api-console-assets

<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"> <style> .KEYW {color: #933;} .COMM {color: #bbb; font-style: italic;} .NUMB {color: #393;} .STRN {color: #393;} .REGX {color: #339;} .line {border-right: 1px dotted #666; color: #666; font-style: normal;} </style></head><body><pre> 1 /* asn1ocsp-1.0.3.js (c) 2016 Kenji Urushima | kjur.github.com/jsrsasign/license 2 */ 3 /* 4 * asn1ocsp.js - ASN.1 DER encoder classes for OCSP protocol 5 * 6 * Copyright (c) 2016-2017 Kenji Urushima (kenji.urushima@gmail.com) 7 * 8 * This software is licensed under the terms of the MIT License. 9 * https://kjur.github.io/jsrsasign/license 10 * 11 * The above copyright and license notice shall be 12 * included in all copies or substantial portions of the Software. 13 */ 14 15 /** 16 * @fileOverview 17 * @name asn1ocsp-1.0.js 18 * @author Kenji Urushima kenji.urushima@gmail.com 19 * @version jsrsasign 7.2.1 asn1ocsp 1.0.3 (2017-Jun-03) 20 * @since jsrsasign 6.1.0 21 * @license <a href="https://kjur.github.io/jsrsasign/license/">MIT License</a> 22 */ 23 24 if (typeof KJUR == "undefined" || !KJUR) KJUR = {}; 25 if (typeof KJUR.asn1 == "undefined" || !KJUR.asn1) KJUR.asn1 = {}; 26 27 /** 28 * ASN.1 classes for OCSP protocol 29 * 30 * This name space provides 31 * <a href="https://tools.ietf.org/html/rfc6960">RFC 6960 32 * Online Certificate Status Protocol (OCSP)</a> ASN.1 request and response generator. 33 * 34 * <h4>FEATURES</h4> 35 * <ul> 36 * <li>easily generate OCSP data</li> 37 * </ul> 38 * 39 * <h4>PROVIDED CLASSES</h4> 40 * <ul> 41 * <li>{@link KJUR.asn1.ocsp.CertID} for ASN.1 class as defined in 42 * <a href="https://tools.ietf.org/html/rfc6960#section-4.1.1">RFC 6960 4.1.1</a>. </li> 43 * <li>{@link KJUR.asn1.ocsp.Request} for ASN.1 class as defined in 44 * <a href="https://tools.ietf.org/html/rfc6960#section-4.1.1">RFC 6960 4.1.1</a>. </li> 45 * <li>{@link KJUR.asn1.ocsp.TBSRequest} for ASN.1 class as defined in 46 * <a href="https://tools.ietf.org/html/rfc6960#section-4.1.1">RFC 6960 4.1.1</a>. </li> 47 * <li>{@link KJUR.asn1.ocsp.OCSPRequest} for ASN.1 class as defined in 48 * <a href="https://tools.ietf.org/html/rfc6960#section-4.1.1">RFC 6960 4.1.1</a>. </li> 49 * <li>{@link KJUR.asn1.ocsp.OCSPUtil} for static utility methods.</li> 50 * </ul> 51 * 52 * @name KJUR.asn1.ocsp 53 * @namespace 54 */ 55 if (typeof KJUR.asn1.ocsp == "undefined" || !KJUR.asn1.ocsp) KJUR.asn1.ocsp = {}; 56 57 KJUR.asn1.ocsp.DEFAULT_HASH = "sha1"; 58 59 /** 60 * ASN.1 CertID class for OCSP 61 * @name KJUR.asn1.ocsp.CertID 62 * @class ASN.1 CertID class for OCSP 63 * @param {Array} params associative array of parameters 64 * @extends KJUR.asn1.ASN1Object 65 * @since jsrsasign 6.1.0 asn1ocsp 1.0.0 66 * @description 67 * CertID ASN.1 class is defined in 68 * <a href="https://tools.ietf.org/html/rfc6960#section-4.1.1">RFC 6960 4.1.1</a>. 69 * <pre> 70 * CertID ::= SEQUENCE { 71 * hashAlgorithm AlgorithmIdentifier, 72 * issuerNameHash OCTET STRING, -- Hash of issuer's DN 73 * issuerKeyHash OCTET STRING, -- Hash of issuer's public key 74 * serialNumber CertificateSerialNumber } 75 * </pre> 76 * @example 77 * // default constructor 78 * o = new KJUR.asn1.ocsp.CertID(); 79 * // constructor with certs (sha1 is used by default) 80 * o = new KJUR.asn1.ocsp.CertID({issuerCert: "-----BEGIN...", subjectCert: "-----BEGIN..."}); 81 * // constructor with certs and sha256 82 * o = new KJUR.asn1.ocsp.CertID({issuerCert: "-----BEGIN...", subjectCert: "-----BEGIN...", alg: "sha256"}); 83 * // constructor with values 84 * o = new KJUR.asn1.ocsp.CertID({namehash: "1a...", keyhash: "ad...", serial: "1234", alg: "sha256"}); 85 */ 86 KJUR.asn1.ocsp.CertID = function(params) { 87 var _KJUR = KJUR, 88 _KJUR_asn1 = _KJUR.asn1, 89 _DEROctetString = _KJUR_asn1.DEROctetString, 90 _DERInteger = _KJUR_asn1.DERInteger, 91 _DERSequence = _KJUR_asn1.DERSequence, 92 _KJUR_asn1_x509 = _KJUR_asn1.x509, 93 _AlgorithmIdentifier = _KJUR_asn1_x509.AlgorithmIdentifier, 94 _KJUR_asn1_ocsp = _KJUR_asn1.ocsp, 95 _DEFAULT_HASH = _KJUR_asn1_ocsp.DEFAULT_HASH, 96 _KJUR_crypto = _KJUR.crypto, 97 _hashHex = _KJUR_crypto.Util.hashHex, 98 _X509 = X509, 99 _ASN1HEX = ASN1HEX; 100 101 _KJUR_asn1_ocsp.CertID.superclass.constructor.call(this); 102 103 this.dHashAlg = null; 104 this.dIssuerNameHash = null; 105 this.dIssuerKeyHash = null; 106 this.dSerialNumber = null; 107 108 /** 109 * set CertID ASN.1 object by values. 110 * @name setByValue 111 * @memberOf KJUR.asn1.ocsp.CertID# 112 * @function 113 * @param {String} issuerNameHashHex hexadecimal string of hash value of issuer name 114 * @param {String} issuerKeyHashHex hexadecimal string of hash value of issuer public key 115 * @param {String} serialNumberHex hexadecimal string of certificate serial number to be verified 116 * @param {String} algName hash algorithm name used for above arguments (ex. "sha1") DEFAULT: sha1 117 * @since jsrsasign 6.1.0 asn1ocsp 1.0.0 118 * @example 119 * o = new KJUR.asn1.ocsp.CertID(); 120 * o.setByValue("1fac...", "fd3a...", "1234"); // sha1 is used by default 121 * o.setByValue("1fac...", "fd3a...", "1234", "sha256"); 122 */ 123 this.setByValue = function(issuerNameHashHex, issuerKeyHashHex, 124 serialNumberHex, algName) { 125 if (algName === undefined) algName = _DEFAULT_HASH; 126 this.dHashAlg = new _AlgorithmIdentifier({name: algName}); 127 this.dIssuerNameHash = new _DEROctetString({hex: issuerNameHashHex}); 128 this.dIssuerKeyHash = new _DEROctetString({hex: issuerKeyHashHex}); 129 this.dSerialNumber = new _DERInteger({hex: serialNumberHex}); 130 }; 131 132 /** 133 * set CertID ASN.1 object by PEM certificates. 134 * @name setByCert 135 * @memberOf KJUR.asn1.ocsp.CertID# 136 * @function 137 * @param {String} issuerCert string of PEM issuer certificate 138 * @param {String} subjectCert string of PEM subject certificate to be verified by OCSP 139 * @param {String} algName hash algorithm name used for above arguments (ex. "sha1") DEFAULT: sha1 140 * @since jsrsasign 6.1.0 asn1ocsp 1.0.0 141 * @example 142 * o = new KJUR.asn1.ocsp.CertID(); 143 * o.setByCert("-----BEGIN...", "-----BEGIN..."); // sha1 is used by default 144 * o.setByCert("-----BEGIN...", "-----BEGIN...", "sha256"); 145 */ 146 this.setByCert = function(issuerCert, subjectCert, algName) { 147 if (algName === undefined) algName = _DEFAULT_HASH; 148 149 var xSbj = new _X509(); 150 xSbj.readCertPEM(subjectCert); 151 var xIss = new _X509(); 152 xIss.readCertPEM(issuerCert); 153 154 var hISS_SPKI = xIss.getPublicKeyHex(); 155 var issuerKeyHex = _ASN1HEX.getTLVbyList(hISS_SPKI, 0, [1, 0], "30"); 156 157 var serialNumberHex = xSbj.getSerialNumberHex(); 158 var issuerNameHashHex = _hashHex(xIss.getSubjectHex(), algName); 159 var issuerKeyHashHex = _hashHex(issuerKeyHex, algName); 160 this.setByValue(issuerNameHashHex, issuerKeyHashHex, 161 serialNumberHex, algName); 162 this.hoge = xSbj.getSerialNumberHex(); 163 }; 164 165 this.getEncodedHex = function() { 166 if (this.dHashAlg === null && 167 this.dIssuerNameHash === null && 168 this.dIssuerKeyHash === null && 169 this.dSerialNumber === null) 170 throw "not yet set values"; 171 172 var a = [this.dHashAlg, this.dIssuerNameHash, 173 this.dIssuerKeyHash, this.dSerialNumber]; 174 var seq = new _DERSequence({array: a}); 175 this.hTLV = seq.getEncodedHex(); 176 return this.hTLV; 177 }; 178 179 if (params !== undefined) { 180 var p = params; 181 if (p.issuerCert !== undefined && 182 p.subjectCert !== undefined) { 183 var alg = _DEFAULT_HASH; 184 if (p.alg === undefined) alg = undefined; 185 this.setByCert(p.issuerCert, p.subjectCert, alg); 186 } else if (p.namehash !