Ashok Pradhan

I want to encrypt some text using AES with 256bit key but unable to achieve, at runtime it raises an Exception
Exception in thread "main" java.security.InvalidKeyException: Illegal key size or default parameters

When I change to 128 bit key size it works .I have JDK 7 and UnlimitedJCEPolicy is in JDK and JRE as part of JDK 7

my class

import java.security.AlgorithmParameters; import java.security.spec.KeySpec; import javax.crypto.Cipher; import javax.crypto.SecretKey; import javax.crypto.SecretKeyFactory; import javax.crypto.spec.IvParameterSpec; import javax.crypto.spec.PBEKeySpec; import javax.crypto.spec.SecretKeySpec; public class PassManager { public static void main(String[] args) throws Exception { String plainText = "A plain Text"; String pass = "password"; String salt = "random_salt"; SecretKeyFactory factory = SecretKeyFactory.getInstance("PBKDF2WithHmacSHA1"); KeySpec spec = new PBEKeySpec(pass.toCharArray(),salt.getBytes("UTF-8"), 65536, 256); SecretKey tmp = factory.generateSecret(spec); SecretKey secret = new SecretKeySpec(tmp.getEncoded(), "AES"); Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding"); cipher.init(Cipher.ENCRYPT_MODE, secret); AlgorithmParameters params = cipher.getParameters(); byte[] iv = params.getParameterSpec(IvParameterSpec.class).getIV(); byte[] ciphertext = cipher.doFinal(plainText.getBytes("UTF-8")); System.out.println("Cipher Text : " + new String(ciphertext, "UTF-8")); Cipher cipher2 = Cipher.getInstance("AES/CBC/PKCS5Padding"); cipher2.init(Cipher.DECRYPT_MODE, secret, new IvParameterSpec(iv)); String plaintext = new String(cipher2.doFinal(ciphertext), "UTF-8"); System.out.println(plaintext); } }

Please help

Thanks Ashok

I have created Java Project which contains several directories including src,test etc.But while I am importing from eclipse it only imports src directory .

File ->New-> Project->Java->Java Project from Existing Ant Buildfile


Please Help !!

Thank you Kathleen at last it is just worked !!

When I execute these two queries in Oracle it returns the correct result

select username,password,'true' from users where username='ashok'; select u.username, ur.rolename from users u, user_roles ur where u.username = ur.username and u.username='ashok';

Without double quote int true results error

select username,password,true from users where username='ashok';

ORA-00904: "TRUE": invalid identifier


Thanks !!

my whole project is available here

http://t2springsecurity.googlecode.com/svn/trunk/

Tested with this still not working...


<jdbc-user-service data-source-ref="dataSource" users-by-username-query="select username,password,true from users where username=?" authorities-by-username-query="select u.username, ur.rolename from users u, user_roles ur where u.username = ur.username and u.username=?" />

I have also tried with TRUE but does not help ...

Again thanks Kathleen !!

Changed the code as you have suggested..

<jdbc-user-service data-source-ref="dataSource" users-by-username-query="select username,password,'true' from users where username=?" authorities-by-username-query="select u.username, ur.rolename from users u, user_roles ur where u.username = ur.username and u.username=?" />

After changed to this when I login using correct username and password in login page it shows me invalid username or password !!

My mappings are
@Controller @RequestMapping(value="/admin") public class AdminController { @RequestMapping(value="/success") public String getSuccessPage(){ System.out.println("You are trying to access /admin/success.html"); return "success"; } }

and

@Controller public class LoginController { @RequestMapping(value="/login") public String getLoginPage(ModelMap model, @RequestParam(value = "error", required = false) boolean error) { System.out.println("You are trying to access /login.html"); if(error==true){ System.out.println("You have entered invalid username or password"); model.addAttribute("error","you have entered username or password"); }else{ model.addAttribute("error", ""); } return "loginpage"; } @RequestMapping(value="/denied") public String getDeniedPage(){ System.out.println("You are redirected to access /denied.html"); return "deniedpage"; } }

And I have 1 row in USERS table
username|password
--------------------------
ashok |admin

and 1 row in USER_ROLES table
username|rolename
--------------------------
ashok |ADMIN


About error Log
After a fresh deploy when I login using correct username/password it shows this


19:37:31,398 INFO [stdout] (http-localhost-127.0.0.1-8080-2) You are trying to access /login.html

19:37:40,999 INFO [org.springframework.beans.factory.xml.XmlBeanDefinitionReader] (http-localhost-127.0.0.1-8080-2) Loading XML bean definitions from class path resource [org/springframework/jdbc/support/sql-error-codes.xml]
19:37:41,097 INFO [org.springframework.jdbc.support.SQLErrorCodesFactory] (http-localhost-127.0.0.1-8080-2) SQLErrorCodes loaded: [DB2, Derby, H2, HSQL, Informix, MS-SQL, MySQL, Oracle, PostgreSQL, Sybase]
19:37:41,218 INFO [stdout] (http-localhost-127.0.0.1-8080-2) You are trying to access /login.html

