(Tcl) Find Certificate on Smartcard Currenty in Reader

Finds the certificates on smartcards currently in readers.

Note: This example requires Chilkat v9.5.0.77 or greater.

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# This newer example is a much better way to get the certificate on a smartcard or USB token

# This example requires that we already know the name of the CSP (Cryptographic Service Provider) for the smartcard.
# It is often the "Microsoft Base Smart Card Crypto Provider".  You can see what CSP's are registered on your system with this code:

set csp [new_CkCsp]

set st [new_CkStringTable]

set success [CkCsp_GetProviders $csp $st]
if {$success == 0} then {
    puts [CkCsp_lastErrorText $csp]
    delete_CkCsp $csp
    delete_CkStringTable $st
    exit
}

# Iterate over the CSP names..
set i 0
set numProviders [CkStringTable_get_Count $st]
while {$i < $numProviders} {
    puts "$i: [CkStringTable_stringAt $st $i]"
    set i [expr $i + 1]
}

# --------------------------
# This newer example is a much better way to get the certificate on a smartcard or USB token

# We'll assume our smartcard is accessed through the "Microsoft Base Smart Card Crypto Provider"
# Also, we'll assume that the certificate has been installed into the default current user Windows
# certificate store by following the instructions provided by the smartcard vendor.
# (The certificate does not contain the private key.  The certificate should be installed in the
# Windows current user certificate store.  It will also be on the smartcard, and the associated private
# key is only on the smartcard.)
# 

# First open the Current User Certificate Store.  We'll need it soon..
set certStore [new_CkCertStore]

set success [CkCertStore_OpenCurrentUserStore $certStore 1]
if {$success == 0} then {
    puts [CkCertStore_lastErrorText $certStore]
    delete_CkCsp $csp
    delete_CkStringTable $st
    delete_CkCertStore $certStore
    exit
}

# Create a Csp object and set the ProviderName equal to our desired CSP name.
# (setting the ProviderName selects the desired CSP.)
CkCsp_put_ProviderName $csp "Microsoft Base Smart Card Crypto Provider"

# Iterate over the key containers managed by this CSP.
# These will be the key containers for the cards currently inserted into the reader(s).
# If only one smartcard reader exists, and a smartcard is inserted, there should be one
# key container.
set numContainers [CkCsp_get_NumKeyContainers $csp]

puts "numContainers = $numContainers"

set i 0
while {$i < $numContainers} {
    # For each key container, get the key container name and then find the certificate
    # in the Current User Certicate Store with the matching key container name.
    set keyContainerName [CkCsp_nthKeyContainerName $csp $i]

    # cert is a CkCert
    set cert [CkCertStore_FindCertByKeyContainer $certStore $keyContainerName]
    if {[CkCertStore_get_LastMethodSuccess $certStore] == 1} then {
        puts "Certificate in reader: [CkCert_subjectCN $cert]"
        delete_CkCert $cert

    }

    set i [expr $i + 1]
}

delete_CkCsp $csp
delete_CkStringTable $st
delete_CkCertStore $certStore