Re: [PHP] Encryption/decryption of PHP data

2009-01-01 Thread Per Jessen
Edward Diener wrote:

 Phpster wrote:
 In reading the license I believe it refers to the gnupg itself, not
 the application it may be embedded in. You are completely free to use
 gnupg as you choose including modifying it to meet your needs.
 
 I always thought the GNU public license demanded that any non-free
 modules, which use any software distributed with this license, make
 their source code freely available to end users. If this is either not
 the case or no longer the case, then I will be glad to use GnuPG.

If you are distributing or selling your non-GPL software and you use GPL
software with it, then yes, I believe you are required to make your
source code available to the end-user too.  

Maybe have a quick look at http://gpl-violations.org/ 


/Per Jessen, Zürich


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Encryption/decryption of PHP data

2009-01-01 Thread paragasu
if you want client to send encrypted form to server. then it must be
done using some kind of
client side script (javascript?). i don't think it is reliable.

why not just use https protocol. all data between client and server
will be encrypted.

On 1/1/09, Per Jessen p...@computer.org wrote:
 Edward Diener wrote:

 Phpster wrote:
 In reading the license I believe it refers to the gnupg itself, not
 the application it may be embedded in. You are completely free to use
 gnupg as you choose including modifying it to meet your needs.

 I always thought the GNU public license demanded that any non-free
 modules, which use any software distributed with this license, make
 their source code freely available to end users. If this is either not
 the case or no longer the case, then I will be glad to use GnuPG.

 If you are distributing or selling your non-GPL software and you use GPL
 software with it, then yes, I believe you are required to make your
 source code available to the end-user too.

 Maybe have a quick look at http://gpl-violations.org/


 /Per Jessen, Zürich


 --
 PHP General Mailing List (http://www.php.net/)
 To unsubscribe, visit: http://www.php.net/unsub.php



--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Encryption/decryption of PHP data

2009-01-01 Thread Edward Diener

Per Jessen wrote:

Edward Diener wrote:


Phpster wrote:

In reading the license I believe it refers to the gnupg itself, not
the application it may be embedded in. You are completely free to use
gnupg as you choose including modifying it to meet your needs.

I always thought the GNU public license demanded that any non-free
modules, which use any software distributed with this license, make
their source code freely available to end users. If this is either not
the case or no longer the case, then I will be glad to use GnuPG.


If you are distributing or selling your non-GPL software and you use GPL
software with it, then yes, I believe you are required to make your
source code available to the end-user too.


The project in which I am working is definitely selling the software and 
we have no intention of distributing the source code with it. So that 
leaves GnuPG out.


Is there any other PHP public key-private key implementation which I can 
use which either I will pay for or does not use the Gnu Public license ?


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Encryption/decryption of PHP data

2009-01-01 Thread Edward Diener

paragasu wrote:

if you want client to send encrypted form to server. then it must be
done using some kind of
client side script (javascript?).


I am using C++.


i don't think it is reliable.


Why would it not be reliable if I were using a public-key/private-key 
encryption library which works both with PHP and C++ ?




why not just use https protocol. all data between client and server
will be encrypted.


The data must be encrypted/decrypted going both ways between the client 
and the server. Does using https automatically do that ? If it does that 
would be great.




On 1/1/09, Per Jessen p...@computer.org wrote:

Edward Diener wrote:


Phpster wrote:

In reading the license I believe it refers to the gnupg itself, not
the application it may be embedded in. You are completely free to use
gnupg as you choose including modifying it to meet your needs.

I always thought the GNU public license demanded that any non-free
modules, which use any software distributed with this license, make
their source code freely available to end users. If this is either not
the case or no longer the case, then I will be glad to use GnuPG.

If you are distributing or selling your non-GPL software and you use GPL
software with it, then yes, I believe you are required to make your
source code available to the end-user too.

Maybe have a quick look at http://gpl-violations.org/


/Per Jessen, Zürich


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Encryption/decryption of PHP data

2009-01-01 Thread Per Jessen
Edward Diener wrote:

 why not just use https protocol. all data between client and server
 will be encrypted.
 
