rack-acme 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: b9df198961605f27428650808b9e8ebf7a41fb02
+  data.tar.gz: '03123841beb1d4c992445f256b9a0d3730dc269f'
+SHA512:
+  metadata.gz: 7eceb0a3822e15990141aef6db70308428d947f892323d568470bab4d5a490e6e3851d25a1a5c18d55878e6187d2041fd26bf77bf26467d0251becf944e77f19
+  data.tar.gz: 58bae57f3bc4ecfa359a4a059cdf05464f093d60fdffe681f1ad7880e10bdea55996d347bd81787d1b9f505321392408f9e7fca53b8ed4b6a521e4cdb18a6ebd

data/lib/rack/acme.rb

@@ -0,0 +1,108 @@
+# frozen_string_literal: true
+require "rack"
+require "acme-client"
+require "openssl"
+require "rack/acme/endpoint"
+require "rack/acme/file_cache"
+
+module Rack::Acme
+  class << self
+    attr_accessor :contact
+
+    def configure
+      yield self if block_given?
+    end
+
+    def cache
+      path = "./tokens"
+      @cache ||= FileCache.new(path)
+    end
+    attr_writer :cache
+
+    def issue(domain)
+      raise ArgumentError, "contact is nil" if contact.nil?
+
+      authorization = client.authorize(domain: domain)
+
+      case authorization.status
+      when "pending"
+        challenge = authorization.http01
+
+        token = challenge.token
+        challenge_content = challenge.file_content
+
+        cache[token] = challenge_content
+
+        challenge.request_verification
+
+        sleep 1
+
+        csr = ::Acme::Client::CertificateRequest.new(names: [domain])
+        certificate = client.new_certificate(csr)
+
+        certificate_handler.call(certificate) if certificate_handler.respond_to?(:call)
+        restart_handler.call if restart_handler.respond_to?(:call)
+
+        certificate
+
+      when "valid"
+        csr = Acme::Client::CertificateRequest.new(names: [domain])
+        certificate = client.new_certificate(csr)
+
+        certificate_handler.call(certificate) if certificate_handler.respond_to?(:call)
+        restart_handler.call if restart_handler.respond_to?(:call)
+
+        certificate
+      end
+    end
+
+    def certificate_handler
+      @certificate_handler || proc {}
+    end
+    attr_writer :certificate_handler
+
+    def restart_handler
+      @restart_handler || proc {}
+    end
+    attr_writer :restart_handler
+
+    def client
+      @client ||= build_client
+    end
+
+    def build_client
+      client = ::Acme::Client.new(
+        private_key: private_key,
+        endpoint: endpoint,
+        connection_options: connection_options
+      )
+
+      registration = client.register(contact: "mailto:#{contact}")
+      registration.agree_terms
+
+      client
+    end
+
+    def endpoint
+      @endpoint ||= default_endpoint
+    end
+    attr_writer :endpoint
+
+    def default_endpoint
+      "https://acme-staging.api.letsencrypt.org/"
+    end
+
+    def private_key
+      @private_key ||= build_private_key
+    end
+
+    def build_private_key
+      OpenSSL::PKey::RSA.new(4096)
+    end
+
+    def connection_options
+      @connection_options ||= { request: { open_timeout: 5, timeout: 5 } }
+    end
+    attr_writer :connection_options
+  end
+end

data/lib/rack/acme/endpoint.rb

@@ -0,0 +1,25 @@
+# frozen_string_literal: true
+module Rack::Acme
+  class Endpoint
+    def initialize(app)
+      @app = app
+    end
+
+    def call(env)
+      request = ::Rack::Request.new(env)
+
+      if (m = request.fullpath.match(%r{\A/.well-known/acme-challenge/(.+)\z}))
+        token = m[1]
+        content = ::Rack::Acme.cache[token]
+
+        if content
+          return [200, {}, [content]]
+        else
+          return [404, {}, ["No match for #{token}"]]
+        end
+      else
+        @app.call(env)
+      end
+    end
+  end
+end

data/lib/rack/acme/file_cache.rb

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+module Rack::Acme
+  class FileCache
+    attr_accessor :path
+
+    def initialize(path)
+      @path = path
+    end
+
+    def [](token)
+      dest = File.expand_path(token, path)
+
+      File.read(dest) if File.exists?(dest)
+    end
+
+    def []=(token, value)
+      dest = File.expand_path(token, path)
+
+      File.write(dest, value)
+    end
+  end
+end

data/lib/rack/acme/version.rb

@@ -0,0 +1,5 @@
+module Rack
+module Acme
+  VERSION = "0.1.0".freeze
+end
+end

metadata

@@ -0,0 +1,118 @@
+--- !ruby/object:Gem::Specification
+name: rack-acme
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Adam Daniels
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2017-10-11 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rack
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: acme-client
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: minitest
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '5.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '5.0'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+- !ruby/object:Gem::Dependency
+  name: rubygems-tasks
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.2'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.2'
+description: 
+email:
+- adam@mediadrive.ca
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/rack/acme.rb
+- lib/rack/acme/endpoint.rb
+- lib/rack/acme/file_cache.rb
+- lib/rack/acme/version.rb
+homepage: https://github.com/adam12/rack-acme
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.5.2
+signing_key: 
+specification_version: 4
+summary: ''
+test_files: []