java.lang.IllegalArgumentException: Hash or Sign ERROR: 0x57
	at ru.CryptoPro.JCSP.MSCAPI.MSHashNSignException.procCode(Unknown Source)
	at ru.CryptoPro.JCSP.MSCAPI.cl_5.createHash(Unknown Source)
	at ru.CryptoPro.JCSP.MSCAPI.cl_5.a(Unknown Source)
	at ru.CryptoPro.JCSP.MSCAPI.cl_5.initHashGR3411(Unknown Source)
	at ru.CryptoPro.JCSP.MSCAPI.cl_4.a(Unknown Source)
	at ru.CryptoPro.JCSP.Key.AbstractKeySpec.prepareHash(Unknown Source)
	at ru.CryptoPro.JCSP.Digest.BaseGostDigest.prepare(Unknown Source)
	at ru.CryptoPro.JCSP.Digest.BaseGostDigest.engineUpdate(Unknown Source)
	at ru.CryptoPro.JCSP.Sign.CryptoProSign.engineUpdate(Unknown Source)
	at java.security.Signature.update(Unknown Source)
	at java.security.Signature.update(Unknown Source)
	at ru.soi.service.crypto.SigningService.signAndVerify(SigningService.java:159)
	at ru.soi.service.crypto.SigningService.signingFile(SigningService.java:268)
	at ru.soi.controller.v1.signature.SignatureServiceController.normalSignFile(SignatureServiceController.java:247)
	at ru.soi.controller.v1.signature.SignatureServiceController$$FastClassBySpringCGLIB$$e441f2bc.invoke(<generated>)

            FileAsByteArrayManager fileAsByteArrayManager = new FileAsByteArrayManager();
            byte[] fileInByte = fileAsByteArrayManager.readfileAsBytes(inFile);
            byte[] signInByte = signAndVerify(JCP.GOST_SIGN_2012_256_NAME, alias,
                    "".toCharArray(), cryptoParams.getAsk_pin_in_window(), fileInByte);

            String fileNameSig = inFile.getAbsolutePath() + ".sig";
            fileAsByteArrayManager.writeFile(signInByte, fileNameSig);
            return fileNameSig;


 public byte[] signAndVerify(String signAlgName, String alias,
                                char[] password, boolean askPinInWindow, byte[] fileInByte) throws Exception {

        KeyStore keyStore = getKS(alias);

        PrivateKey privateKey;
        PublicKey publicKey;
        Certificate certificate;

// askPinInWindow = true
        if (askPinInWindow) {
            privateKey = (PrivateKey) keyStore.getKey(alias, null);
            certificate = keyStore.getCertificate(alias);
            publicKey = certificate.getPublicKey();
        } else {
            KeyStore.ProtectionParameter protectedParam =
                    new KeyStore.PasswordProtection(password);
            JCPPrivateKeyEntry entry = (JCPPrivateKeyEntry) keyStore.getEntry(alias, protectedParam);
            privateKey = entry.getPrivateKey();
            certificate = entry.getCertificate();
            publicKey = certificate.getPublicKey();
        }
        if (isNull(privateKey)) throw new NotFoundException("not found private key for alias: " + alias);
        Signature signer = Signature.getInstance(signAlgName, JCSP.PROVIDER_NAME);

        signer.initSign(privateKey);
        signer.update(fileInByte);

        byte[] signature = signer.sign();

        Encoder encoder = new Encoder();
        log.info("Signature: " + encoder.encode(signature));

        Signature validator = Signature.getInstance(signAlgName, JCSP.PROVIDER_NAME);
        validator.initVerify(publicKey);
        validator.update(fileInByte);

        boolean valid = validator.verify(signature);
        log.info("Signature verified: " + valid);
        if (!valid)
            throw new Exception();
        signature = (new SignatureChecker()).cmsSignature((X509Certificate) certificate, signature);

        return signature;
    }

    public static KeyStore getKS(String alias) throws Exception {
        // только хранилище MY
        KeyStoreConfig.getInstance().getNames();
        KeyStore store = KeyStore.getInstance(MY, JCSP.PROVIDER_NAME);
        store.load(null, null);
        Object c = store.getCertificate(alias);
        if (null != c) {
            log.info(MY);
            return store;
        }
        throw new Exception("no store found for " + alias);
    }