@fjall/components-infrastructure 2.19.5 → 2.19.6

package/dist/lib/lambda-assets/cert-generator/asset/index.js

@@ -14669,11 +14669,10 @@ var require_cjs11 = __commonJS({
   }
 });
 
-// ../../node_modules/@peculiar/x509/build/x509.cjs.js
+// node_modules/@peculiar/x509/build/x509.cjs.js
 var require_x509_cjs = __commonJS({
-  "../../node_modules/@peculiar/x509/build/x509.cjs.js"(exports2) {
+  "node_modules/@peculiar/x509/build/x509.cjs.js"(exports2) {
     "use strict";
-    require_Reflect();
     var asn1Schema = require_cjs();
     var asn1X509 = require_cjs2();
     var pvtsutils = require_build();
@@ -14713,17 +14712,18 @@ var require_x509_cjs = __commonJS({
         return tsyringe.container.resolveAll(diAlgorithm);
       }
       toAsnAlgorithm(alg) {
-        ({ ...alg });
+        const algCopy = { ...alg };
+        if (algCopy.hash && typeof algCopy.hash === "string") {
+          algCopy.hash = { name: algCopy.hash };
+        }
         for (const algorithm of this.getAlgorithms()) {
-          const res = algorithm.toAsnAlgorithm(alg);
+          const res = algorithm.toAsnAlgorithm(algCopy);
           if (res) {
             return res;
           }
         }
         if (/^[0-9.]+$/.test(alg.name)) {
-          const res = new asn1X509.AlgorithmIdentifier({
-            algorithm: alg.name
-          });
+          const res = new asn1X509.AlgorithmIdentifier({ algorithm: alg.name });
           if ("parameters" in alg) {
             const unknown = alg;
             res.parameters = unknown.parameters;
@@ -14866,13 +14866,25 @@ var require_x509_cjs = __commonJS({
       toWebAlgorithm(alg) {
         switch (alg.algorithm) {
           case asn1Ecc__namespace.id_ecdsaWithSHA1:
-            return { name: ECDSA, hash: { name: "SHA-1" } };
+            return {
+              name: ECDSA,
+              hash: { name: "SHA-1" }
+            };
           case asn1Ecc__namespace.id_ecdsaWithSHA256:
-            return { name: ECDSA, hash: { name: "SHA-256" } };
+            return {
+              name: ECDSA,
+              hash: { name: "SHA-256" }
+            };
           case asn1Ecc__namespace.id_ecdsaWithSHA384:
-            return { name: ECDSA, hash: { name: "SHA-384" } };
+            return {
+              name: ECDSA,
+              hash: { name: "SHA-384" }
+            };
           case asn1Ecc__namespace.id_ecdsaWithSHA512:
-            return { name: ECDSA, hash: { name: "SHA-512" } };
+            return {
+              name: ECDSA,
+              hash: { name: "SHA-512" }
+            };
           case asn1Ecc__namespace.id_ecPublicKey: {
             if (!alg.parameters) {
               throw new TypeError("Cannot get required parameters from EC algorithm");
@@ -14880,41 +14892,95 @@ var require_x509_cjs = __commonJS({
             const parameters = asn1Schema.AsnConvert.parse(alg.parameters, asn1Ecc__namespace.ECParameters);
             switch (parameters.namedCurve) {
               case asn1Ecc__namespace.id_secp256r1:
-                return { name: ECDSA, namedCurve: "P-256" };
+                return {
+                  name: ECDSA,
+                  namedCurve: "P-256"
+                };
               case EcAlgorithm_1.SECP256K1:
-                return { name: ECDSA, namedCurve: "K-256" };
+                return {
+                  name: ECDSA,
+                  namedCurve: "K-256"
+                };
               case asn1Ecc__namespace.id_secp384r1:
-                return { name: ECDSA, namedCurve: "P-384" };
+                return {
+                  name: ECDSA,
+                  namedCurve: "P-384"
+                };
               case asn1Ecc__namespace.id_secp521r1:
-                return { name: ECDSA, namedCurve: "P-521" };
+                return {
+                  name: ECDSA,
+                  namedCurve: "P-521"
+                };
               case idBrainpoolP160r1:
-                return { name: ECDSA, namedCurve: brainpoolP160r1 };
+                return {
+                  name: ECDSA,
+                  namedCurve: brainpoolP160r1
+                };
               case idBrainpoolP160t1:
-                return { name: ECDSA, namedCurve: brainpoolP160t1 };
+                return {
+                  name: ECDSA,
+                  namedCurve: brainpoolP160t1
+                };
               case idBrainpoolP192r1:
-                return { name: ECDSA, namedCurve: brainpoolP192r1 };
+                return {
+                  name: ECDSA,
+                  namedCurve: brainpoolP192r1
+                };
               case idBrainpoolP192t1:
-                return { name: ECDSA, namedCurve: brainpoolP192t1 };
+                return {
+                  name: ECDSA,
+                  namedCurve: brainpoolP192t1
+                };
               case idBrainpoolP224r1:
-                return { name: ECDSA, namedCurve: brainpoolP224r1 };
+                return {
+                  name: ECDSA,
+                  namedCurve: brainpoolP224r1
+                };
               case idBrainpoolP224t1:
-                return { name: ECDSA, namedCurve: brainpoolP224t1 };
+                return {
+                  name: ECDSA,
+                  namedCurve: brainpoolP224t1
+                };
               case idBrainpoolP256r1:
-                return { name: ECDSA, namedCurve: brainpoolP256r1 };
+                return {
+                  name: ECDSA,
+                  namedCurve: brainpoolP256r1
+                };
               case idBrainpoolP256t1:
-                return { name: ECDSA, namedCurve: brainpoolP256t1 };
+                return {
+                  name: ECDSA,
+                  namedCurve: brainpoolP256t1
+                };
               case idBrainpoolP320r1:
-                return { name: ECDSA, namedCurve: brainpoolP320r1 };
+                return {
+                  name: ECDSA,
+                  namedCurve: brainpoolP320r1
+                };
               case idBrainpoolP320t1:
-                return { name: ECDSA, namedCurve: brainpoolP320t1 };
+                return {
+                  name: ECDSA,
+                  namedCurve: brainpoolP320t1
+                };
               case idBrainpoolP384r1:
-                return { name: ECDSA, namedCurve: brainpoolP384r1 };
+                return {
+                  name: ECDSA,
+                  namedCurve: brainpoolP384r1
+                };
               case idBrainpoolP384t1:
-                return { name: ECDSA, namedCurve: brainpoolP384t1 };
+                return {
+                  name: ECDSA,
+                  namedCurve: brainpoolP384t1
+                };
               case idBrainpoolP512r1:
-                return { name: ECDSA, namedCurve: brainpoolP512r1 };
+                return {
+                  name: ECDSA,
+                  namedCurve: brainpoolP512r1
+                };
               case idBrainpoolP512t1:
-                return { name: ECDSA, namedCurve: brainpoolP512t1 };
+                return {
+                  name: ECDSA,
+                  namedCurve: brainpoolP512t1
+                };
             }
           }
         }
@@ -15433,16 +15499,18 @@ var require_x509_cjs = __commonJS({
       toArrayBuffer() {
         return asn1Schema.AsnConvert.serialize(this.asn);
       }
-      async getThumbprint(...args) {
-        var _a2;
+      async getThumbprint(arg1, arg2) {
         let crypto3;
         let algorithm = "SHA-1";
-        if (args.length >= 1 && !((_a2 = args[0]) === null || _a2 === void 0 ? void 0 : _a2.subtle)) {
-          algorithm = args[0] || algorithm;
-          crypto3 = args[1] || cryptoProvider.get();
-        } else {
-          crypto3 = args[0] || cryptoProvider.get();
+        if (arg1) {
+          if (typeof arg1 === "object" && "subtle" in arg1) {
+            crypto3 = arg1;
+          } else {
+            algorithm = arg1;
+            crypto3 = arg2;
+          }
         }
+        crypto3 !== null && crypto3 !== void 0 ? crypto3 : crypto3 = cryptoProvider.get();
         return await crypto3.subtle.digest(algorithm, this.toArrayBuffer());
       }
     };
@@ -15663,6 +15731,7 @@ var require_x509_cjs = __commonJS({
     var rBase64Chars = "[a-zA-Z0-9=+/]+";
     var rBase64 = `(?:${rBase64Chars}${rEolGroup})+`;
     var rPem = `${rBeginTag}${rEolGroup}(?:((?:${rHeaderKey}: ${rHeaderValue})+))?${rEolGroup}?(${rBase64})${rEndTag}`;
+    var rEolPattern = new RegExp(`[${rEolChars}]+`, "g");
     var PemConverter = class {
       static isPem(data) {
         return typeof data === "string" && new RegExp(rPem, "g").test(data.replace(/\r/g, ""));
@@ -15673,7 +15742,7 @@ var require_x509_cjs = __commonJS({
         const res = [];
         let matches = null;
         while (matches = pattern.exec(pem)) {
-          const base64 = matches[3].replace(new RegExp(`[${rEolChars}]+`, "g"), "");
+          const base64 = matches[3].replace(rEolPattern, "");
           const pemStruct = {
             type: matches[1],
             headers: [],
@@ -15694,7 +15763,10 @@ var require_x509_cjs = __commonJS({
                 if (lastHeader) {
                   pemStruct.headers.push(lastHeader);
                 }
-                lastHeader = { key, value: value.trim() };
+                lastHeader = {
+                  key,
+                  value: value.trim()
+                };
               }
             }
             if (lastHeader) {
@@ -15760,26 +15832,9 @@ var require_x509_cjs = __commonJS({
           res.push("");
         }
         const base64 = pvtsutils.Convert.ToBase64(pem.rawData);
-        let sliced;
-        let offset = 0;
-        const rows = Array();
-        while (offset < base64.length) {
-          if (base64.length - offset < 64) {
-            sliced = base64.substring(offset);
-          } else {
-            sliced = base64.substring(offset, offset + 64);
-            offset += 64;
-          }
-          if (sliced.length !== 0) {
-            rows.push(sliced);
-            if (sliced.length < 64) {
-              break;
-            }
-          } else {
-            break;
-          }
+        for (let i = 0; i < base64.length; i += 64) {
+          res.push(base64.substring(i, i + 64));
         }
-        res.push(...rows);
         res.push(`-----END ${upperCaseType}-----`);
         return res.join("\n");
       }
@@ -15866,17 +15921,21 @@ var require_x509_cjs = __commonJS({
         }
         this.tag = PemConverter.PublicKeyTag;
       }
-      async export(...args) {
+      async export(arg1, arg2, arg3) {
         let crypto3;
         let keyUsages = ["verify"];
-        let algorithm = { hash: "SHA-256", ...this.algorithm };
-        if (args.length > 1) {
-          algorithm = args[0] || algorithm;
-          keyUsages = args[1] || keyUsages;
-          crypto3 = args[2] || cryptoProvider.get();
+        let algorithm = {
+          hash: "SHA-256",
+          ...this.algorithm
+        };
+        if (arg2) {
+          algorithm = arg1;
+          keyUsages = arg2;
+          crypto3 = arg3;
         } else {
-          crypto3 = args[0] || cryptoProvider.get();
+          crypto3 = arg1;
         }
+        crypto3 !== null && crypto3 !== void 0 ? crypto3 : crypto3 = cryptoProvider.get();
         let raw = this.rawData;
         const asnSpki = asn1Schema.AsnConvert.parse(this.rawData, asn1X509.SubjectPublicKeyInfo);
         if (asnSpki.algorithm.algorithm === asn1Rsa.id_RSASSA_PSS) {
@@ -15897,34 +15956,32 @@ var require_x509_cjs = __commonJS({
           }
         }
       }
-      async getThumbprint(...args) {
-        var _a2;
+      async getThumbprint(arg1, arg2) {
         let crypto3;
         let algorithm = "SHA-1";
-        if (args.length >= 1 && !((_a2 = args[0]) === null || _a2 === void 0 ? void 0 : _a2.subtle)) {
-          algorithm = args[0] || algorithm;
-          crypto3 = args[1] || cryptoProvider.get();
-        } else {
-          crypto3 = args[0] || cryptoProvider.get();
+        if (arg1) {
+          if (typeof arg1 === "object" && "subtle" in arg1) {
+            crypto3 = arg1;
+          } else {
+            algorithm = arg1;
+            crypto3 = arg2;
+          }
         }
+        crypto3 !== null && crypto3 !== void 0 ? crypto3 : crypto3 = cryptoProvider.get();
         return await crypto3.subtle.digest(algorithm, this.rawData);
       }
-      async getKeyIdentifier(...args) {
+      async getKeyIdentifier(arg1, arg2) {
         let crypto3;
         let algorithm = "SHA-1";
-        if (args.length === 1) {
-          if (typeof args[0] === "string") {
-            algorithm = args[0];
-            crypto3 = cryptoProvider.get();
+        if (arg1) {
+          if (typeof arg1 === "object" && "subtle" in arg1) {
+            crypto3 = arg1;
           } else {
-            crypto3 = args[0];
+            algorithm = arg1;
+            crypto3 = arg2;
           }
-        } else if (args.length === 2) {
-          algorithm = args[0];
-          crypto3 = args[1];
-        } else {
-          crypto3 = cryptoProvider.get();
         }
+        crypto3 !== null && crypto3 !== void 0 ? crypto3 : crypto3 = cryptoProvider.get();
         const asn = asn1Schema.AsnConvert.parse(this.rawData, asn1X509.SubjectPublicKeyInfo);
         return await crypto3.subtle.digest(algorithm, asn.subjectPublicKey);
       }
@@ -16167,9 +16224,7 @@ var require_x509_cjs = __commonJS({
         } else {
           const policies = args[0];
           const critical = (_a2 = args[1]) !== null && _a2 !== void 0 ? _a2 : false;
-          const value = new asn1X509__namespace.CertificatePolicies(policies.map((o) => new asn1X509__namespace.PolicyInformation({
-            policyIdentifier: o
-          })));
+          const value = new asn1X509__namespace.CertificatePolicies(policies.map((o) => new asn1X509__namespace.PolicyInformation({ policyIdentifier: o })));
           super(asn1X509__namespace.id_ce_certificatePolicies, critical, asn1Schema.AsnConvert.serialize(value));
           this.policies = policies;
         }
@@ -16191,9 +16246,7 @@ var require_x509_cjs = __commonJS({
           const urls = args[0];
           const dps = urls.map((url) => {
             return new asn1X509__namespace.DistributionPoint({
-              distributionPoint: new asn1X509__namespace.DistributionPointName({
-                fullName: [new asn1X509__namespace.GeneralName({ uniformResourceIdentifier: url })]
-              })
+              distributionPoint: new asn1X509__namespace.DistributionPointName({ fullName: [new asn1X509__namespace.GeneralName({ uniformResourceIdentifier: url })] })
             });
           });
           const value = new asn1X509__namespace.CRLDistributionPoints(dps);
@@ -16213,9 +16266,9 @@ var require_x509_cjs = __commonJS({
         const obj = this.toTextObjectWithoutValue();
         obj["Distribution Point"] = this.distributionPoints.map((dp) => {
           var _a2;
-          const dpObj = {};
-          if (dp.distributionPoint) {
-            dpObj[""] = (_a2 = dp.distributionPoint.fullName) === null || _a2 === void 0 ? void 0 : _a2.map((name) => new GeneralName(name).toString()).join(", ");
+          const dpObj = new TextObject("");
+          if ((_a2 = dp.distributionPoint) === null || _a2 === void 0 ? void 0 : _a2.fullName) {
+            dpObj[""] = dp.distributionPoint.fullName.map((name) => new GeneralName(name).toString()).join(", ");
           }
           if (dp.reasons) {
             dpObj["Reasons"] = dp.reasons.toString();
@@ -16357,7 +16410,10 @@ var require_x509_cjs = __commonJS({
         } else {
           const type = args[0];
           const values = Array.isArray(args[1]) ? args[1].map((o) => pvtsutils.BufferSourceConverter.toArrayBuffer(o)) : [];
-          raw = asn1Schema.AsnConvert.serialize(new asn1X509.Attribute({ type, values }));
+          raw = asn1Schema.AsnConvert.serialize(new asn1X509.Attribute({
+            type,
+            values
+          }));
         }
         super(raw, asn1X509.Attribute);
       }
@@ -16385,9 +16441,7 @@ var require_x509_cjs = __commonJS({
         if (pvtsutils.BufferSourceConverter.isBufferSource(args[0])) {
           super(args[0]);
         } else {
-          const value = new asnPkcs9__namespace.ChallengePassword({
-            printableString: args[0]
-          });
+          const value = new asnPkcs9__namespace.ChallengePassword({ printableString: args[0] });
           super(asnPkcs9__namespace.id_pkcs9_at_challengePassword, [asn1Schema.AsnConvert.serialize(value)]);
         }
         (_a2 = this.password) !== null && _a2 !== void 0 ? _a2 : this.password = "";
@@ -16501,16 +16555,31 @@ var require_x509_cjs = __commonJS({
               }
               switch (hash.toLowerCase()) {
                 case "sha-1":
-                  return new asn1X509.AlgorithmIdentifier({ algorithm: asn1Rsa__namespace.id_sha1WithRSAEncryption, parameters: null });
+                  return new asn1X509.AlgorithmIdentifier({
+                    algorithm: asn1Rsa__namespace.id_sha1WithRSAEncryption,
+                    parameters: null
+                  });
                 case "sha-256":
-                  return new asn1X509.AlgorithmIdentifier({ algorithm: asn1Rsa__namespace.id_sha256WithRSAEncryption, parameters: null });
+                  return new asn1X509.AlgorithmIdentifier({
+                    algorithm: asn1Rsa__namespace.id_sha256WithRSAEncryption,
+                    parameters: null
+                  });
                 case "sha-384":
-                  return new asn1X509.AlgorithmIdentifier({ algorithm: asn1Rsa__namespace.id_sha384WithRSAEncryption, parameters: null });
+                  return new asn1X509.AlgorithmIdentifier({
+                    algorithm: asn1Rsa__namespace.id_sha384WithRSAEncryption,
+                    parameters: null
+                  });
                 case "sha-512":
-                  return new asn1X509.AlgorithmIdentifier({ algorithm: asn1Rsa__namespace.id_sha512WithRSAEncryption, parameters: null });
+                  return new asn1X509.AlgorithmIdentifier({
+                    algorithm: asn1Rsa__namespace.id_sha512WithRSAEncryption,
+                    parameters: null
+                  });
               }
             } else {
-              return new asn1X509.AlgorithmIdentifier({ algorithm: asn1Rsa__namespace.id_rsaEncryption, parameters: null });
+              return new asn1X509.AlgorithmIdentifier({
+                algorithm: asn1Rsa__namespace.id_rsaEncryption,
+                parameters: null
+              });
             }
             break;
           case "rsa-pss":
@@ -16522,9 +16591,15 @@ var require_x509_cjs = __commonJS({
