ssh (was Re: java Digest 5 Sep 2003 15:03:44 -0000 Issue 1283)

Paul Gear paul@gear.dyndns.org
Sat Sep 6 11:58:00 GMT 2003


Cedric Berger wrote:
> Paul Gear wrote:
> 
>> I looked at this option, and it seems good on that level (not having to
>> worry about the CA), but the APIs i've seen (there are at least two
>> registered projects at SourceForge.net seem to require that you keep a
>> shell connection open, which would not be appropriate for my application.
>>
>> My need is for an authenticated, encrypted client-server connection
>> without any requirement for X.509 infrastructure.  Is there a way to use
>> JSSE or something similar in non-SSL mode?
>>  
>>
> What if you use self-signed certificates?

Mainly because X.509 is more complicated than ssh, and there's more to
go wrong.

> This is basically the same than using simple RSA public key
> authentication like SSH does.

It looks like i'll have to do this, but i'd rather just do ssh-style key
management.
-- 
Paul
http://paulgear.webhop.net

A: Because we read from top to bottom, left to right.
Q: Why should i start my reply below the quoted text?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://gcc.gnu.org/pipermail/java/attachments/20030906/daac70fa/attachment.sig>


More information about the Java mailing list