feat: own the PEM parser and validate the encapsulated text - #603

Merged

cjbarth merged 19 commits into

node-saml:masterfrom

cjbarth:fix/validate-pem-encapsulated-text

Sep 18, 2026

Commits on Sep 18, 2026

fix: validate the encapsulated text of a PEM message

cjbarth
and
claude
committed
d83779b
test: complete the quantum and line-ending cases

cjbarth
and
claude
committed
960b780
feat: own the PEM parser, and name it for what it does

cjbarth
and
claude
committed
83571b6
test: cover the KeyInfo paths this branch left untested

cjbarth
and
claude
committed
71c131a
test: hold the key and degenerate-input guarantees node-saml tested

cjbarth
and
claude
committed
64941cc
fix: check every PEM message before filtering for certificates

cjbarth
and
claude
committed
8020318
test: pin the empty label on the reading side too

cjbarth
and
claude
committed
dca2b4e
test: separate the two ways a PEM message is left unclosed

cjbarth
and
claude
committed
bef30b0
fix: keep a written boundary on one line and read certificates out of text

cjbarth
and
claude
committed
fc8826b
Merge branch 'master' into fix/validate-pem-encapsulated-text
cjbarth
authored
cbb61c1
fix: require an encapsulation boundary to have its line to itself

cjbarth
and
claude
committed
7e9c98e
fix: refuse an unaccounted opening boundary in pemToDer too

cjbarth
and
claude
committed
8fea545
feat: read certificates with Node's X509Certificate

cjbarth
and
claude
committed
096202b
fix: say why a certificate with data after it is refused

cjbarth
and
claude
committed
e6afe06
fix: name a BER-encoded certificate for what it is

cjbarth
and
claude
committed
8446c72
docs: credit Node for what it documents, not OpenSSL

cjbarth
and
claude
committed
e09487b
fix: accept BER certificates and keep their octets as given

cjbarth
and
claude
committed
e1e9d89
refactor: narrow the X509Certificate node to the element it is

cjbarth
and
claude
committed
b9b8b77
fix: read bundles holding an encrypted key, and write canonical base64

cjbarth
and
claude
committed
27dca84

Navigation Menu

feat: own the PEM parser and validate the encapsulated text - #603

feat: own the PEM parser and validate the encapsulated text#603
cjbarth merged 19 commits into
node-saml:masterfrom
cjbarth:fix/validate-pem-encapsulated-text

Commits on Sep 18, 2026

fix: validate the encapsulated text of a PEM message

test: complete the quantum and line-ending cases

feat: own the PEM parser, and name it for what it does

test: cover the KeyInfo paths this branch left untested

test: hold the key and degenerate-input guarantees node-saml tested

fix: check every PEM message before filtering for certificates

test: pin the empty label on the reading side too

test: separate the two ways a PEM message is left unclosed

fix: keep a written boundary on one line and read certificates out of text

Merge branch 'master' into fix/validate-pem-encapsulated-text

fix: require an encapsulation boundary to have its line to itself

fix: refuse an unaccounted opening boundary in pemToDer too

feat: read certificates with Node's X509Certificate

fix: say why a certificate with data after it is refused

fix: name a BER-encoded certificate for what it is

docs: credit Node for what it documents, not OpenSSL

fix: accept BER certificates and keep their octets as given

refactor: narrow the X509Certificate node to the element it is

fix: read bundles holding an encrypted key, and write canonical base64