winrm 2.4.0 → 2.4.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b4edbd0e2fca0dd65b9b1ba172f525b9473c7b07ddd2b5fd25c422f00e32164f
-  data.tar.gz: dcba3b6b6c8bf4653a588a0d2d2d70d286f19f831c384c107d0b796cdc77e5dc
+  metadata.gz: 2eac5b65fd2ca16d8146ebedec69c103b016a226c8acb5a2b955d45951137567
+  data.tar.gz: 12bc8e0a3f374ff700fd949d64d1ce61e8872ca80adc44c7ba48d12b39177b71
 SHA512:
-  metadata.gz: 359c0beed452df2eb17cfc82230bac1f075ce86eedc0ffb2a516681856d097527b6e2ed6eb256d1f7652201882b5e83399312b51e035ba2281611cc3e2ac1b3a
-  data.tar.gz: 4195fb3f4c60238102b3cd79de8d0840e49ff4425a1590cf9c01ce0563d43b465bfde5e400543f7f2b15915b5d0e8e9f58a9e1321706e6d2ecd55e47f28c3398
+  metadata.gz: '08f8207aa1455e8c601eac3434d31a91ea81c3e0f54c282999f5873c8b6b27ade40b49ead180801fc056e7bba6c466fbc0db5f3b3655ff2d8e3304f6080894e0'
+  data.tar.gz: 47f61d4ec15725227702f1851b29ced3a6075a118461fd671faff12d436d56b3fdffdcd3c35b8359cb452be85e809393df4cc01d0bf933f6d09555d8bf6578b3

data/README.md

@@ -202,7 +202,7 @@ iex $cmd
 ## Setting up Certificate based authentication
 Perform the following steps to authenticate with a certificate instead of a username and password:
 
-1. Generate a certificate with an Extended Key Usage of Client Authentication and a Subject Alternative Name with the UPN of the user. See this [powershell function](https://github.com/WinRb/WinRM/blob/main/WinrmAppveyor.psm1#L1) as an example of using `openssl` to create a self signed user certificate in `.pem` and `.pfx` formats along with the private key file.
+1. Generate a certificate with an Extended Key Usage of Client Authentication and a Subject Alternative Name with the UPN of the user. e.g. using `openssl` to create a self signed user certificate in `.pem` and `.pfx` formats along with the private key file.
 
 2. Import the pfx file into the `TrustedPeople` directory of the `LocalMachine` certificate store on the windows endpoint.
 

data/lib/winrm/connection_opts.rb

@@ -69,12 +69,19 @@ module WinRM
 
       if self[:client_cert]
         raise 'path to client key is required' unless self[:client_key]
+      elsif self[:transport] == :kerberos
+        validate_kerberos_fields
       else
         raise 'user is a required option' unless self[:user]
         raise 'password is a required option' unless self[:password]
       end
     end
 
+    def validate_kerberos_fields
+      raise 'realm is a required option' unless self[:realm]
+      raise 'service is a required option' unless self[:service]
+    end
+
     def validate_data_types
       validate_integer(:retry_limit)
       validate_integer(:retry_delay)

data/lib/winrm/http/response_handler.rb

@@ -60,6 +60,9 @@ module WinRM
     end
 
     def raise_if_wsman_fault
+      # NB: search the document, not the soap_errors nodeset. A leading `//`
+      # is document-absolute in REXML anyway, and REXML >= 3.4.4 dropped
+      # nodeset support in XPath.first (it warns on every fault response).
       soap_errors = REXML::XPath.match(
         response_xml,
         "//*[local-name() = 'Envelope']/*[local-name() = 'Body']/*[local-name() = 'Fault']/*"
@@ -67,7 +70,7 @@ module WinRM
       return if soap_errors.empty?
 
       fault = REXML::XPath.first(
-        soap_errors,
+        response_xml,
         "//*[local-name() = 'WSManFault']"
       )
       raise WinRMWSManFault.new(fault.to_s, fault.attributes['Code']) unless fault.nil?
@@ -81,7 +84,7 @@ module WinRM
       return if soap_errors.empty?
 
       error = REXML::XPath.first(
-        soap_errors,
+        response_xml,
         "//*[local-name() = 'MSFT_WmiError']"
       )
       return if error.nil?
@@ -101,15 +104,15 @@ module WinRM
       return if soap_errors.empty?
 
       code = REXML::XPath.first(
-        soap_errors,
+        response_xml,
         "//*[local-name() = 'Code']/*[local-name() = 'Value']/text()"
       )
       subcode = REXML::XPath.first(
-        soap_errors,
+        response_xml,
         "//*[local-name() = 'Subcode']/*[local-name() = 'Value']/text()"
       )
       reason = REXML::XPath.first(
-        soap_errors,
+        response_xml,
         "//*[local-name() = 'Reason']/*[local-name() = 'Text']/text()"
       )
 

data/lib/winrm/version.rb

@@ -1,5 +1,5 @@
 # WinRM module
 module WinRM
   # The version of the WinRM library
-  VERSION = '2.4.0'.freeze
+  VERSION = '2.4.1'.freeze
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: winrm
 version: !ruby/object:Gem::Version
-  version: 2.4.0
+  version: 2.4.1
 platform: ruby
 authors:
 - Dan Wanek
@@ -10,7 +10,7 @@ authors:
 - Shawn Neal
 bindir: bin
 cert_chain: []
-date: 2026-09-10 00:00:00.000000000 Z
+date: 2026-09-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: base64