4 releases

0.1.3 Mar 23, 2022
0.1.2 Jan 24, 2021
0.1.1 Jan 10, 2021
0.1.0 Jan 10, 2021

#459 in Cryptography

Download history 68/week @ 2022-06-07 37/week @ 2022-06-14 30/week @ 2022-06-21 60/week @ 2022-06-28 61/week @ 2022-07-05 57/week @ 2022-07-12 62/week @ 2022-07-19 41/week @ 2022-07-26 66/week @ 2022-08-02 52/week @ 2022-08-09 32/week @ 2022-08-16 46/week @ 2022-08-23 31/week @ 2022-08-30 408/week @ 2022-09-06 218/week @ 2022-09-13 129/week @ 2022-09-20

790 downloads per month
Used in 2 crates (via lpc55)

Apache-2.0 OR MIT

19KB
360 lines

API docs: https://nickray.github.io/pkcs11-uri/pkcs11_uri/

Getting started

One way to generate URIs to feed into this library is the p11tool in GnuTLS. Running p11tool --list-tokens returns the URIs for all available tokens. Running p11tool --list-all <token URI> then lists all the objects in that token. For private keys, use GNUTLS_PIN=<pin> p11tool --login --list-all <token URI>.

One way to create keypairs to use is with softhsm-util and pkcs11-tool:

softhsm2-util --init-token --free --label my-ca --pin 1234 --so-pin 1234
pkcs11-tool --module /usr/lib/libsofthsm2.so --token my-ca --login --pin 1234 --keypairgen --label my-signing-key --key-type RSA:2048

lib.rs:

PKCS#11 URI

Bare bones implementation of the RFC 7512 URI scheme for locating keys and other PKCS#11 objects.

This library is patched together from existing libraries, namely pkcs11, uriparse and percent-encoding, and is a work in progress.

Dependencies

~1.5MB
~31K SLoC