support: Customer Portal
Focused on delivering choice, investment protection and flexibility to organizations with valuable COBOL assets
 

Veryant Knowledge Base
Home > All Categories > isCOBOL General > Did you know you can encrypt the communication with the isCOBOL Server?
Question Title Did you know you can encrypt the communication with the isCOBOL Server?

isCOBOL Server can be configured to encrypt the data transmitted on the TCP/IP connection. isCOBOL Server relies on JSSE (JavaTM Secure Socket Extension) for communication. In the Sun/Oracle version you need to also get the JCE (JavaTM Cryptography Extension) in order to get unlimited strength cryptography. In the JSSE specification, certificates are stored in a file called keystore. Thus you need to have a keystore with a key entry (with both private and public keys) on the server side, and a trusted certificate entry on the client side. JavaTM supports the JKS (JavaTM KeyStore) format, and it may contain both key entries and trusted certificate entries. In order to handle this file format, the command line program keytool is provided with the standard JDK distribution. The keytool program is located in the bin directory under the JavaTM Home. For the sake of simplicity let's assume that we can invoke keytool supplying only the name. To create a new keystore from scratch, containing a single self-signed Certificate, execute the following from a terminal command line:

keytool -genkeypair -alias iscobol -keyalg RSA -keystore myKeystore

After executing this command, you will first be prompted for the keystore password. You can choose any password you like, at least 6 characters long. Then you will be asked about general information on this Certificate, such as company, contact name, and so on. This information will be displayed to users who attempt to access a secure page in your application, so make sure that the information provided here matches what they will expect. Finally, you will be prompted for the key password, which is the Certificate specific password (as opposed to any other Certificates stored in the same keystore file). The keytool prompt will tell you that pressing the ENTER key automatically uses the same password for the key as the keystore. The JSSE framework, and isCOBOL by consequence, requires these passwords to be identical. If everything was successful, you now have a new file, named myKeystore under the working directory. Now you can establish a secure connection between client and server as follows. In the server configuration file set:

iscobol.net.ssl.key_store=/path/to/myKeystore
iscobol.net.ssl.key_store_password={choosen-password}

In the client configuration file set:

iscobol.net.ssl.trust_store=/path/to/myKeystore
iscobol.net.ssl.trust_store_password={choosen-password}
Authored by: Veryant Support This question has been viewed 391 times so far.
Click Here to View all the questions in isCOBOL General category.
File Attachments File Attachments
There are no attachment file(s) related to this question.
How helpful was this article to you?
User Comments User Comments Add Comment
There are no user comments for this question. Be the first to post a comment. Click Here
Related Questions Related Questions
  1. How do I compile for compatibility with older versions of Java?
  2. When can I get the "java.net.SocketException: Permission denied:connect" message? And how can it be avoided?
  3. How do I migrate indexed files to a format that is supported by isCOBOL?
  4. How do I resolve "code too large for try statement" errors?
  5. How do I prevent hackers from decompiling Java class files to reverse engineer my COBOL application?
  6. What Micro Focus library routines are supported?
  7. Do I need to worry about the compile warning "Note: MYPROG.java uses unchecked or unsafe operations?"
  8. How can I read an Excel spreadsheet from COBOL?
  9. Does SET ADDRESS OF X TO Y work?
  10. How do I create a desktop shortcut icon to launch my program?
  11. Is there currently a way to debug COBOL and Java source together?
  12. What tools are available for automated functional (regression) testing of a COBOL application?
  13. Where can I obtain a copy of the ANSI 2002 COBOL standard?
  14. How do I increase the maximum Java heap size when compiling?
  15. How do I set up isCOBOL to access Vision files?
  16. How do I resolve a compile error on PIC X(2) USAGE COMP-5?
  17. Should I use JISAM or isCOBOL ISAM Server (c-treeACE)?
  18. What is the best way to control Microsoft Word?
  19. How can I package my application and execute it in a JAR file?
  20. How would I create my own CBL_ALLOC_MEM and CBL_FREE_MEM routines?
  21. How can I use the F10 key in my application without it changing the keyboard focus?
  22. What is the recommended method for specifying isCOBOL framework properties?
  23. How do I get my screens to be the same size and spacing as when I run with ACUCOBOL?
  24. How do I turn on debug trace to produce a log file?
  25. Where can I find more information on A$ENCRYPT and A$DECRYPT?
  26. Does isCOBOL work with Flexus COBOL sp2?
  27. How do I use conditional compilation?
  28. Why do I get a compile error "--S: Invalid open mode" on an OPEN I-O of an ORGANIZATION LINE SEQUENTIAL file?
  29. How do I change the icon in the upper left corner of the Window?
  30. What is the behavior difference of STOP THREAD?
  31. What are the defaults for the DATE-ENTRY control DISPLAY-FORMAT property and format styles?
  32. How do I select 11x17 paper size using WIN$PRINTER?
  33. Why do I get the error message "Native call not found" and how do I fix the problem?
  34. Sending SMTP mail
  35. How do I specify properties or a properties file on the command line?
  36. How would I create my own CBL_CHECK_FILE_EXIST routine?
  37. How does a program detect at runtime whether it is running standalone GUI, thin client or with Web Direct 2.0?
  38. How do I compile fixed (ANSI) format source that COPYs terminal format source or vice versa?
  39. What are the key technical advantages of isCOBOL?
  40. Can Veryant recommend a good Web site to find 3rd party JavaBeans?
  41. What compile option should I use for ICOBOL compatibility?
  42. Can isCOBOL access a DLL or .so that is in a JAR file?
  43. Why do I get the error java.lang.NoClassDefFoundError: com/iscobol/rts_n/StopRunException?
  44. Does isCOBOL run on Linux on System z?
  45. How do I write my own replacement for a C$ library routine?
  46. How do I print to a spooler in Unix?
  47. What is the easiest and/or best way to convert a legacy text-based user interface to a web front end?
  48. Is the isCOBOL 2009 SP1 release intended to deploy mainframe applications over the cloud? Or is it an integration mechanism for bringing in cloud data and apps?
  49. Is there any equivalent to COPY RESOURCE?
  50. What algorithm does isCOBOL use to load framework properties (runtime config variables)?
  51. How do I set iscobol.file.index.FileName with variable file name assignments?
  52. Where can I learn more about Classpath, the Java class loader, JDK tools and utilities?
  53. How do I specify which file status codes I want to use?
  54. Does isCOBOL APS run on z/OS?
  55. How do I get more information when I get java.lang.reflect.InvocationTargetException?
  56. How do I configure file locations with environment variables?
  57. How can I make my isCOBOL program to be called instead of a C routine when both have the same name?
  58. Can I use directory paths in CALL names?
  59. I've heard there is a problem passing pointers to C functions. What is it?
  60. Can you derive isCOBOL object classes from Java and vice versa?
  61. How can I tell what changes were made in the isCOBOL latest update?
  62. Is your runtime library backward compatible?
  63. What is the best way to profile an isCOBOL program?
  64. What should I use for USAGE HANDLE items instead of NULL?
  65. How do I suppress multiple reserved words with the -rw compiler option?
  66. Is there a way to have single set of source code that will compile with both ACUCOBOL and isCOBOL?
  67. Can the file system (iscobol.file.index) be set programmatically?
  68. Does isCOBOL support Crystal Reports or other Report Writers?
  69. Does isCOBOL support C$REDIRECT?
  70. Is there any way to use isCOBOL with SCO 5.0.6 (JDK 1.3)?
  71. Is isCOBOL backward compatible?
  72. How do I determine what properties are set?
  73. How can I monitor a jvm started on a remote computer box?
  74. Why do I get the error message “java.lang.UnsatisfiedLinkError: no ### in java.library.path?
  75. How can I avoid the "java.lang.OutOfMemoryError: PermGen space" error?
  76. Can I call an RMCobol program passing parameters to it?
  77. Why do I get the error message "java.lang.ArrayIndexOutOfBoundsException" ?
  78. Why do I get the error message "java.lang.NullPointerException" ?
  79. How can I avoid, in execution, the "java.lang.OutOfMemoryError: Java heap space" error?
  80. What does mean the error NO X11 DISPLAY?
  81. I still get the error : "Missing License: The license key is missing, invalid or has expired!" I can't figure out why
  82. How do I resolve the error "java.lang.NoClassDefFoundError" or "java.lang.ClassNotFoundException"?
  83. Why do I get the error "Could not load the main class" ?
  84. Is there any way to direct the output from the “Print Screen” keyboard key directly to a printer?
  85. Did you know how to write custom information inside isCOBOL log file?
  86. Did you know that in a string you can replace a text with a new one with a different length by using the C$REPLACE_ALL routine?
  87. Did you know you could set properties to configure the PDF'S generation while printing?
Article Information Additional Information
Article Number: 282
Created: 2016-10-14 8:35 AM
Rating: No Rating
 
Article Options Article Options
Print Question Print this Question
Email Question Email Question to Friend
Export to Adobe PDF Export to PDF File
Export to MS Word Export to MS Word
Bookmark Article
Subscribe to Article Subscribe to Article
 
Search Knowledge Base Search Knowledge Base



  Home  |   About Us   |  Contact  |   Legal   |  Privacy   |  Press
 

© Veryant - All Rights Reserved
Veryant and isCOBOL are trademarks or registered marks of Veryant in the United States and other countries. All other marks are the property of their respective owners.