ST 20 March

https://websphereapplicationservernotes.wordpress.com/category/ibm-http-server-
apache/
http://www.javaworld.com/article/2072850/java-security/j2ee-security--container-
versus-custom.html
https://www.java-forums.org/ocmjea/58195-tutorial-review-java-security-java-
architect-exam.html

https://en.wikipedia.org/wiki/Public_key_certificate
https://www.ibm.com/developerworks/java/tutorials/j-sec1/j-sec1.html
https://www.ibm.com/developerworks/java/tutorials/j-sec2/j-sec2.html
https://www.linkedin.com/pulse/20140626060943-17333004-difference-between-digital-
signature-and-digital-certificate
https://www.docusign.com/how-it-works/electronic-signature/digital-
signature/digital-signature-faq
http://blog.bigrock.com/security/how-does-a-digital-certificate-work
https://securitywing.com/digital-certificate-how-works/
http://www.jscape.com/blog/an-overview-of-how-digital-certificates-work
https://security.stackexchange.com/questions/7421/how-do-the-processes-for-digital-
certificates-signatures-and-ssl-work
http://www.scientificcomputing.com/blog/2007/11/understanding-digital-certificates-
beginner%E2%80%99s-guide
https://webuser.hs-furtwangen.de/~heindl/ebte-08ss-digital-certificates-Vivek-
kumar.pdf
https://docs.oracle.com/cd/E41633_01/pt853pbh1/eng/pt/tiba/concept_UnderstandingDig
italCertificates-fe7e9e.html
http://www.anz.com/corporate/products-services/transaction-services/public-key-
infrastructure/guide-pki/how-digital-certificate/
https://technet.microsoft.com/en-us/library/bb123848(v=exchg.65).aspx
http://www.netcontractor.pl/blog/?tag=certificate
https://www.codeproject.com/Articles/326574/An-Introduction-to-Mutual-SSL-
Authentication
http://www.youdzone.com/signature.html
https://sites.google.com/site/amitsciscozone/home/security/understanding-digital-
signatures
https://sites.google.com/site/amitsciscozone/home/security/digital-certificates-
explained
https://www.digicert.com/ssl.htm
https://sites.google.com/site/ddmwsst/digital-certificates
https://sites.google.com/site/ddmwsst/cryptography-concepts
https://blogs.msdn.microsoft.com/kaushal/2010/11/04/various-ssltls-certificate-
file-typesextensions/
https://sites.google.com/site/ddmwsst/web-service-security-spec (see diagrams)
https://sites.google.com/site/ddmwsst/ws-security-impl
http://events.linuxfoundation.org/sites/events/files/slides/Andrei_Shakirin_SecureS
ervices_CXF_0.pdf
https://technet.microsoft.com/en-us/library/cc961976.aspx (Basic Concepts for the
Kerberos Protocol)
http://www.devx.com/Java/Article/28816
https://shiro.apache.org/java-authentication-guide.html
http://www.javaworld.com/article/2076087/java-security/java-security-evolution-and-
concepts--part-1--security-nuts-and-bolts.html?page=1
http://www.javaworld.com/article/2076087/java-security/java-security-evolution-and-
concepts--part-1--security-nuts-and-bolts.html?page=2
https://developer.appway.com/screen/ViewDocument/bookId/1272417268326
https://www.cs.umd.edu/~jkatz/security/f09/lectures/JCA.pdf
https://access.redhat.com/documentation/en-
US/Red_Hat_Certificate_System/8.0/html/Deployment_Guide/Introduction_to_Public_Key_
Cryptography-Certificates_and_Authentication.html
https://www.geocerts.com/ssl/how_ssl_works
https://technet.microsoft.com/en-us/library/bb123848(v=exchg.65).aspx
https://technet.microsoft.com/en-us/library/cc776447(v=ws.10).aspx
https://docs.oracle.com/cd/E19316-01/820-2765/6nebir7eb/index.html
https://developer.apple.com/library/content/documentation/Security/Conceptual/Secur
ity_Overview/CryptographicServices/CryptographicServices.html#//apple_ref/doc/uid/T
P30000976-CH3-SW2 (Nice with images)
https://devcentral.f5.com/articles/ssl-profiles-part-8-client-authentication
http://www.scientificcomputing.com/blog/2007/11/understanding-digital-certificates-
beginner%E2%80%99s-guide
https://publib.boulder.ibm.com/tividd/td/TRM/GC32-1323-00/en_US/HTML/admin230.htm
http://stackoverflow.com/questions/788808/how-do-digital-certificates-work-when-
used-for-securing-websites-using-ssl
http://www.digi-sign.com/digital%20certificate/security%20digital%20certificate

http://www.jscape.com/blog/client-certificate-authentication
https://www.globalsign.com/en/blog/client-authentication-introduction/
https://www.symantec.com/connect/blogs/client-certificates-vs-server-certificates-
what-s-difference

https://handouts.secappdev.org/handouts/2009/JEE%20security.pdf
https://docs.oracle.com/javaee/7/tutorial/security-webtier002.htm
https://dzone.com/refcardz/getting-started-java-ee
https://dzone.com/articles/understanding-web-security
http://searchsoftwarequality.techtarget.com/answer/How-to-implement-security-in-
Java-EE-and-Java-ME
http://java.boot.by/wcd-guide/ch05s02.html
http://www.informit.com/articles/article.aspx?p=24253&seqNum=3
https://www.packtpub.com/books/content/developing-secure-java-ee-applications-
glassfish
http://www.javaworld.com/article/2072850/java-security/j2ee-security--container-
versus-custom.html
https://docs.oracle.com/cd/E19226-01/820-7627/bncav/index.html

https://websphereapplicationservernotes.wordpress.com/2012/04/19/configuring-ssl-
for-websphere-and-ibm-http-server-part1/
https://websphereapplicationservernotes.wordpress.com/2012/05/29/configuring-ssl-
for-websphere-and-ibm-http-server-part2-restrict-unused-http-methods-and-verbose-
http-headers/
https://websphereapplicationservernotes.wordpress.com/2012/05/30/configuring-ssl-
for-websphere-and-ibm-http-server-part-3-client-authentication-and-ciphers/
https://websphereapplicationservernotes.wordpress.com/2012/05/31/configuring-ssl-
for-websphere-and-ibm-http-server-part-4-dmgr-and-nodes/

https://websphereapplicationservernotes.wordpress.com/2012/04/21/the-enigma-of-
websphere-application-server-plug-in-part-1-what-why-and-how/
https://websphereapplicationservernotes.wordpress.com/2012/06/01/the-enigma-of-
websphere-application-server-plug-in-part-2-parameters-that-you-can-tune/

https://websphereapplicationservernotes.wordpress.com/2012/05/30/configuring-ssl-
for-websphere-and-ibm-http-server-part-3-client-authentication-and-ciphers/