NODE fca0267e[CODE] Signing Web Pages
"Ed Carp, KHIJOL SysAdmin" <erc@dal1820.computek.net>Thu, 8 Feb 1996 18:44:40 +0800
Here's a quick script I hacked together in the last few minutes to sign
web pages. Very simple-minded, it nonetheless does the job. If you want
to see how it looks in action, visit http://dal1820.computek.net
#! /bin/sh
#
# signit - use PGP to sign a web page
# Written 02/08/96 by Ed Carp (ecarp@netcom.com)
#
# This could conceptually be used to sign (and optionally verify)
# shell scripts, etc. The possibilities are endless...
#
#
# Set up some variables...
#
# Change this if you're so inclined...
PGPHELP="http:\/\/www.yahoo.com\/Computers\/Security_and_Encryption"
# Look for a line that starts like this...
LOOKFOR="This web page has been signed with"
ADDLINE="$LOOKFOR <A HREF=$PGPHELP>PGP<\/A>. To see the digital signature, click <A HREF=$1.asc.html>here<\/A>."
#
# First, we need to make sure that the page hasn't already been signed...
#
F=`grep "^$LOOKFOR" $1|wc -l`
F="`echo $F`"
# If it hasn't already been signed, add signature line
if [ "$F" = "0" ]; then
echo Adding PGP signature HTML to document
echo "s/<\/BODY>/$ADDLINE<\/BODY>/g" > $1.temp.$$
echo "s/<\/body>/$ADDLINE<\/body>/g" >> $1.temp.$$
sed -f $1.temp.$$ < $1 > $1.$$
rm -f $1.temp.$$
mv $1.$$ $1
fi
pgp -asb $1
# Add rudimentary HTML
echo "<HTML><HEAD><TITLE>PGP Digital Signature of $1</TITLE></HEAD>" > $1.$$
echo "<BODY><I>PGP Digital Signature generated `date`</I><HR><PRE>" >> $1.$$
cat $1.asc >> $1.$$
echo "</PRE></BODY></HTML>" >> $1.$$
mv $1.$$ $1.asc.html
rm $1.asc
echo Done.
--
Ed Carp, N7EKG Ed.Carp@linux.org, ecarp@netcom.com
214/993-3935 voicemail/digital pager
800/558-3408 SkyPager
Finger ecarp@netcom.com for PGP 2.5 public key an88744@anon.penet.fi
"Past the wounds of childhood, past the fallen dreams and the broken families,
through the hurt and the loss and the agony only the night ever hears, is a
waiting soul. Patient, permanent, abundant, it opens its infinite heart and
asks only one thing of you ... 'Remember who it is you really are.'"
-- "Losing Your Mind", Karen Alexander and Rick Boyes
The mark of a good conspiracy theory is its untestability.
-- Andrew Spring
----------------------------------------------------------------------
According to the Communications Decency Act, these are the words you may
no longer use in your Internet correspondence: Shit, piss, fuck, cunt,
cock-sucker, mother-fucker and tits. The use of shit, piss, fuck, cunt,
cock-sucker, mother-fucker and tits, may now earn you a substantial fine
as well as possible jail time, should President Clinton sign this Bill
into law. Please refrain from using shit, piss, fuck, cunt, cock-sucker,
mother-fucker and tits, to protect your children as well as others, from
their evil influence, thus keeping America "ideologically pure".
NODE a04ac20eRe: [CODE] Signing Web Pages
Mike Fletcher <fletch@ain.bls.com>Fri, 9 Feb 1996 00:44:30 +0800
[ Ed's PGP signer deleted ]
Neat script. I had an idea for verification of pages using a
Java applet. You have in the signed page an applet tag that would
reference the authenticator applet (which because of security restrictions
would need to be loaded from local disk, but . . .). The applet would
get the URL of the current page and save it to disk. It would also grab
the signature (either by just appending ".asc", or with something processed
by Ed's script by searching for the key phrase). The applet then runs
PGP and verifies the page and pops up a window with the results. It would
then tell the browser to re-read the verified document from the local
filesystem.
There are a couple of problems (i.e. you'ld need to provide an
applet from the server that would put up a pointer to where to get your
copy of the real authenticator applet and how to install it), but does
anyone see any other problems with it (Aside from it being a mega
kludge :)? And does anyone know when PGP 3.0 is out so that a Java
wrapper could be put around the library to make it even easier? :)
What do you think, sirs?
---
Fletch __`'/|
fletch@ain.bls.com "Lisa, in this house we obey the \ o.O' ______
404 713-0414(w) Laws of Thermodynamics!" H. Simpson =(___)= -| Ack. |
404 315-7264(h) PGP Print: 8D8736A8FC59B2E6 8E675B341E378E43 U ------
NODE 4098a7edRe: [CODE] Signing Web Pages
"Ed Carp, KHIJOL SysAdmin" <erc@dal1820.computek.net>Thu, 8 Feb 1996 18:55:32 +0800
Oops - minor correction. Note that the document to be signed must be
specified relative to your HTTPD public directory - or change ADDLINE
appropriately. Caveat emptor or whatever...
#! /bin/sh
#
# signit - use PGP to sign a web page
#
# usage: signit document
#
# Note that to generate correct links for the PGP signature page, it is
# necessary to specify the document relative to your HTTP public directory
# (/etc/httpd/public_html or whatever), or change ADDLINE appropriately...
#
# Written 02/08/96 by Ed Carp (ecarp@netcom.com)
#
# This could conceptually be used to sign (and optionally verify)
# shell scripts, etc. The possibilities are endless...
#
#
# Set up some variables...
#
# Change this if you're so inclined...
PGPHELP="http:\/\/www.yahoo.com\/Computers\/Security_and_Encryption"
# Look for this text in the document
LOOKFOR="This web page has been signed with"
ADDLINE="$LOOKFOR <A HREF=$PGPHELP>PGP<\/A>. To see the digital signature, click <A HREF=$1.asc.html>here<\/A>."
#
# First, we need to make sure that the page hasn't already been signed...
#
F=`grep "^$LOOKFOR" $1|wc -l`
F="`echo $F`"
# If it hasn't already been signed, add signature line
if [ "$F" = "0" ]; then
echo Adding PGP signature HTML to document
echo "s/<\/BODY>/$ADDLINE<\/BODY>/g" > $1.temp.$$
echo "s/<\/body>/$ADDLINE<\/body>/g" >> $1.temp.$$
sed -f $1.temp.$$ < $1 > $1.$$
rm -f $1.temp.$$
mv $1.$$ $1
fi
pgp -asb $1
# Add rudimentary HTML
echo "<HTML><HEAD><TITLE>PGP Digital Signature of $1</TITLE></HEAD>" > $1.$$
echo "<BODY><I>PGP Digital Signature generated `date`</I><HR><PRE>" >> $1.$$
cat $1.asc >> $1.$$
echo "</PRE></BODY></HTML>" >> $1.$$
mv $1.$$ $1.asc.html
rm $1.asc
echo Done.
--
Ed Carp, N7EKG Ed.Carp@linux.org, ecarp@netcom.com
214/993-3935 voicemail/digital pager
800/558-3408 SkyPager
Finger ecarp@netcom.com for PGP 2.5 public key an88744@anon.penet.fi
"Past the wounds of childhood, past the fallen dreams and the broken families,
through the hurt and the loss and the agony only the night ever hears, is a
waiting soul. Patient, permanent, abundant, it opens its infinite heart and
asks only one thing of you ... 'Remember who it is you really are.'"
-- "Losing Your Mind", Karen Alexander and Rick Boyes
The mark of a good conspiracy theory is its untestability.
-- Andrew Spring
----------------------------------------------------------------------
According to the Communications Decency Act, these are the words you may
no longer use in your Internet correspondence: Shit, piss, fuck, cunt,
cock-sucker, mother-fucker and tits. The use of shit, piss, fuck, cunt,
cock-sucker, mother-fucker and tits, may now earn you a substantial fine
as well as possible jail time, should President Clinton sign this Bill
into law. Please refrain from using shit, piss, fuck, cunt, cock-sucker,
mother-fucker and tits, to protect your children as well as others, from
their evil influence, thus keeping America "ideologically pure".