mirror of
https://github.com/selfxyz/self.git
synced 2026-04-05 03:00:53 -04:00
Bringing openpassport/main (#19)
Co-authored-by: seshanthS <seshanth@protonmail.com> Co-authored-by: turnoffthiscomputer <colin.remi07@gmail.com> Co-authored-by: thomas-senechal <thomas.senechal@pm.me> Co-authored-by: motemotech <i.am.nicoshark@gmail.com> Co-authored-by: turnoffthiscomputer <98749896+remicolin@users.noreply.github.com> Co-authored-by: ayman <aymanshaik1015@gmail.com>
This commit is contained in:
turboblitz
103
common/src/scripts/addCertificatesInTs.py
Normal file
103
common/src/scripts/addCertificatesInTs.py
Normal file
@@ -0,0 +1,103 @@
|
||||
import os
|
||||
import re
|
||||
|
||||
def read_certificate_content(file_path):
|
||||
"""Read and return the complete PEM certificate including headers, removing any extra lines."""
|
||||
with open(file_path, 'r') as f:
|
||||
full_text = f.read()
|
||||
# Extract just the chunk from BEGIN CERTIFICATE to END CERTIFICATE
|
||||
start_idx = full_text.find("-----BEGIN CERTIFICATE-----")
|
||||
end_idx = full_text.find("-----END CERTIFICATE-----") + len("-----END CERTIFICATE-----")
|
||||
if start_idx == -1 or end_idx == -1:
|
||||
# If not found, just return what we have
|
||||
return full_text.strip()
|
||||
pem_chunk = full_text[start_idx:end_idx]
|
||||
|
||||
cleaned_lines = []
|
||||
for line in pem_chunk.splitlines():
|
||||
stripped = line.strip()
|
||||
# Remove any completely empty lines or lines that are just "-----"
|
||||
if not stripped or stripped == "-----":
|
||||
continue
|
||||
cleaned_lines.append(line)
|
||||
return "\n".join(cleaned_lines) + "\n"
|
||||
|
||||
|
||||
def read_private_key_content(file_path):
|
||||
"""Read and return the complete PEM private key including headers, removing any extra lines."""
|
||||
with open(file_path, 'r') as f:
|
||||
full_text = f.read()
|
||||
# Extract just the chunk from BEGIN PRIVATE KEY to END PRIVATE KEY
|
||||
start_idx = full_text.find("-----BEGIN PRIVATE KEY-----")
|
||||
end_idx = full_text.find("-----END PRIVATE KEY-----") + len("-----END PRIVATE KEY-----")
|
||||
if start_idx == -1 or end_idx == -1:
|
||||
# If not found, just return what we have
|
||||
return full_text.strip()
|
||||
pem_chunk = full_text[start_idx:end_idx]
|
||||
|
||||
cleaned_lines = []
|
||||
for line in pem_chunk.splitlines():
|
||||
stripped = line.strip()
|
||||
# Remove any completely empty lines or lines that are just "-----"
|
||||
if not stripped or stripped == "-----":
|
||||
continue
|
||||
# If we ever find a line of just "=" or "==", merge it into the previous line.
|
||||
if stripped in ["=", "==", "==="] and cleaned_lines:
|
||||
cleaned_lines[-1] += stripped
|
||||
continue
|
||||
cleaned_lines.append(line)
|
||||
return "\n".join(cleaned_lines) + "\n"
|
||||
|
||||
|
||||
def format_variable_name(dir_name):
|
||||
"""
|
||||
Customize how directory names become variable suffixes here.
|
||||
e.g., "sha256_rsa_65537_4096" -> "sha256_rsa_65537_4096"
|
||||
"""
|
||||
return dir_name
|
||||
|
||||
|
||||
def generate_typescript_file():
|
||||
"""
|
||||
Scans src/mock_certificates subdirectories for DSC files (mock_dsc.pem + mock_dsc.key).
|
||||
Generates a single file: src/constants/mockCertificates.ts
|
||||
which exports each DSC certificate & key as TypeScript constants.
|
||||
"""
|
||||
base_path = "src/mock_certificates"
|
||||
ts_output_path = "src/constants/mockCertificates.ts"
|
||||
|
||||
typescript_content = "// Auto-generated file (DSC only)\n\n"
|
||||
|
||||
# Look through all subdirectories of src/mock_certificates
|
||||
if not os.path.isdir(base_path):
|
||||
print(f"No directory found at {base_path}; skipping DSC scanning.")
