JDK-8160724 : Allow the same JCE jurisdiction policy files to work across JDK 6, 7, 8 families
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: javax.crypto
  • Priority: P3
  • Status: Closed
  • Resolution: Won't Fix
  • OS: generic
  • CPU: generic
  • Submitted: 2016-07-01
  • Updated: 2016-11-11
  • Resolved: 2016-11-11
Related Reports
Relates :  
JDK-8157561 - Ship the unlimited policy files in JDK Updates
Relates :  
JDK-8160723 - Improve jurisdiction policy file signing exception
Description
Currently,  specific (per JDK family version) JCE jurisdiction policy jar files have to be downloaded in order for strong crypto to be available in the JDK.

A supportability enhancement would be for the JDK to allow any version  of the signed JCE policy files to work on any JDK family version. This is non-applicable to JDK 9 since the signing requirement was removed there.
Comments
Given the new work undertaken via JDK-8157561, I think we cal close out this enhancement. End users will now be able to control limited/unlimited crypto via setting in java.security file. Downloading of policy files will no longer be necessary.
11-11-2016