Merge pull request boxen#22 from zk/master

Install unlimited key strength policy files for JDK 7
LesterGordon · Dec 8, 2013 · 3573585 · 3573585
2 parents b9c0720 + 9dd2f07
commit 3573585
Show file tree

Hide file tree

Showing 4 changed files with 32 additions and 2 deletions.
diff --git a/README.md b/README.md
@@ -2,7 +2,8 @@
 
 [![Build Status](https://travis-ci.org/boxen/puppet-java.png?branch=master)](https://travis-ci.org/boxen/puppet-java)
 
-Installs Java 7u21.
+Installs Java 7u21 and unlimited key length security policy files..
+
 
 ## Usage
 

diff --git a/files/US_export_policy.jar b/files/US_export_policy.jar
diff --git a/files/local_policy.jar b/files/local_policy.jar
diff --git a/manifests/init.pp b/manifests/init.pp
@@ -1,4 +1,4 @@
-# Public: installs java jre-7u21
+# Public: installs java jre-7u21 and JCE unlimited key size policy files
 #
 # Examples
 #
@@ -9,6 +9,7 @@
   $jre_url = 'https://s3.amazonaws.com/boxen-downloads/java/jre-7u21-macosx-x64.dmg'
   $jdk_url = 'https://s3.amazonaws.com/boxen-downloads/java/jdk-7u21-macosx-x64.dmg'
   $wrapper = "${boxen::config::bindir}/java"
+  $sec_dir = '/Library/Java/JavaVirtualMachines/jdk1.7.0_21.jdk/Contents/Home/jre/lib/security'
 
   package {
     'jre-7u21.dmg':
@@ -28,4 +29,32 @@
     mode    => '0755',
     require => Package['java']
   }
+
+
+  # Allow 'large' keys locally.
+  # http://www.ngs.ac.uk/tools/jcepolicyfiles
+
+  file { $sec_dir:
+    ensure  => 'directory',
+    owner   => 'root',
+    group   => 'wheel',
+    mode    => '0775',
+    require => Package['java']
+  }
+
+  file { "${sec_dir}/local_policy.jar":
+    source  => 'puppet:///modules/java/local_policy.jar',
+    owner   => 'root',
+    group   => 'wheel',
+    mode    => '0664',
+    require => File[$sec_dir]
+  }
+
+  file { "${sec_dir}/US_export_policy.jar":
+    source  => 'puppet:///modules/java/US_export_policy.jar',
+    owner   => 'root',
+    group   => 'wheel',
+    mode    => '0664',
+    require => File[$sec_dir]
+  }
 }