lemon-tls 0.1.0

package/crypto.js

@@ -0,0 +1,383 @@
+var { hmac: nobleHmac } = require('@noble/hashes/hmac');
+var { hkdf, extract: hkdf_extract_noble, expand: hkdf_expand_noble } = require('@noble/hashes/hkdf');
+var { sha256, sha384 } = require('@noble/hashes/sha2');
+var { p256 } = require('@noble/curves/nist');       // אם תרצה להשתמש בהמשך
+var { x25519 } = require('@noble/curves/ed25519');  // אם תרצה להשתמש בהמשך
+
+var {
+  concatUint8Arrays,
+} = require('./utils');
+
+
+
+var TLS_CIPHER_SUITES = {
+  // ----------------------
+  // TLS 1.3 (RFC 8446)
+  // ----------------------
+  0x1301: { // TLS_AES_128_GCM_SHA256
+    tls:    13,
+    kex:    'TLS13',
+    sig:    'TLS13',
+    cipher: 'AES_128_GCM',
+    aead:   true,
+    keylen: 16,
+    ivlen:  12,
+    hash:   'sha256'
+  },
+  0x1302: { // TLS_AES_256_GCM_SHA384
+    tls:    13,
+    kex:    'TLS13',
+    sig:    'TLS13',
+    cipher: 'AES_256_GCM',
+    aead:   true,
+    keylen: 32,
+    ivlen:  12,
+    hash:   'sha384'
+  },
+  0x1303: { // TLS_CHACHA20_POLY1305_SHA256
+    tls:    13,
+    kex:    'TLS13',
+    sig:    'TLS13',
+    cipher: 'CHACHA20_POLY1305',
+    aead:   true,
+    keylen: 32,
+    ivlen:  12,
+    hash:   'sha256'
+  },
+
+  // ----------------------
+  // TLS 1.2 AEAD (GCM / CHACHA20)
+  // ----------------------
+  0xC02F: { // TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
+    tls:          12,
+    kex:          'ECDHE_RSA',
+    sig:          'RSA',
+    cipher:       'AES_128_GCM',
+    aead:         true,
+    keylen:       16,
+    fixed_ivlen:  4,
+    record_ivlen: 8,
+    ivlen:        12,
+    hash:         'sha256'
+  },
+  0xC030: { // TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
+    tls:          12,
+    kex:          'ECDHE_RSA',
+    sig:          'RSA',
+    cipher:       'AES_256_GCM',
+    aead:         true,
+    keylen:       32,
+    fixed_ivlen:  4,
+    record_ivlen: 8,
+    ivlen:        12,
+    hash:         'sha384'
+  },
+  0xC02B: { // TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
+    tls:          12,
+    kex:          'ECDHE_ECDSA',
+    sig:          'ECDSA',
+    cipher:       'AES_128_GCM',
+    aead:         true,
+    keylen:       16,
+    fixed_ivlen:  4,
+    record_ivlen: 8,
+    ivlen:        12,
+    hash:         'sha256'
+  },
+  0xC02C: { // TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
+    tls:          12,
+    kex:          'ECDHE_ECDSA',
+    sig:          'ECDSA',
+    cipher:       'AES_256_GCM',
+    aead:         true,
+    keylen:       32,
+    fixed_ivlen:  4,
+    record_ivlen: 8,
+    ivlen:        12,
+    hash:         'sha384'
+  },
+  0xCCA8: { // TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
+    tls:          12,
+    kex:          'ECDHE_RSA',
+    sig:          'RSA',
+    cipher:       'CHACHA20_POLY1305',
+    aead:         true,
+    keylen:       32,
+    fixed_ivlen:  4,
+    record_ivlen: 8,
+    ivlen:        12,
+    hash:         'sha256'
+  },
+  0xCCA9: { // TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
