RFR: JDK-8290532: Adjust PKCS11Exception and handle more PKCS11 error codes

Valerie Peng valeriep at openjdk.org
Wed Jul 20 22:05:02 UTC 2022


On Tue, 19 Jul 2022 13:14:17 GMT, Matthias Baesken <mbaesken at openjdk.org> wrote:

> The issue https://bugs.openjdk.org/browse/JDK-8282538 gave an example of the following PKCS11 exception (see attached jtr files of that bug) :
> 
> .... Caused by: sun.security.pkcs11.wrapper.PKCS11Exception: 0xCE534351
> 
> Unfortunately the error code 0xCE534351 is currently not in the RV/errorMap table of PKCS11Exception, That's why we get this
> hex code and no more descriptive output, this could be improved.

I don't think it's worthwhile to add deprecated error codes. As for vendor specific error codes, I think they belong in a separate collection based on which vendor/PKCS#11 library is used.

-------------

PR: https://git.openjdk.org/jdk/pull/9555



More information about the security-dev mailing list