RubyGems - http - Versions diffs - 5.3.1 → 6.0.0 - Mend

http 5.3.1 → 6.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (201) hide show

checksums.yaml +4 -4
data/CHANGELOG.md +241 -41
data/LICENSE.txt +1 -1
data/README.md +110 -13
data/UPGRADING.md +491 -0
data/http.gemspec +32 -29
data/lib/http/base64.rb +11 -1
data/lib/http/chainable/helpers.rb +62 -0
data/lib/http/chainable/verbs.rb +136 -0
data/lib/http/chainable.rb +232 -136
data/lib/http/client.rb +158 -127
data/lib/http/connection/internals.rb +141 -0
data/lib/http/connection.rb +126 -97
data/lib/http/content_type.rb +61 -6
data/lib/http/errors.rb +25 -1
data/lib/http/feature.rb +65 -5
data/lib/http/features/auto_deflate.rb +124 -17
data/lib/http/features/auto_inflate.rb +38 -15
data/lib/http/features/caching/entry.rb +178 -0
data/lib/http/features/caching/in_memory_store.rb +63 -0
data/lib/http/features/caching.rb +216 -0
data/lib/http/features/digest_auth.rb +234 -0
data/lib/http/features/instrumentation.rb +97 -17
data/lib/http/features/logging.rb +183 -5
data/lib/http/features/normalize_uri.rb +17 -0
data/lib/http/features/raise_error.rb +18 -3
data/lib/http/form_data/composite_io.rb +106 -0
data/lib/http/form_data/file.rb +95 -0
data/lib/http/form_data/multipart/param.rb +62 -0
data/lib/http/form_data/multipart.rb +106 -0
data/lib/http/form_data/part.rb +52 -0
data/lib/http/form_data/readable.rb +58 -0
data/lib/http/form_data/urlencoded.rb +175 -0
data/lib/http/form_data/version.rb +8 -0
data/lib/http/form_data.rb +102 -0
data/lib/http/headers/known.rb +3 -0
data/lib/http/headers/normalizer.rb +17 -36
data/lib/http/headers.rb +172 -65
data/lib/http/mime_type/adapter.rb +24 -9
data/lib/http/mime_type/json.rb +19 -4
data/lib/http/mime_type.rb +21 -3
data/lib/http/options/definitions.rb +189 -0
data/lib/http/options.rb +172 -125
data/lib/http/redirector.rb +80 -75
data/lib/http/request/body.rb +87 -6
data/lib/http/request/builder.rb +184 -0
data/lib/http/request/proxy.rb +83 -0
data/lib/http/request/writer.rb +76 -16
data/lib/http/request.rb +214 -98
data/lib/http/response/body.rb +103 -18
data/lib/http/response/inflater.rb +35 -7
data/lib/http/response/parser.rb +98 -4
data/lib/http/response/status/reasons.rb +2 -4
data/lib/http/response/status.rb +141 -31
data/lib/http/response.rb +219 -61
data/lib/http/retriable/delay_calculator.rb +38 -11
data/lib/http/retriable/errors.rb +21 -0
data/lib/http/retriable/performer.rb +82 -38
data/lib/http/session.rb +280 -0
data/lib/http/timeout/global.rb +147 -34
data/lib/http/timeout/null.rb +155 -9
data/lib/http/timeout/per_operation.rb +139 -18
data/lib/http/uri/normalizer.rb +82 -0
data/lib/http/uri/parsing.rb +182 -0
data/lib/http/uri.rb +289 -124
data/lib/http/version.rb +2 -1
data/lib/http.rb +11 -2
data/sig/deps.rbs +122 -0
data/sig/http.rbs +1619 -0
data/test/http/base64_test.rb +28 -0
