saml_idp 0.11.0 → 0.12.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f04deecaf7c0bd7c5655134d314a4b95b9438b24b67e83d7b160d9fa2232f2fc
-  data.tar.gz: b999a0a1f97e85e34704bfe35d3dddb89eebcfbfe1723be5e9dfcfb17e511ef5
+  metadata.gz: 73712903d3949f895e57a13b138c007e0ae74715d7d546b4415f278829e59054
+  data.tar.gz: fbab7e28d01ea3fc7624e52e20a234f6f997a51643905170e6809cb3f7beeec7
 SHA512:
-  metadata.gz: 94921b45008f31783c0428992b9cad6b4b1098ad312fd721987d0d27f89921f286f7bd8960237b5f371f8ccb23cac1a6c8b6c7aa110fcf4318a0b63b52497e9e
-  data.tar.gz: e142a4c38d3604dc033d0cfef0a298fbb094d5d36939518558aa219d6bd16ca753960fcc553c076e9969e031946e56d10ef3ba0c1505fcf9df3f7ee62ecdab11
+  metadata.gz: 80a4683963e04b8b7f68051d15b12a5f0a098300cbfba9b72c4ed3940338ab3505c47cda0b091a9a36c1605f4396b5f1732bed7d3356438dd944f83541573a47
+  data.tar.gz: b01be29f645e31f9987afef74bb8b368ccfc86340b67e29524f582fe139e99b56cd827315d5a4e73d34b69e2c3c5b89d881c89f6d29b68c4b3cd2ff5499a39c3

data/README.md

@@ -245,6 +245,15 @@ The fingerprint to use, if you use the default X.509 certificate of this gem, is
 9E:65:2E:03:06:8D:80:F2:86:C7:6C:77:A1:D9:14:97:0A:4D:F4:4D
 ```
 
+# Fingerprint
+
+The gem provides an helper to generate a fingerprint for a X.509 certificate.
+The second parameter is optional and default to your configuration `SamlIdp.config.algorithm`
+
+```ruby
+Fingerprint.certificate_digest(x509_cert, :sha512)
+```
+
 # Service Providers
 
 To act as a Service Provider which generates SAML Requests and can react to SAML Responses use the

data/lib/saml_idp.rb

@@ -8,6 +8,7 @@ module SamlIdp
   require 'saml_idp/default'
   require 'saml_idp/metadata_builder'
   require 'saml_idp/version'
+  require 'saml_idp/fingerprint'
   require 'saml_idp/engine' if defined?(::Rails) && Rails::VERSION::MAJOR > 2
 
   def self.config

data/lib/saml_idp/fingerprint.rb

@@ -0,0 +1,19 @@
+module SamlIdp
+  module Fingerprint
+    def self.certificate_digest(cert, sha_size = nil)
+      sha_size ||= SamlIdp.config.algorithm
+      digest_sha_class(sha_size).hexdigest(OpenSSL::X509::Certificate.new(cert).to_der).scan(/../).join(':')
+    end
+
+    def self.digest_sha_class(sha_size)
+      case sha_size
+      when :sha256
+        Digest::SHA256
+      when :sha512
+        Digest::SHA512
+      else
+        raise ArgumentError, "Unsupported sha size parameter: #{sha_size}"
+      end
+    end
+  end
+end

data/lib/saml_idp/version.rb

@@ -1,4 +1,4 @@
 # encoding: utf-8
 module SamlIdp
-  VERSION = '0.11.0'
+  VERSION = '0.12.0'
 end

data/spec/lib/saml_idp/fingerprint_spec.rb

@@ -0,0 +1,14 @@
+require 'spec_helper'
+
+module SamlIdp
+  describe Fingerprint do
+    describe "certificate_digest" do
+      let(:cert) { sp_x509_cert }
+      let(:fingerprint) { "a2:cb:f6:6b:bc:2a:33:b9:4f:f3:c3:7e:26:a4:21:cd:41:83:ef:26:88:fa:ba:71:37:40:07:3e:d5:76:04:b7" }
+
+      it "returns the fingerprint string" do
+        expect(Fingerprint.certificate_digest(cert, :sha256)).to eq(fingerprint)
+      end
+    end
+  end
+end

data/spec/support/saml_request_macros.rb

@@ -82,7 +82,7 @@ module SamlRequestMacros
           response_hosts: [URI(saml_acs_url).host],
           acs_url: saml_acs_url,
           cert: sp_x509_cert,
-          fingerprint: Digest::SHA256.hexdigest(OpenSSL::X509::Certificate.new(sp_x509_cert).to_der).scan(/../).join(':')
+          fingerprint: SamlIdp::Fingerprint.certificate_digest(sp_x509_cert)
         }
       }
     end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: saml_idp
 version: !ruby/object:Gem::Version
-  version: 0.11.0
+  version: 0.12.0
 platform: ruby
 authors:
 - Jon Phenow
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-10-15 00:00:00.000000000 Z
+date: 2020-11-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -228,6 +228,7 @@ files:
 - lib/saml_idp/default.rb
 - lib/saml_idp/encryptor.rb
 - lib/saml_idp/engine.rb
+- lib/saml_idp/fingerprint.rb
 - lib/saml_idp/hashable.rb
 - lib/saml_idp/incoming_metadata.rb
 - lib/saml_idp/logout_builder.rb
@@ -254,6 +255,7 @@ files:
 - spec/lib/saml_idp/configurator_spec.rb
 - spec/lib/saml_idp/controller_spec.rb
 - spec/lib/saml_idp/encryptor_spec.rb
+- spec/lib/saml_idp/fingerprint_spec.rb
 - spec/lib/saml_idp/incoming_metadata_spec.rb
 - spec/lib/saml_idp/logout_request_builder_spec.rb
 - spec/lib/saml_idp/logout_response_builder_spec.rb
@@ -350,7 +352,7 @@ metadata:
   homepage_uri: https://github.com/saml-idp/saml_idp
   source_code_uri: https://github.com/saml-idp/saml_idp
   bug_tracker_uri: https://github.com/saml-idp/saml_idp/issues
-  documentation_uri: http://rdoc.info/gems/saml_idp/0.11.0
+  documentation_uri: http://rdoc.info/gems/saml_idp/0.12.0
 post_install_message: |
   If you're just recently updating saml_idp - please be aware we've changed the default
   certificate. See the PR and a description of why we've done this here:
@@ -394,6 +396,7 @@ test_files:
 - spec/lib/saml_idp/configurator_spec.rb
 - spec/lib/saml_idp/controller_spec.rb
 - spec/lib/saml_idp/encryptor_spec.rb
+- spec/lib/saml_idp/fingerprint_spec.rb
 - spec/lib/saml_idp/incoming_metadata_spec.rb
 - spec/lib/saml_idp/logout_request_builder_spec.rb
 - spec/lib/saml_idp/logout_response_builder_spec.rb