updated certificate configuration

Author: Jesse Langford

README.md

@@ -12,7 +12,7 @@ You will need the following:
 
 - A PassKit account (signup for free at https://app.passkit.com)
 - Your PassKit SDK Credentials (available from the https://app.passkit.com/app/account/developer-tools)
-- Nodejs 10 or above (https://nodejs.org/en/)
+- Nodejs 11.6.0 or above (https://nodejs.org/en/)
 
 ### Configuration
 
@@ -24,7 +24,7 @@ You will need the following:
    - ca-chain.pem
    - key.pem
 
-3. Run `npm run openssl` and provide your account password in the terminal prompt.
+3. Add your account password into the `src/config/config.js` PASSPHRASE variable
 
 4. If you wish to receive enrolment emails, edit lines 281 and 307 of the QuickStartLoyalty class to provide an address where you can receive mail.
 

package.json

@@ -5,8 +5,7 @@
   "author": "",
   "license": "ISC",
   "scripts": {
-    "test": "jest",
-    "openssl": "cd src/certs && openssl ec -in key.pem -out key.pem"
+    "test": "jest"
   },
   "jest": {
     "verbose": true

src/config/config.js

@@ -0,0 +1,8 @@
+module.exports = {
+  ROOT_CERT: "./src/certs/ca-chain.pem",
+  PRIVATE_KEY: "./src/certs/key.pem",
+  CERTIFICATE: "./src/certs/certificate.pem",
+  ADDRESS: "grpc.pub1.passkit.io",
+  PORT: 443,
+  PASSPHRASE: "",
+};

src/lib/client.js

@@ -10,37 +10,37 @@ const grpc = require("grpc");
 const {
   UsersClient,
 } = require("passkit-node-sdk/io/core/a_rpc_others_grpc_pb");
-
-const ROOT_CERT = "./src/certs/ca-chain.pem";
-const PRIVATE_KEY = "./src/certs/key.pem";
-const CERTIFICATE = "./src/certs/certificate.pem";
-const ADDRESS = "grpc.pub1.passkit.io";
-const PORT = 443;
+const crypto = require("crypto");
+const config = require("../config/config");
 
 class PassKitClient {
   constructor() {
+    const privateKeyEncBytes = fs.readFileSync(config.PRIVATE_KEY);
+    const privateKey = crypto.createPrivateKey({
+      cypher: "aes-256-cbc",
+      format: "pem",
+      key: privateKeyEncBytes,
+      passphrase: config.PASSPHRASE,
+      type: "pkcs8",
+    });
+
     const channelCredential = grpc.credentials.createSsl(
-      fs.readFileSync(ROOT_CERT),
-      fs.readFileSync(PRIVATE_KEY),
-      fs.readFileSync(CERTIFICATE)
+      fs.readFileSync(config.ROOT_CERT),
+      Buffer.from(
+        privateKey.export({ format: "pem", type: "pkcs8" }).toString()
+      ),
+      fs.readFileSync(config.CERTIFICATE)
     );
 
-    this.userClient = new UsersClient(`${ADDRESS}:${PORT}`, channelCredential);
+    const grpcAddress = `${config.ADDRESS}:${config.PORT}`;
 
-    this.templateClient = new TemplatesClient(
-      `${ADDRESS}:${PORT}`,
-      channelCredential
-    );
+    this.userClient = new UsersClient(grpcAddress, channelCredential);
 
-    this.membersClient = new MembersClient(
-      `${ADDRESS}:${PORT}`,
-      channelCredential
-    );
+    this.templateClient = new TemplatesClient(grpcAddress, channelCredential);
 
-    this.imageClient = new ImagesClient(
-      `${ADDRESS}:${PORT}`,
-      channelCredential
-    );
+    this.membersClient = new MembersClient(grpcAddress, channelCredential);
+
+    this.imageClient = new ImagesClient(grpcAddress, channelCredential);
   }
 
   getTemplateClient() {