Building sunpkcs11.jar

Valerie (Yu-Ching) Peng valerie.peng at
Fri May 25 19:11:01 UTC 2012

The provider built from OpenJDK workspace is unsigned.
It can't be used with Oracle 7u4 JRE which require crypto provider to be 
signed for export/import conformance.

If Your company has a JCE code signing keypair, you can sign the 
provider built using OpenJDK with that keypair and then use it w/ Oracle 
7u4 JRE.

On 05/23/12 08:54, Deneau, Tom wrote:
> I want to be able to modify and rebuild lib/ext/sunpkcs11.jar.
> When I do a "make all; make images" everything completes successfully.
> With javap, I can see my modified class in the build/linux-amd64/j2sdk-image/jre/lib/ext
> When I use this built ext directory as a replacement of the Oracle 7U4 JRE, and run some code that does
> 	  KeyGenerator gen = KeyGenerator.getInstance("AES");
> I get
>        Test1, AES KeyGenerator not available
> 	at javax.crypto.KeyGenerator.<init>(
> 	at javax.crypto.KeyGenerator.getInstance(
> This code runs successfully with the regular Oracle 7U4 JRE.
> Am I missing something in the build process?
> -- Tom Deneau

More information about the build-dev mailing list