@wireapp/core-crypto 1.0.0-rc.50 → 1.0.0-rc.52

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wireapp/core-crypto",
-  "version": "1.0.0-rc.50",
+  "version": "1.0.0-rc.52",
   "description": "CoreCrypto bindings for the Web",
   "type": "module",
   "module": "platforms/web/corecrypto.js",

package/platforms/web/corecrypto.d.ts

@@ -19,6 +19,24 @@ export class AcmeChallenge {
 	readonly url: string;
 }
 /**
+* Dump of the PKI environemnt as PEM
+*/
+export class E2eiDumpedPkiEnv {
+	free(): void;
+	/**
+	* CRLs registered in the PKI env
+	*/
+	readonly crls: (string)[];
+	/**
+	* Intermediate CAs that are loaded
+	*/
+	readonly intermediates: (string)[];
+	/**
+	* Root CA in use (i.e. Trust Anchor)
+	*/
+	readonly root_ca: string;
+}
+/**
 * Result of an authorization creation.
 * @see https://www.rfc-editor.org/rfc/rfc8555.html#section-7.5
 */
@@ -561,15 +579,15 @@ export declare enum DeviceStatus {
 	/**
 	 * All is fine
 	 */
-	Valid = 0,
+	Valid = 1,
 	/**
 	 * The Credential's certificate is expired
 	 */
-	Expired = 1,
+	Expired = 2,
 	/**
 	 * The Credential's certificate is revoked
 	 */
-	Revoked = 2
+	Revoked = 3
 }
 /**
  * Returned by all methods creating proposals. Contains a proposal message and an identifier to roll back the proposal
@@ -1292,34 +1310,44 @@ export declare class CoreCrypto {
 	 */
 	e2eiMlsInitOnly(enrollment: E2eiEnrollment, certificateChain: string, nbKeyPackage?: number): Promise<string[] | undefined>;
 	/**
-	* Registers a Root Trust Anchor CA for the use in E2EI processing.
-	*
-	* Please note that without a Root Trust Anchor, all validations *will* fail;
-	* So this is the first step to perform after initializing your E2EI client
-	*
-	* @param trustAnchorPEM - PEM certificate to anchor as a Trust Root
-	*/
+	 * Dumps the PKI environment as PEM
+	 *
+	 * @returns a struct with different fields representing the PKI environment as PEM strings
+	 */
+	e2eiDumpPKIEnv(): Promise<E2eiDumpedPkiEnv | undefined>;
+	/**
+	 * @returns whether the E2EI PKI environment is setup (i.e. Root CA, Intermediates, CRLs)
+	 */
+	e2eiIsPKIEnvSetup(): Promise<boolean>;
+	/**
+	 * Registers a Root Trust Anchor CA for the use in E2EI processing.
+	 *
+	 * Please note that without a Root Trust Anchor, all validations *will* fail;
+	 * So this is the first step to perform after initializing your E2EI client
+	 *
+	 * @param trustAnchorPEM - PEM certificate to anchor as a Trust Root
+	 */
 	e2eiRegisterAcmeCA(trustAnchorPEM: string): Promise<void>;
 	/**
-	* Registers an Intermediate CA for the use in E2EI processing.
-	*
-	* Please note that a Root Trust Anchor CA is needed to validate Intermediate CAs;
-	* You **need** to have a Root CA registered before calling this
-	*
-	* @param certPEM - PEM certificate to register as an Intermediate CA
-	*/
+	 * Registers an Intermediate CA for the use in E2EI processing.
+	 *
+	 * Please note that a Root Trust Anchor CA is needed to validate Intermediate CAs;
+	 * You **need** to have a Root CA registered before calling this
+	 *
+	 * @param certPEM - PEM certificate to register as an Intermediate CA
+	 */
 	e2eiRegisterIntermediateCA(certPEM: string): Promise<string[] | undefined>;
 	/**
-	* Registers a CRL for the use in E2EI processing.
-	*
-	* Please note that a Root Trust Anchor CA is needed to validate CRLs;
-	* You **need** to have a Root CA registered before calling this
-	*
-	* @param crlDP - CRL Distribution Point; Basically the URL you fetched it from
-	* @param crlDER - DER representation of the CRL
-	*
-	* @returns a {@link CRLRegistration} with the dirty state of the new CRL (see struct) and its expiration timestamp
-	*/
+	 * Registers a CRL for the use in E2EI processing.
+	 *
+	 * Please note that a Root Trust Anchor CA is needed to validate CRLs;
+	 * You **need** to have a Root CA registered before calling this
+	 *
+	 * @param crlDP - CRL Distribution Point; Basically the URL you fetched it from
+	 * @param crlDER - DER representation of the CRL
+	 *
+	 * @returns a {@link CRLRegistration} with the dirty state of the new CRL (see struct) and its expiration timestamp
+	 */
 	e2eiRegisterCRL(crlDP: string, crlDER: Uint8Array): Promise<CRLRegistration>;
 	/**
 	 * Creates a commit in all local conversations for changing the credential. Requires first

package/platforms/web/corecrypto.js

@@ -160,12 +160,12 @@ var makeMutClosure = function(arg0, arg1, dtor, f) {
   return real;
 };
 var __wbg_adapter_54 = function(arg0, arg1, arg2) {
-  wasm.wasm_bindgen__convert__closures__invoke1_mut__h710a87412ffe5e55(arg0, arg1, addHeapObject(arg2));
+  wasm.wasm_bindgen__convert__closures__invoke1_mut__h6ec936e7e658dfc2(arg0, arg1, addHeapObject(arg2));
 };
 var __wbg_adapter_57 = function(arg0, arg1, arg2) {
   try {
     const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
-    wasm.wasm_bindgen__convert__closures__invoke1_mut__h4359f72040c5aa5f(retptr, arg0, arg1, addHeapObject(arg2));
+    wasm.wasm_bindgen__convert__closures__invoke1_mut__h679c32bb4cb8181f(retptr, arg0, arg1, addHeapObject(arg2));
     var r0 = getInt32Memory0()[retptr / 4 + 0];
     var r1 = getInt32Memory0()[retptr / 4 + 1];
     if (r1) {
@@ -235,8 +235,8 @@ var handleError = function(f, args) {
     wasm.__wbindgen_exn_store(addHeapObject(e));
   }
 };
-var __wbg_adapter_423 = function(arg0, arg1, arg2, arg3) {
-  wasm.wasm_bindgen__convert__closures__invoke2_mut__h75c112f6425ae305(arg0, arg1, addHeapObject(arg2), addHeapObject(arg3));
+var __wbg_adapter_428 = function(arg0, arg1, arg2, arg3) {
+  wasm.wasm_bindgen__convert__closures__invoke2_mut__h85cdc5a82a90a895(arg0, arg1, addHeapObject(arg2), addHeapObject(arg3));
 };
 async function __wbg_load(module, imports) {
   if (typeof Response === "function" && module instanceof Response) {
@@ -265,13 +265,12 @@ async function __wbg_load(module, imports) {
 var __wbg_get_imports = function() {
   const imports = {};
   imports.wbg = {};
-  imports.wbg.__wbg_newacmeauthz_new = function(arg0) {
-    const ret = NewAcmeAuthz.__wrap(arg0);
+  imports.wbg.__wbindgen_number_new = function(arg0) {
+    const ret = arg0;
     return addHeapObject(ret);
   };
-  imports.wbg.__wbg_proposalbundle_new = function(arg0) {
-    const ret = ProposalBundle.__wrap(arg0);
-    return addHeapObject(ret);
+  imports.wbg.__wbindgen_object_drop_ref = function(arg0) {
+    takeObject(arg0);
   };
   imports.wbg.__wbg_newacmeorder_new = function(arg0) {
     const ret = NewAcmeOrder.__wrap(arg0);
@@ -281,31 +280,32 @@ var __wbg_get_imports = function() {
     const ret = BufferedDecryptedMessage.__wrap(arg0);
     return addHeapObject(ret);
   };
-  imports.wbg.__wbg_ffiwiree2eidentity_new = function(arg0) {
-    const ret = FfiWireE2EIdentity.__wrap(arg0);
+  imports.wbg.__wbg_proposalbundle_new = function(arg0) {
+    const ret = ProposalBundle.__wrap(arg0);
     return addHeapObject(ret);
   };
-  imports.wbg.__wbg_commitbundle_new = function(arg0) {
-    const ret = CommitBundle.__wrap(arg0);
+  imports.wbg.__wbg_corecrypto_new = function(arg0) {
+    const ret = CoreCrypto.__wrap(arg0);
     return addHeapObject(ret);
   };
-  imports.wbg.__wbindgen_number_new = function(arg0) {
-    const ret = arg0;
+  imports.wbg.__wbg_ffiwiree2eidentity_new = function(arg0) {
+    const ret = FfiWireE2EIdentity.__wrap(arg0);
     return addHeapObject(ret);
   };
-  imports.wbg.__wbindgen_object_drop_ref = function(arg0) {
-    takeObject(arg0);
+  imports.wbg.__wbg_acmedirectory_new = function(arg0) {
+    const ret = AcmeDirectory.__wrap(arg0);
+    return addHeapObject(ret);
   };
   imports.wbg.__wbg_proteusautoprekeybundle_new = function(arg0) {
     const ret = ProteusAutoPrekeyBundle.__wrap(arg0);
     return addHeapObject(ret);
   };
-  imports.wbg.__wbg_corecrypto_new = function(arg0) {
-    const ret = CoreCrypto.__wrap(arg0);
+  imports.wbg.__wbg_commitbundle_new = function(arg0) {
+    const ret = CommitBundle.__wrap(arg0);
     return addHeapObject(ret);
   };
-  imports.wbg.__wbg_acmedirectory_new = function(arg0) {
-    const ret = AcmeDirectory.__wrap(arg0);
+  imports.wbg.__wbg_newacmeauthz_new = function(arg0) {
+    const ret = NewAcmeAuthz.__wrap(arg0);
     return addHeapObject(ret);
   };
   imports.wbg.__wbindgen_object_clone_ref = function(arg0) {
@@ -899,7 +899,7 @@ var __wbg_get_imports = function() {
         const a = state0.a;
         state0.a = 0;
         try {
-          return __wbg_adapter_423(a, state0.b, arg02, arg12);
+          return __wbg_adapter_428(a, state0.b, arg02, arg12);
         } finally {
           state0.a = a;
         }
@@ -979,12 +979,12 @@ var __wbg_get_imports = function() {
     const ret = wasm.memory;
     return addHeapObject(ret);
   };
-  imports.wbg.__wbindgen_closure_wrapper2590 = function(arg0, arg1, arg2) {
-    const ret = makeMutClosure(arg0, arg1, 652, __wbg_adapter_54);
+  imports.wbg.__wbindgen_closure_wrapper2666 = function(arg0, arg1, arg2) {
+    const ret = makeMutClosure(arg0, arg1, 667, __wbg_adapter_54);
     return addHeapObject(ret);
   };
-  imports.wbg.__wbindgen_closure_wrapper13222 = function(arg0, arg1, arg2) {
-    const ret = makeMutClosure(arg0, arg1, 2170, __wbg_adapter_57);
+  imports.wbg.__wbindgen_closure_wrapper13336 = function(arg0, arg1, arg2) {
+    const ret = makeMutClosure(arg0, arg1, 2201, __wbg_adapter_57);
     return addHeapObject(ret);
   };
   return imports;
@@ -1051,6 +1051,20 @@ var CLOSURE_DTORS = typeof FinalizationRegistry === "undefined" ? { register: ()
 });
 var cachedUint32Memory0 = null;
 var cachedUint16Memory0 = null;
+var DeviceStatus = Object.freeze({
+  Valid: 1,
+  "1": "Valid",
+  Expired: 2,
+  "2": "Expired",
+  Revoked: 3,
+  "3": "Revoked"
+});
+var WirePolicy = Object.freeze({
+  Plaintext: 1,
+  "1": "Plaintext",
+  Ciphertext: 2,
+  "2": "Ciphertext"
+});
 var Ciphersuite = Object.freeze({
   MLS_128_DHKEMX25519_AES128GCM_SHA256_Ed25519: 1,
   "1": "MLS_128_DHKEMX25519_AES128GCM_SHA256_Ed25519",
@@ -1069,20 +1083,6 @@ var Ciphersuite = Object.freeze({
   MLS_128_X25519KYBER768DRAFT00_AES128GCM_SHA256_Ed25519: 61489,
   "61489": "MLS_128_X25519KYBER768DRAFT00_AES128GCM_SHA256_Ed25519"
 });
-var WirePolicy = Object.freeze({
-  Plaintext: 1,
-  "1": "Plaintext",
-  Ciphertext: 2,
-  "2": "Ciphertext"
-});
-var DeviceStatus = Object.freeze({
-  Valid: 0,
-  "0": "Valid",
-  Expired: 1,
-  "1": "Expired",
-  Revoked: 2,
-  "2": "Revoked"
-});
 var CredentialType = Object.freeze({
   Basic: 1,
   "1": "Basic",
@@ -1432,6 +1432,14 @@ class CoreCrypto {
     const ret = wasm.corecrypto_e2ei_new_rotate_enrollment(this.__wbg_ptr, ptr0, len0, ptr1, len1, ptr2, len2, expiry_sec, ciphersuite);
     return takeObject(ret);
   }
+  e2ei_dump_pki_env() {
+    const ret = wasm.corecrypto_e2ei_dump_pki_env(this.__wbg_ptr);
+    return takeObject(ret);
+  }
+  e2ei_is_pki_env_setup() {
+    const ret = wasm.corecrypto_e2ei_is_pki_env_setup(this.__wbg_ptr);
+    return takeObject(ret);
+  }
   e2ei_register_acme_ca(trust_anchor_pem) {
     const ptr0 = passStringToWasm0(trust_anchor_pem, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
     const len0 = WASM_VECTOR_LEN;
@@ -1989,6 +1997,64 @@ class CustomConfiguration {
 var DecryptedMessageFinalization = typeof FinalizationRegistry === "undefined" ? { register: () => {
 }, unregister: () => {
 } } : new FinalizationRegistry((ptr) => wasm.__wbg_decryptedmessage_free(ptr >>> 0));
+var E2eiDumpedPkiEnvFinalization = typeof FinalizationRegistry === "undefined" ? { register: () => {
+}, unregister: () => {
+} } : new FinalizationRegistry((ptr) => wasm.__wbg_e2eidumpedpkienv_free(ptr >>> 0));
+
+class E2eiDumpedPkiEnv {
+  __destroy_into_raw() {
+    const ptr = this.__wbg_ptr;
+    this.__wbg_ptr = 0;
+    E2eiDumpedPkiEnvFinalization.unregister(this);
+    return ptr;
+  }
+  free() {
+    const ptr = this.__destroy_into_raw();
+    wasm.__wbg_e2eidumpedpkienv_free(ptr);
+  }
+  get root_ca() {
+    let deferred1_0;
+    let deferred1_1;
+    try {
+      const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+      wasm.__wbg_get_acmedirectory_new_nonce(retptr, this.__wbg_ptr);
+      var r0 = getInt32Memory0()[retptr / 4 + 0];
+      var r1 = getInt32Memory0()[retptr / 4 + 1];
+      deferred1_0 = r0;
+      deferred1_1 = r1;
+      return getStringFromWasm0(r0, r1);
+    } finally {
+      wasm.__wbindgen_add_to_stack_pointer(16);
+      wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
+    }
+  }
+  get intermediates() {
+    try {
+      const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+      wasm.__wbg_get_e2eidumpedpkienv_intermediates(retptr, this.__wbg_ptr);
+      var r0 = getInt32Memory0()[retptr / 4 + 0];
+      var r1 = getInt32Memory0()[retptr / 4 + 1];
+      var v1 = getArrayJsValueFromWasm0(r0, r1).slice();
+      wasm.__wbindgen_free(r0, r1 * 4, 4);
+      return v1;
+    } finally {
+      wasm.__wbindgen_add_to_stack_pointer(16);
+    }
+  }
+  get crls() {
+    try {
+      const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+      wasm.__wbg_get_e2eidumpedpkienv_crls(retptr, this.__wbg_ptr);
+      var r0 = getInt32Memory0()[retptr / 4 + 0];
+      var r1 = getInt32Memory0()[retptr / 4 + 1];
+      var v1 = getArrayJsValueFromWasm0(r0, r1).slice();
+      wasm.__wbindgen_free(r0, r1 * 4, 4);
+      return v1;
+    } finally {
+      wasm.__wbindgen_add_to_stack_pointer(16);
+    }
+  }
+}
 var FfiWireE2EIdentityFinalization = typeof FinalizationRegistry === "undefined" ? { register: () => {
 }, unregister: () => {
 } } : new FinalizationRegistry((ptr) => wasm.__wbg_ffiwiree2eidentity_free(ptr >>> 0));
@@ -2370,7 +2436,7 @@ class WireIdentity {
     let deferred1_1;
     try {
       const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
-      wasm.__wbg_get_wireidentity_client_id(retptr, this.__wbg_ptr);
+      wasm.wireidentity_client_id(retptr, this.__wbg_ptr);
       var r0 = getInt32Memory0()[retptr / 4 + 0];
       var r1 = getInt32Memory0()[retptr / 4 + 1];
       deferred1_0 = r0;
@@ -2386,7 +2452,7 @@ class WireIdentity {
     let deferred1_1;
     try {
       const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
-      wasm.__wbg_get_wireidentity_handle(retptr, this.__wbg_ptr);
+      wasm.wireidentity_handle(retptr, this.__wbg_ptr);
       var r0 = getInt32Memory0()[retptr / 4 + 0];
       var r1 = getInt32Memory0()[retptr / 4 + 1];
       deferred1_0 = r0;
@@ -2402,7 +2468,7 @@ class WireIdentity {
     let deferred1_1;
     try {
       const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
-      wasm.__wbg_get_wireidentity_display_name(retptr, this.__wbg_ptr);
+      wasm.wireidentity_display_name(retptr, this.__wbg_ptr);
       var r0 = getInt32Memory0()[retptr / 4 + 0];
       var r1 = getInt32Memory0()[retptr / 4 + 1];
       deferred1_0 = r0;
@@ -2418,7 +2484,7 @@ class WireIdentity {
     let deferred1_1;
     try {
       const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
-      wasm.__wbg_get_wireidentity_domain(retptr, this.__wbg_ptr);
+      wasm.wireidentity_domain(retptr, this.__wbg_ptr);
       var r0 = getInt32Memory0()[retptr / 4 + 0];
       var r1 = getInt32Memory0()[retptr / 4 + 1];
       deferred1_0 = r0;
@@ -2434,7 +2500,7 @@ class WireIdentity {
     let deferred1_1;
     try {
       const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
-      wasm.__wbg_get_wireidentity_certificate(retptr, this.__wbg_ptr);
+      wasm.wireidentity_certificate(retptr, this.__wbg_ptr);
       var r0 = getInt32Memory0()[retptr / 4 + 0];
       var r1 = getInt32Memory0()[retptr / 4 + 1];
       deferred1_0 = r0;
@@ -2446,7 +2512,7 @@ class WireIdentity {
     }
   }
   get status() {
-    const ret = wasm.__wbg_get_wireidentity_status(this.__wbg_ptr);
+    const ret = wasm.wireidentity_status(this.__wbg_ptr);
     return ret;
   }
   get thumbprint() {
@@ -2454,7 +2520,7 @@ class WireIdentity {
     let deferred1_1;
     try {
       const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
-      wasm.__wbg_get_wireidentity_thumbprint(retptr, this.__wbg_ptr);
+      wasm.wireidentity_thumbprint(retptr, this.__wbg_ptr);
       var r0 = getInt32Memory0()[retptr / 4 + 0];
       var r1 = getInt32Memory0()[retptr / 4 + 1];
       deferred1_0 = r0;
@@ -2470,7 +2536,7 @@ class WireIdentity {
     let deferred1_1;
     try {
       const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
-      wasm.__wbg_get_wireidentity_serial_number(retptr, this.__wbg_ptr);
+      wasm.wireidentity_serial_number(retptr, this.__wbg_ptr);
       var r0 = getInt32Memory0()[retptr / 4 + 0];
       var r1 = getInt32Memory0()[retptr / 4 + 1];
       deferred1_0 = r0;
@@ -2482,11 +2548,11 @@ class WireIdentity {
     }
   }
   get not_before() {
-    const ret = wasm.__wbg_get_wireidentity_not_before(this.__wbg_ptr);
+    const ret = wasm.wireidentity_not_before(this.__wbg_ptr);
     return BigInt.asUintN(64, ret);
   }
   get not_after() {
-    const ret = wasm.__wbg_get_wireidentity_not_after(this.__wbg_ptr);
+    const ret = wasm.wireidentity_not_after(this.__wbg_ptr);
     return BigInt.asUintN(64, ret);
   }
 }
@@ -2581,7 +2647,7 @@ var mapWireIdentity = (ffiIdentity) => {
     displayName: ffiIdentity.display_name,
     domain: ffiIdentity.domain,
     certificate: ffiIdentity.certificate,
-    status: ffiIdentity.status,
+    status: DeviceStatus2[ffiIdentity.status],
     thumbprint: ffiIdentity.thumbprint,
     serialNumber: ffiIdentity.serial_number,
     notBefore: ffiIdentity.not_before,
@@ -2590,9 +2656,9 @@ var mapWireIdentity = (ffiIdentity) => {
 };
 var DeviceStatus2;
 (function(DeviceStatus3) {
-  DeviceStatus3[DeviceStatus3["Valid"] = 0] = "Valid";
-  DeviceStatus3[DeviceStatus3["Expired"] = 1] = "Expired";
-  DeviceStatus3[DeviceStatus3["Revoked"] = 2] = "Revoked";
+  DeviceStatus3[DeviceStatus3["Valid"] = 1] = "Valid";
+  DeviceStatus3[DeviceStatus3["Expired"] = 2] = "Expired";
+  DeviceStatus3[DeviceStatus3["Revoked"] = 3] = "Revoked";
 })(DeviceStatus2 || (DeviceStatus2 = {}));
 var ProposalType;
 (function(ProposalType2) {
@@ -3009,6 +3075,12 @@ class CoreCrypto2 {
   async e2eiMlsInitOnly(enrollment, certificateChain, nbKeyPackage) {
     return await this.#cc.e2ei_mls_init_only(enrollment.inner(), certificateChain, nbKeyPackage);
   }
+  async e2eiDumpPKIEnv() {
+    return await this.#cc.e2ei_dump_pki_env();
+  }
+  async e2eiIsPKIEnvSetup() {
+    return await this.#cc.e2ei_is_pki_env_setup();
+  }
   async e2eiRegisterAcmeCA(trustAnchorPEM) {
     return await this.#cc.e2ei_register_acme_ca(trustAnchorPEM);
   }
@@ -3037,7 +3109,7 @@ class CoreCrypto2 {
   }
   async e2eiConversationState(conversationId) {
     let state = await CoreCryptoError.asyncMapErr(this.#cc.e2ei_conversation_state(conversationId));
-    return E2eiConversationState[E2eiConversationState[state]];
+    return E2eiConversationState[state];
   }
   async e2eiIsEnabled(ciphersuite) {
     return await CoreCryptoError.asyncMapErr(this.#cc.e2ei_is_enabled(ciphersuite));
@@ -3059,7 +3131,7 @@ class CoreCrypto2 {
   }
   async getCredentialInUse(groupInfo, credentialType = CredentialType2.X509) {
     let state = await CoreCryptoError.asyncMapErr(this.#cc.get_credential_in_use(groupInfo, credentialType));
-    return E2eiConversationState[E2eiConversationState[state]];
+    return E2eiConversationState[state];
   }
   static version() {
     this.#assertModuleLoaded();
@@ -3151,6 +3223,7 @@ export {
   GroupInfoEncryptionType,
   ExternalProposalType,
   E2eiEnrollment,
+  E2eiDumpedPkiEnv,
   E2eiConversationState,
   DeviceStatus2 as DeviceStatus,
   CredentialType2 as CredentialType,