bullion 0.6.2 → 0.7.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 389f32145f01711a4286c82a16cf19d6ab7ea63de99d5f18fe86967d4b01f459
-  data.tar.gz: 706d9f1a7e2a7b6b408af8061d06cb29b5d7c0caf084028f5dee0a3a5a8dade0
+  metadata.gz: 3e9ebdfc8744eadaf021a1f19f79c12e39b63e87896d21896c546ef875e15955
+  data.tar.gz: a6dd92c1c76bdd65a0e2a58ae90e3db912590d6f2e2e0a522adfeda5bc287e2e
 SHA512:
-  metadata.gz: ea4404ede2c9d85556760d5891969dc4b896157993b49f006d04744eb7dc5de2fabc6b27a20f0443abf735293b0b877b1c2d89a6760e974936b32002cf163ca1
-  data.tar.gz: 2b6b0cff828cd4161743a7981c098adfa7e94fe0ddd8cb6cf05527396ac4268650bcfa96166c69c9e6d9383a4d6314d5eb6769fab3128361fea3de86d610b2d5
+  metadata.gz: a6eaf7ae8d958d3adef49a95fe9d3c53b1610fed2ebdfcee0f13b7b71aacd07ded25e7652b0f1c0f8168d812df8ecbb83642c0679c3c8d26a75cf50207f21c35
+  data.tar.gz: ce2065af090c95f31ed8bfbcc23f4c12f452d3d52fca7f9715877c975e8a0dcb10a6670759277a218edb8b6988cadb9a3f45941f6cda4f71f77ecf084c51db54

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    bullion (0.6.2)
+    bullion (0.7.1)
       dry-configurable (~> 1.1)
       httparty (~> 0.21)
       json (~> 2.6)

data/lib/bullion/challenge_client.rb

@@ -22,6 +22,8 @@ module Bullion
       tries = 0
       success = false
 
+      challenge.update!(status: "processing")
+
       benchtime = Benchmark.realtime do
         until success || tries >= retries
           tries += 1
@@ -39,6 +41,8 @@ module Bullion
       unless success
         LOGGER.info "Failed to validate #{type} #{identifier}"
         challenge.status = "invalid"
+        challenge.authorization.update!(status: "invalid")
+        challenge.authorization.order.update!(status: "invalid")
       end
 
       challenge.save

data/lib/bullion/helpers/ssl.rb

@@ -216,7 +216,7 @@ module Bullion
         csr_cert.subject = simple_subject(cert.subject.to_s)
 
         csr_cert.public_key = csr.public_key
-        csr_cert.issuer = Bullion.ca_cert.issuer
+        csr_cert.issuer = Bullion.ca_cert.subject
 
         csr_cert, sans = manage_csr_extensions(csr, csr_cert)
 

data/lib/bullion/models/challenge.rb

@@ -24,7 +24,7 @@ module Bullion
 
       def thumbprint
         cipher = OpenSSL::Digest.new("SHA256")
-        digest = cipher.digest(authorization.order.account.public_key.to_json)
+        digest = cipher.digest(lexicographically_ordered_public_key.to_json)
         Base64.urlsafe_encode64(digest).sub(/[\s=]*\z/, "")
       end
 
@@ -38,6 +38,13 @@ module Bullion
 
         challenge_class.new(self)
       end
+
+      private
+
+      def lexicographically_ordered_public_key
+        jwk = authorization.order.account.public_key
+        [["e", jwk["e"]], ["kty", jwk["kty"]], ["n", jwk["n"]]].to_h
+      end
     end
   end
 end

data/lib/bullion/services/ca.rb

@@ -345,6 +345,8 @@ module Bullion
         # Oddly enough, cert-manager uses a GET request for retrieving Challenge info
         challenge.client.attempt unless @json_body && @json_body[:payload] == ""
 
+        challenge.reload
+
         data = {
           type: challenge.acme_type,
           status: challenge.status,

data/lib/bullion/version.rb

@@ -3,7 +3,7 @@
 module Bullion
   VERSION = [
     0, # major
-    6, # minor
-    2 # patch
+    7, # minor
+    1 # patch
   ].join(".")
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: bullion
 version: !ruby/object:Gem::Version
-  version: 0.6.2
+  version: 0.7.1
 platform: ruby
 authors:
 - Jonathan Gnagy
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2024-01-28 00:00:00.000000000 Z
+date: 2024-01-31 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dry-configurable