Web Enabling Your HP 3000

Internet Security
The explosive growth of the Internet has revolutionized the way companies communicate and
conduct business. More companies use the Internet in conjunction with their Intranets to store,
process and exchange information. In order to enable HP e3000 applications to play a key role
in this evolving e-services and Internet world, HP embraces a key Internet security building
block SSL (Secure Sockets Layer Protocol), and offers a secure web server on the HP e3000. So
the privacy and integrity of the e3000 data that flows over untrusted networks can be guaran-
teed, the HP e3000 applications can interoperate seamlessly with other SSL-enabled applica-
tions, while ensuring system security when connected to the Internet.
What is SSL?
Secure Sockets Layer (SSL) is an Internet security protocol for point-to-point (client and server)
connections. It provides protection against eavesdropping, tampering, and forgery. Clients and
servers are able to authenticate each other and to establish a secure link, or “pipe”, across the
Internet or intranets to protect the information transmitted. The SSL protocol works at the
Transport Layer and is independent of the application protocol used. Therefore application pro-
tocols such as HTTP, FTP, TELNET, etc. can transparently build on the SSL protocol, regardless
of the underlying transport protocols such as TCP/I, IPX/SPX, etc. SSL is the most widely used
protocol for transmitting data securely over the Internet and addresses the fundamental Internet
communication requirements of authentication, confidentiality and data integrity. Therefore,
the SSL protocol has become the de facto standard for securing Internet data exchange.
BSAFE SSL-C development toolkit
Hewlett-Packard Company and RSA are working together to increase security capabilities for
HP customers with RSA’s support of its recently introduced BSAFE SSL-C toolkit on the HP
e3000. SSL-C is a software development suite for building SSL security into e-commerce and
Internet applications. SSL-C offers a comprehensive set of security software components for
building SSL-enabled applications, combined with the full suite of RSA algorithms. RSA devel-
oped the SSL-C product suite by extending the original SSLeay core. SSL-C contains SSLv2,
SSLv3 and TLS 1.0 (as of IETF draft) compliance. The latest enhancement of SSL is called
Transport Layer Security (TLS).
SSL-C toolkit enables application developers such as independent software vendors (ISVs) to
easily embed SSL-based encryption capabilities into their applications. As a result, application
developers can embed a high level of privacy and security in a wide range of client/server
interactions without being encryption experts. Developers can reduce development time by
using SSL-C, the complete solution from the most trusted source in cryptography and security
components.
BSAFE SSL-C was developed at RSA Australia, which also provides customer technical support.
BSAFE SSL-C for MPE/iX can be ordered directly from RSA Australia. For more information,
call 61-7-330-39380; send e-mail to [e-mail]; and on the Web at http://www.aus.rsa.com.
15