/* * Copyright (C) 2009 Internet Systems Consortium, Inc. ("ISC") * * Permission to use, copy, modify, and/or distribute this software for any * purpose with or without fee is hereby granted, provided that the above * copyright notice and this permission notice appear in all copies. * * THE SOFTWARE IS PROVIDED "AS IS" AND ISC AND NETWORK ASSOCIATES DISCLAIMS * ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED * WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE * FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR * IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */ /* * Portions copyright (c) 2008 Nominet UK. All rights reserved. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */ /* $Id: pkcs11-list.c,v 1.7 2009-10-26 23:36:53 each Exp $ */ /* pkcs11-list [-P] [-m module] [-s slot] [-i $id | -l $label] [-p $pin] */ /*! \file */ #include #include #include #include #include #include #include #include "cryptoki.h" #ifdef WIN32 #include "win32.c" #else #ifndef FORCE_STATIC_PROVIDER #include "unix.c" #endif #endif #if !(defined(HAVE_GETPASSPHRASE) || (defined (__SVR4) && defined (__sun))) #define getpassphrase(x) getpass(x) #endif int main(int argc, char *argv[]) { CK_RV rv; CK_SLOT_ID slot = 0; CK_SESSION_HANDLE hSession; CK_UTF8CHAR *pin = NULL; CK_BYTE attr_id[2]; CK_OBJECT_HANDLE akey[50]; char *label = NULL; int error = 0, public = 0, all = 0; unsigned int i = 0, id = 0; int c, errflg = 0; CK_ULONG ulObjectCount; CK_ATTRIBUTE search_template[] = { {CKA_ID, &attr_id, sizeof(attr_id)} }; char *pk11_provider; extern char *optarg; extern int optopt; pk11_provider = getenv("PKCS11_PROVIDER"); if (pk11_provider != NULL) pk11_libname = pk11_provider; while ((c = getopt(argc, argv, ":m:s:i:l:p:P")) != -1) { switch (c) { case 'P': public = 1; break; case 'm': pk11_libname = optarg; break; case 's': slot = atoi(optarg); break; case 'i': id = atoi(optarg); id &= 0xffff; break; case 'l': label = optarg; break; case 'p': pin = (CK_UTF8CHAR *)optarg; break; case ':': fprintf(stderr, "Option -%c requires an operand\n", optopt); errflg++; break; case '?': default: fprintf(stderr, "Unrecognised option: -%c\n", optopt); errflg++; } } if (errflg) { fprintf(stderr, "Usage:\n"); fprintf(stderr, "\tpkcs11-list [-P] [-m module] [-s slot] " "[-i id | -l label] [-p pin]\n"); exit(1); } if (!id && (label == NULL)) all = 1; if (slot) printf("slot %lu\n", slot); if (id) { printf("id %i\n", id); attr_id[0] = (id >> 8) & 0xff; attr_id[1] = id & 0xff; } else if (label != NULL) { printf("label %s\n", label); search_template[0].type = CKA_LABEL; search_template[0].pValue = label; search_template[0].ulValueLen = strlen(label); } /* Initialize the CRYPTOKI library */ rv = C_Initialize(NULL_PTR); if (rv != CKR_OK) { if (rv == 0xfe) fprintf(stderr, "Can't load or link module \"%s\"\n", pk11_libname); else fprintf(stderr, "C_Initialize: Error = 0x%.8lX\n", rv); exit(1); } /* Open a session on the slot found */ rv = C_OpenSession(slot, CKF_SERIAL_SESSION, NULL_PTR, NULL_PTR, &hSession); if (rv != CKR_OK) { fprintf(stderr, "C_OpenSession: Error = 0x%.8lX\n", rv); error = 1; goto exit_program; } /* Login to the Token (Keystore) */ if (!public) { if (pin == NULL) pin = (CK_UTF8CHAR *)getpassphrase("Enter Pin: "); rv = C_Login(hSession, CKU_USER, pin, strlen((char *)pin)); memset(pin, 0, strlen((char *)pin)); if (rv != CKR_OK) { fprintf(stderr, "C_Login: Error = 0x%.8lX\n", rv); error = 1; goto exit_session; } } rv = C_FindObjectsInit(hSession, search_template, all ? 0 : 1); if (rv != CKR_OK) { fprintf(stderr, "C_FindObjectsInit: Error = 0x%.8lX\n", rv); error = 1; goto exit_session; } ulObjectCount = 1; while (ulObjectCount) { rv = C_FindObjects(hSession, akey, 50, &ulObjectCount); if (rv != CKR_OK) { fprintf(stderr, "C_FindObjects: Error = 0x%.8lX\n", rv); error = 1; goto exit_search; } for (i = 0; i < ulObjectCount; i++) { unsigned int j, len; CK_OBJECT_CLASS oclass = 0; CK_BYTE labelbuf[64 + 1]; CK_BYTE idbuf[64]; CK_ATTRIBUTE template[] = { {CKA_CLASS, &oclass, sizeof(oclass)}, {CKA_LABEL, labelbuf, sizeof(labelbuf) - 1}, {CKA_ID, idbuf, sizeof(idbuf)} }; memset(labelbuf, 0, sizeof(labelbuf)); memset(idbuf, 0, sizeof(idbuf)); rv = C_GetAttributeValue(hSession, akey[i], template, 3); if (rv != CKR_OK) { fprintf(stderr, "C_GetAttributeValue[%u]: " "rv = 0x%.8lX\n", i, rv); if (rv == CKR_BUFFER_TOO_SMALL) fprintf(stderr, "%u too small: %lu %lu %lu\n", i, template[0].ulValueLen, template[1].ulValueLen, template[2].ulValueLen); error = 1; continue; } len = template[2].ulValueLen; printf("object[%u]: handle %lu class %lu " "label[%lu] '%s' id[%lu] ", i, akey[i], oclass, template[1].ulValueLen, labelbuf, template[2].ulValueLen); if (len == 2) { id = (idbuf[0] << 8) & 0xff00; id |= idbuf[1] & 0xff; printf("%u\n", id); } else { if (len > 8) len = 8; if (len > 0) printf("0x"); for (j = 0; j < len; j++) printf("%02x", idbuf[j]); if (template[2].ulValueLen > len) printf("...\n"); else printf("\n"); } } } exit_search: rv = C_FindObjectsFinal(hSession); if (rv != CKR_OK) { fprintf(stderr, "C_FindObjectsFinal: Error = 0x%.8lX\n", rv); error = 1; } exit_session: (void)C_CloseSession(hSession); exit_program: (void)C_Finalize(NULL_PTR); exit(error); }