spb_gen_key_csr.c

Ejemplo de SPB para la generación de claves, CSR e importación de certificados.

Véase la nota sobre ejemplos.

#include <string.h>
#include <stdlib.h>
#include <stdio.h>
#include <sys/stat.h>
#include <sys/types.h>
#include <dinamo.h>
 
 
#ifdef WIN32
    #include <process.h>
    #define FSTAT(x,y)  _fstat(_fileno(x), y)
    #define STAT        _stat
#else
    #define FSTAT(x,y)  fstat(fileno(x),y)
    #define STAT        stat
#endif
 
/* Parametros da conexao */
#define   HSM_IP    "127.0.0.1"
#define   HSM_USR   "master"
#define   HSM_PWD   "12345678"
 
int main(void)
{
    int         nRet                    = 0;
    struct     AUTH_PWD_EX stAUTPWD    = {0};
    HSESSIONCTX hSession                = NULL;
 
    char   szOutPrivKeyName[MAX_OBJ_ID_FQN_LEN]   = {0};
    char   *szISPB_DOMAIN                   = "12345678@MES01";
    char   *szSubject                       = "/CN=BANCO TESTE S/A P001/OU=SISBACEN-00888/OU=ISPB-54444619/O=ICP-Brasil/L=Sao Paulo/S=Sao Paulo/C=BR";
    DWORD   dwCSRLen                        = 0;
    BYTE   *pbCSR                           = NULL;
    char   *szDomain                        = "MES01";
 
    /*  Nota: !!! Altere este buffer com o certificado recebido da Autoridade Certificadora !!! */
    BYTE pbCertificate[] = {0x00, 0x00};
 
    // Preenche a estrutura de usuario
    strncpy(stAUTPWD.szAddr, HSM_IP, sizeof(stAUTPWD.szAddr));
    strncpy(stAUTPWD.szUserId, HSM_USR, sizeof(stAUTPWD.szUserId));
    strncpy(stAUTPWD.szPassword, HSM_PWD, sizeof(stAUTPWD.szPassword));
    stAUTPWD.nPort = DEFAULT_PORT;
    stAUTPWD.nStrongAuthLen = 0;
    stAUTPWD.pbStrongAuth = NULL;
    stAUTPWD.dwAuthType = SA_AUTH_NONE;
 
    DInitialize(0);
 
    nRet = DOpenSession(&hSession, SS_USR_PWD_EX, (BYTE *)&stAUTPWD, sizeof(struct AUTH_PWD_EX), CACHE_BYPASS | LB_BYPASS | ENCRYPTED_CONN);
    if (nRet)
    {
        printf("DOpenSession : Failed! %d.\n", nRet);
        goto clean;
    }
 
    /*  Gera a chave privada  */
 
    nRet = DSPBGenerateKey( hSession, szISPB_DOMAIN, szOutPrivKeyName, EXPORTABLE_KEY, 0 );
    if( nRet )
    {
        printf("DSPBGenerateKey : Failed! %d.\n", nRet);
        goto clean;
    }
 
    /*  Gera o CSR  */
    nRet = DSPBGenerateCSR(hSession,
                           szOutPrivKeyName,
                           CORE_P10_CSR_VERSION1,
                           szSubject,
                           P10_CSR_PEM,
                           &dwCSRLen,
                           &pbCSR,
                           0);
    if (nRet)
    {
      printf("DSPBGenerateKey : Failed! %d.\n", nRet);
      goto clean;
    }
 
    /* Importa para o HSM o certificado relacionado a chave privada */
 
    nRet = DSPBImportCertificate (hSession, 0, NULL, pbCertificate, sizeof(pbCertificate), szDomain, 0);
    if( nRet ) {
        printf("DSPBImportCertificate(no filter) : Failed! %d.\n", nRet);
        goto clean;
    }
 
    clean:
 
    if( hSession ) {
        DCloseSession(&hSession, 0);
    }
 
    if( pbCSR ) {
        DFree(pbCSR);
    }
 
    DFinalize();
 
    return nRet;
}