/
OcspResponsesID.js
282 lines (260 loc) · 8.29 KB
/
OcspResponsesID.js
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
import * as asn1js from "asn1js";
import { getParametersValue } from "pvutils";
import { getCrypto, getOIDByAlgorithm, AlgorithmIdentifier } from "pkijs";
import OcspIdentifier from "./OcspIdentifier.js";
import OtherHashAlgAndValue from "./OtherHashAlgAndValue.js";
//**************************************************************************************
export default class OcspResponsesID
{
//**********************************************************************************
/**
* Constructor for OcspResponsesID class
* @param {Object} [parameters={}]
* @property {Object} [schema] asn1js parsed value
*/
constructor(parameters = {})
{
//region Internal properties of the object
/**
* @type {OcspIdentifier}
* @description ocspIdentifier
*/
this.ocspIdentifier = getParametersValue(parameters, "ocspIdentifier", OcspResponsesID.defaultValues("ocspIdentifier"));
if("ocspRepHash" in parameters)
/**
* @type {OctetString|OtherHashAlgAndValue|Any}
* @description ocspRepHash
*/
this.ocspRepHash = getParametersValue(parameters, "ocspRepHash", OcspResponsesID.defaultValues("ocspRepHash"));
//endregion
//region If input argument array contains "schema" for this object
if("schema" in parameters)
this.fromSchema(parameters.schema);
//endregion
}
//**********************************************************************************
/**
* Return default values for all class members
* @param {string} memberName String name for a class member
*/
static defaultValues(memberName)
{
switch(memberName)
{
case "ocspIdentifier":
return new OcspIdentifier();
case "ocspRepHash":
return new asn1js.Any();
default:
throw new Error(`Invalid member name for OcspResponsesID class: ${memberName}`);
}
}
//**********************************************************************************
/**
* Compare values with default values for all class members
* @param {string} memberName String name for a class member
* @param {*} memberValue Value to compare with default value
*/
static compareWithDefault(memberName, memberValue)
{
switch(memberName)
{
case "ocspIdentifier":
return ((OcspIdentifier.compareWithDefault("ocspResponderID", memberValue.ocspResponderID)) &&
(OcspIdentifier.compareWithDefault("producedAt", memberValue.producedAt)));
case "ocspRepHash":
return (memberValue instanceof asn1js.Any);
default:
throw new Error(`Invalid member name for OcspResponsesID class: ${memberName}`);
}
}
//**********************************************************************************
/**
* Return value of asn1js schema for current class
* @param {Object} parameters Input parameters for the schema
* @returns {Object} asn1js schema object
*/
static schema(parameters = {})
{
//OcspResponsesID ::= SEQUENCE {
// ocspIdentifier OcspIdentifier,
// ocspRepHash OtherHash OPTIONAL
//}
/**
* @type {Object}
* @property {string} [blockName]
* @property {string} [ocspIdentifier]
* @property {string} [ocspRepHashSimple]
* @property {string} [ocspRepHashComplex]
*/
const names = getParametersValue(parameters, "names", {});
return (new asn1js.Sequence({
name: (names.blockName || ""),
optional: (names.optional || false),
value: [
OcspIdentifier.schema(names.ocspIdentifier || {
names: {
blockName: ""
}
}),
new asn1js.Choice({
optional: true,
value: [
new asn1js.OctetString({ name: (names.ocspRepHashSimple || "") }),
OtherHashAlgAndValue.schema(names.ocspRepHashComplex || {
names: {
blockName: ""
}
})
]
})
]
}));
}
//**********************************************************************************
/**
* Convert parsed asn1js object into current class
* @param {!Object} schema
*/
fromSchema(schema)
{
//region Check the schema is valid
const asn1 = asn1js.compareSchema(schema,
schema,
OcspResponsesID.schema({
names: {
ocspIdentifier: {
names: {
blockName: "ocspIdentifier"
}
},
ocspRepHashSimple: "ocspRepHash",
ocspRepHashComplex: {
names: {
blockName: "ocspRepHash"
}
}
}
})
);
if(asn1.verified === false)
throw new Error("Object's schema was not verified against input data for OcspResponsesID");
//endregion
//region Get internal properties from parsed schema
this.ocspIdentifier = new OcspIdentifier({ schema: asn1.result.ocspIdentifier });
if("ocspRepHash" in asn1.result)
{
if(asn1.result.ocspRepHash instanceof asn1js.OctetString)
this.ocspRepHash = asn1.result.ocspRepHash;
else
this.ocspRepHash = new OtherHashAlgAndValue({ schema: asn1.result.ocspRepHash });
}
//endregion
}
//**********************************************************************************
/**
* Convert current object to asn1js object and set correct values
* @returns {Object} asn1js object
*/
toSchema()
{
//region Create array for output sequence
const outputArray = [
this.ocspIdentifier.toSchema()
];
if("ocspRepHash" in this)
{
if(this.ocspRepHash instanceof asn1js.OctetString)
outputArray.push(this.ocspRepHash);
else
outputArray.push(this.ocspRepHash.toSchema());
}
//endregion
//region Construct and return new ASN.1 schema for this object
return (new asn1js.Sequence({
value: outputArray
}));
//endregion
}
//**********************************************************************************
/**
* Convertion for the class to JSON object
* @returns {Object}
*/
toJSON()
{
const _object = {
ocspIdentifier: this.ocspIdentifier.toJSON()
};
if("ocspRepHash" in this)
_object.ocspRepHash = this.ocspRepHash.toJSON();
return _object;
}
//**********************************************************************************
/**
* Creates "OcspResponsesID" for given CMS Signed Data and signer index
* @param {Object} parameters Additional parameters for making attribute
* @returns {Promise}
*/
fillValues(parameters)
{
//region Initial variables
let sequence = Promise.resolve();
let hashAlgorithm = "SHA-1";
let ocspResponse;
//endregion
//region Check input parameters
if("hashAlgorithm" in parameters)
hashAlgorithm = parameters.hashAlgorithm;
if("ocspResponse" in parameters)
ocspResponse = parameters.ocspResponse; // in_window.org.pkijs.simpl.OCSP_RESPONSE
else
return Promise.reject("Parameter \"ocspResponse\" is mandatory for making \"OcspResponsesID\"");
//endregion
//region Get a "crypto" extension
const crypto = getCrypto();
if(typeof crypto === "undefined")
return Promise.reject("Unable to create WebCrypto object");
//endregion
//region Fill correct value for "hashIndAlgorithm"
sequence = sequence.then(
() => {
if(hashAlgorithm.toUpperCase() !== "SHA-1")
{
const oid = getOIDByAlgorithm({ name: hashAlgorithm });
if(oid === "")
return Promise.reject(`Incorrect hashing algorithm: ${hashAlgorithm}`);
this.ocspRepHash = new OtherHashAlgAndValue({
hashAlgorithm: new AlgorithmIdentifier({
algorithmId: oid,
algorithmParams: new asn1js.Null()
})
});
}
return Promise.resolve();
}
);
//endregion
//region Create all remaining attributes
sequence = sequence.then(
() => crypto.digest({ name: hashAlgorithm }, ocspResponse.toSchema().toBER(false)),
error => Promise.reject(error)
).then(
result => {
if(this.ocspRepHash instanceof OtherHashAlgAndValue)
this.ocspRepHash.hashValue = new asn1js.OctetString({ valueHex: result });
else
this.ocspRepHash = new asn1js.OctetString({ valueHex: result });
this.ocspIdentifier = new OcspIdentifier();
this.ocspIdentifier.fillValues({
ocspResponse
});
},
error => Promise.reject(error)
);
//endregion
return sequence;
}
//**********************************************************************************
}
//**************************************************************************************