@ne1410s/crypto 0.2.43 → 0.2.44

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. package/dist/functions.d.ts +12 -12
  2. package/dist/index.d.ts +2 -2
  3. package/dist/interfaces.d.ts +20 -20
  4. package/dist/ne14_crypto.cjs.min.js +270 -270
  5. package/dist/ne14_crypto.esm.min.js +270 -270
  6. package/dist/ne14_crypto.umd.min.js +325 -325
  7. package/package.json +8 -8
package/dist/ne14_crypto.esm.min.js CHANGED
@@ -54,276 +54,276 @@ function __generator(thisArg, body) {
54
54
  }
55
55
  }
56
56
 
57
- var crypto = require('node:crypto');
58
- var pkijs = require('pkijs');
59
- pkijs.setEngine('OpenSSL', crypto, new pkijs.CryptoEngine({ name: '', crypto: crypto, subtle: crypto.subtle }));
60
- var DEF_ALGO = {
61
- name: 'RSASSA-PKCS1-v1_5',
62
- modulusLength: 2048,
63
- publicExponent: new Uint8Array([0x01, 0x00, 0x01]),
64
- hash: { name: 'SHA-256' },
65
- };
66
- function randomString() {
67
- return __awaiter(this, void 0, void 0, function () {
68
- var bytes;
69
- return __generator(this, function (_a) {
70
- bytes = new Uint8Array(24);
71
- crypto.getRandomValues(bytes);
72
- return [2 /*return*/, ne_text.bufferToBase64Url(bytes.buffer)];
73
- });
74
- });
75
- }
76
- function gen() {
77
- return __awaiter(this, void 0, void 0, function () {
78
- var keys;
79
- var _a;
80
- return __generator(this, function (_b) {
81
- switch (_b.label) {
82
- case 0: return [4 /*yield*/, crypto.subtle.generateKey(DEF_ALGO, true, ['sign'])];
83
- case 1:
84
- keys = _b.sent();
85
- _a = {};
86
- return [4 /*yield*/, crypto.subtle.exportKey('jwk', keys.publicKey)];
87
- case 2:
88
- _a.publicJwk = _b.sent();
89
- return [4 /*yield*/, crypto.subtle.exportKey('jwk', keys.privateKey)];
90
- case 3: return [2 /*return*/, (_a.privateJwk = _b.sent(),
91
- _a)];
92
- }
93
- });
94
- });
95
- }
96
- function sign(text, privateJwk) {
97
- return __awaiter(this, void 0, void 0, function () {
98
- var cKey, buffer, signed;
99
- return __generator(this, function (_a) {
100
- switch (_a.label) {
101
- case 0: return [4 /*yield*/, crypto.subtle.importKey('jwk', privateJwk, DEF_ALGO, true, ['sign'])];
102
- case 1:
103
- cKey = _a.sent(), buffer = ne_text.textToBuffer(text);
104
- return [4 /*yield*/, crypto.subtle.sign(DEF_ALGO.name, cKey, buffer)];
105
- case 2:
106
- signed = _a.sent();
107
- return [2 /*return*/, ne_text.bufferToBase64Url(signed)];
108
- }
109
- });
110
- });
111
- }
112
- function digest(text) {
113
- return __awaiter(this, void 0, void 0, function () {
114
- var buffer, digest;
115
- return __generator(this, function (_a) {
116
- switch (_a.label) {
117
- case 0:
118
- buffer = ne_text.textToBuffer(text);
119
- return [4 /*yield*/, crypto.subtle.digest('SHA-256', buffer)];
120
- case 1:
121
- digest = _a.sent();
122
- return [2 /*return*/, ne_text.bufferToBase64Url(digest)];
123
- }
124
- });
125
- });
126
- }
127
- //https://github.com/PeculiarVentures/PKI.js/blob/master/examples/PKCS10ComplexExample/es6.js
128
- function csr(params) {
129
- return __awaiter(this, void 0, void 0, function () {
130
- var pkcs10, keys, publicKey, toDigest, pubkeyhash_sha1, privateKey, pkcs10_schema, pkcs10_encoded, exportedPkcs8;
131
- var _a;
132
- return __generator(this, function (_b) {
133
- switch (_b.label) {
134
- case 0:
135
- pkcs10 = new pkijs.CertificationRequest();
136
- pkcs10.version = 0;
137
- pkcs10.subject.typesAndValues.push(new pkijs.AttributeTypeAndValue({
138
- type: '2.5.4.3',
139
- value: new asn1js.PrintableString({ value: params.domains[0] }),
140
- }));
141
- if (params.country) {
142
- pkcs10.subject.typesAndValues.push(new pkijs.AttributeTypeAndValue({
143
- type: '2.5.4.6',
144
- value: new asn1js.PrintableString({ value: params.country }),
145
- }));
146
- }
147
- if (params.town) {
148
- pkcs10.subject.typesAndValues.push(new pkijs.AttributeTypeAndValue({
149
- type: '2.5.4.7',
150
- value: new asn1js.PrintableString({ value: params.town }),
151
- }));
152
- }
153
- if (params.county) {
154
- pkcs10.subject.typesAndValues.push(new pkijs.AttributeTypeAndValue({
155
- type: '2.5.4.8',
156
- value: new asn1js.PrintableString({ value: params.county }),
157
- }));
158
- }
159
- if (params.company) {
160
- pkcs10.subject.typesAndValues.push(new pkijs.AttributeTypeAndValue({
161
- type: '2.5.4.10',
162
- value: new asn1js.PrintableString({ value: params.company }),
163
- }));
164
- }
165
- if (params.department) {
166
- pkcs10.subject.typesAndValues.push(new pkijs.AttributeTypeAndValue({
167
- type: '2.5.4.11',
168
- value: new asn1js.PrintableString({ value: params.department }),
169
- }));
170
- }
171
- return [4 /*yield*/, crypto.subtle.generateKey(DEF_ALGO, true, ['sign'])];
172
- case 1:
173
- keys = _b.sent();
174
- publicKey = keys.publicKey;
175
- return [4 /*yield*/, pkcs10.subjectPublicKeyInfo.importKey(publicKey)];
176
- case 2:
177
- _b.sent();
178
- toDigest = pkcs10.subjectPublicKeyInfo.subjectPublicKey.valueBlock.valueHex;
179
- return [4 /*yield*/, crypto.subtle.digest('SHA-1', toDigest)];
180
- case 3:
181
- pubkeyhash_sha1 = _b.sent();
182
- //pubkeyhash_sha256 = await crypto.subtle.digest('SHA-256', toDigest);
183
- pkcs10.attributes = [];
184
- pkcs10.attributes.push(new pkijs.Attribute({
185
- type: '1.2.840.113549.1.9.14',
186
- values: [
187
- new pkijs.Extensions({
188
- extensions: [
189
- new pkijs.Extension({
190
- extnID: '2.5.29.14',
191
- critical: false,
192
- extnValue: new asn1js.OctetString({ valueHex: pubkeyhash_sha1 }).toBER(false),
193
- }),
194
- new pkijs.Extension({
195
- extnID: '2.5.29.17',
196
- critical: false,
197
- extnValue: new pkijs.GeneralNames({
198
- names: params.domains.map(function (dom) {
199
- return new pkijs.GeneralName({
200
- type: 2,
201
- value: dom,
202
- });
203
- }),
204
- })
205
- .toSchema()
206
- .toBER(false),
207
- }),
208
- ],
209
- }).toSchema(),
210
- ],
211
- }));
212
- privateKey = keys.privateKey;
213
- return [4 /*yield*/, pkcs10.sign(privateKey, 'SHA-256')];
214
- case 4:
215
- _b.sent(), pkcs10_schema = pkcs10.toSchema(), pkcs10_encoded = pkcs10_schema.toBER(false);
216
- return [4 /*yield*/, crypto.subtle.exportKey('pkcs8', keys.privateKey)];
217
- case 5:
218
- exportedPkcs8 = _b.sent();
219
- _a = {
220
- pem: bufferToPem(pkcs10_encoded, 'CERTIFICATE REQUEST'),
221
- der: ne_text.bufferToBase64Url(pkcs10_encoded),
222
- pkcs8_pem: bufferToPem(exportedPkcs8, 'PRIVATE KEY'),
223
- pkcs8_b64: ne_text.bufferToBase64(exportedPkcs8)
224
- };
225
- return [4 /*yield*/, crypto.subtle.exportKey('jwk', keys.privateKey)];
226
- case 6:
227
- _a.privateJwk = _b.sent();
228
- return [4 /*yield*/, crypto.subtle.exportKey('jwk', keys.publicKey)];
229
- case 7: return [2 /*return*/, (_a.publicJwk = _b.sent(),
230
- _a)];
231
- }
232
- });
233
- });
234
- }
235
- //https://github.com/PeculiarVentures/PKI.js/blob/master/examples/PKCS12SimpleExample/es6.js
236
- function pfx(friendlyName, cert_b64, key_b64, password, hash) {
237
- if (hash === void 0) { hash = 'SHA-256'; }
238
- return __awaiter(this, void 0, void 0, function () {
239
- var asn1_cer, asn1_key, objc_cer, objc_key, pkcs12;
240
- return __generator(this, function (_a) {
241
- switch (_a.label) {
242
- case 0:
243
- asn1_cer = asn1js.fromBER(ne_text.textToBuffer(ne_text.base64ToText(cert_b64))), asn1_key = asn1js.fromBER(ne_text.textToBuffer(ne_text.base64ToText(key_b64)));
244
- objc_cer = new pkijs.Certificate({ schema: asn1_cer.result }), objc_key = new pkijs.PrivateKeyInfo({ schema: asn1_key.result });
245
- pkcs12 = new pkijs.PFX({
246
- parsedValue: {
247
- integrityMode: 0,
248
- authenticatedSafe: new pkijs.AuthenticatedSafe({
249
- parsedValue: {
250
- safeContents: [
251
- {
252
- privacyMode: 0,
253
- value: new pkijs.SafeContents({
254
- safeBags: [
255
- new pkijs.SafeBag({
256
- bagId: '1.2.840.113549.1.12.10.1.1',
257
- bagValue: objc_key,
258
- }),
259
- new pkijs.SafeBag({
260
- bagId: '1.2.840.113549.1.12.10.1.3',
261
- bagValue: new pkijs.CertBag({
262
- parsedValue: objc_cer,
263
- }),
264
- bagAttributes: [
265
- new pkijs.Attribute({
266
- type: '1.2.840.113549.1.9.20',
267
- values: [new asn1js.BmpString({ value: friendlyName })],
268
- }),
269
- ],
270
- }),
271
- ],
272
- }),
273
- },
274
- ],
275
- },
276
- }),
277
- },
278
- });
279
- return [4 /*yield*/, pkcs12.parsedValue.authenticatedSafe.makeInternalValues({
280
- safeContents: [
281
- {
282
- /* Empty as 'No Privacy' for SafeContents */
283
- },
284
- ],
285
- })];
286
- case 1:
287
- _a.sent();
288
- return [4 /*yield*/, pkcs12.makeInternalValues({
289
- password: ne_text.textToBuffer(password),
290
- iterations: 1000,
291
- pbkdf2HashAlgorithm: hash,
292
- hmacHashAlgorithm: hash,
293
- })];
294
- case 2:
295
- _a.sent();
296
- return [2 /*return*/, pkcs12.toSchema().toBER(false)];
297
- }
298
- });
299
- });
300
- }
301
- function pemToBase64Parts(pem) {
302
- return pem
303
- .split(/-----[\w\s]+-----/)
304
- .map(function (p) { return p.replace(/\s/g, ''); })
305
- .filter(function (p) { return p; });
306
- }
307
- function base64ToPem(base64, title) {
308
- var string_length = base64.length;
309
- var result_string = '';
310
- for (var i = 0, count = 0; i < string_length; i++, count++) {
311
- if (count > 63) {
312
- result_string += '\r\n';
313
- count = 0;
314
- }
315
- result_string += base64[i];
316
- }
317
- title =
318
- (title || '')
319
- .replace(/[^\w\s]+/, '')
320
- .trim()
321
- .toUpperCase() || 'CERTIFICATE';
322
- return "-----BEGIN ".concat(title, "-----\r\n").concat(result_string, "\r\n-----END ").concat(title, "-----\r\n");
323
- }
324
- function bufferToPem(pkcs10_buf, title) {
325
- var base64 = ne_text.bufferToBase64(pkcs10_buf);
326
- return base64ToPem(base64, title);
57
+ var crypto = require('node:crypto');
58
+ var pkijs = require('pkijs');
59
+ pkijs.setEngine('OpenSSL', crypto, new pkijs.CryptoEngine({ name: '', crypto: crypto, subtle: crypto.subtle }));
60
+ var DEF_ALGO = {
61
+ name: 'RSASSA-PKCS1-v1_5',
62
+ modulusLength: 2048,
63
+ publicExponent: new Uint8Array([0x01, 0x00, 0x01]),
64
+ hash: { name: 'SHA-256' },
65
+ };
66
+ function randomString() {
67
+ return __awaiter(this, void 0, void 0, function () {
68
+ var bytes;
69
+ return __generator(this, function (_a) {
70
+ bytes = new Uint8Array(24);
71
+ crypto.getRandomValues(bytes);
72
+ return [2 /*return*/, ne_text.bufferToBase64Url(bytes.buffer)];
73
+ });
74
+ });
75
+ }
76
+ function gen() {
77
+ return __awaiter(this, void 0, void 0, function () {
78
+ var keys;
79
+ var _a;
80
+ return __generator(this, function (_b) {
81
+ switch (_b.label) {
82
+ case 0: return [4 /*yield*/, crypto.subtle.generateKey(DEF_ALGO, true, ['sign'])];
83
+ case 1:
84
+ keys = _b.sent();
85
+ _a = {};
86
+ return [4 /*yield*/, crypto.subtle.exportKey('jwk', keys.publicKey)];
87
+ case 2:
88
+ _a.publicJwk = _b.sent();
89
+ return [4 /*yield*/, crypto.subtle.exportKey('jwk', keys.privateKey)];
90
+ case 3: return [2 /*return*/, (_a.privateJwk = _b.sent(),
91
+ _a)];
92
+ }
93
+ });
94
+ });
95
+ }
96
+ function sign(text, privateJwk) {
97
+ return __awaiter(this, void 0, void 0, function () {
98
+ var cKey, buffer, signed;
99
+ return __generator(this, function (_a) {
100
+ switch (_a.label) {
101
+ case 0: return [4 /*yield*/, crypto.subtle.importKey('jwk', privateJwk, DEF_ALGO, true, ['sign'])];
102
+ case 1:
103
+ cKey = _a.sent(), buffer = ne_text.textToBuffer(text);
104
+ return [4 /*yield*/, crypto.subtle.sign(DEF_ALGO.name, cKey, buffer)];
105
+ case 2:
106
+ signed = _a.sent();
107
+ return [2 /*return*/, ne_text.bufferToBase64Url(signed)];
108
+ }
109
+ });
110
+ });
111
+ }
112
+ function digest(text) {
113
+ return __awaiter(this, void 0, void 0, function () {
114
+ var buffer, digest;
115
+ return __generator(this, function (_a) {
116
+ switch (_a.label) {
117
+ case 0:
118
+ buffer = ne_text.textToBuffer(text);
119
+ return [4 /*yield*/, crypto.subtle.digest('SHA-256', buffer)];
120
+ case 1:
121
+ digest = _a.sent();
122
+ return [2 /*return*/, ne_text.bufferToBase64Url(digest)];
123
+ }
124
+ });
125
+ });
126
+ }
127
+ //https://github.com/PeculiarVentures/PKI.js/blob/master/examples/PKCS10ComplexExample/es6.js
128
+ function csr(params) {
129
+ return __awaiter(this, void 0, void 0, function () {
130
+ var pkcs10, keys, publicKey, toDigest, pubkeyhash_sha1, privateKey, pkcs10_schema, pkcs10_encoded, exportedPkcs8;
131
+ var _a;
132
+ return __generator(this, function (_b) {
133
+ switch (_b.label) {
134
+ case 0:
135
+ pkcs10 = new pkijs.CertificationRequest();
136
+ pkcs10.version = 0;
137
+ pkcs10.subject.typesAndValues.push(new pkijs.AttributeTypeAndValue({
138
+ type: '2.5.4.3',
139
+ value: new asn1js.PrintableString({ value: params.domains[0] }),
140
+ }));
141
+ if (params.country) {
142
+ pkcs10.subject.typesAndValues.push(new pkijs.AttributeTypeAndValue({
143
+ type: '2.5.4.6',
144
+ value: new asn1js.PrintableString({ value: params.country }),
145
+ }));
146
+ }
147
+ if (params.town) {
148
+ pkcs10.subject.typesAndValues.push(new pkijs.AttributeTypeAndValue({
149
+ type: '2.5.4.7',
150
+ value: new asn1js.PrintableString({ value: params.town }),
151
+ }));
152
+ }
153
+ if (params.county) {
154
+ pkcs10.subject.typesAndValues.push(new pkijs.AttributeTypeAndValue({
155
+ type: '2.5.4.8',
156
+ value: new asn1js.PrintableString({ value: params.county }),
157
+ }));
158
+ }
159
+ if (params.company) {
160
+ pkcs10.subject.typesAndValues.push(new pkijs.AttributeTypeAndValue({
161
+ type: '2.5.4.10',
162
+ value: new asn1js.PrintableString({ value: params.company }),
163
+ }));
164
+ }
165
+ if (params.department) {
166
+ pkcs10.subject.typesAndValues.push(new pkijs.AttributeTypeAndValue({
167
+ type: '2.5.4.11',
168
+ value: new asn1js.PrintableString({ value: params.department }),
169
+ }));
170
+ }
171
+ return [4 /*yield*/, crypto.subtle.generateKey(DEF_ALGO, true, ['sign'])];
172
+ case 1:
173
+ keys = _b.sent();
174
+ publicKey = keys.publicKey;
175
+ return [4 /*yield*/, pkcs10.subjectPublicKeyInfo.importKey(publicKey)];
176
+ case 2:
177
+ _b.sent();
178
+ toDigest = pkcs10.subjectPublicKeyInfo.subjectPublicKey.valueBlock.valueHex;
179
+ return [4 /*yield*/, crypto.subtle.digest('SHA-1', toDigest)];
180
+ case 3:
181
+ pubkeyhash_sha1 = _b.sent();
182
+ //pubkeyhash_sha256 = await crypto.subtle.digest('SHA-256', toDigest);
183
+ pkcs10.attributes = [];
184
+ pkcs10.attributes.push(new pkijs.Attribute({
185
+ type: '1.2.840.113549.1.9.14',
186
+ values: [
187
+ new pkijs.Extensions({
188
+ extensions: [
189
+ new pkijs.Extension({
190
+ extnID: '2.5.29.14',
191
+ critical: false,
192
+ extnValue: new asn1js.OctetString({ valueHex: pubkeyhash_sha1 }).toBER(false),
193
+ }),
194
+ new pkijs.Extension({
195
+ extnID: '2.5.29.17',
196
+ critical: false,
197
+ extnValue: new pkijs.GeneralNames({
198
+ names: params.domains.map(function (dom) {
199
+ return new pkijs.GeneralName({
200
+ type: 2,
201
+ value: dom,
202
+ });
203
+ }),
204
+ })
205
+ .toSchema()
206
+ .toBER(false),
207
+ }),
208
+ ],
209
+ }).toSchema(),
210
+ ],
211
+ }));
212
+ privateKey = keys.privateKey;
213
+ return [4 /*yield*/, pkcs10.sign(privateKey, 'SHA-256')];
214
+ case 4:
215
+ _b.sent(), pkcs10_schema = pkcs10.toSchema(), pkcs10_encoded = pkcs10_schema.toBER(false);
216
+ return [4 /*yield*/, crypto.subtle.exportKey('pkcs8', keys.privateKey)];
217
+ case 5:
218
+ exportedPkcs8 = _b.sent();
219
+ _a = {
220
+ pem: bufferToPem(pkcs10_encoded, 'CERTIFICATE REQUEST'),
221
+ der: ne_text.bufferToBase64Url(pkcs10_encoded),
222
+ pkcs8_pem: bufferToPem(exportedPkcs8, 'PRIVATE KEY'),
223
+ pkcs8_b64: ne_text.bufferToBase64(exportedPkcs8)
224
+ };
225
+ return [4 /*yield*/, crypto.subtle.exportKey('jwk', keys.privateKey)];
226
+ case 6:
227
+ _a.privateJwk = _b.sent();
228
+ return [4 /*yield*/, crypto.subtle.exportKey('jwk', keys.publicKey)];
229
+ case 7: return [2 /*return*/, (_a.publicJwk = _b.sent(),
230
+ _a)];
231
+ }
232
+ });
233
+ });
234
+ }
235
+ //https://github.com/PeculiarVentures/PKI.js/blob/master/examples/PKCS12SimpleExample/es6.js
236
+ function pfx(friendlyName, cert_b64, key_b64, password, hash) {
237
+ if (hash === void 0) { hash = 'SHA-256'; }
238
+ return __awaiter(this, void 0, void 0, function () {
239
+ var asn1_cer, asn1_key, objc_cer, objc_key, pkcs12;
240
+ return __generator(this, function (_a) {
241
+ switch (_a.label) {
242
+ case 0:
243
+ asn1_cer = asn1js.fromBER(ne_text.textToBuffer(ne_text.base64ToText(cert_b64))), asn1_key = asn1js.fromBER(ne_text.textToBuffer(ne_text.base64ToText(key_b64)));
244
+ objc_cer = new pkijs.Certificate({ schema: asn1_cer.result }), objc_key = new pkijs.PrivateKeyInfo({ schema: asn1_key.result });
245
+ pkcs12 = new pkijs.PFX({
246
+ parsedValue: {
247
+ integrityMode: 0,
248
+ authenticatedSafe: new pkijs.AuthenticatedSafe({
249
+ parsedValue: {
250
+ safeContents: [
251
+ {
252
+ privacyMode: 0,
253
+ value: new pkijs.SafeContents({
254
+ safeBags: [
255
+ new pkijs.SafeBag({
256
+ bagId: '1.2.840.113549.1.12.10.1.1',
257
+ bagValue: objc_key,
258
+ }),
259
+ new pkijs.SafeBag({
260
+ bagId: '1.2.840.113549.1.12.10.1.3',
261
+ bagValue: new pkijs.CertBag({
262
+ parsedValue: objc_cer,
263
+ }),
264
+ bagAttributes: [
265
+ new pkijs.Attribute({
266
+ type: '1.2.840.113549.1.9.20',
267
+ values: [new asn1js.BmpString({ value: friendlyName })],
268
+ }),
269
+ ],
270
+ }),
271
+ ],
272
+ }),
273
+ },
274
+ ],
275
+ },
276
+ }),
277
+ },
278
+ });
279
+ return [4 /*yield*/, pkcs12.parsedValue.authenticatedSafe.makeInternalValues({
280
+ safeContents: [
281
+ {
282
+ /* Empty as 'No Privacy' for SafeContents */
283
+ },
284
+ ],
285
+ })];
286
+ case 1:
287
+ _a.sent();
288
+ return [4 /*yield*/, pkcs12.makeInternalValues({
289
+ password: ne_text.textToBuffer(password),
290
+ iterations: 1000,
291
+ pbkdf2HashAlgorithm: hash,
292
+ hmacHashAlgorithm: hash,
293
+ })];
294
+ case 2:
295
+ _a.sent();
296
+ return [2 /*return*/, pkcs12.toSchema().toBER(false)];
297
+ }
298
+ });
299
+ });
300
+ }
301
+ function pemToBase64Parts(pem) {
302
+ return pem
303
+ .split(/-----[\w\s]+-----/)
304
+ .map(function (p) { return p.replace(/\s/g, ''); })
305
+ .filter(function (p) { return p; });
306
+ }
307
+ function base64ToPem(base64, title) {
308
+ var string_length = base64.length;
309
+ var result_string = '';
310
+ for (var i = 0, count = 0; i < string_length; i++, count++) {
311
+ if (count > 63) {
312
+ result_string += '\r\n';
313
+ count = 0;
314
+ }
315
+ result_string += base64[i];
316
+ }
317
+ title =
318
+ (title || '')
319
+ .replace(/[^\w\s]+/, '')
320
+ .trim()
321
+ .toUpperCase() || 'CERTIFICATE';
322
+ return "-----BEGIN ".concat(title, "-----\r\n").concat(result_string, "\r\n-----END ").concat(title, "-----\r\n");
323
+ }
324
+ function bufferToPem(pkcs10_buf, title) {
325
+ var base64 = ne_text.bufferToBase64(pkcs10_buf);
326
+ return base64ToPem(base64, title);
327
327
  }
328
328
 
329
329
  export { base64ToPem, bufferToPem, csr, digest, gen, pemToBase64Parts, pfx, randomString, sign };