Oracle 10g + Bouncy Castle JCE provider

Hi all,
I'm trying to deploy Bouncy Castle JCE provider into Oracle environment. I've
tried several choices but no one works.
My environment:
- Oracle 10.2.0.1.0 with Java version 1.4.2_08
- Java app deployed into Oracle uses $ORACLE_HOME/javavm as $JAVA_HOME
- I'm using bcprov-jdk14-124.jar.
I've deployed this library into Oracle (using loadjava), I've tried to copy
into $JAVA_HOME/lib/ext and edit $JAVA_HOME/lib/security/java.security (added
line 'security.provider.6=org.bouncycastle.jce.provider.BouncyCastleProvider'),
I've tried to copy it into $ORACLE_HOME/jdk/jre/lib/ext and edit appropriate
java.security file, but nothing works. I'm still getting Exception with 'The
provider BC may not be signed by a trusted party'.
Is anyone successfully using bcprov library in Oracle?
Thanks a lot
Antonin Faltynek

Hi,
See Michael's post in the following thread Re: loadjava sunrsasign.jar
Kuassi http://db360.blogspot.com

Similar Messages

How to configure Oracle Dataguard for Oracle 10g database

Hi Friends,
I would like to configuer Oracle Dataguard for my Oracle 10g Database.
Please provide me the configuration document.(step by step guide)
Regards,
DB

Hi
Go throw below link. This would be help to configure ODG..,
http://blogs.oracle.com/AlejandroVargas/2007/09/data_guard_physical_standby_im.html
http://blogs.oracle.com/AlejandroVargas/2007/10/data_guard_broker_observer_and.html
Thanks,
Mayilselvan.S

Table_From_Block Build-in Package is not working in Oracle 10G

Hi
Table_From_Block Build-in Package is not working in Oracle 10G
Kindly advice..

user648759 wrote:
Hi
Table_From_Block Build-in Package is not working in Oracle 10G
Kindly advice..Provide a little more information. Forms version OS version, more information about your problem and question.
--and explain what on earth Table_From_Block* mean's--
Tony
PS: TABLE_FORM_BLOCK is a built-in for internal use, usually auto generated by forms. For a moment I didn't get what that meant, need more coffee.
Edited by: Tony Garabedian on Aug 29, 2008 12:39 PM

Oracle 10g SQL

Hi ,
I want some information regarding Oracle 10g SQL Exam.Please provide any dumps,links,books or any other related information.
Thanks in Advance
Laxman

login to otn.oracle.com to find more information on exams
underline Steps to Become Oracle Certified_underline_
http://education.oracle.com/pls/web_prod-plq-dad/db_pages.getpage?page_id=50#1
If you are from India, below is the contact info
Bangalore 080 41084657
Chennai 044-66346114
Delhi 011-46509015
Hyderabad 040-66397157
Kolkata 033-66162000
Mumbai 022-67711214
Ahemdabad 079-40024246
Pune 020-66321002
Thank You

DB2 UDB - Oracle 10g Size Difference

Hi -
We are looking to migrate a production database from DB2 UDB to Oracle 10g. Can anyone provide any insight as to what kind of size changes we can expect?
Thanks!

I don't know even the a b c of DB2 but still I can say that it must be saving some sort of metadata as oracle. In oracle 10g the extra tablespaces which you must have to create are SYSTEM and SYSAUX which actually store the metadata and AWR information. How big your current database is on DB2, check it with and without metadata.
Daljit Singh

Signing Bouncy Castle or third party provider's jar file with signtool

Hi,
I am using JDK 1.4.2 and bouncy castle as a provider for RSA.
It worked fine until recently when my company asked me to compile and build the jar from the source code from bouncy castle, instead of using the binary version provided in their website.
But I only have a certificate obtained from Verisign. So I used signtool 1.3 from netscape to sign the jar file, which could be verified by jarsigner. But when use this one signed by my company's certificate. it didn't work. The exception is
java.security.NoSuchAlgorithmException: Cannot find any provider supporting RSA/
ECB/PKCS1Padding
at javax.crypto.Cipher.getInstance(DashoA6275)
When I switch back to the signed jar file provided by bouncy castle, everything worked ok again.
It looks that jar file is not recognized properly.
Can anyone tell me if I can use the signtool to sign the provider's jar file? Or I have to sign with jarsigner?
Thanks for the help.

Thanks for your reply.
I am reluctant to use the lightweight crypto API
becaues it will be difficult to switch to anther
service provider.True. However, if you switch to another Provider, you'll have the same trouble you're having with BC regarding rebuilding from source.
In BC's website, they don't have "cleanroom" JCE
listed for JDK 1.4
Can you give some resource for that?Hmmm - no, I can't. I haven't needed the cleanroom impl, so I stopped paying attention to it. I do't know if BC is working on a 1.4-compatible one or not. You might post a note to the dev-crypto mailing list BC runs.
Can I sign BC's jar file by my JCE certificate if I
obtain one from SUN?Unless you're recognized by Sun as a company that does significant security development, you will NOT get a security-signing cert. Several of us have already made the attempt.
The net is, what your bosses are asking for is unreasonable, and is preventing you from getting your job done. If they continue to insist that you build your security code from source, then your CANNOT use the JCE structure, period. In that case, you might as well use the BC lightweight API.
Grant

I have installed oracle 10g in my winxp machine. i am using enterprise manager. i am not able to shutdown the system as it asks for os username and password. i have provided my os username and password but eerror persiste. somebody pls help me to get rid

I have installed oracle 10g in my winxp machine. i am using enterprise manager. i am not able to shutdown the system as it asks for os username and password. i have provided my os username and password but eerror persiste. somebody pls help me to get rid of this.

Here I am using Java Type IV for database
connection.
So,there was no necessity of creating DNS.How your app communicates with db shouldn't matter for the end user. Still, you may want to use a functional network name also for the thin client driver connection string.
So,is there any other way to solve this problem.What is the problem really? Do you not use dns for network naming? Maybe you have to manage the hosts file on every client then.

Oracle Data Provider for Oracle 10g

We have an application certified on the ODP 9.2.0.2102, Oracle Client and Oracle ODBC 9.2.0.6. We have a client who is moving to Oracle 10g client within the next few months but will still be hitting an Oracle 9.2 backend.
My question is: Is the 9.2.0.2102 ODP compatible with the 10g client, or do we need to certify against a newer version of the ODP? And if the latter, what version of ODP is recommended?
We plan to certify against the latest of both this year, but for now, we need the path of least resistence.
Thanks for your help.
Todd

It is not "hard" to create your own geocoding schema though you will need to know how to create tables (with Oracle Spatial columns) in Oracle and before you do create the tables you should read through the documentation to be certain you have all of the required data and metadata.
Navteq, a data provider, also has sample geocoding data (http://www.oracle.com/technology/products/spatial/htdocs/spatial_partners_data.html) as well as data for sale. Downloading and importing the Navteq data might give you a good idea about what you will need to do if you were to build your own geocoding schema using your data.
I hope this helps.
-Justin

How to provide access to v$tables in oracle 10g to user

Hi,
can any one suggest me how to provide access to v$tables in oracle 10g to user .
its requried for auditor.
PLease help me.
regards

user12009184 wrote:
HI have to provide access to all V$ tables
it required for configuration of new tool.
ThanksYou can grant it the select catalog role to the user. It should provide all the required access to the general v$* & dba_* views.
GRANT SELECT_CATALOG_ROLE TO USER;
Let me know if this helps.
Regards,
Rizwan

Best provider to user for asp classic to oracle 10g?

can someone recommend the best data provider to use with an asp classic application and oracle 10g? something where there is good documentation?
thanks in advance.

Hi,
I'd go with the Oracle provider for OLEDB.
http://www.oracle.com/technology/tech/windows/ole_db/index.html
cheers,
Greg

Can any one provide steps to install oracle 10g on RHEL5

can any one provide steps to install oracle 10g on RHEL5...:)

go through http://www.oracle-base.com/articles/10g/OracleDB10gR2InstallationOnRHEL5.php
& http://www.emrealadag.com/dosyalar/it/Ora10gonRhel5.pdf
Edited by: CKPT on Nov 23, 2010 7:15 PM

Is Bouncy Castle supported by default as an encryption provider?

Hello,
I need to encrypt data with RSA using Bouncy Castle (BC) as the provider.
I have coded something in java that uses BC:
Cipher cipher = Cipher.getInstance("RSA/NONE/PKCS1Padding","BC");
deployed it to the portal and it seems to be working without registering BC jar file first. Is BC supported on the portal server by default as I can seem to find its library on the server on one hand but the code is working as is on the other.
Roy

Got the answer - It's not.
The jar with shipped with the ear file I've deployed.

