Should i use secure sockets for my whole client/server application?

Hi,
I have a client server application, and I want to ensure that the login process is secure (i.e. use secure sockets). but I dont know how to switch back to a normal socket once that is done.
So I am left thinking that i should just use SSL for my whole application, which can last pretty long. But I would rather not. Is there any other way of doing this?
or should I just encrypt the login info using MD5 or something like that, then send it over an unsecure socket?
thanks!

Hey,
Are you sure you haven't confused JGSS for JSSE?
Imagine you have a client-server system and you sometimes want data sent over the wire to be encrypted... JGSS offers you this flexibility; if you a encrypted transmission, run ift through JGSS before transmitting it; if you don't want an encrypted transmission, bypass JGSS and just send the transmission.
The benefit is the security (encryption) isn't hard-wired into you communications protocol i.e. TLS. JGSS has nothing to do with connections it is just protocol for securing messages, not sending them.
You would need to establish the secure context but this could be done at startup and persist for the duration of you applicaiton invocation. You perhaps might need to implement a mechanism to identify encrypted messages on the receiving peer (so it knows to attempt decryption).
Admittedly, kerberos seems like one of those 'inside-joke' things. I've come to realise if you don't have some sort of kerberos realm/server against which to authenticate - you need to swap it out as the underlying mechanism. How this is done I'm not sure yet, but I intend to find out today....further down the rabbit hole I go!
If I discover anything helpful, I will let you know.
Warm regards,
D

Similar Messages

Sockets question (multiple user, client-server application)

I'm new to sockets and I think I've been designing my application all wrong.
I've been using the KKMultiServer example from this website. It creates new threads using the Socket.accept() function. However, all the clients connect to the same port on the server.
What I'm creating is a multi-user TicTacToe program. So far it's only for two players, but I would like to create a game "lobby" where lots of users can connect and play games with each other.
Do I need to specifcy local ports for the clients that are connecting? Should I be using different ports on the server for each user so the traffic doesn't get mixed up?

a socket is made up of 4 elements.
1) the server or host IP address
2) the server port
3) the client IP address
4) the client port
for a socket to be unqiue one of these elements must be different.
to make these unique client sockets use a port assigned by the OS and so you can have more than one client connected to a server and 1 client machine can have more than 1 open socket.
here is a print out from netstat (an IP utility on windows that shows some of my open sockets...
Active Connections
Proto Local Address Foreign Address State
TCP CHEF2:1033 CHEF2:3306 ESTABLISHED
TCP CHEF2:3306 CHEF2:1033 ESTABLISHED
TCP CHEF2:3306 CHEF2:3626 ESTABLISHED
TCP CHEF2:3306 CHEF2:3743 ESTABLISHED
TCP CHEF2:3626 CHEF2:3306 ESTABLISHED
TCP CHEF2:3743 CHEF2:3306 ESTABLISHED
TCP CHEF2:1278 216.71.131.122:22 ESTABLISHED
TCP CHEF2:1694 kw40.primenetwork.net:http CLOSE_WAIT
TCP CHEF2:1863 67.72.120.62:http CLOSE_WAIT
TCP CHEF2:1869 host16.ipowerweb.com:http TIME_WAIT
TCP CHEF2:1870 host16.ipowerweb.com:http TIME_WAIT
TCP CHEF2:1871 host16.ipowerweb.com:http TIME_WAIT
TCP CHEF2:1872 host16.ipowerweb.com:http TIME_WAIT
TCP CHEF2:1875 host16.ipowerweb.com:http TIME_WAIT
TCP CHEF2:1881 host16.ipowerweb.com:http TIME_WAIT
TCP CHEF2:1884 host16.ipowerweb.com:http TIME_WAIT
TCP CHEF2:3623 216.71.131.122:ftp CLOSE_WAIT
TCP CHEF2:3841 CARTMAN:netbios-ssn ESTABLISHED
at any rate
notice how on my machine (CHEF2) i have a service running on port 3306. i also have three sockets open from my machine acting as a client to the service. you can see it lists these three open sockets to my machine twice each.
at any rate it can tell them all apart from the server end because the port used by the client is different.
to sum up this and the answer given above you don't have to worry about it.

