simple_ca 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: 19dc15dcd4112eac0a41c569d0993eac972f5c6b
+  data.tar.gz: f40feea3092c39879fce3a53b348178eb1ffbcdd
+SHA512:
+  metadata.gz: 5dcb2e61c13ced6063e4850fffb74c554af341f2f9bc007c653be68dcbd1878601d5c33661473d6b045ac620e32d278c79d7f3a47b60434d240e6bd62108b715
+  data.tar.gz: 9dc2ec22c117dfb087e8742fabdfe9321fe90fdad39b28d3ec5ef4e1dc88d087f6b17e0338453715dd32ad2109d5118a3f32016b543ad306b1d19a07774887b8

data/.gitignore

@@ -0,0 +1,2 @@
+coverage
+*.gem

data/.rspec

@@ -0,0 +1,2 @@
+--color
+--require spec_helper

data/.rubocop.yml

@@ -0,0 +1,21 @@
+Style/StringLiterals:
+  EnforcedStyle: double_quotes
+Style/TrailingComma:
+  EnforcedStyleForMultiline: comma
+Documentation:
+  Enabled: false
+Metrics/LineLength:
+  Max: 120
+Style/SpaceInsideBlockBraces:
+  SpaceBeforeBlockParameters: false
+Style/MethodDefParentheses:
+  EnforcedStyle: require_no_parentheses
+Style/PredicateName:
+  NamePrefixBlacklist:
+    - is_
+Style/AndOr:
+  EnforcedStyle: conditionals
+Style/SpaceInsideHashLiteralBraces:
+  EnforcedStyle: no_space
+Style/BlockDelimiters:
+  EnforcedStyle: semantic

data/.ruby-version

@@ -0,0 +1 @@
+2.0.0-p647

data/.travis.yml

@@ -0,0 +1,20 @@
+language: ruby
+branches:
+  only:
+    - master
+    - /^v[0-9]+\.[0-9]+\.[0-9]+/
+rvm:
+- ruby-head
+- jruby-1.7.19
+- 2.0.0
+script:
+- bundle exec rake
+deploy:
+  provider: rubygems
+  api_key:
+    secure: clYHhpfYieW4ZMPlDwhdsxZAaca6Ltg8fSDtmQcNly40+fOhAhBnR+VFX6VODX3jx0Jv0MlIZRqWn4V9LVERaEMvKwSL2qNnk2sdMe9Kbh+lXD4auCjgHhFKXN6dzUfXmJYKzjuUaMtK4m7aBLKnm2JLm3omUa4c0Yrnj3qS/to=
+  on:
+    tags: true
+    all_branches: true
+    repo: tpbowden/simple_ca
+    rvm: 2.0.0

data/Gemfile

@@ -0,0 +1,3 @@
+source "https://rubygems.org"
+
+gemspec

data/Gemfile.lock

@@ -0,0 +1,59 @@
+PATH
+  remote: .
+  specs:
+    simple_ca (0.0.1)
+
+GEM
+  remote: https://rubygems.org/
+  specs:
+    ast (2.1.0)
+    astrolabe (1.3.1)
+      parser (~> 2.2)
+    diff-lcs (1.2.5)
+    docile (1.1.5)
+    json (1.8.3)
+    parser (2.2.3.0)
+      ast (>= 1.1, < 3.0)
+    powerpack (0.1.1)
+    rainbow (2.0.0)
+    rake (10.4.2)
+    rspec (3.4.0)
+      rspec-core (~> 3.4.0)
+      rspec-expectations (~> 3.4.0)
+      rspec-mocks (~> 3.4.0)
+    rspec-core (3.4.1)
+      rspec-support (~> 3.4.0)
+    rspec-expectations (3.4.0)
+      diff-lcs (>= 1.2.0, < 2.0)
+      rspec-support (~> 3.4.0)
+    rspec-mocks (3.4.0)
+      diff-lcs (>= 1.2.0, < 2.0)
+      rspec-support (~> 3.4.0)
+    rspec-support (3.4.1)
+    rubocop (0.35.1)
+      astrolabe (~> 1.3)
+      parser (>= 2.2.3.0, < 3.0)
+      powerpack (~> 0.1)
+      rainbow (>= 1.99.1, < 3.0)
+      ruby-progressbar (~> 1.7)
+      tins (<= 1.6.0)
+    ruby-progressbar (1.7.5)
+    simplecov (0.11.1)
+      docile (~> 1.1.0)
+      json (~> 1.8)
+      simplecov-html (~> 0.10.0)
+    simplecov-html (0.10.0)
+    tins (1.6.0)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  rake (>= 10.4)
+  rspec (>= 3.4)
+  rubocop (>= 0.35)
+  simple_ca!
+  simplecov (>= 0.11)
+
+BUNDLED WITH
+   1.11.1

data/README.md

@@ -0,0 +1,26 @@
+# SimpleCA
+Generate and sign SSL Certificate with your very own CA
+
+Installation
+------------
+
+    gem install simple_ca
+    
+or if you're using Bundler
+
+    gem "simple_ca"
+    
+Usage
+=====
+
+First of all you need a root certificate (OpenSSL::X509::Certificate) and a private key (OpenSSL::PKey::RSA)
+
+    require "simple_ca"
+    
+    ca = SimpleCA::CA.new(root_certificate, private_key)
+    
+To sign a CSR (OpenSSL::X509::Request):
+
+    ca.sign_csr(csr) # => OpenSSL::X509::Certificate
+    
+    

data/Rakefile

@@ -0,0 +1 @@
+Dir[File.expand_path("../tasks/**/*.rake", __FILE__)].each {|f| load f }

data/lib/simple_ca.rb

@@ -0,0 +1 @@
+require "simple_ca/ca"

data/lib/simple_ca/ca.rb

@@ -0,0 +1,14 @@
+require "simple_ca/sign_csr"
+
+module SimpleCA
+  class CA
+    def initialize root, key
+      @root = root
+      @key = key
+    end
+
+    def sign_csr csr
+      SimpleCA::SignCSR.new(@root, @key).call csr
+    end
+  end
+end

data/lib/simple_ca/sign_csr.rb

@@ -0,0 +1,27 @@
+module SimpleCA
+  class SignCSR
+    THREE_YEARS = 365.25 * 24 * 60 * 60
+
+    def initialize root, key
+      @root = root
+      @key = key
+    end
+
+    def call csr
+      sign_cert(OpenSSL::X509::Certificate.new, csr)
+    end
+
+    private
+
+    def sign_cert crt, request
+      crt.serial = 0
+      crt.version = 2
+      crt.not_before = Time.now
+      crt.not_after = Time.now + THREE_YEARS
+      crt.subject = request.subject
+      crt.public_key = request.public_key
+      crt.issuer = @root.subject
+      crt.sign @key, OpenSSL::Digest::SHA256.new
+    end
+  end
+end

data/lib/simple_ca/version.rb

@@ -0,0 +1,3 @@
+module SimpleCA
+  VERSION = "0.0.1"
+end

data/simple_ca.gemspec

@@ -0,0 +1,21 @@
+$LOAD_PATH.unshift File.expand_path("../lib", __FILE__)
+require "simple_ca/version"
+
+Gem::Specification.new do |s|
+  s.name = "simple_ca"
+  s.version = SimpleCA::VERSION
+  s.date = "2015-12-12"
+  s.summary = "Simplified certiticate signing"
+  s.description = "Sign and generate SSL certificates with ease"
+  s.authors = ["Tom Bowden"]
+  s.files = `git ls-files`.split($RS)
+  s.email = "tom.b1992@gmail.com"
+  s.homepage = "http://github.com/tpbowden/simple_ca"
+  s.license = "MIT"
+  s.required_ruby_version = ">= 2.0.0"
+
+  s.add_development_dependency "rake", ">= 10.4"
+  s.add_development_dependency "rubocop", ">= 0.35"
+  s.add_development_dependency "rspec", ">= 3.4"
+  s.add_development_dependency "simplecov", ">= 0.11"
+end

