dominoExperts.com - Powered by Domino 8.5.2 Domino Accelerator Pack
- Serve faster pages for your users
Lotus Triple Search DominoExperts + Blogs + R8 forum
dominoExperts.com -> Script vault -> Java

 Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files


Tomas NielsenPost date: 2012-08-07 14:06

I am doing some work involving encryption and decryption and due to US export restrictions on crypto - standard Java has limits on key lengths.

The error shows in the form:

2012-08-07 11:05:19 HTTP JVM: java.security.InvalidKeyException: Illegal key size or default parameters
2012-08-07 11:05:19 HTTP JVM: at javax.crypto.Cipher.a(Unknown Source)
2012-08-07 11:05:19 HTTP JVM: at javax.crypto.Cipher.init(Unknown Source)
2012-08-07 11:05:19 HTTP JVM: at javax.crypto.Cipher.init(Unknown Source)
2012-08-07 11:05:19 HTTP JVM: at JavaAgent.NotesMain(JavaAgent.java:163)
2012-08-07 11:05:19 HTTP JVM: at lotus.domino.AgentBase.runNotes(Unknown Source)
2012-08-07 11:05:19 HTTP JVM: at lotus.domino.NotesThread.run(Unknown Source)

So after some googling I found out about the Unlimited Strength Jurisdiction Policy files and downloaded them from Oracle only to be greeted by:

2012-08-07 13:05:37 HTTP JVM: Exception in thread "AgentThread: JavaAgent"
2012-08-07 13:05:37 HTTP JVM: java.lang.NoClassDefFoundError: javax.crypto.b (initialization failure)
2012-08-07 13:05:37 HTTP JVM: at java.lang.J9VMInternals.initialize(J9VMInternals.java:140)
2012-08-07 13:05:37 HTTP JVM: at javax.crypto.KeyGenerator.getInstance(Unknown Source)
2012-08-07 13:05:37 HTTP JVM: at JavaAgent.NotesMain(JavaAgent.java:148)
2012-08-07 13:05:37 HTTP JVM: at lotus.domino.AgentBase.runNotes(Unknown Source)
2012-08-07 13:05:37 HTTP JVM: at lotus.domino.NotesThread.run(Unknown Source)

Even more research revealed that IBM has rolled its own Unlimited Strength Jurisdiction Policy files and they can be downloaded here:

http://www-128.ibm.com/developerworks/java/jdk/security/

The link requires you to log in either with your partner ID or the ID you use when buing Domino.

After changing the files at \Domino\jvm\lib\security everything is working great!


MantecaPost date: 2013-02-21 16:35

You only need to download this a zip zilw from there http://www.ibm.com/developerworks/java/jdk/security/60/ under under “IBM SDK Policy files” tag.

 

Unzip this jars in your domino/jvm/lib/security/ and restart. This Works fine




RSS feed
Subscribe to Forum

Share this page

Top posters
Tomas Nielsen212
Joacim Boive27
Fredrik Stöckel27
Danne14
Niklas Waller13
Kenneth Haggman11
Bryan Kuhn10
Daniel Lehtihet9
Jonas Israelsson8
dm997