node-opcua-server-configuration 2.163.1 → 2.165.0

package/dist/server/push_certificate_manager_server_impl.js

@@ -1,140 +1,71 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PushCertificateManagerServerImpl = void 0;
-exports.copyFile = copyFile;
-exports.deleteFile = deleteFile;
-exports.moveFile = moveFile;
-exports.moveFileWithBackup = moveFileWithBackup;
-exports.subjectToString = subjectToString;
 /**
  * @module node-opcua-server-configuration-server
  */
-const events_1 = require("events");
-const fs_1 = __importDefault(require("fs"));
-const path_1 = __importDefault(require("path"));
-const rimraf_1 = require("rimraf");
-const node_opcua_assert_1 = require("node-opcua-assert");
-const node_opcua_basic_types_1 = require("node-opcua-basic-types");
-const web_1 = require("node-opcua-crypto/web");
-const node_opcua_crypto_1 = require("node-opcua-crypto");
-const node_opcua_debug_1 = require("node-opcua-debug");
-const node_opcua_nodeid_1 = require("node-opcua-nodeid");
-const node_opcua_certificate_manager_1 = require("node-opcua-certificate-manager");
-// node 14 onward : import {  readFile, writeFile, readdir } from "fs/promises";
-const { readFile, writeFile, readdir } = fs_1.default.promises;
-const debugLog = (0, node_opcua_debug_1.make_debugLog)("ServerConfiguration");
-const errorLog = (0, node_opcua_debug_1.make_errorLog)("ServerConfiguration");
-const warningLog = (0, node_opcua_debug_1.make_warningLog)("ServerConfiguration");
-const doDebug = (0, node_opcua_debug_1.checkDebugFlag)("ServerConfiguration");
-doDebug;
-const defaultApplicationGroup = (0, node_opcua_nodeid_1.resolveNodeId)("ServerConfiguration_CertificateGroups_DefaultApplicationGroup");
-const defaultHttpsGroup = (0, node_opcua_nodeid_1.resolveNodeId)("ServerConfiguration_CertificateGroups_DefaultHttpsGroup");
-const defaultUserTokenGroup = (0, node_opcua_nodeid_1.resolveNodeId)("ServerConfiguration_CertificateGroups_DefaultUserTokenGroup");
-function findCertificateGroupName(certificateGroupNodeId) {
-    if (typeof certificateGroupNodeId === "string") {
-        return certificateGroupNodeId;
-    }
-    if ((0, node_opcua_nodeid_1.sameNodeId)(certificateGroupNodeId, node_opcua_nodeid_1.NodeId.nullNodeId) || (0, node_opcua_nodeid_1.sameNodeId)(certificateGroupNodeId, defaultApplicationGroup)) {
-        return "DefaultApplicationGroup";
-    }
-    if ((0, node_opcua_nodeid_1.sameNodeId)(certificateGroupNodeId, defaultHttpsGroup)) {
-        return "DefaultHttpsGroup";
-    }
-    if ((0, node_opcua_nodeid_1.sameNodeId)(certificateGroupNodeId, defaultUserTokenGroup)) {
-        return "DefaultUserTokenGroup";
-    }
-    return "";
-}
-async function copyFile(source, dest) {
-    try {
-        debugLog("copying file \n source ", source, "\n =>\n dest ", dest);
-        const sourceExist = fs_1.default.existsSync(source);
-        if (sourceExist) {
-            await fs_1.default.promises.copyFile(source, dest);
-        }
-    }
-    catch (err) {
-        errorLog(err);
-    }
-}
-async function deleteFile(file) {
-    try {
-        const exists = await fs_1.default.existsSync(file);
-        if (exists) {
-            debugLog("deleting file ", file);
-            await fs_1.default.promises.unlink(file);
-        }
-    }
-    catch (err) {
-        errorLog(err);
-    }
-}
-async function moveFile(source, dest) {
-    debugLog("moving file file \n source ", source, "\n =>\n dest ", dest);
-    try {
-        await copyFile(source, dest);
-        await deleteFile(source);
-    }
-    catch (err) {
-        errorLog(err);
-    }
-}
-async function moveFileWithBackup(source, dest) {
-    // let make a copy of the destination file
-    debugLog("moveFileWithBackup file \n source ", source, "\n =>\n dest ", dest);
-    await copyFile(dest, dest + "_old");
-    await moveFile(source, dest);
-}
-function subjectToString(subject) {
-    let s = "";
-    subject.commonName && (s += `/CN=${subject.commonName}`);
-    subject.country && (s += `/C=${subject.country}`);
-    subject.countryName && (s += `/C=${subject.countryName}`);
-    subject.domainComponent && (s += `/DC=${subject.domainComponent}`);
-    subject.locality && (s += `/L=${subject.locality}`);
-    subject.localityName && (s += `/L=${subject.localityName}`);
-    subject.organization && (s += `/O=${subject.organization}`);
-    subject.organizationName && (s += `/O=${subject.organizationName}`);
-    subject.organizationUnitName && (s += `/OU=${subject.organizationUnitName}`);
-    subject.state && (s += `/ST=${subject.state}`);
-    subject.stateOrProvinceName && (s += `/ST=${subject.stateOrProvinceName}`);
-    return s;
-}
-let fileCounter = 0;
-class PushCertificateManagerServerImpl extends events_1.EventEmitter {
+import { EventEmitter } from "node:events";
+import { assert } from "node-opcua-assert";
+import { CertificateManager } from "node-opcua-certificate-manager";
+import { make_errorLog } from "node-opcua-debug";
+import { rsaCertificateTypesArray } from "../clientTools/certificate_types.js";
+import { executeApplyChanges } from "./push_certificate_manager/apply_changes.js";
+import { executeCreateSigningRequest } from "./push_certificate_manager/create_signing_request.js";
+import { executeGetRejectedList } from "./push_certificate_manager/get_rejected_list.js";
+import { PushCertificateManagerInternalContext } from "./push_certificate_manager/internal_context.js";
+import { executeUpdateCertificate } from "./push_certificate_manager/update_certificate.js";
+const errorLog = make_errorLog("ServerConfiguration");
+export class PushCertificateManagerServerImpl extends EventEmitter {
     applicationGroup;
     userTokenGroup;
     httpsGroup;
-    _map = {};
-    _pendingTasks = [];
-    _tmpCertificateManager;
-    $$actionQueue = [];
+    // Use a true private reference (could be upgraded to #context in recent ES)
+    _context;
+    /** @hidden */
     applicationUri;
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    on(event, listener) {
+        return super.on(event, listener);
+    }
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    once(event, listener) {
+        return super.once(event, listener);
+    }
     constructor(options) {
         super();
+        this._context = new PushCertificateManagerInternalContext(this);
         this.applicationUri = options ? options.applicationUri : "";
         if (options) {
             this.applicationGroup = options.applicationGroup;
             this.userTokenGroup = options.userTokenGroup;
             this.httpsGroup = options.httpsGroup;
             if (this.userTokenGroup) {
-                this._map.DefaultUserTokenGroup = this.userTokenGroup;
-                // istanbul ignore next
-                if (!(this.userTokenGroup instanceof node_opcua_certificate_manager_1.CertificateManager)) {
+                this._context.map.DefaultUserTokenGroup = this.userTokenGroup;
+                // Store allowed certificate types, or use all known types as default
+                this._context.certificateTypes.DefaultUserTokenGroup = options.userTokenGroupCertificateTypes || [
+                    // [...rsaCertificateTypes, ...eccCertificateTypes];
+                    ...rsaCertificateTypesArray
+                ]; // FIXME: ECC is not yet supported
+                // c8 ignore next
+                if (!(this.userTokenGroup instanceof CertificateManager)) {
                     errorLog("Expecting this.userTokenGroup to be instanceof CertificateManager :", this.userTokenGroup.constructor.name);
                     throw new Error("Expecting this.userTokenGroup to be instanceof CertificateManager ");
                 }
             }
             if (this.applicationGroup) {
-                this._map.DefaultApplicationGroup = this.applicationGroup;
-                (0, node_opcua_assert_1.assert)(this.applicationGroup instanceof node_opcua_certificate_manager_1.CertificateManager);
+                this._context.map.DefaultApplicationGroup = this.applicationGroup;
