Java Secure Socket Extension

In computing, the Java Secure Socket Extension (JSSE) provides a set of packages which enable secure Internet communications. It implements a Java technology version of the Secure Sockets Layer (SSL) and the Transport Layer Security (TLS) protocols. It includes functionality for data encryption,^[1] server authentication, message integrity, and optional client-authentication.

JSSE, an optional package for Java versions 1.2 and 1.3, became integrated into version 1.4.

External links

"Java Secure Socket Extension (JSSE) Reference Guide". Oracle Technology Network. Oracle Corp. Retrieved 2014-10-29.
"Java SE Security". Oracle Technology Network / Java / Java SE / Technologies. Oracle Corp. Retrieved 2014-10-29.

References

↑ Harold, Elliotte Rusty (2013). Java Network Programming. O'Reilly Media, Inc. p. 327. ISBN 9781449365967. Retrieved 2014-10-19. JSSE allows you to create sockets and server sockets that transparently handle the negotiations and encryption necessary for secure communication.

Java

Java platforms	Java language JVM Micro Edition Standard Edition Enterprise Edition Java Card Android SDK

Oracle technologies	Squawk Java Development Kit OpenJDK Java virtual machine JavaFX Maxine VM

Platform technologies	Applets Servlets MIDlets JSP Web Start (JNLP)

Major third-party technologies	Eclipse GNU Classpath GWT Harmony Hibernate IcedTea Jazelle Spring Struts TopLink WildFly

History	Java version history Java Community Process Sun Microsystems Free Java implementations

Major programming languages	BeanShell Clojure Groovy Oxygene Java Tcl JRuby Jython Processing Rhino Scala more…

Java conferences	JavaOne

TLS and SSL

Protocols and technologies

Transport Layer Security / Secure Sockets Layer (TLS/SSL)
Datagram Transport Layer Security (DTLS)
DNS Certification Authority Authorization (CAA)
DNS-based Authentication of Named Entities (DANE)
HTTPS
HTTP Public Key Pinning (HPKP)
HTTP Strict Transport Security (HSTS)
OCSP stapling
Perfect forward secrecy
Server Name Indication (SNI)
STARTTLS

Public-key infrastructure

Automated Certificate Management Environment (ACME)
Certificate authority (CA)
CA/Browser Forum
Certificate policy
Certificate revocation list (CRL)
Domain-validated certificate (DV)
Extended Validation Certificate (EV)
Online Certificate Status Protocol (OCSP)
Organization-validated certificate (OV)
Public key certificate
Public-key cryptography
Public key infrastructure (PKI)
Root certificate
Self-signed certificate

See also

Domain Name System Security Extensions (DNSSEC)
Internet Protocol Security (IPsec)
Secure Shell (SSH)

History

Implementations

Notaries

Vulnerabilities

Theory	Man-in-the-middle attack Padding oracle attack Lucky Thirteen attack

Cipher	Bar mitzvah attack

Protocol	BEAST BREACH CRIME Logjam POODLE (in regards to SSL 3.0)

Implementation	Certificate authority compromise Random number generator attacks FREAK goto fail Heartbleed POODLE (in regards to TLS 1.0)

This article is issued from Wikipedia - version of the Monday, April 20, 2015. The text is available under the Creative Commons Attribution/Share Alike but additional terms may apply for the media files.