Function createSecureContextForHost

test/harness/certUtils.ts:50–81

(
  hostname: string,
  ca: CaData,
)

}

export function createSecureContextForHost(
  hostname: string,
  ca: CaData,
): tls.SecureContext {
  const keys = forge.pki.rsa.generateKeyPair(2048);
  const cert = forge.pki.createCertificate();
  cert.publicKey = keys.publicKey;
  cert.serialNumber = String(Date.now());

  const now = new Date();
  const oneYearLater = new Date();
  oneYearLater.setFullYear(oneYearLater.getFullYear() + 1);
  cert.validity.notBefore = now;
  cert.validity.notAfter = oneYearLater;

  cert.setSubject([{ name: "commonName", value: hostname }]);
  cert.setIssuer(ca.caCert.subject.attributes);
  cert.setExtensions([
    {
      name: "subjectAltName",
      altNames: [{ type: 2, value: hostname }],
    },
  ]);

  cert.sign(ca.caKey, forge.md.sha256.create());

  return tls.createSecureContext({
    key: forge.pki.privateKeyToPem(keys.privateKey),
    cert: forge.pki.certificateToPem(cert),
    ca: ca.certPem,
  });
}