|
||||
return
|
||||
|
||||
for subdir in sorted(os.listdir(base_path)):
|
||||
full_subdir_path = os.path.join(base_path, subdir)
|
||||
if not os.path.isdir(full_subdir_path):
|
||||
continue
|
||||
|
||||
dsc_cert_path = os.path.join(full_subdir_path, "mock_dsc.pem")
|
||||
dsc_key_path = os.path.join(full_subdir_path, "mock_dsc.key")
|
||||
|
||||
if os.path.exists(dsc_cert_path) and os.path.exists(dsc_key_path):
|
||||
cert_content = read_certificate_content(dsc_cert_path)
|
||||
key_content = read_private_key_content(dsc_key_path)
|
||||
|
||||
formatted_name = format_variable_name(subdir)
|
||||
var_name = f"mock_dsc_{formatted_name}"
|
||||
key_var_name = f"{var_name}_key"
|
||||
|
||||
typescript_content += f"""export const {var_name} = `{cert_content}`;
|
||||
export const {key_var_name} = `{key_content}`;
|
||||
|
||||
"""
|
||||
|
||||
os.makedirs(os.path.dirname(ts_output_path), exist_ok=True)
|
||||
with open(ts_output_path, 'w') as f:
|
||||
f.write(typescript_content)
|
||||
|
||||
|
||||
if __name__ == "__main__":
|
||||
generate_typescript_file()
|
||||
60
common/src/scripts/addSkiPemToTs.py
Normal file
60
common/src/scripts/addSkiPemToTs.py
Normal file
@@ -0,0 +1,60 @@
|
||||
#!/usr/bin/env python3
|
||||
import json
|
||||
import os
|
||||
|
||||
def read_json_file(json_path: str) -> dict:
|
||||
"""
|
||||
Safely read JSON from a file. Return an empty dict if not found.
|
||||
"""
|
||||
if not os.path.exists(json_path):
|
||||
print(f"JSON not found at {json_path}, skipping...")
|
||||
return {}
|
||||
with open(json_path, 'r') as f:
|
||||
return json.load(f)
|
||||
|
||||
def generate_typescript_from_ski_json():
|
||||
"""
|
||||
Read ski_pem.json and ski_pem_dev.json, create corresponding
|
||||
TypeScript exports with SKI -> PEM mapping, then write to
|
||||
src/constants/skiPem.ts
|
||||
|
||||
This version uses absolute paths relative to this script's location
|
||||
so it can find the registry/outputs folder even if run from 'common/'.
|
||||
"""
|
||||
# Calculate paths relative to the script's directory
|
||||
script_dir = os.path.dirname(os.path.abspath(__file__))
|
||||
|
||||
# Move up 3 directories from 'common/src/scripts' -> the repo root
|
||||
# so that "registry/outputs" is located properly as a sibling to "common"
|
||||
prod_path = os.path.join(script_dir, "..", "..", "..", "registry", "outputs", "ski_pem.json")
|
||||
dev_path = os.path.join(script_dir, "..", "..", "..", "registry", "outputs", "ski_pem_dev.json")
|
||||
|
||||
prod_data = read_json_file(prod_path) # { ski_string: base64_der }
|
||||
dev_data = read_json_file(dev_path)
|
||||
|
||||
# Prepare TypeScript content
|
||||
ts_output_path = os.path.join(script_dir, "..", "..", "src", "constants", "skiPem.ts")
|
||||
ts_content = "// Auto-generated from addSkiPemToTs.py\n\n"
|
||||
|
||||
# We'll export two objects: skiPemProd & skiPemDev
|
||||
# Each is a Record<string, string> mapping SKI -> PEM certificate
|
||||
ts_content += "export const SKI_PEM: Record<string, string> = {\n"
|
||||
