Class: Handsomefencer::Environment::Crypto

Inherits:
Object
  • Object
show all
Defined in:
lib/handsomefencer/environment/crypto.rb

Instance Method Summary collapse

Constructor Details

#initialize ⇒ Crypto

Returns a new instance of Crypto.



6
7
8
9
10
 
# File 'lib/handsomefencer/environment/crypto.rb', line 6

def initialize
  @cipher = OpenSSL::Cipher.new 'AES-128-CBC'
  @salt = '8 octets'
  get_deploy_key
end

Instance Method Details

#decrypt(file) ⇒ Object 



39
40
41
42
43
44
45
 
# File 'lib/handsomefencer/environment/crypto.rb', line 39

def decrypt(file)
  encrypted = Base64.decode64 File.read(file)
  @cipher.decrypt.pkcs5_keyivgen @pass_phrase, @salt
  decrypted = @cipher.update(encrypted) + @cipher.final
  decrypted_file = file.split('.enc').first
  write_to_file decrypted, decrypted_file
end

#encrypt(file) ⇒ Object 



33
34
35
36
37
 
# File 'lib/handsomefencer/environment/crypto.rb', line 33

def encrypt(file)
  @cipher.encrypt.pkcs5_keyivgen @pass_phrase, @salt
  encrypted = @cipher.update(File.read file) + @cipher.final
  write_to_file(Base64.encode64(encrypted), file + '.enc')
end

#expose(directory = nil, extension = nil) ⇒ Object 



58
59
60
61
62
 
# File 'lib/handsomefencer/environment/crypto.rb', line 58

def expose(directory=nil, extension=nil)
  extension = extension || '.env.enc'
  directory = directory || '.env'
  source_files(directory, extension).each { |file| decrypt(file) }
end

#get_deploy_key ⇒ Object 



12
13
14
15
16
17
18
 
# File 'lib/handsomefencer/environment/crypto.rb', line 12

def get_deploy_key
  if ENV['DEPLOY_KEY'].nil?
    @pass_phrase = read_deploy_key.nil? ? save_deploy_key : read_deploy_key
  else
    @pass_phrase = ENV['DEPLOY_KEY']
  end
end

#obfuscate(directory = nil, extension = nil) ⇒ Object 



52
53
54
55
56
 
# File 'lib/handsomefencer/environment/crypto.rb', line 52

def obfuscate(directory=nil, extension=nil)
  extension = extension || '.env'
  directory = directory || '.env'
  source_files(directory, extension).each { |file| encrypt file }
end

#read_deploy_key ⇒ Object 



29
30
31
 
# File 'lib/handsomefencer/environment/crypto.rb', line 29

def read_deploy_key
  File.exist?(dkfile) ? Base64.decode64(File.read dkfile) : nil
end

#save_deploy_key ⇒ Object 



20
21
22
23
24
25
26
27
 
# File 'lib/handsomefencer/environment/crypto.rb', line 20

def save_deploy_key
  @new_key = @cipher.random_key
  write_to_file Base64.encode64(@new_key), dkfile
  unless File.read('.gitignore').match dkfile
    open('.gitignore', 'a') { |f| f << "/" + dkfile }
  end
  read_deploy_key
end

#source_files(directory = nil, extension = nil) ⇒ Object 



47
48
49
50
 
# File 'lib/handsomefencer/environment/crypto.rb', line 47

def source_files(directory=nil, extension=nil)
  default = Dir.glob(".env/**/*#{extension}")
  directory.nil? ? default : Dir.glob(directory + "/**/*#{extension}")
end