ssl_gate 0.0.1 → 0.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 6249ae8b79002d80de3d5710270887c8894834db
-  data.tar.gz: f3c9e97ddc513d3ebc72306f8c1ab5cca7c32ec6
+  metadata.gz: 92b578960bbd25e7058bad491b83f7bb026767dc
+  data.tar.gz: ac7839bd28394bc60cc02a9151bf5cc04c14b02e
 SHA512:
-  metadata.gz: 469ccb88950f8402c3d01576e19a02ab7ba720a47177e15c4337a97239c0d8001f407103bce7d8c6c4a819fd03237e2418219659dde972c2e1db514baab7ba8a
-  data.tar.gz: 9d6feea10dc30a8985f36293e314e7a44de9a147cc4c33774c17b1beace980bc36e65186d13c26efe5e68d196d3c2826067d972f62199560da49c1319859906f
+  metadata.gz: 509edb533cbc2136467d5da93879ddebec7c65b43aff437813c2d7d433abe2650fcf1501b8c66e13ad3c1c90c3780a13770d45ca3369791ae107f000bbe40efa
+  data.tar.gz: 5e72450a05d0da8abfba09ce1f36d3f1ffd67d280ca2459e4bab9eeebd5a39cce3d5b83a2a3022458f788d03fc897153eb3f5a483c1e86d902112308b290f260

data/lib/ssl_gate.rb

@@ -24,10 +24,9 @@ module SSLGate
 
   def self.factory(config)
     config.each do |key, conf|
-      case key.to_s
-      when 'http' then HTTPServerAll.start conf
-      when 'tcp' then RawServerAll.start conf
-      else STDERR.puts "Unknown gate type: #{key}"
+      case conf[:target]
+      when /http/ then HTTPServerAll.start conf
+      else RawServerAll.start conf
       end
     end
   end

data/test/ssl/ca.crt

@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----
+MIIDizCCAnOgAwIBAgIJAKR1jigaAG1WMA0GCSqGSIb3DQEBCwUAMFwxCzAJBgNV
+BAYTAlVTMQ8wDQYDVQQIDAZEZW5pYWwxFDASBgNVBAcMC1NwcmluZ2ZpZWxkMQww
+CgYDVQQKDANEaXMxGDAWBgNVBAMMD3d3dy5leGFtcGxlLmNvbTAeFw0xODA1MDEx
+NDA5MzJaFw0zMjAxMDgxNDA5MzJaMFwxCzAJBgNVBAYTAlVTMQ8wDQYDVQQIDAZE
+ZW5pYWwxFDASBgNVBAcMC1NwcmluZ2ZpZWxkMQwwCgYDVQQKDANEaXMxGDAWBgNV
+BAMMD3d3dy5leGFtcGxlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
+ggEBAMdxdQZ22zn15rmU6Q9ecddbW0FMqbC2wh73fx4HWzWvsSbeK2b13TD+o1xT
+tMI5IxUcQz2izGlSWOk6OHIywOn/IVqrN8saTQIjw8MXEm75/W1JRKt5A0CBiZms
+BRg/PaMt1kfBJCGRoYBfPKYspmTgV2Hb2YNV17T1hs8TbXWVXoXis3NroUB2n++A
+t/dcuBlhhVzn8t1DO49faaqM1E0y6U0HDDl7GgGvHaTvI6NkSS5WI+jsTCzVeUwP
+hA2ORNlcVliBNA01hCO1ptMYh5LxtVPoyZbI+193YEpyL0gxPtI7mvUl99Cu/glS
+xfJO2qk+aP3PtPtd0vztufptZXMCAwEAAaNQME4wHQYDVR0OBBYEFE9Aie+rbHtf
+oPfHgnnuaidpQQJ9MB8GA1UdIwQYMBaAFE9Aie+rbHtfoPfHgnnuaidpQQJ9MAwG
+A1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAJeT/NA/YPw55Glp1eYJnpTI
+KG37PCeiiGb0kHf5b1Mldzl3FvOIX7Pgg/vO4j9WjU7wThV/xjrBx6+swAjhhHR8
+Yt5YlBFYns+w2dCDTiW8ZnAyKU4Nemj+ioOwQFm1qwKhfoZhQLLs0/sOPHrx0w2s
+dUiPioJ3P7Lnvpasrns9pJsyIbtcSueAimz9CHYOTGKh1IBDvSg7RQ0vW0wcPD6i
+LjCy2YMnHDPMbUl+TbI0fLKT5VMRGgn+vUC/k1Dj4w54gweVBcSl5tnf0u5tRErX
+PIS9c5ys/KE5oKntyOViny4nxAA1/Xenezgt9TK7HVhV7rRJc5olW/jfOX4htZ0=
+-----END CERTIFICATE-----

data/test/ssl/ca.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

data/test/ssl/make_ca.sh

@@ -0,0 +1,18 @@
+#!/bin/bash
+cd "$(dirname "$0")"
+
+#Generage CA (self-signed)
+openssl req -x509 -nodes -days 5000 -newkey rsa:2048 -keyout ca.key -out ca.crt -subj "/C=US/ST=Denial/L=Springfield/O=Dis/CN=www.example.com"
+
+
+#Debug dump
+openssl x509 -in ca.crt -noout -text >ca.txt
+openssl x509 -noout -fingerprint -in ca.crt >> ca.txt
+
+openssl verify -verbose -CAfile ca.crt ca.crt
+
+
+#Calculate SKI (Subject Key Identifier)
+openssl x509  -noout -in ca.crt -pubkey  | openssl asn1parse  -strparse 19 -out ca.pub.tmp 1>/dev/null
+openssl dgst -c -sha1 ca.pub.tmp
+rm *.tmp

data/test/ssl/make_server.sh

@@ -0,0 +1,17 @@
+#!/bin/bash
+cd "$(dirname "$0")"
+#ALTNAME="DNS:<host1>,DNS:<host2>"
+
+#Generate certificate
+openssl genrsa -out server.key 2048
+
+
+openssl req -new -key server.key -out server.csr -subj "/O=Group/OU=Youtest/CN=localhost"
+
+openssl x509 -req -extfile v3.ext -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out server.crt -days 3650\
+    -extfile <(cat ./v3.ext <(printf "\nsubjectAltName=IP:127.0.0.1,DNS:127.0.0.1"))
+
+#Debug dump
+openssl req -in server.csr -text -noout >server.csr.txt
+openssl x509 -in server.crt -noout -text >server.crt.txt
+openssl verify -verbose -CAfile ca.crt server.crt

data/test/ssl/server.crt

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

data/test/ssl/server.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

data/test/test.rb

@@ -0,0 +1,36 @@
+require 'thin'
+require 'em-http'
+require 'json'
+
+require_relative '../lib/ssl_gate'
+
+config = {
+  bind_port: 9001,
+  target: 'http://localhost:9000',
+  private_key_file: File.dirname(__FILE__) + '/ssl/server.key',
+  cert_chain_file: File.dirname(__FILE__) + '/ssl/server.crt'
+}
+
+EventMachine.run do
+  Signal.trap('INT')  { EM.stop if EM.reactor_running? }
+  Signal.trap('TERM') { EM.stop if EM.reactor_running? }
+
+  Thin::Server.start('0.0.0.0', 9000, signals: false) do
+    run lambda { |env| [200, { 'Content-Type' => 'application/javascript' }, [env.to_json]] }
+  end
+
+  SSLGate::HTTPServerAll.start config
+
+  EM.add_timer(1) do
+    10.times do
+      http = EM::HttpRequest.new('https://localhost:9001/path1?p1=v1&p2=v2').get
+      http.callback {
+        puts "#{http.response_header.status} - #{http.response.length} bytes\n"
+        puts http.response
+      }
+      http.errback { puts http.error }
+    end
+  end
+
+  EM.add_timer(3) { EM.stop }
+end

data/test/test_raw.rb

@@ -0,0 +1,37 @@
+require_relative '../lib/ssl_gate'
+
+config = {
+  bind_port: 9001,
+  target: 'tcp://localhost:9000',
+  private_key_file: File.dirname(__FILE__) + '/ssl/server.key',
+  cert_chain_file: File.dirname(__FILE__) + '/ssl/server.crt'
+}
+
+EventMachine.run do
+  Signal.trap('INT')  { EM.stop if EM.reactor_running? }
+  Signal.trap('TERM') { EM.stop if EM.reactor_running? }
+
+  EM.start_server '0.0.0.0', 9000 do |srv|
+    def srv.receive_data(data)
+      send_data ">>> you sent: #{data}"
+    end
+  end
+
+  SSLGate::RawServerAll.start config
+
+  EM.add_timer(1) do
+    10.times do
+      EventMachine.connect '127.0.0.1', 9001 do |c|
+        c.start_tls
+        def c.ssl_handshake_completed
+          send_data 'Hello'
+        end
+        def c.receive_data(data)
+          p data
+        end
+      end
+    end
+  end
+
+  EM.add_timer(3) { EM.stop }
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: ssl_gate
 version: !ruby/object:Gem::Version
-  version: 0.0.1
+  version: 0.0.2
 platform: ruby
 authors:
 - Artyom B
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-03-28 00:00:00.000000000 Z
+date: 2018-05-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: em-http-request
@@ -82,10 +82,19 @@ files:
 - lib/ssl_gate/raw_gate.rb
 - lib/ssl_gate/raw_ssl.rb
 - lib/ssl_gate/runner.rb
-homepage: http://rubygems.org/gems/ssl_gate
+- test/ssl/ca.crt
+- test/ssl/ca.key
+- test/ssl/make_ca.sh
+- test/ssl/make_server.sh
+- test/ssl/server.crt
+- test/ssl/server.key
+- test/test.rb
+- test/test_raw.rb
+homepage: https://rubygems.org/gems/ssl_gate
 licenses:
 - Nonstandard
-metadata: {}
+metadata:
+  source_code_uri: https://github.com/artyomb/ssl_gate
 post_install_message: 
 rdoc_options: []
 require_paths: