You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@turbine.apache.org by Otto Cordero <oc...@sipecom.com> on 2003/04/26 20:15:41 UTC
Security
Dear list,
I need to implement a serious security module for our system using Java, I would like to know what technologies could you suggets that can be combined with Turbine efficiently.
Thanks,
Otto.
Re: Security
Posted by Bill Mulert <wd...@zygno.org>.
Looks like none of the providers are symetric ciphers.
I'm looking for a way to protect credit card numbers and other personal
information in the database.
Peter Courcoux wrote:
> See :
>
> http://jakarta.apache.org/turbine/turbine-2.3/services/crypto-service.html
>
>
>
> On Sat, 2003-04-26 at 21:44, Peter Courcoux wrote:
>
>>On Sat, 2003-04-26 at 21:18, Bill Mulert wrote:
>>
>>>A crypto service? Really?
>>>I sure don't see it in tdk-2.2
>>>What release is it in?
>>
>>It is in CVS HEAD. Its been around for a while though. I'm not quite
>>sure where, fulcrum perhaps. It was a surprise to me that it wasn't in
>>2.2 but you are right, it isn't.
>>
>>Regards,
>>
>>Peter
>>
>>
>>>Peter Courcoux wrote:
>>>
>>>>Otto,
>>>>
>>>>Security covers a very wide range of concerns, with as many solutions.
>>>>However, turbine works well over https, there is a (recently very much
>>>>improved) access control service which may suit your requirements (see
>>>>the turbine security service), and there is a crypto service based on
>>>>cryptix libs that handle things like encryption and digital signatures.
>>>>
>>>>I hope that this helps.
>>>>
>>>>Regards,
>>>>
>>>>Peter
>>>>
>>>>On Sat, 2003-04-26 at 19:15, Otto Cordero wrote:
>>>>
>>>>
>>>>>Dear list,
>>>>>
>>>>>I need to implement a serious security module for our system using Java, I would like to know what technologies could you suggets that can be combined with Turbine efficiently.
>>>>>
>>>>>Thanks,
>>>>>
>>>>>Otto.
>>>>
>>>
>>>
>>>---------------------------------------------------------------------
>>>To unsubscribe, e-mail: turbine-user-unsubscribe@jakarta.apache.org
>>>For additional commands, e-mail: turbine-user-help@jakarta.apache.org
>>
---------------------------------------------------------------------
To unsubscribe, e-mail: turbine-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: turbine-user-help@jakarta.apache.org
Re: Security
Posted by Peter Courcoux <pe...@courcoux.biz>.
See :
http://jakarta.apache.org/turbine/turbine-2.3/services/crypto-service.html
On Sat, 2003-04-26 at 21:44, Peter Courcoux wrote:
> On Sat, 2003-04-26 at 21:18, Bill Mulert wrote:
> > A crypto service? Really?
> > I sure don't see it in tdk-2.2
> > What release is it in?
>
> It is in CVS HEAD. Its been around for a while though. I'm not quite
> sure where, fulcrum perhaps. It was a surprise to me that it wasn't in
> 2.2 but you are right, it isn't.
>
> Regards,
>
> Peter
>
> >
> > Peter Courcoux wrote:
> > > Otto,
> > >
> > > Security covers a very wide range of concerns, with as many solutions.
> > > However, turbine works well over https, there is a (recently very much
> > > improved) access control service which may suit your requirements (see
> > > the turbine security service), and there is a crypto service based on
> > > cryptix libs that handle things like encryption and digital signatures.
> > >
> > > I hope that this helps.
> > >
> > > Regards,
> > >
> > > Peter
> > >
> > > On Sat, 2003-04-26 at 19:15, Otto Cordero wrote:
> > >
> > >>Dear list,
> > >>
> > >>I need to implement a serious security module for our system using Java, I would like to know what technologies could you suggets that can be combined with Turbine efficiently.
> > >>
> > >>Thanks,
> > >>
> > >>Otto.
> > >
> >
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: turbine-user-unsubscribe@jakarta.apache.org
> > For additional commands, e-mail: turbine-user-help@jakarta.apache.org
--
Peter Courcoux <pe...@courcoux.biz>
---------------------------------------------------------------------
To unsubscribe, e-mail: turbine-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: turbine-user-help@jakarta.apache.org
Re: Security
Posted by Peter Courcoux <pe...@courcoux.biz>.
On Sat, 2003-04-26 at 21:18, Bill Mulert wrote:
> A crypto service? Really?
> I sure don't see it in tdk-2.2
> What release is it in?
It is in CVS HEAD. Its been around for a while though. I'm not quite
sure where, fulcrum perhaps. It was a surprise to me that it wasn't in
2.2 but you are right, it isn't.
Regards,
Peter
>
> Peter Courcoux wrote:
> > Otto,
> >
> > Security covers a very wide range of concerns, with as many solutions.
> > However, turbine works well over https, there is a (recently very much
> > improved) access control service which may suit your requirements (see
> > the turbine security service), and there is a crypto service based on
> > cryptix libs that handle things like encryption and digital signatures.
> >
> > I hope that this helps.
> >
> > Regards,
> >
> > Peter
> >
> > On Sat, 2003-04-26 at 19:15, Otto Cordero wrote:
> >
> >>Dear list,
> >>
> >>I need to implement a serious security module for our system using Java, I would like to know what technologies could you suggets that can be combined with Turbine efficiently.
> >>
> >>Thanks,
> >>
> >>Otto.
> >
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: turbine-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: turbine-user-help@jakarta.apache.org
--
Peter Courcoux <pe...@courcoux.biz>
---------------------------------------------------------------------
To unsubscribe, e-mail: turbine-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: turbine-user-help@jakarta.apache.org
Re: Security
Posted by Bill Mulert <wd...@zygno.org>.
A crypto service? Really?
I sure don't see it in tdk-2.2
What release is it in?
Peter Courcoux wrote:
> Otto,
>
> Security covers a very wide range of concerns, with as many solutions.
> However, turbine works well over https, there is a (recently very much
> improved) access control service which may suit your requirements (see
> the turbine security service), and there is a crypto service based on
> cryptix libs that handle things like encryption and digital signatures.
>
> I hope that this helps.
>
> Regards,
>
> Peter
>
> On Sat, 2003-04-26 at 19:15, Otto Cordero wrote:
>
>>Dear list,
>>
>>I need to implement a serious security module for our system using Java, I would like to know what technologies could you suggets that can be combined with Turbine efficiently.
>>
>>Thanks,
>>
>>Otto.
>
---------------------------------------------------------------------
To unsubscribe, e-mail: turbine-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: turbine-user-help@jakarta.apache.org
Re: Security
Posted by Otto Cordero <oc...@sipecom.com>.
Thanks Peter,
Does the fact of having Tomcat behind Httpd with mod_ssl means that I do not
need to manage encryption in Turbine? how does this affect the work that I
should do on the Java side.
Moreover, is there something like a "typical" or "suggested" security
configuration when using httpd and a tomcat server with Turbine? Something
about your own experience with be very useful.
Thanks,
Otto.
----- Original Message -----
From: "Peter Courcoux" <pe...@courcoux.biz>
To: "Turbine Users List" <tu...@jakarta.apache.org>
Sent: Saturday, April 26, 2003 1:46 PM
Subject: Re: Security
> Otto,
>
> Security covers a very wide range of concerns, with as many solutions.
> However, turbine works well over https, there is a (recently very much
> improved) access control service which may suit your requirements (see
> the turbine security service), and there is a crypto service based on
> cryptix libs that handle things like encryption and digital signatures.
>
> I hope that this helps.
>
> Regards,
>
> Peter
>
> On Sat, 2003-04-26 at 19:15, Otto Cordero wrote:
> > Dear list,
> >
> > I need to implement a serious security module for our system using Java,
I would like to know what technologies could you suggets that can be
combined with Turbine efficiently.
> >
> > Thanks,
> >
> > Otto.
> --
> Peter Courcoux <pe...@courcoux.biz>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: turbine-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: turbine-user-help@jakarta.apache.org
>
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: turbine-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: turbine-user-help@jakarta.apache.org
Re: Security
Posted by Peter Courcoux <pe...@courcoux.biz>.
Otto,
Security covers a very wide range of concerns, with as many solutions.
However, turbine works well over https, there is a (recently very much
improved) access control service which may suit your requirements (see
the turbine security service), and there is a crypto service based on
cryptix libs that handle things like encryption and digital signatures.
I hope that this helps.
Regards,
Peter
On Sat, 2003-04-26 at 19:15, Otto Cordero wrote:
> Dear list,
>
> I need to implement a serious security module for our system using Java, I would like to know what technologies could you suggets that can be combined with Turbine efficiently.
>
> Thanks,
>
> Otto.
--
Peter Courcoux <pe...@courcoux.biz>
---------------------------------------------------------------------
To unsubscribe, e-mail: turbine-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: turbine-user-help@jakarta.apache.org