Replace clientcert with 0.2.1
Replace the clientcert directory with a release of the 0.2.1 tag built using npm run build.
This commit is contained in:
parent
2ad9cbaabe
commit
5581d9e5ae
16 changed files with 10761 additions and 6079 deletions
5
clientcert/.gitignore
vendored
5
clientcert/.gitignore
vendored
|
|
@ -1,5 +0,0 @@
|
||||||
*.pem
|
|
||||||
.*.swp
|
|
||||||
/.idea/
|
|
||||||
/node_modules/
|
|
||||||
/public/
|
|
||||||
|
|
@ -1,339 +0,0 @@
|
||||||
GNU GENERAL PUBLIC LICENSE
|
|
||||||
Version 2, June 1991
|
|
||||||
|
|
||||||
Copyright (C) 1989, 1991 Free Software Foundation, Inc.,
|
|
||||||
51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
|
|
||||||
Everyone is permitted to copy and distribute verbatim copies
|
|
||||||
of this license document, but changing it is not allowed.
|
|
||||||
|
|
||||||
Preamble
|
|
||||||
|
|
||||||
The licenses for most software are designed to take away your
|
|
||||||
freedom to share and change it. By contrast, the GNU General Public
|
|
||||||
License is intended to guarantee your freedom to share and change free
|
|
||||||
software--to make sure the software is free for all its users. This
|
|
||||||
General Public License applies to most of the Free Software
|
|
||||||
Foundation's software and to any other program whose authors commit to
|
|
||||||
using it. (Some other Free Software Foundation software is covered by
|
|
||||||
the GNU Lesser General Public License instead.) You can apply it to
|
|
||||||
your programs, too.
|
|
||||||
|
|
||||||
When we speak of free software, we are referring to freedom, not
|
|
||||||
price. Our General Public Licenses are designed to make sure that you
|
|
||||||
have the freedom to distribute copies of free software (and charge for
|
|
||||||
this service if you wish), that you receive source code or can get it
|
|
||||||
if you want it, that you can change the software or use pieces of it
|
|
||||||
in new free programs; and that you know you can do these things.
|
|
||||||
|
|
||||||
To protect your rights, we need to make restrictions that forbid
|
|
||||||
anyone to deny you these rights or to ask you to surrender the rights.
|
|
||||||
These restrictions translate to certain responsibilities for you if you
|
|
||||||
distribute copies of the software, or if you modify it.
|
|
||||||
|
|
||||||
For example, if you distribute copies of such a program, whether
|
|
||||||
gratis or for a fee, you must give the recipients all the rights that
|
|
||||||
you have. You must make sure that they, too, receive or can get the
|
|
||||||
source code. And you must show them these terms so they know their
|
|
||||||
rights.
|
|
||||||
|
|
||||||
We protect your rights with two steps: (1) copyright the software, and
|
|
||||||
(2) offer you this license which gives you legal permission to copy,
|
|
||||||
distribute and/or modify the software.
|
|
||||||
|
|
||||||
Also, for each author's protection and ours, we want to make certain
|
|
||||||
that everyone understands that there is no warranty for this free
|
|
||||||
software. If the software is modified by someone else and passed on, we
|
|
||||||
want its recipients to know that what they have is not the original, so
|
|
||||||
that any problems introduced by others will not reflect on the original
|
|
||||||
authors' reputations.
|
|
||||||
|
|
||||||
Finally, any free program is threatened constantly by software
|
|
||||||
patents. We wish to avoid the danger that redistributors of a free
|
|
||||||
program will individually obtain patent licenses, in effect making the
|
|
||||||
program proprietary. To prevent this, we have made it clear that any
|
|
||||||
patent must be licensed for everyone's free use or not licensed at all.
|
|
||||||
|
|
||||||
The precise terms and conditions for copying, distribution and
|
|
||||||
modification follow.
|
|
||||||
|
|
||||||
GNU GENERAL PUBLIC LICENSE
|
|
||||||
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
|
|
||||||
|
|
||||||
0. This License applies to any program or other work which contains
|
|
||||||
a notice placed by the copyright holder saying it may be distributed
|
|
||||||
under the terms of this General Public License. The "Program", below,
|
|
||||||
refers to any such program or work, and a "work based on the Program"
|
|
||||||
means either the Program or any derivative work under copyright law:
|
|
||||||
that is to say, a work containing the Program or a portion of it,
|
|
||||||
either verbatim or with modifications and/or translated into another
|
|
||||||
language. (Hereinafter, translation is included without limitation in
|
|
||||||
the term "modification".) Each licensee is addressed as "you".
|
|
||||||
|
|
||||||
Activities other than copying, distribution and modification are not
|
|
||||||
covered by this License; they are outside its scope. The act of
|
|
||||||
running the Program is not restricted, and the output from the Program
|
|
||||||
is covered only if its contents constitute a work based on the
|
|
||||||
Program (independent of having been made by running the Program).
|
|
||||||
Whether that is true depends on what the Program does.
|
|
||||||
|
|
||||||
1. You may copy and distribute verbatim copies of the Program's
|
|
||||||
source code as you receive it, in any medium, provided that you
|
|
||||||
conspicuously and appropriately publish on each copy an appropriate
|
|
||||||
copyright notice and disclaimer of warranty; keep intact all the
|
|
||||||
notices that refer to this License and to the absence of any warranty;
|
|
||||||
and give any other recipients of the Program a copy of this License
|
|
||||||
along with the Program.
|
|
||||||
|
|
||||||
You may charge a fee for the physical act of transferring a copy, and
|
|
||||||
you may at your option offer warranty protection in exchange for a fee.
|
|
||||||
|
|
||||||
2. You may modify your copy or copies of the Program or any portion
|
|
||||||
of it, thus forming a work based on the Program, and copy and
|
|
||||||
distribute such modifications or work under the terms of Section 1
|
|
||||||
above, provided that you also meet all of these conditions:
|
|
||||||
|
|
||||||
a) You must cause the modified files to carry prominent notices
|
|
||||||
stating that you changed the files and the date of any change.
|
|
||||||
|
|
||||||
b) You must cause any work that you distribute or publish, that in
|
|
||||||
whole or in part contains or is derived from the Program or any
|
|
||||||
part thereof, to be licensed as a whole at no charge to all third
|
|
||||||
parties under the terms of this License.
|
|
||||||
|
|
||||||
c) If the modified program normally reads commands interactively
|
|
||||||
when run, you must cause it, when started running for such
|
|
||||||
interactive use in the most ordinary way, to print or display an
|
|
||||||
announcement including an appropriate copyright notice and a
|
|
||||||
notice that there is no warranty (or else, saying that you provide
|
|
||||||
a warranty) and that users may redistribute the program under
|
|
||||||
these conditions, and telling the user how to view a copy of this
|
|
||||||
License. (Exception: if the Program itself is interactive but
|
|
||||||
does not normally print such an announcement, your work based on
|
|
||||||
the Program is not required to print an announcement.)
|
|
||||||
|
|
||||||
These requirements apply to the modified work as a whole. If
|
|
||||||
identifiable sections of that work are not derived from the Program,
|
|
||||||
and can be reasonably considered independent and separate works in
|
|
||||||
themselves, then this License, and its terms, do not apply to those
|
|
||||||
sections when you distribute them as separate works. But when you
|
|
||||||
distribute the same sections as part of a whole which is a work based
|
|
||||||
on the Program, the distribution of the whole must be on the terms of
|
|
||||||
this License, whose permissions for other licensees extend to the
|
|
||||||
entire whole, and thus to each and every part regardless of who wrote it.
|
|
||||||
|
|
||||||
Thus, it is not the intent of this section to claim rights or contest
|
|
||||||
your rights to work written entirely by you; rather, the intent is to
|
|
||||||
exercise the right to control the distribution of derivative or
|
|
||||||
collective works based on the Program.
|
|
||||||
|
|
||||||
In addition, mere aggregation of another work not based on the Program
|
|
||||||
with the Program (or with a work based on the Program) on a volume of
|
|
||||||
a storage or distribution medium does not bring the other work under
|
|
||||||
the scope of this License.
|
|
||||||
|
|
||||||
3. You may copy and distribute the Program (or a work based on it,
|
|
||||||
under Section 2) in object code or executable form under the terms of
|
|
||||||
Sections 1 and 2 above provided that you also do one of the following:
|
|
||||||
|
|
||||||
a) Accompany it with the complete corresponding machine-readable
|
|
||||||
source code, which must be distributed under the terms of Sections
|
|
||||||
1 and 2 above on a medium customarily used for software interchange; or,
|
|
||||||
|
|
||||||
b) Accompany it with a written offer, valid for at least three
|
|
||||||
years, to give any third party, for a charge no more than your
|
|
||||||
cost of physically performing source distribution, a complete
|
|
||||||
machine-readable copy of the corresponding source code, to be
|
|
||||||
distributed under the terms of Sections 1 and 2 above on a medium
|
|
||||||
customarily used for software interchange; or,
|
|
||||||
|
|
||||||
c) Accompany it with the information you received as to the offer
|
|
||||||
to distribute corresponding source code. (This alternative is
|
|
||||||
allowed only for noncommercial distribution and only if you
|
|
||||||
received the program in object code or executable form with such
|
|
||||||
an offer, in accord with Subsection b above.)
|
|
||||||
|
|
||||||
The source code for a work means the preferred form of the work for
|
|
||||||
making modifications to it. For an executable work, complete source
|
|
||||||
code means all the source code for all modules it contains, plus any
|
|
||||||
associated interface definition files, plus the scripts used to
|
|
||||||
control compilation and installation of the executable. However, as a
|
|
||||||
special exception, the source code distributed need not include
|
|
||||||
anything that is normally distributed (in either source or binary
|
|
||||||
form) with the major components (compiler, kernel, and so on) of the
|
|
||||||
operating system on which the executable runs, unless that component
|
|
||||||
itself accompanies the executable.
|
|
||||||
|
|
||||||
If distribution of executable or object code is made by offering
|
|
||||||
access to copy from a designated place, then offering equivalent
|
|
||||||
access to copy the source code from the same place counts as
|
|
||||||
distribution of the source code, even though third parties are not
|
|
||||||
compelled to copy the source along with the object code.
|
|
||||||
|
|
||||||
4. You may not copy, modify, sublicense, or distribute the Program
|
|
||||||
except as expressly provided under this License. Any attempt
|
|
||||||
otherwise to copy, modify, sublicense or distribute the Program is
|
|
||||||
void, and will automatically terminate your rights under this License.
|
|
||||||
However, parties who have received copies, or rights, from you under
|
|
||||||
this License will not have their licenses terminated so long as such
|
|
||||||
parties remain in full compliance.
|
|
||||||
|
|
||||||
5. You are not required to accept this License, since you have not
|
|
||||||
signed it. However, nothing else grants you permission to modify or
|
|
||||||
distribute the Program or its derivative works. These actions are
|
|
||||||
prohibited by law if you do not accept this License. Therefore, by
|
|
||||||
modifying or distributing the Program (or any work based on the
|
|
||||||
Program), you indicate your acceptance of this License to do so, and
|
|
||||||
all its terms and conditions for copying, distributing or modifying
|
|
||||||
the Program or works based on it.
|
|
||||||
|
|
||||||
6. Each time you redistribute the Program (or any work based on the
|
|
||||||
Program), the recipient automatically receives a license from the
|
|
||||||
original licensor to copy, distribute or modify the Program subject to
|
|
||||||
these terms and conditions. You may not impose any further
|
|
||||||
restrictions on the recipients' exercise of the rights granted herein.
|
|
||||||
You are not responsible for enforcing compliance by third parties to
|
|
||||||
this License.
|
|
||||||
|
|
||||||
7. If, as a consequence of a court judgment or allegation of patent
|
|
||||||
infringement or for any other reason (not limited to patent issues),
|
|
||||||
conditions are imposed on you (whether by court order, agreement or
|
|
||||||
otherwise) that contradict the conditions of this License, they do not
|
|
||||||
excuse you from the conditions of this License. If you cannot
|
|
||||||
distribute so as to satisfy simultaneously your obligations under this
|
|
||||||
License and any other pertinent obligations, then as a consequence you
|
|
||||||
may not distribute the Program at all. For example, if a patent
|
|
||||||
license would not permit royalty-free redistribution of the Program by
|
|
||||||
all those who receive copies directly or indirectly through you, then
|
|
||||||
the only way you could satisfy both it and this License would be to
|
|
||||||
refrain entirely from distribution of the Program.
|
|
||||||
|
|
||||||
If any portion of this section is held invalid or unenforceable under
|
|
||||||
any particular circumstance, the balance of the section is intended to
|
|
||||||
apply and the section as a whole is intended to apply in other
|
|
||||||
circumstances.
|
|
||||||
|
|
||||||
It is not the purpose of this section to induce you to infringe any
|
|
||||||
patents or other property right claims or to contest validity of any
|
|
||||||
such claims; this section has the sole purpose of protecting the
|
|
||||||
integrity of the free software distribution system, which is
|
|
||||||
implemented by public license practices. Many people have made
|
|
||||||
generous contributions to the wide range of software distributed
|
|
||||||
through that system in reliance on consistent application of that
|
|
||||||
system; it is up to the author/donor to decide if he or she is willing
|
|
||||||
to distribute software through any other system and a licensee cannot
|
|
||||||
impose that choice.
|
|
||||||
|
|
||||||
This section is intended to make thoroughly clear what is believed to
|
|
||||||
be a consequence of the rest of this License.
|
|
||||||
|
|
||||||
8. If the distribution and/or use of the Program is restricted in
|
|
||||||
certain countries either by patents or by copyrighted interfaces, the
|
|
||||||
original copyright holder who places the Program under this License
|
|
||||||
may add an explicit geographical distribution limitation excluding
|
|
||||||
those countries, so that distribution is permitted only in or among
|
|
||||||
countries not thus excluded. In such case, this License incorporates
|
|
||||||
the limitation as if written in the body of this License.
|
|
||||||
|
|
||||||
9. The Free Software Foundation may publish revised and/or new versions
|
|
||||||
of the General Public License from time to time. Such new versions will
|
|
||||||
be similar in spirit to the present version, but may differ in detail to
|
|
||||||
address new problems or concerns.
|
|
||||||
|
|
||||||
Each version is given a distinguishing version number. If the Program
|
|
||||||
specifies a version number of this License which applies to it and "any
|
|
||||||
later version", you have the option of following the terms and conditions
|
|
||||||
either of that version or of any later version published by the Free
|
|
||||||
Software Foundation. If the Program does not specify a version number of
|
|
||||||
this License, you may choose any version ever published by the Free Software
|
|
||||||
Foundation.
|
|
||||||
|
|
||||||
10. If you wish to incorporate parts of the Program into other free
|
|
||||||
programs whose distribution conditions are different, write to the author
|
|
||||||
to ask for permission. For software which is copyrighted by the Free
|
|
||||||
Software Foundation, write to the Free Software Foundation; we sometimes
|
|
||||||
make exceptions for this. Our decision will be guided by the two goals
|
|
||||||
of preserving the free status of all derivatives of our free software and
|
|
||||||
of promoting the sharing and reuse of software generally.
|
|
||||||
|
|
||||||
NO WARRANTY
|
|
||||||
|
|
||||||
11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY
|
|
||||||
FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN
|
|
||||||
OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES
|
|
||||||
PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED
|
|
||||||
OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
|
||||||
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS
|
|
||||||
TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE
|
|
||||||
PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING,
|
|
||||||
REPAIR OR CORRECTION.
|
|
||||||
|
|
||||||
12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
|
|
||||||
WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR
|
|
||||||
REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES,
|
|
||||||
INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING
|
|
||||||
OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED
|
|
||||||
TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY
|
|
||||||
YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER
|
|
||||||
PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE
|
|
||||||
POSSIBILITY OF SUCH DAMAGES.
|
|
||||||
|
|
||||||
END OF TERMS AND CONDITIONS
|
|
||||||
|
|
||||||
How to Apply These Terms to Your New Programs
|
|
||||||
|
|
||||||
If you develop a new program, and you want it to be of the greatest
|
|
||||||
possible use to the public, the best way to achieve this is to make it
|
|
||||||
free software which everyone can redistribute and change under these terms.
|
|
||||||
|
|
||||||
To do so, attach the following notices to the program. It is safest
|
|
||||||
to attach them to the start of each source file to most effectively
|
|
||||||
convey the exclusion of warranty; and each file should have at least
|
|
||||||
the "copyright" line and a pointer to where the full notice is found.
|
|
||||||
|
|
||||||
<one line to give the program's name and a brief idea of what it does.>
|
|
||||||
Copyright (C) <year> <name of author>
|
|
||||||
|
|
||||||
This program is free software; you can redistribute it and/or modify
|
|
||||||
it under the terms of the GNU General Public License as published by
|
|
||||||
the Free Software Foundation; either version 2 of the License, or
|
|
||||||
(at your option) any later version.
|
|
||||||
|
|
||||||
This program is distributed in the hope that it will be useful,
|
|
||||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
||||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
||||||
GNU General Public License for more details.
|
|
||||||
|
|
||||||
You should have received a copy of the GNU General Public License along
|
|
||||||
with this program; if not, write to the Free Software Foundation, Inc.,
|
|
||||||
51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
||||||
|
|
||||||
Also add information on how to contact you by electronic and paper mail.
|
|
||||||
|
|
||||||
If the program is interactive, make it output a short notice like this
|
|
||||||
when it starts in an interactive mode:
|
|
||||||
|
|
||||||
Gnomovision version 69, Copyright (C) year name of author
|
|
||||||
Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
|
|
||||||
This is free software, and you are welcome to redistribute it
|
|
||||||
under certain conditions; type `show c' for details.
|
|
||||||
|
|
||||||
The hypothetical commands `show w' and `show c' should show the appropriate
|
|
||||||
parts of the General Public License. Of course, the commands you use may
|
|
||||||
be called something other than `show w' and `show c'; they could even be
|
|
||||||
mouse-clicks or menu items--whatever suits your program.
|
|
||||||
|
|
||||||
You should also get your employer (if you work as a programmer) or your
|
|
||||||
school, if any, to sign a "copyright disclaimer" for the program, if
|
|
||||||
necessary. Here is a sample; alter the names:
|
|
||||||
|
|
||||||
Yoyodyne, Inc., hereby disclaims all copyright interest in the program
|
|
||||||
`Gnomovision' (which makes passes at compilers) written by James Hacker.
|
|
||||||
|
|
||||||
<signature of Ty Coon>, 1 April 1989
|
|
||||||
Ty Coon, President of Vice
|
|
||||||
|
|
||||||
This General Public License does not permit incorporating your program into
|
|
||||||
proprietary programs. If your program is a subroutine library, you may
|
|
||||||
consider it more useful to permit linking proprietary applications with the
|
|
||||||
library. If this is what you want to do, use the GNU Lesser General
|
|
||||||
Public License instead of this License.
|
|
||||||
|
|
@ -1,51 +0,0 @@
|
||||||
# Browser based client certificate creation
|
|
||||||
|
|
||||||
This repository contains an implementation to create a client certificate key store in a modern Web browser.
|
|
||||||
|
|
||||||
The implementation uses the excellent [node-forge](https://github.com/digitalbazaar/forge) library.
|
|
||||||
|
|
||||||
[Bootstrap 5](https://getbootstrap.com/docs/5.2/) is used for styling the user interface.
|
|
||||||
|
|
||||||
This is meant as a replacement for the `<keygen>` tag that has been removed from browsers.