Should I use dynamic SQL for simple updates?

Please tell me, out of the two options given below, which option should i use to update columns in a table and why?
what will be the performance difference between the two approaches?
Please note: The options given below is just for an example
procedure proc1(var1 varchar2)
is
begin
update tab1 set col1 = var1;
commit;
end;
procedure proc1(var1 varchar2)
is
sqlstr varchar2(1000);
begin
sqlstr := 'update tab1 set col1 = :v1';
execute immediate sqlstr using var1;
commit;
end;
Thanks
Arun

Arun G Nath wrote:.
Should I use dynamic SQL for simple updates? No way, not a chance.
Performance is not the issue (as long as you are using bind variables).
But with dynamic SQL, you loose compile time checking; you do not know until runtime if the SQL is valid.
You also loose the dependency between proc1 and tab1, which can be found only if you search user_source.
(And in either case, you probably want to remove the commit)
Regards
Peter

Are there any Client/Server Application (using sockets) design patterns?

Hi,
The title of the post nearly says it all. I am searching for different design patterns related with the development of a client/server application. I understand that there must be any different ways on how a client/server application can be developed.
Regards,
Sim085
Disclaimer:
When I enter in the Socket forum on this site I recieve this message "Thank you for any participation in this forum. Due to a lack of relevant activity, we have decided to archive this forum on June 16, 2006. For future posts on this topic, we suggest you use the Networking forum" and I am not allowed to create a new post! However I can see posts done yesterday! All i did is add the forum in 'my forums'. Does this happen to you people as well?

Hi Sim085...How are you?
So look this:
http://forum.java.sun.com/thread.jspa?threadID=5148926&tstart=75
I don�t know if is what you want...but I hope in this^^
Ok man...If you have one example for help you is better.
[ ]

Client/server application using sockets

Hi there,
I'm trying to create a client/server application using sockets where the client has a GUI of a membership application form for some sort of club. Basically, the user will enter their name, address, membership no. etc in to various Jtext fields and then press a JButton to submit these details to the server. The server will then hopefully just dump these details to a text file.
Can anyone give me any examples, ideas on how to start, links etc.
Thanks v. much in anticipation,
Nick

Take a browse of the tutorial on sockets: http://java.sun.com/docs/books/tutorial/networking/sockets/clientServer.html

Can i use forms 9i or 10g for client/server applications

Right now, we are using oracle 9i DB and developer suite 10g. I have to build a client/server application. In one of the OTN articles, it says that from forms 9i onwards, it's not supporting client/server applications. Do i have to use 6i for this.
Thank You.
Sree.

That's right. Only web deployment is support from 9i onwards. Bad decision since Oracle seems to ignore their customer's view

Can't find the security tab for group in Windows server 2012

can't find the security tab for group in Windows server 2012
but I can find it in Windows 2008 R2
so how to display the security tab for group in 2012?
Please click the Mark as Answer button if a post solves your problem!

Click on the View menu and ensure that "Advanced Features" is enabled/selected.
Enfo Zipper
Christoffer Andersson – Principal Advisor
http://blogs.chrisse.se - Directory Services Blog

Problem using the File Dialog Box in a Client/Server application

I am developping a client-server application using Labview 5.1 . The application on the server acquires data from some instruments and saves it on file, while the application on the clients displayes such acquired data. For doing this I call some routines on the server via the "Open Application vi" (remote connection). All goes well except when I open on the server the "File Dialog Box vi" : in this case the application on the clients is blocked (is blocked the execution of the called vi on the server). Only when
the File Dialog Box on the server is closed, the execution of the called vi on the server starts again.
I need to use the File Dialog Box on the server, but I don' t want to stop at the same time
the clients !!
I need help for resolving such problem.
Many thanks in advance !!!

Hi!
waldemar.hersacher wrote:
"It seems that the VIs called by the clients are running in the user interface thread.
A call to the file dialog box will call a modal system dialog. So LV can't go on executing VIs in the user interface thread."
Are you sure? I think, that File Dialog, called by LabVIEW File Dialog from Advanced File Functions Palette doesn't blocking any cycles in subVI, which running in UI Thread. Look in my old example (that was prepared for other topic, but may be good for this topic too).
2 linus:
I think, you must a little bit reorganize you application for to do this. You must put your File Dialog into separated cycle. This cycle, of course, will be blocked when File Dialog appear on the screen. But other cy
cle, which responsible for visualization will run continuosly at the same time...
Attachments:
no_block_with_file_open_dialog.zip ‏42 KB

Client server application using CORBA

Hi
I have a basic client server application running using CORBA/idl where the client starts up and the server says hello back to the client. I have figured out the basics but would like some help with these small problems.
When I start the client, the server says hello. Thats OK. Now I want the client to start a simple java app (called c:\test.java - it works) that I created before. How?
The next bit is when I close down the app "test" that I start, I want the server to realise that its closing and simply say goodbye on the client. How?
If anybody can help me, I'd appreciate it.
Thanks for your time,
Shaun

hi,
to my knowledge, you will have to define a method in idl file and in your client, which server invocates(saying good bye etc) before shutting down..
ls.

[Request For Help] How To Send Email Midlet Using Secure Socket ?

Hello, this is the first time i ask for help to forum.sun.com.
i try to make secure connection for send email from MIDlet. Maybe you can check to my code :
EmailMidlet.java
import javax.microedition.midlet.MIDlet;
import javax.microedition.midlet.MIDletStateChangeException;
import javax.microedition.lcdui.;
public class EmailMidlet extends MIDlet implements CommandListener{
Display display = null;
// email form fields
TextField toField = null;
TextField subjectField = null;
TextField msgField = null;
Form form;
static final Command sendCommand = new Command("send", Command.OK, 2);
static final Command clearCommand = new Command("clear", Command.STOP, 3);
String to;
String subject;
String msg;
public EmailMidlet() {
display = Display.getDisplay(this);
form = new Form("Compose Message");
toField = new TextField("To:", "", 50, TextField.EMAILADDR);
subjectField = new TextField("Subject:", "", 15, TextField.ANY);
msgField = new TextField("MsgBody:", "", 90, TextField.ANY);
public void startApp() throws MIDletStateChangeException {
form.append(toField);
form.append(subjectField);
form.append(msgField);
form.addCommand(clearCommand);
form.addCommand(sendCommand);
form.setCommandListener(this);
display.setCurrent(form);
public void pauseApp() {
public void destroyApp(boolean unconditional) {
notifyDestroyed();
public void commandAction(Command c, Displayable d) {
String label = c.getLabel();
if(label.equals("clear")) {
destroyApp(true);
} else if (label.equals("send")) {
to = toField.getString();
subject = subjectField.getString();
msg = msgField.getString();
EmailClient client = new EmailClient(this,"[email protected]", to, subject, msg);
client.start();
}and EmailClient.java
import javax.microedition.io.;
import javax.microedition.lcdui.;
import java.io.;
import java.util.Date;
public class EmailClient implements Runnable {
private EmailMidlet parent;
private Display display;
private Form f;
private StringItem si;
private SecureConnection sc; //SSL
private InputStream is;
private OutputStream os;
private String smtpServerAddress = "smtp.gmail.com"; //SSL
String from;
String to;
String subject;
String msg;
public EmailClient(EmailMidlet m, String from, String to, String subject, String msg) {
parent = m;
this.from = from;
this.to = to;
this.subject = subject;
this.msg = msg;
display = Display.getDisplay(parent);
f = new Form("Email Client");
si = new StringItem("Response:" , " ");
f.append(si);
display.setCurrent(f);
public void start() {
Thread t = new Thread(this);
t.start();
public void run() {
try {
//SSL
sc = (SecureConnection)
Connector.open("ssl://"smtpServerAddress":465"); //smtp with SSL port 465
sc.setSocketOption(SocketConnection.LINGER, 5);
is = sc.openInputStream();
os = sc.openOutputStream();
os.write(("HELO there" "\r\n").getBytes());
os.write(("EHLO" "\r\n").getBytes());
os.write(("auth login" "\r\n").getBytes());
os.write(("dHVnYXNha2hpci50cmlhZGl0eWFAZ21haWwuY29t" "\r\n").getBytes());
os.write(("dGEuZW1haWxjbGllbnQ=" "\r\n").getBytes());
os.write(("MAIL FROM:<">\r\n").getBytes());
os.write(("RCPT TO:<">\r\n").getBytes());
os.write("DATA\r\n".getBytes());
// stamp the msg with date
os.write(("Date: " new Date() "\r\n").getBytes());
os.write(("From: "+from"\r\n").getBytes());
os.write(("To: "to"\r\n").getBytes());
os.write(("Subject: "subject"\r\n").getBytes());
os.write((msg+"\r\n").getBytes()); // message body
os.write(".\r\n".getBytes());
os.write("QUIT\r\n".getBytes());
StringBuffer sb = new StringBuffer();
int ch = 0;
while((ch = is.read()) != -1) {
sb.append((char) ch);
si.setText("SMTP server response - " + sb.toString());
} catch(IOException e) {
e.printStackTrace();
Alert a = new Alert
("TimeClient", "Cannot connect to SMTP server. Ping the server to make sure it is running...", null, AlertType.ERROR);
a.setTimeout(Alert.FOREVER);
display.setCurrent(a);
} finally {
try {
if(is != null) {
is.close();
if(os != null) {
os.close();
if(sc != null) {
sc.close();
} catch(IOException e) {
e.printStackTrace();
public void commandAction(Command c, Displayable s) {
if (c == Alert.DISMISS_COMMAND) {
parent.notifyDestroyed();
parent.destroyApp(true);
} When I try to debug project from netbeans, i found this error :
Starting emulator in debug server mode on port 2668
Connecting to 127.0.0.1 on port 2800
nbdebug:
Waiting for debugger on port 2668
Waiting for KVM...
Running with storage root temp.SonyEricsson_JP8_128x160_Emu10
KdpDebugTask connecting to debugger 1 ..
Running with locale: Indonesian_Indonesia.1252
Connected to KVM
Connection received.
Attached JPDA debugger to localhost:2668
java.io.IOException: error 10054 during TCP read +
at com.sun.midp.io.j2me.socket.Protocol.nonBufferedRead(Protocol.java:299)+
at com.sun.midp.io.BufferedConnectionAdapter.readBytes(BufferedConnectionAdapter.java:99)+
at com.sun.midp.io.BaseInputStream.read(ConnectionBaseAdapter.java:582)+
at com.sun.midp.ssl.Record.rdRec(+41)+
at com.sun.midp.ssl.Record.rdRec(+5)+
at com.sun.midp.ssl.In.refill(+18)+
at com.sun.midp.ssl.In.read(+29)+
at EmailClient.run(EmailClient.java:74)+
Execution completed.
5145824 bytecodes executed
9258 thread switches
1762 classes in the system (including system classes)
0 dynamic objects allocated (0 bytes)
0 garbage collections (0 bytes collected)
debug:
BUILD SUCCESSFUL (total time: 4 minutes 34 seconds)
Regard
Littlebro

Don't multipost and don't use the browser's back button to edit your posts as that creates multiple postings. I've removed the other thread you started with the same questio.
Also, don't post to long dead threads. I've blocked your post and locked the thread you resurrected.
db

Using secure tranport for making ssl connection with server using iPhone

HI all,
I need to estabilish a secured connection using tcp with sslv3 to the server. I tried using
[inputStream setProperty:NSStreamSocketSecurityLevelKey forKey:NSStreamSocketSecurityLevelSSLv3];
[outputStream setProperty:NSStreamSocketSecurityLevelKey forKey:NSStreamSocketSecurityLevelSSLv3];
I have explained the problem in detail in the following link
http://www.iphonedevsdk.com/forum/iphone-sdk-development/25721-creating-ssl-conn ection-using-sockets.html
But it makes only a tcp connection wth the server and the server sends the "Connection Reset by peer " error.
So I have planned to use Secure Tranport. But i didnt find a suitable sample code in the internet. I found a sample in apple 's docs. But thats too confusing. Any sample code available for making tcp with ssl connection with the server ????
Regards,
Mohammed Sadiq.

You must select if you use certificates for the SSL.
If you are not, here is an example
// server is the ip address for the server and hostport the port to use
CFReadStreamRef readStream = NULL;
CFWriteStreamRef writeStream = NULL;
CFStreamCreatePairWithSocketToHost(kCFAllocatorDefault, (CFStringRef ) server, hostport, &readStream, &writeStream);
if (readStream && writeStream) {
CFReadStreamSetProperty(readStream, kCFStreamPropertyShouldCloseNativeSocket , kCFBooleanTrue);
CFWriteStreamSetProperty(writeStream, kCFStreamPropertyShouldCloseNativeSocket, kCFBooleanTrue);
iStream = (NSInputStream *)readStream;
[iStream retain];
[iStream setDelegate:self];
oStream = (NSOutputStream *)writeStream;
[oStream retain];
[oStream setDelegate:self];
if (Iwill_use_ssltoday == true)
int res1 = [iStream setProperty:NSStreamSocketSecurityLevelNegotiatedSSL forKey:NSStreamSocketSecurityLevelKey];
int res2 = [oStream setProperty:NSStreamSocketSecurityLevelNegotiatedSSL forKey:NSStreamSocketSecurityLevelKey];
NSLog(@"SEC TEST %d %d",res1,res2);
NSDictionary *settings = [[NSDictionary alloc] initWithObjectsAndKeys:
[NSNumber numberWithBool:YES], kCFStreamSSLAllowsExpiredCertificates,
[NSNumber numberWithBool:YES], kCFStreamSSLAllowsAnyRoot,
[NSNumber numberWithBool:NO], kCFStreamSSLValidatesCertificateChain,
kCFNull,kCFStreamSSLPeerName,
// kCFStreamSocketSecurityLevelTLSv1, kCFStreamSSLLevel,
nil];
CFReadStreamSetProperty((CFReadStreamRef)iStream, kCFStreamPropertySSLSettings, (CFTypeRef)settings);
CFWriteStreamSetProperty((CFWriteStreamRef)oStream, kCFStreamPropertySSLSettings, (CFTypeRef)settings);
[iStream scheduleInRunLoop:[NSRunLoop currentRunLoop] forMode:NSDefaultRunLoopMode];
[iStream open];
[oStream scheduleInRunLoop:[NSRunLoop currentRunLoop] forMode:NSDefaultRunLoopMode];
[oStream open];
if (readStream)
CFRelease(readStream);
if (writeStream)
CFRelease(writeStream);

New Hard Drive- Should I use Time Machine for "fresh" install?

I have a first generation Early 2008 MacbookPro. Warranty just ended and I want to replace the hard drive w/ the Seagate Momentus XT Hybrid. I'm getting a bunch of spin wheel action and things are just running slowly/sluggish. I'm questioning whether or not I should just do a real "fresh" install and load my applications onto the new drive or use TimeMachine. If I use TM am I not adding all the stuff/files that are not needed? Am I adding bloat that I've collected over the past couple of years? Is it better to start w/ a new clean operating system? I do have CS5 and some photo programs that I think I can reinstall. Anyway I wanted to get people's perspective.
Message was edited by: mikked

It's usually best to clean your system up, and deal with any problems before doing major surgery.
With any other scenario, if something goes wrong, how will you know what it was, much less how to fix it?
I'd start with this: [Intel-based Macs: Using Apple Hardware Test|http://support.apple.com/kb/HT1509].
Then Verify your internal HD, and repair your Time Machine drive, per #A5 in [Time Machine - Troubleshooting|http://web.me.com/pondini/Time_Machine/Troubleshooting.html] (or use the link in *User Tips* at the top of this forum).
Then run a +*Repair Permissions+* on your internal HD, via Disk Utility.
Then replace the drive, do a full system restore and run for a while to be sure the new drive and everything else is ok. See #14 in [Time Machine - Frequently Asked Questions|http://web.me.com/pondini/Time_Machine/FAQ.html] (or use the link in *User Tips* at the top of this forum), for details.
Then start deleting the apps and files you don't need.
Note that, unlike Windoze, leftover files and apps may take up a bit of space, but don't cause any performace problems, unless they're actually running.
The main problems with trying to transfer things selectively are:
Permissions. If you install OSX and set up a user account, that account, even if it has the same name, may not have permission to restore the files on your backups or other drives.
Applications. Simple apps can be transferred individually, such as by restoring from Time Machine. Complex ones usually can't, as their installers put other files in other places. If you don't know what and where they all are, and restore them, too, the app won't work properly, if at all. But if you have all the original discs (and serial numbers/purchase keys), you can just reinstall them.

