anchor-pki 0.6.1 → 0.6.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f6f3aa56dc5a365db7f3c2b4f255ac538ba455fad1bdf758f19450bca287381e
-  data.tar.gz: 6bf38bec006856c4a60246e3b53a119296e9c4557a17f3c4d0f5ef50404102ca
+  metadata.gz: 72bacc57511a5e60ad14e2820a55f19149a2a705fbaa7c80af60484486f0a47d
+  data.tar.gz: 3eb671fa661b08f028062b8ee9733ec3831fd2c5acde15875d24f92fcb6c19bf
 SHA512:
-  metadata.gz: 5d24d34f6c5448e2ba33ac004e6d2e99a7ff0c3b31840c119f5d0256576d6146e6e13b120251db58ab9d80db4f4927f1c71f2c38397ca434a66ded8124c300e8
-  data.tar.gz: 30ba030f48985e35f6d63e1ac02943bf0bed301eba7a36cc6728caa5dbee0395e14d8a4ba3e2d43edf68fca461ee5cb60ae204542b6f4f30c1ffa3655cf68986
+  metadata.gz: 266f699b84d1b6b03ef6c5273109b209dd13fa2cbae54eb7260d85edd0f9b4f3295b6dedf20bf8e2dedaa1fdad7e734784b0d6dfdbc276c15912cb76d4b9ff90
+  data.tar.gz: bc78aa5f6692a2ae80cf53c8ea38c3ee5a4d32ca4232bf74fbaf6c8784ce84d899ede38854c8b429e4fb22d2583f5278f470c0cb75c662babc3650c3c26b277e

data/CHANGELOG.md

@@ -1,9 +1,34 @@
 ## [Unreleased]
 
+## [0.6.3] - 2024-01-10
+
+- fixed release (0.6.2 didn't contain the expected changes)
+
+## [0.6.2] - 2023-12-20
+
+- make terms of service an optional parameter
+- change default autocert key from rails to anchor
+
+## [0.6.1] - 2023-12-11
+
+- improve support for ENV based configuration
+- improve error logging for Puma plugin
+
+## [0.6.0] - 2023-11-29
+
+- changes for feature parity and consistency across anchor language packages
+
+## [0.5.0] - 2023-09-18
+
+- automatic renewal for expired, cached certificates
+- log whole URL at startup, not just identifier
+- add support for Anchor Certificate Extension
+- update tests and test data recordings
+
 ## [0.4.0] - 2023-06-06
 
-- add a puma plugin and configuration dsl for better integration
-- auto restart of puma when a certificate is renewed
+- add a puma plugin and configuration DSL for better integration
+- auto restart puma when certificates renew
 - improve tests
 - internal refactor to support the puma plugin
 
@@ -15,7 +40,8 @@
 
 ## [0.2.0] - 2023-04-18
 
--
+- add autocert client for automatic certificate provisioning
+- don't contact ACME server when cache hits
 
 ## [0.1.0] - 2021-11-05
 

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    anchor-pki (0.6.1)
+    anchor-pki (0.6.3)
       acme-client (~> 2.0.13)
       pstore (~> 0.1)
 
@@ -19,7 +19,7 @@ GEM
       rexml
     diff-lcs (1.5.0)
     docile (1.4.0)
-    faraday (2.7.12)
+    faraday (2.8.1)
       base64
       faraday-net_http (>= 2.0, < 3.1)
       ruby2_keywords (>= 0.0.4)

data/lib/anchor/auto_cert/configuration.rb

@@ -202,16 +202,7 @@ module Anchor
       end
 
       def prepare_tos_acceptors(tos_acceptors)
-        tos_acceptors = Array(tos_acceptors)
-
-        if tos_acceptors.empty? || tos_acceptors.any? { |tos| !tos.respond_to?(:accept?) }
-          raise ConfigurationError,
-                "The '#{name}' #{self.class} instance has a misconfigured " \
-                '`tos_acceptors` value. It must be set to an object ' \
-                'or an array of objects that respond to `accept?`.'
-        end
-
-        tos_acceptors
+        Array(tos_acceptors)
       end
 
       def prepare_directory(dir:, property:)

data/lib/anchor/auto_cert/railtie.rb

@@ -4,9 +4,11 @@ module Anchor
   module AutoCert
     # AutoCert Railtie
     class Railtie < Rails::Railtie
+      name = ENV.fetch('AUTO_CERT_NAME', 'anchor')
+
       # Initialize the configuration with a blank configuration, ensuring
       # the configuration exists, even if it is not used.
-      config.auto_cert = ::Anchor::AutoCert::Configuration.new(name: :rails)
+      config.auto_cert = ::Anchor::AutoCert::Configuration.new(name: name)
 
       # Make sure the auto cert configuration is valid before the app boots
       # This will run after every code reload in development and after boot in
@@ -56,10 +58,11 @@ module Anchor
       def self.determine_configuration(app)
         auto_cert_config = app.config.auto_cert
 
-        # If no configuration is set, then try to lookup one under the :rails
+        # If no configuration is set, then try to lookup one under the :anchor
         # key or create a default one.
         begin
-          auto_cert_config ||= ::Anchor::AutoCert::Registry.fetch(:rails)
+          name = ENV.fetch('AUTO_CERT_NAME', 'anchor')
+          auto_cert_config ||= ::Anchor::AutoCert::Registry.fetch(name)
         rescue KeyError
           auto_cert_config = Railtie.try_to_create_default_configuration
         end
@@ -77,12 +80,13 @@ module Anchor
       end
 
       def self.try_to_create_default_configuration
+        name = ENV.fetch('AUTO_CERT_NAME', 'anchor')
         # If it doesn't exist, create a new one - now this may raise an error
         # if the configuration is not setup correctly
-        ::Anchor::AutoCert::Configuration.new(name: :rails)
+        ::Anchor::AutoCert::Configuration.new(name: name)
       rescue ConfigurationError => e
-        # its fine to not have a coniguration, just log the error and move on
-        msg = "[AutoCert] Unable to create the :rails configuration : #{e.message}"
+        # its fine to not have a configuration, just log the error and move on
+        msg = "[AutoCert] Unable to create the '#{name}' configuration : #{e.message}"
         Rails.logger.error(msg)
         nil
       end

data/lib/anchor/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Anchor
-  VERSION = '0.6.1'
+  VERSION = '0.6.3'
 end

data/lib/puma/plugin/auto_cert.rb

@@ -26,7 +26,7 @@ module Puma
 
         def config(dsl)
           @port         = dsl.auto_cert_port || ENV.fetch('HTTPS_PORT', nil)
-          name          = dsl.auto_cert_name || ENV.fetch('AUTO_CERT_NAME', 'default')
+          name          = dsl.auto_cert_name || ENV.fetch('AUTO_CERT_NAME', 'anchor')
           configuration = ::Anchor::AutoCert::Registry.fetch(name)
           identifiers   = configuration.allow_identifiers
           @manager      = ::Anchor::AutoCert::Manager.new(configuration: configuration)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: anchor-pki
 version: !ruby/object:Gem::Version
-  version: 0.6.1
+  version: 0.6.3
 platform: ruby
 authors:
 - Anchor Security, Inc
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-12-08 00:00:00.000000000 Z
+date: 2024-01-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: acme-client
@@ -207,7 +207,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.26
+rubygems_version: 3.5.4
 signing_key:
 specification_version: 4
 summary: Ruby client for Anchor PKI. See https://anchor.dev/ for details.