nodejs
/
node
mirror of https://github.com/nodejs/node.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

doc: clarify x509.checkIssued only checks metadata 

PR-URL: https://github.com/nodejs/node/pull/58457
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Tobias Nießen <tniessen@tnie.de>
This commit is contained in:
Filip Skokan 2025-05-28 08:26:05 +02:00 committed by Michaël Zasso
parent 7e62a77a7f
commit 08685256cd
No known key found for this signature in database
GPG Key ID: 770F7A9A5AE15600
1 changed files with 18 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
doc/api/crypto.md
View File

@ -2651,7 +2651,23 @@ added: v15.6.0
* `otherCert` {X509Certificate}
* Returns: {boolean}
Checks whether this certificate was issued by the given `otherCert`.
Checks whether this certificate was potentially issued by the given `otherCert`
by comparing the certificate metadata.
This is useful for pruning a list of possible issuer certificates which have been
selected using a more rudimentary filtering routine, i.e. just based on subject
and issuer names.
Finally, to verify that this certificate's signature was produced by a private key
corresponding to `otherCert`'s public key use [`x509.verify(publicKey)`][]
with `otherCert`'s public key represented as a [`KeyObject`][]
like so
```js
if (!x509.verify(otherCert.publicKey)) {
throw new Error('otherCert did not issue x509');
}
```
### `x509.checkPrivateKey(privateKey)`
@ -6205,6 +6221,7 @@ See the [list of SSL OP Flags][] for details.
[`verify.update()`]: #verifyupdatedata-inputencoding
[`verify.verify()`]: #verifyverifyobject-signature-signatureencoding
[`x509.fingerprint256`]: #x509fingerprint256
[`x509.verify(publicKey)`]: #x509verifypublickey
[caveats when using strings as inputs to cryptographic APIs]: #using-strings-as-inputs-to-cryptographic-apis
[certificate object]: tls.md#certificate-object
[encoding]: buffer.md#buffers-and-character-encodings