@hashgraph/solo/dist/test/unit/core/key-manager.test.js

An opinionated CLI tool to deploy and manage private Hedera Networks.

// SPDX-License-Identifier: Apache-2.0
import { expect } from 'chai';
import { describe, it } from 'mocha';
import fs from 'node:fs';
import os from 'node:os';
import * as constants from '../../../src/core/constants.js';
import { Duration } from '../../../src/core/time/duration.js';
import { container } from 'tsyringe-neo';
import { InjectTokens } from '../../../src/core/dependency-injection/inject-tokens.js';
import { PathEx } from '../../../src/business/utils/path-ex.js';
describe('KeyManager', () => {
    const keyManager = container.resolve(InjectTokens.KeyManager);
    it('should generate signing key', async () => {
        const temporaryDirectory = fs.mkdtempSync(PathEx.join(os.tmpdir(), 'keys-'));
        const nodeAlias = 'node1';
        const keyPrefix = constants.SIGNING_KEY_PREFIX;
        const signingKey = await keyManager.generateSigningKey(nodeAlias);
        const nodeKeyFiles = keyManager.prepareNodeKeyFilePaths(nodeAlias, temporaryDirectory);
        const files = await keyManager.storeNodeKey(nodeAlias, signingKey, temporaryDirectory, nodeKeyFiles, keyPrefix);
        expect(files.privateKeyFile).not.to.be.null;
        expect(files.certificateFile).not.to.be.null;
        const nodeKey = await keyManager.loadSigningKey(nodeAlias, temporaryDirectory);
        expect(nodeKey.certificate.rawData.toString()).to.equal(signingKey.certificate.rawData.toString());
        expect(nodeKey.privateKey.algorithm).to.deep.equal(signingKey.privateKey.algorithm);
        expect(nodeKey.privateKey.type).to.deep.equal(signingKey.privateKey.type);
        expect(await signingKey.certificate.verify({
            publicKey: signingKey.certificate.publicKey,
            signatureOnly: true,
        })).to.be.true;
        fs.rmSync(temporaryDirectory, { recursive: true });
    });
    it('should generate TLS key', async () => {
        const temporaryDirectory = fs.mkdtempSync(PathEx.join(os.tmpdir(), 'keys-'));
        const nodeAlias = 'node1';
        const tlsKey = await keyManager.generateGrpcTlsKey(nodeAlias);
        expect(tlsKey.certificate.subject).not.to.equal('');
        expect(tlsKey.certificate.issuer).not.to.equal('');
        const files = await keyManager.storeTLSKey(nodeAlias, tlsKey, temporaryDirectory);
        expect(files.privateKeyFile).not.to.be.null;
        expect(files.certificateFile).not.to.be.null;
        const nodeKey = await keyManager.loadTLSKey(nodeAlias, temporaryDirectory);
        expect(nodeKey.certificate.subject).to.deep.equal(tlsKey.certificate.subject);
        expect(nodeKey.certificate.issuer).to.deep.equal(tlsKey.certificate.issuer);
        expect(nodeKey.certificate.rawData.toString()).to.deep.equal(tlsKey.certificate.rawData.toString());
        expect(nodeKey.privateKey.algorithm).to.deep.equal(tlsKey.privateKey.algorithm);
        expect(nodeKey.privateKey.type).to.deep.equal(tlsKey.privateKey.type);
        expect(await tlsKey.certificate.verify({
            publicKey: tlsKey.certificate.publicKey,
            signatureOnly: true,
        })).to.be.true;
        fs.rmSync(temporaryDirectory, { recursive: true });
    }).timeout(Duration.ofSeconds(20).toMillis());
});
//# sourceMappingURL=key-manager.test.js.map