Java开发网 - Re:JCE 1.2.1的证书失效，在2005/07/28以后软件可能不能正常动作

Java开发网

您没有登录

» Java开发网 » Java Security

打印话题 寄给朋友 订阅主题

作者	JCE 1.2.1的证书失效，在2005/07/28以后软件可能不能正常动作
jiyunang 发贴: 18 积分: 11	于 2005-07-19 12:22 有情提醒： Java Cryptography Extension 1.2.1（JCE 1.2.1）的证书失效，在2005/07/28以后软件可能不能正常动作。参考网站是日文的，好处是有比较详细的主流服务器是否存在这问题的联结。 http://jvn.jp/jp/JVN%2393926203/index.html

作者	Re:JCE 1.2.1的证书失效，在2005/07/28以后软件可能不能正常动作 [Re:jiyunang]
menzy 版主发贴: 754 积分: 113	于 2005-07-20 08:02 等会儿研究一下，现在要先保保鲜

作者

Re:JCE 1.2.1的证书失效，在2005/07/28以后软件可能不能正常动作 [Re:jiyunang]

menzy

版主

发贴: 754
积分: 113

于 2005-07-21 08:22

日文看不懂，英文在这里
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101796-1&searchclause=101796

Description Top
Sun(sm) Alert Notification

* Sun Alert ID: 101796
* Synopsis: Java Cryptography Extension (JCE) 1.2.1 Package (Signing Certificate) Expires on July 27, 2005
* Category: Availability
*
Product: Java Cryptography Extension 1.2.1
* BugIDs:
* Avoidance: Upgrade
* State: Resolved
* Date Released: 13-Jul-2005
* Date Closed: 13-Jul-2005
* Date Modified:

1. Impact

The Java Cryptography Extension (JCE) 1.2.1 is an optional package for J2SE 1.2.x and 1.3.x that provides a framework and implementations for encryption, key generation, key agreement, and Message Authentication Code (MAC) algorithms. The digital certificate that was used to sign the JCE 1.2.1 jar files will expire on July 27, 2005, after which the product will no longer function.
2. Contributing Factors

This issue can occur in the following release:

* Java Cryptography Extension (JCE) 1.2.1 (for J2SE 1.2.x and 1.3.x)

Notes:

1. JCE 1.2.1 is at "End of Service Life" (EOSL), and is no longer supported. JCE 1.2.1 was EOSL'ed in 2002 when JCE 1.2.2 was released.
2. The JCE that is integrated into J2SE 1.4 and later is not affected by this issue. This Sun Alert is specific to JCE 1.2.1, which is an optional package for use with J2SE 1.2.x. and 1.3.x (JCE 1.2.1 is not bundled with J2SE 1.2.x and 1.3.x).

3. Symptoms

After the expiration date, code calling into JCE 1.2.1 will fail with symptoms similar to the following:

[xxxxxx@xxxxxx] 258 >java BlowfishKey
Exception in thread "main" java.lang.ExceptionInInitializerError:
java.lang.SecurityException: Cannot set up certs for trusted CAs
at javax.crypto.b.<clinit>([DashoPro-V1.2-120198])
at javax.crypto.KeyGenerator.getInstance([DashoPro-V1.2-120198])

作者	Re:JCE 1.2.1的证书失效，在2005/07/28以后软件可能不能正常动作 [Re:jiyunang]
menzy 版主发贴: 754 积分: 113	于 2005-07-21 08:22 Solution Summary Top 4. Relief/Workaround There is no workaround. Please see the "Resolution" section below. 5. Resolution This issue is addressed in the following releases: * Java Cryptography Extension (JCE) 1.2.2 (for J2SE 1.2.x and 1.3.x) which is available at: http://java.sun.com/products/jce/index-122.html * JCE in J2SE 1.4 and later

作者	Re:JCE 1.2.1的证书失效，在2005/07/28以后软件可能不能正常动作 [Re:jiyunang]
menzy 版主发贴: 754 积分: 113	于 2005-07-21 08:25 简而言之： jce 1.2.1过期的原因是签名jar文件用的证书过期解决办法是，以后不要用jce 1.2.1。用java 1.4以上版本的，由于使用的是jce 1.2.2 /1.3 。

作者	Re:JCE 1.2.1的证书失效，在2005/07/28以后软件可能不能正常动作 [Re:jiyunang]
54ocp 发贴: 3 积分: 0	于 2005-08-03 15:16 如果使用的JDK1.3，升级为jce 1.2.2就可以了，我已经测试过

已读帖子

新的帖子

被删除的帖子