@super-protocol/swarm-contracts-sdk 0.0.1-beta.1

package/dist/cjs/certificates/binary-splitter.js

@@ -0,0 +1,279 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CertificateBinarySplitter = exports.CertificateNonOidParts = void 0;
+const asn1js_1 = require("asn1js");
+var CertificateNonOidParts;
+(function (CertificateNonOidParts) {
+    CertificateNonOidParts["SERIAL_NUMBER"] = "SERIAL_NUMBER";
+    CertificateNonOidParts["SIGNATURE_ALGORITHM"] = "SIGNATURE_ALGORITHM";
+    CertificateNonOidParts["ISSUER"] = "ISSUER";
+    CertificateNonOidParts["NOT_BEFORE"] = "NOT_BEFORE";
+    CertificateNonOidParts["NOT_AFTER"] = "NOT_AFTER";
+    CertificateNonOidParts["SUBJECT"] = "SUBJECT";
+    CertificateNonOidParts["SUBJECT_PUBLIC_KEY_INFO"] = "SUBJECT_PUBLIC_KEY_INFO";
+    CertificateNonOidParts["SIGNATURE"] = "SIGNATURE";
+})(CertificateNonOidParts || (exports.CertificateNonOidParts = CertificateNonOidParts = {}));
+class CertificateBinarySplitter {
+    parts = [];
+    certBinary;
+    lastPosition = 0;
+    constructor(certDer) {
+        this.certBinary = new Uint8Array(certDer);
+    }
+    split(nonOidParts, oids) {
+        this.parts = [];
+        this.lastPosition = 0;
+        try {
+            const asn1 = (0, asn1js_1.fromBER)(this.certBinary);
+            if (asn1.offset === -1) {
+                throw new Error('Error parsing ASN.1 structure');
+            }
+            const certificate = asn1.result;
+            // certificate.valueBlock.value[0] = TBSCertificate
+            // certificate.valueBlock.value[1] = signatureAlgorithm
+            // certificate.valueBlock.value[2] = signature
+            const tbsCertificate = certificate.valueBlock.value[0];
+            const tbsStartPosition = this.getElementPositionInParent(tbsCertificate.toBER());
+            this.addPart(new Uint8Array(this.certBinary.slice(0, tbsStartPosition)));
+            this.lastPosition = tbsStartPosition;
+            const tbsValues = tbsCertificate.valueBlock.value;
+            let tbsIndex = 0;
+            // 1. Version [0] EXPLICIT (optional, default v1)
+            if (tbsValues[tbsIndex].idBlock.tagClass === 3 &&
+                tbsValues[tbsIndex].idBlock.tagNumber === 0) {
+                tbsIndex++; // skip version
+            }
+            // 2. Serial Number (mandatory)
+            const serialNumber = tbsValues[tbsIndex++];
+            if (serialNumber.idBlock.tagNumber !== 2) {
+                throw new Error('Expected serial number (INTEGER)');
+            }
+            if (nonOidParts.includes(CertificateNonOidParts.SERIAL_NUMBER)) {
+                this.addElement({
+                    name: 'serialNumber',
+                    element: serialNumber,
+                    forcePushPrefix: true,
+                });
+            }
+            // 3. Signature Algorithm (mandatory)
+            const signatureAlgorithm = tbsValues[tbsIndex++];
+            if (nonOidParts.includes(CertificateNonOidParts.SIGNATURE_ALGORITHM)) {
+                this.addElement({ name: 'signatureAlgorithm', element: signatureAlgorithm });
+            }
+            // 4. Issuer (mandatory)
+            const issuer = tbsValues[tbsIndex++];
+            if (nonOidParts.includes(CertificateNonOidParts.ISSUER)) {
+                this.addElement({ name: 'issuer', element: issuer });
+            }
+            // 5. Validity (mandatory)
+            const validity = tbsValues[tbsIndex++];
+            const notBefore = validity.valueBlock.value[0];
+            const notAfter = validity.valueBlock.value[1];
+            if (nonOidParts.includes(CertificateNonOidParts.NOT_BEFORE)) {
+                this.addElement({ name: 'notBefore', element: notBefore });
+            }
+            if (nonOidParts.includes(CertificateNonOidParts.NOT_AFTER)) {
+                this.addElement({ name: 'notAfter', element: notAfter });
+            }
+            // 6. Subject
+            const subject = tbsValues[tbsIndex++];
+            if (nonOidParts.includes(CertificateNonOidParts.SUBJECT)) {
+                this.addElement({ name: 'subject', element: subject });
+            }
+            // 7.subjectPublicKeyInfo
+            const subjectPublicKeyInfo = tbsValues[tbsIndex++];
+            const publicKeyBitString = subjectPublicKeyInfo.valueBlock.value[1]; // BIT STRING with public key
+            if (nonOidParts.includes(CertificateNonOidParts.SUBJECT_PUBLIC_KEY_INFO)) {
+                this.addPublicKeyElement(publicKeyBitString);
+            }
+            // 8. issuerUniqueID [1] IMPLICIT (optional, only in v2+)
+            if (tbsIndex < tbsValues.length &&
+                tbsValues[tbsIndex].idBlock.tagClass === 3 &&
+                tbsValues[tbsIndex].idBlock.tagNumber === 1) {
+                tbsIndex++; // skip issuerUniqueID
+            }
+            // 9. subjectUniqueID [2] IMPLICIT (optional, only in v2+)
+            if (tbsIndex < tbsValues.length &&
+                tbsValues[tbsIndex].idBlock.tagClass === 3 &&
+                tbsValues[tbsIndex].idBlock.tagNumber === 2) {
+                tbsIndex++; // skip subjectUniqueID
+            }
+            // 10. Extensions
+            if (tbsIndex < tbsValues.length) {
+                const extensions = tbsValues[tbsIndex];
+                if (extensions.idBlock.tagClass === 3 && extensions.idBlock.tagNumber === 3) {
+                    const extensionsSequence = extensions.valueBlock.value[0];
+                    this.processExtensions(extensionsSequence, oids);
+                }
+            }
+            // 11. signature
+            if (nonOidParts.includes(CertificateNonOidParts.SIGNATURE)) {
+                const signatureAlgorithmId = certificate.valueBlock.value[1];
+                this.addElement({
+                    element: signatureAlgorithmId,
+                    forcePushPrefix: true,
+                    forcePushHeader: true,
+                });
+                const signature = certificate.valueBlock.value[2];
+                this.addSignatureElement(signature);
+            }
+            // Add any remaining part after the last processed element
+            if (this.lastPosition < this.certBinary.length) {
+                this.addPart(new Uint8Array(this.certBinary.slice(this.lastPosition)));
+            }
+            return this.parts;
+        }
+        catch (error) {
+            throw new Error(`Failed to split certificate: ${error instanceof Error ? error.message : 'Unknown error'}`);
+        }
+    }
+    processExtensions(extensionsSequence, targetOids) {
+        for (const extension of extensionsSequence.valueBlock.value) {
+            const extValues = extension.valueBlock.value;
+            const oid = extValues[0].valueBlock.toString(); // OID as string
+            if (!targetOids.includes(oid)) {
+                continue;
+            }
+            // Find OCTET STRING with extension value
+            let octetString;
+            if (extValues.length === 3) {
+                // OID + critical + OCTET STRING
+                octetString = extValues[2];
+            }
+            else {
+                // OID + OCTET STRING
+                octetString = extValues[1];
+            }
+            this.addElement({ name: 'extension', element: octetString, oid });
+        }
+    }
+    getElementPositionInParent(element, parent) {
+        const elementBytes = new Uint8Array(element);
+        const parentToSearch = parent || this.certBinary;
+        const startPosition = parent ? 0 : this.lastPosition;
+        for (let i = startPosition; i <= parentToSearch.length - elementBytes.length; i++) {
+            let match = true;
+            for (let j = 0; j < elementBytes.length; j++) {
+                if (parentToSearch[i + j] !== elementBytes[j]) {
+                    match = false;
+                    break;
+                }
+            }
+            if (match) {
+                return i;
+            }
+        }
+        throw new Error('Some element not found in certificate binary');
+    }
+    addElement({ name, element, oid, forcePushPrefix, forcePushHeader, }) {
+        const { value, position } = this.getElementValueAndPosition({
+            element,
+            forcePushPrefix,
+            forcePushHeader,
+        });
+        name ? this.addPart({ name, value, oid }) : this.addPart(new Uint8Array(value));
+        this.lastPosition = position + value.byteLength;
+    }
+    addPublicKeyElement(element) {
+        const { value, position } = this.getElementValueAndPosition({ element });
+        // extract first byte 0x04 - uncompressed public key
+        this.addPart(new Uint8Array(value.slice(0, 1)));
+        this.addPart({ name: 'publicKey', value: value.slice(1) });
+        this.lastPosition = position + value.byteLength;
+    }
+    addSignatureElement(element) {
+        const { value, position } = this.getElementValueAndPosition({ element });
+        // Parse the signature as ASN.1 SEQUENCE containing R and S values
+        const signatureAsn1 = (0, asn1js_1.fromBER)(value);
+        const sequence = signatureAsn1.result;
+        const rElement = sequence.valueBlock.value[0];
+        const sElement = sequence.valueBlock.value[1];
+        const rBer = rElement.toBER();
+        const sBer = sElement.toBER();
+        // R value
+        const rPosition = this.getElementPositionInParent(rBer, value);
+        this.addPart(new Uint8Array(value.slice(0, rPosition)));
+        let rValue = this.getValueHex(rElement);
+        if (rValue.byteLength > 32) {
+            rValue = rValue.slice(rValue.byteLength - 32);
+        }
+        const rHeaderLength = rBer.byteLength - rValue.byteLength;
+        if (rHeaderLength > 0) {
+            this.addPart(new Uint8Array(value.slice(rPosition, rPosition + rHeaderLength)));
+        }
+        const rEndPos = rPosition + rBer.byteLength;
+        // S value
+        const sPosition = this.getElementPositionInParent(sBer, value);
+        if (sPosition > rEndPos) {
+            this.addPart(new Uint8Array(value.slice(rEndPos, sPosition)));
+        }
+        let sValue = this.getValueHex(sElement);
+        if (sValue.byteLength > 32) {
+            sValue = sValue.slice(sValue.byteLength - 32);
+        }
+        const sHeaderLength = sBer.byteLength - sValue.byteLength;
+        if (sHeaderLength > 0) {
+            this.addPart(new Uint8Array(value.slice(sPosition, sPosition + sHeaderLength)), true);
+        }
+        const fullSignature = Buffer.concat([
+            Buffer.from(this.addLeadingZerosIfNeeded(rValue)),
+            Buffer.from(this.addLeadingZerosIfNeeded(sValue)),
+        ]);
+        this.addPart({ name: 'signature', value: new Uint8Array(fullSignature) });
+        const sEndPos = sPosition + sBer.byteLength;
+        if (sEndPos < value.byteLength) {
+            this.addPart(new Uint8Array(value.slice(sEndPos)));
+        }
+        this.lastPosition = position + value.byteLength;
+    }
+    addLeadingZerosIfNeeded(value, size = 32) {
+        if (value.byteLength >= size) {
+            return value;
+        }
+        const zeros = new Uint8Array(size - value.byteLength);
+        return new Uint8Array([...zeros, ...new Uint8Array(value)]);
+    }
+    getElementValueAndPosition({ element, forcePushPrefix = false, forcePushHeader = false, }) {
+        const elementBer = element.toBER();
+        const elementValue = this.getValueHex(element);
+        const elementPosition = this.getElementPositionInParent(elementBer);
+        const valueOffsetInElement = elementBer.byteLength - elementValue.byteLength;
+        const valuePosition = elementPosition + valueOffsetInElement;
+        // Part before element
+        if (this.lastPosition < elementPosition) {
+            this.addPart(new Uint8Array(this.certBinary.slice(this.lastPosition, elementPosition)), forcePushPrefix);
+        }
+        // Element header
+        if (valueOffsetInElement > 0) {
+            this.addPart(new Uint8Array(this.certBinary.slice(elementPosition, valuePosition)), forcePushHeader);
+        }
+        return {
+            value: new Uint8Array(elementValue),
+            position: valuePosition,
+        };
+    }
+    getValueHex(element) {
+        if ('valueHex' in element.valueBlock) {
+            return element.valueBlock.valueHex;
+        }
+        if ('value' in element.valueBlock && Array.isArray(element.valueBlock.value)) {
+            const arrayBuffers = element.valueBlock.value.map((valueItem) => valueItem.toBER());
+            const concatenatedBuffer = arrayBuffers.reduce((acc, current) => Buffer.concat([acc, Buffer.from(current)]), Buffer.alloc(0));
+            return new Uint8Array(concatenatedBuffer).buffer;
+        }
+        throw new Error('Cannot extract valueHex from element');
+    }
+    addPart(part, forcePush = false) {
+        const lastPart = this.parts[this.parts.length - 1];
+        if (part instanceof Uint8Array && lastPart instanceof Uint8Array && !forcePush) {
+            const merged = new Uint8Array(lastPart.length + part.length);
+            merged.set(lastPart, 0);
+            merged.set(part, lastPart.length);
+            this.parts[this.parts.length - 1] = merged;
+            return;
+        }
+        this.parts.push(part);
+    }
+}
+exports.CertificateBinarySplitter = CertificateBinarySplitter;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/cjs/certificates/crl.d.ts

@@ -0,0 +1,6 @@
+import * as pkijs from 'pkijs';
+export declare class CRLHelper {
+    static getCRLFromCerts(certs: pkijs.Certificate[]): Promise<pkijs.CertificateRevocationList[]>;
+    private static getCRLRequestData;
+    private static getCRLResponse;
+}

package/dist/cjs/certificates/crl.js

@@ -0,0 +1,66 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CRLHelper = void 0;
+const pkijs = __importStar(require("pkijs"));
+const helper_js_1 = require("./helper.js");
+const constants_js_1 = require("../constants.js");
+const index_js_1 = require("../index.js");
+class CRLHelper {
+    static async getCRLFromCerts(certs) {
+        const crlRequestsData = certs.map(this.getCRLRequestData).filter(Boolean);
+        if (!crlRequestsData.length) {
+            return [];
+        }
+        const crlResponseResults = await Promise.allSettled(crlRequestsData.map((reqData) => this.getCRLResponse(reqData)));
+        const rejectedCRLResponses = crlResponseResults
+            .filter(index_js_1.helpers.isRejected)
+            .map((result) => result.reason);
+        if (rejectedCRLResponses.length) {
+            throw new Error(`Can't get CRL responses for some certificates (reasons=${rejectedCRLResponses.join(';\n')})`);
+        }
+        return crlResponseResults.filter(index_js_1.helpers.isFulfilled).map((result) => result.value);
+    }
+    static getCRLRequestData(cert) {
+        const authorityExtension = helper_js_1.CertificatesHelper.getExtensionValue(cert, constants_js_1.OID_CRL_DISTRIBUTION_POINTS);
+        if (!authorityExtension) {
+            return;
+        }
+        const extensionValue = pkijs.ExtensionValueFactory.fromBER(constants_js_1.OID_CRL_DISTRIBUTION_POINTS, authorityExtension);
+        const findType6DistributionPointExtension = (entry) => entry.type === 6;
+        const crlUrlDistributionPoints = extensionValue?.distributionPoints.find((point) => point.distributionPoint?.some(findType6DistributionPointExtension));
+        const crlUrl = crlUrlDistributionPoints?.distributionPoint?.find(findType6DistributionPointExtension)?.value;
+        if (!crlUrl) {
+            return;
+        }
+        return { crlUrl };
+    }
+    static async getCRLResponse(data) {
+        const response = await helper_js_1.CertificatesHelper.downloadCertWithCache(data.crlUrl);
+        return pkijs.CertificateRevocationList.fromBER(response);
+    }
+}
+exports.CRLHelper = CRLHelper;
+//# sourceMappingURL=data:application/json;base64,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

package/dist/cjs/certificates/generator.d.ts

@@ -0,0 +1,38 @@
+import { GenerateCertParams, GenerateCsrParams, ParsedCert, ParsedCsr, SignatureAlgorithm } from './types.js';
+export declare class CertificateGenerator {
+    /**
+     * Generates certificate based on the provided parameters.
+     * @param params - Parameters for generating the certificate.
+     * @returns The generated certificate in PEM format.
+     */
+    static generateCert(params: GenerateCertParams): Promise<string>;
+    /**
+     * Generates a pair of cryptographic keys based on the specified signature algorithm.
+     * @param signatureAlgorithm - The algorithm to use for key generation.
+     * @returns A promise that resolves to a CryptoKeyPair containing the public and private keys.
+     */
+    static generateKeys(signatureAlgorithm: SignatureAlgorithm): Promise<CryptoKeyPair>;
+    /**
+     * Generates a Certificate Signing Request (CSR) based on the provided parameters.
+     * @param params - Parameters for generating the CSR.
+     * @returns The generated CSR in PEM format.
+     */
+    static generateCsr(params: GenerateCsrParams): Promise<string>;
+    /**
+     * Checks and parses a certificate in PEM format.
+     * @param certPem - The certificate in PEM format.
+     * @returns An object containing the parsed certificate details.
+     */
+    static checkAndParseCert(certPem: string): Promise<ParsedCert>;
+    /**
+     * Checks and parses a Certificate Signing Request (CSR) in PEM format.
+     * @param csrPem - The CSR in PEM format.
+     * @returns An object containing the parsed CSR details.
+     */
+    static checkAndParseCsr(csrPem: string): Promise<ParsedCsr>;
+    private static getCryptoKeys;
+    private static generateSerialNumber;
+    private static getPrincipalInfo;
+    private static getAlgorithm;
+    private static extractDnsNamesFromExtensions;
+}