7 files changed, 96 insertions, 0 deletions
diff --git a/lib/gitlab/ci/secure_files/cer.rb b/lib/gitlab/ci/secure_files/cer.rb
new file mode 100644
index 00000000000..7a55d9ca095
--- /dev/null
+++ b/lib/gitlab/ci/secure_files/cer.rb
@@ -0,0 +1,56 @@
+# frozen_string_literal: true
+
+module Gitlab
+  module Ci
+    module SecureFiles
+      class Cer
+        attr_reader :error
+
+        def initialize(filedata)
+          @filedata = filedata
+          @error    = nil
+        end
+
+        def certificate_data
+          @certificate_data ||= begin
+            OpenSSL::X509::Certificate.new(@filedata)
+          rescue StandardError => err
+            @error = err.to_s
+            nil
+          end
+        end
+
+        def metadata
+          return {} unless certificate_data
+
+          {
+            issuer: issuer,
+            subject: subject,
+            id: id,
+            expires_at: expires_at
+          }
+        end
+
+        def expires_at
+          return unless certificate_data
+
+          certificate_data.not_before
+        end
+
+        private
+
+        def id
+          certificate_data.serial.to_s
+        end
+
+        def issuer
+          X509Name.parse(certificate_data.issuer)
+        end
+
+        def subject
+          X509Name.parse(certificate_data.subject)
+        end
+      end
+    end
+  end
+end
diff --git a/lib/gitlab/ci/secure_files/x509_name.rb b/lib/gitlab/ci/secure_files/x509_name.rb
new file mode 100644
index 00000000000..659959b8ae5
--- /dev/null
+++ b/lib/gitlab/ci/secure_files/x509_name.rb
@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+
+module Gitlab
+  module Ci
+    module SecureFiles
+      class X509Name
+        def self.parse(x509_name)
+          x509_name.to_utf8.split(',').to_h { |a| a.split('=') }
+        rescue StandardError
+          {}
+        end
+      end
+    end
+  end
+end
diff --git a/lib/gitlab/ci/templates/PHP.gitlab-ci.yml b/lib/gitlab/ci/templates/PHP.gitlab-ci.yml
index 12640d28d29..0604438e0aa 100644
--- a/lib/gitlab/ci/templates/PHP.gitlab-ci.yml
+++ b/lib/gitlab/ci/templates/PHP.gitlab-ci.yml
@@ -42,3 +42,8 @@ variables:
 test:
   script:
     - vendor/bin/phpunit --configuration phpunit.xml --coverage-text --colors=never
+
+deploy:
+  stage: deploy
+  script: echo "Define your deployment script!"
+  environment: production
diff --git a/lib/gitlab/ci/templates/Python.gitlab-ci.yml b/lib/gitlab/ci/templates/Python.gitlab-ci.yml
index 191d5b6b11c..febbb36d834 100644
--- a/lib/gitlab/ci/templates/Python.gitlab-ci.yml
+++ b/lib/gitlab/ci/templates/Python.gitlab-ci.yml
@@ -55,3 +55,8 @@ pages:
       - public
   rules:
     - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
+
+deploy:
+  stage: deploy
+  script: echo "Define your deployment script!"
+  environment: production
diff --git a/lib/gitlab/ci/templates/Rust.gitlab-ci.yml b/lib/gitlab/ci/templates/Rust.gitlab-ci.yml
index a83f84da818..b9823444db2 100644
--- a/lib/gitlab/ci/templates/Rust.gitlab-ci.yml
+++ b/lib/gitlab/ci/templates/Rust.gitlab-ci.yml
@@ -40,3 +40,8 @@ test:cargo:
 #     when: always
 #     reports:
 #       junit: $CI_PROJECT_DIR/tests/*.xml
+
+deploy:
+  stage: deploy
+  script: echo "Define your deployment script!"
+  environment: production
diff --git a/lib/gitlab/ci/templates/Scala.gitlab-ci.yml b/lib/gitlab/ci/templates/Scala.gitlab-ci.yml
index 26efe7a8908..ce5d5937896 100644
--- a/lib/gitlab/ci/templates/Scala.gitlab-ci.yml
+++ b/lib/gitlab/ci/templates/Scala.gitlab-ci.yml
@@ -30,3 +30,8 @@ test:
   script:
     # Execute your project's tests
     - sbt clean test
+
+deploy:
+  stage: deploy
+  script: echo "Define your deployment script!"
+  environment: production
diff --git a/lib/gitlab/ci/templates/Swift.gitlab-ci.yml b/lib/gitlab/ci/templates/Swift.gitlab-ci.yml
index 3c4533d603e..2a5ac539a42 100644
--- a/lib/gitlab/ci/templates/Swift.gitlab-ci.yml
+++ b/lib/gitlab/ci/templates/Swift.gitlab-ci.yml
@@ -38,3 +38,8 @@ archive_project:
     - ios_11-3
     - xcode_9-3
     - macos_10-13
+
+deploy:
+  stage: deploy
+  script: echo "Define your deployment script!"
+  environment: production