bip70 / bip70-js

bin/gentruststore.js

var fs = require('fs');
var pkijs = require('pkijs');
var asn1js = require('asn1js');
var Validation = require('../lib/x509/validation.pkijs');
var Certificate = pkijs.Certificate;

var path = "/etc/ssl/certs/";

fs.readdir(path, function(err, items) {
    var trustFile = {};
    for (var i = 0; i < items.length; i++) {
        if (items[i].slice(-4) === ".pem") {
            var pem = fs.readFileSync(path + items[i]).toString();
            pem = pem.replace(/-----BEGIN CERTIFICATE-----/g, '');
            pem = pem.replace(/-----END CERTIFICATE-----/g, '');
            pem = pem.replace(/\s+/g, '');

            try {
                var der = Validation.stringToArrayBuffer(Buffer.from(pem, 'base64'));

The variable Buffer seems to be never declared. If this is a global, consider adding a /** global: Buffer */ comment.

                var asn = asn1js.fromBER(der);

            } catch (e) {
                throw new Error("Failed to decode certificate")
            }

            if (asn.offset === -1) {
                throw new Error("Failed to decode certificate")
            }

            try {
                var cert = new Certificate({schema: asn.result});
            } catch (e) {
                throw new Error("Failed to decode certificate")
            }

            var subject;
            cert.subject.typesAndValues.map(function(typeAndValue) {
                if (typeAndValue.type.toLowerCase() === "2.5.4.3") {
                    subject = typeAndValue.value.valueBlock.value;
                    trustFile[""+subject] = pem;

The variable pem is changed as part of the for loop for example by pem.replace(\s+, "") on line 16. Only the value of the last iteration will be visible in this function if it is called after the loop.

The variable subject is changed as part of the for loop for example by typeAndValue.value.valueBlock.value on line 39. Only the value of the last iteration will be visible in this function if it is called after the loop.

                }
            });
        }
    }

    console.log(JSON.stringify(trustFile, null, 2));

console.log looks like debug code. Are you sure you do not want to remove it?

});