All Packages  Class Hierarchy  This Package  Previous  Next  Index

Class sun.security.Login 

java.lang.Object
   |
   +----sun.security.Login
public final class Login
extends Object
This class is a wrapper around some other class's main(), and is used to initialize the auth context with basic data needed to do self and peer authentication using SSL. That is, it provides SSL-only login facilities ... as yet it provides no pluggable (like PAM) modules facilitating other sorts of OS login, or providing access to those secrets using storage devices such as smart cards.

It is expected that this class will evolve. For example, to work with tools such as HotJava, a TrustDecider capable of user interaction is required ... but the one currently installed does not support such interactions. Similarly, additional sorts of authentication may be needed in some environments, such as UNIX password authentication.

This version of this class is specific to the Java Web Server. It initializes only the sun.server.https package, and if that package is unavailable it does nothing except invoke the right main() method.

Method Index

o main(String[])
Takes two parameters, and passes the rest on to another program as described below.

Methods

o main 
 public static void main(String argv[])
Takes two parameters, and passes the rest on to another program as described below.

The first parameter is used to set up the authentication context so that SSL can be used; it is the name of a subclass of the AuthContext class, which knows how to acquire some set of authentication secrets including (usually) the passphrase used for access control to the key store.

At this time there is a simple policy for how to decide what sorts of certificate chains are accepted for peer authentication using SSL. Namely, the SimpleTrustDecider provides a static database of annotated certificates which are trusted for purposes of SSL authentication. This policy can be overridden using a system property as specified below.

The second parameter is the name of the class being used to run the program's main method. After setting up the authentication context by setting up access to the keystore, this program invokes this method, passing the rest of the command line parameters to it for interpretation.

The user.keystore system parameter is used to get the path to the keystore file. This holds a set of encrypted private keys, along with their associated certificate chains. If not set, it is assigned from value of the "user.home" directory with the file name "keys".

The user.trust-decider system parameter is used to specify what trust decider class is used. If not set, it defaults to the "SimpleTrustDecider" class.

See Also:
AuthContext, SimpleTrustDecider, KeyStore 
All Packages  Class Hierarchy  This Package  Previous  Next  Index