puppet 8.1.0-x86-mingw32 → 8.3.1-x86-mingw32
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/Gemfile +1 -1
- data/Gemfile.lock +39 -45
- data/ext/project_data.yaml +2 -2
- data/lib/puppet/application/doc.rb +1 -1
- data/lib/puppet/application/ssl.rb +42 -7
- data/lib/puppet/application.rb +5 -1
- data/lib/puppet/defaults.rb +17 -5
- data/lib/puppet/face/config.rb +1 -1
- data/lib/puppet/face/epp.rb +2 -2
- data/lib/puppet/face/module/list.rb +2 -2
- data/lib/puppet/face/parser.rb +1 -1
- data/lib/puppet/functions/split.rb +28 -1
- data/lib/puppet/http/client.rb +12 -5
- data/lib/puppet/http/service/ca.rb +25 -0
- data/lib/puppet/indirector/facts/facter.rb +1 -1
- data/lib/puppet/indirector/file_bucket_file/file.rb +1 -1
- data/lib/puppet/indirector/indirection.rb +1 -1
- data/lib/puppet/info_service/task_information_service.rb +1 -1
- data/lib/puppet/module_tool.rb +1 -1
- data/lib/puppet/network/formats.rb +3 -3
- data/lib/puppet/network/http/memory_response.rb +1 -1
- data/lib/puppet/node/environment.rb +6 -4
- data/lib/puppet/parameter/value_collection.rb +1 -1
- data/lib/puppet/parser/files.rb +4 -3
- data/lib/puppet/parser/functions.rb +1 -1
- data/lib/puppet/pops/evaluator/deferred_resolver.rb +20 -3
- data/lib/puppet/pops/loader/loader_paths.rb +4 -4
- data/lib/puppet/pops/lookup/explainer.rb +1 -1
- data/lib/puppet/pops/lookup/hiera_config.rb +1 -1
- data/lib/puppet/pops/model/factory.rb +1 -1
- data/lib/puppet/pops/model/tree_dumper.rb +1 -1
- data/lib/puppet/pops/parser/epp_support.rb +1 -1
- data/lib/puppet/pops/parser/evaluating_parser.rb +1 -1
- data/lib/puppet/pops/parser/pn_parser.rb +1 -1
- data/lib/puppet/pops/pn.rb +1 -1
- data/lib/puppet/pops/serialization/json_path.rb +1 -1
- data/lib/puppet/pops/time/timespan.rb +4 -4
- data/lib/puppet/pops/types/ruby_generator.rb +2 -2
- data/lib/puppet/pops/types/string_converter.rb +6 -6
- data/lib/puppet/pops/types/type_formatter.rb +2 -2
- data/lib/puppet/pops/types/types.rb +1 -1
- data/lib/puppet/provider/nameservice/directoryservice.rb +2 -2
- data/lib/puppet/provider/package/apt.rb +1 -1
- data/lib/puppet/provider/package/dnf.rb +1 -1
- data/lib/puppet/provider/package/yum.rb +1 -1
- data/lib/puppet/provider/user/directoryservice.rb +1 -1
- data/lib/puppet/reference/configuration.rb +1 -1
- data/lib/puppet/reference/indirection.rb +1 -1
- data/lib/puppet/reports.rb +1 -1
- data/lib/puppet/ssl/oids.rb +2 -0
- data/lib/puppet/ssl/ssl_provider.rb +1 -1
- data/lib/puppet/ssl/state_machine.rb +60 -9
- data/lib/puppet/transaction/report.rb +1 -1
- data/lib/puppet/type/filebucket.rb +1 -1
- data/lib/puppet/util/diff.rb +1 -1
- data/lib/puppet/util/execution.rb +9 -4
- data/lib/puppet/util/inifile.rb +2 -2
- data/lib/puppet/util/monkey_patches.rb +18 -0
- data/lib/puppet/util/package/version/rpm.rb +1 -1
- data/lib/puppet/util/provider_features.rb +1 -1
- data/lib/puppet/util/selinux.rb +1 -1
- data/lib/puppet/util/windows/access_control_entry.rb +1 -1
- data/lib/puppet/util/windows/access_control_list.rb +1 -1
- data/lib/puppet/util/windows/adsi.rb +9 -2
- data/lib/puppet/util/windows/error.rb +1 -1
