OcspVerifier — Documentation by YARD 0.9.37 (original) (raw)

Class: Mongo::Socket::OcspVerifierPrivate

Inherits:

Object

• Object
• Mongo::Socket::OcspVerifier show all

Includes:

Loggable

Defined in:

lib/mongo/socket/ocsp_verifier.rb

Overview

This class is part of a private API. You should avoid using this class if possible, as it may be removed or be changed in the future.

OCSP endpoint verifier.

After a TLS connection is established, this verifier inspects the certificate presented by the server, and if the certificate contains an OCSP URI, performs the OCSP status request to the specified URI (following up to 5 redirects) to verify the certificate status.

Constant Summary

Constants included from Loggable

Loggable::PREFIX

Instance Attribute Summary collapse

• #ca_cert ⇒ Object readonly private
• #cert ⇒ Object readonly private
• #cert_store ⇒ Object readonly private
• #host_name ⇒ Object readonly private
• #options ⇒ Object readonly private

Instance Method Summarycollapse

• #cert_id ⇒ Object private
• #initialize(host_name, cert, ca_cert, cert_store, **opts) ⇒ OcspVerifier constructor private
  A new instance of OcspVerifier.
• #ocsp_uris ⇒ Array private
  OCSP URIs in the specified server certificate.
• #timeout ⇒ Object private
• #verify ⇒ true | false private
  Whether the certificate was verified.
• #verify_with_cache ⇒ Object private

Methods included from Loggable

#log_debug, #log_error, #log_fatal, #log_info, #log_warn, #logger

Constructor Details

#initialize(host_name, cert, ca_cert, cert_store, **opts) ⇒ OcspVerifier

This method is part of a private API. You should avoid using this method if possible, as it may be removed or be changed in the future.

Returns a new instance of OcspVerifier.

Instance Attribute Details

#ca_cert ⇒ Object

This method is part of a private API. You should avoid using this method if possible, as it may be removed or be changed in the future.

#cert ⇒ Object

This method is part of a private API. You should avoid using this method if possible, as it may be removed or be changed in the future.

#cert_store ⇒ Object

This method is part of a private API. You should avoid using this method if possible, as it may be removed or be changed in the future.

#host_name ⇒ Object

This method is part of a private API. You should avoid using this method if possible, as it may be removed or be changed in the future.

#options ⇒ Object

This method is part of a private API. You should avoid using this method if possible, as it may be removed or be changed in the future.

Instance Method Details

#cert_id ⇒ Object

This method is part of a private API. You should avoid using this method if possible, as it may be removed or be changed in the future.

| 91 92 93 94 95 96 97 | # File 'lib/mongo/socket/ocsp_verifier.rb', line 91 def cert_id @cert_id ||= OpenSSL::OCSP::CertificateId.new( cert, ca_cert, OpenSSL::Digest::SHA1.new, ) end | | -------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |

#ocsp_uris ⇒ Array

This method is part of a private API. You should avoid using this method if possible, as it may be removed or be changed in the future.

Returns OCSP URIs in the specified server certificate.

| 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 | # File 'lib/mongo/socket/ocsp_verifier.rb', line 70 def ocsp_uris @ocsp_uris ||= begin ext = cert.extensions.detect do | ext| ext.oid == 'authorityInfoAccess' end if ext ext.value.split("\n").select do | line| line.start_with?('OCSP - URI:') end.map do | line| line.split(':', 2).last end else [] end end end | | ----------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------ | --------------------------------------------------------------- | ------------------------------------------------------------------------------------- |

#timeout ⇒ Object

This method is part of a private API. You should avoid using this method if possible, as it may be removed or be changed in the future.

| 65 66 67 | # File 'lib/mongo/socket/ocsp_verifier.rb', line 65 def timeout options[:timeout] || 5 end | | -------- | ------------------------------------------------------------------------------------------------- |

#verify ⇒ true | false

This method is part of a private API. You should avoid using this method if possible, as it may be removed or be changed in the future.

Returns Whether the certificate was verified.

#verify_with_cache ⇒ Object

This method is part of a private API. You should avoid using this method if possible, as it may be removed or be changed in the future.