inspec/lib/fetchers/local.rb
Dominik Richter 7d1f16d9bf support FIPS 140-2 compliant digest calls
Calling the `digest` library directly unfortunately causes issues in FIPS 140-2 mode:

    sha512.c(81): OpenSSL internal error, assertion failed: Low level API call to digest SHA512 forbidden in FIPS mode!

Switching to `OpenSSL` as the caller resolve these issues

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
2017-06-03 02:17:24 +02:00

80 lines
1.6 KiB
Ruby

# encoding: utf-8
# author: Dominik Richter
# author: Christoph Hartmann
require 'openssl'
module Fetchers
class Local < Inspec.fetcher(1)
name 'local'
priority 0
def self.resolve(target)
local_path = if target.is_a?(String)
resolve_from_string(target)
elsif target.is_a?(Hash)
resolve_from_hash(target)
end
if local_path
new(local_path)
end
end
def self.resolve_from_hash(target)
if target.key?(:path)
local_path = target[:path]
if target.key?(:cwd)
local_path = File.expand_path(local_path, target[:cwd])
end
local_path
end
end
def self.resolve_from_string(target)
# Support "urls" in the form of file://
if target.start_with?('file://')
target = target.gsub(%r{^file://}, '')
else
# support for windows paths
target = target.tr('\\', '/')
end
if File.exist?(target)
target
end
end
def initialize(target)
@target = target
end
def fetch(_path)
archive_path
end
def archive_path
@target
end
def writable?
File.directory?(@target)
end
def cache_key
sha256.to_s
end
def sha256
return nil if File.directory?(@target)
@archive_shasum ||=
OpenSSL::Digest::SHA256.digest(File.read(@target)).unpack('H*')[0]
end
def resolved_source
h = { path: @target }
h[:sha256] = sha256 if sha256
h
end
end
end