inspec 1.51.6 → 1.51.15

data/lib/resources/wmi.rb

@@ -1,114 +1,114 @@
-# encoding: utf-8
-# author: Christoph Hartmann
-# author: Dominik Richter
-
-require 'utils/object_traversal'
-
-module Inspec::Resources
-  # This resource simplifies the access to wmi
-  # on CLI you would use:
-  # WMIC /NAMESPACE:\\root\rsop\computer PATH RSOP_SecuritySettingNumeric WHERE "KeyName = 'MinimumPasswordAge' And precedence=1" GET Setting
-  # We use Get-WmiObject via Powershell to retrieve all values.
-  class WMI < Inspec.resource(1)
-    name 'wmi'
-    desc 'request wmi information'
-    example "
-      describe wmi({
-        class: 'RSOP_SecuritySettingNumeric',
-        namespace: 'root\\rsop\\computer',
-        filter: 'KeyName = \'MinimumPasswordAge\' And precedence=1'
-      }) do
-         its('Setting') { should eq true }
-      end
-    "
-
-    include ObjectTraverser
-    attr_accessor :content
-
-    def initialize(wmiclass = nil, opts = nil)
-      # verify that this resource is only supported on Windows
-      return skip_resource 'The `wmi` resource is not supported on your OS.' unless inspec.os.windows?
-
-      @options = opts || {}
-      # if wmiclass is not a hash, we have to handle deprecation behavior
-      if wmiclass.is_a?(Hash)
-        @options.merge!(wmiclass)
-      else
-        warn '[DEPRECATION] `wmi(\'wmiclass\')` is deprecated.  Please use `wmi({class: \'wmiclass\'})` instead.'
-        @options[:class] = wmiclass
-      end
-    end
-
-    # returns nil, if not existant or value
-    def method_missing(*keys)
-      # catch behavior of rspec its implementation
-      # @see https://github.com/rspec/rspec-its/blob/master/lib/rspec/its.rb#L110
-      keys.shift if keys.is_a?(Array) && keys[0] == :[]
-
-      # map all symbols to strings
-      keys = keys.map { |x| x.to_s.downcase } if keys.is_a?(Array)
-
-      value(keys)
-    end
-
-    def value(key)
-      extract_value(key, params)
-    end
-
-    def params
-      return @content if defined?(@content)
-      @content = {}
-
-      # abort if no options are available
-      return @content unless defined?(@options)
-
-      # filter for supported options
-      args = @options.select { |key, _value| [:class, :namespace, :query, :filter].include?(key) }
-
-      # convert to Get-WmiObject arguments
-      params = ''
-      args.each { |key, value| params += " -#{key} \"#{value.gsub('"', '`"')}\"" }
-
-      # run wmi command and filter empty wmi
-      script = <<-EOH
-      Filter Aggregate
-      {
-          $arr = @{}
-          $_.properties | % {
-              $arr.Add($_.name, $_.value)
-          }
-          $arr
-      }
-      Get-WmiObject #{params} | Aggregate | ConvertTo-Json
-      EOH
-
-      # run wmi command
-      cmd = inspec.powershell(script)
-      @content = JSON.parse(cmd.stdout)
-
-      # make all keys case-insensitive
-      @content = lowercase_keys(@content)
-    rescue JSON::ParserError => _e
-      @content
-    end
-
-    def to_s
-      "WMI with #{@options}"
-    end
-
-    private
-
-    def lowercase_keys(content)
-      if content.is_a?(Hash)
-        content.keys.each do |key|
-          new_key = key.to_s.downcase
-          content[new_key] = content.delete(key)
-          lowercase_keys(content[new_key])
-        end
-      elsif content.respond_to?(:each)
-        content.each { |item| lowercase_keys(item) }
-      end
-      content
-    end
-  end
-end
+# encoding: utf-8
+# author: Christoph Hartmann
+# author: Dominik Richter
+
+require 'utils/object_traversal'
+
+module Inspec::Resources
+  # This resource simplifies the access to wmi
+  # on CLI you would use:
+  # WMIC /NAMESPACE:\\root\rsop\computer PATH RSOP_SecuritySettingNumeric WHERE "KeyName = 'MinimumPasswordAge' And precedence=1" GET Setting
+  # We use Get-WmiObject via Powershell to retrieve all values.
+  class WMI < Inspec.resource(1)
+    name 'wmi'
+    desc 'request wmi information'
+    example "
+      describe wmi({
+        class: 'RSOP_SecuritySettingNumeric',
+        namespace: 'root\\rsop\\computer',
+        filter: 'KeyName = \'MinimumPasswordAge\' And precedence=1'
+      }) do
+         its('Setting') { should eq true }
+      end
+    "
+
+    include ObjectTraverser
+    attr_accessor :content
+
+    def initialize(wmiclass = nil, opts = nil)
+      # verify that this resource is only supported on Windows
+      return skip_resource 'The `wmi` resource is not supported on your OS.' unless inspec.os.windows?
+
+      @options = opts || {}
+      # if wmiclass is not a hash, we have to handle deprecation behavior
+      if wmiclass.is_a?(Hash)
+        @options.merge!(wmiclass)
+      else
+        warn '[DEPRECATION] `wmi(\'wmiclass\')` is deprecated.  Please use `wmi({class: \'wmiclass\'})` instead.'
+        @options[:class] = wmiclass
+      end
+    end
+
+    # returns nil, if not existant or value
+    def method_missing(*keys)
+      # catch behavior of rspec its implementation
+      # @see https://github.com/rspec/rspec-its/blob/master/lib/rspec/its.rb#L110
+      keys.shift if keys.is_a?(Array) && keys[0] == :[]
+
+      # map all symbols to strings
+      keys = keys.map { |x| x.to_s.downcase } if keys.is_a?(Array)
+
+      value(keys)
+    end
+
+    def value(key)
+      extract_value(key, params)
+    end
+
+    def params
+      return @content if defined?(@content)
+      @content = {}
+
+      # abort if no options are available
+      return @content unless defined?(@options)
+
+      # filter for supported options
+      args = @options.select { |key, _value| [:class, :namespace, :query, :filter].include?(key) }
+
+      # convert to Get-WmiObject arguments
+      params = ''
+      args.each { |key, value| params += " -#{key} \"#{value.gsub('"', '`"')}\"" }
+
+      # run wmi command and filter empty wmi
+      script = <<-EOH
+      Filter Aggregate
+      {
+          $arr = @{}
+          $_.properties | % {
+              $arr.Add($_.name, $_.value)
+          }
+          $arr
+      }
+      Get-WmiObject #{params} | Aggregate | ConvertTo-Json
+      EOH
+
+      # run wmi command
+      cmd = inspec.powershell(script)
+      @content = JSON.parse(cmd.stdout)
+
+      # make all keys case-insensitive
+      @content = lowercase_keys(@content)
+    rescue JSON::ParserError => _e
+      @content
+    end
+
+    def to_s
+      "WMI with #{@options}"
+    end
+
+    private
+
+    def lowercase_keys(content)
+      if content.is_a?(Hash)
+        content.keys.each do |key|
+          new_key = key.to_s.downcase
+          content[new_key] = content.delete(key)
+          lowercase_keys(content[new_key])
+        end
+      elsif content.respond_to?(:each)
+        content.each { |item| lowercase_keys(item) }
+      end
+      content
+    end
+  end
+end

data/lib/resources/x509_certificate.rb

@@ -1,143 +1,143 @@
-# encoding: utf-8
-# author: Richard Nixon
-# author: Christoph Hartmann
-
-require 'openssl'
-require 'hashie/mash'
-
-module Inspec::Resources
-  class X509CertificateResource < Inspec.resource(1)
-    name 'x509_certificate'
-    desc 'Used to test x.509 certificates'
-    example "
-      describe x509_certificate('/etc/pki/www.mywebsite.com.pem') do
-        its('subject') { should match /CN=My Website/ }
-        its('validity_in_days') { should be > 30 }
-      end
-
-      describe x509_certificate('trials/x509/cert.pem') do
-        it { should be_certificate }
-        it { should be_valid }
-        its('fingerprint') { should eq '62b137bdf427e7273dc2e487877b3033e4c8ce17' }
-        its('signature_algorithm') { should eq 'sha1WithRSAEncryption' }
-        its('validity_in_days') { should_not be < 100 }
-        its('validity_in_days') { should be >= 100 }
-        its('subject_dn') { should eq '/C=DE/ST=Berlin/L=Berlin/O=InSpec/OU=Chef Software, Inc/CN=inspec.io/emailAddress=support@chef.io' }
-        its('subject.C') { should eq 'DE' }
-        its('subject.emailAddress') { should_not be_empty }
-        its('subject.emailAddress') { should eq 'support@chef.io' }
-        its('issuer_dn') { should eq '/C=DE/ST=Berlin/L=Berlin/O=InSpec/OU=Chef Software, Inc/CN=inspec.io/emailAddress=support@chef.io' }
-        its('key_length') { should be >= 2048 }
-        its('extensions.subjectKeyIdentifier') { should cmp 'A5:16:0B:12:F4:48:0F:06:6C:32:29:67:98:12:DF:3D:0D:75:9D:5C' }
-      end
-    "
-
-    # @see https://tools.ietf.org/html/rfc5280#page-23
-    def initialize(filename)
-      @certpath = filename
-      @issuer = nil
-      @parsed_subject = nil
-      @parsed_issuer = nil
-      @extensions = nil
-
-      file = inspec.file(@certpath)
-      return skip_resource "Unable to find certificate file #{@certpath}" unless file.exist?
-
-      begin
-        @cert = OpenSSL::X509::Certificate.new file.content
-      rescue OpenSSL::X509::CertificateError
-        @cert = nil
-        return skip_resource "Unable to load certificate #{@certpath}"
-      end
-    end
-
-    # Forward these methods directly to OpenSSL::X509::Certificate instance
-    %w{version not_before not_after signature_algorithm public_key}.each do |m|
-      define_method m.to_sym do |*args|
-        @cert.method(m.to_sym).call(*args)
-      end
-    end
-
-    def certificate?
-      !@cert.nil?
-    end
-
-    def fingerprint
-      return if @cert.nil?
-      OpenSSL::Digest::SHA1.new(@cert.to_der).to_s
-    end
-
-    def serial
-      return if @cert.nil?
-      @cert.serial.to_i
-    end
-
-    def subject_dn
-      return if @cert.nil?
-      @cert.subject.to_s
-    end
-
-    def subject
-      return if @cert.nil?
-      # Return cached subject if we have already parsed it
-      return @parsed_subject if @parsed_subject
-      # Use a Mash to make it easier to access hash elements in "its('subject') {should ...}"
-      @parsed_subject = Hashie::Mash.new(Hash[@cert.subject.to_a.map { |k, v, _| [k, v] }])
-    end
-
-    def issuer_dn
-      return if @cert.nil?
-      @cert.issuer.to_s
-    end
-
-    def issuer
-      return if @cert.nil?
-      # Return cached subject if we have already parsed it
-      return @parsed_issuer if @parsed_issuer
-      # Use a Mash to make it easier to access hash elements in "its('issuer') {should ...}"
-      @parsed_issuer = Hashie::Mash.new(Hash[@cert.issuer.to_a.map { |k, v, _| [k, v] }])
-    end
-
-    def key_length
-      return if @cert.nil?
-      @cert.public_key.n.num_bytes * 8
-    end
-
-    def validity_in_days
-      (not_after - Time.now.utc) / 86400
-    end
-
-    def valid?
-      now = Time.now
-      certificate? && (now >= not_before && now <= not_after)
-    end
-
-    def extensions
-      # Return cached Mash if we already parsed the certificate extensions
-      return @extensions if @extensions
-      # Return the exception class if we failed to instantiate a Cert from file
-      return @cert unless @cert.respond_to? :extensions
-      # Use a Mash to make it easier to access hash elements in "its('entensions') {should ...}"
-      @extensions = Hashie::Mash.new({})
-      # Make sure standard extensions exist so we don't get nil for nil:NilClass
-      # when the user tests for extensions which aren't present
-      %w{
-        keyUsage extendedKeyUsage basicConstraints subjectKeyIdentifier
-        authorityKeyIdentifier subjectAltName issuerAltName authorityInfoAccess
-        crlDistributionPoints issuingDistributionPoint certificatePolicies
-        policyConstraints nameConstraints noCheck tlsfeature nsComment
-      }.each { |extension| @extensions[extension] ||= [] }
-      # Now parse the extensions into the Mash
-      extension_array = @cert.extensions.map(&:to_s)
-      extension_array.each do |extension|
-        kv = extension.split(/ *= */, 2)
-        @extensions[kv.first] = kv.last.split(/ *, */)
-      end
-      @extensions
-    end
-
-    def to_s
-      "x509_certificate #{@certpath}"
-    end
-  end
-end
+# encoding: utf-8
+# author: Richard Nixon
+# author: Christoph Hartmann
+
+require 'openssl'
+require 'hashie/mash'
+
+module Inspec::Resources
+  class X509CertificateResource < Inspec.resource(1)
+    name 'x509_certificate'
+    desc 'Used to test x.509 certificates'
+    example "
+      describe x509_certificate('/etc/pki/www.mywebsite.com.pem') do
+        its('subject') { should match /CN=My Website/ }
+        its('validity_in_days') { should be > 30 }
+      end
+
+      describe x509_certificate('trials/x509/cert.pem') do
+        it { should be_certificate }
+        it { should be_valid }
+        its('fingerprint') { should eq '62b137bdf427e7273dc2e487877b3033e4c8ce17' }
+        its('signature_algorithm') { should eq 'sha1WithRSAEncryption' }
+        its('validity_in_days') { should_not be < 100 }
+        its('validity_in_days') { should be >= 100 }
+        its('subject_dn') { should eq '/C=DE/ST=Berlin/L=Berlin/O=InSpec/OU=Chef Software, Inc/CN=inspec.io/emailAddress=support@chef.io' }
+        its('subject.C') { should eq 'DE' }
+        its('subject.emailAddress') { should_not be_empty }
+        its('subject.emailAddress') { should eq 'support@chef.io' }
+        its('issuer_dn') { should eq '/C=DE/ST=Berlin/L=Berlin/O=InSpec/OU=Chef Software, Inc/CN=inspec.io/emailAddress=support@chef.io' }
+        its('key_length') { should be >= 2048 }
+        its('extensions.subjectKeyIdentifier') { should cmp 'A5:16:0B:12:F4:48:0F:06:6C:32:29:67:98:12:DF:3D:0D:75:9D:5C' }
+      end
+    "
+
+    # @see https://tools.ietf.org/html/rfc5280#page-23
+    def initialize(filename)
+      @certpath = filename
+      @issuer = nil
+      @parsed_subject = nil
+      @parsed_issuer = nil
+      @extensions = nil
+
+      file = inspec.file(@certpath)
+      return skip_resource "Unable to find certificate file #{@certpath}" unless file.exist?
+
+      begin
+        @cert = OpenSSL::X509::Certificate.new file.content
+      rescue OpenSSL::X509::CertificateError
+        @cert = nil
+        return skip_resource "Unable to load certificate #{@certpath}"
+      end
+    end
+
+    # Forward these methods directly to OpenSSL::X509::Certificate instance
+    %w{version not_before not_after signature_algorithm public_key}.each do |m|
+      define_method m.to_sym do |*args|
+        @cert.method(m.to_sym).call(*args)
+      end
+    end
+
+    def certificate?
+      !@cert.nil?
+    end
+
+    def fingerprint
+      return if @cert.nil?
+      OpenSSL::Digest::SHA1.new(@cert.to_der).to_s
+    end
+
+    def serial
+      return if @cert.nil?
+      @cert.serial.to_i
+    end
+
+    def subject_dn
+      return if @cert.nil?
+      @cert.subject.to_s
+    end
+
+    def subject
+      return if @cert.nil?
+      # Return cached subject if we have already parsed it
+      return @parsed_subject if @parsed_subject
+      # Use a Mash to make it easier to access hash elements in "its('subject') {should ...}"
+      @parsed_subject = Hashie::Mash.new(Hash[@cert.subject.to_a.map { |k, v, _| [k, v] }])
+    end
+
+    def issuer_dn
+      return if @cert.nil?
+      @cert.issuer.to_s
+    end
+
+    def issuer
+      return if @cert.nil?
+      # Return cached subject if we have already parsed it
+      return @parsed_issuer if @parsed_issuer
+      # Use a Mash to make it easier to access hash elements in "its('issuer') {should ...}"
+      @parsed_issuer = Hashie::Mash.new(Hash[@cert.issuer.to_a.map { |k, v, _| [k, v] }])
+    end
+
+    def key_length
+      return if @cert.nil?
+      @cert.public_key.n.num_bytes * 8
+    end
+
+    def validity_in_days
+      (not_after - Time.now.utc) / 86400
+    end
+
+    def valid?
+      now = Time.now
+      certificate? && (now >= not_before && now <= not_after)
+    end
+
+    def extensions
+      # Return cached Mash if we already parsed the certificate extensions
+      return @extensions if @extensions
+      # Return the exception class if we failed to instantiate a Cert from file
+      return @cert unless @cert.respond_to? :extensions
+      # Use a Mash to make it easier to access hash elements in "its('entensions') {should ...}"
+      @extensions = Hashie::Mash.new({})
+      # Make sure standard extensions exist so we don't get nil for nil:NilClass
+      # when the user tests for extensions which aren't present
+      %w{
+        keyUsage extendedKeyUsage basicConstraints subjectKeyIdentifier
+        authorityKeyIdentifier subjectAltName issuerAltName authorityInfoAccess
+        crlDistributionPoints issuingDistributionPoint certificatePolicies
+        policyConstraints nameConstraints noCheck tlsfeature nsComment
+      }.each { |extension| @extensions[extension] ||= [] }
+      # Now parse the extensions into the Mash
+      extension_array = @cert.extensions.map(&:to_s)
+      extension_array.each do |extension|
+        kv = extension.split(/ *= */, 2)
+        @extensions[kv.first] = kv.last.split(/ *, */)
+      end
+      @extensions
+    end
+
+    def to_s
+      "x509_certificate #{@certpath}"
+    end
+  end
+end