frdmn/openssl-cert-tools

🗂NodeJS module to handle certificate related OpenSSL commands

openssl-cert-tools

NodeJS module to handle TLS certificates using OpenSSL.

• getCertificateInfo()
• getCertificateRequestInfo()
• getCertificate()
• getCertificateChain()
• getCertificateHash()
• getCertificateRequestHash()
• getPrivateKeyHash()

Installation

cd your-project/
npm install openssl-cert-tools

Usage

getCertificateInfo()

var opensslTools = require('openssl-cert-tools');

var demoCertificate =
'-----BEGIN CERTIFICATE-----\n' +
'MIIGLzCCBdagAwIBAgIQH3be7EHzH3zHdBvhyXC4wDAKBggqhkjOPQQDAjCBkjEL\n' +
'MAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UE\n' +
'BxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxODA2BgNVBAMT\n' +
'L0NPTU9ETyBFQ0MgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBDQSAy\n' +
'MB4XDTE1MDkyNjAwMDAwMFoXDTE1MTIzMDIzNTk1OVowazEhMB8GA1UECxMYRG9t\n' +
'YWluIENvbnRyb2wgVmFsaWRhdGVkMSEwHwYDVQQLExhQb3NpdGl2ZVNTTCBNdWx0\n' +
'aS1Eb21haW4xIzAhBgNVBAMTGnNuaTMzMjgwLmNsb3VkZmxhcmVzc2wuY29tMFkw\n' +
'EwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE/VVyjyzoogarRb9sqmpqwwAf+Kh69I9E\n' +
'5NeT/1s9nVjvEzYTnrEN3xqNrzbA/y61AbJ6Yy714OCq1ViAmBuCPaOCBDIwggQu\n' +
'MB8GA1UdIwQYMBaAFEAJYWfwvINxT94SCCxv1NQrdj2WMB0GA1UdDgQWBBT1uV7H\n' +
'fwV8Ca9MxjAiSHOEyE9EVDAOBgNVHQ8BAf8EBAMCB4AwDAYDVR0TAQH/BAIwADAd\n' +
'BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwTwYDVR0gBEgwRjA6BgsrBgEE\n' +
'AbIxAQICBzArMCkGCCsGAQUFBwIBFh1odHRwczovL3NlY3VyZS5jb21vZG8uY29t\n' +
'L0NQUzAIBgZngQwBAgEwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5jb21v\n' +
'ZG9jYTQuY29tL0NPTU9ET0VDQ0RvbWFpblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJD\n' +
'QTIuY3JsMIGIBggrBgEFBQcBAQR8MHowUQYIKwYBBQUHMAKGRWh0dHA6Ly9jcnQu\n' +
'Y29tb2RvY2E0LmNvbS9DT01PRE9FQ0NEb21haW5WYWxpZGF0aW9uU2VjdXJlU2Vy\n' +
'dmVyQ0EyLmNydDAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AuY29tb2RvY2E0LmNv\n' +
'bTCCAnkGA1UdEQSCAnAwggJsghpzbmkzMzI4MC5jbG91ZGZsYXJlc3NsLmNvbYIT\n' +
'Ki4xMDAxY29ja3RhaWxzLmNvbYIRKi4xMDAxbW90ZXVycy5jb22CEiouYWxpZml0\n' +
'emdlcmFsZC5tZYINKi5hbGlrZml0ei5tZYINKi5ib3J1dC5wYXJ0eYINKi5lbGth\n' +
'c3NhLmNvbYIIKi5mcmQubW6CGyouZy1hbmQtYy1lbGVjdHJvbmljcy5jby51a4IJ\n' +
'Ki5naGFjLmRlgg4qLmtub3R0Ym95cy5ldYIaKi5tb250Z29tZXJ5dm9jYWxjb2Fj\n' +
'aC5jb22CDioubW96YWlrLmNvLmlkggsqLm1vemFpay5pZIIKKi5uZXdlci5jY4IW\n' +
'Ki5wZXJzb25hbGl6YXJibG9nLmNvbYIUKi5zd2FnZG9nd2Fsa2luZy5jb22CGSou\n' +
'dGhlZ29sZGVuYW5kY29tcGFueS5jb22CETEwMDFjb2NrdGFpbHMuY29tgg8xMDAx\n' +
'bW90ZXVycy5jb22CEGFsaWZpdHpnZXJhbGQubWWCC2FsaWtmaXR6Lm1lggtib3J1\n' +
'dC5wYXJ0eYILZWxrYXNzYS5jb22CBmZyZC5tboIZZy1hbmQtYy1lbGVjdHJvbmlj\n' +
'cy5jby51a4IHZ2hhYy5kZYIMa25vdHRib3lzLmV1ghhtb250Z29tZXJ5dm9jYWxj\n' +
'b2FjaC5jb22CDG1vemFpay5jby5pZIIJbW96YWlrLmlkgghuZXdlci5jY4IUcGVy\n' +
'c29uYWxpemFyYmxvZy5jb22CEnN3YWdkb2d3YWxraW5nLmNvbYIXdGhlZ29sZGVu\n' +
'YW5kY29tcGFueS5jb20wCgYIKoZIzj0EAwIDRwAwRAIgZzfbzLiht8LIcEwvCKIj\n' +
'xRC5hF3mcVUzAYMTsAp+PWoCIBCaOZvgDR0t7tCijM6o5N3vNHDs0vQbtQkEaQSx\n' +
'/j9A\n' +
'-----END CERTIFICATE-----\n';

