npm - @super-protocol/pki-cert-generator - Versions diffs - 3.0.0 - Mend

@super-protocol/pki-cert-generator 3.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (11) hide show

package/dist/chainConfig.d.ts ADDED Viewed

@@ -0,0 +1,179 @@
+import { Static } from '@sinclair/typebox';
+import { ChallengeType } from '@super-protocol/pki-common';
+declare const OwnChallengeSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<ChallengeType.TDX>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNP>, import("@sinclair/typebox").TLiteral<ChallengeType.Untrusted>]>;
+declare const RootCertificateEntrySchema: import("@sinclair/typebox").TObject<{
+    certRole: import("@sinclair/typebox").TLiteral<"root">;
+    ownChallenge: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<ChallengeType.TDX>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNP>, import("@sinclair/typebox").TLiteral<ChallengeType.Untrusted>]>;
+    networkType: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"trusted">, import("@sinclair/typebox").TLiteral<"untrusted">]>>;
+    id: import("@sinclair/typebox").TString;
+    certType: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"basic">, import("@sinclair/typebox").TLiteral<"lite">]>;
+    certParams: import("@sinclair/typebox").TObject<{
+        lifetimeDays: import("@sinclair/typebox").TNumber;
+        commonName: import("@sinclair/typebox").TString;
+        countryName: import("@sinclair/typebox").TString;
+        stateName: import("@sinclair/typebox").TString;
+        localityName: import("@sinclair/typebox").TString;
+        organizationName: import("@sinclair/typebox").TString;
+        organizationUnitName: import("@sinclair/typebox").TString;
+        alternativeDnsName: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        ocspUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    }>;
+    outputPath: import("@sinclair/typebox").TString;
+}>;
+declare const SubrootCertificateEntrySchema: import("@sinclair/typebox").TObject<{
+    certRole: import("@sinclair/typebox").TLiteral<"subroot">;
+    signer: import("@sinclair/typebox").TString;
+    ownChallenge: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<ChallengeType.TDX>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNP>, import("@sinclair/typebox").TLiteral<ChallengeType.Untrusted>]>>;
+    id: import("@sinclair/typebox").TString;
+    certType: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"basic">, import("@sinclair/typebox").TLiteral<"lite">]>;
+    certParams: import("@sinclair/typebox").TObject<{
+        lifetimeDays: import("@sinclair/typebox").TNumber;
+        commonName: import("@sinclair/typebox").TString;
+        countryName: import("@sinclair/typebox").TString;
+        stateName: import("@sinclair/typebox").TString;
+        localityName: import("@sinclair/typebox").TString;
+        organizationName: import("@sinclair/typebox").TString;
+        organizationUnitName: import("@sinclair/typebox").TString;
+        alternativeDnsName: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        ocspUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    }>;
+    outputPath: import("@sinclair/typebox").TString;
+}>;
+declare const EntityCertificateEntrySchema: import("@sinclair/typebox").TObject<{
+    certRole: import("@sinclair/typebox").TLiteral<"endentity">;
+    signer: import("@sinclair/typebox").TString;
+    ownChallenge: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<ChallengeType.TDX>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNP>, import("@sinclair/typebox").TLiteral<ChallengeType.Untrusted>]>;
+    id: import("@sinclair/typebox").TString;
+    certType: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"basic">, import("@sinclair/typebox").TLiteral<"lite">]>;
+    certParams: import("@sinclair/typebox").TObject<{
+        lifetimeDays: import("@sinclair/typebox").TNumber;
+        commonName: import("@sinclair/typebox").TString;
+        countryName: import("@sinclair/typebox").TString;
+        stateName: import("@sinclair/typebox").TString;
+        localityName: import("@sinclair/typebox").TString;
+        organizationName: import("@sinclair/typebox").TString;
+        organizationUnitName: import("@sinclair/typebox").TString;
+        alternativeDnsName: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        ocspUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    }>;
+    outputPath: import("@sinclair/typebox").TString;
+}>;
+declare const ChainCertificateEntrySchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
+    certRole: import("@sinclair/typebox").TLiteral<"root">;
+    ownChallenge: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<ChallengeType.TDX>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNP>, import("@sinclair/typebox").TLiteral<ChallengeType.Untrusted>]>;
+    networkType: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"trusted">, import("@sinclair/typebox").TLiteral<"untrusted">]>>;
+    id: import("@sinclair/typebox").TString;
+    certType: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"basic">, import("@sinclair/typebox").TLiteral<"lite">]>;
+    certParams: import("@sinclair/typebox").TObject<{
+        lifetimeDays: import("@sinclair/typebox").TNumber;
+        commonName: import("@sinclair/typebox").TString;
+        countryName: import("@sinclair/typebox").TString;
+        stateName: import("@sinclair/typebox").TString;
+        localityName: import("@sinclair/typebox").TString;
+        organizationName: import("@sinclair/typebox").TString;
+        organizationUnitName: import("@sinclair/typebox").TString;
+        alternativeDnsName: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        ocspUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    }>;
+    outputPath: import("@sinclair/typebox").TString;
+}>, import("@sinclair/typebox").TObject<{
+    certRole: import("@sinclair/typebox").TLiteral<"subroot">;
+    signer: import("@sinclair/typebox").TString;
+    ownChallenge: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<ChallengeType.TDX>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNP>, import("@sinclair/typebox").TLiteral<ChallengeType.Untrusted>]>>;
+    id: import("@sinclair/typebox").TString;
+    certType: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"basic">, import("@sinclair/typebox").TLiteral<"lite">]>;
+    certParams: import("@sinclair/typebox").TObject<{
+        lifetimeDays: import("@sinclair/typebox").TNumber;
+        commonName: import("@sinclair/typebox").TString;
+        countryName: import("@sinclair/typebox").TString;
+        stateName: import("@sinclair/typebox").TString;
+        localityName: import("@sinclair/typebox").TString;
+        organizationName: import("@sinclair/typebox").TString;
+        organizationUnitName: import("@sinclair/typebox").TString;
+        alternativeDnsName: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        ocspUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    }>;
+    outputPath: import("@sinclair/typebox").TString;
+}>, import("@sinclair/typebox").TObject<{
+    certRole: import("@sinclair/typebox").TLiteral<"endentity">;
+    signer: import("@sinclair/typebox").TString;
+    ownChallenge: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<ChallengeType.TDX>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNP>, import("@sinclair/typebox").TLiteral<ChallengeType.Untrusted>]>;
+    id: import("@sinclair/typebox").TString;
+    certType: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"basic">, import("@sinclair/typebox").TLiteral<"lite">]>;
+    certParams: import("@sinclair/typebox").TObject<{
+        lifetimeDays: import("@sinclair/typebox").TNumber;
+        commonName: import("@sinclair/typebox").TString;
+        countryName: import("@sinclair/typebox").TString;
+        stateName: import("@sinclair/typebox").TString;
+        localityName: import("@sinclair/typebox").TString;
+        organizationName: import("@sinclair/typebox").TString;
+        organizationUnitName: import("@sinclair/typebox").TString;
+        alternativeDnsName: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        ocspUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    }>;
+    outputPath: import("@sinclair/typebox").TString;
+}>]>;
+declare const ChainConfigSchema: import("@sinclair/typebox").TObject<{
+    certificates: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
+        certRole: import("@sinclair/typebox").TLiteral<"root">;
+        ownChallenge: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<ChallengeType.TDX>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNP>, import("@sinclair/typebox").TLiteral<ChallengeType.Untrusted>]>;
+        networkType: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"trusted">, import("@sinclair/typebox").TLiteral<"untrusted">]>>;
+        id: import("@sinclair/typebox").TString;
+        certType: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"basic">, import("@sinclair/typebox").TLiteral<"lite">]>;
+        certParams: import("@sinclair/typebox").TObject<{
+            lifetimeDays: import("@sinclair/typebox").TNumber;
+            commonName: import("@sinclair/typebox").TString;
+            countryName: import("@sinclair/typebox").TString;
+            stateName: import("@sinclair/typebox").TString;
+            localityName: import("@sinclair/typebox").TString;
+            organizationName: import("@sinclair/typebox").TString;
+            organizationUnitName: import("@sinclair/typebox").TString;
+            alternativeDnsName: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+            ocspUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        }>;
+        outputPath: import("@sinclair/typebox").TString;
+    }>, import("@sinclair/typebox").TObject<{
+        certRole: import("@sinclair/typebox").TLiteral<"subroot">;
+        signer: import("@sinclair/typebox").TString;
+        ownChallenge: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<ChallengeType.TDX>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNP>, import("@sinclair/typebox").TLiteral<ChallengeType.Untrusted>]>>;
+        id: import("@sinclair/typebox").TString;
+        certType: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"basic">, import("@sinclair/typebox").TLiteral<"lite">]>;
+        certParams: import("@sinclair/typebox").TObject<{
+            lifetimeDays: import("@sinclair/typebox").TNumber;
+            commonName: import("@sinclair/typebox").TString;
+            countryName: import("@sinclair/typebox").TString;
+            stateName: import("@sinclair/typebox").TString;
+            localityName: import("@sinclair/typebox").TString;
+            organizationName: import("@sinclair/typebox").TString;
+            organizationUnitName: import("@sinclair/typebox").TString;
+            alternativeDnsName: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+            ocspUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        }>;
+        outputPath: import("@sinclair/typebox").TString;
+    }>, import("@sinclair/typebox").TObject<{
+        certRole: import("@sinclair/typebox").TLiteral<"endentity">;
+        signer: import("@sinclair/typebox").TString;
+        ownChallenge: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<ChallengeType.TDX>, import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNP>, import("@sinclair/typebox").TLiteral<ChallengeType.Untrusted>]>;
+        id: import("@sinclair/typebox").TString;
+        certType: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"basic">, import("@sinclair/typebox").TLiteral<"lite">]>;
+        certParams: import("@sinclair/typebox").TObject<{
+            lifetimeDays: import("@sinclair/typebox").TNumber;
+            commonName: import("@sinclair/typebox").TString;
+            countryName: import("@sinclair/typebox").TString;
+            stateName: import("@sinclair/typebox").TString;
+            localityName: import("@sinclair/typebox").TString;
+            organizationName: import("@sinclair/typebox").TString;
+            organizationUnitName: import("@sinclair/typebox").TString;
+            alternativeDnsName: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+            ocspUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        }>;
+        outputPath: import("@sinclair/typebox").TString;
+    }>]>>;
+}>;
+export type OwnChallenge = Static<typeof OwnChallengeSchema>;
+export type RootCertificateEntry = Static<typeof RootCertificateEntrySchema>;
+export type SubrootCertificateEntry = Static<typeof SubrootCertificateEntrySchema>;
+export type EntityCertificateEntry = Static<typeof EntityCertificateEntrySchema>;
+export type ChainCertificateEntry = Static<typeof ChainCertificateEntrySchema>;
+export type ChainConfig = Static<typeof ChainConfigSchema>;
+export { ChainConfigSchema };

package/dist/chainConfig.js ADDED Viewed

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ChainConfigSchema = void 0;
+const typebox_1 = require("@sinclair/typebox");
+const pki_common_1 = require("@super-protocol/pki-common");
+const OwnChallengeSchema = typebox_1.Type.Union([
+    typebox_1.Type.Literal('auto'),
+    typebox_1.Type.Literal(pki_common_1.ChallengeType.TDX),
+    typebox_1.Type.Literal(pki_common_1.ChallengeType.SEVSNP),
+    typebox_1.Type.Literal(pki_common_1.ChallengeType.Untrusted),
+]);
+const BaseCertificateFields = {
+    id: typebox_1.Type.String(),
+    certType: pki_common_1.CertificateTypeSchema,
+    certParams: pki_common_1.PkiCertParamsSchema,
+    outputPath: typebox_1.Type.String(),
+};
+const RootCertificateEntrySchema = typebox_1.Type.Object({
+    ...BaseCertificateFields,
+    certRole: typebox_1.Type.Literal('root'),
+    ownChallenge: OwnChallengeSchema,
+    networkType: typebox_1.Type.Optional(typebox_1.Type.Union(pki_common_1.NetworkTypeSchema.anyOf, { default: 'trusted' })),
+});
+const SubrootCertificateEntrySchema = typebox_1.Type.Object({
+    ...BaseCertificateFields,
+    certRole: typebox_1.Type.Literal('subroot'),
+    signer: typebox_1.Type.String(),
+    ownChallenge: typebox_1.Type.Optional(OwnChallengeSchema),
+});
+const EntityCertificateEntrySchema = typebox_1.Type.Object({
+    ...BaseCertificateFields,
+    certRole: typebox_1.Type.Literal('endentity'),
+    signer: typebox_1.Type.String(),
+    ownChallenge: OwnChallengeSchema,
+});
+const ChainCertificateEntrySchema = typebox_1.Type.Union([
+    RootCertificateEntrySchema,
+    SubrootCertificateEntrySchema,
+    EntityCertificateEntrySchema,
+]);
+const ChainConfigSchema = typebox_1.Type.Object({
+    certificates: typebox_1.Type.Array(ChainCertificateEntrySchema, { minItems: 1 }),
+});
+exports.ChainConfigSchema = ChainConfigSchema;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY2hhaW5Db25maWcuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi9zcmMvY2hhaW5Db25maWcudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7O0FBQUEsK0NBQWlEO0FBQ2pELDJEQUtvQztBQUVwQyxNQUFNLGtCQUFrQixHQUFHLGNBQUksQ0FBQyxLQUFLLENBQUM7SUFDbEMsY0FBSSxDQUFDLE9BQU8sQ0FBQyxNQUFNLENBQUM7SUFDcEIsY0FBSSxDQUFDLE9BQU8sQ0FBQywwQkFBYSxDQUFDLEdBQUcsQ0FBQztJQUMvQixjQUFJLENBQUMsT0FBTyxDQUFDLDBCQUFhLENBQUMsTUFBTSxDQUFDO0lBQ2xDLGNBQUksQ0FBQyxPQUFPLENBQUMsMEJBQWEsQ0FBQyxTQUFTLENBQUM7Q0FDeEMsQ0FBQyxDQUFDO0FBRUgsTUFBTSxxQkFBcUIsR0FBRztJQUMxQixFQUFFLEVBQUUsY0FBSSxDQUFDLE1BQU0sRUFBRTtJQUNqQixRQUFRLEVBQUUsa0NBQXFCO0lBQy9CLFVBQVUsRUFBRSxnQ0FBbUI7SUFDL0IsVUFBVSxFQUFFLGNBQUksQ0FBQyxNQUFNLEVBQUU7Q0FDNUIsQ0FBQztBQUVGLE1BQU0sMEJBQTBCLEdBQUcsY0FBSSxDQUFDLE1BQU0sQ0FBQztJQUMzQyxHQUFHLHFCQUFxQjtJQUN4QixRQUFRLEVBQUUsY0FBSSxDQUFDLE9BQU8sQ0FBQyxNQUFNLENBQUM7SUFDOUIsWUFBWSxFQUFFLGtCQUFrQjtJQUNoQyxXQUFXLEVBQUUsY0FBSSxDQUFDLFFBQVEsQ0FDdEIsY0FBSSxDQUFDLEtBQUssQ0FBQyw4QkFBaUIsQ0FBQyxLQUFLLEVBQUUsRUFBRSxPQUFPLEVBQUUsU0FBUyxFQUFFLENBQUMsQ0FDOUQ7Q0FDSixDQUFDLENBQUM7QUFFSCxNQUFNLDZCQUE2QixHQUFHLGNBQUksQ0FBQyxNQUFNLENBQUM7SUFDOUMsR0FBRyxxQkFBcUI7SUFDeEIsUUFBUSxFQUFFLGNBQUksQ0FBQyxPQUFPLENBQUMsU0FBUyxDQUFDO0lBQ2pDLE1BQU0sRUFBRSxjQUFJLENBQUMsTUFBTSxFQUFFO0lBQ3JCLFlBQVksRUFBRSxjQUFJLENBQUMsUUFBUSxDQUFDLGtCQUFrQixDQUFDO0NBQ2xELENBQUMsQ0FBQztBQUVILE1BQU0sNEJBQTRCLEdBQUcsY0FBSSxDQUFDLE1BQU0sQ0FBQztJQUM3QyxHQUFHLHFCQUFxQjtJQUN4QixRQUFRLEVBQUUsY0FBSSxDQUFDLE9BQU8sQ0FBQyxXQUFXLENBQUM7SUFDbkMsTUFBTSxFQUFFLGNBQUksQ0FBQyxNQUFNLEVBQUU7SUFDckIsWUFBWSxFQUFFLGtCQUFrQjtDQUNuQyxDQUFDLENBQUM7QUFFSCxNQUFNLDJCQUEyQixHQUFHLGNBQUksQ0FBQyxLQUFLLENBQUM7SUFDM0MsMEJBQTBCO0lBQzFCLDZCQUE2QjtJQUM3Qiw0QkFBNEI7Q0FDL0IsQ0FBQyxDQUFDO0FBRUgsTUFBTSxpQkFBaUIsR0FBRyxjQUFJLENBQUMsTUFBTSxDQUFDO0lBQ2xDLFlBQVksRUFBRSxjQUFJLENBQUMsS0FBSyxDQUFDLDJCQUEyQixFQUFFLEVBQUUsUUFBUSxFQUFFLENBQUMsRUFBRSxDQUFDO0NBQ3pFLENBQUMsQ0FBQztBQWFNLDhDQUFpQiJ9

package/dist/chainGenerator.d.ts ADDED Viewed

@@ -0,0 +1,17 @@
+import { Log } from '@super-protocol/pki-common';
+import { ChainConfig } from './chainConfig';
+export declare class ChainGenerator {
+    private readonly logger?;
+    private readonly generated;
+    private readonly levelMatch;
+    constructor(logger?: Log | undefined);
+    private static resolveOwnChallenge;
+    private createChallengeProvider;
+    private static generateKeyPair;
+    private static buildDomains;
+    private resolveSubrootCommonName;
+    private static writeOutputFiles;
+    private processRootCertificate;
+    private processSignedCertificate;
+    generate(config: ChainConfig): Promise<void>;
+}

