pem 0.0.1 → 0.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 7e40494d49183f73e7f0abc28403041ef5b77b18
-  data.tar.gz: 16090d76a589dc478e3089330bb43603a359b7bb
+  metadata.gz: 71fb127b623bfd0d13e75886377470357f7ee9e4
+  data.tar.gz: 6d647f38ba8ed62457e76705910c141cb48319af
 SHA512:
-  metadata.gz: 1fe30f256529ce7101055c46eb7f05b40fe3e186a414672556a84799fa9fc785a83b6e34c07981a8edd6fff2a6a63325170bf623adf03f05fb5fe4871ac727ef
-  data.tar.gz: 53d63066a1939db9240ee7f2808563d0559470e5ecb9795cd9686d634750178d453a0bb40c2c2b0616494bd4b3efbe2bff5ab1f229353b7167c86945913a103d
+  metadata.gz: b2f9937ec278727792b969e1fe17b3851090bd8b2ab1ab7a71d8c63e87112011fee238d034d4d07366f9784513e434884ff463cd97fd60f45963b1b97f231f34
+  data.tar.gz: b62966cc13a6f027a479852952f50f5b2c447584d9b5180a387eea02d8f2f7c5b12092a8a419d55aa9e78b62b215265766f287beb0ca5954d8f29d836ab1a06b

data/LICENSE

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2014 Felix Krause
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

data/README.md

@@ -0,0 +1,105 @@
+<p align="center">
+<a href="https://github.com/KrauseFx/deliver">Deliver</a> &bull; 
+<a href="https://github.com/KrauseFx/snapshot">Snapshot</a> &bull; 
+<a href="https://github.com/KrauseFx/frameit">FrameIt</a> &bull; 
+<b>PEM</b>
+</p>
+-------
+
+<p align="center">
+    <img src="assets/pem.png">
+</p>
+
+Pem
+============
+
+[![Twitter: @KauseFx](https://img.shields.io/badge/contact-@KrauseFx-blue.svg?style=flat)](https://twitter.com/KrauseFx)
+[![License](http://img.shields.io/badge/license-MIT-green.svg?style=flat)](https://github.com/KrauseFx/pem/blob/master/LICENSE)
+[![Gem](https://img.shields.io/gem/v/pem.svg?style=flat)](http://rubygems.org/gems/pem)
+
+
+Tired of manually creating and maintaining your push notification profiles? Tired of manually generating ```pem``` files for your server? 
+
+```PEM``` does all that for, just by running ```pem```!
+
+-------
+[Features](#features) &bull;
+[Installation](#installation) &bull;
+[Usage](#usage) &bull;
+[How does it work?](#how-does-it-work) &bull;
+[Tips](#tips) &bull;
+[Need help?](#need-help)
+
+-------
+
+# Features
+Well, it's actually just one: Generate the ```pem``` file for your server.
+
+
+Check out this gif:
+
+![assets/PEMRecording.gif](assets/PEMRecording.gif)
+
+# Installation
+    sudo gem install pem
+
+Make sure, you have the latest version of the Xcode command line tools installed:
+
+    xcode-select --install
+
+# Usage
+
+    pem
+Yes, that's the whole command!
+
+This does the following:
+
+- Verifies the production push certificate looks alright
+- Download the certificate
+- Generates a new ```.pem``` file in the current working directory, which you can upload to your server
+
+You can pass parameters like this:
+
+    pem -a at.felixkrause.app -u username
+
+## Environment Variables
+In case you prefer environment variables:
+
+- ```PEM_USERNAME```
+- ```PEM_APP_IDENTIFIER```
+- ```PEM_CERT_SIGNING_REQUEST``` which is used, in case a new profile needs to be created
+
+# How does it work?
+There are 2 actions involved:
+
+- Accessing the ```iOS Dev Center``` to download the latest ```aps_production.cer```. See: [developer_center.rb](https://github.com/KrauseFx/PEM/blob/master/lib/pem/developer_center.rb).
+- Generating all the necessary profiles and files to prepare the finished ```.pem``` file. See: [cert_manager.rb](https://github.com/KrauseFx/PEM/blob/master/lib/pem/cert_manager.rb).
+```PEM``` will create a temporary keychain called ```PEM.keychain``` and use that to generate the necessary profiles. That means ```PEM``` will not pollute your default keychain.
+
+
+## How is my password stored?
+```PEM``` uses the password manager from [```Deliver```](https://github.com/KrauseFx/deliver#can-i-trust-deliver). Take a look the [Deliver README](https://github.com/KrauseFx/deliver#can-i-trust-deliver) for more information.
+
+# Tips
+## Use the ```Provisioning Quicklook plugin```
+Download and install the [Provisioning Plugin](https://github.com/chockenberry/Provisioning).
+
+It will show you the ```pem``` files like this: 
+![assets/QuickLookScreenshot.png](assets/QuickLookScreenshot.png)
+
+
+# Need help?
+- If there is a technical problem with ```PEM```, submit an issue. Run ```pem --trace``` to get the stacktrace.
+- I'm available for contract work - drop me an email: pem@felixkrause.at
+
+# License
+This project is licensed under the terms of the MIT license. See the LICENSE file.
+
+# Contributing
+
+1. Create an issue to discuss about your idea
+2. Fork it (https://github.com/KrauseFx/pem/fork)
+3. Create your feature branch (`git checkout -b my-new-feature`)
+4. Commit your changes (`git commit -am 'Add some feature'`)
+5. Push to the branch (`git push origin my-new-feature`)
+6. Create a new Pull Request

data/bin/pem

@@ -0,0 +1,63 @@
+#!/usr/bin/env ruby
+
+$:.push File.expand_path("../../lib", __FILE__)
+
+require 'pem'
+require 'commander/import'
+require 'pem/update_checker'
+require 'deliver/password_manager'
+
+HighLine.track_eof = false
+
+
+# Commander
+program :version, PEM::VERSION
+program :description, 'CLI for \'PEM\' - Automate maintaining of push notification profiles.'
+program :help, 'Author', 'Felix Krause <krausefx@gmail.com>'
+program :help, 'Website', 'http://felixkrause.at'
+program :help, 'GitHub', 'https://github.com/krausefx/PEM'
+program :help_formatter, :compact
+
+global_option('--verbose') { $verbose = true }
+
+default_command :run
+
+
+command :renew do |c|
+  c.syntax = 'pem renew'
+  c.description = 'Renews the certificate (in case it expired) and returns the path to the generated pem file'
+
+  c.option '-a', '--identifier STRING', String, 'The bundle identifier of your app'
+  c.option '-u', '--username STRING', String, 'Your Apple ID username'
+
+  c.action do |args, options|
+    app = app_identifier(options)
+    username(options)
+
+    PEM::UpdateChecker.verify_latest_version
+
+    path = PEM::CertManager.new.run(app)
+
+    if path
+      output = "./production_#{app}.pem"
+      FileUtils.mv(path, output)
+      puts output
+    end
+  end
+end
+
+default_command :renew
+
+def username(options)
+  user = nil
+  user = options.username if options.username
+  user = ENV["PEM_USERNAME"] if ENV["PEM_USERNAME"]
+  
+  Deliver::PasswordManager.shared_manager(user) if user
+end
+
+def app_identifier(options)
+  return options.identifier if options.identifier
+  return ENV["PEM_APP_IDENTIFIER"] if ENV["PEM_APP_IDENTIFIER"]
+  return ask("App Identifier (Bundle ID, e.g. at.felixkrause.app): ")
+end

data/lib/pem.rb

@@ -0,0 +1,13 @@
+require 'json'
+require 'pem/version'
+require 'pem/helper'
+require 'pem/dependency_checker'
+require 'pem/developer_center'
+require 'pem/cert_manager'
+
+# Third Party code
+require 'colored'
+
+module PEM
+  TMP_FOLDER = "/tmp/PEM/"
+end

data/lib/pem/cert_manager.rb

@@ -0,0 +1,52 @@
+module PEM
+  class CertManager
+    # Download the cert, do all kinds of Keychain related things
+    def run(app_identifier)
+      # Keychain (security) documentation: https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man1/security.1.html
+      # Old project, which might be helpful: https://github.com/jprichardson/keychain_manager
+
+      Helper.log.info "Refreshing push notification profiles for app '#{app_identifier}'"
+
+      dev = PEM::DeveloperCenter.new
+
+      keychain = "PEM.keychain"
+
+      cert_file = dev.fetch_cer_file(app_identifier)
+      rsa_file = [TMP_FOLDER, 'myrsa'].join('/')
+
+      previous_keychain = command("security default-keychain")
+
+
+
+      command("security create-keychain -p '' #{keychain}") # create a new keychain for this type
+
+      command("security list-keychains -d user -s #{keychain}") # add it to the list of keychains
+
+      command("openssl genrsa -out '#{rsa_file}' 2048") # generate a new RSA file
+      command("security import '#{rsa_file}' -P '' -k #{keychain}") # import the RSA file into the Keychain
+      command("security import '#{cert_file}' -k #{keychain}") # import the profile from Apple into the Keychain
+
+      p12_file = [TMP_FOLDER, "push_prod.12"].join('/')
+
+      command("security export -k '#{keychain}' -t all -f pkcs12 -P '' -o #{p12_file}") # export code signing identity
+
+      pem_file = [TMP_FOLDER, "production_#{app_identifier}.pem"].join('')
+      command("openssl pkcs12 -passin pass: -nodes -in #{p12_file} -out #{pem_file}")
+
+      command("security delete-keychain #{keychain}")
+
+      command("security list-keychains -d user -s #{previous_keychain}") # switch back to default keychain
+
+      return pem_file
+    end
+
+    private
+      # Output the command, execute it, return its result
+      def command(com)
+        puts com.yellow
+        result = `#{com}`
+        puts result if (result || '').length > 0
+        result
+      end
+  end
+end

data/lib/pem/dependency_checker.rb

@@ -0,0 +1,32 @@
+module PEM
+  class DependencyChecker
+    def self.check_dependencies
+      self.check_phantom_js
+      self.check_xcode_select
+    end
+    
+    def self.check_phantom_js
+      if `which phantomjs`.length == 0
+        # Missing brew dependency
+        Helper.log.fatal '#############################################################'
+        Helper.log.fatal "# You have to install phantomjs to use PEM"
+        Helper.log.fatal "# phantomjs is used to control the iTunesConnect frontend"
+        Helper.log.fatal "# Install Homebrew using http://brew.sh/" if `which brew`.length == 0
+        Helper.log.fatal "# Run 'brew update && brew install phantomjs' and start PEM again"
+        Helper.log.fatal '#############################################################'
+        raise "Run 'brew update && brew install phantomjs' and start PEM again"
+      end
+    end
+
+    def self.check_xcode_select
+      unless `xcode-select -v`.include?"xcode-select version "
+        Helper.log.fatal '#############################################################'
+        Helper.log.fatal "# You have to install the Xcode commdand line tools to use PEM"
+        Helper.log.fatal "# Install the latest version of Xcode from the AppStore"
+        Helper.log.fatal "# Run xcode-select --install to install the developer tools"
+        Helper.log.fatal '#############################################################'
+        raise "Run 'xcode-select --install' and start PEM again"
+      end
+    end
+  end
+end

