epics 2.9.0 → 2.10.0

data/lib/letter/locales/de.yml

@@ -9,6 +9,7 @@ de:
       exponent: Exponent
       modulus: Modulus
       hash: Hash
+      certificate: Zertifikat
       bit: '%{bit} Bit'
       issued_in: Ort/Datum
       name: Name/Firma

data/lib/letter/locales/en.yml

@@ -9,6 +9,7 @@ en:
       exponent: Exponent
       modulus: Modulus
       hash: Hash
+      certificate: Certificate
       bit: '%{bit} Bit'
       issued_in: Location/Date
       name: Name/Company

data/lib/letter/locales/fr.yml

@@ -9,6 +9,7 @@ fr:
       exponent: Exponent
       modulus: Modulus
       hash: Hash
+      certificate: Certificat
       bit: '%{bit} Bit'
       issued_in: Lieu/Date
       name: Nom/Société

data/spec/client_spec.rb

@@ -1,6 +1,6 @@
 RSpec.describe Epics::Client do
-
-  subject { described_class.new( File.read(File.join( File.dirname(__FILE__), 'fixtures', 'SIZBN001.key')), 'secret' , 'https://194.180.18.30/ebicsweb/ebicsweb', 'SIZBN001', 'EBIX', 'EBICS') }
+  subject { described_class.new(key, 'secret', 'https://194.180.18.30/ebicsweb/ebicsweb', 'SIZBN001', 'EBIX', 'EBICS') }
+  let(:key) { File.read(File.join(File.dirname(__FILE__), 'fixtures', 'SIZBN001.key')) }
 
   describe 'attributes' do
     it { expect(subject.host_id).to eq('SIZBN001') }
@@ -12,14 +12,18 @@ RSpec.describe Epics::Client do
 
     it 'holds all keys, user and bank' do
       expect(subject.keys).to match(a_hash_including(
-        "E002" => be_a(Epics::Key),
-        "X002" => be_a(Epics::Key),
-        "A006" => be_a(Epics::Key),
-        "SIZBN001.E002" => be_a(Epics::Key),
-        "SIZBN001.X002" => be_a(Epics::Key)
-      ))
+                                      'E002' => be_a(Epics::Key),
+                                      'X002' => be_a(Epics::Key),
+                                      'A006' => be_a(Epics::Key),
+                                      'SIZBN001.E002' => be_a(Epics::Key),
+                                      'SIZBN001.X002' => be_a(Epics::Key)
+                                    ))
     end
 
+    it 'assigns x_509_certificates_content' do
+      subject.x_509_certificates_content = { a: 'cert_a', x: 'cert_x', e: 'cert_e' }
+      expect(subject.x_509_certificates_content).to eq({ a: 'cert_a', x: 'cert_x', e: 'cert_e' })
+    end
   end
 
   context 'environment settings' do
@@ -54,41 +58,43 @@ RSpec.describe Epics::Client do
 
   describe '#e' do
     it 'the encryption key' do
-      expect(subject.e.public_digest).to eq("rwIxSUJAVEFDQ0sdYe+CybdspMllDG6ArNtdCzUbT1E=")
+      expect(subject.e.public_digest).to eq('rwIxSUJAVEFDQ0sdYe+CybdspMllDG6ArNtdCzUbT1E=')
     end
   end
 
   describe '#x' do
     it 'the signing key' do
-      expect(subject.x.public_digest).to eq("Jjcu97qg595PPn+0OvqBOBIskMIiStNYYXyjgWHeBhE=")
+      expect(subject.x.public_digest).to eq('Jjcu97qg595PPn+0OvqBOBIskMIiStNYYXyjgWHeBhE=')
     end
   end
 
   describe '#a' do
     it 'the authentication key' do
-      expect(subject.a.public_digest).to eq("9ay3tc+I3MgJBaroeD7XJfOtHcq7IR23fljWefl0dzk=")
+      expect(subject.a.public_digest).to eq('9ay3tc+I3MgJBaroeD7XJfOtHcq7IR23fljWefl0dzk=')
     end
   end
 
   describe '#bank_e' do
     it 'the banks encryption key' do
-      expect(subject.bank_e.public_digest).to eq("dFAYe281vj9NB7w+VoWIdfHnjY9hNbZLbHsDOu76QAE=")
+      expect(subject.bank_e.public_digest).to eq('dFAYe281vj9NB7w+VoWIdfHnjY9hNbZLbHsDOu76QAE=')
     end
   end
 
