localhost 1.0.0 → 1.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 47320a58186ec6b563f8b2f33605a8a5b089bad34372b96b8f75bcf5e46bc702
-  data.tar.gz: d5881e19b6cfc2e12dabd2b8a0fc05d1a5e58e9440f45013d0220c5f398999c1
+  metadata.gz: fda0f07449ce52b5f8f53a578c249733f5f391d44095dc2a5d433db2df0ae5bf
+  data.tar.gz: ea02fcc0c8fb3ecbd84febf29aa7530046b15d49bea236cef0a8837cf59acf5a
 SHA512:
-  metadata.gz: a14c685f31632fec950b0adad3717497a1981f94ca19b3851d955a97422035d12809677106e3515a29dc2575bd3edbd457c7eb5401506c474e09b180e103e52d
-  data.tar.gz: 2e47b4b98fb60fdc885a971b744d8eeda298e29aa3cbe2d9a47586d8926758e56fd9e547ff05840fd0b34153e714c97d7f1022f100c11a4959589aff87b275c6
+  metadata.gz: db94e6a6b1f615f0e146d33a13bee540ce6ce3dc17d2ac77add5c469dfd12dbd970a0622c29ee9d12d6a23e4bcef5aef4ea7c54b4729ba8687a682a30b6088d2
+  data.tar.gz: 3f0f2d90424313e5b8988746219ad74e25db7a4c6ffe36cd02acf44908a3b2006c10db4294d24e6576a2bae4a7d263c5fbc5d41e02f14a46fadf1bbd84c88d25

data/.gitignore

@@ -9,3 +9,5 @@
 
 # rspec failure tracking
 .rspec_status
+
+/ssl/

data/Gemfile

@@ -4,3 +4,8 @@ git_source(:github) {|repo_name| "https://github.com/#{repo_name}" }
 
 # Specify your gem's dependencies in localhost.gemspec
 gemspec
+
+group :development do
+	gem 'async-io'
+	gem 'async-rspec'
+end

data/README.md

@@ -30,15 +30,41 @@ This example shows how to generate a certificate for an SSL secured web server:
 
 ```ruby
 require 'localhost/authority'
+require 'socket'
 
 authority = Localhost::Authority.fetch
 
-OpenSSL::SSL::SSLContext.new.tap do |context|
-	context.cert = authority.certificate
-	context.key = authority.key
+server_thread = Thread.new do
+	server = OpenSSL::SSL::SSLServer.new(TCPServer.new("localhost", 4050), authority.server_context)
+	
+	server.listen
+	
+	peer = server.accept
+	
+	puts "Writing..."
+	peer.flush
+	
+	peer.close
 end
+
+client = OpenSSL::SSL::SSLSocket.new(TCPSocket.new("localhost", 4050), authority.client_context)
+
+# Initialize SSL connection
+client.connect
+
+puts client.read
+
+client.close
+
+server_thread.join
 ```
 
+If you use Safari to access such a server, it will allow you to add the certificate to your keychain without much work. Once you've done this, you won't need to do it again for any other site when running such a development environment from the same user account.
+
+### Files
+
+The certificate and private key are stored in `~/.localhost/`.
+
 ## Contributing
 
 1. Fork it

data/lib/localhost/authority.rb

@@ -46,6 +46,7 @@ module Localhost
 			@key = nil
 			@name = nil
 			@certificate = nil
+			@store = nil
 		end
 		
 		def key
@@ -73,6 +74,12 @@ module Localhost
 				extension_factory.subject_certificate = certificate
 				extension_factory.issuer_certificate = certificate
 				
+				# Because we are using a self-signed root certificate, we also need to make it a "pseudo-CA".
+				# https://security.stackexchange.com/questions/143061/does-openssl-refuse-self-signed-certificates-without-basic-constraints
+				certificate.add_extension extension_factory.create_extension("basicConstraints", "CA:TRUE", true)
+				certificate.add_extension extension_factory.create_extension("keyUsage", "keyCertSign, cRLSign, digitalSignature", true)
+				certificate.add_extension extension_factory.create_extension("subjectKeyIdentifier", "hash")
+				
 				certificate.sign self.key, OpenSSL::Digest::SHA256.new
 			end
 		end
@@ -84,6 +91,30 @@ module Localhost
 			end
 		end
 		
+		def server_context(*args)
+			OpenSSL::SSL::SSLContext.new(*args).tap do |context|
+				context.key = self.key
+				context.cert = self.certificate
+				
+				context.session_id_context = "localhost"
+				
+				context.set_params(
+					verify_hostname: false,
+				)
+			end
+		end
+		
+		def client_context(*args)
+			OpenSSL::SSL::SSLContext.new(*args).tap do |context|
+				context.cert_store = self.store
+				
+				context.set_params(
+					verify_mode: OpenSSL::SSL::VERIFY_PEER,
+					verify_hostname: false,
+				)
+			end
+		end
+		
 		def load(path)
 			if File.directory? path
 				key_path = File.join(path, "#{@hostname}.key")

data/lib/localhost/version.rb

@@ -19,5 +19,5 @@
 # THE SOFTWARE.
 
 module Localhost
-	VERSION = "1.0.0"
+	VERSION = "1.1.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: localhost
 version: !ruby/object:Gem::Version
-  version: 1.0.0
+  version: 1.1.0
 platform: ruby
 authors:
 - Samuel Williams
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-08-03 00:00:00.000000000 Z
+date: 2018-08-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler