@sphereon/ssi-sdk-ext.x509-utils - npm Package Compare versions

Comparing version 0.26.1-next.4 to 0.26.1-next.5

dist/x509/x509-validator.js

@@ -102,3 +102,4 @@ "use strict";
     }
-    const certs = pemOrDerChain.map(x509_utils_1.pemOrDerToX509Certificate);
+    // x5c always starts with the leaf cert at index 0 and then the cas. Our internal pkijs service expects it the other way around
+    const certs = pemOrDerChain.map(x509_utils_1.pemOrDerToX509Certificate).reverse();
     const trustedCerts = trustedPEMs ? trustedPEMs.map(x509_utils_1.pemOrDerToX509Certificate) : undefined;
@@ -105,0 +106,0 @@ defaultCryptoEngine();

package.json

 {
   "name": "@sphereon/ssi-sdk-ext.x509-utils",
   "description": "Sphereon SSI-SDK plugin functions for X.509 Certificate handling.",
-  "version": "0.26.1-next.4+175cd80",
+  "version": "0.26.1-next.5+3dbfe73",
   "source": "src/index.ts",
@@ -40,3 +40,3 @@ "main": "dist/index.js",
   ],
-  "gitHead": "175cd8041e4b7f8c761b5519d44ec0602e2be88c"
+  "gitHead": "3dbfe73665f102d9c51e180199348cc8288f2a9c"
 }

src/x509/x509-validator.ts

@@ -137,3 +137,4 @@ import x509 from 'js-x509-utils'
 
-  const certs = pemOrDerChain.map(pemOrDerToX509Certificate)
+  // x5c always starts with the leaf cert at index 0 and then the cas. Our internal pkijs service expects it the other way around
+  const certs = pemOrDerChain.map(pemOrDerToX509Certificate).reverse()
   const trustedCerts = trustedPEMs ? trustedPEMs.map(pemOrDerToX509Certificate) : undefined
@@ -140,0 +141,0 @@ defaultCryptoEngine()

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

108235

increased by0.29%

Lines of code

1593

increased by0.13%

No dependency changes