node-opcua-crypto 4.10.0 → 4.12.0

package/dist/source/index_web.mjs

@@ -4,28 +4,8 @@ import {
   RSA_PKCS1_OAEP_PADDING,
   RSA_PKCS1_PADDING,
   Subject,
-  TagType,
   _coercePrivateKey,
-  _findBlockAtIndex,
-  _getBlock,
-  _readAlgorithmIdentifier,
-  _readBitString,
-  _readBooleanValue,
-  _readDirectoryName,
-  _readECCAlgorithmIdentifier,
-  _readExtension,
-  _readIntegerAsByteString,
-  _readIntegerValue,
-  _readListOfInteger,
-  _readLongIntegerValue,
-  _readObjectIdentifier,
-  _readOctetString,
-  _readSignatureValue,
-  _readSignatureValueBin,
-  _readStruct,
-  _readTime,
-  _readValue,
-  _readVersionValue,
+  asn1,
   certificateMatchesPrivateKey,
   coerceCertificate,
   coerceCertificatePem,
@@ -34,7 +14,6 @@ import {
   coercePublicKeyPem,
   coerceRsaPublicKeyPem,
   combine_der,
-  compactDirectoryName,
   computeDerivedKeys,
   computePaddingFooter,
   convertPEMtoDER,
@@ -44,6 +23,7 @@ import {
   decryptBufferWithDerivedKeys,
   derToPrivateKey,
   encryptBufferWithDerivedKeys,
+  exploreAsn1,
   exploreCertificate,
   exploreCertificateInfo,
   exploreCertificateRevocationList,
@@ -51,7 +31,6 @@ import {
   explorePrivateKey,
   extractPublicKeyFromCertificate,
   extractPublicKeyFromCertificateSync,
-  formatBuffer2DigitHexWithColum,
   generateKeyPair,
   generatePrivateKey,
   hexDump,
@@ -60,9 +39,9 @@ import {
   makeMessageChunkSignature,
   makeMessageChunkSignatureWithDerivedKeys,
   makePrivateKeyFromPem,
+  makePrivateKeyThumbPrint,
   makePseudoRandomBuffer,
   makeSHA1Thumbprint,
-  parseBitString,
   pemToPrivateKey,
   privateDecrypt,
   privateDecrypt_long,
@@ -73,8 +52,8 @@ import {
   publicEncrypt_native,
   publicKeyAndPrivateKeyMatches,
   readCertificationRequestInfo,
+  readExtension,
   readNameForCrl,
-  readTag,
   readTbsCertificate,
   reduceLength,
   removePadding,
@@ -92,35 +71,15 @@ import {
   verifyChunkSignature,
   verifyChunkSignatureWithDerivedKeys,
   verifyMessageChunkSignature
-} from "../chunk-46EEAYVO.mjs";
+} from "../chunk-LHUQUHQQ.mjs";
 export {
   CertificatePurpose,
   PaddingAlgorithm,
   RSA_PKCS1_OAEP_PADDING,
   RSA_PKCS1_PADDING,
   Subject,
-  TagType,
   _coercePrivateKey,
-  _findBlockAtIndex,
-  _getBlock,
-  _readAlgorithmIdentifier,
-  _readBitString,
-  _readBooleanValue,
-  _readDirectoryName,
-  _readECCAlgorithmIdentifier,
-  _readExtension,
-  _readIntegerAsByteString,
-  _readIntegerValue,
-  _readListOfInteger,
-  _readLongIntegerValue,
-  _readObjectIdentifier,
-  _readOctetString,
-  _readSignatureValue,
-  _readSignatureValueBin,
-  _readStruct,
-  _readTime,
-  _readValue,
-  _readVersionValue,
+  asn1,
   certificateMatchesPrivateKey,
   coerceCertificate,
   coerceCertificatePem,
@@ -129,7 +88,6 @@ export {
   coercePublicKeyPem,
   coerceRsaPublicKeyPem,
   combine_der,
-  compactDirectoryName,
   computeDerivedKeys,
   computePaddingFooter,
   convertPEMtoDER,
@@ -139,6 +97,7 @@ export {
   decryptBufferWithDerivedKeys,
   derToPrivateKey,
   encryptBufferWithDerivedKeys,
+  exploreAsn1,
   exploreCertificate,
   exploreCertificateInfo,
   exploreCertificateRevocationList,
@@ -146,7 +105,6 @@ export {
   explorePrivateKey,
   extractPublicKeyFromCertificate,
   extractPublicKeyFromCertificateSync,
-  formatBuffer2DigitHexWithColum,
   generateKeyPair,
   generatePrivateKey,
   hexDump,
@@ -155,9 +113,9 @@ export {
   makeMessageChunkSignature,
   makeMessageChunkSignatureWithDerivedKeys,
   makePrivateKeyFromPem,
+  makePrivateKeyThumbPrint,
   makePseudoRandomBuffer,
   makeSHA1Thumbprint,
-  parseBitString,
   pemToPrivateKey,
   privateDecrypt,
   privateDecrypt_long,
@@ -168,8 +126,8 @@ export {
   publicEncrypt_native,
   publicKeyAndPrivateKeyMatches,
   readCertificationRequestInfo,
+  readExtension,
   readNameForCrl,
-  readTag,
   readTbsCertificate,
   reduceLength,
   removePadding,

