TAO/docs/Security/SSLIOP-USAGE.html

   1
   2 <html>
   3 <!--  -->
   4 <!-- #BeginTemplate "/Templates/TAO_Security.dwt" -->
   5 <head>
   6 <!-- #BeginEditable "doctitle" -->
   7 <title>TAO -- Using SSLIOP</title>
   8 <!-- #EndEditable -->
   9 <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
  10 <script language="JavaScript">
  11 <!--
  12 function MM_preloadImages() { //v3.0
  13   var d=document; if(d.images){ if(!d.MM_p) d.MM_p=new Array();
  14     var i,j=d.MM_p.length,a=MM_preloadImages.arguments; for(i=0; i<a.length; i++)
  15     if (a[i].indexOf("#")!=0){ d.MM_p[j]=new Image; d.MM_p[j++].src=a[i];}}
  16 }
  17
  18 function MM_findObj(n, d) { //v3.0
  19   var p,i,x;  if(!d) d=document; if((p=n.indexOf("?"))>0&&parent.frames.length) {
  20     d=parent.frames[n.substring(p+1)].document; n=n.substring(0,p);}
  21   if(!(x=d[n])&&d.all) x=d.all[n]; for (i=0;!x&&i<d.forms.length;i++) x=d.forms[i][n];
  22   for(i=0;!x&&d.layers&&i<d.layers.length;i++) x=MM_findObj(n,d.layers[i].document); return x;
  23 }
  24
  25 function MM_nbGroup(event, grpName) { //v3.0
  26   var i,img,nbArr,args=MM_nbGroup.arguments;
  27   if (event == "init" && args.length > 2) {
  28     if ((img = MM_findObj(args[2])) != null && !img.MM_init) {
  29       img.MM_init = true; img.MM_up = args[3]; img.MM_dn = img.src;
  30       if ((nbArr = document[grpName]) == null) nbArr = document[grpName] = new Array();
  31       nbArr[nbArr.length] = img;
  32       for (i=4; i < args.length-1; i+=2) if ((img = MM_findObj(args[i])) != null) {
  33         if (!img.MM_up) img.MM_up = img.src;
  34         img.src = img.MM_dn = args[i+1];
  35         nbArr[nbArr.length] = img;
  36     } }
  37   } else if (event == "over") {
  38     document.MM_nbOver = nbArr = new Array();
  39     for (i=1; i < args.length-1; i+=3) if ((img = MM_findObj(args[i])) != null) {
  40       if (!img.MM_up) img.MM_up = img.src;
  41       img.src = (img.MM_dn && args[i+2]) ? args[i+2] : args[i+1];
  42       nbArr[nbArr.length] = img;
  43     }
  44   } else if (event == "out" ) {
  45     for (i=0; i < document.MM_nbOver.length; i++) {
  46       img = document.MM_nbOver[i]; img.src = (img.MM_dn) ? img.MM_dn : img.MM_up; }
  47   } else if (event == "down") {
  48     if ((nbArr = document[grpName]) != null)
  49       for (i=0; i < nbArr.length; i++) { img=nbArr[i]; img.src = img.MM_up; img.MM_dn = 0; }
  50     document[grpName] = nbArr = new Array();
  51     for (i=2; i < args.length-1; i+=2) if ((img = MM_findObj(args[i])) != null) {
  52       if (!img.MM_up) img.MM_up = img.src;
  53       img.src = img.MM_dn = args[i+1];
  54       nbArr[nbArr.length] = img;
  55   } }
  56 }
  57 //-->
  58 </script>
  59 </head>
  60 <body bgcolor="#FFFFFF" onLoad="MM_preloadImages('fireworks/nav_bar_r02_c2_f3.gif','fireworks/nav_bar_r02_c2_f2.gif','fireworks/nav_bar_r04_c2_f3.gif','fireworks/nav_bar_r04_c2_f2.gif','fireworks/nav_bar_r04_c2_f4.gif','fireworks/nav_bar_r06_c2_f3.gif','fireworks/nav_bar_r06_c2_f2.gif','fireworks/nav_bar_r06_c2_f4.gif','fireworks/nav_bar_r08_c2_f3.gif','fireworks/nav_bar_r08_c2_f2.gif','fireworks/nav_bar_r08_c2_f4.gif','fireworks/nav_bar_r10_c2_f3.gif','fireworks/nav_bar_r10_c2_f2.gif','fireworks/nav_bar_r10_c2_f4.gif','fireworks/nav_bar_r12_c2_f3.gif','fireworks/nav_bar_r12_c2_f2.gif','fireworks/nav_bar_r12_c2_f4.gif','fireworks/nav_bar_r02_c2_f4.gif')">
  61 <div id="Layer2" style="position:absolute; left:89px; top:32px; width:792px; height:125px; z-index:2">
  62   <h1 align="center"><img src="images/CORBA_Security.jpg" width="500" height="131" align="middle"></h1>
  63 </div>
  64 <div id="Layer3" style="position:absolute; left:257px; top:199px; width:625px; height:1px; z-index:3"><!-- #BeginEditable "Body" -->
  65   <h2>Using SSLIOP</h2>
  66   <hr>
  67   <ul>
  68     <li><a href="#loading">Loading and Configuring the SSLIOP Pluggable Protocol</a></li>
  69     <li><a href="#ssliop_current">Using the <code>SSLIOP::Current</code> Object</a></li>
  70   </ul>
  71   <hr>
  72   <h3><a name="loading"></a>Loading and Configuring the SSLIOP Pluggable Protocol</h3>
  73   <p>TAO implements SSL as a pluggable protocol. As such, it must be dynamically
  74     loaded into the ORB. You must use a service configurator file to do this.
  75     The service configurator options for the ORB are described in detail in <a href="../docs/components.html?rev=HEAD&content-type=text/html">
  76     Options for TAO Components</a>. In this case you have to create a <code>svc.conf</code>
  77     file that includes: </p>
  78   <pre>
  79      dynamic SSLIOP_Factory Service_Object *
  80     &nbsp;&nbsp; TAO_SSLIOP:_make_TAO_SSLIOP_Protocol_Factory() ""
  81      static Resource_Factory "<font color="#009900">-ORBProtocolFactory SSLIOP_Factory</font>"</pre>
  82   <p>Note that &quot;<code>TAO_SSLIOP:_make...</code>&quot; is part of the first
  83     line. This will load the SSLIOP protocol from the library called <code>TAO_SSL</code>
  84     and then use that protocol in the ORB. The SSLIOP protocol has a number of
  85     configuration options that we describe below. </p>
  86   <h4>SSLIOP Options</h4>
  87   <p>Once the SSLIOP protocol is loaded you may want to setup the private key
  88     and certificate files, the authentication level and similar features. This
  89     is done by setting more options in the service configurator file, for example:
  90   </p>
  91   <pre>dynamic SSLIOP_Factory Service_Object *
  92  &nbsp;TAO_SSLIOP:_make_TAO_SSLIOP_Protocol_Factory()"<font color="#009900">-SSLAuthenticate SERVER</font>"</pre>
  93   <p>will enforce validation of the server certificate on each SSL connection.
  94     Note that &quot;<code>TAO_SSLIOP:_make...</code>&quot; is part of the first
  95     line. The complete list of options is: </p>
  96   <p>
  97   <table border="2" cellspacing="2" cellpadding="0" align="center" width="100%" >
  98     <tr>
  99       <th>Option</th>
 100       <th>Description</th>
 101     </tr>
 102     <tr>
 103       <td><code>-SSLNoProtection</code></td>
 104       <td>
 105         <p>On the client side, this option forces request invocations to use the
 106           standard insecure IIOP protocol.</p>
 107         <p>On the server side, use of this option allows invocations on the server
 108           to be made through the standard insecure IIOP protocol. Request invocations
 109           through SSL may still be made.</p>
 110         <p>This option will be deprecated once the <code>SecurityLevel2::SecurityManager</code>
 111           interface as defined in the CORBA Security Service is implemented.</p>
 112       </td>
 113     </tr>
 114     <tr>
 115       <td><code>-SSLCertificate</code> <em>FORMAT:filename</em></td>
 116       <td> Set the name of the file that contains the certificate for this process.
 117         The file can be in Privacy Enhanced Mail (<code>PEM</code>) format or
 118         ASN.1 (<code>ASN1</code>). Remember that the certificate must be signed
 119         by a Certificate Authority recognized by the client. </td>
 120     </tr>
 121     <tr>
 122       <td><code>-SSLPrivateKey</code> <em>FORMAT:filename</em></td>
 123       <td> Set the name of the file that contains the private key for this process.
 124         The private key and certificate files must match. It is extremely important
 125         that you secure your private key! By default the <code>OpenSSL</code>
 126         utilities will generate pass phrase protected private key files. The password
 127         is prompted when you run the CORBA application. </td>
 128     </tr>
 129     <tr>
 130       <td><code>-SSLAuthenticate</code> <em>which</em></td>
 131       <td> Control the level of authentication. The argument can be <code>NONE</code>,
 132         <code>SERVER</code>, <code>CLIENT</code> or <code>SERVER_AND_CLIENT</code>.
 133         Due to limitations in the SSL protocol <code>CLIENT</code> implies that
 134         the server is authenticated too. </td>
 135     </tr>
 136     <tr>
 137       <td><code>-SSLAcceptTimeout</code> <em>which</em></td>
 138       <td>Set the maximum amount of time to allow for establishing a
 139       SSL/TLS passive connection, <em>i.e.</em> for accepting a
 140       SSL/TLS connection.  The default value is <code>10</code>
 141       seconds.
 142       <p>See the discussion in <a
 143         href="http://bugzilla.dre.vanderbilt.edu/show_bug.cgi?id=1348">Bug 1348</a> in our <a href="http://bugzilla.dre.vanderbilt.edu/index.cgi">bug
 144       tracking system</a> for the rationale behind this option.</td>
 145     </tr>
 146     <tr>
 147       <td><code>-SSLDHParams</code> <em>filename</em></td>
 148       <td>Set the filename containing the Diffie-Hellman parameters to
 149     be used when using DSS-based certificates.  The specified
 150       file may be a file containing only Diffie-Hellman
 151       parameters created by "<code>openssl dhparam</code>", or
 152       it can be a certificate containing a PEM encoded set of
 153       Diffie-Hellman parameters.</td>
 154     </tr>
 155     <tr>
 156       <td><code>-SSLCipherList</code> <em>cipher-spec</em></td>
 157       <td>Sets the list of available ciphers.  The cipher specification string
 158           should be formatted per the openssl ciphers(1) man page.</td>
 159     </tr>
 160     <tr>
 161       <td><code>-SSLServerCipherOrder</code></td>
 162       <td>When choosing a cipher, use the server's preferences instead of
 163            the client preferences. When not set, the SSL server will always
 164            follow the clients preferences.</td>
 165     </tr>
 166     <tr>
 167       <td><code>-SSLCAfile</code> <em>filename</em></td>
 168       <td>Provide a file containing a trusted certificate, overriding the file named by SSL_CERT_FILE environment variable.</td>
 169     </tr>
 170     <tr>
 171       <td><code>-SSLCApath</code> <em>directory</em></td>
 172       <td>Provide a directory from which all files are read for trusted certificates overriding the directory named by SSL_CERT_DIR environment variable.<</td>
 173     </tr>
 174     <tr>
 175       <td><code>-SSLrand</code> <em>filelist</em></td>
 176       <td>Provide additional entropy from the named sources. Works in conjuction with any value supplied via SSL_RAND_FILE environment variable.</td>
 177     </tr>
 178     <tr>
 179       <td><code>-SSLVersionList</code> <em>versions</em></td>
 180       <td>Unlike the cipher list option, this takes a list of SSL versions to support. List is a comma separated string containing SSLv23. If <code>-SSLVersionList</code> is not supplied, SSL will support all of these versions. </td>
 181     </tr>
 182     <tr>
 183       <td><code>-SSLPassword</code> <em>specifier</em></td>
 184       <td>if the supplied <code>-SSLPrivateKey</code> is password protected, this option enables overriding the default password entry. The supplied specifier can be <code>prompt:</code><em>message</em> to prompt a user for entry, <code>file:</code><em>filename</em> reads a plain text file, <code>env:</code><em>envvarname</em>, or simply <em>thepassword</em>. Clearly using any option apart from prompt: weakens the protection. </td>
 185     </tr>
 186     <tr>
 187       <td><code>-SSLCheckHost</code></td>
 188       <td>Adds a verification of the peer address to the connection completion process. This feature requires OpenSSL 1.0.2 or newer and performs a reverse DNS lookup to find the originating hostname. If the version of ssl used does not support <code>X509_check_host()</code>, the peer address does not map to a cannonical host name, or the peer did not provide an X.509 certificate, the connection will fail. </td>
 189     </tr>
 190     <tr>
 191       <td><code>-SSLEcName</code> <em>curve_name</em></td>
 192       <td>Provide the name of the Elliptic Curve to use for ECDH cipher.  To see a list of the available curve names use the command <em>openssl ecparam -list_curves</em> </td>
 193     </tr>
 194
 195   </table>
 196   <h4>Environment variables</h4>
 197   <p>The SSLIOP protocol uses the following environment variables to control its
 198     behavior. </p>
 199   <p>
 200   <table border="2" cellspacing="2" cellpadding="0" width="100%" >
 201     <tr>
 202       <th>Environment Variable</th>
 203       <th>Description</th>
 204     </tr>
 205     <tr>
 206       <td><code>SSL_CERT_FILE</code> <em>filename</em></td>
 207       <td> The name of the file that contains all the trusted certificate authority
 208         self-signed certificates. By default it is set to the value of the <code>ACE_DEFAULT_SSL_CERT_FILE</code>
 209         macro. </td>
 210     </tr>
 211     <tr>
 212       <td><code>SSL_CERT_DIR</code> <em>directory</em></td>
 213       <td> The name of the directory that contains all the trusted certificate
 214         authority self-signed certificates. By default it is set to the value
 215         of the <code>ACE_DEFAULT_SSL_CERT_DIR</code> macro. This directory must
 216         be indexed using the OpenSSL format, i.e. each certificate is aliased
 217         with the following link:
 218         <pre>
 219 $ ln -s cacert.pem `openssl x509 -noout -hash < cacert.pem`.0
 220 </pre>
 221         Consult the documentation of your SSL implementation for more details.
 222       </td>
 223     <tr>
 224       <td><code>SSL_EGD_FILE </code><em>filename</em></td>
 225       <td>The name of the UNIX domain socket that the <a href="http://www.lothar.com/tech/crypto/">Entropy
 226         Gathering Daemon (EGD)</a> is listening on.</td>
 227     <tr>
 228       <td><code>SSL_RAND_FILE </code><em>filename</em></td>
 229       <td>The file that contains previously saved state from OpenSSL's pseudo-random
 230         number generator.</td>
 231   </table>
 232   <hr>
 233   <h3><a name="ssliop_current"></a>Using the <code>SSLIOP::Current</code> Object</h3>
 234   <p></p>
 235   <p>TAO's SSLIOP pluggable protocol allows an application to gain access to the
 236     SSL session state for the current request. For example, it allows an application
 237     to obtain the SSL peer certificate chain associated with the current request
 238     so that the application can decide whether or not to reject the request. This
 239     is achieved by invoking certain operations on the <code>SSLIOP::Current</code>
 240     object. The interface for <code>SSLIOP::Current</code> object is:</p>
 241   <p><code>module <b>SSLIOP</b> {</code></p>
 242   <p><code><font color="#0000FF"># pragma prefix</font> &quot;<font color="#009900">omg.org</font>&quot;</code></p>
 243   <blockquote>
 244     <p><code> <font color="#FF0000">/// A <b>DER</b> encoded X.509 certificate.</font><br>
 245       typedef sequence&lt;octet&gt; ASN_1_Cert;</code></p>
 246     <p><code> <font color="#FF0000">/// A chain of <b>DER</b> encoded X.509 certificates.
 247       The chain<br>
 248       /// is actually a sequence. The sender's certificate is<br>
 249       /// first, followed by any Certificate Authority<br>
 250       /// certificates proceeding sequentially upward.</font><br>
 251       typedef sequence&lt;ASN_1_Cert&gt; SSL_Cert;</code></p>
 252   </blockquote>
 253   <p><code> &nbsp;&nbsp;&nbsp;<font color="#FF0000">/// The following are TAO
 254     extensions.</font><br>
 255     <font color="#0000FF"># pragma prefix</font> &quot;<font color="#009900">ssliop.tao</font>&quot;</code></p>
 256   <blockquote>
 257     <p><code> <font color="#FF0000">/// The SSLIOP::Current interface provides
 258       methods to<br>
 259       /// gain access to the SSL session state for the current<br>
 260       /// execution context.</font><br>
 261       local interface <b>Current</b> : CORBA::Current {</code> </p>
 262     <blockquote>
 263       <p><code> <font color="#FF0000">/// Exception that indicates a SSLIOP::Current<br>
 264         /// operation was invoked outside of an SSL<br>
 265         /// session.</font><br>
 266         exception NoContext {};</code></p>
 267       <p><code> <font color="#FF0000">/// Return the certificate chain associated
 268         with<br>
 269         /// the current execution context. If no SSL<br>
 270         /// session is being used for the request or<br>
 271         /// upcall, then the NoContext exception is<br>
 272         /// raised.</font><br>
 273         SSL_Cert get_peer_certificate_chain ()<br>
 274         &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;raises
 275         (N</code><code>oContext);</code></p>
 276     </blockquote>
 277     <p><code>};</code></p>
 278   </blockquote>
 279   <p><code> <font color="#0000FF"># pragma prefix</font> &quot;<font color="#009900">omg.org</font>&quot;</code></p>
 280   <p><code>};</code></p>
 281   <h4>Obtaining a Reference to the <code>SSLIOP::Current</code> Object</h4>
 282   <p>A reference to the <code>SSLIOP::Current</code> object may be obtained using
 283     the standard <code>CORBA::ORB::resolve_initial_references()</code> mechanism
 284     with the argument <code>&quot;<font color="#009900">SSLIOPCurrent</font>&quot;</code>.
 285     Here is an example:</p>
 286   <blockquote>
 287     <p><code>int argc = 0;</code></p>
 288     <p><code>CORBA::ORB_var orb =<br>
 289       &nbsp;&nbsp; CORBA::ORB_init (argc, &quot;&quot;, &quot;<font color="#009900">my_orb</font>&quot;);</code></p>
 290     <p><code>CORBA::Object_var obj =<br>
 291       &nbsp;&nbsp; orb-&gt;resolve_initial_references (&quot;<font color="#009900">SSLIOPCurrent</font>&quot;);</code></p>
 292     <p><code><b>SSLIOP</b>::<b>Current_var</b> ssliop =<br>
 293       &nbsp;&nbsp;<b>SSLIOP</b>::<b>Current</b>::_narrow (obj.in ());</code></p>
 294   </blockquote>
 295   <h4>Examining the Peer Certificate for the Current Request Using <a href="http://www.openssl.org/">OpenSSL</a></h4>
 296   <p>Once a reference to the <code>SSLIOP::Current</code> object has been retrieved,
 297     the peer certificate for the current request may be obtained by invoking the
 298     <code>SSLIOP::get_peer_certificate</code> method, as follows:</p>
 299   <blockquote>
 300     <p><code><font color="#FF0000">// This method can throw a <b>SSLIOP::Current::NoContext</b><br>
 301       // exception if it is not invoked during a request being<br>
 302       // performed over SSL.</font><br>
 303       <b>SSLIOP::ASN_1_Cert_var</b> cert =<br>
 304       &nbsp;&nbsp; ssliop-&gt;get_peer_certificate ();</code></p>
 305   </blockquote>
 306   <p>The retrieved X.509 peer certificate is in DER (a variant of ASN.1) format.
