Re: TrustManagerFactory/KeyManagerFactory algorithms

Jeff Nisewanger (Jeff.Nisewanger@eng.sun.com)
Thu, 12 Aug 1999 11:20:10 -0700 (PDT)

Message-Id: <199908121821.LAA07286@shorter.eng.sun.com>
Date: Thu, 12 Aug 1999 11:20:10 -0700 (PDT)
From: Jeff Nisewanger <Jeff.Nisewanger@eng.sun.com>
Subject: Re: TrustManagerFactory/KeyManagerFactory algorithms
To: java-security@java.sun.com, kevin@Differential.COM

> I've been playing around a bit with the JSSE and I've come
> to the point where I would like to create an SSLContext.
> However, first I need to instantiate a TrustManagerFactory
> and a KeyManagerFactory. There are static factory methods
> that take an algorithm name as a parameter. What are the
> supported algorithm names? Also, what are the supported
> protocol names to instantiated an SSLContext?

This is documented in the file jsse1.0/doc/additional.html when
you install the JSSE reference implementation. The names of the
supported protocols for SSLContext are "SSL" and "TLS".

You can also implement your own trust and key factories
and ssl contexts by writing your own java.security.Provider and
registering it as a security provider via the java.security.Security
class. If you get an instance of the JSSE reference provider you can
use the Provider methods to see how the implementation class properties
are named. For example, an alternate implementation of a trust factory
might support more sophisticated certificate validation services.


Jeff