zyre 0.7.0 → 0.8.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7b5427b9f8cbdcbec3727b0a998a82b60b70cf7a82e36f6e3a0a86e6d9aba74a
-  data.tar.gz: 898dcb7df592fc24617fedc60d8f54b9f22f421ae04459215ee3c48adc581ff0
+  metadata.gz: e5ed839568df209af8c75bddfe0be453af7219319c31848556261888e3b6ee39
+  data.tar.gz: 778239dec2e83ac60efbccdccffa55916ff6365f82a6bc9869a796b6e0484223
 SHA512:
-  metadata.gz: 774f4c450b24db21b8db0d52bde9334b80edf4d196b51e5f3be468b20cba83469418862b0ad862c617d2366b39cbe003d2e6e5d518c59c8b6f09ccbf2e8253da
-  data.tar.gz: f53e49334e7b4a5dd308080addafc65a6d3dd222463651b8c038ddd2de12cf6ba2b30a3d959649ab001e44d41fbf2d41c9ac969800fdbe10d25238cfa653e24d
+  metadata.gz: 6bbf929517d6375ed0f27b7eac8b413a200fda2af90d0493e2d246a4e232862bcd97cb00961b7118ff617bc00c278b92af2ffeba978756d64fb56d6171a2342f
+  data.tar.gz: 7613fd948161ec855ab2042401304e381866b7eef9aeaf166898912e24c9fa0ede81c91a35f54075f269855322219880e972d3a712b498935786e66b48c17860

data/Authentication.md

@@ -1,30 +1,30 @@
 # Authenticated \Zyre
 
-Note that authentication requires API that is still in Draft, so it requires
-that your libzyre be built with --enable-drafts. Also, since draft APIs are
-subject to change, this documentation may be out of date. A good place to check
-for the latest info is the built-in test suites in the Zyre source itself.
+Note that authentication requires a Draft API, so it requires that your libzyre
+be built with `--enable-drafts`. Also, since draft APIs are subject to change,
+this documentation may be out of date. A good place to check for the latest
+info is the built-in test suites in the Zyre source itself.
 
-Authentication isn't done yet, but when it is it'll look something like:
+Authentication in Zyre is done using the mechanism built into ZeroMQ. To enable it, you start the authenticator actor ([zauth][]) and then configure the authentication you wish to use.
 
-    cert = Zyre::Cert.new
-    cert.save( "/usr/local/var/certs/server" )
+## Curve Authentication
 
-    Zyre.allow( "127.0.0.1", "10.0.12.2" )
-    Zyre.start_authenticator( :CURVE, "/usr/local/var/certs" )
+To enable secure connections, you tell Zyre to enable Curve. You can either call this method with no argument, in which case any node that presents a valid cert will be allowed to connect, or you pass in the path to a [zcertstore][] that contains all the certificates of nodes which will be allowed to connect.
 
-    node = Zyre::Node.new
-    node.zap_domain = 'application_name'
-    node.zcert = cert
-    node.start
+To document:
 
-    # later...
-
-    node.stop
-    Zyre.stop_authenticator
+- Creating a certstore
+- Enabling the authenticator
+- Enabling curve authentication
 
 
 ## References
 
 - ZAP (ZeroMQ Authentication Protocol) - https://rfc.zeromq.org/spec/27/
 - Using ZeroMQ Security (Part 2) - https://jaxenter.com/using-zeromq-security-part-2-119353.html
+
+
+[zauth]: http://api.zeromq.org/czmq3-0:zauth
+[zcertstore]: http://api.zeromq.org/czmq3-0:zcertstore
+
+

data/History.md

@@ -1,6 +1,13 @@
 # Release History for zyre
 
 ---
+## v0.8.0 [2026-02-02] Michael Granger <ged@faeriemud.org>
+
+Improvements:
+
+- Add Zyre::Certstore for managing zcertstores
+- Add convenience method for making public certs
+
 
