@project-chip/matter.js 0.2.1 → 0.3.0

package/dist/es/certificate/CertificateManager.d.ts

@@ -0,0 +1,202 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { KeyPair } from "../crypto/Crypto.js";
+import { ByteArray } from "../util/ByteArray.js";
+import { NodeId } from "../datatype/NodeId.js";
+import { VendorId } from "../datatype/VendorId.js";
+import { TypeFromSchema } from "../tlv/TlvSchema.js";
+export declare function matterToJsDate(date: number): Date;
+export declare function jsToMatterDate(date: Date, addYears?: number): number;
+/** commonName = ASN.1 OID 2.5.4.3 */
+export declare const CommonName_X520: (name: string) => any[];
+/** matter-node-id = ASN.1 OID 1.3.6.1.4.1.37244.1.1 */
+export declare const NodeId_Matter: (nodeId: NodeId) => any[];
+/** matter-rcac-id = ASN.1 OID 1.3.6.1.4.1.37244.1.4 */
+export declare const RcacId_Matter: (id: bigint | number) => any[];
+/** matter-fabric-id = ASN.1 OID 1.3.6.1.4.1.37244.1.5 */
+export declare const FabricId_Matter: (id: bigint | number) => any[];
+/** matter-oid-vid = ASN.1 OID 1.3.6.1.4.1.37244.2.1 */
+export declare const VendorId_Matter: (vendorId: VendorId) => any[];
+/** matter-oid-pid = ASN.1 OID 1.3.6.1.4.1.3724 4.2.2 */
+export declare const ProductId_Matter: (id: number) => any[];
+export declare const TlvRootCertificate: import("../tlv/TlvObject.js").ObjectSchema<{
+    serialNumber: import("../tlv/TlvObject.js").FieldType<Uint8Array>;
+    signatureAlgorithm: import("../tlv/TlvObject.js").FieldType<number>;
+    issuer: import("../tlv/TlvObject.js").FieldType<{
+        issuerRcacId?: number | bigint | undefined;
+    }>;
+    notBefore: import("../tlv/TlvObject.js").FieldType<number>;
+    notAfter: import("../tlv/TlvObject.js").FieldType<number>;
+    subject: import("../tlv/TlvObject.js").FieldType<{
+        rcacId: number | bigint;
+    }>;
+    publicKeyAlgorithm: import("../tlv/TlvObject.js").FieldType<number>;
+    ellipticCurveIdentifier: import("../tlv/TlvObject.js").FieldType<number>;
+    ellipticCurvePublicKey: import("../tlv/TlvObject.js").FieldType<Uint8Array>;
+    extensions: import("../tlv/TlvObject.js").FieldType<{
+        basicConstraints: {
+            isCa: boolean;
+            pathLen?: number | undefined;
+        };
+        keyUsage: number;
+        subjectKeyIdentifier: Uint8Array;
+        authorityKeyIdentifier: Uint8Array;
+        extendedKeyUsage?: number[] | undefined;
+        futureExtension?: Uint8Array | undefined;
+    }>;
+    signature: import("../tlv/TlvObject.js").FieldType<Uint8Array>;
+}>;
+export declare const TlvOperationalCertificate: import("../tlv/TlvObject.js").ObjectSchema<{
+    serialNumber: import("../tlv/TlvObject.js").FieldType<Uint8Array>;
+    signatureAlgorithm: import("../tlv/TlvObject.js").FieldType<number>;
+    issuer: import("../tlv/TlvObject.js").FieldType<{
+        issuerRcacId?: number | bigint | undefined;
+    }>;
+    notBefore: import("../tlv/TlvObject.js").FieldType<number>;
+    notAfter: import("../tlv/TlvObject.js").FieldType<number>;
+    subject: import("../tlv/TlvObject.js").FieldType<{
+        fabricId: number | bigint;
+        nodeId: NodeId;
+    }>;
+    publicKeyAlgorithm: import("../tlv/TlvObject.js").FieldType<number>;
+    ellipticCurveIdentifier: import("../tlv/TlvObject.js").FieldType<number>;
+    ellipticCurvePublicKey: import("../tlv/TlvObject.js").FieldType<Uint8Array>;
+    extensions: import("../tlv/TlvObject.js").FieldType<{
+        basicConstraints: {
+            isCa: boolean;
+            pathLen?: number | undefined;
+        };
+        keyUsage: number;
+        subjectKeyIdentifier: Uint8Array;
+        authorityKeyIdentifier: Uint8Array;
+        extendedKeyUsage?: number[] | undefined;
+        futureExtension?: Uint8Array | undefined;
+    }>;
+    signature: import("../tlv/TlvObject.js").FieldType<Uint8Array>;
+}>;
+export interface DeviceAttestationCertificate {
+    serialNumber: ByteArray;
+    signatureAlgorithm: number;
+    issuer: {
+        commonName: string;
+        productId?: number;
+        vendorId: VendorId;
+    };
+    notBefore: number;
+    notAfter: number;
+    subject: {
+        commonName: string;
+        productId: number;
+        vendorId: VendorId;
+    };
+    publicKeyAlgorithm: number;
+    ellipticCurveIdentifier: number;
+    ellipticCurvePublicKey: ByteArray;
+    extensions: {
+        basicConstraints: {
+            isCa: boolean;
+            pathLen?: number;
+        };
+        keyUsage: number;
+        extendedKeyUsage?: number[];
+        subjectKeyIdentifier: ByteArray;
+        authorityKeyIdentifier: ByteArray;
+        futureExtension?: ByteArray;
+    };
+    signature: ByteArray;
+}
+export interface ProductAttestationIntermediateCertificate {
+    serialNumber: ByteArray;
+    signatureAlgorithm: number;
+    issuer: {
+        commonName: string;
+        vendorId?: VendorId;
+    };
+    notBefore: number;
+    notAfter: number;
+    subject: {
+        commonName: string;
+        productId?: number;
+        vendorId: VendorId;
+    };
+    publicKeyAlgorithm: number;
+    ellipticCurveIdentifier: number;
+    ellipticCurvePublicKey: ByteArray;
+    extensions: {
+        basicConstraints: {
+            isCa: boolean;
+            pathLen?: number;
+        };
+        keyUsage: number;
+        extendedKeyUsage?: number[];
+        subjectKeyIdentifier: ByteArray;
+        authorityKeyIdentifier: ByteArray;
+        futureExtension?: ByteArray;
+    };
+    signature: ByteArray;
+}
+export interface ProductAttestationAuthorityCertificate {
+    serialNumber: ByteArray;
+    signatureAlgorithm: number;
+    issuer: {
+        commonName: string;
+        vendorId?: VendorId;
+    };
+    notBefore: number;
+    notAfter: number;
+    subject: {
+        commonName: string;
+        vendorId?: VendorId;
+    };
+    publicKeyAlgorithm: number;
+    ellipticCurveIdentifier: number;
+    ellipticCurvePublicKey: ByteArray;
+    extensions: {
+        basicConstraints: {
+            isCa: boolean;
+            pathLen?: number;
+        };
+        keyUsage: number;
+        extendedKeyUsage?: number[];
+        subjectKeyIdentifier: ByteArray;
+        authorityKeyIdentifier?: ByteArray;
+        futureExtension?: ByteArray;
+    };
+    signature: ByteArray;
+}
+export declare const TlvCertificationDeclaration: import("../tlv/TlvObject.js").ObjectSchema<{
+    formatVersion: import("../tlv/TlvObject.js").FieldType<number>;
+    vendorId: import("../tlv/TlvObject.js").FieldType<VendorId>;
+    produceIdArray: import("../tlv/TlvObject.js").FieldType<number[]>;
+    deviceTypeId: import("../tlv/TlvObject.js").FieldType<number>;
+    certificateId: import("../tlv/TlvObject.js").FieldType<string>;
+    securityLevel: import("../tlv/TlvObject.js").FieldType<number>;
+    securityInformation: import("../tlv/TlvObject.js").FieldType<number>;
+    versionNumber: import("../tlv/TlvObject.js").FieldType<number>;
+    certificationType: import("../tlv/TlvObject.js").FieldType<number>;
+    dacOriginVendorId: import("../tlv/TlvObject.js").OptionalFieldType<VendorId>;
+    dacOriginProductId: import("../tlv/TlvObject.js").OptionalFieldType<number>;
+    authorizedPaaList: import("../tlv/TlvObject.js").OptionalFieldType<Uint8Array[]>;
+}>;
+export type RootCertificate = TypeFromSchema<typeof TlvRootCertificate>;
+export type OperationalCertificate = TypeFromSchema<typeof TlvOperationalCertificate>;
+type Unsigned<Type> = {
+    [Property in keyof Type as Exclude<Property, "signature">]: Type[Property];
+};
+export declare class CertificateManager {
+    static rootCertToAsn1({ serialNumber, notBefore, notAfter, issuer: { issuerRcacId }, subject: { rcacId }, ellipticCurvePublicKey, extensions: { subjectKeyIdentifier, authorityKeyIdentifier } }: Unsigned<RootCertificate>): Uint8Array;
+    static nocCertToAsn1({ serialNumber, notBefore, notAfter, issuer: { issuerRcacId }, subject: { fabricId, nodeId }, ellipticCurvePublicKey, extensions: { subjectKeyIdentifier, authorityKeyIdentifier } }: Unsigned<OperationalCertificate>): Uint8Array;
+    static daCertToAsn1({ serialNumber, notBefore, notAfter, issuer: { commonName: issuerCommonName, vendorId: issuerVendorId }, subject: { commonName: subjectCommonName, vendorId: subjectVendorId, productId: subjectProductId }, ellipticCurvePublicKey, extensions: { subjectKeyIdentifier, authorityKeyIdentifier } }: Unsigned<DeviceAttestationCertificate>, keys: KeyPair): Uint8Array;
+    static paiCertToAsn1({ serialNumber, notBefore, notAfter, issuer: { commonName: issuerCommonName, vendorId: issuerVendorId }, subject: { commonName, vendorId, productId }, ellipticCurvePublicKey, extensions: { subjectKeyIdentifier, authorityKeyIdentifier } }: Unsigned<ProductAttestationIntermediateCertificate>, keys: KeyPair): Uint8Array;
+    static paaCertToAsn1({ serialNumber, notBefore, notAfter, issuer: { commonName: issuerCommonName, vendorId: issuerVendorId }, subject: { commonName, vendorId }, ellipticCurvePublicKey, extensions: { subjectKeyIdentifier, authorityKeyIdentifier } }: Unsigned<ProductAttestationAuthorityCertificate>, keys: KeyPair): Uint8Array;
+    static CertificationDeclarationToAsn1(eContent: ByteArray, subjectKeyIdentifier: ByteArray, privateKey: ByteArray): Uint8Array;
+    static validateRootCertificate(rootCert: RootCertificate): void;
+    static validateNocCertificate(rootCert: RootCertificate, nocCert: OperationalCertificate): void;
+    static createCertificateSigningRequest(keys: KeyPair): Uint8Array;
+    static getPublicKeyFromCsr(csr: ByteArray): Uint8Array;
+}
+export {};
+//# sourceMappingURL=CertificateManager.d.ts.map

