digicert 0.1.0 → 0.1.1

data/spec/fixtures/rsa4096.key

@@ -0,0 +1,51 @@
+-----BEGIN RSA PRIVATE KEY-----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==
+-----END RSA PRIVATE KEY-----

data/spec/requests/certificate_duplication_spec.rb

@@ -0,0 +1,41 @@
+require "spec_helper"
+
+RSpec.describe "Certificate Duplication" do
+  describe "duplicate an existing certificate", api_call: true do
+    it "duplicates an existing nonexpired certificate order" do
+      duplication = Digicert::OrderDuplicator.create(order_id: recent_order.id)
+      duplicate_certificate = Digicert::DuplicateCertificateFinder.find_by(
+        request_id: duplication.requests.first.id,
+      )
+
+      expect(
+        order.duplicate_certificates.map(&:id),
+      ).to include(duplicate_certificate.id)
+    end
+  end
+
+  # Create a order class instance
+  #
+  # This helper create an instance for the order, so we can invoke the
+  # order's instance method to access the duplicate certificates
+  #
+  def order
+    @order ||= Digicert::Order.find(recent_order.id)
+  end
+
+  # Recent order
+  #
+  # All of the certifacate are not duplicable, from the test we can say
+  # for sure that the wilcard certifacate are duplicable. This spec assume
+  # the last order to be a ssl wildcard, if it fails then please run the
+  # `order_ssl_wildcard` request specs to create one and then re-run this
+  # spec again.
+  #
+  def recent_order
+    @recent_order ||= orders.first
+  end
+
+  def orders
+    Digicert::Order.all
+  end
+end

data/spec/requests/certificate_generation_spec.rb

@@ -0,0 +1,93 @@
+require "spec_helper"
+
+RSpec.describe "Certificate Generation" do
+  describe "generation process", api_call: true do
+    it "creates and download a certificate" do
+      product_name_id = "ssl_plus"
+
+      # Retrieve the product details uisng the
+      # name id specificed for that specific one
+      #
+      product = Digicert::Product.fetch(product_name_id)
+
+      # Reqeust a new certificate using the order creation
+      # interface by providing t`name_id` and required attributes
+      #
+      order_request = Digicert::Order.create(
+        product.name_id, order_attributes
+      )
+
+      # Retrieve order details using the order_request id as
+      # it should contains the `certifcate`, so we then can
+      # download the generated certificate
+      #
+      order = Digicert::Order.fetch(order_request.id)
+
+      # Digicert requires some time to issue the certificate, but it's
+      # pretty quick in the development environment and typilcally it
+      # issues within couple of seconds. Let's order status and if that
+      # has not been issued yet then let's wait 10 seconds in dev env.
+      #
+      # In the production use please use the `Digicert::Reqeust` incase
+      # you need to do anything related to the request.
+      #
+      if order.status != "issued"
+        sleep 10
+      end
+
+      # Now that we have the certicate orders detials with
+      # the certificate id and the order status, so let's assume
+      # all requiremetns are meet and let's fetch the certificate
+      #
+      certificate_id = order.certificate.id
+      certificate = Digicert::Certificate.find(certificate_id)
+      certificate_content = certificate.download
+
+      # Let's also cleanup the certifcate by requesting and approving
+      # the revocation for the certificate.
+      certifcate.revoke
+
+      # Normally zip archieves content starts with `PK` and then
+      # the content of the files inside the zip folder
+      #
+      # Source: http://filext.com/faq/look_into_files.php
+      #
+      expect(certificate_content.body.start_with?("PK")).to be_truthy
+    end
+  end
+
+  def common_name
+    "test.ribosetest.com"
+  end
+
+  def ribose_inc
+    @ribose_inc ||= organizations.first
+  end
+
+  def order_attributes
+    {
+      validity_years: 1,
+      certificate: certificate_attributes,
+      organization: { id: ribose_inc.id },
+    }
+  end
+
+  def certificate_attributes
+    {
+      common_name: common_name,
+      csr: csr_content_for_ribosetest.to_s,
+      signature_hash: "sha256",
+      server_platform: { id: 2 },
+    }
+  end
+
+  def csr_content_for_ribosetest
+    @csr_content ||= Digicert::CSRGenerator.generate(
+      common_name: common_name, organization: ribose_inc,
+    )
+  end
+
+  def organizations
+    Digicert::Organization.all
+  end
+end

data/spec/requests/certificate_reissuing_spec.rb

@@ -0,0 +1,38 @@
+require "spec_helper"
+
+RSpec.describe "Reissuing Certificate" do
+  describe "reissue" do
+    it "reissues an existing nonexpired certificate", api_call: true do
+
+      # This tests will find the last created certificate order and
+      # then will try to reissue that, but one important thing to note
+      # that digicert only allows expects active certificate to reissue
+      # and normally every certificate in test environment gets expired
+      # in 3 days.
+      #
+      # So, if this fails, then please to run the certificate generation
+      # test first, which will create a new order and then try this agian
+      # and it should work like a charm
+      #
+      reissue = Digicert::OrderReissuer.create(order_id: recent_order.id)
+
+      # Let's fetch the details for the new request and that way we can
+      # verify that this reissues has the proper request type and then
+      # we can do the further tasks on it.
+      #
+      request_id = reissue.requests.first.id
+      certificate_request = Digicert::CertificateRequest.fetch(request_id)
+
+      expect(reissue.id).to eq(recent_order.id)
+      expect(certificate_request.type).to eq("reissue")
+    end
+  end
+
+  def recent_order
+    @recent_order ||= orders.first
+  end
+
+  def orders
+    @orders ||= Digicert::Order.all
+  end
+end

data/spec/requests/container_management_spec.rb

@@ -0,0 +1,36 @@
+require "spec_helper"
+
+RSpec.describe "Container Management" do
+  describe "fetching a container template", api_call: true do
+    it "fetches the first container template details" do
+      templates = Digicert::ContainerTemplate.all(container_id)
+      template = Digicert::ContainerTemplate.fetch(
+        template_id: templates.first.id, container_id: container_id,
+      )
+
+      expect(template.name).to eq("Business Unit")
+      expect(template.access_roles.first.name).to eq("Administrator")
+    end
+  end
+
+  describe "fetching a container details", api_call: true do
+    it "retrieves the details for a container" do
+      container = Digicert::Container.fetch(container_id)
+
+      expect(container.is_active).to eq(true)
+      expect(container.name).to eq("Ribose Inc.")
+    end
+  end
+
+  def container_id
+    @container_id ||= containers.first.id
+  end
+
+  def containers
+    # We are making this API call intentionally, this
+    # ensures the listing containers API is working as
+    # it should have as long as there are no errors.
+    #
+    @containers ||= Digicert::Container.all
+  end
+end

data/spec/requests/domain_management_spec.rb

@@ -0,0 +1,64 @@
+require "spec_helper"
+
+RSpec.describe "Domain Management" do
+  describe "managing a domains", api_call: true do
+    it "create, activate and deactives a domain" do
+      # Create a new domain using the `.create` interface,
+      # please remember if the domain is already exists then
+      # it will return that domain object, but if not then it
+      # will create add a new domain to your organization.
+      #
+      domain = Digicert::Domain.create(domain_attributes)
+
+      # Let's play with the domain, let's try to deactivate
+      # first and then reactivate it.
+      domain = Digicert::Domain.find(domain.id)
+
+      # Deactivate the domain
+      domain.deactivate
+
+      # Reactivate the domain
+      domain.activate
+
+      # Refresh the doamin we have been dealing with, and this
+      # call will also ensures the `fetch` api is working as
+      # expcted as long as it does not fails
+      #
+      domain = domain.fetch
+
+      expect(domain.is_active).to eq(true)
+      expect(domain.id).to eq(domains.last.id)
+      expect(domain.name).to eq(ribose_test_domain)
+      expect(domain.organization.name).to eq("Ribose Inc.")
+    end
+  end
+
+  def ribose_test_domain
+    @ribose_test_domain ||= "ribose.test"
+  end
+
+  def domain_attributes
+    {
+      dcv: { method: "email" },
+      name: ribose_test_domain,
+      organization: { id: organization_id },
+      validations: [{ type: "OV", user: { id: administrator_id }}],
+    }
+  end
+
+  def domains
+    # Call to this method will peform an actual API call
+    # to list all the existing domains, so returning the
+    # correct response ensures the `.all` interface is ok.
+    #
+    @domains ||= Digicert::Domain.all
+  end
+
+  def organization_id
+    ENV["DIGICERT_ORGANIZATION_ID"]
+  end
+
+  def administrator_id
+    ENV["DIGICERT_ADMINISTRATOR_ID"]
+  end
+end

