puppet 6.21.0-x64-mingw32 → 6.24.0-x64-mingw32

data/man/man8/puppet-plugin.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-PLUGIN" "8" "February 2021" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-PLUGIN" "8" "July 2021" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-plugin\fR \- Interact with the Puppet plugin system\.

data/man/man8/puppet-report.8

@@ -1,13 +1,13 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-REPORT" "8" "February 2021" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-REPORT" "8" "July 2021" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-report\fR \- Create, display, and submit reports\.
 .
 .SH "SYNOPSIS"
-puppet report \fIaction\fR [\-\-terminus _TERMINUS] [\-\-extra HASH]
+puppet report \fIaction\fR [\-\-terminus _TERMINUS]
 .
 .SH "OPTIONS"
 Note that any setting that\'s valid in the configuration file is also a valid long argument, although it may or may not be relevant to the present action\. For example, \fBserver\fR and \fBrun_mode\fR are valid settings, so you can specify \fB\-\-server <servername>\fR, or \fB\-\-run_mode <runmode>\fR as an argument\.
@@ -48,7 +48,7 @@ The terminus for an action is often determined by context, but occasionally need
 \fBSYNOPSIS\fR
 .
 .IP
-puppet report info [\-\-terminus _TERMINUS] [\-\-extra HASH]
+puppet report info [\-\-terminus _TERMINUS]
 .
 .IP
 \fBDESCRIPTION\fR
@@ -61,7 +61,7 @@ Prints the default terminus class for this subcommand\. Note that different run
 \fBSYNOPSIS\fR
 .
 .IP
-puppet report save [\-\-terminus _TERMINUS] [\-\-extra HASH] \fIreport\fR
+puppet report save [\-\-terminus _TERMINUS] \fIreport\fR
 .
 .IP
 \fBDESCRIPTION\fR
@@ -80,7 +80,7 @@ Nothing\.
 \fBSYNOPSIS\fR
 .
 .IP
-puppet report submit [\-\-terminus _TERMINUS] [\-\-extra HASH] \fIreport\fR
+puppet report submit [\-\-terminus _TERMINUS] \fIreport\fR
 .
 .IP
 \fBDESCRIPTION\fR

data/man/man8/puppet-resource.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-RESOURCE" "8" "February 2021" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-RESOURCE" "8" "July 2021" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-resource\fR \- The resource abstraction layer shell

data/man/man8/puppet-script.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-SCRIPT" "8" "February 2021" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-SCRIPT" "8" "July 2021" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-script\fR \- Run a puppet manifests as a script without compiling a catalog

data/man/man8/puppet-ssl.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-SSL" "8" "February 2021" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-SSL" "8" "July 2021" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-ssl\fR \- Manage SSL keys and certificates for puppet SSL clients
@@ -52,4 +52,8 @@ Verify the private key and certificate are present and match, verify the certifi
 .TP
 clean
 Remove the private key and certificate related files for this host\. If \fB\-\-localca\fR is specified, then also remove this host\'s local copy of the CA certificate(s) and CRL bundle\. if \fB\-\-target CERTNAME\fR is specified, then remove the files for the specified device on this host instead of this host\.
+.
+.TP
+show
+Print the full\-text version of this host\'s certificate\.
 

data/man/man8/puppet-status.8

@@ -1,13 +1,13 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET\-STATUS" "8" "February 2021" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET\-STATUS" "8" "July 2021" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\-status\fR \- View puppet server status\.
 .
 .SH "SYNOPSIS"
-puppet status \fIaction\fR [\-\-terminus _TERMINUS] [\-\-extra HASH]
+puppet status \fIaction\fR [\-\-terminus _TERMINUS]
 .
 .SH "OPTIONS"
 Note that any setting that\'s valid in the configuration file is also a valid long argument, although it may or may not be relevant to the present action\. For example, \fBserver\fR and \fBrun_mode\fR are valid settings, so you can specify \fB\-\-server <servername>\fR, or \fB\-\-run_mode <runmode>\fR as an argument\.
@@ -48,7 +48,7 @@ The terminus for an action is often determined by context, but occasionally need
 \fBSYNOPSIS\fR
 .
 .IP
-puppet status [\-\-terminus _TERMINUS] [\-\-extra HASH] [\fIkey\fR]
+puppet status [\-\-terminus _TERMINUS] [\fIkey\fR]
 .
 .IP
 \fBDESCRIPTION\fR
@@ -76,7 +76,7 @@ This action requires that the server\'s \fBauth\.conf\fR file allow find access
 \fBSYNOPSIS\fR
 .
 .IP
-puppet status info [\-\-terminus _TERMINUS] [\-\-extra HASH]
+puppet status info [\-\-terminus _TERMINUS]
 .
 .IP
 \fBDESCRIPTION\fR

data/man/man8/puppet.8

@@ -1,7 +1,7 @@
 .\" generated with Ronn/v0.7.3
 .\" http://github.com/rtomayko/ronn/tree/0.7.3
 .
-.TH "PUPPET" "8" "February 2021" "Puppet, Inc." "Puppet manual"
+.TH "PUPPET" "8" "July 2021" "Puppet, Inc." "Puppet manual"
 .
 .SH "NAME"
 \fBpuppet\fR
@@ -25,4 +25,4 @@ Specialized:
 catalog Compile, save, view, and convert catalogs\. describe Display help about resource types device Manage remote network devices doc Generate Puppet references epp Interact directly with the EPP template parser/renderer\. facts Retrieve and store facts\. filebucket Store and retrieve files in a filebucket generate Generates Puppet code from Ruby definitions\. node View and manage node definitions\. parser Interact directly with the parser\. plugin Interact with the Puppet plugin system\. script Run a puppet manifests as a script without compiling a catalog ssl Manage SSL keys and certificates for puppet SSL clients
 .
 .P
-See \'puppet help \fIsubcommand\fR \fIaction\fR\' for help on a specific subcommand action\. See \'puppet help \fIsubcommand\fR\' for help on a specific subcommand\. Puppet v6\.21\.0
+See \'puppet help \fIsubcommand\fR \fIaction\fR\' for help on a specific subcommand action\. See \'puppet help \fIsubcommand\fR\' for help on a specific subcommand\. Puppet v6\.24\.0

data/spec/fixtures/ssl/127.0.0.1-key.pem

@@ -1,67 +1,117 @@
-Private-Key: (1024 bit)
+RSA Private-Key: (2048 bit, 2 primes)
 modulus:
-    00:98:34:bb:6c:44:52:00:23:29:ae:bb:7c:c9:91:
-    ec:6b:1c:83:b1:db:6c:b6:1b:12:fb:e3:f4:e4:20:
-    27:6c:c7:50:f9:ac:ef:f8:7a:de:00:4a:01:cb:ba:
-    9b:be:35:3c:e5:33:ef:32:79:61:1c:a6:70:23:19:
-    16:19:ae:33:e5:96:0a:70:3d:81:2f:b3:59:64:89:
-    45:ef:86:97:4d:00:9b:1d:68:9e:8d:5e:75:fb:69:
-    c0:1b:b2:06:1d:97:1a:27:30:38:3e:4f:11:04:70:
-    70:98:c1:6a:fc:93:a5:17:0f:fb:fe:42:31:af:f3:
-    6a:bc:51:dc:33:86:be:5f:c9
+    00:df:40:52:59:4f:eb:dd:d8:06:f5:c0:e8:eb:11:
+    52:31:80:a1:45:8e:3e:07:81:5c:cd:90:ea:2a:d0:
+    84:d3:6d:54:8a:78:0c:6b:34:eb:fc:dd:90:e9:9a:
+    5a:23:24:3b:31:99:17:d9:06:70:a8:51:95:68:50:
+    9d:59:aa:76:2f:28:18:99:81:be:ca:1d:79:75:8b:
+    85:3c:a4:05:39:06:f6:d8:25:13:54:e8:bb:d2:b4:
+    30:35:9e:10:64:2d:25:44:2a:f8:75:1f:60:ec:8a:
+    57:fc:fe:4d:57:f2:9c:e2:0d:6b:c5:f7:2d:ce:f5:
+    9e:93:f8:83:1a:b6:94:e3:c0:e2:b2:56:92:7e:e5:
+    d2:bd:f8:3c:9d:07:b4:85:93:77:5f:62:bd:ba:0e:
+    30:cc:77:46:07:2a:6a:aa:18:bf:0c:f0:23:ef:7d:
+    d9:84:86:35:3e:b5:76:1a:02:f3:9a:11:70:3f:f0:
+    6d:58:d1:2a:19:f8:e1:ed:77:ab:0a:e7:98:12:33:
+    5e:f9:b0:a8:f8:a5:98:c9:4e:3f:6c:01:8a:94:30:
+    c9:19:a1:29:46:18:5e:83:9f:9d:2a:cb:70:db:8a:
+    de:ca:2d:c1:47:82:ba:0b:20:b9:20:09:3c:1d:1c:
+    62:77:a7:85:83:5a:08:28:34:6b:75:e1:cd:7b:b7:
+    e7:e5
 publicExponent: 65537 (0x10001)
 privateExponent:
-    6a:b3:cd:10:c1:74:9b:14:0b:8c:ab:73:77:fc:0c:
-    b9:aa:6b:c8:ac:03:32:47:18:af:ed:c7:28:86:42:
-    1d:48:3d:c4:4b:30:90:09:d2:c8:71:19:81:31:79:
-    2d:87:35:01:99:be:fe:ab:89:21:04:ad:68:6d:95:
-    c8:bb:0f:35:b7:84:83:ce:32:fe:9e:98:b5:71:a0:
-    67:30:e5:17:1d:d9:c3:48:9b:a7:c1:f4:17:f8:4a:
-    bb:88:1b:94:2c:cc:5d:90:92:f8:6e:93:36:eb:42:
-    63:d0:c9:6f:04:e5:c1:2f:dc:a8:1f:19:ed:e5:b0:
-    45:23:ab:82:d4:0b:69:81
+    00:bc:48:9b:2b:07:e4:7d:2c:fc:71:b7:48:b9:37:
+    da:82:35:61:ce:2f:b0:d0:d3:a1:59:1d:a6:e0:85:
+    0c:00:e4:6c:30:7c:1e:bd:2b:dc:fb:5e:42:21:42:
+    34:52:fe:f3:8d:58:f8:6b:e8:aa:8a:ca:83:9f:7e:
+    9d:b6:49:b5:72:ff:f5:ff:41:15:8f:90:5c:27:6e:
+    8b:e8:20:cc:e6:d3:a0:cb:9a:39:3b:9b:2d:0c:ff:
+    3a:c9:7d:8d:85:6f:2d:c6:d8:16:c3:70:bb:65:c3:
+    27:82:0f:57:5b:9d:1a:02:ec:1e:c0:cf:3e:ab:15:
+    2b:b0:d0:1e:82:21:0a:61:29:70:2a:34:5b:15:18:
