PKCS#11 library issue on Java 5

Question

Hi,
I'm facing problem with PKCS#11 library name using SunPKCS11 in Java 5. My sample program runs successfully either providing only PKCS#11 library name or providing library name with absolute path in Java6.
My sample code is given below:
String str_pkcs11Config = null;
str_pkcs11Config = "name = Gemalto \n" + "library = *gclib.dll*\n" + "slot = 0";
System.out.println("Configuration : \n" + str_pkcs11Config);
java.io.ByteArrayInputStream bais = new java.io.ByteArrayInputStream(str_pkcs11Config.getBytes());
Provider obj_provider = new SunPKCS11(bais);
Security.insertProviderAt(obj_provider, 1);
KeyStore obj_keyStore = KeyStore.getInstance("PKCS11");
obj_keyStore.load(null, "password".toCharArray());
for (Enumeration list = obj_keyStore.aliases(); list.hasMoreElements(); ) {
String str_keyAlias = (String) list.nextElement();
if (obj_keyStore.isKeyEntry(str_keyAlias)) {
System.out.println("Key Alias : " + str_keyAlias);
X509Certificate[] certChain = (X509Certificate[]) obj_keyStore.getCertificateChain(str_keyAlias);
if (certChain != null) {
for (int i = 0; i < certChain.length; i++) {
System.out.println("Subject DN : " + certChain.getSubjectDN().toString());
Platform is windows XP. The above program fails with Java5 with following error:
java.security.ProviderException: Library gclib.dll does not exist
     at sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:109)
     at sun.security.pkcs11.SunPKCS11.<init>(SunPKCS11.java:80)
gclib.dll is in PATH i.e. WINDOWS/System32/
But the above program works fine on Java5 if i specify the full path for gclib.dll. Please tell me how should i get rid of this problem. I don't wana specify full path for library.
Thanx in advance.
Regards,
Israr Ahmed

Answer 1

It sounds like we are hitting the same issue.
I actually had success using the 32-bit library found here: /opt/nfast/toolkits/pkcs11/libcknfast.sl.
As you mentioned, the 64-bit library is found here: /opt/nfast/toolkits/pkcs11/libcknfast-64.so
Unfortunately, the system I was working on is in a customer test lab, so I don't have access at the moment. A few other things that I was going to try were:
1. Renaming the 64-bit library to either libcknfast.sl or libcknfast.so. Maybe Oracle makes assumption about the filename of the library?
2. Setting the environment variable LIBPATH=<directory containing library> (either in /opt/oracle/extapi/64/hsm/ncipher/1.58.42/ or /opt/nfast/toolkits/pkcs11/) and verify by running “su - <user>” where <user> is the name of the Oracle process.
3. Sifting through Oracle Configuration files to make sure that the path to the library hadn't somehow been altered to be incorrect.
Perhaps you can try these and report back? I can't access my problem system without going on-site, unfortunately.
Also, do you have the ability to log a Service Request @ https://metalink.oracle.com? I am negotiating to purchase this ability, but cannot at the moment.
Message was edited by:
cglidden