Class: Nanite::Certificate

Inherits:
Object show all
Defined in:
lib/nanite/security/certificate.rb

Overview

X.509 Certificate management

Instance Attribute Summary collapse

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(key, issuer, subject, valid_for = 3600*24*365*10) ⇒ Certificate

Generate a signed X.509 certificate

Arguments:

- key: RsaKeyPair, key pair used to sign certificate
- issuer: DistinguishedName, certificate issuer
- subject: DistinguishedName, certificate subject
- valid_for: Time in seconds before certificate expires (10 years by default)



16
17
18
19
20
21
22
23
24
25
26
 
# File 'lib/nanite/security/certificate.rb', line 16

def initialize(key, issuer, subject, valid_for = 3600*24*365*10)
  @raw_cert = OpenSSL::X509::Certificate.new
  @raw_cert.version = 2
  @raw_cert.serial = 1
  @raw_cert.subject = subject.to_x509
  @raw_cert.issuer = issuer.to_x509
  @raw_cert.public_key = key.to_public.raw_key
  @raw_cert.not_before = Time.now
  @raw_cert.not_after = Time.now + valid_for
  @raw_cert.sign(key.raw_key, OpenSSL::Digest::SHA1.new)
end

Instance Attribute Details

#raw_cert ⇒ Object

Underlying OpenSSL cert



7
8
9
 
# File 'lib/nanite/security/certificate.rb', line 7

def raw_cert
  @raw_cert
end

Class Method Details

.from_data(data) ⇒ Object

Initialize with raw certificate



36
37
38
39
40
41
 
# File 'lib/nanite/security/certificate.rb', line 36

def self.from_data(data)
  cert = OpenSSL::X509::Certificate.new(data)
  res = Certificate.allocate
  res.instance_variable_set(:@raw_cert, cert)
  res
end

.load(file) ⇒ Object

Load certificate from file



29
30
31
32
33
 
# File 'lib/nanite/security/certificate.rb', line 29

def self.load(file)
  res = nil
  File.open(file, 'r') { |f| res = from_data(f) }
  res
end

Instance Method Details

#data ⇒ Object Also known as: to_s

Certificate data in PEM format



51
52
53
 
# File 'lib/nanite/security/certificate.rb', line 51

def data
  @raw_cert.to_pem
end

#save(file) ⇒ Object

Save certificate to file in PEM format



44
45
46
47
48
 
# File 'lib/nanite/security/certificate.rb', line 44

def save(file)
  File.open(file, "w") do |f|
    f.write(@raw_cert.to_pem)
  end
end