ec_pem

Enables crypto.sign and crypto.verify using crypto.createECDH generated keys

Use

1const crypto = require('crypto');
2const ec_pem = require('ec-pem');
3
4let alice_pem_private, alice_pem_public;
5{
6  let curve = 'secp521r1'
7  let alice = crypto.createECDH(curve);
8  alice.generateKeys();
9  alice = ec_pem(alice, curve);
10
11  alice_pem_private = alice.encodePrivateKey();
12  // console.log(alice_pem_private);
13
14  alice_pem_public = alice.encodePublicKey();
15  // console.log(alice_pem_public);
16}
17
18
19const data = Buffer.from('a message to sign');
20
21let signature;
22{
23  const sign = crypto.createSign('sha256');
24  sign.update(data);
25  signature = sign.sign(alice_pem_private);
26  // console.log({signature})
27}
28
29
30{
31  const verify = crypto.createVerify('sha256');
32  verify.update(data);
33  const matched = verify.verify(alice_pem_public, signature);
34  // console.log({matched})
35  if (!matched)
36    throw new Error("Verification failed");
37}

Use ec_pem/cert

1const https = require('https');
2const ec_pem = require('ec-pem');
3const ec_cert = require('ec-pem/cert');
4
5const tls_options = ec_cert.createSelfSignedCertificate('example.com', 
6    { ec: ec_pem.generate('prime256v1'),
7      days: 30, altNames: ['example.com', 'www.example.com', '1.234.56.255'] })
8
9demo_https_server(tls_options)
10
11
12
13function demo_https_server(tls_options) {
14  let svr = tls_options
15    .then(options => https.createServer(options) )
16    .then(svr => {
17      svr.on('secureConnection', sock => console.log("New secure connection"));
18      svr.on('request', (req,res) => {
19        res.writeHead(200);
20        res.end('hello world\n');
21      });
22      return svr })
23    .then(svr => new Promise((resolve, reject) =>
24        svr.listen(8443, '127.0.0.1',
25          (err) => err ? reject(err) : resolve(svr))))
26
27  svr.then(() =>
28    https.get(
29      {hostname: '127.0.0.1', port:8443, pathname:'/', rejectUnauthorized: false},
30      res => { console.log(res.statusCode) }))
31}
32

Use ec_pem/local_cert

1const https = require('https');
2const ec_localcert = require('ec-pem/local_cert');
3
4const tls_options = ec_localcert('tls_local.json')
5
6demo_https_server(tls_options)

or

1const https = require('https');
2const ec_localcert = require('ec-pem/local_cert');
3
4const tls_options = ec_localcert('tls_local.json', ({ec_cert, ec_pem}) =>
5  ec_cert.createSelfSignedCertificate('localhost.dev', {
6    ec: ec_pem.generate('prime256v1'),
7    days: 3660, // 10 years
8    altNames: ['localhost.dev', 'localhost', '127.0.0.1'],
9  }))
10
11demo_https_server(tls_options)