(Chilkat2-Python) ScMinidriver - Load Certificate from Smart Card or USB Token by Index

See more ScMinidriver Examples

Demonstrates how to load a certificate located on a smart card or USB token by key container index.

Chilkat2 Python Downloads install with pip pip3 install chilkat2 or download... Python Module for Windows, Linux, Alpine Linux, MacOS, Solaris

import sys
import chilkat2

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.
scmd = chilkat2.ScMinidriver()

# Reader names (smart card readers or USB tokens) can be discovered
# via List Readers or Find Smart Cards
readerName = "SCM Microsystems Inc. SCR33x USB Smart Card Reader 0"
success = scmd.AcquireContext(readerName)
if (success == False):
    print(scmd.LastErrorText)
    sys.exit()

# If successful, the name of the currently inserted smart card is available:
print("Card name: " + scmd.CardName)

# If desired, perform regular PIN authentication with the smartcard.
# For more details about smart card PIN authentication, see the Smart Card PIN Authentication Example
retval = scmd.PinAuthenticate("user","000000")
if (retval != 0):
    print("PIN Authentication failed.")

cert = chilkat2.Cert()
# We can pass a specific key container index, or -1 to locate the 1st non-empty container containing a certificate and private key.
keyContainerIndex = -1
# keySpec can be "kex" or "sig" to indicate the key-exchange or signature position within the container.
# keySpec can also be "any" to accept either position, with preference given to the "sig" position if both are occupied.
keySpec = "any"
success = scmd.GetCert(keyContainerIndex,keySpec,cert)
if (success == False):
    print("Failed to load the certificate.")
else:
    print("Successfully loaded the cert object from the smart card / USB token.")

    # Note: When successful, the cert object is internally linked to the ScMinidriver object's authenticated session.
    # The cert object can now be used to sign or do other cryptographic operations that occur on the smart card / USB token.
    # If your application calls PinDeauthenticate or DeleteContext, the cert will no longer be able to sign on the smart card
    # because the smart card ScMinidriver session will no longer be authenticated or deleted.

# ...
# ...
# ...

# When finished with operations that required authentication, you may if you wish, deauthenticate the session.
success = scmd.PinDeauthenticate("user")
if (success == False):
    print(scmd.LastErrorText)

# Delete the context when finished with the card.
success = scmd.DeleteContext()
if (success == False):
    print(scmd.LastErrorText)