SEC-2901: java.security.InvalidKeyException: Illegal key size

[spring-projects-issues]

Zoltan Altfatter (Migrated from SEC-2901) said:

Using spring boot 1.2.1.RELEASE with Spring Security 4.0.0.RC1 and receive the following exception if I upgrade from jdk1.8.0_25.jdk to jdk1.8.0_31.jdk or jdk1.8.0_40.jdk

java.security.InvalidKeyException: Illegal key size
at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1039)
at javax.crypto.Cipher.implInit(Cipher.java:805)
at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
at javax.crypto.Cipher.init(Cipher.java:1396)
at javax.crypto.Cipher.init(Cipher.java:1327)
at org.springframework.security.crypto.encrypt.CipherUtils.initCipher(CipherUtils.java:105)
at org.springframework.security.crypto.encrypt.AesBytesEncryptor.encrypt(AesBytesEncryptor.java:65)
at org.springframework.security.crypto.encrypt.HexEncodingTextEncryptor.encrypt(HexEncodingTextEncryptor.java:36)
at com.elerna.socrates.login.passwordrecovery.ResetPasswordTokenHandlerImpl.encrypt(ResetPasswordTokenHandlerImpl.java:30)
at

[spring-projects-issues]

Rob Winch said:

Can you try updating to 4.0.0.RC2?

[spring-projects-issues]

Zoltan Altfatter said:

I get the same exception also with 4.0.0.RC2

[spring-projects-issues]

Zoltan Altfatter said:

ah, I forgot I installed the JCE Unlimited Strength Jurisdiction Policy (http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html) into my jdk1.8.0_25.jdk
Doing the same on jdk1.8.0_40.jdk I don't get anymore the error.

[spring-projects-issues]

Rob Winch said:

Thanks resolving as invalid per your previous comment