configuration_service-provider-vault 2.0.11 → 2.0.12

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: e2efda386b98936600169be0934aadde6b1cff9b
-  data.tar.gz: 03e80961a58f8647c421f59068363ce12b14c234
+  metadata.gz: eec3721da8adb644965322492bdb6d4b732e262d
+  data.tar.gz: 8cbc4d28b57ddb179ae85fdd6e66d433533b6e93
 SHA512:
-  metadata.gz: 1df77863012abfdd299b75083c12c77884a436f7c3b4ee44036f118a58b866bb75a724066528a1970b62dd5be9b466cad3b805ea95b3c6e00d98b40e55b83a26
-  data.tar.gz: f33306925eacfb111d4e5e57c067186085d3fdf248c721a51e787c66965f5af0802a5eb78b3a4f899ef042baf6e953bf44201451a2604d5d38b3ecb024339cec
+  metadata.gz: 910f0639b50b61d0c5411add59b4e5637d20b1a523b568b0ea144a6152715f977c8938a507507d5c93f830dffdfd6f57fade9f99468209214f465a9aa919ac34
+  data.tar.gz: 4f48469e23fcec927342e4649ad72143bf650d5975d1f7cb75396cb72f6b7d621c36e30cf873b396507d88f134c9436ca30c2dabdc1640b983355d3029085754

data/.gemspec

@@ -18,6 +18,8 @@ Gem::Specification.new do |spec|
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ["lib"]
 
+  spec.required_ruby_version = '>= 2.0'
+
   spec.add_dependency "vault", "~> 0.2"
   spec.add_dependency "configuration_service", "~> 2.0.5"
   spec.add_development_dependency "bundler", "~> 1.7"

data/.gitignore

@@ -7,3 +7,4 @@
 /pkg/
 /spec/reports/
 /tmp/
+/fixtures/vault.pid

data/.travis.yml

@@ -1,9 +1,22 @@
+---
 language: ruby
 rvm:
-  - 2.0.0
-  - 2.2.2
+  - ruby-2.0.0
+  - ruby-2.3.0
+  - jruby-9.0.4.0
 before_install:
+  - r=$(rvm current)
+  - v=${r#*-}; v=${v%-clang}
+  - p=${r%%-*}
+  - if [ "$p" = "ruby" ]; then rebuild=true; fi
+  - if [ -n "$rebuild" ]; then git clone https://github.com/openssl/openssl.git; fi
+  - if [ -n "$rebuild" ]; then (cd openssl && git checkout OpenSSL_1_0_1n); fi
+  - if [ -n "$rebuild" ]; then (cd openssl && ./config -fPIC --prefix=/usr/local/ssl shared && make && sudo make install) >/dev/null; fi
+  - if [ -n "$rebuild" ]; then git clone https://github.com/rbenv/ruby-build.git; fi
+  - if [ -n "$rebuild" ]; then (cd ruby-build && sudo ./install.sh); fi
+  - if [ -n "$rebuild" ]; then RUBY_CONFIGURE_OPTS=--with-openssl-dir=/usr/local/ssl ruby-build $v ~/.rvm/rubies/$r; fi
   - rm -f vault_0.3.1_linux_amd64.zip
   - wget https://dl.bintray.com/mitchellh/vault/vault_0.3.1_linux_amd64.zip
   - unzip vault_0.3.1_linux_amd64.zip
   - sudo mv vault /usr/local/bin/
+  - gem install bundler

data/Rakefile

@@ -1,3 +1,4 @@
+require "open3"
 require "bundler/gem_tasks"
 
 task :default => :test
@@ -12,6 +13,16 @@ task :test do
   end
 end
 
+desc "Just fire up and tear down a vault server"
+task :scramble do
+  if File.exists?("#{ENV["HOME"]}/.vault-token")
+    raise "cannot test with ~/.vault-token present"
+  end
+  with_devserver do
+    $stderr.puts "DEBUG: doing nothing..."
+  end
+end
+
 desc "Run cucumber without starting a Vault development server"
 task :just_test do
   gem = Gem::Specification.find_by_name("configuration_service")
@@ -21,64 +32,14 @@ task :just_test do
 end
 
 def with_devserver
-  assert_no_vault_server
-  devserver_start
-  File.unlink("#{ENV["HOME"]}/.vault-token")
+  ENV["VAULT_TOKEN"] = %x[bin/start-dev-server.sh].chomp
+  ENV["VAULT_ADDR"] = "https://127.0.0.1:8200"
+  ENV["VAULT_CACERT"] = "fixtures/ssl/ca-chain.cert.pem"
+  raise "Could not start vault dev server" unless $?.success?
   begin
     yield
   ensure
-    devserver_stop
+    system("bin/stop-dev-server.sh")
   end
 end
 
