puppet 7.33.0 → 8.0.1

data/spec/fixtures/integration/l10n/envs/prod/modules/demo/locales/config.yaml

@@ -0,0 +1,25 @@
+---
+# This is the project-specific configuration file for setting up
+# fast_gettext for your project.
+gettext:
+  # This is used for the name of the .pot and .po files; they will be
+  # called <project_name>.pot?
+  project_name: 'puppet-l10n'
+  # This is used in comments in the .pot and .po files to indicate what
+  # project the files belong to and should bea little more descriptive than
+  # <project_name>
+  package_name: puppet l10n demo
+  # The locale that the default messages in the .pot file are in
+  default_locale: en
+  # The email used for sending bug reports.
+  bugs_address: docs@puppetlabs.com
+  # The holder of the copyright.
+  copyright_holder: Puppet Labs, LLC.
+  # This determines which comments in code should be eligible for translation.
+  # Any comments that start with this string will be externalized. (Leave
+  # empty to include all.)
+  comments_tag: TRANSLATORS
+  # Patterns for +Dir.glob+ used to find all files that might contain
+  # translatable content, relative to the project root directory
+  source_files:
+    - 'lib/**/*.rb'

data/spec/fixtures/integration/l10n/envs/prod/modules/demo/locales/ja/puppet-l10n.po

@@ -0,0 +1,19 @@
+# Puppet, 2021
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: 1.0\n"
+"Report-Msgid-Bugs-To: \n"
+"POT-Creation-Date: 2018-03-29 12:41+0000\n"
+"PO-Revision-Date: 2018-03-29 12:43+0000\n"
+"Last-Translator: Puppet\n"
+"Language-Team: English\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Language: en\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+
+#: ../lib/puppet/functions/l10n.rb:5
+msgid "IT'S HAPPY FUN TIME"
+msgstr "それは楽しい時間です"

data/spec/fixtures/integration/l10n/envs/prod/modules/demo/locales/puppet-l10n.pot

@@ -0,0 +1,20 @@
+# SOME DESCRIPTIVE TITLE.
+# Copyright (C) 2021 Puppet Labs, LLC.
+# This file is distributed under the same license as the puppet l10n demo package.
+# FIRST AUTHOR <EMAIL@ADDRESS>, 2021.
+#
+#, fuzzy
+msgid ""
+msgstr ""
+"Project-Id-Version: puppet l10n demo 6.23.0-100-gdc4e95bd86\n"
+"\n"
+"Report-Msgid-Bugs-To: docs@puppetlabs.com\n"
+"POT-Creation-Date: 2021-07-16 16:48-0700\n"
+"PO-Revision-Date: 2021-07-16 16:48-0700\n"
+"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=INTEGER; plural=EXPRESSION;\n"

data/spec/fixtures/integration/l10n/envs/prod/modules/demo/metadata.json

@@ -0,0 +1,8 @@
+{
+    "name": "puppet-l10n",
+    "version": "0.0.1",
+    "author": "puppet",
+    "source": "",
+    "license": "Apache-2.0",
+    "dependencies": []
+}

data/spec/fixtures/integration/node/environment/sitedir/00_a.pp

@@ -0,0 +1,2 @@
+class a {}
+$a = 10

data/spec/fixtures/integration/node/environment/sitedir/01_b.pp

@@ -0,0 +1,6 @@
+class b {}
+
+# if the files are evaluated in the wrong order, the file 'b' has a reference
+# to $a (set in file 'a') and with strict variable lookup should raise an error
+# and fail this test.
+$b = $a # error if $a not set in strict mode

data/spec/fixtures/integration/node/environment/sitedir/04_include.pp

@@ -0,0 +1,2 @@
+include a, b
+notify { "variables": message => "a: $a, b: $b" }

data/spec/fixtures/integration/node/environment/sitedir2/00_a.pp

@@ -0,0 +1,2 @@
+class a {}
+$a = 10

data/spec/fixtures/integration/node/environment/sitedir2/02_folder/01_b.pp

@@ -0,0 +1,6 @@
+class b {}
+
+# if the files are evaluated in the wrong order, the file 'b' has a reference
+# to $a (set in file 'a') and with strict variable lookup should raise an error
+# and fail this test.
+$b = $a # error if $a not set in strict mode

data/spec/fixtures/integration/node/environment/sitedir2/03_c.pp

@@ -0,0 +1 @@
+$c = $a + $b

data/spec/fixtures/integration/node/environment/sitedir2/04_include.pp

@@ -0,0 +1,2 @@
+include a, b
+notify { "variables": message => "a: $a, b: $b c: $c" }

data/spec/fixtures/releases/jamtur01-apache/Modulefile

@@ -0,0 +1,2 @@
+name 'jamtur01-apache'
+version '0.0.1'

data/spec/fixtures/releases/jamtur01-apache/files/httpd

@@ -0,0 +1,24 @@
+# Configuration file for the httpd service.
+
+#
+# The default processing model (MPM) is the process-based
+# 'prefork' model.  A thread-based model, 'worker', is also
+# available, but does not work with some modules (such as PHP).
+# The service must be stopped before changing this variable.
+#
+#HTTPD=/usr/sbin/httpd.worker
+
+#
+# To pass additional options (for instance, -D definitions) to the
+# httpd binary at startup, set OPTIONS here.
+#
+#OPTIONS=
+#OPTIONS=-DDOWN
+
+#
+# By default, the httpd process is started in the C locale; to
+# change the locale in which the server runs, the HTTPD_LANG
+# variable can be set.
+#
+#HTTPD_LANG=C
+export SHORTHOST=`hostname -s`

data/spec/fixtures/releases/jamtur01-apache/files/test.vhost

@@ -0,0 +1,18 @@
+#
+# Test vhost
+#
+NameVirtualHost *:80
+<VirtualHost *:80>
+  ServerName testvhost
+  DocumentRoot /tmp/testvhost
+  <Directory /tmp/testvhost>
+    Options Indexes FollowSymLinks MultiViews
+    AllowOverride None
+    Order allow,deny
+    allow from all
+  </Directory>
+  ErrorLog /var/log/apache2/error.log
+  LogLevel warn
+  CustomLog /var/log/apache2/access.log combined
+  ServerSignature On
+</VirtualHost>

data/spec/fixtures/releases/jamtur01-apache/lib/puppet/provider/a2mod/debian.rb

@@ -0,0 +1,21 @@
+Puppet::Type.type(:a2mod).provide(:debian) do
+    desc "Manage Apache 2 modules on Debian-like OSes (e.g. Ubuntu)"
+
+    commands :encmd => "a2enmod"
+    commands :discmd => "a2dismod"
+
+    defaultfor 'os.name' => [:debian, :ubuntu]
+
+    def create
+        encmd resource[:name]
+    end
+
+    def destroy
+        discmd resource[:name]
+    end
+
+    def exists?
+        mod= "/etc/apache2/mods-enabled/" + resource[:name] + ".load"
+        Puppet::FileSystem.exist?(mod)
+    end
+end

data/spec/fixtures/releases/jamtur01-apache/lib/puppet/type/a2mod.rb

@@ -0,0 +1,12 @@
+Puppet::Type.newtype(:a2mod) do
+    @doc = "Manage Apache 2 modules"
+
+    ensurable
+
+    newparam(:name) do
+       desc "The name of the module to be managed"
+
+       isnamevar
+
+    end
+end

data/spec/fixtures/releases/jamtur01-apache/manifests/dev.pp

@@ -0,0 +1,5 @@
+class apache::dev {
+  include apache::params
+
+  package{$apache::params::apache_dev: ensure => installed}
+}

