Add command to generate keypair on a PKCS#11 token

Signed-off-by: Zoltan Fridrich <[email protected]>
p11-glue · Sep 6, 2023 · dce5ace · dce5ace
1 parent 70b7ee8
commit dce5ace
Show file tree

Hide file tree

Showing 9 changed files with 423 additions and 21 deletions.
diff --git a/bash-completion/p11-kit b/bash-completion/p11-kit
@@ -10,7 +10,7 @@ _p11-kit()
         COMPREPLY=( $(compgen -W "$opts" -- "$cur") )
         return
     elif [[ $cword -eq 1 ]]; then
-        local commands='export-object delete-object list-objects add-profile delete-profile list-profiles list-modules print-config extract server remote'
+        local commands='generate-keypair export-object delete-object list-objects add-profile delete-profile list-profiles list-modules print-config extract server remote'
         COMPREPLY=( $(compgen -W "$commands" -- "$cur") )
     fi
 } &&

diff --git a/common/compat.c b/common/compat.c
@@ -1051,3 +1051,16 @@ p11_ascii_toupper (int c)
 		return 'A' + (c - 'a');
 	return c;
 }
+
+int
+p11_strcasecmp (const char *s1,
+		const char *s2)
+{
+	const unsigned char *a = (const unsigned char *)s1,
+			    *b = (const unsigned char *)s2;
+
+	while (p11_ascii_tolower (*a) == p11_ascii_tolower (*b++))
+		if (*a++ == '\0')
+			return 0;
+	return p11_ascii_tolower (*a) - p11_ascii_tolower (*--b);
+}
diff --git a/common/compat.h b/common/compat.h
@@ -401,4 +401,7 @@ void       p11_strerror_r    (int errnum,
 int        p11_ascii_tolower (int c);
 int        p11_ascii_toupper (int c);
 
+int        p11_strcasecmp    (const char *s1,
+                              const char *s2);
+
 #endif /* __COMPAT_H__ */
diff --git a/doc/manual/p11-kit.xml b/doc/manual/p11-kit.xml
@@ -41,6 +41,12 @@
 	<cmdsynopsis>
 		<command>p11-kit delete-object</command> ...
 	</cmdsynopsis>
+	<cmdsynopsis>
+		<command>p11-kit generate-keypair</command>
+			<arg choice="plain">--label=&lt;label&gt;</arg>
+			<arg choice="plain">--type=&lt;algorithm&gt;</arg>
+			<arg choice="plain">--bits=&lt;n&gt;</arg> pkcs11:token
+	</cmdsynopsis>
 	<cmdsynopsis>
 		<command>p11-kit list-profiles</command> ...
 	</cmdsynopsis>
@@ -140,6 +146,36 @@ $ p11-kit delete-object pkcs11:token
 
 </refsect1>
 
+<refsect1 id="p11-kit-generate-keypair">
+	<title>Generate Key-pair</title>
+
+	<para>Generate key-pair on a PKCS#11 token.</para>
+
+<programlisting>
+$ p11-kit generate-keypair --label=label --type=algorithm --bits=n pkcs11:token
+</programlisting>
+
+	<para>Generate private-public key-pair of given type on a specified token.
+	Should be used together with --type and --bits options.</para>
+
+	<variablelist>
+		<varlistentry>
+			<term><option>--label=&lt;label&gt;</option></term>
+			<listitem><para>Adds a label to the generated key-pair objects.</para></listitem>
+		</varlistentry>
+		<varlistentry>
+			<term><option>--type=&lt;algorithm&gt;</option></term>
+			<listitem><para>Specify the type of keys to generate.
+			Supported values are RSA, ECDSA, Ed25519</para></listitem>
+		</varlistentry>
+		<varlistentry>
+			<term><option>--bits=&lt;n&gt;</option></term>
+			<listitem><para>Specify the number of bits for the key-pair generation.</para></listitem>
+		</varlistentry>
+	</variablelist>
+
+</refsect1>
+
 <refsect1 id="p11-kit-list-profiles">
 	<title>List Profiles</title>
 

diff --git a/p11-kit/Makefile.am b/p11-kit/Makefile.am
@@ -267,6 +267,7 @@ p11_kit_p11_kit_SOURCES = \
 	p11-kit/delete-object.c \
 	p11-kit/delete-profile.c \
 	p11-kit/export-object.c \
+	p11-kit/generate-keypair.c \
 	p11-kit/list-objects.c \
 	p11-kit/list-profiles.c \
 	p11-kit/lists.c \
@@ -292,6 +293,7 @@ p11_kit_p11_kit_testable_SOURCES = \
 	p11-kit/delete-object.c \
 	p11-kit/delete-profile.c \
 	p11-kit/export-object.c \
+	p11-kit/generate-keypair.c \
 	p11-kit/list-objects.c \
 	p11-kit/list-profiles.c \
 	p11-kit/lists.c \