node-opcua / node-opcua-pki / 22284932950

91%

Build Type

push

github

Committed by erossignon

Commit Message

feat(pki): Enhance PFX toolbox and certificate verification

- Introduced `toolbox_pfx.ts` providing a comprehensive suite of functions
  to create, extract, and inspect PFX (PKCS#12) files using OpenSSL
  (`createPFX`, `extractCertificateFromPFX`, `extractAllFromPFX`, etc.).
- Enhanced `verifyCertificate` in `CertificateManager` with a new option
  `acceptCertificateWithValidIssuerChain` to accept certificates not explicitly
  in the trusted list if their issuer chain is valid and trusted.
- Updated `makeFingerprint` to correctly compute the thumbprint of the leaf
  certificate when a full PEM chain is provided.
- Replaced the deprecated `getCertificateStatus` method with `verifyCertificate`
  across the codebase and updated unit tests accordingly.
- Cleaned up internal trust/reject lists check behavior (e.g. automatically
  un-trusting if rejecting, and vice versa).
- Added robust test suites for `toolbox_pfx`, untrusted issuers, and edge
  cases in certificate verification.

Run Details

222 of 303 branches covered (73.27%)

67 of 69 new or added lines in 3 files covered. (97.1%)

76 existing lines in 3 files now uncovered.

1022 of 1118 relevant lines covered (91.41%)

445.43 hits per line