puppet 8.0.1 → 8.2.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (83) hide show
  1. checksums.yaml +4 -4
  2. data/CODEOWNERS +5 -5
  3. data/Gemfile.lock +47 -39
  4. data/ext/project_data.yaml +1 -1
  5. data/lib/puppet/defaults.rb +37 -7
  6. data/lib/puppet/http/client.rb +12 -5
  7. data/lib/puppet/http/service/ca.rb +32 -2
  8. data/lib/puppet/node/environment.rb +6 -4
  9. data/lib/puppet/pops/evaluator/deferred_resolver.rb +20 -3
  10. data/lib/puppet/ssl/oids.rb +2 -0
  11. data/lib/puppet/ssl/ssl_provider.rb +1 -1
  12. data/lib/puppet/ssl/state_machine.rb +143 -14
  13. data/lib/puppet/thread_local.rb +1 -4
  14. data/lib/puppet/version.rb +1 -1
  15. data/lib/puppet/x509/cert_provider.rb +29 -0
  16. data/locales/puppet.pot +2346 -2310
  17. data/man/man5/puppet.conf.5 +31 -3
  18. data/man/man8/puppet-agent.8 +1 -1
  19. data/man/man8/puppet-apply.8 +1 -1
  20. data/man/man8/puppet-catalog.8 +1 -1
  21. data/man/man8/puppet-config.8 +1 -1
  22. data/man/man8/puppet-describe.8 +1 -1
  23. data/man/man8/puppet-device.8 +1 -1
  24. data/man/man8/puppet-doc.8 +1 -1
  25. data/man/man8/puppet-epp.8 +1 -1
  26. data/man/man8/puppet-facts.8 +1 -1
  27. data/man/man8/puppet-filebucket.8 +1 -1
  28. data/man/man8/puppet-generate.8 +1 -1
  29. data/man/man8/puppet-help.8 +1 -1
  30. data/man/man8/puppet-lookup.8 +1 -1
  31. data/man/man8/puppet-module.8 +1 -1
  32. data/man/man8/puppet-node.8 +1 -1
  33. data/man/man8/puppet-parser.8 +1 -1
  34. data/man/man8/puppet-plugin.8 +1 -1
  35. data/man/man8/puppet-report.8 +1 -1
  36. data/man/man8/puppet-resource.8 +1 -1
  37. data/man/man8/puppet-script.8 +1 -1
  38. data/man/man8/puppet-ssl.8 +1 -1
  39. data/man/man8/puppet.8 +2 -2
  40. data/spec/fixtures/ssl/127.0.0.1-key.pem +107 -107
  41. data/spec/fixtures/ssl/127.0.0.1.pem +52 -51
  42. data/spec/fixtures/ssl/bad-basic-constraints.pem +56 -56
  43. data/spec/fixtures/ssl/bad-int-basic-constraints.pem +53 -53
  44. data/spec/fixtures/ssl/ca.pem +54 -54
  45. data/spec/fixtures/ssl/crl.pem +26 -26
  46. data/spec/fixtures/ssl/ec-key.pem +11 -11
  47. data/spec/fixtures/ssl/ec.pem +33 -32
  48. data/spec/fixtures/ssl/encrypted-ec-key.pem +12 -12
  49. data/spec/fixtures/ssl/encrypted-key.pem +108 -108
  50. data/spec/fixtures/ssl/intermediate-agent-crl.pem +26 -26
  51. data/spec/fixtures/ssl/intermediate-agent.pem +56 -56
  52. data/spec/fixtures/ssl/intermediate-crl.pem +29 -29
  53. data/spec/fixtures/ssl/intermediate.pem +53 -53
  54. data/spec/fixtures/ssl/oid-key.pem +107 -107
  55. data/spec/fixtures/ssl/oid.pem +51 -50
  56. data/spec/fixtures/ssl/pluto-key.pem +107 -107
  57. data/spec/fixtures/ssl/pluto.pem +52 -51
  58. data/spec/fixtures/ssl/renewed.pem +67 -0
  59. data/spec/fixtures/ssl/request-key.pem +107 -107
  60. data/spec/fixtures/ssl/request.pem +50 -48
  61. data/spec/fixtures/ssl/revoked-key.pem +107 -107
  62. data/spec/fixtures/ssl/revoked.pem +51 -50
  63. data/spec/fixtures/ssl/signed-key.pem +107 -107
  64. data/spec/fixtures/ssl/signed.pem +49 -48
  65. data/spec/fixtures/ssl/tampered-cert.pem +51 -50
  66. data/spec/fixtures/ssl/tampered-csr.pem +50 -48
  67. data/spec/fixtures/ssl/unknown-127.0.0.1-key.pem +107 -107
  68. data/spec/fixtures/ssl/unknown-127.0.0.1.pem +50 -49
  69. data/spec/fixtures/ssl/unknown-ca-key.pem +107 -107
  70. data/spec/fixtures/ssl/unknown-ca.pem +54 -54
  71. data/spec/integration/application/agent_spec.rb +63 -13
  72. data/spec/integration/application/apply_spec.rb +14 -0
  73. data/spec/integration/http/client_spec.rb +16 -0
  74. data/spec/lib/puppet/test_ca.rb +3 -10
  75. data/spec/unit/application/lookup_spec.rb +1 -0
  76. data/spec/unit/defaults_spec.rb +2 -40
  77. data/spec/unit/file_system/path_pattern_spec.rb +15 -0
  78. data/spec/unit/http/service/ca_spec.rb +83 -0
  79. data/spec/unit/ssl/ssl_provider_spec.rb +20 -0
  80. data/spec/unit/ssl/state_machine_spec.rb +143 -3
  81. data/spec/unit/x509/cert_provider_spec.rb +49 -0
