Class: SAML2::Key

Inherits:
Object
  • Object
show all
Defined in:
lib/saml2/key.rb

Defined Under Namespace

Modules: Type

Instance Attribute Summary collapse

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(x509, use = nil, encryption_methods = []) ⇒ Key

Returns a new instance of Key.



20
21
22
 
# File 'lib/saml2/key.rb', line 20

def initialize(x509, use = nil, encryption_methods = [])
  @use, @x509, @encryption_methods = use, x509.gsub(/\w*-+(BEGIN|END) CERTIFICATE-+\w*/, "").strip, encryption_methods
end

Instance Attribute Details

#encryption_methods ⇒ Object

Returns the value of attribute encryption_methods.



10
11
12
 
# File 'lib/saml2/key.rb', line 10

def encryption_methods
  @encryption_methods
end

#use ⇒ Object

Returns the value of attribute use.



10
11
12
 
# File 'lib/saml2/key.rb', line 10

def use
  @use
end

#x509 ⇒ Object

Returns the value of attribute x509.



10
11
12
 
# File 'lib/saml2/key.rb', line 10

def x509
  @x509
end

Class Method Details

.from_xml(node) ⇒ Object 



12
13
14
15
16
17
18
 
# File 'lib/saml2/key.rb', line 12

def self.from_xml(node)
  return nil unless node

  x509 = node.at_xpath('dsig:KeyInfo/dsig:X509Data/dsig:X509Certificate', Namespaces::ALL)
  methods = node.xpath('xenc:EncryptionMethod', Namespaces::ALL)
  new(x509 && x509.content.strip, node['use'], methods.map { |m| m['Algorithm'] })
end

Instance Method Details

#build(builder) ⇒ Object 



40
41
42
43
44
45
46
47
48
49
50
51
52
 
# File 'lib/saml2/key.rb', line 40

def build(builder)
  builder['md'].KeyDescriptor do |builder|
    builder.parent['use'] = use if use
    builder['dsig'].KeyInfo do |builder|
      builder['dsig'].X509Data do |builder|
        builder['dsig'].X509Certificate(x509)
      end
    end
    encryption_methods.each do |method|
      builder['xenc'].EncryptionMethod('Algorithm' => method)
    end
  end
end

#certificate ⇒ Object 



32
33
34
 
# File 'lib/saml2/key.rb', line 32

def certificate
  @certificate ||= OpenSSL::X509::Certificate.new(Base64.decode64(x509))
end

#encryption? ⇒ Boolean

Returns:

  • (Boolean) 


24
25
26
 
# File 'lib/saml2/key.rb', line 24

def encryption?
  use.nil? || use == Type::ENCRYPTION
end

#fingerprint ⇒ Object 



36
37
38
 
# File 'lib/saml2/key.rb', line 36

def fingerprint
  @fingerprint ||= Digest::SHA1.hexdigest(certificate.to_der).gsub(/(\h{2})(?=\h)/, '\1:')
end

#signing? ⇒ Boolean

Returns:

  • (Boolean) 


28
29
30
 
# File 'lib/saml2/key.rb', line 28

def signing?
  use.nil? || use == Type::SIGNING
end