2 * Copyright (C) 2010 Free Software Foundation, Inc.
3 * Author: Nikos Mavrogiannopoulos
5 * This file is part of GnuTLS.
7 * GnuTLS is free software: you can redistribute it and/or modify
8 * it under the terms of the GNU General Public License as published by
9 * the Free Software Foundation, either version 3 of the License, or
10 * (at your option) any later version.
12 * GnuTLS is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 * GNU General Public License for more details.
17 * You should have received a copy of the GNU General Public License
18 * along with this program. If not, see <http://www.gnu.org/licenses/>.
24 #include <gnutls/gnutls.h>
25 #include <gnutls/extra.h>
26 #include <gnutls/pkcs11.h>
27 #include <gnutls/abstract.h>
31 #include "certtool-cfg.h"
32 #include "certtool-common.h"
35 #include <p11common.h>
38 pkcs11_delete (FILE * outfile, const char *url, int batch, unsigned int login,
39 common_info_st * info)
42 unsigned int obj_flags = 0;
45 obj_flags = GNUTLS_PKCS11_OBJ_FLAG_LOGIN;
49 pkcs11_list (outfile, url, PKCS11_TYPE_ALL, login,
50 GNUTLS_PKCS11_URL_LIB, info);
52 read_yesno ("Are you sure you want to delete those objects? (y/N): ");
59 ret = gnutls_pkcs11_delete_url (url, obj_flags);
62 fprintf (stderr, "Error in %s:%d: %s\n", __func__, __LINE__,
63 gnutls_strerror (ret));
67 fprintf (outfile, "\n%d objects deleted\n", ret);
72 /* lists certificates from a token
75 pkcs11_list (FILE * outfile, const char *url, int type, unsigned int login,
76 unsigned int detailed, common_info_st * info)
78 gnutls_pkcs11_obj_t *crt_list;
79 gnutls_x509_crt_t xcrt;
80 unsigned int crt_list_size = 0;
84 unsigned int obj_flags = 0;
87 obj_flags = GNUTLS_PKCS11_OBJ_FLAG_LOGIN;
94 if (type == PKCS11_TYPE_TRUSTED)
96 attrs = GNUTLS_PKCS11_OBJ_ATTR_CRT_TRUSTED;
98 else if (type == PKCS11_TYPE_PK)
100 attrs = GNUTLS_PKCS11_OBJ_ATTR_CRT_WITH_PRIVKEY;
102 else if (type == PKCS11_TYPE_CRT_ALL)
104 attrs = GNUTLS_PKCS11_OBJ_ATTR_CRT_ALL;
106 else if (type == PKCS11_TYPE_PRIVKEY)
108 attrs = GNUTLS_PKCS11_OBJ_ATTR_PRIVKEY;
112 attrs = GNUTLS_PKCS11_OBJ_ATTR_ALL;
115 /* give some initial value to avoid asking for the pkcs11 pin twice.
118 crt_list = malloc (sizeof (*crt_list) * crt_list_size);
119 if (crt_list == NULL)
121 fprintf (stderr, "Memory error\n");
125 ret = gnutls_pkcs11_obj_list_import_url (crt_list, &crt_list_size, url,
127 if (ret < 0 && ret != GNUTLS_E_SHORT_MEMORY_BUFFER)
129 fprintf (stderr, "Error in crt_list_import (1): %s\n",
130 gnutls_strerror (ret));
134 if (crt_list_size == 0)
136 fprintf (stderr, "No matching objects found\n");
140 if (ret == GNUTLS_E_SHORT_MEMORY_BUFFER)
142 crt_list = realloc (crt_list, sizeof (*crt_list) * crt_list_size);
143 if (crt_list == NULL)
145 fprintf (stderr, "Memory error\n");
150 gnutls_pkcs11_obj_list_import_url (crt_list, &crt_list_size, url,
154 fprintf (stderr, "Error in crt_list_import: %s\n",
155 gnutls_strerror (ret));
160 for (i = 0; i < crt_list_size; i++)
165 ret = gnutls_pkcs11_obj_export_url (crt_list[i], detailed, &output);
168 fprintf (stderr, "Error in %s:%d: %s\n", __func__, __LINE__,
169 gnutls_strerror (ret));
173 fprintf (outfile, "Object %d:\n\tURL: %s\n", i, output);
175 fprintf (outfile, "\tType: %s\n",
176 gnutls_pkcs11_type_get_name (gnutls_pkcs11_obj_get_type
181 gnutls_pkcs11_obj_get_info (crt_list[i], GNUTLS_PKCS11_OBJ_LABEL, buf,
185 fprintf (stderr, "Error in %s:%d: %s\n", __func__, __LINE__,
186 gnutls_strerror (ret));
189 fprintf (outfile, "\tLabel: %s\n", buf);
193 gnutls_pkcs11_obj_get_info (crt_list[i], GNUTLS_PKCS11_OBJ_ID_HEX,
197 fprintf (stderr, "Error in %s:%d: %s\n", __func__, __LINE__,
198 gnutls_strerror (ret));
201 fprintf (outfile, "\tID: %s\n\n", buf);
205 if (attrs == GNUTLS_PKCS11_OBJ_ATTR_ALL
206 || attrs == GNUTLS_PKCS11_OBJ_ATTR_PRIVKEY)
209 ret = gnutls_x509_crt_init (&xcrt);
212 fprintf (stderr, "Error in %s:%d: %s\n", __func__, __LINE__,
213 gnutls_strerror (ret));
217 ret = gnutls_x509_crt_import_pkcs11 (xcrt, crt_list[i]);
220 fprintf (stderr, "Error in %s:%d: %s\n", __func__, __LINE__,
221 gnutls_strerror (ret));
227 ret = gnutls_x509_crt_export (xcrt, GNUTLS_X509_FMT_PEM, buffer, &size);
230 fprintf (stderr, "Error in %s:%d: %s\n", __func__, __LINE__,
231 gnutls_strerror (ret));
235 fwrite (buffer, 1, size, outfile);
236 fputs ("\n\n", outfile);
239 gnutls_x509_crt_deinit (xcrt);
248 pkcs11_export (FILE * outfile, const char *url, unsigned int login,
249 common_info_st * info)
251 gnutls_pkcs11_obj_t crt;
252 gnutls_x509_crt_t xcrt;
253 gnutls_pubkey_t pubkey;
256 unsigned int obj_flags = 0;
259 obj_flags = GNUTLS_PKCS11_OBJ_FLAG_LOGIN;
266 ret = gnutls_pkcs11_obj_init (&crt);
269 fprintf (stderr, "Error in %s:%d: %s\n", __func__, __LINE__,
270 gnutls_strerror (ret));
274 ret = gnutls_pkcs11_obj_import_url (crt, url, obj_flags);
277 fprintf (stderr, "Error in %s:%d: %s\n", __func__, __LINE__,
278 gnutls_strerror (ret));
282 switch (gnutls_pkcs11_obj_get_type (crt))
284 case GNUTLS_PKCS11_OBJ_X509_CRT:
285 ret = gnutls_x509_crt_init (&xcrt);
288 fprintf (stderr, "Error in %s:%d: %s\n", __func__, __LINE__,
289 gnutls_strerror (ret));
293 ret = gnutls_x509_crt_import_pkcs11 (xcrt, crt);
296 fprintf (stderr, "Error in %s:%d: %s\n", __func__, __LINE__,
297 gnutls_strerror (ret));
302 ret = gnutls_x509_crt_export (xcrt, GNUTLS_X509_FMT_PEM, buffer, &size);
305 fprintf (stderr, "Error in %s:%d: %s\n", __func__, __LINE__,
306 gnutls_strerror (ret));
309 fwrite (buffer, 1, size, outfile);
311 gnutls_x509_crt_deinit (xcrt);
313 case GNUTLS_PKCS11_OBJ_PUBKEY:
314 ret = gnutls_pubkey_init (&pubkey);
317 fprintf (stderr, "Error in %s:%d: %s\n", __func__, __LINE__,
318 gnutls_strerror (ret));
322 ret = gnutls_pubkey_import_pkcs11 (pubkey, crt, 0);
325 fprintf (stderr, "Error in %s:%d: %s\n", __func__, __LINE__,
326 gnutls_strerror (ret));
331 ret = gnutls_pubkey_export (pubkey, GNUTLS_X509_FMT_PEM, buffer, &size);
334 fprintf (stderr, "Error in %s:%d: %s\n", __func__, __LINE__,
335 gnutls_strerror (ret));
338 fwrite (buffer, 1, size, outfile);
340 gnutls_pubkey_deinit (pubkey);
344 gnutls_datum data, enc;
347 ret = gnutls_pkcs11_obj_export (crt, buffer, &size);
356 ret = gnutls_pem_base64_encode_alloc ("DATA", &data, &enc);
359 fprintf (stderr, "Error in %s:%d: %s\n", __func__, __LINE__,
360 gnutls_strerror (ret));
364 fwrite (enc.data, 1, enc.size, outfile);
366 gnutls_free (enc.data);
370 fputs ("\n\n", outfile);
373 gnutls_pkcs11_obj_deinit (crt);
380 pkcs11_token_list (FILE * outfile, unsigned int detailed,
381 common_info_st * info)
393 ret = gnutls_pkcs11_token_get_url (i, detailed, &url);
394 if (ret == GNUTLS_E_REQUESTED_DATA_NOT_AVAILABLE)
399 fprintf (stderr, "Error in %s:%d: %s\n", __func__, __LINE__,
400 gnutls_strerror (ret));
404 fprintf (outfile, "Token %d:\n\tURL: %s\n", i, url);
408 gnutls_pkcs11_token_get_info (url, GNUTLS_PKCS11_TOKEN_LABEL, buf,
412 fprintf (stderr, "Error in %s:%d: %s\n", __func__, __LINE__,
413 gnutls_strerror (ret));
417 fprintf (outfile, "\tLabel: %s\n", buf);
421 gnutls_pkcs11_token_get_info (url, GNUTLS_PKCS11_TOKEN_MANUFACTURER,
425 fprintf (stderr, "Error in %s:%d: %s\n", __func__, __LINE__,
426 gnutls_strerror (ret));
430 fprintf (outfile, "\tManufacturer: %s\n", buf);
434 gnutls_pkcs11_token_get_info (url, GNUTLS_PKCS11_TOKEN_MODEL, buf,
438 fprintf (stderr, "Error in %s:%d: %s\n", __func__, __LINE__,
439 gnutls_strerror (ret));
443 fprintf (outfile, "\tModel: %s\n", buf);
447 gnutls_pkcs11_token_get_info (url, GNUTLS_PKCS11_TOKEN_SERIAL, buf,
451 fprintf (stderr, "Error in %s:%d: %s\n", __func__, __LINE__,
452 gnutls_strerror (ret));
456 fprintf (outfile, "\tSerial: %s\n", buf);
457 fprintf (outfile, "\n\n");
467 pkcs11_write (FILE * outfile, const char *url, const char *label, int trusted,
468 unsigned int login, common_info_st * info)
470 gnutls_x509_crt_t xcrt;
471 gnutls_x509_privkey_t xkey;
473 unsigned int flags = 0;
474 unsigned int key_usage = 0;
475 gnutls_datum_t *secret_key;
478 flags = GNUTLS_PKCS11_OBJ_FLAG_LOGIN;
485 secret_key = load_secret_key (0, info);
486 if (secret_key != NULL)
489 gnutls_pkcs11_copy_secret_key (url, secret_key, label, key_usage,
491 GNUTLS_PKCS11_OBJ_FLAG_MARK_SENSITIVE);
494 fprintf (stderr, "Error in %s:%d: %s\n", __func__, __LINE__,
495 gnutls_strerror (ret));
500 xcrt = load_cert (0, info);
504 flags |= GNUTLS_PKCS11_OBJ_FLAG_MARK_TRUSTED|GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO;
506 ret = gnutls_pkcs11_copy_x509_crt (url, xcrt, label, flags);
509 fprintf (stderr, "Error in %s:%d: %s\n", __func__, __LINE__,
510 gnutls_strerror (ret));
514 gnutls_x509_crt_get_key_usage (xcrt, &key_usage, NULL);
517 xkey = load_x509_private_key (0, info);
521 gnutls_pkcs11_copy_x509_privkey (url, xkey, label, key_usage,
523 GNUTLS_PKCS11_OBJ_FLAG_MARK_SENSITIVE);
526 fprintf (stderr, "Error in %s:%d: %s\n", __func__, __LINE__,
527 gnutls_strerror (ret));
532 if (xkey == NULL && xcrt == NULL && secret_key == NULL)
535 "You must use --load-privkey, --load-certificate or --secret-key to load the file to be copied\n");
543 pkcs11_init (FILE * outfile, const char *url, const char *label,
544 common_info_st * info)
554 fprintf (stderr, "No token URL given to initialize!\n");
558 pin = getpass ("Enter Security Officer's PIN: ");
562 if (strlen(pin) >= sizeof(so_pin))
565 strcpy (so_pin, pin);
567 pin = getpass ("Enter new User's PIN: ");
571 ret = gnutls_pkcs11_token_init (url, so_pin, label);
574 fprintf (stderr, "Error in %s:%d: %s\n", __func__, __LINE__,
575 gnutls_strerror (ret));
579 ret = gnutls_pkcs11_token_set_pin (url, NULL, pin, GNUTLS_PKCS11_PIN_USER);
582 fprintf (stderr, "Error in %s:%d: %s\n", __func__, __LINE__,
583 gnutls_strerror (ret));
590 const char *mech_list[] = {
591 [0] = "CKM_RSA_PKCS_KEY_PAIR_GEN",
592 [1] = "CKM_RSA_PKCS",
593 [2] = "CKM_RSA_9796",
594 [3] = "CKM_RSA_X_509",
595 [4] = "CKM_MD2_RSA_PKCS",
596 [5] = "CKM_MD5_RSA_PKCS",
597 [6] = "CKM_SHA1_RSA_PKCS",
598 [7] = "CKM_RIPEMD128_RSA_PKCS",
599 [8] = "CKM_RIPEMD160_RSA_PKCS",
600 [9] = "CKM_RSA_PKCS_OAEP",
601 [0xa] = "CKM_RSA_X9_31_KEY_PAIR_GEN",
602 [0xb] = "CKM_RSA_X9_31",
603 [0xc] = "CKM_SHA1_RSA_X9_31",
604 [0xd] = "CKM_RSA_PKCS_PSS",
605 [0xe] = "CKM_SHA1_RSA_PKCS_PSS",
606 [0x10] = "CKM_DSA_KEY_PAIR_GEN",
608 [0x12] = "CKM_DSA_SHA1",
609 [0x20] = "CKM_DH_PKCS_KEY_PAIR_GEN",
610 [0x21] = "CKM_DH_PKCS_DERIVE",
611 [0x30] = "CKM_X9_42_DH_KEY_PAIR_GEN",
612 [0x31] = "CKM_X9_42_DH_DERIVE",
613 [0x32] = "CKM_X9_42_DH_HYBRID_DERIVE",
614 [0x33] = "CKM_X9_42_MQV_DERIVE",
615 [0x40] = "CKM_SHA256_RSA_PKCS",
616 [0x41] = "CKM_SHA384_RSA_PKCS",
617 [0x42] = "CKM_SHA512_RSA_PKCS",
618 [0x43] = "CKM_SHA256_RSA_PKCS_PSS",
619 [0x44] = "CKM_SHA384_RSA_PKCS_PSS",
620 [0x45] = "CKM_SHA512_RSA_PKCS_PSS",
621 [0x100] = "CKM_RC2_KEY_GEN",
622 [0x101] = "CKM_RC2_ECB",
623 [0x102] = "CKM_RC2_CBC",
624 [0x103] = "CKM_RC2_MAC",
625 [0x104] = "CKM_RC2_MAC_GENERAL",
626 [0x105] = "CKM_RC2_CBC_PAD",
627 [0x110] = "CKM_RC4_KEY_GEN",
629 [0x120] = "CKM_DES_KEY_GEN",
630 [0x121] = "CKM_DES_ECB",
631 [0x122] = "CKM_DES_CBC",
632 [0x123] = "CKM_DES_MAC",
633 [0x124] = "CKM_DES_MAC_GENERAL",
634 [0x125] = "CKM_DES_CBC_PAD",
635 [0x130] = "CKM_DES2_KEY_GEN",
636 [0x131] = "CKM_DES3_KEY_GEN",
637 [0x132] = "CKM_DES3_ECB",
638 [0x133] = "CKM_DES3_CBC",
639 [0x134] = "CKM_DES3_MAC",
640 [0x135] = "CKM_DES3_MAC_GENERAL",
641 [0x136] = "CKM_DES3_CBC_PAD",
642 [0x140] = "CKM_CDMF_KEY_GEN",
643 [0x141] = "CKM_CDMF_ECB",
644 [0x142] = "CKM_CDMF_CBC",
645 [0x143] = "CKM_CDMF_MAC",
646 [0x144] = "CKM_CDMF_MAC_GENERAL",
647 [0x145] = "CKM_CDMF_CBC_PAD",
649 [0x201] = "CKM_MD2_HMAC",
650 [0x202] = "CKM_MD2_HMAC_GENERAL",
652 [0x211] = "CKM_MD5_HMAC",
653 [0x212] = "CKM_MD5_HMAC_GENERAL",
654 [0x220] = "CKM_SHA_1",
655 [0x221] = "CKM_SHA_1_HMAC",
656 [0x222] = "CKM_SHA_1_HMAC_GENERAL",
657 [0x230] = "CKM_RIPEMD128",
658 [0x231] = "CKM_RIPEMD128_HMAC",
659 [0x232] = "CKM_RIPEMD128_HMAC_GENERAL",
660 [0x240] = "CKM_RIPEMD160",
661 [0x241] = "CKM_RIPEMD160_HMAC",
662 [0x242] = "CKM_RIPEMD160_HMAC_GENERAL",
663 [0x250] = "CKM_SHA256",
664 [0x251] = "CKM_SHA256_HMAC",
665 [0x252] = "CKM_SHA256_HMAC_GENERAL",
666 [0x260] = "CKM_SHA384",
667 [0x261] = "CKM_SHA384_HMAC",