package/dist/es/certificate/CertificateManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CertificateManager.d.ts","sourceRoot":"","sources":["../../../src/certificate/CertificateManager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAQH,OAAO,EAAU,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAa,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAe,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAMhE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAUrD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,QAE1C;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,SAAI,UAEtD;AAgBD,qCAAqC;AACrC,eAAO,MAAM,eAAe,SAAU,MAAM,UAA2C,CAAC;AAExF,uDAAuD;AACvD,eAAO,MAAM,aAAa,WAAY,MAAM,UAA4E,CAAC;AAEzH,uDAAuD;AACvD,eAAO,MAAM,aAAa,OAAQ,MAAM,GAAG,MAAM,UAAqE,CAAC;AAEvH,yDAAyD;AACzD,eAAO,MAAM,eAAe,OAAQ,MAAM,GAAG,MAAM,UAAqE,CAAC;AAEzH,uDAAuD;AACvD,eAAO,MAAM,eAAe,aAAc,QAAQ,UAAgF,CAAC;AAEnI,wDAAwD;AACxD,eAAO,MAAM,gBAAgB,OAAQ,MAAM,UAAuE,CAAC;AAEnH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;EA0B7B,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2BpC,CAAC;AAEH,MAAM,WAAW,4BAA4B;IACzC,YAAY,EAAE,SAAS,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE;QACJ,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,QAAQ,CAAC;KACtB,CAAA;IACD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE;QACL,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,QAAQ,CAAC;KACtB,CAAA;IACD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,uBAAuB,EAAE,MAAM,CAAC;IAChC,sBAAsB,EAAE,SAAS,CAAC;IAClC,UAAU,EAAE;QACR,gBAAgB,EAAE;YACd,IAAI,EAAE,OAAO,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,CAAC;SACpB,CAAA;QACD,QAAQ,EAAE,MAAM,CAAC;QACjB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC5B,oBAAoB,EAAE,SAAS,CAAC;QAChC,sBAAsB,EAAE,SAAS,CAAC;QAClC,eAAe,CAAC,EAAE,SAAS,CAAC;KAC/B,CAAC;IACF,SAAS,EAAE,SAAS,CAAC;CACxB;AAED,MAAM,WAAW,yCAAyC;IACtD,YAAY,EAAE,SAAS,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE;QACJ,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,QAAQ,CAAC;KACvB,CAAA;IACD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE;QACL,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,QAAQ,CAAC;KACtB,CAAA;IACD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,uBAAuB,EAAE,MAAM,CAAC;IAChC,sBAAsB,EAAE,SAAS,CAAC;IAClC,UAAU,EAAE;QACR,gBAAgB,EAAE;YACd,IAAI,EAAE,OAAO,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,CAAC;SACpB,CAAA;QACD,QAAQ,EAAE,MAAM,CAAC;QACjB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC5B,oBAAoB,EAAE,SAAS,CAAC;QAChC,sBAAsB,EAAE,SAAS,CAAC;QAClC,eAAe,CAAC,EAAE,SAAS,CAAC;KAC/B,CAAA;IACD,SAAS,EAAE,SAAS,CAAC;CACxB;AAED,MAAM,WAAW,sCAAsC;IACnD,YAAY,EAAE,SAAS,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE;QACJ,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,QAAQ,CAAC;KACvB,CAAA;IACD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE;QACL,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,QAAQ,CAAC;KACvB,CAAA;IACD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,uBAAuB,EAAE,MAAM,CAAC;IAChC,sBAAsB,EAAE,SAAS,CAAC;IAClC,UAAU,EAAE;QACR,gBAAgB,EAAE;YACd,IAAI,EAAE,OAAO,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,CAAC;SACpB,CAAA;QACD,QAAQ,EAAE,MAAM,CAAC;QACjB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC5B,oBAAoB,EAAE,SAAS,CAAC;QAChC,sBAAsB,CAAC,EAAE,SAAS,CAAC;QACnC,eAAe,CAAC,EAAE,SAAS,CAAC;KAC/B,CAAA;IACD,SAAS,EAAE,SAAS,CAAC;CACxB;AAED,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;EAatC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,cAAc,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACxE,MAAM,MAAM,sBAAsB,GAAG,cAAc,CAAC,OAAO,yBAAyB,CAAC,CAAC;AACtF,KAAK,QAAQ,CAAC,IAAI,IAAI;KAAG,QAAQ,IAAI,MAAM,IAAI,IAAI,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;CAAE,CAAC;AAErG,qBAAa,kBAAkB;IAC3B,MAAM,CAAC,cAAc,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,sBAAsB,EAAE,UAAU,EAAE,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,EAAE,EAAE,QAAQ,CAAC,eAAe,CAAC;IAyB3N,MAAM,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,sBAAsB,EAAE,UAAU,EAAE,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,EAAE,EAAE,QAAQ,CAAC,sBAAsB,CAAC;IA2B3O,MAAM,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,gBAAgB,EAAE,EAAE,sBAAsB,EAAE,UAAU,EAAE,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,EAAE,EAAE,QAAQ,CAAC,4BAA4B,CAAC,EAAE,IAAI,EAAE,OAAO;IAmC9W,MAAM,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,sBAAsB,EAAE,UAAU,EAAE,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,EAAE,EAAE,QAAQ,CAAC,yCAAyC,CAAC,EAAE,IAAI,EAAE,OAAO;IAoCtU,MAAM,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,sBAAsB,EAAE,UAAU,EAAE,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,EAAE,EAAE,QAAQ,CAAC,sCAAsC,CAAC,EAAE,IAAI,EAAE,OAAO;IAkCxT,MAAM,CAAC,8BAA8B,CAAC,QAAQ,EAAE,SAAS,EAAE,oBAAoB,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS;IAiBjH,MAAM,CAAC,uBAAuB,CAAC,QAAQ,EAAE,eAAe;IAIxD,MAAM,CAAC,sBAAsB,CAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,EAAE,sBAAsB;IAIxF,MAAM,CAAC,+BAA+B,CAAC,IAAI,EAAE,OAAO;IAepD,MAAM,CAAC,mBAAmB,CAAC,GAAG,EAAE,SAAS;CAyB5C"}

package/dist/es/certificate/CertificateManager.js

@@ -0,0 +1,332 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { AuthorityKeyIdentifier_X509, BasicConstraints_X509, BitByteArray, BYTES_KEY, ContextTagged, ContextTaggedBytes, DerCodec, DerObject, EcdsaWithSHA256_X962, ELEMENTS_KEY, ExtendedKeyUsage_X509, KeyUsage_Signature_ContentCommited_X509, KeyUsage_Signature_X509, OBJECT_ID_KEY, OrganisationName_X520, Pkcs7Data, Pkcs7SignedData, PublicKeyEcPrime256v1_X962, SHA256_CMS, SubjectKeyIdentifier_X509 } from "../codec/DerCodec.js";
+import { Crypto } from "../crypto/Crypto.js";
+import { ByteArray } from "../util/ByteArray.js";
+import { TlvNodeId } from "../datatype/NodeId.js";
+import { TlvVendorId } from "../datatype/VendorId.js";
+import { TlvField, TlvList, TlvObject, TlvOptionalField } from "../tlv/TlvObject.js";
+import { TlvByteString, TlvString } from "../tlv/TlvString.js";
+import { TlvUInt16, TlvUInt32, TlvUInt64, TlvUInt8 } from "../tlv/TlvNumber.js";
+import { TlvArray } from "../tlv/TlvArray.js";
+import { TlvBoolean } from "../tlv/TlvBoolean.js";
+const YEAR_S = 365 * 24 * 60 * 60;
+const EPOCH_OFFSET_S = 10957 * 24 * 60 * 60;
+// TODO replace usage of Date by abstraction
+export function matterToJsDate(date) {
+    return new Date((date + EPOCH_OFFSET_S) * 1000);
+}
+export function jsToMatterDate(date, addYears = 0) {
+    return Math.floor(date.getTime() / 1000) - EPOCH_OFFSET_S + addYears * YEAR_S;
+}
+function intTo16Chars(value) {
+    const byteArray = new ByteArray(8);
+    const dataView = byteArray.getDataView();
+    dataView.setBigUint64(0, typeof value === "bigint" ? value : BigInt(value));
+    return byteArray.toHex().toUpperCase();
+}
+function uInt16To4Chars(value) {
+    const byteArray = new ByteArray(2);
+    const dataView = byteArray.getDataView();
+    dataView.setUint16(0, value);
+    return byteArray.toHex().toUpperCase();
+}
+/** commonName = ASN.1 OID 2.5.4.3 */
+export const CommonName_X520 = (name) => [DerObject("550403", { value: name })];
+/** matter-node-id = ASN.1 OID 1.3.6.1.4.1.37244.1.1 */
+export const NodeId_Matter = (nodeId) => [DerObject("2b0601040182a27c0101", { value: intTo16Chars(nodeId.id) })];
+/** matter-rcac-id = ASN.1 OID 1.3.6.1.4.1.37244.1.4 */
+export const RcacId_Matter = (id) => [DerObject("2b0601040182a27c0104", { value: intTo16Chars(id) })];
+/** matter-fabric-id = ASN.1 OID 1.3.6.1.4.1.37244.1.5 */
+export const FabricId_Matter = (id) => [DerObject("2b0601040182a27c0105", { value: intTo16Chars(id) })];
+/** matter-oid-vid = ASN.1 OID 1.3.6.1.4.1.37244.2.1 */
+export const VendorId_Matter = (vendorId) => [DerObject("2b0601040182a27c0201", { value: uInt16To4Chars(vendorId.id) })];
+/** matter-oid-pid = ASN.1 OID 1.3.6.1.4.1.3724 4.2.2 */
+export const ProductId_Matter = (id) => [DerObject("2b0601040182a27c0202", { value: uInt16To4Chars(id) })];
+export const TlvRootCertificate = TlvObject({
+    serialNumber: TlvField(1, TlvByteString.bound({ maxLength: 20 })),
+    signatureAlgorithm: TlvField(2, TlvUInt8),
+    issuer: TlvField(3, TlvList({
+        issuerRcacId: TlvOptionalField(20, TlvUInt64),
+    })),
+    notBefore: TlvField(4, TlvUInt32),
+    notAfter: TlvField(5, TlvUInt32),
+    subject: TlvField(6, TlvList({
+        rcacId: TlvField(20, TlvUInt64),
+    })),
+    publicKeyAlgorithm: TlvField(7, TlvUInt8),
+    ellipticCurveIdentifier: TlvField(8, TlvUInt8),
+    ellipticCurvePublicKey: TlvField(9, TlvByteString),
+    extensions: TlvField(10, TlvList({
+        basicConstraints: TlvField(1, TlvObject({
+            isCa: TlvField(1, TlvBoolean),
+            pathLen: TlvOptionalField(2, TlvUInt8),
+        })),
+        keyUsage: TlvField(2, TlvUInt16),
+        extendedKeyUsage: TlvOptionalField(3, TlvArray(TlvUInt8)),
+        subjectKeyIdentifier: TlvField(4, TlvByteString.bound({ length: 20 })),
+        authorityKeyIdentifier: TlvField(5, TlvByteString.bound({ length: 20 })),
+        futureExtension: TlvOptionalField(6, TlvByteString),
+    })),
+    signature: TlvField(11, TlvByteString),
+});
+export const TlvOperationalCertificate = TlvObject({
+    serialNumber: TlvField(1, TlvByteString.bound({ maxLength: 20 })),
+    signatureAlgorithm: TlvField(2, TlvUInt8),
+    issuer: TlvField(3, TlvList({
+        issuerRcacId: TlvOptionalField(20, TlvUInt64),
+    })),
+    notBefore: TlvField(4, TlvUInt32),
+    notAfter: TlvField(5, TlvUInt32),
+    subject: TlvField(6, TlvList({
+        fabricId: TlvField(21, TlvUInt64),
+        nodeId: TlvField(17, TlvNodeId),
+    })),
+    publicKeyAlgorithm: TlvField(7, TlvUInt8),
+    ellipticCurveIdentifier: TlvField(8, TlvUInt8),
+    ellipticCurvePublicKey: TlvField(9, TlvByteString),
+    extensions: TlvField(10, TlvList({
+        basicConstraints: TlvField(1, TlvObject({
+            isCa: TlvField(1, TlvBoolean),
+            pathLen: TlvOptionalField(2, TlvUInt8),
+        })),
+        keyUsage: TlvField(2, TlvUInt16),
+        extendedKeyUsage: TlvOptionalField(3, TlvArray(TlvUInt8)),
+        subjectKeyIdentifier: TlvField(4, TlvByteString.bound({ length: 20 })),
+        authorityKeyIdentifier: TlvField(5, TlvByteString.bound({ length: 20 })),
+        futureExtension: TlvOptionalField(6, TlvByteString),
+    })),
+    signature: TlvField(11, TlvByteString),
+});
+export const TlvCertificationDeclaration = TlvObject({
+    formatVersion: TlvField(0, TlvUInt16),
+    vendorId: TlvField(1, TlvVendorId),
+    produceIdArray: TlvField(2, TlvArray(TlvUInt16, { minLength: 1, maxLength: 100 })),
+    deviceTypeId: TlvField(3, TlvUInt32),
+    certificateId: TlvField(4, TlvString.bound({ length: 19 })),
+    securityLevel: TlvField(5, TlvUInt8),
+    securityInformation: TlvField(6, TlvUInt16),
+    versionNumber: TlvField(7, TlvUInt16),
+    certificationType: TlvField(8, TlvUInt8),
