Smartcard quickstarter guide Why use smartcards? - GOOZE ...

Smartcard quickstarter guide
pkcs15-init -$log -G rsa/2048 -i 49 -a 01 -u sign,decrypt --pin 1234
pkcs15-init -$log -G rsa/2048 -i 50 -a 01 -u sign,decrypt --pin 1234
pkcs15-init -$log -G rsa/2048 -i 51 -a 01 -u sign,decrypt --pin 1234
pkcs15-init -$log -G rsa/2048 -i 52 -a 01 -u sign,decrypt --pin 1234
echo "Changing pin..."
pkcs15-tool -$log --change-pin --pin 1234
#echo "Blocking pin..."
#pkcs11-tool -vvvvvvv -t -l
#pkcs11-tool -vvvvvvv -t -l
#pkcs11-tool -vvvvvvv -t -l
#pkcs11-tool -vvvvvvv -t -l
#pkcs11-tool -vvvvvvv -t -l
#pkcs11-tool -vvvvvvv -t -l
#pkcs11-tool -vvvvvvv -t -l
#pkcs11-tool -vvvvvvv -t -l
#pkcs11-tool -vvvvvvv -t -l
#pkcs11-tool -vvvvvvv -t -l
#pkcs11-tool -vvvvvvv -t -l
echo "Unblocking pin..."
pkcs15-tool -$log --unblock-pin --pin 1234 --puk 123456
pkcs15-tool -$log -D
Query and export RSA keys
Query RSA private keys
To query private keys on smart card, enter:
$ pkcs15-tool --list-keys
Using reader with a card: Feitian SCR301 01 00
Private RSA Key [Private Key]
Com. Flags : 3
Usage : [0x4], sign
Access Flags: [0x1D], sensitive, alwaysSensitive, neverExtract, local
ModLength : 2048
Key ref : 1
Native : yes
Path : 3f005015
Auth ID : 01
ID : c6f280080fb0ed1ebff0480a01d00a98a1b3b89a
The RSA private key cannot leave the smartcard.
Query RSA public keys
To query RSA public keys on smart card, enter:
$ pkcs15-tool --list-public-keys
Copyright GOOZE 2010-2011 http://www.gooze.eu 48 / 63