rubygems_ssl-client-certs 0.0.1.pre.alpha.pre.25

checksums.yaml

@@ -0,0 +1,15 @@
+---
+!binary "U0hBMQ==":
+  metadata.gz: !binary |-
+    NDUxMzRkMThkZjQ3ZWVlZjRjNDljZjhiNzA4YmNiMzRjMTYwNGM5ZQ==
+  data.tar.gz: !binary |-
+    YjAwYTUzZjQ4MGE0ZTk5MWU5NzU5ZTMwYmQ3NjVkMGNiNzcyN2QyNw==
+SHA512:
+  metadata.gz: !binary |-
+    OGE0YThiMGJhYmVmNDhhNGUyNTJjZjZkODZiZGYwMDQ2YWEyN2Y5NTg2ZjZi
+    Y2E5MzM0MDZhMjAyNjE4NDVhYjhhOGI0MzE0ZjY2YjU4ZDAwYTE0M2IwMmRl
+    MzU4MTZhM2QyNzFkY2YwMWU5MGYwMGUyM2IwNjZhYzJlMTE4NDI=
+  data.tar.gz: !binary |-
+    OWI2OTNmYTZkYmY1MDI2ODQyMjAwZTY4ZWVmOTViM2NlYmQyMmQ0NjAwMDEx
+    YjA4OTkxNzUyZTI1NTIwYjliZmNiZGU3NjcxMGQ4OWIzOTUyNzUwN2I3Y2Zh
+    NGY0NmIxY2Y1M2M2NjMwNmIwODU2Njg1YzFhNWQ1M2JiNTViOWM=

data/.gitignore

@@ -0,0 +1,19 @@
+*.gem
+*.rbc
+*.swp
+.bundle
+.config
+coverage
+InstalledFiles
+lib/bundler/man
+pkg
+rdoc
+spec/reports
+test/tmp
+test/version_tmp
+tmp
+
+# YARD artifacts
+.yardoc
+_yardoc
+doc/

data/.travis.yml

@@ -0,0 +1,10 @@
+language: ruby
+bundler_args: --no-deployment
+rvm:
+- 1.8.7
+- 1.9.3
+- 2.0.0
+deploy:
+  provider: rubygems
+  api_key:
+    secure: H97wLo76fndF6JG5PUOe141oDQDjqri9vSXqJSjjdB5VwnPbYhwnS1mt4NANNi4UsqmqHkGRXJufNWJ2LRzz3CNX4/wFEDHLSZxu8PuHy68M9wPpOQLZwYk6sX5R47wOjsVA3Ob5/79ftndv3ipHkLGxLj56Z8XEjQ+FUzUwbiI=

data/Gemfile

@@ -0,0 +1,8 @@
+source "http://rubygems.org"
+
+# Specify your gem's dependencies in rubygems-noproxy.gemspec
+gemspec
+#group :test do
+#  gem 'rake'
+#  gem 'rspec-core'
+#end

data/Gemfile.lock

@@ -0,0 +1,27 @@
+PATH
+  remote: .
+  specs:
+    rubygems_client-certs (0.0.1)
+
+GEM
+  remote: http://rubygems.org/
+  specs:
+    diff-lcs (1.2.5)
+    rake (10.1.0)
+    rspec (2.14.1)
+      rspec-core (~> 2.14.0)
+      rspec-expectations (~> 2.14.0)
+      rspec-mocks (~> 2.14.0)
+    rspec-core (2.14.7)
+    rspec-expectations (2.14.4)
+      diff-lcs (>= 1.1.3, < 2.0)
+    rspec-mocks (2.14.4)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  rake
+  rspec
+  rspec-core
+  rubygems_client-certs!

data/README.md

@@ -0,0 +1,6 @@
+rubygems_ssl-client-certs
+=========================
+
+[![Build Status](https://secure.travis-ci.org/zebardy/rubygems_ssl-client-certs.png)](http://travis-ci.org/zebardy/rubygems_ssl-client-certs)
+
+rubygems plugin to support the use of ssl client certs

data/Rakefile

@@ -0,0 +1,12 @@
+require 'rubygems'
+require "rubygems/package_task"
+require 'rake'
+
+Gem::PackageTask.new(eval(File.read("rubygems_ssl-client-certs.gemspec"))) do |pkg|
+end
+
+task :default => :test
+
+task :test do
+  sh 'rspec spec'
+end

data/lib/rubygems_plugin.rb

@@ -0,0 +1,108 @@
+require 'rubygems/remote_fetcher'
+
+class Gem::ConfigFile
+
+  attr_reader :ssl_client_cert
+
+  attr_reader :ssl_verify_mode
+
+  attr_reader :ssl_ca_cert
+
+  class << self
+    alias_method :__new__, :new
+    def new(*args)
+      config = __new__(*args)
+      config.set_ssl_vars
+      return config
+    end
+  end
+
+  def set_ssl_vars
+    @ssl_verify_mode = @hash[:ssl_verify_mode] if @hash.key? :ssl_verify_mode
+    @ssl_ca_cert = @hash[:ssl_ca_cert] if @hash.key? :ssl_ca_cert
+    @ssl_ca_cert = ENV['BUNDLE_SSL_CA_CERT'] unless @ssl_ca_cert
+    @ssl_client_cert = @hash[:ssl_client_cert] if @hash.key? :ssl_client_cert
+    @ssl_client_cert = ENV['BUNDLE_SSL_CLIENT_CERT'] unless @ssl_client_cert
+  end
+
+end
+
+class Gem::RemoteFetcher
+
+  def connection_for(uri)
+    net_http_args = [uri.host, uri.port]
+
+    if @proxy_uri and not no_proxy?(uri.host) then
+      net_http_args += [
+        @proxy_uri.host,
+        @proxy_uri.port,
+        @proxy_uri.user,
+        @proxy_uri.password
+      ]
+    end
+
+    connection_id = [Thread.current.object_id, *net_http_args].join ':'
+    @connections[connection_id] ||= Net::HTTP.new(*net_http_args)
+    connection = @connections[connection_id]
+
+    if https?(uri) and not connection.started? then
+      configure_connection_for_https(connection)
+    end
+
+    connection.start unless connection.started?
+
+    connection
+  rescue defined?(OpenSSL::SSL) ? OpenSSL::SSL::SSLError : Errno::EHOSTDOWN,
+         Errno::EHOSTDOWN => e
+    raise FetchError.new(e.message, uri)
+  end
+
+  def configure_connection_for_https(connection)
+    require 'net/https'
+    connection.use_ssl = true
+    connection.verify_mode =
+      Gem.configuration.ssl_verify_mode || OpenSSL::SSL::VERIFY_PEER
+    store = OpenSSL::X509::Store.new
+
+    #if Gem.configuration.ssl_client_cert
+    if ENV['BUNDLE_SSL_CLIENT_CERT']
+      pem = File.read(Gem.configuration.ssl_client_cert)
+      connection.cert = OpenSSL::X509::Certificate.new(pem)
+      connection.key = OpenSSL::PKey::RSA.new(pem)
+    else
+      puts "no Client Cert found!"
+    end
+
+    #if Gem.configuration.ssl_ca_cert
+    if ENV['BUNDLE_SSL_CA_CERT']
+      if File.directory? Gem.configuration.ssl_ca_cert
+        store.add_path Gem.configuration.ssl_ca_cert
+      else
+        store.add_file Gem.configuration.ssl_ca_cert
+      end
+    else
+      puts "no CA Cert found!"
+      store.set_default_paths
+      add_rubygems_trusted_certs(store)
+    end
+    connection.cert_store = store
+  rescue LoadError => e
+    raise unless (e.respond_to?(:path) && e.path == 'openssl') ||
+                 e.message =~ / -- openssl$/
+
+    raise Gem::Exception.new(
+            'Unable to require openssl, install OpenSSL and rebuild ruby (preferred) or use non-HTTPS sources')
+  end
+
+  def add_rubygems_trusted_certs(store)
+    pattern = File.expand_path("./ssl_certs/*.pem", File.dirname(__FILE__))
+    Dir.glob(pattern).each do |ssl_cert_file|
+      store.add_file ssl_cert_file
+    end
+  end
+
+  def https?(uri)
+    uri.scheme.downcase == 'https'
+  end
+
+end

data/lib/rubygems_ssl-client-certs/version.rb

@@ -0,0 +1,5 @@
+module Rubygems
+  module ClientCerts
+    VERSION = "0.0.1"
+  end
+end

data/lib/rubygems_ssl-client-certs.rb

@@ -0,0 +1,7 @@
+require "rubygems_ssl-client-certs/version"
+
+module Rubygems
+  module ClientCerts
+    # Your code goes here...
+  end
+end

data/rubygems_ssl-client-certs.gemspec

@@ -0,0 +1,23 @@
+# -*- encoding: utf-8 -*-
+$:.push File.expand_path("../lib", __FILE__)
+require "rubygems_ssl-client-certs/version"
+
+Gem::Specification.new do |s|
+  s.name = "rubygems_ssl-client-certs"
+  s.version = Rubygems::ClientCerts::VERSION
+  s.version = "#{s.version}-alpha-#{ENV['TRAVIS_BUILD_NUMBER']}" if ENV['TRAVIS']
+  s.authors = ["Aaron Moses"]
+  s.homepage = "https://github.com/zebardy/rubygems_ssl-client-certs"
+  s.licenses = ["MIT"]
+  s.summary = %q{Fix ssl client cert behavior in rubygems}
+  s.description = %q{A rubygems plugin that monkey-patches rubygems to support ssl client certs}
+
+  s.files = `git ls-files`.split("\n")
+  s.test_files = `git ls-files -- {test,spec,features}/*`.split("\n")
+  s.executables = `git ls-files -- bin/*`.split("\n").map{ |f| File.basename(f) }
+  s.require_paths = ["lib"]
+
+  s.add_development_dependency "rake"
+  s.add_development_dependency "rspec"
+  s.add_development_dependency "rspec-core"
+end

data/spec/fixtures/gemrc

@@ -0,0 +1,11 @@
+---
+:backtrace: false
+:benchmark: false
+:bulk_threshold: 1000
+:sources:
+- http://rubygems.org/
+:update_sources: true
+:verbose: true
+:ssl_verify_mode: bob
+:ssl_ca_cert: steve
+:ssl_client_cert: dave

data/spec/gem_config_file_spec.rb

@@ -0,0 +1,22 @@
+require 'spec_helper'
+
+describe Gem::ConfigFile do
+
+  def gemrc_location
+    File.dirname(__FILE__) + '/fixtures/gemrc'
+  end
+
+  describe ".new" do
+    it "initializes ssl vars" do
+      config = Gem::ConfigFile.new( [ "--config-file", gemrc_location ] )
+      config.ssl_verify_mode.should eq("bob")
+      config.ssl_ca_cert.should eq("steve")
+      config.ssl_client_cert.should eq("dave")
+    end
+    it "original initialize is still called" do
+      #Test by setting the backtrace value which defaults to false
+      config = Gem::ConfigFile.new( [ "--backtrace" ] )
+      config.backtrace.should be_true
+    end
+  end
+end

data/spec/gem_remote_fetcher_spec.rb

@@ -0,0 +1,27 @@
+require 'spec_helper'
+require 'uri'
+
+describe Gem::RemoteFetcher do
+
+  def create_fetcher()
+    fetcher = subject
+    fetcher
+  end
+
+  describe "#https?" do
+    it "returns true when protocol is https" do
+      fetcher = create_fetcher()
+      fetcher.https?(URI("https://www.example.com")).should be_true
+    end
+
+    it "returns false when protocol is http" do
+      fetcher = create_fetcher()
+      fetcher.https?(URI("http://www.example.com")).should be_false
+    end
+  end
+
+  describe "#configure_connection_for_https" do
+    
+  end
+
+end

data/spec/spec_helper.rb

@@ -0,0 +1,6 @@
+$LOAD_PATH.unshift(File.join(File.dirname(__FILE__), '..', 'lib'))
+$LOAD_PATH.unshift(File.dirname(__FILE__))
+
+require 'rspec'
+require 'rubygems'
+require "rubygems_plugin"

metadata

@@ -0,0 +1,100 @@
+--- !ruby/object:Gem::Specification
+name: rubygems_ssl-client-certs
+version: !ruby/object:Gem::Version
+  version: 0.0.1.pre.alpha.pre.25
+platform: ruby
+authors:
+- Aaron Moses
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2013-11-27 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rspec-core
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ! '>='
+      - !ruby/object:Gem::Version
+        version: '0'
+description: A rubygems plugin that monkey-patches rubygems to support ssl client
+  certs
+email: 
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- .gitignore
+- .travis.yml
+- Gemfile
+- Gemfile.lock
+- README.md
+- Rakefile
+- lib/rubygems_plugin.rb
+- lib/rubygems_ssl-client-certs.rb
+- lib/rubygems_ssl-client-certs/version.rb
+- rubygems_ssl-client-certs.gemspec
+- spec/fixtures/gemrc
+- spec/gem_config_file_spec.rb
+- spec/gem_remote_fetcher_spec.rb
+- spec/spec_helper.rb
+homepage: https://github.com/zebardy/rubygems_ssl-client-certs
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ! '>'
+    - !ruby/object:Gem::Version
+      version: 1.3.1
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.1.11
+signing_key: 
+specification_version: 4
+summary: Fix ssl client cert behavior in rubygems
+test_files: []