setup for browser
This commit is contained in:
		
							parent
							
								
									10f817a51c
								
							
						
					
					
						commit
						2e0549af5a
					
				
							
								
								
									
										173
									
								
								lib/x509.js
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										173
									
								
								lib/x509.js
									
									
									
									
									
										Normal file
									
								
							@ -0,0 +1,173 @@
 | 
			
		||||
'use strict';
 | 
			
		||||
(function (exports) {
 | 
			
		||||
  'use strict';
 | 
			
		||||
  var x509 = exports.x509 = {}; 
 | 
			
		||||
  var ASN1 = exports.ASN1;
 | 
			
		||||
  var Enc = exports.Enc;
 | 
			
		||||
 | 
			
		||||
  // 1.2.840.10045.3.1.7
 | 
			
		||||
  // prime256v1 (ANSI X9.62 named elliptic curve)
 | 
			
		||||
  var OBJ_ID_EC = '06 08 2A8648CE3D030107'.replace(/\s+/g, '').toLowerCase();
 | 
			
		||||
  // 1.3.132.0.34
 | 
			
		||||
  // secp384r1 (SECG (Certicom) named elliptic curve)
 | 
			
		||||
  var OBJ_ID_EC_384 = '06 05 2B81040022'.replace(/\s+/g, '').toLowerCase();
 | 
			
		||||
  // 1.2.840.10045.2.1
 | 
			
		||||
  // ecPublicKey (ANSI X9.62 public key type)
 | 
			
		||||
  var OBJ_ID_EC_PUB = '06 07 2A8648CE3D0201'.replace(/\s+/g, '').toLowerCase();
 | 
			
		||||
 | 
			
		||||
  x509.parseSec1 = function parseEcOnlyPrivkey(u8, jwk) {
 | 
			
		||||
    var index = 7;
 | 
			
		||||
    var len = 32;
 | 
			
		||||
    var olen = OBJ_ID_EC.length / 2;
 | 
			
		||||
 | 
			
		||||
    if ("P-384" === jwk.crv) {
 | 
			
		||||
      olen = OBJ_ID_EC_384.length / 2;
 | 
			
		||||
      index = 8;
 | 
			
		||||
      len = 48;
 | 
			
		||||
    }
 | 
			
		||||
    if (len !== u8[index - 1]) {
 | 
			
		||||
      throw new Error("Unexpected bitlength " + len);
 | 
			
		||||
    }
 | 
			
		||||
 | 
			
		||||
    // private part is d
 | 
			
		||||
    var d = u8.slice(index, index + len);
 | 
			
		||||
    // compression bit index
 | 
			
		||||
    var ci = index + len + 2 + olen + 2 + 3;
 | 
			
		||||
    var c = u8[ci];
 | 
			
		||||
    var x, y;
 | 
			
		||||
 | 
			
		||||
    if (0x04 === c) {
 | 
			
		||||
      y = u8.slice(ci + 1 + len, ci + 1 + len + len);
 | 
			
		||||
    } else if (0x02 !== c) {
 | 
			
		||||
      throw new Error("not a supported EC private key");
 | 
			
		||||
    }
 | 
			
		||||
    x = u8.slice(ci + 1, ci + 1 + len);
 | 
			
		||||
 | 
			
		||||
    return {
 | 
			
		||||
      kty: jwk.kty
 | 
			
		||||
      , crv: jwk.crv
 | 
			
		||||
      , d: Enc.bufToUrlBase64(d)
 | 
			
		||||
      //, dh: Enc.bufToHex(d)
 | 
			
		||||
      , x: Enc.bufToUrlBase64(x)
 | 
			
		||||
      //, xh: Enc.bufToHex(x)
 | 
			
		||||
      , y: Enc.bufToUrlBase64(y)
 | 
			
		||||
      //, yh: Enc.bufToHex(y)
 | 
			
		||||
    };
 | 
			
		||||
  };
 | 
			
		||||
 | 
			
		||||
  x509.parsePkcs8 = function parseEcPkcs8(u8, jwk) {
 | 
			
		||||
    var index = 24 + (OBJ_ID_EC.length / 2);
 | 
			
		||||
    var len = 32;
 | 
			
		||||
    if ("P-384" === jwk.crv) {
 | 
			
		||||
      index = 24 + (OBJ_ID_EC_384.length / 2) + 2;
 | 
			
		||||
      len = 48;
 | 
			
		||||
    }
 | 
			
		||||
 | 
			
		||||
    //console.log(index, u8.slice(index));
 | 
			
		||||
    if (0x04 !== u8[index]) {
 | 
			
		||||
      //console.log(jwk);
 | 
			
		||||
      throw new Error("privkey not found");
 | 
			
		||||
    }
 | 
			
		||||
    var d = u8.slice(index + 2, index + 2 + len);
 | 
			
		||||
    var ci = index + 2 + len + 5;
 | 
			
		||||
    var xi = ci + 1;
 | 
			
		||||
    var x = u8.slice(xi, xi + len);
 | 
			
		||||
    var yi = xi + len;
 | 
			
		||||
    var y;
 | 
			
		||||
    if (0x04 === u8[ci]) {
 | 
			
		||||
      y = u8.slice(yi, yi + len);
 | 
			
		||||
    } else if (0x02 !== u8[ci]) {
 | 
			
		||||
      throw new Error("invalid compression bit (expected 0x04 or 0x02)");
 | 
			
		||||
    }
 | 
			
		||||
 | 
			
		||||
    return {
 | 
			
		||||
      kty: jwk.kty
 | 
			
		||||
      , crv: jwk.crv
 | 
			
		||||
      , d: Enc.bufToUrlBase64(d)
 | 
			
		||||
      //, dh: Enc.bufToHex(d)
 | 
			
		||||
      , x: Enc.bufToUrlBase64(x)
 | 
			
		||||
      //, xh: Enc.bufToHex(x)
 | 
			
		||||
      , y: Enc.bufToUrlBase64(y)
 | 
			
		||||
      //, yh: Enc.bufToHex(y)
 | 
			
		||||
    };
 | 
			
		||||
  };
 | 
			
		||||
 | 
			
		||||
  x509.parseSpki = function parsePem(u8, jwk) {
 | 
			
		||||
    var ci = 16 + OBJ_ID_EC.length / 2;
 | 
			
		||||
    var len = 32;
 | 
			
		||||
 | 
			
		||||
    if ("P-384" === jwk.crv) {
 | 
			
		||||
      ci = 16 + OBJ_ID_EC_384.length / 2;
 | 
			
		||||
      len = 48;
 | 
			
		||||
    }
 | 
			
		||||
 | 
			
		||||
    var c = u8[ci];
 | 
			
		||||
    var xi = ci + 1;
 | 
			
		||||
    var x = u8.slice(xi, xi + len);
 | 
			
		||||
    var yi = xi + len;
 | 
			
		||||
    var y;
 | 
			
		||||
    if (0x04 === c) {
 | 
			
		||||
      y = u8.slice(yi, yi + len);
 | 
			
		||||
    } else if (0x02 !== c) {
 | 
			
		||||
      throw new Error("not a supported EC private key");
 | 
			
		||||
    }
 | 
			
		||||
 | 
			
		||||
    return {
 | 
			
		||||
      kty: jwk.kty
 | 
			
		||||
      , crv: jwk.crv
 | 
			
		||||
      , x: Enc.bufToUrlBase64(x)
 | 
			
		||||
      //, xh: Enc.bufToHex(x)
 | 
			
		||||
      , y: Enc.bufToUrlBase64(y)
 | 
			
		||||
      //, yh: Enc.bufToHex(y)
 | 
			
		||||
    };
 | 
			
		||||
  };
 | 
			
		||||
  x509.parsePkix = x509.parseSpki;
 | 
			
		||||
 | 
			
		||||
  x509.packSec1 = function (jwk) {
 | 
			
		||||
    var d = Enc.base64ToHex(jwk.d);
 | 
			
		||||
    var x = Enc.base64ToHex(jwk.x);
 | 
			
		||||
    var y = Enc.base64ToHex(jwk.y);
 | 
			
		||||
    var objId = ('P-256' === jwk.crv) ? OBJ_ID_EC : OBJ_ID_EC_384;
 | 
			
		||||
    return Enc.hexToUint8(
 | 
			
		||||
      ASN1('30'
 | 
			
		||||
        , ASN1.UInt('01')
 | 
			
		||||
        , ASN1('04', d)
 | 
			
		||||
        , ASN1('A0', objId)
 | 
			
		||||
        , ASN1('A1', ASN1.BitStr('04' + x + y)))
 | 
			
		||||
    );
 | 
			
		||||
  };
 | 
			
		||||
  x509.packPkcs8 = function (jwk) {
 | 
			
		||||
    var d = Enc.base64ToHex(jwk.d);
 | 
			
		||||
    var x = Enc.base64ToHex(jwk.x);
 | 
			
		||||
    var y = Enc.base64ToHex(jwk.y);
 | 
			
		||||
    var objId = ('P-256' === jwk.crv) ? OBJ_ID_EC : OBJ_ID_EC_384;
 | 
			
		||||
    return Enc.hexToUint8(
 | 
			
		||||
      ASN1('30'
 | 
			
		||||
        , ASN1.UInt('00')
 | 
			
		||||
        , ASN1('30'
 | 
			
		||||
          , OBJ_ID_EC_PUB
 | 
			
		||||
          , objId
 | 
			
		||||
        )
 | 
			
		||||
        , ASN1('04'
 | 
			
		||||
          , ASN1('30'
 | 
			
		||||
            , ASN1.UInt('01')
 | 
			
		||||
            , ASN1('04', d)
 | 
			
		||||
            , ASN1('A1', ASN1.BitStr('04' + x + y)))))
 | 
			
		||||
    );
 | 
			
		||||
  };
 | 
			
		||||
  x509.packSpki = function (jwk) {
 | 
			
		||||
    var x = Enc.base64ToHex(jwk.x);
 | 
			
		||||
    var y = Enc.base64ToHex(jwk.y);
 | 
			
		||||
    var objId = ('P-256' === jwk.crv) ? OBJ_ID_EC : OBJ_ID_EC_384;
 | 
			
		||||
    return Enc.hexToUint8(
 | 
			
		||||
      ASN1('30'
 | 
			
		||||
        , ASN1('30'
 | 
			
		||||
          , OBJ_ID_EC_PUB
 | 
			
		||||
          , objId
 | 
			
		||||
        )
 | 
			
		||||
        , ASN1.BitStr('04' + x + y))
 | 
			
		||||
    );
 | 
			
		||||
  };
 | 
			
		||||
  x509.packPkix = x509.packSpki;
 | 
			
		||||
 | 
			
		||||
}('undefined' !== typeof module ? module.exports : window));
 | 
			
		||||
		Loading…
	
	
			
			x
			
			
		
	
		Reference in New Issue
	
	Block a user