Ruby

ScMinidriver - Import a Certificate and Private Key to a Smart Card or USB Token

See more ScMinidriver Examples

Demonstrates how to import a certificate and its private key to a key container on a smart card or USB token.

Note: This functionality was introduced in Chilkat v9.5.0.87.

Note: The ScMinidriver functionality is for Windows-only because ScMinidriver DLLs only exist on Windows.

Ruby

require 'chilkat'

success = false

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

scmd = Chilkat::CkScMinidriver.new()

# Reader names (smart card readers or USB tokens) can be discovered
# via List Readers or Find Smart Cards
readerName = "SCM Microsystems Inc. SCR33x USB Smart Card Reader 0"
success = scmd.AcquireContext(readerName)
if (success == false)
    print scmd.lastErrorText() + "\n";
    exit
end

# If successful, the name of the currently inserted smart card is available:
print "Card name: " + scmd.cardName() + "\n";

# To import a cert + private key, we'll need to be PIN authenticated.
# For more details about smart card PIN authentication, see the Smart Card PIN Authentication Example
pinId = "user"
retval = scmd.PinAuthenticate(pinId,"000000")
if (retval != 0)
    print "PIN Authentication failed." + "\n";
    scmd.DeleteContext()
    exit
end

cert = Chilkat::CkCert.new()

# Load the cert + private key from a .p12/.pfx
# We got this .p12 from https://badssl.com/download/
password = "badssl.com"
success = cert.LoadPfxFile("qa_data/pfx/badssl.com-client.p12",password)
if (success == false)
    print cert.lastErrorText() + "\n";
    scmd.DeleteContext()
    exit
end

# Let's import this certificate as the "signature" key/cert in key container #6.
containerIndex = 6
keySpec = "sig"
success = scmd.ImportCert(cert,containerIndex,keySpec,pinId)
if (success == false)
    print scmd.lastErrorText() + "\n";
else
    print "Successfully imported the cert + private key onto the smart card." + "\n";
end

# When finished with operations that required authentication, you may if you wish, deauthenticate the session.
success = scmd.PinDeauthenticate("user")
if (success == false)
    print scmd.lastErrorText() + "\n";
end

# Delete the context when finished with the card.
success = scmd.DeleteContext()
if (success == false)
    print scmd.lastErrorText() + "\n";
end