Versions Compared

Old Version 2

changes.mady.by.user Thomas Kilden Nielsen

Saved on

compared with

New Version Current

changes.mady.by.user Jacob Qvortrup

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Navitabs
includeroottrue



Indhold

Table of Contents


Konfiguration

Java21 opsætning

Seal.Java understøtter SHA1 kryptering og det er pr. default slået fra i Java 21. Derfor skal man tillade dette ved at fjerne følgende to linjer i $JAVA_HOME/conf/security/java.security (linjerne skal slettes og må ikke udkommenteres):

Code Block
disallowAlg http://www.w3.org/2000/09/xmldsig#sha1,\
disallowAlg http://www.w3.org/2000/09/xmldsig#rsa-sha1,\


Der skal desuden være mulighed for at bruge RSA nøgler der er mindre en 1024 bytes og derfor skal "minKeySize RSA" ændres til 512 i $JAVA_HOME/conf/security/java.security, så den ser sådan ud:

Code Block
jdk.xml.dsig.secureValidationPolicy=\
    disallowAlg http://www.w3.org/TR/1999/REC-xslt-19991116,\
    disallowAlg http://www.w3.org/2001/04/xmldsig-more#rsa-md5,\
    disallowAlg http://www.w3.org/2001/04/xmldsig-more#hmac-md5,\
    disallowAlg http://www.w3.org/2001/04/xmldsig-more#md5,\
    disallowAlg http://www.w3.org/2000/09/xmldsig#dsa-sha1,\
    disallowAlg http://www.w3.org/2007/05/xmldsig-more#sha1-rsa-MGF1,\
    disallowAlg http://www.w3.org/2001/04/xmldsig-more#ecdsa-sha1,\
    maxTransforms 5,\
    maxReferences 30,\
    disallowReferenceUriSchemes file http https,\
    minKeySize RSA 512,\
    minKeySize DSA 1024,\
    minKeySize EC 224,\
    noDuplicateIds,\
    noRetrievalMethodLoops