package/dist/source_nodejs/index.d.mts

@@ -9,7 +9,6 @@ declare function readCertificate(filename: string): Certificate;
  * read a DER or PEM certificate from file
  */
 declare function readPublicKey(filename: string): PublicKey;
-declare function makePrivateKeyThumbPrint(privateKey: PrivateKey): Buffer;
 /**
  * read a DER or PEM certificate from file
  */
@@ -43,4 +42,4 @@ declare function generatePrivateKeyFile(privateKeyFilename: string, modulusLengt
  */
 declare function generatePrivateKeyFileAlternate(privateKeyFilename: string, modulusLength: 2048 | 3072 | 4096): Promise<void>;
 
-export { type CertificateSigningRequest, generatePrivateKeyFile, generatePrivateKeyFileAlternate, getCertificateStore, makePrivateKeyThumbPrint, readCertificate, readCertificatePEM, readCertificateRevocationList, readCertificateSigningRequest, readPrivateKey, readPrivateKeyPEM, readPrivateRsaKey, readPublicKey, readPublicKeyPEM, readPublicRsaKey, setCertificateStore };
+export { type CertificateSigningRequest, generatePrivateKeyFile, generatePrivateKeyFileAlternate, getCertificateStore, readCertificate, readCertificatePEM, readCertificateRevocationList, readCertificateSigningRequest, readPrivateKey, readPrivateKeyPEM, readPrivateRsaKey, readPublicKey, readPublicKeyPEM, readPublicRsaKey, setCertificateStore };

package/dist/source_nodejs/index.d.ts

@@ -9,7 +9,6 @@ declare function readCertificate(filename: string): Certificate;
  * read a DER or PEM certificate from file
  */
 declare function readPublicKey(filename: string): PublicKey;
-declare function makePrivateKeyThumbPrint(privateKey: PrivateKey): Buffer;
 /**
  * read a DER or PEM certificate from file
  */
@@ -43,4 +42,4 @@ declare function generatePrivateKeyFile(privateKeyFilename: string, modulusLengt
  */
 declare function generatePrivateKeyFileAlternate(privateKeyFilename: string, modulusLength: 2048 | 3072 | 4096): Promise<void>;
 
-export { type CertificateSigningRequest, generatePrivateKeyFile, generatePrivateKeyFileAlternate, getCertificateStore, makePrivateKeyThumbPrint, readCertificate, readCertificatePEM, readCertificateRevocationList, readCertificateSigningRequest, readPrivateKey, readPrivateKeyPEM, readPrivateRsaKey, readPublicKey, readPublicKeyPEM, readPublicRsaKey, setCertificateStore };
+export { type CertificateSigningRequest, generatePrivateKeyFile, generatePrivateKeyFileAlternate, getCertificateStore, readCertificate, readCertificatePEM, readCertificateRevocationList, readCertificateSigningRequest, readPrivateKey, readPrivateKeyPEM, readPrivateRsaKey, readPublicKey, readPublicKeyPEM, readPublicRsaKey, setCertificateStore };

package/dist/source_nodejs/index.js

@@ -33,7 +33,6 @@ __export(source_nodejs_exports, {
   generatePrivateKeyFile: () => generatePrivateKeyFile,
   generatePrivateKeyFileAlternate: () => generatePrivateKeyFileAlternate,
   getCertificateStore: () => getCertificateStore,
-  makePrivateKeyThumbPrint: () => makePrivateKeyThumbPrint,
   readCertificate: () => readCertificate,
   readCertificatePEM: () => readCertificatePEM,
   readCertificateRevocationList: () => readCertificateRevocationList,
@@ -49,14 +48,14 @@ __export(source_nodejs_exports, {
 module.exports = __toCommonJS(source_nodejs_exports);
 
