http://hi.baidu.com/jeffeyliu/blog/item/e85db83f6d8632e954e7238f.html
http://stackoverflow.com/questions/92504/strong-ssl-with-tomcat-6
http://www.blogjava.net/cerulean/archive/2007/03/05.html
http://docs.oracle.com/javase/1.5.0/docs/guide/security/jce/JCERefGuide.html#AppE
http://topic.csdn.net/u/20070717/15/d7c0ab3b-0232-43cc-b55b-1bba697cedbe.html
http://docs.oracle.com/javase/6/docs/technotes/guides/security/crypto/CryptoSpec.html#AppB