Problem with JCE in websphere 61 environment

[Rengarajan Venkatachari]

We migrated the app from WAS51 to WAS61. We are facing issues with JCE.

Below is the error that is seen in the system error log...

 java.lang.SecurityException: The provider SunJCE cannot authenticate JCE frameworkjava.net.MalformedURLException: unknown protocol: r
        at com.sun.crypto.provider.SunJCE.b(DashoA6275)
        at com.sun.crypto.provider.SunJCE.a(DashoA6275)
        at com.sun.crypto.provider.PBEKeyFactory.<init>(DashoA6275)
        at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
        at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
        at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
        at java.lang.reflect.Constructor.newInstance(Constructor.java:494)
        at java.lang.Class.newInstance0(Class.java:350)
        at java.lang.Class.newInstance(Class.java:303)
        at javax.crypto.SunJCE_b.a(DashoA6275)
        at javax.crypto.SunJCE_b.a(DashoA6275)
        at javax.crypto.SecretKeyFactory.getInstance(DashoA6275)

The library files used are:
1. sunjce_provider.jar
2. jce1_2_2.jar
3. US_export_policy.jar
4. local_policy.jar
All these library files are in <App.war>/WEB-INF/lib directories and their mainfest says that they are created with 1.3.1 version.

The code that is causing the issue is given below:

                  Provider sunJce = new com.sun.crypto.provider.SunJCE();
                  Security.addProvider(sunJce);
                  
                  // Create the key
                  PBEKeySpec keySpec =
                    new PBEKeySpec(<"Pass-Phrase as string">.toCharArray());
                  SecretKey key =
                        SecretKeyFactory.getInstance("PBEWithMD5AndDES","SunJCE").generateSecret(keySpec); (This is where the error occurs)

1. Is this error because of jar files or their versions? (or)
2. Is this error because of permission issues like (was.policy), (server.policy) settings ?

Any thoughts would be helpful.

Thanks,
Renga

[john simone]

I'm running into this same issue. Did you ever find a solution?