+    tls:          12,
+    kex:          'ECDHE_ECDSA',
+    sig:          'ECDSA',
+    cipher:       'CHACHA20_POLY1305',
+    aead:         true,
+    keylen:       32,
+    fixed_ivlen:  4,
+    record_ivlen: 8,
+    ivlen:        12,
+    hash:         'sha256'
+  },
+  0xCCAA: { // TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256
+    tls:          12,
+    kex:          'DHE_RSA',
+    sig:          'RSA',
+    cipher:       'CHACHA20_POLY1305',
+    aead:         true,
+    keylen:       32,
+    fixed_ivlen:  4,
+    record_ivlen: 8,
+    ivlen:        12,
+    hash:         'sha256'
+  },
+  0x009C: { // TLS_RSA_WITH_AES_128_GCM_SHA256
+    tls:          12,
+    kex:          'RSA',
+    sig:          'RSA',
+    cipher:       'AES_128_GCM',
+    aead:         true,
+    keylen:       16,
+    fixed_ivlen:  4,
+    record_ivlen: 8,
+    ivlen:        12,
+    hash:         'sha256'
+  },
+  0x009D: { // TLS_RSA_WITH_AES_256_GCM_SHA384
+    tls:          12,
+    kex:          'RSA',
+    sig:          'RSA',
+    cipher:       'AES_256_GCM',
+    aead:         true,
+    keylen:       32,
+    fixed_ivlen:  4,
+    record_ivlen: 8,
+    ivlen:        12,
+    hash:         'sha384'
+  },
+
+  // ----------------------
+  // TLS 1.2 CBC (Legacy)
+  // ----------------------
+  0xC013: { // TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
+    tls:    12,
+    kex:    'ECDHE_RSA',
+    sig:    'RSA',
+    cipher: 'AES_128_CBC',
+    aead:   false,
+    keylen: 16,
+    ivlen:  16,
+    mac:    'sha1',
+    maclen: 20,
+    hash:   'sha256'
+  },
+  0xC014: { // TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
+    tls:    12,
+    kex:    'ECDHE_RSA',
+    sig:    'RSA',
+    cipher: 'AES_256_CBC',
+    aead:   false,
+    keylen: 32,
+    ivlen:  16,
+    mac:    'sha1',
+    maclen: 20,
+    hash:   'sha256'
+  },
+  0x003C: { // TLS_RSA_WITH_AES_128_CBC_SHA256
+    tls:    12,
+    kex:    'RSA',
+    sig:    'RSA',
+    cipher: 'AES_128_CBC',
+    aead:   false,
+    keylen: 16,
+    ivlen:  16,
+    mac:    'sha256',
+    maclen: 32,
+    hash:   'sha256'
+  },
+  0x003D: { // TLS_RSA_WITH_AES_256_CBC_SHA256
+    tls:    12,
+    kex:    'RSA',
+    sig:    'RSA',
+    cipher: 'AES_256_CBC',
+    aead:   false,
+    keylen: 32,
+    ivlen:  16,
+    mac:    'sha256',
+    maclen: 32,
+    hash:   'sha256'
+  }
+};
+
+
+
+
+
+// --- Hash helpers: מקבלים מחרוזת ומחזירים פונקציית hash + outputLen ---
+function getHashFn(hashName) {
+  if (hashName === 'sha256') return sha256;
+  if (hashName === 'sha384') return sha384;
+  throw new Error('Unsupported hash: ' + hashName);
+}
+function getHashLen(hashName) {
+  var fn = getHashFn(hashName);
+  return fn.outputLen|0;
+}
+
+// --- HMAC (עם noble) ---
+function hmac(hashName, keyU8, dataU8) {
+  var hashFn = getHashFn(hashName);
+  return nobleHmac(hashFn, keyU8, dataU8); // Uint8Array
+}
+
+// --- HKDF wrappers (hash כמחרוזת) ---
+function hkdf_extract(hashName, saltU8, ikmU8) {
+  var hashFn = getHashFn(hashName);
+  // extract(hash, ikm, salt?)
