How is SSLSocket created?

Question

In JSSE docs, it just says the sslsocket can be created by the SSLSocketFactory through a call of createSocket. But it does not describe how the ssl handshake is call, how the key material is passed in and how and which credential is chosen to authenticate the server or the client.

Anybody knows the detailed procedure of the creation of sslsocket?

thanks

Answer 1

An algorithm like Diffie-Hellman can be used to establish secure communications between two parties across an unsecure network.

http://en.wikipedia.org/wiki/Diffie%E2%80%93Hellman_key_exchange

Answer 2

There's a pretty thorough overview at http://download.oracle.com/docs/cd/E17409_01/javase/6/docs/technotes/guides/security/jsse/JSSERefGuide.html

Answer 3

All JSSE does is implement what it says in RFC 2246. No need to say it all again in the Javadoc.