Validating a SHA hash with a 4byte salt in ldap

I am using Sun Directory version 5.2 patch 6 on Solaris (5.10 Generic_118833-36)
Is it possible to store and verify a 4 byte salted SHA in userPassword field in ldap?
I compute a SHA-1 digest for the password using a 4byte salt. The digest and salt are then Base64 encoded and stored in ldap.
However, when I try to verify the password, it fails and says invalid credentials.
Is there any limitation in ldap that it can only use SSHA-1 with salt of 8 bytes?
Or can we configure the ldap to use salt of 4 bytes
Thanks

I have to ask, why are you manually doing the comparison? Why not just bind and let the directory server do the heavy lifting? Anyway, DSEE uses an 8 byte random salt and cannot be configured to use a 4 byte salt. It's not a limitation, rather a security measure to make it harder to use a rainbow table to guess the password.

Similar Messages

Using JHS tables and hashing with salt algorithms for Weblogic security

We are going to do our first enterprise ADF/JHeadstart application. For security part, we are going to do the following:
1. We will use JHS tables as authentication for ADF security.
2. We will use JAAS as authentication and Custom as authorization.
2. We need to use JHeadStart security service screen in our application to manage users, roles and permission, instead of doing users/groups management within Weblogic.
3. We will create new Weblogic SQL Authentication Provider.
4. We will store salt with password in the database table.
5. We will use Oracle MDS.
There are some blogs online giving detail steps on how to create Weblogic SQL Authentication Provider and use JHS tables as authentication for ADF security. I am not sure about the implementation of hashing with salt algorithms, as ideally we'd like to use JHS security service screen in the application to manage users, roles and permission, not using Weblogic to do the users/groups management. We are going to try JMX client to interact with Weblogic API, looks like it is a flexiable approach. Does anybody have experience on working with JMX, SQL Authentication Provider and hashing with salt algorithms? Just want to make sure we are on the right track.
Thanks,
Sarah

To be clear, we are planning on using a JMX client at the Entity level using custom JHS entitiy classes.
BradW working with Sarah

How can I hash with the MD5 for file

I am a new learner in Java.
Is there any useful code example or materials for me to learn how can i hash with MD5 for file.

import java.security.*;
import sun.security.provider.Sun;
import java.io.*;
import sun.misc.*;
public class DigestOfFile
    public DigestOfFile(String mode) throws Exception
        assert(mode != null);
        digestAgent = MessageDigest.getInstance(mode, "SUN");
    synchronized public byte[] digestAsByteArray(File file) throws Exception
        assert(file != null);
        digestAgent.reset();
        InputStream is = new BufferedInputStream(new FileInputStream(file));
        for (int bytesRead = 0; (bytesRead = is.read(buffer)) >= 0;)
            digestAgent.update(buffer, 0, bytesRead);
        is.close();
        byte[] digest = digestAgent.digest();
        return digest;
    synchronized public String digestAsBase64(File file) throws Exception
        byte[] digest = digestAsByteArray(file);
        String digestAsBase64 = base64Encoder.encode(digest);
        return digestAsBase64;
    synchronized public String digestAsHex(File file) throws Exception
        byte[] digest = digestAsByteArray(file);
        String digestAsHex = encodeBytesAsHex(digest);
        return digestAsHex;
    private static String encodeBytesAsHex(byte[] bites)
        char[] hexChars = new char[bites.length*2];
        for (int charIndex = 0, startIndex = 0; charIndex < hexChars.length;)
            int bite = bites[startIndex++] & 0xff;
            hexChars[charIndex++] = HEX_CHARS[bite >> 4];
            hexChars[charIndex++] = HEX_CHARS[bite & 0xf];
        return new String(hexChars);
    private static final char[] HEX_CHARS =
    {'0','1','2','3','4','5','6','7','8','9','a','b','c','d','e','f'};
    private MessageDigest digestAgent;
    private BASE64Encoder base64Encoder = new BASE64Encoder();
    private byte[] buffer = new byte[4096];
    public static void main(String[] args)
        try
            java.security.Security.addProvider(new Sun());
            DigestOfFile shaDigestAgent = new DigestOfFile("SHA");
            DigestOfFile md5DigestAgent = new DigestOfFile("MD5");
            for (int argIndex = 0; argIndex < args.length; argIndex++)
                    String base64Digest = shaDigestAgent.digestAsBase64(new File(args[argIndex]));
                    System.out.println("Base64 SHA of " + args[argIndex] + " = [" + base64Digest + "]");
                    String hexDigest = shaDigestAgent.digestAsHex(new File(args[argIndex]));
                    System.out.println("Hex    SHA of " + args[argIndex] + " = [" + hexDigest + "]");
                    String base64Digest = md5DigestAgent.digestAsBase64(new File(args[argIndex]));
                    System.out.println("Base64 MD5 of " + args[argIndex] + " = [" + base64Digest + "]");
                    String hexDigest = md5DigestAgent.digestAsHex(new File(args[argIndex]));
                    System.out.println("Hex    MD5 of " + args[argIndex] + " = [" + hexDigest + "]");
        catch (Exception e)
            e.printStackTrace(System.out);
}

Has anybody tried creating and validating a XML doc with XML Schema?

Hi,
Has anybody tried creating and validating a XML doc with XML Schema?

With XMLBeans, an XML document may be created from and validated with an XML schema.

Request Native Ability to Calculate CRC, MD5, and SHA Hashes

// Requested via the Feedback tool also //
Provide the ability to calculate and generate CRC, MD5, and SHA hashes via a right-click context menu without having to resort to third party tools. In some environments, policy does not allow for certain applications. Having this ability natively
would really help to verify files.
This has been requested during the preview stage of Windows 7 and Windows 8. Asking again here.

That works perfectly! Thanks. I did not know that was available.
NAME
    Get-FileHash
SYNTAX
    Get-FileHash [-Path] <string[]> [-Algorithm <string> {SHA1 | SHA256 | SHA384 | SHA512 | MACTripleDES | MD5 |
    RIPEMD160}] [<CommonParameters>]
    Get-FileHash -LiteralPath <string[]> [-Algorithm <string> {SHA1 | SHA256 | SHA384 | SHA512 | MACTripleDES | MD5 |
    RIPEMD160}] [<CommonParameters>]
    Get-FileHash -InputStream <Stream> [-Algorithm <string> {SHA1 | SHA256 | SHA384 | SHA512 | MACTripleDES | MD5 |
    RIPEMD160}] [<CommonParameters>]
ALIASES
    None
REMARKS
    Get-Help cannot find the Help files for this cmdlet on this computer. It is displaying only partial help.
        -- To download and install Help files for the module that includes this cmdlet, use Update-Help.

Hashing With Double Linked Chaining

sigh I need to be enlightened in this field. I googled hashing/hash tables and read many sites on the subject... I still dont grasp them that well.
Anyone able to help me out with hashing?
Also, is double linked chaining the same as a double linked list?

Okay, well here's the assignment word for word...
Project V. Hashing With Double Linked Chaining
Due Date is on/before noon on December 3, 2004
Use the List ADT in the CODE folder to implement all project components.
1. Include algorithm documentation in the head of each method.
2. Implement an algorithm as a method or set of methods to load the data in a hash table with double linked chaining for data that map onto the same table cell. Load the information from a hard disk file called INFO.DAT into the table H. The data stored as one number per record in INFO.DAT are 32, 18, 20, 10, 226, 172, 50, 456, 691, 30, 100, 80, 340, 234, 349, 986, 234, 198, 275, 384.
3. Implement an algorithm as methods to search for keys from the hard disk file INFOKEY.DAT in table H. The data stored as one number per record in INFOKEY.DAT are 2, 691, 234, 1000, 10.
Post all the output in a GUI dialog box as sentences with one key per line. Implement methods to display error messages for possible errors.
4. Implement an algorithm as methods to delete a key K from H. Mark the key with a delete tag and report the key deleted.
My professor cannot teach material at all, he has poor communication skills. So all the previous assignments I just looked online and found help from people that have lots of experience in this.
I'm sure I can code the assignment and complete it if I only knew what it was asking. Can anyone make anything of this?

ForbiddenError: The server failed to authenticate the request. Verify that the certificate is valid and is associated with this subscription.

Im trying to connect to my azure subscription via powershell on my machine but keep getting the following error when i run a command:
ForbiddenError: The server failed to authenticate the request. Verify that the certificate is valid and is associated with this subscription.
The steps i have taken so far are:
1. get settings file
Get-AzurePublishSettingsFile
2. Import settings file
Import-AzurePublishSettingsFile -PublishSettingsFile "C:\Users\me\Downloads\credentials.publishsettings"
3. I then run Get-Azuresubscription with the following output:
SubscriptionId : 699385c3-b83a-44af-a651-bxxxxxxxxx
SubscriptionName : Windows Azure MSDN - Visual Studio Premium
Environment : AzureCloud
SupportedModes : AzureServiceManagement
DefaultAccount : 3B68902B5170D5EC91BFCBE4CC27E2A8838F61C4
Accounts : {3B68902B5170D5EC91BFCBE4CC27E2A8838F61C4, 26B118D7F3C598FB8FE9CDC49AB5DE5E450C967C,
03E1E1F0B8C7717F11FB58A14138C35524AB3F8D, 9A2E1FD267ECCC0E9B8C151BD931FC4824E89184...}
IsDefault : True
IsCurrent : True
CurrentStorageAccountName :
TenantId :
I run Get-AzureAccount and get the following:
Id Type Subscriptions Tenants
3B68902B5170D5EC91BFCBE4CC27E2 Certificate 699385c3-b83a-44af-a651-xxxxxxxxx
A8838F61C4
26B118D7F3C598FB8FE9CDC49AB5DE Certificate 699385c3-b83a-44af-a651-xxxxxxxxx
5E450C967C
03E1E1F0B8C7717F11FB58A14138C3 Certificate 699385c3-b83a-44af-a651-xxxxxxxxx
5524AB3F8D
9A2E1FD267ECCC0E9B8C151BD931FC Certificate 699385c3-b83a-44af-a651-xxxxxxxxx
4824E89184
85AD02CB8EB8AB20CF2C44FD9D19F2 Certificate 699385c3-b83a-44af-a651-xxxxxxxxx
9B6BB2FCD2
Finally, when i try to run Get-AzureSQLDatabaseServer, to list my databases, i get this error:
WARNING: Client Session Id: '5911f288-7b02-4c94-bb9d-37b9ea5fc187-2015-01-13 11:47:54Z'
WARNING: Client Request Id: '3e5f7ea9-092a-46fd-a6a6-6916b9161b77-2015-01-13 15:25:41Z'
Get-AzureSqlDatabaseServer : ForbiddenError: The server failed to authenticate the request. Verify that the certificate is valid and is associated
with this subscription.
At line:2 char:1
+ Get-AzureSqlDatabaseServer
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Get-AzureSqlDatabaseServer], CloudException
+ FullyQualifiedErrorId : Microsoft.WindowsAzure.Commands.SqlDatabase.Server.Cmdlet.GetAzureSqlDatabaseServer
I would appreciate any help in figuring out what i am doing wrong here.
Thanks,

OK. That won't work in Azure Automation though, as mentioned above. OrgID (recommended) or cert-based auth will need to be used. PublishSettings file won't work.
Correct, but the original question was:
<Quote>
Im trying to connect to my azure subscription
via powershell on my machine
</Quote>
I wanted to test automation script's core functionality without having to wait for the very very long time taken for an automation runbook
to spin up, actually run and provide output (can often take 2+ minutes for a trivial script). Although i cant run Workbooks on my pc, i can run the core modules (view virtual machines, databases etc) to ensure my logic is sound.

