Skip to content
This repository has been archived by the owner on Sep 3, 2024. It is now read-only.

Can't connect Fortify with token on VM #559

Open
mariachini opened this issue Oct 3, 2023 · 0 comments
Open

Can't connect Fortify with token on VM #559

mariachini opened this issue Oct 3, 2023 · 0 comments

Comments

@mariachini
Copy link

I have a certificate issued by GlobalSign, we are trying to apply it according to the procedure described here https://support.globalsign.com/code-signing/how-install-certificate-using-fortify, unfortunately, we get an error every time.

The configuration of our environment is as follows:
We have a physical server on which VMware ESX is installed. There is a USB token connected to the server, in the settings of the Windows virtual machine we have enabled redirection of this USB token so that it is visible from the VM.

Logs:
{"level":"info","message":"Starting","source":"application","time":"2023-10-03T11:22:19.151Z","timestamp":"2023-10-03T11:22:19.155Z"} {"level":"info","message":"Application info","source":"application","timestamp":"2023-10-03T11:22:19.156Z","version":"1.8.4","versionChrome":"91.0.4472.164","versionElectron":"13.6.9","versionNode":"14.16.0"} {"arch":"x64","cpus":4,"freemem":14160547840,"level":"info","message":"System info","platform":"win32","source":"system","timestamp":"2023-10-03T11:22:19.156Z","totalmem":17178841088,"type":"Windows_NT","version":"10.0.17763"} {"height":928,"level":"info","message":"Screen size","source":"system","timestamp":"2023-10-03T11:22:19.185Z","width":2132} {"lang":"en","level":"info","message":"Change language","source":"l10n","timestamp":"2023-10-03T11:22:19.185Z"} {"level":"info","message":"Get certificate status","source":"ssl-service","status":"valid","timestamp":"2023-10-03T11:22:19.208Z"} {"command":"\"C:\\Program Files\\Fortify\\resources\\certutil.exe\" -L -d \"sql:C:\\Users\\Signer\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\d8wt6zyp.default-release\" -h \"all\"","level":"info","message":"Run certutil command","shell":"cmd","source":"nss","timestamp":"2023-10-03T11:22:19.209Z"} {"command":"\"C:\\Program Files\\Fortify\\resources\\certutil.exe\" -L -d \"sql:C:\\Users\\Signer\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\d8wt6zyp.default-release\" -h \"all\"","level":"info","message":"Run certutil command","shell":"cmd","source":"nss","timestamp":"2023-10-03T11:22:20.005Z"} {"command":"\"C:\\Program Files\\Fortify\\resources\\certutil.exe\" -A -d \"sql:C:\\Users\\Signer\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\d8wt6zyp.default-release\" -i \"C:\\ProgramData\\Fortify\\ca.pem\" -n \"Fortify Local CA\" -t \"CT,c,\"","level":"info","message":"Run certutil command","shell":"cmd","source":"nss","timestamp":"2023-10-03T11:22:20.727Z"} {"certName":"Fortify Local CA","level":"info","message":"SSL certificate added to Mozilla Firefox profile","profile":"C:\\Users\\Signer\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\d8wt6zyp.default-release","source":"ssl-installer","timestamp":"2023-10-03T11:22:21.335Z"} {"command":"\"C:\\Program Files\\Fortify\\resources\\certutil.exe\" -L -d \"sql:C:\\Users\\Signer\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\n6mkx656.default\" -h \"all\"","level":"info","message":"Run certutil command","shell":"cmd","source":"nss","timestamp":"2023-10-03T11:22:21.335Z"} {"error":"Command failed: \"C:\\Program Files\\Fortify\\resources\\certutil.exe\" -L -d \"sql:C:\\Users\\Signer\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\n6mkx656.default\" -h \"all\"\nC:\\Program Files\\Fortify\\resources\\certutil.exe: function failed: SEC_ERROR_BAD_DATABASE: security library: bad database.\r\n","level":"error","message":"SSL install error","source":"ssl-installer","stack":"Error: Command failed: \"C:\\Program Files\\Fortify\\resources\\certutil.exe\" -L -d \"sql:C:\\Users\\Signer\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\n6mkx656.default\" -h \"all\"\nC:\\Program Files\\Fortify\\resources\\certutil.exe: function failed: SEC_ERROR_BAD_DATABASE: security library: bad database.\r\n\n at checkExecSyncError (child_process.js:625:11)\n at execSync (child_process.js:661:15)\n at electron/js2c/asar_bundle.js:5:12288\n at t.NssCertUtils.run (C:\\Program Files\\Fortify\\resources\\app.asar\\out\\main.js:329:186279)\n at t.NssCertUtils.list (C:\\Program Files\\Fortify\\resources\\app.asar\\out\\main.js:329:185715)\n at t.NssCertUtils.exists (C:\\Program Files\\Fortify\\resources\\app.asar\\out\\main.js:329:185456)\n at t.SslCertInstaller.installFirefox (C:\\Program Files\\Fortify\\resources\\app.asar\\out\\main.js:329:183506)\n at g.run (C:\\Program Files\\Fortify\\resources\\app.asar\\out\\main.js:329:178972)\n at t.Server.init (C:\\Program Files\\Fortify\\resources\\app.asar\\out\\main.js:103:168129)\n at b.initServer (C:\\Program Files\\Fortify\\resources\\app.asar\\out\\main.js:244:90441)","timestamp":"2023-10-03T11:22:21.431Z"} {"error":"Error: Command failed: taskkill /F /IM firefox.exe\nERROR: The process \"firefox.exe\" not found.\r\n","level":"warn","message":"The error has occurred during the Firefox browser restarting","source":"firefox","timestamp":"2023-10-03T11:22:21.497Z"} {"level":"info","message":"SSL certificate is loaded","source":"server","timestamp":"2023-10-03T11:22:21.498Z"} {"level":"info","message":"Comparing current version of card.json file with remote","source":"server","timestamp":"2023-10-03T11:22:21.498Z"} {"level":"info","message":"card.json has the latest version","source":"server","timestamp":"2023-10-03T11:22:21.701Z","version":"1.1.13"} {"level":"info","message":"Start PCSC listening","source":"pcsc","timestamp":"2023-10-03T11:22:21.748Z"} {"level":"info","message":"Check for new update","source":"update","timestamp":"2023-10-03T11:22:21.750Z"} {"duration":2607,"level":"info","message":"Loaded","source":"application","time":"2023-10-03T11:22:21.758Z","timestamp":"2023-10-03T11:22:21.758Z"} {"address":"127.0.0.1:31337","level":"info","message":"Started","source":"server","timestamp":"2023-10-03T11:22:21.760Z"} {"cryptokiVersion":{"major":2,"minor":30},"firmwareVersion":{"major":0,"minor":1},"level":"info","library":"C:\\Program Files\\Fortify\\pvpkcs11.dll","libraryVersion":{"major":1,"minor":1},"manufacturerId":"Module","message":"PKCS#11 library information","source":"provider","timestamp":"2023-10-03T11:22:21.782Z"} {"id":"6601ae77d7740447d864ac4514586925d26d02bd","level":"info","library":"C:\\Program Files\\Fortify\\pvpkcs11.dll","message":"Crypto provider was added to the list","name":"Windows CryptoAPI","reader":"Windows CryptoAPI","source":"provider","timestamp":"2023-10-03T11:22:21.783Z"} {"level":"info","message":"Use default TemplateBuilder","source":"provider","timestamp":"2023-10-03T11:22:21.789Z"} {"cryptokiVersion":{"major":2,"minor":20},"firmwareVersion":{"major":0,"minor":0},"level":"info","library":"C:\\Program Files\\Fortify\\softokn3.dll","libraryVersion":{"major":3,"minor":41},"manufacturerId":"Mozilla Foundation","message":"PKCS#11 library information","source":"provider","timestamp":"2023-10-03T11:22:21.789Z"} {"id":"a7370eae6951997646c5bfedf8f3df0d8b8b698d","level":"info","library":"C:\\Program Files\\Fortify\\softokn3.dll","message":"Crypto provider was added to the list","name":"NSS Certificate DB","reader":"NSS User Private Key and Certificate Services","source":"provider","timestamp":"2023-10-03T11:22:21.789Z"} {"level":"info","message":"Start PCSC listening","source":"pcsc","timestamp":"2023-10-03T11:22:21.799Z"} {"level":"info","message":"Initialize new reader","reader":"SafeNet Token JC 0","source":"pcsc","timestamp":"2023-10-03T11:22:21.802Z"} {"level":"info","message":"Initialize new reader","reader":"SafeNet Token JC 