knife-openvpn 0.0.3 → 0.0.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: c816fce1f4f10c32099d6999160587272bdd983f
-  data.tar.gz: 99cdec4c269fee7c22518fba4ea37902ddfcd48e
+  metadata.gz: 3420ef260442e7bf370736590957bd1e2596a5f1
+  data.tar.gz: ddcfca24dc03205f9f6024baf6209b5337327c9e
 SHA512:
-  metadata.gz: 2f3a66096d60ea026f246ecc96324cc98cff29539ec88a9f19dfde089f8d07b57f4e4d67adc4c038eacef3d5e421c65c806eb6416b627b483cf910503855dcb5
-  data.tar.gz: 52ec372950e1843ec066d4268862834fe6d0d65a24a883af424169feaab4663f1ac78ceda7d50b242ea86d195cb9c33effc914e56b756998f88167d12573db3f
+  metadata.gz: 401d1fbf55caafa2f63533b987b339fcb3116e92196a683af199b49fe923eb68ed55df1f5481aa017f4b58e990a4cf120c643777335bc09f380fe2f8f1e47ee3
+  data.tar.gz: acbfcac04453bc4bba63cc7aa68d4aefe3550ea55e3138d86ac127c0f219b2185c167f6d8fcb0755ecc6cf0f87e70132c9b7913f1822f2958db0ea98f3a5bc51

data/.rubocop.yml

@@ -9,6 +9,6 @@ Metrics/LineLength:
 Metrics/MethodLength:
   Enabled: false
 Metrics/ClassLength:
-  Max: 150
+  Max: 153
 Metrics/ParameterLists:
   Enabled: false

data/CHANGELOG.md

@@ -0,0 +1,2 @@
+## 0.0.4 (Sep 24, 2015)
+* add --force option for user certificate revokation

data/knife-openvpn.gemspec

@@ -3,7 +3,7 @@ $LOAD_PATH.push File.expand_path('../lib', __FILE__)
 
 Gem::Specification.new do |gem|
   gem.name        = 'knife-openvpn'
-  gem.version     = '0.0.3'
+  gem.version     = '0.0.4'
   gem.summary     = 'A knife plugin for Express 42 openvpn cookbook'
   gem.description = gem.summary
   gem.authors     = ['LLC Express 42']

data/lib/chef/knife/openvpn.rb

@@ -161,9 +161,13 @@ module OpenvpnPlugin
       crl
     end
 
-    def load_cert_and_key(cert_str, key_str)
+    def load_cert_and_key(cert_str, key_str, force = false)
       cert = OpenSSL::X509::Certificate.new cert_str
-      key = OpenSSL::PKey::RSA.new key_str
+      key = if force
+              key_str
+            else
+              OpenSSL::PKey::RSA.new key_str
+            end
       [cert, key]
     end
 
@@ -438,6 +442,11 @@ module OpenvpnPlugin
            description: 'Specifies path to encrypred data bag secret file.',
            default: '.chef/encrypted_data_bag_secret'
 
+    option :force,
+           long: '--force',
+           description: 'Force a user revoke without the key passphrase.',
+           default: false
+
     def run
       check_arguments
       server_name = name_args[0]
@@ -461,7 +470,7 @@ module OpenvpnPlugin
         revoke_info = []
       end
       user_item = load_databag_item(databag_name, user_name)
-      user_cert, _user_key = load_cert_and_key user_item['cert'], user_item['key']
+      user_cert, _user_key = load_cert_and_key user_item['cert'], user_item['key'], config[:force]
       user_revoke_info = [[user_cert.serial, now, 0]]
       new_revoke_info = revoke_info + user_revoke_info
       new_crl = add_user_to_crl ca_cert, ca_key, old_crl, new_revoke_info

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: knife-openvpn
 version: !ruby/object:Gem::Version
-  version: 0.0.3
+  version: 0.0.4
 platform: ruby
 authors:
 - LLC Express 42
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-09-16 00:00:00.000000000 Z
+date: 2015-09-24 00:00:00.000000000 Z
 dependencies: []
 description: A knife plugin for Express 42 openvpn cookbook
 email: cookbooks@express42.com
@@ -19,6 +19,7 @@ files:
 - ".gitignore"
 - ".rubocop.yml"
 - ".travis.yml"
+- CHANGELOG.md
 - Gemfile
 - LICENSE
 - README.md