node.js - Generate Key for signing within nodejs -


i have seems rather simple problem, never had deal cryptography in nodejs before.
want implement system generates new keypair every 4 months, used signing , verifying generated result.
current code:

'use strict'; const fs = require('fs'); const crypto = require('crypto'); const algorithm = 'rsa-sha512'; const sign = crypto.createsign(algorithm); const verify = crypto.createverify(algorithm); const base64 = 'base64'; const keydir = './keys/';  const validator = {};  validator.check = function(dataarray, signature, date){   verify.update(buffer.from(dataarray));   return verify.verify(getpublickey(date), signature); };  validator.sign = function(dice){   sign.update(buffer.from(dice));   return sign.sign(getprivatekey(), base64);//error happens here };  validator.getpublickey = function(date){   date = todateobject(date);   for(current of getfilesdescending()){     if(filenametodate(current).getmilliseconds() <= date.getmilliseconds()){     const prefix = '-----begin rsa public key-----';     const suffix = '-----end rsa public key-----';       return prefix + fs.readfilesync(keydir + filename, 'utf8').split('\n')[0] + suffix;     }   } }  function filenametodate(filename){   const array = filename.split("-");   return new date(array[0], parseint(array[1]) - 1); }  function getprivatekey(){   const file = getfilesdescending()[0];   if(!file || monthdiff(new date(), filenametodate(file)) > 4){     generatekeys();     return getprivatekey();   }   const prefix = '-----begin rsa private key-----';   const suffix = '-----end rsa private key-----';   return prefix + fs.readfilesync(keydir + file, 'utf8').split('\n')[1] + suffix; }  function monthdiff(d1, d2) {     var months;     months = (d2.getfullyear() - d1.getfullyear()) * 12;     months -= d1.getmonth() + 1;     months += d2.getmonth();     return months; }  function getfilesdescending(){   return fs.readdirsync(keydir).sort().reverse(); }  function getmonth(date){   return ('0' + (date.getmonth()+1)).slice(-2) }  function generatekeys(){   const filename = getfilename();   if(!fs.existssync(filename)){     const diffiehell = crypto.creatediffiehellman(1024);//todo change value stronger 1     diffiehell.generatekeys(base64);     fs.writefilesync(filename, diffiehell.getpublickey(base64) + '\n' + diffiehell.getprivatekey(base64));     return true;   }   return false; }  function getfilename(){   const = new date();   return keydir + now.getfullyear() + '-' + getmonth(now); }  function todateobject(date){   return date.from(date) || new date(); }  module.exports = validator;

basically whenever sign method invoked, code checks if there keypair fiñe generated within last 4 months , if not generate such keypair , use one. data param iso string returned date.toisostring().
i'm getting following error: error: error:0d07207b:asn1 encoding routines:asn1_get_object:header long.
2 questions: i'm probaly doing obvious wrong here, should instead?
, should dump attempt entirely , use https certificates instead?
i'd prefer not because makes local testing lot harder.


Comments

Post a Comment

Popular posts from this blog

php - Vagrant up error - Uncaught Reflection Exception: Class DOMDocument does not exist -

i've set bento/ubuntu-16.04 vagrant box using php 5.6, , getting following error quite few times when try , run shell script: "uncaught reflection exception: class domdocument not exist". i've tried adding following top of script (not together), each no success: "sudo apt-get install php5.6-xml", "sudo apt-get install php5-xml", "sudo apt-get install php-dom" i've tried resetting server "sudo service apache2 restart". does have suggestions?
Read more

vue.js - Create hooks for automated testing -

Image
qa guys complained can't automate frontend testing. because our html looks same outside. lazy hack did this <template> <div :role="$options.name"> ... </div> </template> <script> export default { name: 'vmcomponentname' } </script> which takes name script , applies html. in browser get: <div role="vmcomponentname"> ... </div> line :role="$options.name" goes in every component. is there dry er solutions? please share. additional details i'll explain in details looking for. imagine have vmusercreate form creates user. test case can create user . to automatically test without role, have use following selector: .wrapper > .wrapper > .wrapper > .submit-button the test extremely brittle (will break lot). if use roles can use [role="vmusercreateform"] .submit-button selector. many folds less brittle. so basically, i'm ...
Read more

Add new key value to json node in java -

i have json file : { "id":1, "name":"abc", "addressdetails": { "city":"newyork" } } i wanted add 1 more key-value ("pincode" : "414141") node 'addressdetails'. i tried using : objectmapper mapper = new objectmapper(); jsonnode root = mapper.readtree(new file("d://test.json")); objectnode node = mapper.createobjectnode(); node.with("addressdetails").put("pincode", "414141"); but it's not getting added, there way can ? you can try you should modify file path objectmapper mapper = new objectmapper(); objectnode nodes = mapper.readvalue(new file("d:\\test.txt"), objectnode.class); nodes.with("addressdetails").put("pincode", "414141"); mapper.writer().writevalue(new file("d:\\test.txt"), nodes);
Read more