RubyGems - puppet - Versions diffs - 8.1.0-x64-mingw32 → 8.3.0-x64-mingw32 - Mend

puppet 8.1.0-x64-mingw32 → 8.3.0-x64-mingw32

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (149) hide show

checksums.yaml +4 -4
data/Gemfile +1 -1
data/Gemfile.lock +30 -30
data/ext/project_data.yaml +2 -2
data/lib/puppet/application/doc.rb +1 -1
data/lib/puppet/application/ssl.rb +42 -7
data/lib/puppet/application.rb +5 -1
data/lib/puppet/defaults.rb +17 -5
data/lib/puppet/face/config.rb +1 -1
data/lib/puppet/face/epp.rb +2 -2
data/lib/puppet/face/module/list.rb +2 -2
data/lib/puppet/face/parser.rb +1 -1
data/lib/puppet/functions/split.rb +28 -1
data/lib/puppet/http/client.rb +12 -5
data/lib/puppet/http/service/ca.rb +25 -0
data/lib/puppet/indirector/facts/facter.rb +1 -1
data/lib/puppet/indirector/file_bucket_file/file.rb +1 -1
data/lib/puppet/indirector/indirection.rb +1 -1
data/lib/puppet/info_service/task_information_service.rb +1 -1
data/lib/puppet/module_tool.rb +1 -1
data/lib/puppet/network/formats.rb +3 -3
data/lib/puppet/network/http/memory_response.rb +1 -1
data/lib/puppet/node/environment.rb +6 -4
data/lib/puppet/parameter/value_collection.rb +1 -1
data/lib/puppet/parser/files.rb +4 -3
data/lib/puppet/parser/functions.rb +1 -1
data/lib/puppet/pops/evaluator/deferred_resolver.rb +20 -3
data/lib/puppet/pops/loader/loader_paths.rb +4 -4
data/lib/puppet/pops/lookup/explainer.rb +1 -1
data/lib/puppet/pops/lookup/hiera_config.rb +1 -1
data/lib/puppet/pops/model/factory.rb +1 -1
data/lib/puppet/pops/model/tree_dumper.rb +1 -1
data/lib/puppet/pops/parser/epp_support.rb +1 -1
data/lib/puppet/pops/parser/evaluating_parser.rb +1 -1
data/lib/puppet/pops/parser/pn_parser.rb +1 -1
data/lib/puppet/pops/pn.rb +1 -1
data/lib/puppet/pops/serialization/json_path.rb +1 -1
data/lib/puppet/pops/time/timespan.rb +4 -4
data/lib/puppet/pops/types/ruby_generator.rb +2 -2
data/lib/puppet/pops/types/string_converter.rb +6 -6
data/lib/puppet/pops/types/type_formatter.rb +2 -2
data/lib/puppet/pops/types/types.rb +1 -1
data/lib/puppet/provider/nameservice/directoryservice.rb +2 -2
data/lib/puppet/provider/package/apt.rb +1 -1
data/lib/puppet/provider/package/dnf.rb +1 -1
data/lib/puppet/provider/package/yum.rb +1 -1
data/lib/puppet/provider/user/directoryservice.rb +1 -1
data/lib/puppet/reference/configuration.rb +1 -1
data/lib/puppet/reference/indirection.rb +1 -1
data/lib/puppet/reports.rb +1 -1
data/lib/puppet/ssl/oids.rb +2 -0
data/lib/puppet/ssl/ssl_provider.rb +1 -1
data/lib/puppet/ssl/state_machine.rb +60 -9
data/lib/puppet/transaction/report.rb +1 -1
data/lib/puppet/type/filebucket.rb +1 -1
data/lib/puppet/util/diff.rb +1 -1
data/lib/puppet/util/execution.rb +9 -4
data/lib/puppet/util/inifile.rb +2 -2
data/lib/puppet/util/monkey_patches.rb +18 -0
data/lib/puppet/util/package/version/rpm.rb +1 -1
data/lib/puppet/util/provider_features.rb +1 -1
data/lib/puppet/util/selinux.rb +1 -1
data/lib/puppet/util/windows/access_control_entry.rb +1 -1
data/lib/puppet/util/windows/access_control_list.rb +1 -1
data/lib/puppet/util/windows/adsi.rb +9 -2
data/lib/puppet/util/windows/error.rb +1 -1
data/lib/puppet/util/windows/file.rb +2 -2
data/lib/puppet/util/windows/process.rb +1 -1
data/lib/puppet/util/windows/sid.rb +4 -2
data/lib/puppet/util.rb +2 -3
data/lib/puppet/version.rb +1 -1
data/lib/puppet/x509/cert_provider.rb +13 -2
data/locales/puppet.pot +106 -74
data/man/man5/puppet.conf.5 +16 -2
data/man/man8/puppet-agent.8 +1 -1
data/man/man8/puppet-apply.8 +1 -1
data/man/man8/puppet-catalog.8 +1 -1
data/man/man8/puppet-config.8 +1 -1
data/man/man8/puppet-describe.8 +1 -1
data/man/man8/puppet-device.8 +1 -1
data/man/man8/puppet-doc.8 +1 -1
data/man/man8/puppet-epp.8 +1 -1
data/man/man8/puppet-facts.8 +1 -1
data/man/man8/puppet-filebucket.8 +1 -1
data/man/man8/puppet-generate.8 +1 -1
data/man/man8/puppet-help.8 +1 -1
data/man/man8/puppet-lookup.8 +1 -1
data/man/man8/puppet-module.8 +1 -1
data/man/man8/puppet-node.8 +1 -1
data/man/man8/puppet-parser.8 +1 -1
data/man/man8/puppet-plugin.8 +1 -1
data/man/man8/puppet-report.8 +1 -1
data/man/man8/puppet-resource.8 +1 -1
data/man/man8/puppet-script.8 +1 -1
data/man/man8/puppet-ssl.8 +5 -1
data/man/man8/puppet.8 +2 -2
data/spec/fixtures/ssl/127.0.0.1-key.pem +107 -107
data/spec/fixtures/ssl/127.0.0.1.pem +52 -51
data/spec/fixtures/ssl/bad-basic-constraints.pem +56 -56
data/spec/fixtures/ssl/bad-int-basic-constraints.pem +53 -53
data/spec/fixtures/ssl/ca.pem +54 -54
data/spec/fixtures/ssl/crl.pem +26 -26
data/spec/fixtures/ssl/ec-key.pem +11 -11
data/spec/fixtures/ssl/ec.pem +33 -32
data/spec/fixtures/ssl/encrypted-ec-key.pem +12 -12
data/spec/fixtures/ssl/encrypted-key.pem +108 -108
data/spec/fixtures/ssl/intermediate-agent-crl.pem +26 -26
data/spec/fixtures/ssl/intermediate-agent.pem +56 -56
data/spec/fixtures/ssl/intermediate-crl.pem +29 -29
data/spec/fixtures/ssl/intermediate.pem +53 -53
data/spec/fixtures/ssl/oid-key.pem +107 -107
data/spec/fixtures/ssl/oid.pem +51 -50
data/spec/fixtures/ssl/pluto-key.pem +107 -107
data/spec/fixtures/ssl/pluto.pem +52 -51
data/spec/fixtures/ssl/renewed.pem +67 -0
data/spec/fixtures/ssl/request-key.pem +107 -107
data/spec/fixtures/ssl/request.pem +50 -48
data/spec/fixtures/ssl/revoked-key.pem +107 -107
data/spec/fixtures/ssl/revoked.pem +51 -50
data/spec/fixtures/ssl/signed-key.pem +107 -107
data/spec/fixtures/ssl/signed.pem +49 -48
data/spec/fixtures/ssl/tampered-cert.pem +51 -50
data/spec/fixtures/ssl/tampered-csr.pem +50 -48
data/spec/fixtures/ssl/unknown-127.0.0.1-key.pem +107 -107
data/spec/fixtures/ssl/unknown-127.0.0.1.pem +50 -49
data/spec/fixtures/ssl/unknown-ca-key.pem +107 -107
data/spec/fixtures/ssl/unknown-ca.pem +54 -54
data/spec/integration/application/agent_spec.rb +27 -27
data/spec/integration/application/apply_spec.rb +14 -0
data/spec/integration/http/client_spec.rb +16 -0
data/spec/integration/type/exec_spec.rb +13 -0
data/spec/lib/puppet/test_ca.rb +3 -10
data/spec/lib/puppet_spec/verbose.rb +10 -1
data/spec/unit/agent_spec.rb +2 -9
data/spec/unit/application/ssl_spec.rb +49 -0
data/spec/unit/defaults_spec.rb +2 -40
data/spec/unit/file_system/path_pattern_spec.rb +15 -0
data/spec/unit/functions/split_spec.rb +6 -0
data/spec/unit/http/service/ca_spec.rb +71 -0
data/spec/unit/info_service_spec.rb +1 -1
data/spec/unit/ssl/certificate_signer_spec.rb +17 -0