- data/lib/puppet/util/windows/file.rb +2 -2
- data/lib/puppet/util/windows/process.rb +1 -1
- data/lib/puppet/util/windows/sid.rb +4 -2
- data/lib/puppet/util.rb +2 -3
- data/lib/puppet/version.rb +1 -1
- data/lib/puppet/x509/cert_provider.rb +13 -2
- data/locales/puppet.pot +106 -74
- data/man/man5/puppet.conf.5 +16 -2
- data/man/man8/puppet-agent.8 +1 -1
- data/man/man8/puppet-apply.8 +1 -1
- data/man/man8/puppet-catalog.8 +1 -1
- data/man/man8/puppet-config.8 +1 -1
- data/man/man8/puppet-describe.8 +1 -1
- data/man/man8/puppet-device.8 +1 -1
- data/man/man8/puppet-doc.8 +1 -1
- data/man/man8/puppet-epp.8 +1 -1
- data/man/man8/puppet-facts.8 +1 -1
- data/man/man8/puppet-filebucket.8 +1 -1
- data/man/man8/puppet-generate.8 +1 -1
- data/man/man8/puppet-help.8 +1 -1
- data/man/man8/puppet-lookup.8 +1 -1
- data/man/man8/puppet-module.8 +1 -1
- data/man/man8/puppet-node.8 +1 -1
- data/man/man8/puppet-parser.8 +1 -1
- data/man/man8/puppet-plugin.8 +1 -1
- data/man/man8/puppet-report.8 +1 -1
- data/man/man8/puppet-resource.8 +1 -1
- data/man/man8/puppet-script.8 +1 -1
- data/man/man8/puppet-ssl.8 +5 -1
- data/man/man8/puppet.8 +2 -2
- data/spec/fixtures/ssl/127.0.0.1-key.pem +107 -107
- data/spec/fixtures/ssl/127.0.0.1.pem +52 -51
- data/spec/fixtures/ssl/bad-basic-constraints.pem +56 -56
- data/spec/fixtures/ssl/bad-int-basic-constraints.pem +53 -53
- data/spec/fixtures/ssl/ca.pem +54 -54
- data/spec/fixtures/ssl/crl.pem +26 -26
- data/spec/fixtures/ssl/ec-key.pem +11 -11
- data/spec/fixtures/ssl/ec.pem +33 -32
- data/spec/fixtures/ssl/encrypted-ec-key.pem +12 -12
- data/spec/fixtures/ssl/encrypted-key.pem +108 -108
- data/spec/fixtures/ssl/intermediate-agent-crl.pem +26 -26
- data/spec/fixtures/ssl/intermediate-agent.pem +56 -56
- data/spec/fixtures/ssl/intermediate-crl.pem +29 -29
- data/spec/fixtures/ssl/intermediate.pem +53 -53
- data/spec/fixtures/ssl/oid-key.pem +107 -107
- data/spec/fixtures/ssl/oid.pem +51 -50
- data/spec/fixtures/ssl/pluto-key.pem +107 -107
- data/spec/fixtures/ssl/pluto.pem +52 -51
- data/spec/fixtures/ssl/renewed.pem +67 -0
- data/spec/fixtures/ssl/request-key.pem +107 -107
- data/spec/fixtures/ssl/request.pem +50 -48
- data/spec/fixtures/ssl/revoked-key.pem +107 -107
- data/spec/fixtures/ssl/revoked.pem +51 -50
- data/spec/fixtures/ssl/signed-key.pem +107 -107
- data/spec/fixtures/ssl/signed.pem +49 -48
- data/spec/fixtures/ssl/tampered-cert.pem +51 -50
- data/spec/fixtures/ssl/tampered-csr.pem +50 -48
- data/spec/fixtures/ssl/unknown-127.0.0.1-key.pem +107 -107
- data/spec/fixtures/ssl/unknown-127.0.0.1.pem +50 -49
- data/spec/fixtures/ssl/unknown-ca-key.pem +107 -107
- data/spec/fixtures/ssl/unknown-ca.pem +54 -54
- data/spec/integration/application/agent_spec.rb +27 -27
- data/spec/integration/application/apply_spec.rb +14 -0
- data/spec/integration/http/client_spec.rb +16 -0
- data/spec/integration/type/exec_spec.rb +13 -0
- data/spec/lib/puppet/test_ca.rb +3 -10
- data/spec/lib/puppet_spec/verbose.rb +10 -1
- data/spec/unit/agent_spec.rb +2 -9
- data/spec/unit/application/ssl_spec.rb +49 -0
- data/spec/unit/defaults_spec.rb +2 -40
- data/spec/unit/file_system/path_pattern_spec.rb +15 -0
- data/spec/unit/functions/split_spec.rb +6 -0
- data/spec/unit/http/service/ca_spec.rb +71 -0
- data/spec/unit/info_service_spec.rb +1 -1
- data/spec/unit/ssl/certificate_signer_spec.rb +17 -0
- data/spec/unit/ssl/ssl_provider_spec.rb +21 -1
- data/spec/unit/ssl/state_machine_spec.rb +75 -3
- data/spec/unit/util/execution_spec.rb +1 -0
- data/spec/unit/util/monkey_patches_spec.rb +42 -0
- data/spec/unit/util/windows/adsi_spec.rb +25 -0
- data/spec/unit/x509/cert_provider_spec.rb +23 -0
- data/tasks/generate_cert_fixtures.rake +4 -0
- metadata +11 -13
@@ -1,35 +1,35 @@
|
|
1
1
|
Certificate:
|
2
2
|
Data:
|
3
3
|
Version: 3 (0x2)
|
4
|
-
Serial Number:
|
4
|
+
Serial Number: 12 (0xc)
|
5
5
|
Signature Algorithm: sha256WithRSAEncryption
|
6
6
|
Issuer: CN=Test CA
|
7
7
|
Validity
|
8
8
|
Not Before: Jan 1 00:00:00 1970 GMT
|
9
|
-
Not After : Jun
|
9
|
+
Not After : Jun 24 21:18:00 2033 GMT
|
10
10
|
Subject: CN=Test CA
|
11
11
|
Subject Public Key Info:
|
12
12
|
Public Key Algorithm: rsaEncryption
|
13
|
-
|
13
|
+
Public-Key: (2048 bit)
|
14
14
|
Modulus:
|
15
|
-
00:
|
16
|
-
|
17
|
-
|
18
|
-
|
19
|
-
|
20
|
-
|
21
|
-
|
22
|
-
|
23
|
-
|
24
|
-
|
25
|
-
|
26
|
-
|
27
|
-
|
28
|
-
|
29
|
-
|
30
|
-
|
31
|
-
|
32
|
-
|
15
|
+
00:f4:9a:3e:d9:2b:e1:1e:ea:3c:85:7d:27:87:f5:
|
16
|
+
f7:50:c6:60:f0:79:3b:86:23:ce:c9:ba:42:22:1b:
|
17
|
+
61:1a:bc:33:c7:cf:e2:56:8f:6c:84:3e:4e:d0:48:
|
18
|
+
b5:27:7e:7b:49:de:2b:5d:b2:9c:e6:49:53:52:c8:
|
19
|
+
89:92:cb:e1:6c:30:67:c6:74:25:e3:3f:7a:37:ef:
|
20
|
+
54:b4:bd:80:07:a6:db:77:5c:8f:56:ed:1b:14:af:
|
21
|
+
2a:12:f5:44:88:15:a3:63:f2:f9:44:fb:51:ed:9a:
|
22
|
+
6d:9c:cf:48:69:f6:d0:c9:6c:57:ee:1b:be:04:91:
|
23
|
+
b3:ad:16:ed:c8:d0:bf:b4:55:6b:e9:3c:2b:8c:57:
|
24
|
+
19:bc:f1:76:6f:90:8d:e4:60:79:c7:03:e3:9d:83:
|
25
|
+
42:ec:0e:79:78:3c:30:c4:d5:87:63:4d:2c:17:ad:
|
26
|
+
c6:ea:3b:ff:e4:73:1a:12:bb:ed:d3:f6:9d:9d:d9:
|
27
|
+
e7:05:7f:21:6c:27:0a:27:c5:6e:c8:53:6c:a3:bb:
|
28
|
+
0e:11:fa:c4:ab:97:8f:a1:fd:bd:f3:5e:fb:80:1d:
|
29
|
+
15:87:c7:b4:20:94:fc:cb:ac:06:a8:ae:b1:80:a0:
|
30
|
+
5d:50:68:8d:49:63:1b:b2:77:a2:6b:81:21:b6:58:
|
31
|
+
3a:f2:3d:21:ac:a5:91:bc:7d:36:46:f4:87:ea:ce:
|
32
|
+
a3:0f
|
33
33
|
Exponent: 65537 (0x10001)
|
34
34
|
X509v3 extensions:
|
35
35
|
X509v3 Basic Constraints: critical
|
@@ -37,45 +37,45 @@ Certificate:
|
|
37
37
|
X509v3 Key Usage: critical
|
38
38
|
Certificate Sign, CRL Sign
|
39
39
|
X509v3 Subject Key Identifier:
|
40
|
-
|
40
|
+
83:68:26:16:4A:C3:88:0A:A6:48:43:98:E7:2D:4F:5F:70:8C:62:B2
|
41
41
|
Netscape Comment:
|
42
42
|
Puppet Server Internal Certificate
|
43
43
|
X509v3 Authority Key Identifier:
|
44
|
-
|
45
|
-
|
44
|
+
83:68:26:16:4A:C3:88:0A:A6:48:43:98:E7:2D:4F:5F:70:8C:62:B2
|
46
45
|
Signature Algorithm: sha256WithRSAEncryption
|
47
|
-
|
48
|
-
|
49
|
-
|
50
|
-
|
51
|
-
|
52
|
-
|
53
|
-
|
54
|
-
|
55
|
-
|
56
|
-
|
57
|
-
|
58
|
-
|
59
|
-
|
60
|
-
|
61
|
-
|
46
|
+
Signature Value:
|
47
|
+
f2:d5:76:aa:ff:05:b2:63:2d:81:23:3d:d5:dc:8f:a8:eb:bc:
|
48
|
+
17:35:7f:64:1a:37:50:02:ac:54:4b:c9:74:fb:07:f8:ec:f7:
|
49
|
+
c2:6a:80:bd:f7:d1:43:1b:4d:d1:2c:c2:71:d9:28:46:01:0f:
|
50
|
+
14:ab:8e:20:14:93:e7:dc:a7:b1:6d:4a:7d:a9:f7:a2:5d:ea:
|
51
|
+
4d:89:5f:fb:45:4b:98:c8:93:12:d9:74:5e:a4:3e:25:13:2c:
|
52
|
+
92:96:3e:15:c6:d3:46:c7:03:5c:4b:70:65:9e:1f:89:ef:7e:
|
53
|
+
70:63:3c:78:d8:a2:92:53:2d:39:a3:f5:0d:36:aa:2a:7b:a8:
|
54
|
+
a9:63:66:39:e3:49:55:0f:45:d6:14:9e:f4:77:18:16:90:13:
|
55
|
+
41:6a:27:8f:84:c9:c5:0d:ad:cc:d9:bf:62:90:02:56:63:76:
|
56
|
+
76:bc:3f:36:5d:41:ad:07:5e:f9:e2:66:e9:63:e3:ba:79:b9:
|
57
|
+
07:b6:e8:b5:27:0f:18:4e:a4:6d:82:d7:e9:a9:40:ce:eb:d9:
|
58
|
+
6a:b8:d6:04:c4:b2:62:1f:c5:cb:fe:14:f3:c5:cd:0e:11:32:
|
59
|
+
b5:cf:ea:fc:98:3c:59:23:eb:69:c5:0b:f6:83:5b:dc:25:9c:
|
60
|
+
6d:93:29:c2:30:58:c1:10:80:49:86:67:09:fd:22:67:01:e5:
|
61
|
+
32:9a:a3:83
|
62
62
|
-----BEGIN CERTIFICATE-----
|
63
|
-
|
64
|
-
|
65
|
-
|
66
|
-
|
67
|
-
|
68
|
-
|
69
|
-
|
70
|
-
|
71
|
-
|
72
|
-
|
63
|
+
MIIDNDCCAhygAwIBAgIBDDANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdUZXN0
|
64
|
+
IENBMB4XDTcwMDEwMTAwMDAwMFoXDTMzMDYyNDIxMTgwMFowEjEQMA4GA1UEAwwH
|
65
|
+
VGVzdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPSaPtkr4R7q
|
66
|
+
PIV9J4f191DGYPB5O4Yjzsm6QiIbYRq8M8fP4laPbIQ+TtBItSd+e0neK12ynOZJ
|
67
|
+
U1LIiZLL4WwwZ8Z0JeM/ejfvVLS9gAem23dcj1btGxSvKhL1RIgVo2Py+UT7Ue2a
|
68
|
+
bZzPSGn20MlsV+4bvgSRs60W7cjQv7RVa+k8K4xXGbzxdm+QjeRgeccD452DQuwO
|
69
|
+
eXg8MMTVh2NNLBetxuo7/+RzGhK77dP2nZ3Z5wV/IWwnCifFbshTbKO7DhH6xKuX
|
70
|
+
j6H9vfNe+4AdFYfHtCCU/MusBqiusYCgXVBojUljG7J3omuBIbZYOvI9Iaylkbx9
|
71
|
+
Nkb0h+rOow8CAwEAAaOBlDCBkTAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwIB
|
72
|
+
BjAdBgNVHQ4EFgQUg2gmFkrDiAqmSEOY5y1PX3CMYrIwMQYJYIZIAYb4QgENBCQW
|
73
73
|
IlB1cHBldCBTZXJ2ZXIgSW50ZXJuYWwgQ2VydGlmaWNhdGUwHwYDVR0jBBgwFoAU
|
74
|
-
|
75
|
-
|
76
|
-
|
77
|
-
|
78
|
-
|
79
|
-
|
80
|
-
|
74
|
+
g2gmFkrDiAqmSEOY5y1PX3CMYrIwDQYJKoZIhvcNAQELBQADggEBAPLVdqr/BbJj
|
75
|
+
LYEjPdXcj6jrvBc1f2QaN1ACrFRLyXT7B/js98JqgL330UMbTdEswnHZKEYBDxSr
|
76
|
+
jiAUk+fcp7FtSn2p96Jd6k2JX/tFS5jIkxLZdF6kPiUTLJKWPhXG00bHA1xLcGWe
|
77
|
+
H4nvfnBjPHjYopJTLTmj9Q02qip7qKljZjnjSVUPRdYUnvR3GBaQE0FqJ4+EycUN
|
78
|
+
rczZv2KQAlZjdna8PzZdQa0HXvniZulj47p5uQe26LUnDxhOpG2C1+mpQM7r2Wq4
|
79
|
+
1gTEsmIfxcv+FPPFzQ4RMrXP6vyYPFkj62nFC/aDW9wlnG2TKcIwWMEQgEmGZwn9
|
80
|
+
ImcB5TKao4M=
|
81
81
|
-----END CERTIFICATE-----
|
@@ -6,30 +6,30 @@ Certificate:
|
|
6
6
|
Issuer: CN=Test CA
|
7
7
|
Validity
|
8
8
|
Not Before: Jan 1 00:00:00 1970 GMT
|
9
|
-
Not After : Jun
|
9
|
+
Not After : Jun 24 21:18:00 2033 GMT
|
10
10
|
Subject: CN=Test CA Subauthority
|
11
11
|
Subject Public Key Info:
|
12
12
|
Public Key Algorithm: rsaEncryption
|
13
|
-
|
13
|
+
Public-Key: (2048 bit)
|
14
14
|
Modulus:
|
15
|
-
00:
|
16
|
-
|
17
|
-
|
18
|
-
|
19
|
-
|
20
|
-
|
21
|
-
|
22
|
-
|
23
|
-
|
24
|
-
|
25
|
-
|
26
|
-
|
27
|
-
|
28
|
-
|
29
|
-
|
30
|
-
|
31
|
-
|
32
|
-
|
15
|
+
00:c0:91:fc:98:ec:30:6b:f0:5c:d6:0b:ed:79:ab:
|
16
|
+
69:80:c1:ca:5b:d5:4a:a3:e3:1b:3e:25:f1:47:0b:
|
17
|
+
7b:9f:dc:1b:0a:8b:d6:0a:c1:e8:8b:ca:38:68:be:
