Altering List of Algorithms (Optional)

Java 7 bundled with TIBCO API Exchange Gateway defines a constraint in the TIB_JAVA_HOME/lib/java.security file. This constraint limits the algorithms used by the accepted certificates from the counterpart. To resolve this, follow one of these workarounds:

Note: The default values for the security algorithms are usually excluded by vendors to make the system more secure. By implementing any of this workaround, you are reducing the security level of the system.

Procedure

  1. Download Java Cryptography Extension (JCE) Policy Files

    To download the Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 7, follow these steps:

    1. Navigate to the following URL: http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html
    2. Accept the license agreement.
    3. Right click the UnlimitedJCEPolicyJDK7.zip link. Click Save link as....
    4. Save the zip file in the TIB_JAVA_HOME/jre/lib/security directory.
  2. Disable Algorithms Constraint

    To disable the algorithm constraint, follow these steps:

    1. Navigate to the TIB_JAVA_HOME/jre/lib/security directory.
    2. Open the java.security file in a text editor.
    3. Comment the following property:
      jdk.certpath.disabledAlgorithms=MD2, RSA keySize < 1024
    4. Save changes to the file.