Secure TCP/IP Programming with SSL: Developer's Guide [Paperback]

Edward Zaremba (Author)

Book Description

Publication Date: March 12, 2007

Getting SSL to actually work for most has been a very difficult assignment and most opt for an expensive commercial package, and end up having the same difficult challenge regardless only now you have a vendor and purchase orders to deal with. This book is for the developer who needs to integrate SSL communication with a new application or an existing application without the massive undertaking or expense and for those that want to get up and running and worry about the details later. To that end the OpenSSL project is perfect for that use-of course it wasn't easy getting an open source project to actually work, but this book cuts right through the garbage and gives you the code you can use today without hassel. So, if you don't know what RSA is and have no idea about how an existing TCP/IP connection can have SSL on top of it, then don't worry, this book is for you and though the author doesn't support it, you can also use the understanding of SSL to attack or even counter-attack encryption. It starts with downloading the OpenSSL library, walks you through setting up your own certificates including Authenticode and then shows you the code in both C++ and Delphi. This book, though it walks you through the use of SSL, is NOT a beginners guide and is not for the feint of heart-this book demonstrates one of the more difficult aspects to software engineering and indeed mathematics so enjoy what took nearly 4 years to complete and most of all have some fun.

Editorial Reviews

About the Author

I have been a computer programmer ever since I got my hands on a TI-99 4/A back in 1983 at the young of 12. I don't think I left my room until I got a car and realized that girls for the most part were better than my computer! I began my career teaching computer science at a local community college which included C++, Database design, and COBOL classes. I then was the Solutions Architect for the state of Florida and a faculty member at Florida State University where I designed and implemented a system that was eventually patented in 2004. From these experiences I then worked for Hewlett-Packard (which bought my employer Compaq) and worked with some of the brightest in the industry including Terence Thomas, Kevin French, Bennie Slone, and Byron Finley from HP and countless others across the country. I then had the opportunity to start my own consulting and technology firm and for the last 8 years have been enjoying traveling the country working on some of the most challenging and rewarding projects including facial recognition, digital licensing, mainframe connectivity, financial algorithms and many more. To this day I remain a faithful student to the art of software design and methodology and am always learning. Most ask why I love software and project management so much, and the answer is simple: "In the beginning God created.." and I think with software I get to "create" each and every day something new and something the world has never seen.

Product Details

• Paperback: 192 pages
• Publisher: AuthorHouse (March 12, 2007)
• Language: English
• ISBN-10: 1425992218
• ISBN-13: 978-1425992217
• Product Dimensions: 9 x 6 x 0.4 inches
• Shipping Weight: 12 ounces (View shipping rates and policies)
• Average Customer Review: 2.0 out of 5 stars  See all reviews (4 customer reviews)
• Amazon Best Sellers Rank: #1,629,865 in Books (See Top 100 in Books)

Customer Reviews

Most Helpful Customer Reviews

13 of 13 people found the following review helpful:

1.0 out of 5 stars How to install OpenSSL on windows, July 20, 2007

By 

Daniel B. (Colorado Springs, CO United States) - See all my reviews

This review is from: Secure TCP/IP Programming with SSL: Developer's Guide (Paperback)

I wish the first review had been posted before I ordered this book. I too was excited about a book on programming SSL with a 2007 publication date. However, most of this book leads the reader through Windows (pre XP) screenshots describing how to install and setup OpenSSL 0.9.6a (a version that was current Apr-Jul 2001).

The book claims that it "is NOT a beginners guide and is not for the feint of heart". On the contrary, that is EXACTLY who it is for.

Also, you find out by reading the summary on page 185 (the end of the book, after the pages of uncommented example code) that the book is really for use with Trizen Systems' Visual OpenSSL product (the author happens to be the CEO).

Overall, I found the book very disappointing, and the advertising very misleading.

12 of 12 people found the following review helpful:

1.0 out of 5 stars Would not recommend, July 14, 2007

By 

K. Ahmad - See all my reviews
(REAL NAME)   

This review is from: Secure TCP/IP Programming with SSL: Developer's Guide (Paperback)

I was excited to order the book with overnight shipping as I am currently working on TCP/IP Programming with SSL but kind a disappointed. Hardly you will find any programming topic in the book. Most of the book talks about how to setup your environment with OpenSSL and blah blah.... For example, pages 7 through 12 (6 pages) just tell you how to download openssl, extract it using Winzip with winzip screen-shots and advice to purchase Winzip for 40 bucks, etc. etc. etc. I believe 1 para should be enough to let know how to download and install OpenSSL because the target audience are programmers who do not need 6 pages screen-shot to learn how to unzip. Similary, other chapters and pages are expaned with big big imgaes and leaving half of the pages blank to make 185 pages with useless information which you can get it on the internet by simple google query. Another example, page 56 just shows you a screenshot on author's desktop file browser telling that about a file root.pem location. Almost every other page is like this.

Last 40 pages are listing only sample code for Delphi with no option to download anywhere. Most of the code is on the interent any way. The other pages talks about OpenSLL commands etc. which you can find on OpenSSL website for free under documentation.

Page 35-50 only explains how to install the certificate with screen-shots by double clikcing the .cer file and clicking on the button "Install Certificate" and walk you through. Now being a programmer, simple one para is enough to tell us the way to install the certificate if author thinks it is necessary (most of us already should how to view and install SSL certificate from browser).

I think the book name is misleading, it should something like "learn how to view and install SSL certificate from Browser" or "how to install OpenSSL". It seems like Author is expecting his audience to be non-IT person who needs help setting up his/her computer for OpenSSL. It does not tell you how to use OpenSSL for Java or .Net. Nothing about OpenSSL integration in Java at all or Java KeyStore to save SSL certificates using OpenSSL. The little samples which you find are for Delphi.

Making story short,[...] not a big deal but after spending this much if I had found at least one page usefull, I would have been happy.

If I was the author, I would have put this material for free as a simple how-to but would never even copnsider it publishing.

Very disappointed.....

1.0 out of 5 stars Not recommended, September 21, 2011

By 

L. Wu - See all my reviews
(REAL NAME)   

Amazon Verified Purchase

This review is from: Secure TCP/IP Programming with SSL: Developer's Guide (Paperback)

This book is not really talking about secure TCP/IP programming. It is more like a very long advertisement of some product.

Theory of secure TCP/IP programming is talked about in the book but is definitely not the focus.

I do not recommend this book.