|
18
|
+
91:58:d7:ff:41:a1:00:48:59:a0:62:2e:1d:e7:2d:
|
19
|
+
7a:c5:64:4d:be:48:30:eb:4f:e3:9e:3f:06:a4:ef:
|
20
|
+
e4:95:5c:86:ff:54:24:49:75:16:84:41:78:c5:8d:
|
21
|
+
ac:ff:af:95:91:ae:e1:f3:92:f0:a1:dd:18:e9:7c:
|
22
|
+
8e:d0:86:e9:84:84:f3:cb:4c:9c:12:f6:a7:54:f0:
|
23
|
+
9c:87:3b:f1:50:67:cf:12:04:11:c0:1b:e0:46:e4:
|
24
|
+
03:73:9c:3c:ea:ed:3e:31:2f:bc:cf:bd:38:fb:1d:
|
25
|
+
fa:f5:8d:66:e7:f2:0b:5f:df:0f:99:ec:45:c9:aa:
|
26
|
+
e4:10:ad:5b:64:a5:da:af:27:e1:47:ac:4f:aa:aa:
|
27
|
+
74:a5:0e:9c:14:c4:89:ef:ce:fb:50:38:b9:f9:09:
|
28
|
+
d6:f9:ba:5b:49:1c:8c:70:9c:0d:4e:3c:94:6d:9e:
|
29
|
+
63:24:c3:e8:49:74:7a:79:02:0d:b4:6f:f3:b9:e0:
|
30
|
+
c0:4c:74:24:21:56:b5:57:e6:c9:29:08:1b:63:6d:
|
31
|
+
2d:9c:e2:68:33:c1:cf:60:07:54:88:d4:da:6c:15:
|
32
|
+
48:1b
|
33
33
|
Exponent: 65537 (0x10001)
|
34
34
|
X509v3 extensions:
|
35
35
|
X509v3 Basic Constraints: critical
|
@@ -37,45 +37,45 @@ Certificate:
|
|
37
37
|
X509v3 Key Usage: critical
|
38
38
|
Certificate Sign, CRL Sign
|
39
39
|
X509v3 Subject Key Identifier:
|
40
|
-
|
40
|
+
38:7E:66:C4:7A:8B:16:EC:8A:0C:76:FC:C4:A6:7F:79:E5:DD:9A:FB
|
41
41
|
Netscape Comment:
|
42
42
|
Puppet Server Internal Certificate
|
43
43
|
X509v3 Authority Key Identifier:
|
44
|
-
|
45
|
-
|
44
|
+
83:68:26:16:4A:C3:88:0A:A6:48:43:98:E7:2D:4F:5F:70:8C:62:B2
|
46
45
|
Signature Algorithm: sha256WithRSAEncryption
|
47
|
-
|
48
|
-
|
49
|
-
|
50
|
-
|
51
|
-
|
52
|
-
|
53
|
-
|
54
|
-
|
55
|
-
|
56
|
-
|
57
|
-
|
58
|
-
|
59
|
-
|
60
|
-
|
61
|
-
|
46
|
+
Signature Value:
|
47
|
+
8c:4b:be:0e:b0:af:d0:14:7f:04:4d:99:65:3e:ec:43:6e:62:
|
48
|
+
5c:89:4e:60:74:c3:72:ae:2d:f1:9c:e6:5f:c6:2c:d3:d7:9b:
|
49
|
+
af:f2:8d:51:d3:7c:bc:34:4d:35:49:f5:78:6d:41:8c:c3:0d:
|
50
|
+
bf:4a:6f:dc:f0:d7:92:9d:2b:71:16:c8:20:40:b8:21:f8:2a:
|
51
|
+
6b:a0:f5:54:40:13:25:b9:fe:bf:29:0a:d3:b5:71:13:9d:92:
|
52
|
+
f9:db:c1:e6:fa:04:24:b6:1c:61:46:2d:6c:8e:18:c5:f2:30:
|
53
|
+
00:6e:f5:d3:4b:c0:2e:68:3e:6e:b6:5c:ee:e4:98:04:71:df:
|
54
|
+
b5:58:0b:3b:04:72:e2:1e:ea:cf:94:a2:d4:1e:60:a4:87:00:
|
55
|
+
5a:80:28:85:85:5e:98:d6:bc:7a:be:ce:68:cd:3f:d4:2d:b2:
|
56
|
+
e3:84:61:d5:4d:d1:86:74:3a:e1:47:ec:7d:0f:3f:88:e2:1b:
|
57
|
+
86:5a:01:03:6a:cb:1d:10:5b:0d:c7:c5:66:e4:e4:7e:02:ae:
|
58
|
+
d3:a9:3f:0a:66:70:48:65:f0:fa:53:bb:65:1c:dd:03:6c:ff:
|
59
|
+
3a:6d:47:7d:b1:a0:68:df:ff:59:05:84:e3:fb:de:59:a4:00:
|
60
|
+
7b:6b:8a:de:a2:d5:69:62:57:af:11:5e:12:40:6a:58:a1:8a:
|
61
|
+
f5:55:34:30
|
62
62
|
-----BEGIN CERTIFICATE-----
|
63
63
|
MIIDQTCCAimgAwIBAgIBAzANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdUZXN0
|
64
|
-
|
64
|
+
IENBMB4XDTcwMDEwMTAwMDAwMFoXDTMzMDYyNDIxMTgwMFowHzEdMBsGA1UEAwwU
|
65
65
|
VGVzdCBDQSBTdWJhdXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
|
66
|
-
|
67
|
-
|
68
|
-
|
69
|
-
|
70
|
-
|
71
|
-
|
72
|
-
|
66
|
+
AoIBAQDAkfyY7DBr8FzWC+15q2mAwcpb1Uqj4xs+JfFHC3uf3BsKi9YKweiLyjho
|
67
|
+
vpFY1/9BoQBIWaBiLh3nLXrFZE2+SDDrT+OePwak7+SVXIb/VCRJdRaEQXjFjaz/
|
68
|
+
r5WRruHzkvCh3RjpfI7QhumEhPPLTJwS9qdU8JyHO/FQZ88SBBHAG+BG5ANznDzq
|
69
|
+
