Raise error on incomplete RSA ANS.1 sequence

Author: anakinj

lib/jwt/jwk/rsa.rb

@@ -137,6 +137,8 @@ def create_rsa_key_using_der(rsa_parameters)
 
           if sequence.size > 2 # Append "two-prime" version for private key
             sequence.unshift(OpenSSL::ASN1::Integer.new(0))
+
+            raise JWT::JWKError, 'Creating a RSA key with a private key requires the CRT parameters to be defined' if sequence.size < RSA_ASN1_SEQUENCE.size
           end
 
           OpenSSL::PKey::RSA.new(OpenSSL::ASN1::Sequence(sequence).to_der)

spec/jwk/rsa_spec.rb

@@ -196,6 +196,14 @@
     subject(:rsa) { described_class.create_rsa_key_using_der(rsa_parameters) }
 
     include_examples 'creating an RSA object from complete JWK parameters'
+
+    context 'when e, n, d is given' do
+      let(:jwk_parameters) { all_jwk_parameters.slice(:e, :n, :d) }
+
+      it 'expects all CRT parameters given and raises error' do
+        expect { subject }.to raise_error(JWT::JWKError, 'Creating a RSA key with a private key requires the CRT parameters to be defined')
+      end
+    end
   end
 
   describe '.create_rsa_key_using_sets' do