Tоshkеnt aхbоrоt tехnоlоgiyalari

security.provider.1=sun.security.provider.Sunsecurity.provider.2=sun.security.rsa
.SunRsaSignsecurity.provider.3=sun.security.ec.SunECsecurity.provider.4=com.sun.n et.ssl.internal.ssl.Providersecurity.provider.5=com.sun.crypto.provider.SunJCEsec urity.provider.6=sun.security.jgss.SunProvidersecurity.provider.7=com.sun.securit y.sasl.Providersecurity.provider.8=org.jcp.xml.dsig.internal.dom.XMLDSigRIsecurit y.provider.9=sun.security.smartcardio.SunPCSCsecurity.provider.10=sun.security.ms capi.SunMSCAPI

Keyin qo'shish kerak:

security.provider.11 = org.bouncycastle.jce.provider.BouncyCastleProvider Iltimos, seriya raqami sizning xavfsizlik faylingizga bog'liqligini unutmang.
O'rnatish muvaffaqiyatli bo'lganligini tekshirish uchun quyidagi oddiy dasturdan foydalanishingiz mumkin: public static void main (String [] args) {Provider provider
= Security.getProvider ("BC"); System.out.println (provayder);} Agar null qaytarsa o'rnatish muvaffaqiyatsiz tugaganligini bildiradi. Agar BC sifatida ko'rsatilgan bo'lsa, o'rnatish muvaffaqiyatli bo'ldi.

3. 
   Java importini boshqarish bo'yicha cheklovlar olib tashlandi.
   

Chet elga olib kirish va eksport qilish cheklovlari tufayli Java Kriptografik Algoritm Tizimi ba'zi cheklovlarga duch keladi. Cheklovlarni olib tashlash uchun siyosat fayli qaytadan yozilishi kerak.

1. 
   Siyosat faylini yuklab oling
   

• 
  jdk6 ->http: //www.oracle.com/technetwork/java/javase/downloads/jce-6- download-429243.html
  
• 
  jdk7 -> http: //www.oracle.com/technetwork/java/javase/downloads/jce-7- download-432124.html
  
• 
  jdk8 -> http: //www.oracle.com/technetwork/java/javase/downloads/jce8- download-2133166.html
  

Yuklangan siyosat fayliga ikkita fayl kerak bo'ladi: local_policy.jarcUS_export_policy.jar

2. 
   sdk va jre-dagi ikkita siyosat faylini qayta yozing.
   

• 
  Sdk -> C: \ Program Files \ Java \ jdk1.8.0_144 \ jre \ lib \ xavfsizlik
  
• 
  Jre -> C: \ Program Files \ Java \ jre1.8.0_144 \ lib \ security-dagi siyosat faylining joylashuvi.
  

4. 
   Sinov
   

Agar siyosat fayli samarali bo'lsa, tekshirish uchun quyidagi protseduradan foydalanishingiz mumkin:

AES algoritmining cheklovi olib tashlanishidan oldin, AES algoritmi faqat 128 bitni qo'llab-quvvatlagan.

public static void main(String[] args) { try {
KeyGenerator kg = KeyGenerator.getInstance("AES"); kg.init(256);
SecretKey secretKey = kg.generateKey(); System.out.println(secretKey.getFormat());
} catch (NoSuchAlgorithmException e) {
// TODO Auto-generated catch block
e.printStackTrace();
}
}

Agar java.security.InvalidKeyException: Illegal key error yuzaga kelsa, bu cheklov bekor qilinmaganligini anglatadi.