crypt/opencryptoki
1
0
Fork 0
mirror of https://github.com/opencryptoki/opencryptoki.git synced 2026-10-24 05:39:17 +03:00
Code Releases Activity
Files
SABPerformance
opencryptoki/usr/lib/pkcs11/api/api_interface.c
tlendacky 463fd552f8 _init and _fini fixes
2005-05-05 19:29:17 +00:00

5273 lines
156 KiB
C
Executable File
Raw Permalink Blame History

/*
Common Public License Version 0.5
THE ACCOMPANYING PROGRAM IS PROVIDED UNDER THE TERMS OF
THIS COMMON PUBLIC LICENSE ("AGREEMENT"). ANY USE,
REPRODUCTION OR DISTRIBUTION OF THE PROGRAM CONSTITUTES
RECIPIENT'S ACCEPTANCE OF THIS AGREEMENT.
1. DEFINITIONS
"Contribution" means:
a) in the case of the initial Contributor, the
initial code and documentation distributed under
this Agreement, and
b) in the case of each subsequent Contributor:
i) changes to the Program, and
ii) additions to the Program;
where such changes and/or additions to the Program
originate from and are distributed by that
particular Contributor. A Contribution 'originates'
from a Contributor if it was added to the Program
by such Contributor itself or anyone acting on such
Contributor's behalf. Contributions do not include
additions to the Program which: (i) are separate
modules of software distributed in conjunction with
the Program under their own license agreement, and
(ii) are not derivative works of the Program.
"Contributor" means any person or entity that distributes
the Program.
"Licensed Patents " mean patent claims licensable by a
Contributor which are necessarily infringed by the use or
sale of its Contribution alone or when combined with the
Program.
"Program" means the Contributions distributed in
accordance with this Agreement.
"Recipient" means anyone who receives the Program under
this Agreement, including all Contributors.
2. GRANT OF RIGHTS
a) Subject to the terms of this Agreement, each
Contributor hereby grants Recipient a
non-exclusive, worldwide, royalty-free copyright
license to reproduce, prepare derivative works of,
publicly display, publicly perform, distribute and
sublicense the Contribution of such Contributor, if
any, and such derivative works, in source code and
object code form.
b) Subject to the terms of this Agreement, each
Contributor hereby grants Recipient a
non-exclusive, worldwide, royalty-free patent
license under Licensed Patents to make, use, sell,
offer to sell, import and otherwise transfer the
Contribution of such Contributor, if any, in source
code and object code form. This patent license
shall apply to the combination of the Contribution
and the Program if, at the time the Contribution is
added by the Contributor, such addition of the
Contribution causes such combination to be covered
by the Licensed Patents. The patent license shall
not apply to any other combinations which include
the Contribution. No hardware per se is licensed
hereunder.
c) Recipient understands that although each
Contributor grants the licenses to its
Contributions set forth herein, no assurances are
provided by any Contributor that the Program does
not infringe the patent or other intellectual
property rights of any other entity. Each
Contributor disclaims any liability to Recipient
for claims brought by any other entity based on
infringement of intellectual property rights or
otherwise. As a condition to exercising the rights
and licenses granted hereunder, each Recipient
hereby assumes sole responsibility to secure any
other intellectual property rights needed, if any.
For example, if a third party patent license is
required to allow Recipient to distribute the
Program, it is Recipient's responsibility to
acquire that license before distributing the
Program.
d) Each Contributor represents that to its
knowledge it has sufficient copyright rights in its
Contribution, if any, to grant the copyright
license set forth in this Agreement.
3. REQUIREMENTS
A Contributor may choose to distribute the Program in
object code form under its own license agreement, provided
that:
a) it complies with the terms and conditions of
this Agreement; and
b) its license agreement:
i) effectively disclaims on behalf of all
Contributors all warranties and conditions, express
and implied, including warranties or conditions of
title and non-infringement, and implied warranties
or conditions of merchantability and fitness for a
particular purpose;
ii) effectively excludes on behalf of all
Contributors all liability for damages, including
direct, indirect, special, incidental and
consequential damages, such as lost profits;
iii) states that any provisions which differ from
this Agreement are offered by that Contributor
alone and not by any other party; and
iv) states that source code for the Program is
available from such Contributor, and informs
licensees how to obtain it in a reasonable manner
on or through a medium customarily used for
software exchange.
When the Program is made available in source code form:
a) it must be made available under this Agreement;
and
b) a copy of this Agreement must be included with
each copy of the Program.
Contributors may not remove or alter any copyright notices
contained within the Program.
Each Contributor must identify itself as the originator of
its Contribution, if any, in a manner that reasonably
allows subsequent Recipients to identify the originator of
the Contribution.
4. COMMERCIAL DISTRIBUTION
Commercial distributors of software may accept certain
responsibilities with respect to end users, business
partners and the like. While this license is intended to
facilitate the commercial use of the Program, the
Contributor who includes the Program in a commercial
product offering should do so in a manner which does not
create potential liability for other Contributors.
Therefore, if a Contributor includes the Program in a
commercial product offering, such Contributor ("Commercial
Contributor") hereby agrees to defend and indemnify every
other Contributor ("Indemnified Contributor") against any
losses, damages and costs (collectively "Losses") arising
from claims, lawsuits and other legal actions brought by a
third party against the Indemnified Contributor to the
extent caused by the acts or omissions of such Commercial
Contributor in connection with its distribution of the
Program in a commercial product offering. The obligations
in this section do not apply to any claims or Losses
relating to any actual or alleged intellectual property
infringement. In order to qualify, an Indemnified
Contributor must: a) promptly notify the Commercial
Contributor in writing of such claim, and b) allow the
Commercial Contributor to control, and cooperate with the
Commercial Contributor in, the defense and any related
settlement negotiations. The Indemnified Contributor may
participate in any such claim at its own expense.
For example, a Contributor might include the Program in a
commercial product offering, Product X. That Contributor
is then a Commercial Contributor. If that Commercial
Contributor then makes performance claims, or offers
warranties related to Product X, those performance claims
and warranties are such Commercial Contributor's
responsibility alone. Under this section, the Commercial
Contributor would have to defend claims against the other
Contributors related to those performance claims and
warranties, and if a court requires any other Contributor
to pay any damages as a result, the Commercial Contributor
must pay those damages.
5. NO WARRANTY
EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, THE
PROGRAM IS PROVIDED ON AN "AS IS" BASIS, WITHOUT
WARRANTIES OR CONDITIONS OF ANY KIND, EITHER EXPRESS OR
IMPLIED INCLUDING, WITHOUT LIMITATION, ANY WARRANTIES OR
CONDITIONS OF TITLE, NON-INFRINGEMENT, MERCHANTABILITY OR
FITNESS FOR A PARTICULAR PURPOSE. Each Recipient is solely
responsible for determining the appropriateness of using
and distributing the Program and assumes all risks
associated with its exercise of rights under this
Agreement, including but not limited to the risks and
costs of program errors, compliance with applicable laws,
damage to or loss of data, programs or equipment, and
unavailability or interruption of operations.
6. DISCLAIMER OF LIABILITY
EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, NEITHER
RECIPIENT NOR ANY CONTRIBUTORS SHALL HAVE ANY LIABILITY
FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
OR CONSEQUENTIAL DAMAGES (INCLUDING WITHOUT LIMITATION
LOST PROFITS), HOWEVER CAUSED AND ON ANY THEORY OF
LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
OF THE USE OR DISTRIBUTION OF THE PROGRAM OR THE EXERCISE
OF ANY RIGHTS GRANTED HEREUNDER, EVEN IF ADVISED OF THE
POSSIBILITY OF SUCH DAMAGES.
7. GENERAL
If any provision of this Agreement is invalid or
unenforceable under applicable law, it shall not affect
the validity or enforceability of the remainder of the
terms of this Agreement, and without further action by the
parties hereto, such provision shall be reformed to the
minimum extent necessary to make such provision valid and
enforceable.
If Recipient institutes patent litigation against a
Contributor with respect to a patent applicable to
software (including a cross-claim or counterclaim in a
lawsuit), then any patent licenses granted by that
Contributor to such Recipient under this Agreement shall
terminate as of the date such litigation is filed. In
addition, If Recipient institutes patent litigation
against any entity (including a cross-claim or
counterclaim in a lawsuit) alleging that the Program
itself (excluding combinations of the Program with other
software or hardware) infringes such Recipient's
patent(s), then such Recipient's rights granted under
Section 2(b) shall terminate as of the date such
litigation is filed.
All Recipient's rights under this Agreement shall
terminate if it fails to comply with any of the material
terms or conditions of this Agreement and does not cure
such failure in a reasonable period of time after becoming
aware of such noncompliance. If all Recipient's rights
under this Agreement terminate, Recipient agrees to cease
use and distribution of the Program as soon as reasonably
practicable. However, Recipient's obligations under this
Agreement and any licenses granted by Recipient relating
to the Program shall continue and survive.
Everyone is permitted to copy and distribute copies of
this Agreement, but in order to avoid inconsistency the
Agreement is copyrighted and may only be modified in the
following manner. The Agreement Steward reserves the right
to publish new versions (including revisions) of this
Agreement from time to time. No one other than the
Agreement Steward has the right to modify this Agreement.
IBM is the initial Agreement Steward. IBM may assign the
responsibility to serve as the Agreement Steward to a
suitable separate entity. Each new version of the
Agreement will be given a distinguishing version number.
The Program (including Contributions) may always be
distributed subject to the version of the Agreement under
which it was received. In addition, after a new version of
the Agreement is published, Contributor may elect to
distribute the Program (including its Contributions) under
the new version. Except as expressly stated in Sections
2(a) and 2(b) above, Recipient receives no rights or
licenses to the intellectual property of any Contributor
under this Agreement, whether expressly, by implication,
estoppel or otherwise. All rights in the Program not
expressly granted under this Agreement are reserved.
This Agreement is governed by the laws of the State of New
York and the intellectual property laws of the United
States of America. No party to this Agreement will bring a
legal action under this Agreement more than one year after
the cause of action arose. Each party waives its rights to
a jury trial in any resulting litigation.
*/
/* (C) COPYRIGHT International Business Machines Corp. 2001 */
#if NGPTH
#include <pth.h>
#else
#include <pthread.h>
#endif
#include <stdio.h>
#include <syslog.h>
#include <stdlib.h>
#include <errno.h>
#include <apiclient.h>
#include <slotmgr.h>
#include <stdll.h>
#include <apictl.h>
#include <apiproto.h>
void api_init();
#ifdef DEBUG
#define LOG(x) logit(LOG_DEBUG,x)
#define LOGIT logit
#else
#define LOG(x)
#define LOGIT
#endif
// NOTES:
// In many cases the specificaiton does not allow returns
// of CKR_ARGUMENTSB_BAD. We break the spec, since validation of parameters
// to the function are best represented by this return code (where
// specific RC's such as CKR_INVALID_SESSION do not exist).
// NOTE NOTE NOTE NOTE
// The parameter checking on the update operations may need to be
// modified (as well as the encrypt/decrypt) to call the stdll
// anyway with sanatized parameters since on error, the encrypt/decrypt
// sign operations are all supposed to complete.
// Therefor the parameter checking here might need to be done in
// the STDLL instead of the API.
// This would affect ALL the Multipart operations which have
// an init followed by one or more operations.
// Globals for the API
API_Proc_Struct_t *Anchor=NULL; // Initialized to NULL
unsigned int Initialized = 0; // Initialized flag
pthread_mutex_t GlobMutex; // Global Mutex
/* KEY XXX pthread_mutex_t logmutex;*/ // logging mutex ... Keep to a minimum..
int logging=LOG_ERR; // Highest level to log to syslog
CK_FUNCTION_LIST FuncList;
int slot_loaded[NUMBER_SLOTS_MANAGED]; // Array of flags to indicate
// if the STDLL loaded
// For linux only at this time... if it works out we can get rid
// of the stupid pid tracking.... Linux we kind of have to do this
// since new threads are processes also, and we will be hosed
void
child_fork_initializer()
{
if ( Anchor ){
free(Anchor);
Anchor = NULL;
}
logterm();
loginit(); // _init is NOT invoked on fork
}
//------------------------------------------------------------------------
// API function C_CancelFunction
//------------------------------------------------------------------------
// This is a legacy function and performs no operations per the
// specification.
CK_RV
C_CancelFunction ( CK_SESSION_HANDLE hSession )
{
LOG("C_CancelFunction");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
st_err_log(17, __FILE__, __LINE__);
return CKR_FUNCTION_NOT_PARALLEL; // PER Spec pg 170
}
//------------------------------------------------------------------------
// API function C_CloseAllSessions
//------------------------------------------------------------------------
// Netscape Required
//
// This is a special one since the API can do this by removing
// all active sessions on the slot... The STDLL does not have to implement
// this. however this function will fail if any Session removal fails
// in the walk. Which could lead to undetermined results.
//
//------------------------------------------------------------------------
CK_RV
C_CloseAllSessions ( CK_SLOT_ID slotID )
{
Session_Struct_t *pCur,*pPrev;
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
ST_SESSION_T hSession;
int count=0;
// Although why does modutil do a close all sessions. It is a single
// application it can only close its sessions...
// And all sessions should be closed anyhow.
LOG("CloseAllSessions");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (slotID >= NUMBER_SLOTS_MANAGED ) {
st_err_log(2, __FILE__, __LINE__);
return CKR_SLOT_ID_INVALID;
}
// Proc Mutex is locked when we remove from the seesion list in
// Close SEssion. Therefore we don't need to do any locking
// the atomic operations are controled when we use the linked list
pCur = Anchor->SessListBeg;
while (pCur){
//LOGIT(LOG_DEBUG,"Pcur Loop %x Slot %d Pslot %d ",pCur,slotID,pCur->SltId);
// Session owned by the slot we are working on
// There is a basic problem here. We are using th pCur to point to
// the current one, however we delete it from the linked list and
// can no longer go Forward. So we have to use the fact that this
// is a doubly linked list and get the previous pointer. After
// deletion, the next pointer of this block will point to the
// next one in the list...
// If the value is Null, then this was the first one in the list
// and we just set pCur to the SessListBeg.
if (pCur->SltId == slotID ){
hSession.sessionh = pCur->RealHandle; // use this since after close session
hSession.slotID = pCur->SltId;
pPrev = pCur->Previous;
//LOGIT(LOG_DEBUG,"Prev %x PrevNext %x %d",pPrev,pPrev->Next,count++);
//rv = fcn->ST_CloseSession(hSession);
rv = C_CloseSession((CK_SESSION_HANDLE)pCur); // Call the local copy
if (rv == CKR_OK ||
rv == CKR_SESSION_CLOSED ||
rv == CKR_SESSION_HANDLE_INVALID) {
if (pPrev == NULL){
//LOGIT(LOG_DEBUG,"Re-wind since we removed the head");
pCur = Anchor->SessListBeg;
} else {
//LOGIT(LOG_DEBUG,"XXX Prev %x PrevNext %x",pPrev,pPrev->Next);
pCur = pPrev->Next;
}
} else {
// We have had a problem deleting a session and
// need to abort this operation. This path should not occur
// unless
LOGIT(LOG_DEBUG,"CloseAllSessions STDLL Problem");
st_err_log(153, __FILE__, __LINE__);
return rv;
}
} else {
pCur = pCur->Next;
}
}
sltp = &(Anchor->SltList[slotID]);
if (sltp->pSTcloseall) {
sltp->pSTcloseall(slotID); // call the terminate function..
}
LOG("CloseAllSessions OK");
return CKR_OK;
} // end of C_CloseAllSessions
//------------------------------------------------------------------------
// API function C_CloseSession
//------------------------------------------------------------------------
// Netscape Required
//
//
//
//------------------------------------------------------------------------
CK_RV
C_CloseSession ( CK_SESSION_HANDLE hSession )
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_CloseSession");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_CloseSession){
// Map the Session to the slot session
rv = fcn->ST_CloseSession(rSession);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
// If the STDLL successfuly closed the session
// we can free it.. Otherwise we will have to leave it
// lying arround.
if (rv == CKR_OK) {
sessp = (Session_Struct_t *)hSession;
RemoveFromSessionList(sessp);
// Need to decrement the global slot session count as well
// as the per process slot session count to allow for
// proper tracking of the number of sessions on a slot.
// This allows things like InitToken to properly work in case
// other applications have the token active.
decr_sess_counts(slotID);
}
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
} // end of C_CloseSession
//------------------------------------------------------------------------
// API function C_CopyObject
//------------------------------------------------------------------------
// Netscape Required
//
//
//
//------------------------------------------------------------------------
CK_RV
C_CopyObject ( CK_SESSION_HANDLE hSession,
CK_OBJECT_HANDLE hObject,
CK_ATTRIBUTE_PTR pTemplate,
CK_ULONG ulCount,
CK_OBJECT_HANDLE_PTR phNewObject
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_CopyObject");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
if ( !phNewObject ){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// null template with a count... will cause the lower layer
// to have problems
// Template with 0 count is not a problem. we can let
// the STDLL handle that...
if ( !pTemplate && ulCount ){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_CopyObject){
// Map the Session to the slot session
rv = fcn->ST_CopyObject(rSession,hObject,pTemplate,ulCount,phNewObject);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
} // end of C_CopyObject
//------------------------------------------------------------------------
// API function C_CreateObject
//------------------------------------------------------------------------
// Netscape Required
//
//
//
//------------------------------------------------------------------------
CK_RV
C_CreateObject ( CK_SESSION_HANDLE hSession,
CK_ATTRIBUTE_PTR pTemplate,
CK_ULONG ulCount,
CK_OBJECT_HANDLE_PTR phObject )
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_CreateObject");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Null template is invalid... An object needs a minimal
// template for creation.
if ( !pTemplate ){
st_err_log(48, __FILE__, __LINE__);
return CKR_TEMPLATE_INCOMPLETE;
}
// A 0 count for the template is bad
if ( ulCount == 0 ){
st_err_log(48, __FILE__, __LINE__);
return CKR_TEMPLATE_INCOMPLETE;
}
// A Null pointer to return the handle in is also bad
// since we could de-reference incorrectly.
if (! phObject ) {
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_CreateObject){
// Map the Session to the slot session
rv = fcn->ST_CreateObject(rSession,pTemplate,ulCount,phObject);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
} // end of C_CreateObject
//------------------------------------------------------------------------
// API function C_Decrypt
//------------------------------------------------------------------------
// Netscape Required
//
//
//
//------------------------------------------------------------------------
CK_RV
C_Decrypt ( CK_SESSION_HANDLE hSession,
CK_BYTE_PTR pEncryptedData,
CK_ULONG ulEncryptedDataLen,
CK_BYTE_PTR pData,
CK_ULONG_PTR pulDataLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_Decrypt");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Null encrypted data is invalid, null pData buffer is invalid
// as is null location to put the response into.
if ( !pEncryptedData || !pulDataLen) {
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_Decrypt){
// Map the Session to the slot session
rv = fcn->ST_Decrypt(rSession,pEncryptedData,ulEncryptedDataLen,pData,pulDataLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
} // end of C_Decrypt
//------------------------------------------------------------------------
// API function C_DecryptDigestUpdate
//------------------------------------------------------------------------
// Netscape Required
CK_RV
C_DecryptDigestUpdate ( CK_SESSION_HANDLE hSession,
CK_BYTE_PTR pEncryptedPart,
CK_ULONG ulEncryptedPartLen,
CK_BYTE_PTR pPart,
CK_ULONG_PTR pulPartLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_DecryptDigestUpdate");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// This may have to go to the STDLL for validation
if ( !pEncryptedPart || !pulPartLen) {
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_DecryptDigestUpdate){
// Map the Session to the slot session
rv = fcn->ST_DecryptDigestUpdate(rSession,pEncryptedPart,ulEncryptedPartLen,pPart,pulPartLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
}
//------------------------------------------------------------------------
// API function C_DecryptFinal
//------------------------------------------------------------------------
// Netscape Required
//
//
//
//------------------------------------------------------------------------
CK_RV
C_DecryptFinal ( CK_SESSION_HANDLE hSession,
CK_BYTE_PTR pLastPart,
CK_ULONG_PTR pulLastPartLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_DecryptFinal");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// This may have to go to the STDLL for validation
// It is acceptable to have a Null pointer for the data since
// it is trying to get the length of the last part....
// The spec is unclear if a second call to Final is needed
// if there is no data in the last part.
