puppet 5.5.22-x64-mingw32 → 6.0.0-x64-mingw32
Sign up to get free protection for your applications and to get access to all the features.
Potentially problematic release.
This version of puppet might be problematic. Click here for more details.
- checksums.yaml +4 -4
- data/Gemfile +46 -72
- data/Gemfile.lock +86 -102
- data/MAINTAINERS +47 -0
- data/Rakefile +15 -19
- data/ext/build_defaults.yaml +0 -1
- data/ext/cert_inspector +3 -3
- data/ext/debian/copyright +0 -22
- data/ext/project_data.yaml +8 -10
- data/ext/puppet-test +2 -2
- data/ext/redhat/puppet.spec.erb +0 -4
- data/ext/regexp_nodes/regexp_nodes.rb +4 -4
- data/ext/solaris/smf/puppet.xml +0 -2
- data/ext/solaris/smf/svc-puppetd +1 -8
- data/ext/solaris/smf/svc-puppetmasterd +1 -8
- data/ext/windows/eventlog/Rakefile +32 -0
- data/ext/windows/eventlog/puppetres.dll +0 -0
- data/ext/windows/eventlog/puppetres.mc +18 -0
- data/ext/windows/service/daemon.rb +8 -54
- data/install.rb +24 -6
- data/lib/hiera/scope.rb +0 -7
- data/lib/puppet.rb +10 -21
- data/lib/puppet/agent.rb +13 -5
- data/lib/puppet/application.rb +10 -8
- data/lib/puppet/application/agent.rb +3 -21
- data/lib/puppet/application/apply.rb +22 -12
- data/lib/puppet/application/cert.rb +25 -180
- data/lib/puppet/application/describe.rb +9 -3
- data/lib/puppet/application/device.rb +41 -74
- data/lib/puppet/application/doc.rb +5 -3
- data/lib/puppet/application/filebucket.rb +1 -23
- data/lib/puppet/application/lookup.rb +2 -2
- data/lib/puppet/application/resource.rb +4 -4
- data/lib/puppet/application/script.rb +3 -3
- data/lib/puppet/application/ssl.rb +133 -0
- data/lib/puppet/application_support.rb +1 -2
- data/lib/puppet/configurer.rb +62 -127
- data/lib/puppet/configurer/downloader.rb +17 -34
- data/lib/puppet/configurer/fact_handler.rb +5 -1
- data/lib/puppet/configurer/plugin_handler.rb +2 -3
- data/lib/puppet/confine/false.rb +1 -7
- data/lib/puppet/confine/true.rb +1 -7
- data/lib/puppet/daemon.rb +2 -2
- data/lib/puppet/datatypes.rb +1 -1
- data/lib/puppet/defaults.rb +126 -286
- data/lib/puppet/environments.rb +2 -7
- data/lib/puppet/error.rb +14 -10
- data/lib/puppet/etc.rb +4 -25
- data/lib/puppet/external/dot.rb +23 -17
- data/lib/puppet/face/config.rb +50 -12
- data/lib/puppet/face/epp.rb +2 -2
- data/lib/puppet/face/facts.rb +1 -1
- data/lib/puppet/face/help.rb +21 -7
- data/lib/puppet/face/help/global.erb +2 -2
- data/lib/puppet/face/module/build.rb +4 -59
- data/lib/puppet/face/module/generate.rb +5 -247
- data/lib/puppet/face/module/install.rb +0 -4
- data/lib/puppet/face/module/list.rb +5 -10
- data/lib/puppet/face/module/search.rb +2 -2
- data/lib/puppet/face/module/uninstall.rb +1 -5
- data/lib/puppet/face/module/upgrade.rb +1 -5
- data/lib/puppet/face/node/clean.rb +14 -10
- data/lib/puppet/face/plugin.rb +2 -9
- data/lib/puppet/feature/base.rb +7 -26
- data/lib/puppet/feature/eventlog.rb +1 -1
- data/lib/puppet/file_bucket/dipper.rb +1 -1
- data/lib/puppet/file_serving/base.rb +7 -7
- data/lib/puppet/file_serving/fileset.rb +2 -2
- data/lib/puppet/file_serving/http_metadata.rb +1 -1
- data/lib/puppet/file_serving/metadata.rb +4 -3
- data/lib/puppet/file_serving/mount/locales.rb +2 -1
- data/lib/puppet/file_serving/mount/pluginfacts.rb +2 -1
- data/lib/puppet/file_serving/mount/plugins.rb +2 -1
- data/lib/puppet/file_system.rb +8 -0
- data/lib/puppet/file_system/memory_file.rb +1 -1
- data/lib/puppet/file_system/posix.rb +2 -3
- data/lib/puppet/file_system/uniquefile.rb +0 -4
- data/lib/puppet/forge.rb +8 -12
- data/lib/puppet/functions.rb +138 -0
- data/lib/puppet/functions/abs.rb +61 -0
- data/lib/puppet/functions/call.rb +38 -2
- data/lib/puppet/functions/camelcase.rb +62 -0
- data/lib/puppet/functions/capitalize.rb +61 -0
- data/lib/puppet/functions/ceiling.rb +37 -0
- data/lib/puppet/functions/chomp.rb +57 -0
- data/lib/puppet/functions/chop.rb +67 -0
- data/lib/puppet/functions/compare.rb +125 -0
- data/lib/puppet/functions/convert_to.rb +3 -2
- data/lib/puppet/functions/dig.rb +21 -1
- data/lib/puppet/functions/downcase.rb +89 -0
- data/lib/puppet/functions/epp.rb +4 -4
- data/lib/puppet/functions/eyaml_lookup_key.rb +4 -5
- data/lib/puppet/functions/filter.rb +7 -6
- data/lib/puppet/functions/floor.rb +37 -0
- data/lib/puppet/functions/get.rb +150 -0
- data/lib/puppet/functions/getvar.rb +87 -0
- data/lib/puppet/functions/inline_epp.rb +5 -5
- data/lib/puppet/functions/lstrip.rb +58 -0
- data/lib/puppet/functions/max.rb +183 -0
- data/lib/puppet/functions/min.rb +182 -0
- data/lib/puppet/functions/new.rb +3 -8
- data/lib/puppet/functions/reduce.rb +4 -2
- data/lib/puppet/functions/reverse_each.rb +1 -1
- data/lib/puppet/functions/round.rb +24 -0
- data/lib/puppet/functions/rstrip.rb +58 -0
- data/lib/puppet/functions/size.rb +15 -0
- data/lib/puppet/functions/sort.rb +74 -0
- data/lib/puppet/functions/step.rb +1 -1
- data/lib/puppet/functions/strip.rb +58 -0
- data/lib/puppet/functions/upcase.rb +89 -0
- data/lib/puppet/functions/yaml_data.rb +4 -5
- data/lib/puppet/gettext/config.rb +1 -1
- data/lib/puppet/gettext/module_translations.rb +1 -1
- data/lib/puppet/graph.rb +0 -2
- data/lib/puppet/graph/rb_tree_map.rb +2 -2
- data/lib/puppet/graph/simple_graph.rb +10 -7
- data/lib/puppet/indirector/catalog/compiler.rb +0 -8
- data/lib/puppet/indirector/catalog/json.rb +14 -3
- data/lib/puppet/indirector/catalog/yaml.rb +0 -16
- data/lib/puppet/indirector/certificate/file.rb +0 -1
- data/lib/puppet/indirector/facts/yaml.rb +4 -2
- data/lib/puppet/indirector/file_bucket_file/file.rb +1 -1
- data/lib/puppet/indirector/hiera.rb +0 -6
- data/lib/puppet/indirector/indirection.rb +8 -12
- data/lib/puppet/indirector/key/file.rb +1 -6
- data/lib/puppet/indirector/node/exec.rb +1 -3
- data/lib/puppet/indirector/node/yaml.rb +0 -6
- data/lib/puppet/indirector/request.rb +20 -27
- data/lib/puppet/indirector/resource/ral.rb +3 -1
- data/lib/puppet/indirector/resource/validator.rb +1 -1
- data/lib/puppet/indirector/rest.rb +7 -65
- data/lib/puppet/indirector/ssl_file.rb +3 -44
- data/lib/puppet/indirector/terminus.rb +1 -1
- data/lib/puppet/indirector/yaml.rb +4 -4
- data/lib/puppet/info_service/task_information_service.rb +7 -3
- data/lib/puppet/interface.rb +2 -3
- data/lib/puppet/interface/action.rb +2 -5
- data/lib/puppet/interface/face_collection.rb +3 -1
- data/lib/puppet/loaders.rb +2 -0
- data/lib/puppet/metatype/manager.rb +3 -5
- data/lib/puppet/module.rb +5 -31
- data/lib/puppet/module/task.rb +208 -30
- data/lib/puppet/module_tool.rb +2 -5
- data/lib/puppet/module_tool/applications.rb +0 -1
- data/lib/puppet/module_tool/applications/application.rb +1 -1
- data/lib/puppet/module_tool/applications/installer.rb +7 -8
- data/lib/puppet/module_tool/applications/uninstaller.rb +4 -5
- data/lib/puppet/module_tool/applications/unpacker.rb +1 -1
- data/lib/puppet/module_tool/applications/upgrader.rb +5 -6
- data/lib/puppet/module_tool/installed_modules.rb +2 -2
- data/lib/puppet/module_tool/local_tarball.rb +3 -3
- data/lib/puppet/module_tool/metadata.rb +1 -2
- data/lib/puppet/module_tool/shared_behaviors.rb +6 -6
- data/lib/puppet/module_tool/tar/mini.rb +2 -12
- data/lib/puppet/network/authconfig.rb +0 -13
- data/lib/puppet/network/format_support.rb +13 -8
- data/lib/puppet/network/formats.rb +93 -2
- data/lib/puppet/network/http.rb +0 -2
- data/lib/puppet/network/http/api.rb +1 -10
- data/lib/puppet/network/http/api/indirected_routes.rb +22 -16
- data/lib/puppet/network/http/api/master/v3/environment.rb +0 -3
- data/lib/puppet/network/http/connection.rb +14 -57
- data/lib/puppet/network/http/factory.rb +13 -7
- data/lib/puppet/network/http/handler.rb +59 -27
- data/lib/puppet/network/http/pool.rb +1 -7
- data/lib/puppet/network/http/site.rb +1 -1
- data/lib/puppet/network/resolver.rb +140 -67
- data/lib/puppet/node.rb +1 -2
- data/lib/puppet/node/environment.rb +5 -30
- data/lib/puppet/node/facts.rb +11 -1
- data/lib/puppet/parameter.rb +4 -7
- data/lib/puppet/parser/ast.rb +5 -9
- data/lib/puppet/parser/ast/branch.rb +3 -3
- data/lib/puppet/parser/ast/leaf.rb +5 -0
- data/lib/puppet/parser/ast/resourceparam.rb +1 -1
- data/lib/puppet/parser/catalog_compiler.rb +32 -0
- data/lib/puppet/parser/compiler.rb +2 -3
- data/lib/puppet/parser/compiler/catalog_validator/env_relationship_validator.rb +0 -2
- data/lib/puppet/parser/compiler/catalog_validator/site_validator.rb +0 -2
- data/lib/puppet/parser/environment_compiler.rb +0 -3
- data/lib/puppet/parser/functions.rb +48 -18
- data/lib/puppet/parser/functions/epp.rb +3 -3
- data/lib/puppet/parser/functions/filter.rb +1 -1
- data/lib/puppet/parser/functions/generate.rb +1 -1
- data/lib/puppet/parser/functions/inline_epp.rb +5 -5
- data/lib/puppet/parser/resource.rb +2 -4
- data/lib/puppet/parser/resource/param.rb +12 -11
- data/lib/puppet/parser/scope.rb +6 -8
- data/lib/puppet/parser/script_compiler.rb +7 -2
- data/lib/puppet/pops.rb +1 -0
- data/lib/puppet/pops/adaptable.rb +13 -7
- data/lib/puppet/pops/adapters.rb +18 -8
- data/lib/puppet/pops/evaluator/access_operator.rb +2 -2
- data/lib/puppet/pops/evaluator/collectors/abstract_collector.rb +4 -4
- data/lib/puppet/pops/evaluator/collectors/catalog_collector.rb +1 -1
- data/lib/puppet/pops/evaluator/collectors/exported_collector.rb +1 -1
- data/lib/puppet/pops/evaluator/compare_operator.rb +3 -1
- data/lib/puppet/pops/evaluator/deferred_resolver.rb +127 -0
- data/lib/puppet/pops/evaluator/evaluator_impl.rb +17 -2
- data/lib/puppet/pops/evaluator/external_syntax_support.rb +2 -3
- data/lib/puppet/pops/evaluator/runtime3_converter.rb +23 -4
- data/lib/puppet/pops/evaluator/runtime3_support.rb +7 -8
- data/lib/puppet/pops/functions/dispatch.rb +6 -0
- data/lib/puppet/pops/issues.rb +9 -10
- data/lib/puppet/pops/loader/loader.rb +1 -1
- data/lib/puppet/pops/loader/loader_paths.rb +5 -3
- data/lib/puppet/pops/loader/module_loaders.rb +47 -21
- data/lib/puppet/pops/loader/null_loader.rb +60 -0
- data/lib/puppet/pops/loader/ruby_legacy_function_instantiator.rb +54 -0
- data/lib/puppet/pops/loader/static_loader.rb +0 -36
- data/lib/puppet/pops/loader/task_instantiator.rb +72 -44
- data/lib/puppet/pops/loaders.rb +21 -33
- data/lib/puppet/pops/lookup/hiera_config.rb +1 -2
- data/lib/puppet/pops/lookup/sub_lookup.rb +1 -1
- data/lib/puppet/pops/merge_strategy.rb +18 -22
- data/lib/puppet/pops/model/ast.pp +16 -0
- data/lib/puppet/pops/model/ast.rb +94 -0
- data/lib/puppet/pops/model/factory.rb +17 -38
- data/lib/puppet/pops/model/model_label_provider.rb +8 -1
- data/lib/puppet/pops/parser/egrammar.ra +14 -3
- data/lib/puppet/pops/parser/eparser.rb +1537 -1492
- data/lib/puppet/pops/parser/epp_support.rb +6 -2
- data/lib/puppet/pops/parser/heredoc_support.rb +8 -17
- data/lib/puppet/pops/parser/interpolation_support.rb +4 -4
- data/lib/puppet/pops/parser/lexer2.rb +2 -7
- data/lib/puppet/pops/parser/locator.rb +87 -107
- data/lib/puppet/pops/parser/parser_support.rb +2 -11
- data/lib/puppet/pops/parser/pn_parser.rb +16 -17
- data/lib/puppet/pops/pcore.rb +19 -8
- data/lib/puppet/pops/puppet_stack.rb +48 -51
- data/lib/puppet/pops/resource/resource_type_impl.rb +0 -2
- data/lib/puppet/pops/serialization.rb +3 -2
- data/lib/puppet/pops/serialization/from_data_converter.rb +4 -3
- data/lib/puppet/pops/serialization/to_data_converter.rb +3 -3
- data/lib/puppet/pops/serialization/to_stringified_converter.rb +226 -0
- data/lib/puppet/pops/types/iterable.rb +8 -34
- data/lib/puppet/pops/types/p_binary_type.rb +1 -2
- data/lib/puppet/pops/types/p_meta_type.rb +1 -1
- data/lib/puppet/pops/types/p_object_type.rb +3 -0
- data/lib/puppet/pops/types/p_sensitive_type.rb +1 -1
- data/lib/puppet/pops/types/p_timespan_type.rb +2 -2
- data/lib/puppet/pops/types/p_type_set_type.rb +0 -4
- data/lib/puppet/pops/types/string_converter.rb +12 -21
- data/lib/puppet/pops/types/type_calculator.rb +0 -24
- data/lib/puppet/pops/types/type_factory.rb +17 -0
- data/lib/puppet/pops/types/type_mismatch_describer.rb +1 -1
- data/lib/puppet/pops/types/types.rb +7 -32
- data/lib/puppet/pops/validation/checker4_0.rb +23 -33
- data/lib/puppet/pops/validation/tasks_checker.rb +47 -6
- data/lib/puppet/pops/validation/validator_factory_4_0.rb +7 -10
- data/lib/puppet/property.rb +1 -1
- data/lib/puppet/property/ensure.rb +1 -1
- data/lib/puppet/provider.rb +14 -2
- data/lib/puppet/provider/exec.rb +58 -59
- data/lib/puppet/provider/file/posix.rb +0 -5
- data/lib/puppet/provider/file/windows.rb +2 -50
- data/lib/puppet/provider/group/aix.rb +2 -18
- data/lib/puppet/provider/group/groupadd.rb +19 -19
- data/lib/puppet/provider/group/windows_adsi.rb +4 -11
- data/lib/puppet/provider/nameservice.rb +28 -11
- data/lib/puppet/provider/nameservice/directoryservice.rb +1 -1
- data/lib/puppet/provider/nameservice/pw.rb +2 -2
- data/lib/puppet/provider/package.rb +0 -2
- data/lib/puppet/provider/package/aix.rb +2 -17
- data/lib/puppet/provider/package/apt.rb +3 -14
- data/lib/puppet/provider/package/dnf.rb +3 -3
- data/lib/puppet/provider/package/dpkg.rb +7 -18
- data/lib/puppet/provider/package/fink.rb +3 -20
- data/lib/puppet/provider/package/gem.rb +43 -105
- data/lib/puppet/provider/package/openbsd.rb +2 -14
- data/lib/puppet/provider/package/pip.rb +108 -160
- data/lib/puppet/provider/package/pip3.rb +1 -1
- data/lib/puppet/provider/package/pkg.rb +5 -18
- data/lib/puppet/provider/package/pkgdmg.rb +1 -1
- data/lib/puppet/provider/package/pkgng.rb +4 -16
- data/lib/puppet/provider/package/portage.rb +6 -6
- data/lib/puppet/provider/package/puppet_gem.rb +2 -7
- data/lib/puppet/provider/package/rpm.rb +33 -82
- data/lib/puppet/provider/package/windows.rb +2 -6
- data/lib/puppet/provider/package/windows/exe_package.rb +10 -16
- data/lib/puppet/provider/package/windows/msi_package.rb +0 -8
- data/lib/puppet/provider/package/windows/package.rb +2 -10
- data/lib/puppet/provider/package/yum.rb +25 -37
- data/lib/puppet/provider/package/zypper.rb +0 -1
- data/lib/puppet/provider/parsedfile.rb +5 -26
- data/lib/puppet/provider/service/base.rb +1 -1
- data/lib/puppet/provider/service/daemontools.rb +9 -9
- data/lib/puppet/provider/service/debian.rb +1 -0
- data/lib/puppet/provider/service/launchd.rb +8 -39
- data/lib/puppet/provider/service/openbsd.rb +1 -1
- data/lib/puppet/provider/service/rcng.rb +2 -2
- data/lib/puppet/provider/service/runit.rb +8 -2
- data/lib/puppet/provider/service/smf.rb +0 -54
- data/lib/puppet/provider/service/systemd.rb +24 -35
- data/lib/puppet/provider/service/upstart.rb +1 -3
- data/lib/puppet/provider/service/windows.rb +3 -23
- data/lib/puppet/provider/user/aix.rb +2 -48
- data/lib/puppet/provider/user/directoryservice.rb +8 -45
- data/lib/puppet/provider/user/hpux.rb +1 -1
- data/lib/puppet/provider/user/pw.rb +3 -12
- data/lib/puppet/provider/user/user_role_add.rb +1 -5
- data/lib/puppet/provider/user/useradd.rb +44 -74
- data/lib/puppet/provider/user/windows_adsi.rb +0 -7
- data/lib/puppet/reference/indirection.rb +2 -2
- data/lib/puppet/reference/metaparameter.rb +3 -1
