Re: [Slightly OT] Classpath and JCE Unlimited Strength Jurisdiction Policy Files
Re: [Slightly OT] Classpath and JCE Unlimited Strength Jurisdiction Policy Files
- Subject: Re: [Slightly OT] Classpath and JCE Unlimited Strength Jurisdiction Policy Files
- From: Chuck Hill <email@hidden>
- Date: Mon, 20 Jul 2009 11:30:49 -0700
Hi Miguel,
I think it has to get loaded from the root (or is that boot?) class
loader so there is less chance that it was tampered with.
Will it work in /Library/Java/Extensions? I will guess not, but
interesting to try.
Google "java classloader security".
Chuck
On Jul 19, 2009, at 5:33 AM, Miguel Arroz wrote:
Hi!
I'm working with the paypal toolkit, and it uses JCE to encrypt and
sign the information that is sent to them, to stop an user from
tampering with it.
To make it work, I had to download the JCE Unlimited Strength
Jurisdiction Policy Files from Sun, and install it on my Java VM.
My question is, as those files are just JARs, why can't I add them
to my project? I have a Jars framework, somewhat like Wonder, where
I keep all the JARs that my projects depend upon. I tried to add
these ones to that framework, but it doesn't work, they must really
be inside the Java VM (in libs/security). Why?
Yours
Miguel Arroz
--
Chuck Hill Senior Consultant / VP Development
Learn WO at WOWODC'09 East in Montréal this August!
http://www.wocommunity.org/wowodc09/east
http://arstechnica.com/apple/news/2009/07/webobjects-sliced-from-106but-prognosis-of-death-premature.ars
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden