8u51-2: Install Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files

3 files changed, 15 insertions, 4 deletions

diff --git a/.SRCINFO b/.SRCINFO
index b884bd3db2ae..fb1586d34788 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,7 +1,7 @@
 pkgbase = jdk
 	pkgdesc = Oracle Java Development Kit
 	pkgver = 8u51
-	pkgrel = 1
+	pkgrel = 2
 	url = http://www.oracle.com/technetwork/java/javase/downloads/index.html
 	install = jdk.install
 	arch = i686
@@ -47,10 +47,12 @@ pkgbase = jdk
 	backup = etc/java-jdk8/psfont.properties.ja
 	backup = etc/java-jdk8/psfontj2d.properties
 	backup = etc/java-jdk8/sound.properties
+	source = http://download.oracle.com/otn-pub/java/jce/8/jce_policy-8.zip
 	source = jconsole-jdk8.desktop
 	source = jmc-jdk8.desktop
 	source = jvisualvm-jdk8.desktop
 	source = policytool-jdk8.desktop
+	md5sums = b3c7031bc65c28c2340302065e7d00d3
 	md5sums = b4f0da18e03f7a9623cb073b65dde6c1
 	md5sums = 8f0ebcead2aecad67fbd12ef8ced1503
 	md5sums = a4a21b064ff9f3c3f3fdb95edf5ac6f3
diff --git a/PKGBUILD b/PKGBUILD
index 5a5708843138..273acfc3195c 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -6,7 +6,7 @@ _major=8
 _minor=51
 _build=b16
 pkgver=${_major}u${_minor}
-pkgrel=1
+pkgrel=2
 pkgdesc="Oracle Java Development Kit"
 arch=('i686' 'x86_64')
 url=http://www.oracle.com/technetwork/java/javase/downloads/index.html
@@ -44,13 +44,15 @@ backup=("etc/java-$_jname/amd64/jvm.cfg"
 [[ $CARCH = i686 ]] && backup[0]="etc/java-$_jname/i386/jvm.cfg"
 options=('!strip') # JDK debug-symbols
 install=$pkgname.install
-source=("jconsole-$_jname.desktop"
+source=("http://download.oracle.com/otn-pub/java/jce/$_major/jce_policy-$_major.zip"
+        "jconsole-$_jname.desktop"
         "jmc-$_jname.desktop"
         "jvisualvm-$_jname.desktop"
         "policytool-$_jname.desktop")
 source_i686=("http://download.oracle.com/otn-pub/java/jdk/$pkgver-$_build/$pkgname-$pkgver-linux-i586.tar.gz")
 source_x86_64=("http://download.oracle.com/otn-pub/java/jdk/$pkgver-$_build/$pkgname-$pkgver-linux-x64.tar.gz")
-md5sums=('b4f0da18e03f7a9623cb073b65dde6c1'
+md5sums=('b3c7031bc65c28c2340302065e7d00d3'
+         'b4f0da18e03f7a9623cb073b65dde6c1'
          '8f0ebcead2aecad67fbd12ef8ced1503'
          'a4a21b064ff9f3c3f3fdb95edf5ac6f3'
          '98245ddb13914a74f0cc5a028fffddca')
@@ -140,6 +142,13 @@ package() {
     mv COPYRIGHT LICENSE *.txt "$pkgdir"/usr/share/licenses/java$_major-$pkgname/
     ln -sf /usr/share/licenses/java$_major-$pkgname/ "$pkgdir"/usr/share/licenses/$pkgname
 
+    msg2 "Installing Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files..."
+    # Replace default "strong", but limited, cryptography to get an "unlimited strength" one for
+    # things like 256-bit AES. Enabled by default in OpenJDK:
+    # - http://suhothayan.blogspot.com/2012/05/how-to-install-java-cryptography.html
+    # - http://www.eyrie.org/~eagle/notes/debian/jce-policy.html
+    install -m644 "$srcdir"/UnlimitedJCEPolicyJDK$_major/*.jar jre/lib/security/
+
     msg2 "Enabling copy+paste in unsigned applets..."
     # Copy/paste from system clipboard to unsigned Java applets has been disabled since 6u24:
     # - https://blogs.oracle.com/kyle/entry/copy_and_paste_in_java
diff --git a/jce_policy-8.zip b/jce_policy-8.zip
new file mode 100644
index 000000000000..63cd0cd12b31
--- /dev/null
+++ b/jce_policy-8.zip