I would suggest writing a small "proxy"ish deamon that would use the RSA libraries or PGP. Or even just DES with a 64bit key. So it would look like:
(sorry it this gets mangled... using exchange <sigh>)
+-------------+ +-----------------+
| Web Server | | DataBase Server |
| | | |
| CGI Script | | [ DATA ] |
| | | | | |
| en/decrypt | | De/Encrypt |
| +--------[|]---------+ |
| | | | |
+-------------+ | +-----------------+
|
+-- Firewall
so the CGI script/Java/What ever would call some method/deamon that encrypted your requests sent them to the data base server on the other side of the firewall were they were decrypted, the data was gathered and sent back (encrypted) were you
then decrypted them. I won't go into a long desc. of the different encryption types, there are plenty of good pages out there. :)
There may already be packages that do this or would provide a good starting point.
- Mike
----------
From: Jenjen Song[SMTP:jsong @
amer .
net]
Sent: Tuesday, August 27, 1996 5:26 PM
To: firewalls @
GreatCircle .
COM
Subject: Encryption utility between Web server & Databases
Can someone help me to find an encryption utility (CGI script or API) to
encrypt data between the Web server and databases (e.g., SQL, DB2, etc.)?
Thanks in advance.
|
|
