|
Chilkat • HOME • .NET Core C# • Android™ • AutoIt • C • C# • C++ • Chilkat2-Python • CkPython • Classic ASP • DataFlex • Delphi ActiveX • Delphi DLL • Go • Java • Lianja • Mono C# • Node.js • Objective-C • PHP ActiveX • PHP Extension • Perl • PowerBuilder • PowerShell • PureBasic • Ruby • SQL Server • Swift 2 • Swift 3,4,5... • Tcl • Unicode C • Unicode C++ • VB.NET • VBScript • Visual Basic 6.0 • Visual FoxPro • Xojo Plugin
(Tcl) PKCS11 Get Token InfoSee more PKCS11 ExamplesExample showing how to discover the readers (slots) and smart cards and tokens available through a vendor's PKCS11 Cryptoki module, and get token information for each.
load ./chilkat.dll # This example requires the Chilkat API to have been previously unlocked. # See Global Unlock Sample for sample code. # Note: Chilkat's PKCS11 implementation runs on Windows, Linux, Mac OS X, and other supported operating systems. set pkcs11 [new_CkPkcs11] # Specify the vendor's Cryptoki module DLL / shared lib. # The following PKCS11 driver DLL is for the WatchData ProxKey USB token. # You would use your smartcard/token vendor's PKCS11 driver DLL. CkPkcs11_put_SharedLibPath $pkcs11 "SignatureP11.dll" set success [CkPkcs11_Initialize $pkcs11] if {$success == 0} then { puts [CkPkcs11_lastErrorText $pkcs11] delete_CkPkcs11 $pkcs11 exit } # Call Discover to discover what's available. # Indicate that we only want to return slots (readers) where tokens (or smart cards) are present. set onlyTokensPresent 1 set json [new_CkJsonObject] set success [CkPkcs11_Discover $pkcs11 $onlyTokensPresent $json] if {$success == 0} then { puts [CkPkcs11_lastErrorText $pkcs11] delete_CkPkcs11 $pkcs11 delete_CkJsonObject $json exit } CkJsonObject_put_EmitCompact $json 0 puts [CkJsonObject_emit $json] # Sample JSON output. # Code for parsing this JSON is shown below.. # { # "cryptokiVersion": { # "major": 2, # "minor": 10 # }, # "manufacturerID": "WatchData", # "libraryDescription": "PKCS#11 cryptoki module", # "libraryVersion": { # "major": 3, # "minor": 10 # }, # "slot": [ # { # "id": 16385, # "slotDescription": "Watchdata IC CARD Reader/Writer", # "manufacturerID": "Watchdata", # "tokenPresent": true, # "removableDevice": true, # "hardwareSlot": true, # "hardwareVersion": { # "major": 1, # "minor": 0 # }, # "firmwareVersion": { # "major": 1, # "minor": 0 # }, # "token": { # "label": "WD PROXKey", # "manufacturerID": "Watchdata Corp.", # "model": "TimeCos/PK", # "serialNumber": "WD05376504", # "flags": [ # "CKF_RNG", # "CKF_LOGIN_REQUIRED", # "CKF_USER_PIN_INITIALIZED", # "CKF_DUAL_CRYPTO_OPERATIONS", # "CKF_TOKEN_INITIALIZED" # ], # "maxSessionCount": 0, # "sessionCount": 0, # "maxRwSessionCount": 0, # "rwSessionCount": 0, # "maxPinLen": 32, # "minPinLen": 6, # "totalPublicMemory": 61440, # "freePublicMemory": 70144, # "totalPrivateMemory": 61440, # "freePrivateMemory": 70144, # "hardwareVersion": { # "major": 2, # "minor": 1 # }, # "firmwareVersion": { # "major": 0, # "minor": 0 # }, # "utcTime": "2024011509254600", # "mechanism": [ # "CKM_RSA_PKCS_KEY_PAIR_GEN", # "CKM_EC_KEY_PAIR_GEN", # "CKM_DES_KEY_GEN", # "80000001", # "8000000B", # "CKM_AES_KEY_GEN", # "CKM_DES2_KEY_GEN", # "CKM_DES3_KEY_GEN", # "CKM_RSA_PKCS", # "CKM_RSA_X_509", # "CKM_ECDSA", # "CKM_ECDSA_SHA1", # "CKM_MD2_RSA_PKCS", # "CKM_MD5_RSA_PKCS", # "CKM_SHA1_RSA_PKCS", # "CKM_SHA256_RSA_PKCS", # "CKM_DES_ECB", # "CKM_DES_CBC", # "CKM_DES_CBC_PAD", # "80000002", # "CKM_CPK_ECDSA", # "CKM_CPK_ECDSA_SHA1", # "8000000C", # "8000000D", # "8000000E", # "CKM_AES_ECB", # "CKM_AES_CBC", # "CKM_AES_CBC_PAD", # "CKM_DES3_ECB", # "CKM_DES3_CBC", # "CKM_DES3_CBC_PAD", # "CKM_SHA_1", # "CKM_SHA_1_HMAC", # "CKM_SHA_1_HMAC_GENERAL", # "CKM_SHA256", # "CKM_SHA256_HMAC", # "CKM_SHA256_HMAC_GENERAL", # "CKM_MD2", # "CKM_MD2_HMAC", # "CKM_MD2_HMAC_GENERAL", # "CKM_MD5", # "CKM_MD5_HMAC", # "CKM_MD5_HMAC_GENERAL", # "CKM_SSL3_PRE_MASTER_KEY_GEN", # "CKM_SSL3_MASTER_KEY_DERIVE", # "CKM_SSL3_KEY_AND_MAC_DERIVE", # "CKM_SSL3_MD5_MAC", # "CKM_SSL3_SHA1_MAC" # ], # "rsa": { # "minKeySize": 1024, # "maxKeySize": 4096 # } # } # } # ] # } # Use this online tool to generate parsing code from sample JSON: # Generate Parsing Code from JSON # Use this online tool to generate parsing code from sample JSON: # Generate Parsing Code from JSON set cryptokiVersionMajor [CkJsonObject_IntOf $json "cryptokiVersion.major"] set cryptokiVersionMinor [CkJsonObject_IntOf $json "cryptokiVersion.minor"] set manufacturerID [CkJsonObject_stringOf $json "manufacturerID"] set libraryDescription [CkJsonObject_stringOf $json "libraryDescription"] set libraryVersionMajor [CkJsonObject_IntOf $json "libraryVersion.major"] set libraryVersionMinor [CkJsonObject_IntOf $json "libraryVersion.minor"] set i 0 set count_i [CkJsonObject_SizeOfArray $json "slot"] while {$i < $count_i} { CkJsonObject_put_I $json $i set id [CkJsonObject_IntOf $json "slot[i].id"] set slotDescription [CkJsonObject_stringOf $json "slot[i].slotDescription"] set manufacturerID [CkJsonObject_stringOf $json "slot[i].manufacturerID"] set tokenPresent [CkJsonObject_BoolOf $json "slot[i].tokenPresent"] set removableDevice [CkJsonObject_BoolOf $json "slot[i].removableDevice"] set hardwareSlot [CkJsonObject_BoolOf $json "slot[i].hardwareSlot"] set hardwareVersionMajor [CkJsonObject_IntOf $json "slot[i].hardwareVersion.major"] set hardwareVersionMinor [CkJsonObject_IntOf $json "slot[i].hardwareVersion.minor"] set firmwareVersionMajor [CkJsonObject_IntOf $json "slot[i].firmwareVersion.major"] set firmwareVersionMinor [CkJsonObject_IntOf $json "slot[i].firmwareVersion.minor"] set tokenLabel [CkJsonObject_stringOf $json "slot[i].token.label"] set tokenManufacturerID [CkJsonObject_stringOf $json "slot[i].token.manufacturerID"] set tokenModel [CkJsonObject_stringOf $json "slot[i].token.model"] set tokenSerialNumber [CkJsonObject_stringOf $json "slot[i].token.serialNumber"] set tokenMaxSessionCount [CkJsonObject_IntOf $json "slot[i].token.maxSessionCount"] set tokenSessionCount [CkJsonObject_IntOf $json "slot[i].token.sessionCount"] set tokenMaxRwSessionCount [CkJsonObject_IntOf $json "slot[i].token.maxRwSessionCount"] set tokenRwSessionCount [CkJsonObject_IntOf $json "slot[i].token.rwSessionCount"] set tokenMaxPinLen [CkJsonObject_IntOf $json "slot[i].token.maxPinLen"] set tokenMinPinLen [CkJsonObject_IntOf $json "slot[i].token.minPinLen"] set tokenTotalPublicMemory [CkJsonObject_IntOf $json "slot[i].token.totalPublicMemory"] set tokenFreePublicMemory [CkJsonObject_IntOf $json "slot[i].token.freePublicMemory"] set tokenTotalPrivateMemory [CkJsonObject_IntOf $json "slot[i].token.totalPrivateMemory"] set tokenFreePrivateMemory [CkJsonObject_IntOf $json "slot[i].token.freePrivateMemory"] set tokenHardwareVersionMajor [CkJsonObject_IntOf $json "slot[i].token.hardwareVersion.major"] set tokenHardwareVersionMinor [CkJsonObject_IntOf $json "slot[i].token.hardwareVersion.minor"] set tokenFirmwareVersionMajor [CkJsonObject_IntOf $json "slot[i].token.firmwareVersion.major"] set tokenFirmwareVersionMinor [CkJsonObject_IntOf $json "slot[i].token.firmwareVersion.minor"] set tokenUtcTime [CkJsonObject_stringOf $json "slot[i].token.utcTime"] set tokenRsaMinKeySize [CkJsonObject_IntOf $json "slot[i].token.rsa.minKeySize"] set tokenRsaMaxKeySize [CkJsonObject_IntOf $json "slot[i].token.rsa.maxKeySize"] # The following token flag strings are possible: # CKF_RNG: has random # generator # CKF_WRITE_PROTECTED: token is write-protected # CKF_LOGIN_REQUIRED:user must login # CKF_USER_PIN_INITIALIZED:normal user's PIN is set # CKF_RESTORE_KEY_NOT_NEEDED: Every time the state of cryptographic operations of a session is # successfully saved, all keys needed to continue those operations are stored in the state # CKF_CLOCK_ON_TOKEN: The token has some sort of clock. The time on the clock is returned in the slot[i].token.utcTime # CKF_PROTECTED_AUTHENTICATION_PATH: There is some way for the user to login without sending a PIN through the Cryptoki library itself # CKF_DUAL_CRYPTO_OPERATIONS: A single session with the token can perform dual simultaneous cryptographic operations # (digest and encrypt; decrypt and digest; sign and encrypt; and decrypt and sign) # CKF_TOKEN_INITIALIZED: The token has been initialized. # CKF_SECONDARY_AUTHENTICATION: The token supports secondary authentication for private key objects. # CKF_USER_PIN_COUNT_LOW: An incorrect user login PIN has been entered at least once since the last successful authentication. # CKF_USER_PIN_FINAL_TRY: Supplying an incorrect user PIN will it to become locked. # CKF_USER_PIN_LOCKED: The user PIN has been locked. User login to the token is not possible. # CKF_USER_PIN_TO_BE_CHANGED: The user PIN value is the default value set by token initialization or manufacturing, # or the PIN has been expired by the card. # CKF_SO_PIN_COUNT_LOW: An incorrect SO login PIN has been entered at least once since the last successful authentication. # CKF_SO_PIN_FINAL_TRY: Supplying an incorrect SO PIN will it to become locked. # CKF_SO_PIN_LOCKED: The SO PIN has been locked. SO login to the token is not possible. # CKF_SO_PIN_TO_BE_CHANGED: The SO PIN value is the default value set by token initialization or manufacturing, # or the PIN has been expired by the card. # To see if particular flags are present: # aFlags is a CkJsonArray set aFlags [CkJsonObject_ArrayOf $json "slot[i].token.flags"] if {[CkJsonArray_FindString $aFlags "CKF_USER_PIN_LOCKED" 1] >= 0} then { puts "The token is locked." } if {[CkJsonArray_FindString $aFlags "CKF_RNG" 1] >= 0} then { puts "The token has a random number generator." } # ... delete_CkJsonArray $aFlags # To iterate over all flags.. set j 0 set count_j [CkJsonObject_SizeOfArray $json "slot[i].token.flags"] while {$j < $count_j} { CkJsonObject_put_J $json $j set tokenFlag [CkJsonObject_stringOf $json "slot[i].token.flags[j]"] set j [expr $j + 1] } set j 0 set count_j [CkJsonObject_SizeOfArray $json "slot[i].token.mechanism"] while {$j < $count_j} { CkJsonObject_put_J $json $j set strVal [CkJsonObject_stringOf $json "slot[i].token.mechanism[j]"] set j [expr $j + 1] } set i [expr $i + 1] } delete_CkPkcs11 $pkcs11 delete_CkJsonObject $json |
||||
© 2000-2024 Chilkat Software, Inc. All Rights Reserved.