Troubleshooting

runtime errors symptom java hangs after installing and configuring sunpkcs11 with fxpkcs11 if java and openssl are pointing to the same libfxpkcs11 so , you might run into an issue where running a java hsm specific command will cause a hang error logs will look similar to \[2025 12 03 17 05 58 378] | debug | 73fe95aff6c0 | waitforconnect blocking for up to 3000 milliseconds on socket connect \[2025 12 03 17 05 58 379] | info | 73fe95aff6c0 | establishconnectionip socket 6 connects to 10 0 5 111 9100 \[2025 12 03 17 05 58 379] | info | 73fe95aff6c0 | setupssl setting up ssl (slot 0) \[2025 12 03 17 05 58 645] | debug | 73ff0edff6c0 | c initialize blocking until surveyor has completed its initial hsm check (10s max) \[2025 12 03 17 06 09 302] | error | 73ff0edff6c0 | c initialize surveyor failed to complete its initial hsm check within the timeout \[2025 12 03 17 06 09 302] | info | 73ff0edff6c0 | c initialize fxpkcs11 library initialized \[2025 12 03 17 06 09 302] | info | 73ff0edff6c0 | c initialize fxpkcs11 library version 5 15 (revision 4fee) \[2025 12 03 17 06 09 302] | info | 73ff0edff6c0 | c initialize platform linux solution make sure that java points to a different libfxpkcs11 so by editing the pkcs11 cfg file create a new directory we would recommend a directory with a path similar to /usr/local/lib/fxpkcs11/java copy the libfxpkcs11 so file to the newly created directory edit the pkcs11 cfg file if the user followed the guide, the file would be found in /usr/local/etc edit the library line so that it will point to copied libfxpkcs11 so name = futurex library = /usr/local/lib/fxpkcs11/java/libfxpkcs11 so slotlistindex = 0 retest java command to make sure that it is now able to succeed verification to retest, youi can run a basic hsm + java command keytool list keystore none storetype pkcs11 providerclass sun security pkcs11 sunpkcs11 providername sunpkcs11 futurex a successful output should look like keystore type pkcs11 keystore provider sunpkcs11 futurex your keystore contains 0 entries