Implement a secure connection using SSPI in C++ - clarify some terms

Question

I have to write an application that implements a secure connection between client and server using Microsoft API . Google give me a lot of results, and I have a big mess -need someone to make me some order in my head:

Questions:

1. what is SSPI interface? what is Schannel.dll library? what are the diffrents? (I see that I can include "SSPI.h" and "Schannel.h" and "security32.h" - which header file do I really need?)

2. How can I find a real simple sample that explains me how to create secure sockets?

3. Do you have some guidelines that I have to know before I start?

I would appreciate very much if you can help.

Answer 1

SSPI allows an application to use various security models available on a computer or network without changing the interface to the security system.

To paraphrase, it allows you to use a single set of API with different authentication or verification mechanisms, thus hiding complexity.

For your second question, have a look at this: Creating a Secure Connection Using Schannel with related sample code here.