xml-fiesta
Version:
Electronic signed document XML Protocol for Node & Browser
1,029 lines (1,024 loc) • 1.55 MB
JavaScript
(function(f){if(typeof exports==="object"&&typeof module!=="undefined"){module.exports=f()}else if(typeof define==="function"&&define.amd){define([],f)}else{var g;if(typeof window!=="undefined"){g=window}else if(typeof global!=="undefined"){g=global}else if(typeof self!=="undefined"){g=self}else{g=this}g.XMLFiesta = f()}})(function(){var define,module,exports;return (function(){function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);var a=new Error("Cannot find module '"+i+"'");throw a.code="MODULE_NOT_FOUND",a}var p=n[i]={exports:{}};e[i][0].call(p.exports,function(r){var n=e[i][1][r];return o(n||r)},p,p.exports,r,e,n,t)}return n[i].exports}for(var u="function"==typeof require&&require,i=0;i<t.length;i++)o(t[i]);return o}return r})()({1:[function(require,module,exports){
"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
var errors_1 = require("./errors");
var common_1 = require("./common");
var parseDate = function (certDate) {
var parsed = certDate.match(/(\d{2})(\d{2})(\d{2})(\d{2})(\d{2})(\d{2})Z/);
parsed.shift(1);
return new Date(Date.UTC(2000 + parseInt(parsed[0]), parseInt(parsed[1]) - 1, parsed[2], parsed[3], parsed[4], parsed[5]));
};
var jsrsasign = require('jsrsasign');
jsrsasign.X509.hex2dnobj = function (e) {
var f = {};
var c = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(e, 0);
var d = 0;
while (d < c.length) {
var b = jsrsasign.ASN1HEX.getHexOfTLV_AtObj(e, c[d]);
try {
var rdn = jsrsasign.X509.hex2rdnobj(b);
f[rdn[0]] = rdn[1];
}
catch (err) {
console.error(err);
}
d++;
}
return f;
};
jsrsasign.X509.hex2rdnobj = function (a) {
var f = jsrsasign.ASN1HEX.getDecendantHexTLVByNthList(a, 0, [0, 0]);
var e = jsrsasign.ASN1HEX.getDecendantHexVByNthList(a, 0, [0, 1]);
var c = '';
try {
c = jsrsasign.X509.DN_ATTRHEX[f];
}
catch (b) {
c = f;
}
var d = jsrsasign.hextorstr(e);
return [c, d];
};
jsrsasign.X509.prototype.getSubjectObject = function () {
return jsrsasign.X509.hex2dnobj(jsrsasign.ASN1HEX.getDecendantHexTLVByNthList(this.hex, 0, [0, 5]));
};
jsrsasign.X509.DN_ATTRHEX = {
'0603550406': 'C',
'060355040a': 'O',
'060355040b': 'OU',
'0603550403': 'CN',
'0603550405': 'serialNumber',
'0603550408': 'ST',
'0603550407': 'L',
'060355042d': 'UI',
'0603550409': 'street',
'0603550429': 'name',
'0603550411': 'postalCode',
'06092a864886f70d010901': 'emailAddress',
'06092a864886f70d010902': 'unstructuredName'
};
var certFirstBytes = '2d2d2d2d2d424547494e2043455254494649434154452d2d2d2d2d0a4d49494';
var Certificate = (function () {
function Certificate(binaryString, hexString) {
var hex = binaryString ? jsrsasign.rstrtohex(binaryString) : hexString;
this.binaryString = binaryString;
if ((!binaryString && !hex) ||
(binaryString && binaryString.length === 0) ||
(hex &&
!jsrsasign.ASN1HEX.isASN1HEX(hex) &&
!hex.startsWith(certFirstBytes))) {
throw new errors_1.CertificateError("The certificate is not valid.");
}
if (hex.startsWith(certFirstBytes)) {
this.pem = jsrsasign.hextorstr(hex);
}
else {
this.pem = jsrsasign.asn1.ASN1Util.getPEMStringFromHex(hex, "CERTIFICATE");
}
this.certificate = new jsrsasign.X509();
this.certificate.readCertPEM(this.pem);
this.hex = this.certificate.hex;
this.subject = this.certificate.getSubjectObject();
}
Certificate.prototype.toBinaryString = function () {
return this.binaryString;
};
Certificate.prototype.toHex = function () {
return this.certificate.hex;
};
Certificate.prototype.toPem = function () {
return this.pem;
};
Certificate.prototype.getX509 = function () {
return this.certificate;
};
Certificate.prototype.getSerialNumberHex = function () {
return this.certificate.getSerialNumberHex();
};
Certificate.prototype.getSerialNumber = function () {
return common_1.hextoAscii(this.getSerialNumberHex());
};
Certificate.prototype.getSubject = function () {
return this.subject;
};
Certificate.prototype.email = function () {
return this.subject.emailAddress;
};
Certificate.prototype.owner = function () {
return this.subject.name;
};
Certificate.prototype.owner_id = function () {
var _a;
var identifier = this.getUniqueIdentifier();
return (_a = identifier) === null || _a === void 0 ? void 0 : _a[0];
};
Certificate.prototype.getUniqueIdentifier = function () {
if (this.subject.UI) {
return this.subject.UI.split(" / ");
}
else {
return null;
}
};
Certificate.prototype.getRSAPublicKey = function () {
if (this.pubKey) {
return this.pubKey;
}
return (this.pubKey = this.certificate.subjectPublicKeyRSA);
};
Certificate.prototype.verifyString = function (string, signedHexString, alg) {
try {
if (alg == null) {
alg = "SHA256withRSA";
}
var sig = new jsrsasign.crypto.Signature({ alg: alg });
sig.init(this.pem);
sig.updateString(string);
return sig.verify(signedHexString);
}
catch (error) {
console.error(error);
return false;
}
};
Certificate.prototype.verifyHexString = function (hexString, signedHexString, alg) {
try {
if (alg == null) {
alg = "SHA256withRSA";
}
var sig = new jsrsasign.crypto.Signature({ alg: alg });
sig.init(this.pem);
sig.updateHex(hexString);
return sig.verify(signedHexString);
}
catch (error) {
console.error(error);
return false;
}
};
Certificate.prototype.getUniqueIdentifierString = function (joinVal) {
joinVal = joinVal ? joinVal : ", ";
var identifiers = this.getUniqueIdentifier();
return identifiers.join(joinVal);
};
Certificate.prototype.hasExpired = function () {
var notAfter = parseDate(this.certificate.getNotAfter());
var isExpired = notAfter.getTime() < new Date().getTime();
if (isExpired) {
console.error("Certificate: The certificate has expired", {
notAfter: notAfter.toISOString(),
currentTime: new Date().toISOString()
});
}
return isExpired;
};
Certificate.prototype.isValidOn = function (date) {
var notAfter = parseDate(this.certificate.getNotAfter());
var notBefore = parseDate(this.certificate.getNotBefore());
var isValid = (notAfter.getTime() >= date.getTime() &&
date.getTime() >= notBefore.getTime());
if (!isValid) {
console.error("Certificate: The certificate is not valid on the given date", {
notAfter: notAfter.toISOString(),
notBefore: notBefore.toISOString(),
givenDate: date.toISOString()
});
}
return isValid;
};
Certificate.prototype.algorithm = function () {
return this.certificate.getSignatureAlgorithmField();
};
Certificate.prototype.tbsCertificate = function () {
return jsrsasign.ASN1HEX.getDecendantHexTLVByNthList(this.hex, 0, [0]);
};
Certificate.prototype.signature = function () {
return jsrsasign.X509.getSignatureValueHex(this.hex);
};
Certificate.prototype.isCa = function (rootCaHex) {
return this.hex === rootCaHex;
};
Certificate.prototype.validParent = function (rootCaPem, rootCaHex) {
if (rootCaHex === void 0) { rootCaHex = null; }
try {
var rootCaCert = void 0;
if (rootCaHex) {
rootCaCert = new Certificate(null, rootCaHex);
}
else {
rootCaCert = new jsrsasign.X509();
rootCaCert.readCertPEM(rootCaPem);
var rootCa = jsrsasign.X509.getExtBasicConstraints(rootCaCert.hex).cA;
if (!rootCa)
return false;
rootCaCert = new Certificate(null, rootCaCert.hex);
}
return rootCaCert.verifyHexString(this.tbsCertificate(), this.signature(), this.algorithm());
}
catch (error) {
console.error(error);
return false;
}
};
return Certificate;
}());
exports.default = Certificate;
;
},{"./common":2,"./errors":6,"jsrsasign":126}],2:[function(require,module,exports){
(function (Buffer){
"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
var jsrsasign = require('jsrsasign');
function extend(object, properties) {
for (var key in properties) {
var val = properties[key];
object[key] = val;
}
return object;
}
exports.extend = extend;
function b64toHex(b64String) {
return Buffer.from(b64String, 'base64').toString('hex');
}
exports.b64toHex = b64toHex;
function hextoB64(hexString) {
return Buffer.from(hexString, 'hex').toString('base64');
}
exports.hextoB64 = hextoB64;
function hextoAscii(hexString) {
return Buffer.from(hexString, 'hex').toString('ascii');
}
exports.hextoAscii = hextoAscii;
function b64toAscii(b64String) {
return Buffer.from(b64String, 'base64').toString('ascii');
}
exports.b64toAscii = b64toAscii;
function parseDate(date) {
var parsed;
try {
parsed = date.match(/(\d{4})(\d{2})(\d{2})(\d{2})(\d{2})(\d{2})\..*Z/);
parsed.shift(1);
return new Date(Date.UTC(parseInt(parsed[0]), parseInt(parsed[1]) - 1, parseInt(parsed[2]), parseInt(parsed[3]), parseInt(parsed[4]), parseInt(parsed[5])));
}
catch (error) {
parsed = date.match(/(\d{2})(\d{2})(\d{2})(\d{2})(\d{2})(\d{2})\..*Z/);
parsed.shift(1);
return new Date(Date.UTC(parseInt(parsed[0]) + 2000, parseInt(parsed[1]) - 1, parseInt(parsed[2]), parseInt(parsed[3]), parseInt(parsed[4]), parseInt(parsed[5])));
}
}
exports.parseDate = parseDate;
function sha256(string) {
var digest = new jsrsasign.crypto.MessageDigest({
alg: 'sha256',
prov: 'cryptojs'
});
return digest.digestString(string);
}
exports.sha256 = sha256;
function sha256hex(hex) {
var digest = new jsrsasign.crypto.MessageDigest({
alg: 'sha256',
prov: 'cryptojs'
});
return digest.digestHex(hex);
}
exports.sha256hex = sha256hex;
}).call(this,require("buffer").Buffer)
},{"buffer":105,"jsrsasign":126}],3:[function(require,module,exports){
"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
var common_1 = require("./common");
var certificate_1 = require("./certificate");
var errors_1 = require("./errors");
var jsrsasign = require('jsrsasign');
var ConservancyRecord = (function () {
function ConservancyRecord(caCert, userCert, record, timestamp, signedHash) {
this.caCert = caCert;
this.userCert = userCert;
this.record = record;
this.timestamp = timestamp;
this.signedHash = signedHash;
try {
this.caCertificate = new certificate_1.default(null, common_1.b64toHex(this.caCert));
}
catch (err) {
this.caCertificate = null;
}
try {
this.userCertificate = new certificate_1.default(null, common_1.b64toHex(this.userCert));
}
catch (err) {
this.userCertificate = null;
}
this.recordHex = common_1.b64toHex(this.record);
if (!jsrsasign.ASN1HEX.isASN1HEX(this.recordHex)) {
throw new errors_1.InvalidRecordError("The record provided is invalid");
}
this.positions = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.recordHex, 0);
}
ConservancyRecord.prototype.caName = function () {
if (this.caCertificate) {
return this.caCertificate.getSubject().O;
}
};
ConservancyRecord.prototype.userName = function () {
if (this.userCertificate) {
return this.userCertificate.getSubject().O;
}
};
ConservancyRecord.prototype.timestampHex = function () {
return jsrsasign.ASN1HEX.getHexOfTLV_AtObj(this.recordHex, this.positions[2]);
};
ConservancyRecord.prototype.archiveHex = function () {
return jsrsasign.ASN1HEX.getHexOfTLV_AtObj(this.recordHex, this.positions[1]);
};
ConservancyRecord.prototype.archiveSignature = function () {
var ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), 0);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[3]);
return jsrsasign.ASN1HEX.getHexOfV_AtObj(this.archiveHex(), ar_pos[1]);
};
ConservancyRecord.prototype.archiveSignedHash = function () {
var ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), 0);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[1]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[0]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[1]);
var signedHashH = jsrsasign.ASN1HEX.getHexOfV_AtObj(this.archiveHex(), ar_pos[1]);
return common_1.hextoAscii(signedHashH.replace(/^[0]+/g, ""));
};
ConservancyRecord.prototype.validArchiveHash = function () {
if (this.signedHash !== this.archiveSignedHash()) {
console.error("conservancyRecord: Signed hash mismatch", {
providedSignedHash: this.signedHash,
archiveSignedHash: this.archiveSignedHash()
});
return false;
}
var isValid = this.userCertificate.verifyString(this.signedHash, this.archiveSignature());
if (!isValid) {
console.error("conservancyRecord: User certificate failed to verify the signed hash");
}
return isValid;
};
ConservancyRecord.prototype.recordTimestamp = function () {
var ts_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.timestampHex(), 0);
ts_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.timestampHex(), ts_pos[0]);
ts_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.timestampHex(), ts_pos[1]);
ts_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.timestampHex(), ts_pos[1]);
ts_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.timestampHex(), ts_pos[0]);
ts_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.timestampHex(), ts_pos[2]);
ts_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.timestampHex(), ts_pos[1]);
ts_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.timestampHex(), ts_pos[0]);
ts_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.timestampHex(), ts_pos[0]);
var date = jsrsasign.ASN1HEX.getHexOfV_AtObj(this.timestampHex(), ts_pos[4]);
return common_1.parseDate(common_1.hextoAscii(date));
};
ConservancyRecord.prototype.equalTimestamps = function () {
var isEqualTime = Date.parse(this.timestamp) === this.recordTimestamp().getTime();
if (!isEqualTime) {
console.error("conservancyRecord: Timestamps don't match", {
providedTimestamp: this.timestamp,
parsedRecordTimestamp: this.recordTimestamp().toISOString()
});
}
return isEqualTime;
};
ConservancyRecord.prototype.signedData = function () {
var nameHex = jsrsasign.ASN1HEX.getHexOfTLV_AtObj(this.recordHex, this.positions[0]);
return nameHex + this.archiveHex() + this.timestampHex();
};
ConservancyRecord.prototype.signature = function () {
var signature_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.recordHex, this.positions[3]);
return jsrsasign.ASN1HEX.getHexOfV_AtObj(this.recordHex, signature_pos[1]);
};
ConservancyRecord.prototype.valid = function () {
if (!this.caCertificate) {
console.error("conservancyRecord: CA certificate is missing");
return false;
}
var isValid = this.caCertificate.verifyHexString(this.signedData(), this.signature());
if (!isValid) {
console.error("conservancyRecord: CA certificate failed to verify the signed data");
}
return isValid;
};
ConservancyRecord.prototype.validParent = function (caPemCert) {
if (this.caCertificate) {
return this.caCertificate.validParent(caPemCert);
}
else {
console.error({
message: "conservancyRecord: CA certificate is missing",
});
}
};
return ConservancyRecord;
}());
exports.default = ConservancyRecord;
},{"./certificate":1,"./common":2,"./errors":6,"jsrsasign":126}],4:[function(require,module,exports){
"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
var jsrsasign = require('jsrsasign');
var common_1 = require("./common");
var certificate_1 = require("./certificate");
var errors_1 = require("./errors");
var ConservancyRecordNom2016 = (function () {
function ConservancyRecordNom2016(caCert, record, timestamp, signedHash) {
this.caCert = caCert;
this.record = record;
this.timestamp = timestamp;
this.signedHash = signedHash;
if (!this.record) {
throw new errors_1.ArgumentError('Conservancy must have record');
}
this.recordHex = common_1.b64toHex(this.record);
if (!jsrsasign.ASN1HEX.isASN1HEX(this.recordHex)) {
throw new errors_1.InvalidRecordError('The record provided is invalid');
}
this.positions = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.recordHex, 0);
try {
this.rootCertificate = new certificate_1.default(null, this.rootCertificateHex());
}
catch (err) {
this.rootCertificate = null;
}
this.tsaCertificate = new certificate_1.default(null, common_1.b64toHex(this.caCert));
var inCert = new certificate_1.default(null, this.caCertificateHex());
if (this.tsaCertificate.toHex() !== inCert.toHex()) {
throw new errors_1.ArgumentError('Tsa certificates are not equals');
}
}
ConservancyRecordNom2016.prototype.rootCertificateHex = function () {
var ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.certificatesHex(), 0);
return jsrsasign.ASN1HEX.getHexOfTLV_AtObj(this.certificatesHex(), ar_pos[1]);
};
ConservancyRecordNom2016.prototype.caCertificateHex = function () {
var ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.certificatesHex(), 0);
return jsrsasign.ASN1HEX.getHexOfTLV_AtObj(this.certificatesHex(), ar_pos[0]);
};
ConservancyRecordNom2016.prototype.certificatesHex = function () {
var ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), 0);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[1]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[0]);
return jsrsasign.ASN1HEX.getHexOfTLV_AtObj(this.archiveHex(), ar_pos[3]);
};
ConservancyRecordNom2016.prototype.caName = function () {
if (this.tsaCertificate) {
return this.tsaCertificate.getSubject().O;
}
};
ConservancyRecordNom2016.prototype.rootName = function () {
if (this.rootCertificate) {
return this.rootCertificate.getSubject().O;
}
};
ConservancyRecordNom2016.prototype.messageDigest = function () {
var pkcs9 = this.signedAttributesHex();
var ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(pkcs9, 0);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(pkcs9, ar_pos[2]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(pkcs9, ar_pos[1]);
return jsrsasign.ASN1HEX.getHexOfV_AtObj(pkcs9, ar_pos[0]);
};
ConservancyRecordNom2016.prototype.signedTimeStamp = function () {
var pkcs9 = this.signedAttributesHex();
var ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(pkcs9, 0);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(pkcs9, ar_pos[1]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(pkcs9, ar_pos[1]);
var date = jsrsasign.ASN1HEX.getHexOfV_AtObj(pkcs9, ar_pos[0]);
return common_1.parseDate(common_1.hextoAscii(date));
};
ConservancyRecordNom2016.prototype.signingCertificateV2 = function () {
var pkcs9 = this.signedAttributesHex();
var ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(pkcs9, 0);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(pkcs9, ar_pos[3]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(pkcs9, ar_pos[1]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(pkcs9, ar_pos[0]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(pkcs9, ar_pos[0]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(pkcs9, ar_pos[0]);
return jsrsasign.ASN1HEX.getHexOfV_AtObj(pkcs9, ar_pos[1]);
};
ConservancyRecordNom2016.prototype.tSTInfoHex = function () {
var ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), 0);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[1]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[0]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[2]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[1]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[0]);
return jsrsasign.ASN1HEX.getHexOfTLV_AtObj(this.archiveHex(), ar_pos[0]);
};
ConservancyRecordNom2016.prototype.contentAttributesHex = function () {
var ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), 0);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[1]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[0]);
return jsrsasign.ASN1HEX.getHexOfTLV_AtObj(this.archiveHex(), ar_pos[4]);
};
ConservancyRecordNom2016.prototype.signedAttributesHex = function () {
var ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), 0);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[1]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[0]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[4]);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.archiveHex(), ar_pos[0]);
var hex = jsrsasign.ASN1HEX.getHexOfTLV_AtObj(this.archiveHex(), ar_pos[3]);
if (!hex.startsWith('31')) {
return hex = '31' + hex.slice(2, hex.length);
}
};
ConservancyRecordNom2016.prototype.archiveHex = function () {
return jsrsasign.ASN1HEX.getHexOfTLV_AtObj(this.recordHex, this.positions[1]);
};
ConservancyRecordNom2016.prototype.archiveSignature = function () {
var info = this.contentAttributesHex();
var ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(info, 0);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(info, ar_pos[0]);
return jsrsasign.ASN1HEX.getHexOfV_AtObj(info, ar_pos[5]);
};
ConservancyRecordNom2016.prototype.archiveSignedHash = function () {
var tSTInfo = this.tSTInfoHex();
var ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(tSTInfo, 0);
ar_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(tSTInfo, ar_pos[2]);
return jsrsasign.ASN1HEX.getHexOfV_AtObj(tSTInfo, ar_pos[1]);
};
ConservancyRecordNom2016.prototype.validArchiveHash = function () {
if (this.signedHash !== this.archiveSignedHash()) {
console.error("conservancyRecordNom2016: Signed hash mismatch", {
providedSignedHash: this.signedHash,
archiveSignedHash: this.archiveSignedHash(),
});
return false;
}
if (!this.tsaCertificate.isValidOn(this.signedTimeStamp())) {
return false;
}
if (this.messageDigest() !== common_1.sha256hex(this.tSTInfoHex())) {
console.error("conservancyRecordNom2016: Message digest mismatch", {
expected: common_1.sha256hex(this.tSTInfoHex()),
actual: this.messageDigest()
});
return false;
}
if (!this.equalTimestamps()) {
return false;
}
if (!this.signingCertificateV2()) {
console.error("conservancyRecordNom2016: Signing certificate V2 is not valid");
return false;
}
var isValid = this.tsaCertificate.verifyHexString(this.signedAttributesHex(), this.archiveSignature());
if (!isValid) {
console.error("conservancyRecordNom2016: TSA certificate failed to verify the signed attributes 'hex'");
}
return isValid;
};
ConservancyRecordNom2016.prototype.recordTimestamp = function () {
var ts_pos = jsrsasign.ASN1HEX.getPosArrayOfChildren_AtObj(this.tSTInfoHex(), 0);
var date = jsrsasign.ASN1HEX.getHexOfV_AtObj(this.tSTInfoHex(), ts_pos[4]);
return common_1.parseDate(common_1.hextoAscii(date));
};
ConservancyRecordNom2016.prototype.equalTimestamps = function () {
var recordTime = this.recordTimestamp().getTime();
var signedTime = this.signedTimeStamp().getTime();
var isEqualTime = Date.parse(this.timestamp) === recordTime && recordTime === signedTime;
if (!isEqualTime) {
console.error("conservancyRecordNom2016: Timestamps don't match", {
providedTimestamp: this.timestamp,
recordTimestamp: this.recordTimestamp().toISOString(),
signedTimestamp: this.signedTimeStamp().toISOString()
});
}
return isEqualTime;
};
ConservancyRecordNom2016.prototype.valid = function () {
if (!this.rootCertificate) {
console.error("conservancyRecordNom2016: Root certificate is missing");
return false;
}
var isValid = this.tsaCertificate.validParent(this.rootCertificate.toPem());
if (!isValid) {
console.error("conservancyRecordNom2016: Root certificate is not a valid parent of the TSA certificate");
}
return isValid;
};
ConservancyRecordNom2016.prototype.validParent = function (caPemCert) {
if (this.rootCertificate) {
return this.rootCertificate.validParent(caPemCert);
}
else {
console.error({
message: "conservancyRecordNom2016: Root certificate is missing",
});
}
};
return ConservancyRecordNom2016;
}());
exports.default = ConservancyRecordNom2016;
},{"./certificate":1,"./common":2,"./errors":6,"jsrsasign":126}],5:[function(require,module,exports){
(function (Buffer){
"use strict";
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
return new (P || (P = Promise))(function (resolve, reject) {
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
step((generator = generator.apply(thisArg, _arguments || [])).next());
});
};
var __generator = (this && this.__generator) || function (thisArg, body) {
var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
function verb(n) { return function (v) { return step([n, v]); }; }
function step(op) {
if (f) throw new TypeError("Generator is already executing.");
while (_) try {
if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
if (y = 0, t) op = [op[0] & 2, t.value];
switch (op[0]) {
case 0: case 1: t = op; break;
case 4: _.label++; return { value: op[1], done: false };
case 5: _.label++; y = op[1]; op = [0]; continue;
case 7: op = _.ops.pop(); _.trys.pop(); continue;
default:
if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
if (t[2]) _.ops.pop();
_.trys.pop(); continue;
}
op = body.call(thisArg, _);
} catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
}
};
Object.defineProperty(exports, "__esModule", { value: true });
var jsrsasign = require("jsrsasign");
var signature_1 = require("./signature");
var conservancyRecord_1 = require("./conservancyRecord");
var conservancyRecordNom2016_1 = require("./conservancyRecordNom2016");
var common_1 = require("./common");
var errors_1 = require("./errors");
var xmlPatch_1 = require("./patches/xmlPatch");
var blockchain_1 = require("./services/blockchain");
var certificate_1 = require("./certificate");
var validate_1 = require("./validations/validate");
var VERSION = "0.0.1";
var Document = (function () {
function Document(file, options) {
var _this = this;
var _a;
if (!file) {
throw new errors_1.ArgumentError("file is required");
}
this.pdf_content = file;
this.signers = [];
var defaultOpts = {
version: VERSION,
signers: [],
encrypted: false,
};
this.errors = {};
options = common_1.extend(defaultOpts, options);
this.conservancyRecord = null;
this.recordPresent = false;
if (options.conservancyRecord) {
this.setConservancyRecord(options.conservancyRecord);
}
else
console.error("The conservancy record was not found");
this.contentType = options.contentType;
this.name = options.name;
this.version = options.version;
this.encrypted = options.encrypted === "true" || options.encrypted === true;
this.tracked = options.tracked;
this.destroyed = options.destroyed;
this.blockchainTrack = options.blockchainTrack;
this.blockchainBinding = options.blockchainBinding;
this.transfersXml = options.transfersXml || [];
this.currentHolder = options.currentHolder;
this.prevHolder = options.prevHolder;
this.assetId = options.assetId;
this.network = options.network;
this.electronicDocument = options.electronicDocument;
var digest = new jsrsasign.crypto.MessageDigest({
alg: "sha256",
prov: "cryptojs",
});
this.originalHash = digest.digestHex(this.file("hex"));
if (((_a = options.signers) === null || _a === void 0 ? void 0 : _a.length) > 0) {
options.signers.forEach(function (el) { return _this.addSigner(el); });
}
}
Document.prototype.setConservancyRecord = function (data) {
this.originalXmlHash = data.originalXmlHash;
this.recordPresent = true;
try {
if (!data.version) {
this.conservancyRecord = new conservancyRecord_1.default(data.caCert, data.userCert, data.record, data.timestamp, data.originalXmlHash);
}
else {
this.conservancyRecord = new conservancyRecordNom2016_1.default(data.caCert, data.record, data.timestamp, data.originalXmlHash);
}
}
catch (e) {
throw new errors_1.InvalidRecordError("The conservancy record is not valid: " + e.message);
}
};
Document.prototype.fileBuffer = function () {
if (!this.pdf_content) {
return null;
}
return Buffer.from(this.pdf_content, "base64");
};
Document.prototype.pdfBuffer = function () {
return this.fileBuffer();
};
Document.prototype.file = function (format) {
if (!this.pdf_content) {
return null;
}
if (!format) {
return common_1.b64toAscii(this.pdf_content);
}
if (format === "hex") {
return common_1.b64toHex(this.pdf_content);
}
if (format === "base64") {
return this.pdf_content;
}
throw new errors_1.ArgumentError("unknown format " + format);
};
Document.prototype.setFile = function (file) {
this.pdf_content = file;
};
Document.prototype.toXML = function (eDocument) {
if (!eDocument)
throw new errors_1.ArgumentError("eDocument is required");
return xmlPatch_1.default.toXML(eDocument, this.file("base64"));
};
Document.prototype.pdf = function (format) {
return this.file(format);
};
Document.prototype.addSigner = function (signer) {
if (!signer.cer || !signer.signature || !signer.signedAt) {
throw new errors_1.InvalidSignerError("signer must contain cer, signature and signedAt");
}
return this.signers.push(signer);
};
Document.prototype.signatures = function () {
return this.signers.map(function (signer) {
return new signature_1.default(signer.cer, signer.signature, signer.signedAt, signer.email, signer.ePass, signer.name);
});
};
Document.prototype.validSignatures = function () {
if (!this.originalHash) {
return false;
}
var valid = true;
var oHash = this.originalHash;
this.signatures().forEach(function (signature) {
if (valid && !signature.valid(oHash)) {
return (valid = false);
}
});
return valid;
};
Document.prototype.transfers = function () {
return __awaiter(this, void 0, void 0, function () {
var _this = this;
return __generator(this, function (_a) {
