Summary: | dev-java/icedtea-bin-3.0.0 cannot connect to Internet: KeyException | ||
---|---|---|---|
Product: | Gentoo Linux | Reporter: | jorgicio <jpizarrocallejas> |
Component: | [OLD] Java | Assignee: | Java team <java> |
Status: | RESOLVED FIXED | ||
Severity: | normal | ||
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Package list: | Runtime testing required: | --- |
Description
jorgicio
2016-04-12 02:45:22 UTC
Similar error apears when verifying java on java.com website with NPAPI plugin with Firefox. Yeah, sorry about this. I think I'm seeing it too: $ java TestECDSA Exception in thread "main" java.security.ProviderException: java.security.KeyException at sun.security.ec.ECKeyPairGenerator.generateKeyPair(ECKeyPairGenerator.java:147) at java.security.KeyPairGenerator$Delegate.generateKeyPair(KeyPairGenerator.java:703) at TestECDSA.main(TestECDSA.java:30) Caused by: java.security.KeyException at sun.security.ec.ECKeyPairGenerator.generateECKeyPair(Native Method) at sun.security.ec.ECKeyPairGenerator.generateKeyPair(ECKeyPairGenerator.java:128) ... 2 more I included a ECDSA fix, which worked on the version of NSS I tested with, but seems to fail on newer versions. While I'm debugging this, a simple workaround is to remove the SunEC provider from /usr/lib/jvm/icedtea-8/jre/lib/security/java.security: security.provider.3=sun.security.ec.SunEC When building, this can be done by disabling the sunec USE flag. I'll turn that off by default for now. (In reply to Andrew John Hughes from comment #2) > When building, this can be done by disabling the sunec USE flag. I'll turn > that off by default for now. I've done the same with dev-java/icedtea in the main tree now. I'll adjust icedtea-bin tonight. Okay, that's icedtea-bin sorted. I'll keep this open until the proper fix is in place. I installed the recent version with the nosunec patch and it's working fine. Thanks! Will be fixed in 3.0.1 by this: http://icedtea.classpath.org/hg/release/icedtea8-forest-3.0/jdk/rev/dab76de2f91c 3.0.1 is in the tree now. |