letscert 0.4.3 → 0.4.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: b1c7540da4fdf5cbdc335d39e2bbe3ddbdf1c626
-  data.tar.gz: 677697d448f263b70b20cea1d8b63e6a26a4db6b
+  metadata.gz: 7cfc8029c8899c6a18ee1c61144cbf6b5ed7abe1
+  data.tar.gz: a3d1003fa3e102cbd986253947a3fd9df60d14ae
 SHA512:
-  metadata.gz: fe59f20eabe2f24f06d64613668146bb18280fc0e78b1cb24560eff2eb6dce9a19319dea8806f1f4e06d1abf15338f67bd513be74a53650e66c7fe45d3e69424
-  data.tar.gz: 2bdc561629f525bea12e80ca1d5cace8ac851529be690ed8836dcd539c49e1243be9d0f745a8a9454b38431ad607cfe5e8cd11721975b7da6581c3ced2d41b13
+  metadata.gz: 4dcc9323bc64e22f3268c3c16dd7958bf94c7a78612b6826b568b263994cc8659c681139fa87ceda200dc6d567d7df5455c192f1753b385ecc116ef0d4253696
+  data.tar.gz: f6001ff81d51e9d3cc183bc1a4b2d737be4194c93a75788f7f53233d5e8f24a4b2f7165d1788a251570003b63756dafdaf7b4c5db07f9ce410276d7eca0d1d2b

data/.travis.yml

@@ -0,0 +1,9 @@
+language: ruby
+rvm:
+  - 2.1
+  - 2.2
+  - 2.3.1
+
+install:
+  - gem install bundler
+  - bundler install --path vendor/bundle --jobs=3 --retry=3

data/README.md

@@ -1,9 +1,10 @@
 [![Gem Version](https://badge.fury.io/rb/letscert.svg)](https://badge.fury.io/rb/letscert)
+[![Build Status](https://travis-ci.org/sdaubert/letscert.svg?branch=master)](https://travis-ci.org/sdaubert/letscert)
 
 # letscert
 A simple `Let's Encrypt` client in ruby.
 
-I think `simp_le` do it the right way: it is simple, it is safe as it does not need to be
+I think [kuba/simp_le](https://github.com/kuba/simp_le) do it the right way: it is simple, it is safe as it does not need to be
 run as root, but it is Python (no one is perfect :-)) So I started to create a clone, but
 in Ruby.
 
@@ -13,15 +14,15 @@ in Ruby.
 With full chain support (`fullchain.pem` file will contain all certificates):
 
 ```bash
-letscert -d example.com:/var/www/example.com/html --email my.name@domain.tld \
+letscert -d example.org:/var/www/example.org/html --email my.name@example.org \
   -f account_key.json -f key.pem -f fullchain.pem
 ```
 
-else (certificate for example.com is in `cert.pem` file, rest of certification chain
+else (certificate for example.org is in `cert.pem` file, rest of certification chain
 is in `chain.pem`):
 
 ```bash
-letscert -d example.com:/var/www/example.com/html --email my.name@domain.tld \
+letscert -d example.org:/var/www/example.org/html --email my.name@example.org \
   -f account_key.json -f key.pem -f cert.pem -f chain.pem
 ```
 
@@ -29,11 +30,11 @@ Commands are the sames for certificate renewal.
 
 
 ## Generate a key pair and get a signed certificate for multi-domains:
-Generate a single certificate for `example.com` and `www.example.com`:
+Generate a single certificate for `example.org` and `www.example.org`:
 
 ```bash
-letscert -d example.com -d www.example.com --default-root /var/www/html \
-  --email my.name@domain.tld -f account_key.json -f key.pem -f fullchain.pem
+letscert -d example.org -d www.example.org --default-root /var/www/html \
+  --email my.name@example.org -f account_key.json -f key.pem -f fullchain.pem
 ```
 
 Command is the same for certificate renewal.
@@ -43,7 +44,7 @@ Command is the same for certificate renewal.
 In this example, `xx` is 10:
 
 ```bash
-letscert -d example.com:/var/www/example.com/html --email my.name@domain.tld \
+letscert -d example.org:/var/www/example.org/html --email my.name@example.org \
   -f account_key.json -f key.pem -f cert.pem -f chain.pem --valid-min 10d
 ```
 
@@ -54,7 +55,7 @@ seconds (no suffix).
 From directory where are stored `account_key.json` and `cert.pem` or `fullchain.pem`:
 
 ```bash
-letscert -d example.com:/var/www/example.com/html --email my.name@domain.tld --revoke
+letscert -d example.org:/var/www/example.org/html --email my.name@example.org --revoke
 ```
 
 
@@ -69,7 +70,7 @@ letscert -d example.com:/var/www/example.com/html --email my.name@domain.tld --r
 * No configuration file.
 * Support multiple domains with multiple roots. Always create a single certificate per
   run (ie a certificate may have multiple SANs).
-* As `simp_le`, check the exit code to known if a renewal has happened:
+* Check the exit code to known if a renewal has happened:
   * 0 if certificate data was created or updated;
   * 1 if renewal not necessary;
   * 2 in case of errors.
@@ -88,4 +89,4 @@ gem install letscert -P MediumSecurity
 
 The MediumSecurity trust profile will verify signed gems, but allow the installation of
 unsigned dependencies. This is necessary because not all of letcert’s dependencies are
-signed, so we cannot use HighSecurity.
+signed, so we cannot use HighSecurity.

data/lib/letscert.rb

@@ -21,6 +21,7 @@
 # SOFTWARE.
 
 # Namespace for all letcert's classes.
+# @author Sylvain Daubert
 module LetsCert
 
   # Base error class

data/lib/letscert/certificate.rb

@@ -22,6 +22,8 @@
 require 'acme-client'
 require_relative 'loggable'
 
+# rubocop:disable Metrics/ClassLength, Style/MultilineBlockLayout
+# rubocop:disable Style/BlockEndNewline, Style/BlockDelimiters
 module LetsCert
 
   # Class to handle ACME operations on certificates

data/lib/letscert/io_plugins/file_io_plugin_mixin.rb

@@ -54,6 +54,12 @@ module LetsCert
     def save_to_file(data)
       return if data.nil?
 
+      # Return if content did not change
+      if File.exist? name
+        old_content = File.read(name)
+        return if old_content == data
+      end
+
       logger.info { "saving #{@name}" }
       begin
         File.open(name, 'w') do |f|

data/lib/letscert/io_plugins/jwk_io_plugin_mixin.rb

@@ -41,8 +41,8 @@ module LetsCert
       # Ruby < 2.3.0 urlsafe_decode64 use struct_decode64. So the string
       # is rejected if padding is removed (which JWK do)
       # So, we have to reinject padding
-      if !data.end_with?("=") && data.length % 4 != 0
-        data = data.ljust((data.length + 3) & ~3, "=")
+      if !data.end_with?('=') && (data.length % 4).nonzero?
+        data = data.ljust((data.length + 3) & ~3, '=')
       end
       Base64.urlsafe_decode64(data)
     end

data/lib/letscert/loggable.rb

@@ -20,8 +20,7 @@
 # OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 # SOFTWARE.
 
-# Namespace for all letcert's classes.
-# @author Sylvain Daubert
+# rubocop:disable Style/ClassVars
 module LetsCert
 
   # Mixin module to add loggability to a class.

data/lib/letscert/runner.rb

@@ -227,6 +227,7 @@ module LetsCert
     # rubocop:disable Style/GuardClause
     def print_help_if_needed
       if @options[:print_help]
+        show_version
         puts @opt_parser
         exit RETURN_OK
       end
@@ -236,13 +237,17 @@ module LetsCert
     # @return [void]
     def show_version_if_needed
       if @options[:show_version]
-        puts "letscert #{LetsCert::VERSION}"
-        puts 'Copyright (c) 2016 Sylvain Daubert'
-        puts 'License MIT: see http://opensource.org/licenses/MIT'
+        show_version
         exit RETURN_OK
       end
     end
 
+    def show_version
+      puts "letscert #{LetsCert::VERSION}"
+      puts 'Copyright (c) 2016 Sylvain Daubert'
+      puts 'License MIT: see http://opensource.org/licenses/MIT'
+    end
+
     # Set logger level from +:verbose+ option
     # @return [void]
     def set_logger_level

data/lib/letscert/version.rb

@@ -1,6 +1,6 @@
 module LetsCert
 
   # Letscert version number
-  VERSION = '0.4.3'.freeze
+  VERSION = '0.4.4'.freeze
 
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: letscert
 version: !ruby/object:Gem::Version
-  version: 0.4.3
+  version: 0.4.4
 platform: ruby
 authors:
 - Sylvain Daubert
@@ -31,7 +31,7 @@ cert_chain:
   dMi8WSKt03lfzyxIqZseBwVYYn+XMlzCcJLXCUgZXHcBRRRDH5wGDqOqXjL25b2O
   6m3JJngqkCFrOw==
   -----END CERTIFICATE-----
-date: 2016-10-12 00:00:00.000000000 Z
+date: 2016-11-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: acme-client
@@ -142,6 +142,7 @@ extra_rdoc_files: []
 files:
 - ".gitignore"
 - ".rubocop.yml"
+- ".travis.yml"
 - Gemfile
 - LICENSE
 - README.md