Remove need for manual install of unlimited-strength JCE about briefcase HOT 10 CLOSED

@yanokwa I think waiting for the fix to be ported to Java 6/7/8 will be preferable. Meanwhile I will look for another issue to work on.

from briefcase.

Comment by mitchellsundt
Thursday Jul 09, 2015 at 19:01 GMT

Needs a full ODK team discussion to decide.

Reported by wbrunette on 2012-08-22 05:02:48

• Labels added: Type-Enhancement, Briefcase, Collect
• Labels removed: Type-Defect

from briefcase.

I believe that as of Java 9, unlimited strength JCE policy files are no longer needed. There is sample code here: https://stackoverflow.com/a/39872144/152938

And it looks like the change has been backported to Java 6, 7, and 8 at https://bugs.openjdk.java.net/browse/JDK-8170157

If this is indeed the case, then fixing this issue could be as simple as added the following line of code: Security.setProperty("crypto.policy", "unlimited");

But I could be wrong! So follow the links above and confirm. If you agree, then implement the change and to help test your change, I have an encrypted form at https://nafundi-test.appspot.com. Use your copy of Briefcase to connect to it using test/test as username/password. Export and use the following private_key.txt.

Try the export on these cases:

• Without the JCE (it should fail)
• With the JCE (it should work)
• With the above code and with the JCE (it should work)
• With the above code and without the JCE (it should work)

from briefcase.

@jpknox If you are looking for another contribution to Briefcase, this might be a good one. Comment below @opendatakit-bot claim to claim it.

from briefcase.

After further examination, it looks like the backporting has not been finished. See the activity here:

• Java 6: https://bugs.openjdk.java.net/browse/JDK-8174748
• Java 7: https://bugs.openjdk.java.net/browse/JDK-8174747
• Java 8: https://bugs.openjdk.java.net/browse/JDK-8174746

from briefcase.

@yanokwa i would like to work on this, as it would easily get me started with the changes made so far. Cheers

from briefcase.

Long time no see, @icemc! Welcome back.

I should have been clearer with my comment. Because the backporting of unlimited JCE to Java 6/7/8 has not finished, I don't think there is a straightforward fix.

And unless you can think of a straightforward fix, I think we should wait a few months and let the Java community backport the Java 9 changes to Java 6/7/8.

from briefcase.

Update - the fix has been ported to Java 6/7/8 as is evident if you follow the links above.
But I recently tried to decrypt an encrypted form on Java 8 and it had the same issue mentioned above.

But according to @yanokwa ,

fixing this issue could be as simple as added the following line of code: Security.setProperty("crypto.policy", "unlimited");

Am I right?

from briefcase.

I can confirm that with Java 1.8.0_161 there no need to install the JCE

from briefcase.

Confirmed as well with Java 1.8.0_162 on macOS and Windows!

from briefcase.