puppet 6.22.1-x86-mingw32 → 6.23.0-x86-mingw32

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.

This version of puppet might be problematic. Click here for more details.

Files changed (129) hide show
  1. checksums.yaml +4 -4
  2. data/Gemfile.lock +14 -14
  3. data/ext/osx/puppet.plist +2 -0
  4. data/lib/puppet/application/agent.rb +12 -5
  5. data/lib/puppet/application/apply.rb +2 -1
  6. data/lib/puppet/application/device.rb +2 -1
  7. data/lib/puppet/application/resource.rb +2 -1
  8. data/lib/puppet/application/script.rb +2 -1
  9. data/lib/puppet/configurer/downloader.rb +2 -1
  10. data/lib/puppet/defaults.rb +5 -3
  11. data/lib/puppet/file_serving/fileset.rb +14 -2
  12. data/lib/puppet/functions/all.rb +1 -1
  13. data/lib/puppet/functions/camelcase.rb +1 -1
  14. data/lib/puppet/functions/capitalize.rb +2 -2
  15. data/lib/puppet/functions/downcase.rb +2 -2
  16. data/lib/puppet/functions/get.rb +5 -5
  17. data/lib/puppet/functions/group_by.rb +13 -5
  18. data/lib/puppet/functions/lest.rb +1 -1
  19. data/lib/puppet/functions/new.rb +100 -100
  20. data/lib/puppet/functions/partition.rb +4 -4
  21. data/lib/puppet/functions/require.rb +5 -5
  22. data/lib/puppet/functions/sort.rb +3 -3
  23. data/lib/puppet/functions/tree_each.rb +7 -9
  24. data/lib/puppet/functions/type.rb +4 -4
  25. data/lib/puppet/functions/upcase.rb +2 -2
  26. data/lib/puppet/http/resolver/server_list.rb +15 -4
  27. data/lib/puppet/http/service/compiler.rb +69 -0
  28. data/lib/puppet/http/service/file_server.rb +2 -1
  29. data/lib/puppet/indirector/catalog/compiler.rb +1 -0
  30. data/lib/puppet/indirector/file_metadata/rest.rb +1 -0
  31. data/lib/puppet/parser/functions/fqdn_rand.rb +14 -6
  32. data/lib/puppet/pops/types/p_sem_ver_type.rb +8 -2
  33. data/lib/puppet/pops/types/p_sensitive_type.rb +10 -0
  34. data/lib/puppet/provider/package/nim.rb +11 -6
  35. data/lib/puppet/provider/service/systemd.rb +13 -3
  36. data/lib/puppet/provider/service/windows.rb +38 -0
  37. data/lib/puppet/provider/user/directoryservice.rb +25 -12
  38. data/lib/puppet/reference/configuration.rb +1 -1
  39. data/lib/puppet/transaction/additional_resource_generator.rb +1 -1
  40. data/lib/puppet/type/file/selcontext.rb +1 -1
  41. data/lib/puppet/type/file.rb +19 -1
  42. data/lib/puppet/type/service.rb +18 -38
  43. data/lib/puppet/type/tidy.rb +21 -2
  44. data/lib/puppet/type/user.rb +38 -20
  45. data/lib/puppet/util/selinux.rb +30 -4
  46. data/lib/puppet/version.rb +1 -1
  47. data/locales/puppet.pot +109 -101
  48. data/man/man5/puppet.conf.5 +272 -252
  49. data/man/man8/puppet-agent.8 +1 -1
  50. data/man/man8/puppet-apply.8 +1 -1
  51. data/man/man8/puppet-catalog.8 +1 -1
  52. data/man/man8/puppet-config.8 +1 -1
  53. data/man/man8/puppet-describe.8 +1 -1
  54. data/man/man8/puppet-device.8 +1 -1
  55. data/man/man8/puppet-doc.8 +1 -1
  56. data/man/man8/puppet-epp.8 +1 -1
  57. data/man/man8/puppet-facts.8 +1 -1
  58. data/man/man8/puppet-filebucket.8 +1 -1
  59. data/man/man8/puppet-generate.8 +1 -1
  60. data/man/man8/puppet-help.8 +1 -1
  61. data/man/man8/puppet-key.8 +1 -1
  62. data/man/man8/puppet-lookup.8 +1 -1
  63. data/man/man8/puppet-man.8 +1 -1
  64. data/man/man8/puppet-module.8 +1 -1
  65. data/man/man8/puppet-node.8 +1 -1
  66. data/man/man8/puppet-parser.8 +1 -1
  67. data/man/man8/puppet-plugin.8 +1 -1
  68. data/man/man8/puppet-report.8 +1 -1
  69. data/man/man8/puppet-resource.8 +1 -1
  70. data/man/man8/puppet-script.8 +1 -1
  71. data/man/man8/puppet-ssl.8 +1 -1
  72. data/man/man8/puppet-status.8 +1 -1
  73. data/man/man8/puppet.8 +2 -2
  74. data/spec/fixtures/ssl/127.0.0.1-key.pem +107 -57
  75. data/spec/fixtures/ssl/127.0.0.1.pem +52 -31
  76. data/spec/fixtures/ssl/bad-basic-constraints.pem +57 -35
  77. data/spec/fixtures/ssl/bad-int-basic-constraints.pem +57 -35
  78. data/spec/fixtures/ssl/ca.pem +57 -35
  79. data/spec/fixtures/ssl/crl.pem +28 -18
  80. data/spec/fixtures/ssl/ec-key.pem +11 -11
  81. data/spec/fixtures/ssl/ec.pem +33 -24
  82. data/spec/fixtures/ssl/encrypted-ec-key.pem +12 -12
  83. data/spec/fixtures/ssl/encrypted-key.pem +108 -58
  84. data/spec/fixtures/ssl/intermediate-agent-crl.pem +28 -19
  85. data/spec/fixtures/ssl/intermediate-agent.pem +57 -36
  86. data/spec/fixtures/ssl/intermediate-crl.pem +31 -21
