Chilkat HOME .NET Core C# Android™ AutoIt C C# C++ Chilkat2-Python CkPython Classic ASP DataFlex Delphi ActiveX Delphi DLL Go Java Lianja Mono C# Node.js Objective-C PHP ActiveX PHP Extension Perl PowerBuilder PowerShell PureBasic Ruby SQL Server Swift 2 Swift 3,4,5... Tcl Unicode C Unicode C++ VB.NET VBScript Visual Basic 6.0 Visual FoxPro Xojo Plugin
(PHP ActiveX) PKCS11 Import a Private Key onto the HSMSee more PKCS11 ExamplesDemonstrates how to import an existing RSA private key onto the smartcard/token. The imported key is a token object, meaning it stays on the HSM and exists beyond the end of the PKCS11 session. Note: This example requires Chilkat v9.5.0.96 or later.
<?php // This example requires the Chilkat API to have been previously unlocked. // See Global Unlock Sample for sample code. // Note: Chilkat's PKCS11 implementation runs on Windows, Linux, Mac OS X, and other supported operating systems. // For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Pkcs11') $pkcs11 = new COM("Chilkat.Pkcs11"); // Use the PKCS11 driver (.dll, .so, .dylib) for your particular HSM. // (The format of the path will change with the operating system. Obviously, "C:/" is not used on non-Windows systems. $pkcs11->SharedLibPath = 'C:/Program Files (x86)/Gemalto/IDGo 800 PKCS#11/IDPrimePKCS1164.dll'; // Establish a logged-on session. $pin = '0000'; $userType = 1; $success = $pkcs11->QuickSession($userType,$pin); if ($success == 0) { print $pkcs11->LastErrorText . "\n"; exit; } // Let's import a certificate's private key onto the HSM. // First, we'll load the certificate from a .pfx (also known as .p12), which is a file format // that also includes the certificate's private key. // For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.Cert') $cert = new COM("Chilkat.Cert"); $success = $cert->LoadPfxFile('qa_data/pfx/ehealth.fgov.be_testing.p12','p12_password'); if ($success == 0) { print $cert->LastErrorText . "\n"; exit; } // Let's get the certificate's private key. // privKey is a Chilkat.PrivateKey $privKey = $cert->ExportPrivateKey(); if ($cert->LastMethodSuccess == 0) { print $cert->LastErrorText . "\n"; exit; } // Build a PKCS11 template to provide additional information about the key to be imported. // For versions of Chilkat < 10.0.0, use new COM('Chilkat_9_5_0.Chilkat.JsonObject') $jsonTemplate = new COM("Chilkat.JsonObject"); // Indicate that the key is to be stored on the token. It is NOT a session object. $jsonTemplate->UpdateBool('token',1); // Indicate that the key can be used for signing. $jsonTemplate->UpdateBool('sign',1); // Provide an arbitrary ID and label (anything you want). // The information in the ID and/or label provides one means for finding the key in future PKCS11 sessions. $jsonTemplate->UpdateString('id_hex','010203040A0B0C0D0E0F'); $jsonTemplate->UpdateString('label','ehealth private key'); // Import the key. The private key handle is returned on success. Otherwise 0 is returned. // If our only task for now is to simply import the key, we can ignore the returned handle, // other than to check for success/failure. Otherwise, the handle can be used in other PKCS11 operations. // This example just creates the key and does not use the returned handle. $keyHandle = $pkcs11->ImportPrivateKey($privKey,$jsonTemplate); if ($keyHandle == 0) { print $pkcs11->LastErrorText . "\n"; } else { print 'key handle = ' . $keyHandle . "\n"; print 'Successfully imported a private key onto the HSM.' . "\n"; } $pkcs11->Logout(); $pkcs11->CloseSession(); ?> |
© 2000-2024 Chilkat Software, Inc. All Rights Reserved.