saro-dat 4.3.0 → 4.3.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1bc8964419d2aa39030dbec0e990d8a22d1fa29a8f8eec15235f69e70fa81054
-  data.tar.gz: e2fb45d1bbb981ea6745fab4661db4f1db41063fe73bc147cd33276c60e4a0fa
+  metadata.gz: 56415a92654a73befef882b2ca36674095155444492b8e8c8db99ebb4c3cd7cb
+  data.tar.gz: 670ad624aa1372b2d33f1bae79b877b462970ec20e4a40d1419dd12b3fceb27a
 SHA512:
-  metadata.gz: c306baa43850bc77ebd33a2c1717f1aaac63ca0c98b538da28cb8ca064e0ed475b0c2e866fee5b47700a49009c085621c5b21f1b989041028e0a481112092590
-  data.tar.gz: c75ede02ecff59c9e18a85116247eb3bae95c594940f8fedec457434a8f9c9dc9690667d1be103cb4abf03b18c483997a9f0fe4b6adbbb3f3e19c644ad9e66e2
+  metadata.gz: '087cad97ce30b7d51e1e0ebed1c30749fd33c59e5cb7ccad1d197e21502f0d5e341fb713f937cd8315b0a56e5d94e1170a061d1967ce8778ec2e926ac7535b19'
+  data.tar.gz: a1c460e69d89564b6628d4b264d9f523133c350f0769caae6dff8b401822be8de59223889d9baf8cf7ed535acf15f1698852d60cc2e40da04a26dec4b587d7a4

data/lib/saro/dat/dat_cms_manager.rb

@@ -0,0 +1,187 @@
+# frozen_string_literal: true
+
+require 'net/http'
+require 'uri'
+require 'logger'
+require 'thread'
+require_relative 'dat_manager'
+require_relative 'dat'
+
+module Saro
+  module Dat
+    class DatCmsManager
+      DAT_CMS_API_VERSION = "v1"
+
+      def initialize(uri:, token:, interval_seconds: 60, verify_only: false, dat_manager: nil)
+        @uri = uri
+        @token = token
+        @interval_seconds = interval_seconds
+        @verify_only = verify_only
+        @manager = dat_manager || DatManager.new
+        @version = 0
+        @lock = Mutex.new
+        @stopped = false
+        @logger = Logger.new($stdout)
+        @logger.level = Logger::DEBUG
+
+        sync
+
+        if @interval_seconds > 0
+          schedule_sync
+        end
+      end
+
+      def stop
+        @lock.synchronize do
+          @stopped = true
+          @thread&.kill # 혹은 다른 방식으로 스레드 중지
+        end
+      end
+
+      def sync
+        # non-blocking lock
+        unless @lock.try_lock
+          @logger.warn("Last request ignored (Duplicate request)")
+          return
+        end
+
+        begin
+          url = URI("#{@uri}?version=#{@version}")
+          request = Net::HTTP::Get.new(url)
+          request["Authorization"] = @token
+
+          response = Net::HTTP.start(url.host, url.port, use_ssl: url.scheme == 'https', open_timeout: 10, read_timeout: 10) do |http|
+            http.request(request)
+          end
+
+          if response.code != "200"
+            @logger.error("Response status error, status:#{response.code} in #{url}")
+            return
+          end
+
+          body = response.body
+          if body.nil? || body.empty?
+            @logger.debug("No new certificate: #{url}")
+            return
+          end
+
+          lines = body.split("\n", 2)
+          if lines.length < 2
+            if body.start_with?("\n")
+              @logger.error("Invalid response: #{url}")
+              return
+            end
+            @logger.debug("No new certificate: #{url}")
+            return
+          end
+
+          new_version_str = lines[0].strip
+          new_certificates = lines[1].strip
+
+          if new_version_str.empty?
+            @logger.error("Invalid version in response: #{url}")
+            return
+          end
+
+          begin
+            new_version = Integer(new_version_str)
+            renew_count = @manager.imports(new_certificates, clear: false)
+            @version = new_version
+            @logger.debug("Renewed #{renew_count} certificates for version #{new_version}: #{url}")
+          rescue ArgumentError => e
+            @logger.error("Failed to parse version or certificates: #{e.message}")
+          end
+
+        rescue StandardError => e
+          @logger.error("[Exception] DAT CMS Sync #{@uri}: #{e.message}")
+        ensure
+          @lock.unlock
+        end
+      end
+
+      def get_manager
+        @manager
+      end
+
+      def issue(plain, secure)
+        @manager.issue(plain, secure)
+      end
+
+      def parse(dat)
+        @manager.parse(dat)
+      end
+
+      def self.builder
+        DatCmsManagerBuilder.new
+      end
+
+      private
+
+      def schedule_sync
+        @thread = Thread.new do
+          loop do
+            sleep(@interval_seconds)
+            break if @stopped
+            run_sync_task
+          end
+        end
+      end
+
+      def run_sync_task
+        sync
+      rescue StandardError => e
+        @logger.error("Error in sync task: #{e.message}")
+      end
+    end
+
+    class DatCmsManagerBuilder
+      def initialize
+        @uri = "http://localhost:8088"
+        @token = ""
+        @verify_only = false
+        @interval_seconds = 60
+      end
+
+      def uri(uri)
+        @uri = uri.delete_suffix('/')
+        self
+      end
+
+      def token(token)
+        @token = token
+        self
+      end
+
+      def verify_only(verify_only)
+        @verify_only = verify_only
+        self
+      end
+
+      def interval_seconds(interval_seconds)
+        @interval_seconds = interval_seconds
+        self
+      end
+
+      def build
+        parsed = URI.parse(@uri)
+        
+        if parsed.path && parsed.path != '' && parsed.path != '/'
+          raise ArgumentError, "uri must be path-less: #{@uri}"
+        end
+        if parsed.query
+          raise ArgumentError, "uri must be query-less: #{@uri}"
+        end
+
+        path = @verify_only ? "/v1/certs/verify-only" : "/v1/certs"
+        final_uri = "#{parsed.scheme}://#{parsed.host}:#{parsed.port}#{path}"
+
+        DatCmsManager.new(
+          uri: final_uri,
+          token: @token,
+          interval_seconds: @interval_seconds,
+          verify_only: @verify_only
+        )
+      end
+    end
+  end
+end

data/lib/saro-dat.rb

@@ -6,7 +6,7 @@ require_relative 'saro/dat/signature'
 require_relative 'saro/dat/dat_certificate'
 require_relative 'saro/dat/dat'
 require_relative 'saro/dat/dat_manager'
-require_relative 'saro/dat/cms_manager'
+require_relative 'saro/dat/dat_cms_manager'
 
 module Saro
   module Dat

data/saro-dat.gemspec

@@ -2,7 +2,7 @@
 
 Gem::Specification.new do |spec|
   spec.name          = "saro-dat"
-  spec.version       = "4.3.0"
+  spec.version       = "4.3.1"
   spec.authors       = ["marker"]
   spec.email         = ["j@saro.me"]
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: saro-dat
 version: !ruby/object:Gem::Version
-  version: 4.3.0
+  version: 4.3.1
 platform: ruby
 authors:
 - marker
@@ -127,6 +127,7 @@ files:
 - lib/saro/dat/crypto.rb
 - lib/saro/dat/dat.rb
 - lib/saro/dat/dat_certificate.rb
+- lib/saro/dat/dat_cms_manager.rb
 - lib/saro/dat/dat_manager.rb
 - lib/saro/dat/signature.rb
 - lib/saro/dat/util.rb