Which SHA hash algorithm is DS 5.1 using?

i'm trying to find out whether DS 5.1 uses the SHA-1 (160 bit) or the SHA-256 (256bit). i'm using coldfusion to query the directory and in order to compare password given by the user with the one stored in the directory i should hash the given password. coldfusion (a library, it's not a default function) has two differnt hash algorithms SHA-1 and SHA-256, which one should i use?
ioanna

DS uses SHA-1 (160 bit). And I'm not sure what you are proposing will work. I think you need the salt to generate the hash. Why do you need to compare the password outside the directory? You might be able to use the LDAP compare operation.

Getting schema validation working in Eclipse with Coherence 3.7.1.0

Just wondered if anyone had got schema validation to work in Eclipse (3.5 - Galileo) for Coherence 3.7.1.0?
The Coherence developer docs show that you should add sections like this:
<pof-config xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns="http://xmlns.oracle.com/coherence/coherence-pof-config"
xsi:schemaLocation="http://xmlns.oracle.com/coherence/coherence-pof-config
coherence-pof-config.xsd">
However, if I use that "shortened" form (for cache, pof, etc. configs) Eclipse gives a warning "No grammar constraints (DTD or XML schema) detected for the document." and the schema validation fails to work (i.e. no "auto pop-ups" when entering content, and rubbish content is gladly accepted.)
In Coherence 3.7.0, I'd used the following "extended" form (note the longer "schemaLocation") to get things working correctly:
<pof-config xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns="http://xmlns.oracle.com/coherence/coherence-pof-config"
xsi:schemaLocation="http://xmlns.oracle.com/coherence/coherence-pof-config
http://xmlns.oracle.com/coherence/coherence-pof-config/1.0/coherence-pof-config.xsd">
Also note that entering the "http://xmlns.oracle.com/coherence/coherence-pof-config/1.0/coherence-pof-config.xsd" in a web browser opens the xsd, as you'd expect.
Now...
I'm looking at the PofAnnotationSerializer in 3.7.1.0 and the "auto indexing" option. The declaration in my pof file for it fails as the "class" (or fully-qualified java.lang.Class version) in the "init-params" section isn't valid. If I look at the xsd on the url above, this is indeed the case, that option does not appear.
However, if I look at the POF xsd in the coherence.jar file for 3.7.1.0, the "class" option has been added, and has a newer 'version="1.1"' added to it's schema declaration. So I therefore tried to point my "extended" declaration to point to " http://xmlns.oracle.com/coherence/coherence-pof-config/1.1/coherence-pof-config.xsd", in order to get schema validation to work in Eclipse with this new schema. Unfortunately that url doesn't exist - you get a "Content Server Request Failed" error.
So, I guess my question is, is there a way to get myself pointed at the 1.1 versions of the xsd's so I can have schema validation working in Ecliipse? Or is there another workaround (did a bit of Googling, but that mainly seemed to be people switching validation off to simply get rid of the error...)
Cheers,
Steve

Cheers, Dave.
I had in fact had a try at extracting the xsd and pointing to it directly, and that did indeed work (had to do this following the same steps shown below using an "entry" in the XML Catalog.)
I had a look around at some of the other "entries" in Eclipse by default and noticed that they actually refer to xsd's directly within the jars, hence saving the extraction step and keeping screw-ups down to a minimum; a bit of playing around to get the syntax right and I finally managed to get it working.
For those who are interested (NB. my Coherence 3.7.1.0 install is in a directory "c:\coherence3.7"), the steps are:
In Eclipse, Go to Window->Preferences->XML->XML Catalog. Then create a "User Specified Entry".
In the "Location", add (without the quotes): "jar:file:/C:/coherence3.7/coherence/lib/coherence.jar!/coherence-pof-config.xsd"
In the "Key Type", add (without the quotes): "Namespace Name"
In the "Key", add (without the quotes): "http://xmlns.oracle.com/coherence/coherence-pof-config"
The schema validation now works fine. Eclipse shows no warnings/errors, and the auto-complete and validation are fully functional.
Still, it would be nice to get the "1.1" urls updated to point to the schemas on the Oracle site, to avoid all our developers from having to make these changes (and of course avoid them pointing at an older, out-of-date local install of coherence.)
Cheers,
Steve

