Borland VisiBroker® 7.0 - Borland Technical Publications

Chapter6Making Secure Connections (Java)ChapterJAAS and JSSEThis section describes how to make secure connections for Java applications usingVisiSecure. A brief introduction to the Java Secure Socket Extension (JSSE) isfollowed by the step-by-step details to securing an application.VisiSecure uses the Java Authentication and Authorization Service (JAAS) toauthenticate clients and servers to one another in J2EE applications. It provides aframework and standard interface for authentication users and assigning privileges.The VisiBroker Server uses the Java Secure Socket Extension (JSSE) to providemechanisms for supporting SSL.For information on the terms JAAS uses for its services, see “JAAS basic concepts” onpage 25.JSSE Basic ConceptsThe VisiBroker ORB uses Internet Inter-ORB Protocol (IIOP) as its communicationprotocol. The Java Secure Socket Extension (JSSE) enables secure internetcommunications. It is a Java implementation of SSL and TLS protocols which includethe functionality of data encryption, server and client authentication, and messageintegrity. JSSE also serves as a building block that can be simply and directlyimplemented in Java applications.JSSE provides not only an API but also an implementation of that API.Implementations include socket classes, trust managers, key managers, SSLContexts,and a socket factory framework, in addition to public key certificate APIs.JSSE also provides support for the underlying handshake mechanisms that are a partof SSL implementations. This includes cipher suite negotiation, client/serverauthentication, server session-management, and licensed code from RSA DataSecurity, Inc. JSSE uses Java KeyStores as a repository of Certificates and PrivateKeys. Further information on KeyStores can be obtained from Sun Microsystems’ JDKdocumentation. You can use JSSE properties for specifying trusted KeyStores andidentity KeyStores.Chapter 6: Making Secure Connections (Java) 65