Re: [Ejbca-develop] Can't create a CA/key with nCiper on EJBCA 6.0.3

[Bruno B. <as...@as...>]

On Thu 27 February, Tomas Gustavsson wrote:
> 
> When using clientToolBox JBoss is not involved at all.

Ok, just wanna be sure.

> 
> You need to check the error message returned from nCipher PKCS#11, it 
> will be in the stack trace that you only showed the first line from.
> 

java.security.ProviderException: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_FUNCTION_FAILED
        at sun.security.pkcs11.P11KeyPairGenerator.generateKeyPair(P11KeyPairGenerator.java:323)
        at java.security.KeyPairGenerator$Delegate.generateKeyPair(KeyPairGenerator.java:681)
        at org.ejbca.util.keystore.KeyStoreContainerBase.generate(KeyStoreContainerBase.java:273)
        at org.ejbca.util.keystore.KeyStoreContainerBase.generateRSA(KeyStoreContainerBase.java:196)
        at org.ejbca.util.keystore.KeyStoreContainerBase.generate(KeyStoreContainerBase.java:226)
        at org.ejbca.ui.cli.HSMKeyTool.doIt(HSMKeyTool.java:209)
        at org.ejbca.ui.cli.HSMKeyTool.execute(HSMKeyTool.java:448)
        at org.ejbca.ui.cli.PKCS11HSMKeyTool.execute(PKCS11HSMKeyTool.java:47)
        at org.ejbca.ui.cli.ClientToolBox.executeIfSelected(ClientToolBox.java:40)
        at org.ejbca.ui.cli.ClientToolBox.main(ClientToolBox.java:66)
Caused by: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_FUNCTION_FAILED
        at sun.security.pkcs11.wrapper.PKCS11.C_GenerateKeyPair(Native Method)
        at sun.security.pkcs11.P11KeyPairGenerator.generateKeyPair(P11KeyPairGenerator.java:314)
        ... 9 more

I can also provide output of CKNFAST_DEBUG if that can help, last lines here:

pPrivateKeyTemplate[4]
CKA_TOKEN: true
CKA_PRIVATE: true
CKA_DECRYPT: true
Error: Generic stub command GenerateKeyPair returned 17
Error: Status_UnknownParameter

> Did you start pre-load loading all the cards first?

Yeah sure, works well.

By the way, we're running nFast drivers/softwares version 11.60, on Linux 64 bits.

Thanks for you help
-- 
http://asyd.net/home/    - Home Page
http://netvibes.com/asyd - Portal