How to change the firewall settings to provide remorte access to oracle 10g

dear all
I have created the oracle 10g database and it is working properly...but I cant loging with thedata base remotely when the host's firewall is on..when it is off I can connect with the database remotely..how can I change the firewall settings in this case

You need to configure your firewall to allow traffic on the ports listed in ORACLE_HOME\install\portlist.ini.
You do not need to allow all of the ports, just the ports you want to allow traffic. For example if you are not using iSQL Plus you do not have to open port 5560 or the range 5560–5579.
You can find a description of the ports at the following link.
http://download-east.oracle.com/docs/cd/B19306_01/install.102/b14316/ports.htm#CIHECDEE

Using javax.crypto in oracle 10g

Hi,
I have a java stored procedure for oracle 10g (running jdk1.4) that
uses the javax.crypto package and the bouncy castle provider for RSA
decryption. Here is a snippet of the code in the procedure:
Security.addProvider(new
org.bouncycastle.jce.provider.BouncyCastleProvider());
Cipher rsaCipher = Cipher.getInstance("RSA");
RSAPrivateKey key = (RSAPrivateKey)
MSPrivKeytoJKey.getPrivateKey(aKey);
rsaCipher.init(Cipher.DECRYPT_MODE, key);
rsaCipher.doFinal(encryptedByteArray);
This works fine on my own machine running jdk1.4. However, when I load
my stored procedure into the database and run it, I get the following
exception after the line
Cipher rsaCipher = Cipher.getInstance("RSA");
tries to execute:
java.security.NoSuchAlgorithmException: Cannot find any provider
supporting RSA
I have tried the following (based on information gathered from various
forums):
- ran
loadjava -u username/pass@DB -v bcprov-jdk14-137.jar
- added the following line to java.security
security.provider.4=org.bouncycastle.jce.provider.BouncyCastleProvider
but i still get the same error.
I am reaching out desperately to all you experts for help :)
Pouria

Hi,
Unfortunately, the Java VM only supports the basic JDK functionalities; you could try the Metalink Note 356123.1 which should work using BC library but this note only addresses AES.
Furthermore, you need the following two extra permissions:
exec dbms_java.grant_permission('SCOTT', 'SYS:java.security.SecurityPermission','putProviderProperty.BC', '' );
exec dbms_java.grant_permission( 'SCOTT', 'SYS:java.security.SecurityPermission','insertProvider.BC', '' );
Oboviously SCOTT would be changed to whichever schema you are using.
Kuassi http://db360.blogspot.com

Issue while doing Java Stack Installation on NW 7.0 on oracle 10g

Hi All,
I am facing issue during Installation of JAVA Stack on NW7.0 on Oracle 10g
SecureStoreCreate.log
java.lang.reflect.InvocationTargetException
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:85)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:58)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:60)
        at java.lang.reflect.Method.invoke(Method.java:391)
        at com.sap.engine.offline.OfflineToolStart.main(OfflineToolStart.java:81)
Caused by: java.lang.ExceptionInInitializerError
        at java.lang.J9VMInternals.initialize(J9VMInternals.java:218)
        at javax.crypto.Cipher.a(Unknown Source)
        at javax.crypto.Cipher.getInstance(Unknown Source)
        at iaik.security.provider.IAIK.a(Unknown Source)
        at iaik.security.provider.IAIK.addAsJDK14Provider(Unknown Source)
        at iaik.security.provider.IAIK.addAsJDK14Provider(Unknown Source)
        at com.sap.security.core.server.secstorefs.Crypt.<clinit>(Crypt.java:82)
        at java.lang.J9VMInternals.initializeImpl(Native Method)
        at java.lang.J9VMInternals.initialize(J9VMInternals.java:196)
        at com.sap.security.core.server.secstorefs.SecStoreFS.setSID(SecStoreFS.java:158)
        at com.sap.security.core.server.secstorefs.SecStoreFS.handleCreate(SecStoreFS.java:804)
        at com.sap.security.core.server.secstorefs.SecStoreFS.main(SecStoreFS.java:1274)
        ... 6 more
Caused by: java.lang.SecurityException: Cannot set up certs for trusted CAs
        at javax.crypto.b.<clinit>(Unknown Source)
        at java.lang.J9VMInternals.initializeImpl(Native Method)
        at java.lang.J9VMInternals.initialize(J9VMInternals.java:196)
        ... 17 more
Caused by: java.lang.SecurityException: Jurisdiction policy files are not signed by trusted signers!
        at javax.crypto.b.a(Unknown Source)
        at javax.crypto.b.a(Unknown Source)
        at javax.crypto.b.access$600(Unknown Source)
        at javax.crypto.b$0.run(Unknown Source)
        at java.security.AccessController.doPrivileged(AccessController.java:246)
Regards
Punit

Hi Punit,
What version of JDK have you installed, check the JCE policy file you have provided during the installation.
Cheers,
Phanindra M

Oracle 10g + Bouncy Castle JCE provider

Similar Messages

Maybe you are looking for