Cannot decrypt/edit PKCS7 eyaml files using JRuby

[clarenceb]

It seems that JRuby is not happy with the X509 Certificate (public key) generated by the eyaml command. Therefore, you cannot use hiera-eyaml with JRuby.

eyaml wants the cert to have an "issuer" (see below):

$ bin/eyaml edit test.eyaml
[hiera-eyaml-core] !!! Empty issuer DN not allowed in X509Certificates
[hiera-eyaml-core] ["org/jruby/ext/openssl/X509Cert.java:161:in initialize'", "/Users/clarence/.rbenv/versions/jruby-1.7.4/lib/ruby/gems/shared/gems/hiera-eyaml-2.0.0/lib/hiera/backend/eyaml/encryptors/pkcs7.rb:48:indecrypt'", "/Users/clarence/.rbenv/versions/jruby-1.7.4/lib/ruby/gems/shared/gems/hiera-eyaml-2.0.0/lib/hiera/backend/eyaml/parser/encrypted_tokens.rb:15:in encrypted_value'", "/Users/clarence/.rbenv/versions/jruby-1.7.4/lib/ruby/gems/shared/gems/hiera-eyaml-2.0.0/lib/hiera/backend/eyaml/parser/encrypted_tokens.rb:80:increate_enc_token'", "/Users/clarence/.rbenv/versions/jruby-1.7.4/lib/ruby/gems/shared/gems/hiera-eyaml-2.0.0/lib/hiera/backend/eyaml/parser/encrypted_tokens.rb:110:in create_token'", "/Users/clarence/.rbenv/versions/jruby-1.7.4/lib/ruby/gems/shared/gems/hiera-eyaml-2.0.0/lib/hiera/backend/eyaml/parser/parser.rb:71:inparse_scanner'", "/Users/clarence/.rbenv/versions/jruby-1.7.4/lib/ruby/gems/shared/gems/hiera-eyaml-2.0.0/lib/hiera/backend/eyaml/parser/parser.rb:74:in parse_scanner'", "/Users/clarence/.rbenv/versions/jruby-1.7.4/lib/ruby/gems/shared/gems/hiera-eyaml-2.0.0/lib/hiera/backend/eyaml/parser/parser.rb:36:inparse'", "/Users/clarence/.rbenv/versions/jruby-1.7.4/lib/ruby/gems/shared/gems/hiera-eyaml-2.0.0/lib/hiera/backend/eyaml/subcommands/edit.rb:36:in execute'", "/Users/clarence/.rbenv/versions/jruby-1.7.4/lib/ruby/gems/shared/gems/hiera-eyaml-2.0.0/lib/hiera/backend/eyaml/CLI.rb:45:inexecute'", "bin/eyaml:13:in `(root)'"]

[sihil]

More details about this in pull request #77 but there is now a command line parameter for specifying the subject to set when creating PKCS7 keys.