opensslTools.getCertificateInfo(demoCertificate, function(err, data){
  if (err) {
    console.log(err)
  } else {
    console.log(data);
    /* =>
     * {
     *   certificate: '-----BEGIN CERTIFICATE-----[...]',
     *   issuer: {
     *     C: 'US',
     *     ST: 'State',
     *     L: 'Location',
     *     O: 'Organization',
     *     CN: 'Common Name'
     *   },
     *   subject: {
     *     OU: 'ProductNameSSL',
     *     CN: 'common.name.com'
     *   },
     *   validFrom: Sat Sep 26 2015 02: 00: 00 GMT + 0200(CEST),
     *   validTo: Thu Dec 31 2015 00: 59: 59 GMT + 0100(CET),
     *   remainingDays: 96
     * }
     */
  }
});

getCertificateRequestInfo()

var demoCertificateRequest =
'-----BEGIN CERTIFICATE REQUEST-----\n' +
'MIIC+jCCAeICAQAwgbQxCzAJBgNVBAYTAkRFMRAwDgYDVQQIDAdCYXZhcmlhMRMw\n' +
'EQYDVQQHDApFaWJlbHN0YWR0MSUwIwYDVQQKDBxZRUFIV0hBVD8hIE1pbmVjcmFm\n' +
'dCBzZXJ2ZXJzMRQwEgYDVQQLDAtNYWlsIHN5c3RlbTEcMBoGA1UEAwwTY2hld2Jh\n' +
'Y2NhLnllYWh3aC5hdDEjMCEGCSqGSIb3DQEJARYUcG9zdG1hc3RlckB5ZWFod2gu\n' +
'YXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAi9mSsi01EDc3QMCL\n' +
'lreBVzDSsICIc8w4mttgSg+cW/Hl98iDZ/awyv0hEeXLg/rybR42LHCRXyJbiuV8\n' +
'edOGbYN5ODD3di5tOmzjgJm34gmSxuzzZSe6431C9nR0BJaPwGbBoFqBO5MiWD1i\n' +
'Z7Cv3a+xJQO0gN+3PIgSMOGAD608bqJN58ewtqqYY0xM3vQCEcf40TJJc8fv1+a5\n' +
'1BM07s26L0Az5xZeIcWOqBgvBQhY0dI3QEKW5BbQDVA/OFilpbJFqCseosjz0/YG\n' +
'tS46CHGjNuViAcxeJ/IWKRWB3TCd2KhIqaEZLCVTWPqCaQ7CioITgrQW+c/qVCfv\n' +
'to6xAgMBAAGgADANBgkqhkiG9w0BAQsFAAOCAQEAu8gxx8RrQPeWvKJiY3fmTNHg\n' +
'lEDQU2vTPU+56UZEuCVztj1LdmjzFpH6biFa+C2XxkTxfeXc9OakklWlIgfP7b2Y\n' +
'RTObWPcpyDSE+yB79Lhybb4Wr3vASJJWSgwqymp5BjEj0iHeVFzvippvvyPieafr\n' +
'a31cPiG5UbOWOXpeZ73K1qBqmpRglzYouqWPA0D9e9wks71INhPL8wODRha2RZ9M\n' +
'voaVZHsm6NB+WAZzK+wznc1wLs/mVigqfjakU//VXi8opb7hTkH1/8h8Pn5uCFM7\n' +
'3UcTESfcIv3XuKeLXKQEJZtR3PQlWDb+pI7x1iUm7k0Q1KXsYysdUzq/fGTSdw==\n' +
'-----END CERTIFICATE REQUEST-----\n';

opensslTools.getCertificateRequestInfo(demoCertificate, function(err, data){
  if (err) {
    console.log(err)
  } else {
    console.log(data);
    /* =>
     * {
     *   certificate: '-----BEGIN NEW CERTIFICATE REQUEST-----[...]',
     *   subject: {
     *     C: 'DE',
     *     ST: 'State',
     *     L: 'Location',
     *     O: 'Organization',
     *     OU: 'Organization Unit',
     *     CN: 'common.name.com'
     *   }
     * }
     */
  }
});

getCertificate()

opensslTools.getCertificate('frd.mn', '443', function(err, crt){
  if (!err) {
    console.log(crt);
    /* =>
     * -----BEGIN CERTIFICATE-----
     * MIIGGTCCBcCgAwIBAgIQMqz1AmaFXNCYqtqJu8OU2jAKBggqhkjOPQQDAjCBkjEL
     * MAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UE
     * BxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxODA2BgNVBAMT
     * L0NPTU9ETyBFQ0MgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBDQSAy
     * MB4XDTE1MTExMzAwMDAwMFoXDTE2MDUwNzIzNTk1OVowazEhMB8GA1UECxMYRG9t
     * YWluIENvbnRyb2wgVmFsaWRhdGVkMSEwHwYDVQQLExhQb3NpdGl2ZVNTTCBNdWx0
     * aS1Eb21haW4xIzAhBgNVBAMTGnNuaTMzMjgwLmNsb3VkZmxhcmVzc2wuY29tMFkw
     * EwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE/VVyjyzoogarRb9sqmpqwwAf+Kh69I9E
     * 5NeT/1s9nVjvEzYTnrEN3xqNrzbA/y61AbJ6Yy714OCq1ViAmBuCPaOCBBwwggQY
     * MB8GA1UdIwQYMBaAFEAJYWfwvINxT94SCCxv1NQrdj2WMB0GA1UdDgQWBBT1uV7H
     * fwV8Ca9MxjAiSHOEyE9EVDAOBgNVHQ8BAf8EBAMCB4AwDAYDVR0TAQH/BAIwADAd
     * BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwTwYDVR0gBEgwRjA6BgsrBgEE
     * AbIxAQICBzArMCkGCCsGAQUFBwIBFh1odHRwczovL3NlY3VyZS5jb21vZG8uY29t
     * L0NQUzAIBgZngQwBAgEwVgYDVR0fBE8wTTBLoEmgR4ZFaHR0cDovL2NybC5jb21v
     * ZG9jYTQuY29tL0NPTU9ET0VDQ0RvbWFpblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJD
     * QTIuY3JsMIGIBggrBgEFBQcBAQR8MHowUQYIKwYBBQUHMAKGRWh0dHA6Ly9jcnQu
     * Y29tb2RvY2E0LmNvbS9DT01PRE9FQ0NEb21haW5WYWxpZGF0aW9uU2VjdXJlU2Vy
     * dmVyQ0EyLmNydDAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AuY29tb2RvY2E0LmNv
     * bTCCAmMGA1UdEQSCAlowggJWghpzbmkzMzI4MC5jbG91ZGZsYXJlc3NsLmNvbYIT
     * Ki4xMDAxY29ja3RhaWxzLmNvbYIRKi4xMDAxbW90ZXVycy5jb22CEiouYWxpZml0
     * emdlcmFsZC5tZYINKi5hbGlrZml0ei5tZYINKi5ib3J1dC5wYXJ0eYINKi5lbGth
     * c3NhLmNvbYIIKi5mcmQubW6CGyouZy1hbmQtYy1lbGVjdHJvbmljcy5jby51a4IJ
     * Ki5naGFjLmRlgg4qLmtub3R0Ym95cy5ldYIaKi5tb250Z29tZXJ5dm9jYWxjb2Fj
     * aC5jb22CDioubW96YWlrLmNvLmlkggsqLm1vemFpay5pZIIWKi5wZXJzb25hbGl6
     * YXJibG9nLmNvbYIUKi5zd2FnZG9nd2Fsa2luZy5jb22CGSoudGhlZ29sZGVuYW5k
     * Y29tcGFueS5jb22CETEwMDFjb2NrdGFpbHMuY29tgg8xMDAxbW90ZXVycy5jb22C
     * EGFsaWZpdHpnZXJhbGQubWWCC2FsaWtmaXR6Lm1lggtib3J1dC5wYXJ0eYILZWxr
     * YXNzYS5jb22CBmZyZC5tboIZZy1hbmQtYy1lbGVjdHJvbmljcy5jby51a4IHZ2hh
     * Yy5kZYIMa25vdHRib3lzLmV1ghhtb250Z29tZXJ5dm9jYWxjb2FjaC5jb22CDG1v
     * emFpay5jby5pZIIJbW96YWlrLmlkghRwZXJzb25hbGl6YXJibG9nLmNvbYISc3dh
     * Z2RvZ3dhbGtpbmcuY29tghd0aGVnb2xkZW5hbmRjb21wYW55LmNvbTAKBggqhkjO
     * PQQDAgNHADBEAiBTlTYFkE9plIJhPMbOC95KAnpOw2UrOLSzmL/laTanoQIgCSLp
     * 9AhIYFMZOdUkCVLEWFgCuDpd1p4MlvszlJBdcgQ=
     * -----END CERTIFICATE-----
     */
  }
});

getCertificateChain()

opensslTools.getCertificateChain('frd.mn', '443', function(err, crt){
  if (!err) {
    console.log(crt);
    /* =>
     * [
     *   '-----BEGIN CERTIFICATE-----\n' +
     *     'MIIGqzCCBZOgAwIBAgIQB0/pAsa31hmIThyhhU2ReDANBgkqhkiG9w0BAQsFADBN\n' +
     *     '...' +
     *     'WeNYP84Yjw6OFSHdi2W0VojRGhxm7PZCMqswN/XaBg==\n' +
     *     '-----END CERTIFICATE-----',
     *   '-----BEGIN CERTIFICATE-----\n' +
     *     'MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh\n' +
     *     '...' +
     *     'j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz\n' +
     *     '-----END CERTIFICATE-----',
     *   '-----BEGIN CERTIFICATE-----\n' +
     *     'MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh\n' +
     *     '...' +
     *     'CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=\n' +
     *     '-----END CERTIFICATE-----'
     * ]
     */
  }
});

opensslTools.getCertificateHash(demoCertificate, function(err, hash){
  if (!err) {
    console.log(hash);
    /* =>
     * e30fbb5ba0cecaad7a2d0cb836584c05
     */
  }
});

opensslTools.getCertificateRequestHash(demoCertificateRequest, function(err, hash){
  if (!err) {
    console.log(hash);
    /* =>
     * dbc530fbb1e60b5cf43cc9c7f8dcc1ad
     */
  }
});

var demoPrivateKey =
'-----BEGIN RSA PRIVATE KEY-----\n' +
'MIIJKAIBAAKCAgEAwCIZPuIAJWgZeBfVqZjP6mcLvBZNTxjg+FCg8V4GC9889ErC\n' +
'SO2WFsujFkc7leC4x3IGC0NwCfHAIeMOuescbKdlFOdc2PhcnAKyrA/R1wYUi/ME\n' +
'vTzQOI0OviY2NUudOmFtr4L2U9MhzjXD9CT8cSbG1quXjUEYwOWorgNSxnDJ+iga\n' +
'1McaOFzwdiIlWoewPuqKkMZ4f7VPHq3z3qf/yYC3kzVEw0N8Jw+JaIuhGpgxehwX\n' +
'k+DW9P0ws2ZTZC2t0jqDJEILu3mndkgrQxxGK0Sesx80hE4LurM0us9L2E4P+rSU\n' +
'XxuFVlsNjcZI2nJxitGxDpiQY4pJUT8FrjXZITApTSI4fND4WfI19XZSQSypoqKx\n' +
'hVWx44Sm83hna8kUlgxHI7cws8S5uoTEbgH8gql1S5OqLgbd5iGEDZzuxSHJQOA1\n' +
'ODwbL/Ho56XKMrWvxH6ipfhW695K41Oi25qajMfkSKmAHH+lLhO1s4LC7VvbP/Zp\n' +
'vXmDCD2v2EH6eNIHetmMqZZDABj1lzDdyxjLXnL2a9ZpJhMUSn3GwU6aJOXxjkXT\n' +
'5g3hwwDpPuuDswv4fcz8rd4DBBKmRecVTi2m0meaReWuxRCW37A/mROzQ5HBtaDE\n' +
'TJbjdvSx2fBZ1eiPnSC0dtVj+0NwjaXhOu5fwHCZx2mvbFit3d/+qU2KFLMCAwEA\n' +
'AQKCAgBhJBxdhciLISHXbT2S3PcqTWVKeIAn4K1F/wYQYvhtojXgUbf/RVhgOB9B\n' +
'0UwYECF8fXL+2N7ZuEfrGjDE4VFiwhPCSOPRs2inXFnX0rvGmoVi6MDZqNih7veo\n' +
'PgukUJGzBbV+Spmech4ic16anuSflPptaR5bxbDtPnBVYsrEGByWhRZjxDLGkn7l\n' +
'S4hVSEtc1Bqw7hfYgeP53/tv9MLHr3OhUwpsKz+nRBy2JfqTRqWlVnS5SLGF9klc\n' +
'Ov0opku/AeRyPY5PAEgh7oUpDi+QCsauS7Wyuv8FKzwaw1pWh8leeVSW7YQx0CF/\n' +
'L+R/xeMQS8rYVVyTZ0SAdnu5w/H+DBHt0V/HJ9KYGevaeu7SdN47EQcTmJhi8A3O\n' +
'c9Q0Ha3WUiMr70Tqbv1nUH21RwBEpydP7gLZC79mE54/JH7tq9EpIRneS/pCb3KQ\n' +
'W4zK1w4JOv3nViaoy+IShFnpWorVv5ZtBhofhFfMIjttVjKFecnB6xuPchPbhaAH\n' +
'J6wuec/SlmQnC4kzkddmOu2qej1NwwXcXMfzGBAOK/zvzWEYhcaHlr0iWVuJ4xq1\n' +
'BK/Bp8u0WBGftDoKeewhvzuS0gUT0+1TKtusz3Q2LZ2DXFdF3jo7HSsmI1SCkhO+\n' +
'mmE2FYrWzghwwXJFI2vNxi05y60KBfd9vhy/gsimCMua5rvq8QKCAQEA6jQsW11g\n' +
'J1pizPAn/z2unclkLz0Rw4QvCBrifsL0ZFyjNzFKFSe8Pcon+lyctrRkEU6Hmg9y\n' +
'rqjFiG1HkSSLrm/2ebeP9rjskUUmxeyQ0uM6mXO9C0UI6tvBk2WDDcm5dE5/U+ab\n' +
'QmoN71H3vC8qlHHDOLeZB6/lDLbLiqs2NheoXvuNtSQgTQAdEzsKBeXrjky1rG3J\n' +
'lKdNN8oKbyNoFWaJLzXdzK4po8XLBL/fItTaSATlff06SxAnM4bNsByAz/12JkHP\n' +
'h/gW0Px52QtDWxCLbVRrhF4y3PLM2dE3i395SKixpWIqo43h/mUf63lasZk53ir0\n' +
'vIO2YaqW2C1P+wKCAQEA0gObfGtYEBqd5iDwW3clJy4vHOpKdLg0USb/vcjHY5dG\n' +
'gzWeZvqXVumXFZa1UBc9buMlrs+flJ8FVTqxiRzCeP1z0zH8cF3pCEMmPvyaTtUI\n' +
'9swjdx4WE8K1UkfDRem9T9wedHymus5yyV+SkXpKdcUapTlZq+/pfXKuakltCkrQ\n' +
'yP7Cna2/7zpqUEm7gQ4KgU9UiJ9idUza8FgNaLdpk3YMfN1sU0vxFFryit+/LXr4\n' +
'1ss8jTi0Yv9Pwiv07n6pUhHl2a/6C22wX9kPYGaDjxl8aO36539TUubPujetgiIB\n' +
'65FOu9zFqe380NGX9Nr/CXn98A82jaGBpvBa+MZYqQKCAQEAl2n3q3Ho8khLS/eP\n' +
'xEKam8RSEwBGdcMFrRXEjPN5kVEa7FnfbWHtH32M7x3k63Igp9e/b2jBWg4e9x6/\n' +
'gCTCcZpNHVABsR7JQvoUIS3aS51Ai2j6NUkChORid+rPGaDrVzhQtWuHwR5Tt/+k\n' +
'THOp8aLC9e4s731WdivP1+zs9XfCEPZNHWknwOBr67zls/57ldoeMkYgZwzqrUDg\n' +
'Eg4wAnXyByWqKeQHY6xCnuV1W02Feb5AqH2IrHLbBUMHw+4JkW5qbj1p8JwCFEbG\n' +
'd/4CI+PEYICNqlxEQfhvW/sZEATv4nu9rhCTRH48N34lbtVcPymy8eGPrDjzNp1V\n' +
'PJm+9QKCAQBMG26Pij8hpuOt8CXqn6ThLAV6zxUoc1DST/XCCy7m0n2FMzsySoHp\n' +
'x0EvW6xdV+61bq/LSAamz3IZTunjrH51ZjRBRw4ako3OprcHgHdTNjTHa3c2xbpu\n' +
'ctNO/B6yCWDHvhdzU3EApaxHedEd01mEkGd1lPEANDNDePnoHq/bWP2MuXZBuiOi\n' +
'SGMasX236SS5c8xIrqn5pF57Vw2U81LZU6B2569ICG9XVxYqaadYjgX7oS9SZkhI\n' +
'0AlRbqiWfWRTD5VibDmLRrbyJTFDWCM5Cp1hUUzp8+R4WJjS/TZtwHE9syz7O6iO\n' +
'SmaiLjKJU4u1HXZ/NqQoc20O2G+/U/HxAoIBAAEey+fNlRAgmq7Q7uQBjS5/b/Qy\n' +
'2MZGPRqbp+sGfARQaCCrt6SUGHePpJptSpCpUuYsC2vZ4rCFJedm/s6aKNZIAWN3\n' +
'Lk4YCy9AGWpOfJpzDkKrIvETX9/Wh0R8LDs67UoGbBfIvQ7kYNQDCa2nh1VTxUwF\n' +
'na5BNN1ISlQPxTtrKA19i1UDBE9Fu4UHyKD08AO63/P24xNgo8lR6k05DYxdmLHf\n' +
'QEZWRInJ3MtJrfC5b7k3PmKxbHNBP/RCwX6fu4EpJKkryjfM86tTkgp+xJZz1xsD\n' +
'TshlP+Kn8JoTnlQBIHvYxZNFEU+3gV2rlBeo2DeCK4bMPBrbA2KvILRzxyo=\n' +
'-----END RSA PRIVATE KEY-----\n';

opensslTools.getPrivateKeyHash(demoCertificateRequest, function(err, hash){
  if (!err) {
    console.log(hash);
    /* =>
     * 0b47baa451ba0d99eda2ca44dc4bd000
     */
  }
});

getCertificateHash()

opensslTools.getCertificateHash(demoCertificate, function(err, hash){
  if (!err) {
    console.log(hash);
    /* =>
     * e30fbb5ba0cecaad7a2d0cb836584c05
     */
  }
});

getCertificateRequestHash()

opensslTools.getCertificateRequestHash(demoCertificateRequest, function(err, hash){
  if (!err) {
    console.log(hash);
    /* =>
     * dbc530fbb1e60b5cf43cc9c7f8dcc1ad
     */
  }
});

getPrivateKeyHash()

var demoPrivateKey =
'-----BEGIN RSA PRIVATE KEY-----\n' +
'MIIJKAIBAAKCAgEAwCIZPuIAJWgZeBfVqZjP6mcLvBZNTxjg+FCg8V4GC9889ErC\n' +
'SO2WFsujFkc7leC4x3IGC0NwCfHAIeMOuescbKdlFOdc2PhcnAKyrA/R1wYUi/ME\n' +
'vTzQOI0OviY2NUudOmFtr4L2U9MhzjXD9CT8cSbG1quXjUEYwOWorgNSxnDJ+iga\n' +
'1McaOFzwdiIlWoewPuqKkMZ4f7VPHq3z3qf/yYC3kzVEw0N8Jw+JaIuhGpgxehwX\n' +
'k+DW9P0ws2ZTZC2t0jqDJEILu3mndkgrQxxGK0Sesx80hE4LurM0us9L2E4P+rSU\n' +
'XxuFVlsNjcZI2nJxitGxDpiQY4pJUT8FrjXZITApTSI4fND4WfI19XZSQSypoqKx\n' +
'hVWx44Sm83hna8kUlgxHI7cws8S5uoTEbgH8gql1S5OqLgbd5iGEDZzuxSHJQOA1\n' +
'ODwbL/Ho56XKMrWvxH6ipfhW695K41Oi25qajMfkSKmAHH+lLhO1s4LC7VvbP/Zp\n' +
'vXmDCD2v2EH6eNIHetmMqZZDABj1lzDdyxjLXnL2a9ZpJhMUSn3GwU6aJOXxjkXT\n' +
'5g3hwwDpPuuDswv4fcz8rd4DBBKmRecVTi2m0meaReWuxRCW37A/mROzQ5HBtaDE\n' +
'TJbjdvSx2fBZ1eiPnSC0dtVj+0NwjaXhOu5fwHCZx2mvbFit3d/+qU2KFLMCAwEA\n' +
'AQKCAgBhJBxdhciLISHXbT2S3PcqTWVKeIAn4K1F/wYQYvhtojXgUbf/RVhgOB9B\n' +
'0UwYECF8fXL+2N7ZuEfrGjDE4VFiwhPCSOPRs2inXFnX0rvGmoVi6MDZqNih7veo\n' +
'PgukUJGzBbV+Spmech4ic16anuSflPptaR5bxbDtPnBVYsrEGByWhRZjxDLGkn7l\n' +
'S4hVSEtc1Bqw7hfYgeP53/tv9MLHr3OhUwpsKz+nRBy2JfqTRqWlVnS5SLGF9klc\n' +
'Ov0opku/AeRyPY5PAEgh7oUpDi+QCsauS7Wyuv8FKzwaw1pWh8leeVSW7YQx0CF/\n' +
'L+R/xeMQS8rYVVyTZ0SAdnu5w/H+DBHt0V/HJ9KYGevaeu7SdN47EQcTmJhi8A3O\n' +
'c9Q0Ha3WUiMr70Tqbv1nUH21RwBEpydP7gLZC79mE54/JH7tq9EpIRneS/pCb3KQ\n' +
'W4zK1w4JOv3nViaoy+IShFnpWorVv5ZtBhofhFfMIjttVjKFecnB6xuPchPbhaAH\n' +
'J6wuec/SlmQnC4kzkddmOu2qej1NwwXcXMfzGBAOK/zvzWEYhcaHlr0iWVuJ4xq1\n' +
'BK/Bp8u0WBGftDoKeewhvzuS0gUT0+1TKtusz3Q2LZ2DXFdF3jo7HSsmI1SCkhO+\n' +
'mmE2FYrWzghwwXJFI2vNxi05y60KBfd9vhy/gsimCMua5rvq8QKCAQEA6jQsW11g\n' +
'J1pizPAn/z2unclkLz0Rw4QvCBrifsL0ZFyjNzFKFSe8Pcon+lyctrRkEU6Hmg9y\n' +
'rqjFiG1HkSSLrm/2ebeP9rjskUUmxeyQ0uM6mXO9C0UI6tvBk2WDDcm5dE5/U+ab\n' +
'QmoN71H3vC8qlHHDOLeZB6/lDLbLiqs2NheoXvuNtSQgTQAdEzsKBeXrjky1rG3J\n' +
'lKdNN8oKbyNoFWaJLzXdzK4po8XLBL/fItTaSATlff06SxAnM4bNsByAz/12JkHP\n' +
'h/gW0Px52QtDWxCLbVRrhF4y3PLM2dE3i395SKixpWIqo43h/mUf63lasZk53ir0\n' +
'vIO2YaqW2C1P+wKCAQEA0gObfGtYEBqd5iDwW3clJy4vHOpKdLg0USb/vcjHY5dG\n' +
'gzWeZvqXVumXFZa1UBc9buMlrs+flJ8FVTqxiRzCeP1z0zH8cF3pCEMmPvyaTtUI\n' +
'9swjdx4WE8K1UkfDRem9T9wedHymus5yyV+SkXpKdcUapTlZq+/pfXKuakltCkrQ\n' +
'yP7Cna2/7zpqUEm7gQ4KgU9UiJ9idUza8FgNaLdpk3YMfN1sU0vxFFryit+/LXr4\n' +
'1ss8jTi0Yv9Pwiv07n6pUhHl2a/6C22wX9kPYGaDjxl8aO36539TUubPujetgiIB\n' +
'65FOu9zFqe380NGX9Nr/CXn98A82jaGBpvBa+MZYqQKCAQEAl2n3q3Ho8khLS/eP\n' +
'xEKam8RSEwBGdcMFrRXEjPN5kVEa7FnfbWHtH32M7x3k63Igp9e/b2jBWg4e9x6/\n' +
'gCTCcZpNHVABsR7JQvoUIS3aS51Ai2j6NUkChORid+rPGaDrVzhQtWuHwR5Tt/+k\n' +
'THOp8aLC9e4s731WdivP1+zs9XfCEPZNHWknwOBr67zls/57ldoeMkYgZwzqrUDg\n' +
'Eg4wAnXyByWqKeQHY6xCnuV1W02Feb5AqH2IrHLbBUMHw+4JkW5qbj1p8JwCFEbG\n' +
'd/4CI+PEYICNqlxEQfhvW/sZEATv4nu9rhCTRH48N34lbtVcPymy8eGPrDjzNp1V\n' +
'PJm+9QKCAQBMG26Pij8hpuOt8CXqn6ThLAV6zxUoc1DST/XCCy7m0n2FMzsySoHp\n' +
'x0EvW6xdV+61bq/LSAamz3IZTunjrH51ZjRBRw4ako3OprcHgHdTNjTHa3c2xbpu\n' +
'ctNO/B6yCWDHvhdzU3EApaxHedEd01mEkGd1lPEANDNDePnoHq/bWP2MuXZBuiOi\n' +
'SGMasX236SS5c8xIrqn5pF57Vw2U81LZU6B2569ICG9XVxYqaadYjgX7oS9SZkhI\n' +
'0AlRbqiWfWRTD5VibDmLRrbyJTFDWCM5Cp1hUUzp8+R4WJjS/TZtwHE9syz7O6iO\n' +
'SmaiLjKJU4u1HXZ/NqQoc20O2G+/U/HxAoIBAAEey+fNlRAgmq7Q7uQBjS5/b/Qy\n' +
'2MZGPRqbp+sGfARQaCCrt6SUGHePpJptSpCpUuYsC2vZ4rCFJedm/s6aKNZIAWN3\n' +
'Lk4YCy9AGWpOfJpzDkKrIvETX9/Wh0R8LDs67UoGbBfIvQ7kYNQDCa2nh1VTxUwF\n' +
'na5BNN1ISlQPxTtrKA19i1UDBE9Fu4UHyKD08AO63/P24xNgo8lR6k05DYxdmLHf\n' +
'QEZWRInJ3MtJrfC5b7k3PmKxbHNBP/RCwX6fu4EpJKkryjfM86tTkgp+xJZz1xsD\n' +
'TshlP+Kn8JoTnlQBIHvYxZNFEU+3gV2rlBeo2DeCK4bMPBrbA2KvILRzxyo=\n' +
'-----END RSA PRIVATE KEY-----\n';

opensslTools.getPrivateKeyHash(demoCertificateRequest, function(err, hash){
  if (!err) {
    console.log(hash);
    /* =>
     * 0b47baa451ba0d99eda2ca44dc4bd000
     */
  }
});

Contributing

1. Fork it
2. Create your feature branch: git checkout -b feature/my-new-feature
3. Commit your changes: git commit -am 'Add some feature'
4. Push to the branch: git push origin feature/my-new-feature
5. Submit a pull request

Requirements / Dependencies

• NodeJS

Credits

• @es128 for the ssl-utils Node module: https://github.com/es128/ssl-utils/

License

MIT

openssl-cert-tools's Issues

Some `undefined` variables in response of getCertificateChain()

openssl.getCertificateChain(hostName, hostPort, function(err, crt){
    console.log(err, crt);
});

Error: undefinedgetaddrinfo: nodename nor servname provided, or not known
connect:errno=0
    at ChildProcess.<anonymous> (/Users/jonas/Development/076_tlstools/node_modules/openssl-cert-tools/lib/certificate.js:120:17)
    at ChildProcess.emit (events.js:314:20)
    at Process.ChildProcess._handle.onexit (internal/child_process.js:276:12) undefined

Update NPM packages

Test cases

does not support issuer and subject on openssl-1.1.x

New function to check if key matches certificate

remaining days is showing positive values after expiration

Fix Travis test case

https://travis-ci.org/frdmn/openssl-cert-tools/jobs/91570011#L116-L117

???

No response when "getaddrinfo: nodename not found" is thrown

"Remaining days" isn't accurate at all

var opensslTools = require('./main');

var demoCertificate =
'-----BEGIN CERTIFICATE-----\n' +
'MIIEuzCCA6OgAwIBAgIDAlzmMA0GCSqGSIb3DQEBCwUAMEcxCzAJBgNVBAYTAlVT\n' +
'MRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMSAwHgYDVQQDExdSYXBpZFNTTCBTSEEy\n' +
'NTYgQ0EgLSBHMzAeFw0xNTAyMTUxMDA5MzhaFw0xNjA0MTgwNzE3NDFaMIGWMRMw\n' +
'EQYDVQQLEwpHVDc0MzM3NDEyMTEwLwYDVQQLEyhTZWUgd3d3LnJhcGlkc3NsLmNv\n' +
'bS9yZXNvdXJjZXMvY3BzIChjKTE1MS8wLQYDVQQLEyZEb21haW4gQ29udHJvbCBW\n' +
'YWxpZGF0ZWQgLSBSYXBpZFNTTChSKTEbMBkGA1UEAxMSd3d3Lndlcm5lci1rZXJu\n' +
'LmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU9p0Y5Yx1/tgzPB\n' +
'Cbzq76S+ff/LFYPgBmD9qiOLGs9KW/NEWqkNsmITclKQezv1ZqXDQw01IJzvlUG1\n' +
'XJzX2oUfCBhGdFtk3MBMnpk5oQkJ8/zyg7fVEsbCceGSvtSWWkXc9GZ8bRb49p9p\n' +
'raheiJRDKgovMQIUh6EH3YP0kzHQ6YY7EMx5RYYT1yIZXIOgb2gaw+wni9yNguET\n' +
'YBGhhoxdP630O04Oy2fwwSAxi7D2fHjnHbOLXfmVN1mn8gwEkl9INilh4GDuGQI/\n' +
'+KG0hiGuq3DiVkBMdzs+E8jlDqTr0xL/VmbKU7gRDbMTXuzYmac3te60bgyLKXJR\n' +
'WeP/WQIDAQABo4IBXjCCAVowHwYDVR0jBBgwFoAUw5zz/NNGCDS7zkZ/oHxb8+II\n' +
'y1kwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vZ3Yuc3ltY2Qu\n' +
'Y29tMCYGCCsGAQUFBzAChhpodHRwOi8vZ3Yuc3ltY2IuY29tL2d2LmNydDAOBgNV\n' +
'HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMC0GA1Ud\n' +
'EQQmMCSCEnd3dy53ZXJuZXIta2Vybi5kZYIOd2VybmVyLWtlcm4uZGUwKwYDVR0f\n' +
'BCQwIjAgoB6gHIYaaHR0cDovL2d2LnN5bWNiLmNvbS9ndi5jcmwwDAYDVR0TAQH/\n' +
'BAIwADBFBgNVHSAEPjA8MDoGCmCGSAGG+EUBBzYwLDAqBggrBgEFBQcCARYeaHR0\n' +
'cHM6Ly93d3cucmFwaWRzc2wuY29tL2xlZ2FsMA0GCSqGSIb3DQEBCwUAA4IBAQCD\n' +
'Aq1uIH6WIcDtLzjem9cQJcyjIezKpZaFpiT9RPfGy8UCaZa3K9WZF3hQFFaEZU9T\n' +
'1SlgHvSukhA27hHiSD+ZHpY54WCEBxEk/MgopYU568cwVJ7M0dR0NJEB40g+2/ZJ\n' +
'y0qdFH/ooEjshSBwwjLAN6XWR1ZzacxCSsXxJMz5GvYSkNcmElemhOGoNRY0doXz\n' +
'ZfzCDfN2yIQPlc5xdOVud72Dv6usUqq/kLfEXSURxqVc1tG0sRQvM0fC9/V3ACB/\n' +
'yeJeOHbFhdDy/ucj2i2ktVlpzmSddY1dfQtZNEQMpDsfs2PsI4H1wJse+dAxL6gi\n' +
'04vx08Z1zyMGXPo4ZYnl\n' +
'-----END CERTIFICATE-----';

opensslTools.getCertificateInfo(demoCertificate, function(err, data){
  if (err) {
    console.log(err)
  } else {
    console.log(data);
    /* validFrom: Sun Feb 15 2015 11:09:38 GMT+0100 (CET),
     * validTo: Mon Apr 18 2016 09:17:41 GMT+0200 (CEST),
     * remainingDays: 428
     * => 🖕
     */
  }
});

Show subjectAltName extension field

Hi! I use this library and works great but I'm trying to use it to check if a given certificate matches a given fqdn and I've found that there is no way to get subjectAltInformation with getCertificateInfo() function.

Just adding "-ext subjectAltName" when openssl command is called would do the trick and perhaps it's useful for other people as SAN certificates are pretty common theese days :)

Regards,
Humbert

1.3.3 `subject` extra-nesting on openssl 1.1.1d debian/buster

Ran into an odd issue where alexa-verifier was crashing due to its checks of info.subject.CN.
Upon investigation, info was actually exhibiting info.subject.subject.CN. reverting to 1.3.1 does not fix this, and reintroduces the subject: {} empty object thing.

I've traced this down to lib/information.js line 72, where it replaces subject= (mind the space), but the call to openssl on our machines yields something without a space:

# openssl x509 -noout -issuer -subject -dates -nameopt RFC2253 < echo-api-cert-8.pem
issuer=CN=Amazon,OU=Server CA 1B,O=Amazon,C=US
subject=CN=echo-api.amazon.com
notBefore=Mar 19 00:00:00 2020 GMT
notAfter=Mar 10 12:00:00 2021 GMT

OpenSSL is from Docker debian:buster-slim, and calls itself:

# openssl version
OpenSSL 1.1.1d  10 Sep 2019

Suggested fix: line 72 uses: .replace(/^subject= ?/, '') instead.