JAL-3130 refactored a lot of this. See the JAVA-11-README

[jalview.git] / j11jre / openjdk11_windows / conf / security / policy / limited / exempt_local.policy

diff --git a/j11jre/openjdk11_windows/conf/security/policy/limited/exempt_local.policy b/j11jre/openjdk11_windows/conf/security/policy/limited/exempt_local.policy
new file mode 100644 (file)
index 0000000..9dd5b91
--- /dev/null
+++ b/j11jre/openjdk11_windows/conf/security/policy/limited/exempt_local.policy
@@ -0,0 +1,13 @@
+// Some countries have import limits on crypto strength, but may allow for
+// these exemptions if the exemption mechanism is used.
+
+grant {
+    // There is no restriction to any algorithms if KeyRecovery is enforced.
+    permission javax.crypto.CryptoPermission *, "KeyRecovery"; 
+
+    // There is no restriction to any algorithms if KeyEscrow is enforced.
+    permission javax.crypto.CryptoPermission *, "KeyEscrow"; 
+
+    // There is no restriction to any algorithms if KeyWeakening is enforced. 
+    permission javax.crypto.CryptoPermission *, "KeyWeakening";
+};