RubyGems - puppet - Versions diffs - 8.1.0-x64-mingw32 → 8.3.0-x64-mingw32 - Mend

puppet 8.1.0-x64-mingw32 → 8.3.0-x64-mingw32

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (149) hide show

checksums.yaml +4 -4
data/Gemfile +1 -1
data/Gemfile.lock +30 -30
data/ext/project_data.yaml +2 -2
data/lib/puppet/application/doc.rb +1 -1
data/lib/puppet/application/ssl.rb +42 -7
data/lib/puppet/application.rb +5 -1
data/lib/puppet/defaults.rb +17 -5
data/lib/puppet/face/config.rb +1 -1
data/lib/puppet/face/epp.rb +2 -2
data/lib/puppet/face/module/list.rb +2 -2
data/lib/puppet/face/parser.rb +1 -1
data/lib/puppet/functions/split.rb +28 -1
data/lib/puppet/http/client.rb +12 -5
data/lib/puppet/http/service/ca.rb +25 -0
data/lib/puppet/indirector/facts/facter.rb +1 -1
data/lib/puppet/indirector/file_bucket_file/file.rb +1 -1
data/lib/puppet/indirector/indirection.rb +1 -1
data/lib/puppet/info_service/task_information_service.rb +1 -1
data/lib/puppet/module_tool.rb +1 -1
data/lib/puppet/network/formats.rb +3 -3
data/lib/puppet/network/http/memory_response.rb +1 -1
data/lib/puppet/node/environment.rb +6 -4
data/lib/puppet/parameter/value_collection.rb +1 -1
data/lib/puppet/parser/files.rb +4 -3
data/lib/puppet/parser/functions.rb +1 -1
data/lib/puppet/pops/evaluator/deferred_resolver.rb +20 -3
data/lib/puppet/pops/loader/loader_paths.rb +4 -4
data/lib/puppet/pops/lookup/explainer.rb +1 -1
data/lib/puppet/pops/lookup/hiera_config.rb +1 -1
data/lib/puppet/pops/model/factory.rb +1 -1
data/lib/puppet/pops/model/tree_dumper.rb +1 -1
data/lib/puppet/pops/parser/epp_support.rb +1 -1
data/lib/puppet/pops/parser/evaluating_parser.rb +1 -1
data/lib/puppet/pops/parser/pn_parser.rb +1 -1
data/lib/puppet/pops/pn.rb +1 -1
data/lib/puppet/pops/serialization/json_path.rb +1 -1
data/lib/puppet/pops/time/timespan.rb +4 -4
data/lib/puppet/pops/types/ruby_generator.rb +2 -2
data/lib/puppet/pops/types/string_converter.rb +6 -6
data/lib/puppet/pops/types/type_formatter.rb +2 -2
data/lib/puppet/pops/types/types.rb +1 -1
data/lib/puppet/provider/nameservice/directoryservice.rb +2 -2
data/lib/puppet/provider/package/apt.rb +1 -1
data/lib/puppet/provider/package/dnf.rb +1 -1
data/lib/puppet/provider/package/yum.rb +1 -1
data/lib/puppet/provider/user/directoryservice.rb +1 -1
data/lib/puppet/reference/configuration.rb +1 -1
data/lib/puppet/reference/indirection.rb +1 -1
data/lib/puppet/reports.rb +1 -1
data/lib/puppet/ssl/oids.rb +2 -0
data/lib/puppet/ssl/ssl_provider.rb +1 -1
data/lib/puppet/ssl/state_machine.rb +60 -9
data/lib/puppet/transaction/report.rb +1 -1
data/lib/puppet/type/filebucket.rb +1 -1
data/lib/puppet/util/diff.rb +1 -1
data/lib/puppet/util/execution.rb +9 -4
data/lib/puppet/util/inifile.rb +2 -2
data/lib/puppet/util/monkey_patches.rb +18 -0
data/lib/puppet/util/package/version/rpm.rb +1 -1
data/lib/puppet/util/provider_features.rb +1 -1
data/lib/puppet/util/selinux.rb +1 -1
data/lib/puppet/util/windows/access_control_entry.rb +1 -1
data/lib/puppet/util/windows/access_control_list.rb +1 -1
data/lib/puppet/util/windows/adsi.rb +9 -2
data/lib/puppet/util/windows/error.rb +1 -1
data/lib/puppet/util/windows/file.rb +2 -2
data/lib/puppet/util/windows/process.rb +1 -1
data/lib/puppet/util/windows/sid.rb +4 -2
data/lib/puppet/util.rb +2 -3
data/lib/puppet/version.rb +1 -1
data/lib/puppet/x509/cert_provider.rb +13 -2
data/locales/puppet.pot +106 -74
data/man/man5/puppet.conf.5 +16 -2
data/man/man8/puppet-agent.8 +1 -1
data/man/man8/puppet-apply.8 +1 -1
data/man/man8/puppet-catalog.8 +1 -1
data/man/man8/puppet-config.8 +1 -1
data/man/man8/puppet-describe.8 +1 -1
data/man/man8/puppet-device.8 +1 -1
data/man/man8/puppet-doc.8 +1 -1
data/man/man8/puppet-epp.8 +1 -1
data/man/man8/puppet-facts.8 +1 -1
data/man/man8/puppet-filebucket.8 +1 -1
data/man/man8/puppet-generate.8 +1 -1
data/man/man8/puppet-help.8 +1 -1
data/man/man8/puppet-lookup.8 +1 -1
data/man/man8/puppet-module.8 +1 -1
data/man/man8/puppet-node.8 +1 -1
data/man/man8/puppet-parser.8 +1 -1
data/man/man8/puppet-plugin.8 +1 -1
data/man/man8/puppet-report.8 +1 -1
data/man/man8/puppet-resource.8 +1 -1
data/man/man8/puppet-script.8 +1 -1
data/man/man8/puppet-ssl.8 +5 -1
data/man/man8/puppet.8 +2 -2
data/spec/fixtures/ssl/127.0.0.1-key.pem +107 -107
data/spec/fixtures/ssl/127.0.0.1.pem +52 -51