19:37:41,219 INFO [stdout] (http-localhost-127.0.0.1-8080-2) You have entered invalid username or password



and subsequent login attempt with correct username/password shows this in log with invalid username/password in login page

19:40:14,873 INFO [stdout] (http-localhost-127.0.0.1-8080-2) You are trying to access /login.html
19:40:20,832 INFO [stdout] (http-localhost-127.0.0.1-8080-2) You are trying to access /login.html
19:40:20,834 INFO [stdout] (http-localhost-127.0.0.1-8080-2) You have entered invalid username or password



For login attempt with incorrect username/password whether it is a fresh request after deployment or subsequent login attempt
it shows invalid username or password in login page and this log message

19:41:25,877 INFO [stdout] (http-localhost-127.0.0.1-8080-2) You are trying to access /login.html
19:41:33,321 INFO [stdout] (http-localhost-127.0.0.1-8080-2) You are trying to access /login.html
19:41:33,322 INFO [stdout] (http-localhost-127.0.0.1-8080-2) You have entered invalid username or password



Again thanks for your kind help !!

Thanks Kathleen Angeles !!

I have changed the line

users-by-username-query="select username,password,true from users where username=?"

Still not working ,I have also tested using
users-by-username-query="select username,password,'true' from users where username=?"

and

users-by-username-query="select username,password,TRUE from users where username=?"

and

users-by-username-query="select username,password,'TRUE' from users where username=?"

Nothing works !!

I am using Oracle 11g XE as my database !!

I have created a simple Spring Security application which stores username and password in database table .
The app is not working even if I gave correct username and password .

my spring-security.xml file is as follows :
<http auto-config="true" use-expressions="true"> <intercept-url pattern="/admin/**" access="hasRole('ADMIN')" /> <form-login login-page="/login.html" authentication-failure-url="/login.html?error=true" default-target-url="/admin/success.html" /> <logout invalidate-session="true" logout-success-url="/login.html" logout-url="/logout" /> </http> <authentication-manager> <authentication-provider> <jdbc-user-service data-source-ref="dataSource" users-by-username-query="select username,password from users where username=?" authorities-by-username-query="select u.username, ur.rolename from users u, user_roles ur where u.username = ur.username and username=?" /> <!-- <user-service> <user name=" ashok " password="admin" authorities="ADMIN" /> </user-service> --> </authentication-provider> </authentication-manager>

I have configured dataSource bean in application context and it is working fine as other components using jdbc works fine.

If I use in-memory authentication then it works fine .

Actually when I gave correct username and password to login page in server console it show this message

01:10:16,357 INFO [org.springframework.beans.factory.xml.XmlBeanDefinitionReader] (http-localhost-127.0.0.1-8080-6) Loading XML bean definitions from class path resource [org/springframework/jdbc/support/sql-error-codes.xml]
01:10:16,472 INFO [org.springframework.jdbc.support.SQLErrorCodesFactory] (http-localhost-127.0.0.1-8080-6) SQLErrorCodes loaded: [DB2, Derby, H2, HSQL, Informix, MS-SQL, MySQL, Oracle, PostgreSQL, Sybase]


I have created two table for storing username,password and roles as USERS and USER_ROLES as follows :

CREATE TABLE "USERS"
( "USERNAME" VARCHAR2(40) NOT NULL ENABLE,
"PASSWORD" VARCHAR2(40) NOT NULL ENABLE,
CONSTRAINT "USERS_PK" PRIMARY KEY ("USERNAME") ENABLE
) ;
CREATE TABLE "USER_ROLES"
( "USERNAME" VARCHAR2(40) NOT NULL ENABLE,
"ROLENAME" VARCHAR2(10) NOT NULL ENABLE,
CONSTRAINT "USER_ROLES_PK" PRIMARY KEY ("USERNAME", "ROLENAME") ENABLE
) ;ALTER TABLE "USER_ROLES" ADD CONSTRAINT "USER_ROLES_FK" FOREIGN KEY ("USERNAME")
REFERENCES "USERS" ("USERNAME") ENABLE;


Please help !!

My entity Classes

Teacher
@Entity public class Teacher implements Serializable { private static final long serialVersionUID = -225072121828354819L; @Id @GeneratedValue @Column(name = "TEACH_ID") private Long id; private String name; @ManyToMany(cascade = CascadeType.ALL) @JoinTable(name = "TEACHER_SECTION", joinColumns = { @JoinColumn(name = "TEACH_ID") }, inverseJoinColumns = { @JoinColumn(name = "SEC_ID") }) private Set<Section> sections = new HashSet<Section>(); //Getters and Setters hashCode and toString

Section
@Entity public class Section implements Serializable{ private static final long serialVersionUID = 4048263688849778627L; @Id @GeneratedValue @Column(name="SEC_ID") private Long id; private String name; @ManyToMany(mappedBy="sections",targetEntity=com.association.entity.Teacher.class) private Set<Teacher> teachers = new HashSet<Teacher>(); //Getters ,Setters ,hashCode and toString