Why do I have to use security code for wifi router each time I turn on iPad 3?

Why do I have to enter wifi security code for my router each time I turn on ipad3? I have checked all the settings I could but is this a router problem?

If you're hiding your network SSID and/or using WEP security, I think these can cause this problem. If you're hiding your SSID, there's really no point in doing that since there are ways people can easily see it if they're looking to do harm anyway. If you're using WEP security, consider changing to WPA2 which is much more secure than WEP.

Why do you have to use security questions for purchasing stuff from itunes

please make all apple products not use security questions to purchase stuff in the itunes store

If you mean that you've forgotten the answers to your security questions, then if youhave a rescue email address (which is not the same thing as an alternate email address) set up on your account then you can go to https://appleid.apple.com/ and click 'Manage your Apple ID' on the right-hand side of that page and log into your account. Then click on 'Password and Security' on the left-hand side of that page and on the right-hand side you should see an option to send security question reset info to your rescue email address.
If you don't have a rescue email address (you won't be able to add one until you can answer 2 of your questions) then see if this user tip helps : https://discussions.apple.com/docs/DOC-4551
e.g. you can try contacting iTunes Support : http://www.apple.com/support/itunes/contact/ - click on Contact iTunes Store Support on the right-hand side of the page, then Account Management , and then try Apple ID Account Security
or try ringing Apple in your country and ask to talk to the Accounts Security Team : http://support.apple.com/kb/HE57

Proper security structure for Single Sign on Server

We are all used to how we design security structure for vCenter Server if you have had an existing VMware environment prior to 5.1. Who should have administrative privileges in vCenter Server, what roles, permissions, and so on should be assigned to what users and groups - these questions have already been addressed in our current configuration.
Now Single Sign on introduces a significant new point of consideration for determining issues of access and authentication.
I'd like to get some ideas on how this should be handled. For example, should previous VMware administrators by definition become Single Sign on Administrators? Should the administrators of the Active Directory domain now start to get involved with the Single Sign on Server?
For example, Single Sign on now forces VMware administrators to configure things like:
-Password Complexity Policy for SSO
-Password Expiration for SSO
-Lockout Policy
We already probably have these things tightly controlled in AD and locked down with group policy, but you can't apply group policy directly to an SSO server and make it receive a GPO from Active Directory. (You can make the Windows OS that SSO is running on have a GPO applied, but it won't configure SSO itself, just the OS).
VMware admins are looking at a new set of questions relating to authentication and authorization. Someone has to have written something or will be writing something to help us get the big picture of what is changing with SSO if anything and how we need to look at SSO from a security design and best practices.
Should we just make existing vCenter Server admins SSO admins or do we need to take a step back and reconsider?

Hello,
Actually, yes. SSO is fairly robust in 5.5. It has a few limitations around email of expired passwords, but that is mainly because some people do not use them. I use SSO to provide the usernames and passwords for all my VMware vCenter and related product service accounts. I.e. an account for vdp, Horizon, vCops, Log Insight, etc. This is more about keeping systems segregated once more with no real need for AD for services. But AD via SSO is used by users.
Read the documentation, and determine how SSO fits into your current password policy and take a long hard look at your virtualization management environment. Is there a 1 service account per service talking directly to vCenter? If not, SSO can help you implement that. The key is to match its functionality to your security policy.
Best regards,
Edward L. Haletky
VMware Communities User Moderator, VMware vExpert 2009, 2010, 2011,2012,2013,2014
Author of the books 'VMWare ESX and ESXi in the Enterprise: Planning Deployment Virtualization Servers', Copyright 2011 Pearson Education. 'VMware vSphere and Virtual Infrastructure Security: Securing the Virtual Environment', Copyright 2009 Pearson Education.
Virtualization and Cloud Security Analyst: The Virtualization Practice, LLC -- vSphere Upgrade Saga -- Virtualization Security Round Table Podcast

Should i use secure sockets for my whole client/server application?

Similar Messages

Maybe you are looking for