mkchain 1.0.2

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 8aae86e806bc9471db4e2a5994286ac337b87adf
+  data.tar.gz: b68eb7c03ebd4eaaef510b797560c892f63b6d4a
+SHA512:
+  metadata.gz: dc1decc59607d9ed117a273eb60efdeab5b007669eba5a8cbc4e0c1d6497edf9f6c1f7e3916b19da9b8fad4b5d4dc0dab93af3ecf58baff8a0d69e154d61d2fc
+  data.tar.gz: 53e725b7dbad4eeb0c4c76d4da9c28a68455f6955457d306a1dcfe8e9360472ea3fb2a987fc6a7e4398c2355e76fb4b79389f9ce91a67917a113963180960190

data/README.md

@@ -0,0 +1,43 @@
+# mkchain
+
+Given a certificate filename as input, `mkchain` will attempt to build the
+intermediate certificate chain, and print it to stdout. This replaces the
+need to copy/edit cert-vendor provided chain files and deal with certificate
+order.
+
+
+## Installation
+
+    $ rake install
+
+
+## Command-line Usage
+
+    $ mkchain site.example.com.crt > site.example.com.chain
+
+
+## Ruby Library
+
+You can also invoke `mkchain` from Ruby code:
+
+    require 'mkchain'
+    chain_str = MkChain.chain(File.read(cert_filename))
+
+This method returns a string containing the contents of the intermediate
+chain in PEM format. If no chain can be built from the certificate, a
+`MkChain::NoChainFoundException` will be raised. If no chain is necessary
+(ie, if the certificate was signed directly by the root CA), then an empty
+string will be returned.
+
+
+## No guarantee
+
+This method of building an intermediate chain depends on the signing
+certificate being in the `authorityInfoAccess` X.509 extension field under
+`CA Issuers`. That's a common but not universal pattern.
+
+
+## Similar Tools
+
+* https://whatsmychaincert.com/
+* https://github.com/SSLMate/mkcertchain

data/bin/mkchain

@@ -0,0 +1,11 @@
+#!/usr/bin/env ruby
+
+require 'mkchain'
+
+abort 'Usage: mkchain <cert-filename>' unless ARGV.count == 1
+
+filename = ARGV[0]
+abort "No such file '#{filename}'" unless File.exist?(filename)
+abort "Cannot read file '#{filename}'" unless File.readable?(filename)
+
+puts MkChain.chain(File.read(filename))

data/lib/mkchain.rb

@@ -0,0 +1,24 @@
+require 'openssl'
+require 'open-uri'
+
+class MkChain
+  class NoChainFoundException < Exception; end
+
+  def self.chain(cert_str)
+    chain = []
+    cert = OpenSSL::X509::Certificate.new(cert_str)
+
+    loop do
+      url = cert.extensions.select { |ext| ext.oid == 'authorityInfoAccess' }
+        .first.value.match(%r{^CA Issuers - URI:(https?://.+)$})[1] rescue break
+
+      cert = OpenSSL::X509::Certificate.new(open(url).read) rescue break
+      chain << cert.to_pem
+    end
+
+    raise NoChainFoundException, 'No intermediate chain found' if chain.empty?
+
+    # the last cert will be the root cert, which doesn't belong in the chain
+    chain[0..-1].join
+  end
+end

data/mkchain.gemspec

@@ -0,0 +1,23 @@
+Gem::Specification.new do |s|
+  s.name = 'mkchain'
+  s.version = '1.0.2'
+  s.authors = ['David Adams']
+  s.email = 'dadams@instructure.com'
+  s.date = Time.now.strftime('%Y-%m-%d')
+  s.license = 'MIT'
+  s.homepage = 'https://github.com/instructure/mkchain'
+  s.required_ruby_version = '>=2.0.0'
+
+  s.summary = 'Create a chain file from SSL cert'
+  s.description =
+    'Creates an intermediate chain file from the given SSL certificate'
+
+  s.require_paths = ['lib']
+  s.files = [
+    'lib/mkchain.rb',
+    'README.md',
+    'mkchain.gemspec'
+  ]
+  s.bindir = 'bin'
+  s.executables = ['mkchain']
+end

metadata

@@ -0,0 +1,48 @@
+--- !ruby/object:Gem::Specification
+name: mkchain
+version: !ruby/object:Gem::Version
+  version: 1.0.2
+platform: ruby
+authors:
+- David Adams
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2017-09-18 00:00:00.000000000 Z
+dependencies: []
+description: Creates an intermediate chain file from the given SSL certificate
+email: dadams@instructure.com
+executables:
+- mkchain
+extensions: []
+extra_rdoc_files: []
+files:
+- README.md
+- bin/mkchain
+- lib/mkchain.rb
+- mkchain.gemspec
+homepage: https://github.com/instructure/mkchain
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 2.0.0
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.5.2
+signing_key: 
+specification_version: 4
+summary: Create a chain file from SSL cert
+test_files: []