Developing IBM JGSS applications

Use JGSS to develop secure applications. Learn about generating transport tokens, creating JGSS objects, establishing context, and more.

To develop JGSS applications, you need to be familiar with the high-level GSS-API specification and the Java™ bindings specification. IBM^® JGSS 1.0 is primarily based on and conforms to these specifications. See the following links for more information.

• RFC 2743: Generic Security Service Application Programming Interface Version 2, Update 1
• RFC 2853: Generic Security Service API Version 2: Java Bindings

• IBM JGSS application programming steps
  There are multiple steps required to develop a JGSS application, including using transport tokens, creating the necessary JGSS objects, establishing and deleting context, and using per-message services.
• Using JAAS with your JGSS application
  The IBM JGSS includes an optional JAAS login facility that allows the application to use JAAS to obtain credentials. After the JAAS login facility saves principal credentials and secret keys in the subject object of a JAAS login context, JGSS can retrieve the credentials from that subject.