JAL-3130 refactored a lot of this. See the JAVA-11-README

[jalview.git] / j11jre / openjdk11_windows / conf / security / policy / limited / default_local.policy

diff --git a/j11jre/openjdk11_windows/conf/security/policy/limited/default_local.policy b/j11jre/openjdk11_windows/conf/security/policy/limited/default_local.policy
new file mode 100644 (file)
index 0000000..2a6d513
--- /dev/null
+++ b/j11jre/openjdk11_windows/conf/security/policy/limited/default_local.policy
@@ -0,0 +1,14 @@
+// Some countries have import limits on crypto strength. This policy file
+// is worldwide importable.
+
+grant {
+    permission javax.crypto.CryptoPermission "DES", 64;
+    permission javax.crypto.CryptoPermission "DESede", *;
+    permission javax.crypto.CryptoPermission "RC2", 128, 
+                                     "javax.crypto.spec.RC2ParameterSpec", 128;
+    permission javax.crypto.CryptoPermission "RC4", 128;
+    permission javax.crypto.CryptoPermission "RC5", 128, 
+          "javax.crypto.spec.RC5ParameterSpec", *, 12, *;
+    permission javax.crypto.CryptoPermission "RSA", *;
+    permission javax.crypto.CryptoPermission *, 128;
+};