r509 0.10.0 → 1.0

data/spec/cert/extensions/name_constraints_spec.rb

@@ -8,20 +8,20 @@ shared_examples_for "a correct R509 NameConstraints object" do |critical|
     klass = NameConstraints
     ef = OpenSSL::X509::ExtensionFactory.new
     ef.config = OpenSSL::Config.parse(@conf)
-    openssl_ext = ef.create_extension( extension_name, @extension_value, critical)
-    @r509_ext = klass.new( openssl_ext )
+    openssl_ext = ef.create_extension(extension_name, @extension_value, critical)
+    @r509_ext = klass.new(openssl_ext)
   end
 
   it "should have the permitted names" do
-    @permitted.each_with_index do |name,index|
-      @r509_ext.permitted.names[index].tag.should == name[:tag]
-      @r509_ext.permitted.names[index].value.should == name[:value]
+    @permitted.each_with_index do |name, index|
+      expect(@r509_ext.permitted.names[index].tag).to eq(name[:tag])
+      expect(@r509_ext.permitted.names[index].value).to eq(name[:value])
     end
   end
   it "should have the excluded names" do
-    @excluded.each_with_index do |name,index|
-      @r509_ext.excluded.names[index].tag.should == name[:tag]
-      @r509_ext.excluded.names[index].value.should == name[:value]
+    @excluded.each_with_index do |name, index|
+      expect(@r509_ext.excluded.names[index].tag).to eq(name[:tag])
+      expect(@r509_ext.excluded.names[index].value).to eq(name[:value])
     end
   end
 end
@@ -31,24 +31,24 @@ describe R509::Cert::Extensions::NameConstraints do
 
   context "validate name constraints"do
     it "raises an error when not a hash" do
-      expect { R509::Cert::Extensions::NameConstraints.new( 'a string' ) }.to raise_error(ArgumentError,'name_constraints must be provided as a hash')
+      expect { R509::Cert::Extensions::NameConstraints.new('a string') }.to raise_error(ArgumentError, 'name_constraints must be provided as a hash')
     end
 
     it "raises an error when permitted and excluded are empty" do
-      expect { R509::Cert::Extensions::NameConstraints.new( :permitted => [], :excluded => [] ) }.to raise_error(ArgumentError,'If name_constraints are supplied you must have at least one valid :permitted or :excluded element')
+      expect { R509::Cert::Extensions::NameConstraints.new(:permitted => [], :excluded => []) }.to raise_error(ArgumentError, 'If name_constraints are supplied you must have at least one valid :permitted or :excluded element')
     end
 
     it "raises an error when permitted or excluded are not arrays" do
-      expect { R509::Cert::Extensions::NameConstraints.new( :permitted => 'string', :excluded => 'string' ) }.to raise_error(ArgumentError,'permitted must be an array')
+      expect { R509::Cert::Extensions::NameConstraints.new(:permitted => 'string', :excluded => 'string') }.to raise_error(ArgumentError, 'permitted must be an array')
     end
 
     it "raises an error when permitted or excluded elements are not hashes with the required values" do
-      expect { R509::Cert::Extensions::NameConstraints.new( :permitted => [{"type" => 'DNS'}] ) }.to raise_error(ArgumentError,'Elements within the permitted array must be hashes with both type and value')
-      expect { R509::Cert::Extensions::NameConstraints.new( :permitted => [{'value' => '127'}] ) }.to raise_error(ArgumentError,'Elements within the permitted array must be hashes with both type and value')
+      expect { R509::Cert::Extensions::NameConstraints.new(:permitted => [{ "type" => 'DNS' }]) }.to raise_error(ArgumentError, 'Elements within the permitted array must be hashes with both type and value')
+      expect { R509::Cert::Extensions::NameConstraints.new(:permitted => [{ 'value' => '127' }]) }.to raise_error(ArgumentError, 'Elements within the permitted array must be hashes with both type and value')
     end
 
     it "raises an error when an invalid type is specified" do
-      expect { R509::Cert::Extensions::NameConstraints.new( :permitted => [{:type => 'invalid', :value => '127'}] ) }.to raise_error(ArgumentError,'invalid is not an allowed type. Check R509::ASN1::GeneralName.map_type_to_tag to see a list of types')
+      expect { R509::Cert::Extensions::NameConstraints.new(:permitted => [{ :type => 'invalid', :value => '127' }]) }.to raise_error(ArgumentError, 'invalid is not an allowed type. Check R509::ASN1::GeneralName.map_type_to_tag to see a list of types')
     end
   end
 
