Package: src:openjdk-9
Version: 9~b170-2
Severity: important
Justification: Many applications (e.g. maven) crash immediately
A number of crypto classes exception during <clinit>:
Exception in thread "main" java.lang.ExceptionInInitializerError
at
java.base/javax.crypto.JceSecurityManager.<clinit>(JceSecurityManager.java:65)
at
java.base/javax.crypto.Cipher.getConfiguredPermission(Cipher.java:2610)
[...]
Caused by: java.lang.SecurityException: Can not initialize cryptographic
mechanism
at java.base/javax.crypto.JceSecurity.<clinit>(JceSecurity.java:118)
... 4 more
Caused by: java.lang.SecurityException: Can't read cryptographic policy
directory: unlimited
at
java.base/javax.crypto.JceSecurity.setupJurisdictionPolicies(JceSecurity.java:324)
at java.base/javax.crypto.JceSecurity.access$000(JceSecurity.java:73)
at java.base/javax.crypto.JceSecurity$1.run(JceSecurity.java:109)
at java.base/javax.crypto.JceSecurity$1.run(JceSecurity.java:106)
at java.base/java.security.AccessController.doPrivileged(Native Method)
at java.base/javax.crypto.JceSecurity.<clinit>(JceSecurity.java:105)
... 4 more
sources.debian.net has (as usual) failed to index the appropriate source.
This has been noticed by others:
* https://github.com/docker-library/openjdk/issues/101
They claim that some files in `lib/` should be in `conf/`, or something.
I didn't really look.
Testcase:
% cat A.java
import javax.crypto.Cipher;
public class A {
public static void main(String... args) throws Exception {
Cipher.getMaxAllowedKeyLength("RC5");
}
}
% javac A.java && java A
Thanks.
