expect 0.0.12 → 0.0.13

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 7cfbd9d658cd744736750e4e4fa17bc048f4d092
-  data.tar.gz: a2f4153d80858a6bcdff5a8dfd37c9c082317003
+  metadata.gz: 21d39c07c02365854578db674b2e4dbf9f6bb763
+  data.tar.gz: bf2bd7f9e2554ccafc4bd0f28aa5d36525e288f5
 SHA512:
-  metadata.gz: f7d77be585bb0eb287aa4040701bb3dab63ee8b49c0189ac257b6ce15238536e5eb15771ee8c221ea14ce12b941697cce086a7688c29d2c7cf5dafeb874a3e3a
-  data.tar.gz: 196c70e9766b9a4447f8feed85b9bba64f36a1cf681fce216d206bb6f02345fda479af5e93a59dfa216c1299d532897212aeb4273f8eba5dbf418f14d689b024
+  metadata.gz: 7bbdf0e640183e6f4da7f91f6b5ab6fbf27e62dbf4899fa0ee86b7c8382b512c078b43a97dbc5e137e516ce6d44c8224f9cea6be022090276f28d3dd93cf0071
+  data.tar.gz: 99c0d5151ac6dcab0941a174b5041f9fa95814aae2d73fc886bf650e4cd324380d69d2a18ecde8be0af5543b470608dc01bf4e3ebda94f1afc5b1a24be06e07d

data/README.md

@@ -1,10 +1,9 @@
 # Expect
 
-[![Build Status](https://travis-ci.org/fixrb/expect.svg?branch=master)](https://travis-ci.org/fixrb/expect)
-[![Dependency Status](https://gemnasium.com/fixrb/expect.svg)](https://gemnasium.com/fixrb/expect)
-[![Gem Version](http://img.shields.io/gem/v/expect.svg)](https://rubygems.org/gems/expect)
-[![Inline docs](http://inch-ci.org/github/fixrb/expect.svg?branch=master)](http://inch-ci.org/github/fixrb/expect)
-[![Documentation](http://img.shields.io/:yard-docs-38c800.svg)](http://rubydoc.info/gems/expect/frames)
+[![Build Status](https://travis-ci.org/fixrb/expect.svg?branch=master)][travis]
+[![Gem Version](https://badge.fury.io/rb/expect.svg)][gem]
+[![Inline docs](http://inch-ci.org/github/fixrb/expect.svg?branch=master)][inchpages]
+[![Documentation](http://img.shields.io/:yard-docs-38c800.svg)][rubydoc]
 
 > Expectation library with some built-in matchers for Ruby.
 
@@ -22,19 +21,14 @@
 
 ## Installation
 
-Add this line to your application's Gemfile:
+__Expect__ is cryptographically signed.
 
-```ruby
-gem 'expect'
-```
-
-And then execute:
+To be sure the gem you install hasn't been tampered with, add my public key (if you haven't already) as a trusted certificate:
 
-    $ bundle
+    $ gem cert --add <(curl -Ls https://raw.github.com/fixrb/expect/master/certs/gem-fixrb-public_cert.pem)
+    $ gem install expect -P HighSecurity
 
-Or install it yourself as:
-
-    $ gem install expect
+The `HighSecurity` trust profile will verify all gems.  All of __Expect__'s dependencies are signed.
 