 307     DER is the on-the-wire format used to transmit certificates between peers.
 308   </p>
 309   <p> OpenSSL can be used to examine the certificate. For example, to extract
 310     and display the certificate issuer from the DER encoded X.509 certificate,
 311     the following can be done:</p>
 312   <blockquote>
 313     <p><code><font color="#0000FF">#include</font> &lt;<font color="#009900">openssl/x509.h</font>&gt;<br>
 314       <font color="#0000FF">#include</font> &lt;<font color="#009900">iostream</font>&gt;</code><code><br>
 315       <font color="#FF0000">.<br>
 316       .<br>
 317       .</font> <br>
 318       <font color="#FF0000">// Obtain the underlying buffer from the<br>
 319       // SSLIOP::ASN_1_Cert.</font><br>
 320       CORBA::Octet *der_cert = cert->get_buffer ();<br>
 321       <br>
 322       char buf[BUFSIZ];<br>
 323       <br>
 324       <font color="#FF0000">// Convert the DER encoded X.509 certificate into<br>
 325       // OpenSSL's internal format.</font><br>
 326       <b>X509</b> *peer = ::<b>d2i_X509</b> (0, &der_cert, cert->length ());<br>
 327       <br>
 328       ::<b>X509_NAME_oneline</b> (<br>
 329       &nbsp;&nbsp;&nbsp;::<b>X509_get_issuer_name</b> (peer),<br>
 330       &nbsp;&nbsp;&nbsp;buf,<br>
 331       &nbsp;&nbsp; BUFSIZ);<br>
 332       <br>
 333       std::cout &lt;&lt; &quot;<font color="#009900">Certificate issuer: </font>&quot;
 334       &lt;&lt; buf &lt;&lt; std::endl;<br>
 335       <br>
 336       ::<b>X509_free</b> (peer);</code></p>
 337   </blockquote>
 338   <p>&nbsp;</p>
 339   <address></address>
 340   <table width="100%" border="0">
 341     <tr>
 342       <td>
 343         <p><font face="Georgia, Times New Roman, Times, serif"><font face="Arial, Helvetica, sans-serif"><a href="mailto:ossama@dre.vanderbilt.edu">Ossama
 344           Othman<br>
 345           </a></font></font><font face="Georgia, Times New Roman, Times, serif"><a href="mailto:coryan@uci.edu"><font face="Arial, Helvetica, sans-serif">Carlos
 346           O'Ryan</font></a><font face="Arial, Helvetica, sans-serif"> </font></font></p>
 347       </td>
 348       <td><a href="http://www.openssl.org/"><img src="images/openssl_button.gif" width="102" height="47" align="right" border="0"></a></td>
 349     </tr>
 350   </table>
 351   <h2>&nbsp;</h2>
 352   <!-- #EndEditable --></div>
 353 <div id="Layer1" style="position:absolute; left:87px; top:162px; width:153px; height:373px; z-index:4"><!-- Image with table -->
 354   <table border="0" cellpadding="0" cellspacing="0" width="158">
 355     <!-- fwtable fwsrc="Untitled" fwbase="nav_bar.gif" -->
 356     <tr> <!-- Shim row, height 1. -->
 357       <td><img src="/fireworks/shim.gif" width="9" height="1" border="0" name="undefined_2"></td>
 358       <td><img src="/fireworks/shim.gif" width="141" height="1" border="0" name="undefined_2"></td>
 359       <td><img src="/fireworks/shim.gif" width="8" height="1" border="0" name="undefined_2"></td>
 360       <td><img src="/fireworks/shim.gif" width="1" height="1" border="0" name="undefined_2"></td>
 361     </tr>
 362     <tr valign="top"><!-- row 1 -->
 363       <td colspan="3"><img name="nav_bar_r01_c1" src="fireworks/nav_bar_r01_c1.gif" width="158" height="35" border="0"></td>
 364       <td><img src="/fireworks/shim.gif" width="1" height="35" border="0" name="undefined_2"></td>
 365     </tr>
 366     <tr valign="top"><!-- row 2 -->
 367       <td rowspan="12"><img name="nav_bar_r02_c1" src="fireworks/nav_bar_r02_c1.gif" width="9" height="342" border="0"></td>
 368       <td><a href="index.html" onMouseOut="MM_nbGroup('out');"  onMouseOver="MM_nbGroup('over','Home','fireworks/nav_bar_r02_c2_f2.gif','fireworks/nav_bar_r02_c2_f4.gif',1)"  onClick="MM_nbGroup('down','navbar1','Home','fireworks/nav_bar_r02_c2_f3.gif',1)" ><img name="Home" src="fireworks/nav_bar_r02_c2.gif" border="0" onLoad=""></a></td>
 369       <td rowspan="12"><img name="nav_bar_r02_c3" src="fireworks/nav_bar_r02_c3.gif" width="8" height="342" border="0"></td>
 370       <td><img src="/fireworks/shim.gif" width="1" height="36" border="0" name="undefined_2"></td>
 371     </tr>
 372     <tr valign="top"><!-- row 3 -->
 373       <td><img name="nav_bar_r03_c2" src="fireworks/nav_bar_r03_c2.gif" width="141" height="5" border="0"></td>
 374       <td><img src="/fireworks/shim.gif" width="1" height="5" border="0" name="undefined_2"></td>
 375     </tr>
 376     <tr valign="top"><!-- row 4 -->
 377       <td><a href="Download.html" onMouseOut="MM_nbGroup('out');"  onMouseOver="MM_nbGroup('over','Download','fireworks/nav_bar_r04_c2_f2.gif','fireworks/nav_bar_r04_c2_f4.gif',1)"  onClick="MM_nbGroup('down','navbar1','Download','fireworks/nav_bar_r04_c2_f3.gif',1)" ><img name="Download" src="fireworks/nav_bar_r04_c2.gif" width="141" height="36" border="0" onLoad=""></a></td>
 378       <td><img src="/fireworks/shim.gif" width="1" height="36" border="0" name="undefined_2"></td>
 379     </tr>
 380     <tr valign="top"><!-- row 5 -->
 381       <td><img name="nav_bar_r05_c2" src="fireworks/nav_bar_r05_c2.gif" width="141" height="5" border="0"></td>
 382       <td><img src="/fireworks/shim.gif" width="1" height="5" border="0" name="undefined_2"></td>
 383     </tr>
 384     <tr valign="top"><!-- row 6 -->
 385       <td><a href="http://www.dre.vanderbilt.edu/~schmidt/TAO.html" onMouseOut="MM_nbGroup('out');"  onMouseOver="MM_nbGroup('over','TAO','fireworks/nav_bar_r06_c2_f2.gif','fireworks/nav_bar_r06_c2_f4.gif',1)"  onClick="MM_nbGroup('down','navbar1','TAO','fireworks/nav_bar_r06_c2_f3.gif',1)" ><img name="TAO" src="fireworks/nav_bar_r06_c2.gif" width="141" height="36" border="0" onLoad=""></a></td>
 386       <td><img src="/fireworks/shim.gif" width="1" height="36" border="0" name="undefined_2"></td>
 387     </tr>
 388     <tr valign="top"><!-- row 7 -->
 389       <td><img name="nav_bar_r07_c2" src="fireworks/nav_bar_r07_c2.gif" width="141" height="5" border="0"></td>
 390       <td><img src="/fireworks/shim.gif" width="1" height="5" border="0" name="undefined_2"></td>
 391     </tr>
 392     <tr valign="top"><!-- row 8 -->
 393       <td><a href="SSLIOP.html" onMouseOut="MM_nbGroup('out');"  onMouseOver="MM_nbGroup('over','SSLIOP','fireworks/nav_bar_r08_c2_f2.gif','fireworks/nav_bar_r08_c2_f4.gif',1)"  onClick="MM_nbGroup('down','navbar1','SSLIOP','fireworks/nav_bar_r08_c2_f3.gif',1)" ><img name="SSLIOP" src="fireworks/nav_bar_r08_c2.gif" width="141" height="36" border="0" onLoad=""></a></td>
 394       <td><img src="/fireworks/shim.gif" width="1" height="36" border="0" name="undefined_2"></td>
 395     </tr>
 396     <tr valign="top"><!-- row 9 -->
 397       <td><img name="nav_bar_r09_c2" src="fireworks/nav_bar_r09_c2.gif" width="141" height="5" border="0"></td>
 398       <td><img src="/fireworks/shim.gif" width="1" height="5" border="0" name="undefined_2"></td>
 399     </tr>
 400     <tr valign="top"><!-- row 10 -->
 401       <td><a href="Security_Service.html" onMouseOut="MM_nbGroup('out');"  onMouseOver="MM_nbGroup('over','Security_Service','fireworks/nav_bar_r10_c2_f2.gif','fireworks/nav_bar_r10_c2_f4.gif',1)"  onClick="MM_nbGroup('down','navbar1','Security_Service','fireworks/nav_bar_r10_c2_f3.gif',1)" ><img name="Security_Service" src="fireworks/nav_bar_r10_c2.gif" width="141" height="36" border="0" onLoad=""></a></td>
 402       <td><img src="/fireworks/shim.gif" width="1" height="36" border="0" name="undefined_2"></td>
 403     </tr>
 404     <tr valign="top"><!-- row 11 -->
 405       <td><img name="nav_bar_r11_c2" src="fireworks/nav_bar_r11_c2.gif" width="141" height="5" border="0"></td>
 406       <td><img src="/fireworks/shim.gif" width="1" height="5" border="0" name="undefined_2"></td>
 407     </tr>
 408     <tr valign="top"><!-- row 12 -->
 409       <td><a href="FAQ.html" onMouseOut="MM_nbGroup('out');"  onMouseOver="MM_nbGroup('over','FAQ','fireworks/nav_bar_r12_c2_f2.gif','fireworks/nav_bar_r12_c2_f4.gif',1)"  onClick="MM_nbGroup('down','navbar1','FAQ','fireworks/nav_bar_r12_c2_f3.gif',1)" ><img name="FAQ" src="fireworks/nav_bar_r12_c2.gif" width="141" height="36" border="0" onLoad=""></a></td>
 410       <td><img src="/fireworks/shim.gif" width="1" height="36" border="0" name="undefined_2"></td>
 411     </tr>
 412     <tr valign="top"><!-- row 13 -->
 413       <td><img name="nav_bar_r13_c2" src="fireworks/nav_bar_r13_c2.gif" width="141" height="101" border="0"></td>
 414       <td><img src="/fireworks/shim.gif" width="1" height="101" border="0" name="undefined_2"></td>
 415     </tr>
 416     <!--   This table was automatically created with Macromedia Fireworks 3.0   -->
 417     <!--   http://www.macromedia.com   -->
 418   </table>
 419 </div>
 420 <table border="0" cellpadding="0" cellspacing="0">
 421   <tr>
 422     <td>&nbsp;</td>
 423   </tr>
 424 </table>
 425 </body>
 426 <!-- #EndTemplate -->
 427 </html>