acme-client 0.1.0 → 0.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: c20a6817f7b9cabcc97fd675cb6e9977544de7de
-  data.tar.gz: 04ab2587617f4c1c94bab02ecc0f902c71c11576
+  metadata.gz: 16bb88e5400d61017d3265c400d093f074f141e4
+  data.tar.gz: 9bb02691a2abbe5ea25915eb6f42a82a61be8ac0
 SHA512:
-  metadata.gz: 7cc46125a7e5565dab48ee669330663d471ee93877e6e0751cde792ca389dd03290eade0ef9e4bbb6dbcd50f955d7071fe7de6d3e6bb01fb7439d9c15563ebab
-  data.tar.gz: a5b7c82005996edfa8a11bddaeae46df26748a037666f5349980c7d6d0df3be4b63d91908ce24d96fecc42d94140c6b80e7d4877cbdf02ef510cad882146ed6f
+  metadata.gz: 068117a5dd211c110cc009ff1642b9fffdf78b6d54f3891f3a296a1af2940ee9217e76bf002f1a49a056672a02e58b63bc880710c8b3555a76953b18af85aaa7
+  data.tar.gz: e234b3e0037ebb1428896cd235d7edb882adc2fabd382fe97d86b232dbf3dbcaa93c28be78efc8069673f59cc3f6938e713e4eb10fc280a24416b84b28ed78e9

data/README.md

@@ -2,7 +2,7 @@
 
 `acme-client` is a client implementation of the [ACME](https://letsencrypt.github.io/acme-spec) protocol in Ruby.
 
-You can find the server reference implementation for ACME server at [here](github.com/letsencrypt/boulder) and also the a reference [client](github.com/letsencrypt/letsencrypt) written in python.
+You can find the server reference implementation for ACME server [here](github.com/letsencrypt/boulder) and also the a reference [client](github.com/letsencrypt/letsencrypt) in python.
 
 ACME is part of the [Letsencrypt](https://letsencrypt.org/) project, that are working hard at encrypting all the things.
 
@@ -18,48 +18,55 @@ endpoint = 'http://letsencrypt.com/'
 # Initialize the client
 client = Acme::Client.new(private_key: private_key, endpoint: endpoint)
 
-# If the private key is not known to the server we need to register for the first time.
+# If the private key is not known to the server, we need to register it for the first time.
 registration = client.register(contact: 'mailto:unixcharles@gmail.com')
 
-# You'll need to agree the term (that's up the to the server to require it or not but boulder does by default)
+# You'll may need to agree to the term (that's up the to the server to require it or not but boulder does by default)
 registration.agree_terms
 
 # Let's try to optain a certificate for yourdomain.com
+
+# We need to prove that we control the domain using one of the challanges method.
 authorization = client.authorize(domain: 'yourdomain.com')
 
-# We need to prove that we control the domain using one of the challanges method
+# For now the only challenge method supprted by the client is simple_http.
 simple_http = authorization.simple_http
 
 # The SimpleHTTP method will require you to response to an HTTP request.
 
-# You can retreive the expected path for the file.
+# You can retrieve the expected path for the file.
 simple_http.filename # => ".well-known/acme-challenge/:some_token"
 
-# You can retrieve the body of the expected response
+# You can generate the body of the expected response.
 simple_http.file_content # => 'string of JWS signed json' 
 
-# You can send no Content-Type at all but if you send one it has to be 'application/jose+json'
+# You can send no Content-Type at all but if you send one it has to be 'application/jose+json'.
 simple_http.content_type
 
 # Once you are ready to serve the confirmation request you can proceed.
 simple_http.request_verification # => true
 simple_http.verify_status # => 'pending'
 
-# Wait a bit for the server to make the request, or really just blink, should be fast.
+# Wait a bit for the server to make the request, or really just blink, it should be fast.
 sleep(1)
 
-simple_http.verify_status # => 'pending'
+simple_http.verify_status # => 'valid'
+
+# We're going to need a CSR, lets do this real quick with Ruby+OpenSSL.
+csr = OpenSSL::X509::Request.new
+
+# We need a private key for the certificate, not the same as the account key.
+certificate_private_key = OpenSSL::PKey::RSA.new(2048)
 
-# We're going to need a CSR, let do this real quick with Ruby+OpenSSL.
-request = OpenSSL::X509::Request.new
-request.subject = OpenSSL::X509::Name.new([
+# We just going to add the domain but normally you might want to provide more information.
+csr.subject = OpenSSL::X509::Name.new([
   ['CN', common_name, OpenSSL::ASN1::UTF8STRING]
 ])
 
-request.public_key = private_key.public_key
-request.sign(private_key, OpenSSL::Digest::SHA256.new)
+csr.public_key = certificate_private_key.public_key
+csr.sign(private_key, OpenSSL::Digest::SHA256.new)
 
-# You can request a new certificate
+# We can now request a certificate
 client.new_certificate(csr) # => #<OpenSSL::X509::Certificate ....>
 ```
 

data/lib/acme/client.rb

@@ -1,5 +1,11 @@
 class Acme::Client
   DEFAULT_ENDPOINT = 'http://127.0.0.1:4000'
+  DIRECTORY_DEFAULT = {
+    'new-authz' => '/acme/new-authz',
+    'new-cert' => '/acme/new-cert',
+    'new-reg' => '/acme/new-reg',
+    'revoke-cert' => '/acme/revoke-cert'
+  }
 
   def initialize(endpoint: DEFAULT_ENDPOINT, directory_uri: nil, private_key:)
     @endpoint, @private_key, @directory_uri = endpoint, private_key, directory_uri

data/lib/acme/version.rb

@@ -1,5 +1,5 @@
 module Acme
   class Client
-    VERSION = '0.1.0'
+    VERSION = '0.1.1'
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: acme-client
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.1
 platform: ruby
 authors:
 - Charles Barbier
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-08-15 00:00:00.000000000 Z
+date: 2015-09-09 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler