matchi 0.0.8 → 0.0.9

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: aba5dbe39a905baf4689d100df3092c66df38fb3
-  data.tar.gz: ccf59ea03b4d94ed86ff22c28ba9e9983cb5b42d
+  metadata.gz: 659f29a670790e63d96ab4d838e3978b767e5a07
+  data.tar.gz: 035aaf2bd805b1018ab474e374b3245f267f9c83
 SHA512:
-  metadata.gz: 3ec8cf176ff3511e5907caf39dfbb646604ccf72ed956edf5a92065fc1d35f7dcfe732f7de88dea0618e69d1e45f059a18b10761d97b4825c4926285718bb897
-  data.tar.gz: d42262575329bcf116f0e43dc837f794b9d52843d0899275e3b116ef2ec67450975c5d6a00cbcca205b8ada302333033af7ea8b4a8359bd243b854e3ad0c0a95
+  metadata.gz: ccd2e3cef44f95a92b93c383421dd1d03821ae77c84607880383338ada5fc2fa1cf2c91af084b2a11e5a2c1d5fd2f47aede844cea74a3083233d00e3bb29d16a
+  data.tar.gz: 670b8aaf1192527270fd656132547d2e75127dfed51a3b2dc0d9d7151091e571689643bb4b54d3dd812ec56fd0f5e3f6ec25b7e66e2269a08991faa603ee36c2

data/README.md

@@ -1,8 +1,3 @@
-[gem]: https://rubygems.org/gems/matchi
-[travis]: https://travis-ci.org/fixrb/matchi
-[inchpages]: http://inch-ci.org/github/fixrb/matchi/
-[rubydoc]: http://rubydoc.info/gems/matchi/frames
-
 # Matchi
 
 [![Build Status](https://travis-ci.org/fixrb/matchi.svg?branch=master)][travis]
@@ -26,19 +21,16 @@
 
 ## Installation
 
-Add this line to your application's Gemfile:
-
-```ruby
-gem 'matchi'
-```
-
-And then execute:
+__Matchi__ is cryptographically signed.
 
-    $ bundle
+To be sure the gem you install hasn't been tampered with, add my public key
+(if you haven't already) as a trusted certificate:
 
-Or install it yourself as:
+    $ gem cert --add <(curl -Ls https://raw.github.com/fixrb/matchi/master/certs/gem-fixrb-public_cert.pem)
+    $ gem install matchi -P HighSecurity
 
-    $ gem install matchi
+The `HighSecurity` trust profile will verify all gems.  All of __Matchi__'s
+dependencies are signed.
 
