node-x509 | Simple X509 certificate parser | TLS library
kandi X-RAY | node-x509 Summary
kandi X-RAY | node-x509 Summary
Simple X509 certificate parser.
Support
Quality
Security
License
Reuse
Top functions reviewed by kandi - BETA
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of node-x509
node-x509 Key Features
node-x509 Examples and Code Snippets
Community Discussions
Trending Discussions on node-x509
QUESTION
I am looking for a node.js way to verify a client certificate in X509 format with a CA certificate which was given to me (none of those are created/managed by me, my software only has to verify what is beeing sent to it).
I have found several modules for this job, however I am having issues with each of them:
- X509 is able to do it using
x509.verify(cert, CABundlePath, cb)
, however it needs to read the certificates from FS, and I am having them in memory already. This is cumbersome as it will be done with each web request which reaches my app. - It seems like PKI.js is able to do it, however their examples don't work for me but complain about missing files, so I can't even try it out.
- I tried node-forge, but while I am unsure if I use it correctly (they don't have any API documentation) its throwing a
forge.pki.BadCertificate
error fromforge.pki.verifyCertificateChain(caStore, [ cer ], cb)
. - When trying pem, using a simple
pem.verifySigningChain(cer, [ ca ], cb)
would throw some error complaining about loading a file from/var/...
. Even if it would work, I would avoid using this lib as its relying on the openssl command line tool, which I would like to avoid
Now I feel pretty stupid because I failed to get this simple task done with any of the above modules. Could someone point me to a simple solution which will allow me to verify the signature/validity of a X509 certificate using a given CA certificate? :s
[edit] Basically I would need openssl verify -verbose -CAfile ca-crt.pem client1-crt.pem
in Node.js
but without dependencies to the openssl command line tool and without temporarily saving the certs to disk.
[edit2] Would it be possible to just use https://nodejs.org/api/crypto.html#crypto_verify_verify_object_signature_signatureformat?
...ANSWER
Answered 2019-Jul-01 at 14:04I finally managed to do it using node-forge
. Heres a working code example:
Community Discussions, Code Snippets contain sources that include Stack Exchange Network
Vulnerabilities
No vulnerabilities reported
Install node-x509
Support
Reuse Trending Solutions
Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items
Find more librariesStay Updated
Subscribe to our newsletter for trending solutions and developer bootcamps
Share this Page