mirror of
https://github.com/fluencelabs/js-libp2p
synced 2025-04-26 02:52:16 +00:00
90 lines
2.1 KiB
JavaScript
90 lines
2.1 KiB
JavaScript
'use strict'
|
|
|
|
require('node-forge/lib/x509')
|
|
const forge = require('node-forge/lib/forge')
|
|
const pki = forge.pki
|
|
exports = module.exports
|
|
|
|
/**
|
|
* Gets a self-signed X.509 certificate for the key.
|
|
*
|
|
* The output Uint8Array contains the PKCS #7 message in DER.
|
|
*
|
|
* TODO: move to libp2p-crypto package
|
|
*
|
|
* @param {KeyInfo} key - The id and name of the key
|
|
* @param {RsaPrivateKey} privateKey - The naked key
|
|
* @returns {Uint8Array}
|
|
*/
|
|
exports.certificateForKey = (key, privateKey) => {
|
|
const publicKey = pki.setRsaPublicKey(privateKey.n, privateKey.e)
|
|
const cert = pki.createCertificate()
|
|
cert.publicKey = publicKey
|
|
cert.serialNumber = '01'
|
|
cert.validity.notBefore = new Date()
|
|
cert.validity.notAfter = new Date()
|
|
cert.validity.notAfter.setFullYear(cert.validity.notBefore.getFullYear() + 10)
|
|
const attrs = [{
|
|
name: 'organizationName',
|
|
value: 'ipfs'
|
|
}, {
|
|
shortName: 'OU',
|
|
value: 'keystore'
|
|
}, {
|
|
name: 'commonName',
|
|
value: key.id
|
|
}]
|
|
cert.setSubject(attrs)
|
|
cert.setIssuer(attrs)
|
|
cert.setExtensions([{
|
|
name: 'basicConstraints',
|
|
cA: true
|
|
}, {
|
|
name: 'keyUsage',
|
|
keyCertSign: true,
|
|
digitalSignature: true,
|
|
nonRepudiation: true,
|
|
keyEncipherment: true,
|
|
dataEncipherment: true
|
|
}, {
|
|
name: 'extKeyUsage',
|
|
serverAuth: true,
|
|
clientAuth: true,
|
|
codeSigning: true,
|
|
emailProtection: true,
|
|
timeStamping: true
|
|
}, {
|
|
name: 'nsCertType',
|
|
client: true,
|
|
server: true,
|
|
email: true,
|
|
objsign: true,
|
|
sslCA: true,
|
|
emailCA: true,
|
|
objCA: true
|
|
}])
|
|
// self-sign certificate
|
|
cert.sign(privateKey)
|
|
|
|
return cert
|
|
}
|
|
|
|
/**
|
|
* Finds the first item in a collection that is matched in the
|
|
* `asyncCompare` function.
|
|
*
|
|
* `asyncCompare` is an async function that must
|
|
* resolve to either `true` or `false`.
|
|
*
|
|
* @param {Array} array
|
|
* @param {function(*)} asyncCompare - An async function that returns a boolean
|
|
*/
|
|
async function findAsync (array, asyncCompare) {
|
|
const promises = array.map(asyncCompare)
|
|
const results = await Promise.all(promises)
|
|
const index = results.findIndex(result => result)
|
|
return array[index]
|
|
}
|
|
|
|
module.exports.findAsync = findAsync
|