0","source":"pcsc","timestamp":"2023-10-03T11:22:21.803Z"} {"atr":"3bff9600008131fe4380318065b0855956fb12017882900088","level":"info","message":"New token was added to the reader","reader":"SafeNet Token JC 0","source":"pcsc","timestamp":"2023-10-03T11:22:21.804Z"} {"atr":"3bff9600008131fe4380318065b0855956fb12017882900088","level":"info","message":"New token was added to the reader","reader":"SafeNet Token JC 0","source":"pcsc","timestamp":"2023-10-03T11:22:21.805Z"} {"level":"info","message":"New version wasn't found","source":"update","timestamp":"2023-10-03T11:22:21.900Z"} {"atr":"3bff9600008131fe4380318065b0855956fb12017882900088","level":"info","message":"Token was added to the reader","name":"SafeNet 5110 (940 B) ","reader":"SafeNet Token JC 0","source":"provider","timestamp":"2023-10-03T11:22:24.017Z"} {"level":"info","library":"C:\\Windows\\System32\\eTPKCS11.dll","message":"Loading PKCS#11 library","source":"provider","timestamp":"2023-10-03T11:22:24.017Z"} {"level":"info","message":"Looking for slot","slots":1,"source":"provider","timestamp":"2023-10-03T11:22:25.098Z"} {"level":"info","message":"Use ConfigTemplateBuilder","source":"provider","template":{"copy":{"private":{"extractable":false,"sensitive":true,"token":true}}},"timestamp":"2023-10-03T11:22:25.368Z"} {"cryptokiVersion":{"major":2,"minor":20},"firmwareVersion":{"major":0,"minor":0},"level":"info","library":"C:\\Windows\\System32\\eTPKCS11.dll","libraryVersion":{"major":10,"minor":8},"manufacturerId":"SafeNet, Inc.","message":"PKCS#11 library information","source":"provider","timestamp":"2023-10-03T11:22:25.437Z"} {"id":"c03988a13a352cf41f9cfdb2dc9ddbfc679447ff79f3c395cfc89c125bd33c4b","level":"info","library":"C:\\Windows\\System32\\eTPKCS11.dll","message":"Crypto provider was added to the list","name":"SafeNet 5110 (940 B) ","reader":"SafeNet Token JC 0","source":"provider","timestamp":"2023-10-03T11:22:25.437Z"} {"added":1,"level":"info","message":"Amount of tokens was changed","removed":0,"source":"provider-service","timestamp":"2023-10-03T11:22:25.438Z"} {"level":"info","message":"Create a new connection","origin":"https://system.globalsign.com","source":"server","timestamp":"2023-10-03T11:22:48.618Z"} {"level":"info","message":"Push session to stack","origin":"https://system.globalsign.com","source":"server","timestamp":"2023-10-03T11:22:48.618Z"} {"level":"warn","message":"Cannot parse MessageSignedProtocol","source":"server","timestamp":"2023-10-03T11:22:48.637Z"} {"authorized":true,"level":"info","message":"Initialize secure session","origin":"https://system.globalsign.com","session":"a9bc7a9e704224a7b6071470c09617fb8937d207cfbedecfc80133d058347678","source":"server","timestamp":"2023-10-03T11:22:48.657Z"} {"action":"server/isLoggedIn","level":"info","message":"Run action","session":"a9bc7a9e704224a7b6071470c09617fb8937d207cfbedecfc80133d058347678","source":"server","timestamp":"2023-10-03T11:22:48.662Z"} {"action":"provider/action/info","level":"info","message":"Run action","session":"a9bc7a9e704224a7b6071470c09617fb8937d207cfbedecfc80133d058347678","source":"server","timestamp":"2023-10-03T11:22:48.678Z"} {"action":"provider/action/getCrypto","level":"info","message":"Run action","session":"a9bc7a9e704224a7b6071470c09617fb8937d207cfbedecfc80133d058347678","source":"server","timestamp":"2023-10-03T11:22:52.916Z"} {"action":"crypto/isLoggedIn","level":"info","message":"Run action","provider":"c03988a13a352cf41f9cfdb2dc9ddbfc679447ff79f3c395cfc89c125bd33c4b","session":"a9bc7a9e704224a7b6071470c09617fb8937d207cfbedecfc80133d058347678","source":"server","timestamp":"2023-10-03T11:22:52.928Z"} {"crypto":"SafeNet 5110 (940 B) ","level":"info","message":"crypto/isLoggedIn","source":"server-api","timestamp":"2023-10-03T11:22:52.929Z"} {"action":"crypto/login","level":"info","message":"Run