nokogiri-xmlsec-ap 0.0.5

data/spec/lib/nokogiri/xml/document/signing_and_verifying_spec.rb

@@ -0,0 +1,70 @@
+require 'spec_helper'
+
+describe "signing and verifying signatures:" do
+  subject do
+    Nokogiri::XML(fixture('sign2-doc.xml'))
+  end
+
+  describe 'signing a document with an RSA key' do
+    before { subject.sign! key: fixture('rsa.pem'), name: 'test' }
+
+    it 'should produce a signed document' do
+      subject.to_s.should == fixture('sign2-result.xml')
+    end
+
+    describe 'verifying the document with a single public key' do
+      it 'should be valid' do
+        subject.verify_with(key: fixture('rsa.pub')).should == true
+      end
+    end
+
+    describe 'verifying the document with a set of keys' do
+      it 'should be valid' do
+        subject.verify_with({
+          'test' => fixture('rsa.pub')
+        }).should == true
+      end
+    end
+  end
+
+  describe 'signing a document with an RSA key and X509 certificate' do
+    before do
+      subject.sign! key: fixture('cert/server.key.decrypted'),
+                    name: 'test',
+                    x509: fixture('cert/server.crt')
+    end
+
+    it 'should produce a signed document' do
+      subject.to_s.should == fixture('sign3-result.xml')
+    end
+
+    describe 'verifying the document with an array of X509 certificates' do
+      specify { subject.verify_with(x509: [fixture('cert/server.crt')]).should == true }
+      specify { subject.verify_with(certs: [fixture('cert/server.crt')]).should == true }
+      specify { subject.verify_with(certificates: [fixture('cert/server.crt')]).should == true }
+
+      it 'should verify using system certificates' do
+        # subject.verify_signature.should == true -- sort of.
+        unless subject.verify_signature
+          raise <<-end_error
+            Could not use system certificates to verify the signature.
+            Note that this may not be a failing spec. You should copy
+            or symlink the file `spec/fixtures/cert/server.crt` into
+            the directory shown by running `openssl version -d`. After
+            doing so, run `sudo c_rehash CERT_PATH`, where
+            CERT_PATH is the same directory you copied the certificate
+            into (/usr/lib/ssl/certs by default on Ubuntu). After doing
+            that, run this spec again and see if it passes.
+          end_error
+        end
+      end
+    end
+
+    describe 'verifying the document with one X509 certificate' do
+      specify { subject.verify_with(x509: fixture('cert/server.crt')).should == true }
+      specify { subject.verify_with(cert: fixture('cert/server.crt')).should == true }
+      specify { subject.verify_with(certificate: fixture('cert/server.crt')).should == true }
+    end
+  end
+
+end

data/spec/spec_helper.rb

@@ -0,0 +1,10 @@
+require 'rspec'
+require 'xmlsec'
+
+def fixture_path(filename)
+  File.join(File.expand_path('../fixtures', __FILE__), filename)
+end
+
+def fixture(path)
+  File.read fixture_path(path)
+end

metadata

@@ -0,0 +1,197 @@
+--- !ruby/object:Gem::Specification
+name: nokogiri-xmlsec-ap
+version: !ruby/object:Gem::Version
+  version: 0.0.5
+platform: ruby
+authors:
+- Colin MacKenzie IV
+- Justin Feng
+autorequire:
+bindir: bin
+cert_chain: []
+date: 2021-08-05 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: nokogiri
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rake-compiler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: guard-rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: guard-rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: |-
+  Adds support to Ruby for encrypting, decrypting,
+      signing and validating the signatures of XML documents, according to the
+      [XML Encryption Syntax and Processing](http://www.w3.org/TR/xmlenc-core/)
+      standard, by wrapping around the [xmlsec](http://www.aleksey.com/xmlsec) C
+      library and adding relevant methods to `Nokogiri::XML::Document`.
+email:
+- justin.feng@afterpay.com
+executables: []
+extensions:
+- ext/nokogiri_ext_xmlsec/extconf.rb
+extra_rdoc_files: []
+files:
+- ".gitignore"
+- ".rspec"
+- Gemfile
+- Guardfile
+- LICENSE.txt
+- README.md
+- Rakefile
+- ext/nokogiri_ext_xmlsec/extconf.rb
+- ext/nokogiri_ext_xmlsec/init.c
+- ext/nokogiri_ext_xmlsec/nokogiri_decrypt_with_key.c
+- ext/nokogiri_ext_xmlsec/nokogiri_encrypt_with_key.c
+- ext/nokogiri_ext_xmlsec/nokogiri_helpers_set_attribute_id.c
+- ext/nokogiri_ext_xmlsec/nokogiri_init.c
+- ext/nokogiri_ext_xmlsec/nokogiri_sign_certificate.c
+- ext/nokogiri_ext_xmlsec/nokogiri_sign_rsa.c
+- ext/nokogiri_ext_xmlsec/nokogiri_verify_signature_certificates.c
+- ext/nokogiri_ext_xmlsec/nokogiri_verify_signature_named_keys.c
+- ext/nokogiri_ext_xmlsec/nokogiri_verify_signature_rsa.c
+- ext/nokogiri_ext_xmlsec/shutdown.c
+- ext/nokogiri_ext_xmlsec/xmlsecrb.h
+- lib/nokogiri-xmlsec.rb
+- lib/xmlsec.rb
+- lib/xmlsec/version.rb
+- nokogiri-xmlsec.gemspec
+- spec/fixtures/cert/server.crt
+- spec/fixtures/cert/server.csr
+- spec/fixtures/cert/server.key.decrypted
+- spec/fixtures/cert/server.key.encrypted
+- spec/fixtures/rsa.pem
+- spec/fixtures/rsa.pub
+- spec/fixtures/sign2-doc.xml
+- spec/fixtures/sign2-result.xml
+- spec/fixtures/sign3-result.xml
+- spec/lib/nokogiri/xml/document/encryption_and_decryption_spec.rb
+- spec/lib/nokogiri/xml/document/signing_and_verifying_spec.rb
+- spec/spec_helper.rb
+homepage: https://github.com/justinfeng-ap/xmlsec
+licenses:
+- MIT
+metadata: {}
+post_install_message:
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.2.3
+signing_key:
+specification_version: 4
+summary: Wrapper around http://www.aleksey.com/xmlsec to support XML encryption, decryption,
+  signing and signature validation in Ruby
+test_files:
+- spec/fixtures/cert/server.crt
+- spec/fixtures/cert/server.csr
+- spec/fixtures/cert/server.key.decrypted
+- spec/fixtures/cert/server.key.encrypted
+- spec/fixtures/rsa.pem
+- spec/fixtures/rsa.pub
+- spec/fixtures/sign2-doc.xml
+- spec/fixtures/sign2-result.xml
+- spec/fixtures/sign3-result.xml
+- spec/lib/nokogiri/xml/document/encryption_and_decryption_spec.rb
+- spec/lib/nokogiri/xml/document/signing_and_verifying_spec.rb
+- spec/spec_helper.rb