letscert 0.2.3 → 0.2.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 13246f0cc94eb264f9dcc01fb55a2e55250d5e63
-  data.tar.gz: d543f27b0a2d55a1e0fc17950bb662bbfbb3a932
+  metadata.gz: bc09ae0885a6a70be1512b3819c07899cd84ecab
+  data.tar.gz: 124c5daa4aab3d985d86a1d0fada0c65db0269a2
 SHA512:
-  metadata.gz: ebbdc254cd7cfea90f1b23308673a839baeaa564450dc18fa5340ed30a8fa5e93e84180fdbe66360f70db449671bd276352c3a2081a5aa8b76b58604f341df7e
-  data.tar.gz: 4ae2cdc6a2fa18eb7e9606c909e6260cee6878000ab5c601ce0482352e15333e8bd048a8b33d2614459d0c9ba36dc7c72d753936e21489a584fafb9894457720
+  metadata.gz: cf9e90399b2277647f72939d7669a0d562add40b1cd3a4a89346d215fe09e7a97bf0eed125342c30bed63096c92945f932276df3d82dc532a83221238cfba0e5
+  data.tar.gz: ce17392296e10b1d45fff709662ec3de25c53f658b28140a895706b65fe8f0f44959a87cc418d33155246af98afe36639623a503f54a77dc015d00462e1b65ff

data/lib/letscert/io_plugin.rb

@@ -188,11 +188,7 @@ module LetsCert
   class OpenSSLIOPlugin < IOPlugin
 
     # @private Regular expression to discriminate PEM
-    PEM_RE = /
-^-----BEGIN ((?:[\x21-\x2c\x2e-\x7e](?:[- ]?[\x21-\x2c\x2e-\x7e])*)?)\s*-----$
-.*?
-^-----END \1-----\s*
-/x
+    PEM_RE = /^-----BEGIN CERTIFICATE-----\n.*?\n-----END CERTIFICATE-----\n/m
 
     # @param [String] name filename
     # @param [:pem,:der] type
@@ -242,10 +238,12 @@ module LetsCert
     # @param [String] data
     # @yield [String] pem
     def split_pems(data)
-      m = data.match(PEM_RE)
+      my_data = data
+      m = my_data.match(PEM_RE)
       while (m) do
         yield m[0]
-        m = [data[m.end(0)..-1]].match(PEM_RE)
+        my_data = my_data[m.end(0)..-1]
+        m = my_data.match(PEM_RE)
       end
     end
 
@@ -323,9 +321,11 @@ module LetsCert
     def load
       data = super
       if data[:chain].nil? or data[:chain].empty?
-        cert, chain = nil, nil
+        cert = nil
+        chain = []
       else
-        cert, chain = data[:chain]
+        cert = data[:chain].shift
+        chain = data[:chain]
       end
 