- data/lib/puppet/reference/providers.rb +1 -1
- data/lib/puppet/reference/type.rb +9 -3
- data/lib/puppet/reports.rb +3 -3
- data/lib/puppet/resource.rb +22 -22
- data/lib/puppet/resource/catalog.rb +8 -14
- data/lib/puppet/resource/type.rb +1 -10
- data/lib/puppet/rest/client.rb +83 -0
- data/lib/puppet/rest/errors.rb +14 -0
- data/lib/puppet/rest/response.rb +34 -0
- data/lib/puppet/rest/route.rb +84 -0
- data/lib/puppet/rest/routes.rb +154 -0
- data/lib/puppet/rest/ssl_context.rb +13 -0
- data/lib/puppet/settings.rb +9 -54
- data/lib/puppet/settings/config_file.rb +1 -2
- data/lib/puppet/settings/environment_conf.rb +0 -1
- data/lib/puppet/settings/file_setting.rb +1 -1
- data/lib/puppet/settings/server_list_setting.rb +0 -9
- data/lib/puppet/ssl.rb +0 -1
- data/lib/puppet/ssl/base.rb +1 -9
- data/lib/puppet/ssl/certificate.rb +7 -4
- data/lib/puppet/ssl/certificate_request.rb +6 -14
- data/lib/puppet/ssl/certificate_request_attributes.rb +1 -1
- data/lib/puppet/ssl/host.rb +400 -174
- data/lib/puppet/ssl/key.rb +1 -5
- data/lib/puppet/ssl/oids.rb +3 -3
- data/lib/puppet/ssl/validator/default_validator.rb +33 -49
- data/lib/puppet/test/test_helper.rb +12 -18
- data/lib/puppet/transaction.rb +7 -12
- data/lib/puppet/transaction/event.rb +37 -14
- data/lib/puppet/transaction/event_manager.rb +3 -11
- data/lib/puppet/transaction/persistence.rb +1 -1
- data/lib/puppet/transaction/report.rb +1 -1
- data/lib/puppet/transaction/resource_harness.rb +2 -5
- data/lib/puppet/type.rb +7 -10
- data/lib/puppet/type/exec.rb +16 -50
- data/lib/puppet/type/file.rb +7 -16
- data/lib/puppet/type/file/content.rb +2 -3
- data/lib/puppet/type/file/data_sync.rb +1 -5
- data/lib/puppet/type/file/mode.rb +2 -7
- data/lib/puppet/type/file/source.rb +2 -1
- data/lib/puppet/type/filebucket.rb +8 -12
- data/lib/puppet/type/group.rb +3 -33
- data/lib/puppet/type/notify.rb +2 -3
- data/lib/puppet/type/package.rb +18 -154
- data/lib/puppet/type/resources.rb +2 -12
- data/lib/puppet/type/schedule.rb +34 -96
- data/lib/puppet/type/service.rb +10 -9
- data/lib/puppet/type/tidy.rb +1 -1
- data/lib/puppet/type/user.rb +30 -14
- data/lib/puppet/util.rb +28 -52
- data/lib/puppet/util/autoload.rb +62 -56
- data/lib/puppet/util/character_encoding.rb +0 -22
- data/lib/puppet/util/classgen.rb +0 -6
- data/lib/puppet/util/command_line.rb +4 -7
- data/lib/puppet/util/command_line/trollop.rb +1 -1
- data/lib/puppet/util/connection.rb +74 -0
- data/lib/puppet/util/execution.rb +7 -22
- data/lib/puppet/util/feature.rb +63 -41
- data/lib/puppet/util/fileparsing.rb +27 -5
- data/lib/puppet/util/filetype.rb +8 -56
- data/lib/puppet/util/http_proxy.rb +18 -27
- data/lib/puppet/util/instance_loader.rb +3 -21
- data/lib/puppet/util/json.rb +0 -8
- data/lib/puppet/util/ldap/connection.rb +7 -7
- data/lib/puppet/util/log.rb +3 -8
- data/lib/puppet/util/log/destinations.rb +13 -5
- data/lib/puppet/util/logging.rb +19 -31
- data/lib/puppet/util/metric.rb +2 -2
- data/lib/puppet/util/monkey_patches.rb +1 -1
- data/lib/puppet/util/network_device/base.rb +1 -1
- data/lib/puppet/util/pidlock.rb +3 -23
- data/lib/puppet/util/platform.rb +3 -0
- data/lib/puppet/util/plist.rb +0 -6
- data/lib/puppet/util/posix.rb +0 -15
- data/lib/puppet/util/provider_features.rb +6 -7
- data/lib/puppet/util/rdoc.rb +2 -2
- data/lib/puppet/util/rdoc/parser/puppet_parser_core.rb +1 -1
- data/lib/puppet/util/reference.rb +8 -7
- data/lib/puppet/util/resource_template.rb +1 -1
- data/lib/puppet/util/rubygems.rb +1 -13
- data/lib/puppet/util/run_mode.rb +1 -1
- data/lib/puppet/util/selinux.rb +3 -9
- data/lib/puppet/util/ssl.rb +40 -1
- data/lib/puppet/util/storage.rb +1 -13
- data/lib/puppet/util/suidmanager.rb +7 -5
- data/lib/puppet/util/tag_set.rb +1 -1
- data/lib/puppet/util/tagging.rb +1 -1
- data/lib/puppet/util/windows.rb +15 -0
- data/lib/puppet/util/windows/adsi.rb +7 -116
- data/lib/puppet/util/windows/api_types.rb +33 -46
- data/lib/puppet/util/windows/eventlog.rb +6 -1
- data/lib/puppet/util/windows/principal.rb +6 -8
- data/lib/puppet/util/windows/process.rb +3 -94
- data/lib/puppet/util/windows/registry.rb +14 -46
- data/lib/puppet/util/windows/security.rb +2 -40
- data/lib/puppet/util/windows/service.rb +72 -431
- data/lib/puppet/util/windows/sid.rb +3 -4
- data/lib/puppet/util/windows/user.rb +9 -17
- data/lib/puppet/util/yaml.rb +41 -5
- data/lib/puppet/vendor.rb +1 -1
- data/lib/puppet/version.rb +1 -1
- data/lib/puppet_pal.rb +246 -23
- data/locales/ja/puppet.po +11128 -0
- data/locales/puppet.pot +1321 -2527
- data/man/man5/puppet.conf.5 +31 -191
- data/man/man8/puppet-agent.8 +2 -2
- data/man/man8/puppet-apply.8 +1 -1
- data/man/man8/puppet-catalog.8 +1 -1
- data/man/man8/puppet-config.8 +3 -3
- data/man/man8/puppet-describe.8 +1 -1
- data/man/man8/puppet-device.8 +19 -23
- data/man/man8/puppet-doc.8 +1 -1
- data/man/man8/puppet-epp.8 +1 -1
- data/man/man8/puppet-facts.8 +1 -1
- data/man/man8/puppet-filebucket.8 +2 -21
- data/man/man8/puppet-generate.8 +1 -1
- data/man/man8/puppet-help.8 +1 -1
- data/man/man8/puppet-key.8 +1 -7
- data/man/man8/puppet-lookup.8 +1 -1
- data/man/man8/puppet-man.8 +1 -1
- data/man/man8/puppet-module.8 +10 -100
- data/man/man8/puppet-node.8 +4 -7
- data/man/man8/puppet-parser.8 +1 -1
- data/man/man8/puppet-plugin.8 +1 -1
- data/man/man8/puppet-report.8 +1 -1
- data/man/man8/puppet-resource.8 +1 -1
- data/man/man8/puppet-script.8 +1 -1
- data/man/man8/puppet-ssl.8 +28 -0
- data/man/man8/puppet-status.8 +1 -1
- data/man/man8/puppet.8 +12 -3
- data/spec/fixtures/unit/functions/hiera/hiera/backend/hieraspec_backend.rb +22 -0
- data/spec/fixtures/unit/functions/lookup/hiera/backend/custom_backend.rb +18 -0
- data/spec/fixtures/unit/functions/lookup/hiera/backend/other_backend.rb +7 -0
- data/spec/fixtures/unit/pops/loaders/loaders/dependent_modules_with_metadata/modules/user/manifests/init.pp +6 -6
- data/spec/fixtures/unit/provider/package/pkgng/pkg.info +0 -1
- data/spec/fixtures/unit/provider/package/pkgng/pkg.version +0 -2
- data/spec/fixtures/unit/provider/service/systemd/list_unit_files_services +0 -9
- data/spec/integration/agent/logging_spec.rb +9 -7
- data/spec/integration/application/apply_spec.rb +31 -26
- data/spec/integration/application/doc_spec.rb +2 -1
- data/spec/integration/application/lookup_spec.rb +5 -5
- data/spec/integration/configurer_spec.rb +8 -76
- data/spec/integration/data_binding_spec.rb +1 -1
- data/spec/integration/defaults_spec.rb +13 -16
- data/spec/integration/directory_environments_spec.rb +1 -1
- data/spec/integration/faces/config_spec.rb +4 -3
- data/spec/integration/faces/documentation_spec.rb +1 -0
- data/spec/integration/faces/plugin_spec.rb +49 -29
- data/spec/integration/file_bucket/file_spec.rb +4 -19
- data/spec/integration/file_serving/content_spec.rb +1 -0
- data/spec/integration/file_serving/fileset_spec.rb +1 -0
- data/spec/integration/file_serving/metadata_spec.rb +1 -0
- data/spec/integration/file_serving/terminus_helper_spec.rb +1 -0
- data/spec/integration/file_system/uniquefile_spec.rb +26 -29
- data/spec/integration/indirector/catalog/compiler_spec.rb +11 -10
- data/spec/integration/indirector/direct_file_server_spec.rb +1 -1
- data/spec/integration/indirector/facts/facter_spec.rb +8 -22
- data/spec/integration/indirector/file_content/file_server_spec.rb +8 -7
- data/spec/integration/indirector/file_metadata/file_server_spec.rb +8 -7
- data/spec/integration/network/authconfig_spec.rb +24 -23
- data/spec/integration/network/formats_spec.rb +1 -0
- data/spec/integration/network/http/api/indirected_routes_spec.rb +6 -34
- data/spec/integration/node/environment_spec.rb +2 -1
- data/spec/integration/node/facts_spec.rb +10 -9
- data/spec/integration/node_spec.rb +7 -10
- data/spec/integration/parser/catalog_spec.rb +8 -6
- data/spec/integration/parser/collection_spec.rb +9 -4
- data/spec/integration/parser/compiler_spec.rb +7 -25
- data/spec/integration/parser/scope_spec.rb +1 -1
- data/spec/integration/parser/undef_param_spec.rb +1 -1
- data/spec/integration/provider/service/init_spec.rb +9 -6
- data/spec/integration/provider/service/systemd_spec.rb +14 -11
- data/spec/integration/provider/service/windows_spec.rb +11 -8
- data/spec/integration/reference/providers_spec.rb +7 -0
- data/spec/integration/reports_spec.rb +2 -1
- data/spec/integration/resource/catalog_spec.rb +17 -14
- data/spec/integration/resource/type_collection_spec.rb +5 -4
- data/spec/integration/ssl/certificate_request_spec.rb +1 -2
- data/spec/integration/ssl/host_spec.rb +17 -24
- data/spec/integration/ssl/key_spec.rb +7 -2
- data/spec/integration/test/test_helper_spec.rb +32 -0
- data/spec/integration/transaction/report_spec.rb +14 -9
- data/spec/integration/type/exec_spec.rb +2 -1
- data/spec/integration/type/file_spec.rb +38 -46
- data/spec/integration/type/package_spec.rb +25 -21
- data/spec/integration/type/tidy_spec.rb +2 -1
- data/spec/integration/type_spec.rb +1 -0
- data/spec/integration/util/autoload_spec.rb +11 -7
- data/spec/integration/util/execution_spec.rb +5 -32
- data/spec/integration/util/rdoc/parser_spec.rb +14 -23
- data/spec/integration/util/settings_spec.rb +2 -1
- data/spec/integration/util/windows/adsi_spec.rb +8 -11
- data/spec/integration/util/windows/principal_spec.rb +2 -1
- data/spec/integration/util/windows/process_spec.rb +9 -7
- data/spec/integration/util/windows/registry_spec.rb +46 -127
- data/spec/integration/util/windows/security_spec.rb +15 -16
- data/spec/integration/util/windows/user_spec.rb +29 -66
- data/spec/integration/util_spec.rb +10 -7
- data/spec/lib/matchers/json.rb +12 -18
- data/{lib/puppet/ssl → spec/lib/puppet}/certificate_factory.rb +5 -6
- data/spec/lib/puppet/test_ca.rb +109 -0
- data/spec/lib/puppet_spec/compiler.rb +28 -1
- data/spec/lib/puppet_spec/files.rb +29 -23
- data/spec/lib/puppet_spec/module_tool/shared_functions.rb +1 -1
- data/spec/lib/puppet_spec/modules.rb +11 -1
- data/spec/lib/puppet_spec/scope.rb +2 -1
- data/spec/lib/puppet_spec/ssl.rb +265 -0
- data/spec/lib/puppet_spec/validators.rb +37 -0
- data/spec/shared_behaviours/all_parsedfile_providers.rb +1 -1
- data/spec/shared_behaviours/file_server_terminus.rb +9 -8
- data/spec/shared_behaviours/file_serving.rb +8 -6
- data/spec/shared_behaviours/file_serving_model.rb +5 -22
- data/spec/shared_behaviours/hiera_indirections.rb +4 -3
- data/spec/shared_behaviours/iterative_functions.rb +1 -0
- data/spec/shared_behaviours/memory_terminus.rb +2 -2
- data/spec/shared_behaviours/path_parameters.rb +1 -1
- data/spec/shared_contexts/types_setup.rb +0 -2
- data/spec/shared_examples/rhel_package_provider.rb +70 -112
- data/spec/spec_helper.rb +1 -15
- data/spec/unit/agent/disabler_spec.rb +5 -4
- data/spec/unit/agent/locker_spec.rb +13 -12
- data/spec/unit/agent_spec.rb +102 -105
- data/spec/unit/application/agent_spec.rb +95 -114
- data/spec/unit/application/apply_spec.rb +92 -119
- data/spec/unit/application/config_spec.rb +1 -0
- data/spec/unit/application/describe_spec.rb +7 -6
- data/spec/unit/application/device_spec.rb +180 -181
- data/spec/unit/application/doc_spec.rb +46 -44
- data/spec/unit/application/face_base_spec.rb +62 -61
- data/spec/unit/application/facts_spec.rb +4 -3
- data/spec/unit/application/filebucket_spec.rb +74 -66
- data/spec/unit/application/indirection_base_spec.rb +6 -8
- data/spec/unit/application/lookup_spec.rb +44 -37
- data/spec/unit/application/resource_spec.rb +48 -42
- data/spec/unit/application/ssl_spec.rb +322 -0
- data/spec/unit/application_spec.rb +108 -90
- data/spec/unit/capability_spec.rb +15 -16
- data/spec/unit/{ssl/certificate_factory_spec.rb → certificate_factory_spec.rb} +13 -20
- data/spec/unit/configurer/downloader_spec.rb +22 -31
- data/spec/unit/configurer/fact_handler_spec.rb +7 -2
- data/spec/unit/configurer/plugin_handler_spec.rb +8 -41
- data/spec/unit/configurer_spec.rb +475 -520
- data/spec/unit/confine/exists_spec.rb +15 -17
- data/spec/unit/confine/false_spec.rb +6 -32
- data/spec/unit/confine/feature_spec.rb +5 -7
- data/spec/unit/confine/true_spec.rb +6 -32
- data/spec/unit/confine/variable_spec.rb +15 -14
- data/spec/unit/confine_collection_spec.rb +29 -28
- data/spec/unit/confine_spec.rb +14 -13
- data/spec/unit/confiner_spec.rb +11 -10
- data/spec/unit/context/trusted_information_spec.rb +4 -3
- data/spec/unit/daemon_spec.rb +38 -35
- data/spec/unit/data_providers/function_data_provider_spec.rb +1 -0
- data/spec/unit/data_providers/hiera_data_provider_spec.rb +1 -0
- data/spec/unit/datatypes_spec.rb +4 -3
- data/spec/unit/defaults_spec.rb +61 -32
- data/spec/unit/environments_spec.rb +7 -7
- data/spec/unit/etc_spec.rb +29 -52
- data/spec/unit/external/pson_spec.rb +1 -0
- data/spec/unit/face/catalog_spec.rb +1 -0
- data/spec/unit/face/config_spec.rb +35 -31
- data/spec/unit/face/epp_face_spec.rb +4 -3
- data/spec/unit/face/facts_spec.rb +6 -14
- data/spec/unit/face/generate_spec.rb +5 -4
- data/spec/unit/face/help_spec.rb +8 -7
- data/spec/unit/face/key_spec.rb +1 -0
- data/spec/unit/face/man_spec.rb +2 -1
- data/spec/unit/face/module/install_spec.rb +5 -3
- data/spec/unit/face/module/list_spec.rb +12 -62
- data/spec/unit/face/module/search_spec.rb +9 -11
- data/spec/unit/face/module/uninstall_spec.rb +8 -4
- data/spec/unit/face/node_spec.rb +30 -52
- data/spec/unit/face/parser_spec.rb +3 -3
- data/spec/unit/face/plugin_spec.rb +9 -44
- data/spec/unit/face/status_spec.rb +1 -0
- data/spec/unit/file_bucket/dipper_spec.rb +24 -28
- data/spec/unit/file_bucket/file_spec.rb +2 -0
- data/spec/unit/file_serving/base_spec.rb +18 -20
- data/spec/unit/file_serving/configuration/parser_spec.rb +28 -27
- data/spec/unit/file_serving/configuration_spec.rb +66 -63
- data/spec/unit/file_serving/content_spec.rb +11 -10
- data/spec/unit/file_serving/fileset_spec.rb +58 -63
- data/spec/unit/file_serving/http_metadata_spec.rb +7 -8
- data/spec/unit/file_serving/metadata_spec.rb +40 -40
- data/spec/unit/file_serving/mount/file_spec.rb +32 -31
- data/spec/unit/file_serving/mount/locales_spec.rb +26 -25
- data/spec/unit/file_serving/mount/modules_spec.rb +15 -14
- data/spec/unit/file_serving/mount/pluginfacts_spec.rb +26 -25
- data/spec/unit/file_serving/mount/plugins_spec.rb +26 -25
- data/spec/unit/file_serving/mount/tasks_spec.rb +15 -14
- data/spec/unit/file_serving/mount_spec.rb +1 -0
- data/spec/unit/file_serving/terminus_helper_spec.rb +42 -37
- data/spec/unit/file_serving/terminus_selector_spec.rb +13 -12
- data/spec/unit/file_system/path_pattern_spec.rb +1 -1
- data/spec/unit/file_system/uniquefile_spec.rb +6 -17
- data/spec/unit/file_system_spec.rb +9 -6
- data/spec/unit/forge/errors_spec.rb +1 -1
- data/spec/unit/forge/forge_spec.rb +16 -15
- data/spec/unit/forge/module_release_spec.rb +18 -18
- data/spec/unit/forge/repository_spec.rb +30 -27
- data/spec/unit/forge_spec.rb +11 -15
- data/spec/unit/functions/abs_spec.rb +70 -0
- data/spec/unit/functions/binary_file_spec.rb +3 -3
- data/spec/unit/functions/call_spec.rb +59 -5
- data/spec/unit/functions/camelcase_spec.rb +34 -0
- data/spec/unit/functions/capitalize_spec.rb +34 -0
- data/spec/unit/functions/ceiling_spec.rb +65 -0
- data/spec/unit/functions/chomp_spec.rb +46 -0
- data/spec/unit/functions/chop_spec.rb +38 -0
- data/spec/unit/functions/compare_spec.rb +147 -0
- data/spec/unit/functions/contain_spec.rb +2 -0
- data/spec/unit/functions/convert_to_spec.rb +3 -0
- data/spec/unit/functions/defined_spec.rb +1 -0
- data/spec/unit/functions/downcase_spec.rb +34 -0
- data/spec/unit/functions/epp_spec.rb +2 -2
- data/spec/unit/functions/filter_spec.rb +4 -4
- data/spec/unit/functions/find_file_spec.rb +7 -7
- data/spec/unit/functions/floor_spec.rb +65 -0
- data/spec/unit/functions/get_spec.rb +135 -0
- data/spec/unit/functions/getvar_spec.rb +121 -0
- data/spec/unit/functions/hiera_spec.rb +14 -48
- data/spec/unit/functions/include_spec.rb +4 -0
- data/spec/unit/functions/lookup_fixture_spec.rb +1 -0
- data/spec/unit/functions/lookup_spec.rb +37 -62
- data/spec/unit/functions/lstrip_spec.rb +30 -0
- data/spec/unit/functions/match_spec.rb +3 -4
- data/spec/unit/functions/max_spec.rb +129 -0
- data/spec/unit/functions/min_spec.rb +129 -0
- data/spec/unit/functions/module_directory_spec.rb +12 -12
- data/spec/unit/functions/new_spec.rb +0 -15
- data/spec/unit/functions/regsubst_spec.rb +3 -4
- data/spec/unit/functions/require_spec.rb +3 -0
- data/spec/unit/functions/round_spec.rb +41 -0
- data/spec/unit/functions/rstrip_spec.rb +30 -0
- data/spec/unit/functions/shared.rb +8 -5
- data/spec/unit/functions/size_spec.rb +50 -0
- data/spec/unit/functions/sort_spec.rb +79 -0
- data/spec/unit/functions/split_spec.rb +3 -4
- data/spec/unit/functions/strip_spec.rb +30 -0
- data/spec/unit/functions/upcase_spec.rb +34 -0
- data/spec/unit/functions/versioncmp_spec.rb +4 -4
- data/spec/unit/functions4_spec.rb +78 -51
- data/spec/unit/gettext/config_spec.rb +4 -4
- data/spec/unit/gettext/module_loading_spec.rb +7 -7
- data/spec/unit/graph/rb_tree_map_spec.rb +2 -0
- data/spec/unit/graph/relationship_graph_spec.rb +2 -1
- data/spec/unit/graph/simple_graph_spec.rb +52 -11
- data/spec/unit/hiera/scope_spec.rb +0 -7
- data/spec/unit/hiera_puppet_spec.rb +20 -20
- data/spec/unit/indirector/catalog/compiler_spec.rb +166 -183
- data/spec/unit/indirector/catalog/json_spec.rb +2 -1
- data/spec/unit/indirector/catalog/msgpack_spec.rb +1 -0
- data/spec/unit/indirector/catalog/rest_spec.rb +1 -0
- data/spec/unit/indirector/catalog/store_configs_spec.rb +1 -0
- data/spec/unit/indirector/catalog/yaml_spec.rb +1 -0
- data/spec/unit/indirector/certificate/file_spec.rb +1 -8
- data/spec/unit/indirector/certificate/rest_spec.rb +10 -8
- data/spec/unit/indirector/certificate_request/file_spec.rb +1 -0
- data/spec/unit/indirector/certificate_request/rest_spec.rb +1 -0
- data/spec/unit/indirector/direct_file_server_spec.rb +49 -57
- data/spec/unit/indirector/envelope_spec.rb +2 -1
- data/spec/unit/indirector/exec_spec.rb +31 -26
- data/spec/unit/indirector/face_spec.rb +9 -9
- data/spec/unit/indirector/facts/facter_spec.rb +43 -37
- data/spec/unit/indirector/facts/network_device_spec.rb +9 -8
- data/spec/unit/indirector/facts/rest_spec.rb +8 -7
- data/spec/unit/indirector/facts/store_configs_spec.rb +1 -0
- data/spec/unit/indirector/facts/yaml_spec.rb +90 -77
- data/spec/unit/indirector/file_bucket_file/file_spec.rb +13 -9
- data/spec/unit/indirector/file_bucket_file/rest_spec.rb +1 -0
- data/spec/unit/indirector/file_bucket_file/selector_spec.rb +5 -4
- data/spec/unit/indirector/file_content/file_server_spec.rb +1 -0
- data/spec/unit/indirector/file_content/file_spec.rb +1 -0
- data/spec/unit/indirector/file_content/rest_spec.rb +1 -0
- data/spec/unit/indirector/file_content/selector_spec.rb +1 -0
- data/spec/unit/indirector/file_metadata/file_server_spec.rb +1 -0
- data/spec/unit/indirector/file_metadata/file_spec.rb +13 -12
- data/spec/unit/indirector/file_metadata/rest_spec.rb +1 -0
- data/spec/unit/indirector/file_metadata/selector_spec.rb +1 -0
- data/spec/unit/indirector/file_server_spec.rb +145 -145
- data/spec/unit/indirector/indirection_spec.rb +226 -249
- data/spec/unit/indirector/json_spec.rb +9 -7
- data/spec/unit/indirector/key/file_spec.rb +22 -38
- data/spec/unit/indirector/memory_spec.rb +7 -6
- data/spec/unit/indirector/msgpack_spec.rb +9 -7
- data/spec/unit/indirector/node/exec_spec.rb +43 -22
- data/spec/unit/indirector/node/memory_spec.rb +4 -2
- data/spec/unit/indirector/node/msgpack_spec.rb +1 -0
- data/spec/unit/indirector/node/plain_spec.rb +4 -2
- data/spec/unit/indirector/node/rest_spec.rb +1 -0
- data/spec/unit/indirector/node/store_configs_spec.rb +1 -0
- data/spec/unit/indirector/node/yaml_spec.rb +1 -0
- data/spec/unit/indirector/none_spec.rb +5 -5
- data/spec/unit/indirector/plain_spec.rb +8 -7
- data/spec/unit/indirector/report/msgpack_spec.rb +1 -0
- data/spec/unit/indirector/report/processor_spec.rb +22 -21
- data/spec/unit/indirector/report/rest_spec.rb +12 -11
- data/spec/unit/indirector/report/yaml_spec.rb +1 -0
- data/spec/unit/indirector/request_spec.rb +18 -15
- data/spec/unit/indirector/resource/ral_spec.rb +55 -47
- data/spec/unit/indirector/resource/store_configs_spec.rb +1 -0
- data/spec/unit/indirector/rest_spec.rb +110 -113
- data/spec/unit/indirector/ssl_file_spec.rb +100 -119
- data/spec/unit/indirector/status/local_spec.rb +1 -0
- data/spec/unit/indirector/status/rest_spec.rb +1 -0
- data/spec/unit/indirector/store_configs_spec.rb +1 -0
- data/spec/unit/indirector/terminus_spec.rb +30 -32
- data/spec/unit/indirector/yaml_spec.rb +90 -68
- data/spec/unit/indirector_spec.rb +2 -1
- data/spec/unit/info_service_spec.rb +144 -10
- data/spec/unit/interface/action_builder_spec.rb +1 -0
- data/spec/unit/interface/action_manager_spec.rb +1 -0
- data/spec/unit/interface/action_spec.rb +3 -2
- data/spec/unit/interface/documentation_spec.rb +1 -0
- data/spec/unit/interface/face_collection_spec.rb +12 -19
- data/spec/unit/interface_spec.rb +3 -3
- data/spec/unit/man_spec.rb +4 -3
- data/spec/unit/module_spec.rb +52 -102
- data/spec/unit/module_tool/applications/installer_spec.rb +13 -12
- data/spec/unit/module_tool/applications/searcher_spec.rb +3 -3
- data/spec/unit/module_tool/applications/uninstaller_spec.rb +2 -1
- data/spec/unit/module_tool/applications/unpacker_spec.rb +13 -13
- data/spec/unit/module_tool/applications/upgrader_spec.rb +6 -6
- data/spec/unit/module_tool/install_directory_spec.rb +8 -8
- data/spec/unit/module_tool/installed_modules_spec.rb +3 -3
- data/spec/unit/module_tool/tar/gnu_spec.rb +6 -6
- data/spec/unit/module_tool/tar/mini_spec.rb +12 -12
- data/spec/unit/module_tool/tar_spec.rb +13 -12
- data/spec/unit/module_tool_spec.rb +12 -29
- data/spec/unit/network/auth_config_parser_spec.rb +13 -11
- data/spec/unit/network/authconfig_spec.rb +18 -17
- data/spec/unit/network/authorization_spec.rb +5 -4
- data/spec/unit/network/authstore_spec.rb +1 -0
- data/spec/unit/network/format_handler_spec.rb +1 -0
- data/spec/unit/network/format_spec.rb +10 -9
- data/spec/unit/network/format_support_spec.rb +29 -28
- data/spec/unit/network/formats_spec.rb +31 -4
- data/spec/unit/network/http/api/indirected_routes_spec.rb +41 -51
- data/spec/unit/network/http/api/master/v3/authorization_spec.rb +7 -9
- data/spec/unit/network/http/api/master/v3/environment_spec.rb +1 -2
- data/spec/unit/network/http/api/master/v3/environments_spec.rb +7 -6
- data/spec/unit/network/http/api_spec.rb +2 -26
- data/spec/unit/network/http/compression_spec.rb +28 -24
- data/spec/unit/network/http/connection_spec.rb +122 -72
- data/spec/unit/network/http/factory_spec.rb +11 -40
- data/spec/unit/network/http/handler_spec.rb +18 -9
- data/spec/unit/network/http/nocache_pool_spec.rb +7 -6
- data/spec/unit/network/http/pool_spec.rb +29 -60
- data/spec/unit/network/http/request_spec.rb +2 -0
- data/spec/unit/network/http/response_spec.rb +13 -11
- data/spec/unit/network/http/route_spec.rb +1 -0
- data/spec/unit/network/http/session_spec.rb +2 -1
- data/spec/unit/network/http/site_spec.rb +1 -0
- data/spec/unit/network/http_pool_spec.rb +9 -18
- data/spec/unit/network/http_spec.rb +1 -0
- data/spec/unit/network/resolver_spec.rb +104 -28
- data/spec/unit/network/rights_spec.rb +53 -52
- data/spec/unit/node/environment_spec.rb +17 -18
- data/spec/unit/node/facts_spec.rb +21 -6
- data/spec/unit/node_spec.rb +23 -17
- data/spec/unit/other/selinux_spec.rb +1 -71
- data/spec/unit/parameter/boolean_spec.rb +2 -1
- data/spec/unit/parameter/package_options_spec.rb +2 -1
- data/spec/unit/parameter/path_spec.rb +1 -0
- data/spec/unit/parameter/value_collection_spec.rb +1 -0
- data/spec/unit/parameter/value_spec.rb +1 -0
- data/spec/unit/parameter_spec.rb +9 -9
- data/spec/unit/parser/ast/block_expression_spec.rb +8 -6
- data/spec/unit/parser/ast/leaf_spec.rb +21 -20
- data/spec/unit/parser/compiler_spec.rb +96 -84
- data/spec/unit/parser/environment_compiler_spec.rb +16 -23
- data/spec/unit/parser/files_spec.rb +1 -0
- data/spec/unit/parser/functions/create_resources_spec.rb +1 -1
- data/spec/unit/parser/functions/digest_spec.rb +1 -4
- data/spec/unit/parser/functions/fail_spec.rb +2 -5
- data/spec/unit/parser/functions/file_spec.rb +14 -17
- data/spec/unit/parser/functions/fqdn_rand_spec.rb +6 -5
- data/spec/unit/parser/functions/generate_spec.rb +37 -38
- data/spec/unit/parser/functions/inline_template_spec.rb +1 -4
- data/spec/unit/parser/functions/regsubst_spec.rb +1 -4
- data/spec/unit/parser/functions/scanf_spec.rb +1 -4
- data/spec/unit/parser/functions/shellquote_spec.rb +1 -0
- data/spec/unit/parser/functions/split_spec.rb +1 -4
- data/spec/unit/parser/functions/sprintf_spec.rb +1 -4
- data/spec/unit/parser/functions/tag_spec.rb +2 -5
- data/spec/unit/parser/functions/tagged_spec.rb +3 -6
- data/spec/unit/parser/functions/template_spec.rb +13 -17
- data/spec/unit/parser/functions/versioncmp_spec.rb +2 -5
- data/spec/unit/parser/functions_spec.rb +29 -3
- data/spec/unit/parser/relationship_spec.rb +1 -0
- data/spec/unit/parser/resource/param_spec.rb +1 -1
- data/spec/unit/parser/resource_spec.rb +42 -42
- data/spec/unit/parser/scope_spec.rb +35 -39
- data/spec/unit/parser/templatewrapper_spec.rb +12 -11
- data/spec/unit/parser/type_loader_spec.rb +19 -17
- data/spec/unit/pops/adaptable_spec.rb +1 -0
- data/spec/unit/pops/benchmark_spec.rb +1 -0
- data/spec/unit/pops/evaluator/access_ops_spec.rb +1 -0
- data/spec/unit/pops/evaluator/arithmetic_ops_spec.rb +11 -0
- data/spec/unit/pops/evaluator/basic_expressions_spec.rb +1 -0
- data/spec/unit/pops/evaluator/collections_ops_spec.rb +1 -0
- data/spec/unit/pops/evaluator/comparison_ops_spec.rb +1 -0
- data/spec/unit/pops/evaluator/conditionals_spec.rb +1 -0
- data/spec/unit/pops/evaluator/evaluating_parser_spec.rb +78 -18
- data/spec/unit/pops/evaluator/logical_ops_spec.rb +1 -0
- data/spec/unit/pops/evaluator/runtime3_converter_spec.rb +5 -4
- data/spec/unit/pops/evaluator/string_interpolation_spec.rb +1 -0
- data/spec/unit/pops/evaluator/variables_spec.rb +1 -0
- data/spec/unit/pops/factory_spec.rb +4 -3
- data/spec/unit/pops/issues_spec.rb +20 -19
- data/spec/unit/pops/loaders/dependency_loader_spec.rb +2 -2
- data/spec/unit/pops/loaders/loader_spec.rb +12 -36
- data/spec/unit/pops/loaders/loaders_spec.rb +57 -54
- data/spec/unit/pops/loaders/module_loaders_spec.rb +35 -3
- data/spec/unit/pops/loaders/static_loader_spec.rb +0 -36
- data/spec/unit/pops/lookup/context_spec.rb +1 -0
- data/spec/unit/pops/lookup/interpolation_spec.rb +3 -2
- data/spec/unit/pops/merge_strategy_spec.rb +1 -0
- data/spec/unit/pops/migration_spec.rb +5 -3
- data/spec/unit/pops/model/model_spec.rb +1 -0
- data/spec/unit/pops/model/pn_transformer_spec.rb +1 -0
- data/spec/unit/pops/parser/lexer2_spec.rb +60 -21
- data/spec/unit/pops/parser/locator_spec.rb +6 -48
- data/spec/unit/pops/parser/parse_application_spec.rb +1 -0
- data/spec/unit/pops/parser/parse_basic_expressions_spec.rb +1 -0
- data/spec/unit/pops/parser/parse_calls_spec.rb +1 -0
- data/spec/unit/pops/parser/parse_capabilities_spec.rb +1 -0
- data/spec/unit/pops/parser/parse_conditionals_spec.rb +1 -0
- data/spec/unit/pops/parser/parse_containers_spec.rb +1 -0
- data/spec/unit/pops/parser/parse_heredoc_spec.rb +12 -124
- data/spec/unit/pops/parser/parse_plan_spec.rb +1 -0
- data/spec/unit/pops/parser/parse_resource_spec.rb +1 -0
- data/spec/unit/pops/parser/parse_site_spec.rb +1 -0
- data/spec/unit/pops/parser/pn_parser_spec.rb +1 -0
- data/spec/unit/pops/pn_spec.rb +1 -0
- data/spec/unit/pops/resource/resource_type_impl_spec.rb +1 -0
- data/spec/unit/pops/serialization/serialization_spec.rb +7 -5
- data/spec/unit/pops/serialization/to_from_hr_spec.rb +29 -4
- data/spec/unit/pops/serialization/to_stringified_spec.rb +157 -0
- data/spec/unit/pops/types/deferred_spec.rb +87 -0
- data/spec/unit/pops/types/p_object_type_spec.rb +20 -0
- data/spec/unit/pops/types/p_timespan_type_spec.rb +0 -22
- data/spec/unit/pops/types/p_timestamp_type_spec.rb +0 -19
- data/spec/unit/pops/types/recursion_guard_spec.rb +10 -10
- data/spec/unit/pops/types/ruby_generator_spec.rb +2 -2
- data/spec/unit/pops/types/string_converter_spec.rb +11 -22
- data/spec/unit/pops/types/task_spec.rb +148 -16
- data/spec/unit/pops/types/type_asserter_spec.rb +2 -2
- data/spec/unit/pops/types/type_calculator_spec.rb +36 -36
- data/spec/unit/pops/types/type_mismatch_describer_spec.rb +0 -9
- data/spec/unit/pops/types/type_parser_spec.rb +13 -13
- data/spec/unit/pops/types/types_spec.rb +12 -6
- data/spec/unit/pops/validator/validator_spec.rb +162 -82
- data/spec/unit/pops/visitor_spec.rb +1 -0
- data/spec/unit/property/boolean_spec.rb +1 -1
- data/spec/unit/property/ensure_spec.rb +1 -0
- data/spec/unit/property/keyvalue_spec.rb +34 -32
- data/spec/unit/property/list_spec.rb +27 -26
- data/spec/unit/property/ordered_list_spec.rb +14 -10
- data/spec/unit/property_spec.rb +53 -43
- data/spec/unit/provider/aix_object_spec.rb +45 -47
- data/spec/unit/provider/command_spec.rb +9 -9
- data/spec/unit/provider/exec/posix_spec.rb +9 -8
- data/spec/unit/provider/exec/shell_spec.rb +3 -1
- data/spec/unit/provider/exec/windows_spec.rb +6 -4
- data/spec/unit/provider/exec_spec.rb +1 -209
- data/spec/unit/provider/file/posix_spec.rb +24 -22
- data/spec/unit/provider/file/windows_spec.rb +19 -17
- data/spec/unit/provider/group/aix_spec.rb +7 -22
- data/spec/unit/provider/group/groupadd_spec.rb +27 -60
- data/spec/unit/provider/group/ldap_spec.rb +36 -33
- data/spec/unit/provider/group/pw_spec.rb +18 -15
- data/spec/unit/provider/group/windows_adsi_spec.rb +80 -128
- data/spec/unit/provider/ldap_spec.rb +62 -61
- data/spec/unit/provider/nameservice/directoryservice_spec.rb +109 -102
- data/spec/unit/provider/nameservice_spec.rb +41 -39
- data/spec/unit/provider/package/aix_spec.rb +22 -48
- data/spec/unit/provider/package/appdmg_spec.rb +13 -13
- data/spec/unit/provider/package/apt_spec.rb +35 -60
- data/spec/unit/provider/package/aptitude_spec.rb +7 -7
- data/spec/unit/provider/package/aptrpm_spec.rb +13 -8
- data/spec/unit/provider/package/base_spec.rb +4 -4
- data/spec/unit/provider/package/dnf_spec.rb +23 -34
- data/spec/unit/provider/package/dpkg_spec.rb +72 -114
- data/spec/unit/provider/package/freebsd_spec.rb +18 -15
- data/spec/unit/provider/package/gem_spec.rb +86 -163
- data/spec/unit/provider/package/hpux_spec.rb +18 -15
- data/spec/unit/provider/package/macports_spec.rb +54 -56
- data/spec/unit/provider/package/nim_spec.rb +49 -33
- data/spec/unit/provider/package/openbsd_spec.rb +49 -60
- data/spec/unit/provider/package/opkg_spec.rb +26 -23
- data/spec/unit/provider/package/pacman_spec.rb +118 -97
- data/spec/unit/provider/package/pip3_spec.rb +6 -20
- data/spec/unit/provider/package/pip_spec.rb +129 -185
- data/spec/unit/provider/package/pkg_spec.rb +119 -129
- data/spec/unit/provider/package/pkgdmg_spec.rb +63 -65
- data/spec/unit/provider/package/pkgin_spec.rb +23 -20
- data/spec/unit/provider/package/pkgng_spec.rb +35 -67
- data/spec/unit/provider/package/pkgutil_spec.rb +49 -45
- data/spec/unit/provider/package/portage_spec.rb +76 -72
- data/spec/unit/provider/package/puppet_gem_spec.rb +21 -45
- data/spec/unit/provider/package/rpm_spec.rb +79 -291
- data/spec/unit/provider/package/sun_spec.rb +18 -16
- data/spec/unit/provider/package/tdnf_spec.rb +12 -9
- data/spec/unit/provider/package/up2date_spec.rb +4 -2
- data/spec/unit/provider/package/urpmi_spec.rb +17 -15
- data/spec/unit/provider/package/windows/exe_package_spec.rb +18 -15
- data/spec/unit/provider/package/windows/msi_package_spec.rb +23 -20
- data/spec/unit/provider/package/windows/package_spec.rb +43 -38
- data/spec/unit/provider/package/windows_spec.rb +36 -51
- data/spec/unit/provider/package/yum_spec.rb +24 -128
- data/spec/unit/provider/package/zypper_spec.rb +106 -117
- data/spec/unit/provider/parsedfile_spec.rb +45 -44
- data/spec/unit/provider/service/base_spec.rb +6 -5
- data/spec/unit/provider/service/bsd_spec.rb +54 -47
- data/spec/unit/provider/service/daemontools_spec.rb +53 -70
- data/spec/unit/provider/service/debian_spec.rb +58 -46
- data/spec/unit/provider/service/freebsd_spec.rb +23 -20
- data/spec/unit/provider/service/gentoo_spec.rb +81 -74
- data/spec/unit/provider/service/init_spec.rb +66 -65
- data/spec/unit/provider/service/launchd_spec.rb +114 -181
- data/spec/unit/provider/service/openbsd_spec.rb +94 -87
- data/spec/unit/provider/service/openrc_spec.rb +74 -70
- data/spec/unit/provider/service/openwrt_spec.rb +38 -30
- data/spec/unit/provider/service/rcng_spec.rb +24 -19
- data/spec/unit/provider/service/redhat_spec.rb +60 -60
- data/spec/unit/provider/service/runit_spec.rb +44 -61
- data/spec/unit/provider/service/smf_spec.rb +74 -143
- data/spec/unit/provider/service/src_spec.rb +69 -60
- data/spec/unit/provider/service/systemd_spec.rb +160 -222
- data/spec/unit/provider/service/upstart_spec.rb +99 -83
- data/spec/unit/provider/service/windows_spec.rb +42 -84
- data/spec/unit/provider/user/aix_spec.rb +24 -65
- data/spec/unit/provider/user/directoryservice_spec.rb +114 -187
- data/spec/unit/provider/user/hpux_spec.rb +21 -17
- data/spec/unit/provider/user/ldap_spec.rb +83 -80
- data/spec/unit/provider/user/openbsd_spec.rb +12 -11
- data/spec/unit/provider/user/pw_spec.rb +44 -80
- data/spec/unit/provider/user/user_role_add_spec.rb +94 -94
- data/spec/unit/provider/user/useradd_spec.rb +100 -208
- data/spec/unit/provider/user/windows_adsi_spec.rb +63 -62
- data/spec/unit/provider_spec.rb +189 -41
- data/spec/unit/puppet_pal_2pec.rb +26 -12
- data/spec/unit/puppet_pal_catalog_spec.rb +801 -0
- data/spec/unit/puppet_pal_spec.rb +2 -8
- data/spec/unit/puppet_spec.rb +7 -27
- data/spec/unit/relationship_spec.rb +1 -0
- data/spec/unit/reports/http_spec.rb +23 -21
- data/spec/unit/reports/store_spec.rb +4 -3
- data/spec/unit/reports_spec.rb +14 -12
- data/spec/unit/resource/capability_finder_spec.rb +26 -29
- data/spec/unit/resource/catalog_spec.rb +77 -81
- data/spec/unit/resource/status_spec.rb +8 -6
- data/spec/unit/resource/type_collection_spec.rb +18 -17
- data/spec/unit/resource/type_spec.rb +35 -34
- data/spec/unit/resource_spec.rb +79 -67
- data/spec/unit/rest/client_spec.rb +135 -0
- data/spec/unit/rest/route_spec.rb +132 -0
- data/spec/unit/scheduler/job_spec.rb +1 -0
- data/spec/unit/scheduler/scheduler_spec.rb +1 -0
- data/spec/unit/scheduler/splay_job_spec.rb +2 -1
- data/spec/unit/settings/array_setting_spec.rb +1 -1
- data/spec/unit/settings/autosign_setting_spec.rb +9 -9
- data/spec/unit/settings/certificate_revocation_setting_spec.rb +1 -1
- data/spec/unit/settings/config_file_spec.rb +10 -0
- data/spec/unit/settings/directory_setting_spec.rb +7 -2
- data/spec/unit/settings/duration_setting_spec.rb +2 -1
- data/spec/unit/settings/enum_setting_spec.rb +1 -1
- data/spec/unit/settings/environment_conf_spec.rb +6 -4
- data/spec/unit/settings/file_setting_spec.rb +50 -46
- data/spec/unit/settings/ini_file_spec.rb +2 -4
- data/spec/unit/settings/path_setting_spec.rb +3 -2
- data/spec/unit/settings/priority_setting_spec.rb +2 -1
- data/spec/unit/settings/string_setting_spec.rb +15 -14
- data/spec/unit/settings/terminus_setting_spec.rb +2 -1
- data/spec/unit/settings/value_translator_spec.rb +1 -0
- data/spec/unit/settings_spec.rb +226 -253
- data/spec/unit/ssl/base_spec.rb +15 -14
- data/spec/unit/ssl/certificate_request_attributes_spec.rb +22 -8
- data/spec/unit/ssl/certificate_request_spec.rb +63 -92
- data/spec/unit/ssl/certificate_spec.rb +29 -37
- data/spec/unit/ssl/digest_spec.rb +1 -0
- data/spec/unit/ssl/host_spec.rb +305 -685
- data/spec/unit/ssl/key_spec.rb +34 -46
- data/spec/unit/ssl/validator_spec.rb +70 -203
- data/spec/unit/task_spec.rb +172 -26
- data/spec/unit/transaction/additional_resource_generator_spec.rb +68 -67
- data/spec/unit/transaction/event_manager_spec.rb +84 -95
- data/spec/unit/transaction/event_spec.rb +15 -16
- data/spec/unit/transaction/persistence_spec.rb +18 -17
- data/spec/unit/transaction/report_spec.rb +24 -18
- data/spec/unit/transaction/resource_harness_spec.rb +33 -72
- data/spec/unit/transaction_spec.rb +106 -176
- data/spec/unit/type/component_spec.rb +1 -0
- data/spec/unit/type/exec_spec.rb +66 -120
- data/spec/unit/type/file/checksum_spec.rb +11 -10
- data/spec/unit/type/file/checksum_value_spec.rb +32 -31
- data/spec/unit/type/file/content_spec.rb +62 -65
- data/spec/unit/type/file/ctime_spec.rb +1 -0
- data/spec/unit/type/file/ensure_spec.rb +13 -12
- data/spec/unit/type/file/group_spec.rb +7 -5
- data/spec/unit/type/file/mode_spec.rb +6 -4
- data/spec/unit/type/file/mtime_spec.rb +1 -0
- data/spec/unit/type/file/owner_spec.rb +8 -6
- data/spec/unit/type/file/selinux_spec.rb +19 -17
- data/spec/unit/type/file/source_spec.rb +110 -113
- data/spec/unit/type/file/type_spec.rb +1 -0
- data/spec/unit/type/file_spec.rb +190 -204
- data/spec/unit/type/filebucket_spec.rb +10 -11
- data/spec/unit/type/group_spec.rb +9 -15
- data/spec/unit/type/noop_metaparam_spec.rb +2 -1
- data/spec/unit/type/package/package_settings_spec.rb +23 -44
- data/spec/unit/type/package_spec.rb +64 -61
- data/spec/unit/type/resources_spec.rb +101 -103
- data/spec/unit/type/schedule_spec.rb +28 -28
- data/spec/unit/type/service_spec.rb +85 -76
- data/spec/unit/type/stage_spec.rb +1 -0
- data/spec/unit/type/tidy_spec.rb +63 -62
- data/spec/unit/type/user_spec.rb +26 -147
- data/spec/unit/type/whit_spec.rb +1 -0
- data/spec/unit/type_spec.rb +164 -125
- data/spec/unit/util/at_fork_spec.rb +19 -18
- data/spec/unit/util/autoload_spec.rb +122 -93
- data/spec/unit/util/backups_spec.rb +35 -34
- data/spec/unit/util/character_encoding_spec.rb +5 -48
- data/spec/unit/util/checksums_spec.rb +39 -38
- data/spec/unit/util/colors_spec.rb +2 -1
- data/spec/unit/util/command_line_spec.rb +20 -40
- data/spec/unit/util/constant_inflector_spec.rb +1 -0
- data/spec/unit/util/diff_spec.rb +8 -7
- data/spec/unit/util/errors_spec.rb +1 -0
- data/spec/unit/util/execution_spec.rb +167 -285
- data/spec/unit/util/execution_stub_spec.rb +3 -2
- data/spec/unit/util/feature_spec.rb +46 -28
- data/spec/unit/util/filetype_spec.rb +53 -61
- data/spec/unit/util/http_proxy_spec.rb +13 -133
- data/spec/unit/util/inifile_spec.rb +31 -26
- data/spec/unit/util/json_lockfile_spec.rb +5 -3
- data/spec/unit/util/ldap/connection_spec.rb +25 -26
- data/spec/unit/util/ldap/generator_spec.rb +1 -0
- data/spec/unit/util/ldap/manager_spec.rb +102 -118
- data/spec/unit/util/lockfile_spec.rb +2 -1
- data/spec/unit/util/log/destinations_spec.rb +40 -23
- data/spec/unit/util/log_spec.rb +146 -48
- data/spec/unit/util/logging_spec.rb +114 -252
- data/spec/unit/util/metric_spec.rb +1 -0
- data/spec/unit/util/monkey_patches_spec.rb +12 -24
- data/spec/unit/util/multi_match_spec.rb +1 -0
- data/spec/unit/util/network_device/config_spec.rb +1 -0
- data/spec/unit/util/network_device/transport/base_spec.rb +6 -5
- data/spec/unit/util/network_device_spec.rb +9 -7
- data/spec/unit/util/package_spec.rb +1 -0
- data/spec/unit/util/pidlock_spec.rb +14 -86
- data/spec/unit/util/plist_spec.rb +33 -60
- data/spec/unit/util/posix_spec.rb +47 -78
- data/spec/unit/util/profiler/object_counts_spec.rb +2 -1
- data/spec/unit/util/rdoc_spec.rb +10 -9
- data/spec/unit/util/reference_spec.rb +1 -0
- data/spec/unit/util/resource_template_spec.rb +20 -20
- data/spec/unit/util/retry_action_spec.rb +8 -7
- data/spec/unit/util/rubygems_spec.rb +7 -41
- data/spec/unit/util/run_mode_spec.rb +11 -10
- data/spec/unit/util/selinux_spec.rb +73 -84
- data/spec/unit/util/splayer_spec.rb +9 -8
- data/spec/unit/util/ssl_spec.rb +1 -0
- data/spec/unit/util/storage_spec.rb +17 -111
- data/spec/unit/util/suidmanager_spec.rb +58 -47
- data/spec/unit/util/symbolic_file_mode_spec.rb +1 -0
- data/spec/unit/util/tag_set_spec.rb +9 -1
- data/spec/unit/util/tagging_spec.rb +12 -0
- data/spec/unit/util/terminal_spec.rb +10 -9
- data/spec/unit/util/user_attr_spec.rb +2 -1
- data/spec/unit/util/warnings_spec.rb +4 -3
- data/spec/unit/util/watcher/periodic_watcher_spec.rb +2 -2
- data/spec/unit/util/watcher_spec.rb +21 -51
- data/spec/unit/util/windows/access_control_entry_spec.rb +2 -1
- data/spec/unit/util/windows/access_control_list_spec.rb +2 -1
- data/spec/unit/util/windows/adsi_spec.rb +134 -278
- data/spec/unit/util/windows/api_types_spec.rb +42 -105
- data/spec/unit/util/windows/eventlog_spec.rb +13 -10
- data/spec/unit/util/windows/file_spec.rb +1 -0
- data/spec/unit/util/windows/root_certs_spec.rb +1 -0
- data/spec/unit/util/windows/security_descriptor_spec.rb +3 -1
- data/spec/unit/util/windows/service_spec.rb +180 -432
- data/spec/unit/util/windows/sid_spec.rb +17 -15
- data/spec/unit/util/windows/string_spec.rb +2 -1
- data/spec/unit/util/yaml_spec.rb +162 -28
- data/spec/unit/util_spec.rb +74 -119
- data/spec/unit/version_spec.rb +6 -6
- data/tasks/benchmark.rake +5 -1
- data/tasks/ci.rake +0 -5
- data/tasks/manpages.rake +9 -2
- data/tasks/parser.rake +11 -3
- metadata +162 -479
- data/CODEOWNERS +0 -30
- data/ext/rack/config.ru +0 -44
- data/ext/rack/example-passenger-vhost.conf +0 -57
- data/lib/puppet/application/ca.rb +0 -11
- data/lib/puppet/application/certificate.rb +0 -17
- data/lib/puppet/application/certificate_request.rb +0 -7
- data/lib/puppet/application/certificate_revocation_list.rb +0 -7
- data/lib/puppet/application/master.rb +0 -319
- data/lib/puppet/confine/boolean.rb +0 -45
- data/lib/puppet/external/nagios.rb +0 -46
- data/lib/puppet/external/nagios/base.rb +0 -472
- data/lib/puppet/external/nagios/grammar.ry +0 -248
- data/lib/puppet/external/nagios/makefile +0 -9
- data/lib/puppet/external/nagios/parser.rb +0 -400
- data/lib/puppet/face/ca.rb +0 -266
- data/lib/puppet/face/certificate.rb +0 -167
- data/lib/puppet/face/certificate_request.rb +0 -56
- data/lib/puppet/face/certificate_revocation_list.rb +0 -56
- data/lib/puppet/feature/rack.rb +0 -19
- data/lib/puppet/graph/random_prioritizer.rb +0 -16
- data/lib/puppet/graph/title_hash_prioritizer.rb +0 -16
- data/lib/puppet/indirector/certificate/ca.rb +0 -9
- data/lib/puppet/indirector/certificate/disabled_ca.rb +0 -22
- data/lib/puppet/indirector/certificate_request/ca.rb +0 -22
- data/lib/puppet/indirector/certificate_request/disabled_ca.rb +0 -22
- data/lib/puppet/indirector/certificate_revocation_list/ca.rb +0 -8
- data/lib/puppet/indirector/certificate_revocation_list/disabled_ca.rb +0 -22
- data/lib/puppet/indirector/certificate_revocation_list/file.rb +0 -8
- data/lib/puppet/indirector/certificate_revocation_list/rest.rb +0 -22
- data/lib/puppet/indirector/certificate_status.rb +0 -4
- data/lib/puppet/indirector/certificate_status/file.rb +0 -91
- data/lib/puppet/indirector/certificate_status/rest.rb +0 -11
- data/lib/puppet/indirector/key/ca.rb +0 -16
- data/lib/puppet/indirector/key/disabled_ca.rb +0 -22
- data/lib/puppet/indirector/ldap.rb +0 -86
- data/lib/puppet/indirector/node/ldap.rb +0 -275
- data/lib/puppet/indirector/node/write_only_yaml.rb +0 -39
- data/lib/puppet/module_tool/applications/builder.rb +0 -152
- data/lib/puppet/module_tool/skeleton/templates/generator/Gemfile +0 -18
- data/lib/puppet/module_tool/skeleton/templates/generator/README.md.erb +0 -89
- data/lib/puppet/module_tool/skeleton/templates/generator/Rakefile +0 -32
- data/lib/puppet/module_tool/skeleton/templates/generator/examples/init.pp.erb +0 -12
- data/lib/puppet/module_tool/skeleton/templates/generator/manifests/init.pp.erb +0 -48
- data/lib/puppet/module_tool/skeleton/templates/generator/metadata.json.erb +0 -1
- data/lib/puppet/module_tool/skeleton/templates/generator/spec/classes/init_spec.rb.erb +0 -6
- data/lib/puppet/module_tool/skeleton/templates/generator/spec/spec_helper.rb +0 -1
- data/lib/puppet/network/http/api/ca.rb +0 -2
- data/lib/puppet/network/http/api/ca/v1.rb +0 -11
- data/lib/puppet/network/http/rack.rb +0 -33
- data/lib/puppet/network/http/rack/rest.rb +0 -162
- data/lib/puppet/network/http/webrick.rb +0 -124
- data/lib/puppet/network/http/webrick/rest.rb +0 -114
- data/lib/puppet/network/server.rb +0 -39
- data/lib/puppet/provider/augeas/augeas.rb +0 -767
- data/lib/puppet/provider/cisco.rb +0 -9
- data/lib/puppet/provider/computer/computer.rb +0 -20
- data/lib/puppet/provider/cron/crontab.rb +0 -297
- data/lib/puppet/provider/host/parsed.rb +0 -46
- data/lib/puppet/provider/interface/cisco.rb +0 -27
- data/lib/puppet/provider/macauthorization/macauthorization.rb +0 -298
- data/lib/puppet/provider/mailalias/aliases.rb +0 -50
- data/lib/puppet/provider/maillist/mailman.rb +0 -108
- data/lib/puppet/provider/mcx/mcxcontent.rb +0 -173
- data/lib/puppet/provider/mount.rb +0 -76
- data/lib/puppet/provider/mount/parsed.rb +0 -285
- data/lib/puppet/provider/naginator.rb +0 -63
- data/lib/puppet/provider/package/dnfmodule.rb +0 -141
- data/lib/puppet/provider/package_targetable.rb +0 -69
- data/lib/puppet/provider/scheduled_task/win32_taskscheduler.rb +0 -590
- data/lib/puppet/provider/selboolean/getsetsebool.rb +0 -47
- data/lib/puppet/provider/selmodule/semodule.rb +0 -157
- data/lib/puppet/provider/ssh_authorized_key/parsed.rb +0 -105
- data/lib/puppet/provider/sshkey/parsed.rb +0 -50
- data/lib/puppet/provider/vlan/cisco.rb +0 -28
- data/lib/puppet/provider/yumrepo/inifile.rb +0 -315
- data/lib/puppet/provider/zfs/zfs.rb +0 -108
- data/lib/puppet/provider/zone/solaris.rb +0 -364
- data/lib/puppet/provider/zpool/zpool.rb +0 -125
- data/lib/puppet/ssl/certificate_authority.rb +0 -554
- data/lib/puppet/ssl/certificate_authority/autosign_command.rb +0 -45
- data/lib/puppet/ssl/certificate_authority/interface.rb +0 -324
- data/lib/puppet/ssl/certificate_revocation_list.rb +0 -111
- data/lib/puppet/ssl/configuration.rb +0 -61
- data/lib/puppet/ssl/inventory.rb +0 -55
- data/lib/puppet/type/augeas.rb +0 -211
- data/lib/puppet/type/computer.rb +0 -66
- data/lib/puppet/type/cron.rb +0 -480
- data/lib/puppet/type/host.rb +0 -95
- data/lib/puppet/type/interface.rb +0 -121
- data/lib/puppet/type/k5login.rb +0 -165
- data/lib/puppet/type/macauthorization.rb +0 -167
- data/lib/puppet/type/mailalias.rb +0 -46
- data/lib/puppet/type/maillist.rb +0 -62
- data/lib/puppet/type/mcx.rb +0 -98
- data/lib/puppet/type/mount.rb +0 -314
- data/lib/puppet/type/nagios_command.rb +0 -3
- data/lib/puppet/type/nagios_contact.rb +0 -3
- data/lib/puppet/type/nagios_contactgroup.rb +0 -3
- data/lib/puppet/type/nagios_host.rb +0 -3
- data/lib/puppet/type/nagios_hostdependency.rb +0 -3
- data/lib/puppet/type/nagios_hostescalation.rb +0 -3
- data/lib/puppet/type/nagios_hostextinfo.rb +0 -3
- data/lib/puppet/type/nagios_hostgroup.rb +0 -3
- data/lib/puppet/type/nagios_service.rb +0 -3
- data/lib/puppet/type/nagios_servicedependency.rb +0 -3
- data/lib/puppet/type/nagios_serviceescalation.rb +0 -3
- data/lib/puppet/type/nagios_serviceextinfo.rb +0 -3
- data/lib/puppet/type/nagios_servicegroup.rb +0 -3
- data/lib/puppet/type/nagios_timeperiod.rb +0 -3
- data/lib/puppet/type/router.rb +0 -17
- data/lib/puppet/type/scheduled_task.rb +0 -183
- data/lib/puppet/type/selboolean.rb +0 -40
- data/lib/puppet/type/selmodule.rb +0 -58
- data/lib/puppet/type/ssh_authorized_key.rb +0 -143
- data/lib/puppet/type/sshkey.rb +0 -83
- data/lib/puppet/type/vlan.rb +0 -26
- data/lib/puppet/type/yumrepo.rb +0 -430
- data/lib/puppet/type/zfs.rb +0 -154
- data/lib/puppet/type/zone.rb +0 -382
- data/lib/puppet/type/zpool.rb +0 -91
- data/lib/puppet/util/methodhelper.rb +0 -32
- data/lib/puppet/util/nagios_maker.rb +0 -85
- data/lib/puppet/util/network_device/cisco.rb +0 -4
- data/lib/puppet/util/network_device/cisco/device.rb +0 -285
- data/lib/puppet/util/network_device/cisco/facts.rb +0 -72
- data/lib/puppet/util/network_device/cisco/interface.rb +0 -94
- data/lib/puppet/util/network_device/ipcalc.rb +0 -68
- data/lib/puppet/util/network_device/transport/ssh.rb +0 -126
- data/lib/puppet/util/network_device/transport/telnet.rb +0 -47
- data/lib/puppet/util/windows/taskscheduler.rb +0 -1267
- data/lib/puppet/vendor/load_semantic.rb +0 -1
- data/lib/puppet/vendor/load_semantic_puppet.rb +0 -1
- data/lib/puppet/vendor/semantic/lib/semantic.rb +0 -5
- data/lib/puppet/vendor/semantic_puppet/lib/semantic_puppet.rb +0 -11
- data/lib/puppet/vendor/semantic_puppet/lib/semantic_puppet/dependency.rb +0 -181
- data/lib/puppet/vendor/semantic_puppet/lib/semantic_puppet/dependency/graph.rb +0 -60
- data/lib/puppet/vendor/semantic_puppet/lib/semantic_puppet/dependency/graph_node.rb +0 -117
- data/lib/puppet/vendor/semantic_puppet/lib/semantic_puppet/dependency/module_release.rb +0 -58
- data/lib/puppet/vendor/semantic_puppet/lib/semantic_puppet/dependency/source.rb +0 -25
- data/lib/puppet/vendor/semantic_puppet/lib/semantic_puppet/dependency/unsatisfiable_graph.rb +0 -31
- data/lib/puppet/vendor/semantic_puppet/lib/semantic_puppet/gem_version.rb +0 -3
- data/lib/puppet/vendor/semantic_puppet/lib/semantic_puppet/version.rb +0 -203
- data/lib/puppet/vendor/semantic_puppet/lib/semantic_puppet/version_range.rb +0 -758
- data/lib/puppet/vendor/semantic_puppet/locales/config.yaml +0 -21
- data/man/man8/puppet-ca.8 +0 -196
- data/man/man8/puppet-cert.8 +0 -118
- data/man/man8/puppet-certificate.8 +0 -240
- data/man/man8/puppet-certificate_request.8 +0 -161
- data/man/man8/puppet-certificate_revocation_list.8 +0 -139
- data/man/man8/puppet-master.8 +0 -85
- data/spec/fixtures/integration/provider/cron/crontab/create_normal_entry +0 -19
- data/spec/fixtures/integration/provider/cron/crontab/create_special_entry +0 -18
- data/spec/fixtures/integration/provider/cron/crontab/crontab_user1 +0 -15
- data/spec/fixtures/integration/provider/cron/crontab/crontab_user2 +0 -4
- data/spec/fixtures/integration/provider/cron/crontab/modify_entry +0 -13
- data/spec/fixtures/integration/provider/cron/crontab/moved_cronjob_input1 +0 -15
- data/spec/fixtures/integration/provider/cron/crontab/moved_cronjob_input2 +0 -6
- data/spec/fixtures/integration/provider/cron/crontab/purged +0 -8
- data/spec/fixtures/integration/provider/cron/crontab/remove_named_resource +0 -12
- data/spec/fixtures/integration/provider/cron/crontab/remove_unnamed_resource +0 -14
- data/spec/fixtures/integration/provider/cron/crontab/unspecialized +0 -15
- data/spec/fixtures/integration/provider/mailalias/aliases/test1 +0 -32
- data/spec/fixtures/integration/provider/sshkey/sample +0 -21
- data/spec/fixtures/unit/provider/augeas/augeas/augeas/lenses/test.aug +0 -13
- data/spec/fixtures/unit/provider/augeas/augeas/etc/fstab +0 -10
- data/spec/fixtures/unit/provider/augeas/augeas/etc/hosts +0 -6
- data/spec/fixtures/unit/provider/augeas/augeas/etc/test +0 -3
- data/spec/fixtures/unit/provider/augeas/augeas/test.aug +0 -13
- data/spec/fixtures/unit/provider/host/parsed/valid_hosts +0 -19
- data/spec/fixtures/unit/provider/mount/mount-output.aix.txt +0 -7
- data/spec/fixtures/unit/provider/mount/parsed/aix.filesystems +0 -152
- data/spec/fixtures/unit/provider/mount/parsed/aix.mount +0 -11
- data/spec/fixtures/unit/provider/mount/parsed/darwin.mount +0 -6
- data/spec/fixtures/unit/provider/mount/parsed/freebsd.fstab +0 -9
- data/spec/fixtures/unit/provider/mount/parsed/freebsd.mount +0 -4
- data/spec/fixtures/unit/provider/mount/parsed/hpux.mount +0 -17
- data/spec/fixtures/unit/provider/mount/parsed/linux.fstab +0 -12
- data/spec/fixtures/unit/provider/mount/parsed/linux.mount +0 -6
- data/spec/fixtures/unit/provider/mount/parsed/netbsd.fstab +0 -10
- data/spec/fixtures/unit/provider/mount/parsed/netbsd.mount +0 -9
- data/spec/fixtures/unit/provider/mount/parsed/openbsd.fstab +0 -5
- data/spec/fixtures/unit/provider/mount/parsed/openbsd.mount +0 -5
- data/spec/fixtures/unit/provider/mount/parsed/solaris.fstab +0 -11
- data/spec/fixtures/unit/provider/mount/parsed/solaris.mount +0 -6
- data/spec/fixtures/unit/provider/naginator/define_empty_param +0 -6
- data/spec/fixtures/unit/provider/package/dnfmodule/dnf-module-list.txt +0 -19
- data/spec/fixtures/unit/provider/package/yum/yum-check-update-subscription-manager.txt +0 -9
- data/spec/fixtures/unit/provider/service/smf/svcs_fmri.out +0 -6
- data/spec/fixtures/unit/provider/service/smf/svcs_multiple_fmris.out +0 -13
- data/spec/fixtures/unit/provider/ssh_authorized_key/parsed/authorized_keys +0 -7
- data/spec/fixtures/unit/provider/ssh_authorized_key/parsed/authorized_keys1 +0 -3
- data/spec/fixtures/unit/provider/ssh_authorized_key/parsed/authorized_keys2 +0 -1
- data/spec/fixtures/unit/provider/sshkey/parsed/sample +0 -21
- data/spec/fixtures/unit/provider/sshkey/parsed/sample_with_blank_lines +0 -8
- data/spec/fixtures/unit/provider/zfs/zfs/zfs-list.out +0 -2
- data/spec/fixtures/unit/provider/zpool/zpool/zpool-list.out +0 -2
- data/spec/integration/faces/ca_spec.rb +0 -353
- data/spec/integration/indirector/node/ldap_spec.rb +0 -13
- data/spec/integration/network/http_pool_spec.rb +0 -120
- data/spec/integration/provider/cron/crontab_spec.rb +0 -240
- data/spec/integration/provider/file/windows_spec.rb +0 -162
- data/spec/integration/provider/mailalias/aliases_spec.rb +0 -9
- data/spec/integration/provider/mount_spec.rb +0 -163
- data/spec/integration/provider/ssh_authorized_key_spec.rb +0 -217
- data/spec/integration/provider/sshkey_spec.rb +0 -153
- data/spec/integration/provider/yumrepo_spec.rb +0 -126
- data/spec/integration/ssl/autosign_spec.rb +0 -145
- data/spec/integration/ssl/certificate_authority_spec.rb +0 -161
- data/spec/integration/ssl/certificate_revocation_list_spec.rb +0 -33
- data/spec/integration/transaction_spec.rb +0 -553
- data/spec/integration/type/nagios_spec.rb +0 -69
- data/spec/integration/type/notify_spec.rb +0 -46
- data/spec/integration/type/user_spec.rb +0 -63
- data/spec/lib/puppet_spec/https.rb +0 -166
- data/spec/unit/application/cert_spec.rb +0 -272
- data/spec/unit/application/certificate_spec.rb +0 -21
- data/spec/unit/application/master_spec.rb +0 -414
- data/spec/unit/face/ca_spec.rb +0 -9
- data/spec/unit/face/certificate_request_spec.rb +0 -9
- data/spec/unit/face/certificate_revocation_list_spec.rb +0 -9
- data/spec/unit/face/certificate_spec.rb +0 -228
- data/spec/unit/face/module/build_spec.rb +0 -69
- data/spec/unit/graph/title_hash_prioritizer_spec.rb +0 -50
- data/spec/unit/indirector/certificate/ca_spec.rb +0 -21
- data/spec/unit/indirector/certificate/disabled_ca_spec.rb +0 -32
- data/spec/unit/indirector/certificate_request/ca_spec.rb +0 -56
- data/spec/unit/indirector/certificate_request/disabled_ca_spec.rb +0 -32
- data/spec/unit/indirector/certificate_revocation_list/ca_spec.rb +0 -15
- data/spec/unit/indirector/certificate_revocation_list/disabled_ca_spec.rb +0 -32
- data/spec/unit/indirector/certificate_revocation_list/file_spec.rb +0 -16
- data/spec/unit/indirector/certificate_revocation_list/rest_spec.rb +0 -33
- data/spec/unit/indirector/certificate_status/file_spec.rb +0 -190
- data/spec/unit/indirector/certificate_status/rest_spec.rb +0 -17
- data/spec/unit/indirector/code_spec.rb +0 -30
- data/spec/unit/indirector/key/ca_spec.rb +0 -22
- data/spec/unit/indirector/key/disabled_ca_spec.rb +0 -32
- data/spec/unit/indirector/ldap_spec.rb +0 -151
- data/spec/unit/indirector/node/ldap_spec.rb +0 -463
- data/spec/unit/indirector/node/write_only_yaml_spec.rb +0 -11
- data/spec/unit/module_tool/applications/builder_spec.rb +0 -439
- data/spec/unit/network/http/api/ca/v1_spec.rb +0 -26
- data/spec/unit/network/http/rack/rest_spec.rb +0 -322
- data/spec/unit/network/http/rack_spec.rb +0 -42
- data/spec/unit/network/http/webrick/rest_spec.rb +0 -230
- data/spec/unit/network/http/webrick_spec.rb +0 -277
- data/spec/unit/network/server_spec.rb +0 -94
- data/spec/unit/provider/augeas/augeas_spec.rb +0 -1096
- data/spec/unit/provider/cisco_spec.rb +0 -14
- data/spec/unit/provider/cron/crontab_spec.rb +0 -206
- data/spec/unit/provider/cron/parsed_spec.rb +0 -355
- data/spec/unit/provider/host/parsed_spec.rb +0 -219
- data/spec/unit/provider/interface/cisco_spec.rb +0 -53
- data/spec/unit/provider/macauthorization_spec.rb +0 -134
- data/spec/unit/provider/mcx/mcxcontent_spec.rb +0 -190
- data/spec/unit/provider/mount/parsed_spec.rb +0 -318
- data/spec/unit/provider/mount_spec.rb +0 -169
- data/spec/unit/provider/naginator_spec.rb +0 -78
- data/spec/unit/provider/network_device_spec.rb +0 -152
- data/spec/unit/provider/package/dnfmodule_spec.rb +0 -247
- data/spec/unit/provider/package_targetable_spec.rb +0 -60
- data/spec/unit/provider/scheduled_task/win32_taskscheduler_spec.rb +0 -2050
- data/spec/unit/provider/selboolean_spec.rb +0 -34
- data/spec/unit/provider/selmodule-example.pp +0 -0
- data/spec/unit/provider/selmodule_spec.rb +0 -154
- data/spec/unit/provider/ssh_authorized_key/parsed_spec.rb +0 -259
- data/spec/unit/provider/sshkey/parsed_spec.rb +0 -92
- data/spec/unit/provider/vlan/cisco_spec.rb +0 -53
- data/spec/unit/provider/yumrepo/inifile_spec.rb +0 -413
- data/spec/unit/provider/zfs/zfs_spec.rb +0 -171
- data/spec/unit/provider/zone/solaris_spec.rb +0 -261
- data/spec/unit/provider/zpool/zpool_spec.rb +0 -250
- data/spec/unit/settings/server_list_setting_spec.rb +0 -21
- data/spec/unit/ssl/certificate_authority/autosign_command_spec.rb +0 -29
- data/spec/unit/ssl/certificate_authority/interface_spec.rb +0 -563
- data/spec/unit/ssl/certificate_authority_spec.rb +0 -1165
- data/spec/unit/ssl/certificate_revocation_list_spec.rb +0 -196
- data/spec/unit/ssl/configuration_spec.rb +0 -138
- data/spec/unit/ssl/inventory_spec.rb +0 -155
- data/spec/unit/test/test_helper_spec.rb +0 -17
- data/spec/unit/type/augeas_spec.rb +0 -120
- data/spec/unit/type/computer_spec.rb +0 -77
- data/spec/unit/type/cron_spec.rb +0 -539
- data/spec/unit/type/host_spec.rb +0 -680
- data/spec/unit/type/interface_spec.rb +0 -128
- data/spec/unit/type/k5login_spec.rb +0 -204
- data/spec/unit/type/macauthorization_spec.rb +0 -111
- data/spec/unit/type/mailalias_spec.rb +0 -48
- data/spec/unit/type/maillist_spec.rb +0 -38
- data/spec/unit/type/mcx_spec.rb +0 -75
- data/spec/unit/type/mount_spec.rb +0 -622
- data/spec/unit/type/nagios_spec.rb +0 -312
- data/spec/unit/type/scheduled_task_spec.rb +0 -117
- data/spec/unit/type/selboolean_spec.rb +0 -41
- data/spec/unit/type/selmodule_spec.rb +0 -16
- data/spec/unit/type/ssh_authorized_key_spec.rb +0 -228
- data/spec/unit/type/sshkey_spec.rb +0 -75
- data/spec/unit/type/vlan_spec.rb +0 -42
- data/spec/unit/type/yumrepo_spec.rb +0 -476
- data/spec/unit/type/zfs_spec.rb +0 -45
- data/spec/unit/type/zone_spec.rb +0 -182
- data/spec/unit/type/zpool_spec.rb +0 -108
- data/spec/unit/util/nagios_maker_spec.rb +0 -121
- data/spec/unit/util/network_device/cisco/device_spec.rb +0 -491
- data/spec/unit/util/network_device/cisco/facts_spec.rb +0 -63
- data/spec/unit/util/network_device/cisco/interface_spec.rb +0 -97
- data/spec/unit/util/network_device/ipcalc_spec.rb +0 -61
- data/spec/unit/util/network_device/transport/ssh_spec.rb +0 -252
- data/spec/unit/util/network_device/transport/telnet_spec.rb +0 -90
data/spec/unit/ssl/host_spec.rb
CHANGED
@@ -1,7 +1,11 @@
|
|
1
|
+
#!/usr/bin/env ruby
|
1
2
|
require 'spec_helper'
|
3
|
+
require 'puppet/test_ca'
|
2
4
|
|
3
5
|
require 'puppet/ssl/host'
|
4
6
|
require 'matchers/json'
|
7
|
+
require 'puppet_spec/ssl'
|
8
|
+
require 'puppet/rest/routes'
|
5
9
|
|
6
10
|
def base_json_comparison(result, json_hash)
|
7
11
|
expect(result["fingerprint"]).to eq(json_hash["fingerprint"])
|
@@ -9,13 +13,11 @@ def base_json_comparison(result, json_hash)
|
|
9
13
|
expect(result["state"]).to eq(json_hash["desired_state"])
|
10
14
|
end
|
11
15
|
|
12
|
-
describe Puppet::SSL::Host do
|
16
|
+
describe Puppet::SSL::Host, if: !Puppet::Util::Platform.jruby? do
|
13
17
|
include JSONMatchers
|
14
18
|
include PuppetSpec::Files
|
15
19
|
|
16
20
|
before do
|
17
|
-
Puppet::SSL::Host.indirection.terminus_class = :file
|
18
|
-
|
19
21
|
# Get a safe temporary file
|
20
22
|
dir = tmpdir("ssl_host_testing")