switch (_a.label) {
case 0: return [4, Promise.all(this.transfersXml.map(function (transfer, index) { return __awaiter(_this, void 0, void 0, function () {
var xml, prevHolder, opts, prevAddress, currentAddress, transferData, Transfer;
var _a, _b, _c, _d, _e, _f, _g, _h, _j, _k, _l, _m;
return __generator(this, function (_o) {
switch (_o.label) {
case 0:
Object.entries(this.electronicDocument.$).map(function (_a) {
var key = _a[0], value = _a[1];
if (key.includes("xmlns")) {
transfer.$[key] = value;
}
});
xml = xmlPatch_1.default.parseByElectronicDocument(transfer);
prevHolder = index === 0
? this.currentHolder
: (_f = (_e = (_d = (_c = (_b = (_a = this.electronicDocument) === null || _a === void 0 ? void 0 : _a.transfers) === null || _b === void 0 ? void 0 : _b[0].electronicDocument) === null || _c === void 0 ? void 0 : _c[index - 1].blockchain) === null || _d === void 0 ? void 0 : _d[0]) === null || _e === void 0 ? void 0 : _e.holder) === null || _f === void 0 ? void 0 : _f[0];
return [4, Document.getOptsToInitializeDocument({
xml: xml,
prevHolder: prevHolder,
})];
case 1:
opts = _o.sent();
prevAddress = index === 0
? this.currentHolder.binding[0].signature[0].$.plaintext.split("|")[0]
: this.transfersXml[index - 1].blockchain[0].holder[0].binding[0].signature[0].$.plaintext.split("|")[0];
currentAddress = (_k = (_j = (_h = (_g = xml.eDocument.blockchain) === null || _g === void 0 ? void 0 : _g[0]) === null || _h === void 0 ? void 0 : _h.holder) === null || _j === void 0 ? void 0 : _j[0]) === null || _k === void 0 ? void 0 : _k.binding[0].signature[0].$.plaintext.split("|")[0];
transferData = {
dataBlockchain: ((_m = (_l = this.blockchainTrack) === null || _l === void 0 ? void 0 : _l.transfers) === null || _m === void 0 ? void 0 : _m[index]) || {},
prevAddress: prevAddress,
currentAddress: currentAddress,
};
Transfer = require("./transfer").default;
return [2, new Transfer(xml, opts, transferData)];
}
});
}); }))];
case 1: return [2, _a.sent()];
}
});
});
};
Document.prototype.isSimpleTrackedDocument = function (rootCertificates) {
if (!this.tracked)
throw new Error("Document is not tracked");
var certificateB64 = this.blockchainBinding.certificate[0]._;
var certificateHex = common_1.b64toHex(certificateB64);
var certificate = new certificate_1.default(null, certificateHex);
var isCa = rootCertificates.some(function (rootCer) {
return certificate.isCa(rootCer.cer_hex);
});
return isCa;
};
Document.prototype.isValidHashInTrackedDocument = function (rootCertificates) {
if (!this.tracked)
throw new Error("Document is not tracked");
var plaintext = this.blockchainBinding.signature[0].$.plaintext;
var originalHashPlaintext = plaintext.split("|")[0];
var originalHashInBlockchainBindingIsValid = this.validHashInBlockchainBinding(rootCertificates, plaintext);
if (!originalHashInBlockchainBindingIsValid ||
this.originalHash !== originalHashPlaintext) {
console.error("Document(validate hash in tracked document): invalid hash", {
originalHashInBlockchainBindingIsValid: originalHashInBlockchainBindingIsValid,
providedOriginalHash: this.originalHash,
originalHashInPlaintext: originalHashPlaintext,
});
return {
isValid: false,
error_code: "integrity",
};
}
return {
isValid: true,
};
};
Document.prototype.validHashInBlockchainBinding = function (rootCertificates, hash) {
if (!this.tracked)
throw new Error("Document is not tracked");
if (this.network === "LTC")
return true;
var trackedDocumentIsSimple = this.isSimpleTrackedDocument(rootCertificates);
var cerHex = common_1.b64toHex(this.blockchainBinding.certificate[0]._);
var nodeSignature = this.blockchainBinding.signature[0];
var signatureData = {
signedAt: nodeSignature.$.signedAt,
signatureHex: common_1.b64toHex(nodeSignature._),
};
if (!trackedDocumentIsSimple) {
var certificate_2 = new certificate_1.default(null, cerHex);
var certificateNumberIsValid = rootCertificates.some(function (rootCer) {
return certificate_2.validParent(null, rootCer.cer_hex);
});
var certificateIsFromSigner = this.signers.some(function (signer) { return signer.cer === cerHex; });
if (!certificateNumberIsValid || !certificateIsFromSigner) {
console.error("Document(validate hash in blockchain binding): certificate validation failed", {
certificateNumberIsValid: certificateNumberIsValid,
certificateIsFromSigner: certificateIsFromSigner,
});
return false;
}
}
var signatureInstance = new signature_1.default(cerHex, signatureData.signatureHex, signatureData.signedAt, null, null);
var isValidSignature = signatureInstance.valid(hash);
if (!isValidSignature) {
console.error("Document(validate hash in blockchain binding): signature validation failed");
return false;
}
return true;
};
Document.prototype.getStatusTrackedDocument = function (rootCertificates) {
var _a;
if (!this.tracked)
throw new Error("Document is not tracked");
if (!this.isValidAssetId(rootCertificates).isValid)
return "error";
var transfersLengthXml = ((_a = this.transfersXml) === null || _a === void 0 ? void 0 : _a.length) || 0;
var transfersLengthBlockchain = this.blockchainTrack.transfers.length;
if (this.destroyed) {
transfersLengthXml += 1;
}
if (transfersLengthXml === transfersLengthBlockchain)
return "updated";
if (transfersLengthXml < transfersLengthBlockchain)
return "not_updated";
};
Document.prototype.isValidAssetId = function (rootCertificates) {
if (!this.tracked)
throw new Error("Document is not tracked");
var plaintext = this.blockchainBinding.signature[0].$.plaintext;
var assetPlaintext = plaintext.split("|")[1];
var assetInBlockchainBindingIsValid = this.validHashInBlockchainBinding(rootCertificates, plaintext);
if (!assetInBlockchainBindingIsValid || this.assetId !== assetPlaintext) {
console.error("Asset ID validation failed", {
assetInBlockchainBindingIsValid: assetInBlockchainBindingIsValid,
providedAssetId: this.assetId,
assetInPlaintext: assetPlaintext,
});
return {
isValid: false,
error_code: "integrity",
};
}
if (!this.blockchainTrack) {
console.error("Blockchain track not found");
return {
isValid: false,
error_code: "not_found",
};
}
return {
isValid: true,
};
};
Document.fromXml = function (xmlString, useTestnet) {
if (useTestnet === void 0) { useTestnet = false; }
return __awaiter(this, void 0, void 0, function () {
var _this = this;
return __generator(this, function (_a) {
return [2, new Promise(function (resolve, reject) {
return xmlPatch_1.default.parse(xmlString)
.then(function (xml) { return __awaiter(_this, void 0, void 0, function () {
var opts, doc;
return __generator(this, function (_a) {
switch (_a.label) {
case 0: return [4, this.getOptsToInitializeDocument({
xml: xml,
useTestnet: useTestnet,
isOriginalDocument: true,
})];
case 1:
opts = _a.sent();
doc = new Document(xml.file(), opts);
resolve({
xml: xml,
document: doc,
xmljs: xml.eDocument,
xmlHash: xml.getConservancyRecord() &&
xml.getConservancyRecord().originalXmlHash,
xmlOriginalHash: xml.originalHash,
validate: function (options) {
return validate_1.validateParsedXml({ xml: xml, document: doc, xmlOriginalHash: xml.originalHash }, options);
},
});
return [2];
}
});
}); })
.catch(function (error) { return reject(error); });
})];
});
});
};
Document.getOptsToInitializeDocument = function (_a) {
var xml = _a.xml, _b = _a.prevHolder, prevHolder = _b === void 0 ? null : _b, _c = _a.useTestnet, useTestnet = _c === void 0 ? false : _c, _d = _a.isOriginalDocument, isOriginalDocument = _d === void 0 ? false : _d;
return __awaiter(void 0, void 0, void 0, function () {
var parseStringToBoolean, opts, assetIdPlaintext, network, blockchainInstance, blockchainTrack, error_1;
var _e, _f, _g, _h, _j, _k, _l, _m, _o, _p, _q;
return __generator(this, function (_r) {
switch (_r.label) {
case 0:
parseStringToBoolean = function (string) { return string === "true"; };
opts = {
electronicDocument: xml.eDocument,
signers: xml.xmlSigners(),
version: xml.version,
name: xml.name,
encrypted: xml.encrypted,
contentType: xml.contentType,
conservancyRecord: xml.getConservancyRecord(),
blockchainTrack: null,
tracked: xml.tracked,
destroyed: parseStringToBoolean(xml.destroyed),
transfersXml: ((_g = (_f = (_e = xml.eDocument) === null || _e === void 0 ? void 0 : _e.transfers) === null || _f === void 0 ? void 0 : _f[0]) === null || _g === void 0 ? void 0 : _g.electronicDocument) || null,
blockchainBinding: (_l = (_k = (_j = (_h = xml.eDocument) === null || _h === void 0 ? void 0 : _h.blockchain) === null || _j === void 0 ? void 0 : _j[0]) === null || _k === void 0 ? void 0 : _k.binding) === null || _l === void 0 ? void 0 : _l[0],
currentHolder: (_q = (_p = (_o = (_m = xml.eDocument) === null || _m === void 0 ? void 0 : _m.blockchain) === null || _o === void 0 ? void 0 : _o[0]) === null || _p === void 0 ? void 0 : _p.holder) === null || _q === void 0 ? void 0 : _q[0],
prevHolder: prevHolder,
assetId: null,
network: null,
};
if (!(xml.tracked && isOriginalDocument)) return [3, 4];
assetIdPlaintext = xml.eDocument.blockchain[0].binding[0].signature[0].$.plaintext.split("|")[1];
network = xml.eDocument.blockchain[0].$.name;
opts.assetId = assetIdPlaintext;
opts.network = network;
_r.label = 1;
case 1:
_r.trys.push([1, 3, , 4]);
blockchainInstance = blockchain_1.Blockchain.init(network);
if (useTestnet)
blockchainInstance.useTestnet();
return [4, blockchainInstance.getBlockchainTrack(assetIdPlaintext)];
case 2:
blockchainTrack = _r.sent();
opts.blockchainTrack = blockchainTrack;
return [3, 4];
case 3:
error_1 = _r.sent();