tests: Allow more configuration for test token

Signed-off-by: Jakub Jelen <[email protected]>

Author: Jakuje

cryptoki/tests/common.rs

@@ -1,6 +1,7 @@
 // Copyright 2021 Contributors to the Parsec project.
 // SPDX-License-Identifier: Apache-2.0
-use cryptoki::context::{CInitializeArgs, Pkcs11};
+use cryptoki::context::{CInitializeArgs, Function, Pkcs11};
+use cryptoki::error::{Error, RvError};
 use cryptoki::session::UserType;
 use cryptoki::slot::Slot;
 use cryptoki::types::AuthPin;
@@ -11,6 +12,20 @@ pub static USER_PIN: &str = "fedcba";
 // The default SO pin
 pub static SO_PIN: &str = "abcdef";
 
+fn get_token_label() -> Option<String> {
+    match env::var("TEST_TOKEN_LABEL") {
+        Ok(s) => Some(s),
+        Err(_) => None,
+    }
+}
+
+fn skip_token_init() -> bool {
+    match env::var("TEST_SKIP_TOKEN_INIT") {
+        Ok(s) => s == "1",
+        Err(_) => false,
+    }
+}
+
 fn get_pkcs11_path() -> String {
     env::var("TEST_PKCS11_MODULE")
         .unwrap_or_else(|_| "/usr/local/lib/softhsm/libsofthsm2.so".to_string())
@@ -24,24 +39,41 @@ pub fn get_pkcs11() -> Pkcs11 {
     Pkcs11::new(get_pkcs11_path()).unwrap()
 }
 
+fn get_slot(pkcs11: &Pkcs11) -> Slot {
+    // find a slot, get the first one or one with name specified in the environemnt variable
+    let mut slots = pkcs11.get_slots_with_token().unwrap();
+    match get_token_label() {
+        None => return slots.remove(0),
+        Some(label) => {
+            for s in slots {
+                let ti = pkcs11.get_token_info(s).unwrap();
+                if ti.label() == label {
+                    return s;
+                }
+            }
+            panic!("No token with Token Label `{label}` found");
+        }
+    };
+}
+
 pub fn init_pins() -> (Pkcs11, Slot) {
     let pkcs11 = get_pkcs11();
 
     // initialize the library
     pkcs11.initialize(CInitializeArgs::OsThreads).unwrap();
 
-    // find a slot, get the first one
-    let slot = pkcs11.get_slots_with_token().unwrap().remove(0);
-
-    let so_pin = AuthPin::new(SO_PIN.into());
-    pkcs11.init_token(slot, &so_pin, "Test Token").unwrap();
+    let slot = get_slot(&pkcs11);
 
-    {
-        // open a session
-        let session = pkcs11.open_rw_session(slot).unwrap();
-        // log in the session
-        session.login(UserType::So, Some(&so_pin)).unwrap();
-        session.init_pin(&AuthPin::new(USER_PIN.into())).unwrap();
+    if !skip_token_init() {
+        let so_pin = AuthPin::new(SO_PIN.into());
+        let res = pkcs11.init_token(slot, &so_pin, "Test Token");
+        {
+            // open a session
+            let session = pkcs11.open_rw_session(slot).unwrap();
+            // log in the session
+            session.login(UserType::So, Some(&so_pin)).unwrap();
+            session.init_pin(&AuthPin::new(USER_PIN.into())).unwrap();
+        }
     }
 
     (pkcs11, slot)