Moving applet from Oracle jre: first tries

helpcrypto helpcrypto helpcrypto at gmail.com
Tue Oct 23 07:30:43 PDT 2012


Hi Andrew,

Using SunPkcs11 provider we detected the template its not properly
filled when creating an object using setCertificateEntry+store (ie:
import cert on a card).
So, for example, a 1024RSA cert with digitalSignature ONLY, was
converted somewhere between the call and the card in a
signature+keyEncipherment.
This is why we use PKCS11 object instead.

Should I fill another bug with a test case?

Anyway, this should work, isnt it?


On Tue, Oct 23, 2012 at 11:15 AM, Andrew Hughes <ahughes at redhat.com> wrote:
> Can I ask why you're calling the provider directly?  What am I missing here?



More information about the distro-pkg-dev mailing list