I have windows C/C++ SSL client implemented using SSPI SChannel security package. This SSPI is token based API. I want to create a java SSL server which can communicate with the above windows client. Is it possible to create SSL server using GSS-API of java.
I tried to communicate JSSE SSL server with windows SSPI client. It failed as JSSE is socket based and SSPI is token based.
not correct. Numerous people have written numerous implementations that use the Windows SSPI interface to communicate with standard SSL servers that use standard X509 certificate-based authentication. Including, of course, Internet Explorer. The JSSE SSL server implementation works just fine with Windows schannel clients.
Thank you for your reply. When i test with SChannel windows client with JSSE java ssl server. The Schannel client side iam getting invalid token during SSL handshake process and at server side the inputstream read fail.
At client side using SChannel windows API, the SSL handshake is done by sending context data explicitly. But in java JSSE server, iam not calling any exchange of SSLhandshake data explicitly.
I am not an SSPI expert but I would guess you are not correctly using the Windows SSPI to use SSL and are instead trying to use NTLM authentication tokens. I'm just guessing, sorry I cannot be more helpful.