AppletTalk.com

talonx · Guest

Hello,
As far as I can make out from the CSIv2 specification it says that
enabling SSL has to be done by setting the appropriate tagged
components in the IOR. However most of the ORB's I've evaluated seem to
require separate configuration (vendor specific config files, etc).
In case of JacORB, for example, for two-way SSL it has to be turned
on on both client and server sides through config properties.
Internally JacORB does set the required tagged component - but my
concern is should not this be settable by me (the user) through an
IORInterceptor? If I do add an SSL_SEC_TRANS TC (and turn SSL on in the
config) it's ignored because JacORB already sets it own TC before this
interceptor is called - and hence _all_ communication is over SSL. This
causes a problem when I want to use non-SSL communication for some
other objects, in the same ORB.
So my question boils down to - Does the spec does or does not mandate
that secure transport enablement by the application developer is
through adding the required TaggedComponents (and not by changing a
config file)? Am I missing something here?
Thanks in advance.

Regards
Hrish