Results for: "strip"

The parent class for all primitive encodings. Attributes are the same as for ASN1Data, with the addition of tagging. Primitive values can never be encoded with indefinite length form, thus it is not possible to set the indefinite_length attribute for Primitive and its sub-classes.

Primitive sub-classes and their mapping to Ruby classes

• OpenSSL::ASN1::EndOfContent <=> value is always nil

• OpenSSL::ASN1::Boolean <=> value is true or false

• OpenSSL::ASN1::Integer <=> value is an OpenSSL::BN

• OpenSSL::ASN1::BitString <=> value is a String

• OpenSSL::ASN1::OctetString <=> value is a String

• OpenSSL::ASN1::Null <=> value is always nil

• OpenSSL::ASN1::Object <=> value is a String

• OpenSSL::ASN1::Enumerated <=> value is an OpenSSL::BN

• OpenSSL::ASN1::UTF8String <=> value is a String

• OpenSSL::ASN1::NumericString <=> value is a String

• OpenSSL::ASN1::PrintableString <=> value is a String

• OpenSSL::ASN1::T61String <=> value is a String

• OpenSSL::ASN1::VideotexString <=> value is a String

• OpenSSL::ASN1::IA5String <=> value is a String

• OpenSSL::ASN1::UTCTime <=> value is a Time

• OpenSSL::ASN1::GeneralizedTime <=> value is a Time

• OpenSSL::ASN1::GraphicString <=> value is a String

• OpenSSL::ASN1::ISO64String <=> value is a String

• OpenSSL::ASN1::GeneralString <=> value is a String

• OpenSSL::ASN1::UniversalString <=> value is a String

• OpenSSL::ASN1::BMPString <=> value is a String

OpenSSL::ASN1::BitString

Additional attributes

unused_bits: if the underlying BIT STRING’s length is a multiple of 8 then unused_bits is 0. Otherwise unused_bits indicates the number of bits that are to be ignored in the final octet of the BitString’s value.

OpenSSL::ASN1::ObjectId

NOTE: While OpenSSL::ASN1::ObjectId.new will allocate a new ObjectId, it is not typically allocated this way, but rather that are received from parsed ASN1 encodings.

Additional attributes

• sn: the short name as defined in <openssl/objects.h>.

• ln: the long name as defined in <openssl/objects.h>.

• oid: the object identifier as a String, e.g. “1.2.3.4.5”

• short_name: alias for sn.

• long_name: alias for ln.

Examples

With the Exception of OpenSSL::ASN1::EndOfContent, each Primitive class constructor takes at least one parameter, the value.

Creating EndOfContent

eoc = OpenSSL::ASN1::EndOfContent.new

Creating any other Primitive

prim = <class>.new(value) # <class> being one of the sub-classes except EndOfContent
prim_zero_tagged_implicit = <class>.new(value, 0, :IMPLICIT)
prim_zero_tagged_explicit = <class>.new(value, 0, :EXPLICIT)

Deprecated.

This class is only provided for backwards compatibility. Use OpenSSL::Cipher.

A StoreContext is used while validating a single certificate and holds the status involved.

Generic Exception class that is raised if an error occurs during a Digest operation.

An OpenSSL::OCSP::Request contains the certificate information for determining if a certificate has been revoked or not. A Request can be created for a certificate or from a DER-encoded request created elsewhere.

Generic exception class of the Timestamp module.

Allows to create timestamp requests or parse existing ones. A Request is also needed for creating timestamps from scratch with Factory. When created from scratch, some default values are set:

• version is set to 1

• cert_requested is set to true

• algorithm, message_imprint, policy_id, and nonce are set to false

The X509 certificate store holds trusted CA certificates used to verify peer certificates.

The easiest way to create a useful certificate store is:

cert_store = OpenSSL::X509::Store.new
cert_store.set_default_paths

This will use your system’s built-in certificates.

If your system does not have a default set of certificates you can obtain a set extracted from Mozilla CA certificate store by cURL maintainers here: curl.haxx.se/docs/caextract.html (You may wish to use the firefox-db2pem.sh script to extract the certificates from a local install to avoid man-in-the-middle attacks.)

After downloading or generating a cacert.pem from the above link you can create a certificate store from the pem file like this:

cert_store = OpenSSL::X509::Store.new
cert_store.add_file 'cacert.pem'

The certificate store can be used with an SSLSocket like this:

ssl_context = OpenSSL::SSL::SSLContext.new
ssl_context.verify_mode = OpenSSL::SSL::VERIFY_PEER
ssl_context.cert_store = cert_store

tcp_socket = TCPSocket.open 'example.com', 443

ssl_socket = OpenSSL::SSL::SSLSocket.new tcp_socket, ssl_context

Psych::JSON::TreeBuilder is an event based AST builder. Events are sent to an instance of Psych::JSON::TreeBuilder and a JSON AST is constructed.

YAMLTree builds a YAML ast given a Ruby object. For example:

builder = Psych::Visitors::YAMLTree.new
builder << { :foo => 'bar' }
builder.tree # => #<Psych::Nodes::Stream .. }