UNPKG

@credo-ts/core

Version:

<p align="center"> <br /> <img alt="Credo Logo" src="https://github.com/openwallet-foundation/credo-ts/blob/c7886cb8377ceb8ee4efe8d264211e561a75072d/images/credo-logo.png" height="250px" /> </p> <h1 align="center"><b>Credo - Core</b></h1

75 lines • 4.96 kB
import { X509CertificateExtensionsOptions, X509CertificateIssuerAndSubjectOptions, X509CertificateRevocationListExtensionsOptions } from "../X509ServiceOptions.mjs"; import { PublicJwk } from "../../kms/jwk/PublicJwk.mjs"; import "../../kms/index.mjs"; import { AuthorityKeyIdentifierExtension, BasicConstraintsExtension, CRLDistributionPointsExtension, ExtendedKeyUsageExtension, Extension, IssuerAlternativeNameExtension, KeyUsagesExtension, SubjectAlternativeNameExtension, SubjectKeyIdentifierExtension } from "@peculiar/x509"; //#region src/modules/x509/utils/extensions.d.ts /** * X.509 extension OIDs defined in RFC 5280 */ export declare enum X509ExtensionIdentifier { /** Basic Constraints (RFC 5280 Section 4.2.1.9) */ BasicConstraints = "2.5.29.19", /** Key Usage (RFC 5280 Section 4.2.1.3) */ KeyUsage = "2.5.29.15", /** Extended Key Usage (RFC 5280 Section 4.2.1.12) */ ExtendedKeyUsage = "2.5.29.37", /** Subject Alternative Name (RFC 5280 Section 4.2.1.6) */ SubjectAltName = "2.5.29.17", /** Issuer Alternative Name (RFC 5280 Section 4.2.1.7) */ IssuerAltName = "2.5.29.18", /** Subject Key Identifier (RFC 5280 Section 4.2.1.2) */ SubjectKeyIdentifier = "2.5.29.14", /** Authority Key Identifier (RFC 5280 Section 4.2.1.1) */ AuthorityKeyIdentifier = "2.5.29.35", /** CRL Distribution Points (RFC 5280 Section 4.2.1.13) */ CrlDistributionPoints = "2.5.29.31", /** Name Constraints (RFC 5280 Section 4.2.1.10) */ NameConstraints = "2.5.29.30", /** Policy Constraints (RFC 5280 Section 4.2.1.11) */ PolicyConstraints = "2.5.29.36" } /** * X.509 CRL extension OIDs defined in RFC 5280 Section 5.2. * * These are the extensions that may appear on a CRL itself. They are distinct from the per-entry * CRL extensions of RFC 5280 Section 5.3 (such as `reasonCode`, `invalidityDate` and * `certificateIssuer`), which are carried on individual revoked entries rather than the CRL. */ export declare enum X509CrlExtensionIdentifier { /** Authority Key Identifier (RFC 5280 Section 5.2.1) */ AuthorityKeyIdentifier = "2.5.29.35", /** Issuer Alternative Name (RFC 5280 Section 5.2.2) */ IssuerAltName = "2.5.29.18", /** CRL Number (RFC 5280 Section 5.2.3) */ CrlNumber = "2.5.29.20", /** Delta CRL Indicator (RFC 5280 Section 5.2.4) */ DeltaCrlIndicator = "2.5.29.27", /** Issuing Distribution Point (RFC 5280 Section 5.2.5) */ IssuingDistributionPoint = "2.5.29.28", /** Freshest CRL, a.k.a. Delta CRL Distribution Point (RFC 5280 Section 5.2.6) */ FreshestCrl = "2.5.29.46", /** Authority Information Access (RFC 5280 Section 5.2.7) */ AuthorityInformationAccess = "1.3.6.1.5.5.7.1.1" } export declare const createSubjectKeyIdentifierExtension: (options: X509CertificateExtensionsOptions["subjectKeyIdentifier"], additionalOptions: { publicJwk: PublicJwk; }) => SubjectKeyIdentifierExtension | undefined; export declare const createKeyUsagesExtension: (options: X509CertificateExtensionsOptions["keyUsage"]) => KeyUsagesExtension | undefined; export declare const createExtendedKeyUsagesExtension: (options: X509CertificateExtensionsOptions["extendedKeyUsage"]) => ExtendedKeyUsageExtension | undefined; export declare const createAuthorityKeyIdentifierExtension: (options: X509CertificateExtensionsOptions["authorityKeyIdentifier"], additionalOptions: { publicJwk: PublicJwk; }) => AuthorityKeyIdentifierExtension | undefined; export declare const createIssuerAlternativeNameExtension: (options: X509CertificateExtensionsOptions["issuerAlternativeName"]) => IssuerAlternativeNameExtension | undefined; export declare const createSubjectAlternativeNameExtension: (options: X509CertificateExtensionsOptions["subjectAlternativeName"]) => SubjectAlternativeNameExtension | undefined; export declare const createBasicConstraintsExtension: (options: X509CertificateExtensionsOptions["basicConstraints"]) => BasicConstraintsExtension | undefined; export declare const createCrlDistributionPointsExtension: (options: X509CertificateExtensionsOptions["crlDistributionPoints"]) => CRLDistributionPointsExtension | undefined; export declare const createCrlNumberExtension: (options: X509CertificateRevocationListExtensionsOptions["crlNumber"]) => Extension | undefined; export declare const createDeltaCrlIndicatorExtension: (options: X509CertificateRevocationListExtensionsOptions["deltaCrlIndicator"]) => Extension | undefined; export declare const createIssuingDistributionPointExtension: (options: X509CertificateRevocationListExtensionsOptions["issuingDistributionPoint"]) => Extension | undefined; /** * Build the `certificateIssuer` CRL entry extension (RFC 5280 §5.3.3) used by indirect CRLs to * indicate the issuer of the revoked certificate. This extension is always critical. */ export declare const createCrlEntryCertificateIssuerExtension: (issuer: string | X509CertificateIssuerAndSubjectOptions) => Extension; //#endregion //# sourceMappingURL=extensions.d.mts.map