Contents

##
# SSL is a private module with class methods that help work with x.509
# subjects.
#
# @api private
module Puppet::Util::SSL
  # Given a DN string, parse it into an OpenSSL certificate subject.  This
  # method will flexibly handle both OpenSSl and RFC2253 formats, as given by
  # nginx and Apache, respectively.
  #
  # @param [String] dn the x.509 Distinguished Name (DN) string.
  #
  # @return [OpenSSL::X509::Name] the certificate subject
  def self.subject_from_dn(dn)
    # try to parse both rfc2253 (Apache) and OpenSSL (nginx) formats
    begin
      subject = OpenSSL::X509::Name.parse_rfc2253(dn)
    rescue OpenSSL::X509::NameError
      subject = OpenSSL::X509::Name.parse_openssl(dn)
    end
    subject
  end

  ##
  # cn_from_subject extracts the CN from the given OpenSSL certtificate
  # subject.
  #
  # @api private
  #
  # @param [OpenSSL::X509::Name] subject the subject to extract the CN field from
  #
  # @return [String, nil] the CN, or nil if not found
  def self.cn_from_subject(subject)
    if subject.respond_to? :to_a
      (subject.to_a.assoc('CN') || [])[1]
    end
  end
end

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
puppet-3.2.0.rc2	lib/puppet/util/ssl.rb
puppet-3.2.0.rc1	lib/puppet/util/ssl.rb