RE: java.security - changing to use pure java JSSE without editing systemfiles?

Thorbj?rn,

This is not the complete answer to your question, but maybe it will help. 
Please take note of the os400.security.properties property, which will allow 
you to point your JVM to a unique java.security file for your program without 
having to modify the default file for the system.

-Marty

> -----Original Message-----
> From: java400-l-bounces@xxxxxxxxxxxx 
> [mailto:java400-l-bounces@xxxxxxxxxxxx] On Behalf Of 
> Thorbj?rn Ravn Andersen
> Sent: Monday, March 13, 2006 2:56 AM
> To: Java Programming on and around the iSeries / AS400
> Subject: java.security - changing to use pure java JSSE without editing 
> systemfiles?
> 
> My problem is that our customer wants to accept payloads sent 
> over https to a small OS/400 machine where resource usage is 
> at premium - so the full WebSphere is not immediately 
> relevant - and where we want a simple solution independant of 
> which machine it actually runs on, and then 
> AFAIK it would be best to use Java KeyStores instead.   Then we can 
> prepare everything inhouse and then remote deploy.
> 
> I am therefore investigating how to get SSL up and running 
> with a stock Java Web Container, where we currently look at 
> Jetty 5.1.10 but are open to other suggestions, but I have 
> had quite a bit of trouble figuring out how to get it running right.
> 
> Apparently the default configuration of JSSE on OS/400 uses 
> the implementation inside OS/400 instead of the pure java I 
> expected, but even so when specifying the IbmX509 algorithm 
> explicitly I cannot make this work.
> 
> It appears to me that the usual way to remidy this is to 
> change the java.security file directly on the system in 
> question.  I would rather have that I could do some changes 
> in the actual program only, so this would not be a global issue.
> 
> But right now, I just want to know if  there is anyone who 
> have made HTTPS work under OS/400, and how did you do it?
> 
> Thanks in advance for any help :)
> 
> --
>   Thorbj?rn