Unable to launch Application Integration builder

[mahabaleshwar_patil]

Hi Team I am not able to Open Integration builder I get the below message and screen shot attached.

Unsigned application requesting unrestricted access to system The following resource is signed with a weak signature algorithm MD5withRSA and is treated as unsigned:

[mate_moricz]

Hi,

The problem you face know is because Oracle added MD5withRSA to the list of disabledAlgorithms. This is documented on Oracle's website as Java is their product: http://www.oracle.com/technetwork/java/javase/8u131-relnotes-3565278.html

The list of disabled algorithms is controlled via the security property, jdk.jar.disabledAlgorithms, in the java.security file. This property contains a list of disabled algorithms and key sizes for cryptographically signed JAR files. You can remove the MD5withRSA from the mentioned file and then you will not get the errors. This requires no update or upgrade.

Best regards,
Mate

[mahabaleshwar_patil]

How to remove MD5 with RSA ? I dont find any steps. could you please elobrate more on this ?

[mate_moricz]

Check the folder JRE_HOME\lib\security (JRE_HOME is something like C:\Program Files\Java\jre${version-id}) and search for the java.security file and property jdk.jar.disabledAlgorithms.

[mahabaleshwar_patil]

I did find the Java security file and opened with Word Pad and I can See MD5 .

What changes should i Make to the file could you please help here.

below are lines I pasted where I found MD5 in the file

--------------------------------------------------------------------------------------------------------

jdk.certpath.disabledAlgorithms=MD2, MD5, SHA1 jdkCA & usage TLSServer, \

RSA keySize < 1024, DSA keySize < 1024, EC keySize < 224

--------------------------------------------------------------------------------------------------------------

jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize < 1024

--------------------------------------------------------------------------------------------------------------------

# Example:

# jdk.tls.disabledAlgorithms=MD5, SSLv3, DSA, RSA keySize < 2048 jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keySize < 768, \

EC keySize < 224

----------------------------------------------------------------------------------------------------------------

# Example:

# jdk.tls.legacyAlgorithms=DH_anon, DES_CBC,SSL_RSA_WITH_RC4_128_MD5

jdk.xml.dsig.secureValidationPolicy=\

disallowAlg http://www.w3.org/TR/1999/REC-xslt-19991116,\

disallowAlg http://www.w3.org/2001/04/xmldsig-more#rsa-md5,\

disallowAlg http://www.w3.org/2001/04/xmldsig-more#hmac-md5,\

disallowAlg http://www.w3.org/2001/04/xmldsig-more#md5,\

maxTransforms 5,\

maxReferences 30,\

disallowReferenceUriSchemes file http https,\

minKeySize RSA 1024,\

minKeySize DSA 1024,\

noDuplicateIds,\

noRetrievalMethodLoops

--------------------------------------------------------------------------------------------------

Can you please help here what changes I should make so that I dont get error ?

[mate_moricz]

Hi,

please check my earlier reply. The list of disabled algorithms is controlled via the security property, jdk.jar.disabledAlgorithms, in the java.security file. This property contains a list of disabled algorithms and key sizes for cryptographically signed JAR files. You can remove the MD5 from the mentioned file and then you will not get the errors. The line should look like this:

jdk.jar.disabledAlgorithms=MD2, RSA keySize < 1024

Best regards,

Mate

[mahabaleshwar_patil]

Still i am getting the error