What is best way to secure client/server communication?

Hi all, I have a question for you. What is the best method for ensuring a secure communication through a client/server stream socket implementation?
I currently have a server that talks to several clients for various tasks. I would like to make all communication between the server and clients secure. In other words when one of my clients accepts an incoming connection I would like to verify that the server is really who they are talking with, and also that the data that is being received is indeed not tampered with.
Is SSL the correct technology to use with this? And if so, what is the general outline of steps I need to follow to get an SSL connection? I mean do I need certificates and all that stuff?
Thanks in advance for any help you may be able to provide.

The more I look into SSL the more it appears it is only for web servers. My app is not web server based. Is SSL not the correct way to go on this then?

Similar Messages

  • Whats the best way to get the server name in a servlet deployed to a cluster?

              Hi,
              I have a servlet in a web application that is deployed to a cluster, just
              wondering what is the best way to get the name of the node that the server is
              running on at run time??
              Thanks
              

              Please try to modify the following code and test for your purpose: (check Weblogic
              class document for detail)
              import javax.naming.*;
              import weblogic.jndi.*;
              import weblogic.management.*;
              import weblogic.management.configuration.*;
              import weblogic.management.runtime.*;
              MBeanHome home = null;
                   try{
                        //The Environment class represents the properties used to create
                             //an initial Context. DEfault constructor constructs an Environment
                             //with default properties, that is, with a WebLogic initial context.
                             //If unset, the properties for principal and credentials default to
                             //guest/guest, and the provider URL defaults to "t3://localhost:7001".
                             Environment env = new Environment();
                             //Sets the Context.PROVIDER_URL property value to the value of
                             //the argument url.
                             if(admin_url!=null){
                                  env.setProviderUrl(admin_url);
                                  //Sets the Context.SECURITY_PRINCIPAL property to the value of
                                  //the argument principal.
                                  env.setSecurityPrincipal(username);
                                  //Sets the value of the Context.SECURITY_CREDENTIAL property to
                                  //the value of the argument cedentials
                                  env.setSecurityCredentials(password);
                                  //Returns an initial context based on the properties in an Environment.
                                  ctx = env.getInitialContext();
                             }else ctx = new InitialContext();
                             home = (MBeanHome) ctx.lookup(MBeanHome.ADMIN_JNDI_NAME);
                             ctx.close(); //free resource
                             // or if looking up a specific MBeanHome
                             //home = (MBeanHome) ctx.lookup(MBeanHome.JNDI_NAME + "." + serverName);
                             DomainMBean dmb = home.getActiveDomain(); //Get Active Domain
                             ServerMBean[] sbeans = dmb.getServers(); //Get all servers
                             if(sbeans!=null){
                                  for(int s1=0; s1<sbeans.length; s1++){
                                       String privip = sbeans[s1].getListenAddress();
                                  sbeans[s1].getName();
                             sbeans[s1].getListenPort();
                                                 WebServerMBean wmb = sbeans[s1].getWebServer();
                   }catch(Exception ex){
              "Gao Jun" <[email protected]> wrote:
              >Is there any sample code? Thanks
              >
              >Best Regards,
              >Jun Gao
              >
              >"Xiang Rao" <[email protected]> wrote in message
              >news:[email protected]...
              >>
              >> Sure. You can use the Weblogic management APIs to query ServerBean.
              >>
              >>
              >> "Me" <[email protected]> wrote:
              >> >
              >> >Thanks for your reply, i was hoping to find a better way for example
              >> >a class in
              >> >weblogic API.
              >> >
              >> >Thanks
              >> >
              >> >"Xiang Rao" <[email protected]> wrote:
              >> >>
              >> >>Physical: InetAddress.getLocalHost().getHostName()
              >> >>Weblogic: System.getProperty("weblogic.Name");
              >> >>
              >> >>
              >> >>"Me" <[email protected]> wrote:
              >> >>>
              >> >>>Hi,
              >> >>> I have a servlet in a web application that is deployed to a
              >cluster,
              >> >>>just
              >> >>>wondering what is the best way to get the name of the node that
              >the
              >> >>server
              >> >>>is
              >> >>>running on at run time??
              >> >>>
              >> >>>Thanks
              >> >>
              >> >
              >>
              >
              >
              

  • Best way to secure wireless?

    I'll be getting a MacBook Pro and wireless broadband from Sky very soon and I was wondering what the best ways of securing your wireless are.I only want the people in my home to use it, not the neighbours.
    Thanks

    In your router be sure to turn on security using WPA2. You can add an additional level of security if the router supports it by creating a private or closed network in which only devices whose MAC addresses are included can join the network. If the router has its own built-in firewall turn it on as well if it isn't on by default. Consult the user manual for your router on how to configure these.

  • What is the best way to install client sccm 2012for all computer in my company

    in my company(25000 users) we have alot of branch(100-150 small Branch (every branch 50-100 users)) & 20 branch (100-100 users) .
    now only 11000 client in sccm2012
    What is the best way to install client for all computer
    Note that sccm 2012(1 primary site and 4 site system server every server (4 roles (management point  , Distribution Point  , site system , component server  ) ))
    and in boundaries i create boundaries but not for all branch and enable (boundary group for site assignment ) for every group 
    What is the best way to install client for all computer 
    thank u 

    You basically have 3 options, if you disregard a manual install.
    1. Client Push. Configure an account with local admin rights on the clients, and enable Site-Wide pushing of client.
    2. GPO. Import the GPO templates and enable the client to be installed that way
    3. Startup script.
    Of the 3, I usually go with a combination of client push and GPO.
    Take a look at http://technet.microsoft.com/en-us/library/gg712298.aspx for the complete documentation.
    FB

  • What is the best way to secure and harden a Macbook Pro against unwanted surveillance?

    What is the best way to secure and harden a Macbook Pro against unwanted surveillance? Tor, VPN, Little Snitch, etc. This would be for that latest version of Mavericks.

    djbabybokchoy wrote:
    Nothing specific, just speaking in general. Ex-wives, governments, bad guys...anyone really. I'm just looking to make my Mac a bit more private and secure, especially when on public networks.
    Governments and ex's will/may have recourse to the legal process (or in the case of the Gov they can choose to ignore the legal system if they feel like it) when they want to see something of yours, good luck hardening your Mac against that. The best way to avoid the possibility of snooping over public networks is to avoid them but if you can't then Kappy's suggestion will help.
    Strong passwords (everywhere) and don't use the same password in multiple locations.
    If you really want to secure your home wireless use Mac address connection authentication, do not allow unknown Mac addresses to connect. It's much stronger than a WPA password alone.

  • What is the best way to secure my iPad from ID theft

    What is the best way to secure iPad purchases from the app store?

    Technically, they will import off your flash drive....if it's one of the models that work (maybe 50% do) and if they meet the very rigid naming convention that the iPad insists on.
    It's far easier to use a computer then either sync them on via iTunes, e-mail them to yourself or upload them to something like dropox, then download them onto your device.

  • Whats the best way to go about load balancing Exchange 2010 CAS

    My server guys want to LB the Exchange 2010 client access servers, this will be the 7th Context on my Ace 4710.
    see table for ports that are used
    Port
    Usage
    25
    smtp
    80
    http various
    110
    POP3 clients
    135
    RPC end point mapper
    143
    imap4 clients
    443
    SSL various
    993
    secure imap 4 clients
    995
    secure pop3 clients
    6001
    rpc related outlook anywhere
    6002
    rpc related outlook anywhere
    6003
    rpc related outlook anywhere
    60200
    rpc CAS
    60201
    exchange address book service
    whats the best way of going about this?
    do I just LB the IP addresses of the Servers and ignore the ports?
    do i have to do anything special for ports 993 and 995 secure imap and pop?
    I am sure there are more questions I shold be asking!

    OK
    so If I have a single serverfarm with all services do I filter on  the virtual
    address something like below?
    class-map match-any EXCH_vip
    match virtual-address 172.16.93.2 tcp eq 25
    match virtual-address 172.16.93.2 tcp eq 80
    match virtual-address 172.16.93.2 tcp eq 110
    match virtual-address 172.16.93.2 tcp eq 135
    match virtual-address 172.16.93.2 tcp eq 143
    match virtual-address 172.16.93.2 tcp eq 443
    match virtual-address 172.16.93.2 tcp eq 993
    match virtual-address 172.16.93.2 tcp eq 995
    match virtual-address 172.16.93.2 tcp eq 6001
    match virtual-address 172.16.93.2 tcp eq 6002
    match virtual-address 172.16.93.2 tcp eq 6003
    match virtual-address 172.16.93.2 tcp eq 60200
    match virtual-address 172.16.93.2 tcp eq 60201

  • Whats the best way to go about learning C?

    I'm an almost complete noob when it comes to programming. I did write a few simple pascal programs about 10 years ago at school, thats about it.
    What I hope to achieve is (hopefully) not that complex, but I'm not sure where to start learning. My reason for wanting to learn is this: I really love MOC (music on console) but I ended up wanting a GUI player which still worked without the mouse. Every one I tried just isnt a patch on MOC, IMO, or just has one or other feature that doesnt work without a mouse. So it occurred to me, I have the source code for all these GUI players and the source for MOC, perhaps I can "modify" MOC and create a GUI version, or alternatively write some kind of front end to MOC.
    So far, I have had a go with Glade and Anjuta IDE, but my knowledge of C being almost nonexistent is making things tough. I'm probably trying to do it wrong anyway, my thought was to create a GUI in glade and make it call functions from the moc source... :?:
    So I need a crash course in C programming with Glade (I think?) and I'm not sure what the best way to proceed is.
    Any tips on how best to learn? I ask here because you all seem to be the most knowledgable group I can think of

    I'm not trying to discourage you, but the idea of Frankensteining all that C source into your own custom GUI music player is likely to cause nothing but hours of frustration. C is a great language for system programming, but for most application software it's far too low level and for most beginners it's far too dangerous (it lets you do bad things that can kill your app in dozens of intersting and extremely hard to debug ways).
    What I would suggest is that you first off break the problem in half. Use a client/server approach. The server does all the low-level heavy lifting of decoding/decompressing the music files and sending them to your audio subsystem. Something like Music Player Daemon (MPD) is perfect for the server part and is specifically designed to be controlled by a separate client program.
    Then all you have to do is write the GUI client of your dreams. For that I would recommend something like Python plus the GUI library of your choosing (Qt, GTK, wxWidgets, etc. all have nice Python bindings). Python is a far easier beginner language than C and can do much more work with much less code. You'll spend less time mucking around looking for memory leaks and invalid pointer references and more time actually making your GUI do useful work Oh, and there just happens to be a Python MPD client library so the task of communicating with the server gets even easier.

  • Whats the best way to create USER variable in BI Apps?

    I have just installled BI Apps and am trying to integrate EBS R12 with OBIEE 11g
    We have USER variable already defined in the BI Apps rpd.
    In EBS Security context init block i need to define USER variable, but when i define it... it says *'USER' has already been defined in the variable "Authentication"."USER"*
    Whats the best way to create USER variable for EBS Security Context init block?
    1) Delete the existing USER variable and then define a new one ( in this case all the places where USER variable is getting used in the rpd would become <missing>)
    And i was told that it should not be done.
    Let me know how can it be done.
    Thanks
    Ashish

    Disable existing Init block and then double click on USER variable and hit on NEW... button to create new Init block
    Thanks
    Edited by: Srini VEERAVALLI on May 1, 2013 4:18 PM

  • Whats the best way of sending files ?

    whats the best way of sending files (mp3's) to another computer over the internet, been doing it over msn, but takes a while, is there any other way?

    Have you thought of using an intermediary file server, e.g. yousendit.com, rapidshare.de, etc? Alternatively, you could do it the computer-to-computer route by enabling either 'Remote Login' or 'FTP Access' (Sharing preference pane) on one and connecting with the other.
    As an aside, what you're doing isn't illegal, is it? Pardon my bluntness.
    Yang

  • My business has 100 ipads 3g with no control at the moment - i need to now control the ipads - what apps they can use - and restict certian use on the ipads - whats the best way to do this - it will need to be done remotley.

    my business has 100 ipads 3g with no control at the moment - i need to now control the ipads - what apps they can use - and restict certian use on the ipads - whats the best way to do this - it will need to be done remotley.

    MDM  -- moble device management 
    MDMs
    Airwatch, Meraki, MobileIron, Profile Manager on OS X Server, or Zenprise
    For a comparison see this page:
    http://www.enterpriseios.com/wiki/Comparison_MDM_Providers
    Airwatch
      http://www.air-watch.com/
    Meraki -- A free MDM   [ expect lots of email and phone calls about upgrades ]
      http://www.meraki.com/products/systems-manager/
      https://discussions.apple.com/thread/4067210?tstart=0
      Good howto by Sergio Sosa.
      https://discussions.apple.com/thread/2594001?start=15&tstart=0
    MobileIron
      http://www.mobileiron.com/
    Profile Manager by Apple
    Zenprise
      http://www.zenprise.com/

  • Whats the best way to stream videos?

    whats the best way to stream video thru plumtree portal?What all it requires? (technology/application/server/plumtree development?)

    Hello Kuljit,
    For the windows platform you could set up Windows Media services. It can be configured to play all sorts of media files. I created a "radio station" portlet that multiple channels and from the portal I could select a drop down and the station would play that stream. I would make sure that media services are not being gatewayed and that anyone that can see your portal can see the videos. Here is my html that I made a portlet out of: This will not show the video window. You can increase the size of the object to show the video window with controls. Check out MSDN online for configuration of the <object>
    <FORM NAME="streamForm"> <INPUT NAME="btnPlay" TYPE="Button" VALUE="Play" onclick="MediaPlayer1.controls.Play();"> <INPUT NAME="btnStop" TYPE="Button" VALUE="Stop" onclick="MediaPlayer1.controls.stop();"> <select name="musicGroup" onChange="changeStream()"> <option value="">-- Select --</option> <option value="barenakedladies">Barenaked Ladies</option> <option value="pinkfloyd">Pink Floyd</option> </select> </FORM>
    <OBJECT CLASSID="clsid:6BF52A52-394A-11D3-B153-00C04F79FAA6" ID="MediaPlayer1" height="0" width="00"> <PARAM NAME="Name" VALUE="MediaPlayer1"> <param name="uiMode" value="invisible"> <PARAM NAME="TransparentAtStart" Value="true"> <PARAM NAME="AutoStart" Value="true"> <PARAM NAME="AnimationatStart" Value="false"> <PARAM NAME="ShowControls" VALUE="0"> <PARAM NAME="autoSize" Value="false"> <PARAM NAME="displaySize" Value="0"></OBJECT><script language="javascript">function changeStream(){ df = document.streamForm; if(df.musicGroup.selectedIndex != 0) {  MediaPlayer1.url = "mms://MBRUCELT-W3k/"+df.musicGroup[df.musicGroup.selectedIndex].value; } }</script>
    This works for the latest version of Window Media Player. The mms:// in my script is a call to Windows Media Services. That is the part that should be accessible from outside the portal.
    HTH,
    Michael [email protected]

  • HT3819 I have 2 Ipod touch's, one a 64gb and one an 8gb.  Whats the best way to use them both on the same itunes account?

    I have 2 Ipod touch's, one a 64gb and one an 8gb.  Whats the best way to use them both on the same itunes account?

    Click here for options.
    (64410)

  • One headphone does not work or works 50% of the time.  What is best way to resolve?

    one headphone does not work or works 50% of the time.  What is best way to resolve?

    First of all, I'd recomend resetting the iPod. Do this by pressing the 'Menu' and 'Center" buttons for 10 seconds or until the Apple logo appears.
    If this doesn't work, then it sounds like a hardware fault.
    To identify the issue, if you have one, try plugging the iPod into a speaker through the dock. If this works, then the issue is with the headphone jack. If not then the logic board is dead.  If the iPod is less than a year old, then it can be repaired by Apple for free. Just book an appointment for the Genius bar.
    If not then, you could see about sending it to an iPod Repair Company, such as my own. A replacement headphone jack would cost £30.00 in the UK, including next day delivery. Other companies you could try would beUKiPodRepairs, but we guarantee to beat any quote that you get.
    Hope that this helps,
    Mark Sweeney
    Dr Pod Founder

  • I am moving from PC to Mac.  My PC has two internal drives and I have a 3Tb external.  What is best way to move the data from the internal drives to Mac and the best way to make the external drive read write without losing data

    I am moving from PC to Mac.  My PC has two internal drives and I have a 3Tb external.  What is best way to move the data from the internal drives to Mac and the best way to make the external drive read write without losing data

    Paragon even has non-destriuctive conversion utility if you do want to change drive.
    Hard to imagine using 3TB that isn't NTFS. Mac uses GPT for default partition type as well as HFS+
    www.paragon-software.com
    Some general Apple Help www.apple.com/support/
    Also,
    Mac OS X Help
    http://www.apple.com/support/macbasics/
    Isolating Issues in Mac OS
    http://support.apple.com/kb/TS1388
    https://www.apple.com/support/osx/
    https://www.apple.com/support/quickassist/
    http://www.apple.com/support/mac101/help/
    http://www.apple.com/support/mac101/tour/
    Get Help with your Product
    http://docs.info.apple.com/article.html?artnum=304725
    Apple Mac App Store
    https://discussions.apple.com/community/mac_app_store/using_mac_apple_store
    How to Buy Mac OS X Mountain Lion/Lion
    http://www.apple.com/osx/how-to-upgrade/
    TimeMachine 101
    https://support.apple.com/kb/HT1427
    http://www.apple.com/support/timemachine
    Mac OS X Community
    https://discussions.apple.com/community/mac_os

Maybe you are looking for

  • ECC 6.0 installation error and disp+work.exe not up

    Hi guys,            I posted a message yesterday and reposting today to be readable            I in the middle of installation process. The system I am building Ecc 6.0 on windows 2003:oracle(Abab+Java). I am stuck in 90/96 step. this is the error me

  • How long is the life time of process scope variable ?

    Hi All, How long is the life time of process scope variable befoer it expires ? Is it the same with the life time of session scope ? How can we set the value in OAS when deployment ? Thank you, xtanto

  • Color gamma trouble when using external acer 223w monitor

    I have an MBP and I am connecting my Acer 223ww external monitor to it while I am at my desk. For some reason, I have noticed, the displays (both the MBP and Acer) will periodically, at what seems to be random intervals, give the appearance of a the

  • Why does pagemaker 7 on win xp box encrypt my exported PDF files

    I am using Pagemaker 7 on a Win XP box.  When I export to PDF, the document becomes encrypted when I have the settings for "Print".  I have checked my Distiller settings and there is nothing there to indcate encryption should occur.  I noticed the pr

  • Digital Photo Professional and .WAV Files

      Is there a way to get DPP to display and play .wav files created with a 1 Series camera?