jdk/src/java.base/share/conf/security/policy/README.txt
author wetmore
Mon, 05 Dec 2016 17:04:02 -0800
changeset 42365 5e640c2994d6
parent 40565 3ac0ba151e70
child 47031 78fb24b5f758
permissions -rw-r--r--
8170157: Enable unlimited cryptographic policy by default in OracleJDK 8169335: Add a crypto policy fallback in case Security Property 'crypto.policy' does not exist Reviewed-by: erikj, ihse, weijun, xuelei, coffeys
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
40565
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
     1
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
     2
            Java(TM) Cryptography Extension Policy Files
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
     3
    for the Java(TM) Platform, Standard Edition Runtime Environment
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
     4
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
     5
                               README
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
     6
------------------------------------------------------------------------
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
     7
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
     8
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
     9
The JCE architecture allows flexible cryptographic strength to be
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
    10
configured via the jurisdiction policy files contained within these
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
    11
directories.
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
    12
42365
5e640c2994d6 8170157: Enable unlimited cryptographic policy by default in OracleJDK
wetmore
parents: 40565
diff changeset
    13
The default JCE policy files bundled in this Java Runtime Environment
5e640c2994d6 8170157: Enable unlimited cryptographic policy by default in OracleJDK
wetmore
parents: 40565
diff changeset
    14
allow for "unlimited" cryptographic strengths.  For convenience,
5e640c2994d6 8170157: Enable unlimited cryptographic policy by default in OracleJDK
wetmore
parents: 40565
diff changeset
    15
this build also contains the historic "limited" strength policy files
5e640c2994d6 8170157: Enable unlimited cryptographic policy by default in OracleJDK
wetmore
parents: 40565
diff changeset
    16
which contain restrictions on cryptographic strengths, but they must be
40565
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
    17
specifically activated by updating the "crypto.policy" Security property
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
    18
(e.g. <java-home>/conf/security/java.security) to point to the appropriate
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
    19
directory.
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
    20
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
    21
Each subdirectory contains a complete policy configuration, and additional
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
    22
subdirectories can be added/removed to reflect local regulations.
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
    23
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
    24
JCE for Java SE has been through the U.S. export review process.  The JCE
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
    25
framework, along with the various JCE providers that come standard with it
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
    26
(SunJCE, SunEC, SunPKCS11, SunMSCAPI, etc), is exportable from the
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
    27
United States.
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
    28
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
    29
You are advised to consult your export/import control counsel or attorney
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
    30
to determine the exact requirements of your location, and what policy
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
    31
settings should be used.
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
    32
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
    33
Please see The Java(TM) Cryptography Architecture (JCA) Reference
3ac0ba151e70 8061842: Package jurisdiction policy files as something other than JAR
wetmore
parents:
diff changeset
    34
Guide and the java.security file for more information.