Where is certs.json included

[Dale81]

Hi and first of all, thank you for this great great script! It's working very well. I am just stuck at the point, where the certs.json file is included. My script runs within a html page where only the eudgc.js file is included but I can't find any reference to the certs.json (which should get updated daily).

This IS a noob question, sorry. But I am just don't getting it. Even within the eudgc.js, the certs.json can't be found.

Thanks for any advice.

[srutz]

Hi Dale, thanks for your feedback 👍
You can get a current copy of the certs.json file by invoking

curl https://api.undo-app.de/getcerts -H 'Accept: application/json' -H 'Content-Type: application/json;charset=UTF-8' --data-raw '{"includeraw": true}'

The above link is also mentioned in the README.md file of the project. You can put the file on your server or even do the stuff that curl does using fetch from the server-side. Or you access that file directly from undo-app.de but you must then deal with CORS/SPO issues yourself.

I know of at least one person who downloads the certs.json using the above url daily, puts it onto their web server and then includes it in his javascript using the clientside fetch-api (though jquery.ajax or axios will work the same).

Hope that helps

/Stepan

[Dale81]

Hi Stepan,
thank you for your fast reply!
Maybe I was not totally clear in my question. You write

Note that the certinfos are provided as part of this package statically.

But I can't find the place where the certinfos are included. I assumed, that the certs.json is included in a JS in the package and I am just searching for the part which I have to replace in your mentioned way above.

[srutz]

Hi Dale, the file is right there in the src-folder

https://github.com/Scopevisio/eudgc/blob/main/src/certs.json

However there is a problem with the certs.json currently provided online. I will fix this ASAP. Apparently one Cert has been replicated logically many times over.
I will follow up here.

[Dale81]

Hi Stepan,
that's still not what I mean ;) I know where the certs.js file is, but:

I am just using an html file with the eudgc.js included as reference. For now it's running, but as you mentioned in your documentaion, the certinfos are provieded statically. So my question is: WHERE is this static code portion located because this has to be replaced by the e.g. daily update. I thought the certinfos are statically somewhere within the eudgc.js file but can't find any info.

Or in other words:
The output from the API starts with "{"certs":[{"issuer":" - so I was searching for the same string in eudgc.js because I thought, this has to be in there somewhere statically and I have to replace it. Also the certs.json file is not referenced within the eudgc.js. So where does the static information currently come from?

Sorry for this ping pong ;)

[srutz]

Hi Dale, now i understand (finally)

In the code the certs.json is included via webpack / esmodule import.

See

https://github.com/Scopevisio/eudgc/blob/main/src/trustlist.ts

at the top. There you can see

import data from './certs.json'

right at the top. When compiling the typescript to .js (javascript) the content will be included. This is actually pretty unflexible and you would probably need to change this unless you can live with the current certs.json state.

/Stepan

PS: I have updated the certs.json. All certs in the beginning haven't changed, just new certs were appended.