+                // Store allowed certificate types, or use all known types as default
+                this._context.certificateTypes.DefaultApplicationGroup = options.applicationGroupCertificateTypes || [
+                    // [...rsaCertificateTypes, ...eccCertificateTypes];
+                    ...rsaCertificateTypesArray
+                ]; // FIXME: ECC is not yet supported
+                assert(this.applicationGroup instanceof CertificateManager);
             }
             if (this.httpsGroup) {
-                this._map.DefaultHttpsGroup = this.httpsGroup;
-                (0, node_opcua_assert_1.assert)(this.httpsGroup instanceof node_opcua_certificate_manager_1.CertificateManager);
+                this._context.map.DefaultHttpsGroup = this.httpsGroup;
+                // Store allowed certificate types, or use all known types as default
+                this._context.certificateTypes.DefaultHttpsGroup = options.httpsGroupCertificateTypes || [
+                    // [...rsaCertificateTypes, ...eccCertificateTypes];
+                    ...rsaCertificateTypesArray
+                ]; // FIXME: ECC is not yet supported
+                assert(this.httpsGroup instanceof CertificateManager);
             }
         }
     }
@@ -153,277 +84,17 @@ class PushCertificateManagerServerImpl extends events_1.EventEmitter {
         return ["PEM"];
     }
     async getSupportedPrivateKeyFormats() {
-        return this.supportedPrivateKeyFormats;
+        return ["PEM"];
     }
     async createSigningRequest(certificateGroupId, certificateTypeId, subjectName, regeneratePrivateKey, nonce) {
-        let certificateManager = this.getCertificateManager(certificateGroupId);
-        if (!certificateManager) {
-            debugLog(" cannot find group ", certificateGroupId);
-            return {
-                statusCode: node_opcua_basic_types_1.StatusCodes.BadInvalidArgument
-            };
-        }
-        if (!subjectName) {
-            // reuse existing subjectName
-            const currentCertificateFilename = path_1.default.join(certificateManager.rootDir, "own/certs/certificate.pem");
-            if (!fs_1.default.existsSync(currentCertificateFilename)) {
-                errorLog("Cannot find existing certificate to extract subjectName", currentCertificateFilename);
-                return {
-                    statusCode: node_opcua_basic_types_1.StatusCodes.BadInvalidState
-                };
-            }
-            const certificate = (0, node_opcua_crypto_1.readCertificate)(currentCertificateFilename);
-            const e = (0, web_1.exploreCertificate)(certificate);
-            subjectName = subjectToString(e.tbsCertificate.subject);
-            warningLog("reusing existing certificate subjectAltName = ", subjectName);
-        }
-        // todo : at this time regenerate private key is not supported
-        if (regeneratePrivateKey) {
-            // The Server shall create a new Private Key which it stores until the
-            // matching signed Certificate is uploaded with the UpdateCertificate Method.
-            // Previously created Private Keys may be discarded if UpdateCertificate was not
-            // called before calling this method again.
-            // Additional entropy which the caller shall provide if regeneratePrivateKey is TRUE.
-            // It shall be at least 32 bytes long
-            if (!nonce || nonce.length < 32) {
-                (0, node_opcua_debug_1.make_warningLog)(" nonce should be provided when regeneratePrivateKey is set, and length shall be greater than 32 bytes");
-                return {
-                    statusCode: node_opcua_basic_types_1.StatusCodes.BadInvalidArgument
-                };
-            }
-            const location = path_1.default.join(certificateManager.rootDir, "tmp");
-            if (fs_1.default.existsSync(location)) {
-                await rimraf_1.rimraf.rimraf(path_1.default.join(location));
-            }
-            if (!fs_1.default.existsSync(location)) {
-                await fs_1.default.promises.mkdir(location);
-            }
-            const destCertificateManager = certificateManager;
-            const keySize = certificateManager.keySize; // because keySize is private !
-            certificateManager = new node_opcua_certificate_manager_1.CertificateManager({
-                keySize,
-                location
-            });
-            debugLog("generating a new private key ...");
-            await certificateManager.initialize();
-            this._tmpCertificateManager = certificateManager;
-            this.addPendingTask(async () => {
-                await moveFileWithBackup(certificateManager.privateKey, destCertificateManager.privateKey);
-            });
-            this.addPendingTask(async () => {
-                await rimraf_1.rimraf.rimraf(path_1.default.join(location));
-            });
-        }
-        else {
-            // The Server uses its existing Private Key
-        }
-        if (typeof subjectName !== "string") {
-            return { statusCode: node_opcua_basic_types_1.StatusCodes.BadInternalError };
-        }
-        const options = {
-            applicationUri: this.applicationUri,
-            subject: subjectName
-        };
-        await certificateManager.initialize();
-        const csrFile = await certificateManager.createCertificateRequest(options);
-        const csrPEM = await readFile(csrFile, "utf8");
-        const certificateSigningRequest = (0, web_1.convertPEMtoDER)(csrPEM);
-        this.addPendingTask(() => deleteFile(csrFile));
-        return {
-            certificateSigningRequest,
-            statusCode: node_opcua_basic_types_1.StatusCodes.Good
-        };
+        return await executeCreateSigningRequest(this._context, certificateGroupId, certificateTypeId, subjectName, regeneratePrivateKey, nonce);
     }
     async getRejectedList() {
-        // rejectedList comes from each group
-        async function extractRejectedList(group, certificateList) {
-            if (!group) {
-                return;
-            }
-            const rejectedFolder = path_1.default.join(group.rootDir, "rejected");
-            const files = await readdir(rejectedFolder);
-            const stat = fs_1.default.promises.stat;
-            const promises1 = [];
-            for (const certFile of files) {
-                // read date
-                promises1.push(stat(path_1.default.join(rejectedFolder, certFile)));
-            }
-            const stats = await Promise.all(promises1);
-            for (let i = 0; i < stats.length; i++) {
-                certificateList.push({
-                    filename: path_1.default.join(rejectedFolder, files[i]),
-                    stat: stats[i]
-                });
-            }
-        }
-        const list = [];
-        await extractRejectedList(this.applicationGroup, list);
-        await extractRejectedList(this.userTokenGroup, list);
-        await extractRejectedList(this.httpsGroup, list);
-        // now sort list from newer file to older file
-        list.sort((a, b) => b.stat.mtime.getTime() - a.stat.mtime.getTime());
-        const promises = [];
-        for (const item of list) {
-            promises.push(readFile(item.filename, "utf8"));
-        }
-        const certificatesPEM = await Promise.all(promises);
-        const certificates = certificatesPEM.map(web_1.convertPEMtoDER);
-        return {
-            certificates,
-            statusCode: node_opcua_basic_types_1.StatusCodes.Good
-        };
+        return await executeGetRejectedList(this._context);
     }
     // eslint-disable-next-line max-statements
     async updateCertificate(certificateGroupId, certificateTypeId, certificate, issuerCertificates, privateKeyFormat, privateKey) {
-        // Result Code                Description
-        // BadInvalidArgument        The certificateTypeId or certificateGroupId is not valid.
-        // BadCertificateInvalid     The Certificate is invalid or the format is not supported.
-        // BadNotSupported           The Private Key is invalid or the format is not supported.
-        // BadUserAccessDenied       The current user does not have the rights required.
-        // BadSecurityChecksFailed   Some failure occurred verifying the integrity of the Certificate.
-        const certificateManager = this.getCertificateManager(certificateGroupId);
-        if (!certificateManager) {
-            debugLog(" cannot find group ", certificateGroupId);
-            return {
-                statusCode: node_opcua_basic_types_1.StatusCodes.BadInvalidArgument,
-                applyChangesRequired: false
-            };
-        }
-        async function preInstallCertificate(self) {
-            const certFolder = path_1.default.join(certificateManager.rootDir, "own/certs");
-            const certificateFileDER = path_1.default.join(certFolder, `_pending_certificate${fileCounter++}.der`);
-            const certificateFilePEM = path_1.default.join(certFolder, `_pending_certificate${fileCounter++}.pem`);
-            await writeFile(certificateFileDER, certificate, "binary");
-            await writeFile(certificateFilePEM, (0, web_1.toPem)(certificate, "CERTIFICATE"));
-            const destDER = path_1.default.join(certFolder, "certificate.der");
-            const destPEM = path_1.default.join(certFolder, "certificate.pem");
-            // put existing file in security by backing them up
-            self.addPendingTask(() => moveFileWithBackup(certificateFileDER, destDER));
-            self.addPendingTask(() => moveFileWithBackup(certificateFilePEM, destPEM));
-        }
-        async function preInstallPrivateKey(self) {
-            (0, node_opcua_assert_1.assert)(privateKeyFormat.toUpperCase() === "PEM");
-            const ownPrivateFolder = path_1.default.join(certificateManager.rootDir, "own/private");
-            const privateKeyFilePEM = path_1.default.join(ownPrivateFolder, `_pending_private_key${fileCounter++}.pem`);
-            if (privateKey) {
-                const privateKey1 = (0, web_1.coercePEMorDerToPrivateKey)(privateKey);
-                const privateKeyPEM = await (0, web_1.coercePrivateKeyPem)(privateKey1);
-                await writeFile(privateKeyFilePEM, privateKeyPEM, "utf-8");
-                self.addPendingTask(() => moveFileWithBackup(privateKeyFilePEM, certificateManager.privateKey));
-            }
-        }
-        // OPC Unified Architecture, Part 12 42 Release 1.04:
-        //
-        // UpdateCertificate is used to update a Certificate for a Server.
-        // There are the following three use cases for this Method:
-        //
-        //  - The new Certificate was created based on a signing request created with the Method
-        //    In this case there is no privateKey provided.
-        //  - A new privateKey and Certificate was created outside the Server and both are updated
-        //    with this Method.
-        //  - A new Certificate was created and signed with the information from the old Certificate.
-        //    In this case there is no privateKey provided.
-        // The Server shall do all normal integrity checks on the Certificate and all of the issuer
-        // Certificates. If errors occur the BadSecurityChecksFailed error is returned.
-        // todo : all normal integrity check on the certificate
-        const certInfo = (0, web_1.exploreCertificate)(certificate);
-        const now = new Date();
-        if (certInfo.tbsCertificate.validity.notBefore.getTime() > now.getTime()) {
-            // certificate is not yet valid
-            warningLog("Certificate is not yet valid : not before ", certInfo.tbsCertificate.validity.notBefore.toISOString(), "now = ", now.toISOString());
-            return {
-                statusCode: node_opcua_basic_types_1.StatusCodes.BadSecurityChecksFailed,
-                applyChangesRequired: false
-            };
-        }
-        if (certInfo.tbsCertificate.validity.notAfter.getTime() < now.getTime()) {
-            // certificate is already out of date
-            warningLog("Certificate is already out of date : not after ", certInfo.tbsCertificate.validity.notAfter.toISOString(), "now = ", now.toISOString());
-            return {
-                statusCode: node_opcua_basic_types_1.StatusCodes.BadSecurityChecksFailed,
-                applyChangesRequired: false
-            };
-        }
-        // If the Server returns applyChangesRequired=FALSE then it is indicating that it is able to
-        // satisfy the requirements specified for the ApplyChanges Method.
-        debugLog(" updateCertificate ", (0, web_1.makeSHA1Thumbprint)(certificate).toString("hex"));
-        if (!privateKeyFormat || !privateKey) {
-            // first of all we need to find the future private key;
-            // this one may have been created during the creation of the certificate signing request
-            // but is not active yet
-            const privateKey1 = (0, node_opcua_crypto_1.readPrivateKey)(this._tmpCertificateManager ? this._tmpCertificateManager.privateKey : certificateManager.privateKey);
-            // The Server shall report an error if the public key does not match the existing Certificate and
-            // the privateKey was not provided.
-            // privateKey is not provided, so check that the public key matches the existing certificate
-            if (!(0, web_1.certificateMatchesPrivateKey)(certificate, privateKey1)) {
-                // certificate doesn't match privateKey
-                warningLog("certificate doesn't match privateKey");
-                /* debug code */
-                const certificatePEM = (0, web_1.toPem)(certificate, "CERTIFICATE");
-                certificatePEM;
-                //xx const privateKeyPEM = toPem(privateKeyDER, "RSA PRIVATE KEY");
-                //xx const initialBuffer = Buffer.from("Lorem Ipsum");
-                //xx const encryptedBuffer = publicEncrypt_long(initialBuffer, certificatePEM, 256, 11);
-                //xx const decryptedBuffer = privateDecrypt_long(encryptedBuffer, privateKeyPEM, 256);
-                return {
-                    statusCode: node_opcua_basic_types_1.StatusCodes.BadSecurityChecksFailed,
-                    applyChangesRequired: false,
-                };
-            }
-            // a new certificate is provided for us,
-            // we keep our private key
-            // we do this in two stages
-            await preInstallCertificate(this);
-            return {
-                statusCode: node_opcua_basic_types_1.StatusCodes.Good,
-                applyChangesRequired: true,
-            };
-        }
-        else if (privateKey) {
-            // a private key has been provided by the caller !
-            if (!privateKeyFormat) {
-                warningLog("the privateKeyFormat must be specified " + privateKeyFormat);
-                return { statusCode: node_opcua_basic_types_1.StatusCodes.BadNotSupported, applyChangesRequired: false };
-            }
-            if (privateKeyFormat !== "PEM" && privateKeyFormat !== "PFX") {
-                warningLog(" the private key format is invalid privateKeyFormat =" + privateKeyFormat);
-                return { statusCode: node_opcua_basic_types_1.StatusCodes.BadNotSupported, applyChangesRequired: false };
-            }
-            if (privateKeyFormat !== "PEM") {
-                warningLog("in NodeOPCUA we only support PEM for the moment privateKeyFormat =" + privateKeyFormat);
-                return { statusCode: node_opcua_basic_types_1.StatusCodes.BadNotSupported, applyChangesRequired: false };
-            }
-            let privateKey1;
-            if (privateKey && (privateKey instanceof Buffer || typeof privateKey === "string")) {
-                if (privateKey instanceof Buffer) {
-                    (0, node_opcua_assert_1.assert)(privateKeyFormat === "PEM");
-                    privateKey = privateKey.toString("utf-8");
-                }
-                privateKey1 = (0, web_1.coercePEMorDerToPrivateKey)(privateKey);
-            }
-            if (!privateKey1) {
-                return { statusCode: node_opcua_basic_types_1.StatusCodes.BadNotSupported, applyChangesRequired: false };
-            }
-            // privateKey is  provided, so check that the public key matches provided private key
-            if (!(0, web_1.certificateMatchesPrivateKey)(certificate, privateKey1)) {
-                // certificate doesn't match privateKey
-                warningLog("certificate doesn't match privateKey");
-                return { statusCode: node_opcua_basic_types_1.StatusCodes.BadSecurityChecksFailed, applyChangesRequired: false };
-            }
-            await preInstallPrivateKey(this);
-            await preInstallCertificate(this);
-            return {
-                statusCode: node_opcua_basic_types_1.StatusCodes.Good,
-                applyChangesRequired: true
-            };
-        }
-        else {
-            // todo !
-            return {
-                statusCode: node_opcua_basic_types_1.StatusCodes.BadNotSupported,
-                applyChangesRequired: true
-            };
-        }
+        return await executeUpdateCertificate(this._context, certificateGroupId, certificateTypeId, certificate, issuerCertificates, privateKeyFormat, privateKey);
     }
     /**
      *
@@ -461,68 +132,17 @@ class PushCertificateManagerServerImpl extends events_1.EventEmitter {
      * created the transaction and has access to the SecurityAdmin Role (see 7.2).
      *
      */
-    async applyChanges() {
-        // ApplyChanges is used to tell the Server to apply any security changes.
-        // This Method should only be called if a previous call to a Method that changed the
-        // configuration returns applyChangesRequired=true.
-        //
-        // If the Server Certificate has changed, Secure Channels using the old Certificate will
-        // eventually be interrupted.
-        this.emit("CertificateAboutToChange", this.$$actionQueue);
-        await this.flushActionQueue();
-        try {
-            await this.applyPendingTasks();
-        }
-        catch (err) {
-            debugLog("err ", err);
-            return node_opcua_basic_types_1.StatusCodes.BadInternalError;
-        }
-        this.emit("CertificateChanged", this.$$actionQueue);
-        await this.flushActionQueue();
-        // The only leeway the Server has is with the timing.
-        // In the best case, the Server can close the TransportConnections for the affected Endpoints and leave any
-        // Subscriptions intact. This should appear no different than a network interruption from the
-        // perspective of the Client. The Client should be prepared to deal with Certificate changes
-        // during its reconnect logic. In the worst case, a full shutdown which affects all connected
-        // Clients will be necessary. In the latter case, the Server shall advertise its intent to interrupt
-        // connections by setting the SecondsTillShutdown and ShutdownReason Properties in the
-        // ServerStatus Variable.
-        // If the Secure Channel being used to call this Method will be affected by the Certificate change
-        // then the Server shall introduce a delay long enough to allow the caller to receive a reply.
-        return node_opcua_basic_types_1.StatusCodes.Good;
+    async applyChanges(context) {
+        return await executeApplyChanges(this._context, context);
     }
-    getCertificateManager(certificateGroupId) {
-        const groupName = findCertificateGroupName(certificateGroupId);
-        return this._map[groupName] || null;
+    getCertificateManager(groupName) {
+        return this._context.map[groupName] || null;
     }
-    addPendingTask(functor) {
-        this._pendingTasks.push(functor);
+    getCertificateTypes(groupName) {
+        return this._context.certificateTypes[groupName];
     }
-    async applyPendingTasks() {
-        debugLog("start applyPendingTasks");
-        const promises = [];
-        const t = this._pendingTasks.splice(0);
-        if (false) {
-            // node 10.2 and above
-            for await (const task of t) {
-                await task();
-            }
-        }
-        else {
-            while (t.length) {
-                const task = t.shift();
-                await task();
-            }
-        }
-        await Promise.all(promises);
-        debugLog("end applyPendingTasks");
-    }
-    async flushActionQueue() {
-        while (this.$$actionQueue.length) {
-            const first = this.$$actionQueue.pop();
-            await first();
-        }
+    async dispose() {
+        await this._context.dispose();
     }
 }
-exports.PushCertificateManagerServerImpl = PushCertificateManagerServerImpl;
 //# sourceMappingURL=push_certificate_manager_server_impl.js.map

package/dist/server/push_certificate_manager_server_impl.js.map

@@ -1 +1 @@
-{"version":3,"file":"push_certificate_manager_server_impl.js","sourceRoot":"","sources":["../../source/server/push_certificate_manager_server_impl.ts"],"names":[],"mappings":";;;;;;AAsFA,4BAUC;AAED,gCAUC;AAED,4BAQC;AAED,gDAKC;AAGD,0CAqBC;AArJD;;GAEG;AACH,mCAAsC;AACtC,4CAAoB;AACpB,gDAAwB;AACxB,mCAAgC;AAEhC,yDAA2C;AAC3C,mEAAiE;AACjE,+CAS+B;AAE/B,yDAAoE;AAYpE,uDAAiG;AACjG,yDAAsE;AACtE,mFAAoE;AAUpE,gFAAgF;AAChF,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,YAAE,CAAC,QAAQ,CAAC;AAErD,MAAM,QAAQ,GAAG,IAAA,gCAAa,EAAC,qBAAqB,CAAC,CAAC;AACtD,MAAM,QAAQ,GAAG,IAAA,gCAAa,EAAC,qBAAqB,CAAC,CAAC;AACtD,MAAM,UAAU,GAAG,IAAA,kCAAe,EAAC,qBAAqB,CAAC,CAAC;AAC1D,MAAM,OAAO,GAAG,IAAA,iCAAc,EAAC,qBAAqB,CAAC,CAAC;AACtD,OAAO,CAAC;AAER,MAAM,uBAAuB,GAAG,IAAA,iCAAa,EAAC,+DAA+D,CAAC,CAAC;AAC/G,MAAM,iBAAiB,GAAG,IAAA,iCAAa,EAAC,yDAAyD,CAAC,CAAC;AACnG,MAAM,qBAAqB,GAAG,IAAA,iCAAa,EAAC,6DAA6D,CAAC,CAAC;AAI3G,SAAS,wBAAwB,CAAC,sBAAuC;IACrE,IAAI,OAAO,sBAAsB,KAAK,QAAQ,EAAE,CAAC;QAC7C,OAAO,sBAAsB,CAAC;IAClC,CAAC;IACD,IAAI,IAAA,8BAAU,EAAC,sBAAsB,EAAE,0BAAM,CAAC,UAAU,CAAC,IAAI,IAAA,8BAAU,EAAC,sBAAsB,EAAE,uBAAuB,CAAC,EAAE,CAAC;QACvH,OAAO,yBAAyB,CAAC;IACrC,CAAC;IACD,IAAI,IAAA,8BAAU,EAAC,sBAAsB,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACxD,OAAO,mBAAmB,CAAC;IAC/B,CAAC;IACD,IAAI,IAAA,8BAAU,EAAC,sBAAsB,EAAE,qBAAqB,CAAC,EAAE,CAAC;QAC5D,OAAO,uBAAuB,CAAC;IACnC,CAAC;IACD,OAAO,EAAE,CAAC;AACd,CAAC;AAYM,KAAK,UAAU,QAAQ,CAAC,MAAc,EAAE,IAAY;IACvD,IAAI,CAAC;QACD,QAAQ,CAAC,yBAAyB,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,WAAW,GAAG,YAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,WAAW,EAAE,CAAC;YACd,MAAM,YAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7C,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,QAAQ,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,UAAU,CAAC,IAAY;IACzC,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,YAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,MAAM,EAAE,CAAC;YACT,QAAQ,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;YACjC,MAAM,YAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,QAAQ,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,QAAQ,CAAC,MAAc,EAAE,IAAY;IACvD,QAAQ,CAAC,6BAA6B,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;IACvE,IAAI,CAAC;QACD,MAAM,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7B,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,QAAQ,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,IAAY;IACjE,0CAA0C;IAC1C,QAAQ,CAAC,oCAAoC,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;IAC9E,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAAC,CAAC;IACpC,MAAM,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACjC,CAAC;AAGD,SAAgB,eAAe,CAAC,OAAuC;IACnE,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,OAAO,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAEzD,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAClD,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,IAAI,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAE1D,OAAO,CAAC,eAAe,IAAI,CAAC,CAAC,IAAI,OAAO,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IAEnE,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpD,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC,IAAI,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IAE5D,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC,IAAI,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IAC5D,OAAO,CAAC,gBAAgB,IAAI,CAAC,CAAC,IAAI,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAEpE,OAAO,CAAC,oBAAoB,IAAI,CAAC,CAAC,IAAI,OAAO,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAE7E,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/C,OAAO,CAAC,mBAAmB,IAAI,CAAC,CAAC,IAAI,OAAO,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAE3E,OAAO,CAAC,CAAC;AACb,CAAC;AACD,IAAI,WAAW,GAAG,CAAC,CAAC;AAIpB,MAAa,gCAAiC,SAAQ,qBAAY;IACvD,gBAAgB,CAAsB;IACtC,cAAc,CAAsB;IACpC,UAAU,CAAsB;IAEtB,IAAI,GAA0C,EAAE,CAAC;IACjD,aAAa,GAAc,EAAE,CAAC;IACvC,sBAAsB,CAAsB;IAC5C,aAAa,GAAgB,EAAE,CAAC;IAEhC,cAAc,CAAS;IAE/B,YAAY,OAA4C;QACpD,KAAK,EAAE,CAAC;QAER,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QAE5D,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;YACjD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;YAC7C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;YACrC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACtB,IAAI,CAAC,IAAI,CAAC,qBAAqB,GAAG,IAAI,CAAC,cAAc,CAAC;gBAEtD,uBAAuB;gBACvB,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,YAAY,mDAAkB,CAAC,EAAE,CAAC;oBACvD,QAAQ,CACJ,qEAAqE,EACpE,IAAI,CAAC,cAAsB,CAAC,WAAW,CAAC,IAAI,CAChD,CAAC;oBACF,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;gBAC1F,CAAC;YACL,CAAC;YACD,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACxB,IAAI,CAAC,IAAI,CAAC,uBAAuB,GAAG,IAAI,CAAC,gBAAgB,CAAC;gBAC1D,IAAA,0BAAM,EAAC,IAAI,CAAC,gBAAgB,YAAY,mDAAkB,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBAClB,IAAI,CAAC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,UAAU,CAAC;gBAC9C,IAAA,0BAAM,EAAC,IAAI,CAAC,UAAU,YAAY,mDAAkB,CAAC,CAAC;YAC1D,CAAC;QACL,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,UAAU;QACnB,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC;QAC7C,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC;QAC3C,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;QACvC,CAAC;IACL,CAAC;IAED,IAAW,0BAA0B;QACjC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IAEM,KAAK,CAAC,6BAA6B;QACtC,OAAO,IAAI,CAAC,0BAA0B,CAAC;IAC3C,CAAC;IAEM,KAAK,CAAC,oBAAoB,CAC7B,kBAAmC,EACnC,iBAAkC,EAClC,WAA2C,EAC3C,oBAA8B,EAC9B,KAAc;QAEd,IAAI,kBAAkB,GAAG,IAAI,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;QAExE,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACtB,QAAQ,CAAC,qBAAqB,EAAE,kBAAkB,CAAC,CAAC;YACpD,OAAO;gBACH,UAAU,EAAE,oCAAW,CAAC,kBAAkB;aAC7C,CAAC;QACN,CAAC;QAED,IAAI,CAAC,WAAW,EAAE,CAAC;YACf,6BAA6B;YAC7B,MAAM,0BAA0B,GAAG,cAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;YACtG,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,0BAA0B,CAAC,EAAE,CAAC;gBAC7C,QAAQ,CAAC,yDAAyD,EAAE,0BAA0B,CAAC,CAAC;gBAChG,OAAO;oBACH,UAAU,EAAE,oCAAW,CAAC,eAAe;iBAC1C,CAAC;YACN,CAAC;YACD,MAAM,WAAW,GAAG,IAAA,mCAAe,EAAC,0BAA0B,CAAC,CAAC;YAChE,MAAM,CAAC,GAAG,IAAA,wBAAkB,EAAC,WAAW,CAAC,CAAC;YAC1C,WAAW,GAAG,eAAe,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YACxD,UAAU,CAAC,gDAAgD,EAAE,WAAW,CAAC,CAAC;QAC9E,CAAC;QAED,8DAA8D;QAC9D,IAAI,oBAAoB,EAAE,CAAC;YACvB,sEAAsE;YACtE,6EAA6E;YAC7E,gFAAgF;YAChF,2CAA2C;YAE3C,qFAAqF;YACrF,qCAAqC;YACrC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBAC9B,IAAA,kCAAe,EACX,uGAAuG,CAC1G,CAAC;gBACF,OAAO;oBACH,UAAU,EAAE,oCAAW,CAAC,kBAAkB;iBAC7C,CAAC;YACN,CAAC;YAED,MAAM,QAAQ,GAAG,cAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC9D,IAAI,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1B,MAAM,eAAM,CAAC,MAAM,CAAC,cAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7C,CAAC;YACD,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC3B,MAAM,YAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACtC,CAAC;YAED,MAAM,sBAAsB,GAAG,kBAAkB,CAAC;YAClD,MAAM,OAAO,GAAI,kBAA0B,CAAC,OAAO,CAAC,CAAC,+BAA+B;YACpF,kBAAkB,GAAG,IAAI,mDAAkB,CAAC;gBACxC,OAAO;gBACP,QAAQ;aACX,CAAC,CAAC;YACH,QAAQ,CAAC,kCAAkC,CAAC,CAAC;YAC7C,MAAM,kBAAkB,CAAC,UAAU,EAAE,CAAC;YAEtC,IAAI,CAAC,sBAAsB,GAAG,kBAAkB,CAAC;YAEjD,IAAI,CAAC,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC3B,MAAM,kBAAkB,CAAC,kBAAmB,CAAC,UAAU,EAAE,sBAAsB,CAAC,UAAU,CAAC,CAAC;YAChG,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,cAAc,CAAC,KAAK,IAAI,EAAE;gBAC3B,MAAM,eAAM,CAAC,MAAM,CAAC,cAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7C,CAAC,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACJ,2CAA2C;QAC/C,CAAC;QAED,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,EAAE,UAAU,EAAE,oCAAW,CAAC,gBAAgB,EAAE,CAAC;QACxD,CAAC;QACD,MAAM,OAAO,GAAG;YACZ,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,OAAO,EAAE,WAAY;SACxB,CAAC;QACF,MAAM,kBAAkB,CAAC,UAAU,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,yBAAyB,GAAG,IAAA,qBAAe,EAAC,MAAM,CAAC,CAAC;QAE1D,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QAE/C,OAAO;YACH,yBAAyB;YACzB,UAAU,EAAE,oCAAW,CAAC,IAAI;SAC/B,CAAC;IACN,CAAC;IAEM,KAAK,CAAC,eAAe;QAQxB,qCAAqC;QACrC,KAAK,UAAU,mBAAmB,CAAC,KAAqC,EAAE,eAA2B;YACjG,IAAI,CAAC,KAAK,EAAE,CAAC;gBACT,OAAO;YACX,CAAC;YACD,MAAM,cAAc,GAAG,cAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAC5D,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,CAAC;YAE5C,MAAM,IAAI,GAAG,YAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;YAE9B,MAAM,SAAS,GAAwB,EAAE,CAAC;YAC1C,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;gBAC3B,YAAY;gBACZ,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,cAAI,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAE3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpC,eAAe,CAAC,IAAI,CAAC;oBACjB,QAAQ,EAAE,cAAI,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;oBAC7C,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;iBACjB,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QAED,MAAM,IAAI,GAAe,EAAE,CAAC;QAC5B,MAAM,mBAAmB,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;QACvD,MAAM,mBAAmB,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QACrD,MAAM,mBAAmB,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAEjD,8CAA8C;QAC9C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAW,EAAE,CAAW,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAEzF,MAAM,QAAQ,GAAsB,EAAE,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;YACtB,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,eAAe,GAAa,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE9D,MAAM,YAAY,GAAa,eAAe,CAAC,GAAG,CAAC,qBAAe,CAAC,CAAC;QACpE,OAAO;YACH,YAAY;YACZ,UAAU,EAAE,oCAAW,CAAC,IAAI;SAC/B,CAAC;IACN,CAAC;IAQD,0CAA0C;IACnC,KAAK,CAAC,iBAAiB,CAC1B,kBAAmC,EACnC,iBAAkC,EAClC,WAAmB,EACnB,kBAAgC,EAChC,gBAAyB,EACzB,UAA4B;QAE5B,yCAAyC;QACzC,sFAAsF;QACtF,uFAAuF;QACvF,uFAAuF;QACvF,gFAAgF;QAChF,8FAA8F;QAC9F,MAAM,kBAAkB,GAAG,IAAI,CAAC,qBAAqB,CAAC,kBAAkB,CAAE,CAAC;QAE3E,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACtB,QAAQ,CAAC,qBAAqB,EAAE,kBAAkB,CAAC,CAAC;YACpD,OAAO;gBACH,UAAU,EAAE,oCAAW,CAAC,kBAAkB;gBAC1C,oBAAoB,EAAE,KAAK;aAC9B,CAAC;QACN,CAAC;QAED,KAAK,UAAU,qBAAqB,CAAC,IAAsC;YACvE,MAAM,UAAU,GAAG,cAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YACtE,MAAM,kBAAkB,GAAG,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,uBAAuB,WAAW,EAAE,MAAM,CAAC,CAAC;YAC7F,MAAM,kBAAkB,GAAG,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,uBAAuB,WAAW,EAAE,MAAM,CAAC,CAAC;YAE7F,MAAM,SAAS,CAAC,kBAAkB,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;YAC3D,MAAM,SAAS,CAAC,kBAAkB,EAAE,IAAA,WAAK,EAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;YAEvE,MAAM,OAAO,GAAG,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;YACzD,MAAM,OAAO,GAAG,cAAI,CAAC,IAAI,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;YAEzD,mDAAmD;YACnD,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC;YAC3E,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/E,CAAC;QAED,KAAK,UAAU,oBAAoB,CAAC,IAAsC;YACtE,IAAA,0BAAM,EAAC,gBAAiB,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;YAElD,MAAM,gBAAgB,GAAG,cAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAC9E,MAAM,iBAAiB,GAAG,cAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,uBAAuB,WAAW,EAAE,MAAM,CAAC,CAAC;YAElG,IAAI,UAAU,EAAE,CAAC;gBACb,MAAM,WAAW,GAAG,IAAA,gCAA0B,EAAC,UAAU,CAAC,CAAC;gBAC3D,MAAM,aAAa,GAAG,MAAM,IAAA,yBAAmB,EAAC,WAAW,CAAC,CAAC;gBAC7D,MAAM,SAAS,CAAC,iBAAiB,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;gBAC3D,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC;YACpG,CAAC;QACL,CAAC;QAED,qDAAqD;QACrD,EAAE;QACF,kEAAkE;QAClE,2DAA2D;QAC3D,EAAE;QACF,wFAAwF;QACxF,mDAAmD;QACnD,0FAA0F;QAC1F,uBAAuB;QACvB,6FAA6F;QAC7F,mDAAmD;QAEnD,2FAA2F;QAC3F,+EAA+E;QAC/E,uDAAuD;QACvD,MAAM,QAAQ,GAAG,IAAA,wBAAkB,EAAC,WAAW,CAAC,CAAC;QAEjD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YACvE,+BAA+B;YAC/B,UAAU,CACN,4CAA4C,EAC5C,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,EACxD,QAAQ,EACR,GAAG,CAAC,WAAW,EAAE,CACpB,CAAC;YACF,OAAO;gBACH,UAAU,EAAE,oCAAW,CAAC,uBAAuB;gBAC/C,oBAAoB,EAAE,KAAK;aAC9B,CAAC;QACN,CAAC;QACD,IAAI,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YACtE,qCAAqC;YACrC,UAAU,CACN,iDAAiD,EACjD,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,EACvD,QAAQ,EACR,GAAG,CAAC,WAAW,EAAE,CACpB,CAAC;YACF,OAAO;gBACH,UAAU,EAAE,oCAAW,CAAC,uBAAuB;gBAC/C,oBAAoB,EAAE,KAAK;aAC9B,CAAC;QACN,CAAC;QAED,4FAA4F;QAC5F,kEAAkE;QAElE,QAAQ,CAAC,qBAAqB,EAAE,IAAA,wBAAkB,EAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAEjF,IAAI,CAAC,gBAAgB,IAAI,CAAC,UAAU,EAAE,CAAC;YACnC,uDAAuD;YACvD,wFAAwF;YACxF,wBAAwB;YACxB,MAAM,WAAW,GAAG,IAAA,kCAAc,EAC9B,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC,UAAU,CACvG,CAAC;YAEF,iGAAiG;YACjG,mCAAmC;YACnC,4FAA4F;YAC5F,IAAI,CAAC,IAAA,kCAA4B,EAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;gBAC1D,uCAAuC;gBACvC,UAAU,CAAC,sCAAsC,CAAC,CAAC;gBACnD,gBAAgB;gBAChB,MAAM,cAAc,GAAG,IAAA,WAAK,EAAC,WAAW,EAAE,aAAa,CAAC,CAAC;gBACzD,cAAc,CAAC;gBACf,mEAAmE;gBACnE,sDAAsD;gBACtD,wFAAwF;gBACxF,sFAAsF;gBACtF,OAAO;oBACH,UAAU,EAAE,oCAAW,CAAC,uBAAuB;oBAC/C,oBAAoB,EAAE,KAAK;iBAC9B,CAAC;YACN,CAAC;YACD,wCAAwC;YACxC,0BAA0B;YAC1B,2BAA2B;YAC3B,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC;YAElC,OAAO;gBACH,UAAU,EAAE,oCAAW,CAAC,IAAI;gBAC5B,oBAAoB,EAAE,IAAI;aAC7B,CAAC;QACN,CAAC;aAAM,IAAI,UAAU,EAAE,CAAC;YACpB,kDAAkD;YAClD,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACpB,UAAU,CAAC,yCAAyC,GAAG,gBAAgB,CAAC,CAAC;gBACzE,OAAO,EAAE,UAAU,EAAE,oCAAW,CAAC,eAAe,EAAE,oBAAoB,EAAE,KAAK,EAAC,CAAC;YACnF,CAAC;YACD,IAAI,gBAAgB,KAAK,KAAK,IAAI,gBAAgB,KAAK,KAAK,EAAE,CAAC;gBAC3D,UAAU,CAAC,uDAAuD,GAAG,gBAAgB,CAAC,CAAC;gBACvF,OAAO,EAAE,UAAU,EAAE,oCAAW,CAAC,eAAe,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;YACpF,CAAC;YACD,IAAI,gBAAgB,KAAK,KAAK,EAAE,CAAC;gBAC7B,UAAU,CAAC,oEAAoE,GAAG,gBAAgB,CAAC,CAAC;gBACpG,OAAO,EAAE,UAAU,EAAE,oCAAW,CAAC,eAAe,EAAG,oBAAoB,EAAE,KAAK,EAAE,CAAC;YACrF,CAAC;YAED,IAAI,WAAmC,CAAC;YACxC,IAAI,UAAU,IAAI,CAAC,UAAU,YAAY,MAAM,IAAI,OAAO,UAAU,KAAK,QAAQ,CAAC,EAAE,CAAC;gBACjF,IAAI,UAAU,YAAY,MAAM,EAAE,CAAC;oBAC/B,IAAA,0BAAM,EAAC,gBAAgB,KAAK,KAAK,CAAC,CAAC;oBACnC,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAC9C,CAAC;gBACD,WAAW,GAAG,IAAA,gCAA0B,EAAC,UAAU,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACf,OAAO,EAAE,UAAU,EAAE,oCAAW,CAAC,eAAe,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;YACpF,CAAC;YACD,qFAAqF;YACrF,IAAI,CAAC,IAAA,kCAA4B,EAAC,WAAW,EAAE,WAAY,CAAC,EAAE,CAAC;gBAC3D,uCAAuC;gBACvC,UAAU,CAAC,sCAAsC,CAAC,CAAC;gBACnD,OAAO,EAAE,UAAU,EAAE,oCAAW,CAAC,uBAAuB,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;YAC5F,CAAC;YAED,MAAM,oBAAoB,CAAC,IAAI,CAAC,CAAC;YAEjC,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC;YAIlC,OAAO;gBACH,UAAU,EAAE,oCAAW,CAAC,IAAI;gBAC5B,oBAAoB,EAAE,IAAI;aAC7B,CAAC;QACN,CAAC;aAAM,CAAC;YACJ,SAAS;YACT,OAAO;gBACH,UAAU,EAAE,oCAAW,CAAC,eAAe;gBACvC,oBAAoB,EAAE,IAAI;aAC7B,CAAC;QACN,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACI,KAAK,CAAC,YAAY;QACrB,yEAAyE;QACzE,oFAAoF;QACpF,mDAAmD;QACnD,EAAE;QACF,wFAAwF;QACxF,6BAA6B;QAE7B,IAAI,CAAC,IAAI,CAAC,0BAA0B,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1D,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAE9B,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACtB,OAAO,oCAAW,CAAC,gBAAgB,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACpD,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAE9B,qDAAqD;QACrD,2GAA2G;QAC3G,6FAA6F;QAC7F,4FAA4F;QAC5F,6FAA6F;QAC7F,oGAAoG;QACpG,sFAAsF;QACtF,yBAAyB;QAEzB,kGAAkG;QAClG,8FAA8F;QAC9F,OAAO,oCAAW,CAAC,IAAI,CAAC;IAC5B,CAAC;IAEO,qBAAqB,CAAC,kBAAmC;QAC7D,MAAM,SAAS,GAAG,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;IACxC,CAAC;IAEO,cAAc,CAAC,OAA4B;QAC/C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC3B,QAAQ,CAAC,yBAAyB,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAoB,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAEvC,IAAI,KAAK,EAAE,CAAC;YACR,sBAAsB;YACtB,IAAI,KAAK,EAAE,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,EAAE,CAAC;YACjB,CAAC;QACL,CAAC;aAAM,CAAC;YACJ,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;gBACd,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,EAAG,CAAC;gBACxB,MAAM,IAAI,EAAE,CAAC;YACjB,CAAC;QACL,CAAC;QACD,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5B,QAAQ,CAAC,uBAAuB,CAAC,CAAC;IACtC,CAAC;IAEO,KAAK,CAAC,gBAAgB;QAC1B,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,EAAG,CAAC;YACxC,MAAM,KAAM,EAAE,CAAC;QACnB,CAAC;IACL,CAAC;CACJ;AAvgBD,4EAugBC"}
+{"version":3,"file":"push_certificate_manager_server_impl.js","sourceRoot":"","sources":["../../source/server/push_certificate_manager_server_impl.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAG3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAIjD,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAO/E,OAAO,EAAE,mBAAmB,EAAE,MAAM,6CAA6C,CAAC;AAClF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sDAAsD,CAAC;AACnG,OAAO,EAAE,sBAAsB,EAAE,MAAM,iDAAiD,CAAC;AACzF,OAAO,EAAE,qCAAqC,EAAE,MAAM,gDAAgD,CAAC;AACvG,OAAO,EAAE,wBAAwB,EAAE,MAAM,kDAAkD,CAAC;AAE5F,MAAM,QAAQ,GAAG,aAAa,CAAC,qBAAqB,CAAC,CAAC;AAmCtD,MAAM,OAAO,gCAAiC,SAAQ,YAAY;IACvD,gBAAgB,CAAsB;IACtC,cAAc,CAAsB;IACpC,UAAU,CAAsB;IAEvC,4EAA4E;IAC3D,QAAQ,CAAwC;IAEjE,cAAc;IACP,cAAc,CAAS;IAS9B,8DAA8D;IACvD,EAAE,CAAC,KAAsB,EAAE,QAAkC;QAChE,OAAO,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;IAQD,8DAA8D;IACvD,IAAI,CAAC,KAAsB,EAAE,QAAkC;QAClE,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED,YAAY,OAA4C;QACpD,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,QAAQ,GAAG,IAAI,qCAAqC,CAAC,IAAI,CAAC,CAAC;QAEhE,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QAE5D,IAAI,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;YACjD,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;YAC7C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;YACrC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACtB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,qBAAqB,GAAG,IAAI,CAAC,cAAc,CAAC;gBAC9D,qEAAqE;gBACrE,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,qBAAqB,GAAG,OAAO,CAAC,8BAA8B,IAAI;oBAC7F,oDAAoD;oBACpD,GAAG,wBAAwB;iBAC9B,CAAC,CAAC,kCAAkC;gBAErC,iBAAiB;gBACjB,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,YAAY,kBAAkB,CAAC,EAAE,CAAC;oBACvD,QAAQ,CACJ,qEAAqE,EACpE,IAAI,CAAC,cAA+D,CAAC,WAAW,CAAC,IAAI,CACzF,CAAC;oBACF,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;gBAC1F,CAAC;YACL,CAAC;YACD,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACxB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,uBAAuB,GAAG,IAAI,CAAC,gBAAgB,CAAC;gBAClE,qEAAqE;gBACrE,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,uBAAuB,GAAG,OAAO,CAAC,gCAAgC,IAAI;oBACjG,oDAAoD;oBACpD,GAAG,wBAAwB;iBAC9B,CAAC,CAAC,kCAAkC;gBACrC,MAAM,CAAC,IAAI,CAAC,gBAAgB,YAAY,kBAAkB,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBAClB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,iBAAiB,GAAG,IAAI,CAAC,UAAU,CAAC;gBACtD,qEAAqE;gBACrE,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,iBAAiB,GAAG,OAAO,CAAC,0BAA0B,IAAI;oBACrF,oDAAoD;oBACpD,GAAG,wBAAwB;iBAC9B,CAAC,CAAC,kCAAkC;gBACrC,MAAM,CAAC,IAAI,CAAC,UAAU,YAAY,kBAAkB,CAAC,CAAC;YAC1D,CAAC;QACL,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,UAAU;QACnB,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxB,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC;QAC7C,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC;QAC3C,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;QACvC,CAAC;IACL,CAAC;IAED,IAAW,0BAA0B;QACjC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IAEM,KAAK,CAAC,6BAA6B;QACtC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IAEM,KAAK,CAAC,oBAAoB,CAC7B,kBAAmC,EACnC,iBAAkC,EAClC,WAA2C,EAC3C,oBAA8B,EAC9B,KAAc;QAEd,OAAO,MAAM,2BAA2B,CACpC,IAAI,CAAC,QAAQ,EACb,kBAAkB,EAClB,iBAAiB,EACjB,WAAW,EACX,oBAAoB,EACpB,KAAK,CACR,CAAC;IACN,CAAC;IAEM,KAAK,CAAC,eAAe;QACxB,OAAO,MAAM,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvD,CAAC;IAED,0CAA0C;IACnC,KAAK,CAAC,iBAAiB,CAC1B,kBAAmC,EACnC,iBAAkC,EAClC,WAAmB,EACnB,kBAAgC,EAChC,gBAAyB,EACzB,UAA4B;QAE5B,OAAO,MAAM,wBAAwB,CACjC,IAAI,CAAC,QAAQ,EACb,kBAAkB,EAClB,iBAAiB,EACjB,WAAW,EACX,kBAAkB,EAClB,gBAAgB,EAChB,UAAU,CACb,CAAC;IACN,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAmCG;IACI,KAAK,CAAC,YAAY,CAAC,OAAyB;QAC/C,OAAO,MAAM,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAEM,qBAAqB,CAAC,SAAiB;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC;IAChD,CAAC;IAEM,mBAAmB,CAAC,SAAiB;QACxC,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACrD,CAAC;IAEM,KAAK,CAAC,OAAO;QAChB,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;IAClC,CAAC;CACJ"}

package/dist/server/roles_and_permissions.d.ts

@@ -1,3 +1,3 @@
-import { RolePermissionTypeOptions } from "node-opcua-address-space";
+import { type RolePermissionTypeOptions } from "node-opcua-address-space";
 export declare const rolePermissionRestricted: RolePermissionTypeOptions[];
 export declare const rolePermissionAdminOnly: RolePermissionTypeOptions[];