Gecko [ www.corporacionhdm.com.pe ]

Name	Size	Permission	Date
commands	[ DIR ]	drwxr-xr-x	2025-04-16 09:00
core_ext	[ DIR ]	drwxr-xr-x	2025-04-16 09:00
defaults	[ DIR ]	drwxr-xr-x	2025-04-16 09:00
ext	[ DIR ]	drwxr-xr-x	2025-04-16 09:00
gemcutter_utilities	[ DIR ]	drwxr-xr-x	2025-04-16 09:00
package	[ DIR ]	drwxr-xr-x	2025-04-16 09:00
request	[ DIR ]	drwxr-xr-x	2025-04-16 09:00
request_set	[ DIR ]	drwxr-xr-x	2025-04-16 09:00
resolver	[ DIR ]	drwxr-xr-x	2025-04-16 09:00
safe_marshal	[ DIR ]	drwxr-xr-x	2025-04-16 09:00
security	[ DIR ]	drwxr-xr-x	2025-04-16 09:00
source	[ DIR ]	drwxr-xr-x	2025-04-16 09:00
ssl_certs	[ DIR ]	drwxr-xr-x	2025-03-20 13:38
util	[ DIR ]	drwxr-xr-x	2025-04-16 09:00
vendor	[ DIR ]	drwxr-xr-x	2025-03-20 13:38
available_set.rb	3 KB	-rw-r--r--	2025-03-20 13:38
basic_specification.rb	8.13 KB	-rw-r--r--	2025-03-20 13:38
bundler_version_finder.rb	1.96 KB	-rw-r--r--	2025-03-20 13:38
ci_detector.rb	3.71 KB	-rw-r--r--	2025-03-20 13:38
command.rb	15.97 KB	-rw-r--r--	2025-03-20 13:38
command_manager.rb	5.64 KB	-rw-r--r--	2025-03-20 13:38
compatibility.rb	1022 B	-rw-r--r--	2025-03-20 13:38
config_file.rb	16.31 KB	-rw-r--r--	2025-03-20 13:38
defaults.rb	7.38 KB	-rw-r--r--	2025-03-20 13:38
dependency.rb	8.45 KB	-rw-r--r--	2025-03-20 13:38
dependency_installer.rb	9.91 KB	-rw-r--r--	2025-03-20 13:38
dependency_list.rb	5.55 KB	-rw-r--r--	2025-03-20 13:38
deprecate.rb	5.04 KB	-rw-r--r--	2025-03-20 13:38
doctor.rb	3.13 KB	-rw-r--r--	2025-03-20 13:38
errors.rb	4.53 KB	-rw-r--r--	2025-03-20 13:38
exceptions.rb	7.13 KB	-rw-r--r--	2025-03-20 13:38
ext.rb	498 B	-rw-r--r--	2025-03-20 13:38
gem_runner.rb	2.14 KB	-rw-r--r--	2025-03-20 13:38
gemcutter_utilities.rb	11.25 KB	-rw-r--r--	2025-03-20 13:38
gemspec_helpers.rb	394 B	-rw-r--r--	2025-03-20 13:38
install_default_message.rb	349 B	-rw-r--r--	2025-03-20 13:38
install_message.rb	323 B	-rw-r--r--	2025-03-20 13:38
install_update_options.rb	6.56 KB	-rw-r--r--	2025-03-20 13:38
installer.rb	27.74 KB	-rw-r--r--	2025-03-20 13:38
installer_uninstaller_utils.rb	771 B	-rw-r--r--	2025-03-20 13:38
local_remote_options.rb	3.61 KB	-rw-r--r--	2025-03-20 13:38
name_tuple.rb	2.38 KB	-rw-r--r--	2025-03-20 13:38
openssl.rb	125 B	-rw-r--r--	2025-03-20 13:38
package.rb	18.83 KB	-rw-r--r--	2025-03-20 13:38
package_task.rb	3.79 KB	-rw-r--r--	2025-03-20 13:38
path_support.rb	1.77 KB	-rw-r--r--	2025-03-20 13:38
platform.rb	8.41 KB	-rw-r--r--	2025-03-20 13:38
psych_tree.rb	855 B	-rw-r--r--	2025-03-20 13:38
query_utils.rb	8.5 KB	-rw-r--r--	2025-03-20 13:38
rdoc.rb	607 B	-rw-r--r--	2025-03-20 13:38
remote_fetcher.rb	9.38 KB	-rw-r--r--	2025-03-20 13:38
request.rb	8.7 KB	-rw-r--r--	2025-03-20 13:38
request_set.rb	11.29 KB	-rw-r--r--	2025-03-20 13:38
requirement.rb	7.08 KB	-rw-r--r--	2025-03-20 13:38
resolver.rb	9.43 KB	-rw-r--r--	2025-03-20 13:38
s3_uri_signer.rb	5.96 KB	-rw-r--r--	2025-03-20 13:38
safe_marshal.rb	1.92 KB	-rw-r--r--	2025-03-20 13:38
safe_yaml.rb	1.04 KB	-rw-r--r--	2025-03-20 13:38
security.rb	21.69 KB	-rw-r--r--	2025-03-20 13:38
security_option.rb	1.06 KB	-rw-r--r--	2025-03-20 13:38
shellwords.rb	66 B	-rw-r--r--	2025-03-20 13:38
source.rb	5.78 KB	-rw-r--r--	2025-03-20 13:38
source_list.rb	2.42 KB	-rw-r--r--	2025-03-20 13:38
spec_fetcher.rb	7.68 KB	-rw-r--r--	2025-03-20 13:38
specification.rb	69.02 KB	-rw-r--r--	2025-03-20 13:38
specification_policy.rb	15.59 KB	-rw-r--r--	2025-03-20 13:38
specification_record.rb	5.21 KB	-rw-r--r--	2025-03-20 13:38
stub_specification.rb	4.96 KB	-rw-r--r--	2025-03-20 13:38
target_rbconfig.rb	1.24 KB	-rw-r--r--	2025-03-20 13:38
text.rb	2.06 KB	-rw-r--r--	2025-03-20 13:38
uninstaller.rb	10.92 KB	-rw-r--r--	2025-03-20 13:38
unknown_command_spell_checker.rb	411 B	-rw-r--r--	2025-03-20 13:38
update_suggestion.rb	1.85 KB	-rw-r--r--	2025-03-20 13:38
uri.rb	2.38 KB	-rw-r--r--	2025-03-20 13:38
uri_formatter.rb	784 B	-rw-r--r--	2025-03-20 13:38
user_interaction.rb	13.1 KB	-rw-r--r--	2025-03-20 13:38
util.rb	2.46 KB	-rw-r--r--	2025-03-20 13:38
validator.rb	3.63 KB	-rw-r--r--	2025-03-20 13:38
vendored_molinillo.rb	81 B	-rw-r--r--	2025-03-20 13:38
vendored_net_http.rb	233 B	-rw-r--r--	2025-03-20 13:38
vendored_optparse.rb	79 B	-rw-r--r--	2025-03-20 13:38
vendored_securerandom.rb	87 B	-rw-r--r--	2025-03-20 13:38
vendored_timeout.rb	228 B	-rw-r--r--	2025-03-20 13:38
vendored_tsort.rb	73 B	-rw-r--r--	2025-03-20 13:38
version.rb	13.01 KB	-rw-r--r--	2025-03-20 13:38
version_option.rb	2.17 KB	-rw-r--r--	2025-03-20 13:38
yaml_serializer.rb	2.42 KB	-rw-r--r--	2025-03-20 13:38

Rename

# frozen_string_literal: true

require_relative "openssl"

##
# S3URISigner implements AWS SigV4 for S3 Source to avoid a dependency on the aws-sdk-* gems
# More on AWS SigV4: https://docs.aws.amazon.com/AmazonS3/latest/API/sig-v4-authenticating-requests.html
class Gem::S3URISigner
  class ConfigurationError < Gem::Exception
    def initialize(message)
      super message
    end

def to_s # :nodoc:
      super.to_s
    end
  end

class InstanceProfileError < Gem::Exception
    def initialize(message)
      super message
    end

def to_s # :nodoc:
      super.to_s
    end
  end

attr_accessor :uri

def initialize(uri)
    @uri = uri
  end

##
  # Signs S3 URI using query-params according to the reference: https://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-query-string-auth.html
  def sign(expiration = 86_400)
    s3_config = fetch_s3_config

current_time = Time.now.utc
    date_time = current_time.strftime("%Y%m%dT%H%m%SZ")
    date = date_time[0,8]

credential_info = "#{date}/#{s3_config.region}/s3/aws4_request"
    canonical_host = "#{uri.host}.s3.#{s3_config.region}.amazonaws.com"

query_params = generate_canonical_query_params(s3_config, date_time, credential_info, expiration)
    canonical_request = generate_canonical_request(canonical_host, query_params)
    string_to_sign = generate_string_to_sign(date_time, credential_info, canonical_request)
    signature = generate_signature(s3_config, date, string_to_sign)

Gem::URI.parse("https://#{canonical_host}#{uri.path}?#{query_params}&X-Amz-Signature=#{signature}")
  end

private

S3Config = Struct.new :access_key_id, :secret_access_key, :security_token, :region

def generate_canonical_query_params(s3_config, date_time, credential_info, expiration)
    canonical_params = {}
    canonical_params["X-Amz-Algorithm"] = "AWS4-HMAC-SHA256"
    canonical_params["X-Amz-Credential"] = "#{s3_config.access_key_id}/#{credential_info}"
    canonical_params["X-Amz-Date"] = date_time
    canonical_params["X-Amz-Expires"] = expiration.to_s
    canonical_params["X-Amz-SignedHeaders"] = "host"
    canonical_params["X-Amz-Security-Token"] = s3_config.security_token if s3_config.security_token