 ## Usage
 
@@ -154,6 +146,19 @@ start_with = Matchi.fetch(:StartWith, 'foo')
 start_with.matches? { 'foobar' } # => true
 ```
 
+## Security
+
+As a basic form of security __Matchi__ provides a set of SHA512 checksums for
+every Gem release.  These checksums can be found in the `checksum/` directory.
+Although these checksums do not prevent malicious users from tampering with a
+built Gem they can be used for basic integrity verification purposes.
+
+The checksum of a file can be checked using the `sha512sum` command.  For
+example:
+
+    $ sha512sum pkg/matchi-0.0.1.gem
+    548d9f669ded4e622182791a5390aaceae0bf2e557b0864f05a842b0be2c65e10e1fb8499f49a3b9efd0e8eaeb691351b1c670d6316ce49965a99683b1071389  pkg/matchi-0.0.1.gem
+
 ## Versioning
 
 __Matchi__ follows [Semantic Versioning 2.0](http://semver.org/).
@@ -169,3 +174,8 @@ __Matchi__ follows [Semantic Versioning 2.0](http://semver.org/).
 ## License
 
 See `LICENSE.md` file.
+
+[gem]: https://rubygems.org/gems/matchi
+[travis]: https://travis-ci.org/fixrb/matchi
+[inchpages]: http://inch-ci.org/github/fixrb/matchi/
+[rubydoc]: http://rubydoc.info/gems/matchi/frames

data/VERSION.semver

@@ -1 +1 @@
-0.0.8
+0.0.9

data/certs/gem-fixrb-public_cert.pem

@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----
+MIIDdDCCAlygAwIBAgIBATANBgkqhkiG9w0BAQUFADBAMRAwDgYDVQQDDAdjb250
+YWN0MRUwEwYKCZImiZPyLGQBGRYFY3lyaWwxFTATBgoJkiaJk/IsZAEZFgVlbWFp
+bDAeFw0xNTA3MzExMjExMDZaFw0xNjA3MzAxMjExMDZaMEAxEDAOBgNVBAMMB2Nv
+bnRhY3QxFTATBgoJkiaJk/IsZAEZFgVjeXJpbDEVMBMGCgmSJomT8ixkARkWBWVt
+YWlsMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hUEYoxnn1mtoaiK
+NiwjzVPqPgQCR9ZeYdWjLJ3UUG2h5Q6awJCnbaGr8LGGcKtveCDbOJRjtdKNuOTH
+O2FLTkf46nrMGiF+6/j//qh8o0EQHBRKIVMYkxZxZe4Fcqtdf1bWNMZuXeyoDjdt
+4yiGfizbbTOu0gBf7Yrsv5DsL0a5CU/We7zxMfgGXCVb9PYkD+OWUMcTARYDKfYa
+nN9ECI7CFm/yXcsof/eIQA5EmJNmQnhx8B+8L6jDqQeSUAUrBZnC9CdloKOoqmEL
+weqM2g6LM932Ba74rEl4QlFRYDcs8kjr71UcvseHRCUkFr36j26OU8+gKelsTNdO
+7OZNKQIDAQABo3kwdzAJBgNVHRMEAjAAMAsGA1UdDwQEAwIEsDAdBgNVHQ4EFgQU
+LSJTN9h29D6bqOhp+vyvhyM0AF4wHgYDVR0RBBcwFYETY29udGFjdEBjeXJpbC5l
+bWFpbDAeBgNVHRIEFzAVgRNjb250YWN0QGN5cmlsLmVtYWlsMA0GCSqGSIb3DQEB
+BQUAA4IBAQArqCC1rUyGJlF0DF9ZhUOgggyROvO0/WroSI5zWgzdB8EU7RJpsDIV
+caGnpji7h0rQIGWQuJ6TL2fTFLfeGRFdIzRZwWC7TeXhcXngJHZxSjDBt2OpfM8A
+P5eElSQS9iJCetBGGMyt354PfgZkg3URaC+JA6mdEisdtEdo64ElnMsLg9shCqye
+JSR3BbejbyPVva0/MHKD+dR6RswlcM9KMiYOXQml7a/kH6huOHvVq9gj5xC2ih8W
+dzJvWzQ1+dJU6WQv75E9ddSkaQrK3nhdgQVu+/wgvGSrsMvOGNz+LXaSDxQqZuwX
+0KNQFuIukfrdk8URwRnHoAnvx4U93iUw
+-----END CERTIFICATE-----

