internet_security_event 1.2.1 → 3.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3df07baf6dbb78e612229fee0043e79a955c01f7f1655c8e77a6a142340d4114
-  data.tar.gz: 53bd006f3735a68a8d8255e5c83245f636eb69bd9957c581fa65a6d094c0e0ea
+  metadata.gz: 9618c67bc76530f18f67b1c2634fc8a1638f003216c0870bc7aeea96f72136e6
+  data.tar.gz: eb38ae645cc40fee9e92b465bb05178d39769bd77aa3804666b13283fb0192bf
 SHA512:
-  metadata.gz: 2f3cdfec986f3112a037f78eb7579f6adca58b09361cfeea297a0c1d941409871312524cd14cf1bfa2534c50b255f7ebb4ec2e0d82085413d6096d5783f444ec
-  data.tar.gz: e49b5770d869368c49786ad8997cf85f4178f7cf52fef2eac957018db45c0ebeb0210d0bd225fc1339dc4bb215acacf52d37b55c9b0d5f205049d98b70de6621
+  metadata.gz: 1698abecd6ad8f8f76ee0cea45a3e6de1ce4c483b1f5082be060cda480e2e4bef7bdb261f5ed5baf6bc9d243f1a1e948b85f4b755f0a999376fcd9dbe59d1def
+  data.tar.gz: da7e963cadddbe85148b28f8a0f4247e36f51d8f9ed6ccd502d0f69f04657180cc1b6c57642b022e7235cf11ed9abfd4be90f95d264918282d59231ba28e2222

data/.github/workflows/ci.yml

@@ -30,6 +30,7 @@ jobs:
           - "2.7"
           - "3.0"
           - "3.1"
+          - "3.2"
     name: Ruby ${{ matrix.ruby }}
     steps:
       - uses: actions/checkout@v2

data/CHANGELOG.md

@@ -2,37 +2,60 @@
 
 All notable changes to this project will be documented in this file.
 
-The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [1.2.1] - 2022-07-15
+## [v3.0.0](https://github.com/smortex/internet_security_event/tree/v3.0.0) (2023-04-17)
+
+[Full Changelog](https://github.com/smortex/internet_security_event/compare/v2.0.0...v3.0.0)
+
+**Breaking changes:**
+
+- Add support for verifying CRL [\#4](https://github.com/smortex/internet_security_event/pull/4) ([smortex](https://github.com/smortex))
+
+## [v2.0.0](https://github.com/smortex/internet_security_event/tree/v2.0.0) (2022-07-16)
+
+[Full Changelog](https://github.com/smortex/internet_security_event/compare/v1.2.1...v2.0.0)
+
+**Breaking changes:**
+
+- Bump activesupport to 6.x [\#2](https://github.com/smortex/internet_security_event/pull/2) ([smortex](https://github.com/smortex))
+
+**Merged pull requests:**
+
+- Integrate github\_changelog\_generator [\#1](https://github.com/smortex/internet_security_event/pull/1) ([smortex](https://github.com/smortex))
+
+## [v1.2.1] - 2022-07-15
 
 ### Changed
 - Emit a `warning` state instead of a `warn` state to match Riemann wording.
 
-## [1.2.0] - 2019-02-28
+## [v1.2.0] - 2019-02-28
 
 ### Changed
 - Rely on `OpenSSL::SSL.verify_certificate_identity` to check that a certificate
   is valid for the provided hostname.
 
-## [1.1.0] - 2019-02-21
+## [v1.1.0] - 2019-02-21
 
 ### Added
 - Add basic suport for TLSA events.
 
-## [1.0.2] - 2019-02-21
+## [v1.0.2] - 2019-02-21
 
 ### Changed
 - Fix checking of TLS hostnames with wildcard certificates.
 
-## [1.0.1] - 2019-02-18
+## [v1.0.1] - 2019-02-18
 
 ### Changed
 - Improve the way TLS certificates state is computed.
 
-[Unreleased]: https://github.com/smortex/internet_security_event/compare/v1.2.0...HEAD
-[1.2.0]: https://github.com/smortex/internet_security_event/compare/v1.1.0...v1.2.0
-[1.1.0]: https://github.com/smortex/internet_security_event/compare/v1.0.2...v1.1.0
-[1.0.2]: https://github.com/smortex/internet_security_event/compare/v1.0.1...v1.0.2
-[1.0.1]: https://github.com/smortex/internet_security_event/compare/v1.0.0...v1.0.1
+[v1.2.1]: https://github.com/smortex/internet_security_event/compare/v1.2.0...v1.2.1
+[v1.2.0]: https://github.com/smortex/internet_security_event/compare/v1.1.0...v1.2.0
+[v1.1.0]: https://github.com/smortex/internet_security_event/compare/v1.0.2...v1.1.0
+[v1.0.2]: https://github.com/smortex/internet_security_event/compare/v1.0.1...v1.0.2
+[v1.0.1]: https://github.com/smortex/internet_security_event/compare/v1.0.0...v1.0.1
+
+
+\* *This Changelog was automatically generated by [github_changelog_generator](https://github.com/github-changelog-generator/github-changelog-generator)*

