Home.... | log in.... | Pub my question! | Sign-up....
Java-index >> Security >> Cryptography

Adding ciphersuites

I am trying to work with SSL in Oracle 10. Unfortunately Oracle is packaged with JVM 1.4.1 and I need to use a cipher suite (TLS_RSA_WITH_AES_128_CBC_SHA) that was introduced in 1.4.2.

I've looked around a lot for ways to plug in new ciphersuites but haven't had much luck finding anything. In fact, the JSSE package documenation says that SSLSocketFactory is not "pluggable" because of export limitations.

I'm hoping I am wrong and that there is indeed a way to do this, I would appreciate any help as I've burned a lot of time on this already.

If you can't add ciphersuites, does anyone know if it would be possible to install the latest standalone JSSE package onto a 1.4.1 installation (and would that provide the new cipher suites that were introduced in 1.4.2)? The directions say it is only for 1.2 and 1.3.

Thanks for any help.

[872 byte] By [WOOLOOLOOa] at [2007-11-27 3:54:44]
«« package org.apache.commons.fileupload does not exist
»» Math Floor method
# 1
No you can't do that. I would see about updating the JVM. 1.4.1 is about six years old and close to end-of-life if not already there.
ejpa at 2007-7-12 8:58:52 > top of Java-index,Security,Cryptography...
# 2

That's what I was afraid of. I use Java 6 myself, but Oracle 10 ships with JDK 1.4.2 and I can compile and run against that just fine. However, when I run a Java trigger through the database, it doesn't support the ciphersuite.Reading through the Oracle documentation, I see that an OracleJVM is embedded in the DB and that is what is run through triggers - and that is 1.4.1. Unfortunately there is no way to upgrade that until Oracle releases a new version.

Any creative solutions would be appreciated, although I'm afraid I will have to run an external JVM that I trigger through the OracleJVM. A big waste of resources for a relatively small piece of functionality.

WOOLOOLOOa at 2007-7-12 8:58:52 > top of Java-index,Security,Cryptography...
# 3
> Any creative solutions would be appreciated, Find what cipher suits are supported Oracle 10 and tell your clients what you can achieve. If they don't like it then just walk away.
sabre150a at 2007-7-12 8:58:52 > top of Java-index,Security,Cryptography...
Security
Cryptography

Security New Topic

Security Hot Topic

Security

All Classified