Annotated Source Files: Main Directory

This directory contains the entry points for online viewing of annotated source files of programs developed for the J2EE Security for Servlets, EJBs and Web Services book. Note that these are HTML files and are generated from the actual sources using Java2HTML tool to include important navigational aides such as hyperlinked package, class and method names. If you need to download ready to compile download distribution, you can get that from Download Source Files location.

The source files available here fall into two main categories: those belonging to JSTK (Java Security ToolKit) and those belonging to example programs. JSTK sources come with an Apache Ant build script and need only J2SE v1.4 SDK for compilation. Example programs come with their own build shell scripts and would require relevant products to be installed.

• JSTK Tools
     Commandline tools for Java Security operations. A brief JSTK User Guide is available for download.
• Example Programs
  • Chapter 3: Cryptography with Java
    • Example#1: Standalone programs
         Encryption/Decryption using symmetric/asymmetric ciphers; create/verify signature; generate secret key; generate public-private keypair; compute digest; compute MAC; and list Cryptographic Service Providers(CSPs)
  • Chapter 4: PKI with Java
    • Example#1: Standalone programs
         Display contents of a (a) X.509 Certificate; (b) Certification Path; (c) Certificate Revocation List.
  • Chapter 5: Access Control
    • Display contents of a file
    • Uses Policy files with Example#1
    • Policy file granting permission to a user
    • User login using JAAS
    • Cost of Access Control
  • Chapter 7: Securing the Message
    • Create and Verify XML-Signature using TSIK
    • Create and Verify XML-Signature using SecureXML
    • XML Encryption/Decryption using TSIK
  • Chapter 8: RMI Security
    • Bank Application using RMI (no security)
    • Bank Application using RMI (with policy file)
    • Bank Application using RMI over SSL
    • Bank Application using RMI (with JAAS security)
  • Chapter 9: Web Application Security
    • RMB Application (no security)
    • RMB Application (Servlet security)
  • Chapter 10: EJB Security
    • EJB based Echo Application (no security)
    • EJB based Echo Application (JAAS based login)
    • EJB based Echo Application with a gateway pgm.
    • EJB based Echo Application with a gateway pgm. (with JAAS security)
    • EJB based Bank Application (with JAAS security)
  • Chapter 11: Web Services Security
    • Web Service invocation over HTTPS
    • Web Service messages protected by WS-Security
    • WS-Security operations
    • WS-Security Handlers for Apache Axis