Customizing JSSE dynamically

Thread view:

Hugo - 23 Jan 2004 16:40 GMT

Hello everybody,

Here is my request:
I would like to let users choose (via a GUI) the parameters of the TLS
connection he's about to make. For example, I would likt to let him
choose the encryption algorithms, the signature algorithms, and so on.
I would like to do this in order to enahnce security between two peers
by limiting the algorithms available during the handshake. Could
someone tell me how to proceed ?

Thank you

Hugo

Reply to this Message

JK - 23 Jan 2004 16:58 GMT

This is roughly what you have to do:

- Decide, which one is the server (opens the server socket)

Both sides:
- Create a SSLContext ctx
- Get the supported cipher suites with
ctx.getSupportedCipherSuites()
- Let the user choose one from a ComboBox or whatever
- SSL(Server)Socket socket = SSL(Server)Socket
ctx.create(Server)Socket();
- socket.setEnabledCipherSuites(<user's choice>)

Server:
- maybe also socket.setNeedClientAuth(true)

Regards
JK.

> Hello everybody,
>
[quoted text clipped - 9 lines]
>
> Hugo

Reply to this Message

Hugo - 26 Jan 2004 13:05 GMT

Thank you for your quick answer.
I think I will be able to manage my problem with your solution.
Thanks again.

Hugo

> This is roughly what you have to do:
>
[quoted text clipped - 28 lines]
> >
> > Hugo

Reply to this Message

Customizing JSSE dynamically

Free Magazines