pki - 使用带有通用标准 (CC) 令牌的 signtool (Thales 5110CC)

Question

我需要使用 CC 令牌签署一些 jar 文件。令牌已定义密码和签名 PIN；但是我找不到将 PIN 传递给 jarsigner 或让它要求它的选项。

这是我得到的输出：

> "C:\Program Files (x86)\Java\jdk1.8.0_211\bin\jarsigner.exe" -verbose -keystore NONE -storetype PKCS11 -providerClass sun.security.pkcs11.SunPKCS11 -providerArg "token.config" "dummy.jar"  "te-ABBCodeSign9AAD114439RSA4096SH-19562" -J-Djava.security.debug=sunpkcs11
SunPKCS11 loading token.config
sunpkcs11: Initializing PKCS#11 library C:\Windows\system32\eTPKCS11.dll
Information for provider SunPKCS11-eToken
Library info:
  cryptokiVersion: 2.20
  manufacturerID: SafeNet, Inc.
  flags: 0
  libraryDescription: SafeNet eToken PKCS#11
  libraryVersion: 10.08
All slots: 0, 1, 2, 3, 4, 5, 6, 7
Slots with tokens: 0
Slot info for slot 0:
  slotDescription: SafeNet Token JC 0
  manufacturerID: SafeNet, Inc.
  flags: CKF_TOKEN_PRESENT | CKF_REMOVABLE_DEVICE | CKF_HW_SLOT
  hardwareVersion: 2.00
  firmwareVersion: 0.00
Token info for token in slot 0:
  label: RITM4346420
  manufacturerID: Gemalto
  model: ID Prime MD
  serialNumber: DEADBEEF
  flags: CKF_RNG | CKF_LOGIN_REQUIRED | CKF_USER_PIN_INITIALIZED | CKF_DUAL_CRYPTO_OPERATIONS | CKF_TOKEN_INITIALIZED
  ulMaxSessionCount: CK_EFFECTIVELY_INFINITE
  ulSessionCount: 0
  ulMaxRwSessionCount: CK_EFFECTIVELY_INFINITE
  ulRwSessionCount: 0
  ulMaxPinLen: 16
  ulMinPinLen: 4
  ulTotalPublicMemory: 74752
  ulFreePublicMemory: 71479
  ulTotalPrivateMemory: 74752
  ulFreePrivateMemory: 71479
  hardwareVersion: 0.00
  firmwareVersion: 0.00
  utcTime:
<list_of_mechanisms>
Enter Passphrase for keystore:
sunpkcs11: user already logged in
 updating: META-INF/MANIFEST.MF
jarsigner error: java.security.ProviderException: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_USER_NOT_LOGGED_IN

那么，有没有人想到这一点？泰雷兹的支持人员说这不是他们的问题，我有点理解他们来自哪里。

标签： pkipkcs#11jarsigner