I have tomcat 6.0 with 2 webapps. One of them executes the following code:
java.security.Security.addProvider(new cryptix.jce.provider.CryptixCrypto());
This makes this provider available in the second app but I don’t want that.
Please explain why this is happening and how I can fix it?
Providers are global.
The only thing you might have control over is the preference order of the providers. You can’t make one set of providers available to one part of your code and not to another without running them in separate JVMs, since
java.securityis, I believe, loaded by the bootstrap classloader.