Install gems from custom source with custom CA

* Bump version and add CHANGELOG entry
* Configure Bundler logging
* Include install_path of gem
* Use gem summary and full_gem_path
* Specify a vendor path to install dependencies to prevent leakage between tests and take advantage of build job cache

12 files changed, 152 insertions, 17 deletions

diff --git a/spec/fixtures/expected/ruby/bundler/v2.1.json b/spec/fixtures/expected/ruby/bundler/v2.1.json
index ae83b84..9081ff6 100644
--- a/spec/fixtures/expected/ruby/bundler/v2.1.json
+++ b/spec/fixtures/expected/ruby/bundler/v2.1.json
@@ -22,7 +22,7 @@
       "name": "bundler",
       "version": "2.1.4",
       "package_manager": "bundler",
-      "path": ".",
+      "path": "Gemfile.lock",
       "licenses": [
         "MIT"
       ]
@@ -31,7 +31,7 @@
       "name": "concurrent-ruby",
       "version": "1.0.5",
       "package_manager": "bundler",
-      "path": ".",
+      "path": "Gemfile.lock",
       "licenses": [
         "MIT"
       ]
@@ -40,7 +40,7 @@
       "name": "connection_pool",
       "version": "2.2.1",
       "package_manager": "bundler",
-      "path": ".",
+      "path": "Gemfile.lock",
       "licenses": [
         "MIT"
       ]
@@ -49,7 +49,7 @@
       "name": "mini_portile2",
       "version": "2.0.0",
       "package_manager": "bundler",
-      "path": ".",
+      "path": "Gemfile.lock",
       "licenses": [
         "MIT"
       ]
@@ -58,7 +58,7 @@
       "name": "mustermann",
       "version": "1.0.1",
       "package_manager": "bundler",
-      "path": ".",
+      "path": "Gemfile.lock",
       "licenses": [
         "MIT"
       ]
@@ -67,7 +67,7 @@
       "name": "nokogiri",
       "version": "1.6.7.2",
       "package_manager": "bundler",
-      "path": ".",
+      "path": "Gemfile.lock",
       "licenses": [
         "MIT"
       ]
@@ -76,7 +76,7 @@
       "name": "pg",
       "version": "1.0.0",
       "package_manager": "bundler",
-      "path": ".",
+      "path": "Gemfile.lock",
       "licenses": [
         "BSD-3-Clause"
       ]
@@ -85,7 +85,7 @@
       "name": "puma",
       "version": "3.12.0",
       "package_manager": "bundler",
-      "path": ".",
+      "path": "Gemfile.lock",
       "licenses": [
         "BSD-3-Clause"
       ]
@@ -94,7 +94,7 @@
       "name": "rack",
       "version": "2.0.4",
       "package_manager": "bundler",
-      "path": ".",
+      "path": "Gemfile.lock",
       "licenses": [
         "MIT"
       ]
@@ -103,7 +103,7 @@
       "name": "rack-protection",
       "version": "2.0.0",
       "package_manager": "bundler",
-      "path": ".",
+      "path": "Gemfile.lock",
       "licenses": [
         "MIT"
       ]
@@ -112,7 +112,7 @@
       "name": "redis",
       "version": "3.3.5",
       "package_manager": "bundler",
-      "path": ".",
+      "path": "Gemfile.lock",
       "licenses": [
         "MIT"
       ]
@@ -121,7 +121,7 @@
       "name": "sidekiq",
       "version": "4.2.10",
       "package_manager": "bundler",
-      "path": ".",
+      "path": "Gemfile.lock",
       "licenses": [
         "LGPL-3.0-only"
       ]
@@ -130,7 +130,7 @@
       "name": "sinatra",
       "version": "2.0.0",
       "package_manager": "bundler",
-      "path": ".",
+      "path": "Gemfile.lock",
       "licenses": [
         "MIT"
       ]
@@ -139,7 +139,7 @@
       "name": "slim",
       "version": "3.0.9",
       "package_manager": "bundler",
-      "path": ".",
+      "path": "Gemfile.lock",
       "licenses": [
         "MIT"
       ]
@@ -148,7 +148,7 @@
       "name": "temple",
       "version": "0.8.0",
       "package_manager": "bundler",
-      "path": ".",
+      "path": "Gemfile.lock",
       "licenses": [
         "MIT"
       ]
@@ -157,10 +157,10 @@
       "name": "tilt",
       "version": "2.0.8",
       "package_manager": "bundler",
-      "path": ".",
+      "path": "Gemfile.lock",
       "licenses": [
         "MIT"
       ]
     }
   ]
-}
+}
\ No newline at end of file
diff --git a/spec/fixtures/haproxy.cfg b/spec/fixtures/haproxy.cfg
index ef11e48..1f98421 100644
--- a/spec/fixtures/haproxy.cfg
+++ b/spec/fixtures/haproxy.cfg
@@ -20,9 +20,17 @@ defaults
 frontend www-https
   bind *:443 ssl crt wildcard.test.pem
 
