PHP XML SSL iis6 Help

[sbakker123]

I have an php script on an IIS server. It accepts a post, from a site. It then opens a socket on a xxxx port, and passes info thru that port and waits for a response. After it get's a response, it builds an xml string that it sends back to the original poster.

This all works according to plan, when testing without SSL. When we add SSl a couple of wierd things happen.

The XML returned looks like this
If field x is null the tag comes back <tag/>

<queryall>
<field1>data1</field1>
<field2/>
<field3>data3</field3>
</queryall>

Start Code
--------
echo "<?xml version=\"1.0\" encoding=\"ISO-8859-1\" " ;
echo "<Queryall>" ;

WriteXMLOutput("transeq", $retVal, 0,10);
WriteXMLOutput("returncode", $retVal, 10,4);
-------


function WriteXMLOutput($tag, $retval, $start, $len) {
echo "<" .$tag .">" ;
echo substr($retval, $start, $len);

echo "</" .$tag .">" ;


}

-----

end code


thanks

steve

 

[sleipnir214]

Where are you adding SSL? Between your user and your script or between your script and the other site?

What couple of weird things?



Want the best answers? Ask the best questions! TANSTAAFL!

 

[sbakker123]

The SSL is on the IIS server. The script

Customer Site -> IIS(ssl) -> php Script -> internal Site
Port 443 Port 3000

The wierdness happens when it looks like SSL strips off the opening tag when there is no data.


Thanks
Steve

 

[sleipnir214]

At what point in your above diagram does the error get into the data?



Want the best answers? Ask the best questions! TANSTAAFL!

 

[sbakker123]

The error happens when the php sends back a response.

The php (by looking at all the logs) send back
<tag></tag>

but the browser gets back
<tag/>.

This only happens if there is no data in the tag. If there is data, all is cool.

 

[sleipnir214]

The last time I checked the XML specs, "<tag></tag>" and "<tag/>" are functionally equivalent. Without a lot of details about exactly how the data flows through your program flow, it's difficult to say further.



Want the best answers? Ask the best questions! TANSTAAFL!

 

[sbakker123]

Well,

The client system gets a userNumber, and a charge card#. The client's app posts to my site via a post

http://192.168.1.108/cpdiQueryAll.php/?username=steve&password=xxxx&keycode=TEST&cardno=88811112

The php code opens port 3000 and sends the data to a legacy system. The legacy system responses with a 512 string ofraw data. The php code takes the data and builds a xml string that it sends back.

When this is used on a test site with no certifcat6es, it works, when the same code, pointing to the same legacy systems is used with SSL built onto it, it does not work.

 

[sleipnir214]

Frankly, I don't see how SSL is the cuplrit. There are only one or two differences between the PHP run environment of a script contacted through HTTP and a script contacted through HTTPS.

Again, without knowing what's going on in your script, it's hard to comment.



Want the best answers? Ask the best questions! TANSTAAFL!

 

[sbakker123]

Problem has been resolved. It was an issue on the client side.

I have to agree tho, SSL just scrambles and descrambles the data going through. The insisted it was our side, but alas.