-def assert_no_vault_server
-  require "socket"
-
-  begin
-    Socket.tcp('127.0.0.1', 8200).close
-    raise "can't start devserver; localhost already listening on TCP port 8200"
-  rescue Errno::ECONNREFUSED
-  end
-end
-
-def devserver_start
-  require "open3"
-
-  channel, notify = IO.pipe
-
-  fork do
-    channel.close
-    begin
-      _, stdout, _, wait_thr = Open3.popen3("vault server -dev")
-    rescue
-      notify.puts("Process.exit(0)")
-      raise
-    end
-
-    vault_pid = wait_thr[:pid]
-    notify.puts("ENV['VAULT_PID']='#{vault_pid}'")
-    while line = stdout.gets
-      line.chomp!
-      if line =~ /export VAULT_ADDR='([^']+)'/
-        notify.puts("ENV['VAULT_ADDR']='#{$1}'")
-      elsif line =~ /^Root Token: (.+)/
-        notify.puts("ENV['VAULT_TOKEN']='#{$1}'")
-        notify.close
-        break
-      end
-    end
-    Process.detach(vault_pid)
-    Process.exit(0)
-  end
-
-  notify.close
-  while line = channel.gets
-    line.chomp!
-    eval line
-  end
-  %w[VAULT_PID VAULT_ADDR VAULT_TOKEN].each { |s| $stderr.puts "export #{s}='#{ENV[s]}'" }
-end
-
-def devserver_stop
-  Process.kill("TERM", ENV['VAULT_PID'].to_i)
-end

data/bin/start-dev-server.sh

@@ -0,0 +1,20 @@
+#!/bin/sh -e
+
+vault server -config fixtures/vault.d/configuration.json 1>&2 &
+pid=$!
+echo $pid > fixtures/vault.pid
+
+while ! nc -z 127.0.0.1 8200; do
+	sleep 1
+done
+
+init=$(vault init -ca-cert fixtures/ssl/ca-chain.cert.pem -key-shares=1 -key-threshold=1)
+# Key 1: 3635ffc636e58cd594b588084b599d661487c77d21eed2d5de048898474fac84
+# Initial Root Token: 3c5bece4-c521-0334-2d01-81e91791fe85
+
+key=$(echo "$init" | sed -ne 's/^Key 1: \(.*\)$/\1/p')
+token=$(echo "$init" | sed -ne 's/^Initial Root Token: \(.*\)$/\1/p')
+
+vault unseal -ca-cert fixtures/ssl/ca-chain.cert.pem $key 1>&2
+
+echo $token

data/bin/stop-dev-server.sh

@@ -0,0 +1,4 @@
+#!/bin/sh -e
+
+kill $(cat fixtures/vault.pid)
+rm -f fixtures/vault.pid

data/fixtures/ssl/ca-chain.cert.pem

@@ -0,0 +1,71 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIGMjCCBBqgAwIBAgIJAIPECGxEZLbHMA0GCSqGSIb3DQEBCwUAMIGlMQswCQYD
+VQQGEwJaQTEVMBMGA1UECAwMV2VzdGVybiBDYXBlMRIwEAYDVQQHDAlDYXBlIFRv
+d24xGDAWBgNVBAoMD0hldHpuZXIgUFRZIEx0ZDEuMCwGA1UECwwlSGV0em5lciBQ
+VFkgTHRkIENlcnRpZmljYXRlIEF1dGhvcml0eTEhMB8GA1UEAwwYOkhldHpuZXIg
+UFRZIEx0ZCBSb290IENBMB4XDTE2MDIwNDE0NTAwM1oXDTM2MDEzMDE0NTAwM1ow
+gaUxCzAJBgNVBAYTAlpBMRUwEwYDVQQIDAxXZXN0ZXJuIENhcGUxEjAQBgNVBAcM
+CUNhcGUgVG93bjEYMBYGA1UECgwPSGV0em5lciBQVFkgTHRkMS4wLAYDVQQLDCVI
+ZXR6bmVyIFBUWSBMdGQgQ2VydGlmaWNhdGUgQXV0aG9yaXR5MSEwHwYDVQQDDBg6
+SGV0em5lciBQVFkgTHRkIFJvb3QgQ0EwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw
+ggIKAoICAQDPdYR521NrO6ccGxSCHUukafstCJXKcOKQYSEPMUjlB6r3EwkgUGL9
+h8IdAqQiSvZLtTPpaPVabiA6E1bHYq4NRdqvkUFfJdRQazSEFdYkW4h+koSn/Pyu
+f4qtgf7XyVsd/ZPizmoOB7eYFpycG+YKfRm7wPTwGuVQDlkOG2H20v1UJ3cKybja
+NAuNGdivVIvmC+2uL692O9/dIMHSJ4Jzy2Bzs4fLfzo8NVIjCBKXpItx50Bl+UUu
+ob3XNYe/2Gcxibp9KVqC7fxVOO2/pSmNpA3mR+ghfnuG9BtfXvUxcogV6GYfX7Ou
+iDJ4H3kwLUxjKzEApHuZvq5Pu9RkIcMn8fQ48BGxD0cblv4RY1T1uV7oxq4eLmco
+QFU8DjEC40CwYjnotprQUIlGHsix1hNfcD+4zcM9ua1OXVspmvv0CFxBGg3Zvreu
+RCQbkpfQCj8GnTwOUY9Nk1NyDcOD06+aDau6s8swFbUTaEPeFDD5hamx9jQuo3fp
+swDlgExSHw1jJgoZ6Iceo9QY1tY6AaWY/HA1LlBhtR0qXitIpqtAwB5GW3QddKZL
+tfuLrPlnhU+gn7rj92w/lcKjepxcNp7xyHKwGnGM9ipys9yZkRKBXYSUCfdet2v0
+4j8SBXgxyN65vyKzjdjJe1SszTunnILD451NdznsNtwCYA4I+I+RZwIDAQABo2Mw
+YTAdBgNVHQ4EFgQUSYvHy1JOM8/GBFdoB6RVs4dAhgkwHwYDVR0jBBgwFoAUSYvH
+y1JOM8/GBFdoB6RVs4dAhgkwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMC
+AYYwDQYJKoZIhvcNAQELBQADggIBABXm8BnNAYqztRCjp+7N9G1aYDvJojetN6j+
+e/E7XBadhIJmKOVd0U5XHbj/Cqov0zidZJ5iQG8HIwWIp6MDTaJP6t7QEko9mtkI
+ZYw2G1GkvRcA+mxzkw01blfDr9SA29wZf0IDuOgi4oVMvnm+GKdgVMovTilyVYX8
+5QSUPdF6UJbXEfNSKgzDZJQcTsdrJhBwLkgUoa/X+5JXOy/q+dUm302jDk9jn9+k
+PfX+0uHAVmNf6Y+Ra1zpZ8xseGOujdoGiLO/2K16+J/5bb/51Tx47CLrNRC5j/jG
+AdbGWg1tUUN0ctQopYYNA4tprkXfBLRvQYt5uA09nn9eKI2isyld2Eha09tXsoVv
+uouIO7jvcoZk0sUOAs5L2zA5uT8FTylYInr++dHBZuc81SWPI+0GOUK/SIOLerGD
+5+oMocum6+Qo/PpZhw48Awf3Qy8nFFXpn4dngWoLXWlMMEpWEFIDS5B051tZvViV
+rh3c8goozIIpEeXvxHp42ICBcjw7QLMYviBv2/WcItrrQbviAagxBEhiwZC6jrw5
+gXEcsfuCjc0n+XE/9Tw2aJphWyyXMSvZC46MO3MHG7s5Wlpu205k6yrEb8XryWBG
+q0xrZ0afHa4FM3oRxhSgonYQuX4K/aIdT1qzUrf/69jMgbGbnPo5xFS54I7+JtkZ
+iP9EjJlQ
+-----END CERTIFICATE-----

data/fixtures/ssl/localhost.cert.pem

@@ -0,0 +1,41 @@
+-----BEGIN CERTIFICATE-----
+MIIHMzCCBRugAwIBAgICEAYwDQYJKoZIhvcNAQELBQAwgZgxCzAJBgNVBAYTAlpB
+MRUwEwYDVQQIDAxXZXN0ZXJuIENhcGUxGDAWBgNVBAoMD0hldHpuZXIgUFRZIEx0
+ZDEuMCwGA1UECwwlSGV0em5lciBQVFkgTHRkIENlcnRpZmljYXRlIEF1dGhvcml0
+eTEoMCYGA1UEAwwfSGV0em5lciBQVFkgTHRkIEludGVybWVkaWF0ZSBDQTAeFw0x
+NjAyMDYwNzM4MzRaFw0xOTAyMDUwNzM4MzRaMGYxCzAJBgNVBAYTAlpBMRUwEwYD
+VQQIDAxXZXN0ZXJuIENhcGUxEjAQBgNVBAcMCUNhcGUgVG93bjEYMBYGA1UECgwP
+SGV0em5lciBQVFkgTHRkMRIwEAYDVQQDDAlsb2NhbGhvc3QwggIiMA0GCSqGSIb3
+DQEBAQUAA4ICDwAwggIKAoICAQDgg2W2IhdqdSreSP39MK5aayGHMVl944LNa4BY
+ahTwi2AT8AgYDvQxByr+j9dzLr7qmMbFtTqFDr/YFIKxaIqpkfWKamrkhqI9n3ZL
+pBMN5PQ3/rKNy60EzCQeJNl/XbsFsgA1Kyd8DhbFeAHYB4TTxCXACFsukJIRehLP
+0sdasAnvjMUXzhOfusq0YU8iGBP14yFQqH0/YWTBrrIiSusu/0Ktb2RaCcYu35sd
+pjQhqmpqnW4uR1swF0zZyYB89T0Kj69SdgATIdPs3O7LCKCZLG+pD0xBmcveZAlL
+e/GUmjHMYI1TDlODDOfpvonJazC5AElJI24jmBbUKlwwDyhkDXRpPkkgmVmLQBy0
+UY4zw2FXyrpEqrO97Di4ZwBmfiiVaMW8eWXQsf0ROBV0m7lUBlw1VLKvWgpT8pgX
+WwmZ6xDWOxPJ4bifWFiTa79KzMLxQv+O29pfaUlLUnoSkyaeMYhGVYKepWkUSrvG
+7ABNBgd1iNCZer8kDe4rYWnhhfgN/RoRJd77vRVTbIhGd6YOB88tdLHGKgjr89fc
+zAurd/qJ3XsNHa/pNF09/YK9dbREErYkVloJEqH7UtQx+cWrlrBiDjnK9hV3HvuZ
+0GxR3KlNB5UjZArnUPNgtCsZxcA0D8o7eHMRh7QQgV8CPI6xCsNy9fHLPzXcGgGL
+gtOIDwIDAQABo4IBtjCCAbIwCQYDVR0TBAIwADARBglghkgBhvhCAQEEBAMCBkAw
+MwYJYIZIAYb4QgENBCYWJE9wZW5TU0wgR2VuZXJhdGVkIFNlcnZlciBDZXJ0aWZp
+Y2F0ZTAdBgNVHQ4EFgQUiNbH+6oNwexJZ64b04Cf7aR+tvMwgdMGA1UdIwSByzCB
+yIAUydg3i3yQn2V9nxRGTOTDZD4VyjqhgaukgagwgaUxCzAJBgNVBAYTAlpBMRUw
+EwYDVQQIDAxXZXN0ZXJuIENhcGUxEjAQBgNVBAcMCUNhcGUgVG93bjEYMBYGA1UE
+CgwPSGV0em5lciBQVFkgTHRkMS4wLAYDVQQLDCVIZXR6bmVyIFBUWSBMdGQgQ2Vy
+dGlmaWNhdGUgQXV0aG9yaXR5MSEwHwYDVQQDDBg6SGV0em5lciBQVFkgTHRkIFJv
+b3QgQ0GCAhAAMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATBD
+BgNVHREEPDA6gglsb2NhbGhvc3SCFWxvY2FsaG9zdC5sb2NhbGRvbWFpbocEfwAA
+AYcQAAAAAAAAAAAAAAAAAAAAATANBgkqhkiG9w0BAQsFAAOCAgEAzuMx9N9li+3d
+JU1e3LSsQ4DqpVYIoFjJ0q7HkyzLZME51O+WuGJwIufEVWykwxtbNbHX6DfGHf+M
+BF7DGxaza8UKQvv5P9DeIfGhvJtczARENVpqwKnR+Ior1UGv+QNVLDblXCLLqn08
+EmHdof6BRoyas3IboWV7fIbUPMhMEO2NBcuULFs4NcqTYdyAyID9yz3a4+63dqZq
+uYCaFDViRshjtqnmnWQtWnUx9miP8PEnBWNUSIeXnAa8HhN2HWWuL+4pp5j6UOZt
+BcdtvS8ho/6vgxrA4YZNkhg+3wjJLvuKKZGhtqG7ZaD3nohOFIQkay1DVkVQsmEF
+fbLZmhDx4HmZgpdD8LMQctN5FvkLFEm5VyLHJy3bvJxJsekvxge8OcrL6vnONvix
+0pqR/y1RpM40q99HmRq7Z0OpKhoH41ta4D01m0v5KgqrKWG52zNM7UmXzf3T+HEl
+HR7mCV9TnvLKLcLU9r321QmVoPR7soVvRblwfA4yx14yYysTWPm044esp9Rn2quH
+oEB0+JHqOPxC6xiXLc6qloQI2V2yj+sfQEUEzY9M2o7tpQHQmdnd4JAka/Hw/DaB
+LkrZ1CR+O2u9Y8Gsnxt6+f2R8o2+mlo6EPtDzhpc0pau4yVLmzQiigj/GoewjrOV
+oZTKK8bcH9Cet4BEDZJw6lG7m4PEYbo=
+-----END CERTIFICATE-----

