pkcs_slot.bash

IBM的Linux上的PKCS#11实现

#             If Recipient institutes patent litigation against a
#             Contributor with respect to a patent applicable to
#             software (including a cross-claim or counterclaim in a
#             lawsuit), then any patent licenses granted by that
#             Contributor to such Recipient under this Agreement shall
#             terminate as of the date such litigation is filed. In
#             addition, If Recipient institutes patent litigation
#             against any entity (including a cross-claim or
#             counterclaim in a lawsuit) alleging that the Program
#             itself (excluding combinations of the Program with other
#             software or hardware) infringes such Recipient's
#             patent(s), then such Recipient's rights granted under
#             Section 2(b) shall terminate as of the date such
#             litigation is filed.
#
#             All Recipient's rights under this Agreement shall
#             terminate if it fails to comply with any of the material
#             terms or conditions of this Agreement and does not cure
#             such failure in a reasonable period of time after becoming
#             aware of such noncompliance. If all Recipient's rights
#             under this Agreement terminate, Recipient agrees to cease
#             use and distribution of the Program as soon as reasonably
#             practicable. However, Recipient's obligations under this
#             Agreement and any licenses granted by Recipient relating
#             to the Program shall continue and survive. 
#
#             Everyone is permitted to copy and distribute copies of
#             this Agreement, but in order to avoid inconsistency the
#             Agreement is copyrighted and may only be modified in the
#             following manner. The Agreement Steward reserves the right
#             to publish new versions (including revisions) of this
#             Agreement from time to time. No one other than the
#             Agreement Steward has the right to modify this Agreement.
#
#             IBM is the initial Agreement Steward. IBM may assign the
#             responsibility to serve as the Agreement Steward to a
#             suitable separate entity. Each new version of the
#             Agreement will be given a distinguishing version number.
#             The Program (including Contributions) may always be
#             distributed subject to the version of the Agreement under
#             which it was received. In addition, after a new version of
#             the Agreement is published, Contributor may elect to
#             distribute the Program (including its Contributions) under
#             the new version. Except as expressly stated in Sections
#             2(a) and 2(b) above, Recipient receives no rights or
#             licenses to the intellectual property of any Contributor
#             under this Agreement, whether expressly, by implication,
#             estoppel or otherwise. All rights in the Program not
#             expressly granted under this Agreement are reserved.
#
#
#             This Agreement is governed by the laws of the State of New
#             York and the intellectual property laws of the United
#             States of America. No party to this Agreement will bring a
#             legal action under this Agreement more than one year after
#             the cause of action arose. Each party waives its rights to
#             a jury trial in any resulting litigation. 
#
#
#
#*/
#
#/* (C) COPYRIGHT International Business Machines Corp. 2001          */



SLOT_DB="ck_slot"
DB_PATH="/etc/pkcs11/"
DB_LOCATION=`echo $DB_PATH$SLOT_DB`

DEEP4758_DLL="/usr/lib/pkcs11/stdll/PKCS11_4758.so"
DEEP4758_INIT="SC_Initialize"


SOFT_DIR="/etc/pkcs11/swtok"
SOFT_DLL="/usr/lib/pkcs11/stdll/PKCS11_SW.so"
SOFT_INIT="ST_Initialize"

ICA_DIR="/etc/pkcs11/lite"
ICA_DLL="/usr/lib/pkcs11/stdll/PKCS11_ICA.so"
ICA_INIT="ST_Initialize"

BCOM_DIR="/etc/pkcs11/bcom"
BCOM_DLL="/usr/lib/pkcs11/stdll/PKCS11_BC.so"
BCOM_INIT="ST_Initialize"

AEP_DIR="/etc/pkcs11/aep"
AEP_DLL="/usr/lib/pkcs11/stdll/PKCS11_AEP.so"
AEP_INIT="ST_Initialize"

CR_DIR="/etc/pkcs11/cr"
CR_DLL="/usr/lib/pkcs11/stdll/PKCS11_CR.so"
CR_INIT="ST_Initialize"

SYSTEM=`uname -s`
MANUFACTURER=`uname -rs`

# Return Codes
OK=0
INVALID_PARAMS=1
NOT_CRYPT_DEVICE=2
NOT_VALID_DEVICE=3
NO_DATABASE=4

if [ ! $# = 2 ]
  then
    echo "Usage: $0 devicenumber depth"
    exit $INVALID_PARAMS
fi

DEVICE=$1
DEPTH=$2

# Check for the existance of the directories 
if [ ! -d /etc/pkcs11 ]
then
	mkdir -p /etc/pkcs11
        chgrp pkcs11 /etc/pkcs11
	chmod -R g+rw /etc/pkcs11
fi


# If the depth is "soft" then we are configuring the soft token....
if [ $DEPTH = "soft" ]
then
    test  -d $SOFT_DIR
    if [ $? -ne 0 ]
    then
	mkdir  $SOFT_DIR
	chgrp pkcs11 $SOFT_DIR
	mkdir "$SOFT_DIR"/TOK_OBJ
	chgrp pkcs11 "$SOFT_DIR"/TOK_OBJ
    fi
    SYS_SLOT="Soft"
fi

# If we are using a shallow device, make sure that the directory
# to store token objects is available, if not create it and change
# the ownership to the pkcs11 group 


if [ $DEPTH = "ica" ]
then
    test  -d $ICA_DIR
    if [ $? -ne 0 ]
    then
	mkdir  $ICA_DIR
	chgrp pkcs11 $ICA_DIR
	mkdir "$ICA_DIR"/TOK_OBJ
	chgrp pkcs11 "$ICA_DIR"/TOK_OBJ
    fi
    SYS_SLOT="ICA"
fi

if [ $DEPTH = "bcom" ]
then
    test  -d $BCOM_DIR
    if [ $? -ne 0 ]
    then
	mkdir  $BCOM_DIR
	chgrp pkcs11 $BCOM_DIR
	mkdir "$BCOM_DIR"/TOK_OBJ
	chgrp pkcs11 "$BCOM_DIR"/TOK_OBJ
    fi
    SYS_SLOT="BCOM"
fi

if [ $DEPTH = "aep" ]
then
    test  -d $AEP_DIR
    if [ $? -ne 0 ]
    then
	mkdir  $AEP_DIR
	chgrp pkcs11 $AEP_DIR
	mkdir "$AEP_DIR"/TOK_OBJ
	chgrp pkcs11 "$AEP_DIR"/TOK_OBJ
    fi
    SYS_SLOT="AEP"
fi

if [ $DEPTH = "cr" ]
then
    test  -d $CR_DIR
    if [ $? -ne 0 ]
    then
        mkdir  $CR_DIR
        chgrp pkcs11 $CR_DIR
        mkdir "$CR_DIR"/TOK_OBJ
        chgrp pkcs11 "$CR_DIR"/TOK_OBJ
    fi
    SYS_SLOT="CRNT"
fi

# The device name is now parsed to find the minor number of the
# device we are examining.  Since the last letter of crypt is "t"
# everything after the t is treated as the device number

if [ $DEPTH = "deep" ]
then
    SYS_SLOT="$DEVICE"
fi

SLOT_DESCRIPTION=`echo $MANUFACTURER $SYSTEM  "("$SYS_SLOT")"`


CFGFILE=/etc/pkcs11/pk_config_data

if [ $DEPTH = "deep" ]
then
echo "TRUE|0|$SLOT_DESCRIPTION|$MANUFACTURER|TRUE|FALSE|TRUE|0|0|1|1|$DEVICE|$DEEP4758_DLL|$DEEP4758_INIT" >>$CFGFILE

elif [ $DEPTH = "ica" ]
then
echo "TRUE|0|$SLOT_DESCRIPTION|$MANUFACTURER|TRUE|FALSE|TRUE|0|0|1|1|NONE|$ICA_DLL|$ICA_INIT" >>$CFGFILE
elif [ $DEPTH = "bcom" ]
then
echo "TRUE|0|$SLOT_DESCRIPTION|$MANUFACTURER|TRUE|FALSE|TRUE|0|0|1|1|NONE|$BCOM_DLL|$BCOM_INIT" >>$CFGFILE
elif [ $DEPTH = "aep" ]
then
echo "TRUE|0|$SLOT_DESCRIPTION|$MANUFACTURER|TRUE|FALSE|TRUE|0|0|1|1|NONE|$AEP_DLL|$AEP_INIT" >>$CFGFILE
elif [ $DEPTH = "cr" ]
then
echo "TRUE|0|$SLOT_DESCRIPTION|$MANUFACTURER|TRUE|FALSE|TRUE|0|0|1|1|NONE|$CR_DLL|$CR_INIT" >>$CFGFILE
elif [ $DEPTH = "soft" ]
then
    echo "TRUE|0|$SLOT_DESCRIPTION|$MANUFACTURER|TRUE|FALSE|FALSE|0|0|1|1|NONE|$SOFT_DLL|$SOFT_INIT" >>$CFGFILE
fi

cd /etc
chmod -R g+w pkcs11


exit $OK