Using pkcs11 provider

Question

hi to all
i'm trying to develope an applet to sign documents using my smart card. This card use incryptoki2.dll driver.
When i try to execute this code:
Signature signatureAlgorithm =
         Signature.getInstance(DIGITAL_SIGNATURE_ALGORITHM_NAME);
signatureAlgorithm.initSign(aPrivateKey);
-> signatureAlgorithm.update(aDocument);where DIGITAL_SIGNATURE_ALGORITHM_NAME = SHA1withRSA, I get a SignatureException. The error message i CKR_FUNCTION_NOT_SUPPORTED. I can't understand if the problem is located in the incryptoki2.dll, that not support such function, or depends on my code
Could someone help me?

Answer 1

You will get the
CKR_FUNCTION_NOT_SUPPORTED
if you do not login to the token.
Please see the following thread.
http://forum.java.sun.com/thread.jspa?threadID=572349
Can you use Lolo's code to sign ?
I am having some trouble creating a PKCS7 MIME message but this problem is different.
That forum is at
http://forum.java.sun.com/thread.jspa?threadID=751296
If you do not know your certificates Alias try the following
java.security.Provider oProvider = new sun.security.pkcs11.SunPKCS11(configName);
Security.addProvider(oProvider);
KeyStore oKeyStoreToken = KeyStore.getInstance("PKCS11");
java.security.Key oPrivateKey = null;
java.security.cert.Certificate oPublicCertificate = null;
oKeyStoreToken.load(null, "1234".toCharArray());
System.out.println("Loaded");
for(Enumeration oEnum = oKeyStoreToken.aliases() ; oEnum.hasMoreElements();){
  String sAlias = (String) oEnum.nextElement();
  System.out.println("Alias : " + sAlias);
}If you have any questions just post another reply :)
I will post code to create a SMIME ASAFIO (As soon as I figure it out ;) )
I can do it at the moment with a key from disk but I am having some trouble using the SMIME generators from the Bouncy Castle provider with keys from the sun PKCS11 provider.
** Phill **