ruby-sslyze 0.2.1 → 1.0.0

data/lib/sslyze/x509/extensions/key_usage.rb

@@ -0,0 +1,66 @@
+require 'sslyze/x509/extension'
+
+module SSLyze
+  module X509
+    module Extensions
+      #
+      # Represents the `keyUsage` X509v3 extension.
+      #
+      # @since 1.0.0
+      #
+      class KeyUsage < Extension
+
+        include Enumerable
+
+        #
+        # The various permitted key uses.
+        #
+        # @return [Array<String>]
+        #
+        def uses
+          @uses ||= value.split(', ')
+        end
+
+        #
+        # @yield [use]
+        #
+        # @yieldparam [String] use
+        #
+        # @return [Enumerator]
+        #
+        def each(&block)
+          uses.each(&block)
+        end
+
+        #
+        # @return [Boolean]
+        #
+        def key_encipherment?
+          uses.include?('Key Encipherment')
+        end
+
+        #
+        # @return [Boolean]
+        #
+        def digital_signature?
+          uses.include?('Digital Signature')
+        end
+
+        #
+        # @return [Boolean]
+        #
+        def crl_sign?
+          uses.include?('CRL Sign')
+        end
+
+        #
+        # @return [Boolean]
+        #
+        def certificate_sign?
+          uses.include?('Certificate Sign')
+        end
+
+      end
+    end
+  end
+end

data/lib/sslyze/x509/extensions/subject_alt_name.rb

@@ -0,0 +1,144 @@
+require 'sslyze/x509/extension'
+require 'sslyze/x509/domain'
+
+require 'uri'
+require 'ipaddr'
+
+module SSLyze
+  module X509
+    module Extensions
+      #
+      # Represents the `subjectAltName` X509v3 extension.
+      #
+      # @since 1.0.0
+      #
+      class SubjectAltName < Extension
+
+        include Enumerable
+
+        # Known subject name types.
+        TYPES = {
+          'DNS' => :dns,
+          'IP'  => :ip,
+          'URI' => :uri,
+          'RID' => :rid,
+
+          'email'     => :email,
+          'dirName'   => :dir_name,
+          'otherName' => :other_name
+        }
+
+        #
+        # Enumerates over every alternative name within the extension's value.
+        #
+        # @yield [type, name]
+        #   The given block will be passed each 
+        #
+        # @yieldparam [:dns, :ip, :uri, :rid, :email, :dir_name, :other_name] type
+        #   The type of the alternative name being yielded.
+        #
+        # @yieldparam [String] name
+        #   An alternative name within the extension's value.
+        #
+        # @return [Enumerator]
+        #   If no block is given, an Enumerator will be returned.
+        #
+        # @raise [NotImplementedError]
+        #   An unknown name type was encountered while parsing the extension's
+        #   value.
+        #
+        def each
+          return enum_for unless block_given?
+
+          value.split(', ').each do |type_value|
+            type, value = type_value.split(':',2)
+
+            unless TYPES.has_key?(type)
+              raise(NotImplementedError,"unsupported subjectAltName type: #{type}")
+            end
+
+            yield TYPES[type], value
+          end
+        end
+
+        #
+        # All `DNS:` alternative names within the extension's value.
+        #
+        # @return [Array<String>]
+        #
+        def dns
+          @dns ||= select { |type,value| type == :dns }.map do |(type,value)|
+            value
+          end
+        end
+
+        #
+        # All `IP:` alternative names within the extension's value.
+        #
+        # @return [Array<IPAddr>]
+        #
+        def ip
+          @ip ||= select { |type,value| type == :ip }.map do |(type,value)|
+            IPAddr.new(value)
+          end
+        end
+
+        #
+        # All `URI:` alternative names within the extension's value.
+        #
+        # @return [Array<URI::Generic>]
+        #
+        def uri
+          @uri ||= select { |type,value| type == :uri }.map do |(type,value)|
+            URI.parse(value)
+          end
+        end
+
+        #
+        # All `email:` alternative names within the extension's value.
+        #
+        # @return [Array<String>]
+        #
+        def email
+          @email ||= select { |type,value| type == :email }.map do |(type,value)|
+            value
+          end
+        end
+
+        #
+        # All `RID:` alternative names within the extension's value.
+        #
+        # @return [Array<String>]
+        #
+        def rid
+          @rid ||= select { |type,value| type == :rid }.map do |(type,value)|
+            value
+          end
+        end
+
+        #
+        # All `dirName:` alternative names within the extension's value.
+        #
+        # @return [Array<String>]
+        #
+        def dir_name
+          @dir_name ||= select { |type,value| type == :dir_name }.map do |(type,value)|
+            value
+          end
+        end
+
+        #
+        # All `otherName:` alternative names within the extension's value.
+        #
+        # @return [Array<String>]
+        #
+        def other_name
+          @other_name ||= select { |type,value| type == :other_name }.map do |(type,value)|
+            value
+          end
+        end
+
+      end
+    end
+  end
+end