data/lib/pem/developer_center.rb

@@ -0,0 +1,312 @@
+require 'pry'
+require 'deliver/password_manager'
+require 'open-uri'
+
+require 'capybara'
+require 'capybara/poltergeist'
+
+module PEM
+  class DeveloperCenter
+    # This error occurs only if there is something wrong with the given login data
+    class DeveloperCenterLoginError < StandardError 
+    end
+
+    # This error can occur for many reaons. It is
+    # usually raised when a UI element could not be found
+    class DeveloperCenterGeneralError < StandardError
+    end
+
+    include Capybara::DSL
+
+    DEVELOPER_CENTER_URL = "https://developer.apple.com/devcenter/ios/index.action"
+    APP_IDS_URL = "https://developer.apple.com/account/ios/identifiers/bundle/bundleList.action"
+
+    # Strings
+    PRODUCTION_SSL_CERTIFICATE_TITLE = "Production SSL Certificate"
+
+    def initialize
+      FileUtils.mkdir_p TMP_FOLDER
+
+      DependencyChecker.check_dependencies
+      
+      Capybara.run_server = false
+      Capybara.default_driver = :poltergeist
+      Capybara.javascript_driver = :poltergeist
+      Capybara.current_driver = :poltergeist
+      Capybara.app_host = DEVELOPER_CENTER_URL
+
+      # Since Apple has some SSL errors, we have to configure the client properly:
+      # https://github.com/ariya/phantomjs/issues/11239
+      Capybara.register_driver :poltergeist do |a|
+        conf = ['--debug=no', '--ignore-ssl-errors=yes', '--ssl-protocol=TLSv1']
+        Capybara::Poltergeist::Driver.new(a, {
+          phantomjs_options: conf,
+          phantomjs_logger: File.open("#{TMP_FOLDER}/poltergeist_log.txt", "a"),
+          js_errors: false
+        })
+      end
+
+      self.login
+    end
+
+    # Loggs in a user with the given login data on the Dev Center Frontend.
+    # You don't need to pass a username and password. It will
+    # Automatically be fetched using the {Deliver::PasswordManager}.
+    # This method will also automatically be called when triggering other 
+    # actions like {#open_app_page}
+    # @param user (String) (optional) The username/email address
+    # @param password (String) (optional) The password
+    # @return (bool) true if everything worked fine
+    # @raise [DeveloperCenterGeneralError] General error while executing 
+    #  this action
+    # @raise [DeveloperCenterLoginError] Login data is wrong
+    def login(user = nil, password = nil)
+      begin
+        Helper.log.info "Login into iOS Developer Center"
+
+        user ||= Deliver::PasswordManager.shared_manager.username
+        password ||= Deliver::PasswordManager.shared_manager.password
+
+        result = visit DEVELOPER_CENTER_URL
+        raise "Could not open Developer Center" unless result['status'] == 'success'
+
+        wait_for_elements(".button.blue").first.click
+
+        (wait_for_elements('#accountpassword') rescue nil) # when the user is already logged in, this will raise an exception
+
+        if page.has_content?"My Apps"
+          # Already logged in
+          return true
+        end
+
+        fill_in "accountname", with: user
+        fill_in "accountpassword", with: password
+
+        begin
+          all(".button.large.blue.signin-button").first.click
+
+          wait_for_elements('#aprerelease')
+        rescue Exception => ex
+          Helper.log.debug ex
+          raise DeveloperCenterLoginError.new("Error logging in user #{user} with the given password. Make sure you entered them correctly.")
+        end
+
+        Helper.log.info "Login successful"
+
+        true
+      rescue Exception => ex
+        error_occured(ex)
+      end
+    end
+
+    def app_status(app_identifier)
+      # TODO
+    end
+
+    # This method will enable push for the given app
+    # and download the cer file in any case, no matter if it existed before or not
+    # @return the path to the push file
+    def fetch_cer_file(app_identifier)
+      begin
+        open_app_page(app_identifier)
+
+        click_on "Edit"
+        wait_for_elements(".item-details") # just to finish loading
+
+        push_value = first(:css, '#pushEnabled').value
+        if push_value == "on"
+          Helper.log.info "Push for app '#{app_identifier}' is enabled"
+        else
+          Helper.log.warn "Push for app '#{app_identifier}' is disabled. This has to change."
+          first(:css, '#pushEnabled').click
+        end
+
+        sleep 1
+
+        # Example code
+        # <div class="appCertificates">
+        #   <h3>Apple Push Notification service SSL Certificates</h3>
+        #   <p>To configure push notifications for this iOS App ID, a Client SSL Certificate that allows your notification server to connect to the Apple Push Notification Service is required. Each iOS App ID requires its own Client SSL Certificate. Manage and generate your certificates below.</p>
+        #   <div class="title" data-hires-status="replaced">Development SSL Certificate</div>
+        #   <div class="createCertificate">
+        #     <p>Create  certificate to use for this App ID.</p>
+        #       <a class="button small navLink development enabled" href="/account/ios/certificate/certificateRequest.action?appIdId=...&amp;types=..."><span>Create Certificate...</span></a>
+        #   </div>              
+        #   <div class="title" data-hires-status="replaced">Production SSL Certificate</div>
+        #   <div class="certificate">
+        #     <dl>
+        #       <dt>Name:</dt>
+        #       <dd>Apple Production iOS Push Services: net.sunapps.151</dd>
+        #       <dt>Type:</dt>
+        #       <dd>APNs Production iOS</dd>
+        #       <dt>Expires:</dt>
+        #       <dd>Nov 14, 2015</dd>
+        #     </dl>
+        #     <a class="button small revoke-button" href="https://developer.apple.com/services-account/QH65B2/account/ios/certificate/revokeCertificate.action?content-type=application/x-www-form-urlencoded&amp;accept=application/json&amp;requestId=....;userLocale=en_US&amp;teamId=...&amp;certificateId=...&amp;type=...."><span>Revoke</span></a>
+        #     <a class="button small download-button" href="/account/ios/certificate/certificateContentDownload.action?displayId=....&amp;type=..."><span>Download</span></a>                  
+        #   </div>
+        #   <div class="createCertificate">
+        #     <p>Create an additional certificate to use for this App ID.</p>
+        #       <a class="button small navLink distribution enabled" href="/account/ios/certificate/certificateRequest.action?appIdId=...&amp;types=..."><span>Create Certificate...</span></a>              
+        #   </div>
+        # </div>
+
+        def find_download_button
+          wait_for_elements(".formContent")
+
+          certificates_block = first('.appCertificates')
+          download_button = nil
+
+          production_section = false
+          certificates_block.all(:xpath, "./div").each do |div|
+            if production_section
+              # We're now in the second part, we only care about production certificates
+              if (download_button = div.first(".download-button"))
+                return download_button
+              end
+            end
+
+            production_section = true if div.text == PRODUCTION_SSL_CERTIFICATE_TITLE
+          end
+          nil
+        end
+
+
+        download_button = find_download_button
+
+        if not download_button
+          Helper.log.warn "Push for app '#{app_identifier}' is enabled, but there is no production certificate yet."
+          create_push_for_app(app_identifier)
+
+          download_button = find_download_button
+          raise "Could not find download button for Production SSL Certificate. Check out: '#{current_url}'" unless download_button
+        end
+
+
+        Helper.log.info "Going to download the latest profile"
+
+        # It is enabled, now just download it
+        # Taken from http://stackoverflow.com/a/17111206/445598
+        sleep 2
+
+        host = Capybara.current_session.current_host
+        url = download_button['href']
+        url = [host, url].join('')
+        
+        myacinfo = page.driver.cookies['myacinfo'].value # some magic Apple, which is required for the profile download
+        data = open(url, {'Cookie' => "myacinfo=#{myacinfo}"}).read
+
+        raise "Something went wrong when downloading the certificate" unless data
+
+        path = "#{TMP_FOLDER}/aps_production_#{app_identifier}.cer"
+        File.write(path, data)
+
+        Helper.log.info "Successfully downloaded latest .cer file."
+        return path
+
+      rescue Exception => ex
+        error_occured(ex)
+      end
+    end
+
+
+    private
+      def open_app_page(app_identifier)
+        begin
+          visit APP_IDS_URL
+
+          apps = all(:xpath, "//td[@title='#{app_identifier}']")
+          if apps.count == 1
+            apps.first.click
+            sleep 1
+
+            return true
+          else
+            raise DeveloperCenterGeneralError.new("Could not find app with identifier '#{app_identifier}' on apps page.")
+          end
+        rescue Exception => ex
+          error_occured(ex)
+        end
+      end
+
+      def create_push_for_app(app_identifier)
+        wait_for_elements('.button.small.navLink.distribution.enabled').last.click # Create Certificate button
+
+        sleep 2
+
+        click_next # "Continue"
+
+        sleep 1
+        wait_for_elements(".button.small.center.back") # just to wait
+
+        # Upload CSR file
+        first(:xpath, "//input[@type='file']").set signing_request
+
+        click_next # "Generate"
+
+        while all(:css, '.loadingMessage').count > 0
+          Helper.log.debug "Waiting for iTC to generate the profile"
+          sleep 2
+        end
+
+        open_app_page(app_identifier)
+        click_on "Edit"
+      end
+
+      def signing_request
+        return ENV["PEM_CERT_SIGNING_REQUEST"] if (ENV["PEM_CERT_SIGNING_REQUEST"] and File.exists?(ENV["PEM_CERT_SIGNING_REQUEST"]))
+
+        files = Dir["./*.certSigningRequest"]
+        if files.count == 1
+          Helper.log.debug "Found a .certSigningRequest at the current folder. Using that."
+          return files.first
+        end
+
+        path = nil
+        while not path or not File.exists?path
+          puts "There was no profile found. To create a new one, we need a .certSigningRequest file".yellow
+          puts "To not be asked for a .certSigningRequest, PEM will automatically look for one in the current folder".yellow
+          path = ask("Path to your .certSigningRequest file (including extension): ")
+          puts "Could not find certSigningRequest file at path '#{path}'".red unless File.exists?path
+        end
+
+        return path
+      end
+
+
+    private
+      def click_next
+        wait_for_elements('.button.small.blue.right.submit').last.click
+      end
+
+      def error_occured(ex)
+        snap
+        raise ex # re-raise the error after saving the snapshot
+      end
+
+      def snap
+        path = "Error#{Time.now.to_i}.png"
+        save_screenshot(path, :full => true)
+        system("open '#{path}'")
+      end
+
+      def wait_for_elements(name)
+        counter = 0
+        results = all(name)
+        while results.count == 0      
+          # Helper.log.debug "Waiting for #{name}"
+          sleep 0.2
+
+          results = all(name)
+
+          counter += 1
+          if counter > 100
+            Helper.log.debug page.html
+            Helper.log.debug caller
+            raise DeveloperCenterGeneralError.new("Couldn't find element '#{name}' after waiting for quite some time")
+          end
+        end
+        return results
+      end
+  end
+end

data/lib/pem/helper.rb

@@ -0,0 +1,49 @@
+require 'logger'
+
+module PEM
+  module Helper
+
+    # Logging happens using this method
+    def self.log
+      if is_test?
+        @@log ||= Logger.new(STDOUT) #(nil) # don't show any logs when running tests
+      else
+        @@log ||= Logger.new(STDOUT)
+      end
+
+      @@log.formatter = proc do |severity, datetime, progname, msg|
+        string = "#{severity} [#{datetime.strftime('%Y-%m-%d %H:%M:%S.%2N')}]: "
+        second = "#{msg}\n"
+
+        if severity == "DEBUG"
+          string = string.magenta
+        elsif severity == "INFO"
+          string = string.white
+        elsif severity == "WARN"
+          string = string.yellow
+        elsif severity == "ERROR"
+          string = string.red
+        elsif severity == "FATAL"
+          string = string.red.bold
+        end
+
+
+        [string, second].join("")
+      end
+
+      @@log
+    end
+
+    # @return true if the currently running program is a unit test
+    def self.is_test?
+      defined?SpecHelper
+    end
+
+    # @return the full path to the Xcode developer tools of the currently
+    #  running system
+    def self.xcode_path
+      return "" if self.is_test? and not OS.mac?
+      `xcode-select -p`.gsub("\n", '') + "/"
+    end
+  end
+end

data/lib/pem/update_checker.rb

@@ -0,0 +1,44 @@
+require 'open-uri'
+
+module PEM
+  # Verifies, the user runs the latest version of this gem
+  class UpdateChecker
+    # This method will check if the latest version is installed and show a warning if that's not the case
+    def self.verify_latest_version
+      if self.update_available?
+        v = fetch_latest
+        puts '#######################################################################'.green
+        puts "# PEM #{v} is available.".green
+        puts "# It is recommended to use the latest version.".green
+        puts "# Update using '(sudo) gem update PEM'.".green
+        puts "# To see what's new, open https://github.com/KrauseFx/PEM/releases.".green
+        puts '#######################################################################'.green
+        return true
+      end
+      false
+    end
+
+    # Is a new official release available (this does not include pre-releases)
+    def self.update_available?
+      begin
+        latest = fetch_latest
+        if latest and Gem::Version.new(latest) > Gem::Version.new(current_version)
+          return true
+        end
+      rescue Exception => ex
+        Helper.log.error("Could not check if 'PEM' is up to date.")
+      end
+      return false
+    end
+
+    # The currently used version of this gem
+    def self.current_version
+      PEM::VERSION
+    end
+
+    private
+      def self.fetch_latest
+        JSON.parse(open("http://rubygems.org/api/v1/gems/pem.json").read)["version"]
+      end
+  end
+end

data/lib/pem/version.rb

@@ -0,0 +1,3 @@
+module PEM
+  VERSION = "0.1.0"
+end

metadata

@@ -1,274 +1,243 @@
 --- !ruby/object:Gem::Specification
 name: pem
 version: !ruby/object:Gem::Version
-  version: 0.0.1
+  version: 0.1.0
 platform: ruby
 authors:
 - Felix Krause
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-11-13 00:00:00.000000000 Z
+date: 2014-11-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: json
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - '>='
       - !ruby/object:Gem::Version
         version: '0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - '>='
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
   name: security
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ~>
       - !ruby/object:Gem::Version
         version: 0.1.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ~>
       - !ruby/object:Gem::Version
         version: 0.1.3
 - !ruby/object:Gem::Dependency
   name: highline
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ~>
       - !ruby/object:Gem::Version
         version: 1.6.21
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ~>
       - !ruby/object:Gem::Version
         version: 1.6.21
-- !ruby/object:Gem::Dependency
-  name: nokogiri
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 1.6.3.1
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 1.6.3.1
-- !ruby/object:Gem::Dependency
-  name: rubyzip
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 1.1.6
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 1.1.6
 - !ruby/object:Gem::Dependency
   name: colored
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - '>='
       - !ruby/object:Gem::Version
         version: '0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - '>='
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
   name: commander
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ~>
       - !ruby/object:Gem::Version
         version: 4.2.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ~>
       - !ruby/object:Gem::Version
         version: 4.2.0
-- !ruby/object:Gem::Dependency
-  name: prawn
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '0'
 - !ruby/object:Gem::Dependency
   name: deliver
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ~>
       - !ruby/object:Gem::Version
         version: '0.3'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ~>
       - !ruby/object:Gem::Version
         version: '0.3'
 - !ruby/object:Gem::Dependency
   name: capybara
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ~>
       - !ruby/object:Gem::Version
         version: 2.4.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ~>
       - !ruby/object:Gem::Version
         version: 2.4.3
 - !ruby/object:Gem::Dependency
   name: poltergeist
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ~>
       - !ruby/object:Gem::Version
         version: 1.5.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ~>
       - !ruby/object:Gem::Version
         version: 1.5.1
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - '>='
       - !ruby/object:Gem::Version
         version: '0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - '>='
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - '>='
       - !ruby/object:Gem::Version
         version: '0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - '>='
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ~>
       - !ruby/object:Gem::Version
         version: 3.1.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ~>
       - !ruby/object:Gem::Version
         version: 3.1.0
 - !ruby/object:Gem::Dependency
   name: pry
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - '>='
       - !ruby/object:Gem::Version
         version: '0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - '>='
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
   name: yard
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ~>
       - !ruby/object:Gem::Version
         version: 0.8.7.4
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ~>
       - !ruby/object:Gem::Version
         version: 0.8.7.4
 - !ruby/object:Gem::Dependency
   name: webmock
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ~>
       - !ruby/object:Gem::Version
         version: 1.19.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ~>
       - !ruby/object:Gem::Version
         version: 1.19.0
 - !ruby/object:Gem::Dependency
   name: codeclimate-test-reporter
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - '>='
       - !ruby/object:Gem::Version
         version: '0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - '>='
       - !ruby/object:Gem::Version
         version: '0'
 description: To be announced soon
 email:
 - krausefx@gmail.com
-executables: []
+executables:
+- pem
 extensions: []
 extra_rdoc_files: []
-files: []
+files:
+- LICENSE
+- README.md
+- bin/pem
+- lib/pem.rb
+- lib/pem/cert_manager.rb
+- lib/pem/dependency_checker.rb
+- lib/pem/developer_center.rb
+- lib/pem/helper.rb
+- lib/pem/update_checker.rb
+- lib/pem/version.rb
 homepage: http://felixkrause.at
 licenses:
 - MIT
@@ -280,12 +249,12 @@ require_paths:
 - lib
 required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">="
+  - - '>='
     - !ruby/object:Gem::Version
       version: 2.0.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">="
+  - - '>='
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []