wss4r 0.5

data/lib/wss4r/tokenresolver/authenticateuserresolver.rb

@@ -0,0 +1,34 @@
+module WSS4R
+	
+  module Tokenresolver
+    class AuthenticateUserResolver < Resolver
+		
+      def authenticate_user(usernametoken)
+        puts (usernametoken)
+        if usernametoken.type() == UsernameToken::HASHED
+          stamp = Base64.decode64(usernametoken.nonce())+usernametoken.created()
+          stamp = stamp + authenticate_token(usernametoken)
+          hash = CryptHash.new().digest_b64(stamp)
+          return hash.to_s() == usernametoken.hash().to_s()
+        else
+          return authenticate_token_plain(usernametoken.username(), usernametoken.password())
+        end
+        false
+      end
+    end
+	
+    def authenticate_token(usernametoken)
+      usernametoken.username().reverse()
+    end
+	
+    def authenticate_token_plain(username, password)
+      @username = username
+      @password = password
+      return (username.reverse() == password)
+    end
+	
+  end	#Tokenresolver
+end	#WSS4R
+			
+			
+

data/lib/wss4r/tokenresolver/certificateresolver.rb

@@ -0,0 +1,62 @@
+require "wss4r/tokenresolver/resolver.rb"
+require "wss4r/security/crypto/certificate"
+
+module WSS4R
+  module Tokenresolver
+    class CertificateDirectoryResolver < Resolver
+		
+      def initialize(directory)
+        File.stat(directory).directory?
+        @directory = directory
+      end
+		
+      def certificate_by_key_identifier(key_identifier)
+        files = Dir[@directory + "/*.cer"]
+        files.each{|f|
+          certificate = Certificate.new(File.read(f))
+          if (key_identifier == certificate.key_identifier())
+            certificate.filename=(f)
+            return certificate
+          end
+        }
+        nil
+      end
+		
+      def private_key(certificate, passphrase=nil)
+        if (certificate.filename() != nil)
+          if passphrase
+            return (RSA.new(File.read(certificate.filename()), passphrase))
+          else
+            return (RSA.new(File.read(certificate.filename() + ".key")))
+          end
+        end
+        files = Dir[@directory + "/*.key"]
+        files.each{|f|
+          pkey = RSA.new(File.read(f))
+          if (certificate.check_private_key(pkey))
+            return pkey
+          end
+        }
+        return nil
+      end
+		
+      def certificate_by_subject(subject)
+        files = Dir[@directory + "/*.cer"]
+        files.each{|f|
+          certificate = Certificate.new(File.read(f))
+          if (certificate.subject().to_s() == subject)
+            certificate.filename=(f)
+            return certificate
+          end
+        }
+        nil
+      end
+    end
+  end
+end
+
+
+#c = WSS4R::Tokenresolver::CertificateDirectoryResolver.new("./certs")
+#cert = c.get_certificate_by_key_identifier("tUYo1KhZtRDiUf1LVNDUopTczmo=")
+#key = c.get_private_key(cert)
+#puts(key.to_s())

data/lib/wss4r/tokenresolver/databaseresolver.rb

@@ -0,0 +1,56 @@
+require "sqlite3"
+require "openssl"
+
+require "base64"
+
+require "wss4r/tokenresolver/resolver.rb"
+require "wss4r/security/crypto/certificate"
+
+include OpenSSL::PKey
+include OpenSSL::X509
+
+module WSS4R
+module Tokenresolver
+   class DatabaseResolver < Resolver
+      def initialize(database_file)
+			@db = SQLite3::Database.new(database_file)
+      end
+		
+      def private_key(certificate)
+			cert_data = Base64.encode64(certificate.to_der())
+			select = "select * from certificates where cert_data = '#{cert_data}'"
+			rows = @db.execute(select)
+			return nil if (rows == nil || rows.size() == 0) 
+			private_key_data = rows[0][3]
+			private_key_data = Base64.decode64(private_key_data)
+			private_key = RSA.new(private_key_data)
+			return private_key if private_key
+			return nil
+      end
+		
+		def certificate_by_subject(subject)
+			select = "select * from certificates where subject = '#{subject}'"
+			rows = @db.execute(select)
+			return nil if (rows == nil || rows.size() == 0)
+			cert_data = rows[0][2]
+			cert_data = Base64.decode64(cert_data)
+			cert = Certificate.new(cert_data)
+			return cert if cert
+			return nil
+		end
+   end
+end
+end
+
+if __FILE__ == $0
+	resolver = WSS4R::Tokenresolver::DatabaseResolver.new(ARGV[0])
+	cert = resolver.certificate_by_subject("/C=DE/ST=Rheinland-Pfalz/L=Trier/O=FF/OU=Developement/CN=Client/emailAddress=client@web.de")
+	key = resolver.private_key(cert)
+	puts("Certificate:----" + cert.to_s())
+	puts("Private key:----" + key.to_s())
+end
+
+
+#cert = c.get_certificate_by_key_identifier("tUYo1KhZtRDiUf1LVNDUopTczmo=")
+#key = c.get_private_key(cert)
+#puts(key.to_s())

data/lib/wss4r/tokenresolver/resolver.rb

@@ -0,0 +1,13 @@
+module WSS4R
+  module Tokenresolver
+    class Resolver
+      def certificate_by_subject(subject)
+      end
+      def private_key(certificate)
+      end
+      def authenticate_user(usernametoken)
+        return false
+      end
+    end
+  end
+end

metadata

@@ -0,0 +1,95 @@
+--- !ruby/object:Gem::Specification 
+rubygems_version: 0.9.4
+specification_version: 1
+name: wss4r
+version: !ruby/object:Gem::Version 
+  version: "0.5"
+date: 2007-10-16 00:00:00 +02:00
+summary: Some description
+require_paths: 
+- lib
+email: roland.schmitt@web.de
+homepage: http://rubyforge.org/projects/wss4r
+rubyforge_project: 
+description: 
+autorequire: wss4r
+default_executable: 
+bindir: bin
+has_rdoc: false
+required_ruby_version: !ruby/object:Gem::Version::Requirement 
+  requirements: 
+  - - ">"
+    - !ruby/object:Gem::Version 
+      version: 0.0.0
+  version: 
+platform: ruby
+signing_key: 
+cert_chain: 
+post_install_message: 
+authors: 
+- Roland Schmitt
+files: 
+- lib/wss4r
+- lib/wss4r/config
+- lib/wss4r/config/config.rb
+- lib/wss4r/soap
+- lib/wss4r/soap/processor.rb
+- lib/wss4r/rpc
+- lib/wss4r/rpc/router.rb
+- lib/wss4r/rpc/proxy.rb
+- lib/wss4r/rpc/wssdriver.rb
+- lib/wss4r/tokenresolver
+- lib/wss4r/tokenresolver/authenticateuserresolver.rb
+- lib/wss4r/tokenresolver/certificateresolver.rb
+- lib/wss4r/tokenresolver/databaseresolver.rb
+- lib/wss4r/tokenresolver/resolver.rb
+- lib/wss4r/server
+- lib/wss4r/server/wssstandaloneserver.rb
+- lib/wss4r/security
+- lib/wss4r/security/xml
+- lib/wss4r/security/xml/encrypted_data.rb
+- lib/wss4r/security/xml/signature.rb
+- lib/wss4r/security/xml/tokentypes.rb
+- lib/wss4r/security/xml/key_info.rb
+- lib/wss4r/security/xml/reference_list.rb
+- lib/wss4r/security/xml/reference.rb
+- lib/wss4r/security/xml/timestamp.rb
+- lib/wss4r/security/xml/security.rb
+- lib/wss4r/security/xml/encrypted_key.rb
+- lib/wss4r/security/xml/signature_value.rb
+- lib/wss4r/security/xml/signed_info.rb
+- lib/wss4r/security/crypto
+- lib/wss4r/security/crypto/cipher.rb
+- lib/wss4r/security/crypto/certificate.rb
+- lib/wss4r/security/crypto/hash.rb
+- lib/wss4r/security/exceptions
+- lib/wss4r/security/exceptions/exceptions.rb
+- lib/wss4r/security/util
+- lib/wss4r/security/util/names.rb
+- lib/wss4r/security/util/namespaces.rb
+- lib/wss4r/security/util/soap_parser.rb
+- lib/wss4r/security/util/xmlutils.rb
+- lib/wss4r/security/util/hash_util.rb
+- lib/wss4r/security/util/transformer_factory.rb
+- lib/wss4r/security/util/xmlcanonicalizer.rb
+- lib/wss4r/security/util/types.rb
+- lib/wss4r/security/util/reference_elements.rb
+- lib/wss4r/security/security.rb
+- lib/wss4r/security/resolver.rb
+- lib/wss4r/aws
+- lib/wss4r/aws/utils.rb
+- README
+test_files: []
+
+rdoc_options: []
+
+extra_rdoc_files: 
+- README
+executables: []
+
+extensions: []
+
+requirements: []
+
+dependencies: []
+