Loxone binding - Internal error (Enable Java cryptography unlimited strength (see binding doc).)


(Steve Francken) #1

Hello,

I am trying to get my loxone binding to work but keep getting the same error (see subject).

When looking at the binding doc i see this.

Encryption AES-256 JRE must have unrestricted security policy configured

Because i am using openhasbian i am connected with putty but i can not find a way to enable java in putty. I am a total noob in linux so i probalby missed the correct way to find it.

Thanks for your help


(Kevin Hawkins) #2

Java is running but this would imply the latest version is not installed. The unrestricted policy for encryption is now enabled by default in v9 and latest versions of 6 - 8

Java 9: Any official release!
Java 8u161 or later (Available now)
Java 7u171 or later (Only available through ‘My Oracle Support’)
Java 6u181 or later


(Steve Francken) #3

I just used the automated install from openhasbian on my pi.

it says that there is the “Zulu Embedded OpenJDK Java 8” provided


(Kevin Hawkins) #4

OK … I assume

java -version

returns too low a version.

I think you need this download , there is a read me in the zip file.
http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html

I think I had to do this a while back but recently it has just worked
… or perhaps you can update your java version but the above is probably easier.


(Steve Francken) #5

Thanks for the help.
This is my version

[06:49:47] openhabian@openHABianPi:~$ java -version
openjdk version “1.8.0_152”
OpenJDK Runtime Environment (Zulu Embedded 8.25.0.76-linux-aarch32hf) (build 1.8.0_152-b76)
OpenJDK Client VM (Zulu Embedded 8.25.0.76-linux-aarch32hf) (build 25.152-b76, mixed mode, Evaluation)

I have downloaded it to my windows. I unforunate do not know a way to move it to the correct folder.

I have found that i have zulu java. So i tried following these steps =>

wget http://cdn.azul.com/zcek/bin/ZuluJCEPolicies.zip
unzip ZuluJCEPolicies.zip
cd ZuluJCEPolicies
cp *.jar /usr/lib/jvm/zulu-embedded-8-armhf/jre/lib/security
reboot

But it failed on the cp command.

[06:37:25] openhabian@openHABianPi:~$ unzip ZuluJCEPolicies.zip
Archive: ZuluJCEPolicies.zip
creating: ZuluJCEPolicies/
inflating: ZuluJCEPolicies/LICENSE
inflating: ZuluJCEPolicies/README.txt
inflating: ZuluJCEPolicies/DISCLAIMER
inflating: ZuluJCEPolicies/local_policy.jar
inflating: ZuluJCEPolicies/US_export_policy.jar
[06:37:34] openhabian@openHABianPi:~$ cd ZuluJCEPolicies
[06:37:41] openhabian@openHABianPi:~/ZuluJCEPolicies$ cp *.jar /usr/lib/jvm/zulu-embedded-8-armhf/jre/lib/security
cp: cannot create regular file ‘/usr/lib/jvm/zulu-embedded-8-armhf/jre/lib/security/local_policy.jar’: Permission denied
cp: cannot create regular file ‘/usr/lib/jvm/zulu-embedded-8-armhf/jre/lib/security/US_export_policy.jar’: Permission denied

I can not find the files that need to be overwritten in the folder
[06:40:51] openhabian@openHABianPi:/usr/lib/jvm/zulu-embedded-8-armhf/jre/lib/security$ ls
blacklisted.certs cacerts java.policy java.security policy

So i went deeper and found this
[06:57:21] openhabian@openHABianPi:/usr/lib/jvm/zulu-embedded-8-armhf/jre/lib/security/policy/unlimited$ ls
local_policy.jar US_export_policy.jar

That are the files but they are red. (they are also red in the limited folder) And i also can not do the cp command to that file.

I think i am doing something wrong here


(Steve Francken) #6

I found this on the forum here =>

Please follow these instruction to update your java security policy files

I fixed by following instructions here
suhothayan.blogspot.com 33
How to install Java Cryptography Extension (JCE) unlimited strength jurisdiction…
How to over come “org.apache.xml.security.encryption.XMLEncryptionException: Illegal key size or default parameters” or "java.security.Inv…

overwrote files in both JRE and JDK security settings, restarted Java and opehab and now connected.

You will need to copy into $JAVA_HOME/jre/lib/security/policy/unlimited
the files local_policy.jar and US_export_policy.jar

make sure you have read and excutable permission for all
i.e. use chmod a+rx local_policy.jar

I tried the last command
[06:48:18] openhabian@openHABianPi:/usr/lib/jvm/jdk-8-oracle-arm32-vfp-hflt/jre/lib/security$ chmod a+rx local_policy.jar
chmod: changing permissions of ‘local_policy.jar’: Operation not permitted

What did i do wrong?

Tanks


(Pawel Pieczul) #7

Hi
I think you need to run cp and chmod commands as super user, try:
sudo cp …
sudo chmod …
Pawel


(Steve Francken) #8

Followed these instructions again but with the sudo in it

wget http://cdn.azul.com/zcek/bin/ZuluJCEPolicies.zip
unzip ZuluJCEPolicies.zip
cd ZuluJCEPolicies
sudo cp *.jar /usr/lib/jvm/zulu-embedded-8-armhf/jre/lib/security
reboot

And it works :smile: :smile: :smile:

Thanks all for the help