Module: Sus::Fixtures::OpenSSL::HostsCertificatesContext

Includes:
CertificateAuthorityContext
Defined in:
lib/sus/fixtures/openssl/hosts_certificates_context.rb

Instance Method Summary collapse

Methods included from CertificateAuthorityContext

#certificate_authority_certificate, #certificate_authority_key, #certificate_authority_name, #certificate_store

Instance Method Details

#certificates ⇒ Object

The certificate used for actual communication:



26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
 
# File 'lib/sus/fixtures/openssl/hosts_certificates_context.rb', line 26

def certificates
  @certificates ||= Hash[
    hosts.collect do |name|
      certificate_name = ::OpenSSL::X509::Name.parse("O=Test/CN=#{name}")
      
      certificate = ::OpenSSL::X509::Certificate.new
      certificate.subject = certificate_name
      certificate.issuer = certificate_authority_certificate.subject
      
      certificate.public_key = keys[name].public_key
      
      certificate.serial = 2
      certificate.version = 2
      
      certificate.not_before = Time.now - 10
      certificate.not_after = Time.now + 3600
      
      extension_factory = ::OpenSSL::X509::ExtensionFactory.new
      extension_factory.subject_certificate = certificate
      extension_factory.issuer_certificate = certificate_authority_certificate
      certificate.add_extension extension_factory.create_extension("keyUsage", "digitalSignature", true)
      certificate.add_extension extension_factory.create_extension("subjectKeyIdentifier", "hash")
      
      certificate.sign certificate_authority_key, ::OpenSSL::Digest::SHA256.new
      
      [name, certificate]
    end
  ]
end

#client_context ⇒ Object 



71
72
73
74
75
76
 
# File 'lib/sus/fixtures/openssl/hosts_certificates_context.rb', line 71

def client_context
  @client_context ||= ::OpenSSL::SSL::SSLContext.new.tap do |context|
    context.cert_store = certificate_store
    context.verify_mode = ::OpenSSL::SSL::VERIFY_PEER
  end
end

#hosts ⇒ Object

Override this to provide a list of host names.



15
16
17
 
# File 'lib/sus/fixtures/openssl/hosts_certificates_context.rb', line 15

def hosts
  []
end

#keys ⇒ Object 



19
20
21
22
23
 
# File 'lib/sus/fixtures/openssl/hosts_certificates_context.rb', line 19

def keys
  @keys ||= Hash[
    hosts.collect{|name| [name, ::OpenSSL::PKey::RSA.new(2048)]}
  ]
end

#server_context ⇒ Object 



56
57
58
59
60
61
62
63
64
65
66
67
68
69
 
# File 'lib/sus/fixtures/openssl/hosts_certificates_context.rb', line 56

def server_context
  @server_context ||= ::OpenSSL::SSL::SSLContext.new.tap do |context|
    context.servername_cb = Proc.new do |socket, name|
      if hosts.include? name
        socket.hostname = name
        
        ::OpenSSL::SSL::SSLContext.new.tap do |context|
          context.cert = certificates[name]
          context.key = keys[name]
        end
      end
    end
  end
end