data/test/http/client_test.rb +739 -0
data/test/http/connection_test.rb +1533 -0
data/test/http/content_type_test.rb +190 -0
data/test/http/errors_test.rb +28 -0
data/test/http/feature_test.rb +49 -0
data/test/http/features/auto_deflate_test.rb +317 -0
data/test/http/features/auto_inflate_test.rb +213 -0
data/test/http/features/caching_test.rb +942 -0
data/test/http/features/digest_auth_test.rb +996 -0
data/test/http/features/instrumentation_test.rb +246 -0
data/test/http/features/logging_test.rb +654 -0
data/test/http/features/normalize_uri_test.rb +41 -0
data/test/http/features/raise_error_test.rb +77 -0
data/test/http/form_data/composite_io_test.rb +215 -0
data/test/http/form_data/file_test.rb +255 -0
data/test/http/form_data/fixtures/the-http-gem.info +1 -0
data/test/http/form_data/multipart_test.rb +303 -0
data/test/http/form_data/part_test.rb +90 -0
data/test/http/form_data/urlencoded_test.rb +164 -0
data/test/http/form_data_test.rb +232 -0
data/test/http/headers/normalizer_test.rb +93 -0
data/test/http/headers_test.rb +888 -0
data/test/http/mime_type/json_test.rb +39 -0
data/test/http/mime_type_test.rb +150 -0
data/test/http/options/base_uri_test.rb +148 -0
data/test/http/options/body_test.rb +21 -0
data/test/http/options/features_test.rb +38 -0
data/test/http/options/form_test.rb +21 -0
data/test/http/options/headers_test.rb +32 -0
data/test/http/options/json_test.rb +21 -0
data/test/http/options/merge_test.rb +78 -0
data/test/http/options/new_test.rb +37 -0
data/test/http/options/proxy_test.rb +32 -0
data/test/http/options_test.rb +575 -0
data/test/http/redirector_test.rb +639 -0
data/test/http/request/body_test.rb +318 -0
data/test/http/request/builder_test.rb +623 -0
data/test/http/request/writer_test.rb +391 -0
data/test/http/request_test.rb +1733 -0
data/test/http/response/body_test.rb +292 -0
data/test/http/response/parser_test.rb +105 -0
data/test/http/response/status_test.rb +322 -0
data/test/http/response_test.rb +502 -0
data/test/http/retriable/delay_calculator_test.rb +194 -0
data/test/http/retriable/errors_test.rb +71 -0
data/test/http/retriable/performer_test.rb +551 -0
data/test/http/session_test.rb +424 -0
data/test/http/timeout/global_test.rb +239 -0
data/test/http/timeout/null_test.rb +218 -0
data/test/http/timeout/per_operation_test.rb +220 -0
data/test/http/uri/normalizer_test.rb +89 -0
data/test/http/uri_test.rb +1140 -0
data/test/http/version_test.rb +15 -0
data/test/http_test.rb +818 -0
data/test/regression_tests.rb +27 -0
data/test/support/dummy_server/encoding_routes.rb +47 -0
data/test/support/dummy_server/routes.rb +201 -0
data/test/support/dummy_server/servlet.rb +81 -0
data/test/support/dummy_server.rb +200 -0
data/{spec → test}/support/fakeio.rb +2 -2
data/test/support/http_handling_shared/connection_reuse_tests.rb +97 -0
data/test/support/http_handling_shared/timeout_tests.rb +134 -0
