Unable to initialize due to invalid secret key - Spring Forum
It's my understanding that this error occurs because Spring is trying to use AES-256 encryption, which isn't shipped by default in the JRE: The "standard" encryption method is 256-bit AES using PKCS #5's PBKDF2 (Password-Based Key Derivation Function #2).
My question is: can the encryption method be changed to something that *is* shipped with the JRE? We don't really need "unlimited strength" encryption in our application, and it would be a lot easier to update the configuration than install the necessary JARs on all of the servers and developer workstations. The crypto module reference above seems to suggest that perhaps a "non-standard" encryption method is available, but I don't see any documentation regarding changing it.
Read full article from Unable to initialize due to invalid secret key - Spring Forum
No comments:
Post a Comment