[Ejbca-develop] EJBCA - Luna SA problem

[<co...@co...>]

Hi,

               I  am trying to setup EJBCA with Luna SA. But i get error
which i cannot  google. I tried both 6.1.1 and 6.2.0 client tool box. Java
version 1.7.0_71.

   Policies 22 and 23 are on

   Allow activation                         On           22

   Allow auto-activation                    On           23

 

But when i enter password i get : 

 

dist/clientToolBox/ejbcaClientToolBox.sh PKCS11HSMKeyTool generate
/usr/safenet/lunaclient/lib/libCryptoki2_64.so 2048 rsa2048_1 1 0

Using Slot Reference Type: Slot Number.

2014-11-20 15:53:51,605 INFO  [org.cesecore.keys.token.p11.Pkcs11SlotLabel]
Using SUN PKCS11 provider: sun.security.pkcs11.SunPKCS11

PKCS11 Token [SunPKCS11-libCryptoki2_64.so-slot1] Password:

Command could not be executed. See log for stack trace.

2014-11-20 15:53:54,271 ERROR [org.ejbca.ui.cli.HSMKeyTool] Command
'PKCS11HSMKeyTool generate /usr/safenet/lunaclient/lib/libCryptoki2_64.so
null pkcs11 2048 rsa2048_1 1' could not be executed.

java.security.KeyStoreException: KeyStore instantiation failed

        at java.security.KeyStore$Builder$2.getKeyStore(KeyStore.java:1735)

        at
org.ejbca.util.keystore.KeyStoreContainerP11.getInstance(KeyStoreContainerP1
1.java:90)

        at
org.ejbca.util.keystore.KeyStoreContainerP11.getInstance(KeyStoreContainerP1
1.java:61)

        at
org.ejbca.util.keystore.KeyStoreContainerFactory.getInstance(KeyStoreContain
erFactory.java:43)

        at org.ejbca.ui.cli.HSMKeyTool.doIt(HSMKeyTool.java:208)

        at org.ejbca.ui.cli.HSMKeyTool.execute(HSMKeyTool.java:448)

        at
org.ejbca.ui.cli.PKCS11HSMKeyTool.execute(PKCS11HSMKeyTool.java:47)

        at
org.ejbca.ui.cli.ClientToolBox.executeIfSelected(ClientToolBox.java:40)

        at org.ejbca.ui.cli.ClientToolBox.main(ClientToolBox.java:66)

Caused by: java.security.cert.CertificateException: Could not parse
certificate: java.io.IOException: Empty input

        at
sun.security.provider.X509Factory.engineGenerateCertificate(X509Factory.java
:104)

        at
java.security.cert.CertificateFactory.generateCertificate(CertificateFactory
.java:339)

        at sun.security.pkcs11.P11KeyStore.loadCert(P11KeyStore.java:1207)

        at sun.security.pkcs11.P11KeyStore.mapLabels(P11KeyStore.java:2370)

        at sun.security.pkcs11.P11KeyStore.engineLoad(P11KeyStore.java:856)

        at java.security.KeyStore.load(KeyStore.java:1248)

        at java.security.KeyStore$Builder$2$1.run(KeyStore.java:1705)

        at java.security.KeyStore$Builder$2$1.run(KeyStore.java:1686)

        at java.security.AccessController.doPrivileged(Native Method)

        at java.security.KeyStore$Builder$2.getKeyStore(KeyStore.java:1732)

        ... 8 more

Caused by: java.io.IOException: Empty input

        at
sun.security.provider.X509Factory.engineGenerateCertificate(X509Factory.java
:101)

        ... 17 more

 

Can  anyone point me where i could make configuration mistake ?

 

With kind regards,

 

Congo