[EMAIL PROTECTED](B
(B[EMAIL PROTECTED]'%9%H$r$*Aw$j$7$^$9!#(B
(B
$B"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#(B
$B!Z%-!<%o!<%I![(B
(B HTTPS, SSL, $B%;%-%e%j%F%#(B
$B!ZF|IU![(B
(B 2004/12/22 - 2004/12/23
$B!Z%9%l%C%I![(B
(B http://marc.theaimsgroup.com/?t=110365596000001&r=1&w=2
$B"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#"#(B
(B
$B(.!Ze$N%5(B
(B $B!<%P%5%$%I$r8F$S=P$9$3$H$r9M$($F$$$^$9!#(B
(B
(B Axis$B$K$D$$$F$/$k%I%-%e%a%s%H$r8+$^$7$?$,!"$"[EMAIL PROTECTED],$"(B
(B $B$j$^$;$s$G$7$?!#(B
(B
(B
$B$I$J$?$+!"(BHTTP$B$NBe$o$j$K(BHTTPS$B$G5!G=$9$k$h$&$K(BAxis($B%/%i%$%"%s(B
(B $B%H$H%5!<%PN>J}(B)[EMAIL PROTECTED](B
(B $B$4B8CN$G$7$g$&$+!)(B
(B
$B(1(3(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(0(B
(B
(B $B(2!Z2sEz(B 1-1$B![(,(B[Shahi,
(BAshutosh]$B(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(/(B
(B
(B HTTPS$B$rM-8z$K$9$k$h$&(BWeb$B%5!<[EMAIL PROTECTED]"I,MW$J>[EMAIL
(BPROTECTED]@[EMAIL PROTECTED](B
(B $B!"%/%i%$%"%s%H$+$i%5!<%S%9$r8F$V:]$K%]!<%H$r(BSSL$B$KJQ99$9$kI,(B
(B $BMW$,$"$j$^$9!#(B
(B
(B Tomcat+Axis$B$N>l9g!"0J2<$N%I%-%e%a%s%H$,Lr$KN)$D$G$7$g$&!#(B
(B http://www-128.ibm.com/developerworks/webservices/library/ws-sec1.html
(B
(B $B(2(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(0(B
(B
(B $B(2!Z2sEz(B 1-2$B![(,(B[Sunil
(BKothari]$B(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(/(B
(B
(B
$B;d$bF1$8$h$&$JLdBj$KD>LL$7$^$7$?!#>/$7(B(3$BF|4V(B)$B$N2fK}$G2r7h$7(B
(B $B$^$7$?!#;d$O(BTomcat 5.0.27$B$N85$G(BAxis
(B1.1$B$rAv$i$;$F$$$^$7$?!#(B
(B
(B HTTPS$B$NMxMQK!!"FC$K%/%i%$%"%s%H$,%5!<%P$rG'>Z$9$k:]$NMxMQK!(B
(B $B$K$D$$$F$N5-;v$O%$%s%?!<%M%C%H>e$K?tB?$/$"$j$^$9$,!"%5!<%P$,(B
(B $B%/%i%$%"%s%H$rG'>Z$9$k:]$NMxMQK!$K$D$$$F$O$[$H$s$I>pJs$,$"$j(B
(B $B$^$;$s!#(B
(B
(B $B$9$G$K%-!<%9%H%"[EMAIL PROTECTED]/%-!<[EMAIL
(BPROTECTED]@.$7$F$$$F!"(Bserver.xml$B$rE,(B
(B [EMAIL PROTECTED];d$N>l9g$N(Bserver.xml$B$NJQ(B
(B $B992U=j$r0J2<$K<($7$^$9!#(B
(B
(B <Connector port="8443" maxThreads="150" minSpareThreads="25"
(B maxSpareThreads="75" enableLookups="false"
(B disableUploadTimeout="true" acceptCount="100"
(B debug="0" scheme="https" secure="true"
(B clientAuth="true" keypass="changeit"
(B keystoreFile="c:\test\server.keystore"
(B sslProtocol="TLS" />
(B
(B [EMAIL PROTECTED]@$1$G$O(BHTTPS$B$O5!G=$7$^$;$s!#(B
(B
(B $B$H$K$+$/!"Hk7m$O(BTomcat$B$r0J2<$N%Q%i%a!<%?$G5/F0$9$k$3$H$G$9(B
(B (server.xml$B$NJQ99$,Lr$KN)$C$F$$$J$$$h$&$K;W$($^$9(B)$B!#(B
(B
(B java -Djavax.net.ssl.trustStore=c:\test\client.keystore
(B -Djavax.net.ssl.trustStorePassword=changeit
(B -Djavax.net.debug=true
(B -Djavax.net.ssl.keyStore=c:\test\client.keystore
(B -Djavax.net.ssl.keyStorePassword= changeit
(B
(B $B%/%i%$%"%s%H$O(BHTTPS$B$r;H$C$F8F$S=P$7$r$7$F$$$k$3$H$rA0Ds$H$7(B
(B $B$F$$$^$9!#$b$7$3$l$,LrN)$C$?$i65$($F$/[EMAIL PROTECTED](B
(B
(B $B(2(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(0(B
(B
(B $B(2!Z2sEz(B 1-3$B![(,(B[Lyndon
(BTiu]$B(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(/(B
(B
(B $B$3$N7o$K4X$7$F;d$N8D?M%a%b$r>R2p$7$^$9!#(B
(B
(B 1) $B%/%i%$%"%s%H(BJava$B%3!<%I(B
(B
(B System.setProperty("javax.net.ssl.trustStore",
(B "C:/Program Files/Apache Software Foundation/Tomcat
(B5.0/conf/ssl/client_truststore/cacerts");
(B System.setProperty("javax.net.ssl.trustStorePassword",
(B "password");
(B System.setProperty("javax.net.ssl.keyStore",
(B "C:/Program Files/Apache Software Foundation/Tomcat
(B5.0/conf/ssl/client_keystore/keystore");
(B System.setProperty("javax.net.ssl.keyStorePassword",
(B "password");
(B
(B $BCm0U(B: $B$"$J$?$N4D6-$K9g$&$h$&[EMAIL PROTECTED]/[EMAIL PROTECTED](B
(B
(B 2) Tomcat$B%5!<%P$N(Bserver.xml
(B
(B <!-- Define a SSL Coyote HTTP/1.1 Connector on port 8443 -->
(B <Connector port="8443" maxThreads="150" minSpareThreads="25"
(B maxSpareThreads="75" enableLookups="false"
(B disableUploadTimeout="true" acceptCount="100"
(B debug="0" scheme="https" secure="true"
(B clientAuth="true" sslProtocol="TLS"
(B keystoreFile="C:\Program Files\Apache Software Foundation\Tomcat
(B5.0\conf\ssl\server_keystore\keystore"
(B keystorePass="password"
(B truststoreFile="C:\Program Files\Apache Software
(BFoundation\Tomcat 5.0\conf\ssl\server_truststore\cacerts"
(B truststorePass="password" />
(B
(B $BCm0U(B: $BI,MW$K1~$8$F(B"clientAuth"[EMAIL PROTECTED]/[EMAIL
(BPROTECTED];d$?$A$N>l(B
(B $B9g!"%/%i%$%"%s%H$N>[EMAIL PROTECTED]'>Z$9$kI,MW$b$"$j$^$9!#(B
(B
(B 3) Tomcat$B%/%i%$%"%s%H$N(Btomcat-users.xml
(B
(B <user username="CommonName(CN) in client-side SSL Certificate"
(B password="password" roles="admin,manager" />
(B
(B $BCm0U(B:
$B$3$l$O%9%F%C%W(B2$BHV$N(BclientAuth$B$K4XO"$9$k%/%i%$%"%s%HB&(B
(B $B$NG'>Z$N$?$a$N$b$N$G$9!#(B
(B
(B 4) $B%*%W%7%g%s(B: Tomcat$B%5!<%P$N(Bserver.xml
(B
(B SSL$B$G$J$$%"%/%;%9$rL58z$K$9$k$K$O!"0J2<$r%3%a%s%H%"%&%H(B
(B
(B <!-- Define a non-SSL Coyote HTTP/1.1 Connector on the port
(B specified during installation -->
(B <Connector port="8080" maxThreads="150" minSpareThreads="25"
(B maxSpareThreads="75" enableLookups="false"
(B redirectPort="8443" acceptCount="100" debug="0"
(B connectionTimeout="20000"
(B disableUploadTimeout="true" />
(B
(B $B(1(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(,(0(B
(B
(B
(B---------------------------------------------------------------------
(BTo unsubscribe, e-mail: [EMAIL PROTECTED]
(BFor additional commands, e-mail: [EMAIL PROTECTED]
