11.2. JSSE

In Section 8.5.3, we described the mechanics of authentication supported by JSSE. This section provides API details and explains how to leverage the authentication and use it to provide confidentiality and integrity controls so that data passing between communicating peers is protected from unauthorized disclosure and is resistant to tampering. If the data is tampered with, the integrity controls will indicate that the data has been corrupted. The core JSSE classes are in the javax.net and javax.net.ssl packages.

11.2.1. Establishing an SSL Context

An SSLSocket is created either by an SSLSocketFactory or by an SSLServerSocket accepting an in-bound connection. (In turn, an SSLServerSocket is created by an SSLServerSocketFactory.) ...

Get Inside Java™ 2 Platform Security: Architecture, API Design, and Implementation, Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.