+    dacOriginVendorId: TlvOptionalField(9, TlvVendorId),
+    dacOriginProductId: TlvOptionalField(10, TlvUInt16),
+    authorizedPaaList: TlvOptionalField(11, TlvArray(TlvByteString.bound({ length: 20 }), { minLength: 1, maxLength: 10 })),
+});
+export class CertificateManager {
+    static rootCertToAsn1({ serialNumber, notBefore, notAfter, issuer: { issuerRcacId }, subject: { rcacId }, ellipticCurvePublicKey, extensions: { subjectKeyIdentifier, authorityKeyIdentifier } }) {
+        return DerCodec.encode({
+            version: ContextTagged(0, 2),
+            serialNumber: serialNumber[0],
+            signatureAlgorithm: EcdsaWithSHA256_X962,
+            issuer: {
+                issuerRcacId: issuerRcacId === undefined ? undefined : RcacId_Matter(issuerRcacId),
+            },
+            validity: {
+                notBefore: matterToJsDate(notBefore),
+                notAfter: matterToJsDate(notAfter),
+            },
+            subject: {
+                rcacId: RcacId_Matter(rcacId),
+            },
+            publicKey: PublicKeyEcPrime256v1_X962(ellipticCurvePublicKey),
+            extensions: ContextTagged(3, {
+                basicConstraints: BasicConstraints_X509({ isCa: true }),
+                keyUsage: KeyUsage_Signature_ContentCommited_X509,
+                subjectKeyIdentifier: SubjectKeyIdentifier_X509(subjectKeyIdentifier),
+                authorityKeyIdentifier: AuthorityKeyIdentifier_X509(authorityKeyIdentifier),
+            }),
+        });
+    }
+    static nocCertToAsn1({ serialNumber, notBefore, notAfter, issuer: { issuerRcacId }, subject: { fabricId, nodeId }, ellipticCurvePublicKey, extensions: { subjectKeyIdentifier, authorityKeyIdentifier } }) {
+        return DerCodec.encode({
+            version: ContextTagged(0, 2),
+            serialNumber: serialNumber[0],
+            signatureAlgorithm: EcdsaWithSHA256_X962,
+            issuer: {
+                issuerRcacId: issuerRcacId === undefined ? undefined : RcacId_Matter(issuerRcacId),
+            },
+            validity: {
+                notBefore: matterToJsDate(notBefore),
+                notAfter: matterToJsDate(notAfter),
+            },
+            subject: {
+                fabricId: FabricId_Matter(fabricId),
+                nodeId: NodeId_Matter(nodeId),
+            },
+            publicKey: PublicKeyEcPrime256v1_X962(ellipticCurvePublicKey),
+            extensions: ContextTagged(3, {
+                basicConstraints: BasicConstraints_X509({}),
+                keyUsage: KeyUsage_Signature_X509,
+                extendedKeyUsage: ExtendedKeyUsage_X509({ serverAuth: true, clientAuth: true }),
+                subjectKeyIdentifier: SubjectKeyIdentifier_X509(subjectKeyIdentifier),
+                authorityKeyIdentifier: AuthorityKeyIdentifier_X509(authorityKeyIdentifier),
+            }),
+        });
+    }
+    static daCertToAsn1({ serialNumber, notBefore, notAfter, issuer: { commonName: issuerCommonName, vendorId: issuerVendorId }, subject: { commonName: subjectCommonName, vendorId: subjectVendorId, productId: subjectProductId }, ellipticCurvePublicKey, extensions: { subjectKeyIdentifier, authorityKeyIdentifier } }, keys) {
+        const certificate = {
+            version: ContextTagged(0, 2),
+            serialNumber: serialNumber[0],
+            signatureAlgorithm: EcdsaWithSHA256_X962,
+            issuer: {
+                commonName: CommonName_X520(issuerCommonName),
+                vendorId: VendorId_Matter(issuerVendorId),
+            },
+            validity: {
+                notBefore: matterToJsDate(notBefore),
+                notAfter: matterToJsDate(notAfter),
+            },
+            subject: {
+                commonName: CommonName_X520(subjectCommonName),
+                vendorId: VendorId_Matter(subjectVendorId),
+                productId: ProductId_Matter(subjectProductId),
+            },
+            publicKey: PublicKeyEcPrime256v1_X962(ellipticCurvePublicKey),
+            extensions: ContextTagged(3, {
+                basicConstraints: BasicConstraints_X509({
+                    isCa: false,
+                }),
+                keyUsage: KeyUsage_Signature_X509,
+                subjectKeyIdentifier: SubjectKeyIdentifier_X509(subjectKeyIdentifier),
+                authorityKeyIdentifier: AuthorityKeyIdentifier_X509(authorityKeyIdentifier),
+            }),
+        };
+        return DerCodec.encode({
+            certificate,
+            signAlgorithm: EcdsaWithSHA256_X962,
+            signature: BitByteArray(Crypto.signPkcs8(keys.privateKey, DerCodec.encode(certificate), "der")),
+        });
+    }
+    static paiCertToAsn1({ serialNumber, notBefore, notAfter, issuer: { commonName: issuerCommonName, vendorId: issuerVendorId }, subject: { commonName, vendorId, productId }, ellipticCurvePublicKey, extensions: { subjectKeyIdentifier, authorityKeyIdentifier } }, keys) {
+        const certificate = {
+            version: ContextTagged(0, 2),
+            serialNumber: serialNumber[0],
+            signatureAlgorithm: EcdsaWithSHA256_X962,
+            issuer: {
+                commonName: CommonName_X520(issuerCommonName),
+                vendorId: issuerVendorId === undefined ? undefined : VendorId_Matter(issuerVendorId),
+            },
+            validity: {
+                notBefore: matterToJsDate(notBefore),
+                notAfter: matterToJsDate(notAfter),
+            },
+            subject: {
+                commonName: CommonName_X520(commonName),
+                vendorId: VendorId_Matter(vendorId),
+                productId: productId === undefined ? undefined : ProductId_Matter(productId),
+            },
+            publicKey: PublicKeyEcPrime256v1_X962(ellipticCurvePublicKey),
+            extensions: ContextTagged(3, {
+                basicConstraints: BasicConstraints_X509({
+                    isCa: true,
+                    pathLen: 0,
+                }),
+                keyUsage: KeyUsage_Signature_ContentCommited_X509,
+                subjectKeyIdentifier: SubjectKeyIdentifier_X509(subjectKeyIdentifier),
+                authorityKeyIdentifier: AuthorityKeyIdentifier_X509(authorityKeyIdentifier),
+            }),
+        };
+        return DerCodec.encode({
+            certificate,
+            signAlgorithm: EcdsaWithSHA256_X962,
+            signature: BitByteArray(Crypto.signPkcs8(keys.privateKey, DerCodec.encode(certificate), "der")),
+        });
+    }
+    static paaCertToAsn1({ serialNumber, notBefore, notAfter, issuer: { commonName: issuerCommonName, vendorId: issuerVendorId }, subject: { commonName, vendorId }, ellipticCurvePublicKey, extensions: { subjectKeyIdentifier, authorityKeyIdentifier } }, keys) {
+        const certificate = {
+            version: ContextTagged(0, 2),
+            serialNumber: serialNumber[0],
+            signatureAlgorithm: EcdsaWithSHA256_X962,
+            issuer: {
+                commonName: CommonName_X520(issuerCommonName),
+                vendorId: issuerVendorId === undefined ? undefined : VendorId_Matter(issuerVendorId),
+            },
+            validity: {
+                notBefore: matterToJsDate(notBefore),
+                notAfter: matterToJsDate(notAfter),
+            },
+            subject: {
+                commonName: CommonName_X520(commonName),
+                vendorId: vendorId === undefined ? undefined : VendorId_Matter(vendorId),
+            },
+            publicKey: PublicKeyEcPrime256v1_X962(ellipticCurvePublicKey),
+            extensions: ContextTagged(3, {
+                basicConstraints: BasicConstraints_X509({
+                    isCa: false,
+                }),
+                keyUsage: KeyUsage_Signature_ContentCommited_X509,
+                subjectKeyIdentifier: SubjectKeyIdentifier_X509(subjectKeyIdentifier),
+                authorityKeyIdentifier: authorityKeyIdentifier === undefined ? undefined : AuthorityKeyIdentifier_X509(authorityKeyIdentifier),
+            }),
+        };
+        return DerCodec.encode({
+            certificate,
+            signAlgorithm: EcdsaWithSHA256_X962,
+            signature: BitByteArray(Crypto.signPkcs8(keys.privateKey, DerCodec.encode(certificate), "der")),
+        });
+    }
+    static CertificationDeclarationToAsn1(eContent, subjectKeyIdentifier, privateKey) {
+        const certificate = {
+            version: 3,
+            digestAlgorithm: [SHA256_CMS],
+            encapContentInfo: Pkcs7Data(eContent),
+            signerInfo: [{
+                    version: 3,
+                    subjectKeyIdentifier: ContextTaggedBytes(0, subjectKeyIdentifier),
+                    digestAlgorithm: SHA256_CMS,
+                    signatureAlgorithm: EcdsaWithSHA256_X962,
+                    signature: Crypto.signSec1(privateKey, eContent, "der")
+                }]
+        };
+        return DerCodec.encode(Pkcs7SignedData(certificate));
+    }
+    static validateRootCertificate(rootCert) {
+        Crypto.verifySpki(rootCert.ellipticCurvePublicKey, this.rootCertToAsn1(rootCert), rootCert.signature);
+    }
+    static validateNocCertificate(rootCert, nocCert) {
+        Crypto.verifySpki(rootCert.ellipticCurvePublicKey, this.nocCertToAsn1(nocCert), nocCert.signature);
+    }
+    static createCertificateSigningRequest(keys) {
+        const request = {
+            version: 0,
+            subject: { organization: OrganisationName_X520("CSR") },
+            publicKey: PublicKeyEcPrime256v1_X962(keys.publicKey),
+            endSignedBytes: ContextTagged(0),
+        };
+        return DerCodec.encode({
+            request,
+            signAlgorithm: EcdsaWithSHA256_X962,
+            signature: BitByteArray(Crypto.signPkcs8(keys.privateKey, DerCodec.encode(request), "der")),
+        });
+    }
+    static getPublicKeyFromCsr(csr) {
+        var _a, _b;
+        const { [ELEMENTS_KEY]: rootElements } = DerCodec.decode(csr);
+        if ((rootElements === null || rootElements === void 0 ? void 0 : rootElements.length) !== 3)
+            throw new Error("Invalid CSR data");
+        const [requestNode, signAlgorithmNode, signatureNode] = rootElements;
+        // Extract the public key
+        const { [ELEMENTS_KEY]: requestElements } = requestNode;
+        if ((requestElements === null || requestElements === void 0 ? void 0 : requestElements.length) !== 4)
+            throw new Error("Invalid CSR data");
+        const [versionNode, _subjectNode, publicKeyNode] = requestElements;
+        const requestVersion = versionNode[BYTES_KEY][0];
+        if (requestVersion !== 0)
+            throw new Error(`Unsupported request version${requestVersion}`);
+        // TODO: verify subject = { OrganisationName: "CSR" }
+        const { [ELEMENTS_KEY]: publicKeyElements } = publicKeyNode;
+        if ((publicKeyElements === null || publicKeyElements === void 0 ? void 0 : publicKeyElements.length) !== 2)
+            throw new Error("Invalid CSR data");
+        const [_publicKeyTypeNode, publicKeyBytesNode] = publicKeyElements;
+        // TODO: verify publicKey algorithm
+        const publicKey = publicKeyBytesNode[BYTES_KEY];
+        // Verify the CSR signature
+        if (!EcdsaWithSHA256_X962[OBJECT_ID_KEY][BYTES_KEY].equals((_b = (_a = signAlgorithmNode[ELEMENTS_KEY]) === null || _a === void 0 ? void 0 : _a[0]) === null || _b === void 0 ? void 0 : _b[BYTES_KEY]))
+            throw new Error("Unsupported signature type");
+        Crypto.verifySpki(publicKey, DerCodec.encode(requestNode), signatureNode[BYTES_KEY], "der");
+        return publicKey;
+    }
+}

package/dist/es/certificate/CertificationDeclarationManager.d.ts

@@ -0,0 +1,5 @@
+import { VendorId } from "../datatype/VendorId.js";
+export declare class CertificationDeclarationManager {
+    static generate(vendorId: VendorId, productId: number): Uint8Array;
+}
+//# sourceMappingURL=CertificationDeclarationManager.d.ts.map

package/dist/es/certificate/CertificationDeclarationManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CertificationDeclarationManager.d.ts","sourceRoot":"","sources":["../../../src/certificate/CertificationDeclarationManager.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAQnD,qBAAa,+BAA+B;IACxC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM;CAexD"}

package/dist/es/certificate/CertificationDeclarationManager.js

@@ -0,0 +1,26 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { CertificateManager, TlvCertificationDeclaration } from "./CertificateManager.js";
+import { ByteArray } from "../util/ByteArray.js";
+// CD Signer Certificate and Key taken from Chip-Tool repository
+const TestCMS_SignerPrivateKey = ByteArray.fromHex("30770201010420aef3484116e9481ec57be0472df41bf499064e5024ad869eca5e889802d48075a00a06082a8648ce3d030107a144034200043c398922452b55caf389c25bd1bca4656952ccb90e8869249ad8474653014cbf95d687965e036b521c51037e6b8cedefca1eb44046694fa08882eed6519decba");
+const TestCMS_SignerSubjectKeyIdentifier = ByteArray.fromHex("62FA823359ACFAA9963E1CFA140ADDF504F37160");
+export class CertificationDeclarationManager {
+    static generate(vendorId, productId) {
+        const certificationElements = TlvCertificationDeclaration.encode({
+            formatVersion: 1,
+            vendorId,
+            produceIdArray: [productId],
+            deviceTypeId: 22,
+            certificateId: "CSA00000SWC00000-00",
+            securityLevel: 0,
+            securityInformation: 0,
+            versionNumber: 1,
+            certificationType: 0,
+        });
+        return CertificateManager.CertificationDeclarationToAsn1(certificationElements, TestCMS_SignerSubjectKeyIdentifier, TestCMS_SignerPrivateKey);
+    }
+}

