macos-export-certificate-and-key
Access the macOS system certificate and key store.
This module is a native addon. It will only successfully work on macOS 10.12+. No prebuilt binaries are currently provided.
API
exportCertificateAndPrivateKey(opts?)
Export a certificate and its corresponding private key from the macOS CA store.
Valid options are:
subject
: Subject line of the certificate/key as a string.thumbprint
: Thumbprint of the certificate/key as a Uint8Array.
Either subject
or thumbprint
must be provided.
This function returns a single certificate (and by default its private key)
combination as a .pfx file, along with a random passphrase that has been
used for encrypting the file.
It will throw an exception if no relevant certificate could be found.
The certificate in question can be specified either through its subject line
string or its thumbprint.
When exporting, the user will be prompted to enter his password to allow keychain access.
exportSystemCertificates()
Export all system certificates (no private keys).
Testing
You need to import testkeys\certificate.pfx
manually into your local keychain in order for the tests to pass. The password for the file is pass
.