blocks|key|731980|text|智能卡提供商必须拥有jca提供商吗？例如，在哪里可以找到gemalto的jca提供者？|type|blockquote|depth|inlineStyleRanges|entityRanges|data|731981|不，当然不是，这完全取决于合同中的内容。您很可能会得到一个与PKCS#11兼容的库(功能或多或少取决于提供者/卡)。它很可能但可能没有完全测试，这是兼容的PKCS#11提供者，这是有点挑剔的事情是如何配置。实际的JCA提供程序的交付是非常罕见的，如果您能够得到一个实际工作的JCA提供者，那么您将是幸运的。|unstyled|731982|编辑|731983|关于标题中的不同问题:只有Sun+PKCS#11提供程序要求您配置.dll。另一些则可能需要一个，这取决于具体的实现。如果提供程序依赖于OS支持(例如，CAPI提供程序使用Windows功能)，那么它可能需要库路径上某个地方的不可配置的.dll或.so。Bouny城堡和其他纯Java提供程序通常不需要任何.dll或.so。|offset|length|style|CODE|731984|联系Gemalto，看看他们是否有JCA提供者，他们应该知道。|731985|entityMap^0|0|0|0|X|4|3A|4|3F|3|49|4|4E|3|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|R|8|@]|9|@]|A|$]]|$1|E|3|F|5|D|7|S|8|@]|9|@]|A|$]]|$1|G|3|H|5|D|7|T|8|@$I|U|J|V|K|L]|$I|W|J|X|K|L]|$I|Y|J|Z|K|L]|$I|10|J|11|K|L]|$I|12|J|13|K|L]]|9|@]|A|$]]|$1|M|3|N|5|D|7|14|8|@]|9|@]|A|$]]|$1|O|3|-4|5|D|7|15|8|@]|9|@]|A|$]]]|P|$]]

<blockquote>
 Are smartcard provider obliged to have jca provider? For example where
 can I find jca provider for gemalto ?
</blockquote>

No, of course not, that fully depends on what's in the contract. It's quite likely you get a PKCS#11 compatible library (with more or less functionality depending on the provider/card). It's likely but probably not fully tested that this is compatible with the PKCS#11 provider, which is a bit picky on how things are configured. The delivery of an actual JCA provider is a rarity, and you are lucky if you can get one that actually works.

[EDIT]

About the different question in the title: only the Sun PKCS#11 provider requires you to configure a <code>.dll</code>. Others may require one depending on the implementation. If the provider depends on OS support (e.g. the CAPI provider uses Windows functionality) it will probably require a non-configurable <code>.dll</code> or <code>.so</code> somewhere on the library path. Bouncy Castle and other pure Java providers generally don't require any <code>.dll</code> or <code>.so</code>.

Contact Gemalto to see if they have a JCA provider, they should know for sure.

blocks|key|1211142|text|您所指的PKCS#11+DLL是能够使用PKCS#11+API的应用程序与特定的加密硬件实现之间的接口。由于每个加密硬件是不同的，它需要自己的PKCS#11+DLL。因此，如果应用程序设计为通过PKCS#11与加密硬件通信，则必须调用供应商提供的DLL。所以，这并不是因为Java没有PKCS#11的本机实现，而是PKCS#11是如何被设计用来使用的。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1211143|我不认为任何硬件供应商都有义务提供JCA模块，而且afaik中的许多(如果不是大多数)只提供PKCS#11驱动程序和CryptoAPI模块(CSP)。|1211144|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

PKCS#11 DLL you are referring to is an interface between applications capable of using PKCS#11 API and the specific cryptographic hardware implementation. As each cryptographic hardware is different, it requires its own PKCS#11 DLL. Consequently, if the application is designed to communicate with cryptographic hardware via PKCS#11, it has to call the vendor-provided DLL. So it's not that Java doesn't have native implementation of PKCS#11, but just how PKCS#11 is designed to be used. 

I don't think any hardware vendor is obliged to provide a JCA module and afaik many (if not most) of them only provide PKCS#11 drivers and CryptoAPI modules (CSP).

blocks|key|1211157|text|PKCS#11参考指南是一个很好的起点。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1211158|Gemalto智能卡总是附带一个PKCS#11+DLL，不幸的是它有不同的名称取决于卡。只需查看安装时附带的文件，直到找到包含"p“和"11”的DLL+:)|1211159|找到它之后，您可以按照参考指南中给出的步骤创建指向PKCS#11库等的配置文件。如果一切顺利，您应该能够访问智能卡，如|1211160|KeyStore+ks+=+KeyStore.getInstance("PKCS11");
ks.load(null,+"pin".toCharArray());|code-block|syntax|javascript|1211161|请注意，对于生产代码，您应该按照指南中所概述的那样实现一个适当的CallbackHandler+--上面的内容只是为了快速检查一切是否正常。|style|CODE|1211162|entityMap|0|LINK|mutability|MUTABLE|url|http://docs.oracle.com/javase/6/docs/technotes/guides/security/p11guide.html^0|0|B|0|0|0|0|0|W|F|0^^$0|@$1|2|3|4|5|6|7|Y|8|@]|9|@$A|Z|B|10|1|11]]|C|$]]|$1|D|3|E|5|6|7|12|8|@]|9|@]|C|$]]|$1|F|3|G|5|6|7|13|8|@]|9|@]|C|$]]|$1|H|3|I|5|J|7|14|8|@]|9|@]|C|$K|L]]|$1|M|3|N|5|6|7|15|8|@$A|16|B|17|O|P]]|9|@]|C|$]]|$1|Q|3|-4|5|6|7|18|8|@]|9|@]|C|$]]]|R|$S|$5|T|U|V|C|$W|X]]]]

The <a href="http://docs.oracle.com/javase/6/docs/technotes/guides/security/p11guide.html" rel="noreferrer">PKCS#11 Reference Guide</a> is a good place to start.

Gemalto smart cards always ship with a PKCS#11 DLL, unfortunately it has different names depending on the card. Just look through the files that came with your installation until you find a DLL with "p" and "11" in it :)

After you located it, you may follow the steps given in the reference guide, i.e. create a configuration file that points to the PKCS#11 library etc. If everything went well, you should be able to access the smart card as simply as

<pre><code>KeyStore ks = KeyStore.getInstance("PKCS11");
ks.load(null, "pin".toCharArray());
</code></pre>

Please note that for production code you should implement a proper <code>CallbackHandler</code> as outlined in the guide, of course - the above is just for a quick check that everything works.

As I read here here:

<blockquote>
 "Unlike most Java Cryptography Architecture (JCA) providers, the Sun
 PKCS#11 Provider does not implement the cryptographic functionality
 directly; it relies on a native PKCS#11 implementation to which it
 forwards all operations. This implementation must be available as a
 .dll file in Windows or a .so file in UNIX and Linux. For example, if
 you use the Utimaco SafeGuard Smartcard Provider for Windows, the
 PKCS#11 implementation is the library pkcs201n.dll."
</blockquote>

Are smartcard provider obliged to have jca provider? For example where can I find jca provider for gemalto ?

Does Java Crypto JCA Provider really require windows dll?

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我在这里读到：“与大多数(JCA)提供程序不同，Sun PKCS#11提供程序不直接实现加密功能；它依赖于本机PKCS#11实现将所有操作转发到该实现。此实现必须可作为PKCS#11中的.dll文件或UNIX和Linux中的.so文件使用。例如，如果您在Windows中使用Utimaco SafeGuard Smart...

问提供程序真的需要windows吗？
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问提供程序真的需要windows吗？EN