PGP Encryption Error using OpenPGP

Hi all,
I am trying PGP Encrption using Custom module in one of the scenario's.
While Executing the code on my local system(simple java project) i am getting following error.
Exception in thread "main" java.lang.RuntimeException: NYI
     at cryptix.jce.provider.elgamal.ElGamalCipher.engineGetParameters(ElGamalCipher.java:120)
     at javax.crypto.Cipher.a(DashoA12275)
     at javax.crypto.Cipher.init(DashoA12275)
     at cryptix.openpgp.algorithm.PGPElGamal.encrypt(PGPElGamal.java:550)
     at cryptix.openpgp.packet.PGPPublicKeyEncryptedSessionKeyPacket.encrypt(PGPPublicKeyEncryptedSessionKeyPacket.java:153)
     at cryptix.openpgp.provider.PGPEncryptedMessageBuilder.engineBuild(PGPEncryptedMessageBuilder.java:283)
     at cryptix.message.EncryptedMessageBuilder.build(EncryptedMessageBuilder.java:253)
     at text.Encrypt.main(Encrypt.java:128)
Has anyone experienced similar error.
Please Help!
Mayank

Hi,
This usually happens when Unlimited strength jurisdiction policy files are missing for your JDK ...
Java 6 u2013 http://java.sun.com/javase/downloads/index.jsp
Java 5 u2013 http://java.sun.com/javase/downloads/index_jdk5.jsp#docs
Java 1.4 u2013 http://java.sun.com/j2se/1.4.2/download.html#docs
Hope this helps
Chris

Similar Messages

B2B - SFTP - Encrypt data using PGP

Hello,
I am hearing / reading mixed comments on using PGP encryption / decryption using the SFTP Transport in Oracle B2B.
The requirement is the data needs to be encrypted during the transport between the trading partners. The SFTP server houses the PGP encrypted data, B2B should be able to listen, pick and decrypt and process the files.
Is this possible in Oracle SOA Suite 11g? If yes, could you please point me to any documentation that explains configuring B2B to decrypt a PGP encrypted file.
Thanks in advance,
Venkatesh

I think most comments you read about this would have said that B2B SFTP cannot handle PGP encryption. This is true. B2B out-of-box does not support PGP encryption/decription. Most people suggest using Java callout.
~Ismail.

Linux script for PGP encryption

Hello,
We are trying to do PGP encryption by giving the OS command in the File adapter. Can somebody provide me the exact linux script that we should use to do PGP encryption?
Note: We have XI-3.0 on LINUX.
Promise points for helpful answers.
Regards,
Raji.

Hi Rajashree
PGP Encryption is used to support the transmission of sensitive data to / from third party systems via XI.
Adapter modules are developed to encrypt the file using PGP.
We had a similar requirement where we used PGP encryption.The module was developed using Cryptix OpenPGP which is a Java implementation of the OpenPGP standard.When the module is called in the adapter, it uses the PGP key provided by the party that will receive the encrypted message. This module should be called prior to calling the Sap adapter
Logic Flow/Processing:
1.Read the XML payload and message for getting the needed data.
2.Read the key to be used in the encryption and log the key to be used and the beginning of the encryption.
3.Call the PGP encryption and compression method.
4.Log whether encryption has been successful.
5.Set as payload the message content encrypted, and the principal data.
6.If any error occurs, logs an exception in PGP adapter module and the error reason.
7.Return the message.
Go through This links
Is there any FTP API available from SAP?
Send Text file to FTP in binary mode with PGP encryption
http://www.webmethods.com/meta/default/folder/0000007429
Converting IDOC to XML
XI implementation
http://www1.webmethods.com/PDF/webMethods_for_SAP-wp.pdf
Current versions found at http://www.cryptix.org and http://www.bouncycastle.org.
http://www.bouncycastle.org/documentation.html
If you want to use the unix script on windows then you need cygwin. Take the shell executable and cygwin.dll and copy them to another machine and try out.
Else you write an .exe or a batch file where you will give your PGP command to encrypt and decrypt and execute it from the OS level in your adapter. Check my answer in this thread:
Re: PGP Encription
Might be useful.
PGP Encription
Re: PGP Encription
\Re: triggering encryption script with XI
Pls rewards if useful

Need hlep for PGP Encryption for delimited file transfer using B2b

I have a requirement to read the PGP encrypted delimited file from partner and decrypt it to process. Can any body tell me how can I do this in b2b. I really appreciate the help

Better read it as a binary document and pass it to the back-end for further processing (decryption and processing). If you want to the decryption at B2B layer itself then use the java callout feature -
http://docs.oracle.com/cd/E23943_01/user.1111/e10229/callouts.htm#CHDEFBDG
Regards,
Anuj

After 10.6 security update 2013-002 PGP encrypted disk won't boot

I ran the latest security update on my very old 17" intel MacBook Pro (It won't boot, so I can't give you the model number). It has PGP encryption installed on it, but I only have my passphrase, not the keys since it's a managed system. Half way through the install, it failed with a cryptic error, and the machine won't boot now. It gets half way through booting, and the screen goes black.
I have booted into single user mode, and ran fsck and applejack, only to get an error about a sibling error, and the hard disk is full.
Is this a PGP issue? Does the latest security update conflict with PGP?
I found this resolution to a similar sounding problem in 2010, but am unsure if this is happening now. Google searching hasn't yeilded anything so far.
http://hints.macworld.com/article.php?story=20101111120329585
Thanks for any help.
Melissa

About PGP I can't tell; the hint you linked (and the suggested fix) might still be valid:
PGP recommends folks to decrypt their drives first, update to 10.6.5 and then re-encrypt.
this sounds as a general recommendation.
However fsck reported a sibling error (an invalid link sibling error I presume) and that's not fine. Afaik, Disk Utility can't fix it; DiskWarrior hopefully will. I quote from Alsoft Support Database:
Question
Is DiskWarrior capable of repairing an "Invalid Sibling Link" error?
Answer
This is an error you definitely don't want. It indicates that parts of your directory, and therefore some of your files and folders, are inaccessible.
Mac OS Standard (HFS) and Mac OS Extended (HFS Plus) disk directories have a very complex structure. Each file or folder (item) on a disk has an entry in the disk's directory. These entries are in order of enclosing folder and then item name. This is similar to a yellow pages directory being ordered by type of business and then business name. Just like a yellow pages directory, the disk directory has pages except that its pages are called nodes. Unlike the yellow pages, nodes are dynamic and change as you add and delete items. It's sort of like a realtime yellow pages.
Imagine that the pages of the yellow pages are not in order and at the bottom of each page it says "Continued on page n," where n is the page that contains the next set of listings for the particular type of business that you're looking up. Well nodes are not arranged in order and each node has a reference, or link, to the next node that contains the next set of ordered items. This link is what is referred to as the sibling link.
A sibling link error is a bad link to another node. Either the link refers to the wrong node or it refers to an invalid node. As I said, a sibling link error makes some of your items inaccessible and can even prevent a disk from mounting. Sibling errors are notoriously difficult for some of the patching type of disk repair utilities to repair. Sometimes the repairs fail and the directory is damaged further. If a disk with a sibling link error is still mountable, I would advise backing up the accessible files and folders on the disk before attempting to repair it with that type of disk repair utility.
I'm not really sure DiskWarrior will work on a PGP encrypted disk. According to a few old Google matches, it should. See e.g.:
http://kb.mit.edu/confluence/pages/viewpage.action?pageId=4263350
but according to more recent ones, it won't:
https://discussions.apple.com/thread/2719460?start=0&tstart=0
It seems you're out of luck even with Safe Boot (from PGP Whole Disk Encryption Command Line User's Guide):
The Mac OS X Safe Boot feature does not work on a boot disk that has been whole disk encrypted; if you hold down the Shift key to enter Safe Boot, the system will fail to boot after authenticating at the PGP BootGuard screen.
So, while you're waiting for some more knowledgeable advice, you might backup your data to an external drive while booted in single user mode. There are many how-tos out there; I think this one is pretty clear:
http://jsalovaara.com/blog/backing-up-files-to-a-usb-drive-using-single-user-mod e.html
Hope this helps.

PGP Encryption in FTP Adapter

Hi All,
We need to do FTP some files from remote server and files are to be pgp encrypted or decrypted.Can you please tell is there some way to use pgp encryption in FTP adapter. If yes, please provide some link for documentation.
or shall we do ftp using some other program which support pgp encryption and then our bpel process should read file using file adapter.
Please suggest better option out of both.
Thanks.

Hi Ram,
Is the scenario same in Oracle SOA Suite11g latest release as well?
If we have to go for OpenPGP tool manual intervention is requried to encrypt the file which may not be possible in our scenario.
Thanks
Siva

Policy files expiry for pgp encryption

HI All
i am using bouncycastle jars for encrypting data using PGP.
for this to function we need to install the jce unrestricted security files given at the java downloads
but when i download and use them then for one weeek they are working fine
but after one they an exception is raised like the below
java.security.InvalidAlgorithmParameterException: parameter object not a DHParameterSpec or an ElGamalParameterSpec
NOw i just copied the 2 jars(local_policy.jar,US_export_policy.jar) in the security directory of JDK to another name and again copied back to same name
Its working fine
NOw i am of the assumption that these jars expiry after certain days .Is it true????
if so then do we have any way to make them permanent?
how can we make these jars permanent??
Is there any solution for this?
Please anybody can help me as soon as possible
Thanks
vijay

Hi,
I have few questions to ask before i can provide you with the solution for this. We need to know what is the software that you are using for encryption, are you using APIs or using PGP software installed on the server and calling the executables to encrypt the file from the module?
If you are using standard APIs it would be easier for traceability. There are standard code that is available which you can leverage for this purpose.
Incase you are using PGP software some points to remember. You need to install the PGP software on the PI / XI server by logging in using SAPSERVICE<SID> username and password. If you install the software using SAPSERVICEADM it would not work. When you install it it creates folders and path for the software for that user. Infact when the server is running and the interfaces are working it would use the sapservice<SID>.
For my current customer we have created a module to achieve the encryption / decryption of files. We have basically 5 parameters (this is according to the reqmt at our client end).
Parameter 1: Operation: Values: Encryption / Decryption
Parameter 2: username: Value: username which you want to pass (name of the vendor or the user code of the vendor).
Parameter 3: Sign Value: Sign value(Some vendors want their files to be signed).
Parameter 4: Armor: Value: Same as 4 (Another option commonly used).
Parameter 5: Log: Value: Y / N (Used for logging of messages for identifying problems in communication channel monitoring).
Generate the PGP command depending on the values passed. (You can get the list of PGP commands from the software you are using or from the website (http://www.dsj.net/pgp/pgphelp.html).
Trap all the error codes from the execution and raise exception so that the adapter errors out too.
Let me know if you require any help regarding the same.
Regards,
Indranil
Award Points if it was helpful.

Biztalk PGP encryption and signing

Hi,
Currently i am working on a custom pipeline component to PGP encrypt and sign the outgoing message from Biztalk 2013 with public and private keys.
I am referring the content mentioned in the below posts
https://code.msdn.microsoft.com/windowsdesktop/BizTalk-Sample-PGP-ebcbc8b2
http://bajwork.blogspot.co.nz/2007/08/pgp-pipeline-component.html
But we have a requirement to use PGP version 6.5.8 and i could not find what PGP versions the above components supports.
Any one has any idea about Biztalk and PGP version 6.5.8 for encryption and signing?
Thanks
JB

PGP has different versions and 6.5.8 is older one. If just download the Bouncy castle pgp dll, it’s not going to use the 6.5.8 version of PGP.
http://www.pgpi.org/products/pgp/versions/freeware/win32/6.5.8/
With latest Bouncy castle pgp dll, there are few issues encountered by the user you tried to use PGP version 6.5.8, especially around signature validation. Following are the discussion on
the issues faced..
http://stackoverflow.com/questions/7193323/encrypt-with-bc-and-decrypt-with-pgp-6-5-8
http://bouncy-castle.1462172.n4.nabble.com/ERROR-encrypted-session-key-is-bad-when-trying-to-decrypt-td1466221.html
http://bouncy-castle.1462172.n4.nabble.com/Compatibility-Issue-with-PGP-6-5-8-td1467170.html
People have manage to get it working with few changes to the PGP code (which you can get it here
http://www.bouncycastle.org/csharp/index.html )
This forum is not the right place to raise question about finding the Bouncy castle pgp dll version compactable with v6.5.8. try to post this question here
http://bouncy-castle.1462172.n4.nabble.com/
Once you have their dll compactable with v 6.5.8, then you can use it in BizTalk suggested by the links referenced by you.
If this answers your question please mark it accordingly. If this post is helpful, please vote as helpful by clicking the upward arrow mark next to my reply.

I am unable to open encrypted emails using webmail and a CAC reader. It says "content can't be displayed because the S/MIME control isn't available." I'm using a Macbook Pro with 10.10 OS and have tried both Safari and Chrome.

I am using a Macbook Pro with OS X Yosemite 10.10.2. I am unable to open encrypted emails using webmail. I have verified my certificates are loaded in the keychain for my military common access card while using a CAC reader. When I try to view the message it gives me the error saying "content can't be displayed because the S/MIME control isn't available."

I am using a Macbook Pro with OS X Yosemite 10.10.2. I am unable to open encrypted emails using webmail. I have verified my certificates are loaded in the keychain for my military common access card while using a CAC reader. When I try to view the message it gives me the error saying "content can't be displayed because the S/MIME control isn't available."

PGP Encryption support in SOA Suite 11g

Hi,
Looking for PGP encryption support in SOA Suite 11g as we have a requirement to encrypt the file using PGP encryption and send over SFTP.
I already went through some of the forums posts but they are date back to 2007, so just wanted to confirm if there is anything in recent releases of SOA Suite.
- FTP adapter support or
- OWSM suppport.
As far as i know, we have to install some PGP tool and write a script to encrypt/decrypt and call the script from BPEL. this conclusion is based on a stmt given in the OWSM 10g book by sitaraman.
Please provide your insights on this.
Thanks
Siva

Hi Siva,
I don't think still there is any support for PGP in Oracle SOA. You may use java for PGP encryption/decryption and transfer externally encoded messages over SFTP.
Please refer -
Re: PGP Encryption/Decryption
PGP Encryption in B2B
Regards,
Anuj

Signing and Encryption Error PI 7.0

Hi All,
The scenario is
1) Two XI boxes are connecting with each other using XI adapter. Earlier there was signing and encryption certificate used
for data transfer and was working successfully.
2) From last 2-3 weeks source XI system is getting error in Call adatper as mentioned below. Then we tried to remove signing and encryption certificate so we disable both end the security check. And tried to send normal message but then also we are getting following error in Call adapter in SXI_MONITOR
Signature error Error while valdiating the digital signature. Theerror was com.sap.security.core.ws.wss.NoSecurityHeaderException No wsse:Security header has been defined for role soap:finalActor. Please verify the
Error during message security handling in inbound channel: Security profile 'Check Signature and Decrypt Message'
3) The SM59 connection is working fine. We have tried cache refresh. But still issue is not resolved.
Please guide

Hi Abhay
Probably the issue is with the public keys which are stored in both the XI boxes , as both the keys will be same .
Also check digital signatures which are maintained .
Regards
Ninad

File Name in the Send Port with PGP Encryption

Hello,
The File Name in the Send Port should be set with the mask like ABC.txt.pgp. Since I have used the PGP Encryption Component it is generating the File name like ABC.pgp.txt.pgp. But what I need is just the ABC.txt.pgp. How can be this be done. Any help is
greatly appreciated.
Thanks

What you are seeing is the expected behavior. If you are referring to this:
https://code.msdn.microsoft.com/windowsdesktop/BizTalk-Sample-PGP-ebcbc8b2
or one of it's derivatives, it will internally modify FILE.ReceivedFileName to append .pgp if that property is set.
So, if you use just %SourceFileName%, you will likely get the desired result. Otherwise, you will have to explicitly set FILE.ReceivedFileName to ABC.txt somewhere before the PGP component.
You can also modify the source code to remove this behavior.

PGP Encryption Scenario for a Proxy to File Scenario.

I have a scenario where an outbound proxy from R/3 system is extracting some hr related info type data and sending it to XI system. The XI system is required to convert the data into a flat file format and encrypt the data using PGP.
R/3 -
Proxy -
> XI System -
File Encrypted----
> External System.
Need some inputs from experts how to set up the scenario. In the file adapter we can trigger scripts at the O/S level to encrypt the file.
What I would like to know what the configurations that are required to get the scenario working namely,
1. Where do we need to install the PGP software is it on the FTP server or XI server ?
2. How will the scripts be executed by the Receiver File adapter ?

Hi Indranil
Here is some info on PGP/XI
<<<<1. Where do we need to install the PGP software is it on the FTP server or XI server ?

XI server
Also go thru the following excerpt
XI dont support PGP encryption and decryption. I have done some interfaces using PGP encryption at OS level and then using XI. Install the software in XI and write the OS command for encryption and decryption at OS level. Call this command in File adapter after or before message processing.
PGP Encryption:
We get the normal text file from R3. Then we have written two XI interfaces here. My first interface will pick from R3 and encrypts the file and drops it in another location of R3. In this interface I have given OS command before message processing. This will pick the file and do the encryption.
My second interface will pick the encrypted file from R3 and do a simple FTP to the Bank.
This is exactly opposite for decrypting the file from Bank.
Thanks 2 Satish Reddy
Regards
krishna
Note:Reward points if helpful

PGP encryption and decryption in soa suite

Hi,
We have a requriement where bpel process plays the role of encrypting a file using PGP encryption and then it has to be placed onto a SFTP server using an FTP adapter. We would like to know if this can be done using an owsm policy or a seperate java api has to be created for this and invoked in the bpel process. Currently we have a seperate 3rd party tool which does this pgp encryption and it uses ksh shell script. Is there a way where i can invoke this shell script into my bpel process?
I found this note (FAQ (Customization) [ID 105127.1]) in oracle metalink.
How does one run a shell script as a concurrent program?
1: Write the script and call it .prog
Place the script under the bin directory under your applications
top directory.
For example, call the script CUSTOM.prog and place it under
$CUSTOM_TOP/bin
2: Make a symbolic link from your script to $FND_TOP/bin/fndcpesr
For example, if the script is called CUSTOM.prog use this:
ln -s $FND_TOP/bin/fndcpesr CUSTOM
This link should be named the same as the script without the .prog
extension.
It should be in the same directory as the script.
3: Register a concurrent program as described above, using an execution
method of 'Host'
Use the name of your script without the .prog extension as the name
of the executable
For the example above, you would use CUSTOM
4: The script will be passed at least 4 parameters, in $1 through $4
These will be: orauser/pwd, userid, username, request_id
Any other parameters you define will be passed in $5 and higher.
Make sure the script returns an exit status.
But i am ignorant in this area and do not know how the above steps can be executed.
If any of you guys have done pgp encryption in soa 11.1.1.4, please do let me know if there's any way how i can couple pgp encryption into soa suite.
Thanks

You can do it in Java, have a look at this...
http://www.javacodegeeks.com/2011/06/java-pretty-good-privacy-pgp.html
Cheers,
Vlad

How can i send PGP encrypted file from PI to the receiver

Hi experts,
I am unable to send the PGP encrypted file from PI to the receiver. where the Clients sends the file using PGP encryption,
But i am trying to send the same with PI. But i am not able to send the same can you please help me out to get the same incorporated using PI 7.1
and sends to the receiver ( the rceiver would be FTP ).
Regards,
Amruth

hi,
You can write an adapter module to encypt your payload before sending to Reciever:
/people/dijesh.tanna/blog/2008/09/15/sap-pi-integrating-macafee-e-business-server-with-sap-pi-70-for-pgp-encryptiondecryption
http://www.bouncycastle.org/documentation.html
http://www.cryptix.org/
http://aedaptive.com/index.php/solutions/pgp-for-sap-netweaver
http://www.pgpi.org/doc/pgpintro/
PGP encryption: Do we need to write adapter module?
If you are getting PGP file from sender and want to send this file to target without any mapping transformation you can use this blog:
/people/william.li/blog/2006/09/08/how-to-send-any-data-even-binary-through-xi-without-using-the-integration-repository
Thanks.

PGP Encryption Error using OpenPGP

Similar Messages

Maybe you are looking for