Verisign integration is possible…
I just wrote the following email to someone…
Dear Jim,
As I indicated this morning, I just finished an integration of Verisign’s Payflow Pro into my domino website www.NewsletterStrategies.com. Needless to say, it was a challenge.
Here’s a short overview of what I did:
-
I downloaded a copy of the Native Java code from manager.verisign.com.
-
I compiled and tested the javatest code using the native javac compiler
-
I had Prominic (my ISP… to be recommended…) put the jcert.jar, jnet.jar and jsse.jar files onto the server.
-
Then we added the appropriate lines to the security file ON THE SERVER…
-
Then we took the PFProJava.Java file and integrated it into a Java agent, importing Verisign.Jar into the agent too.
-
We had discussions about SSL and the security ramifications within Notes, etc, then decided that we were going to put all credit card information into dbProfiles, because they are not accessible via the web, except programmatically.
-
We also decided that requiring SSL on all databases was going to be the modus operandi.
-
A higher level of encryption of data was not necessary, because Notes uses the 1,024 bit RSA dual challenge asynchronous/synchronous public/private key encryption. Going to SSL for the web actually “downshifts” from native (default) Notes security schema. This truly impressed the people at Verisign.
-
I also had to put the .0 key from verisign on the server. I could have possibly put it into a database, however, we decided to put it into the Java subdirectory on the server.
The Transaction processing that I was able to do after running the Verisign transaction had to do with creating a person doc in the Directory, adding the new user to specific groups, creating a mail-in database document, creating two customer specific databases, dealing with ACLs and security issues in these new databases, then creating transaction document to reflect the current and future effects on our cash flow, balance sheets, and income statements. Basically, I rewrote DomReg.nsf in Java.
I do fee somewhat uncomfortable revealing all of the code, however, if XXXXXXX is interested in specifics, I’d be glad to send a few relevant snippets.
Marcus Laubli
P.S. Having been there, I am willing to do a Verisign PayFlow Pro integration into Domino for aynone who would like it done. I was very impressed with the Verisign people and website support, and would recommend them to anyone.