Search code examples
c++securitysspiwinsocketsschannel

Implement a secure connection using SSPI in C++ - clarify some terms

I have to write an application that implements a secure connection between client and server using Microsoft API . Google give me a lot of results, and I have a big mess -need someone to make me some order in my head:

Questions:

  1. what is SSPI interface? what is Schannel.dll library? what are the diffrents? (I see that I can include "SSPI.h" and "Schannel.h" and "security32.h" - which header file do I really need?)

  2. How can I find a real simple sample that explains me how to create secure sockets?

  3. Do you have some guidelines that I have to know before I start?

I would appreciate very much if you can help.

Solution

  • SSPI allows an application to use various security models available on a computer or network without changing the interface to the security system.

    To paraphrase, it allows you to use a single set of API with different authentication or verification mechanisms, thus hiding complexity.

    For your second question, have a look at this: Creating a Secure Connection Using Schannel with related sample code here.