@realsee/five 6.8.0-alpha.2 → 6.8.0-alpha.21

package/five/thirdparty/jsrsasign.d.ts

@@ -0,0 +1,753 @@
+/**
+ * @license
+ * The 'jsrsasign'(RSA-Sign JavaScript Library) License
+ *
+ * Copyright (c) 2010-2021 Kenji Urushima
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a copy
+ * of this software and associated documentation files (the "Software"), to deal
+ * in the Software without restriction, including without limitation the rights
+ * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+ * copies of the Software, and to permit persons to whom the Software is
+ * furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in
+ * all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+ * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+ * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+ * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+ * THE SOFTWARE.
+ *
+ * LICENSE: MIT License
+ */
+/**
+ * @license
+ * RSA and ECC in JavaScript
+ *
+ * Copyright (c) 2003-2005  Tom Wu All Rights Reserved.
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining
+ * a copy of this software and associated documentation files (the
+ * "Software"), to deal in the Software without restriction, including
+ * without limitation the rights to use, copy, modify, merge, publish,
+ * distribute, sublicense, and/or sell copies of the Software, and to
+ * permit persons to whom the Software is furnished to do so, subject to
+ * the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be
+ * included in all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS-IS" AND WITHOUT WARRANTY OF ANY KIND,
+ * EXPRESS, IMPLIED OR OTHERWISE, INCLUDING WITHOUT LIMITATION, ANY
+ * WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
+ *
+ * IN NO EVENT SHALL TOM WU BE LIABLE FOR ANY SPECIAL, INCIDENTAL,
+ * INDIRECT OR CONSEQUENTIAL DAMAGES OF ANY KIND, OR ANY DAMAGES WHATSOEVER
+ * RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER OR NOT ADVISED OF
+ * THE POSSIBILITY OF DAMAGE, AND ON ANY THEORY OF LIABILITY, ARISING OUT
+ * OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ *
+ * In addition, the following condition applies:
+ *
+ * All redistributions must retain an intact copy of this copyright notice
+ * and disclaimer.
+ *
+ * http://www-cs-students.stanford.edu/~tjw/jsbn/
+ * LICENSE: BSD License
+ * PART: ext/{base64,jsbn,jsbn2,prgn4,rng,rsa,rsa2}
+ */
+/**
+ * @license
+ * CryptoJS
+ *
+ * Copyright (c) 2009-2013 Jeff Mott
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining
+ * a copy of this software and associated documentation files (the
+ * "Software"), to deal in the Software without restriction, including
+ * without limitation the rights to use, copy, modify, merge, publish,
+ * distribute, sublicense, and/or sell copies of the Software, and to
+ * permit persons to whom the Software is furnished to do so, subject to
+ * the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be
+ * included in all copies or substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+ * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+ * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+ * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+ * LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+ * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+ * WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+ *
+ * https://code.google.com/p/crypto-js/wiki/License
+ * PART: ext/cryptojs
+ */
+declare function hex2b64(d: any): string;
+declare function b64tohex(f: any): string;
+declare function hextopem(a: any, b: any): string;
+declare function pemtohex(a: any, b: any): string;
+
+declare namespace KJUR {
+    namespace crypto {
+        export type DSA = any;
+        export type ECDSA = any;
+    }
+}
+interface ECCPrivateKey {
+    curve: string;
+    d: string;
+}
+interface pemtohex {
+    (pem: string): string;
+}
+interface hextopem {
+    (pem: string, shead: string): string;
+}
+interface b64tohex {
+    (pem: string): string;
+}
+interface hex2b64 {
+    (pem: string): string;
+}
+/** Tom Wu's RSA Key class and extension */
+declare class RSAKey {
+    constructor();
+    /**
+     * static method to get array of hex field values from hexadecimal PKCS#5 RSA private key.
+     * @param sPEMPrivateKey PEM PKCS#1/5 s private key string
+     * @return array of field hex value
+     * @example
+     * RSAKey.getHexValueArrayOfChildrenFromHex("3082...") → ["00", "3b42...", ...]
+     */
+    static getHexValueArrayOfChildrenFromHex(sPEMPrivateKey: string): string[];
+    /**
+     * static method to get array of field positions from hexadecimal PKCS#5 RSA private key.
+     * @param sPEMPrivateKey PEM PKCS#1/5 s private key string
+     * @return array of field positions
+     * @example
+     * RSAKey.getPosArrayOfChildrenFromHex("3082...") → [8, 32, ...]
+     */
+    static getPosArrayOfChildrenFromHex(sPEMPrivateKey: string): number[];
+    /**
+     * read an ASN.1 hexadecimal string of X.509 RSA public key certificate
+     * @param h hexadecimal string of X.509 RSA public key certificate
+     * @param nthPKI nth index of publicKeyInfo. (DEFAULT: 6 for X509v3)
+     */
+    readCertPubKeyHex(h: string, nthPKI: number): void;
+    /**
+     * read an ASN.1 hexadecimal string of PKCS#1/5 plain RSA private key
+     * @param h hexadecimal string of PKCS#1/5 plain RSA private key
+     */
+    readPKCS5PrvKeyHex(h: string): void;
+    /**
+     * read an ASN.1 hexadecimal string of PKCS#5 RSA public key
+     * @param h hexadecimal string of PKCS#5 public key
+     */
+    readPKCS5PubKeyHex(h: string): void;
+    /**
+     * read an ASN.1 hexadecimal string of PKCS#8 plain RSA private key
+     * @param h hexadecimal string of PKCS#8 plain RSA private key
+     */
+    readPKCS8PrvKeyHex(h: string): void;
+    /**
+     * read an ASN.1 hexadecimal string of PKCS#8 RSA public key
+     * @param h hexadecimal string of PKCS#8 public key
+     */
+    readPKCS8PubKeyHex(h: string): void;
+    /**
+     * read PKCS#1 private key from a string
+     * @param keyPEM string of PKCS#1 private key.
+     */
+    readPrivateKeyFromPEMString(keyPEM: string): void;
+    /**
+     * verifies a sigature for a message string with RSA public key.
+     * @param sMsg message string to be verified.
+     * @param hSig hexadecimal string of signature.
+     *             non-hexadecimal characters including new lines will be ignored.
+     * @return returns 1 if valid, otherwise 0
+     */
+    verify(sMsg: string, hSig: string): 0 | 1;
+    /**
+     * verifies a sigature for a message string with RSA public key by PKCS#1 PSS sign.
+     * @param sMsg message string to be verified.
+     * @param hSig hexadecimal string of signature value
+     * @param hashAlg hash algorithm name
+     * @param sLen salt byte length from 0 to (keybytelen - hashbytelen - 2).
+     *        There are two special values:
+     *        * -1: sets the salt length to the digest length
+     *        * -2: sets the salt length to maximum permissible value
+     *           (i.e. keybytelen - hashbytelen - 2)
+     *
+     *        DEFAULT is -1. (NOTE: OpenSSL's default is -2.)
+     * @return returns true if valid, otherwise false
+     */
+    static verifyPSS(sMsg: string, hSig: string, hashAlg: string, sLen: number): boolean;
+    /**
+     * verifies a sigature for a message string with RSA public key.
+     * @param sHashHex hexadecimal hash value of message to be verified.
+     * @param hSig hexadecimal string of signature.
+     *                 non-hexadecimal charactors including new lines will be ignored.
+     * @return returns 1 if valid, otherwise 0
+     */
+    static verifyWithMessageHash(sHashHex: string, hSig: string): 0 | 1;
+    /**
+     * verifies a sigature for a hash value of message string with RSA public key by PKCS#1 PSS sign.
+     * @param hHash hexadecimal hash value of message string to be verified.
+     * @param hSig hexadecimal string of signature value
+     * @param hashAlg hash algorithm name
+     * @param sLen salt byte length from 0 to (keybytelen - hashbytelen - 2).
+     *        There are two special values:
+     *        * -1: sets the salt length to the digest length
+     *        * -2: sets the salt length to maximum permissible value
+     *           (i.e. keybytelen - hashbytelen - 2)
+     *
+     *        DEFAULT is -1 (NOTE: OpenSSL's default is -2.)
+     * @return returns true if valid, otherwise false
+     */
+    static verifyWithMessageHashPSS(hHash: string, hSig: string, hashAlg: string, sLen: number): boolean;
+}
+interface X509Extension {
+    oid: string;
+    critical: boolean;
+    vidx: number;
+}
+interface PublicKeyInfoPropOfCertPEMResult {
+    /** hexadecimal string of OID of asymmetric key algorithm */
+    algoid: string;
+    /** hexadecimal string of OID of ECC curve name or null */
+    algparam: string | null;
+    /** hexadecimal string of key in the certificate */
+    keyhex: string;
+}
+declare class X509 {
+    hex: string;
+    static readonly version: string;
+    constructor();
+    /**
+     * get format version (X.509v1 or v3 certificate)
+     * @return 1 for X509v1, 3 for X509v3, otherwise 0
+     * @description
+     * This method returns a format version of X.509 certificate.
+     * It returns 1 for X.509v1 certificate and 3 for v3 certificate.
+     * Otherwise returns 0.
+     * This method will be automatically called in
+     * `X509#readCertPEM`. After then, you can use
+     * `X509.version` parameter.
+     * @example
+     * var x = new X509();
+     * x.readCertPEM(sCertPEM);
+     * version = x.getVersion();    // 1 or 3
+     * sn = x.getSerialNumberHex(); // return string like "01ad..."
+     */
+    getVersion(): number;
+    /**
+     * get hexadecimal string of serialNumber field of certificate.
+     * @return hexadecimal string of certificate serial number
+     * @example
+     * var x = new X509();
+     * x.readCertPEM(sCertPEM);
+     * var sn = x.getSerialNumberHex(); // return string like "01ad..."
+     */
+    getSerialNumberHex(): string;
+    /**
+     * get signature algorithm name in basic field
+     * @return signature algorithm name (ex. SHA1withRSA, SHA256withECDSA)
+     * @description
+     * This method will get a name of signature algorithm field of certificate:
+     * @example
+     * var x = new X509();
+     * x.readCertPEM(sCertPEM);
+     * algName = x.getSignatureAlgorithmField();
+     */
+    getSignatureAlgorithmField(): string;
+    /**
+     * get hexadecimal string of issuer field TLV of certificate.
+     * @return hexadecial string of issuer DN ASN.1
+     * @example
+     * var x = new X509();
+     * x.readCertPEM(sCertPEM);
+     * var issuer = x.getIssuerHex(); // return string like "3013..."
+     */
+    getIssuerHex(): string;
+    /**
+     * get string of issuer field of certificate.
+     * @return issuer DN string
+     * @example
+     * var x = new X509();
+     * x.readCertPEM(sCertPEM);
+     * var issuer = x.getIssuerString(); // return string like "/C=US/O=TEST"
+     */
+    getIssuerString(): string;
+    /**
+     * get hexadecimal string of subject field of certificate.
+     * @return hexadecial string of subject DN ASN.1
+     * @example
+     * var x = new X509();
+     * x.readCertPEM(sCertPEM);
+     * var subject = x.getSubjectHex(); // return string like "3013..."
+     */
+    getSubjectHex(): string;
+    /**
+     * get string of subject field of certificate.
+     * @return subject DN string
+     * @example
+     * var x = new X509();
+     * x.readCertPEM(sCertPEM);
+     * var subject = x.getSubjectString(); // return string like "/C=US/O=TEST"
+     */
+    getSubjectString(): string;
+    /**
+     * get notBefore field string of certificate.
