puppet 7.8.0 → 7.12.0

data/spec/unit/util/autoload_spec.rb

@@ -178,15 +178,14 @@ describe Puppet::Util::Autoload do
   end
 
   describe "when loading all files" do
+    let(:basedir) { tmpdir('autoloader') }
+    let(:path) { File.join(basedir, @autoload.path, 'file.rb') }
+
     before do
-      allow(@autoload.class).to receive(:search_directories).and_return([make_absolute("/a")])
-      allow(FileTest).to receive(:directory?).and_return(true)
-      allow(Dir).to receive(:glob).and_return([make_absolute("/a/foo/file.rb")])
-      allow(Puppet::FileSystem).to receive(:exist?).and_return(true)
-      @time_a = Time.utc(2010, 'jan', 1, 6, 30)
-      allow(File).to receive(:mtime).and_return(@time_a)
+      FileUtils.mkdir_p(File.dirname(path))
+      FileUtils.touch(path)
 
-      allow(@autoload.class).to receive(:loaded?).and_return(false)
+      allow(@autoload.class).to receive(:search_directories).and_return([basedir])
     end
 
     [RuntimeError, LoadError, SyntaxError].each do |error|
@@ -198,7 +197,25 @@ describe Puppet::Util::Autoload do
     end
 
     it "should require the full path to the file" do
-      expect(Kernel).to receive(:load).with(make_absolute("/a/foo/file.rb"), any_args)
+      expect(Kernel).to receive(:load).with(path, any_args)
+
+      @autoload.loadall(env)
+    end
+
+    it "autoloads from a directory whose ancestor is Windows 8.3", if: Puppet::Util::Platform.windows? do
+      # File.expand_path will expand ~ in the last directory component only(!)
+      # so create an ancestor directory with a long path
+      dir = File.join(tmpdir('longpath'), 'short')
+      path = File.join(dir, @autoload.path, 'file.rb')
+
+      FileUtils.mkdir_p(File.dirname(path))
+      FileUtils.touch(path)
+
+      dir83 = File.join(File.dirname(basedir), 'longpa~1', 'short')
+      path83 = File.join(dir83, @autoload.path, 'file.rb')
+
+      allow(@autoload.class).to receive(:search_directories).and_return([dir83])
+      expect(Kernel).to receive(:load).with(path83, any_args)
 
       @autoload.loadall(env)
     end

data/spec/unit/util/ldap/connection_spec.rb

@@ -29,7 +29,7 @@ describe Puppet::Util::Ldap::Connection do
     allow(LDAP::Conn).to receive(:new).and_return(@ldapconn)
     allow(LDAP::SSLConn).to receive(:new).and_return(@ldapconn)
 
-    @connection = Puppet::Util::Ldap::Connection.new("host", "port")
+    @connection = Puppet::Util::Ldap::Connection.new("host", 1234)
   end
 
 
@@ -39,31 +39,31 @@ describe Puppet::Util::Ldap::Connection do
     end
 
     it "should allow specification of a user and password" do
-      expect { Puppet::Util::Ldap::Connection.new("myhost", "myport", :user => "blah", :password => "boo") }.not_to raise_error
+      expect { Puppet::Util::Ldap::Connection.new("myhost", 1234, :user => "blah", :password => "boo") }.not_to raise_error
     end
 
     it "should allow specification of ssl" do
-      expect { Puppet::Util::Ldap::Connection.new("myhost", "myport", :ssl => :tsl) }.not_to raise_error
+      expect { Puppet::Util::Ldap::Connection.new("myhost", 1234, :ssl => :tsl) }.not_to raise_error
     end
 
     it "should support requiring a new connection" do
-      expect { Puppet::Util::Ldap::Connection.new("myhost", "myport", :reset => true) }.not_to raise_error
+      expect { Puppet::Util::Ldap::Connection.new("myhost", 1234, :reset => true) }.not_to raise_error
     end
 
     it "should fail if ldap is unavailable" do
       expect(Puppet.features).to receive(:ldap?).and_return(false)
 
-      expect { Puppet::Util::Ldap::Connection.new("host", "port") }.to raise_error(Puppet::Error)
+      expect { Puppet::Util::Ldap::Connection.new("host", 1234) }.to raise_error(Puppet::Error)
     end
 
     it "should use neither ssl nor tls by default" do
-      expect(LDAP::Conn).to receive(:new).with("host", "port").and_return(@ldapconn)
+      expect(LDAP::Conn).to receive(:new).with("host", 1234).and_return(@ldapconn)
 
