npm - @super-protocol/pki-client - Versions diffs - 1.6.5 → 1.6.7 - Mend

@super-protocol/pki-client 1.6.5 → 1.6.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (8) hide show

package/dist/challengeProvider/challengeProviderCertificate.d.ts +14 -0
package/dist/challengeProvider/challengeProviderCertificate.js +71 -0
package/dist/challengeProvider/index.d.ts +1 -0
package/dist/challengeProvider/index.js +2 -1
package/dist/pkiClientConfig.d.ts +22 -2
package/dist/pkiClientConfig.js +22 -2
package/dist/pkiClientFactory.js +10 -8
package/package.json +1 -1

package/dist/challengeProvider/challengeProviderCertificate.d.ts ADDED Viewed

@@ -0,0 +1,14 @@
+import { ChallengeProvider } from './challengeProvider';
+import { Challenge } from '@super-protocol/pki-common';
+export declare class ChallengeProviderCertificate implements ChallengeProvider {
+    private readonly orderCertsPath;
+    private readonly publicKeyPem;
+    private orderCert;
+    private orderCaBundle;
+    private orderPrivateKey;
+    private initialized;
+    constructor(orderCertsPath: string, publicKeyPem: string);
+    generateChallenge(): Promise<Challenge>;
+    private readOrderCerts;
+    private signPublicKey;
+}

package/dist/challengeProvider/challengeProviderCertificate.js ADDED Viewed

@@ -0,0 +1,71 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ChallengeProviderCertificate = void 0;
+const pki_common_1 = require("@super-protocol/pki-common");
+const fs = __importStar(require("fs/promises"));
+const path = __importStar(require("path"));
+const forge = __importStar(require("node-forge"));
+class ChallengeProviderCertificate {
+    orderCertsPath;
+    publicKeyPem;
+    orderCert;
+    orderCaBundle;
+    orderPrivateKey;
+    initialized = false;
+    constructor(orderCertsPath, publicKeyPem) {
+        this.orderCertsPath = orderCertsPath;
+        this.publicKeyPem = publicKeyPem;
+    }
+    async generateChallenge() {
+        if (!this.initialized) {
+            try {
+                await this.readOrderCerts();
+                this.initialized = true;
+            }
+            catch (error) {
+                throw new Error(`Error on reading order certificate files: ${error.message}`);
+            }
+        }
+        return {
+            type: pki_common_1.ChallengeType.Certificate,
+            userDataSignatureBase64: this.signPublicKey(this.publicKeyPem),
+            orderCertificate: this.orderCert,
+            orderCABundle: this.orderCaBundle,
+        };
+    }
+    async readOrderCerts() {
+        this.orderCert = await fs.readFile(path.join(this.orderCertsPath, 'order_cert.crt'), 'utf8');
+        this.orderPrivateKey = await fs.readFile(path.join(this.orderCertsPath, 'order_cert.key'), 'utf8');
+        this.orderCaBundle = await fs.readFile(path.join(this.orderCertsPath, 'order_cert_ca_bundle.crt'), 'utf8');
+    }
+    signPublicKey(publicKeyPem) {
+        const privateKey = forge.pki.privateKeyFromPem(this.orderPrivateKey);
+        const signature = privateKey.sign((0, pki_common_1.getPublicKeyDigestRaw)(publicKeyPem));
+        return forge.util.encode64(signature);
+    }
+}
+exports.ChallengeProviderCertificate = ChallengeProviderCertificate;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/challengeProvider/index.d.ts CHANGED Viewed

@@ -4,3 +4,4 @@ export * from './challengeProviderTdx';
 export * from './challengeProviderUntrusted';
 export * from './challengeProviderSevSnp';
 export * from './challengeNvidiaCCHelper';
+export * from './challengeProviderCertificate';

package/dist/challengeProvider/index.js CHANGED Viewed

@@ -20,4 +20,5 @@ __exportStar(require("./challengeProviderTdx"), exports);
 __exportStar(require("./challengeProviderUntrusted"), exports);
 __exportStar(require("./challengeProviderSevSnp"), exports);
 __exportStar(require("./challengeNvidiaCCHelper"), exports);
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvY2hhbGxlbmdlUHJvdmlkZXIvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7Ozs7OztBQUFBLHNEQUFvQztBQUNwQyx5REFBdUM7QUFDdkMseURBQXVDO0FBQ3ZDLCtEQUE2QztBQUM3Qyw0REFBMEM7QUFDMUMsNERBQTBDIn0=
+__exportStar(require("./challengeProviderCertificate"), exports);
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvY2hhbGxlbmdlUHJvdmlkZXIvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6Ijs7Ozs7Ozs7Ozs7Ozs7OztBQUFBLHNEQUFvQztBQUNwQyx5REFBdUM7QUFDdkMseURBQXVDO0FBQ3ZDLCtEQUE2QztBQUM3Qyw0REFBMEM7QUFDMUMsNERBQTBDO0FBQzFDLGlFQUErQyJ9

package/dist/pkiClientConfig.d.ts CHANGED Viewed

@@ -3,7 +3,17 @@ import { Static } from '@sinclair/typebox';
 declare const PkiClientConfigSchema: import("@sinclair/typebox").TObject<{
     clientCertProvider: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
         type: import("@sinclair/typebox").TLiteral<"pki-ca">;
-        challengeType: import("@sinclair/typebox").TEnum<typeof ChallengeType>;
+        challenge: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
+            type: import("@sinclair/typebox").TLiteral<ChallengeType.Untrusted>;
+            idHex: import("@sinclair/typebox").TString<string>;
+            commonIdHex: import("@sinclair/typebox").TString<string>;
+        }>, import("@sinclair/typebox").TObject<{
+            type: import("@sinclair/typebox").TLiteral<ChallengeType.TDX>;
+        }>, import("@sinclair/typebox").TObject<{
+            type: import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNP>;
+        }>, import("@sinclair/typebox").TObject<{
+            type: import("@sinclair/typebox").TLiteral<ChallengeType.SGXDCAP>;
+        }>]>;
         baseUrl: import("@sinclair/typebox").TString<string>;
         caBundle: import("@sinclair/typebox").TString<string>;
     }>, import("@sinclair/typebox").TObject<{
@@ -17,7 +27,17 @@ export type PkiClientConfig = Static<typeof PkiClientConfigSchema>;
 export declare const PkiClientConfigSchemaCompiled: import("@sinclair/typebox/compiler").TypeCheck<import("@sinclair/typebox").TObject<{
     clientCertProvider: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
         type: import("@sinclair/typebox").TLiteral<"pki-ca">;
-        challengeType: import("@sinclair/typebox").TEnum<typeof ChallengeType>;
+        challenge: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
+            type: import("@sinclair/typebox").TLiteral<ChallengeType.Untrusted>;
+            idHex: import("@sinclair/typebox").TString<string>;
+            commonIdHex: import("@sinclair/typebox").TString<string>;
+        }>, import("@sinclair/typebox").TObject<{
+            type: import("@sinclair/typebox").TLiteral<ChallengeType.TDX>;
+        }>, import("@sinclair/typebox").TObject<{
+            type: import("@sinclair/typebox").TLiteral<ChallengeType.SEVSNP>;
+        }>, import("@sinclair/typebox").TObject<{
+            type: import("@sinclair/typebox").TLiteral<ChallengeType.SGXDCAP>;
+        }>]>;
         baseUrl: import("@sinclair/typebox").TString<string>;
         caBundle: import("@sinclair/typebox").TString<string>;
     }>, import("@sinclair/typebox").TObject<{

package/dist/pkiClientConfig.js CHANGED Viewed

@@ -4,9 +4,29 @@ exports.PkiClientConfigSchemaCompiled = void 0;
 const pki_common_1 = require("@super-protocol/pki-common");
 const typebox_1 = require("@sinclair/typebox");
 const compiler_1 = require("@sinclair/typebox/compiler");
+const CaTeePkiCertProviderChallengeUntrusted = typebox_1.Type.Object({
+    type: typebox_1.Type.Literal(pki_common_1.ChallengeType.Untrusted),
+    idHex: typebox_1.Type.String({ minLength: 1 }),
+    commonIdHex: typebox_1.Type.String({ minLength: 1 }),
+});
+const CaTeePkiCertProviderChallengeTDX = typebox_1.Type.Object({
+    type: typebox_1.Type.Literal(pki_common_1.ChallengeType.TDX),
+});
+const CaTeePkiCertProviderChallengeSEV = typebox_1.Type.Object({
+    type: typebox_1.Type.Literal(pki_common_1.ChallengeType.SEVSNP),
+});
+const CaTeePkiCertProviderChallengeSGX = typebox_1.Type.Object({
+    type: typebox_1.Type.Literal(pki_common_1.ChallengeType.SGXDCAP),
+});
+const CaTeePkiCertProviderChallenge = typebox_1.Type.Union([
+    CaTeePkiCertProviderChallengeUntrusted,
+    CaTeePkiCertProviderChallengeTDX,
+    CaTeePkiCertProviderChallengeSEV,
+    CaTeePkiCertProviderChallengeSGX,
+]);
 const CaTeePkiCertProviderConfigSchema = typebox_1.Type.Object({
     type: typebox_1.Type.Literal('pki-ca'),
-    challengeType: typebox_1.Type.Enum(pki_common_1.ChallengeType),
+    challenge: CaTeePkiCertProviderChallenge,
     baseUrl: typebox_1.Type.String({ minLength: 1 }),
     caBundle: typebox_1.Type.String({ minLength: 1 }),
 });
@@ -24,4 +44,4 @@ const PkiClientConfigSchema = typebox_1.Type.Object({
     clientCertProvider: TeePkiCertProviderConfigSchema,
 });
 exports.PkiClientConfigSchemaCompiled = compiler_1.TypeCompiler.Compile(PkiClientConfigSchema);
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/dist/pkiClientFactory.js CHANGED Viewed

@@ -54,11 +54,12 @@ class PkiClientFactory {
         this.certPromise = this.getCertificate();
     }
     async getHTTPSAgent() {
-        const cert = await this.certPromise;
+        const certs = await this.certPromise;
+        const { cert, intermediateCertificates, ca } = (0, pki_common_1.extractIntermediateCertificates)(certs);
         const httpsAgent = new node_https_1.default.Agent({
-            ca: [...tls.rootCertificates, cert.caBundle],
-            cert: cert.certPem,
-            key: cert.keyPair.privateKeyPem,
+            ca: [...tls.rootCertificates, ca],
+            cert: cert + intermediateCertificates,
+            key: certs.keyPair.privateKeyPem,
         });
         return httpsAgent;
     }
@@ -80,9 +81,10 @@ class PkiClientFactory {
                 };
             case 'pki-ca':
                 let challengeProvider;
-                switch (this.config.clientCertProvider.challengeType) {
+                const challengeType = this.config.clientCertProvider.challenge.type;
+                switch (challengeType) {
                     case pki_common_1.ChallengeType.Untrusted:
-                        challengeProvider = new challengeProvider_1.ChallengeProviderUntrusted(Buffer.from('none', 'ascii'));
+                        challengeProvider = new challengeProvider_1.ChallengeProviderUntrusted(Buffer.from(this.config.clientCertProvider.challenge.idHex, 'hex'));
                         break;
                     case pki_common_1.ChallengeType.SGXDCAP:
                         challengeProvider = new challengeProvider_1.ChallengeProviderSgx();
@@ -94,7 +96,7 @@ class PkiClientFactory {
                         challengeProvider = new challengeProvider_1.ChallengeProviderSevSnp();
                         break;
                     default:
-                        throw new Error(`Challenge type "${this.config.clientCertProvider.challengeType} is not supported yet"`);
+                        throw new Error(`Challenge type "${challengeType} is not supported yet"`);
                 }
                 const attestationServiceClient = new pki_api_client_1.StaticAttestationServiceClient(this.config.clientCertProvider.baseUrl, this.config.clientCertProvider.caBundle);
                 const pkiClient = new pkiClient_1.PkiClient({
@@ -106,4 +108,4 @@ class PkiClientFactory {
     }
 }
 exports.PkiClientFactory = PkiClientFactory;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@super-protocol/pki-client",
-  "version": "1.6.5",
+  "version": "1.6.7",
   "public": true,
   "description": "",
   "main": "dist/index.js",