 ## v0.7.0 [2025-08-05] Michael Granger <ged@faeriemud.org>
 

data/ext/zyre_ext/cert.c

@@ -15,6 +15,14 @@ VALUE rzyre_cZyreCert;
 static void rzyre_cert_free( void *ptr );
 
 
+static const byte EMPTY_KEY[32] = {
+	0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+	0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+	0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
+	0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 };
+static const char *Z85_EMPTY_KEY = "0000000000000000000000000000000000000000";
+
+
 static const rb_data_type_t rzyre_cert_t = {
 	.wrap_struct_name = "Zyre::Cert",
 	.function = {
@@ -68,6 +76,24 @@ rzyre_get_cert( VALUE self )
 }
 
 
+
+/*
+ * Wrap a zcert_t in a Zyre::Cert object.
+ */
+VALUE
+rzyre_wrap_cert( zcert_t *ptr )
+{
+	VALUE wrapper = rzyre_cert_alloc( rzyre_cZyreCert );
+	zcert_t *copy = zcert_dup( ptr );
+
+	RTYPEDDATA_DATA( wrapper ) = copy;
+
+	return wrapper;
+}
+
+
+
+
 /*
  * call-seq:
  *   Zyre::Cert.from( public_key, secret_key )    -> cert
@@ -104,6 +130,42 @@ rzyre_cert_s_from( VALUE class, VALUE public_key, VALUE secret_key )
 }
 
 
+
+/*
+ * call-seq:
+ *   Zyre::Cert.from_public( public_key )    -> cert
+ *
+ * Create a public certificate from a +public_key+ string.
+ *
+ */
+static VALUE
+rzyre_cert_s_from_public( VALUE class, VALUE public_key )
+{
+	VALUE self = rzyre_cert_alloc( class );
+	zcert_t *ptr = NULL;
+	const char *pub_str = StringValuePtr( public_key );
+
+	if ( RSTRING_LEN(public_key) == 32 ) {
+		ptr = zcert_new_from( (const byte *)pub_str, EMPTY_KEY );
+	} else if ( RSTRING_LEN(public_key) == 40 ) {
+#ifdef HAVE_ZCERT_NEW_FROM_TXT
+		ptr = zcert_new_from_txt( pub_str, Z85_EMPTY_KEY );
+#else
+		rb_raise( rb_eNotImpError,
+			"can't create a key from encoded keys: Czmq is too old!" );
+#endif
+	}
+
+	if ( !ptr ) {
+		rb_raise( rb_eArgError, "invalid key" );
+	}
+
+	RTYPEDDATA_DATA( self ) = ptr;
+
+	return self;
+}
+
+
 /*
  * call-seq:
  *   Zyre::Cert.load( filename )    -> cert
@@ -262,7 +324,7 @@ rzyre_cert_meta( VALUE self, VALUE name )
 	const char *name_str = StringValuePtr( name );
 	const char *value = zcert_meta( ptr, name_str );
 
-	if ( value ) rval = rb_str_new_cstr( value );
+	if ( value ) rval = rb_utf8_str_new_cstr( value );
 
 	return rval;
 }
@@ -357,7 +419,8 @@ static VALUE
 rzyre_cert_save_public( VALUE self, VALUE filename )
 {
 	zcert_t *ptr = rzyre_get_cert( self );
-	const char *filename_str = StringValueCStr( filename );
+	VALUE filename_s = rb_funcall( filename, rb_intern("to_s"), 0 );
+	const char *filename_str = StringValueCStr( filename_s );
 	int result;
 
 	result = zcert_save_public( ptr, filename_str );
@@ -477,6 +540,7 @@ rzyre_init_cert( void ) {
 	rb_define_alloc_func( rzyre_cZyreCert, rzyre_cert_alloc );
 