== undefined && 187 p.keyhash !== undefined && 188 p.serial !== undefined) { 189 var alg = _DEFAULT_HASH; 190 if (p.alg === undefined) alg = undefined; 191 this.setByValue(p.namehash, p.keyhash, p.serial, alg); 192 } else { 193 throw "invalid constructor arguments"; 194 } 195 } 196 }; 197 YAHOO.lang.extend(KJUR.asn1.ocsp.CertID, KJUR.asn1.ASN1Object); 198 199 /** 200 * ASN.1 Request class for OCSP 201 * @name KJUR.asn1.ocsp.Request 202 * @class ASN.1 Request class for OCSP 203 * @param {Array} params associative array of parameters 204 * @extends KJUR.asn1.ASN1Object 205 * @since jsrsasign 6.1.0 asn1ocsp 1.0.0 206 * @description 207 * Request ASN.1 class is defined in 208 * <a href="https://tools.ietf.org/html/rfc6960#section-4.1.1">RFC 6960 4.1.1</a>. 209 * singleRequestExtensions is not supported yet in this version such as nonce. 210 * <pre> 211 * Request ::= SEQUENCE { 212 * reqCert CertID, 213 * singleRequestExtensions [0] EXPLICIT Extensions OPTIONAL } 214 * </pre> 215 * @example 216 * // default constructor 217 * o = new KJUR.asn1.ocsp.Request(); 218 * // constructor with certs (sha1 is used by default) 219 * o = new KJUR.asn1.ocsp.Request({issuerCert: "-----BEGIN...", subjectCert: "-----BEGIN..."}); 220 * // constructor with certs and sha256 221 * o = new KJUR.asn1.ocsp.Request({issuerCert: "-----BEGIN...", subjectCert: "-----BEGIN...", alg: "sha256"}); 222 * // constructor with values 223 * o = new KJUR.asn1.ocsp.Request({namehash: "1a...", keyhash: "ad...", serial: "1234", alg: "sha256"}); 224 */ 225 KJUR.asn1.ocsp.Request = function(params) { 226 var _KJUR = KJUR, 227 _KJUR_asn1 = _KJUR.asn1, 228 _DERSequence = _KJUR_asn1.DERSequence, 229 _KJUR_asn1_ocsp = _KJUR_asn1.ocsp; 230 231 _KJUR_asn1_ocsp.Request.superclass.constructor.call(this); 232 this.dReqCert = null; 233 this.dExt = null; 234 235 this.getEncodedHex = function() { 236 var a = []; 237 238 // 1. reqCert 239 if (this.dReqCert === null) 240 throw "reqCert not set"; 241 a.push(this.dReqCert); 242 243 // 2. singleRequestExtensions (not supported yet) 244 245 // 3. construct SEQUENCE 246 var seq = new _DERSequence({array: a}); 247 this.hTLV = seq.getEncodedHex(); 248 return this.hTLV; 249 }; 250 251 if (typeof params !== "undefined") { 252 var o = new _KJUR_asn1_ocsp.CertID(params); 253 this.dReqCert = o; 254 } 255 }; 256 YAHOO.lang.extend(KJUR.asn1.ocsp.Request, KJUR.asn1.ASN1Object); 257 258 /** 259 * ASN.1 TBSRequest class for OCSP 260 * @name KJUR.asn1.ocsp.TBSRequest 261 * @class ASN.1 TBSRequest class for OCSP 262 * @param {Array} params associative array of parameters 263 * @extends KJUR.asn1.ASN1Object 264 * @since jsrsasign 6.1.0 asn1ocsp 1.0.0 265 * @description 266 * TBSRequest ASN.1 class is defined in 267 * <a href="https://tools.ietf.org/html/rfc6960#section-4.1.1">RFC 6960 4.1.1</a>. 268 * <pre> 269 * TBSRequest ::= SEQUENCE { 270 * version [0] EXPLICIT Version DEFAULT v1, 271 * requestorName [1] EXPLICIT GeneralName OPTIONAL, 272 * requestList SEQUENCE OF Request, 273 * requestExtensions [2] EXPLICIT Extensions OPTIONAL } 274 * </pre> 275 * @example 276 * // default constructor 277 * o = new KJUR.asn1.ocsp.TBSRequest(); 278 * // constructor with requestList parameter 279 * o = new KJUR.asn1.ocsp.TBSRequest({reqList:[ 280 * {issuerCert: "-----BEGIN...", subjectCert: "-----BEGIN...", alg:}, 281 * {issuerCert: "-----BEGIN...", subjectCert: "-----BEGIN...", alg: "sha256"} 282 * ]}); 283 */ 284 KJUR.asn1.ocsp.TBSRequest = function(params) { 285 var _KJUR = KJUR, 286 _KJUR_asn1 = _KJUR.asn1, 287 _DERSequence = _KJUR_asn1.DERSequence, 288 _KJUR_asn1_ocsp = _KJUR_asn1.ocsp; 289 290 _KJUR_asn1_ocsp.TBSRequest.superclass.constructor.call(this); 291 this.version = 0; 292 <