Contents

require 'r509/cert/extensions/base'

module R509
  class Cert
    module Extensions
      # RFC 5280 Description (see: http://www.ietf.org/rfc/rfc5280.txt)
      #
      # The subject key identifier extension provides a means of identifying
      # certificates that contain a particular public key.
      #
      # You can use this extension to parse an existing extension for easy access
      # to the contents or create a new one.
      class SubjectKeyIdentifier < OpenSSL::X509::Extension
        # friendly name for Subject Key Identifier OID
        OID = "subjectKeyIdentifier"
        # default extension behavior when generating
        SKI_EXTENSION_DEFAULT = "hash"
        Extensions.register_class(self)

        # This method takes a hash or an existing Extension object to parse
        # @option arg :public_key [OpenSSL::PKey] (Cert/CSR/PrivateKey return this type from #public_key)
        # @option arg :critical [Boolean] (false)
        def initialize(arg)
          unless R509::Cert::Extensions.is_extension?(arg)
            arg = build_extension(arg)
          end
          super(arg)
        end

        # @return value of key
        def key
          self.value
        end

        private

        def build_extension(arg)
          validate_subject_key_identifier(arg)
          ef = OpenSSL::X509::ExtensionFactory.new
          cert = OpenSSL::X509::Certificate.new
          cert.public_key = arg[:public_key]
          ef.subject_certificate = cert
          critical = R509::Cert::Extensions.calculate_critical(arg[:critical], false)
          ef.create_extension("subjectKeyIdentifier", SKI_EXTENSION_DEFAULT, critical)
        end

        def validate_subject_key_identifier(ski)
          if !ski.is_a?(Hash) || ski[:public_key].nil?
            raise ArgumentError, "You must supply a hash with a :public_key"
          end
          ski
        end
      end
    end
  end
end

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
r509-1.0.1	lib/r509/cert/extensions/subject_key_identifier.rb
r509-1.0	lib/r509/cert/extensions/subject_key_identifier.rb