7T4xL7zPvTj7Hfr1jWbn8gtf3w+Z7EXJquQQrVtkpdqvJ+FHrE+qqnSlDpwUxInv
|
70
|
+
zvtQOLn5Cdb5ultJHIxwnA1OPJRtnmMkw+hJdHp5Ag20b/O54MBMdCQhVrVX5skp
|
71
|
+
CBtjbS2c4mgzwc9gB1SI1NpsFUgbAgMBAAGjgZQwgZEwDAYDVR0TAQH/BAIwADAO
|
72
|
+
BgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFDh+ZsR6ixbsigx2/MSmf3nl3Zr7MDEG
|
73
73
|
CWCGSAGG+EIBDQQkFiJQdXBwZXQgU2VydmVyIEludGVybmFsIENlcnRpZmljYXRl
|
74
|
-
|
75
|
-
|
76
|
-
|
77
|
-
|
78
|
-
|
79
|
-
|
80
|
-
|
74
|
+
MB8GA1UdIwQYMBaAFINoJhZKw4gKpkhDmOctT19wjGKyMA0GCSqGSIb3DQEBCwUA
|
75
|
+
A4IBAQCMS74OsK/QFH8ETZllPuxDbmJciU5gdMNyri3xnOZfxizT15uv8o1R03y8
|
76
|
+
NE01SfV4bUGMww2/Sm/c8NeSnStxFsggQLgh+CproPVUQBMluf6/KQrTtXETnZL5
|
77
|
+
28Hm+gQkthxhRi1sjhjF8jAAbvXTS8AuaD5utlzu5JgEcd+1WAs7BHLiHurPlKLU
|
78
|
+
HmCkhwBagCiFhV6Y1rx6vs5ozT/ULbLjhGHVTdGGdDrhR+x9Dz+I4huGWgEDassd
|
79
|
+
EFsNx8Vm5OR+Aq7TqT8KZnBIZfD6U7tlHN0DbP86bUd9saBo3/9ZBYTj+95ZpAB7
|
80
|
+
a4reotVpYlevEV4SQGpYoYr1VTQw
|
81
81
|
-----END CERTIFICATE-----
|
data/spec/fixtures/ssl/ca.pem
CHANGED
@@ -6,30 +6,30 @@ Certificate:
|
|
6
6
|
Issuer: CN=Test CA
|
7
7
|
Validity
|
8
8
|
Not Before: Jan 1 00:00:00 1970 GMT
|
9
|
-
Not After : Jun
|
9
|
+
Not After : Jun 24 21:18:00 2033 GMT
|
10
10
|
Subject: CN=Test CA
|
11
11
|
Subject Public Key Info:
|
12
12
|
Public Key Algorithm: rsaEncryption
|
13
|
-
|
13
|
+
Public-Key: (2048 bit)
|
14
14
|
Modulus:
|
15
|
-
00:
|
16
|
-
|
17
|
-
|
18
|
-
|
19
|
-
|
20
|
-
|
21
|
-
|
22
|
-
|
23
|
-
|
24
|
-
|
25
|
-
|
26
|
-
|
27
|
-
|
28
|
-
|
29
|
-
|
30
|
-
|
31
|
-
|
32
|
-
|
15
|
+
00:f4:9a:3e:d9:2b:e1:1e:ea:3c:85:7d:27:87:f5:
|
16
|
+
f7:50:c6:60:f0:79:3b:86:23:ce:c9:ba:42:22:1b:
|
17
|
+
61:1a:bc:33:c7:cf:e2:56:8f:6c:84:3e:4e:d0:48:
|
18
|
+
b5:27:7e:7b:49:de:2b:5d:b2:9c:e6:49:53:52:c8:
|
19
|
+
89:92:cb:e1:6c:30:67:c6:74:25:e3:3f:7a:37:ef:
|
20
|
+
54:b4:bd:80:07:a6:db:77:5c:8f:56:ed:1b:14:af:
|
21
|
+
2a:12:f5:44:88:15:a3:63:f2:f9:44:fb:51:ed:9a:
|
22
|
+
6d:9c:cf:48:69:f6:d0:c9:6c:57:ee:1b:be:04:91:
|
23
|
+
b3:ad:16:ed:c8:d0:bf:b4:55:6b:e9:3c:2b:8c:57:
|
24
|
+
19:bc:f1:76:6f:90:8d:e4:60:79:c7:03:e3:9d:83:
|
25
|
+
42:ec:0e:79:78:3c:30:c4:d5:87:63:4d:2c:17:ad:
|
26
|
+
c6:ea:3b:ff:e4:73:1a:12:bb:ed:d3:f6:9d:9d:d9:
|
27
|
+
e7:05:7f:21:6c:27:0a:27:c5:6e:c8:53:6c:a3:bb:
|
28
|
+
0e:11:fa:c4:ab:97:8f:a1:fd:bd:f3:5e:fb:80:1d:
|
29
|
+
15:87:c7:b4:20:94:fc:cb:ac:06:a8:ae:b1:80:a0:
|
30
|
+
5d:50:68:8d:49:63:1b:b2:77:a2:6b:81:21:b6:58:
|
31
|
+
3a:f2:3d:21:ac:a5:91:bc:7d:36:46:f4:87:ea:ce:
|
32
|
+
a3:0f
|
33
33
|
Exponent: 65537 (0x10001)
|
34
34
|
X509v3 extensions:
|
35
35
|
X509v3 Basic Constraints: critical
|
@@ -37,45 +37,45 @@ Certificate:
|
|
37
37
|
X509v3 Key Usage: critical
|
38
38
|
Certificate Sign, CRL Sign
|
39
39
|
X509v3 Subject Key Identifier:
|
40
|
-
|
40
|
+
83:68:26:16:4A:C3:88:0A:A6:48:43:98:E7:2D:4F:5F:70:8C:62:B2
|
41
41
|
Netscape Comment:
|
42
42
|
Puppet Server Internal Certificate
|
43
43
|
X509v3 Authority Key Identifier:
|
44
|
-
|
45
|
-
|
44
|
+
83:68:26:16:4A:C3:88:0A:A6:48:43:98:E7:2D:4F:5F:70:8C:62:B2
|
46
45
|
Signature Algorithm: sha256WithRSAEncryption
|
47
|
-
|
48
|
-
|
49
|
-
|
50
|
-
|
51
|
