[omniORB] secure version of orbs

[Sai-Lai Lo]

Unfortunately, Orbacus 4 ssl transport is a proprietory implementation and
cannot interoperate with omniORB 4, which implements the standard SSL.
Having said that, I think the only thing that makes Orbacus's implementation
not compatible with omniORB 4 is the way it encodes the SSL endpoint in its
IORs.
omniORB 4 uses the standard component TAG_SSL_SEC_TRANS. Orbacus uses its
own encoding in an additional IOR profile. I think it is possible to install
interceptors in omniORB 4 to decode and encode the SSL profile that Orbacus
understands. Better still, you could lobby Orbacus to implement SSL
transport in the standard way.



----- Original Message -----
From: "Sveta Shasharina" <sveta@txcorp.com>
To: "Christof Meerwald" <cmeerw@web.de>
Cc: "omni" <omniorb-list@uk.research.att.com>
Sent: Tuesday, September 18, 2001 8:49 PM
Subject: RE: [omniORB] secure version of orbs


> Hi Cristof!
>
> Do you know anything about how FFSL is related to Open Communication
> Inreface of ORBacus 4?  Can they work together?
>
> I have all these questions because we
> want to implement a particular security protocol (Akenti) in
> our client-server project using (currently) ORBacus 4.  It
> seems that the most natural way to go is to have interceptors,
> which will bring in the needed security actions from Akenti.
> But I do not see Interceptor classes in ORBacus (like they
> have in dynamicTAO).
>
> Sveta
>
> -----Original Message-----
> From: owner-omniorb-list@uk.research.att.com
> [mailto:owner-omniorb-list@uk.research.att.com]On Behalf Of Christof
> Meerwald
> Sent: Tuesday, September 18, 2001 2:35 PM
> To: Sveta Shasharina
> Cc: omniorb-list@uk.research.att.com
> Subject: Re: [omniORB] secure version of orbs
>
>
> On Tue, 18 Sep 2001 13:44:06 -0600, Sveta Shasharina wrote:
> > Does omniORB plan to implement IIOP over SSL?
>
> Yes, have a look at
>
http://www.uk.research.att.com/cgi-bin/omni-wiki/moin.cgi/OmniOrb4Developmen
> tStatus#line226
>
>
> > I know that ORBacus 4 has Open Communication
> > Interface, which allows plugable IIOP/SSL, but somebody has
> > to implement new classes for this.  Any recommendations
>
> Hmm, have a look at http://www.ooc.nf.ca/fssl/download.html
>
>
> bye, Christof
>
> PS: I haven't tried any of these yet...
>
> --
> http://cmeerw.cjb.net                          Jabber: cmeerw@jabber.at
> mailto cmeerw at web.de                   ICQ: 93773535, Yahoo!: cmeerw
>
>
>