xml-fiesta
Version:
Electronic signed document XML Protocol for Node & Browser
1,178 lines (1,161 loc) • 1.49 MB
JavaScript
(function(f){if(typeof exports==="object"&&typeof module!=="undefined"){module.exports=f()}else if(typeof define==="function"&&define.amd){define([],f)}else{var g;if(typeof window!=="undefined"){g=window}else if(typeof global!=="undefined"){g=global}else if(typeof self!=="undefined"){g=self}else{g=this}g.XMLFiesta = f()}})(function(){var define,module,exports;return (function(){function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);var a=new Error("Cannot find module '"+i+"'");throw a.code="MODULE_NOT_FOUND",a}var p=n[i]={exports:{}};e[i][0].call(p.exports,function(r){var n=e[i][1][r];return o(n||r)},p,p.exports,r,e,n,t)}return n[i].exports}for(var u="function"==typeof require&&require,i=0;i<t.length;i++)o(t[i]);return o}return r})()({1:[function(require,module,exports){
"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
var errors_1 = require("./errors");
var common_1 = require("./common");
var parseDate = function (certDate) {
var parsed = certDate.match(/(\d{2})(\d{2})(\d{2})(\d{2})(\d{2})(\d{2})Z/);
parsed.shift(1);
return new Date(Date.UTC(2000 + parseInt(parsed[0]), parsed[1], parsed[2], parsed[3], parsed[4], parsed[5]));
};
var jsrsasign = require('jsrsasign');
jsrsasign.X509.hex2dnobj = function (e) {
var f = {};
var c = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(e, 0);
var d = 0;
while (d < c.length) {
var b = jsrsasign.ASN1HEX.getHexOfTLV_AtObj(e, c[d]);
try {
var rdn = jsrsasign.X509.hex2rdnobj(b);
f[rdn[0]] = rdn[1];
}
catch (err) {
console.error(err);
}
d++;
}
return f;
};
jsrsasign.X509.hex2rdnobj = function (a) {
var f = jsrsasign.ASN1HEX.getDecendantHexTLVByNthList(a, 0, [0, 0]);
var e = jsrsasign.ASN1HEX.getDecendantHexVByNthList(a, 0, [0, 1]);
var c = '';
try {
c = jsrsasign.X509.DN_ATTRHEX[f];
}
catch (b) {
c = f;
}
var d = jsrsasign.hextorstr(e);
return [c, d];
};
jsrsasign.X509.prototype.getSubjectObject = function () {
return jsrsasign.X509.hex2dnobj(jsrsasign.ASN1HEX.getDecendantHexTLVByNthList(this.hex, 0, [0, 5]));
};
jsrsasign.X509.DN_ATTRHEX = {
'0603550406': 'C',
'060355040a': 'O',
'060355040b': 'OU',
'0603550403': 'CN',
'0603550405': 'serialNumber',
'0603550408': 'ST',
'0603550407': 'L',
'060355042d': 'UI',
'0603550409': 'street',
'0603550429': 'name',
'0603550411': 'postalCode',
'06092a864886f70d010901': 'emailAddress',
'06092a864886f70d010902': 'unstructuredName'
};
var certFirstBytes = '2d2d2d2d2d424547494e2043455254494649434154452d2d2d2d2d0a4d49494';
var Certificate = (function () {
function Certificate(binaryString, hexString) {
var hex = binaryString ? jsrsasign.rstrtohex(binaryString) : hexString;
this.binaryString = binaryString;
if ((!binaryString && !hex) ||
(binaryString && binaryString.length === 0) ||
(hex &&
!jsrsasign.ASN1HEX.isASN1HEX(hex) &&
!hex.startsWith(certFirstBytes))) {
throw new errors_1.CertificateError("The certificate is not valid.");
}
if (hex.startsWith(certFirstBytes)) {
this.pem = jsrsasign.hextorstr(hex);
}
else {
this.pem = jsrsasign.asn1.ASN1Util.getPEMStringFromHex(hex, "CERTIFICATE");
}
this.certificate = new jsrsasign.X509();
this.certificate.readCertPEM(this.pem);
this.hex = this.certificate.hex;
this.subject = this.certificate.getSubjectObject();
}
Certificate.prototype.toBinaryString = function () {
return this.binaryString;
};
Certificate.prototype.toHex = function () {
return this.certificate.hex;
};
Certificate.prototype.toPem = function () {
return this.pem;
};
Certificate.prototype.getX509 = function () {
return this.certificate;
};
Certificate.prototype.getSerialNumberHex = function () {
return this.certificate.getSerialNumberHex();
};
Certificate.prototype.getSerialNumber = function () {
return common_1.hextoAscii(this.getSerialNumberHex());
};
Certificate.prototype.getSubject = function () {
return this.subject;
};
Certificate.prototype.email = function () {
return this.subject.emailAddress;
};
Certificate.prototype.owner = function () {
return this.subject.name;
};
Certificate.prototype.owner_id = function () {
var identifier = this.getUniqueIdentifier();
return identifier[0];
};
Certificate.prototype.getUniqueIdentifier = function () {
if (this.subject.UI) {
return this.subject.UI.split(" / ");
}
else {
return null;
}
};
Certificate.prototype.getRSAPublicKey = function () {
if (this.pubKey) {
return this.pubKey;
}
return (this.pubKey = this.certificate.subjectPublicKeyRSA);
};
Certificate.prototype.verifyString = function (string, signedHexString, alg) {
try {
if (alg == null) {
alg = "SHA256withRSA";
}
var sig = new jsrsasign.crypto.Signature({ alg: alg });
sig.init(this.pem);
sig.updateString(string);
return sig.verify(signedHexString);
}
catch (error) {
return false;
}
};
Certificate.prototype.verifyHexString = function (hexString, signedHexString, alg) {
try {
if (alg == null) {
alg = "SHA256withRSA";
}
var sig = new jsrsasign.crypto.Signature({ alg: alg });
sig.init(this.pem);
sig.updateHex(hexString);
return sig.verify(signedHexString);
}
catch (error) {
return false;
}
};
Certificate.prototype.getUniqueIdentifierString = function (joinVal) {
joinVal = joinVal ? joinVal : ", ";
var identifiers = this.getUniqueIdentifier();
return identifiers.join(joinVal);
};
Certificate.prototype.hasExpired = function () {
var notAfter = parseDate(this.certificate.getNotAfter());
return notAfter.getTime() < new Date().getTime();
};
Certificate.prototype.isValidOn = function (date) {
var notAfter = parseDate(this.certificate.getNotAfter());
var notBefore = parseDate(this.certificate.getNotBefore());
return (notAfter.getTime() >= date.getTime() &&
date.getTime() >= notBefore.getTime());
};
Certificate.prototype.algorithm = function () {
return this.certificate.getSignatureAlgorithmField();
};
Certificate.prototype.tbsCertificate = function () {
return jsrsasign.ASN1HEX.getDecendantHexTLVByNthList(this.hex, 0, [0]);
};
Certificate.prototype.signature = function () {
return jsrsasign.X509.getSignatureValueHex(this.hex);
};
Certificate.prototype.isCa = function (rootCaPem, rootCaHex) {
if (rootCaHex === void 0) { rootCaHex = null; }
try {
var rootCaCert = void 0;
if (rootCaHex) {
rootCaCert = new Certificate(null, rootCaHex);
}
else {
rootCaCert = new jsrsasign.X509();
rootCaCert.readCertPEM(rootCaPem);
var rootCaIsCa = jsrsasign.X509.getExtBasicConstraints(rootCaCert.hex).cA;
if (!rootCaIsCa) {
return false;
}
rootCaCert = new Certificate(null, rootCaCert.hex);
}
return rootCaCert.verifyHexString(this.tbsCertificate(), this.signature(), this.algorithm());
}
catch (err) {
return false;
}
};
return Certificate;
}());
exports.default = Certificate;
;
},{"./common":2,"./errors":6,"jsrsasign":115}],2:[function(require,module,exports){
(function (Buffer){
"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
var jsrsasign = require('jsrsasign');
function extend(object, properties) {
for (var key in properties) {
var val = properties[key];
object[key] = val;
}
return object;
}
exports.extend = extend;
function b64toHex(b64String) {
return Buffer.from(b64String, 'base64').toString('hex');
}
exports.b64toHex = b64toHex;
function hextoB64(hexString) {
return Buffer.from(hexString, 'hex').toString('base64');
}
exports.hextoB64 = hextoB64;
function hextoAscii(hexString) {
return Buffer.from(hexString, 'hex').toString('ascii');
}
exports.hextoAscii = hextoAscii;
function b64toAscii(b64String) {
return Buffer.from(b64String, 'base64').toString('ascii');
}
exports.b64toAscii = b64toAscii;
function parseDate(date) {
var parsed;
try {
parsed = date.match(/(\d{4})(\d{2})(\d{2})(\d{2})(\d{2})(\d{2})\..*Z/);
parsed.shift(1);
return new Date(Date.UTC(parseInt(parsed[0]), parseInt(parsed[1]) - 1, parseInt(parsed[2]), parseInt(parsed[3]), parseInt(parsed[4]), parseInt(parsed[5])));
}
catch (error) {
parsed = date.match(/(\d{2})(\d{2})(\d{2})(\d{2})(\d{2})(\d{2})\..*Z/);
parsed.shift(1);
return new Date(Date.UTC(parseInt(parsed[0]) + 2000, parseInt(parsed[1]) - 1, parseInt(parsed[2]), parseInt(parsed[3]), parseInt(parsed[4]), parseInt(parsed[5])));
}
}
exports.parseDate = parseDate;
function sha256(string) {
var digest = new jsrsasign.crypto.MessageDigest({
alg: 'sha256',
prov: 'cryptojs'
});
return digest.digestString(string);
}
exports.sha256 = sha256;
function sha256hex(hex) {
var digest = new jsrsasign.crypto.MessageDigest({
alg: 'sha256',
prov: 'cryptojs'
});
return digest.digestHex(hex);
}
exports.sha256hex = sha256hex;
}).call(this,require("buffer").Buffer)
},{"buffer":94,"jsrsasign":115}],3:[function(require,module,exports){
"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
var common_1 = require("./common");
var certificate_1 = require("./certificate");
var errors_1 = require("./errors");
var jsrsasign = require('jsrsasign');
var ConservancyRecord = (function () {
function ConservancyRecord(caCert, userCert, record, timestamp, signedHash) {
this.caCert = caCert;
this.userCert = userCert;
this.record = record;
this.timestamp = timestamp;
this.signedHash = signedHash;
try {
this.caCertificate = new certificate_1.default(null, common_1.b64toHex(this.caCert));
}
catch (err) {
this.caCertificate = null;
}
try {
this.userCertificate = new certificate_1.default(null, common_1.b64toHex(this.userCert));
}
catch (err) {
this.userCertificate = null;
}
this.recordHex = common_1.b64toHex(this.record);
if (!jsrsasign.ASN1HEX.isASN1HEX(this.recordHex)) {
throw new errors_1.InvalidRecordError('The record provided is invalid');
}
this.positions = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.recordHex, 0);
}
ConservancyRecord.prototype.caName = function () {
if (this.caCertificate) {
return this.caCertificate.getSubject().O;
}
};
ConservancyRecord.prototype.userName = function () {
if (this.userCertificate) {
return this.userCertificate.getSubject().O;
}
};
ConservancyRecord.prototype.timestampHex = function () {
return jsrsasign.ASN1HEX.getHexOfTLV_AtObj(this.recordHex, this.positions[2]);
};
ConservancyRecord.prototype.archiveHex = function () {
return jsrsasign.ASN1HEX.getHexOfTLV_AtObj(this.recordHex, this.positions[1]);
};
ConservancyRecord.prototype.archiveSignature = function () {
var ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), 0);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[3]);
return jsrsasign.ASN1HEX.getHexOfV_AtObj(this.archiveHex(), ar_pos[1]);
};
ConservancyRecord.prototype.archiveSignedHash = function () {
var ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), 0);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[1]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[0]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[1]);
var signedHashH = jsrsasign.ASN1HEX.getHexOfV_AtObj(this.archiveHex(), ar_pos[1]);
return common_1.hextoAscii(signedHashH.replace(/^[0]+/g, ''));
};
ConservancyRecord.prototype.validArchiveHash = function () {
if (this.signedHash !== this.archiveSignedHash()) {
return false;
}
return this.userCertificate.verifyString(this.signedHash, this.archiveSignature());
};
ConservancyRecord.prototype.recordTimestamp = function () {
var ts_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.timestampHex(), 0);
ts_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.timestampHex(), ts_pos[0]);
ts_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.timestampHex(), ts_pos[1]);
ts_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.timestampHex(), ts_pos[1]);
ts_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.timestampHex(), ts_pos[0]);
ts_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.timestampHex(), ts_pos[2]);
ts_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.timestampHex(), ts_pos[1]);
ts_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.timestampHex(), ts_pos[0]);
ts_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.timestampHex(), ts_pos[0]);
var date = jsrsasign.ASN1HEX.getHexOfV_AtObj(this.timestampHex(), ts_pos[4]);
return common_1.parseDate(common_1.hextoAscii(date));
};
ConservancyRecord.prototype.equalTimestamps = function () {
return Date.parse(this.timestamp) === this.recordTimestamp().getTime();
};
ConservancyRecord.prototype.signedData = function () {
var nameHex = jsrsasign.ASN1HEX.getHexOfTLV_AtObj(this.recordHex, this.positions[0]);
return nameHex + this.archiveHex() + this.timestampHex();
};
ConservancyRecord.prototype.signature = function () {
var signature_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.recordHex, this.positions[3]);
return jsrsasign.ASN1HEX.getHexOfV_AtObj(this.recordHex, signature_pos[1]);
};
ConservancyRecord.prototype.valid = function () {
if (!this.caCertificate) {
return false;
}
return this.caCertificate.verifyHexString(this.signedData(), this.signature());
};
ConservancyRecord.prototype.isCa = function (caPemCert) {
if (this.caCertificate) {
return this.caCertificate.isCa(caPemCert);
}
};
return ConservancyRecord;
}());
exports.default = ConservancyRecord;
},{"./certificate":1,"./common":2,"./errors":6,"jsrsasign":115}],4:[function(require,module,exports){
"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
var jsrsasign = require('jsrsasign');
var common_1 = require("./common");
var certificate_1 = require("./certificate");
var errors_1 = require("./errors");
var ConservancyRecordNom2016 = (function () {
function ConservancyRecordNom2016(caCert, record, timestamp, signedHash) {
this.caCert = caCert;
this.record = record;
this.timestamp = timestamp;
this.signedHash = signedHash;
if (!this.record) {
throw new errors_1.ArgumentError('Conservancy must have record');
}
this.recordHex = common_1.b64toHex(this.record);
if (!jsrsasign.ASN1HEX.isASN1HEX(this.recordHex)) {
throw new errors_1.InvalidRecordError('The record provided is invalid');
}
this.positions = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.recordHex, 0);
try {
this.rootCertificate = new certificate_1.default(null, this.rootCertificateHex());
}
catch (err) {
this.rootCertificate = null;
}
this.tsaCertificate = new certificate_1.default(null, common_1.b64toHex(this.caCert));
var inCert = new certificate_1.default(null, this.caCertificateHex());
if (this.tsaCertificate.toHex() !== inCert.toHex()) {
throw new errors_1.ArgumentError('Tsa certificates are not equals');
}
}
ConservancyRecordNom2016.prototype.rootCertificateHex = function () {
var ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.certificatesHex(), 0);
return jsrsasign.ASN1HEX.getHexOfTLV_AtObj(this.certificatesHex(), ar_pos[1]);
};
ConservancyRecordNom2016.prototype.caCertificateHex = function () {
var ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.certificatesHex(), 0);
return jsrsasign.ASN1HEX.getHexOfTLV_AtObj(this.certificatesHex(), ar_pos[0]);
};
ConservancyRecordNom2016.prototype.certificatesHex = function () {
var ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), 0);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[1]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[0]);
return jsrsasign.ASN1HEX.getHexOfTLV_AtObj(this.archiveHex(), ar_pos[3]);
};
ConservancyRecordNom2016.prototype.caName = function () {
if (this.tsaCertificate) {
return this.tsaCertificate.getSubject().O;
}
};
ConservancyRecordNom2016.prototype.rootName = function () {
if (this.rootCertificate) {
return this.rootCertificate.getSubject().O;
}
};
ConservancyRecordNom2016.prototype.messageDigest = function () {
var pkcs9 = this.signedAttributesHex();
var ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(pkcs9, 0);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(pkcs9, ar_pos[2]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(pkcs9, ar_pos[1]);
return jsrsasign.ASN1HEX.getHexOfV_AtObj(pkcs9, ar_pos[0]);
};
ConservancyRecordNom2016.prototype.signedTimeStamp = function () {
var pkcs9 = this.signedAttributesHex();
var ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(pkcs9, 0);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(pkcs9, ar_pos[1]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(pkcs9, ar_pos[1]);
var date = jsrsasign.ASN1HEX.getHexOfV_AtObj(pkcs9, ar_pos[0]);
return common_1.parseDate(common_1.hextoAscii(date));
};
ConservancyRecordNom2016.prototype.signingCertificateV2 = function () {
var pkcs9 = this.signedAttributesHex();
var ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(pkcs9, 0);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(pkcs9, ar_pos[3]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(pkcs9, ar_pos[1]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(pkcs9, ar_pos[0]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(pkcs9, ar_pos[0]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(pkcs9, ar_pos[0]);
return jsrsasign.ASN1HEX.getHexOfV_AtObj(pkcs9, ar_pos[1]);
};
ConservancyRecordNom2016.prototype.tSTInfoHex = function () {
var ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), 0);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[1]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[0]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[2]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[1]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[0]);
return jsrsasign.ASN1HEX.getHexOfTLV_AtObj(this.archiveHex(), ar_pos[0]);
};
ConservancyRecordNom2016.prototype.contentAttributesHex = function () {
var ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), 0);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[1]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[0]);
return jsrsasign.ASN1HEX.getHexOfTLV_AtObj(this.archiveHex(), ar_pos[4]);
};
ConservancyRecordNom2016.prototype.signedAttributesHex = function () {
var ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), 0);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[1]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[0]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[4]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[0]);
var hex = jsrsasign.ASN1HEX.getHexOfTLV_AtObj(this.archiveHex(), ar_pos[3]);
if (!hex.startsWith('31')) {
return hex = '31' + hex.slice(2, hex.length);
}
};
ConservancyRecordNom2016.prototype.archiveHex = function () {
return jsrsasign.ASN1HEX.getHexOfTLV_AtObj(this.recordHex, this.positions[1]);
};
ConservancyRecordNom2016.prototype.archiveSignature = function () {
var info = this.contentAttributesHex();
var ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(info, 0);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(info, ar_pos[0]);
return jsrsasign.ASN1HEX.getHexOfV_AtObj(info, ar_pos[5]);
};
ConservancyRecordNom2016.prototype.archiveSignedHash = function () {
var tSTInfo = this.tSTInfoHex();
var ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(tSTInfo, 0);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(tSTInfo, ar_pos[2]);
return jsrsasign.ASN1HEX.getHexOfV_AtObj(tSTInfo, ar_pos[1]);
};
ConservancyRecordNom2016.prototype.validArchiveHash = function () {
if (this.signedHash !== this.archiveSignedHash()) {
return false;
}
if (!this.tsaCertificate.isValidOn(this.signedTimeStamp())) {
return false;
}
if (this.messageDigest() !== common_1.sha256hex(this.tSTInfoHex())) {
return false;
}
if (!this.equalTimestamps()) {
return false;
}
if (!this.signingCertificateV2()) {
return false;
}
return this.tsaCertificate.verifyHexString(this.signedAttributesHex(), this.archiveSignature());
};
ConservancyRecordNom2016.prototype.recordTimestamp = function () {
var ts_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.tSTInfoHex(), 0);
var date = jsrsasign.ASN1HEX.getHexOfV_AtObj(this.tSTInfoHex(), ts_pos[4]);
return common_1.parseDate(common_1.hextoAscii(date));
};
ConservancyRecordNom2016.prototype.equalTimestamps = function () {
var middle;
return Date.parse(this.timestamp) === (middle = this.recordTimestamp().getTime()) && middle === this.signedTimeStamp().getTime();
};
ConservancyRecordNom2016.prototype.valid = function () {
if (!this.rootCertificate) {
return false;
}
return this.tsaCertificate.isCa(this.rootCertificate.toPem());
};
ConservancyRecordNom2016.prototype.isCa = function (caPemCert) {
if (this.rootCertificate) {
return this.rootCertificate.isCa(caPemCert);
}
};
return ConservancyRecordNom2016;
}());
exports.default = ConservancyRecordNom2016;
},{"./certificate":1,"./common":2,"./errors":6,"jsrsasign":115}],5:[function(require,module,exports){
(function (Buffer){
"use strict";
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
return new (P || (P = Promise))(function (resolve, reject) {
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
step((generator = generator.apply(thisArg, _arguments || [])).next());
});
};
var __generator = (this && this.__generator) || function (thisArg, body) {
var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
function verb(n) { return function (v) { return step([n, v]); }; }
function step(op) {
if (f) throw new TypeError("Generator is already executing.");
while (_) try {
if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
