Generates or loads an RSA keypair.
If called without arguments, creates a new instance with no key components set. They can be set individually by set_key, set_factors, and set_crt_params.
If called with a String, tries to parse as DER or PEM encoding of an RSA key. Note that if password is not specified, but the key is encrypted with a password, OpenSSL will prompt for it. See also OpenSSL::PKey.read which can parse keys of any kind.
If called with a number, generates a new key pair. This form works as an alias of RSA.generate.
Examples:
OpenSSL::PKey::RSA.new 2048 OpenSSL::PKey::RSA.new File.read 'rsa.pem' OpenSSL::PKey::RSA.new File.read('rsa.pem'), 'my password'
Creates a new SSL context.
If an argument is given, ssl_version= is called with the value. Note that this form is deprecated. New applications should use min_version= and max_version= as necessary.
Creates a new SSL socket from io which must be a real IO object (not an IO-like object that responds to read/write).
If ctx is provided the SSL Sockets initial params will be taken from the context.
The OpenSSL::Buffering module provides additional IO methods.
This method will freeze the SSLContext if one is provided; however, session management is still allowed in the frozen SSLContext.
Creates a new instance of SSLServer.
srv is an instance of TCPServer.
ctx is an instance of OpenSSL::SSL::SSLContext.
Creates an X509 extension.
The extension may be created from der data or from an extension oid and value. The oid may be either an OID or an extension name. If critical is true the extension is marked critical.
Creates a new Name.
A name may be created from a DER encoded string der, an Array representing a distinguished_name or a distinguished_name along with a template.
name = OpenSSL::X509::Name.new [['CN', 'nobody'], ['DC', 'example']] name = OpenSSL::X509::Name.new name.to_der
See add_entry for a description of the distinguished_name Array’s contents
Sets up a StoreContext for a verification of the X.509 certificate cert.
request - optional raw request, either in PEM or DER format.
Creates a new OpenSSL::OCSP::Request. The request may be created empty or from a request_der string.
Creates a new OpenSSL::OCSP::Response. The response may be created empty or from a response_der string.
Creates a new BasicResponse. If der_string is given, decodes der_string as DER.
Creates a new SingleResponse from der_string.
Creates a new OpenSSL::OCSP::CertificateId for the given subject and issuer X509 certificates. The digest is a digest algorithm that is used to compute the hash values. This defaults to SHA-1.
If only one argument is given, decodes it as DER representation of a certificate ID or generates certificate ID from the object that responds to the to_der method.
Because PKey is an abstract class, actually calling this method explicitly will raise a NotImplementedError.
Creates a Response from a File or string parameter, the corresponding File or string must be DER-encoded. Please note that Response is an immutable read-only class. If you’d like to create timestamps please refer to Factory instead.
Creates a TokenInfo from a File or string parameter, the corresponding File or string must be DER-encoded. Please note that TokenInfo is an immutable read-only class. If you’d like to create timestamps please refer to Factory instead.