Achieve Unlimited Strength Jurisdiction without modifying JDK files?

I have a requirement in my application to use Unlimited Strength Jurisdiction. So I downloaded and extracted the JCE files and placed them in $JAVA_HOME/jre/lib/security overriding the existing jars. This works perfectly fine for me.
My question is; is there some way of installing the new policy files without having to override the files in the JDK. Ideally, I would like to set a system property to point to a different directory which includes the new policy files and not have to touch my jdk files. Is this possible?
Thanks in advance.

It cannot be done. You could always use the lightweight Bouncy Castle API that does not have the key size restrictions.

Similar Messages

  • Software distribution and Unlimited Strength Jurisdiction Policy Files

    I suppose, I'm NOT allowed to ship the Unlimited Strength Jurisdiction Policy Files (USJPF) with my application,
    even if living in Germany and not selling abroad, right?
    So I see 2 possibilities:
    - Use weaker encryption by default and encourage the users to download the USJPF by themself.
    - Implement a stronger encryption on the base of the weaker one by encrypting several times, let say in the way 3DES works.
    I'm quite sure, I'm not the only one facing such a problem, how do you solve it?

    The export of cryptography is usually contingent on the laws of the country that you live in. As a US citizen, I know that I cannot ship unlimited strength cryptography to specific countries without a permit. You should check what German law allows you to do (I was under the impression that Germany did not have such controls, but that impression could be dated) and read the license accompanying the USJPF in Germany, to see what restrictions are placed on it.
    Another option is to use a provider fhat is developed outside the US. I know that BouncyCastle is developed in Australia, so the US restrictions would not apply to them. Have you checked their licensing agreement to see what you're allowed to do with their provider files?

  • Java: Where are JCE Unlimited Strength Jurisdiction Policy Files for Java for Mac OS X 10.7?

    I need to install the JCE Unlimited Strength Jurisdiction Policy Files for Java 1.6 under Mac OS X 10.7.  I know where to get then from the Sun/Oracle Java download site, but want to make sure that these will work on the Mac.  Or, are there Mac specific versions somewhere?

    There's a  jce.jar file in /System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Home/lib/, so it appears that they're already in place, but that's just a WAG.

  • Replace the JCE Unlimited Strength Jurisdiction Policy files - SAP JVM 5

    Hi Experts,
    I had a NetWeaver 7.1 system with SAP JVM 5. I tried to run a cryptography software on the system, but the current JCE Unlimited Strength Jurisdiction Policy files of the JVM limited encryption algorithms and key lengths.
    I downloaded the jce_policy-1_5_0.zip file from the Sun website, unzipped it, replaced the old policy files (sapjvm_5/jre/lib/security/local_policy.jar and sapjvm_5/jre/lib/security/US_export_policy.jar) with the new ones, then restarted the server. But, after the server was restarted, the new policy files were deleted and the old ones were restored.
    Could you tell me what should I do to apply the new policy files?
    Thanks in advance.
    Victor

    Issue Resolved..with help of OSS note :739043
    EP 6.0 SP15.... I had same issue for Portal prodution:
    I had  copied new files (local_policy.jar and US_export_policy.jar) in directory /opt/java1.4/jre/lib/security
    Jun 16  2003 local_policy.jar
    -rw-rr   1 root       sys           4355 Jun 16  2003 US_export_policy.jar
    -rw-rr   1 root       sys           2910 Aug  2  2007 local_policy.1.jar
    -rw-rr   1 root       sys           2429 Aug  2  2007 US_export_policy.1.jar
    -rrr--   1 bin        bin           2910 Dec 12 10:14 local_policy.2.jar
    -rrr--   1 bin        bin           2429 Dec 12 10:14 US_export_policy.2.jar
    -rrr--   1 bin        bin           2223 Dec 12 10:25 java.policy
    -rrr--   1 bin        bin           6871 Dec 12 10:25 java.security
    -rrr--   1 bin        bin          41278 Dec 12 10:25 cacerts
    Thanks,
    Hari

  • Java Kernel and the "Unlimited Strength Java Crypto Extension Policy Files"

    Is Java Kernel able to download and install on-demand the "Unlimited Strength Java(TM) Cryptography Extension Policy Files"?
    Currently, I have to instruct the users of my applications to download those policy files from Sun's website and follow the installation instruction. I haven't received any positive feedback from my users when I told them to do this task. I understand them. Manual installation of this files really suck especially for lay men.
    So, with Java Kernel, what's the plan? Can I hope for something better?

    I believe, for US export-control reasons, the Unlimited Strength JCE policy files are never automatically downloadable by the JVM - they have to be explicitly downloaded and configured. However, you could download it yourself, configure the JVM with the policy files, create your own ZIP/JAR file and internally distribute it to your users through your intranet. But, if you do this, you are responsible for complying with the applicable export laws of your country, and perhaps, Sun licensing terms for redistributing the JVM.

