[Trustedjava-support] Exception in pki-server

[Carolin L. <car...@un...>]

Hi,

it's me again :-)

I got the PCA working and the jTPM tools too...  First of all, I tried
to obtain an EK certificate for my emulated TPM:

./jtt.sh xkms_ekcert_create --auth secret --ekfileek.cert -o opw
--service "http://10.1.1.1:20000/ek"
./jtt.sh xkms_ekcert_validate --ekfile ek.cert

That works, but if I try

./jtt.sh xkms_aik_create -a aikpw -l tybble -o opw --aikfile aik.cert
--ekfile ek.cert --keyfile aik.tpmkey --service "http://10.1.1.1:20000/aik"

this leads to the following exception on the server side:

14:17:28:698 [INFO] RequestProcessor::newInstance (123):        ===
RegisterRequest /aik ===
14:17:28:698 [INFO] RequestProcessor::doRepresentAndPending (282):     
processing RegisterRequest with ID _IFPOLZLVZQLBST7MAYL2DKZCJZ8BF45
14:17:28:699 [ERROR] HTTPHandler::run (209):    BUG? Unexpected
exception while handling message:

java.lang.NoClassDefFoundError: Could not initialize class
iaik.tc.tss.impl.java.tsp.TcContext
        at
iaik.tc.tss.impl.java.tsp.TcTssLocalCallFactory.newContextObject(Unknown
Source)
        at iaik.tc.apps.jtt.aik.PrivacyCa.<init>(PrivacyCa.java:119)
        at iaik.tc.apps.pki.server.ServerPCA.<init>(ServerPCA.java:36)
        at
iaik.tc.apps.pki.server.cmd.RPRegisterCreateAIK.process(RPRegisterCreateAIK.java:55)
        at
iaik.xkms.server.handler.AbstractHandler.handleRequest(AbstractHandler.java:122)
        at iaik.xkms.server.handler.HTTPHandler.run(HTTPHandler.java:139)

I also tried it the your PCA using the same commands I use for my local
version, but there I'm not able to get the EK certificate:

./jtt.sh xkms_ekcert_create --auth secret --ekfile tybble_ek_graz.cert
-o opw

sending RegisterRequest...
WARNING: No Version of Xerces found, please check your classpath,
defaulting to DOM LEVEL 3
...result received

Validating XKMS message signature using certificate:
  CN=IAIK OpenTC XKMS Test Responder,OU=IAIK trusted computing
labs,O=Graz University of Technology,C=AT
XKMS Result message signature is VALID.

EK create operation FAILED
===>http://www.w3.org/2002/03/xkms#Sender
===>http://www.w3.org/2002/03/xkms#NoAuthentication

Well I think, that I make some mistakes, which lead to this behaviour,
but I don't know where and what.

If somebody could give a hint, that would be great!

Thanks in advance
Carolin