+    67:30:5e:88:ad:d9:e4:59:61:7f:cc:4b:b2:9a:cf:
+    ac:49:fe:49:63:0a:14:db:89:49:22:6f:64:8b:bc:
+    62:4d:61:44:05:be:cc:5c:0c:2f:0e:fa:5f:6a:2e:
+    10:64:a4:db:86:1a:a9:da:1a:0d:ce:57:ec:c1:03:
+    7a:00:bd:49:31:b4:8b:bd:56:99:a2:14:dd:78:82:
+    ea:09:9f:74:12:bd:45:56:b5:6e:ee:d6:69:47:68:
+    e6:6d:75:ea:87:e1:6a:88:8b:b1:c2:7a:ae:35:89:
+    a3:3c:86:97:d1:de:ba:14:2b:d0:d1:3e:d7:af:92:
+    86:01
 prime1:
-    00:c8:90:0e:0f:a2:ab:82:a7:e5:3a:69:dd:3a:e7:
-    a2:80:ef:b2:12:c5:fb:4b:a2:cf:b6:9a:41:8c:d8:
-    b5:76:05:c5:d3:c6:0e:1d:c6:1e:14:9f:14:21:53:
-    15:08:42:70:12:12:36:1e:0d:be:b8:5d:ce:46:66:
-    0b:fc:1a:dd:95
+    00:fc:aa:e9:66:8b:09:55:59:35:21:19:ff:72:8a:
+    47:cc:ed:36:24:3a:6c:ee:81:75:cd:aa:6d:af:1f:
+    4d:83:a5:e5:77:c8:a2:de:72:11:a0:72:af:79:0a:
+    b5:b0:e5:e4:28:75:11:b5:56:eb:86:32:f0:32:1f:
+    1d:a8:26:9f:40:d7:6c:ae:7c:7d:90:27:39:95:0f:
+    6b:0a:91:3e:03:c1:e8:04:01:2e:16:a0:dc:6e:70:
+    9f:1a:17:c1:7e:65:ea:4c:2d:33:00:23:83:d9:3b:
+    f7:a5:0b:5f:f5:a9:65:7d:bd:1e:79:e9:24:62:a3:
+    49:d7:d2:6f:5f:9e:2e:03:75
 prime2:
-    00:c2:46:ec:9d:fc:0b:1c:e7:c4:b3:2a:eb:ff:64:
-    8e:2d:32:f7:f5:9c:bf:60:46:ca:46:db:91:33:fb:
-    47:8a:c4:2c:c7:4a:b0:34:cb:34:1b:93:bd:aa:3a:
-    3a:a4:b8:f6:4e:4b:b7:23:03:bb:07:43:6e:39:31:
-    61:ce:0c:24:65
+    00:e2:32:17:38:94:ba:d3:63:eb:a3:83:77:09:4f:
+    ef:52:ef:ce:1e:86:b2:4e:bc:30:eb:67:f2:c1:aa:
+    be:04:fd:c5:76:43:15:e7:7f:f7:c7:a3:6f:e9:e3:
+    df:7e:ad:9c:a1:eb:ee:dc:ad:6d:bc:4e:88:1c:d4:
+    d1:5c:1d:21:f0:7a:19:4d:cc:0d:4b:37:08:34:8d:
+    ac:1c:fd:3a:e9:f3:5e:f3:f2:5a:1c:15:76:38:d3:
+    ff:b5:2f:fd:59:37:c6:86:6e:29:4b:10:01:75:f0:
+    5e:46:aa:ab:32:e3:0f:4c:72:e7:36:d7:5a:9b:76:
+    e2:08:09:32:49:30:ac:f4:b1
 exponent1:
-    14:08:5f:7f:2c:4e:59:44:8f:de:df:c8:1b:24:1b:
-    d5:29:1b:ee:48:1c:2b:97:dd:8b:6d:a8:f2:7a:8a:
-    d5:79:0a:23:76:fa:dd:fa:75:f2:b5:58:fb:63:23:
-    0c:aa:26:2b:87:ea:23:e2:57:94:6e:ba:35:c9:e7:
-    94:8c:d2:69
+    44:c4:8b:a3:d2:21:a7:2e:11:6c:c1:f3:a9:8c:03:
+    40:be:2b:27:2f:13:a8:d2:69:6a:a1:81:1a:d1:ad:
+    3a:30:73:c4:e7:41:94:c3:7d:12:ab:44:20:f0:8e:
+    44:e8:3c:f1:d9:f3:08:e4:f0:53:65:17:c4:bc:7d:
+    48:df:c2:26:56:bb:88:bd:ef:3a:c5:c2:41:54:a1:
+    f0:8d:59:50:92:7d:00:62:05:d6:38:cf:e5:eb:17:
+    12:75:f6:be:dd:24:28:b9:80:91:00:19:89:8d:6d:
+    b8:68:e1:24:2e:87:a5:f2:4c:12:28:27:34:05:77:
+    3a:9b:56:9e:b2:a1:99:65
 exponent2:
-    50:c3:c5:68:64:38:86:7a:bf:a6:30:68:cd:d2:92:
-    dc:ad:7c:b1:c9:c9:31:90:1c:55:5a:c0:41:98:ec:
-    03:ff:4c:12:49:b5:79:2d:24:eb:75:fe:fa:3e:9c:
-    d4:8f:e4:2d:66:82:aa:f6:c9:10:da:f2:7e:aa:4d:
-    db:a7:e6:95
+    00:d3:3b:d7:f7:9c:dd:43:9f:e2:64:56:d7:09:39:
+    3e:d4:02:e2:48:1b:9d:d4:6d:66:79:d0:1f:21:c0:
+    e3:a7:21:9e:0f:ac:e2:7d:c8:41:8a:8c:14:6d:25:
+    c2:87:38:76:37:b8:6e:de:62:8f:41:f5:4c:a3:30:
+    13:3b:a4:71:17:73:ce:c1:9a:37:27:f0:82:97:21:
+    5e:83:cb:f0:02:9e:a6:23:c6:45:64:48:9e:98:bf:
+    51:e2:d0:a8:15:73:42:d0:33:7c:18:7f:1f:fe:15:
+    b4:d4:e5:78:ef:12:a0:2c:d2:79:1d:fb:ca:bf:b8:
+    2b:a9:39:7d:5e:60:38:84:61
 coefficient:
-    45:11:a8:a2:ab:92:a6:f2:42:b3:7f:09:8d:ae:45:
-    25:e5:c6:24:9e:80:ea:58:b5:d7:44:7f:84:47:6b:
-    4d:da:f0:f3:4c:60:5b:9d:18:64:b2:89:2c:1e:b2:
-    60:35:58:ef:90:6f:b5:12:d7:0e:d7:7b:4a:62:ac:
-    38:b4:12:80
+    0b:f3:f3:f2:06:4d:f4:8d:dc:88:d0:da:24:f1:03:
+    4a:5f:91:40:29:ff:85:be:a1:6c:e2:00:ac:05:46:
+    79:db:9d:b6:5f:7e:92:a7:cb:f1:77:e6:4e:c6:b9:
+    ee:76:0e:fe:c3:ba:91:69:00:75:dc:d6:76:2e:f1:
+    dd:1b:75:5d:3b:f4:6b:d6:a2:3d:bf:8e:49:45:0f:
+    b1:4e:c6:e5:fb:c3:91:05:92:51:b1:c1:59:97:e0:
+    1a:a5:c9:ee:3f:af:32:dc:0c:4a:00:37:04:94:64:
+    fa:97:ab:47:17:fe:ce:bb:d4:6c:02:26:5d:41:1f:
+    42:8b:06:d9:e0:a0:ae:68
 -----BEGIN RSA PRIVATE KEY-----
-MIICWwIBAAKBgQCYNLtsRFIAIymuu3zJkexrHIOx22y2GxL74/TkICdsx1D5rO/4
-et4ASgHLupu+NTzlM+8yeWEcpnAjGRYZrjPllgpwPYEvs1lkiUXvhpdNAJsdaJ6N
-XnX7acAbsgYdlxonMDg+TxEEcHCYwWr8k6UXD/v+QjGv82q8Udwzhr5fyQIDAQAB
-AoGAarPNEMF0mxQLjKtzd/wMuapryKwDMkcYr+3HKIZCHUg9xEswkAnSyHEZgTF5
-LYc1AZm+/quJIQStaG2VyLsPNbeEg84y/p6YtXGgZzDlFx3Zw0ibp8H0F/hKu4gb
-lCzMXZCS+G6TNutCY9DJbwTlwS/cqB8Z7eWwRSOrgtQLaYECQQDIkA4PoquCp+U6
-ad0656KA77ISxftLos+2mkGM2LV2BcXTxg4dxh4UnxQhUxUIQnASEjYeDb64Xc5G
-Zgv8Gt2VAkEAwkbsnfwLHOfEsyrr/2SOLTL39Zy/YEbKRtuRM/tHisQsx0qwNMs0
-G5O9qjo6pLj2Tku3IwO7B0NuOTFhzgwkZQJAFAhffyxOWUSP3t/IGyQb1Skb7kgc
-K5fdi22o8nqK1XkKI3b63fp18rVY+2MjDKomK4fqI+JXlG66NcnnlIzSaQJAUMPF
-aGQ4hnq/pjBozdKS3K18scnJMZAcVVrAQZjsA/9MEkm1eS0k63X++j6c1I/kLWaC
-qvbJENryfqpN26fmlQJARRGooquSpvJCs38Jja5FJeXGJJ6A6li110R/hEdrTdrw
-80xgW50YZLKJLB6yYDVY75BvtRLXDtd7SmKsOLQSgA==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 -----END RSA PRIVATE KEY-----

