(PureBasic) PKCS11 Export Public Key from HSM

See more PKCS11 Examples

Demonstrates how to export a public key from a smartcard or token.

Note: This example requires Chilkat v9.5.0.96 or later.

Chilkat PureBasic Module Download Chilkat PureBasic Module

IncludeFile "CkPkcs11.pb"
IncludeFile "CkJsonObject.pb"
IncludeFile "CkPublicKey.pb"

Procedure ChilkatExample()

    ; This example requires the Chilkat API to have been previously unlocked.
    ; See Global Unlock Sample for sample code.

    ; Note: Chilkat's PKCS11 implementation runs on Windows, Linux, Mac OS X, and other supported operating systems.

    pkcs11.i = CkPkcs11::ckCreate()
    If pkcs11.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    ; Use the PKCS11 driver (.dll, .so, .dylib) for your particular HSM.
    ; (The format of the path will change with the operating system.  Obviously, "C:/" is not used on non-Windows systems.
    CkPkcs11::setCkSharedLibPath(pkcs11, "C:/Program Files (x86)/Gemalto/IDGo 800 PKCS#11/IDPrimePKCS1164.dll")

    ; Establish a logged-on session. (We can typically skip the login by passing an empty PIN if only working with public keys)
    ; Use your actual PIN here, or an empty string to skip login.
    pin.s = "0000"
    userType.i = 1
    success.i = CkPkcs11::ckQuickSession(pkcs11,userType,pin)
    If success = 0
        Debug CkPkcs11::ckLastErrorText(pkcs11)
        CkPkcs11::ckDispose(pkcs11)
        ProcedureReturn
    EndIf

    ; Get the handle of the public key we wish to export.
    ; You can find public keys in many different ways.
    ; This example will search for a public key by label.

    ; Provide a template to find a PKCS11 object.
    jsonTemplate.i = CkJsonObject::ckCreate()
    If jsonTemplate.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    ; Find the public key with the label "Belgium eHealth".
    CkJsonObject::ckUpdateString(jsonTemplate,"class","public_key")
    CkJsonObject::ckUpdateString(jsonTemplate,"label","Belgium eHealth")

    pubKeyHandle.i = CkPkcs11::ckFindObject(pkcs11,jsonTemplate)
    If pubKeyHandle = 0
        Debug CkPkcs11::ckLastErrorText(pkcs11)
        CkPkcs11::ckDispose(pkcs11)
        CkJsonObject::ckDispose(jsonTemplate)
        ProcedureReturn
    EndIf

    ; Export to a Chilkat public key object.
    pubKey.i = CkPublicKey::ckCreate()
    If pubKey.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    success = CkPkcs11::ckExportPublicKey(pkcs11,pubKeyHandle,pubKey)
    If success = 0
        Debug CkPkcs11::ckLastErrorText(pkcs11)
        CkPkcs11::ckDispose(pkcs11)
        CkJsonObject::ckDispose(jsonTemplate)
        CkPublicKey::ckDispose(pubKey)
        ProcedureReturn
    EndIf

    ; Get the public key as PKCS8 PEM.
    Debug CkPublicKey::ckGetPem(pubKey,0)

    CkPkcs11::ckLogout(pkcs11)
    CkPkcs11::ckCloseSession(pkcs11)


    CkPkcs11::ckDispose(pkcs11)
    CkJsonObject::ckDispose(jsonTemplate)
    CkPublicKey::ckDispose(pubKey)


    ProcedureReturn
EndProcedure