for ski, b64_der in prod_data.items():
|
||||
# Escape backticks so the final TS file remains valid
|
||||
escaped_der = b64_der.replace("`", "\\`")
|
||||
ts_content += f' "{ski}": `{escaped_der}`,\n'
|
||||
ts_content += "};\n\n"
|
||||
|
||||
ts_content += "export const SKI_PEM_DEV: Record<string, string> = {\n"
|
||||
for ski, b64_der in dev_data.items():
|
||||
escaped_der = b64_der.replace("`", "\\`")
|
||||
ts_content += f' "{ski}": `{escaped_der}`,\n'
|
||||
ts_content += "};\n\n"
|
||||
|
||||
# Ensure output directory exists
|
||||
os.makedirs(os.path.dirname(ts_output_path), exist_ok=True)
|
||||
with open(ts_output_path, 'w') as ts_file:
|
||||
ts_file.write(ts_content)
|
||||
|
||||
if __name__ == "__main__":
|
||||
generate_typescript_from_ski_json()
|
||||
346
common/src/scripts/generateCertificates.sh
Executable file
346
common/src/scripts/generateCertificates.sh
Executable file
@@ -0,0 +1,346 @@
|
||||
#!/bin/bash
|
||||
|
||||
# Usage:
|
||||
# generate_certificate <role> <hash> <sig_alg> [<salt_if_rsapss>] <exp_or_curve> [<bits>] [--signer <csca_folder>] [--force]
|
||||
#
|
||||
# <role> : "csca" or "dsc"
|
||||
# <hash> : "sha1", "sha256", "sha384", "sha512"
|
||||
# <sig_alg> : "rsa", "rsapss", "ecdsa"
|
||||
# [<salt_if_rsapss>] : only if sig_alg == "rsapss" (optional in this snippet; adapt if needed)
|
||||
# <exp_or_curve> : exponent if RSA/RSAPSS, curve name if ECDSA
|
||||
# <bits> : number of bits if RSA/RSAPSS
|
||||
#
|
||||
# If <role>="csca", creates a self-signed root cert in "src/mock_certificates/<dir>"
|
||||
# with "mock_csca.key" & "mock_csca.pem"
|
||||
# If <role>="dsc", creates "src/mock_certificates/<dir>"
|
||||
# with "mock_dsc.key" & "mock_dsc.pem", signed by the CSCA in --signer <csca_folder>.
|
||||
#
|
||||
# If the folder & files exist, we skip unless --force is specified.
|
||||
#
|
||||
# Example calls:
|
||||
# # Create a CSCA in folder "src/mock_certificates/sha256_rsa_65537_4096"
|
||||
# generate_certificate csca sha256 rsa 65537 4096
|
||||
#
|
||||
# # Create a DSC in folder "src/mock_certificates/sha1_rsa_65537_2048" => mock_dsc.key/pem,
|
||||
# # signed by the just-created CSCA in folder "src/mock_certificates/sha256_rsa_65537_4096":
|
||||
# generate_certificate dsc sha1 rsa 65537 2048 --signer sha256_rsa_65537_4096
|
||||
|
||||
generate_certificate() {
|
||||
local role="$1"
|
||||
local hash="$2"
|
||||
local sig_alg="$3"
|
||||
|
||||
shift 3
|
||||
|
||||
local force_regen=false
|
||||
local signer=""
|
||||
|
||||
# Optionally handle an RSAPSS salt. e.g.:
|
||||
# generate_certificate csca sha256 rsapss 32 65537 4096
|
||||
local salt=""
|
||||
local exp_or_curve=""
|
||||
local bits=""
|
||||
|
||||
# Collect (remaining) positional arguments, then parse flags.
|
||||
declare -a positional=()
|
||||
while [[ $# -gt 0 ]]; do
|
||||
case "$1" in
|
||||
--signer)
|
||||
signer="$2"
|
||||
shift 2
|
||||
;;
|
||||
--force)
|
||||
force_regen=true
|
||||
shift
|
||||
;;
|
||||
*)
|
||||
positional+=("$1")
|
||||
shift
|
||||
;;