data/fixtures/ssl/localhost.key.pem

@@ -0,0 +1,51 @@
+-----BEGIN RSA PRIVATE KEY-----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==
+-----END RSA PRIVATE KEY-----

data/fixtures/vault.d/configuration.json

@@ -0,0 +1,16 @@
+{
+  "disable_mlock": true,
+  "default_lease_ttl": "24h",
+  "max_lease_ttl": "24h",
+  "backend": {
+    "inmem":{
+    }
+  },
+  "listener": {
+    "tcp": {
+      "address":"127.0.0.1:8200",
+      "tls_cert_file":"./fixtures/ssl/localhost.cert.pem",
+      "tls_key_file":"./fixtures/ssl/localhost.key.pem"
+     }
+  }
+}

data/lib/configuration_service/provider/vault.rb

@@ -17,13 +17,20 @@ module ConfigurationService
     #
     class Vault
 
+      ##
+      # @private
+      SSL_CIPHERS = "TLSv1.2+HIGH:!aNULL:!eNULL"
+
       ##
       # @param [Hash] options
       # @option options [String] :address {https://vaultproject.io HashiCorp Vault} HTTP service URL
       def initialize(options = {})
         address = options[:address] or raise ArgumentError, "missing required argument: address"
         @vault = ::Vault::Client.new(address: address)
-        @vault.ssl_ciphers = "TLSv1.2+HIGH:!aNULL:!eNULL"
+        @vault.ssl_ciphers = SSL_CIPHERS
+        if ca_cert = options[:ca_cert]
+          @vault.ssl_ca_cert = ca_cert
+        end
       end
 
       ##

data/lib/configuration_service/provider/vault/version.rb

@@ -4,7 +4,7 @@ module ConfigurationService
 
     class Vault
 
-      VERSION = "2.0.11"
+      VERSION = "2.0.12"
 
     end
 

data/lib/configuration_service/test/vault_admin_client.rb

@@ -17,14 +17,16 @@ module ConfigurationService
       ##
       # A new instance of VaultAdminClient
       #
-      # It expects a development mode Vault instance listening at +http://127.0.0.1:8200+ and expects a root token for that
-      # instance in the +VAULT_TOKEN+ envinronment variable.
+      # It expects a development mode Vault instance listening at +https://127.0.0.1:8200+ and expects a root token for that
+      # instance in the +VAULT_TOKEN+ envinronment variable. Accepts the +VAULT_ADDR+ and +VAULT_CACERT+ environment
+      # variables if present.
       #
-      def initialize
+      def initialize(options = {})
         if ENV["VAULT_TOKEN"] and File.exists?("#{ENV["HOME"]}/.vault-token")
           $stderr.puts "warning: ~/.vault-token overrides VAULT_TOKEN environment variable"
         end
         @vault = ::Vault::Client.new
+        @vault.ssl_ciphers = ConfigurationService::Provider::Vault::SSL_CIPHERS
       end
 