@@ -56,18 +56,18 @@ describe R509::Cert::Extensions::NameConstraints do
     context "creation & yaml generation" do
       context "one permitted" do
         before :all do
-          @args = { :permitted => [ { :type => 'DNS', :value => 'domain.com' }], :critical => true }
+          @args = { :permitted => [{ :type => 'DNS', :value => 'domain.com' }], :critical => true }
           @nc = R509::Cert::Extensions::NameConstraints.new(@args)
         end
 
         it "creates extension" do
-          @nc.permitted.names.size.should == 1
-          @nc.permitted.names[0].value.should == 'domain.com'
-          @nc.permitted.names[0].short_type.should == 'DNS'
+          expect(@nc.permitted.names.size).to eq(1)
+          expect(@nc.permitted.names[0].value).to eq('domain.com')
+          expect(@nc.permitted.names[0].short_type).to eq('DNS')
         end
 
         it "builds yaml" do
-          YAML.load(@nc.to_yaml).should == @args
+          expect(YAML.load(@nc.to_yaml)).to eq(@args)
         end
       end
 
@@ -78,41 +78,41 @@ describe R509::Cert::Extensions::NameConstraints do
             :permitted => [
               { :type => 'DNS', :value => 'domain.com' },
               { :type => 'IP', :value => '127.0.0.1/255.255.255.255' },
-              { :type => 'dirName', :value => {:CN => 'myCN', :O => 'myO', :C => "US" } }
+              { :type => 'dirName', :value => { :CN => 'myCN', :O => 'myO', :C => "US" } }
             ]
           }
           @nc = R509::Cert::Extensions::NameConstraints.new(@args)
         end
 
         it "creates extension" do
-          @nc.permitted.names.size.should == 3
-          @nc.permitted.names[0].value.should == 'domain.com'
-          @nc.permitted.names[0].short_type.should == 'DNS'
-          @nc.permitted.names[1].value.should == '127.0.0.1/255.255.255.255'
-          @nc.permitted.names[1].short_type.should == 'IP'
-          @nc.permitted.names[2].value.to_s.should == '/CN=myCN/O=myO/C=US'
-          @nc.permitted.names[2].short_type.should == 'dirName'
+          expect(@nc.permitted.names.size).to eq(3)
+          expect(@nc.permitted.names[0].value).to eq('domain.com')
+          expect(@nc.permitted.names[0].short_type).to eq('DNS')
+          expect(@nc.permitted.names[1].value).to eq('127.0.0.1/255.255.255.255')
+          expect(@nc.permitted.names[1].short_type).to eq('IP')
+          expect(@nc.permitted.names[2].value.to_s).to eq('/CN=myCN/O=myO/C=US')
+          expect(@nc.permitted.names[2].short_type).to eq('dirName')
         end
 
         it "builds yaml" do
-          YAML.load(@nc.to_yaml).should == @args
+          expect(YAML.load(@nc.to_yaml)).to eq(@args)
         end
       end
 
       context "creates with one excluded" do
         before :all do
-          @args = { :excluded => [ { :type => 'DNS', :value => 'domain.com' }], :critical => true }
+          @args = { :excluded => [{ :type => 'DNS', :value => 'domain.com' }], :critical => true }
           @nc = R509::Cert::Extensions::NameConstraints.new(@args)
         end
 
         it "creates extension" do
-          @nc.excluded.names.size.should == 1
-          @nc.excluded.names[0].value.should == 'domain.com'
-          @nc.excluded.names[0].short_type.should == 'DNS'
+          expect(@nc.excluded.names.size).to eq(1)
+          expect(@nc.excluded.names[0].value).to eq('domain.com')
+          expect(@nc.excluded.names[0].short_type).to eq('DNS')
         end
 
         it "builds yaml" do
-          YAML.load(@nc.to_yaml).should == @args
+          expect(YAML.load(@nc.to_yaml)).to eq(@args)
         end
       end
 
@@ -123,24 +123,24 @@ describe R509::Cert::Extensions::NameConstraints do
             :excluded => [
               { :type => 'DNS', :value => 'domain.com' },
               { :type => 'IP', :value => '127.0.0.1/255.255.255.255' },
-              { :type => 'dirName', :value => {:CN => 'myCN', :O => 'myO', :C => "US" } }
+              { :type => 'dirName', :value => { :CN => 'myCN', :O => 'myO', :C => "US" } }
             ]
           }
           @nc = R509::Cert::Extensions::NameConstraints.new(@args)
         end
 
         it "creates extension" do
-          @nc.excluded.names.size.should == 3
-          @nc.excluded.names[0].value.should == 'domain.com'
-          @nc.excluded.names[0].short_type.should == 'DNS'
-          @nc.excluded.names[1].value.should == '127.0.0.1/255.255.255.255'
-          @nc.excluded.names[1].short_type.should == 'IP'
-          @nc.excluded.names[2].value.to_s.should == '/CN=myCN/O=myO/C=US'
-          @nc.excluded.names[2].short_type.should == 'dirName'
+          expect(@nc.excluded.names.size).to eq(3)
+          expect(@nc.excluded.names[0].value).to eq('domain.com')
+          expect(@nc.excluded.names[0].short_type).to eq('DNS')
+          expect(@nc.excluded.names[1].value).to eq('127.0.0.1/255.255.255.255')
+          expect(@nc.excluded.names[1].short_type).to eq('IP')
+          expect(@nc.excluded.names[2].value.to_s).to eq('/CN=myCN/O=myO/C=US')
+          expect(@nc.excluded.names[2].short_type).to eq('dirName')
         end
 
         it "builds yaml" do
-          YAML.load(@nc.to_yaml).should == @args
+          expect(YAML.load(@nc.to_yaml)).to eq(@args)
         end
       end
 
@@ -151,66 +151,66 @@ describe R509::Cert::Extensions::NameConstraints do
             :excluded => [
               { :type => 'DNS', :value => 'domain.com' },
               { :type => 'IP', :value => '127.0.0.1/255.255.255.255' },
-              { :type => 'dirName', :value => {:CN => 'myCN', :O => 'myO', :C => "US" } }
+              { :type => 'dirName', :value => { :CN => 'myCN', :O => 'myO', :C => "US" } }
             ],
             :permitted => [
               { :type => 'DNS', :value => 'domain.com' },
               { :type => 'IP', :value => '127.0.0.1/255.255.255.255' },
-              { :type => 'dirName', :value => {:CN => 'myCN', :O => 'myO', :C => "US" } }
+              { :type => 'dirName', :value => { :CN => 'myCN', :O => 'myO', :C => "US" } }
             ]
           }
           @nc = R509::Cert::Extensions::NameConstraints.new(@args)
         end
 
         it "creates extension" do
-          @nc.permitted.names.size.should == 3
-          @nc.permitted.names[0].value.should == 'domain.com'
-          @nc.permitted.names[0].short_type.should == 'DNS'
-          @nc.permitted.names[1].value.should == '127.0.0.1/255.255.255.255'
-          @nc.permitted.names[1].short_type.should == 'IP'
-          @nc.permitted.names[2].value.to_s.should == '/CN=myCN/O=myO/C=US'
-          @nc.permitted.names[2].short_type.should == 'dirName'
-          @nc.excluded.names.size.should == 3
-          @nc.excluded.names[0].value.should == 'domain.com'
-          @nc.excluded.names[0].short_type.should == 'DNS'
-          @nc.excluded.names[1].value.should == '127.0.0.1/255.255.255.255'
-          @nc.excluded.names[1].short_type.should == 'IP'
-          @nc.excluded.names[2].value.to_s.should == '/CN=myCN/O=myO/C=US'
-          @nc.excluded.names[2].short_type.should == 'dirName'
+          expect(@nc.permitted.names.size).to eq(3)
+          expect(@nc.permitted.names[0].value).to eq('domain.com')
+          expect(@nc.permitted.names[0].short_type).to eq('DNS')
+          expect(@nc.permitted.names[1].value).to eq('127.0.0.1/255.255.255.255')
+          expect(@nc.permitted.names[1].short_type).to eq('IP')
+          expect(@nc.permitted.names[2].value.to_s).to eq('/CN=myCN/O=myO/C=US')
+          expect(@nc.permitted.names[2].short_type).to eq('dirName')
+          expect(@nc.excluded.names.size).to eq(3)
+          expect(@nc.excluded.names[0].value).to eq('domain.com')
+          expect(@nc.excluded.names[0].short_type).to eq('DNS')
+          expect(@nc.excluded.names[1].value).to eq('127.0.0.1/255.255.255.255')
+          expect(@nc.excluded.names[1].short_type).to eq('IP')
+          expect(@nc.excluded.names[2].value.to_s).to eq('/CN=myCN/O=myO/C=US')
+          expect(@nc.excluded.names[2].short_type).to eq('dirName')
         end
 
         it "builds yaml" do
-          YAML.load(@nc.to_yaml).should == @args
+          expect(YAML.load(@nc.to_yaml)).to eq(@args)
         end
       end
 
       context "creates with default criticality" do
         before :all do
-          @args = { :permitted => [ { :type => 'DNS', :value => 'domain.com' }] }
+          @args = { :permitted => [{ :type => 'DNS', :value => 'domain.com' }] }
           @nc = R509::Cert::Extensions::NameConstraints.new(@args)
         end
 
         it "creates extension" do
-          @nc.critical?.should == true
+          expect(@nc.critical?).to eq(true)
         end
 
         it "builds yaml" do
-          YAML.load(@nc.to_yaml).should == @args.merge(:critical => true)
+          expect(YAML.load(@nc.to_yaml)).to eq(@args.merge(:critical => true))
         end
       end
 
       context "creates with non-default criticality" do
         before :all do
-          @args = { :permitted => [ { :type => 'DNS', :value => 'domain.com' }], :critical => false }
+          @args = { :permitted => [{ :type => 'DNS', :value => 'domain.com' }], :critical => false }
           @nc = R509::Cert::Extensions::NameConstraints.new(@args)
         end
 
         it "creates extension" do
-          @nc.critical?.should == false
+          expect(@nc.critical?).to eq(false)
         end
 
         it "builds yaml" do
-          YAML.load(@nc.to_yaml).should == @args
+          expect(YAML.load(@nc.to_yaml)).to eq(@args)
         end
       end
 
@@ -219,17 +219,17 @@ describe R509::Cert::Extensions::NameConstraints do
     context "with one permitted name" do
       before :all do
         @excluded = []
-        @permitted = [{:tag => 2, :value => ".whatever.com"}]
+        @permitted = [{ :tag => 2, :value => ".whatever.com" }]
         gns = R509::ASN1::GeneralNames.new
         @permitted.each do |name|
           gns.add_item(name)
         end
         @conf = []
-        permitted = gns.names.map { |name|
+        permitted = gns.names.map do |name|
           serialized = name.serialize_name
           @conf << serialized[:conf]
           "permitted;" + serialized[:extension_string]
-        }.join(",")
+        end.join(",")
         @extension_value = permitted
         @conf = @conf.join("\n")
       end
@@ -240,17 +240,17 @@ describe R509::Cert::Extensions::NameConstraints do
     context "with multiple permitted names" do
       before :all do
         @excluded = []
-        @permitted = [{:tag => 2, :value => ".whatever.com"}, {:tag => 1, :value => "user@emaildomain.com" } ]
+        @permitted = [{ :tag => 2, :value => ".whatever.com" }, { :tag => 1, :value => "user@emaildomain.com" }]
         gns = R509::ASN1::GeneralNames.new
         @permitted.each do |name|
           gns.add_item(name)
         end
         @conf = []
-        permitted = gns.names.map { |name|
+        permitted = gns.names.map do |name|
           serialized = name.serialize_name
           @conf << serialized[:conf]
           "permitted;" + serialized[:extension_string]
-        }.join(",")
+        end.join(",")
         @extension_value = permitted
         @conf = @conf.join("\n")
       end
@@ -261,17 +261,17 @@ describe R509::Cert::Extensions::NameConstraints do
     context "with one excluded name" do
       before :all do
         @permitted = []
-        @excluded = [{:tag => 7, :value => "127.0.0.1/255.255.255.255"}]
+        @excluded = [{ :tag => 7, :value => "127.0.0.1/255.255.255.255" }]
         egns = R509::ASN1::GeneralNames.new
         @excluded.each do |name|
           egns.add_item(name)
         end
         @conf = []
-        excluded = egns.names.map { |name|
+        excluded = egns.names.map do |name|
           serialized = name.serialize_name
           @conf << serialized[:conf]
           "excluded;" + serialized[:extension_string]
-        }.join(",")
+        end.join(",")
         @extension_value = excluded
         @conf = @conf.join("\n")
       end
@@ -282,18 +282,18 @@ describe R509::Cert::Extensions::NameConstraints do
     context "with multiple excluded names" do
       before :all do
         @permitted = []
-        @excluded = [{:tag => 7, :value => "127.0.0.1/255.255.255.255"}, {:tag => 1, :value => "emaildomain.com" } ]
+        @excluded = [{ :tag => 7, :value => "127.0.0.1/255.255.255.255" }, { :tag => 1, :value => "emaildomain.com" }]
         @permitted = []
         egns = R509::ASN1::GeneralNames.new
         @excluded.each do |name|
           egns.add_item(name)
         end
         @conf = []
-        excluded = egns.names.map { |name|
+        excluded = egns.names.map do |name|
           serialized = name.serialize_name
           @conf << serialized[:conf]
           "excluded;" + serialized[:extension_string]
-        }.join(",")
+        end.join(",")
         @extension_value = excluded
         @conf = @conf.join("\n")
       end
@@ -303,27 +303,27 @@ describe R509::Cert::Extensions::NameConstraints do
     end
     context "with both permitted and excluded names" do
       before :all do
-        @excluded = [{:tag => 7, :value => "127.0.0.1/255.255.255.255"}, {:tag => 1, :value => "emaildomain.com" } ]
-        @permitted = [{:tag => 2, :value => ".whatever.com"}, {:tag => 1, :value => "user@emaildomain.com"} ]
+        @excluded = [{ :tag => 7, :value => "127.0.0.1/255.255.255.255" }, { :tag => 1, :value => "emaildomain.com" }]
+        @permitted = [{ :tag => 2, :value => ".whatever.com" }, { :tag => 1, :value => "user@emaildomain.com" }]
         gns = R509::ASN1::GeneralNames.new
         @permitted.each do |name|
           gns.add_item(name)
         end
         @conf = []
-        permitted = gns.names.map { |name|
+        permitted = gns.names.map do |name|
           serialized = name.serialize_name
           @conf << serialized[:conf]
           "permitted;" + serialized[:extension_string]
-        }.join(",")
+        end.join(",")
         egns = R509::ASN1::GeneralNames.new
         @excluded.each do |name|
           egns.add_item(name)
         end
-        excluded = egns.names.map { |name|
+        excluded = egns.names.map do |name|
           serialized = name.serialize_name
           @conf << serialized[:conf]
           "excluded;" + serialized[:extension_string]
-        }.join(",")
+        end.join(",")
         @extension_value = permitted + "," + excluded
         @conf = @conf.join("\n")
       end

data/spec/cert/extensions/ocsp_no_check_spec.rb

@@ -7,16 +7,16 @@ shared_examples_for "a correct R509 OCSPNoCheck object" do |critical|
     extension_name = "noCheck"
     klass = OCSPNoCheck
     ef = OpenSSL::X509::ExtensionFactory.new
-    openssl_ext = ef.create_extension( extension_name, "irrelevant", critical)
-    @r509_ext = klass.new( openssl_ext )
+    openssl_ext = ef.create_extension(extension_name, "irrelevant", critical)
+    @r509_ext = klass.new(openssl_ext)
   end
 
   it "has the expected type" do
-    @r509_ext.oid.should == "noCheck"
+    expect(@r509_ext.oid).to eq("noCheck")
   end
 
   it "reports #critical? properly" do
-    @r509_ext.critical?.should == critical
+    expect(@r509_ext.critical?).to eq(critical)
   end
 end
 
@@ -31,11 +31,11 @@ describe R509::Cert::Extensions::OCSPNoCheck do
         end
 
         it "creates extension" do
-          @no_check.should_not be_nil
+          expect(@no_check).not_to be_nil
         end
 
         it "builds yaml" do
-          YAML.load(@no_check.to_yaml).should == {:critical=>false}
+          expect(YAML.load(@no_check.to_yaml)).to eq(:critical => false)
         end
       end
 
@@ -45,11 +45,11 @@ describe R509::Cert::Extensions::OCSPNoCheck do
         end
 
         it "creates extension" do
-          @no_check.critical?.should be_false
+          expect(@no_check.critical?).to be false
         end
 
         it "builds yaml" do
-          YAML.load(@no_check.to_yaml).should == {:critical => false}
+          expect(YAML.load(@no_check.to_yaml)).to eq(:critical => false)
         end
       end
 
@@ -59,11 +59,11 @@ describe R509::Cert::Extensions::OCSPNoCheck do
         end
 
         it "creates extension" do
-          @no_check.critical?.should be_true
+          expect(@no_check.critical?).to be true
         end
 
         it "builds yaml" do
-          YAML.load(@no_check.to_yaml).should == {:critical => true}
+          expect(YAML.load(@no_check.to_yaml)).to eq(:critical => true)
         end
       end
 

data/spec/cert/extensions/policy_constraints_spec.rb

@@ -7,15 +7,15 @@ shared_examples_for "a correct R509 PolicyConstraints object" do |critical|
     extension_name = "policyConstraints"
     klass = PolicyConstraints
     ef = OpenSSL::X509::ExtensionFactory.new
-    openssl_ext = ef.create_extension( extension_name, @extension_value, critical)
-    @r509_ext = klass.new( openssl_ext )
+    openssl_ext = ef.create_extension(extension_name, @extension_value, critical)
+    @r509_ext = klass.new(openssl_ext)
   end
 
   it "should have the expected require policy" do
-    @r509_ext.require_explicit_policy.should == @require_explicit_policy
+    expect(@r509_ext.require_explicit_policy).to eq(@require_explicit_policy)
   end
   it "should have the expected inhibit mapping" do
-    @r509_ext.inhibit_policy_mapping.should == @inhibit_policy_mapping
+    expect(@r509_ext.inhibit_policy_mapping).to eq(@inhibit_policy_mapping)
   end
 end
 
@@ -24,19 +24,19 @@ describe R509::Cert::Extensions::PolicyConstraints do
 
   context "validate policy constraints" do
     it "raises an error when not a hash" do
-      expect { R509::Cert::Extensions::PolicyConstraints.new( "string" ) }.to raise_error(ArgumentError,'Policy constraints must be provided as a hash with at least one of the two allowed keys: :inhibit_policy_mapping and :require_explicit_policy')
+      expect { R509::Cert::Extensions::PolicyConstraints.new("string") }.to raise_error(ArgumentError, 'Policy constraints must be provided as a hash with at least one of the two allowed keys: :inhibit_policy_mapping and :require_explicit_policy')
     end
 
     it "raises an error when no keys" do
-      expect { R509::Cert::Extensions::PolicyConstraints.new( {} ) }.to raise_error(ArgumentError,'Policy constraints must have at least one of two keys: :inhibit_policy_mapping and :require_explicit_policy and the value must be non-negative')
+      expect { R509::Cert::Extensions::PolicyConstraints.new({}) }.to raise_error(ArgumentError, 'Policy constraints must have at least one of two keys: :inhibit_policy_mapping and :require_explicit_policy and the value must be non-negative')
     end
 
     it "raises an error when inhibit_policy_mapping is not valid" do
-      expect { R509::Cert::Extensions::PolicyConstraints.new( :inhibit_policy_mapping => -5 ) }.to raise_error(ArgumentError,'inhibit_policy_mapping must be a non-negative integer')
+      expect { R509::Cert::Extensions::PolicyConstraints.new(:inhibit_policy_mapping => -5) }.to raise_error(ArgumentError, 'inhibit_policy_mapping must be a non-negative integer')
     end
 
     it "raises an error when require_explicit_policy is not valid" do
-      expect { R509::Cert::Extensions::PolicyConstraints.new( :require_explicit_policy => -1 ) }.to raise_error(ArgumentError,'require_explicit_policy must be a non-negative integer')
+      expect { R509::Cert::Extensions::PolicyConstraints.new(:require_explicit_policy => -1) }.to raise_error(ArgumentError, 'require_explicit_policy must be a non-negative integer')
     end
   end
 
@@ -49,11 +49,11 @@ describe R509::Cert::Extensions::PolicyConstraints do
         end
 
         it "creates extension" do
-          @pc.require_explicit_policy.should == 1
+          expect(@pc.require_explicit_policy).to eq(1)
         end
 
         it "builds yaml" do
-          YAML.load(@pc.to_yaml).should == @args
+          expect(YAML.load(@pc.to_yaml)).to eq(@args)
         end
       end
 
@@ -64,11 +64,11 @@ describe R509::Cert::Extensions::PolicyConstraints do
         end
 
         it "creates extension" do
-          @pc.inhibit_policy_mapping.should == 1
+          expect(@pc.inhibit_policy_mapping).to eq(1)
         end
 
         it "builds yaml" do
-          YAML.load(@pc.to_yaml).should == @args
+          expect(YAML.load(@pc.to_yaml)).to eq(@args)
         end
       end
 
@@ -83,12 +83,12 @@ describe R509::Cert::Extensions::PolicyConstraints do
         end
 
         it "creates extension" do
-          @pc.inhibit_policy_mapping.should == 1
-          @pc.require_explicit_policy.should == 3
+          expect(@pc.inhibit_policy_mapping).to eq(1)
+          expect(@pc.require_explicit_policy).to eq(3)
         end
 
         it "builds yaml" do
-          YAML.load(@pc.to_yaml).should == @args
+          expect(YAML.load(@pc.to_yaml)).to eq(@args)
         end
       end
 
@@ -99,11 +99,11 @@ describe R509::Cert::Extensions::PolicyConstraints do
         end
 
         it "creates extension" do
-          @pc.critical?.should == true
+          expect(@pc.critical?).to eq(true)
         end
 
         it "builds yaml" do
-          YAML.load(@pc.to_yaml).should == @args.merge(:critical => true)
+          expect(YAML.load(@pc.to_yaml)).to eq(@args.merge(:critical => true))
         end
       end
 
@@ -114,11 +114,11 @@ describe R509::Cert::Extensions::PolicyConstraints do
         end
 
         it "creates extension" do
-          @pc.critical?.should == false
+          expect(@pc.critical?).to eq(false)
         end
 
         it "builds yaml" do
-          YAML.load(@pc.to_yaml).should == @args
+          expect(YAML.load(@pc.to_yaml)).to eq(@args)
         end
       end