node-opcua / node-opcua-pki / 23543726967

92%

Build Type

push

github

Committed by erossignon

Commit Message

feat(ca): add generateKeyPairAndSignDER method
(US-113 ACs 1-4)

New method on CertificateAuthority that generates an
ephemeral RSA key pair, creates an internal CSR, signs
it, and returns { certificateDer, privateKey }. The
private key is never stored by the CA — it exists only
in a temporary directory that is cleaned up after the
operation.

This supports StartNewKeyPairRequest (OPC UA Part 12)
for constrained devices that cannot generate their own
keys.

Options: applicationUri (required), subject, dns, ip,
validity (default: 365), startDate, keySize (default:
2048).

Also enhanced signCertificateRequestFromDER() to accept
CA override options (dns, ip, applicationUri, startDate,
subject) via a new SignCertificateOptions interface.

Exported new types:
- GenerateKeyPairAndSignOptions
- SignCertificateOptions

Added 3 unit tests:
- T5i: basic cert+key generation with cert-key matching
- T5j: custom keySize (3072-bit)
- T5k: signCertificateRequestFromDER with CA overrides

Run Details

261 of 364 branches covered (71.7%)

29 of 29 new or added lines in 2 files covered. (100.0%)

32 existing lines in 1 file now uncovered.

1207 of 1307 relevant lines covered (92.35%)

259.98 hits per line