  87. data/spec/fixtures/ssl/intermediate.pem +57 -36
  88. data/spec/fixtures/ssl/pluto-key.pem +107 -57
  89. data/spec/fixtures/ssl/pluto.pem +52 -30
  90. data/spec/fixtures/ssl/request-key.pem +107 -57
  91. data/spec/fixtures/ssl/request.pem +47 -26
  92. data/spec/fixtures/ssl/revoked-key.pem +107 -57
  93. data/spec/fixtures/ssl/revoked.pem +52 -30
  94. data/spec/fixtures/ssl/signed-key.pem +107 -57
  95. data/spec/fixtures/ssl/signed.pem +52 -30
  96. data/spec/fixtures/ssl/tampered-cert.pem +52 -30
  97. data/spec/fixtures/ssl/tampered-csr.pem +47 -26
  98. data/spec/fixtures/ssl/unknown-127.0.0.1-key.pem +107 -57
  99. data/spec/fixtures/ssl/unknown-127.0.0.1.pem +50 -29
  100. data/spec/fixtures/ssl/unknown-ca-key.pem +107 -57
  101. data/spec/fixtures/ssl/unknown-ca.pem +55 -33
  102. data/spec/integration/application/resource_spec.rb +30 -0
  103. data/spec/lib/puppet/test_ca.rb +2 -2
  104. data/spec/unit/application/agent_spec.rb +7 -2
  105. data/spec/unit/configurer/downloader_spec.rb +6 -0
  106. data/spec/unit/configurer_spec.rb +23 -0
  107. data/spec/unit/file_serving/fileset_spec.rb +60 -0
  108. data/spec/unit/gettext/config_spec.rb +12 -0
  109. data/spec/unit/http/service/compiler_spec.rb +123 -0
  110. data/spec/unit/indirector/catalog/compiler_spec.rb +14 -10
  111. data/spec/unit/parser/functions/fqdn_rand_spec.rb +15 -1
  112. data/spec/unit/pops/types/p_sem_ver_type_spec.rb +18 -0
  113. data/spec/unit/pops/types/p_sensitive_type_spec.rb +18 -0
  114. data/spec/unit/provider/package/nim_spec.rb +42 -0
  115. data/spec/unit/provider/service/init_spec.rb +1 -0
  116. data/spec/unit/provider/service/openwrt_spec.rb +3 -1
  117. data/spec/unit/provider/service/systemd_spec.rb +42 -8
  118. data/spec/unit/provider/service/windows_spec.rb +202 -0
  119. data/spec/unit/provider/user/directoryservice_spec.rb +67 -35
  120. data/spec/unit/ssl/state_machine_spec.rb +19 -5
  121. data/spec/unit/transaction/additional_resource_generator_spec.rb +0 -2
  122. data/spec/unit/transaction_spec.rb +18 -20
  123. data/spec/unit/type/file/selinux_spec.rb +3 -3
  124. data/spec/unit/type/service_spec.rb +59 -188
  125. data/spec/unit/type/tidy_spec.rb +17 -7
  126. data/spec/unit/type/user_spec.rb +45 -0
  127. data/spec/unit/util/selinux_spec.rb +87 -16
  128. data/tasks/generate_cert_fixtures.rake +2 -2
  129. metadata +4 -2
data/spec/fixtures/ssl/encrypted-key.pem CHANGED
@@ -1,70 +1,120 @@
1
- Private-Key: (1024 bit)
1
+ RSA Private-Key: (2048 bit, 2 primes)
2
2
  modulus:
3
- 00:ef:bc:2c:47:fa:12:2d:09:ef:16:96:90:8b:84:
4
- 45:c7:86:f1:5e:8f:58:59:23:87:df:a1:e3:be:8c:
5
- 2f:ad:70:96:1a:f5:67:7f:5c:9c:54:5e:82:de:05:
6
- 7f:8f:9d:c9:f3:24:72:39:4f:1c:b4:a6:e0:d0:19:
7
- af:bd:e4:29:65:bb:d7:43:3e:66:d3:4f:74:05:0b:
8
- 8a:e4:d5:52:08:af:9b:f4:f4:7d:6c:92:5f:cc:bb:
9
- c2:2d:ca:d0:12:28:e5:c8:fd:f6:09:90:dd:85:f9:
10
- 85:d9:37:a6:fe:83:c7:24:e4:af:28:e3:ff:5a:1b:
11
- 72:5f:29:c6:39:88:5b:48:19
3
+ 00:db:90:d7:cf:fe:81:bc:51:d1:a1:d2:d9:0f:c2:
4
+ 21:16:06:3d:12:87:7c:e9:45:97:28:f4:33:12:51:
5
+ d2:b3:31:be:13:5d:28:a8:b5:fb:8f:0e:ce:3e:bb:
6
+ 42:7a:3f:ba:35:e9:58:2a:fb:61:38:c0:6b:37:9f:
7
+ 3f:de:b9:64:5b:c3:08:21:64:d7:c2:af:0a:ac:21:
8
+ 0b:ed:c1:8a:71:fe:05:27:eb:4b:31:ba:79:62:e5:
9
+ 41:ef:dd:66:85:76:28:bb:03:08:c7:35:26:85:c2:
10
+ f8:3b:1f:67:45:39:73:ce:d8:5d:df:4a:0b:4e:8c:
11
+ 85:29:02:98:04:95:e9:d3:f6:d1:9f:6c:25:ce:a3:
12
+ 81:4c:c7:4d:b5:ce:43:12:d9:b2:f1:68:c8:fd:a3:
13
+ 57:16:f5:7a:42:85:fe:19:b5:ee:e8:3f:da:27:85:
14
+ 82:c9:ec:d6:63:bf:cd:4b:75:1e:a0:c5:8f:ce:90:
15
+ b8:ca:25:ba:45:52:6d:e4:ea:6d:e5:1d:41:8e:4f:
16
+ 33:4a:97:23:8e:c1:98:d4:60:a7:1e:1c:28:31:0d:
17
+ 05:c8:a2:d2:d7:7a:d9:c3:46:26:a1:e7:ef:67:e7:
18
+ 6b:ce:97:8a:37:0b:d7:e2:28:b0:33:85:b0:89:6b:
19
+ 38:83:ae:a3:02:a7:d2:1a:87:f0:88:a6:a3:1a:db:
20
+ 97:53
12
21
  publicExponent: 65537 (0x10001)
13
22
  privateExponent:
14
- 75:11:3b:c2:6e:30:60:04:00:d7:d3:f0:83:e0:b4:
15
- be:89:7b:e6:84:33:4d:5c:17:66:b2:44:67:71:47:
16
- 7a:f7:86:a5:65:7f:03:e7:b2:83:54:9f:ad:51:9c:
17
- 08:02:b2:72:64:32:cf:1f:7d:d2:0d:c7:ac:77:4e:
18
- a5:78:fc:69:3a:88:12:5b:81:81:19:c9:1f:9d:aa:
19
- fa:35:2e:cd:df:71:ee:50:f9:59:53:99:52:22:f7:
20
- 48:ba:17:4f:47:b5:72:16:47:d1:1d:31:29:47:80:
21
- b1:e1:3c:e0:a0:4b:ef:05:c5:ea:0a:b2:c7:4a:b9:
22
- d3:06:c0:b7:7b:0a:2e:81
23
+ 00:9d:74:93:af:8f:1e:4e:84:86:46:fc:43:b9:2f:
