Maybe OT - X509 certificate

[tremalnaik]

Hi,
I don't know if this is the correct place where asking this question, eventually point me to the right resource, please

I moved an application developed on Jboss (4.0.2) in a win environment with Sun JDK to a Jboss on a Unix AIX (IBM) environment. The application makes use of SSL connection, so I had a problem with the Sun implementation of the X509 algorithm, not implemented by the IBM JDK, so I did the following to solve it:

I copied the rt.jar, jsse.jar, sunrsasign.jar to a folder of the IBM machine included in the JBoss classpath

I added the following provider spec into the java.security file of the IBM SDK:

security.provider.1=sun.security.provider.Sun
security.provider.2=com.sun.net.ssl.internal.ssl.Provider
security.provider.3=com.sun.rsajca.Provider
security.provider.4=com.sun.crypto.provider.SunJCE
security.provider.5=sun.security.jgss.SunProvider

Everything looks fine now, but I'd like a confirm that I didn't do anything wrong, like opening security holes or similia.

Has anybody have any remarks?

Thanks

[starksm64]

You have violated the sun jdk license by doing this.

[tremalnaik]

Mmmmh..., this is a problem.

But I see that the SUN implementation of the X509 algorithm is required by Tomcat. How can I circumvent this problem? Can I somehow instruct Tomcat to use a different implementation?

[tremalnaik]

From the SSL-Howto:

http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html

There is a parameter to specify in the tomcat configuration:

algorithm The X509 algorithm to use. This defaults to the Sun implementation (SunX509). For IBM JVMs you should use the value IbmX509. For other vendors, consult the JVM documentation for the correct value.

I'm going to try this new settings. Hope it works

[tremalnaik]

yep! :)