From: Andrew R. Jackson <ajackson@dezines.com>
To: pgsql-interfaces@hub.org
Subject: Re: [INTERFACES] Using JDBC and SSL (or any method of security)
Date: Wed, 15 Jul 1998 13:27:30 -0400
Message-ID: <199807151726.NAA15756@pablo.total.net> (raw)
In-Reply-To: <Pine.LNX.3.96.980715064716.1202H-100000@maidast.retep.org. uk>
References: <35AB2302.5236A260@iohk.com>
At 06:51 AM 15/07/98 +0100, you wrote:
>> We want to use JDBC together with a patched PostgreSQL using Brett
>> McCormick's PostgreSQl-SSL patch. Is it possible to use encrypted
>> communication with JDBC using this? Or kerberos? Or do you have any
>> suggestions as to how we can make it secure?
>
>Currently there is no way of encrypting the data stream using SSL or
>Kerberos - yet. The java.security api may help us in the near future.
The article "JBDC Drivers and Web Security" by Mukul Sood in Dr. Dobb's Journal (July 1998) discusses this a bit and some solutions that currently exist. A discussion about the use of SSL in JBDC solutions is included. In addition, three of the driver venders considered in the latter part of the article make use of SSL.
As Sood says "any program that makes use of TCP can be modified to use SSL connections". Several of the driver venders make use of this by providing encryption and authentification services to network applications (including Java applets and applications using JDBC) using SSL.
For a good example of this, read the section in the article on WebLogic's Tengah/JBDC, which uses RSA SSL.
>The only encoding possible so far is using the crypt authentication
>system, where the password is sent over the wire encrypted. We can handle
>this, as we have our own copy of crypt in the driver.
Peter or somebody, could you point me to an example of how this is used? Thanks.
Andrew
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-interfaces@postgresql.org
Cc: ajackson@dezines.com, pgsql-interfaces@hub.org
Subject: Re: [INTERFACES] Using JDBC and SSL (or any method of security)
In-Reply-To: <199807151726.NAA15756@pablo.total.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox