Do we still need to include local_policy.jar and US_export_policy.jar

Peter Schober peter.schober at univie.ac.at
Mon Jun 17 04:33:21 EDT 2019


* Lipscomb, Gary <glipscomb at csu.edu.au> [2019-06-17 06:30]:
> Do we still need to include the local_policy.jar and
> US_export_policy.jar in the JVM configuration

Apparently not since Java 8.161 (or 8.151 with setting a new security
property yourself):
https://bugs.java.com/bugdatabase/view_bug.do?bug_id=JDK-8170157

$ grep ^crypto\.policy /path-to-your/lib/security/java.security

There are example for one-liners out there that let you verify usable
key sizes in your JVM, e.g. https://gist.github.com/evaryont/6786915

-peter


More information about the users mailing list