JSSE Reference Guide. This guide covers the following topics Data that travels across a network can easily be accessed by. When the data includes. It is also important to ensure that the data has not been. The Secure Sockets Layer SSL and Transport Layer. Security TLS protocols were designed to help protect the privacy. The Java Secure Socket Extension JSSE enables secure Internet. A reader writes My wife and I go back and forth about this one all the time. A former secretary of hers was moving and searching for a new job in her new. It provides a framework and an implementation for a. Java version of the SSL and TLS protocols and includes. Using JSSE. developers can provide for the secure passage of data between a. HTTP. Telnet, or FTP over TCPIP. For an introduction to SSL, see. Secure Sockets Layer SSL Protocol. Overview. By abstracting the complex underlying security algorithms and. JSSE minimizes the risk of creating subtle. Furthermore, it simplifies. JSSE provides both an application programming interface API. API. The JSSE API. This reference map lists the various references for CISCO and provides the associated CVE entries or candidates. It uses data from CVE version 20061101 and candidates. SSL contexts, and a socket factory framework for. Because the. SSLSocket class is based on a blocking IO model, the. Java Development Kit JDK includes a nonblocking. SSLEngine class to enable implementations to choose. IO methods. The JSSE API is capable of supporting SSL versions 2. TLS version 1. 0. These security protocols encapsulate a normal. JSSE API adds transparent. The JSSE implementation shipped with the JDK supports SSL 3. TLS 1. 0, 1. 1, and 1. DTLS version 1. 0 and 1. It does not implement SSL 2. JSSE is a security component of the Java SE platform, and is. Java Cryptography Architecture. JCA framework. This framework for cryptography related. JSSE uses the. service providers defined by the JCA framework. Other security components in the Java SE platform include the. Java Authentication and. Authorization Service JAAS and the Java Security Tools. JSSE. encompasses many of the same concepts and algorithms as those in. JCA but automatically applies them underneath a simple stream. API. The JSSE API was designed to allow other SSLTLS protocol and. Public Key Infrastructure PKI implementations to be plugged in. Developers can also provide alternative logic to. JSSE includes the following important features Included as a standard component of the JDKExtensible, provider based architecture. Implemented in 1. Java. Provides API support for SSL versions 2. TLS 1. 0 and. later, and an implementation of SSL 3. TLS 1. 0. Includes classes that can be instantiated to create secure. SSLSocket, SSLServer. Socket, and. SSLEngineProvides support for cipher suite negotiation, which is part of. SSL handshaking used to initiate or verify secure. Provides support for client and server authentication, which is. SSL handshaking. Provides support for HTTP encapsulated in the SSL protocol. HTTPSProvides server session management APIs to manage. SSL sessions. Provides support for several cryptographic algorithms commonly. Table 1. Footnote 1. Cryptographic Process. Key Lengths BitsRivest Shamir Adleman RSAAuthentication and key exchange. Rivest Cipher 4 RC4Bulk encryption. Data Encryption Standard DESBulk encryption. Triple DES 3. DESBulk encryption. Advanced Encryption Standard AESBulk encryption. Footnote 2. 12. 8Diffie Hellman DHKey agreement. Digital Signature Algorithm DSAAuthentication. Footnote 1. The Sun. JSSE implementation uses. JCA for all its. cryptographic algorithms. Footnote 2. Cipher suites that use AES2. Java Cryptography Extension JCE. Unlimited Strength Jurisdiction Policy Files. See. Java SE Download Page. The JSSE standard API, available in the javax. Secure sockets and server sockets. A nonblocking engine for producing and consuming streams of. SSLTLS data SSLEngine. Factories for creating sockets, server sockets, SSL sockets. SSL server sockets. By using socket factories, you can. A class representing a secure socket context that acts as a. Key and trust manager interfaces including X. A class for secure HTTP URL connections HTTPS. Oracles implementation of Java SE includes a JSSE provider. Sun. JSSE, which comes preinstalled and preregistered. JCA. This provider supplies the following cryptographic. An implementation of the SSL 3. TLS 1. 0 security. An implementation of the most common SSL and TLS cipher suites. An implementation of an X. JCA keystore. An implementation of an X. An implementation of PKCS1. JCA keystore type pkcs. Storing trust anchors in PKCS1. Users should. store trust anchors in the Java keystore JKS format and save. PKCS1. 2 format. More information about this provider is available in the. Sun. JSSE section. Oracle Providers Documentation. The following list contains links to online documentation and. JSSE API Documentation. Java SE Security. The Cryptography. Security page by Dr. Ronald L. Rivest no longer. Applied Cryptography, Second Edition by Bruce. Schneier. John Wiley and Sons, Inc., 1. Cryptography Theory and Practice by Doug Stinson. CRC Press, Inc., 1. Third edition published in 2. Cryptography Network Security Principles amp. Practice by William Stallings. Prentice Hall, 1. Fifth. edition published in 2. The SSL. Protocol version 3. Internet Draft. The TLS Protocol. Version 1. 0 RFCHTTP Over TLS. RFCSSL and TLS Designing and Building Secure Systems. Eric Rescorla. Addison Wesley Professional, 2. SSL and TLS Essentials Securing the Web by. Stephen Thomas. John Wiley and Sons, Inc., 2. Java 2 Network Security, Second Edition, by Marco. Pistoia, Duane F Reller, Deepak Gupta, Milind Nagnur, and Ashok K. Ramani. Prentice Hall, 1. U. S. Encryption Policies. The java home variable placeholder is used throughout. Java Runtime. Environment JRE is installed. This directory is determined based. JSSE with or without the JDK installed. The JDK includes the JRE, but it is located on a different level in. To see the default location of java home for. Table 2. Operating System. JDKJRESolarisLinuxjdk. Windows. C jdk. C jre. 1. 8. 0. Note The tilde in the path name represents. Solaris, Linux, or Mac OS X. Several terms relating to cryptography are used within this. This section defines some of these terms. The process of confirming the identity of a party with whom one. A combination of cryptographic parameters that define the. A digitally signed statement vouching for the identity and. Certificates. can either be self signed or issued by a Certificate Authority CA. Well known CAs include Veri. Sign. Entrust, and GTE Cyber. Trust. X5. 09 is a common certificate format. JDKs keytool. cryptographic hash function. An algorithm that is used to produce a relatively small. A cryptographic hash function is similar to a checksum and. Cryptographic Service Provider. Sometimes referred to simply as provider. Java Cryptography Architecture JCA defines it as a. An engine class. defines a cryptographic service in an abstract fashion without a. See encryptiondecryption. A digital equivalent of a handwritten signature. It is used to. ensure that data transmitted over a network was sent by whoever. For example, an RSA based digital signature is calculated. Encryption is the process of using a complex algorithm to. Decryption is the inverse process of producing cleartext. The algorithms used to encrypt and decrypt data typically come. The negotiation phase during which the two socket peers agree to. The handshake protocol is a series. At the end of the. A method by which two parties cooperate to establish a common. Each side generates some data, which is exchanged. These two. pieces of data are then combined to generate a key. Only those. holding the proper private initialization data can obtain the final.