File APIs for Java Developers
Manipulate DOC, XLS, PPT, PDF and many others from your application.
The moose likes Security and the fly likes Basic Security question Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login

Win a copy of REST with Spring (video course) this week in the Spring forum!
JavaRanch » Java Forums » Engineering » Security
Bookmark "Basic Security question" Watch "Basic Security question" New topic

Basic Security question

Megha Roy

Joined: Sep 12, 2003
Posts: 13
I have some doubt regarding security. Some people says that we need to obtain a digital certificate to start e-business. With my understanding with Digital certificate it mainly encrypts and decrypts the information. Is it not possible to code our self and create digital certificate using JAVA API. If it is then how to proceed from there on. Once digital certificate is create how to enable to web server.
Thanks . I will appreciate your help. IF there is any website which clear my doubts please provide me the link
David O'Meara

Joined: Mar 06, 2001
Posts: 13459

Digital certificates are used for more than secure data transfer. They are also a trust mechanism. Yes, you can create a certificate yourself for test purposes, but if you tried to pass that to somone, they'd only have your word that it was trustworthy, and they'd only have your word that you are who you say you are. You can't run a business like this. If you signed your certificate saying you were Micrsoft 'and you can trust me on that', would you expect anyone to believe you?
A digital certificate gets created and signed by a trusted source. They require you to give them personal or business information so they can authenticate you before they will use their person certificate to sign yours. This generates a trust hierarchy. You can then use your trusted certificate to sign others, eg if you have requirements for multiple certificates in your company, like certificate authentication.
There is also a bunch of other stuff, but this is the basis of why you go to another company for a certificate for use in e-business.
Megha Roy

Joined: Sep 12, 2003
Posts: 13
I have one more doubt. After we buy digital certificate how to enable that to our webserver. Is there any tutorial which explains the whole function.
Pankaj Kr
Ranch Hand

Joined: Sep 09, 2003
Posts: 80
There are many online tutorials.
For Apache Tomcat:
For Apache HTTP Server:
But I would recommend to start with a good book and then look at product specific manuals.
At cost of sounding promotional, I will recommend my own book on this topic that explains digital certificates and how to use them with Java based Web Servers quite nicely.

Pankaj Kumar
Home - WebLog - J2EE Security
I agree. Here's the link:
subject: Basic Security question
It's not a secret anymore!