 	rb_define_singleton_method( rzyre_cZyreCert, "from", rzyre_cert_s_from, 2 );
+	rb_define_singleton_method( rzyre_cZyreCert, "from_public", rzyre_cert_s_from_public, 1 );
 	rb_define_singleton_method( rzyre_cZyreCert, "load", rzyre_cert_s_load, 1 );
 
 	rb_define_protected_method( rzyre_cZyreCert, "initialize", rzyre_cert_initialize, 0 );

data/ext/zyre_ext/certstore.c

@@ -0,0 +1,208 @@
+/*
+ *  certstore.c - A curve certificate store for use with Zyre.
+ *  $Id$
+ *
+ *  Authors:
+ *    * Michael Granger <ged@FaerieMUD.org>
+ *
+ */
+
+#include "zyre_ext.h"
+
+VALUE rzyre_cZyreCertstore;
+
+// Forward declarations
+static void rzyre_certstore_free( void *ptr );
+
+
+static const rb_data_type_t rzyre_certstore_t = {
+	.wrap_struct_name = "Zyre::Certstore",
+	.function = {
+		.dmark = NULL,
+		.dfree = rzyre_certstore_free,
+	},
+	.data = NULL,
+	.flags = RUBY_TYPED_FREE_IMMEDIATELY,
+};
+
+
+/*
+ * Free function
+ */
+static void
+rzyre_certstore_free( void *ptr )
+{
+	if ( ptr ) {
+		zcertstore_destroy( (zcertstore_t **)&ptr );
+	}
+}
+
+
+/*
+ * Alloc function
+ */
+static VALUE
+rzyre_certstore_alloc( VALUE klass )
+{
+	return TypedData_Wrap_Struct( klass, &rzyre_certstore_t, NULL );
+}
+
+
+/*
+ * Fetch the data pointer and check it for sanity.
+ */
+inline zcertstore_t *
+rzyre_get_certstore( VALUE self )
+{
+	zcertstore_t *ptr;
+
+	if ( !IsZyreCertstore(self) ) {
+		rb_raise( rb_eTypeError, "wrong argument type %s (expected Zyre::Certstore)",
+			rb_class2name(CLASS_OF( self )) );
+	}
+
+	ptr = DATA_PTR( self );
+	assert( ptr );
+
+	return ptr;
+}
+
+
+
+/*
+ * call-seq:
+ *    Zyre::Certstore.new                -> certstore
+ *    Zyre::Certstore.new( directory )   -> certstore
+ *
+ * Create a new certificate store. If not +directory+ is given, creates an
+ * in-memory store.
+ *
+ */
+static VALUE
+rzyre_certstore_initialize( int argc, VALUE *argv, VALUE self )
+{
+	VALUE directory = Qnil;
+	zcertstore_t *ptr;
+
+	TypedData_Get_Struct( self, zcertstore_t, &rzyre_certstore_t, ptr );
+	if ( !ptr ) {
+		rb_scan_args( argc, argv, "01", &directory );
+
+		if ( RTEST(directory) ) {
+			VALUE dir_string = rb_funcall( directory, rb_intern("to_s"), 0 );
+			const char *location = StringValueCStr( dir_string );
+			ptr = zcertstore_new( location );
+		} else {
+			ptr = zcertstore_new( NULL );
+		}
+
+		assert( ptr );
+		RTYPEDDATA_DATA( self ) = ptr;
+	}
+
+	return self;
+}
+
+
+
+/*
+ * call-seq:
+ *    certstore.lookup( public_key )
+ *
+ * Look up certificate by public key, returns Zyre::Cert object if found,
+ * else returns `nil`. The +public_key+ should be a String in Z85 text format.
+ *
+ */
+static VALUE
+rzyre_certstore_lookup( VALUE self, VALUE public_key )
+{
+	zcertstore_t *ptr = rzyre_get_certstore( self );
+	const char *key_txt = StringValueCStr( public_key );
+	zcert_t *cert = zcertstore_lookup( ptr, key_txt );
+
+	if ( cert ) {
+		VALUE zyre_cert = rzyre_wrap_cert( cert );
+		return zyre_cert;
+	}
+
+	return Qnil;
+}
+
+
+
+/*
+ * call-seq:
+ *    certstore.insert( certificate )
+ *
+ * Insert +certificate+ (a Zyre::Cert) into certificate store in memory. Note
+ * that this does not save the certificate to disk. To do that, use Zyre::Cert#save
+ * directly on the certificate.
+ *
+ */
+static VALUE
+rzyre_certstore_insert( VALUE self, VALUE cert )
+{
+	zcertstore_t *ptr = rzyre_get_certstore( self );
+	zcert_t *zcert = rzyre_get_cert( cert );
+	zcert_t *zcert_owned = zcert_dup( zcert );
+
+	assert( zcert_owned );
+	zcertstore_insert( ptr, &zcert_owned );
+
+	return Qtrue;
+}
+
+
+/*
+ * call-seq:
+ *    certstore.print
+ *
+ * Print list of certificates in store to logging facility.
+ *
+ */
+static VALUE
+rzyre_certstore_print( VALUE self )
+{
+	zcertstore_t *ptr = rzyre_get_certstore( self );
+
+	zcertstore_print( ptr );
+
+	return Qtrue;
+}
+
+
+
+/*
+ * Initialize the Cert class.
+ */
+void
+rzyre_init_certstore( void ) {
+
+#ifdef FOR_RDOC
+	rb_cData = rb_define_class( "Data" );
+	rzyre_mZyre = rb_define_module( "Zyre" );
+#endif
+
+	/*
+	 * Document-class: Zyre::Certstore
+	 *
+	 * A certificate store for Zyre curve authentication.
+	 *
+	 * Refs:
+	 * - http://api.zeromq.org/czmq4-0:zcertstore
+	 *
+	 */
+	rzyre_cZyreCertstore = rb_define_class_under( rzyre_mZyre, "Certstore", rb_cObject );
+
+	rb_define_alloc_func( rzyre_cZyreCertstore, rzyre_certstore_alloc );
+
+	rb_define_protected_method( rzyre_cZyreCertstore, "initialize", rzyre_certstore_initialize, -1 );
+
+	rb_define_method( rzyre_cZyreCertstore, "lookup", rzyre_certstore_lookup, 1 );
+	rb_define_method( rzyre_cZyreCertstore, "insert", rzyre_certstore_insert, 1 );
+
+	rb_define_method( rzyre_cZyreCertstore, "print", rzyre_certstore_print, 0 );
+
+	rb_require( "zyre/certstore" );
+}
+

data/ext/zyre_ext/extconf.rb

@@ -31,6 +31,7 @@ have_func( 'zmq_z85_encode', 'zmq.h' )
 have_func( 'zmq_z85_decode', 'zmq.h' )
 
 have_func( 'zcert_unset_meta', 'czmq.h' )
+have_func( 'zcert_new_from_txt', 'czmq.h' )
 
 create_header()
 create_makefile( 'zyre_ext' )

data/ext/zyre_ext/zyre_ext.c

@@ -514,5 +514,6 @@ Init_zyre_ext()
 	rzyre_init_event();
 	rzyre_init_poller();
 	rzyre_init_cert();
+	rzyre_init_certstore();
 }
 

data/ext/zyre_ext/zyre_ext.h

@@ -87,6 +87,7 @@ extern VALUE rzyre_cZyreNode;
 extern VALUE rzyre_cZyreEvent;
 extern VALUE rzyre_cZyrePoller;
 extern VALUE rzyre_cZyreCert;
+extern VALUE rzyre_cZyreCertstore;
 
 extern zactor_t *auth_actor;
 
@@ -99,6 +100,7 @@ extern zactor_t *auth_actor;
 #define IsZyreEvent( obj ) rb_obj_is_kind_of( (obj), rzyre_cZyreEvent )
 #define IsZyrePoller( obj ) rb_obj_is_kind_of( (obj), rzyre_cZyrePoller )
 #define IsZyreCert( obj ) rb_obj_is_kind_of( (obj), rzyre_cZyreCert )
+#define IsZyreCertstore( obj ) rb_obj_is_kind_of( (obj), rzyre_cZyreCertstore )
 
 /* --------------------------------------------------------------
  * Utility functions
@@ -115,9 +117,11 @@ extern void rzyre_init_node _(( void ));
 extern void rzyre_init_event _(( void ));
 extern void rzyre_init_poller _(( void ));
 extern void rzyre_init_cert _(( void ));
+extern void rzyre_init_certstore _(( void ));
 
 extern zyre_t * rzyre_get_node _(( VALUE ));
 extern zcert_t * rzyre_get_cert _(( VALUE ));
+extern VALUE rzyre_wrap_cert _(( zcert_t * ));
 
 #endif /* end of include guard: ZYRE_EXT_H_90322ABD */
 

data/lib/zyre/cert.rb

@@ -13,6 +13,7 @@ class Zyre::Cert
 
 	# The placeholder key that is set as the secret key for a public certificate.
 	EMPTY_KEY = "\x00" * 32
+	Z85_EMPTY_KEY = Zyre.z85_encode( EMPTY_KEY )
 
 
 	# Use the Zyre module's logger

data/lib/zyre/certstore.rb

@@ -0,0 +1,14 @@
+# -*- ruby -*-
+
+require 'loggability'
+
+require 'zyre' unless defined?( Zyre )
+
+
+#--
+# See also: ext/zyre_ext/certstore.c
+class Zyre::Certstore
+	extend Loggability
+
+
+end # class Zyre::Certstore

data/lib/zyre.rb

@@ -13,7 +13,7 @@ module Zyre
 
 
 	# Gem version (semver)
-	VERSION = '0.7.0'
+	VERSION = '0.8.0'
 
 	# Set up a logger for Zyre classes
 	log_as :zyre

data/spec/zyre/cert_spec.rb

@@ -27,6 +27,17 @@ RSpec.describe( Zyre::Cert ) do
 	end
 
 
+	it "can be created from public key" do
+		cert = described_class.new
+
+		result = described_class.from_public( cert.public_key )
+
+		expect( result ).to be_a( described_class )
+		expect( result.public_txt ).to eq( cert.public_txt )
+		expect( result.secret_txt ).to eq( Zyre::Cert::Z85_EMPTY_KEY )
+	end
+
+
 	it "can be saved to and loaded from a file" do
 		cert = described_class.new
 		cert.save( cert_file.path )

data/spec/zyre/certstore_spec.rb

@@ -0,0 +1,60 @@
+# -*- ruby -*-
+
+require_relative '../spec_helper'
+
+require 'pathname'
+require 'tmpdir'
+require 'zyre/certstore'
+
+
+RSpec.describe( Zyre::Certstore ) do
+
+	let( :certstore_location ) { Pathname(Dir::Tmpname.create(['zyre-cerstore-', '-spec']) {}) }
+
+
+	it "can be created as an in-memory store" do
+		instance = described_class.new
+
+		expect( instance ).to be_a( described_class )
+	end
+
+
+	it "can be created with a directory name" do
+		instance = described_class.new( certstore_location )
+
+		expect( instance ).to be_a( described_class )
+	end
+
+
+	it "can have certs added to it" do
+		instance = described_class.new
+
+		cert = Zyre::Cert.new
+		cert[:name] = 'test1'
+
+		instance.insert( cert )
+
+		res = instance.lookup( cert.public_txt )
+		expect( res ).to be_a( Zyre::Cert )
+		expect( res.public_txt ).to eq( cert.public_txt )
+		expect( res[:name] ).to eq( 'test1' )
+	end
+
+
+	it "can lookup certs added to a directory certstore" do
+		certstore_location.mkpath
+		instance = described_class.new( certstore_location )
+
+		cert = Zyre::Cert.new
+		cert[:name] = 'test23'
+		cert.save_public( certstore_location / 'mykey.txt' )
+
+		res = instance.lookup( cert.public_txt )
+
+		expect( res ).to be_a( Zyre::Cert )
+		expect( res.public_txt ).to eq( cert.public_txt )
+		expect( res[:name] ).to eq( 'test23' )
+	end
+
+end
+

data/spec/zyre/node_spec.rb

@@ -538,8 +538,6 @@ RSpec.describe( Zyre::Node ) do
 		end
 
 
-		it "supports CURVE authentication"
-
 		it "supports advertised_endpoint="
 		it "supports gossip_connect_curve"
 		it "supports gossip_unpublish"

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: zyre
 version: !ruby/object:Gem::Version
-  version: 0.7.0
+  version: 0.8.0
 platform: ruby
 authors:
 - Michael Granger
@@ -9,9 +9,9 @@ bindir: bin
 cert_chain:
 - |
   -----BEGIN CERTIFICATE-----
-  MIIEbDCCAtSgAwIBAgIBATANBgkqhkiG9w0BAQsFADA+MQwwCgYDVQQDDANnZWQx
+  MIIEMDCCApigAwIBAgIBAjANBgkqhkiG9w0BAQsFADA+MQwwCgYDVQQDDANnZWQx
   GTAXBgoJkiaJk/IsZAEZFglGYWVyaWVNVUQxEzARBgoJkiaJk/IsZAEZFgNvcmcw
-  HhcNMjUwMTAxMDMzMTA5WhcNMjYwMTAxMDMzMTA5WjA+MQwwCgYDVQQDDANnZWQx
+  HhcNMjYwMjAyMjExMjQ0WhcNMjcwMjAyMjExMjQ0WjA+MQwwCgYDVQQDDANnZWQx
   GTAXBgoJkiaJk/IsZAEZFglGYWVyaWVNVUQxEzARBgoJkiaJk/IsZAEZFgNvcmcw
   ggGiMA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQC/JWGRHO+USzR97vXjkFgt
   83qeNf2KHkcvrRTSnR64i6um/ziin0I0oX23H7VYrDJC9A/uoUa5nGRJS5Zw/+wW
@@ -21,20 +21,19 @@ cert_chain:
   cZ+lPcg834G9DrqW2zhqUoLr1MTly4pqxYGb7XoDhoR7dd1kFE2a067+DzWC/ADt
   +QkcqWUm5oh1fN0eqr7NsZlVJDulFgdiiYPQiIN7UNsii4Wc9aZqBoGcYfBeQNPZ
   soo/6za/bWajOKUmDhpqvaiRv9EDpVLzuj53uDoukMMwxCMfgb04+ckQ0t2G7wqc
-  /D+K9JW9DDs3Yjgv9k4h7YMhW5gftosd+NkNC/+Y2CkCAwEAAaN1MHMwCQYDVR0T
+  /D+K9JW9DDs3Yjgv9k4h7YMhW5gftosd+NkNC/+Y2CkCAwEAAaM5MDcwCQYDVR0T
   BAIwADALBgNVHQ8EBAMCBLAwHQYDVR0OBBYEFHKN/nkRusdqCJEuq3lgB3fJvyTg
-  MBwGA1UdEQQVMBOBEWdlZEBGYWVyaWVNVUQub3JnMBwGA1UdEgQVMBOBEWdlZEBG
-  YWVyaWVNVUQub3JnMA0GCSqGSIb3DQEBCwUAA4IBgQBjrBzCKWzXFigswYSPzGO8
-  9atBtY/eQdcN6KCL+PTzQBD9yePGF7H/xsww3awRauP+D1VUjCFbiiC3Qb0Ww0Qd
-  OVA0s10T9KpZ8nb2XyKocSK7TfgDhcyr0V4H2MPxwK9SWYjGGh8z9z9HmT0i3PyX
-  fXOSzzEoG6u26HIOg0nxSpitEjiAHBekQxy9ka5NuQbxoxMg+eIHU4rU9IUhu0Rf