       @connection.start
     end
 
     it "should use LDAP::SSLConn if ssl is requested" do
-      expect(LDAP::SSLConn).to receive(:new).with("host", "port").and_return(@ldapconn)
+      expect(LDAP::SSLConn).to receive(:new).with("host", 1234).and_return(@ldapconn)
 
       @connection.ssl = true
 
@@ -71,7 +71,7 @@ describe Puppet::Util::Ldap::Connection do
     end
 
     it "should use LDAP::SSLConn and tls if tls is requested" do
-      expect(LDAP::SSLConn).to receive(:new).with("host", "port", true).and_return(@ldapconn)
+      expect(LDAP::SSLConn).to receive(:new).with("host", 1234, true).and_return(@ldapconn)
 
       @connection.ssl = :tls
 
@@ -121,8 +121,8 @@ describe Puppet::Util::Ldap::Connection do
     end
 
     it "should use the :ldapport setting to determine the port" do
-      Puppet[:ldapport] = "456"
-      expect(Puppet::Util::Ldap::Connection).to receive(:new).with(anything, "456", anything)
+      Puppet[:ldapport] = 456
+      expect(Puppet::Util::Ldap::Connection).to receive(:new).with(anything, 456, anything)
       Puppet::Util::Ldap::Connection.instance
     end
 

data/spec/unit/util/ldap/manager_spec.rb

@@ -245,8 +245,8 @@ describe Puppet::Util::Ldap::Manager, :if => Puppet.features.ldap? do
     end
 
     it "should open the connection with its port set to the :ldapport" do
-      Puppet[:ldapport] = "28"
-      expect(Puppet::Util::Ldap::Connection).to receive(:new).with(anything, "28", anything).and_return(@conn)
+      Puppet[:ldapport] = 28
+      expect(Puppet::Util::Ldap::Connection).to receive(:new).with(anything, 28, anything).and_return(@conn)
 
       @manager.connect { |c| }
     end

data/spec/unit/util/logging_spec.rb

@@ -552,6 +552,7 @@ original
 
     describe 'does support debugging' do
       before :each do
+        allow(Facter).to receive(:respond_to?).with(:on_message).and_return(true)
         allow(Facter).to receive(:respond_to?).with(:debugging, any_args).and_return(true)
       end
 
@@ -568,6 +569,7 @@ original
 
     describe 'does support trace' do
       before :each do
+        allow(Facter).to receive(:respond_to?).with(:on_message)
         allow(Facter).to receive(:respond_to?).with(:trace, any_args).and_return(true)
       end
 

data/spec/unit/util/windows/sid_spec.rb

@@ -131,38 +131,73 @@ describe "Puppet::Util::Windows::SID", :if => Puppet::Util::Platform.windows? do
       expect(subject.name_to_principal(unknown_name)).to be_nil
     end
 
+    it "should print a debug message if the account does not exist" do
+      expect(Puppet).to receive(:debug).with(/No mapping between account names and security IDs was done/)
+      subject.name_to_principal(unknown_name)
+    end
+
     it "should return a Puppet::Util::Windows::SID::Principal instance for any valid sid" do
       expect(subject.name_to_principal(sid)).to be_an_instance_of(Puppet::Util::Windows::SID::Principal)
     end
 
+    it "should not print debug messages for valid sid" do
+      expect(Puppet).not_to receive(:debug).with(/Could not retrieve raw SID bytes from/)
+      expect(Puppet).not_to receive(:debug).with(/No mapping between account names and security IDs was done/)
+      subject.name_to_principal(sid)
+    end
+
+    it "should print a debug message for invalid sid" do
+      expect(Puppet).not_to receive(:debug).with(/Could not retrieve raw SID bytes from/)
+      expect(Puppet).to receive(:debug).with(/No mapping between account names and security IDs was done/)
+      subject.name_to_principal('S-1-5-21-INVALID-SID')
+    end
+
     it "should accept unqualified account name" do
       # NOTE: lookup by name works in localized environments only for a few instances
       # this works in French Windows, even though the account is really Syst\u00E8me
       expect(subject.name_to_principal('SYSTEM').sid).to eq(sid)
     end
 
+    it "should not print debug messages for unqualified account name" do
+      expect(Puppet).not_to receive(:debug).with(/Could not retrieve raw SID bytes from/)
+      expect(Puppet).not_to receive(:debug).with(/No mapping between account names and security IDs was done/)
+      subject.name_to_principal('SYSTEM')
+    end
+
     it "should be case-insensitive" do
       # NOTE: lookup by name works in localized environments only for a few instances
       # this works in French Windows, even though the account is really Syst\u00E8me
       expect(subject.name_to_principal('SYSTEM')).to eq(subject.name_to_principal('system'))
     end
 
+    it "should not print debug messages for wrongly cased account name" do
+      expect(Puppet).not_to receive(:debug).with(/Could not retrieve raw SID bytes from/)
+      expect(Puppet).not_to receive(:debug).with(/No mapping between account names and security IDs was done/)
+      subject.name_to_principal('system')
+    end
+
     it "should be leading and trailing whitespace-insensitive" do
       # NOTE: lookup by name works in localized environments only for a few instances
       # this works in French Windows, even though the account is really Syst\u00E8me
       expect(subject.name_to_principal('SYSTEM')).to eq(subject.name_to_principal(' SYSTEM '))
     end
 
+    it "should not print debug messages for account name with leading and trailing whitespace" do
+      expect(Puppet).not_to receive(:debug).with(/Could not retrieve raw SID bytes from/)
+      expect(Puppet).not_to receive(:debug).with(/No mapping between account names and security IDs was done/)
+      subject.name_to_principal(' SYSTEM ')
+    end
+
     it "should accept domain qualified account names" do
       # NOTE: lookup by name works in localized environments only for a few instances
       # this works in French Windows, even though the account is really AUTORITE NT\\Syst\u00E8me
       expect(subject.name_to_principal('NT AUTHORITY\SYSTEM').sid).to eq(sid)
     end
 
-    it "should print a debug message on failures" do
-      expect(Puppet).to receive(:debug).with(/Could not retrieve raw SID bytes from 'NonExistingUser'/)
-      expect(Puppet).to receive(:debug).with(/No mapping between account names and security IDs was done/)
-      subject.name_to_principal('NonExistingUser')
+    it "should not print debug messages for domain qualified account names" do
+      expect(Puppet).not_to receive(:debug).with(/Could not retrieve raw SID bytes from/)
+      expect(Puppet).not_to receive(:debug).with(/No mapping between account names and security IDs was done/)
+      subject.name_to_principal('NT AUTHORITY\SYSTEM')
     end
   end
 

data/spec/unit/util_spec.rb

@@ -142,9 +142,7 @@ describe Puppet::Util do
 
     # In 2.3, the behavior is mostly correct when external codepage is 65001 / UTF-8
     it "works around Ruby bug 8822 (which fails to preserve UTF-8 properly when accessing ENV) (Ruby >= 2.3.x) ",
-      :if => Puppet::Util::Platform.windows? do
-
-      raise 'This test requires a non-UTF8 codepage' if Encoding.default_external == Encoding::UTF_8
+      :if => Puppet::Util::Platform.windows? && RUBY_VERSION.to_f < 3 do
 
       withenv_utf8 do |utf_8_key, utf_8_value, codepage_key|
         # Ruby 2.3 fixes access by the original UTF-8 key, and behaves differently than 2.1

data/spec/unit/x509/cert_provider_spec.rb

@@ -223,7 +223,7 @@ describe Puppet::X509::CertProvider do
   end
 
   context 'when loading' do
-    context 'private keys' do
+    context 'private keys', unless: RUBY_PLATFORM == 'java' do
       let(:provider) { create_provider(privatekeydir: fixture_dir) }
       let(:password) { '74695716c8b6' }
 
@@ -298,6 +298,14 @@ describe Puppet::X509::CertProvider do
           expect(provider.load_private_key('ec-key')).to be_a(OpenSSL::PKey::EC)
         end
 
+        it 'returns an EC key from PKCS#8 format' do
+          expect(provider.load_private_key('ec-key-pk8')).to be_a(OpenSSL::PKey::EC)
+        end
+
+        it 'returns an EC key from openssl format' do
+          expect(provider.load_private_key('ec-key-openssl')).to be_a(OpenSSL::PKey::EC)
+        end
+
         it 'decrypts an EC key using the password' do
           ec = provider.load_private_key('encrypted-ec-key', password: password)
           expect(ec).to be_a(OpenSSL::PKey::EC)

data/tasks/generate_cert_fixtures.rake

@@ -40,6 +40,7 @@ task(:gen_cert_fixtures) do
   # 127.0.0.1.pem                     |   +- /CN=127.0.0.1 (with dns alt names)
   # tampered-cert.pem                 |   +- /CN=signed (with different public key)
   # ec.pem                            |   +- /CN=ec (with EC private key)
+  # oid.pem                           |   +- /CN=oid (with custom oid)
   #                                   |
   #                                   + /CN=Test CA Agent Subauthority
   #                                   |  |
@@ -49,7 +50,7 @@ task(:gen_cert_fixtures) do
   #
   # bad-basic-constraints.pem        /CN=Test CA (bad isCA constraint)
   #
-  # unknown-ca.pemm                  /CN=Unknown CA
+  # unknown-ca.pem                   /CN=Unknown CA
   #                                   |
   # unknown-127.0.0.1.pem             +- /CN=127.0.0.1
   #
@@ -103,6 +104,14 @@ task(:gen_cert_fixtures) do
   save(dir, '127.0.0.1.pem', signed[:cert])
   save(dir, '127.0.0.1-key.pem', signed[:private_key])
 
+  # Create an SSL cert with extensions containing custom oids
+  extensions = [
+    ['1.3.6.1.4.1.34380.1.2.1.1', OpenSSL::ASN1::UTF8String.new('somevalue'), false],
+  ]
+  oid = ca.create_cert('oid', inter[:cert], inter[:private_key], extensions: extensions)
+  save(dir, 'oid.pem', oid[:cert])
+  save(dir, 'oid-key.pem', oid[:private_key])
+
   # Create a leaf/entity key and cert for host "revoked", issued by "Test CA Subauthority"
   # and revoke the cert
   revoked = ca.create_cert('revoked', inter[:cert], inter[:private_key])

data/tasks/parallel.rake

@@ -5,9 +5,9 @@ require 'thread'
 begin
   require 'rspec'
   require 'rspec/core/formatters/helpers'
-  require 'facter'
+  require 'etc'
 rescue LoadError
-  # Don't define the task if we don't have rspec or facter present
+  # Don't define the task if we don't have rspec present
 else
   module Parallel
     module RSpec
@@ -401,7 +401,7 @@ else
       # Default group size in rspec examples
       DEFAULT_GROUP_SIZE = 1000
 
-      process_count = [(args[:process_count] || Facter.value("processorcount")).to_i, 1].max
+      process_count = [(args[:process_count] || Etc.nprocessors).to_i, 1].max
       group_size = [(args[:group_size] || DEFAULT_GROUP_SIZE).to_i, 1].max
 
       abort unless Parallel::RSpec::Parallelizer.new(process_count, group_size, color_output?, args.extras).run

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: puppet
 version: !ruby/object:Gem::Version
-  version: 7.8.0
+  version: 7.12.0
 platform: ruby
 authors:
 - Puppet Labs
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-06-14 00:00:00.000000000 Z
+date: 2021-10-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: facter
@@ -183,6 +183,13 @@ files:
 - conf/fileserver.conf
 - conf/hiera.yaml
 - conf/puppet.conf
+- examples/enc/regexp_nodes/classes/databases
+- examples/enc/regexp_nodes/classes/webservers
+- examples/enc/regexp_nodes/environment/development
+- examples/enc/regexp_nodes/parameters/service/prod
+- examples/enc/regexp_nodes/parameters/service/qa
+- examples/enc/regexp_nodes/parameters/service/sandbox
+- examples/enc/regexp_nodes/regexp_nodes.rb
 - examples/hiera/README.md
 - examples/hiera/etc/hiera.yaml
 - examples/hiera/etc/hieradb/common.yaml
@@ -197,113 +204,25 @@ files:
 - examples/hiera/modules/users/manifests/dc1.pp
 - examples/hiera/modules/users/manifests/development.pp
 - examples/hiera/site.pp
-- ext/README.environment
+- examples/nagios/check_puppet.rb
+- ext/README.md
 - ext/build_defaults.yaml
-- ext/dbfix.sql
-- ext/debian/README.Debian
-- ext/debian/README.source
-- ext/debian/TODO.Debian
-- ext/debian/changelog.erb
-- ext/debian/compat
-- ext/debian/control
-- ext/debian/copyright
-- ext/debian/docs
-- ext/debian/fileserver.conf
-- ext/debian/puppet-common.dirs
-- ext/debian/puppet-common.install
-- ext/debian/puppet-common.lintian-overrides
-- ext/debian/puppet-common.manpages
-- ext/debian/puppet-common.postinst
-- ext/debian/puppet-common.postrm
-- ext/debian/puppet-el.dirs
-- ext/debian/puppet-el.emacsen-install
-- ext/debian/puppet-el.emacsen-remove
-- ext/debian/puppet-el.emacsen-startup
-- ext/debian/puppet-el.install
-- ext/debian/puppet-testsuite.install
-- ext/debian/puppet-testsuite.lintian-overrides
 - ext/debian/puppet.default
 - ext/debian/puppet.init
-- ext/debian/puppet.lintian-overrides
-- ext/debian/puppet.logrotate
-- ext/debian/puppet.postinst
-- ext/debian/puppet.postrm
-- ext/debian/puppet.preinst
-- ext/debian/puppetmaster-common.install
-- ext/debian/puppetmaster-common.manpages
-- ext/debian/puppetmaster-common.postinst
-- ext/debian/puppetmaster-passenger.dirs
-- ext/debian/puppetmaster-passenger.postinst
-- ext/debian/puppetmaster-passenger.postrm
-- ext/debian/puppetmaster.README.debian
-- ext/debian/puppetmaster.default
-- ext/debian/puppetmaster.init
-- ext/debian/puppetmaster.lintian-overrides
-- ext/debian/puppetmaster.postinst
-- ext/debian/puppetmaster.postrm
-- ext/debian/puppetmaster.preinst
-- ext/debian/rules
-- ext/debian/source/format
-- ext/debian/source/options
-- ext/debian/vim-puppet.README.Debian
-- ext/debian/vim-puppet.dirs
-- ext/debian/vim-puppet.yaml
-- ext/debian/watch
-- ext/freebsd/puppetd
-- ext/freebsd/puppetmasterd
-- ext/gentoo/conf.d/puppet
-- ext/gentoo/conf.d/puppetmaster
-- ext/gentoo/init.d/puppet
-- ext/gentoo/init.d/puppetmaster
-- ext/gentoo/puppet/fileserver.conf
 - ext/hiera/hiera.yaml
-- ext/ips/puppet-agent
-- ext/ips/puppet-master
-- ext/ips/puppet.p5m.erb
-- ext/ips/puppetagent.xml
-- ext/ips/puppetmaster.xml
-- ext/ips/rules
-- ext/ips/transforms
-- ext/ldap/puppet.schema
-- ext/logcheck/puppet
-- ext/nagios/check_puppet.rb
-- ext/osx/file_mapping.yaml
-- ext/osx/postflight.erb
-- ext/osx/preflight.erb
-- ext/osx/prototype.plist.erb
 - ext/osx/puppet.plist
 - ext/project_data.yaml
 - ext/redhat/client.init
 - ext/redhat/client.sysconfig
-- ext/redhat/fileserver.conf
-- ext/redhat/logrotate
-- ext/redhat/puppet.spec.erb
-- ext/redhat/server.init
-- ext/redhat/server.sysconfig
-- ext/regexp_nodes/classes/databases
-- ext/regexp_nodes/classes/webservers
-- ext/regexp_nodes/environment/development
-- ext/regexp_nodes/parameters/service/prod
-- ext/regexp_nodes/parameters/service/qa
-- ext/regexp_nodes/parameters/service/sandbox
-- ext/regexp_nodes/regexp_nodes.rb
-- ext/solaris/pkginfo
 - ext/solaris/smf/puppet
 - ext/solaris/smf/puppet.xml
-- ext/solaris/smf/puppetd.xml
-- ext/solaris/smf/puppetmasterd.xml
-- ext/solaris/smf/svc-puppetd
-- ext/solaris/smf/svc-puppetmasterd
 - ext/suse/client.init
-- ext/suse/puppet.spec
-- ext/suse/server.init
 - ext/systemd/puppet.service
 - ext/windows/puppet_interactive.bat
 - ext/windows/puppet_shell.bat
 - ext/windows/run_puppet_interactive.bat
 - ext/windows/service/daemon.bat
 - ext/windows/service/daemon.rb
-- ext/yaml_nodes.rb
 - install.rb
 - lib/hiera/puppet_function.rb
 - lib/hiera/scope.rb
@@ -398,6 +317,7 @@ files:
 - lib/puppet/face/plugin.rb
 - lib/puppet/face/report.rb
 - lib/puppet/face/resource.rb
+- lib/puppet/facter_impl.rb
 - lib/puppet/feature/base.rb
 - lib/puppet/feature/bolt.rb
 - lib/puppet/feature/cfpropertylist.rb
@@ -436,6 +356,7 @@ files:
 - lib/puppet/file_serving/mount/modules.rb
 - lib/puppet/file_serving/mount/pluginfacts.rb
 - lib/puppet/file_serving/mount/plugins.rb
+- lib/puppet/file_serving/mount/scripts.rb
 - lib/puppet/file_serving/mount/tasks.rb
 - lib/puppet/file_serving/terminus_helper.rb
 - lib/puppet/file_serving/terminus_selector.rb
@@ -1359,8 +1280,16 @@ files:
 - spec/fixtures/faulty_face/puppet/face/syntax.rb
 - spec/fixtures/hiera.yaml
 - spec/fixtures/integration/application/agent/cached_deferred_catalog.json
+- spec/fixtures/integration/application/agent/lib/facter/agent_spec_role.rb
 - spec/fixtures/integration/application/apply/environments/spec/modules/amod/lib/puppet/provider/applytest/applytest.rb
 - spec/fixtures/integration/application/apply/environments/spec/modules/amod/lib/puppet/type/applytest.rb
+- spec/fixtures/integration/l10n/envs/prod/modules/demo/Gemfile
+- spec/fixtures/integration/l10n/envs/prod/modules/demo/Rakefile
+- spec/fixtures/integration/l10n/envs/prod/modules/demo/lib/puppet/functions/l10n.rb
+- spec/fixtures/integration/l10n/envs/prod/modules/demo/locales/config.yaml
+- spec/fixtures/integration/l10n/envs/prod/modules/demo/locales/ja/puppet-l10n.po
+- spec/fixtures/integration/l10n/envs/prod/modules/demo/locales/puppet-l10n.pot
+- spec/fixtures/integration/l10n/envs/prod/modules/demo/metadata.json
 - spec/fixtures/integration/node/environment/sitedir/00_a.pp
 - spec/fixtures/integration/node/environment/sitedir/01_b.pp
 - spec/fixtures/integration/node/environment/sitedir/03_empty.pp
@@ -1397,6 +1326,8 @@ files:
 - spec/fixtures/ssl/bad-int-basic-constraints.pem
 - spec/fixtures/ssl/ca.pem
 - spec/fixtures/ssl/crl.pem
+- spec/fixtures/ssl/ec-key-openssl.pem
+- spec/fixtures/ssl/ec-key-pk8.pem
 - spec/fixtures/ssl/ec-key.pem
 - spec/fixtures/ssl/ec.pem
 - spec/fixtures/ssl/encrypted-ec-key.pem
@@ -1406,6 +1337,8 @@ files:
 - spec/fixtures/ssl/intermediate-crl.pem
 - spec/fixtures/ssl/intermediate.pem
 - spec/fixtures/ssl/netlock-arany-utf8.pem
+- spec/fixtures/ssl/oid-key.pem
+- spec/fixtures/ssl/oid.pem
 - spec/fixtures/ssl/pluto-key.pem
 - spec/fixtures/ssl/pluto.pem
 - spec/fixtures/ssl/request-key.pem
@@ -1416,6 +1349,7 @@ files:
 - spec/fixtures/ssl/signed.pem
 - spec/fixtures/ssl/tampered-cert.pem
 - spec/fixtures/ssl/tampered-csr.pem
+- spec/fixtures/ssl/trusted_oid_mapping.yaml
 - spec/fixtures/ssl/unknown-127.0.0.1-key.pem
 - spec/fixtures/ssl/unknown-127.0.0.1.pem
 - spec/fixtures/ssl/unknown-ca-key.pem
@@ -1766,6 +1700,7 @@ files:
 - spec/integration/application/module_spec.rb
 - spec/integration/application/plugin_spec.rb
 - spec/integration/application/resource_spec.rb
+- spec/integration/application/ssl_spec.rb
 - spec/integration/configurer_spec.rb
 - spec/integration/data_binding_spec.rb
 - spec/integration/defaults_spec.rb
@@ -1780,6 +1715,7 @@ files:
 - spec/integration/indirector/facts/facter_spec.rb
 - spec/integration/indirector/file_content/file_server_spec.rb
 - spec/integration/indirector/file_metadata/file_server_spec.rb
+- spec/integration/l10n/compiler_spec.rb
 - spec/integration/network/formats_spec.rb
 - spec/integration/network/http/api/indirected_routes_spec.rb
 - spec/integration/network/http_pool_spec.rb
@@ -1875,6 +1811,7 @@ files:
 - spec/shared_contexts/checksum.rb
 - spec/shared_contexts/digests.rb
 - spec/shared_contexts/https.rb
+- spec/shared_contexts/l10n.rb
 - spec/shared_contexts/provider.rb
 - spec/shared_contexts/types_setup.rb
 - spec/shared_examples/rhel_package_provider.rb
@@ -1934,6 +1871,7 @@ files:
 - spec/unit/face/parser_spec.rb
 - spec/unit/face/plugin_spec.rb
 - spec/unit/face_spec.rb
+- spec/unit/facter_impl_spec.rb
 - spec/unit/file_bucket/dipper_spec.rb
 - spec/unit/file_bucket/file_spec.rb
 - spec/unit/file_serving/base_spec.rb
@@ -1948,6 +1886,7 @@ files:
 - spec/unit/file_serving/mount/modules_spec.rb
 - spec/unit/file_serving/mount/pluginfacts_spec.rb
 - spec/unit/file_serving/mount/plugins_spec.rb
+- spec/unit/file_serving/mount/scripts_spec.rb
 - spec/unit/file_serving/mount/tasks_spec.rb
 - spec/unit/file_serving/mount_spec.rb
 - spec/unit/file_serving/terminus_helper_spec.rb
@@ -2117,7 +2056,6 @@ files:
 - spec/unit/indirector/resource/ral_spec.rb
 - spec/unit/indirector/resource/store_configs_spec.rb
 - spec/unit/indirector/rest_spec.rb
-- spec/unit/indirector/store_configs_spec.rb
 - spec/unit/indirector/terminus_spec.rb
 - spec/unit/indirector/yaml_spec.rb
 - spec/unit/indirector_spec.rb
@@ -2568,7 +2506,8 @@ files:
 - tasks/parser.rake
 - tasks/yard.rake
 homepage: https://github.com/puppetlabs/puppet
-licenses: []
+licenses:
+- Apache-2.0
 metadata: {}
 post_install_message: 
 rdoc_options:
@@ -2598,8 +2537,16 @@ test_files:
 - spec/fixtures/faulty_face/puppet/face/syntax.rb
 - spec/fixtures/hiera.yaml
 - spec/fixtures/integration/application/agent/cached_deferred_catalog.json
+- spec/fixtures/integration/application/agent/lib/facter/agent_spec_role.rb
 - spec/fixtures/integration/application/apply/environments/spec/modules/amod/lib/puppet/provider/applytest/applytest.rb
 - spec/fixtures/integration/application/apply/environments/spec/modules/amod/lib/puppet/type/applytest.rb
+- spec/fixtures/integration/l10n/envs/prod/modules/demo/Gemfile
+- spec/fixtures/integration/l10n/envs/prod/modules/demo/Rakefile
+- spec/fixtures/integration/l10n/envs/prod/modules/demo/lib/puppet/functions/l10n.rb
+- spec/fixtures/integration/l10n/envs/prod/modules/demo/locales/config.yaml
+- spec/fixtures/integration/l10n/envs/prod/modules/demo/locales/ja/puppet-l10n.po
+- spec/fixtures/integration/l10n/envs/prod/modules/demo/locales/puppet-l10n.pot
+- spec/fixtures/integration/l10n/envs/prod/modules/demo/metadata.json
 - spec/fixtures/integration/node/environment/sitedir/00_a.pp
 - spec/fixtures/integration/node/environment/sitedir/01_b.pp
 - spec/fixtures/integration/node/environment/sitedir/03_empty.pp
@@ -2636,6 +2583,8 @@ test_files:
 - spec/fixtures/ssl/bad-int-basic-constraints.pem
 - spec/fixtures/ssl/ca.pem
 - spec/fixtures/ssl/crl.pem
+- spec/fixtures/ssl/ec-key-openssl.pem
+- spec/fixtures/ssl/ec-key-pk8.pem
 - spec/fixtures/ssl/ec-key.pem
 - spec/fixtures/ssl/ec.pem
 - spec/fixtures/ssl/encrypted-ec-key.pem
@@ -2645,6 +2594,8 @@ test_files:
 - spec/fixtures/ssl/intermediate-crl.pem
 - spec/fixtures/ssl/intermediate.pem
 - spec/fixtures/ssl/netlock-arany-utf8.pem
+- spec/fixtures/ssl/oid-key.pem
+- spec/fixtures/ssl/oid.pem
 - spec/fixtures/ssl/pluto-key.pem
 - spec/fixtures/ssl/pluto.pem
 - spec/fixtures/ssl/request-key.pem
@@ -2655,6 +2606,7 @@ test_files:
 - spec/fixtures/ssl/signed.pem
 - spec/fixtures/ssl/tampered-cert.pem
 - spec/fixtures/ssl/tampered-csr.pem
+- spec/fixtures/ssl/trusted_oid_mapping.yaml
 - spec/fixtures/ssl/unknown-127.0.0.1-key.pem
 - spec/fixtures/ssl/unknown-127.0.0.1.pem
 - spec/fixtures/ssl/unknown-ca-key.pem
@@ -3005,6 +2957,7 @@ test_files:
 - spec/integration/application/module_spec.rb
 - spec/integration/application/plugin_spec.rb
 - spec/integration/application/resource_spec.rb
+- spec/integration/application/ssl_spec.rb
 - spec/integration/configurer_spec.rb
 - spec/integration/data_binding_spec.rb
 - spec/integration/defaults_spec.rb
@@ -3019,6 +2972,7 @@ test_files:
 - spec/integration/indirector/facts/facter_spec.rb
 - spec/integration/indirector/file_content/file_server_spec.rb
 - spec/integration/indirector/file_metadata/file_server_spec.rb
+- spec/integration/l10n/compiler_spec.rb
 - spec/integration/network/formats_spec.rb
 - spec/integration/network/http/api/indirected_routes_spec.rb
 - spec/integration/network/http_pool_spec.rb
@@ -3114,6 +3068,7 @@ test_files:
 - spec/shared_contexts/checksum.rb
 - spec/shared_contexts/digests.rb
 - spec/shared_contexts/https.rb
+- spec/shared_contexts/l10n.rb
 - spec/shared_contexts/provider.rb
 - spec/shared_contexts/types_setup.rb
 - spec/shared_examples/rhel_package_provider.rb
@@ -3173,6 +3128,7 @@ test_files:
 - spec/unit/face/parser_spec.rb
 - spec/unit/face/plugin_spec.rb
 - spec/unit/face_spec.rb
+- spec/unit/facter_impl_spec.rb
 - spec/unit/file_bucket/dipper_spec.rb
 - spec/unit/file_bucket/file_spec.rb
 - spec/unit/file_serving/base_spec.rb
@@ -3187,6 +3143,7 @@ test_files:
 - spec/unit/file_serving/mount/modules_spec.rb
 - spec/unit/file_serving/mount/pluginfacts_spec.rb
 - spec/unit/file_serving/mount/plugins_spec.rb
+- spec/unit/file_serving/mount/scripts_spec.rb
 - spec/unit/file_serving/mount/tasks_spec.rb
 - spec/unit/file_serving/mount_spec.rb
 - spec/unit/file_serving/terminus_helper_spec.rb
@@ -3356,7 +3313,6 @@ test_files:
 - spec/unit/indirector/resource/ral_spec.rb
 - spec/unit/indirector/resource/store_configs_spec.rb
 - spec/unit/indirector/rest_spec.rb
-- spec/unit/indirector/store_configs_spec.rb
 - spec/unit/indirector/terminus_spec.rb
 - spec/unit/indirector/yaml_spec.rb
 - spec/unit/indirector_spec.rb