"Broken" MD5 and SHA-1: Any measures available/needed for JCA/JCE/JSSE ?

Dear Experts
As security reports emerge saying MD5 and SHA-1 algos being broken I d'like to know what this means to us as longterm users of Sun's JCA/JCE/JSSE implementations within 1.3.1, 1.4.2 and 1.6 JRE / JDK.
Main area of our usage:
- Key and certificate generation by keytool and/or openssl
- TLS communications with above material from jks keystores and SunPksc11 along with smartcards used with java client and servers, webbrowsers and servers.
A common recommendation I've got regarding SHA-1 is to upgrade to SHA-256, 384 or even 512.
Is this feasible / needed for above applications?
What about MD5?
Really concerned
Marcel

Hello all,
I have problem with a JSSE client to communicate with an openssl server. It got stuck after connection is established. Do you have any idea?
Any help will be appreciated.
YFG

Similar Messages

Request Native Ability to Calculate CRC, MD5, and SHA Hashes

// Requested via the Feedback tool also //
Provide the ability to calculate and generate CRC, MD5, and SHA hashes via a right-click context menu without having to resort to third party tools. In some environments, policy does not allow for certain applications. Having this ability natively
would really help to verify files.
This has been requested during the preview stage of Windows 7 and Windows 8. Asking again here.

That works perfectly! Thanks. I did not know that was available.
NAME
    Get-FileHash
SYNTAX
    Get-FileHash [-Path] <string[]> [-Algorithm <string> {SHA1 | SHA256 | SHA384 | SHA512 | MACTripleDES | MD5 |
    RIPEMD160}] [<CommonParameters>]
    Get-FileHash -LiteralPath <string[]> [-Algorithm <string> {SHA1 | SHA256 | SHA384 | SHA512 | MACTripleDES | MD5 |
    RIPEMD160}] [<CommonParameters>]
    Get-FileHash -InputStream <Stream> [-Algorithm <string> {SHA1 | SHA256 | SHA384 | SHA512 | MACTripleDES | MD5 |
    RIPEMD160}] [<CommonParameters>]
ALIASES
    None
REMARKS
    Get-Help cannot find the Help files for this cmdlet on this computer. It is displaying only partial help.
        -- To download and install Help files for the module that includes this cmdlet, use Update-Help.

I can't get to download the app store after all the updates. I have version 10.6.8 and there are no more available updates for my operating system.

I can't get to download the app store after all the updates. I have version 10.6.8 and there are no more available updates for my operating system.

Look in the HD/Applications folder.

Is there any internet security needed for use with the ipad 2??

is there any internet security needed for the ipad 2? I.e. For when you're shopping online etc?

You don't have to purchase a mouse. You already have one, it's wireless and the only one that will work on an iPad.
 Cheers, Tom

One Year in USA coming from Italy: i have 1 pc and 1 smartphone LG 5 i need for a convenient plan to talk to Italy and 4 GB for PC. Can you help me?

One year in USA coming from Italy: i have 1 pc and 1 smartphone LG 5 i need for a convenient plan to talk to Italy and 4 GB for PC. What kind of plan to buy?

Your devices are incompatible with the Verizon Wireless CDMA/LTE network. You might want to look at the local GSM carriers like AT&T or T-Mobile or a regional GSM carrier.

Any more configureation needed for RFC -File Syncronous scenario?

HI Experts,
I am working on File to RFC syncronous scenario.
I imported RFC which has Mess, Res and Excep
I have ED which has only Mess
Now I need to send file using File Adaptor to ECC using RFC and ECC has to send resp back to File using File Adaptor.
I created:
MI
MI_File_Meg_os (File Message Output Syncronous) ---> Mess ED
> MT_Res -
> DT_Res
MI_RFC_Meg_is (Input RFC Message ) ---> Mess
> Resp
I cretaed MM for (Message and Response), IM (mapped for both mess and respose) and activated.
I created 3 Communicaiton Channel (File_Sender, File_Receiver and RFC_Receiver), Rec Determination, Sender Aggrement and Receiver Aggrement.
Do I need to create any more objects or configure ?
Thanks in Advance,
Rajeev