if (!pulLastPartLen ){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_DecryptFinal){
// Map the Session to the slot session
rv = fcn->ST_DecryptFinal(rSession,pLastPart,pulLastPartLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
} // end of C_DecryptFinal
//------------------------------------------------------------------------
// API function C_DecryptInit
//------------------------------------------------------------------------
//
//
//
//------------------------------------------------------------------------
CK_RV
C_DecryptInit ( CK_SESSION_HANDLE hSession,
CK_MECHANISM_PTR pMechanism,
CK_OBJECT_HANDLE hKey
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_DecryptInit");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Null mechanism pointer is not good
if ( !pMechanism ) {
st_err_log(28, __FILE__, __LINE__);
return CKR_MECHANISM_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_DecryptInit){
// Map the Session to the slot session
rv = fcn->ST_DecryptInit(rSession,pMechanism,hKey);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
} // end of C_DecryptInit
//------------------------------------------------------------------------
// API function C_DecryptUpdate
//------------------------------------------------------------------------
//
//
//
//------------------------------------------------------------------------
CK_RV
C_DecryptUpdate ( CK_SESSION_HANDLE hSession,
CK_BYTE_PTR pEncryptedPart,
CK_ULONG ulEncryptedPartLen,
CK_BYTE_PTR pPart,
CK_ULONG_PTR pulPartLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_DecryptUpdate");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// May have to let these go through and let the STDLL handle them
if ( !pEncryptedPart || !pulPartLen ){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_DecryptUpdate){
// Map the Session to the slot session
rv = fcn->ST_DecryptUpdate(rSession,pEncryptedPart,ulEncryptedPartLen,pPart,pulPartLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
} // end of C_DecryptUpdate
//------------------------------------------------------------------------
// API function C_DecryptVerifyUpdate
//------------------------------------------------------------------------
CK_RV
C_DecryptVerifyUpdate ( CK_SESSION_HANDLE hSession,
CK_BYTE_PTR pEncryptedPart,
CK_ULONG ulEncryptedPartLen,
CK_BYTE_PTR pPart,
CK_ULONG_PTR pulPartLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_DecryptVerifyUpdate");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// May have to let these go through and let the STDLL handle them
if ( !pEncryptedPart || !pulPartLen ){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_DecryptVerifyUpdate){
// Map the Session to the slot session
rv = fcn->ST_DecryptVerifyUpdate(rSession,pEncryptedPart,ulEncryptedPartLen,pPart,pulPartLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
}
//------------------------------------------------------------------------
// API function C_DeriveKey
//------------------------------------------------------------------------
CK_RV
C_DeriveKey ( CK_SESSION_HANDLE hSession,
CK_MECHANISM_PTR pMechanism,
CK_OBJECT_HANDLE hBaseKey,
CK_ATTRIBUTE_PTR pTemplate,
CK_ULONG ulAttributeCount,
CK_OBJECT_HANDLE_PTR phKey
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_DeriveKey");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Null phKey is invalid
// Null mechanism pointer is invalid
// This is allowed for some SSL3 mechs. the STDLL has to catch this
// condition since it validates the mechanism
//if (!phKey ) return CKR_ARGUMENTS_BAD;
if (!pMechanism ){
st_err_log(28, __FILE__, __LINE__);
return CKR_MECHANISM_INVALID;
}
// Null template with attribute count is bad
// but we will let a template with len 0 pass through
if (!pTemplate && ulAttributeCount ){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_DeriveKey){
// Map the Session to the slot session
rv = fcn->ST_DeriveKey(rSession,pMechanism,hBaseKey,pTemplate,ulAttributeCount,phKey);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
}
//------------------------------------------------------------------------
// API function C_DestroyObject
//------------------------------------------------------------------------
// Netscape Required
//
//
//
//------------------------------------------------------------------------
CK_RV
C_DestroyObject ( CK_SESSION_HANDLE hSession,
CK_OBJECT_HANDLE hObject
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_DestrypObject");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_DestroyObject){
// Map the Session to the slot session
rv = fcn->ST_DestroyObject(rSession,hObject);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
} // end of C_DestroyObject
//------------------------------------------------------------------------
// API function C_Digest
//------------------------------------------------------------------------
CK_RV
C_Digest ( CK_SESSION_HANDLE hSession,
CK_BYTE_PTR pData,
CK_ULONG ulDataLen,
CK_BYTE_PTR pDigest,
CK_ULONG_PTR pulDigestLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_Digest");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Null data for digest is bad
if (!pData || !pulDigestLen ) return CKR_ARGUMENTS_BAD;
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_Digest){
// Map the Session to the slot session
rv = fcn->ST_Digest(rSession,pData,ulDataLen,pDigest,pulDigestLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
}
//------------------------------------------------------------------------
// API function C_DigestEncryptUpdate
//------------------------------------------------------------------------
CK_RV
C_DigestEncryptUpdate ( CK_SESSION_HANDLE hSession,
CK_BYTE_PTR pPart,
CK_ULONG ulPartLen,
CK_BYTE_PTR pEncryptedPart,
CK_ULONG_PTR pulEncryptedPartLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_DigestEncryptUpdate");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
// May have to pass on through to the STDLL
if (!pPart || !pulEncryptedPartLen ){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_DigestEncryptUpdate){
// Map the Session to the slot session
rv = fcn->ST_DigestEncryptUpdate(rSession,pPart,ulPartLen,pEncryptedPart,pulEncryptedPartLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
}
//------------------------------------------------------------------------
// API function C_DigestFinal
//------------------------------------------------------------------------
CK_RV
C_DigestFinal ( CK_SESSION_HANDLE hSession,
CK_BYTE_PTR pDigest,
CK_ULONG_PTR pulDigestLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_DigestFinal");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pulDigestLen ) {
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_DigestFinal){
// Map the Session to the slot session
rv = fcn->ST_DigestFinal(rSession,pDigest,pulDigestLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
return CKR_FUNCTION_NOT_SUPPORTED;
}
//------------------------------------------------------------------------
// API function C_DigestInit
//------------------------------------------------------------------------
CK_RV
C_DigestInit ( CK_SESSION_HANDLE hSession,
CK_MECHANISM_PTR pMechanism
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_DigestInit");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pMechanism ){
st_err_log(28, __FILE__, __LINE__);
return CKR_MECHANISM_INVALID;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_DigestInit){
// Map the Session to the slot session
rv = fcn->ST_DigestInit(rSession,pMechanism);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
}
//------------------------------------------------------------------------
// API function C_DigestKey
//------------------------------------------------------------------------
CK_RV
C_DigestKey ( CK_SESSION_HANDLE hSession,
CK_OBJECT_HANDLE hKey
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_DigestKey");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_DigestKey){
// Map the Session to the slot session
rv = fcn->ST_DigestKey(rSession,hKey);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
}
//------------------------------------------------------------------------
// API function C_DigestUpdate
//------------------------------------------------------------------------
CK_RV
C_DigestUpdate ( CK_SESSION_HANDLE hSession,
CK_BYTE_PTR pPart,
CK_ULONG ulPartLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_DigestUpdate");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!ulPartLen){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_DigestUpdate){
// Map the Session to the slot session
rv = fcn->ST_DigestUpdate(rSession,pPart,ulPartLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
}
//------------------------------------------------------------------------
// API function C_Encrypt
//------------------------------------------------------------------------
CK_RV
C_Encrypt ( CK_SESSION_HANDLE hSession,
CK_BYTE_PTR pData,
CK_ULONG ulDataLen,
CK_BYTE_PTR pEncryptedData,
CK_ULONG_PTR pulEncryptedDataLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_Encrypt");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pData || !pulEncryptedDataLen){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_Encrypt){
// Map the Session to the slot session
rv = fcn->ST_Encrypt(rSession,pData,ulDataLen,pEncryptedData,pulEncryptedDataLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
}
//------------------------------------------------------------------------
// API function C_EncryptFinal
//------------------------------------------------------------------------
CK_RV
C_EncryptFinal ( CK_SESSION_HANDLE hSession,
CK_BYTE_PTR pLastEncryptedPart,
CK_ULONG_PTR pulLastEncryptedPartLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_EncryptFinal");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
// See comments for DecryptFinal
if ( !pulLastEncryptedPartLen){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_EncryptFinal){
// Map the Session to the slot session
rv = fcn->ST_EncryptFinal(rSession,pLastEncryptedPart,pulLastEncryptedPartLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
}
//------------------------------------------------------------------------
// API function C_EncryptInit
//------------------------------------------------------------------------
CK_RV
C_EncryptInit ( CK_SESSION_HANDLE hSession,
CK_MECHANISM_PTR pMechanism,
CK_OBJECT_HANDLE hKey
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_EncryptInit");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pMechanism){
st_err_log(28, __FILE__, __LINE__);
return CKR_MECHANISM_INVALID;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_EncryptInit){
// Map the Session to the slot session
rv = fcn->ST_EncryptInit(rSession,pMechanism,hKey);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
return CKR_FUNCTION_NOT_SUPPORTED;
}
//------------------------------------------------------------------------
// API function C_EncryptUpdate
//------------------------------------------------------------------------
CK_RV
C_EncryptUpdate ( CK_SESSION_HANDLE hSession,
CK_BYTE_PTR pPart,
CK_ULONG ulPartLen,
CK_BYTE_PTR pEncryptedPart,
CK_ULONG_PTR pulEncryptedPartLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_EncryptUpdate");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pPart || !pulEncryptedPartLen){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_EncryptUpdate){
// Map the Session to the slot session
rv = fcn->ST_EncryptUpdate(rSession,pPart,ulPartLen,pEncryptedPart,pulEncryptedPartLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
}
//------------------------------------------------------------------------
// API function C_Finalize
//------------------------------------------------------------------------
// Netscape Required
//
//
//
//------------------------------------------------------------------------
CK_RV
C_Finalize ( CK_VOID_PTR pReserved )
{
API_Slot_t *sltp;
CK_SLOT_ID slotID;
LOG("C_Finalize");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (pReserved != NULL) {
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
pthread_mutex_lock(&GlobMutex); // Grab Process level Global MUTEX
Terminate_All_Process_Sessions();// Terminate the sessions
// unload all the STDLL's from the application
// This is in case the APP decides to do the re-initialize and
// continue on
// //
for (slotID=0;slotID<NUMBER_SLOTS_MANAGED;slotID++){
sltp = &(Anchor->SltList[slotID]);
if (sltp->pSTcloseall) {
sltp->pSTcloseall(slotID); // call the terminate function..
}
if (sltp->pSTfini){
sltp->pSTfini(slotID); // call the terminate function..
}
DL_UnLoad(sltp,slotID);
}
// Un register from Slot D
API_UnRegister();
detach_shared_memory(Anchor->SharedMemP);
free(Anchor); // Free API Proc Struct
Anchor = NULL;
// Unlock
pthread_mutex_unlock(&GlobMutex);
return CKR_OK;
} // end of C_Finalize
//------------------------------------------------------------------------
// API function C_FindObjects
//------------------------------------------------------------------------
// Netscape Required
//
//
//
//------------------------------------------------------------------------
CK_RV
C_FindObjects ( CK_SESSION_HANDLE hSession,
CK_OBJECT_HANDLE_PTR phObject,
CK_ULONG ulMaxObjectCount,
CK_ULONG_PTR pulObjectCount )
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_FindObjects");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!phObject || !pulObjectCount ){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_FindObjects){
// Map the Session to the slot session
rv = fcn->ST_FindObjects(rSession,phObject,ulMaxObjectCount,pulObjectCount);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
} // end of C_FindObjects
//------------------------------------------------------------------------
// API function C_FindObjectsFinal
//------------------------------------------------------------------------
// Netscape Required
//
//
//
//------------------------------------------------------------------------
CK_RV
C_FindObjectsFinal ( CK_SESSION_HANDLE hSession )
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_FindObjectsFinal");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_FindObjectsFinal){
// Map the Session to the slot session
rv = fcn->ST_FindObjectsFinal(rSession);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
} // end of C_FindObjectsFinal
//------------------------------------------------------------------------
// API function
// C_FindObjectsInit
//------------------------------------------------------------------------
// Netscape Required
//
//
//
//------------------------------------------------------------------------
CK_RV
C_FindObjectsInit ( CK_SESSION_HANDLE hSession,
CK_ATTRIBUTE_PTR pTemplate,
CK_ULONG ulCount )
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
#ifdef DEBUG
CK_ULONG i;
#endif
LOG("C_FindObjectsInit");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
// What does a NULL template really mean
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_FindObjectsInit){
// Map the Session to the slot session
rv = fcn->ST_FindObjectsInit(rSession,pTemplate,ulCount);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
} // end of C_FindObjectsInit
//------------------------------------------------------------------------
// API function C_GenerateKey
//------------------------------------------------------------------------
// Netscape Required
CK_RV
C_GenerateKey ( CK_SESSION_HANDLE hSession,
CK_MECHANISM_PTR pMechanism,
CK_ATTRIBUTE_PTR pTemplate,
CK_ULONG ulCount,
CK_OBJECT_HANDLE_PTR phKey
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_GenerateKey");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pMechanism ){
st_err_log(28, __FILE__, __LINE__);
return CKR_MECHANISM_INVALID;
}
if (!phKey ){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_GenerateKey){
// Map the Session to the slot session
rv = fcn->ST_GenerateKey(rSession,pMechanism,pTemplate,ulCount,phKey);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
}
//------------------------------------------------------------------------
// API function C_GenerateKeyPair
//------------------------------------------------------------------------
// Netscape Required
CK_RV
C_GenerateKeyPair ( CK_SESSION_HANDLE hSession,
CK_MECHANISM_PTR pMechanism,
CK_ATTRIBUTE_PTR pPublicKeyTemplate,
CK_ULONG ulPublicKeyAttributeCount,
CK_ATTRIBUTE_PTR pPrivateKeyTemplate,
CK_ULONG ulPrivateKeyAttributeCount,
CK_OBJECT_HANDLE_PTR phPublicKey,
CK_OBJECT_HANDLE_PTR phPrivateKey
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_GenerateKeyPair");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pMechanism){
st_err_log(28, __FILE__, __LINE__);
return CKR_MECHANISM_INVALID;
}
if (!phPublicKey || !phPrivateKey){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// what other validation of parameters ... What about
// template pointers is a Null template pointer valid in generate
// key... Are there defaults.
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_GenerateKeyPair){
// Map the Session to the slot session
rv = fcn->ST_GenerateKeyPair(rSession,pMechanism,pPublicKeyTemplate,
ulPublicKeyAttributeCount,pPrivateKeyTemplate,
ulPrivateKeyAttributeCount,phPublicKey,phPrivateKey);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
}
//------------------------------------------------------------------------
// API function C_GenerateRandom
//------------------------------------------------------------------------
// Netscape Required
CK_RV
C_GenerateRandom ( CK_SESSION_HANDLE hSession,
CK_BYTE_PTR RandomData,
CK_ULONG ulRandomLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_GenerateRandom");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!RandomData) return CKR_ARGUMENTS_BAD;
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_GenerateRandom){
// Map the Session to the slot session
rv = fcn->ST_GenerateRandom(rSession,RandomData,ulRandomLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
return CKR_FUNCTION_NOT_SUPPORTED;
}
//------------------------------------------------------------------------
// API function C_GetAttributeValue
//------------------------------------------------------------------------
// Netscape Required
//
//
//------------------------------------------------------------------------
CK_RV
C_GetAttributeValue ( CK_SESSION_HANDLE hSession,
CK_OBJECT_HANDLE hObject,
CK_ATTRIBUTE_PTR pTemplate,
CK_ULONG ulCount
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_GetAttributeValue");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pTemplate){
st_err_log(48, __FILE__, __LINE__);
return CKR_TEMPLATE_INCOMPLETE;
}
if ( ulCount == 0 ){
st_err_log(48, __FILE__, __LINE__);
return CKR_TEMPLATE_INCOMPLETE;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_GetAttributeValue){
// Map the Session to the slot session
rv = fcn->ST_GetAttributeValue(rSession,hObject,pTemplate,ulCount);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
} // end of C_GetAttributeValue
//------------------------------------------------------------------------
// API function C_GetFunctionList
//------------------------------------------------------------------------
// Netscape Required
CK_RV
C_GetFunctionList ( CK_FUNCTION_LIST_PTR_PTR ppFunctionList )
{
static int num_invocations=0;
_init();
LOG("C_GetFunctionList");
FuncList.version.major = VERSION_MAJOR;
FuncList.version.minor = VERSION_MINOR;
FuncList.C_Initialize = C_Initialize;
FuncList.C_Finalize = C_Finalize;
FuncList.C_GetInfo = C_GetInfo;
FuncList.C_GetFunctionList = C_GetFunctionList;
FuncList.C_GetSlotList = C_GetSlotList;
FuncList.C_GetSlotInfo = C_GetSlotInfo;
FuncList.C_GetTokenInfo = C_GetTokenInfo;
FuncList.C_GetMechanismList = C_GetMechanismList;
FuncList.C_GetMechanismInfo = C_GetMechanismInfo;
FuncList.C_InitToken = C_InitToken;
FuncList.C_InitPIN = C_InitPIN;
FuncList.C_SetPIN = C_SetPIN;
FuncList.C_OpenSession = C_OpenSession;
FuncList.C_CloseSession = C_CloseSession;
FuncList.C_CloseAllSessions = C_CloseAllSessions;
FuncList.C_GetSessionInfo = C_GetSessionInfo;
FuncList.C_GetOperationState = C_GetOperationState;
FuncList.C_SetOperationState = C_SetOperationState;
FuncList.C_Login = C_Login;
FuncList.C_Logout = C_Logout;
FuncList.C_CreateObject = C_CreateObject;
FuncList.C_CopyObject = C_CopyObject;
FuncList.C_DestroyObject = C_DestroyObject;
FuncList.C_GetObjectSize = C_GetObjectSize;
FuncList.C_GetAttributeValue = C_GetAttributeValue;
FuncList.C_SetAttributeValue = C_SetAttributeValue;
FuncList.C_FindObjectsInit = C_FindObjectsInit;
FuncList.C_FindObjects = C_FindObjects;
FuncList.C_FindObjectsFinal = C_FindObjectsFinal;
FuncList.C_EncryptInit = C_EncryptInit;
FuncList.C_Encrypt = C_Encrypt;
FuncList.C_EncryptUpdate = C_EncryptUpdate;
FuncList.C_EncryptFinal = C_EncryptFinal;
FuncList.C_DecryptInit = C_DecryptInit;
FuncList.C_Decrypt = C_Decrypt;
FuncList.C_DecryptUpdate = C_DecryptUpdate;
FuncList.C_DecryptFinal = C_DecryptFinal;
FuncList.C_DigestInit = C_DigestInit;
FuncList.C_Digest = C_Digest;
FuncList.C_DigestUpdate = C_DigestUpdate;
FuncList.C_DigestKey = C_DigestKey;
FuncList.C_DigestFinal = C_DigestFinal;
FuncList.C_SignInit = C_SignInit;
FuncList.C_Sign = C_Sign;
FuncList.C_SignUpdate = C_SignUpdate;
FuncList.C_SignFinal = C_SignFinal;
FuncList.C_SignRecoverInit = C_SignRecoverInit;
FuncList.C_SignRecover = C_SignRecover;
FuncList.C_VerifyInit = C_VerifyInit;
FuncList.C_Verify = C_Verify;
FuncList.C_VerifyUpdate = C_VerifyUpdate;
FuncList.C_VerifyFinal = C_VerifyFinal;
FuncList.C_VerifyRecoverInit = C_VerifyRecoverInit;
FuncList.C_VerifyRecover = C_VerifyRecover;
FuncList.C_DigestEncryptUpdate = C_DigestEncryptUpdate;
FuncList.C_DecryptDigestUpdate = C_DecryptDigestUpdate;
FuncList.C_SignEncryptUpdate = C_SignEncryptUpdate;
FuncList.C_DecryptVerifyUpdate = C_DecryptVerifyUpdate;
FuncList.C_GenerateKey = C_GenerateKey;
FuncList.C_GenerateKeyPair = C_GenerateKeyPair;
FuncList.C_WrapKey = C_WrapKey;
FuncList.C_UnwrapKey = C_UnwrapKey;
FuncList.C_DeriveKey = C_DeriveKey;
FuncList.C_SeedRandom = C_SeedRandom;
FuncList.C_GenerateRandom = C_GenerateRandom;
FuncList.C_GetFunctionStatus = C_GetFunctionStatus;
FuncList.C_CancelFunction = C_CancelFunction;
FuncList.C_WaitForSlotEvent = C_WaitForSlotEvent;
if( ppFunctionList )
{
(*ppFunctionList) = &FuncList;
return CKR_OK;
}
else{
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
}
//------------------------------------------------------------------------
// API function C_GetFunctionStatus
//------------------------------------------------------------------------
CK_RV
C_GetFunctionStatus ( CK_SESSION_HANDLE hSession )
{
LOG("C_GetFunctionStatus");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
st_err_log(17, __FILE__, __LINE__);
return CKR_FUNCTION_NOT_PARALLEL; // PER Specification PG 170
}
//------------------------------------------------------------------------
// API function C_GetInfo
//------------------------------------------------------------------------
// Netscape Required
//
//
//
//------------------------------------------------------------------------
#ifdef PKCS64
CK_RV
C_GetInfo ( CK_INFO_PTR pInfo )
{
Slot_Mgr_Shr_t *shm;
LOG("C_GetInfo");
if (! API_Initialized() ) {
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if ( !pInfo ) {
st_err_log(4, __FILE__, __LINE__, __FUNCTION__);
return CKR_FUNCTION_FAILED;
}
shm = Anchor->SharedMemP;
bzero(pInfo, sizeof(*pInfo));
pInfo->cryptokiVersion = shm->ck_info.cryptokiVersion;
memset(pInfo->manufacturerID, '\0', 32);
bcopy(&(shm->ck_info.manufacturerID),pInfo->manufacturerID,32);
pInfo->flags = shm->ck_info.flags;
bcopy(&(shm->ck_info.libraryDescription),pInfo->libraryDescription,32);
pInfo->libraryVersion = shm->ck_info.libraryVersion;
return CKR_OK;
} // end of C_GetInfo
#else
CK_RV
C_GetInfo ( CK_INFO_PTR pInfo )
{
Slot_Mgr_Shr_t *shm;
LOG("C_GetInfo");
if (! API_Initialized() ) {
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if ( !pInfo ) {
st_err_log(4, __FILE__, __LINE__, __FUNCTION__);
return CKR_FUNCTION_FAILED;
}
shm = Anchor->SharedMemP;
bcopy(&(shm->ck_info),pInfo,sizeof(CK_INFO));
return CKR_OK;
} // end of C_GetInfo
#endif
//------------------------------------------------------------------------
// API function C_GetMechanismInfo
//------------------------------------------------------------------------
// Netscape Required
//
//
//
//------------------------------------------------------------------------
CK_RV
C_GetMechanismInfo ( CK_SLOT_ID slotID,
CK_MECHANISM_TYPE type,
CK_MECHANISM_INFO_PTR pInfo
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
LOGIT(LOG_DEBUG,"C_GetMechansimInfo %d %x %x",slotID,type,pInfo);
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if ( slotID >= NUMBER_SLOTS_MANAGED ) {
st_err_log(2, __FILE__, __LINE__);
return CKR_SLOT_ID_INVALID;
}
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_GetMechanismInfo){
rv = fcn->ST_GetMechanismInfo(slotID,type,pInfo);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
} // end of C_GetMechanismInfo
//------------------------------------------------------------------------
// API function C_GetMechanismList
//------------------------------------------------------------------------
// Netscape Required
//
//
//
//------------------------------------------------------------------------
CK_RV
C_GetMechanismList ( CK_SLOT_ID slotID,
CK_MECHANISM_TYPE_PTR pMechanismList,
CK_ULONG_PTR pulCount
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
LOGIT(LOG_DEBUG,"C_GetMechanismList (%d %x %d)",slotID,pMechanismList,*pulCount);
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
// Always have to have a pulCount
if (!pulCount){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Null PMechanism is valid to get a count of mechanisms
if (slotID >= NUMBER_SLOTS_MANAGED ) {
st_err_log(2, __FILE__, __LINE__);
return CKR_SLOT_ID_INVALID;
}
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_GetMechanismList){
LOG("Calling STDLL");
rv = fcn->ST_GetMechanismList(slotID,pMechanismList,pulCount);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
LOGIT(LOG_DEBUG,"GetMechanismList RV %x",rv);
if (rv == CKR_OK ) {
if ( pMechanismList ) {
unsigned long i;
for (i=0;i< *pulCount;i++){
LOGIT(LOG_DEBUG,"Mechanism[%d] 0x%08X ",i,pMechanismList[i]);
}
}
}
return rv;
} // end of C_GetMechanismList
//------------------------------------------------------------------------
// API function C_GetObjectSize
//------------------------------------------------------------------------
// Netscape Required
//
//
//
//------------------------------------------------------------------------
CK_RV
C_GetObjectSize ( CK_SESSION_HANDLE hSession,
CK_OBJECT_HANDLE hObject,
CK_ULONG_PTR pulSize )
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_GetObjectSize");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pulSize){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_GetObjectSize){
// Map the Session to the slot session
rv = fcn->ST_GetObjectSize(rSession,hObject,pulSize);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
} // end of C_GetObjectSize
//------------------------------------------------------------------------
// API function C_GetOperationState
//------------------------------------------------------------------------
CK_RV
C_GetOperationState ( CK_SESSION_HANDLE hSession,
CK_BYTE_PTR pOperationState,
CK_ULONG_PTR pulOperationStateLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_GetOperateionState");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
// NULL pOperationState is valid to get buffer
// size
if (!pulOperationStateLen){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_GetOperationState){
// Map the Session to the slot session
rv = fcn->ST_GetOperationState(rSession,pOperationState,pulOperationStateLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
}
//------------------------------------------------------------------------
// API function C_GetSessionInfo
//------------------------------------------------------------------------
// Netscape Required
//
//
//
//------------------------------------------------------------------------
CK_RV
C_GetSessionInfo ( CK_SESSION_HANDLE hSession,
CK_SESSION_INFO_PTR pInfo
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOGIT(LOG_DEBUG,"C_GetSessionInfo %x %x",hSession,pInfo);
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pInfo){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ) {
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_GetSessionInfo){
// Map the Session to the slot session
rv = fcn->ST_GetSessionInfo(rSession,pInfo);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
LOGIT(LOG_DEBUG,"Slot %d State %x Flags %x DevErr %x",
pInfo->slotID,pInfo->state, pInfo->flags,pInfo->ulDeviceError);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
} // end of C_GetSessionInfo
//------------------------------------------------------------------------
// API function C_GetSlotInfo
//------------------------------------------------------------------------
// Netscape Required
//
//
//
//------------------------------------------------------------------------
#ifdef PKCS64
CK_RV
C_GetSlotInfo ( CK_SLOT_ID slotID,
CK_SLOT_INFO_PTR pInfo
)
{
uint16 count;
uint16 index;
uint16 sindx;
Slot_Mgr_Shr_t *shm;
Slot_Info_t_64 *sinfp;
LOGIT(LOG_DEBUG,"C_GetSlotInfo Slot=%d ptr=%x",slotID,pInfo);
//LOGIT(LOG_DEBUG," Slot %d ",slotID);
if (API_Initialized() == FALSE ) {
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if ( !pInfo ) {
st_err_log(4, __FILE__, __LINE__, __FUNCTION__);
return CKR_FUNCTION_FAILED;
}
shm = Anchor->SharedMemP;
sinfp = shm->slot_info;
sinfp += slotID;
count = 0;
if (slotID >= NUMBER_SLOTS_MANAGED ) {
st_err_log(2, __FILE__, __LINE__);
return CKR_SLOT_ID_INVALID;
}
// Netscape and others appear to call
// this for every slot. If the slot does not have
// a registered STDLL, then this is a FUnction Failed case
if ( sinfp->present == FALSE ){
//LOGIT(LOG_DEBUG," Not present");
st_err_log(4, __FILE__, __LINE__, __FUNCTION__);
return CKR_FUNCTION_FAILED;
}
//LOGIT(LOG_DEBUG," %32s ",sinfp->pk_slot.slotDescription);
//LOGIT(LOG_DEBUG," %32s ",sinfp->pk_slot.manufacturerID);
#ifdef __64BIT__
bcopy((char *)&(sinfp->pk_slot),pInfo,sizeof(CK_SLOT_INFO));
#else
bcopy((char *)&(sinfp->pk_slot.slotDescription[0]),
(char *)&(pInfo->slotDescription[0]),64);
bcopy((char *)&(sinfp->pk_slot.manufacturerID[0]),
(char *)&(pInfo->manufacturerID[0]),32);
pInfo->flags = sinfp->pk_slot.flags;
pInfo->hardwareVersion = sinfp->pk_slot.hardwareVersion;
pInfo->firmwareVersion = sinfp->pk_slot.firmwareVersion;
#endif
return CKR_OK;
} // end of C_GetSlotInfo
#else
CK_RV
C_GetSlotInfo ( CK_SLOT_ID slotID,
CK_SLOT_INFO_PTR pInfo
)
{
uint16 count;
uint16 index;
uint16 sindx;
Slot_Mgr_Shr_t *shm;
Slot_Info_t *sinfp;
LOGIT(LOG_DEBUG,"C_GetSlotInfo Slot=%d ptr=%x",slotID,pInfo);
//LOGIT(LOG_DEBUG," Slot %d ",slotID);
if (API_Initialized() == FALSE ) {
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if ( !pInfo ) {
st_err_log(4, __FILE__, __LINE__, __FUNCTION__);
return CKR_FUNCTION_FAILED;
}
shm = Anchor->SharedMemP;
sinfp = shm->slot_info;
sinfp += slotID;
count = 0;
if (slotID >= NUMBER_SLOTS_MANAGED ) {
st_err_log(2, __FILE__, __LINE__);
return CKR_SLOT_ID_INVALID;
}
// Netscape and others appear to call
// this for every slot. If the slot does not have
// a registered STDLL, then this is a FUnction Failed case
if ( sinfp->present == FALSE ){
//LOGIT(LOG_DEBUG," Not present");
st_err_log(4, __FILE__, __LINE__, __FUNCTION__);
return CKR_FUNCTION_FAILED;
}
//LOGIT(LOG_DEBUG," %32s ",sinfp->pk_slot.slotDescription);
//LOGIT(LOG_DEBUG," %32s ",sinfp->pk_slot.manufacturerID);
bcopy((char *)&(sinfp->pk_slot),pInfo,sizeof(CK_SLOT_INFO));
return CKR_OK;
} // end of C_GetSlotInfo
#endif
//------------------------------------------------------------------------
// API function C_GetSlotList
//------------------------------------------------------------------------
// Netscape Required
//
//
//
//------------------------------------------------------------------------
CK_RV
C_GetSlotList ( CK_BBOOL tokenPresent,
CK_SLOT_ID_PTR pSlotList,
CK_ULONG_PTR pulCount
)
{
//uint16 count;
CK_ULONG count;
uint16 index;
uint16 sindx;
Slot_Mgr_Shr_t *shm;
#ifdef PKCS64
Slot_Info_t_64 *sinfp;
#else
Slot_Info_t *sinfp;
#endif
LOG("C_GetSlotList");
LOGIT(LOG_DEBUG," Pres %d Count %d",tokenPresent,*pulCount);
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
// Null pSlotList is valid to get count for array allocation
if (pulCount == NULL){
st_err_log(4, __FILE__, __LINE__, __FUNCTION__);
return CKR_FUNCTION_FAILED;
}
shm = Anchor->SharedMemP;
sinfp = shm->slot_info;
count = 0;
// Count the slots based off the present flag
// Go through all the slots and count them up
// Remember if the tokenPresent Flag is set do not count the
// not present ones.
//
// ------------------------------------------------------------
//
// Present indicates that the slot is managed by the Slot manager
// and that an appropriate registration has been made in the DB
//
// It does not imply that a token is present.
// Slots with STDLL's are ALWAYS present in the system wether they
// have a token or not is determined from the token functions.
//
// According to the spec the tokenPresent flag indicates if all
// slots are wanted, or those which have tokens present. We will
// use this to mean if a STDLL is present or not. All slots
// are in the system, if a STDLL is attached to a slot, then it is
// present( not to be confused with the Tokens flags indicating
// presence). Presence of a STDLL on a slot indicates that there
// is a "token reader" available.
//
// Note: All slots should be named by the slot manager with the
// slot id in them...
// ------------------------------------------------------------
//
// Note: The CK_INFO_STRUCT present flag indicates that a token is present
// in the reader located in the slot. Right now we are dealing only
// with non-removable tokens, so the slot flags set in the slot DB
// are fixed by the STDLL. Ultimately when we get to removable tokens, the
// slot manager will have to monitor the device in the slot and set the flag
// accordingly.
//
// This does however change the reporting back of Slot Lists...
//
// We were using the presence of a STDLL to indicate if a Token is present
// or not. however we need to report back based on 2 flags.
//
// First a stdll must be in the table, second the slot info flags must be
// set to present to return.
// ----------------------------------------------
//
// Also need to validate that the STDLL successfuly loaded.
for (index=0;index<NUMBER_SLOTS_MANAGED;index++){
// if there is a STDLL in the slot then we have to count it
// otherwise the slot is NOT counted.
if (sinfp[index].present == TRUE && slot_loaded[index] == TRUE ){
if (tokenPresent ) {
if ( (sinfp[index].pk_slot.flags & CKF_TOKEN_PRESENT) ){
count++;
}
} else {
count++;
}
}
}
// If only the count is wanted then we set the value and exit
if ( pSlotList == NULL ) {
*pulCount = count;
return CKR_OK;
} else {
// Verify that the buffer passed is large enough
if (*pulCount < count ) {
st_err_log(68, __FILE__, __LINE__);
return CKR_BUFFER_TOO_SMALL;
}
// Walk through the slot manager information and copy in the
// slot id to the list of slot indexes.
//
// This is incorrectly going to assume that the slots are
// sequentialy allocated. While most likely we should be robust
// and handle it.
// Count should correct based on the first loop.
//
for (sindx=0,index=0;
(index<NUMBER_SLOTS_MANAGED) && (sindx < count);
index++){
if ( sinfp[index].present == TRUE && slot_loaded[index] == TRUE ){
if (tokenPresent ){
if (sinfp[index].pk_slot.flags & CKF_TOKEN_PRESENT ) {
pSlotList[sindx] = sinfp[index].slot_number;
sindx++; // only increment when we have used it.
}
} else {
pSlotList[sindx] = sinfp[index].slot_number;
sindx++; // only increment when we have used it.
}
}
}
*pulCount = count;
}
return CKR_OK;
} // end of C_GetSlotList
//------------------------------------------------------------------------
// API function C_GetTokenInfo
//------------------------------------------------------------------------
// Netscape Required
//
//
//
//------------------------------------------------------------------------
CK_RV
C_GetTokenInfo ( CK_SLOT_ID slotID,
CK_TOKEN_INFO_PTR pInfo
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
Slot_Mgr_Shr_t *shm;
#ifdef PKCS64
Slot_Info_t_64 *sinfp;
#else
Slot_Info_t *sinfp;
#endif
LOG("C_GetTokenInfo");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pInfo){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
if (slotID >= NUMBER_SLOTS_MANAGED ) {
st_err_log(2, __FILE__, __LINE__);
return CKR_SLOT_ID_INVALID;
}
sltp = &(Anchor->SltList[slotID]);
LOGIT(LOG_DEBUG,"Slot p = %x id %d", sltp,slotID);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
// Need to check if the slot is not populated
// then we can return the proper return code for a
// slot that has no content.
shm = Anchor->SharedMemP;
sinfp = shm->slot_info;
if (sinfp[slotID].present == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_GetTokenInfo){
LOGIT(LOG_DEBUG,"Calling STDLL ");
rv = fcn->ST_GetTokenInfo(slotID,pInfo);
LOGIT(LOG_DEBUG,"rv %d CK_TOKEN_INFO Flags %x",rv,pInfo->flags);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
} // end of C_GetTokenInfo
void
Call_Finalize(){
// LOG("Call_Finalize");
C_Finalize(NULL);
return;
}
//------------------------------------------------------------------------
// API function C_Initialize
//------------------------------------------------------------------------
// Netscape Required
//
//
//------------------------------------------------------------------------
CK_RV
C_Initialize ( CK_VOID_PTR pVoid )
{
int rc;
char *env;
CK_C_INITIALIZE_ARGS *pArg;
char fcnmap = 0;
LOGIT(LOG_DEBUG,"C_Initialize");
//if ( API_Proc_Struct NOT allocated )
// allocate Structure
// if ( allocation fails )
// return CKR_HOST_MEMORY
//else
// if ( API_Proc_Struct owned by current process )
// process has called C_Initialize twice Fail routine
// return CKR_FUNCTION_FAILED
if (!Anchor ) {
Anchor = (API_Proc_Struct_t *)malloc(sizeof(API_Proc_Struct_t));
if ( Anchor == NULL ){
st_err_log(0, __FILE__, __LINE__);
return CKR_HOST_MEMORY;
}
} else {
// Linux the atfork routines handle this
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_ALREADY_INITIALIZED;
}
bzero(slot_loaded,sizeof(int)*NUMBER_SLOTS_MANAGED); // Clear out the load list
LOGIT(LOG_DEBUG,"Anchor allocated at %x",(char *)Anchor);
// Validation of the parameters passed
// if pVoid is NULL, then everything is OK. The applicaiton
// will not be doing multi thread accesses. We can use the OS
// locks anyhow.
//
if (pVoid != NULL ){
LOGIT(LOG_DEBUG,"Initialization arg = %x Flags %d", pVoid,
((CK_C_INITIALIZE_ARGS *)pVoid)->flags);
pArg = (CK_C_INITIALIZE_ARGS *)pVoid;
// Check for a pReserved set
if ( pArg->pReserved != NULL ){
free(Anchor);
Anchor= NULL;
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD; // we only support Native OS locking
}
// Set up a bit map indicating the presense of the functions.
fcnmap = (pArg->CreateMutex?0x01<<0:0);
fcnmap |= (pArg->DestroyMutex?0x01<<1:0);
fcnmap |= (pArg->LockMutex?0x01<<2:0);
fcnmap |= (pArg->UnlockMutex?0x01<<3:0);
// Verify that all or none of the functions are set
if (fcnmap != 0){
if (fcnmap != 0x0f ) {
free(Anchor);
Anchor = NULL;
logit(LOG_DEBUG,"C_Initialize: Invalid number of functions passed in argument structure");
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD; // we only support Native OS locking
}
}
// If we EVER need to create threads from this library we must
// check the Flags for the Can_Create_OS_Threads flag
// Right now the library DOES NOT create threads and therefore this
// check is irrelavant.
if ( pArg->flags &
CKF_LIBRARY_CANT_CREATE_OS_THREADS ) {
LOGIT(LOG_DEBUG,"Can't create OS threads.... This is OK");
}
// Since this is an initialization path, we will be verbose in the
// code rather than efficient.
//
// in reality, we only need to check for case 3 since all others
// are acceptable to us... for one reason or another.
//
// Case 1 Flag not set and functiopn pointers NOT supplied
if ( !(pArg->flags & CKF_OS_LOCKING_OK) && !(fcnmap) ){
; // This is COOL. Same as a NUL pointer Locking is irrelavent.
} else {
// Case 2. Flags set and Fcn pointers NOT supplied.
if ( (pArg->flags & CKF_OS_LOCKING_OK) && !(fcnmap)){
; // This to is COOL since we require native locking
} else {
// Case 3 Flag Not set and pointers supplied. Can't handle this
// one.
if ( !(pArg->flags & CKF_OS_LOCKING_OK) && fcnmap ){
free(Anchor);
Anchor = NULL;
logit(LOG_ERR,"C_Initialize:Application specified that OS locking is invalid ");
logit(LOG_ERR,"C_Initialize: PKCS11 Module requires OS locking ");
return CKR_CANT_LOCK; // we only support Native OS locking
} else {
// Case 4 Flag set and fcn pointers set
if ( (pArg->flags & CKF_OS_LOCKING_OK) && fcnmap){
; // This is also cool.
} else {
// Were really hosed here since this should not have
// occured
free(Anchor);
Anchor=NULL;
st_err_log(3, __FILE__, __LINE__);
return CKR_GENERAL_ERROR;
}
}
}
}
//LOGIT(LOG_DEBUG,"Init args Create %x ",((CK_C_INITIALIZE_ARGS *)pVoid)->CreateMutex);
//LOGIT(LOG_DEBUG,"Init args Destroy %x ",((CK_C_INITIALIZE_ARGS *)pVoid)->DestroyMutex);
//LOGIT(LOG_DEBUG,"Init args Lock %x ",((CK_C_INITIALIZE_ARGS *)pVoid)->LockMutex);
//LOGIT(LOG_DEBUG,"Init args unLock %x ",((CK_C_INITIALIZE_ARGS *)pVoid)->UnlockMutex);
} else {
// Pointer to void...
// This is OK we can go on from here.
;
}
//Zero out API_Proc_Struct
//Map Shared Memory Region
//if ( Shared Memory Mapped not Successful )
// Free allocated Memory
// Return CKR_HOST_MEMORY
bzero((char *)Anchor,sizeof(API_Proc_Struct_t));
pthread_mutex_init(&(Anchor->ProcMutex),NULL); // This is not shared across apps.
pthread_mutex_init(&(Anchor->SessListMutex),NULL); // This is not shared across apps.
pthread_mutex_init(&GlobMutex,NULL);
/* KEY XXX pthread_mutex_init(&logmutex,NULL); */
pthread_mutex_lock(&GlobMutex);
Anchor->Pid = getpid();
if ( (Anchor->SharedMemP = attach_shared_memory()) == NULL ){ // Get shared memory
free((void *)Anchor);
Anchor = NULL;
pthread_mutex_unlock(&GlobMutex);
LOGIT(LOG_ERR,"C_Initialize: Module failed to attach to shared memory. Verify that the slot management \
daemon is running %d",errno);
st_err_log(144, __FILE__, __LINE__);
return CKR_HOST_MEMORY;
}
LOGIT(LOG_DEBUG,"Shared memory %x ",Anchor->SharedMemP);
// Initialize structure values
//Register with pkcsslotd
if (! API_Register() ) {
// free memory allocated
// return CKR_FUNCTION_FAILED
// return CKR_FUNCTION_NOT_SUPPORTED;
detach_shared_memory(Anchor->SharedMemP);
free((void *)Anchor); Anchor=NULL;
pthread_mutex_unlock(&GlobMutex);
st_err_log(4, __FILE__, __LINE__, __FUNCTION__);
return CKR_FUNCTION_FAILED;
}
//
// load al the slot DLL's here
{
API_Slot_t *sltp;
CK_SLOT_ID slotID;
for (slotID=0;slotID<NUMBER_SLOTS_MANAGED;slotID++){
sltp = &(Anchor->SltList[slotID]);
// LOGIT(LOG_DEBUG,"Init SLTP = %x ID %d",sltp,slotID);
slot_loaded[slotID] = DL_Load_and_Init(sltp,slotID);
}
}
// Attempt to force C_Finalize to be called
// This causes Netscape to core dump since it unloads the module
//atexit(*Call_Finalize);
pthread_mutex_unlock(&GlobMutex);
return CKR_OK; // Good return code.
} // end of C_Initialize
//------------------------------------------------------------------------
// API function C_InitPIN
//------------------------------------------------------------------------
// Netscape Required
//
//
//
//------------------------------------------------------------------------
CK_RV
C_InitPIN ( CK_SESSION_HANDLE hSession,
CK_CHAR_PTR pPin,
CK_ULONG ulPinLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_InitPin");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
// A Null Pin with a Len is invalid
// A Null pin with a 0 len is no pin at all?
if (!pPin && ulPinLen) {
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
// Move this to after the session validation...
if (slotID >= NUMBER_SLOTS_MANAGED ) {
st_err_log(2, __FILE__, __LINE__);
return CKR_SLOT_ID_INVALID;
}
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_InitPIN){
// Map the Session to the slot session
rv = fcn->ST_InitPIN(rSession,pPin,ulPinLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
} // end of C_InitPIN
//------------------------------------------------------------------------
// API function C_InitToken
//------------------------------------------------------------------------
//Netscape NEVER Calls this according to the Netscape documentation
CK_RV
C_InitToken ( CK_SLOT_ID slotID,
CK_CHAR_PTR pPin,
CK_ULONG ulPinLen,
CK_CHAR_PTR pLabel
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
LOG("C_InitToken");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (slotID >= NUMBER_SLOTS_MANAGED ) {
st_err_log(2, __FILE__, __LINE__);
return CKR_SLOT_ID_INVALID;
}
// Null pPin and a pinlen is a problem
if (!pPin && ulPinLen){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
if (!pLabel ){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Prior to invoking the Tokens initialization, the
// API needs to verify that NO other applications have any
// sessions established with this particular slot
//
// Hooks into the shared memory to determine how many sessions
// on a given token are open need to be added.
// When a session is opened, it increments the count. When
// closed it decrements the count. Protected by an MUTEX
// In the shared memory region the slot_info[slotID].sesscount
// variable needs to be checked, and held locked until the operation
// is complete.
if (sessions_exist(slotID)){
st_err_log(43, __FILE__, __LINE__);
return CKR_SESSION_EXISTS;
}
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_InitToken){
rv = fcn->ST_InitToken(slotID,pPin,ulPinLen,pLabel);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
}
//------------------------------------------------------------------------
// API function C_Login
//------------------------------------------------------------------------
// Netscape Required
//
//
//
//------------------------------------------------------------------------
CK_RV
C_Login ( CK_SESSION_HANDLE hSession,
CK_USER_TYPE userType,
CK_CHAR_PTR pPin,
CK_ULONG ulPinLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_Login");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
#if 0
/* Allow incorrect PIN checks to fall into the SC_Login
* function, since v2.11 requires flags to be set. - KEY
*/
if (!pPin ) {
return CKR_PIN_INCORRECT;
}
#endif
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_Login){
// Map the Session to the slot session
rv = fcn->ST_Login(rSession,userType,pPin,ulPinLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
} // end of C_Login
//------------------------------------------------------------------------
// API function C_Logout
//------------------------------------------------------------------------
// Netscape Required
//
//
//
//------------------------------------------------------------------------
CK_RV
C_Logout ( CK_SESSION_HANDLE hSession )
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_Logout){
// Map the Session to the slot session
rv = fcn->ST_Logout(rSession);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
} // end of C_Logout
//------------------------------------------------------------------------
// API function C_OpenSession
//------------------------------------------------------------------------
// Netscape Required
//
//
//
//------------------------------------------------------------------------
//
// Note: Need to worry about handling the Notify and Applicaiton call backs
// that are here... STDLL will NEVER deal with these... The
// usage of them appears to be optional from the specification
// but we may need to do something with them at a later date.
//
CK_RV
C_OpenSession ( CK_SLOT_ID slotID,
CK_FLAGS flags,
CK_VOID_PTR pApplication,
CK_NOTIFY Notify,
CK_SESSION_HANDLE_PTR phSession
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
Session_Struct_t *apiSessp;
LOGIT(LOG_DEBUG,"C_OpenSession %d %x %x %x %x",slotID,flags,pApplication,
Notify,phSession);
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (slotID >= NUMBER_SLOTS_MANAGED ) {
st_err_log(2, __FILE__, __LINE__);
return CKR_SLOT_ID_INVALID;
}
if (!phSession) {
st_err_log(4, __FILE__, __LINE__, __FUNCTION__);
return CKR_FUNCTION_FAILED;
}
// allocate the api session block
if ( (apiSessp = (Session_Struct_t *)malloc(sizeof(Session_Struct_t))) == NULL ){
st_err_log(0, __FILE__, __LINE__);
return CKR_HOST_MEMORY;
}
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
//
// Need to handle the failure of a load here...
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_OpenSession){
rv = fcn->ST_OpenSession(slotID,flags,&(apiSessp->RealHandle));
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
// If the session allocation is successful, then we need to
// complete the API session block and return. Otherwise
// we free the API session block and exit
if ( rv == CKR_OK ){
*phSession = (CK_SESSION_HANDLE)apiSessp; // Set applications session to the
// address of the api session
// handle this ensures
// uniqueness.
apiSessp->SltId = slotID;
// Add to the linked list
AddToSessionList(apiSessp);
// NOTE: Need to add Session counter to the shared
// memory slot value.... Atomic operation.
// sharedmem->slot_info[slotID].sessioncount incremented
// when ever a session is attached.
// Also increment the per process slot counter to indicate
// how many sessions this process owns of the total amount. This
// way if the process abends garbage collection in the slot manager
// can adequatly clean up the total count value...
incr_sess_counts(slotID);
} else {
free(apiSessp);
}
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
} // end of C_OpenSession
//------------------------------------------------------------------------
// API function C_SeedRandom
//------------------------------------------------------------------------
CK_RV
C_SeedRandom ( CK_SESSION_HANDLE hSession,
CK_BYTE_PTR pSeed,
CK_ULONG ulSeedLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_SeedRandom");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pSeed && ulSeedLen ){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_SeedRandom){
// Map the Session to the slot session
rv = fcn->ST_SeedRandom(rSession,pSeed,ulSeedLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
return CKR_FUNCTION_NOT_SUPPORTED;
}
//------------------------------------------------------------------------
// API function C_SetAttributeValue
//------------------------------------------------------------------------
// Netscape Required
//
//
//
//------------------------------------------------------------------------
CK_RV
C_SetAttributeValue ( CK_SESSION_HANDLE hSession,
CK_OBJECT_HANDLE hObject,
CK_ATTRIBUTE_PTR pTemplate,
CK_ULONG ulCount
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_SetAttributeValue");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
if (!pTemplate){
st_err_log(48, __FILE__, __LINE__);
return CKR_TEMPLATE_INCOMPLETE;
}
if (!ulCount){
st_err_log(48, __FILE__, __LINE__);
return CKR_TEMPLATE_INCOMPLETE;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_SetAttributeValue){
// Map the Session to the slot session
rv = fcn->ST_SetAttributeValue(rSession,hObject,pTemplate,ulCount);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
} // end of C_SetAttributeValue
//------------------------------------------------------------------------
// API function C_SetOperationState
//------------------------------------------------------------------------
CK_RV
C_SetOperationState ( CK_SESSION_HANDLE hSession,
CK_BYTE_PTR pOperationState,
CK_ULONG ulOperationStateLen,
CK_OBJECT_HANDLE hEncryptionKey,
CK_OBJECT_HANDLE hAuthenticationKey
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_SetOperationState");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
if (!pOperationState || ulOperationStateLen == 0 ){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_SetOperationState){
// Map the Session to the slot session
rv = fcn->ST_SetOperationState(rSession,pOperationState,ulOperationStateLen,hEncryptionKey,
hAuthenticationKey);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
return CKR_FUNCTION_NOT_SUPPORTED;
}
//------------------------------------------------------------------------
// API function C_SetPIN
//------------------------------------------------------------------------
// Netscape Required
//
//
//
//------------------------------------------------------------------------
CK_RV
C_SetPIN ( CK_SESSION_HANDLE hSession,
CK_CHAR_PTR pOldPin,
CK_ULONG ulOldLen,
CK_CHAR_PTR pNewPin,
CK_ULONG ulNewLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_SetPIN");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pOldPin || !pNewPin) return CKR_PIN_INVALID;
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ) {
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_SetPIN){
// Map the Session to the slot session
rv = fcn->ST_SetPIN(rSession,pOldPin,ulOldLen,pNewPin,ulNewLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
} // end of C_SetPIN
//------------------------------------------------------------------------
// API function C_Sign
//------------------------------------------------------------------------
// Netscape Required
//
//
//
//------------------------------------------------------------------------
CK_RV
C_Sign ( CK_SESSION_HANDLE hSession,
CK_BYTE_PTR pData,
CK_ULONG ulDataLen,
CK_BYTE_PTR pSignature,
CK_ULONG_PTR pulSignatureLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_Sign");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pData || !pulSignatureLen){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ) {
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_Sign){
// Map the Session to the slot session
rv = fcn->ST_Sign(rSession,pData,ulDataLen,pSignature,pulSignatureLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
} // end of C_Sign
//------------------------------------------------------------------------
// API function C_SignEncryptUpdate
//------------------------------------------------------------------------
CK_RV
C_SignEncryptUpdate ( CK_SESSION_HANDLE hSession,
CK_BYTE_PTR pPart,
CK_ULONG ulPartLen,
CK_BYTE_PTR pEncryptedPart,
CK_ULONG_PTR pulEncryptedPartLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_SignEncryptUpdate");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pPart || !pulEncryptedPartLen){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_SignEncryptUpdate){
// Map the Session to the slot session
rv = fcn->ST_SignEncryptUpdate(rSession,pPart,ulPartLen,pEncryptedPart,pulEncryptedPartLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
return CKR_FUNCTION_NOT_SUPPORTED;
}
//------------------------------------------------------------------------
// API function C_SignFinal
//------------------------------------------------------------------------
//
//
//
//------------------------------------------------------------------------
CK_RV
C_SignFinal ( CK_SESSION_HANDLE hSession,
CK_BYTE_PTR pSignature,
CK_ULONG_PTR pulSignatureLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_SignEncryptUpdate");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pulSignatureLen){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ) {
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_SignFinal){
// Map the Session to the slot session
rv = fcn->ST_SignFinal(rSession,pSignature,pulSignatureLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
return CKR_FUNCTION_NOT_SUPPORTED;
} // end of C_SignFinal
//------------------------------------------------------------------------
// API function C_SignInit
//------------------------------------------------------------------------
//
//
//
//------------------------------------------------------------------------
CK_RV
C_SignInit ( CK_SESSION_HANDLE hSession,
CK_MECHANISM_PTR pMechanism,
CK_OBJECT_HANDLE hKey
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_SignInit");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pMechanism){
st_err_log(28, __FILE__, __LINE__);
return CKR_MECHANISM_INVALID;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ) {
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_SignInit){
// Map the Session to the slot session
rv = fcn->ST_SignInit(rSession,pMechanism,hKey);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
} // end of C_SignInit
//------------------------------------------------------------------------
// API function C_SignRecover
//------------------------------------------------------------------------
CK_RV
C_SignRecover ( CK_SESSION_HANDLE hSession,
CK_BYTE_PTR pData,
CK_ULONG ulDataLen,
CK_BYTE_PTR pSignature,
CK_ULONG_PTR pulSignatureLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_SignRecover");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pData || !pulSignatureLen){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_SignRecover){
// Map the Session to the slot session
rv = fcn->ST_SignRecover(rSession,pData,ulDataLen,pSignature,pulSignatureLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
return CKR_FUNCTION_NOT_SUPPORTED;
}
//------------------------------------------------------------------------
// API function C_SignRecoverInit
//------------------------------------------------------------------------
CK_RV
C_SignRecoverInit ( CK_SESSION_HANDLE hSession,
CK_MECHANISM_PTR pMechanism,
CK_OBJECT_HANDLE hKey
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_SignRecoverInit");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pMechanism){
st_err_log(28, __FILE__, __LINE__);
return CKR_MECHANISM_INVALID;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_SignRecoverInit){
// Map the Session to the slot session
rv = fcn->ST_SignRecoverInit(rSession,pMechanism,hKey);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
return CKR_FUNCTION_NOT_SUPPORTED;
}
//------------------------------------------------------------------------
// API function C_SignUpdate
//------------------------------------------------------------------------
//
//
//
//------------------------------------------------------------------------
CK_RV
C_SignUpdate ( CK_SESSION_HANDLE hSession,
CK_BYTE_PTR pPart,
CK_ULONG ulPartLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_SignUpdate");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pPart){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_SignUpdate){
// Map the Session to the slot session
rv = fcn->ST_SignUpdate(rSession,pPart,ulPartLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
return CKR_FUNCTION_NOT_SUPPORTED;
} // end of C_SignUpdate
//------------------------------------------------------------------------
// API function C_UnwrapKey
//------------------------------------------------------------------------
// Netscape Required
CK_RV
C_UnwrapKey ( CK_SESSION_HANDLE hSession,
CK_MECHANISM_PTR pMechanism,
CK_OBJECT_HANDLE hUnwrappingKey,
CK_BYTE_PTR pWrappedKey,
CK_ULONG ulWrappedKeyLen,
CK_ATTRIBUTE_PTR pTemplate,
CK_ULONG ulAttributeCount,
CK_OBJECT_HANDLE_PTR phKey
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_UnwrapKey");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pMechanism){
st_err_log(28, __FILE__, __LINE__);
return CKR_MECHANISM_INVALID;
}
if (!phKey){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// what about the other pointers... probably need
// to be set correctly
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_UnwrapKey){
// Map the Session to the slot session
rv = fcn->ST_UnwrapKey(rSession,pMechanism,hUnwrappingKey,pWrappedKey,ulWrappedKeyLen,
pTemplate,ulAttributeCount,phKey);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
return CKR_FUNCTION_NOT_SUPPORTED;
}
//------------------------------------------------------------------------
// API function C_Verify
//------------------------------------------------------------------------
// Netscape Required
CK_RV
C_Verify ( CK_SESSION_HANDLE hSession,
CK_BYTE_PTR pData,
CK_ULONG ulDataLen,
CK_BYTE_PTR pSignature,
CK_ULONG ulSignatureLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_Verify");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pData || !pSignature){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_Verify){
// Map the Session to the slot session
rv = fcn->ST_Verify(rSession,pData,ulDataLen,pSignature,ulSignatureLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
}
//------------------------------------------------------------------------
// API function C_VerifyFinal
//------------------------------------------------------------------------
CK_RV
C_VerifyFinal ( CK_SESSION_HANDLE hSession,
CK_BYTE_PTR pSignature,
CK_ULONG ulSignatureLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_VerifyFinal");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pSignature){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_VerifyFinal){
// Map the Session to the slot session
rv = fcn->ST_VerifyFinal(rSession,pSignature,ulSignatureLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
return CKR_FUNCTION_NOT_SUPPORTED;
}
//------------------------------------------------------------------------
// API function C_VerifyInit
//------------------------------------------------------------------------
CK_RV
C_VerifyInit ( CK_SESSION_HANDLE hSession,
CK_MECHANISM_PTR pMechanism,
CK_OBJECT_HANDLE hKey
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_VerifyInit");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pMechanism){
st_err_log(28, __FILE__, __LINE__);
return CKR_MECHANISM_INVALID;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_VerifyInit){
// Map the Session to the slot session
rv = fcn->ST_VerifyInit(rSession,pMechanism,hKey);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
}
//------------------------------------------------------------------------
// API function C_VerifyRecover
//------------------------------------------------------------------------
// Netscape Required
CK_RV
C_VerifyRecover ( CK_SESSION_HANDLE hSession,
CK_BYTE_PTR pSignature,
CK_ULONG ulSignatureLen,
CK_BYTE_PTR pData,
CK_ULONG_PTR pulDataLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_VerifyRecover");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pSignature || !pulDataLen){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_VerifyRecover){
// Map the Session to the slot session
rv = fcn->ST_VerifyRecover(rSession,pSignature,ulSignatureLen,pData,pulDataLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
}
//------------------------------------------------------------------------
// API function C_VerifyRecoverInit
//------------------------------------------------------------------------
CK_RV
C_VerifyRecoverInit ( CK_SESSION_HANDLE hSession,
CK_MECHANISM_PTR pMechanism,
CK_OBJECT_HANDLE hKey
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_VerifyRecoverInit");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pMechanism){
st_err_log(28, __FILE__, __LINE__);
return CKR_MECHANISM_INVALID;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_VerifyRecoverInit){
// Map the Session to the slot session
rv = fcn->ST_VerifyRecoverInit(rSession,pMechanism,hKey);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
}
//------------------------------------------------------------------------
// API function C_VerifyUpdate
//------------------------------------------------------------------------
CK_RV
C_VerifyUpdate ( CK_SESSION_HANDLE hSession,
CK_BYTE_PTR pPart,
CK_ULONG ulPartLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_VerifyUpdate");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pPart){
st_err_log(5, __FILE__, __LINE__, __FUNCTION__);
return CKR_ARGUMENTS_BAD;
}
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_VerifyUpdate){
// Map the Session to the slot session
rv = fcn->ST_VerifyUpdate(rSession,pPart,ulPartLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
}
//------------------------------------------------------------------------
// API function C_WaitForSlotEvent
//------------------------------------------------------------------------
//
//
//NOTE: We need to implement this one even though Netscape does not
//make use of this...
//
//Standard code template won't work with this. We need to look at
//the slot manager and the shared memory indicating the slot bitmap
//Blocking needs to be worked out. At the initial release do not
//support BLocked calls on wait for slot event.
//
//Support Note:
//This function is really used for removable tokens, and is pretty
//inefficient. It may be best to return CKR_FUNCTION_UNSUPPORTED
//if it becomes a field issue, until removable token support is fully
//implemented. Be forewarned.
//------------------------------------------------------------------------
CK_RV
C_WaitForSlotEvent ( CK_FLAGS flags,
CK_SLOT_ID_PTR pSlot,
CK_VOID_PTR pReserved
)
{
Slot_Mgr_Shr_t *shm;
#ifdef PKCS64
Slot_Mgr_Proc_t_64 *procp;
#else
Slot_Mgr_Proc_t *procp;
#endif
int i;
LOG("C_WaitForSlotEvent");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
#ifndef PLUGGABLE_TOKENS_SUPPORTED
// Since there are no tokens which we support that have the
// ability to create slot events, and slotd does not
// fully support this (it needs to be aware of the functions exported
// by an STDLL to poll the slot for a token event and this
// has not been fully implemented at this time, although the
// design and structure of the shared memory in slotd do.
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
return CKR_FUNCTION_NOT_SUPPORTED;
#else
// Get the pointer to the process element..
// This could be done in a single line, but for readability we do it
// in 2 steps.
shm = Anchor->SharedMemP;
procp = &shm->proc_table[Anchor->MgrProcIndex];
// Grab the mutex for the application in shared memory
// Check the bit mask for non-zero. If the bit mask is non-zero
// find the first slot which is set and set the pSlot value
// and return CKR_OK.
// for now we will just lock the whole shared memory
// REally should be the procp->proc_mutex
// but this is such an infrequent thing that we will simply get
// the global shared memory lock
lock_shm();
if ( procp->slotmap) {
// find the first bit set
// This will have to change if more than 32 slots ever get supported
// including the test for a bit turned on..
for (i=0;NUMBER_SLOTS_MANAGED;i++){
if ( procp->slotmap & (1 << i)) {
break;
}
}
*pSlot = i; // set the flag
unlock_shm();
return CKR_OK;
} else {
if ( flags & CKF_DONT_BLOCK ) {
unlock_shm();
return CKR_NO_EVENT;
} else {
// WE need to
// 1. Set the blocking variable in the system map to true.
// 2. clear the condition variable
//
// Note: for now we will just poll the bitmap every
// second or look for the error field to go to true.
// Check first if we are already blocking on another thread
// for this process. According to the spec this behavior is undefined.
// We will choose to fail the call.
if (procp->blocking) {
LOGIT(LOG_DEBUG,"WaitForSlot event called by process twice");
unlock_shm(); // Unlock aftersetting
st_err_log(4, __FILE__, __LINE__, __FUNCTION__);
return CKR_FUNCTION_FAILED;
}
procp->error = 0;
procp->blocking = 0x01;
unlock_shm(); // Unlock aftersetting
// NOTE: We need to have an asynchronous mechanism for
// the slot manager to wake up anyone blocking on this.
// But Since we are not supporting removable tokens, this
// call should be almos never made. It might be best to
// return CKR_FUNCTION_UNSUPPORTED, but we'll wait and see.
while (!procp->slotmap && !procp->error){
sleep(1); // Note This is really bad form. But what the heck
}
lock_shm();
procp->blocking = 0;
if ( procp->error ) {
unlock_shm();
st_err_log(3, __FILE__, __LINE__);
return CKR_GENERAL_ERROR; // We bailed on this because we were terminating
// General error should cause the calling thread to not try anything
// else... We need to look at how this holds up in practice.
}else { // must have fallen out of loop because of a slot getting an
// event
for (i=0;NUMBER_SLOTS_MANAGED;i++){
if ( procp->slotmap & (1 << i)) {
break;
}
}
*pSlot = i; // set the flag
unlock_shm();
return CKR_OK;
}
}
}
#endif
} // end of C_WaitForSlotEvent
//------------------------------------------------------------------------
// API function
// C_WrapKey
//------------------------------------------------------------------------
// Netscape Required
CK_RV
C_WrapKey ( CK_SESSION_HANDLE hSession,
CK_MECHANISM_PTR pMechanism,
CK_OBJECT_HANDLE hWrappingKey,
CK_OBJECT_HANDLE hKey,
CK_BYTE_PTR pWrappedKey,
CK_ULONG_PTR pulWrappedKeyLen
)
{
CK_RV rv;
API_Slot_t *sltp;
STDLL_FcnList_t *fcn;
CK_SLOT_ID slotID;
Session_Struct_t *sessp;
ST_SESSION_T rSession;
LOG("C_WrapKey");
if (API_Initialized() == FALSE ){
st_err_log(72, __FILE__, __LINE__);
return CKR_CRYPTOKI_NOT_INITIALIZED;
}
if (!pMechanism){
st_err_log(28, __FILE__, __LINE__);
return CKR_MECHANISM_INVALID;
}
// other pointers???
// Validate Session
if (!Valid_Session((Session_Struct_t *)hSession,&rSession)){
st_err_log(40, __FILE__, __LINE__);
return CKR_SESSION_HANDLE_INVALID;
}
// Get local pointers to session
slotID = rSession.slotID;
sltp = &(Anchor->SltList[slotID]);
if (sltp->DLLoaded == FALSE ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if ( (fcn=sltp->FcnList) == NULL ){
st_err_log(50, __FILE__, __LINE__);
return CKR_TOKEN_NOT_PRESENT;
}
if (fcn->ST_WrapKey){
// Map the Session to the slot session
rv = fcn->ST_WrapKey(rSession,pMechanism,hWrappingKey,hKey,pWrappedKey,pulWrappedKeyLen);
LOGIT(LOG_DEBUG,"Called STDLL rv = 0x%x",rv);
} else {
st_err_log(142, __FILE__, __LINE__, __FUNCTION__);
rv = CKR_FUNCTION_NOT_SUPPORTED;
}
return rv;
}
void api_init(void) __attribute__((constructor));
void
api_init(void)
{
char *env;
// Turn on logging. This can only occure
// at the application initialization time....
// Simplify things by using environment variables
if ( (env = (char *)getenv("PKCS11_API_LOG_DEBUG")) != NULL ){
logging=LOG_DEBUG;
} else {
logging = 0;
}
loginit(); // called once per application... rules for C_Initialize apply
// Should only have to do the atfork stuff at load time...
if (!Initialized){
pthread_atfork(NULL,NULL,(void(*)())child_fork_initializer);
Initialized=1;
}
}
void api_fini(void) __attribute__((destructor));
void
api_fini()
{
logterm();
if ( API_Initialized() == TRUE ) {
Call_Finalize();
}
}
View Git Blame Copy Permalink