(Node.js) PKCS11 Export Public Key from HSM

See more PKCS11 Examples

Demonstrates how to export a public key from a smartcard or token.

Note: This example requires Chilkat v9.5.0.96 or later.

Install Chilkat for Node.js and Electron using npm at Chilkat npm packages for Node.js Chilkat npm packages for Electron on Windows, Linux, MacOS

var os = require('os');
if (os.platform() == 'win32') {  
  var chilkat = require('@chilkat/ck-node23-win64'); 
} else if (os.platform() == 'linux') {
    if (os.arch() == 'arm') {
        var chilkat = require('@chilkat/ck-node23-linux-arm');
    } else if (os.arch() == 'arm64') {
        var chilkat = require('@chilkat/ck-node23-linux-arm64');
    } else {
        var chilkat = require('@chilkat/ck-node23-linux-x64');
    }
} else if (os.platform() == 'darwin') {
  var chilkat = require('@chilkat/ck-node23-mac-universal');
}

function chilkatExample() {

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // Note: Chilkat's PKCS11 implementation runs on Windows, Linux, Mac OS X, and other supported operating systems.

    var pkcs11 = new chilkat.Pkcs11();

    // Use the PKCS11 driver (.dll, .so, .dylib) for your particular HSM.
    // (The format of the path will change with the operating system.  Obviously, "C:/" is not used on non-Windows systems.
    pkcs11.SharedLibPath = "C:/Program Files (x86)/Gemalto/IDGo 800 PKCS#11/IDPrimePKCS1164.dll";

    // Establish a logged-on session. (We can typically skip the login by passing an empty PIN if only working with public keys)
    // Use your actual PIN here, or an empty string to skip login.
    var pin = "0000";
    var userType = 1;
    var success = pkcs11.QuickSession(userType,pin);
    if (success == false) {
        console.log(pkcs11.LastErrorText);
        return;
    }

    // Get the handle of the public key we wish to export.
    // You can find public keys in many different ways.
    // This example will search for a public key by label.

    // Provide a template to find a PKCS11 object.
    var jsonTemplate = new chilkat.JsonObject();

    // Find the public key with the label "Belgium eHealth".
    jsonTemplate.UpdateString("class","public_key");
    jsonTemplate.UpdateString("label","Belgium eHealth");

    var pubKeyHandle = pkcs11.FindObject(jsonTemplate);
    if (pubKeyHandle == 0) {
        console.log(pkcs11.LastErrorText);
        return;
    }

    // Export to a Chilkat public key object.
    var pubKey = new chilkat.PublicKey();
    success = pkcs11.ExportPublicKey(pubKeyHandle,pubKey);
    if (success == false) {
        console.log(pkcs11.LastErrorText);
        return;
    }

    // Get the public key as PKCS8 PEM.
    console.log(pubKey.GetPem(false));

    pkcs11.Logout();
    pkcs11.CloseSession();

}

chilkatExample();