@blamejs/pki 0.7.9 → 0.7.10

package/CHANGELOG.md

@@ -4,6 +4,16 @@ All notable changes to `@blamejs/pki` are documented here. The format
 follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); this
 project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## v0.7.10 — 2026-09-10
+
+An OCSP response is no longer signed with a status window that runs backwards.
+
+### Fixed
+
+- pki.ocsp.sign raises ocsp/bad-input for a response entry whose thisUpdate is after its nextUpdate, before anything is signed. RFC 6960 section 4.2.2.1 makes the pair a validity interval corresponding to the {thisUpdate, nextUpdate} interval in CRLs, and pki.crl.sign, pki.x509.sign, pki.attrcert.sign and pki.crmf.build each already refuse their own reversed window. Every entry in a batch is measured, not the first alone, and a nextUpdate that came from the default is held to the rule a supplied one is.
+- An entry whose thisUpdate equals its nextUpdate still signs, as the equivalent CRL does: a zero-length window is not forbidden. A response entry that names no certificate still reports that first. The times are compared as given, so a thisUpdate later than its nextUpdate is refused even where the two fall inside one second and would encode to the same GeneralizedTime, which is how pki.x509.sign, pki.crl.sign and pki.crmf.build read their own.
+- A pre-produced response still signs. RFC 6960 section 2.5 lets a responder sign a response ahead of the window it certifies, where producedAt is when the response was signed and thisUpdate is when the status was known correct, so a producedAt earlier than thisUpdate is conforming and is left alone.
+
 ## v0.7.9 — 2026-09-10
 
 Certificate revocation lists can now be linted against the RFC 5280 profile.

package/lib/ocsp.js

@@ -326,10 +326,33 @@ function _buildSingleResponse(r, opts) {
   if (r.certID != null) certIdP = Promise.resolve(b.raw(guard.bytes.view(r.certID, OcspError, "ocsp/bad-input", "a response entry's certID")));
   else if (r.cert != null && r.issuer != null) certIdP = _buildCertID(_certOf(r.cert, "a response certificate"), _certOf(r.issuer, "a response issuer"), r.hashAlgorithm || "sha1");
   else return Promise.reject(_err("ocsp/bad-input", "each response entry needs { certID } or { cert, issuer }"));
+  /** @internal Every per-entry refusal stays INSIDE this chain. These entries are built through a
+   * map into Promise.all, so a synchronous throw here would abort the map before Promise.all
+   * attached handlers, and an earlier entry's rejection would be orphaned: the caller catches
+   * sign()'s failure and the process still sees an unhandled rejection. */
   return certIdP.then(function (certID) {
+    var thisUpdate = _asDate(r.thisUpdate) || new Date();
+    var nextUpdate = r.nextUpdate === null ? null : (_asDate(r.nextUpdate) || _defaultNextUpdate());
+    /** @internal RFC 6960 sec. 4.2.2.1 makes thisUpdate and nextUpdate a validity interval, and says
+     * it corresponds to the {thisUpdate, nextUpdate} interval in CRLs. An interval whose end
+     * precedes its start states a status window that closed before it opened, and pki.ocsp.verify
+     * reports such a response unknown, so signing one emits what nothing can act on. pki.x509.sign,
+     * pki.crl.sign, pki.attrcert.sign and pki.crmf.build each refuse their own reversed window; this
+     * is that rule in the one place it was missing. The RESOLVED values are compared rather than the
+     * caller's, since a defaulted nextUpdate reaches a relying party the same way a supplied one
+     * does. An equal pair is left alone, as it is for a CRL: a zero-length window is not forbidden.
+     *
+     * The CALLER's instants are compared, at their full precision, which is what the four sibling
+     * verbs do. Two instants inside one second encode to the same whole-second GeneralizedTime, so
+     * comparing the encoded values instead would accept a descending pair and quietly emit the
+     * zero-length window it truncates to. A caller naming a later thisUpdate than nextUpdate has
+     * stated a reversed one whatever the seconds round to, and hears so here. */
+    if (nextUpdate !== null && guard.time.instantOf(thisUpdate) > guard.time.instantOf(nextUpdate)) {
+      throw _err("ocsp/bad-input", "thisUpdate must not be after nextUpdate (RFC 6960 sec. 4.2.2.1)");
+    }
     var statusNode = _certStatusNode(r.status, opts);
-    var srChildren = [certID, statusNode, b.generalizedTime(_asDate(r.thisUpdate) || new Date())];
-    if (r.nextUpdate !== null) srChildren.push(b.explicit(0, b.generalizedTime(_asDate(r.nextUpdate) || _defaultNextUpdate())));
+    var srChildren = [certID, statusNode, b.generalizedTime(thisUpdate)];
+    if (nextUpdate !== null) srChildren.push(b.explicit(0, b.generalizedTime(nextUpdate)));
     if (r.singleExtensions && r.singleExtensions.length) srChildren.push(b.explicit(1, b.sequence(r.singleExtensions)));
     return b.sequence(srChildren);
   });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/pki",
-  "version": "0.7.9",
+  "version": "0.7.10",
   "description": "Pure-JavaScript PKI toolkit that owns its stack — X.509, ASN.1/DER, CMS, PQC-first.",
   "license": "Apache-2.0",
   "author": "blamejs contributors",

package/sbom.cdx.json

@@ -2,10 +2,10 @@
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:9032cd80-6a2c-49e5-8c6c-c9137a8ead5b",
+  "serialNumber": "urn:uuid:34b0c9f8-e610-4b07-817f-7e260dc2355a",
   "version": 1,
   "metadata": {
-    "timestamp": "2026-09-10T20:15:24.465Z",
+    "timestamp": "2026-09-10T21:28:40.246Z",
     "lifecycles": [
       {
         "phase": "build"
@@ -19,14 +19,14 @@
       }
     ],
     "component": {
-      "bom-ref": "@blamejs/pki@0.7.9",
+      "bom-ref": "@blamejs/pki@0.7.10",
       "type": "application",
       "name": "pki",
-      "version": "0.7.9",
+      "version": "0.7.10",
       "scope": "required",
       "author": "blamejs contributors",
       "description": "Pure-JavaScript PKI toolkit that owns its stack — X.509, ASN.1/DER, CMS, PQC-first.",
-      "purl": "pkg:npm/%40blamejs/pki@0.7.9",
+      "purl": "pkg:npm/%40blamejs/pki@0.7.10",
       "properties": [],
       "externalReferences": [
         {
@@ -54,7 +54,7 @@
   "components": [],
   "dependencies": [
     {
-      "ref": "@blamejs/pki@0.7.9",
+      "ref": "@blamejs/pki@0.7.10",
       "dependsOn": []
     }
   ]