   describe '#bank_x' do
     it 'the banks signing key' do
-      expect(subject.bank_x.public_digest).to eq("dFAYe281vj9NB7w+VoWIdfHnjY9hNbZLbHsDOu76QAE=")
+      expect(subject.bank_x.public_digest).to eq('dFAYe281vj9NB7w+VoWIdfHnjY9hNbZLbHsDOu76QAE=')
     end
   end
 
   describe '#order_types' do
     before do
-      allow(subject).to receive(:download).and_return( File.read(File.join(File.dirname(__FILE__), 'fixtures', 'xml', 'htd_order_data.xml')))
+      allow(subject).to receive(:download).and_return(File.read(File.join(File.dirname(__FILE__), 'fixtures', 'xml',
+                                                                          'htd_order_data.xml')))
     end
 
     it 'extracts the accessible order types of a subscriber' do
-      expect(subject.order_types).to match_array(%w(PTK HPD HTD STA HVD HPB HAA HVT HVU HVZ INI SPR PUB HIA HCA HSA HVE HVS CCS CCT CIP CD1 CDB CDD))
+      expect(subject.order_types).to match_array(%w[PTK HPD HTD STA HVD HPB HAA HVT HVU HVZ INI SPR PUB HIA HCA HSA HVE
+                                                    HVS CCS CCT CIP CD1 CDB CDD])
     end
   end
 
@@ -98,109 +104,119 @@ RSpec.describe Epics::Client do
     end
 
     before do
-      stub_request(:post, "https://194.180.18.30/ebicsweb/ebicsweb")
-        .with(:body => %r[ebicsNoPubKeyDigestsRequest])
-        .to_return(status: 200, body: File.read(File.join(File.dirname(__FILE__), 'fixtures', 'xml', 'hpb_response_ebics_ns.xml')))
+      stub_request(:post, 'https://194.180.18.30/ebicsweb/ebicsweb')
+        .with(body: /ebicsNoPubKeyDigestsRequest/)
+        .to_return(status: 200, body: File.read(File.join(File.dirname(__FILE__), 'fixtures', 'xml',
+                                                          'hpb_response_ebics_ns.xml')))
     end
 
     it { expect(subject.HPB).to match([be_a(Epics::Key), be_a(Epics::Key)]) }
 
     it 'changes the SIZBN001.(E|X)002 keys' do
-      expect { subject.HPB }.to change { subject.keys["SIZBN001.E002"] }
-      expect { subject.HPB }.to change { subject.keys["SIZBN001.X002"] }
+      expect { subject.HPB }.to(change { subject.keys['SIZBN001.E002'] })
+      expect { subject.HPB }.to(change { subject.keys['SIZBN001.X002'] })
     end
 
     describe 'crypto' do
-
       before { subject.HPB }
 
-      it { expect(subject.keys["SIZBN001.E002"].public_digest).to eq(e_key.public_digest) }
-      it { expect(subject.keys["SIZBN001.X002"].public_digest).to eq(e_key.public_digest) }
+      it { expect(subject.keys['SIZBN001.E002'].public_digest).to eq(e_key.public_digest) }
+      it { expect(subject.keys['SIZBN001.X002'].public_digest).to eq(e_key.public_digest) }
     end
 
     describe 'when order data wont include namesspaces' do
       before do
-        allow(subject).to receive(:download).with(Epics::HPB).and_return(File.read(File.join(File.dirname(__FILE__), 'fixtures', 'xml', 'hpb_response_order_without_ns.xml')))
+        allow(subject).to receive(:download).with(Epics::HPB).and_return(File.read(File.join(File.dirname(__FILE__),
+                                                                                             'fixtures', 'xml', 'hpb_response_order_without_ns.xml')))
 
         subject.HPB
       end
 
-      it { expect(subject.keys["SIZBN001.E002"].public_digest).to eq(e_key.public_digest) }
-      it { expect(subject.keys["SIZBN001.X002"].public_digest).to eq(e_key.public_digest) }
+      it { expect(subject.keys['SIZBN001.E002'].public_digest).to eq(e_key.public_digest) }
+      it { expect(subject.keys['SIZBN001.X002'].public_digest).to eq(e_key.public_digest) }
     end
   end
 
-
   describe '#CDB' do
     let(:cdb_document) { File.read(File.join(File.dirname(__FILE__), 'fixtures', 'xml', 'cdb.xml')) }
     before do
-      stub_request(:post, "https://194.180.18.30/ebicsweb/ebicsweb")
-        .with(:body => %r[<TransactionPhase>Initialisation</TransactionPhase>])
-        .to_return(status: 200, body: File.read(File.join(File.dirname(__FILE__), 'fixtures', 'xml', 'cdb_init_response.xml')))
-      stub_request(:post, "https://194.180.18.30/ebicsweb/ebicsweb")
-        .with(:body => %r[<TransactionPhase>Transfer</TransactionPhase>])
-        .to_return(status: 200, body: File.read(File.join(File.dirname(__FILE__), 'fixtures', 'xml', 'cdb_transfer_response.xml')))
+      stub_request(:post, 'https://194.180.18.30/ebicsweb/ebicsweb')
+        .with(body: %r{<TransactionPhase>Initialisation</TransactionPhase>})
+        .to_return(status: 200, body: File.read(File.join(File.dirname(__FILE__), 'fixtures', 'xml',
+                                                          'cdb_init_response.xml')))
+      stub_request(:post, 'https://194.180.18.30/ebicsweb/ebicsweb')
+        .with(body: %r{<TransactionPhase>Transfer</TransactionPhase>})
+        .to_return(status: 200, body: File.read(File.join(File.dirname(__FILE__), 'fixtures', 'xml',
+                                                          'cdb_transfer_response.xml')))
     end
 
-    it { expect(subject.CDB(cdb_document)).to eq(["387B7BE88FE33B0F4B60AC64A63F18E2","N00L"]) }
+    it { expect(subject.CDB(cdb_document)).to eq(%w[387B7BE88FE33B0F4B60AC64A63F18E2 N00L]) }
   end
 
   describe '#CD1' do
     let(:cd1_document) { File.read(File.join(File.dirname(__FILE__), 'fixtures', 'xml', 'cd1.xml')) }
     describe 'normal behaviour' do
       before do
-        stub_request(:post, "https://194.180.18.30/ebicsweb/ebicsweb")
-          .with(:body => %r[<TransactionPhase>Initialisation</TransactionPhase>])
-          .to_return(status: 200, body: File.read(File.join(File.dirname(__FILE__), 'fixtures', 'xml', 'cd1_init_response.xml')))
-        stub_request(:post, "https://194.180.18.30/ebicsweb/ebicsweb")
-          .with(:body => %r[<TransactionPhase>Transfer</TransactionPhase>])
-          .to_return(status: 200, body: File.read(File.join(File.dirname(__FILE__), 'fixtures', 'xml', 'cd1_transfer_response.xml')))
+        stub_request(:post, 'https://194.180.18.30/ebicsweb/ebicsweb')
+          .with(body: %r{<TransactionPhase>Initialisation</TransactionPhase>})
+          .to_return(status: 200, body: File.read(File.join(File.dirname(__FILE__), 'fixtures', 'xml',
+                                                            'cd1_init_response.xml')))
+        stub_request(:post, 'https://194.180.18.30/ebicsweb/ebicsweb')
+          .with(body: %r{<TransactionPhase>Transfer</TransactionPhase>})
+          .to_return(status: 200, body: File.read(File.join(File.dirname(__FILE__), 'fixtures', 'xml',
+                                                            'cd1_transfer_response.xml')))
       end
 
-      it { expect(subject.CD1(cd1_document)).to eq(["387B7BE88FE33B0F4B60AC64A63F18E2","N00L"]) }
+      it { expect(subject.CD1(cd1_document)).to eq(%w[387B7BE88FE33B0F4B60AC64A63F18E2 N00L]) }
     end
 
     describe 'special case' do
       before do
-        stub_request(:post, "https://194.180.18.30/ebicsweb/ebicsweb")
-          .with(:body => %r[<TransactionPhase>Initialisation</TransactionPhase>])
-          .to_return(status: 200, body: File.read(File.join(File.dirname(__FILE__), 'fixtures', 'xml', 'cd1_init_response.xml')).sub('N00L', 'N11L'))
-        stub_request(:post, "https://194.180.18.30/ebicsweb/ebicsweb")
-          .with(:body => %r[<TransactionPhase>Transfer</TransactionPhase>])
-          .to_return(status: 200, body: File.read(File.join(File.dirname(__FILE__), 'fixtures', 'xml', 'cd1_transfer_response.xml')).sub('<OrderID>N00L</OrderID>', ''))
+        stub_request(:post, 'https://194.180.18.30/ebicsweb/ebicsweb')
+          .with(body: %r{<TransactionPhase>Initialisation</TransactionPhase>})
+          .to_return(status: 200, body: File.read(File.join(File.dirname(__FILE__), 'fixtures', 'xml', 'cd1_init_response.xml')).sub(
+            'N00L', 'N11L'
+          ))
+        stub_request(:post, 'https://194.180.18.30/ebicsweb/ebicsweb')
+          .with(body: %r{<TransactionPhase>Transfer</TransactionPhase>})
+          .to_return(status: 200, body: File.read(File.join(File.dirname(__FILE__), 'fixtures', 'xml', 'cd1_transfer_response.xml')).sub(
+            '<OrderID>N00L</OrderID>', ''
+          ))
       end
 
       # happend on some handelsbank accounts
       it 'can also try to fetch the order_id from the first transaction being made' do
-        expect(subject.CD1(cd1_document)).to eq(["387B7BE88FE33B0F4B60AC64A63F18E2","N11L"])
+        expect(subject.CD1(cd1_document)).to eq(%w[387B7BE88FE33B0F4B60AC64A63F18E2 N11L])
       end
     end
   end
 
   describe '#HTD' do
     before do
-      allow(subject).to receive(:download).and_return( File.read(File.join(File.dirname(__FILE__), 'fixtures', 'xml', 'htd_order_data.xml')))
+      allow(subject).to receive(:download).and_return(File.read(File.join(File.dirname(__FILE__), 'fixtures', 'xml',
+                                                                          'htd_order_data.xml')))
     end
 
     it 'sets @iban' do
-      expect { subject.HTD }.to change { subject.instance_variable_get("@iban") }
+      expect { subject.HTD }.to(change { subject.instance_variable_get('@iban') })
     end
 
     it 'sets @bic' do
-      expect { subject.HTD }.to change { subject.instance_variable_get("@bic") }
+      expect { subject.HTD }.to(change { subject.instance_variable_get('@bic') })
     end
 
     it 'sets @name' do
-      expect { subject.HTD }.to change { subject.instance_variable_get("@name") }
+      expect { subject.HTD }.to(change { subject.instance_variable_get('@name') })
     end
 
     it 'sets @order_types' do
-      expect { subject.HTD }.to change { subject.instance_variable_get("@order_types") }
+      expect { subject.HTD }.to(change { subject.instance_variable_get('@order_types') })
     end
 
     describe 'without iban' do
       before do
-        allow(subject).to receive(:download).and_return( File.read(File.join(File.dirname(__FILE__), 'fixtures', 'xml', 'htd_order_data_without_names.xml')))
+        allow(subject).to receive(:download).and_return(File.read(File.join(File.dirname(__FILE__), 'fixtures', 'xml',
+                                                                            'htd_order_data_without_names.xml')))
       end
 
       it 'sets @iban' do
@@ -211,11 +227,12 @@ RSpec.describe Epics::Client do
 
   describe '#C53/C52/C54/Z52/Z53/Z54 types with zipped data' do
     before do
-      allow(subject).to receive(:download).and_return( File.read(File.join(File.dirname(__FILE__), 'fixtures', 'test.zip') ))
+      allow(subject).to receive(:download).and_return(File.read(File.join(File.dirname(__FILE__), 'fixtures',
+                                                                          'test.zip')))
     end
 
     it 'will unzip the returned data' do
-      %w(C52 C53 C54 Z52 Z53 Z54).each do |c|
+      %w[C52 C53 C54 Z52 Z53 Z54].each do |c|
         expect(subject.send(c, :today, :yesterday)).to eq(["ebics is great\n"])
       end
     end
@@ -223,13 +240,88 @@ RSpec.describe Epics::Client do
 
   describe '#C53/C52/C54/Z52/Z53/Z54 types with zipped data with general purpose bit flag 3 set' do
     before do
-      allow(subject).to receive(:download).and_return( File.read(File.join(File.dirname(__FILE__), 'fixtures', 'test_with_general_purpose_bit_3.zip') ))
+      allow(subject).to receive(:download).and_return(File.read(File.join(File.dirname(__FILE__), 'fixtures',
+                                                                          'test_with_general_purpose_bit_3.zip')))
     end
 
