passbook.rb

%w(pathname json openssl net/http digest/sha1 zip).each { |lib| require lib }

module Passbook
  def self.wwdr_certificate
    OpenSSL::X509::Certificate.new <<-EOF.gsub /^\s+/, ""
    -----BEGIN CERTIFICATE-----
    MIIEIzCCAwugAwIBAgIBGTANBgkqhkiG9w0BAQUFADBiMQswCQYDVQQGEwJVUzET
    MBEGA1UEChMKQXBwbGUgSW5jLjEmMCQGA1UECxMdQXBwbGUgQ2VydGlmaWNhdGlv
    biBBdXRob3JpdHkxFjAUBgNVBAMTDUFwcGxlIFJvb3QgQ0EwHhcNMDgwMjE0MTg1
    NjM1WhcNMTYwMjE0MTg1NjM1WjCBljELMAkGA1UEBhMCVVMxEzARBgNVBAoMCkFw
    cGxlIEluYy4xLDAqBgNVBAsMI0FwcGxlIFdvcmxkd2lkZSBEZXZlbG9wZXIgUmVs
    YXRpb25zMUQwQgYDVQQDDDtBcHBsZSBXb3JsZHdpZGUgRGV2ZWxvcGVyIFJlbGF0
    aW9ucyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCCASIwDQYJKoZIhvcNAQEBBQAD
    ggEPADCCAQoCggEBAMo4VKbLVqrIJDlI6Yzu7F+4fyaRvDRTes58Y4Bhd2RepQcj
    tjn+UC0VVlhwLX7EbsFKhT4v8N6EGqFXya97GP9q+hUSSRUIGayq2yoy7ZZjaFIV
    PYyK7L9rGJXgA6wBfZcFZ84OhZU3au0Jtq5nzVFkn8Zc0bxXbmc1gHY2pIeBbjiP
    2CsVTnsl2Fq/ToPBjdKT1RpxtWCcnTNOVfkSWAyGuBYNweV3RY1QSLorLeSUheHo
    xJ3GaKWwo/xnfnC6AllLd0KRObn1zeFM78A7SIym5SFd/Wpqu6cWNWDS5q3zRinJ
    6MOL6XnAamFnFbLw/eVovGJfbs+Z3e8bY/6SZasCAwEAAaOBrjCBqzAOBgNVHQ8B
    Af8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUiCcXCam2GGCL7Ou6
    9kdZxVJUo7cwHwYDVR0jBBgwFoAUK9BpR5R2Cf70a40uQKb3R01/CF4wNgYDVR0f
    BC8wLTAroCmgJ4YlaHR0cDovL3d3dy5hcHBsZS5jb20vYXBwbGVjYS9yb290LmNy
    bDAQBgoqhkiG92NkBgIBBAIFADANBgkqhkiG9w0BAQUFAAOCAQEA2jIAlsVUlNM7
    gjdmfS5o1cPGuMsmjEiQzxMkakaOY9Tw0BMG3djEwTcV8jMTOSYtzi5VQOMLA6/6
    EsLnDSG41YDPrCgvzi2zTq+GGQTG6VDdTClHECP8bLsbmGtIieFbnd5G2zWFNe8+
    0OJYSzj07XVaH1xwHVY5EuXhDRHkiSUGvdW0FY5e0FmXkOlLgeLfGK9EdB4ZoDpH
    zJEdOusjWv6lLZf3e7vWh0ZChetSPSayY6i0scqP9Mzis8hH4L+aWYP62phTKoL1
    fGUuldkzXfXtZcwxN8VaBOhr4eeIA0p1npsoy0pAiGVDdd3LOiUjxZ5X+C7O0qmS
    XnMuLyV1FQ==
    -----END CERTIFICATE-----
    EOF
  end
  
  class PKPass
    def initialize(specs, assets, certificate, password)
      pk12   = OpenSSL::PKCS12.new(certificate, password)
      flag   = OpenSSL::PKCS7::BINARY | OpenSSL::PKCS7::DETACHED
      @files = assets.each_with_object({ "pass.json" => specs.to_json }) do |(k,v),files|
        files[k] = (v=~%r[^https?://\S+] ? Net::HTTP.get(URI(v)) : Pathname(v).read)
      end
      @files["manifest.json"] = @files.each_with_object({}){|(k,v),m| m[k] = Digest::SHA1.hexdigest(v) }.to_json}
      @files["signature"] = OpenSSL::PKCS7.sign(pk12.certificate, pk12.key, @files["manifest.json"], [Passbook.wwdr_certificate], flag).to_der
    end
    
    def content_type
      "application/vnd.apple.pkpass"
    end
    
    def to_s
      Zip::OutputStream.write_buffer { |zip| @files.each {|k,v| zip.put_next_entry(k) && zip.write(v) } }.string
    end
    
    def to_file(path)
      File.write(path, to_s)
    end
  end
end

passbook_example

certificate  = File.read('certificate.p12')
password     = 'secret-password'
pass_content = {...}
pass_assets  = {...}

Passbook::PKPass.new(pass_content, pass_assets, certificate, password).to_file('mypass.pkpass')