ronin-db-activerecord 0.1.6 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 641f203f12ca2e88ac5de9f8a8c5fe6fbf5da527b7108102d55f0e65934ea641
-  data.tar.gz: a55081d93e685f8232ae74e54bd99a5f242b40834d5ea55792ec08f3dc184782
+  metadata.gz: 046d7b55f13cea0416cc4644fa5fa530b7b986faa50bc14a3bce1497371f249a
+  data.tar.gz: 0b2658ea88b1d38ba4d8dfbaf3bb1cdf033fc182848a241134bd3df58e0e68dd
 SHA512:
-  metadata.gz: f090ebd86546fed4ba74bada319aaaf6c524360b4f48745042aa8d5b5118c50c3e5d3224143c6fa3901546b456dd853dd1fe97853e9c259b76f8ad284e8fec0b
-  data.tar.gz: 833ab9ec1142ba4363a42453c874bde62c2b049fb3662dfe3870c9d4eeed38948d0faff22dcdc85b9db71c8610dde8d0393e2ef51779f3df76ee4102c1957f39
+  metadata.gz: 00fb2566cb4864e10f9e4c542aef827e7a65250e6b2244431582dedce82e2bf1e3de29ac551f20c78d6a51c3f80ae05da1a69352edbb78992ba0cfaa316c954b
+  data.tar.gz: 2d68d500f1931d77c5e05af63af9ec984a925a43d2d199c508a595f785477dca8bb97dd1d72555e68269f08f5064e9ed5f89db79e1abb119f0dadd4d23710035

