[keycloak-user] Crypto

Bill Burke bburke at redhat.com
Tue Oct 6 09:08:33 EDT 2015


BTW, I thought this was weird that you had to include javax.api, but I 
learned that it is used if you want to use a newer (or older) version of 
xerces (which is included in the JDK).

On 10/6/2015 9:07 AM, Remi Cartier wrote:
> Bill, you’re the best, it did the trick !
>
> ------------------------------------------------------------------------
>
>
> REMI CARTIER
>
> B.O.S.S. (Business & Operation Support Systems) P.O (Product Owner)
>
> *IMETRIK GLOBAL INC.*
> *T :* +1 514 448-6407 x2009
> *T :* +1 866 276-5382 (toll free)
> *F :* +1 514 904-0611
>
> 740 Notre Dame St. West, Suite 1575
> Montreal, Quebec, Canada H3C 3X6
> imetrik.com <http://www.imetrik.com/>
>
>> On Oct 6, 2015, at 9:01 AM, Bill Burke <bburke at redhat.com
>> <mailto:bburke at redhat.com>> wrote:
>>
>> dependencies refer to other modules.  You also need to include the
>> javax.* package dependencies.  These aren't actually on by default.
>>
>>         <module name="javax.api"/>
>>         <module name="org.bouncycastle" />
>>
>> I don't think you need to add jce.jar.  Just "javax.api".
>>
>> On 10/5/2015 4:38 PM, Remi Cartier wrote:
>>> Hy guys,
>>>
>>> I am trying to use some crypto to match hashes from my old db.
>>> The code is :
>>>
>>>             KeySpec keySpec = new PBEKeySpec(password.toCharArray(),
>>> salt.getBytes(), 2048, 160);
>>>             SecretKeyFactory secretKeyFactory =
>>> SecretKeyFactory.getInstance("PBKDF2WithHmacSHA1");
>>>             byte[] hash =
>>> secretKeyFactory.generateSecret(keySpec).getEncoded();
>>>
>>> I cant make it work as a federation provider.
>>>
>>> it was complaining about java.lang.ClassNotFoundException:
>>> javax.crypto.spec.PBEKeySpec
>>>
>>> I added jce.jar to the list of dependencies in my module.xml (I
>>> shouldn’t have to do that)
>>>
>>> Then I got :
>>>
>>> ClassNotFoundException: sun.security.jca.GetInstance
>>>
>>> I added rt.jar (which I shouldn’t do either)
>>>
>>> and then I got some fancy exception : java.lang.LinkageError: loader
>>> constraint violation
>>>
>>> I then tried with bouncy castle : bcprov-jdk15on-152.jar to no avail.
>>>
>>> what is wrong ?
>>>
>>> here is my module.xml file :
>>>
>>> <?xml version="1.0" encoding="UTF-8"?>
>>> <module
>>> xmlns="urn:jboss:module:1.1"name="com.imetrik.saas.server.services.insuranceWebUIBackend.dao.federation">
>>> <resources>
>>> <resource-root path="insuranceWebUIBackend-lib-2.0.5-SNAPSHOT.jar"/>
>>> <resource-root path="jdbi-2.63.1.jar"/>
>>> <resource-root path="postgresql-9.4-1203-jdbc4.jar"/>
>>> <resource-root path="slf4j-api-1.7.12.jar"/>
>>> <resource-root path="slf4j-simple-1.7.12.jar"/>
>>> <resource-root path="global-library-common-2.0.4.jar"/>
>>> <resource-root path="jce.jar"/>
>>> <resource-root path="bcprov-jdk15on-152.jar"/>
>>> </resources>
>>> <dependencies>
>>> <module name="org.keycloak.keycloak-core"/>
>>> <module name="org.keycloak.keycloak-model-api"/>
>>> </dependencies>
>>> </module>
>>>
>>>
>>> Cheers.
>>>
>>> ------------------------------------------------------------------------
>>>
>>>
>>> REMI CARTIER
>>>
>>> B.O.S.S. (Business & Operation Support Systems) P.O (Product Owner)
>>>
>>> *IMETRIK GLOBAL INC.*
>>> *T :* +1 514 448-6407 x2009
>>> *T :* +1 866 276-5382 (toll free)
>>> *F :* +1 514 904-0611
>>>
>>> 740 Notre Dame St. West, Suite 1575
>>> Montreal, Quebec, Canada H3C 3X6
>>> imetrik.com <http://imetrik.com> <http://www.imetrik.com/>
>>>
>>>
>>>
>>> _______________________________________________
>>> keycloak-user mailing list
>>> keycloak-user at lists.jboss.org <mailto:keycloak-user at lists.jboss.org>
>>> https://lists.jboss.org/mailman/listinfo/keycloak-user
>>>
>>
>> --
>> Bill Burke
>> JBoss, a division of Red Hat
>> http://bill.burkecentral.com
>> _______________________________________________
>> keycloak-user mailing list
>> keycloak-user at lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/keycloak-user
>

-- 
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com


More information about the keycloak-user mailing list