pkcs11.go

// Copyright (c) 2020 Blacknon. All rights reserved.
// Use of this source code is governed by an MIT license
// that can be found in the LICENSE file.
//go:build cgo
// +build cgo

package sshlib

import (
	"github.com/blacknon/crypto11"
	"github.com/miekg/pkcs11"
)

// C11 struct for Crypto11 processing.
// Not available if cgo is disabled.
type C11 struct {
	Label string
	PIN   string
	Ctx   *crypto11.Context
}

// getPIN is set token's PIN Code to c.PIN
// Not available if cgo is disabled.
func (c *C11) getPIN() (err error) {
	if c.PIN == "" {
		c.PIN, err = getPassphrase(c.Label + "'s PIN:")
	}

	return
}

// CreateCtx is create crypto11.Context
// Not available if cgo is disabled.
func (c *C11) CreateCtx(ctx *pkcs11.Ctx) (err error) {
	// Get PIN Code
	err = c.getPIN()
	if err != nil {
		// clear PIN code
		c.PIN = ""
		return
	}

	// Create crypto11 Configure
	config := &crypto11.Config{
		PKCS11Ctx:  ctx,
		TokenLabel: c.Label,
		Pin:        c.PIN,
	}

	// Create crypto11 Ctx
	c.Ctx, err = crypto11.Configure(config)

	return
}

// GetSigner return []crypto11.Signer.
// Not available if cgo is disabled.
func (c *C11) GetSigner() (signer []crypto11.Signer, err error) {
	return c.Ctx.FindAllKeyPairs()
}