@nordicsemiconductor/asset-tracker-cloud-aws
Version:
A reference implementation of a serverless backend for an IoT product developed using AWS CDK in TypeScript.
229 lines (228 loc) • 7.75 kB
JavaScript
function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) {
try {
var info = gen[key](arg);
var value = info.value;
} catch (error) {
reject(error);
return;
}
if (info.done) {
resolve(value);
} else {
Promise.resolve(value).then(_next, _throw);
}
}
function _async_to_generator(fn) {
return function() {
var self = this, args = arguments;
return new Promise(function(resolve, reject) {
var gen = fn.apply(self, args);
function _next(value) {
asyncGeneratorStep(gen, resolve, reject, _next, _throw, "next", value);
}
function _throw(err) {
asyncGeneratorStep(gen, resolve, reject, _next, _throw, "throw", err);
}
_next(undefined);
});
};
}
function _ts_generator(thisArg, body) {
var f, y, t, g, _ = {
label: 0,
sent: function() {
if (t[0] & 1) throw t[1];
return t[1];
},
trys: [],
ops: []
};
return g = {
next: verb(0),
"throw": verb(1),
"return": verb(2)
}, typeof Symbol === "function" && (g[Symbol.iterator] = function() {
return this;
}), g;
function verb(n) {
return function(v) {
return step([
n,
v
]);
};
}
function step(op) {
if (f) throw new TypeError("Generator is already executing.");
while(_)try {
if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
if (y = 0, t) op = [
op[0] & 2,
t.value
];
switch(op[0]){
case 0:
case 1:
t = op;
break;
case 4:
_.label++;
return {
value: op[1],
done: false
};
case 5:
_.label++;
y = op[1];
op = [
0
];
continue;
case 7:
op = _.ops.pop();
_.trys.pop();
continue;
default:
if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) {
_ = 0;
continue;
}
if (op[0] === 3 && (!t || op[1] > t[0] && op[1] < t[3])) {
_.label = op[1];
break;
}
if (op[0] === 6 && _.label < t[1]) {
_.label = t[1];
t = op;
break;
}
if (t && _.label < t[2]) {
_.label = t[2];
_.ops.push(op);
break;
}
if (t[2]) _.ops.pop();
_.trys.pop();
continue;
}
op = body.call(thisArg, _);
} catch (e) {
op = [
6,
e
];
y = 0;
} finally{
f = t = 0;
}
if (op[0] & 5) throw op[1];
return {
value: op[0] ? op[1] : void 0,
done: true
};
}
}
import { promises as fs } from 'fs';
import os from 'os';
import run from '@bifravst/run';
import { caFileLocations } from './caFileLocations.js';
import { deviceFileLocations } from './deviceFileLocations.js';
export var defaultDeviceCertificateValidityInDays = 10950;
/**
* Creates a certificate for a device, signed with the CA
* @see https://docs.aws.amazon.com/iot/latest/developerguide/device-certs-your-own.html
*
* The device's CSR must already exist.
*/ export var createDeviceCertificate = function() {
var _ref = _async_to_generator(function(param) {
var certsDir, caId, log, debug, deviceId, daysValid, e, caFiles, deviceFiles, certWithCa;
return _ts_generator(this, function(_state) {
switch(_state.label){
case 0:
certsDir = param.certsDir, caId = param.caId, log = param.log, debug = param.debug, deviceId = param.deviceId, daysValid = param.daysValid;
_state.label = 1;
case 1:
_state.trys.push([
1,
3,
,
4
]);
return [
4,
fs.stat(certsDir)
];
case 2:
_state.sent();
return [
3,
4
];
case 3:
e = _state.sent();
throw new Error("".concat(certsDir, " does not exist."));
case 4:
log === null || log === void 0 ? void 0 : log("Generating certificate for device ".concat(deviceId));
caFiles = caFileLocations({
certsDir: certsDir,
id: caId
});
deviceFiles = deviceFileLocations({
certsDir: certsDir,
deviceId: deviceId
});
return [
4,
run({
command: 'openssl',
args: [
'x509',
'-req',
'-in',
deviceFiles.csr,
'-CAkey',
caFiles.key,
'-CA',
caFiles.cert,
'-CAcreateserial',
'-out',
deviceFiles.cert,
'-days',
"".concat(daysValid !== null && daysValid !== void 0 ? daysValid : defaultDeviceCertificateValidityInDays),
'-sha256'
],
log: {
debug: debug
}
})
];
case 5:
_state.sent();
return [
4,
Promise.all([
fs.readFile(deviceFiles.cert, 'utf-8'),
fs.readFile(caFiles.cert, 'utf-8')
])
];
case 6:
certWithCa = _state.sent().join(os.EOL);
return [
4,
fs.writeFile(deviceFiles.certWithCA, certWithCa, 'utf-8')
];
case 7:
_state.sent();
return [
2,
{
deviceId: deviceId
}
];
}
});
});
return function createDeviceCertificate(_) {
return _ref.apply(this, arguments);
};
}();