if (y = 0, t) op = [op[0] & 2, t.value];
switch (op[0]) {
case 0: case 1: t = op; break;
case 4: _.label++; return { value: op[1], done: false };
case 5: _.label++; y = op[1]; op = [0]; continue;
case 7: op = _.ops.pop(); _.trys.pop(); continue;
default:
if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
if (t[2]) _.ops.pop();
_.trys.pop(); continue;
}
op = body.call(thisArg, _);
} catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
}
};
Object.defineProperty(exports, "__esModule", { value: true });
var jsrsasign = require('jsrsasign');
var signature_1 = require("./signature");
var conservancyRecord_1 = require("./conservancyRecord");
var conservancyRecordNom2016_1 = require("./conservancyRecordNom2016");
var common_1 = require("./common");
var errors_1 = require("./errors");
var xml_1 = require("./xml");
var VERSION = '0.0.1';
var Document = (function () {
function Document(file, options) {
var _this = this;
if (!file) {
throw new errors_1.ArgumentError('file is required');
}
this.pdf_content = file;
this.signers = [];
var defaultOpts = {
version: VERSION,
signers: [],
encrypted: false,
transfer: false,
};
this.errors = {};
options = common_1.extend(defaultOpts, options);
this.conservancyRecord = null;
this.recordPresent = false;
if (options.conservancyRecord) {
this.setConservancyRecord(options.conservancyRecord);
}
this.contentType = options.contentType;
this.name = options.name;
this.version = options.version;
this.encrypted = options.encrypted === 'true' || options.encrypted === true;
this.transfer = options.transfer === "true" || options.transfer === true;
var digest = new jsrsasign.crypto.MessageDigest({
alg: 'sha256',
prov: 'cryptojs'
});
this.originalHash = digest.digestHex(this.file('hex'));
if (options.signers.length > 0) {
options.signers.forEach(function (el) { return _this.addSigner(el); });
}
}
Document.prototype.setConservancyRecord = function (data) {
this.originalXmlHash = data.originalXmlHash;
this.recordPresent = true;
try {
if (!data.version) {
this.conservancyRecord = new conservancyRecord_1.default(data.caCert, data.userCert, data.record, data.timestamp, data.originalXmlHash);
}
else {
this.conservancyRecord = new conservancyRecordNom2016_1.default(data.caCert, data.record, data.timestamp, data.originalXmlHash);
}
}
catch (e) {
throw new errors_1.InvalidRecordError("The conservancy record is not valid: " + e.message);
}
};
Document.prototype.fileBuffer = function () {
if (!this.pdf_content) {
return null;
}
return Buffer.from(this.pdf_content, 'base64');
};
Document.prototype.pdfBuffer = function () { return this.fileBuffer(); };
Document.prototype.file = function (format) {
if (!this.pdf_content) {
return null;
}
if (!format) {
return common_1.b64toAscii(this.pdf_content);
}
if (format === 'hex') {
return common_1.b64toHex(this.pdf_content);
}
if (format === 'base64') {
return this.pdf_content;
}
throw new errors_1.ArgumentError("unknown format " + format);
};
Document.prototype.setFile = function (file) {
this.pdf_content = file;
};
Document.prototype.toXML = function (eDocument) {
if (!eDocument)
throw new errors_1.ArgumentError('eDocument is required');
return xml_1.default.toXML(eDocument, this.file('base64'));
};
Document.prototype.pdf = function (format) { return this.file(format); };
Document.prototype.addSigner = function (signer) {
if (!signer.cer || !signer.signature || !signer.signedAt) {
throw new errors_1.InvalidSignerError('signer must contain cer, signature and signedAt');
}
return this.signers.push(signer);
};
Document.prototype.signatures = function () {
return this.signers.map(function (signer) { return new signature_1.default(signer.cer, signer.signature, signer.signedAt, signer.email, signer.ePass); });
};
Document.prototype.validSignatures = function () {
if (!this.originalHash) {
return false;
}
var valid = true;
var oHash = this.originalHash;
this.signatures().forEach(function (signature) {
if (valid && !signature.valid(oHash)) {
return valid = false;
}
});
return valid;
};
Document.fromXml = function (xmlString) {
return __awaiter(this, void 0, void 0, function () {
return __generator(this, function (_a) {
return [2, new Promise(function (resolve, reject) { return xml_1.default.parse(xmlString).then(function (xml) {
var opts = {
signers: xml.xmlSigners(),
version: xml.version,
name: xml.name,
encrypted: xml.encrypted,
contentType: xml.contentType,
conservancyRecord: xml.getConservancyRecord(),
transfer: xml.isTransfer,
};
var doc = new Document(xml.file(), opts);
resolve({
xml: xml,
document: doc,
xmljs: xml.eDocument,
xmlHash: xml.getConservancyRecord() && xml.getConservancyRecord().originalXmlHash,
xmlOriginalHash: xml.originalHash,
});
}).catch(function (error) { return reject(error); }); })];
});
});
};
return Document;
}());
exports.default = Document;
;
}).call(this,require("buffer").Buffer)
},{"./common":2,"./conservancyRecord":3,"./conservancyRecordNom2016":4,"./errors":6,"./signature":7,"./xml":9,"buffer":94,"jsrsasign":115}],6:[function(require,module,exports){
"use strict";
var __extends = (this && this.__extends) || (function () {
var extendStatics = function (d, b) {
extendStatics = Object.setPrototypeOf ||
({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) ||
function (d, b) { for (var p in b) if (b.hasOwnProperty(p)) d[p] = b[p]; };
return extendStatics(d, b);
};
return function (d, b) {
extendStatics(d, b);
function __() { this.constructor = d; }
d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());
};
})();
Object.defineProperty(exports, "__esModule", { value: true });
var InvalidSignerError = (function (_super) {
__extends(InvalidSignerError, _super);
function InvalidSignerError() {
var args = [];
for (var _i = 0; _i < arguments.length; _i++) {
args[_i] = arguments[_i];
}
var _this = _super.apply(this, args) || this;
_this.name = 'InvalidSignerError';
return _this;
}
return InvalidSignerError;
}(Error));
exports.InvalidSignerError = InvalidSignerError;
;
var CertificateError = (function (_super) {
__extends(CertificateError, _super);
function CertificateError() {
var args = [];
for (var _i = 0; _i < arguments.length; _i++) {
args[_i] = arguments[_i];
}
var _this = _super.apply(this, args) || this;
_this.name = 'CertificateError';
return _this;
}
return CertificateError;
}(Error));
exports.CertificateError = CertificateError;
;
var ArgumentError = (function (_super) {
__extends(ArgumentError, _super);
function ArgumentError() {
var args = [];
for (var _i = 0; _i < arguments.length; _i++) {
args[_i] = arguments[_i];
}
var _this = _super.apply(this, args) || this;
_this.name = 'ArgumentError';
return _this;
}
return ArgumentError;
}(Error));
exports.ArgumentError = ArgumentError;
;
var InvalidRecordError = (function (_super) {
__extends(InvalidRecordError, _super);
function InvalidRecordError() {
var args = [];
for (var _i = 0; _i < arguments.length; _i++) {
args[_i] = arguments[_i];
}
var _this = _super.apply(this, args) || this;
_this.name = 'InvalidRecordError';
return _this;
}
return InvalidRecordError;
}(Error));
exports.InvalidRecordError = InvalidRecordError;
;
},{}],7:[function(require,module,exports){
"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
var certificate_1 = require("./certificate");
var errors_1 = require("./errors");
var common_1 = require("./common");
var Signature = (function () {
function Signature(cer, signature, signedAt, email, ePassInfo) {
this.signature = signature;
if (!ePassInfo) {
ePassInfo = {};
}
var content = ePassInfo.content, algorithm = ePassInfo.algorithm, iterations = ePassInfo.iterations, keySize = ePassInfo.keySize;
this.ePassInfo = { algorithm: algorithm, iterations: iterations, keySize: keySize };
this.ePassContent = content;
this.signedAt = signedAt;
this.email = email;
if (!this.signedAt) {
throw new errors_1.ArgumentError('Signature must have signedAt');
}
if (!cer) {
throw new errors_1.ArgumentError('Signature must have cer');
}
this.certificate = new certificate_1.default(null, cer);
if (this.email == null) {
this.email = this.certificate.email();
}
this.signer = {
id: this.certificate.owner_id(),
name: this.certificate.owner(),
email: this.email,
};
}
Signature.prototype.ePass = function (format) {
if ((format === 'hex') || !format) {
return this.ePassContent;
}
if (format === 'base64') {
return common_1.hextoB64(this.ePassContent);
}
throw new errors_1.ArgumentError("unknown format " + format);
};
Signature.prototype.sig = function (format) {
if ((format === 'hex') || !format) {
return this.signature;
}
if (format === 'base64') {
return common_1.hextoB64(this.signature);
}
throw new errors_1.ArgumentError("unknown format " + format);
};
Signature.prototype.valid = function (hash) {
if (!hash) {
throw new errors_1.ArgumentError('hash is required');
}
return this.certificate.verifyString(hash, this.signature);
};
return Signature;
}());
exports.default = Signature;
},{"./certificate":1,"./common":2,"./errors":6}],8:[function(require,module,exports){
"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
var certificate_1 = require("./certificate");
exports.Certificate = certificate_1.default;
var document_1 = require("./document");
exports.Document = document_1.default;
var signature_1 = require("./signature");
exports.Signature = signature_1.default;
var conservancyRecord_1 = require("./conservancyRecord");
exports.ConservancyRecord = conservancyRecord_1.default;
var conservancyRecordNom2016_1 = require("./conservancyRecordNom2016");
exports.ConservancyRecordNom2016 = conservancyRecordNom2016_1.default;
var xml_1 = require("./xml");
exports.XML = xml_1.default;
var errors_1 = require("./errors");
var version = require('../package.json').version;
exports.version = version;
var errors = {
InvalidSignerError: errors_1.InvalidSignerError,
CertificateError: errors_1.CertificateError,
ArgumentError: errors_1.ArgumentError,
InvalidRecordError: errors_1.InvalidRecordError,
};
exports.errors = errors;
},{"../package.json":216,"./certificate":1,"./conservancyRecord":3,"./conservancyRecordNom2016":4,"./document":5,"./errors":6,"./signature":7,"./xml":9}],9:[function(require,module,exports){
(function (Buffer){
"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
var Promise = require('promise');
var xmlCrypto = require('xml-crypto');
var select = require('xpath.js');
var Dom = require('xmldom').DOMParser;
var xml2js_1 = require("xml2js");
var common_1 = require("./common");
var ExclusiveCanonicalization = xmlCrypto.
SignedXml.
CanonicalizationAlgorithms['http://www.w3.org/2001/10/xml-exc-c14n#'];
var XML = (function () {
function XML() {
}
XML.parse = function (string) {
var xml = new XML();
return xml.parse(string);
};
XML.toXML = function (eDocument, file) {
var edoc = JSON.parse(JSON.stringify(eDocument));
this.removeEncrypedData(edoc);
edoc.file[0]._ = file;
var builder = new xml2js_1.Builder({
rootName: "electronicDocument",
renderOpts: {
pretty: false,
},
});
return builder.buildObject(edoc);
};
XML.removeEncrypedData = function (xmljs) {
if (xmljs.file && xmljs.file[0]) {
delete xmljs.file[0].$.encrypted;
xmljs.file[0].$.name = xmljs.file[0].$.name.replace(".enc", "");
}
xmljs.signers[0].signer.forEach(function (signer) {
delete signer.ePass;
});
};
XML.removeGeolocation = function (xmljs) {
xmljs.signers[0].signer.forEach(function (signer) {
if (signer.auditTrail) {
signer.auditTrail[0].event.forEach(function (event, index) {
if (event.$.name === "geolocation") {
delete signer.auditTrail[0].event[index];
}
});
}
});
};
XML.removeBlockchain = function (xmljs) {
delete xmljs.blockchain;
};
XML.removeTransfer = function (xmljs) {
delete xmljs.transfers;
};
XML.prototype.parse = function (xml) {
var el = this;
return new Promise(function (resolve, reject) {
return xml2js_1.parseString(xml, function (err, result) {
var _a;
var isTransfer = false;
if (result.electronicDocument.transfers) {
var lastNodeTransfer = result.electronicDocument.transfers[result.electronicDocument.transfers.length - 1];
if ((_a = lastNodeTransfer) === null || _a === void 0 ? void 0 : _a.electronicDocument) {
isTransfer = true;
result.originalElectronicDocument = result.electronicDocument;
result.electronicDocument =
lastNodeTransfer.electronicDocument[lastNodeTransfer.electronicDocument.length - 1];
el.originalElectronicDocument = result.originalElectronicDocument;
}
}
if (err) {
return reject(err);
}
el.eDocument = result.electronicDocument;
var eDocumentAttrs = el.eDocument.$;
el.version = eDocumentAttrs.version;
el.signed = eDocumentAttrs.signed;
var v = el.version.split(/\./).map(function (v) { return parseInt(v); });
el.version_int = v[0] * 100 + v[1] * 10 + v[2];
if (el.version_int < 100) {
el.fileElementName = "pdf";
}
else {
el.fileElementName = "file";
}
var pdfAttrs = el.eDocument[el.fileElementName][0].$;
el.encrypted = pdfAttrs.encrypted;
el.name = pdfAttrs.name;
el.contentType = pdfAttrs.contentType;
el.originalHash = pdfAttrs.originalHash;
el.isTransfer = isTransfer;
return resolve(el);
});
});
};
XML.prototype.canonical = function () {
var edoc = JSON.parse(JSON.stringify(this.eDocument));
if (this.isTransfer && this.originalElectronicDocument) {
Object.entries(this.originalElectronicDocument.$).map(function (_a) {
var key = _a[0], value = _a[1];
if (key.includes('xmlns')) {
edoc.$[key] = value;
}
});
}
delete edoc.conservancyRecord;
XML.removeEncrypedData(edoc);
XML.removeGeolocation(edoc);
XML.removeBlockchain(edoc);
XML.removeTransfer(edoc);
if (this.version_int >= 100) {
edoc[this.fileElementName][0]._ = "";
}
var builder = new xml2js_1.Builder({
rootName: "electronicDocument",
renderOpts: {
pretty: false,
},
});
var originalXml = builder.buildObject(edoc);
var doc = new Dom().parseFromString(originalXml);
var elem = select(doc, "//*")[0];
var can = new ExclusiveCanonicalization();
var canonicalString = can.process(elem).toString();
return canonicalString.replace(/
/g, "");
};
XML.prototype.getCanonicalBuffer = function () {
return Buffer.from(this.canonical(), "utf-8");
};
XML.prototype.file = function () {
return this.eDocument[this.fileElementName][0]._;
};
XML.prototype.pdf = function () {
return this.file();
};
XML.prototype.xmlSigners = function () {
var parsedSigners = [];
this.eDocument.signers[0].signer.forEach(function (signer) {
var attrs = signer.$;
var xmlSigner = {
email: attrs.email,
cer: common_1.b64toHex(signer.certificate[0]._),
signature: common_1.b64toHex(signer.signature[0]._),
signedAt: signer.signature[0].$.signedAt,
};
if (signer.ePass) {
xmlSigner.ePass = {
content: common_1.b64toHex(signer.ePass[0]._),
algorithm: signer.ePass[0].$.algorithm,
iterations: signer.ePass[0].$.iterations,
keySize: signer.ePass[0].$.keySize,
};
}
return parsedSigners.push(xmlSigner);
});
return parsedSigners;
};
XML.prototype.getConservancyRecord = function () {
var crVersion, userCertificate;
if (!this.eDocument.conservancyRecord) {
return null;
}
var cr = this.eDocument.conservancyRecord[0];
if (!cr.$.version) {
userCertificate = cr.userCertificate[0]._;
}
else {
crVersion = cr.$.version;
}
return {
caCert: cr.caCertificate[0]._,
userCert: userCertificate,
record: cr.record[0],
timestamp: cr.$.timestamp,
originalXmlHash: common_1.sha256(this.canonical()),
version: crVersion,
};
};
return XML;
}());
exports.default = XML;
}).call(this,require("buffer").Buffer)
},{"./common":2,"buffer":94,"promise":132,"xml-crypto":177,"xml2js":188,"xmldom":211,"xpath.js":214}],10:[function(require,module,exports){
"use strict";
// rawAsap provides everything we need except exception management.
var rawAsap = require("./raw");
// RawTasks are recycled to reduce GC churn.
var freeTasks = [];
// We queue errors to ensure they are thrown in right order (FIFO).
// Array-as-queue is good enough here, since we are just dealing with exceptions.
var pendingErrors = [];
var requestErrorThrow = rawAsap.makeRequestCallFromTimer(throwFirstError);
function throwFirstError() {
if (pendingErrors.length) {
throw pendingErrors.shift();
}
}
/**
* Calls a task as soon as possible after returning, in its own event, with priority
* over other events like animation, reflow, and repaint. An error thrown from an
* event will not interrupt, nor even substantially slow down the processing of
* other events, but will be rather postponed to a lower priority event.
* @param {{call}} task A callable object, typically a function that takes no
* arguments.
*/
module.exports = asap;
function asap(task) {
var rawTask;
if (freeTasks.length) {
rawTask = freeTasks.pop();
} else {
rawTask = new RawTask();
}
rawTask.task = task;
rawAsap(rawTask);
}
// We wrap tasks with recyclable task objects. A task object implements
// `call`, just like a function.
function RawTask() {
this.task = null;
}
// The sole purpose of wrapping the task is to catch the exception and recycle
// the task object after its single use.
RawTask.prototype.call = function () {
try {
this.task.call();
} catch (error) {
if (asap.onerror) {
// This hook exists purely for testing purposes.
// Its name will be periodically randomized to break any code that
// depends on its existence.
asap.onerror(error);
} else {
// In a web browser, exceptions are not fatal. However, to avoid
// slowing down the queue of pending tasks, we rethrow the error in a
// lower priority turn.
pendingErrors.push(error);
requestErrorThrow();
}
} finally {
this.task = null;
freeTasks[freeTasks.length] = this;
}
};
},{"./raw":11}],11:[function(require,module,exports){
(function (global){
"use strict";
// Use the fastest means possible to execute a task in its own turn, with
// priority over other events including IO, animation, reflow, and redraw
// events in browsers.
//
// An exception thrown by a task will permanently interrupt the processing of
// subsequent tasks. The higher level `asap` function ensures that if an
// exception is thrown by a task, that the task queue will continue flushing as
// soon as possible, but if you use `rawAsap` directly, you are responsible to
// either ensure that no exceptions are thrown from your task, or to manually
// call `rawAsap.requestFlush` if an exception is thrown.
module.exports = rawAsap;
function rawAsap(task) {
if (!queue.length) {
requestFlush();
flushing = true;
}
// Equivalent to push, but avoids a function call.
queue[queue.length] = task;
}
var queue = [];
// Once a flush has been requested, no further calls to `requestFlush` are
// necessary until the next `flush` completes.
var flushing = false;
// `requestFlush` is an implementation-specific method that attempts to kick
// off a `flush` event as quickly as possible. `flush` will attempt to exhaust
// the event queue before yielding to the browser's own event loop.
var requestFlush;
// The position of the next task to execute in the task queue. This is
// preserved between calls to `flush` so that it can be resumed if
// a task throws an exception.
var index = 0;
// If a task schedules additional tasks recursively, the task queue can grow
// unbounded. To prevent memory exhaustion, the task queue will periodically
// truncate already-comp