Installing Java Cryptography Extension (JCE) Files

Installing the Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files.

Installing the JCE Unlimited Strength Jurisdiction Policy Files can ensure support for all encryption algorithms when using Oracle Java with SSL on Apache Cassandra, and it highly recommended. The files must be installed on every node in the Cassandra cluster.

Some of the cipher suites in the default cassandra.yaml are included only in the Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files. To ensure support for all encryption algorithms, install the JCE Unlimited Strength Jurisdiction Policy Files.

The location of the cassandra.yaml file depends on the type of installation:

Package installations	/etc/cassandra/cassandra.yaml
Tarball installations	`install_location`/resources/cassandra/conf/cassandra.yaml

Install the JCE files using the appropriate method for your Cassandra installation:

Procedure

Installing the JCE on RHEL-based systems

Install the EPEL repository:
```
$ sudo yum install epel-release
```

Installing the JCE on Debian-based systems

Install JCE using webupd8 PPA repository:

$ sudo apt-get install oracle-java8-unlimited-jce-policy

Installing the JCE using the Oracle jar files

Download the Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files from Oracle Java SE download page.
Unzip the downloaded file.
Copy local_policy.jar and US_export_policy.jar to the $JAVA_HOME/jre/lib/security directory to overwrite the existing jar files.