Add 'provider' parameter to configuration

[bschwert]

In Java > 9 the provider for PKCS11 signing needs to be added to the keytool-call to resolve the jarsigner.provider.class:
-addprovider SunPKCS11

I suggest to add this to the configuration.

[netomi]

Does this maybe related to https://stackoverflow.com/questions/47412758/sunpkcs11-provider-not-found-with-keytool ?

[bschwert]

Does this maybe related to https://stackoverflow.com/questions/47412758/sunpkcs11-provider-not-found-with-keytool ?

The error message is the same, but I'm signing on a Mac and do not have any backslashes in the path. The proposed '-addprovider SunPKCS11' works in my case.

[netomi]

does your %JAVA_HOME%/conf/security/java.security file contain a line like that:

security.provider.12=SunPKCS11

[netomi]

also could you test if adding this setting to this parameter would also work:

jarsigner.javaargs=-addprovider SunPKCS11

[bschwert]

jarsigner.javaargs=-addprovider SunPKCS11

is not sufficient and leads to Unrecognized option: -addprovider error.

The java.security contains security.provider.13=SunPKCS11.