saro-dat 4.3.0 → 4.3.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1bc8964419d2aa39030dbec0e990d8a22d1fa29a8f8eec15235f69e70fa81054
-  data.tar.gz: e2fb45d1bbb981ea6745fab4661db4f1db41063fe73bc147cd33276c60e4a0fa
+  metadata.gz: 0776a19c84f8d1791b89c6cc989077bda261fa7208444838f0486365e0af0287
+  data.tar.gz: 84d8a9286f34e501de1521184e3f6ddc12d05df401174d87e29ab20454cec604
 SHA512:
-  metadata.gz: c306baa43850bc77ebd33a2c1717f1aaac63ca0c98b538da28cb8ca064e0ed475b0c2e866fee5b47700a49009c085621c5b21f1b989041028e0a481112092590
-  data.tar.gz: c75ede02ecff59c9e18a85116247eb3bae95c594940f8fedec457434a8f9c9dc9690667d1be103cb4abf03b18c483997a9f0fe4b6adbbb3f3e19c644ad9e66e2
+  metadata.gz: b1b7592c0cfbc97a80aa987caa9dd4eff7294eb3c7105e10e69f057955ea854f27f8cf59b544316f3991fef2ce91634c889f6c91a9258d4a67f3a6310ad9d445
+  data.tar.gz: ae289f220cd1421f033811e2df11c2a4333e3af067a5dd53af56f0998f4bad0e984592d1f9447253827729a4b9b245439b0707cf872f99840e21c13bf320b589

data/PUBLISH.md

@@ -9,7 +9,7 @@ bundle install
 ```
 gem build saro-dat.gemspec
 gem signin
-gem push saro-dat-4.3.0.gem
+gem push saro-dat-4.3.2.gem
 ```
 
 ## install

data/lib/saro/dat/crypto.rb

@@ -7,11 +7,11 @@ require_relative 'util'
 module Saro
   module Dat
     class DatCryptoAlgorithm
-      AES128GCMN = "IV-AES128-GCM"
-      AES256GCMN = "IV-AES256-GCM"
+      IV_AES128_GCM = "IV-AES128-GCM"
+      IV_AES256_GCM = "IV-AES256-GCM"
 
       def self.all
-        [AES128GCMN, AES256GCMN]
+        [IV_AES128_GCM, IV_AES256_GCM]
       end
     end
 

data/lib/saro/dat/dat_cms_manager.rb

@@ -0,0 +1,192 @@
+# frozen_string_literal: true
+
+require 'net/http'
+require 'uri'
+require 'logger'
+require 'thread'
+require_relative 'dat_manager'
+require_relative 'dat'
+
+module Saro
+  module Dat
+    class DatCmsManager
+      DAT_CMS_API_VERSION = "v1"
+
+      def initialize(uri:, token:, interval_seconds: 60, verify_only: false, dat_manager: nil)
+        @uri = uri
+        @token = token
+        @interval_seconds = interval_seconds
+        @verify_only = verify_only
+        @manager = dat_manager || DatManager.new
+        @version = 0
+        @lock = Mutex.new
+        @stopped = false
+        @logger = Logger.new($stdout)
+        @logger.level = Logger::DEBUG
+
+        sync
+
+        if @interval_seconds > 0
+          schedule_sync
+        end
+      end
+
+      def stop
+        @lock.synchronize do
+          @stopped = true
+          @thread&.kill # 혹은 다른 방식으로 스레드 중지
+        end
+      end
+
+      def sync
+        # non-blocking lock
+        unless @lock.try_lock
+          @logger.warn("Last request ignored (Duplicate request)")
+          return
+        end
+
+        begin
+          url = URI("#{@uri}?version=#{@version}")
+          request = Net::HTTP::Get.new(url)
+          request["Authorization"] = @token
+
+          response = Net::HTTP.start(url.host, url.port, use_ssl: url.scheme == 'https', open_timeout: 10, read_timeout: 10) do |http|
+            http.request(request)
+          end
+
+          if response.code != "200"
+            @logger.error("Response status error, status:#{response.code} in #{url}")
+            return
+          end
+
+          body = response.body
+          if body.nil? || body.empty?
+            @logger.debug("No new certificate: #{url}")
+            return
+          end
+
+          lines = body.split("\n", 2)
+          if lines.length < 2
+            if body.start_with?("\n")
+              @logger.error("Invalid response: #{url}")
+              return
+            end
+            @logger.debug("No new certificate: #{url}")
+            return
+          end
+
+          new_version_str = lines[0].strip
+          new_certificates = lines[1].strip
+
+          if new_version_str.empty?
+            @logger.error("Invalid version in response: #{url}")
+            return
+          end
+
+          begin
+            new_version = Integer(new_version_str)
+            renew_count = @manager.imports(new_certificates, clear: false)
+            @version = new_version
+            @logger.debug("Renewed #{renew_count} certificates for version #{new_version}: #{url}")
+          rescue ArgumentError => e
+            @logger.error("Failed to parse version or certificates: #{e.message}")
+          end
+
+        rescue StandardError => e
+          @logger.error("[Exception] DAT CMS Sync #{@uri}: #{e.message}")
+        ensure
+          @lock.unlock
+        end
+      end
+
+      def get_manager
+        @manager
+      end
+
+      def issue(plain, secure)
+        @manager.issue(plain, secure)
+      end
+
+      def parse(dat)
+        @manager.parse(dat)
+      end
+
+      def self.builder
+        DatCmsManagerBuilder.new
+      end
+
+      private
+
+      def schedule_sync
+        @thread = Thread.new do
+          loop do
+            sleep(@interval_seconds)
+            break if @stopped
+            run_sync_task
+          end
+        end
+      end
+
+      def run_sync_task
+        sync
+      rescue StandardError => e
+        @logger.error("Error in sync task: #{e.message}")
+      end
+    end
+
+    class DatCmsManagerBuilder
+      def initialize
+        @uri = "http://localhost:8088"
+        @token = ""
+        @verify_only = false
+        @interval_seconds = 60
+      end
+
+      def uri(uri)
+        @uri = uri.delete_suffix('/')
+        self
+      end
+
+      def token(token)
+        @token = token
+        self
+      end
+
+      def verify_only(verify_only)
+        @verify_only = verify_only
+        self
+      end
+
+      def interval_seconds(interval_seconds)
+        @interval_seconds = interval_seconds
+        self
+      end
+
+      def interval_off
+        @interval_seconds = 0
+        self
+      end
+
+      def build
+        parsed = URI.parse(@uri)
+        
+        if parsed.path && parsed.path != '' && parsed.path != '/'
+          raise ArgumentError, "uri must be path-less: #{@uri}"
+        end
+        if parsed.query
+          raise ArgumentError, "uri must be query-less: #{@uri}"
+        end
+
+        path = @verify_only ? "/v1/certs/verify-only" : "/v1/certs"
+        final_uri = "#{parsed.scheme}://#{parsed.host}:#{parsed.port}#{path}"
+
+        DatCmsManager.new(
+          uri: final_uri,
+          token: @token,
+          interval_seconds: @interval_seconds,
+          verify_only: @verify_only
+        )
+      end
+    end
+  end
+end

data/lib/saro/dat/signature.rb

@@ -9,12 +9,12 @@ module Saro
       HMAC_SHA256_MFS = "HMAC-SHA256-MFS"
       HMAC_SHA384_MFS = "HMAC-SHA384-MFS"
       HMAC_SHA512_MFS = "HMAC-SHA512-MFS"
-      P256 = "ECDSA-P256"
-      P384 = "ECDSA-P384"
-      P521 = "ECDSA-P521"
+      ECDSA_P256 = "ECDSA-P256"
+      ECDSA_P384 = "ECDSA-P384"
+      ECDSA_P521 = "ECDSA-P521"
 
       def self.all
-        [HMAC_SHA256_MFS, HMAC_SHA384_MFS, HMAC_SHA512_MFS, P256, P384, P521]
+        [HMAC_SHA256_MFS, HMAC_SHA384_MFS, HMAC_SHA512_MFS, ECDSA_P256, ECDSA_P384, ECDSA_P521]
       end
     end
 

data/lib/saro-dat.rb

@@ -6,7 +6,7 @@ require_relative 'saro/dat/signature'
 require_relative 'saro/dat/dat_certificate'
 require_relative 'saro/dat/dat'
 require_relative 'saro/dat/dat_manager'
-require_relative 'saro/dat/cms_manager'
+require_relative 'saro/dat/dat_cms_manager'
 
 module Saro
   module Dat

data/saro-dat.gemspec

@@ -2,7 +2,7 @@
 
 Gem::Specification.new do |spec|
   spec.name          = "saro-dat"
-  spec.version       = "4.3.0"
+  spec.version       = "4.3.2"
   spec.authors       = ["marker"]
   spec.email         = ["j@saro.me"]
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: saro-dat
 version: !ruby/object:Gem::Version
-  version: 4.3.0
+  version: 4.3.2
 platform: ruby
 authors:
 - marker
@@ -127,6 +127,7 @@ files:
 - lib/saro/dat/crypto.rb
 - lib/saro/dat/dat.rb
 - lib/saro/dat/dat_certificate.rb
+- lib/saro/dat/dat_cms_manager.rb
 - lib/saro/dat/dat_manager.rb
 - lib/saro/dat/signature.rb
 - lib/saro/dat/util.rb