Server side validation for file type with cffil sent via cfmail problem

Hello;
I have a small app that I need to allow users to be able to use a form, and send me and email with a file attachment. I have it working nicely, I included file manipulation into the validation process of the form and required form fields. The problem I'm having, is this. I'm trying to create and instance where if they try and upload lets say a pdf, it throws and error: "You are trying to upload the wrong file, please try again we only accept bla bla bla" Problem is, even if I'm uploading the proper file, it's rejecting it and deleting it. Can someone help me fix this? I've tried a number of different ways and can't seem to get this to go off properly. I am posting some of the code. There is a ton, so I'm posting the main parts so you get the idea and see my variables.

<cfparam name="FORM.descript" type="string" default=""/>
<cfparam name="FORM.attachment_1" type="string" default=""/>
<cfset arrErrors = ArrayNew( 1 ) />
<cfset showForm = true>
<cfif structKeyExists(form, "sendcomments")>
<cfif NOT len(trim(FORM.name))>
<cfset ArrayAppend(arrErrors,"Your Full Name!<br>") />
</cfif>

<cfif NOT Len(Trim(FORM.attachment_1))>
<cfset ArrayAppend(arrErrors,"You didn't attach a file!<br>") />
<cfelseif ArrayLen( arrErrors )>
<cftry>
<cffile action="DELETE" file="#FORM.resume#"/>
<cfcatch>

</cfcatch>
</cftry>
<cfelse>

<cftry>
<cfset request.AcceptImage="image/gif,image/jpg,image/jpeg,image/pjpeg,image/x-png">
<cffile action="upload"
                 filefield="attachment_1"
                 accept="#request.AcceptImage#"
                 destination="c:\websites\187914Kg3\uploads\"
                 nameconflict="Makeunique">

<cfif NOT ListFindNoCase("request.AcceptImage",CFFILE.ServerFileExt)>
<cfset ArrayAppend(arrErrors,"Only JPEG, GIF, and PNG file formats are accepted!<br>") />

<cftry>
<cffile action="DELETE" file="#CFFILE.ServerDirectory#\#CFFILE.ServerFile#"/>
<cfcatch>

</cfcatch>
</cftry>
</cfif>

Can anyone help me out. I can make more of this code available if needed. Like i said, there's a lot and I didn't want to dump it all out, this is the section creating the problem. There are no errors at this time, just rejecting all file types.
thank you.

It appears you are comparing your content_length with 1MB.
1KB: 1024 bytes
1MB: 1024*1024 bytes
Let us use max allowable size of 25KB here and amend the second half of our code.

<cfset maxFileSize = 25>
      
      <cfif (#reFindNoCase("gif|jpg|jpeg|pjpeg|png",myResult.clientFileExt, 1)# EQ 1) AND (#myResult.FileSize# LTE (#maxFileSize#*1024))>
            
            <p>
            Your file <strong>#myResult.clientFile#</strong> has been uploaded successfully!<br />
            <a href="yourTemplate.cfm">Back</a></p>
            
      <cfelseif #reFindNoCase("gif|jpg|jpeg|pjpeg|png",myResult.clientFileExt, 1)# NEQ 1>
            <p>
            You are trying to upload a <strong>#myResult.clientFileExt#</strong> file, please try again. We only accept <strong>gif, jpg, jpeg, and png</strong>.
            </p>
            
            <cffile action="delete" file="#svrFile#" />
                  <form method="post" action=#cgi.script_name#
                  name="uploadForm" enctype="multipart/form-data">
                  <input name="attachment_1" type="file">
                  <br>
                  <input name="submit" type="submit" value="Try again!">
            </form>
            
