certie 0.0.2

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: d6e1cb8a0e33e9293d80d691f0e8823c67810b388212569e45afcbcd926bfbc9
+  data.tar.gz: 3efbdc54c10c9f838d62a257d4427813d24f3f6546531e97a88f3c6a52341d20
+SHA512:
+  metadata.gz: 2463d49a316393ad773e4101bf8307d9db69783f4efecaacb84568bbc0a2a993c527356cc95991edb2c3f9cd56d56aa2fe0f4608745da6c6a5d0ac0697cf6f32
+  data.tar.gz: 223456217cfc468be901fe28fb161e09ed923cbfaf76905b3681e5d64c0e7bf8bd30e5753cf57eeeec344ea2fe99ddfb731ae60c4158093c4fcaeb8a8b31e0f8

data/bin/certie

@@ -0,0 +1,19 @@
+#!/usr/bin/env ruby
+require 'certie'
+
+def show_usage
+  puts "Usage: #{$0} <common_name>"
+  puts "Example: #{$0} example.com"
+end
+
+ARGV.each do |iterarg|
+  if iterarg=='--help'
+    show_usage ; exit
+  end
+end
+
+if ARGV.length == 0
+  show_usage ; exit
+end
+
+CertificateWrapper.build ARGV[0]

data/lib/certie.rb

@@ -0,0 +1,100 @@
+
+require 'openssl'
+
+class CertificateWrapper
+  @@subject_prefix = '/C=AE/ST=Dubai/L=Dubai/O=KNR/OU=Software'
+
+  def self.get_counter_next
+    serial = 0
+    if File.exists?('serial.txt')
+      File.open 'serial.txt', 'r' do |myfile|
+        strSerial = myfile.readline
+        strSerial.chomp!
+        serial = strSerial.to_i
+      end
+    else
+      serial = 0
+    end
+
+    serial += 1
+
+    File.open 'serial.txt', 'w' do |myfile|
+      myfile.print serial.to_s
+    end
+
+    serial
+  end
+
+  def self.create_certificate(cn=nil)
+    if cn.nil?
+      cn = "ca"
+    end
+
+    subject = @@subject_prefix + '/CN=' + cn
+    serial = get_counter_next
+
+    key = OpenSSL::PKey::RSA.new 2048
+    File.open "#{cn}.rsa", 'wb' do |myfile|
+      myfile.print key.to_pem
+    end
+
+    cert = OpenSSL::X509::Certificate.new
+    cert.version = 2 #This is v3
+
+    cert.serial = serial
+
+    cert.subject =  OpenSSL::X509::Name.parse subject
+    cert.public_key = key.public_key
+    cert.not_before = Time.now
+    cert.not_after = cert.not_before + (60 * 60 * 24 * 365)
+
+    ef = OpenSSL::X509::ExtensionFactory.new
+
+
+    if cn == "ca"
+      cert.issuer = OpenSSL::X509::Name.parse subject
+      ef.subject_certificate = cert
+      ef.issuer_certificate = cert
+      cert.add_extension ef.create_extension('basicConstraints', 'CA:TRUE', true)
+      cert.add_extension ef.create_extension('keyUsage', 'keyCertSign, cRLSign', true)
+      cert.add_extension ef.create_extension('subjectKeyIdentifier', 'hash', false )
+      cert.add_extension ef.create_extension('authorityKeyIdentifier', 'keyid:always', false)
+
+      cert.sign key, OpenSSL::Digest.new('SHA256')
+
+      File.open "#{cn}.cert", 'wb' do |myfile|
+        myfile.print cert.to_pem
+      end
+    else
+      rootCert = OpenSSL::X509::Certificate.new File.read 'ca.cert'
+      rootKey = OpenSSL::PKey::RSA.new File.read 'ca.rsa'
+
+      cert.issuer = OpenSSL::X509::Name.parse(@@subject_prefix + '/CN=' + 'ca')
+      ef.subject_certificate = cert
+      ef.issuer_certificate = rootCert
+      # cert.add_extension ef.create_extension('keyUsage', 'digitalSignature', true)  # TODO: check if we can set webServer and webClient
+      cert.add_extension ef.create_extension('subjectKeyIdentifier', 'hash', false )
+
+      cert.sign rootKey, OpenSSL::Digest.new('SHA256')
+
+      File.open "#{cn}.cert", 'wb' do |myfile|
+        myfile.print cert.to_pem
+      end
+    end
+
+    `openssl pkcs8 -topk8 -inform pem -in "#{cn}.rsa" -out "#{cn}.key" -nocrypt`
+    `cat "#{cn}.cert" "#{cn}.key" > "#{cn}.pem"`
+  end
+
+
+  def self.build(cn)
+    doWeHaveARootCertificate = File.exists? 'ca.cert'
+    doWeHaveARootKey = File.exists? 'ca.rsa'
+
+    if not (doWeHaveARootCertificate and doWeHaveARootKey)
+      create_certificate
+    end
+
+    create_certificate cn
+  end
+end

metadata

@@ -0,0 +1,58 @@
+--- !ruby/object:Gem::Specification
+name: certie
+version: !ruby/object:Gem::Version
+  version: 0.0.2
+platform: ruby
+authors:
+- Katkam Nitin Reddy
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2020-08-22 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: openssl
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: 
+email: 
+executables:
+- certie
+extensions: []
+extra_rdoc_files: []
+files:
+- bin/certie
+- lib/certie.rb
+homepage: 
+licenses: []
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.0.6
+signing_key: 
+specification_version: 4
+summary: A utility for generating certificates
+test_files: []