fix(ext/node): add X509Certificate (#18625)

Towards #18455

1 files changed, 36 insertions, 40 deletions

diff --git a/ext/node/polyfills/internal/crypto/x509.ts b/ext/node/polyfills/internal/crypto/x509.ts
index e18d4fe68..7a8ee773b 100644
--- a/ext/node/polyfills/internal/crypto/x509.ts
+++ b/ext/node/polyfills/internal/crypto/x509.ts
@@ -5,9 +5,12 @@ import { KeyObject } from "ext:deno_node/internal/crypto/keys.ts";
 import { Buffer } from "ext:deno_node/buffer.ts";
 import { ERR_INVALID_ARG_TYPE } from "ext:deno_node/internal/errors.ts";
 import { isArrayBufferView } from "ext:deno_node/internal/util/types.ts";
+import { validateString } from "ext:deno_node/internal/validators.mjs";
 import { notImplemented } from "ext:deno_node/_utils.ts";
 import { BinaryLike } from "ext:deno_node/internal/crypto/types.ts";
 
+const { ops } = globalThis.__bootstrap.core;
+
 // deno-lint-ignore no-explicit-any
 export type PeerCertificate = any;
 
@@ -35,6 +38,8 @@ export interface X509CheckOptions {
 }
 
 export class X509Certificate {
+  #handle: number;
+
   constructor(buffer: BinaryLike) {
     if (typeof buffer === "string") {
       buffer = Buffer.from(buffer);
@@ -48,20 +53,21 @@ export class X509Certificate {
       );
     }
 
-    notImplemented("crypto.X509Certificate");
+    this.#handle = ops.op_node_x509_parse(buffer);
   }
 
   get ca(): boolean {
-    notImplemented("crypto.X509Certificate.prototype.ca");
-
-    return false;
+    return ops.op_node_x509_ca(this.#handle);
   }
 
   checkEmail(
-    _email: string,
+    email: string,
     _options?: Pick<X509CheckOptions, "subject">,
   ): string | undefined {
-    notImplemented("crypto.X509Certificate.prototype.checkEmail");
+    validateString(email, "email");
+    if (ops.op_node_x509_check_email(this.#handle, email)) {
+      return email;
+    }
   }
 
   checkHost(_name: string, _options?: X509CheckOptions): string | undefined {
@@ -81,21 +87,15 @@ export class X509Certificate {
   }
 
   get fingerprint(): string {
-    notImplemented("crypto.X509Certificate.prototype.fingerprint");
-
-    return "";
+    return ops.op_node_x509_fingerprint(this.#handle);
   }
 
   get fingerprint256(): string {
-    notImplemented("crypto.X509Certificate.prototype.fingerprint256");
-
-    return "";
+    return ops.op_node_x509_fingerprint256(this.#handle);
   }
 
   get fingerprint512(): string {
-    notImplemented("crypto.X509Certificate.prototype.fingerprint512");
-
-    return "";
+    return ops.op_node_x509_fingerprint512(this.#handle);
   }
 
   get infoAccess(): string | undefined {
@@ -105,21 +105,27 @@ export class X509Certificate {
   }
 
   get issuer(): string {
-    notImplemented("crypto.X509Certificate.prototype.issuer");
-
-    return "";
+    return ops.op_node_x509_get_issuer(this.#handle);
   }
 
   get issuerCertificate(): X509Certificate | undefined {
-    notImplemented("crypto.X509Certificate.prototype.issuerCertificate");
-
-    return {} as X509Certificate;
+    return undefined;
   }
 
-  get keyUsage(): string[] {
-    notImplemented("crypto.X509Certificate.prototype.keyUsage");
-
-    return [];
+  get keyUsage(): string[] | undefined {
+    const flags = ops.op_node_x509_key_usage(this.#handle);
+    if (flags === 0) return undefined;
+    const result: string[] = [];
+    if (flags & 0x01) result.push("DigitalSignature");
+    if (flags >> 1 & 0x01) result.push("NonRepudiation");
+    if (flags >> 2 & 0x01) result.push("KeyEncipherment");
+    if (flags >> 3 & 0x01) result.push("DataEncipherment");
+    if (flags >> 4 & 0x01) result.push("KeyAgreement");
+    if (flags >> 5 & 0x01) result.push("KeyCertSign");
+    if (flags >> 6 & 0x01) result.push("CRLSign");
+    if (flags >> 7 & 0x01) result.push("EncipherOnly");
+    if (flags >> 8 & 0x01) result.push("DecipherOnly");
+    return result;
   }
 
   get publicKey(): KeyObject {
@@ -135,21 +141,15 @@ export class X509Certificate {
   }
 
   get serialNumber(): string {
-    notImplemented("crypto.X509Certificate.prototype.serialNumber");
-
-    return "";
+    return ops.op_node_x509_get_serial_number(this.#handle);
   }
 
   get subject(): string {
-    notImplemented("crypto.X509Certificate.prototype.subject");
-
-    return "";
+    return ops.op_node_x509_get_subject(this.#handle);
   }
 
   get subjectAltName(): string | undefined {
-    notImplemented("crypto.X509Certificate.prototype.subjectAltName");
-
-    return "";
+    return undefined;
   }
 
   toJSON(): string {
@@ -165,15 +165,11 @@ export class X509Certificate {
   }
 
   get validFrom(): string {
-    notImplemented("crypto.X509Certificate.prototype.validFrom");
-
-    return "";
+    return ops.op_node_x509_get_valid_from(this.#handle);
   }
 
   get validTo(): string {
-    notImplemented("crypto.X509Certificate.prototype.validTo");
-
-    return "";
+    return ops.op_node_x509_get_valid_to(this.#handle);
   }
 
   verify(_publicKey: KeyObject): boolean {