Chilkat HOME .NET Core C# Android™ AutoIt C C# C++ Chilkat2-Python CkPython Classic ASP DataFlex Delphi ActiveX Delphi DLL Go Java Lianja Mono C# Node.js Objective-C PHP ActiveX PHP Extension Perl PowerBuilder PowerShell PureBasic Ruby SQL Server Swift 2 Swift 3,4,5... Tcl Unicode C Unicode C++ VB.NET VBScript Visual Basic 6.0 Visual FoxPro Xojo Plugin
(Unicode C) PKCS11 Find Specific Certificate on Smart Card or USB TokenSee more PKCS11 ExamplesThis example code shows how to find a particular certificate on a smart card or USB token. Note: This example requires Chilkat v9.5.0.88 or later.
#include <C_CkPkcs11W.h> #include <C_CkCertW.h> void ChilkatSample(void) { HCkPkcs11W pkcs11; BOOL success; int slotID; BOOL readWrite; int userType; const wchar_t *pin; HCkCertW cert; // This example requires the Chilkat API to have been previously unlocked. // See Global Unlock Sample for sample code. // Note: Chilkat's PKCS11 implementation runs on Windows, Linux, Mac OS X, and other supported operating systems. pkcs11 = CkPkcs11W_Create(); // Set your shared lib path -- either a full path to the DLL, .so, or .dylib, // or just the filename if the driver is in a location that can be automatically found. (Such as in C:\Windows\System32) CkPkcs11W_putSharedLibPath(pkcs11,L"C:/Program Files (x86)/Gemalto/IDGo 800 PKCS#11/IDPrimePKCS1164.dll"); success = CkPkcs11W_Initialize(pkcs11); if (success == FALSE) { wprintf(L"%s\n",CkPkcs11W_lastErrorText(pkcs11)); CkPkcs11W_Dispose(pkcs11); return; } // Pass -1 for the slotID to open a session on the first non-empty slot. slotID = -1; // Open a session. readWrite = TRUE; success = CkPkcs11W_OpenSession(pkcs11,slotID,readWrite); if (success == FALSE) { wprintf(L"%s\n",CkPkcs11W_lastErrorText(pkcs11)); CkPkcs11W_Dispose(pkcs11); return; } // Make it an authenticated session by calling Login. // // If we don't authenticate, then we won't be able to see the private keys, and thus // we won't know which certificates have an associated private key stored on the smart card. // The smart card PIN is passed to the Login method. // userType 1 indicates a "Normal User". userType = 1; pin = L"0000"; success = CkPkcs11W_Login(pkcs11,userType,pin); if (success == FALSE) { wprintf(L"%s\n",CkPkcs11W_lastErrorText(pkcs11)); success = CkPkcs11W_CloseSession(pkcs11); CkPkcs11W_Dispose(pkcs11); return; } // -------------------------------------------------------------------------- // The FindCert method can find a particular certificate in a number of different ways. // I'll demonstrate some common ways.. // 1) In many cases you'll be working with a smart card that contains one certificate that is to be used for // signing, and it is the certificate that is associated with the private key also stored on the smart card (or USB token). // There may be other certificates on the card, but these are the issuer certificates in the chain of authentication. // You're just interested in getting the certificate with the private key. // You can do it like this: cert = CkCertW_Create(); // Pass the keyword "privateKey" in the 1st argument, and an empty string in the 2nd arg. // This returns the 1st certificate that has a private key. success = CkPkcs11W_FindCert(pkcs11,L"privateKey",L"",cert); if (success == TRUE) { wprintf(L"Cert with private key: %s\n",CkCertW_subjectCN(cert)); } else { wprintf(L"No certificates having a private key were found.\n"); } // 2) Find a certificate by the Subject Common Name success = CkPkcs11W_FindCert(pkcs11,L"subjectCN",L"Chil application account (8c9be8e0-5544-4cd0-9062-290fbff353a7)",cert); if (success == TRUE) { wprintf(L"Found: %s\n",CkCertW_subjectCN(cert)); } else { wprintf(L"Not found: %s\n",CkCertW_subjectCN(cert)); } // 3) Find a certificate by hex serial number success = CkPkcs11W_FindCert(pkcs11,L"serial",L"5087bf1feda006af54a02f23a851104948acc26f",cert); if (success == TRUE) { wprintf(L"Found: %s\n",CkCertW_serialNumber(cert)); } else { wprintf(L"Not found: %s\n",CkCertW_serialNumber(cert)); } // 4) Find a certificate by hex serial number and Issuer Common Name success = CkPkcs11W_FindCert(pkcs11,L"serial:issuerCN",L"5087bf1feda006af54a02f23a851104948acc26f:Ibanity Production Third Party Application CA",cert); if (success == TRUE) { wprintf(L"Found: %s\n",CkCertW_subjectCN(cert)); } else { wprintf(L"Not found: %s\n",CkCertW_subjectCN(cert)); } // -------------------------------------------------------------------------- // Revert to an unauthenticated session by calling Logout. success = CkPkcs11W_Logout(pkcs11); if (success == FALSE) { wprintf(L"%s\n",CkPkcs11W_lastErrorText(pkcs11)); success = CkPkcs11W_CloseSession(pkcs11); CkPkcs11W_Dispose(pkcs11); CkCertW_Dispose(cert); return; } // When finished, close the session. // It is important to close the session (memory leaks will occur if the session is not properly closed). success = CkPkcs11W_CloseSession(pkcs11); if (success == FALSE) { wprintf(L"%s\n",CkPkcs11W_lastErrorText(pkcs11)); CkPkcs11W_Dispose(pkcs11); CkCertW_Dispose(cert); return; } wprintf(L"Success.\n"); CkPkcs11W_Dispose(pkcs11); CkCertW_Dispose(cert); } |
© 2000-2024 Chilkat Software, Inc. All Rights Reserved.