Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-4224921

ClassNotFoundException deserializing standard extension obj containing app obj

XMLWordPrintable

      The Java Cryptography Extension (JCE) 1.2 is a standard Java extension
      (see http://java.sun.com/products/jce).

      In JCE 1.2, we provide a class named javax.crypto.SealedObject which
      allows you to protect the condifentiality of any serializable object
      by encrypting its serialized contents. The SealedObject constructor
      takes 2 arguments: the object to be sealed (must be serializable), and
      a Cipher object initialized for encryption. In the constructor
      implementation, we serialize the object that was passed to the
      constructor and encrypt its serialized contents with the Cipher
      object.

      This works fine if we seal objects of "standard" Java classes, but it
      fails if we try to seal objects of custom Java classes. When we seal
      an object of a custom Java class, and later try to unseal it, a
      ClassNotFoundException is raised.

            psoper Pete Soper (Inactive)
            jfialli Joe Fialli
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved:
              Imported:
              Indexed: