Hibiscus could not fetch data due to wrong openJDK 8 security settings

English Applications
1

Today I wasn’t able to communicate with my bank account using Jameica/Hibiscus HBCI on openSUSE 42.1. The error message was something like:

 javax.net.ssl.SSLException: java.lang.RuntimeException: java.security.NoSuchAlgorithmException: EC AlgorithmParameters not available

I found this bugreport: https://bugzilla.redhat.com/show_bug.cgi?id=1167153 and accordingly changed this file:

 /usr/lib64/jvm/java-1.8.0-openjdk-1.8.0/jre/lib/security/java.security

I replaced the line

 jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keySize < 768

with

 jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keySize < 768, EC,ECDHE,ECDH

Then I restarted hibiscus and it worked again.

I wonder if the new line could be included in openSUSE by default.

2

You can report your finding by creating a bug at https:/bugzilla.opensuse.org.

Be sure to include information about your java with something like the following(may need to name the exact packagename)

zypper info openjdk

Along with where you found your solution and your actual fix.

TSU