JSSE Reference Implementation
JSSE Reference Implementation
CORE FEATURES
- SSL version 3 and TLS version 1 protocol support
- Implements Java Secure Socket Extension version 1.
- Support for key and certificate management based on the
utilities and APIs in Java 2. In addition, a PKCS12 KeyStore
implementation is provided for exchanging keys with browsers
and other secure software environments.
- All-Java implementation.
- Self-contained cryptographic support.
WORKS WELL WITH HTTP
- Includes an "HTTPS" client side URL protocol handler, with firewall
tunneling
- Proven interoperation with most commercial SSL Web Browsers,
including Netscape Navigator and Microsoft Internet Explorer,
and other SSLv3 implementations.
SUPPORTS COMMON SSL CIPHER SUITES (and their TLS variants)
- "Export Grade" cipher suites, with restricted key sizes:
- Enabled by default:
- SSL_RSA_EXPORT_WITH_RC4_40_MD5 (most common suite)
- SSL_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
- Not enabled by default:
- SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA
- SSL_DH_anon_EXPORT_WITH_RC4_40_MD5
- SSL_RSA_WITH_NULL_SHA
- SSL_RSA_WITH_NULL_MD5
- "US Domestic Grade" cipher suites:
- Enabled by default:
- SSL_DHE_DSS_WITH_DES_CBC_SHA
- SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
- SSL_RSA_WITH_RC4_128_MD5
- SSL_RSA_WITH_RC4_128_SHA
- SSL_RSA_WITH_3DES_EDE_CBC_SHA
- SSL_RSA_WITH_DES_CBC_SHA
- Not enabled by default:
- SSL_DH_anon_WITH_DES_CBC_SHA
- SSL_DH_anon_WITH_3DES_EDE_CBC_SHA
- SSL_DH_anon_WITH_RC4_128_MD5