[Ejbca-develop] SmartCard-HSM brainpool320r1 EJBCA 6.2.0

[Roman C. <rom...@wi...>]

Hi there,


I'm trying to use SmartCard-HSM together with EJCBA 6.2.0 using brainpool320r1 named curve.


Is there any way how to do that, as Java PKCS#11 does not currently support this type of named curve?


I tried to patch ECParameters.java and NamedCurve.java classes in rt.jar, but with no success.
Now I can generate brainpool320r1 keys through clientToolBox and see it in CryptoTokens as ECDSA "unknown" key type, but I can't create a test certification authority using this key. The following is always a problem:


[org.cesecore.certificates.crl.CrlCreateSessionBean] (http--0.0.0.0-8443-3) Error generating CRL: : org.bouncycastle.operator.RuntimeOperatorException: exception obtaining signature: Could not verify signature


Is it even possible to get EJBCA working with brainpool3201r curve?


With regards,
Roman