node-opcua-crypto 4.17.0 → 5.1.0

package/dist/source/index_web.mjs

@@ -35,6 +35,7 @@ import {
   generatePrivateKey,
   hexDump,
   identifyPemType,
+  isCrlIssuedByCertificate,
   isKeyObject,
   makeMessageChunkSignature,
   makeMessageChunkSignatureWithDerivedKeys,
@@ -70,8 +71,9 @@ import {
   verifyCertificateSignature,
   verifyChunkSignature,
   verifyChunkSignatureWithDerivedKeys,
+  verifyCrlIssuedByCertificate,
   verifyMessageChunkSignature
-} from "../chunk-EURHGMEG.mjs";
+} from "../chunk-ULG5CYBT.mjs";
 export {
   CertificatePurpose,
   PaddingAlgorithm,
@@ -109,6 +111,7 @@ export {
   generatePrivateKey,
   hexDump,
   identifyPemType,
+  isCrlIssuedByCertificate,
   isKeyObject,
   makeMessageChunkSignature,
   makeMessageChunkSignatureWithDerivedKeys,
@@ -144,6 +147,7 @@ export {
   verifyCertificateSignature,
   verifyChunkSignature,
   verifyChunkSignatureWithDerivedKeys,
+  verifyCrlIssuedByCertificate,
   verifyMessageChunkSignature
 };
 //# sourceMappingURL=index_web.mjs.map

package/dist/source_nodejs/index.d.mts

@@ -3,7 +3,8 @@ import 'node:crypto';
 
 declare function generatePrivateKeyFile(privateKeyFilename: string, modulusLength: 1024 | 2048 | 3072 | 4096): Promise<void>;
 /**
- * alternate function to generate PrivateKeyFile, using jsrsasign.
+ * alternate function to generate PrivateKeyFile, using native
+ * node:crypto.
  *
  * This function is slower than generatePrivateKeyFile
  */

package/dist/source_nodejs/index.d.ts

@@ -3,7 +3,8 @@ import 'node:crypto';
 
 declare function generatePrivateKeyFile(privateKeyFilename: string, modulusLength: 1024 | 2048 | 3072 | 4096): Promise<void>;
 /**
- * alternate function to generate PrivateKeyFile, using jsrsasign.
+ * alternate function to generate PrivateKeyFile, using native
+ * node:crypto.
  *
  * This function is slower than generatePrivateKeyFile
  */

package/dist/source_nodejs/index.js

@@ -48,8 +48,8 @@ __export(source_nodejs_exports, {
 module.exports = __toCommonJS(source_nodejs_exports);
 
 // source_nodejs/generate_private_key_filename.ts
+var import_node_crypto7 = require("crypto");
 var import_node_fs = __toESM(require("fs"));
-var import_jsrsasign3 = __toESM(require("jsrsasign"));
 
 // source/common.ts
 var import_node_crypto = __toESM(require("crypto"));
@@ -85,7 +85,6 @@ function readTag(buf, pos) {
 var import_node_assert2 = __toESM(require("assert"));
 var import_node_constants = __toESM(require("constants"));
 var import_node_crypto2 = require("crypto");
-var import_jsrsasign = __toESM(require("jsrsasign"));
 
 // source/buffer_utils.ts
 var createFastUninitializedBuffer = Buffer.allocUnsafe ? Buffer.allocUnsafe : (size) => {
@@ -177,13 +176,16 @@ function combine_der(certificates) {
   return Buffer.concat(certificates);
 }
 
+// source/verify_certificate_signature.ts
+var import_node_crypto3 = require("crypto");
+
 // source/crypto_utils2.ts
 var import_node_assert5 = __toESM(require("assert"));
-var import_jsrsasign2 = __toESM(require("jsrsasign"));
+var import_node_crypto4 = require("crypto");
 
 // source/derived_keys.ts
 var import_node_assert7 = __toESM(require("assert"));
-var import_node_crypto3 = require("crypto");
+var import_node_crypto5 = require("crypto");
 
 // source/explore_certificate.ts
 var import_node_assert6 = __toESM(require("assert"));
@@ -191,11 +193,8 @@ var import_node_assert6 = __toESM(require("assert"));
 // source/explore_private_key.ts
 var doDebug = !!process.env.DEBUG;
 
-// source/verify_certificate_signature.ts
-var import_node_crypto4 = require("crypto");
-
 // source/x509/_crypto.ts
-var import_node_crypto5 = __toESM(require("crypto"));
+var import_node_crypto6 = __toESM(require("crypto"));
 var import_webcrypto = require("@peculiar/webcrypto");
 var x509 = __toESM(require("@peculiar/x509"));
 var x5092 = __toESM(require("@peculiar/x509"));
@@ -203,7 +202,7 @@ var doDebug2 = false;
 var _crypto;
 var ignoreCrypto = process.env.IGNORE_SUBTLE_FROM_CRYPTO;
 if (typeof window === "undefined") {
-  _crypto = import_node_crypto5.default;
+  _crypto = import_node_crypto6.default;
   if (!_crypto?.subtle || ignoreCrypto) {
     _crypto = new import_webcrypto.Crypto();
     doDebug2 && console.warn("using @peculiar/webcrypto");
@@ -217,7 +216,7 @@ if (typeof window === "undefined") {
   x509.cryptoProvider.set(crypto);
 }
 function getCrypto() {
-  return _crypto || crypto || import_node_crypto5.default;
+  return _crypto || crypto || import_node_crypto6.default;
 }
 
 // source/x509/create_key_pair.ts
@@ -3939,16 +3938,17 @@ async function generatePrivateKeyFile(privateKeyFilename, modulusLength) {
   privateKeyPem.privDer = new ArrayBuffer(0);
 }
 async function generatePrivateKeyFileAlternate(privateKeyFilename, modulusLength) {
-  const kp = import_jsrsasign3.default.KEYUTIL.generateKeypair("RSA", modulusLength);
-  const prv = kp.prvKeyObj;
-  const _pub = kp.pubKeyObj;
-  const prvpem = import_jsrsasign3.default.KEYUTIL.getPEM(prv, "PKCS8PRV");
-  await import_node_fs.default.promises.writeFile(privateKeyFilename, prvpem, "utf-8");
+  const { privateKey } = (0, import_node_crypto7.generateKeyPairSync)("rsa", {
+    modulusLength,
+    privateKeyEncoding: { type: "pkcs8", format: "pem" },
+    publicKeyEncoding: { type: "spki", format: "pem" }
+  });
+  await import_node_fs.default.promises.writeFile(privateKeyFilename, privateKey, "utf-8");
 }
 
 // source_nodejs/read.ts
 var import_node_assert8 = __toESM(require("assert"));
-var import_node_crypto6 = require("crypto");
+var import_node_crypto8 = require("crypto");
 var import_node_fs2 = __toESM(require("fs"));
 var import_node_path = __toESM(require("path"));
 var import_sshpk = __toESM(require("sshpk"));
@@ -3969,14 +3969,14 @@ function readCertificate(filename) {
 function readPublicKey(filename) {
   if (filename.match(/.*\.der/)) {
     const der = import_node_fs2.default.readFileSync(filename);
-    return (0, import_node_crypto6.createPublicKey)(der);
+    return (0, import_node_crypto8.createPublicKey)(der);
   } else {
     const raw_key = _readPemFile(filename);
-    return (0, import_node_crypto6.createPublicKey)(raw_key);
+    return (0, import_node_crypto8.createPublicKey)(raw_key);
   }
 }
 function myCreatePrivateKey(rawKey) {
-  if (!import_node_crypto6.createPrivateKey || process.env.NO_CREATE_PRIVATEKEY) {
+  if (!import_node_crypto8.createPrivateKey || process.env.NO_CREATE_PRIVATEKEY) {
     if (Buffer.isBuffer(rawKey)) {
       const pemKey = toPem(rawKey, "PRIVATE KEY");
       (0, import_node_assert8.default)(["RSA PRIVATE KEY", "PRIVATE KEY"].indexOf(identifyPemType(pemKey)) >= 0);
@@ -3986,7 +3986,7 @@ function myCreatePrivateKey(rawKey) {
   }
   const backup = process.env.OPENSSL_CONF;
   process.env.OPENSSL_CONF = "/dev/null";
-  const retValue = (0, import_node_crypto6.createPrivateKey)(rawKey);
+  const retValue = (0, import_node_crypto8.createPrivateKey)(rawKey);
   process.env.OPENSSL_CONF = backup;
   return { hidden: retValue };
 }
@@ -4025,7 +4025,7 @@ function getCertificateStore() {
   return _g_certificate_store;
 }
 function readPrivateRsaKey(filename) {
-  if (!import_node_crypto6.createPrivateKey) {
+  if (!import_node_crypto8.createPrivateKey) {
     throw new Error("createPrivateKey is not supported in this environment");
   }
   if (filename.substring(0, 1) !== "." && !import_node_fs2.default.existsSync(filename)) {
@@ -4034,7 +4034,7 @@ function readPrivateRsaKey(filename) {
   const content = import_node_fs2.default.readFileSync(filename, "utf8");
   const sshKey = import_sshpk.default.parsePrivateKey(content, "auto");
   const key = sshKey.toString("pkcs1");
-  const hidden = (0, import_node_crypto6.createPrivateKey)({ format: "pem", type: "pkcs1", key });
+  const hidden = (0, import_node_crypto8.createPrivateKey)({ format: "pem", type: "pkcs1", key });
   return { hidden };
 }
 function readPublicRsaKey(filename) {
@@ -4044,7 +4044,7 @@ function readPublicRsaKey(filename) {
   const content = import_node_fs2.default.readFileSync(filename, "utf-8");
   const sshKey = import_sshpk.default.parseKey(content, "ssh");
   const key = sshKey.toString("pkcs1");
-  return (0, import_node_crypto6.createPublicKey)({ format: "pem", type: "pkcs1", key });
+  return (0, import_node_crypto8.createPublicKey)({ format: "pem", type: "pkcs1", key });
 }
 
 // source_nodejs/read_certificate_revocation_list.ts