the private key is not exportable, and suppose i know the alias is:
aaaaaaaaaa

can you provide an example that proved how to use jcapi to generate the signature with CallbackforPIN module?

import java.security.*;

import java.security.interfaces.RSAPrivateKey;



import com.pheox.jcapi.*;



public class SignTest

{

    static public void main(String[] args)

    {

        try {

            Security.addProvider(new JCAPIProvider());



            //Init JCAPI key store.

            KeyStore ks = KeyStore.getInstance("msks", "JCAPI");

            ks.load(null, null);



            //Sign data using JCAPI.

            byte[] dataToSign = {1,2,3,4,5};

            Signature s = Signature.getInstance("SHA1withRSA", "JCAPI");

            //The alias below will not work since a JCAPI alias is built

            //from <system store name>|<base 64 encoded hash value of certificate>

            //For example: MY|dTrrUZrdV/ULrLFH7iqLdFUKNOA=

            String alias = "aaaaaaaaaa";

            RSAPrivateKey privateKey = (RSAPrivateKey)ks.getKey(alias, null);

            if(privateKey == null)

                throw new Exception("No private key found for given alias.");

            s.initSign(privateKey);

            s.update(dataToSign);

            byte[] signature = s.sign();



            System.out.println("Signature = " + new String(signature));

        } catch(Throwable t) {

            t.printStackTrace();

            System.err.println("Test prog failed. Exiting...");

        }

    }

}

Anonymous wrote:tommy, I guess the answer, i should provider a csp provider to JCAPI, right?

And when i run the example, ...., JCAPI get the private key and a pin-code prompt windows open(vendor's impl), then i insert the usb-key, type the pin-password, and the exception throws:

Exception in thread "main" com.pheox.jcapi.JCAPIJNIRuntimeException: Exception raised in JCAPI.DLL:
JCAPIKeyStore_getKey() - Could not get private key blob length.
Invalid type specified.
at com.pheox.jcapi.CoreKeyStoreJNI.getKey(Native Method)

What should i do?

JCAPIProperties.getInstance().setPrivateKeyExportable(true);