puppet 8.0.1 → 8.2.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (83) hide show
  1. checksums.yaml +4 -4
  2. data/CODEOWNERS +5 -5
  3. data/Gemfile.lock +47 -39
  4. data/ext/project_data.yaml +1 -1
  5. data/lib/puppet/defaults.rb +37 -7
  6. data/lib/puppet/http/client.rb +12 -5
  7. data/lib/puppet/http/service/ca.rb +32 -2
  8. data/lib/puppet/node/environment.rb +6 -4
  9. data/lib/puppet/pops/evaluator/deferred_resolver.rb +20 -3
  10. data/lib/puppet/ssl/oids.rb +2 -0
  11. data/lib/puppet/ssl/ssl_provider.rb +1 -1
  12. data/lib/puppet/ssl/state_machine.rb +143 -14
  13. data/lib/puppet/thread_local.rb +1 -4
  14. data/lib/puppet/version.rb +1 -1
  15. data/lib/puppet/x509/cert_provider.rb +29 -0
  16. data/locales/puppet.pot +2346 -2310
  17. data/man/man5/puppet.conf.5 +31 -3
  18. data/man/man8/puppet-agent.8 +1 -1
  19. data/man/man8/puppet-apply.8 +1 -1
  20. data/man/man8/puppet-catalog.8 +1 -1
  21. data/man/man8/puppet-config.8 +1 -1
  22. data/man/man8/puppet-describe.8 +1 -1
  23. data/man/man8/puppet-device.8 +1 -1
  24. data/man/man8/puppet-doc.8 +1 -1
  25. data/man/man8/puppet-epp.8 +1 -1
  26. data/man/man8/puppet-facts.8 +1 -1
  27. data/man/man8/puppet-filebucket.8 +1 -1
  28. data/man/man8/puppet-generate.8 +1 -1
  29. data/man/man8/puppet-help.8 +1 -1
  30. data/man/man8/puppet-lookup.8 +1 -1
  31. data/man/man8/puppet-module.8 +1 -1
  32. data/man/man8/puppet-node.8 +1 -1
  33. data/man/man8/puppet-parser.8 +1 -1
  34. data/man/man8/puppet-plugin.8 +1 -1
  35. data/man/man8/puppet-report.8 +1 -1
  36. data/man/man8/puppet-resource.8 +1 -1
  37. data/man/man8/puppet-script.8 +1 -1
  38. data/man/man8/puppet-ssl.8 +1 -1
  39. data/man/man8/puppet.8 +2 -2
  40. data/spec/fixtures/ssl/127.0.0.1-key.pem +107 -107
  41. data/spec/fixtures/ssl/127.0.0.1.pem +52 -51
  42. data/spec/fixtures/ssl/bad-basic-constraints.pem +56 -56
  43. data/spec/fixtures/ssl/bad-int-basic-constraints.pem +53 -53
  44. data/spec/fixtures/ssl/ca.pem +54 -54
  45. data/spec/fixtures/ssl/crl.pem +26 -26
  46. data/spec/fixtures/ssl/ec-key.pem +11 -11
  47. data/spec/fixtures/ssl/ec.pem +33 -32
  48. data/spec/fixtures/ssl/encrypted-ec-key.pem +12 -12
  49. data/spec/fixtures/ssl/encrypted-key.pem +108 -108
  50. data/spec/fixtures/ssl/intermediate-agent-crl.pem +26 -26
  51. data/spec/fixtures/ssl/intermediate-agent.pem +56 -56
  52. data/spec/fixtures/ssl/intermediate-crl.pem +29 -29
  53. data/spec/fixtures/ssl/intermediate.pem +53 -53
  54. data/spec/fixtures/ssl/oid-key.pem +107 -107
  55. data/spec/fixtures/ssl/oid.pem +51 -50
  56. data/spec/fixtures/ssl/pluto-key.pem +107 -107
  57. data/spec/fixtures/ssl/pluto.pem +52 -51
  58. data/spec/fixtures/ssl/renewed.pem +67 -0
  59. data/spec/fixtures/ssl/request-key.pem +107 -107
  60. data/spec/fixtures/ssl/request.pem +50 -48
  61. data/spec/fixtures/ssl/revoked-key.pem +107 -107
  62. data/spec/fixtures/ssl/revoked.pem +51 -50
  63. data/spec/fixtures/ssl/signed-key.pem +107 -107
  64. data/spec/fixtures/ssl/signed.pem +49 -48
  65. data/spec/fixtures/ssl/tampered-cert.pem +51 -50
  66. data/spec/fixtures/ssl/tampered-csr.pem +50 -48
  67. data/spec/fixtures/ssl/unknown-127.0.0.1-key.pem +107 -107
  68. data/spec/fixtures/ssl/unknown-127.0.0.1.pem +50 -49
  69. data/spec/fixtures/ssl/unknown-ca-key.pem +107 -107
  70. data/spec/fixtures/ssl/unknown-ca.pem +54 -54
  71. data/spec/integration/application/agent_spec.rb +63 -13
  72. data/spec/integration/application/apply_spec.rb +14 -0
  73. data/spec/integration/http/client_spec.rb +16 -0
  74. data/spec/lib/puppet/test_ca.rb +3 -10
  75. data/spec/unit/application/lookup_spec.rb +1 -0
  76. data/spec/unit/defaults_spec.rb +2 -40
  77. data/spec/unit/file_system/path_pattern_spec.rb +15 -0
  78. data/spec/unit/http/service/ca_spec.rb +83 -0
  79. data/spec/unit/ssl/ssl_provider_spec.rb +20 -0
  80. data/spec/unit/ssl/state_machine_spec.rb +143 -3
  81. data/spec/unit/x509/cert_provider_spec.rb +49 -0
  82. data/tasks/generate_cert_fixtures.rake +4 -0
  83. metadata +5 -9
data/spec/fixtures/ssl/intermediate-agent.pem CHANGED
@@ -1,35 +1,35 @@
1
1
  Certificate:
2
2
  Data:
3
3
  Version: 3 (0x2)
4
- Serial Number: 9 (0x9)
4
+ Serial Number: 10 (0xa)
5
5
  Signature Algorithm: sha256WithRSAEncryption
6
6
  Issuer: CN=Test CA
7
7
  Validity
8
8
  Not Before: Jan 1 00:00:00 1970 GMT
9
- Not After : Jun 15 01:19:37 2031 GMT
9
+ Not After : Jun 24 21:18:00 2033 GMT
10
10
  Subject: CN=Test CA Agent Subauthority
11
11
  Subject Public Key Info:
12
12
  Public Key Algorithm: rsaEncryption
13
- RSA Public-Key: (2048 bit)
13
+ Public-Key: (2048 bit)
14
14
  Modulus:
15
- 00:ae:c8:f1:11:5e:bd:b9:e8:60:81:9d:7d:00:b3:
16
- e6:5b:d4:03:e3:46:a0:e2:8b:e9:1f:ed:06:36:c7:
17
- e9:e1:9d:1a:8f:2b:d0:aa:63:00:12:35:44:d4:4d:
18
- d2:d8:69:3f:71:14:f0:0b:21:86:ab:93:37:ee:94:
19
- af:3a:56:35:95:b5:18:88:3b:25:96:dc:7e:b3:ab:
20
- 98:58:3b:03:54:90:bf:cf:e5:fc:2a:54:9e:a7:6e:
21
- 78:dc:36:cb:0f:20:49:c5:b2:61:76:f5:d2:19:d3:
22
- 7a:c2:82:6e:b4:8b:ff:9f:f1:bb:aa:60:b7:8e:6f:
23
- b7:24:f7:39:9f:9b:aa:86:65:8e:67:56:96:79:d3:
24
- 10:d8:0e:17:39:35:cb:ef:2d:db:c5:a7:7b:30:68:
25
- 68:65:04:a8:8b:ba:23:49:8a:ce:1e:65:9d:9d:02:
26
- 3f:5c:4e:1a:3d:ec:af:e4:53:46:c7:9f:17:bd:a2:
27
- 0c:81:72:78:89:a0:54:2c:7c:53:99:21:03:5c:b7:
28
- 0b:22:56:19:f2:bb:13:5a:35:22:e1:5b:ec:5a:52:
29
- 84:f7:e4:69:d9:4f:57:55:c4:e7:40:8c:96:01:e4:
30
- 19:03:37:bb:1b:1a:ed:a8:f8:0d:35:83:77:31:9f:
31
- a8:86:de:f8:97:ee:df:14:5e:ba:94:cd:23:38:0b:
32
- 6a:f9
15
+ 00:ab:b8:fb:97:80:ff:7b:4a:ff:d9:6f:f6:8e:10:
16
+ 4c:d9:ea:0b:66:ed:3d:45:6f:06:cb:d8:ce:56:6c:
17
+ 3e:5a:c2:1b:fd:7a:ff:48:1c:0c:3e:a2:3a:f4:57:
18
+ 20:92:a5:35:98:4a:19:1b:8c:71:ce:0c:29:61:ca:
19
+ 58:9c:52:03:ef:73:3f:e4:66:8c:ac:00:d8:1e:4e:
20
+ 06:45:db:72:ac:59:63:05:30:6a:17:bd:f1:81:6c:
21
+ e3:74:4d:90:a5:04:50:24:2a:c4:8e:9d:3f:45:c9:
22
+ 2e:47:03:f8:69:ad:49:b7:06:78:4a:dd:0d:e2:9b:
23
+ f1:48:1b:81:4a:ef:5d:3e:28:44:49:4c:d8:53:25:
24
+ f6:ca:1f:f6:76:86:97:b3:44:91:69:f2:c5:94:48:
25
+ 5d:3c:4a:21:e3:7e:a7:76:b6:14:bc:00:ac:58:92:
26
+ b2:c6:83:cb:66:fd:8e:f8:89:23:c0:f2:5b:f9:74:
27
+ 6a:8d:0c:32:7e:dd:6e:75:38:c3:06:6c:ad:56:5d:
28
+ 3c:1f:40:80:c4:0b:2c:09:fc:c1:e2:d6:60:44:9f:
29
+ 8b:86:29:42:27:c0:67:d8:1e:2d:d8:8f:a8:55:94:
30
+ 7f:90:75:0c:27:52:ff:66:34:bd:74:49:54:f4:dd:
31
+ 32:b4:ce:b7:67:61:bb:45:8f:54:c0:27:ce:33:54:
32
+ 40:8f
33
33
  Exponent: 65537 (0x10001)
34
34
  X509v3 extensions:
35
35
  X509v3 Basic Constraints: critical
@@ -37,45 +37,45 @@ Certificate:
37
37
  X509v3 Key Usage: critical
38
38
  Certificate Sign, CRL Sign
39
39
  X509v3 Subject Key Identifier:
40
- 97:84:A5:C2:28:B4:15:97:89:C4:52:2C:69:8F:7B:75:DD:5F:2A:DC
40
+ 92:84:BC:BD:F2:05:CC:1C:E3:00:5A:75:B1:A4:67:A9:31:08:9A:F2
41
41
  Netscape Comment:
42
42
  Puppet Server Internal Certificate
43
43
  X509v3 Authority Key Identifier:
44
- keyid:B2:EE:24:88:34:99:18:60:81:9E:2A:D3:F4:5A:66:FA:91:F6:E1:C6
45
-
44
+ 83:68:26:16:4A:C3:88:0A:A6:48:43:98:E7:2D:4F:5F:70:8C:62:B2
46
45
  Signature Algorithm: sha256WithRSAEncryption
47
- 73:fd:64:e0:87:64:11:b7:31:9e:e2:03:9d:9d:14:71:f1:f6:
48
- 81:96:78:10:6a:ed:0d:e6:12:57:aa:f8:31:2c:d9:00:83:07:
49
- 58:14:8c:97:2a:23:09:b0:57:56:68:95:d1:e7:0b:76:0b:82:
50
- 95:3a:90:15:3d:ae:cb:18:c0:38:2a:11:3d:04:a1:1f:bb:e9:
51
- 3e:a0:f1:b0:30:78:fb:58:0b:f9:cb:0a:99:2d:2a:a2:50:57:
52
- 6c:ef:b4:e2:c9:38:88:71:31:61:59:7e:10:c9:c9:51:32:d9:
53
- 6e:0b:c0:64:c3:40:eb:51:81:26:c3:1a:51:0b:90:ff:44:0e:
54
- 4f:fe:a7:45:41:00:ea:2a:1e:87:7c:e3:90:8a:2e:19:6c:a4:
55
- ec:db:e5:19:b0:79:b2:35:75:08:5a:63:30:29:bb:f3:6a:36:
56
- c7:28:9c:1e:88:a6:97:50:82:71:0d:1b:a0:9b:6f:99:33:60:
57
- cf:eb:65:60:49:73:6b:81:b6:ee:9c:c7:30:c4:0a:30:43:c1:
58
- 2c:ef:81:3c:d0:e4:9a:1e:72:eb:ed:37:76:f3:fb:8b:00:09:
59
- f6:53:a6:2f:1a:ba:68:32:f2:48:bb:5d:36:bb:31:05:b7:1c:
60
- 83:d8:ac:c9:af:2c:6f:d5:66:92:e9:f0:3f:1d:c6:fb:fd:37:
61
- 70:90:65:f5
46
+ Signature Value:
47
+ 89:7e:9c:5b:0f:48:35:ef:96:2c:4c:f9:c0:11:49:4c:5e:7a:
48
+ da:d3:e0:0a:11:f0:a3:55:1e:46:c1:d9:79:43:0c:00:2d:1f:
49
+ 20:21:2a:0c:3b:a6:17:7b:6c:f2:74:8e:90:93:64:f9:0c:33:
50
+ 0b:23:7d:a2:0c:0e:fd:82:ed:22:9b:d0:5f:bc:10:49:9d:ab:
51
+ 2b:50:65:11:81:ee:3f:dc:48:49:2c:cf:41:e6:af:4f:34:8b:
52
+ da:47:b8:65:55:4f:85:bc:25:0e:e7:f5:ec:07:46:1c:19:03:
53
