fix(pem): allow utf8 charset in fields

Josef Fröhle · Josef Fröhle · commit 2cb97aa4d4b9 · 2018-09-11T23:09:57.000+02:00
Signed-off-by: Josef Fröhle &lt;froehle@b1-systems.de&gt;
diff --git a/lib/pem.js b/lib/pem.js
@@ -216,6 +216,7 @@ function createCSR (options, callback) {
   }
 
   var params = ['req',
+    '-utf8',
     '-new',
     '-' + (options.hash || 'sha256')
   ]
@@ -449,6 +450,7 @@ function getPublicKey (certificate, callback) {
 
   if (certificate.match(/BEGIN(\sNEW)? CERTIFICATE REQUEST/)) {
     params = ['req',
+      '-utf8',
       '-in',
       '--TMPFILE--',
       '-pubkey',
@@ -462,6 +464,7 @@ function getPublicKey (certificate, callback) {
     ]
   } else {
     params = ['x509',
+      '-utf8',
       '-in',
       '--TMPFILE--',
       '-pubkey',
@@ -497,7 +500,7 @@ function readCertificateInfo (certificate, callback) {
   var params = [type,
     '-noout',
     '-nameopt',
-    'RFC2253,sep_multiline,space_eq',
+    'RFC2253,sep_multiline,space_eq,-esc_msb,utf8',
     '-text',
     '-in',
     '--TMPFILE--'
@@ -836,7 +839,7 @@ function checkCertificate (certificate, passphrase, callback) {
 
   openssl.spawnWrapper(params, certificate, function (sslErr, code, stdout, stderr) {
     function done (err) {
-      if (err && err.trim() !== 'verify OK') {
+      if (err && err.toString().trim() !== 'verify OK') {
         return callback(err)
       }
       var result
@@ -965,11 +968,11 @@ function fetchCertificateData (certData, callback) {
     subject = subject[0]
     tmp = matchAll(subject, /\s([a-zA-Z0-9.]+)\s=\s([^\r\n].*)/g)
     for (i = 0; i < tmp.length; i++) {
-      ky = tmp[i][1].toString()
-      if (ky.match('(C|ST|L|O|OU|CN|emailAddress|DC)')) {
+      ky = tmp[i][1].trim()
+      if (ky.match('(C|ST|L|O|OU|CN|emailAddress|DC)') || ky === '') {
         continue
       }
-      certValues[ky] = tmp[i][2].toString()
+      certValues[ky] = tmp[i][2].trim()
     }
 
     // country
diff --git a/test/fixtures/cn_openssl.crt b/test/fixtures/cn_openssl.crt
@@ -0,0 +1,34 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/test/fixtures/cn_openssl.csr b/test/fixtures/cn_openssl.csr
@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
diff --git a/test/fixtures/cn_openssl.key b/test/fixtures/cn_openssl.key
@@ -0,0 +1,52 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/test/fixtures/cn_openssl_config.conf b/test/fixtures/cn_openssl_config.conf
@@ -0,0 +1,38 @@
+# openssl req -new -utf8 -nameopt multiline,utf8 -config Dokumente/git/dexus-pem/test/fixtures/cn_openssl_config.conf -newkey rsa:2048 -nodes -keyout Dokumente/git/dexus-pem/test/fixtures/cn_openssl.key -out Dokumente/git/dexus-pem/test/fixtures/cn_openssl.csr
+# openssl req -x509 -newkey rsa:4096 -sha256 -utf8 -days 365 -nodes \
+    -config Dokumente/git/dexus-pem/test/fixtures/cn_openssl_config.conf \
+    -keyout Dokumente/git/dexus-pem/test/fixtures/cn_openssl.key \
+    -out Dokumente/git/dexus-pem/test/fixtures/cn_openssl.crt 
+
+HOME                    = .
+RANDFILE                = $ENV::HOME/.rnd
+
+[CA_default]
+copy_extensions = copy
+
+[req]
+default_bits = 4096
+prompt = no
+string_mask = utf8only
+utf8 = yes
+default_md = sha256
+distinguished_name = dn
+x509_extensions = v3_ca
+
+[dn]
+CN = 中国银行                       # Site description
+emailAddress = envek@envek.name
+O = 法兰克福分行                     # My company
+OU = 克福分                         # My dept
+L = 兰克福                          # Moscow
+C = RU
+
+[v3_ca]
+basicConstraints = CA:FALSE
+keyUsage = digitalSignature, keyEncipherment
+subjectAltName = @alternate_names
+
+[alternate_names]
+DNS.1 = example.com
+DNS.2 = *.app.example.com
+DNS.3 = www.example.com
diff --git a/test/fixtures/ru_openssl.crt b/test/fixtures/ru_openssl.crt
@@ -0,0 +1,36 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/test/fixtures/ru_openssl.csr b/test/fixtures/ru_openssl.csr
@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
diff --git a/test/fixtures/ru_openssl.key b/test/fixtures/ru_openssl.key
@@ -0,0 +1,52 @@
+-----BEGIN PRIVATE KEY-----
+MIIJQQIBADANBgkqhkiG9w0BAQEFAASCCSswggknAgEAAoICAQCYbWC+qU1Yg+9Q
+oDm6bkZ05SywjlH0x2OhQEVVpkq9rwNEMbIj9NwdSZ/HYN+INfddprqJ7PsTgti8
+rCIyqZgVJllrl9WVjPaCBuaV251OehzulbOwNp+EjB8RW5kB+0In8u+MgNJlwi08
+J76ULDOQtlJk15HjFLghQqkxx3ar7xgDVKAHKew1YdT/K/RhUpc7blukK+VZeL7m
+A23TqBm/2BwIf0+yswlvRLdmjN4b9UtvTnrO5RSJzxRHOG6F0lTQ5pcAiZFo3ssM
+T1hrWCK1u8rI/lr3enEhv4H3kazRhNv3xABh4wKGSF0RM7DDhomHJE4klyL+5L96
+KeYCfcAe/2qQWML16sy96OdpCVOXqEUq1Vze9u9Yt8ugYFXi8Hm0jU7oGG3qb9I4
+wntsUDxP+/5KnSJYXIaJQW4tTGctvexZuuOenlZZEldyqZudX8jIm7X7hit2qxYX
+kswKZlk3KdSIESMgJwtYYh1exRxEVBFGziFN3Fk736DAQ8gzfa3ZBAqapa4SUhY2
+xGpDmj1RNSitP6o9ICLZqN4MeHfXLOpNFObsMbquJ4l8jsm9h2+tNIPvOwrnVj/C
+Y0HjcmdENoijfM8DgnZz9Y7UdB34tSwmpN1LviPlpz700kzw8lhk5MpDagnYExgO
+4ktX1wbi/PpWgZlJX31sHAT8Vt2b8wIDAQABAoICAHwTVNP+dlJeGxjzQ+qIx1ty
+DX2ua/Int+bTrVy5308mPi9tkIeKUv6YJrKiHXMAEtqt1FxfhkVslkaGi9PXj09w
+Bwv47UguFZ7kRSCpQxRVfGWNgFYpMJIxiTyU5ijhwQlJzEr/tcRVWoMECzMMA/GB
+J/KkM0G4ZOXWIGm/5s6v8kkLwrPyIS+W8k3AFs5971LWU0yA2tGI40PSeLz4sfUi
+0jbsgxCAgmaLdgrJEieJ9ZymMntlp+FBqk0LF5RhEN93RGWQlcfay0e68st2U9LB
+CaGwwpV+msaQ4BeJAjcOwgueBX2ozy5Fi1RsUi/mvN4/5EgOqtL3mxGzN2LBv/d5
+3D8D5TuiFtR5uHX4jNO8TLQ4/34EqurqELsydq/I3EduxwbzVV0qw9gp/KgftZ+c
+wuZvjoqwsJyleK6XAsBipjszGZvWDHoM6F20rU5kAw8gTInwIjtFgb/CpzOnUqlK
+zBlWsyE6tEdyLak94d9qWbuArjAEWY8DMeWcEHnr9H/g42JkO1pCVA6eXk/fBy0+
+SVWGsmSxm3nDMk0WoATqsvO4UBAj2pxdSmy4QlyPzCq/fri3bXYuNaMkohsGJWzI
+y0d65bgOV6hCYpHTvTRvcza+OHNbBjOUgOfYhMift3uAh3ETS5VIlWSO7T4dCWYD
+IoxqXkYp7oP7F2oO+srxAoIBAQDKQULRlz7dW+jyaiBOHSZzq5ZmaIt57phkvY6b
+071FCvnjYM1R7lxyxOiT+iJVxrMTDZKzE36OkQI2oQcA73/qfBNMsxueW8Fe5QRZ
+rUTXxImjpyqPSW0iba+9Ei0Q0tkfIVDlBKt/O/EXTHfeg58XrHwMCIOfCyq18znr
+avhb5c/+hA8nGx1qYt9HJifnRnkC7tvMh1YNoZAKhXV/DCLEkSnR+KJkoMEqRKzH
+pSUGB5+qn9axBk8dTQhkkYt5RuFyzZuS5nO3U6x+Wn0xnSsP5xbTC4iklWvFWNH6
+XMbebTCly72bnJcEbIIiZQA+tGBts5xBMA9DxYD/+XjTl13JAoIBAQDA7oENPg7m
+7HDRyK3XYeYEOyMz+9JcugnhTAjf4sxI/rvqfs7aMN8hWY+rkkpdhFCX3g9SWsaY
+DFqIf7AC6cq3p9EajEAHqQNUq1YqJAKZJCg5054UbZzBrT3R2BELCW7nCKIKu08C
+jDShIsMdHVNB6CPOlurjQhBGtfi4IMaxSV4hdnZ/Mb7gk+GbAR3AVpLqBBePRGG7
+0H6Ke8+0qdYrFnTx4XCXDJMTQzfobn9lxsS1lhrwE8yLhrlGFXDkV0POgObvio8N
+36zRX8m0RHZ1WJxuW/CfnMEcqswx41ieYckTOFmJ+VUOyqjYSb+d2lMWcgKDCyAW
+nm67a3qTWdnbAoIBAHEFEt+oErsDtyJvZ2n/JBOTGNJVLUuPppz0yBIPuj4wqf8D
+gvh7qDGCEy1No44nIL5O4WEsTZZBNeltBkrhiqtvdiFwHMjbIS1z8IBkMIoaC4fl
+zASR1Whdvsx6sbArAqVAqsGvYF4TEuAgHQO8rVQ/UHow78waI13VctI4zlwcCaSC
+Cy2hG0jtwzMxAS9d1BVtgGnEXrPzSlh2x3edQnhxXds1gxmUMxz5j0to302FSRXB
+h+kYS3FmMIByTGwSzbynZH4sRRF2sndQ/ZCR8RRL4BdC5LKDxNtcjMnIumBkx8B+
+H5ArasBQGlA5/G8NwKzMp05OGtmWLkXcFEa42PECggEAL/keTdSoj/Mq+n8T+wJ0
+14h88GglnrkDy+nEKyeR9HSi9WQiu057rSc/+kGeDDLid2DYHnpD93ra6CYX9iF8
+Lr6j2B4Xrc/w7BTOkBv0KXA8MGTWYe3/lIknXg6D7mKiGQCkilaZBuEmFQs3yP2J
+vlGi1bPhJDFBKtQEzIQZ4+uCZH+4Z1hPRjh/WLOmWjUswtPRp+YxByqIzJaMxzeT
+8ZLb8WlFPcn6qEeGl10igIQ0VZLFj/zcV7VgTHT4ZU7tpWOYCOhDOgfsSQOwfAqq
+CfPGsgpagtXPjvlJXP5TAs792LGiUhSVeeAaq+1qoC2xi1s+FKenivhKQIAxMoKd
+EQKCAQAf5JLEpUtQUYDvV7oF/Q9HUdaF214Tdnz44FfW91R5TRsmwwGnTkyOUtHo
+d/XWb2veV8LtLNh5A/v0SHGIbMSQGrQ/5dLNmuDDrvyTzeuV4DTxi/tlv+vHko73
+8r9olAAqs7uz43hOBLDj814yUYGqwCmczOzacE8FvJAGZt6Lz7k3lt3fv/t8OVkr
+cXvI6yHmYyXXBOR/NMDzSd8Az+3YQ1QuWh3dxZHbglbAPuVVgbxiSdcvrivn/v0D
+er8piuPKboEtLfPNk/2XLDRJK3VRUCMWyTwMB0aXZYYgOs5gpJsYS+UmAHnOrYra
+hNKjP4pz5JpmD4tLqZQD3rLH8vOg
+-----END PRIVATE KEY-----
diff --git a/test/fixtures/ru_openssl_config.conf b/test/fixtures/ru_openssl_config.conf
@@ -0,0 +1,40 @@
+# openssl req -new -utf8 -nameopt multiline,utf8 -config Dokumente/git/dexus-pem/test/fixtures/ru_openssl_config.conf -newkey rsa:2048 -nodes -keyout Dokumente/git/dexus-pem/test/fixtures/ru_openssl.key -out Dokumente/git/dexus-pem/test/fixtures/ru_openssl.csr
+# openssl req -x509 -newkey rsa:4096 -sha256 -utf8 -days 365 -nodes \
+    -config Dokumente/git/dexus-pem/test/fixtures/ru_openssl_config.conf \
+    -keyout Dokumente/git/dexus-pem/test/fixtures/ru_openssl.key \
+    -out Dokumente/git/dexus-pem/test/fixtures/ru_openssl.crt 
+
+HOME                    = .
+RANDFILE                = $ENV::HOME/.rnd
+
+[CA_default]
+copy_extensions = copy
+string_mask = utf8only
+utf8 = yes
+
+[req]
+default_bits = 4096
+prompt = no
+string_mask = utf8only
+utf8 = yes
+default_md = sha256
+distinguished_name = dn
+x509_extensions = v3_ca
+
+[dn]
+CN = Описание сайта                # Site description
+emailAddress = envek@envek.name
+O = Моя компания                   # My company
+OU = Моё подразделение             # My dept
+L = Москва                         # Moscow
+C = RU
+
+[v3_ca]
+basicConstraints = CA:FALSE
+keyUsage = digitalSignature, keyEncipherment
+subjectAltName = @alternate_names
+
+[alternate_names]
+DNS.1 = example.com
+DNS.2 = *.app.example.com
+DNS.3 = www.example.com
diff --git a/test/pem.spec.js b/test/pem.spec.js
