IssueTracker

Beginning with jdk9-b71, the SunPKCS11 Provider's Constructor signature changed. It no longer allows configuration via a String parameter. Configuration must be performed by an additional call to a SunPKCS11.configure(String) method. The breaking commit within JDK9 is https://hg.openjdk.java.net/jdk/jdk/rev/e6470b24700d

For reference, keytool performs this two-step configuration:
https://hg.openjdk.java.net/jdk/jdk/file/865ec913f916/src/java.base/share/classes/sun/security/tools/KeyStoreUtil.java#l277

But apksigner assumes constructor initialization via the String parameter:
https://android.googlesource.com/platform/tools/apksig/+/refs/heads/master/src/apksigner/java/com/android/apksigner/SignerParams.java#212

keytool and apksigner use different methods for obtaining the KeyStore Provider, but apksigner should be able to follow the same pattern as keytool after it constructs a new instance of the provider.

For reference, this is the Exception stacktrace I receive with apksigner from build-tools 28.0.2 (the code as linked above in apksig master is roughly the same, although it was moved to another file):

$ ./android-sdk-linux/build-tools/28.0.2/apksigner sign --provider-class sun.security.pkcs11.SunPKCS11 --provider-arg pkcs11_java.cfg --ks NONE --ks-type SunPKCS11-OpenSC-PKCS11 filename.apk
Exception in thread "main" java.lang.NoSuchMethodException: sun.security.pkcs11.SunPKCS11.<init>(java.lang.String)
        at java.base/java.lang.Class.getConstructor0(Class.java:3350)
        at java.base/java.lang.Class.getConstructor(Class.java:2152)
        at com.android.apksigner.ApkSignerTool$ProviderInstallSpec.installProvider(ApkSignerTool.java:600)
        at com.android.apksigner.ApkSignerTool$ProviderInstallSpec.access$400(ApkSignerTool.java:575)
        at com.android.apksigner.ApkSignerTool.sign(ApkSignerTool.java:259)
        at com.android.apksigner.ApkSignerTool.main(ApkSignerTool.java:89)

$ ./android-sdk-linux/build-tools/28.0.2/apksigner --version
0.8

$ cat pkcs11_java.cfg
name = OpenSC-PKCS11
description = SunPKCS11 via OpenSC
library = /usr/lib64/opensc-pkcs11.so
slotListIndex = 0