 The data must be encrypted/decrypted going both ways between the
 client and the server. Does using https automatically do that ? If it
 does that would be great.
 

Yes, that is exactly what https does. 


/Per Jessen, Zürich


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Encryption/decryption of PHP data

2008-12-31 Thread Phpster
In reading the license I believe it refers to the gnupg itself, not  
the application it may be embedded in. You are completely free to use  
gnupg as you choose including modifying it to meet your needs.


Bastien

Sent from my iPod

On Dec 30, 2008, at 10:50 PM, Edward Diener el...@tropicsoft.com  
wrote:


My client application needs to send data to a PHP page in encrypted  
form
and have the PHP code able to decrypt it. Likewise the PHP code  
needs to
return data to my application encrypted and my client application  
needs

to be able to decrypt it.

My application is written in C++ and naturally the PHP page is written
in PHP.

I do understand that public key-private key cryptography is the way to
go. So far my Internet search has turrned up GnuPG as a means of doing
public key-private key cryptography for PHP with libraries for C++  
also.
However the client application is a commercial application and  
unless I

misunderstand the GNU General Public License the software of the
application which uses GnuPG must allow its source to be freely
available in order to use the library. This is of course something  
which

I am completely unwilling to do for the commercial application.

Is there any other public key-private key cryptography solution on the
PHP side which also has a C++ library which I can use for the client
application, which does not adhere to the GNU General Public License ?
This does not have to be a free product.

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Encryption/decryption of PHP data

2008-12-31 Thread ceo

As I understand it:



You can LINK your commercial binary with GPL binaries, and keep closed source.



You cannot co-mingle the two C source codes together and keep it closed.



I am fairly certain you can find commercial C++ offerings to generate PGP key 
pairs, instead of using the GnuPG OSS alternative...



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Re: [PHP] Encryption/decryption of PHP data

2008-12-31 Thread Edward Diener

Phpster wrote:
In reading the license I believe it refers to the gnupg itself, not the 
application it may be embedded in. You are completely free to use gnupg 
as you choose including modifying it to meet your needs.


I always thought the GNU public license demanded that any non-free 
modules, which use any software distributed with this license, make 
their source code freely available to end users. If this is either not 
the case or no longer the case, then I will be glad to use GnuPG.




Bastien

Sent from my iPod

On Dec 30, 2008, at 10:50 PM, Edward Diener el...@tropicsoft.com wrote:


My client application needs to send data to a PHP page in encrypted form
and have the PHP code able to decrypt it. Likewise the PHP code needs to
return data to my application encrypted and my client application needs
to be able to decrypt it.

My application is written in C++ and naturally the PHP page is written
in PHP.

I do understand that public key-private key cryptography is the way to
go. So far my Internet search has turrned up GnuPG as a means of doing
public key-private key cryptography for PHP with libraries for C++ also.
However the client application is a commercial application and unless I
misunderstand the GNU General Public License the software of the
application which uses GnuPG must allow its source to be freely
available in order to use the library. This is of course something which
I am completely unwilling to do for the commercial application.

Is there any other public key-private key cryptography solution on the
PHP side which also has a C++ library which I can use for the client
application, which does not adhere to the GNU General Public License ?
This does not have to be a free product.

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



[PHP] Encryption/decryption of PHP data

2008-12-30 Thread Edward Diener

My client application needs to send data to a PHP page in encrypted form
and have the PHP code able to decrypt it. Likewise the PHP code needs to
return data to my application encrypted and my client application needs
to be able to decrypt it.

My application is written in C++ and naturally the PHP page is written
in PHP.

I do understand that public key-private key cryptography is the way to
go. So far my Internet search has turrned up GnuPG as a means of doing
public key-private key cryptography for PHP with libraries for C++ also.
However the client application is a commercial application and unless I
misunderstand the GNU General Public License the software of the
application which uses GnuPG must allow its source to be freely
available in order to use the library. This is of course something which
I am completely unwilling to do for the commercial application.

Is there any other public key-private key cryptography solution on the
PHP side which also has a C++ library which I can use for the client
application, which does not adhere to the GNU General Public License ?
This does not have to be a free product.

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php