+     * @return not before time value (ex. "151231235959Z")
+     * @example
+     * var x = new X509();
+     * x.readCertPEM(sCertPEM);
+     * var notBefore = x.getNotBefore(); // return string like "151231235959Z"
+     */
+    getNotBefore(): string;
+    /**
+     * get notAfter field string of certificate.
+     * @return not after time value (ex. "151231235959Z")
+     * @example
+     * var x = new X509();
+     * x.readCertPEM(sCertPEM);
+     * var notAfter = x.getNotAfter(); // return string like "151231235959Z"
+     */
+    getNotAfter(): string;
+    /**
+     * get a hexadecimal string of subjectPublicKeyInfo field.
+     * @return ASN.1 SEQUENCE hexadecimal string of subjectPublicKeyInfo field
+     * @example
+     * x = new X509();
+     * x.readCertPEM(sCertPEM);
+     * hSPKI = x.getPublicKeyHex(); // return string like "30820122..."
+     */
+    getPublicKeyHex(): string;
+    /**
+     * get a string index of subjectPublicKeyInfo field for hexadecimal string certificate.
+     * @return string index of subjectPublicKeyInfo field for hexadecimal string certificate.
+     * @example
+     * x = new X509();
+     * x.readCertPEM(sCertPEM);
+     * idx = x.getPublicKeyIdx(); // return string index in x.hex parameter
+     */
+    getPublicKeyIdx(): number;
+    /**
+     * get a string index of contents of subjectPublicKeyInfo BITSTRING value from hexadecimal certificate
+     * @return string index of key contents
+     * @example
+     * x = new X509();
+     * x.readCertPEM(sCertPEM);
+     * idx = x.getPublicKeyContentIdx(); // return string index in x.hex parameter
+     */
+    getPublicKeyContentIdx(): number;
+    /**
+     * get a RSAKey/ECDSA/DSA public key object of subjectPublicKeyInfo field.
+     * @return RSAKey/ECDSA/DSA public key object of subjectPublicKeyInfo field
+     * @example
+     * x = new X509();
+     * x.readCertPEM(sCertPEM);
+     * pubkey = x.getPublicKey();
+     */
+    getPublicKey(): RSAKey | KJUR.crypto.DSA | KJUR.crypto.ECDSA;
+    /**
+     * get signature algorithm name from hexadecimal certificate data
+     * @param hCert hexadecimal string of X.509 certificate binary
+     * @return signature algorithm name (ex. SHA1withRSA, SHA256withECDSA)
+     * @description
+     * This method will get signature algorithm name of certificate:
+     * @example
+     * var x = new X509();
+     * x.readCertPEM(sCertPEM);
+     * x.getSignatureAlgorithmName() → "SHA256withRSA"
+     */
+    getSignatureAlgorithmName(): string;
+    /**
+     * get signature value in hexadecimal string
+     * @return signature value hexadecimal string without BitString unused bits
+     * @description
+     * This method will get signature value of certificate:
+     * @example
+     * var x = new X509();
+     * x.readCertPEM(sCertPEM);
+     * x.getSignatureValueHex() → "8a4c47913..."
+     */
+    getSignatureValueHex(): string;
+    /**
+     * verifies signature value by public key
+     * @param pubKey public key object or hexadecimal string of X.509 certificate
+     * @return true if signature value is valid otherwise false
+     * @description
+     * This method verifies signature value of hexadecimal string of
+     * X.509 certificate by specified public key object.
+     * @example
+     * pubKey = KEYUTIL.getKey(pemPublicKey); // or certificate
+     * x = new X509();
+     * x.readCertPEM(pemCert);
+     * x.verifySignature(pubKey) → true, false or raising exception
+     */
+    verifySignature(pubKey: string | RSAKey | KJUR.crypto.DSA | KJUR.crypto.ECDSA | ECCPrivateKey): boolean;
+    /**
+     * set array of X.509v3 extesion information such as extension OID, criticality and value index.
+     * @description
+     * This method will set an array of X.509v3 extension information having
+     * following parameters:
+     *
+     * - oid - extension OID (ex. 2.5.29.19)
+     * - critical - true or false
+     * - vidx - string index for extension value
+     *
+     * @example
+     * x = new X509();
+     * x.readCertPEM(sCertPEM); // parseExt() will also be called internally.
+     *
+     * x.aExtInfo →
+     * [ { oid: "2.5.29,19", critical: true, vidx: 2504 }, ... ]
+     */
+    parseExt(params: {
+        oid: string;
+        critical: boolean;
+        vidx: number;
+    }): void;
+    /**
+     * get a X.509v3 extesion information such as extension OID, criticality and value index for specified oid or name.
+     * @param oidOrName X.509 extension oid or name (ex. keyUsage or 2.5.29.19)
+     * @return X.509 extension information such as extension OID or value indx (see `X509#parseExt`)
+     * @description
+     * This method will get an X.509v3 extension information JSON object
+     * having extension OID, criticality and value idx for specified
+     * extension OID or name.
+     * If there is no such extension, this returns undefined.
+     * @example
+     * x = new X509();
+     * x.readCertPEM(sCertPEM); // parseExt() will also be called internally.
+     *
+     * x.getExtInfo("keyUsage") → { oid: "2.5.29.15", critical: true, vidx: 1714 }
+     * x.getExtInfo("unknownExt") → undefined
+     */
+    getExtInfo(oidOrName: string): X509Extension;
+    /**
+     * get BasicConstraints extension value as object in the certificate
+     * @return associative array which may have "cA" and "pathLen" parameters
+     * @description
+     * This method will get basic constraints extension value as object with following paramters.
+     *
+     * - cA - CA flag whether CA or not
+     * - pathLen - maximum intermediate certificate length
+     *
+     * There are use cases for return values:
+     *
+     * - {cA:true, pathLen:3} - cA flag is true and pathLen is 3
+     * - {cA:true} - cA flag is true and no pathLen
+     * - {} - basic constraints has no value in case of end entity certificate
+     * - undefined - there is no basic constraints extension
+     *
+     * @example
+     * x = new X509();
+     * x.readCertPEM(sCertPEM); // parseExt() will also be called internally.
+     * x.getExtBasicConstraints() → { cA: true, pathLen: 3 };
+     */
+    getExtBasicConstraints(): {
+        cA: boolean;
+        pathLen: number;
+    };
+    /**
+     * get KeyUsage extension value as binary string in the certificate
+     * @return binary string of key usage bits (ex. '101')
+     * @description
+     * This method will get key usage extension value
+     * as binary string such like '101'.
+     * Key usage bits definition is in the RFC 5280.
+     * If there is no key usage extension in the certificate,
+     * it returns empty string (i.e. '').
+     * @example
+     * x = new X509();
+     * x.readCertPEM(sCertPEM); // parseExt() will also be called internally.
+     * x.getExtKeyUsageBin() → '101'
+     * // 1 - digitalSignature
+     * // 0 - nonRepudiation
+     * // 1 - keyEncipherment
+     */
+    getExtKeyUsageBin(): string;
+    /**
+     * get KeyUsage extension value as names in the certificate
+     * @return comma separated string of key usage
+     * @description
+     * This method will get key usage extension value
+     * as comma separated string of usage names.
+     * If there is no key usage extension in the certificate,
+     * it returns empty string (i.e. '').
+     * @example
+     * x = new X509();
+     * x.readCertPEM(sCertPEM); // parseExt() will also be called internally.
+     * x.getExtKeyUsageString() → "digitalSignature,keyEncipherment"
+     */
+    getExtKeyUsageString(): string;
+    /**
+     * get subjectKeyIdentifier value as hexadecimal string in the certificate
+     * @return hexadecimal string of subject key identifier or null
+     * @description
+     * This method will get subject key identifier extension value
+     * as hexadecimal string.
+     * If there is this in the certificate, it returns undefined;
+     * @example
+     * x = new X509();
+     * x.readCertPEM(sCertPEM); // parseExt() will also be called internally.
+     * x.getExtSubjectKeyIdentifier() → "1b3347ab...";
+     */
+    getExtSubjectKeyIdentifier(): string;
+    /**
+     * get authorityKeyIdentifier value as JSON object in the certificate
+     * @return JSON object of authority key identifier or null
+     * @description
+     * This method will get authority key identifier extension value
+     * as JSON object.
+     * If there is this in the certificate, it returns undefined;
+     *
+     * NOTE: Currently this method only supports keyIdentifier so that
+     * authorityCertIssuer and authorityCertSerialNumber will not
+     * be return in the JSON object.
+     * @example
+     * x = new X509();
+     * x.readCertPEM(sCertPEM); // parseExt() will also be called internally.
+     * x.getExtAuthorityKeyIdentifier() → { kid: "1234abcd..." }
+     */
+    getExtAuthorityKeyIdentifier(): {
+        kid: string;
+    } | null;
+    /**
+     * get extKeyUsage value as array of name string in the certificate
+     * @return array of extended key usage ID name or oid
+     * @description
+     * This method will get extended key usage extension value
+     * as array of name or OID string.
+     * If there is this in the certificate, it returns undefined;
+     *
+     * NOTE: Supported extended key usage ID names are defined in
+     * name2oidList parameter in asn1x509.js file.
+     * @example
+     * x = new X509();
+     * x.readCertPEM(sCertPEM); // parseExt() will also be called internally.
+     * x.getExtExtKeyUsageName() → ["serverAuth", "clientAuth", "0.1.2.3.4.5"]
+     */
+    getExtExtKeyUsageName(): string[];
+    /**
+     * get subjectAltName value as array of string in the certificate
+     * @return array of alt name array
+     * @description
+     * This method will get subject alt name extension value
+     * as array of type and name.
+     * If there is this in the certificate, it returns undefined;
+     * Type of GeneralName will be shown as following:
+     *
+     * - "MAIL" - [1]rfc822Name
+     * - "DNS"  - [2]dNSName
+     * - "DN"   - [4]directoryName
+     * - "URI"  - [6]uniformResourceIdentifier
+     * - "IP"   - [7]iPAddress
+     *
+     * @example
+     * x = new X509();
+     * x.readCertPEM(sCertPEM); // parseExt() will also be called internally.
+     * x.getExtSubjectAltName2() →
+     * [["DNS",  "example.com"],
+     *  ["DNS",  "example.org"],
+     *  ["MAIL", "foo@example.com"],
+     *  ["IP",   "192.168.1.1"],
+     *  ["DN",   "/C=US/O=TEST1"]]
+     */
+    getExtSubjectAltName2(): string[][] | undefined;
+    /**
+     * get array of string for fullName URIs in cRLDistributionPoints(CDP) in the certificate
+     * @return array of fullName URIs of CDP of the certificate
+     * @description
+     * This method will get all fullName URIs of cRLDistributionPoints extension
+     * in the certificate as array of URI string.
+     * If there is this in the certificate, it returns undefined;
+     *
+     * NOTE: Currently this method supports only fullName URI so that
+     * other parameters will not be returned.
+     * @example
+     * x = new X509();
+     * x.readCertPEM(sCertPEM); // parseExt() will also be called internally.
+     * x.getExtCRLDistributionPointsURI() →
+     * ["http://example.com/aaa.crl", "http://example.org/aaa.crl"]
+     */
+    getExtCRLDistributionPointsURI(): string[] | undefined;
+    /**
+     * get AuthorityInfoAccess extension value in the certificate as associative array
+     * @return associative array of AIA extension properties
+     * @description
+     * This method will get authority info access value
+     * as associate array which has following properties:
+     *
+     * - ocsp - array of string for OCSP responder URL
+     * - caissuer - array of string for caIssuer value (i.e. CA certificates URL)
+     *
+     * If there is this in the certificate, it returns undefined;
+     * @example
+     * x = new X509();
+     * x.readCertPEM(sCertPEM); // parseExt() will also be called internally.
+     * x.getExtAIAInfo(hCert) →
+     * { ocsp:     ["http://ocsp.foo.com"],
+     *   caissuer: ["http://rep.foo.com/aaa.p8m"] }
+     */
+    getExtAIAInfo(): {
+        caissuer: string[];
+        ocsp: string[];
+    } | undefined;
+    /**
+     * get CertificatePolicies extension value in the certificate as array
+     * @return array of PolicyInformation JSON object
+     * @description
+     * This method will get certificate policies value
+     * as an array of JSON object which has following properties:
+     *
+     * - id -
+     * - cps - URI of certification practice statement
+     * - unotice - string of UserNotice explicitText
+     *
+     * If there is this extension in the certificate,
+     * it returns undefined;
+     * @example
+     * x = new X509();
+     * x.readCertPEM(sCertPEM); // parseExt() will also be called internally.
+     * x.getExtCertificatePolicies →
+     * [{ id: 1.2.3.4,
+     *    cps: "http://example.com/cps",
+     *    unotice: "explicit text" }]
+     */
+    getExtCertificatePolicies(): {
+        cps: string;
+        id: string;
+        unotice: string;
+    } | undefined;
+    /**
+     * read PEM formatted X.509 certificate from string.
+     * @param sCertPEM string for PEM formatted X.509 certificate
+     * @example
+     * x = new X509();
+     * x.readCertPEM(sCertPEM); // read certificate
+     */
+    readCertPEM(sCertPEM: string): void;
+    /**
+     * read a hexadecimal string of X.509 certificate
+     * @param sCertHex hexadecimal string of X.509 certificate
+     * @description
+     * NOTE: `X509#parseExt` will be called internally since jsrsasign 7.2.0.
+     * @example
+     * x = new X509();
+     * x.readCertHex("3082..."); // read certificate
+     */
+    readCertHex(sCertHex: string): void;
+    /**
+     * get certificate information as string.
+     * @return certificate information string
+     * @example
+     * x = new X509();
+     * x.readCertPEM(certPEM);
+     * console.log(x.getInfo());
+     * // this shows as following
+     * Basic Fields
+     *   serial number: 02ac5c266a0b409b8f0b79f2ae462577
+     *   signature algorithm: SHA1withRSA
+     *   issuer: /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert High Assurance EV Root CA
+     *   notBefore: 061110000000Z
+     *   notAfter: 311110000000Z
+     *   subject: /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert High Assurance EV Root CA
+     *   subject public key info:
+     *     key algorithm: RSA
+     *     n=c6cce573e6fbd4bb...
+     *     e=10001
+     * X509v3 Extensions:
+     *   keyUsage CRITICAL:
+     *     digitalSignature,keyCertSign,cRLSign
+     *   basicConstraints CRITICAL:
+     *     cA=true
+     *   subjectKeyIdentifier :
+     *     b13ec36903f8bf4701d498261a0802ef63642bc3
+     *   authorityKeyIdentifier :
+     *     kid=b13ec36903f8bf4701d498261a0802ef63642bc3
+     * signature algorithm: SHA1withRSA
+     * signature: 1c1a0697dcd79c9f...
+     */
+    getInfo(): string;
+    /**
+     * get distinguished name string in OpenSSL online format from hexadecimal string of ASN.1 DER X.500 name
+     * @param hex hexadecimal string of ASN.1 DER distinguished name
+     * @param idx index of hexadecimal string (DEFAULT=0)
+     * @return OpenSSL online format distinguished name
+     * @description
+     * This static method converts from a hexadecimal string of
+     * distinguished name (DN)
+     * specified by 'hex' and 'idx' to OpenSSL oneline string representation (ex. /C=US/O=a).
+     * @example
+     * X509.hex2dn("3031310b3...") → /C=US/O=a/CN=b2+OU=b1
+     */
+    static hex2dn(hex: string, idx: number): string;
+    /**
+     * get relative distinguished name string in OpenSSL online format from hexadecimal string of ASN.1 DER RDN
+     * @param hex hexadecimal string of ASN.1 DER concludes relative distinguished name
+     * @param idx index of hexadecimal string (DEFAULT=0)
+     * @return OpenSSL online format relative distinguished name
+     * @description
+     * This static method converts from a hexadecimal string of
+     * relative distinguished name (RDN)
+     * specified by 'hex' and 'idx' to LDAP string representation (ex. O=test+CN=test).
+     * NOTE: Multi-valued RDN is supported since jsnrsasign 6.2.2 x509 1.1.10.
+     * @example
+     * X509.hex2rdn("310a3008060355040a0c0161") → O=a
+     * X509.hex2rdn("31143008060355040a0c01613008060355040a0c0162") → O=a+O=b
+     */
+    static hex2rdn(hex: string, idx: number): string;
+    /**
+     * get string from hexadecimal string of ASN.1 DER AttributeTypeAndValue
+     * @param hex hexadecimal string of ASN.1 DER concludes AttributeTypeAndValue
+     * @param idx index of hexadecimal string (DEFAULT=0)
+     * @return string representation of AttributeTypeAndValue (ex. C=US)
+     * @description
+     * This static method converts from a hexadecimal string of AttributeTypeAndValue
+     * specified by 'hex' and 'idx' to LDAP string representation (ex. C=US).
+     * @example
+     * X509.hex2attrTypeValue("3008060355040a0c0161") → O=a
+     * X509.hex2attrTypeValue("300806035504060c0161") → C=a
+     * X509.hex2attrTypeValue("...3008060355040a0c0161...", 128) → O=a
+     */
+    static hex2attrTypeValue(hex: string, idx: number): string;
+    /**
+     * get RSA/DSA/ECDSA public key object from X.509 certificate hexadecimal string
+     * @param h hexadecimal string of X.509 certificate for RSA/ECDSA/DSA public key
+     * @return returns RSAKey/KJUR.crypto.{ECDSA,DSA} object of public key
+     */
+    static getPublicKeyFromCertHex(h: string): RSAKey | KJUR.crypto.DSA | KJUR.crypto.ECDSA;
+    /**
+     * get RSA/DSA/ECDSA public key object from PEM certificate string
+     * @param sCertPEM PEM formatted RSA/ECDSA/DSA X.509 certificate
+     * @return returns RSAKey/KJUR.crypto.{ECDSA,DSA} object of public key
+     * @description
+     * NOTE: DSA is also supported since x509 1.1.2.
+     */
+    static getPublicKeyFromCertPEM(sCertPEM: string): RSAKey | KJUR.crypto.DSA | KJUR.crypto.ECDSA;
+    /**
+     * get public key information from PEM certificate
+     * @param sCertPEM string of PEM formatted certificate
+     * @return hash of information for public key
+     * @description
+     * Resulted associative array has following properties:
+     *
+     * - algoid - hexadecimal string of OID of asymmetric key algorithm
+     * - algparam - hexadecimal string of OID of ECC curve name or null
+     * - keyhex - hexadecimal string of key in the certificate
+     *
+     * NOTE: X509v1 certificate is also supported since x509.js 1.1.9.
+     */
+    static getPublicKeyInfoPropOfCertPEM(sCertPEM: string): PublicKeyInfoPropOfCertPEMResult;
+}
+declare function sha256(message: string): string;
+export { X509, RSAKey, sha256, pemtohex, hextopem, b64tohex, hex2b64 };