Can't extract public key from Nitrokey HSM after creation

[robertocal]

Can't extract public key from Nitrokey HSM after creation

[mskalski]

Two notes:

# Open a session on our token
with token.open(user_pin='***', rw=True) as session:
    # Generate an RSA keypair in this session
    pub, priv = session.generate_keypair(pkcs11.KeyType.RSA, 2048)

# Extract public key
key = session.get_key(key_type=KeyType.RSA, object_class=ObjectClass.PUBLIC_KEY)

When using with scope, after scope ends opened session is closed, hence the error pkcs11.exceptions.SessionHandleInvalid - you are using session which was closed for subsequent session.get_key() function.

The behaviour here of opensc PKCS#11 library is completely correct.

And You are creating session (in memory only) public key pair, because of lack store=True parameter in session.generate_keypair() function, so they won't be stored on token and won't be accessible after session will be closed. Is it intentional?

[mskalski]

PS Sorry for first comment, edited it accordingly

[robertocal]

No, it was not intentional. Thank you for the clarification.