Tag: jdk

Java 9 Restriction on MD5withRSA

Posted onLeave a comment

Problem:
You got the following error message when trying to access Java applet.

Unsigned application requesting unrestricted access to system. The following resource is signed with a weak signature algorithm MD5withRSA and is treated as unsigned.

Screen Shot 2017-10-30 at 5.22.09 PM

Workaround:

  1. Get java.security file in Java Applet Plugin folder.
$ cd /Library/Internet\ Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/conf/security/ 
$ vim java.security
  1. Find the following lines and comment them out.
jdk.certpath.disabledAlgorithms=MD2, MD5, SHA1 jdkCA & usage TLSServer, \
 RSA keySize < 1024, DSA keySize < 1024, EC keySize < 224

jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, \
      DSA keySize < 1024

jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keySize < 1024, \
    EC keySize < 224

E.g.:

#jdk.certpath.disabledAlgorithms=MD2, MD5, SHA1 jdkCA & usage TLSServer, \
# RSA keySize < 1024, DSA keySize < 1024, EC keySize < 224

#jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, \
#      DSA keySize < 1024

#jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keySize < 1024, \
#    EC keySize < 224