     it 'will unzip the returned data' do
-      %w(C52 C53 C54 Z52 Z53 Z54).each do |c|
+      %w[C52 C53 C54 Z52 Z53 Z54].each do |c|
         expect(subject.send(c, :today, :yesterday)).to eq(["ebics is great\n"])
       end
     end
   end
+
+  describe '#x_509_certificate' do
+    let(:epics_client) do
+      Epics::Client.new(key, 'secret', 'https://194.180.18.30/ebicsweb/ebicsweb', 'SIZBN001', 'EBIX', 'EBICS')
+    end
+
+    context 'with valid certificates content' do
+      it 'returns an instance of Epics::X509Certificate' do
+        epics_client.x_509_certificates_content = {
+          a: generate_x_509_crt(epics_client.a.key, '/C=GB/O=TestOrg/CN=test.example.org'),
+          x: generate_x_509_crt(epics_client.x.key, '/C=GB/O=TestOrg/CN=test.example.org'),
+          e: generate_x_509_crt(epics_client.e.key, '/C=GB/O=TestOrg/CN=test.example.org')
+        }
+
+        expect(epics_client.x_509_certificate(:a)).to be_a(Epics::X509Certificate)
+        expect(epics_client.x_509_certificate(:x)).to be_a(Epics::X509Certificate)
+        expect(epics_client.x_509_certificate(:e)).to be_a(Epics::X509Certificate)
+      end
+    end
+
+    context 'with nil or empty content' do
+      it 'returns nil when content is nil' do
+        epics_client.x_509_certificates_content = { a: nil, x: nil, e: nil }
+        expect(epics_client.x_509_certificate(:a)).to be_nil
+        expect(epics_client.x_509_certificate(:x)).to be_nil
+        expect(epics_client.x_509_certificate(:e)).to be_nil
+      end
+
+      it 'returns nil when content is empty string' do
+        epics_client.x_509_certificates_content = { a: '', x: '', e: '' }
+        expect(epics_client.x_509_certificate(:a)).to be_nil
+        expect(epics_client.x_509_certificate(:x)).to be_nil
+        expect(epics_client.x_509_certificate(:e)).to be_nil
+      end
+    end
+  end
+
+  describe '#x_509_certificate_hash' do
+    let(:epics_client) do
+      Epics::Client.new(key, 'secret', 'https://194.180.18.30/ebicsweb/ebicsweb', 'SIZBN001', 'EBIX', 'EBICS')
+    end
+    context 'with valid certificates content' do
+      it 'returns SHA256 hash' do
+        epics_client.x_509_certificates_content = {
+          a: generate_x_509_crt(epics_client.a.key, '/C=GB/O=TestOrg/CN=test.example.org'),
+          x: generate_x_509_crt(epics_client.x.key, '/C=GB/O=TestOrg/CN=test.example.org'),
+          e: generate_x_509_crt(epics_client.e.key, '/C=GB/O=TestOrg/CN=test.example.org')
+        }
+
+        expect(epics_client.x_509_certificate_hash(:a)).to be_a(String)
+        expect(epics_client.x_509_certificate_hash(:x)).to be_a(String)
+        expect(epics_client.x_509_certificate_hash(:e)).to be_a(String)
+        expect(epics_client.x_509_certificate_hash(:a).size).to eq(64)
+        expect(epics_client.x_509_certificate_hash(:x).size).to eq(64)
+        expect(epics_client.x_509_certificate_hash(:e).size).to eq(64)
+      end
+    end
+
+    context 'with nil or empty content' do
+      it 'returns nil when content is nil' do
+        epics_client.x_509_certificates_content = { a: nil, x: nil, e: nil }
+        expect(epics_client.x_509_certificate_hash(:a)).to be_nil
+        expect(epics_client.x_509_certificate_hash(:x)).to be_nil
+        expect(epics_client.x_509_certificate_hash(:e)).to be_nil
+      end
+
+      it 'returns nil when content is empty string' do
+        epics_client.x_509_certificates_content = { a: '', x: '', e: '' }
+        expect(epics_client.x_509_certificate_hash(:a)).to be_nil
+        expect(epics_client.x_509_certificate_hash(:x)).to be_nil
+        expect(epics_client.x_509_certificate_hash(:e)).to be_nil
+      end
+    end
+  end
 end

