milliways-infosec/AikidoSec-safe-chain
7
0
Fork 0
mirror of https://github.com/AikidoSec/safe-chain.git synced 2026-05-26 12:10:49 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix function placement

Browse source
This commit is contained in:
Reinier Criel 2025-11-27 13:08:35 -08:00
parent a0bbe38ee7
commit 0ee5106b7a
1 changed files with 13 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

26
packages/safe-chain/src/registryProxy/certUtils.js
View file

@ -8,6 +8,17 @@ const ca = loadCa();
const certCache = new Map();
/**
* @param {forge.pki.PublicKey} publicKey
* @returns {string}
*/
function createKeyIdentifier(publicKey) {
return forge.pki.getPublicKeyFingerprint(publicKey, {
encoding: "binary",
md: forge.md.sha1.create(),
});
}
export function getCaCertPath() {
return path.join(certFolder, "ca-cert.pem");
}
@ -165,6 +176,7 @@ function generateCa() {
digitalSignature: true,
keyEncipherment: true,
},
{
/*
Subject Key Identifier (SKI)
@ -174,10 +186,10 @@ function generateCa() {
System Python installations may be more lenient.
https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.2
*/
{
name: "subjectKeyIdentifier",
subjectKeyIdentifier: keyIdentifier,
},
{
/*
Authority Key Identifier (AKI)
@ -187,7 +199,6 @@ function generateCa() {
Without this, Python virtualenv certificate validation might fail
https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.1
*/
{
name: "authorityKeyIdentifier",
keyIdentifier,
},
@ -199,14 +210,3 @@ function generateCa() {
certificate: cert,
};
}
/**
* @param {forge.pki.PublicKey} publicKey
* @returns {string}
*/
function createKeyIdentifier(publicKey) {
return forge.pki.getPublicKeyFingerprint(publicKey, {
encoding: "binary",
md: forge.md.sha1.create(),
});
}