24
+ 48:36:d9:26:76:e1:3e:cc:b2:a1:22:37:6d:60:97:
25
+ d8:f7:b4:96:50:a0:a0:05:cc:eb:a7:bd:c0:5d:f0:
26
+ 40:4e:16:e1:5c:c4:07:fc:5a:e5:6f:a3:5d:c0:37:
27
+ ad:bf:f5:47:69:1e:c5:f7:dc:af:75:e7:bd:49:8f:
28
+ 31:54:c1:54:9d:46:c3:3f:cb:56:d3:44:9c:c4:35:
29
+ 10:42:09:8d:f9:eb:b0:6d:dc:51:31:3a:86:73:aa:
30
+ 4c:05:6a:11:ce:ec:d2:85:e5:57:fc:46:c7:30:ff:
31
+ 48:87:0e:5b:21:fe:b7:fe:ce:4f:8c:2c:cf:ea:d1:
32
+ 0c:59:83:7e:d4:3f:db:0c:09:8d:8d:af:c5:38:8d:
33
+ 96:44:37:7c:a3:4f:79:09:fe:11:cb:cf:20:40:6c:
34
+ fd:a3:cc:d9:f2:f4:35:79:63:c3:f8:1c:c1:6e:d4:
35
+ 76:2b:67:84:4d:d3:af:81:72:17:ba:9d:98:0c:58:
36
+ 0a:c8:4d:8f:28:95:2b:fa:d9:31:1d:31:ad:c5:87:
37
+ 90:1b:2c:69:42:22:b1:1b:73:4a:22:82:af:b7:5b:
38
+ 82:b4:38:39:3b:f2:47:ef:3d:7d:09:9b:e8:5b:b5:
39
+ d8:56:1c:16:e7:3a:6e:7d:85:3f:1c:1d:3f:ee:dd:
40
+ f1:d1
23
41
  prime1:
24
- 00:fa:cc:b0:ba:9e:06:c5:f7:63:09:37:e7:9f:aa:
25
- 4d:f8:f1:b4:7f:aa:c6:8a:04:16:93:73:af:ba:1f:
26
- e3:97:76:11:a9:4d:fb:42:8b:f0:51:0a:7d:6c:69:
27
- fa:2f:d8:7b:ad:20:79:de:71:ea:e2:e0:a3:69:1b:
28
- 1e:e3:6c:9b:e9
42
+ 00:f2:0c:fe:99:b5:ed:bb:24:f6:79:61:75:f5:a8:
43
+ 9b:56:f9:f3:ee:5b:84:1c:31:00:5e:01:02:b4:50:
44
+ ea:fb:a8:13:22:73:c2:12:1b:c2:53:55:14:f3:2e:
45
+ a3:62:f8:82:04:4c:23:09:50:98:c1:ab:45:18:96:
46
+ c7:a4:e8:29:84:04:ab:24:37:17:45:0b:b3:02:7f:
47
+ c3:4a:30:3f:ad:69:49:0b:49:c5:89:e0:07:b7:b3:
48
+ d7:50:19:85:c0:f1:73:60:b4:76:f8:c2:c5:01:7c:
49
+ 09:23:49:57:2a:cc:d7:e1:d6:d9:b4:6b:54:20:61:
50
+ 7f:3a:70:9b:9d:01:12:fa:e7
29
51
  prime2:
30
- 00:f4:b4:bf:cf:56:a0:fa:94:15:5c:24:9c:45:fd:
31
- 54:31:72:75:7b:ef:d5:de:5b:64:c9:6a:88:42:e0:
32
- 0d:f0:63:c2:46:9e:59:81:be:60:ee:05:01:b0:dd:
33
- e4:12:d0:5b:77:76:c0:5b:f2:21:0c:5b:42:af:f5:
34
- c2:5b:c6:1c:b1
52
+ 00:e8:38:1f:fb:1b:f6:4d:e1:be:f0:80:c1:a1:55:
53
+ 2b:d1:db:09:98:cc:70:eb:99:f0:9e:0b:2c:2d:60:
54
+ 20:96:f7:b3:c5:6b:98:22:c5:bf:c3:20:5e:91:be:
55
+ d1:81:fc:14:36:70:9b:37:9e:6d:c8:6e:84:f6:fa:
56
+ 65:30:64:0e:b0:50:05:85:a8:07:0b:be:4e:de:c1:
57
+ 17:71:39:03:e3:9e:4e:69:5c:51:02:af:97:b8:30:
58
+ da:95:2e:24:b4:78:76:46:bc:db:a2:27:66:5a:ce:
59
+ e5:0f:01:82:fe:cb:31:bc:fe:19:6a:e5:73:b6:a5:
60
+ ad:3a:f3:61:ec:f7:a9:fe:b5
35
61
  exponent1:
36
- 15:d0:1f:be:db:67:b3:68:24:d0:f4:6f:cc:cf:3f:
37
- 20:db:c4:db:25:bb:46:dd:bc:28:ee:f2:e5:b9:48:
38
- 4e:30:12:b1:2a:fb:23:7a:90:58:3c:15:54:8c:93:
39
- 19:fe:36:23:84:a3:94:d9:4b:98:97:f9:1e:77:21:
40
- 64:9e:59:a1
62
+ 04:5d:93:a1:f6:14:09:92:0b:17:f9:58:05:4c:3b:
63
+ 31:00:65:13:e1:76:aa:83:7f:bc:32:4c:78:30:15:
64
+ 6c:e0:85:27:d3:ea:a6:24:f6:06:46:bc:8f:fe:41:
65
+ 58:21:9f:46:b0:90:d9:34:28:ed:25:47:a3:bf:e4:
66
+ 6d:e6:fa:08:b5:84:d8:ac:5d:b1:13:1a:f1:6a:98:
67
+ 7d:18:0d:ad:f4:fe:2a:43:f4:5a:1e:3e:45:63:ea:
68
+ f8:38:dd:9e:b3:3c:1f:7c:61:c0:ee:d2:5a:ca:7f:
69
+ e7:b1:04:ef:72:ae:5a:16:63:ea:cb:1c:c3:50:be:
70
+ d8:b0:fb:3d:83:ad:71:f5
41
71
  exponent2:
42
- 00:81:96:5e:a5:5c:48:ef:aa:10:0d:b5:cd:94:3a:
43
- ed:a5:29:ea:11:72:17:1e:23:e4:21:cd:ea:cf:0f:
44
- 7c:12:3b:a2:1c:67:ab:1a:cc:48:e4:83:7e:3b:bd:
45
- a6:14:58:86:b7:a3:09:87:27:98:5c:c4:cf:72:03:
46
- 81:a3:bc:2c:61
72
+ 69:f2:f9:7c:6b:44:94:42:14:08:cc:e6:0b:42:bd:
73
+ cc:70:80:4f:6b:af:75:7e:f5:ce:55:d0:a1:1f:43:
74
+ 9f:3d:82:92:e7:45:31:50:41:ee:b7:fd:0d:c8:1e:
75
+ f4:8c:5b:78:7f:26:02:59:51:43:6a:51:56:11:e6:
76
+ 4b:0e:cb:b8:db:b9:b9:42:71:7c:85:26:9c:f1:42:
77
+ 4d:d1:32:9a:0e:67:3e:20:f5:81:21:36:3a:be:67:
78
+ 6c:3a:f2:5a:38:bf:d6:04:62:bc:f7:f6:f6:25:81:
79
+ 52:b8:60:d8:f9:42:47:35:33:c9:96:c8:95:a3:bf:
80
+ 86:ae:f6:95:d4:65:86:25
47
81
  coefficient:
48
- 7d:b4:b6:78:c7:d3:0c:44:6f:a2:aa:83:8a:79:65:
49
- 69:24:b2:31:ac:59:ed:6c:bf:4c:1a:1a:27:f0:c8:
50
- e9:38:ff:84:50:df:b5:10:c2:6e:4b:5c:c2:4c:c9:
51
- 82:2a:db:0a:6f:59:dd:12:93:8c:c1:9d:57:f3:dd:
52
- 66:41:9a:e0
82
+ 28:91:92:b0:3c:bb:1c:58:e9:95:6c:70:fb:66:1d:
83
+ 19:b5:eb:ca:17:83:b9:b6:90:83:9f:18:e4:f2:69:
84
+ 72:e8:20:17:30:0f:dc:9c:4b:8a:9a:38:53:e1:c6:
85
+ 01:ff:bc:1b:2b:22:84:95:48:6f:9e:01:8e:6b:b6:
86
+ 50:f8:42:9d:76:67:e8:34:86:2d:b8:66:32:9d:01:
87
+ 8e:3a:a4:1d:3c:9a:02:85:a5:1d:74:ef:8d:6a:d2:
88
+ 2f:61:2c:e9:17:02:d7:22:9c:ee:8e:4c:cb:de:76:
89
+ 6d:c2:1c:17:af:a3:3c:6a:f2:6a:6a:9c:b5:fb:9b:
90
+ 2f:1e:c9:15:29:97:d2:3d
53
91
  -----BEGIN RSA PRIVATE KEY-----
54
92
  Proc-Type: 4,ENCRYPTED
55
- DEK-Info: AES-128-CBC,7D9CB780A5571FAC184E44E1D736A163
93
+ DEK-Info: AES-128-CBC,8F1EB474F99CE22E5ABC5EFE44FF0E3E
56
94
 
57
- Qm1/dU9pVgWJvFbAsoTpvKsID72hLSQt9Krsoi1qzoCkCjY/9zuYcZs5IAx9rzZj
58
- ykULBjY9ZIBaNplQtpH1VRHl7YvrZ72oYXeTyQL0+fYyjqjC3X6SSATyOFR2yycs
59
- cXGE/jFvVnFdU/vmuv26laHCINhJ9KGJXLQRXoobMNxCR7uE4CVI8AKmKLxNq7jL
60
- GrkKUE4T9gkoWZOnck7TfYxSplc8ttSPRuaxV0eEAohkmOZBdL6vi7TXVhaEf7ym
61
- ZeUi5yUTByBqMBFgk6Az4Pr6U/etY0JbYRYwB0Opg+vjvAxqkmtgDKqZQkobZ7w2
62
- 61l9a01u2fXxN1CahJKgoke1vw4FQdDtFoIbtKPxZSGFOi8G7fSFk9+L8yeombXH
63
- 3omxcUJqtsteWFJbqHkMZYY9uK3NpZ+RifC1tmNV0h99oFpUxOkqP52T6TIJaav7
64
- YQaxJXqjBp8d07o+mtKLu4oggcFfXCYNdepG9L/U5TrTFeLmhf7Ep2zzr5NF1cbG
65
- DF1k0X4g9obOKbSVLMDD+umWmvj8FNXcKZ1joRcGfY2WZbjJtofdOhLbCD8/M4lE
66
- h2KyrhMbRalg0A82IFPoavGeTSmvK1iNcwSf04JYKNx2wpzjF+eTzMHpyPPv9RyV
67
- 2fRtSXZmfQA33BmTo0QImST22WqL76auJEQTKlH4Ka6Q7OQLC+xYzyhm7CZCFBzU
68
- T46HRAwxjptK89yWIvawDdAUcxZ/H/TjVOGG+q/DRQYI/Gyf4IOZqKTfIVg/JlvD
69
- njF3wo6kRV0JLrifTnev5mQwl3y9MXW5KUsAedLcWl7tv33pkbXFy7B/7Pn1wH67
95
+ +NQ5qz3FIKH4rcFo1QA0I+hwzIo1POBhLvGBiIK6nhGNneQnCTSq3CgKXtG5gOKI
96
+ t5Ts9gNscN8rxx3iyUk1ldp4eDGf1VxMj1K1Fu8WDclssSqBwSM1QgUBuze41Ei/
97
+ BmLd9wK0u+fGs5mTkcC/VyhOeO2N/4qWpQdsoI5iUf85xfljB330uMeiNJ+hO6mO
98
+ x1NcVuqdKVhgEg+UZ1l6sPZPtiybPrTxVZebWolYp/aKWa2ZF2p9DeI/pSze5tFW
99
+ a64RnKOWopKyDKU2xAprNXd6qG1zuFAYFGwo1bfCeSwDfV928bw3kx6xXJ12BIW8
100
+ GilMF7aKgSc6zlo+vBQt6K5AIkz2Xez3K8KfgQJ1LwNRgWVCA9pL5aQ+wHJJq21A
101
+ +lG/8OYsWPcUhcWgiF8Ydw0nhfSj7+lnCM4PlKfleBkHIXMI4i+s8JDO+3NCvOQE
102
+ ntpYSrzCN1RkdMSmq8OBw1L40PfsEFVQLV1sYQMGa/8Xt/P+QywqivQ4RmGD/7yk
103
+ uuMoazjI7i6Ig1lwTItRR7Wwwx806a722BniTZ1LPtRlRzf0pOQ8Iw2FQgGUcNRO
104
+ b4Y+W1g0f+KdM8DwmIzGx9jmWy9KaFpNF2Zc/rGS8a76h/B2HJEfQxONT+2LOLzs
105
+ FjgfFQhyJGdr43xoum3wnFzKWzCb52kVfoGhXwCJMIXBE1xo6FHBFgXYMFKxTC0N
106
+ eTj7fJ506YJ+924H6jSNC4JsysyFJ7zPOWMKcnBr5bkV7ct9ipozuAlfKdGeS6Ag
107
+ S9l6Y2H+USe99nwptwEhFGk9hjh2tn61UoenwiqZkiMJufBOHn9BmmvfRRB3778s
108
+ /PgltXzDxEu78Wi+0q1XSr1DvvKTH1Co2kdw+9ddliJ4GlAdubZyAIcEDqIHWdgv
109
+ VvNqgd38ckTMWUT6Kc11Of+c3iwuxSRV3GI9kyHRb6zoTKmEfAFGKyUfUuMG1w0c
110
+ v0H42JOulvODObP82dxjDcj8Givm9VhBD9F5K9WaffOAsLKDyGLD9tN8nqjuI2sB
111
+ 476Wf0ZvYNpLZlQXUUeHBs6lniq08Kp8eC/FA1VFq5PenPfot/QgarcJEAsM74Kb
112
+ eqMirO3IRJ9wWs49Ti/l2XdzdGjD06LiOo2QBSSNi0UHKZZ1o/GRZN0wvNZIT/ya
113
+ Xea50ONfAoJCUTnvXn7sykONDyPpUb6BpC9P3dE6V6V8vAyGn2koL7QWwQrUK7II
114
+ o+ZDLaaK11XhGYjVUW0RPf2FEjfBq9rLaBhAjHzODx+ZEIhGd78/c1wZ9Fs/XG8q
115
+ 9A8rp4Bf8bq5LTlMQ0Bedaq1DFyyD2d1f2ssSpfTwxe07nKms4tFP0nGtvSUjPwf
116
+ zExeYXvpx6q0uShuYbX0PTruM0M73EsXza/RbgxpoUQRP8uC5+Yoxk/3xll021cd
117
+ F6fxfg8qKaGRFAVwP7wJWronZnCdNKmMhzMNvZeVDxrOITqsMmCM53iWJAJKIFFj
118
+ tXXSMqAarWhvjZ41+0/kz4afVjcNFgxfADxrT7sZ4tmLqchsVhfqx7gtU+szQNM8
119
+ sUOPmzOP915hrFplU06/blzJIMYQEHrsKS1MgN6EtiRfw5qiVx8LxFScMs9wca4G
70
120
  -----END RSA PRIVATE KEY-----
data/spec/fixtures/ssl/intermediate-agent-crl.pem CHANGED
@@ -1,31 +1,40 @@
1
1
  Certificate Revocation List (CRL):
2
2
  Version 2 (0x1)
3
- Signature Algorithm: sha256WithRSAEncryption
4
- Issuer: /CN=Test CA Agent Subauthority
3
+ Signature Algorithm: sha256WithRSAEncryption
4
+ Issuer: CN=Test CA Agent Subauthority
5
5
  Last Update: Jan 1 00:00:00 1970 GMT
6
- Next Update: Apr 19 22:31:22 2029 GMT
6
+ Next Update: Apr 18 18:46:23 2031 GMT
7
7
  CRL extensions:
8
8
  X509v3 Authority Key Identifier:
9
- keyid:71:55:03:0F:DF:BC:E6:CE:3E:DE:05:DE:06:0F:E1:4F:BA:00:16:8D
9
+ keyid:30:5C:E0:85:AC:BF:77:41:18:C8:05:24:E3:0A:3E:71:66:1A:95:82
10
10
 
11
11
  X509v3 CRL Number:
12
12
  0
13
13
  No Revoked Certificates.
14
14
  Signature Algorithm: sha256WithRSAEncryption
15
- 07:24:a1:9d:d9:ec:57:1c:0b:68:ee:fb:59:c5:98:65:77:59:
16
- 49:a5:c5:51:69:9e:4c:20:94:d8:7b:f1:cb:e3:c8:4d:5e:a2:
17
- 58:3d:a6:6c:e1:7d:52:a3:d5:44:d5:be:95:95:c5:b8:10:86:
18
- 12:5a:4d:03:f2:73:d2:c9:94:a5:f5:c9:bb:78:bf:8e:7d:cf:
19
- 8e:5c:77:51:3b:4f:0f:bb:3b:f7:f3:00:45:00:9a:4b:4e:db:
20
- 3b:95:d3:cf:d5:dd:d0:78:28:b0:3a:9c:b1:2b:75:88:91:5b:
21
- 6e:b8:39:25:59:67:73:c1:21:6c:2b:b1:a9:da:e8:da:04:ca:
22
- 64:aa
15
+ 14:7d:d2:53:6f:ce:63:c4:c7:ea:0a:50:9a:31:68:5d:04:9e:
16
+ d6:57:07:67:54:0c:c7:8a:a3:64:1f:81:eb:71:3f:6e:7d:6b:
17
+ db:15:38:0d:57:a7:ac:1e:73:93:f5:e2:ff:0e:d1:ed:a2:9f:
18
+ 1c:40:7d:6e:2e:29:7f:aa:e1:8e:46:d1:03:be:6a:3f:c8:b1:
19
+ dd:3d:a3:0d:f5:6b:b3:ef:23:5d:f6:1c:2a:a7:b7:31:b2:0e:
20
+ 90:79:03:7f:03:24:9e:ad:9e:bf:18:63:b4:87:81:cf:8b:7f:
