Class: Kybus::SSL::Certificate

Inherits:
Object
  • Object
show all
Defined in:
lib/kybus/ssl/certificate.rb

Overview

Stores a X509 certificate.

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(config, inventory) ⇒ Certificate

Returns a new instance of Certificate.



12
13
14
15
16
17
18
19
20
21
 
# File 'lib/kybus/ssl/certificate.rb', line 12

def initialize(config, inventory)
  @config = config
  @inventory = inventory

  if File.file?(@config.key_path) && File.file?(@config.crt_path)
    load_key!
  else
    create_key!
  end
end

Instance Attribute Details

#cert ⇒ Object (readonly)

Returns the value of attribute cert.



10
11
12
 
# File 'lib/kybus/ssl/certificate.rb', line 10

def cert
  @cert
end

#config ⇒ Object (readonly)

Returns the value of attribute config.



10
11
12
 
# File 'lib/kybus/ssl/certificate.rb', line 10

def config
  @config
end

#key ⇒ Object (readonly)

Returns the value of attribute key.



10
11
12
 
# File 'lib/kybus/ssl/certificate.rb', line 10

def key
  @key
end

Instance Method Details

#ca_name ⇒ Object 



78
79
80
 
# File 'lib/kybus/ssl/certificate.rb', line 78

def ca_name
  @config['ca']
end

#configure_details! ⇒ Object 



49
50
51
 
# File 'lib/kybus/ssl/certificate.rb', line 49

def configure_details!
  @config.configure_cert_details!(@cert)
end

#configure_extensions! ⇒ Object 



53
54
55
56
 
# File 'lib/kybus/ssl/certificate.rb', line 53

def configure_extensions!
  @extensions.issuer_certificate = @ca.cert
  @config.configure_extensions!(@cert, @extensions)
end

#create! ⇒ Object 



37
38
39
40
41
42
43
44
45
46
47
 
# File 'lib/kybus/ssl/certificate.rb', line 37

def create!
  if File.file?(@config.key_path) && File.file?(@config.crt_path)
    return puts "Certificate already exists #{@config.key_path} #{@cert.subject}"
  end

  @ca = @inventory.ca(@config['parent'])
  configure_details!
  configure_extensions!
  sign!
  save!
end

#create_key! ⇒ Object 



23
24
25
26
27
28
29
30
 
# File 'lib/kybus/ssl/certificate.rb', line 23

def create_key!
  puts @config.instance_variable_get(:@config)
  @key = OpenSSL::PKey::RSA.new(@config['key_size'])
  @cert = OpenSSL::X509::Certificate.new
  @cert.public_key = @key.public_key
  @extensions = OpenSSL::X509::ExtensionFactory.new
  @extensions.subject_certificate = @cert
end

#export_to_pfx! ⇒ Object 



70
71
72
73
74
75
76
 
# File 'lib/kybus/ssl/certificate.rb', line 70

def export_to_pfx!
  passphrase = SecureRandom.alphanumeric(15)
  chain = [@cert] + @inventory.ca_cert_chain(@config['parent'])
  pkcs12 = OpenSSL::PKCS12.create(passphrase, @config['email'] || @config['name'], @key, @cert, chain)
  File.write(@config.pfx_path, pkcs12.to_der)
  puts "PFX certificate saved with passphrase: #{passphrase}"
end

#load_key! ⇒ Object 



32
33
34
35
 
# File 'lib/kybus/ssl/certificate.rb', line 32

def load_key!
  @key = OpenSSL::PKey::RSA.new(File.read(@config.key_path))
  @cert = OpenSSL::X509::Certificate.new(File.read(@config.crt_path))
end

#save! ⇒ Object 



63
64
65
66
67
68
 
# File 'lib/kybus/ssl/certificate.rb', line 63

def save!
  puts "Saving certificate #{@cert.subject}"
  File.write(@config.key_path, @key.to_s)
  File.write(@config.crt_path, @cert.to_s)
  export_to_pfx!
end

#sign! ⇒ Object 



58
59
60
61
 
# File 'lib/kybus/ssl/certificate.rb', line 58

def sign!
  @cert.issuer = @ca.cert.subject
  @cert.sign(@ca.key, OpenSSL::Digest.new('SHA256'))
end