ruby-mysql 2.9.13 → 2.11.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: 202d13ae653ae79671fbe568f53f258bebcb453c
-  data.tar.gz: dc69e58cf536f1e10195296f247e81efd9503887
+SHA256:
+  metadata.gz: 178673e0e53a16263b882308afca1831d674e96057828c2115d34ec3669dc58e
+  data.tar.gz: 23e9fc852a81f976f1d8130fbcd0c623dc234c8e741e60c0fd58094079fb02bd
 SHA512:
-  metadata.gz: 390ae9a82ceca9c89c30c4837cc2fa06c00c8e2570bbd4bce5896f83dfb5c8cf5a082434f13b0729daf6c5513bf220be1c59342d1c548525e860c0321b1fb573
-  data.tar.gz: 8986d9a99784a45f52d122426be397f7d9c956dce6f54303ba75311fa68d924e253abd9720379ae912d0ff52053e60ac915f6c35f08bde156f26296a51bec7fa
+  metadata.gz: dc51341a75ae3373d2b375632781809abc68ac30fbee593761b67a304ef33b3d52538762dfd144f5ddad0b63416b68c0f9ce1f68ab89228f0f5b0e4f82a2332f
+  data.tar.gz: 8ee78f4d06f1714b2c0cb83537b3efe643e968a212c64c71cd3e19dda422a4f9961a16578dab45d1c43f147a2551d7499447645576a6545698e00419c5cae7c9

data/README.rdoc

@@ -33,15 +33,16 @@ MySQL connector for Ruby.
 
 == Incompatible with MySQL/Ruby 2.8.x
 
-* Ruby 1.8.x ではシフトJISのような安全でないマルチバイト文字セットに対して Mysql#escape_string を使用すると例外が発生します。
-
 * いくつかのメソッドがありません: Mysql#debug, Mysql#change_user,
   Mysql#create_db, Mysql#drop_db, Mysql#dump_debug_info,
   Mysql#ssl_set, Mysql#reconnect
 
 * Mysql#options でサポートしているオプションは次のものだけです:
   Mysql::INIT_COMMAND, Mysql::OPT_CONNECT_TIMEOUT,
+  Mysql::OPT_GET_SERVER_PUBLIC_KEY,
+  Mysql::OPT_LOAD_DATA_LOCAL_DIR,
   Mysql::OPT_LOCAL_INFILE, Mysql::OPT_READ_TIMEOUT,
+  Mysql::OPT_SSL_MODE,
   Mysql::OPT_WRITE_TIMEOUT, Mysql::SET_CHARSET_NAME.
   これら以外を指定すると "option not implementted" という warning が標準エラー出力に出力されます。
 
@@ -64,5 +65,5 @@ MySQL connector for Ruby.
 == Copyright
 
 Author    :: TOMITA Masahiro <tommy@tmtm.org>
-Copyright :: Copyright (c) 2009-2012 TOMITA Masahiro
+Copyright :: Copyright (c) 2008 TOMITA Masahiro
 License   :: Ruby's

data/lib/mysql/authenticator/caching_sha2_password.rb

@@ -0,0 +1,62 @@
+require 'digest/sha2'
+
+class Mysql
+  class Authenticator
+    class CachingSha2Password
+      # @param protocol [Mysql::Protocol]
+      def initialize(protocol)
+        @protocol = protocol
+      end
+
+      # @return [String]
+      def name
+        'caching_sha2_password'
+      end
+
+      # @param passwd [String]
+      # @param scramble [String]
+      # @yield [String] hashed password
+      # @return [Mysql::Packet]
+      def authenticate(passwd, scramble)
+        yield hash_password(passwd, scramble)
+        pkt = @protocol.read
+        data = pkt.to_s
+        if data.size == 2 && data[0] == "\x01"
+          case data[1]
+          when "\x03"  # fast_auth_success
+            # OK
+          when "\x04"  # perform_full_authentication
+            if @protocol.client_flags & CLIENT_SSL != 0
+              @protocol.write passwd+"\0"
+            elsif !@protocol.get_server_public_key
+              raise 'Authentication requires secure connection'
+            else
+              @protocol.write "\2"  # request public key
+              pkt = @protocol.read
+              pkt.utiny # skip
+              pubkey = pkt.to_s
+              hash = (passwd+"\0").unpack("C*").zip(scramble.unpack("C*")).map{|a, b| a ^ b}.pack("C*")
+              enc = OpenSSL::PKey::RSA.new(pubkey).public_encrypt(hash, OpenSSL::PKey::RSA::PKCS1_OAEP_PADDING)
+              @protocol.write enc
+            end
+          else
+            raise "invalid auth reply packet: #{data.inspect}"
+          end
+          pkt = @protocol.read
+        end
+        return pkt
+      end
+
+      # @param passwd [String]
+      # @param scramble [String]
+      # @return [String] hashed password
+      def hash_password(passwd, scramble)
+        return '' if passwd.nil? or passwd.empty?
+        hash1 = Digest::SHA256.digest(passwd)
+        hash2 = Digest::SHA256.digest(hash1)
+        hash3 = Digest::SHA256.digest(hash2 + scramble)
+        hash1.unpack("C*").zip(hash3.unpack("C*")).map{|a, b| a ^ b}.pack("C*")
+      end
+    end
+  end
+end

data/lib/mysql/authenticator/mysql_native_password.rb

@@ -0,0 +1,37 @@
+require 'digest/sha1'
+
+class Mysql
+  class Authenticator
+    class MysqlNativePassword
+      # @param protocol [Mysql::Protocol]
+      def initialize(protocol)
+        @protocol = protocol
+      end
+
+      # @return [String]
+      def name
+        'mysql_native_password'
+      end
+
+      # @param passwd [String]
+      # @param scramble [String]
+      # @yield [String] hashed password
+      # @return [Mysql::Packet]
+      def authenticate(passwd, scramble)
+        yield hash_password(passwd, scramble)
+        @protocol.read
+      end
+
+      # @param passwd [String]
+      # @param scramble [String]
+      # @return [String] hashed password
+      def hash_password(passwd, scramble)
+        return '' if passwd.nil? or passwd.empty?
+        hash1 = Digest::SHA1.digest(passwd)
+        hash2 = Digest::SHA1.digest(hash1)
+        hash3 = Digest::SHA1.digest(scramble + hash2)
+        hash1.unpack("C*").zip(hash3.unpack("C*")).map{|a, b| a ^ b}.pack("C*")
+      end
+    end
+  end
+end

data/lib/mysql/authenticator/sha256_password.rb

@@ -0,0 +1,40 @@
+require 'openssl'
+
+class Mysql
+  class Authenticator
+    class Sha256Password
+      # @param protocol [Mysql::Protocol]
+      def initialize(protocol)
+        @protocol = protocol
+      end
+
+      # @return [String]
+      def name
+        'sha256_password'
+      end
+
+      # @param passwd [String]
+      # @param scramble [String]
+      # @yield [String] hashed password
+      # @return [Mysql::Packet]
+      def authenticate(passwd, scramble)
+        if @protocol.client_flags & CLIENT_SSL != 0
+          yield passwd+"\0"
+          return @protocol.read
+        end
+        yield "\x01"  # request public key
+        pkt = @protocol.read
+        data = pkt.to_s
+        if data[0] == "\x01"
+          pkt.utiny # skip
+          pubkey = pkt.to_s
+          hash = (passwd+"\0").unpack("C*").zip(scramble.unpack("C*")).map{|a, b| a ^ b}.pack("C*")
+          enc = OpenSSL::PKey::RSA.new(pubkey).public_encrypt(hash, OpenSSL::PKey::RSA::PKCS1_OAEP_PADDING)
+          @protocol.write enc
+          pkt = @protocol.read
+        end
+        return pkt
+      end
+    end
+  end
+end

data/lib/mysql/authenticator.rb

@@ -0,0 +1,84 @@
+class Mysql
+  class Authenticator
+    @plugins = {}
+
+    # @param plugin [String]
+    def self.plugin_class(plugin)
+      return @plugins[plugin] if @plugins[plugin]
+
+      raise ClientError, "invalid plugin name: #{plugin}" unless plugin.match?(/\A\w+\z/)
+      begin
+        require_relative "authenticator/#{plugin}"
+      rescue LoadError
+        return nil
+      end
+      class_name = plugin.gsub(/(?:^|_)(.)/){$1.upcase}
+      raise ClientError, "#{class_name} is undefined" unless self.const_defined? class_name
+      klass = self.const_get(class_name)
+      @plugins[plugin] = klass
+      return klass
+    end
+
+    def initialize(protocol)
+      @protocol = protocol
+    end
+
+    # @param plugin [String]
+    def get(plugin)
+      self.class.plugin_class(plugin)
+    end
+
+    # @param plugin [String]
+    def get!(plugin)
+      get(plugin) or raise ClientError, "unknown plugin: #{plugin}"
+    end
+
+    def authenticate(user, passwd, db, scramble, plugin_name)
+      plugin = (get(plugin_name) || DummyPlugin).new(@protocol)
+      pkt = plugin.authenticate(passwd, scramble) do |hashed|
+        @protocol.write Protocol::AuthenticationPacket.serialize(@protocol.client_flags, 1024**3, @protocol.charset.number, user, hashed, db, plugin.name)
+      end
+      while true
+        res = Protocol::AuthenticationResultPacket.parse(pkt)
+        case res.result
+        when 0  # OK
+          break
+        when 2  # multi factor auth
+          raise ClientError, 'multi factor authentication is not supported'
+        when 254  # change auth plugin
+          plugin = get!(res.auth_plugin).new(@protocol)
+          pkt = plugin.authenticate(passwd, res.scramble) do |hashed|
+            if passwd.nil? || passwd.empty?
+              @protocol.write "\0"
+            else
+              @protocol.write hashed
+            end
+          end
+        else
+          raise ClientError, "invalid packet: #{pkt.to_s}"
+        end
+      end
+    end
+
+    class DummyPlugin
+      # @param protocol [Mysql::Protocol]
+      def initialize(protocol)
+        @protocol = protocol
+      end
+
+      # @return [String]
+      def name
+        ''
+      end
+
+      # @param passwd [String]
+      # @param scramble [String]
+      # @yield [String] hashed password
+      # @return [Mysql::Packet]
+      def authenticate(passwd, scramble)
+        yield ''
+        @protocol.read
+      end
+    end
+  end
+end