You need RFC CC and Filereceiver CC too
Sender Agreement
Do I need to make sender CC for RFC or File receiver CC?
both
Interface determination,
for mapping File request to RFC and RFC response to File
Sender or receiver Aggrements
sender agreements with FileSender CC and receiver agreement for File receiver CC
For getting back Ack from ECC?
RFC is synchronous and can return response
goto wiki and check for pi there is exact scenario
rajesh

If any professional degree need for SAP HANA 1.0 Certification learning?

Dear All
I am Janakiraman and interest in SAP Hana learning and Certification...i am not Professional graduate...i have technical diplomo only..any professional degree must for SAP HANA 1.0 Certification learning?

Hi
Yes, if you are planning to install new system(BW 7.3). No need for migration or use oracle DB.
BW 7.3 on HANA, where HANA will work as DB for your BW 7.3.
Hope you already have advantages of using BW on HANA.
Regards,
Venkatesh

Display and save only the measured FRF curve for impact test

hi,
Im very new to Labview. I would like to do a simple impact test using Labview.
The frequency range of my interest is only 0-200Hz. It is mean that I could like to capture the FRF for this frequency after I excite the system.
My question is how can I capture and display the results for FRF onyl after I excite the system.
My current condition is when I start the measurement there is some reading (may be is noise) showing in my graph indicator (setting at 0-200Hz).
When Im exciting the system using hammer, the curve of FRF is appear for a while and turn again into some noise reading (similar with before excitation).
How can I let my graph indicator show and stop at the FRF curve even after excitation?
Thanks alot^^
Regards

you naming convention is confussing. you should follows Java naming convention..you have a getXXX but decalred the return type as "void"...get usully means to return something...
your code is doing too much..and hard to follows..
1. get the selected files
for each selected file
process the file and return the result
write out the result.
/** close the precious resource */
public void closeResource(Reader in){
    if (in != null){
        try{ in.close(); }
        catch (Exception e){}
/** get the total number of line in a file */
public int getLineCount(File file) throws IOException{
    BufferedReader in = null;
    int lineCount = 0;
    try{
        in = new BufferedReader(new FileReader(file));
        while ((in.readLine() != null)
            lineCount++;
        return lineCount;
    finally{ closeResource (in); }
/** read the file */
public void processFile(File inFile, File outFile) throws IOException{
    BufferedReader in = null;
    StringBuffer result = new StringBuffer();
    try{
        in = new BufferedReader(new FileReader(inFile));
        String line = null;
        while ((in.readLine() != null){
            .. do something with the line
            result.append(....);
        writeToFile(outFile, result.toString());
    finally{ closeResource (in); }
public void writeToFile(File outFile, String result) throws IOException{
    PrintWriter out = null;
    try{
        out = new PrintWriter(new FileWriter(outFile, true)); // true for appending to the end of the file
        out.println(result);
    finally{ if (out != null){ try{ out.close(); } catch (Exception e){} } }
}

CVE-2014-6271 and CVE-2014-7169 Patch Availability Document for Oracle Linux

Hi,
Can you suggest from where we need to download bash rpm for OEL 6 :-
bash-4.1.2-15.el6_5.2.x86_64.rpm
bash-doc-4.1.2-15.el6_5.2.x86_64.rpm
Thanks in Advance !!
Mukesh

First see the document I linked about creating a local yum mirror (How to Create a Local Yum Repository for Oracle Linux). I very strongly recommend setting this up so your systems can get other updates besides bash.
The individual RPMs can be found at Index of /repo/OracleLinux/OL6/latest/x86_64/ -- but I cannot stress the importance of updating entire systems rather than just bash. If you are not updating your systems periodically, bash is just one of your worries (as you're undoubtedly vulnerable to hundreds of other exploits in other packages besides Shellshock). Please set up an update repository and use it.
Patching only the vulnerabilities you see in the news is equivalent to locking your home's front door, but leaving the security alarm disconnected and the back door held open with a doorstop. You need all the updates, not just bash.

Any APP available yet for watching BT Sport of SMA...

Been a long while since I last checked, can watch BT sports on PC ... but obvious place to watch it is on SMARTTV ... have BT got around to prodcuing an app yet ?
Like Demand4 ITVPlyaer etc.
It is frustrating having the BT sports channel in the channel list but not being able to access them, and as PC is in different part of house ... that is not an option.
I know I could use a phone but don't want to tie another device to the TV.

I don't see how it is a Logistical nightmare my SMART TV has Apps for many viewers .. BBC, ITV, 4oD, Ch5, Netflix, BBC Sport, Amazon, BlinkBox, TED, GOLD, Youtube, Vimeo etc. These companies seem to keepo up to date with no isssues.
If BT Sports wish to be taken serioulsy then provision of a player would be an obvious direction ... it is frustrating when BT tell me I get this free as a customer but cannot view it on TV without buying seperate h/w.
The whole premise of SMART TV apps is that you can watch without seperate h/w
A year ago BT said it was planned.

Any special configuration needed for Print PDF?

To print as PDF is there any configuration needed to be set.

Hi,
the only thing to pay attention is when you have to print large PDF and you receive this error: AGEGTYVF.
Refer to this doc in the Oracle Support: Printing A Large OBIEE Answers Report Or Dashboard To PDF Fails With Error Code: AGEGTYVF
Regards,
Gianluca

Is there any profile options needed for revaluation program

revaluation program is taking long time to complete in 11.5.10.2
is there any profile options to setup revaluation. what may be the reson for this issue

GL: Income Statement Accounts revaluation rule-YTD
GL Revaluation:Validate Gain/Loss Accounts-Yes
I have made this profile setups

Are there any translator available in ODI?

Hi All,
My source database is in English.But the language of my target table is in French.Is it possible to load data from English source tables to French target tables?Do the English column names and data get automatically converted to French names and data using any translator available in ODI?If not,kindly tell me how I can achieve it?
Thanks,
PB

In short, No.

Broken Ringtones and Message Alerts

I have updated both my Iphone 3GS to the latest ver. 5.0.1, but all my ringtones and message alerts sounds like broken tunes and sometimes get stuck on one note for a few seconds. Any advise?

Try to reset the phone by holding the sleep and home button for about 10sec, until the Apple logo comes back again. You will not lose any data by resetting, but it can cure some glitches.
If this does not help, setting it up as new device would be the next step:
How to erase your iOS device and then set it up as a new device or restore it from backups

I migrated a user from another mac and cant get any updates to install!

Hi
I migrated a user from another mac and cant get any updates to install, for example it says iPhoto is intalled but its not, i never copied it from the older imac, and i cant download it to this one now
any help appreciated

Try setting up another admin user account to see if the same problem continues. If Back-to-My Mac is selected in System Preferences, the Guest account will not work. The intent is to see if it is specific to one account or a system wide problem. This account can be deleted later.
Isolating an issue by using another user account
If the problem is still there, try booting into the Safe Mode using your normal account. Disconnect all peripherals except those needed for the test. Shut down the computer and then power it back up after waiting 10 seconds. Immediately after hearing the startup chime, hold down the shift key and continue to hold it until the gray Apple icon and a progress bar appear. The boot up is significantly slower than normal. This will reset some caches, forces a directory check, and disables all startup and login items, among other things. When you reboot normally, the initial reboot may be slower than normal. If the system operates normally, there may be 3rd party applications which are causing a problem. Try deleting/disabling the third party applications after a restart by using the application un-installer. For each disable/delete, you will need to restart if you don't do them all at once.
Safe Mode
Safe Mode - About

"Broken" MD5 and SHA-1: Any measures available/needed for JCA/JCE/JSSE ?

Similar Messages

Maybe you are looking for