package/dist/chainGenerator.js ADDED Viewed

@@ -0,0 +1,203 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ChainGenerator = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const crypto_1 = require("crypto");
+const pki_common_1 = require("@super-protocol/pki-common");
+const pki_attestation_engine_1 = require("@super-protocol/pki-attestation-engine");
+class ChainGenerator {
+    logger;
+    generated = new Map();
+    levelMatch = /Level\s*(\d+)/;
+    constructor(logger) {
+        this.logger = logger;
+    }
+    static resolveOwnChallenge(ownChallenge) {
+        if (ownChallenge === 'auto') {
+            return (0, pki_common_1.detectCpuType)();
+        }
+        return ownChallenge;
+    }
+    createChallengeProvider(ownChallenge) {
+        const resolved = ChainGenerator.resolveOwnChallenge(ownChallenge);
+        switch (resolved) {
+            case pki_common_1.ChallengeType.TDX:
+                return new pki_attestation_engine_1.ChallengeProviderTdx(this.logger);
+            case pki_common_1.ChallengeType.SEVSNP:
+                return new pki_attestation_engine_1.ChallengeProviderSevSnp(this.logger);
+            case pki_common_1.ChallengeType.Untrusted:
+                return new pki_attestation_engine_1.ChallengeProviderUntrusted((0, crypto_1.randomBytes)(32), this.logger);
+            default:
+                throw new Error(`Unsupported challenge type: ${resolved}`);
+        }
+    }
+    static generateKeyPair(certType) {
+        return certType === pki_common_1.CertificateType.Basic
+            ? (0, pki_common_1.generateRsaKeyPair)()
+            : (0, pki_common_1.generateEcKeyPair)();
+    }
+    static buildDomains(certParams) {
+        const domains = [certParams.commonName];
+        if (certParams.alternativeDnsName) {
+            domains.push(certParams.alternativeDnsName);
+        }
+        return domains;
+    }
+    resolveSubrootCommonName(commonName, signerCommonName) {
+        if (this.levelMatch.test(commonName)) {
+            return commonName;
+        }
+        if (!signerCommonName.includes(commonName)) {
+            return `${commonName} Level 1`;
+        }
+        const signerLevelMatch = signerCommonName.match(this.levelMatch);
+        const signerLevelNumber = signerLevelMatch
+            ? parseInt(signerLevelMatch[1], 10)
+            : null;
+        if (!signerLevelNumber) {
+            throw new Error(`Can't find SubRoot level number in CA certificate`);
+        }
+        return `${commonName} Level ${signerLevelNumber + 1}`;
+    }
+    static writeOutputFiles(outputPath, id, privateKeyPem, certPem, caPem) {
+        fs.mkdirSync(outputPath, { recursive: true });
+        fs.writeFileSync(path.join(outputPath, `${id}_key.pem`), privateKeyPem);
+        fs.writeFileSync(path.join(outputPath, `${id}_cert.pem`), certPem);
+        if (caPem) {
+            fs.writeFileSync(path.join(outputPath, `${id}_ca.pem`), caPem);
+        }
+    }
+    async processRootCertificate(cert) {
+        const keyPair = ChainGenerator.generateKeyPair(cert.certType);
+        const publicKeyPem = (0, pki_common_1.getPublicKeyFromPrivate)(keyPair.privateKeyPem);
+        const domains = ChainGenerator.buildDomains(cert.certParams);
+        const challengeProvider = this.createChallengeProvider(cert.ownChallenge);
+        const challenge = await challengeProvider.generateChallenge((0, pki_common_1.getPublicKeyPemHash)(publicKeyPem));
+        const certPem = await (0, pki_attestation_engine_1.generateRootCertificate)({
+            domains,
+            privateKeyPem: keyPair.privateKeyPem,
+            publicKeyPem,
+            challenge,
+            certParams: cert.certParams,
+            networkType: cert.networkType,
+        });
+        ChainGenerator.writeOutputFiles(cert.outputPath, cert.id, keyPair.privateKeyPem, certPem);
+        this.logger?.info(`${cert.certRole} certificate generated: ${cert.id}`);
+        return {
+            certPem,
+            privateKeyPem: keyPair.privateKeyPem,
+            caBundle: certPem,
+            commonName: cert.certParams.commonName,
+        };
+    }
+    async processSignedCertificate(cert, signer) {
+        const keyPair = ChainGenerator.generateKeyPair(cert.certType);
+        const publicKeyPem = (0, pki_common_1.getPublicKeyFromPrivate)(keyPair.privateKeyPem);
+        const certParams = cert.certRole === 'subroot'
+            ? {
+                ...cert.certParams,
+                commonName: this.resolveSubrootCommonName(cert.certParams.commonName, signer.commonName),
+            }
+            : cert.certParams;
+        const domains = ChainGenerator.buildDomains(certParams);
+        let challengeInfo;
+        const ownChallenge = cert.ownChallenge;
+        if (ownChallenge) {
+            const challengeProvider = this.createChallengeProvider(ownChallenge);
+            const challenge = await challengeProvider.generateChallenge((0, pki_common_1.getPublicKeyPemHash)(publicKeyPem));
+            challengeInfo = {
+                challenge,
+                idHex: (0, pki_common_1.getPublicKeyPemHash)(publicKeyPem).toString('hex'),
+            };
+        }
+        const certType = cert.certType === pki_common_1.CertificateType.Basic
+            ? pki_common_1.CertificateType.Basic
+            : pki_common_1.CertificateType.Lite;
+        const generateFn = cert.certRole === 'subroot'
+            ? pki_attestation_engine_1.generateSubrootCertificate
+            : pki_attestation_engine_1.generateEndEntityCertificate;
+        const result = await generateFn({
+            certType,
+            domains,
+            caBundle: signer.caBundle,
+            signingCertPem: signer.certPem,
+            signingPrivateKeyPem: signer.privateKeyPem,
+            certParams,
+            publicKeyPem,
+            ocspSigning: false,
+            validated: cert.certRole === 'endentity' ? true : undefined,
+            challengeInfo,
+        });
+        const certs = (0, pki_common_1.splitCerts)(result.rootCertsPem).map((item) => item.trim());
+        if (certs.length === 0) {
+            throw new Error('Generated root certificates chain is empty');
+        }
+        const ca = `${certs[certs.length - 1]}\n`;
+        const intermediateChain = certs.slice(0, -1);
+        const certWithChain = [result.certPem.trim(), ...intermediateChain].join('\n') + '\n';
+        ChainGenerator.writeOutputFiles(cert.outputPath, cert.id, keyPair.privateKeyPem, certWithChain, ca);
+        this.logger?.info(`${cert.certRole} certificate generated: ${cert.id}`);
+        return {
+            certPem: result.certPem,
+            privateKeyPem: keyPair.privateKeyPem,
+            caBundle: result.rootCertsPem,
+            commonName: certParams.commonName,
+        };
+    }
+    async generate(config) {
+        this.generated.clear();
+        // Pass 1: Root certificates
+        const roots = config.certificates.filter((c) => c.certRole === 'root');
+        for (const cert of roots) {
+            const result = await this.processRootCertificate(cert);
+            this.generated.set(cert.id, result);
+        }
+        // Pass 2: Subroot certificates
+        const subroots = config.certificates.filter((c) => c.certRole === 'subroot');
+        for (const cert of subroots) {
+            const signer = this.generated.get(cert.signer);
+            if (!signer) {
+                throw new Error(`Signer "${cert.signer}" for certificate "${cert.id}" not found`);
+            }
+            const result = await this.processSignedCertificate(cert, signer);
+            this.generated.set(cert.id, result);
+        }
+        // Pass 3: End-entity certificates
+        const entities = config.certificates.filter((c) => c.certRole === 'endentity');
+        for (const cert of entities) {
+            const signer = this.generated.get(cert.signer);
+            if (!signer) {
+                throw new Error(`Signer "${cert.signer}" for certificate "${cert.id}" not found`);
+            }
+            const result = await this.processSignedCertificate(cert, signer);
+            this.generated.set(cert.id, result);
+        }
+        this.logger?.info(`Chain generation complete: ${this.generated.size} certificates generated`);
+    }
+}
