api-console-assets

<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"> <style> .KEYW {color: #933;} .COMM {color: #bbb; font-style: italic;} .NUMB {color: #393;} .STRN {color: #393;} .REGX {color: #339;} .line {border-right: 1px dotted #666; color: #666; font-style: normal;} </style></head><body><pre> 1 /* asn1x509-1.1.0.js (c) 2013-2017 Kenji Urushima | kjur.github.com/jsrsasign/license 2 */ 3 /* 4 * asn1x509.js - ASN.1 DER encoder classes for X.509 certificate 5 * 6 * Copyright (c) 2013-2017 Kenji Urushima (kenji.urushima@gmail.com) 7 * 8 * This software is licensed under the terms of the MIT License. 9 * https://kjur.github.io/jsrsasign/license 10 * 11 * The above copyright and license notice shall be 12 * included in all copies or substantial portions of the Software. 13 */ 14 15 /** 16 * @fileOverview 17 * @name asn1x509-1.0.js 18 * @author Kenji Urushima kenji.urushima@gmail.com 19 * @version jsrsasign 8.0.0 asn1x509 1.1.0 (2017-Jun-25) 20 * @since jsrsasign 2.1 21 * @license <a href="https://kjur.github.io/jsrsasign/license/">MIT License</a> 22 */ 23 24 /** 25 * kjur's class library name space 26 * // already documented in asn1-1.0.js 27 * @name KJUR 28 * @namespace kjur's class library name space 29 */ 30 if (typeof KJUR == "undefined" || !KJUR) KJUR = {}; 31 32 /** 33 * kjur's ASN.1 class library name space 34 * // already documented in asn1-1.0.js 35 * @name KJUR.asn1 36 * @namespace 37 */ 38 if (typeof KJUR.asn1 == "undefined" || !KJUR.asn1) KJUR.asn1 = {}; 39 40 /** 41 * kjur's ASN.1 class for X.509 certificate library name space 42 * 43 * <h4>FEATURES</h4> 44 * <ul> 45 * <li>easily issue any kind of certificate</li> 46 * <li>APIs are very similar to BouncyCastle library ASN.1 classes. So easy to learn.</li> 47 * </ul> 48 * 49 * <h4>PROVIDED CLASSES</h4> 50 * <ul> 51 * <li>{@link KJUR.asn1.x509.Certificate}</li> 52 * <li>{@link KJUR.asn1.x509.TBSCertificate}</li> 53 * <li>{@link KJUR.asn1.x509.Extension}</li> 54 * <li>{@link KJUR.asn1.x509.X500Name}</li> 55 * <li>{@link KJUR.asn1.x509.RDN}</li> 56 * <li>{@link KJUR.asn1.x509.AttributeTypeAndValue}</li> 57 * <li>{@link KJUR.asn1.x509.SubjectPublicKeyInfo}</li> 58 * <li>{@link KJUR.asn1.x509.AlgorithmIdentifier}</li> 59 * <li>{@link KJUR.asn1.x509.GeneralName}</li> 60 * <li>{@link KJUR.asn1.x509.GeneralNames}</li> 61 * <li>{@link KJUR.asn1.x509.DistributionPointName}</li> 62 * <li>{@link KJUR.asn1.x509.DistributionPoint}</li> 63 * <li>{@link KJUR.asn1.x509.CRL}</li> 64 * <li>{@link KJUR.asn1.x509.TBSCertList}</li> 65 * <li>{@link KJUR.asn1.x509.CRLEntry}</li> 66 * <li>{@link KJUR.asn1.x509.OID}</li> 67 * </ul> 68 * <h4>SUPPORTED EXTENSIONS</h4> 69 * <ul> 70 * <li>{@link KJUR.asn1.x509.BasicConstraints}</li> 71 * <li>{@link KJUR.asn1.x509.KeyUsage}</li> 72 * <li>{@link KJUR.asn1.x509.CRLDistributionPoints}</li> 73 * <li>{@link KJUR.asn1.x509.ExtKeyUsage}</li> 74 * <li>{@link KJUR.asn1.x509.AuthorityKeyIdentifier}</li> 75 * <li>{@link KJUR.asn1.x509.AuthorityInfoAccess}</li> 76 * <li>{@link KJUR.asn1.x509.SubjectAltName}</li> 77 * <li>{@link KJUR.asn1.x509.IssuerAltName}</li> 78 * </ul> 79 * NOTE1: Please ignore method summary and document of this namespace. This caused by a bug of jsdoc2. 80 * NOTE2: SubjectAltName and IssuerAltName extension were supported since 81 * jsrsasign 6.2.3 asn1x509 1.0.19. 82 * @name KJUR.asn1.x509 83 * @namespace 84 */ 85 if (typeof KJUR.asn1.x509 == "undefined" || !KJUR.asn1.x509) KJUR.asn1.x509 = {}; 86 87 // === BEGIN Certificate =================================================== 88 89 /** 90 * X.509 Certificate class to sign and generate hex encoded certificate 91 * @name KJUR.asn1.x509.Certificate 92 * @class X.509 Certificate class to sign and generate hex encoded certificate 93 * @param {Array} params associative array of parameters (ex. {'tbscertobj': obj, 'prvkeyobj': key}) 94 * @extends KJUR.asn1.ASN1Object 95 * @description 96 * 97 * As for argument 'params' for constructor, you can specify one of 98 * following properties: 99 * <ul> 100 * <li>tbscertobj - specify {@link KJUR.asn1.x509.TBSCertificate} object</li> 101 * <li>prvkeyobj - specify {@link RSAKey}, {@link KJUR.crypto.ECDSA} or {@link KJUR.crypto.DSA} object for CA private key to sign the certificate</li> 102 * </ul> 103 * NOTE1: 'params' can be omitted. 104 * NOTE2: DSA/ECDSA is also supported for CA signging key from asn1x509 1.0.6. 105 * @example 106 * var caKey = KEYUTIL.getKey(caKeyPEM); // CA's private key 107 * var cert = new KJUR.asn1x509.Certificate({'tbscertobj': tbs, 'prvkeyobj': caKey}); 108 * cert.sign(); // issue certificate by CA's private key 109 * var certPEM = cert.getPEMString(); 110 * 111 * // Certificate ::= SEQUENCE { 112 * // tbsCertificate TBSCertificate, 113 * // signatureAlgorithm AlgorithmIdentifier, 114 * // signature BIT STRING } 115 */ 116 KJUR.asn1.x509.Certificate = function(params) { 117 KJUR.asn1.x509.Certificate.superclass.constructor.call(this); 118 var asn1TBSCert = null, 119 asn1SignatureAlg = null, 120 asn1Sig = null, 121 hexSig = null, 122 prvKey = null, 123 _KJUR = KJUR, 124 _KJUR_crypto = _KJUR.crypto, 125 _KJUR_asn1 = _KJUR.asn1, 126 _DERSequence = _KJUR_asn1.DERSequence, 127 _DERBitString = _KJUR_asn1.DERBitString; 128 129 /** 130 * sign TBSCertificate and set signature value internally 131 * @name sign 132 * @memberOf KJUR.asn1.x509.Certificate# 133 * @function 134 * @description 135 * @example 136 * var cert = new KJUR.asn1.x509.Certificate({tbscertobj: tbs, prvkeyobj: prvKey}); 137 * cert.sign(); 138 */ 139 this.sign = function() { 140 this.asn1SignatureAlg = this.asn1TBSCert.asn1SignatureAlg; 141 142 var sig = new KJUR.crypto.Signature({alg: this.asn1SignatureAlg.nameAlg}); 143 sig.init(this.prvKey); 144 sig.updateHex(this.asn1TBSCert.getEncodedHex()); 145 this.hexSig = sig.sign(); 146 147 this.asn1Sig = new _DERBitString({'hex': '00' + this.hexSig}); 148 149 var seq = new _DERSequence({'array': [this.asn1TBSCert, 150 this.asn1SignatureAlg, 151 this.asn1Sig]}); 152 this.hTLV = seq.getEncodedHex(); 153 this.isModified = false; 154 }; 155 156 /** 157 * set signature value internally by hex string 158 * @name setSignatureHex 159 * @memberOf KJUR.asn1.x509.Certificate# 160 * @function 161 * @since asn1x509 1.0.8 162 * @description 163 * @example 164 * var cert = new KJUR.asn1.x509.Certificate({'tbscertobj': tbs}); 165 * cert.setSignatureHex('01020304'); 166 */ 167 this.setSignatureHex = function(sigHex) { 168 this.asn1SignatureAlg = this.asn1TBSCert.asn1SignatureAlg; 169 this.hexSig = sigHex; 170 this.asn1Sig = new _DERBitString({'hex': '00' + this.hexSig}); 171 172 var seq = new _DERSequence({'array': [this.asn1TBSCert, 173 this.asn1SignatureAlg, 174 this.asn1Sig]}); 175 this.hTLV = seq.getEncodedHex(); 176 this.isModified = false; 177 }; 178 179 this.getEncodedHex = function() { 180 if (this.isModified == false && this.hTLV != null) return this.hTLV; 181 throw "not signed yet"; 182 }; 183 184 /** 185 * get PEM formatted certificate string after signed 186 * @name getPEMString 187 * @memberOf KJUR.asn1.x509.Certificate# 188 * @function 189 * @return PEM formatted string of certificate 190 * @description 191 * @example 192 * var cert = new KJUR.asn1.x509.Certificate({'tbscertobj': tbs, 'prvkeyobj': prvKey}); 193 * cert.sign(); 194 * var sPEM = cert.getPEMString(); 195 */ 196 this.getPEMString = function() { 197 var pemBody = hextob64nl(this.getEncodedHex()); 198 return "-----BEGIN CERTIFICATE-----\r\n" + 199 pemBody + 200 "\r\n-----END CERTIFICATE-----\r\n"; 201 }; 202 203 if (params !== undefined) { 204 if (params.tbscertobj !== undefined) { 205 this.asn1TBSCert = params.tbscertobj; 206 } 207 if (params.prvkeyobj !== undefined) { 208 this.prvKey = params.prvkeyobj; 209 } 210 } 211 }; 212 YAHOO.lang.extend(KJUR.asn1.x509.Certificate, KJUR.asn1.ASN1Object); 213 214 /** 215 * ASN.1 TBSCertificate structure class 216 * @name KJUR.asn1.x509.TBSCertificate 217 * @class ASN.1 TBSCertificate structure class 218 * @param {Array} params associative array of parameters (ex. {}) 219 * @extends KJUR.asn1.ASN1Object 220 * @description 221 * 222 * <h4>EXAMPLE</h4> 223 * @example 224 * var o = new KJUR.asn1.x509.TBSCertificate(); 225 * o.setSerialNumberByParam({'int': 4}); 226 * o.setSignatureAlgByParam({'name': 'SHA1withRSA'}); 227 * o.setIssuerByParam({'str': '/C=US/O=a'}); 228 * o.setNotBeforeByParam({'str': '130504235959Z'}); 229 * o.setNotAfterByParam({'str': '140504235959Z'}); 230 * o.setSubjectByParam({'str': '/C=US/CN=b'}); 231 * o.setSubjectPublicKey(rsaPubKey); 232 * o.appendExtension(new KJUR.asn1.x509.BasicConstraints({'cA':true})); 233 * o.appendExtension(new KJUR.asn1.x509.KeyUsage({'bin':'11'})); 234 */ 235 KJUR.asn1.x509.TBSCertificate = function(params) { 236 KJUR.asn1.x509.TBSCertificate.superclass.constructor.call(this); 237 238 var _KJUR = KJUR, 239 _KJUR_asn1 = _KJUR.asn1, 240 _DERSequence = _KJUR_asn1.DERSequence, 241 _DERInteger = _KJUR_asn1.DERInteger, 242 _DERTaggedObject = _KJUR_asn1.DERTaggedObject, 243 _KJUR_asn1_x509 = _KJUR_asn1.x509, 244 _Time = _KJUR_asn1_x509.Time, 245 _X500Name = _KJUR_asn1_x509.X500Name, 246 _SubjectPublicKeyInfo = _KJUR_asn1_x509.SubjectPublicKeyInfo; 247 248 this._initialize = function() { 249 this.asn1Array = new Array(); 250 251 this.asn1Version = 252 new _DERTaggedObject({'obj': new _DERInteger({'int': 2})}); 253 this.asn1SerialNumber = null; 254 this.asn1SignatureAlg = null; 255 this.asn1Issuer = null; 256 this.asn1NotBefore = null; 257 this.asn1NotAfter = null; 258 this.asn1Subject = null; 259 this.asn1SubjPKey = null; 260 this.extensionsArray = new Array(); 261 }; 262 263 /** 264 * set serial number field by parameter 265 * @name setSerialNumberByParam 266 * @memberOf KJUR.asn1.x509.TBSCertificate# 267 * @function 268 * @param {Array} intParam DERInteger param 269 * @description 270 * @example 271 * tbsc.setSerialNumberByParam({'int': 3}); 272 */ 273 this.setSerialNumberByParam = function(intParam) { 274 this.asn1SerialNumber = new _DERInteger(intParam); 275 }; 276 277 /** 278 * set signature algorithm field by parameter 279 * @name setSignatureAlgByParam 280 * @memberOf KJUR.asn1.x509.TBSCertificate# 281 * @function 282 * @param {Array} algIdParam AlgorithmIdentifier parameter 283 * @description 284 * @example 285 * tbsc.setSignatureAlgByParam({'name': 'SHA1withRSA'}); 286 */ 287 this.setSignatureAlgByParam = function(algIdParam) { 288 this.asn1SignatureAlg = new _KJUR_asn1_x509.AlgorithmIdentifier(algIdParam); 289 }; 290 291 /** 292 * set issuer name field by parameter 293 * @name setIssuerByParam 294 * @memberOf KJUR.asn1.x509.TBSCertificate# 295 * @function 296 * @param {Array} x500NameParam X500Name parameter 297 * @description 298 * @example 299 * tbsc.setIssuerParam({'str': '/C=US/CN=b'}); 300 * @see KJUR.asn1.x509.X500Name 301 */ 302 this.setIssuerByParam = function(x500NameParam) { 303 this.asn1Issuer = new _X500Name(x500NameParam); 304 }; 305 306 /** 307 * set notBefore field by parameter 308 * @name setNotBeforeByParam 309 * @memberOf KJUR.asn1.x509.TBSCertificate# 310 * @function 311 * @param {Array} timeParam Time parameter 312 * @description 313 * @example 314 * tbsc.setNotBeforeByParam({'str': '130508235959Z'}); 315 * @see KJUR.asn1.x509.Time 316 */ 317 this.setNotBeforeByParam = function(timeParam) { 318 this.asn1NotBefore = new _Time(timeParam); 319 }; 320 321 /** 322 * set notAfter field by parameter 323 * @name setNotAfterByParam 324 * @memberOf KJUR.asn1.x509.TBSCertificate# 325 * @function 326 * @param {Array} timeParam Time parameter 327 * @description 328 * @example 329 * tbsc.setNotAfterByParam({'str': '130508235959Z'}); 330 * @see KJUR.asn1.x509.Time 331 */ 332 this.setNotAfterByParam = function(timeParam) { 333 this.asn1NotAfter = new _Time(timeParam); 334 }; 335 336 /** 337 * set subject name field by parameter 338 * @name setSubjectByParam 339 * @memberOf KJUR.asn1.x509.TBSCertificate# 340 * @function 341 * @param {Array} x500NameParam X500Name parameter 342 * @description 343 * @example 344 * tbsc.setSubjectParam({'str': '/C=US/CN=b'}); 345 * @see KJUR.asn1.x509.X500Name 346 */ 347 this.setSubjectByParam = function(x500NameParam) { 348 this.asn1Subject = new _X500Name(x500NameParam); 349 }; 350 351 /** 352 * set subject public key info field by key object 353 * @name setSubjectPublicKey 354 * @memberOf KJUR.asn1.x509.TBSCertificate# 355 * @function 356 * @param {Array} param {@link KJUR.asn1.x509.SubjectPublicKeyInfo} class constructor parameter 357 * @description <sp