Diff of the two buildlogs: -- --- b1/build.log 2025-10-27 09:32:27.870156779 +0000 +++ b2/build.log 2025-10-27 09:39:07.738621848 +0000 @@ -1,6 +1,6 @@ I: pbuilder: network access will be disabled during build -I: Current time: Sun Oct 26 21:22:51 -12 2025 -I: pbuilder-time-stamp: 1761556971 +I: Current time: Mon Nov 30 05:55:28 +14 2026 +I: pbuilder-time-stamp: 1795967728 I: Building the build Environment I: extracting base tarball [/var/cache/pbuilder/forky-reproducible-base.tgz] I: copying local configuration @@ -26,53 +26,85 @@ dpkg-source: info: applying fix-go-attest.patch I: using fakeroot in build. I: Installing the build-deps -I: user script /srv/workspace/pbuilder/781894/tmp/hooks/D02_print_environment starting +I: user script /srv/workspace/pbuilder/617956/tmp/hooks/D01_modify_environment starting +debug: Running on ionos5-amd64. +I: Changing host+domainname to test build reproducibility +I: Adding a custom variable just for the fun of it... +I: Changing /bin/sh to bash +'/bin/sh' -> '/bin/bash' +lrwxrwxrwx 1 root root 9 Nov 29 15:56 /bin/sh -> /bin/bash +I: Setting pbuilder2's login shell to /bin/bash +I: Setting pbuilder2's GECOS to second user,second room,second work-phone,second home-phone,second other +I: user script /srv/workspace/pbuilder/617956/tmp/hooks/D01_modify_environment finished +I: user script /srv/workspace/pbuilder/617956/tmp/hooks/D02_print_environment starting I: set - BUILDDIR='/build/reproducible-path' - BUILDUSERGECOS='first user,first room,first work-phone,first home-phone,first other' - BUILDUSERNAME='pbuilder1' - BUILD_ARCH='amd64' - DEBIAN_FRONTEND='noninteractive' - DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=40 ' - DISTRIBUTION='forky' - HOME='/root' - HOST_ARCH='amd64' + BASH=/bin/sh + BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath + BASH_ALIASES=() + BASH_ARGC=() + BASH_ARGV=() + BASH_CMDS=() + BASH_LINENO=([0]="12" [1]="0") + BASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:. + BASH_SOURCE=([0]="/tmp/hooks/D02_print_environment" [1]="/tmp/hooks/D02_print_environment") + BASH_VERSINFO=([0]="5" [1]="3" [2]="3" [3]="1" [4]="release" [5]="x86_64-pc-linux-gnu") + BASH_VERSION='5.3.3(1)-release' + BUILDDIR=/build/reproducible-path + BUILDUSERGECOS='second user,second room,second work-phone,second home-phone,second other' + BUILDUSERNAME=pbuilder2 + BUILD_ARCH=amd64 + DEBIAN_FRONTEND=noninteractive + DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=42 ' + DIRSTACK=() + DISTRIBUTION=forky + EUID=0 + FUNCNAME=([0]="Echo" [1]="main") + GROUPS=() + HOME=/root + HOSTNAME=i-capture-the-hostname + HOSTTYPE=x86_64 + HOST_ARCH=amd64 IFS=' ' - INVOCATION_ID='21894e067fcb432392c721432484cd25' - LANG='C' - LANGUAGE='en_US:en' - LC_ALL='C' - MAIL='/var/mail/root' - OPTIND='1' - PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games' - PBCURRENTCOMMANDLINEOPERATION='build' - PBUILDER_OPERATION='build' - PBUILDER_PKGDATADIR='/usr/share/pbuilder' - PBUILDER_PKGLIBDIR='/usr/lib/pbuilder' - PBUILDER_SYSCONFDIR='/etc' - PPID='781894' - PS1='# ' - PS2='> ' + INVOCATION_ID=b1b6b550ffb5460e9f75bf8a72d6e6ec + LANG=C + LANGUAGE=et_EE:et + LC_ALL=C + MACHTYPE=x86_64-pc-linux-gnu + MAIL=/var/mail/root + OPTERR=1 + OPTIND=1 + OSTYPE=linux-gnu + PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path + PBCURRENTCOMMANDLINEOPERATION=build + PBUILDER_OPERATION=build + PBUILDER_PKGDATADIR=/usr/share/pbuilder + PBUILDER_PKGLIBDIR=/usr/lib/pbuilder + PBUILDER_SYSCONFDIR=/etc + PIPESTATUS=([0]="0") + POSIXLY_CORRECT=y + PPID=617956 PS4='+ ' - PWD='/' - SHELL='/bin/bash' - SHLVL='2' - SUDO_COMMAND='/usr/bin/timeout -k 18.1h 18h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.Jq5LvOmd/pbuilderrc_nHn4 --distribution forky --hookdir /etc/pbuilder/first-build-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/forky-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.Jq5LvOmd/b1 --logfile b1/build.log golang-github-smallstep-certificates_0.28.4-2.dsc' - SUDO_GID='111' - SUDO_HOME='/var/lib/jenkins' - SUDO_UID='106' - SUDO_USER='jenkins' - TERM='unknown' - TZ='/usr/share/zoneinfo/Etc/GMT+12' - USER='root' - _='/usr/bin/systemd-run' - http_proxy='http://46.16.76.132:3128' + PWD=/ + SHELL=/bin/bash + SHELLOPTS=braceexpand:errexit:hashall:interactive-comments:posix + SHLVL=3 + SUDO_COMMAND='/usr/bin/timeout -k 24.1h 24h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.Jq5LvOmd/pbuilderrc_RIzh --distribution forky --hookdir /etc/pbuilder/rebuild-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/forky-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.Jq5LvOmd/b2 --logfile b2/build.log golang-github-smallstep-certificates_0.28.4-2.dsc' + SUDO_GID=110 + SUDO_HOME=/var/lib/jenkins + SUDO_UID=105 + SUDO_USER=jenkins + TERM=unknown + TZ=/usr/share/zoneinfo/Etc/GMT-14 + UID=0 + USER=root + _='I: set' + http_proxy=http://213.165.73.152:3128 I: uname -a - Linux ionos11-amd64 6.12.48+deb13-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.48-1 (2025-09-20) x86_64 GNU/Linux + Linux i-capture-the-hostname 6.12.48+deb13-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.48-1 (2025-09-20) x86_64 GNU/Linux I: ls -l /bin - lrwxrwxrwx 1 root root 7 Aug 10 12:30 /bin -> usr/bin -I: user script /srv/workspace/pbuilder/781894/tmp/hooks/D02_print_environment finished + lrwxrwxrwx 1 root root 7 Aug 10 2025 /bin -> usr/bin +I: user script /srv/workspace/pbuilder/617956/tmp/hooks/D02_print_environment finished -> Attempting to satisfy build-dependencies -> Creating pbuilder-satisfydepends-dummy package Package: pbuilder-satisfydepends-dummy @@ -341,7 +373,7 @@ Get: 179 http://deb.debian.org/debian forky/main amd64 golang-step-cli-utils-dev all 0.7.5+ds-3 [54.9 kB] Get: 180 http://deb.debian.org/debian forky/main amd64 libpcsclite1 amd64 2.4.0-1 [55.7 kB] Get: 181 http://deb.debian.org/debian forky/main amd64 libpcsclite-dev amd64 2.4.0-1 [68.4 kB] -Fetched 144 MB in 40s (3622 kB/s) +Fetched 144 MB in 2s (61.4 MB/s) Preconfiguring packages ... Selecting previously unselected package golang-golang-x-sys-dev. (Reading database ... (Reading database ... 5% (Reading database ... 10% (Reading database ... 15% (Reading database ... 20% (Reading database ... 25% (Reading database ... 30% (Reading database ... 35% (Reading database ... 40% (Reading database ... 45% (Reading database ... 50% (Reading database ... 55% (Reading database ... 60% (Reading database ... 65% (Reading database ... 70% (Reading database ... 75% (Reading database ... 80% (Reading database ... 85% (Reading database ... 90% (Reading database ... 95% (Reading database ... 100% (Reading database ... 19900 files and directories currently installed.) @@ -933,8 +965,8 @@ Setting up tzdata (2025b-5) ... Current default time zone: 'Etc/UTC' -Local time is now: Mon Oct 27 09:30:02 UTC 2025. -Universal Time is now: Mon Oct 27 09:30:02 UTC 2025. +Local time is now: Sun Nov 29 15:58:33 UTC 2026. +Universal Time is now: Sun Nov 29 15:58:33 UTC 2026. Run 'dpkg-reconfigure tzdata' if you wish to change it. Setting up golang-github-cespare-xxhash-dev (2.3.0-1) ... @@ -1091,7 +1123,11 @@ fakeroot is already the newest version (1.37.1.2-1). 