@super-protocol/pki-cert-generator 0.0.0-nvidia-local-verifier

package/dist/chainConfig.d.ts

@@ -0,0 +1,189 @@
+import { Static } from '@sinclair/typebox';
+import { ChallengeType } from '@super-protocol/pki-common';
+declare const OwnChallengeSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<ChallengeType.TDX>, import("@sinclair/typebox").TLiteral<ChallengeType.TDXGOOGLE>, import("@sinclair/typebox").TLiteral<ChallengeType.TDXAZURE>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNP>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNPAZURE>, import("@sinclair/typebox").TLiteral<ChallengeType.Untrusted>]>;
+declare const RootCertificateEntrySchema: import("@sinclair/typebox").TObject<{
+    certRole: import("@sinclair/typebox").TLiteral<"root">;
+    ownChallenge: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<ChallengeType.TDX>, import("@sinclair/typebox").TLiteral<ChallengeType.TDXGOOGLE>, import("@sinclair/typebox").TLiteral<ChallengeType.TDXAZURE>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNP>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNPAZURE>, import("@sinclair/typebox").TLiteral<ChallengeType.Untrusted>]>;
+    networkType: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"trusted">, import("@sinclair/typebox").TLiteral<"untrusted">]>>;
+    id: import("@sinclair/typebox").TString;
+    certType: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"basic">, import("@sinclair/typebox").TLiteral<"lite">]>;
+    certParams: import("@sinclair/typebox").TObject<{
+        lifetimeDays: import("@sinclair/typebox").TNumber;
+        commonName: import("@sinclair/typebox").TString;
+        countryName: import("@sinclair/typebox").TString;
+        stateName: import("@sinclair/typebox").TString;
+        localityName: import("@sinclair/typebox").TString;
+        organizationName: import("@sinclair/typebox").TString;
+        organizationUnitName: import("@sinclair/typebox").TString;
+        alternativeDnsName: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        ocspUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    }>;
+    outputPath: import("@sinclair/typebox").TString;
+}>;
+declare const SubrootCertificateEntrySchema: import("@sinclair/typebox").TObject<{
+    certRole: import("@sinclair/typebox").TLiteral<"subroot">;
+    signer: import("@sinclair/typebox").TString;
+    ownChallenge: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<ChallengeType.TDX>, import("@sinclair/typebox").TLiteral<ChallengeType.TDXGOOGLE>, import("@sinclair/typebox").TLiteral<ChallengeType.TDXAZURE>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNP>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNPAZURE>, import("@sinclair/typebox").TLiteral<ChallengeType.Untrusted>]>>;
+    id: import("@sinclair/typebox").TString;
+    certType: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"basic">, import("@sinclair/typebox").TLiteral<"lite">]>;
+    certParams: import("@sinclair/typebox").TObject<{
+        lifetimeDays: import("@sinclair/typebox").TNumber;
+        commonName: import("@sinclair/typebox").TString;
+        countryName: import("@sinclair/typebox").TString;
+        stateName: import("@sinclair/typebox").TString;
+        localityName: import("@sinclair/typebox").TString;
+        organizationName: import("@sinclair/typebox").TString;
+        organizationUnitName: import("@sinclair/typebox").TString;
+        alternativeDnsName: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        ocspUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    }>;
+    outputPath: import("@sinclair/typebox").TString;
+}>;
+declare const EntityCertificateEntrySchema: import("@sinclair/typebox").TObject<{
+    certRole: import("@sinclair/typebox").TLiteral<"endentity">;
+    signer: import("@sinclair/typebox").TString;
+    ownChallenge: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<ChallengeType.TDX>, import("@sinclair/typebox").TLiteral<ChallengeType.TDXGOOGLE>, import("@sinclair/typebox").TLiteral<ChallengeType.TDXAZURE>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNP>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNPAZURE>, import("@sinclair/typebox").TLiteral<ChallengeType.Untrusted>]>;
+    validated: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
+    id: import("@sinclair/typebox").TString;
+    certType: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"basic">, import("@sinclair/typebox").TLiteral<"lite">]>;
+    certParams: import("@sinclair/typebox").TObject<{
+        lifetimeDays: import("@sinclair/typebox").TNumber;
+        commonName: import("@sinclair/typebox").TString;
+        countryName: import("@sinclair/typebox").TString;
+        stateName: import("@sinclair/typebox").TString;
+        localityName: import("@sinclair/typebox").TString;
+        organizationName: import("@sinclair/typebox").TString;
+        organizationUnitName: import("@sinclair/typebox").TString;
+        alternativeDnsName: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        ocspUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    }>;
+    outputPath: import("@sinclair/typebox").TString;
+}>;
+declare const ChainCertificateEntrySchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
+    certRole: import("@sinclair/typebox").TLiteral<"root">;
+    ownChallenge: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<ChallengeType.TDX>, import("@sinclair/typebox").TLiteral<ChallengeType.TDXGOOGLE>, import("@sinclair/typebox").TLiteral<ChallengeType.TDXAZURE>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNP>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNPAZURE>, import("@sinclair/typebox").TLiteral<ChallengeType.Untrusted>]>;
+    networkType: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"trusted">, import("@sinclair/typebox").TLiteral<"untrusted">]>>;
+    id: import("@sinclair/typebox").TString;
+    certType: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"basic">, import("@sinclair/typebox").TLiteral<"lite">]>;
+    certParams: import("@sinclair/typebox").TObject<{
+        lifetimeDays: import("@sinclair/typebox").TNumber;
+        commonName: import("@sinclair/typebox").TString;
+        countryName: import("@sinclair/typebox").TString;
+        stateName: import("@sinclair/typebox").TString;
+        localityName: import("@sinclair/typebox").TString;
+        organizationName: import("@sinclair/typebox").TString;
+        organizationUnitName: import("@sinclair/typebox").TString;
+        alternativeDnsName: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        ocspUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    }>;
+    outputPath: import("@sinclair/typebox").TString;
+}>, import("@sinclair/typebox").TObject<{
+    certRole: import("@sinclair/typebox").TLiteral<"subroot">;
+    signer: import("@sinclair/typebox").TString;
+    ownChallenge: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<ChallengeType.TDX>, import("@sinclair/typebox").TLiteral<ChallengeType.TDXGOOGLE>, import("@sinclair/typebox").TLiteral<ChallengeType.TDXAZURE>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNP>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNPAZURE>, import("@sinclair/typebox").TLiteral<ChallengeType.Untrusted>]>>;
+    id: import("@sinclair/typebox").TString;
+    certType: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"basic">, import("@sinclair/typebox").TLiteral<"lite">]>;
+    certParams: import("@sinclair/typebox").TObject<{
+        lifetimeDays: import("@sinclair/typebox").TNumber;
+        commonName: import("@sinclair/typebox").TString;
+        countryName: import("@sinclair/typebox").TString;
+        stateName: import("@sinclair/typebox").TString;
+        localityName: import("@sinclair/typebox").TString;
+        organizationName: import("@sinclair/typebox").TString;
+        organizationUnitName: import("@sinclair/typebox").TString;
+        alternativeDnsName: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        ocspUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    }>;
+    outputPath: import("@sinclair/typebox").TString;
+}>, import("@sinclair/typebox").TObject<{
+    certRole: import("@sinclair/typebox").TLiteral<"endentity">;
+    signer: import("@sinclair/typebox").TString;
+    ownChallenge: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<ChallengeType.TDX>, import("@sinclair/typebox").TLiteral<ChallengeType.TDXGOOGLE>, import("@sinclair/typebox").TLiteral<ChallengeType.TDXAZURE>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNP>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNPAZURE>, import("@sinclair/typebox").TLiteral<ChallengeType.Untrusted>]>;
+    validated: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
+    id: import("@sinclair/typebox").TString;
+    certType: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"basic">, import("@sinclair/typebox").TLiteral<"lite">]>;
+    certParams: import("@sinclair/typebox").TObject<{
+        lifetimeDays: import("@sinclair/typebox").TNumber;
+        commonName: import("@sinclair/typebox").TString;
+        countryName: import("@sinclair/typebox").TString;
+        stateName: import("@sinclair/typebox").TString;
+        localityName: import("@sinclair/typebox").TString;
+        organizationName: import("@sinclair/typebox").TString;
+        organizationUnitName: import("@sinclair/typebox").TString;
+        alternativeDnsName: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        ocspUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    }>;
+    outputPath: import("@sinclair/typebox").TString;
+}>]>;
+declare const ChainConfigSchema: import("@sinclair/typebox").TObject<{
+    certificates: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
+        certRole: import("@sinclair/typebox").TLiteral<"root">;
+        ownChallenge: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<ChallengeType.TDX>, import("@sinclair/typebox").TLiteral<ChallengeType.TDXGOOGLE>, import("@sinclair/typebox").TLiteral<ChallengeType.TDXAZURE>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNP>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNPAZURE>, import("@sinclair/typebox").TLiteral<ChallengeType.Untrusted>]>;
+        networkType: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"trusted">, import("@sinclair/typebox").TLiteral<"untrusted">]>>;
+        id: import("@sinclair/typebox").TString;
+        certType: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"basic">, import("@sinclair/typebox").TLiteral<"lite">]>;
+        certParams: import("@sinclair/typebox").TObject<{
+            lifetimeDays: import("@sinclair/typebox").TNumber;
+            commonName: import("@sinclair/typebox").TString;
+            countryName: import("@sinclair/typebox").TString;
+            stateName: import("@sinclair/typebox").TString;
+            localityName: import("@sinclair/typebox").TString;
+            organizationName: import("@sinclair/typebox").TString;
+            organizationUnitName: import("@sinclair/typebox").TString;
+            alternativeDnsName: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+            ocspUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        }>;
+        outputPath: import("@sinclair/typebox").TString;
+    }>, import("@sinclair/typebox").TObject<{
+        certRole: import("@sinclair/typebox").TLiteral<"subroot">;
+        signer: import("@sinclair/typebox").TString;
+        ownChallenge: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<ChallengeType.TDX>, import("@sinclair/typebox").TLiteral<ChallengeType.TDXGOOGLE>, import("@sinclair/typebox").TLiteral<ChallengeType.TDXAZURE>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNP>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNPAZURE>, import("@sinclair/typebox").TLiteral<ChallengeType.Untrusted>]>>;
+        id: import("@sinclair/typebox").TString;
+        certType: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"basic">, import("@sinclair/typebox").TLiteral<"lite">]>;
+        certParams: import("@sinclair/typebox").TObject<{
+            lifetimeDays: import("@sinclair/typebox").TNumber;
+            commonName: import("@sinclair/typebox").TString;
+            countryName: import("@sinclair/typebox").TString;
+            stateName: import("@sinclair/typebox").TString;
+            localityName: import("@sinclair/typebox").TString;
+            organizationName: import("@sinclair/typebox").TString;
+            organizationUnitName: import("@sinclair/typebox").TString;
+            alternativeDnsName: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+            ocspUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        }>;
+        outputPath: import("@sinclair/typebox").TString;
+    }>, import("@sinclair/typebox").TObject<{
+        certRole: import("@sinclair/typebox").TLiteral<"endentity">;
+        signer: import("@sinclair/typebox").TString;
+        ownChallenge: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<ChallengeType.TDX>, import("@sinclair/typebox").TLiteral<ChallengeType.TDXGOOGLE>, import("@sinclair/typebox").TLiteral<ChallengeType.TDXAZURE>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNP>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNPAZURE>, import("@sinclair/typebox").TLiteral<ChallengeType.Untrusted>]>;
+        validated: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
+        id: import("@sinclair/typebox").TString;
+        certType: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"basic">, import("@sinclair/typebox").TLiteral<"lite">]>;
+        certParams: import("@sinclair/typebox").TObject<{
+            lifetimeDays: import("@sinclair/typebox").TNumber;
+            commonName: import("@sinclair/typebox").TString;
+            countryName: import("@sinclair/typebox").TString;
+            stateName: import("@sinclair/typebox").TString;
+            localityName: import("@sinclair/typebox").TString;
+            organizationName: import("@sinclair/typebox").TString;
+            organizationUnitName: import("@sinclair/typebox").TString;
+            alternativeDnsName: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+            ocspUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        }>;
+        outputPath: import("@sinclair/typebox").TString;
+    }>]>>;
+    nvtrust: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        tmp: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        timeout: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNumber>;
+        verifier: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"remote">, import("@sinclair/typebox").TLiteral<"local">]>>;
+        rimUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        ocspUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    }>>;
+}>;
+export type OwnChallenge = Static<typeof OwnChallengeSchema>;
+export type RootCertificateEntry = Static<typeof RootCertificateEntrySchema>;
+export type SubrootCertificateEntry = Static<typeof SubrootCertificateEntrySchema>;
+export type EntityCertificateEntry = Static<typeof EntityCertificateEntrySchema>;
+export type ChainCertificateEntry = Static<typeof ChainCertificateEntrySchema>;
+export type ChainConfig = Static<typeof ChainConfigSchema>;
+export { ChainConfigSchema };

