Java SE 8 Security
Java security technology includes a large set of APIs, tools,and implementations of commonly-used security algorithms,mechanisms, and protocols. The Java security APIs span a wide rangeof areas, including cryptography, public key infrastructure, securecommunication, authentication, and access control. Java securitytechnology provides the developer with a comprehensive securityframework for writing applications, and also provides the user oradministrator with a a set of tools to securely manageapplications.
Enhancements
- JDK 8 SecurityEnhancements
- JDK 7 SecurityEnhancements
- JDK 6 SecurityEnhancements
- Blacklist Jar Feature
- Signature Timestamp Support
Programmer's Guides
General Security
- Java SecurityOverview
- SecurityArchitecture
- Java Cryptography Architecture(JCA) Reference Guide
- How to Implement aProvider for the Java Cryptography Architecture
- Java Cryptography Architecture (JCA) Standard Algorithm Name Documentation for JDK 8
- Java Cryptography Architecture (JCA) Oracle Providers Documentation for JDK 8
- Policy Permissions
- Default Policy Implementation andPolicy File Syntax
- API for Privileged Blocks
- Setting the Security Level of the Java Client
- TroubleshootingSecurity
Java Authentication and Authorization Service (JAAS)
Java Generic Security Services (Java GSS-API)
- Java GSS-API and JAASTutorials for Use with Kerberos
- Single Sign-on Using Kerberosin Java
- Java Generic Security Services (JGSS) and Kerberos
- Java GSS Advanced SecurityProgramming
- The Kerberos 5 GSS-API Mechanism
Java PKCS#11 Reference Guide
Java Secure Socket Extension (JSSE)
- JSSE Reference Guide
- Transport Layer Security (TLS) Protocol Overview
- TLS Application Layer Protocol Negotiation
- Client-Driven OCSP and OCSP Stapling
- Transport Layer Security (TLS) Renegotiation Issue
Public Key Infrastructure (PKI)
Simple Authentication and Security Layer (SASL)
XML Digital Signature
Java API for XML Processing (JAXP)
API Specification
General Security
- java.securityPackage
- javax.cryptoPackage
- java.security.certPackage
- java.security.specPackage
- javax.crypto.specPackage
- java.security.interfacesPackage
- javax.crypto.interfacesPackage
- javax.rmi.sslPackage
Certification Path
JAAS
- javax.security.authPackage
- javax.security.auth.callbackPackage
- javax.security.auth.kerberosPackage
- javax.security.auth.loginPackage
- javax.security.auth.spiPackage
- javax.security.auth.x500Package
- com.sun.security.auth Package
- com.sun.security.auth.callback Package
- com.sun.security.auth.login Package
- com.sun.security.auth.module Package
Java GSS-API
JSSE
- javax.netPackage
- javax.net.sslPackage
- javax.security.certPackage (Denigrated, usejava.security.certinstead)
Java SASL
SSL/TLS-based RMI Socket Factories
XML Digital Signature
- javax.xml.cryptoPackage
- javax.xml.crypto.domPackage
- javax.xml.crypto.dsigPackage
- javax.xml.crypto.dsig.domPackage
- javax.xml.crypto.dsig.keyinfoPackage
- javax.xml.crypto.dsig.specPackage
Smart Card I/O
Tools
- Security Tools
- keytool (forSolaris, Linux or Mac OS X)(for Windows)
- jarsigner (forSolaris, Linux or Mac OS X)(for Windows)
- policytool (forSolaris, Unix, or Mac OS X) (for Windows)
- kinit (for Windows)
- klist (for Windows)
- ktab (for Windows)
Tutorials
- TheSecurityFeatures in Java SE trail of theJava Tutorial
- JAAS Tutorials.
- Java GSS-API and JAASTutorials for Use with Kerberos
- Policytool User's Guide