I tried to install a 2048 ldap certificate in jre 1.5 under
D:\Program Files\Java\jre1.5.0_13\lib\security\jssecacters using
keytool import command.
Certificate gets installed without error. However when I tried to do
ldap it errors saying that cannot contact ldap server,
If I replace 2048 bit certificate by 1024 bit certificate, everything
works.

Based on my research jre 1.5 supports 2048 bit certificate, then why
do I have issue? I have another machine where I use jre 1.6 and I do
not have any problem with ldap 2048 bit.

Appreciate any insights.

On 28.10.10 21:25, zigzagdna wrote:
> Based on my research jre 1.5 supports 2048 bit certificate, then why
> do I have issue? I have another machine where I use jre 1.6 and I do
> not have any problem with ldap 2048 bit.

We had that problem as well. By default java installs limited strength 
cryptography policy files, which prevent you from using strong 
cryptography. Go to:

http://www.oracle.com/technetwork/java/javase/downloads/index-jdk5-jsp-142662.html

and download and install the unlimited strength cryptography policy 
files (they are near the bottom of the page). This did fix it for us.

Kind regards,
Jan

On Oct 29, 3:57=A0am, Jan Thom=E4 <jantho...@janthomae.de> wrote:
> On 28.10.10 21:25, zigzagdna wrote:
>
> > Based on my research jre 1.5 supports 2048 bit certificate, then why
> > do I have issue? I have another machine where I use jre 1.6 and I do
> > not have any problem with ldap 2048 bit.
>
> We had that problem as well. By default java installs limited strength
> cryptography policy files, which prevent you from using strong
> cryptography. Go to:
>
> http://www.oracle.com/technetwork/java/javase/downloads/index-jdk5-js...
>
> and download and install the unlimited strength cryptography policy
> files (they are near the bottom of the page). This did fix it for us.
>
> Kind regards,
> Jan
Jan:

Thanks a lot,

Prem

On Thu, 28 Oct 2010 12:25:45 -0700 (PDT), zigzagdna
<zigzagdna@yahoo.com> wrote, quoted or indirectly quoted someone who
said :

>
>Appreciate any insights.

there is an extra download you need to turn on high bit length keys.

see http://mindprod.com/jgloss/jce.html
-- 
Roedy Green Canadian Mind Products
http://mindprod.com

Microsoft has a new version out, Windows XP, which according to everybody is the "most reliable Windows ever." To me, this is like saying that asparagus is "the most articulate vegetable ever." 
~ Dave Barry