sqreen 1.20.2 → 1.20.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 20f83c83a19022c3bfba53af705716e2d4b4d791912bf32c6e7e2853496a4b05
-  data.tar.gz: 6592f5a6c88895016924c4a342d6c1f48f885527c18fc0b182495d2905cef926
+  metadata.gz: 4bdcf1837e4c2ea45300af52682c98574d0c007703b507a469aeced98088bbda
+  data.tar.gz: df2416f673ff51cf73b4056da0148738eb0f162bc054fba7480ce2d8ca05ea49
 SHA512:
-  metadata.gz: 349fecb7524cb1740965162e596708fede99c5ab12bd5ed0a009c324e360585a15f2237c78614b666e77d5bbbf5b044a9a1ee7be8d3ce791b377cbc1ecbe15aa
-  data.tar.gz: ad4b8725a6531e80a4e47aac8c820f88284391a8f674ae59e8908846714c8b1c76be7fd95034cdf4885588f39e413308f39cc5688f6ed207558b48d0b14def5f
+  metadata.gz: bc5df95d6ddff6c1a45b469dc42a0d18b17a804d0fbeb3689361db8583ad421b3ed1a9b823ec24b88f3494f5192865bd1f4c4dfde28c61fdf15d1fa4d06603bc
+  data.tar.gz: 16980a1f0934e7f29251d0c72d751108ddf033c15f7860bd9f63a66b1ff6a5bc367f99d64faef3955015248ee16df882b44db2040f8e4aa84054a82c1ea18397

data/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 1.20.3
+
+* Fix signature check
+
 ## 1.20.2
 
 * Fix performance regression in instrumentation engine

data/lib/sqreen/version.rb

@@ -4,5 +4,5 @@
 # Please refer to our terms for more information: https://www.sqreen.com/terms.html
 
 module Sqreen
-  VERSION = '1.20.2'.freeze
+  VERSION = '1.20.3'.freeze
 end

data/lib/sqreen/weave/legacy/instrumentation.rb

@@ -8,6 +8,7 @@ require 'sqreen/graft/hook_point'
 require 'sqreen/call_countable'
 require 'sqreen/rules'
 require 'sqreen/rules/record_request_context'
+require 'sqreen/sqreen_signed_verifier'
 
 class Sqreen::Weave::Legacy::Instrumentation
   attr_accessor :metrics_engine
@@ -105,6 +106,15 @@ class Sqreen::Weave::Legacy::Instrumentation
 
     ### set up rule signature verifier
     verifier = nil
+    if Sqreen.features['rules_signature'] &&
+       Sqreen.config_get(:rules_verify_signature) == true &&
+       !defined?(::JRUBY_VERSION)
+      verifier = Sqreen::SqreenSignedVerifier.new
+      Sqreen::Weave.logger.debug('Rules signature enabled')
+    else
+      Sqreen::Weave.logger.debug('Rules signature disabled')
+    end
+
     ### force clean instrumentation callback list
     @hooks = []
     ### for each rule description

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: sqreen
 version: !ruby/object:Gem::Version
-  version: 1.20.2
+  version: 1.20.3
 platform: ruby
 authors:
 - Sqreen
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-07-23 00:00:00.000000000 Z
+date: 2020-07-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: sqreen-backport