10.12.2012 Views

The Java EE 5 Tutorial (PDF) - Oracle Software Downloads

The Java EE 5 Tutorial (PDF) - Oracle Software Downloads

The Java EE 5 Tutorial (PDF) - Oracle Software Downloads

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Establishing a Secure Connection Using SSL<br />

Secure Socket Layer (SSL) technology is security that is implemented at the transport layer (see<br />

“Transport-Layer Security” on page 771, for more information about transport layer security).<br />

SSL allows web browsers and web servers to communicate over a secure connection. In this<br />

secure connection, the data that is being sent is encrypted before being sent and then is<br />

decrypted upon receipt and before processing. Both the browser and the server encrypt all<br />

traffic before sending any data. SSL addresses the following important security considerations.<br />

■ Authentication: During your initial attempt to communicate with a web server over a<br />

secure connection, that server will present your web browser with a set of credentials in the<br />

form of a server certificate. <strong>The</strong> purpose of the certificate is to verify that the site is who and<br />

what it claims to be. In some cases, the server may request a certificate that the client is who<br />

and what it claims to be (which is known as client authentication).<br />

■ Confidentiality: When data is being passed between the client and the server on a network,<br />

third parties can view and intercept this data. SSL responses are encrypted so that the data<br />

cannot be deciphered by the third party and the data remains confidential.<br />

■ Integrity: When data is being passed between the client and the server on a network, third<br />

parties can view and intercept this data. SSL helps guarantee that the data will not be<br />

modified in transit by that third party.<br />

Installing and Configuring SSL Support<br />

Establishing a Secure Connection Using SSL<br />

An SSL HTTPS connector is already enabled in the Application Server. For more information<br />

on configuring SSL for the Application Server, refer to the <strong>Oracle</strong> GlassFish Server 2.1.2<br />

Administration Guide.<br />

If you are using a different application server or web server, an SSL HTTPS connector might or<br />

might not be enabled. If you are using a server that needs its SSL connector to be configured,<br />

consult the documentation for that server.<br />

As a general rule, to enable SSL for a server, you must address the following issues:<br />

■ <strong>The</strong>re must be a Connector element for an SSL connector in the server deployment<br />

descriptor.<br />

■ <strong>The</strong>re must be valid keystore and certificate files.<br />

■ <strong>The</strong> location of the keystore file and its password must be specified in the server deployment<br />

descriptor.<br />

You can verify whether or not SSL is enabled by following the steps in “Verifying SSL Support”<br />

on page 785.<br />

Chapter 28 • Introduction to Security in the <strong>Java</strong> <strong>EE</strong> Platform 783

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!