1c3204a4ccSince `common/crypto` already exists, it makes sense to keep crypto-related utilities there. The only exception being common.hasCrypto which is needed up front to determine if tests should be skipped. Eliminate the redundant check in hasFipsCrypto and just use crypto.getFips() directly where needed. PR-URL: https://github.com/nodejs/node/pull/56714 Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
43 lines
1.2 KiB
JavaScript
43 lines
1.2 KiB
JavaScript
'use strict';
|
|
|
|
// Verify that privateDecrypt() does not leave an error on the
|
|
// openssl error stack that is visible to subsequent operations.
|
|
|
|
const common = require('../common');
|
|
if (!common.hasCrypto)
|
|
common.skip('missing crypto');
|
|
|
|
const assert = require('assert');
|
|
const {
|
|
generateKeyPairSync,
|
|
publicEncrypt,
|
|
privateDecrypt,
|
|
} = require('crypto');
|
|
|
|
const { hasOpenSSL3 } = require('../common/crypto');
|
|
|
|
const pair = generateKeyPairSync('rsa', { modulusLength: 512 });
|
|
|
|
const expected = Buffer.from('shibboleth');
|
|
const encrypted = publicEncrypt(pair.publicKey, expected);
|
|
|
|
const pkey = pair.privateKey.export({ type: 'pkcs1', format: 'pem' });
|
|
const pkeyEncrypted =
|
|
pair.privateKey.export({
|
|
type: 'pkcs1',
|
|
format: 'pem',
|
|
cipher: 'aes-128-cbc',
|
|
passphrase: 'secret',
|
|
});
|
|
|
|
function decrypt(key) {
|
|
const decrypted = privateDecrypt(key, encrypted);
|
|
assert.deepStrictEqual(decrypted, expected);
|
|
}
|
|
|
|
decrypt(pkey);
|
|
assert.throws(() => decrypt(pkeyEncrypted), hasOpenSSL3 ?
|
|
{ message: 'error:07880109:common libcrypto routines::interrupted or ' +
|
|
'cancelled' } :
|
|
{ code: 'ERR_MISSING_PASSPHRASE' });
|
|
decrypt(pkey); // Should not throw.
|