Module: Sus::Fixtures::OpenSSL::CertificateAuthorityContext

Included in:
HostsCertificatesContext, ValidCertificateContext
Defined in:
lib/sus/fixtures/openssl/certificate_authority_context.rb

Instance Method Summary collapse

Instance Method Details

#certificate_authority_certificate ⇒ Object

The certificate authority is used for signing and validating the certificate which is used for communciation:



22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
 
# File 'lib/sus/fixtures/openssl/certificate_authority_context.rb', line 22

def certificate_authority_certificate
	@certificate_authority_certificate ||= ::OpenSSL::X509::Certificate.new.tap do |certificate|
		certificate.subject = certificate_authority_name
		# We use the same issuer as the subject, which makes this certificate self-signed:
		certificate.issuer = certificate_authority_name
		
		certificate.public_key = certificate_authority_key.public_key
		
		certificate.serial = 1
		certificate.version = 2
		
		certificate.not_before = Time.now - 10
		certificate.not_after = Time.now + 3600
		
		extension_factory = ::OpenSSL::X509::ExtensionFactory.new
		extension_factory.subject_certificate = certificate
		extension_factory.issuer_certificate = certificate
		certificate.add_extension extension_factory.create_extension("basicConstraints", "CA:TRUE", true)
		certificate.add_extension extension_factory.create_extension("keyUsage", "keyCertSign, cRLSign", true)
		certificate.add_extension extension_factory.create_extension("subjectKeyIdentifier", "hash")
		certificate.add_extension extension_factory.create_extension("authorityKeyIdentifier", "keyid:always", false)
		
		certificate.sign certificate_authority_key, ::OpenSSL::Digest::SHA256.new
	end
end

#certificate_authority_key ⇒ Object

This key size is generally considered insecure, but it’s fine for testing.



13
14
15
 
# File 'lib/sus/fixtures/openssl/certificate_authority_context.rb', line 13

def certificate_authority_key
	@certificate_authority_key ||= ::OpenSSL::PKey::RSA.new(2048)
end

#certificate_authority_name ⇒ Object 



17
18
19
 
# File 'lib/sus/fixtures/openssl/certificate_authority_context.rb', line 17

def certificate_authority_name
	@certificate_authority_name ||= ::OpenSSL::X509::Name.parse("O=TestCA/CN=localhost")
end

#certificate_store ⇒ Object 



48
49
50
51
52
 
# File 'lib/sus/fixtures/openssl/certificate_authority_context.rb', line 48

def certificate_store
	@certificate_store ||= ::OpenSSL::X509::Store.new.tap do |certificates|
		certificates.add_cert(certificate_authority_certificate)
	end
end