Christian Rank | 31 Jan 11:48
Picon
Favicon

C_FindObjectsInit does not always find certificate on token when called from Java application

Hello,

when dealing with accessing tokens from a Java application via OpenSC, I
noticed that the Sun/ORACLE PKCS11-Java implementation is not always
able to retrieve the certificate chain (stored on the token) for a key.

The objects on my token (Feitian PKI card) are:
> Private RSA Key [Private Key]
> 	Object Flags   : [0x3], private, modifiable
> 	Usage          : [0x12E], decrypt, sign, signRecover, unwrap, derive
> 	Access Flags   : [0x0]
> 	ModLength      : 2048
> 	Key ref        : 1 (0x1)
> 	Native         : yes
> 	Path           : 3f005015
> 	Auth ID        : 01
> 	ID             : 692b93bfd7d6f6dd86832f81d1b44adbe266f74d
> 	GUID           : {692b93bf-d7d6-f6dd-8683-2f81d1b44adb}
> 
> X.509 Certificate [/C=DE/L=Entenhausen/O=Dagobert Duck
Enterprises/OU=Geldspeicher/CN=Dagobert Duck]
> 	Object Flags   : [0x2], modifiable
> 	Authority      : no
> 	Path           : 3f0050153100
> 	ID             : 692b93bfd7d6f6dd86832f81d1b44adbe266f74d
> 	GUID           : {692b93bf-d7d6-f6dd-8683-2f81d1b44adb}
> 	Encoded serial : 02 01 03
> 
> X.509 Certificate [/C=DE/O=Deutsche Zertifizierungsstelle/OU=PKI der Deutschen
Zertifizierungsstelle/CN=Deutsche Zertifizierungsstelle Root CA]
(Continue reading)


Gmane