certman 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: abd249cac5771cfd40429d8123247925a65c3b55
+  data.tar.gz: a06cea74aff79c77bc6800660f038f89f0412aa8
+SHA512:
+  metadata.gz: 88589e4fb6d9b5eb7e065dc3ddc351c7b2831ea2d5b6cda1e541192e470e50a9ddcd66be775959e2ec202ac034f5be7db437627223fb8fb9dd84a7d3de9707b8
+  data.tar.gz: e10726b02ce3acd0287f8800a8176c6f2f1816d23de210ca8152d3915a0b341173d3f2ea5ddd3f301933e50512563b218e0ccf77e9dcc1e895d715c2e6908e6c

data/.gitignore

@@ -0,0 +1,9 @@
+/.bundle/
+/.yardoc
+/Gemfile.lock
+/_yardoc/
+/coverage/
+/doc/
+/pkg/
+/spec/reports/
+/tmp/

data/.rspec

@@ -0,0 +1,2 @@
+--format documentation
+--color

data/.rubocop.yml

@@ -0,0 +1,29 @@
+AllCops:
+  TargetRubyVersion: 2.2
+
+Metrics/AbcSize:
+  Max: 160
+
+Metrics/ClassLength:
+  Max: 310
+
+Metrics/CyclomaticComplexity:
+  Max: 10
+
+Metrics/MethodLength:
+  Max: 240
+
+Metrics/PerceivedComplexity:
+  Max: 10
+
+Metrics/BlockLength:
+  Max: 30
+
+Metrics/LineLength:
+  Max: 120
+  
+Style/Documentation:
+  Enabled: false
+  
+Style/MutableConstant:
+  Enabled: false

data/.travis.yml

@@ -0,0 +1,10 @@
+sudo: false
+language: ruby
+rvm:
+  - 2.4.0
+  - 2.3.3
+  - 2.2.6
+before_install:
+  - gem install bundler -v 1.12.5
+script:
+  - bundle exec rake

data/Gemfile

@@ -0,0 +1,4 @@
+source 'https://rubygems.org'
+
+# Specify your gem's dependencies in certman.gemspec
+gemspec

data/LICENSE.txt

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2017 k1LoW
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

data/README.md

@@ -0,0 +1,67 @@
+# Certman
+
+CLI tool for AWS Certificate Manager.
+
+## Installation
+
+Add this line to your application's Gemfile:
+
+```ruby
+gem 'certman'
+```
+
+And then execute:
+
+```sh
+$ bundle
+```
+
+Or install it yourself as:
+
+```sh
+$ gem install certman
+```
+
+## Usage
+
+### Request ACM Certificate with only AWS managed services
+
+```sh
+$ certman request blog.example.com
+NOTICE! Certman support *us-east-1* only, now. OK? Yes
+NOTICE! When requesting, Certman replace Active Receipt Rule Set. OK? Yes
+[✔] [ACM] Check Certificate (successfull)
+[✔] [Route53] Check Hosted Zone (successfull)
+[✔] [Route53] Check TXT Record (successfull)
+[✔] [Route53] Check MX Record (successfull)
+[✔] [S3] Create Bucket for SES inbound (successfull)
+[✔] [SES] Create Domain Identity (successfull)
+[✔] [Route53] Add TXT Record Set to verify Domain Identity (successfull)
+[✔] [SES] Check Domain Identity Status *verified* (successfull)
+[✔] [Route53] Add MX Record Set (successfull)
+[✔] [SES] Create Receipt Rule (successfull)
+[✔] [ACM] Request Certificate (successfull)
+[✔] [S3] Check approval mail (will take about 30 min) (successfull)
+[✔] [SES] Remove Receipt rule (successfull)
+[✔] [Route53] Remove Record Set (successfull)
+[✔] [SES] Remove Verified Domain Identiry (successfull)
+[✔] [S3] Delete Bucket (successfull)
+Done.
+
+certificate_arn: arn:aws:acm:us-east-1:0123456789:certificate/123abcd4-5e67-8f90-123a-4567bc89d01
+
+```
+
+### Delete Certificate
+
+```sh
+$ certman delete blog.example.com
+[✔] [ACM] Delete Certificate (successfull)
+Done.
+
+```
+
+## License
+
+The gem is available as open source under the terms of the [MIT License](http://opensource.org/licenses/MIT).
+

data/Rakefile

@@ -0,0 +1,8 @@
+require 'bundler/gem_tasks'
+require 'rspec/core/rake_task'
+require 'octorelease'
+require 'rubocop/rake_task'
+RSpec::Core::RakeTask.new(:spec)
+RuboCop::RakeTask.new
+
+task default: [:spec, :rubocop]

data/bin/console

@@ -0,0 +1,7 @@
+#!/usr/bin/env ruby
+
+require 'bundler/setup'
+require 'certman'
+
+require 'pry'
+Pry.start

data/bin/setup

@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+set -euo pipefail
+IFS=$'\n\t'
+set -vx
+
+bundle install
+
+# Do any other automated setup that you need to do here

data/certman.gemspec

@@ -0,0 +1,37 @@
+# coding: utf-8
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require 'certman/version'
+
+Gem::Specification.new do |spec|
+  spec.name          = 'certman'
+  spec.version       = Certman::VERSION
+  spec.authors       = ['k1LoW']
+  spec.email         = ['k1lowxb@gmail.com']
+
+  spec.summary       = 'CLI tool for AWS Certificate Manager.'
+  spec.description   = 'CLI tool for AWS Certificate Manager.'
+  spec.homepage      = 'https://github.com/k1LoW/certman'
+  spec.license       = 'MIT'
+
+  spec.files         = `git ls-files -z`.split("\x0").reject { |f| f.match(%r{^(test|spec|features)/}) }
+  spec.bindir        = 'exe'
+  spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
+  spec.require_paths = ['lib']
+
+  spec.required_ruby_version = '>= 2.2'
+  spec.add_runtime_dependency 'aws-sdk', '< 2.9'
+  spec.add_runtime_dependency 'awsecrets', '~> 1.8'
+  spec.add_runtime_dependency 'thor'
+  spec.add_runtime_dependency 'public_suffix'
+  spec.add_runtime_dependency 'oga'
+  spec.add_runtime_dependency 'tty-prompt'
+  spec.add_runtime_dependency 'tty-spinner'
+  spec.add_runtime_dependency 'pastel'
+  spec.add_development_dependency 'bundler', '~> 1.12'
+  spec.add_development_dependency 'rake', '~> 10.0'
+  spec.add_development_dependency 'rspec', '~> 3.0'
+  spec.add_development_dependency 'rubocop', '~> 0.47.0'
+  spec.add_development_dependency 'octorelease'
+  spec.add_development_dependency 'pry'
+end

data/exe/certman

@@ -0,0 +1,8 @@
+#!/usr/bin/env ruby
+
+require 'certman'
+
+Awsecrets.load
+Aws.config[:region] = 'us-east-1'
+
+Certman::CLI.start

data/lib/certman/cli.rb

@@ -0,0 +1,23 @@
+module Certman
+  class CLI < Thor
+    desc 'request [DOMAIN]', 'Request ACM Certificate with only AWS managed services'
+    def request(domain)
+      pastel = Pastel.new
+      prompt = TTY::Prompt.new
+      return unless prompt.yes?(pastel.red('NOTICE! Certman support *us-east-1* only, now. OK?'))
+      return unless prompt.yes?(pastel.red('NOTICE! When requesting, Certman replace Active Receipt Rule Set. OK?'))
+      cert_arn = Certman::Client.new(domain).request_certificate
+      puts 'Done.'
+      puts ''
+      puts "certificate_arn: #{pastel.cyan(cert_arn)}"
+      puts ''
+    end
+
+    desc 'delete [DOMAIN]', 'Delete ACM Certificate'
+    def delete(domain)
+      Certman::Client.new(domain).delete_certificate
+      puts 'Done.'
+      puts ''
+    end
+  end
+end

