[Geoserver-users] No strong cryptography available, Installation of the unrestricted policy jar files is recommended.

GeoServer GeoServer User
1

http://sig.cmparks.net/cmp-ms-90x122.pngStephen V. Mather
GIS Manager
(216) 635-3243 (Work)
clevelandmetroparks.com

2

Some additional infos:

If you are running openjdk there is no need for downloading policy files. Open source is not restricted by the US government.

If you are running an IBM java, you have to download the files from the IBM download page. The policy files are not portable between different sdk providers.

Christian

···

2013/3/1 Stephen V. Mather <svm@anonymised.com>

Referencing [1], there appears to be no written answer for how to patch geoserver with strong cryptography in the Java container, so I thought I’d write it up very briefly here. Without this, GeoServer throws a warning that

“No strong cryptography available, Installation of the unrestricted policy jar files is recommended.”

Download of the Java Cryptography Extension (JCE) is what fixes this. Goto:

http://www.oracle.com/technetwork/java/javase/downloads/index.html

Scroll to the bottom and choose the appropriate download for your JVM, either

Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 7
or
Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 6

and follow the instructions to replace the local_policy.jar and US_export_policy.jar. GeoServer will report:

“Strong cryptography available”

Best,
Steve

[1] http://article.gmane.org/gmane.comp.gis.geoserver.user/34487/match=cryptography

Stephen V. Mather
GIS Manager
(216) 635-3243 (Work)
clevelandmetroparks.com

Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_d2d_feb

Geoserver-users mailing list
Geoserver-users@anonymised.comsts.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

3

http://sig.cmparks.net/cmp-ms-90x122.pngStephen V. Mather
GIS Manager
(216) 635-3243 (Work)
clevelandmetroparks.com

4

On Sat, Mar 2, 2013 at 5:16 PM, Stephen V. Mather <svm@anonymised.com> wrote:

To hijack my own thread-- how is performance of GeoServer on OpenJDK these days?

Depends a lot on your workload and the services you’re using.
I’d venture to say that it should be fine as long as you don’t use WMS, decent if you
use WMS but don’t draw much, and it’s poor if you are trying to actually paint a lot.

See this:
http://research.geodan.nl/2012/10/openjdk7-vs-oracle-jdk7-with-geoserver/

Cheers
Andrea

–

==
Our support, Your Success! Visit http://opensdi.geo-solutions.it for more information.

Ing. Andrea Aime
@geowolf
Technical Lead

GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 339 8844549

http://www.geo-solutions.it
http://twitter.com/geosolutions_it