Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How to install unlimited strength JCE for Java 8 in OS X?

Tags:

java

macos

jce

I need to install the Java Cryptography Extension for Java 8 in OS X / mac OS. It turns out the steps from the README file which came with the installer include instructions only for Unix and Windows, but not for OS X / mac OS. I tried to put the JAR files in $JAVA_HOME/lib/security, but it didn't work either. Do you know how can I install them?

like image 683
JonDoe297 Avatar asked Jun 10 '16 06:06

JonDoe297


People also ask

How do I install unlimited JCE?

To use Cloudera Manager to install the JCE policy file:Log in to the Cloudera Manager Admin Console. Navigate to Administration > Security. Click Install Java Unlimited Strength Encryption Policy Files. Specify the repository location for your version of Cloudera Manager, and click Continue.

Is JCE included in JDK?

Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files Download. The Java Cryptography Extension enables applications to use stronger versions of standard algorithms. Current versions of the JDK do not require these policy files. They are provided here for use with older version of the JDK.

What is a JCE file?

The Java™ Cryptography Extension (JCE) is a set of Java packages from IBM® that provides a framework and implementations for encryption, key generation and key agreement, and Message Authentication Code (MAC) algorithms.


1 Answers

Java 8 Update 161

As pointed out in another answer and in Oracle's release notes for Java 8 Update 161, unlimited cryptography is enabled by default since Update 161 and you shouldn't have to do anything if using a fresh installation of this version or higher.

Java 8 Update 151

With Java 8 Update 151, Oracle included the same JCE mechanism into Java 8 that they already provided with Java 9. To enable JCE in Java 8 Update 151 or higher, just set the property

crypto.policy=unlimited 

in $JAVA_HOME/jre/lib/security/java.security.

It's probably a good idea to remove the old policy JAR's if they were added earlier, as Oracle states in the release notes:

Because the old JCE jurisdiction files are left in /lib/security, they may not meet the latest security JAR signing standards, which were refreshed in 6u131, 7u121, 8u111, and later updates.

Older Versions

Answers suggesting to install the JCE files via Homebrew won't work anymore, as the casks were deleted from the Homebrew repository after release of the Java 8 Update 151. If using an older version of Java 8, you'll have to put the JCE-Policy-JAR manually as described in another answer.

like image 152
anothernode Avatar answered Sep 28 '22 05:09

anothernode