-
Notifications
You must be signed in to change notification settings - Fork 516
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
FAB-1421 Implement Identity and MSP classes
as an initial step, implementing the Identity and MSP classes so that the SDK can construct identity objects from PEM certs in configs, which would eventually come from the Configuration/Genesis Block. - added back util for handling X509 certificates - rebased on top of changeset 3313 - rebased on top of master Change-Id: I49c5a4773645312197651326c421767bef512884 Signed-off-by: Jim Zhang <jzhang@us.ibm.com>
- Loading branch information
1 parent
9c3e33f
commit 669acce
Showing
10 changed files
with
439 additions
and
517 deletions.
There are no files selected for viewing
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,120 @@ | ||
| 'use strict'; | ||
|
|
||
| var grpc = require('grpc'); | ||
|
|
||
| var identityProto = grpc.load(__dirname + '/../protos/identity.proto').msp; | ||
|
|
||
| /** | ||
| * This interface is shared within the peer and client API of the membership service provider. | ||
| * Identity interface defines operations associated to a "certificate". | ||
| * That is, the public part of the identity could be thought to be a certificate, | ||
| * and offers solely signature verification capabilities. This is to be used | ||
| * at the client side when validating certificates that endorsements are signed | ||
| * with, and verifying signatures that correspond to these certificates. | ||
| * | ||
| * @class | ||
| */ | ||
| var Identity = class { | ||
| /** | ||
| * @param {string} id Identifier of this identity object | ||
| * @param {string} certificate HEX string for the PEM encoded certificate | ||
| * @param {Key} publicKey The public key represented by the certificate | ||
| * @param {MSP} msp The associated MSP that manages this identity | ||
| */ | ||
| constructor(id, certificate, publicKey, msp) { | ||
| if (!id) | ||
| throw new Error('Missing required parameter "id".'); | ||
|
|
||
| if (!certificate) | ||
| throw new Error('Missing required parameter "certificate".'); | ||
|
|
||
| if (!publicKey) | ||
| throw new Error('Missing required parameter "publicKey".'); | ||
|
|
||
| if (!msp) | ||
| throw new Error('Missing required parameter "msp".'); | ||
|
|
||
| this._id = id; | ||
| this._certificate = certificate; | ||
| this._publicKey = publicKey; | ||
| this._msp = msp; | ||
| } | ||
|
|
||
| /** | ||
| * Returns the identifier of this identity | ||
| * @returns {string} | ||
| */ | ||
| getId() { | ||
| return this._id; | ||
| } | ||
|
|
||
| /** | ||
| * Returns the identifier of the Membser Service Provider that manages | ||
| * this identity in terms of being able to understand the key algorithms | ||
| * and have access to the trusted roots needed to validate it | ||
| * @returns {string} | ||
| */ | ||
| getMSPId() { | ||
| return this._msp.getId(); | ||
| } | ||
|
|
||
| /** | ||
| * This uses the rules that govern this identity to validate it. | ||
| * E.g., if it is a fabric TCert implemented as identity, validate | ||
| * will check the TCert signature against the assumed root certificate | ||
| * authority. | ||
| * @returns {boolean} | ||
| */ | ||
| isValid() { | ||
| this._msp.validate(this); | ||
| } | ||
|
|
||
| /** | ||
| * Returns the organization units this identity is related to | ||
| * as long as this is public information. In certain implementations | ||
| * this could be implemented by certain attributes that are publicly | ||
| * associated to that identity, or the identifier of the root certificate | ||
| * authority that has provided signatures on this certificate. | ||
| * Examples: | ||
| * - OrganizationUnit of a fabric-tcert that was signed by TCA under name | ||
| * "Organization 1", would be "Organization 1". | ||
| * - OrganizationUnit of an alternative implementation of tcert signed by a public | ||
| * CA used by organization "Organization 1", could be provided in the clear | ||
| * as part of that tcert structure that this call would be able to return. | ||
| * @returns {string} | ||
| */ | ||
| getOrganizationUnits() { | ||
| return 'dunno!'; | ||
| } | ||
|
|
||
| /** | ||
| * Verify a signature over some message using this identity as reference | ||
| * @param {byte[]} msg The message to be verified | ||
| * @param {byte[]} signature The signature generated against the message "msg" | ||
| * @param {Object} opts Options include 'policy' and 'label' | ||
| */ | ||
| verify(msg, signature, opts) { | ||
| return this._msp.cryptoSuite.verify(this._publicKey, signature, msg); | ||
| } | ||
|
|
||
| /** | ||
| * Verify attributes against the given attribute spec | ||
| * TODO: when this method's design is finalized | ||
| */ | ||
| verifyAttributes(proof, attributeProofSpec) { | ||
| return true; | ||
| } | ||
|
|
||
| /** | ||
| * Converts this identity to bytes | ||
| * @returns {Buffer} protobuf-based serialization with two fields: "mspid" and "certificate PEM bytes" | ||
| */ | ||
| serialize() { | ||
| var serializedIdentity = new identityProto.SerializedIdentity(); | ||
| serializedIdentity.Mspid = this.getMSPId(); | ||
| serializedIdentity.IdBytes = Buffer.from(this._certificate); | ||
| return serializedIdentity.toBuffer(); | ||
| } | ||
| }; | ||
|
|
||
| module.exports = Identity; |
Oops, something went wrong.