IMiS/Storage Connector JAVA issues when using Advanced (Encrypted) Authentication

Product:	IMiS/Storage Connector JAVA
Release:	3.1.1202
Date:	03/23/2012

Case:

IMiS/Storage Connector might report an error related to authentication when using Storage methods, such as createObejct(). This might be caused by restricted Java Cryptography Extension (JCE) in your Java Runtime Environment. The solution for this is to upgrade your Runtime Environment with JCE Unlimited Strength Jurisdiction Policy Files. See below for more info.

Description:

When you get an error while opening a session with a stack trace that looks something like

com.imis.imisarc.client.IAClientException: Authentication between server and client failed.
at com.imis.imisarc.client.IASession.open(...
Caused by: com.imis.imisarc.client.IACryptoServiceException: Error occurred while transforming authentication data.
at com.imis.imisarc.client.IACryptoService.authTransform(...
Caused by: java.lang.SecurityException: Unsupported keysize or algorithm parameters
at javax.crypto.Cipher.init(...

or

com.imis.imisarc.client.IAClientException: Authentication between server and client failed.
at com.imis.imisarc.client.IASession.open(...
Caused by: com.imis.imisarc.client.IACryptoServiceException: Failed to initialize the authentication cipher engine.
at com.imis.imisarc.client.IACryptoService.initializeCryptoContext(...

the reason might be that you're using the product with Java Runtime Environment that comes prepackaged without 192/256 bit AES encryption because of the exports regulation of crypto products from USA.

You need to upgrade your Java Runtime Environment Policy Libraries with Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files for appropriate JRE.

JCE policy files for JRE 1.4.2, for Sun JCE, are found at the following site:

http://www.oracle.com/technetwork/java/javasebusiness/downloads/java-archive-downloads-java-plat-419418.html#7503-jce-1.4.2-oth-JPR

When using the product in IBM Java Runtime Environments refer to the IBMs Unrestricted JCE policy files:

https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=jcesdk

JCE Unlimited Strength Jurisdiction Policy Files (.jar libraries) should to be placed in Java Runtime Environment Security folder:

on Unix systems: <java_home>/lib/security
on Windows systems: <java_home>\lib\security

Related Documents:

| Back | Main view