<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
<font size="-1"><font face="Tahoma">Hi Brad,<br>
<br>
Is there any update regarding this idea of SSLContextFactory? <br>
<br>
We have integrated Bruno's library in our Restlet 1.1 version and find
it very useful. It would be great to have similar support straight from
the JDK.<br>
<br>
Best regards,<br>
Jerome Louvel<br>
<a class="moz-txt-link-freetext" href="http://www.restlet.org">http://www.restlet.org</a><br>
<br>
</font></font><br>
Brad Wetmore a écrit :
<blockquote cite="mid:483B7CEA.7020403@sun.com" type="cite">Hi Bruno,
<br>
<br>
Just to give you a quick update, some of us are still having a look
over it. We've been a little backed up lately. (JavaOne, a
campus-wide shutdown, vacations here in the US: oh, and the normal
day-to-day stuff! ;))
<br>
<br>
Brad
<br>
<br>
<br>
Bruno Harbulot wrote:
<br>
<blockquote type="cite">Hello,
<br>
<br>
I only found out recently about Sean Mullan's blog entry named
"Security Feature Planning for JDK 7" (written almost two years ago)
<a class="moz-txt-link-rfc2396E" href="http://weblogs.java.net/blog/mullan/archive/2006/08/security_featur.html"><http://weblogs.java.net/blog/mullan/archive/2006/08/security_featur.html></a>.
After I contacted him, he kindly suggested this mailing-list could be
the right place to discuss security features in JDK 7.
<br>
<br>
I've recently been trying to improve SSL support in a couple of
open-source projects. This led me to build a small library, which I've
called 'jsslutils' <a class="moz-txt-link-rfc2396E" href="http://code.google.com/p/jsslutils/"><http://code.google.com/p/jsslutils/></a>.
<br>
The idea behind this library is to provide an SSLContextFactory which
can help configure an SSLContext for applications such as Restlet
<a class="moz-txt-link-rfc2396E" href="http://www.restlet.org/"><http://www.restlet.org/></a> (Grizzly, Simple or Jetty connectors)
or Jetty <a class="moz-txt-link-rfc2396E" href="http://www.mortbay.org/jetty/"><http://www.mortbay.org/jetty/></a>. Sub-classes of
SSLContextFactory can provide extra features such as helping with the
configuration of CRLs, or customization of the Key/TrustManagers. (If
you wish to try it out, there are some jUnit tests in the subversion
repository.)
<br>
I would be interested in having your opinions regarding an
SSLContextFactory, and whether something similar may have already been
discussed. Looking at the JDK 7 API, there doesn't seem to be an such a
class/interface. This has been a rather useful feature for my
application so far, and it should make it easy to support CRLs for
example in something like Jetty. However, I'm not sure whether it would
be good to have something like this SSLContextFactory in JDK 7. Perhaps
there are other better ways to achieve these goals.
<br>
<br>
One of the main problems I still find is that few applications support
setting up the SSLContext, which makes it sometimes difficult to
configure more advanced features such as CRLs. Java 6 provides a way to
set a default SSLContext, but this is not ideal. Sometimes, various
connectors in the application may want to use different SSLContexts
(perhaps with different truststores and keystores). For example, I
would like to be able to set a specific SSLContext when using JavaMail,
but I haven't found any documentation making it possible to set up the
truststore and keystores independently, instead, it seems to rely on
the default system properties.
<br>
<br>
<br>
Best wishes,
<br>
<br>
Bruno.
<br>
</blockquote>
<br>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Jerome Louvel
<a class="moz-txt-link-freetext" href="http://www.noelios.com">http://www.noelios.com</a>
</pre>
</body>
</html>