activemerchant 1.78.0 → 1.79.0

data/lib/active_merchant/net_http_ssl_connection.rb

@@ -0,0 +1,9 @@
+require 'net/http'
+
+module NetHttpSslConnection
+  refine Net::HTTP do
+    def ssl_connection
+      { version: @socket.io.ssl_version, cipher: @socket.io.cipher[0] }
+    end
+  end
+end

data/lib/active_merchant/network_connection_retries.rb

@@ -1,3 +1,5 @@
+require 'openssl'
+
 module ActiveMerchant
   module NetworkConnectionRetries
     DEFAULT_RETRIES = 3

data/lib/active_merchant/posts_data.rb

@@ -8,6 +8,12 @@ module ActiveMerchant #:nodoc:
       base.class_attribute :ssl_version
       base.ssl_version = nil
 
+      base.class_attribute :min_version
+      base.min_version = nil
+
+      base.class_attribute :max_version
+      base.min_version = nil
+
       base.class_attribute :retry_safe
       base.retry_safe = false
 
@@ -53,6 +59,10 @@ module ActiveMerchant #:nodoc:
       connection.max_retries  = max_retries
       connection.tag          = self.class.name
       connection.wiredump_device = wiredump_device
+      if connection.respond_to?(:min_version=)
+        connection.min_version = min_version
+        connection.max_version = max_version
+      end
 
       connection.pem          = @options[:pem] if @options
       connection.pem_password = @options[:pem_password] if @options

data/lib/active_merchant/version.rb

@@ -1,3 +1,3 @@
 module ActiveMerchant
-  VERSION = "1.78.0"
+  VERSION = "1.79.0"
 end

data/lib/support/ssl_version.rb

@@ -0,0 +1,87 @@
+require "active_merchant"
+require "support/gateway_support"
+
+class SSLVersion
+  attr_accessor :success, :failed, :missing, :errored
+
+  def initialize
+    @gateways = GatewaySupport.new.gateways
+    @success, @failed, @missing, @errored = [], [], [], []
+  end
+
+  def test_gateways(min_version = :TLS1_1)
+    raise "Requires Ruby 2.5 or better" unless Net::HTTP.instance_methods.include?(:min_version=)
+
+    puts "Verifying #{@gateways.count} gateways for SSL min_version=#{min_version}\n\n"
+
+    @gateways.each do |g|
+      unless g.live_url
+        missing << g unless g.abstract_class
+        next
+      end
+
+      uri = URI.parse(g.live_url)
+      result, message = test_min_version(uri, min_version)
+
+      case result
+      when :success
+        print "."
+        success << g
+      when :fail
+        print "F"
+        failed << {:gateway => g, :message => message}
+      when :error
+        print "E"
+        errored << {:gateway => g, :message => message}
+      end
+    end
+
+    print_summary
+  end
+
+  def print_summary
+    puts "\n\nSucceeded gateways (#{success.length})"
+
+    puts "\n\nFailed Gateways (#{failed.length}):"
+    failed.each do |f|
+      puts "#{f[:gateway].name} - #{f[:message]}"
+    end
+
+    puts "\n\nError Gateways (#{errored.length}):"
+    errored.each do |e|
+      puts "#{e[:gateway].name} - #{e[:message]}"
+    end
+
+    if missing.length > 0
+      puts "\n\nGateways missing live_url (#{missing.length}):"
+      missing.each do |m|
+        puts m.name
+      end
+    end
+  end
+
+  private
+
+  def test_min_version(uri, min_version)
+    http = Net::HTTP.new(uri.host, uri.port)
+    http.use_ssl = true
+    http.verify_mode = OpenSSL::SSL::VERIFY_NONE # don't care about certificate validity, just protocol version
+    http.min_version = min_version
+    http.open_timeout = 10
+    http.read_timeout = 10
+
+    http.post("/", "")
+
+    return :success
+  rescue Net::HTTPBadResponse
+    return :success # version negotiation succeeded
+  rescue OpenSSL::SSL::SSLError => ex
+    return :fail, ex.inspect
+  rescue Interrupt => ex
+    print_summary
+    raise ex
+  rescue StandardError => ex
+    return :error, ex.inspect
+  end
+
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: activemerchant
 version: !ruby/object:Gem::Version
-  version: 1.78.0
+  version: 1.79.0
 platform: ruby
 authors:
 - Tobias Luetke
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-03-29 00:00:00.000000000 Z
+date: 2018-05-31 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -16,7 +16,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.2.14
+        version: '4.2'
     - - "<"
       - !ruby/object:Gem::Version
         version: 6.x
@@ -26,7 +26,7 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.2.14
+        version: '4.2'
     - - "<"
       - !ruby/object:Gem::Version
         version: 6.x
@@ -273,6 +273,7 @@ files:
 - lib/active_merchant/billing/gateways/moneris.rb
 - lib/active_merchant/billing/gateways/moneris_us.rb
 - lib/active_merchant/billing/gateways/money_movers.rb
+- lib/active_merchant/billing/gateways/mundipagg.rb
 - lib/active_merchant/billing/gateways/nab_transact.rb
 - lib/active_merchant/billing/gateways/ncr_secure_pay.rb
 - lib/active_merchant/billing/gateways/net_registry.rb
@@ -387,6 +388,7 @@ files:
 - lib/active_merchant/country.rb
 - lib/active_merchant/empty.rb
 - lib/active_merchant/errors.rb
+- lib/active_merchant/net_http_ssl_connection.rb
 - lib/active_merchant/network_connection_retries.rb
 - lib/active_merchant/post_data.rb
 - lib/active_merchant/posts_data.rb
@@ -396,6 +398,7 @@ files:
 - lib/support/gateway_support.rb
 - lib/support/outbound_hosts.rb
 - lib/support/ssl_verify.rb
+- lib/support/ssl_version.rb
 homepage: http://activemerchant.org/
 licenses:
 - MIT