init_tok.c

IBM的Linux上的PKCS#11实现

{
   CK_FLAGS          flags;
   CK_SESSION_HANDLE h_session;
   CK_RV             rc;
   CK_BYTE           user_pin[8];
   CK_ULONG          user_pin_len;
   CK_OBJECT_HANDLE  obj_list[20];
   CK_ULONG          find_count;

   CK_BYTE           cert1_id[]          = "Certificate ID #1";

   CK_BYTE           buf1[100];
   CK_ATTRIBUTE      verify_attribs[] =
   {
      {CKA_ID, &buf1, sizeof(buf1) }
   };



   memcpy( user_pin, "12345678", 8 );
   user_pin_len = 8;


   // create a USER R/W session
   //
   flags = CKF_SERIAL_SESSION | CKF_RW_SESSION;
   rc = funcs->C_OpenSession( SLOT_ID, flags, NULL, NULL, &h_session );
   if (rc != CKR_OK) {
      show_error("   C_OpenSession #1", rc );
      rc = FALSE;
      goto done;
   }

   rc = funcs->C_Login( h_session, CKU_USER, user_pin, user_pin_len );
   if (rc != CKR_OK) {
      show_error("   C_Login #1", rc );
      rc = FALSE;
      goto done;
   }

   //
   //---------------------------------------------------------------------
   //

   // now, retrieve a list of all object handles
   //
   rc = funcs->C_FindObjectsInit( h_session, NULL, 0 );
   if (rc != CKR_OK) {
      show_error("   C_FindObjectsInit #1", rc );
      rc = FALSE;
      goto done;
   }

   rc = funcs->C_FindObjects( h_session, obj_list, 20, &find_count );
   if (rc != CKR_OK) {
      show_error("   C_FindObjects #1", rc );
      rc = FALSE;
      goto done;
   }

   if (find_count == 0) {
      printf("ERROR:  no objects to examine\n");
      rc = FALSE;
      goto done;
   }

   // now, try to extract the CKA_APPLICATION attribute from the original
   // this will pull in the token's default value for CKA_APPLICATION which
   //
   verify_attribs[0].ulValueLen = sizeof(buf1);
   rc = funcs->C_GetAttributeValue( h_session, obj_list[0], verify_attribs, 1 );
   if (rc != CKR_OK) {
      show_error("   C_GetAttributeValue #1", rc );
      rc = FALSE;
      goto done;
   }

   if (memcmp( &cert1_id, verify_attribs[0].pValue, sizeof(cert1_id) ) != 0) {
      printf("   ERROR:  extracted attribute doesn't match\n");
      rc = FALSE;
      goto done;
   }

   printf("Attribute matches!  Good.\n");
   rc = TRUE;

done:
   funcs->C_CloseAllSessions( SLOT_ID );
   return rc;
}



int do_destroy_all_token_objects( void )
{
   CK_FLAGS          flags;
   CK_SESSION_HANDLE h_session;
   CK_RV             rc;
   CK_BYTE           user_pin[8];
   CK_ULONG          user_pin_len;

   CK_OBJECT_HANDLE  obj_list[20];
   CK_ULONG          find_count;
   CK_ULONG          i;


   memcpy( user_pin, "12345678", 8 );
   user_pin_len = 8;


   // create a USER R/W session
   //
   flags = CKF_SERIAL_SESSION | CKF_RW_SESSION;
   rc = funcs->C_OpenSession( SLOT_ID, flags, NULL, NULL, &h_session );
   if (rc != CKR_OK) {
      show_error("   C_OpenSession #1", rc );
      rc = FALSE;
      goto done;
   }

   rc = funcs->C_Login( h_session, CKU_USER, user_pin, user_pin_len );
   if (rc != CKR_OK) {
      show_error("   C_Login #1", rc );
      rc = FALSE;
      goto done;
   }

   //
   //---------------------------------------------------------------------
   //

   // now, retrieve a list of all object handles
   //
   rc = funcs->C_FindObjectsInit( h_session, NULL, 0 );
   if (rc != CKR_OK) {
      show_error("   C_FindObjectsInit #1", rc );
      rc = FALSE;
      goto done;
   }

   do {
      rc = funcs->C_FindObjects( h_session, obj_list, 20, &find_count );
      if (rc != CKR_OK) {
         show_error("   C_FindObjects #1", rc );
         rc = FALSE;
         goto done;
      }

      for (i=0; i < find_count; i++) {
         rc = funcs->C_DestroyObject( h_session, obj_list[i] );
         if (rc != CKR_OK) {
            printf("   C_DestroyObject #%d returned", i);
            show_error(" ", rc );
            rc = FALSE;
            goto done;
         }
      }
   } while (find_count != 0);

   rc = funcs->C_FindObjectsFinal( h_session );
   if (rc != CKR_OK) {
      show_error("   C_FindObjectsFinal #1", rc );
      rc = FALSE;
      goto done;
   }

   rc = TRUE;

done:
   funcs->C_CloseAllSessions( SLOT_ID );
   return rc;
}


int do_inittoken( void )
{
   CK_BYTE           label[32];
   CK_BYTE           so_pin[8];
   CK_ULONG          so_pin_len;
   int               len;
   CK_RV             rc;


   memcpy( so_pin, "87654321", 8 );
   so_pin_len = 8;

//   memcpy( label, "A new label                           ", 32 );
   memcpy( label,   "L13                                   ", 32 );

//   printf("Enter Token Label:");
//   scanf("%32s",label);
//   printf("\nLabel is %s:",label);

   for (len = 0; len <31;len++){
      if (label[len] == '\0'){
         label[len] = ' ';
         break;
      }
   }
 //  printf("\n");

//   memcpy( label,   "RemoteLeeds                           ", 32 );

   rc = funcs->C_InitToken( SLOT_ID, NULL, so_pin_len, label );
   if (rc != CKR_ARGUMENTS_BAD) {
      show_error(" C_InitToken Fail #1",rc);
      rc = FALSE;
      goto done;
   }

   rc = funcs->C_InitToken( SLOT_ID, so_pin, so_pin_len, NULL );
   if (rc != CKR_ARGUMENTS_BAD) {
      show_error(" C_InitToken Fail #2",rc);
      rc = FALSE;
      goto done;
   }

   rc = funcs->C_InitToken( SLOT_ID, so_pin, so_pin_len, label );
   if (rc != CKR_OK) {
      show_error("   C_InitToken #1", rc );
      rc = FALSE;
      goto done;
   }

   rc = TRUE;

done:
   return rc;
}


int do_setUserPIN( void )
{
   CK_BYTE  so_pin[8];
   CK_BYTE  user_pin[8];
   CK_ULONG user_pin_len, so_pin_len;
   CK_FLAGS flags;
   CK_SESSION_HANDLE h_session;
   CK_ULONG rc;

   memcpy( so_pin,   "87654321", 8 );
   memcpy( user_pin, "12345678", 8 );

   so_pin_len = user_pin_len = 8;


   flags = CKF_SERIAL_SESSION | CKF_RW_SESSION;
   rc = funcs->C_OpenSession( SLOT_ID, flags, NULL, NULL, &h_session );
   if (rc != CKR_OK) {
      show_error("   C_OpenSession #1", rc );
      rc = FALSE;
      goto done;
   }

   rc = funcs->C_Login( h_session, CKU_SO, so_pin, so_pin_len );
   if (rc != CKR_OK) {
      show_error("   C_Login #1", rc );
      rc = FALSE;
      goto done;
   }

   rc = funcs->C_InitPIN( h_session, user_pin, user_pin_len );
   if (rc != CKR_OK) {
      show_error("   C_InitPIN #1", rc );
      rc = FALSE;
      goto done;
   }

   rc = TRUE;

done:
   funcs->C_CloseAllSessions( SLOT_ID );
   return rc;
}


int do_GetTokenInfo( void )
{
   CK_SLOT_ID     slot_id;
   CK_TOKEN_INFO  info;
   CK_RV          rc;

   printf("do_GetTokenInfo...\n");

   slot_id = SLOT_ID;

   rc = funcs->C_GetTokenInfo( slot_id, &info );
   if (rc != CKR_OK) {
      show_error("   C_GetTokenInfo", rc );
      return FALSE;
   }


   printf("   CK_TOKEN_INFO for slot #1:  \n");
   printf("      label:                   %32.32s\n",  info.label );
   printf("      manufacturerID:          %32.32s\n",  info.manufacturerID );
   printf("      model:                   %16.16s\n",  info.model );
   printf("      serialNumber:            %16.16s\n",  info.serialNumber );
   printf("      flags:                   %0x\n",      info.flags );
   printf("      ulMaxSessionCount:       %d\n",       info.ulMaxSessionCount );
   printf("      ulSessionCount:          %d\n",       info.ulSessionCount );
   printf("      ulMaxRwSessionCount:     %d\n",       info.ulMaxRwSessionCount );
   printf("      ulRwSessionCount:        %d\n",       info.ulRwSessionCount );
   printf("      ulMaxPinLen:             %d\n",       info.ulMaxPinLen );
   printf("      ulMinPinLen:             %d\n",       info.ulMinPinLen );
   printf("      ulTotalPublicMemory:     %d\n",       info.ulTotalPublicMemory );
   printf("      ulFreePublicMemory:      %d\n",       info.ulFreePublicMemory );
   printf("      ulTotalPrivateMemory:    %d\n",       info.ulTotalPrivateMemory );
   printf("      ulFreePrivateMemory:     %d\n",       info.ulFreePrivateMemory );
   printf("      hardwareVersion:         %d.%d\n",    info.hardwareVersion.major, info.hardwareVersion.minor );
   printf("      firmwareVersion:         %d.%d\n",    info.firmwareVersion.major, info.firmwareVersion.minor );
   printf("      time:                    %16.16s\n",  info.utcTime );

   printf("Looks okay...\n");

   return TRUE;
}


//
//
void main( int argc, char **argv )
{
   CK_BYTE            line[20];
   CK_ULONG           val, i;
   int rc;

   SLOT_ID = 0;

   for (i=1; i < argc; i++) {
      if (strcmp(argv[i], "-slot") == 0) {
         SLOT_ID = atoi(argv[i+1]);
         i++;
      }

      if (strcmp(argv[i], "-h") == 0) {
         printf("usage:  %s [-slot <num>] [-h]\n\n", argv[0] );
         printf("By default, Slot #1 is used\n\n");
         return;
      }
   }

   printf("Using slot #%d...\n\n", SLOT_ID );

   rc = do_GetFunctionList();
   if (!rc)
      return;

   funcs->C_Initialize( NULL );


         do_inittoken();
         do_setUserPIN();

done:

   rc = funcs->C_Finalize( NULL );
   if (rc != CKR_OK)
      return;
}