+  return hkdf_extract_noble(hashFn, ikmU8, saltU8);
+}
+function hkdf_expand(hashName, prkU8, infoU8, length) {
+  var hashFn = getHashFn(hashName);
+  // expand(hash, prk, info, length)
+  return hkdf_expand_noble(hashFn, prkU8, infoU8, length|0);
+}
+
+// --- TLS 1.3 label builder ---
+function build_hkdf_label(label, context, length) {
+  var prefix = 'tls13 ';
+  var enc = new TextEncoder();
+  var full = enc.encode(prefix + label);
+  var info = new Uint8Array(2 + 1 + full.length + 1 + context.length);
+
+  // length (2 bytes BE)
+  info[0] = (length >>> 8) & 0xff;
+  info[1] = (length       ) & 0xff;
+
+  // label
+  info[2] = full.length;
+  info.set(full, 3);
+
+  // context
+  var ofs = 3 + full.length;
+  info[ofs] = context.length;
+  info.set(context, ofs + 1);
+
+  return info;
+}
+
+function hkdf_expand_label(hashName, secret, label, context, length) {
+  var info = build_hkdf_label(label, context, length|0);
+  return hkdf_expand(hashName, secret, info, length|0);
+}
+
+// --- TLS 1.3: derive handshake secrets ---
+function derive_handshake_traffic_secrets(hashName, shared_secret, transcript) {
+  var hashFn  = getHashFn(hashName);
+
+  var hashLen = hashFn.outputLen|0;
+
+  var empty = new Uint8Array(0);
+  var zeros = new Uint8Array(hashLen); // "zeros" כ־salt בגודל hashLen
+
+  // early_secret = HKDF-Extract(zeros, PSK=empty) כשאין PSK
+  var early_secret = hkdf_extract(hashName, empty, zeros);
+
+  // derived_secret = HKDF-Expand-Label(early_secret, "derived", Hash(""), Hash.length)
+  var h_empty = hashFn(empty);
+  var derived_secret = hkdf_expand_label(hashName, early_secret, 'derived', h_empty, hashLen);
+
+  // handshake_secret = HKDF-Extract(derived_secret, shared_secret)
+  var handshake_secret = hkdf_extract(hashName, derived_secret, shared_secret);
+
+  // transcript_hash עד הנקודה הנוכחית
+
+  var transcript_hash = hashFn(transcript);
+
+  // תנועת handshake
+  var client_handshake_traffic_secret = hkdf_expand_label(hashName, handshake_secret, 'c hs traffic', transcript_hash, hashLen);
+  var server_handshake_traffic_secret = hkdf_expand_label(hashName, handshake_secret, 's hs traffic', transcript_hash, hashLen);
+
+  return {
+    handshake_secret: handshake_secret,
+    client_handshake_traffic_secret: client_handshake_traffic_secret,
+    server_handshake_traffic_secret: server_handshake_traffic_secret,
+  };
+}
+
+// --- TLS 1.3: derive application secrets ---
+function derive_app_traffic_secrets(hashName, handshake_secret, transcript) {
+  var hashFn  = getHashFn(hashName);
+  var hashLen = hashFn.outputLen|0;
+
+  var empty = new Uint8Array(0);
+  var zeros = new Uint8Array(hashLen);
+
+  // derived_secret = HKDF-Expand-Label(handshake_secret, "derived", Hash(""), Hash.length)
+  var h_empty = hashFn(empty);
+  var derived_secret = hkdf_expand_label(hashName, handshake_secret, 'derived', h_empty, hashLen);
+
+  // master_secret = HKDF-Extract(derived_secret, zeros)
+  var master_secret = hkdf_extract(hashName, derived_secret, zeros);
+
+  // hash של ה־transcript (עד Finished של ה־server בד"כ)
+  var transcript_hash = hashFn(transcript);
+
+  // תנועת application
+  var client_app_traffic_secret = hkdf_expand_label(hashName, master_secret, 'c ap traffic', transcript_hash, hashLen);
