Hello
I have created 3 tier online book store. Here I am using jsp ,Tomcat as
webserver and My_SQL as backend. Now I want to implement a secure JDBC
"tunnel" between server-side application (or the shopping cart
application) and the back-end database server. JDBC queries and their
respective results exchanged between the application and the DBMS
should be protected from potential intercepters. Can anyone suggest
how to accomplish this?
Please help.
Roedy Green - 10 Nov 2005 22:05 GMT
>Can anyone suggest
>how to accomplish this?
Put the servers on the same LAN behind a firewall.

Signature
Canadian Mind Products, Roedy Green.
http://mindprod.com Java custom programming, consulting and coaching.
Abhijat Vatsyayan - 11 Nov 2005 00:39 GMT
Why "implementing SSL in JSP" ? Looks like I am missing something.
Assuming that you want JDBC queries from tomcat to the DB server to go
over a secure channel -
If your JDBC (driver) talks to the server using a well know and fixed
set of TCP/IP ports and it does not support SSL, you can use ssh to
setup port forwarding. You can also try to setup VPN tunnels between the
two machines. VPN tunnel might work for protocols others than TCP/IP.
Abhijat
>Hello
>
[quoted text clipped - 9 lines]
>
>
Thomas Hawtin - 11 Nov 2005 01:02 GMT
> I have created 3 tier online book store. Here I am using jsp ,Tomcat as
> webserver and My_SQL as backend. Now I want to implement a secure JDBC
[quoted text clipped - 3 lines]
> should be protected from potential intercepters. Can anyone suggest
> how to accomplish this?
My first google suggests inserting useSSL=true into the connect URL.
Another way of doing it is to use port forward with ssh. I'm writing
this in Thunderbird over ssh port forwarding, and it works fine.
Tom Hawtin

Signature
Unemployed English Java programmer
http://jroller.com/page/tackline/