data/spec/fixtures/ssl/bad-basic-constraints.pem +56 -56
data/spec/fixtures/ssl/bad-int-basic-constraints.pem +53 -53
data/spec/fixtures/ssl/ca.pem +54 -54
data/spec/fixtures/ssl/crl.pem +26 -26
data/spec/fixtures/ssl/ec-key.pem +11 -11
data/spec/fixtures/ssl/ec.pem +33 -32
data/spec/fixtures/ssl/encrypted-ec-key.pem +12 -12
data/spec/fixtures/ssl/encrypted-key.pem +108 -108
data/spec/fixtures/ssl/intermediate-agent-crl.pem +26 -26
data/spec/fixtures/ssl/intermediate-agent.pem +56 -56
data/spec/fixtures/ssl/intermediate-crl.pem +29 -29
data/spec/fixtures/ssl/intermediate.pem +53 -53
data/spec/fixtures/ssl/oid-key.pem +107 -107
data/spec/fixtures/ssl/oid.pem +51 -50
data/spec/fixtures/ssl/pluto-key.pem +107 -107
data/spec/fixtures/ssl/pluto.pem +52 -51
data/spec/fixtures/ssl/renewed.pem +67 -0
data/spec/fixtures/ssl/request-key.pem +107 -107
data/spec/fixtures/ssl/request.pem +50 -48
data/spec/fixtures/ssl/revoked-key.pem +107 -107
data/spec/fixtures/ssl/revoked.pem +51 -50
data/spec/fixtures/ssl/signed-key.pem +107 -107
data/spec/fixtures/ssl/signed.pem +49 -48
data/spec/fixtures/ssl/tampered-cert.pem +51 -50
data/spec/fixtures/ssl/tampered-csr.pem +50 -48
data/spec/fixtures/ssl/unknown-127.0.0.1-key.pem +107 -107
data/spec/fixtures/ssl/unknown-127.0.0.1.pem +50 -49
data/spec/fixtures/ssl/unknown-ca-key.pem +107 -107
data/spec/fixtures/ssl/unknown-ca.pem +54 -54
data/spec/integration/application/agent_spec.rb +27 -27
data/spec/integration/application/apply_spec.rb +14 -0
data/spec/integration/http/client_spec.rb +16 -0
data/spec/integration/type/exec_spec.rb +13 -0
data/spec/lib/puppet/test_ca.rb +3 -10
data/spec/lib/puppet_spec/verbose.rb +10 -1
data/spec/unit/agent_spec.rb +2 -9
data/spec/unit/application/ssl_spec.rb +49 -0
data/spec/unit/defaults_spec.rb +2 -40
data/spec/unit/file_system/path_pattern_spec.rb +15 -0
data/spec/unit/functions/split_spec.rb +6 -0
data/spec/unit/http/service/ca_spec.rb +71 -0
data/spec/unit/info_service_spec.rb +1 -1
data/spec/unit/ssl/certificate_signer_spec.rb +17 -0
data/spec/unit/ssl/ssl_provider_spec.rb +21 -1
data/spec/unit/ssl/state_machine_spec.rb +75 -3
data/spec/unit/util/execution_spec.rb +1 -0
data/spec/unit/util/monkey_patches_spec.rb +42 -0
data/spec/unit/util/windows/adsi_spec.rb +25 -0
data/spec/unit/x509/cert_provider_spec.rb +23 -0
data/tasks/generate_cert_fixtures.rake +4 -0
metadata +11 -13

data/spec/fixtures/ssl/127.0.0.1.pem CHANGED Viewed

@@ -1,69 +1,70 @@
 Certificate:
     Data:
         Version: 3 (0x2)
-        Serial Number: 5 (0x5)
+        Serial Number: 6 (0x6)
         Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Test CA
         Validity
             Not Before: Jan  1 00:00:00 1970 GMT
-            Not After : Jun 15 01:19:37 2031 GMT
+            Not After : Jun 24 21:18:00 2033 GMT
         Subject: CN=127.0.0.1
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (2048 bit)
+                Public-Key: (2048 bit)
                 Modulus:
-                    00:df:40:52:59:4f:eb:dd:d8:06:f5:c0:e8:eb:11:
-                    52:31:80:a1:45:8e:3e:07:81:5c:cd:90:ea:2a:d0:
-                    84:d3:6d:54:8a:78:0c:6b:34:eb:fc:dd:90:e9:9a:
-                    5a:23:24:3b:31:99:17:d9:06:70:a8:51:95:68:50:
-                    9d:59:aa:76:2f:28:18:99:81:be:ca:1d:79:75:8b:
-                    85:3c:a4:05:39:06:f6:d8:25:13:54:e8:bb:d2:b4:
-                    30:35:9e:10:64:2d:25:44:2a:f8:75:1f:60:ec:8a:
-                    57:fc:fe:4d:57:f2:9c:e2:0d:6b:c5:f7:2d:ce:f5:
-                    9e:93:f8:83:1a:b6:94:e3:c0:e2:b2:56:92:7e:e5:
-                    d2:bd:f8:3c:9d:07:b4:85:93:77:5f:62:bd:ba:0e:
-                    30:cc:77:46:07:2a:6a:aa:18:bf:0c:f0:23:ef:7d:
-                    d9:84:86:35:3e:b5:76:1a:02:f3:9a:11:70:3f:f0:
-                    6d:58:d1:2a:19:f8:e1:ed:77:ab:0a:e7:98:12:33:
-                    5e:f9:b0:a8:f8:a5:98:c9:4e:3f:6c:01:8a:94:30:
-                    c9:19:a1:29:46:18:5e:83:9f:9d:2a:cb:70:db:8a:
-                    de:ca:2d:c1:47:82:ba:0b:20:b9:20:09:3c:1d:1c:
-                    62:77:a7:85:83:5a:08:28:34:6b:75:e1:cd:7b:b7:
-                    e7:e5
+                    00:d0:13:11:3b:81:35:76:84:fb:b6:4e:c6:e2:7d:
+                    1a:16:a5:88:08:dd:50:fd:08:04:a6:ea:a0:6d:09:
+                    8c:f2:bf:68:4b:a0:7b:68:84:b3:e4:51:e1:62:3c:
+                    68:06:c8:38:3b:0a:a5:8b:da:87:25:cd:2a:76:0b:
+                    82:71:89:5b:11:57:cb:dd:b5:ec:75:56:06:a1:26:
+                    57:08:54:2d:83:c9:2f:83:f6:d0:e0:c3:ee:78:14:
+                    47:f4:5b:ed:54:6a:93:fe:f0:68:a4:fa:93:8c:72:
+                    f0:4b:84:f9:94:a2:ed:d8:83:79:9a:0c:c7:d4:33:
+                    8e:e6:76:fd:cc:93:e3:3a:b7:56:97:85:f9:87:7e:
+                    a9:60:e2:fd:35:9e:31:6b:2e:cb:86:47:e2:67:08:
+                    fe:13:52:aa:64:d4:7c:76:09:b5:99:17:19:ed:6b:
+                    76:6c:e8:09:b5:98:06:59:c0:4a:1a:0a:a5:f9:0a:
+                    73:7c:56:46:32:17:80:3f:09:fa:a7:00:bb:a6:8b:
+                    d0:20:83:fe:ab:3c:a6:bf:ed:e6:e4:71:5e:8a:12:
+                    da:65:2a:9a:c9:9a:bd:a7:d4:56:c5:42:b9:bc:0f:
+                    0d:19:35:d1:72:37:30:e0:28:0f:36:91:a2:7b:e3:
+                    62:37:0e:5c:ba:0d:26:dc:0a:66:b3:18:ed:6e:d1:
+                    63:b7
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Alternative Name:
                 DNS:127.0.0.1, DNS:127.0.0.2
     Signature Algorithm: sha256WithRSAEncryption
-         6f:ef:ac:da:0b:a5:4f:d0:30:57:0c:8c:5a:90:be:18:11:ec:
-         e0:25:c2:0e:ef:05:cb:b5:50:43:ba:b7:25:1c:26:60:e8:ad:
-         b6:a5:1a:6a:2b:e2:66:e1:3a:b6:00:80:39:e1:19:ef:c2:e8:
-         fd:f2:04:0e:ed:fa:1e:e5:f8:f1:32:dc:4e:47:7e:43:a4:09:
-         3a:24:b4:fe:ab:7e:d6:b2:d4:4e:e0:9f:e5:c9:79:9b:87:f4:
-         7b:3d:40:a4:cf:0e:03:5c:dc:14:82:bf:1b:32:9a:18:0c:5b:
-         94:2d:1f:41:b6:a5:e7:89:d7:3b:dc:c8:17:f6:0e:ea:2d:7b:
-         a6:04:02:08:9a:b6:3d:66:03:67:16:94:2d:36:13:ee:61:18:
-         f9:17:04:6e:16:f3:65:9b:5c:34:ed:49:d8:6e:26:58:ca:68:
-         3f:2c:bb:0e:42:64:93:a7:8c:d4:d9:15:ae:fb:0f:f7:f7:ce:
-         be:99:6f:40:90:bf:e4:44:c5:44:4a:09:9a:8f:da:f6:b5:a6:
-         63:af:6b:37:ee:7c:b7:69:b6:67:76:98:f1:69:18:8e:2c:45:
-         bb:04:82:d9:03:31:85:c6:61:d3:38:60:39:45:43:a9:7b:d7:
-         f5:fd:18:f2:ec:43:42:0b:69:b8:c5:84:05:ae:a2:02:d3:19:
-         80:bd:88:a5
+    Signature Value:
+        4f:f7:58:a4:e1:bb:12:ea:e0:6b:e0:f0:ca:18:bd:f6:b8:5e:
+        f2:c4:0d:9d:1d:b1:d6:a1:96:7f:94:96:1a:c2:91:22:f4:2b:
+        e1:96:71:ce:83:0c:84:ff:72:f6:18:72:76:ee:26:9f:0a:92:
+        f4:d9:86:f7:62:90:77:6a:b9:a0:b9:61:53:64:f2:12:e9:23:
+        31:5a:ee:f7:f7:70:bb:f3:b6:89:b3:bc:64:f1:01:2f:c7:c8:
+        0c:70:a9:c6:1f:ca:95:d0:ec:25:43:e4:93:88:8b:c4:4b:50:
+        a0:77:79:f0:2f:81:4d:d3:71:93:2a:58:d1:d7:89:64:c0:30:
+        50:45:ae:36:e4:37:69:d8:d1:50:83:8d:a4:2f:55:ad:a1:c9:
+        ae:68:ac:4d:5f:1b:c9:bc:dc:ff:30:7b:10:da:16:fb:60:f9:
+        ba:73:26:44:7d:de:1e:2b:12:69:40:d4:c2:17:b2:76:d4:40:
+        fa:2c:b0:c5:54:4a:af:1a:94:b9:62:0c:81:42:9a:c3:bc:d6:
+        3a:f7:69:8e:82:91:24:48:46:be:10:bd:ed:c4:71:56:f2:e8:
+        73:64:18:d0:8b:7d:b0:66:2f:a6:e3:4d:23:68:11:b0:48:16:
+        db:8a:dd:bf:e5:de:5e:35:fa:7a:76:0e:ec:9d:e3:ee:d1:28:
+        58:bc:23:bf
 -----BEGIN CERTIFICATE-----
-MIICxDCCAaygAwIBAgIBBTANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdUZXN0
-IENBMB4XDTcwMDEwMTAwMDAwMFoXDTMxMDYxNTAxMTkzN1owFDESMBAGA1UEAwwJ
-MTI3LjAuMC4xMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30BSWU/r
-3dgG9cDo6xFSMYChRY4+B4FczZDqKtCE021UingMazTr/N2Q6ZpaIyQ7MZkX2QZw
-qFGVaFCdWap2LygYmYG+yh15dYuFPKQFOQb22CUTVOi70rQwNZ4QZC0lRCr4dR9g
-7IpX/P5NV/Kc4g1rxfctzvWek/iDGraU48DislaSfuXSvfg8nQe0hZN3X2K9ug4w
-zHdGBypqqhi/DPAj733ZhIY1PrV2GgLzmhFwP/BtWNEqGfjh7XerCueYEjNe+bCo
-+KWYyU4/bAGKlDDJGaEpRhheg5+dKstw24reyi3BR4K6CyC5IAk8HRxid6eFg1oI
-KDRrdeHNe7fn5QIDAQABoyMwITAfBgNVHREEGDAWggkxMjcuMC4wLjGCCTEyNy4w
-LjAuMjANBgkqhkiG9w0BAQsFAAOCAQEAb++s2gulT9AwVwyMWpC+GBHs4CXCDu8F
-y7VQQ7q3JRwmYOittqUaaiviZuE6tgCAOeEZ78Lo/fIEDu36HuX48TLcTkd+Q6QJ
-OiS0/qt+1rLUTuCf5cl5m4f0ez1ApM8OA1zcFIK/GzKaGAxblC0fQbal54nXO9zI
-F/YO6i17pgQCCJq2PWYDZxaULTYT7mEY+RcEbhbzZZtcNO1J2G4mWMpoPyy7DkJk
-k6eM1NkVrvsP9/fOvplvQJC/5ETFREoJmo/a9rWmY69rN+58t2m2Z3aY8WkYjixF
-uwSC2QMxhcZh0zhgOUVDqXvX9f0Y8uxDQgtpuMWEBa6iAtMZgL2IpQ==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 -----END CERTIFICATE-----

data/spec/fixtures/ssl/bad-basic-constraints.pem CHANGED Viewed

@@ -1,35 +1,35 @@
 Certificate:
     Data:
         Version: 3 (0x2)
-        Serial Number: 11 (0xb)
+        Serial Number: 12 (0xc)
         Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Test CA
         Validity
             Not Before: Jan  1 00:00:00 1970 GMT
-            Not After : Jun 15 01:19:37 2031 GMT
+            Not After : Jun 24 21:18:00 2033 GMT
         Subject: CN=Test CA
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (2048 bit)
+                Public-Key: (2048 bit)
                 Modulus:
-                    00:b0:eb:f6:b5:c4:28:a8:18:53:85:91:20:76:5d:
-                    aa:be:78:ae:10:60:d3:b5:66:f7:41:c8:bf:42:00:
-                    c8:99:63:ed:d0:92:12:5a:71:c0:da:d2:fd:b3:65:
-                    3b:a5:fa:be:0d:e5:2a:20:2f:df:a1:c5:41:c3:c3:
-                    9c:04:eb:07:6c:8d:48:9c:14:be:24:81:7d:03:4d:
-                    56:62:80:6b:34:e0:ad:68:f0:17:3d:fa:3b:b4:f7:
-                    a9:a3:fb:7d:30:0d:dd:c5:0b:b6:32:b6:c2:d9:b1:
-                    e8:97:ce:19:66:89:1b:5d:d6:4a:d9:0e:a6:b2:ad:
-                    cc:57:e9:0a:12:83:98:a3:18:90:a3:ae:ec:8e:a1:
-                    96:ee:a4:36:7b:13:c4:95:45:02:69:89:f4:d3:49:
-                    17:e6:e4:d5:91:23:24:7e:94:52:b5:4f:f3:0b:11:
-                    d8:b2:69:7e:72:25:88:03:15:7b:2f:64:ca:8c:a9:
-                    ce:b0:ed:eb:00:aa:68:af:cd:e4:1c:13:af:a7:ff:
-                    54:b6:7d:be:b5:6c:bd:6a:20:be:47:2f:a8:dd:7a:
-                    1d:2a:44:a4:0b:15:eb:68:85:05:32:17:01:cf:a7:
-                    27:03:cb:85:12:c1:ec:4f:c1:4b:2a:11:34:55:7c:
-                    b3:6c:fa:79:6d:4f:be:31:92:b8:f3:01:90:8e:42:
-                    6b:71
+                    00:f4:9a:3e:d9:2b:e1:1e:ea:3c:85:7d:27:87:f5:
+                    f7:50:c6:60:f0:79:3b:86:23:ce:c9:ba:42:22:1b:
+                    61:1a:bc:33:c7:cf:e2:56:8f:6c:84:3e:4e:d0:48:
+                    b5:27:7e:7b:49:de:2b:5d:b2:9c:e6:49:53:52:c8:
+                    89:92:cb:e1:6c:30:67:c6:74:25:e3:3f:7a:37:ef:
+                    54:b4:bd:80:07:a6:db:77:5c:8f:56:ed:1b:14:af:
+                    2a:12:f5:44:88:15:a3:63:f2:f9:44:fb:51:ed:9a:
+                    6d:9c:cf:48:69:f6:d0:c9:6c:57:ee:1b:be:04:91:
+                    b3:ad:16:ed:c8:d0:bf:b4:55:6b:e9:3c:2b:8c:57:
+                    19:bc:f1:76:6f:90:8d:e4:60:79:c7:03:e3:9d:83:
+                    42:ec:0e:79:78:3c:30:c4:d5:87:63:4d:2c:17:ad:
+                    c6:ea:3b:ff:e4:73:1a:12:bb:ed:d3:f6:9d:9d:d9:
+                    e7:05:7f:21:6c:27:0a:27:c5:6e:c8:53:6c:a3:bb:
+                    0e:11:fa:c4:ab:97:8f:a1:fd:bd:f3:5e:fb:80:1d:
+                    15:87:c7:b4:20:94:fc:cb:ac:06:a8:ae:b1:80:a0:
+                    5d:50:68:8d:49:63:1b:b2:77:a2:6b:81:21:b6:58:
+                    3a:f2:3d:21:ac:a5:91:bc:7d:36:46:f4:87:ea:ce:
+                    a3:0f
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: critical
@@ -37,45 +37,45 @@ Certificate:
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
             X509v3 Subject Key Identifier:
-                B2:EE:24:88:34:99:18:60:81:9E:2A:D3:F4:5A:66:FA:91:F6:E1:C6
+                83:68:26:16:4A:C3:88:0A:A6:48:43:98:E7:2D:4F:5F:70:8C:62:B2
             Netscape Comment:
                 Puppet Server Internal Certificate
             X509v3 Authority Key Identifier:
-                keyid:B2:EE:24:88:34:99:18:60:81:9E:2A:D3:F4:5A:66:FA:91:F6:E1:C6
+                83:68:26:16:4A:C3:88:0A:A6:48:43:98:E7:2D:4F:5F:70:8C:62:B2
     Signature Algorithm: sha256WithRSAEncryption
-         82:de:f4:cb:97:76:b0:a7:52:71:6c:94:4c:e6:8d:d6:e5:32:
-         1d:ca:99:44:9c:a2:b5:e4:a5:ba:06:08:6b:e7:b5:55:76:02:
-         7e:ee:69:6a:0d:27:69:7b:e3:80:97:10:9c:40:98:13:e4:d1:
-         40:b6:e6:59:1d:c2:1c:6e:64:ba:b5:af:7b:aa:70:d7:34:1b:
-         d3:cb:9f:2b:c0:72:36:70:ad:04:a0:07:9c:dd:e5:fa:02:b3:
-         c9:f1:f0:6a:99:89:95:20:e2:31:7f:21:2e:8b:b8:76:5e:31:
-         82:ec:4b:31:43:e7:20:d9:97:0f:52:8e:26:1d:0b:31:2d:f6:
-         74:40:6b:09:cf:39:e8:d9:c8:27:ed:9d:76:a5:b2:2a:83:db:
-         16:8e:5f:ee:e7:90:44:68:34:92:33:bd:39:7c:96:8f:e3:61:
-         78:b5:4e:59:d8:12:0a:0d:90:17:22:7c:0e:34:bb:ad:94:66:
-         07:d5:4f:d9:79:34:6f:12:c1:77:69:a1:20:ae:cc:b0:2e:e9:
-         9c:bb:94:89:70:ee:d0:14:1c:05:89:40:76:bb:47:64:83:24:
-         73:95:cc:f1:65:ee:f8:bf:55:f0:c3:e6:34:6b:07:09:67:3e:
-         03:01:8d:ba:cb:5d:5b:89:d6:e3:cb:ce:55:dc:ad:8d:7f:de:
