C

PKCS11 Find all Private Keys

See more PKCS11 Examples

Demonstrates how to list all private keys on an HSM.

Note: This example requires Chilkat v9.5.0.96 or later.

C

#include <C_CkPkcs11.h>
#include <C_CkJsonObject.h>

void ChilkatSample(void)
    {
    BOOL success;
    HCkPkcs11 pkcs11;
    const char *pin;
    int userType;
    HCkJsonObject json;
    int handle;
    const char *id;
    const char *key_type;
    const char *label;
    const char *modulus;
    const char *exponent;
    int i;
    int count_i;

    success = FALSE;

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // Note: Chilkat's PKCS11 implementation runs on Windows, Linux, Mac OS X, and other supported operating systems.

    pkcs11 = CkPkcs11_Create();

    // Use the PKCS11 driver (.dll, .so, .dylib) for your particular HSM.
    // (The format of the path will change with the operating system.  Obviously, "C:/" is not used on non-Windows systems.
    CkPkcs11_putSharedLibPath(pkcs11,"C:/Program Files (x86)/Gemalto/IDGo 800 PKCS#11/IDPrimePKCS1164.dll");

    // Establish a logged-on session.
    // Use your actual PIN here.
    pin = "0000";
    userType = 1;
    success = CkPkcs11_QuickSession(pkcs11,userType,pin);
    if (success == FALSE) {
        printf("%s\n",CkPkcs11_lastErrorText(pkcs11));
        CkPkcs11_Dispose(pkcs11);
        return;
    }

    // Note: A logged-on session is required to list private keys.

    json = CkJsonObject_Create();
    CkJsonObject_putEmitCompact(json,FALSE);

    success = CkPkcs11_FindAllKeys(pkcs11,"private",json);
    if (success == FALSE) {
        printf("%s\n",CkPkcs11_lastErrorText(pkcs11));
        CkPkcs11_Dispose(pkcs11);
        CkJsonObject_Dispose(json);
        return;
    }

    printf("%s\n",CkJsonObject_emit(json));

    // Sample output, with parsing code below..

    // {
    //   "keys": [
    //     {
    //       "handle": 74842125,
    //       "id": "0001020304",
    //       "key_type": "RSA",
    //       "label": "Chilkat Software, Inc.",
    //       "modulus": "twVRf6O ... Rwa1ebFY0=",
    //       "exponent": "AAEAAQ=="
    //     },
    //     {
    //       "handle": 18415630,
    //       "id": "010203040A0B0C0D0E0F",
    //       "key_type": "RSA",
    //       "label": "ehealth private key",
    //       "modulus": "qdKjhOwA1 ... A4MtX8BYgHmLw==",
    //       "exponent": "AAEAAQ=="
    //     },
    //     {
    //       "handle": 3735567,
    //       "id": "D531B4B8F308489DA58350596178845973A4562E",
    //       "key_type": "RSA",
    //       "label": "d531b4b8-f308-489d-a583-505961788459",
    //       "modulus": "r0MmXRKBP ... HAd1kUPsNyzcQ==",
    //       "exponent": "AAEAAQ=="
    //     },
    //     {
    //       "handle": 238092304,
    //       "id": "0A0B0C0D01020304",
    //       "key_type": "RSA",
    //       "label": "MySshKey",
    //       "modulus": "ykFHcfBFOq ... rfXBK/6g9t+S6UjJ1kUQ==",
    //       "exponent": "AAEAAQ=="
    //     },
    //     {
    //       "handle": 49348625,
    //       "id": "48656C6C6F",
    //       "key_type": "RSA",
    //       "label": "2048-bit RSA key for testing",
    //       "modulus": "vReVaJzXZYIOB ... kamD/8iNvhAKlKbQ==",
    //       "exponent": "AAEAAQ=="
    //     }
    //   ]
    // }

    // Use this online tool to generate parsing code from sample JSON: 
    // Generate Parsing Code from JSON

    i = 0;
    count_i = CkJsonObject_SizeOfArray(json,"keys");
    while (i < count_i) {
        CkJsonObject_putI(json,i);
        handle = CkJsonObject_IntOf(json,"keys[i].handle");
        id = CkJsonObject_stringOf(json,"keys[i].id");
        key_type = CkJsonObject_stringOf(json,"keys[i].key_type");
        label = CkJsonObject_stringOf(json,"keys[i].label");
        modulus = CkJsonObject_stringOf(json,"keys[i].modulus");
        exponent = CkJsonObject_stringOf(json,"keys[i].exponent");
        i = i + 1;
    }

    CkPkcs11_Logout(pkcs11);
    CkPkcs11_CloseSession(pkcs11);


    CkPkcs11_Dispose(pkcs11);
    CkJsonObject_Dispose(json);

    }