PKCS#11

"Marco Scarsi" <[email protected]> Wed, 09 May 2001 15:13:58 +0200
Newsgroups gmane.ietf.sfl
Message-ID <[email protected]>
Dear all,
I am trying to interface the SFL to a PKCS#11 library via the proper CTIL. 
As a first trial I want to use the auto_hi test program to sign a sample 
text using the private key that is on a cryptocard. Then, I'd like to verify 
the signature. In practice, how can I sign a text using the private key on 
my cryptocard? What do I need to do on the address book 
("AddressBook=./certs/mabRecips.dat" in file mylogin.cfg)? How can I create 
a new entry in this file starting from my keys? Do I need to extract the 
private key from the card (format..?) and place it somewhere in the 
certificates' directory?
Below are my configuration scripts
Thanx for help

Marco

***************** myautohi.cfg ************************
[hilevel test]
verify=1
output=1
number_of_runs=1
AddressBook=./certs/mabRecips.dat
Logins=./mylogin.cfg
hi_tests=auto_hi
[auto_hi]
CL_SignMsg::Sign ./hilevel/create/mySignedData.cfg
CL_VerifyMsg::Verify ./hilevel/consume/myVerify.cfg
#

***************** mylogin.cfg ************************
[Logins]
Description=Logins for this execution!
Login1=DLLLoginPKCS11

[DLLLoginPKCS11]
LoginType=DLLLogin
BuildArgs=sm_pkcs11Free3DLLd.dll 0 cryptocard_password ./pkcs11.dll
DLLFile=./sm_pkcs11Free3DLLd
#

***************** mySignedData.cfg ************************
[SignedDataTest]
contentFILE=./hilevel/Create/Datain.d/SignedData.in
contentOID=1.2.3.4.5
EncodedSignDataFILE=./hilevel/Create/mydata/sd
cert_path_issuer=1
MsgCertCrls=CertsSection
PreferredAlgs1=preferredAlgs
[preferredAlgs]
digestOID=1.2.840.113549.2.5
[CertsSection]
CertificateFILE=./certs/signature_cert.cer
Next=NULL
#

***************** myVerify.cfg ************************
[VerifyTest]
EncodedSignDataFILE=./hilevel/Create/mydata/sd
contentFILE=./hilevel/Consume/mydata/content.out
#

_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.