data/lib/certman/client.rb

@@ -0,0 +1,354 @@
+module Certman
+  class Client
+    attr_reader :domain
+
+    def initialize(domain)
+      @domain = domain
+    end
+
+    def request_certificate
+      check_resource
+
+      # Get Account ID
+      account_id = sts.get_caller_identity.account
+
+      # Create S3 for SES inbound
+      s = spinner('[S3] Create Bucket for SES inbound')
+      bucket_policy = <<-"EOF"
+{
+            "Version": "2008-10-17",
+    "Statement": [
+        {
+            "Sid": "GiveSESPermissionToWriteEmail",
+            "Effect": "Allow",
+            "Principal": {
+                "Service": [
+                    "ses.amazonaws.com"
+                ]
+            },
+            "Action": [
+                "s3:PutObject"
+            ],
+            "Resource": "arn:aws:s3:::#{bucket_name}/*",
+            "Condition": {
+                "StringEquals": {
+                    "aws:Referer": "#{account_id}"
+                }
+            }
+        }
+    ]
+}
+EOF
+      s3.create_bucket(
+        acl: 'private',
+        bucket: bucket_name
+      )
+      s3.put_bucket_policy(
+        bucket: bucket_name,
+        policy: bucket_policy,
+        use_accelerate_endpoint: false
+      )
+      s.success
+
+      # Create Domain Identity
+      s = spinner('[SES] Create Domain Identity')
+      res = ses.verify_domain_identity(domain: domain)
+      token = res.verification_token
+      s.success
+
+      # Add TXT Record Set with Route53
+      s = spinner('[Route53] Add TXT Record Set to verify Domain Identity')
+      root_domain = PublicSuffix.domain(domain)
+      hosted_zone = route53.list_hosted_zones.hosted_zones.find do |zone|
+        PublicSuffix.domain(zone.name) == root_domain
+      end
+      route53.change_resource_record_sets(
+        change_batch: {
+          changes: [
+            {
+              action: 'CREATE',
+              resource_record_set: {
+                name: "_amazonses.#{domain}",
+                resource_records: [
+                  {
+                    value: '"' + token + '"'
+                  }
+                ],
+                ttl: 60,
+                type: 'TXT'
+              }
+            }
+          ],
+          comment: 'Generate by certman'
+        },
+        hosted_zone_id: hosted_zone.id
+      )
+      s.success
+
+      # Checking verify
+      s = spinner('[SES] Check Domain Identity Status *verified*')
+      is_break = false
+      100.times do
+        res = ses.get_identity_verification_attributes(
+          identities: [
+            domain
+          ]
+        )
+        if res.verification_attributes[domain].verification_status == 'Success'
+          is_break = true
+          s.success
+          break
+        end
+        sleep 5
+      end
+      s.error unless is_break
+
+      # Add MX Record Set
+      s = spinner('[Route53] Add MX Record Set')
+      route53.change_resource_record_sets(
+        change_batch: {
+          changes: [
+            {
+              action: 'CREATE',
+              resource_record_set: {
+                name: domain,
+                resource_records: [
+                  {
+                    value: '10 inbound-smtp.us-east-1.amazonaws.com'
+                  }
+                ],
+                ttl: 60,
+                type: 'MX'
+              }
+            }
+          ],
+          comment: 'Generate by certman'
+        },
+        hosted_zone_id: hosted_zone.id
+      )
+      s.success
+
+      # Create Receipt rule
+      s = spinner('[SES] Create Receipt Rule')
+      rule_name = "S3RuleGeneratedByCertman_#{domain}"
+      rule_set_name = "RuleSetGeneratedByCertman_#{domain}"
+      ses.create_receipt_rule_set(rule_set_name: rule_set_name)
+      ses.create_receipt_rule(
+        rule: {
+          recipients: ["admin@#{domain}"],
+          actions: [
+            {
+              s3_action: {
+                bucket_name: bucket_name
+              }
+            }
+          ],
+          enabled: true,
+          name: rule_name,
+          scan_enabled: true,
+          tls_policy: 'Optional'
+        },
+        rule_set_name: rule_set_name
+      )
+      current_rule_set_name = nil
+      res = ses.describe_active_receipt_rule_set
+      current_rule_set_name = res.metadata.name if res.metadata
+      ses.set_active_receipt_rule_set(rule_set_name: rule_set_name)
+      s.success
+
+      # Request Certificate
+      s = spinner('[ACM] Request Certificate')
+      res = acm.request_certificate(
+        domain_name: domain,
+        subject_alternative_names: [domain],
+        domain_validation_options: [
+          {
+            domain_name: domain,
+            validation_domain: domain
+          }
+        ]
+      )
+      cert_arn = res.certificate_arn
+      s.success
+
+      # Check Mail and Approve
+      s = spinner('[S3] Check approval mail (will take about 30 min)')
+      is_break = false
+      60.times do
+        s3.list_objects(bucket: bucket_name).contents.map do |object|
+          res = s3.get_object(bucket: bucket_name, key: object.key)
+          res.body.read.match(%r{https://certificates\.amazon\.com/approvals[^\s]+}) do |md|
+            cert_uri = md[0]
+            handle = open(cert_uri)
+            document = Oga.parse_html(handle)
+            data = {}
+            document.css('form input').each do |input|
+              data[input.get('name')] = input.get('value')
+            end
+            res = Net::HTTP.post_form(URI.parse('https://certificates.amazon.com/approvals'), data)
+            if res.body =~ /Success/
+              s.success
+            else
+              s.error
+            end
+            is_break = true
+            break
+          end
+        end
+        break if is_break
+        sleep 30
+      end
+      s.error unless is_break
+
+      # Remove Receipt Rule
+      s = spinner('[SES] Remove Receipt Rule')
+      ses.set_active_receipt_rule_set(rule_set_name: current_rule_set_name)
+      ses.delete_receipt_rule(
+        rule_name: rule_name,
+        rule_set_name: rule_set_name
+      )
+      ses.delete_receipt_rule_set(rule_set_name: rule_set_name)
+      s.success
+
+      # Remove Record Set
+      s = spinner('[Route53] Remove Record Set')
+      route53.change_resource_record_sets(
+        change_batch: {
+          changes: [
+            {
+              action: 'DELETE',
+              resource_record_set: {
+                name: "_amazonses.#{domain}",
+                resource_records: [
+                  {
+                    value: '"' + token + '"'
+                  }
+                ],
+                ttl: 60,
+                type: 'TXT'
+              }
+            },
+            {
+              action: 'DELETE',
+              resource_record_set: {
+                name: domain,
+                resource_records: [
+                  {
+                    value: '10 inbound-smtp.us-east-1.amazonaws.com'
+                  }
+                ],
+                ttl: 60,
+                type: 'MX'
+              }
+            }
+          ],
+          comment: 'Generate by certman'
+        },
+        hosted_zone_id: hosted_zone.id
+      )
+      s.success
+
+      # Remove Verified Domain Identiry
+      s = spinner('[SES] Remove Verified Domain Identiry')
+      ses.delete_identity(identity: domain)
+      s.success
+
+      # Delete S3 for SES inbound
+      s = spinner('[S3] Delete Bucket')
+      objects = s3.list_objects(bucket: bucket_name).contents.map do |object|
+        { key: object.key }
+      end
+      s3.delete_objects(
+        bucket: bucket_name,
+        delete: {
+          objects: objects
+        }
+      )
+      s3.delete_bucket(bucket: bucket_name)
+      s.success
+
+      cert_arn
+    end
+
+    def delete_certificate
+      s = spinner('[ACM] Delete Certificate')
+      current_cert = acm.list_certificates.certificate_summary_list.find do |cert|
+        cert.domain_name == domain
+      end
+      raise 'Certificate does not exist' unless current_cert
+      acm.delete_certificate(certificate_arn: current_cert.certificate_arn)
+      s.success
+    end
+
+    def check_resource
+      s = spinner('[ACM] Check Certificate')
+      current_cert = acm.list_certificates.certificate_summary_list.find do |cert|
+        cert.domain_name == domain
+      end
+      raise 'Certificate already exist' if current_cert
+      s.success
+
+      s = spinner('[Route53] Check Hosted Zone')
+      root_domain = PublicSuffix.domain(domain)
+      hosted_zone_id = nil
+      hosted_zone = route53.list_hosted_zones.hosted_zones.find do |zone|
+        if PublicSuffix.domain(zone.name) == root_domain
+          hosted_zone_id = zone.id
+          next true
+        end
+      end
+      raise "Hosted Zone #{root_domain} does not exist" unless hosted_zone
+      s.success
+
+      s = spinner('[Route53] Check TXT Record')
+      res = route53.list_resource_record_sets(
+        hosted_zone_id: hosted_zone_id,
+        start_record_name: "_amazonses.#{domain}.",
+        start_record_type: 'TXT'
+      )
+      raise "_amazonses.#{domain} TXT already exist" unless res.resource_record_sets.empty?
+      s.success
+
+      s = spinner('[Route53] Check MX Record')
+      res = route53.list_resource_record_sets(
+        hosted_zone_id: hosted_zone_id,
+        start_record_name: "#{domain}.",
+        start_record_type: 'MX'
+      )
+      raise "#{domain} MX already exist" unless res.resource_record_sets.empty?
+      s.success
+
+      true
+    end
+
+    private
+
+    def sts
+      @sts ||= Aws::STS::Client.new
+    end
+
+    def s3
+      @s3 ||= Aws::S3::Client.new
+    end
+
+    def ses
+      @ses ||= Aws::SES::Client.new
+    end
+
+    def route53
+      @route53 ||= Aws::Route53::Client.new
+    end
+
+    def acm
+      @acm ||= Aws::ACM::Client.new
+    end
+
+    def bucket_name
+      @bucket_name ||= "#{domain}-generated-by-certman-for-ses-inbound-"
+    end
+
+    def spinner(message)
+      Certman::Log.new(message)
+    end
+  end
+end

