node-opcua-pki 2.16.0 → 2.18.0

package/.ignore

@@ -1,6 +1,6 @@
-package-lock.json
-pnpm-lock.yaml
-*.xml
-dist/
-node_modules/
-CTT/
+package-lock.json
+pnpm-lock.yaml
+*.xml
+dist/
+node_modules/
+CTT/

package/.prettierrc

@@ -1,4 +1,5 @@
-{
-    "tabWidth": 4,
-    "printWidth": 132
-}
+{
+    "tabWidth": 4,
+    "printWidth": 132,
+    "useTabs": false
+}

package/LICENSE

@@ -1,21 +1,22 @@
-The MIT License (MIT)
-
-Copyright (c) 2015-2020 Etienne Rossignon
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+The MIT License (MIT)
+
+Copyright (c) 2014-2022 - Etienne Rossignon - etienne.rossignon (at) gadz.org
+Copyright (c) 2022 - Sterfive.com
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/bin/crypto_create_CA_config.example.js

@@ -1,18 +1,18 @@
-"use strict";
-// ---------------------------------------------------------------------------------------------------------------------
-module.exports = {
-
-    subject: {
-        commonName: "NodeOPCUA-TEST",
-        organization: "NodeOPCUA",
-        organizationalUnit: "Unit",
-        locality: "Paris",
-        state: "IDF",
-        country: "FR" // Two letters
-    },
-
-    validity: 365 * 15, // 15 years
-
-    keySize: 2048 // default private key size : 2048, 3072 or 4096 (avoid 1024 too weak)
-};
-
+"use strict";
+// ---------------------------------------------------------------------------------------------------------------------
+module.exports = {
+
+    subject: {
+        commonName: "NodeOPCUA-TEST",
+        organization: "NodeOPCUA",
+        organizationalUnit: "Unit",
+        locality: "Paris",
+        state: "IDF",
+        country: "FR" // Two letters
+    },
+
+    validity: 365 * 15, // 15 years
+
+    keySize: 2048 // default private key size : 2048, 3072 or 4096 (avoid 1024 too weak)
+};
+

package/bin/install_prerequisite.js

@@ -1,9 +1,9 @@
-#!/usr/bin/env node
-"use strict";
-// eslint-disable-next-line @typescript-eslint/no-var-requires
-var install_prerequisite = require("../dist/lib/misc/install_prerequisite").install_prerequisite;
-install_prerequisite(function(err){
-    if (err) {
-        console.log("err = ",err.message);
-    }
-});
+#!/usr/bin/env node
+"use strict";
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+var install_prerequisite = require("../dist/lib/misc/install_prerequisite").install_prerequisite;
+install_prerequisite(function(err){
+    if (err) {
+        console.log("err = ",err.message);
+    }
+});

package/certificates1/CA/conf/caconfig.cnf

@@ -0,0 +1,125 @@
+#.........DO NOT MODIFY BY HAND .........................
+[ ca ]
+default_ca               = CA_default
+[ CA_default ]
+dir                      = C:/sterfive/NodeOPCUA/node-opcua-pki/certificates/CA            # the main CA folder
+certs                    = $dir/certs                 # where to store certificates
+new_certs_dir            = $dir/certs                 #
+database                 = $dir/index.txt             # the certificate database
+serial                   = $dir/serial                # the serial number counter
+certificate              = $dir/public/cacert.pem     # The root CA certificate
+private_key              = $dir/private/cakey.pem     # the CA private key
+x509_extensions          = usr_cert                   #
+default_days             = 3650                       # default validity : 10 years
+
+# default_md               = sha1
+
+default_md                = sha256                      # The default digest algorithm
+
+preserve                 = no
+policy                   = policy_match
+# randfile                 = $dir/random.rnd
+# default_startdate        = YYMMDDHHMMSSZ
+# default_enddate          = YYMMDDHHMMSSZ
+crl_dir                  = $dir/crl
+crl_extensions           = crl_ext
+crl                      = $dir/revocation_list.crl # the Revocation list
+crlnumber                = $dir/crlnumber           # CRL number file
+default_crl_days         = 30
+default_crl_hours        = 24
+#msie_hack
+
+[ policy_match ]
+countryName              = optional
+stateOrProvinceName      = optional
+localityName             = optional
+organizationName         = optional
+organizationalUnitName   = optional
+commonName               = optional
+emailAddress             = optional
+
+[ req ]
+default_bits             = 4096                     # Size of keys
+default_keyfile          = key.pem                  # name of generated keys
+distinguished_name       = req_distinguished_name
+attributes               = req_attributes
+x509_extensions          = v3_ca
+#input_password
+#output_password
+string_mask              = nombstr                  # permitted characters
+req_extensions           = v3_req
+
+[ req_distinguished_name ]
+
+#0 countryName             = Country Name (2 letter code)
+# countryName_default     = FR
+# countryName_min         = 2
+# countryName_max         = 2
+# stateOrProvinceName     = State or Province Name (full name)
+# stateOrProvinceName_default = Ile de France
+# localityName            = Locality Name (city, district)
+# localityName_default    = Paris
+organizationName          = Organization Name (company)
+organizationName_default  = NodeOPCUA
+# organizationalUnitName  = Organizational Unit Name (department, division)
+# organizationalUnitName_default = R&D
+commonName                = Common Name (hostname, FQDN, IP, or your name)
+commonName_max            = 256
+commonName_default        = NodeOPCUA
+# emailAddress            = Email Address
+# emailAddress_max        = 40
+# emailAddress_default    = node-opcua (at) node-opcua (dot) com
+
+[ req_attributes ]
+#challengePassword        = A challenge password
+#challengePassword_min    = 4
+#challengePassword_max    = 20
+#unstructuredName         = An optional company name
+[ usr_cert ]
+basicConstraints          = critical, CA:FALSE
+subjectKeyIdentifier      = hash
+authorityKeyIdentifier    = keyid,issuer:always
+#authorityKeyIdentifier    = keyid
+subjectAltName            = $ENV::ALTNAME
+# issuerAltName            = issuer:copy
+nsComment                 = ''OpenSSL Generated Certificate''
+#nsCertType               = client, email, objsign for ''everything including object signing''
+#nsCaRevocationUrl        = http://www.domain.dom/ca-crl.pem
+#nsBaseUrl                =
+#nsRenewalUrl             =
+#nsCaPolicyUrl            =
+#nsSslServerName          =
+keyUsage                  = critical, digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment, keyAgreement, keyCertSign
+extendedKeyUsage          = critical,serverAuth ,clientAuth
+
+[ v3_req ]
+basicConstraints          = critical, CA:FALSE
+keyUsage                  = nonRepudiation, digitalSignature, keyEncipherment, dataEncipherment, keyAgreement
+extendedKeyUsage          = critical,serverAuth ,clientAuth
+subjectAltName            = $ENV::ALTNAME
+nsComment                 = "CA Generated by Node-OPCUA Certificate utility using openssl"
+[ v3_ca ]
+subjectKeyIdentifier      = hash
+authorityKeyIdentifier    = keyid:always,issuer:always
+# authorityKeyIdentifier    = keyid
+basicConstraints          = CA:TRUE
+keyUsage                  = critical, cRLSign, keyCertSign
+nsComment                 = "CA Certificate generated by Node-OPCUA Certificate utility using openssl"
+#nsCertType                 = sslCA, emailCA
+#subjectAltName             = email:copy
+#issuerAltName              = issuer:copy
+#obj                        = DER:02:03
+crlDistributionPoints     = @crl_info
+[ crl_info ]
+URI.0                     = http://localhost:8900/crl.pem
+[ v3_selfsigned]
+basicConstraints          = critical, CA:FALSE
+keyUsage                  = nonRepudiation, digitalSignature, keyEncipherment, dataEncipherment, keyAgreement
+extendedKeyUsage          = critical,serverAuth ,clientAuth
+nsComment                 = "Self-signed certificate, generated by NodeOPCUA"
+subjectAltName            = $ENV::ALTNAME
+
+[ crl_ext ]
+#issuerAltName            = issuer:copy
+authorityKeyIdentifier    = keyid:always,issuer:always
+#authorityInfoAccess       = @issuer_info

package/certificates1/CA/conf/caconfig.cnf.tmp

@@ -0,0 +1,125 @@
+#.........DO NOT MODIFY BY HAND .........................
+[ ca ]
+default_ca               = CA_default
+[ CA_default ]
+dir                      = C:/sterfive/NodeOPCUA/node-opcua-pki/certificates/CA            # the main CA folder
+certs                    = $dir/certs                 # where to store certificates
+new_certs_dir            = $dir/certs                 #
+database                 = $dir/index.txt             # the certificate database
+serial                   = $dir/serial                # the serial number counter
+certificate              = $dir/public/cacert.pem     # The root CA certificate
+private_key              = $dir/private/cakey.pem     # the CA private key
+x509_extensions          = usr_cert                   #
+default_days             = 3650                       # default validity : 10 years
+
+# default_md               = sha1
+
+default_md                = sha256                      # The default digest algorithm
+
+preserve                 = no
+policy                   = policy_match
+# randfile                 = $dir/random.rnd
+# default_startdate        = YYMMDDHHMMSSZ
+# default_enddate          = YYMMDDHHMMSSZ
+crl_dir                  = $dir/crl
+crl_extensions           = crl_ext
+crl                      = $dir/revocation_list.crl # the Revocation list
+crlnumber                = $dir/crlnumber           # CRL number file
+default_crl_days         = 30
+default_crl_hours        = 24
+#msie_hack
+
+[ policy_match ]
+countryName              = optional
+stateOrProvinceName      = optional
+localityName             = optional
+organizationName         = optional
+organizationalUnitName   = optional
+commonName               = optional
+emailAddress             = optional
+
+[ req ]
+default_bits             = 4096                     # Size of keys
+default_keyfile          = key.pem                  # name of generated keys
+distinguished_name       = req_distinguished_name
+attributes               = req_attributes
+x509_extensions          = v3_ca
+#input_password
+#output_password
+string_mask              = nombstr                  # permitted characters
+req_extensions           = v3_req
+
+[ req_distinguished_name ]
+
+#0 countryName             = Country Name (2 letter code)
+# countryName_default     = FR
+# countryName_min         = 2
+# countryName_max         = 2
+# stateOrProvinceName     = State or Province Name (full name)
+# stateOrProvinceName_default = Ile de France
+# localityName            = Locality Name (city, district)
+# localityName_default    = Paris
+organizationName          = Organization Name (company)
+organizationName_default  = NodeOPCUA
+# organizationalUnitName  = Organizational Unit Name (department, division)
+# organizationalUnitName_default = R&D
+commonName                = Common Name (hostname, FQDN, IP, or your name)
+commonName_max            = 256
+commonName_default        = NodeOPCUA
+# emailAddress            = Email Address
+# emailAddress_max        = 40
+# emailAddress_default    = node-opcua (at) node-opcua (dot) com
+
+[ req_attributes ]
+#challengePassword        = A challenge password
+#challengePassword_min    = 4
+#challengePassword_max    = 20
+#unstructuredName         = An optional company name
+[ usr_cert ]
+basicConstraints          = critical, CA:FALSE
+subjectKeyIdentifier      = hash
+authorityKeyIdentifier    = keyid,issuer:always
+#authorityKeyIdentifier    = keyid
+subjectAltName            = URI:undefined
+# issuerAltName            = issuer:copy
+nsComment                 = ''OpenSSL Generated Certificate''
+#nsCertType               = client, email, objsign for ''everything including object signing''
+#nsCaRevocationUrl        = http://www.domain.dom/ca-crl.pem
+#nsBaseUrl                =
+#nsRenewalUrl             =
+#nsCaPolicyUrl            =
+#nsSslServerName          =
+keyUsage                  = critical, digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment, keyAgreement, keyCertSign
+extendedKeyUsage          = critical,serverAuth ,clientAuth
+
+[ v3_req ]
+basicConstraints          = critical, CA:FALSE
+keyUsage                  = nonRepudiation, digitalSignature, keyEncipherment, dataEncipherment, keyAgreement
+extendedKeyUsage          = critical,serverAuth ,clientAuth
+subjectAltName            = URI:undefined
+nsComment                 = "CA Generated by Node-OPCUA Certificate utility using openssl"
+[ v3_ca ]
+subjectKeyIdentifier      = hash
+authorityKeyIdentifier    = keyid:always,issuer:always
+# authorityKeyIdentifier    = keyid
+basicConstraints          = CA:TRUE
+keyUsage                  = critical, cRLSign, keyCertSign
+nsComment                 = "CA Certificate generated by Node-OPCUA Certificate utility using openssl"
+#nsCertType                 = sslCA, emailCA
+#subjectAltName             = email:copy
+#issuerAltName              = issuer:copy
+#obj                        = DER:02:03
+crlDistributionPoints     = @crl_info
+[ crl_info ]
+URI.0                     = http://localhost:8900/crl.pem
+[ v3_selfsigned]
+basicConstraints          = critical, CA:FALSE
+keyUsage                  = nonRepudiation, digitalSignature, keyEncipherment, dataEncipherment, keyAgreement
+extendedKeyUsage          = critical,serverAuth ,clientAuth
+nsComment                 = "Self-signed certificate, generated by NodeOPCUA"
+subjectAltName            = URI:undefined
+
+[ crl_ext ]
+#issuerAltName            = issuer:copy
+authorityKeyIdentifier    = keyid:always,issuer:always
+#authorityInfoAccess       = @issuer_info

package/certificates1/CA/crl/revocation_list.crl

@@ -0,0 +1,16 @@
+-----BEGIN X509 CRL-----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+-----END X509 CRL-----

package/certificates1/CA/crlnumber

@@ -0,0 +1 @@
+1001

package/certificates1/CA/crlnumber.old

@@ -0,0 +1 @@
+1000

package/certificates1/CA/index.txt.attr

@@ -0,0 +1 @@
+unique_subject = no

package/certificates1/CA/private/cakey.csr

@@ -0,0 +1,76 @@
+Certificate Request:
+    Data:
+        Version: 0 (0x0)
+        Subject: C=FR, ST=IDF, L=Paris, O=Local NODE-OPCUA Certificate Authority, CN=NodeOPCUA-CA
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:c1:d3:5d:fb:6e:b7:13:06:7d:8f:77:7f:5a:e9:
+                    2a:e4:62:99:f9:92:0a:7f:47:95:bd:d6:2f:f4:40:
+                    58:e4:88:c6:22:74:ab:bf:1a:9e:bf:64:7f:f0:c1:
+                    6c:46:57:8c:64:1d:8f:30:bb:5d:6c:a0:5b:99:da:
+                    9c:ac:62:8b:65:11:14:3e:ff:d4:2b:41:38:d4:5a:
+                    e9:f4:5e:35:f4:ca:f2:07:0b:d2:ea:c8:3b:ad:61:
+                    7c:b6:16:c8:fd:51:3f:19:96:ef:93:5b:78:13:6d:
+                    ee:d3:ae:14:9a:c8:61:68:4e:ee:15:1a:d9:b3:1e:
+                    c5:3c:69:8b:73:4e:e2:48:fd:9b:89:52:9d:29:73:
+                    1e:3c:f2:ff:de:3c:b8:06:bf:73:6a:eb:a3:e8:57:
+                    f2:a6:ad:ae:60:4b:61:22:cb:1c:15:25:6b:ad:0e:
+                    18:41:09:52:ea:c5:ad:f1:0f:e4:86:8d:fd:c1:b0:
+                    ef:11:b4:d4:dc:24:bf:13:91:e6:c7:11:93:5c:6c:
+                    95:71:37:a5:7a:02:88:a8:45:25:58:b5:85:f8:af:
+                    0d:ff:6d:2f:1f:b4:99:29:18:57:a4:c6:87:ec:61:
+                    da:a8:00:94:0f:f8:3d:aa:23:00:ea:9e:53:12:7f:
+                    05:2a:2a:92:75:71:76:9e:c2:29:5e:cf:8e:32:21:
+                    e0:eb
+                Exponent: 65537 (0x10001)
+        Attributes:
+        Requested Extensions:
+            X509v3 Basic Constraints: critical
+                CA:FALSE
+            X509v3 Key Usage: 
+                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement
+            X509v3 Extended Key Usage: critical
+                TLS Web Server Authentication, TLS Web Client Authentication
+            X509v3 Subject Alternative Name: 
+                URI:undefined
+            Netscape Comment: 
+                CA Generated by Node-OPCUA Certificate utility using openssl
+    Signature Algorithm: sha256WithRSAEncryption
+         93:52:f0:28:dd:81:5b:44:65:d9:2c:95:7b:f8:10:68:96:86:
+         0c:46:d5:e8:f3:48:23:f4:ed:8d:50:66:f9:36:2b:df:4e:1e:
+         90:04:61:b0:8c:b6:9b:d2:b3:e8:d3:5f:b2:5e:58:e4:15:ab:
+         95:4c:3f:97:ad:85:0a:08:44:1c:b3:d3:e8:fd:95:ac:33:6c:
+         f0:b8:99:6a:56:5e:d5:a3:3d:6c:02:52:a0:a3:2d:25:e8:d0:
+         24:f6:b7:53:b0:ea:e1:4c:26:ea:b3:93:36:20:a5:b9:02:c8:
+         c6:f2:33:ba:40:df:43:bd:bc:f1:e9:03:bc:02:27:34:8a:d9:
+         01:ca:42:36:80:f7:d2:19:95:fc:ad:34:09:04:e2:78:0d:c9:
+         85:20:e1:3d:9f:c5:da:9b:57:95:2d:f1:77:12:1d:90:2f:53:
+         d3:f8:f5:ed:2b:25:82:36:c6:77:28:ec:ee:05:a4:f9:3c:d4:
+         74:b7:d4:af:dc:a5:55:ea:e8:b8:f8:c6:48:84:11:40:ef:b8:
+         9e:23:d7:4b:4e:99:fc:4c:63:a8:32:43:22:c9:ca:e4:a9:9a:
+         88:2b:6b:f9:69:42:db:dc:04:20:4c:71:cd:77:c6:0a:98:8a:
+         dd:f6:c5:71:74:f0:e4:5b:82:ff:fc:6f:a3:cd:9c:f2:65:4a:
+         33:2c:80:86
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

package/certificates1/CA/serial

@@ -0,0 +1 @@
+1000

package/certificates1/config.js

@@ -0,0 +1,18 @@
+"use strict";
+// ---------------------------------------------------------------------------------------------------------------------
+module.exports = {
+
+    subject: {
+        commonName: "NodeOPCUA-TEST",
+        organization: "NodeOPCUA",
+        organizationalUnit: "Unit",
+        locality: "Paris",
+        state: "IDF",
+        country: "FR" // Two letters
+    },
+
+    validity: 365 * 15, // 15 years
+
+    keySize: 2048 // default private key size : 2048, 3072 or 4096 (avoid 1024 too weak)
+};
+

package/dist/crypto_create_CA.d.ts

@@ -1,2 +1,2 @@
-import { ErrorCallback } from "./pki/common";
-export declare function main(argumentsList: string, _done?: ErrorCallback): void;
+import { ErrorCallback } from "./pki/common";
+export declare function main(argumentsList: string, _done?: ErrorCallback): void;