|
|
||||||
|
|
||||||
The following steps have been implemented:
|
|
||||||
|
|
||||||
- choose a common name for the subject of the certificate signing request
|
|
||||||
- generate an RSA key pair with a selectable size
|
|
||||||
- generate a certificate signing request (PKCS#10 CSR)
|
|
||||||
- paste the certificate signed by the certificate authority
|
|
||||||
- build a PKCS#12 (also known as .p12 or .pfx) key store file with a password chosen by the user. That file contains the
|
|
||||||
generated key pair, the client certificate, and the CA certificate chain
|
|
||||||
|
|
||||||
The implementation contains the [CAcert CA certificates](https://secure.cacert.org/index.php?id=3) for CA chain
|
|
||||||
building.
|
|
||||||
|
|
||||||
## Running
|
|
||||||
|
|
||||||
1. Install dependencies
|
|
||||||
|
|
||||||
```shell
|
|
||||||
sudo apt install git npm
|
|
||||||
```
|
|
||||||
|
|
||||||
2. Clone the repository
|
|
||||||
|
|
||||||
```shell
|
|
||||||
git clone https://code.cacert.org/cacert/browser-csr-generation.git
|
|
||||||
```
|
|
||||||
|
|
||||||
3. Get dependencies and build assets
|
|
||||||
|
|
||||||
```shell
|
|
||||||
cd browser-csr-generation
|
|
||||||
npm install --no-save --user gulp-cli
|
|
||||||
npm install
|
|
||||||
npm run build
|
|
||||||
```
|
|
||||||
|
|
||||||
4. Open `public/index.html` in a Web browser
|
|
||||||
5. Run
|
|
||||||
```
|
|
||||||
npm run watch
|
|
||||||
```
|
|
||||||
to continuously update the `public/index.html` when changing `src/index.html`
|
|
||||||
10737
clientcert/css/styles.css
Normal file
10737
clientcert/css/styles.css
Normal file
File diff suppressed because it is too large
Load diff
8
clientcert/css/styles.min.css
vendored
Normal file
8
clientcert/css/styles.min.css
vendored
Normal file
File diff suppressed because one or more lines are too long
|
|
@ -1,62 +0,0 @@
|
||||||
const {series, parallel, src, dest, watch} = require('gulp');
|
|
||||||
const csso = require('gulp-csso');
|
|
||||||
const del = require('delete');
|
|
||||||
const rename = require('gulp-rename');
|
|
||||||
const replace = require('gulp-replace');
|
|
||||||
const sourcemaps = require('gulp-sourcemaps');
|
|
||||||
const uglify = require('gulp-uglify');
|
|
||||||
|
|
||||||
const sass = require('gulp-sass')(require('sass'));
|
|
||||||
|
|
||||||
function clean(cb) {
|
|
||||||
del(['./public/js/*.js', './public/css/*.css'], cb);
|
|
||||||
}
|
|
||||||
|
|
||||||
function cssTranspile() {
|
|
||||||
return src('src/scss/**/*.scss')
|
|
||||||
.pipe(sourcemaps.init())
|
|
||||||
.pipe(sass())
|
|
||||||
.pipe(dest('public/css'))
|
|
||||||
.pipe(sourcemaps.write());
|
|
||||||
}
|
|
||||||
|
|
||||||
function cssMinify() {
|
|
||||||
return src('public/css/styles.css')
|
|
||||||
.pipe(csso())
|
|
||||||
.pipe(rename({extname: '.min.css'}))
|
|
||||||
.pipe(dest('public/css'));
|
|
||||||
}
|
|
||||||
|
|
||||||
function jsMinify() {
|
|
||||||
return src('src/js/*.js')
|
|
||||||
.pipe(uglify())
|
|
||||||
.pipe(rename({extname: '.min.js'}))
|
|
||||||
.pipe(dest('public/js'));
|
|
||||||
}
|
|
||||||
|
|
||||||
function publishAssets() {
|
|
||||||
return src([
|
|
||||||
'node_modules/bootstrap/dist/js/bootstrap.bundle.min.js',
|
|
||||||
'node_modules/bootstrap/dist/js/bootstrap.bundle.min.js.map',
|
|
||||||
'node_modules/node-forge/dist/forge.min.js',
|
|
||||||
'node_modules/node-forge/dist/forge.min.js.map',
|
|
||||||
]).pipe(dest('public/js'));
|
|
||||||
}
|
|
||||||
|
|
||||||
function publish() {
|
|
||||||
return src('src/*.html').pipe(replace('../public/', '')).pipe(dest('public'));
|
|
||||||
}
|
|
||||||
|
|
||||||
exports.default = series(
|
|
||||||
clean,
|
|
||||||
cssTranspile,
|
|
||||||
parallel(cssMinify, jsMinify),
|
|
||||||
publishAssets,
|
|
||||||
publish
|
|
||||||
);
|
|
||||||
|
|
||||||
exports.watch = function () {
|
|
||||||
watch('src/js/*.js', series(jsMinify, publish));
|
|
||||||
watch('src/scss/*.scss', series(cssTranspile, cssMinify, publish));
|
|
||||||
watch('src/*.html', publish);
|
|
||||||
}
|
|
||||||
|
|
@ -5,7 +5,7 @@
|
||||||
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
|
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
|
||||||
|
|
||||||
<!-- Bootstrap CSS -->
|
<!-- Bootstrap CSS -->
|
||||||
<link rel="stylesheet" href="../public/css/styles.min.css">
|
<link rel="stylesheet" href="css/styles.min.css">
|
||||||
<meta name="theme-color" content="#ffffff">
|
<meta name="theme-color" content="#ffffff">
|
||||||
|
|
||||||
<title>CAcert client certificate generation in your browser</title>
|
<title>CAcert client certificate generation in your browser</title>
|
||||||
|
|
@ -168,8 +168,8 @@
|
||||||
<p><small>© 2023 CAcert</small></p>
|
<p><small>© 2023 CAcert</small></p>
|
||||||
</div>
|
</div>
|
||||||
</footer>
|
</footer>
|
||||||
<script src="../public/js/forge.min.js"></script>
|
<script src="js/forge.min.js"></script>
|
||||||
<script src="../public/js/bootstrap.bundle.min.js"></script>
|
<script src="js/bootstrap.bundle.min.js"></script>
|
||||||
<script src="../public/js/app.min.js"></script>
|
<script src="js/app.min.js"></script>
|
||||||
</body>
|
</body>
|
||||||
</html>
|
</html>
|
||||||
1
clientcert/js/app.min.js
vendored
Normal file
1
clientcert/js/app.min.js
vendored
Normal file
File diff suppressed because one or more lines are too long
7
clientcert/js/bootstrap.bundle.min.js
vendored
Normal file
7
clientcert/js/bootstrap.bundle.min.js
vendored
Normal file
File diff suppressed because one or more lines are too long
1
clientcert/js/bootstrap.bundle.min.js.map
Normal file
1
clientcert/js/bootstrap.bundle.min.js.map
Normal file
File diff suppressed because one or more lines are too long
2
clientcert/js/forge.min.js
vendored
Normal file
2
clientcert/js/forge.min.js
vendored
Normal file
File diff suppressed because one or more lines are too long
1
clientcert/js/forge.min.js.map
Normal file
1
clientcert/js/forge.min.js.map
Normal file
|
|
@ -0,0 +1 @@
|
||||||
|
{"version":3,"file":"forge.min.js","sources":["webpack://[name]/forge.min.js"],"mappings":"AAAA","sourceRoot":""}
|
||||||
5279
clientcert/package-lock.json
generated
5279
clientcert/package-lock.json
generated
File diff suppressed because it is too large
Load diff
|
|
@ -1,36 +0,0 @@
|
||||||
{
|
|
||||||
"name": "browser-csr-generation",
|
|
||||||
"version": "0.1.0",
|
|
||||||
"description": "Browser based CSR and PKCS#12 generation in JavaScript",
|
|
||||||
"repository": {
|
|
||||||
"type": "git",
|
|
||||||
"url": "https://code.cacert.org/jandd/poc-browser-csr-generation.git"
|
|
||||||
},
|
|
||||||
"keywords": [
|
|
||||||
"pkcs10",
|
|
||||||
"pkcs12",
|
|
||||||
"pki"
|
|
||||||
],
|
|
||||||
"author": "Jan Dittberner",
|
|
||||||
"license": "GPL-2.0+",
|
|
||||||
"dependencies": {
|
|
||||||
"bootstrap": "^5.2.3",
|
|
||||||
"node-forge": "^1.3.0"
|
|
||||||
},
|
|
||||||
"devDependencies": {
|
|
||||||
"delete": "^1.1.0",
|
|
||||||
"gulp": "^4.0.0",
|
|
||||||
"gulp-csso": "^4.0.0",
|
|
||||||
"gulp-rename": "^2.0.0",
|
|
||||||
"gulp-replace": "^1.0.0",
|
|
||||||
"gulp-sass": "^5.1.0",
|
|
||||||
"gulp-sourcemaps": "^3.0.0",
|
|
||||||
"gulp-sri-hash": "^2.2.0",
|
|
||||||
"gulp-uglify": "^3.0.0",
|
|
||||||
"sass": "^1.56.0"
|
|
||||||
},
|
|
||||||
"scripts": {
|
|
||||||
"build": "gulp",
|
|
||||||
"watch": "gulp watch"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
@ -1,286 +0,0 @@
|
||||||
document.addEventListener("DOMContentLoaded", function () {
|
|
||||||
const csrForm = document.getElementById("csr-form");
|
|
||||||
const crtInput = document.getElementById("crt-input");
|
|
||||||
|
|
||||||
const app = {
|
|
||||||
keyPair: undefined,
|
|
||||||
certificate: undefined,
|
|
||||||
|
|
||||||
progressBar: document.getElementById("progress-bar"),
|
|
||||||
keyOutput: document.getElementById("key-output"),
|
|
||||||
csrOutput: document.getElementById("csr-output"),
|
|
||||||
prepareButton: document.getElementById("generate-p12"),
|
|
||||||
downloadButton: document.getElementById("download-link"),
|
|
||||||
|
|
||||||
updateProgress(percent, valuenow, title, ...tokens) {
|
|
||||||
this.progressBar.classList.add(...tokens)
|
|
||||||
this.progressBar.style.width = `${percent}%`;
|
|
||||||
this.progressBar.setAttribute("aria-valuenow", `${valuenow}`)
|
|
||||||
this.progressBar.innerHTML = title;
|
|
||||||
},
|
|
||||||
generateKeyPair(keySize) {
|
|
||||||
this.updateProgress(40, 2, "Started key generation", 'progress-bar-striped', 'progress-bar-animated');
|
|
||||||
|
|
||||||
const state = forge.pki.rsa.createKeyPairGenerationState(keySize, 0x10001);
|
|
||||||
const startDate = new Date();
|
|
||||||
|
|
||||||
return new Promise(done => {
|
|
||||||
const step = () => {
|
|
||||||
let duration = (new Date()).getTime() - startDate.getTime();
|
|
||||||
let seconds = Math.floor(duration / 100) / 10;
|
|
||||||
|
|
||||||
if (!forge.pki.rsa.stepKeyPairGenerationState(state, 100)) {
|
|
||||||
setTimeout(step, 1);
|
|
||||||
this.progressBar.innerHTML = `Key pair generation running for ${seconds} seconds`;
|
|
||||||
} else {
|
|
||||||
this.progressBar.classList.remove("progress-bar-animated", 'progress-bar-striped');
|
|
||||||
this.progressBar.innerHTML = "Key pair generated";
|
|
||||||
|
|
||||||
const keys = state.keys;
|
|
||||||
|
|
||||||
document.getElementById("key-wrapper").classList.remove("d-none");
|
|
||||||
|
|
||||||
this.keyOutput.innerHTML = forge.pki.privateKeyToPem(keys.privateKey);
|
|
||||||
|
|
||||||
this.keyPair = state.keys;
|
|
||||||
|
|
||||||
done();
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
step();
|
|
||||||
});
|
|
||||||
},
|
|
||||||
generateCSR(subjectName) {
|
|
||||||
const csr = forge.pki.createCertificationRequest();
|
|
||||||
|
|
||||||
csr.publicKey = this.keyPair.publicKey;
|
|
||||||
csr.setSubject([{
|
|
||||||
name: 'commonName',
|
|
||||||
value: subjectName,
|
|
||||||
valueTagClass: forge.asn1.Type.UTF8,
|
|
||||||
}]);
|
|
||||||
csr.sign(this.keyPair.privateKey, forge.md.sha256.create());
|
|
||||||
|
|
||||||
const verified = csr.verify();
|
|
||||||
if (verified) {
|
|
||||||
let csrPem = forge.pki.certificationRequestToPem(csr);
|
|
||||||
|
|
||||||
this.updateProgress(60, 3, "CSR generated");
|
|
||||||
|
|
||||||
document.getElementById("csr-output").innerHTML = csrPem;
|
|
||||||
|
|
||||||
const csrWrapper = document.getElementById("csr-wrapper");
|
|
||||||
csrWrapper.classList.remove("d-none");
|
|
||||||
csrWrapper.scrollIntoView();
|
|
||||||
|
|
||||||
document.getElementById("copy-csr-to-clipboard").addEventListener("click", (event) => {
|
|
||||||
event.preventDefault();
|
|
||||||
|
|
||||||
navigator.clipboard.writeText(csrPem)
|
|
||||||
|
|
||||||
const crtInputWrapper = document.getElementById("crt-input-wrapper");
|
|
||||||
crtInputWrapper.classList.remove("d-none");
|
|
||||||
crtInputWrapper.scrollIntoView();
|
|
||||||
|
|
||||||
this.updateProgress(80, 4, "CSR copied to clipboard, waiting for certificate");
|
|
||||||
});
|
|
||||||
}
|
|
||||||
},
|
|
||||||
handleCertificate(certificate) {
|
|
||||||
this.certificate = certificate;
|
|
||||||
|
|
||||||
const prepareDownloadWrapper = document.getElementById("prepare-download-wrapper");
|
|
||||||
prepareDownloadWrapper.classList.remove("d-none");
|
|
||||||
prepareDownloadWrapper.scrollIntoView();
|
|
||||||
|
|
||||||
this.progressBar.innerHTML = "Certificate pasted";
|
|
||||||
|
|
||||||
this.prepareButton.addEventListener("click", (event) => {
|
|
||||||
event.preventDefault();
|
|
||||||
event.stopPropagation();
|
|
||||||
|
|
||||||
const passwordInput = document.getElementById("passwordInput");
|
|
||||||
let password = passwordInput.value;
|
|
||||||
|
|
||||||
if (password === "" || password.length < 8) {
|
|
||||||
alert("The password must be at least 8 characters long.");
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
|
|
||||||
this.buildKeyStore(password);
|
|
||||||
});
|
|
||||||
},
|
|
||||||
buildKeyStore(password) {
|
|
||||||
this.updateProgress(100, 5, "Building keystore");
|
|
||||||
|
|
||||||
let certificates = [];
|
|
||||||
|
|
||||||
certificates.push(this.certificate);
|
|
||||||
|
|
||||||
let rootCerts = [];
|
|
||||||
// add CAcert class 3 certificate from http://www.cacert.org/certs/CAcert_Class3Root_x14E228.crt
|
|
||||||
rootCerts.push(forge.pki.certificateFromPem("-----BEGIN CERTIFICATE-----\n" +
|
|
||||||
"MIIGPTCCBCWgAwIBAgIDFOIoMA0GCSqGSIb3DQEBDQUAMHkxEDAOBgNVBAoTB1Jv\n" +
|
|
||||||
"b3QgQ0ExHjAcBgNVBAsTFWh0dHA6Ly93d3cuY2FjZXJ0Lm9yZzEiMCAGA1UEAxMZ\n" +
|
|
||||||
"Q0EgQ2VydCBTaWduaW5nIEF1dGhvcml0eTEhMB8GCSqGSIb3DQEJARYSc3VwcG9y\n" +
|
|
||||||
"dEBjYWNlcnQub3JnMB4XDTIxMDQxOTEyMTgzMFoXDTMxMDQxNzEyMTgzMFowVDEU\n" +
|
|
||||||
"MBIGA1UEChMLQ0FjZXJ0IEluYy4xHjAcBgNVBAsTFWh0dHA6Ly93d3cuQ0FjZXJ0\n" +
|
|
||||||
"Lm9yZzEcMBoGA1UEAxMTQ0FjZXJ0IENsYXNzIDMgUm9vdDCCAiIwDQYJKoZIhvcN\n" +
|
|
||||||
"AQEBBQADggIPADCCAgoCggIBAKtJNRFIfNImflOUz0Op3SjXQiqL84d4GVh8D57a\n" +
|
|
||||||
"iX3h++tykA10oZZkq5+gJJlz2uJVdscXe/UErEa4w75/ZI0QbCTzYZzA8pD6Ueb1\n" +
|
|
||||||
"aQFjww9W4kpCz+JEjCUoqMV5CX1GuYrz6fM0KQhF5Byfy5QEHIGoFLOYZcRD7E6C\n" +
