File Explorer

1"use strict";2Object.defineProperty(exports, "__esModule", { value: true });3exports.toMessageSignatureBundle = toMessageSignatureBundle;4exports.toDSSEBundle = toDSSEBundle;5/*6Copyright 2023 The Sigstore Authors.7 8Licensed under the Apache License, Version 2.0 (the "License");9you may not use this file except in compliance with the License.10You may obtain a copy of the License at11 12    http://www.apache.org/licenses/LICENSE-2.013 14Unless required by applicable law or agreed to in writing, software15distributed under the License is distributed on an "AS IS" BASIS,16WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.17See the License for the specific language governing permissions and18limitations under the License.19*/20const protobuf_specs_1 = require("@sigstore/protobuf-specs");21const bundle_1 = require("./bundle");22// Message signature bundle - $case: 'messageSignature'23function toMessageSignatureBundle(options) {24    return {25        mediaType: options.certificateChain26            ? bundle_1.BUNDLE_V02_MEDIA_TYPE27            : bundle_1.BUNDLE_V03_MEDIA_TYPE,28        content: {29            $case: 'messageSignature',30            messageSignature: {31                messageDigest: {32                    algorithm: protobuf_specs_1.HashAlgorithm.SHA2_256,33                    digest: options.digest,34                },35                signature: options.signature,36            },37        },38        verificationMaterial: toVerificationMaterial(options),39    };40}41// DSSE envelope bundle - $case: 'dsseEnvelope'42function toDSSEBundle(options) {43    return {44        mediaType: options.certificateChain45            ? bundle_1.BUNDLE_V02_MEDIA_TYPE46            : bundle_1.BUNDLE_V03_MEDIA_TYPE,47        content: {48            $case: 'dsseEnvelope',49            dsseEnvelope: toEnvelope(options),50        },51        verificationMaterial: toVerificationMaterial(options),52    };53}54function toEnvelope(options) {55    return {56        payloadType: options.artifactType,57        payload: options.artifact,58        signatures: [toSignature(options)],59    };60}61function toSignature(options) {62    return {63        keyid: options.keyHint || '',64        sig: options.signature,65    };66}67// Verification material68function toVerificationMaterial(options) {69    return {70        content: toKeyContent(options),71        tlogEntries: [],72        timestampVerificationData: { rfc3161Timestamps: [] },73    };74}75function toKeyContent(options) {76    if (options.certificate) {77        if (options.certificateChain) {78            return {79                $case: 'x509CertificateChain',80                x509CertificateChain: {81                    certificates: [{ rawBytes: options.certificate }],82                },83            };84        }85        else {86            return {87                $case: 'certificate',88                certificate: { rawBytes: options.certificate },89            };90        }91    }92    else {93        return {94            $case: 'publicKey',95            publicKey: {96                hint: options.keyHint || '',97            },98        };99    }100}101