@matter/protocol 0.11.0-alpha.0-20241005-e3e4e4a7a

package/dist/cjs/certificate/CertificateManager.d.ts

@@ -0,0 +1,575 @@
+/**
+ * @license
+ * Copyright 2022-2024 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { Key, MatterError } from "#general";
+import { BitFlag, CaseAuthenticatedTag, FabricId, NodeId, TypeFromPartialBitSchema, TypeFromSchema, VendorId } from "#types";
+export declare class CertificateError extends MatterError {
+}
+export declare function matterToJsDate(date: number): Date;
+export declare function jsToMatterDate(date: Date, addYears?: number): number;
+/** matter-node-id = ASN.1 OID 1.3.6.1.4.1.37244.1.1 */
+export declare const NodeId_Matter: (value: NodeId) => any[];
+/** matter-firmware-signing-id = ASN.1 OID 1.3.6.1.4.1.37244.1.2 */
+export declare const FirmwareSigningId_Matter: (value: number) => any[];
+/** matter-icac-id = ASN.1 OID 1.3.6.1.4.1.37244.1.3 */
+export declare const IcacId_Matter: (value: number | bigint) => any[];
+/** matter-rcac-id = ASN.1 OID 1.3.6.1.4.1.37244.1.4 */
+export declare const RcacId_Matter: (value: number | bigint) => any[];
+/** matter-fabric-id = ASN.1 OID 1.3.6.1.4.1.37244.1.5 */
+export declare const FabricId_Matter: (value: FabricId) => any[];
+/** matter-noc-cat = ASN.1 OID 1.3.6.1.4.1.37244.1.6 */
+export declare const NocCat_Matter: (value: number) => any[];
+/** matter-oid-vid = ASN.1 OID 1.3.6.1.4.1.37244.2.1 */
+export declare const VendorId_Matter: (value: VendorId) => any[];
+/** matter-oid-pid = ASN.1 OID 1.3.6.1.4.1.37244.2.2 */
+export declare const ProductId_Matter: (value: number) => any[];
+declare const ExtensionKeyUsageBitmap: {
+    digitalSignature: BitFlag;
+    nonRepudiation: BitFlag;
+    keyEncipherment: BitFlag;
+    dataEncipherment: BitFlag;
+    keyAgreement: BitFlag;
+    keyCertSign: BitFlag;
+    cRLSign: BitFlag;
+    encipherOnly: BitFlag;
+    decipherOnly: BitFlag;
+};
+export declare const TlvRootCertificate: import("#types").ObjectSchemaWithMaxSize<{
+    serialNumber: import("#types").FieldType<Uint8Array>;
+    signatureAlgorithm: import("#types").FieldType<number>;
+    issuer: import("#types").FieldType<import("#types").TypeFromFields<{
+        commonName: import("#types").OptionalFieldType<string>;
+        sureName: import("#types").OptionalFieldType<string>;
+        serialNum: import("#types").OptionalFieldType<string>;
+        countryName: import("#types").OptionalFieldType<string>;
+        localityName: import("#types").OptionalFieldType<string>;
+        stateOrProvinceName: import("#types").OptionalFieldType<string>;
+        orgName: import("#types").OptionalFieldType<string>;
+        orgUnitName: import("#types").OptionalFieldType<string>;
+        title: import("#types").OptionalFieldType<string>;
+        name: import("#types").OptionalFieldType<string>;
+        givenName: import("#types").OptionalFieldType<string>;
+        initials: import("#types").OptionalFieldType<string>;
+        genQualifier: import("#types").OptionalFieldType<string>;
+        dnQualifier: import("#types").OptionalFieldType<string>;
+        pseudonym: import("#types").OptionalFieldType<string>;
+        domainComponent: import("#types").OptionalFieldType<string>;
+    } & {
+        nodeId: import("#types").OptionalFieldType<NodeId>;
+        firmwareSigningId: import("#types").OptionalFieldType<number>;
+        icacId: import("#types").OptionalFieldType<number | bigint>;
+        rcacId: import("#types").OptionalFieldType<number | bigint>;
+        fabricId: import("#types").OptionalFieldType<FabricId>;
+        caseAuthenticatedTags: import("#types").OptionalRepeatedFieldType<CaseAuthenticatedTag[]>;
+    } & {
+        commonNamePs: import("#types").OptionalFieldType<string>;
+        sureNamePs: import("#types").OptionalFieldType<string>;
+        serialNumPs: import("#types").OptionalFieldType<string>;
+        countryNamePs: import("#types").OptionalFieldType<string>;
+        localityNamePs: import("#types").OptionalFieldType<string>;
+        stateOrProvinceNamePs: import("#types").OptionalFieldType<string>;
+        orgNamePs: import("#types").OptionalFieldType<string>;
+        orgUnitNamePs: import("#types").OptionalFieldType<string>;
+        titlePs: import("#types").OptionalFieldType<string>;
+        namePs: import("#types").OptionalFieldType<string>;
+        givenNamePs: import("#types").OptionalFieldType<string>;
+        initialsPs: import("#types").OptionalFieldType<string>;
+        genQualifierPs: import("#types").OptionalFieldType<string>;
