EncryptionOperationNotPossibleException在集成测试中但不在应用程序中

Question

I am using Jasypt with Bouncycastle in my Spring Boot application. I can run my application fine and encrypted stuff gets added in the database.

However, when running the unit tests, I get:

org.jasypt.exceptions.EncryptionOperationNotPossibleException: Encryption raised an exception. A possible cause is you are using strong encryption algorithms and you have not installed the Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files in this Java Virtual Machine

Why does it work on my application and not the integration test (loads the same spring configuration as the application)? I am running both from IntelliJ IDEA using a standard Oracle Java 1.8.0_66.

I am using the PBEWithSHA256And256BitAES-CBC-BC algo.

Answer 1

Java comes with a default maximum strength of 128 bits.

What you need is a set of files called Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files and is currently available at the Java SE download page . This zip file contains a couple of policy jars, which you need copy over the top of the ones already in the {java.home}/jre/lib/security directory of your JRE.

This will let you change the key strength above 128 bits

UPDATE

For Java 8, it will depend on the classpath. If one of the JCE jars ( local_policy.jar or US_export_policy.jar ) is present, then JCE unlimited cryptography is enabled. Maybe the Spring Boot application has this dependency fulfilled, but your tests not.

The JCE jars for Java 8 can be found here