data/checksum/matchi-0.0.1.gem.sha512

@@ -0,0 +1 @@
+548d9f669ded4e622182791a5390aaceae0bf2e557b0864f05a842b0be2c65e10e1fb8499f49a3b9efd0e8eaeb691351b1c670d6316ce49965a99683b1071389

data/checksum/matchi-0.0.2.gem.sha512

@@ -0,0 +1 @@
+d82ab27fc779090bbb6848bd0d621a28934bb2d3404aa2086a81fe7ffb6722af2a5071af8ce2d1e8aeac77d634c1ee0c0cbe1d989b4b0b8a66f490794ceec97e

data/checksum/matchi-0.0.3.gem.sha512

@@ -0,0 +1 @@
+474a7ee1ad41ce13fb56f8935fc774492095397addca63b1c830cdd55c394b301764773dee68e055341ced3971a6a6f79c15cd3c5af6290179027677ebbe1d14

data/checksum/matchi-0.0.4.gem.sha512

@@ -0,0 +1 @@
+7d9b374d6260c62f94f1cfd5b4612eb8c2201060ecf0c85f4221bf5503ee434071abe73514654b7cd28c71e2305f6fe680fc0d5b3202fc56b96b881d6cb08168

data/checksum/matchi-0.0.5.gem.sha512

@@ -0,0 +1 @@
+354f4bfa07bf00f569e09b39b6333ba04ac76cd4ac612e3fadd945c94b710c5ddb670fe7f5ef164c526da85e8a4c38a5b1f1521e86f85ddb6d3bc81399ef0800

data/checksum/matchi-0.0.6.gem.sha512

@@ -0,0 +1 @@
+38d4b6160b00b7151e6b344942674ab724c60b5543eecbaf339ba7b9182be86063df987240af317ae0ef0e6123e29603180095ea2c6e676e264e662386fe03db

data/checksum/matchi-0.0.7.gem.sha512

@@ -0,0 +1 @@
+b2c0cc27a4ea712acf7699e32849f380e8c04609ffbf7e0c21e975fe99d130c221b13d2991c432e797ef0eccd41fd3aaa3d4ca5622f53bb0109aea844f21d74a

data/checksum/matchi-0.0.8.gem.sha512

@@ -0,0 +1 @@
+92577ec2d3b918b7532f18fc451e60d723c454bc14f2aab79ecf03d59318b4bb97ef94db765bd8c7e482bd8feb2a36f8faf95f425b725bba2647853b4a2ef766

data/checksum/matchi-0.0.9.gem.sha512

@@ -0,0 +1 @@
+2fec09a07ba40a3a78fbf475f84fd8f620d90e3bd4596ca05b828d379302aef5c748543bb585c78b5ee536be68e9b444f92e4b99fc39eed50165ad1b3561da31

data/matchi.gemspec

@@ -1,6 +1,6 @@
 Gem::Specification.new do |spec|
   spec.name          = 'matchi'
-  spec.version       = File.read('VERSION.semver')
+  spec.version       = File.read('VERSION.semver').chomp
   spec.authors       = ['Cyril Wack']
   spec.email         = ['contact@cyril.email']
 
@@ -20,9 +20,7 @@ Gem::Specification.new do |spec|
   spec.add_development_dependency 'simplecov',  '~> 0.10'
   spec.add_development_dependency 'rubocop',    '~> 0.32'
 
-  private_key = File.expand_path '~/.gem/matchi-gem-private_key.pem'
-  if File.exist? private_key
-    spec.signing_key = private_key
-    spec.cert_chain  = ['matchi-gem-public_cert.pem']
-  end
+  spec.cert_chain   = ['certs/gem-fixrb-public_cert.pem']
+  private_key       = File.expand_path('~/.ssh/gem-fixrb-private_key.pem')
+  spec.signing_key  = private_key if File.exist?(private_key)
 end

data/pkg_checksum

@@ -0,0 +1,11 @@