data/spec/simple_ca/ca_spec.rb

@@ -0,0 +1,23 @@
+require "spec_helper"
+require "simple_ca/ca"
+
+describe SimpleCA::CA do
+  describe "#sign_csr" do
+    let(:cert) { double :certificate }
+    let(:root) { double :root }
+    let(:key) { double :key }
+    let(:signer) { double :signer }
+    let(:csr) { double :csr }
+
+    subject { described_class.new(root, key) }
+
+    before do
+      allow(SimpleCA::SignCSR).to receive(:new).with(root, key) { signer }
+      allow(signer).to receive(:call).with(csr) { cert }
+    end
+
+    it "generates a certificate from the CSR" do
+      expect(subject.sign_csr csr).to eq cert
+    end
+  end
+end

data/spec/simple_ca/sign_csr_spec.rb

@@ -0,0 +1,22 @@
+require "spec_helper"
+require "simple_ca/sign_csr"
+
+describe SimpleCA::SignCSR do
+  describe "#call" do
+    let(:key) { OpenSSL::PKey::RSA.new(File.read "spec/support/fixtures/root.key") }
+    let(:root) { OpenSSL::X509::Certificate.new(File.read "spec/support/fixtures/root.crt") }
+    subject { described_class.new(root, key) }
+
+    context "when the CSR is valid" do
+      let(:csr) { OpenSSL::X509::Request.new(File.read "spec/support/fixtures/test.csr") }
+
+      it "returns a certificate signed by the key" do
+        expect(subject.call csr).to be_a_certificate_signed_by(key)
+      end
+
+      it "sets the issuer to the root certificate" do
+        expect(subject.call(csr).issuer).to eq root.subject
+      end
+    end
+  end
+end

data/spec/spec_helper.rb

@@ -0,0 +1,4 @@
+require "simplecov"
+SimpleCov.start
+
+Dir[File.expand_path("../support/**/*.rb", __FILE__)].each {|f| load f }

data/spec/support/certificate_matchers.rb

@@ -0,0 +1,6 @@
+RSpec::Matchers.define :be_a_certificate_signed_by do |key|
+  match do |actual|
+    return false unless actual.instance_of? OpenSSL::X509::Certificate
+    actual.verify(key)
+  end
+end

data/spec/support/fixtures/root.crt

@@ -0,0 +1,23 @@
+-----BEGIN CERTIFICATE-----
+MIID4DCCAsigAwIBAgIJALq0rtPQ6ut+MA0GCSqGSIb3DQEBBQUAMFMxCzAJBgNV
+BAYTAkFCMRIwEAYDVQQIEwlTb21ld2hlcmUxDTALBgNVBAcTBENJcnQxITAfBgNV
+BAoTGEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZDAeFw0xNTEyMDYxOTI1MDVaFw0x
+NjEyMDUxOTI1MDVaMFMxCzAJBgNVBAYTAkFCMRIwEAYDVQQIEwlTb21ld2hlcmUx
+DTALBgNVBAcTBENJcnQxITAfBgNVBAoTGEludGVybmV0IFdpZGdpdHMgUHR5IEx0
+ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALvJ46a/qKq+nlyCmjYU
+E0R0ZNOMQfRGDSMbbXY0U1MiNo2oEIcCdVHUnt5rJNiTysFvE63DKr+b8OTmZo7N
+RbzGG39P/CbTdRyf3DwG8vTwvTwKUQ/5OLWQ+ELOXwFqb3zYdy/FkSyyYMb11irh
+24vs1Qml/pEurOKW9/5IZY0UjMeCclyMF3ZJqTqoEYWBzP1v12cGHNUuub8kVgmG
+gpgITtwdO9Wgulgw1p37lUJWYB1LfkPH9M3AsAZBFCl4FhDJHdpE0pyj4o4PXFXo
+dSSA1xW2YQ5/4HqwdTPM+vRH9vMrmIt1ty8F+QlTcEbxlyv8e/f6M+vANC99D/g2
+JhUCAwEAAaOBtjCBszAdBgNVHQ4EFgQUs6LYjWb7gyd17sI/lICZpmgRoiEwgYMG
+A1UdIwR8MHqAFLOi2I1m+4Mnde7CP5SAmaZoEaIhoVekVTBTMQswCQYDVQQGEwJB
+QjESMBAGA1UECBMJU29tZXdoZXJlMQ0wCwYDVQQHEwRDSXJ0MSEwHwYDVQQKExhJ
+bnRlcm5ldCBXaWRnaXRzIFB0eSBMdGSCCQC6tK7T0OrrfjAMBgNVHRMEBTADAQH/
+MA0GCSqGSIb3DQEBBQUAA4IBAQA2BhzhzqvwEld6WQQ51fnduuuAglcUx5xpuyiW
+g7kXmOqYX/65bTKYNYDHZ/3IuzfvBhoSbWsWS9hfI5xqwytRdazJRldGwwr5gc25
+lYvwklVh757oFdBlak7k77gstYqHjMCfwV/vH/UoVDN+sXL9dR2+4/o082eHdek4
+VIbjwPsm6OT/vArjjyP6/Of8PgO4OHxNHHnwxf9dmcU8ASrQWYYi4LdrItWB8uHi
+JuC9Kt18TSmTjmFMzkK/bC10jtfhl931oBR2qv93Qm5jEZG1mFLOCUZPUqQgxAUB
+oYdVZli9THIhGqYjsZ2gU8peNc/HnYd2RRY+UfbJIaG/F7l7
+-----END CERTIFICATE-----

data/spec/support/fixtures/root.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

data/spec/support/fixtures/test.csr

@@ -0,0 +1,17 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

data/tasks/default.rake

@@ -0,0 +1,4 @@
+task default: [
+  :rubocop,
+  :rspec,
+]

data/tasks/rspec.rake

@@ -0,0 +1,3 @@
+require "rspec/core/rake_task"
+
+RSpec::Core::RakeTask.new("rspec")

data/tasks/rubocop.rake

@@ -0,0 +1,3 @@
+require "rubocop/rake_task"
+
+RuboCop::RakeTask.new("rubocop")

metadata

@@ -0,0 +1,124 @@
+--- !ruby/object:Gem::Specification
+name: simple_ca
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- Tom Bowden
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2015-12-12 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '10.4'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '10.4'
+- !ruby/object:Gem::Dependency
+  name: rubocop
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0.35'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0.35'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '3.4'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '3.4'
+- !ruby/object:Gem::Dependency
+  name: simplecov
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0.11'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '0.11'
+description: Sign and generate SSL certificates with ease
+email: tom.b1992@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- .gitignore
+- .rspec
+- .rubocop.yml
+- .ruby-version
+- .travis.yml
+- Gemfile
+- Gemfile.lock
+- README.md
+- Rakefile
+- lib/simple_ca.rb
+- lib/simple_ca/ca.rb
+- lib/simple_ca/sign_csr.rb
+- lib/simple_ca/version.rb
+- simple_ca.gemspec
+- spec/simple_ca/ca_spec.rb
+- spec/simple_ca/sign_csr_spec.rb
+- spec/spec_helper.rb
+- spec/support/certificate_matchers.rb
+- spec/support/fixtures/root.crt
+- spec/support/fixtures/root.key
+- spec/support/fixtures/test.crt
+- spec/support/fixtures/test.csr
+- tasks/default.rake
+- tasks/rspec.rake
+- tasks/rubocop.rake
+homepage: http://github.com/tpbowden/simple_ca
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - '>='
+    - !ruby/object:Gem::Version
+      version: 2.0.0
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.5.1
+signing_key: 
+specification_version: 4
+summary: Simplified certiticate signing
+test_files: []