mirror of
https://github.com/hashicorp/vault.git
synced 2025-08-16 19:47:02 +02:00
92cc175eb6
* refactor parser to pull serial number from subject * refactor pki parser * uninstall pvtutils * remove hideFormSection as attr * remove hideFormSection as attr * add string-list * test removing issueDate * update tests * final answer - make number types * change to unix time - since valueOf() is typically used internally * add algo mapping * add comment to complete in followon * add attrs to pki parser * add conditional operands so parser continues when values dont exist * add error handling WIP * finish tests, add error handling * revert to helper * move helper to util * add parseSubject test * finish tests * move certs to pki helper file * wrap parsing functions in try...catch
56 lines
1.8 KiB
JavaScript
56 lines
1.8 KiB
JavaScript
//* lookup OIDs: http://oid-info.com/basic-search.htm
|
|
|
|
export const SUBJECT_OIDs = {
|
|
common_name: '2.5.4.3',
|
|
serial_number: '2.5.4.5',
|
|
ou: '2.5.4.11',
|
|
organization: '2.5.4.10',
|
|
country: '2.5.4.6',
|
|
locality: '2.5.4.7',
|
|
province: '2.5.4.8',
|
|
street_address: '2.5.4.9',
|
|
postal_code: '2.5.4.17',
|
|
};
|
|
|
|
export const EXTENSION_OIDs = {
|
|
key_usage: '2.5.29.15',
|
|
subject_alt_name: '2.5.29.17', // contains SAN_TYPES below
|
|
basic_constraints: '2.5.29.19', // contains max_path_length
|
|
name_constraints: '2.5.29.30', // contains permitted_dns_domains
|
|
};
|
|
|
|
// these are allowed ext oids, but not parsed and passed to cross-signed certs
|
|
export const IGNORED_OIDs = {
|
|
subject_key_identifier: '2.5.29.14',
|
|
authority_key_identifier: '2.5.29.35',
|
|
};
|
|
|
|
// SubjectAltName/GeneralName types (scroll up to page 38 -> https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.7 )
|
|
export const SAN_TYPES = {
|
|
alt_names: 2, // dNSName
|
|
uri_sans: 6, // uniformResourceIdentifier
|
|
ip_sans: 7, // iPAddress - OCTET STRING
|
|
};
|
|
|
|
export const SIGNATURE_ALGORITHM_OIDs = {
|
|
'1.2.840.113549.1.1.2': '0', // MD2-RSA
|
|
'1.2.840.113549.1.1.4': '0', // MD5-RSA
|
|
'1.2.840.113549.1.1.5': '0', // SHA1-RSA
|
|
'1.2.840.113549.1.1.11': '256', // SHA256-RSA
|
|
'1.2.840.113549.1.1.12': '384', // SHA384-RSA
|
|
'1.2.840.113549.1.1.13': '512', // SHA512-RSA
|
|
'1.2.840.113549.1.1.10': {
|
|
// RSA-PSS have additional OIDs that need to be mapped
|
|
'2.16.840.1.101.3.4.2.1': '256', // SHA-256
|
|
'2.16.840.1.101.3.4.2.2': '384', // SHA-384
|
|
'2.16.840.1.101.3.4.2.3': '512', // SHA-512
|
|
},
|
|
'1.2.840.10040.4.3': '0', // DSA-SHA1
|
|
'2.16.840.1.101.3.4.3.2': '256', // DSA-SHA256
|
|
'1.2.840.10045.4.1': '0', // ECDSA-SHA1
|
|
'1.2.840.10045.4.3.2': '256', // ECDSA-SHA256
|
|
'1.2.840.10045.4.3.3': '384', // ECDSA-SHA384
|
|
'1.2.840.10045.4.3.4': '512', // ECDSA-SHA512
|
|
'1.3.101.112': '0', // Ed25519
|
|
};
|