Our site currently allows customers to place orders for our products. We need a function/applet to request that the customers "sign" their orders using an [url removed, login to view] certificate (which is already installed on their local computers). The applet must then validate the signature and ensure that the cert has not been revoked (CRL exists on a third party Web site accessible via LDAP.) One possible solution is for our order function to place all the relevant information in a form, submit the form, and have the form contents processed by the new applet. When the signed order is returned by the applet, our site must be able to reject it if the certificate used to sign it was not valid. If valid, our site must be able to parse the signed order so the ordered items can be communicated to our order processing system. Our site is written using PHP and a MySQL database, and runs under Apache. The solution will most likely require both a client component and a server component. The client component would interact with the Internet Explorer certificate store on the desktop, which is where our customers install and manage their [url removed, login to view] certificates. The client component must be automatically downloaded and installed if it is not already available on their desktop. All components must meet FIPS 140-2 and FIPS 186-2 standards. The source code must be delivered to us, as we expect to make modifications once it is completed.
6 pekerja bebas membida secara purata $1117 untuk pekerjaan ini