data/spec/requests/order_client_email_security_plus_spec.rb

@@ -0,0 +1,38 @@
+require "spec_helper"
+
+RSpec.describe "Order client email security plus" do
+  describe "ordering client email security plus", api_call: true do
+    it "creates a new order for client email security plus" do
+      product_name_id = "email_security_plus"
+
+      # Reqeust a new email security plus using the order creation
+      # interface with `product_name_id` and required attributes
+      #
+      order_request = Digicert::Order.create(
+        product_name_id, order_attributes,
+      )
+
+      puts order_request
+    end
+  end
+
+  def ribose_inc
+    @ribose_inc ||= Digicert::Organization.all.first
+  end
+
+  def order_attributes
+    {
+      validity_years: 3,
+      certificate: certificate_attributes,
+      organization: { id: ribose_inc.id },
+    }
+  end
+
+  def certificate_attributes
+    {
+      common_name: "John Doe",
+      signature_hash: "sha256",
+      emails: ["johndoe@ribosetest.com"],
+    }
+  end
+end

data/spec/requests/order_management_spec.rb

@@ -0,0 +1,24 @@
+require "spec_helper"
+
+RSpec.describe "Order Management" do
+  describe "retrieving a certificate order", api_call: true do
+    it "retrieves the details for a specific certificate order" do
+      order = Digicert::Order.fetch(order_id)
+
+      expect(order.product_name_id).to eq("ssl_plus")
+      expect(order.certificate.common_name).to eq("ribosetest.com")
+      expect(order.organization.display_name).to eq("Ribose Inc.")
+    end
+  end
+
+  def order_id
+    @order_id ||= orders.first.id
+  end
+
+  def orders
+    # We are intentionally making this API call to ensure
+    # the `Order.all` interface is working as it should have.
+    #
+    @orders ||= Digicert::Order.all
+  end
+end

data/spec/requests/order_ssl_ev_plus_spec.rb

@@ -0,0 +1,57 @@
+require "spec_helper"
+
+RSpec.describe "Order SSl EV Plus" do
+  describe "ording ssl ev plus certificate", api_call: true do
+    it "creates a new order fro ssl ev plus certificate" do
+      product_name_id = "ssl_ev_plus"
+
+      # Reqeust a new certificate using the order creation
+      # interface by providing t`name_id` and required attributes
+      #
+      order_request = Digicert::Order.create(
+        product_name_id, order_attributes,
+      )
+
+      # Retrieve order details using the order_request id as
+      # it should contains the `certifcate`, so we then can
+      # download the generated certificate
+      #
+      order = Digicert::Order.fetch(order_request.id)
+
+      expect(order.product.name).to eq("EV SSL Plus")
+      expect(order.certificate.common_name).to eq(common_name)
+      expect(order.organization.display_name).to eq(ribose_inc.display_name)
+    end
+  end
+
+  def common_name
+    "ribosetest.com"
+  end
+
+  def order_attributes
+    {
+      validity_years: 1,
+      certificate: certificate_attributes,
+      organization: { id: ribose_inc.id },
+    }
+  end
+
+  def ribose_inc
+    @ribose_inc ||= Digicert::Organization.all.first
+  end
+
+  def certificate_attributes
+    {
+      common_name: common_name,
+      signature_hash: "sha256",
+      csr: csr_content_for_ribosetest,
+      server_platform: { id: 2 }
+    }
+  end
+
+  def csr_content_for_ribosetest
+    @csr_content ||= Digicert::CSRGenerator.generate(
+      common_name: common_name, organization: ribose_inc,
+    )
+  end
+end