[ 
https://issues.apache.org/jira/browse/CASSANDRA-12945?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15690319#comment-15690319
 ] 

Stefan Podkowinski commented on CASSANDRA-12945:
------------------------------------------------

What I did was
* Replace export restricted JCE files with standard, weak policy files
* Clone your 9633 branch and run e.g, {{EncryptingCompressorTest}} just to get 
an {{java.security.InvalidKeyException: Illegal key size}} error
* Create a new keystore with 128 bit key sizes: {{keytool -genseckey -alias 
'testing:1' -keyalg AES -keysize 128 -storetype jceks -keystore mykeystore.jks}}
* Replace {{cassandra.keystore}} with new keystore and verify that tests pass

>From my understanding, the export restricted JCE policies will only unlock 
>stronger cipher versions. I'd be curious to know how this would break unit 
>tests.

> Resolve unit testing without JCE security libraries installed
> -------------------------------------------------------------
>
>                 Key: CASSANDRA-12945
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-12945
>             Project: Cassandra
>          Issue Type: Bug
>          Components: Core
>            Reporter: Jason Brown
>            Assignee: Jason Brown
>
> Running unit tests can fail on encryption-related tests if you don't have 
> something like the Oracle JCE libraries installed in your jdk. We can't 
> redistribute the Oracle JCE due to export laws, then we'd need to somehow get 
> it into the <jdk>/jre/lib/security.
> One possibility is to ignore encryption-related tests if there is no 
> encryption lib available. Another is to ship something like bouncycastle.jar 
> in the test directory.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to