openssl-stdlib 0.0.3

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 26f97a3e5cd688aa67259549886d5e3b96b08bc4a1d4e85f88dffe5fa289e614
+  data.tar.gz: a22fbc03f31e4da16dc310e9010a0bed989b5fe6ce7c04be178b60fc944d6c8b
+SHA512:
+  metadata.gz: e297b381cf1426f26584bb5d17149788781bb81af3141f50a398ef0570573a8a25bc3c2716103483f3fc67781c53ef9e37310f88c0c74307f8bcde48b36149b8
+  data.tar.gz: 2a95cb0f6fa29f625b220ce20aaf4d5632b695dee19a8799a1f4188efaf03e033bccd160819476732d428c8c1566fb6501e0c482b4c32804e2d2859312f676ab

data/lib/openssl-stdlib.rb

@@ -0,0 +1,145 @@
+require_relative('openssl-stdlib/error')
+require 'openssl'
+module Stdlib
+  class Certificate
+
+    def self.sign_csr(key, csr, serial = nil, version = 3, valid_duration = nil)
+      
+      csr_cert = OpenSSL::X509::Certificate.new
+
+      rand = Random.new
+      csr_cert.serial = serial ||= random.rand(1..100)
+      csr_cert.version = version
+      csr_cert.not_before = Time.now
+      csr_cert.not_after = Time.now + (valid_duration ||= 60 * 24 * 365 * 5)
+
+      csr_cert.subject = csr.subject
+      csr_cert.public_key = csr.public_key
+      csr_cert.issuer = ca_cert.subject
+
+      extension_factory = OpenSSL::X509::ExtensionFactory.new
+      extension_factory.subject_certificate = csr_cert
+      extension_factory.issuer_certificate = ca_cert
+
+      csr_cert.add_extension    extension_factory.create_extension('basicConstraints', 'CA:FALSE')
+
+      csr_cert.add_extension    extension_factory.create_extension(
+          'keyUsage', 'keyEncipherment,dataEncipherment,digitalSignature')
+
+      csr_cert.add_extension    extension_factory.create_extension('subjectKeyIdentifier', 'hash')
+
+      csr_cert.sign ca_key, OpenSSL::Digest::SHA1.new
+
+      open 'csr_cert.pem', 'w' do |io|
+        io.write csr_cert.to_pem
+      end
+    end
+
+    def self.create_csr(key, name)
+
+      raise Stdlib::Error.new('No suitable key was provided') if key.nil? or ! key.is_a?(OpenSSL::PKey::RSA)
+      raise Stdlib::Error.new('No suitable name was provided') if name.nil? or ! name.is_a?(String) or name.size < 1
+
+      csr = OpenSSL::X509::Request.new
+      csr.version = 0
+      csr.subject = name
+      csr.public_key = key.public_key
+      csr.sign key, OpenSSL::Digest::SHA1.new
+    end
+
+    def self.generate_key(file = nil, pass = nil, key_size = 2048)
+      return OpenSSL::PKey::RSA.new key_size if file == nil
+      return OpenSSL::PKey::RSA.new File.read(file), pass if File.readable?(file) and pass != nil
+    end
+  	
+    def self.generate_ca(key, cn, dc, version = 3, serial = nil, valid_duration = nil)
+
+      raise Stdlib::Error.new('No key was supplied to the certificate') if key.nil? or ! key.is_a?(OpenSSL::PKey::RSA)    
+      raise Stdlib::Error.new('No CN was supplied to the certificate') if cn.nil?
+      raise Stdlib::Error.new('No DC array was supplied to the certificate') if dc.nil?
+
+      dclist = String.new
+      dc.each do |d|
+        dclist = dclist + "/DC=#{d}"
+      end
+
+      name = OpenSSL::X509::Name.parse "CN=#{cn}#{dclist}"
+
+      random = Random.new
+      cert = OpenSSL::X509::Certificate.new
+      cert.version = version
+      cert.serial = serial ||= random.rand(1..100)
+      cert.not_before = Time.now
+      cert.not_after = Time.now + (valid_duration ||= 60 * 24 * 365 * 5)
+
+      cert.public_key = key.public_key
+      cert.subject = name
+      cert.issuer = name
+
+      extension_factory = OpenSSL::X509::ExtensionFactory.new
+      extension_factory.subject_certificate = cert
+      extension_factory.issuer_certificate = cert
+
+      cert.add_extension    extension_factory.create_extension('subjectKeyIdentifier', 'hash')
+
+      cert.add_extension    extension_factory.create_extension(
+      'keyUsage', 'cRLSign,keyCertSign', true)
+
+      cert.sign key, OpenSSL::Digest::SHA1.new
+      
+      cert
+    end
+
+    def self.generate_certificate(key, cn, dc, version = 3, serial = nil, valid_duration = nil)
+
+  		raise Stdlib::Error.new('No key was supplied to the certificate') if key.nil? or ! key.is_a?(OpenSSL::PKey::RSA) 		
+      raise Stdlib::Error.new('No CN was supplied to the certificate') if cn.nil?
+      raise Stdlib::Error.new('No DC array was supplied to the certificate') if dc.nil?
+
+  		dclist = String.new
+  		dc.each do |d|
+  			dclist = dclist + "/DC=#{d}"
+  		end
+
+  		name = OpenSSL::X509::Name.parse "CN=#{cn}#{dclist}"
+
+      random = Random.new
+  		cert = OpenSSL::X509::Certificate.new
+			cert.version = version
+			cert.serial = serial ||= random.rand(1..100)
+			cert.not_before = Time.now
+			cert.not_after = Time.now + (valid_duration ||= 60 * 24 * 365 * 5)
+
+			cert.public_key = key.public_key
+			cert.subject = name
+      cert
+  	end
+
+    def self.sign_certificate(key, cert, digest, cert_name)
+
+      raise Stdlib::Error.new('No key was supplied to sign the certificate') if key.nil? or ! key.is_a?(OpenSSL::PKey::RSA)
+      raise Stdlib::Error.new('No certificate was supplied to sign') if cert.nil? or ! cert.is_a?(OpenSSL::X509::Certificate)
+      raise Stdlib::Error.new('No digest was supplied to encrypt the certficate') if digest.nil? or ! digest.is_a?(OpenSSL::Digest)
+      raise Stdlib::Error.new('No name was supplied to encrypt the certficate') if cert_name.nil? or ! cert_name.is_a?(OpenSSL::X509::Name)
+
+      cert.issuer = cert_name
+      cert.sign key, digest
+
+      cert
+
+    end
+
+    def self.save_certificate(certificate, path)
+      open path, 'w' do |io| io.write certificate.to_pem end
+    end
+
+    def self.load_certificate(path)
+
+      file = File.absolute_path(path)
+
+      cert = OpenSSL::X509::Certificate.new File.read path
+      raise Stdlib::Error.new('file path does not lead to a certificate') if ! cert.is_a?(OpenSSL::X509::Certificate)
+      cert
+    end
+  end
+end

data/lib/openssl-stdlib/error.rb

@@ -0,0 +1,7 @@
+module Stdlib
+	class Error < StandardError
+		def initialize(msg)
+		  super
+		end
+	end
+end

metadata

@@ -0,0 +1,44 @@
+--- !ruby/object:Gem::Specification
+name: openssl-stdlib
+version: !ruby/object:Gem::Version
+  version: 0.0.3
+platform: ruby
+authors:
+- Eric Anderson
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2018-12-13 00:00:00.000000000 Z
+dependencies: []
+description: 
+email: 
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/openssl-stdlib.rb
+- lib/openssl-stdlib/error.rb
+homepage: 
+licenses: []
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.7.6
+signing_key: 
+specification_version: 4
+summary: stdlib for openssl certificaes
+test_files: []