RSA Authentication Manager Auth SDK 8.5 (Java) failed on startup (TLS_DHE_RSA_WITH_AES_256_CBC_SHA)
2 years ago
Originally Published: 2015-12-03
Article Number
000050055
Applies To
RSA Product Set : SecurID
RSA Product/Service Type : Authentication Manager
RSA Version/Condition: 8.5 
Platform : SDK 8.5 (Auth API - Java)
 
Issue
Cannot support TLS_DHE_RSA_WITH_AES_256_CBC_SHA with currently installed providers.

 
Tasks
Error Message:
[error in ourput]:
Can't create api: com.rsa.authagent.authapi.AuthAgentException: Error in initial AuthnReq/Rsp for serverTime.Error in processing Authn request: Cannot support TLS_DHE_RSA_WITH_AES_256_CBC_SHA with currently installed providers
com.rsa.authagent.authapi.AuthAgentException: com.rsa.authagent.authapi.AuthAgentException: Error in initial AuthnReq/Rsp for serverTime.Error in processing Authn request: Cannot support TLS_DHE_RSA_WITH_AES_256_CBC_SHA with currently installed providers
    at com.rsa.authagent.authapi.AuthSessionFactory.a(AuthSessionFactory.java)
    at com.rsa.authagent.authapi.AuthSessionFactory.getInstance(AuthSessionFactory.java)
    at AuthUser.<init>(AuthUser.java:32)
    at AuthUser.main(AuthUser.java:62)

[error in api log]:
[2015-12-02 12:02:53,447] DEBUG main - constructing client key negotiation context.
[2015-12-02 12:02:53,650] ERROR main - Error in processing Authn request: Cannot support TLS_DHE_RSA_WITH_AES_256_CBC_SHA with currently installed providers
[2015-12-02 12:02:53,650] ERROR main - Error in initial AuthnReq/Rsp for serverTime.Error in processing Authn request: Cannot support TLS_DHE_RSA_WITH_AES_256_CBC_SHA with currently installed providers.
Resolution
We need to replace the default JCE file with Java Cryptography Extension(JCE) Unlimited Strength Jurisdiction Policy.
Please go to Oracle and download the file according to your JDK version (Auth SDK 8.5 requires at least JDK6)

For example: 
for Java 8, we can download it here: http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html
There are 2 files inside which are: local_policy.jar and US_export_policy.jar
After downloaded the file, please unzip it and copy all files to: <Java_Home>/lib/security/ (please backup the old one first )
Then run the sample code it should work.
Attachments
If the attachment does not open when clicked, please refresh the page and try again. You must be logged into view the file(s).