flores 0.0.4 → 0.0.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 5628419d75d7725ac7a85dfb625142a1607b162e
-  data.tar.gz: 79027be03b9a83aca2573c3f05b17838bfb218f9
+  metadata.gz: 753a3d8f3f074aa4abec9b5a50782da024e4c7d9
+  data.tar.gz: b0680aa3d4ff01572d386edf6d3909c851a5df3b
 SHA512:
-  metadata.gz: 3898ab4b5e26cdd2cd8b1bb01284b0d525f0a141cc211dcfa0804c20f217b06c8e9a2ef37429bede123feb439d6a69a3b38a9e77956aae164776b42dd3e2a885
-  data.tar.gz: 058ddd9a151b86d5728eddcafb880144e7578d673b007b2f8389fc8511aee1f45ffe47620f85beb07251af68c5a80e6f960792bd0bf04f4bd62e5ebcc636bdc0
+  metadata.gz: 038c0c32048a720f228e0acd243d9ca9ca71d92e8b81ed4a80d70634b6788d34ca7325e926db02422d7dfbce3ebd4b1c46ffc521d139467d69b1f789f0d0a28e
+  data.tar.gz: 61a9bbc371ff597856663a6e35f31f7b8c5d6e0547b9b1d584d4d59e7ec9d46f9185d062ac868ed9fbe9f2c05ddca13d36efa2be09942ac6cca30fe26da261b0

data/.gitignore

@@ -0,0 +1 @@
+coverage/

data/flores.gemspec

@@ -2,7 +2,7 @@ Gem::Specification.new do |spec|
   files = %x(git ls-files).split("\n")
 
   spec.name = "flores"
-  spec.version = "0.0.4"
+  spec.version = "0.0.5"
   spec.summary = "Fuzz, randomize, and stress your tests"
   spec.description = <<-DESCRIPTION
     Add fuzzing, randomization, and stress to your tests.

data/lib/flores/pki.rb

@@ -168,11 +168,12 @@ module Flores::PKI
       extensions.issuer_certificate = self_signed? ? certificate : signing_certificate
 
       certificate.issuer = extensions.issuer_certificate.subject
-      certificate.add_extension(extensions.create_extension("subjectKeyIdentifier", "hash", true))
+      certificate.add_extension(extensions.create_extension("subjectKeyIdentifier", "hash", false))
 
       # RFC 5280 4.2.1.1. Authority Key Identifier
       # This is "who signed this key"
-      certificate.add_extension(extensions.create_extension("authorityKeyIdentifier", "keyid:always,issuer", true))
+      certificate.add_extension(extensions.create_extension("authorityKeyIdentifier", "keyid:always", false))
+      #certificate.add_extension(extensions.create_extension("authorityKeyIdentifier", "keyid:always,issuer:always", false))
 
       if want_signature_ability?
         # Create a CA.
@@ -196,6 +197,11 @@ module Flores::PKI
         certificate.add_extension(extensions.create_extension("keyUsage", "digitalSignature, keyEncipherment", true))
         certificate.add_extension(extensions.create_extension("extendedKeyUsage", "clientAuth, serverAuth", false))
       end
+
+      if @subject_alternates
+        certificate.add_extension(extensions.create_extension("subjectAltName", @subject_alternates.join(",")))
+      end
+        
       certificate.serial = OpenSSL::BN.new(serial)
       certificate.sign(signing_key, digest_method)
       certificate

data/spec/flores/pki_integration_spec.rb

@@ -0,0 +1,77 @@
+# encoding: utf-8
+# This file is part of ruby-flores.
+# Copyright (C) 2015 Jordan Sissel
+# 
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Affero General Public License as
+# published by the Free Software Foundation, either version 3 of the
+# License, or (at your option) any later version.
+# 
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU Affero General Public License for more details.
+# 
+# You should have received a copy of the GNU Affero General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+require "spec_init"
+require "flores/pki"
+
+describe "PKI Integration" do
+  let(:csr) { Flores::PKI::CertificateSigningRequest.new }
+  # Here, I use a 1024-bit key for faster tests. 
+  # Please do not use such small keys in production.
+  let(:key_bits) { 1024 }
+  let(:key) { OpenSSL::PKey::RSA.generate(key_bits, 65537) }
+  let(:certificate_duration) { Flores::Random.number(1..86400) }
+
+  context "with self-signed client/server certificate" do
+    let(:certificate_subject) { "CN=server.example.com" }
+    let(:certificate) { csr.create }
+
+    # Returns [socket, address, port]
+    let(:listener) { Flores::Random.tcp_listener }
+    let(:server) { listener[0] }
+    let(:server_address) { listener[1] }
+    let(:server_port) { listener[2] }
+
+    let(:server_context) { OpenSSL::SSL::SSLContext.new }
+    let(:client_context) { OpenSSL::SSL::SSLContext.new }
+
+    before do
+      #Thread.abort_on_exception = true
+      csr.subject = certificate_subject
+      csr.public_key = key.public_key
+      csr.start_time = Time.now
+      csr.expire_time = csr.start_time + certificate_duration
+      csr.signing_key = key
+      csr.want_signature_ability = true
+
+      server_context.cert = certificate
+      server_context.key = key
+      server_context.ssl_version = :TLSv1
+      server_context.verify_mode =  OpenSSL::SSL::VERIFY_NONE
+
+      client_store = OpenSSL::X509::Store.new
+      client_store.add_cert(certificate)
+      client_context.cert_store = client_store
+      client_context.verify_mode = OpenSSL::SSL::VERIFY_PEER
+      client_context.ssl_version = :TLSv1
+
+      ssl_server = OpenSSL::SSL::SSLServer.new(server, server_context)
+      Thread.new do
+        begin
+          ssl_server.accept
+        rescue => e
+          puts "Server accept failed: #{e}"
+        end
+      end
+    end
+
+    it "should successfully connect as a client" do
+      socket = TCPSocket.new(server_address, server_port)
+      ssl_client = OpenSSL::SSL::SSLSocket.new(socket, client_context)
+      ssl_client.connect
+    end
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: flores
 version: !ruby/object:Gem::Version
-  version: 0.0.4
+  version: 0.0.5
 platform: ruby
 authors:
 - Jordan Sissel
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-06-23 00:00:00.000000000 Z
+date: 2015-07-29 00:00:00.000000000 Z
 dependencies: []
 description: |2
       Add fuzzing, randomization, and stress to your tests.
@@ -23,6 +23,7 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- ".gitignore"
 - ".rubocop.yml"
 - Gemfile
 - Gemfile.lock
@@ -40,6 +41,7 @@ files:
 - lib/flores/rspec/analyze.rb
 - lib/flores/rspec/formatters/analyze.rb
 - lib/flores/rspec/stress.rb
+- spec/flores/pki_integration_spec.rb
 - spec/flores/pki_spec.rb
 - spec/flores/random_spec.rb
 - spec/flores/rspec/stress_spec.rb
@@ -65,9 +67,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.4.6
+rubygems_version: 2.4.8
 signing_key: 
 specification_version: 4
 summary: Fuzz, randomize, and stress your tests
 test_files: []
-has_rdoc: