SSL - Using CORBA with the Secure Socket Layer

Description:

Independent of the implementation, any CORBA application may be configured to work on top of the Secure Socket Layer (SSL) to provide a secure communication channel.

Therefore this example will not provide new code, but just configure the basic Hello example to work on top of SSL.

Source:

\Demo\SSL

Goal:

Realize secure communication between CORBA objects.

Example

Step 1. Import the Certificate:

With this example comes a file EspressoDemo.p12 which contains two certificates. One of them is a CA certificate.

A doubleclick on this file starts the import procedure into the Microsoft certificate stores. An import with the default values should work well for the sake of this example. The private key is secured with the password "espresso".

Step 2. Start the Server:

Start the server with the connection type 'SSL':

• Set SSL connection type using RuntimeConfiguration:
  

  RuntimeConfiguration rc = new RuntimeConfiguration(); rc.SetApplicationLog(OrbErrorLevel.ERRORS, "SrvLog.log", false); rc.SetConnnectionType(ConnectionType.SSL); Ics.CORBA.ORB oOrb = Ics.CORBA._ORB.init(rc);

  Use runSrv.cmd located in the Demo\SSL to start the Server.
  
• Or, setting the J-Integra® Espresso ORB-parameter -ConType to SSL ("-ConType=SSL") activates the SSL-encryption.
  

  > ..\Hello\HelloSrv\bin\debug\HelloSrv c:\hello.ior -ConType=SSL

  Use runSrv_CmdConfig.cmd located in the Demo\SSL to start the Server.

  Additional parameters are

  • -KeyUsage=ANY
    With -KeyUsage=Any the first certificate found in the keystore is loaded.
    When -KeyUsage is not set to ANY the server/client looks for a serverauthentication/clientauthentication certificate.
  • -KeyStore=MY ( CA,ROOT )
    With -KeyStore the keystore where to look for certificates can be changed. Default is MY.
  (More information can be found in the J-Integra® Espresso manual.)

Step 3. Start the Client:

The client knows from the IOR (within file c:\hello.ior) whether to use SSL or not.
Therefore, we start the client just as before:

> .\HelloClt\bin\debug\HelloClt