Microsoft CryptoAPI Book

Question

Hello :)

I need to write my own SSL socket (CSocket ansestor) with server side certificate validation using Microsoft CryptoAPI.

Can you tell me which book will help me (or any other user friendly source of information)?

Answer 1

I recommend SSL and TLS by Eric Rescorla (author of ssldump) to get a really good understanding of SSL. It provides a great introduction to the protocol and the problems it solves, with the option to go as deep as you want into the details.

I would also strongly recommend not writing your own implementation unless you really have to.

Answer 2

This pointer might also help, although it is not a book. CAPI

Answer 3

Library CSslSocket - SSL/TLS enabled CSocket

and how it works Creating a Secure Connection Using Schannel