[Bug 1057249] New: java.lang.SecurityException: Can't read cryptographic policy directory: unlimited

5 Sep 2017

      http://bugzilla.suse.com/show_bug.cgi?id=1057249

            Bug ID: 1057249
           Summary: java.lang.SecurityException: Can't read cryptographic
                    policy directory: unlimited
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Java
          Assignee: bnc-team-java@forge.provo.novell.com
          Reporter: jslaby@suse.com
        QA Contact: qa-bugs@suse.de
          Found By: ---
           Blocker: ---

josm cannot be started due to java packaging bug.

This is a reproducer:
class H {
        static public void main(String args[]) {
                javax.net.ssl.SSLSocketFactory.getDefault();
        }
}

leading to:

Exception in thread "main" java.lang.ExceptionInInitializerError
        at java.base/javax.crypto.JceSecurityManager.<clinit>(Unknown Source)
        at java.base/javax.crypto.Cipher.getConfiguredPermission(Unknown
Source)
        at java.base/javax.crypto.Cipher.getMaxAllowedKeyLength(Unknown Source)
        at
java.base/sun.security.ssl.CipherSuite$BulkCipher.isUnlimited(Unknown Source)
        at java.base/sun.security.ssl.CipherSuite$BulkCipher.<init>(Unknown
Source)
        at java.base/sun.security.ssl.CipherSuite$BulkCipher.<clinit>(Unknown
Source)
        at java.base/sun.security.ssl.CipherSuite.<clinit>(Unknown Source)
        at
java.base/sun.security.ssl.SSLContextImpl.getApplicableSupportedCipherSuiteList(Unknown
Source)
        at java.base/sun.security.ssl.SSLContextImpl.access$100(Unknown Source)
        at
java.base/sun.security.ssl.SSLContextImpl$AbstractTLSContext.<clinit>(Unknown
Source)
        at java.base/java.lang.Class.forName0(Native Method)
        at java.base/java.lang.Class.forName(Unknown Source)
        at java.base/java.security.Provider$Service.getImplClass(Unknown
Source)
        at java.base/java.security.Provider$Service.newInstance(Unknown Source)
        at java.base/sun.security.jca.GetInstance.getInstance(Unknown Source)
        at java.base/sun.security.jca.GetInstance.getInstance(Unknown Source)
        at java.base/javax.net.ssl.SSLContext.getInstance(Unknown Source)
        at java.base/javax.net.ssl.SSLContext.getDefault(Unknown Source)
        at java.base/javax.net.ssl.SSLSocketFactory.getDefault(Unknown Source)
        at H.main(H.java:3)
Caused by: java.lang.SecurityException: Can not initialize cryptographic
mechanism
        at java.base/javax.crypto.JceSecurity.<clinit>(Unknown Source)
        ... 20 more
Caused by: java.lang.SecurityException: Can't read cryptographic policy
directory: unlimited
        at java.base/javax.crypto.JceSecurity.setupJurisdictionPolicies(Unknown
Source)
        at java.base/javax.crypto.JceSecurity.access$000(Unknown Source)
        at java.base/javax.crypto.JceSecurity$1.run(Unknown Source)
        at java.base/javax.crypto.JceSecurity$1.run(Unknown Source)
        at java.base/java.security.AccessController.doPrivileged(Native Method)
        ... 21 more

There are few other bugs like:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=866924

And according to strace, it really looks for
$JAVA_HOME/jre/conf/security/policy/unlimited:
stat("/usr/lib64/jvm/java-9-openjdk-9/jre/conf/security/policy/unlimited",
0x7f902817ff50) = -1 ENOENT (No such file or directory)

which cannot be found. I believe the conf files should be packaged somehow.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1057249] New: java.lang.SecurityException: Can't read cryptographic policy directory: unlimited

bugzilla_noreply＠novell.com