Skip to content

SunPKCS11 fails silently when there is an error in the PKCS11 configuration file #735

Open
@jpfurminger

Description

@jpfurminger

If the SunPKCS11 provider is specified on the getInstance call a no such provider exception will be thrown. If no provider is specified on the getInstance call the first provider in the java security provider list will be used, if the customer is relying on the provider order and have placed SunPKCS11 above others with the intent of using that provider, it will not be used, another provider will be used without notifying the customer. Thus if the customer is relying on the use of Crypto cards for auditing or to meet requirements they will have a silent failure in their process. When debugging why the SunPKCS11 provider is not being used, one might specify -Djava.security.debug=sunpkcs11, there will be no output. Thus there is no indication of what the cause of the problem is.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions