Problem:

• Product Name: VisiBroker Java
• Product Version: 5.x and later
• Product Component: Security/SSL
• Platform: All

Qn1: Customer have vbssl.jar for enabling SSL(Secure Socket Layer) with VisiBroker 4.5.1. However, in BES5.2, they are not able to find vbssl.jar.

Qn2: To enable SSL they had implemented their own class, which uses following packages/classes:

com.inprise.security.ssl.*

com.inprise.security.util.RandomSeedGenerator

They are using following functionality:

Current current = CurrentHelper.narrow(orb.resolve_initial_references("SecurityCurrent"));

......

RandomSeedGenerator generator = new RandomSeedGenerator();

byte[] seed = generator.getSeed();

current.setPRNGSeed(seed);

But they are not able to find any of the above classes with current installation with BES5.2.

Resolution:

Ans1: As for BES5.2.1's security is different from VB4.x's security, that is the reason why the customer cannot find the vbssl.jar in the 5.x. There are quite a number of related security jar files such as jaas.jar, jsse.jar, jcert.jar, etc.

Ans2: The package "com.inprise.security.ssl.*" is packaged in <VBROKERDIR>/lib/vbsec.jar.

"com.inprise.security.util.RandomSeedGenerator" class does not exist in VB 5.2.1.

Customer can use "com.borland.security.util.SeedGenerator" class instead which is also in <VBROKERDIR>/lib/vbsec.jar.

JDK also provides a random generator "java.security.SecureRandom".