node-opcua-pki 4.2.0 → 4.3.0

package/dist/lib/ca/crypto_create_CA.js

@@ -116,20 +116,19 @@ function displayConfig(config) {
     function w(str, l) {
         return (str + "                            ").substring(0, l);
     }
-    console.log(chalk.yellow(" configuration = "));
+    (0, toolbox_1.warningLog)(chalk.yellow(" configuration = "));
     for (const [key, value] of Object.entries(config)) {
-        console.log("   " + chalk.yellow(w(key, 30)) + " : " + chalk.cyan(value.toString()));
+        (0, toolbox_1.warningLog)("   " + chalk.yellow(w(key, 30)) + " : " + chalk.cyan(value.toString()));
     }
 }
 function default_template_content() {
     // istanbul ignore next
     if (process.pkg && process.pkg.entrypoint) {
         // we are using PKG compiled package !
-        // console.log("___filename", __filename);
-        // console.log("__dirname", __dirname);
-        // console.log("process.pkg.entrypoint", (process as any).pkg.entrypoint);
+        // warningLog("___filename", __filename);
+        // warningLog("__dirname", __dirname);
+        // warningLog("process.pkg.entrypoint", (process as any).pkg.entrypoint);
         const a = fs.readFileSync(path.join(__dirname, "../../bin/crypto_create_CA_config.example.js"), "utf8");
-        console.log(a);
         return a;
     }
     function find_default_config_template() {
@@ -208,7 +207,7 @@ function readConfiguration(argv) {
             (0, toolbox_1.debugLog)(chalk.yellow(" using  g_config file "), chalk.cyan(default_config));
         }
         if (!fs.existsSync(default_config)) {
-            console.log(chalk.redBright(" cannot find config file ", default_config));
+            (0, toolbox_1.debugLog)(chalk.redBright(" cannot find config file ", default_config));
         }
         // see http://stackoverflow.com/questions/94445/using-openssl-what-does-unable-to-write-random-state-mean
         // set random file to be random.rnd in the same folder as the g_config file
@@ -328,7 +327,7 @@ function on_completion(err, done) {
     assert(typeof done === "function", "expecting function");
     // istanbul ignore next
     if (err) {
-        console.log(chalk.redBright("ERROR : ") + err.message);
+        (0, toolbox_1.warningLog)(chalk.redBright("ERROR : ") + err.message);
     }
     done();
 }
@@ -358,7 +357,7 @@ function createDefaultCertificate(base_name, prefix, key_length, applicationUri,
             return __awaiter(this, void 0, void 0, function* () {
                 // istanbul ignore next
                 if (fs.existsSync(certificate)) {
-                    console.log(chalk.yellow("         certificate"), chalk.cyan(certificate), chalk.yellow(" already exists => skipping"));
+                    (0, toolbox_1.warningLog)(chalk.yellow("         certificate"), chalk.cyan(certificate), chalk.yellow(" already exists => skipping"));
                     return "";
                 }
                 else {
@@ -411,7 +410,7 @@ function createDefaultCertificate(base_name, prefix, key_length, applicationUri,
         function createPrivateKeyIfNotExist(privateKey, keyLength) {
             return __awaiter(this, void 0, void 0, function* () {
                 if (fs.existsSync(privateKey)) {
-                    console.log(chalk.yellow("         privateKey"), chalk.cyan(privateKey), chalk.yellow(" already exists => skipping"));
+                    (0, toolbox_1.warningLog)(chalk.yellow("         privateKey"), chalk.cyan(privateKey), chalk.yellow(" already exists => skipping"));
                     return;
                 }
                 else {
@@ -438,7 +437,7 @@ function createDefaultCertificate(base_name, prefix, key_length, applicationUri,
                 // self_signed certificate already exists
                 const certificate = yield createCertificateIfNotExist(certificate_revoked, private_key_file, applicationUri + "Revoked", // make sure we used a uniq URI here
                 yesterday, 365);
-                console.log(" certificate to revoke => ", certificate);
+                (0, toolbox_1.warningLog)(" certificate to revoke => ", certificate);
                 revoke_certificate(certificate_revoked);
             }
         }
@@ -472,8 +471,8 @@ function create_default_certificates(dev) {
             yield (0, hostname_1.extractFullyQualifiedDomainName)();
             const hostname = os.hostname();
             const fqdn = (0, hostname_1.getFullyQualifiedDomainName)();
-            console.log(chalk.yellow("     hostname = "), chalk.cyan(hostname));
-            console.log(chalk.yellow("     fqdn     = "), chalk.cyan(fqdn));
+            (0, toolbox_1.warningLog)(chalk.yellow("     hostname = "), chalk.cyan(hostname));
+            (0, toolbox_1.warningLog)(chalk.yellow("     fqdn     = "), chalk.cyan(fqdn));
             clientURN = (0, applicationurn_1.makeApplicationUrn)(hostname, "NodeOPCUA-Client");
