db-derby-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Reda Jazouli <reda...@gmail.com>
Subject Re: Starting the derby sever with ssl
Date Mon, 03 Nov 2008 17:34:57 GMT

Hi Rick, 
thank you for your reply, but my question is how does java knows wich key it
has to choose from the given keystore ?

Thanks in advance

Rick Hillegas-2 wrote:
> 
> Hi Reda,
> 
> The documentation on Derby's security features is scattered and hard to 
> follow. You will find more information on how to configure SSL in the 
> Derby Server and Administration Guide in a section titled "Network 
> encryption and authentication with SSL/TLS". You will probably want to 
> set several startup options. Something like the following:
> 
> java -Djavax.net.ssl.keyStore=serverKeyStore.key \
>      -Djavax.net.ssl.keyStorePassword=qwerty \
>      -Djavax.net.ssl.trustStore=serverTrustStore.key \
>      -Djavax.net.ssl.trustStorePassword=qwerty \
>      -jar derbyrun.jar server start -ssl peerAuthentication
> 
> More examples of how to configure Derby's SSL support can be found in 
> the security white paper located here: 
> http://developers.sun.com/javadb/reference/whitepapers/index.jsp
> 
> Hope this helps,
> -Rick
> 
> Reda Jazouli wrote:
>> Hi, 
>> As mentioned in the Derby tuning guide, its possible to start the derby
>> server in the way that is accepts only ssl connections.
>>
>> Its only required to give at startup a java keystore and a the keystores
>> password.
>>
>> My question is, how does the server know wich key is to use from the
>> given
>> keystore ?? 
>> I thought that there is a java property that has to be set before startup
>> and that indicates wich key from the given keystore, has to be used.
>>
>> Thanks im advance.
>>
>> Reda
>>   
> 
> 
> 

-- 
View this message in context: http://www.nabble.com/Starting-the-derby-sever-with-ssl-tp20305614p20306917.html
Sent from the Apache Derby Users mailing list archive at Nabble.com.


Mime
View raw message