+ e2:6a:8a:95:7d:99:26:f1:66:46:35:7d:96:93:4d:e3:8f:1a:
54
+ c2:71:fe:3c:a9:45:c0:18:d8:43:d3:6c:68:56:b9:e4:04:15:
55
+ 52:ea:4e:b3:d3:78:e9:87:51:18:f8:bd:b1:87:3a:59:ac:e4:
56
+ e1:ed:55:eb:de:27:85:a8:38:bc:ba:96:57:c3:9c:ec:64:65:
57
+ 23:19:ec:f6:a6:c1:ce:83:08:13:a4:c5:fe:d0:e5:67:e3:70:
58
+ 8b:96:84:b6:d4:4e:c4:43:60:d8:70:54:93:cd:24:44:ea:d5:
59
+ e9:f6:35:ee:a4:66:b4:2a:e0:5a:c1:7e:ad:e8:63:44:19:3e:
60
+ 9d:49:61:50:91:d9:15:31:61:9c:59:68:d6:d3:5d:82:58:8c:
61
+ 60:03:82:4e
62
62
  -----BEGIN CERTIFICATE-----
63
- MIIDSjCCAjKgAwIBAgIBCTANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdUZXN0
64
- IENBMB4XDTcwMDEwMTAwMDAwMFoXDTMxMDYxNTAxMTkzN1owJTEjMCEGA1UEAwwa
63
+ MIIDSjCCAjKgAwIBAgIBCjANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdUZXN0
64
+ IENBMB4XDTcwMDEwMTAwMDAwMFoXDTMzMDYyNDIxMTgwMFowJTEjMCEGA1UEAwwa
65
65
  VGVzdCBDQSBBZ2VudCBTdWJhdXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
66
- DwAwggEKAoIBAQCuyPERXr256GCBnX0As+Zb1APjRqDii+kf7QY2x+nhnRqPK9Cq
67
- YwASNUTUTdLYaT9xFPALIYarkzfulK86VjWVtRiIOyWW3H6zq5hYOwNUkL/P5fwq
68
- VJ6nbnjcNssPIEnFsmF29dIZ03rCgm60i/+f8buqYLeOb7ck9zmfm6qGZY5nVpZ5
69
- 0xDYDhc5NcvvLdvFp3swaGhlBKiLuiNJis4eZZ2dAj9cTho97K/kU0bHnxe9ogyB
70
- cniJoFQsfFOZIQNctwsiVhnyuxNaNSLhW+xaUoT35GnZT1dVxOdAjJYB5BkDN7sb
71
- Gu2o+A01g3cxn6iG3viX7t8UXrqUzSM4C2r5AgMBAAGjgZcwgZQwDwYDVR0TAQH/
72
- BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFJeEpcIotBWXicRSLGmP
73
- e3XdXyrcMDEGCWCGSAGG+EIBDQQkFiJQdXBwZXQgU2VydmVyIEludGVybmFsIENl
74
- cnRpZmljYXRlMB8GA1UdIwQYMBaAFLLuJIg0mRhggZ4q0/RaZvqR9uHGMA0GCSqG
75
- SIb3DQEBCwUAA4IBAQBz/WTgh2QRtzGe4gOdnRRx8faBlngQau0N5hJXqvgxLNkA
76
- gwdYFIyXKiMJsFdWaJXR5wt2C4KVOpAVPa7LGMA4KhE9BKEfu+k+oPGwMHj7WAv5
77
- ywqZLSqiUFds77TiyTiIcTFhWX4QyclRMtluC8Bkw0DrUYEmwxpRC5D/RA5P/qdF
78
- QQDqKh6HfOOQii4ZbKTs2+UZsHmyNXUIWmMwKbvzajbHKJweiKaXUIJxDRugm2+Z
79
- M2DP62VgSXNrgbbunMcwxAowQ8Es74E80OSaHnLr7Td28/uLAAn2U6YvGrpoMvJI
80
- u102uzEFtxyD2KzJryxv1WaS6fA/Hcb7/TdwkGX1
66
+ DwAwggEKAoIBAQCruPuXgP97Sv/Zb/aOEEzZ6gtm7T1FbwbL2M5WbD5awhv9ev9I
67
+ HAw+ojr0VyCSpTWYShkbjHHODClhylicUgPvcz/kZoysANgeTgZF23KsWWMFMGoX
68
+ vfGBbON0TZClBFAkKsSOnT9FyS5HA/hprUm3BnhK3Q3im/FIG4FK710+KERJTNhT
69
+ JfbKH/Z2hpezRJFp8sWUSF08SiHjfqd2thS8AKxYkrLGg8tm/Y74iSPA8lv5dGqN
70
+ DDJ+3W51OMMGbK1WXTwfQIDECywJ/MHi1mBEn4uGKUInwGfYHi3Yj6hVlH+QdQwn
71
+ Uv9mNL10SVT03TK0zrdnYbtFj1TAJ84zVECPAgMBAAGjgZcwgZQwDwYDVR0TAQH/
72
+ BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFJKEvL3yBcwc4wBadbGk
73
+ Z6kxCJryMDEGCWCGSAGG+EIBDQQkFiJQdXBwZXQgU2VydmVyIEludGVybmFsIENl
74
+ cnRpZmljYXRlMB8GA1UdIwQYMBaAFINoJhZKw4gKpkhDmOctT19wjGKyMA0GCSqG
75
+ SIb3DQEBCwUAA4IBAQCJfpxbD0g175YsTPnAEUlMXnra0+AKEfCjVR5Gwdl5QwwA
76
+ LR8gISoMO6YXe2zydI6Qk2T5DDMLI32iDA79gu0im9BfvBBJnasrUGURge4/3EhJ
77
+ LM9B5q9PNIvaR7hlVU+FvCUO5/XsB0YcGQPiaoqVfZkm8WZGNX2Wk03jjxrCcf48
78
+ qUXAGNhD02xoVrnkBBVS6k6z03jph1EY+L2xhzpZrOTh7VXr3ieFqDi8upZXw5zs
79
+ ZGUjGez2psHOgwgTpMX+0OVn43CLloS21E7EQ2DYcFSTzSRE6tXp9jXupGa0KuBa
80
+ wX6t6GNEGT6dSWFQkdkVMWGcWWjW012CWIxgA4JO
81
81
  -----END CERTIFICATE-----
data/spec/fixtures/ssl/intermediate-crl.pem CHANGED
@@ -3,44 +3,44 @@ Certificate Revocation List (CRL):
3
3
  Signature Algorithm: sha256WithRSAEncryption
4
4
  Issuer: CN=Test CA Subauthority
5
5
  Last Update: Jan 1 00:00:00 1970 GMT
6
- Next Update: Jun 15 01:19:37 2031 GMT
6
+ Next Update: Jun 24 21:18:00 2033 GMT
7
7
  CRL extensions:
8
8
  X509v3 Authority Key Identifier:
9
- keyid:59:79:27:C1:94:D7:09:B0:B2:1C:23:44:22:E2:25:25:1B:83:5F:34
10
-
9
+ 38:7E:66:C4:7A:8B:16:EC:8A:0C:76:FC:C4:A6:7F:79:E5:DD:9A:FB
11
10
  X509v3 CRL Number:
12
11
  0
13
12
  Revoked Certificates:
14
- Serial Number: 07
15
- Revocation Date: Jun 17 01:19:38 2021 GMT
13
+ Serial Number: 08
14
+ Revocation Date: Jun 27 21:18:00 2023 GMT
16
15
  CRL entry extensions:
17
16
  X509v3 CRL Reason Code:
18
17
  Key Compromise
19
18
  Signature Algorithm: sha256WithRSAEncryption
20
- 82:21:ef:06:be:b2:af:42:d5:6a:bf:e3:47:f2:b8:77:fe:76:
21
- 14:a4:08:51:ae:27:92:4a:fd:20:cb:57:58:1c:ae:f0:15:3b:
22
- 33:ff:05:5e:77:20:a0:0a:34:2f:c0:d6:15:02:b3:72:7e:58:
23
- 08:ec:ad:db:b6:4b:a2:89:97:bf:9a:8e:08:c2:0b:ed:82:4d:
24
- cf:ee:1a:62:02:df:46:3e:03:55:39:56:64:33:ab:dd:be:54:
25
- fa:d9:cd:c8:65:a6:26:09:ef:12:f2:92:d3:aa:7f:88:c4:4c:
26
- 7e:35:9e:64:11:8c:a2:46:c9:cc:f8:29:56:22:88:0e:94:96:
27
- e4:5c:4b:e7:ae:4d:1c:96:80:73:60:e3:69:a3:3a:61:ca:d4:
28
- b6:2e:1c:e9:c6:93:e7:8c:5a:ae:b0:c9:92:51:0f:2c:b0:54:
29
- 43:e7:cf:14:4f:b5:e2:0c:ae:11:19:f2:a4:55:6f:3b:1d:3a:
30
- 47:d2:ee:0a:71:9b:a5:2d:41:6e:97:8f:02:ff:9f:13:20:c7:
31
- 6c:67:a5:47:c8:c2:27:a6:8b:66:56:3e:dd:d3:27:f9:8d:21:
32
- 73:20:c9:f1:e3:70:8f:72:e5:f8:6c:60:7d:c5:71:03:4c:ce:
33
- 72:8e:78:2d:30:f8:44:1a:4b:41:d3:f5:f4:31:c6:c3:89:cb:
34
- 88:da:b3:a0
19
+ Signature Value:
20
+ ab:a0:b0:99:81:11:c8:ed:1e:3d:af:3f:9e:96:c3:b8:e0:13:
21
+ 15:0a:e4:23:15:e7:12:16:b9:4b:3e:37:e4:ba:80:c7:c5:b1:
22
+ e8:7d:1a:18:1c:5d:ef:10:00:5a:6a:e9:4e:99:6b:3a:fc:9c:
23
+ fc:55:70:eb:0d:64:60:38:ea:a7:81:9e:9a:46:2a:14:21:f7:
24
+ 24:8a:db:49:77:47:9e:4e:ee:95:fc:3e:a1:04:cd:6e:db:80:
25
+ e2:cf:a2:bd:c1:6c:94:e2:43:3d:14:42:bf:a7:f3:b0:d9:9d:
26
+ a6:1d:d4:aa:b0:6c:87:d2:46:5e:b0:d5:26:ba:39:68:c3:34:
27
+ 04:1f:c1:63:ac:1d:53:b4:47:ec:e5:e5:24:8f:ef:2d:75:c6:
28
+ a0:94:ef:5c:9c:d8:7e:52:7b:9e:5c:43:2d:7b:dc:94:40:6b:
29
+ 99:65:ea:29:15:7c:25:7b:bd:6e:cd:b7:e2:3f:c7:fc:67:d0:
30
+ 6e:b7:33:3b:57:64:29:f3:e1:88:b7:72:4e:4e:68:dd:7f:4a:
31
+ 2b:3b:ae:30:45:a4:1f:a2:e5:43:af:b5:56:1f:63:da:42:20:
32
+ aa:20:82:0e:c3:68:06:c4:5f:33:bb:4b:a2:9c:a4:ea:44:b6:
33
+ 3e:d5:df:c2:08:b4:6b:cf:6e:fb:a8:cf:80:0f:34:f2:d8:75:
34
+ 1e:9e:28:1a
35
35
  -----BEGIN X509 CRL-----
36
36
  MIIBvTCBpgIBATANBgkqhkiG9w0BAQsFADAfMR0wGwYDVQQDDBRUZXN0IENBIFN1
37
- YmF1dGhvcml0eRcNNzAwMTAxMDAwMDAwWhcNMzEwNjE1MDExOTM3WjAiMCACAQcX
38
- DTIxMDYxNzAxMTkzOFowDDAKBgNVHRUEAwoBAaAvMC0wHwYDVR0jBBgwFoAUWXkn
39
- wZTXCbCyHCNEIuIlJRuDXzQwCgYDVR0UBAMCAQAwDQYJKoZIhvcNAQELBQADggEB
40
- AIIh7wa+sq9C1Wq/40fyuHf+dhSkCFGuJ5JK/SDLV1gcrvAVOzP/BV53IKAKNC/A
41
- 1hUCs3J+WAjsrdu2S6KJl7+ajgjCC+2CTc/uGmIC30Y+A1U5VmQzq92+VPrZzchl
42
- piYJ7xLyktOqf4jETH41nmQRjKJGycz4KVYiiA6UluRcS+euTRyWgHNg42mjOmHK
43
- 1LYuHOnGk+eMWq6wyZJRDyywVEPnzxRPteIMrhEZ8qRVbzsdOkfS7gpxm6UtQW6X
44
- jwL/nxMgx2xnpUfIwiemi2ZWPt3TJ/mNIXMgyfHjcI9y5fhsYH3FcQNMznKOeC0w
45
- +EQaS0HT9fQxxsOJy4jas6A=
37
+ YmF1dGhvcml0eRcNNzAwMTAxMDAwMDAwWhcNMzMwNjI0MjExODAwWjAiMCACAQgX
38
+ DTIzMDYyNzIxMTgwMFowDDAKBgNVHRUEAwoBAaAvMC0wHwYDVR0jBBgwFoAUOH5m
39
+ xHqLFuyKDHb8xKZ/eeXdmvswCgYDVR0UBAMCAQAwDQYJKoZIhvcNAQELBQADggEB
40
+ AKugsJmBEcjtHj2vP56Ww7jgExUK5CMV5xIWuUs+N+S6gMfFseh9GhgcXe8QAFpq
41
+ 6U6Zazr8nPxVcOsNZGA46qeBnppGKhQh9ySK20l3R55O7pX8PqEEzW7bgOLPor3B
42
+ bJTiQz0UQr+n87DZnaYd1KqwbIfSRl6w1Sa6OWjDNAQfwWOsHVO0R+zl5SSP7y11
43
+ xqCU71yc2H5Se55cQy173JRAa5ll6ikVfCV7vW7Nt+I/x/xn0G63MztXZCnz4Yi3
44
+ ck5OaN1/Sis7rjBFpB+i5UOvtVYfY9pCIKoggg7DaAbEXzO7S6KcpOpEtj7V38II
45
+ tGvPbvuoz4APNPLYdR6eKBo=
46
46
  -----END X509 CRL-----
data/spec/fixtures/ssl/intermediate.pem CHANGED
@@ -6,30 +6,30 @@ Certificate:
6
6
  Issuer: CN=Test CA
7
7
  Validity
8
8
  Not Before: Jan 1 00:00:00 1970 GMT
9
- Not After : Jun 15 01:19:37 2031 GMT
9
+ Not After : Jun 24 21:18:00 2033 GMT
10
10
  Subject: CN=Test CA Subauthority
11
11
  Subject Public Key Info:
12
12
  Public Key Algorithm: rsaEncryption
13
- RSA Public-Key: (2048 bit)
13
+ Public-Key: (2048 bit)
14
14
  Modulus:
15
- 00:af:36:20:41:45:0b:d1:13:0c:82:fd:b8:e5:ea:
16
- f8:32:6b:5e:f7:a5:1c:7d:21:24:cb:85:bf:cd:f5:
17
- ca:48:85:39:c1:42:a4:65:93:d2:a2:04:f9:c9:19:
18
- 10:da:64:0d:be:e3:d0:a5:d3:85:17:79:aa:18:32:
19
- f7:0a:b9:8e:08:de:d8:97:06:28:99:ac:ed:d1:a6:
20
- d4:0a:34:de:3d:33:e3:08:17:c2:22:6c:1d:fc:51:
21
- df:98:e6:de:6e:c6:4b:26:f4:87:44:1e:86:b6:44:
22
- b2:f3:82:9c:9c:2f:5b:66:bf:27:71:49:53:bf:c9:
23
- d2:f5:06:7e:fe:fd:1c:59:ba:aa:a9:05:c8:cb:44:
24
- f5:f5:51:7b:80:1c:59:0e:a5:bf:bb:af:f5:96:68:
25
- 26:ca:52:b6:a8:e3:f6:3f:b9:a0:60:09:67:4a:86:
26
- 5b:b4:ae:13:d9:39:ca:e0:84:dc:2e:83:51:ce:09:
27
- 34:36:30:9c:ff:54:32:a6:b6:5b:a6:41:bd:b3:2b:
28
- 5d:1d:eb:79:45:f4:fb:de:47:56:3c:8d:b1:96:34:
29
- 2d:ec:9a:66:4c:50:ab:c6:c4:05:3e:8c:27:7c:be:
30
- 54:53:5e:ae:20:70:15:12:0f:85:ab:be:18:dd:da:
31
- f5:33:a5:55:6a:c7:d8:36:89:bb:1c:5d:ce:46:45:
32
- ba:7d
15
+ 00:c0:91:fc:98:ec:30:6b:f0:5c:d6:0b:ed:79:ab:
16
+ 69:80:c1:ca:5b:d5:4a:a3:e3:1b:3e:25:f1:47:0b:
17
+ 7b:9f:dc:1b:0a:8b:d6:0a:c1:e8:8b:ca:38:68:be:
18
+ 91:58:d7:ff:41:a1:00:48:59:a0:62:2e:1d:e7:2d:
19
+ 7a:c5:64:4d:be:48:30:eb:4f:e3:9e:3f:06:a4:ef:
20
+ e4:95:5c:86:ff:54:24:49:75:16:84:41:78:c5:8d:
21
+ ac:ff:af:95:91:ae:e1:f3:92:f0:a1:dd:18:e9:7c:
22
+ 8e:d0:86:e9:84:84:f3:cb:4c:9c:12:f6:a7:54:f0:
23
+ 9c:87:3b:f1:50:67:cf:12:04:11:c0:1b:e0:46:e4:
24
+ 03:73:9c:3c:ea:ed:3e:31:2f:bc:cf:bd:38:fb:1d:
25
+ fa:f5:8d:66:e7:f2:0b:5f:df:0f:99:ec:45:c9:aa:
26
+ e4:10:ad:5b:64:a5:da:af:27:e1:47:ac:4f:aa:aa:
27
+ 74:a5:0e:9c:14:c4:89:ef:ce:fb:50:38:b9:f9:09:
28
+ d6:f9:ba:5b:49:1c:8c:70:9c:0d:4e:3c:94:6d:9e:
29
+ 63:24:c3:e8:49:74:7a:79:02:0d:b4:6f:f3:b9:e0:
30
+ c0:4c:74:24:21:56:b5:57:e6:c9:29:08:1b:63:6d:
31
+ 2d:9c:e2:68:33:c1:cf:60:07:54:88:d4:da:6c:15:
32
+ 48:1b
33
33
  Exponent: 65537 (0x10001)
34
34
  X509v3 extensions:
35
35
  X509v3 Basic Constraints: critical
@@ -37,45 +37,45 @@ Certificate:
37
37
  X509v3 Key Usage: critical
38
38
  Certificate Sign, CRL Sign
39
39
  X509v3 Subject Key Identifier:
40
- 59:79:27:C1:94:D7:09:B0:B2:1C:23:44:22:E2:25:25:1B:83:5F:34
40
+ 38:7E:66:C4:7A:8B:16:EC:8A:0C:76:FC:C4:A6:7F:79:E5:DD:9A:FB
41
41
  Netscape Comment:
42
42
  Puppet Server Internal Certificate
43
43
  X509v3 Authority Key Identifier:
44
- keyid:B2:EE:24:88:34:99:18:60:81:9E:2A:D3:F4:5A:66:FA:91:F6:E1:C6
45
-
44
+ 83:68:26:16:4A:C3:88:0A:A6:48:43:98:E7:2D:4F:5F:70:8C:62:B2
46
45
  Signature Algorithm: sha256WithRSAEncryption
47
- 95:3d:3f:6f:47:83:12:b6:c1:06:dc:86:dc:7b:d3:1b:53:28:
48
- cd:d6:38:10:ca:9c:af:bd:da:a2:64:df:6d:36:eb:5c:2b:c9:
49
- 34:49:6b:d3:0e:22:94:3b:5e:ab:8b:f9:ee:ca:83:1e:94:1b:
50
- fe:38:de:a1:f1:7b:54:4b:0a:9a:95:43:03:9c:0c:45:b8:ac:
51
- 4e:6f:38:76:8a:ac:87:10:e3:0c:f2:58:7b:3c:7c:75:4b:17:
52
- 52:0f:88:8f:c5:3f:31:b1:09:3c:06:20:00:4a:30:cb:83:1a:
53
- fa:eb:32:be:5e:06:57:60:b3:59:40:a9:81:ee:b3:a5:68:f2:
54
- 30:8a:2f:1f:22:e8:6f:58:e1:32:ae:28:59:39:97:84:bc:a8:
55
- 10:b8:af:a6:9b:64:e1:a9:78:58:db:ad:0d:b1:00:dd:96:92:
56
- 45:88:a0:22:f3:2a:e8:e1:27:4d:d0:67:af:a3:01:76:ef:5a:
57
- dc:22:c5:3c:78:1b:b1:a5:d3:8f:de:7c:21:29:9a:88:3b:7e:
58
- 17:f4:5c:c2:b3:cc:b4:fc:f2:49:bb:cd:22:6c:71:ea:6b:1e:
59
- b0:6e:bd:5f:2a:0e:31:18:f7:9f:78:98:d7:51:98:0a:cd:da:
60
- 89:28:f5:22:68:a1:36:1b:80:e7:dc:1c:d8:72:b1:7b:55:5e:
61
- 90:d8:3b:9b
46
+ Signature Value:
47
+ df:f7:e8:04:78:9d:61:be:69:3d:07:19:7f:d0:dd:53:b9:8a:
48
+ 84:64:af:d2:17:07:77:83:9b:a4:cf:de:c1:a0:b6:88:1d:d7:
49
+ 94:01:b7:7b:15:36:56:03:5d:70:97:cf:50:87:60:83:40:73:
50
+ a6:16:47:71:cd:74:32:3c:1f:36:be:cd:11:a7:2c:34:a4:3f:
51
+ 1e:d8:e2:79:9f:7a:2e:20:41:ef:cf:7f:45:6a:3b:5c:fa:ff:
52
+ cb:f6:c2:0e:7d:ad:55:51:b8:23:bf:c1:77:74:7a:58:e3:a6:
53
+ db:2f:3b:09:16:26:98:0f:02:04:dd:aa:cd:b1:bc:16:ab:02:
54
+ 50:97:68:4c:93:4c:1a:11:9e:b1:7e:88:b3:ce:cf:31:10:a7:
55
+ ba:3a:13:c0:5f:cf:74:4e:9f:a6:fc:90:26:3a:b1:cb:cb:45:
56
+ 28:63:e6:2d:e1:cb:e3:93:1b:07:76:f2:6b:f6:00:87:94:1d:
57
+ 91:5c:2e:84:e4:03:9c:32:23:fc:14:30:57:e5:e5:9c:b5:e8:
58
+ c3:0b:d2:82:a2:9b:1b:e7:66:68:78:92:3f:cd:0a:0c:ae:90:
59
+ 66:50:d8:67:64:9a:48:3d:8f:a2:03:b1:7f:31:f2:b6:e5:46:
60
+ ac:16:53:c5:9f:2f:bd:44:85:e0:93:b7:3b:dc:b4:c6:b6:af:
61
+ a2:c3:ea:95
62
62
  -----BEGIN CERTIFICATE-----
63
63
  MIIDRDCCAiygAwIBAgIBAzANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdUZXN0
64
- IENBMB4XDTcwMDEwMTAwMDAwMFoXDTMxMDYxNTAxMTkzN1owHzEdMBsGA1UEAwwU
64
+ IENBMB4XDTcwMDEwMTAwMDAwMFoXDTMzMDYyNDIxMTgwMFowHzEdMBsGA1UEAwwU
65
65
  VGVzdCBDQSBTdWJhdXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
66
- AoIBAQCvNiBBRQvREwyC/bjl6vgya173pRx9ISTLhb/N9cpIhTnBQqRlk9KiBPnJ
67
- GRDaZA2+49Cl04UXeaoYMvcKuY4I3tiXBiiZrO3RptQKNN49M+MIF8IibB38Ud+Y
68
- 5t5uxksm9IdEHoa2RLLzgpycL1tmvydxSVO/ydL1Bn7+/RxZuqqpBcjLRPX1UXuA
69
- HFkOpb+7r/WWaCbKUrao4/Y/uaBgCWdKhlu0rhPZOcrghNwug1HOCTQ2MJz/VDKm
70
- tlumQb2zK10d63lF9PveR1Y8jbGWNC3smmZMUKvGxAU+jCd8vlRTXq4gcBUSD4Wr
71
- vhjd2vUzpVVqx9g2ibscXc5GRbp9AgMBAAGjgZcwgZQwDwYDVR0TAQH/BAUwAwEB
72
- /zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFFl5J8GU1wmwshwjRCLiJSUbg180
66
+ AoIBAQDAkfyY7DBr8FzWC+15q2mAwcpb1Uqj4xs+JfFHC3uf3BsKi9YKweiLyjho
67
+ vpFY1/9BoQBIWaBiLh3nLXrFZE2+SDDrT+OePwak7+SVXIb/VCRJdRaEQXjFjaz/
68
+ r5WRruHzkvCh3RjpfI7QhumEhPPLTJwS9qdU8JyHO/FQZ88SBBHAG+BG5ANznDzq
69
+ 7T4xL7zPvTj7Hfr1jWbn8gtf3w+Z7EXJquQQrVtkpdqvJ+FHrE+qqnSlDpwUxInv
70
+ zvtQOLn5Cdb5ultJHIxwnA1OPJRtnmMkw+hJdHp5Ag20b/O54MBMdCQhVrVX5skp
71
+ CBtjbS2c4mgzwc9gB1SI1NpsFUgbAgMBAAGjgZcwgZQwDwYDVR0TAQH/BAUwAwEB
72
+ /zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFDh+ZsR6ixbsigx2/MSmf3nl3Zr7
73
73
  MDEGCWCGSAGG+EIBDQQkFiJQdXBwZXQgU2VydmVyIEludGVybmFsIENlcnRpZmlj
74
- YXRlMB8GA1UdIwQYMBaAFLLuJIg0mRhggZ4q0/RaZvqR9uHGMA0GCSqGSIb3DQEB
75
- CwUAA4IBAQCVPT9vR4MStsEG3Ibce9MbUyjN1jgQypyvvdqiZN9tNutcK8k0SWvT
76
- DiKUO16ri/nuyoMelBv+ON6h8XtUSwqalUMDnAxFuKxObzh2iqyHEOMM8lh7PHx1
77
- SxdSD4iPxT8xsQk8BiAASjDLgxr66zK+XgZXYLNZQKmB7rOlaPIwii8fIuhvWOEy
78
- rihZOZeEvKgQuK+mm2ThqXhY260NsQDdlpJFiKAi8yro4SdN0GevowF271rcIsU8
79
- eBuxpdOP3nwhKZqIO34X9FzCs8y0/PJJu80ibHHqax6wbr1fKg4xGPefeJjXUZgK
80
- zdqJKPUiaKE2G4Dn3BzYcrF7VV6Q2Dub
74
+ YXRlMB8GA1UdIwQYMBaAFINoJhZKw4gKpkhDmOctT19wjGKyMA0GCSqGSIb3DQEB
75
+ CwUAA4IBAQDf9+gEeJ1hvmk9Bxl/0N1TuYqEZK/SFwd3g5ukz97BoLaIHdeUAbd7
76
+ FTZWA11wl89Qh2CDQHOmFkdxzXQyPB82vs0Rpyw0pD8e2OJ5n3ouIEHvz39Fajtc
77
+ +v/L9sIOfa1VUbgjv8F3dHpY46bbLzsJFiaYDwIE3arNsbwWqwJQl2hMk0waEZ6x
78
+ foizzs8xEKe6OhPAX890Tp+m/JAmOrHLy0UoY+Yt4cvjkxsHdvJr9gCHlB2RXC6E
79
+ 5AOcMiP8FDBX5eWctejDC9KCopsb52ZoeJI/zQoMrpBmUNhnZJpIPY+iA7F/MfK2
80
+ 5UasFlPFny+9RIXgk7c73LTGtq+iw+qV
81
81
  -----END CERTIFICATE-----