Emmanuel Bourg

> Using CLIs programmatically has proven difficult to us in the past due to quoting, splitting, escaping/unescaping behavior. Yes I agree in general, but here it's not calling an external...

Maybe a permission issue to access the eToken from the service account? Try this to display more information: JSIGN_OPTS=-Djava.security.debug=sunpkcs11 jsign sign --storetype ETOKEN --storepass "$SIGNING_PASS" test.ps1

I don't think I can do much at the jsign level unfortunately. If there was at least a very specific error jsign could return a hint about the pcscd configuration...

For the reference: https://blog.apdu.fr/posts/2023/11/pcsc-lite-and-polkit/ The permission issue can be diagnosed with `pcsc_scan`: ``` $ pcsc_scan PC/SC device scanner V 1.6.2 (c) 2001-2022, Ludovic Rousseau SCardEstablishContext: Access denied. ```

Thank your for the report, that's indeed a bug. `GoogleCloudSigningService` assumes that a certificate file was provided, because this is enforced by `KeyStoreType.GOOGLECLOUD.validate()`. But the Jsign JCA provider used by...

Did you get a stacktrace? If not add the `-X` parameter when invoking Maven.

This looks more like a Maven configuration issue than a Jsign issue. I guess that your `~/.m2/settings.xml`file contains an encrypted key, and the master key required to decrypt it can't...

I just noticed it when reviewing the Kryo 2.x changes. I don't need these tags but I thought it was still worth reporting.

The closest commit to the 2.22 release seems to be 01692de71511ef47b105dc811532914af28d7be2, it was authored on Sep 30, 2013 but the tag was created on Nov 6, 2013, there a one...

Thank you for the PR, I agree the PKCS#11 documentation could be improved. Regarding Venafi I think there are too many PKCS#11 implementations to list them all, I prefer mentioning...