Hey,

thanks for replying

It is an external library. I load it with the following lines:

        String configName = "/Users/christian/pkcs11.cfg";
        Provider p = new sun.security.pkcs11.SunPKCS11(configName);
        Security.addProvider(p);

        KeyStore ks = KeyStore.getInstance("pkcs11");
        ks.load(null, "password".toCharArray());

And the content from .cfg-file is the following:

        library = /usr/local/lib/libcvP11.dylib
        name = CryptoVision


Am 22.03.2012 um 13:59 schrieb Andreas Kuehne:

> Hi Christian,
> 
> can you give a little more information about the PKCS11 lib you are using?
> As far as I can see from the log that the PKCS11wrapper detected a
> problem. But that's quite generic ...
> 
> Greetings
> 
> Andreas
>> Hey @all,
>> 
>> I tried the example "How to sign with an external signature and a standard 
>> filter" from http://itextpdf.sourceforge.net/howtosign.html with itext 
>> 5.2.0,  bouncy castle 1.46 and a pkcs11 token.
>> Every time I get the following exception: 
>> 
>> Exception in thread "main" java.security.ProviderException: 
>> sun.security.pkcs11.wrapper.PKCS11Exception: CKR_FUNCTION_FAILED
>>      at sun.security.pkcs11.P11Signature.engineSign(P11Signature.java:531)
>>      at java.security.Signature$Delegate.engineSign(Signature.java:1128)
>>      at java.security.Signature.sign(Signature.java:522)
>>      at com.itextpdf.text.pdf.PdfPKCS7.getEncodedPKCS1(PdfPKCS7.java:1210)
>>      at 
>> com.itextpdf.text.pdf.PdfSigGenericPKCS.setSignInfo(PdfSigGenericPKCS.java:113)
>>      at 
>> com.itextpdf.text.pdf.PdfSignatureAppearance.preClose(PdfSignatureAppearance.java:974)
>>      at 
>> com.itextpdf.text.pdf.PdfSignatureAppearance.preClose(PdfSignatureAppearance.java:897)
>>      at christianTest.ExternalHash.main(ExternalHash.java:45)
>>      at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>>      at 
>> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>>      at 
>> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>>      at java.lang.reflect.Method.invoke(Method.java:597)
>>      at com.intellij.rt.execution.application.AppMain.main(AppMain.java:120)
>> Caused by: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_FUNCTION_FAILED
>>      at sun.security.pkcs11.wrapper.PKCS11.C_Sign(Native Method)
>>      at sun.security.pkcs11.P11Signature.engineSign(P11Signature.java:522)
>>      ... 12 more
>> 
>> The point where the application stops is sig.sign() in class PdfPKCS7. With 
>> older verson of itext and bc it works but now...
>> 
>> I googled and only find articles which says that I have to load 
>> pkcs11-keystore without the provider but nothing happen.
>> Is there anybody with a solution?
>> 
>> Thanks in advance
>> ------------------------------------------------------------------------------
>> This SF email is sponsosred by:
>> Try Windows Azure free for 90 days Click Here 
>> http://p.sf.net/sfu/sfd2d-msazure
>> _______________________________________________
>> iText-questions mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/itext-questions
>> 
>> iText(R) is a registered trademark of 1T3XT BVBA.
>> Many questions posted to this list can (and will) be answered with a 
>> reference to the iText book: http://www.itextpdf.com/book/
>> Please check the keywords list before you ask for examples: 
>> http://itextpdf.com/themes/keywords.php
>> 
> 
> 
> -- 
> Andreas Kühne 
> phone: +49 177 293 24 97 
> mailto: [email protected]
> 
> Trustable Ltd. Niederlassung Deutschland Ströverstr. 18 - 59427 Unna 
> Amtsgericht Hamm HRB 5868
> 
> Directors Andreas Kühne, Heiko Veit
> 
> Company UK Company No: 5218868 Registered in England and Wales 
> 
> 
> ------------------------------------------------------------------------------
> This SF email is sponsosred by:
> Try Windows Azure free for 90 days Click Here 
> http://p.sf.net/sfu/sfd2d-msazure
> _______________________________________________
> iText-questions mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/itext-questions
> 
> iText(R) is a registered trademark of 1T3XT BVBA.
> Many questions posted to this list can (and will) be answered with a 
> reference to the iText book: http://www.itextpdf.com/book/
> Please check the keywords list before you ask for examples: 
> http://itextpdf.com/themes/keywords.php


------------------------------------------------------------------------------
This SF email is sponsosred by:
Try Windows Azure free for 90 days Click Here 
http://p.sf.net/sfu/sfd2d-msazure
_______________________________________________
iText-questions mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/itext-questions

iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference 
to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples: 
http://itextpdf.com/themes/keywords.php

Reply via email to