Client, Server, EWay | Sun Microsystems 5.1.1 guide

Chapter 4	Section 4.3
Operating SSL	SSL Handshaking

Figure 9 Server-side Authentication

Client	Handshake: Client Hello	Server
(eWay)		(Web
		Server)
	Handshake: ServerHello

Handshake: Certificate

Handshake: ServerHelloDone

Handshake: ClientKeyExchange

ChangeCipherSpec

Handshake: Finished

ChangeCipherSpec

Handshake: Finished

Dual authentication: This option requires authentication from both the eWay and Web server. The server side (Web server) of the authentication process is the same as that described previously. In addition, however, the Web server requests a certificate from the eWay. The eWay then sends its certificate to the Web server. The

server, in turn, authenticates the eWay by looking into its TrustStore for a matching trusted CA certificate. The communication channel is established by the process of both parties’ requesting certificate information. This option is illustrated in Figure 10.

HTTPS eWay Adapter User’s Guide

34

Sun Microsystems, Inc.

Image 34

Sun Microsystems 5.1.1 manual Client, Server, EWay

Contents

EWAY Https Adapter USER’S Guide Version Contents Http OTD Method Descriptions Http Settings Proxy Configuration Security AuthenticationAdditional SSL Section Notes Verify hostname Connection Pool Settings Server Mode Operation Running the Sample Running the Sample in SSL Mode Implementing the Https eWay JCD Sample Projects About Http and Https What’s in This Chapter Http Messages About the Https eWayWeb Browser Cookies GET and Post Methods Sample Http Exchange in Client ModeCookie Expiration Date Checking Sample Http Exchange in Server Mode Body Html What’s New in This Release Sample Input Form About This Document Text Conventions ScopeIntended Audience Https eWay Javadoc Sun Microsystems, Inc. Web Site Related DocumentsDocumentation Feedback Installing the Https eWay Https eWay System Requirements Installing the Https eWay on an eGate supported system After you have installed eGate or eInsight, do the following Steps to extract the Javadoc include After InstallationExtracting the Sample Projects and Javadocs Steps to extract the Sample Projects include Export the Project Ican 5.0 Project Migration ProceduresInstall Java Caps Import the Project Installing Enterprise Manager eWay Plug-Ins To View the eWay Alert Codes Viewing Alert CodesTo add plug-ins from the Enterprise Manager Https eWay Alert Codes HTTPCLIENTEWAY-CONNECT Overview of eWay OTDs Https Client OTD Https Server OTD Http OTD Method Descriptions Input Server Request Node Input Server Response Node Working with the Server OTD Collaboration Example SendResponse Example Operating SSL Overview Hacker Https eWay KeyStores KeyStores and TrustStoresGenerating a KeyStore and TrustStore Creating a KeyStore in JKS Format To generate a KeyStore Creating a KeyStore in PKCS12 Format Creating a TrustStore Using an Existing TrustStoreTrustStores To create a new TrustStore SSL Handshaking Server ClientEWay Client EWay Server Web Using the OpenSSL Utility Creating a Sample CA Certificate Signing Certificates With Your Own CA Windows OpenSSL.cnf File Example # SSLeay example properties file Chapter Section Operating SSL Using the OpenSSL Utility Copyright 1998-2001 The OpenSSL Project. All rights reserved Creating and Configuring the Https eWay Configuring the eWay Connectivity Map Properties To configure the Https eWay properties To configure the Https Server eWay properties Configuring the eWay Environment Properties Connectivity Map with Components Server To Configure the Environment Properties EWay Connectivity Map Properties Https Server eWay Configuration Sections Include Configuring the Connectivity Map Https eWay PropertiesHttps eWay Configuration Sections Include Http eWay-HTTP Settings Http Server eWay-HTTP Server External Configuration EWay Environment Properties Http Settings Environment Configuration-HTTP Settings Proxy Configuration Environment Configuration-Proxy Configuration Name Description Required Value Proxy Port Proxy passwordSecurity Proxy Username Environment Configuration-Security, Authentication AuthenticationEnvironment Configuration-Security, SSL Rovider Name Description Required Value Jsse Provider ClassCom.sun.net.ssl.internal.ssl.P Com.ibm.jsse.IBMJSSEProvid Description Additional SSL Section NotesVerify hostname Required Values Environment Configuration-Connection Pool Settings Connection Pool SettingsAdditional information Setting Acceptor Threads Property for Https Server Mode Implementing the Https eWay Bpel Sample Projects EInsight Engine and Components Receive Business Rule Designer Output Nodes Server Mode OperationHttps eWay With eInsight Node Name Description Receive Business Rule Designer Output Nodes About the Https eWay eInsight Sample Projects Importing a Sample Project Building and Deploying the prjHTTPClientBPEL Sample Project Project Overview Project Operations GET Command GetSample.xmlInput and Output Data Creating the OTD Post Command PostSample.xmlCreating a Project Sample DTD MultipleDataIn.dtd OTD Wizard Selection Include DTDs to Selected List Creating a Business Process OTD Options Logic of the Business Process To create a Business Process Business Process CasesCase Activity Result Business Process Icons Client Business Process With Link Business Rules Client Business Rule Designer First Link Business Rule Business Rule Designer Second Link Business Rule Business Rule Designer Third Link Business Rule Business Rule Designer Case 1 Business Rule Business Rule Designer Case 2 Business Rule Decision Gate Properties Dialog Box Case Creating a Connectivity Map To create a Connectivity Map Defining the Business Process Selecting External ApplicationsPopulating the Connectivity Map To select external applications Binding the eWay Components Steps required to bind eWay components together Creating an Environment Environment Editor envHTTPClientBPEL CmHTTPClient Inbound File eWay Settings Configuring the eWaysConfiguring the Https eWay Properties CmHTTPClient Outbound File eWay Settings Configuring the Integration Server Creating and Activating the Deployment Profile Creating and Starting the Domain Create and Start the Domain Running the Sample Building and Deploying the ProjectBuild the Project ƒ postBPELHTTPS Content of postBPELHTTPS.html is Building and Deploying the prjHTTPServerBPEL Sample Project Project Forms Server Sample Project Original Form Server Sample Project Input Form Next step is to create the Project’s Business Process Business Process Icons for Receive and Reply Business Process Icons With Server Business Rules Business Rule Designer Server Receive Business Rule Creating a Connectivity Map Connectivity Map With Components prjHTTPServerBPEL Creating an Environment Running the Sample in SSL Mode ƒ postBPELHTTPS.html input file Permission java.util.PropertyPermission * read, write Implementing the Https eWay JCD Sample Projects About the Https eWay JCD Sample Projects Building and Deploying the prjHTTPClientJCD Sample Project Https eWay Sample Project Java Collaboration Based SampleIn DTD SampleIn.dtd Creating the Collaboration Definition Java JcdHTTPClient Collaboration Definition Part 101 Connectivity Map With Components prjHTTPClientJCD 103 Building and Deploying the prjHTTPServerJCD Sample Project ƒ Project Overview on ƒ postJCEHTTPS 106 107 JcdHTTPServer Collaboration Definition Connectivity Map With Components prjHTTPServerJCD 110 ƒ postJCEHTTPS.html input file 112 Index 114