data/lib/sslyze/x509/name.rb

@@ -0,0 +1,194 @@
+require 'sslyze/x509/domain'
+
+require 'openssl'
+
+module SSLyze
+  module X509
+    #
+    # Wrapper object for [OpenSSL::X509::Name][1].
+    #
+    # [1]: http://www.rubydoc.info/stdlib/openssl/OpenSSL/X509/Name
+    #
+    # @since 1.0.0
+    #
+    class Name
+
+      include Enumerable
+
+      #
+      # The parsed entries of the name.
+      #
+      # @return [Array<(String, String, Integer)>]
+      #
+      attr_reader :entries
+
+      #
+      # @param [OpenSSL::X509::Name] name
+      #   The OpenSSL X509 name object.
+      #
+      def initialize(name)
+        @name    = name
+        @entries = name.to_a
+      end
+
+      #
+      # Enumerates over the entries.
+      #
+      # @yield [oid, value, type]
+      #
+      # @yieldparam [String] oid
+      #   The Object IDentifier.
+      #
+      # @yieldparam [String] value
+      #   The entry's value.
+      #
+      # @yieldparam [Integer] type
+      #   The entry type.
+      #
+      def each(&block)
+        @entries.each do |(oid,value,type)|
+          yield oid, value, type
+        end
+      end
+
+      #
+      # Finds the entry with the matcing OID (Object IDentifier).
+      #
+      # @param [String] key
+      #
+      # @return [String, nil]
+      #
+      def [](key)
+        each do |oid,value,type|
+          return value if oid == key
+        end
+
+        return nil
+      end
+
+      #
+      # The Country (`C`) entry.
+      #
+      # @return [String]
+      #
+      def country_name
+        @country_name ||= self['C']
+      end
+
+      alias country country_name
+      alias c country_name
+
+      #
+      # The Common Name (`CN`) entry.
+      #
+      # @return [Domain]
+      #
+      def common_name
+        @common_name ||= Domain.new(self['CN'])
+      end
+
+      alias cn common_name
+
+      #
+      # The Domain Component (`DC`) entry.
+      #
+      # @return [String, nil]
+      #
+      def domain_component
+        @domain_component ||= self['DC']
+      end
+
+      alias dc domain_component
+
+      #
+      # The Organization Name (`O`) entry.
+      #
+      # @return [String]
+      #
+      def organization_name
+        @organization_name ||= self['O']
+      end
+
+      alias organization organization_name
+      alias o organization_name
+
+      #
+      # The Organization Unit Name (`OU`) entry.
+      #
+      # @return [String]
+      #
+      def organizational_unit_name
+        @organizational_unit_name ||= self['OU']
+      end
+
+      alias organizational_unit organizational_unit_name
+      alias ou organizational_unit_name
+
+      #
+      # The State/Province Name (`ST`) entry.
+      #
+      # @return [String, nil]
+      #
+      def state_name
+        @state_name ||= self['ST']
+      end
+
+      alias state state_name
+      alias province_name state_name
+      alias province province_name
+      alias st state_name
+
+      #
+      # The Location (`L`) entry.
+      #
+      # @return [String, nil]
+      #
+      def location_name
+        @location ||= self['L']
+      end
+
+      alias location location_name
+      alias l location_name
+
+      #
+      # @see http://www.rubydoc.info/stdlib/openssl/OpenSSL/X509/Name#cmp-instance_method
+      #
+      def cmp(other)
+        @name.cmp(other.name)
+      end
+
+      #
+      # @see http://www.rubydoc.info/stdlib/openssl/OpenSSL/X509/Name#eql%3F-instance_method
+      #
+      def eql?(other)
+        @name.eql?(other.name)
+      end
+
+      #
+      # @see http://www.rubydoc.info/stdlib/openssl/OpenSSL/X509/Name#to_a-instance_method
+      #
+      def to_a
+        @name.to_a
+      end
+
+      #
+      # @see http://www.rubydoc.info/stdlib/openssl/OpenSSL/X509/Name#to_der-instance_method
+      #
+      def to_der
+        @name.to_der
+      end
+
+      #
+      # @see http://www.rubydoc.info/stdlib/openssl/OpenSSL/X509/Name#to_s-instance_method
+      #
+      def to_s(*args)
+        @name.to_s(*args)
+      end
+
+      protected
+
+      attr_reader :name
+
+    end
+  end
+end

data/lib/sslyze/x509/public_key.rb

@@ -0,0 +1,53 @@
+require 'delegate'
+
+module SSLyze
+  module X509
+    #
+    # Wrapper class around [OpenSSL::PKey] classes that provide {#algorithm} and
+    # {#size} methods.
+    #
+    # [OpenSSL::PKey]: http://www.rubydoc.info/stdlib/openssl/OpenSSL/PKey
+    #
+    # @since 1.0.0
+    #
+    class PublicKey < SimpleDelegator
+
+      #
+      # The algorithm that generated the public key.
+      #
+      # @return [:rsa, :dsa, :dh, :ec]
+      #
+      def algorithm
+        case __getobj__
+        when OpenSSL::PKey::RSA then :rsa
+        when OpenSSL::PKey::DSA then :dsa
+        when OpenSSL::PKey::DH  then :dh
+        when OpenSSL::PKey::EC  then :ec
+        end
+      end
+
+      #
+      # The size of the public key.
+      #
+      # @return [Integer]
+      #   The number of bits in the public key.
+      #
+      # @raise [NotImplementedError]
+      #   Determining key size for `OpenSSL::PKey::EC` public keys is currently
+      #   not implemented.
+      #
+      def size
+        pkey = __getobj__
+
+        case pkey
+        when OpenSSL::PKey::RSA then pkey.n.num_bits
+        when OpenSSL::PKey::DSA then pkey.p.num_bits
+        when OpenSSL::PKey::DH  then pkey.p.num_bits
+        when OpenSSL::PKey::EC
+          raise(NotImplementedError,"key size for #{pkey.inspect} not implemented")
+        end
+      end
+
+    end
+  end
+end