SSL Server and client

Hello

I’m creating a small MMORPG.
So far I’ve used a rather unsafe way for users to log in.
The client would MD5 encrypt the password and send it to the server.
Both login and creating, so the server would only know the MD5 of the users password.

I want to use SSL to increase the security.
I tried this example; http://tvilda.stilius.net/java/java_ssl.php.

It seemed ok, but must I allways have all the parameters for java?
As they have in the example; java -Djavax.net.ssl.trustStore=mySrvKeystore -Djavax.net.ssl.trustStorePassword=123456 EchoClient

Is it possible to implement these in the source?
Or in the anifest-file in the jar?


Is it possible to go from SSL to normal socket on the same port?
Like after the login is correct…

Thanks!

I believe you should be able to put it into the system properties/source. So no, you won’t have to put it into the console startup properties!

You will have to run 2 sockets: Normal socket on port 80 and the SSL socket on port 443. That’s common practice…