7.5.4 Does anybody know a ORB vendor who provides a SSL functionality with their product?

 

Tom Damiano

(May, 1998): Iona Technologies supports SSL in their OTM product.

Rajeev Kumar Gupta

(May, 1998): IONA provides SSL support for Orbix.

William Edwards

(May, 1998): Visibroker has SSL support for both C++ and Java. There's a brief description of this on both the Visibroker for C++ and Visibroker for Java pages at: http://www.inprise.com/visibroker/products/.

Jose Ignacio Gijon

(May, 1998): Mico (http://diamant-atm.vsb.cs.uni-frankfurt.de/~mico/) support secure communication and authentication using SSL. Mico use SSLeay (http://www.psy.uq.oz.au/~ftp/Crypto/) to provide the secure socket layer. And both are free.

Marc Laukien

(July, 1998): The ORBacus SSL plug-in provides the necessary tools to develop and deploy secure C++ and Java CORBA applications using the Secure Sockets Layer (SSL) protocol. New applications can be written to take full advantage of SSL, and only a few minor modifications are necessary to enable security in existing ORBacus C++ and Java applications.

The ORBacus Open Communications Interface (OCI) provides the architectural framework that enabled the ORBacus SSL plug-in to be developed without any changes to the ORB core. The ORBacus SSL plug-in replaces the IIOP protocol with the SSLIOP protocol defined as part of the OMG security specification. This protocol is simply IIOP over a secure SSL channel. Applications can be SSL-enabled through the addition of a few simple API calls. The plug-in provides you with full control over the cipher suites used for client/server connection establishment. Furthermore, your applications can use any combination of secure and insecure connections, all under the complete control of the developer.

Other features of ORBacus SSL include:

• FREE for non-commercial use (see the ORBacus SSL Royalty-Free Public License Agreement for details)
• Available with COMPLETE SOURCE CODE
• Complete support for C++ and Java
• Uses OMG Security Service profile tags for compatibility with other SSL implementations
• Implemented as an ORBacus Open Communications Interface (OCI) plug-in
• Supported key exchange algorithms:
  • Diffie-Hellman and RSA
  • Symmetric encryption algorithms: RC4(40/128 bit), RC2(40 bit), IDEA(128 bit), DES (40/56/168 bit)
  • MAC calculation algorithms: MD5 and SHA
• User's manual and HTML API reference documentation
• Example programs

ORBacus SSL has been tested and is known to work on the following platforms:

• ORBacus SSL for C++:
  • SGI C++ 7.1 SGI Irix 6.2 or 6.3
  • SGI C++ 7.2 SGI Irix 6.2 or 6.3
  • SUN C++ 4.1 and 4.2 SUN Solaris 2.5
  • HP C++ A.01.12 HP-UX B.10.20
  • GNU C++ 2.7.2 Intel- or Sparc-based OS
  • EGCS C++ 1.0.x / GNU C++ 2.8.x Any supported OS
• ORBacus SSL for Java:
  • SUN's JDK 1.1.x or compatible

The ORBacus SSL 1.0 Preview Release, including all sources, can be downloaded from http://www.ooc.com/ssl/download.html. Should you have any problems compiling the sources, do not hesitate to ask us for assistance. Just send email to support@ooc.com.