2048 bit certificate does not work in jre 1.5 13

[zigzagdna]

I tried to install a 2048 ldap certificate in jre 1.5 under
D:\Program Files\Java\jre1.5.0_13\lib\security\jssecacters using
keytool import command.
Certificate gets installed without error. However when I tried to do
ldap it errors saying that cannot contact ldap server,
If I replace 2048 bit certificate by 1024 bit certificate, everything
works.

Based on my research jre 1.5 supports 2048 bit certificate, then why
do I have issue? I have another machine where I use jre 1.6 and I do
not have any problem with ldap 2048 bit.

Appreciate any insights.

 

[Jan Thomä]

Based on my research jre 1.5 supports 2048 bit certificate, then why
do I have issue? I have another machine where I use jre 1.6 and I do
not have any problem with ldap 2048 bit.

We had that problem as well. By default java installs limited strength
cryptography policy files, which prevent you from using strong
cryptography. Go to:

http://www.oracle.com/technetwork/java/javase/downloads/index-jdk5-jsp-142662.html

and download and install the unlimited strength cryptography policy
files (they are near the bottom of the page). This did fix it for us.

Kind regards,
Jan

 

[zigzagdna]

We had that problem as well. By default java installs limited strength
cryptography policy files, which prevent you from using strong
cryptography. Go to:

http://www.oracle.com/technetwork/java/javase/downloads/index-jdk5-js...

and download and install the unlimited strength cryptography policy
files (they are near the bottom of the page). This did fix it for us.

Kind regards,
Jan

Jan:

Thanks a lot,

Prem

 

[Roedy Green]

Appreciate any insights.

there is an extra download you need to turn on high bit length keys.

see http://mindprod.com/jgloss/jce.html
--
Roedy Green Canadian Mind Products
http://mindprod.com

Microsoft has a new version out, Windows XP, which according to everybody is the "most reliable Windows ever." To me, this is like saying that asparagus is "the most articulate vegetable ever."
~ Dave Barry