The CORBA Security Service in TAO

The CORBA Security Service for TAO is currently under development. This web page will be updated as parts of the CORBA Security Service are completed.

• An SSLIOP::Current object is now available as a TAO extension. It allows applications to obtain the SSL session state associated with the current request. This feature, provides a means for applications to perform X.509 certificate-based request authorization, for example.
• A request interceptor is now registered with the ORB when the SSLIOP pluggable protocol is loaded. This interceptor enforces secure invocation.
• TAO's CORBA Security Service Conformance Statement is now available.
• IIOP over SSL, as detailed in the CORBA Security Service, has been implemented as a pluggable protocol for TAO called SSLIOP.