You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@santuario.apache.org by bu...@apache.org on 2006/08/29 12:27:57 UTC
DO NOT REPLY [Bug 40343] New: - sun.security.pkcs11.P11Key$P11PrivateKey not accepted
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=40343>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=40343
Summary: sun.security.pkcs11.P11Key$P11PrivateKey not accepted
Product: Security
Version: unspecified
Platform: Other
OS/Version: Linux
Status: NEW
Severity: regression
Priority: P2
Component: Signature
AssignedTo: security-dev@xml.apache.org
ReportedBy: info@frankcornelis.be
When I sign via my eID card using xmlsec 1.3.0 everything works.
When I perform the same via xmlsec 1.4.Beta2 I get the following exception:
org.apache.xml.security.signature.XMLSignatureException: Private keys must be
instance of RSAPrivate(Crt)Key or have PKCS#8 encoding
Original Exception was java.security.InvalidKeyException: Private keys must be
instance of RSAPrivate(Crt)Key or have PKCS#8 encoding
at
org.apache.xml.security.algorithms.implementations.SignatureBaseRSA.engineInitSign(SignatureBaseRSA.java:172)
at
org.apache.xml.security.algorithms.SignatureAlgorithm.initSign(SignatureAlgorithm.java:249)
at org.apache.xml.security.signature.XMLSignature.sign(XMLSignature.java:488)
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
DO NOT REPLY [Bug 40343] - sun.security.pkcs11.P11Key$P11PrivateKey not accepted
Posted by bu...@apache.org.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=40343>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=40343
------- Additional Comments From sean.mullan@sun.com 2006-08-30 19:40 -------
(In reply to comment #0)
> When I sign via my eID card using xmlsec 1.3.0 everything works.
> When I perform the same via xmlsec 1.4.Beta2 I get the following exception:
>
> org.apache.xml.security.signature.XMLSignatureException: Private keys must be
> instance of RSAPrivate(Crt)Key or have PKCS#8 encoding
> Original Exception was java.security.InvalidKeyException: Private keys must be
> instance of RSAPrivate(Crt)Key or have PKCS#8 encoding
This exception usually indicates that your PKCS#11 token Key object has been
passed to a Java Signature impl. that does not understand it (i.e. - it is not a
PKCS#11 based provider). This could happen if you passed a non-PKCS#11 provider
name explicitly to the Signature.getInstance call. Hmm, by any chance have
you called the JCEMapper.setProviderId method in your code? How are your
providers configured in the JRE/lib/security/java.security file?
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
DO NOT REPLY [Bug 40343] - sun.security.pkcs11.P11Key$P11PrivateKey not accepted
Posted by bu...@apache.org.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=40343>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=40343
sean.mullan@sun.com changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |NEEDINFO
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
DO NOT REPLY [Bug 40343] - sun.security.pkcs11.P11Key$P11PrivateKey not accepted
Posted by bu...@apache.org.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=40343>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=40343
sean.mullan@sun.com changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEEDINFO |RESOLVED
Resolution| |WORKSFORME
------- Additional Comments From sean.mullan@sun.com 2006-09-14 18:40 -------
Closing this out as WORKSFORME since we still need more info
to analyze/reproduce. Can reopen later if we can reproduce it.
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
DO NOT REPLY [Bug 40343] - sun.security.pkcs11.P11Key$P11PrivateKey not accepted
Posted by bu...@apache.org.
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=40343>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=40343
------- Additional Comments From raul-info@r-bg.com 2006-08-30 10:12 -------
Hello
It seems very weird, I need more information. Can you send me keystore and a
compilable example so I can reproduce it.
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.