summaryrefslogtreecommitdiffstats
path: root/lib/puppet/ssl/base.rb
blob: f9bbcac642c7163c07c1c6ac01b367308035fad9 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
require 'puppet/ssl'

# The base class for wrapping SSL instances.
class Puppet::SSL::Base
  # For now, use the YAML separator.
  SEPARATOR = "\n---\n"

  def self.from_multiple_s(text)
    text.split(SEPARATOR).collect { |inst| from_s(inst) }
  end

  def self.to_multiple_s(instances)
    instances.collect { |inst| inst.to_s }.join(SEPARATOR)
  end

  def self.wraps(klass)
    @wrapped_class = klass
  end

  def self.wrapped_class
    raise(Puppet::DevError, "#{self} has not declared what class it wraps") unless defined?(@wrapped_class)
    @wrapped_class
  end

  attr_accessor :name, :content

  # Is this file for the CA?
  def ca?
    name == Puppet::SSL::Host.ca_name
  end

  def generate
    raise Puppet::DevError, "#{self.class} did not override 'generate'"
  end

  def initialize(name)
    @name = name.to_s.downcase
  end

  # Read content from disk appropriately.
  def read(path)
    @content = wrapped_class.new(File.read(path))
  end

  # Convert our thing to pem.
  def to_s
    return "" unless content
    content.to_pem
  end

  # Provide the full text of the thing we're dealing with.
  def to_text
    return "" unless content
    content.to_text
  end

  def fingerprint(md = :MD5)
    require 'openssl/digest'

    # ruby 1.8.x openssl digest constants are string
    # but in 1.9.x they are symbols
    mds = md.to_s.upcase
    if OpenSSL::Digest.constants.include?(mds)
      md = mds
    elsif OpenSSL::Digest.constants.include?(mds.to_sym)
      md = mds.to_sym
    else
      raise ArgumentError, "#{md} is not a valid digest algorithm for fingerprinting certificate #{name}"
    end

    OpenSSL::Digest.const_get(md).hexdigest(content.to_der).scan(/../).join(':').upcase
  end

  private

  def wrapped_class
    self.class.wrapped_class
  end
end