package/dist/es/certificate/ChipPAAuthorities.d.ts

@@ -0,0 +1,9 @@
+export declare const TestCert_PAA_NoVID_PublicKey: Uint8Array;
+export declare const TestCert_PAA_NoVID_PrivateKey: Uint8Array;
+export declare const TestCert_PAA_NoVID_SKID: Uint8Array;
+export declare const TestCert_PAA_NoVID_Cert: Uint8Array;
+export declare const TestCert_PAA_FFF1_PrivateKey: Uint8Array;
+export declare const TestCert_PAA_FFF1_PublicKey: Uint8Array;
+export declare const TestCert_PAA_FFF1_SKID: Uint8Array;
+export declare const TestCert_PAA_FFF1_Cert: Uint8Array;
+//# sourceMappingURL=ChipPAAuthorities.d.ts.map

package/dist/es/certificate/ChipPAAuthorities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ChipPAAuthorities.d.ts","sourceRoot":"","sources":["../../../src/certificate/ChipPAAuthorities.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,4BAA4B,YAA0J,CAAC;AACpM,eAAO,MAAM,6BAA6B,YAAwF,CAAC;AACnI,eAAO,MAAM,uBAAuB,YAAgE,CAAC;AACrG,eAAO,MAAM,uBAAuB,YAAk0B,CAAC;AAIv2B,eAAO,MAAM,4BAA4B,YAAwF,CAAC;AAClI,eAAO,MAAM,2BAA2B,YAA0J,CAAC;AACnM,eAAO,MAAM,sBAAsB,YAAgE,CAAC;AACpG,eAAO,MAAM,sBAAsB,YAA05B,CAAC"}

package/dist/es/certificate/ChipPAAuthorities.js

@@ -0,0 +1,17 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { ByteArray } from "../util/ByteArray.js";
+// from CHIPAttCert_test_vectors.h ...
+// PAA without Vendor ID
+export const TestCert_PAA_NoVID_PublicKey = ByteArray.fromHex("0410ef02a81a87b68121fba8d31978f807a317e50aa8a828446828914b933de8edd4a5c39c9ff71a4ce3647fd7f62653b7d2495fcba4c0f47f876880039e07204a");
+export const TestCert_PAA_NoVID_PrivateKey = ByteArray.fromHex("e1f073c934853baffb38bf7e8bdad7a0a674107c7769892a0ff2e06c1a2ef7a7");
+export const TestCert_PAA_NoVID_SKID = ByteArray.fromHex("785CE705B86B8F4E6FC793AA60CB43EA696882D5");
+export const TestCert_PAA_NoVID_Cert = ByteArray.fromHex("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");
+// PAA with Vendor ID 0xFFF1
+export const TestCert_PAA_FFF1_PrivateKey = ByteArray.fromHex("6512caecaecfc543d60623161597162f014684c565a129b62fd28c27ab1ccc50");
+export const TestCert_PAA_FFF1_PublicKey = ByteArray.fromHex("04b6cb6372887f2928f5bac81aa9d93ae2431cada9d79e242f65177ef9ced932a28ecd03baaf6a8fca184a1a503542960d453f303f1f19421d751e8f8f1a9a9b75");
+export const TestCert_PAA_FFF1_SKID = ByteArray.fromHex("6AFD22771F511FECBF1641976710DCDC31A1717E");
+export const TestCert_PAA_FFF1_Cert = ByteArray.fromHex("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");

package/dist/es/certificate/RootCertificateManager.d.ts

@@ -0,0 +1,20 @@
+/**
+ * @license
+ * Copyright 2022 The node-matter Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { ByteArray } from "../util/ByteArray.js";
+import { NodeId } from "../datatype/NodeId.js";
+import { StorageManager } from "../storage/StorageManager.js";
+export declare class RootCertificateManager {
+    private rootCertId;
+    private rootKeyPair;
+    private rootKeyIdentifier;
+    private rootCertBytes;
+    private nextCertificateId;
+    constructor(storageManager: StorageManager);
+    getRootCert(): Uint8Array;
+    private generateRootCert;
+    generateNoc(publicKey: ByteArray, fabricId: bigint, nodeId: NodeId): Uint8Array;
+}
+//# sourceMappingURL=RootCertificateManager.d.ts.map

package/dist/es/certificate/RootCertificateManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RootCertificateManager.d.ts","sourceRoot":"","sources":["../../../src/certificate/RootCertificateManager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE/C,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE9D,qBAAa,sBAAsB;IAC/B,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,WAAW,CAA0B;IAC7C,OAAO,CAAC,iBAAiB,CAAwD;IACjF,OAAO,CAAC,aAAa,CAA2B;IAChD,OAAO,CAAC,iBAAiB,CAAK;gBAElB,cAAc,EAAE,cAAc;IA8B1C,WAAW;IAIX,OAAO,CAAC,gBAAgB;IAuBxB,WAAW,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAwBrE"}