-         c6:5a:7c:9f
+    Signature Value:
+        f2:d5:76:aa:ff:05:b2:63:2d:81:23:3d:d5:dc:8f:a8:eb:bc:
+        17:35:7f:64:1a:37:50:02:ac:54:4b:c9:74:fb:07:f8:ec:f7:
+        c2:6a:80:bd:f7:d1:43:1b:4d:d1:2c:c2:71:d9:28:46:01:0f:
+        14:ab:8e:20:14:93:e7:dc:a7:b1:6d:4a:7d:a9:f7:a2:5d:ea:
+        4d:89:5f:fb:45:4b:98:c8:93:12:d9:74:5e:a4:3e:25:13:2c:
+        92:96:3e:15:c6:d3:46:c7:03:5c:4b:70:65:9e:1f:89:ef:7e:
+        70:63:3c:78:d8:a2:92:53:2d:39:a3:f5:0d:36:aa:2a:7b:a8:
+        a9:63:66:39:e3:49:55:0f:45:d6:14:9e:f4:77:18:16:90:13:
+        41:6a:27:8f:84:c9:c5:0d:ad:cc:d9:bf:62:90:02:56:63:76:
+        76:bc:3f:36:5d:41:ad:07:5e:f9:e2:66:e9:63:e3:ba:79:b9:
+        07:b6:e8:b5:27:0f:18:4e:a4:6d:82:d7:e9:a9:40:ce:eb:d9:
+        6a:b8:d6:04:c4:b2:62:1f:c5:cb:fe:14:f3:c5:cd:0e:11:32:
+        b5:cf:ea:fc:98:3c:59:23:eb:69:c5:0b:f6:83:5b:dc:25:9c:
+        6d:93:29:c2:30:58:c1:10:80:49:86:67:09:fd:22:67:01:e5:
+        32:9a:a3:83
 -----BEGIN CERTIFICATE-----
-MIIDNDCCAhygAwIBAgIBCzANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdUZXN0
-IENBMB4XDTcwMDEwMTAwMDAwMFoXDTMxMDYxNTAxMTkzN1owEjEQMA4GA1UEAwwH
-VGVzdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALDr9rXEKKgY
-U4WRIHZdqr54rhBg07Vm90HIv0IAyJlj7dCSElpxwNrS/bNlO6X6vg3lKiAv36HF
-QcPDnATrB2yNSJwUviSBfQNNVmKAazTgrWjwFz36O7T3qaP7fTAN3cULtjK2wtmx
-6JfOGWaJG13WStkOprKtzFfpChKDmKMYkKOu7I6hlu6kNnsTxJVFAmmJ9NNJF+bk
-1ZEjJH6UUrVP8wsR2LJpfnIliAMVey9kyoypzrDt6wCqaK/N5BwTr6f/VLZ9vrVs
-vWogvkcvqN16HSpEpAsV62iFBTIXAc+nJwPLhRLB7E/BSyoRNFV8s2z6eW1PvjGS
-uPMBkI5Ca3ECAwEAAaOBlDCBkTAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwIB
-BjAdBgNVHQ4EFgQUsu4kiDSZGGCBnirT9Fpm+pH24cYwMQYJYIZIAYb4QgENBCQW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 IlB1cHBldCBTZXJ2ZXIgSW50ZXJuYWwgQ2VydGlmaWNhdGUwHwYDVR0jBBgwFoAU
-su4kiDSZGGCBnirT9Fpm+pH24cYwDQYJKoZIhvcNAQELBQADggEBAILe9MuXdrCn
-UnFslEzmjdblMh3KmUScorXkpboGCGvntVV2An7uaWoNJ2l744CXEJxAmBPk0UC2
-5lkdwhxuZLq1r3uqcNc0G9PLnyvAcjZwrQSgB5zd5foCs8nx8GqZiZUg4jF/IS6L
-uHZeMYLsSzFD5yDZlw9SjiYdCzEt9nRAawnPOejZyCftnXalsiqD2xaOX+7nkERo
-NJIzvTl8lo/jYXi1TlnYEgoNkBcifA40u62UZgfVT9l5NG8SwXdpoSCuzLAu6Zy7
-lIlw7tAUHAWJQHa7R2SDJHOVzPFl7vi/VfDD5jRrBwlnPgMBjbrLXVuJ1uPLzlXc
-rY1/3sZafJ8=
+g2gmFkrDiAqmSEOY5y1PX3CMYrIwDQYJKoZIhvcNAQELBQADggEBAPLVdqr/BbJj
+LYEjPdXcj6jrvBc1f2QaN1ACrFRLyXT7B/js98JqgL330UMbTdEswnHZKEYBDxSr
+jiAUk+fcp7FtSn2p96Jd6k2JX/tFS5jIkxLZdF6kPiUTLJKWPhXG00bHA1xLcGWe
+H4nvfnBjPHjYopJTLTmj9Q02qip7qKljZjnjSVUPRdYUnvR3GBaQE0FqJ4+EycUN
+rczZv2KQAlZjdna8PzZdQa0HXvniZulj47p5uQe26LUnDxhOpG2C1+mpQM7r2Wq4
+1gTEsmIfxcv+FPPFzQ4RMrXP6vyYPFkj62nFC/aDW9wlnG2TKcIwWMEQgEmGZwn9
+ImcB5TKao4M=
 -----END CERTIFICATE-----

data/spec/fixtures/ssl/bad-int-basic-constraints.pem CHANGED Viewed

@@ -6,30 +6,30 @@ Certificate:
         Issuer: CN=Test CA
         Validity
             Not Before: Jan  1 00:00:00 1970 GMT
-            Not After : Jun 15 01:19:37 2031 GMT
+            Not After : Jun 24 21:18:00 2033 GMT
         Subject: CN=Test CA Subauthority
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (2048 bit)
+                Public-Key: (2048 bit)
                 Modulus:
-                    00:af:36:20:41:45:0b:d1:13:0c:82:fd:b8:e5:ea:
-                    f8:32:6b:5e:f7:a5:1c:7d:21:24:cb:85:bf:cd:f5:
-                    ca:48:85:39:c1:42:a4:65:93:d2:a2:04:f9:c9:19:
-                    10:da:64:0d:be:e3:d0:a5:d3:85:17:79:aa:18:32:
-                    f7:0a:b9:8e:08:de:d8:97:06:28:99:ac:ed:d1:a6:
-                    d4:0a:34:de:3d:33:e3:08:17:c2:22:6c:1d:fc:51:
-                    df:98:e6:de:6e:c6:4b:26:f4:87:44:1e:86:b6:44:
-                    b2:f3:82:9c:9c:2f:5b:66:bf:27:71:49:53:bf:c9:
-                    d2:f5:06:7e:fe:fd:1c:59:ba:aa:a9:05:c8:cb:44:
-                    f5:f5:51:7b:80:1c:59:0e:a5:bf:bb:af:f5:96:68:
-                    26:ca:52:b6:a8:e3:f6:3f:b9:a0:60:09:67:4a:86:
-                    5b:b4:ae:13:d9:39:ca:e0:84:dc:2e:83:51:ce:09:
-                    34:36:30:9c:ff:54:32:a6:b6:5b:a6:41:bd:b3:2b:
-                    5d:1d:eb:79:45:f4:fb:de:47:56:3c:8d:b1:96:34:
-                    2d:ec:9a:66:4c:50:ab:c6:c4:05:3e:8c:27:7c:be:
-                    54:53:5e:ae:20:70:15:12:0f:85:ab:be:18:dd:da:
-                    f5:33:a5:55:6a:c7:d8:36:89:bb:1c:5d:ce:46:45:
-                    ba:7d
