Communicating over Secure Sockets Layer

The Secure Sockets Layer (SSL) protocol is intended to provide privacy and integrity between two communicating applications. SSL is designed to sit above a transport protocol (such as TCP) and below application protocols (such as LDAP). As part of the SSL Handshake Protocol, a client and server can identify themselves to each other by using digital certificates. Note that the use of certificates for authentication is optional; a client and server can use SSL and still use the standard password-based method of authentication.

A standard has been defined for initiating an SSL session in LDAP. The standard specifies that a nonsecure session can become an SSL session if the client requests startTLS. TLS stands ...

Get LDAP Programming with Java™ now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.