data/.ruby-version

@@ -1 +1 @@
-ruby-3.1
+ruby-3.3

data/ChangeLog.md

@@ -1,3 +1,94 @@
+### 0.2.0 / 2024-07-22
+
+* Added {Ronin::DB::Advisory#host_names}.
+* Added {Ronin::DB::Advisory#ip_addresses}.
+* Added {Ronin::DB::Advisory#mac_addresses}.
+* Added {Ronin::DB::Advisory#open_ports}.
+* Added {Ronin::DB::Advisory#urls}.
+* Added {Ronin::DB::Advisory#vulnerabilities}.
+* Added {Ronin::DB::ASN#to_s}.
+* Added {Ronin::DB::Cert}.
+* Added {Ronin::DB::DNSQuery}.
+* Added {Ronin::DB::DNSRecord}.
+* Added {Ronin::DB::EmailAddress.for_organization}.
+* Added {Ronin::DB::EmailAddress.for_person}.
+* Added {Ronin::DB::EmailAddress.with_password}.
+* Added {Ronin::DB::EmailAddress#passwords}.
+* Added {Ronin::DB::EmailAddress#service_credentials}.
+* Added {Ronin::DB::EmailAddress#web_credentials}.
+* Added {Ronin::DB::HostName#advisories}.
+* Added {Ronin::DB::HostName#vulnerabilities}.
+* Added {Ronin::DB::HTTPRequest#source_ip}.
+* Added {Ronin::DB::IPAddress#advisories}.
+* Added {Ronin::DB::IPAddress#vulnerabilities}.
+* Added {Ronin::DB::MACAddress#advisories}.
+* Added {Ronin::DB::MACAddress#vulnerabilities}.
+* Added {Ronin::DB::Model::HasName::ClassMethods#with_name}.
+* Added {Ronin::DB::Note}.
+* Added {Ronin::DB::OpenPort.with_ip_address}.
+* Added {Ronin::DB::OpenPort.with_port_number}.
+* Added {Ronin::DB::OpenPort.with_protocol}.
+* Added {Ronin::DB::OpenPort.with_service_name}.
+* Added {Ronin::DB::OpenPort#advisories}.
+* Added {Ronin::DB::OpenPort#vulnerabilities}.
+* Added {Ronin::DB::Organization.import}.
+* Added {Ronin::DB::Organization.lookup}.
+* Added {Ronin::DB::Organization#type}.
+* Added {Ronin::DB::Organization#parent}.
+* Added {Ronin::DB::OrganizationCustomer}.
+* Added {Ronin::DB::OrganizationDepartment}.
+* Added {Ronin::DB::OrganizationEmailAddress}.
+* Added {Ronin::DB::OrganizationHostName}.
+* Added {Ronin::DB::OrganizationIPAddress}.
+* Added {Ronin::DB::OrganizationMember}.
+* Added {Ronin::DB::OrganizationPhoneNumber}.
+* Added {Ronin::DB::OrganizationStreetAddress}.
+* Added {Ronin::DB::OS.with_flavor}.
+* Added {Ronin::DB::OS.with_version}.
+* Added {Ronin::DB::Password.for_user}.
+* Added {Ronin::DB::Password.with_email_address}.
+* Added {Ronin::DB::Password#email_addresses}.
+* Added {Ronin::DB::Password#service_credentials}.
+* Added {Ronin::DB::Password#web_credentials}.
+* Added {Ronin::DB::Person}.
+* Added {Ronin::DB::PersonalConnection}.
+* Added {Ronin::DB::PersonalEmailAddress}.
+* Added {Ronin::DB::PersonalPhoneNumber}.
+* Added {Ronin::DB::PersonalStreetAddress}.
+* Added {Ronin::DB::PhoneNumber}.
+* Added {Ronin::DB::Port.with_ip_address}.
+* Added {Ronin::DB::Port.with_number}.
+* Added {Ronin::DB::Port.with_protocol}.
+* Added {Ronin::DB::Port.with_service_name}.
+* Added {Ronin::DB::Port#ip_addresses}.
+* Added {Ronin::DB::Port#services}.
+* Added {Ronin::DB::Service.import}.
+* Added {Ronin::DB::Service.lookup}.
+* Added {Ronin::DB::Service.with_ip_address}.
+* Added {Ronin::DB::Service.with_port_number}.
+* Added {Ronin::DB::Service.with_protocol}.
+* Added {Ronin::DB::Service#ip_addresses}.
+* Added {Ronin::DB::Service#ports}.
+* Added {Ronin::DB::Software.with_vendor_name}.
+* Added {Ronin::DB::Software.with_version}.
+* Added {Ronin::DB::StreetAddress}.
+* Added {Ronin::DB::URL#advisories}.
+* Added {Ronin::DB::URL#vulnerabilities}.
+* Added {Ronin::DB::URLQueryParamName.urls}.
+* Added {Ronin::DB::UserName#passwords}.
+* Added {Ronin::DB::UserName#service_credentials}.
+* Added {Ronin::DB::UserName#web_credentials}.
+* Added {Ronin::DB::UserName.with_password}.
+* Added {Ronin::DB::WebVuln}.
+* Include {Ronin::DB::Model::Importable} into {Ronin::DB::Service}.
+* Include {Ronin::DB::Model::Importable} into {Ronin::DB::Organization}.
+* Include {Ronin::DB::Model::HasName} into {Ronin::DB::Software} for the
+  the {Ronin::DB::Model::HasName::ClassMethods#named .named} method.
+* Added missing `created_at` column and attribute to {Ronin::DB::Port}.
+* Added missing `created_at` column and attribute to {Ronin::DB::Service}.
+* Changed {Ronin::DB::OpenPort#to_s} to include
+  {Ronin::DB::OpenPort#ip_address}.
+
 ### 0.1.6 / 2024-06-19
 
 * Improve the validation of email addresses passed to

data/README.md

@@ -14,7 +14,8 @@
 ## Description
 
 ronin-db-activerecord contains [ActiveRecord] models and migrations for the
-[Ronin Database][ronin-db].
+[Ronin Database][ronin-db]. Provides database models storing and querying
+network data, advisory data, credentials, and OSINT data.
 