+exports.ChainGenerator = ChainGenerator;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiY2hhaW5HZW5lcmF0b3IuanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi9zcmMvY2hhaW5HZW5lcmF0b3IudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7QUFBQSx1Q0FBeUI7QUFDekIsMkNBQTZCO0FBQzdCLG1DQUFxQztBQUNyQywyREFhb0M7QUFDcEMsbUZBUWdEO0FBY2hELE1BQWEsY0FBYztJQUlNO0lBSFosU0FBUyxHQUFHLElBQUksR0FBRyxFQUFnQyxDQUFDO0lBQ3BELFVBQVUsR0FBRyxlQUFlLENBQUM7SUFFOUMsWUFBNkIsTUFBWTtRQUFaLFdBQU0sR0FBTixNQUFNLENBQU07SUFBRyxDQUFDO0lBRXJDLE1BQU0sQ0FBQyxtQkFBbUIsQ0FDOUIsWUFBMEI7UUFFMUIsSUFBSSxZQUFZLEtBQUssTUFBTSxFQUFFLENBQUM7WUFDMUIsT0FBTyxJQUFBLDBCQUFhLEdBQUUsQ0FBQztRQUMzQixDQUFDO1FBQ0QsT0FBTyxZQUFZLENBQUM7SUFDeEIsQ0FBQztJQUVPLHVCQUF1QixDQUMzQixZQUEwQjtRQUUxQixNQUFNLFFBQVEsR0FBRyxjQUFjLENBQUMsbUJBQW1CLENBQUMsWUFBWSxDQUFDLENBQUM7UUFFbEUsUUFBUSxRQUFRLEVBQUUsQ0FBQztZQUNmLEtBQUssMEJBQWEsQ0FBQyxHQUFHO2dCQUNsQixPQUFPLElBQUksNkNBQW9CLENBQUMsSUFBSSxDQUFDLE1BQU0sQ0FBQyxDQUFDO1lBQ2pELEtBQUssMEJBQWEsQ0FBQyxNQUFNO2dCQUNyQixPQUFPLElBQUksZ0RBQXVCLENBQUMsSUFBSSxDQUFDLE1BQU0sQ0FBQyxDQUFDO1lBQ3BELEtBQUssMEJBQWEsQ0FBQyxTQUFTO2dCQUN4QixPQUFPLElBQUksbURBQTBCLENBQ2pDLElBQUEsb0JBQVcsRUFBQyxFQUFFLENBQUMsRUFDZixJQUFJLENBQUMsTUFBTSxDQUNkLENBQUM7WUFDTjtnQkFDSSxNQUFNLElBQUksS0FBSyxDQUFDLCtCQUErQixRQUFRLEVBQUUsQ0FBQyxDQUFDO1FBQ25FLENBQUM7SUFDTCxDQUFDO0lBRU8sTUFBTSxDQUFDLGVBQWUsQ0FBQyxRQUFnQjtRQUMzQyxPQUFPLFFBQVEsS0FBSyw0QkFBZSxDQUFDLEtBQUs7WUFDckMsQ0FBQyxDQUFDLElBQUEsK0JBQWtCLEdBQUU7WUFDdEIsQ0FBQyxDQUFDLElBQUEsOEJBQWlCLEdBQUUsQ0FBQztJQUM5QixDQUFDO0lBRU8sTUFBTSxDQUFDLFlBQVksQ0FBQyxVQUF5QjtRQUNqRCxNQUFNLE9BQU8sR0FBRyxDQUFDLFVBQVUsQ0FBQyxVQUFVLENBQUMsQ0FBQztRQUN4QyxJQUFJLFVBQVUsQ0FBQyxrQkFBa0IsRUFBRSxDQUFDO1lBQ2hDLE9BQU8sQ0FBQyxJQUFJLENBQUMsVUFBVSxDQUFDLGtCQUFrQixDQUFDLENBQUM7UUFDaEQsQ0FBQztRQUNELE9BQU8sT0FBTyxDQUFDO0lBQ25CLENBQUM7SUFFTyx3QkFBd0IsQ0FDNUIsVUFBa0IsRUFDbEIsZ0JBQXdCO1FBRXhCLElBQUksSUFBSSxDQUFDLFVBQVUsQ0FBQyxJQUFJLENBQUMsVUFBVSxDQUFDLEVBQUUsQ0FBQztZQUNuQyxPQUFPLFVBQVUsQ0FBQztRQUN0QixDQUFDO1FBRUQsSUFBSSxDQUFDLGdCQUFnQixDQUFDLFFBQVEsQ0FBQyxVQUFVLENBQUMsRUFBRSxDQUFDO1lBQ3pDLE9BQU8sR0FBRyxVQUFVLFVBQVUsQ0FBQztRQUNuQyxDQUFDO1FBRUQsTUFBTSxnQkFBZ0IsR0FBRyxnQkFBZ0IsQ0FBQyxLQUFLLENBQUMsSUFBSSxDQUFDLFVBQVUsQ0FBQyxDQUFDO1FBQ2pFLE1BQU0saUJBQWlCLEdBQUcsZ0JBQWdCO1lBQ3RDLENBQUMsQ0FBQyxRQUFRLENBQUMsZ0JBQWdCLENBQUMsQ0FBQyxDQUFDLEVBQUUsRUFBRSxDQUFDO1lBQ25DLENBQUMsQ0FBQyxJQUFJLENBQUM7UUFFWCxJQUFJLENBQUMsaUJBQWlCLEVBQUUsQ0FBQztZQUNyQixNQUFNLElBQUksS0FBSyxDQUNYLG1EQUFtRCxDQUN0RCxDQUFDO1FBQ04sQ0FBQztRQUVELE9BQU8sR0FBRyxVQUFVLFVBQVUsaUJBQWlCLEdBQUcsQ0FBQyxFQUFFLENBQUM7SUFDMUQsQ0FBQztJQUVPLE1BQU0sQ0FBQyxnQkFBZ0IsQ0FDM0IsVUFBa0IsRUFDbEIsRUFBVSxFQUNWLGFBQXFCLEVBQ3JCLE9BQWUsRUFDZixLQUFjO1FBRWQsRUFBRSxDQUFDLFNBQVMsQ0FBQyxVQUFVLEVBQUUsRUFBRSxTQUFTLEVBQUUsSUFBSSxFQUFFLENBQUMsQ0FBQztRQUU5QyxFQUFFLENBQUMsYUFBYSxDQUFDLElBQUksQ0FBQyxJQUFJLENBQUMsVUFBVSxFQUFFLEdBQUcsRUFBRSxVQUFVLENBQUMsRUFBRSxhQUFhLENBQUMsQ0FBQztRQUN4RSxFQUFFLENBQUMsYUFBYSxDQUFDLElBQUksQ0FBQyxJQUFJLENBQUMsVUFBVSxFQUFFLEdBQUcsRUFBRSxXQUFXLENBQUMsRUFBRSxPQUFPLENBQUMsQ0FBQztRQUVuRSxJQUFJLEtBQUssRUFBRSxDQUFDO1lBQ1IsRUFBRSxDQUFDLGFBQWEsQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDLFVBQVUsRUFBRSxHQUFHLEVBQUUsU0FBUyxDQUFDLEVBQUUsS0FBSyxDQUFDLENBQUM7UUFDbkUsQ0FBQztJQUNMLENBQUM7SUFFTyxLQUFLLENBQUMsc0JBQXNCLENBQ2hDLElBQWtEO1FBRWxELE1BQU0sT0FBTyxHQUFHLGNBQWMsQ0FBQyxlQUFlLENBQUMsSUFBSSxDQUFDLFFBQVEsQ0FBQyxDQUFDO1FBQzlELE1BQU0sWUFBWSxHQUFHLElBQUEsb0NBQXVCLEVBQUMsT0FBTyxDQUFDLGFBQWEsQ0FBQyxDQUFDO1FBQ3BFLE1BQU0sT0FBTyxHQUFHLGNBQWMsQ0FBQyxZQUFZLENBQUMsSUFBSSxDQUFDLFVBQVUsQ0FBQyxDQUFDO1FBRTdELE1BQU0saUJBQWlCLEdBQUcsSUFBSSxDQUFDLHVCQUF1QixDQUNsRCxJQUFJLENBQUMsWUFBWSxDQUNwQixDQUFDO1FBQ0YsTUFBTSxTQUFTLEdBQUcsTUFBTSxpQkFBaUIsQ0FBQyxpQkFBaUIsQ0FDdkQsSUFBQSxnQ0FBbUIsRUFBQyxZQUFZLENBQUMsQ0FDcEMsQ0FBQztRQUVGLE1BQU0sT0FBTyxHQUFHLE1BQU0sSUFBQSxnREFBdUIsRUFBQztZQUMxQyxPQUFPO1lBQ1AsYUFBYSxFQUFFLE9BQU8sQ0FBQyxhQUFhO1lBQ3BDLFlBQVk7WUFDWixTQUFTO1lBQ1QsVUFBVSxFQUFFLElBQUksQ0FBQyxVQUFVO1lBQzNCLFdBQVcsRUFBRSxJQUFJLENBQUMsV0FBVztTQUNoQyxDQUFDLENBQUM7UUFFSCxjQUFjLENBQUMsZ0JBQWdCLENBQzNCLElBQUksQ0FBQyxVQUFVLEVBQ2YsSUFBSSxDQUFDLEVBQUUsRUFDUCxPQUFPLENBQUMsYUFBYSxFQUNyQixPQUFPLENBQ1YsQ0FBQztRQUVGLElBQUksQ0FBQyxNQUFNLEVBQUUsSUFBSSxDQUFDLEdBQUcsSUFBSSxDQUFDLFFBQVEsMkJBQTJCLElBQUksQ0FBQyxFQUFFLEVBQUUsQ0FBQyxDQUFDO1FBRXhFLE9BQU87WUFDSCxPQUFPO1lBQ1AsYUFBYSxFQUFFLE9BQU8sQ0FBQyxhQUFhO1lBQ3BDLFFBQVEsRUFBRSxPQUFPO1lBQ2pCLFVBQVUsRUFBRSxJQUFJLENBQUMsVUFBVSxDQUFDLFVBQVU7U0FDekMsQ0FBQztJQUNOLENBQUM7SUFFTyxLQUFLLENBQUMsd0JBQXdCLENBQ2xDLElBQWdELEVBQ2hELE1BQTRCO1FBRTVCLE1BQU0sT0FBTyxHQUFHLGNBQWMsQ0FBQyxlQUFlLENBQUMsSUFBSSxDQUFDLFFBQVEsQ0FBQyxDQUFDO1FBQzlELE1BQU0sWUFBWSxHQUFHLElBQUEsb0NBQXVCLEVBQUMsT0FBTyxDQUFDLGFBQWEsQ0FBQyxDQUFDO1FBQ3BFLE1BQU0sVUFBVSxHQUNaLElBQUksQ0FBQyxRQUFRLEtBQUssU0FBUztZQUN2QixDQUFDLENBQUM7Z0JBQ0ksR0FBRyxJQUFJLENBQUMsVUFBVTtnQkFDbEIsVUFBVSxFQUFFLElBQUksQ0FBQyx3QkFBd0IsQ0FDckMsSUFBSSxDQUFDLFVBQVUsQ0FBQyxVQUFVLEVBQzFCLE1BQU0sQ0FBQyxVQUFVLENBQ3BCO2FBQ0o7WUFDSCxDQUFDLENBQUMsSUFBSSxDQUFDLFVBQVUsQ0FBQztRQUMxQixNQUFNLE9BQU8sR0FBRyxjQUFjLENBQUMsWUFBWSxDQUFDLFVBQVUsQ0FBQyxDQUFDO1FBRXhELElBQUksYUFBbUQsQ0FBQztRQUN4RCxNQUFNLFlBQVksR0FBRyxJQUFJLENBQUMsWUFBWSxDQUFDO1FBRXZDLElBQUksWUFBWSxFQUFFLENBQUM7WUFDZixNQUFNLGlCQUFpQixHQUNuQixJQUFJLENBQUMsdUJBQXVCLENBQUMsWUFBWSxDQUFDLENBQUM7WUFDL0MsTUFBTSxTQUFTLEdBQUcsTUFBTSxpQkFBaUIsQ0FBQyxpQkFBaUIsQ0FDdkQsSUFBQSxnQ0FBbUIsRUFBQyxZQUFZLENBQUMsQ0FDcEMsQ0FBQztZQUNGLGFBQWEsR0FBRztnQkFDWixTQUFTO2dCQUNULEtBQUssRUFBRSxJQUFBLGdDQUFtQixFQUFDLFlBQVksQ0FBQyxDQUFDLFFBQVEsQ0FBQyxLQUFLLENBQUM7YUFDM0QsQ0FBQztRQUNOLENBQUM7UUFFRCxNQUFNLFFBQVEsR0FDVixJQUFJLENBQUMsUUFBUSxLQUFLLDRCQUFlLENBQUMsS0FBSztZQUNuQyxDQUFDLENBQUMsNEJBQWUsQ0FBQyxLQUFLO1lBQ3ZCLENBQUMsQ0FBQyw0QkFBZSxDQUFDLElBQUksQ0FBQztRQUUvQixNQUFNLFVBQVUsR0FDWixJQUFJLENBQUMsUUFBUSxLQUFLLFNBQVM7WUFDdkIsQ0FBQyxDQUFDLG1EQUEwQjtZQUM1QixDQUFDLENBQUMscURBQTRCLENBQUM7UUFFdkMsTUFBTSxNQUFNLEdBQUcsTUFBTSxVQUFVLENBQUM7WUFDNUIsUUFBUTtZQUNSLE9BQU87WUFDUCxRQUFRLEVBQUUsTUFBTSxDQUFDLFFBQVE7WUFDekIsY0FBYyxFQUFFLE1BQU0sQ0FBQyxPQUFPO1lBQzlCLG9CQUFvQixFQUFFLE1BQU0sQ0FBQyxhQUFhO1lBQzFDLFVBQVU7WUFDVixZQUFZO1lBQ1osV0FBVyxFQUFFLEtBQUs7WUFDbEIsU0FBUyxFQUFFLElBQUksQ0FBQyxRQUFRLEtBQUssV0FBVyxDQUFDLENBQUMsQ0FBQyxJQUFJLENBQUMsQ0FBQyxDQUFDLFNBQVM7WUFDM0QsYUFBYTtTQUNoQixDQUFDLENBQUM7UUFFSCxNQUFNLEtBQUssR0FBRyxJQUFBLHVCQUFVLEVBQUMsTUFBTSxDQUFDLFlBQVksQ0FBQyxDQUFDLEdBQUcsQ0FBQyxDQUFDLElBQUksRUFBRSxFQUFFLENBQ3ZELElBQUksQ0FBQyxJQUFJLEVBQUUsQ0FDZCxDQUFDO1FBRUYsSUFBSSxLQUFLLENBQUMsTUFBTSxLQUFLLENBQUMsRUFBRSxDQUFDO1lBQ3JCLE1BQU0sSUFBSSxLQUFLLENBQUMsNENBQTRDLENBQUMsQ0FBQztRQUNsRSxDQUFDO1FBRUQsTUFBTSxFQUFFLEdBQUcsR0FBRyxLQUFLLENBQUMsS0FBSyxDQUFDLE1BQU0sR0FBRyxDQUFDLENBQUMsSUFBSSxDQUFDO1FBQzFDLE1BQU0saUJBQWlCLEdBQUcsS0FBSyxDQUFDLEtBQUssQ0FBQyxDQUFDLEVBQUUsQ0FBQyxDQUFDLENBQUMsQ0FBQztRQUM3QyxNQUFNLGFBQWEsR0FDZixDQUFDLE1BQU0sQ0FBQyxPQUFPLENBQUMsSUFBSSxFQUFFLEVBQUUsR0FBRyxpQkFBaUIsQ0FBQyxDQUFDLElBQUksQ0FBQyxJQUFJLENBQUMsR0FBRyxJQUFJLENBQUM7UUFFcEUsY0FBYyxDQUFDLGdCQUFnQixDQUMzQixJQUFJLENBQUMsVUFBVSxFQUNmLElBQUksQ0FBQyxFQUFFLEVBQ1AsT0FBTyxDQUFDLGFBQWEsRUFDckIsYUFBYSxFQUNiLEVBQUUsQ0FDTCxDQUFDO1FBRUYsSUFBSSxDQUFDLE1BQU0sRUFBRSxJQUFJLENBQUMsR0FBRyxJQUFJLENBQUMsUUFBUSwyQkFBMkIsSUFBSSxDQUFDLEVBQUUsRUFBRSxDQUFDLENBQUM7UUFFeEUsT0FBTztZQUNILE9BQU8sRUFBRSxNQUFNLENBQUMsT0FBTztZQUN2QixhQUFhLEVBQUUsT0FBTyxDQUFDLGFBQWE7WUFDcEMsUUFBUSxFQUFFLE1BQU0sQ0FBQyxZQUFZO1lBQzdCLFVBQVUsRUFBRSxVQUFVLENBQUMsVUFBVTtTQUNwQyxDQUFDO0lBQ04sQ0FBQztJQUVELEtBQUssQ0FBQyxRQUFRLENBQUMsTUFBbUI7UUFDOUIsSUFBSSxDQUFDLFNBQVMsQ0FBQyxLQUFLLEVBQUUsQ0FBQztRQUV2Qiw0QkFBNEI7UUFDNUIsTUFBTSxLQUFLLEdBQUcsTUFBTSxDQUFDLFlBQVksQ0FBQyxNQUFNLENBQ3BDLENBQUMsQ0FBQyxFQUFxRCxFQUFFLENBQ3JELENBQUMsQ0FBQyxRQUFRLEtBQUssTUFBTSxDQUM1QixDQUFDO1FBQ0YsS0FBSyxNQUFNLElBQUksSUFBSSxLQUFLLEVBQUUsQ0FBQztZQUN2QixNQUFNLE1BQU0sR0FBRyxNQUFNLElBQUksQ0FBQyxzQkFBc0IsQ0FBQyxJQUFJLENBQUMsQ0FBQztZQUN2RCxJQUFJLENBQUMsU0FBUyxDQUFDLEdBQUcsQ0FBQyxJQUFJLENBQUMsRUFBRSxFQUFFLE1BQU0sQ0FBQyxDQUFDO1FBQ3hDLENBQUM7UUFFRCwrQkFBK0I7UUFDL0IsTUFBTSxRQUFRLEdBQUcsTUFBTSxDQUFDLFlBQVksQ0FBQyxNQUFNLENBQ3ZDLENBQ0ksQ0FBQyxFQUlILEVBQUUsQ0FBQyxDQUFDLENBQUMsUUFBUSxLQUFLLFNBQVMsQ0FDaEMsQ0FBQztRQUNGLEtBQUssTUFBTSxJQUFJLElBQUksUUFBUSxFQUFFLENBQUM7WUFDMUIsTUFBTSxNQUFNLEdBQUcsSUFBSSxDQUFDLFNBQVMsQ0FBQyxHQUFHLENBQUMsSUFBSSxDQUFDLE1BQU0sQ0FBQyxDQUFDO1lBQy9DLElBQUksQ0FBQyxNQUFNLEVBQUUsQ0FBQztnQkFDVixNQUFNLElBQUksS0FBSyxDQUNYLFdBQVcsSUFBSSxDQUFDLE1BQU0sc0JBQXNCLElBQUksQ0FBQyxFQUFFLGFBQWEsQ0FDbkUsQ0FBQztZQUNOLENBQUM7WUFDRCxNQUFNLE1BQU0sR0FBRyxNQUFNLElBQUksQ0FBQyx3QkFBd0IsQ0FBQyxJQUFJLEVBQUUsTUFBTSxDQUFDLENBQUM7WUFDakUsSUFBSSxDQUFDLFNBQVMsQ0FBQyxHQUFHLENBQUMsSUFBSSxDQUFDLEVBQUUsRUFBRSxNQUFNLENBQUMsQ0FBQztRQUN4QyxDQUFDO1FBRUQsa0NBQWtDO1FBQ2xDLE1BQU0sUUFBUSxHQUFHLE1BQU0sQ0FBQyxZQUFZLENBQUMsTUFBTSxDQUN2QyxDQUNJLENBQUMsRUFJSCxFQUFFLENBQUMsQ0FBQyxDQUFDLFFBQVEsS0FBSyxXQUFXLENBQ2xDLENBQUM7UUFDRixLQUFLLE1BQU0sSUFBSSxJQUFJLFFBQVEsRUFBRSxDQUFDO1lBQzFCLE1BQU0sTUFBTSxHQUFHLElBQUksQ0FBQyxTQUFTLENBQUMsR0FBRyxDQUFDLElBQUksQ0FBQyxNQUFNLENBQUMsQ0FBQztZQUMvQyxJQUFJLENBQUMsTUFBTSxFQUFFLENBQUM7Z0JBQ1YsTUFBTSxJQUFJLEtBQUssQ0FDWCxXQUFXLElBQUksQ0FBQyxNQUFNLHNCQUFzQixJQUFJLENBQUMsRUFBRSxhQUFhLENBQ25FLENBQUM7WUFDTixDQUFDO1lBQ0QsTUFBTSxNQUFNLEdBQUcsTUFBTSxJQUFJLENBQUMsd0JBQXdCLENBQUMsSUFBSSxFQUFFLE1BQU0sQ0FBQyxDQUFDO1lBQ2pFLElBQUksQ0FBQyxTQUFTLENBQUMsR0FBRyxDQUFDLElBQUksQ0FBQyxFQUFFLEVBQUUsTUFBTSxDQUFDLENBQUM7UUFDeEMsQ0FBQztRQUVELElBQUksQ0FBQyxNQUFNLEVBQUUsSUFBSSxDQUNiLDhCQUE4QixJQUFJLENBQUMsU0FBUyxDQUFDLElBQUkseUJBQXlCLENBQzdFLENBQUM7SUFDTixDQUFDO0NBQ0o7QUFwUkQsd0NBb1JDIn0=

package/dist/cli.d.ts ADDED Viewed

	@@ -0,0 +1,2 @@
1	+ #!/usr/bin/env node
2	+ export {};

package/dist/cli.js ADDED Viewed

@@ -0,0 +1,48 @@
+#!/usr/bin/env node
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const yargs_1 = __importDefault(require("yargs"));
+const helpers_1 = require("yargs/helpers");
+const pki_common_1 = require("@super-protocol/pki-common");
+const configParser_1 = require("./configParser");
+const chainGenerator_1 = require("./chainGenerator");
+async function main() {
+    await (0, yargs_1.default)((0, helpers_1.hideBin)(process.argv))
+        .usage('Usage: $0 <command> [options]')
+        .option('log-level', {
+        alias: 'l',
+        describe: 'Log level: fatal, error, warn, info, debug, trace',
+        choices: Object.values(pki_common_1.LogLevel),
+        type: 'string',
+    })
+        .command('generate-chain', 'Generate a full certificate chain (root -> intermediate -> end-entity)', (yargs) => {
+        return yargs.option('config', {
+            alias: 'c',
+            describe: 'Path to chain configuration file (YAML/JSON)',
+            type: 'string',
+            demandOption: true,
+        });
+    }, async (argv) => {
+        const logger = argv.logLevel
+            ? new pki_common_1.CommonPinoLog(argv.logLevel)
+            : undefined;
+        const config = (0, configParser_1.parseChainConfig)(argv.config);
+        const generator = new chainGenerator_1.ChainGenerator(logger);
+        await generator.generate(config);
+    })
+        .demandCommand(1, 'You must provide a command')
+        .help()
+        .alias('help', 'h')
+        .version()
+        .alias('version', 'V')
+        .strict()
+        .parse();
+}
+main().catch((error) => {
+    console.error('Error:', error.message);
+    process.exit(1);
+});
+//# sourceMappingURL=data:application/json;base64,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

package/dist/configParser.d.ts ADDED Viewed

	@@ -0,0 +1,2 @@
1	+ import { ChainConfig } from './chainConfig';
2	+ export declare function parseChainConfig(configPath: string): ChainConfig;

package/dist/configParser.js ADDED Viewed

@@ -0,0 +1,75 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseChainConfig = void 0;
+const fs = __importStar(require("fs"));
+const yaml = __importStar(require("js-yaml"));
+const value_1 = require("@sinclair/typebox/value");
+const chainConfig_1 = require("./chainConfig");
+function parseChainConfig(configPath) {
+    if (!fs.existsSync(configPath)) {
+        throw new Error(`Config file not found: ${configPath}`);
+    }
+    const fileContent = fs.readFileSync(configPath, 'utf-8');
+    const parsed = yaml.load(fileContent, { schema: yaml.JSON_SCHEMA });
+    value_1.Value.Default(chainConfig_1.ChainConfigSchema, parsed);
+    if (!value_1.Value.Check(chainConfig_1.ChainConfigSchema, parsed)) {
+        const errors = [...value_1.Value.Errors(chainConfig_1.ChainConfigSchema, parsed)];
+        throw new Error(`Invalid config file: ${errors.map((e) => `${e.path}: ${e.message}`).join(', ')}`);
+    }
+    validateReferences(parsed);
+    return parsed;
+}
+exports.parseChainConfig = parseChainConfig;
+function validateReferences(config) {
+    const ids = config.certificates.map((c) => c.id);
+    const duplicates = ids.filter((id, i, arr) => arr.indexOf(id) !== i);
+    if (duplicates.length > 0) {
+        throw new Error(`Duplicate certificate ids: ${duplicates.join(', ')}`);
+    }
+    const idSet = new Set(ids);
+    for (const cert of config.certificates) {
+        if (cert.certRole !== 'root') {
+            if (!idSet.has(cert.signer)) {
+                throw new Error(`Certificate "${cert.id}" references unknown signer "${cert.signer}"`);
+            }
+            validateSignerType(cert, config.certificates);
+        }
+    }
+}
+function validateSignerType(cert, certificates) {
+    const signer = certificates.find((c) => c.id === cert.signer);
+    if (!signer)
+        return;
+    if (cert.certRole === 'subroot' &&
+        signer.certRole !== 'root' &&
+        signer.certRole !== 'subroot') {
+        throw new Error(`Subroot certificate "${cert.id}" must be signed by a root or subroot certificate, but signer "${signer.id}" is "${signer.certRole}"`);
+    }
+    if (cert.certRole === 'endentity' && signer.certRole !== 'subroot') {
+        throw new Error(`Entity certificate "${cert.id}" must be signed by a subroot certificate, but signer "${signer.id}" is "${signer.certRole}"`);
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/index.d.ts ADDED Viewed

@@ -0,0 +1,3 @@
+export * from './chainConfig';
+export * from './chainGenerator';
+export * from './configParser';

package/dist/index.js ADDED Viewed

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./chainConfig"), exports);
+__exportStar(require("./chainGenerator"), exports);
+__exportStar(require("./configParser"), exports);
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi9zcmMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7Ozs7OztBQUFBLGdEQUE4QjtBQUM5QixtREFBaUM7QUFDakMsaURBQStCIn0=

package/package.json ADDED Viewed

@@ -0,0 +1,36 @@
+{
+  "name": "@super-protocol/pki-cert-generator",
+  "version": "3.0.0",
+  "description": "CLI utility for generating PKI keys and certificates",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "pki-cert-generator": "dist/cli.js"
+  },
+  "files": [
+    "dist"
+  ],
+  "directories": {
+    "lib": "dist"
+  },
+  "scripts": {
+    "build": "tsc -b",
+    "start": "ts-node src/cli.ts",
+    "lint": "eslint --max-warnings=0 src",
+    "lint:fix": "eslint --fix src"
+  },
+  "author": "Super Protocol",
+  "license": "ISC",
+  "dependencies": {
+    "@sinclair/typebox": "0.33.22",
+    "@super-protocol/pki-attestation-engine": "^3.0.2",
+    "@super-protocol/pki-common": "^3.0.1",
+    "js-yaml": "^4.1.0",
+    "yargs": "^17.7.2"
+  },
+  "devDependencies": {
+    "@types/js-yaml": "^4.0.9",
+    "@types/node": "^20.11.0",
+    "@types/yargs": "^17.0.33"
+  }
+}