tracker issue : CF-4018212

select a category, or use search below
(searches all categories and all time range)
Title:

Provide proper error message when strong encryption libraries are not installed in JVM

| View in Tracker

Status/Resolution/Reason: Closed/Fixed/

Reporter/Name(from Bugbase): Kai Koenig / Kai Koenig (Kai Koenig)

Created: 07/08/2015

Components: Security

Versions: 11.0

Failure Type: Usability Issue

Found In Build/Fixed In Build: CF11_Final /

Priority/Frequency: Normal / Most users will encounter

Locale/System: ALL / Win All

Vote Count: 0

Listed in the version 2016.0.0.297996 Issues Fixed doc
Verification notes: verified_fixed on September 06, 2019 using build 2016.0.01.298513
Problem Description:

Provide proper error message when strong encryption libraries are not installed in JVM and a strong encryption algorithm is used in CF. Currently the error message is rather random:

"The key specified is not a valid key for this encryption: Illegal key size or default parameters.

Use the generateSecretKey method to generate a valid key for this operation."

Steps to Reproduce:

Not having installed strong enc libs and trying to use a strong encryption algorithm in CF

Actual Result:

Misleading error message

Expected Result:

CF to check internally if it has the strong enc libs available and if not and one of the respective algorithms is used to provide an error message stating that explicitly.

Any Workarounds:

No

----------------------------- Additional Watson Details -----------------------------

Watson Bug ID:	4018212

External Customer Info:
External Company:  
External Customer Name: Kai
External Customer Email:  
External Test Config: My Hardware and Environment details:



Will happen on any CF server (tested on 11)

Attachments:

Comments:

The fix will be available in the next ColdFusion release, with a proper error message. Thanks!
Comment by S P.
6763 | September 22, 2015 04:16:37 AM GMT
Hi Adobe, I've verified this is fixed in CF2016 Update 1 (build 2016.0.01.298513). Thanks!, -Aaron
Comment by Aaron N.
31293 | September 06, 2019 03:58:44 AM GMT