668 [0x262] = "CKM_SHA384_HMAC_GENERAL",
669 [0x270] = "CKM_SHA512",
670 [0x271] = "CKM_SHA512_HMAC",
671 [0x272] = "CKM_SHA512_HMAC_GENERAL",
672 [0x300] = "CKM_CAST_KEY_GEN",
673 [0x301] = "CKM_CAST_ECB",
674 [0x302] = "CKM_CAST_CBC",
675 [0x303] = "CKM_CAST_MAC",
676 [0x304] = "CKM_CAST_MAC_GENERAL",
677 [0x305] = "CKM_CAST_CBC_PAD",
678 [0x310] = "CKM_CAST3_KEY_GEN",
679 [0x311] = "CKM_CAST3_ECB",
680 [0x312] = "CKM_CAST3_CBC",
681 [0x313] = "CKM_CAST3_MAC",
682 [0x314] = "CKM_CAST3_MAC_GENERAL",
683 [0x315] = "CKM_CAST3_CBC_PAD",
684 [0x320] = "CKM_CAST128_KEY_GEN",
685 [0x321] = "CKM_CAST128_ECB",
686 [0x322] = "CKM_CAST128_CBC",
687 [0x323] = "CKM_CAST128_MAC",
688 [0x324] = "CKM_CAST128_MAC_GENERAL",
689 [0x325] = "CKM_CAST128_CBC_PAD",
690 [0x330] = "CKM_RC5_KEY_GEN",
691 [0x331] = "CKM_RC5_ECB",
692 [0x332] = "CKM_RC5_CBC",
693 [0x333] = "CKM_RC5_MAC",
694 [0x334] = "CKM_RC5_MAC_GENERAL",
695 [0x335] = "CKM_RC5_CBC_PAD",
696 [0x340] = "CKM_IDEA_KEY_GEN",
697 [0x341] = "CKM_IDEA_ECB",
698 [0x342] = "CKM_IDEA_CBC",
699 [0x343] = "CKM_IDEA_MAC",
700 [0x344] = "CKM_IDEA_MAC_GENERAL",
701 [0x345] = "CKM_IDEA_CBC_PAD",
702 [0x350] = "CKM_GENERIC_SECRET_KEY_GEN",
703 [0x360] = "CKM_CONCATENATE_BASE_AND_KEY",
704 [0x362] = "CKM_CONCATENATE_BASE_AND_DATA",
705 [0x363] = "CKM_CONCATENATE_DATA_AND_BASE",
706 [0x364] = "CKM_XOR_BASE_AND_DATA",
707 [0x365] = "CKM_EXTRACT_KEY_FROM_KEY",
708 [0x370] = "CKM_SSL3_PRE_MASTER_KEY_GEN",
709 [0x371] = "CKM_SSL3_MASTER_KEY_DERIVE",
710 [0x372] = "CKM_SSL3_KEY_AND_MAC_DERIVE",
711 [0x373] = "CKM_SSL3_MASTER_KEY_DERIVE_DH",
712 [0x374] = "CKM_TLS_PRE_MASTER_KEY_GEN",
713 [0x375] = "CKM_TLS_MASTER_KEY_DERIVE",
714 [0x376] = "CKM_TLS_KEY_AND_MAC_DERIVE",
715 [0x377] = "CKM_TLS_MASTER_KEY_DERIVE_DH",
716 [0x380] = "CKM_SSL3_MD5_MAC",
717 [0x381] = "CKM_SSL3_SHA1_MAC",
718 [0x390] = "CKM_MD5_KEY_DERIVATION",
719 [0x391] = "CKM_MD2_KEY_DERIVATION",
720 [0x392] = "CKM_SHA1_KEY_DERIVATION",
721 [0x3a0] = "CKM_PBE_MD2_DES_CBC",
722 [0x3a1] = "CKM_PBE_MD5_DES_CBC",
723 [0x3a2] = "CKM_PBE_MD5_CAST_CBC",
724 [0x3a3] = "CKM_PBE_MD5_CAST3_CBC",
725 [0x3a4] = "CKM_PBE_MD5_CAST128_CBC",
726 [0x3a5] = "CKM_PBE_SHA1_CAST128_CBC",
727 [0x3a6] = "CKM_PBE_SHA1_RC4_128",
728 [0x3a7] = "CKM_PBE_SHA1_RC4_40",
729 [0x3a8] = "CKM_PBE_SHA1_DES3_EDE_CBC",
730 [0x3a9] = "CKM_PBE_SHA1_DES2_EDE_CBC",
731 [0x3aa] = "CKM_PBE_SHA1_RC2_128_CBC",
732 [0x3ab] = "CKM_PBE_SHA1_RC2_40_CBC",
733 [0x3b0] = "CKM_PKCS5_PBKD2",
734 [0x3c0] = "CKM_PBA_SHA1_WITH_SHA1_HMAC",
735 [0x400] = "CKM_KEY_WRAP_LYNKS",
736 [0x401] = "CKM_KEY_WRAP_SET_OAEP",
737 [0x1000] = "CKM_SKIPJACK_KEY_GEN",
738 [0x1001] = "CKM_SKIPJACK_ECB64",
739 [0x1002] = "CKM_SKIPJACK_CBC64",
740 [0x1003] = "CKM_SKIPJACK_OFB64",
741 [0x1004] = "CKM_SKIPJACK_CFB64",
742 [0x1005] = "CKM_SKIPJACK_CFB32",
743 [0x1006] = "CKM_SKIPJACK_CFB16",
744 [0x1007] = "CKM_SKIPJACK_CFB8",
745 [0x1008] = "CKM_SKIPJACK_WRAP",
746 [0x1009] = "CKM_SKIPJACK_PRIVATE_WRAP",
747 [0x100a] = "CKM_SKIPJACK_RELAYX",
748 [0x1010] = "CKM_KEA_KEY_PAIR_GEN",
749 [0x1011] = "CKM_KEA_KEY_DERIVE",
750 [0x1020] = "CKM_FORTEZZA_TIMESTAMP",
751 [0x1030] = "CKM_BATON_KEY_GEN",
752 [0x1031] = "CKM_BATON_ECB128",
753 [0x1032] = "CKM_BATON_ECB96",
754 [0x1033] = "CKM_BATON_CBC128",
755 [0x1034] = "CKM_BATON_COUNTER",
756 [0x1035] = "CKM_BATON_SHUFFLE",
757 [0x1036] = "CKM_BATON_WRAP",
758 [0x1040] = "CKM_ECDSA_KEY_PAIR_GEN",
759 [0x1041] = "CKM_ECDSA",
760 [0x1042] = "CKM_ECDSA_SHA1",
761 [0x1050] = "CKM_ECDH1_DERIVE",
762 [0x1051] = "CKM_ECDH1_COFACTOR_DERIVE",
763 [0x1052] = "CKM_ECMQV_DERIVE",
764 [0x1060] = "CKM_JUNIPER_KEY_GEN",
765 [0x1061] = "CKM_JUNIPER_ECB128",
766 [0x1062] = "CKM_JUNIPER_CBC128",
767 [0x1063] = "CKM_JUNIPER_COUNTER",
768 [0x1064] = "CKM_JUNIPER_SHUFFLE",
769 [0x1065] = "CKM_JUNIPER_WRAP",
770 [0x1070] = "CKM_FASTHASH",
771 [0x1080] = "CKM_AES_KEY_GEN",
772 [0x1081] = "CKM_AES_ECB",
773 [0x1082] = "CKM_AES_CBC",
774 [0x1083] = "CKM_AES_MAC",
775 [0x1084] = "CKM_AES_MAC_GENERAL",
776 [0x1085] = "CKM_AES_CBC_PAD",
777 [0x2000] = "CKM_DSA_PARAMETER_GEN",
778 [0x2001] = "CKM_DH_PKCS_PARAMETER_GEN",
779 [0x2002] = "CKM_X9_42_DH_PARAMETER_GEN",
780 [0x255] = "CKM_SHA224",
781 [0x256] = "CKM_SHA224_HMAC",
782 [0x257] = "CKM_SHA224_HMAC_GENERAL",
783 [0x46] = "CKM_SHA224_RSA_PKCS",
784 [0x47] = "CKM_SHA224_RSA_PKCS_PSS",
785 [0x396] = "CKM_SHA224_KEY_DERIVATION",
786 [0x550] = "CKM_CAMELLIA_KEY_GEN",
787 [0x551] = "CKM_CAMELLIA_ECB",
788 [0x552] = "CKM_CAMELLIA_CBC",
789 [0x553] = "CKM_CAMELLIA_MAC",
790 [0x554] = "CKM_CAMELLIA_MAC_GENERAL",
791 [0x555] = "CKM_CAMELLIA_CBC_PAD",
792 [0x556] = "CKM_CAMELLIA_ECB_ENCRYPT_DATA",
793 [0x557] = "CKM_CAMELLIA_CBC_ENCRYPT_DATA"
797 pkcs11_mechanism_list (FILE * outfile, const char *url, unsigned int login,
798 common_info_st * info)
802 unsigned long mechanism;
813 ret = gnutls_pkcs11_token_get_mechanism (url, idx++, &mechanism);
817 if (mechanism <= sizeof (mech_list) / sizeof (mech_list[0]))
818 str = mech_list[mechanism];
822 fprintf (outfile, "[0x%.4lx] %s\n", mechanism, str);