       { account_key: data[:account_key], key: data[:key], cert: cert, chain: chain }

data/lib/letscert.rb

@@ -24,7 +24,7 @@
 module LetsCert
 
   # Letscert version number
-  VERSION = '0.2.3'
+  VERSION = '0.2.4'
 
 
   # Base error class

data/spec/cert.pem

@@ -0,0 +1,32 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----

data/spec/chain.pem

@@ -0,0 +1,27 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----

data/spec/fullchain.pem

@@ -0,0 +1,59 @@
+-----BEGIN CERTIFICATE-----
+MIIFmzCCBIOgAwIBAgISAVjEgN3oIZzLvwTkSOVu08NlMA0GCSqGSIb3DQEBCwUA
+MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
+ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNjAyMTExNzQyMDBaFw0x
+NjA1MTExNzQyMDBaMBIxEDAOBgNVBAMTB2xkNzcuZXUwggGiMA0GCSqGSIb3DQEB
+AQUAA4IBjwAwggGKAoIBgQDPpsQCigwsWHwBhKGiXb8IDDVdV2q36tIsyP2WQmZy
+G4JpasPpmVxuK2qPsYjEQRt+9VsKwOvuq1hNpQCJLtHXEweg8d4Px83WVQbcrdP5
+U3hJgPbFFI6UXyx5BtsctDdYLxxi91tKn8g7nZgEGw1/NcSXkXQ6Q1/O5zwt2CME
+/xGTASI74kR2nXhIU8ZPth52R99UpIYquy2n0cNyadgFuhNq+jWZ8ks+ZYY/b1s4
+YL6cCx9SIAvDonrZGGG01ilZJWCxjgXxwXN5o78/22vyHcoBuwiK+6vPTKZ/+zvK
+MjDXES7sM791mjgh7c+NL57SCw4D4zYq7ABmx7tCip5BGTT9n/BdoKxBK8vaU9tA
+Qe3OYYXcdXN3g9up249U/+H9Hy/fu2/BYe7CDIkEU/1kQosYYKpSJv1WAU12gb77
+k7u1DnR+5vP/EwA+/rLb9MvEuj8mA9oKnLVq6zOaY/LXxcVVXEJEktoDV+Y27VuU
+yB5J1n7OL2SXzycj693Sk/sCAwEAAaOCAjEwggItMA4GA1UdDwEB/wQEAwIFoDAd
+BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
+HQ4EFgQUtxSm/clLMtOKm+p5seP4OsvYSFEwHwYDVR0jBBgwFoAUqEpqYwR93brm
+0Tm3pkVl7/Oo7KEwcAYIKwYBBQUHAQEEZDBiMC8GCCsGAQUFBzABhiNodHRwOi8v
+b2NzcC5pbnQteDEubGV0c2VuY3J5cHQub3JnLzAvBggrBgEFBQcwAoYjaHR0cDov
+L2NlcnQuaW50LXgxLmxldHNlbmNyeXB0Lm9yZy8wOwYDVR0RBDQwMoIHbGQ3Ny5l
+dYIMaW1hcC5sZDc3LmV1ggxzbXRwLmxkNzcuZXWCC3d3dy5sZDc3LmV1MIH+BgNV
+HSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcC
+ARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGb
+VGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5
+aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0
+aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcv
+cmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAEUjrcJKy04CiIGMuJwdHUQ7
+25YywkoVxo7K8GnLs1uf5XREJgil2GPD6uL//U2V8FzreP/eDQFluNJSYE3F9F1b
+f2X3TOSnJnRllFputgWMiIL8BzAbrR5UgEhrsSWS0AxK5Zh3GNTFa3pjQWu6swIl
+eDAj2iJHCOuL2t33vk8G2bYdFOih0EL6WwWjrwsu4lNmjxDqKe3VOM0HJE/DBbWw
+sqhZv1UOZZl8hJ6iID/hL7Tco6r1LcH5Fsyq8Yd/qbd4+kErWEvz/CeGsMDHFgYn
+oefVSYJ7mA/lJTWdydeUTkdQ04H8s/pjtI8SKpMmVTQa+xdqsH2YMBEv8dspMzk=
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----

data/spec/io_plugin_spec.rb

@@ -61,7 +61,6 @@ module LetsCert
   describe AccountKey do
 
     before(:all) { IOPlugin.logger = Logger.new('/dev/null') }
-
     let(:ak) { IOPlugin.registered['account_key.json'] }
 
     it 'persist account_key' do
@@ -101,4 +100,288 @@ module LetsCert
 
   end
 
+  describe KeyFile do
+
+    let(:keypem) { IOPlugin.registered['key.pem'] }
+    let(:keyder) { IOPlugin.registered['key.der'] }
+
+    it 'persist key' do
+      expect(keypem.persisted[:key]).to be(true)
+      expect(keyder.persisted[:key]).to be(true)
+    end
+
+    it '#load private key from key.pem file' do
+      pwd = FileUtils.pwd
+      FileUtils.cd File.dirname(__FILE__)
+
+      begin
+        data = keypem.load
+        expect(data[:key]).to be_a(OpenSSL::PKey::RSA)
+        expect(data[:key].params['d']).to eq(OpenSSL::BN.new(0x573C8C0EADCBA5E571CD57FAB4D9FE6AC9DC5F9ADF8FEC48667D836B6A0EA9E1240D2A5861258A7E6E5EA1052AFAD71176A49E90BA80F43C44F2BD415161C1E71AA37E7C2BE5C7C18CF964A5A7100C801F558C7B7825D082FEF79A76963786D8CDFE1058F7F178869A09F5377F51DD45EA05B428F41F09C9F29D37BB539512C5))
+      rescue Exception
+        raise
+      ensure
+        FileUtils.cd pwd
+      end
+    end
+
+    it '#save private key to key.pem file' do
+      data = { key: OpenSSL::PKey::RSA.new(512) }
+      keypem.save data
+      begin
+        expect(File.exist? 'key.pem').to be(true)
+
+        data2 = keypem.load
+        expect(data2[:key].params['d'].to_i).to eq(data[:key].params['d'].to_i)
+      rescue Exception
+        raise
+      ensure
+        File.unlink 'key.pem'
+      end
+    end
+
+    it '#load private key from key.der file' do
+      pwd = FileUtils.pwd
+      FileUtils.cd File.dirname(__FILE__)
+
+      begin
+        data = keyder.load
+        expect(data[:key]).to be_a(OpenSSL::PKey::RSA)
+        expect(data[:key].params['d']).to eq(OpenSSL::BN.new(0x648C2A57083D12CA32A89538DD1AD7BAC5C522E682F0AFD9C834BB44CC536A57880F24D9D8987A0FC2CEF5C8F7A9BA70223E3C3E06229C815955FCE06F198175))
+      rescue Exception
+        raise
+      ensure
+        FileUtils.cd pwd
+      end
+    end
+
+    it '#save private key to key.der file' do
+      data = { key: OpenSSL::PKey::RSA.new(512) }
+      keyder.save data
+      begin
+        expect(File.exist? 'key.der').to be(true)
+
+        data2 = keyder.load
+        expect(data2[:key].params['d'].to_i).to eq(data[:key].params['d'].to_i)
+      rescue Exception
+        raise
+      ensure
+        File.unlink 'key.der'
+      end
+    end
+  end
+
+  describe ChainFile do
+    let(:chain) { IOPlugin.registered['chain.pem'] }
+
+    it 'persist chain' do
+      expect(chain.persisted[:chain]).to be(true)
+    end
+
+    it '#load chain from chain.pem file' do
+      pwd = FileUtils.pwd
+      FileUtils.cd File.dirname(__FILE__)
+
+      begin
+        data = chain.load
+        expect(data[:cert]).to be_nil
+        expect(data[:chain]).to_not be_nil
+        expect(data[:chain]).to be_a(Array)
+        expect(data[:chain].first).to be_a(OpenSSL::X509::Certificate)
+      rescue Exception
+        raise
+      ensure
+        FileUtils.cd pwd
+      end
+    end
+
+    it '#save chain to chain.pem file' do
+      pwd = FileUtils.pwd
+      FileUtils.cd File.dirname(__FILE__)
+
+      begin
+        data = chain.load
+        expect(data[:cert]).to be_nil
+        expect(data[:chain]).to_not be_nil
+      rescue Exception
+        raise
+      ensure
+        FileUtils.cd pwd
+      end
+
+      chain.save data
+
+      begin
+        expect(File.exist? 'chain.pem').to be(true)
+
+        data2 = chain.load
+        data2[:chain].each_with_index do |cert, i|
+          expect(cert.to_pem).to eq(data[:chain][i].to_pem)
+        end
+      rescue Exception
+        raise
+      ensure
+        File.unlink 'chain.pem'
+      end
+    end
+
+  end
+
+  describe FullChainFile do
+    let(:fullchain) { IOPlugin.registered['fullchain.pem'] }