+        dnQualifierPs: import("#types").OptionalFieldType<string>;
+        pseudonymPs: import("#types").OptionalFieldType<string>;
+    }>>;
+    notBefore: import("#types").FieldType<number>;
+    notAfter: import("#types").FieldType<number>;
+    subject: import("#types").FieldType<import("#types").TypeFromFields<{
+        commonName: import("#types").OptionalFieldType<string>;
+        sureName: import("#types").OptionalFieldType<string>;
+        serialNum: import("#types").OptionalFieldType<string>;
+        countryName: import("#types").OptionalFieldType<string>;
+        localityName: import("#types").OptionalFieldType<string>;
+        stateOrProvinceName: import("#types").OptionalFieldType<string>;
+        orgName: import("#types").OptionalFieldType<string>;
+        orgUnitName: import("#types").OptionalFieldType<string>;
+        title: import("#types").OptionalFieldType<string>;
+        name: import("#types").OptionalFieldType<string>;
+        givenName: import("#types").OptionalFieldType<string>;
+        initials: import("#types").OptionalFieldType<string>;
+        genQualifier: import("#types").OptionalFieldType<string>;
+        dnQualifier: import("#types").OptionalFieldType<string>;
+        pseudonym: import("#types").OptionalFieldType<string>;
+        domainComponent: import("#types").OptionalFieldType<string>;
+    } & {
+        rcacId: import("#types").FieldType<number | bigint>;
+        fabricId: import("#types").OptionalFieldType<FabricId>;
+    } & {
+        commonNamePs: import("#types").OptionalFieldType<string>;
+        sureNamePs: import("#types").OptionalFieldType<string>;
+        serialNumPs: import("#types").OptionalFieldType<string>;
+        countryNamePs: import("#types").OptionalFieldType<string>;
+        localityNamePs: import("#types").OptionalFieldType<string>;
+        stateOrProvinceNamePs: import("#types").OptionalFieldType<string>;
+        orgNamePs: import("#types").OptionalFieldType<string>;
+        orgUnitNamePs: import("#types").OptionalFieldType<string>;
+        titlePs: import("#types").OptionalFieldType<string>;
+        namePs: import("#types").OptionalFieldType<string>;
+        givenNamePs: import("#types").OptionalFieldType<string>;
+        initialsPs: import("#types").OptionalFieldType<string>;
+        genQualifierPs: import("#types").OptionalFieldType<string>;
+        dnQualifierPs: import("#types").OptionalFieldType<string>;
+        pseudonymPs: import("#types").OptionalFieldType<string>;
+    }>>;
+    publicKeyAlgorithm: import("#types").FieldType<number>;
+    ellipticCurveIdentifier: import("#types").FieldType<number>;
+    ellipticCurvePublicKey: import("#types").FieldType<Uint8Array>;
+    extensions: import("#types").FieldType<import("#types").TypeFromFields<{
+        basicConstraints: import("#types").FieldType<import("#types").TypeFromFields<{
+            isCa: import("#types").FieldType<boolean>;
+            pathLen: import("#types").OptionalFieldType<number>;
+        }>>;
+        keyUsage: import("#types").FieldType<TypeFromPartialBitSchema<{
+            digitalSignature: BitFlag;
+            nonRepudiation: BitFlag;
+            keyEncipherment: BitFlag;
+            dataEncipherment: BitFlag;
+            keyAgreement: BitFlag;
+            keyCertSign: BitFlag;
+            cRLSign: BitFlag;
+            encipherOnly: BitFlag;
+            decipherOnly: BitFlag;
+        }>>;
+        extendedKeyUsage: import("#types").OptionalFieldType<number[]>;
+        subjectKeyIdentifier: import("#types").FieldType<Uint8Array>;
+        authorityKeyIdentifier: import("#types").FieldType<Uint8Array>;
+        futureExtension: import("#types").OptionalRepeatedFieldType<Uint8Array[]>;
+    }>>;
+    signature: import("#types").FieldType<Uint8Array>;
+}>;
+export declare const TlvOperationalCertificate: import("#types").ObjectSchemaWithMaxSize<{
+    serialNumber: import("#types").FieldType<Uint8Array>;
+    signatureAlgorithm: import("#types").FieldType<number>;
+    issuer: import("#types").FieldType<import("#types").TypeFromFields<{
+        commonName: import("#types").OptionalFieldType<string>;
+        sureName: import("#types").OptionalFieldType<string>;
+        serialNum: import("#types").OptionalFieldType<string>;
+        countryName: import("#types").OptionalFieldType<string>;
+        localityName: import("#types").OptionalFieldType<string>;
+        stateOrProvinceName: import("#types").OptionalFieldType<string>;
+        orgName: import("#types").OptionalFieldType<string>;
+        orgUnitName: import("#types").OptionalFieldType<string>;
+        title: import("#types").OptionalFieldType<string>;
+        name: import("#types").OptionalFieldType<string>;
+        givenName: import("#types").OptionalFieldType<string>;
+        initials: import("#types").OptionalFieldType<string>;
+        genQualifier: import("#types").OptionalFieldType<string>;
+        dnQualifier: import("#types").OptionalFieldType<string>;
+        pseudonym: import("#types").OptionalFieldType<string>;
+        domainComponent: import("#types").OptionalFieldType<string>;
+    } & {
+        nodeId: import("#types").OptionalFieldType<NodeId>;
+        firmwareSigningId: import("#types").OptionalFieldType<number>;
+        icacId: import("#types").OptionalFieldType<number | bigint>;
+        rcacId: import("#types").OptionalFieldType<number | bigint>;
+        fabricId: import("#types").OptionalFieldType<FabricId>;
+        caseAuthenticatedTags: import("#types").OptionalRepeatedFieldType<CaseAuthenticatedTag[]>;
+    } & {
+        commonNamePs: import("#types").OptionalFieldType<string>;
+        sureNamePs: import("#types").OptionalFieldType<string>;
+        serialNumPs: import("#types").OptionalFieldType<string>;
+        countryNamePs: import("#types").OptionalFieldType<string>;
+        localityNamePs: import("#types").OptionalFieldType<string>;
+        stateOrProvinceNamePs: import("#types").OptionalFieldType<string>;
+        orgNamePs: import("#types").OptionalFieldType<string>;
+        orgUnitNamePs: import("#types").OptionalFieldType<string>;
+        titlePs: import("#types").OptionalFieldType<string>;
+        namePs: import("#types").OptionalFieldType<string>;
+        givenNamePs: import("#types").OptionalFieldType<string>;
+        initialsPs: import("#types").OptionalFieldType<string>;
+        genQualifierPs: import("#types").OptionalFieldType<string>;
+        dnQualifierPs: import("#types").OptionalFieldType<string>;
+        pseudonymPs: import("#types").OptionalFieldType<string>;
+    }>>;
+    notBefore: import("#types").FieldType<number>;
+    notAfter: import("#types").FieldType<number>;
+    subject: import("#types").FieldType<import("#types").TypeFromFields<{
+        commonName: import("#types").OptionalFieldType<string>;
+        sureName: import("#types").OptionalFieldType<string>;
+        serialNum: import("#types").OptionalFieldType<string>;
+        countryName: import("#types").OptionalFieldType<string>;
+        localityName: import("#types").OptionalFieldType<string>;
+        stateOrProvinceName: import("#types").OptionalFieldType<string>;
+        orgName: import("#types").OptionalFieldType<string>;
+        orgUnitName: import("#types").OptionalFieldType<string>;
+        title: import("#types").OptionalFieldType<string>;
+        name: import("#types").OptionalFieldType<string>;
+        givenName: import("#types").OptionalFieldType<string>;
+        initials: import("#types").OptionalFieldType<string>;
+        genQualifier: import("#types").OptionalFieldType<string>;
+        dnQualifier: import("#types").OptionalFieldType<string>;
+        pseudonym: import("#types").OptionalFieldType<string>;
+        domainComponent: import("#types").OptionalFieldType<string>;
+    } & {
+        nodeId: import("#types").FieldType<NodeId>;
+        fabricId: import("#types").FieldType<FabricId>;
+        caseAuthenticatedTags: import("#types").OptionalRepeatedFieldType<CaseAuthenticatedTag[]>;
+    } & {
+        commonNamePs: import("#types").OptionalFieldType<string>;
+        sureNamePs: import("#types").OptionalFieldType<string>;
+        serialNumPs: import("#types").OptionalFieldType<string>;
+        countryNamePs: import("#types").OptionalFieldType<string>;
+        localityNamePs: import("#types").OptionalFieldType<string>;
+        stateOrProvinceNamePs: import("#types").OptionalFieldType<string>;
+        orgNamePs: import("#types").OptionalFieldType<string>;
+        orgUnitNamePs: import("#types").OptionalFieldType<string>;
+        titlePs: import("#types").OptionalFieldType<string>;
+        namePs: import("#types").OptionalFieldType<string>;
+        givenNamePs: import("#types").OptionalFieldType<string>;
+        initialsPs: import("#types").OptionalFieldType<string>;
+        genQualifierPs: import("#types").OptionalFieldType<string>;
+        dnQualifierPs: import("#types").OptionalFieldType<string>;
+        pseudonymPs: import("#types").OptionalFieldType<string>;
+    }>>;
+    publicKeyAlgorithm: import("#types").FieldType<number>;
+    ellipticCurveIdentifier: import("#types").FieldType<number>;
+    ellipticCurvePublicKey: import("#types").FieldType<Uint8Array>;
+    extensions: import("#types").FieldType<import("#types").TypeFromFields<{
+        basicConstraints: import("#types").FieldType<import("#types").TypeFromFields<{
+            isCa: import("#types").FieldType<boolean>;
+            pathLen: import("#types").OptionalFieldType<number>;
+        }>>;
+        keyUsage: import("#types").FieldType<TypeFromPartialBitSchema<{
+            digitalSignature: BitFlag;
+            nonRepudiation: BitFlag;
+            keyEncipherment: BitFlag;
+            dataEncipherment: BitFlag;
+            keyAgreement: BitFlag;
+            keyCertSign: BitFlag;
+            cRLSign: BitFlag;
+            encipherOnly: BitFlag;
+            decipherOnly: BitFlag;
+        }>>;
+        extendedKeyUsage: import("#types").OptionalFieldType<number[]>;
+        subjectKeyIdentifier: import("#types").FieldType<Uint8Array>;
+        authorityKeyIdentifier: import("#types").FieldType<Uint8Array>;
+        futureExtension: import("#types").OptionalRepeatedFieldType<Uint8Array[]>;
+    }>>;
+    signature: import("#types").FieldType<Uint8Array>;
+}>;
+export declare const TlvIntermediateCertificate: import("#types").ObjectSchemaWithMaxSize<{
+    serialNumber: import("#types").FieldType<Uint8Array>;
+    signatureAlgorithm: import("#types").FieldType<number>;
+    issuer: import("#types").FieldType<import("#types").TypeFromFields<{
+        commonName: import("#types").OptionalFieldType<string>;
+        sureName: import("#types").OptionalFieldType<string>;
+        serialNum: import("#types").OptionalFieldType<string>;
+        countryName: import("#types").OptionalFieldType<string>;
+        localityName: import("#types").OptionalFieldType<string>;
+        stateOrProvinceName: import("#types").OptionalFieldType<string>;
+        orgName: import("#types").OptionalFieldType<string>;
+        orgUnitName: import("#types").OptionalFieldType<string>;
+        title: import("#types").OptionalFieldType<string>;
+        name: import("#types").OptionalFieldType<string>;
+        givenName: import("#types").OptionalFieldType<string>;
+        initials: import("#types").OptionalFieldType<string>;
+        genQualifier: import("#types").OptionalFieldType<string>;
+        dnQualifier: import("#types").OptionalFieldType<string>;
+        pseudonym: import("#types").OptionalFieldType<string>;
+        domainComponent: import("#types").OptionalFieldType<string>;
+    } & {
+        nodeId: import("#types").OptionalFieldType<NodeId>;
+        firmwareSigningId: import("#types").OptionalFieldType<number>;
+        icacId: import("#types").OptionalFieldType<number | bigint>;
+        rcacId: import("#types").OptionalFieldType<number | bigint>;
+        fabricId: import("#types").OptionalFieldType<FabricId>;
+        caseAuthenticatedTags: import("#types").OptionalRepeatedFieldType<CaseAuthenticatedTag[]>;
+    } & {
+        commonNamePs: import("#types").OptionalFieldType<string>;
+        sureNamePs: import("#types").OptionalFieldType<string>;
+        serialNumPs: import("#types").OptionalFieldType<string>;
+        countryNamePs: import("#types").OptionalFieldType<string>;
+        localityNamePs: import("#types").OptionalFieldType<string>;
+        stateOrProvinceNamePs: import("#types").OptionalFieldType<string>;
+        orgNamePs: import("#types").OptionalFieldType<string>;
+        orgUnitNamePs: import("#types").OptionalFieldType<string>;
+        titlePs: import("#types").OptionalFieldType<string>;
+        namePs: import("#types").OptionalFieldType<string>;
+        givenNamePs: import("#types").OptionalFieldType<string>;
+        initialsPs: import("#types").OptionalFieldType<string>;
+        genQualifierPs: import("#types").OptionalFieldType<string>;
+        dnQualifierPs: import("#types").OptionalFieldType<string>;
+        pseudonymPs: import("#types").OptionalFieldType<string>;
+    }>>;
+    notBefore: import("#types").FieldType<number>;
+    notAfter: import("#types").FieldType<number>;
+    subject: import("#types").FieldType<import("#types").TypeFromFields<{
+        commonName: import("#types").OptionalFieldType<string>;
+        sureName: import("#types").OptionalFieldType<string>;
+        serialNum: import("#types").OptionalFieldType<string>;
+        countryName: import("#types").OptionalFieldType<string>;
