internet_security_event 2.0.0 → 4.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 96f9a7ff480196b6577e3d641424234b389a047b9c96c4f3984d8eabc1def59b
-  data.tar.gz: 194a8f754e108ac4abc3caec23711da90744aedc9afd0709e138f513ae07d840
+  metadata.gz: c0e9c8ea09fa7bf7a9ba45617a8895c3cef64191c7c9d79781e1cf7f0c429908
+  data.tar.gz: e76ee0ae675bb3b23f19c069b44711a6e994399c3a376498c64f23046b023d12
 SHA512:
-  metadata.gz: 225eb6c94b4d3888546451f3676dd243e52b5587cce800fa1da10638f0b0c202bd2365bc6091419c63e5a6e406f55ba34d1b94e103911ce071e1bf7f301627e8
-  data.tar.gz: 669d9be990c119395fb67b76db876f94319693a3379d9e9a28442f5cb30498a93510f5b1142f83d47fca0bc7e3ae34d6df7c8a52b81394d37ac957afd315045d
+  metadata.gz: ad03d4baf5eeb39dd8006c761c00106ee7bf3f7ed713ed68afb1db5a28dad1dd464fd66a89dc021b18afa27da19358a12ab4ab1a5d5be2d83c9a2e5d7390dadc
+  data.tar.gz: 0ef2288e630626c33dd39b2eb46492a557ed9c886cbeb41478e73c7e9b192bb883d9ab94d2928f608d0b6e10bffbf9c947362951e7724c0dfedf87492787c1f6

data/.github/workflows/ci.yml

@@ -7,8 +7,6 @@ on:
   pull_request:
     branches:
       - main
-  schedule:
-    - cron: "0 17 * * *"
 
 jobs:
   rubocop:
@@ -28,10 +26,10 @@ jobs:
     strategy:
       matrix:
         ruby:
-          - "2.6"
-          - "2.7"
-          - "3.0"
           - "3.1"
+          - "3.2"
+          - "3.3"
+          - "3.4"
     name: Ruby ${{ matrix.ruby }}
     steps:
       - uses: actions/checkout@v2

data/.rubocop.yml

@@ -1,7 +1,7 @@
 AllCops:
   AllowSymlinksInCacheRootDirectory: true
 
-require:
+plugins:
   - rubocop-rake
   - rubocop-rspec
 
@@ -9,7 +9,7 @@ Layout/HashAlignment:
   EnforcedColonStyle: table
   EnforcedHashRocketStyle: table
 
-Metrics/LineLength:
+Layout/LineLength:
   Max: 160
 
 Style/Documentation:

data/CHANGELOG.md

@@ -1,5 +1,30 @@
 # Changelog
 
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [v4.0.0](https://github.com/smortex/internet_security_event/tree/v4.0.0) (2025-10-07)
+
+[Full Changelog](https://github.com/smortex/internet_security_event/compare/v3.0.0...v4.0.0)
+
+**Breaking changes:**
+
+- Switch to ActiveSupport 7.x [\#6](https://github.com/smortex/internet_security_event/pull/6) ([smortex](https://github.com/smortex))
+
+**Implemented enhancements:**
+
+- Run CI an Ruby 3.3 and 3.4 [\#7](https://github.com/smortex/internet_security_event/pull/7) ([smortex](https://github.com/smortex))
+
+## [v3.0.0](https://github.com/smortex/internet_security_event/tree/v3.0.0) (2023-04-17)
+
+[Full Changelog](https://github.com/smortex/internet_security_event/compare/v2.0.0...v3.0.0)
+
+**Breaking changes:**
+
+- Add support for verifying CRL [\#4](https://github.com/smortex/internet_security_event/pull/4) ([smortex](https://github.com/smortex))
+
 ## [v2.0.0](https://github.com/smortex/internet_security_event/tree/v2.0.0) (2022-07-16)
 
 [Full Changelog](https://github.com/smortex/internet_security_event/compare/v1.2.1...v2.0.0)

data/Rakefile

@@ -7,9 +7,19 @@ require 'rspec/core/rake_task'
 RSpec::Core::RakeTask.new(:spec)
 
 GitHubChangelogGenerator::RakeTask.new :changelog do |config|
+  config.header = <<~HEADER.chomp
+    # Changelog
+
+    All notable changes to this project will be documented in this file.
+
+    The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
+    and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+  HEADER
+  config.exclude_labels = %w[duplicate question invalid wontfix wont-fix skip-changelog ignore]
   config.user = 'smortex'
   config.project = 'internet_security_event'
   config.since_tag = 'v1.2.1'
+  config.issues = false
   require 'internet_security_event/version'
   config.future_release = "v#{InternetSecurityEvent::VERSION}"
 end

data/internet_security_event.gemspec

@@ -13,7 +13,7 @@ Gem::Specification.new do |spec|
   spec.summary       = 'Build events describing the status of various internet services'
   spec.homepage      = 'https://github.com/smortex/internet_security_event'
   spec.license       = 'MIT'
-  spec.required_ruby_version = Gem::Requirement.new('>= 2.6.0')
+  spec.required_ruby_version = Gem::Requirement.new('>= 3.1.0')
 
   # Specify which files should be added to the gem when it is released.
   # The `git ls-files -z` loads the files in the RubyGem that have been added into git.
@@ -24,7 +24,7 @@ Gem::Specification.new do |spec|
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ['lib']
 
-  spec.add_dependency 'activesupport', '~> 6.0'
+  spec.add_dependency 'activesupport', '~> 7.0'
 
   spec.add_development_dependency 'bundler'
   spec.add_development_dependency 'github_changelog_generator'

data/lib/internet_security_event/tls_status.rb

@@ -1,9 +1,11 @@
 # frozen_string_literal: true
 
-require 'internet_security_event/x509_status'
+require 'internet_security_event/x509_certificate_status'
 
 module InternetSecurityEvent
-  class TLSStatus < X509Status
+  class TLSStatus < X509CertificateStatus
+    attr_reader :hostname
+
     def initialize(hostname, certificate)
       @hostname = hostname
       super(certificate)

data/lib/internet_security_event/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module InternetSecurityEvent
-  VERSION = '2.0.0'
+  VERSION = '4.0.0'
 end

data/lib/internet_security_event/x509_certificate_revocation_list_status.rb

@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+require 'internet_security_event/x509_status'
+
+module InternetSecurityEvent
+  class X509CertificateRevocationListStatus < X509Status
+    attr_reader :crl
+
+    def initialize(crl)
+      @crl = crl
+
+      super()
+    end
+
+    def description
+      super('crl')
+    end
+
+    def to_e
+      super.merge({
+                    issuer:      crl.issuer.to_s,
+                    last_update: crl.last_update.to_s,
+                    next_update: crl.next_update.to_s,
+                  })
+    end
+
+    private
+
+    def not_before
+      crl.last_update
+    end
+
+    def not_after
+      crl.next_update
+    end
+  end
+end

data/lib/internet_security_event/x509_certificate_status.rb

@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+require 'internet_security_event/x509_status'
+
+module InternetSecurityEvent
+  class X509CertificateStatus < X509Status
+    attr_reader :certificate
+
+    def initialize(certificate)
+      @certificate = certificate
+
+      super()
+    end
+
+    def description
+      super('certificate')
+    end
+
+    def to_e
+      super.merge({
+                    subject:    certificate.subject.to_s,
+                    issuer:     certificate.issuer.to_s,
+                    serial:     certificate.serial.to_i,
+                    not_before: certificate.not_before.to_s,
+                    not_after:  certificate.not_after.to_s,
+                  })
+    end
+
+    private
+
+    def not_before
+      certificate.not_before
+    end
+
+    def not_after
+      certificate.not_after
+    end
+  end
+end

data/lib/internet_security_event/x509_status.rb

@@ -4,27 +4,20 @@ require 'active_support/core_ext/numeric/time'
 
 module InternetSecurityEvent
   class X509Status
-    attr_reader :certificate, :hostname
-
-    def initialize(certificate)
-      @certificate = certificate
-    end
-
-    def self.build(certificate)
-      obj = new(certificate)
+    def self.build(object)
+      obj = if object.is_a?(OpenSSL::X509::Certificate)
+              X509CertificateStatus.new(object)
+            elsif object.is_a?(OpenSSL::X509::CRL)
+              X509CertificateRevocationListStatus.new(object)
+            end
       obj.to_e
     end
 
-    def to_e # rubocop:disable Metrics/AbcSize
+    def to_e
       {
         state:       state,
         description: description,
         metric:      metric,
-        subject:     certificate.subject.to_s,
-        issuer:      certificate.issuer.to_s,
-        serial:      certificate.serial.to_i,
-        not_before:  certificate.not_before.to_s,
-        not_after:   certificate.not_after.to_s,
       }
     end
 
@@ -34,11 +27,15 @@ module InternetSecurityEvent
 
     private
 
-    def description
-      return "certificate will become valid in #{distance_of_time_in_words_to_now(certificate.not_before)}" if not_valid_yet?
-      return "certificate has expired #{distance_of_time_in_words_to_now(certificate.not_after)} ago" if expired?
+    # Define these method in sub-classes
+    # def not_before; end
+    # def not_after; end
+
+    def description(name)
+      return "#{name} will become valid in #{distance_of_time_in_words_to_now(not_before)}" if not_valid_yet?
+      return "#{name} has expired #{distance_of_time_in_words_to_now(not_after)} ago" if expired?
 
-      "certificate will expire in #{distance_of_time_in_words_to_now(certificate.not_after)}"
+      "#{name} will expire in #{distance_of_time_in_words_to_now(not_after)}"
     end
 
     def state
@@ -52,27 +49,27 @@ module InternetSecurityEvent
     end
 
     def metric
-      certificate.not_after - now
+      not_after - now
     end
 
     def not_valid_yet?
-      now < certificate.not_before
+      now < not_before
     end
 
     def expired_or_expire_soon?
-      now + renewal_duration / 3 > certificate.not_after
+      now + renewal_duration / 3 > not_after
     end
 
     def expired?
-      now > certificate.not_after
+      now > not_after
     end
 
     def expire_soonish?
-      now + 2 * renewal_duration / 3 > certificate.not_after
+      now + 2 * renewal_duration / 3 > not_after
     end
 
     def validity_duration
-      certificate.not_after - certificate.not_before
+      not_after - not_before
     end
 
     def now

data/lib/internet_security_event.rb

@@ -4,4 +4,6 @@ require 'internet_security_event/now'
 require 'internet_security_event/tls_status'
 require 'internet_security_event/tlsa_status'
 require 'internet_security_event/x509_status'
+require 'internet_security_event/x509_certificate_status'
+require 'internet_security_event/x509_certificate_revocation_list_status'
 require 'resolv/dns/resource/in/tlsa'

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: internet_security_event
 version: !ruby/object:Gem::Version
-  version: 2.0.0
+  version: 4.0.0
 platform: ruby
 authors:
 - Romain Tartière
-autorequire:
 bindir: exe
 cert_chain: []
-date: 2022-07-16 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -16,14 +15,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '6.0'
+        version: '7.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '6.0'
+        version: '7.0'
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
@@ -136,7 +135,6 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
-description:
 email:
 - romain@blogreen.org
 executables: []
@@ -162,13 +160,14 @@ files:
 - lib/internet_security_event/tls_status.rb
 - lib/internet_security_event/tlsa_status.rb
 - lib/internet_security_event/version.rb
+- lib/internet_security_event/x509_certificate_revocation_list_status.rb
+- lib/internet_security_event/x509_certificate_status.rb
 - lib/internet_security_event/x509_status.rb
 - lib/resolv/dns/resource/in/tlsa.rb
 homepage: https://github.com/smortex/internet_security_event
 licenses:
 - MIT
 metadata: {}
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -176,15 +175,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 2.6.0
+      version: 3.1.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.17
-signing_key:
+rubygems_version: 3.7.1
 specification_version: 4
 summary: Build events describing the status of various internet services
 test_files: []