+                    00:c0:91:fc:98:ec:30:6b:f0:5c:d6:0b:ed:79:ab:
+                    69:80:c1:ca:5b:d5:4a:a3:e3:1b:3e:25:f1:47:0b:
+                    7b:9f:dc:1b:0a:8b:d6:0a:c1:e8:8b:ca:38:68:be:
+                    91:58:d7:ff:41:a1:00:48:59:a0:62:2e:1d:e7:2d:
+                    7a:c5:64:4d:be:48:30:eb:4f:e3:9e:3f:06:a4:ef:
+                    e4:95:5c:86:ff:54:24:49:75:16:84:41:78:c5:8d:
+                    ac:ff:af:95:91:ae:e1:f3:92:f0:a1:dd:18:e9:7c:
+                    8e:d0:86:e9:84:84:f3:cb:4c:9c:12:f6:a7:54:f0:
+                    9c:87:3b:f1:50:67:cf:12:04:11:c0:1b:e0:46:e4:
+                    03:73:9c:3c:ea:ed:3e:31:2f:bc:cf:bd:38:fb:1d:
+                    fa:f5:8d:66:e7:f2:0b:5f:df:0f:99:ec:45:c9:aa:
+                    e4:10:ad:5b:64:a5:da:af:27:e1:47:ac:4f:aa:aa:
+                    74:a5:0e:9c:14:c4:89:ef:ce:fb:50:38:b9:f9:09:
+                    d6:f9:ba:5b:49:1c:8c:70:9c:0d:4e:3c:94:6d:9e:
+                    63:24:c3:e8:49:74:7a:79:02:0d:b4:6f:f3:b9:e0:
+                    c0:4c:74:24:21:56:b5:57:e6:c9:29:08:1b:63:6d:
+                    2d:9c:e2:68:33:c1:cf:60:07:54:88:d4:da:6c:15:
+                    48:1b
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: critical
@@ -37,45 +37,45 @@ Certificate:
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
             X509v3 Subject Key Identifier:
-                59:79:27:C1:94:D7:09:B0:B2:1C:23:44:22:E2:25:25:1B:83:5F:34
+                38:7E:66:C4:7A:8B:16:EC:8A:0C:76:FC:C4:A6:7F:79:E5:DD:9A:FB
             Netscape Comment:
                 Puppet Server Internal Certificate
             X509v3 Authority Key Identifier:
-                keyid:B2:EE:24:88:34:99:18:60:81:9E:2A:D3:F4:5A:66:FA:91:F6:E1:C6
+                83:68:26:16:4A:C3:88:0A:A6:48:43:98:E7:2D:4F:5F:70:8C:62:B2
     Signature Algorithm: sha256WithRSAEncryption
-         8e:52:e6:46:dc:23:4a:6f:09:4a:e5:72:96:90:9c:8c:c0:ff:
-         4c:cd:eb:16:a7:8d:fe:56:4a:c4:be:97:50:43:c9:a7:4b:97:
-         c1:fe:5f:e0:0c:17:ea:3b:cd:a8:27:03:21:9b:ee:33:eb:23:
-         46:e6:fc:e3:80:d4:4a:a2:29:5c:a3:d5:f3:0b:c9:74:41:49:
-         45:65:59:48:7f:93:49:5f:d0:20:e7:b1:93:dc:a9:78:ad:b7:
-         ef:97:cc:13:ef:29:04:56:c6:bc:10:97:3a:09:5b:fb:34:80:
-         a4:64:88:0d:b9:cb:bf:4e:e6:fe:98:bf:dc:e5:00:47:ad:7d:
-         74:c6:13:19:a9:d8:9c:1e:1c:60:55:f2:71:02:c9:7d:10:48:
-         b8:4e:8d:22:e8:b4:ee:e0:ce:a3:24:f9:33:d0:aa:d6:aa:cb:
-         dd:38:8a:bd:05:3f:b2:52:17:80:8c:a4:1a:97:44:19:1b:e5:
-         92:d3:b4:9b:58:44:91:dc:67:1d:e1:43:1a:85:1d:da:c3:52:
-         45:50:01:6c:f9:e2:64:a1:e9:2f:d6:88:20:fd:d0:8b:e4:c8:
-         76:50:f2:79:bf:6f:ad:8f:11:e5:81:3b:53:da:39:9e:d4:d7:
-         6c:f8:7c:36:ed:76:8c:b0:ca:86:a8:1d:01:d9:25:92:54:ae:
-         a9:dc:b2:73
+    Signature Value:
+        8c:4b:be:0e:b0:af:d0:14:7f:04:4d:99:65:3e:ec:43:6e:62:
+        5c:89:4e:60:74:c3:72:ae:2d:f1:9c:e6:5f:c6:2c:d3:d7:9b:
+        af:f2:8d:51:d3:7c:bc:34:4d:35:49:f5:78:6d:41:8c:c3:0d:
+        bf:4a:6f:dc:f0:d7:92:9d:2b:71:16:c8:20:40:b8:21:f8:2a:
+        6b:a0:f5:54:40:13:25:b9:fe:bf:29:0a:d3:b5:71:13:9d:92:
+        f9:db:c1:e6:fa:04:24:b6:1c:61:46:2d:6c:8e:18:c5:f2:30:
+        00:6e:f5:d3:4b:c0:2e:68:3e:6e:b6:5c:ee:e4:98:04:71:df:
+        b5:58:0b:3b:04:72:e2:1e:ea:cf:94:a2:d4:1e:60:a4:87:00:
+        5a:80:28:85:85:5e:98:d6:bc:7a:be:ce:68:cd:3f:d4:2d:b2:
+        e3:84:61:d5:4d:d1:86:74:3a:e1:47:ec:7d:0f:3f:88:e2:1b:
+        86:5a:01:03:6a:cb:1d:10:5b:0d:c7:c5:66:e4:e4:7e:02:ae:
+        d3:a9:3f:0a:66:70:48:65:f0:fa:53:bb:65:1c:dd:03:6c:ff:
+        3a:6d:47:7d:b1:a0:68:df:ff:59:05:84:e3:fb:de:59:a4:00:
+        7b:6b:8a:de:a2:d5:69:62:57:af:11:5e:12:40:6a:58:a1:8a:
+        f5:55:34:30
 -----BEGIN CERTIFICATE-----
 MIIDQTCCAimgAwIBAgIBAzANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdUZXN0
-IENBMB4XDTcwMDEwMTAwMDAwMFoXDTMxMDYxNTAxMTkzN1owHzEdMBsGA1UEAwwU
+IENBMB4XDTcwMDEwMTAwMDAwMFoXDTMzMDYyNDIxMTgwMFowHzEdMBsGA1UEAwwU
 VGVzdCBDQSBTdWJhdXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
-AoIBAQCvNiBBRQvREwyC/bjl6vgya173pRx9ISTLhb/N9cpIhTnBQqRlk9KiBPnJ
-GRDaZA2+49Cl04UXeaoYMvcKuY4I3tiXBiiZrO3RptQKNN49M+MIF8IibB38Ud+Y
-5t5uxksm9IdEHoa2RLLzgpycL1tmvydxSVO/ydL1Bn7+/RxZuqqpBcjLRPX1UXuA
-HFkOpb+7r/WWaCbKUrao4/Y/uaBgCWdKhlu0rhPZOcrghNwug1HOCTQ2MJz/VDKm
-tlumQb2zK10d63lF9PveR1Y8jbGWNC3smmZMUKvGxAU+jCd8vlRTXq4gcBUSD4Wr
