Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.java.programmer > #36676 > unrolled thread

Corba with SSL - what do I need for that?

Back to article view | Back to comp.lang.java.programmer

Contents

  Corba with SSL - what do I need for that? Andreas Leitgeb <avl@logic.at> - 2017-06-19 15:47 +0000

#36676 — Corba with SSL - what do I need for that?

My Java WebStart application uses Corba (Java's included ORB) to communicate
with a Server written in C++ and using TAO.  I need to get it working with 
secure connections. Only server side has certificates, client hasn't.

I think I've got the server side functional. It produces an IOR file,
that the client fetches over https, and that contains the block of lines:
      The component <3> ID is 2020 (TAG_SSL_SEC_TRANS)
            port = 50004
            target_supports = 0xa6
                Integrity
                Confidentiality
                EstablishTrustInTarget
                NoDelegation
            target_requires = 0x86
                Integrity
                Confidentiality
                NoDelegation
in "tao_catior"s dump of that IOR file.

The so-far-unchanged webstart application still tries to talk plain IIOP
to the server (as seen with wireshark), which the server correctly rejects.

I think there are three possible reasons, why client still tries plain iiop:

  1.) I have yet to set some properties for the ORB to enable SSL on client
        side. (I've so far seen that there exists a class 
          javax.rmi.ssl.SslRMIClientSocketFactory
        but haven't yet found any properties to set to that name.

  2.) Java's included ORB just doesn't really support SSL - I may need
        to switch to use JacORB.

  3.) My assumption that the server side is working correctly may be wrong.

If (based on your own experience and/or on my provided data) you can
rule out or point to one of them, or add other plausible reasons,
I'd appreciate very much.

[toc] | [standalone]

Back to top | Article view | comp.lang.java.programmer

csiph-web