httpi-adapter-openssl_gost 0.0.1 → 0.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 7246e71d3ac930e54148951c0f832c4e285fb70b
-  data.tar.gz: 0e1b4be04689555e7eeba4664beb366877713fe7
+  metadata.gz: 7ce75bfeccc88a1035be5077c09baded7bf6979c
+  data.tar.gz: 93b21175c1924df78e7be94504a0e458330d2690
 SHA512:
-  metadata.gz: 7fd06b785759998e6ec5893f7c2d5292e452f3c9416241c66cbed363861db8da28ab61acd0ff57f122c691f01c844ffc7a713921a9ce8acacefc79f119175349
-  data.tar.gz: e1c2581189f1bb79158f416c565b2b74ea4a678484c30c0092fcdcc665aec3e86d80a50a2c986e0e05cc317a62c896a6562ac22fdf30c77b946f46d891075e63
+  metadata.gz: 55c9e08aa87f67e54ba858bb0482b0238a8662a660f83dd0f0080a5158583135bc75910ecb5c4774508dea8a52d2eb95514d9e3ce6cd1c6b7e769f01904c5031
+  data.tar.gz: 19ec0fcee9cb4379600585d179d13cd82e397176f2945601b1410c454a1b354b4409cf5a1a1cc9c499d52abe6a49c05a39ce6944be40bac2de96f22d140bbbf8

data/README.md

@@ -77,6 +77,8 @@ request.auth.ssl.cert_file     = '/full/path/to/client.crt'
 request.auth.ssl.cert_key_file = '/full/path/to/client.pem'
 ```
 
+Similarly, you can pass certificate authority certificate filepath to `ca_cert_file=` method. `openssl s_client` doesn't recognize system CA certificates automatically, this is a [known bug](https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/396818) (please hit «This bug affects me» link there).
+
 ### Usage with savon
 
 You need to use custom branches of [savon] and [wasabi] until next pull requests are not merged in:
@@ -95,10 +97,11 @@ Specify `:adapter` in savon client global options:
 ```ruby
 require 'httpi/adapter/openssl_gost'
 soap_client = Savon.client(
-  wsdl:              'https://service-requiring-gost.ru/service?wsdl',
-  ssl_cert_file:     '/full/path/to/client.crt',
-  ssl_cert_key_file: '/full/path/to/client.pem',
-  adapter:           :openssl_gost,
+  wsdl:                 'https://service-requiring-gost.ru/service?wsdl',
+  ssl_cert_file:        '/full/path/to/client.crt',
+  ssl_cert_key_file:    '/full/path/to/client.pem',
+  ssl_ca_cert_key_file: '/full/path/to/ca.crt',
+  adapter:              :openssl_gost,
 )
 ```
 

data/lib/httpi/adapter/openssl_gost.rb

@@ -12,17 +12,20 @@ module HTTPI
         @request = request
         @pubkey_path  = request.auth.ssl.cert_file
         @privkey_path = request.auth.ssl.cert_key_file
+        @cacert_path = request.auth.ssl.ca_cert_file
       end
 
       attr_reader :client
       attr_accessor :pubkey_path
       attr_accessor :privkey_path
+      attr_accessor :cacert_path
 
       def request(method)
         uri = @request.url
         cmd = "openssl s_client -engine gost -connect '#{uri.host}:#{uri.port}' -quiet"
-        cmd += " -cert '#{pubkey_path}'"  if pubkey_path
-        cmd += " -key '#{privkey_path}'"  if privkey_path
+        cmd += " -cert '#{pubkey_path}'"    if pubkey_path
+        cmd += " -key '#{privkey_path}'"    if privkey_path
+        cmd += " -CAfile '#{cacert_path}'"  if cacert_path
 
         # Prepare request
         req = "#{method.upcase} #{uri.request_uri} HTTP/1.1\r\n"

data/lib/httpi/adapter/openssl_gost/version.rb

@@ -3,7 +3,7 @@ require 'httpi'
 module HTTPI
   module Adapter
     class OpensslGost < Base
-      VERSION = '0.0.1'
+      VERSION = '0.0.2'
     end
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: httpi-adapter-openssl_gost
 version: !ruby/object:Gem::Version
-  version: 0.0.1
+  version: 0.0.2
 platform: ruby
 authors:
 - Andrey Novikov
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-04-27 00:00:00.000000000 Z
+date: 2014-04-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: httpi