@zetra/citrineos-util 1.8.3-fork.1

package/dist/cache/redis.js

@@ -0,0 +1,120 @@
+// SPDX-FileCopyrightText: 2025 Contributors to the CitrineOS Project
+//
+// SPDX-License-Identifier: Apache-2.0
+import { plainToInstance } from 'class-transformer';
+import { createClient } from 'redis';
+/**
+ * Implementation of cache interface with redis storage
+ */
+export class RedisCache {
+    _client;
+    constructor(clientOptions) {
+        this._client = clientOptions ? createClient(clientOptions) : createClient();
+        this._client.on('connect', () => console.log('Redis client connected'));
+        this._client.on('ready', () => console.log('Redis client ready to use'));
+        this._client.on('error', (err) => console.error('Redis error', err));
+        this._client.on('end', () => console.log('Redis client disconnected'));
+        this._client
+            .connect()
+            .then()
+            .catch((error) => {
+            console.log('Error connecting to Redis', error);
+        });
+    }
+    exists(key, namespace) {
+        namespace = namespace || 'default';
+        key = `${namespace}:${key}`;
+        return this._client.exists(key).then((result) => result === 1);
+    }
+    remove(key, namespace) {
+        namespace = namespace || 'default';
+        key = `${namespace}:${key}`;
+        return this._client.del(key).then((result) => result === 1);
+    }
+    onChange(key, waitSeconds, namespace, classConstructor) {
+        namespace = namespace || 'default';
+        key = `${namespace}:${key}`;
+        return new Promise((resolve) => {
+            // Create a Redis subscriber to listen for operations affecting the key
+            const subscriber = createClient();
+            // Channel: Key-space, message: the name of the event, which is the command executed on the key
+            subscriber
+                .subscribe(`__keyspace@0__:${key}`, (channel, message) => {
+                switch (message) {
+                    case 'set':
+                        resolve(this.get(key, namespace, classConstructor));
+                        subscriber
+                            .quit()
+                            .then()
+                            .catch((error) => {
+                            console.log('Error quitting subscriber', error);
+                        });
+                        break;
+                    case 'del':
+                    case 'expire':
+                        resolve(null);
+                        subscriber
+                            .quit()
+                            .then()
+                            .catch((error) => {
+                            console.log('Error quitting subscriber', error);
+                        });
+                        break;
+                    default:
+                        // Do nothing
+                        break;
+                }
+            })
+                .then()
+                .catch((error) => {
+                console.log('Error creating Redis subscriber', error);
+            });
+            setTimeout(() => {
+                resolve(this.get(key, namespace, classConstructor));
+                subscriber
+                    .quit()
+                    .then()
+                    .catch((error) => {
+                    console.log('Error closing Redis subscriber', error);
+                });
+            }, waitSeconds * 1000);
+        });
+    }
+    get(key, namespace, classConstructor) {
+        namespace = namespace || 'default';
+        key = `${namespace}:${key}`;
+        return this._client.get(key).then((result) => {
+            if (result) {
+                if (classConstructor) {
+                    return plainToInstance(classConstructor(), JSON.parse(result));
+                }
+                return result;
+            }
+            return null;
+        });
+    }
+    set(key, value, namespace, expireSeconds) {
+        namespace = namespace || 'default';
+        key = `${namespace}:${key}`;
+        const setOptions = expireSeconds ? { EX: expireSeconds } : undefined;
+        return this._client.set(key, value, setOptions).then((result) => {
+            if (result) {
+                return result === 'OK';
+            }
+            return false;
+        });
+    }
+    setIfNotExist(key, value, namespace, expireSeconds) {
+        namespace = namespace || 'default';
+        key = `${namespace}:${key}`;
+        return this._client
+            .set(key, value, expireSeconds ? { EX: expireSeconds, NX: true } : { NX: true })
+            .then((result) => {
+            if (result) {
+                return result === 'OK';
+            }
+            return false;
+        });
+    }
+}
+//# sourceMappingURL=redis.js.map

package/dist/cache/redis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis.js","sourceRoot":"","sources":["../../src/cache/redis.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,EAAE;AACF,sCAAsC;AAItC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAQpD,OAAO,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AAErC;;GAEG;AACH,MAAM,OAAO,UAAU;IACb,OAAO,CAA8D;IAE7E,YAAY,aAAkC;QAC5C,IAAI,CAAC,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;QAC5E,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO;aACT,OAAO,EAAE;aACT,IAAI,EAAE;aACN,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACf,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;IACP,CAAC;IAED,MAAM,CAAC,GAAW,EAAE,SAAkB;QACpC,SAAS,GAAG,SAAS,IAAI,SAAS,CAAC;QACnC,GAAG,GAAG,GAAG,SAAS,IAAI,GAAG,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,CAAC,GAAW,EAAE,SAA8B;QAChD,SAAS,GAAG,SAAS,IAAI,SAAS,CAAC;QACnC,GAAG,GAAG,GAAG,SAAS,IAAI,GAAG,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,QAAQ,CACN,GAAW,EACX,WAAmB,EACnB,SAA8B,EAC9B,gBAA0D;QAE1D,SAAS,GAAG,SAAS,IAAI,SAAS,CAAC;QACnC,GAAG,GAAG,GAAG,SAAS,IAAI,GAAG,EAAE,CAAC;QAE5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,uEAAuE;YACvE,MAAM,UAAU,GAAG,YAAY,EAAE,CAAC;YAClC,+FAA+F;YAC/F,UAAU;iBACP,SAAS,CAAC,kBAAkB,GAAG,EAAE,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;gBACvD,QAAQ,OAAO,EAAE,CAAC;oBAChB,KAAK,KAAK;wBACR,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC;wBACpD,UAAU;6BACP,IAAI,EAAE;6BACN,IAAI,EAAE;6BACN,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;4BACf,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;wBAClD,CAAC,CAAC,CAAC;wBACL,MAAM;oBACR,KAAK,KAAK,CAAC;oBACX,KAAK,QAAQ;wBACX,OAAO,CAAC,IAAI,CAAC,CAAC;wBACd,UAAU;6BACP,IAAI,EAAE;6BACN,IAAI,EAAE;6BACN,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;4BACf,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;wBAClD,CAAC,CAAC,CAAC;wBACL,MAAM;oBACR;wBACE,aAAa;wBACb,MAAM;gBACV,CAAC;YACH,CAAC,CAAC;iBACD,IAAI,EAAE;iBACN,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACf,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAC;YACxD,CAAC,CAAC,CAAC;YACL,UAAU,CAAC,GAAG,EAAE;gBACd,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC;gBACpD,UAAU;qBACP,IAAI,EAAE;qBACN,IAAI,EAAE;qBACN,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;oBACf,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAC;gBACvD,CAAC,CAAC,CAAC;YACP,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CACD,GAAW,EACX,SAAkB,EAClB,gBAA4C;QAE5C,SAAS,GAAG,SAAS,IAAI,SAAS,CAAC;QACnC,GAAG,GAAG,GAAG,SAAS,IAAI,GAAG,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YAC3C,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,gBAAgB,EAAE,CAAC;oBACrB,OAAO,eAAe,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;gBACjE,CAAC;gBACD,OAAO,MAAW,CAAC;YACrB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAC,GAAW,EAAE,KAAa,EAAE,SAAkB,EAAE,aAAsB;QACxE,SAAS,GAAG,SAAS,IAAI,SAAS,CAAC;QACnC,GAAG,GAAG,GAAG,SAAS,IAAI,GAAG,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACrE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YAC9D,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,MAAM,KAAK,IAAI,CAAC;YACzB,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CACX,GAAW,EACX,KAAa,EACb,SAAkB,EAClB,aAAsB;QAEtB,SAAS,GAAG,SAAS,IAAI,SAAS,CAAC;QACnC,GAAG,GAAG,GAAG,SAAS,IAAI,GAAG,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,OAAO;aAChB,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;aAC/E,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACf,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,MAAM,KAAK,IAAI,CAAC;YACzB,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC,CAAC;IACP,CAAC;CACF"}

package/dist/certificate/CertificateAuthority.d.ts

@@ -0,0 +1,38 @@
+import type { ICache, SystemConfig } from '@citrineos/base';
+import { OCPP2_0_1 } from '@citrineos/base';
+import type { IChargingStationCertificateAuthorityClient, IV2GCertificateAuthorityClient } from './client/interface.js';
+import type { ILogObj } from 'tslog';
+import { Logger } from 'tslog';
+export declare class CertificateAuthorityService {
+    private readonly _v2gClient;
+    private readonly _chargingStationClient;
+    private readonly _logger;
+    private readonly _cache;
+    private readonly _config;
+    constructor(config: SystemConfig, cache: ICache, logger?: Logger<ILogObj>, chargingStationClient?: IChargingStationCertificateAuthorityClient, v2gClient?: IV2GCertificateAuthorityClient);
+    /**
+     * Retrieves the certificate chain for V2G- and Charging Station certificates.
+     *
+     * @param {string} csrString - The Certificate Signing Request string.
+     * @param {string} stationId - The station identifier.
+     * @param {CertificateSigningUseEnumType} [certificateType] - The type of certificate to retrieve.
+     * @return {Promise<string>} The certificate chain without the root certificate.
+     */
+    getCertificateChain(csrString: string, stationId: string, certificateType?: OCPP2_0_1.CertificateSigningUseEnumType | null): Promise<string>;
+    signedSubCaCertificateByExternalCA(csrString: string): Promise<string>;
+    getSignedContractData(iso15118SchemaVersion: string, exiRequest: string): Promise<string>;
+    getRootCACertificateFromExternalCA(certificateType: OCPP2_0_1.InstallCertificateUseEnumType): Promise<string>;
+    updateSecurityCertChainKeyMap(serverId: string, certificateChain: string, privateKey: string): void;
+    validateCertificateChainPem(certificateChainPem: string): Promise<OCPP2_0_1.AuthorizeCertificateStatusEnumType>;
+    validateCertificateHashData(ocspRequestData: OCPP2_0_1.OCSPRequestDataType[]): Promise<OCPP2_0_1.AuthorizeCertificateStatusEnumType>;
+    /**
+     * Create a certificate chain including leaf and sub CA certificates except for the root certificate.
+     *
+     * @param {string} signedCert - The leaf certificate.
+     * @param {string} caCerts - CA certificates.
+     * @return {string} The certificate chain pem.
+     */
+    private _createCertificateChainWithoutRootCA;
+    private _instantiateV2GClient;
+    private _instantiateChargingStationClient;
+}

package/dist/certificate/CertificateAuthority.js

@@ -0,0 +1,233 @@
+import { OCPP2_0_1 } from '@citrineos/base';
+import { Hubject } from './client/hubject.js';
+import { Acme } from './client/acme.js';
+import { Logger } from 'tslog';
+import * as pkijs from 'pkijs';
+import { Certificate } from 'pkijs';
+import jsrsasign, { KJUR, X509 } from 'jsrsasign';
+import moment from 'moment';
+import { createPemBlock, dateTimeFormat, extractCertificateArrayFromEncodedString, extractEncodedContentFromCSR, parseCertificateChainPem, sendOCSPRequest, } from './CertificateUtil.js';
+import { Crypto } from '@peculiar/webcrypto';
+var OCSPRequest = jsrsasign.KJUR.asn1.ocsp.OCSPRequest;
+var Request = jsrsasign.KJUR.asn1.ocsp.Request;
+const cryptoEngine = new pkijs.CryptoEngine({
+    crypto: new Crypto(),
+});
+pkijs.setEngine('crypto', cryptoEngine);
+export class CertificateAuthorityService {
+    _v2gClient;
+    _chargingStationClient;
+    _logger;
+    _cache;
+    _config;
+    constructor(config, cache, logger, chargingStationClient, v2gClient) {
+        this._config = config;
+        this._cache = cache;
+        this._logger = logger
+            ? logger.getSubLogger({ name: this.constructor.name })
+            : new Logger({ name: this.constructor.name });
+        this._chargingStationClient = chargingStationClient || this._instantiateChargingStationClient();
+        this._v2gClient = v2gClient || this._instantiateV2GClient();
+    }
+    /**
+     * Retrieves the certificate chain for V2G- and Charging Station certificates.
+     *
+     * @param {string} csrString - The Certificate Signing Request string.
+     * @param {string} stationId - The station identifier.
+     * @param {CertificateSigningUseEnumType} [certificateType] - The type of certificate to retrieve.
+     * @return {Promise<string>} The certificate chain without the root certificate.
+     */
+    async getCertificateChain(csrString, stationId, certificateType) {
+        this._logger.info(`Getting certificate chain for certificateType: ${certificateType} and stationId: ${stationId}`);
+        switch (certificateType) {
+            case OCPP2_0_1.CertificateSigningUseEnumType.V2GCertificate: {
+                const signedCert = await this._v2gClient.getSignedCertificate(extractEncodedContentFromCSR(csrString));
+                const caCerts = await this._v2gClient.getCACertificates();
+                return this._createCertificateChainWithoutRootCA(signedCert, caCerts);
+            }
+            case OCPP2_0_1.CertificateSigningUseEnumType.ChargingStationCertificate: {
+                return await this._chargingStationClient.getCertificateChain(csrString);
+            }
+            default: {
+                throw new Error(`Unsupported certificate type: ${certificateType}`);
+            }
+        }
+    }
+    async signedSubCaCertificateByExternalCA(csrString) {
+        return await this._chargingStationClient.signCertificateByExternalCA(csrString);
+    }
+    async getSignedContractData(iso15118SchemaVersion, exiRequest) {
+        return await this._v2gClient.getSignedContractData(iso15118SchemaVersion, exiRequest);
+    }
+    async getRootCACertificateFromExternalCA(certificateType) {
+        switch (certificateType) {
+            case OCPP2_0_1.InstallCertificateUseEnumType.V2GRootCertificate: {
+                const caCerts = await this._v2gClient.getCACertificates();
+                const rootCACert = extractCertificateArrayFromEncodedString(caCerts).pop();
+                if (rootCACert) {
+                    return createPemBlock(Buffer.from(rootCACert.toSchema().toBER(false)).toString('base64'));
+                }
+                else {
+                    throw new Error(`V2GRootCertificate not found from ${caCerts}`);
+                }
+            }
+            case OCPP2_0_1.InstallCertificateUseEnumType.CSMSRootCertificate:
+                return await this._chargingStationClient.getRootCACertificate();
+            default:
+                throw new Error(`Certificate type: ${certificateType} not implemented.`);
+        }
+    }
+    updateSecurityCertChainKeyMap(serverId, certificateChain, privateKey) {
+        this._chargingStationClient.updateCertificateChainKeyMap(serverId, certificateChain, privateKey);
+    }
+    /*
+     * Validate the certificate chain using real time OCSP check.
+     *
+     * @param certificateChainPem - certificate chain pem
+     * @return AuthorizeCertificateStatusEnumType
+     */
+    async validateCertificateChainPem(certificateChainPem) {
+        const certificatePems = parseCertificateChainPem(certificateChainPem);
+        this._logger.debug(`Found ${certificatePems.length} certificates in chain.`);
+        if (certificatePems.length < 1) {
+            return OCPP2_0_1.AuthorizeCertificateStatusEnumType.NoCertificateAvailable;
+        }
+        try {
+            // Find the root certificate of the certificate chain
+            const rootCerts = await this._v2gClient.getRootCertificates();
+            const lastCertInChain = new X509();
+            lastCertInChain.readCertPEM(certificatePems[certificatePems.length - 1]);
+            let rootCertPem;
+            for (const rootCert of rootCerts) {
+                const root = new X509();
+                root.readCertPEM(rootCert);
+                if (root.getSubjectString() === lastCertInChain.getIssuerString() &&
+                    root.getExtSubjectKeyIdentifier().kid.hex ===
+                        lastCertInChain.getExtAuthorityKeyIdentifier().kid.hex) {
+                    rootCertPem = rootCert;
+                    break;
+                }
+            }
+            if (!rootCertPem) {
+                this._logger.error(`Cannot find root certificate for certificate ${lastCertInChain}`);
+                return OCPP2_0_1.AuthorizeCertificateStatusEnumType.NoCertificateAvailable;
+            }
+            else {
+                certificatePems.push(rootCertPem);
+            }
+            // OCSP validation for each certificate
+            for (let i = 0; i < certificatePems.length - 1; i++) {
+                const subjectCert = new X509();
+                subjectCert.readCertPEM(certificatePems[i]);
+                this._logger.debug(`Subject Certificate: ${subjectCert.getInfo()}`);
+                const notAfter = moment(subjectCert.getNotAfter(), dateTimeFormat);
+                if (notAfter.isBefore(moment())) {
+                    return OCPP2_0_1.AuthorizeCertificateStatusEnumType.CertificateExpired;
+                }
+                const ocspUrls = subjectCert.getExtAIAInfo()?.ocsp;
+                if (ocspUrls && ocspUrls.length > 0) {
+                    const ocspRequest = new OCSPRequest({
+                        reqList: [
+                            {
+                                issuerCert: certificatePems[i + 1],
+                                subjectCert: certificatePems[i],
+                            },
+                        ],
+                    });
+                    this._logger.debug(`OCSP response URL: ${ocspUrls[0]}`);
+                    const ocspResponse = KJUR.asn1.ocsp.OCSPUtil.getOCSPResponseInfo(await sendOCSPRequest(ocspRequest, ocspUrls[0]));
+                    const certStatus = ocspResponse.certStatus;
+                    if (certStatus === 'revoked') {
+                        return OCPP2_0_1.AuthorizeCertificateStatusEnumType.CertificateRevoked;
+                    }
+                    else if (certStatus !== 'good') {
+                        return OCPP2_0_1.AuthorizeCertificateStatusEnumType.NoCertificateAvailable;
+                    }
+                }
+                else {
+                    this._logger.error(`Certificate ${certificatePems[i]} has no OCSP URL.`);
+                    return OCPP2_0_1.AuthorizeCertificateStatusEnumType.CertChainError;
+                }
+            }
+        }
+        catch (error) {
+            this._logger.error(`Failed to validate certificate chain: ${error}`);
+            return OCPP2_0_1.AuthorizeCertificateStatusEnumType.NoCertificateAvailable;
+        }
+        return OCPP2_0_1.AuthorizeCertificateStatusEnumType.Accepted;
+    }
+    async validateCertificateHashData(ocspRequestData) {
+        for (const reqData of ocspRequestData) {
+            const ocspRequest = new Request({
+                alg: reqData.hashAlgorithm,
+                keyhash: reqData.issuerKeyHash,
+                namehash: reqData.issuerNameHash,
+                serial: reqData.serialNumber,
+            });
+            this._logger.debug(`OCSP request: ${JSON.stringify(ocspRequest)}`);
+            try {
+                const ocspResponse = KJUR.asn1.ocsp.OCSPUtil.getOCSPResponseInfo(await sendOCSPRequest(ocspRequest, reqData.responderURL));
+                // Cert statuses: good, revoked, unknown
+                // source: https://kjur.github.io/jsrsasign/api/symbols/KJUR.asn1.ocsp.OCSPUtil.html#.getOCSPResponseInfo
+                const certStatus = ocspResponse.certStatus;
+                if (certStatus === 'revoked') {
+                    return OCPP2_0_1.AuthorizeCertificateStatusEnumType.CertificateRevoked;
+                }
+                else if (certStatus !== 'good') {
+                    return OCPP2_0_1.AuthorizeCertificateStatusEnumType.NoCertificateAvailable;
+                }
+            }
+            catch (error) {
+                this._logger.error(`Failed to fetch OCSP response: ${error}`);
+                return OCPP2_0_1.AuthorizeCertificateStatusEnumType.NoCertificateAvailable;
+            }
+        }
+        return OCPP2_0_1.AuthorizeCertificateStatusEnumType.Accepted;
+    }
+    /**
+     * Create a certificate chain including leaf and sub CA certificates except for the root certificate.
+     *
+     * @param {string} signedCert - The leaf certificate.
+     * @param {string} caCerts - CA certificates.
+     * @return {string} The certificate chain pem.
+     */
+    _createCertificateChainWithoutRootCA(signedCert, caCerts) {
+        let certificateChain = '';
+        // Add Cert
+        const leafRaw = extractCertificateArrayFromEncodedString(signedCert)[0];
+        if (leafRaw) {
+            certificateChain += createPemBlock(Buffer.from(leafRaw.toSchema().toBER(false)).toString('base64'));
+        }
+        else {
+            throw new Error(`Cannot extract leaf certificate from the pem: ${signedCert}`);
+        }
+        // Add Chain without Root CA Certificate
+        const chainWithoutRoot = extractCertificateArrayFromEncodedString(caCerts).slice(0, -1);
+        chainWithoutRoot.forEach((certItem) => {
+            const cert = certItem;
+            certificateChain += createPemBlock(Buffer.from(cert.toSchema().toBER(false)).toString('base64'));
+        });
+        return certificateChain;
+    }
+    _instantiateV2GClient() {
+        switch (this._config.util.certificateAuthority.v2gCA.name) {
+            case 'hubject': {
+                return new Hubject(this._config, this._cache, this._logger);
+            }
+            default: {
+                throw new Error(`Unsupported V2G CA: ${this._config.util.certificateAuthority.v2gCA.name}`);
+            }
+        }
+    }
+    _instantiateChargingStationClient() {
+        switch (this._config.util.certificateAuthority.chargingStationCA.name) {
+            case 'acme': {
+                return new Acme(this._config, this._logger);
+            }
+            default: {
+                throw new Error(`Unsupported Charging Station CA: ${this._config.util.certificateAuthority.chargingStationCA.name}`);
+            }
+        }
+    }
+}
+//# sourceMappingURL=CertificateAuthority.js.map

package/dist/certificate/CertificateAuthority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CertificateAuthority.js","sourceRoot":"","sources":["../../src/certificate/CertificateAuthority.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAK5C,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAExC,OAAO,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAC/B,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AACpC,OAAO,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAClD,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EACL,cAAc,EACd,cAAc,EACd,wCAAwC,EACxC,4BAA4B,EAC5B,wBAAwB,EACxB,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,IAAO,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;AAC1D,IAAO,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;AAElD,MAAM,YAAY,GAAG,IAAI,KAAK,CAAC,YAAY,CAAC;IAC1C,MAAM,EAAE,IAAI,MAAM,EAAE;CACrB,CAAC,CAAC;AACH,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,YAAmC,CAAC,CAAC;AAE/D,MAAM,OAAO,2BAA2B;IACrB,UAAU,CAAiC;IAC3C,sBAAsB,CAA6C;IACnE,OAAO,CAAkB;IACzB,MAAM,CAAS;IACf,OAAO,CAAe;IAEvC,YACE,MAAoB,EACpB,KAAa,EACb,MAAwB,EACxB,qBAAkE,EAClE,SAA0C;QAE1C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,OAAO,GAAG,MAAM;YACnB,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YACtD,CAAC,CAAC,IAAI,MAAM,CAAU,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;QAEzD,IAAI,CAAC,sBAAsB,GAAG,qBAAqB,IAAI,IAAI,CAAC,iCAAiC,EAAE,CAAC;QAChG,IAAI,CAAC,UAAU,GAAG,SAAS,IAAI,IAAI,CAAC,qBAAqB,EAAE,CAAC;IAC9D,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,mBAAmB,CACvB,SAAiB,EACjB,SAAiB,EACjB,eAAgE;QAEhE,IAAI,CAAC,OAAO,CAAC,IAAI,CACf,kDAAkD,eAAe,mBAAmB,SAAS,EAAE,CAChG,CAAC;QAEF,QAAQ,eAAe,EAAE,CAAC;YACxB,KAAK,SAAS,CAAC,6BAA6B,CAAC,cAAc,CAAC,CAAC,CAAC;gBAC5D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAC3D,4BAA4B,CAAC,SAAS,CAAC,CACxC,CAAC;gBACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;gBAC1D,OAAO,IAAI,CAAC,oCAAoC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACxE,CAAC;YACD,KAAK,SAAS,CAAC,6BAA6B,CAAC,0BAA0B,CAAC,CAAC,CAAC;gBACxE,OAAO,MAAM,IAAI,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;YAC1E,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,IAAI,KAAK,CAAC,iCAAiC,eAAe,EAAE,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,kCAAkC,CAAC,SAAiB;QACxD,OAAO,MAAM,IAAI,CAAC,sBAAsB,CAAC,2BAA2B,CAAC,SAAS,CAAC,CAAC;IAClF,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,qBAA6B,EAAE,UAAkB;QAC3E,OAAO,MAAM,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,qBAAqB,EAAE,UAAU,CAAC,CAAC;IACxF,CAAC;IAED,KAAK,CAAC,kCAAkC,CACtC,eAAwD;QAExD,QAAQ,eAAe,EAAE,CAAC;YACxB,KAAK,SAAS,CAAC,6BAA6B,CAAC,kBAAkB,CAAC,CAAC,CAAC;gBAChE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC;gBAC1D,MAAM,UAAU,GAAG,wCAAwC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC;gBAC3E,IAAI,UAAU,EAAE,CAAC;oBACf,OAAO,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAC5F,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,KAAK,CAAC,qCAAqC,OAAO,EAAE,CAAC,CAAC;gBAClE,CAAC;YACH,CAAC;YACD,KAAK,SAAS,CAAC,6BAA6B,CAAC,mBAAmB;gBAC9D,OAAO,MAAM,IAAI,CAAC,sBAAsB,CAAC,oBAAoB,EAAE,CAAC;YAClE;gBACE,MAAM,IAAI,KAAK,CAAC,qBAAqB,eAAe,mBAAmB,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,6BAA6B,CAAC,QAAgB,EAAE,gBAAwB,EAAE,UAAkB;QAC1F,IAAI,CAAC,sBAAsB,CAAC,4BAA4B,CACtD,QAAQ,EACR,gBAAgB,EAChB,UAAU,CACX,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,2BAA2B,CACtC,mBAA2B;QAE3B,MAAM,eAAe,GAAa,wBAAwB,CAAC,mBAAmB,CAAC,CAAC;QAChF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,eAAe,CAAC,MAAM,yBAAyB,CAAC,CAAC;QAC7E,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,OAAO,SAAS,CAAC,kCAAkC,CAAC,sBAAsB,CAAC;QAC7E,CAAC;QAED,IAAI,CAAC;YACH,qDAAqD;YACrD,MAAM,SAAS,GAAa,MAAM,IAAI,CAAC,UAAU,CAAC,mBAAmB,EAAE,CAAC;YACxE,MAAM,eAAe,GAAG,IAAI,IAAI,EAAE,CAAC;YACnC,eAAe,CAAC,WAAW,CAAC,eAAe,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YACzE,IAAI,WAAW,CAAC;YAChB,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;gBACxB,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;gBAC3B,IACE,IAAI,CAAC,gBAAgB,EAAE,KAAK,eAAe,CAAC,eAAe,EAAE;oBAC7D,IAAI,CAAC,0BAA0B,EAAE,CAAC,GAAG,CAAC,GAAG;wBACvC,eAAe,CAAC,4BAA4B,EAAE,CAAC,GAAG,CAAC,GAAG,EACxD,CAAC;oBACD,WAAW,GAAG,QAAQ,CAAC;oBACvB,MAAM;gBACR,CAAC;YACH,CAAC;YACD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,gDAAgD,eAAe,EAAE,CAAC,CAAC;gBACtF,OAAO,SAAS,CAAC,kCAAkC,CAAC,sBAAsB,CAAC;YAC7E,CAAC;iBAAM,CAAC;gBACN,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACpC,CAAC;YAED,uCAAuC;YACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpD,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;gBAC/B,WAAW,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,wBAAwB,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBAEpE,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,cAAc,CAAC,CAAC;gBACnE,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;oBAChC,OAAO,SAAS,CAAC,kCAAkC,CAAC,kBAAkB,CAAC;gBACzE,CAAC;gBAED,MAAM,QAAQ,GAAG,WAAW,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC;gBACnD,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpC,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC;wBAClC,OAAO,EAAE;4BACP;gCACE,UAAU,EAAE,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC;gCAClC,WAAW,EAAE,eAAe,CAAC,CAAC,CAAC;6BAChC;yBACF;qBACF,CAAC,CAAC;oBAEH,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,sBAAsB,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACxD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAC9D,MAAM,eAAe,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAChD,CAAC;oBACF,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,CAAC;oBAC3C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;wBAC7B,OAAO,SAAS,CAAC,kCAAkC,CAAC,kBAAkB,CAAC;oBACzE,CAAC;yBAAM,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;wBACjC,OAAO,SAAS,CAAC,kCAAkC,CAAC,sBAAsB,CAAC;oBAC7E,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,eAAe,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;oBACzE,OAAO,SAAS,CAAC,kCAAkC,CAAC,cAAc,CAAC;gBACrE,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,yCAAyC,KAAK,EAAE,CAAC,CAAC;YACrE,OAAO,SAAS,CAAC,kCAAkC,CAAC,sBAAsB,CAAC;QAC7E,CAAC;QAED,OAAO,SAAS,CAAC,kCAAkC,CAAC,QAAQ,CAAC;IAC/D,CAAC;IAEM,KAAK,CAAC,2BAA2B,CACtC,eAAgD;QAEhD,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;YACtC,MAAM,WAAW,GAAG,IAAI,OAAO,CAAC;gBAC9B,GAAG,EAAE,OAAO,CAAC,aAAa;gBAC1B,OAAO,EAAE,OAAO,CAAC,aAAa;gBAC9B,QAAQ,EAAE,OAAO,CAAC,cAAc;gBAChC,MAAM,EAAE,OAAO,CAAC,YAAY;aAC7B,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YAEnE,IAAI,CAAC;gBACH,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAC9D,MAAM,eAAe,CAAC,WAAW,EAAE,OAAO,CAAC,YAAY,CAAC,CACzD,CAAC;gBACF,wCAAwC;gBACxC,yGAAyG;gBACzG,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,CAAC;gBAC3C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;oBAC7B,OAAO,SAAS,CAAC,kCAAkC,CAAC,kBAAkB,CAAC;gBACzE,CAAC;qBAAM,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;oBACjC,OAAO,SAAS,CAAC,kCAAkC,CAAC,sBAAsB,CAAC;gBAC7E,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,kCAAkC,KAAK,EAAE,CAAC,CAAC;gBAC9D,OAAO,SAAS,CAAC,kCAAkC,CAAC,sBAAsB,CAAC;YAC7E,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC,kCAAkC,CAAC,QAAQ,CAAC;IAC/D,CAAC