win-cert

win-cert - Library for obtaining certificates from the Windows certificate store.

ATTENTION

This library uses edge-js.

If you want to get one certificate, your certificate must be marked as exported and must be imported properly (the key must be stored in the right place), otherwise the method returns a certificate with an empty private key.

What you need

Edge.js runs on Windows, Linux, and OSX and requires Node.js 8.x, 7.x, 6.x, as well as .NET Framework 4.5 (Windows), Mono 4.2.4 (OSX, Linux), or .NET Core 1.0.0 Preview 2 (Windows, OSX, Linux).

NOTE there is a known issue with Mono after 4.2.4 that will be addressed in Mono 4.6.

Windows

• Node.js 8.x, 7.x, or 6.x
• .NET 4.5 and/or .NET Core

If you have both desktop CLR and .NET Core installed, read using .NET Core for how to configure Edge to use one or the other.

Init

npm install win-cert

or

yarn add win-cert

API

getCertificate

Returns certificate and private key in PEM format. Options are required;

const winCert = require('win-cert');

...

const options = {
  storeName: 'My',
  storeLocation: 'CurrentUser',
  thumbprint: '098d3.....'
};

const certAndKey = await winCert.getCertificate(options);

certAndKey.cert;
certAndKey.key;

getAllCertificates

Returns all certificates as objects. Options are not required.

The returned object certs is a object like this:

{
  "subject": "CN=hello.com, O=Internet Widgits Pty Ltd, S=Some-State, C=AU",
  "issuer": "foo bar",
  "thumbprint": "...",
  "pem": "-----BEGIN CERTIFICATE-----\nMIID9DCCAtygAwIBAgIJANWBEUdUZOlPMA0GCSqGSIb3DQEBBQUAMFkxCzAJBgNV..."
}

const winCert = require('win-cert');

...

const options = {
  storeName: 'My',
  storeLocation: 'CurrentUser'
};

const certificates = await winCert.getAllCertificates(options);

certificates.forEach(cert => {
  console.log(cert);
});

Example application

const winCert = require('win-cert');
const express = require('express');
const https = require('https');

const main = async () => {
  const certAndKey = await winCert.getCertificate({
    storeName: 'Root',
    storeLocation: 'LocalMachine',
    thumbprint: 'Your thumbprint'
  });

  const options = {
    cert: certAndKey.cert,
    key: certAndKey.key,
    ca: certAndKey.cert,
    requestCert: true,
    rejectUnauthorized: false
  };

  const app = express();

  https
    .createServer(options, app)
    .listen(44331, () => console.log('Server started listening'));
};

main();

or

const winCert = require('win-cert');

const main = async () => {
  const allCerts = await winCert.getAllCertificates({
    storeName: 'Root',
    storeLocation: 'CurrentUser'
  });

  allCerts.forEach(cert => console.log(cert));
};

main();

License

MIT