Question

我正在使用 wso2is-5.5.0 。我正在尝试为Identity Server启用多因素身份验证。我已经完成了此链接https://docs.wso2.com/display/IS530/Configuring+Multi-factor+Authentication+for+WSO2+IS的操作。登录管理控制台后重新启动后，它将重定向到显示

的页面

 SAML 2.0 based Single Sign-On
 Error when processing authentication request!
 Please try login again!

在控制台中，

Caused by: org.apache.xml.security.encryption.XMLEncryptionException: Illegal key size or default pa
rameters
Original Exception was java.security.InvalidKeyException: Illegal key size or default parameters
        at org.apache.xml.security.encryption.XMLCipher.encryptData(XMLCipher.java:1140)
        at org.apache.xml.security.encryption.XMLCipher.encryptData(XMLCipher.java:1083)
        at org.opensaml.xml.encryption.Encrypter.encryptElement(Encrypter.java:452)
        ... 66 more
Caused by: java.security.InvalidKeyException: Illegal key size or default parameters
        at javax.crypto.Cipher.checkCryptoPerm(Cipher.java:1026)
        at javax.crypto.Cipher.implInit(Cipher.java:801)
        at javax.crypto.Cipher.chooseProvider(Cipher.java:864)
        at javax.crypto.Cipher.init(Cipher.java:1249)
        at javax.crypto.Cipher.init(Cipher.java:1186)
        at org.apache.xml.security.encryption.XMLCipher.encryptData(XMLCipher.java:1137)
        ... 68 more

我已经下载了 Java 8的JCE jars ，并将其放置在C：\ Program Files \ Java \ jre1.8.0_171 \ lib \ security中问题仍然存在。

Answer 1

抛出此异常，不是由于Identity Server的问题。出现此问题的原因可能是，JCE文件未正确安装到您的JRE中。但是，当您添加/替换了local_policy.jar和US_export_policy.jar文件时，请运行以下测试代码以检查其是否正确应用。

    public class JCETest {

    public static void main(String args[]) {
        int maxKeyLen = 0;
        try {
            maxKeyLen = Cipher.getMaxAllowedKeyLength("AES");
        } catch (NoSuchAlgorithmException e) {
            Assert.fail();
        }

        Assert.assertEquals(2147483647, maxKeyLen);
        System.out.println(maxKeyLen);
    }
}

如果成功安装了JCE，您将获得以下输出：

AES key size should be equal to the 2147483647 if JCE files has been installed successfully.

更多信息在http://stackoverflow.com/questions/6481627/java-security-illegal-key-size-or-default-parameters

中

在WSO2身份服务器5.5.0中配置MFA时如何解决java.security.InvalidKeyException

1 个答案: