注册

政府安全扫描达梦驱动使用了不安全的加密算法

小韩想放假 2023/09/06 567 2

为提高效率,提问时请提供以下信息,问题描述清晰可优先响应。
【DM版本】: 8
【操作系统】:
【CPU】:
【问题描述】*:政府在安全扫描中扫描到了使用弱加密算法,
应用程序在
javax.crypto.Cipher.getInstance()
使用了不安全的加密算法
Cipher.getInstance(DES/CFB/NoPadding)

堆栈信息如下
javax.crypto.Cipher.getInstance(Cipher.java)
dm.jdbc.b.d.a(MsgSecurity.java:278)
dm.jdbc.b.f.<init>(SymmCipher.java:56)
dm.jdbc.a.a.a(DBAccess.java:1033)
dm.jdbc.a.a.a(DBAccess.java:192)
dm.jdbc.driver.DmdbConnection.openConnection(DmdbConnection.java:651)
dm.jdbc.desc.EP.connect(EP.java:185)
dm.jdbc.desc.EPGroup$EPSelector.select(EPGroup.java:149)
dm.jdbc.desc.EPGroup.connect(EPGroup.java:97)
dm.jdbc.driver.DmDriver.do_connect(DmDriver.java:142)
dm.jdbc.driver.DmDriver.connect(DmDriver.java:436)
com.zaxxer.hikari.util.DriverDataSource.getConnection(DriverDataSource.java:138)
com.zaxxer.hikari.pool.PoolBase.newConnection(PoolBase.java:364)
com.zaxxer.hikari.pool.PoolBase.newPoolEntry(PoolBase.java:206)
com.zaxxer.hikari.pool.HikariPool.createPoolEntry(HikariPool.java:476)
com.zaxxer.hikari.pool.HikariPool.checkFailFast(HikariPool.java:561)
com.zaxxer.hikari.pool.HikariPool.<init>(HikariPool.java:115)
com.zaxxer.hikari.HikariDataSource.getConnection(HikariDataSource.java:112)
org.springframework.jdbc.datasource.DataSourceUtils.fetchConnection(DataSourceUtils.java:159)
org.springframework.jdbc.datasource.DataSourceUtils.doGetConnection(DataSourceUtils.java:117)
org.springframework.jdbc.datasource.DataSourceUtils.getConnection(DataSourceUtils.java:80)
org.mybatis.spring.transaction.SpringManagedTransaction.openConnection(SpringManagedTransaction.java:80)
org.mybatis.spring.transaction.SpringManagedTransaction.getConnection(SpringManagedTransaction.java:67)
org.apache.ibatis.executor.BaseExecutor.getConnection(BaseExecutor.java:337)
org.apache.ibatis.executor.SimpleExecutor.prepareStatement(SimpleExecutor.java:86)
org.apache.ibatis.executor.SimpleExecutor.doQuery(SimpleExecutor.java:62)
org.apache.ibatis.executor.BaseExecutor.queryFromDatabase(BaseExecutor.java:325)
org.apache.ibatis.executor.BaseExecutor.query(BaseExecutor.java:156)
org.apache.ibatis.executor.CachingExecutor.query(CachingExecutor.java:109)
com.baomidou.mybatisplus.extension.plugins.MybatisPlusInterceptor.intercept(MybatisPlusInterceptor.java:81)
org.apache.ibatis.plugin.Plugin.invoke(Plugin.java:62)
com.sun.proxy.$Proxy169.query(Unknown Source)
org.apache.ibatis.session.defaults.DefaultSqlSession.selectList(DefaultSqlSession.java:151)
org.apache.ibatis.session.defaults.DefaultSqlSession.selectList(DefaultSqlSession.java:145)
org.apache.ibatis.session.defaults.DefaultSqlSession.selectList(DefaultSqlSession.java:140)
sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
java.lang.reflect.Method.invoke(Method.java:498)
org.mybatis.spring.SqlSessionTemplate$SqlSessionInterceptor.invoke(SqlSessionTemplate.java:427)

请问这个需要如何修复

回答 0
暂无回答
扫一扫
联系客服