question about setting the PIN programatically

[embetrix]

Setting the PIN in the PKCS11 URI is working :

    const char *pkcs11_uri = "pkcs11:object=testRSAKey;type=private?pin-value=12345";

    store = OSSL_STORE_open_ex(pkcs11_uri, NULL, "provider=pkcs11", NULL, NULL, NULL, NULL, NULL);

However I cannot make it working as follow:

   const char *pkcs11_uri = "pkcs11:object=testRSAKey;type=private";

  /* Set up parameters to pass the PIN */
    OSSL_PARAM params[] = {
        OSSL_PARAM_construct_utf8_string("pin", (char *)"12345", 0),
        OSSL_PARAM_construct_end()
    };

    store = OSSL_STORE_open_ex(pkcs11_uri, NULL, "provider=pkcs11", NULL, NULL, params, NULL, NULL);

any recommendation about how to set the PIN correctly ?

[simo5]

Currently a PIN can be directly passed in 3 ways:

• In the URI
• In the configuration file directly
• By referencing a pin file in the configuration

For some tokens you can also specify the pin in their configuration file, but this is token specific.

The PIN can also be provided interactively via prompting.

Finally, an application using the STORE API can us UI callbacks to provide the PIN instead of prompting (see the tests/ directory in the sources for examples of how to do this).

[embetrix]

@simo5 thanks for the feedback and clarifications, I implemented it using UI callbacks, for anyone stumbling upon this topic, I created an example here:

https://github.com/embetrix/pkcs11-provider-example