Lua Requires Chilkat v11.0.0+

PKCS11 Export Public Key from HSM

See more PKCS11 Examples

Demonstrates how to export a public key from a smartcard or token. Lua

local chilkat = require("chilkat")

-- This example requires the Chilkat API to have been previously unlocked.
-- See Global Unlock Sample for sample code.

-- Note: Chilkat's PKCS11 implementation runs on Windows, Linux, Mac OS X, and other supported operating systems.

local pkcs11 = chilkat.Pkcs11.new()

-- Use the PKCS11 driver (.dll, .so, .dylib) for your particular HSM.
-- (The format of the path will change with the operating system.  Obviously, "C:/" is not used on non-Windows systems.
pkcs11.shared_lib_path = "C:/Program Files (x86)/Gemalto/IDGo 800 PKCS#11/IDPrimePKCS1164.dll"

-- Establish a logged-on session. (We can typically skip the login by passing an empty PIN if only working with public keys)
-- Use your actual PIN here, or an empty string to skip login.
local pin = "0000"
local userType = 1
local success = pkcs11:quick_session(userType, pin)
if not success then
    print(pkcs11.last_error_text)
    return
end

-- Get the handle of the public key we wish to export.
-- You can find public keys in many different ways.
-- This example will search for a public key by label.

-- Provide a template to find a PKCS11 object.
local jsonTemplate = chilkat.JsonObject.new()

-- Find the public key with the label "Belgium eHealth".
jsonTemplate:update_string("class", "public_key")
jsonTemplate:update_string("label", "Belgium eHealth")

local pubKeyHandle = pkcs11:find_object(jsonTemplate)
if pubKeyHandle == 0 then
    print(pkcs11.last_error_text)
    return
end

-- Export to a Chilkat public key object.
local pubKey = chilkat.PublicKey.new()
success = pkcs11:export_public_key(pubKeyHandle, pubKey)
if not success then
    print(pkcs11.last_error_text)
    return
end

-- Get the public key as PKCS8 PEM.
print(pubKey:get_pem(false))

pkcs11:logout()
pkcs11:close_session()