action","provider":"c03988a13a352cf41f9cfdb2dc9ddbfc679447ff79f3c395cfc89c125bd33c4b","session":"a9bc7a9e704224a7b6071470c09617fb8937d207cfbedecfc80133d058347678","source":"server","timestamp":"2023-10-03T11:22:52.941Z"} {"crypto":"SafeNet 5110 (940 B) ","level":"info","message":"crypto/login","source":"server-api","timestamp":"2023-10-03T11:22:52.942Z"} {"level":"info","message":"Create window","name":"p11-pin","source":"windows","timestamp":"2023-10-03T11:22:53.035Z"} {"level":"info","message":"Close window","name":"p11-pin","source":"windows","timestamp":"2023-10-03T11:23:02.281Z"} {"action":"crypto/subtle/generateKey","level":"info","message":"Run action","provider":"c03988a13a352cf41f9cfdb2dc9ddbfc679447ff79f3c395cfc89c125bd33c4b","session":"a9bc7a9e704224a7b6071470c09617fb8937d207cfbedecfc80133d058347678","source":"server","timestamp":"2023-10-03T11:23:02.307Z"} {"algorithm":{"hash":"SHA-256","name":"RSASSA-PKCS1-V1_5","sensitive":false,"token":false},"crypto":"SafeNet 5110 (940 B) ","extractable":false,"kyUsages":["sign","verify"],"level":"info","message":"generateKey","source":"server-api","timestamp":"2023-10-03T11:23:02.313Z"} {"action":"crypto/subtle/exportKey","level":"info","message":"Run action","provider":"c03988a13a352cf41f9cfdb2dc9ddbfc679447ff79f3c395cfc89c125bd33c4b","session":"a9bc7a9e704224a7b6071470c09617fb8937d207cfbedecfc80133d058347678","source":"server","timestamp":"2023-10-03T11:23:03.503Z"} {"crypto":"SafeNet 5110 (940 B) ","format":"spki","key":{"algorithm":{"hash":"SHA-256","label":"RSA","name":"RSASSA-PKCS1-v1_5","sensitive":false,"token":false},"extractable":true,"id":"7fb03a185717832eb00db0df672ca7f0","type":"public","usages":["encrypt","verify","wrapKey"]},"level":"info","message":"exportKey","source":"server-api","timestamp":"2023-10-03T11:23:03.505Z"} {"action":"crypto/subtle/sign","level":"info","message":"Run action","provider":"c03988a13a352cf41f9cfdb2dc9ddbfc679447ff79f3c395cfc89c125bd33c4b","session":"a9bc7a9e704224a7b6071470c09617fb8937d207cfbedecfc80133d058347678","source":"server","timestamp":"2023-10-03T11:23:03.521Z"} {"algorithm":{"hash":"SHA-256","name":"RSASSA-PKCS1-v1_5"},"crypto":"SafeNet 5110 (940 B) ","key":{"algorithm":{"hash":"SHA-256","label":"RSA","name":"RSASSA-PKCS1-v1_5","sensitive":false,"token":false},"extractable":false,"id":"7fb03a185717832eb00db0df672ca7f0","type":"private","usages":["decrypt","sign","unwrapKey"]},"level":"info","message":"sign","source":"server-api","timestamp":"2023-10-03T11:23:03.546Z"} {"action":"crypto/certificateStorage/import","level":"info","message":"Run action","provider":"c03988a13a352cf41f9cfdb2dc9ddbfc679447ff79f3c395cfc89c125bd33c4b","session":"a9bc7a9e704224a7b6071470c09617fb8937d207cfbedecfc80133d058347678","source":"server","timestamp":"2023-10-03T11:23:03.619Z"} {"algorithm":{"hash":"SHA-256","name":"RSASSA-PKCS1-V1_5"},"crypto":"SafeNet 5110 (940 B) ","format":"raw","keyUsages":["sign","verify"],"level":"info","message":"certStorage/importCert","source":"server-api","timestamp":"2023-10-03T11:23:03.620Z"} {"action":"crypto/keyStorage/setItem","level":"info","message":"Run action","provider":"c03988a13a352cf41f9cfdb2dc9ddbfc679447ff79f3c395cfc89c125bd33c4b","session":"a9bc7a9e704224a7b6071470c09617fb8937d207cfbedecfc80133d058347678","source":"server","timestamp":"2023-10-03T11:23:03.650Z"} {"crypto":"SafeNet 5110 (940 B) ","key":{"algorithm":{"hash":"SHA-256","label":"RSA","name":"RSASSA-PKCS1-v1_5","sensitive":false,"token":false},"extractable":false,"id":"7fb03a185717832eb00db0df672ca7f0","type":"private","usages":["decrypt","sign","unwrapKey"]},"level":"info","message":"keyStorage/setItem","source":"server-api","timestamp":"2023-10-03T11:23:03.676Z"} {"error":"CKR_DEVICE_MEMORY","level":"error","message":"Server event error","source":"server","timestamp":"2023-10-03T11:23:03.989Z"}

What could be the cause of the errors?

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant