JavaTM Secure Socket Extension (JSSE) 1.0.3 README

This README file provides information about the IBM JavaTM Secure Socket Extension (JSSE) 1.0.3.

Contents


Introduction

The JavaTM Secure Socket Extension (JSSE) is a Java package that enables secure Internet communications. It implements a Java version of SSL (Secure Sockets Layer) and TLS (Transport Layer Security) protocols and includes functionality for data encryption, server authentication, message integrity, and optional client authentication.
By abstracting the complex underlying security algorithms and "handshaking" mechanisms, JSSE minimizes the risk of creating subtle but dangerous security vulnerabilities. Furthermore, it simplifies application development by serving as a building block which developers can integrate directly into their applications. Using JSSE, developers can provide for the secure passage of data between a client and a server running any application protocol (such as HTTP, Telnet, NNTP, and FTP) over TCP/IP.

Documentation

For information on the JSSE package and classes, consult the API specification in jssedocs.jar. For information on how to use the JSSE classes and APIs, consult JSSE API user's guide.

Additional Cryptography Support

Windows Support: INSTALLATION

If you have configured JSSE to support Windows cryptographic providers and certificate stores then you have to install a DLL that maps Java calls to the Windows operating system. Put the DLL win32/mscapi.dll into your Windows system directory which is on the path (c:/windows, c:/winnt, etc.).
The installation files can be found within docs\jsse\native-support.zip.

PKCS#11 Token Support: INSTALLATION

JSSE will try to load the DLL "jpkcs11". This name is mangled into a platform dependent library name (jpkcs11.dll on Windows and libjpkcs11.so on most other Unix platforms). This mangled filename is searched in an OS dependent way. Either you put the DLLs into a standard directory or you customize the lookup of DLLs. Details depend on your operating system and your JVM.

On Windows, put the DLLs (jpkcs11.dll, pkcslog.dll, and pseudotoken.dll) into the Windows system directory which is on the path (c:/windows, c:/winnt, ...).

On most of the other platforms, you have to setup the environment variable LD_LIBRARY_PATH to include the directory where you installed the shared libraries.

The installation files can be found within docs\jsse\native-support.zip.  On a Unix system the files can be found within docs/jsse/native-support.zip.

PKCS#11 Token Support: DEBUGGING

The DLL "pkcslog" will log all communication between a PKCS#11 DLL and JSSE to a file. Set the environment variable "PKCSLOG" to the token DLL and use "pkcslog" instead of the token DLL name in the constructor of a SSLPKCS11Token. A file "pkcslog.txt" is written in the current directory of the process.

The "pseudotoken" DLL is a very simple PKCS#11 module that allows to perform some very basic tests in case you do not have a hardware token with a PKCS#11 DLL at hand.

Notices

This edition applies to Java Secure Socket Extension (JSSE) and to all subsequent releases and modifications until otherwise indicated in new editions.
Copyright International Business Machines Corporation 2000. All rights reserved.
Note to U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

Consult your local IBM representative for information on the products and services currently available in your area. Any reference to an IBM product, program, or service is not intended to state or imply that only that IBM product, program, or service may be used. Any functionally equivalent product, program, or service that does not infringe any IBM intellectual property right may be used instead. However, it is the users responsibility to evaluate and verify the operation of any non-IBM product, program, or service.

IBM may have patents or pending patent applications covering subject matter in this document. The furnishing of this document does not give you any license to these patents. You can send license inquiries, in writing, to:

IBM Director of Licensing IBM Corporation
North Castle Drive Armonk, NY 10504-1758 U.S.A.

For license inquiries regarding double-byte (DBCS) information, contact the IBM Intellectual Property Department in your country or send inquiries, in writing, to:

IBM World Trade Asia Corporation Licensing
2-31 Roppongi 3-chome, Minato-ku
Tokyo 106-0032, Japan

The following paragraph does not apply to the United Kingdom or any other country where such provisions are inconsistent with local law:

INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some states do not allow disclaimer of express or implied warranties in certain transactions, therefore, this statement may not apply to you.

This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the information. IBM may make improvements and/or changes in the product(s) and/or the program(s) described in this information at any time without notice.

Any references in this information to non-IBM Web sites are provided for convenience only and do not in any manner serve as an endorsement of those Web sites. The materials at those Web sites are not part of the materials for this IBM product and use of those Web sites is at your own risk.

IBM may use or distribute any of the information you supply in any way it believes appropriate without incurring any obligation to you.

Licensees of this program who wish to have information about it for the purpose of enabling (i) the exchange of information between independently created programs and other programs (including this one) and (ii) the mutual use of the information which has been exchanged, should contact:

JTCMAIL@uk.ibm.com
[Hursley Java Technology Center (JTC) contact]

Such information may be available, subject to appropriate terms and conditions, including in some cases, payment of a fee.

The licensed program described in this document and all licensed material available for it are provided by IBM under terms of the IBM Customer Agreement, IBM International Program License Agreement or any equivalent agreement between us.

Any performance data contained herein was determined in a controlled environment. Therefore, the results obtained in other operating environments may vary significantly. Some measurements may have been made on development-level systems and there is no guarantee that these measurements will be the same on generally available systems. Furthermore, some measurement may have been estimated through extrapolation. Actual results may vary. Users of this document should verify the applicable data for their specific environment.

Information concerning non-IBM products was obtained from the suppliers of those products, their published announcements or other publicly available sources. IBM has not tested those products and cannot confirm the accuracy of performance, compatibility or any other claims related to non-IBM products. Questions on the capabilities of non-IBM products should be addressed to the suppliers of those products.

Trademarks

IBM is a trademark of International Business Machines Corporation in the U.S., or other countries, or both.
Java is a trademark of Sun Microsystems, Inc. in the U.S. and other countries. The Java technology is owned and exclusively licensed by Sun Microsystems, Inc.
Microsoft, Windows, Windows NT, and the Windows logo are trademarks of Microsoft Corporation in the United States, other countries, or both.

Other company, product, and service names may be trademarks or service marks of others.

THIS DOCUMENT IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. IBM DISCLAIMS ALL WARRANTIES, WHETHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF FITNESS FOR A PARTICULAR PURPOSE AND MERCHANTABILITY WITH RESPECT TO THE INFORMATION IN THIS DOCUMENT. BY FURNISHING THIS DOCUMENT, IBM GRANTS NO LICENSES TO ANY PATENTS OR COPYRIGHTS.

(c) Copyright IBM Corporation, 2000. All rights reserved.

(c) Copyright 1997, 1999 Sun Microsystems, Inc.
901 San Antonio Rd., Palo Alto, CA 94303 USA.
All rights reserved.

 

IBM is a trademark of the IBM Corporation in the United States, other countries, or both.