 // source_nodejs/read.ts
-var import_assert4 = __toESM(require("assert"));
-var import_fs = __toESM(require("fs"));
-var import_path = __toESM(require("path"));
+var import_assert5 = __toESM(require("assert"));
+var import_node_fs = __toESM(require("fs"));
+var import_node_path = __toESM(require("path"));
 var import_crypto = require("crypto");
 
 // source/crypto_utils.ts
 var import_constants = __toESM(require("constants"));
-var import_assert3 = __toESM(require("assert"));
+var import_assert4 = __toESM(require("assert"));
 var import_hexy = __toESM(require("hexy"));
 
 // source/buffer_utils.ts
@@ -65,7 +64,7 @@ var createFastUninitializedBuffer = Buffer.allocUnsafe ? Buffer.allocUnsafe : (s
 };
 
 // source/crypto_explore_certificate.ts
-var import_assert2 = __toESM(require("assert"));
+var import_assert3 = __toESM(require("assert"));
 
 // source/asn1.ts
 var import_assert = __toESM(require("assert"));
@@ -89,6 +88,9 @@ function readTag(buf, pos) {
   return { start, tag, position: pos, length };
 }
 
+// source/directory_name.ts
+var import_assert2 = __toESM(require("assert"));
+
 // source/crypto_explore_certificate.ts
 function split_der(certificateChain) {
   const certificate_chain = [];
@@ -107,10 +109,10 @@ function combine_der(certificates) {
     let sum = 0;
     b.forEach((block) => {
       const block_info = readTag(block, 0);
-      (0, import_assert2.default)(block_info.position + block_info.length === block.length);
+      (0, import_assert3.default)(block_info.position + block_info.length === block.length);
       sum += block.length;
     });
-    (0, import_assert2.default)(sum === cert.length);
+    (0, import_assert3.default)(sum === cert.length);
   }
   return Buffer.concat(certificates);
 }
@@ -132,14 +134,14 @@ function removeTrailingLF(str) {
   return tmp;
 }
 function toPem(raw_key, pem) {
-  (0, import_assert3.default)(raw_key, "expecting a key");
-  (0, import_assert3.default)(typeof pem === "string");
+  (0, import_assert4.default)(raw_key, "expecting a key");
+  (0, import_assert4.default)(typeof pem === "string");
   let pemType = identifyPemType(raw_key);
   if (pemType) {
     return raw_key instanceof Buffer ? removeTrailingLF(raw_key.toString("utf8")) : removeTrailingLF(raw_key);
   } else {
     pemType = pem;
-    (0, import_assert3.default)(["CERTIFICATE REQUEST", "CERTIFICATE", "RSA PRIVATE KEY", "PUBLIC KEY", "X509 CRL"].indexOf(pemType) >= 0);
+    (0, import_assert4.default)(["CERTIFICATE REQUEST", "CERTIFICATE", "RSA PRIVATE KEY", "PUBLIC KEY", "X509 CRL"].indexOf(pemType) >= 0);
     let b = raw_key.toString("base64");
     let str = "-----BEGIN " + pemType + "-----\n";
     while (b.length) {
@@ -166,18 +168,18 @@ function convertPEMtoDER(raw_key) {
 }
 var RSA_PKCS1_OAEP_PADDING = import_constants.default.RSA_PKCS1_OAEP_PADDING;
 var RSA_PKCS1_PADDING = import_constants.default.RSA_PKCS1_PADDING;
-(0, import_assert3.default)(4 /* RSA_PKCS1_OAEP_PADDING */ === import_constants.default.RSA_PKCS1_OAEP_PADDING);
-(0, import_assert3.default)(1 /* RSA_PKCS1_PADDING */ === import_constants.default.RSA_PKCS1_PADDING);
+(0, import_assert4.default)(4 /* RSA_PKCS1_OAEP_PADDING */ === import_constants.default.RSA_PKCS1_OAEP_PADDING);
+(0, import_assert4.default)(1 /* RSA_PKCS1_PADDING */ === import_constants.default.RSA_PKCS1_PADDING);
 
 // source_nodejs/read.ts
 var import_sshpk = __toESM(require("sshpk"));
 function _readPemFile(filename) {
-  (0, import_assert4.default)(typeof filename === "string");
-  return removeTrailingLF(import_fs.default.readFileSync(filename, "utf-8"));
+  (0, import_assert5.default)(typeof filename === "string");
+  return removeTrailingLF(import_node_fs.default.readFileSync(filename, "utf-8"));
 }
 function _readPemOrDerFileAsDER(filename) {
   if (filename.match(/.*\.der/)) {
-    return import_fs.default.readFileSync(filename);
+    return import_node_fs.default.readFileSync(filename);
   }
   const raw_key = _readPemFile(filename);
   return convertPEMtoDER(raw_key);
@@ -187,7 +189,7 @@ function readCertificate(filename) {
 }
 function readPublicKey(filename) {
   if (filename.match(/.*\.der/)) {
-    const der = import_fs.default.readFileSync(filename);
+    const der = import_node_fs.default.readFileSync(filename);
     return (0, import_crypto.createPublicKey)(der);
   } else {
     const raw_key = _readPemFile(filename);
@@ -198,7 +200,7 @@ function myCreatePrivateKey(rawKey) {
   if (!import_crypto.createPrivateKey || process.env.NO_CREATE_PRIVATEKEY) {
     if (rawKey instanceof Buffer) {
       const pemKey = toPem(rawKey, "PRIVATE KEY");
-      (0, import_assert4.default)(["RSA PRIVATE KEY", "PRIVATE KEY"].indexOf(identifyPemType(pemKey)) >= 0);
+      (0, import_assert5.default)(["RSA PRIVATE KEY", "PRIVATE KEY"].indexOf(identifyPemType(pemKey)) >= 0);
       return { hidden: pemKey };
     }
     return { hidden: ensureTrailingLF(rawKey) };
@@ -209,15 +211,12 @@ function myCreatePrivateKey(rawKey) {
   process.env.OPENSSL_CONF = backup;
   return { hidden: retValue };
 }
-function makePrivateKeyThumbPrint(privateKey) {
-  return Buffer.alloc(0);
-}
 function ensureTrailingLF(str) {
   return str.match(/\n$/) ? str : str + "\n";
 }
 function readPrivateKey(filename) {
   if (filename.match(/.*\.der/)) {
-    const der = import_fs.default.readFileSync(filename);
+    const der = import_node_fs.default.readFileSync(filename);
     return myCreatePrivateKey(der);
   } else {
     const raw_key = _readPemFile(filename);
@@ -241,7 +240,7 @@ function setCertificateStore(store) {
 }
 function getCertificateStore() {
   if (!_g_certificate_store) {
-    _g_certificate_store = import_path.default.join(__dirname, "../../certificates/");
+    _g_certificate_store = import_node_path.default.join(__dirname, "../../certificates/");
   }
   return _g_certificate_store;
 }
@@ -249,30 +248,29 @@ function readPrivateRsaKey(filename) {
   if (!import_crypto.createPrivateKey) {
     throw new Error("createPrivateKey is not supported in this environment");
   }
-  if (filename.substring(0, 1) !== "." && !import_fs.default.existsSync(filename)) {
-    filename = import_path.default.join(getCertificateStore(), filename);
+  if (filename.substring(0, 1) !== "." && !import_node_fs.default.existsSync(filename)) {
+    filename = import_node_path.default.join(getCertificateStore(), filename);
   }
-  const content = import_fs.default.readFileSync(filename, "utf8");
+  const content = import_node_fs.default.readFileSync(filename, "utf8");
   const sshKey = import_sshpk.default.parsePrivateKey(content, "auto");
   const key = sshKey.toString("pkcs1");
   const hidden = (0, import_crypto.createPrivateKey)({ format: "pem", type: "pkcs1", key });
   return { hidden };
 }
 function readPublicRsaKey(filename) {
-  if (filename.substring(0, 1) !== "." && !import_fs.default.existsSync(filename)) {
-    filename = import_path.default.join(getCertificateStore(), filename);
+  if (filename.substring(0, 1) !== "." && !import_node_fs.default.existsSync(filename)) {
+    filename = import_node_path.default.join(getCertificateStore(), filename);
   }
-  const content = import_fs.default.readFileSync(filename, "utf-8");
+  const content = import_node_fs.default.readFileSync(filename, "utf-8");
   const sshKey = import_sshpk.default.parseKey(content, "ssh");
   const key = sshKey.toString("pkcs1");
   return (0, import_crypto.createPublicKey)({ format: "pem", type: "pkcs1", key });
 }
 
 // source_nodejs/read_certificate_revocation_list.ts
-var import_fs2 = __toESM(require("fs"));
-var import_util = require("util");
+var import_node_fs2 = __toESM(require("fs"));
 async function readCertificateRevocationList(filename) {
-  const crl = await (0, import_util.promisify)(import_fs2.default.readFile)(filename);
+  const crl = await import_node_fs2.default.promises.readFile(filename);
   if (crl[0] === 48 && crl[1] === 130) {
     return crl;
   }
@@ -281,10 +279,9 @@ async function readCertificateRevocationList(filename) {
 }
 