data/lib/certman/log.rb

@@ -0,0 +1,17 @@
+module Certman
+  class Log
+    def initialize(message)
+      @pastel = Pastel.new
+      @s = TTY::Spinner.new("[:spinner] #{message}", output: $stdout)
+      @s.auto_spin
+    end
+
+    def success
+      @s.success(@pastel.green('(successfull)'))
+    end
+
+    def error
+      @s.error(@pastel.red('(error)'))
+    end
+  end
+end

data/lib/certman/version.rb

@@ -0,0 +1,3 @@
+module Certman
+  VERSION = '0.1.0'
+end

data/lib/certman.rb

@@ -0,0 +1,17 @@
+require 'awsecrets'
+require 'thor'
+require 'public_suffix'
+require 'oga'
+require 'net/http'
+require 'uri'
+require 'open-uri'
+require 'tty-prompt'
+require 'tty-spinner'
+require 'pastel'
+require 'certman/client'
+require 'certman/cli'
+require 'certman/log'
+require 'certman/version'
+
+module Certman
+end

metadata

@@ -0,0 +1,258 @@
+--- !ruby/object:Gem::Specification
+name: certman
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- k1LoW
+autorequire: 
+bindir: exe
+cert_chain: []
+date: 2017-03-23 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: aws-sdk
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '2.9'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '2.9'
+- !ruby/object:Gem::Dependency
+  name: awsecrets
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.8'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.8'
+- !ruby/object:Gem::Dependency
+  name: thor
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: public_suffix
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: oga
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: tty-prompt
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: tty-spinner
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: pastel
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.12'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.12'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+- !ruby/object:Gem::Dependency
+  name: rubocop
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.47.0
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.47.0
+- !ruby/object:Gem::Dependency
+  name: octorelease
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: pry
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: CLI tool for AWS Certificate Manager.
+email:
+- k1lowxb@gmail.com
+executables:
+- certman
+extensions: []
+extra_rdoc_files: []
+files:
+- ".gitignore"
+- ".rspec"
+- ".rubocop.yml"
+- ".travis.yml"
+- Gemfile
+- LICENSE.txt
+- README.md
+- Rakefile
+- bin/console
+- bin/setup
+- certman.gemspec
+- exe/certman
+- lib/certman.rb
+- lib/certman/cli.rb
+- lib/certman/client.rb
+- lib/certman/log.rb
+- lib/certman/version.rb
+homepage: https://github.com/k1LoW/certman
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '2.2'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.5.1
+signing_key: 
+specification_version: 4
+summary: CLI tool for AWS Certificate Manager.
+test_files: []