summaryrefslogtreecommitdiffstats
path: root/spec/unit/ssl/key.rb
Commit message (Collapse)AuthorAgeFilesLines
* Caching the SSL store for the SSL Host.Luke Kanies2008-08-071-1/+1
| | | | | | | | | We were creating a new SSL store every time, which caused problems during testing -- it created an infinite loop when trying to create the store while looking up the CRL. Signed-off-by: Luke Kanies <luke@madstop.com>
* Making all certificates only support the plaintext format.Luke Kanies2008-08-041-0/+4
| | | | | | | None of them actually support yaml or marshal by default, and plaintext is easiest anyway. Signed-off-by: Luke Kanies <luke@madstop.com>
* Fixing #1168 for REST -- all ssl classes downcase their names.Luke Kanies2008-06-151-0/+4
| | | | This is a much cleaner fix than the xmlrpc version, thankfully. :)
* Moving the password file handling into the SSL::Key class.Luke Kanies2008-04-171-4/+45
| | | | | | | | | | | | | | This was necessary because when the Indirector is used, there isn't necessarily enough context available to know when a password file should be used (e.g., when reading a Key from disk, you don't know if that key was encrypted). Now, the Key class automatically uses the right password file, and only tries to use those files that actually exist. This isn't very flexible, in that it only allows one CA file and one non-CA file, but no one really uses anything but the CA file anyway.
* Adding SSL::Host-level support for managing the terminus andLuke Kanies2008-04-171-0/+4
| | | | | cache classes. Also, defaulting to the :file terminus for all of the SSL classes.
* Making the first pass at using requests instead ofLuke Kanies2008-04-151-5/+0
| | | | | specifying the terminus class. The individual ssl classes now work, but the ssl host class doesn't yet.
* Adding a :to_text method that will convert the containedLuke Kanies2008-04-151-0/+7
| | | | thing to readable human text.
* We have a basically functional CA -- it can signLuke Kanies2008-04-151-26/+38
| | | | | | requests and return certificates. There's still plenty more work to do, but I'm probably not much more than a day away from redoing puppetca to use this code.
* The certificate authority is now functional and tested.Luke Kanies2008-04-151-0/+30
|
* This is a first pass at the certificate authority.Luke Kanies2008-04-151-0/+12
| | | | | The tests are basically entirely absent still, but the structure is all there.
* It looks like all of the new ssl classes for managingLuke Kanies2008-04-151-1/+2
| | | | | | | keys, certificates, and requests now work, including talking to the certificate authority. Now we just need the authority itself, along with the necessary REST terminii.
* Adding he last of the indirection classes for the sslLuke Kanies2008-04-151-0/+5
| | | | classes, finally including the certificate requests.
* The basics for the certificate and certificate requestLuke Kanies2008-04-151-0/+19
| | | | | indirection terminii are done. I need to move most of the test code to a shared behaviour now.
* First stage of cert refactoring: PrivateLuke Kanies2008-04-151-0/+64
keys kind of work.