123456789_123456789_123456789_123456789_123456789_

Module: OpenSSL::X509::Extension::AuthorityInfoAccess

Relationships & Source Files
Extension / Inclusion / Inheritance Descendants
Included In:
::OpenSSL::X509::Certificate
Super Chains via Extension / Inclusion / Inheritance
Instance Chain:
self, Helpers
Defined in: ext/openssl/lib/openssl/x509.rb

Instance Method Summary

  • #ca_issuer_uris

    Get the information and services for the issuer from the certificate’s authority information access extension exteension, as described in RFC5280 Section 4.2.2.1.

  • #ocsp_uris

    Get the URIs for ::OpenSSL::OCSP from the certificate’s authority information access extension exteension, as described in RFC5280 Section 4.2.2.1.

  • #parse_aia_asn1 private

Helpers - Included

#find_extension

Instance Method Details

#ca_issuer_uris

Get the information and services for the issuer from the certificate’s authority information access extension exteension, as described in RFC5280 Section 4.2.2.1.

Returns an array of strings or nil or raises ::OpenSSL::ASN1::ASN1Error.

[ GitHub ] 

  


# File 'ext/openssl/lib/openssl/x509.rb', line 162



def ca_issuer_uris
  aia_asn1 = parse_aia_asn1
  return nil if aia_asn1.nil?

  ca_issuer = aia_asn1.value.select do |authority_info_access|
    authority_info_access.value.first.value == "caIssuers"
  end

  ca_issuer&.map(&:value)&.map(&:last)&.map(&:value)
end


  








  

    #ocsp_uris  
  



  

    

Get the URIs for ::OpenSSL::OCSP from the certificate’s authority information access extension exteension, as described in RFC5280 Section 4.2.2.1.



Returns an array of strings or nil or raises ::OpenSSL::ASN1::ASN1Error.


  



  [ GitHub ]


  

  


# File 'ext/openssl/lib/openssl/x509.rb', line 177



def ocsp_uris
  aia_asn1 = parse_aia_asn1
  return nil if aia_asn1.nil?

  ocsp = aia_asn1.value.select do |authority_info_access|
    authority_info_access.value.first.value == "OCSP"
  end

  ocsp&.map(&:value)&.map(&:last)&.map(&:value)
end


  








  

    #parse_aia_asn1   (private)
  

  [ GitHub ]


  

  


# File 'ext/openssl/lib/openssl/x509.rb', line 190



def parse_aia_asn1
  ext = find_extension("authorityInfoAccess")
  return nil if ext.nil?

  aia_asn1 = ASN1.decode(ext.value_der)
  if ext.critical? || aia_asn1.tag_class != :UNIVERSAL || aia_asn1.tag != ASN1::SEQUENCE
    raise ASN1::ASN1Error, "invalid extension"
  end

  aia_asn1
end