-  wl4wuvPVE3UQK0v0uqT6rJukEKQ1iNgK5R8klgEIv79XhQPgTkMt31FGfrwOp6HB
-  OE0HMwOwY9B0w3aOxxdMQyyRxaZVv3eWE5RimQI7T0TUaxPngtS33ByMZjTeidxi
-  ESIUEPVXoBCkFgLW1EVlBb+rG7WLYod4eVll4tKA42Bi2Ju90tqiJ1YQiyuRfCnp
-  8qAqdfV+4u6Huu1KzAuDQCheyEyISsLST37sU/irV3czV6BiFipWag1XiJciRT3A
-  wZqCfTNVHTdtsCbfdA1DsA3RdG2iEH3TOHzv1Rqzqh4=
+  MA0GCSqGSIb3DQEBCwUAA4IBgQAQwvsRIJ8FV1bYadOnOg2jcSzZXjt0FVPbOQG9
+  eQ9UM7+bTPU0eRCGZuOPrEp8ROc1s5zwZNFv7qHWv/zWWC6sIj4gEnCZkUugK03k
+  bYDsSlkyjiQ4ApVV00+h/Vhxcw+RLIZuqy2QFl8YAfMJm+JS8G7SuoqpFjbv3UUF
+  vrObIiO7LbhJxpYzTGkGzMFigcnm6vIGMex4AgtArc2RpWOvtAXQrU7CZHUkcdQM
+  4n5eVK+m3IZlD7dd4HoPT2jF2cOGmk8XFclT0GcPVYmEWFFmotN2aiMj4sqVm/Ob
+  V+FmyTUy4gVtcNOFO/sBnFRiQW0fxV9/97Dog9ciYesfiAhm4EpcuTmatdAuMrZR
+  WBmf+jXIub5S7RBw+m0mk2xhmcSkg1vY5w6IEIhSo2e2gE9rA0rIkZO5wP4sCouE
+  XdaRMEnt/AVHUzroBR3CWAz/6ZnDF8GS7EK1bOfM+YWqJL30g7PoxpT+UJTqWJtM
+  CCC1LSoBD7OEUiaIMWUo4h7xWIs=
   -----END CERTIFICATE-----
-date: 2025-08-05 00:00:00.000000000 Z
+date: 2026-02-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: loggability
@@ -169,6 +168,7 @@ files:
 - LICENSE.txt
 - README.md
 - ext/zyre_ext/cert.c
+- ext/zyre_ext/certstore.c
 - ext/zyre_ext/event.c
 - ext/zyre_ext/extconf.rb
 - ext/zyre_ext/node.c
@@ -178,6 +178,7 @@ files:
 - lib/observability/instrumentation/zyre.rb
 - lib/zyre.rb
 - lib/zyre/cert.rb
+- lib/zyre/certstore.rb
 - lib/zyre/event.rb
 - lib/zyre/event/enter.rb
 - lib/zyre/event/evasive.rb
@@ -195,6 +196,7 @@ files:
 - spec/observability/instrumentation/zyre_spec.rb
 - spec/spec_helper.rb
 - spec/zyre/cert_spec.rb
+- spec/zyre/certstore_spec.rb
 - spec/zyre/event_spec.rb
 - spec/zyre/node_spec.rb
 - spec/zyre/poller_spec.rb
@@ -222,7 +224,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.9
+rubygems_version: 4.0.3
 specification_version: 4
 summary: A ZRE library for Ruby.
 test_files: []