milliways-infosec/AikidoSec-safe-chain
7
0
Fork 0
mirror of https://github.com/AikidoSec/safe-chain.git synced 2026-05-26 12:10:49 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix linting issue

Browse source
This commit is contained in:
Reinier Criel 2025-11-10 11:30:24 -08:00
parent 214161722e
commit b0e716b7f2
1 changed files with 8 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

15
packages/safe-chain/src/registryProxy/certUtils.js
View file

@ -11,6 +11,7 @@ const ca = loadCa();
const certCache = new Map(); const certCache = new Map();
// Known return values for os.platform()
const OS_DARWIN = "darwin"; const OS_DARWIN = "darwin";
const OS_LINUX = "linux"; const OS_LINUX = "linux";
const OS_WINDOWS = "win32"; const OS_WINDOWS = "win32";
@ -131,19 +132,19 @@ function generateCa() {
export async function isSafeChainCAInstalled() { export async function isSafeChainCAInstalled() {
const platform = os.platform(); const platform = os.platform();
try { try {
if (platform === "darwin") { if (platform === OS_DARWIN) {
// macOS: check System Keychain for cert // macOS: check System Keychain for cert
const res = await safeSpawn("security", ["find-certificate", "-c", SAFE_CHAIN_CA_COMMON_NAME, DARWIN_CA_PATH], { stdio: "pipe" }); const res = await safeSpawn("security", ["find-certificate", "-c", SAFE_CHAIN_CA_COMMON_NAME, DARWIN_CA_PATH], { stdio: "pipe" });
return res.stdout.includes(SAFE_CHAIN_CA_COMMON_NAME); return res.stdout.includes(SAFE_CHAIN_CA_COMMON_NAME);
} else if (platform === "linux") { } else if (platform === OS_LINUX) {
// Linux: check for CA file // Linux: check for CA file
return fs.existsSync(LINUX_CA_PATH); return fs.existsSync(LINUX_CA_PATH);
} else if (platform === "win32") { } else if (platform === OS_WINDOWS) {
// Windows: check Root store for cert // Windows: check Root store for cert
return await safeSpawn("certutil", ["-store", "Root", SAFE_CHAIN_CA_COMMON_NAME], { stdio: "pipe" }).then(res => res.stdout.includes(SAFE_CHAIN_CA_COMMON_NAME)); return await safeSpawn("certutil", ["-store", "Root", SAFE_CHAIN_CA_COMMON_NAME], { stdio: "pipe" }).then(res => res.stdout.includes(SAFE_CHAIN_CA_COMMON_NAME));
} }
} catch (/** @type any */ error) { } catch (/** @type any */ error) {
// If check fails, assume not installed ui.writeVerbose(`Safe-chain: CA check failed: ${error?.message || error}`);
return false; return false;
} }
return false; return false;
@ -163,14 +164,14 @@ export async function installSafeChainCA() {
ui.writeVerbose("Safe-chain: CA already installed in OS trust store."); ui.writeVerbose("Safe-chain: CA already installed in OS trust store.");
return; return;
} }
if (platform === "darwin") { if (platform === OS_DARWIN) {
// macOS: use security CLI // macOS: use security CLI
await safeSpawn("sudo", ["security", "add-trusted-cert", "-d", "-r", "trustRoot", "-k", DARWIN_CA_PATH, caPath], { stdio: "inherit" }); await safeSpawn("sudo", ["security", "add-trusted-cert", "-d", "-r", "trustRoot", "-k", DARWIN_CA_PATH, caPath], { stdio: "inherit" });
} else if (platform === "linux") { } else if (platform === OS_LINUX) {
// Linux: use update-ca-certificates // Linux: use update-ca-certificates
await safeSpawn("sudo", ["cp", caPath, LINUX_CA_PATH], { stdio: "inherit" }); await safeSpawn("sudo", ["cp", caPath, LINUX_CA_PATH], { stdio: "inherit" });
await safeSpawn("sudo", ["update-ca-certificates"], { stdio: "inherit" }); await safeSpawn("sudo", ["update-ca-certificates"], { stdio: "inherit" });
} else if (platform === "win32") { } else if (platform === OS_WINDOWS) {
// Windows: use certutil // Windows: use certutil
await safeSpawn("certutil", ["-addstore", "-f", "Root", caPath], { stdio: "inherit" }); await safeSpawn("certutil", ["-addstore", "-f", "Root", caPath], { stdio: "inherit" });
} else { } else {