catproxy/build/cert/createCert.js

'use strict';

Object.defineProperty(exports, "__esModule", {
	value: true
});
exports.createSelfCert = exports.createRootCert = undefined;

var _nodeForge = require('node-forge');

var attrs = [{
	name: 'countryName',
	value: 'CN'
}, {
	shortName: 'ST',
	value: 'CP'
}, {
	name: 'localityName',
	value: 'BJ'
}, {
	name: 'organizationName',
	value: 'catproxy'
}, {
	shortName: 'OU',
	value: 'CP'
}];
var rootAttrs = attrs.slice(0);
rootAttrs.push({
	name: 'commonName',
	value: 'catproxy'
});

var createKeyandCert = function createKeyandCert() {
	// generate a keypair and create an X.509v3 certificate
	var keys = _nodeForge.pki.rsa.generateKeyPair(1024);
	var cert = _nodeForge.pki.createCertificate();
	var today = new Date().getTime();
	var tenYearMin = 10 * 365 * 24 * 60 * 60 * 1000;
	cert.publicKey = keys.publicKey;
	cert.serialNumber = "" + new Date().getTime();
	cert.validity.notBefore = new Date(today - tenYearMin);
	cert.validity.notAfter = new Date(today + tenYearMin);
	return { cert: cert, keys: keys };
};

var createRootCert = function createRootCert() {
	var _createKeyandCert = createKeyandCert();

	var cert = _createKeyandCert.cert;
	var keys = _createKeyandCert.keys;

	cert.setSubject(rootAttrs);
	//alternatively set subject from a csr
	//cert.setSubject(csr.subject.attributes);
	cert.setIssuer(rootAttrs);
	cert.setExtensions([{
		name: 'basicConstraints',
		cA: true
	}]);
	cert.sign(keys.privateKey, _nodeForge.md.sha256.create());
	// console.log(cert.subject.attributes);
	return {
		cert: _nodeForge.pki.certificateToPem(cert),
		privateKey: _nodeForge.pki.privateKeyToPem(keys.privateKey),
		publicKey: _nodeForge.pki.publicKeyToPem(keys.publicKey)
	};
};

var createSelfCert = function createSelfCert(domain, rootOpt) {
	if (!domain) {
		return {};
	}
	var rootKey = _nodeForge.pki.privateKeyFromPem(rootOpt.privateKey);

	var _createKeyandCert2 = createKeyandCert();

	var cert = _createKeyandCert2.cert;
	var keys = _createKeyandCert2.keys;
	//rootCert.subject.attributes

	cert.setIssuer(rootAttrs);
	cert.setSubject(attrs.concat([{
		name: 'commonName',
		value: domain
	}]));
	cert.sign(rootKey, _nodeForge.md.sha256.create());
	return {
		cert: _nodeForge.pki.certificateToPem(cert),
		privateKey: _nodeForge.pki.privateKeyToPem(keys.privateKey),
		publicKey: _nodeForge.pki.publicKeyToPem(keys.publicKey)
	};
};

exports.createRootCert = createRootCert;
exports.createSelfCert = createSelfCert;