summaryrefslogtreecommitdiff
path: root/certs/app/models/leap_ca/cert.rb
diff options
context:
space:
mode:
authorazul <azul@riseup.net>2012-12-17 17:03:20 -0800
committerazul <azul@riseup.net>2012-12-17 17:03:20 -0800
commitd37fe6ada458b80019d16803fc73e5c406dc515f (patch)
tree7f8da22a5437e193c6becd95869f543291461083 /certs/app/models/leap_ca/cert.rb
parent7528695461f2c5725fe29787aa6bf703050a1a4a (diff)
parenta8f5a1ec486d5ee378f7b820c9f2c046e5c03672 (diff)
Merge pull request #3 from leapcode/feature/certs-from-ca-deamon
Adopt certs to changes in the leap ca
Diffstat (limited to 'certs/app/models/leap_ca/cert.rb')
-rw-r--r--certs/app/models/leap_ca/cert.rb56
1 files changed, 56 insertions, 0 deletions
diff --git a/certs/app/models/leap_ca/cert.rb b/certs/app/models/leap_ca/cert.rb
new file mode 100644
index 0000000..9d4f15e
--- /dev/null
+++ b/certs/app/models/leap_ca/cert.rb
@@ -0,0 +1,56 @@
+#
+# Model for certificates stored in CouchDB.
+#
+# This file must be loaded after Config has been loaded.
+#
+
+module LeapCA
+ class Cert < CouchRest::Model::Base
+
+# No config yet. use_database LeapCA::Config.db_name
+ use_database 'client_certificates'
+
+ timestamps!
+
+ property :key, String # the client private RSA key
+ property :cert, String # the client x509 certificate, signed by the CA
+ property :valid_until, Time # expiration time of the client certificate
+ property :random, Float, :accessible => false # used to help pick a random cert by the webapp
+
+ before_validation :set_random, :on => :create
+
+ validates :key, :presence => true
+ validates :cert, :presence => true
+ validates :random, :presence => true
+ validates :random, :numericality => {:greater_than => 0, :less_than => 1}
+
+ design do
+ view :by_random
+ end
+
+ def set_random
+ self.random = rand
+ end
+
+ class << self
+ def sample
+ self.by_random.startkey(rand).first || self.by_random.first
+ end
+
+ def pick_from_pool
+ cert = self.sample
+ raise RECORD_NOT_FOUND unless cert
+ cert.destroy
+ return cert
+ rescue RESOURCE_NOT_FOUND
+ retry if self.by_random.count > 0
+ raise RECORD_NOT_FOUND
+ end
+
+ def valid_attributes_hash
+ {:key => "ABCD", :cert => "A123"}
+ end
+ end
+
+ end
+end