@project-chip/matter.js 0.2.1 → 0.4.0

package/dist/cjs/MatterNode.js

@@ -0,0 +1,77 @@
+"use strict";
+/**
+ * @license
+ * Copyright 2022 The matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MatterNode = void 0;
+const Device_js_1 = require("./device/Device.js");
+/**
+ * Abstract base class that represents a node in the matter ecosystem.
+ */
+class MatterNode {
+    constructor() {
+        this.rootEndpoint = new Device_js_1.RootEndpoint();
+    }
+    /**
+     * Add a cluster to the root endpoint. This is mainly used internally and not needed to be called by the user.
+     *
+     * @param cluster ClusterServer object to add
+     */
+    addRootClusterServer(cluster) {
+        this.rootEndpoint.addClusterServer(cluster);
+    }
+    /**
+     * Get a cluster server from the root endpoint. This is mainly used internally and not needed to be called by the user.
+     *
+     * @param cluster ClusterServer to get or undefined if not existing
+     */
+    getRootClusterServer(cluster) {
+        return this.rootEndpoint.getClusterServer(cluster);
+    }
+    /**
+     * Add a cluster client to the root endpoint. This is mainly used internally and not needed to be called by the user.
+     *
+     * @param cluster ClusterClient object to add
+     */
+    addRootClusterClient(cluster) {
+        this.rootEndpoint.addClusterClient(cluster);
+    }
+    /**
+     * Get a cluster client from the root endpoint. This is mainly used internally and not needed to be called by the user.
+     *
+     * @param cluster ClusterClient to get or undefined if not existing
+     * @param interactionClient Optional InteractionClient to use for the cluster client. If not provided, the default
+     *                          InteractionClient of the root endpoint is used.
+     */
+    getRootClusterClient(cluster, interactionClient) {
+        return this.rootEndpoint.getClusterClient(cluster, interactionClient);
+    }
+    /**
+     * Get the root endpoint of the node.
+     */
+    getRootEndpoint() {
+        return this.rootEndpoint;
+    }
+    /**
+     * Add a child endpoint to the root endpoint. This is mainly used internally and not needed to be called by the user.
+     *
+     * @param endpoint Endpoint to add
+     * @protected
+     */
+    addEndpoint(endpoint) {
+        this.rootEndpoint.addChildEndpoint(endpoint);
+    }
+    /**
+     * Get a child endpoint from the root endpoint. This is mainly used internally and not needed to be called by the user.
+     *
+     * @param endpointId Endpoint ID of the child endpoint to get
+     * @protected
+     */
+    getChildEndpoint(endpointId) {
+        return this.rootEndpoint.getChildEndpoint(endpointId);
+    }
+}
+exports.MatterNode = MatterNode;
+//# sourceMappingURL=MatterNode.js.map

package/dist/cjs/MatterNode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MatterNode.js","sourceRoot":"","sources":["../../src/MatterNode.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,kDAAkD;AAQlD;;GAEG;AACH,MAAsB,UAAU;IAAhC;QACuB,iBAAY,GAAG,IAAI,wBAAY,EAAE,CAAC;IAyEzD,CAAC;IAvEG;;;;OAIG;IACH,oBAAoB,CAA2C,OAA+B;QAC1F,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;IAED;;;;OAIG;IACH,oBAAoB,CAChB,OAAgC;QAEhC,OAAO,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACvD,CAAC;IAED;;;;OAIG;IACH,oBAAoB,CAA2C,OAA+B;QAC1F,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;IAED;;;;;;OAMG;IACH,oBAAoB,CAChB,OAAgC,EAChC,iBAAqC;QAErC,OAAO,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAC1E,CAAC;IAED;;OAEG;IACH,eAAe;QACX,OAAO,IAAI,CAAC,YAAY,CAAC;IAC7B,CAAC;IAED;;;;;OAKG;IACO,WAAW,CAAC,QAAkB;QACpC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACjD,CAAC;IAED;;;;;OAKG;IACO,gBAAgB,CAAC,UAAkB;QACzC,OAAO,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC1D,CAAC;CAGJ;AA1ED,gCA0EC"}

package/dist/cjs/MatterServer.d.ts

@@ -0,0 +1,47 @@
+/**
+ * @license
+ * Copyright 2022 The matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { StorageManager } from "./storage/StorageManager.js";
+import { CommissioningServer } from "./CommissioningServer.js";
+import { CommissioningController } from "./CommissioningController.js";
+/**
+ * Main Matter server class that represents the process on the host allowing to commission and pair multiple devices
+ * by reusing MDNS scanner and Broadcaster
+ */
+export declare class MatterServer {
+    private storageManager;
+    private mdnsAnnounceInterface?;
+    private readonly nodes;
+    /**
+     * Create a new Matter server instance
+     *
+     * @param storageManager Storage manager instance to use for all nodes
+     * @param mdnsAnnounceInterface Optional interface to use for MDNS announcements. If not provided announcements will
+     *                              be sent from all network interfaces
+     */
+    constructor(storageManager: StorageManager, mdnsAnnounceInterface?: string | undefined);
+    /**
+     * Add a CommissioningServer node to the server
+     *
+     * @param commisioningServer CommissioningServer node to add
+     */
+    addCommissioningServer(commisioningServer: CommissioningServer): void;
+    /**
+     * Add a Controller node to the server
+     *
+     * @param commissioningController Controller node to add
+     */
+    addCommissioningController(commissioningController: CommissioningController): void;
+    /**
+     * Start the server and all nodes. If the nodes do not have specified a delayed announcement or pairing they will
+     * be announced/paired immediately.
+     */
+    start(): Promise<void>;
+    /**
+     * Close the server and all nodes
+     */
+    close(): Promise<void>;
+}
+//# sourceMappingURL=MatterServer.d.ts.map

