91 lines
7.2 KiB
HTML
91 lines
7.2 KiB
HTML
|
<?xml version="1.0" encoding="UTF-8"?>
|
||
|
|
<!DOCTYPE html
|
||
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
||
|
|
<html lang="en-us" xml:lang="en-us">
|
||
|
|
<head>
|
||
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
||
|
|
<meta name="security" content="public" />
|
||
|
|
<meta name="Robots" content="index,follow" />
|
||
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
||
|
|
<meta name="DC.Type" content="concept" />
|
||
|
|
<meta name="DC.Title" content="Java Secure Socket Extension" />
|
||
|
|
<meta name="abstract" content="The Java Secure Socket Extension (JSSE) is the Java implementation of the Secure Sockets Layer (SSL) protocol. JSSE uses SSL and the Transport Layer Security (TLS) protocol to enable clients and servers to conduct secure communications over TCP/IP." />
|
||
|
|
<meta name="description" content="The Java Secure Socket Extension (JSSE) is the Java implementation of the Secure Sockets Layer (SSL) protocol. JSSE uses SSL and the Transport Layer Security (TLS) protocol to enable clients and servers to conduct secure communications over TCP/IP." />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="security.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="securmod.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzahajce.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="jaasbase.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzahajgssover.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="usessl.htm" />
|
||
|
|
<meta name="DC.Relation" scheme="URI" content="rzahajsseuse.htm" />
|
||
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2006" />
|
||
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2006" />
|
||
|
|
<meta name="DC.Format" content="XHTML" />
|
||
|
|
<meta name="DC.Identifier" content="rzahajssemain" />
|
||
|
|
<meta name="DC.Language" content="en-us" />
|
||
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
||
|
|
<!-- US Government Users Restricted Rights -->
|
||
|
|
<!-- Use, duplication or disclosure restricted by -->
|
||
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
||
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
||
|
|
<title>Java Secure Socket Extension</title>
|
||
|
|
</head>
|
||
|
|
<body id="rzahajssemain"><a name="rzahajssemain"><!-- --></a>
|
||
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
||
|
|
<h1 class="topictitle1">Java Secure Socket Extension</h1>
|
||
|
|
<div><p>The Java™ Secure Socket Extension (JSSE) is the Java implementation
|
||
|
|
of the Secure Sockets Layer (SSL) protocol. JSSE uses SSL and the Transport
|
||
|
|
Layer Security (TLS) protocol to enable clients and servers to conduct secure
|
||
|
|
communications over TCP/IP.</p>
|
||
|
|
<p>JSSE provides the following functions:</p>
|
||
|
|
<ul><li>Encrypts data</li>
|
||
|
|
<li>Authenticates remote user IDs</li>
|
||
|
|
<li>Authenticates remote system names</li>
|
||
|
|
<li>Performs client/server authentication</li>
|
||
|
|
<li>Ensures message integrity</li>
|
||
|
|
</ul>
|
||
|
|
<p>Integrated into the Java 2 Software Development Kit, Standard
|
||
|
|
Edition (J2SDK), version 1.4 and subsequent releases, JSSE provides more functionality
|
||
|
|
than does SSL alone.</p>
|
||
|
|
<div class="note"><span class="notetitle">Note:</span> This information concerns the version of JSSE that now comes bundled
|
||
|
|
in the J2SDK, version 1.4 and subsequent releases. For previous versions of
|
||
|
|
JSSE, see <a href="http://java.sun.com/products/jsse" target="_blank">Java Secure
|
||
|
|
Socket Extension</a> on the Sun Java Web site.</div>
|
||
|
|
<blockquote> </blockquote>
|
||
|
|
</div>
|
||
|
|
<div>
|
||
|
|
<ul class="ullinks">
|
||
|
|
<li class="ulchildlink"><strong><a href="usessl.htm">Using SSL (JSSE, version 1.0.8)</a></strong><br />
|
||
|
|
SSL provides a means of authenticating a server and a client to
|
||
|
|
provide privacy and data integrity. All SSL communications begin with a "handshake"
|
||
|
|
between the server and the client. During the handshake, SSL negotiates the
|
||
|
|
cipher suite that the client and server use to communicate with each other.
|
||
|
|
This cipher suite is a combination of the various security features available
|
||
|
|
through SSL. You can only use SSL with J2SDK, version 1.3. You can use the Java Secure
|
||
|
|
Socket Extension (JSSE, version 1.0.8), which is the Java implementation
|
||
|
|
of secure sockets layer (SSL), to make your Java application more secure.</li>
|
||
|
|
<li class="ulchildlink"><strong><a href="rzahajsseuse.htm">Using Java Secure Socket Extension</a></strong><br />
|
||
|
|
JSSE is like a framework that abstracts the underlying mechanisms
|
||
|
|
of both SSL and TLS. By abstracting the complexity and peculiarities of the
|
||
|
|
underlying protocols, JSSE enables programmers to use secure, encrypted communications
|
||
|
|
while at the same time minimizing possible security vulnerabilities. This
|
||
|
|
information applies only to using JSSE on iSeries™ servers that run J2SDK, version
|
||
|
|
1.4 and subsequent releases. Java Secure Socket Extension (JSSE) uses
|
||
|
|
both the Secure Sockets Layer (SSL) protocol and the Transport Layer Security
|
||
|
|
(TLS) protocol to provide secure, encrypted communications between your clients
|
||
|
|
and servers.</li>
|
||
|
|
</ul>
|
||
|
|
|
||
|
|
<div class="familylinks">
|
||
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="security.htm" title="This topic provides details on adopted authority and explains how you can use SSL to make socket streams secure in your Java application.">Java security</a></div>
|
||
|
|
</div>
|
||
|
|
<div class="relconcepts"><strong>Related concepts</strong><br />
|
||
|
|
<div><a href="securmod.htm" title="You can download Java applets from any system; thus, security mechanisms exist within the Java virtual machine to protect against malicious applets. The Java runtime system verifies the bytecodes as the Java virtual machine loads them. This ensures that they are valid bytecodes and that the code does not violate any of the restrictions that the Java virtual machine places on Java applets.">Java security model</a></div>
|
||
|
|
<div><a href="rzahajce.htm" title="The Java Cryptography Extension (JCE) 1.2 is a standard extension to the Java 2 Software Development Kit (J2SDK), Standard Edition. The JCE implementation on an iSeries server is compatible with the implementation of Sun Microsystems, Inc. This documentation covers the unique aspects of the iSeries implementation.">Java Cryptography Extension</a></div>
|
||
|
|
<div><a href="jaasbase.htm" title="The Java Authentication and Authorization Service (JAAS) is a standard extension to the Java 2 Software Development Kit (J2SDK), Standard Edition. J2SDK provides access controls that are based on where the code originated and who signed the code (code source-based access controls). It lacks, however, the ability to enforce additional access controls based on who runs the code. JAAS provides a framework that adds this support to the Java 2 security model.">Java Authentication and Authorization Service</a></div>
|
||
|
|
<div><a href="rzahajgssover.htm" title="The Java Generic Security Service (JGSS) provides a generic interface for authentication and secure messaging. Under this interface you can plug a variety of security mechanisms based on secret-key, public-key, or other security technologies.">IBM Java Generic Security Service (JGSS)</a></div>
|
||
|
|
</div>
|
||
|
|
</div>
|
||
|
|
</body>
|
||
|
|
</html>
|