Re: ssh (was Re: java Digest 5 Sep 2003 15:03:44 -0000 Issue 1283)

[Paul Gear <paul at gear dot dyndns dot org>]

Cedric Berger wrote:
> Paul Gear wrote:
> 
>> I looked at this option, and it seems good on that level (not having to
>> worry about the CA), but the APIs i've seen (there are at least two
>> registered projects at SourceForge.net seem to require that you keep a
>> shell connection open, which would not be appropriate for my application.
>>
>> My need is for an authenticated, encrypted client-server connection
>> without any requirement for X.509 infrastructure.  Is there a way to use
>> JSSE or something similar in non-SSL mode?
>>  
>>
> What if you use self-signed certificates?

Mainly because X.509 is more complicated than ssh, and there's more to
go wrong.

> This is basically the same than using simple RSA public key
> authentication like SSH does.

It looks like i'll have to do this, but i'd rather just do ssh-style key
management.
-- 
Paul
http://paulgear.webhop.net

A: Because we read from top to bottom, left to right.
Q: Why should i start my reply below the quoted text?

Attachment: pgp00000.pgp
Description: PGP signature