dyalog’08. conga, ssl and webservices morten kromberg dyalog’08 - elsinore

Dyalog’08

Conga, SSL and WebServices

Morten Kromberg

Dyalog’08 - Elsinore

Conga, SSL & WebServices Dyalog’08 3

Agenda

• Demo / Introduction to:

• Conga – for remote communication• Secure Communication using SSL/TLS• The ”Stand Alone Web Service” (SAWS)

Dyalog’08 4

Conga - Introduction

• Replaces TCPSocket Objects as the PREFERRED tool for communications

• TCPSocket Objects are very general and close to the TCP Protocol

• Most APL applications only use a small subset of the features of TCP

• APL’ers have trouble opening & closing connections and handling errors ”correctly”

• ⎕DQ makes TCPSockets interfere with GUI and multi-tier applications are very hard to code

Conga, SSL & WebServices

Demo: Intro to Conga

Dyalog’08 - Elsinore 5Conga, SSL & WebServices

Dyalog’08 - Elsinore 6Conga, SSL & WebServices

7

Conga - Summary

• Easier to use than TCPSocket objects: More reliable applications

• Supports multi-tier, multi-threaded applications very well

• Supports ”Secure” Communications• Many coding samples: Web Client, Web

Server, RPC Server, FTP Client, Time Of Day Server – including Secure Samples

Conga, SSL & WebServices Dyalog’08

Secure Communication

• From version 12.0.3 (August 2008), Conga supports secure communication via TCP/IP using SSL/TLS:

• Messages can only be read by the intended recipient

• The identity of your ”Peer” can be verified

• Messages cannot be modified en route

8Conga, SSL & WebServices Dyalog’08

9

SSL / TLS

• ”Transport Layer Security” (TLS) replaces old term ”Secure Socket Layer” (SSL)

• Each user (or ”endpoint”) needs:– A public certificate– A private key– And a collection to ”root certificates”

from ”certificate authorities”


http://www.purbeck.gov.uk/images/icon_key.gif

TLS / SSL – How it works?• You send your Public Certificate to

everyone you want to talk to• You keep your Private Key Secret!• Information encoded with one of the

above can be decoded using the other• Allows encrypted communication which

cannot be tampered with or falsified• (If you trust the ”Certificate

Authorities”)10Conga, SSL & WebServices Dyalog’08

http://www.purbeck.gov.uk/images/icon_key.gif

Certificate Authorities

• A User Certificate is ”signed” using the private key of a Certificate Authority (CA)

• Each CA issues a ”Root Certificate” which can be used to validatea User Certificate

• Companies can alsoissue own certs forinternal use


Using TLS from APL ...

• Any sufficiently advanced technology is indistinguishable from magic.

... Arthur C Clarke (1961)

• In other words: It’s easy ... Let’s take a look


Secure Demo

Migrating to Unicode Dyalog’08 - Elsinore 13

14

TLS Summary

• With Conga, Dyalog applications can easily use secure services over the network

• Web Services or Web Servers written in APL can also be secured


Service Oriented APL• Many APL applications are well suited to

being converted into ”services”• This makes them very easy to integrate into

almost any modern application• Can make IT managers and users of other

languages more comfortable about APL• We believe that SOA opens up many new

avenues for APL-based services• (using other peoples services is also nice )


Web Services

• The most widely used mechanism for implementing ”SOA”

• Supported by Microsoft, Unixes, Mainframes – just about any web development tool

• Wikipedia: ”Communication over a network using XML messages that follow the SOAP standard”


WS Protocols: SOAP

• SOAP: ”Simple” Object Access Protocol (not)

• <?xml version="1.0"?><SOAP-ENV:Envelope SOAP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/" xmlns:SOAP-ENC="http://schemas.xmlsoap.org/soap/encoding/" xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <SOAP-ENV:Body> <GetStats xmlns="http://localhost/MyWebService/"> <Input>1 2 3 4 4</Input> </GetStats> </SOAP-ENV:Body></SOAP-ENV:Envelope>


WS Protocols: WSDL

• Web Service Description Language

SOA BAA AGM 2008 18

19

Introducing SAWS

• Stand-Alone WebService Framework• Our goal is to make it VERY easy for APL

users to use AND provide ”SOA” components

• Anyone who is able to write an APL function should be able to:– Call existing Web Services– Publish APL functions as Web Services

• SAWS manages the SOAP and WSDLConga, SSL & WebServices Dyalog’08

20

Calling WebSevices

• More and more Public Web Services are available on the internet

• The number is growing rapidly• You can Google for them...


BAA AGM 2008, London 21

Google your way...


Weather Web Service

Enterprise Applications

Dyalog’07 22

Calling Weather


Providing Web Services

• Any APL Application can be turned into a WebService using SAWS

• You should provide information that SAWS can use to build the WSDL

• SAWS handles the rest


MyWebService


StatCalc fn


GetStats fn

SOA BAA AGM 2008 27

BuildAPI fn


Calling GetStats

BAA AGM 2008 29Conga, SSL & WebServices

GetStats from C#


SAWS TRACE

SOA BAA AGM 2008 32

SAWS Summary

• Provides complete support for ”consuming” and ”providing” Web Services

• ... without requiring installation of infrastructure components like Microsoft IIS, Apache, IBM WebSphere

• SAWS also exposes a web page as documentation


SAWS Web Page


Dyalog’08 35

Summary

• ”Service Oriented Architectures” can help APL integrate with most IT infrastructures

• ”Stand-alone” web servers and services are very easier to test AND deploy

• Now they are easily secured, they may be all you need for many applications

• (In some situations, there will be still be good reasons to integrate with IIS / Apache etc)


Conclusion

• Conga and the SAWS framework provide new, easy-to-use tools for ”web-enabling” Dyalog Applicatons

• Conga is already included with v12.0.3.

• SAWS is available now and will be bundled with v12.1 in 2009

Migrating to Unicode Dyalog’08 - Elsinore 36

dyalog’08. conga, ssl and webservices morten kromberg dyalog’08 - elsinore

Documents

conga summaryeasier

tls summarywith conga

secure services

unicodedyalog08 elsinore

congadyalog08 elsinore

certificate authoritiesconga

multitier applications

web client