package/dist/chainConfig.js

@@ -0,0 +1,57 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ChainConfigSchema = void 0;
+const typebox_1 = require("@sinclair/typebox");
+const pki_common_1 = require("@super-protocol/pki-common");
+const NvtrustConfigSchema = typebox_1.Type.Object({
+    tmp: typebox_1.Type.Optional(typebox_1.Type.String()),
+    timeout: typebox_1.Type.Optional(typebox_1.Type.Number()),
+    verifier: typebox_1.Type.Optional(typebox_1.Type.Union([typebox_1.Type.Literal('remote'), typebox_1.Type.Literal('local')])),
+    rimUrl: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+    ocspUrl: typebox_1.Type.Optional(typebox_1.Type.String({ minLength: 1 })),
+});
+const OwnChallengeSchema = typebox_1.Type.Union([
+    typebox_1.Type.Literal('auto'),
+    typebox_1.Type.Literal(pki_common_1.ChallengeType.TDX),
+    typebox_1.Type.Literal(pki_common_1.ChallengeType.TDXGOOGLE),
+    typebox_1.Type.Literal(pki_common_1.ChallengeType.TDXAZURE),
+    typebox_1.Type.Literal(pki_common_1.ChallengeType.SEVSNP),
+    typebox_1.Type.Literal(pki_common_1.ChallengeType.SEVSNPAZURE),
+    typebox_1.Type.Literal(pki_common_1.ChallengeType.Untrusted),
+]);
+const BaseCertificateFields = {
+    id: typebox_1.Type.String(),
+    certType: pki_common_1.CertificateTypeSchema,
+    certParams: pki_common_1.PkiCertParamsSchema,
+    outputPath: typebox_1.Type.String(),
+};
+const RootCertificateEntrySchema = typebox_1.Type.Object({
+    ...BaseCertificateFields,
+    certRole: typebox_1.Type.Literal('root'),
+    ownChallenge: OwnChallengeSchema,
+    networkType: typebox_1.Type.Optional(typebox_1.Type.Union(pki_common_1.NetworkTypeSchema.anyOf, { default: 'trusted' })),
+});
+const SubrootCertificateEntrySchema = typebox_1.Type.Object({
+    ...BaseCertificateFields,
+    certRole: typebox_1.Type.Literal('subroot'),
+    signer: typebox_1.Type.String(),
+    ownChallenge: typebox_1.Type.Optional(OwnChallengeSchema),
+});
+const EntityCertificateEntrySchema = typebox_1.Type.Object({
+    ...BaseCertificateFields,
+    certRole: typebox_1.Type.Literal('endentity'),
+    signer: typebox_1.Type.String(),
+    ownChallenge: OwnChallengeSchema,
+    validated: typebox_1.Type.Optional(typebox_1.Type.Boolean({ default: false })),
+});
+const ChainCertificateEntrySchema = typebox_1.Type.Union([
+    RootCertificateEntrySchema,
+    SubrootCertificateEntrySchema,
+    EntityCertificateEntrySchema,
+]);
+const ChainConfigSchema = typebox_1.Type.Object({
+    certificates: typebox_1.Type.Array(ChainCertificateEntrySchema, { minItems: 1 }),
+    nvtrust: typebox_1.Type.Optional(NvtrustConfigSchema),
+});
+exports.ChainConfigSchema = ChainConfigSchema;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/chainGenerator.d.ts

@@ -0,0 +1,25 @@
+import { LogLevel } from '@super-protocol/pki-common';
+import { ChainConfig } from './chainConfig';
+interface ChainGeneratorOptions {
+    logLevel?: LogLevel;
+}
+export declare class ChainGenerator {
+    private readonly generated;
+    private readonly levelMatch;
+    private readonly logger;
+    private nvtrust?;
+    private static resolveLogger;
+    constructor(options?: ChainGeneratorOptions);
+    private static resolveOwnChallenge;
+    private createChallengeProvider;
+    private validateChallengeOrFail;
+    private resolveChallengeIdHex;
+    private static generateKeyPair;
+    private static buildDomains;
+    private resolveSubrootCommonName;
+    private static writeOutputFiles;
+    private processRootCertificate;
+    private processSignedCertificate;
+    generate(config: ChainConfig): Promise<void>;
+}
+export {};

package/dist/chainGenerator.js

@@ -0,0 +1,283 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ChainGenerator = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const crypto_1 = require("crypto");
+const pki_common_1 = require("@super-protocol/pki-common");
+const pki_attestation_engine_1 = require("@super-protocol/pki-attestation-engine");
+class ChainGenerator {
+    generated = new Map();
+    levelMatch = /Level\s*(\d+)/;
+    logger;
+    nvtrust;
+    static resolveLogger(options) {
+        if (options.logLevel == null) {
+            return new pki_common_1.CommonMockLog();
+        }
+        const allowedLevels = Object.values(pki_common_1.LogLevel);
+        if (!allowedLevels.includes(options.logLevel)) {
+            throw new Error(`Unsupported log level: ${options.logLevel}. Supported: ${allowedLevels.join(', ')}`);
+        }
+        return new pki_common_1.CommonPinoLog(options.logLevel);
+    }
+    constructor(options = {}) {
+        this.logger = ChainGenerator.resolveLogger(options);
+    }
+    static async resolveOwnChallenge(ownChallenge) {
+        if (ownChallenge === 'auto') {
+            return await (0, pki_attestation_engine_1.detectAttestationType)();
+        }
+        return ownChallenge;
+    }
+    async createChallengeProvider(ownChallenge) {
+        const resolved = await ChainGenerator.resolveOwnChallenge(ownChallenge);
+        switch (resolved) {
+            case pki_common_1.ChallengeType.TDX:
+            case pki_common_1.ChallengeType.TDXGOOGLE:
+                return new pki_attestation_engine_1.ChallengeProviderTdx(this.logger, resolved, this.nvtrust?.verifier);
+            case pki_common_1.ChallengeType.TDXAZURE:
+            case pki_common_1.ChallengeType.SEVSNPAZURE:
+                return new pki_attestation_engine_1.ChallengeProviderAzure(this.logger, resolved, this.nvtrust?.verifier);
+            case pki_common_1.ChallengeType.SEVSNP:
+                return new pki_attestation_engine_1.ChallengeProviderSevSnp(this.logger, this.nvtrust?.verifier);
+            case pki_common_1.ChallengeType.Untrusted:
+                return new pki_attestation_engine_1.ChallengeProviderUntrusted((0, crypto_1.randomBytes)(32), this.logger);
+            default:
+                throw new Error(`Unsupported challenge type: ${resolved}`);
+        }
+    }
+    async validateChallengeOrFail(challenge, certId, networkType) {
+        let result;
+        switch (challenge.type) {
+            case pki_common_1.ChallengeType.Untrusted: {
+                result = {
+                    success: true,
+                    validatedUserData: Buffer.from(challenge.userDataBase64, 'base64'),
+                    validatedId: Buffer.from(challenge.idBase64, 'base64'),
+                };
+                break;
+            }
+            case pki_common_1.ChallengeType.TDX:
+            case pki_common_1.ChallengeType.TDXGOOGLE: {
+                const validator = new pki_attestation_engine_1.ChallengeValidatorTdx(this.logger);
+                result = await validator.validate(challenge);
+                break;
+            }
+            case pki_common_1.ChallengeType.TDXAZURE:
+            case pki_common_1.ChallengeType.SEVSNPAZURE: {
+                const validator = new pki_attestation_engine_1.ChallengeValidatorAzure(this.logger, {
+                    networkType,
+                });
+                result = await validator.validate(challenge);
+                break;
+            }
+            case pki_common_1.ChallengeType.SEVSNP: {
+                const validator = pki_attestation_engine_1.ChallengeValidatorSevSnp.getInstance(this.logger);
+                result = await validator.validate(challenge);
+                break;
+            }
+            default:
+                throw new Error(`Unsupported challenge type for validation: ${challenge.type} (certificate: ${certId})`);
+        }
+        if (!result.success) {
+            throw new Error(`Challenge validation failed for certificate "${certId}" (${challenge.type}): ${result.error}`);
+        }
+        const nvidiaValidator = new pki_attestation_engine_1.ChallengeValidatorNvidia(this.logger, this.nvtrust);
+        const nvidiaVerification = await nvidiaValidator.validate(challenge, result.validatedUserData, networkType);
+        return { ...result, nvidiaVerification };
+    }
+    async resolveChallengeIdHex(challenge, certId, networkType) {
+        const result = await this.validateChallengeOrFail(challenge, certId, networkType);
+        return {
+            idHex: result.validatedId.toString('hex'),
+            nvidiaVerification: result.nvidiaVerification,
+        };
+    }
+    static generateKeyPair(certType) {
+        return certType === pki_common_1.CertificateType.Basic
+            ? (0, pki_common_1.generateRsaKeyPair)()
+            : (0, pki_common_1.generateEcKeyPair)();
+    }
+    static buildDomains(certParams) {
+        const domains = [certParams.commonName];
+        if (certParams.alternativeDnsName) {
+            domains.push(certParams.alternativeDnsName);
+        }
+        return domains;
+    }
+    resolveSubrootCommonName(commonName, signerCommonName) {
+        if (this.levelMatch.test(commonName)) {
+            return commonName;
+        }
+        const signerLevelMatch = signerCommonName.match(this.levelMatch);
+        if (!signerLevelMatch) {
+            return `${commonName} Level 1`;
+        }
+        const signerLevelNumber = parseInt(signerLevelMatch[1], 10);
+        if (!Number.isFinite(signerLevelNumber) || signerLevelNumber < 1) {
+            throw new Error(`Can't find SubRoot level number in CA certificate`);
+        }
+        return `${commonName} Level ${signerLevelNumber + 1}`;
+    }
+    static writeOutputFiles(outputPath, id, privateKeyPem, certPem, caPem) {
+        fs.mkdirSync(outputPath, { recursive: true });
+        fs.writeFileSync(path.join(outputPath, `${id}_key.pem`), privateKeyPem, {
+            mode: 0o600,
+        });
+        fs.writeFileSync(path.join(outputPath, `${id}_cert.pem`), certPem, {
+            mode: 0o644,
+        });
+        if (caPem) {
+            fs.writeFileSync(path.join(outputPath, `${id}_ca.pem`), caPem, {
+                mode: 0o644,
+            });
+        }
+    }
+    async processRootCertificate(cert) {
+        const networkType = cert.networkType ?? 'trusted';
+        const keyPair = ChainGenerator.generateKeyPair(cert.certType);
+        const publicKeyPem = (0, pki_common_1.getPublicKeyFromPrivate)(keyPair.privateKeyPem);
+        const domains = ChainGenerator.buildDomains(cert.certParams);
+        const challengeProvider = await this.createChallengeProvider(cert.ownChallenge);
+        const challenge = await challengeProvider.generateChallenge((0, pki_common_1.getPublicKeyPemHash)(publicKeyPem));
+        if (networkType === 'trusted' &&
+            challenge.type === pki_common_1.ChallengeType.Untrusted) {
+            throw new Error(`Root certificate "${cert.id}" cannot use untrusted challenge on trusted network`);
+        }
+        await this.validateChallengeOrFail(challenge, cert.id, networkType);
+        const certPem = await (0, pki_attestation_engine_1.generateRootCertificate)({
+            domains,
+            privateKeyPem: keyPair.privateKeyPem,
+            publicKeyPem,
+            challenge,
+            certParams: cert.certParams,
+            networkType: cert.networkType,
+        });
+        ChainGenerator.writeOutputFiles(cert.outputPath, cert.id, keyPair.privateKeyPem, certPem);
+        this.logger.info(`${cert.certRole} certificate generated: ${cert.id}`);
+        return {
+            certPem,
+            privateKeyPem: keyPair.privateKeyPem,
+            caBundle: certPem,
+            commonName: cert.certParams.commonName,
+            networkType,
+        };
+    }
+    async processSignedCertificate(cert, signer) {
+        const keyPair = ChainGenerator.generateKeyPair(cert.certType);
+        const publicKeyPem = (0, pki_common_1.getPublicKeyFromPrivate)(keyPair.privateKeyPem);
+        const certParams = cert.certRole === 'subroot'
+            ? {
+                ...cert.certParams,
+                commonName: this.resolveSubrootCommonName(cert.certParams.commonName, signer.commonName),
+            }
+            : cert.certParams;
+        const domains = ChainGenerator.buildDomains(certParams);
+        let challengeInfo;
+        const ownChallenge = cert.ownChallenge;
+        if (ownChallenge) {
+            const challengeProvider = await this.createChallengeProvider(ownChallenge);
+            const challenge = await challengeProvider.generateChallenge((0, pki_common_1.getPublicKeyPemHash)(publicKeyPem));
+            const resolvedChallenge = await this.resolveChallengeIdHex(challenge, cert.id, signer.networkType);
+            challengeInfo = {
+                challenge,
+                idHex: resolvedChallenge.idHex,
+                nvidiaVerification: resolvedChallenge.nvidiaVerification,
+            };
+        }
+        const certType = cert.certType === pki_common_1.CertificateType.Basic
+            ? pki_common_1.CertificateType.Basic
+            : pki_common_1.CertificateType.Lite;
+        const generateFn = cert.certRole === 'subroot'
+            ? pki_attestation_engine_1.generateSubrootCertificate
+            : pki_attestation_engine_1.generateEndEntityCertificate;
+        const validated = cert.certRole === 'endentity'
+            ? (cert.validated ?? false)
+            : undefined;
+        const result = await generateFn({
+            certType,
+            domains,
+            caBundle: signer.caBundle,
+            signingCertPem: signer.certPem,
+            signingPrivateKeyPem: signer.privateKeyPem,
+            certParams,
+            publicKeyPem,
+            ocspSigning: false,
+            validated,
+            challengeInfo,
+        });
+        const certs = (0, pki_common_1.splitCerts)(result.rootCertsPem).map((item) => item.trim());
+        if (certs.length === 0) {
+            throw new Error('Generated root certificates chain is empty');
+        }
+        const ca = `${certs[certs.length - 1]}\n`;
+        const intermediateChain = certs.slice(0, -1);
+        const certWithChain = [result.certPem.trim(), ...intermediateChain].join('\n') + '\n';
+        ChainGenerator.writeOutputFiles(cert.outputPath, cert.id, keyPair.privateKeyPem, certWithChain, ca);
+        this.logger.info(`${cert.certRole} certificate generated: ${cert.id}`);
+        return {
+            certPem: result.certPem,
+            privateKeyPem: keyPair.privateKeyPem,
+            caBundle: result.rootCertsPem,
+            commonName: certParams.commonName,
+            networkType: signer.networkType,
+        };
+    }
+    async generate(config) {
+        this.generated.clear();
+        this.nvtrust = config.nvtrust;
+        // Pass 1: Root certificates
+        const roots = config.certificates.filter((c) => c.certRole === 'root');
+        for (const cert of roots) {
+            const result = await this.processRootCertificate(cert);
+            this.generated.set(cert.id, result);
+        }
+        // Pass 2: Subroot certificates
+        const subroots = config.certificates.filter((c) => c.certRole === 'subroot');
+        for (const cert of subroots) {
+            const signer = this.generated.get(cert.signer);
+            if (!signer) {
+                throw new Error(`Signer "${cert.signer}" for certificate "${cert.id}" not found`);
+            }
+            const result = await this.processSignedCertificate(cert, signer);
+            this.generated.set(cert.id, result);
+        }
+        // Pass 3: End-entity certificates
+        const entities = config.certificates.filter((c) => c.certRole === 'endentity');
+        for (const cert of entities) {
+            const signer = this.generated.get(cert.signer);
+            if (!signer) {
+                throw new Error(`Signer "${cert.signer}" for certificate "${cert.id}" not found`);
+            }
+            const result = await this.processSignedCertificate(cert, signer);
+            this.generated.set(cert.id, result);
+        }
+        this.logger.info(`Chain generation complete: ${this.generated.size} certificates generated`);
+    }
+}
+exports.ChainGenerator = ChainGenerator;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/cli.js

