acme-client 2.0.27 → 2.0.29

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d41b8df6f16f62b2bd33a0fd960d7675c02e1d065fb3bf3466b58f59aad3a740
-  data.tar.gz: 846346e6d27381ea63fa1cb82b9044bef0acc25e5ca38ebf332fb692c02b577e
+  metadata.gz: d03d332ce28ab051dc4b6c46eefed2da34bbe84b8cee56744099a4f1908a7823
+  data.tar.gz: '01019f67a1d5a5e0667476c5171d1a0a38160daa457cf119bed3ce9dbc8f5cca'
 SHA512:
-  metadata.gz: 49cda221593c2902534457cd4b89e7c24fedc3ee33f52ae4af5e83df14e4baf0cd68e547ec95c54e4dffd2fa1aea2989e51f371f5abfb37cc0630e7e4176977f
-  data.tar.gz: '059a4b9b2f260ab7dc8cb3f069120c74b3f76ec4ce5d6ff22f7eb625b75c6c032bfca3709795e247f82873d022a2f1e09ef939687e7c0f74589564cae41c9c94'
+  metadata.gz: 6f0d759792bcae8670e38bc97e1ac15ee6b9268acb6c37afaf9e619e519c247ad7cc38494a2dbb2c0aff0cc7b4ed6abc74f605a2c2de26824493bb2298976274
+  data.tar.gz: 75ede976566f9cf2f707f752cfcbf4b3f148d14d4d2f219e2020b31bd524941417b1f929c99993c482ddb0dd54b2f7a12ad6ecad36f7508bae0cb2f93f49a693

data/CHANGELOG.md

@@ -1,3 +1,11 @@
+## `2.0.29`
+
+* IP support to the CertificateRequest helper
+
+## `2.0.28`
+
+*  Make [Retry-After](https://datatracker.ietf.org/doc/html/rfc8555/#section-6.6) accessible from RateLimited#retry_after exceptions
+
 ## `2.0.27`
 
 *  Add support for Renewal Information (ARI) (RFC 9773)

data/lib/acme/client/certificate_request.rb

@@ -104,8 +104,15 @@ class Acme::Client::CertificateRequest
   end
 
   def add_extension(csr)
+    san = @names.map do |name|
+      if valid_ip_address?(name)
+        "IP:#{name}"
+      else
+        "DNS:#{name}"
+      end
+    end
     extension = OpenSSL::X509::ExtensionFactory.new.create_extension(
-      'subjectAltName', @names.map { |name| "DNS:#{name}" }.join(', '), false
+      'subjectAltName', san.join(', '), false
     )
     csr.add_attribute(
       OpenSSL::X509::Attribute.new(
@@ -116,4 +123,14 @@ class Acme::Client::CertificateRequest
   end
 end
 
+def valid_ip_address?(address)
+  require 'ipaddr'
+  begin
+    ip = IPAddr.new(address)
+    true
+  rescue IPAddr::InvalidAddressError, IPAddr::AddressFamilyError
+    false
+  end
+end
+
 require 'acme/client/certificate_request/ec_key_patch'

data/lib/acme/client/error/rate_limited.rb

@@ -0,0 +1,8 @@
+class Acme::Client::Error::RateLimited < Acme::Client::Error::ServerError
+  attr_reader :retry_after
+
+  def initialize(message, retry_after = 10)
+    super(message)
+    @retry_after = retry_after.nil? ? 10 : retry_after.to_i
+  end
+end

data/lib/acme/client/http_client.rb

@@ -101,6 +101,9 @@ module Acme::Client::HTTPClient
     end
 
     def raise_on_error!
+      if error_class == Acme::Client::Error::RateLimited
+        raise error_class.new(error_message, env.response_headers['Retry-After'])
+      end
       raise error_class, error_message
     end
 

data/lib/acme/client/version.rb

@@ -2,6 +2,6 @@
 
 module Acme
   class Client
-    VERSION = '2.0.27'.freeze
+    VERSION = '2.0.29'.freeze
   end
 end

data/lib/acme/client.rb

@@ -20,6 +20,7 @@ require 'acme/client/self_sign_certificate'
 require 'acme/client/resources'
 require 'acme/client/jwk'
 require 'acme/client/error'
+require 'acme/client/error/rate_limited'
 require 'acme/client/util'
 require 'acme/client/chain_identifier'
 

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: acme-client
 version: !ruby/object:Gem::Version
-  version: 2.0.27
+  version: 2.0.29
 platform: ruby
 authors:
 - Charles Barbier
 bindir: bin
 cert_chain: []
-date: 2025-11-12 00:00:00.000000000 Z
+date: 2025-12-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
@@ -155,6 +155,7 @@ files:
 - lib/acme/client/certificate_request/ec_key_patch.rb
 - lib/acme/client/chain_identifier.rb
 - lib/acme/client/error.rb
+- lib/acme/client/error/rate_limited.rb
 - lib/acme/client/http_client.rb
 - lib/acme/client/jwk.rb
 - lib/acme/client/jwk/base.rb