class SafetyNetAttestation::X5cKeyFinder
Public Class Methods
from(x5c_certificates, trusted_certificates, time: Time.now)
click to toggle source
# File lib/safety_net_attestation/x5c_key_finder.rb, line 10 def self.from(x5c_certificates, trusted_certificates, time: Time.now) store = OpenSSL::X509::Store.new trusted_certificates.each { |certificate| store.add_cert(certificate) } signing_certificate, *certificate_chain = x5c_certificates store_context = OpenSSL::X509::StoreContext.new(store, signing_certificate, certificate_chain) store_context.time = time if store_context.verify store_context.chain else error = "Certificate verification failed: #{store_context.error_string}." error = "#{error} Certificate subject: #{store_context.current_cert.subject}." if store_context.current_cert raise SignatureError, error end end