Class: Nanite::Signature

Inherits:
Object show all
Defined in:
lib/nanite/security/signature.rb

Overview

Signature that can be validated against certificates

Constant Summary collapse

FLAGS = 
OpenSSL::PKCS7::NOCERTS || OpenSSL::PKCS7::BINARY || OpenSSL::PKCS7::NOATTR || OpenSSL::PKCS7::NOSMIMECAP || OpenSSL::PKCS7::DETACH

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(data, cert, key) ⇒ Signature

Create signature using certificate and key pair.

Arguments:

- 'data': Data to be signed
- 'cert': Certificate used for signature
- 'key':  RsaKeyPair used for signature



15
16
17
18
 
# File 'lib/nanite/security/signature.rb', line 15

def initialize(data, cert, key)
  @p7 = OpenSSL::PKCS7.sign(cert.raw_cert, key.raw_key, data, [], FLAGS)
  @store = OpenSSL::X509::Store.new
end

Class Method Details

.from_data(data) ⇒ Object

Load signature previously serialized via ‘data’



21
22
23
24
25
26
 
# File 'lib/nanite/security/signature.rb', line 21

def self.from_data(data)
  sig = Signature.allocate
  sig.instance_variable_set(:@p7, OpenSSL::PKCS7::PKCS7.new(data))
  sig.instance_variable_set(:@store, OpenSSL::X509::Store.new)
  sig
end

Instance Method Details

#data ⇒ Object Also known as: to_s

Signature in PEM format



34
35
36
 
# File 'lib/nanite/security/signature.rb', line 34

def data
  @p7.to_pem
end

#match?(cert) ⇒ Boolean

‘true’ if signature was created using given cert, ‘false’ otherwise

Returns:

  • (Boolean) 


29
30
31
 
# File 'lib/nanite/security/signature.rb', line 29

def match?(cert)
  @p7.verify([cert.raw_cert], @store, nil, OpenSSL::PKCS7::NOVERIFY)
end