Ah haa..!! Thank you Mr. Martin.
Now, my problem is: I can make "https:" calls from the servlet when i put
my servlet in Java Web Server. I want to know whether the data i post to the
"https" resource (say a cgi script in the secure web server) and the response
i get back are really secure or not..? Can you throw some light on this..?
And could you please tell me what exactly is the "https protocol driver"..?
and what is "SSLSocket implementation"..? How their work differs..? And even
if i use a "SSLSocket implementation" will i still need a "https protocol
driver"..? If yes i guess that only JWS has such a driver right now.. Does
anybody know of any other SSL capable servlet engine with such a driver..?
Please help me.
Thank you.
Best regards,
Pankaj.
Martin Kuba <[EMAIL PROTECTED]> wrote:
> Siros Supavita wrote:
>
> Hello Pankaj,
>
> Ok .. Now I clearly understand your first question. I'm not sure about this
but ... I think that only Applet can make SSL connection ('cos it runs on Web
Browser which has SSL mechanism) Java
> Standard API didn't provide SSL connection then Application ... it can't
and in Servlet ... you use URL and URLConnection classes then it can't either
... let's find out more for this answer.
That's not true. You *can* use "https:" URLs with URLConnection in
both servlets and standalone applications. You only need
to add two things to the standard JDK:
1) implementation of SSLSocket
2) https protocol driver
AFAIK there are these implementations of SSLSocket available:
SSLava - only inside U.S.A. - http://www.phaos.com/
J/SSL - uknown price - http://www.baltimore.ie/products/jssl/index.html
iSaSiLk - $500 per year - http://jcewww.iaik.tu-graz.ac.at/
JCSI - free for non-commercial usage -
http://security.dstc.edu.au/projects/java/release4.html
Java SSL - only for NT - http://www.ixworld.com/javassl/
ITISSL - free, uses OpenSSL -
http://www-sp.iti.informatik.tu-darmstadt.de/itissl/
My choice is ITISSL, it is free and fast, because it uses native calls
to OpenSSL libraries.
The https protocol driver is hard to find. I know only the one
contained in JWS distribution.
If anybody knows about other implementations of SSLSocket and/or https
driver, please let me know.
Martin
____________________________________________________________________
Get free email and a permanent address at http://www.netaddress.com/?N=1
___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".
Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
