The Java Cryptography Extension is needed to support the public key infrastructure required by the "single-sign-on" CAS server.

If you are using a central installation of java and are getting an error message like the one below when trying to login with CAS, please contact your system administrator and request this update.

If you have your own version of java you will have to follow these instructions.

The following instructions are for Java J2SE 5.0.

  • go here
  • under Other Downloads download Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 5.0
  • replace the jar files local_policy.jar and US_export_policy.jar in jre/lib/security under your java installation with the ones contained in the downloaded JCE

You should now be patched.

Error Message

You will get an error message similar to the following if you don't have JCE installed

javax.servlet.ServletException: Error in Login Filter
org.glast.base.web.login.filter.LoginFilter.doFilter(LoginFilter.java:109)
org.netbeans.modules.web.monitor.server.MonitorFilter.doFilter(MonitorFilter.java:368)

root cause

javax.net.ssl.SSLKeyException: RSA premaster secret error
com.sun.net.ssl.internal.ssl.PreMasterSecret.<init>(PreMasterSecret.java:86)
com.sun.net.ssl.internal.ssl.ClientHandshaker.serverHelloDone(ClientHandshaker.java:514)
com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:160)
com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:495)

  • No labels