fabric-network
Version:
SDK for writing node.js applications to interact with Hyperledger Fabric. This package encapsulates the APIs to connect to a Fabric network, submit transactions and perform queries against the ledger.
85 lines • 2.98 kB
JavaScript
;
/*
* Copyright 2019 IBM All Rights Reserved.
*
* SPDX-License-Identifier: Apache-2.0
*/
Object.defineProperty(exports, "__esModule", { value: true });
exports.HsmX509Provider = void 0;
const fabric_common_1 = require("fabric-common");
/**
* Identity provider to handle X.509 identities where the private key is stored in a hardware security module.
* @memberof module:fabric-network
* @implements module:fabric-network.IdentityProvider
*/
class HsmX509Provider {
/**
* Create a provider instance.
* @param {module:fabric-network.HsmOptions} [options={}] Options specifying how to connect to the HSM. Mandatory
* unless this information is provided through external configuration.
*/
constructor(options = {}) {
this.type = 'HSM-X.509';
// options.software must be set to false to enable HSM
const cryptoOptions = Object.assign({}, options, { software: false });
this.cryptoSuite = fabric_common_1.User.newCryptoSuite(cryptoOptions);
}
getCryptoSuite() {
return this.cryptoSuite;
}
fromJson(data) {
if (data.type !== this.type) {
throw new Error('Invalid identity type: ' + data.type);
}
if (data.version === 2) {
const x509Data = data;
return {
credentials: {
certificate: x509Data.credentials.certificate,
},
mspId: x509Data.mspId,
type: 'HSM-X.509',
};
}
else if (data.version === 1) {
const x509Data = data;
return {
credentials: {
certificate: x509Data.credentials.certificate,
},
mspId: x509Data.mspId,
type: 'HSM-X.509',
};
}
else {
throw new Error(`Unsupported identity version: ${data.version}`);
}
}
toJson(identity) {
const data = {
credentials: {
certificate: identity.credentials.certificate,
},
mspId: identity.mspId,
type: 'HSM-X.509',
version: 1,
};
return data;
}
async getUserContext(identity, name) {
if (!identity) {
throw Error('HSM X.509 identity is missing');
}
else if (!identity.credentials) {
throw Error('HSM X.509 identity is missing the credential data.');
}
const user = new fabric_common_1.User(name);
user.setCryptoSuite(this.cryptoSuite);
const publicKey = await this.cryptoSuite.importKey(identity.credentials.certificate);
const privateKey = await this.cryptoSuite.getKey(publicKey.getSKI());
await user.setEnrollment(privateKey, identity.credentials.certificate, identity.mspId);
return user;
}
}
exports.HsmX509Provider = HsmX509Provider;
//# sourceMappingURL=hsmx509identity.js.map