Security in stand-alone persistence

Question

hi,
i've got stand alone persistance in my java project, so im using PU with query language, last time i was snffing my ethernal interface, and noticed that queries are like a simple text, if there is any easy way to secure this informations? can persistence manager use JSSE? do you have some suggestions about any solutions? in my point i dont want to do lots of code modifications instead of saying PU to use some secure connection...
thanks for advice

Answer 1

:) PU is my persistence unit (in this case toplink), im using PostgreSQL so there is SSL but how to say PU to use some SSL connection, normaly im using something like that:
EntityManagerFactory emf = Persistence.createEntityManagerFactory("MyPU");
javax.persistence.EntityManager em = emf.createEntityManager();and now
em.getTransaction().begin();
em.createQuery("Select p FROM Person p").getResultList()and my persistence
<?xml version="1.0" encoding="UTF-8"?>
<persistence version="1.0" xmlns="http://java.sun.com/xml/ns/persistence" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/persistence http://java.sun.com/xml/ns/persistence/persistence_1_0.xsd">
  <persistence-unit name="MyPU" transaction-type="RESOURCE_LOCAL">
    <provider>oracle.toplink.essentials.PersistenceProvider</provider>
    <class>tab.Person</class>
    <properties>
      <property name="toplink.jdbc.user" value="user"/>
      <property name="toplink.jdbc.password" value="password"/>
      <property name="toplink.jdbc.url" value="url"/>
      <property name="toplink.jdbc.driver" value="org.postgresql.Driver"/>
    </properties>
  </persistence-unit>
</persistence>