               if (!pssParams) {
                 throw new Error("Cannot create PSS parameters");
               }
-              return new asn1X509.AlgorithmIdentifier({ algorithm: asn1Rsa__namespace.id_RSASSA_PSS, parameters: asn1Schema.AsnConvert.serialize(pssParams) });
+              return new asn1X509.AlgorithmIdentifier({
+                algorithm: asn1Rsa__namespace.id_RSASSA_PSS,
+                parameters: asn1Schema.AsnConvert.serialize(pssParams)
+              });
             } else {
-              return new asn1X509.AlgorithmIdentifier({ algorithm: asn1Rsa__namespace.id_RSASSA_PSS, parameters: null });
+              return new asn1X509.AlgorithmIdentifier({
+                algorithm: asn1Rsa__namespace.id_RSASSA_PSS,
+                parameters: null
+              });
             }
         }
         return null;
@@ -16534,13 +16609,25 @@ var require_x509_cjs = __commonJS({
           case asn1Rsa__namespace.id_rsaEncryption:
             return { name: "RSASSA-PKCS1-v1_5" };
           case asn1Rsa__namespace.id_sha1WithRSAEncryption:
-            return { name: "RSASSA-PKCS1-v1_5", hash: { name: "SHA-1" } };
+            return {
+              name: "RSASSA-PKCS1-v1_5",
+              hash: { name: "SHA-1" }
+            };
           case asn1Rsa__namespace.id_sha256WithRSAEncryption:
-            return { name: "RSASSA-PKCS1-v1_5", hash: { name: "SHA-256" } };
+            return {
+              name: "RSASSA-PKCS1-v1_5",
+              hash: { name: "SHA-256" }
+            };
           case asn1Rsa__namespace.id_sha384WithRSAEncryption:
-            return { name: "RSASSA-PKCS1-v1_5", hash: { name: "SHA-384" } };
+            return {
+              name: "RSASSA-PKCS1-v1_5",
+              hash: { name: "SHA-384" }
+            };
           case asn1Rsa__namespace.id_sha512WithRSAEncryption:
-            return { name: "RSASSA-PKCS1-v1_5", hash: { name: "SHA-512" } };
+            return {
+              name: "RSASSA-PKCS1-v1_5",
+              hash: { name: "SHA-512" }
+            };
           case asn1Rsa__namespace.id_RSASSA_PSS:
             if (alg.parameters) {
               const pssParams = asn1Schema.AsnConvert.parse(alg.parameters, asn1Rsa__namespace.RsaSaPssParams);
@@ -16678,9 +16765,7 @@ var require_x509_cjs = __commonJS({
             }
         }
         if (algorithm) {
-          return new asn1X509.AlgorithmIdentifier({
-            algorithm
-          });
+          return new asn1X509.AlgorithmIdentifier({ algorithm });
         }
         return null;
       }
@@ -16689,11 +16774,17 @@ var require_x509_cjs = __commonJS({
           case idEd25519:
             return { name: "Ed25519" };
           case idEd448:
-            return { name: "EdDSA", namedCurve: "Ed448" };
+            return {
+              name: "EdDSA",
+              namedCurve: "Ed448"
+            };
           case idX25519:
             return { name: "X25519" };
           case idX448:
-            return { name: "ECDH-ES", namedCurve: "X448" };
+            return {
+              name: "ECDH-ES",
+              namedCurve: "X448"
+            };
         }
         return null;
       }
@@ -16802,7 +16893,10 @@ var require_x509_cjs = __commonJS({
         return this.extensions.filter((o) => o.type === type);
       }
       async verify(crypto3 = cryptoProvider.get()) {
-        const algorithm = { ...this.publicKey.algorithm, ...this.signatureAlgorithm };
+        const algorithm = {
+          ...this.publicKey.algorithm,
+          ...this.signatureAlgorithm
+        };
         const publicKey = await this.publicKey.export(algorithm, ["verify"], crypto3);
         const signatureFormatters = tsyringe.container.resolveAll(diAsnSignatureFormatter).reverse();
         let signature = null;
@@ -16823,8 +16917,8 @@ var require_x509_cjs = __commonJS({
         const req = asn1Schema.AsnConvert.parse(this.rawData, asn1Csr.CertificationRequest);
         const tbs = req.certificationRequestInfo;
         const data = new TextObject("", {
-          "Version": `${asn1X509.Version[tbs.version]} (${tbs.version})`,
-          "Subject": this.subject,
+          Version: `${asn1X509.Version[tbs.version]} (${tbs.version})`,
+          Subject: this.subject,
           "Subject Public Key Info": this.publicKey
         });
         if (this.attributes.length) {
@@ -16837,7 +16931,7 @@ var require_x509_cjs = __commonJS({
         }
         obj["Data"] = data;
         obj["Signature"] = new TextObject("", {
-          "Algorithm": TextConverter.serializeAlgorithm(req.signatureAlgorithm),
+          Algorithm: TextConverter.serializeAlgorithm(req.signatureAlgorithm),
           "": req.signature
         });
         return obj;
@@ -16855,9 +16949,7 @@ var require_x509_cjs = __commonJS({
         }
         const spki = await crypto3.subtle.exportKey("spki", params.keys.publicKey);
         const asnReq = new asn1Csr.CertificationRequest({
-          certificationRequestInfo: new asn1Csr.CertificationRequestInfo({
-            subjectPKInfo: asn1Schema.AsnConvert.parse(spki, asn1X509.SubjectPublicKeyInfo)
-          })
+          certificationRequestInfo: new asn1Csr.CertificationRequestInfo({ subjectPKInfo: asn1Schema.AsnConvert.parse(spki, asn1X509.SubjectPublicKeyInfo) })
         });
         if (params.name) {
           const name = params.name instanceof Name ? params.name : new Name(params.name);
@@ -16877,7 +16969,10 @@ var require_x509_cjs = __commonJS({
           attr.values.push(asn1Schema.AsnConvert.serialize(extensions));
           asnReq.certificationRequestInfo.attributes.push(attr);
         }
-        const signingAlgorithm = { ...params.signingAlgorithm, ...params.keys.privateKey.algorithm };
+        const signingAlgorithm = {
+          ...params.signingAlgorithm,
+          ...params.keys.privateKey.algorithm
+        };
         const algProv = tsyringe.container.resolve(diAlgorithmProvider);
         asnReq.signatureAlgorithm = algProv.toAsnAlgorithm(signingAlgorithm);
         const tbs = asn1Schema.AsnConvert.serialize(asnReq.certificationRequestInfo);
@@ -17047,23 +17142,38 @@ var require_x509_cjs = __commonJS({
         const paramsKey = params.publicKey;
         try {
           if (!paramsKey) {
-            keyAlgorithm = { ...this.publicKey.algorithm, ...this.signatureAlgorithm };
+            keyAlgorithm = {
+              ...this.publicKey.algorithm,
+              ...this.signatureAlgorithm
+            };
             publicKey = await this.publicKey.export(keyAlgorithm, ["verify"], crypto3);
           } else if ("publicKey" in paramsKey) {
-            keyAlgorithm = { ...paramsKey.publicKey.algorithm, ...this.signatureAlgorithm };
+            keyAlgorithm = {
+              ...paramsKey.publicKey.algorithm,
+              ...this.signatureAlgorithm
+            };
             publicKey = await paramsKey.publicKey.export(keyAlgorithm, ["verify"], crypto3);
           } else if (paramsKey instanceof PublicKey) {
-            keyAlgorithm = { ...paramsKey.algorithm, ...this.signatureAlgorithm };
+            keyAlgorithm = {
+              ...paramsKey.algorithm,
+              ...this.signatureAlgorithm
+            };
             publicKey = await paramsKey.export(keyAlgorithm, ["verify"], crypto3);
           } else if (pvtsutils.BufferSourceConverter.isBufferSource(paramsKey)) {
             const key = new PublicKey(paramsKey);
-            keyAlgorithm = { ...key.algorithm, ...this.signatureAlgorithm };
+            keyAlgorithm = {
+              ...key.algorithm,
+              ...this.signatureAlgorithm
+            };
             publicKey = await key.export(keyAlgorithm, ["verify"], crypto3);
           } else {
-            keyAlgorithm = { ...paramsKey.algorithm, ...this.signatureAlgorithm };
+            keyAlgorithm = {
+              ...paramsKey.algorithm,
+              ...this.signatureAlgorithm
+            };
             publicKey = paramsKey;
           }
-        } catch (_e) {
+        } catch {
           return false;
         }
         const signatureFormatters = tsyringe.container.resolveAll(diAsnSignatureFormatter).reverse();
@@ -17086,15 +17196,15 @@ var require_x509_cjs = __commonJS({
           return ok && this.notBefore.getTime() < time && time < this.notAfter.getTime();
         }
       }
-      async getThumbprint(...args) {
+      async getThumbprint(arg1, arg2) {
         let crypto3;
         let algorithm = "SHA-1";
-        if (args[0]) {
-          if (!args[0].subtle) {
-            algorithm = args[0] || algorithm;
-            crypto3 = args[1];
+        if (arg1) {
+          if (typeof arg1 === "object" && "subtle" in arg1) {
+            crypto3 = arg1;
           } else {
-            crypto3 = args[0];
+            algorithm = arg1;
+            crypto3 = arg2;
           }
         }
         crypto3 !== null && crypto3 !== void 0 ? crypto3 : crypto3 = cryptoProvider.get();
@@ -17108,15 +17218,15 @@ var require_x509_cjs = __commonJS({
         const cert = asn1Schema.AsnConvert.parse(this.rawData, asn1X509.Certificate);
         const tbs = cert.tbsCertificate;
         const data = new TextObject("", {
-          "Version": `${asn1X509.Version[tbs.version]} (${tbs.version})`,
+          Version: `${asn1X509.Version[tbs.version]} (${tbs.version})`,
           "Serial Number": tbs.serialNumber,
           "Signature Algorithm": TextConverter.serializeAlgorithm(tbs.signature),
-          "Issuer": this.issuer,
-          "Validity": new TextObject("", {
+          Issuer: this.issuer,
+          Validity: new TextObject("", {
             "Not Before": tbs.validity.notBefore.getTime(),
             "Not After": tbs.validity.notAfter.getTime()
           }),
-          "Subject": this.subject,
+          Subject: this.subject,
           "Subject Public Key Info": this.publicKey
         });
         if (tbs.issuerUniqueID) {
@@ -17135,7 +17245,7 @@ var require_x509_cjs = __commonJS({
         }
         obj["Data"] = data;
         obj["Signature"] = new TextObject("", {
-          "Algorithm": TextConverter.serializeAlgorithm(cert.signatureAlgorithm),
+          Algorithm: TextConverter.serializeAlgorithm(cert.signatureAlgorithm),
           "": cert.signatureValue
         });
         return obj;
@@ -17160,12 +17270,8 @@ var require_x509_cjs = __commonJS({
         const signedData = new asn1Cms__namespace.SignedData();
         signedData.version = 1;
         signedData.encapContentInfo.eContentType = asn1Cms__namespace.id_data;
-        signedData.encapContentInfo.eContent = new asn1Cms__namespace.EncapsulatedContent({
-          single: new asn1Schema.OctetString()
-        });
-        signedData.certificates = new asn1Cms__namespace.CertificateSet(this.map((o) => new asn1Cms__namespace.CertificateChoices({
-          certificate: asn1Schema.AsnConvert.parse(o.rawData, asn1X509.Certificate)
-        })));
+        signedData.encapContentInfo.eContent = new asn1Cms__namespace.EncapsulatedContent({ single: new asn1Schema.OctetString() });
+        signedData.certificates = new asn1Cms__namespace.CertificateSet(this.map((o) => new asn1Cms__namespace.CertificateChoices({ certificate: asn1Schema.AsnConvert.parse(o.rawData, asn1X509.Certificate) })));
         const cms = new asn1Cms__namespace.ContentInfo({
           contentType: asn1Cms__namespace.id_signedData,
           content: asn1Schema.AsnConvert.serialize(signedData)
@@ -17220,9 +17326,9 @@ var require_x509_cjs = __commonJS({
         const signedData = asn1Schema.AsnConvert.parse(contentInfo.content, asn1Cms__namespace.SignedData);
         const obj = new TextObject("X509Certificates", {
           "Content Type": OidSerializer.toString(contentInfo.contentType),
-          "Content": new TextObject("", {
-            "Version": `${asn1Cms__namespace.CMSVersion[signedData.version]} (${signedData.version})`,
-            "Certificates": new TextObject("", { "Certificate": this.map((o) => o.toTextObject()) })
+          Content: new TextObject("", {
+            Version: `${asn1Cms__namespace.CMSVersion[signedData.version]} (${signedData.version})`,
+            Certificates: new TextObject("", { Certificate: this.map((o) => o.toTextObject()) })
           })
         });
         return obj;
@@ -17271,13 +17377,19 @@ var require_x509_cjs = __commonJS({
               }
             }
             try {
-              const algorithm = { ...item.publicKey.algorithm, ...cert.signatureAlgorithm };
+              const algorithm = {
+                ...item.publicKey.algorithm,
+                ...cert.signatureAlgorithm
+              };
               const publicKey = await item.publicKey.export(algorithm, ["verify"], crypto3);
-              const ok = await cert.verify({ publicKey, signatureOnly: true }, crypto3);
+              const ok = await cert.verify({
+                publicKey,
+                signatureOnly: true
+              }, crypto3);
               if (!ok) {
                 continue;
               }
-            } catch (_e) {
+            } catch {
               continue;
             }
             return item;
@@ -17337,7 +17449,7 @@ var require_x509_cjs = __commonJS({
         } else {
           spki = await crypto3.subtle.exportKey("spki", params.publicKey);
         }
-        const serialNumber = generateCertificateSerialNumber(params.serialNumber);
+        const serialNumber = generateCertificateSerialNumber(params.serialNumber, crypto3);
         const notBefore = params.notBefore || /* @__PURE__ */ new Date();
         const notAfter = params.notAfter || new Date(notBefore.getTime() + 31536e6);
         const asnX509 = new asn1X509__namespace.Certificate({
@@ -17360,10 +17472,15 @@ var require_x509_cjs = __commonJS({
           const name = params.issuer instanceof Name ? params.issuer : new Name(params.issuer);
           asnX509.tbsCertificate.issuer = asn1Schema.AsnConvert.parse(name.toArrayBuffer(), asn1X509__namespace.Name);
         }
-        const defaultSigningAlgorithm = {
-          hash: "SHA-256"
+        const defaultSigningAlgorithm = { hash: "SHA-256" };
+        const signatureAlgorithm = "signingKey" in params ? {
+          ...defaultSigningAlgorithm,
+          ...params.signingAlgorithm,
+          ...params.signingKey.algorithm
+        } : {
+          ...defaultSigningAlgorithm,
+          ...params.signingAlgorithm
         };
-        const signatureAlgorithm = "signingKey" in params ? { ...defaultSigningAlgorithm, ...params.signingAlgorithm, ...params.signingKey.algorithm } : { ...defaultSigningAlgorithm, ...params.signingAlgorithm };
         const algProv = tsyringe.container.resolve(diAlgorithmProvider);
         asnX509.tbsCertificate.signature = asnX509.signatureAlgorithm = algProv.toAsnAlgorithm(signatureAlgorithm);
         const tbs = asn1Schema.AsnConvert.serialize(asnX509.tbsCertificate);
@@ -17603,13 +17720,19 @@ var require_x509_cjs = __commonJS({
             };
             publicKey = await paramsKey.publicKey.export(keyAlgorithm, ["verify"]);
           } else if (paramsKey instanceof PublicKey) {
-            keyAlgorithm = { ...paramsKey.algorithm, ...this.signatureAlgorithm };
+            keyAlgorithm = {
+              ...paramsKey.algorithm,
+              ...this.signatureAlgorithm
+            };
             publicKey = await paramsKey.export(keyAlgorithm, ["verify"]);
           } else {
-            keyAlgorithm = { ...paramsKey.algorithm, ...this.signatureAlgorithm };
+            keyAlgorithm = {
+              ...paramsKey.algorithm,
+              ...this.signatureAlgorithm
+            };
             publicKey = paramsKey;
           }
-        } catch (_e) {
+        } catch {
           return false;
         }
         const signatureFormatters = tsyringe.container.resolveAll(diAsnSignatureFormatter).reverse();
@@ -17625,15 +17748,15 @@ var require_x509_cjs = __commonJS({
         }
         return await crypto3.subtle.verify(this.signatureAlgorithm, publicKey, signature, this.tbs);
       }
-      async getThumbprint(...args) {
+      async getThumbprint(arg1, arg2) {
         let crypto3;
         let algorithm = "SHA-1";
-        if (args[0]) {
-          if (!args[0].subtle) {
-            algorithm = args[0] || algorithm;
-            crypto3 = args[1];
+        if (arg1) {
+          if (typeof arg1 === "object" && "subtle" in arg1) {
+            crypto3 = arg1;
           } else {
-            crypto3 = args[0];
+            algorithm = arg1;
+            crypto3 = arg2;
           }
         }
         crypto3 !== null && crypto3 !== void 0 ? crypto3 : crypto3 = cryptoProvider.get();
@@ -17712,7 +17835,10 @@ var require_x509_cjs = __commonJS({
             asnX509Crl.tbsCertList.revokedCertificates.push(revokedCert);
           }
         }
-        const signingAlgorithm = { ...params.signingAlgorithm, ...params.signingKey.algorithm };
+        const signingAlgorithm = {
+          ...params.signingAlgorithm,
+          ...params.signingKey.algorithm
+        };
         const algProv = tsyringe.container.resolve(diAlgorithmProvider);
         asnX509Crl.tbsCertList.signature = asnX509Crl.signatureAlgorithm = algProv.toAsnAlgorithm(signingAlgorithm);
         const tbs = asn1Schema.AsnConvert.serialize(asnX509Crl.tbsCertList);
@@ -17810,6 +17936,7 @@ var require_x509_cjs = __commonJS({
 });
 
 // lib/lambda-assets/cert-generator/src/index.cjs
+require_Reflect();
 var { webcrypto: crypto2, createHash } = require("node:crypto");
 var x509 = require_x509_cjs();
 var {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fjall/components-infrastructure",
-  "version": "2.19.5",
+  "version": "2.19.6",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",
   "bin": {
@@ -50,20 +50,21 @@
   },
   "devDependencies": {
     "@aws-sdk/client-elastic-load-balancing-v2": "^3.1045.0",
-    "@peculiar/x509": "1.14.0",
+    "@peculiar/x509": "2.0.0",
     "@types/aws-lambda": "^8.10.161",
-    "@types/node": "^25.6.0",
+    "@types/node": "^26.0.0",
     "@typescript-eslint/eslint-plugin": "^8.59.1",
     "@typescript-eslint/parser": "^8.59.1",
     "eslint": "^10.2.1",
     "prettier": "^3.8.3",
+    "reflect-metadata": "^0.2.2",
     "typescript": "^6.0.3",
     "vitest": "^4.1.7"
   },
   "dependencies": {
     "@aws-sdk/client-organizations": "^3.1038.0",
-    "@fjall/generator": "^2.19.5",
-    "@fjall/util": "^2.19.5",
+    "@fjall/generator": "^2.19.6",
+    "@fjall/util": "^2.19.6",
     "constructs": "^10.0.0"
   },
   "overrides": {
@@ -77,5 +78,5 @@
   "engines": {
     "node": ">=18.0.0"
   },
-  "gitHead": "8179898f55c1467404e6a715ead5404404e45be0"
+  "gitHead": "f41aae2245b7e82af7e8e7f5cf098b83b22cc198"
 }