Security in JDK 1.2 : Table of Contents

Security Features Overview

Quick Tour of Controlling Applets

Observe Applet Restrictions
Set up a Policy File to Grant the Required Permission

Start Policy Tool
Grant the Required Permission
Save the Policy File

See the Policy File Effects

Quick Tour of Controlling Applications

Observe Application Freedom
See How to Restrict Applications
Set up the Policy File to Grant the Required Permissions

Open the Policy File
Grant the Required Permissions
Save the Policy File

See the Policy File Effects

API and Tools Use for Secure Code and File Exchanges

Signing Code and Granting It Permissions [Tools]

Steps for the Code Signer

Download and Try the Sample Application
Create a JAR File Containing the Class File
Generate Keys
Sign the JAR File
Export the Public Key Certificate

Steps for the Code Receiver

Observe the Restricted Application
Import the Certificate as a Trusted Certificate
Set up a Policy File to Grant the Required Permission

Start Policy Tool
Specify the Keystore
Add a Policy Entry with a SignedBy Alias
Save the Policy File

See the Policy File Effects

Exchanging Files [Tools]

Steps for the Contract Sender

Create a JAR File Containing the Contract
Generate Keys
Sign the JAR File
Export the Public Key Certificate

Steps for the Contract Receiver

Import the Certificate as a Trusted Certificate
Verify the JAR File Signature

Generating and Verifying Signatures [API]

Generating a Digital Signature

Prepare Initial Program Structure
Generate Public and Private Keys
Sign the Data
Save the Signature and the Public Key in Files
Compile and Run the Program

Verifying a Digital Signature

Prepare Initial Program Structure
Input and Convert the Encoded Public Key Bytes
Input the Signature Bytes
Verify the Signature
Compile and Run the Program

Weaknesses and Alternatives

Implementing Your Own Permission

TerrysGame
The HighScore Class
The HighScorePermission Class
A Sample Policy File
Putting It All Together

Steps for the HighScore Developer (Chris)
Steps for the TerrysGame Developer (Terry)
Steps for a User Running TerrysGame (Kim)

Summaries

Glossary
API Summary

What Does the JDK Security API Provide?
API Classes and Interfaces

Tools Summary
Security-related Files Summary