 ## Features
 
@@ -23,6 +24,13 @@ ronin-db-activerecord contains [ActiveRecord] models and migrations for the
   * [Ronin::DB::Advisory]
   * [Ronin::DB::Arch]
   * [Ronin::DB::ASN]
+  * [Ronin::DB::Cert]
+  * [Ronin::DB::CertIssuer]
+  * [Ronin::DB::CertName]
+  * [Ronin::DB::CertSubject]
+  * [Ronin::DB::CertSubjectAltName]
+  * [Ronin::DB::DNSQuery]
+  * [Ronin::DB::DNSRecord]
   * [Ronin::DB::EmailAddress]
   * [Ronin::DB::HostName]
   * [Ronin::DB::HostNameIPAddress]
@@ -36,22 +44,39 @@ ronin-db-activerecord contains [ActiveRecord] models and migrations for the
   * [Ronin::DB::IPAddress]
   * [Ronin::DB::IPAddressMACAddress]
   * [Ronin::DB::MACAddress]
+  * [Ronin::DB::Note]
   * [Ronin::DB::OpenPort]
   * [Ronin::DB::Organization]
+  * [Ronin::DB::OrganizationCustomer]
+  * [Ronin::DB::OrganizationDepartment]
+  * [Ronin::DB::OrganizationEmailAddress]
+  * [Ronin::DB::OrganizationHostName]
+  * [Ronin::DB::OrganizationIPAddress]
+  * [Ronin::DB::OrganizationMember]
+  * [Ronin::DB::OrganizationPhoneNumber]
+  * [Ronin::DB::OrganizationStreetAddress]
   * [Ronin::DB::OS]
   * [Ronin::DB::OSGuess]
   * [Ronin::DB::Password]
+  * [Ronin::DB::Person]
+  * [Ronin::DB::PersonalConnection]
+  * [Ronin::DB::PersonalEmailAddress]
+  * [Ronin::DB::PersonalPhoneNumber]
+  * [Ronin::DB::PersonalStreetAddress]
+  * [Ronin::DB::PhoneNumber]
   * [Ronin::DB::Port]
   * [Ronin::DB::Service]
   * [Ronin::DB::ServiceCredential]
   * [Ronin::DB::Software]
   * [Ronin::DB::SoftwareVendor]
+  * [Ronin::DB::StreetAddress]
   * [Ronin::DB::URL]
   * [Ronin::DB::URLQueryParam]
   * [Ronin::DB::URLQueryParamName]
   * [Ronin::DB::URLScheme]
   * [Ronin::DB::UserName]
   * [Ronin::DB::Vulnerability]
+  * [Ronin::DB::WebVuln]
   * [Ronin::DB::WebCredential]
 * Has 98% documentation coverage.
 * Has 99% test coverage.
@@ -59,6 +84,13 @@ ronin-db-activerecord contains [ActiveRecord] models and migrations for the
 [Ronin::DB::Advisory]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/Advisory.html
 [Ronin::DB::Arch]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/Arch.html
 [Ronin::DB::ASN]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/ASN.html
+[Ronin::DB::Cert]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/Cert.html
+[Ronin::DB::CertIssuer]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/CertIssuer.html
+[Ronin::DB::CertName]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/CertName.html
+[Ronin::DB::CertSubject]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/CertSubject.html
+[Ronin::DB::CertSubjectAltName]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/CertSubjectAltName.html
+[Ronin::DB::DNSQuery]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/DNSQuery.html
+[Ronin::DB::DNSRecord]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/DNSRecord.html
 [Ronin::DB::EmailAddress]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/EmailAddress.html
 [Ronin::DB::HostName]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/HostName.html
 [Ronin::DB::HostNameIPAddress]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/HostNameIPAddress.html
@@ -72,22 +104,39 @@ ronin-db-activerecord contains [ActiveRecord] models and migrations for the
 [Ronin::DB::IPAddress]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/IPAddress.html
 [Ronin::DB::IPAddressMACAddress]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/IPAddressMACAddress.html
 [Ronin::DB::MACAddress]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/MACAddress.html
+[Ronin::DB::Note]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/Note.html
 [Ronin::DB::OpenPort]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/OpenPort.html
 [Ronin::DB::Organization]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/Organization.html
+[Ronin::DB::OrganizationCustomer]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/OrganizationCustomer.html
+[Ronin::DB::OrganizationDepartment]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/OrganizationDepartment.html
+[Ronin::DB::OrganizationEmailAddress]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/OrganizationEmailAddress.html
+[Ronin::DB::OrganizationHostName]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/OrganizationHostName.html
+[Ronin::DB::OrganizationIPAddress]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/OrganizationIPAddress.html
+[Ronin::DB::OrganizationMember]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/OrganizationMember.html
+[Ronin::DB::OrganizationPhoneNumber]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/OrganizationPhoneNumber.html
+[Ronin::DB::OrganizationStreetAddress]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/OrganizationStreetAddress.html
 [Ronin::DB::OS]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/OS.html
 [Ronin::DB::OSGuess]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/OSGuess.html
 [Ronin::DB::Password]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/Password.html
+[Ronin::DB::Person]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/Person.html
+[Ronin::DB::PersonalConnection]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/PersonalConnection.html
+[Ronin::DB::PersonalEmailAddress]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/PersonalEmailAddress.html
+[Ronin::DB::PersonalPhoneNumber]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/PersonalPhoneNumber.html
+[Ronin::DB::PersonalStreetAddress]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/PersonalStreetAddress.html
+[Ronin::DB::PhoneNumber]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/PhoneNumber.html
 [Ronin::DB::Port]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/Port.html
 [Ronin::DB::Service]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/Service.html
 [Ronin::DB::ServiceCredential]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/ServiceCredential.html
 [Ronin::DB::Software]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/Software.html
 [Ronin::DB::SoftwareVendor]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/SoftwareVendor.html
+[Ronin::DB::StreetAddress]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/StreetAddress.html
 [Ronin::DB::URL]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/URL.html
 [Ronin::DB::URLQueryParam]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/URLQueryParam.html
 [Ronin::DB::URLQueryParamName]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/URLQueryParamName.html
 [Ronin::DB::URLScheme]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/URLScheme.html
 [Ronin::DB::UserName]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/UserName.html
 [Ronin::DB::Vulnerability]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/Vulnerability.html
+[Ronin::DB::WebVuln]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/WebVuln.html
 [Ronin::DB::WebCredential]: https://ronin-rb.dev/docs/ronin-db-activerecord/Ronin/DB/WebCredential.html
 
