Summary

SSL is a secure data communication protocol layered over TCP. It inherits the properties of being reliable and connection-oriented from the underlying TCP and adds security capabilities of end-point authentication, data confidentiality and message integrity, making use of cryptography and PKI. SSL is remarkable in its ability to hide the inherent complexity of cryptographic algorithms and PKI abstractions and expose a simple and familiar interface to applications.

SSL API for Java is modeled after socket-based networking API and it is fairly straightforward to modify existing TCP programs to use SSL. Using JCA-compliant API to plug different implementation of cryptographic services and to build and install key managers and trust managers ...

Get J2EE™ Security for Servlets, EJBs and Web Services: Applying Theory and Standards to Practice now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.