21
+ 88:e1:6c:fd:c4:3d:46:c3:85:30:74:ca:89:f6:37:e3:dc:c5:
22
+ 4c:50:ee:62:2d:71:e8:dd:ac:46:f8:3f:23:6c:80:3c:e7:be:
23
+ 00:93:a6:6f:e6:0d:86:4e:15:d8:46:cf:0d:cd:61:b2:74:ac:
24
+ 57:9f:79:db:ab:46:de:a7:30:b3:13:a0:44:04:7d:d6:02:a6:
25
+ 94:1a:1e:7e:20:43:2a:69:27:4b:7e:7a:00:8d:ab:39:74:19:
26
+ f3:b6:b1:89:c8:2d:38:26:92:c4:fd:5c:9a:68:f5:9a:b0:65:
27
+ 7f:e7:a9:04:96:f7:e1:f8:90:79:e4:26:1b:db:cc:93:10:97:
28
+ ad:23:a4:74:56:31:0a:90:5e:d2:cb:cf:ff:cd:9b:fe:8f:35:
29
+ 96:d0:3a:9a
23
30
  -----BEGIN X509 CRL-----
24
- MIIBHjCBiAIBATANBgkqhkiG9w0BAQsFADAlMSMwIQYDVQQDDBpUZXN0IENBIEFn
25
- ZW50IFN1YmF1dGhvcml0eRcNNzAwMTAxMDAwMDAwWhcNMjkwNDE5MjIzMTIyWqAv
26
- MC0wHwYDVR0jBBgwFoAUcVUDD9+85s4+3gXeBg/hT7oAFo0wCgYDVR0UBAMCAQAw
27
- DQYJKoZIhvcNAQELBQADgYEAByShndnsVxwLaO77WcWYZXdZSaXFUWmeTCCU2Hvx
28
- y+PITV6iWD2mbOF9UqPVRNW+lZXFuBCGElpNA/Jz0smUpfXJu3i/jn3Pjlx3UTtP
29
- D7s79/MARQCaS07bO5XTz9Xd0HgosDqcsSt1iJFbbrg5JVlnc8EhbCuxqdro2gTK
30
- ZKo=
31
+ MIIBnzCBiAIBATANBgkqhkiG9w0BAQsFADAlMSMwIQYDVQQDDBpUZXN0IENBIEFn
32
+ ZW50IFN1YmF1dGhvcml0eRcNNzAwMTAxMDAwMDAwWhcNMzEwNDE4MTg0NjIzWqAv
33
+ MC0wHwYDVR0jBBgwFoAUMFzghay/d0EYyAUk4wo+cWYalYIwCgYDVR0UBAMCAQAw
34
+ DQYJKoZIhvcNAQELBQADggEBABR90lNvzmPEx+oKUJoxaF0EntZXB2dUDMeKo2Qf
35
+ getxP259a9sVOA1Xp6wec5P14v8O0e2inxxAfW4uKX+q4Y5G0QO+aj/Isd09ow31
36
+ a7PvI132HCqntzGyDpB5A38DJJ6tnr8YY7SHgc+Lf4jhbP3EPUbDhTB0yon2N+Pc
37
+ xUxQ7mItcejdrEb4PyNsgDznvgCTpm/mDYZOFdhGzw3NYbJ0rFefedurRt6nMLMT
38
+ oEQEfdYCppQaHn4gQyppJ0t+egCNqzl0GfO2sYnILTgmksT9XJpo9ZqwZX/nqQSW
39
+ 9+H4kHnkJhvbzJMQl60jpHRWMQqQXtLLz//Nm/6PNZbQOpo=
31
40
  -----END X509 CRL-----
data/spec/fixtures/ssl/intermediate-agent.pem CHANGED
@@ -1,26 +1,35 @@
1
1
  Certificate:
2
2
  Data:
3
3
  Version: 3 (0x2)
4
- Serial Number: 6 (0x6)
5
- Signature Algorithm: sha256WithRSAEncryption
4
+ Serial Number: 8 (0x8)
5
+ Signature Algorithm: sha256WithRSAEncryption
6
6
  Issuer: CN=Test CA
7
7
  Validity
8
8
  Not Before: Jan 1 00:00:00 1970 GMT
9
- Not After : Apr 19 22:31:22 2029 GMT
9
+ Not After : Apr 18 18:46:23 2031 GMT
10
10
  Subject: CN=Test CA Agent Subauthority
11
11
  Subject Public Key Info:
12
12
  Public Key Algorithm: rsaEncryption
13
- Public-Key: (1024 bit)
13
+ RSA Public-Key: (2048 bit)
14
14
  Modulus:
15
- 00:e7:30:19:5b:4d:c2:77:b0:2d:8f:54:19:8d:f5:
16
- cf:91:57:48:ae:0d:59:c0:a2:75:d0:d5:11:5b:72:
17
- 97:c9:8b:45:8e:7b:91:03:1c:57:c5:08:f0:ae:00:
18
- da:b0:1b:9a:bd:c3:ee:fd:f6:c2:1d:05:9d:f5:5e:
19
- e3:91:bd:c1:80:cd:0a:45:f7:89:32:91:19:31:11:
20
- 95:a9:14:d3:6b:02:a3:2d:df:68:b8:c4:0e:a3:27:
21
- 18:e9:22:f1:fa:d4:e8:5a:bc:f1:11:c5:fd:e1:b6:
22
- d8:00:e4:82:60:00:37:f9:54:cb:a9:ad:fe:ea:e3:
23
- 8b:c3:67:07:04:e6:70:b0:45
15
+ 00:c8:76:0f:6b:12:72:bc:6a:03:90:71:fa:b3:01:
16
+ 69:bd:d5:d0:64:74:b9:6b:a0:3e:9e:fc:ea:25:c7:
17
+ 5f:da:c9:95:1e:f8:dc:63:74:f9:3d:ee:28:fe:70:
18
+ e9:e8:62:d2:1b:ac:3e:ab:42:a7:2a:95:2b:b4:22:
19
+ 43:7d:68:1a:c0:39:4f:7a:0c:45:2b:41:4c:de:14:
20
+ d2:9e:1f:e5:ce:85:2d:db:d6:7f:25:b0:9b:94:f8:
21
+ e4:ed:11:2e:cd:9c:c8:5d:15:bb:11:96:ec:e0:3e:
22
+ 9a:af:b3:26:50:5d:9c:5f:29:6b:3a:cc:ff:21:07:
23
+ e5:13:99:e5:c0:f7:34:ca:7b:49:f4:ba:dc:41:29:
24
+ 65:db:65:e9:61:7a:f4:17:18:fc:ab:70:a5:de:22:
25
+ 32:ab:24:63:5c:14:25:48:88:ee:36:33:0b:36:81:
26
+ 77:d7:ac:1d:75:d6:09:95:54:ef:f2:52:a2:52:15:
27
+ 58:ce:4e:9e:aa:6f:46:a2:fb:58:30:62:97:4e:80:
28
+ 87:82:89:f9:22:ab:95:8e:17:bf:64:b5:6f:0e:5f:
29
+ 54:c3:b0:4a:fa:d3:99:38:00:f7:b1:f6:a9:2c:b1:
30
+ c9:ba:3c:07:b7:5c:91:1a:0f:3d:34:74:3f:58:e2:
31
+ fa:8d:66:38:a7:a6:af:f2:a7:f2:f1:95:7a:a0:49:
32
+ 18:19
24
33
  Exponent: 65537 (0x10001)
25
34
  X509v3 extensions:
26
35
  X509v3 Basic Constraints: critical
@@ -28,33 +37,45 @@ Certificate:
28
37
  X509v3 Key Usage: critical
29
38
  Certificate Sign, CRL Sign
30
39
  X509v3 Subject Key Identifier:
31
- 71:55:03:0F:DF:BC:E6:CE:3E:DE:05:DE:06:0F:E1:4F:BA:00:16:8D
40
+ 30:5C:E0:85:AC:BF:77:41:18:C8:05:24:E3:0A:3E:71:66:1A:95:82
32
41
  Netscape Comment:
33
42
  Puppet Server Internal Certificate
34
43
  X509v3 Authority Key Identifier:
35
- keyid:2C:25:19:A1:6C:B3:F7:69:FD:76:9B:3A:22:CB:0C:56:01:01:F1:31
44
+ keyid:61:DF:EE:CE:DA:49:6B:5E:F3:EF:94:FE:F9:DC:C7:C0:5A:74:FE:DB
36
45
 
37
46
  Signature Algorithm: sha256WithRSAEncryption
38
- 96:88:36:03:b3:7f:ae:df:a6:58:7d:4e:3d:71:22:ab:88:95:
39
