SunPKCS11 doesn't work as default keystore provider for SSL connections

Question

Hi all,
I'm experiencing a problem using SunPKCS11 as a keystore provider for SSL.
Below the code that doesn't work as expected:
String pkcs11config = "name = " + "bit4id" + "\nlibrary = " + "c:/windows/system32/bit4p11.dll";
byte[] pkcs11configBytes = pkcs11config.getBytes();
ByteArrayInputStream configStream = new ByteArrayInputStream(
pkcs11configBytes);
AuthProvider pkcs11Provider = new sun.security.pkcs11.SunPKCS11(
configStream);
pkcs11Provider.setCallbackHandler(new MyGuiCallbackHandler());
if (Security.getProvider(pkcs11Provider.getName()) != null) {
Security.removeProvider(pkcs11Provider.getName());
Security.insertProviderAt(pkcs11Provider, 2);
//Security.insertProviderAt(pkcs11Provider, 1);
System.setProperty("javax.net.ssl.keyStoreProvider",
pkcs11Provider.getName());
System.setProperty("javax.net.ssl.keyStoreType",
"PKCS11");
System.setProperty("javax.net.ssl.keyStore",
"NONE");
KeyManager[] KM = {KeyStore.getInstance("PKCS11") };
SSLContext sslcont = SSLContext.getInstance("SSL");
sslcont.init(null  /*KM*/ , tmS, rng);If i use KM everything works fine, but if I try to initialize the sslcontext using the default keyStoreProvider (just replacing KM with null, and without any other modification to the code), it uses SUN instead of PKCS11, even if I set the system properties javax.net.ssl.keyStore* (as you can see in my code)
Can anyone help me?
Thank's in advance and happy new year,
Patrizio

Answer 1

That's what I tried first, but it didn't work.
I followed instructions at
http://java.sun.com/j2se/1.5.0/docs/guide/security/jsse/JSSERefGuide.html#CustomizingStores
Then I found something about dynamic provider allocation at
http://forum.java.sun.com/thread.jspa?forumID=2&threadID=5172412
so I tried to dynamically allocate SunPKCS11-bit4id as a provider.
Any suggestion?