+  var server_app_traffic_secret = hkdf_expand_label(hashName, master_secret, 's ap traffic', transcript_hash, hashLen);
+
+  return {
+    client_app_traffic_secret: client_app_traffic_secret,
+    server_app_traffic_secret: server_app_traffic_secret,
+    master_secret: master_secret
+  };
+}
+
+
+function build_cert_verify_tbs(hashName, isServer, transcript){
+  if(isServer){
+    var label = new TextEncoder().encode("TLS 1.3, server CertificateVerify");
+  }else{
+    var label = new TextEncoder().encode("TLS 1.3, client CertificateVerify");
+  }
+  var separator = new Uint8Array([0x00]);
+  var padding = new Uint8Array(64).fill(0x20);
+
+  var hashFn  = getHashFn(hashName);
+  var transcript_hash = hashFn(transcript);
+
+  return concatUint8Arrays([padding, label, separator, transcript_hash]);
+}
+
+
+function get_handshake_finished(hashName, traffic_secret, transcript) {
+  var hashFn  = getHashFn(hashName);
+  var hashLen = hashFn.outputLen|0;
+
+  var empty = new Uint8Array(0);
+
+  var finished_key = hkdf_expand_label(hashName, traffic_secret, 'finished', empty, hashLen);
+  var transcript_hash = hashFn(transcript);
+  var verify_data=hmac(hashName, finished_key, transcript_hash);
+
+  return verify_data;
+}
+
+// --- Exports ---
+if (typeof module !== 'undefined' && module.exports) {
+  module.exports = {
+    TLS_CIPHER_SUITES,
+    getHashFn,
+    getHashLen,
+    hmac,
+    hkdf_extract,
+    hkdf_expand,
+    build_hkdf_label,
+    hkdf_expand_label,
+    derive_handshake_traffic_secrets,
+    derive_app_traffic_secrets,
+    build_cert_verify_tbs,
+    get_handshake_finished
+  };
+}

package/index.js

@@ -0,0 +1,15 @@
+
+var TLSSession = require('./tls_session');
+var TLSSocket = require('./tls_socket');
+var createSecureContext = require('./secure_context');
+//var {createServer} = require('./tls_server');
+//var constants = require('./constants');
+
+module.exports = {
+  TLSSession: TLSSession,
+  TLSSocket: TLSSocket,
+  createSecureContext: createSecureContext,
+  //createServer: createServer
+  //DEFAULT_CIPHERS: constants.DEFAULT_CIPHERS,
+  //DEFAULT_SIGALGS: constants.DEFAULT_SIGALGS
+};

package/lemontls.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="993" height="200" stroke="none" stroke-linecap="round" stroke-linejoin="round" fill="#fff" fill-rule="evenodd"><g fill-rule="nonzero"><path d="M172.4 56.8v85.4c0 5.2-2.7 10-7 12.6l-72.6 42.8c-4.3 2.5-9.4 2.5-13.6 0L6.5 154.8c-4.3-2.6-7-7.4-7-12.6V56.8c0-5.2 2.7-10 7-12.6L79.2 1.4c4.2-2.5 9.3-2.5 13.6 0l72.6 42.8c4.3 2.6 7 7.4 7 12.6z" fill="#4f4f4f"/><path d="M94.5 35C86 41.6 86.8 49.2 87 55.8l2.4-.3-.1-3c.5 0 1-.2 1.6-.3 11.7-5.5 6.4-25 6.4-25C97.3 30 90 33.5 85 37c-4.7 3.5-4.8 9-3.8 11.2 1 1.5 2.2 2.6 3.8 3C84 40 94.5 35 94.5 35z" fill="#65cd76"/><path d="M86 55.4c-5.2.1-9.3 3-10.3 6.6-2.8 10.4-26.2 14.3-26.2 45.5s23.4 35 26.2 45.5c1 3.7 5 6.5 10.3 6.6 5.2-.1 9.3-2.8 10.3-6.6 2.8-10.4 26.2-14.3 26.2-45.5S99 72.4 96.2 62c-1-3.7-5-6.5-10.3-6.6zM66.6 91c-5 8-5 25 0 33 .6 1 .5 2.3-.4 3.2-.1.1-.4.2-.5.4-1.2.6-2.7.3-3.5-1a44 44 0 0 1 0-38.3c.8-1.2 2.3-1.6 3.5-1 1.2.8 1.6 2.3.8 3.5z" fill="#ffed24"/></g><path d="M240.7 147.3h46.6V172h-75V28.3h28.3v119zm131.5-31v7.4h-49.6q0 12.3 3 19.5 1 2.5 3.6 5 2.7 2.6 5.6 2.6 3 0 7.2-5 4.3-5 6.7-12l21.2 15q-5.6 10.3-17 18-11.4 7.6-18.3 7.6-7 0-20.2-11-13.3-11-16-17-3-6-3-30 0-24 