IOWA 1.0.0

data/test/TC_Webrick/doc/thing.txt

@@ -0,0 +1 @@
+This is a static thing.

data/test/TC_Webrick/iowa/Main.html

@@ -0,0 +1,3 @@
+Webrick Test
+<a oid="dlink">dynamic link</a>
+<a href="/thing.txt">static link</a>

data/test/TC_Webrick/iowa/Main.iwa

@@ -0,0 +1,7 @@
+class Main < Iowa::Component
+
+	def dlink
+		yield pageNamed(:NewPage)
+	end
+
+end

data/test/TC_Webrick/iowa/NewPage.html

@@ -0,0 +1 @@
+The time is now: @now

data/test/TC_Webrick/iowa/NewPage.iwa

@@ -0,0 +1,5 @@
+class NewPage < Iowa::Component
+	def now
+		Time.now.asctime
+	end
+end

data/test/TC_Webrick/iowa/app.cnf

@@ -0,0 +1,10 @@
+socket:
+  hostname: 127.0.0.1
+  port: 47990
+logging:
+  basedir: ../log
+  minlevel: 0
+  maxsize: 10000000
+  maxage: 86400
+application:
+  daemonize: false

data/test/TC_Webrick/iowa/app.rb

@@ -0,0 +1,5 @@
+#!/usr/local/ruby184/bin/ruby
+
+require 'iowa'
+
+Iowa.run

data/test/tc_template.rb

@@ -0,0 +1,15 @@
+require 'test/unit'
+# require 'iowa/MODULE_NAME'
+
+class TC_MODULE_NAME < Test::Unit::TestCase
+	# init instance vars
+
+	def setup
+		assert_nothing_raised("setup failed") do
+			# do setup tasks
+		end
+	end
+
+	# Tests go here.
+
+end

data/test/tests.conf

@@ -0,0 +1,19 @@
+# TC_DbPool variables
+
+# The DB vendor.  This should correspond to the database type used
+# in a DBI connect string.  i.e. 'Mysql' for DBI:Mysql;
+# 'Oracle' for DBI:Oracle, etc....  This is mandatory.
+
+vendor=Mysql
+
+# The host where the database is located.  This is mandatory.
+host=127.0.0.1
+
+# The name of the database to connect to.  This is mandatory.
+
+name=test
+
+# The username and password to use when connection.  These are optional.
+
+user=
+password=

data/utils/CVS/Entries

@@ -0,0 +1,3 @@
+/iowa_apps/1.1.1.1/Wed Jan 21 19:23:21 2004//
+/startup_template.cnf/1.1/Wed Aug 18 11:51:07 2004/-kb/
+/startup_template.rb/1.1/Wed Aug 18 11:51:48 2004//

data/utils/CVS/Repository

@@ -0,0 +1 @@
+iowa/utils

data/utils/CVS/Root

@@ -0,0 +1 @@
+:extssh:khaines@enigo.com:/usr/local/cvsrepository

data/utils/QuickCert-1.0.2/InstalledFiles

@@ -0,0 +1,7 @@
+/usr/bin/
+/usr/lib/ruby/site_ruby/1.8/QuickCert
+/usr/share/examples/ruby/QuickCert
+/usr/share/examples/ruby/QuickCert
+/usr/share/examples/ruby/QuickCert
+/usr/share/examples/ruby/QuickCert
+/usr/bin/

data/utils/QuickCert-1.0.2/MANIFEST

@@ -0,0 +1,10 @@
+MANIFEST
+Makefile
+README
+setup.rb
+bin/QuickCert
+lib/QuickCert/defaults.rb
+data/examples/ruby/QuickCert/README
+data/examples/ruby/QuickCert/qc_config
+data/examples/ruby/QuickCert/drbssl_s.rb
+data/examples/ruby/QuickCert/drbssl_c.rb

data/utils/QuickCert-1.0.2/Makefile

@@ -0,0 +1,15 @@
+RUBY?=ruby
+
+syntax:
+	${RUBY} -dcw ./bin/QuickCert ./lib/QuickCert/qc_defaults.rb
+
+test: syntax
+
+install: test
+	${RUBY} setup.rb config
+	${RUBY} setup.rb setup
+	${RUBY} setup.rb install
+
+clean:
+	rm -f config.save InstalledFiles
+

data/utils/QuickCert-1.0.2/README

@@ -0,0 +1,56 @@
+README
+
+QuickCert allows you to quickly and easily create SSL
+certificates.  It uses a simple configuration file to generate
+self-signed client and server certificates.
+
+QuickCert is a compilation of NAKAMURA Hiroshi's post to
+ruby-talk number 89917:
+
+http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-talk/89917
+
+the example scripts referenced in the above post, and
+gen_csr.rb from Ruby's OpenSSL examples.
+
+QuickCert's homepage is:
+
+http://segment7.net/projects/ruby/QuickCert.html
+
+USAGE
+
+A simple QuickCert configuration file looks like:
+
+  full_hostname = `hostname`.strip
+  domainname = full_hostname.split('.')[1..-1].join('.')
+  hostname = full_hostname.split('.')[0]
+
+  CA[:hostname] = hostname
+  CA[:domainname] = domainname
+  CA[:CA_dir] = File.join Dir.pwd, "CA"
+  CA[:password] = '1234'
+
+  CERTS << {
+    :type => 'server',
+    :hostname => 'uriel',
+    :password => '5678',
+  }
+
+  CERTS << {
+    :type => 'client',
+    :user => 'drbrain',
+    :email => 'drbrain@segment7.net',
+  }
+
+This configuration will create a Certificate Authority in a
+'CA' directory in the current directory, a server certificate
+with password '5678' for the server 'uriel' in a directory
+named 'uriel', and a client certificate for drbrain in the
+directory 'drbrain' with no password.
+
+There are additional SSL knobs you can tweak in the
+qc_defaults.rb file.
+
+To generate the certificates, simply create a qc_config file
+where you want the certificate directories to be created, then
+run QuickCert.
+

data/utils/QuickCert-1.0.2/bin/QuickCert

@@ -0,0 +1,355 @@
+#!/usr/bin/env ruby
+
+require 'openssl'
+
+##
+# QuickCert allows you to quickly and easily create SSL
+# certificates.  It uses a simple configuration file to generate
+# self-signed client and server certificates.
+#
+# QuickCert is a compilation of NAKAMURA Hiroshi's post to
+# ruby-talk number 89917:
+#
+# http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-talk/89917
+#
+# the example scripts referenced in the above post, and
+# gen_csr.rb from Ruby's OpenSSL examples.
+#
+# A simple QuickCert configuration file looks like:
+#
+#   full_hostname = `hostname`.strip
+#   domainname = full_hostname.split('.')[1..-1].join('.')
+#   hostname = full_hostname.split('.')[0]
+#
+#   CA[:hostname] = hostname
+#   CA[:domainname] = domainname
+#   CA[:CA_dir] = File.join Dir.pwd, "CA"
+#   CA[:password] = '1234'
+#   
+#   CERTS << {
+#     :type => 'server',
+#     :hostname => 'uriel',
+#     :password => '5678',
+#   }
+#   
+#   CERTS << {
+#     :type => 'client',
+#     :user => 'drbrain',
+#     :email => 'drbrain@segment7.net',
+#   }
+#
+# This configuration will create a Certificate Authority in a
+# 'CA' directory in the current directory, a server certificate
+# with password '5678' for the server 'uriel' in a directory
+# named 'uriel', and a client certificate for drbrain in the
+# directory 'drbrain' with no password.
+#
+# There are additional SSL knobs you can tweak in the
+# qc_defaults.rb file.
+#
+# To generate the certificates, simply create a qc_config file
+# where you want the certificate directories to be created, then
+# run QuickCert.
+#
+# QuickCert's homepage is:
+# http://segment7.net/projects/ruby/QuickCert/
+
+class QuickCert
+
+  ##
+  # QuickCert Version
+
+  VERSION = "1.0.2"
+
+  ##
+  # Creates a new QuickCert instance using the Certificate
+  # Authority described in +ca_config+.  If there is no CA at
+  # ca_config[:CA_dir], then QuickCert will initialize a new one.
+
+  def initialize(ca_config)
+    @ca_config = ca_config
+
+    create_ca
+  end
+
+  ##
+  # Creates a new certificate from +cert_config+ that is signed
+  # by the CA.
+
+  def create_cert(cert_config)
+    cert_keypair = create_key cert_config
+    cert_csr = create_csr cert_config, cert_keypair
+    sign_cert cert_config, cert_keypair, cert_csr
+  end
+
+  ##
+  # Creates a new Certificate Authority from @ca_config if it
+  # does not already exist at ca_config[:CA_dir].
+
+  def create_ca
+    return if File.exists? @ca_config[:CA_dir]
+
+    Dir.mkdir @ca_config[:CA_dir]
+
+    Dir.mkdir File.join(@ca_config[:CA_dir], 'private'), 0700
+    Dir.mkdir File.join(@ca_config[:CA_dir], 'newcerts')
+    Dir.mkdir File.join(@ca_config[:CA_dir], 'crl')
+
+    File.open @ca_config[:serial_file], 'w' do |f| f << '1' end
+
+    puts "Generating CA keypair" if $DEBUG
+    keypair = OpenSSL::PKey::RSA.new @ca_config[:ca_rsa_key_length]
+
+    cert = OpenSSL::X509::Certificate.new
+    name = @ca_config[:name].dup << ['CN', 'CA']
+    cert.subject = cert.issuer = OpenSSL::X509::Name.new(name)
+    cert.not_before = Time.now
+    cert.not_after = Time.now + @ca_config[:ca_cert_days] * 24 * 60 * 60
+    cert.public_key = keypair.public_key
+    cert.serial = 0x0
+    cert.version = 2 # X509v3
+
+    ef = OpenSSL::X509::ExtensionFactory.new
+    ef.subject_certificate = cert
+    ef.issuer_certificate = cert
+    cert.extensions = [
+      ef.create_extension("basicConstraints","CA:TRUE", true),
+      ef.create_extension("nsComment","Ruby/OpenSSL Generated Certificate"),
+      ef.create_extension("subjectKeyIdentifier", "hash"),
+      ef.create_extension("keyUsage", "cRLSign,keyCertSign", true),
+    ]
+    cert.add_extension ef.create_extension("authorityKeyIdentifier",
+                                           "keyid:always,issuer:always")
+    cert.sign keypair, OpenSSL::Digest::SHA1.new
+
+    cb = proc do @ca_config[:password] end
+    keypair_export = keypair.export OpenSSL::Cipher::DES.new(:EDE3, :CBC),
+                                    &cb
+
+    puts "Writing keypair to #{@ca_config[:keypair_file]}" if $DEBUG
+    File.open @ca_config[:keypair_file], "w", 0400 do |fp|
+      fp << keypair_export
+    end
+
+    puts "Writing cert to #{@ca_config[:cert_file]}" if $DEBUG
+    File.open @ca_config[:cert_file], "w", 0644 do |f|
+      f << cert.to_pem
+    end
+
+    puts "Done generating certificate for #{cert.subject}" if $DEBUG
+  end
+
+  ##
+  # Creates a new RSA key from +cert_config+.
+
+  def create_key(cert_config)
+    passwd_cb = nil
+    dest = cert_config[:hostname] || cert_config[:user]
+    keypair_file = File.join dest, (dest + "_keypair.pem")
+    Dir.mkdir dest, 0700
+
+    puts "Generating RSA keypair" if $DEBUG
+    keypair = OpenSSL::PKey::RSA.new 1024
+
+    if cert_config[:password].nil? then
+      File.open keypair_file, "w", 0400 do |f|
+        f << keypair.to_pem
+      end
+    else
+      passwd_cb = proc do cert_config[:password] end
+      keypair_export = keypair.export OpenSSL::Cipher::DES.new(:EDE3, :CBC),
+                                      cert_config[:password]
+
+      puts "Writing keypair to #{keypair_file}" if $DEBUG
+      File.open keypair_file, "w", 0400 do |f|
+        f << keypair_export
+      end
+
+    end
+
+    return keypair_file
+  end
+
+  ##
+  # Creates a new Certificate Signing Request for the keypair in
+  # +keypair_file+, generating and saving new keypair if nil.
+
+  def create_csr(cert_config, keypair_file = nil)
+    keypair = nil
+    dest = cert_config[:hostname] || cert_config[:user]
+    csr_file = File.join dest, "csr_#{dest}.pem"
+
+    name = @ca_config[:name].dup 
+    case cert_config[:type]
+    when 'server' then
+      name << ['OU', 'CA']
+      name << ['CN', cert_config[:hostname]]
+    when 'client' then
+      name << ['CN', cert_config[:user]]
+      name << ['emailAddress', cert_config[:email]]
+    end
+    name = OpenSSL::X509::Name.new name
+
+    if File.exists? keypair_file then
+      keypair = OpenSSL::PKey::RSA.new File.read(keypair_file),
+                                       cert_config[:password]
+    else
+      keypair = create_key cert_config
+    end
+
+    puts "Generating CSR for #{name}" if $DEBUG
+
+    req = OpenSSL::X509::Request.new
+    req.version = 0
+    req.subject = name
+    req.public_key = keypair.public_key
+    req.sign keypair, OpenSSL::Digest::MD5.new
+
+    puts "Writing CSR to #{csr_file}" if $DEBUG
+    File.open csr_file, "w" do |f|
+      f << req.to_pem
+    end
+
+    return csr_file
+  end
+
+  ##
+  # Signs the certificate described in +cert_config+ and
+  # +csr_file+, saving it to +cert_file+.
+
+  def sign_cert(cert_config, cert_file, csr_file)
+    csr = OpenSSL::X509::Request.new File.read(csr_file)
+
+    raise "CSR sign verification failed." unless csr.verify csr.public_key
+
+    if csr.public_key.n.num_bits < @ca_config[:cert_key_length_min] then
+      raise "Key length too short"
+    end
+
+    if csr.public_key.n.num_bits > @ca_config[:cert_key_length_max] then
+      raise "Key length too long"
+    end
+
+    if csr.subject.to_a[0, @ca_config[:name].size] != @ca_config[:name] then
+      raise "DN does not match"
+    end
+
+    # Only checks signature here.  You must verify CSR according to your
+    # CP/CPS.
+
+    # CA setup
+
+    puts "Reading CA cert from #{@ca_config[:cert_file]}" if $DEBUG
+    ca = OpenSSL::X509::Certificate.new File.read(@ca_config[:cert_file])
+
+    puts "Reading CA keypair from #{@ca_config[:keypair_file]}" if $DEBUG
+    ca_keypair = OpenSSL::PKey::RSA.new File.read(@ca_config[:keypair_file]),
+                                        @ca_config[:password]
+
+    serial = File.read(@ca_config[:serial_file]).chomp.hex
+    File.open @ca_config[:serial_file], "w" do |f|
+      f << "%04X" % (serial + 1)
+    end
+
+    puts "Generating cert" if $DEBUG
+
+    cert = OpenSSL::X509::Certificate.new
+    from = Time.now
+    cert.subject = csr.subject
+    cert.issuer = ca.subject
+    cert.not_before = from
+    cert.not_after = from + @ca_config[:cert_days] * 24 * 60 * 60
+    cert.public_key = csr.public_key
+    cert.serial = serial
+    cert.version = 2 # X509v3
+
+    basic_constraint = nil
+    key_usage = []
+    ext_key_usage = []
+
+    case cert_config[:type]
+    when "ca" then
+      basic_constraint = "CA:TRUE"
+      key_usage << "cRLSign" << "keyCertSign"
+    when "terminalsubca" then
+      basic_constraint = "CA:TRUE,pathlen:0"
+      key_usage << "cRLSign" << "keyCertSign"
+    when "server" then
+      basic_constraint = "CA:FALSE"
+      key_usage << "digitalSignature" << "keyEncipherment"
+      ext_key_usage << "serverAuth"
+    when "ocsp" then
+      basic_constraint = "CA:FALSE"
+      key_usage << "nonRepudiation" << "digitalSignature"
+      ext_key_usage << "serverAuth" << "OCSPSigning"
+    when "client" then
+      basic_constraint = "CA:FALSE"
+      key_usage << "nonRepudiation" << "digitalSignature" << "keyEncipherment"
+      ext_key_usage << "clientAuth" << "emailProtection"
+    else
+      raise "unknonw cert type \"#{cert_config[:type]}\""
+    end
+
+    ef = OpenSSL::X509::ExtensionFactory.new
+    ef.subject_certificate = cert
+    ef.issuer_certificate = ca
+    ex = []
+    ex << ef.create_extension("basicConstraints", basic_constraint, true)
+    ex << ef.create_extension("nsComment",
+                              "Ruby/OpenSSL Generated Certificate")
+    ex << ef.create_extension("subjectKeyIdentifier", "hash")
+    #ex << ef.create_extension("nsCertType", "client,email")
+    unless key_usage.empty? then
+      ex << ef.create_extension("keyUsage", key_usage.join(","))
+    end
+    #ex << ef.create_extension("authorityKeyIdentifier",
+    #                          "keyid:always,issuer:always")
+    #ex << ef.create_extension("authorityKeyIdentifier", "keyid:always")
+    unless ext_key_usage.empty? then
+      ex << ef.create_extension("extendedKeyUsage", ext_key_usage.join(","))
+    end
+
+    if @ca_config[:cdp_location] then
+      ex << ef.create_extension("crlDistributionPoints",
+                                @ca_config[:cdp_location])
+    end
+
+    if @ca_config[:ocsp_location] then
+      ex << ef.create_extension("authorityInfoAccess",
+                                "OCSP;" << @ca_config[:ocsp_location])
+    end
+    cert.extensions = ex
+    cert.sign ca_keypair, OpenSSL::Digest::SHA1.new
+
+    backup_cert_file = @ca_config[:new_certs_dir] + "/cert_#{cert.serial}.pem"
+    puts "Writing backup cert to #{backup_cert_file}" if $DEBUG
+    File.open backup_cert_file, "w", 0644 do |f|
+      f << cert.to_pem
+    end
+
+    # Write cert
+    dest = cert_config[:hostname] || cert_config[:user]
+    cert_file = File.join dest, "cert_#{dest}.pem"
+    puts "Writing cert to #{cert_file}" if $DEBUG
+    File.open cert_file, "w", 0644 do |f|
+      f << cert.to_pem
+    end
+
+    return cert_file
+  end
+
+end # class QuickCert
+
+if __FILE__ == $0 then
+  # get configuration
+  CA = {}
+  CERTS = []
+  load ARGV.shift || 'qc_config'
+  require 'QuickCert/defaults'
+
+  qc = QuickCert.new CA
+  CERTS.each do |cert_config|
+    qc.create_cert cert_config
+  end
+end
+