node-opcua / node-opcua-pki / 23548041496

92%

Build Type

push

github

Committed by erossignon

Commit Message

feat(ca): issuer chain support and code cleanup

- signCACertificateRequest now auto-appends signing
  CA's cert chain via constructCertificateChain,
  producing a complete chain file per OPC UA Part 6
  §6.2.6 with zero user effort
- installCACertificate splits multi-cert PEM files:
  first cert → cacert.pem, remaining issuers →
  public/issuer_chain.pem (new file)
- constructCertificateChain appends issuer_chain.pem
  if present, producing full chains: [endEntity,
  intermediateCA, rootCA]
- Added issuerCertificateChain getter for the new
  public/issuer_chain.pem path

Refactoring:
- DRY: installCACertificate reads file once, splits
  PEM blocks, then verifies key (was reading twice)
- Use this.caCertificate getter instead of recomputing
  path.join(caRootDir, "public/cacert.pem")
- Added comment explaining processAltNames({} as
  Params) side-effect in _generateCSR

Tests updated (T8c, T8d, T8j) to verify 3-element
chains (end-entity + intermediate + root CA).

Run Details

287 of 401 branches covered (71.57%)

20 of 23 new or added lines in 1 file covered. (86.96%)

25 existing lines in 1 file now uncovered.

1317 of 1430 relevant lines covered (92.1%)

241.47 hits per line