-
|
52
|
-
|
53
|
-
|
54
|
-
|
55
|
-
|
56
|
-
|
57
|
-
|
58
|
-
|
59
|
-
|
60
|
-
|
61
|
-
|
46
|
+
Signature Value:
|
47
|
+
53:4c:5e:b5:86:73:e9:d0:ab:f1:87:8e:3c:3e:8c:5c:ce:c9:
|
48
|
+
aa:86:a5:ea:96:96:77:e5:31:98:04:e5:46:f8:75:7b:00:b7:
|
49
|
+
2a:b4:f6:a4:6c:e8:e8:7e:95:b0:c2:bb:a3:ae:87:49:9f:a2:
|
50
|
+
ea:49:5a:d8:ac:79:b4:f7:aa:0c:6c:57:fb:27:8c:c0:31:97:
|
51
|
+
b0:8f:b0:4e:53:96:99:3a:0e:4c:47:51:d1:93:88:48:a4:c4:
|
52
|
+
e7:7b:c2:d7:34:4c:22:88:1b:85:f2:3f:ff:88:39:c1:61:da:
|
53
|
+
52:ba:42:69:1a:9a:5b:1f:b5:f6:88:76:4e:21:f9:48:0a:4d:
|
54
|
+
6e:4c:f2:b4:8c:4d:3b:c1:95:6d:f1:09:26:68:63:83:f5:d2:
|
55
|
+
3e:d2:6d:c0:09:8e:93:36:c3:58:5e:c7:8b:79:1a:72:b6:af:
|
56
|
+
eb:2e:3b:1d:2b:19:55:49:09:df:55:49:2b:d4:93:bf:95:df:
|
57
|
+
ab:6d:aa:bc:57:e2:67:33:ec:6a:7a:33:e9:31:c8:01:01:53:
|
58
|
+
03:f5:43:fb:8f:18:7c:0b:69:0d:81:d9:af:4b:f2:b9:b0:cd:
|
59
|
+
5f:3d:24:a0:ad:ca:c5:b5:60:3c:fb:52:8f:48:1c:2d:ec:45:
|
60
|
+
01:03:79:40:4e:f9:1c:e4:e5:67:27:21:2c:f7:48:95:ff:22:
|
61
|
+
da:2b:2e:48
|
62
62
|
-----BEGIN CERTIFICATE-----
|
63
63
|
MIIDNzCCAh+gAwIBAgIBAjANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAdUZXN0
|
64
|
-
|
65
|
-
|
66
|
-
|
67
|
-
|
68
|
-
|
69
|
-
|
70
|
-
|
71
|
-
|
72
|
-
|
64
|
+
IENBMB4XDTcwMDEwMTAwMDAwMFoXDTMzMDYyNDIxMTgwMFowEjEQMA4GA1UEAwwH
|
65
|
+
VGVzdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPSaPtkr4R7q
|
66
|
+
PIV9J4f191DGYPB5O4Yjzsm6QiIbYRq8M8fP4laPbIQ+TtBItSd+e0neK12ynOZJ
|
67
|
+
U1LIiZLL4WwwZ8Z0JeM/ejfvVLS9gAem23dcj1btGxSvKhL1RIgVo2Py+UT7Ue2a
|
68
|
+
bZzPSGn20MlsV+4bvgSRs60W7cjQv7RVa+k8K4xXGbzxdm+QjeRgeccD452DQuwO
|
69
|
+
eXg8MMTVh2NNLBetxuo7/+RzGhK77dP2nZ3Z5wV/IWwnCifFbshTbKO7DhH6xKuX
|
70
|
+
j6H9vfNe+4AdFYfHtCCU/MusBqiusYCgXVBojUljG7J3omuBIbZYOvI9Iaylkbx9
|
71
|
+
Nkb0h+rOow8CAwEAAaOBlzCBlDAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQE
|
72
|
+
AwIBBjAdBgNVHQ4EFgQUg2gmFkrDiAqmSEOY5y1PX3CMYrIwMQYJYIZIAYb4QgEN
|
73
73
|
BCQWIlB1cHBldCBTZXJ2ZXIgSW50ZXJuYWwgQ2VydGlmaWNhdGUwHwYDVR0jBBgw
|
74
|
-
|
75
|
-
|
76
|
-
|
77
|
-
|
78
|
-
|
79
|
-
|
80
|
-
|
74
|
+
FoAUg2gmFkrDiAqmSEOY5y1PX3CMYrIwDQYJKoZIhvcNAQELBQADggEBAFNMXrWG
|
75
|
+
c+nQq/GHjjw+jFzOyaqGpeqWlnflMZgE5Ub4dXsAtyq09qRs6Oh+lbDCu6Ouh0mf
|
76
|
+
oupJWtisebT3qgxsV/snjMAxl7CPsE5Tlpk6DkxHUdGTiEikxOd7wtc0TCKIG4Xy
|
77
|
+
P/+IOcFh2lK6QmkamlsftfaIdk4h+UgKTW5M8rSMTTvBlW3xCSZoY4P10j7SbcAJ
|
78
|
+
jpM2w1hex4t5GnK2r+suOx0rGVVJCd9VSSvUk7+V36ttqrxX4mcz7Gp6M+kxyAEB
|
79
|
+
UwP1Q/uPGHwLaQ2B2a9L8rmwzV89JKCtysW1YDz7Uo9IHC3sRQEDeUBO+Rzk5Wcn
|
80
|
+
ISz3SJX/ItorLkg=
|
81
81
|
-----END CERTIFICATE-----
|
data/spec/fixtures/ssl/crl.pem
CHANGED
@@ -3,38 +3,38 @@ Certificate Revocation List (CRL):
|
|
3
3
|
Signature Algorithm: sha256WithRSAEncryption
|
4
4
|
Issuer: CN=Test CA
|
5
5
|
Last Update: Jan 1 00:00:00 1970 GMT
|
6
|
-
Next Update: Jun
|
6
|
+
Next Update: Jun 24 21:18:00 2033 GMT
|
7
7
|
CRL extensions:
|
8
8
|
X509v3 Authority Key Identifier:
|
9
|
-
|
10
|
-
|
9
|
+
83:68:26:16:4A:C3:88:0A:A6:48:43:98:E7:2D:4F:5F:70:8C:62:B2
|
11
10
|
X509v3 CRL Number:
|
12
11
|
0
|
13
12
|
No Revoked Certificates.
