A Gem::Security::Policy object encapsulates the settings for verifying signed gem files. This is the base class. You can either declare an instance of this or use one of the preset security policies in Gem::Security::Policies.

Attributes
Read
No documentation available
Read & Write
No documentation available
Read & Write
No documentation available
Read & Write
No documentation available
Read & Write
No documentation available
Read & Write
No documentation available
Read & Write
No documentation available
Class Methods

Create a new Gem::Security::Policy object with the given mode and options.

Instance Methods

Ensures that signer is valid for time and was signed by the issuer. If the issuer is nil no verification is performed.

Verifies each certificate in chain has signed the following certificate and is valid for the given time.

Verifies that data matches the signature created by public_key and the digest algorithm.

Ensures the public key of key matches the public key in signer

Ensures the root certificate in chain is self-signed and valid for time.

Ensures the root of chain has a trusted certificate in trust_dir and the digests of the two certificates match according to digester

For full_name, verifies the certificate chain is valid, the digests match the signatures signatures created by the signer depending on the policy settings.

If key is given it is used to validate the signing certificate.

Extracts the certificate chain from the spec and calls verify to ensure the signatures and certificate chain is valid according to the policy..