data/test/support/http_handling_shared.rb +11 -0
data/test/support/proxy_server.rb +207 -0
data/test/support/servers/runner.rb +67 -0
data/{spec → test}/support/simplecov.rb +11 -2
data/test/support/ssl_helper.rb +108 -0
data/test/test_helper.rb +38 -0
metadata +108 -168
data/.github/workflows/ci.yml +0 -67
data/.gitignore +0 -15
data/.rspec +0 -1
data/.rubocop/layout.yml +0 -8
data/.rubocop/metrics.yml +0 -4
data/.rubocop/rspec.yml +0 -9
data/.rubocop/style.yml +0 -32
data/.rubocop.yml +0 -11
data/.rubocop_todo.yml +0 -219
data/.yardopts +0 -2
data/CHANGES_OLD.md +0 -1002
data/Gemfile +0 -51
data/Guardfile +0 -18
data/Rakefile +0 -64
data/lib/http/headers/mixin.rb +0 -34
data/lib/http/retriable/client.rb +0 -37
data/logo.png +0 -0
data/spec/lib/http/client_spec.rb +0 -556
data/spec/lib/http/connection_spec.rb +0 -88
data/spec/lib/http/content_type_spec.rb +0 -47
data/spec/lib/http/features/auto_deflate_spec.rb +0 -77
data/spec/lib/http/features/auto_inflate_spec.rb +0 -86
data/spec/lib/http/features/instrumentation_spec.rb +0 -81
data/spec/lib/http/features/logging_spec.rb +0 -65
data/spec/lib/http/features/raise_error_spec.rb +0 -62
data/spec/lib/http/headers/mixin_spec.rb +0 -36
data/spec/lib/http/headers/normalizer_spec.rb +0 -52
data/spec/lib/http/headers_spec.rb +0 -527
data/spec/lib/http/options/body_spec.rb +0 -15
data/spec/lib/http/options/features_spec.rb +0 -33
data/spec/lib/http/options/form_spec.rb +0 -15
data/spec/lib/http/options/headers_spec.rb +0 -24
data/spec/lib/http/options/json_spec.rb +0 -15
data/spec/lib/http/options/merge_spec.rb +0 -68
data/spec/lib/http/options/new_spec.rb +0 -30
data/spec/lib/http/options/proxy_spec.rb +0 -20
data/spec/lib/http/options_spec.rb +0 -13
data/spec/lib/http/redirector_spec.rb +0 -530
data/spec/lib/http/request/body_spec.rb +0 -211
data/spec/lib/http/request/writer_spec.rb +0 -121
data/spec/lib/http/request_spec.rb +0 -234
data/spec/lib/http/response/body_spec.rb +0 -85
data/spec/lib/http/response/parser_spec.rb +0 -74
data/spec/lib/http/response/status_spec.rb +0 -253
data/spec/lib/http/response_spec.rb +0 -262
data/spec/lib/http/retriable/delay_calculator_spec.rb +0 -69
data/spec/lib/http/retriable/performer_spec.rb +0 -302
data/spec/lib/http/uri/normalizer_spec.rb +0 -95
data/spec/lib/http/uri_spec.rb +0 -71
data/spec/lib/http_spec.rb +0 -535
data/spec/regression_specs.rb +0 -24
data/spec/spec_helper.rb +0 -89
data/spec/support/black_hole.rb +0 -13
data/spec/support/dummy_server/servlet.rb +0 -203
data/spec/support/dummy_server.rb +0 -44
data/spec/support/fuubar.rb +0 -21
data/spec/support/http_handling_shared.rb +0 -190
data/spec/support/proxy_server.rb +0 -39
data/spec/support/servers/config.rb +0 -11
data/spec/support/servers/runner.rb +0 -19
data/spec/support/ssl_helper.rb +0 -104
/data/{spec → test}/support/capture_warning.rb +0 -0

data/test/support/http_handling_shared/timeout_tests.rb ADDED Viewed

@@ -0,0 +1,134 @@
+# frozen_string_literal: true
+module TimeoutTests
+  # Including class must provide:
+  #   - server: a DummyServer instance
+  #   - build_client(**options): builds an HTTP::Client with given options
+  def test_timeout_without_timeouts_works
+    client = build_client(timeout_class: HTTP::Timeout::Null, timeout_options: {})
+    assert_equal "<!doctype html>", client.get(server.endpoint).body.to_s
+  end
+  def test_timeout_per_operation_works
+    client = build_client(
+      timeout_class:   HTTP::Timeout::PerOperation,
+      timeout_options: {
+        connect_timeout: 0.5,
+        read_timeout:    0.1,
+        write_timeout:   0.5
+      }
+    )
+    assert_equal "<!doctype html>", client.get(server.endpoint).body.to_s
+  end
+  def test_timeout_per_operation_connection_of_half_second_does_not_time_out
+    client = build_client(
+      timeout_class:   HTTP::Timeout::PerOperation,
+      timeout_options: {
+        connect_timeout: 0.5,
+        read_timeout:    0.1,
+        write_timeout:   0.5
+      }
+    )
+    client.get(server.endpoint).body.to_s
+  end
+  def test_timeout_per_operation_read_of_zero_times_out
+    client = build_client(
+      timeout_class:   HTTP::Timeout::PerOperation,
+      timeout_options: {
+        connect_timeout: 0.5,
+        read_timeout:    0,
+        write_timeout:   0.5
+      }
+    )
+    err = assert_raises(HTTP::TimeoutError) do
+      client.get("#{server.endpoint}/sleep").body.to_s
+    end
+    assert_match(/Read/i, err.message)
+  end
+  def test_timeout_per_operation_read_of_tenth_does_not_time_out
+    client = build_client(
+      timeout_class:   HTTP::Timeout::PerOperation,
+      timeout_options: {
+        connect_timeout: 0.5,
+        read_timeout:    0.1,
+        write_timeout:   0.5
+      }
+    )
+    client.get("#{server.endpoint}/sleep").body.to_s
+  end
+  def test_timeout_global_errors_if_connecting_takes_too_long
+    client = build_client(
+      timeout_class:   HTTP::Timeout::Global,
+      timeout_options: { global_timeout: 0.01 }
+    )
+    TCPSocket.stub(:open, ->(*) { sleep 0.025 }) do
+      err = assert_raises(HTTP::ConnectTimeoutError) { client.get(server.endpoint).body.to_s }
+      assert_match(/execution/, err.message)
+    end
+  end
+  def test_timeout_global_errors_if_reading_takes_too_long
+    client = build_client(
+      timeout_class:   HTTP::Timeout::Global,
+      timeout_options: { global_timeout: 0.01 }
+    )
+    err = assert_raises(HTTP::TimeoutError) do
+      client.get("#{server.endpoint}/sleep").body.to_s
+    end
+    assert_match(/Timed out|execution expired/, err.message)
+  end
+  def test_timeout_global_resets_state_when_reusing_connections
+    client = build_client(
+      timeout_class:   HTTP::Timeout::Global,
+      timeout_options: { global_timeout: 0.5 },
+      persistent:      server.endpoint
+    )
+    client.get("#{server.endpoint}/sleep").body.to_s
+    client.get("#{server.endpoint}/sleep").body.to_s
+  end
+  def test_timeout_combined_global_and_per_operation_works
+    client = build_client(
+      timeout_class:   HTTP::Timeout::Global,
+      timeout_options: {
+        global_timeout:  0.5,
+        connect_timeout: 0.25,
+        read_timeout:    0.25,
+        write_timeout:   0.25
+      }
+    )
+    assert_equal "<!doctype html>", client.get(server.endpoint).body.to_s
+  end
+  def test_timeout_combined_per_op_read_of_zero_times_out
+    client = build_client(
+      timeout_class:   HTTP::Timeout::Global,
+      timeout_options: {
+        global_timeout:  0.5,
+        connect_timeout: 0.25,
+        read_timeout:    0,
+        write_timeout:   0.25
+      }
+    )
+    err = assert_raises(HTTP::TimeoutError) do
+      client.get("#{server.endpoint}/sleep").body.to_s
+    end
+    assert_match(/Read timed out/, err.message)
+  end
+end

data/test/support/http_handling_shared.rb ADDED Viewed

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require "support/http_handling_shared/timeout_tests"
+require "support/http_handling_shared/connection_reuse_tests"
+module HTTPHandlingTests
+  def self.included(base)
+    base.include TimeoutTests
+    base.include ConnectionReuseTests
+  end
+end

