(CkPython) PKCS11 Find All Certificates on Smart Card or USB Token

See more PKCS11 Examples

Sample code showing how to examine all the certificates on a smart card or USB token.

Note: This example requires Chilkat v9.5.0.88 or later.

Chilkat Python Downloads install with pip pip3 install chilkat or download... Python Module for Windows, MacOS, Linux, Alpine Linux, Solaris

import sys
import chilkat

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# Note: Chilkat's PKCS11 implementation runs on Windows, Linux, Mac OS X, and other supported operating systems.

pkcs11 = chilkat.CkPkcs11()

# Set your shared lib path -- either a full path to the DLL, .so, or .dylib,
# or just the filename if the driver is in a location that can be automatically found. (Such as in C:\Windows\System32)
pkcs11.put_SharedLibPath("aetpkss1.dll")

success = pkcs11.Initialize()
if (success == False):
    print(pkcs11.lastErrorText())
    sys.exit()

# Pass -1 for the slotID to open a session on the first non-empty slot.
slotID = -1

# Open a session.
readWrite = True
success = pkcs11.OpenSession(slotID,readWrite)
if (success == False):
    print(pkcs11.lastErrorText())
    sys.exit()

# Make it an authenticated session by calling Login.
# 
# If we don't authenticate, then we won't be able to see the private keys, and thus
# we won't know which certificates have an associated private key stored on the smart card.

# The smart card PIN is passed to the Login method.
# userType 1 indicates a "Normal User".
userType = 1
pin = "0000"
success = pkcs11.Login(userType,pin)
if (success == False):
    print(pkcs11.lastErrorText())
    success = pkcs11.CloseSession()
    sys.exit()

# Call FindAllCerts to find all certificates on the smart card or USB token.
success = pkcs11.FindAllCerts()
if (success == False):
    print(pkcs11.lastErrorText())
    success = pkcs11.CloseSession()
    sys.exit()

# The NumCerts property is set by FindAllCerts.
numCerts = pkcs11.get_NumCerts()
print("Number of certs: " + str(numCerts))

cert = chilkat.CkCert()
i = 0
while i < numCerts :
    pkcs11.GetCert(i,cert)
    privateKeyNote = ""
    if (cert.HasPrivateKey() == True):
        privateKeyNote = "(has private key)"

    print(str(i) + ": " + privateKeyNote + " " + cert.subjectDN())
    print(str(i) + ": issuer: " + cert.issuerDN())
    print("----")
    i = i + 1

# Revert to an unauthenticated session by calling Logout.
success = pkcs11.Logout()
if (success == False):
    print(pkcs11.lastErrorText())
    success = pkcs11.CloseSession()
    sys.exit()

# When finished, close the session.
# It is important to close the session (memory leaks will occur if the session is not properly closed).
success = pkcs11.CloseSession()
if (success == False):
    print(pkcs11.lastErrorText())
    sys.exit()

print("Success.")