+  acl rubygems-backend ssl_fc_sni rubygems.test
   acl goproxy-backend ssl_fc_sni goproxy.test
+
+  http-request replace-header Host .* rubygems.org if rubygems-backend
   http-request replace-header Host .* proxy.golang.org if goproxy-backend
+
+  use_backend rubygems-backend if rubygems-backend
   use_backend goproxy-backend if goproxy-backend
 
 backend goproxy-backend
   server www1 proxy.golang.org:443 ssl verify none
+
+backend rubygems-backend
+  server www1 rubygems.org:443 ssl verify none
diff --git a/spec/fixtures/ruby/bundler-custom-tls/Gemfile b/spec/fixtures/ruby/bundler-custom-tls/Gemfile
new file mode 100644
index 0000000..1e46ec3
--- /dev/null
+++ b/spec/fixtures/ruby/bundler-custom-tls/Gemfile
@@ -0,0 +1,3 @@
+source "https://rubygems.test"
+
+gem "spandx"
diff --git a/spec/fixtures/ruby/bundler-custom-tls/Gemfile.lock b/spec/fixtures/ruby/bundler-custom-tls/Gemfile.lock
new file mode 100644
index 0000000..0568b0f
--- /dev/null
+++ b/spec/fixtures/ruby/bundler-custom-tls/Gemfile.lock
@@ -0,0 +1,40 @@
+GEM
+  remote: https://rubygems.test/
+  specs:
+    addressable (2.7.0)
+      public_suffix (>= 2.0.2, < 5.0)
+    mini_portile2 (2.4.0)
+    net-hippie (0.3.2)
+    nokogiri (1.10.9)
+      mini_portile2 (~> 2.4.0)
+    oj (3.10.6)
+    parslet (2.0.0)
+    public_suffix (4.0.5)
+    spandx (0.13.5)
+      addressable (~> 2.7)
+      bundler (>= 1.16, < 3.0.0)
+      net-hippie (~> 0.3)
+      nokogiri (~> 1.10)
+      oj (~> 3.10)
+      parslet (~> 2.0)
+      terminal-table (~> 1.8)
+      thor
+      tty-spinner (~> 0.9)
+      zeitwerk (~> 2.3)
+    terminal-table (1.8.0)
+      unicode-display_width (~> 1.1, >= 1.1.1)
+    thor (1.0.1)
+    tty-cursor (0.7.1)
+    tty-spinner (0.9.3)
+      tty-cursor (~> 0.7)
+    unicode-display_width (1.7.0)
+    zeitwerk (2.3.1)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  spandx
+
+BUNDLED WITH
+   2.1.4
diff --git a/spec/fixtures/ruby/bundler-git-source/Gemfile b/spec/fixtures/ruby/bundler-git-source/Gemfile
new file mode 100644
index 0000000..d2d64ad
--- /dev/null
+++ b/spec/fixtures/ruby/bundler-git-source/Gemfile
@@ -0,0 +1 @@
+gem 'net-hippie', git: 'https://github.com/mokhan/net-hippie.git'
diff --git a/spec/fixtures/ruby/bundler-git-source/Gemfile.lock b/spec/fixtures/ruby/bundler-git-source/Gemfile.lock
new file mode 100644
index 0000000..918db60
--- /dev/null
+++ b/spec/fixtures/ruby/bundler-git-source/Gemfile.lock
@@ -0,0 +1,14 @@
+GIT
+  remote: https://github.com/mokhan/net-hippie.git
+  revision: 6d1a48bee3dd8ec90a198b636cc9ccfd8c4e9bc5
+  specs:
+    net-hippie (1.0.0)
+
+GEM
+  specs:
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  net-hippie!
