acmesmith 0.2.0 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 15df7eafe88a11896e7e28357f90cf9aae7930af
-  data.tar.gz: ab82e92d3d058e53b8cf506b1400cc24cdcda07e
+  metadata.gz: 4360b52e2ad9bae70d23e26155063d46e7590fbd
+  data.tar.gz: 88e3f90208ec52d8e3509272d5bab71ee666472e
 SHA512:
-  metadata.gz: be000468b2e6adccdd7acd147ecd56fcf1ad27e349af8220abc93e53df7c99bba735f7d8767a2303263ab6f8eb1f9b018bbb8be5a8545d62701053edca28458b
-  data.tar.gz: 607b6bd951147624b728357b546d91181aad72b4fa9ee3c404eb4060500a618ca1f92d33f9a40123e2606445e4a866be8a875e6c76994fe88c7f54f0a50d8250
+  metadata.gz: 54a4e48a88bbc94b5972dc531c5a79be4824a9146834cd7b92aa376a74f877b4143aed3221dda9f7c150495eab168044090ad3cc01ee4b9a2e4fe3ace43c1ea9
+  data.tar.gz: a43f52ebfe0b87a44f8fea7440506b8a46e930fd12fb6b8299f1316ad694cf5319b8e6cca8b14a493e8bb532a51c5281f8be5a25aa65f64e0acfa0e7d8a751b3

data/README.md

@@ -16,7 +16,6 @@ This tool is written in Ruby, but this saves certificates in simple scheme, so y
 
 ### Planned
 
-- Automated renewal of certificates that expiring soon
 - Automated deployments support (post issurance hook)
 - Example shellscripts to fetch certificates
 
@@ -45,6 +44,7 @@ $ acmesmith register CONTACT              # Create account key (contact e.g. mai
 ```
 $ acmesmith authorize DOMAIN              # Get authz for DOMAIN.
 $ acmesmith request COMMON_NAME [SAN]     # request certificate for CN +COMMON_NAME+ with SANs +SAN+
+$ acmesmith add-san COMMON_NAME [SAN]     # re-request existing certificate of CN with additional SAN(s)
 ```
 
 ```
@@ -56,6 +56,10 @@ $ acmesmith save-certificate COMMON_NAME --output=PATH  # Save certificate to a
 $ acmesmith save-private-key COMMON_NAME --output=PATH  # Save private key to a file
 ```
 
+```
+$ acmesmith autorenew [-d DAYS] # Renew certificates which being expired soon
+```
+
 See `acmesmith help [subcommand]` for more help.
 
 ## Configuration
@@ -252,7 +256,6 @@ To install this gem onto your local machine, run `bundle exec rake install`. To
 
 - Tests
 - Support post actions (notifying servers, deploying to somewhere, etc...)
-- Automated renewal command (request new certificates for existing certificates that expires soon)
 
 ## Contributing
 

data/lib/acmesmith/certificate.rb

@@ -78,6 +78,12 @@ module Acmesmith
       certificate.subject.to_a.assoc('CN')[1]
     end
 
+    def sans
+      certificate.extensions.select { |_| _.oid == 'subjectAltName' }.flat_map do |ext|
+        ext.value.split(/,\s*/).select { |_| _.start_with?('DNS:') }.map { |_| _[4..-1] }
+      end
+    end
+
     def version
       "#{certificate.not_before.utc.strftime('%Y%m%d-%H%M%S')}_#{certificate.serial.to_i.to_s(16)}"
     end

data/lib/acmesmith/command.rb

@@ -126,10 +126,29 @@ module Acmesmith
       end
     end
 
-    # desc "autorenew", "request renewal of certificates which expires soon"
-    # method_option :days, alias: %w(-d), type: :integer, default: 7, desc: 'specify threshold in days to select certificates to renew'
-    # def autorenew
-    # end
+    desc "autorenew", "request renewal of certificates which expires soon"
+    method_option :days, aliases: %w(-d), default: 7, desc: 'specify threshold in days to select certificates to renew'
+    def autorenew
+      storage.list_certificates.each do |cn|
+        puts "=> #{cn}"
+        cert = storage.get_certificate(cn)
+        not_after = cert.certificate.not_after.utc
+
+        puts "   Not valid after: #{not_after}"
+        next unless (cert.certificate.not_after.utc - Time.now.utc) < (options[:days].to_i * 86400)
+        puts " * Renewing: CN=#{cert.common_name}, SANs=#{cert.sans.join(',')}"
+        request(cert.common_name, *cert.sans)
+      end
+    end
+
+    desc "add-san COMMON_NAME [ADDITIONAL_SANS]", "request renewal of existing certificate with additional SANs"
+    def add_san(common_name, *add_sans)
+      puts "=> reissuing CN=#{common_name} with new SANs #{add_sans.join(?,)}"
+      cert = storage.get_certificate(common_name)
+      sans = cert.sans + add_sans
+      puts " * SANs will be: #{sans.join(?,)}"
+      request(cert.common_name, *sans)
+    end
 
     private
 

data/lib/acmesmith/version.rb

@@ -1,3 +1,3 @@
 module Acmesmith
-  VERSION = "0.2.0"
+  VERSION = "0.3.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: acmesmith
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.3.0
 platform: ruby
 authors:
 - sorah (Shota Fukumori)
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-02-15 00:00:00.000000000 Z
+date: 2016-02-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: acme-client