From: Markus K. <ma...@pr...> - 2013-01-07 16:09:49
|
On 2013-01-07 16:44, Marcos Fontana wrote: > The error in the propertie file was my fault in the path of it in the > commando line. > > > > Now, whem im trying to Sign a PDF for example, I’m getting this error: > EXCEPTION: org.signserver.common.CryptoTokenOfflineException: Signtoken > isn't active.; > > > > Look my pdf configuration file: > > > > ## Global properties > > > > GLOB.WORKERGENID1.CLASSPATH = org.signserver.module.pdfsigner.PDFSigner > > GLOB.WORKERGENID1.SIGNERTOKEN.CLASSPATH = > org.signserver.server.cryptotokens.SoftCryptoToken > > GLOB.WORKERGENID1.SIGNERTOKEN.CLASSPATH = > org.signserver.server.cryptotokens.P12CryptoToken > > #GLOB.WORKERGENID1.SIGNERTOKEN.CLASSPATH = > org.signserver.server.cryptotokens.PKCS11CryptoToken > You are defining the GLOB.WORKERGENID1.SIGNERTOKEN.CLASSPATH worker property multiple times. It is undefined which one will be used but as you are getting CryptoTokenOfflineException I would suspect it was the P12 one this time. Remove the definition that you should not use. > > > > > ## General properties > > > > WORKERGENID1.NAME=PDFSigner > > WORKERGENID1.AUTHTYPE=NOAUTH > > > > > > ## SoftCryptoToken properties > > > > WORKERGENID1.KEYDATA=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 + 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 F 9rmueU5lccdwsnXU/ZwXZtpn14M3YPTFAy4z+SQR82R3pwrSW9pY\= > > WORKERGENID1.SIGNERCERTCHAIN=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 u rHxdEKe6fS/ngYnIjFI5R0Kgl1czqq/tXDjGEpv2x0tZECqLFrkC7a+gjXJPE8TDj8nvi40pcKFvv2tbRiyYrIPIxefrXmkT91F3zUKbQL0iW7Aot/0Klj+i4uivqFu359OymJ2C5wJOyZqPPsxUvTdA2EZNX4BseFvJREmvx1CAgZkANZD4Qzn1b/0WrXfYsbWA4cBeTRR7vjGajBc/oGo2wki0dJksImU8b2dLEf3n3M9dfxiFEAnl3YKDmT21wamO/hRdWklT+7Ivz6SFnW6HneT42IMNkC4k3d0i0Y2/q7XN5rvMFbH1n6O4NUqHIkzbCtVljV6+XESmMseyJGKlY6RD7jnhEJq6dGPGSr5h6SAohYljs5Y1e/Dyg243sP75ZO7HfOYPd2Sp+p5R5szWOuZp5UtLFBhuwlI41LnpuL+4t25LjNHoGhzZCl1rxqcSBGVKLG2sN0XVXfqrt/EykOAV0WW+S72tRPI73eq0AeRJRRfzcZiequi694eP10Ehh/iiOpQ28yfhsWDvMIxu8o8oK+hpgQvCwecP7rupdqM9OQYnePb53dd8Tt4hw4WhvSWC/9aNfFXc3jwbHVy5Rw\=\=;MIIFfzCCA2egAwIBAgIIMk1BOK8CwTwwDQYJKoZIhvcNAQELBQAwTTEXMBUGA1UEAwwORFNTIFJvb3QgQ0EgMTAxEDAOBgNVBAsMB1Rlc3RpbmcxEzARBgNVBAoMClNpZ25TZXJ2ZXIxCzAJBgNVBAYTAlNFMB4XDTExMDUyNzA4MTQyN1oXDTM2MDUyNzA4MTQyN1owTTEXMBUGA1UEAwwORFNTIFJvb3QgQ0EgMTAxEDAOBgNVBAsMB1Rlc3RpbmcxEzARBgNVBAoMClNpZ25TZXJ2ZXIxCzAJBgNVBAYTAlNFMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAgblgjTTkMp1QAhgWDprhvqE9zX1Ux/A/RTOu4G4f6CT k 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 m 70rgAdmRDozOfSDaaWHY20DovkfvKUYjPR6MGAPD5w9dEb4wp/ZjATblyZnH+LTflwfftUAonmAw46E0Zgg143sO6RfOOnbwjXEc+KXd/KQ6kTQ560mlyRd6q7EIDYRfD4n4agKV2R5gvVPhMD0+IK7kagqKNfWa9z8Ue2N3MedyWnb9wv4wC69qFndGaIfYADkUykoOyLsVVteJ70PVJPXO7s66LucfD2R0wo2MpuOYCsTOm7HHS+uZ9VjHl2qQ0ZQG89Xn+AXnzPbk1INe2z0lq3hzCW5DTYBKsJEexErzMpLwiEqUYJUfR9EeCM8UPMtLSqz1utdPoIYhULGzt5lSJEpMHMbquYfWJxQiKCbvfxQsP5dLUMEIqTgjNdo98OlM7Z7zjYH9Kimz3wgAKSAIoQZr7Oy1dMHO5GK4jBtZ8wgsyyQ6DzQQ7R68XFVKarIW8SATeyubAP+WjdMwk/ZXzsDjMZEtENaBXzAefYA\=\= > > > > > > ## P12CryptoToken properties > > > > #WORKERGENID1.KEYSTOREPATH=D:/My_Projects/SignServer_WorkSpace/tomcat.p12 > > #WORKERGENID1.KEYSTOREPASSWORD=123456 > > > > > > ## PKCS11CryptoToken properties > > > > #WORKERGENID1.sharedLibrary=/home/tomas/dev/Utimaco/libcs2_pkcs11.so > > #WORKERGENID1.slot=1 > > #WORKERGENID1.defaultKey=defaultKey > > #WORKERGENID1.pin foo123 > > > > When the server, by the demo page, try to sign a document, which key > pair it use? Is it in the line: > #WORKERGENID1.KEYSTOREPATH=D:/My_Projects/SignServer_WorkSpace/tomcat.p12? That depends on which signtoken you define. If it is a SoftCryptoToken then it is the KEYDATA property but if is a P12CryptoToken then it is the KEYSTOREPATH property. > > > > Is this the keystore generated by ejbca? If yes, should I point to > ejbca/p12/tomcat.p12? No, the KEYSTOREPATH is the path to the keystore containing the signing key to sign documents with if you have chosen to use the P12CryptoToken. > > > > ============================================================================================================================== > > And, at last, for the WSDL error, this is what I’m doing, how described > on the guide: > > > > System./setProperty/("javax.net.ssl.keyStoreType", "JKS"); > > System./setProperty/("javax.net.ssl.keyStore", > "C:\\Users\\Marcos\\Desktop\\p12\\yMariano.jks"); > > System./setProperty/("javax.net.ssl.keyStorePassword ", > "a1b2c3"); > > > > System./setProperty/("javax.net.ssl.trustStoreType", > "JKS"); > > System./setProperty/("javax.net.ssl.trustStore", > "C:\\Projeto\\workspace\\ejbca\\p12\\truststore.jks"); > > > System./setProperty/("javax.net.ssl.trustStorePassword", "myPassword"); > > > > The keystore is loaded to sign the document, right? No, the keystore in the system property is used for client authenticated TLS (ie if you access the web service on port 8443). > > The truststore is loaded too. > > > > Is it something wrong? It looks correct assuming that the file paths and passwords are correct and that the truststore/keystore contains correct certificates. Best regards, Markus > > > > Regards, > > > > *De:*Marcos Fontana [mailto:mar...@ho...] > *Enviada em:* segunda-feira, 7 de janeiro de 2013 08:33 > *Para:* Marcos Paulo Fontana > *Assunto:* FW: [SignServer-develop] Worker's questions and Error WSDL > > > > > > Enviado pelo meu Windows Phone > > ------------------------------------------------------------------------ > > *From: *Markus Kilås > *Sent: *06/01/2013 11:27 > *To: *sig...@li... > <mailto:sig...@li...> > *Subject: *Re: [SignServer-develop] Worker's questions and Error WSDL > > On 2013-01-04 17:55, Marcos Fontana wrote: >> Hi, >> > > Hi Marcos, > >> >> >> When I’m are setting properties by the command: >> >> >> >> bin/signserver.sh setproperties >> doc/sample-configs/qs_pdfsigner_configuration.properties >> >> >> >> I got the console error: Error reading property file. Is there some >> place that I can see this log? >> > > You can get this error is the file is not existing or in any other way > not readable. Make sure that the file can be read by for instance > running "less doc/sample-configs/qs_pdfsigner_configuration.properties". > Unfortunately this is not logged anywhere in more detail than what is > printed on the console. > >> >> >> The configurations are right. Another question, what is the difference >> by worker and signer? > > A Worker is an entity in SignServer which has an Worker ID and a > configuration and can be called to perform some work. A signer is a type > of worker which uses a crypto token to sign something. > >> >> >> >> The ID or Worker name, in the case of PDF, is the PDFSigner, configured >> in this line: WORKERGENID1.NAME=PDFSigner? > > That property sets the worker name to "PDFSigner" for the new worker > which is about to be added. The WORKERGENID1 means that a new worker > with the next available ID will be created. > > If you instead want to define the worker ID you could replace > WORKERGENID1 with for instance WORKER47 (or any other ID). This is > recommended if you want to be able to apply (setproperties) the file > again without having a new worker to be created. > >> >> >> >> And another question, I’m getting this error when i try to instantiate >> the object os WSDL in this line >> >> : ISigningAndValidation _signserver_ = >> *new*SigningAndValidationWS("localhost", 8442, *true*); >> >> >> >> _javax.xml.ws.WebServiceException_: Failed to access the WSDL at: >> https://localhost:8442/signserver/signserverws/signserverws?wsdl. It >> failed with: >> >> _java.security.NoSuchAlgorithmException_: Error constructing >> implementation (algorithm: Default, provider: SunJSSE, class: >> com.sun.net.ssl.internal.ssl.DefaultSSLContextImpl). >> >> at >> com.sun.xml.internal.ws.wsdl.parser.RuntimeWSDLParser.tryWithMex(Unknown >> Source) >> >> at >> com.sun.xml.internal.ws.wsdl.parser.RuntimeWSDLParser.parse(Unknown Source) >> >> at >> com.sun.xml.internal.ws.client.WSServiceDelegate.parseWSDL(Unknown Source) >> >> at >> com.sun.xml.internal.ws.client.WSServiceDelegate.<init>(Unknown Source) >> >> at >> com.sun.xml.internal.ws.client.WSServiceDelegate.<init>(Unknown Source) >> >> at >> com.sun.xml.internal.ws.spi.ProviderImpl.createServiceDelegate(Unknown >> Source) >> >> at javax.xml.ws.Service.<init>(Unknown Source) >> >> at >> org.signserver.protocol.ws.gen.SignServerWSService.<init>(_SignServerWSService.java:42_) >> >> at >> org.signserver.client.api.SigningAndValidationWS.<init>(_SigningAndValidationWS.java:120_) >> >> at >> org.signserver.client.api.SigningAndValidationWS.<init>(_SigningAndValidationWS.java:83_) >> >> at >> certificate.model.ModelDocumento.assinarDocumento4(_ModelDocumento.java:145_) >> >> at certificate.principal.Principal.main(_Principal.java:70_) >> >> Caused by: _java.net.SocketException_: >> _java.security.NoSuchAlgorithmException_: Error constructing >> implementation (algorithm: Default, provider: SunJSSE, class: >> com.sun.net.ssl.internal.ssl.DefaultSSLContextImpl) >> >> at javax.net.ssl.DefaultSSLSocketFactory.throwException(Unknown >> Source) >> >> at javax.net.ssl.DefaultSSLSocketFactory.createSocket(Unknown Source) >> >> at sun.net.www.protocol.https.HttpsClient.createSocket(Unknown >> Source) >> >> at sun.net.NetworkClient.doConnect(Unknown Source) >> >> at sun.net.www.http.HttpClient.openServer(Unknown Source) >> >> at sun.net.www.http.HttpClient.openServer(Unknown Source) >> >> at sun.net.www.protocol.https.HttpsClient.<init>(Unknown Source) >> >> at sun.net.www.protocol.https.HttpsClient.New(Unknown Source) >> >> at >> sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.getNewHttpClient(Unknown >> Source) >> >> at >> sun.net.www.protocol.http.HttpURLConnection.plainConnect(Unknown Source) >> >> at >> sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Unknown >> Source) >> >> at >> sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source) >> >> at >> sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(Unknown >> Source) >> >> at java.net.URL.openStream(Unknown Source) >> >> at >> com.sun.xml.internal.ws.wsdl.parser.RuntimeWSDLParser.createReader(Unknown >> Source) >> >> at >> com.sun.xml.internal.ws.wsdl.parser.RuntimeWSDLParser.resolveWSDL(Unknown Source) >> >> ... 11 more >> > > Have you defined the javax.net.ssl.trustStore and > javax.net.ssl.trustStorePassword system properties? > > See > http://signserver.org/manual/integration.html#Signing%20and%20validating%20an%20XML%20document > for an example. > > > Best regards, > Markus > > > PrimeKey Solutions offers a commercial EJBCA & SignServer support > subscription and training. Please see www.primekey.se > <http://www.primekey.se> or contact > in...@pr... <mailto:in...@pr...> for more information. > http://www.primekey.se/Services/Support/ > http://www.primekey.se/Services/Training/ > > > > ------------------------------------------------------------------------------ > Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS, > MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current > with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft > MVPs and experts. ON SALE this month only -- learn more at: > http://p.sf.net/sfu/learnmore_123012 > _______________________________________________ > SignServer-develop mailing list > Sig...@li... > <mailto:Sig...@li...> > https://lists.sourceforge.net/lists/listinfo/signserver-develop > > ------------------------------------------------------------------------ > ------------------------------------------------------------------------ > > Nenhum vírus encontrado nessa mensagem. > Verificado por AVG - www.avgbrasil.com.br <http://www.avgbrasil.com.br> > Versão: 2013.0.2805 / Banco de dados de vírus: 2637/6014 - Data de > Lançamento: 01/06/13 > > > > ------------------------------------------------------------------------------ > Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS, > MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current > with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft > MVPs and experts. SALE $99.99 this month only -- learn more at: > http://p.sf.net/sfu/learnmore_122412 > > > > _______________________________________________ > SignServer-develop mailing list > Sig...@li... > https://lists.sourceforge.net/lists/listinfo/signserver-develop > -- Kind regards, Markus Kilås Security Consultant & Developer PrimeKey Solutions AB Anderstorpsv. 16 171 54 Solna Sweden Phone: +46 70 424 94 85 Skype: markusatskype Email: mar...@pr... www.primekey.se |