[
https://issues.apache.org/jira/browse/PDFBOX-5423?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17529542#comment-17529542
]
Tilman Hausherr commented on PDFBOX-5423:
-----------------------------------------
The main "impact in production" would be that you'd have less potential
security risks, and thus lessen the probability to have your employer in the
news like this
https://en.wikipedia.org/wiki/2017_Equifax_data_breach
>From your previous issue your application seems to deal with personal records
>so security should be taken very seriously.
The other "option" is to install the JCE as described. Be sure to download the
"8" JCE and not to use an older one.
https://www.oracle.com/de/java/technologies/javase-jce8-downloads.html
> org.apache.pdfbox.pdmodel.encryption.StandardSecurityHandler
> logIfStrongEncryptionMissing
> -----------------------------------------------------------------------------------------
>
> Key: PDFBOX-5423
> URL: https://issues.apache.org/jira/browse/PDFBOX-5423
> Project: PDFBox
> Issue Type: Task
> Components: Crypto
> Affects Versions: 2.0.24
> Reporter: Datta
> Priority: Blocker
>
> Hi
> I am using pdfbox-2.024.jar and java is 1.8.
> I am unable download the pdf.
> Even after adding the unlimited jce policy it is not working. throwing same
> error.
> Kindly advice the fix for the same. I am blocked as I am unable to download
> the content.
> Execption:-
> WARNING: JCE unlimited strength jurisdiction policy files are not installed
> 2022-04-25 14:43:15 [p: default-threadpool; w: Idle] ERROR Trace:58 - Errors
> occurred on downloading care plan.
> java.io.IOException: java.security.InvalidKeyException: Illegal key size
> at
> org.apache.pdfbox.pdmodel.encryption.StandardSecurityHandler.prepareEncryptionDictRev6(StandardSecurityHandler.java:474)
> ~[pdfbox-app-2.0.24.jar:2.0.24]
> at
> org.apache.pdfbox.pdmodel.encryption.StandardSecurityHandler.prepareDocumentForEncryption(StandardSecurityHandler.java:378)
> ~[pdfbox-app-2.0.24.jar:2.0.24]
>
> Code:-
> *int keyLength=256;*
> *final* StandardProtectionPolicy policy = *new*
> StandardProtectionPolicy("pdf",
> "", accessPermission);
> policy.setEncryptionKeyLength(keyLength);
> policy.setPreferAES(*true*);
> policy.setPermissions(accessPermission);
> *return* policy;
>
--
This message was sent by Atlassian Jira
(v8.20.7#820007)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
