(Tcl) ScMinidriver - Get CSP Container Map for Smart Card or USB Token

See more ScMinidriver Examples

Returns the contents of the CSP container map file (cmapfile). This gives an overview of what key containers and certificates exist in the smart card from a CSP's point of view.

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

set scmd [new_CkScMinidriver]

# Reader names (smart card readers or USB tokens) can be discovered
# via PCSC List Readers or PCSC Find Smart Cards
set readerName "SCM Microsystems Inc. SCR33x USB Smart Card Reader 0"
set success [CkScMinidriver_AcquireContext $scmd $readerName]
if {$success == 0} then {
    puts [CkScMinidriver_lastErrorText $scmd]
    delete_CkScMinidriver $scmd
    exit
}

set json [new_CkJsonObject]

CkJsonObject_put_EmitCompact $json 0

set success [CkScMinidriver_GetCspContainerMap $scmd $json]
if {$success == 0} then {
    puts [CkScMinidriver_lastErrorText $scmd]
    delete_CkScMinidriver $scmd
    delete_CkJsonObject $json
    exit
}

puts [CkJsonObject_emit $json]

# Here is sample output:
# See below for sample code to parse the JSON.

# --------------------------------------------------------------
# Some notes:
# 
# 1) Empty containers are not listed.
# 2) The "index" is the index of the key container on the card.
#    Note that in the example output below, the card has 4 occupied containers
#    at indexes 0, 1, 2, and 5.
# 3) If you see a key size (in bits) equal to 0, it means that key does not exist.
# 4) A container can potentially contain 2 keys + certificates -- a key for signing (also known as 
#    the "signature" key), and a key for authentication/authorization (also known as the 
#    "key exchange" key).
# 5) It is possible for a key to exist without the certificate.  For example, in the results
#    below there is a 2048-bit key-exchange key at index 1, but no certificate.
# 6) A certificate belonging to the key-exchange key is contained in the "kexCert" JSON member,
#    a certificate belonging to the signature key is contained in the "sigCert" JSON member (not shown below).
# --------------------------------------------------------------

# {
#   "containers": [
#     {
#       "index": 0,
#       "guid": "CertReq-PIVKeyC910-205fc3c2-19fe--42448",
#       "default": true,
#       "sigKeySizeBits": 0,
#       "kexKeySizeBits": 2048,
#       "kexCert": {
#         "serialNum": "15FBFBCF00010000313D",
#         "issuerCN": "PIVKey Device Certificate Authority",
#         "subjectCN": "PIVKey Device Certificate Authority"
#       }
#     },
#     {
#       "index": 1,
#       "guid": "{7b3c32dd-e992-c58f-0822-67d72fd52d43}",
#       "default": false,
#       "sigKeySizeBits": 0,
#       "kexKeySizeBits": 2048
#     },
#     {
#       "index": 2,
#       "guid": "{57547a77-18e7-7516-f5da-6aee13b46bbc}",
#       "default": false,
#       "sigKeySizeBits": 0,
#       "kexKeySizeBits": 2048
#     },
#     {
#       "index": 5,
#       "guid": "{306fd6da-9954-4f75-95c0-178f607a41fb}",
#       "default": false,
#       "sigKeySizeBits": 0,
#       "kexKeySizeBits": 2048,
#       "kexCert": {
#         "serialNum": "17C1B793A24D1A81490F5F768E6D23A5",
#         "issuerCN": "Matt",
#         "subjectCN": "Matt"
#       }
#     }
#   ]
# }

# Use this online tool to generate parsing code from sample JSON: 
# Generate Parsing Code from JSON

set i 0
set count_i [CkJsonObject_SizeOfArray $json "containers"]
while {$i < $count_i} {
    CkJsonObject_put_I $json $i
    set index [CkJsonObject_IntOf $json "containers[i].index"]
    set guid [CkJsonObject_stringOf $json "containers[i].guid"]
    set default [CkJsonObject_BoolOf $json "containers[i].default"]
    set sigKeySizeBits [CkJsonObject_IntOf $json "containers[i].sigKeySizeBits"]
    set kexKeySizeBits [CkJsonObject_IntOf $json "containers[i].kexKeySizeBits"]
    set kexCertSerialNum [CkJsonObject_stringOf $json "containers[i].kexCert.serialNum"]
    set kexCertIssuerCN [CkJsonObject_stringOf $json "containers[i].kexCert.issuerCN"]
    set kexCertSubjectCN [CkJsonObject_stringOf $json "containers[i].kexCert.subjectCN"]
    set sigCertSerialNum [CkJsonObject_stringOf $json "containers[i].sigCert.serialNum"]
    set sigCertIssuerCN [CkJsonObject_stringOf $json "containers[i].sigCert.issuerCN"]
    set sigCertSubjectCN [CkJsonObject_stringOf $json "containers[i].sigCert.subjectCN"]
    set i [expr $i + 1]
}

# Delete the context when finished with the card.
set success [CkScMinidriver_DeleteContext $scmd]
if {$success == 0} then {
    puts [CkScMinidriver_lastErrorText $scmd]
}


delete_CkScMinidriver $scmd
delete_CkJsonObject $json