package/dist/cjs/MatterServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MatterServer.d.ts","sourceRoot":"","sources":["../../src/MatterServer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAI/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAKvE;;;GAGG;AACH,qBAAa,YAAY;IAWjB,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,qBAAqB,CAAC;IAXlC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAoB;IAE1C;;;;;;OAMG;gBAES,cAAc,EAAE,cAAc,EAC9B,qBAAqB,CAAC,oBAAQ;IAG1C;;;;OAIG;IACH,sBAAsB,CAAC,kBAAkB,EAAE,mBAAmB;IAmB9D;;;;OAIG;IACH,0BAA0B,CAAC,uBAAuB,EAAE,uBAAuB;IAS3E;;;OAGG;IACG,KAAK;IAkBX;;OAEG;IACG,KAAK;CAMd"}

package/dist/cjs/MatterServer.js

@@ -0,0 +1,106 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MatterServer = void 0;
+const CommissioningServer_js_1 = require("./CommissioningServer.js");
+const MdnsBroadcaster_js_1 = require("./mdns/MdnsBroadcaster.js");
+const MdnsScanner_js_1 = require("./mdns/MdnsScanner.js");
+const CommissioningController_js_1 = require("./CommissioningController.js");
+// TODO Move Mdns instances internally
+// TODO enhance storage manager to support multiple nodes
+/**
+ * Main Matter server class that represents the process on the host allowing to commission and pair multiple devices
+ * by reusing MDNS scanner and Broadcaster
+ */
+class MatterServer {
+    /**
+     * Create a new Matter server instance
+     *
+     * @param storageManager Storage manager instance to use for all nodes
+     * @param mdnsAnnounceInterface Optional interface to use for MDNS announcements. If not provided announcements will
+     *                              be sent from all network interfaces
+     */
+    constructor(storageManager, mdnsAnnounceInterface) {
+        this.storageManager = storageManager;
+        this.mdnsAnnounceInterface = mdnsAnnounceInterface;
+        this.nodes = [];
+    }
+    /**
+     * Add a CommissioningServer node to the server
+     *
+     * @param commisioningServer CommissioningServer node to add
+     */
+    addCommissioningServer(commisioningServer) {
+        if (this.nodes.length > 0) {
+            throw new Error("Only one node is allowed for now");
+        }
+        const portCheckMap = new Map();
+        for (const node of this.nodes) {
+            if (node instanceof CommissioningServer_js_1.CommissioningServer) {
+                const nodePort = node.getPort();
+                if (portCheckMap.has(nodePort)) {
+                    throw new Error(`Port ${nodePort} is already in use by other node`);
+                }
+                portCheckMap.set(nodePort, true);
+            }
+        }
+        commisioningServer.setStorageManager(this.storageManager);
+        this.nodes.push(commisioningServer);
+    }
+    /**
+     * Add a Controller node to the server
+     *
+     * @param commissioningController Controller node to add
+     */
+    addCommissioningController(commissioningController) {
+        if (this.nodes.length > 0) {
+            throw new Error("Only one node is allowed for now");
+        }
+        commissioningController.setStorageManager(this.storageManager);
+        this.nodes.push(commissioningController);
+    }
+    /**
+     * Start the server and all nodes. If the nodes do not have specified a delayed announcement or pairing they will
+     * be announced/paired immediately.
+     */
+    start() {
+        return __awaiter(this, void 0, void 0, function* () {
+            // TODO the mdns classes will later be in this class and assigned differently!!
+            for (const node of this.nodes) {
+                if (node instanceof CommissioningServer_js_1.CommissioningServer) {
+                    node.setMdnsBroadcaster(yield MdnsBroadcaster_js_1.MdnsBroadcaster.create(node.getPort(), this.mdnsAnnounceInterface));
+                    node.setMdnsScanner(yield MdnsScanner_js_1.MdnsScanner.create());
+                    if (!node.delayedAnnouncement) {
+                        yield node.advertise();
+                    }
+                }
+                else if (node instanceof CommissioningController_js_1.CommissioningController) {
+                    node.setMdnsScanner(yield MdnsScanner_js_1.MdnsScanner.create());
+                    if (!node.delayedPairing) {
+                        yield node.connect();
+                    }
+                }
+            }
+        });
+    }
+    /**
+     * Close the server and all nodes
+     */
+    close() {
+        return __awaiter(this, void 0, void 0, function* () {
+            for (const node of this.nodes) {
+                yield node.close();
+            }
+        });
+    }
+}
+exports.MatterServer = MatterServer;
+//# sourceMappingURL=MatterServer.js.map

package/dist/cjs/MatterServer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MatterServer.js","sourceRoot":"","sources":["../../src/MatterServer.ts"],"names":[],"mappings":";;;;;;;;;;;;AAMA,qEAA+D;AAE/D,kEAA4D;AAC5D,0DAAoD;AACpD,6EAAuE;AAEvE,sCAAsC;AACtC,yDAAyD;AAEzD;;;GAGG;AACH,MAAa,YAAY;IAGrB;;;;;;OAMG;IACH,YACY,cAA8B,EAC9B,qBAA8B;QAD9B,mBAAc,GAAd,cAAc,CAAgB;QAC9B,0BAAqB,GAArB,qBAAqB,CAAS;QAXzB,UAAK,GAAiB,EAAE,CAAC;IAYtC,CAAC;IAEL;;;;OAIG;IACH,sBAAsB,CAAC,kBAAuC;QAC1D,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE;YACvB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;SACvD;QAED,MAAM,YAAY,GAAG,IAAI,GAAG,EAAmB,CAAC;QAChD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE;YAC3B,IAAI,IAAI,YAAY,4CAAmB,EAAE;gBACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;gBAChC,IAAI,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;oBAC5B,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,kCAAkC,CAAC,CAAC;iBACvE;gBACD,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;aACpC;SACJ;QACD,kBAAkB,CAAC,iBAAiB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACxC,CAAC;IAED;;;;OAIG;IACH,0BAA0B,CAAC,uBAAgD;QACvE,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE;YACvB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;SACvD;QAED,uBAAuB,CAAC,iBAAiB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC7C,CAAC;IAED;;;OAGG;IACG,KAAK;;YACP,+EAA+E;YAC/E,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE;gBAC3B,IAAI,IAAI,YAAY,4CAAmB,EAAE;oBACrC,IAAI,CAAC,kBAAkB,CAAC,MAAM,oCAAe,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;oBAClG,IAAI,CAAC,cAAc,CAAC,MAAM,4BAAW,CAAC,MAAM,EAAE,CAAC,CAAC;oBAChD,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE;wBAC3B,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;qBAC1B;iBACJ;qBAAM,IAAI,IAAI,YAAY,oDAAuB,EAAE;oBAChD,IAAI,CAAC,cAAc,CAAC,MAAM,4BAAW,CAAC,MAAM,EAAE,CAAC,CAAC;oBAChD,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;wBACtB,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;qBACxB;iBACJ;aACJ;QACL,CAAC;KAAA;IAED;;OAEG;IACG,KAAK;;YACP,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE;gBAC3B,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;aACtB;QACL,CAAC;KAAA;CAEJ;AApFD,oCAoFC"}

package/dist/cjs/certificate/AttestationCertificateManager.d.ts

@@ -0,0 +1,28 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { ByteArray } from "../util/ByteArray.js";
+import { VendorId } from "../datatype/VendorId.js";
+export declare class AttestationCertificateManager {
+    private readonly vendorId;
+    private paaCertId;
+    private readonly paaKeyPair;
+    private readonly paaKeyIdentifier;
+    private readonly paiCertId;
+    private readonly paiKeyPair;
+    private readonly paiKeyIdentifier;
+    private readonly paiCertBytes;
+    private nextCertificateId;
+    constructor(vendorId: VendorId);
+    getPAICert(): any;
+    getDACert(productId: number): {
+        keyPair: import("../crypto/Crypto.js").KeyPair;
+        dac: Uint8Array;
+    };
+    private generatePAACert;
+    private generatePAICert;
+    generateDaCert(publicKey: ByteArray, vendorId: VendorId, productId: number): Uint8Array;
+}
+//# sourceMappingURL=AttestationCertificateManager.d.ts.map

package/dist/cjs/certificate/AttestationCertificateManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AttestationCertificateManager.d.ts","sourceRoot":"","sources":["../../../src/certificate/AttestationCertificateManager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAenD,qBAAa,6BAA6B;IAiBlC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAhB7B,OAAO,CAAC,SAAS,CAAa;IAI9B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAGzB;IACF,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA2B;IAC5D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAa;IACvC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA0B;IACrD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAuD;IACxF,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IAC9B,OAAO,CAAC,iBAAiB,CAAK;gBAGT,QAAQ,EAAE,QAAQ;IAKvC,UAAU;IAIV,SAAS,CAAC,SAAS,EAAE,MAAM;;;;IAW3B,OAAO,CAAC,eAAe;IA+BvB,OAAO,CAAC,eAAe;IA+BvB,cAAc,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM;CA+B7E"}

package/dist/cjs/certificate/AttestationCertificateManager.js

@@ -0,0 +1,147 @@
+"use strict";
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AttestationCertificateManager = void 0;
+const ChipPAAuthorities_js_1 = require("./ChipPAAuthorities.js");
+const CertificateManager_js_1 = require("./CertificateManager.js");
+const Crypto_js_1 = require("../crypto/Crypto.js");
+const Time_js_1 = require("../time/Time.js");
+const ByteArray_js_1 = require("../util/ByteArray.js");
+function getPaiCommonName(vendorId, productId) {
+    return `node-matter Dev PAI 0x${vendorId.id.toString(16).toUpperCase()} ${productId === undefined ? 'no PID' : `0x${productId.toString(16).toUpperCase()}`}`;
+}
+function getDacCommonName(vendorId, productId) {
+    return `node-matter Dev DAC 0x${vendorId.id.toString(16).toUpperCase()}/0x${productId.toString(16).toUpperCase()}`;
+}
+function getPaaCommonName() {
+    // Do not change this because we use the official Matter Test PAA and the certificate uses this name!
+    return "Matter Test PAA";
+}
+class AttestationCertificateManager {
+    constructor(vendorId) {
+        this.vendorId = vendorId;
+        this.paaCertId = BigInt(0);
+        // We use the official PAA cert for now because else pairing with Chip tool do not work because
+        // only this one is the Certificate store
+        this.paaKeyPair = {
+            privateKey: ChipPAAuthorities_js_1.TestCert_PAA_NoVID_PrivateKey,
+            publicKey: ChipPAAuthorities_js_1.TestCert_PAA_NoVID_PublicKey
+        };
+        this.paaKeyIdentifier = ChipPAAuthorities_js_1.TestCert_PAA_NoVID_SKID;
+        this.paiCertId = BigInt(1);
+        this.paiKeyPair = Crypto_js_1.Crypto.createKeyPair();
+        this.paiKeyIdentifier = Crypto_js_1.Crypto.hash(this.paiKeyPair.publicKey).slice(0, 20);
+        this.nextCertificateId = 2;
+        this.paiCertBytes = this.generatePAICert(vendorId);
+    }
+    getPAICert() {
+        return this.paiCertBytes;
+    }
+    getDACert(productId) {
+        const dacKeyPair = Crypto_js_1.Crypto.createKeyPair();
+        return {
+            keyPair: dacKeyPair,
+            dac: this.generateDaCert(dacKeyPair.publicKey, this.vendorId, productId)
+        };
+    }
+    // Method unused for now because we use the official Matter Test PAA, but is functional
+    // eslint-disable-next-line @typescript-eslint/ban-ts-comment
+    // @ts-ignore
+    generatePAACert(vendorId) {
+        const now = Time_js_1.Time.get().now();
+        const unsignedCertificate = {
+            serialNumber: ByteArray_js_1.ByteArray.of(Number(this.paaCertId)),
+            signatureAlgorithm: 1 /* EcdsaWithSHA256 */,
+            publicKeyAlgorithm: 1 /* EC */,
+            ellipticCurveIdentifier: 1 /* P256v1 */,
+            issuer: {
+                commonName: getPaaCommonName(),
+                vendorId: vendorId,
+            },
+            notBefore: (0, CertificateManager_js_1.jsToMatterDate)(now, -1),
+            notAfter: (0, CertificateManager_js_1.jsToMatterDate)(now, 10),
+            subject: {
+                commonName: getPaaCommonName(),
+                vendorId: vendorId,
+            },
+            ellipticCurvePublicKey: this.paaKeyPair.publicKey,
+            extensions: {
+                basicConstraints: {
+                    isCa: true,
+                    pathLen: 1
+                },
+                keyUsage: 96,
+                subjectKeyIdentifier: this.paaKeyIdentifier,
+                authorityKeyIdentifier: this.paaKeyIdentifier,
+            }
+        };
+        return CertificateManager_js_1.CertificateManager.paaCertToAsn1(unsignedCertificate, this.paaKeyPair);
+    }
+    generatePAICert(vendorId, productId) {
+        const now = Time_js_1.Time.get().now();
+        const unsignedCertificate = {
+            serialNumber: ByteArray_js_1.ByteArray.of(Number(this.paiCertId)),
+            signatureAlgorithm: 1 /* EcdsaWithSHA256 */,
+            publicKeyAlgorithm: 1 /* EC */,
+            ellipticCurveIdentifier: 1 /* P256v1 */,
+            issuer: {
+                commonName: getPaaCommonName(),
+            },
+            notBefore: (0, CertificateManager_js_1.jsToMatterDate)(now, -1),
+            notAfter: (0, CertificateManager_js_1.jsToMatterDate)(now, 10),
+            subject: {
+                commonName: getPaiCommonName(vendorId, productId),
+                vendorId: vendorId,
+                productId: productId,
+            },
+            ellipticCurvePublicKey: this.paiKeyPair.publicKey,
+            extensions: {
+                basicConstraints: {
+                    isCa: true,
+                    pathLen: 0
+                },
+                keyUsage: 96,
+                subjectKeyIdentifier: this.paiKeyIdentifier,
+                authorityKeyIdentifier: this.paaKeyIdentifier,
+            },
+        };
+        return CertificateManager_js_1.CertificateManager.paiCertToAsn1(unsignedCertificate, this.paaKeyPair);
+    }
+    generateDaCert(publicKey, vendorId, productId) {
+        const now = Time_js_1.Time.get().now();
+        const certId = this.nextCertificateId++;
+        const unsignedCertificate = {
+            serialNumber: ByteArray_js_1.ByteArray.of(certId),
+            signatureAlgorithm: 1 /* EcdsaWithSHA256 */,
+            publicKeyAlgorithm: 1 /* EC */,
+            ellipticCurveIdentifier: 1 /* P256v1 */,
+            notBefore: (0, CertificateManager_js_1.jsToMatterDate)(now, -1),
+            notAfter: (0, CertificateManager_js_1.jsToMatterDate)(now, 10),
+            issuer: {
+                commonName: getPaiCommonName(vendorId),
+                vendorId: vendorId,
+            },
+            subject: {
+                commonName: getDacCommonName(vendorId, productId),
+                vendorId: vendorId,
+                productId: productId,
+            },
+            ellipticCurvePublicKey: publicKey,
+            extensions: {
+                basicConstraints: {
+                    isCa: false
+                },
+                keyUsage: 1,
+                subjectKeyIdentifier: Crypto_js_1.Crypto.hash(publicKey).slice(0, 20),
+                authorityKeyIdentifier: this.paiKeyIdentifier,
+            },
+        };
+        return CertificateManager_js_1.CertificateManager.daCertToAsn1(unsignedCertificate, this.paiKeyPair);
+    }
+}
+exports.AttestationCertificateManager = AttestationCertificateManager;
+//# sourceMappingURL=AttestationCertificateManager.js.map

package/dist/cjs/certificate/AttestationCertificateManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AttestationCertificateManager.js","sourceRoot":"","sources":["../../../src/certificate/AttestationCertificateManager.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,iEAA8H;AAC9H,mEAA6E;AAC7E,mDAA6C;AAC7C,6CAAuC;AACvC,uDAAiD;AAGjD,SAAS,gBAAgB,CAAC,QAAkB,EAAE,SAAkB;IAC5D,OAAO,yBAAyB,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC;AACjK,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAkB,EAAE,SAAiB;IAC3D,OAAO,yBAAyB,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;AACvH,CAAC;AAED,SAAS,gBAAgB;IACrB,qGAAqG;IACrG,OAAO,iBAAiB,CAAC;AAC7B,CAAC;AAED,MAAa,6BAA6B;IAgBtC,YACqB,QAAkB;QAAlB,aAAQ,GAAR,QAAQ,CAAU;QAhB/B,cAAS,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAE9B,+FAA+F;QAC/F,yCAAyC;QACxB,eAAU,GAAG;YAC1B,UAAU,EAAE,oDAA6B;YACzC,SAAS,EAAE,mDAA4B;SAC1C,CAAC;QACe,qBAAgB,GAAG,8CAAuB,CAAC;QAC3C,cAAS,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACtB,eAAU,GAAG,kBAAM,CAAC,aAAa,EAAE,CAAC;QACpC,qBAAgB,GAAG,kBAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEhF,sBAAiB,GAAG,CAAC,CAAC;QAK1B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IACvD,CAAC;IAED,UAAU;QACN,OAAO,IAAI,CAAC,YAAY,CAAC;IAC7B,CAAC;IAED,SAAS,CAAC,SAAiB;QACvB,MAAM,UAAU,GAAG,kBAAM,CAAC,aAAa,EAAE,CAAC;QAC1C,OAAO;YACH,OAAO,EAAE,UAAU;YACnB,GAAG,EAAE,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC;SAC3E,CAAC;IACN,CAAC;IAED,uFAAuF;IACvF,6DAA6D;IAC7D,aAAa;IACL,eAAe,CAAC,QAAmB;QACvC,MAAM,GAAG,GAAG,cAAI,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,mBAAmB,GAAG;YACxB,YAAY,EAAE,wBAAS,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAClD,kBAAkB,EAAE,CAAC,CAAC,qBAAqB;YAC3C,kBAAkB,EAAE,CAAC,CAAC,QAAQ;YAC9B,uBAAuB,EAAE,CAAC,CAAC,YAAY;YACvC,MAAM,EAAE;gBACJ,UAAU,EAAE,gBAAgB,EAAE;gBAC9B,QAAQ,EAAE,QAAQ;aACrB;YACD,SAAS,EAAE,IAAA,sCAAc,EAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAClC,QAAQ,EAAE,IAAA,sCAAc,EAAC,GAAG,EAAE,EAAE,CAAC;YACjC,OAAO,EAAE;gBACL,UAAU,EAAE,gBAAgB,EAAE;gBAC9B,QAAQ,EAAE,QAAQ;aACrB;YACD,sBAAsB,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS;YACjD,UAAU,EAAE;gBACR,gBAAgB,EAAE;oBACd,IAAI,EAAE,IAAI;oBACV,OAAO,EAAE,CAAC;iBACb;gBACD,QAAQ,EAAE,EAAE;gBACZ,oBAAoB,EAAE,IAAI,CAAC,gBAAgB;gBAC3C,sBAAsB,EAAE,IAAI,CAAC,gBAAgB;aAChD;SACJ,CAAC;QACF,OAAO,0CAAkB,CAAC,aAAa,CAAC,mBAAmB,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAClF,CAAC;IAEO,eAAe,CAAC,QAAkB,EAAE,SAAkB;QAC1D,MAAM,GAAG,GAAG,cAAI,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,mBAAmB,GAAG;YACxB,YAAY,EAAE,wBAAS,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAClD,kBAAkB,EAAE,CAAC,CAAC,qBAAqB;YAC3C,kBAAkB,EAAE,CAAC,CAAC,QAAQ;YAC9B,uBAAuB,EAAE,CAAC,CAAC,YAAY;YACvC,MAAM,EAAE;gBACJ,UAAU,EAAE,gBAAgB,EAAE;aACjC;YACD,SAAS,EAAE,IAAA,sCAAc,EAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAClC,QAAQ,EAAE,IAAA,sCAAc,EAAC,GAAG,EAAE,EAAE,CAAC;YACjC,OAAO,EAAE;gBACL,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE,SAAS,CAAC;gBACjD,QAAQ,EAAE,QAAQ;gBAClB,SAAS,EAAE,SAAS;aACvB;YACD,sBAAsB,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS;YACjD,UAAU,EAAE;gBACR,gBAAgB,EAAE;oBACd,IAAI,EAAE,IAAI;oBACV,OAAO,EAAE,CAAC;iBACb;gBACD,QAAQ,EAAE,EAAE;gBACZ,oBAAoB,EAAE,IAAI,CAAC,gBAAgB;gBAC3C,sBAAsB,EAAE,IAAI,CAAC,gBAAgB;aAChD;SACJ,CAAC;QACF,OAAO,0CAAkB,CAAC,aAAa,CAAC,mBAAmB,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAClF,CAAC;IAED,cAAc,CAAC,SAAoB,EAAE,QAAkB,EAAE,SAAiB;QACtE,MAAM,GAAG,GAAG,cAAI,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACxC,MAAM,mBAAmB,GAAG;YACxB,YAAY,EAAE,wBAAS,CAAC,EAAE,CAAC,MAAM,CAAC;YAClC,kBAAkB,EAAE,CAAC,CAAC,qBAAqB;YAC3C,kBAAkB,EAAE,CAAC,CAAC,QAAQ;YAC9B,uBAAuB,EAAE,CAAC,CAAC,YAAY;YACvC,SAAS,EAAE,IAAA,sCAAc,EAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAClC,QAAQ,EAAE,IAAA,sCAAc,EAAC,GAAG,EAAE,EAAE,CAAC;YACjC,MAAM,EAAE;gBACJ,UAAU,EAAE,gBAAgB,CAAC,QAAQ,CAAC;gBACtC,QAAQ,EAAE,QAAQ;aACrB;YACD,OAAO,EAAE;gBACL,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE,SAAS,CAAC;gBACjD,QAAQ,EAAE,QAAQ;gBAClB,SAAS,EAAE,SAAS;aACvB;YACD,sBAAsB,EAAE,SAAS;YACjC,UAAU,EAAE;gBACR,gBAAgB,EAAE;oBACd,IAAI,EAAE,KAAK;iBACd;gBACD,QAAQ,EAAE,CAAC;gBACX,oBAAoB,EAAE,kBAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBACzD,sBAAsB,EAAE,IAAI,CAAC,gBAAgB;aAChD;SACJ,CAAC;QACF,OAAO,0CAAkB,CAAC,YAAY,CAAC,mBAAmB,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACjF,CAAC;CACJ;AAlID,sEAkIC"}

package/dist/cjs/certificate/CertificateManager.d.ts

@@ -0,0 +1,202 @@
+/**
+ * @license
+ * Copyright 2022-2023 Project CHIP Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { KeyPair } from "../crypto/Crypto.js";
+import { ByteArray } from "../util/ByteArray.js";
+import { NodeId } from "../datatype/NodeId.js";
+import { VendorId } from "../datatype/VendorId.js";
+import { TypeFromSchema } from "../tlv/TlvSchema.js";
+export declare function matterToJsDate(date: number): Date;
+export declare function jsToMatterDate(date: Date, addYears?: number): number;
+/** commonName = ASN.1 OID 2.5.4.3 */
+export declare const CommonName_X520: (name: string) => any[];
+/** matter-node-id = ASN.1 OID 1.3.6.1.4.1.37244.1.1 */
+export declare const NodeId_Matter: (nodeId: NodeId) => any[];
+/** matter-rcac-id = ASN.1 OID 1.3.6.1.4.1.37244.1.4 */
+export declare const RcacId_Matter: (id: bigint | number) => any[];
+/** matter-fabric-id = ASN.1 OID 1.3.6.1.4.1.37244.1.5 */
+export declare const FabricId_Matter: (id: bigint | number) => any[];
+/** matter-oid-vid = ASN.1 OID 1.3.6.1.4.1.37244.2.1 */
+export declare const VendorId_Matter: (vendorId: VendorId) => any[];
+/** matter-oid-pid = ASN.1 OID 1.3.6.1.4.1.3724 4.2.2 */
+export declare const ProductId_Matter: (id: number) => any[];
+export declare const TlvRootCertificate: import("../tlv/TlvObject.js").ObjectSchema<{
+    serialNumber: import("../tlv/TlvObject.js").FieldType<Uint8Array>;
+    signatureAlgorithm: import("../tlv/TlvObject.js").FieldType<number>;
+    issuer: import("../tlv/TlvObject.js").FieldType<import("../tlv/TlvObject.js").TypeFromFields<{
+        issuerRcacId: import("../tlv/TlvObject.js").OptionalFieldType<number | bigint>;
+    }>>;
+    notBefore: import("../tlv/TlvObject.js").FieldType<number>;
+    notAfter: import("../tlv/TlvObject.js").FieldType<number>;
+    subject: import("../tlv/TlvObject.js").FieldType<import("../tlv/TlvObject.js").TypeFromFields<{
+        rcacId: import("../tlv/TlvObject.js").FieldType<number | bigint>;
+    }>>;
+    publicKeyAlgorithm: import("../tlv/TlvObject.js").FieldType<number>;
+    ellipticCurveIdentifier: import("../tlv/TlvObject.js").FieldType<number>;
+    ellipticCurvePublicKey: import("../tlv/TlvObject.js").FieldType<Uint8Array>;
+    extensions: import("../tlv/TlvObject.js").FieldType<import("../tlv/TlvObject.js").TypeFromFields<{
+        basicConstraints: import("../tlv/TlvObject.js").FieldType<import("../tlv/TlvObject.js").TypeFromFields<{
+            isCa: import("../tlv/TlvObject.js").FieldType<boolean>;
+            pathLen: import("../tlv/TlvObject.js").OptionalFieldType<number>;
+        }>>;
+        keyUsage: import("../tlv/TlvObject.js").FieldType<number>;
+        extendedKeyUsage: import("../tlv/TlvObject.js").OptionalFieldType<number[]>;
+        subjectKeyIdentifier: import("../tlv/TlvObject.js").FieldType<Uint8Array>;
+        authorityKeyIdentifier: import("../tlv/TlvObject.js").FieldType<Uint8Array>;
+        futureExtension: import("../tlv/TlvObject.js").OptionalFieldType<Uint8Array>;
+    }>>;
+    signature: import("../tlv/TlvObject.js").FieldType<Uint8Array>;
+}>;
+export declare const TlvOperationalCertificate: import("../tlv/TlvObject.js").ObjectSchema<{
+    serialNumber: import("../tlv/TlvObject.js").FieldType<Uint8Array>;
+    signatureAlgorithm: import("../tlv/TlvObject.js").FieldType<number>;
+    issuer: import("../tlv/TlvObject.js").FieldType<import("../tlv/TlvObject.js").TypeFromFields<{
+        issuerRcacId: import("../tlv/TlvObject.js").OptionalFieldType<number | bigint>;
+    }>>;
+    notBefore: import("../tlv/TlvObject.js").FieldType<number>;
+    notAfter: import("../tlv/TlvObject.js").FieldType<number>;
+    subject: import("../tlv/TlvObject.js").FieldType<import("../tlv/TlvObject.js").TypeFromFields<{
+        fabricId: import("../tlv/TlvObject.js").FieldType<number | bigint>;
+        nodeId: import("../tlv/TlvObject.js").FieldType<NodeId>;
+    }>>;
+    publicKeyAlgorithm: import("../tlv/TlvObject.js").FieldType<number>;
+    ellipticCurveIdentifier: import("../tlv/TlvObject.js").FieldType<number>;
+    ellipticCurvePublicKey: import("../tlv/TlvObject.js").FieldType<Uint8Array>;
+    extensions: import("../tlv/TlvObject.js").FieldType<import("../tlv/TlvObject.js").TypeFromFields<{
+        basicConstraints: import("../tlv/TlvObject.js").FieldType<import("../tlv/TlvObject.js").TypeFromFields<{
+            isCa: import("../tlv/TlvObject.js").FieldType<boolean>;
+            pathLen: import("../tlv/TlvObject.js").OptionalFieldType<number>;
+        }>>;
+        keyUsage: import("../tlv/TlvObject.js").FieldType<number>;
+        extendedKeyUsage: import("../tlv/TlvObject.js").OptionalFieldType<number[]>;
+        subjectKeyIdentifier: import("../tlv/TlvObject.js").FieldType<Uint8Array>;
+        authorityKeyIdentifier: import("../tlv/TlvObject.js").FieldType<Uint8Array>;
+        futureExtension: import("../tlv/TlvObject.js").OptionalFieldType<Uint8Array>;
+    }>>;
+    signature: import("../tlv/TlvObject.js").FieldType<Uint8Array>;
+}>;
+export interface DeviceAttestationCertificate {
+    serialNumber: ByteArray;
+    signatureAlgorithm: number;
+    issuer: {
+        commonName: string;
+        productId?: number;
+        vendorId: VendorId;
+    };
+    notBefore: number;
+    notAfter: number;
+    subject: {
+        commonName: string;
+        productId: number;
+        vendorId: VendorId;
+    };
+    publicKeyAlgorithm: number;
+    ellipticCurveIdentifier: number;
+    ellipticCurvePublicKey: ByteArray;
+    extensions: {
+        basicConstraints: {
+            isCa: boolean;
+            pathLen?: number;
+        };
+        keyUsage: number;
+        extendedKeyUsage?: number[];
+        subjectKeyIdentifier: ByteArray;
+        authorityKeyIdentifier: ByteArray;
+        futureExtension?: ByteArray;
+    };
+    signature: ByteArray;
+}
+export interface ProductAttestationIntermediateCertificate {
+    serialNumber: ByteArray;
+    signatureAlgorithm: number;
+    issuer: {
+        commonName: string;
+        vendorId?: VendorId;
+    };
+    notBefore: number;
+    notAfter: number;
+    subject: {
+        commonName: string;
+        productId?: number;
+        vendorId: VendorId;
+    };
+    publicKeyAlgorithm: number;
+    ellipticCurveIdentifier: number;
+    ellipticCurvePublicKey: ByteArray;
+    extensions: {
+        basicConstraints: {
+            isCa: boolean;
+            pathLen?: number;
+        };
+        keyUsage: number;
+        extendedKeyUsage?: number[];
+        subjectKeyIdentifier: ByteArray;
+        authorityKeyIdentifier: ByteArray;
+        futureExtension?: ByteArray;
+    };
+    signature: ByteArray;
+}
+export interface ProductAttestationAuthorityCertificate {
+    serialNumber: ByteArray;
+    signatureAlgorithm: number;
+    issuer: {
+        commonName: string;
+        vendorId?: VendorId;
+    };
+    notBefore: number;
+    notAfter: number;
+    subject: {
+        commonName: string;
+        vendorId?: VendorId;
+    };
+    publicKeyAlgorithm: number;
+    ellipticCurveIdentifier: number;
+    ellipticCurvePublicKey: ByteArray;
+    extensions: {
+        basicConstraints: {
+            isCa: boolean;
+            pathLen?: number;
+        };
+        keyUsage: number;
+        extendedKeyUsage?: number[];
+        subjectKeyIdentifier: ByteArray;
+        authorityKeyIdentifier?: ByteArray;
+        futureExtension?: ByteArray;
+    };
+    signature: ByteArray;
+}
+export declare const TlvCertificationDeclaration: import("../tlv/TlvObject.js").ObjectSchema<{
+    formatVersion: import("../tlv/TlvObject.js").FieldType<number>;
+    vendorId: import("../tlv/TlvObject.js").FieldType<VendorId>;
+    produceIdArray: import("../tlv/TlvObject.js").FieldType<number[]>;
+    deviceTypeId: import("../tlv/TlvObject.js").FieldType<number>;
+    certificateId: import("../tlv/TlvObject.js").FieldType<string>;
+    securityLevel: import("../tlv/TlvObject.js").FieldType<number>;
+    securityInformation: import("../tlv/TlvObject.js").FieldType<number>;
+    versionNumber: import("../tlv/TlvObject.js").FieldType<number>;
+    certificationType: import("../tlv/TlvObject.js").FieldType<number>;
+    dacOriginVendorId: import("../tlv/TlvObject.js").OptionalFieldType<VendorId>;
+    dacOriginProductId: import("../tlv/TlvObject.js").OptionalFieldType<number>;
+    authorizedPaaList: import("../tlv/TlvObject.js").OptionalFieldType<Uint8Array[]>;
+}>;
+export type RootCertificate = TypeFromSchema<typeof TlvRootCertificate>;
+export type OperationalCertificate = TypeFromSchema<typeof TlvOperationalCertificate>;
+type Unsigned<Type> = {
+    [Property in keyof Type as Exclude<Property, "signature">]: Type[Property];
+};
+export declare class CertificateManager {
+    static rootCertToAsn1({ serialNumber, notBefore, notAfter, issuer: { issuerRcacId }, subject: { rcacId }, ellipticCurvePublicKey, extensions: { subjectKeyIdentifier, authorityKeyIdentifier } }: Unsigned<RootCertificate>): Uint8Array;
+    static nocCertToAsn1({ serialNumber, notBefore, notAfter, issuer: { issuerRcacId }, subject: { fabricId, nodeId }, ellipticCurvePublicKey, extensions: { subjectKeyIdentifier, authorityKeyIdentifier } }: Unsigned<OperationalCertificate>): Uint8Array;
+    static daCertToAsn1({ serialNumber, notBefore, notAfter, issuer: { commonName: issuerCommonName, vendorId: issuerVendorId }, subject: { commonName: subjectCommonName, vendorId: subjectVendorId, productId: subjectProductId }, ellipticCurvePublicKey, extensions: { subjectKeyIdentifier, authorityKeyIdentifier } }: Unsigned<DeviceAttestationCertificate>, keys: KeyPair): Uint8Array;
+    static paiCertToAsn1({ serialNumber, notBefore, notAfter, issuer: { commonName: issuerCommonName, vendorId: issuerVendorId }, subject: { commonName, vendorId, productId }, ellipticCurvePublicKey, extensions: { subjectKeyIdentifier, authorityKeyIdentifier } }: Unsigned<ProductAttestationIntermediateCertificate>, keys: KeyPair): Uint8Array;
+    static paaCertToAsn1({ serialNumber, notBefore, notAfter, issuer: { commonName: issuerCommonName, vendorId: issuerVendorId }, subject: { commonName, vendorId }, ellipticCurvePublicKey, extensions: { subjectKeyIdentifier, authorityKeyIdentifier } }: Unsigned<ProductAttestationAuthorityCertificate>, keys: KeyPair): Uint8Array;
+    static CertificationDeclarationToAsn1(eContent: ByteArray, subjectKeyIdentifier: ByteArray, privateKey: ByteArray): Uint8Array;
+    static validateRootCertificate(rootCert: RootCertificate): void;
+    static validateNocCertificate(rootCert: RootCertificate, nocCert: OperationalCertificate): void;
+    static createCertificateSigningRequest(keys: KeyPair): Uint8Array;
+    static getPublicKeyFromCsr(csr: ByteArray): Uint8Array;
+}
+export {};
+//# sourceMappingURL=CertificateManager.d.ts.map

package/dist/cjs/certificate/CertificateManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CertificateManager.d.ts","sourceRoot":"","sources":["../../../src/certificate/CertificateManager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAQH,OAAO,EAAU,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAa,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAe,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAMhE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAUrD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,QAE1C;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,SAAI,UAEtD;AAgBD,qCAAqC;AACrC,eAAO,MAAM,eAAe,SAAU,MAAM,UAA2C,CAAC;AAExF,uDAAuD;AACvD,eAAO,MAAM,aAAa,WAAY,MAAM,UAA4E,CAAC;AAEzH,uDAAuD;AACvD,eAAO,MAAM,aAAa,OAAQ,MAAM,GAAG,MAAM,UAAqE,CAAC;AAEvH,yDAAyD;AACzD,eAAO,MAAM,eAAe,OAAQ,MAAM,GAAG,MAAM,UAAqE,CAAC;AAEzH,uDAAuD;AACvD,eAAO,MAAM,eAAe,aAAc,QAAQ,UAAgF,CAAC;AAEnI,wDAAwD;AACxD,eAAO,MAAM,gBAAgB,OAAQ,MAAM,UAAuE,CAAC;AAEnH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;EA0B7B,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2BpC,CAAC;AAEH,MAAM,WAAW,4BAA4B;IACzC,YAAY,EAAE,SAAS,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE;QACJ,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,QAAQ,CAAC;KACtB,CAAA;IACD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE;QACL,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,QAAQ,CAAC;KACtB,CAAA;IACD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,uBAAuB,EAAE,MAAM,CAAC;IAChC,sBAAsB,EAAE,SAAS,CAAC;IAClC,UAAU,EAAE;QACR,gBAAgB,EAAE;YACd,IAAI,EAAE,OAAO,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,CAAC;SACpB,CAAA;QACD,QAAQ,EAAE,MAAM,CAAC;QACjB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC5B,oBAAoB,EAAE,SAAS,CAAC;QAChC,sBAAsB,EAAE,SAAS,CAAC;QAClC,eAAe,CAAC,EAAE,SAAS,CAAC;KAC/B,CAAC;IACF,SAAS,EAAE,SAAS,CAAC;CACxB;AAED,MAAM,WAAW,yCAAyC;IACtD,YAAY,EAAE,SAAS,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE;QACJ,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,QAAQ,CAAC;KACvB,CAAA;IACD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE;QACL,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,QAAQ,CAAC;KACtB,CAAA;IACD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,uBAAuB,EAAE,MAAM,CAAC;IAChC,sBAAsB,EAAE,SAAS,CAAC;IAClC,UAAU,EAAE;QACR,gBAAgB,EAAE;YACd,IAAI,EAAE,OAAO,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,CAAC;SACpB,CAAA;QACD,QAAQ,EAAE,MAAM,CAAC;QACjB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC5B,oBAAoB,EAAE,SAAS,CAAC;QAChC,sBAAsB,EAAE,SAAS,CAAC;QAClC,eAAe,CAAC,EAAE,SAAS,CAAC;KAC/B,CAAA;IACD,SAAS,EAAE,SAAS,CAAC;CACxB;AAED,MAAM,WAAW,sCAAsC;IACnD,YAAY,EAAE,SAAS,CAAC;IACxB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE;QACJ,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,QAAQ,CAAC;KACvB,CAAA;IACD,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE;QACL,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,QAAQ,CAAC;KACvB,CAAA;IACD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,uBAAuB,EAAE,MAAM,CAAC;IAChC,sBAAsB,EAAE,SAAS,CAAC;IAClC,UAAU,EAAE;QACR,gBAAgB,EAAE;YACd,IAAI,EAAE,OAAO,CAAC;YACd,OAAO,CAAC,EAAE,MAAM,CAAC;SACpB,CAAA;QACD,QAAQ,EAAE,MAAM,CAAC;QACjB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC5B,oBAAoB,EAAE,SAAS,CAAC;QAChC,sBAAsB,CAAC,EAAE,SAAS,CAAC;QACnC,eAAe,CAAC,EAAE,SAAS,CAAC;KAC/B,CAAA;IACD,SAAS,EAAE,SAAS,CAAC;CACxB;AAED,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;EAatC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,cAAc,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACxE,MAAM,MAAM,sBAAsB,GAAG,cAAc,CAAC,OAAO,yBAAyB,CAAC,CAAC;AACtF,KAAK,QAAQ,CAAC,IAAI,IAAI;KAAG,QAAQ,IAAI,MAAM,IAAI,IAAI,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;CAAE,CAAC;AAErG,qBAAa,kBAAkB;IAC3B,MAAM,CAAC,cAAc,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,sBAAsB,EAAE,UAAU,EAAE,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,EAAE,EAAE,QAAQ,CAAC,eAAe,CAAC;IAyB3N,MAAM,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,sBAAsB,EAAE,UAAU,EAAE,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,EAAE,EAAE,QAAQ,CAAC,sBAAsB,CAAC;IA2B3O,MAAM,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,iBAAiB,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,gBAAgB,EAAE,EAAE,sBAAsB,EAAE,UAAU,EAAE,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,EAAE,EAAE,QAAQ,CAAC,4BAA4B,CAAC,EAAE,IAAI,EAAE,OAAO;IAmC9W,MAAM,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,sBAAsB,EAAE,UAAU,EAAE,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,EAAE,EAAE,QAAQ,CAAC,yCAAyC,CAAC,EAAE,IAAI,EAAE,OAAO;IAoCtU,MAAM,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,sBAAsB,EAAE,UAAU,EAAE,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,EAAE,EAAE,QAAQ,CAAC,sCAAsC,CAAC,EAAE,IAAI,EAAE,OAAO;IAkCxT,MAAM,CAAC,8BAA8B,CAAC,QAAQ,EAAE,SAAS,EAAE,oBAAoB,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS;IAiBjH,MAAM,CAAC,uBAAuB,CAAC,QAAQ,EAAE,eAAe;IAIxD,MAAM,CAAC,sBAAsB,CAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,EAAE,sBAAsB;IAIxF,MAAM,CAAC,+BAA+B,CAAC,IAAI,EAAE,OAAO;IAepD,MAAM,CAAC,mBAAmB,CAAC,GAAG,EAAE,SAAS;CAyB5C"}