Zig

PKCS11 Find all Public Keys

See more PKCS11 Examples

Demonstrates how to list all public keys on an HSM.

Note: This example requires Chilkat v9.5.0.96 or later.

Zig

const std = @import("std");
const chilkat = @import("chilkat");

pub fn main(init: std.process.Init) !void {
    const alloc = init.arena.allocator();

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // Note: Chilkat's PKCS11 implementation runs on Windows, Linux, Mac OS X, and other supported operating systems.

    const pkcs11 = try chilkat.Pkcs11.init();
    defer pkcs11.deinit();

    // Use the PKCS11 driver (.dll, .so, .dylib) for your particular HSM.
    // (The format of the path will change with the operating system.  Obviously, "C:/" is not used on non-Windows systems.
    pkcs11.setSharedLibPath("C:/Program Files (x86)/Gemalto/IDGo 800 PKCS#11/IDPrimePKCS1164.dll");

    // Establish a logged-on session. (We can typically skip the login by passing an empty PIN if only needing to list public keys)
    // Use your actual PIN here, or an empty string to skip login.
    const pin = "0000";
    const user_type = 1;
    pkcs11.quickSession(user_type, pin) catch {
        std.debug.print("{s}\n", .{try pkcs11.getLastErrorText(alloc)});
        return;
    };

    // Note: To find public keys, we need a session, but it doesn't necessarily need to be logged-on.

    const json = try chilkat.JsonObject.init();
    defer json.deinit();
    json.setEmitCompact(false);

    pkcs11.findAllKeys("public", json) catch {
        std.debug.print("{s}\n", .{try pkcs11.getLastErrorText(alloc)});
        return;
    };

    std.debug.print("{s}\n", .{try json.emit(alloc)});

    // Sample output, with parsing code below..

    // {
    //   "keys": [
    //     {
    //       "handle": 74842125,
    //       "id": "0001020304",
    //       "key_type": "RSA",
    //       "label": "Chilkat Software, Inc.",
    //       "modulus": "twVRf6O ... Rwa1ebFY0=",
    //       "exponent": "AAEAAQ=="
    //     },
    //     {
    //       "handle": 18415630,
    //       "id": "010203040A0B0C0D0E0F",
    //       "key_type": "RSA",
    //       "label": "ehealth private key",
    //       "modulus": "qdKjhOwA1 ... A4MtX8BYgHmLw==",
    //       "exponent": "AAEAAQ=="
    //     },
    //     {
    //       "handle": 3735567,
    //       "id": "D531B4B8F308489DA58350596178845973A4562E",
    //       "key_type": "RSA",
    //       "label": "d531b4b8-f308-489d-a583-505961788459",
    //       "modulus": "r0MmXRKBP ... HAd1kUPsNyzcQ==",
    //       "exponent": "AAEAAQ=="
    //     },
    //     {
    //       "handle": 238092304,
    //       "id": "0A0B0C0D01020304",
    //       "key_type": "RSA",
    //       "label": "MySshKey",
    //       "modulus": "ykFHcfBFOq ... rfXBK/6g9t+S6UjJ1kUQ==",
    //       "exponent": "AAEAAQ=="
    //     },
    //     {
    //       "handle": 49348625,
    //       "id": "48656C6C6F",
    //       "key_type": "RSA",
    //       "label": "2048-bit RSA key for testing",
    //       "modulus": "vReVaJzXZYIOB ... kamD/8iNvhAKlKbQ==",
    //       "exponent": "AAEAAQ=="
    //     }
    //   ]
    // }

    // Use this online tool to generate parsing code from sample JSON:
    // Generate Parsing Code from JSON

    var handle: i32 = 0;
    var id: [:0]const u8 = "";
    var key_type: [:0]const u8 = "";
    var label: [:0]const u8 = "";
    var modulus: [:0]const u8 = "";
    var exponent: [:0]const u8 = "";

    var i: i32 = 0;
    const count_i = json.sizeOfArray("keys");
    while (i < count_i) {
        json.setI(i);
        handle = json.intOf("keys[i].handle");
        id = try json.stringOf(alloc, "keys[i].id");
        key_type = try json.stringOf(alloc, "keys[i].key_type");
        label = try json.stringOf(alloc, "keys[i].label");
        modulus = try json.stringOf(alloc, "keys[i].modulus");
        exponent = try json.stringOf(alloc, "keys[i].exponent");
        i = i + 1;
    }

    pkcs11.logout() catch {};
    pkcs11.closeSession() catch {};
}