data/spec/orders/hia_spec.rb

@@ -1,5 +1,6 @@
 RSpec.describe Epics::HIA do
-  let(:client) { Epics::Client.new( File.open(File.join( File.dirname(__FILE__), '..', 'fixtures', 'SIZBN001.key')), 'secret' , 'https://194.180.18.30/ebicsweb/ebicsweb', 'SIZBN001', 'EBIX', 'EBICS') }
+  let(:client) { Epics::Client.new(key, 'secret', 'https://194.180.18.30/ebicsweb/ebicsweb', 'SIZBN001', 'EBIX', 'EBICS') }
+  let(:key) { File.read(File.join(File.dirname(__FILE__), '..', 'fixtures', 'SIZBN001.key')) }
 
   subject { described_class.new(client) }
 
@@ -7,25 +8,48 @@ RSpec.describe Epics::HIA do
     specify { expect(subject.to_xml).to be_a_valid_ebics_doc }
 
     describe 'validate against fixture' do
-      let(:hia) { Nokogiri::XML(File.read(File.join( File.dirname(__FILE__), '..', 'fixtures', 'xml', RUBY_ENGINE, 'hia.xml'))) }
+      let(:hia) do
+        Nokogiri::XML(File.read(File.join(File.dirname(__FILE__), '..', 'fixtures', 'xml', RUBY_ENGINE, 'hia.xml')))
+      end
 
-      it "will match exactly" do
+      it 'will match exactly' do
         expect(Nokogiri::XML(subject.to_xml)).to be_equivalent_to(hia)
       end
     end
   end
 
   describe '#order_data' do
-
     specify { expect(subject.order_data).to be_a_valid_ebics_doc }
 
     describe 'validate against fixture' do
+      let(:hia_request_order_data) do
+        Nokogiri::XML(File.read(File.join(File.dirname(__FILE__), '..', 'fixtures', 'xml',
+                                          'hia_request_order_data.xml')))
+      end
 
-      let(:hia_request_order_data) { Nokogiri::XML(File.read(File.join( File.dirname(__FILE__), '..', 'fixtures', 'xml', 'hia_request_order_data.xml'))) }
-
-      it "will match exactly" do
+      it 'will match exactly' do
         expect(Nokogiri::XML(subject.order_data)).to be_equivalent_to(hia_request_order_data)
       end
     end
+
+    context 'with x509 certificate' do
+      let(:client) do
+        client = Epics::Client.new(key, 'secret', 'https://194.180.18.30/ebicsweb/ebicsweb', 'SIZBN001', 'EBIX', 'EBICS')
+        client.x_509_certificates_content = {
+          x: generate_x_509_crt(client.x.key, '/C=GB/O=TestOrg/CN=test.example.org'),
+          e: generate_x_509_crt(client.e.key, '/C=GB/O=TestOrg/CN=test.example.org')
+        }
+        client
+      end
+
+      it 'includes x509 certificate' do
+        x_crt = Epics::X509Certificate.new(client.x_509_certificates_content[:x])
+        e_crt = Epics::X509Certificate.new(client.x_509_certificates_content[:e])
+        expect(subject.order_data).to include('<ds:X509IssuerName>/C=GB/O=TestOrg/CN=test.example.org</ds:X509IssuerName>')
+        expect(subject.order_data).to include('<ds:X509SerialNumber>2</ds:X509SerialNumber>')
+        expect(subject.order_data).to include("<ds:X509Certificate>#{x_crt.data}</ds:X509Certificate>")
+        expect(subject.order_data).to include("<ds:X509Certificate>#{e_crt.data}</ds:X509Certificate>")
+      end
+    end
   end
 end

data/spec/orders/ini_spec.rb

@@ -1,7 +1,7 @@
 RSpec.describe Epics::INI do
-  let(:client) { Epics::Client.new( File.open(File.join( File.dirname(__FILE__), '..', 'fixtures', 'SIZBN001.key')), 'secret' , 'https://194.180.18.30/ebicsweb/ebicsweb', 'SIZBN001', 'EBIX', 'EBICS') }
-
-  before { allow(subject).to receive(:timestamp) { "2014-10-10T11:16:00Z" } }
+  let(:client) { Epics::Client.new(key, 'secret', 'https://194.180.18.30/ebicsweb/ebicsweb', 'SIZBN001', 'EBIX', 'EBICS') }
+  let(:key) { File.read(File.join(File.dirname(__FILE__), '..', 'fixtures', 'SIZBN001.key')) }
+  before { allow(subject).to receive(:timestamp) { '2014-10-10T11:16:00Z' } }
 
