GetSlotList returns empty list after accessing X509Certificate2.PrivateKey about pkcs11interop HOT 2 CLOSED

I downloaded Pkcs11Interop V2.0.1 the other day along with the Pkcs7SignatureGenerator.

It is quite an old code which needs to be updated to use at least Pkcs11Interop 3.1.0.

I was hoping to use the KeyContainerName to get the private key ID via the Pkcs11Explorer.

I am not quite sure why would you want to do that but it should be fairly easy to map X509Certificate2 class instance to Certificate class instance by comparing X509Certificate2.RawData with Certificate.Data.

Corresponding PrivateKey class instance then can be found by comparing PrivateKey.Id with Certificate.Id and PrivateKey.Label with Certificate.Label. However please note that this may not always work because such association is not required by PKCS#11 specification. To be 100% sure you will need to compare also PrivateKey.PublicKey with Certificate.PublicKey.

It seems odd that accessing the HSM via the certificate's private key causes the Pkcs11Interop to return an empty slot list. It's as if accessing the private key like this opens a session which isn't closed properly.

It is rather unusual to use both CSP and PKCS#11 providers in single application because often they share the same underlying code and may be interfering. Such problems are not easy to troubleshoot without the assistance of device vendor.

from pkcs11interop.

Thanks for the heads up regarding v3 of pkcs11interop.dll. I just got v2 via a link on stackoverflow.

Your suggestion about converting the X509Certificate2 into a Certificate appears to have done the trick!

    private PrivateKey GetCertPrivateKey()
    {
        PrivateKey certificatePrivateKey = null;

        Certificate tmpCert = new Certificate("Foo", "Bar", this.signingCertificate.RawData);

        foreach (PrivateKey pk in this.privateKeys)
        {
            if (tmpCert.PublicKey.Equals(pk.PublicKey))
            {
                certificatePrivateKey = pk;
                break;
            }
        }

        return certificatePrivateKey;
    }

Thanks for your help,
Mark

from pkcs11interop.