@naylence/advanced-security 0.3.2 → 0.3.4

package/dist/browser/index.js

@@ -7395,12 +7395,6 @@ function hexToArrayBuffer(hex) {
     }
     return bytes.buffer;
 }
-function encodeBitString(data) {
-    const input = new Uint8Array(data);
-    const bitString = new Uint8Array(input.length + 1);
-    bitString.set(input, 1);
-    return bitString.buffer;
-}
 async function createEd25519Certificate(options) {
     const subtle = await getSubtleCrypto();
     await ensureCrypto();
@@ -7440,7 +7434,7 @@ async function createEd25519Certificate(options) {
     const certificate = new Certificate({
         tbsCertificate,
         signatureAlgorithm,
-        signatureValue: encodeBitString(signature),
+        signatureValue: signature,
     });
     certificate.tbsCertificateRaw = tbsDer;
     return AsnConvert.serialize(certificate);
@@ -8246,10 +8240,40 @@ class DefaultCAService extends CAService {
             });
             console.debug("Using root CA for signing:", csr.requesterId);
         }
-        // TODO: Parse CSR, extract public key, and sign certificate
-        // For now, delegate to the signing service (which will throw until implemented)
+        // Issue the certificate using the configured signing service
         try {
-            return await signingService.issueCertificate(csr);
+            const { certificatePem, expiresAt } = await signingService.issueCertificate(csr);
+            const chainParts = [certificatePem.trim()];
+            const rootCertPem = credentials.rootCaCertPem?.trim();
+            const signingCertPem = credentials.signingCertPem?.trim();
+            const normalizeCert = (pem) => pem?.trim();
+            if (credentials.intermediateChainPem) {
+                const intermediateCerts = this.parseCertificateChain(credentials.intermediateChainPem);
+                for (const certPem of intermediateCerts) {
+                    const normalized = normalizeCert(certPem);
+                    if (!normalized) {
+                        continue;
+                    }
+                    if (normalized === chainParts[0]) {
+                        continue;
+                    }
+                    if (rootCertPem && normalized === rootCertPem) {
+                        continue;
+                    }
+                    chainParts.push(normalized);
+                }
+            }
+            else if (signingCertPem && signingCertPem !== rootCertPem) {
+                if (signingCertPem !== chainParts[0]) {
+                    chainParts.push(signingCertPem);
+                }
+            }
+            const certificateChainPem = chainParts.join("\n");
+            return {
+                certificatePem,
+                certificateChainPem,
+                expiresAt,
+            };
         }
         catch (error) {
             console.error("Certificate issuance failed:", csr.requesterId, error);