zydronium/internetee-registry
1
0
Fork 0
mirror of https://github.com/internetee/registry.git synced 2025-05-19 18:59:38 +02:00
Code Issues Projects Releases Packages Wiki Activity

added webclient_cert_common_name

Browse source
This commit is contained in:
Priit Tark 2015-03-27 14:59:38 +02:00
parent d66001f8d9
commit 45ab4ce2fa
3 changed files with 10 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

3
Guardfile
View file

@ -9,7 +9,8 @@ group :red_green_refactor, halt_on_fail: true do
# watch(%r{^(config|lib)/.*}) # watch(%r{^(config|lib)/.*})
# end # end
guard :rspec, cmd: 'spring rspec --fail-fast', notification: false do # guard :rspec, cmd: 'spring rspec --fail-fast', notification: false do
guard :rspec, cmd: 'spring rspec', notification: false do
watch(%r{^spec/.+_spec\.rb$}) watch(%r{^spec/.+_spec\.rb$})
watch(%r{^lib/(.+)\.rb$}) { |m| "spec/lib/#{m[1]}_spec.rb" } watch(%r{^lib/(.+)\.rb$}) { |m| "spec/lib/#{m[1]}_spec.rb" }
watch('spec/spec_helper.rb') { "spec" } watch('spec/spec_helper.rb') { "spec" }

9
app/api/repp/api.rb
View file

@ -8,10 +8,15 @@ module Repp
end end
before do before do
next if Rails.env.test?
message = 'Certificate mismatch! Cert common name should be:'
request_name = ENV['HTTP_SSL_CLIENT_S_DN_CN']
if request.ip == ENV['webclient_ip'] if request.ip == ENV['webclient_ip']
error! 'Certificate mismatch', 401 if env['HTTP_SSL_CLIENT_S_DN_CN'] != 'webclient' webclient_cert_name = ENV['webclient_cert_common_name'] || 'webclient'
error! "#{message} #{webclient_cert_name}", 401 if webclient_cert_name != request_name
else else
error! 'Certificate mismatch', 401 if env['HTTP_SSL_CLIENT_S_DN_CN'] != @current_user.username error! "#{message} #{@current_user.username}", 401 if @current_user.username != request_name
end end
end end

1
config/application-example.yml
View file

@ -22,6 +22,7 @@ ca_key_password: 'your-root-key-password'
# Used only by EPP server, you can leave it empty when running admin server: # Used only by EPP server, you can leave it empty when running admin server:
webclient_ip: '127.0.0.1' webclient_ip: '127.0.0.1'
webclient_cert_common_name: 'webclient'
# DEPP configuration # DEPP configuration
show_ds_data_fields: 'false' show_ds_data_fields: 'false'