letsencrypt-cli 0.2.0 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 3f7a750f6deb043455b510a86acc9947e8e92bc7
-  data.tar.gz: bdd835c1eb3bc356806fb8a475d4731b1ea42656
+  metadata.gz: a5daeb88cfefed35938043bd207c5f0da83e5459
+  data.tar.gz: c957d6ef5ff7b213b7c20e6d0cd1d29f71da898f
 SHA512:
-  metadata.gz: 614b040125f605d32eeb0dd2856afe570c05c794d73f8d8d41b52ad82d3e566244ba8b543f3b9e34d1e09a99720d43b9a83e23c701800be48ebe34d78f252f02
-  data.tar.gz: 4d4edba4bd600d393da8353c9270207006d50fb0bc7e1e45fe139fad4be25ba431a8aa51a5a11e257345417567ca590c3491c9aa7b79f39adf46974c32654b4f
+  metadata.gz: ca8f5bdbd2f673933c945bec5a952e327aa20e96c9e51c9e14d27c1eb9ccbe52fad6c0a4df1c721310d545a28c1613830203f7034601a62d64bd60f08e748a1c
+  data.tar.gz: 289b3b107fae7f86377a1606debc2dbccbd3eecdeecf128a1efb4c44fbc781acb2b2bc1230d9b152b30e0e12316d2a987175298639a847aa5c9f892ae3150760

data/.travis.yml

@@ -3,7 +3,9 @@ sudo: false
 cache: bundler
 
 rvm:
-  - 2.2
+  - ruby-head
+  - 2.3.0
+  - 2.2.4
   - 2.1
   # - 2.0
 

data/CHANGELOG.md

@@ -0,0 +1,64 @@
+# Change Log
+
+## [v0.3.0](https://github.com/zealot128/ruby-letsencrypt-cli/tree/v0.3.0)
+
+* Certificate creation checks if existing certificate includes all requested domains. If at least one is missing, a new cert will be requested
+* Added Ruby 2.3.0 and Ruby head to the build matrix
+
+[Full Changelog](https://github.com/zealot128/ruby-letsencrypt-cli/compare/v0.2.0...v0.3.0)
+
+## [v0.2.0](https://github.com/zealot128/ruby-letsencrypt-cli/tree/v0.2.0)
+
+[Full Changelog](https://github.com/zealot128/ruby-letsencrypt-cli/compare/v0.1.4...v0.2.0)
+
+**Closed issues:**
+
+- cf1e0d9 Exit code 2, if certificate is still valid
+
+**Merged pull requests:**
+
+- Apply strict permissions on private key [\#4](https://github.com/zealot128/ruby-letsencrypt-cli/pull/4) ([zygiss](https://github.com/zygiss))
+- Fix typo in README [\#2](https://github.com/zealot128/ruby-letsencrypt-cli/pull/2) ([kenrick](https://github.com/kenrick))
+
+## [v0.1.4](https://github.com/zealot128/ruby-letsencrypt-cli/tree/v0.1.4) (2015-12-08)
+
+* require higher acme-client version, that generated correct fullchain certs.
+  fullchain.pem is chain.pem + cert.pem, should be cert.pem + chain.pem [\#1](https://github.com/zealot128/ruby-letsencrypt-cli/issues/1)
+
+[Full Changelog](https://github.com/zealot128/ruby-letsencrypt-cli/compare/v0.1.3...v0.1.4)
+
+## [v0.1.3](https://github.com/zealot128/ruby-letsencrypt-cli/tree/v0.1.3) (2015-12-06)
+
+* Fixed registration
+* Added various specs
+
+[Full Changelog](https://github.com/zealot128/ruby-letsencrypt-cli/compare/v0.1.2...v0.1.3)
+
+## [v0.1.2](https://github.com/zealot128/ruby-letsencrypt-cli/tree/v0.1.2) (2015-12-05)
+
+* Added manage command
+* Improved nginx doc + Ruby installation
+
+[Full Changelog](https://github.com/zealot128/ruby-letsencrypt-cli/compare/v0.1.1...v0.1.2)
+
+## [v0.1.1](https://github.com/zealot128/ruby-letsencrypt-cli/tree/v0.1.1) (2015-12-05)
+
+[Full Changelog](https://github.com/zealot128/ruby-letsencrypt-cli/compare/v0.1.0...v0.1.1)
+
+* b654469 new command: check PATH_TO_CERT
+
+## [v0.1.0](https://github.com/zealot128/ruby-letsencrypt-cli/tree/v0.1.0) (2015-12-05)
+
+* released first public version
+* added --version flag
+* added explicit production server
+
+[Full Changelog](https://github.com/zealot128/ruby-letsencrypt-cli/compare/v0.1.0.beta1...v0.1.0)
+
+## [v0.1.0.beta1](https://github.com/zealot128/ruby-letsencrypt-cli/tree/v0.1.0.beta1) (2015-12-05)
+[Full Changelog](https://github.com/zealot128/ruby-letsencrypt-cli/compare/v0.1.0.pre...v0.1.0.beta1)
+
+## [v0.1.0.pre](https://github.com/zealot128/ruby-letsencrypt-cli/tree/v0.1.0.pre) (2015-12-05)
+
+
+\* *This Change Log was (partially) automatically generated by [github_changelog_generator](https://github.com/skywinder/Github-Changelog-Generator)*

data/letsencrypt-cli.gemspec

@@ -19,7 +19,7 @@ Gem::Specification.new do |spec|
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ["lib"]
 
-  spec.add_runtime_dependency 'acme-client', '>= 0.2.1'
+  spec.add_runtime_dependency 'acme-client', '>= 0.2.4'
   spec.add_runtime_dependency 'thor'
   spec.add_runtime_dependency 'colorize'
 

data/lib/letsencrypt/cli/acme_wrapper.rb

@@ -53,7 +53,7 @@ class AcmeWrapper
   end
 
   def cert(domains)
-    return if certificate_exists_and_valid?
+    return if certificate_exists_and_valid_and_all_domains_included?(domains)
     csr = OpenSSL::X509::Request.new
     certificate_private_key = find_or_create_pkey(@options[:private_key_path], "private key", @options[:key_length] || 2048)
 
@@ -105,18 +105,41 @@ class AcmeWrapper
     end
   end
 
+  def revoke_certificate(path)
+    unless File.exists?(path)
+      log "Certificate #{path} does not exists", :warn
+      return false
+    end
+    cert = OpenSSL::X509::Certificate.new(File.read(path))
+    if client.revoke_certificate(cert)
+      log "Certificate '#{path}' was revoked", :info
+    end
+    true
+  rescue Acme::Client::Error::Malformed => e
+    log e.message, :error
+    return false
+  end
+
   private
 
-  def certificate_exists_and_valid?
-    if File.exists?(@options[:certificate_path])
-      cert = OpenSSL::X509::Certificate.new(File.read(@options[:certificate_path]))
-      renew_on = cert.not_after.to_date - @options[:days_valid]
-      if renew_on > Date.today
-        log "Certificate '#{@options[:certificate_path]}' still valid till #{cert.not_after.to_date}.", :warn
-        log "Won't renew until #{renew_on} (#{@options[:days_valid]} days before)", :warn
-        exit 2
-      end
+  def certificate_exists_and_valid_and_all_domains_included?(domains)
+    return false if !File.exists?(@options[:certificate_path])
+    cert = OpenSSL::X509::Certificate.new(File.read(@options[:certificate_path]))
+    domains_in_cert = cert.extensions.map(&:to_h).select{|i| i['oid'] == 'subjectAltName' }.map{|i| i['value']}.join(', ').split(/, */).map{|i| i.sub(/^DNS:/, '') }  +
+      [ cert.subject.to_s.sub(%r{/CN=}, '') ].uniq.sort
+    missing_domains = domains.sort.uniq - domains_in_cert
+    if missing_domains != []
+      log "Certificate '#{@options[:certificate_path]}' missing domains #{missing_domains.join(' ')}. Existing: #{domains_in_cert.join(' ')}", :warn
+      return false
     end
+    renew_on = cert.not_after.to_date - @options[:days_valid]
+    if renew_on > Date.today
+      log "Certificate '#{@options[:certificate_path]}' still valid till #{cert.not_after.to_date}.", :warn
+      log "Won't renew until #{renew_on} (#{@options[:days_valid]} days before)", :warn
+      exit 2
+    end
+
+    true
   end
 
   def endpoint

data/lib/letsencrypt/cli/app.rb

@@ -71,6 +71,13 @@ module Letsencrypt
         end
       end
 
+      desc "revoke PATH_TO_CERTIFICATE", "revokes a given certificate"
+      def revoke(path)
+        if !wrapper.revoke_certificate(path)
+          exit 1
+        end
+      end
+
       desc "manage DOMAINS", "meta command that will: check if cert already exists / still valid (exits zero if nothing todo, exits 2 if certificate is still valid) + authorize given domains + issue certificate for given domains"
       method_option :key_length, desc: "Length of private key", default: 2048, type: :numeric
       method_option :days_valid, desc: "If the --certificate-path already exists, only create new stuff, if that certificate isn't valid for less than the given number of days", default: 30, type: :numeric

data/lib/letsencrypt/cli/version.rb

@@ -1,5 +1,5 @@
 module Letsencrypt
   module Cli
-    VERSION = "0.2.0"
+    VERSION = "0.3.0"
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: letsencrypt-cli
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.3.0
 platform: ruby
 authors:
 - Stefan Wienert
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2015-12-28 00:00:00.000000000 Z
+date: 2016-05-31 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: acme-client
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.2.1
+        version: 0.2.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.2.1
+        version: 0.2.4
 - !ruby/object:Gem::Dependency
   name: thor
   requirement: !ruby/object:Gem::Requirement
@@ -175,6 +175,7 @@ files:
 - ".gitignore"
 - ".rspec"
 - ".travis.yml"
+- CHANGELOG.md
 - Gemfile
 - LICENSE.txt
 - README.md
@@ -208,7 +209,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.2.2
+rubygems_version: 2.4.8
 signing_key: 
 specification_version: 4
 summary: slim letsencrypt client for quickly authorizing (multiple) domains and issuing