node-opcua-crypto 4.16.1 → 5.0.0

package/dist/source/index.mjs

@@ -72,7 +72,7 @@ import {
   verifyChunkSignature,
   verifyChunkSignatureWithDerivedKeys,
   verifyMessageChunkSignature
-} from "../chunk-MGQCHN54.mjs";
+} from "../chunk-BIS3W2GR.mjs";
 export {
   CertificatePurpose,
   PaddingAlgorithm,

package/dist/source/index_web.d.mts

@@ -1,11 +1,8 @@
-import { C as Certificate, P as PrivateKey, d as CertificatePEM, b as PEM, D as DER, f as PublicKeyPEM, S as Signature, K as KeyObject, e as PrivateKeyPEM, a as PublicKey, N as Nonce, g as CertificateRevocationList, h as CertificatePurpose } from '../common-CFr95Map.mjs';
-export { c as createPrivateKeyFromNodeJSCrypto, i as isKeyObject } from '../common-CFr95Map.mjs';
-import { KeyLike } from 'crypto';
+import { C as Certificate, d as CertificatePEM, b as PEM, D as DER, P as PrivateKey, f as PublicKeyPEM, S as Signature, K as KeyObject, e as PrivateKeyPEM, a as PublicKey, N as Nonce, g as CertificateRevocationList, h as CertificatePurpose } from '../common-DxHkx4Pv.mjs';
+export { c as createPrivateKeyFromNodeJSCrypto, i as isKeyObject } from '../common-DxHkx4Pv.mjs';
+import { KeyLike } from 'node:crypto';
 import * as x509 from '@peculiar/x509';
 
-declare function publicKeyAndPrivateKeyMatches(certificate: Certificate, privateKey: PrivateKey): boolean;
-declare function certificateMatchesPrivateKey(certificate: Certificate, privateKey: PrivateKey): boolean;
-
 interface DirectoryName {
     stateOrProvinceName?: string;
     localityName?: string;
@@ -88,7 +85,7 @@ declare function exploreCertificateInfo(certificate: Certificate | CertificatePE
  */
 
 interface AttributeTypeAndValue {
-    [key: string]: any;
+    [key: string]: unknown;
 }
 interface Validity {
     notBefore: Date;
@@ -124,7 +121,9 @@ declare function readExtension(buffer: Buffer, block: BlockInfo): {
         oid: string;
         name: string;
     };
-    value: any;
+    value: string | X509KeyUsage | X509ExtKeyUsage | AuthorityKeyIdentifier | BasicConstraints | {
+        [key: string]: string[];
+    };
 };
 interface SubjectPublicKeyInfo {
     algorithm: string;
@@ -148,12 +147,14 @@ interface CertificateExtension {
     authorityKeyIdentifier?: AuthorityKeyIdentifier;
     keyUsage?: X509KeyUsage;
     extKeyUsage?: X509ExtKeyUsage;
-    subjectAltName?: any;
+    subjectAltName?: {
+        [key: string]: string[];
+    };
 }
 interface TbsCertificate {
     version: number;
     serialNumber: string;
-    issuer: any;
+    issuer: DirectoryName;
     signature: AlgorithmIdentifier;
     validity: Validity;
     subject: DirectoryName;
@@ -365,10 +366,16 @@ interface CertificateRevocationListInfo {
 declare function readNameForCrl(buffer: Buffer, block: BlockInfo): DirectoryName;
 declare function exploreCertificateRevocationList(crl: CertificateRevocationList): CertificateRevocationListInfo;
 
+interface SubjectAltName {
+    uniformResourceIdentifier: string[];
+    dNSName: string[];
+    iPAddress: string[];
+    [key: string]: unknown;
+}
 interface ExtensionRequest {
     basicConstraints: BasicConstraints;
     keyUsage: X509KeyUsage;
-    subjectAltName: any;
+    subjectAltName: SubjectAltName;
 }
 interface CertificateSigningRequestInfo {
     extensionRequest: ExtensionRequest;
@@ -406,7 +413,10 @@ declare function explorePrivateKey(privateKey2: PrivateKey): PrivateKeyInternals
 
 declare function makePrivateKeyFromPem(privateKeyInPem: string): PrivateKey;
 