data/test/support/proxy_server.rb ADDED Viewed

@@ -0,0 +1,207 @@
+# frozen_string_literal: true
+require "socket"
+require "uri"
+require "support/servers/runner"
+class ProxyServer
+  Target = Struct.new(:host, :port, :path, :query)
+  def initialize
+    @tcp_server     = TCPServer.new("127.0.0.1", 0)
+    @port           = @tcp_server.addr[1]
+    @ready          = Queue.new
+    @shutdown_read, @shutdown_write = IO.pipe
+  end
+  def addr
+    "127.0.0.1"
+  end
+  attr_reader :port
+  def wait_ready
+    @ready.pop
+  end
+  def start
+    @ready << true
+    loop do
+      readable, = IO.select([@tcp_server, @shutdown_read])
+      break unless readable
+      break if readable.include?(@shutdown_read)
+      client = @tcp_server.accept
+      Thread.new(client) do |c|
+        Thread.current.report_on_exception = false
+        handle_request(c)
+      end
+    end
+  rescue IOError, Errno::EBADF
+    # Server socket closed during shutdown
+  end
+  def shutdown
+    @shutdown_write.close
+    @tcp_server.close rescue nil
+    @shutdown_read.close rescue nil
+  rescue
+    nil
+  end
+  private
+  def handle_request(client)
+    method, target, version, headers, body = read_proxy_request(client)
+    return unless method && target
+    if (response = authenticate(headers))
+      client.write(response)
+      return
+    end
+    if method == "CONNECT"
+      tunnel_connection(client, target)
+    else
+      forward_and_respond(client, method, target, body, version)
+    end
+  rescue IOError, Errno::ECONNRESET, Errno::EPIPE, Errno::EBADF, URI::InvalidURIError
+    # Connection closed
+  ensure
+    client.close rescue nil
+  end
+  def read_proxy_request(client)
+    line = client.gets
+    return unless line
+    method, target, version = line.strip.split(" ", 3)
+    headers = read_headers(client)
+    body = headers["Content-Length"] ? client.read(headers["Content-Length"].to_i) : nil
+    [method, parse_target(method, target), version, headers, body]
+  end
+  def parse_target(method, target)
+    return parse_connect_target(target) if method == "CONNECT"
+    uri = URI.parse(target)
+    Target.new(host: uri.host, port: uri.port, path: uri.path, query: uri.query)
+  end
+  def parse_connect_target(target)
+    host, port = target.split(":", 2)
+    return unless host && port
+    Target.new(host: host, port: Integer(port))
+  rescue ArgumentError
+    nil
+  end
+  def read_headers(client)
+    headers = {}
+    while (header_line = client.gets)
+      break if header_line == "\r\n"
+      key, value = header_line.split(": ", 2)
+      headers[key] = value.strip
+    end
+    headers
+  end
+  def authenticate(_headers)
+    nil
+  end
+  def forward_and_respond(client, method, target, body, version)
+    target_socket = send_to_target(method, target, body, version)
+    relay_response(client, target_socket)
+  ensure
+    target_socket&.close rescue nil
+  end
+  def send_to_target(method, target, body, version)
+    socket = TCPSocket.new(target.host, target.port)
+    path = target.path.to_s.empty? ? "/" : target.path
+    path = "#{path}?#{target.query}" if target.query
+    socket.write("#{method} #{path} #{version}\r\n")
+    socket.write("Host: #{target.host}:#{target.port}\r\n")
+    socket.write("Content-Length: #{body.bytesize}\r\n") if body
+    socket.write("\r\n")
+    socket.write(body) if body
+    socket
+  end
+  def relay_response(client, target)
+    response_line = target.gets
+    return unless response_line
+    headers, content_length = read_response_headers(target)
+    body = content_length&.positive? ? target.read(content_length) : ""
+    client.write("#{response_line}X-PROXIED: true\r\n#{headers}\r\n#{body}")
+  rescue IOError, Errno::ECONNRESET
+    # Target connection error
+  end
+  def tunnel_connection(client, target)
+    target_socket = TCPSocket.new(target.host, target.port)
+    client.write("HTTP/1.1 200 Connection established\r\n\r\n")
+    relay_tunnel(client, target_socket)
+  ensure
+    target_socket&.close rescue nil
+  end
+  def relay_tunnel(client, target)
+    threads = [
+      Thread.new { copy_stream(client, target) },
+      Thread.new { copy_stream(target, client) }
+    ]
+    threads.each { |t| t.join(5) }
+  ensure
+    threads&.each { |t| t.kill if t.alive? }
+  end
+  def copy_stream(source, destination)
+    loop do
+      destination.write(source.readpartial(1024))
+    end
+  rescue IOError, Errno::ECONNRESET, Errno::EPIPE
+    nil
+  end
+  def read_response_headers(target)
+    headers = +""
+    content_length = nil
+    while (hl = target.gets)
+      break if hl == "\r\n"
+      content_length = ::Regexp.last_match(1).to_i if hl =~ /^Content-Length:\s*(\d+)/i
+      headers << hl
+    end
+    [headers, content_length]
+  end
+end
+class AuthProxyServer < ProxyServer
+  private
+  def authenticate(headers)
+    auth = headers["Proxy-Authorization"]
+    if auth
+      encoded = auth.sub(/^Basic\s+/, "")
+      user, pass = encoded.unpack1("m0").split(":", 2)
+      return if user == "username" && pass == "password"
+    end
+    "HTTP/1.1 407 Proxy Authentication Required\r\n" \
+      "Proxy-Authenticate: Basic realm=\"proxy\"\r\n" \
+      "Content-Length: 0\r\n" \
+      "\r\n"
+  end
+end

