feat: Implement subset of crypto.subtle.importKey which can import a JSONWebKey using RSASSA-PKCS1-v1_5

[JakeChampion]

No description provided.

[elliottt]

This is looking great!

[elliottt]

Could you add an issue to update this according to the migration guide? It looks like there's an alternate api that we should use instead.

https://www.openssl.org/docs/man3.0/man7/migration_guide.html

[JakeChampion]

Issue at #477

[elliottt]

This looks great! Just a few suggestions before merging 👍

[stefan-guggisberg]

@JakeChampion Thanks for landing this PR in 1.7.0.

I was hoping this would solve our problem (3rd party dependencies relying on subtle.crypto e.g. for signing AWS requests. However, we're now seeing different errors, such as Supplied algorithm is not yet supported.

Here's a code fragment from https://github.com/mhart/aws4fetch which seems to trigger this error:

async function hmac(key2, string3) {
  const cryptoKey = await crypto.subtle.importKey(
    "raw",
    typeof key2 === "string" ? encoder2.encode(key2) : key2,
    { name: "HMAC", hash: { name: "SHA-256" } },
    false,
    ["sign"]
  );
  return crypto.subtle.sign("HMAC", cryptoKey, encoder2.encode(string3));
}

It seems like the lack of HMAC support is causing the error.

Would this PR solve our problem? #440

Can you give us an ETA when this PR lands in production?

[JakeChampion]

@stefan-guggisberg - #440 does solve that issue 👍 - I am breaking that PR up into smaller more manageable PR for the team to review. If you subscribe to #440, when it is closed you should be able to run the code you've posted without any issues 👍