instance method

OpenSSL::X509::Certificate#==

(self other) -> bool

cert1 == cert2 → true | false

ext/openssl/ossl_x509cert.c View on GitHub ↗

static VALUE
ossl_x509_eq(VALUE self, VALUE other)
{
    X509 *a, *b;

    GetX509(self, a);
    if (!rb_obj_is_kind_of(other, cX509Cert))
        return Qfalse;
    GetX509(other, b);

    return !X509_cmp(a, b) ? Qtrue : Qfalse;
}

Compares the two certificates. Note that this takes into account all fields, not just the issuer name and the serial number.

This method uses X509_cmp() from OpenSSL, which compares certificates based on their cached DER encodings. The comparison can be unreliable if a certificate is incomplete.