data/spec/unit/ssl/ssl_provider_spec.rb +21 -1
data/spec/unit/ssl/state_machine_spec.rb +75 -3
data/spec/unit/util/execution_spec.rb +1 -0
data/spec/unit/util/monkey_patches_spec.rb +42 -0
data/spec/unit/util/windows/adsi_spec.rb +25 -0
data/spec/unit/x509/cert_provider_spec.rb +23 -0
data/tasks/generate_cert_fixtures.rake +4 -0
metadata +11 -13

data/spec/fixtures/ssl/intermediate-agent.pem CHANGED Viewed

@@ -1,35 +1,35 @@
 Certificate:
     Data:
         Version: 3 (0x2)
-        Serial Number: 9 (0x9)
+        Serial Number: 10 (0xa)
         Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Test CA
         Validity
             Not Before: Jan  1 00:00:00 1970 GMT
-            Not After : Jun 15 01:19:37 2031 GMT
+            Not After : Jun 24 21:18:00 2033 GMT
         Subject: CN=Test CA Agent Subauthority
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (2048 bit)
+                Public-Key: (2048 bit)
                 Modulus:
-                    00:ae:c8:f1:11:5e:bd:b9:e8:60:81:9d:7d:00:b3:
-                    e6:5b:d4:03:e3:46:a0:e2:8b:e9:1f:ed:06:36:c7:
-                    e9:e1:9d:1a:8f:2b:d0:aa:63:00:12:35:44:d4:4d:
-                    d2:d8:69:3f:71:14:f0:0b:21:86:ab:93:37:ee:94:
-                    af:3a:56:35:95:b5:18:88:3b:25:96:dc:7e:b3:ab:
-                    98:58:3b:03:54:90:bf:cf:e5:fc:2a:54:9e:a7:6e:
-                    78:dc:36:cb:0f:20:49:c5:b2:61:76:f5:d2:19:d3:
-                    7a:c2:82:6e:b4:8b:ff:9f:f1:bb:aa:60:b7:8e:6f:
-                    b7:24:f7:39:9f:9b:aa:86:65:8e:67:56:96:79:d3:
-                    10:d8:0e:17:39:35:cb:ef:2d:db:c5:a7:7b:30:68:
-                    68:65:04:a8:8b:ba:23:49:8a:ce:1e:65:9d:9d:02:
-                    3f:5c:4e:1a:3d:ec:af:e4:53:46:c7:9f:17:bd:a2:
-                    0c:81:72:78:89:a0:54:2c:7c:53:99:21:03:5c:b7:
-                    0b:22:56:19:f2:bb:13:5a:35:22:e1:5b:ec:5a:52:
-                    84:f7:e4:69:d9:4f:57:55:c4:e7:40:8c:96:01:e4:
-                    19:03:37:bb:1b:1a:ed:a8:f8:0d:35:83:77:31:9f:
-                    a8:86:de:f8:97:ee:df:14:5e:ba:94:cd:23:38:0b:
-                    6a:f9
+                    00:ab:b8:fb:97:80:ff:7b:4a:ff:d9:6f:f6:8e:10:
+                    4c:d9:ea:0b:66:ed:3d:45:6f:06:cb:d8:ce:56:6c:
+                    3e:5a:c2:1b:fd:7a:ff:48:1c:0c:3e:a2:3a:f4:57:
+                    20:92:a5:35:98:4a:19:1b:8c:71:ce:0c:29:61:ca:
+                    58:9c:52:03:ef:73:3f:e4:66:8c:ac:00:d8:1e:4e:
+                    06:45:db:72:ac:59:63:05:30:6a:17:bd:f1:81:6c:
+                    e3:74:4d:90:a5:04:50:24:2a:c4:8e:9d:3f:45:c9:
+                    2e:47:03:f8:69:ad:49:b7:06:78:4a:dd:0d:e2:9b:
+                    f1:48:1b:81:4a:ef:5d:3e:28:44:49:4c:d8:53:25:
+                    f6:ca:1f:f6:76:86:97:b3:44:91:69:f2:c5:94:48:
+                    5d:3c:4a:21:e3:7e:a7:76:b6:14:bc:00:ac:58:92:
+                    b2:c6:83:cb:66:fd:8e:f8:89:23:c0:f2:5b:f9:74:
+                    6a:8d:0c:32:7e:dd:6e:75:38:c3:06:6c:ad:56:5d:
+                    3c:1f:40:80:c4:0b:2c:09:fc:c1:e2:d6:60:44:9f:
+                    8b:86:29:42:27:c0:67:d8:1e:2d:d8:8f:a8:55:94:
+                    7f:90:75:0c:27:52:ff:66:34:bd:74:49:54:f4:dd:
+                    32:b4:ce:b7:67:61:bb:45:8f:54:c0:27:ce:33:54:
+                    40:8f
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: critical
@@ -37,45 +37,45 @@ Certificate:
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
             X509v3 Subject Key Identifier:
-                97:84:A5:C2:28:B4:15:97:89:C4:52:2C:69:8F:7B:75:DD:5F:2A:DC
+                92:84:BC:BD:F2:05:CC:1C:E3:00:5A:75:B1:A4:67:A9:31:08:9A:F2
             Netscape Comment:
                 Puppet Server Internal Certificate
             X509v3 Authority Key Identifier:
-                keyid:B2:EE:24:88:34:99:18:60:81:9E:2A:D3:F4:5A:66:FA:91:F6:E1:C6
+                83:68:26:16:4A:C3:88:0A:A6:48:43:98:E7:2D:4F:5F:70:8C:62:B2
     Signature Algorithm: sha256WithRSAEncryption
-         73:fd:64:e0:87:64:11:b7:31:9e:e2:03:9d:9d:14:71:f1:f6:
-         81:96:78:10:6a:ed:0d:e6:12:57:aa:f8:31:2c:d9:00:83:07:
-         58:14:8c:97:2a:23:09:b0:57:56:68:95:d1:e7:0b:76:0b:82:
-         95:3a:90:15:3d:ae:cb:18:c0:38:2a:11:3d:04:a1:1f:bb:e9:
-         3e:a0:f1:b0:30:78:fb:58:0b:f9:cb:0a:99:2d:2a:a2:50:57:
-         6c:ef:b4:e2:c9:38:88:71:31:61:59:7e:10:c9:c9:51:32:d9:
-         6e:0b:c0:64:c3:40:eb:51:81:26:c3:1a:51:0b:90:ff:44:0e:
-         4f:fe:a7:45:41:00:ea:2a:1e:87:7c:e3:90:8a:2e:19:6c:a4:
-         ec:db:e5:19:b0:79:b2:35:75:08:5a:63:30:29:bb:f3:6a:36:
-         c7:28:9c:1e:88:a6:97:50:82:71:0d:1b:a0:9b:6f:99:33:60:
-         cf:eb:65:60:49:73:6b:81:b6:ee:9c:c7:30:c4:0a:30:43:c1:
-         2c:ef:81:3c:d0:e4:9a:1e:72:eb:ed:37:76:f3:fb:8b:00:09:
-         f6:53:a6:2f:1a:ba:68:32:f2:48:bb:5d:36:bb:31:05:b7:1c:
-         83:d8:ac:c9:af:2c:6f:d5:66:92:e9:f0:3f:1d:c6:fb:fd:37:
-         70:90:65:f5
+    Signature Value:
+        89:7e:9c:5b:0f:48:35:ef:96:2c:4c:f9:c0:11:49:4c:5e:7a:
+        da:d3:e0:0a:11:f0:a3:55:1e:46:c1:d9:79:43:0c:00:2d:1f:
+        20:21:2a:0c:3b:a6:17:7b:6c:f2:74:8e:90:93:64:f9:0c:33:
+        0b:23:7d:a2:0c:0e:fd:82:ed:22:9b:d0:5f:bc:10:49:9d:ab:
+        2b:50:65:11:81:ee:3f:dc:48:49:2c:cf:41:e6:af:4f:34:8b:
+        da:47:b8:65:55:4f:85:bc:25:0e:e7:f5:ec:07:46:1c:19:03:
+        e2:6a:8a:95:7d:99:26:f1:66:46:35:7d:96:93:4d:e3:8f:1a:
+        c2:71:fe:3c:a9:45:c0:18:d8:43:d3:6c:68:56:b9:e4:04:15:
+        52:ea:4e:b3:d3:78:e9:87:51:18:f8:bd:b1:87:3a:59:ac:e4:
+        e1:ed:55:eb:de:27:85:a8:38:bc:ba:96:57:c3:9c:ec:64:65:
+        23:19:ec:f6:a6:c1:ce:83:08:13:a4:c5:fe:d0:e5:67:e3:70:
+        8b:96:84:b6:d4:4e:c4:43:60:d8:70:54:93:cd:24:44:ea:d5:
+        e9:f6:35:ee:a4:66:b4:2a:e0:5a:c1:7e:ad:e8:63:44:19:3e:
+        9d:49:61:50:91:d9:15:31:61:9c:59:68:d6:d3:5d:82:58:8c:
+        60:03:82:4e
 -----BEGIN CERTIFICATE-----
-MIIDSjCCAjKgAwIBAgIBCTANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdUZXN0
-IENBMB4XDTcwMDEwMTAwMDAwMFoXDTMxMDYxNTAxMTkzN1owJTEjMCEGA1UEAwwa
+MIIDSjCCAjKgAwIBAgIBCjANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdUZXN0
+IENBMB4XDTcwMDEwMTAwMDAwMFoXDTMzMDYyNDIxMTgwMFowJTEjMCEGA1UEAwwa
 VGVzdCBDQSBBZ2VudCBTdWJhdXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
-DwAwggEKAoIBAQCuyPERXr256GCBnX0As+Zb1APjRqDii+kf7QY2x+nhnRqPK9Cq
-YwASNUTUTdLYaT9xFPALIYarkzfulK86VjWVtRiIOyWW3H6zq5hYOwNUkL/P5fwq
-VJ6nbnjcNssPIEnFsmF29dIZ03rCgm60i/+f8buqYLeOb7ck9zmfm6qGZY5nVpZ5
-0xDYDhc5NcvvLdvFp3swaGhlBKiLuiNJis4eZZ2dAj9cTho97K/kU0bHnxe9ogyB
-cniJoFQsfFOZIQNctwsiVhnyuxNaNSLhW+xaUoT35GnZT1dVxOdAjJYB5BkDN7sb
-Gu2o+A01g3cxn6iG3viX7t8UXrqUzSM4C2r5AgMBAAGjgZcwgZQwDwYDVR0TAQH/
-BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFJeEpcIotBWXicRSLGmP
-e3XdXyrcMDEGCWCGSAGG+EIBDQQkFiJQdXBwZXQgU2VydmVyIEludGVybmFsIENl
-cnRpZmljYXRlMB8GA1UdIwQYMBaAFLLuJIg0mRhggZ4q0/RaZvqR9uHGMA0GCSqG
-SIb3DQEBCwUAA4IBAQBz/WTgh2QRtzGe4gOdnRRx8faBlngQau0N5hJXqvgxLNkA
-gwdYFIyXKiMJsFdWaJXR5wt2C4KVOpAVPa7LGMA4KhE9BKEfu+k+oPGwMHj7WAv5
-ywqZLSqiUFds77TiyTiIcTFhWX4QyclRMtluC8Bkw0DrUYEmwxpRC5D/RA5P/qdF
-QQDqKh6HfOOQii4ZbKTs2+UZsHmyNXUIWmMwKbvzajbHKJweiKaXUIJxDRugm2+Z
-M2DP62VgSXNrgbbunMcwxAowQ8Es74E80OSaHnLr7Td28/uLAAn2U6YvGrpoMvJI
-u102uzEFtxyD2KzJryxv1WaS6fA/Hcb7/TdwkGX1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 -----END CERTIFICATE-----

data/spec/fixtures/ssl/intermediate-crl.pem CHANGED Viewed

@@ -3,44 +3,44 @@ Certificate Revocation List (CRL):
         Signature Algorithm: sha256WithRSAEncryption
         Issuer: CN=Test CA Subauthority
         Last Update: Jan  1 00:00:00 1970 GMT
-        Next Update: Jun 15 01:19:37 2031 GMT
+        Next Update: Jun 24 21:18:00 2033 GMT
         CRL extensions:
             X509v3 Authority Key Identifier:
-                keyid:59:79:27:C1:94:D7:09:B0:B2:1C:23:44:22:E2:25:25:1B:83:5F:34
+                38:7E:66:C4:7A:8B:16:EC:8A:0C:76:FC:C4:A6:7F:79:E5:DD:9A:FB
             X509v3 CRL Number:
                 0
 Revoked Certificates:
-    Serial Number: 07
-        Revocation Date: Jun 17 01:19:38 2021 GMT
+    Serial Number: 08
+        Revocation Date: Jun 27 21:18:00 2023 GMT
         CRL entry extensions:
             X509v3 CRL Reason Code:
                 Key Compromise
     Signature Algorithm: sha256WithRSAEncryption
-         82:21:ef:06:be:b2:af:42:d5:6a:bf:e3:47:f2:b8:77:fe:76:
-         14:a4:08:51:ae:27:92:4a:fd:20:cb:57:58:1c:ae:f0:15:3b:
-         33:ff:05:5e:77:20:a0:0a:34:2f:c0:d6:15:02:b3:72:7e:58:
-         08:ec:ad:db:b6:4b:a2:89:97:bf:9a:8e:08:c2:0b:ed:82:4d:
-         cf:ee:1a:62:02:df:46:3e:03:55:39:56:64:33:ab:dd:be:54:
-         fa:d9:cd:c8:65:a6:26:09:ef:12:f2:92:d3:aa:7f:88:c4:4c:
-         7e:35:9e:64:11:8c:a2:46:c9:cc:f8:29:56:22:88:0e:94:96:
-         e4:5c:4b:e7:ae:4d:1c:96:80:73:60:e3:69:a3:3a:61:ca:d4:
-         b6:2e:1c:e9:c6:93:e7:8c:5a:ae:b0:c9:92:51:0f:2c:b0:54:
-         43:e7:cf:14:4f:b5:e2:0c:ae:11:19:f2:a4:55:6f:3b:1d:3a:
-         47:d2:ee:0a:71:9b:a5:2d:41:6e:97:8f:02:ff:9f:13:20:c7:
-         6c:67:a5:47:c8:c2:27:a6:8b:66:56:3e:dd:d3:27:f9:8d:21:
-         73:20:c9:f1:e3:70:8f:72:e5:f8:6c:60:7d:c5:71:03:4c:ce:
-         72:8e:78:2d:30:f8:44:1a:4b:41:d3:f5:f4:31:c6:c3:89:cb:
-         88:da:b3:a0
+    Signature Value:
+        ab:a0:b0:99:81:11:c8:ed:1e:3d:af:3f:9e:96:c3:b8:e0:13:
+        15:0a:e4:23:15:e7:12:16:b9:4b:3e:37:e4:ba:80:c7:c5:b1:
+        e8:7d:1a:18:1c:5d:ef:10:00:5a:6a:e9:4e:99:6b:3a:fc:9c:
+        fc:55:70:eb:0d:64:60:38:ea:a7:81:9e:9a:46:2a:14:21:f7:
+        24:8a:db:49:77:47:9e:4e:ee:95:fc:3e:a1:04:cd:6e:db:80:
+        e2:cf:a2:bd:c1:6c:94:e2:43:3d:14:42:bf:a7:f3:b0:d9:9d:
+        a6:1d:d4:aa:b0:6c:87:d2:46:5e:b0:d5:26:ba:39:68:c3:34:
+        04:1f:c1:63:ac:1d:53:b4:47:ec:e5:e5:24:8f:ef:2d:75:c6:
+        a0:94:ef:5c:9c:d8:7e:52:7b:9e:5c:43:2d:7b:dc:94:40:6b:
+        99:65:ea:29:15:7c:25:7b:bd:6e:cd:b7:e2:3f:c7:fc:67:d0:
+        6e:b7:33:3b:57:64:29:f3:e1:88:b7:72:4e:4e:68:dd:7f:4a:
+        2b:3b:ae:30:45:a4:1f:a2:e5:43:af:b5:56:1f:63:da:42:20:
+        aa:20:82:0e:c3:68:06:c4:5f:33:bb:4b:a2:9c:a4:ea:44:b6:
+        3e:d5:df:c2:08:b4:6b:cf:6e:fb:a8:cf:80:0f:34:f2:d8:75:
+        1e:9e:28:1a
 -----BEGIN X509 CRL-----
 MIIBvTCBpgIBATANBgkqhkiG9w0BAQsFADAfMR0wGwYDVQQDDBRUZXN0IENBIFN1
-YmF1dGhvcml0eRcNNzAwMTAxMDAwMDAwWhcNMzEwNjE1MDExOTM3WjAiMCACAQcX
-DTIxMDYxNzAxMTkzOFowDDAKBgNVHRUEAwoBAaAvMC0wHwYDVR0jBBgwFoAUWXkn
-wZTXCbCyHCNEIuIlJRuDXzQwCgYDVR0UBAMCAQAwDQYJKoZIhvcNAQELBQADggEB
-AIIh7wa+sq9C1Wq/40fyuHf+dhSkCFGuJ5JK/SDLV1gcrvAVOzP/BV53IKAKNC/A
-1hUCs3J+WAjsrdu2S6KJl7+ajgjCC+2CTc/uGmIC30Y+A1U5VmQzq92+VPrZzchl
-piYJ7xLyktOqf4jETH41nmQRjKJGycz4KVYiiA6UluRcS+euTRyWgHNg42mjOmHK
-1LYuHOnGk+eMWq6wyZJRDyywVEPnzxRPteIMrhEZ8qRVbzsdOkfS7gpxm6UtQW6X
-jwL/nxMgx2xnpUfIwiemi2ZWPt3TJ/mNIXMgyfHjcI9y5fhsYH3FcQNMznKOeC0w
-+EQaS0HT9fQxxsOJy4jas6A=
+YmF1dGhvcml0eRcNNzAwMTAxMDAwMDAwWhcNMzMwNjI0MjExODAwWjAiMCACAQgX
+DTIzMDYyNzIxMTgwMFowDDAKBgNVHRUEAwoBAaAvMC0wHwYDVR0jBBgwFoAUOH5m
+xHqLFuyKDHb8xKZ/eeXdmvswCgYDVR0UBAMCAQAwDQYJKoZIhvcNAQELBQADggEB
+AKugsJmBEcjtHj2vP56Ww7jgExUK5CMV5xIWuUs+N+S6gMfFseh9GhgcXe8QAFpq
+6U6Zazr8nPxVcOsNZGA46qeBnppGKhQh9ySK20l3R55O7pX8PqEEzW7bgOLPor3B
+bJTiQz0UQr+n87DZnaYd1KqwbIfSRl6w1Sa6OWjDNAQfwWOsHVO0R+zl5SSP7y11
+xqCU71yc2H5Se55cQy173JRAa5ll6ikVfCV7vW7Nt+I/x/xn0G63MztXZCnz4Yi3
+ck5OaN1/Sis7rjBFpB+i5UOvtVYfY9pCIKoggg7DaAbEXzO7S6KcpOpEtj7V38II
+tGvPbvuoz4APNPLYdR6eKBo=
 -----END X509 CRL-----

data/spec/fixtures/ssl/intermediate.pem CHANGED Viewed

@@ -6,30 +6,30 @@ Certificate:
         Issuer: CN=Test CA
         Validity
             Not Before: Jan  1 00:00:00 1970 GMT
-            Not After : Jun 15 01:19:37 2031 GMT
+            Not After : Jun 24 21:18:00 2033 GMT
         Subject: CN=Test CA Subauthority
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (2048 bit)
+                Public-Key: (2048 bit)
                 Modulus:
-                    00:af:36:20:41:45:0b:d1:13:0c:82:fd:b8:e5:ea:
-                    f8:32:6b:5e:f7:a5:1c:7d:21:24:cb:85:bf:cd:f5:
-                    ca:48:85:39:c1:42:a4:65:93:d2:a2:04:f9:c9:19:
-                    10:da:64:0d:be:e3:d0:a5:d3:85:17:79:aa:18:32:
-                    f7:0a:b9:8e:08:de:d8:97:06:28:99:ac:ed:d1:a6:
-                    d4:0a:34:de:3d:33:e3:08:17:c2:22:6c:1d:fc:51:
-                    df:98:e6:de:6e:c6:4b:26:f4:87:44:1e:86:b6:44:
-                    b2:f3:82:9c:9c:2f:5b:66:bf:27:71:49:53:bf:c9:
-                    d2:f5:06:7e:fe:fd:1c:59:ba:aa:a9:05:c8:cb:44:
-                    f5:f5:51:7b:80:1c:59:0e:a5:bf:bb:af:f5:96:68:
-                    26:ca:52:b6:a8:e3:f6:3f:b9:a0:60:09:67:4a:86:
-                    5b:b4:ae:13:d9:39:ca:e0:84:dc:2e:83:51:ce:09:
-                    34:36:30:9c:ff:54:32:a6:b6:5b:a6:41:bd:b3:2b:
-                    5d:1d:eb:79:45:f4:fb:de:47:56:3c:8d:b1:96:34:
-                    2d:ec:9a:66:4c:50:ab:c6:c4:05:3e:8c:27:7c:be:
-                    54:53:5e:ae:20:70:15:12:0f:85:ab:be:18:dd:da:
-                    f5:33:a5:55:6a:c7:d8:36:89:bb:1c:5d:ce:46:45:
-                    ba:7d
+                    00:c0:91:fc:98:ec:30:6b:f0:5c:d6:0b:ed:79:ab:
+                    69:80:c1:ca:5b:d5:4a:a3:e3:1b:3e:25:f1:47:0b:
+                    7b:9f:dc:1b:0a:8b:d6:0a:c1:e8:8b:ca:38:68:be:
+                    91:58:d7:ff:41:a1:00:48:59:a0:62:2e:1d:e7:2d:
+                    7a:c5:64:4d:be:48:30:eb:4f:e3:9e:3f:06:a4:ef:
+                    e4:95:5c:86:ff:54:24:49:75:16:84:41:78:c5:8d:
+                    ac:ff:af:95:91:ae:e1:f3:92:f0:a1:dd:18:e9:7c:
+                    8e:d0:86:e9:84:84:f3:cb:4c:9c:12:f6:a7:54:f0:
+                    9c:87:3b:f1:50:67:cf:12:04:11:c0:1b:e0:46:e4:
+                    03:73:9c:3c:ea:ed:3e:31:2f:bc:cf:bd:38:fb:1d:
+                    fa:f5:8d:66:e7:f2:0b:5f:df:0f:99:ec:45:c9:aa:
+                    e4:10:ad:5b:64:a5:da:af:27:e1:47:ac:4f:aa:aa:
+                    74:a5:0e:9c:14:c4:89:ef:ce:fb:50:38:b9:f9:09:
+                    d6:f9:ba:5b:49:1c:8c:70:9c:0d:4e:3c:94:6d:9e:
+                    63:24:c3:e8:49:74:7a:79:02:0d:b4:6f:f3:b9:e0:
+                    c0:4c:74:24:21:56:b5:57:e6:c9:29:08:1b:63:6d:
+                    2d:9c:e2:68:33:c1:cf:60:07:54:88:d4:da:6c:15:
+                    48:1b
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: critical
@@ -37,45 +37,45 @@ Certificate:
             X509v3 Key Usage: critical
                 Certificate Sign, CRL Sign
             X509v3 Subject Key Identifier:
-                59:79:27:C1:94:D7:09:B0:B2:1C:23:44:22:E2:25:25:1B:83:5F:34
+                38:7E:66:C4:7A:8B:16:EC:8A:0C:76:FC:C4:A6:7F:79:E5:DD:9A:FB
             Netscape Comment:
                 Puppet Server Internal Certificate
             X509v3 Authority Key Identifier:
-                keyid:B2:EE:24:88:34:99:18:60:81:9E:2A:D3:F4:5A:66:FA:91:F6:E1:C6
+                83:68:26:16:4A:C3:88:0A:A6:48:43:98:E7:2D:4F:5F:70:8C:62:B2
     Signature Algorithm: sha256WithRSAEncryption
-         95:3d:3f:6f:47:83:12:b6:c1:06:dc:86:dc:7b:d3:1b:53:28:
-         cd:d6:38:10:ca:9c:af:bd:da:a2:64:df:6d:36:eb:5c:2b:c9:
-         34:49:6b:d3:0e:22:94:3b:5e:ab:8b:f9:ee:ca:83:1e:94:1b:
-         fe:38:de:a1:f1:7b:54:4b:0a:9a:95:43:03:9c:0c:45:b8:ac:
-         4e:6f:38:76:8a:ac:87:10:e3:0c:f2:58:7b:3c:7c:75:4b:17:
-         52:0f:88:8f:c5:3f:31:b1:09:3c:06:20:00:4a:30:cb:83:1a:
-         fa:eb:32:be:5e:06:57:60:b3:59:40:a9:81:ee:b3:a5:68:f2:
-         30:8a:2f:1f:22:e8:6f:58:e1:32:ae:28:59:39:97:84:bc:a8:
-         10:b8:af:a6:9b:64:e1:a9:78:58:db:ad:0d:b1:00:dd:96:92:
-         45:88:a0:22:f3:2a:e8:e1:27:4d:d0:67:af:a3:01:76:ef:5a:
-         dc:22:c5:3c:78:1b:b1:a5:d3:8f:de:7c:21:29:9a:88:3b:7e:
-         17:f4:5c:c2:b3:cc:b4:fc:f2:49:bb:cd:22:6c:71:ea:6b:1e:
-         b0:6e:bd:5f:2a:0e:31:18:f7:9f:78:98:d7:51:98:0a:cd:da:
-         89:28:f5:22:68:a1:36:1b:80:e7:dc:1c:d8:72:b1:7b:55:5e:
-         90:d8:3b:9b
+    Signature Value:
+        df:f7:e8:04:78:9d:61:be:69:3d:07:19:7f:d0:dd:53:b9:8a:
+        84:64:af:d2:17:07:77:83:9b:a4:cf:de:c1:a0:b6:88:1d:d7:
+        94:01:b7:7b:15:36:56:03:5d:70:97:cf:50:87:60:83:40:73:
+        a6:16:47:71:cd:74:32:3c:1f:36:be:cd:11:a7:2c:34:a4:3f:
+        1e:d8:e2:79:9f:7a:2e:20:41:ef:cf:7f:45:6a:3b:5c:fa:ff:
+        cb:f6:c2:0e:7d:ad:55:51:b8:23:bf:c1:77:74:7a:58:e3:a6:
+        db:2f:3b:09:16:26:98:0f:02:04:dd:aa:cd:b1:bc:16:ab:02:
+        50:97:68:4c:93:4c:1a:11:9e:b1:7e:88:b3:ce:cf:31:10:a7:
+        ba:3a:13:c0:5f:cf:74:4e:9f:a6:fc:90:26:3a:b1:cb:cb:45:
+        28:63:e6:2d:e1:cb:e3:93:1b:07:76:f2:6b:f6:00:87:94:1d:
+        91:5c:2e:84:e4:03:9c:32:23:fc:14:30:57:e5:e5:9c:b5:e8:
+        c3:0b:d2:82:a2:9b:1b:e7:66:68:78:92:3f:cd:0a:0c:ae:90:
+        66:50:d8:67:64:9a:48:3d:8f:a2:03:b1:7f:31:f2:b6:e5:46:
+        ac:16:53:c5:9f:2f:bd:44:85:e0:93:b7:3b:dc:b4:c6:b6:af:
+        a2:c3:ea:95
 -----BEGIN CERTIFICATE-----
 MIIDRDCCAiygAwIBAgIBAzANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdUZXN0
-IENBMB4XDTcwMDEwMTAwMDAwMFoXDTMxMDYxNTAxMTkzN1owHzEdMBsGA1UEAwwU
+IENBMB4XDTcwMDEwMTAwMDAwMFoXDTMzMDYyNDIxMTgwMFowHzEdMBsGA1UEAwwU
 VGVzdCBDQSBTdWJhdXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
-AoIBAQCvNiBBRQvREwyC/bjl6vgya173pRx9ISTLhb/N9cpIhTnBQqRlk9KiBPnJ
-GRDaZA2+49Cl04UXeaoYMvcKuY4I3tiXBiiZrO3RptQKNN49M+MIF8IibB38Ud+Y
-5t5uxksm9IdEHoa2RLLzgpycL1tmvydxSVO/ydL1Bn7+/RxZuqqpBcjLRPX1UXuA
-HFkOpb+7r/WWaCbKUrao4/Y/uaBgCWdKhlu0rhPZOcrghNwug1HOCTQ2MJz/VDKm
-tlumQb2zK10d63lF9PveR1Y8jbGWNC3smmZMUKvGxAU+jCd8vlRTXq4gcBUSD4Wr
-vhjd2vUzpVVqx9g2ibscXc5GRbp9AgMBAAGjgZcwgZQwDwYDVR0TAQH/BAUwAwEB
-/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFFl5J8GU1wmwshwjRCLiJSUbg180
+AoIBAQDAkfyY7DBr8FzWC+15q2mAwcpb1Uqj4xs+JfFHC3uf3BsKi9YKweiLyjho
+vpFY1/9BoQBIWaBiLh3nLXrFZE2+SDDrT+OePwak7+SVXIb/VCRJdRaEQXjFjaz/
+r5WRruHzkvCh3RjpfI7QhumEhPPLTJwS9qdU8JyHO/FQZ88SBBHAG+BG5ANznDzq
+7T4xL7zPvTj7Hfr1jWbn8gtf3w+Z7EXJquQQrVtkpdqvJ+FHrE+qqnSlDpwUxInv
+zvtQOLn5Cdb5ultJHIxwnA1OPJRtnmMkw+hJdHp5Ag20b/O54MBMdCQhVrVX5skp
+CBtjbS2c4mgzwc9gB1SI1NpsFUgbAgMBAAGjgZcwgZQwDwYDVR0TAQH/BAUwAwEB
+/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFDh+ZsR6ixbsigx2/MSmf3nl3Zr7
 MDEGCWCGSAGG+EIBDQQkFiJQdXBwZXQgU2VydmVyIEludGVybmFsIENlcnRpZmlj
-YXRlMB8GA1UdIwQYMBaAFLLuJIg0mRhggZ4q0/RaZvqR9uHGMA0GCSqGSIb3DQEB
-CwUAA4IBAQCVPT9vR4MStsEG3Ibce9MbUyjN1jgQypyvvdqiZN9tNutcK8k0SWvT
-DiKUO16ri/nuyoMelBv+ON6h8XtUSwqalUMDnAxFuKxObzh2iqyHEOMM8lh7PHx1
-SxdSD4iPxT8xsQk8BiAASjDLgxr66zK+XgZXYLNZQKmB7rOlaPIwii8fIuhvWOEy
-rihZOZeEvKgQuK+mm2ThqXhY260NsQDdlpJFiKAi8yro4SdN0GevowF271rcIsU8
-eBuxpdOP3nwhKZqIO34X9FzCs8y0/PJJu80ibHHqax6wbr1fKg4xGPefeJjXUZgK
-zdqJKPUiaKE2G4Dn3BzYcrF7VV6Q2Dub
+YXRlMB8GA1UdIwQYMBaAFINoJhZKw4gKpkhDmOctT19wjGKyMA0GCSqGSIb3DQEB
+CwUAA4IBAQDf9+gEeJ1hvmk9Bxl/0N1TuYqEZK/SFwd3g5ukz97BoLaIHdeUAbd7
+FTZWA11wl89Qh2CDQHOmFkdxzXQyPB82vs0Rpyw0pD8e2OJ5n3ouIEHvz39Fajtc
++v/L9sIOfa1VUbgjv8F3dHpY46bbLzsJFiaYDwIE3arNsbwWqwJQl2hMk0waEZ6x
+foizzs8xEKe6OhPAX890Tp+m/JAmOrHLy0UoY+Yt4cvjkxsHdvJr9gCHlB2RXC6E
+5AOcMiP8FDBX5eWctejDC9KCopsb52ZoeJI/zQoMrpBmUNhnZJpIPY+iA7F/MfK2
+5UasFlPFny+9RIXgk7c73LTGtq+iw+qV
 -----END CERTIFICATE-----