   subject { described_class.new(client) }
 
@@ -9,9 +9,11 @@ RSpec.describe Epics::INI do
     specify { expect(subject.to_xml).to be_a_valid_ebics_doc }
 
     describe 'validate against fixture' do
-      let(:signature_order_data) { Nokogiri::XML(File.read(File.join( File.dirname(__FILE__), '..', 'fixtures', 'xml', RUBY_ENGINE, 'ini.xml'))) }
+      let(:signature_order_data) do
+        Nokogiri::XML(File.read(File.join(File.dirname(__FILE__), '..', 'fixtures', 'xml', RUBY_ENGINE, 'ini.xml')))
+      end
 
-      it "will match exactly" do
+      it 'will match exactly' do
         expect(Nokogiri::XML(subject.to_xml)).to be_equivalent_to(signature_order_data)
       end
     end
@@ -21,12 +23,29 @@ RSpec.describe Epics::INI do
     specify { expect(subject.key_signature).to be_a_valid_ebics_doc }
 
     describe 'validate against fixture' do
+      let(:signature_order_data) do
+        Nokogiri::XML(File.read(File.join(File.dirname(__FILE__), '..', 'fixtures', 'xml',
+                                          'signature_pub_key_order_data.xml')))
+      end
 
-      let(:signature_order_data) { Nokogiri::XML(File.read(File.join( File.dirname(__FILE__), '..', 'fixtures', 'xml', 'signature_pub_key_order_data.xml'))) }
-
-      it "will match exactly" do
+      it 'will match exactly' do
         expect(Nokogiri::XML(subject.key_signature)).to be_equivalent_to(signature_order_data)
       end
     end
+
+    context 'with x509 certificate' do
+      let(:client) do
+        client = Epics::Client.new(key, 'secret', 'https://194.180.18.30/ebicsweb/ebicsweb', 'SIZBN001', 'EBIX', 'EBICS')
+        client.x_509_certificates_content = {a: generate_x_509_crt(client.a.key, '/C=GB/O=TestOrg/CN=test.example.org')}
+        client
+      end
+
+      it 'includes x509 certificate' do
+        a_crt = Epics::X509Certificate.new(client.x_509_certificates_content[:a])
+        expect(subject.key_signature).to include('<ds:X509IssuerName>/C=GB/O=TestOrg/CN=test.example.org</ds:X509IssuerName>')
+        expect(subject.key_signature).to include('<ds:X509SerialNumber>2</ds:X509SerialNumber>')
+        expect(subject.key_signature).to include("<ds:X509Certificate>#{a_crt.data}</ds:X509Certificate>")
+      end
+    end
   end
 end

data/spec/orders/x_509_certificate_spec.rb

@@ -0,0 +1,26 @@
+RSpec.describe Epics::X509Certificate do
+  subject(:x_509_certificate) { described_class.new(crt_content) }
+
+  let(:key) { OpenSSL::PKey::RSA.new(2048) }
+  let(:crt_content) { generate_x_509_crt(key, distinguished_name) }
+  let(:distinguished_name) { '/C=GB/O=TestOrg/CN=test.example.org' }
+
+  describe '#issuer' do
+    it 'returns the issuer of the certificate' do
+      expect(x_509_certificate.issuer.to_s).to eq(distinguished_name)
+    end
+  end
+  
+  describe '#version' do
+    it 'returns the version of the certificate' do
+      expect(x_509_certificate.version).to eq(2)
+    end
+  end
+  
+  describe '#data' do
+    it 'returns the base64 encoded certificate data' do
+      expect(x_509_certificate.data).to start_with('MIIDDzCCAfegAwIBAgIBATANBgkqhkiG9w0BA')
+      expect(x_509_certificate.data).to end_with('==')
+    end
+  end
+end

data/spec/orders/z01_spec.rb

@@ -0,0 +1,11 @@
+RSpec.describe Epics::Z01 do
+
+  let(:client) { Epics::Client.new( File.open(File.join( File.dirname(__FILE__), '..', 'fixtures', 'SIZBN001.key')), 'secret' , 'https://194.180.18.30/ebicsweb/ebicsweb', 'SIZBN001', 'EBIX', 'EBICS') }
+
+  subject { described_class.new(client, from: "2014-09-01", to: "2014-09-30") }
+
+  describe '#to_xml' do
+    specify { expect(subject.to_xml).to be_a_valid_ebics_doc }
+  end
+
+end

data/spec/support/x_509_crt_generator.rb

@@ -0,0 +1,22 @@
+def generate_x_509_crt(key, distinguished_name)
+  name = OpenSSL::X509::Name.parse(distinguished_name)
+
+  cert = OpenSSL::X509::Certificate.new
+  cert.version = 2
+  cert.serial = 1
+  cert.subject = name
+  cert.issuer = name
+  cert.public_key = key.public_key
+  cert.not_before = Time.now
+  cert.not_after = cert.not_before + 365 * 24 * 60 * 60
+
+  ef = OpenSSL::X509::ExtensionFactory.new
+  ef.subject_certificate = cert
+  ef.issuer_certificate = cert
+  cert.add_extension(ef.create_extension("basicConstraints", "CA:FALSE", true))
+  cert.add_extension(ef.create_extension("keyUsage", "digitalSignature,keyEncipherment,nonRepudiation", true))
+
+  cert.sign(key, OpenSSL::Digest::SHA256.new)
+
+  cert.to_pem
+end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: epics
 version: !ruby/object:Gem::Version
-  version: 2.9.0
+  version: 2.10.0
 platform: ruby
 authors:
 - Lars Brillert
 bindir: bin
 cert_chain: []
-date: 2025-03-24 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: base64
@@ -266,14 +266,17 @@ files:
 - lib/epics/version.rb
 - lib/epics/vmk.rb
 - lib/epics/wss.rb
+- lib/epics/x_509_certificate.rb
 - lib/epics/xct.rb
 - lib/epics/xds.rb
 - lib/epics/xe2.rb
 - lib/epics/xe3.rb
+- lib/epics/z01.rb
 - lib/epics/z52.rb
 - lib/epics/z53.rb
 - lib/epics/z54.rb
 - lib/letter/ini.erb
+- lib/letter/ini_with_certs.erb
 - lib/letter/locales/de.yml
 - lib/letter/locales/en.yml
 - lib/letter/locales/fr.yml
@@ -351,9 +354,11 @@ files:
 - spec/orders/sta_spec.rb
 - spec/orders/vmk_spec.rb
 - spec/orders/wss_spec.rb
+- spec/orders/x_509_certificate_spec.rb
 - spec/orders/xds_spec.rb
 - spec/orders/xe2_spec.rb
 - spec/orders/xe3_spec.rb
+- spec/orders/z01_spec.rb
 - spec/orders/z52_spec.rb
 - spec/orders/z53_spec.rb
 - spec/orders/z54_spec.rb
@@ -361,6 +366,7 @@ files:
 - spec/signer_spec.rb
 - spec/spec_helper.rb
 - spec/support/ebics_matcher.rb
+- spec/support/x_509_crt_generator.rb
 - spec/xsd/ebics_H004.xsd
 - spec/xsd/ebics_hev.xsd
 - spec/xsd/ebics_keymgmt_request_H004.xsd
@@ -399,7 +405,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.2
+rubygems_version: 3.6.8
 specification_version: 4
 summary: a ruby implementation of the EBICS protocol
 test_files:
@@ -477,9 +483,11 @@ test_files:
 - spec/orders/sta_spec.rb
 - spec/orders/vmk_spec.rb
 - spec/orders/wss_spec.rb
+- spec/orders/x_509_certificate_spec.rb
 - spec/orders/xds_spec.rb
 - spec/orders/xe2_spec.rb
 - spec/orders/xe3_spec.rb
+- spec/orders/z01_spec.rb
 - spec/orders/z52_spec.rb
 - spec/orders/z53_spec.rb
 - spec/orders/z54_spec.rb
@@ -487,6 +495,7 @@ test_files:
 - spec/signer_spec.rb
 - spec/spec_helper.rb
 - spec/support/ebics_matcher.rb
+- spec/support/x_509_crt_generator.rb
 - spec/xsd/ebics_H004.xsd
 - spec/xsd/ebics_hev.xsd
 - spec/xsd/ebics_keymgmt_request_H004.xsd