File APIs for Java Developers
Manipulate DOC, XLS, PPT, PDF and many others from your application.
The moose likes Beginning Java and the fly likes URLConnection and HTTPS and JSSE and OpenSSL Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login
JavaRanch » Java Forums » Java » Beginning Java
Bookmark "URLConnection and HTTPS and JSSE and OpenSSL" Watch "URLConnection and HTTPS and JSSE and OpenSSL" New topic

URLConnection and HTTPS and JSSE and OpenSSL

achana chan
Ranch Hand

Joined: Jul 29, 2002
Posts: 277
Hi Dirk, I don't know where this message belongs...
Environment : Tomcat4 + Apache2 + j2sdk1.4
I use java http-tunneling over RMI, and throughout the coding process, I made sure I used URLConnection rather than HttpURLConnection because I knew we will have to go through Apache+mod_ssl to talk to OpenSSL when going back to the client browsers.
I switched on tcpdump to test the final product.
Normal http messages going back are encrypted.
Data coming back from Tomcat and going through https (ie port 443) are not *well* encrypted - some fields are in plain text.
As I understand it, j2sdk1.4 comes with JSSE and it can handle https and encryption.
Obviously, I have either misunderstood or I have done something wrong if I can see plain text.
Some explanation and guidance would be good...

humanum errare est.
Dirk Schreckmann

Joined: Dec 10, 2001
Posts: 7023
I'm moving this to The Sockets and Internet Protocols Forum...
[ August 15, 2003: Message edited by: Dirk Schreckmann ]

[How To Ask Good Questions] [JavaRanch FAQ Wiki] [JavaRanch Radio]
I agree. Here's the link:
subject: URLConnection and HTTPS and JSSE and OpenSSL
jQuery in Action, 3rd edition