cetustek 0.10.0 → 0.11.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 90bc8844eac9b3eb305d59f5550be7bf6e552b0fffafe74b0e71e6afc31c55ef
-  data.tar.gz: a9337fd9f37f80a3ec6532a319c4eac87ce1db79a475d7e237e3f2b59567a850
+  metadata.gz: c6a6aca36dc760878fe11e9107416c7296ef5fa7835d1e223f3cab8248970fb7
+  data.tar.gz: 96fb067d26a7cb40e0b429a8a9f502fa486bc5bc2efcded04bb136bcba4b99c1
 SHA512:
-  metadata.gz: 57e5c7e15f119c182c8d0f38ef0c98ce40c682bc0262ed7043a09ed8c379a2603ae88d581bef8bcdc9e0f0a95cc5be85e6a6dc502f7c883bb7f6e74c9ebd8fa3
-  data.tar.gz: c267be5d85ea54c917d932453a910bfcca464b4e5441ad4f2c98aec3e4b2f567712e65617e6250186ebd6164ec39f4157ad12014cfce6445847afe7c8db1b926
+  metadata.gz: 4cdf8f6a063bb979aecd5d974dd1482329582359831bf0cbb20f46c50987dbbb677e675dd3507c3bbd69883277103760900dc12b55c3650f3215b1e3ab3dc408
+  data.tar.gz: 6240dd9f19af70f835d4323a5fad194a77ef8be409f503013887095c1bd25ece1331507030443ae8a7ea571aa97c6a47eb6982e0142a2605f467afbd47977564

data/CHANGELOG.md

@@ -5,6 +5,24 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.11.0] - 2026-08-24
+
+### Added
+
+- `config.transport` — `:httpi` (預設，維持現有行為) 或 `:faraday`。設成其他值
+  在 `Cetustek.configure` 當下就 raise `ArgumentError`。
+
+### Fixed
+
+- 沙盒端點 `invoice.cetustek.com.tw` 的 `certificate verify failed`：savon 預設
+  的 HTTPI 首選 adapter 是 httpclient，而 httpclient 只認 gem 內附的
+  `cacert.pem`，裡面沒有該端點憑證鏈的根 Certum Trusted Root CA。只要 bundle
+  裡有 httpclient，沙盒開票就會全數失敗。`config.transport = :faraday` 改走
+  Faraday 的 `net_http`，讀系統信任庫。production (`www.ei.com.tw`) 不受影響。
+  Faraday 路徑不能傳 `open_timeout`/`read_timeout`（savon 2.17 的
+  `FaradayMigrationHint::OPTIONS` 會 raise），改由 `client.faraday.options`
+  設定，兩條路徑的 300 秒逾時一致。
+
 ## [0.10.0] - 2026-08-07
 
 延續 0.9.0 的 code review：統一驗證力度與查詢介面，讓四個查詢類別與

data/README.md

@@ -50,9 +50,33 @@ Cetustek.configure do |config|
   # Only the order id, invoice number and result code are logged (never the
   # response body); the request XML is logged at debug level on failure.
   config.logger = Rails.logger
+
+  # Optional. :httpi (default, savon's own HTTP stack) or :faraday.
+  # See "SSL on the sandbox endpoint" below — if sandbox calls fail with
+  # `certificate verify failed`, set this to :faraday.
+  config.transport = :faraday
 end
 ```
 
+### SSL on the sandbox endpoint (`certificate verify failed`)
+
+The sandbox endpoint `invoice.cetustek.com.tw` chains to **Certum Trusted Root
+CA**. Savon's default HTTP stack is HTTPI, whose first-choice adapter is
+`httpclient` — and `httpclient` ignores the system trust store, trusting only
+the `cacert.pem` bundled inside the gem, which does not include that root. So
+if anything in your bundle pulls in `httpclient` (plenty of gems do), every
+sandbox call fails with:
+
+```
+SSL_connect ... certificate verify failed (unable to get local issuer certificate)
+```
+
+Production (`www.ei.com.tw`, Sectigo/USERTrust) is unaffected.
+
+Fix it with `config.transport = :faraday`, which goes through Faraday's
+`net_http` adapter and reads the system trust store. The 300s open/read
+timeouts are applied either way.
+
 ## Usage
 
 ### Issue an Invoice

data/lib/cetustek/configuration.rb

@@ -2,11 +2,26 @@
 
 module Cetustek
   class Configuration
+    # HTTPI (savon 的預設) 第一順位是 httpclient，而 httpclient 只認 gem 內附的
+    # cacert.pem，裡面沒有 Certum Trusted Root CA — 也就是 sandbox 端點
+    # invoice.cetustek.com.tw 憑證鏈的根。只要環境裡有 httpclient，沙盒開票就會
+    # 全數 certificate verify failed。改用 :faraday 走 net_http，讀系統信任庫。
+    TRANSPORTS = %i[httpi faraday].freeze
+
     # logger is opt-in: nil means this gem writes nothing anywhere.
     attr_accessor :environment, :site_id, :username, :password, :logger
+    attr_reader :transport
 
     def initialize
       @environment = :sandbox
+      @transport = :httpi
+    end
+
+    def transport=(value)
+      raise ArgumentError, "transport must be one of #{TRANSPORTS.join(', ')}, got #{value.inspect}" \
+        unless TRANSPORTS.include?(value)
+
+      @transport = value
     end
 
     def url

data/lib/cetustek/soap.rb

@@ -6,8 +6,26 @@ module Cetustek
   # Shared SOAP plumbing: every operation hits the same WSDL and authenticates
   # with 網站代碼+APIPassword (source) and the 租賃者統編 (rentid).
   module Soap
+    TIMEOUT = 300
+
     def soap_client
-      Savon.client(wsdl: Cetustek.config.url, open_timeout: 300, read_timeout: 300)
+      return httpi_client unless Cetustek.config.transport == :faraday
+
+      faraday_client
+    end
+
+    def httpi_client
+      Savon.client(wsdl: Cetustek.config.url, open_timeout: TIMEOUT, read_timeout: TIMEOUT)
+    end
+
+    # savon 2.17 的 FaradayMigrationHint::OPTIONS 會讓 open_timeout/read_timeout
+    # 在 transport: :faraday 下直接 raise，逾時改由 faraday 連線自己設。
+    def faraday_client
+      require 'faraday'
+      Savon.client(wsdl: Cetustek.config.url, transport: :faraday).tap do |client|
+        client.faraday.options.open_timeout = TIMEOUT
+        client.faraday.options.read_timeout = TIMEOUT
+      end
     end
 
     def source

data/lib/cetustek/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Cetustek
-  VERSION = "0.10.0"
+  VERSION = "0.11.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: cetustek
 version: !ruby/object:Gem::Version
-  version: 0.10.0
+  version: 0.11.0
 platform: ruby
 authors:
 - Zac