|
||||
esac
|
||||
done
|
||||
|
||||
# Convert the positional array back into $1, $2, ...
|
||||
set -- "${positional[@]}"
|
||||
|
||||
# Build directory name:
|
||||
# - ECDSA => <hash>_<sig_alg>_<curve>
|
||||
# - RSAPSS => <hash>_<sig_alg>_<salt>_<exp>_<bits>
|
||||
# - RSA => <hash>_<sig_alg>_<exp>_<bits>
|
||||
#
|
||||
# Then prepend "src/mock_certificates/"
|
||||
|
||||
local base_dir="src/mock_certificates"
|
||||
|
||||
if [ "$sig_alg" = "ecdsa" ]; then
|
||||
exp_or_curve="$1"
|
||||
dir_name="${hash}_${sig_alg}_${exp_or_curve}"
|
||||
elif [ "$sig_alg" = "rsapss" ]; then
|
||||
salt="$1"
|
||||
exp_or_curve="$2"
|
||||
bits="$3"
|
||||
dir_name="${hash}_${sig_alg}_${salt}_${exp_or_curve}_${bits}"
|
||||
else
|
||||
exp_or_curve="$1"
|
||||
bits="$2"
|
||||
dir_name="${hash}_${sig_alg}_${exp_or_curve}_${bits}"
|
||||
fi
|
||||
|
||||
dir_name="${base_dir}/${dir_name}"
|
||||
echo -e "\033[90m=== ROLE: $role, DIR: $dir_name\033[0m"
|
||||
|
||||
# Filenames inside the directory
|
||||
local key_file="mock_csca.key"
|
||||
local crt_file="mock_csca.pem"
|
||||
[ "$role" = "dsc" ] && key_file="mock_dsc.key" && crt_file="mock_dsc.pem"
|
||||
|
||||
mkdir -p "$dir_name"
|
||||
|
||||
# If not forced, skip if they exist
|
||||
if $force_regen; then
|
||||
echo "[INFO] --force => removing old files in $dir_name"
|
||||
rm -f "$dir_name/$key_file" "$dir_name/$crt_file"
|
||||
else
|
||||
if [ -f "$dir_name/$key_file" ] && [ -f "$dir_name/$crt_file" ]; then
|
||||
echo -e "\033[90m[SKIP] $dir_name: $key_file and $crt_file exist (use --force to regenerate).\033[0m"
|
||||
return
|
||||
fi
|
||||
fi
|
||||
|
||||
if [ "$role" = "csca" ]; then
|
||||
# Generate a self-signed CSCA
|
||||
if [ "$sig_alg" = "ecdsa" ]; then
|
||||
openssl ecparam -name "$exp_or_curve" -genkey -noout -out "$dir_name/$key_file"
|
||||
openssl req -new -x509 \
|
||||
-key "$dir_name/$key_file" \
|
||||
-out "$dir_name/$crt_file" \
|
||||
-days 3650 -sha${hash#sha} \
|
||||
-subj "/C=FR/ST=IDF/L=Paris/O=Mock CSCA/OU=PKI/CN=MockCSCA"
|
||||
elif [ "$sig_alg" = "rsapss" ]; then
|
||||
openssl genpkey -algorithm RSA-PSS \
|
||||
-pkeyopt rsa_keygen_bits:"$bits" \
|
||||
-pkeyopt rsa_keygen_pubexp:"$exp_or_curve" \
|
||||
-out "$dir_name/$key_file"
|
||||
openssl req -new -x509 \
|
||||
-key "$dir_name/$key_file" \
|
||||
-out "$dir_name/$crt_file" \
|
||||
-days 3650 -sha${hash#sha} \
|
||||
-sigopt rsa_padding_mode:pss \
|
||||
-sigopt rsa_pss_saltlen:"$salt" \
|
||||
-subj "/C=FR/ST=IDF/L=Paris/O=Mock CSCA/OU=PKI/CN=MockCSCA"
|
||||
else
|
||||
# Regular RSA
|
||||
openssl genpkey -algorithm RSA \
|
||||
-pkeyopt rsa_keygen_bits:"$bits" \
|
||||
-pkeyopt rsa_keygen_pubexp:"$exp_or_curve" \
|
||||
-out "$dir_name/$key_file"
|
||||
openssl req -new -x509 \
|
||||
-key "$dir_name/$key_file" \
|
||||
-out "$dir_name/$crt_file" \
|
||||
-days 3650 -sha${hash#sha} \
|
||||
-subj "/C=FR/ST=IDF/L=Paris/O=Mock CSCA/OU=PKI/CN=MockCSCA"
|
||||
fi
|
||||
echo "[OK] Created CSCA in $dir_name => $key_file, $crt_file"
|
||||
|
||||
elif [ "$role" = "dsc" ]; then
|
||||
# We need --signer <csca_directory>
|
||||
if [ -z "$signer" ]; then
|
||||
echo -e "\033[31m[ERROR] Role 'dsc' requires --signer <csca_directory>.\033[0m"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# If the user passed a bare folder name (without "src/mock_certificates/"), prepend it.
