(Node.js) PKCS11 Find All Certificates on Smart Card or USB Token

See more PKCS11 Examples

Note: This example requires Chilkat v9.5.0.88 or later.

Install Chilkat for Node.js and Electron using npm at Chilkat npm packages for Node.js Chilkat npm packages for Electron on Windows, Linux, MacOS

var os = require('os');
if (os.platform() == 'win32') {  
  var chilkat = require('@chilkat/ck-node23-win64'); 
} else if (os.platform() == 'linux') {
    if (os.arch() == 'arm') {
        var chilkat = require('@chilkat/ck-node23-linux-arm');
    } else if (os.arch() == 'arm64') {
        var chilkat = require('@chilkat/ck-node23-linux-arm64');
    } else {
        var chilkat = require('@chilkat/ck-node23-linux-x64');
    }
} else if (os.platform() == 'darwin') {
  var chilkat = require('@chilkat/ck-node23-mac-universal');
}

function chilkatExample() {

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // Note: Chilkat's PKCS11 implementation runs on Windows, Linux, Mac OS X, and other supported operating systems.

    var pkcs11 = new chilkat.Pkcs11();

    // Set your shared lib path -- either a full path to the DLL, .so, or .dylib,
    // or just the filename if the driver is in a location that can be automatically found. (Such as in C:\Windows\System32)
    pkcs11.SharedLibPath = "aetpkss1.dll";

    var success = pkcs11.Initialize();
    if (success == false) {
        console.log(pkcs11.LastErrorText);
        return;
    }

    // Pass -1 for the slotID to open a session on the first non-empty slot.
    var slotID = -1;

    // Open a session.
    var readWrite = true;
    success = pkcs11.OpenSession(slotID,readWrite);
    if (success == false) {
        console.log(pkcs11.LastErrorText);
        return;
    }

    // Make it an authenticated session by calling Login.
    // 
    // If we don't authenticate, then we won't be able to see the private keys, and thus
    // we won't know which certificates have an associated private key stored on the smart card.

    // The smart card PIN is passed to the Login method.
    // userType 1 indicates a "Normal User".
    var userType = 1;
    var pin = "0000";
    success = pkcs11.Login(userType,pin);
    if (success == false) {
        console.log(pkcs11.LastErrorText);
        success = pkcs11.CloseSession();
        return;
    }

    // Call FindAllCerts to find all certificates on the smart card or USB token.
    success = pkcs11.FindAllCerts();
    if (success == false) {
        console.log(pkcs11.LastErrorText);
        success = pkcs11.CloseSession();
        return;
    }

    // The NumCerts property is set by FindAllCerts.
    var numCerts = pkcs11.NumCerts;
    console.log("Number of certs: " + numCerts);

    var privateKeyNote;
    var cert = new chilkat.Cert();
    var i = 0;
    while (i < numCerts) {
        pkcs11.GetCert(i,cert);
        privateKeyNote = "";
        if (cert.HasPrivateKey() == true) {
            privateKeyNote = "(has private key)";
        }

        console.log(i + ": " + privateKeyNote + " " + cert.SubjectDN);
        console.log(i + ": issuer: " + cert.IssuerDN);
        console.log("----");
        i = i+1;
    }

    // Revert to an unauthenticated session by calling Logout.
    success = pkcs11.Logout();
    if (success == false) {
        console.log(pkcs11.LastErrorText);
        success = pkcs11.CloseSession();
        return;
    }

    // When finished, close the session.
    // It is important to close the session (memory leaks will occur if the session is not properly closed).
    success = pkcs11.CloseSession();
    if (success == false) {
        console.log(pkcs11.LastErrorText);
        return;
    }

    console.log("Success.");

}

chilkatExample();