(July, 1998): The ORBacus SSL plug-in provides the necessary tools
to develop and deploy secure C++ and Java CORBA applications using the Secure
Sockets Layer (SSL) protocol. New applications can be written to take full advantage
of SSL, and only a few minor modifications are necessary to enable security
in existing ORBacus C++ and Java applications.
The ORBacus Open Communications Interface (OCI) provides the architectural framework
that enabled the ORBacus SSL plug-in to be developed without any changes to
the ORB core. The ORBacus SSL plug-in replaces the IIOP protocol with the SSLIOP
protocol defined as part of the OMG security specification. This protocol is
simply IIOP over a secure SSL channel. Applications can be SSL-enabled through
the addition of a few simple API calls. The plug-in provides you with full control
over the cipher suites used for client/server connection establishment. Furthermore,
your applications can use any combination of secure and insecure connections,
all under the complete control of the developer.
Other features of ORBacus SSL include:
- FREE for non-commercial use (see the ORBacus SSL Royalty-Free Public License
Agreement for details)
- Available with COMPLETE SOURCE CODE
- Complete support for C++ and Java
- Uses OMG Security Service profile tags for compatibility with other SSL implementations
- Implemented as an ORBacus Open Communications Interface (OCI) plug-in
- Supported key exchange algorithms:
- Diffie-Hellman and RSA
- Symmetric encryption algorithms: RC4(40/128 bit), RC2(40 bit), IDEA(128 bit),
DES (40/56/168 bit)
- MAC calculation algorithms: MD5 and SHA
- User's manual and HTML API reference documentation
- Example programs
ORBacus SSL has been tested and is known to work on the following platforms:
- ORBacus SSL for C++:
- SGI C++ 7.1 SGI Irix 6.2 or 6.3
- SGI C++ 7.2 SGI Irix 6.2 or 6.3
- SUN C++ 4.1 and 4.2 SUN Solaris 2.5
- HP C++ A.01.12 HP-UX B.10.20
- GNU C++ 2.7.2 Intel- or Sparc-based OS
- EGCS C++ 1.0.x / GNU C++ 2.8.x Any supported OS
- ORBacus SSL for Java:
- SUN's JDK 1.1.x or compatible
The ORBacus SSL 1.0 Preview Release, including all sources, can be downloaded
from http://www.ooc.com/ssl/download.html. Should you have any problems
compiling the sources, do not hesitate to ask us for assistance. Just send email
to support@ooc.com.