php-java-bridge-users Mailing List for PHP/Java Bridge

> ... contains sensitive info

Okay. I will add a new JAVA_HOST syntax for PHP/Java Bridge version 6.1.1:

  scheme://host:port

Example which connects to the back end
https://timon:8443/JavaBridge/servlet.phpjavabridge:

<?php
define ("JAVA_HOSTS", "ssl://timon:8443");
define ("JAVA_SERVLET", "/JavaBridge/servlet.phpjavabridge");
require_once("java/Java.inc");

...
?>


As a workaround please edit Java.inc, search for fsockopen and change
the fsockopen call to:

fsockopen("ssl://...");


Regards,
Jost Bökemeier


On 3/19/10, php...@li...
<php...@li...> wrote:
> On 18/03/2010 16:54, php...@li... wrote:
>> Hi Ian,
>>
>> if I understand you correctly, you want to tunnel the PHP/Java Bridge
>> protocol through a secure channel:
>>
>> inet client <--HTTP--> apache/php <--PJB over SSL--> tomcat/java
>>
>> This feature can be implemented, of course. But I don't understand why
>> this could be useful. Isn't it possible to use two physical network
>> interfaces?  One for the HTTP communication and another one for the
>> PJB communication?
>>
>>
>> Regards,
>> Jost Bökemeier
>
> Hi,
>
> The tomcat server will used to access a Java SDK which implements a
> particular authorisation scheme for a bank (I can't go into too much
> detail).
>
> This set of functions will be accessed by multiple PHP servers all
> running customer facing websites.  The PJB <--> Tomcat communication
> will contains sensitive info (cc numbers etc.) and will actually run
> over a separative back end network. But even so I would like it
> encrypted just in case. It will also keep the PCI auditors happy.
>
> Regards
>
> Ian
> --
>
>
>
>
>
> ------------------------------------------------------------------------------
> Download Intel&#174; Parallel Studio Eval
> Try the new software tools for yourself. Speed compiling, find bugs
> proactively, and fine-tune applications for parallel performance.
> See why Intel Parallel Studio got high marks during beta.
> http://p.sf.net/sfu/intel-sw-dev
> _______________________________________________
> php-java-bridge-users mailing list
> php...@li...
> https://lists.sourceforge.net/lists/listinfo/php-java-bridge-users
>

On 18/03/2010 16:54, php...@li... wrote:
> Hi Ian,
> 
> if I understand you correctly, you want to tunnel the PHP/Java Bridge
> protocol through a secure channel:
> 
> inet client <--HTTP--> apache/php <--PJB over SSL--> tomcat/java
> 
> This feature can be implemented, of course. But I don't understand why
> this could be useful. Isn't it possible to use two physical network
> interfaces?  One for the HTTP communication and another one for the
> PJB communication?
> 
> 
> Regards,
> Jost Bökemeier

Hi,

The tomcat server will used to access a Java SDK which implements a
particular authorisation scheme for a bank (I can't go into too much
detail).

This set of functions will be accessed by multiple PHP servers all
running customer facing websites.  The PJB <--> Tomcat communication
will contains sensitive info (cc numbers etc.) and will actually run
over a separative back end network. But even so I would like it
encrypted just in case. It will also keep the PCI auditors happy.

Regards

Ian
--