|
||||
if [[ "$signer" != src/mock_certificates/* ]]; then
|
||||
signer="src/mock_certificates/$signer"
|
||||
fi
|
||||
|
||||
local csca_key="$signer/mock_csca.key"
|
||||
local csca_crt="$signer/mock_csca.pem"
|
||||
|
||||
if [ ! -f "$csca_key" ] || [ ! -f "$csca_crt" ]; then
|
||||
echo "[ERROR] Could not find the signer's key/cert: $csca_key or $csca_crt"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Generate DSC key
|
||||
if [ "$sig_alg" = "ecdsa" ]; then
|
||||
openssl ecparam -name "$exp_or_curve" -genkey -noout -out "$dir_name/$key_file"
|
||||
elif [ "$sig_alg" = "rsapss" ]; then
|
||||
openssl genpkey -algorithm RSA-PSS \
|
||||
-pkeyopt rsa_keygen_bits:"$bits" \
|
||||
-pkeyopt rsa_keygen_pubexp:"$exp_or_curve" \
|
||||
-out "$dir_name/$key_file"
|
||||
else
|
||||
# RSA
|
||||
openssl genpkey -algorithm RSA \
|
||||
-pkeyopt rsa_keygen_bits:"$bits" \
|
||||
-pkeyopt rsa_keygen_pubexp:"$exp_or_curve" \
|
||||
-out "$dir_name/$key_file"
|
||||
fi
|
||||
|
||||
# Create a CSR
|
||||
local csr_file="$dir_name/mocked_dsc.csr"
|
||||
openssl req -new \
|
||||
-key "$dir_name/$key_file" \
|
||||
-out "$csr_file" \
|
||||
-subj "/C=FR/ST=IDF/L=Paris/O=Mock DSC/OU=PKI/CN=MockDSC"
|
||||
|
||||
# Sign with the CSCA
|
||||
openssl x509 -req -in "$csr_file" \
|
||||
-CA "$csca_crt" -CAkey "$csca_key" -CAcreateserial \
|
||||
-days 3650 -sha${hash#sha} \
|
||||
-out "$dir_name/$crt_file"
|
||||
|
||||
# Clean up
|
||||
rm -f "$csr_file" "$signer/mock_csca.srl"
|
||||
echo "[OK] Created DSC in $dir_name => $key_file, $crt_file (signed by $signer)"
|
||||
|
||||
else
|
||||
echo "[ERROR] Invalid role: $role (must be 'csca' or 'dsc')."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
echo ""
|
||||
}
|
||||
|
||||
# ------------------------------------------------------------------------------
|
||||
# Example usage:
|
||||
# # 1) Generate a CSCA in "src/mock_certificates/sha256_rsapss_32_65537_4096"
|
||||
# # => mock_csca.key/mem
|
||||
# generate_certificate csca sha256 rsapss 32 65537 4096
|
||||
#
|
||||
# # 2) Generate a DSC in "src/mock_certificates/sha1_rsapss_32_65537_2048"
|
||||
# # => mock_dsc.key/mem
|
||||
# # signed by the above CSCA folder
|
||||
# generate_certificate dsc sha1 rsapss 32 65537 2048 --signer sha256_rsapss_32_65537_4096
|
||||
#
|
||||
# # Force re-gen if needed:
|
||||
# # generate_certificate csca sha256 rsapss 32 65537 4096 --force
|
||||
#
|
||||
# # For ECDSA example:
|
||||
# # generate_certificate csca sha256 ecdsa secp256r1
|
||||
# # generate_certificate dsc sha1 ecdsa secp256r1 --signer sha256_ecdsa_secp256r1
|
||||
#
|
||||
# # For RSA example:
|
||||
# # generate_certificate csca sha256 rsa 65537 4096
|
||||
# # generate_certificate dsc sha1 rsa 65537 2048 --signer sha256_rsa_65537_4096
|
||||
# ------------------------------------------------------------------------------
|
||||
# RSA certificates
|
||||
generate_certificate csca sha1 rsa 65537 4096
|
||||
generate_certificate dsc sha1 rsa 65537 2048 --signer sha1_rsa_65537_4096
|
||||
generate_certificate dsc sha1 rsa 65537 4096 --signer sha1_rsa_65537_4096
|
||||
generate_certificate csca sha256 rsa 65537 4096
|
||||
generate_certificate dsc sha256 rsa 65537 2048 --signer sha256_rsa_65537_4096
|
||||
generate_certificate dsc sha256 rsa 65537 3072 --signer sha256_rsa_65537_4096
|
||||
generate_certificate dsc sha256 rsa 65537 4096 --signer sha256_rsa_65537_4096
|
||||
generate_certificate csca sha384 rsa 65537 4096
|
||||
generate_certificate dsc sha384 rsa 65537 4096 --signer sha384_rsa_65537_4096
|
||||
generate_certificate csca sha512 rsa 65537 4096
|
||||
generate_certificate dsc sha512 rsa 65537 2048 --signer sha512_rsa_65537_4096
|
||||
generate_certificate dsc sha512 rsa 65537 4096 --signer sha512_rsa_65537_4096
|
||||
generate_certificate csca sha256 rsa 3 4096
|
||||
generate_certificate csca sha1 rsa 3 4096
|
||||
generate_certificate dsc sha1 rsa 3 4096 --signer sha1_rsa_3_4096
|
||||
generate_certificate dsc sha256 rsa 3 2048 --signer sha256_rsa_3_4096
|
||||
generate_certificate dsc sha256 rsa 3 4096 --signer sha256_rsa_3_4096
|
||||
|
||||
# RSA-PSS certificates
|
||||
generate_certificate csca sha256 rsapss 32 65537 4096
|
||||
generate_certificate csca sha256 rsapss 32 65537 2048
|
||||
generate_certificate csca sha256 rsapss 32 65537 3072
|
||||
generate_certificate dsc sha256 rsapss 32 65537 4096 --signer sha256_rsapss_32_65537_4096
|
||||
generate_certificate dsc sha256 rsapss 32 65537 2048 --signer sha256_rsapss_32_65537_2048
|
||||
generate_certificate dsc sha256 rsapss 32 65537 3072 --signer sha256_rsapss_32_65537_3072
|
||||
generate_certificate csca sha256 rsapss 32 3 4096
|
||||
generate_certificate csca sha256 rsapss 32 3 3072
|
||||
generate_certificate dsc sha256 rsapss 32 3 2048 --signer sha256_rsapss_32_3_4096
|
||||
generate_certificate dsc sha256 rsapss 32 3 3072 --signer sha256_rsapss_32_3_3072
|
||||
generate_certificate dsc sha256 rsapss 32 3 4096 --signer sha256_rsapss_32_3_4096
|
||||
generate_certificate csca sha384 rsapss 48 65537 4096
|
||||
generate_certificate csca sha384 rsapss 48 65537 3072
|
||||
generate_certificate dsc sha384 rsapss 48 65537 2048 --signer sha384_rsapss_48_65537_4096
|
||||
generate_certificate dsc sha384 rsapss 48 65537 3072 --signer sha384_rsapss_48_65537_3072
|
||||
generate_certificate csca sha512 rsapss 64 65537 4096
|
||||
generate_certificate dsc sha512 rsapss 64 65537 4096 --signer sha512_rsapss_64_65537_4096
|
||||
generate_certificate dsc sha512 rsapss 64 65537 2048 --signer sha512_rsapss_64_65537_4096
|
||||
# ECDSA certificates
|
||||
generate_certificate csca sha224 ecdsa secp224r1
|
||||
generate_certificate dsc sha224 ecdsa secp224r1 --signer sha224_ecdsa_secp224r1
|
||||
generate_certificate csca sha1 ecdsa secp256r1
|
||||
generate_certificate dsc sha1 ecdsa secp256r1 --signer sha1_ecdsa_secp256r1
|
||||
generate_certificate csca sha256 ecdsa secp256r1
|
||||
generate_certificate dsc sha256 ecdsa secp256r1 --signer sha256_ecdsa_secp256r1
|
||||
generate_certificate csca sha256 ecdsa secp384r1
|
||||
generate_certificate dsc sha256 ecdsa secp384r1 --signer sha256_ecdsa_secp384r1
|
||||
generate_certificate csca sha384 ecdsa secp384r1
|
||||
generate_certificate dsc sha384 ecdsa secp384r1 --signer sha384_ecdsa_secp384r1
|
||||
generate_certificate csca sha256 ecdsa secp521r1
|
||||
generate_certificate dsc sha256 ecdsa secp521r1 --signer sha256_ecdsa_secp521r1
|
||||
generate_certificate csca sha512 ecdsa secp521r1
|
||||
generate_certificate dsc sha512 ecdsa secp521r1 --signer sha512_ecdsa_secp521r1
|
||||
# Brainpool ECDSA certificates
|
||||
generate_certificate csca sha1 ecdsa brainpoolP224r1
|
||||
generate_certificate dsc sha1 ecdsa brainpoolP224r1 --signer sha1_ecdsa_brainpoolP224r1
|
||||
generate_certificate csca sha224 ecdsa brainpoolP224r1
|
||||
generate_certificate dsc sha224 ecdsa brainpoolP224r1 --signer sha224_ecdsa_brainpoolP224r1
|
||||
generate_certificate csca sha256 ecdsa brainpoolP224r1
|
||||
generate_certificate csca sha1 ecdsa brainpoolP256r1
|
||||
generate_certificate dsc sha1 ecdsa brainpoolP256r1 --signer sha1_ecdsa_brainpoolP256r1
|
||||
generate_certificate dsc sha256 ecdsa brainpoolP224r1 --signer sha256_ecdsa_brainpoolP224r1
|
||||
generate_certificate csca sha256 ecdsa brainpoolP256r1
|
||||
generate_certificate dsc sha256 ecdsa brainpoolP256r1 --signer sha256_ecdsa_brainpoolP256r1
|
||||
generate_certificate csca sha384 ecdsa brainpoolP256r1
|
||||
generate_certificate dsc sha384 ecdsa brainpoolP256r1 --signer sha384_ecdsa_brainpoolP256r1
|
||||
generate_certificate csca sha512 ecdsa brainpoolP256r1
|
||||
generate_certificate dsc sha512 ecdsa brainpoolP256r1 --signer sha512_ecdsa_brainpoolP256r1
|
||||
generate_certificate csca sha256 ecdsa brainpoolP384r1
|
||||
generate_certificate dsc sha256 ecdsa brainpoolP384r1 --signer sha256_ecdsa_brainpoolP384r1
|
||||
generate_certificate csca sha384 ecdsa brainpoolP384r1
|
||||
generate_certificate dsc sha384 ecdsa brainpoolP384r1 --signer sha384_ecdsa_brainpoolP384r1
|
||||
generate_certificate csca sha512 ecdsa brainpoolP384r1
|
||||
generate_certificate dsc sha512 ecdsa brainpoolP384r1 --signer sha512_ecdsa_brainpoolP384r1
|
||||
generate_certificate csca sha384 ecdsa brainpoolP512r1
|
||||
generate_certificate dsc sha384 ecdsa brainpoolP512r1 --signer sha384_ecdsa_brainpoolP512r1
|
||||
generate_certificate csca sha512 ecdsa brainpoolP512r1
|
||||
generate_certificate dsc sha512 ecdsa brainpoolP512r1 --signer sha512_ecdsa_brainpoolP512r1
|
||||
|
||||
|
||||
##
|
||||
echo -e "\033[32mMock certificates generated\033[0m"
|
||||
python src/scripts/addCertificatesInTs.py
|
||||
echo -e "\033[32mCertificates added in certificates.ts\033[0m"
|
||||
|
||||
|
||||
# Parse command line arguments
|
||||
CSCA_FLAG=false
|
||||
for arg in "$@"; do
|
||||
case $arg in
|
||||
--csca)
|
||||
CSCA_FLAG=true
|
||||
shift # Remove --csca from processing
|
||||
;;
|
||||
esac
|
||||
done
|
||||
|
||||
if [ "$CSCA_FLAG" = true ]; then
|
||||
cd ../registry
|
||||
ts-node src/buildSkiPem.ts
|
||||
echo -e "\033[32mSkiPem generated\033[0m"
|
||||
cd ../common
|
||||
python src/scripts/addSkiPemToTs.py
|
||||
echo -e "\033[32mSkiPem added in certificates.ts\033[0m"
|
||||
cd ../registry
|
||||
fi
|
||||
|
||||
|
||||
cd ../registry
|
||||
ts-node src/dsc/build_dsc_merkle_tree.ts
|
||||
echo -e "\033[32mDSC Merkle tree updated\033[0m"
|
||||
cd ../common
|
||||
|
||||
|
||||
if [ "$CSCA_FLAG" = true ]; then
|
||||
cd ../registry
|
||||
ts-node src/csca/build_csca_merkle_tree.ts
|
||||
echo -e "\033[32mCSCA Merkle tree updated\033[0m"
|
||||
fi
|
||||
Reference in New Issue
Block a user