Space SSL Encryption

Added by Uri Cohen, last edited by Aleia Hutcherson on May 25, 2008  (view change)
  GigaSpaces 5.X

Documentation Home
Quick Start Guide
Release Notes

Previous release
  Search Here
Searching GigaSpaces Platform 5.X Documentation

                                               
Summary: GigaSpaces provides an SSL stub handler which provides SSL support.

Overview

GigaSpaces provides two stub handlers:

  • The default stub handler that generates RMI stubs.
  • SSL stub handler which generates RMI/SSL stubs.

The default handler uses the LRMIStubHandlerImpl class (com.j_spaces.core.lrmi.LRMIStubHandlerImpl).

If you are using this handler, and you want to switch NIO protocol with RMI protocol (the default is NIO), simply uncomment space-config.lrmi-stub-handler.protocol-name=rmi in the <GigaSpaces Root>\config\gs.properties file.

For its SSL support, GigaSpaces uses the standard Java Secure Socket Extension) that is part of the JVM.

The SSL stub handler generates space proxies that use SSLSocket factories.

For SSL support, set the stub handler to one that generates RMI/SSL stubs.

To set up the SSL stub handler, change the value of the <stub-handler> element to com.j_spaces.core.SSLStubHandlerImpl.

<space-config>
    <ssl-stub-handler>
        <!--URI to keyStore and trustStore-->
        <protocol-name>TLS</protocol-name>
        <keystore-type>JKS</keystore-type>
        <key-managment-method>SunX509</key-managment-method>
        <keystore>${com.gs.home}/config/gigaspaces_server.keystore</keystore>
        <truststore>${com.gs.home}/config/gigaspaces_server.truststore</truststore>
        <password>gigaspaces</password>
     </ssl-stub-handler>
</space-config>

The SSL stub handler uses the following properties:

Property Name Description Default Value
<Keystore> A keystore is a database of key material. Key material is used for a variety of purposes, including authentication and data integrity. ../config/keyStore
<Password> The password required to read the key from the certificate. passphrase
<Truststore> A truststore is a keystore, used when making decisions about what to trust. If you receive data from an entity that you already trust, and if you can verify that the entity is the one it claims to be, then you can assume that the data really came from that entity. ../config/trustStore
For more details on how to create certificates and keystores, refer to the JSSE Reference Guide.

Wiki Content Tree

Your Feedback Needed!

We need your help to improve this wiki site. If you have any suggestions or corrections, write to us at techw@gigaspaces.com. Please provide a link to the wiki page you are referring to.

Labels

 
(None)