data/spec/fixtures/releases/jamtur01-apache/manifests/init.pp

@@ -0,0 +1,34 @@
+# ensure apache is installed
+class apache {
+  include apache::params
+  package{'httpd':
+    name   => $apache::params::apache_name,
+    ensure => present,
+  }
+  service { 'httpd':
+    name      => $apache::params::apache_name,
+    ensure    => running,
+    enable    => true,
+    subscribe => Package['httpd'],
+  }
+  #
+  # May want to purge all none realize modules using the resources resource type.
+  # A2mod resource type is broken.  Look into fixing it and moving it into apache.
+  #
+  A2mod { require => Package['httpd'], notify => Service['httpd']}
+  @a2mod {
+   'rewrite' : ensure => present;
+   'headers' : ensure => present;
+   'expires' : ensure => present;
+  }
+  $vdir = $os['name'] ? {
+    'ubuntu' => '/etc/apache2/sites-enabled/',
+    default => '/etc/httpd/conf.d',
+  }
+  file { $vdir:
+    ensure => directory,
+    recurse => true,
+    purge => true,
+    notify => Service['httpd'],
+  }
+}

data/spec/fixtures/releases/jamtur01-apache/manifests/params.pp

@@ -0,0 +1,17 @@
+class apache::params{
+  $user  = 'www-data'
+  $group = 'www-data'
+
+  case $os['name'] {
+    "centos": {
+       $apache_name = httpd
+       $ssl_package = mod_ssl
+       $apache_dev  = httpd-devel
+    }
+    "ubuntu": {
+       $apache_name = apache2
+       $ssl_package = apache-ssl
+       $apache_dev  = [ libaprutil1-dev, libapr1-dev, apache2-prefork-dev ]
+    }
+  }
+}

data/spec/fixtures/releases/jamtur01-apache/manifests/php.pp

@@ -0,0 +1,5 @@
+class apache::php{
+  package{'libapache2-mod-php5':
+    ensure => present,
+  }
+}

data/spec/fixtures/releases/jamtur01-apache/manifests/ssl.pp

@@ -0,0 +1,15 @@
+class apache::ssl {
+  include apache
+
+
+  case $facts['os']['name'] {
+     "centos": {
+        package { $apache::params::ssl_package:
+           require => Package['httpd'],
+        }
+     }
+     "ubuntu": {
+        a2mod { "ssl": ensure => present, }
+     }
+  }
+}

data/spec/fixtures/releases/jamtur01-apache/manifests/vhost.pp

@@ -0,0 +1,15 @@
+define apache::vhost( $port, $docroot, $ssl=true, $template='apache/vhost-default.conf.erb', $priority, $serveraliases = '' ) {
+  include apache
+  $vdir = $os['name']? {
+    'ubuntu' => '/etc/apache2/sites-enabled/',
+    default => '/etc/httpd/conf.d',
+  }
+  file{"${vdir}/${priority}-${name}":
+    content => template($template),
+    owner => 'root',
+    group => 'root',
+    mode => '0777',
+    require => Package['httpd'],
+    notify => Service['httpd'],
+  }
+}

data/spec/fixtures/releases/jamtur01-apache/metadata.json

@@ -0,0 +1 @@
+{"dependencies":[],"types":[{"providers":[{"name":"a2mod","doc":"Manage Apache 2 modules on Debian and Ubuntu  Required binaries: ``a2enmod``, ``a2dismod``.    Default for ``operatingsystem`` == ``debianubuntu``.  "}],"parameters":[{"name":"name","doc":"The name of the module to be managed"}],"properties":[{"name":"ensure","doc":"The basic property that the resource should be in.  Valid values are ``present``, ``absent``."}],"name":"a2mod","doc":"Manage Apache 2 modules on Debian and Ubuntu"}],"checksums":{"manifests/params.pp":"71734796921dbdbfd58f503622527616","tests/ssl.pp":"191912535199531fd631f911c6329e56","tests/vhost.pp":"1b91e03c8ef89a7ecb6793831ac18399","manifests/php.pp":"b78cc593f1c4cd800c906e0891c9b11f","files/httpd":"295f5e924afe6f752d29327e73fe6d0a","tests/php.pp":"ce7bb9eef69d32b42a32ce32d9653625","lib/puppet/provider/a2mod/a2mod.rb":"18c5bb180b75a2375e95e07f88a94257","files/test.vhost":"0602022c19a7b6b289f218c7b93c1aea","manifests/ssl.pp":"b4334a161a2ba5fa8a62cf7b38f352c8","manifests/dev.pp":"510813942246cc9a7786d8f2d8874a35","manifests/vhost.pp":"cbc4657b0cce5cd432057393d5f6b0c2","tests/init.pp":"4eac4a7ef68499854c54a78879e25535","lib/puppet/type/a2mod.rb":"0e1b4843431413a10320ac1f6a055d15","tests/apache.pp":"4eac4a7ef68499854c54a78879e25535","tests/dev.pp":"4cf15c1fecea3ca86009f182b402c7ab","templates/vhost-default.conf.erb":"9055aed946e1111c30ab81fedac2c8b0","manifests/init.pp":"dc503e26e8021351078813b541c4bd3d","Modulefile":"d43334b4072cd1744121b3b25cd9ed15"},"version":"0.0.1","name":"jamtur01-apache"}

