sockets - C++ use SSL to ensure Winsock TCP data security on Windows -

we have c\s application developed on windows. development language c\c++ , use winsock (tcp) library. fundamental function finished. because server side works in internet, must ensure data security. after search on internet, found ssl can help. , there article on codeproject:csslsocket - ssl/tls enabled csocket, shows how use windows schannel implement ssl mfc csocket。

also noticed implement need certificate. our application, don't have certificate.

1. do need apply certificate , how apply? or simple solution implement ssl in our case (we want use windows sspi, not other open source library, openssl).
2. is there other common solution ensure tcp socket data security except ssl? thanks!

you don't strictly need certificate, should use one, @ least on server side, clients can validate not connected incorrect server, mitm attacker. certificates not used on client side, though can be, if server wants validate clients are.

yes, there other options besides ssl/tls. example, winsock secure socket extensions. or can encrypt/decrypt socket data manually using encryption engine/library want. ssl/tls more encryption, whole bi-directional communication protocol, , supported on platforms, should use it.