Class: Autosign::Decoder

Inherits:
Object
  • Object
show all
Defined in:
lib/autosign/decoder.rb

Overview

Class to abstract X509 certificate signing request decoding. This class is only expected to be used for class methods. The purpose is to extract common fields from CSRs so that individual validators don’t have to re-implement that logic.

Class Method Summary collapse

Class Method Details

.decode_csr(csr) ⇒ Hash

Extract common name and challenge_password OID from X509 SSL Certificate signing requests

Parameters:

  • csr (String) —

    X509 format CSR

Returns:

  • (Hash) —

    hash containing :challenge_password and :common_name keys



11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
 
# File 'lib/autosign/decoder.rb', line 11

def self.decode_csr(csr)
  @log = Logging.logger[self.class]
  @log.debug "decoding CSR"

  begin
    csr = OpenSSL::X509::Request.new(csr)
  rescue OpenSSL::X509::RequestError
    @log.error "Rescued OpenSSL::X509::RequestError; unable to decode CSR"
    return nil
  rescue
    @log.error "Rescued an OpenSSL error. Unable to decode CSR."
    return nil
  end

  # extract challenge password
  challenge_attr = csr.attributes.find { |a| a.oid == 'challengePassword' }
  challenge_password = if challenge_attr
                         challenge_attr.value.value.first.value.to_s
                       else
                         nil
                       end

  # extract common name
  common_name = /^\/CN=(\S*)$/.match(csr.subject.to_s)[1]

  output = {
    :challenge_password => challenge_password,
    :common_name        => common_name
  }

  @log.info "Decoded CSR for CN: " + output[:common_name].to_s
  @log.debug "Decoded CSR as: " + output.to_s
  return output
end