Sending secure files

We send PGP encrypted files to business partners via FTP. We have automated this process within a Java framework. There are some partners, however, that require file transmission via https. They supply us with a host address, a username, password, and a file dropoff directory. We upload the files via a web page and a browse button, after logging in. I have two questions:

1. Is this considered an SSL session?

2. I would like to automate this process. My thought is that I would

write a Java "client", where I would have username and passwordfields,along with the host address. I would transmit the file via an output stream after "logging in".

Is the JSSE the correct API to use in order to implement this

functionality?

[761 byte] By [shibania] at [2007-10-2 15:27:41]
# 1
Yes and yes.
ejpa at 2007-7-13 14:46:20 > top of Java-index,Security,Java Secure Socket Extension (JSSE)...
# 2
Thanks. Can you give me an example of how I would set username, password, and URL, that is, is there a class you could point me to to get me started?Thanks,Bob
shibania at 2007-7-13 14:46:20 > top of Java-index,Security,Java Secure Socket Extension (JSSE)...
# 3

See RFC 1738 #3.1 ftp://ftp.rfc-editor.org/in-notes/rfc1738.txt.

new URL("https://username:password@host:port/directory/...");

As the transport is HTTPS, the URL, including the username and password, are sent over SSL, not in the clear.

ejpa at 2007-7-13 14:46:20 > top of Java-index,Security,Java Secure Socket Extension (JSSE)...
# 4
Thank You very much.
shibania at 2007-7-13 14:46:20 > top of Java-index,Security,Java Secure Socket Extension (JSSE)...