Class: Occi::Api::Client::Http::AuthnPlugins::X509

Inherits:
Base
  • Object
show all
Defined in:
lib/occi/api/client/http/authn_plugins/x509.rb

Instance Attribute Summary

Attributes inherited from Base

#env_ref, #fallbacks, #options

Instance Method Summary collapse

Methods inherited from Base

#authenticate

Constructor Details

#initialize(env_ref, options = {}) ⇒ X509

Returns a new instance of X509.



7
8
9
10
 
# File 'lib/occi/api/client/http/authn_plugins/x509.rb', line 7

def initialize(env_ref, options = {})
  super env_ref, options
  @fallbacks = %w(keystone)
end

Instance Method Details

#setup(options = {}) ⇒ Object

Raises:

  • (ArgumentError) 


12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
 
# File 'lib/occi/api/client/http/authn_plugins/x509.rb', line 12

def setup(options = {})
  # set up pem and optionally pem_password and ssl_ca_path
  raise ArgumentError, "Missing required option 'user_cert' for x509 auth!" unless @options[:user_cert]
  raise ArgumentError, "The file specified in 'user_cert' does not exist!" unless File.exists? @options[:user_cert]

  # handle credentials, separate PKCS12 from PEM
  cert_content = File.open(@options[:user_cert], 'rb').read
  if /\A(.)+\.p12\z/ =~ @options[:user_cert]
    @env_ref.class.pkcs12 cert_content, @options[:user_cert_password]
  else
    @env_ref.class.pem cert_content, @options[:user_cert_password]
  end

  @env_ref.class.ssl_ca_path @options[:ca_path] if @options[:ca_path]
  @env_ref.class.ssl_ca_file @options[:ca_file] if @options[:ca_file]

  if @options[:voms]
    cert_ary = ::Occi::Api::Client::AuthnUtils.certs_to_file_ary @options[:user_cert]

    # remove the first cert since it was already used as pem_cert
    # use the rest to establish the chain of trust
    cert_ary.shift
    @env_ref.class.ssl_extra_chain_cert cert_ary unless cert_ary.empty?
  end
end