+        localityName: import("#types").OptionalFieldType<string>;
+        stateOrProvinceName: import("#types").OptionalFieldType<string>;
+        orgName: import("#types").OptionalFieldType<string>;
+        orgUnitName: import("#types").OptionalFieldType<string>;
+        title: import("#types").OptionalFieldType<string>;
+        name: import("#types").OptionalFieldType<string>;
+        givenName: import("#types").OptionalFieldType<string>;
+        initials: import("#types").OptionalFieldType<string>;
+        genQualifier: import("#types").OptionalFieldType<string>;
+        dnQualifier: import("#types").OptionalFieldType<string>;
+        pseudonym: import("#types").OptionalFieldType<string>;
+        domainComponent: import("#types").OptionalFieldType<string>;
+    } & {
+        icacId: import("#types").FieldType<number | bigint>;
+        fabricId: import("#types").OptionalFieldType<FabricId>;
+    } & {
+        commonNamePs: import("#types").OptionalFieldType<string>;
+        sureNamePs: import("#types").OptionalFieldType<string>;
+        serialNumPs: import("#types").OptionalFieldType<string>;
+        countryNamePs: import("#types").OptionalFieldType<string>;
+        localityNamePs: import("#types").OptionalFieldType<string>;
+        stateOrProvinceNamePs: import("#types").OptionalFieldType<string>;
+        orgNamePs: import("#types").OptionalFieldType<string>;
+        orgUnitNamePs: import("#types").OptionalFieldType<string>;
+        titlePs: import("#types").OptionalFieldType<string>;
+        namePs: import("#types").OptionalFieldType<string>;
+        givenNamePs: import("#types").OptionalFieldType<string>;
+        initialsPs: import("#types").OptionalFieldType<string>;
+        genQualifierPs: import("#types").OptionalFieldType<string>;
+        dnQualifierPs: import("#types").OptionalFieldType<string>;
+        pseudonymPs: import("#types").OptionalFieldType<string>;
+    }>>;
+    publicKeyAlgorithm: import("#types").FieldType<number>;
+    ellipticCurveIdentifier: import("#types").FieldType<number>;
+    ellipticCurvePublicKey: import("#types").FieldType<Uint8Array>;
+    extensions: import("#types").FieldType<import("#types").TypeFromFields<{
+        basicConstraints: import("#types").FieldType<import("#types").TypeFromFields<{
+            isCa: import("#types").FieldType<boolean>;
+            pathLen: import("#types").OptionalFieldType<number>;
+        }>>;
+        keyUsage: import("#types").FieldType<TypeFromPartialBitSchema<{
+            digitalSignature: BitFlag;
+            nonRepudiation: BitFlag;
+            keyEncipherment: BitFlag;
+            dataEncipherment: BitFlag;
+            keyAgreement: BitFlag;
+            keyCertSign: BitFlag;
+            cRLSign: BitFlag;
+            encipherOnly: BitFlag;
+            decipherOnly: BitFlag;
+        }>>;
+        extendedKeyUsage: import("#types").OptionalFieldType<number[]>;
+        subjectKeyIdentifier: import("#types").FieldType<Uint8Array>;
+        authorityKeyIdentifier: import("#types").FieldType<Uint8Array>;
+        futureExtension: import("#types").OptionalRepeatedFieldType<Uint8Array[]>;
+    }>>;
+    signature: import("#types").FieldType<Uint8Array>;
+}>;
+declare const TlvBaseCertificate: import("#types").ObjectSchemaWithMaxSize<{
+    serialNumber: import("#types").FieldType<Uint8Array>;
+    signatureAlgorithm: import("#types").FieldType<number>;
+    issuer: import("#types").FieldType<import("#types").TypeFromFields<{
+        commonName: import("#types").OptionalFieldType<string>;
+        sureName: import("#types").OptionalFieldType<string>;
+        serialNum: import("#types").OptionalFieldType<string>;
+        countryName: import("#types").OptionalFieldType<string>;
+        localityName: import("#types").OptionalFieldType<string>;
+        stateOrProvinceName: import("#types").OptionalFieldType<string>;
+        orgName: import("#types").OptionalFieldType<string>;
+        orgUnitName: import("#types").OptionalFieldType<string>;
+        title: import("#types").OptionalFieldType<string>;
+        name: import("#types").OptionalFieldType<string>;
+        givenName: import("#types").OptionalFieldType<string>;
+        initials: import("#types").OptionalFieldType<string>;
+        genQualifier: import("#types").OptionalFieldType<string>;
+        dnQualifier: import("#types").OptionalFieldType<string>;
+        pseudonym: import("#types").OptionalFieldType<string>;
+        domainComponent: import("#types").OptionalFieldType<string>;
