|
From: <co...@co...> - 2014-11-20 15:23:30
|
Hi,
I am trying to setup EJBCA with Luna SA. But i get error
which i cannot google. I tried both 6.1.1 and 6.2.0 client tool box. Java
version 1.7.0_71.
Policies 22 and 23 are on
Allow activation On 22
Allow auto-activation On 23
But when i enter password i get :
dist/clientToolBox/ejbcaClientToolBox.sh PKCS11HSMKeyTool generate
/usr/safenet/lunaclient/lib/libCryptoki2_64.so 2048 rsa2048_1 1 0
Using Slot Reference Type: Slot Number.
2014-11-20 15:53:51,605 INFO [org.cesecore.keys.token.p11.Pkcs11SlotLabel]
Using SUN PKCS11 provider: sun.security.pkcs11.SunPKCS11
PKCS11 Token [SunPKCS11-libCryptoki2_64.so-slot1] Password:
Command could not be executed. See log for stack trace.
2014-11-20 15:53:54,271 ERROR [org.ejbca.ui.cli.HSMKeyTool] Command
'PKCS11HSMKeyTool generate /usr/safenet/lunaclient/lib/libCryptoki2_64.so
null pkcs11 2048 rsa2048_1 1' could not be executed.
java.security.KeyStoreException: KeyStore instantiation failed
at java.security.KeyStore$Builder$2.getKeyStore(KeyStore.java:1735)
at
org.ejbca.util.keystore.KeyStoreContainerP11.getInstance(KeyStoreContainerP1
1.java:90)
at
org.ejbca.util.keystore.KeyStoreContainerP11.getInstance(KeyStoreContainerP1
1.java:61)
at
org.ejbca.util.keystore.KeyStoreContainerFactory.getInstance(KeyStoreContain
erFactory.java:43)
at org.ejbca.ui.cli.HSMKeyTool.doIt(HSMKeyTool.java:208)
at org.ejbca.ui.cli.HSMKeyTool.execute(HSMKeyTool.java:448)
at
org.ejbca.ui.cli.PKCS11HSMKeyTool.execute(PKCS11HSMKeyTool.java:47)
at
org.ejbca.ui.cli.ClientToolBox.executeIfSelected(ClientToolBox.java:40)
at org.ejbca.ui.cli.ClientToolBox.main(ClientToolBox.java:66)
Caused by: java.security.cert.CertificateException: Could not parse
certificate: java.io.IOException: Empty input
at
sun.security.provider.X509Factory.engineGenerateCertificate(X509Factory.java
:104)
at
java.security.cert.CertificateFactory.generateCertificate(CertificateFactory
.java:339)
at sun.security.pkcs11.P11KeyStore.loadCert(P11KeyStore.java:1207)
at sun.security.pkcs11.P11KeyStore.mapLabels(P11KeyStore.java:2370)
at sun.security.pkcs11.P11KeyStore.engineLoad(P11KeyStore.java:856)
at java.security.KeyStore.load(KeyStore.java:1248)
at java.security.KeyStore$Builder$2$1.run(KeyStore.java:1705)
at java.security.KeyStore$Builder$2$1.run(KeyStore.java:1686)
at java.security.AccessController.doPrivileged(Native Method)
at java.security.KeyStore$Builder$2.getKeyStore(KeyStore.java:1732)
... 8 more
Caused by: java.io.IOException: Empty input
at
sun.security.provider.X509Factory.engineGenerateCertificate(X509Factory.java
:101)
... 17 more
Can anyone point me where i could make configuration mistake ?
With kind regards,
Congo
|