- 98:e2:58:45:ab:b3:c7:a6:53:91:43:61:a6:b6:07:0b:65:84:
40
- 3f:41:53:2f:fb:d9:07:06:7a:fe:19:52:11:e8:f0:5e:dd:04:
41
- 62:24:9a:a4:23:4d:58:5c:47:81:3e:e9:ab:5b:ee:92:3e:74:
42
- 6d:21:78:6e:2d:a8:d9:83:0d:91:b8:43:0f:94:3c:c2:47:e9:
43
- 04:55:cc:52:7f:95:2f:5a:21:08:56:a0:f2:88:7d:a0:82:3b:
44
- 6a:96:34:4d:bb:0d:7c:31:16:0f:9b:84:71:34:ee:ec:fe:bf:
45
- 8c:cb
47
+ af:6b:69:42:d0:c9:88:83:80:46:fe:d7:0c:dc:cc:81:8a:f9:
48
+ f0:21:15:53:fa:fa:f2:95:dd:53:17:d6:b5:cc:2d:f8:64:b6:
49
+ 19:62:c7:3e:7e:75:4f:89:b5:00:c2:3d:b2:3c:51:29:31:5b:
50
+ a0:32:9f:76:5a:1f:36:06:64:47:9b:9a:dd:93:3c:c4:32:7e:
51
+ 3e:f8:19:32:72:ac:ac:e7:fe:a5:06:4a:ee:72:9c:c0:d9:36:
52
+ 72:5a:5f:af:41:c5:9a:4f:0c:ed:22:db:1f:86:b1:f4:ae:54:
53
+ a1:93:ba:26:b5:93:15:31:ec:a9:d9:2f:94:61:e3:fc:67:69:
54
+ 6b:01:54:02:36:93:d0:73:ae:64:5d:b4:ec:87:65:99:f6:04:
55
+ 7b:b1:d0:51:fc:b3:9e:b1:63:53:c4:cf:38:2c:19:42:69:bd:
56
+ 10:08:a2:92:87:f8:58:7a:9b:cc:cd:f7:41:a2:2f:6a:a1:45:
57
+ 48:70:6e:7a:39:a3:8d:96:ae:ea:65:ea:ab:b6:06:72:0b:f7:
58
+ 76:c0:6e:a0:ad:48:f1:73:7c:22:91:11:eb:88:24:f6:5e:ec:
59
+ 84:5f:65:51:57:43:a6:c6:38:65:d5:c3:7a:f1:4e:b3:54:62:
60
+ 1b:f3:16:30:c3:b3:c6:cf:f1:a6:f8:f2:d8:c6:d0:f7:2a:18:
61
+ 06:f5:a3:ed
46
62
  -----BEGIN CERTIFICATE-----
47
- MIICRTCCAa6gAwIBAgIBBjANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdUZXN0
48
- IENBMB4XDTcwMDEwMTAwMDAwMFoXDTI5MDQxOTIyMzEyMlowJTEjMCEGA1UEAwwa
49
- VGVzdCBDQSBBZ2VudCBTdWJhdXRob3JpdHkwgZ8wDQYJKoZIhvcNAQEBBQADgY0A
50
- MIGJAoGBAOcwGVtNwnewLY9UGY31z5FXSK4NWcCiddDVEVtyl8mLRY57kQMcV8UI
51
- 8K4A2rAbmr3D7v32wh0FnfVe45G9wYDNCkX3iTKRGTERlakU02sCoy3faLjEDqMn
52
- GOki8frU6Fq88RHF/eG22ADkgmAAN/lUy6mt/urji8NnBwTmcLBFAgMBAAGjgZcw
53
- gZQwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFHFV
54
- Aw/fvObOPt4F3gYP4U+6ABaNMDEGCWCGSAGG+EIBDQQkFiJQdXBwZXQgU2VydmVy
55
- IEludGVybmFsIENlcnRpZmljYXRlMB8GA1UdIwQYMBaAFCwlGaFss/dp/XabOiLL
56
- DFYBAfExMA0GCSqGSIb3DQEBCwUAA4GBAJaINgOzf67fplh9Tj1xIquIlZjiWEWr
57
- s8emU5FDYaa2BwtlhD9BUy/72QcGev4ZUhHo8F7dBGIkmqQjTVhcR4E+6atb7pI+
58
- dG0heG4tqNmDDZG4Qw+UPMJH6QRVzFJ/lS9aIQhWoPKIfaCCO2qWNE27DXwxFg+b
59
- hHE07uz+v4zL
63
+ MIIDSjCCAjKgAwIBAgIBCDANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdUZXN0
64
+ IENBMB4XDTcwMDEwMTAwMDAwMFoXDTMxMDQxODE4NDYyM1owJTEjMCEGA1UEAwwa
65
+ VGVzdCBDQSBBZ2VudCBTdWJhdXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
66
+ DwAwggEKAoIBAQDIdg9rEnK8agOQcfqzAWm91dBkdLlroD6e/Oolx1/ayZUe+Nxj
67
+ dPk97ij+cOnoYtIbrD6rQqcqlSu0IkN9aBrAOU96DEUrQUzeFNKeH+XOhS3b1n8l
68
+ sJuU+OTtES7NnMhdFbsRluzgPpqvsyZQXZxfKWs6zP8hB+UTmeXA9zTKe0n0utxB
69
+ KWXbZelhevQXGPyrcKXeIjKrJGNcFCVIiO42Mws2gXfXrB111gmVVO/yUqJSFVjO
70
+ Tp6qb0ai+1gwYpdOgIeCifkiq5WOF79ktW8OX1TDsEr605k4APex9qksscm6PAe3
71
+ XJEaDz00dD9Y4vqNZjinpq/yp/LxlXqgSRgZAgMBAAGjgZcwgZQwDwYDVR0TAQH/
72
+ BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFDBc4IWsv3dBGMgFJOMK
73
+ PnFmGpWCMDEGCWCGSAGG+EIBDQQkFiJQdXBwZXQgU2VydmVyIEludGVybmFsIENl
74
+ cnRpZmljYXRlMB8GA1UdIwQYMBaAFGHf7s7aSWte8++U/vncx8BadP7bMA0GCSqG
75
+ SIb3DQEBCwUAA4IBAQCva2lC0MmIg4BG/tcM3MyBivnwIRVT+vryld1TF9a1zC34
76
+ ZLYZYsc+fnVPibUAwj2yPFEpMVugMp92Wh82BmRHm5rdkzzEMn4++Bkycqys5/6l
77
+ BkrucpzA2TZyWl+vQcWaTwztItsfhrH0rlShk7omtZMVMeyp2S+UYeP8Z2lrAVQC
78
+ NpPQc65kXbTsh2WZ9gR7sdBR/LOesWNTxM84LBlCab0QCKKSh/hYepvMzfdBoi9q
79
+ oUVIcG56OaONlq7qZeqrtgZyC/d2wG6grUjxc3wikRHriCT2XuyEX2VRV0Omxjhl
80
+ 1cN68U6zVGIb8xYww7PGz/Gm+PLYxtD3KhgG9aPt
60
81
  -----END CERTIFICATE-----
data/spec/fixtures/ssl/intermediate-crl.pem CHANGED
@@ -1,36 +1,46 @@
1
1
  Certificate Revocation List (CRL):
2
2
  Version 2 (0x1)
3
- Signature Algorithm: sha256WithRSAEncryption
4
- Issuer: /CN=Test CA Subauthority
3
+ Signature Algorithm: sha256WithRSAEncryption
4
+ Issuer: CN=Test CA Subauthority
5
5
  Last Update: Jan 1 00:00:00 1970 GMT
6
- Next Update: Apr 19 22:31:22 2029 GMT
6
+ Next Update: Apr 18 18:46:23 2031 GMT
7
7
  CRL extensions:
8
8
  X509v3 Authority Key Identifier:
9
- keyid:23:78:2F:09:81:B0:7B:C6:79:1F:30:FE:FC:5E:37:14:FF:20:A0:20
9
+ keyid:9A:15:19:07:A0:54:8D:C3:9D:4F:07:C4:05:A1:85:AC:92:D8:B1:E5
10
10
 
11
11
  X509v3 CRL Number:
12
12
  0
13
13
  Revoked Certificates:
14
- Serial Number: 04
15
- Revocation Date: Apr 22 22:31:22 2019 GMT
14
+ Serial Number: 06
15
+ Revocation Date: Apr 20 18:46:23 2021 GMT
16
16
  CRL entry extensions:
17
17
  X509v3 CRL Reason Code:
18
18
