internet_security_event 2.0.0 → 3.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 96f9a7ff480196b6577e3d641424234b389a047b9c96c4f3984d8eabc1def59b
-  data.tar.gz: 194a8f754e108ac4abc3caec23711da90744aedc9afd0709e138f513ae07d840
+  metadata.gz: 9618c67bc76530f18f67b1c2634fc8a1638f003216c0870bc7aeea96f72136e6
+  data.tar.gz: eb38ae645cc40fee9e92b465bb05178d39769bd77aa3804666b13283fb0192bf
 SHA512:
-  metadata.gz: 225eb6c94b4d3888546451f3676dd243e52b5587cce800fa1da10638f0b0c202bd2365bc6091419c63e5a6e406f55ba34d1b94e103911ce071e1bf7f301627e8
-  data.tar.gz: 669d9be990c119395fb67b76db876f94319693a3379d9e9a28442f5cb30498a93510f5b1142f83d47fca0bc7e3ae34d6df7c8a52b81394d37ac957afd315045d
+  metadata.gz: 1698abecd6ad8f8f76ee0cea45a3e6de1ce4c483b1f5082be060cda480e2e4bef7bdb261f5ed5baf6bc9d243f1a1e948b85f4b755f0a999376fcd9dbe59d1def
+  data.tar.gz: da7e963cadddbe85148b28f8a0f4247e36f51d8f9ed6ccd502d0f69f04657180cc1b6c57642b022e7235cf11ed9abfd4be90f95d264918282d59231ba28e2222

data/.github/workflows/ci.yml

@@ -7,8 +7,6 @@ on:
   pull_request:
     branches:
       - main
-  schedule:
-    - cron: "0 17 * * *"
 
 jobs:
   rubocop:
@@ -32,6 +30,7 @@ jobs:
           - "2.7"
           - "3.0"
           - "3.1"
+          - "3.2"
     name: Ruby ${{ matrix.ruby }}
     steps:
       - uses: actions/checkout@v2

data/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [v3.0.0](https://github.com/smortex/internet_security_event/tree/v3.0.0) (2023-04-17)
+
+[Full Changelog](https://github.com/smortex/internet_security_event/compare/v2.0.0...v3.0.0)
+
+**Breaking changes:**
+
+- Add support for verifying CRL [\#4](https://github.com/smortex/internet_security_event/pull/4) ([smortex](https://github.com/smortex))
+
 ## [v2.0.0](https://github.com/smortex/internet_security_event/tree/v2.0.0) (2022-07-16)
 
 [Full Changelog](https://github.com/smortex/internet_security_event/compare/v1.2.1...v2.0.0)

data/Rakefile

@@ -7,9 +7,19 @@ require 'rspec/core/rake_task'
 RSpec::Core::RakeTask.new(:spec)
 
 GitHubChangelogGenerator::RakeTask.new :changelog do |config|
+  config.header = <<~HEADER.chomp
+    # Changelog
+
+    All notable changes to this project will be documented in this file.
+
+    The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
+    and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+  HEADER
+  config.exclude_labels = %w[duplicate question invalid wontfix wont-fix skip-changelog ignore]
   config.user = 'smortex'
   config.project = 'internet_security_event'
   config.since_tag = 'v1.2.1'
+  config.issues = false
   require 'internet_security_event/version'
   config.future_release = "v#{InternetSecurityEvent::VERSION}"
 end

data/lib/internet_security_event/tls_status.rb

@@ -1,9 +1,11 @@
 # frozen_string_literal: true
 
-require 'internet_security_event/x509_status'
+require 'internet_security_event/x509_certificate_status'
 
 module InternetSecurityEvent
-  class TLSStatus < X509Status
+  class TLSStatus < X509CertificateStatus
+    attr_reader :hostname
+
     def initialize(hostname, certificate)
       @hostname = hostname
       super(certificate)

data/lib/internet_security_event/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module InternetSecurityEvent
-  VERSION = '2.0.0'
+  VERSION = '3.0.0'
 end

data/lib/internet_security_event/x509_certificate_revocation_list_status.rb

@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+require 'internet_security_event/x509_status'
+
+module InternetSecurityEvent
+  class X509CertificateRevocationListStatus < X509Status
+    attr_reader :crl
+
+    def initialize(crl)
+      @crl = crl
+
+      super()
+    end
+
+    def description
+      super('crl')
+    end
+
+    def to_e
+      super.merge({
+                    issuer:      crl.issuer.to_s,
+                    last_update: crl.last_update.to_s,
+                    next_update: crl.next_update.to_s,
+                  })
+    end
+
+    private
+
+    def not_before
+      crl.last_update
+    end
+
+    def not_after
+      crl.next_update
+    end
+  end
+end

data/lib/internet_security_event/x509_certificate_status.rb

@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+require 'internet_security_event/x509_status'
+
+module InternetSecurityEvent
+  class X509CertificateStatus < X509Status
+    attr_reader :certificate
+
+    def initialize(certificate)
+      @certificate = certificate
+
+      super()
+    end
+
+    def description
+      super('certificate')
+    end
+
+    def to_e
+      super.merge({
+                    subject:    certificate.subject.to_s,
+                    issuer:     certificate.issuer.to_s,
+                    serial:     certificate.serial.to_i,
+                    not_before: certificate.not_before.to_s,
+                    not_after:  certificate.not_after.to_s,
+                  })
+    end
+
+    private
+
+    def not_before
+      certificate.not_before
+    end
+
+    def not_after
+      certificate.not_after
+    end
+  end
+end

data/lib/internet_security_event/x509_status.rb

@@ -4,27 +4,20 @@ require 'active_support/core_ext/numeric/time'
 
 module InternetSecurityEvent
   class X509Status
-    attr_reader :certificate, :hostname
-
-    def initialize(certificate)
-      @certificate = certificate
-    end
-
-    def self.build(certificate)
-      obj = new(certificate)
+    def self.build(object)
+      obj = if object.is_a?(OpenSSL::X509::Certificate)
+              X509CertificateStatus.new(object)
+            elsif object.is_a?(OpenSSL::X509::CRL)
+              X509CertificateRevocationListStatus.new(object)
+            end
       obj.to_e
     end
 
-    def to_e # rubocop:disable Metrics/AbcSize
+    def to_e
       {
         state:       state,
         description: description,
         metric:      metric,
-        subject:     certificate.subject.to_s,
-        issuer:      certificate.issuer.to_s,
-        serial:      certificate.serial.to_i,
-        not_before:  certificate.not_before.to_s,
-        not_after:   certificate.not_after.to_s,
       }
     end
 
@@ -34,11 +27,15 @@ module InternetSecurityEvent
 
     private
 
-    def description
-      return "certificate will become valid in #{distance_of_time_in_words_to_now(certificate.not_before)}" if not_valid_yet?
-      return "certificate has expired #{distance_of_time_in_words_to_now(certificate.not_after)} ago" if expired?
+    # Define these method in sub-classes
+    # def not_before; end
+    # def not_after; end
+
+    def description(name)
+      return "#{name} will become valid in #{distance_of_time_in_words_to_now(not_before)}" if not_valid_yet?
+      return "#{name} has expired #{distance_of_time_in_words_to_now(not_after)} ago" if expired?
 
-      "certificate will expire in #{distance_of_time_in_words_to_now(certificate.not_after)}"
+      "#{name} will expire in #{distance_of_time_in_words_to_now(not_after)}"
     end
 
     def state
@@ -52,27 +49,27 @@ module InternetSecurityEvent
     end
 
     def metric
-      certificate.not_after - now
+      not_after - now
     end
 
     def not_valid_yet?
-      now < certificate.not_before
+      now < not_before
     end
 
     def expired_or_expire_soon?
-      now + renewal_duration / 3 > certificate.not_after
+      now + renewal_duration / 3 > not_after
     end
 
     def expired?
-      now > certificate.not_after
+      now > not_after
     end
 
     def expire_soonish?
-      now + 2 * renewal_duration / 3 > certificate.not_after
+      now + 2 * renewal_duration / 3 > not_after
     end
 
     def validity_duration
-      certificate.not_after - certificate.not_before
+      not_after - not_before
     end
 
     def now

data/lib/internet_security_event.rb

@@ -4,4 +4,6 @@ require 'internet_security_event/now'
 require 'internet_security_event/tls_status'
 require 'internet_security_event/tlsa_status'
 require 'internet_security_event/x509_status'
+require 'internet_security_event/x509_certificate_status'
+require 'internet_security_event/x509_certificate_revocation_list_status'
 require 'resolv/dns/resource/in/tlsa'

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: internet_security_event
 version: !ruby/object:Gem::Version
-  version: 2.0.0
+  version: 3.0.0
 platform: ruby
 authors:
 - Romain Tartière
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2022-07-16 00:00:00.000000000 Z
+date: 2023-04-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -162,6 +162,8 @@ files:
 - lib/internet_security_event/tls_status.rb
 - lib/internet_security_event/tlsa_status.rb
 - lib/internet_security_event/version.rb
+- lib/internet_security_event/x509_certificate_revocation_list_status.rb
+- lib/internet_security_event/x509_certificate_status.rb
 - lib/internet_security_event/x509_status.rb
 - lib/resolv/dns/resource/in/tlsa.rb
 homepage: https://github.com/smortex/internet_security_event
@@ -183,7 +185,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.17
+rubygems_version: 3.4.10
 signing_key:
 specification_version: 4
 summary: Build events describing the status of various internet services