Function parseMaybeEncryptedKey

js/sign/src/utils/cli-utils.ts:24–57

(
  data: Buffer,
  description: string = ''
)

// Exported for testing.
export async function parseMaybeEncryptedKey(
  data: Buffer,
  description: string = ''
): Promise<KeyObject> {
  // Read unencrypted private key.
  try {
    return parsePemKey(data);
  } catch {
    infoLog('The provided key is probably encrypted. Decrypting attempt...');
  }

  const hasEnvVarSet =
    process.env.WEB_BUNDLE_SIGNING_PASSPHRASE &&
    process.env.WEB_BUNDLE_SIGNING_PASSPHRASE !== '';

  // Read encrypted private key.
  try {
    return parsePemKey(
      data,
      hasEnvVarSet
        ? process.env.WEB_BUNDLE_SIGNING_PASSPHRASE
        : await readPassphrase(description)
    );
  } catch (err) {
    throw Error(
      `Failed decrypting encrypted private key with passphrase read from ${
        hasEnvVarSet
          ? '`WEB_BUNDLE_SIGNING_PASSPHRASE` environment variable'
          : 'prompt'
      }`,
      { cause: err }
    );
  }
}

// A helper function that can be used to get the passphrase to decrypt a
// password-decrypted private key from user.