data/spec/fixtures/ssl/127.0.0.1.pem

@@ -1,48 +1,69 @@
 Certificate:
     Data:
         Version: 3 (0x2)
-        Serial Number: 3 (0x3)
-    Signature Algorithm: sha256WithRSAEncryption
+        Serial Number: 5 (0x5)
+        Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Test CA
         Validity
             Not Before: Jan  1 00:00:00 1970 GMT
-            Not After : Apr 19 22:31:22 2029 GMT
+            Not After : Jun 15 01:19:37 2031 GMT
         Subject: CN=127.0.0.1
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:98:34:bb:6c:44:52:00:23:29:ae:bb:7c:c9:91:
-                    ec:6b:1c:83:b1:db:6c:b6:1b:12:fb:e3:f4:e4:20:
-                    27:6c:c7:50:f9:ac:ef:f8:7a:de:00:4a:01:cb:ba:
-                    9b:be:35:3c:e5:33:ef:32:79:61:1c:a6:70:23:19:
-                    16:19:ae:33:e5:96:0a:70:3d:81:2f:b3:59:64:89:
-                    45:ef:86:97:4d:00:9b:1d:68:9e:8d:5e:75:fb:69:
-                    c0:1b:b2:06:1d:97:1a:27:30:38:3e:4f:11:04:70:
-                    70:98:c1:6a:fc:93:a5:17:0f:fb:fe:42:31:af:f3:
-                    6a:bc:51:dc:33:86:be:5f:c9
+                    00:df:40:52:59:4f:eb:dd:d8:06:f5:c0:e8:eb:11:
+                    52:31:80:a1:45:8e:3e:07:81:5c:cd:90:ea:2a:d0:
+                    84:d3:6d:54:8a:78:0c:6b:34:eb:fc:dd:90:e9:9a:
+                    5a:23:24:3b:31:99:17:d9:06:70:a8:51:95:68:50:
+                    9d:59:aa:76:2f:28:18:99:81:be:ca:1d:79:75:8b:
+                    85:3c:a4:05:39:06:f6:d8:25:13:54:e8:bb:d2:b4:
+                    30:35:9e:10:64:2d:25:44:2a:f8:75:1f:60:ec:8a:
+                    57:fc:fe:4d:57:f2:9c:e2:0d:6b:c5:f7:2d:ce:f5:
+                    9e:93:f8:83:1a:b6:94:e3:c0:e2:b2:56:92:7e:e5:
+                    d2:bd:f8:3c:9d:07:b4:85:93:77:5f:62:bd:ba:0e:
+                    30:cc:77:46:07:2a:6a:aa:18:bf:0c:f0:23:ef:7d:
+                    d9:84:86:35:3e:b5:76:1a:02:f3:9a:11:70:3f:f0:
+                    6d:58:d1:2a:19:f8:e1:ed:77:ab:0a:e7:98:12:33:
+                    5e:f9:b0:a8:f8:a5:98:c9:4e:3f:6c:01:8a:94:30:
+                    c9:19:a1:29:46:18:5e:83:9f:9d:2a:cb:70:db:8a:
+                    de:ca:2d:c1:47:82:ba:0b:20:b9:20:09:3c:1d:1c:
+                    62:77:a7:85:83:5a:08:28:34:6b:75:e1:cd:7b:b7:
+                    e7:e5
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Alternative Name: 
                 DNS:127.0.0.1, DNS:127.0.0.2
     Signature Algorithm: sha256WithRSAEncryption
-         a0:40:1e:cc:ed:75:47:4b:3a:a6:05:fb:a6:29:22:cd:f9:28:
-         4c:f3:3d:0c:e2:df:6c:91:68:52:1b:df:d4:9d:88:36:e9:db:
-         ca:94:a4:14:d9:2a:bb:b6:f7:a9:4a:70:f7:db:d7:86:e4:82:
-         e4:dd:08:77:03:7b:fb:99:24:fd:15:44:b5:05:dd:b3:ff:dc:
-         e0:b4:e8:92:7f:58:b3:2f:48:ba:80:c9:a6:1c:c8:8e:99:e1:
-         52:f4:52:90:ad:44:8b:89:39:a1:51:67:15:99:a2:f5:76:75:
-         b4:12:f5:5e:99:e7:8b:7b:b1:9d:04:63:31:33:36:0d:a8:67:
-         00:42
+         6f:ef:ac:da:0b:a5:4f:d0:30:57:0c:8c:5a:90:be:18:11:ec:
+         e0:25:c2:0e:ef:05:cb:b5:50:43:ba:b7:25:1c:26:60:e8:ad:
+         b6:a5:1a:6a:2b:e2:66:e1:3a:b6:00:80:39:e1:19:ef:c2:e8:
+         fd:f2:04:0e:ed:fa:1e:e5:f8:f1:32:dc:4e:47:7e:43:a4:09:
+         3a:24:b4:fe:ab:7e:d6:b2:d4:4e:e0:9f:e5:c9:79:9b:87:f4:
+         7b:3d:40:a4:cf:0e:03:5c:dc:14:82:bf:1b:32:9a:18:0c:5b:
+         94:2d:1f:41:b6:a5:e7:89:d7:3b:dc:c8:17:f6:0e:ea:2d:7b:
+         a6:04:02:08:9a:b6:3d:66:03:67:16:94:2d:36:13:ee:61:18:
+         f9:17:04:6e:16:f3:65:9b:5c:34:ed:49:d8:6e:26:58:ca:68:
+         3f:2c:bb:0e:42:64:93:a7:8c:d4:d9:15:ae:fb:0f:f7:f7:ce:
+         be:99:6f:40:90:bf:e4:44:c5:44:4a:09:9a:8f:da:f6:b5:a6:
+         63:af:6b:37:ee:7c:b7:69:b6:67:76:98:f1:69:18:8e:2c:45:
+         bb:04:82:d9:03:31:85:c6:61:d3:38:60:39:45:43:a9:7b:d7:
+         f5:fd:18:f2:ec:43:42:0b:69:b8:c5:84:05:ae:a2:02:d3:19:
+         80:bd:88:a5
 -----BEGIN CERTIFICATE-----
-MIIBvzCCASigAwIBAgIBAzANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdUZXN0
-IENBMB4XDTcwMDEwMTAwMDAwMFoXDTI5MDQxOTIyMzEyMlowFDESMBAGA1UEAwwJ
-MTI3LjAuMC4xMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCYNLtsRFIAIymu
-u3zJkexrHIOx22y2GxL74/TkICdsx1D5rO/4et4ASgHLupu+NTzlM+8yeWEcpnAj
-GRYZrjPllgpwPYEvs1lkiUXvhpdNAJsdaJ6NXnX7acAbsgYdlxonMDg+TxEEcHCY
-wWr8k6UXD/v+QjGv82q8Udwzhr5fyQIDAQABoyMwITAfBgNVHREEGDAWggkxMjcu
-MC4wLjGCCTEyNy4wLjAuMjANBgkqhkiG9w0BAQsFAAOBgQCgQB7M7XVHSzqmBfum
-KSLN+ShM8z0M4t9skWhSG9/UnYg26dvKlKQU2Sq7tvepSnD329eG5ILk3Qh3A3v7
-mST9FUS1Bd2z/9zgtOiSf1izL0i6gMmmHMiOmeFS9FKQrUSLiTmhUWcVmaL1dnW0
-EvVemeeLe7GdBGMxMzYNqGcAQg==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 -----END CERTIFICATE-----

data/spec/fixtures/ssl/bad-basic-constraints.pem

@@ -1,26 +1,35 @@
 Certificate:
     Data:
         Version: 3 (0x2)
-        Serial Number: 8 (0x8)
-    Signature Algorithm: sha256WithRSAEncryption
+        Serial Number: 11 (0xb)
+        Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Test CA
         Validity
             Not Before: Jan  1 00:00:00 1970 GMT
-            Not After : Apr 19 22:31:22 2029 GMT
+            Not After : Jun 15 01:19:37 2031 GMT
         Subject: CN=Test CA
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:d0:b3:d8:3f:2b:c0:45:8c:f0:3d:96:58:2c:5e:
-                    0e:6a:46:81:ab:10:2f:22:9c:7c:69:f0:61:b7:2d:
-                    f2:2f:46:97:d5:d9:1b:08:c8:c9:e8:18:a5:d8:89:
-                    27:a7:80:cb:0a:8e:ee:26:32:89:70:37:2b:bf:6f:
-                    7e:ee:12:7d:49:c7:0c:19:46:7c:65:99:dc:1f:1a:
-                    31:af:ab:87:01:b3:68:8a:5b:51:a7:78:ca:cc:1d:
-                    7c:26:b4:27:5f:67:75:99:7e:9f:16:ed:88:b3:8f:
-                    77:0f:b3:e8:b3:97:bc:70:8b:ec:62:b9:a2:47:4b:
-                    ef:dc:af:d4:9f:3d:17:cd:03
+                    00:b0:eb:f6:b5:c4:28:a8:18:53:85:91:20:76:5d:
+                    aa:be:78:ae:10:60:d3:b5:66:f7:41:c8:bf:42:00:
+                    c8:99:63:ed:d0:92:12:5a:71:c0:da:d2:fd:b3:65:
+                    3b:a5:fa:be:0d:e5:2a:20:2f:df:a1:c5:41:c3:c3:
+                    9c:04:eb:07:6c:8d:48:9c:14:be:24:81:7d:03:4d:
+                    56:62:80:6b:34:e0:ad:68:f0:17:3d:fa:3b:b4:f7:
+                    a9:a3:fb:7d:30:0d:dd:c5:0b:b6:32:b6:c2:d9:b1:
+                    e8:97:ce:19:66:89:1b:5d:d6:4a:d9:0e:a6:b2:ad:
+                    cc:57:e9:0a:12:83:98:a3:18:90:a3:ae:ec:8e:a1:
+                    96:ee:a4:36:7b:13:c4:95:45:02:69:89:f4:d3:49:
+                    17:e6:e4:d5:91:23:24:7e:94:52:b5:4f:f3:0b:11:
+                    d8:b2:69:7e:72:25:88:03:15:7b:2f:64:ca:8c:a9:
+                    ce:b0:ed:eb:00:aa:68:af:cd:e4:1c:13:af:a7:ff:
+                    54:b6:7d:be:b5:6c:bd:6a:20:be:47:2f:a8:dd:7a:
+                    1d:2a:44:a4:0b:15:eb:68:85:05:32:17:01:cf:a7:
+                    27:03:cb:85:12:c1:ec:4f:c1:4b:2a:11:34:55:7c:
+                    b3:6c:fa:79:6d:4f:be:31:92:b8:f3:01:90:8e:42:
+                    6b:71
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: critical
@@ -28,32 +37,45 @@ Certificate:
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
             X509v3 Subject Key Identifier: 
-                2C:25:19:A1:6C:B3:F7:69:FD:76:9B:3A:22:CB:0C:56:01:01:F1:31
+                B2:EE:24:88:34:99:18:60:81:9E:2A:D3:F4:5A:66:FA:91:F6:E1:C6
             Netscape Comment: 
                 Puppet Server Internal Certificate
             X509v3 Authority Key Identifier: 
-                keyid:2C:25:19:A1:6C:B3:F7:69:FD:76:9B:3A:22:CB:0C:56:01:01:F1:31
+                keyid:B2:EE:24:88:34:99:18:60:81:9E:2A:D3:F4:5A:66:FA:91:F6:E1:C6
 
     Signature Algorithm: sha256WithRSAEncryption
-         12:60:01:ec:ea:6c:bc:d6:4e:e7:40:b6:9f:cd:8c:6e:6d:42:
-         4f:d8:db:42:f8:8d:04:09:48:ad:22:50:e5:de:7f:ec:d5:19:
-         21:3f:6b:d0:85:d4:75:20:18:a7:cc:a0:7c:b2:08:6f:d6:7b:
-         a7:63:22:25:1b:f8:20:66:ea:b7:40:09:25:05:7b:61:6d:a1:
-         4f:af:72:51:c9:c8:42:87:04:ab:6e:b6:98:ed:f9:9c:98:64:
-         dc:78:e0:f1:21:16:46:93:67:89:af:a7:da:b4:8d:b7:11:a8:
-         9a:9b:66:be:a4:7f:71:84:57:b4:2b:3c:56:e0:37:f9:6a:29:
-         cd:4a
+         82:de:f4:cb:97:76:b0:a7:52:71:6c:94:4c:e6:8d:d6:e5:32:
+         1d:ca:99:44:9c:a2:b5:e4:a5:ba:06:08:6b:e7:b5:55:76:02:
+         7e:ee:69:6a:0d:27:69:7b:e3:80:97:10:9c:40:98:13:e4:d1:
+         40:b6:e6:59:1d:c2:1c:6e:64:ba:b5:af:7b:aa:70:d7:34:1b:
+         d3:cb:9f:2b:c0:72:36:70:ad:04:a0:07:9c:dd:e5:fa:02:b3:
+         c9:f1:f0:6a:99:89:95:20:e2:31:7f:21:2e:8b:b8:76:5e:31:
+         82:ec:4b:31:43:e7:20:d9:97:0f:52:8e:26:1d:0b:31:2d:f6:
+         74:40:6b:09:cf:39:e8:d9:c8:27:ed:9d:76:a5:b2:2a:83:db:
+         16:8e:5f:ee:e7:90:44:68:34:92:33:bd:39:7c:96:8f:e3:61:
+         78:b5:4e:59:d8:12:0a:0d:90:17:22:7c:0e:34:bb:ad:94:66:
+         07:d5:4f:d9:79:34:6f:12:c1:77:69:a1:20:ae:cc:b0:2e:e9:
+         9c:bb:94:89:70:ee:d0:14:1c:05:89:40:76:bb:47:64:83:24:
+         73:95:cc:f1:65:ee:f8:bf:55:f0:c3:e6:34:6b:07:09:67:3e:
+         03:01:8d:ba:cb:5d:5b:89:d6:e3:cb:ce:55:dc:ad:8d:7f:de:
+         c6:5a:7c:9f
 -----BEGIN CERTIFICATE-----
-MIICLzCCAZigAwIBAgIBCDANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdUZXN0
-IENBMB4XDTcwMDEwMTAwMDAwMFoXDTI5MDQxOTIyMzEyMlowEjEQMA4GA1UEAwwH
-VGVzdCBDQTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA0LPYPyvARYzwPZZY
-LF4OakaBqxAvIpx8afBhty3yL0aX1dkbCMjJ6Bil2Iknp4DLCo7uJjKJcDcrv29+
-7hJ9SccMGUZ8ZZncHxoxr6uHAbNoiltRp3jKzB18JrQnX2d1mX6fFu2Is493D7Po
-s5e8cIvsYrmiR0vv3K/Unz0XzQMCAwEAAaOBlDCBkTAMBgNVHRMBAf8EAjAAMA4G
-A1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQULCUZoWyz92n9dps6IssMVgEB8TEwMQYJ
-YIZIAYb4QgENBCQWIlB1cHBldCBTZXJ2ZXIgSW50ZXJuYWwgQ2VydGlmaWNhdGUw
-HwYDVR0jBBgwFoAULCUZoWyz92n9dps6IssMVgEB8TEwDQYJKoZIhvcNAQELBQAD
-gYEAEmAB7OpsvNZO50C2n82Mbm1CT9jbQviNBAlIrSJQ5d5/7NUZIT9r0IXUdSAY
-p8ygfLIIb9Z7p2MiJRv4IGbqt0AJJQV7YW2hT69yUcnIQocEq262mO35nJhk3Hjg
-8SEWRpNnia+n2rSNtxGomptmvqR/cYRXtCs8VuA3+WopzUo=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 -----END CERTIFICATE-----