data/HISTORY.md

@@ -0,0 +1,31 @@
+## [v1.2.1] - 2022-07-15
+
+### Changed
+- Emit a `warning` state instead of a `warn` state to match Riemann wording.
+
+## [v1.2.0] - 2019-02-28
+
+### Changed
+- Rely on `OpenSSL::SSL.verify_certificate_identity` to check that a certificate
+  is valid for the provided hostname.
+
+## [v1.1.0] - 2019-02-21
+
+### Added
+- Add basic suport for TLSA events.
+
+## [v1.0.2] - 2019-02-21
+
+### Changed
+- Fix checking of TLS hostnames with wildcard certificates.
+
+## [v1.0.1] - 2019-02-18
+
+### Changed
+- Improve the way TLS certificates state is computed.
+
+[v1.2.1]: https://github.com/smortex/internet_security_event/compare/v1.2.0...v1.2.1
+[v1.2.0]: https://github.com/smortex/internet_security_event/compare/v1.1.0...v1.2.0
+[v1.1.0]: https://github.com/smortex/internet_security_event/compare/v1.0.2...v1.1.0
+[v1.0.2]: https://github.com/smortex/internet_security_event/compare/v1.0.1...v1.0.2
+[v1.0.1]: https://github.com/smortex/internet_security_event/compare/v1.0.0...v1.0.1

data/Rakefile

@@ -1,8 +1,27 @@
 # frozen_string_literal: true
 
 require 'bundler/gem_tasks'
+require 'github_changelog_generator/task'
 require 'rspec/core/rake_task'
 
 RSpec::Core::RakeTask.new(:spec)
 
+GitHubChangelogGenerator::RakeTask.new :changelog do |config|
+  config.header = <<~HEADER.chomp
+    # Changelog
+
+    All notable changes to this project will be documented in this file.
+
+    The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
+    and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+  HEADER
+  config.exclude_labels = %w[duplicate question invalid wontfix wont-fix skip-changelog ignore]
+  config.user = 'smortex'
+  config.project = 'internet_security_event'
+  config.since_tag = 'v1.2.1'
+  config.issues = false
+  require 'internet_security_event/version'
+  config.future_release = "v#{InternetSecurityEvent::VERSION}"
+end
+
 task default: :spec

data/internet_security_event.gemspec

@@ -24,9 +24,10 @@ Gem::Specification.new do |spec|
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ['lib']
 
-  spec.add_dependency 'activesupport', '~> 5.2'
+  spec.add_dependency 'activesupport', '~> 6.0'
 
   spec.add_development_dependency 'bundler'
+  spec.add_development_dependency 'github_changelog_generator'
   spec.add_development_dependency 'rake'
   spec.add_development_dependency 'rspec'
   spec.add_development_dependency 'rubocop'

data/lib/internet_security_event/tls_status.rb

@@ -1,9 +1,11 @@
 # frozen_string_literal: true
 
-require 'internet_security_event/x509_status'
+require 'internet_security_event/x509_certificate_status'
 
 module InternetSecurityEvent
-  class TLSStatus < X509Status
+  class TLSStatus < X509CertificateStatus
+    attr_reader :hostname
+
     def initialize(hostname, certificate)
       @hostname = hostname
       super(certificate)

data/lib/internet_security_event/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module InternetSecurityEvent
-  VERSION = '1.2.1'
+  VERSION = '3.0.0'
 end

data/lib/internet_security_event/x509_certificate_revocation_list_status.rb

@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+require 'internet_security_event/x509_status'
+
+module InternetSecurityEvent
+  class X509CertificateRevocationListStatus < X509Status
+    attr_reader :crl
+
+    def initialize(crl)
+      @crl = crl
+
+      super()
+    end
+
+    def description
+      super('crl')
+    end
+
+    def to_e
+      super.merge({
+                    issuer:      crl.issuer.to_s,
+                    last_update: crl.last_update.to_s,
+                    next_update: crl.next_update.to_s,
+                  })
+    end
+
+    private
+
+    def not_before
+      crl.last_update
+    end
+
+    def not_after
+      crl.next_update
+    end
+  end
+end

data/lib/internet_security_event/x509_certificate_status.rb

@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+require 'internet_security_event/x509_status'
+
+module InternetSecurityEvent
+  class X509CertificateStatus < X509Status
+    attr_reader :certificate
+
+    def initialize(certificate)
+      @certificate = certificate
+
+      super()
+    end
+
+    def description
+      super('certificate')
+    end
+
+    def to_e
+      super.merge({
+                    subject:    certificate.subject.to_s,
+                    issuer:     certificate.issuer.to_s,
+                    serial:     certificate.serial.to_i,
+                    not_before: certificate.not_before.to_s,
+                    not_after:  certificate.not_after.to_s,
+                  })
+    end
+
+    private
+
+    def not_before
+      certificate.not_before
+    end
+
+    def not_after
+      certificate.not_after
+    end
+  end
+end

data/lib/internet_security_event/x509_status.rb

@@ -4,27 +4,20 @@ require 'active_support/core_ext/numeric/time'
 
 module InternetSecurityEvent
   class X509Status
-    attr_reader :certificate, :hostname
-
-    def initialize(certificate)
-      @certificate = certificate
-    end
-
-    def self.build(certificate)
-      obj = new(certificate)
+    def self.build(object)
+      obj = if object.is_a?(OpenSSL::X509::Certificate)
+              X509CertificateStatus.new(object)
+            elsif object.is_a?(OpenSSL::X509::CRL)
+              X509CertificateRevocationListStatus.new(object)
+            end
       obj.to_e
     end
 
-    def to_e # rubocop:disable Metrics/AbcSize
+    def to_e
       {
         state:       state,
         description: description,
         metric:      metric,
-        subject:     certificate.subject.to_s,
-        issuer:      certificate.issuer.to_s,
-        serial:      certificate.serial.to_i,
-        not_before:  certificate.not_before.to_s,
-        not_after:   certificate.not_after.to_s,
       }
     end
 
@@ -34,11 +27,15 @@ module InternetSecurityEvent
 
     private
 
-    def description
-      return "certificate will become valid in #{distance_of_time_in_words_to_now(certificate.not_before)}" if not_valid_yet?
-      return "certificate has expired #{distance_of_time_in_words_to_now(certificate.not_after)} ago" if expired?
+    # Define these method in sub-classes
+    # def not_before; end
+    # def not_after; end
+
+    def description(name)
+      return "#{name} will become valid in #{distance_of_time_in_words_to_now(not_before)}" if not_valid_yet?
+      return "#{name} has expired #{distance_of_time_in_words_to_now(not_after)} ago" if expired?
 
-      "certificate will expire in #{distance_of_time_in_words_to_now(certificate.not_after)}"
+      "#{name} will expire in #{distance_of_time_in_words_to_now(not_after)}"
     end
 
     def state
@@ -52,27 +49,27 @@ module InternetSecurityEvent
     end
 
     def metric
-      certificate.not_after - now
+      not_after - now
     end
 
     def not_valid_yet?
-      now < certificate.not_before
+      now < not_before
     end
 
     def expired_or_expire_soon?
-      now + renewal_duration / 3 > certificate.not_after
+      now + renewal_duration / 3 > not_after
     end
 
     def expired?
-      now > certificate.not_after
+      now > not_after
     end
 
     def expire_soonish?
-      now + 2 * renewal_duration / 3 > certificate.not_after
+      now + 2 * renewal_duration / 3 > not_after
     end
 
     def validity_duration
-      certificate.not_after - certificate.not_before
+      not_after - not_before
     end
 
     def now

data/lib/internet_security_event.rb

@@ -4,4 +4,6 @@ require 'internet_security_event/now'
 require 'internet_security_event/tls_status'
 require 'internet_security_event/tlsa_status'
 require 'internet_security_event/x509_status'
+require 'internet_security_event/x509_certificate_status'
+require 'internet_security_event/x509_certificate_revocation_list_status'
 require 'resolv/dns/resource/in/tlsa'

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: internet_security_event
 version: !ruby/object:Gem::Version
-  version: 1.2.1
+  version: 3.0.0
 platform: ruby
 authors:
 - Romain Tartière
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2022-07-16 00:00:00.000000000 Z
+date: 2023-04-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '5.2'
+        version: '6.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '5.2'
+        version: '6.0'
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
@@ -38,6 +38,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: github_changelog_generator
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
@@ -136,6 +150,7 @@ files:
 - CHANGELOG.md
 - CODE_OF_CONDUCT.md
 - Gemfile
+- HISTORY.md
 - LICENSE.txt
 - README.md
 - Rakefile
@@ -147,6 +162,8 @@ files:
 - lib/internet_security_event/tls_status.rb
 - lib/internet_security_event/tlsa_status.rb
 - lib/internet_security_event/version.rb
+- lib/internet_security_event/x509_certificate_revocation_list_status.rb
+- lib/internet_security_event/x509_certificate_status.rb
 - lib/internet_security_event/x509_status.rb
 - lib/resolv/dns/resource/in/tlsa.rb
 homepage: https://github.com/smortex/internet_security_event
@@ -168,7 +185,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.17
+rubygems_version: 3.4.10
 signing_key:
 specification_version: 4
 summary: Build events describing the status of various internet services