How to avoid "java.security.InvalidKeyException:illegal Key Size" error when invoking secured services in WSO2 WSAS

"java.security.InvalidKeyException:illegal Key Size" error is a common issue which occurs when you try to invoke a secured web service in an environment where the provision for java unlimited security jurisdiction is not done.
This can be avoided by installing Java Cryptography Extension (JCE) unlimited strength jurisdiction policy files.

1. Suppose you are using jdk15. Go to http://java.sun.com/javase/downloads/index_jdk5.jsp

2. Go to the Other Downloads section and click on download link next to "Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 5.0"

3. Download jce_policy-1_5_0.zip and extract it in to a directory.

4. You will find local_policy.jar and US_export_policy.jar files there in the extracted directory. Copy these two files to $JAVA_HOME/jre/lib/security directory. (These files will already be there. you may replace them)

5. Restart WSO2 WSAS and invoke your secured service again. You will not encounter the "invalidkeyException" any more.

Comments

Padmashantha Rajapakshe said…
good and very helpful.. anyone using IBM (IBMJCE), you can find unrestricted policy file here.
https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=jcesdk
(you need to create an account if you don't have one)
October 22, 2008 at 10:56 AM
Sahmeepee said…
Thanks Charitha, your post helped me fix a problem I had setting up Adito server to be published through ISA.

You saved me lots of time!
March 11, 2009 at 2:54 AM
Anonymous said…
Thanks a lot for such a helpful article - this saved me from hours and hours of trying to figure out what was wrong with my setup
June 10, 2009 at 2:10 PM
Anonymous said…
Perfect!!You are a outstanding person!Have you ever wore chaussures puma,Here are the most popular puma CAT,Puma shoes store gives some preview of puma speed cat,and casual but no sweat puma basket.
Puma sport
polo shirts
polo shirts
gillette razor blades
Queen--ugg boots
original polo clothing
June 17, 2009 at 7:14 PM
gemjohny said…
Man, you are awesome !! took hell lot of time to figure this out.. there were already some files,once i replaced, it started working magically
August 19, 2009 at 11:14 PM
Achila Liyanarachchi said…
Wow.. this is great post. This works for me. Thnx
July 6, 2011 at 5:21 AM
kachakayala said…
Hi all I am using IBMJCEFIPS provider I am getting the java.security.InvalidKeyException, I updated unrestricted policy files also. Why it is showing the this problem I am not understanding.
November 7, 2011 at 9:25 PM
Tomasz Dziurko said…
Thank you so much for this tip. You've saved my day! :) Best regards from Poland :)
December 29, 2011 at 9:10 AM
Anonymous said…
Thanks for this solution. Regards from Mexico.
April 19, 2012 at 8:32 AM
Unknown said…
Thanks ,
I resolved my issue :)
November 29, 2012 at 1:58 AM
highTechFool said…
Thank you so much!! I've been trying to fix this problem for nearly a week. THANK YOU!
April 25, 2013 at 3:10 PM
Unknown said…
Thank you very much for the post. I had the error illegal Key Size. I was spending already a lot of time analysing the cryptho classes of my JRE.
I followed your post, and I solved the problem.
I just changed the local_policy.jar of my jre installation with the one with the unlimited JCE policy.
After that ... It works!!!!!
Thanks a lot!!!!
May 9, 2013 at 1:15 PM
Post a Comment

Popular posts from this blog

WSO2 Stratos - Introducing WSO2 middleware Platform as a Service (PaaS)

Image
Yesterday we released our newest integrated cloud middleware platform, WSO2 Stratos . It is now online and ready for use! For the past few years, WSO2 has been doing many releases based on revolutionary Carbon platform , which helped to consistently improve the platform with introducing latest state-of-art technologies. The initial releases of Carbon product platform intended to improve the features of the individual products. For example, a lot of core features were introduced to WSO2 ESB, WSAS, Governance Registry etc.. Then we focused on ease of integration and more component based model. We introduced Equinox based provisioning model to build your SOA platform by picking and choosing the components as and when you need. Then, the core product platform has been enhanced to support multi-tenancy. With the multi-tenant supported architecture at hand, our brilliant development team was able to introduce the first ever comprehensive middleware PaaS. Why is this so important? Now, WSO2 C...
Read more

Common mistakes to avoid in WSO2 ESB - 1 - "org.apache.axis2.AxisFault: The system cannot infer the transport information from the URL"

In the next few weeks, you could expect a series of blog posts from me which explain the remedies to avoid some common mistakes which we do when working with WSO2 ESB . This is the first of many. During the initial rounds of testing your integration solution or even in production systems, you may have come across the following error. org.apache.axis2.AxisFault: The system cannot infer the transport information from the URL .... Some of you may have struggled hours figuring out a solution to address this issue. Let me explain this error in detail and possible causes of this. So, next time when you see this error in your WSO2 ESB setup, you will not have to spend time unnecessarily googling everywhere. There can be many different causes of this error. I have observed  four main reasons. Cause 1 This is the simplest cause. Suppose, you have a proxy service similar to the following. <proxy xmlns="http://ws.apache.org/ns/synapse" name="MistakesTest...
Read more

Working with HTTP multipart requests in soapUI

Image
You can use HTTP request test step in soapUI to submit messages with various Content-Types.  In this post, we will have a quick look into the multipart/form-data requests in soapUI. multipart/form-data requests usually come into action when you do HTML form submissions with file attachments. For example, have a look at the following HTML form post. <form action="http://localhost:8090/CKFileUploadApp/UploadServlet" method="post" enctype="multipart/form-data"> <input type="file" name="file"> <input type="text" name="paramName"> <input type="submit" name="Submit" value="Upload File"> </form> In the forms like above, we have file upload option as a form input where we can upload a file along with the form submission. In that case, the request's HTTP content type will be multipart/form-data. How can we simulate such a request using soapUI...
Read more