是否可以使用 HTTPS 证书进行许可?
我正在开发一个具有多个客户端的应用程序和一个为客户端运行各种 Web 服务的服务器。为了实施许可,我正在考虑使用 HTTPS 作为使用我们公司颁发的证书的 Web 服务协议。通过影响客户证书的到期日期,我们可以阻止他们在许可期限后使用我们的软件。
这有可能吗?这对你来说有意义吗?
附加信息:我计划为客户端使用 Qt/C++,为 Web 服务使用 Twisted 框架。
I am working on an application with multiple clients and a server running various web-services for the clients. To implement licensing I am thinking about using HTTPS as a protocol for the web-services using certificates that are issued by our company. By influencing the expiration date of a certificate for a client we can prevent them from using our software after their license term.
It this possible and does it make sense to you?
Additional information: I am planning on using Qt/C++ for the clients, and the Twisted framework for the web-services.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
它应该有效。我不太了解 Twisted,但您可以在 Web 服务前面放置一个 Apache 代理,并使用 处理基于证书的身份验证。
至于客户端,请注意此错误。如果 Qt 出现问题,libcurl 应该为您提供一条逃生路线。
您需要仔细考虑 CA 周围的程序,以确保其正常运行:您的销售和计费部门是否愿意向每个客户发布硬性截止日期?证书将在采购订单或发票付款时颁发吗?
It should work. I don't know Twisted well, but you can place an Apache proxy in front of the web service, and have that handle certificate based authentication.
As for the client side, watch this bug. libcurl should provide you with an escape route if Qt gives problems.
You'll need to think through the procedures around the CA, to make sure this works operationally: Are your sales and billing departments comfortable with issuing a hard cut-off date to each customer? Will the certificate be issued on purchase order, or payment of invoice?
我认为这不起作用,客户端可以选择忽略任何证书错误,请查看 System.Net.Security 中的 RemoteCertificateValidationCallback 事件
http://msdn.microsoft.com/en-us/library/system.net.security.remotecertificatevalidationcallback.aspx
I don't think that will work, the client can opt to ignore any certificate errors, check out the RemoteCertificateValidationCallback event in System.Net.Security
http://msdn.microsoft.com/en-us/library/system.net.security.remotecertificatevalidationcallback.aspx