@@ -0,0 +1,102 @@
+#!/usr/bin/env node
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const yargs_1 = __importDefault(require("yargs"));
+const helpers_1 = require("yargs/helpers");
+const pki_common_1 = require("@super-protocol/pki-common");
+const pki_attestation_engine_1 = require("@super-protocol/pki-attestation-engine");
+const configParser_1 = require("./configParser");
+const chainGenerator_1 = require("./chainGenerator");
+async function generateChain(argv) {
+    try {
+        const config = (0, configParser_1.parseChainConfig)(argv.config);
+        const generator = new chainGenerator_1.ChainGenerator({
+            logLevel: argv.logLevel,
+        });
+        await generator.generate(config);
+    }
+    catch (error) {
+        console.error('Generate chain failed:', error.message);
+        process.exit(1);
+    }
+}
+async function getAttestationType(argv) {
+    try {
+        const outputDir = path.dirname(argv.output);
+        if (outputDir !== '.') {
+            fs.mkdirSync(outputDir, { recursive: true });
+        }
+        const attestationType = await (0, pki_attestation_engine_1.detectAttestationType)();
+        fs.writeFileSync(argv.output, `${attestationType}\n`);
+    }
+    catch (error) {
+        console.error('Get attestation type failed:', error.message);
+        process.exit(1);
+    }
+}
+async function main() {
+    await (0, yargs_1.default)((0, helpers_1.hideBin)(process.argv))
+        .usage('Usage: $0 <command> [options]')
+        .option('log-level', {
+        alias: 'l',
+        describe: 'Log level: fatal, error, warn, info, debug, trace',
+        choices: Object.values(pki_common_1.LogLevel),
+        type: 'string',
+    })
+        .command('generate-chain', 'Generate a full certificate chain (root -> intermediate -> end-entity)', (yargs) => {
+        return yargs.option('config', {
+            alias: 'c',
+            describe: 'Path to chain configuration file (YAML/JSON)',
+            type: 'string',
+            demandOption: true,
+        });
+    }, generateChain)
+        .command('get-attestation-type', 'Detect attestation type and write it to a file', (yargs) => {
+        return yargs.option('output', {
+            alias: 'o',
+            describe: 'Output file path',
+            type: 'string',
+            demandOption: true,
+        });
+    }, getAttestationType)
+        .demandCommand(1, 'You must provide a command')
+        .help()
+        .alias('help', 'h')
+        .version()
+        .alias('version', 'V')
+        .strict()
+        .parse();
+}
+main().catch((error) => {
+    console.error('Error:', error.message);
+    process.exit(1);
+});
+//# sourceMappingURL=data:application/json;base64,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

package/dist/configParser.d.ts

@@ -0,0 +1,2 @@
+import { ChainConfig } from './chainConfig';
+export declare function parseChainConfig(configPath: string): ChainConfig;

package/dist/configParser.js

@@ -0,0 +1,89 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseChainConfig = void 0;
+const fs = __importStar(require("fs"));
+const yaml = __importStar(require("js-yaml"));
+const value_1 = require("@sinclair/typebox/value");
+const pki_common_1 = require("@super-protocol/pki-common");
+const chainConfig_1 = require("./chainConfig");
+function parseChainConfig(configPath) {
+    if (!fs.existsSync(configPath)) {
+        throw new Error(`Config file not found: ${configPath}`);
+    }
+    const fileContent = fs.readFileSync(configPath, 'utf-8');
+    const parsed = yaml.load(fileContent, { schema: yaml.JSON_SCHEMA });
+    value_1.Value.Default(chainConfig_1.ChainConfigSchema, parsed);
+    if (!value_1.Value.Check(chainConfig_1.ChainConfigSchema, parsed)) {
+        const errors = [...value_1.Value.Errors(chainConfig_1.ChainConfigSchema, parsed)];
+        throw new Error(`Invalid config file: ${errors.map((e) => `${e.path}: ${e.message}`).join(', ')}`);
+    }
+    validateReferences(parsed);
+    validateRootChallengeCompatibility(parsed);
+    return parsed;
+}
+exports.parseChainConfig = parseChainConfig;
+function validateRootChallengeCompatibility(config) {
+    for (const cert of config.certificates) {
+        if (cert.certRole !== 'root') {
+            continue;
+        }
+        const networkType = cert.networkType ?? 'trusted';
+        if (networkType === 'trusted' &&
+            cert.ownChallenge === pki_common_1.ChallengeType.Untrusted) {
+            throw new Error(`Root certificate "${cert.id}" cannot use untrusted challenge on trusted network`);
+        }
+    }
+}
+function validateReferences(config) {
+    const ids = config.certificates.map((c) => c.id);
+    const duplicates = ids.filter((id, i, arr) => arr.indexOf(id) !== i);
+    if (duplicates.length > 0) {
+        throw new Error(`Duplicate certificate ids: ${duplicates.join(', ')}`);
+    }
+    const idSet = new Set(ids);
+    for (const cert of config.certificates) {
+        if (cert.certRole !== 'root') {
+            if (!idSet.has(cert.signer)) {
+                throw new Error(`Certificate "${cert.id}" references unknown signer "${cert.signer}"`);
+            }
+            validateSignerType(cert, config.certificates);
+        }
+    }
+}
+function validateSignerType(cert, certificates) {
+    const signer = certificates.find((c) => c.id === cert.signer);
+    if (!signer)
+        return;
+    if (cert.certRole === 'subroot' &&
+        signer.certRole !== 'root' &&
+        signer.certRole !== 'subroot') {
+        throw new Error(`Subroot certificate "${cert.id}" must be signed by a root or subroot certificate, but signer "${signer.id}" is "${signer.certRole}"`);
+    }
+    if (cert.certRole === 'endentity' && signer.certRole !== 'subroot') {
+        throw new Error(`Entity certificate "${cert.id}" must be signed by a subroot certificate, but signer "${signer.id}" is "${signer.certRole}"`);
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export * from './chainConfig';
+export * from './chainGenerator';
+export * from './configParser';

package/dist/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./chainConfig"), exports);
+__exportStar(require("./chainGenerator"), exports);
+__exportStar(require("./configParser"), exports);
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi9zcmMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7Ozs7OztBQUFBLGdEQUE4QjtBQUM5QixtREFBaUM7QUFDakMsaURBQStCIn0=

package/package.json

@@ -0,0 +1,36 @@
+{
+  "name": "@super-protocol/pki-cert-generator",
+  "version": "0.0.0-nvidia-local-verifier",
+  "description": "CLI utility for generating PKI keys and certificates",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "pki-cert-generator": "dist/cli.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "directories": {
+    "lib": "dist"
+  },
+  "scripts": {
+    "build": "tsc -b",
+    "start": "ts-node src/cli.ts",
+    "lint": "eslint --max-warnings=0 src",
+    "lint:fix": "eslint --fix src"
+  },
+  "author": "Super Protocol",
+  "license": "ISC",
+  "dependencies": {
+    "@sinclair/typebox": "0.33.22",
+    "@super-protocol/pki-attestation-engine": "0.0.0-nvidia-local-verifier",
+    "@super-protocol/pki-common": "0.0.0-nvidia-local-verifier",
+    "js-yaml": "^4.1.0",
+    "yargs": "^17.7.2"
+  },
+  "devDependencies": {
+    "@types/js-yaml": "^4.0.9",
+    "@types/node": "^20.11.0",
+    "@types/yargs": "^17.0.33"
+  }
+}