SQL Server
SQL Server
PKCS11 Find Specific Certificate on Smart Card or USB Token
See more PKCS11 Examples
This example code shows how to find a particular certificate on a smart card or USB token.Note: This example requires Chilkat v9.5.0.88 or later.
Chilkat SQL Server Downloads
-- Important: See this note about string length limitations for strings returned by sp_OAMethod calls.
--
CREATE PROCEDURE ChilkatSample
AS
BEGIN
DECLARE @hr int
-- Important: Do not use nvarchar(max). See the warning about using nvarchar(max).
DECLARE @sTmp0 nvarchar(4000)
DECLARE @success int
SELECT @success = 0
-- This example requires the Chilkat API to have been previously unlocked.
-- See Global Unlock Sample for sample code.
-- Note: Chilkat's PKCS11 implementation runs on Windows, Linux, Mac OS X, and other supported operating systems.
DECLARE @pkcs11 int
EXEC @hr = sp_OACreate 'Chilkat.Pkcs11', @pkcs11 OUT
IF @hr <> 0
BEGIN
PRINT 'Failed to create ActiveX component'
RETURN
END
-- Set your shared lib path -- either a full path to the DLL, .so, or .dylib,
-- or just the filename if the driver is in a location that can be automatically found. (Such as in C:\Windows\System32)
EXEC sp_OASetProperty @pkcs11, 'SharedLibPath', 'C:/Program Files (x86)/Gemalto/IDGo 800 PKCS#11/IDPrimePKCS1164.dll'
EXEC sp_OAMethod @pkcs11, 'Initialize', @success OUT
IF @success = 0
BEGIN
EXEC sp_OAGetProperty @pkcs11, 'LastErrorText', @sTmp0 OUT
PRINT @sTmp0
EXEC @hr = sp_OADestroy @pkcs11
RETURN
END
-- Pass -1 for the slotID to open a session on the first non-empty slot.
DECLARE @slotID int
SELECT @slotID = -1
-- Open a session.
DECLARE @readWrite int
SELECT @readWrite = 1
EXEC sp_OAMethod @pkcs11, 'OpenSession', @success OUT, @slotID, @readWrite
IF @success = 0
BEGIN
EXEC sp_OAGetProperty @pkcs11, 'LastErrorText', @sTmp0 OUT
PRINT @sTmp0
EXEC @hr = sp_OADestroy @pkcs11
RETURN
END
-- Make it an authenticated session by calling Login.
--
-- If we don't authenticate, then we won't be able to see the private keys, and thus
-- we won't know which certificates have an associated private key stored on the smart card.
-- The smart card PIN is passed to the Login method.
-- userType 1 indicates a "Normal User".
DECLARE @userType int
SELECT @userType = 1
DECLARE @pin nvarchar(4000)
SELECT @pin = '0000'
EXEC sp_OAMethod @pkcs11, 'Login', @success OUT, @userType, @pin
IF @success = 0
BEGIN
EXEC sp_OAGetProperty @pkcs11, 'LastErrorText', @sTmp0 OUT
PRINT @sTmp0
EXEC sp_OAMethod @pkcs11, 'CloseSession', @success OUT
EXEC @hr = sp_OADestroy @pkcs11
RETURN
END
-- --------------------------------------------------------------------------
-- The FindCert method can find a particular certificate in a number of different ways.
-- I'll demonstrate some common ways..
-- 1) In many cases you'll be working with a smart card that contains one certificate that is to be used for
-- signing, and it is the certificate that is associated with the private key also stored on the smart card (or USB token).
-- There may be other certificates on the card, but these are the issuer certificates in the chain of authentication.
-- You're just interested in getting the certificate with the private key.
-- You can do it like this:
DECLARE @cert int
EXEC @hr = sp_OACreate 'Chilkat.Cert', @cert OUT
-- Pass the keyword "privateKey" in the 1st argument, and an empty string in the 2nd arg.
-- This returns the 1st certificate that has a private key.
EXEC sp_OAMethod @pkcs11, 'FindCert', @success OUT, 'privateKey', '', @cert
IF @success = 1
BEGIN
EXEC sp_OAGetProperty @cert, 'SubjectCN', @sTmp0 OUT
PRINT 'Cert with private key: ' + @sTmp0
END
ELSE
BEGIN
PRINT 'No certificates having a private key were found.'
END
-- 2) Find a certificate by the Subject Common Name
EXEC sp_OAMethod @pkcs11, 'FindCert', @success OUT, 'subjectCN', 'Chil application account (8c9be8e0-5544-4cd0-9062-290fbff353a7)', @cert
IF @success = 1
BEGIN
EXEC sp_OAGetProperty @cert, 'SubjectCN', @sTmp0 OUT
PRINT 'Found: ' + @sTmp0
END
ELSE
BEGIN
EXEC sp_OAGetProperty @cert, 'SubjectCN', @sTmp0 OUT
PRINT 'Not found: ' + @sTmp0
END
-- 3) Find a certificate by hex serial number
EXEC sp_OAMethod @pkcs11, 'FindCert', @success OUT, 'serial', '5087bf1feda006af54a02f23a851104948acc26f', @cert
IF @success = 1
BEGIN
EXEC sp_OAGetProperty @cert, 'SerialNumber', @sTmp0 OUT
PRINT 'Found: ' + @sTmp0
END
ELSE
BEGIN
EXEC sp_OAGetProperty @cert, 'SerialNumber', @sTmp0 OUT
PRINT 'Not found: ' + @sTmp0
END
-- 4) Find a certificate by hex serial number and Issuer Common Name
EXEC sp_OAMethod @pkcs11, 'FindCert', @success OUT, 'serial:issuerCN', '5087bf1feda006af54a02f23a851104948acc26f:Ibanity Production Third Party Application CA', @cert
IF @success = 1
BEGIN
EXEC sp_OAGetProperty @cert, 'SubjectCN', @sTmp0 OUT
PRINT 'Found: ' + @sTmp0
END
ELSE
BEGIN
EXEC sp_OAGetProperty @cert, 'SubjectCN', @sTmp0 OUT
PRINT 'Not found: ' + @sTmp0
END
-- --------------------------------------------------------------------------
-- Revert to an unauthenticated session by calling Logout.
EXEC sp_OAMethod @pkcs11, 'Logout', @success OUT
IF @success = 0
BEGIN
EXEC sp_OAGetProperty @pkcs11, 'LastErrorText', @sTmp0 OUT
PRINT @sTmp0
EXEC sp_OAMethod @pkcs11, 'CloseSession', @success OUT
EXEC @hr = sp_OADestroy @pkcs11
EXEC @hr = sp_OADestroy @cert
RETURN
END
-- When finished, close the session.
-- It is important to close the session (memory leaks will occur if the session is not properly closed).
EXEC sp_OAMethod @pkcs11, 'CloseSession', @success OUT
IF @success = 0
BEGIN
EXEC sp_OAGetProperty @pkcs11, 'LastErrorText', @sTmp0 OUT
PRINT @sTmp0
EXEC @hr = sp_OADestroy @pkcs11
EXEC @hr = sp_OADestroy @cert
RETURN
END
PRINT 'Success.'
EXEC @hr = sp_OADestroy @pkcs11
EXEC @hr = sp_OADestroy @cert
END
GO