Dart

PKCS11 Find All Certificates on Smart Card or USB Token

See more PKCS11 Examples

Sample code showing how to examine all the certificates on a smart card or USB token.

Note: This example requires Chilkat v9.5.0.88 or later.

Dart

import 'package:chilkat/chilkat.dart';

void main() {
  // This example requires the Chilkat API to have been previously unlocked.
  // See Global Unlock Sample for sample code.

  // Note: Chilkat's PKCS11 implementation runs on Windows, Linux, Mac OS X, and other supported operating systems.

  final pkcs11 = CkPkcs11();

  // Set your shared lib path -- either a full path to the DLL, .so, or .dylib,
  // or just the filename if the driver is in a location that can be automatically found. (Such as in C:\Windows\System32)
  pkcs11.sharedLibPath = 'aetpkss1.dll';

  try {
    pkcs11.initialize();
  } on ChilkatException catch (e) {
    print(e.lastErrorText);
    return;
  }

  // Pass -1 for the slotID to open a session on the first non-empty slot.
  final slotID = -1;

  // Open a session.
  final readWrite = true;
  try {
    pkcs11.openSession(slotID, readWrite);
  } on ChilkatException catch (e) {
    print(e.lastErrorText);
    return;
  }

  // Make it an authenticated session by calling Login.
  // 
  // If we don't authenticate, then we won't be able to see the private keys, and thus
  // we won't know which certificates have an associated private key stored on the smart card.

  // The smart card PIN is passed to the Login method.
  // userType 1 indicates a "Normal User".
  final userType = 1;
  final pin = '0000';
  try {
    pkcs11.login(userType, pin);
  } on ChilkatException catch (e) {
    print(e.lastErrorText);
    pkcs11.closeSession();
    return;
  }

  // Call FindAllCerts to find all certificates on the smart card or USB token.
  try {
    pkcs11.findAllCerts();
  } on ChilkatException catch (e) {
    print(e.lastErrorText);
    pkcs11.closeSession();
    return;
  }

  // The NumCerts property is set by FindAllCerts.
  final numCerts = pkcs11.numCerts;
  print('Number of certs: $numCerts');

  var privateKeyNote = '';
  final cert = CkCert();
  var i = 0;
  while (i < numCerts) {
    pkcs11.getCert(i, cert);
    privateKeyNote = '';
    if (cert.hasPrivateKey()) {
      privateKeyNote = '(has private key)';
    }

    print('$i: $privateKeyNote ${cert.subjectDN}');
    print('$i: issuer: ${cert.issuerDN}');
    print('----');
    i++;
  }

  // Revert to an unauthenticated session by calling Logout.
  try {
    pkcs11.logout();
  } on ChilkatException catch (e) {
    print(e.lastErrorText);
    pkcs11.closeSession();
    return;
  }

  // When finished, close the session.
  // It is important to close the session (memory leaks will occur if the session is not properly closed).
  try {
    pkcs11.closeSession();
  } on ChilkatException catch (e) {
    print(e.lastErrorText);
    return;
  }

  print('Success.');
}