{{Quickfixn}} Encrypted messages

[Matt Wood]

I believe you can connect to bloomberg unencrypted if you get a
dedicated T1 to them (which I think they coordinate setting up with an
ISP).

On Thu, Jun 14, 2012 at 10:44 AM, Grant Birchmeier
<gbirchmeier at connamara.com> wrote:
> Ah, ok.  I'm fairly sure we don't support that at present.
>
> (To be honest, I'm not terribly familiar with this feature of FIX myself.  I
> suspect this may be related to field 98 in the logon message.)
>
>
> On Thu, Jun 14, 2012 at 9:41 AM, Oleg Vojvodić <oleg at stinga.hr> wrote:
>>
>> Sorry, I was not clear.
>>
>> Yes I understand that stunnel runs at our location.
>>
>>
>>
>> What I am confused about is that they insist on FIX messages being
>> encrypted. Not the connection itself.
>>
>>
>>
>> Well maybe I misunderstand them. I will have to contact our customer’s
>> network administrator to clear things with Bloomberg.
>>
>>
>>
>> Thanks,
>>
>> Oleg
>>
>>
>>
>> From: quickfixn-bounces at lists.quickfixn.com
>> [mailto:quickfixn-bounces at lists.quickfixn.com] On Behalf Of Grant Birchmeier
>> Sent: Thursday, June 14, 2012 4:31 PM
>>
>>
>> To: Mailing list for QuickFIX/n
>> Subject: Re: {{Quickfixn}} Encrypted messages
>>
>>
>>
>> No, the tunnel would be completely on your end.  Stunnel is your SSH
>> go-between.
>>
>>
>>
>> QF/n app sends plaintext to stunnel, stunnel encrypts and sends to
>> Bloomberg.  Bloomberg sends crypto to your stunnel, and stunnel decrypts and
>> sends to your QF/n app.
>>
>>
>>
>> -Grant
>>
>>
>>
>> On Thu, Jun 14, 2012 at 9:24 AM, Oleg Vojvodić <oleg at stinga.hr> wrote:
>>
>> Thanks Chris.
>>
>>
>>
>> My impression, after contacting them, was that Bloomberg does not use any
>> tunneling.
>>
>> Are you saying that you know of an installation where they use it?
>>
>> If so, that will greatly simplify things for me.
>>
>>
>>
>> Oleg
>>
>>
>>
>> From: quickfixn-bounces at lists.quickfixn.com
>> [mailto:quickfixn-bounces at lists.quickfixn.com] On Behalf Of Chris Busbey
>> Sent: Thursday, June 14, 2012 3:07 PM
>>
>>
>> To: Mailing list for QuickFIX/n
>> Subject: Re: {{Quickfixn}} Encrypted messages
>>
>>
>>
>> Hi Oleg
>>
>> QuickFIX/n does not natively support SSL yet, so you will need to use a
>> proxy in order to connect to them.  stunnel is a common solution.  You can
>> configure stunnel to use Bloomberg's certificate.
>>  See stunnel.org for stunnel documentation.
>>
>>
>>
>> Chris.
>>
>>
>>
>> On Thu, Jun 14, 2012 at 2:06 AM, Oleg Vojvodić <oleg at stinga.hr> wrote:
>>
>> Well, I am not sure what exactly I need. I’m still learning. But I think
>> we do not need a secure connection, just encrypted FIX messages.
>>
>> We are a small company and one of our customers wants a FIX connection
>> with Bloomberg. BTW, do you know if there are any QuickFixN implementations
>> that work with Bloomberg.
>>
>> Bloomberg support is not very helpful. The best what I could learn from
>> them is this statement:
>>
>> "When you send a FIX logon message it should be encrypted using our
>> certificate."
>>
>> Fix specification has very little information about encryption and I could
>> not find the field it mentions (SecureData) in QuickFix source.
>>
>> So I guess, my question is, is it common (or possible) to use SSL to
>> encrypt messages and send them over unencrypted connection. Or did I just
>> completely misunderstand what Bloomberg support is telling me.
>>
>> Thanks,
>> Oleg
>>
>> From: quickfixn-bounces at lists.quickfixn.com
>> [mailto:quickfixn-bounces at lists.quickfixn.com] On Behalf Of Grant Birchmeier
>> Sent: Wednesday, June 13, 2012 11:38 PM
>> To: Mailing list for QuickFIX/n
>> Subject: Re: {{Quickfixn}} Encrypted messages
>>
>>
>> Do you mean SSH?
>>
>>
>> On Wed, Jun 13, 2012 at 11:06 AM, Oleg Vojvodić <oleg at stinga.hr> wrote:
>> Hi,
>>
>> This is my first FIX and QuickFIX project. I've created a server/acceptor
>> and client/initiator and everything seems to work.
>>
>> Now, we received a request for message encryption.  I've looked at the
>> QuickFIX source and it looks like the encryption method is hardcoded to
>> NONE.
>>
>> Does QuickFIX/N supports encrypted messages?
>>
>>
>> Thanks!
>>
>>
>> _______________________________________________
>> Quickfixn mailing list
>> Quickfixn at lists.quickfixn.com
>> http://lists.quickfixn.com/listinfo.cgi/quickfixn-quickfixn.com
>>
>>
>>
>> --
>> Grant Birchmeier
>> Connamara Systems, LLC
>> Made-To-Measure Trading Solutions.
>> Exactly what you need. No more. No less.
>> http://connamara.com
>>
>>
>>
>> _______________________________________________
>> Quickfixn mailing list
>> Quickfixn at lists.quickfixn.com
>> http://lists.quickfixn.com/listinfo.cgi/quickfixn-quickfixn.com
>>
>>
>>
>>
>>
>> --
>> Chris Busbey
>> Connamara Systems, LLC
>>
>>
>> _______________________________________________
>> Quickfixn mailing list
>> Quickfixn at lists.quickfixn.com
>> http://lists.quickfixn.com/listinfo.cgi/quickfixn-quickfixn.com
>>
>>
>>
>>
>> --
>>
>> Grant Birchmeier
>>
>> Connamara Systems, LLC
>>
>> Made-To-Measure Trading Solutions.
>>
>> Exactly what you need. No more. No less.
>>
>> http://connamara.com
>>
>>
>>
>>
>> _______________________________________________
>> Quickfixn mailing list
>> Quickfixn at lists.quickfixn.com
>> http://lists.quickfixn.com/listinfo.cgi/quickfixn-quickfixn.com
>>
>
>
>
> --
> Grant Birchmeier
> Connamara Systems, LLC
> Made-To-Measure Trading Solutions.
> Exactly what you need. No more. No less.
> http://connamara.com
>
>
> _______________________________________________
> Quickfixn mailing list
> Quickfixn at lists.quickfixn.com
> http://lists.quickfixn.com/listinfo.cgi/quickfixn-quickfixn.com
>