Opened 6 years ago

Closed 5 years ago

Last modified 5 years ago

#1201 closed defect (fixed)

Orchid policy error

Reported by: zzz Owned by: zzz
Priority: minor Milestone: 0.9.12
Component: apps/plugins Version: 0.9.11
Keywords: Cc:
Parent Tickets: Sensitive: no

Description

From http://zzz.i2p/topics/1564

ugly Java errors from Orchid 1.0.0-0.3-b44. Here's my environment:

I2P version: 0.9.11-0
Java version: Oracle Corporation 1.7.0_51 (Java(TM) SE Runtime Environment 1.7.0_51-b13)
Wrapper version: 3.5.22
Server version: 7.6.14.v20131031
Servlet version: Jasper JSP 2.1 Engine
Platform: Windows 7 x86 6.1
Processor: uninitialized (core2)
Jbigi: Locally optimized native BigInteger library loaded from file
Encoding: Cp1252
Charset: windows-1252

and here's what I found in the router logs:

2/10/14 2:27:46 AM ERROR [chid Starter] t.i2p.orchid.web.OrchidServlet: Unable to start Orchid
com.subgraph.orchid.TorException: Unlimited Strength Jurisdiction Policy Files are required but not installed.
at com.subgraph.orchid.TorClient.verifyUnlimitedStrengthPolicyInstalled(TorClient.java:212)
at com.subgraph.orchid.TorClient.start(TorClient.java:79)
at net.i2p.orchid.OrchidController.startup(OrchidController.java:125)
at net.i2p.orchid.web.OrchidServlet$Starter.run2(OrchidServlet.java:79)
at net.i2p.orchid.web.OrchidServlet$Starter.run(OrchidServlet.java:63)
2/10/14 2:27:46 AM ERROR [chid Starter] com.subgraph.orchid.TorClient : Unlimited Strength Jurisdiction Policy Files are required but not installed.

I checked and the *policy.jar files exist in my JRE folder:

C:\Program Files (x86)\Java\jre7\lib\security>dir
Volume in drive C is SSD
Volume Serial Number is E4F6-3180

Directory of C:\Program Files (x86)\Java\jre7\lib\security

02/09/2014 01:26 AM 2,770 blacklist
02/09/2014 01:26 AM 82,586 cacerts
02/09/2014 01:26 AM 2,593 java.policy
02/09/2014 01:26 AM 17,985 java.security
02/09/2014 01:26 AM 158 javafx.policy
02/09/2014 01:26 AM 98 javaws.policy
02/09/2014 01:26 AM 2,971 local_policy.jar
02/09/2014 01:26 AM 0 trusted.libraries
02/09/2014 01:26 AM 2,487 US_export_policy.jar
9 File(s) 111,648 bytes
2 Dir(s) 165,453,766,656 bytes free

Using regular outproxy to http://ipchicken.com works fine, but attempting to reach .onion sites via I2P results in a Squid proxy error. I'm not sure if this is related to the Java errors above or not.

Subtickets

Change History (5)

comment:1 Changed 6 years ago by zzz

Owner: set to zzz
Status: newaccepted
Version: 0.9.100.9.11

comment:2 Changed 6 years ago by zzz

Quote http://docs.oracle.com/javase/1.5.0/docs/api/javax/crypto/Cipher.html :

For more information on default key size in JCE jurisdiction policy files, please see appendix E in JCE Reference Guide. http://docs.oracle.com/javase/1.5.0/docs/guide/security/jce/JCERefGuide.html#AppE

Default for AES is 128, Tor needs 256

comment:3 Changed 6 years ago by zzz

Google 'how to install JCE unlimited strength policy files'

comment:4 Changed 5 years ago by zzz

Resolution: fixed
Status: acceptedclosed

OP replies at http://zzz.i2p/topics/1564 :

Confirmed that by downloading:

http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html

and following:

http://help.boomi.com/atomsphere/GUID-D7FA3445-6483-45C5-85AD-60CA5BB15719.html

I can eliminate those errors from my log and connect to .onion sites.

Sorry for the false alarm.

comment:5 Changed 5 years ago by zzz

Fix in plugin 1.0.0-0.4-b1 to correctly set the plugin state to START_FAILED when this occurs.

Note: See TracTickets for help on using tickets.