public class TestToken {
    public static void main(String[] args) throws Exception {

    String pkcs11Config = "name=ruToken\nlibrary=/usr/lib/librtpkcs11ecp.so";
    ByteArrayInputStream configStream = new ByteArrayInputStream(pkcs11Config.getBytes());
    Provider pkcs11Provider = new SunPKCS11(configStream);
    Security.addProvider(pkcs11Provider);

    System.out.println("TestToken.main " + pkcs11Provider.getName());

    String pass = "...";
    KeyStore keyStore = KeyStore.getInstance("PKCS11");
    keyStore.load(null, pass.toCharArray());

    System.out.println("TestToken.main " + keyStore.getType() + " " + keyStore.getProvider() + "\nKey store size:" + keyStore.size());

    Enumeration aliasesEnum = keyStore.aliases();
    while (aliasesEnum.hasMoreElements()) {
        String alias = (String) aliasesEnum.nextElement();
        System.out.println("alias: " + alias);

        Certificate cert = keyStore.getCertificate(alias);
        System.out.println("cert: " + cert);

        PrivateKey privateKey = (PrivateKey) keyStore.getKey(alias, null);
        System.out.println("privateKey: " + privateKey);

        String doc = "doc123";
        Signature signature = Signature.getInstance("SHA1withRSA");
        signature.initSign(privateKey);
        signature.update(doc.getBytes());
        byte[] bytes = signature.sign();
    }
    }
}

TestToken.main SunPKCS11-ruToken
TestToken.main PKCS11 SunPKCS11-ruToken version 1.8
Key store size:0

pkcs15-init --erase-card -p rutoken_ecp

pkcs15-init --create-pkcs15 --so-pin ((SO_PIN)) --so-puk ""

pkcs15-init --store-pin --label "User PIN" --auth-id 02 --pin ((PIN)) --puk "" --so-pin ((SO_PIN)) --finalize

pkcs11-tool --module /usr/lib64/opensc-pkcs11.so --keypairgen --key-type rsa:2048 --login -p ((PIN)) --label "user" --id ((ID))

user ~# pkcs11-tool --module /usr/lib64/opensc-pkcs11.so -Ol
Using slot 1 with a present token (0x1)
Logging in to "Rutoken ECP (User PIN)".
Please enter User PIN: 
Private Key Object; RSA 
  label:      Certificate
  ID:         ...
  Usage:      decrypt, sign, unwrap
Public Key Object; RSA 2048 bits
  label:      label
  ID:         ...
  Usage:      encrypt, verify, wrap
Certificate Object, type = X.509 cert
  label:      Certificate
  ID:         ...