Package: java-package
Version: 0.20
Severity: wishlist
On Sun's download pages, there is a section at the end called Other
Downloads. There, one can download jce_policy-x_y_z.zip (where x_y_z
is the java version number). This zip contains a US_export_policy.jar
and a local_policy.jar that are meant to replace the jars by the same
name in jre/lib/security.
The new jars allow unlimited strength crypto; for example, AES with
256-bit key will not work without these jars.
It would be nice if java-package supported this. I see several
possibilities:
1. Just build it in to the scripts; if the user is building a Sun
package and the script detects an appropriately named jce_policy-* in
the same directory as the .bin file, prompt the user and ask if he'd
like to use it. If so, replace the jars in jre/lib/security with the
new ones before building the .deb.
2. Enhance make-jpkg to build tiny sun-j2{sdk,re}1.{4,5}-jce-policy
.debs from the jce_policy-*.zip files that contain only the two jars,
and dpkg-divert the old jars appropriately.
3. Supply a shell script that will assist the admin in setting up a
local diversion.
I think I like #2 the best. #1 has the problem that it's difficult to
tell whether a given sun-j2sdk* package has the crypto jars or not.
#3 will certainly work but doesn't seem entirely satisfactory.
Thoughts? I can contribute something if that will help.
Thanks,
Steve
-- System Information:
Debian Release: 3.1
APT prefers unstable
APT policy: (900, 'unstable'), (890, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.8-hamachi
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Versions of packages java-package depends on:
ii coreutils 5.2.1-2 The GNU core utilities
ii debhelper 4.2.30 helper programs for debian/rules
ii fakeroot 1.2.4 Gives a fake root environment
-- no debconf information
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