3-30 2.8-6 16-17 13.2-11 19.4-11 6 0 19.3 11 13.3 10.8 16 17 3 6 3 29.6zm-49.6-12H346q-.7-10.8-2.2-13.6-1.5-2.8-4.7-5.4-3.2-2.7-6-2.7-2.7 0-6.2 5.4-3.5 5.5-4.3 16.3zm143.6-11.6v79.2h-27V95.5q0-3.5-3.7-7.3-3.7-3.8-6.3-3.8-2.5 0-8.3 5v82.4h-27V101q0-10.5-2.5-16.3-2.5-5.7-7.8-10L406 59q6.7 5.7 10 11.7 13.3-12 18.5-12 3 0 10 4.5 7 4.5 12.7 11 16.2-15.4 22.5-15.4 6.3 0 19 11.4 12.6 11.4 12.6 22.4v39.6q0 10.5 2.4 16.2 2.5 5.8 7.8 10l-22.5 16q-14.8-11.7-14.8-33.3V95.5q0-3.5-3.7-7.3-3.7-3.8-6-3.8-2.4 0-8.8 5.2.5 2 .5 3zm121.5 71.6q-12.6 10-18.5 10-6 0-18.6-10-12.6-10-15.5-15-4.3-7.6-4.3-33 0-25.2 4.3-32.6 3-5 15.5-15 12.6-10 18.6-10 6 0 18.5 10 12.6 10 15.5 15 4.3 7.4 4.3 32.6 0 25.3-4.3 33-3 5-15.5 15zM564 147.6q3.2 3 5 3 1.8 0 5-3 3.2-3 4.6-5.5 2.7-4.5 2.7-25.5 0-21-2.7-25.6-1.4-2.5-4.6-5.5-3.2-3-5-3-2 0-5 3-3 3-4.6 5.5-2.7 4.5-2.7 25.4 0 21 2.7 25.7 1.5 2.4 4.6 5.5zM654 93v78.7h-27V101q0-10.5-2.5-16.3-2.5-5.7-7.8-10L639.3 59q7.6 6.2 11.2 14.2 15.2-14.4 21.5-14.4 6.2 0 18.8 11.4 12.7 11.4 12.7 22.4v39.6q0 10.5 2.4 16.2 2.5 5.8 7.8 10l-22.5 15.8q-14.8-11.7-14.8-33.3V95.5q0-3.5-3.7-7.3-3.7-3.8-7-3.8-3.2 0-11.8 8.7z" fill="#4f4f4f"/><path d="M737.3 28.3H819V53h-26.6v119H764V53h-26.7V28.3zm115.4 119h46.6V172h-75V28.3h28.3v119zm52.8-10.7l22.8-15.6q3.2 9.6 10.4 17.6 7.2 8 10.2 8 3 0 6.3-2 3.4-2 5.3-4 2.6-3.3 2.6-10.3 0-7-3.2-8.6-4-3.5-16-9.2-11.8-5.8-22-12.4-10-6.7-12.8-13-2.8-6.3-2.8-16.5 0-10 4.5-17.7 4-6 17.5-16.5 13.3-10.6 19.7-10.6 11.2 0 25.8 11.8 14.6 11.8 18.5 26l-22.8 15.8q-3.3-9.6-10.5-17.7-7-8-10-8-3 0-6.5 1.8-3.5 2-5.6 4.7-2.2 2.7-2.2 9.4 0 6.7 4 9 3.3 3 15 9 30 16.4 35.3 26.7 2.2 3.7 2.2 14.7 0 11-4.5 18.5-4 6-17.4 16.5-13.3 10.6-19.7 10.6-11.3 0-25.8-11.8-14.6-11.8-18.5-26z" fill="#838383"/></svg>

package/package.json

@@ -0,0 +1,62 @@
+{
+  "name": "lemon-tls",
+  "version": "0.1.0",
+  "description": "JavaScript TLS 1.3/1.2 implementation for Node.js, with full control over cryptographic keys and record layer",
+  "main": "index.js",
+  "type": "commonjs",
+  "keywords": [
+    "openssl",
+    "boringssl",
+    "cryptlib",
+    "rustls",
+    "low-level",
+    "https",
+    "ssl",
+    "tls",
+    "tls13",
+    "tls12",
+    "nodejs",
+    "javascript",
+    "crypto",
+    "x509",
+    "handshake",
+    "alpn",
+    "sni",
+    "hkdf",
+    "aead",
+    "quic",
+    "http3",
+    "dtls",
+    "sctp",
+    "secure",
+    "network",
+    "backend",
+    "server"
+  ],
+  "author": "colocohen",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/colocohen/lemon-tls.git"
+  },
+  "bugs": {
+    "url": "https://github.com/colocohen/lemon-tls/issues"
+  },
+  "homepage": "https://github.com/colocohen/lemon-tls",
+  "funding": [
+    {
+      "type": "github",
+      "url": "https://github.com/sponsors/colocohen"
+    },
+    {
+      "type": "opencollective",
+      "url": "https://opencollective.com/colocohen"
+    }
+  ],
+  "dependencies": {
+    "@noble/curves": "^2.0.0",
+    "@noble/hashes": "^2.0.0",
+    "@stablelib/aes": "^2.0.1",
+    "@stablelib/gcm": "^2.0.1"
+  }
+}

package/secure_context.js

@@ -0,0 +1,196 @@
+var fs = require('fs');
+var path = require('path');
+var crypto = require('crypto');
+
+function looksLikePath(x) {
+  return typeof x === 'string' && (x.indexOf('\n') === -1) && (x.length < 4096) &&
+         (x.indexOf('-----BEGIN') === -1);
+}
+
+function readMaybeFile(x) {
+  if (x == null) return null;
+  if (looksLikePath(x)) return fs.readFileSync(path.resolve(String(x)));
+  if (Buffer.isBuffer(x)) return x;
+  if (x instanceof Uint8Array) return Buffer.from(x);
+  if (typeof x === 'string') return Buffer.from(x, 'utf8');
+  throw new Error('Unsupported input type (expected path/string/Buffer/Uint8Array).');
+}
+
+function isPEM(buf) {
+  if (!buf) return false;
+  var s = buf.toString('utf8');
+  return s.indexOf('-----BEGIN ') !== -1 && s.indexOf('-----END ') !== -1;
+}
+
+function splitPEMBlocks(pemText) {
+  var out = [];
+  var re = /-----BEGIN ([A-Z0-9 \-]+)-----([\s\S]*?)-----END \1-----/g;
+  var m;
+  while ((m = re.exec(pemText)) !== null) {
+    var typ = m[1].trim();
+    var b64 = m[2].replace(/[\r\n\s]/g, '');
+    var derBuf = Buffer.from(b64, 'base64');
+    out.push({ type: typ, der: new Uint8Array(derBuf) });
+  }
+  return out;
+}
+
+function ensureArray(x) { return x == null ? [] : (Array.isArray(x) ? x : [x]); }
+
+function normalizeCA(caOption) {
+  var arr = ensureArray(caOption);
+  var ders = [];
+  for (var i = 0; i < arr.length; i++) {
+    var raw = readMaybeFile(arr[i]);
+    if (!raw) continue;
+    if (isPEM(raw)) {
+      var blocks = splitPEMBlocks(raw.toString('utf8'));
+      for (var j = 0; j < blocks.length; j++) {
+        if (blocks[j].type.indexOf('CERTIFICATE') !== -1) ders.push(blocks[j].der);
+      }
+    } else {
+      ders.push(new Uint8Array(raw));
+    }
+  }
+  return ders;
+}
+
+function makeX509FromDerOrPem(buf) {
+  return new crypto.X509Certificate(Buffer.from(buf));
+}
+
+function makePrivateKeyFromDerOrPem(buf, passphrase) {
+  if (isPEM(buf)) {
+    return crypto.createPrivateKey({ key: buf, format: 'pem', passphrase: passphrase });
+  } else {
+    var der = Buffer.from(buf), keyObj = null;
+    try {
+      keyObj = crypto.createPrivateKey({ key: der, format: 'der', type: 'pkcs8', passphrase: passphrase });
+    } catch (e1) {
+      try {
+        keyObj = crypto.createPrivateKey({ key: der, format: 'der', type: 'pkcs1', passphrase: passphrase });
+      } catch (e2) {
+        keyObj = crypto.createPrivateKey({ key: der, format: 'der', type: 'sec1', passphrase: passphrase });
+      }
+    }
+    return keyObj;
+  }
+}
+
+function exportKeyPkcs8Der(keyObj) {
+  return new Uint8Array(keyObj.export({ format: 'der', type: 'pkcs8' }));
+}
+
+function u8eq(a,b){ if (a.length!==b.length) return false; for (var i=0;i<a.length;i++) if (a[i]!==b[i]) return false; return true; }
+function dedupeDerArray(arr) {
+  var out = [];
+  for (var i=0;i<arr.length;i++) {
+    var keep = true;
+    for (var j=0;j<out.length;j++) { if (u8eq(arr[i], out[j])) { keep = false; break; } }
+    if (keep) out.push(arr[i]);
+  }
+  return out;
+}
+
+/**
+ * createSecureContext(options)
+ * key/cert/ca יכולים להיות: path | Buffer | Uint8Array | string(PEM)
+ * מחזיר:
+ *  - certificateChain: [{ cert: Uint8Array }, ...]  // leaf תחילה, אח"כ intermediates
+ *  - privateKey: Uint8Array                          // PKCS#8 DER
+ *  - ca: Uint8Array[]                                // Trust store (לא משולח ללקוח)
+ *  - ocsp: Uint8Array|null
+ *  - ticketKeys: Uint8Array|null
+ *  - certObjs, keyObj (עזרי debug/לוגיקה)
+ */
+function createSecureContext(options) {
