cryptopro 0.0.1

data/.gitignore

@@ -0,0 +1,4 @@
+*.gem
+.bundle
+Gemfile.lock
+pkg/*

data/Gemfile

@@ -0,0 +1,4 @@
+source "http://rubygems.org"
+
+# Specify your gem's dependencies in cryptopro.gemspec
+gemspec

data/Rakefile

@@ -0,0 +1,2 @@
+require 'bundler'
+Bundler::GemHelper.install_tasks

data/cryptopro.gemspec

@@ -0,0 +1,23 @@
+# -*- encoding: utf-8 -*-
+$:.push File.expand_path("../lib", __FILE__)
+require "cryptopro/version"
+
+Gem::Specification.new do |s|
+  s.name        = "cryptopro"
+  s.version     = Cryptopro::VERSION
+  s.platform    = Gem::Platform::RUBY
+  s.authors     = ["divineforest"]
+  # s.email       = ["TODO: Write your email address"]
+  s.homepage    = ""
+  s.summary     = %q{CryptoPro ruby-wrapper for linux}
+  # s.description = %q{TODO: Write a gem description}
+
+  s.rubyforge_project = "cryptopro"
+
+  s.files         = `git ls-files`.split("\n")
+  s.test_files    = `git ls-files -- {test,spec,features}/*`.split("\n")
+  s.executables   = `git ls-files -- bin/*`.split("\n").map{ |f| File.basename(f) }
+  s.require_paths = ["lib"]
+
+  s.add_dependency "cocaine"
+end

data/lib/cryptopro.rb

@@ -0,0 +1,4 @@
+require 'cryptopro/signature'
+
+module Cryptopro
+end

data/lib/cryptopro/MIT-LICENSE

@@ -0,0 +1,20 @@
+Copyright 2011 YOURNAME
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/lib/cryptopro/README.textile

@@ -0,0 +1,19 @@
+h1. CryptoPro
+
+ruby-wrapper for *nix CryptoPro CSP command line utility cryptcp
+
+Ruby-обёртка для утилиты командной строки cryptcp от CryptoPro CSP в никсах.
+Позволяет легко работать с ЭЦП из ruby.
+
+h1. Использование
+
+В Gemfile:
+
+    gem 'cryptopro'
+
+В коде:
+
+    Cryptopro::Signature.verify(:message => "message", :signature => "signature", :certificate => "certificate")
+
+Copyright (c) 2011 divineforest, evrone
+This project rocks and uses MIT-LICENSE.

data/lib/cryptopro/signature.rb

@@ -0,0 +1,82 @@
+require 'tmpdir'
+require 'digest/md5'
+require 'cocaine'
+
+module Cryptopro
+  class Signature
+    MESSAGE_FILE_NAME = "message.txt"
+    # Должен называться как файл с сообщением, только расширение .sgn
+    SIGNATURE_FILE_NAME = "message.txt.sgn"
+    CERTIFICATE_FILE_NAME = "certificate.cer"
+
+    CERTIFICATE_LINE_LENGTH = 64
+
+    # Options: message, signature, certificate
+    def self.verify(options)
+      raise "Message required" if (options[:message].nil? || options[:message] == "")
+      raise "Signature required" if (options[:signature].nil? || options[:signature] == "")
+      raise "Certificate required" if (options[:certificate].nil? || options[:certificate] == "")
+
+      tmp_dir = create_temp_dir
+      create_temp_files(tmp_dir, options)
+      valid = execute(tmp_dir)
+    end
+
+    private
+
+      # Для работы с cryptcp требуется, чтобы сообщение, полпись и сертификат были в виде файлов
+      # Создаётся временная уникальная папка для каждой проверки
+      def self.create_temp_dir
+        uniq_name = Digest::MD5.hexdigest("#{rand(1_000_000)}#{Time.now}")
+        full_name = "#{Dir.tmpdir}/cryptcp/#{uniq_name}"
+        FileUtils.mkdir_p(full_name)
+      end
+
+      def self.create_temp_files(tmp_dir, options)
+        # Создать файл сообщения
+        create_temp_file(tmp_dir, MESSAGE_FILE_NAME, options[:message])
+        # Создать файл подписи
+        create_temp_file(tmp_dir, SIGNATURE_FILE_NAME, options[:signature])
+        # Создать файл сертификата
+        certificate_with_container = add_container_to_certificate(options[:certificate])
+        create_temp_file(tmp_dir, CERTIFICATE_FILE_NAME, certificate_with_container)
+      end
+
+      def self.create_temp_file(dir_name, file_name, content)
+        File.open("#{dir_name}/#{file_name}", "w") { |file| file.write(content) }
+      end
+
+      # Обсуждение формата использования: http://www.cryptopro.ru/forum2/Default.aspx?g=posts&t=1516
+      # Пример вызова утилиты cryptcp:
+      # cryptcp -vsignf -dir /home/user/signs -f certificate.cer message.txt
+      # /home/user/signs -- папка с подписью, имя которой соответствуют имени сообщения, но с расширением .sgn
+      def self.execute(dir)
+        cmd = "cryptcp -vsignf -dir #{dir} -f #{dir}/#{CERTIFICATE_FILE_NAME} -nochain #{dir}/#{MESSAGE_FILE_NAME}"
+        line = Cocaine::CommandLine.new("cryptcp", "-vsignf -dir :signatures_dir -f :certificate -nochain :message",
+          :signatures_dir => dir,
+          :certificate => "#{dir}/#{CERTIFICATE_FILE_NAME}",
+          :message => "#{dir}/#{MESSAGE_FILE_NAME}"
+        )
+        begin
+          line.run
+          true
+        rescue Cocaine::ExitStatusError
+          false
+        rescue Cocaine::CommandNotFoundError => e
+          raise "Команда cryptcp не найдена"
+        end
+      end
+
+      # Добавляет -----BEGIN CERTIFICATE----- / -----END CERTIFICATE-----, если их нет.
+      # Так же делит длинную строку Base64 на строки по 64 символа.
+      # Это требование cryptcp к файл с сертификатом.
+      def self.add_container_to_certificate(certificate)
+        return certificate if certificate.downcase.include?("begin")
+
+        parts = certificate.scan(/.{1,#{CERTIFICATE_LINE_LENGTH}}/)
+        certificate_with_container = "-----BEGIN CERTIFICATE-----\n#{parts.join("\n")}\n-----END CERTIFICATE-----"
+      end
+
+  end
+
+end

data/lib/cryptopro/version.rb

@@ -0,0 +1,3 @@
+module Cryptopro
+  VERSION = "0.0.1"
+end

metadata

@@ -0,0 +1,88 @@
+--- !ruby/object:Gem::Specification 
+name: cryptopro
+version: !ruby/object:Gem::Version 
+  hash: 29
+  prerelease: 
+  segments: 
+  - 0
+  - 0
+  - 1
+  version: 0.0.1
+platform: ruby
+authors: 
+- divineforest
+autorequire: 
+bindir: bin
+cert_chain: []
+
+date: 2011-10-31 00:00:00 +03:00
+default_executable: 
+dependencies: 
+- !ruby/object:Gem::Dependency 
+  name: cocaine
+  prerelease: false
+  requirement: &id001 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        hash: 3
+        segments: 
+        - 0
+        version: "0"
+  type: :runtime
+  version_requirements: *id001
+description: 
+email: 
+executables: []
+
+extensions: []
+
+extra_rdoc_files: []
+
+files: 
+- .gitignore
+- Gemfile
+- Rakefile
+- cryptopro.gemspec
+- lib/cryptopro.rb
+- lib/cryptopro/MIT-LICENSE
+- lib/cryptopro/README.textile
+- lib/cryptopro/signature.rb
+- lib/cryptopro/version.rb
+has_rdoc: true
+homepage: ""
+licenses: []
+
+post_install_message: 
+rdoc_options: []
+
+require_paths: 
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement 
+  none: false
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      hash: 3
+      segments: 
+      - 0
+      version: "0"
+required_rubygems_version: !ruby/object:Gem::Requirement 
+  none: false
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      hash: 3
+      segments: 
+      - 0
+      version: "0"
+requirements: []
+
+rubyforge_project: cryptopro
+rubygems_version: 1.6.2
+signing_key: 
+specification_version: 3
+summary: CryptoPro ruby-wrapper for linux
+test_files: []
+