.NETGURU
  Search:  
NamespacesDiscussions.NET v1.1Dot Net Guru's BlogIT Certification
UAB and Public Key
Messages   Related Types
This message was discovered on microsoft.public.dotnet.distributed_apps.

Post a new message to this list...

Tom
When using the Updater Application Block: Let's say we used the manifest
utility to generate a public/private key. We hash our files using the
private key (which we keep secure). Obviously, the updater, when rrunning on
the users workstation and when copying/verifying the files, needs the public
key in order to properly decode/verify the file signatures produced by you
and the private key.

Question: What is the best way to get this private key to the user program?
Include it in a file (maybe called MyApp.public.key) that gets shipped with
the application? Include it in the application config file? (which then begs
the quesiton how, since I am using the Configuration Application Block and
am not sure how to store an entire XML string in the CAB and hashtables) Or
is there a better solution?

Any advice appreciated. Thanks in advance.

Tom
Reply to this message...
 
    
Sam Santiago
The public key is normally included as a parameter in the App.config file.
The UpdaterConfiguration element has sub-elements like below that specify
this information:

<!-- **************** THE RSA KEY HASHING VALIDATOR
**************** -->
<validator

type="Microsoft.ApplicationBlocks.ApplicationUpdater.Validators.RSAValidator
"

assembly="Microsoft.ApplicationBlocks.ApplicationUpdater,Version=1.0.0.0,Cul
ture=neutral,PublicKeyToken=null">
<key>
<RSAKeyValue>

<Modulus>w7ds7AvghWWR9fcW4BBrqYJmphAr3x4QUfO9NCZFwHsseQiEXnhDZKiHk2UVvtGHJfB
BTD/7BkKNgwGCGvbiNC22NUCbs+oCmYJUrXDf22Ad/xp/9CEu2XB0/DVj5Md39R0pxM5IQodVEez
G/E/DpVU7OR26GNUW5gTmTtHQjc0=</Modulus>
<Exponent>AQAB</Exponent>
</RSAKeyValue>
</key>
</validator>

The help file has an example, you might be able to open this information
using this link in your browser:
mk:@MSITStore:C:\Program%20Files\Microsoft%20Application%20Blocks%20for%20.N
ET\Updater\Docs\UAB.chm::/D03b-AppBlockConfigurationDoc.htm

I'm not sure how you include this information using the CAB.

Thanks,

Sam

--
_______________________________
Sam Santiago
Click here to reveal e-mail address
http://www.SoftiTechture.com
_______________________________
"Tom" <Click here to reveal e-mail address> wrote in message
news:u4r0%Click here to reveal e-mail address...
[Original message clipped]
Reply to this message...
 
    
Tom
Sam: OK, I did see that, but let me rephrase my question: Say I have a
app.confing file that is managed byt the CAB (Config App Block). Now lets
say that I have generated a public key that I want to use in my application
(for laughs sake, say that, in my application, I encode some data with my
private key but want my users to be able to decode it with the public key I
supply.

Now, if I follow the idea of encoding this in the app.config (using CAB),
how would I place this public key in XML format so that (1) CAB can read it
and give it to my application, and (2) it doesn't get confused with the
normal XML that is in the file?

Sorry, guess this really should have been a CAB question - I was just seeing
how it was done in the UAB.

Tom

"Sam Santiago" <Click here to reveal e-mail address> wrote in message
news:%23qb5%Click here to reveal e-mail address...
[Original message clipped]
Reply to this message...
 
 
System.Security.Cryptography.Xml.RSAKeyValue




ExamGuru IT Solutions - .Net Guru is owned and operated by ExamGuru, Inc., the man behind .Net Guru. If you're in the market for bespoke software or software consultancy, why not get him and his highly trained team to help? - www.examguru.net/ITCertification
Ad


Need Dot Net Interview Questions?
Ask ExamGuru, Inc. for advice and help on Passing .Net Interviews
.Net Projects
Best-of-breed application framework for .NET projects, developed by ExamGuru, Inc. and ExamGuru IT
Free .net Help
Commission ExamGuru, Inc. and his team for your next bespoke software project
FogBUGZ
The only bug tracking system carefully crafted with one goal in mind: helping teams create great software.
Awesome Tools
If you don't know about these, you're missing out... IT Certification Questions
IT Interview Questions
Free Oracle 10g Training
MCSE Boortcamp
Cisco Study Guides
Cheap Study Guides
Exact Questions
Dot Net Interview Questions
Oracle OCP
Cheap Travel
Designer Perfumes - Wholesale Prices
Free Programming Tutorials
 
ExamGuru IT Solutions - .Net Guru is owned and operated by ExamGuru, Inc., the man behind .Net Guru. If you're in the market for bespoke software or software consultancy, why not get him and his highly trained team to help? - www.examguru.net/ITCertification
 Copyright © ExamGuru, Inc. 2001-2006
Contact Us - Terms of Use - Privacy Policy - www.dot-net-guru.com - www.examguru.net - www.oraclesource.net - www.itinterviews.net - www.examguru.net/ITCertification