tttls1.3 0.3.6 → 0.3.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7d8c0f0a3a4d128e45cff220f8d4e7f230e3cbfb7afc9cca1bf9192e39224a64
-  data.tar.gz: 0c10de227f96196783f95717bd141d1ede26a340525ef9af84ad0b6be1b6f6b1
+  metadata.gz: c49b7cb520966e4401900105dcf7c9c3e704a07ca13fedfa9f9669b0a60e57b0
+  data.tar.gz: 4c5753cf33a650e3442ca80a7ecd91e9b798f9e106a9515aeff298b5fcbb2ad4
 SHA512:
-  metadata.gz: 36ead69d903139ea1618cb9cd105c8638f16b5c7ea4d5b5d168c785e87db085ede486d62f6f6be5d704e660d0f2a290ba4e7d8087facdc4a4da4a284aae806a6
-  data.tar.gz: 72839111a9b18790c1dbcb8b9ac2136120317ea50f9352be7c0e676a1b7999cc789290ebb66430a1301052fd6bfba97d1b40dbc9f6e59955b595d784d380c240
+  metadata.gz: 26860cd885b413b5b09a8a93b9f928c1904eeb386e31392e47cee131beeeb70ca7d9d5487f333b347f451a9fecbac8f633351a218ebc8b1b12de71db5e56e9ab
+  data.tar.gz: 88cadeaab6f6dbfa220244fdfcf728c9ec112fbdaf7482a0cdd9d5cf797a8924e8cd3131cdeba94c0ce316847eaa80d300e275a0400e5aa0338aee56e659626e

data/.ruby-version

@@ -1 +1 @@
-4.0.0
+4.0.2

data/Gemfile

@@ -3,7 +3,7 @@
 source 'https://rubygems.org'
 
 gem 'ech_config', '~> 0.0.3'
-gem 'hpke', '~> 1.0.0'
+gem 'hpke', '~> 1', '>= 1.0.2'
 gem 'logger'
 gem 'openssl'
 

data/lib/tttls1.3/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module TTTLS13
-  VERSION = '0.3.6'
+  VERSION = '0.3.8'
 end

data/lib/tttls1.3.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require 'openssl'
+require 'pp' # rubocop:disable Lint/RedundantRequireStatement
 require 'net/http'
 require 'logger'
 

data/tttls1.3.gemspec

@@ -15,13 +15,16 @@ Gem::Specification.new do |spec|
   spec.license       = 'MIT'
   spec.required_ruby_version = '>= 3.1.0'
 
-  spec.files         = `git ls-files`.split($INPUT_RECORD_SEPARATOR)
-  spec.test_files    = spec.files.grep(%r{^(test|spec|features)/})
+  spec.files = Dir.chdir(File.expand_path(__dir__)) do
+    `git ls-files -z`.split("\x0").reject do |f|
+      (f == __FILE__) || f.match(%r{\A(?:(?:bin|test|spec|features)/|\.(?:git|travis|circleci)|appveyor)})
+    end
+  end
   spec.require_paths = ['lib']
 
   spec.add_development_dependency 'bundler'
   spec.add_dependency             'ech_config', '~> 0.0.3'
-  spec.add_dependency             'hpke', '~> 1.0.0'
+  spec.add_dependency             'hpke', '~> 1', '>= 1.0.2'
   spec.add_dependency             'logger'
   spec.add_dependency             'openssl', '>= 3'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: tttls1.3
 version: !ruby/object:Gem::Version
-  version: 0.3.6
+  version: 0.3.8
 platform: ruby
 authors:
 - thekuwayama
@@ -43,14 +43,20 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.0.0
+        version: '1'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.0.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.0.0
+        version: '1'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.0.2
 - !ruby/object:Gem::Dependency
   name: logger
   requirement: !ruby/object:Gem::Requirement
@@ -86,8 +92,6 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
-- ".github/workflows/ci.yml"
-- ".gitignore"
 - ".rspec"
 - ".rubocop.yml"
 - ".ruby-version"
@@ -164,60 +168,6 @@ files:
 - lib/tttls1.3/transcript.rb
 - lib/tttls1.3/utils.rb
 - lib/tttls1.3/version.rb
-- spec/aead_spec.rb
-- spec/alert_spec.rb
-- spec/alpn_spec.rb
-- spec/application_data_spec.rb
-- spec/certificate_spec.rb
-- spec/certificate_verify_spec.rb
-- spec/change_cipher_spec_spec.rb
-- spec/cipher_suites_spec.rb
-- spec/client_hello_spec.rb
-- spec/client_spec.rb
-- spec/compress_certificate_spec.rb
-- spec/cookie_spec.rb
-- spec/early_data_indication_spec.rb
-- spec/ech_outer_extensions_spec.rb
-- spec/ech_spec.rb
-- spec/encrypted_extensions_spec.rb
-- spec/end_of_early_data_spec.rb
-- spec/endpoint_spec.rb
-- spec/error_spec.rb
-- spec/extensions_spec.rb
-- spec/finished_spec.rb
-- spec/fixtures/rsa_ca.crt
-- spec/fixtures/rsa_ca.key
-- spec/fixtures/rsa_rsa.crt
-- spec/fixtures/rsa_rsa.key
-- spec/fixtures/rsa_rsa_ocsp.crt
-- spec/fixtures/rsa_rsa_ocsp.key
-- spec/fixtures/rsa_rsassaPss.crt
-- spec/fixtures/rsa_rsassaPss.key
-- spec/fixtures/rsa_secp256r1.crt
-- spec/fixtures/rsa_secp256r1.key
-- spec/fixtures/rsa_secp384r1.crt
-- spec/fixtures/rsa_secp384r1.key
-- spec/fixtures/rsa_secp521r1.crt
-- spec/fixtures/rsa_secp521r1.key
-- spec/key_schedule_spec.rb
-- spec/key_share_spec.rb
-- spec/new_session_ticket_spec.rb
-- spec/pre_shared_key_spec.rb
-- spec/psk_key_exchange_modes_spec.rb
-- spec/record_size_limit_spec.rb
-- spec/record_spec.rb
-- spec/server_hello_spec.rb
-- spec/server_name_spec.rb
-- spec/server_spec.rb
-- spec/signature_algorithms_cert_spec.rb
-- spec/signature_algorithms_spec.rb
-- spec/spec_helper.rb
-- spec/status_request_spec.rb
-- spec/supported_groups_spec.rb
-- spec/supported_versions_spec.rb
-- spec/transcript_spec.rb
-- spec/unknown_extension_spec.rb
-- spec/utils_spec.rb
 - tttls1.3.gemspec
 homepage: https://github.com/thekuwayama/tttls1.3
 licenses:
@@ -237,61 +187,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.3
+rubygems_version: 4.0.10
 specification_version: 4
 summary: TLS 1.3 implementation in Ruby (Tiny Trial TLS1.3 aka tttls1.3)
-test_files:
-- spec/aead_spec.rb
-- spec/alert_spec.rb
-- spec/alpn_spec.rb
-- spec/application_data_spec.rb
-- spec/certificate_spec.rb
-- spec/certificate_verify_spec.rb
-- spec/change_cipher_spec_spec.rb
-- spec/cipher_suites_spec.rb
-- spec/client_hello_spec.rb
-- spec/client_spec.rb
-- spec/compress_certificate_spec.rb
-- spec/cookie_spec.rb
-- spec/early_data_indication_spec.rb
-- spec/ech_outer_extensions_spec.rb
-- spec/ech_spec.rb
-- spec/encrypted_extensions_spec.rb
-- spec/end_of_early_data_spec.rb
-- spec/endpoint_spec.rb
-- spec/error_spec.rb
-- spec/extensions_spec.rb
-- spec/finished_spec.rb
-- spec/fixtures/rsa_ca.crt
-- spec/fixtures/rsa_ca.key
-- spec/fixtures/rsa_rsa.crt
-- spec/fixtures/rsa_rsa.key
-- spec/fixtures/rsa_rsa_ocsp.crt
-- spec/fixtures/rsa_rsa_ocsp.key
-- spec/fixtures/rsa_rsassaPss.crt
-- spec/fixtures/rsa_rsassaPss.key
-- spec/fixtures/rsa_secp256r1.crt
-- spec/fixtures/rsa_secp256r1.key
-- spec/fixtures/rsa_secp384r1.crt
-- spec/fixtures/rsa_secp384r1.key
-- spec/fixtures/rsa_secp521r1.crt
-- spec/fixtures/rsa_secp521r1.key
-- spec/key_schedule_spec.rb
-- spec/key_share_spec.rb
-- spec/new_session_ticket_spec.rb
-- spec/pre_shared_key_spec.rb
-- spec/psk_key_exchange_modes_spec.rb
-- spec/record_size_limit_spec.rb
-- spec/record_spec.rb
-- spec/server_hello_spec.rb
-- spec/server_name_spec.rb
-- spec/server_spec.rb
-- spec/signature_algorithms_cert_spec.rb
-- spec/signature_algorithms_spec.rb
-- spec/spec_helper.rb
-- spec/status_request_spec.rb
-- spec/supported_groups_spec.rb
-- spec/supported_versions_spec.rb
-- spec/transcript_spec.rb
-- spec/unknown_extension_spec.rb
-- spec/utils_spec.rb
+test_files: []

data/.github/workflows/ci.yml

@@ -1,39 +0,0 @@
-name: CI
-
-on:
-  push:
-    branches:
-      - main
-  pull_request:
-    branches:
-      - '*'
-
-jobs:
-  ci:
-    runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        ruby-version: ['3.3', '3.4', '4.0']
-    env:
-      SPEC_VERBOSE: true
-    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - uses: docker://thekuwayama/openssl:latest
-      - name: Set up Ruby
-        uses: ruby/setup-ruby@ae195bbe749a7cef685ac729197124a48305c1cb # v1.276.0
-        with:
-          ruby-version: ${{ matrix.ruby-version }}
-      - name: Install dependencies
-        run: |
-          gem --version
-          gem install bundler
-          bundle --version
-          bundle install
-      - name: Run rubocop
-        run: bundle exec rake rubocop
-      - name: Run rspec
-        run: bundle exec rake spec
-      - name: Run interop client
-        run: bundle exec rake interop:client
-      - name: Run interop server
-        run: bundle exec rake interop:server

data/.gitignore

@@ -1,17 +0,0 @@
-*.gem
-*.rbc
-Gemfile.lock
-.config
-.rvmrc
-/.bundle/
-/vendor/
-/lib/bundler/man/
-/pkg/
-/.yardoc/
-/_yardoc/
-/doc/
-/rdoc/
-/coverage/
-/spec/reports/
-/tmp/
-.DS_Store

data/spec/aead_spec.rb

@@ -1,95 +0,0 @@
-# encoding: ascii-8bit
-# frozen_string_literal: true
-
-require_relative 'spec_helper'
-
-RSpec.describe Aead do
-  context 'aead using CipherSuite::TLS_AES_128_GCM_SHA256' do
-    let(:cipher) do
-      Aead.new(cipher_suite: CipherSuite::TLS_AES_128_GCM_SHA256,
-               write_key: TESTBINARY_SERVER_PARAMETERS_WRITE_KEY,
-               write_iv: TESTBINARY_SERVER_PARAMETERS_WRITE_IV,
-               sequence_number: SequenceNumber.new)
-    end
-
-    let(:content) do
-      TESTBINARY_SERVER_PARAMETERS
-    end
-
-    let(:encrypted_record) do
-      TESTBINARY_SERVER_PARAMETERS_RECORD[5..]
-    end
-
-    let(:record_header) do
-      TESTBINARY_SERVER_PARAMETERS_RECORD[0...5]
-    end
-
-    it 'should encrypt content of server parameters' do
-      expect(cipher.encrypt(content, ContentType::HANDSHAKE))
-        .to eq encrypted_record
-    end
-
-    it 'should decrypt encrypted_record server parameters' do
-      expect(cipher.decrypt(encrypted_record, record_header))
-        .to eq [content, ContentType::HANDSHAKE]
-    end
-  end
-
-  context 'aead using CipherSuite::TLS_AES_128_GCM_SHA256' do
-    let(:cipher) do
-      Aead.new(cipher_suite: CipherSuite::TLS_AES_128_GCM_SHA256,
-               write_key: TESTBINARY_CLIENT_FINISHED_WRITE_KEY,
-               write_iv: TESTBINARY_CLIENT_FINISHED_WRITE_IV,
-               sequence_number: SequenceNumber.new)
-    end
-
-    let(:content) do
-      TESTBINARY_CLIENT_FINISHED
-    end
-
-    let(:encrypted_record) do
-      TESTBINARY_CLIENT_FINISHED_RECORD[5..]
-    end
-
-    let(:record_header) do
-      TESTBINARY_CLIENT_FINISHED_RECORD[0...5]
-    end
-
-    it 'should encrypt content of client finished' do
-      expect(cipher.encrypt(content, ContentType::HANDSHAKE))
-        .to eq encrypted_record
-    end
-
-    it 'should decrypt encrypted_record client finished' do
-      expect(cipher.decrypt(encrypted_record, record_header))
-        .to eq [content, ContentType::HANDSHAKE]
-    end
-  end
-
-  context 'aead using CipherSuite::TLS_AES_128_GCM_SHA256, ' \
-          'HelloRetryRequest,' do
-    let(:cipher) do
-      Aead.new(cipher_suite: CipherSuite::TLS_AES_128_GCM_SHA256,
-               write_key: TESTBINARY_HRR_SERVER_PARAMETERS_WRITE_KEY,
-               write_iv: TESTBINARY_HRR_SERVER_PARAMETERS_WRITE_IV,
-               sequence_number: SequenceNumber.new)
-    end
-
-    let(:content) do
-      TESTBINARY_HRR_SERVER_PARAMETERS
-    end
-
-    let(:encrypted_record) do
-      TESTBINARY_HRR_SERVER_PARAMETERS_RECORD[5..]
-    end
-
-    let(:record_header) do
-      TESTBINARY_HRR_SERVER_PARAMETERS_RECORD[0...5]
-    end
-
-    it 'should decrypt encrypted_record server parameters' do
-      expect(cipher.decrypt(encrypted_record, record_header))
-        .to eq [content, ContentType::HANDSHAKE]
-    end
-  end
-end

data/spec/alert_spec.rb

@@ -1,54 +0,0 @@
-# encoding: ascii-8bit
-# frozen_string_literal: true
-
-require_relative 'spec_helper'
-
-RSpec.describe Alert do
-  context 'unexpected_message alert' do
-    let(:message) do
-      Alert.new(level: AlertLevel::FATAL,
-                description: ALERT_DESCRIPTION[:unexpected_message])
-    end
-
-    it 'should be serialized' do
-      expect(message.serialize).to eq AlertLevel::FATAL \
-                                      + ALERT_DESCRIPTION[:unexpected_message]
-    end
-
-    it 'should return error' do
-      expect(message.to_error).to be_a_kind_of(ErrorAlerts)
-      expect(message.to_error.message).to eq 'unexpected_message'
-    end
-  end
-
-  context 'unexpected_message alert, not given level' do
-    let(:message) do
-      Alert.new(description: ALERT_DESCRIPTION[:unexpected_message])
-    end
-
-    it 'should be serialized' do
-      expect(message.serialize).to eq AlertLevel::FATAL \
-                                      + ALERT_DESCRIPTION[:unexpected_message]
-    end
-
-    it 'should return error' do
-      expect(message.to_error).to be_a_kind_of(ErrorAlerts)
-      expect(message.to_error.message).to eq 'unexpected_message'
-    end
-  end
-
-  context 'valid alert binary' do
-    let(:message) do
-      Alert.deserialize(TESTBINARY_ALERT)
-    end
-
-    it 'should generate object' do
-      expect(message.level).to eq AlertLevel::WARNING
-      expect(message.description).to eq ALERT_DESCRIPTION[:close_notify]
-    end
-
-    it 'should generate serializable object' do
-      expect(message.serialize).to eq TESTBINARY_ALERT
-    end
-  end
-end

