Hello, in the OpenJDK 9.0.1 java.security file is the crypto.policy=unlimited set.
However the boilerplate text above still speaks of "limited" as a default: # Due to the import control restrictions of some countries, the default # JCE policy files allow for strong but "limited" cryptographic key # lengths to be used. If your country's cryptographic regulations allow, # the "unlimited" strength policy files can be used instead, which contain # no restrictions on cryptographic strengths. I guess this needs to be adjusted. BTW: does anybody know examples of where limited would be needed? Gruss Bernd
