Borland VisiBroker® 7.0 - Borland Technical Publications

Chapter7Making Secure Connections (C++)ChapterThis section describes how to make secure connections for C++ applications usingVisiSecure.Steps to secure clients and serversNoteImportantListed below are the common steps required for developing a secure client or secureserver. For CORBA users the properties are all stored in files that are located throughconfig files. Where ever appropriate the usage models for clients and servers areseparately discussed. All properties can be set in the VisiBroker Management Consoleby right-clicking the node of interest in the Navigation Pane and selecting “EditProperties.”These steps are similar for both Java and C++ applications.All security information, including RoleDBs and LoginModule configurations, can be setthrough the Management Console on the appropriate properties tabs.Step One: Providing an identityClientsServersAn identity can be a username/password/realm triad, or certificates can be used.These can be collected through LoginModules or through APIs.For clients using usernames and passwords, there can be constraints about what theclient knows about the server's realms. Clients may have intimate knowledge of theserver's supported realms or none at all at the time of identity inquiry. Note also thatclients authenticate at the server end.For servers using username and password identities, authentication is performedlocally since the realms are always known.There can be constraints on certificate identities as well, depending on whether theyare stored in a KeyStore or whether they are specified through APIs. The KeyStore inVisiSecure for C++ refers to a directory structure similar to a trustpointRepository,which contains certificate chain.Chapter 7: Making Secure Connections (C++) 71