This week's book giveaway is in the OO, Patterns, UML and Refactoring forum. We're giving away four copies of Refactoring for Software Design Smells: Managing Technical Debt and have Girish Suryanarayana, Ganesh Samarthyam & Tushar Sharma on-line! See this thread for details.
I have been working on a framework to create enterprise applications on and I have been successful so far. I have a Java EE design using Spring , Shiro and Hibernate and they are all working nicely together. I would like to add one more level of functionality to this framework. I would like to be able to use SSL to communicate for transaction based situations. I was hoping someone could give me an idea what I need to do to make this happen. I have been working in Spring for almost a year now but I am still a novice when it comes to Spring. I would appreciate any advice even if it is just a pointer to where I can find information that will lead me to my final goal.
PS- I have been browsing and will continue to browse, but I have not found everything I need to know and I am not sure what I all need to do. I am still a beginner when it comes to complex design issues specifically related to spring.
I understand that Tomcat will have to be setup to provide a certificate and that a different port will be used. What I am not sure of is how the flow will work and how to configure this flow. In a website , Amazon lets say, the consumer browses and put things in the cart. Then the customer decides to buy the merchandise. They are prompted for authorization of identity. Up until this point they have been in a public domain which anonymous users can browse at their leisure. They may even have logged in but now the business rules want a SSL connection for the transaction based portion of this business. They are directed into a SSL secure connection and are prompted to provide personal information to finish the purchase. Then the customer decides that they do not wish to purchase before they finish the transaction. They exit to the public part of the site. I am looking for direction on the best way to provide similar functionality using the above mentioned technologies and or direction of which technological choices are available so I may be able to provide this type of business work flow. I have seen on a few sites where this flow seems to be seamless and I wish to design that sort of environment.
I seem to have found my solution. I saw it when I was browsing but I was not convinced it was the way to go until I found this url Spring Remoting and Security with SSL. This looks exactly what I was looking for. Any other suggestions are very welcome.