Hi Christian,
now I see! I didn't came across any CryptoVision stuff, yet . But my
standard approach would be to check whether your installation signs
using another tools using the PKCS11 interface. Can you check that?
Greetings
Andreas
> Hey,
>
> thanks for replying
>
> It is an external library. I load it with the following lines:
>
> String configName = "/Users/christian/pkcs11.cfg";
> Provider p = new sun.security.pkcs11.SunPKCS11(configName);
> Security.addProvider(p);
>
> KeyStore ks = KeyStore.getInstance("pkcs11");
> ks.load(null, "password".toCharArray());
>
> And the content from .cfg-file is the following:
>
> library = /usr/local/lib/libcvP11.dylib
> name = CryptoVision
>
>
> Am 22.03.2012 um 13:59 schrieb Andreas Kuehne:
>
>> Hi Christian,
>>
>> can you give a little more information about the PKCS11 lib you are using?
>> As far as I can see from the log that the PKCS11wrapper detected a
>> problem. But that's quite generic ...
>>
>> Greetings
>>
>> Andreas
>>> Hey @all,
>>>
>>> I tried the example "How to sign with an external signature and a standard
>>> filter" from http://itextpdf.sourceforge.net/howtosign.html with itext
>>> 5.2.0, bouncy castle 1.46 and a pkcs11 token.
>>> Every time I get the following exception:
>>>
>>> Exception in thread "main" java.security.ProviderException:
>>> sun.security.pkcs11.wrapper.PKCS11Exception: CKR_FUNCTION_FAILED
>>> at sun.security.pkcs11.P11Signature.engineSign(P11Signature.java:531)
>>> at java.security.Signature$Delegate.engineSign(Signature.java:1128)
>>> at java.security.Signature.sign(Signature.java:522)
>>> at com.itextpdf.text.pdf.PdfPKCS7.getEncodedPKCS1(PdfPKCS7.java:1210)
>>> at
>>> com.itextpdf.text.pdf.PdfSigGenericPKCS.setSignInfo(PdfSigGenericPKCS.java:113)
>>> at
>>> com.itextpdf.text.pdf.PdfSignatureAppearance.preClose(PdfSignatureAppearance.java:974)
>>> at
>>> com.itextpdf.text.pdf.PdfSignatureAppearance.preClose(PdfSignatureAppearance.java:897)
>>> at christianTest.ExternalHash.main(ExternalHash.java:45)
>>> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>>> at
>>> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>>> at
>>> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>>> at java.lang.reflect.Method.invoke(Method.java:597)
>>> at com.intellij.rt.execution.application.AppMain.main(AppMain.java:120)
>>> Caused by: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_FUNCTION_FAILED
>>> at sun.security.pkcs11.wrapper.PKCS11.C_Sign(Native Method)
>>> at sun.security.pkcs11.P11Signature.engineSign(P11Signature.java:522)
>>> ... 12 more
>>>
>>> The point where the application stops is sig.sign() in class PdfPKCS7. With
>>> older verson of itext and bc it works but now...
>>>
>>> I googled and only find articles which says that I have to load
>>> pkcs11-keystore without the provider but nothing happen.
>>> Is there anybody with a solution?
>>>
>>> Thanks in advance
>>> ------------------------------------------------------------------------------
>>> This SF email is sponsosred by:
>>> Try Windows Azure free for 90 days Click Here
>>> http://p.sf.net/sfu/sfd2d-msazure
>>> _______________________________________________
>>> iText-questions mailing list
>>> [email protected]
>>> https://lists.sourceforge.net/lists/listinfo/itext-questions
>>>
>>> iText(R) is a registered trademark of 1T3XT BVBA.
>>> Many questions posted to this list can (and will) be answered with a
>>> reference to the iText book: http://www.itextpdf.com/book/
>>> Please check the keywords list before you ask for examples:
>>> http://itextpdf.com/themes/keywords.php
>>>
>>
>> --
>> Andreas Kühne
>> phone: +49 177 293 24 97
>> mailto: [email protected]
>>
>> Trustable Ltd. Niederlassung Deutschland Ströverstr. 18 - 59427 Unna
>> Amtsgericht Hamm HRB 5868
>>
>> Directors Andreas Kühne, Heiko Veit
>>
>> Company UK Company No: 5218868 Registered in England and Wales
>>
>>
>> ------------------------------------------------------------------------------
>> This SF email is sponsosred by:
>> Try Windows Azure free for 90 days Click Here
>> http://p.sf.net/sfu/sfd2d-msazure
>> _______________________________________________
>> iText-questions mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/itext-questions
>>
>> iText(R) is a registered trademark of 1T3XT BVBA.
>> Many questions posted to this list can (and will) be answered with a
>> reference to the iText book: http://www.itextpdf.com/book/
>> Please check the keywords list before you ask for examples:
>> http://itextpdf.com/themes/keywords.php
>
> ------------------------------------------------------------------------------
> This SF email is sponsosred by:
> Try Windows Azure free for 90 days Click Here
> http://p.sf.net/sfu/sfd2d-msazure
> _______________________________________________
> iText-questions mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/itext-questions
>
> iText(R) is a registered trademark of 1T3XT BVBA.
> Many questions posted to this list can (and will) be answered with a
> reference to the iText book: http://www.itextpdf.com/book/
> Please check the keywords list before you ask for examples:
> http://itextpdf.com/themes/keywords.php
>
--
Andreas Kühne
phone: +49 177 293 24 97
mailto: [email protected]
Trustable Ltd. Niederlassung Deutschland Ströverstr. 18 - 59427 Unna
Amtsgericht Hamm HRB 5868
Directors Andreas Kühne, Heiko Veit
Company UK Company No: 5218868 Registered in England and Wales
------------------------------------------------------------------------------
This SF email is sponsosred by:
Try Windows Azure free for 90 days Click Here
http://p.sf.net/sfu/sfd2d-msazure
_______________________________________________
iText-questions mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/itext-questions
iText(R) is a registered trademark of 1T3XT BVBA.
Many questions posted to this list can (and will) be answered with a reference
to the iText book: http://www.itextpdf.com/book/
Please check the keywords list before you ask for examples:
http://itextpdf.com/themes/keywords.php
