Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SunPKCS11 fails silently when there is an error in the PKCS11 configuration file #735

Open
jpfurminger opened this issue Jan 23, 2024 · 0 comments

Comments

@jpfurminger
Copy link

If the SunPKCS11 provider is specified on the getInstance call a no such provider exception will be thrown. If no provider is specified on the getInstance call the first provider in the java security provider list will be used, if the customer is relying on the provider order and have placed SunPKCS11 above others with the intent of using that provider, it will not be used, another provider will be used without notifying the customer. Thus if the customer is relying on the use of Crypto cards for auditing or to meet requirements they will have a silent failure in their process. When debugging why the SunPKCS11 provider is not being used, one might specify -Djava.security.debug=sunpkcs11, there will be no output. Thus there is no indication of what the cause of the problem is.

tajila pushed a commit to tajila/openj9-openjdk-jdk that referenced this issue Mar 27, 2024
Fixes return value type in a JNI method
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant