@icedevml/tinypki-client-side-cert-req 0.4.0

package/dist/types/api/base64ToBuffer.d.ts

@@ -0,0 +1,2 @@
+import { Buffer } from "buffer";
+export declare function base64ToBuffer(dataB64: string): Buffer<ArrayBuffer>;

package/dist/types/api/exportKeyDERB64.d.ts

@@ -0,0 +1 @@
+export declare function exportKeyDERB64(key: CryptoKey): Promise<string>;

package/dist/types/api/generateCSR.d.ts

@@ -0,0 +1,9 @@
+export interface IGenerateCSRParams {
+    keys: CryptoKeyPair;
+    algorithm: RsaHashedKeyGenParams | RsaPssParams | EcKeyGenParams | EcdsaParams;
+    commonName: string;
+    subjectAltNames: string[];
+}
+type PEMString = string;
+export declare function generateCSR({ keys, algorithm, commonName, subjectAltNames }: IGenerateCSRParams): Promise<PEMString>;
+export {};

package/dist/types/api/generatePKCS12.d.ts

@@ -0,0 +1,13 @@
+type PEMString = string;
+type Base64EncodedDER = string;
+type PKCS12Algorithm = "3des" | "aes128" | "aes192" | "aes256";
+export interface IGeneratePKCS12Params {
+    algorithm: RsaHashedKeyGenParams | EcKeyGenParams;
+    certChainPEM: PEMString;
+    privKeyDERB64: Base64EncodedDER;
+    pkcs12Password: string;
+    pkcs12Algorithm?: PKCS12Algorithm | null;
+    allowWeakPassword?: boolean;
+}
+export declare function generatePKCS12({ certChainPEM, privKeyDERB64, pkcs12Password, pkcs12Algorithm, allowWeakPassword, }: IGeneratePKCS12Params): Promise<Base64EncodedDER>;
+export {};

package/dist/types/api/generateSelfSignedCert.d.ts

@@ -0,0 +1,5 @@
+export interface IGenerateSelfSignedCertParams {
+    keys: CryptoKeyPair;
+    algorithm: RsaHashedKeyGenParams | RsaPssParams | EcKeyGenParams | EcdsaParams;
+}
+export declare function generateSelfSignedCert({ algorithm, keys }: IGenerateSelfSignedCertParams): Promise<string>;

package/dist/types/api/savePKCS12BufferAsFile.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Derived from:
+ * https://github.com/PeculiarVentures/PKI.js/blob/1bb60c22567a8608f296a2d06ddc06bd2da7125e/examples/PKCS12SimpleExample/es6.ts#L9
+ */
+interface ISavePKCS12BufferAsFileParams {
+    buffer: ArrayBuffer;
+    targetName: string;
+}
+export declare function savePKCS12BufferAsFile({ buffer, targetName }: ISavePKCS12BufferAsFileParams): void;
+export {};

package/dist/types/index.d.ts

@@ -0,0 +1,19 @@
+/**
+ * TinyPKI ClientSideCertReq Library
+ *
+ * Single-file JavaScript library for classic HTML web applications. Features client-side CSR generation
+ * for RSA/ECDSA key pairs from Web Crypto API, after the certificate is issued, also allows to bundle
+ * the certificate chain and the private key together into a locally-generated PKCS#12 container
+ * that is easily installable in most operating systems and browsers.
+ */
+import type { IGenerateCSRParams } from "./api/generateCSR";
+import type { IGeneratePKCS12Params } from "./api/generatePKCS12";
+import type { IGenerateSelfSignedCertParams } from "./api/generateSelfSignedCert";
+import { exportKeyDERB64 } from "./api/exportKeyDERB64";
+import { generateCSR } from "./api/generateCSR";
+import { generatePKCS12 } from "./api/generatePKCS12";
+import { savePKCS12BufferAsFile } from "./api/savePKCS12BufferAsFile";
+import { base64ToBuffer } from "./api/base64ToBuffer";
+import { generateSelfSignedCert } from "./api/generateSelfSignedCert";
+export type { IGenerateCSRParams, IGeneratePKCS12Params, IGenerateSelfSignedCertParams, };
+export { generateCSR, generatePKCS12, exportKeyDERB64, base64ToBuffer, savePKCS12BufferAsFile, generateSelfSignedCert, };

package/dist/types/internal/pemChainToDERB64Array.d.ts

@@ -0,0 +1 @@
+export declare function pemChainToDERB64Array(pemChain: string): string[];

package/dist/types/internal/toPkcs12Asn1Generic.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Derived from:
+ * https://github.com/digitalbazaar/forge/blob/1cea0aff4901589ae86e314f25782bbe312f9f69/lib/pkcs12.js#L800
+ *
+ * and hacked around to support embedding arbitrary DER-encoded certificates and private keys
+ * regardless of their algorithm
+ */
+import * as forge from "node-forge";
+export declare const toPkcs12Asn1Generic: (key: string, cert: string | string[], password: string, options: any) => forge.asn1.Asn1;

package/package.json

@@ -0,0 +1,38 @@
+{
+  "name": "@icedevml/tinypki-client-side-cert-req",
+  "version": "0.4.0",
+  "description": "TinyPKI ClientSideCertReq Library",
+  "license": "MIT",
+  "main": "dist/index.js",
+  "module": "dist/index.js",
+  "types": "dist/types/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/types/index.d.ts"
+    }
+  },
+  "files": [
+    "dist/"
+  ],
+  "scripts": {
+    "build": "rollup -c"
+  },
+  "dependencies": {
+    "@peculiar/x509": "1.14.3",
+    "buffer": "^6.0.3",
+    "node-forge": "1.3.3",
+    "pkijs": "3.3.3"
+  },
+  "devDependencies": {
+    "@rollup/plugin-commonjs": "^29.0.0",
+    "@rollup/plugin-node-resolve": "^16.0.3",
+    "@types/node-forge": "^1.3.14",
+    "rollup": "^4.59.0",
+    "rollup-plugin-dts": "^6.3.0",
+    "rollup-plugin-esbuild-minify": "^1.3.0",
+    "rollup-plugin-typescript2": "^0.36.0",
+    "typescript": "^5.5.3"
+  },
+  "packageManager": "yarn@4.12.0"
+}