|
21
23
|
Puppet.settings[:confdir] = dir
|
@@ -28,7 +30,6 @@ describe Puppet::SSL::Host do
|
|
28
30
|
after do
|
29
31
|
# Cleaned out any cached localhost instance.
|
30
32
|
Puppet::SSL::Host.reset
|
31
|
-
Puppet::SSL::Host.ca_location = :none
|
32
33
|
end
|
33
34
|
|
34
35
|
it "should use any provided name as its name" do
|
@@ -36,80 +37,66 @@ describe Puppet::SSL::Host do
|
|
36
37
|
end
|
37
38
|
|
38
39
|
it "should retrieve its public key from its private key" do
|
39
|
-
realkey =
|
40
|
-
key =
|
41
|
-
|
42
|
-
pubkey =
|
43
|
-
|
40
|
+
realkey = mock 'realkey'
|
41
|
+
key = stub 'key', :content => realkey
|
42
|
+
Puppet::SSL::Key.indirection.stubs(:find).returns(key)
|
43
|
+
pubkey = mock 'public_key'
|
44
|
+
realkey.expects(:public_key).returns pubkey
|
44
45
|
|
45
46
|
expect(@host.public_key).to equal(pubkey)
|
46
47
|
end
|
47
48
|
|
48
|
-
|
49
|
-
|
50
|
-
|
51
|
-
|
52
|
-
|
53
|
-
allow(Puppet::SSL::Host).to receive(:ca_name).and_return("yayca")
|
54
|
-
expect(Puppet::SSL::Host.new("yayca")).to be_ca
|
55
|
-
end
|
56
|
-
|
57
|
-
it "should have a method for determining the CA location" do
|
58
|
-
expect(Puppet::SSL::Host).to respond_to(:ca_location)
|
59
|
-
end
|
60
|
-
|
61
|
-
it "should have a method for specifying the CA location" do
|
62
|
-
expect(Puppet::SSL::Host).to respond_to(:ca_location=)
|
63
|
-
end
|
64
|
-
|
65
|
-
it "should have a method for retrieving the default ssl host" do
|
66
|
-
expect(Puppet::SSL::Host).to respond_to(:ca_location=)
|
67
|
-
end
|
49
|
+
describe 'localhost' do
|
50
|
+
before(:each) do
|
51
|
+
Puppet::SSL::Host.any_instance.stubs(:certificate).returns nil
|
52
|
+
Puppet::SSL::Host.any_instance.stubs(:generate)
|
53
|
+
end
|
68
54
|
|
69
|
-
|
70
|
-
|
71
|
-
|
55
|
+
it "should have a method for producing an instance to manage the local host's keys" do
|
56
|
+
expect(Puppet::SSL::Host).to respond_to(:localhost)
|
57
|
+
end
|
72
58
|
|
73
|
-
|
74
|
-
|
75
|
-
|
76
|
-
|
77
|
-
|
59
|
+
it "should allow to reset localhost" do
|
60
|
+
previous_host = Puppet::SSL::Host.localhost
|
61
|
+
Puppet::SSL::Host.reset
|
62
|
+
expect(Puppet::SSL::Host.localhost).not_to eq(previous_host)
|
63
|
+
end
|
78
64
|
|
79
|
-
|
80
|
-
|
81
|
-
|
65
|
+
it "should generate the certificate for the localhost instance if no certificate is available" do
|
66
|
+
host = stub 'host', :key => nil
|
67
|
+
Puppet::SSL::Host.expects(:new).returns host
|
82
68
|
|
83
|
-
|
84
|
-
|
69
|
+
host.expects(:certificate).returns nil
|
70
|
+
host.expects(:generate)
|
85
71
|
|
86
|
-
|
87
|
-
|
72
|
+
expect(Puppet::SSL::Host.localhost).to equal(host)
|
73
|
+
end
|
88
74
|
|
89
|
-
|
90
|
-
|
91
|
-
|
92
|
-
|
93
|
-
ca = Puppet::SSL::CertificateAuthority.new
|
94
|
-
allow(Puppet::SSL::CertificateAuthority).to receive(:instance).and_return(ca)
|
75
|
+
it "should always read the key for the localhost instance in from disk" do
|
76
|
+
host = stub 'host', :certificate => "eh"
|
77
|
+
host.expects(:key)
|
78
|
+
Puppet::SSL::Host.expects(:new).returns host
|
95
79
|
|
96
|
-
|
97
|
-
|
80
|
+
Puppet::SSL::Host.localhost
|
81
|
+
end
|
98
82
|
|
99
|
-
|
100
|
-
|
83
|
+
it "should cache the localhost instance" do
|
84
|
+
host = stub 'host', :certificate => "eh", :key => 'foo'
|
85
|
+
Puppet::SSL::Host.expects(:new).once.returns host
|
86
|
+
expect(Puppet::SSL::Host.localhost).to eq(Puppet::SSL::Host.localhost)
|
87
|
+
end
|
101
88
|
end
|
102
89
|
|
103
90
|
context "with dns_alt_names" do
|
104
91
|
before :each do
|
105
|
-
@key =
|
106
|
-
key =
|
107
|
-
|
108
|
-
|
92
|
+
@key = stub('key content')
|
93
|
+
key = stub('key', :generate => true, :content => @key)
|
94
|
+
Puppet::SSL::Key.stubs(:new).returns key
|
95
|
+
Puppet::SSL::Key.indirection.stubs(:save).with(key)
|
109
96
|
|
110
|
-
@cr =
|
111
|
-
|
112
|
-
|
97
|
+
@cr = stub('certificate request', :render => "csr pem")
|
98
|
+
Puppet::SSL::CertificateRequest.stubs(:new).returns @cr
|
99
|
+
Puppet::SSL::Host.any_instance.stubs(:submit_certificate_request)
|
113
100
|
end
|
114
101
|
|
115
102
|
describe "explicitly specified" do
|
@@ -118,80 +105,17 @@ describe Puppet::SSL::Host do
|
|
118
105
|
end
|
119
106
|
|
120
107
|
it "should not include subjectAltName if not the local node" do
|
121
|
-
|
108
|
+
@cr.expects(:generate).with(@key, {})
|
122
109
|
|
123
|
-
Puppet::SSL::Host.new('not-the-' + Puppet[:certname]).
|
110
|
+
Puppet::SSL::Host.new('not-the-' + Puppet[:certname]).generate_certificate_request
|
124
111
|
end
|
125
112
|
|
126
|
-
it "should include subjectAltName if
|
127
|
-
|
128
|
-
with(@key, { :dns_alt_names => Puppet[:dns_alt_names] })
|
113
|
+
it "should include subjectAltName if the local node" do
|
114
|
+
@cr.expects(:generate).with(@key, { :dns_alt_names => 'one, two' })
|
129
115
|
|
130
|
-
Puppet::SSL::Host.
|
116
|
+
Puppet::SSL::Host.new(Puppet[:certname]).generate_certificate_request
|
131
117
|
end
|
132
118
|
end
|
133
|
-
|
134
|
-
describe "implicitly defaulted" do
|
135
|
-
let(:ca) { double('ca', :sign => nil) }
|
136
|
-
|
137
|
-
before :each do
|
138
|
-
Puppet[:dns_alt_names] = ''
|
139
|
-
|
140
|
-
allow(Puppet::SSL::CertificateAuthority).to receive(:instance).and_return(ca)
|
141
|
-
end
|
142
|
-
|
143
|
-
it "should not include defaults if we're not the CA" do
|
144
|
-
allow(Puppet::SSL::CertificateAuthority).to receive(:ca?).and_return(false)
|
145
|
-
|
146
|
-
expect(@cr).to receive(:generate).with(@key, {})
|
147
|
-
|
148
|
-
Puppet::SSL::Host.localhost
|
149
|
-
end
|
150
|
-
|
151
|
-
it "should not include defaults if not the local node" do
|
152
|
-
allow(Puppet::SSL::CertificateAuthority).to receive(:ca?).and_return(true)
|
153
|
-
|
154
|
-
expect(@cr).to receive(:generate).with(@key, {})
|
155
|
-
|
156
|
-
Puppet::SSL::Host.new('not-the-' + Puppet[:certname]).generate
|
157
|
-
end
|
158
|
-
|
159
|
-
it "should not include defaults if we can't resolve our fqdn" do
|
160
|
-
allow(Puppet::SSL::CertificateAuthority).to receive(:ca?).and_return(true)
|
161
|
-
allow(Facter).to receive(:value).and_call_original
|
162
|
-
allow(Facter).to receive(:value).with(:fqdn).and_return(nil)
|
163
|
-
|
164
|
-
expect(@cr).to receive(:generate).with(@key, {})
|
165
|
-
|
166
|
-
Puppet::SSL::Host.localhost
|
167
|
-
end
|
168
|
-
|
169
|
-
it "should provide defaults if we're bootstrapping the local master" do
|
170
|
-
allow(Puppet::SSL::CertificateAuthority).to receive(:ca?).and_return(true)
|
171
|
-
allow(Facter).to receive(:value).and_call_original
|
172
|
-
allow(Facter).to receive(:value).with(:fqdn).and_return('web.foo.com')
|
173
|
-
allow(Facter).to receive(:value).with(:domain).and_return('foo.com')
|
174
|
-
|
175
|
-
expect(@cr).to receive(:generate).with(@key, {:dns_alt_names => "puppet, web.foo.com, puppet.foo.com"})
|
176
|
-
|
177
|
-
Puppet::SSL::Host.localhost
|
178
|
-
end
|
179
|
-
end
|
180
|
-
end
|
181
|
-
|
182
|
-
it "should always read the key for the localhost instance in from disk" do
|
183
|
-
host = double('host', :certificate => "eh")
|
184
|
-
expect(Puppet::SSL::Host).to receive(:new).and_return(host)
|
185
|
-
|
186
|
-
expect(host).to receive(:key)
|
187
|
-
|
188
|
-
Puppet::SSL::Host.localhost
|
189
|
-
end
|
190
|
-
|
191
|
-
it "should cache the localhost instance" do
|
192
|
-
host = double('host', :certificate => "eh", :key => 'foo')
|
193
|
-
expect(Puppet::SSL::Host).to receive(:new).once.and_return(host)
|
194
|
-
expect(Puppet::SSL::Host.localhost).to eq(Puppet::SSL::Host.localhost)
|
195
119
|
end
|
196
120
|
|
197
121
|
it "should be able to verify its certificate matches its key" do
|
@@ -200,177 +124,35 @@ describe Puppet::SSL::Host do
|
|
200
124
|
|
201
125
|
it "should consider the certificate invalid if it cannot find a key" do
|
202
126
|
host = Puppet::SSL::Host.new("foo")
|
203
|
-
certificate =
|
204
|
-
|
205
|
-
expect(
|
206
|
-
expect { host.validate_certificate_with_key }.to raise_error(Puppet::Error, "No private key with which to validate certificate with fingerprint: DEADBEEF")
|
127
|
+
certificate = mock('cert', :fingerprint => 'DEADBEEF')
|
128
|
+
host.expects(:key).returns nil
|
129
|
+
expect { host.validate_certificate_with_key(certificate) }.to raise_error(Puppet::Error, "No private key with which to validate certificate with fingerprint: DEADBEEF")
|
207
130
|
end
|
208
131
|
|
209
132
|
it "should consider the certificate invalid if it cannot find a certificate" do
|
210
133
|
host = Puppet::SSL::Host.new("foo")
|
211
|
-
|
212
|
-
expect(
|
213
|
-
expect { host.validate_certificate_with_key }.to raise_error(Puppet::Error, "No certificate to validate.")
|
134
|
+
host.expects(:key).never
|
135
|
+
expect { host.validate_certificate_with_key(nil) }.to raise_error(Puppet::Error, "No certificate to validate.")
|
214
136
|
end
|
215
137
|
|
216
138
|
it "should consider the certificate invalid if the SSL certificate's key verification fails" do
|
217
139
|
host = Puppet::SSL::Host.new("foo")
|
218
|
-
key =
|
219
|
-
sslcert =
|
220
|
-
certificate =
|
221
|
-
|
222
|
-
|
223
|
-
expect(
|
224
|
-
expect { host.validate_certificate_with_key }.to raise_error(Puppet::Error, /DEADBEEF/)
|
140
|
+
key = mock 'key', :content => "private_key"
|
141
|
+
sslcert = mock 'sslcert'
|
142
|
+
certificate = mock 'cert', {:content => sslcert, :fingerprint => 'DEADBEEF'}
|
143
|
+
host.stubs(:key).returns key
|
144
|
+
sslcert.expects(:check_private_key).with("private_key").returns false
|
145
|
+
expect { host.validate_certificate_with_key(certificate) }.to raise_error(Puppet::Error, /DEADBEEF/)
|
225
146
|
end
|
226
147
|
|
227
148
|
it "should consider the certificate valid if the SSL certificate's key verification succeeds" do
|
228
149
|
host = Puppet::SSL::Host.new("foo")
|
229
|
-
key =
|
230
|
-
sslcert =
|
231
|
-
certificate =
|
232
|
-
|
233
|
-
|
234
|
-
expect
|
235
|
-
expect{ host.validate_certificate_with_key }.not_to raise_error
|
236
|
-
end
|
237
|
-
|
238
|
-
describe "when specifying the CA location" do
|
239
|
-
it "should support the location ':local'" do
|
240
|
-
expect { Puppet::SSL::Host.ca_location = :local }.not_to raise_error
|
241
|
-
end
|
242
|
-
|
243
|
-
it "should support the location ':remote'" do
|
244
|
-
expect { Puppet::SSL::Host.ca_location = :remote }.not_to raise_error
|
245
|
-
end
|
246
|
-
|
247
|
-
it "should support the location ':none'" do
|
248
|
-
expect { Puppet::SSL::Host.ca_location = :none }.not_to raise_error
|
249
|
-
end
|
250
|
-
|
251
|
-
it "should support the location ':only'" do
|
252
|
-
expect { Puppet::SSL::Host.ca_location = :only }.not_to raise_error
|
253
|
-
end
|
254
|
-
|
255
|
-
it "should not support other modes" do
|
256
|
-
expect { Puppet::SSL::Host.ca_location = :whatever }.to raise_error(ArgumentError)
|
257
|
-
end
|
258
|
-
|
259
|
-
describe "as 'local'" do
|
260
|
-
before do
|
261
|
-
Puppet::SSL::Host.ca_location = :local
|
262
|
-
end
|
263
|
-
|
264
|
-
it "should set the cache class for Certificate, CertificateRevocationList, and CertificateRequest as :file" do
|
265
|
-
expect(Puppet::SSL::Certificate.indirection.cache_class).to eq(:file)
|
266
|
-
expect(Puppet::SSL::CertificateRequest.indirection.cache_class).to eq(:file)
|
267
|
-
expect(Puppet::SSL::CertificateRevocationList.indirection.cache_class).to eq(:file)
|
268
|
-
end
|
269
|
-
|
270
|
-
it "should set the terminus class for Key and Host as :file" do
|
271
|
-
expect(Puppet::SSL::Key.indirection.terminus_class).to eq(:file)
|
272
|
-
expect(Puppet::SSL::Host.indirection.terminus_class).to eq(:file)
|
273
|
-
end
|
274
|
-
|
275
|
-
it "should set the terminus class for Certificate, CertificateRevocationList, and CertificateRequest as :ca" do
|
276
|
-
expect(Puppet::SSL::Certificate.indirection.terminus_class).to eq(:ca)
|
277
|
-
expect(Puppet::SSL::CertificateRequest.indirection.terminus_class).to eq(:ca)
|
278
|
-
expect(Puppet::SSL::CertificateRevocationList.indirection.terminus_class).to eq(:ca)
|
279
|
-
end
|
280
|
-
end
|
281
|
-
|
282
|
-
describe "as 'remote'" do
|
283
|
-
before do
|
284
|
-
Puppet::SSL::Host.ca_location = :remote
|
285
|
-
end
|
286
|
-
|
287
|
-
it "should set the cache class for Certificate, CertificateRevocationList, and CertificateRequest as :file" do
|
288
|
-
expect(Puppet::SSL::Certificate.indirection.cache_class).to eq(:file)
|
289
|
-
expect(Puppet::SSL::CertificateRequest.indirection.cache_class).to eq(:file)
|
290
|
-
expect(Puppet::SSL::CertificateRevocationList.indirection.cache_class).to eq(:file)
|
291
|
-
end
|
292
|
-
|
293
|
-
it "should set the terminus class for Key as :file" do
|
294
|
-
expect(Puppet::SSL::Key.indirection.terminus_class).to eq(:file)
|
295
|
-
end
|
296
|
-
|
297
|
-
it "should set the terminus class for Host, Certificate, CertificateRevocationList, and CertificateRequest as :rest" do
|
298
|
-
expect(Puppet::SSL::Host.indirection.terminus_class).to eq(:rest)
|
299
|
-
expect(Puppet::SSL::Certificate.indirection.terminus_class).to eq(:rest)
|
300
|
-
expect(Puppet::SSL::CertificateRequest.indirection.terminus_class).to eq(:rest)
|
301
|
-
expect(Puppet::SSL::CertificateRevocationList.indirection.terminus_class).to eq(:rest)
|
302
|
-
end
|
303
|
-
end
|
304
|
-
|
305
|
-
describe "as 'only'" do
|
306
|
-
before do
|
307
|
-
Puppet::SSL::Host.ca_location = :only
|
308
|
-
end
|
309
|
-
|
310
|
-
it "should set the terminus class for Key, Certificate, CertificateRevocationList, and CertificateRequest as :ca" do
|
311
|
-
expect(Puppet::SSL::Key.indirection.terminus_class).to eq(:ca)
|
312
|
-
expect(Puppet::SSL::Certificate.indirection.terminus_class).to eq(:ca)
|
313
|
-
expect(Puppet::SSL::CertificateRequest.indirection.terminus_class).to eq(:ca)
|
314
|
-
expect(Puppet::SSL::CertificateRevocationList.indirection.terminus_class).to eq(:ca)
|
315
|
-
end
|
316
|
-
|
317
|
-
it "should set the cache class for Certificate, CertificateRevocationList, and CertificateRequest to nil" do
|
318
|
-
expect(Puppet::SSL::Certificate.indirection.cache_class).to be_nil
|
319
|
-
expect(Puppet::SSL::CertificateRequest.indirection.cache_class).to be_nil
|
320
|
-
expect(Puppet::SSL::CertificateRevocationList.indirection.cache_class).to be_nil
|
321
|
-
end
|
322
|
-
|
323
|
-
it "should set the terminus class for Host to :file" do
|
324
|
-
expect(Puppet::SSL::Host.indirection.terminus_class).to eq(:file)
|
325
|
-
end
|
326
|
-
end
|
327
|
-
|
328
|
-
describe "as 'none'" do
|
329
|
-
before do
|
330
|
-
Puppet::SSL::Host.ca_location = :none
|
331
|
-
end
|
332
|
-
|
333
|
-
it "should set the terminus class for Key, Certificate, CertificateRevocationList, and CertificateRequest as :file" do
|
334
|
-
expect(Puppet::SSL::Key.indirection.terminus_class).to eq(:disabled_ca)
|
335
|
-
expect(Puppet::SSL::Certificate.indirection.terminus_class).to eq(:disabled_ca)
|
336
|
-
expect(Puppet::SSL::CertificateRequest.indirection.terminus_class).to eq(:disabled_ca)
|
337
|
-
expect(Puppet::SSL::CertificateRevocationList.indirection.terminus_class).to eq(:disabled_ca)
|
338
|
-
end
|
339
|
-
|
340
|
-
it "should set the terminus class for Host to 'none'" do
|
341
|
-
expect { Puppet::SSL::Host.indirection.terminus_class }.to raise_error(Puppet::DevError)
|
342
|
-
end
|
343
|
-
end
|
344
|
-
end
|
345
|
-
|
346
|
-
it "should have a class method for destroying all files related to a given host" do
|
347
|
-
expect(Puppet::SSL::Host).to respond_to(:destroy)
|
348
|
-
end
|
349
|
-
|
350
|
-
describe "when destroying a host's SSL files" do
|
351
|
-
before do
|
352
|
-
allow(Puppet::SSL::Key.indirection).to receive(:destroy).and_return(false)
|
353
|
-
allow(Puppet::SSL::Certificate.indirection).to receive(:destroy).and_return(false)
|
354
|
-
allow(Puppet::SSL::CertificateRequest.indirection).to receive(:destroy).and_return(false)
|
355
|
-
end
|
356
|
-
|
357
|
-
it "should destroy its certificate, certificate request, and key" do
|
358
|
-
expect(Puppet::SSL::Key.indirection).to receive(:destroy).with("myhost")
|
359
|
-
expect(Puppet::SSL::Certificate.indirection).to receive(:destroy).with("myhost")
|
360
|
-
expect(Puppet::SSL::CertificateRequest.indirection).to receive(:destroy).with("myhost")
|
361
|
-
|
362
|
-
Puppet::SSL::Host.destroy("myhost")
|
363
|
-
end
|
364
|
-
|
365
|
-
it "should return true if any of the classes returned true" do
|
366
|
-
expect(Puppet::SSL::Certificate.indirection).to receive(:destroy).with("myhost").and_return(true)
|
367
|
-
|
368
|
-
expect(Puppet::SSL::Host.destroy("myhost")).to be_truthy
|
369
|
-
end
|
370
|
-
|
371
|
-
it "should report that nothing was deleted if none of the classes returned true" do
|
372
|
-
expect(Puppet::SSL::Host.destroy("myhost")).to eq("Nothing was deleted")
|
373
|
-
end
|
150
|
+
key = mock 'key', :content => "private_key"
|
151
|
+
sslcert = mock 'sslcert'
|
152
|
+
certificate = mock 'cert', :content => sslcert
|
153
|
+
host.stubs(:key).returns key
|
154
|
+
sslcert.expects(:check_private_key).with("private_key").returns true
|
155
|
+
expect{ host.validate_certificate_with_key(certificate) }.not_to raise_error
|
374
156
|
end
|
375
157
|
|
376
158
|
describe "when initializing" do
|
@@ -383,11 +165,6 @@ describe Puppet::SSL::Host do
|
|
383
165
|
it "should downcase a passed in name" do
|
384
166
|
expect(Puppet::SSL::Host.new("Host.Domain.Com").name).to eq("host.domain.com")
|
385
167
|
end
|
386
|
-
|
387
|
-
it "should indicate that it is a CA host if its name matches the ca_name constant" do
|
388
|
-
allow(Puppet::SSL::Host).to receive(:ca_name).and_return("myca")
|
389
|
-
expect(Puppet::SSL::Host.new("myca")).to be_ca
|
390
|
-
end
|
391
168
|
end
|
392
169
|
|
393
170
|
describe "when managing its private key" do
|
@@ -398,107 +175,100 @@ describe Puppet::SSL::Host do
|
|
398
175
|
end
|
399
176
|
|
400
177
|
it "should return nil if the key is not set and cannot be found" do
|
401
|
-
|
178
|
+
Puppet::SSL::Key.indirection.expects(:find).with("myname").returns(nil)
|
402
179
|
expect(@host.key).to be_nil
|
403
180
|
end
|
404
181
|
|
405
182
|
it "should find the key in the Key class and return the Puppet instance" do
|
406
|
-
|
183
|
+
Puppet::SSL::Key.indirection.expects(:find).with("myname").returns(@key)
|
407
184
|
expect(@host.key).to equal(@key)
|
408
185
|
end
|
409
186
|
|
410
187
|
it "should be able to generate and save a new key" do
|
411
|
-
|
188
|
+
Puppet::SSL::Key.expects(:new).with("myname").returns(@key)
|
412
189
|
|
413
|
-
|
414
|
-
|
190
|
+
@key.expects(:generate)
|
191
|
+
Puppet::SSL::Key.indirection.expects(:save)
|
415
192
|
|
416
193
|
expect(@host.generate_key).to be_truthy
|
417
194
|
expect(@host.key).to equal(@key)
|
418
195
|
end
|
419
196
|
|
420
197
|
it "should not retain keys that could not be saved" do
|
421
|
-
|
198
|
+
Puppet::SSL::Key.expects(:new).with("myname").returns(@key)
|
422
199
|
|
423
|
-
|
424
|
-
|
200
|
+
@key.stubs(:generate)
|
201
|
+
Puppet::SSL::Key.indirection.expects(:save).raises "eh"
|
425
202
|
|
426
203
|
expect { @host.generate_key }.to raise_error(RuntimeError)
|
427
204
|
expect(@host.key).to be_nil
|
428
205
|
end
|
429
206
|
|
430
207
|
it "should return any previously found key without requerying" do
|
431
|
-
|
208
|
+
Puppet::SSL::Key.indirection.expects(:find).with("myname").returns(@key).once
|
432
209
|
expect(@host.key).to equal(@key)
|
433
210
|
expect(@host.key).to equal(@key)
|
434
211
|
end
|
435
212
|
end
|
436
213
|
|
437
214
|
describe "when managing its certificate request" do
|
438
|
-
before do
|
439
|
-
@
|
440
|
-
@request = Puppet::SSL::CertificateRequest.new("myname")
|
441
|
-
@request.content = @realrequest
|
215
|
+
before(:all) do
|
216
|
+
@pki = PuppetSpec::SSL.create_chained_pki
|
442
217
|
end
|
443
218
|
|
444
|
-
|
445
|
-
|
446
|
-
expect(@host.certificate_request).to be_nil
|
219
|
+
before(:each) do
|
220
|
+
Puppet[:requestdir] = tmpdir('requests')
|
447
221
|
end
|
448
222
|
|
449
|
-
|
450
|
-
expect(Puppet::SSL::CertificateRequest.indirection).to receive(:find).with("myname").and_return(@request)
|
451
|
-
|
452
|
-
expect(@host.certificate_request).to equal(@request)
|
453
|
-
end
|
223
|
+
let(:key) { Puppet::SSL::Key.from_s(@pki[:leaf_key].to_s, @host.name) }
|
454
224
|
|
455
225
|
it "should generate a new key when generating the cert request if no key exists" do
|
456
|
-
|
457
|
-
|
458
|
-
key = double('key', :public_key => double("public_key"), :content => "mycontent")
|
226
|
+
@host.expects(:key).times(2).returns(nil).then.returns(key)
|
227
|
+
@host.expects(:generate_key).returns(key)
|
459
228
|
|
460
|
-
|
461
|
-
expect(@host).to receive(:generate_key).and_return(key)
|
462
|
-
|
463
|
-
allow(@request).to receive(:generate)
|
464
|
-
allow(Puppet::SSL::CertificateRequest.indirection).to receive(:save)
|
229
|
+
@host.stubs(:submit_certificate_request)
|
465
230
|
|
466
231
|
@host.generate_certificate_request
|
232
|
+
expect(Puppet::FileSystem.exist?(File.join(Puppet[:requestdir], "#{@host.name}.pem"))).to be true
|
467
233
|
end
|
468
234
|
|
469
235
|
it "should be able to generate and save a new request using the private key" do
|
470
|
-
|
471
|
-
|
472
|
-
key = double('key', :public_key => double("public_key"), :content => "mycontent")
|
473
|
-
allow(@host).to receive(:key).and_return(key)
|
474
|
-
expect(@request).to receive(:generate).with("mycontent", {})
|
475
|
-
expect(Puppet::SSL::CertificateRequest.indirection).to receive(:save).with(@request)
|
236
|
+
@host.stubs(:key).returns(key)
|
237
|
+
@host.stubs(:submit_certificate_request)
|
476
238
|
|
477
239
|
expect(@host.generate_certificate_request).to be_truthy
|
478
|
-
expect(@host.
