Problem:
- Product Name: VisiBroker
- Product Version: 5.x and 6.x
- Product Component: ORB
- Platform/OS Version: ALL
1) How to disable the data encryption?
2) Will the use of the following property help in disabling the encryption?
vbroker.security.secureTransport=false
vbroker.security.alwayssecure=false
Resolution:
In order to disable the encryption, the Secure Client application code needs to use the enableCipherSuites API.Please refer to the following code snippet, which demonstrates how the API is used in bank_ssl example.
//SecureClient.java code:
// Login
com.borland.security.Context ctx = (com.borland.security.Context)
orb.resolve_initial_references("VBSecurityContext");
String[] s ={"SSL_RSA_WITH_NULL_SHA"};
ctx.enableCipherSuites(s);
ctx.login(wallet);
The following properties do not disable the encryption. These are Client side properties. It is recommended that the Client application should use default values, rather than explicitly setting any of these properties.
vbroker.security.secureTransport=false
vbroker.security.alwayssecure=false
Use of "SSL_RSA_WITH_NULL_SHA" and "SSL_RSA_WITH_NULL_MD5" will determine whether encryption is used or not. Using WITH_NULL disables encryption.
#VisiBroker
#Security
