Bug ID: JDK-8157561 Ship the unlimited policy files in JDK Updates

JDK-8157561 : Ship the unlimited policy files in JDK Updates

Type: Enhancement
Component: security-libs
Sub-Component: javax.crypto
Affected Version: 8u152

Priority: P3
Status: Resolved
Resolution: Fixed
OS: generic
CPU: generic

Submitted: 2016-05-23
Updated: 2018-01-15
Resolved: 2016-11-09

Versions (Unresolved/Resolved/Fixed)

The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.

JDK 6	JDK 7	JDK 8	Other
6u171Fixed	7u161Fixed	8u151Fixed	openjdk7uFixed

Related Reports

Blocks :	JDK-8170157 - Enable unlimited cryptographic policy by default in Oracle JDK builds
Duplicate :	JDK-7024850 - Consider shipping Unlimited Crypto Policy files by default.
Duplicate :	JDK-8156840 - Need SVR4 pkg solution for Unlimited crypto JCE policy files
Relates :	JDK-8160724 - Allow the same JCE jurisdiction policy files to work across JDK 6, 7, 8 families
Relates :	JDK-8061842 - Package jurisdiction policy files as something other than JAR

Sub Tasks

JDK-8169716 :

Release Note: New Security property to control crypto policy - Closed

Description

JDK 9 EA currently ships the unlimited JCE policy files along with the limited ones. The limited ones are still enabled by default.

A similar setup should be done for the JDK update releases. As per JDK 9 README, config changes can be made via modification of the JDK contents.

jdk-9/lib/security/unlimited_policy/README.txt
====================================
<snip>

----------------------------------------------------------------------
Installation Instructions
----------------------------------------------------------------------

This directory contains the following files:

        README.txt                   This file
        local_policy.jar             Unlimited strength local policy file
        US_export_policy.jar         Unlimited strength US export policy file

Simply replace the limited strength policy jar files with the jars in this
directory:

        % cp *.jar ..                      [Unix]
        % copy *.jar ..                    [Windows]

Comments

UR SQE OK to defer this from PSU17_01. Too late for the release.

15-11-2016

The current JDK 9 approach is to ship both unlimited and limited policy jars/files in different directories, with a new Security property selecting which policy is active.

03-08-2016