Security of IReport connecting on the internet through JDBC

[erikd]

Hi, I'd like to know if it's secure to use IReport in the internet through JDBC connection?  Will database authentication and authorization suffice?  Can IReport use SSL certificates?

Has anybody done this type of desiging?  What steps can I do to secure IReport?

[darth_fader]

I'd say the quickest and easiest way is with an SSH tunnel.  Takes IReport and database flavor specifics out of the equation.  If you're working on Windows check out Putty, if on Linux then you're already good to go.  

http://en.wikipedia.org/wiki/Tunneling_protocol#Secure_Shell_tunneling

The connections made via iReport is NOT secure by default; if left unencrypted any data transfers are in plain text. 

[erikd]

This is helpful.  Thanks for the reply!