 ## Usage
 
@@ -62,6 +56,19 @@ Expect.this { 'foo' }.to Match: /^foo$/ # => true
 Expect.this { Boom }.to RaiseException: NameError # => true
 ```
 
+## Security
+
+As a basic form of security __Expect__ provides a set of SHA512 checksums for
+every Gem release.  These checksums can be found in the `checksum/` directory.
+Although these checksums do not prevent malicious users from tampering with a
+built Gem they can be used for basic integrity verification purposes.
+
+The checksum of a file can be checked using the `sha512sum` command.  For
+example:
+
+    $ sha512sum pkg/expect-0.0.1.gem
+    8c72ec1d93577cf57eaaea04d66287f18673f39cb886452cf7044195c03a77d03a5226a6b033cc6a0992721c7aefcb64c6daca463e7e0b5059901886dfc3cfb2  pkg/expect-0.0.1.gem
+
 ## Versioning
 
 __Expect__ follows [Semantic Versioning 2.0](http://semver.org/).
@@ -77,3 +84,8 @@ __Expect__ follows [Semantic Versioning 2.0](http://semver.org/).
 ## License
 
 See `LICENSE.md` file.
+
+[gem]: https://rubygems.org/gems/expect
+[travis]: https://travis-ci.org/fixrb/expect
+[inchpages]: http://inch-ci.org/github/fixrb/expect/
+[rubydoc]: http://rubydoc.info/gems/expect/frames

data/VERSION.semver

@@ -1 +1 @@
-0.0.12
+0.0.13

data/certs/gem-fixrb-public_cert.pem

@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----
+MIIDdDCCAlygAwIBAgIBATANBgkqhkiG9w0BAQUFADBAMRAwDgYDVQQDDAdjb250
+YWN0MRUwEwYKCZImiZPyLGQBGRYFY3lyaWwxFTATBgoJkiaJk/IsZAEZFgVlbWFp
+bDAeFw0xNTA3MzExMjExMDZaFw0xNjA3MzAxMjExMDZaMEAxEDAOBgNVBAMMB2Nv
+bnRhY3QxFTATBgoJkiaJk/IsZAEZFgVjeXJpbDEVMBMGCgmSJomT8ixkARkWBWVt
+YWlsMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hUEYoxnn1mtoaiK
+NiwjzVPqPgQCR9ZeYdWjLJ3UUG2h5Q6awJCnbaGr8LGGcKtveCDbOJRjtdKNuOTH
+O2FLTkf46nrMGiF+6/j//qh8o0EQHBRKIVMYkxZxZe4Fcqtdf1bWNMZuXeyoDjdt
+4yiGfizbbTOu0gBf7Yrsv5DsL0a5CU/We7zxMfgGXCVb9PYkD+OWUMcTARYDKfYa
+nN9ECI7CFm/yXcsof/eIQA5EmJNmQnhx8B+8L6jDqQeSUAUrBZnC9CdloKOoqmEL
+weqM2g6LM932Ba74rEl4QlFRYDcs8kjr71UcvseHRCUkFr36j26OU8+gKelsTNdO
+7OZNKQIDAQABo3kwdzAJBgNVHRMEAjAAMAsGA1UdDwQEAwIEsDAdBgNVHQ4EFgQU
+LSJTN9h29D6bqOhp+vyvhyM0AF4wHgYDVR0RBBcwFYETY29udGFjdEBjeXJpbC5l
+bWFpbDAeBgNVHRIEFzAVgRNjb250YWN0QGN5cmlsLmVtYWlsMA0GCSqGSIb3DQEB
+BQUAA4IBAQArqCC1rUyGJlF0DF9ZhUOgggyROvO0/WroSI5zWgzdB8EU7RJpsDIV
+caGnpji7h0rQIGWQuJ6TL2fTFLfeGRFdIzRZwWC7TeXhcXngJHZxSjDBt2OpfM8A
+P5eElSQS9iJCetBGGMyt354PfgZkg3URaC+JA6mdEisdtEdo64ElnMsLg9shCqye
+JSR3BbejbyPVva0/MHKD+dR6RswlcM9KMiYOXQml7a/kH6huOHvVq9gj5xC2ih8W
+dzJvWzQ1+dJU6WQv75E9ddSkaQrK3nhdgQVu+/wgvGSrsMvOGNz+LXaSDxQqZuwX
+0KNQFuIukfrdk8URwRnHoAnvx4U93iUw
+-----END CERTIFICATE-----

data/checksum/expect-0.0.1.gem.sha512

@@ -0,0 +1 @@
+8c72ec1d93577cf57eaaea04d66287f18673f39cb886452cf7044195c03a77d03a5226a6b033cc6a0992721c7aefcb64c6daca463e7e0b5059901886dfc3cfb2

data/checksum/expect-0.0.10.gem.sha512

@@ -0,0 +1 @@
+e33832d6ce3b0a63e7542471c6590ca7175ad0d67f69cd3263e0a943cd4c9dcb60cb5137a8e771645fbd731f843750bb6ef0d3e695eb943863bbec73db01d140

data/checksum/expect-0.0.11.gem.sha512

@@ -0,0 +1 @@
+062b8b1c4988f2c3f0ce2d325064b256c5a2064bf93ecb295a17f2b78147a69eeee29a7ac2df9c87e8f5112c4f9ab4842b5c8188b82868477410fc54563e2870

data/checksum/expect-0.0.12.gem.sha512

@@ -0,0 +1 @@
+b8053ab9dfa41beb44bca74f4fef8043f9f842346b6c23fc668e325cc254e3b13427820631c0ed2ca4bb54c4b01883cc4a62f7d36a7946097ff270caa6502d1e

data/checksum/expect-0.0.2.gem.sha512

@@ -0,0 +1 @@
+305ad85dbdbd9d4029e3904df8a2c654464b6c4eed4442c831396520cc6d41893405498ae97aa3571fe8aca7c63bded29ebdfd4833f13ca8d70cc4cab6b9fc0c

data/checksum/expect-0.0.3.gem.sha512

@@ -0,0 +1 @@
+2eae6597e0ff41b0d7d6a21ad5fb0b9bef271cfcad8c1c6112fcf0288a8df15d17402222c92898c0189092ee9c4e95558e4ade5290b832e21e373331908e79d9

data/checksum/expect-0.0.4.gem.sha512

@@ -0,0 +1 @@
+61f657f0a68d9b5545933459bb84778e9416f9cf7353a3c5401cc3b71f946f161f8998d7f18121ca977c227500795a5b3e2277a42318d8f44d9af1a5450362b4

data/checksum/expect-0.0.5.gem.sha512

@@ -0,0 +1 @@
+156e6f8c425b5656977571403439169a0f88635883bf54963cc93f6f3dedda18b839bcb750fc1a8acaddd787a4135c5b4da69a7a3af8ed4169317928b4e7666b

data/checksum/expect-0.0.6.gem.sha512

@@ -0,0 +1 @@
+164797e4ba54cd34c63b21f55fad38b3ce12987a97be51869a58b7b512fb73a99df56d5e735399f7e9d9f3004c0de79038f2d264ccb64c3e35bef1bb47c13df2

data/checksum/expect-0.0.7.gem.sha512

@@ -0,0 +1 @@
+efa73d30c17845cca68b294adfddc47e2d132d5dc776d5f541f66a20539855cd759274f2bb92444b0873978805bc8457602764aa28ce6476f51806ce55698393

data/checksum/expect-0.0.8.gem.sha512

@@ -0,0 +1 @@
+ee445e5f1d61a86f7a250c653749efc0b2528152f19968e61c6da2aaf8492f0661481a96678a7b40332272dd87a7e560f5a97ab6e8a1288e9d0f9323827e6baa

data/checksum/expect-0.0.9.gem.sha512

@@ -0,0 +1 @@
+0043b268f8278789e56d5e17d44b450d8a081c09b35048c84cfa2fc6002333e387a07a70dc1973ddf2467edbe13b9d32ae346cbd21405c5911a3bac290c5d394

data/expect.gemspec

@@ -1,6 +1,6 @@
 Gem::Specification.new do |spec|
   spec.name          = 'expect'
-  spec.version       = File.read('VERSION.semver')
+  spec.version       = File.read('VERSION.semver').chomp
   spec.authors       = ['Cyril Wack']
   spec.email         = ['contact@cyril.email']
 
@@ -16,15 +16,14 @@ Gem::Specification.new do |spec|
 
   spec.add_dependency 'matchi',                 '~> 0.0'
 
+  spec.add_development_dependency 'rubygems-tasks', '~> 0.2.4'
   spec.add_development_dependency 'bundler',    '~> 1.10'
   spec.add_development_dependency 'rake',       '~> 10.4'
   spec.add_development_dependency 'yard',       '~> 0.8'
   spec.add_development_dependency 'simplecov',  '~> 0.10'
   spec.add_development_dependency 'rubocop',    '~> 0.32'
 
-  private_key = File.expand_path '~/.gem/expect-gem-private_key.pem'
-  if File.exist? private_key
-    spec.signing_key = private_key
-    spec.cert_chain  = ['expect-gem-public_cert.pem']
-  end
+  spec.cert_chain   = ['certs/gem-fixrb-public_cert.pem']
+  private_key       = File.expand_path('~/.ssh/gem-fixrb-private_key.pem')
+  spec.signing_key  = private_key if File.exist?(private_key)
 end

data/pkg_checksum

@@ -0,0 +1,11 @@
+#!/usr/bin/env ruby
+
+require 'digest/sha2'
+
+gemname         = :expect
+ARGV[0]         = File.read('VERSION.semver').chomp if ARGV[0].nil?
+built_gem_path  = "pkg/#{gemname}-#{ARGV[0]}.gem"
+checksum        = Digest::SHA512.new.hexdigest(File.read(built_gem_path))
+checksum_path   = "checksum/#{gemname}-#{ARGV[0]}.gem.sha512"
+
+File.open(checksum_path, 'w') { |f| f.write("#{checksum}\n") }

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: expect
 version: !ruby/object:Gem::Version
-  version: 0.0.12
+  version: 0.0.13
 platform: ruby
 authors:
 - Cyril Wack
@@ -12,25 +12,25 @@ cert_chain:
   -----BEGIN CERTIFICATE-----
   MIIDdDCCAlygAwIBAgIBATANBgkqhkiG9w0BAQUFADBAMRAwDgYDVQQDDAdjb250
   YWN0MRUwEwYKCZImiZPyLGQBGRYFY3lyaWwxFTATBgoJkiaJk/IsZAEZFgVlbWFp
-  bDAeFw0xNTA3MjUxNzEwMjlaFw0xNjA3MjQxNzEwMjlaMEAxEDAOBgNVBAMMB2Nv
+  bDAeFw0xNTA3MzExMjExMDZaFw0xNjA3MzAxMjExMDZaMEAxEDAOBgNVBAMMB2Nv
   bnRhY3QxFTATBgoJkiaJk/IsZAEZFgVjeXJpbDEVMBMGCgmSJomT8ixkARkWBWVt
-  YWlsMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EACxc54z3mt3TwH
-  c6kQxSG8dzo/BPDFEfhCKUw6ZqoNuCJtXpDPFkthU+fAy6uP4HDnaRGsMHXq81Sy
-  kciAzYMEghngcpMVwZMJHvCdQ1+h46OeDtMxDOVcjanFpUsSdr4OkyvNLFw2DtyN
-  RIDkItmeIR8nJpbL8qm4VcJyfiBU6aXPwKJHMM9bldO42FHua7fAWmt30cKxMCGq
-  DAydSElataUgqdA7RIugWvGdF0j2WloABxD/XdV2KhYpftHcxV5mGNEqoCe5sol8
-  j2mSaYDtD3iGhHjRlhoPEj8wTBjXFQZ5j4EMlUm8ocFbK9KGL5l5/Rgfh0si8TL1
-  KYSQ6QIDAQABo3kwdzAJBgNVHRMEAjAAMAsGA1UdDwQEAwIEsDAdBgNVHQ4EFgQU
-  37rWCpfcBoXxjgYvY0bfydb4dbswHgYDVR0RBBcwFYETY29udGFjdEBjeXJpbC5l
+  YWlsMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hUEYoxnn1mtoaiK
+  NiwjzVPqPgQCR9ZeYdWjLJ3UUG2h5Q6awJCnbaGr8LGGcKtveCDbOJRjtdKNuOTH
+  O2FLTkf46nrMGiF+6/j//qh8o0EQHBRKIVMYkxZxZe4Fcqtdf1bWNMZuXeyoDjdt
+  4yiGfizbbTOu0gBf7Yrsv5DsL0a5CU/We7zxMfgGXCVb9PYkD+OWUMcTARYDKfYa
+  nN9ECI7CFm/yXcsof/eIQA5EmJNmQnhx8B+8L6jDqQeSUAUrBZnC9CdloKOoqmEL
+  weqM2g6LM932Ba74rEl4QlFRYDcs8kjr71UcvseHRCUkFr36j26OU8+gKelsTNdO
+  7OZNKQIDAQABo3kwdzAJBgNVHRMEAjAAMAsGA1UdDwQEAwIEsDAdBgNVHQ4EFgQU
+  LSJTN9h29D6bqOhp+vyvhyM0AF4wHgYDVR0RBBcwFYETY29udGFjdEBjeXJpbC5l
   bWFpbDAeBgNVHRIEFzAVgRNjb250YWN0QGN5cmlsLmVtYWlsMA0GCSqGSIb3DQEB
-  BQUAA4IBAQBw9I7QRS2b/DDHvU7GeRj78jXMC1h44jjgWD7pQgh/ElxF+eIjNuqw
-  eylIigd2J5Q94Qrxarys1OFjNCboVRFz4oC8Ft7JbLAQq5s6g8qfSF6uCAffpvJg
-  2sied6dgkMVKWO2yjrretyhouxcCYb5jUIw1C+drhZD+qXZNEqv4S/1HIvN4wLQo
-  6bCBEmU6y6htZEV04mseS/n3MN75HhvddaO6GvKxRIox2lEPacYVsLg02vf14oSZ
-  JAoJK0pylOIOYNby0iAISk3czU1cmi2EZXGqezYqRnzgrwfjxQ3NvQJgz49qJ35m
-  vdqKN7VS1+j1AXyonlnVc1vujL7UbwvF
+  BQUAA4IBAQArqCC1rUyGJlF0DF9ZhUOgggyROvO0/WroSI5zWgzdB8EU7RJpsDIV
+  caGnpji7h0rQIGWQuJ6TL2fTFLfeGRFdIzRZwWC7TeXhcXngJHZxSjDBt2OpfM8A
+  P5eElSQS9iJCetBGGMyt354PfgZkg3URaC+JA6mdEisdtEdo64ElnMsLg9shCqye
+  JSR3BbejbyPVva0/MHKD+dR6RswlcM9KMiYOXQml7a/kH6huOHvVq9gj5xC2ih8W
+  dzJvWzQ1+dJU6WQv75E9ddSkaQrK3nhdgQVu+/wgvGSrsMvOGNz+LXaSDxQqZuwX
+  0KNQFuIukfrdk8URwRnHoAnvx4U93iUw
   -----END CERTIFICATE-----
-date: 2015-07-25 00:00:00.000000000 Z
+date: 2015-07-31 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: matchi
@@ -46,6 +46,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '0.0'
+- !ruby/object:Gem::Dependency
+  name: rubygems-tasks
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.2.4
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.2.4
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
@@ -134,10 +148,23 @@ files:
 - VERSION.semver
 - bin/console
 - bin/setup
-- expect-gem-public_cert.pem
+- certs/gem-fixrb-public_cert.pem
+- checksum/expect-0.0.1.gem.sha512
+- checksum/expect-0.0.10.gem.sha512
+- checksum/expect-0.0.11.gem.sha512
+- checksum/expect-0.0.12.gem.sha512
+- checksum/expect-0.0.2.gem.sha512
+- checksum/expect-0.0.3.gem.sha512
+- checksum/expect-0.0.4.gem.sha512
+- checksum/expect-0.0.5.gem.sha512
+- checksum/expect-0.0.6.gem.sha512
+- checksum/expect-0.0.7.gem.sha512
+- checksum/expect-0.0.8.gem.sha512
+- checksum/expect-0.0.9.gem.sha512
 - expect.gemspec
 - lib/expect.rb
 - lib/expect/expectation_target.rb
+- pkg_checksum
 homepage: https://github.com/fixrb/expect
 licenses:
 - MIT

data/expect-gem-public_cert.pem

@@ -1,21 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDdDCCAlygAwIBAgIBATANBgkqhkiG9w0BAQUFADBAMRAwDgYDVQQDDAdjb250
-YWN0MRUwEwYKCZImiZPyLGQBGRYFY3lyaWwxFTATBgoJkiaJk/IsZAEZFgVlbWFp
-bDAeFw0xNTA3MjUxNzEwMjlaFw0xNjA3MjQxNzEwMjlaMEAxEDAOBgNVBAMMB2Nv
-bnRhY3QxFTATBgoJkiaJk/IsZAEZFgVjeXJpbDEVMBMGCgmSJomT8ixkARkWBWVt
-YWlsMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EACxc54z3mt3TwH
-c6kQxSG8dzo/BPDFEfhCKUw6ZqoNuCJtXpDPFkthU+fAy6uP4HDnaRGsMHXq81Sy
-kciAzYMEghngcpMVwZMJHvCdQ1+h46OeDtMxDOVcjanFpUsSdr4OkyvNLFw2DtyN
-RIDkItmeIR8nJpbL8qm4VcJyfiBU6aXPwKJHMM9bldO42FHua7fAWmt30cKxMCGq
-DAydSElataUgqdA7RIugWvGdF0j2WloABxD/XdV2KhYpftHcxV5mGNEqoCe5sol8
-j2mSaYDtD3iGhHjRlhoPEj8wTBjXFQZ5j4EMlUm8ocFbK9KGL5l5/Rgfh0si8TL1
-KYSQ6QIDAQABo3kwdzAJBgNVHRMEAjAAMAsGA1UdDwQEAwIEsDAdBgNVHQ4EFgQU
-37rWCpfcBoXxjgYvY0bfydb4dbswHgYDVR0RBBcwFYETY29udGFjdEBjeXJpbC5l
-bWFpbDAeBgNVHRIEFzAVgRNjb250YWN0QGN5cmlsLmVtYWlsMA0GCSqGSIb3DQEB
-BQUAA4IBAQBw9I7QRS2b/DDHvU7GeRj78jXMC1h44jjgWD7pQgh/ElxF+eIjNuqw
-eylIigd2J5Q94Qrxarys1OFjNCboVRFz4oC8Ft7JbLAQq5s6g8qfSF6uCAffpvJg
-2sied6dgkMVKWO2yjrretyhouxcCYb5jUIw1C+drhZD+qXZNEqv4S/1HIvN4wLQo
-6bCBEmU6y6htZEV04mseS/n3MN75HhvddaO6GvKxRIox2lEPacYVsLg02vf14oSZ
-JAoJK0pylOIOYNby0iAISk3czU1cmi2EZXGqezYqRnzgrwfjxQ3NvQJgz49qJ35m
-vdqKN7VS1+j1AXyonlnVc1vujL7UbwvF
------END CERTIFICATE-----