{"id":279,"date":"2020-10-02T14:36:48","date_gmt":"2020-10-02T09:06:48","guid":{"rendered":"http:\/\/madhurendra.com\/?p=279"},"modified":"2021-03-30T00:13:26","modified_gmt":"2021-03-29T18:43:26","slug":"pdf-signing-using-hardware-token-dsc-in-python","status":"publish","type":"post","link":"https:\/\/madhurendra.com\/pdf-signing-using-hardware-token-dsc-in-python\/","title":{"rendered":"PDF Signing using hardware token (DSC) in Python"},"content":{"rendered":"\n<p>Hardware based tokens are widely used in India to generate signed PDF&#8217;s like invoices and agreement. We wrote small Python code to sign the invoices automatically where token was attached to a local server. <\/p>\n\n\n\n<p>Windows drives are widely available but rare to find linux drivers are listed https:\/\/www.e-mudhra.com\/Repository\/index.html<\/p>\n\n\n\n<p>You can uncomment to get the token name <code>print(self.pkcs11.getSlotList(tokenPresent=True))<\/code><br><code>print(self.pkcs11.getTokenInfo(1)) <\/code>to get token name, for PROXKey the name <code>\"WD PROXKey\"<\/code> was generated. <\/p>\n\n\n<div class=\"wp-block-syntaxhighlighter-code \"><pre class=\"brush: python; title: ; notranslate\" title=\"\">\n#!\/usr\/bin\/env vpython3\n# *-* coding: utf-8 *-*\nimport sys\nimport datetime\nfrom endesive import pdf, hsm\n\nimport os\nimport sys\n\nif sys.platform == 'win32':\n    dllpath = r'c:\\windows\\system32\\cryptoCertum3PKCS.dll'\nelse:\n    dllpath = '\/usr\/lib\/WatchData\/ProxKey\/lib\/libwdpkcs_SignatureP11.so'\n\nimport PyKCS11 as PK11\n\nclass Signer(hsm.HSM):\n    def certificate(self):\n        #print(self.pkcs11.getSlotList(tokenPresent=True))\n        #print(self.pkcs11.getTokenInfo(1))\n#        print(self.pkcs11.getTokenInfo(2))\n#        print(self.pkcs11.getTokenInfo(3))\n\n\n#        print(self.pkcs11.getSlotInfo(1))\n        self.login(&quot;WD PROXKey&quot;,&quot;12345678&quot;) # WF PROXKey is token name.\n        keyid = &#x5B;0x5e, 0x9a, 0x33, 0x44, 0x8b, 0xc3, 0xa1, 0x35, 0x33, 0xc7, 0xc2, 0x02, 0xf6, 0x9b, 0xde, 0x55, 0xfe, 0x83, 0x7b, 0xde]\n        #keyid = &#x5B;0x3f, 0xa6, 0x63, 0xdb, 0x75, 0x97, 0x5d, 0xa6, 0xb0, 0x32, 0xef, 0x2d, 0xdc, 0xc4, 0x8d, 0xe8]\n        keyid = bytes(keyid)\n        try:\n            pk11objects = self.session.findObjects(&#x5B;(PK11.CKA_CLASS, PK11.CKO_CERTIFICATE)])\n            all_attributes = &#x5B;\n                #PK11.CKA_SUBJECT,\n                PK11.CKA_VALUE,\n                #PK11.CKA_ISSUER,\n                #PK11.CKA_CERTIFICATE_CATEGORY,\n                #PK11.CKA_END_DATE,\n                PK11.CKA_ID,\n            ]\n\n            for pk11object in pk11objects:\n                try:\n                    attributes = self.session.getAttributeValue(pk11object, all_attributes)\n                except PK11.PyKCS11Error as e:\n                    continue\n\n                attrDict = dict(list(zip(all_attributes, attributes)))\n                cert = bytes(attrDict&#x5B;PK11.CKA_VALUE])\n                #if keyid == bytes(attrDict&#x5B;PK11.CKA_ID]):\n                return bytes(attrDict&#x5B;PK11.CKA_ID]), cert\n        finally:\n            self.logout()\n        return None, None\n\n    def sign(self, keyid, data, mech):\n        self.login(&quot;WD PROXKey&quot;,&quot;12345678&quot;)\n        try:\n            privKey = self.session.findObjects(&#x5B;(PK11.CKA_CLASS, PK11.CKO_PRIVATE_KEY)])&#x5B;0]\n            mech = getattr(PK11, 'CKM_%s_RSA_PKCS' % mech.upper())\n            sig = self.session.sign(privKey, data, PK11.Mechanism(mech, None))\n            return bytes(sig)\n        finally:\n            self.logout()\n\ndef main():\n    date = datetime.datetime.utcnow() - datetime.timedelta(hours=12)\n    date = date.strftime('%Y%m%d%H%M%S+00\\'00\\'')\n    dct = {\n        &quot;sigflags&quot;: 3,\n        &quot;sigpage&quot;: 0,\n        &quot;sigbutton&quot;: True,\n        &quot;contact&quot;: &quot;madhurendra@tikaj.com&quot;,\n        &quot;location&quot;: 'India',\n        &quot;signingdate&quot;: date.encode(),\n        &quot;reason&quot;: 'Sample sign',\n        &quot;signature&quot;: 'Madhurendra Sachan',\n        &quot;signaturebox&quot;: (0, 0, 100, 100),\n    }\n    clshsm = Signer(dllpath)\n    fname = 'sample.pdf'\n    datau = open(fname, 'rb').read()\n    datas = pdf.cms.sign(datau, dct,\n        None, None,\n        &#x5B;],\n        'sha256',\n        clshsm,\n    )\n    fname = fname.replace('.pdf', '-signed.pdf')\n    with open(fname, 'wb') as fp:\n        fp.write(datau)\n        fp.write(datas)\n\n\nmain()\n\n<\/pre><\/div>\n\n\n<p><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">.dll\/.so path for common tokens<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li>For Windows the file will be in Windows\\SysWOW64&#8243; or &#8220;WINDOWS\\system32&#8221; or &#8220;WINNT\\system32\u201d<\/li><li>For Linux machine the file will be in \/usr\/local\/lib\/ or \/usr\/lib\/<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><th>Hardware Token Type<\/th><th>Library file (Windows)<\/th><th>Library file (Linux)<\/th><\/tr><\/thead><tbody><tr><td>SafeSign<\/td><td>aetpkss1.dll<\/td><td>aetpkss1.so<\/td><\/tr><tr><td>eMudhra<\/td><td>eMudhra\\eMudhra CSPV1.0\\wdpkcs.dll<\/td><td>1. WatchData\/eMudhra_3.4.3\/lib\/libpkcs11wrapper.so<br>2. WatchData\/eMudhra_3.4.3\/lib\/libwdpkcs_eMudhra_343.so<\/td><\/tr><tr><td>Trust Key<\/td><td>1. TRUST KEY\\TRUST KEY CSP V1.0\\wdpkcs.dll<br>2. C:\\Windows\\System32\\TRUSTKEYP11_ND_v34.dll<\/td><td>1. WatchData\/TRUSTKEY\/lib\/libpkcs11wrapper.so<br>2. WatchData\/TRUSTKEY\/lib\/libwdpkcs_TRUSTKEY.so<\/td><\/tr><tr><td>Belgium eID MiddleWare<\/td><td>beidpkcs11.dll<\/td><td>beidpkcs11.so<\/td><\/tr><tr><td>Gemalto Cryptocard Token<\/td><td>libgtop11dotnet.dll<\/td><td>libgtop11dotnet.so<\/td><\/tr><tr><td>EPass<\/td><td>eps2003csp11.dll<\/td><td><\/td><\/tr><tr><td>Aladdin eToken<\/td><td>eTPKCS11.dll<\/td><td><\/td><\/tr><tr><td>Safenet iKey<\/td><td>dkck201.dll<\/td><td><\/td><\/tr><tr><td>Starkey<\/td><td>aetpkss1.dll<\/td><td><\/td><\/tr><tr><td>Watchdata PROXkey<\/td><td>SignatureP11.dll<\/td><td>WatchData\/ProxKey\/lib\/libwdpkcs_SignatureP11.so<\/td><\/tr><\/tbody><\/table><figcaption>.DLL or .so path&#8217;s for linux.<\/figcaption><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>Hardware based tokens are widely used in India to generate signed PDF&#8217;s like invoices and agreement. We wrote small Python code to sign the invoices automatically where token was attached to a local server. Windows drives are widely available but rare to find linux drivers are listed https:\/\/www.e-mudhra.com\/Repository\/index.html You can uncomment to get the token &hellip; <\/p>\n<p><a class=\"more-link btn\" href=\"https:\/\/madhurendra.com\/pdf-signing-using-hardware-token-dsc-in-python\/\">Continue reading<\/a><\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false},"version":2}},"categories":[1],"tags":[],"class_list":["post-279","post","type-post","status-publish","format-standard","hentry","category-uncategorized","item-wrap"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack-related-posts":[],"jetpack_shortlink":"https:\/\/wp.me\/pciGs2-4v","jetpack_likes_enabled":true,"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/madhurendra.com\/wp-json\/wp\/v2\/posts\/279","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/madhurendra.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/madhurendra.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/madhurendra.com\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/madhurendra.com\/wp-json\/wp\/v2\/comments?post=279"}],"version-history":[{"count":2,"href":"https:\/\/madhurendra.com\/wp-json\/wp\/v2\/posts\/279\/revisions"}],"predecessor-version":[{"id":362,"href":"https:\/\/madhurendra.com\/wp-json\/wp\/v2\/posts\/279\/revisions\/362"}],"wp:attachment":[{"href":"https:\/\/madhurendra.com\/wp-json\/wp\/v2\/media?parent=279"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/madhurendra.com\/wp-json\/wp\/v2\/categories?post=279"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/madhurendra.com\/wp-json\/wp\/v2\/tags?post=279"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}