+
+    it 'persist chain' do
+      expect(fullchain.persisted[:chain]).to be(true)
+    end
+
+    it 'persist cert' do
+      expect(fullchain.persisted[:cert]).to be(true)
+    end
+
+    it '#load cert and chain from fullchain.pem file' do
+      pwd = FileUtils.pwd
+      FileUtils.cd File.dirname(__FILE__)
+
+      begin
+        data = fullchain.load
+        expect(data[:cert]).to_not be_nil
+        expect(data[:cert]).to be_a(OpenSSL::X509::Certificate)
+        expect(data[:chain]).to_not be_nil
+        expect(data[:chain]).to be_a(Array)
+        expect(data[:chain].first).to be_a(OpenSSL::X509::Certificate)
+      rescue Exception
+        raise
+      ensure
+        FileUtils.cd pwd
+      end
+    end
+
+    it '#save cert and chain to fullchain.pem file' do
+      pwd = FileUtils.pwd
+      FileUtils.cd File.dirname(__FILE__)
+
+      begin
+        data = fullchain.load
+        expect(data[:cert]).to_not be_nil
+        expect(data[:chain]).to_not be_nil
+      rescue Exception
+        raise
+      ensure
+        FileUtils.cd pwd
+      end
+
+      fullchain.save data
+
+      begin
+        expect(File.exist? 'fullchain.pem').to be(true)
+
+        data2 = fullchain.load
+        expect(data2[:cert].to_pem).to eq(data[:cert].to_pem)
+        data2[:chain].each_with_index do |cert, i|
+          expect(cert.to_pem).to eq(data[:chain][i].to_pem)
+        end
+      rescue Exception
+        raise
+      ensure
+        File.unlink 'fullchain.pem'
+      end
+    end
+
+  end
+
+  describe CertFile do
+
+    let(:certpem) { IOPlugin.registered['cert.pem'] }
+    let(:certder) { IOPlugin.registered['cert.der'] }
+
+    it 'persist cert' do
+      expect(certpem.persisted[:cert]).to be(true)
+      expect(certder.persisted[:cert]).to be(true)
+    end
+
+    it '#load cert from cert.pem' do
+      pwd = FileUtils.pwd
+      FileUtils.cd File.dirname(__FILE__)
+
+      begin
+        data = certpem.load
+        expect(data[:cert]).to_not be_nil
+        expect(data[:cert]).to be_a(OpenSSL::X509::Certificate)
+      rescue Exception
+        raise
+      ensure
+        FileUtils.cd pwd
+      end
+    end
+
+    it '#load cert from cert.der' do
+      pwd = FileUtils.pwd
+      FileUtils.cd File.dirname(__FILE__)
+
+      begin
+        data = certder.load
+        expect(data[:cert]).to_not be_nil
+        expect(data[:cert]).to be_a(OpenSSL::X509::Certificate)
+      rescue Exception
+        raise
+      ensure
+        FileUtils.cd pwd
+      end
+    end
+
+    it '#save cert to cert.pem' do
+      pwd = FileUtils.pwd
+      FileUtils.cd File.dirname(__FILE__)
+
+      begin
+        data = certpem.load
+        expect(data[:cert]).to_not be_nil
+      rescue Exception
+        raise
+      ensure
+        FileUtils.cd pwd
+      end
+
+      certpem.save data
+
+      begin
+        expect(File.exist? 'cert.pem').to be(true)
+
+        data2 = certpem.load
+        expect(data2[:cert].to_pem).to eq(data[:cert].to_pem)
+      rescue Exception
+        raise
+      ensure
+        File.unlink 'cert.pem'
+      end
+    end
+
+    it '#save cert to cert.der' do
+      pwd = FileUtils.pwd
+      FileUtils.cd File.dirname(__FILE__)
+
+      begin
+        data = certder.load
+        expect(data[:cert]).to_not be_nil
+      rescue Exception
+        raise
+      ensure
+        FileUtils.cd pwd
+      end
+
+      certder.save data
+
+      begin
+        expect(File.exist? 'cert.der').to be(true)
+
+        data2 = certder.load
+        expect(data2[:cert].to_pem).to eq(data[:cert].to_pem)
+      rescue Exception
+        raise
+      ensure
+        File.unlink 'cert.der'
+      end
+    end
+  end
+
 end

data/spec/key.pem

@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: letscert
 version: !ruby/object:Gem::Version
-  version: 0.2.3
+  version: 0.2.4
 platform: ruby
 authors:
 - Sylvain Daubert
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-02-11 00:00:00.000000000 Z
+date: 2016-02-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: acme-client
@@ -65,23 +65,23 @@ files:
 - README.md
 - Rakefile
 - bin/letscert
-- bin/letscert~
 - lib/letscert.rb
-- lib/letscert.rb~
 - lib/letscert/certificate.rb
 - lib/letscert/io_plugin.rb
 - lib/letscert/loggable.rb
 - lib/letscert/runner.rb
 - spec/account_key.json
+- spec/cert.der
+- spec/cert.pem
+- spec/chain.pem
+- spec/fullchain.pem
 - spec/io_plugin_spec.rb
-- spec/io_plugin_spec.rb~
+- spec/key.der
+- spec/key.pem
 - spec/loggable_spec.rb
-- spec/loggable_spec.rb~
 - spec/spec_helper.rb
-- spec/spec_helper.rb~
 - spec/test.json
 - tasks/gem.rake
-- tasks/gem.rake~
 - tasks/spec.rake
 - tasks/yard.rake
 homepage: https://github.com/sdaubert/letscert

data/bin/letscert~

@@ -1,4 +0,0 @@
-#!/usr/bin/ruby
-
-require 'acme-client'
-

data/lib/letscert.rb~

@@ -1,6 +0,0 @@
-module LetsCert
-
-  # Letscert version number
-  VERSION = '0.0.1'
-
-end

data/spec/io_plugin_spec.rb~

@@ -1,16 +0,0 @@
-require_relative 'spec_helper'
-
-module LetsCert
-
-  describe IOPlugin do
-
-    it '.empty_data always returns the same hash' do
-      hsh = IOPlugin.empty_data
-
-      expect(hsh.keys.size).to eq(4)
-      expect(hsh.keys).to include(:account_key)
-    end
-
-  end
-
-end

data/spec/loggable_spec.rb~

@@ -1 +0,0 @@
-require_relative 'spec_helper'

data/spec/spec_helper.rb~

@@ -1 +0,0 @@
-$:.unshift File.join(File.dirname(__FILE__), '..', 'lib')

data/tasks/gem.rake~

@@ -1,34 +0,0 @@
-require 'rubygems/package_task'
-require_relative '../lib/letscert.rb'
-
-spec = Gem::Specification.new do |s|
-  s.name = 'letscert'
-  s.version = LetsCert::VERSION
-  s.summary = "letscert, a simple Let's Encrypt client"
-  s.description = <<-EOF
-letscert is a simple Let's Encrypt client written in Ruby. It aims at be as clean as
-simp_le.
-EOF
-
-  s.authors << 'Sylvain Daubert'
-  s.email = 'sylvain.daubert@laposte.net'
-  s.homepage = 'https://github.com/sdaubert/letscert'
-
-  files = Dir['{spec,lib,bin,tasks}/**/*']
-  files += ['README.md', 'MIT-LICENSE', 'Rakefile']
-  # For now, device is not in gem.
-  s.files = files
-  s.executables = ['letscert']
-
-  s.add_dependency 'acme-client', '~>0.2.4'
-  s.add_dependency 'yard', '~>0.8.7'
-
-  #s.add_development_dependency 'rspec', '~>2.14.0'
-end
-
-
-Gem::PackageTask.new(spec) do |pkg|
-  pkg.need_zip = true
-  pkg.need_tar = true
-end
-~