+
{{ category }}
diff --git a/src/tools/index.ts b/src/tools/index.ts
index 388cfaf494..8821effc8b 100644
--- a/src/tools/index.ts
+++ b/src/tools/index.ts
@@ -81,6 +81,7 @@ import { tool as temperatureConverter } from './temperature-converter';
import { tool as textStatistics } from './text-statistics';
import { tool as tokenGenerator } from './token-generator';
import type { ToolCategory } from './tools.types';
+import { tool as x509CertificateGenerator } from './x509-certificate-generator';
import { tool as urlEncoder } from './url-encoder';
import { tool as urlParser } from './url-parser';
import { tool as uuidGenerator } from './uuid-generator';
@@ -91,7 +92,7 @@ import { tool as yamlViewer } from './yaml-viewer';
export const toolsByCategory: ToolCategory[] = [
{
name: 'Crypto',
- components: [tokenGenerator, hashText, bcrypt, uuidGenerator, ulidGenerator, cypher, bip39, hmacGenerator, rsaKeyPairGenerator, passwordStrengthAnalyser, pdfSignatureChecker],
+ components: [tokenGenerator, hashText, bcrypt, uuidGenerator, ulidGenerator, cypher, bip39, hmacGenerator, rsaKeyPairGenerator, x509CertificateGenerator, passwordStrengthAnalyser, pdfSignatureChecker],
},
{
name: 'Converter',
diff --git a/src/tools/x509-certificate-generator/https-server-example.ts b/src/tools/x509-certificate-generator/https-server-example.ts
new file mode 100644
index 0000000000..02e68f5d88
--- /dev/null
+++ b/src/tools/x509-certificate-generator/https-server-example.ts
@@ -0,0 +1,59 @@
+/* eslint-disable no-console */
+/**
+ * HTTPS Server Example
+ *
+ * This is an example demonstrating how to use the generated X509 certificate
+ * in a Node.js HTTPS server.
+ *
+ * Usage:
+ * 1. Generate a certificate using the X509 Certificate Generator tool
+ * 2. Save the certificate as 'certificate.crt' and private key as 'privateKey.key'
+ * 3. Create a 'cert' folder in your project root
+ * 4. Place the files in the cert folder
+ * 5. Run this file with: ts-node https-server-example.ts
+ * 6. Access the server at: https://localhost:8443
+ *
+ * Note: Since this is a self-signed certificate, your browser will show a security warning.
+ * You can proceed safely for development/testing purposes.
+ */
+
+import fs from 'node:fs';
+import https from 'node:https';
+import path from 'node:path';
+
+const PORT = 8443;
+
+// Certificate and private key file paths (modify as needed)
+const crtPath = path.join(__dirname, 'cert/certificate.crt');
+const keyPath = path.join(__dirname, 'cert/privateKey.key');
+
+const options: https.ServerOptions = {
+ key: fs.readFileSync(keyPath),
+ cert: fs.readFileSync(crtPath),
+};
+
+const server = https.createServer(options, (req, res) => {
+ const { method, url } = req;
+
+ res.writeHead(200, { 'Content-Type': 'application/json; charset=utf-8' });
+ res.end(
+ JSON.stringify(
+ {
+ code: 0,
+ message: 'HTTPS server is running',
+ method,
+ url,
+ },
+ null,
+ 2,
+ ),
+ );
+});
+
+server.listen(PORT, () => {
+ console.log(`HTTPS server: https://localhost:${PORT}`);
+ console.log(`Certificate: ${crtPath}`);
+ console.log(`Private Key: ${keyPath}`);
+ console.log('\nNote: Your browser will show a security warning because this is a self-signed certificate.');
+ console.log('This is normal for development/testing purposes.');
+});
diff --git a/src/tools/x509-certificate-generator/index.ts b/src/tools/x509-certificate-generator/index.ts
new file mode 100644
index 0000000000..5951e30d2e
--- /dev/null
+++ b/src/tools/x509-certificate-generator/index.ts
@@ -0,0 +1,12 @@
+import { Certificate } from '@vicons/tabler';
+import { defineTool } from '../tool';
+import { translate } from '@/plugins/i18n.plugin';
+
+export const tool = defineTool({
+ name: translate('tools.x509-certificate-generator.title'),
+ path: '/x509-certificate-generator',
+ description: translate('tools.x509-certificate-generator.description'),
+ keywords: ['x509', 'certificate', 'ssl', 'tls', 'pem', 'generator', 'root', 'ca', 'self-signed'],
+ component: () => import('./x509-certificate-generator.vue'),
+ icon: Certificate,
+});
diff --git a/src/tools/x509-certificate-generator/x509-certificate-generator.service.ts b/src/tools/x509-certificate-generator/x509-certificate-generator.service.ts
new file mode 100644
index 0000000000..2ddd3d504b
--- /dev/null
+++ b/src/tools/x509-certificate-generator/x509-certificate-generator.service.ts
@@ -0,0 +1,125 @@
+import { md, pki } from 'node-forge';
+import { v4 as uuidv4 } from 'uuid';
+
+export interface X509CertificateOptions {
+ commonName: string
+ country: string
+ stateOrProvince?: string
+ locality?: string
+ organization?: string
+ organizationalUnit?: string
+ email?: string
+ date: [string, string]
+}
+
+export interface X509CertificateResult {
+ certificate: string
+ privateKey: string
+}
+
+function getUuid(): string {
+ return uuidv4().replace(/-/g, '');
+}
+
+export function generateX509(options: X509CertificateOptions): X509CertificateResult {
+ const {
+ commonName,
+ country,
+ stateOrProvince,
+ locality,
+ organization,
+ organizationalUnit,
+ email,
+ date: [startDate, endDate],
+ } = options;
+
+ // Generate RSA key pair, 2048 bits
+ const keys = pki.rsa.generateKeyPair(2048);
+
+ // Create a new X.509 certificate
+ const cert = pki.createCertificate();
+ cert.publicKey = keys.publicKey;
+
+ // Set certificate serial number using UUID
+ cert.serialNumber = getUuid();
+
+ // Set certificate validity period
+ cert.validity.notBefore = new Date(startDate);
+ cert.validity.notAfter = new Date(endDate);
+
+ // Define certificate subject attributes
+ const attrs: pki.CertificateField[] = [
+ {
+ name: 'countryName',
+ value: country,
+ },
+ {
+ shortName: 'ST',
+ value: stateOrProvince || '',
+ },
+ {
+ name: 'localityName',
+ value: locality || '',
+ },
+ {
+ name: 'organizationName',
+ value: organization || '',
+ },
+ {
+ shortName: 'OU',
+ value: organizationalUnit || '',
+ },
+ ];
+
+ // Handle multiple domains in commonName (comma-separated)
+ const domainList = commonName.split(',').map(item => item.trim());
+ domainList.forEach((domain) => {
+ attrs.push({
+ name: 'commonName',
+ value: domain,
+ });
+ });
+
+ // Set certificate subject and issuer
+ cert.setSubject(attrs);
+ cert.setIssuer(attrs);
+
+ // Build Subject Alternative Names (SAN)
+ const altNames: Array<{ type: number; value: string }> = [];
+ if (email) {
+ altNames.push({ type: 1, value: email }); // 1: Email
+ }
+
+ domainList.forEach((domain) => {
+ // Check if it's an IP address (contains only digits and dots, and has 4 parts)
+ if (/\d+/.test(domain.replace(/\./g, '')) && domain.split('.').length === 4) {
+ altNames.push({ type: 7, value: domain }); // 7: IP Address
+ }
+ else {
+ altNames.push({ type: 2, value: domain }); // 2: DNS
+ }
+ });
+
+ // Set certificate extensions
+ cert.setExtensions([
+ {
+ name: 'basicConstraints',
+ cA: true,
+ },
+ {
+ name: 'subjectAltName',
+ altNames,
+ },
+ ]);
+
+ // Self-sign the certificate with SHA256
+ cert.sign(keys.privateKey, md.sha256.create());
+
+ // Convert to PEM format
+ const pem = {
+ privateKey: pki.privateKeyToPem(keys.privateKey),
+ certificate: pki.certificateToPem(cert),
+ };
+
+ return pem;
+}
diff --git a/src/tools/x509-certificate-generator/x509-certificate-generator.vue b/src/tools/x509-certificate-generator/x509-certificate-generator.vue
new file mode 100644
index 0000000000..a288bbe720
--- /dev/null
+++ b/src/tools/x509-certificate-generator/x509-certificate-generator.vue
@@ -0,0 +1,509 @@
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ {{ t('tools.x509-certificate-generator.regenerateKeys') }}
+
+
+
+
+
+
+
{{ t('tools.x509-certificate-generator.certificate') }}
+
+ {{ t('tools.x509-certificate-generator.download') }}
+
+
+
+
+
+
+
+
{{ t('tools.x509-certificate-generator.privateKey') }}
+
+ {{ t('tools.x509-certificate-generator.download') }}
+
+
+
+
+
diff --git a/src/ui/c-select/c-select.vue b/src/ui/c-select/c-select.vue
index 7b3607c93e..38e2eb8fef 100644
--- a/src/ui/c-select/c-select.vue
+++ b/src/ui/c-select/c-select.vue
@@ -151,7 +151,7 @@ function onSearchInput() {
>
-
+
{{ selectedOption.label }}
diff --git a/src/ui/c-table/c-table.vue b/src/ui/c-table/c-table.vue
index ef569890e0..43293ab3c9 100644
--- a/src/ui/c-table/c-table.vue
+++ b/src/ui/c-table/c-table.vue
@@ -39,7 +39,7 @@ const headers = computed(() => {
-
+
|
{{ header.label }}
From f6753316dccd39f5832175ee396b12885dee7d66 Mon Sep 17 00:00:00 2001
From: xiaoming0000 <1925952439@qq.com>
Date: Tue, 9 Jun 2026 16:16:57 +0800
Subject: [PATCH 2/2] fix: use safer email validation regex to prevent ReDoS
Replace the vulnerable email regex with a safer pattern that:
- Uses explicit character class limits instead of negated classes
- Limits local part to 1-64 characters
- Limits domain to 1-255 characters
- Limits TLD to 2-6 characters
- Prevents catastrophic backtracking attacks
---
.../x509-certificate-generator/x509-certificate-generator.vue | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/src/tools/x509-certificate-generator/x509-certificate-generator.vue b/src/tools/x509-certificate-generator/x509-certificate-generator.vue
index a288bbe720..47f57a4133 100644
--- a/src/tools/x509-certificate-generator/x509-certificate-generator.vue
+++ b/src/tools/x509-certificate-generator/x509-certificate-generator.vue
@@ -320,7 +320,7 @@ const emailValidation = useValidation({
source: email,
rules: [
{
- validator: value => !value || /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(value),
+ validator: value => !value || /^[^@\s]{1,64}@[^@\s]{1,255}\.[^@\s]{2,6}$/.test(value),
message: t('tools.x509-certificate-generator.invalidEmailFormat'),
},
],
|