      <cfelseif #myResult.FileSize# GT (#maxFileSize#*1024)>
            <p>
            Your file was too large (<strong>#numberFormat(myResult.fileSize/1024, "____.__")# KB</strong>). Please try a smaller file!
            </p>
            
            <cffile action="delete" file="#svrFile#" />
                  <form method="post" action=#cgi.script_name#
                  name="uploadForm" enctype="multipart/form-data">
                  <input name="attachment_1" type="file">
                  <br>
                  <input name="submit" type="submit" value="Try again!">
            </form>
      </cfif>
</cfif>        
</cfoutput>

Validation of context attributes with adaptive webservice model

Hi, I am creating a Web Dynpro Java application (on top of Netweaver AS 7.0) using an adaptive webservice model to invoke a webservice.
The webservice has some request attributes of type string with limited length (for example limited to 1 character). I bound the model to component controller context and created a mapping between the component controller context and view context. In the view, I created a form which is bound to the context attributes.
When user enters string values, which are longer than the maximum length specified in webservice WSDL, and submits the form, an exception is thrown when Web Dynpro runtime is trying to assign entered values into context attributes:
com.sap.dictionary.runtime.DdCheckException: Length of character string "abcdef" must be smaller than or same as MaxLength 1;
    at com.sap.dictionary.runtime.DdTypeString.checkValid(DdTypeString.java:195)
    at com.sap.tc.webdynpro.model.webservice.base.model.BaseGenericModelClass.setAttributeValue(BaseGenericModelClass.java:304)
    at com.sap.tc.webdynpro.model.webservice.gci.WSTypedModelClass.setAttributeValue(WSTypedModelClass.java:62)
    at at.gov.bmf.demo.comp.employee.model.OrganizationalAssignment.setEmployeeGroup(OrganizationalAssignment.java:52)
    at at.gov.bmf.demo.comp.employee.wdp.IPublicEmployeeDemo$IOrganizationalAssignmentElement.wdSetObject(IPublicEmployeeDemo.java:1552)
    ... 32 more
This exception is thrown before my non-validating action is executed, so I am not able to prevent it or handle it.
Is there any way how to catch this exception or prevent it?
Does anyone know where these model restrictions are stored? I searched the XML files generated for the model, but I haven't found anything. Does the Web Dynpro runtime access WSDL everytime it needs to validate request parameters?
Thanks,
Tomas

No ,This is the preferred and safer way to separate the Model Node and and Input Node and relationship between them by using mapping.
You create your context structure for input and then on action set user input to model data.
Safer it means : Sometimes it happen that model data not populated properly due to network or wrong user input etc ,this time our presentation will be safe and display the proper error message rather the screen went away with null pointer exception.
Regarding your - it require a lot of work. It too much convince for us that rather than writing 50 lines of code
for only input length validation WebDynpro provides us a better model driven solution.
Best Regards
Satish Kumar

CSS validator having a problem with shorthand line-height

Hi,
Suddenly noticed a CSS error with a simple CSS:
h1 { font: 20px/100% "Times New Roman", Times, serif; }
"Value Error : font / is not a font-family value : 20px / 100% "Times New Roman",Times,serif "
That's the way I've always written "font." And Dreamweaver agrees. Is there a new standard here?
http://www.wellesley-hotel.com/test2.html
http://jigsaw.w3.org/css-validator/validator?profile=css21&warning=0&uri=http%3A%2F%2Fwww. wellesley-hotel.com%2Ftest2.html

With CSS Shorthand on fonts, you should express ALL attributes.
font: style | variant | weight | size/line-height | font-family "font name", "font name", font;
If all attributes are not required, better to use font-size, line-height and font-family.
Nancy O.
Alt-Web Design & Publishing
Web | Graphics | Print | Media Specialists
http://alt-web.com/

Date Validation problem in form with report

Hi,
I am stuck on this date validation issue in a form with report that I am working on-
I have an Active_date_start and an Active_date_end field. I want to validate the form in such a way that if the user enters the Active_date_end < active_date_start then it should error out appropriately asking to change the active_end_date . Also another problem is that the changes are made to the active_date_end they should reflect in the table. How do I accomplish this.
Appreciate all the help offered.
Thanks.

Hi,
Thanks for the code.Now the APPLY CHANGES works fine except that it throws an error when I change the end date to a date which is less than the start date . So it does show me my error and does not go further but also shows me the error -
Invalid PL/SQL expression condition: ORA-06550: line 1, column 29: PLS-00306: wrong number
or types of arguments in call to 'NVL' ORA-06550: line 1, column 7: PL/SQL: Statement
ignored Invalid PL/SQL expression condition: ORA-06550: line 1, column 29: PLS-00306:
wrong number or types of arguments in call to 'NVL' ORA-06550: line 1, column 7:
PL/SQL: Statement ignored
I looked up the error number and it says its a generic error type where the error can be found on the line number specified. But in this case how and where do I look for the error line?. This is the code I am using-
DECLARE
vACTIVE_DATE_START DATE;
vACTIVE_DATE_END DATE;
BEGIN
vACTIVE_DATE_START := TO_DATE(:P4_ACTIVE_DATE_START, 'DD/MM/YYYY');
vACTIVE_DATE_END := TO_DATE(:P4_ACTIVE_DATE_END, 'DD/MM/YYYY');
IF vACTIVE_DATE_END < vACTIVE_DATE_START THEN
RETURN 'End date is before start date';
ELSE
RETURN NULL;
END IF;
END;
My base table has the active_date_start as NOT NULL. Now I have the exact same code for APPLY CHANGES
in other form and it works fine not giving the above error. I am at a loss to know how I can get rid of the error.
Any suggestions!.
Thanks in advance,
A

About hash with MessageDigest

Hi, I have troubles when I using MessageDigest to get hash.
I use JCDK3.0.3_ClassicEdition_RR and jdk1.5
here's part of my code:
private void getDigest(byte[] buffer)
          if (hashArray == null)
               hashArray = JCSystem.makeTransientByteArray((short)20, JCSystem.CLEAR_ON_DESELECT);
          MessageDigest alg = MessageDigest.getInstance(MessageDigest.ALG_SHA,true);
          //alg.doFinal(buffer, (short)5, (short)8, hashArray, (short)0);
          //return alg.getLength();
It returns 6f 00
If I annotate the line of MessageDigest.getInstance, the applet runs well. So I think MessageDigest.getInstance causes the trouble.
Please help me! Or tell me how to get hash of message. thx!

6f00 means there is unhandled exception in your code. Use try/catch statements to handle it and found the reason. Similar to that:
try{
MessageDigest alg = MessageDigest.getInstance(MessageDigest.ALG_SHA,true);
catch(CryptoException e)
if ( e.GetReason() == CryptoException.NO_SUCH_ALGORITHM )
ISOException.throwIt( something );
}according to java card specifiation NO_SUCH_ALGORITHM is the only exception for MessageDigest.getInstance. The reasons are "if the requested algorithm or shared access mode is not supported.". So, check that SHA is supported by tools/cards that you use, try to set externalAccess flag to false.

SHA-256 with WebLogic Server

We are being forced to migrate our SSL certs from SHA-1 to SHA-256. We will be using Oracle WebLogic Server 10.3.4 for Oracle FMW Portal. Can anyone tell me if WebLogic supports serving SHA-256 certificates? If so, is there any documentation on this?

You can get in touch with Oracle Weblogic Support and give this bud id : bug8422724
WLS 10.3.1 and above support certificates signed by sha256withRSA.
-Faisal
http://www.weblogic-wonders.com

Validating a SHA hash with a 4byte salt in ldap

Similar Messages

Maybe you are looking for