node-opcua / node-opcua-pki / 23511193245

92%

push

github

fix(ca): recover from partial CA initialization

construct_CertificateAuthority now checks for both
cakey.pem AND cacert.pem before skipping CA creation.

If only the private key exists (partial init from a
previous failure, e.g. OpenSSL 3.5 authorityKeyIdentifier
error), the stale key and CSR are deleted and the CA is
rebuilt from scratch.

Previously, a failed first init left cakey.pem behind,
causing all subsequent initialize() calls to skip CA
creation — leaving cacert.pem permanently missing.

Add test: "should recover from partial CA init"

251 of 349 branches covered (71.92%)

9 of 10 new or added lines in 1 file covered. (90.0%)

1179 of 1279 relevant lines covered (92.18%)

264.72 hits per line