java jce加密算法密钥长度限制解决方案

在加载证书时 会报如下错误：

java.io.IOException: exception decrypting data - java.security.InvalidKeyException: Illegal key size

at org.bouncycastle.jce.provider.JDKPKCS12KeyStore.cryptData(Unknown Source)

at org.bouncycastle.jce.provider.JDKPKCS12KeyStore.engineLoad(Unknown Source)

at java.security.KeyStore.load(KeyStore.java:1185)

 

 

 

jdk1.6所以下载1.6的jce扩展包

下载地址为：

http://www.oracle.com/technetwork/java/javasebusiness/downloads/java-archive-downloads-java-plat-419418.html#jce_policy-1.5.0-oth-JPR

 

 

Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 6

Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 5.0

Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 1.4.2

Java Cryptography Extension (JCE) 1.2.2

Java Cryptography Extension (JCE) Documentation 1.2.2

 

 

将下载的jce包覆盖本地，本地路径为

%JAVA_HOME%\jre\lib\security我的为：D:\Program Files\Java\jdk1.6.0_30\jre\lib\security

 

 

local_policy.jar

US_export_policy.jar

 

 

重启服务后问题解决。

 

 

对比替换前后发现：后面的去掉了 长度限制

 

 

 

注：jdk 7+的jce unlimited Strength Jurisdiction Policy Files 需要在现行发布的版面上下载， 

http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html

jdk6一下的在这个地址下载

http://www.oracle.com/technetwork/java/javasebusiness/downloads/java-archive-downloads-java-plat-419418.html#jce_policy-1.5.0-oth-JPR

参考地址：

http://www.oracle.com/technetwork/java/javase/downloads/index.html

http://www.oracle.com/technetwork/java/javasebusiness/downloads/java-archive-downloads-java-plat-419418.html#jce_policy-1.5.0-oth-JPR

http://http://www.bouncycastle.org/

http://87426628.blog.163.com/blog/static/606936182013104883902/