signalk-ssl 0.2.0 → 0.2.1

package/dist/plugin/schema.d.ts

@@ -4,8 +4,8 @@ export declare const SansSchema: import("@sinclair/typebox").TObject<{
     ipAddresses: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
 }>;
 export declare const ImportSchema: import("@sinclair/typebox").TObject<{
-    caCertPath: import("@sinclair/typebox").TString;
-    caKeyPath: import("@sinclair/typebox").TString;
+    caCertPath: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    caKeyPath: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
 }>;
 export declare const ConfigSchema: import("@sinclair/typebox").TObject<{
     mode: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"generate">, import("@sinclair/typebox").TLiteral<"import">]>;
@@ -19,8 +19,8 @@ export declare const ConfigSchema: import("@sinclair/typebox").TObject<{
     }>;
     passphraseMode: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"env">, import("@sinclair/typebox").TLiteral<"webapp">, import("@sinclair/typebox").TLiteral<"convenience">]>;
     import: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
-        caCertPath: import("@sinclair/typebox").TString;
-        caKeyPath: import("@sinclair/typebox").TString;
+        caCertPath: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        caKeyPath: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     }>>;
     renewalThresholdDays: import("@sinclair/typebox").TInteger;
     clockSkewHours: import("@sinclair/typebox").TInteger;

package/dist/plugin/schema.js

@@ -4,8 +4,19 @@ export const SansSchema = Type.Object({
     ipAddresses: Type.Array(Type.String(), { default: [] })
 }, { title: 'Subject Alternative Names' });
 export const ImportSchema = Type.Object({
-    caCertPath: Type.String({ title: 'CA certificate file path' }),
-    caKeyPath: Type.String({ title: 'CA private-key file path (encrypted PKCS#8)' })
+    caCertPath: Type.Optional(Type.String({
+        title: 'CA certificate file path',
+        description: 'Only used when mode = import. Leave blank for generate mode.',
+        default: ''
+    })),
+    caKeyPath: Type.Optional(Type.String({
+        title: 'CA private-key file path (encrypted PKCS#8)',
+        description: 'Only used when mode = import. Leave blank for generate mode.',
+        default: ''
+    }))
+}, {
+    title: 'Import (only used when mode = import)',
+    description: 'Paths to an existing CA cert + encrypted private key on disk. Ignored in generate mode.'
 });
 export const ConfigSchema = Type.Object({
     mode: Type.Union([Type.Literal('generate'), Type.Literal('import')], {

package/dist/plugin/service.js

@@ -72,12 +72,15 @@ export class SslService {
     }
     async importCa(passphrase) {
         const importCfg = this.deps.config.import;
-        if (importCfg === undefined) {
-            throw new Error('import mode selected but no import paths configured');
+        const caCertPath = importCfg?.caCertPath ?? '';
+        const caKeyPath = importCfg?.caKeyPath ?? '';
+        if (caCertPath === '' || caKeyPath === '') {
+            throw new Error('import mode requires both "Import → CA certificate file path" and ' +
+                '"Import → CA private-key file path (encrypted PKCS#8)" to be set in the plugin config.');
         }
         const [certificatePem, encryptedKeyPem] = await Promise.all([
-            readFile(importCfg.caCertPath, 'utf8'),
-            readFile(importCfg.caKeyPath, 'utf8')
+            readFile(caCertPath, 'utf8'),
+            readFile(caKeyPath, 'utf8')
         ]);
         // Validate the key actually decrypts before persisting — fail fast.
         await decryptPrivateKeyPkcs8(encryptedKeyPem, passphrase);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "signalk-ssl",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "SSL/TLS certificate management plugin for SignalK Node Server — generate a local CA, issue server certs, distribute the root via QR to phones/tablets",
   "type": "module",
   "main": "dist/plugin/index.js",