+  if (!options) options = {};
+
+  // --- תעודות (כולל שרשרת בתוך cert אם קיימת) ---
+  var certBlocksDer = [];
+  var certObjs = [];
+  if (options.cert != null) {
+    var cRaw = readMaybeFile(options.cert);
+    if (isPEM(cRaw)) {
+      var blocks = splitPEMBlocks(cRaw.toString('utf8'));
+      for (var i=0;i<blocks.length;i++) {
+        if (blocks[i].type.indexOf('CERTIFICATE') !== -1) {
+          certBlocksDer.push(blocks[i].der);
+          certObjs.push(makeX509FromDerOrPem(blocks[i].der));
+        }
+      }
+    } else {
+      var der = new Uint8Array(cRaw);
+      certBlocksDer.push(der);
+      certObjs.push(makeX509FromDerOrPem(der));
+    }
+  }
+
+  // --- מפתח פרטי ---
+  var keyObj = null;
+  var privateKey = null;
+  if (options.key != null) {
+    var kRaw = readMaybeFile(options.key);
+    keyObj = makePrivateKeyFromDerOrPem(kRaw, options.passphrase);
+    privateKey = exportKeyPkcs8Der(keyObj);
+  }
+
+  // אימות בסיסי (כאשר לא משתמשים ב־PFX)
+  if (!options.pfx) {
+    if (certBlocksDer.length === 0) throw new Error('createSecureContext: missing cert.');
+    if (!privateKey) throw new Error('createSecureContext: missing private key.');
+  }
+
+  // --- CA (Trust store) ---
+  var ca = normalizeCA(options.ca);
+
+  // --- OCSP stapling (אופציונלי) ---
+  var ocsp = null;
+  if (options.ocsp != null) ocsp = new Uint8Array(readMaybeFile(options.ocsp));
+
+  // --- Ticket keys (אופציונלי) ---
+  var ticketKeys = null;
+  if (options.ticketKeys != null) ticketKeys = new Uint8Array(readMaybeFile(options.ticketKeys));
+  // אפשרות: ליצור מפתחי ברירת מחדל כאן אם תרצה
+
+  // --- בניית שרשרת לשיגור ללקוח (leaf → intermediates) ---
+  var chainDer = dedupeDerArray(certBlocksDer);
+  var certificateChain = [];
+  for (var c=0;c<chainDer.length;c++) {
+    certificateChain.push({ cert: chainDer[c] });
+  }
+
+  // מידע עזר לזיהוי סוג המפתח הציבורי של ה-leaf
+  var leafPublicKeyType = null;
+  if (certObjs.length > 0 && certObjs[0].publicKey) {
+    try { leafPublicKeyType = certObjs[0].publicKey.asymmetricKeyType || null; } catch (e) { leafPublicKeyType = null; }
+  }
+
+  return {
+    // חומר לשכבת ההנדשייק/רקורד:
+    certificateChain: certificateChain,  // [{ cert: DER(Uint8Array) }, ...]
+    privateKey: privateKey,              // PKCS#8 DER (Uint8Array)
+    ca: ca,                              // Trust store (DER)
+    ocsp: ocsp,                          // DER (אם הוגדר)
+    ticketKeys: ticketKeys,              // Uint8Array (אם הוגדר)
+
+    // עזרי debug/לוגיקה:
+    certObjs: certObjs,                  // [X509Certificate...]
+    keyObj: keyObj,                      // KeyObject
+    leafPublicKeyType: leafPublicKeyType,
+
+    // פרמטרים פרוטוקוליים (אחסון; אתה מפרש בזמן ה-handshake):
+    minVersion: String(options.minVersion || 'TLSv1.2'),
+    maxVersion: String(options.maxVersion || 'TLSv1.3'),
+    ciphers: options.ciphers || null,
+    sigalgs: options.sigalgs || null,
+    ecdhCurve: options.ecdhCurve || null,
+    honorCipherOrder: !!options.honorCipherOrder,
+
+    // תמיכה ב־PFX אם תרצה לטפל בזה בשכבה אחרת:
+    pfx: options.pfx ? new Uint8Array(readMaybeFile(options.pfx)) : null,
+    passphrase: options.passphrase ? String(options.passphrase) : null
+  };
+}
+
+module.exports = createSecureContext;