原因：java.lang.SecurityException：辖区策略文件未由受信任的签名者签名！在Java 7中

Question

我想在JDK7中使用BouncyCastle提供程序，因此添加了bcprov-jdk15to18-165.jar，并希望使用我拥有的x509certificate进行加密，]]

即使我从这里更新了jre中的策略文件，我也在IBM WebSphere中遇到此错误。https://www-01.ibm.com/marketing/iwm/mrs/DownloadList?source=jcesdk&lang=en_US

我下载了不受限制的策略文件。

仍然出现此错误：

Exception in thread "main" java.lang.ExceptionInInitializerError
    at java.lang.J9VMInternals.initialize(J9VMInternals.java:250)
    at javax.crypto.Cipher.getInstance(Unknown Source)
    at javax.crypto.Cipher.getInstance(Unknown Source)
    at Base64Conversion.encrypt(Test1.java:202)
    at Base64Conversion.execute(Test1.java:171)
    at Test1.main(Test1.java:68)
Caused by: java.lang.SecurityException: Cannot set up certs for trusted CAs
    at javax.crypto.b.<clinit>(Unknown Source)
    at java.lang.J9VMInternals.initializeImpl(Native Method)
    at java.lang.J9VMInternals.initialize(J9VMInternals.java:228)
    ... 5 more
Caused by: java.lang.SecurityException: Jurisdiction policy files are not signed by trusted signers!
    at javax.crypto.b.a(Unknown Source)
    at javax.crypto.b.a(Unknown Source)
    at javax.crypto.b.access$600(Unknown Source)
    at javax.crypto.b$0.run(Unknown Source)
    at java.security.AccessController.doPrivileged(AccessController.java:280)
    ... 8 more

我想在JDK7中使用BouncyCastle提供程序，因此添加了bcprov-jdk15to18-165.jar，并希望使用我拥有的x509certificate进行加密，但是，即使有...，我也在IBM WebSphere中遇到此错误。

Answer 1

您是否尝试用Sun distr替换策略文件。 ？如果不尝试使用Sun的JDK 7：https://www.oracle.com/java/technologies/javase-jce7-downloads.html