diff --git a/spec/fixtures/ruby/bundler-ruby-2.4.9-no-lockfile/.ruby-version b/spec/fixtures/ruby/bundler-ruby-2.4.9-no-lockfile/.ruby-version
new file mode 100644
index 0000000..e4b8527
--- /dev/null
+++ b/spec/fixtures/ruby/bundler-ruby-2.4.9-no-lockfile/.ruby-version
@@ -0,0 +1 @@
+ruby-2.4.9
diff --git a/spec/fixtures/ruby/bundler-ruby-2.4.9-no-lockfile/Gemfile b/spec/fixtures/ruby/bundler-ruby-2.4.9-no-lockfile/Gemfile
new file mode 100644
index 0000000..9020f0a
--- /dev/null
+++ b/spec/fixtures/ruby/bundler-ruby-2.4.9-no-lockfile/Gemfile
@@ -0,0 +1,3 @@
+source 'https://rubygems.org'
+
+gem 'saml-kit'
diff --git a/spec/fixtures/ruby/bundler-v1.17/Gemfile b/spec/fixtures/ruby/bundler-v1.17/Gemfile
new file mode 100644
index 0000000..9020f0a
--- /dev/null
+++ b/spec/fixtures/ruby/bundler-v1.17/Gemfile
@@ -0,0 +1,3 @@
+source 'https://rubygems.org'
+
+gem 'saml-kit'
diff --git a/spec/fixtures/ruby/bundler-v1.17/Gemfile.lock b/spec/fixtures/ruby/bundler-v1.17/Gemfile.lock
new file mode 100644
index 0000000..1dbdf7a
--- /dev/null
+++ b/spec/fixtures/ruby/bundler-v1.17/Gemfile.lock
@@ -0,0 +1,46 @@
+GEM
+  remote: https://rubygems.org/
+  specs:
+    activemodel (6.0.2.1)
+      activesupport (= 6.0.2.1)
+    activesupport (6.0.2.1)
+      concurrent-ruby (~> 1.0, >= 1.0.2)
+      i18n (>= 0.7, < 2)
+      minitest (~> 5.1)
+      tzinfo (~> 1.1)
+      zeitwerk (~> 2.2)
+    builder (3.2.4)
+    concurrent-ruby (1.1.5)
+    i18n (1.7.1)
+      concurrent-ruby (~> 1.0)
+    mini_portile2 (2.4.0)
+    minitest (5.13.0)
+    net-hippie (0.2.7)
+    nokogiri (1.10.7)
+      mini_portile2 (~> 2.4.0)
+    saml-kit (1.1.0)
+      activemodel (>= 4.2.0)
+      net-hippie (~> 0.1)
+      xml-kit (>= 0.3.0, < 1.0.0)
+    thread_safe (0.3.6)
+    tilt (2.0.10)
+    tzinfo (1.2.6)
+      thread_safe (~> 0.1)
+    xml-kit (0.4.0)
+      activemodel (>= 4.2.0)
+      builder (~> 3.2)
+      nokogiri (~> 1.10)
+      tilt (>= 1.4.1)
+      xmldsig (~> 0.6)
+    xmldsig (0.6.6)
+      nokogiri (>= 1.6.8, < 2.0.0)
+    zeitwerk (2.2.2)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  saml-kit
+
+BUNDLED WITH
+   1.17.3
diff --git a/spec/fixtures/ruby/bundler-v2.1/Gemfile b/spec/fixtures/ruby/bundler-v2.1/Gemfile
new file mode 100644
index 0000000..78a8bfb
--- /dev/null
+++ b/spec/fixtures/ruby/bundler-v2.1/Gemfile
@@ -0,0 +1,3 @@
+source 'https://rubygems.org'
+
+gem 'net-hippie'
diff --git a/spec/fixtures/ruby/bundler-v2.1/Gemfile.lock b/spec/fixtures/ruby/bundler-v2.1/Gemfile.lock
new file mode 100644
index 0000000..76c9f5c
--- /dev/null
+++ b/spec/fixtures/ruby/bundler-v2.1/Gemfile.lock
@@ -0,0 +1,13 @@
+GEM
+  remote: https://rubygems.org/
+  specs:
+    net-hippie (0.3.2)
+
+PLATFORMS
+  ruby
+
+DEPENDENCIES
+  net-hippie
+
+BUNDLED WITH
+   2.1.4