-declare function makePrivateKeyThumbPrint(privateKey: PrivateKey): Buffer;
+declare function makePrivateKeyThumbPrint(_privateKey: PrivateKey): Buffer;
+
+declare function publicKeyAndPrivateKeyMatches(certificate: Certificate, privateKey: PrivateKey): boolean;
+declare function certificateMatchesPrivateKey(certificate: Certificate, privateKey: PrivateKey): boolean;
 
 interface SubjectOptions {
     commonName?: string;
@@ -450,7 +460,7 @@ declare function coercePEMorDerToPrivateKey(privateKeyInDerOrPem: string | Buffe
  *
  * @private
  */
-declare function _coercePrivateKey(privateKey: any): Promise<KeyObject>;
+declare function _coercePrivateKey(privateKey: unknown): Promise<KeyObject>;
 
 interface CreateCertificateSigningRequestOptions {
     privateKey: CryptoKey;
@@ -503,10 +513,6 @@ declare function createSelfSignedCertificate({ privateKey, notAfter, notBefore,
     der: x509.X509Certificate;
 }>;
 
-/**
- * @module node_opcua_crypto
- */
-
 declare const asn1: {
     readDirectoryName: typeof readDirectoryName;
     readTag: typeof readTag;
@@ -515,4 +521,4 @@ declare const asn1: {
     readSignatureValueBin: typeof readSignatureValueBin;
 };
 
-export { type AttributeTypeAndValue, type AuthorityKeyIdentifier, type BasicConstraints, Certificate, type CertificateExtension, type CertificateInfo, type CertificateInternals, CertificatePEM, CertificatePurpose, CertificateRevocationList, type CertificateRevocationListInfo, type CertificateSerialNumber, type CertificateSigningRequestInfo, type ComputeDerivedKeysOptions, type CreateSelfSignCertificateOptions, DER, type DerivedKeys, type DirectoryName, type ExtensionRequest, type Extensions, KeyObject, type Name, Nonce, PEM, PaddingAlgorithm, PrivateKey, type PrivateKeyInternals, PrivateKeyPEM, PublicKey, type PublicKeyLength, PublicKeyPEM, RSA_PKCS1_OAEP_PADDING, RSA_PKCS1_PADDING, type RevokedCertificate, Signature, Subject, type SubjectOptions, type SubjectPublicKey, type SubjectPublicKeyInfo, type TBSCertList, type TbsCertificate, type Validity, type VerifyChunkSignatureOptions, type VerifyMessageChunkSignatureOptions, type Version, type X509ExtKeyUsage, type X509KeyUsage, type _VerifyStatus, _coercePrivateKey, asn1, certificateMatchesPrivateKey, coerceCertificate, coerceCertificatePem, coercePEMorDerToPrivateKey, coercePrivateKeyPem, coercePublicKeyPem, coerceRsaPublicKeyPem, combine_der, computeDerivedKeys, computePaddingFooter, convertPEMtoDER, createCertificateSigningRequest, createSelfSignedCertificate, decryptBufferWithDerivedKeys, derToPrivateKey, encryptBufferWithDerivedKeys, exploreAsn1, exploreCertificate, exploreCertificateInfo, exploreCertificateRevocationList, exploreCertificateSigningRequest, explorePrivateKey, extractPublicKeyFromCertificate, extractPublicKeyFromCertificateSync, generateKeyPair, generatePrivateKey, hexDump, identifyPemType, makeMessageChunkSignature, makeMessageChunkSignatureWithDerivedKeys, makePrivateKeyFromPem, makePrivateKeyThumbPrint, makePseudoRandomBuffer, makeSHA1Thumbprint, pemToPrivateKey, privateDecrypt, privateDecrypt_long, privateDecrypt_native, privateKeyToPEM, publicEncrypt, publicEncrypt_long, publicEncrypt_native, publicKeyAndPrivateKeyMatches, readCertificationRequestInfo, readExtension, readNameForCrl, readTbsCertificate, reduceLength, removePadding, removeTrailingLF, rsaLengthPrivateKey, rsaLengthPublicKey, rsaLengthRsaPublicKey, split_der, toPem, toPem2, verifyCertificateChain, verifyCertificateOrClrSignature, verifyCertificateRevocationListSignature, verifyCertificateSignature, verifyChunkSignature, verifyChunkSignatureWithDerivedKeys, verifyMessageChunkSignature };
+export { type AttributeTypeAndValue, type AuthorityKeyIdentifier, type BasicConstraints, Certificate, type CertificateExtension, type CertificateInfo, type CertificateInternals, CertificatePEM, CertificatePurpose, CertificateRevocationList, type CertificateRevocationListInfo, type CertificateSerialNumber, type CertificateSigningRequestInfo, type ComputeDerivedKeysOptions, type CreateSelfSignCertificateOptions, DER, type DerivedKeys, type DirectoryName, type ExtensionRequest, type Extensions, KeyObject, type Name, Nonce, PEM, PaddingAlgorithm, PrivateKey, type PrivateKeyInternals, PrivateKeyPEM, PublicKey, type PublicKeyLength, PublicKeyPEM, RSA_PKCS1_OAEP_PADDING, RSA_PKCS1_PADDING, type RevokedCertificate, Signature, Subject, type SubjectAltName, type SubjectOptions, type SubjectPublicKey, type SubjectPublicKeyInfo, type TBSCertList, type TbsCertificate, type Validity, type VerifyChunkSignatureOptions, type VerifyMessageChunkSignatureOptions, type Version, type X509ExtKeyUsage, type X509KeyUsage, type _VerifyStatus, _coercePrivateKey, asn1, certificateMatchesPrivateKey, coerceCertificate, coerceCertificatePem, coercePEMorDerToPrivateKey, coercePrivateKeyPem, coercePublicKeyPem, coerceRsaPublicKeyPem, combine_der, computeDerivedKeys, computePaddingFooter, convertPEMtoDER, createCertificateSigningRequest, createSelfSignedCertificate, decryptBufferWithDerivedKeys, derToPrivateKey, encryptBufferWithDerivedKeys, exploreAsn1, exploreCertificate, exploreCertificateInfo, exploreCertificateRevocationList, exploreCertificateSigningRequest, explorePrivateKey, extractPublicKeyFromCertificate, extractPublicKeyFromCertificateSync, generateKeyPair, generatePrivateKey, hexDump, identifyPemType, makeMessageChunkSignature, makeMessageChunkSignatureWithDerivedKeys, makePrivateKeyFromPem, makePrivateKeyThumbPrint, makePseudoRandomBuffer, makeSHA1Thumbprint, pemToPrivateKey, privateDecrypt, privateDecrypt_long, privateDecrypt_native, privateKeyToPEM, publicEncrypt, publicEncrypt_long, publicEncrypt_native, publicKeyAndPrivateKeyMatches, readCertificationRequestInfo, readExtension, readNameForCrl, readTbsCertificate, reduceLength, removePadding, removeTrailingLF, rsaLengthPrivateKey, rsaLengthPublicKey, rsaLengthRsaPublicKey, split_der, toPem, toPem2, verifyCertificateChain, verifyCertificateOrClrSignature, verifyCertificateRevocationListSignature, verifyCertificateSignature, verifyChunkSignature, verifyChunkSignatureWithDerivedKeys, verifyMessageChunkSignature };

package/dist/source/index_web.d.ts

@@ -1,11 +1,8 @@
-import { C as Certificate, P as PrivateKey, d as CertificatePEM, b as PEM, D as DER, f as PublicKeyPEM, S as Signature, K as KeyObject, e as PrivateKeyPEM, a as PublicKey, N as Nonce, g as CertificateRevocationList, h as CertificatePurpose } from '../common-CFr95Map.js';
-export { c as createPrivateKeyFromNodeJSCrypto, i as isKeyObject } from '../common-CFr95Map.js';
-import { KeyLike } from 'crypto';
+import { C as Certificate, d as CertificatePEM, b as PEM, D as DER, P as PrivateKey, f as PublicKeyPEM, S as Signature, K as KeyObject, e as PrivateKeyPEM, a as PublicKey, N as Nonce, g as CertificateRevocationList, h as CertificatePurpose } from '../common-DxHkx4Pv.js';
+export { c as createPrivateKeyFromNodeJSCrypto, i as isKeyObject } from '../common-DxHkx4Pv.js';
+import { KeyLike } from 'node:crypto';
 import * as x509 from '@peculiar/x509';
 
-declare function publicKeyAndPrivateKeyMatches(certificate: Certificate, privateKey: PrivateKey): boolean;
-declare function certificateMatchesPrivateKey(certificate: Certificate, privateKey: PrivateKey): boolean;
-
 interface DirectoryName {
     stateOrProvinceName?: string;
     localityName?: string;
@@ -88,7 +85,7 @@ declare function exploreCertificateInfo(certificate: Certificate | CertificatePE
  */
 
 interface AttributeTypeAndValue {
-    [key: string]: any;
+    [key: string]: unknown;
 }
 interface Validity {
     notBefore: Date;
@@ -124,7 +121,9 @@ declare function readExtension(buffer: Buffer, block: BlockInfo): {
         oid: string;
         name: string;
     };
-    value: any;
+    value: string | X509KeyUsage | X509ExtKeyUsage | AuthorityKeyIdentifier | BasicConstraints | {
+        [key: string]: string[];
+    };
 };
 interface SubjectPublicKeyInfo {
     algorithm: string;
@@ -148,12 +147,14 @@ interface CertificateExtension {
     authorityKeyIdentifier?: AuthorityKeyIdentifier;
     keyUsage?: X509KeyUsage;
     extKeyUsage?: X509ExtKeyUsage;
-    subjectAltName?: any;
+    subjectAltName?: {
+        [key: string]: string[];
+    };
 }
 interface TbsCertificate {
     version: number;
     serialNumber: string;
-    issuer: any;
+    issuer: DirectoryName;
     signature: AlgorithmIdentifier;
     validity: Validity;
     subject: DirectoryName;
@@ -365,10 +366,16 @@ interface CertificateRevocationListInfo {
 declare function readNameForCrl(buffer: Buffer, block: BlockInfo): DirectoryName;
 declare function exploreCertificateRevocationList(crl: CertificateRevocationList): CertificateRevocationListInfo;
 
+interface SubjectAltName {
+    uniformResourceIdentifier: string[];
+    dNSName: string[];
+    iPAddress: string[];
+    [key: string]: unknown;
+}
 interface ExtensionRequest {
     basicConstraints: BasicConstraints;
     keyUsage: X509KeyUsage;
-    subjectAltName: any;
+    subjectAltName: SubjectAltName;
 }
 interface CertificateSigningRequestInfo {
     extensionRequest: ExtensionRequest;
@@ -406,7 +413,10 @@ declare function explorePrivateKey(privateKey2: PrivateKey): PrivateKeyInternals
 
 declare function makePrivateKeyFromPem(privateKeyInPem: string): PrivateKey;
 
-declare function makePrivateKeyThumbPrint(privateKey: PrivateKey): Buffer;
+declare function makePrivateKeyThumbPrint(_privateKey: PrivateKey): Buffer;
+
+declare function publicKeyAndPrivateKeyMatches(certificate: Certificate, privateKey: PrivateKey): boolean;
+declare function certificateMatchesPrivateKey(certificate: Certificate, privateKey: PrivateKey): boolean;
 
 interface SubjectOptions {
     commonName?: string;
@@ -450,7 +460,7 @@ declare function coercePEMorDerToPrivateKey(privateKeyInDerOrPem: string | Buffe
  *
  * @private
  */
-declare function _coercePrivateKey(privateKey: any): Promise<KeyObject>;
+declare function _coercePrivateKey(privateKey: unknown): Promise<KeyObject>;
 
 interface CreateCertificateSigningRequestOptions {
     privateKey: CryptoKey;
@@ -503,10 +513,6 @@ declare function createSelfSignedCertificate({ privateKey, notAfter, notBefore,
     der: x509.X509Certificate;
 }>;
 
-/**
- * @module node_opcua_crypto
- */
-
 declare const asn1: {
     readDirectoryName: typeof readDirectoryName;
     readTag: typeof readTag;
@@ -515,4 +521,4 @@ declare const asn1: {
     readSignatureValueBin: typeof readSignatureValueBin;
 };
 
-export { type AttributeTypeAndValue, type AuthorityKeyIdentifier, type BasicConstraints, Certificate, type CertificateExtension, type CertificateInfo, type CertificateInternals, CertificatePEM, CertificatePurpose, CertificateRevocationList, type CertificateRevocationListInfo, type CertificateSerialNumber, type CertificateSigningRequestInfo, type ComputeDerivedKeysOptions, type CreateSelfSignCertificateOptions, DER, type DerivedKeys, type DirectoryName, type ExtensionRequest, type Extensions, KeyObject, type Name, Nonce, PEM, PaddingAlgorithm, PrivateKey, type PrivateKeyInternals, PrivateKeyPEM, PublicKey, type PublicKeyLength, PublicKeyPEM, RSA_PKCS1_OAEP_PADDING, RSA_PKCS1_PADDING, type RevokedCertificate, Signature, Subject, type SubjectOptions, type SubjectPublicKey, type SubjectPublicKeyInfo, type TBSCertList, type TbsCertificate, type Validity, type VerifyChunkSignatureOptions, type VerifyMessageChunkSignatureOptions, type Version, type X509ExtKeyUsage, type X509KeyUsage, type _VerifyStatus, _coercePrivateKey, asn1, certificateMatchesPrivateKey, coerceCertificate, coerceCertificatePem, coercePEMorDerToPrivateKey, coercePrivateKeyPem, coercePublicKeyPem, coerceRsaPublicKeyPem, combine_der, computeDerivedKeys, computePaddingFooter, convertPEMtoDER, createCertificateSigningRequest, createSelfSignedCertificate, decryptBufferWithDerivedKeys, derToPrivateKey, encryptBufferWithDerivedKeys, exploreAsn1, exploreCertificate, exploreCertificateInfo, exploreCertificateRevocationList, exploreCertificateSigningRequest, explorePrivateKey, extractPublicKeyFromCertificate, extractPublicKeyFromCertificateSync, generateKeyPair, generatePrivateKey, hexDump, identifyPemType, makeMessageChunkSignature, makeMessageChunkSignatureWithDerivedKeys, makePrivateKeyFromPem, makePrivateKeyThumbPrint, makePseudoRandomBuffer, makeSHA1Thumbprint, pemToPrivateKey, privateDecrypt, privateDecrypt_long, privateDecrypt_native, privateKeyToPEM, publicEncrypt, publicEncrypt_long, publicEncrypt_native, publicKeyAndPrivateKeyMatches, readCertificationRequestInfo, readExtension, readNameForCrl, readTbsCertificate, reduceLength, removePadding, removeTrailingLF, rsaLengthPrivateKey, rsaLengthPublicKey, rsaLengthRsaPublicKey, split_der, toPem, toPem2, verifyCertificateChain, verifyCertificateOrClrSignature, verifyCertificateRevocationListSignature, verifyCertificateSignature, verifyChunkSignature, verifyChunkSignatureWithDerivedKeys, verifyMessageChunkSignature };
+export { type AttributeTypeAndValue, type AuthorityKeyIdentifier, type BasicConstraints, Certificate, type CertificateExtension, type CertificateInfo, type CertificateInternals, CertificatePEM, CertificatePurpose, CertificateRevocationList, type CertificateRevocationListInfo, type CertificateSerialNumber, type CertificateSigningRequestInfo, type ComputeDerivedKeysOptions, type CreateSelfSignCertificateOptions, DER, type DerivedKeys, type DirectoryName, type ExtensionRequest, type Extensions, KeyObject, type Name, Nonce, PEM, PaddingAlgorithm, PrivateKey, type PrivateKeyInternals, PrivateKeyPEM, PublicKey, type PublicKeyLength, PublicKeyPEM, RSA_PKCS1_OAEP_PADDING, RSA_PKCS1_PADDING, type RevokedCertificate, Signature, Subject, type SubjectAltName, type SubjectOptions, type SubjectPublicKey, type SubjectPublicKeyInfo, type TBSCertList, type TbsCertificate, type Validity, type VerifyChunkSignatureOptions, type VerifyMessageChunkSignatureOptions, type Version, type X509ExtKeyUsage, type X509KeyUsage, type _VerifyStatus, _coercePrivateKey, asn1, certificateMatchesPrivateKey, coerceCertificate, coerceCertificatePem, coercePEMorDerToPrivateKey, coercePrivateKeyPem, coercePublicKeyPem, coerceRsaPublicKeyPem, combine_der, computeDerivedKeys, computePaddingFooter, convertPEMtoDER, createCertificateSigningRequest, createSelfSignedCertificate, decryptBufferWithDerivedKeys, derToPrivateKey, encryptBufferWithDerivedKeys, exploreAsn1, exploreCertificate, exploreCertificateInfo, exploreCertificateRevocationList, exploreCertificateSigningRequest, explorePrivateKey, extractPublicKeyFromCertificate, extractPublicKeyFromCertificateSync, generateKeyPair, generatePrivateKey, hexDump, identifyPemType, makeMessageChunkSignature, makeMessageChunkSignatureWithDerivedKeys, makePrivateKeyFromPem, makePrivateKeyThumbPrint, makePseudoRandomBuffer, makeSHA1Thumbprint, pemToPrivateKey, privateDecrypt, privateDecrypt_long, privateDecrypt_native, privateKeyToPEM, publicEncrypt, publicEncrypt_long, publicEncrypt_native, publicKeyAndPrivateKeyMatches, readCertificationRequestInfo, readExtension, readNameForCrl, readTbsCertificate, reduceLength, removePadding, removeTrailingLF, rsaLengthPrivateKey, rsaLengthPublicKey, rsaLengthRsaPublicKey, split_der, toPem, toPem2, verifyCertificateChain, verifyCertificateOrClrSignature, verifyCertificateRevocationListSignature, verifyCertificateSignature, verifyChunkSignature, verifyChunkSignatureWithDerivedKeys, verifyMessageChunkSignature };