;IAED;;;;;;OAMG;IACK,oCAAoC,CAAC,UAAkB,EAAE,OAAe;QAC9E,IAAI,gBAAgB,GAAG,EAAE,CAAC;QAC1B,WAAW;QACX,MAAM,OAAO,GAAG,wCAAwC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,IAAI,OAAO,EAAE,CAAC;YACZ,gBAAgB,IAAI,cAAc,CAChC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAChE,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,iDAAiD,UAAU,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,wCAAwC;QACxC,MAAM,gBAAgB,GAAG,wCAAwC,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACxF,gBAAgB,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;YACpC,MAAM,IAAI,GAAG,QAAuB,CAAC;YACrC,gBAAgB,IAAI,cAAc,CAChC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAC7D,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAEO,qBAAqB;QAC3B,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAC1D,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9D,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;IACH,CAAC;IAEO,iCAAiC;QACvC,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;YACtE,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9C,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,IAAI,KAAK,CACb,oCAAoC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,IAAI,EAAE,CACpG,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/certificate/CertificateUtil.d.ts

@@ -0,0 +1,60 @@
+import * as pkijs from 'pkijs';
+import { CertificationRequest } from 'pkijs';
+import { Certificate, CountryNameEnumType, SignatureAlgorithmEnumType } from '@citrineos/data';
+import jsrsasign from 'jsrsasign';
+import moment from 'moment';
+import type { ILogObj } from 'tslog';
+import { Logger } from 'tslog';
+import KJUR = jsrsasign.KJUR;
+import OCSPRequest = jsrsasign.KJUR.asn1.ocsp.OCSPRequest;
+import Request = jsrsasign.KJUR.asn1.ocsp.Request;
+export declare const dateTimeFormat = "YYMMDDHHmmssZ";
+export declare function getValidityTimeString(time: moment.Moment): string;
+export declare function createPemBlock(content: string): string;
+export declare function parseCertificateChainPem(pem: string): string[];
+/**
+ * Decode the pem and extract certificates
+ * @param pem - base64 encoded certificate chain string without header and footer
+ * @return array of pkijs.CertificateSetItem
+ */
+export declare function extractCertificateArrayFromEncodedString(pem: string): pkijs.CertificateSetItem[];
+/**
+ * extracts the base64-encoded content from a pem encoded csr
+ * @param csrPem
+ * @private
+ * @return {string} The parsed CSR or the original CSR if it cannot be parsed
+ */
+export declare function extractEncodedContentFromCSR(csrPem: string): string;
+/**
+ * Generate certificate and its private key
+ *
+ * @param certificateEntity - the certificate
+ * @param logger - the logger
+ * @param issuerKeyPem - the issuer private key
+ * @param issuerCertPem - the issuer certificate
+ *
+ * @return generated certificate pem and its private key pem
+ */
+export declare function generateCertificate(certificateEntity: Certificate, logger: Logger<ILogObj>, issuerKeyPem?: string, issuerCertPem?: string): [string, string];
+/**
+ * Create a signed certificate for the provided CSR using the issuer certificate, and its private key.
+ *
+ * @param csrPem - The CSR that need to be signed.
+ * @param issuerCertPem - The issuer certificate.
+ * @param issuerPrivateKeyPem - The issuer private key.
+ * @return {KJUR.asn1.x509.Certificate} The signed certificate.
+ */
+export declare function createSignedCertificateFromCSR(csrPem: string, issuerCertPem: string, issuerPrivateKeyPem: string): KJUR.asn1.x509.Certificate;
+export declare function sendOCSPRequest(ocspRequest: OCSPRequest | Request, responderURL: string): Promise<string>;
+export declare function parseCSRForVerification(csrPem: string): CertificationRequest;
+export declare function generateCSR(certificate: Certificate): [string, string];
+export declare const parseX509Date: (date: string) => Date | null;
+export declare const extractCertificateDetails: (pemString: string) => {
+    serialNumber: number | null;
+    issuerName: string | null;
+    organizationName: string | null;
+    commonName: string | null;
+    countryName: CountryNameEnumType | null;
+    validBefore: Date | null;
+    signatureAlgorithm: SignatureAlgorithmEnumType | null;
+};