  Key Compromise
19
19
  Signature Algorithm: sha256WithRSAEncryption
20
- 75:08:37:d8:e9:75:be:6b:8f:3e:f4:03:43:03:63:b8:26:02:
21
- b3:a8:eb:fc:61:f5:0a:ab:8d:4f:59:ba:79:e4:d2:45:be:9a:
22
- 60:ee:ba:85:a3:0e:2e:2b:e0:6f:ac:18:0e:94:c8:76:b6:17:
23
- c3:fb:55:ab:26:9c:a4:26:8b:9f:74:51:e8:33:8e:83:50:e6:
24
- 6e:38:04:7b:35:db:75:55:88:1b:8d:19:f3:ed:9c:18:1e:3c:
25
- 40:31:73:5e:4d:a7:a2:ef:55:b1:0c:70:ef:85:60:d8:d5:39:
26
- 32:d0:84:8d:b3:96:e6:35:93:8a:da:e6:ec:1f:37:98:9a:5c:
27
- 37:40
20
+ 42:21:b1:27:84:31:dd:f0:bd:13:1f:70:b4:6e:e3:f5:9e:ec:
21
+ c4:fd:64:a9:b3:78:c1:8f:26:76:b0:3d:4b:60:5f:be:6d:e7:
22
+ c1:47:e0:f5:c2:f3:3f:6e:fc:4c:19:f8:41:82:52:9a:f4:02:
23
+ d6:3a:23:91:21:92:5c:8c:fa:84:79:dc:10:3f:e3:42:45:5a:
24
+ e6:26:12:67:42:45:c3:76:30:00:05:66:5e:79:cc:0f:d3:90:
25
+ 04:33:72:6c:d5:ae:5e:b4:d1:b1:91:4f:69:f9:b1:7e:c2:33:
26
+ ae:b6:bb:2e:28:66:b5:0d:03:54:3f:93:40:ac:17:58:e6:d6:
27
+ c9:7d:3b:96:ec:47:6f:09:a3:a0:ff:b9:77:f9:64:bf:10:30:
28
+ df:20:d0:95:36:f4:88:d8:c4:c3:da:3e:86:07:e4:1e:11:c2:
29
+ da:e5:1f:0f:82:3b:40:2e:cf:f8:14:a5:38:2b:b2:c3:80:18:
30
+ 84:e9:d5:90:85:36:00:9d:96:5e:03:ed:ee:2d:d9:5b:57:7f:
31
+ 9e:0d:7d:5b:4e:f9:89:3d:e2:d9:91:db:ae:6e:b0:34:59:30:
32
+ 9c:2e:0a:c8:74:57:10:db:6c:2f:60:70:d6:bb:c7:18:7b:0a:
33
+ 96:3d:77:71:51:11:3f:a3:16:fc:bd:7d:cd:12:a3:98:07:4c:
34
+ a3:2c:7e:37
28
35
  -----BEGIN X509 CRL-----
29
- MIIBPDCBpgIBATANBgkqhkiG9w0BAQsFADAfMR0wGwYDVQQDDBRUZXN0IENBIFN1
30
- YmF1dGhvcml0eRcNNzAwMTAxMDAwMDAwWhcNMjkwNDE5MjIzMTIyWjAiMCACAQQX
31
- DTE5MDQyMjIyMzEyMlowDDAKBgNVHRUEAwoBAaAvMC0wHwYDVR0jBBgwFoAUI3gv
32
- CYGwe8Z5HzD+/F43FP8goCAwCgYDVR0UBAMCAQAwDQYJKoZIhvcNAQELBQADgYEA
33
- dQg32Ol1vmuPPvQDQwNjuCYCs6jr/GH1CquNT1m6eeTSRb6aYO66haMOLivgb6wY
34
- DpTIdrYXw/tVqyacpCaLn3RR6DOOg1DmbjgEezXbdVWIG40Z8+2cGB48QDFzXk2n
35
- ou9VsQxw74Vg2NU5MtCEjbOW5jWTitrm7B83mJpcN0A=
36
+ MIIBvTCBpgIBATANBgkqhkiG9w0BAQsFADAfMR0wGwYDVQQDDBRUZXN0IENBIFN1
37
+ YmF1dGhvcml0eRcNNzAwMTAxMDAwMDAwWhcNMzEwNDE4MTg0NjIzWjAiMCACAQYX
38
+ DTIxMDQyMDE4NDYyM1owDDAKBgNVHRUEAwoBAaAvMC0wHwYDVR0jBBgwFoAUmhUZ
39
+ B6BUjcOdTwfEBaGFrJLYseUwCgYDVR0UBAMCAQAwDQYJKoZIhvcNAQELBQADggEB
40
+ AEIhsSeEMd3wvRMfcLRu4/We7MT9ZKmzeMGPJnawPUtgX75t58FH4PXC8z9u/EwZ
41
+ +EGCUpr0AtY6I5EhklyM+oR53BA/40JFWuYmEmdCRcN2MAAFZl55zA/TkAQzcmzV
42
+ rl600bGRT2n5sX7CM662uy4oZrUNA1Q/k0CsF1jm1sl9O5bsR28Jo6D/uXf5ZL8Q
43
+ MN8g0JU29IjYxMPaPoYH5B4RwtrlHw+CO0Auz/gUpTgrssOAGITp1ZCFNgCdll4D
44
+ 7e4t2VtXf54NfVtO+Yk94tmR265usDRZMJwuCsh0VxDbbC9gcNa7xxh7CpY9d3FR
45
+ ET+jFvy9fc0So5gHTKMsfjc=
36
46
  -----END X509 CRL-----
data/spec/fixtures/ssl/intermediate.pem CHANGED
@@ -1,26 +1,35 @@
1
1
  Certificate:
2
2
  Data:
3
3
  Version: 3 (0x2)
4
- Serial Number: 1 (0x1)
5
- Signature Algorithm: sha256WithRSAEncryption
4
+ Serial Number: 3 (0x3)
5
+ Signature Algorithm: sha256WithRSAEncryption
6
6
  Issuer: CN=Test CA
7
7
  Validity
8
8
  Not Before: Jan 1 00:00:00 1970 GMT
9
- Not After : Apr 19 22:31:22 2029 GMT
9
+ Not After : Apr 18 18:46:23 2031 GMT
10
10
  Subject: CN=Test CA Subauthority
11
11
  Subject Public Key Info:
12
12
  Public Key Algorithm: rsaEncryption
13
- Public-Key: (1024 bit)
13
+ RSA Public-Key: (2048 bit)
14
14
  Modulus:
15
- 00:c2:4a:6e:07:c6:1c:8b:2f:bf:91:3e:25:dc:54:
16
- 2c:02:0f:1b:6f:5b:0e:5a:69:1d:dd:52:3f:8b:f4:
17
- c8:56:c6:f3:c5:56:2c:b8:82:67:81:09:7b:0d:6f:
18
- 01:26:4a:ae:42:53:95:b1:32:ba:07:d4:64:bc:79:
19
- 1f:16:0a:92:07:e5:af:5d:d6:b3:4d:09:58:b1:8a:
20
- ba:2c:c0:d3:9b:95:cc:a1:0d:e5:4d:40:1a:50:2d:
21
- a4:45:ff:05:63:62:84:35:73:2c:0f:b3:f6:69:fd:
22
- 9b:d3:5e:a8:12:f0:c4:a0:77:25:59:e7:81:3d:ee:
23
- c5:22:10:75:ac:ad:cc:a4:1f
15
+ 00:cd:ef:ef:31:c5:33:69:3b:ee:25:06:b9:73:a7:
16
+ 09:e5:c9:9c:0b:39:48:26:fb:88:26:50:2d:8a:52:
17
+ 29:86:df:7a:12:f0:08:ea:61:52:80:98:9f:a5:45:
18
+ 26:ad:6d:05:e6:b5:81:e5:91:b3:6b:98:53:09:0a:
19
+ e9:05:4b:29:de:3c:64:44:a7:d2:5d:3f:fc:5f:f8:
20
+ 29:1f:b0:40:e2:74:8a:26:fd:e8:d7:74:a5:78:de:
21
+ bf:23:10:73:74:8d:1b:0c:4b:d7:1d:a9:ae:86:14:
22
+ 05:63:7c:2a:00:38:d6:57:8a:b7:a8:45:80:27:f5:
23
+ 71:0b:fa:e2:bd:a2:d1:08:8d:fa:cd:9c:f6:ad:89:
24
+ 76:ea:ab:1c:78:f9:26:5b:a3:18:2a:f7:90:15:ed:
25
+ a7:db:50:e9:7d:55:99:7e:05:10:ca:56:11:51:5e:
26
+ de:8c:e2:be:2a:8a:34:41:1d:1d:23:92:04:50:05:
27
+ c5:5b:b8:7a:45:90:ee:0d:7f:01:b1:ed:d4:dd:c5:
28
+ 28:ed:7d:4d:6a:70:21:3b:95:5e:e2:31:d7:17:bd:
29
+ 5b:af:e4:ce:ad:6b:9f:5f:9e:e1:1e:86:ff:83:c1:
30
+ 88:ec:87:bb:bf:a1:26:22:75:b9:57:31:10:fd:a5:
31
+ ca:82:70:6d:c8:a1:a3:f6:3e:76:3d:2e:cd:07:f9:
32
+ 7b:3f
24
33
  Exponent: 65537 (0x10001)
25
34
  X509v3 extensions:
26
35
  X509v3 Basic Constraints: critical
@@ -28,33 +37,45 @@ Certificate:
28
37
  X509v3 Key Usage: critical
29
38
  Certificate Sign, CRL Sign
30
39
  X509v3 Subject Key Identifier:
31
- 23:78:2F:09:81:B0:7B:C6:79:1F:30:FE:FC:5E:37:14:FF:20:A0:20
40
+ 9A:15:19:07:A0:54:8D:C3:9D:4F:07:C4:05:A1:85:AC:92:D8:B1:E5
32
41
  Netscape Comment:
33
42
  Puppet Server Internal Certificate
34
43
  X509v3 Authority Key Identifier:
35
- keyid:2C:25:19:A1:6C:B3:F7:69:FD:76:9B:3A:22:CB:0C:56:01:01:F1:31
44
+ keyid:61:DF:EE:CE:DA:49:6B:5E:F3:EF:94:FE:F9:DC:C7:C0:5A:74:FE:DB
36
45
 
37
46
  Signature Algorithm: sha256WithRSAEncryption
38
- 82:ba:d5:8d:f2:d3:98:79:1a:02:15:a2:3d:b3:53:e7:79:28:
39
- 05:39:aa:be:2d:7c:6a:4f:c2:66:60:86:62:41:ba:eb:d5:de:
40
- 6e:3a:81:4a:22:33:5b:22:31:35:61:9e:d9:9c:f8:59:fa:93:
41
- e7:7e:9c:f9:e7:15:60:34:f2:2a:3a:13:96:94:c8:de:24:b6:
42
- bf:0d:20:aa:4a:9b:eb:c1:9c:49:be:2f:69:69:01:53:0a:06:
43
- 2a:1d:e7:02:6b:a8:d8:e7:95:32:7e:b5:79:e6:40:0e:72:02:
44
- 74:24:75:eb:3d:17:8d:75:87:2b:2a:dd:5e:98:d8:67:e3:5c:
45
- 2a:9d
47
+ 80:38:84:87:30:76:98:4d:35:d8:99:c1:26:f9:4b:bc:aa:e4:
48
+ e0:6f:b8:b2:0b:ad:22:82:b5:74:98:f2:98:7b:34:92:5e:d8:
49
+ fa:0f:4f:73:43:b1:5d:d8:69:35:7d:41:1f:ab:bc:6a:14:3f:
50
+ ff:78:5d:8e:c4:7d:38:5a:14:99:d2:fc:08:08:69:5c:78:9b:
51
+ 5b:a8:bc:bb:92:27:4e:1f:15:48:1c:da:71:f9:ce:ec:3f:55:
52
+ 1b:e5:5d:54:2e:10:b8:b6:57:c7:af:f7:de:7c:c0:76:50:4e:
53
+ 37:a9:3d:26:b8:50:61:89:36:1e:82:92:9d:f5:fd:96:a9:fc:
54
+ c2:1e:ae:1c:b0:96:03:21:75:7b:9f:56:fa:96:e0:0e:de:df:
55
+ 98:74:65:b8:8d:52:eb:30:7f:aa:4d:d8:38:c2:0b:47:5d:64:
56
+ c6:52:a2:26:10:f3:5a:d6:04:22:cc:39:8a:30:33:61:6d:6d:
57
+ 67:f2:dd:e6:1f:a0:45:36:ce:db:80:8c:5f:2a:ef:6e:c8:ee:
58
+ 64:20:7f:b1:eb:b1:71:1e:ff:31:00:91:3d:6d:fe:b6:e2:9a:
59
+ de:7a:fe:e5:59:fc:b5:b7:3f:70:d2:b8:17:99:1a:5b:73:01:
60
+ c4:17:cc:41:ed:d3:6d:20:56:0b:d7:8f:78:41:10:95:e2:66:
61
+ ab:f2:2b:4b
46
62
  -----BEGIN CERTIFICATE-----
47
- MIICPzCCAaigAwIBAgIBATANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdUZXN0
48
- IENBMB4XDTcwMDEwMTAwMDAwMFoXDTI5MDQxOTIyMzEyMlowHzEdMBsGA1UEAwwU
49
- VGVzdCBDQSBTdWJhdXRob3JpdHkwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGB
50
- AMJKbgfGHIsvv5E+JdxULAIPG29bDlppHd1SP4v0yFbG88VWLLiCZ4EJew1vASZK
51
- rkJTlbEyugfUZLx5HxYKkgflr13Ws00JWLGKuizA05uVzKEN5U1AGlAtpEX/BWNi
52
- hDVzLA+z9mn9m9NeqBLwxKB3JVnngT3uxSIQdaytzKQfAgMBAAGjgZcwgZQwDwYD
53
- VR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFCN4LwmBsHvG
54
- eR8w/vxeNxT/IKAgMDEGCWCGSAGG+EIBDQQkFiJQdXBwZXQgU2VydmVyIEludGVy
55
- bmFsIENlcnRpZmljYXRlMB8GA1UdIwQYMBaAFCwlGaFss/dp/XabOiLLDFYBAfEx
56
- MA0GCSqGSIb3DQEBCwUAA4GBAIK61Y3y05h5GgIVoj2zU+d5KAU5qr4tfGpPwmZg
57
- hmJBuuvV3m46gUoiM1siMTVhntmc+Fn6k+d+nPnnFWA08io6E5aUyN4ktr8NIKpK
58
- m+vBnEm+L2lpAVMKBiod5wJrqNjnlTJ+tXnmQA5yAnQkdes9F411hysq3V6Y2Gfj
59
- XCqd
63
+ MIIDRDCCAiygAwIBAgIBAzANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdUZXN0
64
+ IENBMB4XDTcwMDEwMTAwMDAwMFoXDTMxMDQxODE4NDYyM1owHzEdMBsGA1UEAwwU
65
+ VGVzdCBDQSBTdWJhdXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
66
+ AoIBAQDN7+8xxTNpO+4lBrlzpwnlyZwLOUgm+4gmUC2KUimG33oS8AjqYVKAmJ+l
67
+ RSatbQXmtYHlkbNrmFMJCukFSynePGREp9JdP/xf+CkfsEDidIom/ejXdKV43r8j
68
+ EHN0jRsMS9cdqa6GFAVjfCoAONZXireoRYAn9XEL+uK9otEIjfrNnPatiXbqqxx4
69
+ +SZboxgq95AV7afbUOl9VZl+BRDKVhFRXt6M4r4qijRBHR0jkgRQBcVbuHpFkO4N
70
+ fwGx7dTdxSjtfU1qcCE7lV7iMdcXvVuv5M6ta59fnuEehv+DwYjsh7u/oSYidblX
71
+ MRD9pcqCcG3IoaP2PnY9Ls0H+Xs/AgMBAAGjgZcwgZQwDwYDVR0TAQH/BAUwAwEB
72
+ /zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFJoVGQegVI3DnU8HxAWhhayS2LHl
73
+ MDEGCWCGSAGG+EIBDQQkFiJQdXBwZXQgU2VydmVyIEludGVybmFsIENlcnRpZmlj
74
+ YXRlMB8GA1UdIwQYMBaAFGHf7s7aSWte8++U/vncx8BadP7bMA0GCSqGSIb3DQEB
75
+ CwUAA4IBAQCAOISHMHaYTTXYmcEm+Uu8quTgb7iyC60igrV0mPKYezSSXtj6D09z
76
+ Q7Fd2Gk1fUEfq7xqFD//eF2OxH04WhSZ0vwICGlceJtbqLy7kidOHxVIHNpx+c7s
77
+ P1Ub5V1ULhC4tlfHr/fefMB2UE43qT0muFBhiTYegpKd9f2WqfzCHq4csJYDIXV7
78
+ n1b6luAO3t+YdGW4jVLrMH+qTdg4wgtHXWTGUqImEPNa1gQizDmKMDNhbW1n8t3m
79
+ H6BFNs7bgIxfKu9uyO5kIH+x67FxHv8xAJE9bf624preev7lWfy1tz9w0rgXmRpb
80
+ cwHEF8xB7dNtIFYL1494QRCV4mar8itL
60
81
  -----END CERTIFICATE-----