+    } & {
+        commonNamePs: import("#types").OptionalFieldType<string>;
+        sureNamePs: import("#types").OptionalFieldType<string>;
+        serialNumPs: import("#types").OptionalFieldType<string>;
+        countryNamePs: import("#types").OptionalFieldType<string>;
+        localityNamePs: import("#types").OptionalFieldType<string>;
+        stateOrProvinceNamePs: import("#types").OptionalFieldType<string>;
+        orgNamePs: import("#types").OptionalFieldType<string>;
+        orgUnitNamePs: import("#types").OptionalFieldType<string>;
+        titlePs: import("#types").OptionalFieldType<string>;
+        namePs: import("#types").OptionalFieldType<string>;
+        givenNamePs: import("#types").OptionalFieldType<string>;
+        initialsPs: import("#types").OptionalFieldType<string>;
+        genQualifierPs: import("#types").OptionalFieldType<string>;
+        dnQualifierPs: import("#types").OptionalFieldType<string>;
+        pseudonymPs: import("#types").OptionalFieldType<string>;
+    }>>;
+    notBefore: import("#types").FieldType<number>;
+    notAfter: import("#types").FieldType<number>;
+    subject: import("#types").FieldType<import("#types").TypeFromFields<{
+        commonName: import("#types").OptionalFieldType<string>;
+        sureName: import("#types").OptionalFieldType<string>;
+        serialNum: import("#types").OptionalFieldType<string>;
+        countryName: import("#types").OptionalFieldType<string>;
+        localityName: import("#types").OptionalFieldType<string>;
+        stateOrProvinceName: import("#types").OptionalFieldType<string>;
+        orgName: import("#types").OptionalFieldType<string>;
+        orgUnitName: import("#types").OptionalFieldType<string>;
+        title: import("#types").OptionalFieldType<string>;
+        name: import("#types").OptionalFieldType<string>;
+        givenName: import("#types").OptionalFieldType<string>;
+        initials: import("#types").OptionalFieldType<string>;
+        genQualifier: import("#types").OptionalFieldType<string>;
+        dnQualifier: import("#types").OptionalFieldType<string>;
+        pseudonym: import("#types").OptionalFieldType<string>;
+        domainComponent: import("#types").OptionalFieldType<string>;
+    } & {
+        commonNamePs: import("#types").OptionalFieldType<string>;
+        sureNamePs: import("#types").OptionalFieldType<string>;
+        serialNumPs: import("#types").OptionalFieldType<string>;
+        countryNamePs: import("#types").OptionalFieldType<string>;
+        localityNamePs: import("#types").OptionalFieldType<string>;
+        stateOrProvinceNamePs: import("#types").OptionalFieldType<string>;
+        orgNamePs: import("#types").OptionalFieldType<string>;
+        orgUnitNamePs: import("#types").OptionalFieldType<string>;
+        titlePs: import("#types").OptionalFieldType<string>;
+        namePs: import("#types").OptionalFieldType<string>;
+        givenNamePs: import("#types").OptionalFieldType<string>;
+        initialsPs: import("#types").OptionalFieldType<string>;
+        genQualifierPs: import("#types").OptionalFieldType<string>;
+        dnQualifierPs: import("#types").OptionalFieldType<string>;
+        pseudonymPs: import("#types").OptionalFieldType<string>;
+    }>>;
+    publicKeyAlgorithm: import("#types").FieldType<number>;
+    ellipticCurveIdentifier: import("#types").FieldType<number>;
+    ellipticCurvePublicKey: import("#types").FieldType<Uint8Array>;
+    extensions: import("#types").FieldType<import("#types").TypeFromFields<{
+        basicConstraints: import("#types").FieldType<import("#types").TypeFromFields<{
+            isCa: import("#types").FieldType<boolean>;
+            pathLen: import("#types").OptionalFieldType<number>;
+        }>>;
+        keyUsage: import("#types").FieldType<TypeFromPartialBitSchema<{
+            digitalSignature: BitFlag;
+            nonRepudiation: BitFlag;
+            keyEncipherment: BitFlag;
+            dataEncipherment: BitFlag;
+            keyAgreement: BitFlag;
+            keyCertSign: BitFlag;
+            cRLSign: BitFlag;
+            encipherOnly: BitFlag;
+            decipherOnly: BitFlag;
+        }>>;
+        extendedKeyUsage: import("#types").OptionalFieldType<number[]>;
+        subjectKeyIdentifier: import("#types").FieldType<Uint8Array>;
+        authorityKeyIdentifier: import("#types").FieldType<Uint8Array>;
+        futureExtension: import("#types").OptionalRepeatedFieldType<Uint8Array[]>;
+    }>>;
+    signature: import("#types").FieldType<Uint8Array>;
