node-opcua-pki 6.16.0 → 6.18.0

package/dist/bin/pki.mjs

@@ -2007,31 +2007,10 @@ import child_process from "child_process";
 import fs5 from "fs";
 import os2 from "os";
 import path3 from "path";
-import url from "url";
+import { pipeline } from "stream/promises";
 import byline from "byline";
 import chalk4 from "chalk";
-import ProgressBar from "progress";
-import wget from "wget-improved-2";
 import yauzl from "yauzl";
-function makeOptions() {
-  const proxy = process.env.HTTPS_PROXY || process.env.https_proxy || process.env.HTTP_PROXY || process.env.http_proxy || void 0;
-  if (proxy) {
-    const a = new url.URL(proxy);
-    const auth = a.username ? `${a.username}:${a.password}` : void 0;
-    const options = {
-      proxy: {
-        port: a.port ? parseInt(a.port, 10) : 80,
-        protocol: a.protocol.replace(":", ""),
-        host: a.hostname ?? "",
-        proxyAuth: auth
-      }
-    };
-    warningLog(chalk4.green("- using proxy "), proxy);
-    warningLog(options);
-    return options;
-  }
-  return {};
-}
 async function execute(cmd, cwd) {
   let output = "";
   const options = {
@@ -2065,7 +2044,7 @@ function quote2(str) {
   return `"${str.replace(/\\/g, "/")}"`;
 }
 function is_expected_openssl_version(strVersion) {
-  return !!strVersion.match(/OpenSSL 1|3/);
+  return !!strVersion.match(/OpenSSL \d/);
 }
 async function getopensslExecPath() {
   let result1;
@@ -2144,6 +2123,31 @@ async function install_and_check_win32_openssl_version() {
       };
     }
   }
+  async function find_system_openssl_win32() {
+    try {
+      const result = await execute("where openssl");
+      if (result.exitCode !== 0) {
+        return void 0;
+      }
+      const opensslPath2 = result.output.split(/\r?\n/)[0].trim();
+      if (!opensslPath2 || !fs5.existsSync(opensslPath2)) {
+        return void 0;
+      }
+      const q5 = quote2(opensslPath2);
+      const versionResult = await execute(`${q5} version`);
+      const version = versionResult.output.trim();
+      if (versionResult.exitCode === 0 && is_expected_openssl_version(version)) {
+        warningLog(
+          chalk4.green("Using system OpenSSL: ") + chalk4.cyan(version) + chalk4.green(" at ") + chalk4.cyan(opensslPath2)
+        );
+        return opensslPath2;
+      }
+      warningLog(chalk4.yellow("System OpenSSL found but version not accepted: ") + version);
+      return void 0;
+    } catch (_err) {
+      return void 0;
+    }
+  }
   function win32or64() {
     if (process.env.PROCESSOR_ARCHITECTURE === "x86" && process.env.PROCESSOR_ARCHITEW6432) {
       return 64;
@@ -2157,37 +2161,39 @@ async function install_and_check_win32_openssl_version() {
     return 32;
   }
   async function download_openssl() {
-    const url2 = win32or64() === 64 ? "https://github.com/node-opcua/node-opcua-pki/releases/download/2.14.2/openssl-1.0.2u-x64_86-win64.zip" : "https://github.com/node-opcua/node-opcua-pki/releases/download/2.14.2/openssl-1.0.2u-i386-win32.zip";
-    const outputFilename = path3.join(downloadFolder, path3.basename(url2));
-    warningLog(`downloading ${chalk4.yellow(url2)} to ${outputFilename}`);
+    const url = win32or64() === 64 ? "https://github.com/node-opcua/node-opcua-pki/releases/download/2.14.2/openssl-1.0.2u-x64_86-win64.zip" : "https://github.com/node-opcua/node-opcua-pki/releases/download/2.14.2/openssl-1.0.2u-i386-win32.zip";
+    const outputFilename = path3.join(downloadFolder, path3.basename(url));
+    warningLog(`downloading ${chalk4.yellow(url)} to ${outputFilename}`);
     if (fs5.existsSync(outputFilename)) {
       return { downloadedFile: outputFilename };
     }
-    const options = makeOptions();
-    const bar = new ProgressBar(chalk4.cyan("[:bar]") + chalk4.cyan(" :percent ") + chalk4.white(":etas"), {
-      complete: "=",
-      incomplete: " ",
-      total: 100,
-      width: 100
-    });
-    return await new Promise((resolve, reject) => {
-      const download = wget.download(url2, outputFilename, options);
-      download.on("error", (err) => {
-        warningLog(err);
-        setImmediate(() => {
-          reject(err);
-        });
-      });
-      download.on("end", (output) => {
-        if (doDebug2) {
-          warningLog(output);
+    const response = await fetch(url, { redirect: "follow" });
+    if (!response.ok || !response.body) {
+      throw new Error(`Failed to download OpenSSL from ${url}: ${response.status} ${response.statusText}`);
+    }
+    const contentLength = parseInt(response.headers.get("content-length") || "0", 10);
+    let downloaded = 0;
+    let lastPercent = -1;
+    const fileStream = fs5.createWriteStream(outputFilename);
+    const body = response.body;
+    body.on("data", (chunk) => {
+      downloaded += chunk.length;
+      if (contentLength > 0) {
+        const percent = Math.floor(downloaded / contentLength * 100);
+        if (percent !== lastPercent && percent % 10 === 0) {
+          lastPercent = percent;
+          warningLog(`  download progress: ${percent}%`);
         }
-        resolve({ downloadedFile: outputFilename });
-      });
-      download.on("progress", (progress) => {
-        bar.update(progress);
-      });
+      }
     });
+    await pipeline(body, fileStream);
+    const stat = fs5.statSync(outputFilename);
+    if (stat.size === 0) {
+      fs5.unlinkSync(outputFilename);
+      throw new Error(`Downloaded file is empty: ${outputFilename}`);
+    }
+    warningLog(chalk4.green("Download complete: ") + `${stat.size} bytes`);
+    return { downloadedFile: outputFilename };
   }
   async function unzip_openssl(zipFilename) {
     const opensslFolder2 = get_openssl_folder_win32();
@@ -2236,6 +2242,10 @@ async function install_and_check_win32_openssl_version() {
       });
     });
   }
+  const systemOpenssl = await find_system_openssl_win32();
+  if (systemOpenssl) {
+    return systemOpenssl;
+  }
   const opensslFolder = get_openssl_folder_win32();
   const opensslExecPath = get_openssl_exec_path_win32();
   if (!fs5.existsSync(opensslFolder)) {
@@ -2866,32 +2876,32 @@ function parseOpenSSLDate(dateStr) {
   const sec = raw.substring(10, 12);
   return `${year}-${month}-${day}T${hour}:${min}:${sec}Z`;
 }
-function validateRevocationUrl(url2, fieldName) {
-  if (url2 === void 0) {
+function validateRevocationUrl(url, fieldName) {
+  if (url === void 0) {
     return void 0;
   }
-  if (url2 === "") {
+  if (url === "") {
     throw new Error(`${fieldName} must not be empty \u2014 pass undefined to disable the extension`);
   }
   let parsed;
   try {
-    parsed = new URL(url2);
+    parsed = new URL(url);
   } catch {
-    throw new Error(`${fieldName} is not a valid URL: ${url2}`);
+    throw new Error(`${fieldName} is not a valid URL: ${url}`);
   }
   if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
-    throw new Error(`${fieldName} must use http: or https: (got ${parsed.protocol} in ${url2})`);
+    throw new Error(`${fieldName} must use http: or https: (got ${parsed.protocol} in ${url})`);
   }
   if (!parsed.pathname || parsed.pathname === "/") {
-    throw new Error(`${fieldName} must include a path component (got ${url2})`);
+    throw new Error(`${fieldName} must include a path component (got ${url})`);
   }
   const isLoopback = parsed.hostname === "localhost" || parsed.hostname === "::1" || parsed.hostname.startsWith("127.");
   if (isLoopback) {
     console.warn(
-      `[node-opcua-pki] ${fieldName} points at loopback (${url2}) \u2014 certificates issued with this URL will be unreachable from any other host.`
+      `[node-opcua-pki] ${fieldName} points at loopback (${url}) \u2014 certificates issued with this URL will be unreachable from any other host.`
     );
   }
-  return url2;
+  return url;
 }
 var defaultSubject, configurationFileTemplate, configurationFileSimpleTemplate2, config3, n5, q4, CertificateAuthority;
 var init_certificate_authority = __esm({
@@ -2974,8 +2984,8 @@ var init_certificate_authority = __esm({
        *
        * @see US-202
        */
-      setCrlDistributionUrl(url2) {
-        this._crlDistributionUrl = validateRevocationUrl(url2, "crlDistributionUrl");
+      setCrlDistributionUrl(url) {
+        this._crlDistributionUrl = validateRevocationUrl(url, "crlDistributionUrl");
       }
       /**
        * Configure the OCSP responder URL embedded as the `OCSP` leg of
@@ -2984,8 +2994,8 @@ var init_certificate_authority = __esm({
        *
        * @see US-202
        */
-      setOcspResponderUrl(url2) {
-        this._ocspResponderUrl = validateRevocationUrl(url2, "ocspResponderUrl");
+      setOcspResponderUrl(url) {
+        this._ocspResponderUrl = validateRevocationUrl(url, "ocspResponderUrl");
       }
       /**
        * Configure the caIssuers URL embedded as the `caIssuers` leg of
@@ -2994,8 +3004,8 @@ var init_certificate_authority = __esm({
        *
        * @see US-202
        */
-      setCaIssuersUrl(url2) {
-        this._caIssuersUrl = validateRevocationUrl(url2, "caIssuersUrl");
+      setCaIssuersUrl(url) {
+        this._caIssuersUrl = validateRevocationUrl(url, "caIssuersUrl");
       }
       /**
        * @internal