionalities with your Web server, or if another Web server allowing secure connections is operating on the same machine.

The TCP port dedicated to SSL data exchange is 443 by default. This port number can be modified in the HTTPS Port Number area in order, for example, to reinforce the security of the Web server (for more information about this pont, refer to the section). The TCP port defined in this page of the Preferences is used for standard mode Web server connections.

Note

: The other Preferences defined for the 4D Web Server management (password, timeout, cache size, etc.) are applied, regardless of whether or not the server is operating in SSL mode.

Browser connection with SSL

For a Web connection to be carried out in secure mode, the URL sent by the browser simply needs to begin with "https" (instead of "http").

In this case, a warning dialog appears on the browser. If the user clicks OK, the Web server sends the certificate to the browser.

The encryption algorithm used for the connection is then decided by the browser and the Web server. The server offers several symetric encryption algorithms (RC2, RC4, DES...). The most powerful common algorithm is used.

Warning:

The level of encryption allowed depends on current laws in the country of use. The level of encryption offered by 4D Web Server depends on the version of the encryption system library used. By default, 4D provides an "Export" version of the library whereby symetric algorithms are limited to 40 bits.

Management of the connection mode

Using SSL with 4D Web server does not require any specific system configuration. However, you should keep in mind that a SSL Web server can also work in a non-secured mode. The connection mode can switch to another mode if the browser requires so (for example, in the browser URL area, the user can replace "HTTPS" by "HTTP"). The developer can forbid or redirect requests made in a non secured mode. The command allows you to get the current connection mode.

See Also

DECRYPT BLOB, ENCRYPT BLOB, GENERATE CERTIFICATE REQUEST, GENERATE ENCRYPTION KEYPAIR, Secured Web connection, Web Server Settings.

---

What Readers Like about Dr. McMullen's Books on the Fourth Dimension
Readers appreciate that these books are dedicated to the geometry (and science) of a fourth dimension of space, without detours into philosophy and religion. (There are philosophical and spiritual books on the subject for readers looking for those topics.) Readers also appreciate the numerous illustrations, including a variety of unique perspectives (like the 4D graphs of curved hypersurfaces in Extra Dimensions Vol. 1, or possible 4D structures from a 4D world). They also appreciate the range and depth of the geometric concepts, without having to navigate through advanced mathematical expressions to enjoy contemplating them.

More books on the fourth dimension by Chris McMullen, Ph.D.
Available in both paperback and Kindle editions.

(1) A Visual Guide to Extra Dimensions, Volume 1. A clear, detailed introduction to the basic geometry of a fourth dimension of space. Packed with black-and-white illustrations.
(2) A Visual Guide to Extra Dimensions, Volume 2. Gets into the physics of a possible fourth dimension of space. Explores what is meant by an extra compact dimension of space.
(3) A Visual Introduction to the Fourth Dimension. Not quite as detailed as the books on Extra Dimensions, but in full color. The use of color helps to visualize the fourth dimension.
(4) Full-Color Illustrations of the Fourth Dimension, Volume 1. Packed with color illustrations of tesseracts and glomes. Each page includes images and a paragraph of text describing the concept.
(5) Full-Color Illustrations of the Fourth Dimension, Volume 2. Packed with color illustrations of tesseracts and glomes. Each page includes images and a paragraph of text describing the concept. Really shows you what it would be like to live in 4D space, from hyperchess to Rubik's tesseract to hyperhomes with hyperfurniture to hyperstairs to hypertelevision to hyperbowling to reading a hyperbook.

Popular science books by Chris McMullen, Ph.D.

• An Introduction to Basic Astronomy Concepts.
• Understand Basic Chemistry Concepts.
• The author has also published university-level introductory physics textbooks.

Math workbooks by Chris McMullen, Ph.D.

• The Improve Your Math Fluency series of math workbooks offers practice with essential math skills in arithmetic, fractions, decimals, percents, algebra, and trigonometry.