|
|
||||||
"jQnRvapbjZLQ7N6QxX8KwuPr5jFaXnQ+lzNZ6MMDPWAzv/fRb0fEze5ig1JuLgia\n" +
|
|
||||||
"pNkVGJGmhZJHsK5I6223IeyFGmhyNav/8BBdwPSUp2rVO5J+TJAFfpPBLIukjmJ0\n" +
|
|
||||||
"FXFuC3ED6q8VOJrU0gVyb4z5K+taciX5OUbjchs+BMNkJyIQKopPWKcDrb60LhPt\n" +
|
|
||||||
"XapI19V91Cp7XPpGBFDkzA5CW4zt2/LP/JaT4NsRNlRiNDiPDGCbO5dWOK3z0luL\n" +
|
|
||||||
"oFvqTpa4fNfVoIZwQNORKbeiPK31jLvPGpKK5DR7wNhsX+kKwsOnIJpa3yxdUly6\n" +
|
|
||||||
"R9Wb7yQocDggL9V/KcCyQQNokszgnMyXS0XvOhAKq3A6mJVwrTWx6oUrpByAITGp\n" +
|
|
||||||
"rmB6gCZIALgBwJNjVSKRPFbnr9s6JfOPMVTqJouBWfmh0VMRxXudA/Z0EeBtsSw/\n" +
|
|
||||||
"LIaRmXGapneLNGDRFLQsrJ2vjBDTn8Rq+G8T/HNZ92ZCdB6K4/jc0m+YnMtHmJVA\n" +
|
|
||||||
"BfvpAgMBAAGjgfIwge8wDwYDVR0TAQH/BAUwAwEB/zBhBggrBgEFBQcBAQRVMFMw\n" +
|
|
||||||
"IwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLkNBY2VydC5vcmcvMCwGCCsGAQUFBzAC\n" +
|
|
||||||
"hiBodHRwOi8vd3d3LkNBY2VydC5vcmcvY2xhc3MzLmNydDBFBgNVHSAEPjA8MDoG\n" +
|
|
||||||
"CysGAQQBgZBKAgMBMCswKQYIKwYBBQUHAgEWHWh0dHA6Ly93d3cuQ0FjZXJ0Lm9y\n" +
|
|
||||||
"Zy9jcHMucGhwMDIGA1UdHwQrMCkwJ6AloCOGIWh0dHBzOi8vd3d3LmNhY2VydC5v\n" +
|
|
||||||
"cmcvY2xhc3MzLmNybDANBgkqhkiG9w0BAQ0FAAOCAgEAxh6td1y0KJvRyI1EEsC9\n" +
|
|
||||||
"dnYEgyEH+BGCf2vBlULAOBG1JXCNiwzB1Wz9HBoDfIv4BjGlnd5BKdSLm4TXPcE3\n" +
|
|
||||||
"hnGjH1thKR5dd3278K25FRkTFOY1gP+mGbQ3hZRB6IjDX+CyBqS7+ECpHTms7eo/\n" +
|
|
||||||
"mARN+Yz5R3lzUvXs3zSX+z534NzRg4i6iHNHWqakFcQNcA0PnksTB37vGD75pQGq\n" +
|
|
||||||
"eSmx51L6UzrIpn+274mhsaFNL85jhX+lKuk71MGjzwoThbuZ15xmkITnZtRQs6Hh\n" +
|
|
||||||
"LSIqJWjDILIrxLqYHehK71xYwrRNhFb3TrsWaEJskrhveM0Os/vvoLNkh/L3iEQ5\n" +
|
|
||||||
"/LnmLMCYJNRALF7I7gsduAJNJrgKGMYvHkt1bo8uIXO8wgNV7qoU4JoaB1ML30QU\n" +
|
|
||||||
"qGcFr0TI06FFdgK2fwy5hulPxm6wuxW0v+iAtXYx/mRkwQpYbcVQtrIDvx1CT1k5\n" +
|
|
||||||
"0cQxi+jIKjkcFWHw3kBoDnCos0/ukegPT7aQnk2AbL4c7nCkuAcEKw1BAlSETkfq\n" +
|
|
||||||
"i5btdlhh58MhewZv1LcL5zQyg8w1puclT3wXQvy8VwPGn0J/mGD4gLLZ9rGcHDUE\n" +
|
|
||||||
"CokxFoWk+u5MCcVqmGbsyG4q5suS3CNslsHURfM8bQK4oLvHR8LCHEBMRcdFBn87\n" +
|
|
||||||
"cSvOK6eB1kdGKLA8ymXxZp8=\n" +
|
|
||||||
"-----END CERTIFICATE-----"));
|
|
||||||
|
|
||||||
// add CAcert root certificate from http://www.cacert.org/certs/root_X0F.crt
|
|
||||||
rootCerts.push(forge.pki.certificateFromPem("-----BEGIN CERTIFICATE-----\n" +
|
|
||||||
"MIIG7jCCBNagAwIBAgIBDzANBgkqhkiG9w0BAQsFADB5MRAwDgYDVQQKEwdSb290\n" +
|
|
||||||
"IENBMR4wHAYDVQQLExVodHRwOi8vd3d3LmNhY2VydC5vcmcxIjAgBgNVBAMTGUNB\n" +
|
|
||||||
"IENlcnQgU2lnbmluZyBBdXRob3JpdHkxITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRA\n" +
|
|
||||||
"Y2FjZXJ0Lm9yZzAeFw0wMzAzMzAxMjI5NDlaFw0zMzAzMjkxMjI5NDlaMHkxEDAO\n" +
|
|
||||||
"BgNVBAoTB1Jvb3QgQ0ExHjAcBgNVBAsTFWh0dHA6Ly93d3cuY2FjZXJ0Lm9yZzEi\n" +
|
|
||||||
"MCAGA1UEAxMZQ0EgQ2VydCBTaWduaW5nIEF1dGhvcml0eTEhMB8GCSqGSIb3DQEJ\n" +
|
|
||||||
"ARYSc3VwcG9ydEBjYWNlcnQub3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC\n" +
|
|
||||||
"CgKCAgEAziLA4kZ97DYoB1CW8qAzQIxL8TtmPzHlawI229Z89vGIj053NgVBlfkJ\n" +
|
|
||||||
"8BLPRoZzYLdufujAWGSuzbCtRRcMY/pnCujW0r8+55jE8Ez64AO7NV1sId6eINm6\n" +
|
|
||||||
"zWYyN3L69wj1x81YyY7nDl7qPv4coRQKFWyGhFtkZip6qUtTefWIonvuLwphK42y\n" +
|
|
||||||
"fk1WpRPs6tqSnqxEQR5YYGUFZvjARL3LlPdCfgv3ZWiYUQXw8wWRBB0bF4LsyFe7\n" +
|
|
||||||
"w2t6iPGwcswlWyCR7BYCEo8y6RcYSNDHBS4CMEK4JZwFaz+qOqfrU0j36NK2B5jc\n" +
|
|
||||||
"G8Y0f3/JHIJ6BVgrCFvzOKKrF11myZjXnhCLotLddJr3cQxyYN/Nb5gznZY0dj4k\n" +
|
|
||||||
"epKwDpUeb+agRThHqtdB7Uq3EvbXG4OKDy7YCbZZ16oE/9KTfWgu3YtLq1i6L43q\n" +
|
|
||||||
"laegw1SJpfvbi1EinbLDvhG+LJGGi5Z4rSDTii8aP8bQUWWHIbEZAWV/RRyH9XzQ\n" +
|
|
||||||
"QUxPKZgh/TMfdQwEUfoZd9vUFBzugcMd9Zi3aQaRIt0AUMyBMawSB3s42mhb5ivU\n" +
|
|
||||||
"fslfrejrckzzAeVLIL+aplfKkQABi6F1ITe1Yw1nPkZPcCBnzsXWWdsC4PDSy826\n" +
|
|
||||||
"YreQQejdIOQpvGQpQsgi3Hia/0PsmBsJUUtaWsJx8cTLc6nloQsCAwEAAaOCAX8w\n" +
|
|
||||||
"ggF7MB0GA1UdDgQWBBQWtTIb1Mfz4OaO873SsDrusjkY0TAPBgNVHRMBAf8EBTAD\n" +
|
|
||||||
"AQH/MDQGCWCGSAGG+EIBCAQnFiVodHRwOi8vd3d3LmNhY2VydC5vcmcvaW5kZXgu\n" +
|
|
||||||
"cGhwP2lkPTEwMFYGCWCGSAGG+EIBDQRJFkdUbyBnZXQgeW91ciBvd24gY2VydGlm\n" +
|
|
||||||
"aWNhdGUgZm9yIEZSRUUgaGVhZCBvdmVyIHRvIGh0dHA6Ly93d3cuY2FjZXJ0Lm9y\n" +
|
|
||||||
"ZzAxBgNVHR8EKjAoMCagJKAihiBodHRwOi8vY3JsLmNhY2VydC5vcmcvcmV2b2tl\n" +
|
|
||||||
"LmNybDAzBglghkgBhvhCAQQEJhYkVVJJOmh0dHA6Ly9jcmwuY2FjZXJ0Lm9yZy9y\n" +
|
|
||||||
"ZXZva2UuY3JsMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcwAYYWaHR0cDovL29j\n" +
|
|
||||||
"c3AuY2FjZXJ0Lm9yZzAfBgNVHSMEGDAWgBQWtTIb1Mfz4OaO873SsDrusjkY0TAN\n" +
|
|
||||||
"BgkqhkiG9w0BAQsFAAOCAgEAR5zXs6IX01JTt7Rq3b+bNRUhbO9vGBMggczo7R0q\n" +
|
|
||||||
"Ih1kdhS6WzcrDoO6PkpuRg0L3qM7YQB6pw2V+ubzF7xl4C0HWltfzPTbzAHdJtja\n" +
|
|
||||||
"JQw7QaBlmAYpN2CLB6Jeg8q/1Xpgdw/+IP1GRwdg7xUpReUA482l4MH1kf0W0ad9\n" +
|
|
||||||
"4SuIfNWQHcdLApmno/SUh1bpZyeWrMnlhkGNDKMxCCQXQ360TwFHc8dfEAaq5ry6\n" +
|
|
||||||
"cZzm1oetrkSviE2qofxvv1VFiQ+9TX3/zkECCsUB/EjPM0lxFBmu9T5Ih+Eqns9i\n" +
|
|
||||||
"vmrEIQDv9tNyJHuLsDNqbUBal7OoiPZnXk9LH+qb+pLf1ofv5noy5vX2a5OKebHe\n" +
|
|
||||||
"+0Ex/A7e+G/HuOjVNqhZ9j5Nispfq9zNyOHGWD8ofj8DHwB50L1Xh5H+EbIoga/h\n" +
|
|
||||||
"JCQnRtxWkHP699T1JpLFYwapgplivF4TFv4fqp0nHTKC1x9gGrIgvuYJl1txIKmx\n" +
|
|
||||||
"XdfJzgscMzqpabhtHOMXOiwQBpWzyJkofF/w55e0LttZDBkEsilV/vW0CJsPs3eN\n" +
|
|
||||||
"aQF+iMWscGOkgLFlWsAS3HwyiYLNJo26aqyWPaIdc8E4ck7Sk08WrFrHIK3EHr4n\n" +
|
|
||||||
"1FZwmLpFAvucKqgl0hr+2jypyh5puA3KksHF3CsUzjMUvzxMhykh9zrMxQAHLBVr\n" +
|
|
||||||
"Gwc=\n" +
|
|
||||||
"-----END CERTIFICATE-----"));
|
|
||||||
|
|
||||||
let lastCert = certificates[certificates.length - 1];
|
|
||||||
let foundNext = true;
|
|
||||||
|
|
||||||
while (foundNext && !lastCert.isIssuer(lastCert)) {
|
|
||||||
foundNext = false;
|
|
||||||
|
|
||||||
for (let certIndex in rootCerts) {
|
|
||||||
let rootCert = rootCerts[certIndex];
|
|
||||||
|
|
||||||
if (lastCert.isIssuer(rootCert)) {
|
|
||||||
certificates.push(rootCert);
|
|
||||||
|
|
||||||
foundNext = true;
|
|
||||||
|
|
||||||
break;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
lastCert = certificates[certificates.length - 1];
|
|
||||||
}
|
|
||||||
|
|
||||||
if (!foundNext) {
|
|
||||||
console.warn(`chain construction may be incomplete, could not find certificate for issuer`)
|
|
||||||
}
|
|
||||||
|
|
||||||
// browsers have trouble importing anything but 3des encrypted PKCS#12
|
|
||||||
const p12asn1 = forge.pkcs12.toPkcs12Asn1(
|
|
||||||
this.keyPair.privateKey, certificates, password,
|
|
||||||
{algorithm: '3des'}
|
|
||||||
);
|
|
||||||
const p12Der = forge.asn1.toDer(p12asn1).getBytes();
|
|
||||||
const p12B64 = forge.util.encode64(p12Der);
|
|
||||||
|
|
||||||
this.downloadButton.download = 'client_certificate.p12';
|
|
||||||
this.downloadButton.setAttribute('href', 'data:application/x-pkcs12;base64,' + p12B64);
|
|
||||||
|
|
||||||
const downloadWrapper = document.getElementById("download-wrapper");
|
|
||||||
downloadWrapper.classList.remove("d-none");
|
|
||||||
downloadWrapper.scrollIntoView();
|
|
||||||
|
|
||||||
this.progressBar.innerHTML = "Client certificate ready";
|
|
||||||
this.progressBar.classList.add("bg-success")
|
|
||||||
}
|
|
||||||
};
|
|
||||||
|
|
||||||
csrForm.addEventListener("submit", (event) => {
|
|
||||||
event.preventDefault();
|
|
||||||
|
|
||||||
let valid = csrForm.checkValidity();
|
|
||||||
|
|
||||||
if (!valid) {
|
|
||||||
event.stopPropagation();
|
|
||||||
}
|
|
||||||
|
|
||||||
csrForm.classList.add("was-validated");
|
|
||||||
if (!valid) {
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
let subjectName = event.target["nameInput"].value;
|
|
||||||
let keySize = parseInt(event.target["keySize"].value);
|
|
||||||
|
|
||||||
if (isNaN(keySize)) {
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
app.generateKeyPair(keySize).then(function () {
|
|
||||||
app.generateCSR(subjectName);
|
|
||||||
});
|
|
||||||
}, false);
|
|
||||||
|
|
||||||
crtInput.addEventListener("paste", (event) => {
|
|
||||||
let crtData = (event.clipboardData || window.clipboardData).getData("text");
|
|
||||||
|
|
||||||
try {
|
|
||||||
const certificate = forge.pki.certificateFromPem(crtData);
|
|
||||||
|
|
||||||
app.handleCertificate(certificate);
|
|
||||||
} catch (e) {
|
|
||||||
console.warn(e);
|
|
||||||
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
});
|
|
||||||
});
|
|
||||||
|
|
@ -1,17 +0,0 @@
|
||||||
@import "node_modules/bootstrap/scss/bootstrap";
|
|
||||||
|
|
||||||
.letters {
|
|
||||||
fill:#0f548a;
|
|
||||||
fill-opacity:1;
|
|
||||||
fill-rule:nonzero;
|
|
||||||
stroke:none;
|
|
||||||
}
|
|
||||||
|
|
||||||
#cacert-logo {
|
|
||||||
width: 300px;
|
|
||||||
height: auto;
|
|
||||||
|
|
||||||
@media screen and (max-device-width: 350px) {
|
|
||||||
width: 100%;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
Loading…
Reference in a new issue