Re: Well HTTPS

2008-12-18 Thread Mohamed Abdel-Aziz Bayoumi
mation (like a password) on the command-line since > it's relatively easy for other users/programs to see it. > > Happy holidays, > John > > -- > http://restlet.tigris.org/ds/viewMessage.do?dsForumId=4447&dsMessag

Re: Well HTTPS

2008-12-16 Thread Ben Johnson
Thanks for pointing out the security hole John - I should have clarified that I like this approach for a dev/test environment, not a production one. -- From: "John D. Mitchell" Sent: Tuesday, December 16, 2008 5:04 PM To: Subject: Re:

Re: Well HTTPS

2008-12-16 Thread John D. Mitchell
On Tuesday 2008.12.16, at 01:39 , Ben Johnson wrote: [...] Thanks for writing that up! I'm sure that's going to be quite helpful to people. > Personally, I prefer Bruno's suggestion of using > the Java VM parameters on your Java client program: > > -Djavax.net.ssl.trustStore=C:\\somedir\\serve

Re: Well HTTPS

2008-12-16 Thread Ben Johnson
tml Hope this helps. Ben -- From: "Mohamed Abdel-Aziz Bayoumi" Sent: Monday, December 15, 2008 11:24 AM To: Subject: RE: Well HTTPS > Hi Ben, > > Thanks for your extraordinary post you really helped me out understand a > lot > about HTTPS ... i just wanted

RE: Well HTTPS

2008-12-15 Thread Mohamed Abdel-Aziz Bayoumi
= new Client(Protocol.HTTPS); > > // The URI of the resource "list of items". > Reference samplesUri = new Reference("https://serverX:8183/sample";); > > // Create 9 new items > for (int i = 1; i < 10; i++) &g

RE: Well HTTPS

2008-11-29 Thread Jerome Louvel
-founder ~ http://www.noelios.com -Message d'origine- De : Ben Johnson [mailto:[EMAIL PROTECTED] Envoyé : samedi 29 novembre 2008 16:57 À : discuss@restlet.tigris.org Objet : Re: Well HTTPS Hi Jérôme Sure, I'll try to put it together next week - I'd like to refine the certific

Re: Well HTTPS

2008-11-29 Thread Ben Johnson
"Jerome Louvel" <[EMAIL PROTECTED]> Sent: Friday, November 28, 2008 2:12 PM To: Subject: RE: Well HTTPS Hi all, I think that Ben's step-by-step tutorial (with Bruno's remarks) would be a great addition to Restlet's User Guide! There is now a shell page &quo

RE: Well HTTPS

2008-11-28 Thread Jerome Louvel
.org Noelios Technologies ~ Co-founder ~ http://www.noelios.com -Message d'origine- De : Ben Johnson [mailto:[EMAIL PROTECTED] Envoyé : vendredi 21 novembre 2008 18:51 À : discuss@restlet.tigris.org Objet : Re: Well HTTPS Thanks for the feedback Bruno; I'm still learning abo

Re: Well HTTPS

2008-11-21 Thread Bruno Harbulot
John D. Mitchell wrote: For what it's worth... For production use, I've come to the point where I do *NOT* like implementing SSL solutions directly in Java. The extra overhead, hassles, etc. just aren't worth it in general. For example, for both Krugle and MarkMail, we have SSL (ala HTTPS)

Re: Well HTTPS

2008-11-21 Thread John D. Mitchell
For what it's worth... For production use, I've come to the point where I do *NOT* like implementing SSL solutions directly in Java. The extra overhead, hassles, etc. just aren't worth it in general. For example, for both Krugle and MarkMail, we have SSL (ala HTTPS) handled directly by th

Re: Well HTTPS

2008-11-21 Thread Ben Johnson
Thanks for the feedback Bruno; I'm still learning about certificates and Restlet, and I appreciate your clarifications! Regards Ben -- From: "Bruno Harbulot" <[EMAIL PROTECTED]> Sent: Friday, November 21, 2008 2:54 PM To:

Re: Well HTTPS

2008-11-21 Thread Bruno Harbulot
Hi, I'm not sure you're clear on what certificates, signing and encryption are. Roughly speaking, an X.509 certificate is the combination of a public key and some information (subject distinguished name, date from/to, other attributes) that has been signed using a private key usually correspo

Re: Well HTTPS

2008-11-21 Thread Bruno Harbulot
Hi, Ben Johnson wrote: Hi I am new to Restlet and web programming, HTTP and SSL certificates in general, but hopefully my recent experiences will help. I spent the last several days trying to find a Restlet example using HTTPS (there isn't one), and eventually pieced together the following

RE: Well HTTPS

2008-11-21 Thread Ben Johnson
Hi I am new to Restlet and web programming, HTTP and SSL certificates in general, but hopefully my recent experiences will help. I spent the last several days trying to find a Restlet example using HTTPS (there isn't one), and eventually pieced together the following (using Windows XP SP2 with

Re: Well HTTPS

2008-11-20 Thread Mohammed Al-Adawi
ry Boileau <[EMAIL PROTECTED]> wrote: From: Thierry Boileau <[EMAIL PROTECTED]> Subject: Re: Well HTTPS To: discuss@restlet.tigris.org Date: Monday, November 17, 2008, 3:06 PM Hello, I suggest you have a look at this http://java.sun.com/j2se/1.5.0/docs/tooldocs/#security (and th

Re: Well HTTPS

2008-11-17 Thread Thierry Boileau
Hello, I suggest you have a look at this http://java.sun.com/j2se/1.5.0/docs/tooldocs/#security (and then choose the "keytool" documentation) and http://blogs.sun.com/andreas/entry/no_more_unable_to_find. You can find an explanation about the role of the keystore and the trustore (try to get

Well HTTPS

2008-11-17 Thread M E
WANNING BRAIN OVERHEATING  /\ I have read this http://en.wikipedia.org/wiki/Https and I want to implement HTTPS, in my sample application I converted component.getServers().add(Protocol.HTTP, 8182);to component.getServers().add(Protocol.HTTPS, 8182); Now Jersy is asking me a lot of questions