Skip to Main Content

Java Security

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Provider for the Java Cryptography Extension

843811Dec 6 2007 — edited Dec 14 2007
Hello,

I made a cryptography provider for java, its based on BouncyCastle, but it contains just some algorithms that I need. So, I've signed the jar, but I get:
JCE cannot authenticate the provider XX
java.lang.SecurityException: The provider XX may not be signed by a trusted party
java.util.jar.JarException: myjar.jar is not signed by a trusted signer.

I'm signing with a Thawte cert, and their roots come with java 1.3.0_02 and forth, I've tested and signed applets with 1.4.2, 1.5 and 1.6, so that shouldn't be the problem.

My guess is that, there is a validation of the JCE to force some US Crypto Export Control, as the cert that I use was expedited to a company outside US, we're based on Colombia South America.

Would that be the cause of my problem?

Or should I get a cert from Verisign or Sun?

Any other ideas?
Comments
Locked Post
New comments cannot be posted to this locked post.
Post Details
Locked on Jan 11 2008
Added on Dec 6 2007
2 comments
301 views