             serverURN = (0, applicationurn_1.makeApplicationUrn)(hostname, "NodeOPCUA-Server");
             discoveryServerURN = (0, applicationurn_1.makeApplicationUrn)(hostname, "NodeOPCUA-DiscoveryServer");
@@ -681,7 +680,7 @@ argv
             if (!csr_file) {
                 return;
             }
-            console.log(" csr_file = ", csr_file);
+            (0, toolbox_1.warningLog)(" csr_file = ", csr_file);
             const certificate = csr_file.replace(".csr", ".pem");
             if (fs.existsSync(certificate)) {
                 throw new Error(" File " + certificate + " already exist");
@@ -707,16 +706,16 @@ argv
     wrap(() => __awaiter(void 0, void 0, void 0, function* () {
         // example : node bin\crypto_create_CA.js revoke my_certificate.pem
         const certificate = path.resolve(local_argv.certificateFile);
-        console.log(chalk.yellow(" Certificate to revoke : "), chalk.cyan(certificate));
+        (0, toolbox_1.warningLog)(chalk.yellow(" Certificate to revoke : "), chalk.cyan(certificate));
         if (!fs.existsSync(certificate)) {
             throw new Error("cannot find certificate to revoke " + certificate);
         }
         yield readConfiguration(local_argv);
         yield construct_CertificateAuthority("");
         yield (0, util_1.promisify)(revoke_certificate)(certificate);
-        console.log("done ... ");
-        console.log("  crl = ", g_certificateAuthority.revocationList);
-        console.log("\nyou should now publish the new Certificate Revocation List");
+        (0, toolbox_1.warningLog)("done ... ");
+        (0, toolbox_1.warningLog)("  crl = ", g_certificateAuthority.revocationList);
+        (0, toolbox_1.warningLog)("\nyou should now publish the new Certificate Revocation List");
     }));
 })
     .command("csr", "create a certificate signing request", (yargs) => {
@@ -760,7 +759,7 @@ argv
     wrap(() => __awaiter(void 0, void 0, void 0, function* () {
         yield readConfiguration(local_argv);
         if (!fs.existsSync(gLocalConfig.PKIFolder || "")) {
-            console.log("PKI folder must exist");
+            (0, toolbox_1.warningLog)("PKI folder must exist");
         }
         yield construct_CertificateManager();
         if (!gLocalConfig.outputFile || fs.existsSync(gLocalConfig.outputFile)) {
@@ -775,17 +774,17 @@ argv
             return;
         }
         if (!gLocalConfig.outputFile) {
-            console.log("please specify a output file");
+            (0, toolbox_1.warningLog)("please specify a output file");
             return;
         }
         const csr = yield fs.promises.readFile(internal_csr_file, "utf-8");
         fs.writeFileSync(gLocalConfig.outputFile || "", csr, "utf-8");
-        console.log("Subject        = ", gLocalConfig.subject);
-        console.log("applicationUri = ", gLocalConfig.applicationUri);
-        console.log("altNames       = ", gLocalConfig.altNames);
-        console.log("dns            = ", gLocalConfig.dns);
-        console.log("ip             = ", gLocalConfig.ip);
-        console.log("CSR file = ", gLocalConfig.outputFile);
+        (0, toolbox_1.warningLog)("Subject        = ", gLocalConfig.subject);
+        (0, toolbox_1.warningLog)("applicationUri = ", gLocalConfig.applicationUri);
+        (0, toolbox_1.warningLog)("altNames       = ", gLocalConfig.altNames);
+        (0, toolbox_1.warningLog)("dns            = ", gLocalConfig.dns);
+        (0, toolbox_1.warningLog)("ip             = ", gLocalConfig.ip);
+        (0, toolbox_1.warningLog)("CSR file = ", gLocalConfig.outputFile);
     }));
 })
     .command("sign", "validate a certificate signing request and generate a certificate", (yargs) => {
@@ -841,7 +840,7 @@ argv
 }, (yargs) => {
     wrap(() => __awaiter(void 0, void 0, void 0, function* () {
         const data = yield (0, util_1.promisify)(with_openssl_1.dumpCertificate)(yargs.certificateFile);
-        console.log(data);
+        (0, toolbox_1.warningLog)(data);
     }));
 })
     .command("toder <pemCertificate>", "convert a certificate to a DER format with finger print", () => {
@@ -860,11 +859,11 @@ argv
         if (!data)
             return;
         const s = data.split("=")[1].split(":").join("").trim();
-        console.log(s);
+        (0, toolbox_1.warningLog)(s);
     }));
 })
     .command("$0", "help", (yargs) => {
-    console.log("--help for help");
+    (0, toolbox_1.warningLog)("--help for help");
     return yargs;
 })
     .epilog(epilog)
@@ -877,8 +876,8 @@ function main(argumentsList, _done) {
     commands.parse(argumentsList, (err, g_argv) => {
         // istanbul ignore next
         if (err) {
-            console.log(" err = ", err);
-            console.log(" use --help for more info");
+            (0, toolbox_1.warningLog)(" err = ", err);
+            (0, toolbox_1.warningLog)(" use --help for more info");
             setImmediate(() => {
                 commands.showHelp();
                 done(err);

package/dist/lib/pki/certificate_manager.d.ts

@@ -23,6 +23,12 @@ export interface CreateSelfSignCertificateParam1 extends CreateSelfSignCertifica
     startDate: Date;
     validity: number;
 }
+export interface VerifyCertificateOptions {
+    acceptOutdatedCertificate?: boolean;
+    acceptOutDatedIssuerCertificate?: boolean;
+    ignoreMissingRevocationList?: boolean;
+    acceptPendingCertificate?: boolean;
+}
 export declare enum VerificationStatus {
     /** The certificate provided as a parameter is not valid. */
     BadCertificateInvalid = "BadCertificateInvalid",
@@ -97,14 +103,14 @@ export declare class CertificateManager {
     get issuersCrlFolder(): string;
     isCertificateTrusted(certificate: Certificate, callback: (err: Error | null, trustedStatus: string) => void): void;
     isCertificateTrusted(certificate: Certificate): Promise<string>;
-    _innerVerifyCertificateAsync(certificate: Certificate, isIssuer: boolean, level: number): Promise<VerificationStatus>;
-    verifyCertificateAsync(certificate: Certificate): Promise<VerificationStatus>;
+    _innerVerifyCertificateAsync(certificate: Certificate, isIssuer: boolean, level: number, options: VerifyCertificateOptions): Promise<VerificationStatus>;
+    protected verifyCertificateAsync(certificate: Certificate, options: VerifyCertificateOptions): Promise<VerificationStatus>;
     /**
      * Verify certificate validity
      * @method verifyCertificate
      * @param certificate
      */
-    verifyCertificate(certificate: Certificate): Promise<VerificationStatus>;
+    verifyCertificate(certificate: Certificate, options?: VerifyCertificateOptions): Promise<VerificationStatus>;
     verifyCertificate(certificate: Certificate, callback: (err: Error | null, status?: VerificationStatus) => void): void;
     initialize(): Promise<void>;
     initialize(callback: (err?: Error) => void): void;

package/dist/lib/pki/certificate_manager.js

@@ -299,7 +299,7 @@ class CertificateManager {
             }
         });
     }
-    _innerVerifyCertificateAsync(certificate, isIssuer, level) {
+    _innerVerifyCertificateAsync(certificate, isIssuer, level, options) {
         var _a, _b, _c, _d, _e;
         return __awaiter(this, void 0, void 0, function* () {
             if (level >= 5) {
@@ -314,7 +314,6 @@ class CertificateManager {
             // check if certificate is attached to a issuer
             const hasIssuerKey = (_b = (_a = info.tbsCertificate.extensions) === null || _a === void 0 ? void 0 : _a.authorityKeyIdentifier) === null || _b === void 0 ? void 0 : _b.keyIdentifier;
             (0, debug_1.debugLog)("Certificate as an Issuer Key", hasIssuerKey);
-            // console.log(inspect(info, { depth: 100 }));
             if (hasIssuerKey) {
                 const isSelfSigned = isSelfSigned2(info);
                 (0, debug_1.debugLog)("Is the Certificate self-signed  ?", isSelfSigned);
@@ -334,7 +333,7 @@ class CertificateManager {
                     else {
                         (0, debug_1.debugLog)(" the issuer certificate has been found in the issuer.cert folder !");
                     }
-                    const issuerStatus = yield this._innerVerifyCertificateAsync(issuerCertificate, true, level + 1);
+                    const issuerStatus = yield this._innerVerifyCertificateAsync(issuerCertificate, true, level + 1, options);
                     if (issuerStatus === VerificationStatus.BadCertificateRevocationUnknown) {
                         // the issuer must have a CRL available .... !
                         return VerificationStatus.BadCertificateIssuerRevocationUnknown;
@@ -344,8 +343,10 @@ class CertificateManager {
                         return VerificationStatus.BadCertificateIssuerRevocationUnknown;
                     }
                     if (issuerStatus === VerificationStatus.BadCertificateTimeInvalid) {
-                        // the issuer must have valid dates ....
-                        return VerificationStatus.BadCertificateIssuerTimeInvalid;
+                        if (!options || !options.acceptOutDatedIssuerCertificate) {
+                            // the issuer must have valid dates ....
+                            return VerificationStatus.BadCertificateIssuerTimeInvalid;
+                        }
                     }
                     if (issuerStatus == VerificationStatus.BadCertificateUntrusted) {
                         (0, debug_1.debugLog)("warning issuerStatus = ", issuerStatus.toString(), "the issuer certificate is not trusted");
@@ -363,9 +364,14 @@ class CertificateManager {
                     }
                     hasValidIssuer = true;
                     // let detected if our certificate is in the revocation list
-                    const revokedStatus = yield this.isCertificateRevoked(certificate);
+                    let revokedStatus = yield this.isCertificateRevoked(certificate);
                     if (revokedStatus === VerificationStatus.BadCertificateRevocationUnknown) {
-                        return VerificationStatus.BadCertificateRevocationUnknown;
+                        if (!options || !options.ignoreMissingRevocationList) {
+                            return VerificationStatus.BadCertificateRevocationUnknown;
+                        }
+                        else {
+                            revokedStatus = VerificationStatus.Good;
+                        }
                     }
                     if (revokedStatus !== VerificationStatus.Good) {
                         // certificate is revoked !!!
@@ -413,13 +419,17 @@ class CertificateManager {
                 (0, debug_1.debugLog)(chalk.red("certificate is invalid : certificate is not active yet !") +
                     "  not before date =" +
                     certificateInfo.notBefore);
-                isTimeInvalid = true;
+                if (!options.acceptPendingCertificate) {
+                    isTimeInvalid = true;
+                }
             }
             //  check that certificate has not expired
             if (certificateInfo.notAfter.getTime() <= now.getTime()) {
                 // certificate is obsolete
                 (0, debug_1.debugLog)(chalk.red("certificate is invalid : certificate has expired !") + " not after date =" + certificateInfo.notAfter);
-                isTimeInvalid = true;
+                if (!options.acceptOutdatedCertificate) {
+                    isTimeInvalid = true;
+                }
             }
             if (status === "trusted") {
                 return isTimeInvalid ? VerificationStatus.BadCertificateTimeInvalid : VerificationStatus.Good;
@@ -439,21 +449,31 @@ class CertificateManager {
             }
         });
     }
-    verifyCertificateAsync(certificate) {
+    verifyCertificateAsync(certificate, options) {
         return __awaiter(this, void 0, void 0, function* () {
-            const status1 = yield this._innerVerifyCertificateAsync(certificate, false, 0);
+            const status1 = yield this._innerVerifyCertificateAsync(certificate, false, 0, options);
             return status1;
         });
     }
-    verifyCertificate(certificate, callback) {
-        if (!callback)
+    verifyCertificate(certificate, ...args) {
+        let options;
+        let callback = undefined;
+        if (args.length === 1) {
+            callback = args[0];
+        }
+        else if (args.length === 2) {
+            options = args[0];
+            callback = args[1];
+        }
+        // istanbul ignore next
+        if (!callback || typeof callback !== "function")
             throw new Error("internal error");
         // Is the  signature on the SoftwareCertificate valid .?
         if (!certificate) {
             // missing certificate
             return callback(null, VerificationStatus.BadSecurityChecksFailed);
         }
-        (0, util_1.callbackify)(this.verifyCertificateAsync).call(this, certificate, callback);
+        (0, util_1.callbackify)(this.verifyCertificateAsync).call(this, certificate, options || {}, callback);
     }
     initialize(...args) {
         const callback = args[0];
@@ -684,7 +704,7 @@ class CertificateManager {
             if (selectedIssuerCertificates.length > 0) {
                 if (selectedIssuerCertificates.length > 1) {
                     // tslint:disable-next-line: no-console
-                    console.log("Warning more than one issuer certificate exists with subjectKeyIdentifier ", wantedIssuerKey);
+                    (0, debug_1.warningLog)("Warning more than one issuer certificate exists with subjectKeyIdentifier ", wantedIssuerKey);
                 }
                 return selectedIssuerCertificates[0].certificate || null;
             }
@@ -694,7 +714,7 @@ class CertificateManager {
             // istanbul ignore next
             if (selectedTrustedCertificates.length > 1) {
                 // tslint:disable-next-line: no-console
-                console.log("Warning more than one certificate exists with subjectKeyIdentifier in trusted certificate list ", wantedIssuerKey, selectedTrustedCertificates.length);
+                (0, debug_1.warningLog)("Warning more than one certificate exists with subjectKeyIdentifier in trusted certificate list ", wantedIssuerKey, selectedTrustedCertificates.length);
                 for (const entry of selectedTrustedCertificates) {
                     (0, with_openssl_1.dumpCertificate)(entry.filename, (err, data) => {
                         (0, debug_1.debugLog)("    ", entry.filename);

package/dist/lib/toolbox/common.js

@@ -41,8 +41,8 @@ function adjustDate(params) {
     assert(params.startDate instanceof Date);
     // // istanbul ignore next
     // if (!g_config.silent) {
-    //     console.log(" start Date ", params.startDate.toUTCString(), x509Date(params.startDate));
-    //     console.log(" end   Date ", params.endDate.toUTCString(), x509Date(params.endDate));
+    //     warningLog(" start Date ", params.startDate.toUTCString(), x509Date(params.startDate));
+    //     warningLog(" end   Date ", params.endDate.toUTCString(), x509Date(params.endDate));
     // }
 }
 exports.adjustDate = adjustDate;

package/dist/lib/toolbox/common2.js

@@ -32,7 +32,7 @@ const debug_1 = require("./debug");
 function certificateFileExist(certificateFile) {
     // istanbul ignore next
     if (fs.existsSync(certificateFile) && !config_1.g_config.force) {
-        console.log(chalk.yellow("        certificate ") + chalk.cyan(certificateFile) + chalk.yellow(" already exists => do not overwrite"));
+        (0, debug_1.warningLog)(chalk.yellow("        certificate ") + chalk.cyan(certificateFile) + chalk.yellow(" already exists => do not overwrite"));
         return false;
     }
     return true;

package/dist/lib/toolbox/debug.d.ts

@@ -2,3 +2,4 @@ export declare const doDebug: string | boolean;
 export declare const displayError = true;
 export declare const displayDebug: boolean;
 export declare function debugLog(...args: [any?, ...any[]]): void;
+export declare function warningLog(...args: [any?, ...any[]]): void;

package/dist/lib/toolbox/debug.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.debugLog = exports.displayDebug = exports.displayError = exports.doDebug = void 0;
+exports.warningLog = exports.debugLog = exports.displayDebug = exports.displayError = exports.doDebug = void 0;
 // ---------------------------------------------------------------------------------------------------------------------
 // node-opcua-pki
 // ---------------------------------------------------------------------------------------------------------------------
@@ -34,4 +34,8 @@ function debugLog(...args) {
     }
 }
 exports.debugLog = debugLog;
+function warningLog(...args) {
+    console.log.apply(null, args);
+}
+exports.warningLog = warningLog;
 //# sourceMappingURL=debug.js.map

package/dist/lib/toolbox/display.js

@@ -25,13 +25,14 @@ exports.display = exports.displaySubtitle = exports.displayTitle = exports.displ
 // ---------------------------------------------------------------------------------------------------------------------
 const chalk = require("chalk");
 const config_1 = require("./config");
+const debug_1 = require("./debug");
 // istanbul ignore next
 function displayChapter(str, callback) {
     const l = "                                                                                               ";
-    console.log(chalk.bgWhite(l) + " ");
+    (0, debug_1.warningLog)(chalk.bgWhite(l) + " ");
     str = ("        " + str + l).substring(0, l.length);
-    console.log(chalk.bgWhite.cyan(str));
-    console.log(chalk.bgWhite(l) + " ");
+    (0, debug_1.warningLog)(chalk.bgWhite.cyan(str));
+    (0, debug_1.warningLog)(chalk.bgWhite(l) + " ");
     if (callback) {
         callback();
     }
@@ -40,9 +41,9 @@ exports.displayChapter = displayChapter;
 function displayTitle(str, callback) {
     // istanbul ignore next
     if (!config_1.g_config.silent) {
-        console.log("");
-        console.log(chalk.yellowBright(str));
-        console.log(chalk.yellow(new Array(str.length + 1).join("=")), "\n");
+        (0, debug_1.warningLog)("");
+        (0, debug_1.warningLog)(chalk.yellowBright(str));
+        (0, debug_1.warningLog)(chalk.yellow(new Array(str.length + 1).join("=")), "\n");
     }
     if (callback) {
         callback();
@@ -52,9 +53,9 @@ exports.displayTitle = displayTitle;
 function displaySubtitle(str, callback) {
     // istanbul ignore next
     if (!config_1.g_config.silent) {
-        console.log("");
-        console.log("    " + chalk.yellowBright(str));
-        console.log("    " + chalk.white(new Array(str.length + 1).join("-")), "\n");
+        (0, debug_1.warningLog)("");
+        (0, debug_1.warningLog)("    " + chalk.yellowBright(str));
+        (0, debug_1.warningLog)("    " + chalk.white(new Array(str.length + 1).join("-")), "\n");
     }
     if (callback) {
         callback();
@@ -64,7 +65,7 @@ exports.displaySubtitle = displaySubtitle;
 function display(str, callback) {
     // istanbul ignore next
     if (!config_1.g_config.silent) {
-        console.log("       " + str);
+        (0, debug_1.warningLog)("       " + str);
     }
     if (callback) {
         callback();

package/dist/lib/toolbox/with_openssl/_create_random_file.js

@@ -42,9 +42,6 @@ exports.createRandomFile = createRandomFile;
 function createRandomFileIfNotExist(randomFile, options, callback) {
     const randomFilePath = options.cwd ? path.join(options.cwd, randomFile) : randomFile;
     if (fs.existsSync(randomFilePath)) {
-        // if (doDebug) {
-        //     console.log(chalk.yellow("         randomFile"), chalk.cyan(randomFile), chalk.yellow(" already exists => skipping"));
-        // }
         return callback();
     }
     else {

package/dist/lib/toolbox/with_openssl/_env.js

@@ -2,11 +2,12 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.processAltNames = exports.getEnvironmentVarNames = exports.getEnv = exports.hasEnv = exports.setEnv = exports.exportedEnvVars = void 0;
 const config_1 = require("../config");
+const debug_1 = require("../debug");
 exports.exportedEnvVars = {};
 function setEnv(varName, value) {
     // istanbul ignore next
     if (!config_1.g_config.silent) {
-        console.log("          set " + varName + "=" + value);
+        (0, debug_1.warningLog)("          set " + varName + "=" + value);
     }
     exports.exportedEnvVars[varName] = value;
     if (["OPENSSL_CONF"].indexOf(varName) >= 0) {

package/dist/lib/toolbox/with_openssl/execute_openssl.js

@@ -48,7 +48,7 @@ function execute(cmd, options, callback) {
     options.cwd = options.cwd || process.cwd();
     // istanbul ignore next
     if (!config_1.g_config.silent) {
-        console.log(chalk.cyan("                  CWD         "), options.cwd);
+        (0, debug_1.warningLog)(chalk.cyan("                  CWD         "), options.cwd);
     }
     const outputs = [];
     const child = child_process.exec(cmd, {
@@ -65,7 +65,6 @@ function execute(cmd, options, callback) {
                 console.error(chalk.bgWhiteBright.redBright(`${fence} OPENSSL ERROR ${fence}`));
                 console.error(from.stack);
             }
-            // console.log("        ERR = ".bgWhite.red, err);
             callback(new Error(err.message));
             return;
         }
@@ -121,7 +120,7 @@ function ensure_openssl_installed(callback) {
                 }
                 config_1.g_config.opensslVersion = outputs.trim();
                 if (debug_1.doDebug) {
-                    console.log("OpenSSL version : ", config_1.g_config.opensslVersion);
+                    (0, debug_1.warningLog)("OpenSSL version : ", config_1.g_config.opensslVersion);
                 }
                 callback(err ? err : undefined);
             });
@@ -174,9 +173,9 @@ function execute_openssl(cmd, options, callback) {
     (0, _env_1.setEnv)("OPENSSL_CONF", options.openssl_conf);
     // istanbul ignore next
     if (!config_1.g_config.silent) {
-        console.log(chalk.cyan("                  OPENSSL_CONF"), process.env.OPENSSL_CONF);
-        console.log(chalk.cyan("                  RANDFILE    "), process.env.RANDFILE);
-        console.log(chalk.cyan("                  CMD         openssl "), chalk.cyanBright(cmd));
+        (0, debug_1.warningLog)(chalk.cyan("                  OPENSSL_CONF"), process.env.OPENSSL_CONF);
+        (0, debug_1.warningLog)(chalk.cyan("                  RANDFILE    "), process.env.RANDFILE);
+        (0, debug_1.warningLog)(chalk.cyan("                  CMD         openssl "), chalk.cyanBright(cmd));
     }
     ensure_openssl_installed((err) => {
         // istanbul ignore next

package/dist/lib/toolbox/with_openssl/install_prerequisite.js

@@ -36,6 +36,7 @@ const child_process = require("child_process");
 const ProgressBar = require("progress");
 const yauzl = require("yauzl");
 const Table = require("cli-table");
+const debug_1 = require("../debug");
 const doDebug = process.env.NODEOPCUAPKIDEBUG || false;
 // tslint:disable-next-line:no-var-requires
 // eslint-disable-next-line @typescript-eslint/no-var-requires
@@ -54,8 +55,8 @@ function makeOptions() {
                 proxyAuth: auth,
             },
         };
-        console.log(chalk.green("- using proxy "), proxy);
-        console.log(options);
+        (0, debug_1.warningLog)(chalk.green("- using proxy "), proxy);
+        (0, debug_1.warningLog)(options);
         return options;
     }
     return {};
@@ -90,14 +91,14 @@ function check_system_openssl_version(callback) {
     execute("which openssl", (err, result) => {
         // istanbul ignore next
         if (err) {
-            console.log("warning: ", err.message);
+            (0, debug_1.warningLog)("warning: ", err.message);
             return callback(new Error("Cannot find openssl"));
         }
         const exitCode = result.exitCode;
         const output = result.output;
         if (exitCode !== 0) {
-            console.log(chalk.yellow(" it seems that ") + chalk.cyan("openssl") + chalk.yellow(" is not installed on your computer "));
-            console.log(chalk.yellow("Please install it before running this programs"));
+            (0, debug_1.warningLog)(chalk.yellow(" it seems that ") + chalk.cyan("openssl") + chalk.yellow(" is not installed on your computer "));
+            (0, debug_1.warningLog)(chalk.yellow("Please install it before running this programs"));
             return callback(new Error("Cannot find openssl"));
         }
         const opensslExecPath = output.replace(/\n\r/g, "").trim();
@@ -105,7 +106,7 @@ function check_system_openssl_version(callback) {
         const q_opensslExecPath = quote(opensslExecPath);
         // istanbul ignore next
         if (doDebug) {
-            console.log("              OpenSSL found in : " + chalk.yellow(opensslExecPath));
+            (0, debug_1.warningLog)("              OpenSSL found in : " + chalk.yellow(opensslExecPath));
         }
         // ------------------------ now verify that openssl version is the correct one
         execute(q_opensslExecPath + " version", (err, result) => {
@@ -154,8 +155,8 @@ function install_and_check_win32_openssl_version(callback) {
         const opensslExecPath = get_openssl_exec_path_win32();
         const exists = fs.existsSync(opensslExecPath);
         if (!exists) {
-            console.log("checking presence of ", opensslExecPath);
-            console.log(chalk.red(" cannot find file ") + opensslExecPath);
+            (0, debug_1.warningLog)("checking presence of ", opensslExecPath);
+            (0, debug_1.warningLog)(chalk.red(" cannot find file ") + opensslExecPath);
             return callback(null, false, "cannot find file " + opensslExecPath);
         }
         else {
@@ -171,7 +172,7 @@ function install_and_check_win32_openssl_version(callback) {
                 const version = output.trim();
                 // istanbul ignore next
                 if (doDebug) {
-                    console.log(" Version = ", version);
+                    (0, debug_1.warningLog)(" Version = ", version);
                 }
                 callback(null, exitCode === 0 && is_expected_openssl_version(version), version);
             }, cwd);
@@ -206,7 +207,7 @@ function install_and_check_win32_openssl_version(callback) {
             : "https://github.com/node-opcua/node-opcua-pki/releases/download/2.14.2/openssl-1.0.2u-i386-win32.zip";
         // the zip file
         const outputFilename = path.join(downloadFolder, path.basename(url));
-        console.log("downloading " + chalk.yellow(url) + " to " + outputFilename);
+        (0, debug_1.warningLog)("downloading " + chalk.yellow(url) + " to " + outputFilename);
         if (fs.existsSync(outputFilename)) {
             return callback(null, outputFilename);
         }
@@ -219,7 +220,7 @@ function install_and_check_win32_openssl_version(callback) {
         });
         const download = wget.download(url, outputFilename, options);
         download.on("error", (err) => {
-            console.log(err);
+            (0, debug_1.warningLog)(err);
             setImmediate(() => {
                 callback(err);
             });
@@ -227,9 +228,9 @@ function install_and_check_win32_openssl_version(callback) {
         download.on("end", (output) => {
             // istanbul ignore next
             if (doDebug) {
-                console.log(output);
+                (0, debug_1.warningLog)(output);
             }
-            // console.log("done ...");
+            // warningLog("done ...");
             setImmediate(() => {
                 callback(null, outputFilename);
             });
@@ -252,7 +253,7 @@ function install_and_check_win32_openssl_version(callback) {
                 setImmediate(() => {
                     // istanbul ignore next
                     if (doDebug) {
-                        console.log("unzip done");
+                        (0, debug_1.warningLog)("unzip done");
                     }
                     callback(err);
                 });
@@ -265,7 +266,7 @@ function install_and_check_win32_openssl_version(callback) {
                     const file = path.join(opensslFolder, entry.fileName);
                     // istanbul ignore next
                     if (doDebug) {
-                        console.log(" unzipping :", file);
+                        (0, debug_1.warningLog)(" unzipping :", file);
                     }
                     const writeStream = fs.createWriteStream(file, "binary");
                     // ensure parent directory exists
@@ -282,7 +283,7 @@ function install_and_check_win32_openssl_version(callback) {
     if (!fs.existsSync(opensslFolder)) {
         // istanbul ignore next
         if (doDebug) {
-            console.log("creating openssl_folder", opensslFolder);
+            (0, debug_1.warningLog)("creating openssl_folder", opensslFolder);
         }
         fs.mkdirSync(opensslFolder);
     }
@@ -291,14 +292,14 @@ function install_and_check_win32_openssl_version(callback) {
             return callback(err);
         }
         if (!opensslOK) {
-            console.log(chalk.yellow("openssl seems to be missing and need to be installed"));
+            (0, debug_1.warningLog)(chalk.yellow("openssl seems to be missing and need to be installed"));
             download_openssl((err, filename) => {
                 if (err) {
                     return callback(err);
                 }
                 // istanbul ignore next
                 if (doDebug) {
-                    console.log("deflating ", chalk.yellow(filename));
+                    (0, debug_1.warningLog)("deflating ", chalk.yellow(filename));
                 }
                 unzip_openssl(filename, (err) => {
                     if (err) {
@@ -307,8 +308,8 @@ function install_and_check_win32_openssl_version(callback) {
                     const opensslExists = !!fs.existsSync(opensslExecPath);
                     // istanbul ignore next
                     if (doDebug) {
-                        console.log("verifying ", opensslExists, opensslExists ? chalk.green("OK ") : chalk.red(" Error"), opensslExecPath);
-                        console.log("done ", err ? err : "");
+                        (0, debug_1.warningLog)("verifying ", opensslExists, opensslExists ? chalk.green("OK ") : chalk.red(" Error"), opensslExecPath);
+                        (0, debug_1.warningLog)("done ", err ? err : "");
                     }
                     check_openssl_win32((err) => {
                         callback(err, opensslExecPath);
@@ -319,7 +320,7 @@ function install_and_check_win32_openssl_version(callback) {
         else {
             // istanbul ignore next
             if (doDebug) {
-                console.log(chalk.green("openssl is already installed and have the expected version."));
+                (0, debug_1.warningLog)(chalk.green("openssl is already installed and have the expected version."));
             }
             return callback(null, opensslExecPath);
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "node-opcua-pki",
-  "version": "4.2.0",
+  "version": "4.3.0",
   "description": "PKI management for node-opcua",
   "main": "./dist/lib/index.js",
   "types": "./dist/lib/index.d.ts",
@@ -49,7 +49,7 @@
     "chokidar": "^3.5.3",
     "cli-table": "^0.3.11",
     "minimist": "^1.2.8",
-    "node-opcua-crypto": "3.0.5",
+    "node-opcua-crypto": "4.1.0",
     "progress": "^2.0.3",
     "rimraf": "3.0.2",
     "thenify": "^3.3.1",
@@ -58,30 +58,28 @@
     "yauzl": "^2.10.0"
   },
   "devDependencies": {
-    "@istanbuljs/nyc-config-typescript": "^1.0.2",
     "@types/async": "^3.2.20",
     "@types/byline": "^4.2.33",
     "@types/cli-table": "^0.3.1",
     "@types/mocha": "^10.0.1",
-    "@types/node": "^20.2.5",
+    "@types/node": "^20.5.0",
     "@types/node-dir": "0.0.34",
     "@types/progress": "^2.0.5",
     "@types/rimraf": "^3.0.2",
-    "@types/sinon": "^10.0.15",
-    "@types/underscore": "^1.11.5",
+    "@types/sinon": "^10.0.16",
+    "@types/underscore": "^1.11.6",
     "@types/yargs": "^17.0.24",
     "@types/yauzl": "^2.10.0",
-    "@typescript-eslint/eslint-plugin": "^5.59.8",
-    "@typescript-eslint/parser": "^5.59.8",
-    "eslint": "^8.41.0",
+    "@typescript-eslint/eslint-plugin": "^6.4.0",
+    "@typescript-eslint/parser": "^6.4.0",
+    "eslint": "^8.47.0",
     "mocha": "^10.2.0",
     "node-dir": "^0.1.17",
-    "nyc": "^15.1.0",
     "should": "^13.2.3",
-    "sinon": "^15.1.0",
+    "sinon": "^15.2.0",
     "source-map-support": "^0.5.21",
     "ts-node": "^10.9.1",
-    "typescript": "^5.1.3"
+    "typescript": "^5.1.6"
   },
   "bin": {
     "pki": "./bin/crypto_create_CA.js"