 // source_nodejs/read_certificate_signing_request.ts
-var import_fs3 = __toESM(require("fs"));
-var import_util2 = require("util");
+var import_node_fs3 = __toESM(require("fs"));
 async function readCertificateSigningRequest(filename) {
-  const csr = await (0, import_util2.promisify)(import_fs3.default.readFile)(filename);
+  const csr = await import_node_fs3.default.promises.readFile(filename);
   if (csr[0] === 48 && csr[1] === 130) {
     return csr;
   }
@@ -293,25 +290,25 @@ async function readCertificateSigningRequest(filename) {
 }
 
 // source_nodejs/generate_private_key_filename.ts
-var import_fs4 = __toESM(require("fs"));
+var import_node_fs4 = __toESM(require("fs"));
+
+// source/explore_private_key.ts
+var doDebug = !!process.env.DEBUG;
 
 // source/common.ts
 var import_crypto2 = __toESM(require("crypto"));
 var KeyObjectOrig = import_crypto2.default.KeyObject;
 var { createPrivateKey: createPrivateKeyFromNodeJSCrypto } = import_crypto2.default;
 
-// source/derived_keys.ts
+// source/crypto_utils2.ts
 var import_assert6 = __toESM(require("assert"));
+var import_jsrsasign2 = __toESM(require("jsrsasign"));
 
-// source/explore_certificate.ts
-var import_assert5 = __toESM(require("assert"));
+// source/derived_keys.ts
+var import_assert8 = __toESM(require("assert"));
 
-// source/crypto_utils2.ts
+// source/explore_certificate.ts
 var import_assert7 = __toESM(require("assert"));
-var import_jsrsasign2 = __toESM(require("jsrsasign"));
-
-// source/explore_private_key.ts
-var doDebug = !!process.env.DEBUG;
 
 // source/x509/_crypto.ts
 var x509 = __toESM(require("@peculiar/x509"));
@@ -358,6 +355,9 @@ async function privateKeyToPEM(privateKey) {
   return { privPem, privDer };
 }
 
+// source/x509/coerce_private_key.ts
+var crypto2 = getCrypto();
+
 // source/x509/_get_attributes.ts
 var keyUsageApplication = x5092.KeyUsageFlags.keyEncipherment | x5092.KeyUsageFlags.nonRepudiation | x5092.KeyUsageFlags.dataEncipherment | x5092.KeyUsageFlags.keyCertSign | x5092.KeyUsageFlags.digitalSignature;
 var keyUsageCA = x5092.KeyUsageFlags.keyCertSign | x5092.KeyUsageFlags.cRLSign;
@@ -4063,15 +4063,12 @@ var AsnSchemaStorage = class {
 // ../../node_modules/@peculiar/asn1-schema/build/es2015/storage.js
 var schemaStorage = new AsnSchemaStorage();
 
-// source/x509/coerce_private_key.ts
-var crypto2 = getCrypto();
-
 // source_nodejs/generate_private_key_filename.ts
 var import_jsrsasign3 = __toESM(require("jsrsasign"));
 async function generatePrivateKeyFile(privateKeyFilename, modulusLength) {
   const keys = await generateKeyPair(modulusLength);
   const privateKeyPem = await privateKeyToPEM(keys.privateKey);
-  await import_fs4.default.promises.writeFile(privateKeyFilename, privateKeyPem.privPem, "utf-8");
+  await import_node_fs4.default.promises.writeFile(privateKeyFilename, privateKeyPem.privPem, "utf-8");
   privateKeyPem.privPem = "";
   privateKeyPem.privDer = new Uint8Array(0);
 }
@@ -4080,14 +4077,13 @@ async function generatePrivateKeyFileAlternate(privateKeyFilename, modulusLength
   const prv = kp.prvKeyObj;
   const pub = kp.pubKeyObj;
   const prvpem = import_jsrsasign3.default.KEYUTIL.getPEM(prv, "PKCS8PRV");
-  await import_fs4.default.promises.writeFile(privateKeyFilename, prvpem, "utf-8");
+  await import_node_fs4.default.promises.writeFile(privateKeyFilename, prvpem, "utf-8");
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   generatePrivateKeyFile,
   generatePrivateKeyFileAlternate,
   getCertificateStore,
-  makePrivateKeyThumbPrint,
   readCertificate,
   readCertificatePEM,
   readCertificateRevocationList,