# Sorting is required to generate proper signature
    canonical_params.sort.to_h.map do |key, value|
      "#{base64_uri_escape(key)}=#{base64_uri_escape(value)}"
    end.join("&")
  end

def generate_canonical_request(canonical_host, query_params)
    [
      "GET",
      uri.path,
      query_params,
      "host:#{canonical_host}",
      "", # empty params
      "host",
      "UNSIGNED-PAYLOAD",
    ].join("\n")
  end

def generate_string_to_sign(date_time, credential_info, canonical_request)
    [
      "AWS4-HMAC-SHA256",
      date_time,
      credential_info,
      OpenSSL::Digest::SHA256.hexdigest(canonical_request),
    ].join("\n")
  end

def generate_signature(s3_config, date, string_to_sign)
    date_key = OpenSSL::HMAC.digest("sha256", "AWS4" + s3_config.secret_access_key, date)
    date_region_key = OpenSSL::HMAC.digest("sha256", date_key, s3_config.region)
    date_region_service_key = OpenSSL::HMAC.digest("sha256", date_region_key, "s3")
    signing_key = OpenSSL::HMAC.digest("sha256", date_region_service_key, "aws4_request")
    OpenSSL::HMAC.hexdigest("sha256", signing_key, string_to_sign)
  end

##
  # Extracts S3 configuration for S3 bucket
  def fetch_s3_config
    return S3Config.new(uri.user, uri.password, nil, "us-east-1") if uri.user && uri.password

s3_source = Gem.configuration[:s3_source] || Gem.configuration["s3_source"]
    host = uri.host
    raise ConfigurationError.new("no s3_source key exists in .gemrc") unless s3_source

auth = s3_source[host] || s3_source[host.to_sym]
    raise ConfigurationError.new("no key for host #{host} in s3_source in .gemrc") unless auth

provider = auth[:provider] || auth["provider"]
    case provider
    when "env"
      id = ENV["AWS_ACCESS_KEY_ID"]
      secret = ENV["AWS_SECRET_ACCESS_KEY"]
      security_token = ENV["AWS_SESSION_TOKEN"]
    when "instance_profile"
      credentials = ec2_metadata_credentials_json
      id = credentials["AccessKeyId"]
      secret = credentials["SecretAccessKey"]
      security_token = credentials["Token"]
    else
      id = auth[:id] || auth["id"]
      secret = auth[:secret] || auth["secret"]
      security_token = auth[:security_token] || auth["security_token"]
    end

raise ConfigurationError.new("s3_source for #{host} missing id or secret") unless id && secret

region = auth[:region] || auth["region"] || "us-east-1"
    S3Config.new(id, secret, security_token, region)
  end

def base64_uri_escape(str)
    str.gsub(%r{[\+/=\n]}, BASE64_URI_TRANSLATE)
  end

def ec2_metadata_credentials_json
    require_relative "vendored_net_http"
    require_relative "request"
    require_relative "request/connection_pools"
    require "json"

iam_info = ec2_metadata_request(EC2_IAM_INFO)
    # Expected format: arn:aws:iam::<id>:instance-profile/<role_name>
    role_name = iam_info["InstanceProfileArn"].split("/").last
    ec2_metadata_request(EC2_IAM_SECURITY_CREDENTIALS + role_name)
  end

def ec2_metadata_request(url)
    uri = Gem::URI(url)
    @request_pool ||= create_request_pool(uri)
    request = Gem::Request.new(uri, Gem::Net::HTTP::Get, nil, @request_pool)
    response = request.fetch

case response
    when Gem::Net::HTTPOK then
      JSON.parse(response.body)
    else
      raise InstanceProfileError.new("Unable to fetch AWS metadata from #{uri}: #{response.message} #{response.code}")
    end
  end

def create_request_pool(uri)
    proxy_uri = Gem::Request.proxy_uri(Gem::Request.get_proxy_from_env(uri.scheme))
    certs = Gem::Request.get_cert_files
    Gem::Request::ConnectionPools.new(proxy_uri, certs).pool_for(uri)
  end

BASE64_URI_TRANSLATE = { "+" => "%2B", "/" => "%2F", "=" => "%3D", "\n" => "" }.freeze
  EC2_IAM_INFO = "http://169.254.169.254/latest/meta-data/iam/info"
  EC2_IAM_SECURITY_CREDENTIALS = "http://169.254.169.254/latest/meta-data/iam/security-credentials/"
end