Pages

▼
Thursday, July 27, 2023

TLS 1.2, Server Name Indication (SNI) and SOAP via CXF

›
It seems that I am destined to become a deep expert in the vagaries of TLS these days.  My most recent challenge was in figuring out why Ser...
1 comment:
Thursday, July 13, 2023

Debugging TLS Protocol Failures in BC-FIPS and Spring Applications

›
Debugging TLS protocol failures can be a nightmare.  With JSSE, you can use the old standby java JVM option:      -Djavax.net.debug=ssl,hand...
Monday, July 10, 2023

Dynamically Reloading TLS Trust and Identity Material

›
Wouldn't it be nice if you didn't have to restart your server to dynamically update keys, certificates or trust stores?  I've sp...
1 comment:
Friday, June 30, 2023

Addressing technical challenges with BC-FIPS

›
Last week I talked about the requirements for implementing TLS and a certified encryption module (specifically Bouncy Castle FIPS or BC-FIP...
Thursday, June 22, 2023

TLS, FIPS and the Bouncy Castle Certified Encryption Module

›
Image Courtesy of Wikipedia History Becoming educated in a topic seems to offer opportunities to become yet further educated, or in other wo...
Tuesday, June 20, 2023

My HTI1 comments to @ONC_HealthIT

›
This is what I just submitted for HTI-1 comments.  It's a text file, not a PDF or Word document with a lovely cover letter.  ONC doesn...
Friday, June 2, 2023

HTI1 Robin's Eggs

›
For those who've been reading this blog for a decade or more, you probably know what a Robin's Egg is.  For those who don't, cl...