data/spec/fixtures/releases/jamtur01-apache/templates/vhost-default.conf.erb

@@ -0,0 +1,20 @@
+NameVirtualHost *:<%= port %>
+<VirtualHost *:<%= port %>>
+  ServerName <%= name %>
+<%if serveraliases.is_a? Array -%>
+<% serveraliases.each do |name| -%><%= "  ServerAlias #{name}\n" %><% end -%>
+<% elsif serveraliases != '' -%>
+<%= "  ServerAlias #{serveraliases}" -%>
+<% end -%>
+  DocumentRoot <%= docroot %>
+  <Directory <%= docroot %>>
+    Options Indexes FollowSymLinks MultiViews
+    AllowOverride None
+    Order allow,deny
+    allow from all
+  </Directory>
+  ErrorLog /var/log/apache2/<%= name %>_error.log
+  LogLevel warn
+  CustomLog /var/log/apache2/<%= name %>_access.log combined
+  ServerSignature On
+</VirtualHost>

data/spec/fixtures/releases/jamtur01-apache/tests/apache.pp

@@ -0,0 +1 @@
+include apache

data/spec/fixtures/releases/jamtur01-apache/tests/dev.pp

@@ -0,0 +1 @@
+include apache::dev

data/spec/fixtures/releases/jamtur01-apache/tests/init.pp

@@ -0,0 +1 @@
+include apache

data/spec/fixtures/releases/jamtur01-apache/tests/php.pp

@@ -0,0 +1 @@
+include apache::php

data/spec/fixtures/releases/jamtur01-apache/tests/ssl.pp

@@ -0,0 +1 @@
+include apache::ssl

data/spec/fixtures/releases/jamtur01-apache/tests/vhost.pp

@@ -0,0 +1,2 @@
+include apache
+apache::vhost { 'test.vhost': source => 'puppet:///modules/apache/test.vhost' }

data/spec/fixtures/ssl/127.0.0.1-key.pem

@@ -0,0 +1,117 @@
+RSA Private-Key: (2048 bit, 2 primes)
+modulus:
+    00:df:40:52:59:4f:eb:dd:d8:06:f5:c0:e8:eb:11:
+    52:31:80:a1:45:8e:3e:07:81:5c:cd:90:ea:2a:d0:
+    84:d3:6d:54:8a:78:0c:6b:34:eb:fc:dd:90:e9:9a:
+    5a:23:24:3b:31:99:17:d9:06:70:a8:51:95:68:50:
+    9d:59:aa:76:2f:28:18:99:81:be:ca:1d:79:75:8b:
+    85:3c:a4:05:39:06:f6:d8:25:13:54:e8:bb:d2:b4:
+    30:35:9e:10:64:2d:25:44:2a:f8:75:1f:60:ec:8a:
+    57:fc:fe:4d:57:f2:9c:e2:0d:6b:c5:f7:2d:ce:f5:
+    9e:93:f8:83:1a:b6:94:e3:c0:e2:b2:56:92:7e:e5:
+    d2:bd:f8:3c:9d:07:b4:85:93:77:5f:62:bd:ba:0e:
+    30:cc:77:46:07:2a:6a:aa:18:bf:0c:f0:23:ef:7d:
+    d9:84:86:35:3e:b5:76:1a:02:f3:9a:11:70:3f:f0:
+    6d:58:d1:2a:19:f8:e1:ed:77:ab:0a:e7:98:12:33:
+    5e:f9:b0:a8:f8:a5:98:c9:4e:3f:6c:01:8a:94:30:
+    c9:19:a1:29:46:18:5e:83:9f:9d:2a:cb:70:db:8a:
+    de:ca:2d:c1:47:82:ba:0b:20:b9:20:09:3c:1d:1c:
+    62:77:a7:85:83:5a:08:28:34:6b:75:e1:cd:7b:b7:
+    e7:e5
+publicExponent: 65537 (0x10001)
+privateExponent:
+    00:bc:48:9b:2b:07:e4:7d:2c:fc:71:b7:48:b9:37:
+    da:82:35:61:ce:2f:b0:d0:d3:a1:59:1d:a6:e0:85:
+    0c:00:e4:6c:30:7c:1e:bd:2b:dc:fb:5e:42:21:42:
+    34:52:fe:f3:8d:58:f8:6b:e8:aa:8a:ca:83:9f:7e:
+    9d:b6:49:b5:72:ff:f5:ff:41:15:8f:90:5c:27:6e:
+    8b:e8:20:cc:e6:d3:a0:cb:9a:39:3b:9b:2d:0c:ff:
+    3a:c9:7d:8d:85:6f:2d:c6:d8:16:c3:70:bb:65:c3:
+    27:82:0f:57:5b:9d:1a:02:ec:1e:c0:cf:3e:ab:15:
+    2b:b0:d0:1e:82:21:0a:61:29:70:2a:34:5b:15:18:
+    67:30:5e:88:ad:d9:e4:59:61:7f:cc:4b:b2:9a:cf:
+    ac:49:fe:49:63:0a:14:db:89:49:22:6f:64:8b:bc:
+    62:4d:61:44:05:be:cc:5c:0c:2f:0e:fa:5f:6a:2e:
+    10:64:a4:db:86:1a:a9:da:1a:0d:ce:57:ec:c1:03:
+    7a:00:bd:49:31:b4:8b:bd:56:99:a2:14:dd:78:82:
+    ea:09:9f:74:12:bd:45:56:b5:6e:ee:d6:69:47:68:
+    e6:6d:75:ea:87:e1:6a:88:8b:b1:c2:7a:ae:35:89:
+    a3:3c:86:97:d1:de:ba:14:2b:d0:d1:3e:d7:af:92:
+    86:01
+prime1:
+    00:fc:aa:e9:66:8b:09:55:59:35:21:19:ff:72:8a:
+    47:cc:ed:36:24:3a:6c:ee:81:75:cd:aa:6d:af:1f:
+    4d:83:a5:e5:77:c8:a2:de:72:11:a0:72:af:79:0a:
+    b5:b0:e5:e4:28:75:11:b5:56:eb:86:32:f0:32:1f:
+    1d:a8:26:9f:40:d7:6c:ae:7c:7d:90:27:39:95:0f:
+    6b:0a:91:3e:03:c1:e8:04:01:2e:16:a0:dc:6e:70:
+    9f:1a:17:c1:7e:65:ea:4c:2d:33:00:23:83:d9:3b:
+    f7:a5:0b:5f:f5:a9:65:7d:bd:1e:79:e9:24:62:a3:
+    49:d7:d2:6f:5f:9e:2e:03:75
+prime2:
+    00:e2:32:17:38:94:ba:d3:63:eb:a3:83:77:09:4f:
+    ef:52:ef:ce:1e:86:b2:4e:bc:30:eb:67:f2:c1:aa:
+    be:04:fd:c5:76:43:15:e7:7f:f7:c7:a3:6f:e9:e3:
+    df:7e:ad:9c:a1:eb:ee:dc:ad:6d:bc:4e:88:1c:d4:
+    d1:5c:1d:21:f0:7a:19:4d:cc:0d:4b:37:08:34:8d:
+    ac:1c:fd:3a:e9:f3:5e:f3:f2:5a:1c:15:76:38:d3:
+    ff:b5:2f:fd:59:37:c6:86:6e:29:4b:10:01:75:f0:
+    5e:46:aa:ab:32:e3:0f:4c:72:e7:36:d7:5a:9b:76:
+    e2:08:09:32:49:30:ac:f4:b1
+exponent1:
+    44:c4:8b:a3:d2:21:a7:2e:11:6c:c1:f3:a9:8c:03:
+    40:be:2b:27:2f:13:a8:d2:69:6a:a1:81:1a:d1:ad:
+    3a:30:73:c4:e7:41:94:c3:7d:12:ab:44:20:f0:8e:
+    44:e8:3c:f1:d9:f3:08:e4:f0:53:65:17:c4:bc:7d:
+    48:df:c2:26:56:bb:88:bd:ef:3a:c5:c2:41:54:a1:
+    f0:8d:59:50:92:7d:00:62:05:d6:38:cf:e5:eb:17:
+    12:75:f6:be:dd:24:28:b9:80:91:00:19:89:8d:6d:
+    b8:68:e1:24:2e:87:a5:f2:4c:12:28:27:34:05:77:
+    3a:9b:56:9e:b2:a1:99:65
+exponent2:
+    00:d3:3b:d7:f7:9c:dd:43:9f:e2:64:56:d7:09:39:
+    3e:d4:02:e2:48:1b:9d:d4:6d:66:79:d0:1f:21:c0:
+    e3:a7:21:9e:0f:ac:e2:7d:c8:41:8a:8c:14:6d:25:
+    c2:87:38:76:37:b8:6e:de:62:8f:41:f5:4c:a3:30:
+    13:3b:a4:71:17:73:ce:c1:9a:37:27:f0:82:97:21:
+    5e:83:cb:f0:02:9e:a6:23:c6:45:64:48:9e:98:bf:
+    51:e2:d0:a8:15:73:42:d0:33:7c:18:7f:1f:fe:15:
+    b4:d4:e5:78:ef:12:a0:2c:d2:79:1d:fb:ca:bf:b8:
+    2b:a9:39:7d:5e:60:38:84:61
+coefficient:
+    0b:f3:f3:f2:06:4d:f4:8d:dc:88:d0:da:24:f1:03:
+    4a:5f:91:40:29:ff:85:be:a1:6c:e2:00:ac:05:46:
+    79:db:9d:b6:5f:7e:92:a7:cb:f1:77:e6:4e:c6:b9:
+    ee:76:0e:fe:c3:ba:91:69:00:75:dc:d6:76:2e:f1:
+    dd:1b:75:5d:3b:f4:6b:d6:a2:3d:bf:8e:49:45:0f:
+    b1:4e:c6:e5:fb:c3:91:05:92:51:b1:c1:59:97:e0:
+    1a:a5:c9:ee:3f:af:32:dc:0c:4a:00:37:04:94:64:
+    fa:97:ab:47:17:fe:ce:bb:d4:6c:02:26:5d:41:1f:
+    42:8b:06:d9:e0:a0:ae:68
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

data/spec/fixtures/ssl/127.0.0.1.pem

@@ -0,0 +1,69 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 5 (0x5)
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Test CA
+        Validity
+            Not Before: Jan  1 00:00:00 1970 GMT
+            Not After : Jun 15 01:19:37 2031 GMT
+        Subject: CN=127.0.0.1
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                RSA Public-Key: (2048 bit)
+                Modulus:
+                    00:df:40:52:59:4f:eb:dd:d8:06:f5:c0:e8:eb:11:
+                    52:31:80:a1:45:8e:3e:07:81:5c:cd:90:ea:2a:d0:
+                    84:d3:6d:54:8a:78:0c:6b:34:eb:fc:dd:90:e9:9a:
+                    5a:23:24:3b:31:99:17:d9:06:70:a8:51:95:68:50:
+                    9d:59:aa:76:2f:28:18:99:81:be:ca:1d:79:75:8b:
+                    85:3c:a4:05:39:06:f6:d8:25:13:54:e8:bb:d2:b4:
+                    30:35:9e:10:64:2d:25:44:2a:f8:75:1f:60:ec:8a:
+                    57:fc:fe:4d:57:f2:9c:e2:0d:6b:c5:f7:2d:ce:f5:
+                    9e:93:f8:83:1a:b6:94:e3:c0:e2:b2:56:92:7e:e5:
+                    d2:bd:f8:3c:9d:07:b4:85:93:77:5f:62:bd:ba:0e:
+                    30:cc:77:46:07:2a:6a:aa:18:bf:0c:f0:23:ef:7d:
+                    d9:84:86:35:3e:b5:76:1a:02:f3:9a:11:70:3f:f0:
+                    6d:58:d1:2a:19:f8:e1:ed:77:ab:0a:e7:98:12:33:
+                    5e:f9:b0:a8:f8:a5:98:c9:4e:3f:6c:01:8a:94:30:
+                    c9:19:a1:29:46:18:5e:83:9f:9d:2a:cb:70:db:8a:
+                    de:ca:2d:c1:47:82:ba:0b:20:b9:20:09:3c:1d:1c:
+                    62:77:a7:85:83:5a:08:28:34:6b:75:e1:cd:7b:b7:
+                    e7:e5
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                DNS:127.0.0.1, DNS:127.0.0.2
+    Signature Algorithm: sha256WithRSAEncryption
+         6f:ef:ac:da:0b:a5:4f:d0:30:57:0c:8c:5a:90:be:18:11:ec:
+         e0:25:c2:0e:ef:05:cb:b5:50:43:ba:b7:25:1c:26:60:e8:ad:
+         b6:a5:1a:6a:2b:e2:66:e1:3a:b6:00:80:39:e1:19:ef:c2:e8:
+         fd:f2:04:0e:ed:fa:1e:e5:f8:f1:32:dc:4e:47:7e:43:a4:09:
+         3a:24:b4:fe:ab:7e:d6:b2:d4:4e:e0:9f:e5:c9:79:9b:87:f4:
+         7b:3d:40:a4:cf:0e:03:5c:dc:14:82:bf:1b:32:9a:18:0c:5b:
+         94:2d:1f:41:b6:a5:e7:89:d7:3b:dc:c8:17:f6:0e:ea:2d:7b:
+         a6:04:02:08:9a:b6:3d:66:03:67:16:94:2d:36:13:ee:61:18:
+         f9:17:04:6e:16:f3:65:9b:5c:34:ed:49:d8:6e:26:58:ca:68:
+         3f:2c:bb:0e:42:64:93:a7:8c:d4:d9:15:ae:fb:0f:f7:f7:ce:
+         be:99:6f:40:90:bf:e4:44:c5:44:4a:09:9a:8f:da:f6:b5:a6:
+         63:af:6b:37:ee:7c:b7:69:b6:67:76:98:f1:69:18:8e:2c:45:
+         bb:04:82:d9:03:31:85:c6:61:d3:38:60:39:45:43:a9:7b:d7:
+         f5:fd:18:f2:ec:43:42:0b:69:b8:c5:84:05:ae:a2:02:d3:19:
+         80:bd:88:a5
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

data/spec/fixtures/ssl/bad-basic-constraints.pem

@@ -0,0 +1,81 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 11 (0xb)
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=Test CA
+        Validity
+            Not Before: Jan  1 00:00:00 1970 GMT
+            Not After : Jun 15 01:19:37 2031 GMT
+        Subject: CN=Test CA
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                RSA Public-Key: (2048 bit)
+                Modulus:
+                    00:b0:eb:f6:b5:c4:28:a8:18:53:85:91:20:76:5d:
+                    aa:be:78:ae:10:60:d3:b5:66:f7:41:c8:bf:42:00:
+                    c8:99:63:ed:d0:92:12:5a:71:c0:da:d2:fd:b3:65:
+                    3b:a5:fa:be:0d:e5:2a:20:2f:df:a1:c5:41:c3:c3:
+                    9c:04:eb:07:6c:8d:48:9c:14:be:24:81:7d:03:4d:
+                    56:62:80:6b:34:e0:ad:68:f0:17:3d:fa:3b:b4:f7:
+                    a9:a3:fb:7d:30:0d:dd:c5:0b:b6:32:b6:c2:d9:b1:
+                    e8:97:ce:19:66:89:1b:5d:d6:4a:d9:0e:a6:b2:ad:
+                    cc:57:e9:0a:12:83:98:a3:18:90:a3:ae:ec:8e:a1:
+                    96:ee:a4:36:7b:13:c4:95:45:02:69:89:f4:d3:49:
+                    17:e6:e4:d5:91:23:24:7e:94:52:b5:4f:f3:0b:11:
+                    d8:b2:69:7e:72:25:88:03:15:7b:2f:64:ca:8c:a9:
+                    ce:b0:ed:eb:00:aa:68:af:cd:e4:1c:13:af:a7:ff:
+                    54:b6:7d:be:b5:6c:bd:6a:20:be:47:2f:a8:dd:7a:
+                    1d:2a:44:a4:0b:15:eb:68:85:05:32:17:01:cf:a7:
+                    27:03:cb:85:12:c1:ec:4f:c1:4b:2a:11:34:55:7c:
+                    b3:6c:fa:79:6d:4f:be:31:92:b8:f3:01:90:8e:42:
+                    6b:71
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: critical
+                CA:FALSE
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+            X509v3 Subject Key Identifier: 
+                B2:EE:24:88:34:99:18:60:81:9E:2A:D3:F4:5A:66:FA:91:F6:E1:C6
+            Netscape Comment: 
+                Puppet Server Internal Certificate
+            X509v3 Authority Key Identifier: 
+                keyid:B2:EE:24:88:34:99:18:60:81:9E:2A:D3:F4:5A:66:FA:91:F6:E1:C6
+
+    Signature Algorithm: sha256WithRSAEncryption
+         82:de:f4:cb:97:76:b0:a7:52:71:6c:94:4c:e6:8d:d6:e5:32:
+         1d:ca:99:44:9c:a2:b5:e4:a5:ba:06:08:6b:e7:b5:55:76:02:
+         7e:ee:69:6a:0d:27:69:7b:e3:80:97:10:9c:40:98:13:e4:d1:
+         40:b6:e6:59:1d:c2:1c:6e:64:ba:b5:af:7b:aa:70:d7:34:1b:
+         d3:cb:9f:2b:c0:72:36:70:ad:04:a0:07:9c:dd:e5:fa:02:b3:
+         c9:f1:f0:6a:99:89:95:20:e2:31:7f:21:2e:8b:b8:76:5e:31:
+         82:ec:4b:31:43:e7:20:d9:97:0f:52:8e:26:1d:0b:31:2d:f6:
+         74:40:6b:09:cf:39:e8:d9:c8:27:ed:9d:76:a5:b2:2a:83:db:
+         16:8e:5f:ee:e7:90:44:68:34:92:33:bd:39:7c:96:8f:e3:61:
+         78:b5:4e:59:d8:12:0a:0d:90:17:22:7c:0e:34:bb:ad:94:66:
+         07:d5:4f:d9:79:34:6f:12:c1:77:69:a1:20:ae:cc:b0:2e:e9:
+         9c:bb:94:89:70:ee:d0:14:1c:05:89:40:76:bb:47:64:83:24:
+         73:95:cc:f1:65:ee:f8:bf:55:f0:c3:e6:34:6b:07:09:67:3e:
+         03:01:8d:ba:cb:5d:5b:89:d6:e3:cb:ce:55:dc:ad:8d:7f:de:
+         c6:5a:7c:9f
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----