Borland VisiBroker® 7.0 - Borland Technical Publications

Examining SSL related informationExamining SSL related informationClientsServersBorland VisiBroker Server provides APIs to inspect and set SSL-related information.The SecureContext API is used to specify a Trust Manager, PRNG, inspect the SSLciphersuites, and enable select ciphers.To examine peer certificates, use getPeerSession() to return an SSLSession objectassociated with the target. You can then use standard JSSE APIs to obtain theinformation therein.To examine peer certificates on the server side, you set up the SSL connection withcom.borland.security.Context and use the APIs with com.borland.security.Current toexamine the SSLSession object associated with the thread.Creating Custom PluginsThere are various components of VisiSecure that allow for custom plug-ins. They are:■■■■LoginModulesCallBack HandlersAuthorization service provider via the SPIAssertion Trust via the SPILoginModulesYou can implement your own LoginModules by extendingjavax.security.auth.spi.LoginModules. To use the LoginModule, you need to set it inthe authentication configuration file, just like any other LoginModule. During runtime,the new customized module will need to be loaded by the secured application.The syntax of the authentication configuration is as follows: { ;}CallbackHandlersYou can implement your own callback by extendingjavax.security.auth.callback.CallBackHandler. To use the callback, you need to setthe property vbroker.security.authentication.callbackHandler=in the security property file, just like any other callback handler. During runtime,the new customized module will need to be loaded by the secured application.Authorization Service ProviderAuthorization is the process of making access control decisions on behalf of certainresources based on security attributes or privileges. VisiSecure uses the notion ofPermission in authorization. The class RolePermission is defined to represent a “role” asa permission. Authorization Services Providers in turn provide the implementation onthe homogeneous collection of role permissions that associate privileges with particularresources.Chapter 6: Making Secure Connections (Java) 69