Setup Unlimited Strength Jurisdiction Policy Files - Yash-777/Java_Mail GitHub Wiki

Security.setProperty("crypto.policy", "unlimited");

int maxKeySize = javax.crypto.Cipher.getMaxAllowedKeyLength("AES");
System.out.println("Max Key Size for AES : " + maxKeySize);

import java.security.*;
import javax.servlet.*;
import org.apache.commons.logging.*;
/**
 * Installs BouncyCastle SSL and JSSE upon startup of the Web-Application.
 * <p>
 * Note that this class will not remove BC classes upon contextDestroyed as
 * other Web-Applications might use them as well.
 * </p>
 * @author yashwanth
 */
public class BouncyCastleListener implements ServletContextListener {
    private final static Log log = LogFactory.getLog(BouncyCastleListener.class);
    
    public void contextInitialized(ServletContextEvent event) {
        String name = event.getServletContext( ).getServletContextName( );
        
        //log request of the INFO level
        log.info("ServletContext shut down: " + (name == null ? "" : name ));

        log.info("Web-App Class loader : Adding BouncyCastle provider at server start up.");
        addBCProvider();
    }

    public void addBCProvider() {
        
        Security.addProvider(new org.bouncycastle.jce.provider.BouncyCastleProvider());
        
        // java.security.NoSuchProviderException: no such provider: BC
        /*if (Security.getProvider(org.bouncycastle.jce.provider.BouncyCastleProvider.PROVIDER_NAME) == null) {
            log.info("JVM Installing BouncyCastle Security Providers to the Runtime");
            Security.addProvider(new org.bouncycastle.jce.provider.BouncyCastleProvider());
        } else {
            log.info("JVM Installed with BouncyCastle Security Providers");
        }*/
        
        configure_JCE_UnlimitedStrength();
        
        // List of providers and their preference orders () security.provider.<n>=<className>
        Provider[] pArr = Security.getProviders();
        int i = 0;
        for (Provider p : pArr) {
            log.info((i++) + " - provider ::" + p.getName());
            System.out.println((i++) + " - provider ::" + p.getName());
        }
    }
    /*
    Cryptographic Jurisdiction Policy defaults [<java-home>/lib/security/java.security]
    #
    # Import and export control rules on cryptographic software vary from
    # country to country.  By default, the JDK provides two different sets of cryptographic policy files:
    #
    #     unlimited:  These policy files contain no restrictions on cryptographic strengths or algorithms.
    #
    #     limited:    These policy files contain more restricted cryptographic
    #                 strengths, and are still available if your country or
    #                 usage requires the traditional restrictive policy.
    
        If the "crypto.policy" property is not set and the traditional
    #     US_export_policy.jar and local_policy.jar files
    #     (e.g. limited/unlimited) are found in the legacy
    #     <java-home>/lib/security directory, then the rules embedded within
    #     those jar files will be used. This helps preserve compatibility
    # for users upgrading from an older installation.
    
    # 3.  If the jar files are not present in the legacy location
    #     and the "crypto.policy" Security property is not defined,
    #     then the JDK will use the unlimited settings (equivalent to
    #     crypto.policy=unlimited)
    */
    public void configure_JCE_UnlimitedStrength() {
        log.info("Java Cryptography Extension Unlimited Strength Jurisdiction Policy Files");
        try {
            int maxKeySize = javax.crypto.Cipher.getMaxAllowedKeyLength("AES");
            log.info("Max Key Size for AES : " + maxKeySize); // Default-128
            if (maxKeySize == 128) { // For java versio less than 9
                log.info("Link: http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html");
                log.info("Download these jars(local_policy.jar,US_export_policy.jar) and replace in {JAVA_HOME}/lib/security.");
            }
            
            Security.setProperty("crypto.policy", "unlimited");
        } catch (java.security.NoSuchAlgorithmException e) {
            e.printStackTrace();
        }
    }
    
    public void contextDestroyed(ServletContextEvent event) {
    }
}