internet_security_event 1.0.1 → 1.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6028e31de34aca5377e011e84066b8ce6532cf406464edf4a8a67eb4e2230bec
-  data.tar.gz: 61198576708f2460fb9a21c682676b038917b150be82bcf36f1cc7c4888c4a42
+  metadata.gz: c45d13b633f75d73835bc5df4366f4c7dc778637124b04dfcca841d170062bb8
+  data.tar.gz: 51012612ff7d23ae2019471663f7c16b50d04665f467efad9a13abd377662cbc
 SHA512:
-  metadata.gz: c3949507e6194312a786461c1e335493d2f34f57d63546850164ae5305966743ca4a7637daf66fd4c9084351069f97f35a9f81e53dd1f6fe2d78b84c01b74409
-  data.tar.gz: ecfb68fb113d7846cb0e3278a000a12531f327661e933d09644174f7758ff2efed7ac088ef166446ae3dfe28b8db3851f8588ed34dec1318725813fef5ffb991
+  metadata.gz: ba96b78855a50ce723f9f26c869d9b65a4f0261d79730139c16bac20c56ffd9bfd01921f3152cd94c10648d7ae262474cadda190f5c433e48913a00f9a6b62ab
+  data.tar.gz: c77cf433031d25d2c61089e098db1a097853432449060bd1600e66ef5d2a6c37a0a3065182ffb2dcb623222da708898dfe6ffb5b5ccc5a59301adbc1308a7446

data/lib/internet_security_event/tls_status.rb

@@ -37,18 +37,30 @@ module InternetSecurityEvent
     end
 
     def hostname_match_subject?
-      common_name == hostname
+      name_match_patern(hostname, common_name)
     end
 
     def hostname_match_subject_alternative_name?
       return false unless certificate
 
       san = certificate.extensions.select { |ext| ext.oid == 'subjectAltName' }.first
-      return san.value.split(', ').map { |name| name.sub(/\ADNS:/, '') }.include?(hostname) if san
+
+      if san
+        alt_names = san.value.split(', ').map { |name| name.sub(/\ADNS:/, '') }
+        return true if alt_names.any? { |alt_name| name_match_patern(hostname, alt_name) }
+      end
 
       false
     end
 
+    def name_match_patern(hostname, pattern)
+      re = Regexp.new('\A' + pattern.split('*').map do |st|
+        Regexp.escape(st)
+      end.join('[^.]*') + '\z')
+
+      re.match(hostname)
+    end
+
     def common_name
       certificate.subject.to_a.select { |data| data[0] == 'CN' }.map { |data| data[1] }.first if certificate
     end

data/lib/internet_security_event/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module InternetSecurityEvent
-  VERSION = '1.0.1'
+  VERSION = '1.0.2'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: internet_security_event
 version: !ruby/object:Gem::Version
-  version: 1.0.1
+  version: 1.0.2
 platform: ruby
 authors:
 - Romain Tartière
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2019-02-18 00:00:00.000000000 Z
+date: 2019-02-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: actionview