aws-sdk-sns 1.45.0 → 1.45.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ac6eb274872b411ed208e18241049456084a6811eced2a78b9fbeaa310609205
-  data.tar.gz: a02cb65667f7e2e031e2587d216799e8ae9086657408efd932d03fb397b3ff92
+  metadata.gz: f913b5f3c0ba17afa834fb78fcde43cfc4c8024ea3c7b401713314cc4d7c0d5e
+  data.tar.gz: afc25a5ee4c68f85487718be1230a4bb27c4539314a07b1a4782c2db892f39d7
 SHA512:
-  metadata.gz: 3598fbccaaca38de018489c5a243cdfbe719336beeee5c986146e2a96653302e16eb4d98b39087022252d63e0694f542bb5e389f3af4a77e3660d37c3bd37e2b
-  data.tar.gz: 3666af2b3ae579436ce760c8d23975b15e1504a0b44e6e0e834e26b5cbda47d6b7a8bb544019bc94c742cdff067692be467e88a7d1ee2fb291fae828e4f2c046
+  metadata.gz: 270e5dce033d50fea82f24b49acb3e6a7f3daf5d9550693e1246b0084fd2bb32f26fcdd567592fc225003118ad39ee591279c3537b46360abbbaf0ae24e6a6d0
+  data.tar.gz: d4d03b1b66ab7b14a63eb1d4181ad218e78d4d14a05846717eaee395ed4bec6fac0284fb8c6594fcbe1b6e805c9daa18cf8b472e583ce7c9bb21c8e795d9603d

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.45.1 (2021-10-15)
+------------------
+
+* Issue - Add additional validation to the SNS SigningCert.
+
 1.45.0 (2021-09-01)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.45.0
+1.45.1

data/lib/aws-sdk-sns/client.rb

@@ -2452,7 +2452,7 @@ module Aws::SNS
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-sns'
-      context[:gem_version] = '1.45.0'
+      context[:gem_version] = '1.45.1'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-sns/message_verifier.rb

@@ -123,7 +123,9 @@ module Aws
 
       def download_pem(uri)
         verify_uri!(uri)
-        https_get(uri)
+        pem = https_get(uri)
+        verify_pem_format!(pem)
+        pem
       end
 
       def verify_uri!(uri)
@@ -153,6 +155,14 @@ module Aws
         end
       end
 
+      def verify_pem_format!(pem)
+        cert_regex = /\A[\s]*-----BEGIN [A-Z]+-----\n[A-Za-z\d+\/\n]+[=]{0,2}\n-----END [A-Z]+-----[\s]*\Z/
+        unless pem =~ cert_regex
+          msg = 'The certificate does not match expected X509 PEM format.'
+          raise VerificationError, msg
+        end
+      end
+
       def https_get(uri, failed_attempts = 0)
         args = []
         args << uri.host

data/lib/aws-sdk-sns.rb

@@ -52,6 +52,6 @@ require_relative 'aws-sdk-sns/customizations'
 # @!group service
 module Aws::SNS
 
-  GEM_VERSION = '1.45.0'
+  GEM_VERSION = '1.45.1'
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-sns
 version: !ruby/object:Gem::Version
-  version: 1.45.0
+  version: 1.45.1
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-09-01 00:00:00.000000000 Z
+date: 2021-10-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core