Path: csiph.com!news.mixmin.net!aioe.org!.POSTED!not-for-mail
From: =?UTF-8?Q?Arne_Vajh=c3=b8j?= <arne@vajhoej.dk>
Newsgroups: comp.lang.java.programmer
Subject: Re: Anyone know how to set up a bouncycastle?
Date: Fri, 18 Sep 2015 20:04:08 -0400
Organization: Aioe.org NNTP Server
Lines: 42
Message-ID: <mti8pq$3vp$1@speranza.aioe.org>
References: <5e5ff34b-8293-469c-abd6-10bc2a9f850b@googlegroups.com> <mtftbo$l9h$2@speranza.aioe.org> <7f470fb8-11e6-4773-92fd-027032f9b441@googlegroups.com>
NNTP-Posting-Host: NIM2IeSPVd0kE3mU1mieXw.user.speranza.aioe.org
Mime-Version: 1.0
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 8bit
X-Complaints-To: abuse@aioe.org
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.2.0
X-Notice: Filtered by postfilter v. 0.8.2
Xref: csiph.com comp.lang.java.programmer:32614

On 9/18/2015 8:45 AM, e.d.programmer@gmail.com wrote:
> On Thursday, September 17, 2015 at 10:37:00 PM UTC-4, Arne Vajhøj
> wrote:
>> Wild guess - in your java.security.policy add this permission:
>>
>> grant { permission java.security.SecurityPermission
>> "putProviderProperty.BC"; ... };
>
> I looked up where and how to put this grant stuff.  This sounds
> complicated.
> https://docs.oracle.com/javase/8/docs/technotes/guides/security/PolicyFiles.html#FileSyntax
>
>  I'm running webstart.  This should work for my client and server?  I
> just have to update the server?  This goes in the
> jdk1.8.0_60\jre\lib\security\java.security file?  I have to manually
> put this here for each server, and do it again any time we install a
> new Java version? I put this in my jnlp file.  It apparently didn't
> help this issue. <security> <all-permissions/> </security> Is there a
> way to make this work without manually editing files we'll have to
> worry about later?  This is just for an application, server and
> clients are all on local network.
>
> Is there a way to call PDDocument.load without using BouncyCastle, or
> without installing it in java security?

I don't know anything about that library.

But JCE providers and Java Web Start are a well-known issue.

http://lopica.sourceforge.net/faq.html#jce has the basic information.

http://stackoverflow.com/questions/4275005/jnlp-applet-bouncy-castle has 
some suggestions.

http://wiki.nikhef.nl/grid/JGridstart/Bouncycastle_and_Java_Web_start 
has another suggestion.

It seems like it do work, but that it requires some effort.

Arne