  • (JCE) Unlimited Strength Jurisdiction Policy Files

    I have got my program up and running, but now i keep the following error:
    "java.security.InvalidKeyException: Illegal key size or default parameters"
         at javax.crypto.Cipher.a(DashoA13*..)
         at javax.crypto.Cipher.a(DashoA13*..)
         at javax.crypto.Cipher.a(DashoA13*..)
         at javax.crypto.Cipher.init(DashoA13*..)I have read up on it but i need to install the JCE policies. Bluej is the compiler that i am using. How to do i install the policies into this compiler. Stupid question Isuppose but any help will be appreciated.
    Thanks in adavance

    Parry1982 wrote:
    I have the local_policy.jar & US_export_policy.jar install in the following directory;
    C:\ProgramFiles\Java\jdk1.6.0_16\jreThat is not where the installation instructions tells you to put them. You did read the installation instructions didn't you?

  • Distributing software with unlimited strength JCE policy files

    I'm about to release some software that uses AES 256-bit encryption. I had to download the "Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 6" to do this level of encryption. I'd like to distribute my software with a bundled version of the JRE that includes these policy files. The software will be available to download from the Internet for those who pay for the service. Placing it on the Internet is technically an export because it's available to anyone in the world.
    I've talked to the Bureau of Industry and Security and they said I need to file for a classification number (ECCN). Is this necessary if I'm using Sun's software? The JCE has already been through the export approval process so it would make sense if just including it in my software required nothing. I haven't been able to find any information about what to do legally if using the unlimited strength policy files. What laws do I need to know about or comply with to do this? Also, are there any legal ramifications of including the JRE with my software? I'm using a custom jre launcher that lets me bundle whatever jre I want with my software, so I assume it's a common practice, but I'm not sure.
    Any help would be appreciated.

    I posted this question on other sites as well, but never heard any good answers.
    I've had to do some research and I've heard a few different things, but this is what I've learned:
    Software being exported (putting on the Internet is an export) that contains symmetric encryption above 64-bit requires filling out a BIS-748P form. I had to first of all request a PIN and CIN (company id number) from the BIS so that I can access their SNAP-R system which is where you fill out and submit all the paper work (including the BIS-748P) online. I haven't filled that out yet, but once you do they will review your software and classify it with an ECCN number and depending on what if falls under they will require you to obtain a license or license exception. For what I'm doing (and what most probably need this for), a license is not needed. It's simply classified as a type of encryption software and they know who you are and what you're doing with it.
    Until this is filed, the software is under a certain statute as to what you can do with it and there's a lot of legalities behind this entire process that I don't fully understand, but I think filling this paperwork out and talking to those who receive it is a good place to start.
    I'm not a lawyer by any means and I could be missing some details, but this is what I understand about the process. If you learn anything else (or find some of this to be untrue), let me know.

  • Override JCE default (limited strength) jurisdiction policy files

    Hi!
    I am writing an applet, which has to decrypt encrpyted file with some simetric algorithm, e.g. PBEWithMD5AndTripleDes. Due llimitations of key lengths in default (limited strength) jurisdiction policy files for JCE I cannot use for example TripleDES with 168 bit key or. Blowfish with 400 bit key.
    I know I can obtain Unlimited version of these files from java.sun.com and replace this files in JDK/JRE installation directory. That's ok for us at server side, but disaster at client (applet) side, because we must modify installation of JRE on every computer where user want to use applet and update it every time when JRE is being updated.
    So me question is: is there any way to distribute unlimited jurisdiction files with an applet (I know how to include *.jar files) and make it work? For example via endorsed mechanism, setting some security property, reloading JCE?
    Thanks for help!

    You can't override them. Since the restriction apply only to the JCE, your best bet is to use the lightweight API from Bouncy Castle which does not use the JCE.

  • How to install unlimited strength policy files with 2003 windows server

    Hi all,
    I am working on encryption AES 256 bit key encryption.
    128 is default encryption key.But for use 256 bit encryption key need to add unlimited strength policy file with jdk.
    That is working fine on windows xp.
    Now problem
    But when i run on client machine with operating system windows 2003 server standard.
    I replaced all files under folder Java\jdk1.6.0_10\jre\lib\security with files which i am using on windows XP.
    Restarted the computer after update files but on windows server 2003 256 bit key encryption not working.
    Giving following exception
    java.security.InvalidKeyException: Illegal key size or default parameters
         javax.crypto.Cipher.a(DashoA13*..)
         javax.crypto.Cipher.a(DashoA13*..)
         javax.crypto.Cipher.a(DashoA13*..)
         javax.crypto.Cipher.init(DashoA13*..)
         javax.crypto.Cipher.init(DashoA13*..)
    Please suggest me how to run encryption on windows server 2003..
    Thanks
    Anu

    anu1106 wrote:
    I replaced all files under folder Java\jdk1.6.0_10\jre\lib\security with files which i am using on windows XP.Why? Why not just install the unlimited strength files in the normal way according to the installation instructions given in the distribution file?

  • How to change the width for adf shuttle without modify the skin file

    Dear Professionals
    I haven an ADF Shuttle component in my jsp screen , How can i change the width for the two boxes without modify the skin files.(I know i can do that by skin but what i want to change one shuttle just in one screen not change all shuttles on other screens).
    Regards
    Wish79

    Okay, I didnt try with the trinidad selectmanyshuttle, but this worked for me on the af:selectmanyshuttle..
            <af:selectManyShuttle label="Label 1" styleClass="mycustcss">
              <af:selectItem label="Label1" value="value1"/>
              <af:selectItem label="Label2" value="value2"/>
            </af:selectManyShuttle>
            <af:selectManyShuttle label="Label 1">
              <af:selectItem label="Label1" value="value1"/>
              <af:selectItem label="Label2" value="value2"/>
            </af:selectManyShuttle>        And in my css file, I have
    af|selectManyShuttle.mycustcss::content { width: 800.0px;}
    The first selectManyShuttle came up very wide and the second one came up in the default width..
    Julian.

  • Unlimited Strength Policy File

    Please inform if we can have Unlimited Strength Policy File in DPRK and how I can recieve this

    What is DPRK?
    Message was edited by:
    Martin@StricentHello DPRK is Democratic Peoples Republic of Korea

  • Modify jsp files without redeploy

    Hello,
    i modify jsp files without redeploy using tomcat.is there anyone know how
    to enable wls has this future.
    do you have any advice
    Best Regards,
    rechete

    Hey Rechete. Check out "Split Development Directory Environment" which we introduced in 8.1.
    The WebLogic split development directory provides these benefits:
    * Fast development and deployment. By minimizing unnecessary file copying, the split development directory Ant tasks help you recompile and redeploy applications quickly without first generating a deployable archive file or exploded archive directory.
    * Simplified build scripts. The BEA-provided Ant tasks automatically determine which J2EE modules and classes you are creating, and build components in the correct order to support common classpath dependencies. In many cases, your project build script can simply identify the source and build directories and allow Ant tasks to perform their default behaviors.
    * Easy integration with source control systems. The split development directory provides a clean separation between source files and generated files. This helps you maintain only editable files in your source control system. You can also clean the build by deleting the entire build directory; build files are easily replaced by rebuilding the project.
    http://e-docs.bea.com/wls/docs81/programming/environment.html#1097239

  • Can´t create or modified PDF Files on CIFS shares

    Does anyone know the solution for this:
    My customer cannot modify PDF files on a CIFS NAS mapped partition, all permissions are configured as full control
    Doc. files, xls files can be modified without problems in the same share,  this happend only with PDF files.
    Files on local drives are not affected.
    pls your help
    Product Information 
    Adobe Acrobat Pro extend 9.0
    S.O Windows 7 WS PC
    access trough : windows shares access
    local access : no erros present
    new PDF files also affected
    other files extensions not affected
    thansk
    Hector Ortiz
    EMC

    I have PDF files that i downloaded a while ago, those are fine. When surfing - i down load and file never opens nor is there anything to save....

  • Problem in saving modified rtf file in jsp

    hi,
    I have [b]problem in saving modified rtf file in jsp. My scenario is like this:
    I need to open rtf file in jsp and allow user to modify it, after user modifies rtf file in browser, user will press send button. After user pressing send button rtf has to be saved into destination directory(the directory from which its been fetched. I appreciate if any one could send me relevant code for the same.
    thanks
    ram

    1) RTF is not opened in your browser, but in an application that is set to handle the file type (like Word or Wordpad)
    2) from the web you have no control over what that application does
    3) conclusion: what you want is not possible using the web
    Other than that, asking for code without showing that you put some effort into the problem yourself is a sure way of getting flamed. You should know that by now, since you registered more than 2 years ago...

  • Retouch photo without reducing the file size/quality?

    I have been retouching some pictures for use in a photo book but notice that each time I do so, the file size decreases fairly significantly e.g from 4MP to 2MP.
    Is there a way I do minor retouching to a photo without reducing the file size/quality?
    Thanks in advance

    Where are you seeing this size reduction? What format are the original photos?
    For example when you edit a RAW photos you create a JPEG modified version which is much smaller - one I just did went from 17 MB as RAW to 4.4 as a JPEG  --  you could save as a TIFF but to me that is not worth the space loss - I seriously doubt that you will ever do anything that you can see the difference in quality between a TIFF and JPEG of yoru images
    LN

Maybe you are looking for