File Coverage

blib/lib/Comodo/DCV.pm

Criterion	Covered	Total	%
statement	19	19	100.0
branch	2	2	100.0
condition			n/a
subroutine	5	5	100.0
pod	0	1	0.0
total	26	27	96.3

package Comodo::DCV;

use strict;
use warnings;

use Digest::MD5 ();
use Digest::SHA ();

our $VERSION = 0.04;

=pod

=encoding utf-8

=head1 NAME

Comodo::DCV - DCV logic for COMODO SSL APIs

=head1 SYNOPSIS

  use Comodo::DCV;

  #The following acts on a DER-formatted (i.e., binary) CSR only.
  my ($filename, $contents) = Comodo::DCV::get_filename_and_contents( $csr_der );

=head1 DESCRIPTION

This module implements logic that is necessary for HTTP-based validation
according to COMODO’s APIs for SSL certificate issuance, as documented
at L.

You can verify this module’s output by comparing it to that from
L.

B: This module works on DER-formatted (binary) CSRs. If you need to work with
PEM-formatted (text/Base64) CSRs, first convert them via C or similar
logic.

=head1 BREAKING CHANGE: 20 JULY 2017 UPDATE

As of 20 July 2017, Comodo will no longer look for SHA-1 hashes in DCV files;
the new format is to use SHA-256 hashes. There is also a change of path for
the DCV check, from F<$document_root/$MD5.txt> to
F<$document_root/.well-known/pki-validation/$MD5.txt>. Any services that might
interact with Comodo’s DCV thus need to stop using the old logic and start
using the new.

Comodo has their new logic is in place as of 10 July 2017.

Note that this means you’ll need to ensure that
F<$document_root/.well-known/pki-validation> exists. That’s something that
this module will B do for you.

=cut

sub get_filename_and_contents {
    my ($csr_der) = @_;

    die 'Call in list context!' if !wantarray;

    my $md5_hash = Digest::MD5::md5_hex($csr_der);
    $md5_hash =~ tr;

    my $filename = "$md5_hash.txt";

    my $contents = join(
        $/,
        Digest::SHA::sha256_hex($csr_der),
        'comodoca.com',
    );

    return ( $filename, $contents );
}

=pod

=head1 BUGS

Please report to L.
Thank you!

=head1 AUTHOR

    Felipe Gasper
    CPAN ID: FELIPE

=head1 COPYRIGHT

This program is free software; you can redistribute
it and/or modify it under the same terms as Perl itself.

The full text of the license can be found in the
LICENSE file included with this module.

=cut

1;