Re: [SignServer-develop] [Spam] Re: Error when work with HSM

[Markus K. <ma...@pr...>]

> ----- /*Thông điệp gốc :*/ -----
> *Gửi từ   : *Markus Kil3s <mailto:ma...@pr...> [ma...@pr...]
> *Gửi lúc  : *12/10/2015 03:30 PM
> *Gửi tới  : *sig...@li...;ma...@pr...
> <mailto:sig...@li...;ma...@pr...>
> *Chủ đề : *[Spam] Re: [SignServer-develop] Error when work with HSM
>  
> On 10/10/2015 02:57 PM, Bùi Sĩ Tuấn wrote:
>> Hi All,
>> I'm testing signserver CE 3.7.0 with Utimaco HSM Simulator. I created a
>> CryptoToken Worker and it active.
>> Then, I create a XML Signer with this CryptoToken worker, upload cert
>> and certchain.
>> (cert and certchain created from .p12 file which imported in HSM)
>> but I got message error:
>> - No signer certificate available
>> And when rung singing test, it got error:
>> org.cesecore.keys.token.CryptoTokenOfflineException: No key with alias ''.
>> Anyone can help me. Thanks
>> I'm a VietNamese. And my English not good :D
> 
> Hi Bùi,
> 
> Your XML Signer needs to have a property DEFAULTKEY with the name of the
> key in the HSM to use. If you don't have such a property that could be
> the issue.
> 
> An other issue could be if the key is not visible to SignServer/Java. In
> the SignServer Admin GUI you can select the CryptoToken Worker and click
> the CryptoToken tab to see all the keys available in the HSM. You should
> then see the name (key alias/label) of your key.
> 
> 
> Best regards,
> Markus
> PrimeKey Solutions
> 
> PrimeKey Solutions offers a commercial EJBCA & SignServer support
> subscription and training. Please see www.primekey.se or contact
> in...@pr... for more information.
> https://www.primekey.se/Services/Support/
> https://www.primekey.se/Services/Training/
> 
> 
>>
>>
>> *Bùi Sĩ Tuấn*
>>
>> * CA Tech - Ban HTCA - Bkav Security*
>> *Office: Bkav Building - Yen Hoa New Town, Cau Giay Dist, Hanoi *
>> *Mobile: 0126.620.7292*
>>
>> /*____________________________________________*/
>>
>> <http://www.bkav.com.vn/>
>>
>> /*Do your best, the rest will come ! */
>>
>> /*Hay làm việc hết mình, những điều tốt đẹp sẽ đến với bạn ! */
>>
>>
>>
>> /*Disclaimer:This e-mail and any files transmitted with it are
>> confidential and may contain privileged information. It is intended
>> solely for the use of the individual to whom it is addressed and others
>> authorized to receive it. If you are not the intended recipient you are
>> notified that disclosing, copying, distributing or taking any action in
>> reliance on the contents of this information is strictly prohibited. If
>> you have received this message in error, please notify the sender
>> immediately by reply e-mail and delete completely this e-mail from your
>> system, without reproducing, distributing or retaining copies.*/
>>

On 10/21/2015 05:47 PM, Bùi Sĩ Tuấn wrote:
> Hi Markus,
> Frst at all, I'm sorry for my delay and thanks you so much for your help.
> It worked very good!
> Now I need to custom XMLSigner, then I create new module, but get a
> exception when call service
> It here:
>  javax.xml.crypto.dsig.TransformException: java.lang.ClassCastException:
> org.apache.xml.dtm.ref.DTMManagerDefault cannot be cast to
> org.apache.xml.dtm.DTMManager
>  
> Can you help me to fix it. Thanks!
> Best regards,
>  
> *Bùi Sĩ Tuấn*
>  
> *    CA Tech - Ban HTCA - Bkav Security*
> *Office:  Bkav Building - Yen Hoa New Town, Cau Giay Dist, Hanoi  *
> *Mobile: 0126.620.7292*
> 
> /*____________________________________________*/
> 
> <http://www.bkav.com.vn/>
> 
> /*Do your best, the rest will come !  */
> 
> /*Hay làm việc hết mình, những điều tốt đẹp sẽ đến với bạn ! */
> 
>  
> 
> /*Disclaimer:This e-mail and any files transmitted with it are
> confidential and may contain privileged information. It is intended
> solely for the use of the individual to whom it is addressed and others
> authorized to receive it. If you are not the intended recipient you are
> notified that disclosing, copying, distributing or taking any action in
> reliance on the contents of this information is strictly prohibited. If
> you have received this message in error, please notify the sender
> immediately by reply e-mail and delete completely this e-mail from your
> system, without reproducing, distributing or retaining copies.*/
> 
>  
>
Can't remember I have seen that one. A complete stacktrace from the
error in the server log would be helpful if you could send.

Also, what application server and Java version are you using?


Cheers,
Markus
PrimeKey Solutions

PrimeKey will exhibit as partner together with Utimaco at Cartes,
November 17-19, 2015.
Take the opportunity to meet us in Paris @ Cartes Secure Connexions,
Paris Nord, Villepinte, Hall 4, Booth 4 J 078.
More information on the conference and exhibition is to be found at
www.cartes.com.