@fidm/x509

What is @fidm/x509?

@fidm/x509 is an npm package that provides tools for parsing and working with X.509 certificates. It allows you to load, parse, and extract information from X.509 certificates, which are commonly used in SSL/TLS for securing communications over networks.

What are @fidm/x509's main functionalities?

Load and Parse X.509 Certificate

This feature allows you to load and parse an X.509 certificate from a PEM file. The parsed certificate object contains various details about the certificate, such as issuer, subject, validity period, and more.

const { Certificate } = require('@fidm/x509');
const fs = require('fs');

const certPEM = fs.readFileSync('path/to/certificate.pem');
const cert = Certificate.fromPEM(certPEM);
console.log(cert);

Extract Certificate Information

This feature allows you to extract specific information from a parsed X.509 certificate, such as the issuer, subject, and validity period.

const { Certificate } = require('@fidm/x509');
const fs = require('fs');

const certPEM = fs.readFileSync('path/to/certificate.pem');
const cert = Certificate.fromPEM(certPEM);

console.log('Issuer:', cert.issuer);
console.log('Subject:', cert.subject);
console.log('Valid From:', cert.validFrom);
console.log('Valid To:', cert.validTo);

Verify Certificate Signature

This feature allows you to verify the signature of an X.509 certificate against a CA certificate. It helps in ensuring that the certificate is issued by a trusted Certificate Authority.

const { Certificate } = require('@fidm/x509');
const fs = require('fs');

const certPEM = fs.readFileSync('path/to/certificate.pem');
const cert = Certificate.fromPEM(certPEM);

const caCertPEM = fs.readFileSync('path/to/ca_certificate.pem');
const caCert = Certificate.fromPEM(caCertPEM);

const isValid = cert.verify(caCert);
console.log('Certificate is valid:', isValid);

Other packages similar to @fidm/x509

node-forge

node-forge is a comprehensive library for implementing various cryptographic functionalities in Node.js, including working with X.509 certificates. It provides more extensive cryptographic tools compared to @fidm/x509, but may have a steeper learning curve due to its broader scope.

pkijs

pkijs is a library for working with Public Key Infrastructure (PKI) in JavaScript. It supports X.509 certificate parsing and validation, similar to @fidm/x509. pkijs is built on WebCrypto and is suitable for both browser and Node.js environments, offering more flexibility in terms of deployment.

x509

x509 is a simpler library for parsing X.509 certificates in Node.js. It provides basic functionalities for loading and extracting information from certificates, similar to @fidm/x509, but with a more limited feature set.

README

x509

X509 certificate tools for Node.js, includes PEM, ASN1 with DER.

example

const fs = require('fs')
const { PEM, ASN1 } = require('@fidm/x509')

const crtData = fs.readFileSync('./test/cert/github.crt')
const blocks = PEM.parse(crtData)
const asn1 = ASN1.fromDER(blocks[0].body, true)
console.log(asn1)