This week's book giveaway is in the Agile and other Processes forum.
We're giving away four copies of The Mikado Method and have Ola Ellnestam and Daniel Brolund on-line!
See this thread for details.
The moose likes Beginning Java and the fly likes URLConnection and HTTPS and JSSE and OpenSSL Big Moose Saloon
  Search | Java FAQ | Recent Topics
Register / Login


Win a copy of The Mikado Method this week in the Agile and other Processes forum!
JavaRanch » Java Forums » Java » Beginning Java
Reply Bookmark "URLConnection and HTTPS and JSSE and OpenSSL" Watch "URLConnection and HTTPS and JSSE and OpenSSL" New topic
Author

URLConnection and HTTPS and JSSE and OpenSSL

achana chan
Ranch Hand

Joined: Jul 29, 2002
Posts: 277
Hi Dirk, I don't know where this message belongs...
Environment : Tomcat4 + Apache2 + j2sdk1.4
I use java http-tunneling over RMI, and throughout the coding process, I made sure I used URLConnection rather than HttpURLConnection because I knew we will have to go through Apache+mod_ssl to talk to OpenSSL when going back to the client browsers.
I switched on tcpdump to test the final product.
Normal http messages going back are encrypted.
Data coming back from Tomcat and going through https (ie port 443) are not *well* encrypted - some fields are in plain text.
As I understand it, j2sdk1.4 comes with JSSE and it can handle https and encryption.
Obviously, I have either misunderstood or I have done something wrong if I can see plain text.
Some explanation and guidance would be good...


humanum errare est.
Dirk Schreckmann
Sheriff

Joined: Dec 10, 2001
Posts: 7023
I'm moving this to The Sockets and Internet Protocols Forum...
[ August 15, 2003: Message edited by: Dirk Schreckmann ]

[How To Ask Good Questions] [JavaRanch FAQ Wiki] [JavaRanch Radio]
 
I agree. Here's the link: http://ej-technologies/jprofiler - if it wasn't for jprofiler, we would need to run our stuff on 16 servers instead of 3.
 
subject: URLConnection and HTTPS and JSSE and OpenSSL
 
Similar Threads
problem while posting information using URLConnection
sniffers, applet / Apache, mod_ssl, servlet/Tomcat, Oracle
Posting a Message/Encrypting
SSL download
URLConnection and HTTPS and JSSE and OpenSSL