Main Class
Session session = AppHibernateSessionFactory.getSession(); Transaction tx = session.beginTransaction(); Teacher teacher = new Teacher(); Section section1 = new Section(); Section section2 = new Section(); teacher.setName("Ashok"); section1.setName("A"); section2.setName("B"); //session.save(section1); //Line 1 //session.save(section2); //Line 2 teacher.getSections().add(section1); teacher.getSections().add(section2); session.save(teacher); tx.commit(); session.close(); AppHibernateSessionFactory.getSessionFactory().close();

Everything works well if I include

session.save(section1); session.save(section2);

before I call
session.save(teacher);

Otherwise the generated JoinTable and Section table does not include section2 data
But my question is - As I have annotated @ManyToMany(cascade = CascadeType.ALL) in Teacher class the above things (saving section objects before teacher object) are not necessary.

Please show me some light ...

Hi
I have cleared OCEJWCD6 and now I want to learn Web Services please suggest some good book(like HF Servlet & JSP) or website link .

Thanks in advance .

My app throws error when I call ejb from JSF managed bean and the error is
javax.servlet.ServletException: javax.persistence.PersistenceException: org.hibernate.SessionException: Session is closed! javax.faces.webapp.FacesServlet.service(FacesServlet.java:606)

My EJB code
@Stateless public class StudentDao { private TypedQuery<Student> query=null; @PersistenceContext(name="CrudJsfPU") private EntityManager em; @PostConstruct private void afterInit(){ query = em.createQuery("SELECT s FROM Student s", Student.class); System.out.println("StudentDao:afterInit"); } public List<Student> getAllStudents() { return query.getResultList(); } }

JSF Managed bean code
@ManagedBean @RequestScoped public class StudentBean implements Serializable{ private static final long serialVersionUID = 3216090393658282378L; private short rollNo; private String name; private String course; @EJB private StudentDao dao; public short getRollNo() { return rollNo; } public void setRollNo(short rollNo) { this.rollNo = rollNo; } public String getName() { return name; } public void setName(String name) { this.name = name; } public String getCourse() { return course; } public void setCourse(String course) { this.course = course; } public List<Student> getAllStudents(){ return dao.getAllStudents(); } }
JSF Page
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:h="http://java.sun.com/jsf/html" xmlns:f="http://java.sun.com/jsf/core" xmlns:ui="http://java.sun.com/jsf/facelets"> <h:head> <title>A Simple CRUD App</title> </h:head> <h:body> <center> <ui:include src="menu.xhtml" /> </center> <h3>List of all students</h3> <h:dataTable border="1" var="student" value="#{studentBean.allStudents}"> <h:column> <f:facet name="header">Roll No</f:facet> <h:outputText value="#{student.rollNo}" /> </h:column> <h:column> <f:facet name="header">Name</f:facet> <h:outputText value="#{student.name}" /> </h:column> <h:column> <f:facet name="header">Course</f:facet> <h:outputText value="#{student.course}" /> </h:column> </h:dataTable> </h:body> </html>

The app works fine when I change the session bean to stateless to statefull

Thanks to all !!

@Rachit Pant :The first version of the book contains lots of errata so refer to the book's errata page and correct it accordingly !!

So I just downloaded all the material you listed.
Will that be enough ??

Yes ,It will be enough,just write some code without using IDE .For Servlet 3.0 things just refer Servlet 3.0 spec that is enough .

Dear friends today I have cleared OCEWCD 6 with score 91%

Preparation

I started preparation from the HSFJ from Sierra, Bates and Basham book which I have covered 3 times.Thanks to the Authors for the nice book
I write lots of small program on each chapter mostly without using any IDE I used Textpad to write programs.I also read some parts of Servlet 3 Specification(Annotations,Pluggability,Security,Asynchronous Servlet),JSP2.2 spec,Frederic Esnault notes(must recommended),PeabodyOnScwcdPatterns notes which covers most of the Pattern questions,ScwcdHints by Jothi Shankar Kumar and read some parts of JEE6 API.

Mock Exams
HSFJ final mock exam I score 57% because I have the 1st edition of the book and it had lots of errata.
Nikos' Java blog Custom Tags Exam(91%)
Nikos' Java blog EL Exam(92%)
Nikos' Java blog JSP (91%)
Nikos' Java blog Servlets (84%)
Java EE 6 SCWCD Mock Exam by Piotr Nowicki' (72%)
Did all 10 the enthuware mock exams and I found it really good and learned a lot.(It gives some important explanations).
My Enthuware scores are 68 , 68 , 74 , 68 , 77 , 81 , 84 ,91 , 86 , 84 .

Real Exam

The exam was not tough as compared to SCJP exam. The real exam toughness level matches with enthuware mock exam.
I missed 5 question on the exam and I took 1hr and 20min to complete the exam.There are 12-15 question which are based on Servlet 3.0.In my exam there are to custom tag questions.

Wish you all the best !!

This API Specifies "A return value of zero or less indicates that the session will never timeout. "
HttpSession

http://docs.oracle.com/javaee/6/api/