 ## Examples
@@ -156,7 +205,7 @@ local database console.
 
 ## License
 
-Copyright (c) 2022-2023 Hal Brodigan (postmodern.mod3@gmail.com)
+Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3@gmail.com)
 
 ronin-db-activerecord is free software: you can redistribute it and/or modify
 it under the terms of the GNU Lesser General Public License as published

data/db/migrate/0037_add_created_at_column_to_ronin_ports_table.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+#
+# ronin-db-activerecord - ActiveRecord backend for the Ronin Database.
+#
+# Copyright (c) 2022-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This file is part of ronin-db-activerecord.
+#
+# ronin-db-activerecord is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Lesser General Public License as published
+# by the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# ronin-db-activerecord is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU Lesser General Public License for more details.
+#
+# You should have received a copy of the GNU Lesser General Public License
+# along with ronin-db-activerecord.  If not, see <https://www.gnu.org/licenses/>.
+#
+
+#
+# Adds the `created_at` column to the `ronin_ports` table.
+#
+class AddCreatedAtColumnToRoninPortsTable < ActiveRecord::Migration[7.0]
+
+  def up
+    add_column :ronin_ports, :created_at, :datetime
+
+    execute 'UPDATE ronin_ports SET created_at = (SELECT created_at FROM ronin_open_ports WHERE port_id = ronin_ports.id)'
+
+    change_column_null :ronin_ports, :created_at, false
+  end
+
+  def down
+    remove_column :ronin_ports, :created_at
+  end
+
+end

data/db/migrate/0038_add_created_at_column_to_ronin_services_table.rb

@@ -0,0 +1,40 @@
+# frozen_string_literal: true
+#
+# ronin-db-activerecord - ActiveRecord backend for the Ronin Database.
+#
+# Copyright (c) 2022-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This file is part of ronin-db-activerecord.
+#
+# ronin-db-activerecord is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Lesser General Public License as published
+# by the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# ronin-db-activerecord is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU Lesser General Public License for more details.
+#
+# You should have received a copy of the GNU Lesser General Public License
+# along with ronin-db-activerecord.  If not, see <https://www.gnu.org/licenses/>.
+#
+
+#
+# Adds the `created_at` column to the `ronin_services` table.
+#
+class AddCreatedAtColumnToRoninServicesTable < ActiveRecord::Migration[7.0]
+
+  def up
+    add_column :ronin_services, :created_at, :datetime
+
+    execute 'UPDATE ronin_services SET created_at = (SELECT created_at FROM ronin_open_ports WHERE service_id = ronin_services.id)'
+
+    change_column_null :ronin_services, :created_at, false
+  end
+
+  def down
+    remove_column :ronin_services, :created_at
+  end
+
+end

