canzea 0.1.112 → 0.1.113

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: c7bd8adbe7260e7ef1a8c5b97fec8f425e3381f8
-  data.tar.gz: 23a0e82666e31cd2f4e88a68cb0b83d4b4a08ee0
+  metadata.gz: 7e9ca2c10d1d784bdbeec96f575c11ba4b7bb461
+  data.tar.gz: 6ca457e117a47cc0ab0db3e3fd95030cab36176a
 SHA512:
-  metadata.gz: b690cac427662fd511b7939b6cc5e33294c9cf4eaa00302535de26effd96ae638573df74756761ebd71a0939bb9333baf1fd230565e3e061db1ae5efbc38e48f
-  data.tar.gz: 9309b2ad7ed0361b740e696416637d6d91e10b03ce4c4029d01b9cefdb52f06fa98695643860c020253a9cf6775b7eb69b738893c6ccca25e1050ef9b1fbcf45
+  metadata.gz: b36312019452e3067a896dc4d7909f45bf4e683b9dc6e78651e710ed7a01170289bebe20f1278356a401b916373905637a153b3428c5197e11a642d6390f9a66
+  data.tar.gz: 7ad1e7e0e6d5f1724d505a3f135dd47cc1053e98dbc35b26a78d79f191f8ed40bcc9fc8a70e2a8938012ba824e449a7277c47461dc8f9218f745e3982e96db5e

data/lib/canzea/version.rb

@@ -1,3 +1,3 @@
 module Canzea
-  VERSION = "0.1.112"
+  VERSION = "0.1.113"
 end

data/lib/registry.rb

@@ -104,7 +104,7 @@ class Registry
    def getSecret (key)
 
         uri = URI.parse(ENV["VAULT_URL"] + "/v1/secret/#{key}")
-        http = prepareHttp(uri)
+        http = prepareHttpForVault(uri)
 
         request = Net::HTTP::Get.new(uri.request_uri)
         request['X-Vault-Token'] = ENV["VAULT_TOKEN"]
@@ -120,7 +120,7 @@ class Registry
    def setSecret (key, value)
 
         uri = URI.parse(ENV["VAULT_URL"] + "/v1/secret/#{key}")
-        http = prepareHttp(uri)
+        http = prepareHttpForVault(uri)
 
         request = Net::HTTP::Put.new(uri.request_uri)
         request['Content-Type'] = 'application/json'
@@ -153,4 +153,23 @@ class Registry
         return http
     end
 
+    def prepareHttpForVault (uri)
+        http = Net::HTTP.new(uri.host, uri.port)
+
+        if (Canzea::config[:consul_tls])
+            pemCert = File.read(Canzea::config[:vault_tls_cert_file])
+            pemKey = File.read(Canzea::config[:vault_tls_key_file])
+
+            http.use_ssl = true
+            http.ca_file = Canzea::config[:consul_tls_ca_file]
+            http.cert = OpenSSL::X509::Certificate.new(pemCert)
+            http.key = OpenSSL::PKey::RSA.new(pemKey)
+            http.verify_mode = OpenSSL::SSL::VERIFY_PEER
+            # http.set_debug_output($stdout)
+            http.ssl_version = :SSLv23
+        end
+
+        return http
+    end
+
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: canzea
 version: !ruby/object:Gem::Version
-  version: 0.1.112
+  version: 0.1.113
 platform: ruby
 authors:
 - Canzea Technologies