Dexus / Dexus/pem

Support setting custom OpenSSL parameters

Open
#305 3 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
JavaScript
Stars
573
Forks
126
PR merge metrics
No merged PRs in 30d

Description

While integrating this library I have been faced with limitations on the `pem.verifySigningChain()` tool, as I needed to customize the OpenSSL options to make them fit our use case.

It would be overkill to ask for integrating the various OpenSSL options in JSON format, so I'd suggest either:
- a simple "customOpenSSLOptions" (string[]) param that is merged with the params array
- a callback instead, that is plugged somewhere to customize the behavior of the spawn wrapper

In the meantime our workaround has been to directly use the internal APIs:

```typescript

import * as openssl from 'pem/lib/openssl';

function validateCertChain(cert: string, callback: Callback) {
var params = ['verify', '** WHATEVER WE NEED **']
if (this.certAuthority !== undefined) {
params.push('-CAfile');
params.push('--TMPFILE--');
}
params.push('--TMPFILE--');

openssl.spawnWrapper(params, [this.certAuthority, cert], function (err, code, stdout, stderr) {
// ....
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.