  82. data/tasks/generate_cert_fixtures.rake +4 -0
  83. metadata +5 -9
data/spec/fixtures/ssl/127.0.0.1.pem CHANGED
@@ -1,69 +1,70 @@
1
1
  Certificate:
2
2
  Data:
3
3
  Version: 3 (0x2)
4
- Serial Number: 5 (0x5)
4
+ Serial Number: 6 (0x6)
5
5
  Signature Algorithm: sha256WithRSAEncryption
6
6
  Issuer: CN=Test CA
7
7
  Validity
8
8
  Not Before: Jan 1 00:00:00 1970 GMT
9
- Not After : Jun 15 01:19:37 2031 GMT
9
+ Not After : Jun 24 21:18:00 2033 GMT
10
10
  Subject: CN=127.0.0.1
11
11
  Subject Public Key Info:
12
12
  Public Key Algorithm: rsaEncryption
13
- RSA Public-Key: (2048 bit)
13
+ Public-Key: (2048 bit)
14
14
  Modulus:
15
- 00:df:40:52:59:4f:eb:dd:d8:06:f5:c0:e8:eb:11:
16
- 52:31:80:a1:45:8e:3e:07:81:5c:cd:90:ea:2a:d0:
17
- 84:d3:6d:54:8a:78:0c:6b:34:eb:fc:dd:90:e9:9a:
18
- 5a:23:24:3b:31:99:17:d9:06:70:a8:51:95:68:50:
19
- 9d:59:aa:76:2f:28:18:99:81:be:ca:1d:79:75:8b:
20
- 85:3c:a4:05:39:06:f6:d8:25:13:54:e8:bb:d2:b4:
21
- 30:35:9e:10:64:2d:25:44:2a:f8:75:1f:60:ec:8a:
22
- 57:fc:fe:4d:57:f2:9c:e2:0d:6b:c5:f7:2d:ce:f5:
23
- 9e:93:f8:83:1a:b6:94:e3:c0:e2:b2:56:92:7e:e5:
24
- d2:bd:f8:3c:9d:07:b4:85:93:77:5f:62:bd:ba:0e:
25
- 30:cc:77:46:07:2a:6a:aa:18:bf:0c:f0:23:ef:7d:
26
- d9:84:86:35:3e:b5:76:1a:02:f3:9a:11:70:3f:f0:
27
- 6d:58:d1:2a:19:f8:e1:ed:77:ab:0a:e7:98:12:33:
28
- 5e:f9:b0:a8:f8:a5:98:c9:4e:3f:6c:01:8a:94:30:
29
- c9:19:a1:29:46:18:5e:83:9f:9d:2a:cb:70:db:8a:
30
- de:ca:2d:c1:47:82:ba:0b:20:b9:20:09:3c:1d:1c:
31
- 62:77:a7:85:83:5a:08:28:34:6b:75:e1:cd:7b:b7:
32
- e7:e5
15
+ 00:d0:13:11:3b:81:35:76:84:fb:b6:4e:c6:e2:7d:
16
+ 1a:16:a5:88:08:dd:50:fd:08:04:a6:ea:a0:6d:09:
17
+ 8c:f2:bf:68:4b:a0:7b:68:84:b3:e4:51:e1:62:3c:
18
+ 68:06:c8:38:3b:0a:a5:8b:da:87:25:cd:2a:76:0b:
19
+ 82:71:89:5b:11:57:cb:dd:b5:ec:75:56:06:a1:26:
20
+ 57:08:54:2d:83:c9:2f:83:f6:d0:e0:c3:ee:78:14:
21
+ 47:f4:5b:ed:54:6a:93:fe:f0:68:a4:fa:93:8c:72:
22
+ f0:4b:84:f9:94:a2:ed:d8:83:79:9a:0c:c7:d4:33:
23
+ 8e:e6:76:fd:cc:93:e3:3a:b7:56:97:85:f9:87:7e:
24
+ a9:60:e2:fd:35:9e:31:6b:2e:cb:86:47:e2:67:08:
25
+ fe:13:52:aa:64:d4:7c:76:09:b5:99:17:19:ed:6b:
26
+ 76:6c:e8:09:b5:98:06:59:c0:4a:1a:0a:a5:f9:0a:
27
+ 73:7c:56:46:32:17:80:3f:09:fa:a7:00:bb:a6:8b:
28
+ d0:20:83:fe:ab:3c:a6:bf:ed:e6:e4:71:5e:8a:12:
29
+ da:65:2a:9a:c9:9a:bd:a7:d4:56:c5:42:b9:bc:0f:
30
+ 0d:19:35:d1:72:37:30:e0:28:0f:36:91:a2:7b:e3:
31
+ 62:37:0e:5c:ba:0d:26:dc:0a:66:b3:18:ed:6e:d1:
32
+ 63:b7
33
33
  Exponent: 65537 (0x10001)
34
34
  X509v3 extensions:
35
35
  X509v3 Subject Alternative Name:
36
36
  DNS:127.0.0.1, DNS:127.0.0.2
37
37
  Signature Algorithm: sha256WithRSAEncryption
38
- 6f:ef:ac:da:0b:a5:4f:d0:30:57:0c:8c:5a:90:be:18:11:ec:
39
- e0:25:c2:0e:ef:05:cb:b5:50:43:ba:b7:25:1c:26:60:e8:ad:
40
- b6:a5:1a:6a:2b:e2:66:e1:3a:b6:00:80:39:e1:19:ef:c2:e8:
41
- fd:f2:04:0e:ed:fa:1e:e5:f8:f1:32:dc:4e:47:7e:43:a4:09:
42
- 3a:24:b4:fe:ab:7e:d6:b2:d4:4e:e0:9f:e5:c9:79:9b:87:f4:
43
- 7b:3d:40:a4:cf:0e:03:5c:dc:14:82:bf:1b:32:9a:18:0c:5b:
44
- 94:2d:1f:41:b6:a5:e7:89:d7:3b:dc:c8:17:f6:0e:ea:2d:7b:
45
- a6:04:02:08:9a:b6:3d:66:03:67:16:94:2d:36:13:ee:61:18:
46
- f9:17:04:6e:16:f3:65:9b:5c:34:ed:49:d8:6e:26:58:ca:68:
47
- 3f:2c:bb:0e:42:64:93:a7:8c:d4:d9:15:ae:fb:0f:f7:f7:ce:
48
- be:99:6f:40:90:bf:e4:44:c5:44:4a:09:9a:8f:da:f6:b5:a6:
49
- 63:af:6b:37:ee:7c:b7:69:b6:67:76:98:f1:69:18:8e:2c:45:
50
- bb:04:82:d9:03:31:85:c6:61:d3:38:60:39:45:43:a9:7b:d7:
51
- f5:fd:18:f2:ec:43:42:0b:69:b8:c5:84:05:ae:a2:02:d3:19:
52
- 80:bd:88:a5
38
+ Signature Value:
39
+ 4f:f7:58:a4:e1:bb:12:ea:e0:6b:e0:f0:ca:18:bd:f6:b8:5e:
40
+ f2:c4:0d:9d:1d:b1:d6:a1:96:7f:94:96:1a:c2:91:22:f4:2b:
41
+ e1:96:71:ce:83:0c:84:ff:72:f6:18:72:76:ee:26:9f:0a:92:
42
+ f4:d9:86:f7:62:90:77:6a:b9:a0:b9:61:53:64:f2:12:e9:23:
43
+ 31:5a:ee:f7:f7:70:bb:f3:b6:89:b3:bc:64:f1:01:2f:c7:c8:
44
+ 0c:70:a9:c6:1f:ca:95:d0:ec:25:43:e4:93:88:8b:c4:4b:50:
45
+ a0:77:79:f0:2f:81:4d:d3:71:93:2a:58:d1:d7:89:64:c0:30:
46
+ 50:45:ae:36:e4:37:69:d8:d1:50:83:8d:a4:2f:55:ad:a1:c9:
47
+ ae:68:ac:4d:5f:1b:c9:bc:dc:ff:30:7b:10:da:16:fb:60:f9:
48
+ ba:73:26:44:7d:de:1e:2b:12:69:40:d4:c2:17:b2:76:d4:40:
49
+ fa:2c:b0:c5:54:4a:af:1a:94:b9:62:0c:81:42:9a:c3:bc:d6:
50
+ 3a:f7:69:8e:82:91:24:48:46:be:10:bd:ed:c4:71:56:f2:e8:
51
+ 73:64:18:d0:8b:7d:b0:66:2f:a6:e3:4d:23:68:11:b0:48:16:
52
+ db:8a:dd:bf:e5:de:5e:35:fa:7a:76:0e:ec:9d:e3:ee:d1:28:
53
+ 58:bc:23:bf
53
54
  -----BEGIN CERTIFICATE-----
54
- MIICxDCCAaygAwIBAgIBBTANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdUZXN0
55
- IENBMB4XDTcwMDEwMTAwMDAwMFoXDTMxMDYxNTAxMTkzN1owFDESMBAGA1UEAwwJ
56
- MTI3LjAuMC4xMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30BSWU/r
57
- 3dgG9cDo6xFSMYChRY4+B4FczZDqKtCE021UingMazTr/N2Q6ZpaIyQ7MZkX2QZw
58
- qFGVaFCdWap2LygYmYG+yh15dYuFPKQFOQb22CUTVOi70rQwNZ4QZC0lRCr4dR9g
59
- 7IpX/P5NV/Kc4g1rxfctzvWek/iDGraU48DislaSfuXSvfg8nQe0hZN3X2K9ug4w
60
- zHdGBypqqhi/DPAj733ZhIY1PrV2GgLzmhFwP/BtWNEqGfjh7XerCueYEjNe+bCo
61
- +KWYyU4/bAGKlDDJGaEpRhheg5+dKstw24reyi3BR4K6CyC5IAk8HRxid6eFg1oI
62
- KDRrdeHNe7fn5QIDAQABoyMwITAfBgNVHREEGDAWggkxMjcuMC4wLjGCCTEyNy4w
63
- LjAuMjANBgkqhkiG9w0BAQsFAAOCAQEAb++s2gulT9AwVwyMWpC+GBHs4CXCDu8F
64
- y7VQQ7q3JRwmYOittqUaaiviZuE6tgCAOeEZ78Lo/fIEDu36HuX48TLcTkd+Q6QJ
65
- OiS0/qt+1rLUTuCf5cl5m4f0ez1ApM8OA1zcFIK/GzKaGAxblC0fQbal54nXO9zI
66
- F/YO6i17pgQCCJq2PWYDZxaULTYT7mEY+RcEbhbzZZtcNO1J2G4mWMpoPyy7DkJk
67
- k6eM1NkVrvsP9/fOvplvQJC/5ETFREoJmo/a9rWmY69rN+58t2m2Z3aY8WkYjixF
68
- uwSC2QMxhcZh0zhgOUVDqXvX9f0Y8uxDQgtpuMWEBa6iAtMZgL2IpQ==
55
+ MIICxDCCAaygAwIBAgIBBjANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdUZXN0
56
+ IENBMB4XDTcwMDEwMTAwMDAwMFoXDTMzMDYyNDIxMTgwMFowFDESMBAGA1UEAwwJ
57
+ MTI3LjAuMC4xMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BMRO4E1
58
+ doT7tk7G4n0aFqWICN1Q/QgEpuqgbQmM8r9oS6B7aISz5FHhYjxoBsg4Owqli9qH
59
+ Jc0qdguCcYlbEVfL3bXsdVYGoSZXCFQtg8kvg/bQ4MPueBRH9FvtVGqT/vBopPqT
60
+ jHLwS4T5lKLt2IN5mgzH1DOO5nb9zJPjOrdWl4X5h36pYOL9NZ4xay7LhkfiZwj+
61
+ E1KqZNR8dgm1mRcZ7Wt2bOgJtZgGWcBKGgql+QpzfFZGMheAPwn6pwC7povQIIP+
62
+ qzymv+3m5HFeihLaZSqayZq9p9RWxUK5vA8NGTXRcjcw4CgPNpGie+NiNw5cug0m
63
+ 3ApmsxjtbtFjtwIDAQABoyMwITAfBgNVHREEGDAWggkxMjcuMC4wLjGCCTEyNy4w
64
+ LjAuMjANBgkqhkiG9w0BAQsFAAOCAQEAT/dYpOG7Eurga+Dwyhi99rhe8sQNnR2x
65
+ 1qGWf5SWGsKRIvQr4ZZxzoMMhP9y9hhydu4mnwqS9NmG92KQd2q5oLlhU2TyEukj
66
+ MVru9/dwu/O2ibO8ZPEBL8fIDHCpxh/KldDsJUPkk4iLxEtQoHd58C+BTdNxkypY
67
+ 0deJZMAwUEWuNuQ3adjRUIONpC9VraHJrmisTV8bybzc/zB7ENoW+2D5unMmRH3e
68
+ HisSaUDUwheydtRA+iywxVRKrxqUuWIMgUKaw7zWOvdpjoKRJEhGvhC97cRxVvLo
69
+ c2QY0It9sGYvpuNNI2gRsEgW24rdv+XeXjX6enYO7J3j7tEoWLwjvw==
69
70
  -----END CERTIFICATE-----
data/spec/fixtures/ssl/bad-basic-constraints.pem CHANGED
@@ -1,35 +1,35 @@
1
1
  Certificate:
2
2
  Data:
3
3
  Version: 3 (0x2)
4
- Serial Number: 11 (0xb)
4
+ Serial Number: 12 (0xc)
5
5
  Signature Algorithm: sha256WithRSAEncryption
6
6
  Issuer: CN=Test CA
7
7
  Validity
8
8
  Not Before: Jan 1 00:00:00 1970 GMT
9
- Not After : Jun 15 01:19:37 2031 GMT
9
+ Not After : Jun 24 21:18:00 2033 GMT
10
10
  Subject: CN=Test CA
11
11
  Subject Public Key Info:
12
12
  Public Key Algorithm: rsaEncryption
13
- RSA Public-Key: (2048 bit)
13
+ Public-Key: (2048 bit)
14
14
  Modulus:
15
- 00:b0:eb:f6:b5:c4:28:a8:18:53:85:91:20:76:5d:
16
- aa:be:78:ae:10:60:d3:b5:66:f7:41:c8:bf:42:00:
17
- c8:99:63:ed:d0:92:12:5a:71:c0:da:d2:fd:b3:65:
18
- 3b:a5:fa:be:0d:e5:2a:20:2f:df:a1:c5:41:c3:c3:
19
- 9c:04:eb:07:6c:8d:48:9c:14:be:24:81:7d:03:4d:
20
- 56:62:80:6b:34:e0:ad:68:f0:17:3d:fa:3b:b4:f7:
21
- a9:a3:fb:7d:30:0d:dd:c5:0b:b6:32:b6:c2:d9:b1:
22
- e8:97:ce:19:66:89:1b:5d:d6:4a:d9:0e:a6:b2:ad:
23
- cc:57:e9:0a:12:83:98:a3:18:90:a3:ae:ec:8e:a1:
24
- 96:ee:a4:36:7b:13:c4:95:45:02:69:89:f4:d3:49:
25
- 17:e6:e4:d5:91:23:24:7e:94:52:b5:4f:f3:0b:11:
26
- d8:b2:69:7e:72:25:88:03:15:7b:2f:64:ca:8c:a9:
27
- ce:b0:ed:eb:00:aa:68:af:cd:e4:1c:13:af:a7:ff:
28
- 54:b6:7d:be:b5:6c:bd:6a:20:be:47:2f:a8:dd:7a:
29
- 1d:2a:44:a4:0b:15:eb:68:85:05:32:17:01:cf:a7:
30
- 27:03:cb:85:12:c1:ec:4f:c1:4b:2a:11:34:55:7c:
31
- b3:6c:fa:79:6d:4f:be:31:92:b8:f3:01:90:8e:42:
32
- 6b:71
15
+ 00:f4:9a:3e:d9:2b:e1:1e:ea:3c:85:7d:27:87:f5:
16
+ f7:50:c6:60:f0:79:3b:86:23:ce:c9:ba:42:22:1b:
17
+ 61:1a:bc:33:c7:cf:e2:56:8f:6c:84:3e:4e:d0:48:
18
+ b5:27:7e:7b:49:de:2b:5d:b2:9c:e6:49:53:52:c8:
19
+ 89:92:cb:e1:6c:30:67:c6:74:25:e3:3f:7a:37:ef:
20
+ 54:b4:bd:80:07:a6:db:77:5c:8f:56:ed:1b:14:af:
21
+ 2a:12:f5:44:88:15:a3:63:f2:f9:44:fb:51:ed:9a:
22
+ 6d:9c:cf:48:69:f6:d0:c9:6c:57:ee:1b:be:04:91:
23
+ b3:ad:16:ed:c8:d0:bf:b4:55:6b:e9:3c:2b:8c:57:
24
+ 19:bc:f1:76:6f:90:8d:e4:60:79:c7:03:e3:9d:83:
25
+ 42:ec:0e:79:78:3c:30:c4:d5:87:63:4d:2c:17:ad:
26
+ c6:ea:3b:ff:e4:73:1a:12:bb:ed:d3:f6:9d:9d:d9:
27
+ e7:05:7f:21:6c:27:0a:27:c5:6e:c8:53:6c:a3:bb:
28
+ 0e:11:fa:c4:ab:97:8f:a1:fd:bd:f3:5e:fb:80:1d:
29
+ 15:87:c7:b4:20:94:fc:cb:ac:06:a8:ae:b1:80:a0:
30
+ 5d:50:68:8d:49:63:1b:b2:77:a2:6b:81:21:b6:58:
31
+ 3a:f2:3d:21:ac:a5:91:bc:7d:36:46:f4:87:ea:ce:
32
+ a3:0f
33
33
  Exponent: 65537 (0x10001)
34
34
  X509v3 extensions:
35
35
  X509v3 Basic Constraints: critical
@@ -37,45 +37,45 @@ Certificate:
37
37
  X509v3 Key Usage: critical
38
38
  Certificate Sign, CRL Sign
39
39
  X509v3 Subject Key Identifier:
40
- B2:EE:24:88:34:99:18:60:81:9E:2A:D3:F4:5A:66:FA:91:F6:E1:C6
40
+ 83:68:26:16:4A:C3:88:0A:A6:48:43:98:E7:2D:4F:5F:70:8C:62:B2
41
41
  Netscape Comment:
42
42
  Puppet Server Internal Certificate
43
43
  X509v3 Authority Key Identifier:
44
- keyid:B2:EE:24:88:34:99:18:60:81:9E:2A:D3:F4:5A:66:FA:91:F6:E1:C6
45
-
44
+ 83:68:26:16:4A:C3:88:0A:A6:48:43:98:E7:2D:4F:5F:70:8C:62:B2
46
45
  Signature Algorithm: sha256WithRSAEncryption
47
- 82:de:f4:cb:97:76:b0:a7:52:71:6c:94:4c:e6:8d:d6:e5:32:
48
- 1d:ca:99:44:9c:a2:b5:e4:a5:ba:06:08:6b:e7:b5:55:76:02:
49
- 7e:ee:69:6a:0d:27:69:7b:e3:80:97:10:9c:40:98:13:e4:d1:
50
- 40:b6:e6:59:1d:c2:1c:6e:64:ba:b5:af:7b:aa:70:d7:34:1b:
51
- d3:cb:9f:2b:c0:72:36:70:ad:04:a0:07:9c:dd:e5:fa:02:b3:
52
- c9:f1:f0:6a:99:89:95:20:e2:31:7f:21:2e:8b:b8:76:5e:31:
53
- 82:ec:4b:31:43:e7:20:d9:97:0f:52:8e:26:1d:0b:31:2d:f6:
54
- 74:40:6b:09:cf:39:e8:d9:c8:27:ed:9d:76:a5:b2:2a:83:db:
55
- 16:8e:5f:ee:e7:90:44:68:34:92:33:bd:39:7c:96:8f:e3:61:
56
- 78:b5:4e:59:d8:12:0a:0d:90:17:22:7c:0e:34:bb:ad:94:66:
57
- 07:d5:4f:d9:79:34:6f:12:c1:77:69:a1:20:ae:cc:b0:2e:e9:
58
- 9c:bb:94:89:70:ee:d0:14:1c:05:89:40:76:bb:47:64:83:24:
59
- 73:95:cc:f1:65:ee:f8:bf:55:f0:c3:e6:34:6b:07:09:67:3e:
60
- 03:01:8d:ba:cb:5d:5b:89:d6:e3:cb:ce:55:dc:ad:8d:7f:de:
61
- c6:5a:7c:9f
46
+ Signature Value:
47
+ f2:d5:76:aa:ff:05:b2:63:2d:81:23:3d:d5:dc:8f:a8:eb:bc:
48
+ 17:35:7f:64:1a:37:50:02:ac:54:4b:c9:74:fb:07:f8:ec:f7:
49
+ c2:6a:80:bd:f7:d1:43:1b:4d:d1:2c:c2:71:d9:28:46:01:0f:
50
+ 14:ab:8e:20:14:93:e7:dc:a7:b1:6d:4a:7d:a9:f7:a2:5d:ea:
51
+ 4d:89:5f:fb:45:4b:98:c8:93:12:d9:74:5e:a4:3e:25:13:2c:
52
+ 92:96:3e:15:c6:d3:46:c7:03:5c:4b:70:65:9e:1f:89:ef:7e:
53
+ 70:63:3c:78:d8:a2:92:53:2d:39:a3:f5:0d:36:aa:2a:7b:a8:
54
+ a9:63:66:39:e3:49:55:0f:45:d6:14:9e:f4:77:18:16:90:13:
55
+ 41:6a:27:8f:84:c9:c5:0d:ad:cc:d9:bf:62:90:02:56:63:76:
56
+ 76:bc:3f:36:5d:41:ad:07:5e:f9:e2:66:e9:63:e3:ba:79:b9:
57
+ 07:b6:e8:b5:27:0f:18:4e:a4:6d:82:d7:e9:a9:40:ce:eb:d9:
58
+ 6a:b8:d6:04:c4:b2:62:1f:c5:cb:fe:14:f3:c5:cd:0e:11:32:
59
+ b5:cf:ea:fc:98:3c:59:23:eb:69:c5:0b:f6:83:5b:dc:25:9c:
60
+ 6d:93:29:c2:30:58:c1:10:80:49:86:67:09:fd:22:67:01:e5:
61
+ 32:9a:a3:83
62
62
  -----BEGIN CERTIFICATE-----
63
- MIIDNDCCAhygAwIBAgIBCzANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdUZXN0
64
- IENBMB4XDTcwMDEwMTAwMDAwMFoXDTMxMDYxNTAxMTkzN1owEjEQMA4GA1UEAwwH
65
- VGVzdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALDr9rXEKKgY
66
- U4WRIHZdqr54rhBg07Vm90HIv0IAyJlj7dCSElpxwNrS/bNlO6X6vg3lKiAv36HF
67
- QcPDnATrB2yNSJwUviSBfQNNVmKAazTgrWjwFz36O7T3qaP7fTAN3cULtjK2wtmx
68
- 6JfOGWaJG13WStkOprKtzFfpChKDmKMYkKOu7I6hlu6kNnsTxJVFAmmJ9NNJF+bk
69
- 1ZEjJH6UUrVP8wsR2LJpfnIliAMVey9kyoypzrDt6wCqaK/N5BwTr6f/VLZ9vrVs
70
- vWogvkcvqN16HSpEpAsV62iFBTIXAc+nJwPLhRLB7E/BSyoRNFV8s2z6eW1PvjGS
71
- uPMBkI5Ca3ECAwEAAaOBlDCBkTAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwIB
72
- BjAdBgNVHQ4EFgQUsu4kiDSZGGCBnirT9Fpm+pH24cYwMQYJYIZIAYb4QgENBCQW
63
+ MIIDNDCCAhygAwIBAgIBDDANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdUZXN0
64
+ IENBMB4XDTcwMDEwMTAwMDAwMFoXDTMzMDYyNDIxMTgwMFowEjEQMA4GA1UEAwwH
65
+ VGVzdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPSaPtkr4R7q
66
+ PIV9J4f191DGYPB5O4Yjzsm6QiIbYRq8M8fP4laPbIQ+TtBItSd+e0neK12ynOZJ
67
+ U1LIiZLL4WwwZ8Z0JeM/ejfvVLS9gAem23dcj1btGxSvKhL1RIgVo2Py+UT7Ue2a
68
+ bZzPSGn20MlsV+4bvgSRs60W7cjQv7RVa+k8K4xXGbzxdm+QjeRgeccD452DQuwO
69
+ eXg8MMTVh2NNLBetxuo7/+RzGhK77dP2nZ3Z5wV/IWwnCifFbshTbKO7DhH6xKuX
70
+ j6H9vfNe+4AdFYfHtCCU/MusBqiusYCgXVBojUljG7J3omuBIbZYOvI9Iaylkbx9
71
+ Nkb0h+rOow8CAwEAAaOBlDCBkTAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwIB
72
+ BjAdBgNVHQ4EFgQUg2gmFkrDiAqmSEOY5y1PX3CMYrIwMQYJYIZIAYb4QgENBCQW
73
73
  IlB1cHBldCBTZXJ2ZXIgSW50ZXJuYWwgQ2VydGlmaWNhdGUwHwYDVR0jBBgwFoAU
74
- su4kiDSZGGCBnirT9Fpm+pH24cYwDQYJKoZIhvcNAQELBQADggEBAILe9MuXdrCn
75
- UnFslEzmjdblMh3KmUScorXkpboGCGvntVV2An7uaWoNJ2l744CXEJxAmBPk0UC2
76
- 5lkdwhxuZLq1r3uqcNc0G9PLnyvAcjZwrQSgB5zd5foCs8nx8GqZiZUg4jF/IS6L
77
- uHZeMYLsSzFD5yDZlw9SjiYdCzEt9nRAawnPOejZyCftnXalsiqD2xaOX+7nkERo
78
- NJIzvTl8lo/jYXi1TlnYEgoNkBcifA40u62UZgfVT9l5NG8SwXdpoSCuzLAu6Zy7
79
- lIlw7tAUHAWJQHa7R2SDJHOVzPFl7vi/VfDD5jRrBwlnPgMBjbrLXVuJ1uPLzlXc
80
- rY1/3sZafJ8=
74
+ g2gmFkrDiAqmSEOY5y1PX3CMYrIwDQYJKoZIhvcNAQELBQADggEBAPLVdqr/BbJj
75
+ LYEjPdXcj6jrvBc1f2QaN1ACrFRLyXT7B/js98JqgL330UMbTdEswnHZKEYBDxSr
76
+ jiAUk+fcp7FtSn2p96Jd6k2JX/tFS5jIkxLZdF6kPiUTLJKWPhXG00bHA1xLcGWe
77
+ H4nvfnBjPHjYopJTLTmj9Q02qip7qKljZjnjSVUPRdYUnvR3GBaQE0FqJ4+EycUN
78
+ rczZv2KQAlZjdna8PzZdQa0HXvniZulj47p5uQe26LUnDxhOpG2C1+mpQM7r2Wq4
79
+ 1gTEsmIfxcv+FPPFzQ4RMrXP6vyYPFkj62nFC/aDW9wlnG2TKcIwWMEQgEmGZwn9
80
+ ImcB5TKao4M=
81
81
  -----END CERTIFICATE-----
data/spec/fixtures/ssl/bad-int-basic-constraints.pem CHANGED
@@ -6,30 +6,30 @@ Certificate:
6
6
  Issuer: CN=Test CA
7
7
  Validity
8
8
  Not Before: Jan 1 00:00:00 1970 GMT
9
- Not After : Jun 15 01:19:37 2031 GMT
9
+ Not After : Jun 24 21:18:00 2033 GMT
10
10
  Subject: CN=Test CA Subauthority
11
11
  Subject Public Key Info:
12
12
  Public Key Algorithm: rsaEncryption
13
- RSA Public-Key: (2048 bit)
13
+ Public-Key: (2048 bit)
14
14
  Modulus:
15
- 00:af:36:20:41:45:0b:d1:13:0c:82:fd:b8:e5:ea:
16
- f8:32:6b:5e:f7:a5:1c:7d:21:24:cb:85:bf:cd:f5:
17
- ca:48:85:39:c1:42:a4:65:93:d2:a2:04:f9:c9:19:
18
- 10:da:64:0d:be:e3:d0:a5:d3:85:17:79:aa:18:32:
19
- f7:0a:b9:8e:08:de:d8:97:06:28:99:ac:ed:d1:a6:
20
- d4:0a:34:de:3d:33:e3:08:17:c2:22:6c:1d:fc:51:
21
- df:98:e6:de:6e:c6:4b:26:f4:87:44:1e:86:b6:44:
22
- b2:f3:82:9c:9c:2f:5b:66:bf:27:71:49:53:bf:c9:
23
- d2:f5:06:7e:fe:fd:1c:59:ba:aa:a9:05:c8:cb:44:
24
- f5:f5:51:7b:80:1c:59:0e:a5:bf:bb:af:f5:96:68:
25
- 26:ca:52:b6:a8:e3:f6:3f:b9:a0:60:09:67:4a:86:
26
- 5b:b4:ae:13:d9:39:ca:e0:84:dc:2e:83:51:ce:09:
27
- 34:36:30:9c:ff:54:32:a6:b6:5b:a6:41:bd:b3:2b:
28
- 5d:1d:eb:79:45:f4:fb:de:47:56:3c:8d:b1:96:34:
29
- 2d:ec:9a:66:4c:50:ab:c6:c4:05:3e:8c:27:7c:be:
30
- 54:53:5e:ae:20:70:15:12:0f:85:ab:be:18:dd:da:
31
- f5:33:a5:55:6a:c7:d8:36:89:bb:1c:5d:ce:46:45:
32
- ba:7d
15
+ 00:c0:91:fc:98:ec:30:6b:f0:5c:d6:0b:ed:79:ab:
16
+ 69:80:c1:ca:5b:d5:4a:a3:e3:1b:3e:25:f1:47:0b:
17
+ 7b:9f:dc:1b:0a:8b:d6:0a:c1:e8:8b:ca:38:68:be:
18
+ 91:58:d7:ff:41:a1:00:48:59:a0:62:2e:1d:e7:2d:
19
+ 7a:c5:64:4d:be:48:30:eb:4f:e3:9e:3f:06:a4:ef:
20
+ e4:95:5c:86:ff:54:24:49:75:16:84:41:78:c5:8d:
21
+ ac:ff:af:95:91:ae:e1:f3:92:f0:a1:dd:18:e9:7c:
22
+ 8e:d0:86:e9:84:84:f3:cb:4c:9c:12:f6:a7:54:f0:
23
+ 9c:87:3b:f1:50:67:cf:12:04:11:c0:1b:e0:46:e4:
24
+ 03:73:9c:3c:ea:ed:3e:31:2f:bc:cf:bd:38:fb:1d:
25
+ fa:f5:8d:66:e7:f2:0b:5f:df:0f:99:ec:45:c9:aa:
26
+ e4:10:ad:5b:64:a5:da:af:27:e1:47:ac:4f:aa:aa:
27
+ 74:a5:0e:9c:14:c4:89:ef:ce:fb:50:38:b9:f9:09:
28
+ d6:f9:ba:5b:49:1c:8c:70:9c:0d:4e:3c:94:6d:9e:
29
+ 63:24:c3:e8:49:74:7a:79:02:0d:b4:6f:f3:b9:e0:
30
+ c0:4c:74:24:21:56:b5:57:e6:c9:29:08:1b:63:6d:
31
+ 2d:9c:e2:68:33:c1:cf:60:07:54:88:d4:da:6c:15:
32
+ 48:1b
33
33
  Exponent: 65537 (0x10001)
34
34
  X509v3 extensions:
35
35
  X509v3 Basic Constraints: critical
@@ -37,45 +37,45 @@ Certificate:
37
37
  X509v3 Key Usage: critical
38
38
  Certificate Sign, CRL Sign
39
39
  X509v3 Subject Key Identifier:
40
- 59:79:27:C1:94:D7:09:B0:B2:1C:23:44:22:E2:25:25:1B:83:5F:34
40
+ 38:7E:66:C4:7A:8B:16:EC:8A:0C:76:FC:C4:A6:7F:79:E5:DD:9A:FB
41
41
  Netscape Comment:
42
42
  Puppet Server Internal Certificate
43
43
  X509v3 Authority Key Identifier:
44
- keyid:B2:EE:24:88:34:99:18:60:81:9E:2A:D3:F4:5A:66:FA:91:F6:E1:C6
45
-
44
+ 83:68:26:16:4A:C3:88:0A:A6:48:43:98:E7:2D:4F:5F:70:8C:62:B2
46
45
  Signature Algorithm: sha256WithRSAEncryption
47
- 8e:52:e6:46:dc:23:4a:6f:09:4a:e5:72:96:90:9c:8c:c0:ff:
48
- 4c:cd:eb:16:a7:8d:fe:56:4a:c4:be:97:50:43:c9:a7:4b:97:
49
- c1:fe:5f:e0:0c:17:ea:3b:cd:a8:27:03:21:9b:ee:33:eb:23:
50
- 46:e6:fc:e3:80:d4:4a:a2:29:5c:a3:d5:f3:0b:c9:74:41:49:
51
- 45:65:59:48:7f:93:49:5f:d0:20:e7:b1:93:dc:a9:78:ad:b7:
52
- ef:97:cc:13:ef:29:04:56:c6:bc:10:97:3a:09:5b:fb:34:80:
53
- a4:64:88:0d:b9:cb:bf:4e:e6:fe:98:bf:dc:e5:00:47:ad:7d:
54
- 74:c6:13:19:a9:d8:9c:1e:1c:60:55:f2:71:02:c9:7d:10:48:
55
- b8:4e:8d:22:e8:b4:ee:e0:ce:a3:24:f9:33:d0:aa:d6:aa:cb:
56
- dd:38:8a:bd:05:3f:b2:52:17:80:8c:a4:1a:97:44:19:1b:e5:
57
- 92:d3:b4:9b:58:44:91:dc:67:1d:e1:43:1a:85:1d:da:c3:52:
58
- 45:50:01:6c:f9:e2:64:a1:e9:2f:d6:88:20:fd:d0:8b:e4:c8:
59
- 76:50:f2:79:bf:6f:ad:8f:11:e5:81:3b:53:da:39:9e:d4:d7:
60
- 6c:f8:7c:36:ed:76:8c:b0:ca:86:a8:1d:01:d9:25:92:54:ae:
61
- a9:dc:b2:73
46
+ Signature Value:
47
+ 8c:4b:be:0e:b0:af:d0:14:7f:04:4d:99:65:3e:ec:43:6e:62:
48
+ 5c:89:4e:60:74:c3:72:ae:2d:f1:9c:e6:5f:c6:2c:d3:d7:9b:
49
+ af:f2:8d:51:d3:7c:bc:34:4d:35:49:f5:78:6d:41:8c:c3:0d:
50
+ bf:4a:6f:dc:f0:d7:92:9d:2b:71:16:c8:20:40:b8:21:f8:2a:
51
+ 6b:a0:f5:54:40:13:25:b9:fe:bf:29:0a:d3:b5:71:13:9d:92:
52
+ f9:db:c1:e6:fa:04:24:b6:1c:61:46:2d:6c:8e:18:c5:f2:30:
53
+ 00:6e:f5:d3:4b:c0:2e:68:3e:6e:b6:5c:ee:e4:98:04:71:df:
54
+ b5:58:0b:3b:04:72:e2:1e:ea:cf:94:a2:d4:1e:60:a4:87:00:
55
+ 5a:80:28:85:85:5e:98:d6:bc:7a:be:ce:68:cd:3f:d4:2d:b2:
56
+ e3:84:61:d5:4d:d1:86:74:3a:e1:47:ec:7d:0f:3f:88:e2:1b:
57
+ 86:5a:01:03:6a:cb:1d:10:5b:0d:c7:c5:66:e4:e4:7e:02:ae:
58
+ d3:a9:3f:0a:66:70:48:65:f0:fa:53:bb:65:1c:dd:03:6c:ff:
59
+ 3a:6d:47:7d:b1:a0:68:df:ff:59:05:84:e3:fb:de:59:a4:00:
60
+ 7b:6b:8a:de:a2:d5:69:62:57:af:11:5e:12:40:6a:58:a1:8a:
61
+ f5:55:34:30
62
62
  -----BEGIN CERTIFICATE-----
63
63
  MIIDQTCCAimgAwIBAgIBAzANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdUZXN0
64
- IENBMB4XDTcwMDEwMTAwMDAwMFoXDTMxMDYxNTAxMTkzN1owHzEdMBsGA1UEAwwU
64
+ IENBMB4XDTcwMDEwMTAwMDAwMFoXDTMzMDYyNDIxMTgwMFowHzEdMBsGA1UEAwwU
65
65
  VGVzdCBDQSBTdWJhdXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
66
- AoIBAQCvNiBBRQvREwyC/bjl6vgya173pRx9ISTLhb/N9cpIhTnBQqRlk9KiBPnJ
67
- GRDaZA2+49Cl04UXeaoYMvcKuY4I3tiXBiiZrO3RptQKNN49M+MIF8IibB38Ud+Y
68
- 5t5uxksm9IdEHoa2RLLzgpycL1tmvydxSVO/ydL1Bn7+/RxZuqqpBcjLRPX1UXuA
69
- HFkOpb+7r/WWaCbKUrao4/Y/uaBgCWdKhlu0rhPZOcrghNwug1HOCTQ2MJz/VDKm
70
- tlumQb2zK10d63lF9PveR1Y8jbGWNC3smmZMUKvGxAU+jCd8vlRTXq4gcBUSD4Wr
71
- vhjd2vUzpVVqx9g2ibscXc5GRbp9AgMBAAGjgZQwgZEwDAYDVR0TAQH/BAIwADAO
72
- BgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFFl5J8GU1wmwshwjRCLiJSUbg180MDEG
66
+ AoIBAQDAkfyY7DBr8FzWC+15q2mAwcpb1Uqj4xs+JfFHC3uf3BsKi9YKweiLyjho
67
+ vpFY1/9BoQBIWaBiLh3nLXrFZE2+SDDrT+OePwak7+SVXIb/VCRJdRaEQXjFjaz/
68
+ r5WRruHzkvCh3RjpfI7QhumEhPPLTJwS9qdU8JyHO/FQZ88SBBHAG+BG5ANznDzq
69
+ 7T4xL7zPvTj7Hfr1jWbn8gtf3w+Z7EXJquQQrVtkpdqvJ+FHrE+qqnSlDpwUxInv
70
+ zvtQOLn5Cdb5ultJHIxwnA1OPJRtnmMkw+hJdHp5Ag20b/O54MBMdCQhVrVX5skp
71
+ CBtjbS2c4mgzwc9gB1SI1NpsFUgbAgMBAAGjgZQwgZEwDAYDVR0TAQH/BAIwADAO
72
+ BgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFDh+ZsR6ixbsigx2/MSmf3nl3Zr7MDEG
73
73
  CWCGSAGG+EIBDQQkFiJQdXBwZXQgU2VydmVyIEludGVybmFsIENlcnRpZmljYXRl
74
- MB8GA1UdIwQYMBaAFLLuJIg0mRhggZ4q0/RaZvqR9uHGMA0GCSqGSIb3DQEBCwUA
75
- A4IBAQCOUuZG3CNKbwlK5XKWkJyMwP9MzesWp43+VkrEvpdQQ8mnS5fB/l/gDBfq
76
- O82oJwMhm+4z6yNG5vzjgNRKoilco9XzC8l0QUlFZVlIf5NJX9Ag57GT3Kl4rbfv
77
- l8wT7ykEVsa8EJc6CVv7NICkZIgNucu/Tub+mL/c5QBHrX10xhMZqdicHhxgVfJx
78
- Asl9EEi4To0i6LTu4M6jJPkz0KrWqsvdOIq9BT+yUheAjKQal0QZG+WS07SbWESR
79
- 3Gcd4UMahR3aw1JFUAFs+eJkoekv1ogg/dCL5Mh2UPJ5v2+tjxHlgTtT2jme1Nds
80
- +Hw27XaMsMqGqB0B2SWSVK6p3LJz
74
+ MB8GA1UdIwQYMBaAFINoJhZKw4gKpkhDmOctT19wjGKyMA0GCSqGSIb3DQEBCwUA
75
+ A4IBAQCMS74OsK/QFH8ETZllPuxDbmJciU5gdMNyri3xnOZfxizT15uv8o1R03y8
76
+ NE01SfV4bUGMww2/Sm/c8NeSnStxFsggQLgh+CproPVUQBMluf6/KQrTtXETnZL5
77
+ 28Hm+gQkthxhRi1sjhjF8jAAbvXTS8AuaD5utlzu5JgEcd+1WAs7BHLiHurPlKLU
78
+ HmCkhwBagCiFhV6Y1rx6vs5ozT/ULbLjhGHVTdGGdDrhR+x9Dz+I4huGWgEDassd
79
+ EFsNx8Vm5OR+Aq7TqT8KZnBIZfD6U7tlHN0DbP86bUd9saBo3/9ZBYTj+95ZpAB7
80
+ a4reotVpYlevEV4SQGpYoYr1VTQw
81
81
  -----END CERTIFICATE-----
data/spec/fixtures/ssl/ca.pem CHANGED
@@ -6,30 +6,30 @@ Certificate:
6
6
  Issuer: CN=Test CA
7
7
  Validity
8
8
  Not Before: Jan 1 00:00:00 1970 GMT
9
- Not After : Jun 15 01:19:37 2031 GMT
9
+ Not After : Jun 24 21:18:00 2033 GMT
10
10
  Subject: CN=Test CA
11
11
  Subject Public Key Info:
12
12
  Public Key Algorithm: rsaEncryption
13
- RSA Public-Key: (2048 bit)
13
+ Public-Key: (2048 bit)
14
14
  Modulus:
15
- 00:b0:eb:f6:b5:c4:28:a8:18:53:85:91:20:76:5d:
16
- aa:be:78:ae:10:60:d3:b5:66:f7:41:c8:bf:42:00:
17
- c8:99:63:ed:d0:92:12:5a:71:c0:da:d2:fd:b3:65:
18
- 3b:a5:fa:be:0d:e5:2a:20:2f:df:a1:c5:41:c3:c3:
19
- 9c:04:eb:07:6c:8d:48:9c:14:be:24:81:7d:03:4d:
20
- 56:62:80:6b:34:e0:ad:68:f0:17:3d:fa:3b:b4:f7:
21
- a9:a3:fb:7d:30:0d:dd:c5:0b:b6:32:b6:c2:d9:b1:
22
- e8:97:ce:19:66:89:1b:5d:d6:4a:d9:0e:a6:b2:ad:
23
- cc:57:e9:0a:12:83:98:a3:18:90:a3:ae:ec:8e:a1:
24
- 96:ee:a4:36:7b:13:c4:95:45:02:69:89:f4:d3:49:
25
- 17:e6:e4:d5:91:23:24:7e:94:52:b5:4f:f3:0b:11:
26
- d8:b2:69:7e:72:25:88:03:15:7b:2f:64:ca:8c:a9:
27
- ce:b0:ed:eb:00:aa:68:af:cd:e4:1c:13:af:a7:ff:
28
- 54:b6:7d:be:b5:6c:bd:6a:20:be:47:2f:a8:dd:7a:
29
- 1d:2a:44:a4:0b:15:eb:68:85:05:32:17:01:cf:a7:
30
- 27:03:cb:85:12:c1:ec:4f:c1:4b:2a:11:34:55:7c:
31
- b3:6c:fa:79:6d:4f:be:31:92:b8:f3:01:90:8e:42:
32
- 6b:71
15
+ 00:f4:9a:3e:d9:2b:e1:1e:ea:3c:85:7d:27:87:f5:
16
+ f7:50:c6:60:f0:79:3b:86:23:ce:c9:ba:42:22:1b:
17
+ 61:1a:bc:33:c7:cf:e2:56:8f:6c:84:3e:4e:d0:48:
18
+ b5:27:7e:7b:49:de:2b:5d:b2:9c:e6:49:53:52:c8:
19
+ 89:92:cb:e1:6c:30:67:c6:74:25:e3:3f:7a:37:ef:
20
+ 54:b4:bd:80:07:a6:db:77:5c:8f:56:ed:1b:14:af:
21
+ 2a:12:f5:44:88:15:a3:63:f2:f9:44:fb:51:ed:9a:
22
+ 6d:9c:cf:48:69:f6:d0:c9:6c:57:ee:1b:be:04:91:
23
+ b3:ad:16:ed:c8:d0:bf:b4:55:6b:e9:3c:2b:8c:57:
24
+ 19:bc:f1:76:6f:90:8d:e4:60:79:c7:03:e3:9d:83:
25
+ 42:ec:0e:79:78:3c:30:c4:d5:87:63:4d:2c:17:ad:
26
+ c6:ea:3b:ff:e4:73:1a:12:bb:ed:d3:f6:9d:9d:d9:
27
+ e7:05:7f:21:6c:27:0a:27:c5:6e:c8:53:6c:a3:bb:
28
+ 0e:11:fa:c4:ab:97:8f:a1:fd:bd:f3:5e:fb:80:1d:
29
+ 15:87:c7:b4:20:94:fc:cb:ac:06:a8:ae:b1:80:a0:
30
+ 5d:50:68:8d:49:63:1b:b2:77:a2:6b:81:21:b6:58:
31
+ 3a:f2:3d:21:ac:a5:91:bc:7d:36:46:f4:87:ea:ce:
32
+ a3:0f
33
33
  Exponent: 65537 (0x10001)
34
34
  X509v3 extensions:
35
35
  X509v3 Basic Constraints: critical
@@ -37,45 +37,45 @@ Certificate:
37
37
  X509v3 Key Usage: critical
38
38
  Certificate Sign, CRL Sign
39
39
  X509v3 Subject Key Identifier:
40
- B2:EE:24:88:34:99:18:60:81:9E:2A:D3:F4:5A:66:FA:91:F6:E1:C6
40
+ 83:68:26:16:4A:C3:88:0A:A6:48:43:98:E7:2D:4F:5F:70:8C:62:B2
41
41
  Netscape Comment:
42
42
  Puppet Server Internal Certificate
43
43
  X509v3 Authority Key Identifier:
44
- keyid:B2:EE:24:88:34:99:18:60:81:9E:2A:D3:F4:5A:66:FA:91:F6:E1:C6
45
-
44
+ 83:68:26:16:4A:C3:88:0A:A6:48:43:98:E7:2D:4F:5F:70:8C:62:B2
46
45
  Signature Algorithm: sha256WithRSAEncryption
47
- 7a:7f:46:71:8a:41:c5:43:91:be:aa:2c:ca:96:12:6f:0a:1b:
48
- 7c:57:a7:cc:b3:8d:c5:ff:8c:77:f0:4e:ea:ae:b0:c3:af:01:
49
- c5:17:32:4d:b5:c6:72:77:20:a7:05:02:a0:26:a3:0d:a6:da:
50
- b4:cf:c8:96:36:76:c9:2f:db:90:db:e1:8e:83:5e:24:e5:47:
51
- 22:1f:e5:17:0b:16:19:db:a2:ae:55:db:3b:6a:2a:f2:a8:95:
52
- 25:d1:4f:13:bd:d8:07:b2:a1:63:18:0d:7d:4b:d8:74:be:bb:
53
- c5:b2:26:3a:6c:7d:b1:84:20:6c:53:ab:fc:27:5a:06:84:a5:
54
- f4:4d:63:ba:a2:43:40:76:c7:97:2a:ae:8f:5a:ca:0e:ab:4b:
55
- 59:c3:6c:b5:3e:f5:d2:bd:55:ce:88:19:de:e5:4e:ca:fe:c1:
56
- 83:02:9c:11:a2:97:88:64:8a:df:20:17:f3:47:9e:61:cf:c4:
57
- bc:13:bb:e8:ba:97:37:90:8f:1a:5c:f5:b1:00:8d:70:fe:a2:
58
- 4c:8e:0a:bc:62:ed:8e:4e:e7:2a:15:13:59:7e:3b:a2:b8:41:
59
- f0:13:41:39:29:99:1a:ca:c6:6a:b6:99:c5:ca:57:1d:53:c4:
60
- c6:f5:7f:96:3b:11:05:96:10:a3:3c:96:d8:c3:07:2b:e2:66:
61
- a5:93:13:98
46
+ Signature Value:
47
+ 53:4c:5e:b5:86:73:e9:d0:ab:f1:87:8e:3c:3e:8c:5c:ce:c9:
48
+ aa:86:a5:ea:96:96:77:e5:31:98:04:e5:46:f8:75:7b:00:b7:
49
+ 2a:b4:f6:a4:6c:e8:e8:7e:95:b0:c2:bb:a3:ae:87:49:9f:a2:
50
+ ea:49:5a:d8:ac:79:b4:f7:aa:0c:6c:57:fb:27:8c:c0:31:97:
51
+ b0:8f:b0:4e:53:96:99:3a:0e:4c:47:51:d1:93:88:48:a4:c4:
52
+ e7:7b:c2:d7:34:4c:22:88:1b:85:f2:3f:ff:88:39:c1:61:da:
53
+ 52:ba:42:69:1a:9a:5b:1f:b5:f6:88:76:4e:21:f9:48:0a:4d:
54
+ 6e:4c:f2:b4:8c:4d:3b:c1:95:6d:f1:09:26:68:63:83:f5:d2:
55
+ 3e:d2:6d:c0:09:8e:93:36:c3:58:5e:c7:8b:79:1a:72:b6:af:
56
+ eb:2e:3b:1d:2b:19:55:49:09:df:55:49:2b:d4:93:bf:95:df:
57
+ ab:6d:aa:bc:57:e2:67:33:ec:6a:7a:33:e9:31:c8:01:01:53:
58
+ 03:f5:43:fb:8f:18:7c:0b:69:0d:81:d9:af:4b:f2:b9:b0:cd:
59
+ 5f:3d:24:a0:ad:ca:c5:b5:60:3c:fb:52:8f:48:1c:2d:ec:45:
60
+ 01:03:79:40:4e:f9:1c:e4:e5:67:27:21:2c:f7:48:95:ff:22:
61
+ da:2b:2e:48
62
62
  -----BEGIN CERTIFICATE-----
63
63
  MIIDNzCCAh+gAwIBAgIBAjANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdUZXN0
64
- IENBMB4XDTcwMDEwMTAwMDAwMFoXDTMxMDYxNTAxMTkzN1owEjEQMA4GA1UEAwwH
65
- VGVzdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALDr9rXEKKgY
66
- U4WRIHZdqr54rhBg07Vm90HIv0IAyJlj7dCSElpxwNrS/bNlO6X6vg3lKiAv36HF
67
- QcPDnATrB2yNSJwUviSBfQNNVmKAazTgrWjwFz36O7T3qaP7fTAN3cULtjK2wtmx
68
- 6JfOGWaJG13WStkOprKtzFfpChKDmKMYkKOu7I6hlu6kNnsTxJVFAmmJ9NNJF+bk
69
- 1ZEjJH6UUrVP8wsR2LJpfnIliAMVey9kyoypzrDt6wCqaK/N5BwTr6f/VLZ9vrVs
70
- vWogvkcvqN16HSpEpAsV62iFBTIXAc+nJwPLhRLB7E/BSyoRNFV8s2z6eW1PvjGS
71
- uPMBkI5Ca3ECAwEAAaOBlzCBlDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQE
72
- AwIBBjAdBgNVHQ4EFgQUsu4kiDSZGGCBnirT9Fpm+pH24cYwMQYJYIZIAYb4QgEN
64
+ IENBMB4XDTcwMDEwMTAwMDAwMFoXDTMzMDYyNDIxMTgwMFowEjEQMA4GA1UEAwwH
65
+ VGVzdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPSaPtkr4R7q
66
+ PIV9J4f191DGYPB5O4Yjzsm6QiIbYRq8M8fP4laPbIQ+TtBItSd+e0neK12ynOZJ
67
+ U1LIiZLL4WwwZ8Z0JeM/ejfvVLS9gAem23dcj1btGxSvKhL1RIgVo2Py+UT7Ue2a
68
+ bZzPSGn20MlsV+4bvgSRs60W7cjQv7RVa+k8K4xXGbzxdm+QjeRgeccD452DQuwO
69
+ eXg8MMTVh2NNLBetxuo7/+RzGhK77dP2nZ3Z5wV/IWwnCifFbshTbKO7DhH6xKuX
70
+ j6H9vfNe+4AdFYfHtCCU/MusBqiusYCgXVBojUljG7J3omuBIbZYOvI9Iaylkbx9
71
+ Nkb0h+rOow8CAwEAAaOBlzCBlDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQE
72
+ AwIBBjAdBgNVHQ4EFgQUg2gmFkrDiAqmSEOY5y1PX3CMYrIwMQYJYIZIAYb4QgEN
73
73
  BCQWIlB1cHBldCBTZXJ2ZXIgSW50ZXJuYWwgQ2VydGlmaWNhdGUwHwYDVR0jBBgw
74
- FoAUsu4kiDSZGGCBnirT9Fpm+pH24cYwDQYJKoZIhvcNAQELBQADggEBAHp/RnGK
75
- QcVDkb6qLMqWEm8KG3xXp8yzjcX/jHfwTuqusMOvAcUXMk21xnJ3IKcFAqAmow2m
76
- 2rTPyJY2dskv25Db4Y6DXiTlRyIf5RcLFhnboq5V2ztqKvKolSXRTxO92AeyoWMY
77
- DX1L2HS+u8WyJjpsfbGEIGxTq/wnWgaEpfRNY7qiQ0B2x5cqro9ayg6rS1nDbLU+
78
- 9dK9Vc6IGd7lTsr+wYMCnBGil4hkit8gF/NHnmHPxLwTu+i6lzeQjxpc9bEAjXD+
79
- okyOCrxi7Y5O5yoVE1l+O6K4QfATQTkpmRrKxmq2mcXKVx1TxMb1f5Y7EQWWEKM8
80
- ltjDByviZqWTE5g=
74
+ FoAUg2gmFkrDiAqmSEOY5y1PX3CMYrIwDQYJKoZIhvcNAQELBQADggEBAFNMXrWG
75
+ c+nQq/GHjjw+jFzOyaqGpeqWlnflMZgE5Ub4dXsAtyq09qRs6Oh+lbDCu6Ouh0mf
76
+ oupJWtisebT3qgxsV/snjMAxl7CPsE5Tlpk6DkxHUdGTiEikxOd7wtc0TCKIG4Xy
77
+ P/+IOcFh2lK6QmkamlsftfaIdk4h+UgKTW5M8rSMTTvBlW3xCSZoY4P10j7SbcAJ
78
+ jpM2w1hex4t5GnK2r+suOx0rGVVJCd9VSSvUk7+V36ttqrxX4mcz7Gp6M+kxyAEB
79
+ UwP1Q/uPGHwLaQ2B2a9L8rmwzV89JKCtysW1YDz7Uo9IHC3sRQEDeUBO+Rzk5Wcn
80
+ ISz3SJX/ItorLkg=
81
81
  -----END CERTIFICATE-----