@super-protocol/pki-sync-client 5.0.4 → 5.0.6

package/README.md

@@ -218,7 +218,7 @@ interface SyncClientOptions {
   retryAttempts?: number;          // Retry attempts per server (default: 3)
   retryDelaySec?: number;          // Delay between retries in seconds (default: 10)
   logLevel?: LogLevel;             // Log level: fatal | error | warn | info | debug | trace; if omitted logs are disabled
-  disableServerIdentityCheck?: boolean;  // Disable server verification (default: false)
+  disableServerIdentityCheck?: boolean;  // Disable server identity verification (default: false)
   networkTypeFile?: string;        // File containing local network type: trusted | untrusted; defaults to untrusted
   saveCertsToDir?: string;         // Directory to save certificates
   saveCertsPrefix?: string;        // Prefix for certificate filenames

package/dist/root-certificate-verifier.d.ts

@@ -19,5 +19,7 @@ export interface RootCertificateVerifierOptions {
     verifySignature?: (mrEnclave: Uint8Array, evidenceType: TeeEvidenceType) => Promise<void>;
 }
 export declare function resolveLocalNetworkType(networkTypeFile?: string): Promise<NetworkType>;
+export declare const getRootCertificate: (caBundle: string) => string;
+export declare const verifyRootCertificatesMatch: (trustedCaBundle: string, receivedCaBundle: string, log?: Log) => void;
 export declare function verifyRootCertificateTrust(options: RootCertificateVerifierOptions): Promise<void>;
 export {};

package/dist/root-certificate-verifier.js

@@ -23,14 +23,19 @@ var __importStar = (this && this.__importStar) || function (mod) {
     return result;
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.verifyRootCertificateTrust = exports.resolveLocalNetworkType = void 0;
+exports.verifyRootCertificateTrust = exports.verifyRootCertificatesMatch = exports.getRootCertificate = exports.resolveLocalNetworkType = void 0;
 const pki_common_1 = require("@super-protocol/pki-common");
 const attestation_common_1 = require("@super-protocol/attestation-common");
 const sdk_js_1 = require("@super-protocol/sdk-js");
+const crypto_1 = require("crypto");
 const fs = __importStar(require("fs"));
 const preservedDynamicImport = new Function('specifier', 'return import(specifier)');
 const NETWORK_TYPES = ['trusted', 'untrusted'];
 const isNetworkType = (value) => NETWORK_TYPES.includes(value);
+const getEvidenceLogContext = (evidenceType) => ({
+    evidenceType,
+    evidenceTypeName: (0, attestation_common_1.teeEvidenceTypeToHumanReadable)(evidenceType),
+});
 async function resolveLocalNetworkType(networkTypeFile) {
     if (!networkTypeFile) {
         return 'untrusted';
@@ -50,6 +55,23 @@ const getRootCertificate = (caBundle) => {
     }
     return `${rootCerts[0].trim()}\n`;
 };
+exports.getRootCertificate = getRootCertificate;
+const verifyRootCertificatesMatch = (trustedCaBundle, receivedCaBundle, log) => {
+    const trustedRoot = new crypto_1.X509Certificate((0, exports.getRootCertificate)(trustedCaBundle));
+    const receivedRoot = new crypto_1.X509Certificate((0, exports.getRootCertificate)(receivedCaBundle));
+    const context = {
+        trustedRootFingerprint256: trustedRoot.fingerprint256,
+        trustedRootSubject: trustedRoot.subject,
+        receivedRootFingerprint256: receivedRoot.fingerprint256,
+        receivedRootSubject: receivedRoot.subject,
+    };
+    if (trustedRoot.fingerprint256 !== receivedRoot.fingerprint256) {
+        log?.error('Received certificate chain root does not match configured PKI authority CA bundle root', context);
+        throw new Error('Received certificate chain root does not match configured PKI authority CA bundle root');
+    }
+    log?.info('Received certificate chain root matches configured PKI authority CA bundle root', context);
+};
+exports.verifyRootCertificatesMatch = verifyRootCertificatesMatch;
 const readNetworkTypeExtension = (rootCertPem, getExtensionValue) => {
     const networkType = getExtensionValue(rootCertPem, pki_common_1.OID_CUSTOM_EXTENSION_NETWORK_TYPE)
         ?.toString('ascii')
@@ -79,33 +101,152 @@ const calculateMrEnclave = async (serializedEvidence, evidenceType, attestation)
     }
 };
 async function verifyRootCertificateTrust(options) {
+    const log = options.log;
     const getExtensionValue = options.getExtensionValue ??
         ((certPem, oid) => sdk_js_1.CertificatesHelper.getExtensionValue(certPem, oid));
     const verifySignature = options.verifySignature ?? attestation_common_1.verifyMrEnclaveSignature;
+    log?.info('Starting root certificate trust verification', {
+        networkTypeFile: options.networkTypeFile,
+    });
     const localNetworkType = await resolveLocalNetworkType(options.networkTypeFile);
-    const rootCertPem = getRootCertificate(options.caBundle);
-    const rootNetworkType = readNetworkTypeExtension(rootCertPem, getExtensionValue);
+    log?.info('Local network type resolved', {
+        localNetworkType,
+        networkTypeFile: options.networkTypeFile,
+        networkTypeSource: options.networkTypeFile ? 'file' : 'default',
+    });
+    log?.debug('Extracting root certificate from CA bundle');
+    let rootCertPem;
+    try {
+        rootCertPem = (0, exports.getRootCertificate)(options.caBundle);
+    }
+    catch (error) {
+        log?.error('Root certificate extraction failed', {
+            error: error instanceof Error ? error.message : String(error),
+        });
+        throw error;
+    }
+    const rootCertificate = new crypto_1.X509Certificate(rootCertPem);
+    log?.info('Root certificate extracted from CA bundle', {
+        rootFingerprint256: rootCertificate.fingerprint256,
+        rootSubject: rootCertificate.subject,
+        rootIssuer: rootCertificate.issuer,
+    });
+    log?.debug('Reading root certificate network type extension', {
+        oid: pki_common_1.OID_CUSTOM_EXTENSION_NETWORK_TYPE,
+    });
+    let rootNetworkType;
+    try {
+        rootNetworkType = readNetworkTypeExtension(rootCertPem, getExtensionValue);
+    }
+    catch (error) {
+        log?.error('Root certificate network type extension check failed', {
+            oid: pki_common_1.OID_CUSTOM_EXTENSION_NETWORK_TYPE,
+            error: error instanceof Error ? error.message : String(error),
+        });
+        throw error;
+    }
+    log?.info('Root certificate network type resolved', {
+        certificateNetworkType: rootNetworkType,
+        localNetworkType,
+    });
     if (rootNetworkType !== localNetworkType) {
+        log?.error('Root certificate network type mismatch', {
+            certificateNetworkType: rootNetworkType,
+            localNetworkType,
+        });
         throw new Error(`Root certificate verification failed: certificate network type "${rootNetworkType}" does not match local network type "${localNetworkType}"`);
     }
+    log?.info('Root certificate network type matches local network type', {
+        certificateNetworkType: rootNetworkType,
+        localNetworkType,
+    });
     if (rootNetworkType === 'untrusted') {
-        options.log?.info('Root certificate network type verified', {
-            networkType: rootNetworkType,
+        log?.info('Root certificate trust verification completed in untrusted mode', {
+            certificateNetworkType: rootNetworkType,
+            localNetworkType,
+            teeEvidenceRequired: false,
         });
         return;
     }
+    log?.info('Trusted root certificate requires TEE evidence verification', {
+        certificateNetworkType: rootNetworkType,
+        localNetworkType,
+        teeEvidenceRequired: true,
+    });
     const serializedEvidence = getExtensionValue(rootCertPem, pki_common_1.OID_TEE_EVIDENCE);
     if (!serializedEvidence) {
+        log?.error('Trusted root certificate is missing TEE evidence extension', {
+            oid: pki_common_1.OID_TEE_EVIDENCE,
+        });
         throw new Error(`Root certificate verification failed: trusted root certificate is missing ${pki_common_1.OID_TEE_EVIDENCE} evidence extension`);
     }
+    log?.info('Root certificate TEE evidence extension found', {
+        oid: pki_common_1.OID_TEE_EVIDENCE,
+        evidenceLength: serializedEvidence.length,
+    });
+    log?.debug('Loading attestation verification module');
     const attestation = await (options.loadAttestationModule ?? defaultLoadAttestationModule)();
-    const verificationResult = await attestation.verifyTeeEvidence(serializedEvidence);
-    const mrEnclave = await calculateMrEnclave(serializedEvidence, verificationResult.evidenceType, attestation);
-    await verifySignature(mrEnclave, verificationResult.evidenceType);
-    options.log?.info('Trusted root certificate evidence verified', {
-        evidenceType: verificationResult.evidenceType,
+    log?.debug('Attestation verification module loaded');
+    log?.info('Verifying root certificate TEE evidence');
+    let verificationResult;
+    try {
+        verificationResult =
+            await attestation.verifyTeeEvidence(serializedEvidence);
+    }
+    catch (error) {
+        log?.error('Root certificate TEE evidence verification failed', {
+            error: error instanceof Error ? error.message : String(error),
+        });
+        throw error;
+    }
+    log?.info('Root certificate TEE evidence verified', {
+        ...getEvidenceLogContext(verificationResult.evidenceType),
+    });
+    log?.info('Calculating root certificate mrEnclave', {
+        ...getEvidenceLogContext(verificationResult.evidenceType),
+    });
+    let mrEnclave;
+    try {
+        mrEnclave = await calculateMrEnclave(serializedEvidence, verificationResult.evidenceType, attestation);
+    }
+    catch (error) {
+        log?.error('Root certificate mrEnclave calculation failed', {
+            ...getEvidenceLogContext(verificationResult.evidenceType),
+            error: error instanceof Error ? error.message : String(error),
+        });
+        throw error;
+    }
+    const mrEnclaveHex = Buffer.from(mrEnclave).toString('hex');
+    log?.info('Root certificate mrEnclave calculated', {
+        ...getEvidenceLogContext(verificationResult.evidenceType),
+        mrEnclaveHex,
+    });
+    log?.info('Checking root certificate mrEnclave in trusted registry', {
+        ...getEvidenceLogContext(verificationResult.evidenceType),
+        mrEnclaveHex,
+        registryCheckStatus: 'started',
+    });
+    try {
+        await verifySignature(mrEnclave, verificationResult.evidenceType);
+    }
+    catch (error) {
+        log?.error('Root certificate mrEnclave trusted registry check failed', {
+            ...getEvidenceLogContext(verificationResult.evidenceType),
+            mrEnclaveHex,
+            isTrusted: false,
+            error: error instanceof Error ? error.message : String(error),
+        });
+        throw error;
+    }
+    log?.info('Root certificate mrEnclave trusted registry check passed', {
+        ...getEvidenceLogContext(verificationResult.evidenceType),
+        mrEnclaveHex,
+        isTrusted: true,
+    });
+    log?.info('Trusted root certificate evidence verified', {
+        ...getEvidenceLogContext(verificationResult.evidenceType),
         mrEnclaveHex: Buffer.from(mrEnclave).toString('hex'),
     });
 }
 exports.verifyRootCertificateTrust = verifyRootCertificateTrust;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/dist/sync-client.js

@@ -222,6 +222,15 @@ class SyncClient {
     }
     async sync(config) {
         const challenge = await this.resolveChallenge();
+        if (this.options.disableServerIdentityCheck) {
+            this.logger.warn('Server identity verification is disabled because disableServerIdentityCheck is enabled');
+        }
+        await (0, root_certificate_verifier_1.verifyRootCertificateTrust)({
+            caBundle: this.options.caBundle,
+            networkTypeFile: this.options.networkTypeFile,
+            log: this.logger,
+        });
+        this.logger.info('Configured PKI authority CA bundle verified successfully');
         for (const server of this.options.servers) {
             const serverLog = this.logger.child({
                 server,
@@ -246,16 +255,7 @@ class SyncClient {
                 });
                 pkiClientFactory = new pki_client_1.PkiClientFactory(pkiConfig, serverLog);
                 const clientCert = await pkiClientFactory.getCert();
-                if (this.options.disableServerIdentityCheck) {
-                    serverLog.warn('Root certificate trust verification is disabled because disableServerIdentityCheck is enabled');
-                }
-                else {
-                    await (0, root_certificate_verifier_1.verifyRootCertificateTrust)({
-                        caBundle: clientCert.caBundle,
-                        networkTypeFile: this.options.networkTypeFile,
-                        log: serverLog,
-                    });
-                }
+                (0, root_certificate_verifier_1.verifyRootCertificatesMatch)(this.options.caBundle, clientCert.caBundle, serverLog);
                 httpsAgent = await pkiClientFactory.getHTTPSAgent();
                 serverLog.info('PKI client prepared successfully');
             }
@@ -316,4 +316,4 @@ class SyncClient {
     }
 }
 exports.SyncClient = SyncClient;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@super-protocol/pki-sync-client",
-  "version": "5.0.4",
+  "version": "5.0.6",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@super-protocol/pki-sync-client",
-      "version": "5.0.4",
+      "version": "5.0.6",
       "license": "ISC",
       "dependencies": {
         "@sinclair/typebox": "0.33.22",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@super-protocol/pki-sync-client",
-  "version": "5.0.4",
+  "version": "5.0.6",
   "description": "PKI sync client utility",
   "main": "dist/index.js",
   "bin": {