|
14
13
|
Signature Algorithm: sha256WithRSAEncryption
|
15
|
-
|
16
|
-
|
17
|
-
|
18
|
-
|
19
|
-
|
20
|
-
|
21
|
-
|
22
|
-
|
23
|
-
|
24
|
-
|
25
|
-
|
26
|
-
|
27
|
-
|
28
|
-
|
29
|
-
|
14
|
+
Signature Value:
|
15
|
+
8a:b8:7b:ae:cf:3e:a0:77:0b:35:2f:98:d9:35:29:97:56:2f:
|
16
|
+
7b:e4:74:1e:29:2c:46:1f:bb:da:1d:60:fb:83:8b:fe:dd:42:
|
17
|
+
f6:94:ab:c3:f1:a2:b9:1c:11:e8:85:be:5c:fd:ac:21:d9:e8:
|
18
|
+
d7:af:be:bd:5c:e9:df:c4:13:6f:a6:5b:2e:9e:c5:dd:49:16:
|
19
|
+
b5:ef:c8:21:c7:85:42:f0:b6:b5:d9:56:8d:d4:e8:0b:78:ba:
|
20
|
+
96:44:a7:14:60:47:af:a6:6d:ac:11:1c:7d:52:59:57:ec:03:
|
21
|
+
ea:de:ce:58:5d:0e:5a:71:c9:e5:0c:80:01:37:91:dc:14:b2:
|
22
|
+
0e:3e:20:7e:e2:2e:18:56:6b:9a:3d:2c:d8:76:68:12:83:1a:
|
23
|
+
b2:54:c8:82:30:12:52:b0:64:c8:b8:37:39:48:2a:5b:6b:0d:
|
24
|
+
f8:01:5f:e6:c9:bd:73:64:82:af:66:62:d5:22:b6:eb:05:14:
|
25
|
+
6b:cc:95:32:e6:bc:87:07:32:33:c1:2a:92:ef:16:48:be:40:
|
26
|
+
4a:0d:78:de:bd:46:9c:d6:22:b2:44:8b:47:3f:79:28:7e:f9:
|
27
|
+
16:23:74:d7:bc:19:64:b6:78:82:f1:4c:13:9f:12:c3:b8:57:
|
28
|
+
c5:ce:2d:56:81:36:88:9d:99:6b:61:f5:60:21:e5:26:39:77:
|
29
|
+
ce:60:08:2c
|
30
30
|
-----BEGIN X509 CRL-----
|
31
31
|
MIIBizB1AgEBMA0GCSqGSIb3DQEBCwUAMBIxEDAOBgNVBAMMB1Rlc3QgQ0EXDTcw
|
32
|
-
|
33
|
-
|
34
|
-
|
35
|
-
|
36
|
-
|
37
|
-
|
38
|
-
|
39
|
-
|
32
|
+
MDEwMTAwMDAwMFoXDTMzMDYyNDIxMTgwMFqgLzAtMB8GA1UdIwQYMBaAFINoJhZK
|
33
|
+
w4gKpkhDmOctT19wjGKyMAoGA1UdFAQDAgEAMA0GCSqGSIb3DQEBCwUAA4IBAQCK
|
34
|
+
uHuuzz6gdws1L5jZNSmXVi975HQeKSxGH7vaHWD7g4v+3UL2lKvD8aK5HBHohb5c
|
35
|
+
/awh2ejXr769XOnfxBNvplsunsXdSRa178ghx4VC8La12VaN1OgLeLqWRKcUYEev
|
36
|
+
pm2sERx9UllX7APq3s5YXQ5accnlDIABN5HcFLIOPiB+4i4YVmuaPSzYdmgSgxqy
|
37
|
+
VMiCMBJSsGTIuDc5SCpbaw34AV/myb1zZIKvZmLVIrbrBRRrzJUy5ryHBzIzwSqS
|
38
|
+
7xZIvkBKDXjevUac1iKyRItHP3kofvkWI3TXvBlktniC8UwTnxLDuFfFzi1WgTaI
|
39
|
+
nZlrYfVgIeUmOXfOYAgs
|
40
40
|
-----END X509 CRL-----
|
@@ -1,18 +1,18 @@
|
|
1
1
|
Private-Key: (256 bit)
|
2
2
|
priv:
|
3
|
-
|
4
|
-
|
5
|
-
|
3
|
+
da:dd:0f:94:97:b5:3a:8d:cb:0c:1b:b1:55:85:e4:
|
4
|
+
71:e4:6c:f3:45:0c:55:07:3d:9c:1d:d0:86:06:1a:
|
5
|
+
f7:12
|
6
6
|
pub:
|
7
|
-
04:
|
8
|
-
|
9
|
-
|
10
|
-
|
11
|
-
|
7
|
+
04:d0:40:f7:c9:01:ec:97:dc:32:1c:19:85:59:29:
|
8
|
+
19:a9:40:21:ba:9e:f9:87:f6:49:d6:97:e4:1a:d3:
|
9
|
+
d6:ac:12:de:63:34:2b:62:16:19:0b:af:3c:fd:87:
|
10
|
+
a1:66:3e:36:39:65:83:fd:2f:36:bc:fd:58:14:ff:
|
11
|
+
a5:2b:fb:35:32
|
12
12
|
ASN1 OID: prime256v1
|
13
13
|
NIST CURVE: P-256
|
14
14
|
-----BEGIN EC PRIVATE KEY-----
|
15
|
-
|
16
|
-
|
17
|
-
|
15
|
+
MHcCAQEEINrdD5SXtTqNywwbsVWF5HHkbPNFDFUHPZwd0IYGGvcSoAoGCCqGSM49
|
16
|
+
AwEHoUQDQgAE0ED3yQHsl9wyHBmFWSkZqUAhup75h/ZJ1pfkGtPWrBLeYzQrYhYZ
|
17
|
+
C688/YehZj42OWWD/S82vP1YFP+lK/s1Mg==
|
18
18
|
-----END EC PRIVATE KEY-----
|