ssltool 0.0.19 → 0.0.20

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 00acc97c34c1f47fcc5cbf00dba1e05ecddd5a85
-  data.tar.gz: 60db4e3ed86c4565d1697843e8999f88fb47cd20
+  metadata.gz: 6fe5a7e781f83fb69dfd7ff57f6fafc215ca9276
+  data.tar.gz: e6d9ebcafbab556ecd142fd878056da8c7ebc0b4
 SHA512:
-  metadata.gz: df65ca049c8d2c6c2189e2e4126ec23eae7c525b5831acd0ad5a4ba4bdeef48e115c4e8206ddeff452f1ba463984ca9f53d927dac0090319a8a0514be3ba46a9
-  data.tar.gz: 27792d65f565ca941bb168eed1e8bd96000f5e1e5f3f6b79c0edde8a224dfc8f36b1387766680fbd383fc5c6f3c4b57e1a1469a6949f8f3a3b167e2c3ddccf24
+  metadata.gz: 670409887283d19c580840088dc852e794787341fa93f5196f9d845ff69fa5518b0b2fa1dc81c90e770f4f119001d6c1916dc77a30bc837c50d10edcb69fba8a
+  data.tar.gz: c8ca3931bd183f2132f1f1e7bdef8d291430429814e88710995f9bfd92c0849f4ebbdbe8e804ff3e506f5389a92c83356938261497e67310fcab689990a1833f

data/lib/ssltool/certificate.rb

@@ -48,6 +48,12 @@ module SSLTool
       subject.eql?(issuer)
     end
 
+    def parent?(other_cert)
+      signs?(other_cert) \
+      && subject == other_cert.issuer \
+      && subject_key_identifier == other_cert.authority_key_identifier
+    end
+
     ### properties
 
     def fingerprint
@@ -84,6 +90,14 @@ module SSLTool
       map_extension_value('keyUsage') { |s| s.split(", ").include?('Certificate Sign') }
     end
 
+    def subject_key_identifier
+      map_extension_value('subjectKeyIdentifier') { |s| s.chomp }
+    end
+
+    def authority_key_identifier
+      map_extension_value('authorityKeyIdentifier') { |s| s.sub(/^keyid:/, '').chomp }
+    end
+
     def key_size
       case public_key
       when OpenSSL::PKey::RSA ; public_key.n.num_bits
@@ -125,14 +139,14 @@ module SSLTool
     def map_extension_value(extension_name, default = nil)
       e = extensions[extension_name]
       return default if e.nil?
-      yield(e.value)
+      block_given? ? yield(e.value) : e.value
     end
 
     ### chain
 
     def chain_from(certs)
       chain  = [self]
-      parent = (certs - chain).find { |cert| cert.signs?(self) }
+      parent = (certs - chain).find { |cert| cert.parent?(self) }
       chain.concat(parent.chain_from(certs - chain)) if parent
       chain
     end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: ssltool
 version: !ruby/object:Gem::Version
-  version: 0.0.19
+  version: 0.0.20
 platform: ruby
 authors:
 - Caio Chassot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-02-24 00:00:00.000000000 Z
+date: 2016-02-25 00:00:00.000000000 Z
 dependencies: []
 description: Orders and completes SSL certificate trust chains, maintains an up-to-date
   pool of viable intermediates and trusted roots, and provides other tooling for dealing