+}>;
+interface AttestationCertificateBase {
+    serialNumber: Uint8Array;
+    signatureAlgorithm: number;
+    issuer: {};
+    notBefore: number;
+    notAfter: number;
+    subject: {};
+    publicKeyAlgorithm: number;
+    ellipticCurveIdentifier: number;
+    ellipticCurvePublicKey: Uint8Array;
+    extensions: {
+        basicConstraints: {
+            isCa: boolean;
+            pathLen?: number;
+        };
+        keyUsage: TypeFromPartialBitSchema<typeof ExtensionKeyUsageBitmap>;
+        extendedKeyUsage?: number[];
+        subjectKeyIdentifier: Uint8Array;
+        authorityKeyIdentifier: Uint8Array;
+        futureExtension?: Uint8Array[];
+    };
+    signature: Uint8Array;
+}
+export interface DeviceAttestationCertificate extends AttestationCertificateBase {
+    issuer: {
+        commonName: string;
+        productId?: number;
+        vendorId: VendorId;
+    };
+    subject: {
+        commonName: string;
+        productId: number;
+        vendorId: VendorId;
+    };
+}
+export interface ProductAttestationIntermediateCertificate extends AttestationCertificateBase {
+    issuer: {
+        commonName: string;
+        vendorId?: VendorId;
+    };
+    subject: {
+        commonName: string;
+        productId?: number;
+        vendorId: VendorId;
+    };
+}
+export interface ProductAttestationAuthorityCertificate extends AttestationCertificateBase {
+    issuer: {
+        commonName: string;
+        vendorId?: VendorId;
+    };
+    subject: {
+        commonName: string;
+        vendorId?: VendorId;
+    };
+}
+export declare const TlvCertificationDeclaration: import("#types").ObjectSchema<{
+    formatVersion: import("#types").FieldType<number>;
+    vendorId: import("#types").FieldType<VendorId>;
+    produceIdArray: import("#types").FieldType<number[]>;
+    deviceTypeId: import("#types").FieldType<number>;
+    certificateId: import("#types").FieldType<string>;
+    securityLevel: import("#types").FieldType<number>;
+    securityInformation: import("#types").FieldType<number>;
+    versionNumber: import("#types").FieldType<number>;
+    certificationType: import("#types").FieldType<number>;
+    dacOriginVendorId: import("#types").OptionalFieldType<VendorId>;
+    dacOriginProductId: import("#types").OptionalFieldType<number>;
+    authorizedPaaList: import("#types").OptionalFieldType<Uint8Array[]>;
+}>;
+export type BaseCertificate = TypeFromSchema<typeof TlvBaseCertificate>;
+export type RootCertificate = TypeFromSchema<typeof TlvRootCertificate>;
+export type IntermediateCertificate = TypeFromSchema<typeof TlvIntermediateCertificate>;
+export type OperationalCertificate = TypeFromSchema<typeof TlvOperationalCertificate>;
+export type Unsigned<Type> = {
+    [Property in keyof Type as Exclude<Property, "signature">]: Type[Property];
+};
+export declare namespace CertificateManager {
+    function rootCertToAsn1(cert: Unsigned<RootCertificate>): Uint8Array;
+    function intermediateCaCertToAsn1(cert: Unsigned<IntermediateCertificate>): Uint8Array;
+    function nodeOperationalCertToAsn1(cert: Unsigned<OperationalCertificate>): Uint8Array;
+    function deviceAttestationCertToAsn1(cert: Unsigned<DeviceAttestationCertificate>, key: Key): Uint8Array;
+    function productAttestationIntermediateCertToAsn1(cert: Unsigned<ProductAttestationIntermediateCertificate>, key: Key): Uint8Array;
+    function productAttestationAuthorityCertToAsn1(cert: Unsigned<ProductAttestationAuthorityCertificate>, key: Key): Uint8Array;
+    function certificationDeclarationToAsn1(eContent: Uint8Array, subjectKeyIdentifier: Uint8Array, privateKey: JsonWebKey): Uint8Array;
+    /**
+     * Validate general requirements a Matter certificate fields must fulfill.
+     * Rules for this are listed in @see {@link MatterSpecification.v12.Core} §6.5.x
+     */
+    function validateGeneralCertificateFields(cert: RootCertificate | OperationalCertificate | IntermediateCertificate): void;
+    /**
+     * Verify requirements a Matter Root certificate must fulfill.
+     * Rules for this are listed in @see {@link MatterSpecification.v12.Core} §6.5.x
+     */
+    function verifyRootCertificate(rootCert: RootCertificate): void;
+    /**
+     * Verify requirements a Matter Node Operational certificate must fulfill.
+     * Rules for this are listed in @see {@link MatterSpecification.v12.Core} §6.5.x
+     */
+    function verifyNodeOperationalCertificate(rootOrIcaCert: RootCertificate | IntermediateCertificate, nocCert: OperationalCertificate): void;
