trustedjava-support

[Trustedjava-support] Exception in pki-server

[Carolin L. <car...@un...>]

Hi,

it's me again :-)

I got the PCA working and the jTPM tools too...  First of all, I tried
to obtain an EK certificate for my emulated TPM:

./jtt.sh xkms_ekcert_create --auth secret --ekfileek.cert -o opw
--service "http://10.1.1.1:20000/ek"
./jtt.sh xkms_ekcert_validate --ekfile ek.cert

That works, but if I try

./jtt.sh xkms_aik_create -a aikpw -l tybble -o opw --aikfile aik.cert
--ekfile ek.cert --keyfile aik.tpmkey --service "http://10.1.1.1:20000/aik"

this leads to the following exception on the server side:

14:17:28:698 [INFO] RequestProcessor::newInstance (123):        ===
RegisterRequest /aik ===
14:17:28:698 [INFO] RequestProcessor::doRepresentAndPending (282):     
processing RegisterRequest with ID _IFPOLZLVZQLBST7MAYL2DKZCJZ8BF45
14:17:28:699 [ERROR] HTTPHandler::run (209):    BUG? Unexpected
exception while handling message:

java.lang.NoClassDefFoundError: Could not initialize class
iaik.tc.tss.impl.java.tsp.TcContext
        at
iaik.tc.tss.impl.java.tsp.TcTssLocalCallFactory.newContextObject(Unknown
Source)
        at iaik.tc.apps.jtt.aik.PrivacyCa.<init>(PrivacyCa.java:119)
        at iaik.tc.apps.pki.server.ServerPCA.<init>(ServerPCA.java:36)
        at
iaik.tc.apps.pki.server.cmd.RPRegisterCreateAIK.process(RPRegisterCreateAIK.java:55)
        at
iaik.xkms.server.handler.AbstractHandler.handleRequest(AbstractHandler.java:122)
        at iaik.xkms.server.handler.HTTPHandler.run(HTTPHandler.java:139)

I also tried it the your PCA using the same commands I use for my local
version, but there I'm not able to get the EK certificate:

./jtt.sh xkms_ekcert_create --auth secret --ekfile tybble_ek_graz.cert
-o opw

sending RegisterRequest...
WARNING: No Version of Xerces found, please check your classpath,
defaulting to DOM LEVEL 3
...result received

Validating XKMS message signature using certificate:
  CN=IAIK OpenTC XKMS Test Responder,OU=IAIK trusted computing
labs,O=Graz University of Technology,C=AT
XKMS Result message signature is VALID.

EK create operation FAILED
===>http://www.w3.org/2002/03/xkms#Sender
===>http://www.w3.org/2002/03/xkms#NoAuthentication

Well I think, that I make some mistakes, which lead to this behaviour,
but I don't know where and what.

If somebody could give a hint, that would be great!

Thanks in advance
Carolin

Re: [Trustedjava-support] Exception in pki-server

[Martin P. <Mar...@ia...>]

Carolin Latze wrote:
> it's me again :-)

Hi Carolin, nice to meet you again... :-)

> I got the PCA working and the jTPM tools too...  First of all, I tried
> to obtain an EK certificate for my emulated TPM:
> 
> ./jtt.sh xkms_ekcert_create --auth secret --ekfileek.cert -o opw --service "http://10.1.1.1:20000/ek"
> ./jtt.sh xkms_ekcert_validate --ekfile ek.cert
> 
> That works, but if I try
> 
> ./jtt.sh xkms_aik_create -a aikpw -l tybble -o opw --aikfile aik.cert --ekfile ek.cert --keyfile aik.tpmkey --service "http://10.1.1.1:20000/aik"
> 
> this leads to the following exception on the server side:
> 14:17:28:698 [INFO] RequestProcessor::newInstance (123):        === RegisterRequest /aik ===
> 14:17:28:698 [INFO] RequestProcessor::doRepresentAndPending (282): processing RegisterRequest with ID _IFPOLZLVZQLBST7MAYL2DKZCJZ8BF45
> 14:17:28:699 [ERROR] HTTPHandler::run (209):    BUG? Unexpected exception while handling message:
> 
> java.lang.NoClassDefFoundError: Could not initialize class iaik.tc.tss.impl.java.tsp.TcContext

You are missing iaik_jtss_tsp.jar (containing iaik.tc.tss.impl.java.tsp.TcContext) on the server side?

>         at iaik.tc.tss.impl.java.tsp.TcTssLocalCallFactory.newContextObject(Unknown> Source)
>         at iaik.tc.apps.jtt.aik.PrivacyCa.<init>(PrivacyCa.java:119)
>         at iaik.tc.apps.pki.server.ServerPCA.<init>(ServerPCA.java:36)
>         at iaik.tc.apps.pki.server.cmd.RPRegisterCreateAIK.process(RPRegisterCreateAIK.java:55)
>         at iaik.xkms.server.handler.AbstractHandler.handleRequest(AbstractHandler.java:122)
>         at iaik.xkms.server.handler.HTTPHandler.run(HTTPHandler.java:139)


> I also tried it the your PCA using the same commands I use for my local
> version, but there I'm not able to get the EK certificate:
> 
> ./jtt.sh xkms_ekcert_create --auth secret --ekfile tybble_ek_graz.cert -o opw

required --auth available by personal mail


HTH,
Martin

Re: [Trustedjava-support] Exception in pki-server

[Carolin L. <car...@un...>]

Hi Martin,

I'm sorry... I ignored this mail...

But I changed the error now :-) Now, it is

java.lang.NoClassDefFoundError: iaik/tc/tss/impl/java/tcs/TcTcsProperties
        at
iaik.tc.tss.impl.java.tsp.internal.TcTspProperties.getTspProperties(Unknown
Source)
        at
iaik.tc.tss.impl.java.tsp.internal.TcTspProperties.getInstance(Unknown
Source)
        at iaik.tc.tss.impl.java.tsp.TcContext.<clinit>(Unknown Source)
        at
iaik.tc.tss.impl.java.tsp.TcTssLocalCallFactory.newContextObject(Unknown
Source)
        at iaik.tc.apps.jtt.aik.PrivacyCa.<init>(PrivacyCa.java:119)
        at iaik.tc.apps.pki.server.ServerPCA.<init>(ServerPCA.java:36)
        at
iaik.tc.apps.pki.server.cmd.RPRegisterCreateAIK.process(RPRegisterCreateAIK.java:55)
        at
iaik.xkms.server.handler.AbstractHandler.handleRequest(AbstractHandler.java:122)
        at iaik.xkms.server.handler.HTTPHandler.run(HTTPHandler.java:139)

It switched from tsp to tcs... So I tried to give him this jar and added
it to the classpath... but this error remains.

In pca/lib, I have the following jars:

iaik_jce.jar      
iaik_jtss_tcs.jar 
iaik_tccert.jar 
iaik_xkms_pca.jar 
iaik_jtpmtools.jar 
iaik_jtss_tsp.jar 
iaik_xkms.jar  
iaik_xsect.jar
jaxb/activation.jar 
jaxb/jaxb-api.jar 
jaxb/jaxb-impl.jar 
jaxb/jsr173_1.0_api.jar

Any ideas? (Sorry for so many (stupid) questions, but Java is one of the
languages, I'm not used to)

Regards
Carolin


Martin Pirker wrote:
> Carolin Latze wrote:
>   
>> it's me again :-)
>>     
>
> Hi Carolin, nice to meet you again... :-)
>
>   
>> I got the PCA working and the jTPM tools too...  First of all, I tried
>> to obtain an EK certificate for my emulated TPM:
>>
>> ./jtt.sh xkms_ekcert_create --auth secret --ekfileek.cert -o opw --service "http://10.1.1.1:20000/ek"
>> ./jtt.sh xkms_ekcert_validate --ekfile ek.cert
>>
>> That works, but if I try
>>
>> ./jtt.sh xkms_aik_create -a aikpw -l tybble -o opw --aikfile aik.cert --ekfile ek.cert --keyfile aik.tpmkey --service "http://10.1.1.1:20000/aik"
>>
>> this leads to the following exception on the server side:
>> 14:17:28:698 [INFO] RequestProcessor::newInstance (123):        === RegisterRequest /aik ===
>> 14:17:28:698 [INFO] RequestProcessor::doRepresentAndPending (282): processing RegisterRequest with ID _IFPOLZLVZQLBST7MAYL2DKZCJZ8BF45
>> 14:17:28:699 [ERROR] HTTPHandler::run (209):    BUG? Unexpected exception while handling message:
>>
>> java.lang.NoClassDefFoundError: Could not initialize class iaik.tc.tss.impl.java.tsp.TcContext
>>     
>
> You are missing iaik_jtss_tsp.jar (containing iaik.tc.tss.impl.java.tsp.TcContext) on the server side?
>
>   
>>         at iaik.tc.tss.impl.java.tsp.TcTssLocalCallFactory.newContextObject(Unknown> Source)
>>         at iaik.tc.apps.jtt.aik.PrivacyCa.<init>(PrivacyCa.java:119)
>>         at iaik.tc.apps.pki.server.ServerPCA.<init>(ServerPCA.java:36)
>>         at iaik.tc.apps.pki.server.cmd.RPRegisterCreateAIK.process(RPRegisterCreateAIK.java:55)
>>         at iaik.xkms.server.handler.AbstractHandler.handleRequest(AbstractHandler.java:122)
>>         at iaik.xkms.server.handler.HTTPHandler.run(HTTPHandler.java:139)
>>     
>
>
>   
>> I also tried it the your PCA using the same commands I use for my local
>> version, but there I'm not able to get the EK certificate:
>>
>> ./jtt.sh xkms_ekcert_create --auth secret --ekfile tybble_ek_graz.cert -o opw
>>     
>
> required --auth available by personal mail
>
>
> HTH,
> Martin
>   

-- 
Carolin Latze
Research Assistant

Department of Computer Science
Boulevard de Pérolles 90
CH-1700 Fribourg

phone: +41 26 300 83 30