+#!/usr/bin/env ruby
+
+require 'digest/sha2'
+
+gemname         = :matchi
+ARGV[0]         = File.read('VERSION.semver').chomp if ARGV[0].nil?
+built_gem_path  = "pkg/#{gemname}-#{ARGV[0]}.gem"
+checksum        = Digest::SHA512.new.hexdigest(File.read(built_gem_path))
+checksum_path   = "checksum/#{gemname}-#{ARGV[0]}.gem.sha512"
+
+File.open(checksum_path, 'w') { |f| f.write("#{checksum}\n") }

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: matchi
 version: !ruby/object:Gem::Version
-  version: 0.0.8
+  version: 0.0.9
 platform: ruby
 authors:
 - Cyril Wack
@@ -12,25 +12,25 @@ cert_chain:
   -----BEGIN CERTIFICATE-----
   MIIDdDCCAlygAwIBAgIBATANBgkqhkiG9w0BAQUFADBAMRAwDgYDVQQDDAdjb250
   YWN0MRUwEwYKCZImiZPyLGQBGRYFY3lyaWwxFTATBgoJkiaJk/IsZAEZFgVlbWFp
-  bDAeFw0xNTA3MjUxNjQ0MDdaFw0xNjA3MjQxNjQ0MDdaMEAxEDAOBgNVBAMMB2Nv
+  bDAeFw0xNTA3MzExMjExMDZaFw0xNjA3MzAxMjExMDZaMEAxEDAOBgNVBAMMB2Nv
   bnRhY3QxFTATBgoJkiaJk/IsZAEZFgVjeXJpbDEVMBMGCgmSJomT8ixkARkWBWVt
-  YWlsMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzZdVRhS63a6V6/S
-  2BtPxGgQ2tCPDbxIq4R0teDJ/yygbVapb6WENF19sQtLYhPuwZirVLiHJ+JgtIev
-  DxU/tbk3ag3zgyBRqRdnZhUcImHTrosjGbIDdSaQE4lgHXWYchBbF4FbRTRCUWMp
-  k3iNs6tIeGdT4d7hYJROnDQDqZfk6YyF1uBZcSWSuq+RehYv6Q95hfFF761MiZ7Q
-  7fa7gJORbyOndy6X7BCRLFv2+N3UhsK2CT6JLXvqzTBpdmDAQ1TxEPPjD7abgRIv
-  p8qs9ZUEeKn+CF/bp3iqRY9quPeRDch1Kis7PPsX7/Cee06/C/bFmkJZBxg4Wd7R
-  ErAUBQIDAQABo3kwdzAJBgNVHRMEAjAAMAsGA1UdDwQEAwIEsDAdBgNVHQ4EFgQU
-  Fv5xNDE1EZ041o2YddwGt92ffAMwHgYDVR0RBBcwFYETY29udGFjdEBjeXJpbC5l
+  YWlsMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hUEYoxnn1mtoaiK
+  NiwjzVPqPgQCR9ZeYdWjLJ3UUG2h5Q6awJCnbaGr8LGGcKtveCDbOJRjtdKNuOTH
+  O2FLTkf46nrMGiF+6/j//qh8o0EQHBRKIVMYkxZxZe4Fcqtdf1bWNMZuXeyoDjdt
+  4yiGfizbbTOu0gBf7Yrsv5DsL0a5CU/We7zxMfgGXCVb9PYkD+OWUMcTARYDKfYa
+  nN9ECI7CFm/yXcsof/eIQA5EmJNmQnhx8B+8L6jDqQeSUAUrBZnC9CdloKOoqmEL
+  weqM2g6LM932Ba74rEl4QlFRYDcs8kjr71UcvseHRCUkFr36j26OU8+gKelsTNdO
+  7OZNKQIDAQABo3kwdzAJBgNVHRMEAjAAMAsGA1UdDwQEAwIEsDAdBgNVHQ4EFgQU
+  LSJTN9h29D6bqOhp+vyvhyM0AF4wHgYDVR0RBBcwFYETY29udGFjdEBjeXJpbC5l
   bWFpbDAeBgNVHRIEFzAVgRNjb250YWN0QGN5cmlsLmVtYWlsMA0GCSqGSIb3DQEB
-  BQUAA4IBAQB5ycjhljpXHEWwbGpLNEIi5eyzHgeArts9097roa8OLR4sdaVckWNe
-  r9N3Iyd0XLCzQ8oLLk9Cy1L0S00+eL6XoMyE/FySFqARBEhAp45VGIOrlqD0zZiT
-  6tqSB3lH5T7PsH7/81iJ0fO9m5LBDaTtySs1fPJgI0k9SLCOZ43p2YvJMOgsICj2
-  I83euKYVzCNIrjmqShSC+3JEcPqK8lLzG1xHH3XQNfU3K9Ps7YFxmAZTA4QIsWB+
-  Tocbm14vxRNYJlIl7mLxKa9eERHotprIMNnTAQb8bWKpWkgrNLwWizHkSOJbIyXP
-  ZbgpTpagA2sM3Pw4isd1YmzFodoGm6OI
+  BQUAA4IBAQArqCC1rUyGJlF0DF9ZhUOgggyROvO0/WroSI5zWgzdB8EU7RJpsDIV
+  caGnpji7h0rQIGWQuJ6TL2fTFLfeGRFdIzRZwWC7TeXhcXngJHZxSjDBt2OpfM8A
+  P5eElSQS9iJCetBGGMyt354PfgZkg3URaC+JA6mdEisdtEdo64ElnMsLg9shCqye
+  JSR3BbejbyPVva0/MHKD+dR6RswlcM9KMiYOXQml7a/kH6huOHvVq9gj5xC2ih8W
+  dzJvWzQ1+dJU6WQv75E9ddSkaQrK3nhdgQVu+/wgvGSrsMvOGNz+LXaSDxQqZuwX
+  0KNQFuIukfrdk8URwRnHoAnvx4U93iUw
   -----END CERTIFICATE-----
-date: 2015-07-25 00:00:00.000000000 Z
+date: 2015-07-31 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -120,6 +120,16 @@ files:
 - VERSION.semver
 - bin/console
 - bin/setup
+- certs/gem-fixrb-public_cert.pem
+- checksum/matchi-0.0.1.gem.sha512
+- checksum/matchi-0.0.2.gem.sha512
+- checksum/matchi-0.0.3.gem.sha512
+- checksum/matchi-0.0.4.gem.sha512
+- checksum/matchi-0.0.5.gem.sha512
+- checksum/matchi-0.0.6.gem.sha512
+- checksum/matchi-0.0.7.gem.sha512
+- checksum/matchi-0.0.8.gem.sha512
+- checksum/matchi-0.0.9.gem.sha512
 - lib/matchi.rb
 - lib/matchi/be_false.rb
 - lib/matchi/be_nil.rb
@@ -128,8 +138,8 @@ files:
 - lib/matchi/equal.rb
 - lib/matchi/match.rb
 - lib/matchi/raise_exception.rb
-- matchi-gem-public_cert.pem
 - matchi.gemspec
+- pkg_checksum
 homepage: https://github.com/fixrb/matchi
 licenses:
 - MIT

data/matchi-gem-public_cert.pem

@@ -1,21 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDdDCCAlygAwIBAgIBATANBgkqhkiG9w0BAQUFADBAMRAwDgYDVQQDDAdjb250
-YWN0MRUwEwYKCZImiZPyLGQBGRYFY3lyaWwxFTATBgoJkiaJk/IsZAEZFgVlbWFp
-bDAeFw0xNTA3MjUxNjQ0MDdaFw0xNjA3MjQxNjQ0MDdaMEAxEDAOBgNVBAMMB2Nv
-bnRhY3QxFTATBgoJkiaJk/IsZAEZFgVjeXJpbDEVMBMGCgmSJomT8ixkARkWBWVt
-YWlsMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzZdVRhS63a6V6/S
-2BtPxGgQ2tCPDbxIq4R0teDJ/yygbVapb6WENF19sQtLYhPuwZirVLiHJ+JgtIev
-DxU/tbk3ag3zgyBRqRdnZhUcImHTrosjGbIDdSaQE4lgHXWYchBbF4FbRTRCUWMp
-k3iNs6tIeGdT4d7hYJROnDQDqZfk6YyF1uBZcSWSuq+RehYv6Q95hfFF761MiZ7Q
-7fa7gJORbyOndy6X7BCRLFv2+N3UhsK2CT6JLXvqzTBpdmDAQ1TxEPPjD7abgRIv
-p8qs9ZUEeKn+CF/bp3iqRY9quPeRDch1Kis7PPsX7/Cee06/C/bFmkJZBxg4Wd7R
-ErAUBQIDAQABo3kwdzAJBgNVHRMEAjAAMAsGA1UdDwQEAwIEsDAdBgNVHQ4EFgQU
-Fv5xNDE1EZ041o2YddwGt92ffAMwHgYDVR0RBBcwFYETY29udGFjdEBjeXJpbC5l
-bWFpbDAeBgNVHRIEFzAVgRNjb250YWN0QGN5cmlsLmVtYWlsMA0GCSqGSIb3DQEB
-BQUAA4IBAQB5ycjhljpXHEWwbGpLNEIi5eyzHgeArts9097roa8OLR4sdaVckWNe
-r9N3Iyd0XLCzQ8oLLk9Cy1L0S00+eL6XoMyE/FySFqARBEhAp45VGIOrlqD0zZiT
-6tqSB3lH5T7PsH7/81iJ0fO9m5LBDaTtySs1fPJgI0k9SLCOZ43p2YvJMOgsICj2
-I83euKYVzCNIrjmqShSC+3JEcPqK8lLzG1xHH3XQNfU3K9Ps7YFxmAZTA4QIsWB+
-Tocbm14vxRNYJlIl7mLxKa9eERHotprIMNnTAQb8bWKpWkgrNLwWizHkSOJbIyXP
-ZbgpTpagA2sM3Pw4isd1YmzFodoGm6OI
------END CERTIFICATE-----