778 questions
- Bountied 0
- Unanswered
- Frequent
- Score
- Trending
- Week
- Month
- Unanswered (my tags)
0
votes
1
answer
70
views
PKCS11 error at KeyStore.getEntry(alias, null) at Java 22 statement
I'm developing SOAP envelope signing code in a Java environment. My code running properly when I use the RSA_SHA256 signature algorithm with proper smart card based pkcs11. I have another smart card ...
1
vote
0
answers
111
views
How to execute PKCS11 with a Yubikey in Docker
When I try to execute PKCS#11 functions (with python-pkcs11 and ykcs11) inside a Docker container, it fails in decrypt with DeviceError.
This is the code:
with get_pkcs11_token().open(user_pin=pin) as ...
1
vote
1
answer
144
views
How do I digitally sign a PDF file using a physical PKI card from Python?
I'm trying to create an app where the user will fill a form and a PDF template will be filled with that info, then get digitally signed and sent via e-mail.
I have been trying to sign with PyHanko, ...
0
votes
0
answers
92
views
Net.Pkcs11Interop.Common.Pkcs11Exception: 'Method C_Sign returned CKR_DEVICE_ERROR'
I'm trying to improve my document signing process using PKCS11, but I'm having a problem. No matter how many attempts I made, I could not resolve the relevant error.
Net.Pkcs11Interop.Common....
4
votes
3
answers
243
views
Install4J v8 PKCS#11 Code Signing with Google Cloud KMS (libkmsp11.so) - Certificate Not Found
As a long-time user of Install4J, I appreciate its robust, direct implementation of code signing since version 5.1, which leverages open standards and eliminates the need for external tools like ...
1
vote
1
answer
89
views
What are session objects? Where are they stored? [closed]
The question is about where session objects are created and stored - on a token or in RAM of an application that uses a pkcs11 library?
It seems that pkcs11 specification does not differentiate them ...
0
votes
0
answers
84
views
OpenIdDict using PKCS#11 / HSM interface?
I am working on a project that uses OpenIdDict für user authentication, thus, generating and validating JWTs (Java web tokens, HTTP header "Bearer").
Currently, the prototype relies on a ...
-2
votes
1
answer
90
views
Signing XML using PKCS11, HSM token
public static byte[] DoSignXML_old(string inputfile, HSMProperties pro, ref ISession session)
{
try
{
// Load the XML document
XmlDocument XDoc = new XmlDocument();
...
2
votes
1
answer
572
views
PKCS11Exception CKR_USER_NOT_LOGGED_IN during save certificate to smart card
I would like to create and store my own root certificate on a smart card using the P-256 ECDSA encryption algorithm (secp256r1).
I managed to open access to the certificates created so far on the card ...
0
votes
0
answers
44
views
Getting SEC_ERROR_IO when authenticate to pkcs11 token?
I am writing a demo to generate and store key pair in tpm device on linux (ubuntu) by nss and pkcs#11.
I've added the tpm2-pkcs11 module to nssdb, like:
time@PF2CMPHV:~$ modutil -list -dbdir sql:/home/...
0
votes
0
answers
76
views
PKCS#11 digital signature application: error with token on JRE 1.8.0_441
I am writing an application for digital signature using PKCS#11. The Certum token works on JRE 1.8.0_333 (32-bit) and JRE 1.8.0_441 (32-bit). The CenCertum token works on JRE 1.8.0_333 (32-bit), but ...
0
votes
0
answers
230
views
Pkcs11Interop with Softhsm and Docker - Method C_Initialize returned CKR_GENERAL_ERROR
I have a dotnet8 console app that works fine with SoftHsmv2 on windows.
I then dockerised the console app with softhsm installed & intialised during docker build as below:
#noble tag for Ubuntu 24....
0
votes
1
answer
262
views
Digital signature to PDF file - pkcs11.dll not detected from the system
I want to sign a PDF file using a digital signature from a USB token (containing the private and public keys). When I try to achieve this using PKCS11.dll, the system detects an error and throws a '...
0
votes
2
answers
648
views
Pkcs#11 with Luna Cloud HSM: private key listed with cmu list is not found in Java KeyStore
Connecting to Luna Cloud HSM I am able to add a RSA private key to the HSM (either by cmu importkey or by cmu gen) and the command-line tool cmu list displays this key from the server.
I am connecting ...
1
vote
1
answer
563
views
How to delete public keys from a PKCS#11 security token in Java?
I would like modify a software which was written in Java. The software should be able to create public and private keys on a HSM and also be able to delete them. I would like to do these tasks by ...