abaxaba has asked for the wisdom of the Perl Monks concerning the following question:

I've been using this module for quite a bit of ecommerce work on the unix side of the house,and it works like a champ.

I now have a client running WinNT/ActivePerl with IIS. As a result, they run their secure transactions through the IIS Secure Socket.

Because they really lack any formal development environment, they're reluctant to install openssl, for fear that it will interfere with existing security operations.

Question 1: Will openSSL muck up their continued usage of IIS for secure transactions? Is their some "slamdunk" sort of evidence I can provide?

Question 2: What are my alternatives? Real simple form->authorize SSL tunnelling that works like a champ on Unix.

Thanks in advance.

ÅßÅ×ÅßÅ
"It is a very mixed blessing to be brought back from the dead." -- Kurt Vonnegut

Replies are listed 'Best First'.
Re: Business::OnlinePayment + IIS
by tcf22 (Priest) on Aug 26, 2003 at 17:34 UTC
    I've used OpenSSL on Win32 with IIS, to use Crypt::SSLeay to contact payment processors, and it didn't interfere with SSL traffic through IIS. So from my experience, this shouldn't be a problem.

    As for "slamdunk" evidence, I really don't have any except for "It worked for me".
Re: Business::OnlinePayment + IIS
by perrin (Chancellor) on Aug 27, 2003 at 13:36 UTC
    That's crazy voodoo talk. OpenSSL has absolutely nothing to do with the SSL libraries that Microsoft provides. It is not specific to web servers at all, but rather a general purpose SSL implementation that will have zero interaction with IIS.