+    /**
+     * Verify requirements a Matter Intermediate CA certificate must fulfill.
+     * Rules for this are listed in @see {@link MatterSpecification.v12.Core} §6.5.x
+     */
+    function verifyIntermediateCaCertificate(rootCert: RootCertificate, icaCert: IntermediateCertificate): void;
+    function createCertificateSigningRequest(key: Key): Uint8Array;
+    function getPublicKeyFromCsr(csr: Uint8Array): Uint8Array;
+}
+export {};
+//# sourceMappingURL=CertificateManager.d.ts.map

package/dist/cjs/certificate/CertificateManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CertificateManager.d.ts","sourceRoot":"","sources":["../../../src/certificate/CertificateManager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAYH,GAAG,EAEH,WAAW,EASd,MAAM,UAAU,CAAC;AAClB,OAAO,EACH,OAAO,EAEP,oBAAoB,EACpB,QAAQ,EACR,MAAM,EAoBN,wBAAwB,EACxB,cAAc,EACd,QAAQ,EACX,MAAM,QAAQ,CAAC;AAIhB,qBAAa,gBAAiB,SAAQ,WAAW;CAAG;AAcpD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,QAE1C;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,SAAI,UAItD;AAoDD,uDAAuD;AACvD,eAAO,MAAM,aAAa,0BAAuC,CAAC;AAElE,mEAAmE;AACnE,eAAO,MAAM,wBAAwB,0BAAuC,CAAC;AAE7E,uDAAuD;AACvD,eAAO,MAAM,aAAa,mCAAgD,CAAC;AAE3E,uDAAuD;AACvD,eAAO,MAAM,aAAa,mCAAgD,CAAC;AAE3E,yDAAyD;AACzD,eAAO,MAAM,eAAe,4BAAyC,CAAC;AAEtE,uDAAuD;AACvD,eAAO,MAAM,aAAa,0BAAuD,CAAC;AAElF,uDAAuD;AACvD,eAAO,MAAM,eAAe,4BAA0D,CAAC;AAEvF,uDAAuD;AACvD,eAAO,MAAM,gBAAgB,0BAAwD,CAAC;AA2DtF,QAAA,MAAM,uBAAuB;;;;;;;;;;CAU5B,CAAC;AA2DF,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAM7B,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAOpC,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAMrC,CAAC;AAEH,QAAA,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAA0B,CAAC;AAEnD,UAAU,0BAA0B;IAChC,YAAY,EAAE,UAAU,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,EAAE,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,EAAE,CAAC;IACZ,kBAAkB,EAAE,MAAM,CAAC;IAC3B,uBAAuB,EAAE,MAAM,CAAC;IAChC,sBAAsB,EAAE,UAAU,CAAC;IACnC,UAAU,EAAE;QACR,gBAAgB,EAAE;YACd,IAAI,EAAE,OAAO,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,CAAC;SACpB,CAAC;QACF,QAAQ,EAAE,wBAAwB,CAAC,OAAO,uBAAuB,CAAC,CAAC;QACnE,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC5B,oBAAoB,EAAE,UAAU,CAAC;QACjC,sBAAsB,EAAE,UAAU,CAAC;QACnC,eAAe,CAAC,EAAE,UAAU,EAAE,CAAC;KAClC,CAAC;IACF,SAAS,EAAE,UAAU,CAAC;CACzB;AAED,MAAM,WAAW,4BAA6B,SAAQ,0BAA0B;IAC5E,MAAM,EAAE;QACJ,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,QAAQ,CAAC;KACtB,CAAC;IACF,OAAO,EAAE;QACL,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,QAAQ,CAAC;KACtB,CAAC;CACL;AAED,MAAM,WAAW,yCAA0C,SAAQ,0BAA0B;IACzF,MAAM,EAAE;QACJ,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,QAAQ,CAAC;KACvB,CAAC;IACF,OAAO,EAAE;QACL,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,QAAQ,CAAC;KACtB,CAAC;CACL;AAED,MAAM,WAAW,sCAAuC,SAAQ,0BAA0B;IACtF,MAAM,EAAE;QACJ,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,QAAQ,CAAC;KACvB,CAAC;IACF,OAAO,EAAE;QACL,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,QAAQ,CAAC;KACvB,CAAC;CACL;AAED,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;EAgBtC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,cAAc,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACxE,MAAM,MAAM,eAAe,GAAG,cAAc,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACxE,MAAM,MAAM,uBAAuB,GAAG,cAAc,CAAC,OAAO,0BAA0B,CAAC,CAAC;AACxF,MAAM,MAAM,sBAAsB,GAAG,cAAc,CAAC,OAAO,yBAAyB,CAAC,CAAC;AACtF,MAAM,MAAM,QAAQ,CAAC,IAAI,IAAI;KAAG,QAAQ,IAAI,MAAM,IAAI,IAAI,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;CAAE,CAAC;AAwL5G,yBAAiB,kBAAkB,CAAC;IA6ChC,SAAgB,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,eAAe,CAAC,cAU7D;IAED,SAAgB,wBAAwB,CAAC,IAAI,EAAE,QAAQ,CAAC,uBAAuB,CAAC,cAU/E;IAED,SAAgB,yBAAyB,CAAC,IAAI,EAAE,QAAQ,CAAC,sBAAsB,CAAC,cAe/E;IAED,SAAgB,2BAA2B,CAAC,IAAI,EAAE,QAAQ,CAAC,4BAA4B,CAAC,EAAE,GAAG,EAAE,GAAG,cASjG;IAED,SAAgB,wCAAwC,CACpD,IAAI,EAAE,QAAQ,CAAC,yCAAyC,CAAC,EACzD,GAAG,EAAE,GAAG,cAUX;IAED,SAAgB,qCAAqC,CACjD,IAAI,EAAE,QAAQ,CAAC,sCAAsC,CAAC,EACtD,GAAG,EAAE,GAAG,cAUX;IAED,SAAgB,8BAA8B,CAC1C,QAAQ,EAAE,UAAU,EACpB,oBAAoB,EAAE,UAAU,EAChC,UAAU,EAAE,UAAU,cAoBzB;IAED;;;OAGG;IACH,SAAgB,gCAAgC,CAC5C,IAAI,EAAE,eAAe,GAAG,sBAAsB,GAAG,uBAAuB,QAsC3E;IAED;;;OAGG;IACH,SAAgB,qBAAqB,CAAC,QAAQ,EAAE,eAAe,QAgF9D;IAED;;;OAGG;IACH,SAAgB,gCAAgC,CAC5C,aAAa,EAAE,eAAe,GAAG,uBAAuB,EACxD,OAAO,EAAE,sBAAsB,QA0GlC;IAED;;;OAGG;IACH,SAAgB,+BAA+B,CAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,EAAE,uBAAuB,QA4G1G;IAED,SAAgB,+BAA+B,CAAC,GAAG,EAAE,GAAG,cAavD;IAED,SAAgB,mBAAmB,CAAC,GAAG,EAAE,UAAU,cA+BlD;CACJ"}