Newbie questions: javadoc, secure transport, ant & gcj, library build structure

Tue Sep 2 11:44:00 GMT 2003

-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160
hello Paul,
(i'm answering only the GNU Crypto-related questions).
On Tue, 2 Sep 2003 09:15 pm, Paul Gear wrote:
> ...
> 2. What is the recommended approach for providing secure TCP
> connections in client/server applications?...
>> The GNU Crypto project seems to offer some good features as well, but
> from the documentation i read there it wasn't clear to me whether it
> provided something that would work with Sun's JDK. (I really need my
> software to work with both gcj and JDK.)

GNU Crypto works with both. with the JDK 1.4, you need to include the 
JCA/JCE framework extension (javax-crypto.jar) provided by GNU Crypto 
on the java command line as part of the bootclasspath option.
for secure exchange over TCP, GNU Crypto currently supports SASL (Simple 
Authentication and Security Layer) mechanisms, with an implementation 
of SRP (Secure Remote Password). soon the CVS will contain 
implementations of key agreements which would allow two parties to 
share a common secret they can use to secure subsequent communications 
between them. Diffie-Hellman, ElGamal and SRP-6 will be supported. 
those are also part of the upcoming version 2 of the library.
> ...
> 4. These ugly makefiles currently generate shared libraries that are
> then referenced explicitly where they are required. The
> documentation indicates that this can be more or less automatic. Are
> there any working examples you can point me to which demonstrate
> this?

look in the GNU Crypto project. you can build the jars as well as the 
shared libraries. an ANT build.xml is provided for working with ANT in 
addition to the usual make files.
cheers;
rsn
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)
Comment: Que du magnifique
iD8DBQE/VIJ6+e1AKnsTRiERA75UAKDKlF6OMcSvx4Nwf0nf5ITWnRzXWgCfZwQz
FonhbN76ZAwhaoSmjkHAj0U=
=2Oj5
-----END PGP SIGNATURE-----