trustedjava-support

[Trustedjava-support] Problem about TCcert

[祥子 <lic...@16...>]

Hello,
I ran TCcert on my platform with Operating System of Federa(Core 2.6) and JDK 1.4. When I ran the command: bash tccert.sh ca ca.ini. I got the following output:
generating CA certificates...
CAroot
Exception in thread "main" iaik.utils.InternalErrorException
   at iaik.PKCS.PKCS8.EncryptedPrivateKeyInfo.encrypt(Unknown Source)
   at iaik.PKCS.PKCS8.EncryptedPrivateKeyInfo.encrypt(Unknown Source)
   at iaik.PKCS.PKCS8.EncryptedPrivateKeyInfo.encrypt(Unknown Source)
   at iaik.tc.cert.Common.Common.writePrivateKeyToFile(Common.java:382)
   at iaik.tc.TCcert.generatCA(TCcert.java:247)
   at iaik.tc.TCcert.main(TCcert.java:118)
I found that ca.cert was generated but ca.pkey wasn't. I don't know what's the reason. Could you help me. Thanks.
                                                     Your's Li

Re: [Trustedjava-support] Problem about TCcert

[Martin P. <Mar...@ia...>]

Ïé×Ó wrote:
> Hello,
> I ran TCcert on my platform with Operating System of Federa(Core 2.6) and JDK 1.4. When I ran the command: bash tccert.sh ca ca.ini. I got the following output:
> generating CA certificates...
> CAroot
> Exception in thread "main" iaik.utils.InternalErrorException
>    at iaik.PKCS.PKCS8.EncryptedPrivateKeyInfo.encrypt(Unknown Source)

> I found that ca.cert was generated but ca.pkey wasn't. I don't know what's the reason. Could you help me. Thanks.

Are you sure you use the _signed_ .jar file of the IAIK-JCE library?

See the mailing list archive for thread "tccert fails" in Jan 2008, someone had the same problems because of this.

HTH,
Martin

Re: [Trustedjava-support] Problem about TCcert

[Martin P. <Mar...@ia...>]

Hi...

[please mail generic questions to the list so everybody can read
the answers in the archive]

> I don't know what's special for the signed .jar file and where to find it.
> I didn't find it in http://jce.iaik.tugraz.at.
> Could you tell me where I can get it and its special function.

The .zip you download at our site contains multiple versions of the iaik_jce.jar

You need a signed .jar to  use a JCE provider with Java 1.4 or later, see
http://jce.iaik.tugraz.at/sic/products/core_crypto_toolkits/jca_jce/features

HTH,
Martin