Hi John,
I believe we did DST update, so i guess our jvm would be 1.4.2_11 as you
mentioned.

What I am trying to do is I am working on Single Sign On project using SAML
2.0 using Apache XML Security Library 1.2.0. Someone suggested that we
should use OPenSAML library and also the latest jvm i.e. atleast jvm 1.5 or
1.6 and I wanted to make sure if its doable with CF 7.

here are the steps for encrypting part of xml file which is done by client
before its sent over to me as a SAML Assertion. They are also using Apache
XML Security Lib and OpenSAML. I dont know what version they are using.

1. employee data is encrypted using a encrypted symmetric key i.e. cipher
algorithm is AES/CBC/ISO10126Padding opmode = ENCRYPT_MODE
2. then encrypts the symmetric key using my RSA public key, cihper.algoritm
= RSA/ECB/PKCS1Padding in opmode = WRAP_MODE

So i was trying to
1. decrypt symmetric key using my RSA private key with opmode = UNWRAP_MODE
2. then use this symmetric key to decrypt using opmode = DECRYPT_MODE and
get employee data.

If you know anyone who has experience in java xml enc/decryption, please
have him email me. This is top priority for us now and we are not able to
decrypt and get employee data.

Thanks,

Ajas.



On Sat, Aug 23, 2008 at 1:51 PM, John Mason <[EMAIL PROTECTED]> wrote:

>  Actually if you are on CF7 and using the default jvm. You should have
> upgraded over a year ago. There were daylight savings time changes that
> required a manual jvm update to at least 1.4.2_11
>
> http://labs.fusionlink.com/katapult/index.cfm?page=articles/daylightsavings
>
> It's easy to upgrade the jvm and test things out. What are you trying to
> do?
>
> John Mason
> [EMAIL PROTECTED]
>
>
>  ------------------------------
> *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On Behalf Of *Ajas
> Mohammed
> *Sent:* Saturday, August 23, 2008 10:29 AM
> *To:* [email protected]
> *Subject:* [ACFUG Discuss] CF 7 with java 1.4.2_09....is anyone using
> latest jre???
>
>    Hi,
>
> For a project, we might have to look at latest java 1.5 or 1.6 and I was
> wondering if anyone has updated there default java version 1.4.2_09 that
> comes with CF 7, with the latest java/jre.
>
> What could be some issues we would face if we update java.
>
> If this is not doable then probably, we could have a java webservice
> running on latest jdk and call it from CF 7 which uses 1.4.2_09
>
> Thanks,
>
>
> --
> <Ajas Mohammed />
> http://ajashadi.blogspot.com
> We cannot become what we need to be, remaining what we are.
> No matter what, find a way. Because thats what winners do.
> You can't improve what you don't measure.
> Quality is never an accident; it is always the result of high intention,
> sincere effort, intelligent direction and skillful execution; it represents
> the wise choice of many alternatives.
>
> -------------------------------------------------------------
> To unsubscribe from this list, manage your profile @
> http://www.acfug.org?fa=login.edituserform<http://www.acfug.org/?fa=login.edituserform>
>
> For more info, see http://www.acfug.org/mailinglists
> Archive @ http://www.mail-archive.com/discussion%40acfug.org/
> List hosted by FusionLink <http://www.fusionlink.com/>
> -------------------------------------------------------------
>
> -------------------------------------------------------------
> To unsubscribe from this list, manage your profile @
> http://www.acfug.org?fa=login.edituserform<http://www.acfug.org/?fa=login.edituserform>
>
> For more info, see http://www.acfug.org/mailinglists
> Archive @ http://www.mail-archive.com/discussion%40acfug.org/
> List hosted by FusionLink <http://www.fusionlink.com/>
> -------------------------------------------------------------




-- 
<Ajas Mohammed />
http://ajashadi.blogspot.com
We cannot become what we need to be, remaining what we are.
No matter what, find a way. Because thats what winners do.
You can't improve what you don't measure.
Quality is never an accident; it is always the result of high intention,
sincere effort, intelligent direction and skillful execution; it represents
the wise choice of many alternatives.



-------------------------------------------------------------
To unsubscribe from this list, manage your profile @ 
http://www.acfug.org?fa=login.edituserform

For more info, see http://www.acfug.org/mailinglists
Archive @ http://www.mail-archive.com/discussion%40acfug.org/
List hosted by http://www.fusionlink.com
-------------------------------------------------------------

Reply via email to