data/test/support/servers/runner.rb ADDED Viewed

@@ -0,0 +1,67 @@
+# frozen_string_literal: true
+module ServerRunner
+  @all_servers = []
+  def self.all_servers
+    @all_servers
+  end
+  def run_server(name)
+    defining_class = self
+    define_method(name) do
+      cache = defining_class.instance_variable_get(:@_server_cache) ||
+              defining_class.instance_variable_set(:@_server_cache, {})
+      cache[name] ||= begin
+        server = yield
+        Thread.new { server.start }
+        server.wait_ready
+        ServerRunner.all_servers << server
+        server
+      end
+    end
+    _run_servers << name
+  end
+  def _run_servers
+    @_run_servers ||= []
+  end
+end
+module ServerLifecycle
+  def setup
+    super
+    _all_run_servers.each do |s|
+      server = send(s)
+      server.reset if server.respond_to?(:reset)
+    end
+  end
+  private
+  def _all_run_servers
+    klass = self.class
+    servers = []
+    while klass.respond_to?(:_run_servers)
+      servers.concat(klass._run_servers)
+      klass = klass.superclass
+    end
+    servers.uniq
+  end
+end
+Minitest::Test.extend(ServerRunner)
+Minitest::Test.include(ServerLifecycle)
+Minitest.after_run do
+  ServerRunner.all_servers.each do |server|
+    server.shutdown
+  rescue
+    nil
+  end
+end

data/{spec → test}/support/simplecov.rb RENAMED Viewed

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
+return if ENV["MUTANT"] || ENV["NOCOV"]
 require "simplecov"
 if ENV["CI"]
@@ -14,6 +16,13 @@ if ENV["CI"]
 end
 SimpleCov.start do
-  add_filter "/spec/"
-  minimum_coverage 80
+  add_filter "/test/"
+  add_filter "/minitest-memory/"
+  if RUBY_ENGINE == "ruby"
+    enable_coverage :branch
+    minimum_coverage line: 100, branch: 100
+  else
+    minimum_coverage line: 99
+  end
 end

data/test/support/ssl_helper.rb ADDED Viewed

@@ -0,0 +1,108 @@
+# frozen_string_literal: true
+require "openssl"
+require "pathname"
+module SSLHelper
+  CERTS_PATH = Pathname.new File.expand_path("../../tmp/certs", __dir__)
+  class << self
+    def server_context
+      context = OpenSSL::SSL::SSLContext.new
+      context.verify_mode = OpenSSL::SSL::VERIFY_NONE
+      context.key         = server_cert_key
+      context.cert        = server_cert_cert
+      context.ca_file     = ca_file
+      context
+    end
+    def client_context
+      # Ensure server cert is generated (triggers CA generation too)
+      server_cert_cert
+      context = OpenSSL::SSL::SSLContext.new
+      context.options     = OpenSSL::SSL::SSLContext::DEFAULT_PARAMS[:options]
+      context.verify_mode = OpenSSL::SSL::VERIFY_PEER
+      context.verify_hostname = true if context.respond_to?(:verify_hostname=)
+      context.ca_file = ca_file
+      context
+    end
+    def client_params
+      server_cert_cert
+      {
+        ca_file: ca_file
+      }
+    end
+    private
+    def ca_key
+      @ca_key ||= OpenSSL::PKey::RSA.new(2048)
+    end
+    def ca_cert
+      @ca_cert ||= begin
+        cert = OpenSSL::X509::Certificate.new
+        cert.version    = 2
+        cert.serial     = 1
+        cert.subject    = OpenSSL::X509::Name.parse("/CN=honestachmed.com")
+        cert.issuer     = cert.subject
+        cert.public_key = ca_key.public_key
+        cert.not_before = Time.now - 60
+        cert.not_after  = Time.now + (365 * 24 * 60 * 60)
+        ef = OpenSSL::X509::ExtensionFactory.new
+        ef.subject_certificate = cert
+        ef.issuer_certificate  = cert
+        cert.add_extension(ef.create_extension("basicConstraints", "CA:TRUE", true))
+        cert.add_extension(ef.create_extension("keyUsage", "keyCertSign,cRLSign", true))
+        cert.sign(ca_key, OpenSSL::Digest.new("SHA256"))
+        cert
+      end
+    end
+    def ca_file
+      return @ca_file if defined?(@ca_file)
+      CERTS_PATH.mkpath
+      cert_file = CERTS_PATH.join("ca.crt")
+      cert_file.open("w") { |io| io << ca_cert.to_pem }
+      @ca_file = cert_file.to_s
+    end
+    def server_cert_key
+      @server_cert_key ||= OpenSSL::PKey::RSA.new(2048)
+    end
+    def server_cert_cert
+      @server_cert_cert ||= begin
+        cert = OpenSSL::X509::Certificate.new
+        cert.version    = 2
+        cert.serial     = 2
+        cert.subject    = OpenSSL::X509::Name.parse("/CN=127.0.0.1")
+        cert.issuer     = ca_cert.subject
+        cert.public_key = server_cert_key.public_key
+        cert.not_before = Time.now - 60
+        cert.not_after  = Time.now + (365 * 24 * 60 * 60)
+        ef = OpenSSL::X509::ExtensionFactory.new
+        ef.subject_certificate = cert
+        ef.issuer_certificate  = ca_cert
+        cert.add_extension(ef.create_extension("basicConstraints", "CA:FALSE"))
+        cert.add_extension(ef.create_extension("keyUsage", "digitalSignature,keyEncipherment", true))
+        cert.add_extension(ef.create_extension("extendedKeyUsage", "serverAuth"))
+        cert.add_extension(ef.create_extension("subjectAltName", "IP:127.0.0.1"))
+        cert.sign(ca_key, OpenSSL::Digest.new("SHA256"))
+        cert
+      end
+    end
+  end
+end

data/test/test_helper.rb ADDED Viewed

@@ -0,0 +1,38 @@
+# frozen_string_literal: true
+require_relative "support/simplecov"
+require "minitest/autorun"
+require "minitest/mock"
+require "minitest/memory" if RUBY_ENGINE == "ruby"
+require "minitest/strict"
+require "http"
+# No-op for mutant cover declarations when mutant is not loaded
+Minitest::Test.extend(Module.new { def cover(*); end }) unless Minitest::Test.respond_to?(:cover)
+require "support/capture_warning"
+require "support/fakeio"
+# Helper for creating fake objects with predefined method responses
+module FakeHelper
+  def fake(**methods)
+    obj = Object.new
+    methods.each do |name, value|
+      if value.is_a?(Proc)
+        obj.define_singleton_method(name) { |*args, **kwargs, &blk| value.call(*args, **kwargs, &blk) }
+      else
+        obj.define_singleton_method(name) { |*| value }
+      end
+    end
+    obj
+  end
+end
+module Minitest
+  class Test
+    include FakeHelper
+    include Minitest::Memory if RUBY_ENGINE == "ruby"
+  end
+end