Re: [Ejbca-develop] error generating keys using clientToolBox

[Branko M. <br...@ma...>]

On Thu, 27 Nov 2014 16:22:06 +0400
Eilaf Essam <eil...@ho...> wrote:

> Hi, 
> I am trying to generate keys on utimaco HSM using ejbca clientToolBox,
> I
>  am using ejbca 6.2.0 with jboss7 and java 1.7 , I used the same 
> configuration on ejbca 6.0.4 with jboss7 and java 1.6 and everything 
> worked perfectly, but now with ejbca 6.2.0 I am getting this error: 
> 
> ERROR
>  [org.ejbca.ui.cli.HSMKeyTool] Command 'PKCS11HSMKeyTool generate 
> /root/Utimaco/libcs_pkcs11_R2.so null pkcs11 1024 key 0' could not be 
> executed.
> java.security.ProviderException: Initialization failed
>         at sun.security.pkcs11.P11Signature.initialize(P11Signature.java:311)
>         at sun.security.pkcs11.P11Signature.engineInitSign(P11Signature.java:392)
>         at java.security.Signature$Delegate.engineInitSign(Signature.java:1127)
>         at java.security.Signature.initSign(Signature.java:511)
>         at org.bouncycastle.operator.jcajce.JcaContentSignerBuilder.build(Unknown Source)
>         at org.ejbca.util.keystore.KeyStoreContainerBase.getSelfCertificate(KeyStoreContainerBase.java:136)
>         at org.ejbca.util.keystore.KeyStoreContainerBase.generate(KeyStoreContainerBase.java:308)
>         at org.ejbca.util.keystore.KeyStoreContainerBase.generateRSA(KeyStoreContainerBase.java:201)
>         at org.ejbca.util.keystore.KeyStoreContainerBase.generate(KeyStoreContainerBase.java:236)
>         at org.ejbca.ui.cli.HSMKeyTool.doIt(HSMKeyTool.java:213)
>         at org.ejbca.ui.cli.HSMKeyTool.execute(HSMKeyTool.java:453)
>         at org.ejbca.ui.cli.PKCS11HSMKeyTool.execute(PKCS11HSMKeyTool.java:47)
>         at org.ejbca.ui.cli.ClientToolBox.executeIfSelected(ClientToolBox.java:40)
>         at org.ejbca.ui.cli.ClientToolBox.main(ClientToolBox.java:66)
> Caused by: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_OBJECT_HANDLE_INVALID
>         at sun.security.pkcs11.wrapper.PKCS11.C_SignInit(Native Method)
>         at sun.security.pkcs11.P11Signature.initialize(P11Signature.java:303)
>         ... 13 more
> 
> I
>  am not sure this problem is related to ejbca or openjdk, could u please
>  tell me how what could be causing the problem and how i can solve it
> 
> Thanks for your time.
> Eilaf Essam 		 	   		  

What was the exact command you used?

Best regards

-- 
Branko Majic
Jabber: br...@ma...
Please use only Free formats when sending attachments to me.

Бранко Мајић
Џабер: br...@ma...
Молим вас да додатке шаљете искључиво у слободним форматима.