data/db/migrate/0039_create_ronin_cert_names_table.rb

@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+#
+# ronin-db-activerecord - ActiveRecord backend for the Ronin Database.
+#
+# Copyright (c) 2022-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This file is part of ronin-db-activerecord.
+#
+# ronin-db-activerecord is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Lesser General Public License as published
+# by the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# ronin-db-activerecord is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU Lesser General Public License for more details.
+#
+# You should have received a copy of the GNU Lesser General Public License
+# along with ronin-db-activerecord.  If not, see <https://www.gnu.org/licenses/>.
+#
+
+#
+# Creates the `ronin_cert_names` table.
+#
+class CreateRoninCertNamesTable < ActiveRecord::Migration[7.0]
+
+  def change
+    create_table :ronin_cert_names, if_not_exists: true do |t|
+      t.string :name, null: false
+      t.datetime :created_at, null: false
+
+      t.index :name, unique: true
+    end
+  end
+
+end

data/db/migrate/0040_create_ronin_cert_issuers_table.rb

@@ -0,0 +1,52 @@
+# frozen_string_literal: true
+#
+# ronin-db-activerecord - ActiveRecord backend for the Ronin Database.
+#
+# Copyright (c) 2022-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This file is part of ronin-db-activerecord.
+#
+# ronin-db-activerecord is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Lesser General Public License as published
+# by the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# ronin-db-activerecord is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU Lesser General Public License for more details.
+#
+# You should have received a copy of the GNU Lesser General Public License
+# along with ronin-db-activerecord.  If not, see <https://www.gnu.org/licenses/>.
+#
+
+#
+# Creates the `ronin_cert_issuers` table.
+#
+class CreateRoninCertIssuersTable < ActiveRecord::Migration[7.0]
+
+  def change
+    create_table :ronin_cert_issuers, if_not_exists: true do |t|
+      # NOTE: some Equifax certs do not set the issuer common name (CN)
+      t.string :common_name, null: true
+      t.string :email_address, length: 320, null: true
+      t.string :organization, null: false
+      t.string :organizational_unit, null: true
+      t.string :locality, null: true
+      t.string :state, null: true
+      t.string :country, null: false, length: 2
+
+      t.datetime :created_at, null: false
+
+      t.index [:common_name, :organization, :organizational_unit, :locality, :state, :country], unique: true,
+                name:   :index_ronin_cert_issuers_table_unique
+      t.index :common_name
+      t.index :email_address
+      t.index :organization
+      t.index :organizational_unit
+      t.index :locality
+      t.index :country
+    end
+  end
+
+end

data/db/migrate/0041_create_ronin_cert_subjects_table.rb

@@ -0,0 +1,54 @@
+# frozen_string_literal: true
+#
+# ronin-db-activerecord - ActiveRecord backend for the Ronin Database.
+#
+# Copyright (c) 2022-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This file is part of ronin-db-activerecord.
+#
+# ronin-db-activerecord is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Lesser General Public License as published
+# by the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# ronin-db-activerecord is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU Lesser General Public License for more details.
+#
+# You should have received a copy of the GNU Lesser General Public License
+# along with ronin-db-activerecord.  If not, see <https://www.gnu.org/licenses/>.
+#
+
+#
+# Creates the `ronin_cert_subjects` table.
+#
+class CreateRoninCertSubjectsTable < ActiveRecord::Migration[7.0]
+
+  def change
+    create_table :ronin_cert_subjects, if_not_exists: true do |t|
+      t.references :common_name, null: false,
+                                 foreign_key: {
+                                   to_table: :ronin_cert_names
+                                 }
+
+      t.string :email_address, length: 320, null: true
+      t.string :organization, null: false
+      t.string :organizational_unit, null: true
+      t.string :locality, null: true
+      t.string :state, null: true
+      t.string :country, null: false, length: 2
+
+      t.datetime :created_at, null: false
+
+      t.index [:common_name_id, :organization, :organizational_unit, :locality, :state, :country], unique: true,
+                   name:   :index_ronin_cert_subjects_table_unique
+      t.index :email_address
+      t.index :organization
+      t.index :organizational_unit
+      t.index :locality
+      t.index :country
+    end
+  end
+
+end

data/db/migrate/0042_create_ronin_cert_subject_alt_names_table.rb

@@ -0,0 +1,42 @@
+# frozen_string_literal: true
+#
+# ronin-db-activerecord - ActiveRecord backend for the Ronin Database.
+#
+# Copyright (c) 2022-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This file is part of ronin-db-activerecord.
+#
+# ronin-db-activerecord is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Lesser General Public License as published
+# by the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# ronin-db-activerecord is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU Lesser General Public License for more details.
+#
+# You should have received a copy of the GNU Lesser General Public License
+# along with ronin-db-activerecord.  If not, see <https://www.gnu.org/licenses/>.
+#
+
+#
+# Creates the `ronin_cert_subject_alt_names` table.
+#
+class CreateRoninCertSubjectAltNamesTable < ActiveRecord::Migration[7.0]
+
+  def change
+    create_table :ronin_cert_subject_alt_names, if_not_exists: true do |t|
+      t.references :name, null: false,
+                          foreign_key: {
+                            to_table: :ronin_cert_names
+                          }
+
+      t.references :cert, null: false,
+                          foreign_key: {
+                            to_table: :ronin_certs
+                          }
+    end
+  end
+
+end

data/db/migrate/0043_create_ronin_certs_table.rb

@@ -0,0 +1,61 @@
+# frozen_string_literal: true
+#
+# ronin-db-activerecord - ActiveRecord backend for the Ronin Database.
+#
+# Copyright (c) 2022-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This file is part of ronin-db-activerecord.
+#
+# ronin-db-activerecord is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Lesser General Public License as published
+# by the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# ronin-db-activerecord is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU Lesser General Public License for more details.
+#
+# You should have received a copy of the GNU Lesser General Public License
+# along with ronin-db-activerecord.  If not, see <https://www.gnu.org/licenses/>.
+#
+
+#
+# Creates the `ronin_certs` table.
+#
+class CreateRoninCertsTable < ActiveRecord::Migration[7.0]
+
+  def change
+    create_table :ronin_certs, if_not_exists: true do |t|
+      t.string :serial, length: 32, null: false
+      t.integer :version, null: false
+      t.datetime :not_before, null: false
+      t.datetime :not_after, null: false
+
+      # NOTE: self-signed certs dont' have #issuer set
+      t.references :issuer, null: true,
+                            foreign_key: {
+                              to_table: :ronin_cert_issuers
+                            }
+      t.references :subject, null: false,
+                             foreign_key: {
+                               to_table: :ronin_cert_subjects
+                             }
+
+      t.string :public_key_algorithm, length: 3, null: false
+      t.integer :public_key_size, null: true
+      t.string :signing_algorithm, length: 12, null: false
+
+      t.string :sha1_fingerprint, length: 40, null: false
+      t.string :sha256_fingerprint, length: 64, null: false
+
+      t.text :pem, null: false
+      t.datetime :created_at, null: false
+
+      t.index :serial
+      t.index :sha1_fingerprint, unique: true
+      t.index :sha256_fingerprint, unique: true
+    end
+  end
+
+end

data/db/migrate/0044_add_cert_id_column_to_ronin_open_ports_table.rb

@@ -0,0 +1,35 @@
+# frozen_string_literal: true
+#
+# ronin-db-activerecord - ActiveRecord backend for the Ronin Database.
+#
+# Copyright (c) 2022-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This file is part of ronin-db-activerecord.
+#
+# ronin-db-activerecord is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Lesser General Public License as published
+# by the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# ronin-db-activerecord is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU Lesser General Public License for more details.
+#
+# You should have received a copy of the GNU Lesser General Public License
+# along with ronin-db-activerecord.  If not, see <https://www.gnu.org/licenses/>.
+#
+
+#
+# Adds an optional `cert_id` column to the `ronin_open_ports` table.
+#
+class AddCertIdColumnToRoninOpenPortsTable < ActiveRecord::Migration[7.0]
+
+  def change
+    add_reference :ronin_open_ports, :cert, null: true,
+                                            foreign_key: {
+                                              to_table: :ronin_certs
+                                            }
+  end
+
+end