-vhjd2vUzpVVqx9g2ibscXc5GRbp9AgMBAAGjgZQwgZEwDAYDVR0TAQH/BAIwADAO
-BgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFFl5J8GU1wmwshwjRCLiJSUbg180MDEG
+AoIBAQDAkfyY7DBr8FzWC+15q2mAwcpb1Uqj4xs+JfFHC3uf3BsKi9YKweiLyjho
+vpFY1/9BoQBIWaBiLh3nLXrFZE2+SDDrT+OePwak7+SVXIb/VCRJdRaEQXjFjaz/
+r5WRruHzkvCh3RjpfI7QhumEhPPLTJwS9qdU8JyHO/FQZ88SBBHAG+BG5ANznDzq
+7T4xL7zPvTj7Hfr1jWbn8gtf3w+Z7EXJquQQrVtkpdqvJ+FHrE+qqnSlDpwUxInv
+zvtQOLn5Cdb5ultJHIxwnA1OPJRtnmMkw+hJdHp5Ag20b/O54MBMdCQhVrVX5skp
+CBtjbS2c4mgzwc9gB1SI1NpsFUgbAgMBAAGjgZQwgZEwDAYDVR0TAQH/BAIwADAO
+BgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFDh+ZsR6ixbsigx2/MSmf3nl3Zr7MDEG
 CWCGSAGG+EIBDQQkFiJQdXBwZXQgU2VydmVyIEludGVybmFsIENlcnRpZmljYXRl
-MB8GA1UdIwQYMBaAFLLuJIg0mRhggZ4q0/RaZvqR9uHGMA0GCSqGSIb3DQEBCwUA
-A4IBAQCOUuZG3CNKbwlK5XKWkJyMwP9MzesWp43+VkrEvpdQQ8mnS5fB/l/gDBfq
-O82oJwMhm+4z6yNG5vzjgNRKoilco9XzC8l0QUlFZVlIf5NJX9Ag57GT3Kl4rbfv
-l8wT7ykEVsa8EJc6CVv7NICkZIgNucu/Tub+mL/c5QBHrX10xhMZqdicHhxgVfJx
-Asl9EEi4To0i6LTu4M6jJPkz0KrWqsvdOIq9BT+yUheAjKQal0QZG+WS07SbWESR
-3Gcd4UMahR3aw1JFUAFs+eJkoekv1ogg/dCL5Mh2UPJ5v2+tjxHlgTtT2jme1Nds
-+Hw27XaMsMqGqB0B2SWSVK6p3LJz
+MB8GA1UdIwQYMBaAFINoJhZKw4gKpkhDmOctT19wjGKyMA0GCSqGSIb3DQEBCwUA
+A4IBAQCMS74OsK/QFH8ETZllPuxDbmJciU5gdMNyri3xnOZfxizT15uv8o1R03y8
+NE01SfV4bUGMww2/Sm/c8NeSnStxFsggQLgh+CproPVUQBMluf6/KQrTtXETnZL5
+28Hm+gQkthxhRi1sjhjF8jAAbvXTS8AuaD5utlzu5JgEcd+1WAs7BHLiHurPlKLU
+HmCkhwBagCiFhV6Y1rx6vs5ozT/ULbLjhGHVTdGGdDrhR+x9Dz+I4huGWgEDassd
+EFsNx8Vm5OR+Aq7TqT8KZnBIZfD6U7tlHN0DbP86bUd9saBo3/9ZBYTj+95ZpAB7
+a4reotVpYlevEV4SQGpYoYr1VTQw
 -----END CERTIFICATE-----

data/spec/fixtures/ssl/ca.pem CHANGED Viewed

@@ -6,30 +6,30 @@ Certificate:
         Issuer: CN=Test CA
         Validity
             Not Before: Jan  1 00:00:00 1970 GMT
-            Not After : Jun 15 01:19:37 2031 GMT
+            Not After : Jun 24 21:18:00 2033 GMT
         Subject: CN=Test CA
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (2048 bit)
+                Public-Key: (2048 bit)
                 Modulus:
-                    00:b0:eb:f6:b5:c4:28:a8:18:53:85:91:20:76:5d:
-                    aa:be:78:ae:10:60:d3:b5:66:f7:41:c8:bf:42:00:
-                    c8:99:63:ed:d0:92:12:5a:71:c0:da:d2:fd:b3:65:
-                    3b:a5:fa:be:0d:e5:2a:20:2f:df:a1:c5:41:c3:c3:
-                    9c:04:eb:07:6c:8d:48:9c:14:be:24:81:7d:03:4d:
-                    56:62:80:6b:34:e0:ad:68:f0:17:3d:fa:3b:b4:f7:
-                    a9:a3:fb:7d:30:0d:dd:c5:0b:b6:32:b6:c2:d9:b1:
-                    e8:97:ce:19:66:89:1b:5d:d6:4a:d9:0e:a6:b2:ad:
-                    cc:57:e9:0a:12:83:98:a3:18:90:a3:ae:ec:8e:a1:
-                    96:ee:a4:36:7b:13:c4:95:45:02:69:89:f4:d3:49:
-                    17:e6:e4:d5:91:23:24:7e:94:52:b5:4f:f3:0b:11:
-                    d8:b2:69:7e:72:25:88:03:15:7b:2f:64:ca:8c:a9:
-                    ce:b0:ed:eb:00:aa:68:af:cd:e4:1c:13:af:a7:ff:
-                    54:b6:7d:be:b5:6c:bd:6a:20:be:47:2f:a8:dd:7a:
-                    1d:2a:44:a4:0b:15:eb:68:85:05:32:17:01:cf:a7:
-                    27:03:cb:85:12:c1:ec:4f:c1:4b:2a:11:34:55:7c:
-                    b3:6c:fa:79:6d:4f:be:31:92:b8:f3:01:90:8e:42:
-                    6b:71
+                    00:f4:9a:3e:d9:2b:e1:1e:ea:3c:85:7d:27:87:f5:
+                    f7:50:c6:60:f0:79:3b:86:23:ce:c9:ba:42:22:1b:
+                    61:1a:bc:33:c7:cf:e2:56:8f:6c:84:3e:4e:d0:48:
+                    b5:27:7e:7b:49:de:2b:5d:b2:9c:e6:49:53:52:c8:
+                    89:92:cb:e1:6c:30:67:c6:74:25:e3:3f:7a:37:ef:
+                    54:b4:bd:80:07:a6:db:77:5c:8f:56:ed:1b:14:af:
+                    2a:12:f5:44:88:15:a3:63:f2:f9:44:fb:51:ed:9a:
+                    6d:9c:cf:48:69:f6:d0:c9:6c:57:ee:1b:be:04:91:
+                    b3:ad:16:ed:c8:d0:bf:b4:55:6b:e9:3c:2b:8c:57:
+                    19:bc:f1:76:6f:90:8d:e4:60:79:c7:03:e3:9d:83:
+                    42:ec:0e:79:78:3c:30:c4:d5:87:63:4d:2c:17:ad:
+                    c6:ea:3b:ff:e4:73:1a:12:bb:ed:d3:f6:9d:9d:d9:
+                    e7:05:7f:21:6c:27:0a:27:c5:6e:c8:53:6c:a3:bb:
+                    0e:11:fa:c4:ab:97:8f:a1:fd:bd:f3:5e:fb:80:1d:
+                    15:87:c7:b4:20:94:fc:cb:ac:06:a8:ae:b1:80:a0:
+                    5d:50:68:8d:49:63:1b:b2:77:a2:6b:81:21:b6:58:
+                    3a:f2:3d:21:ac:a5:91:bc:7d:36:46:f4:87:ea:ce:
+                    a3:0f
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: critical
@@ -37,45 +37,45 @@ Certificate:
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
             X509v3 Subject Key Identifier:
-                B2:EE:24:88:34:99:18:60:81:9E:2A:D3:F4:5A:66:FA:91:F6:E1:C6
+                83:68:26:16:4A:C3:88:0A:A6:48:43:98:E7:2D:4F:5F:70:8C:62:B2
             Netscape Comment:
                 Puppet Server Internal Certificate
             X509v3 Authority Key Identifier:
-                keyid:B2:EE:24:88:34:99:18:60:81:9E:2A:D3:F4:5A:66:FA:91:F6:E1:C6
+                83:68:26:16:4A:C3:88:0A:A6:48:43:98:E7:2D:4F:5F:70:8C:62:B2
     Signature Algorithm: sha256WithRSAEncryption
-         7a:7f:46:71:8a:41:c5:43:91:be:aa:2c:ca:96:12:6f:0a:1b:
-         7c:57:a7:cc:b3:8d:c5:ff:8c:77:f0:4e:ea:ae:b0:c3:af:01:
-         c5:17:32:4d:b5:c6:72:77:20:a7:05:02:a0:26:a3:0d:a6:da:
-         b4:cf:c8:96:36:76:c9:2f:db:90:db:e1:8e:83:5e:24:e5:47:
-         22:1f:e5:17:0b:16:19:db:a2:ae:55:db:3b:6a:2a:f2:a8:95:
-         25:d1:4f:13:bd:d8:07:b2:a1:63:18:0d:7d:4b:d8:74:be:bb:
-         c5:b2:26:3a:6c:7d:b1:84:20:6c:53:ab:fc:27:5a:06:84:a5:
-         f4:4d:63:ba:a2:43:40:76:c7:97:2a:ae:8f:5a:ca:0e:ab:4b:
-         59:c3:6c:b5:3e:f5:d2:bd:55:ce:88:19:de:e5:4e:ca:fe:c1:
-         83:02:9c:11:a2:97:88:64:8a:df:20:17:f3:47:9e:61:cf:c4:
-         bc:13:bb:e8:ba:97:37:90:8f:1a:5c:f5:b1:00:8d:70:fe:a2:
-         4c:8e:0a:bc:62:ed:8e:4e:e7:2a:15:13:59:7e:3b:a2:b8:41:
-         f0:13:41:39:29:99:1a:ca:c6:6a:b6:99:c5:ca:57:1d:53:c4:
-         c6:f5:7f:96:3b:11:05:96:10:a3:3c:96:d8:c3:07:2b:e2:66:
-         a5:93:13:98
+    Signature Value:
+        53:4c:5e:b5:86:73:e9:d0:ab:f1:87:8e:3c:3e:8c:5c:ce:c9:
+        aa:86:a5:ea:96:96:77:e5:31:98:04:e5:46:f8:75:7b:00:b7:
+        2a:b4:f6:a4:6c:e8:e8:7e:95:b0:c2:bb:a3:ae:87:49:9f:a2:
+        ea:49:5a:d8:ac:79:b4:f7:aa:0c:6c:57:fb:27:8c:c0:31:97:
+        b0:8f:b0:4e:53:96:99:3a:0e:4c:47:51:d1:93:88:48:a4:c4:
+        e7:7b:c2:d7:34:4c:22:88:1b:85:f2:3f:ff:88:39:c1:61:da:
+        52:ba:42:69:1a:9a:5b:1f:b5:f6:88:76:4e:21:f9:48:0a:4d:
+        6e:4c:f2:b4:8c:4d:3b:c1:95:6d:f1:09:26:68:63:83:f5:d2:
+        3e:d2:6d:c0:09:8e:93:36:c3:58:5e:c7:8b:79:1a:72:b6:af:
+        eb:2e:3b:1d:2b:19:55:49:09:df:55:49:2b:d4:93:bf:95:df:
+        ab:6d:aa:bc:57:e2:67:33:ec:6a:7a:33:e9:31:c8:01:01:53:
+        03:f5:43:fb:8f:18:7c:0b:69:0d:81:d9:af:4b:f2:b9:b0:cd:
+        5f:3d:24:a0:ad:ca:c5:b5:60:3c:fb:52:8f:48:1c:2d:ec:45:
+        01:03:79:40:4e:f9:1c:e4:e5:67:27:21:2c:f7:48:95:ff:22:
+        da:2b:2e:48
 -----BEGIN CERTIFICATE-----
 MIIDNzCCAh+gAwIBAgIBAjANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdUZXN0
-IENBMB4XDTcwMDEwMTAwMDAwMFoXDTMxMDYxNTAxMTkzN1owEjEQMA4GA1UEAwwH
-VGVzdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALDr9rXEKKgY
-U4WRIHZdqr54rhBg07Vm90HIv0IAyJlj7dCSElpxwNrS/bNlO6X6vg3lKiAv36HF
-QcPDnATrB2yNSJwUviSBfQNNVmKAazTgrWjwFz36O7T3qaP7fTAN3cULtjK2wtmx
-6JfOGWaJG13WStkOprKtzFfpChKDmKMYkKOu7I6hlu6kNnsTxJVFAmmJ9NNJF+bk
-1ZEjJH6UUrVP8wsR2LJpfnIliAMVey9kyoypzrDt6wCqaK/N5BwTr6f/VLZ9vrVs
-vWogvkcvqN16HSpEpAsV62iFBTIXAc+nJwPLhRLB7E/BSyoRNFV8s2z6eW1PvjGS
-uPMBkI5Ca3ECAwEAAaOBlzCBlDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQE
-AwIBBjAdBgNVHQ4EFgQUsu4kiDSZGGCBnirT9Fpm+pH24cYwMQYJYIZIAYb4QgEN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 BCQWIlB1cHBldCBTZXJ2ZXIgSW50ZXJuYWwgQ2VydGlmaWNhdGUwHwYDVR0jBBgw
-FoAUsu4kiDSZGGCBnirT9Fpm+pH24cYwDQYJKoZIhvcNAQELBQADggEBAHp/RnGK
-QcVDkb6qLMqWEm8KG3xXp8yzjcX/jHfwTuqusMOvAcUXMk21xnJ3IKcFAqAmow2m
-2rTPyJY2dskv25Db4Y6DXiTlRyIf5RcLFhnboq5V2ztqKvKolSXRTxO92AeyoWMY
-DX1L2HS+u8WyJjpsfbGEIGxTq/wnWgaEpfRNY7qiQ0B2x5cqro9ayg6rS1nDbLU+
-9dK9Vc6IGd7lTsr+wYMCnBGil4hkit8gF/NHnmHPxLwTu+i6lzeQjxpc9bEAjXD+
-okyOCrxi7Y5O5yoVE1l+O6K4QfATQTkpmRrKxmq2mcXKVx1TxMb1f5Y7EQWWEKM8
-ltjDByviZqWTE5g=
+FoAUg2gmFkrDiAqmSEOY5y1PX3CMYrIwDQYJKoZIhvcNAQELBQADggEBAFNMXrWG
+c+nQq/GHjjw+jFzOyaqGpeqWlnflMZgE5Ub4dXsAtyq09qRs6Oh+lbDCu6Ouh0mf
+oupJWtisebT3qgxsV/snjMAxl7CPsE5Tlpk6DkxHUdGTiEikxOd7wtc0TCKIG4Xy
+P/+IOcFh2lK6QmkamlsftfaIdk4h+UgKTW5M8rSMTTvBlW3xCSZoY4P10j7SbcAJ
+jpM2w1hex4t5GnK2r+suOx0rGVVJCd9VSSvUk7+V36ttqrxX4mcz7Gp6M+kxyAEB
+UwP1Q/uPGHwLaQ2B2a9L8rmwzV89JKCtysW1YDz7Uo9IHC3sRQEDeUBO+Rzk5Wcn
+ISz3SJX/ItorLkg=
 -----END CERTIFICATE-----