C
C
ScMinidriver - Load Certificate from Smart Card or USB Token by Index
See more ScMinidriver Examples
Demonstrates how to load a certificate located on a smart card or USB token by key container index.Chilkat C Downloads
#include <C_CkScMinidriver.h>
#include <C_CkCert.h>
void ChilkatSample(void)
{
BOOL success;
HCkScMinidriver scmd;
const char *readerName;
int retval;
HCkCert cert;
int keyContainerIndex;
const char *keySpec;
success = FALSE;
// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.
scmd = CkScMinidriver_Create();
// Reader names (smart card readers or USB tokens) can be discovered
// via List Readers or Find Smart Cards
readerName = "SCM Microsystems Inc. SCR33x USB Smart Card Reader 0";
success = CkScMinidriver_AcquireContext(scmd,readerName);
if (success == FALSE) {
printf("%s\n",CkScMinidriver_lastErrorText(scmd));
CkScMinidriver_Dispose(scmd);
return;
}
// If successful, the name of the currently inserted smart card is available:
printf("Card name: %s\n",CkScMinidriver_cardName(scmd));
// If desired, perform regular PIN authentication with the smartcard.
// For more details about smart card PIN authentication, see the Smart Card PIN Authentication Example
retval = CkScMinidriver_PinAuthenticate(scmd,"user","000000");
if (retval != 0) {
printf("PIN Authentication failed.\n");
}
cert = CkCert_Create();
// We can pass a specific key container index, or -1 to locate the 1st non-empty container containing a certificate and private key.
keyContainerIndex = -1;
// keySpec can be "kex" or "sig" to indicate the key-exchange or signature position within the container.
// keySpec can also be "any" to accept either position, with preference given to the "sig" position if both are occupied.
keySpec = "any";
success = CkScMinidriver_GetCert(scmd,keyContainerIndex,keySpec,cert);
if (success == FALSE) {
printf("Failed to load the certificate.\n");
}
else {
printf("Successfully loaded the cert object from the smart card / USB token.\n");
// Note: When successful, the cert object is internally linked to the ScMinidriver object's authenticated session.
// The cert object can now be used to sign or do other cryptographic operations that occur on the smart card / USB token.
// If your application calls PinDeauthenticate or DeleteContext, the cert will no longer be able to sign on the smart card
// because the smart card ScMinidriver session will no longer be authenticated or deleted.
}
// ...
// ...
// ...
// When finished with operations that required authentication, you may if you wish, deauthenticate the session.
success = CkScMinidriver_PinDeauthenticate(scmd,"user");
if (success == FALSE) {
printf("%s\n",CkScMinidriver_lastErrorText(scmd));
}
// Delete the context when finished with the card.
success = CkScMinidriver_DeleteContext(scmd);
if (success == FALSE) {
printf("%s\n",CkScMinidriver_lastErrorText(scmd));
}
CkScMinidriver_Dispose(scmd);
CkCert_Dispose(cert);
}