data/spec/alpn_spec.rb

@@ -1,55 +0,0 @@
-# encoding: ascii-8bit
-# frozen_string_literal: true
-
-require_relative 'spec_helper'
-using Refinements
-
-RSpec.describe Alpn do
-  context 'valid alpn' do
-    let(:protocol_name_list) do
-      ['h2', 'http/1.1', 'http/1.0']
-    end
-
-    let(:extension) do
-      Alpn.new(protocol_name_list)
-    end
-
-    it 'should be generated' do
-      expect(extension.extension_type)
-        .to eq ExtensionType::APPLICATION_LAYER_PROTOCOL_NEGOTIATION
-      expect(extension.protocol_name_list).to eq protocol_name_list
-    end
-
-    it 'should be serialized' do
-      expect(extension.serialize)
-        .to eq ExtensionType::APPLICATION_LAYER_PROTOCOL_NEGOTIATION \
-               + 23.to_uint16 \
-               + 21.to_uint16 \
-               + 'h2'.prefix_uint8_length \
-               + 'http/1.1'.prefix_uint8_length \
-               + 'http/1.0'.prefix_uint8_length
-    end
-  end
-
-  context 'invalid alpn, empty,' do
-    let(:extension) do
-      Alpn.new([])
-    end
-
-    it 'should not be generated' do
-      expect { extension }.to raise_error(ErrorAlerts)
-    end
-  end
-
-  context 'valid alpn binary' do
-    let(:extension) do
-      Alpn.deserialize(TESTBINARY_ALPN)
-    end
-
-    it 'should generate valid object' do
-      expect(extension.extension_type)
-        .to eq ExtensionType::APPLICATION_LAYER_PROTOCOL_NEGOTIATION
-      expect(extension.protocol_name_list).to eq ['h2', 'http/1.1']
-    end
-  end
-end

data/spec/application_data_spec.rb

@@ -1,26 +0,0 @@
-# encoding: ascii-8bit
-# frozen_string_literal: true
-
-require_relative 'spec_helper'
-
-RSpec.describe ApplicationData do
-  context 'application_data' do
-    let(:message) do
-      ApplicationData.new(TESTBINARY_CLIENT_APPLICATION_DATA)
-    end
-
-    it 'should be serialized' do
-      expect(message.serialize).to eq TESTBINARY_CLIENT_APPLICATION_DATA
-    end
-  end
-
-  context 'valid application_data binary' do
-    let(:message) do
-      ApplicationData.deserialize(TESTBINARY_CLIENT_APPLICATION_DATA)
-    end
-
-    it 'should generate valid serializable object' do
-      expect(message.serialize).to eq TESTBINARY_CLIENT_APPLICATION_DATA
-    end
-  end
-end

data/spec/certificate_spec.rb

@@ -1,82 +0,0 @@
-# encoding: ascii-8bit
-# frozen_string_literal: true
-
-require_relative 'spec_helper'
-using Refinements
-
-RSpec.describe Certificate do
-  context 'valid certificate' do
-    let(:certificate) do
-      OpenSSL::X509::Certificate.new(
-        File.read(__dir__ + '/fixtures/rsa_rsa.crt')
-      )
-    end
-
-    let(:message) do
-      Certificate.new(certificate_list: [CertificateEntry.new(certificate)])
-    end
-
-    it 'should be generated' do
-      expect(message.msg_type).to eq HandshakeType::CERTIFICATE
-      expect(message.certificate_request_context).to be_empty
-
-      certificate_entry = message.certificate_list.first
-      expect(certificate_entry.cert_data.subject.to_s).to eq '/CN=localhost'
-      expect(certificate_entry.extensions).to be_empty
-    end
-
-    it 'should be serialized' do
-      expect(message.serialize).to eq HandshakeType::CERTIFICATE \
-                                      + 742.to_uint24 \
-                                      + 0.to_uint8 \
-                                      + 738.to_uint24 \
-                                      + 733.to_uint24 \
-                                      + certificate.to_der \
-                                      + 0.to_uint16
-    end
-  end
-
-  context 'valid certificate binary' do
-    let(:message) do
-      Certificate.deserialize(TESTBINARY_CERTIFICATE)
-    end
-
-    it 'should generate valid object' do
-      expect(message.msg_type).to eq HandshakeType::CERTIFICATE
-      expect(message.certificate_request_context).to be_empty
-
-      certificate_entry = message.certificate_list.first
-      expect(certificate_entry.cert_data.subject.to_s).to eq '/CN=rsa'
-      expect(certificate_entry.extensions).to be_empty
-    end
-
-    it 'should generate serializable object' do
-      expect(message.serialize).to eq TESTBINARY_CERTIFICATE
-    end
-  end
-
-  context 'invalid certificate, including forbidden extension type,' do
-    let(:certificate) do
-      OpenSSL::X509::Certificate.new(
-        File.read(__dir__ + '/fixtures/rsa_rsa.crt')
-      )
-    end
-
-    let(:server_name) do
-      ServerName.new('')
-    end
-
-    let(:message) do
-      Certificate.new(
-        certificate_list: [
-          CertificateEntry.new(certificate, Extensions.new([server_name]))
-        ]
-      )
-    end
-
-    it 'should be generated' do
-      expect(message.msg_type).to eq HandshakeType::CERTIFICATE
-      expect(message.appearable_extensions?).to be false
-    end
-  end
-end

data/spec/certificate_verify_spec.rb

@@ -1,51 +0,0 @@
-# encoding: ascii-8bit
-# frozen_string_literal: true
-
-require_relative 'spec_helper'
-using Refinements
-
-RSpec.describe CertificateVerify do
-  context 'valid certificate_verify' do
-    let(:signature) do
-      OpenSSL::Random.random_bytes(128)
-    end
-
-    let(:message) do
-      CertificateVerify.new(
-        signature_scheme: SignatureScheme::RSA_PSS_RSAE_SHA256,
-        signature:
-      )
-    end
-
-    it 'should be generated' do
-      expect(message.msg_type).to eq HandshakeType::CERTIFICATE_VERIFY
-      expect(message.signature_scheme) \
-        .to eq SignatureScheme::RSA_PSS_RSAE_SHA256
-      expect(message.signature).to eq signature
-    end
-
-    it 'should be serialized' do
-      expect(message.serialize).to eq HandshakeType::CERTIFICATE_VERIFY \
-                                      + 132.to_uint24 \
-                                      + SignatureScheme::RSA_PSS_RSAE_SHA256 \
-                                      + signature.prefix_uint16_length
-    end
-  end
-
-  context 'valid certificate_verify binary' do
-    let(:message) do
-      CertificateVerify.deserialize(TESTBINARY_CERTIFICATE_VERIFY)
-    end
-
-    it 'should generate valid object' do
-      expect(message.msg_type).to eq HandshakeType::CERTIFICATE_VERIFY
-      expect(message.signature_scheme) \
-        .to eq SignatureScheme::RSA_PSS_RSAE_SHA256
-      expect(message.signature.length).to eq 128
-    end
-
-    it 'should generate serializable object' do
-      expect(message.serialize).to eq TESTBINARY_CERTIFICATE_VERIFY
-    end
-  end
-end

data/spec/change_cipher_spec_spec.rb

@@ -1,26 +0,0 @@
-# encoding: ascii-8bit
-# frozen_string_literal: true
-
-require_relative 'spec_helper'
-
-RSpec.describe ChangeCipherSpec do
-  context 'change_cipher_spec' do
-    let(:message) do
-      ChangeCipherSpec.new
-    end
-
-    it 'should be serialized' do
-      expect(message.serialize).to eq "\x01"
-    end
-  end
-
-  context 'valid change_cipher_spec binary' do
-    let(:message) do
-      ChangeCipherSpec.deserialize(TESTBINARY_CHANGE_CIPHER_SPEC)
-    end
-
-    it 'should generate valid serializable object' do
-      expect(message.serialize).to eq "\x01"
-    end
-  end
-end