|
240
|
+
expect(Puppet::FileSystem.exist?(File.join(Puppet[:requestdir], "#{@host.name}.pem"))).to be true
|
241
|
+
end
|
242
|
+
|
243
|
+
it "should send a new request to the CA for signing" do
|
244
|
+
@http = mock("http")
|
245
|
+
@host.stubs(:http_client).returns(@http)
|
246
|
+
@host.stubs(:ssl_store).returns(mock("ssl store"))
|
247
|
+
@host.stubs(:key).returns(key)
|
248
|
+
request = mock("request")
|
249
|
+
request.stubs(:generate)
|
250
|
+
request.expects(:render).returns("my request").twice
|
251
|
+
Puppet::SSL::CertificateRequest.expects(:new).returns(request)
|
252
|
+
|
253
|
+
Puppet::Rest::Routes.expects(:put_certificate_request)
|
254
|
+
.with("my request", @host.name, anything)
|
255
|
+
.returns(nil)
|
256
|
+
|
257
|
+
expect(@host.generate_certificate_request).to be true
|
479
258
|
end
|
480
259
|
|
481
260
|
it "should return any previously found request without requerying" do
|
482
|
-
|
261
|
+
request = mock("request")
|
262
|
+
@host.expects(:load_certificate_request_from_file).returns(request).once
|
483
263
|
|
484
|
-
expect(@host.certificate_request).to equal(
|
485
|
-
expect(@host.certificate_request).to equal(
|
264
|
+
expect(@host.certificate_request).to equal(request)
|
265
|
+
expect(@host.certificate_request).to equal(request)
|
486
266
|
end
|
487
267
|
|
488
268
|
it "should not keep its certificate request in memory if the request cannot be saved" do
|
489
|
-
|
490
|
-
|
491
|
-
|
492
|
-
allow(@host).to receive(:key).and_return(key)
|
493
|
-
allow(@request).to receive(:generate)
|
494
|
-
allow(@request).to receive(:name).and_return("myname")
|
495
|
-
terminus = double('terminus')
|
496
|
-
allow(terminus).to receive(:validate)
|
497
|
-
expect(Puppet::SSL::CertificateRequest.indirection).to receive(:prepare).and_return(terminus)
|
498
|
-
expect(terminus).to receive(:save) do |req|
|
499
|
-
expect(req.instance).to eq(@request)
|
500
|
-
expect(req.key).to eq("myname")
|
501
|
-
end.and_raise("eh")
|
269
|
+
@host.stubs(:key).returns(key)
|
270
|
+
@host.stubs(:submit_certificate_request)
|
271
|
+
Puppet::Util.expects(:replace_file).raises(RuntimeError)
|
502
272
|
|
503
273
|
expect { @host.generate_certificate_request }.to raise_error(RuntimeError)
|
504
274
|
|
@@ -507,114 +277,113 @@ describe Puppet::SSL::Host do
|
|
507
277
|
end
|
508
278
|
|
509
279
|
describe "when managing its certificate" do
|
510
|
-
before do
|
511
|
-
@
|
512
|
-
@cert = double('cert', :content => @realcert)
|
513
|
-
allow(@host).to receive(:key).and_return(double("key"))
|
514
|
-
allow(@host).to receive(:validate_certificate_with_key)
|
280
|
+
before(:all) do
|
281
|
+
@pki = PuppetSpec::SSL.create_chained_pki
|
515
282
|
end
|
516
283
|
|
517
|
-
|
518
|
-
|
519
|
-
|
520
|
-
@host.
|
284
|
+
before(:each) do
|
285
|
+
Puppet[:certdir] = tmpdir('certs')
|
286
|
+
@host.stubs(:key).returns mock("key")
|
287
|
+
@host.stubs(:validate_certificate_with_key)
|
288
|
+
@host.stubs(:http_client).returns(@http)
|
289
|
+
@host.stubs(:ssl_store).returns(mock("ssl store"))
|
521
290
|
end
|
522
291
|
|
523
|
-
|
524
|
-
|
525
|
-
allow(Puppet::SSL::Certificate.indirection).to receive(:find)
|
526
|
-
expect(Puppet::SSL::Certificate.indirection).not_to receive(:find).with(Puppet::SSL::CA_NAME, :fail_on_404 => true)
|
292
|
+
let(:ca_cert_response) { @pki[:ca_bundle] }
|
293
|
+
let(:host_cert_response) { @pki[:unrevoked_leaf_node_cert] }
|
527
294
|
|
295
|
+
it "should find the CA certificate and save it to disk" do
|
296
|
+
Puppet::Rest::Routes.expects(:get_certificate)
|
297
|
+
.with(Puppet::SSL::CA_NAME, anything)
|
298
|
+
.returns(ca_cert_response)
|
299
|
+
Puppet::Rest::Routes.expects(:get_certificate)
|
300
|
+
.with(@host.name, anything)
|
301
|
+
.raises(Puppet::Rest::ResponseError.new('no client cert',
|
302
|
+
mock('response', code: '404')))
|
528
303
|
@host.certificate
|
304
|
+
actual_ca_bundle = Puppet::FileSystem.read(Puppet[:localcacert])
|
305
|
+
expect(actual_ca_bundle).to match(/BEGIN CERTIFICATE.*END CERTIFICATE.*BEGIN CERTIFICATE/m)
|
529
306
|
end
|
530
307
|
|
531
308
|
it "should return nil if it cannot find a CA certificate" do
|
532
|
-
|
533
|
-
|
309
|
+
@host.expects(:ensure_ca_certificate).returns(false)
|
310
|
+
@host.expects(:get_host_certificate).never
|
534
311
|
|
535
312
|
expect(@host.certificate).to be_nil
|
536
313
|
end
|
537
314
|
|
538
315
|
it "should find the key if it does not have one" do
|
539
|
-
|
540
|
-
|
316
|
+
@host.expects(:ensure_ca_certificate).returns(true)
|
317
|
+
@host.expects(:get_host_certificate).returns(nil)
|
318
|
+
@host.expects(:key).returns mock("key")
|
541
319
|
@host.certificate
|
542
320
|
end
|
543
321
|
|
544
322
|
it "should generate the key if one cannot be found" do
|
545
|
-
|
546
|
-
|
547
|
-
|
323
|
+
@host.expects(:ensure_ca_certificate).returns(true)
|
324
|
+
@host.expects(:get_host_certificate).returns(nil)
|
325
|
+
@host.expects(:key).returns nil
|
326
|
+
@host.expects(:generate_key)
|
548
327
|
@host.certificate
|
549
328
|
end
|
550
329
|
|
551
|
-
it "should find the certificate
|
552
|
-
|
553
|
-
|
554
|
-
|
330
|
+
it "should find the host certificate, write it to file, and return the Puppet certificate instance" do
|
331
|
+
Puppet::Rest::Routes.expects(:get_certificate)
|
332
|
+
.with(Puppet::SSL::CA_NAME, anything)
|
333
|
+
.returns(ca_cert_response)
|
334
|
+
Puppet::Rest::Routes.expects(:get_certificate)
|
335
|
+
.with(@host.name, anything)
|
336
|
+
.returns(host_cert_response)
|
337
|
+
expected_cert = Puppet::SSL::Certificate.from_s(@pki[:unrevoked_leaf_node_cert])
|
338
|
+
actual_cert = @host.certificate
|
339
|
+
expect(actual_cert).to be_a(Puppet::SSL::Certificate)
|
340
|
+
expect(actual_cert.to_s).to eq(expected_cert.to_s)
|
341
|
+
host_cert_from_file = Puppet::FileSystem.read(File.join(Puppet[:certdir], "#{@host.name}.pem"))
|
342
|
+
expect(host_cert_from_file).to eq(expected_cert.to_s)
|
555
343
|
end
|
556
344
|
|
557
345
|
it "should return any previously found certificate" do
|
558
|
-
|
559
|
-
|
346
|
+
cert = mock 'cert'
|
347
|
+
@host.expects(:ensure_ca_certificate).returns(true).once
|
348
|
+
@host.expects(:get_host_certificate).returns(cert).once
|
560
349
|
|
561
|
-
expect(@host.certificate).to equal(
|
562
|
-
expect(@host.certificate).to equal(
|
350
|
+
expect(@host.certificate).to equal(cert)
|
351
|
+
expect(@host.certificate).to equal(cert)
|
563
352
|
end
|
564
|
-
end
|
565
|
-
|
566
|
-
it "should have a method for listing certificate hosts" do
|
567
|
-
expect(Puppet::SSL::Host).to respond_to(:search)
|
568
|
-
end
|
569
353
|
|
570
|
-
|
571
|
-
|
572
|
-
|
573
|
-
|
574
|
-
|
575
|
-
|
576
|
-
|
577
|
-
|
578
|
-
it "should be able to list only clients with a key" do
|
579
|
-
expect(Puppet::SSL::Key.indirection).to receive(:search).and_return([])
|
580
|
-
expect(Puppet::SSL::Certificate.indirection).not_to receive(:search)
|
581
|
-
expect(Puppet::SSL::CertificateRequest.indirection).not_to receive(:search)
|
582
|
-
Puppet::SSL::Host.search :for => Puppet::SSL::Key
|
583
|
-
end
|
584
|
-
|
585
|
-
it "should be able to list only clients with a certificate" do
|
586
|
-
expect(Puppet::SSL::Key.indirection).not_to receive(:search)
|
587
|
-
expect(Puppet::SSL::Certificate.indirection).to receive(:search).and_return([])
|
588
|
-
expect(Puppet::SSL::CertificateRequest.indirection).not_to receive(:search)
|
589
|
-
Puppet::SSL::Host.search :for => Puppet::SSL::Certificate
|
590
|
-
end
|
591
|
-
|
592
|
-
it "should be able to list only clients with a certificate request" do
|
593
|
-
expect(Puppet::SSL::Key.indirection).not_to receive(:search)
|
594
|
-
expect(Puppet::SSL::Certificate.indirection).not_to receive(:search)
|
595
|
-
expect(Puppet::SSL::CertificateRequest.indirection).to receive(:search).and_return([])
|
596
|
-
Puppet::SSL::Host.search :for => Puppet::SSL::CertificateRequest
|
597
|
-
end
|
598
|
-
|
599
|
-
it "should return a Host instance created with the name of each found instance" do
|
600
|
-
key = double('key', :name => "key", :to_ary => nil)
|
601
|
-
cert = double('cert', :name => "cert", :to_ary => nil)
|
602
|
-
csr = double('csr', :name => "csr", :to_ary => nil)
|
354
|
+
context 'invalid certificates' do
|
355
|
+
it "should raise if the CA certificate downloaded from CA is invalid" do
|
356
|
+
Puppet::Rest::Routes.expects(:get_certificate)
|
357
|
+
.with(Puppet::SSL::CA_NAME, anything)
|
358
|
+
.returns('garbage')
|
359
|
+
expect { @host.certificate }.to raise_error(Puppet::Error, /did not contain a valid CA certificate/)
|
360
|
+
end
|
603
361
|
|
604
|
-
|
605
|
-
|
606
|
-
|
362
|
+
it "should warn if the host certificate downloaded from CA is invalid" do
|
363
|
+
Puppet::Rest::Routes.expects(:get_certificate)
|
364
|
+
.with(Puppet::SSL::CA_NAME, anything)
|
365
|
+
.returns(ca_cert_response)
|
366
|
+
Puppet::Rest::Routes.expects(:get_certificate)
|
367
|
+
.with(@host.name, anything)
|
368
|
+
.returns('garbage')
|
369
|
+
expect { @host.certificate }.to raise_error(Puppet::Error, /did not contain a valid certificate for #{@host.name}/)
|
370
|
+
end
|
607
371
|
|
608
|
-
|
609
|
-
|
610
|
-
|
611
|
-
|
612
|
-
expect(Puppet::
|
372
|
+
it 'should warn if the CA certificate loaded from disk is invalid' do
|
373
|
+
Puppet::FileSystem.open(Puppet[:localcacert], nil, "w:ASCII") do |f|
|
374
|
+
f.puts 'garbage'
|
375
|
+
end
|
376
|
+
expect { @host.certificate }.to raise_error(Puppet::Error, /The CA certificate.*invalid/)
|
613
377
|
end
|
614
378
|
|
615
|
-
|
616
|
-
|
617
|
-
|
379
|
+
it 'should warn if the host certificate loaded from disk in invalid' do
|
380
|
+
Puppet::Rest::Routes.expects(:get_certificate)
|
381
|
+
.with(Puppet::SSL::CA_NAME, anything)
|
382
|
+
.returns(ca_cert_response)
|
383
|
+
Puppet::FileSystem.open(File.join(Puppet[:certdir], "#{@host.name}.pem"), nil, "w:ASCII") do |f|
|
384
|
+
f.puts 'garbage'
|
385
|
+
end
|
386
|
+
expect { @host.certificate }.to raise_error(Puppet::Error, /The certificate.*invalid/)
|
618
387
|
end
|
619
388
|
end
|
620
389
|
end
|
@@ -626,153 +395,154 @@ describe Puppet::SSL::Host do
|
|
626
395
|
describe "when generating files" do
|
627
396
|
before do
|
628
397
|
@host = Puppet::SSL::Host.new("me")
|
629
|
-
|
630
|
-
|
398
|
+
@host.stubs(:generate_key)
|
399
|
+
@host.stubs(:generate_certificate_request)
|
400
|
+
@host.stubs(:certificate_request)
|
401
|
+
@host.stubs(:certificate)
|
631
402
|
end
|
632
403
|
|
633
404
|
it "should generate a key if one is not present" do
|
634
|
-
|
635
|
-
|
405
|
+
@host.stubs(:key).returns nil
|
406
|
+
@host.expects(:generate_key)
|
636
407
|
|
637
408
|
@host.generate
|
638
409
|
end
|
639
410
|
|
640
411
|
it "should generate a certificate request if one is not present" do
|
641
|
-
|
642
|
-
|
412
|
+
@host.expects(:certificate_request).returns nil
|
413
|
+
@host.expects(:generate_certificate_request)
|
643
414
|
|
644
415
|
@host.generate
|
645
416
|
end
|
646
|
-
|
647
|
-
describe "and it can create a certificate authority" do
|
648
|
-
before do
|
649
|
-
@ca = double('ca')
|
650
|
-
allow(Puppet::SSL::CertificateAuthority).to receive(:instance).and_return(@ca)
|
651
|
-
end
|
652
|
-
|
653
|
-
it "should use the CA to sign its certificate request if it does not have a certificate" do
|
654
|
-
expect(@host).to receive(:certificate).and_return(nil)
|
655
|
-
|
656
|
-
expect(@ca).to receive(:sign).with(@host.name, {allow_dns_alt_names: true})
|
657
|
-
|
658
|
-
@host.generate
|
659
|
-
end
|
660
|
-
end
|
661
|
-
|
662
|
-
describe "and it cannot create a certificate authority" do
|
663
|
-
before do
|
664
|
-
allow(Puppet::SSL::CertificateAuthority).to receive(:instance).and_return(nil)
|
665
|
-
end
|
666
|
-
|
667
|
-
it "should seek its certificate" do
|
668
|
-
expect(@host).to receive(:certificate)
|
669
|
-
|
670
|
-
@host.generate
|
671
|
-
end
|
672
|
-
end
|
673
417
|
end
|
674
418
|
|
675
419
|
it "should have a method for creating an SSL store" do
|
676
420
|
expect(Puppet::SSL::Host.new("me")).to respond_to(:ssl_store)
|
677
421
|
end
|
678
422
|
|
679
|
-
it "should always return the same store" do
|
680
|
-
host = Puppet::SSL::Host.new("foo")
|
681
|
-
store = double(
|
682
|
-
'store',
|
683
|
-
:purpose= => nil,
|
684
|
-
:add_file => nil,
|
685
|
-
)
|
686
|
-
expect(OpenSSL::X509::Store).to receive(:new).and_return(store)
|
687
|
-
expect(host.ssl_store).to equal(host.ssl_store)
|
688
|
-
end
|
689
|
-
|
690
423
|
describe "when creating an SSL store" do
|
691
424
|
before do
|
692
|
-
@host = Puppet::SSL::Host.new("me")
|
693
|
-
@store = double(
|
694
|
-
'store',
|
695
|
-
:purpose= => nil,
|
696
|
-
:add_file => nil,
|
697
|
-
:add_crl => nil,
|
698
|
-
:flags= => nil,
|
699
|
-
)
|
700
|
-
allow(OpenSSL::X509::Store).to receive(:new).and_return(@store)
|
701
|
-
|
702
425
|
Puppet[:localcacert] = "ssl_host_testing"
|
703
|
-
|
704
|
-
allow(Puppet::SSL::CertificateRevocationList.indirection).to receive(:find).and_return(nil)
|
705
426
|
end
|
706
427
|
|
707
428
|
it "should accept a purpose" do
|
708
|
-
|
709
|
-
|
710
|
-
|
429
|
+
store = mock 'store'
|
430
|
+
store.stub_everything
|
431
|
+
OpenSSL::X509::Store.expects(:new).returns store
|
432
|
+
store.expects(:purpose=).with(OpenSSL::X509::PURPOSE_SSL_SERVER)
|
433
|
+
host = Puppet::SSL::Host.new("me")
|
434
|
+
host.crl_usage = false
|
711
435
|
|
712
|
-
|
713
|
-
expect(@store).to receive(:purpose=).with(OpenSSL::X509::PURPOSE_ANY)
|
714
|
-
@host.ssl_store
|
436
|
+
host.ssl_store(OpenSSL::X509::PURPOSE_SSL_SERVER)
|
715
437
|
end
|
716
438
|
|
717
|
-
|
718
|
-
|
719
|
-
|
720
|
-
|
439
|
+
context "and the CRL is not on disk" do
|
440
|
+
before do
|
441
|
+
@pki = PuppetSpec::SSL.create_chained_pki
|
442
|
+
@revoked_cert = @pki[:revoked_root_node_cert]
|
443
|
+
localcacert = Puppet.settings[:localcacert]
|
444
|
+
Puppet::Util.replace_file(localcacert, 0644) {|f| f.write @pki[:ca_bundle] }
|
445
|
+
@http = mock 'http'
|
446
|
+
@host.stubs(:http_client).returns(@http)
|
447
|
+
end
|
448
|
+
|
449
|
+
after do
|
450
|
+
Puppet::FileSystem.unlink(Puppet.settings[:localcacert])
|
451
|
+
Puppet::FileSystem.unlink(Puppet.settings[:hostcrl])
|
452
|
+
end
|
453
|
+
|
454
|
+
it "retrieves it from the server" do
|
455
|
+
Puppet::Rest::Routes.expects(:get_crls)
|
456
|
+
.with(Puppet::SSL::CA_NAME, anything)
|
457
|
+
.returns(@pki[:crl_chain])
|
458
|
+
|
459
|
+
@host.ssl_store
|
460
|
+
expect(Puppet::FileSystem.read(Puppet.settings[:hostcrl], :encoding => Encoding::UTF_8)).to eq(@pki[:crl_chain])
|
461
|
+
end
|
721
462
|
end
|
722
463
|
|
723
464
|
describe "and a CRL is available" do
|
724
465
|
before do
|
725
|
-
|
726
|
-
|
466
|
+
pki = PuppetSpec::SSL.create_chained_pki
|
467
|
+
|
468
|
+
@revoked_cert_from_self_signed_root = pki[:revoked_root_node_cert]
|
469
|
+
@revoked_cert_from_ca_with_untrusted_chain = pki[:revoked_leaf_node_cert]
|
470
|
+
@unrevoked_cert_from_self_signed_root = pki[:unrevoked_root_node_cert]
|
471
|
+
@unrevoked_cert_from_revoked_ca = pki[:unrevoked_int_node_cert]
|
472
|
+
@unrevoked_cert_from_ca_with_untrusted_chain = pki[:unrevoked_leaf_node_cert]
|
473
|
+
|
474
|
+
localcacert = Puppet.settings[:localcacert]
|
475
|
+
hostcrl = Puppet.settings[:hostcrl]
|
476
|
+
|
477
|
+
Puppet::Util.replace_file(localcacert, 0644) {|f| f.write pki[:ca_bundle] }
|
478
|
+
Puppet::Util.replace_file(hostcrl, 0644) {|f| f.write pki[:crl_chain] }
|
479
|
+
end
|
480
|
+
|
481
|
+
after do
|
482
|
+
Puppet::FileSystem.unlink(Puppet.settings[:localcacert])
|
483
|
+
Puppet::FileSystem.unlink(Puppet.settings[:hostcrl])
|
727
484
|
end
|
728
485
|
|
729
|
-
[true,
|
486
|
+
[true, :chain].each do |crl_setting|
|
730
487
|
describe "and 'certificate_revocation' is #{crl_setting}" do
|
731
488
|
before do
|
732
|
-
|
489
|
+
@host = Puppet::SSL::Host.new(crl_setting.to_s)
|
490
|
+
@host.crl_usage = crl_setting
|
733
491
|
end
|
734
492
|
|
735
|
-
it "should
|
736
|
-
expect(
|
737
|
-
|
493
|
+
it "should verify unrevoked certs" do
|
494
|
+
expect(
|
495
|
+
@host.ssl_store.verify(@unrevoked_cert_from_self_signed_root)
|
496
|
+
).to be true
|
738
497
|
end
|
739
498
|
|
740
|
-
it "should
|
741
|
-
|
742
|
-
|
499
|
+
it "should not verify revoked certs" do
|
500
|
+
[@revoked_cert_from_self_signed_root,
|
501
|
+
@revoked_cert_from_ca_with_untrusted_chain,
|
502
|
+
@unrevoked_cert_from_revoked_ca,
|
503
|
+
@unrevoked_cert_from_ca_with_untrusted_chain].each do |cert|
|
504
|
+
expect(@host.ssl_store.verify(cert)).to be false
|
505
|
+
end
|
743
506
|
end
|
744
507
|
end
|
745
508
|
end
|
746
509
|
|
747
510
|
describe "and 'certificate_revocation' is leaf" do
|
748
511
|
before do
|
749
|
-
|
512
|
+
@host = Puppet::SSL::Host.new("leaf")
|
513
|
+
@host.crl_usage = :leaf
|
750
514
|
end
|
751
515
|
|
752
|
-
it "should
|
753
|
-
|
754
|
-
|
516
|
+
it "should verify unrevoked certs regardless of signing CA's revocation status" do
|
517
|
+
[@unrevoked_cert_from_self_signed_root,
|
518
|
+
@unrevoked_cert_from_revoked_ca,
|
519
|
+
@unrevoked_cert_from_ca_with_untrusted_chain].each do |cert|
|
520
|
+
expect(@host.ssl_store.verify(cert)).to be true
|
521
|
+
end
|
755
522
|
end
|
756
523
|
|
757
|
-
it "should
|
758
|
-
|
759
|
-
|
524
|
+
it "should not verify certs revoked by their signing CA" do
|
525
|
+
[@revoked_cert_from_self_signed_root,
|
526
|
+
@revoked_cert_from_ca_with_untrusted_chain].each do |cert|
|
527
|
+
expect(@host.ssl_store.verify(cert)).to be false
|
528
|
+
end
|
760
529
|
end
|
761
530
|
end
|
762
531
|
|
763
532
|
describe "and 'certificate_revocation' is false" do
|
764
533
|
before do
|
765
|
-
|
534
|
+
@host = Puppet::SSL::Host.new("host")
|
535
|
+
@host.crl_usage = false
|
766
536
|
end
|
767
537
|
|
768
|
-
it "should
|
769
|
-
|
770
|
-
|
771
|
-
|
772
|
-
|
773
|
-
|
774
|
-
|
775
|
-
|
538
|
+
it "should verify valid certs regardless of revocation status" do
|
539
|
+
[@revoked_cert_from_self_signed_root,
|
540
|
+
@revoked_cert_from_ca_with_untrusted_chain,
|
541
|
+
@unrevoked_cert_from_self_signed_root,
|
542
|
+
@unrevoked_cert_from_revoked_ca,
|
543
|
+
@unrevoked_cert_from_ca_with_untrusted_chain].each do |cert|
|
544
|
+
expect(@host.ssl_store.verify(cert)).to be true
|
545
|
+
end
|
776
546
|
end
|
777
547
|
end
|
778
548
|
end
|
@@ -784,206 +554,56 @@ describe Puppet::SSL::Host do
|
|
784
554
|
end
|
785
555
|
|
786
556
|
it "should generate its certificate request and attempt to read the certificate again if no certificate is found" do
|
787
|
-
|
788
|
-
|
557
|
+
@host.expects(:certificate).times(2).returns(nil).then.returns "foo"
|
558
|
+
@host.expects(:generate)
|
789
559
|
@host.wait_for_cert(1)
|
790
560
|
end
|
791
561
|
|
792
562
|
it "should catch and log errors during CSR saving" do
|
793
|
-
|
794
|
-
|
795
|
-
|
796
|
-
times_generate_called += 1
|
797
|
-
raise RuntimeError if times_generate_called == 1
|
798
|
-
nil
|
799
|
-
end
|
800
|
-
allow(@host).to receive(:sleep)
|
563
|
+
@host.expects(:certificate).times(2).returns(nil).then.returns "foo"
|
564
|
+
@host.expects(:generate).raises(RuntimeError).then.returns nil
|
565
|
+
@host.stubs(:sleep)
|
801
566
|
@host.wait_for_cert(1)
|
802
567
|
end
|
803
568
|
|
804
569
|
it "should sleep and retry after failures saving the CSR if waitforcert is enabled" do
|
805
|
-
|
806
|
-
|
807
|
-
|
808
|
-
times_generate_called += 1
|
809
|
-
raise RuntimeError if times_generate_called == 1
|
810
|
-
nil
|
811
|
-
end
|
812
|
-
expect(@host).to receive(:sleep).with(1)
|
570
|
+
@host.expects(:certificate).times(2).returns(nil).then.returns "foo"
|
571
|
+
@host.expects(:generate).raises(RuntimeError).then.returns nil
|
572
|
+
@host.expects(:sleep).with(1)
|
813
573
|
@host.wait_for_cert(1)
|
814
574
|
end
|
815
575
|
|
816
576
|
it "should exit after failures saving the CSR of waitforcert is disabled" do
|
817
|
-
|
818
|
-
|
819
|
-
|
577
|
+
@host.expects(:certificate).returns(nil)
|
578
|
+
@host.expects(:generate).raises(RuntimeError)
|
579
|
+
@host.expects(:puts)
|
820
580
|
expect { @host.wait_for_cert(0) }.to exit_with 1
|
821
581
|
end
|
822
582
|
|
823
583
|
it "should exit if the wait time is 0 and it can neither find nor retrieve a certificate" do
|
824
|
-
|
825
|
-
|
826
|
-
|
584
|
+
@host.stubs(:certificate).returns nil
|
585
|
+
@host.expects(:generate)
|
586
|
+
@host.expects(:puts)
|
827
587
|
expect { @host.wait_for_cert(0) }.to exit_with 1
|
828
588
|
end
|
829
589
|
|
830
590
|
it "should sleep for the specified amount of time if no certificate is found after generating its certificate request" do
|
831
|
-
|
832
|
-
|
591
|
+
@host.expects(:certificate).times(3).returns(nil).then.returns(nil).then.returns "foo"
|
592
|
+
@host.expects(:generate)
|
833
593
|
|
834
|
-
|
594
|
+
@host.expects(:sleep).with(1)
|
835
595
|
|
836
596
|
@host.wait_for_cert(1)
|
837
597
|
end
|
838
598
|
|
839
599
|
it "should catch and log exceptions during certificate retrieval" do
|
840
|
-
|
841
|
-
|
842
|
-
|
843
|
-
if times_certificate_called == 1
|
844
|
-
return nil
|
845
|
-
elsif times_certificate_called == 2
|
846
|
-
raise RuntimeError
|
847
|
-
end
|
848
|
-
"foo"
|
849
|
-
end.exactly(3).times()
|
850
|
-
allow(@host).to receive(:generate)
|
851
|
-
allow(@host).to receive(:sleep)
|
600
|
+
@host.expects(:certificate).times(3).returns(nil).then.raises(RuntimeError).then.returns("foo")
|
601
|
+
@host.stubs(:generate)
|
602
|
+
@host.stubs(:sleep)
|
852
603
|
|
853
|
-
|
604
|
+
Puppet.expects(:err)
|
854
605
|
|
855
606
|
@host.wait_for_cert(1)
|
856
607
|
end
|
857
608
|
end
|
858
|
-
|
859
|
-
describe "when handling JSON", :unless => Puppet.features.microsoft_windows? do
|
860
|
-
include PuppetSpec::Files
|
861
|
-
|
862
|
-
before do
|
863
|
-
Puppet[:vardir] = tmpdir("ssl_test_vardir")
|
864
|
-
Puppet[:ssldir] = tmpdir("ssl_test_ssldir")
|
865
|
-
# localcacert is where each client stores the CA certificate
|
866
|
-
# cacert is where the master stores the CA certificate
|
867
|
-
# Since we need to play the role of both for testing we need them to be the same and exist
|
868
|
-
Puppet[:cacert] = Puppet[:localcacert]
|
869
|
-
|
870
|
-
@ca=Puppet::SSL::CertificateAuthority.new
|
871
|
-
end
|
872
|
-
|
873
|
-
describe "when converting to JSON" do
|
874
|
-
let(:host) do
|
875
|
-
Puppet::SSL::Host.new("bazinga")
|
876
|
-
end
|
877
|
-
|
878
|
-
let(:json_hash) do
|
879
|
-
{
|
880
|
-
"fingerprint" => host.certificate_request.fingerprint,
|
881
|
-
"desired_state" => 'requested',
|
882
|
-
"name" => host.name
|
883
|
-
}
|
884
|
-
end
|
885
|
-
|
886
|
-
it "should be able to identify a host with an unsigned certificate request" do
|
887
|
-
host.generate_certificate_request
|
888
|
-
|
889
|
-
result = JSON.parse(Puppet::SSL::Host.new(host.name).to_json)
|
890
|
-
|
891
|
-
base_json_comparison result, json_hash
|
892
|
-
end
|
893
|
-
|
894
|
-
it "should validate against the schema" do
|
895
|
-
host.generate_certificate_request
|
896
|
-
|
897
|
-
expect(host.to_json).to validate_against('api/schemas/host.json')
|
898
|
-
end
|
899
|
-
|
900
|
-
describe "explicit fingerprints" do
|
901
|
-
[:SHA1, :SHA256, :SHA512].each do |md|
|
902
|
-
it "should include #{md}" do
|
903
|
-
mds = md.to_s
|
904
|
-
host.generate_certificate_request
|
905
|
-
json_hash["fingerprints"] = {}
|
906
|
-
json_hash["fingerprints"][mds] = host.certificate_request.fingerprint(md)
|
907
|
-
|
908
|
-
result = JSON.parse(Puppet::SSL::Host.new(host.name).to_json)
|
909
|
-
base_json_comparison result, json_hash
|
910
|
-
expect(result["fingerprints"][mds]).to eq(json_hash["fingerprints"][mds])
|
911
|
-
end
|
912
|
-
end
|
913
|
-
end
|
914
|
-
|
915
|
-
describe "dns_alt_names" do
|
916
|
-
describe "when not specified" do
|
917
|
-
it "should include the dns_alt_names associated with the certificate" do
|
918
|
-
host.generate_certificate_request
|
919
|
-
json_hash["desired_alt_names"] = host.certificate_request.subject_alt_names
|
920
|
-
|
921
|
-
result = JSON.parse(Puppet::SSL::Host.new(host.name).to_json)
|
922
|
-
base_json_comparison result, json_hash
|
923
|
-
expect(result["dns_alt_names"]).to eq(json_hash["desired_alt_names"])
|
924
|
-
end
|
925
|
-
end
|
926
|
-
|
927
|
-
[ "",
|
928
|
-
"test, alt, names"
|
929
|
-
].each do |alt_names|
|
930
|
-
describe "when #{alt_names}" do
|
931
|
-
before(:each) do
|
932
|
-
host.generate_certificate_request :dns_alt_names => alt_names
|
933
|
-
end
|
934
|
-
|
935
|
-
it "should include the dns_alt_names associated with the certificate" do
|
936
|
-
json_hash["desired_alt_names"] = host.certificate_request.subject_alt_names
|
937
|
-
|
938
|
-
result = JSON.parse(Puppet::SSL::Host.new(host.name).to_json)
|
939
|
-
base_json_comparison result, json_hash
|
940
|
-
expect(result["dns_alt_names"]).to eq(json_hash["desired_alt_names"])
|
941
|
-
end
|
942
|
-
|
943
|
-
it "should validate against the schema" do
|
944
|
-
expect(host.to_json).to validate_against('api/schemas/host.json')
|
945
|
-
end
|
946
|
-
end
|
947
|
-
end
|
948
|
-
end
|
949
|
-
|
950
|
-
it "should be able to identify a host with a signed certificate" do
|
951
|
-
host.generate_certificate_request
|
952
|
-
@ca.sign(host.name)
|
953
|
-
json_hash = {
|
954
|
-
"fingerprint" => Puppet::SSL::Certificate.indirection.find(host.name).fingerprint,
|
955
|
-
"desired_state" => 'signed',
|
956
|
-
"name" => host.name,
|
957
|
-
}
|
958
|
-
|
959
|
-
result = JSON.parse(Puppet::SSL::Host.new(host.name).to_json)
|
960
|
-
base_json_comparison result, json_hash
|
961
|
-
end
|
962
|
-
|
963
|
-
it "should be able to identify a host with a revoked certificate" do
|
964
|
-
host.generate_certificate_request
|
965
|
-
@ca.sign(host.name)
|
966
|
-
@ca.revoke(host.name)
|
967
|
-
json_hash["fingerprint"] = Puppet::SSL::Certificate.indirection.find(host.name).fingerprint
|
968
|
-
json_hash["desired_state"] = 'revoked'
|
969
|
-
|
970
|
-
result = JSON.parse(Puppet::SSL::Host.new(host.name).to_json)
|
971
|
-
base_json_comparison result, json_hash
|
972
|
-
end
|
973
|
-
end
|
974
|
-
|
975
|
-
describe "when converting from JSON" do
|
976
|
-
it "should return a Puppet::SSL::Host object with the specified desired state" do
|
977
|
-
host = Puppet::SSL::Host.new("bazinga")
|
978
|
-
host.desired_state="signed"
|
979
|
-
json_hash = {
|
980
|
-
"name" => host.name,
|
981
|
-
"desired_state" => host.desired_state,
|
982
|
-
}
|
983
|
-
generated_host = Puppet::SSL::Host.from_data_hash(json_hash)
|
984
|
-
expect(generated_host.desired_state).to eq(host.desired_state)
|
985
|
-
expect(generated_host.name).to eq(host.name)
|
986
|
-
end
|
987
|
-
end
|
988
|
-
end
|
989
609
|
end
|