node-opcua / node-opcua-pki / 33253621395

91%

push

github

docs: opaque keys (keyOperations) in the private-key protection guide

New section: the passphrase / privateKeyProvider / keyOperations
decision table, a KMS-style IKeyOperations example (typechecked
against the built d.ts), the behavior contract when opaque, and the
renew-certificate-keep-HSM-key CSR workflow. Threat model gains the
honest-scope statement: non-exportable and auditable, not immune to
in-process use by a resident attacker. certificate-manager.md options
table and methods paragraph updated accordingly.

683 of 904 branches covered (75.55%)

1870 of 2045 relevant lines covered (91.44%)

301.51 hits per line