       ##

data/lib/configuration_service/test/vault_orchestration_provider.rb

@@ -29,13 +29,13 @@ module ConfigurationService
       # @see http://www.rubydoc.info/gems/configuration_service/ConfigurationService/Test/OrchestrationProvider#service_provider_configuration-instance_method ConfigurationService::Test::OrchestrationProvider#service_provider_configuration
       #
       def service_provider_configuration
-        {address: "http://127.0.0.1:8200"}
+        {address: (ENV["VAULT_ADDR"] || "https://127.0.0.1:8200"), ca_cert: (ENV["VAULT_CACERT"] || "fixtures/ssl/ca-chain.cert.pem")}
       end
 
       ##
       # The service provider under test
       #
-      # @see ihttp://localhost:8808/docs/ConfigurationService/Test/VaultOrchestrationProvider#service_provider-instance_method ConfigurationService::Test::OrchestrationProvider#service_provider
+      # @see http://localhost:8808/docs/ConfigurationService/Test/VaultOrchestrationProvider#service_provider-instance_method ConfigurationService::Test::OrchestrationProvider#service_provider
       #
       def service_provider
         ConfigurationService::Provider::Vault.new(service_provider_configuration)
@@ -47,7 +47,7 @@ module ConfigurationService
       # @see http://localhost:8808/docs/ConfigurationService/Test/VaultOrchestrationProvider#broken_service_provider-instance_method ConfigurationService::Test::OrchestrationProvider#broken_service_provider
       #
       def broken_service_provider
-        ConfigurationService::Provider::Vault.new(address: "http://127.0.0.1:8201")
+        ConfigurationService::Provider::Vault.new(address: "https://127.0.0.1:8201")
       end
 
       ##

metadata

@@ -1,94 +1,94 @@
 --- !ruby/object:Gem::Specification
 name: configuration_service-provider-vault
 version: !ruby/object:Gem::Version
-  version: 2.0.11
+  version: 2.0.12
 platform: ruby
 authors:
 - Sheldon Hearn
-autorequire: 
+autorequire:
 bindir: exe
 cert_chain: []
-date: 2016-02-02 00:00:00.000000000 Z
+date: 2016-02-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
-  name: vault
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '0.2'
-  type: :runtime
+  name: vault
   prerelease: false
+  type: :runtime
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '0.2'
 - !ruby/object:Gem::Dependency
-  name: configuration_service
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
         version: 2.0.5
-  type: :runtime
+  name: configuration_service
   prerelease: false
+  type: :runtime
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
         version: 2.0.5
 - !ruby/object:Gem::Dependency
-  name: bundler
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.7'
-  type: :development
+  name: bundler
   prerelease: false
+  type: :development
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.7'
 - !ruby/object:Gem::Dependency
-  name: rake
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '10.0'
-  type: :development
+  name: rake
   prerelease: false
+  type: :development
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '10.0'
 - !ruby/object:Gem::Dependency
-  name: cucumber
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '2.0'
-  type: :development
+  name: cucumber
   prerelease: false
+  type: :development
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '2.0'
 - !ruby/object:Gem::Dependency
-  name: rspec-expectations
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '3.3'
-  type: :development
+  name: rspec-expectations
   prerelease: false
+  type: :development
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
@@ -111,11 +111,17 @@ files:
 - Rakefile
 - bin/console
 - bin/setup
+- bin/start-dev-server.sh
+- bin/stop-dev-server.sh
 - contrib/.gitignore
 - contrib/README.md
 - contrib/authorize.rb
 - contrib/publish.rb
 - contrib/request.rb
+- fixtures/ssl/ca-chain.cert.pem
+- fixtures/ssl/localhost.cert.pem
+- fixtures/ssl/localhost.key.pem
+- fixtures/vault.d/configuration.json
 - lib/configuration_service/provider/vault.rb
 - lib/configuration_service/provider/vault/path_helper.rb
 - lib/configuration_service/provider/vault/version.rb
@@ -124,7 +130,7 @@ files:
 homepage: https://github.com/hetznerZA/configuration_service-provider-vault
 licenses: []
 metadata: {}
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -132,16 +138,16 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '0'
+      version: '2.0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.5.1
-signing_key: 
+rubyforge_project:
+rubygems_version: 2.4.8
+signing_key:
 specification_version: 4
 summary: Vault provider for Configuration Service
 test_files: []