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. I: Building the package -I: Running cd /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-genchanges -S > ../golang-github-smallstep-certificates_0.28.4-2_source.changes +I: user script /srv/workspace/pbuilder/617956/tmp/hooks/A99_set_merged_usr starting +Not re-configuring usrmerge for forky +I: user script /srv/workspace/pbuilder/617956/tmp/hooks/A99_set_merged_usr finished +hostname: Name or service not known +I: Running cd /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-genchanges -S > ../golang-github-smallstep-certificates_0.28.4-2_source.changes dpkg-buildpackage: info: source package golang-github-smallstep-certificates dpkg-buildpackage: info: source version 0.28.4-2 dpkg-buildpackage: info: source distribution unstable @@ -1110,9 +1146,9 @@ debian/rules execute_before_dh_auto_configure make[1]: Entering directory '/build/reproducible-path/golang-github-smallstep-certificates-0.28.4' chmod -v -x policy/engine.go policy/engine_test.go policy/options.go -mode of 'policy/engine.go' changed from 0755 (rwxr-xr-x) to 0644 (rw-r--r--) -mode of 'policy/engine_test.go' changed from 0755 (rwxr-xr-x) to 0644 (rw-r--r--) -mode of 'policy/options.go' changed from 0755 (rwxr-xr-x) to 0644 (rw-r--r--) +mode of 'policy/engine.go' changed from 0775 (rwxrwxr-x) to 0664 (rw-rw-r--) +mode of 'policy/engine_test.go' changed from 0775 (rwxrwxr-x) to 0664 (rw-rw-r--) +mode of 'policy/options.go' changed from 0775 (rwxrwxr-x) to 0664 (rw-rw-r--) rm -fv authority/provisioner/nebula*.go removed 'authority/provisioner/nebula.go' removed 'authority/provisioner/nebula_test.go' @@ -1121,511 +1157,511 @@ dh_auto_build -O--builddirectory=_build -O--buildsystem=golang dh_auto_build: warning: github.com/smallstep/certificates/test/integration contains no non-test Go files, removing it from build dh_auto_build: warning: github.com/smallstep/certificates/test/integration/scep contains no non-test Go files, removing it from build - cd _build && go install -trimpath -v -p 40 github.com/smallstep/certificates/acme github.com/smallstep/certificates/acme/api github.com/smallstep/certificates/acme/db/nosql github.com/smallstep/certificates/acme/wire github.com/smallstep/certificates/api github.com/smallstep/certificates/api/log github.com/smallstep/certificates/api/models github.com/smallstep/certificates/api/read github.com/smallstep/certificates/api/render github.com/smallstep/certificates/authority github.com/smallstep/certificates/authority/admin github.com/smallstep/certificates/authority/admin/api github.com/smallstep/certificates/authority/admin/db/nosql github.com/smallstep/certificates/authority/administrator github.com/smallstep/certificates/authority/config github.com/smallstep/certificates/authority/internal/constraints github.com/smallstep/certificates/authority/policy github.com/smallstep/certificates/authority/poolhttp github.com/smallstep/certificates/authority/provisioner github.com/smallstep/certificates/authority/provisioner/gcp github.com/smallstep/certificates/authority/provisioner/wire github.com/smallstep/certificates/ca github.com/smallstep/certificates/ca/client github.com/smallstep/certificates/ca/identity github.com/smallstep/certificates/cas github.com/smallstep/certificates/cas/apiv1 github.com/smallstep/certificates/cas/softcas github.com/smallstep/certificates/cas/stepcas github.com/smallstep/certificates/commands github.com/smallstep/certificates/db github.com/smallstep/certificates/errs github.com/smallstep/certificates/internal/cast github.com/smallstep/certificates/internal/httptransport github.com/smallstep/certificates/internal/metrix github.com/smallstep/certificates/internal/userid github.com/smallstep/certificates/logging github.com/smallstep/certificates/middleware/requestid github.com/smallstep/certificates/monitoring github.com/smallstep/certificates/pki github.com/smallstep/certificates/policy github.com/smallstep/certificates/scep github.com/smallstep/certificates/scep/api github.com/smallstep/certificates/server github.com/smallstep/certificates/templates github.com/smallstep/certificates/test/integration/scep/internal/x509 github.com/smallstep/certificates/webhook -internal/coverage/rtcov + cd _build && go install -trimpath -v -p 42 github.com/smallstep/certificates/acme github.com/smallstep/certificates/acme/api github.com/smallstep/certificates/acme/db/nosql github.com/smallstep/certificates/acme/wire github.com/smallstep/certificates/api github.com/smallstep/certificates/api/log github.com/smallstep/certificates/api/models github.com/smallstep/certificates/api/read github.com/smallstep/certificates/api/render github.com/smallstep/certificates/authority github.com/smallstep/certificates/authority/admin github.com/smallstep/certificates/authority/admin/api github.com/smallstep/certificates/authority/admin/db/nosql github.com/smallstep/certificates/authority/administrator github.com/smallstep/certificates/authority/config github.com/smallstep/certificates/authority/internal/constraints github.com/smallstep/certificates/authority/policy github.com/smallstep/certificates/authority/poolhttp github.com/smallstep/certificates/authority/provisioner github.com/smallstep/certificates/authority/provisioner/gcp github.com/smallstep/certificates/authority/provisioner/wire github.com/smallstep/certificates/ca github.com/smallstep/certificates/ca/client github.com/smallstep/certificates/ca/identity github.com/smallstep/certificates/cas github.com/smallstep/certificates/cas/apiv1 github.com/smallstep/certificates/cas/softcas github.com/smallstep/certificates/cas/stepcas github.com/smallstep/certificates/commands github.com/smallstep/certificates/db github.com/smallstep/certificates/errs github.com/smallstep/certificates/internal/cast github.com/smallstep/certificates/internal/httptransport github.com/smallstep/certificates/internal/metrix github.com/smallstep/certificates/internal/userid github.com/smallstep/certificates/logging github.com/smallstep/certificates/middleware/requestid github.com/smallstep/certificates/monitoring github.com/smallstep/certificates/pki github.com/smallstep/certificates/policy github.com/smallstep/certificates/scep github.com/smallstep/certificates/scep/api github.com/smallstep/certificates/server github.com/smallstep/certificates/templates github.com/smallstep/certificates/test/integration/scep/internal/x509 github.com/smallstep/certificates/webhook +internal/byteorder +internal/goos +internal/msan +internal/unsafeheader internal/goarch +internal/godebugs +internal/asan unicode/utf16 -internal/byteorder +container/list +golang.org/x/crypto/cryptobyte/asn1 +math/bits +internal/profilerecord github.com/googleapis/gax-go/v2/internal -internal/asan +encoding +internal/itoa +cmp +google.golang.org/protobuf/internal/flags +unicode +vendor/golang.org/x/crypto/internal/alias +golang.org/x/crypto/internal/alias +crypto/internal/fips140/alias go.opencensus.io/internal/tagencoding -internal/godebugs -internal/goos -go.opencensus.io -internal/profilerecord +log/internal +internal/coverage/rtcov internal/nettrace -vendor/golang.org/x/crypto/cryptobyte/asn1 internal/goexperiment -golang.org/x/crypto/internal/alias -internal/unsafeheader golang.org/x/net/html/atom -golang.org/x/crypto/cryptobyte/asn1 -internal/msan +google.golang.org/grpc/serviceconfig unicode/utf8 -math/bits -google.golang.org/protobuf/internal/flags +go.opencensus.io go.opencensus.io/trace/internal -container/list -encoding -log/internal -vendor/golang.org/x/crypto/internal/alias -cmp -github.com/google/go-tspi/tspiconst -google.golang.org/grpc/serviceconfig -crypto/internal/fips140/alias -internal/itoa -internal/runtime/syscall -internal/runtime/math -sync/atomic -internal/cpu internal/runtime/atomic crypto/internal/boring/sig -internal/abi -unicode +sync/atomic +internal/runtime/syscall +github.com/google/go-tspi/tspiconst +vendor/golang.org/x/crypto/cryptobyte/asn1 +internal/cpu +internal/runtime/math internal/runtime/sys +internal/abi +google.golang.org/protobuf/internal/set +crypto/internal/fips140/subtle +golang.org/x/crypto/salsa20/salsa crypto/internal/fips140deps/byteorder internal/chacha8rand -crypto/internal/fips140/subtle github.com/golang/groupcache/lru -google.golang.org/protobuf/internal/set -golang.org/x/crypto/salsa20/salsa -internal/bytealg +internal/runtime/exithook crypto/internal/fips140deps/cpu +internal/bytealg math -internal/runtime/exithook -internal/stringslite internal/race -internal/sync +internal/stringslite internal/runtime/maps +internal/sync runtime +internal/reflectlite +sync iter crypto/subtle weak -internal/reflectlite runtime/metrics -sync maps slices golang.org/x/exp/slices -errors -sort internal/bisect internal/testlog internal/singleflight unique google.golang.org/protobuf/internal/pragma +errors +sort runtime/cgo -internal/oserror -io +internal/godebug path google.golang.org/grpc/internal/buffer -go.etcd.io/bbolt/errors +io +internal/oserror +math/rand/v2 vendor/golang.org/x/net/dns/dnsmessage strconv -math/rand/v2 +go.etcd.io/bbolt/errors syscall -internal/godebug +hash +github.com/beorn7/perks/quantile bytes container/heap -github.com/beorn7/perks/quantile -hash github.com/prometheus/client_golang/prometheus/promhttp/internal -go.step.sm/crypto/internal/utils/utfbom -internal/saferio crypto/internal/randutil +internal/saferio +go.step.sm/crypto/internal/utils/utfbom strings -hash/adler32 hash/fnv +hash/adler32 hash/crc32 -crypto +crypto/internal/fips140deps/godebug +math/rand +encoding/base32 +github.com/x448/float16 net/netip golang.org/x/crypto/blowfish -encoding/base32 +crypto reflect -github.com/x448/float16 -crypto/internal/fips140deps/godebug -math/rand -vendor/golang.org/x/text/transform golang.org/x/text/transform -crypto/internal/impl -net/http/internal/ascii +vendor/golang.org/x/text/transform crypto/internal/fips140 +net/http/internal/ascii bufio -go.step.sm/crypto/internal/emoji +crypto/internal/impl github.com/munnerz/goautoneg -regexp/syntax +go.step.sm/crypto/internal/emoji html github.com/huandu/xstrings +regexp/syntax crypto/tls/internal/fips140tls -crypto/internal/fips140/sha512 crypto/internal/fips140/sha3 crypto/internal/fips140/sha256 -crypto/sha3 -internal/syscall/execenv -internal/syscall/unix -time +crypto/internal/fips140/sha512 crypto/internal/fips140/hmac +crypto/sha3 crypto/internal/fips140/check crypto/internal/fips140hash -crypto/internal/fips140/edwards25519/field -crypto/internal/fips140/aes -crypto/internal/fips140/bigmod +internal/syscall/execenv +time +internal/syscall/unix crypto/internal/fips140/hkdf crypto/fips140 -crypto/internal/fips140/nistec/fiat +crypto/internal/fips140/edwards25519/field +crypto/internal/fips140/bigmod crypto/internal/fips140/tls12 +crypto/internal/fips140/aes +crypto/internal/fips140/nistec/fiat crypto/internal/fips140/tls13 regexp crypto/internal/fips140/edwards25519 google.golang.org/api/internal/third_party/uritemplates context +google.golang.org/grpc/keepalive google.golang.org/grpc/backoff io/fs -google.golang.org/grpc/keepalive internal/poll crypto/internal/fips140/nistec +google.golang.org/grpc/internal/backoff github.com/smallstep/certificates/internal/userid github.com/smallstep/certificates/ca/client -google.golang.org/grpc/internal/backoff google.golang.org/grpc/internal/grpcsync internal/filepathlite embed -internal/fmtsort -encoding/binary google.golang.org/protobuf/internal/editiondefaults os -encoding/base64 +internal/fmtsort +encoding/binary vendor/golang.org/x/crypto/internal/poly1305 -github.com/cespare/xxhash golang.org/x/crypto/internal/poly1305 filippo.io/edwards25519/field +github.com/cespare/xxhash +encoding/base64 golang.org/x/sys/unix -encoding/pem golang.org/x/crypto/nacl/secretbox +encoding/pem filippo.io/edwards25519 crypto/internal/sysrand -fmt -google.golang.org/grpc/internal/envconfig path/filepath +io/ioutil google.golang.org/protobuf/internal/detrand go.step.sm/crypto/fipsutil -github.com/prometheus/procfs/internal/util +google.golang.org/grpc/internal/envconfig os/signal -io/ioutil +fmt +github.com/prometheus/procfs/internal/util vendor/golang.org/x/sys/cpu net crypto/internal/entropy crypto/internal/fips140/drbg +os/exec crypto/internal/fips140only crypto/internal/fips140/ed25519 crypto/internal/fips140/ecdh -crypto/internal/fips140/ecdsa -crypto/internal/fips140/rsa crypto/internal/fips140/aes/gcm +crypto/internal/fips140/ecdsa crypto/internal/fips140/mlkem -os/exec -crypto/rc4 +crypto/internal/fips140/rsa crypto/md5 +crypto/rc4 crypto/cipher crypto/mlkem -crypto/internal/boring -vendor/golang.org/x/crypto/chacha20 -golang.org/x/crypto/chacha20 -crypto/des -crypto/sha512 -crypto/ecdh -crypto/sha256 -crypto/aes -crypto/hmac -crypto/sha1 encoding/hex -net/url database/sql/driver log -google.golang.org/protobuf/internal/errors +mime/quotedprintable +mime +vendor/golang.org/x/net/http2/hpack net/http/internal -github.com/pkg/errors -encoding/json compress/flate +encoding/json +math/big +gopkg.in/square/go-jose.v2/json +github.com/pkg/errors +google.golang.org/protobuf/internal/errors +vendor/golang.org/x/text/unicode/norm +net/url +go.opencensus.io/trace/tracestate +github.com/googleapis/gax-go/v2/callctx +runtime/trace +github.com/mitchellh/reflectwalk +flag +github.com/ccoveille/go-safecast +go.opencensus.io/resource +github.com/manifoldco/promptui/list +os/user +github.com/manifoldco/promptui/screenbuf +go.opencensus.io/internal google.golang.org/grpc/attributes -go/token text/tabwriter google.golang.org/protobuf/internal/version -mime -mime/quotedprintable text/template/parse -gopkg.in/square/go-jose.v2/json -github.com/googleapis/gax-go/v2/callctx google.golang.org/grpc/internal/idle +go/token github.com/spf13/cast/internal -vendor/golang.org/x/net/http2/hpack -github.com/mitchellh/reflectwalk -github.com/go-jose/go-jose/v3/json -vendor/golang.org/x/text/unicode/norm +github.com/russross/blackfriday/v2 golang.org/x/net/http2/hpack -math/big go.etcd.io/bbolt/internal/common -os/user -golang.org/x/text/unicode/norm github.com/imdario/mergo -vendor/golang.org/x/crypto/chacha20poly1305 -google.golang.org/protobuf/encoding/protowire -go.opencensus.io/internal -go.opencensus.io/trace/tracestate -golang.org/x/crypto/ssh/internal/bcrypt_pbkdf -go.step.sm/crypto/fingerprint -go.step.sm/crypto/internal/bcrypt_pbkdf -runtime/trace -go.opencensus.io/resource -github.com/ccoveille/go-safecast -flag -golang.org/x/crypto/pbkdf2 -github.com/manifoldco/promptui/list -github.com/russross/blackfriday/v2 -github.com/manifoldco/promptui/screenbuf +github.com/go-jose/go-jose/v3/json +golang.org/x/text/unicode/norm golang.org/x/net/html +crypto/internal/boring +crypto/des +vendor/golang.org/x/crypto/chacha20 +golang.org/x/crypto/chacha20 +go.step.sm/crypto/fingerprint runtime/debug github.com/prometheus/procfs/internal/fs github.com/newrelic/go-agent/v3/internal/sysinfo -golang.org/x/crypto/scrypt +google.golang.org/protobuf/encoding/protowire go.step.sm/crypto/internal/utils -google.golang.org/protobuf/reflect/protoreflect -golang.org/x/crypto/curve25519 -github.com/smallstep/certificates/internal/cast -go.opencensus.io/metric/metricdata -github.com/mitchellh/copystructure golang.org/x/net/internal/timeseries vendor/golang.org/x/text/unicode/bidi golang.org/x/text/unicode/bidi -go.opencensus.io/metric/metricproducer -database/sql +crypto/ecdh +crypto/sha512 +crypto/sha256 +crypto/aes +crypto/hmac +crypto/sha1 +go.opencensus.io/metric/metricdata go.etcd.io/bbolt/internal/freelist +github.com/smallstep/certificates/internal/cast +database/sql +google.golang.org/protobuf/reflect/protoreflect compress/zlib compress/gzip +golang.org/x/crypto/ssh/internal/bcrypt_pbkdf +go.step.sm/crypto/internal/bcrypt_pbkdf +vendor/golang.org/x/crypto/chacha20poly1305 +github.com/mitchellh/copystructure +golang.org/x/crypto/pbkdf2 go.step.sm/crypto/kms/uri -runtime/pprof +go.opencensus.io/metric/metricproducer +golang.org/x/crypto/scrypt +golang.org/x/crypto/curve25519 internal/profile -github.com/mattn/go-isatty -go.etcd.io/bbolt +runtime/pprof golang.org/x/text/secure/bidirule vendor/golang.org/x/text/secure/bidirule -github.com/mattn/go-colorable text/template -github.com/mgutz/ansi golang.org/x/net/idna -google.golang.org/protobuf/internal/strs +vendor/golang.org/x/net/idna +github.com/cpuguy83/go-md2man/v2/md2man google.golang.org/protobuf/internal/encoding/messageset -google.golang.org/protobuf/internal/descopts google.golang.org/protobuf/internal/descfmt +google.golang.org/protobuf/internal/descopts +google.golang.org/protobuf/internal/strs google.golang.org/protobuf/internal/order +github.com/mattn/go-isatty google.golang.org/protobuf/runtime/protoiface google.golang.org/protobuf/internal/genid -vendor/golang.org/x/net/idna -github.com/cpuguy83/go-md2man/v2/md2man -google.golang.org/protobuf/internal/protolazy -google.golang.org/protobuf/reflect/protoregistry +go.etcd.io/bbolt google.golang.org/protobuf/internal/encoding/json google.golang.org/protobuf/internal/encoding/text -github.com/smallstep/nosql/database +google.golang.org/protobuf/internal/protolazy +google.golang.org/protobuf/reflect/protoregistry +github.com/mattn/go-colorable +google.golang.org/grpc/grpclog/internal +github.com/smallstep/certificates/acme/wire +github.com/Masterminds/semver +github.com/newrelic/go-agent/v3/internal/jsonx +github.com/newrelic/go-agent/v3/internal/logger +github.com/sirupsen/logrus crypto/internal/boring/bbig +encoding/asn1 crypto/elliptic crypto/rand crypto/dsa github.com/google/certificate-transparency-go/asn1 github.com/fxamacker/cbor github.com/shopspring/decimal -encoding/asn1 +github.com/smallstep/nosql/database crypto/ed25519 crypto/rsa crypto/internal/hpke -go.opencensus.io/trace go.step.sm/crypto/randutil -github.com/smallstep/certificates/acme/wire -google.golang.org/grpc/grpclog/internal golang.org/x/crypto/bcrypt github.com/Masterminds/goutils github.com/rs/xid -github.com/newrelic/go-agent/v3/internal/jsonx -github.com/Masterminds/semver -github.com/newrelic/go-agent/v3/internal/logger -github.com/sirupsen/logrus -google.golang.org/protobuf/proto +github.com/mgutz/ansi +go.opencensus.io/trace +google.golang.org/grpc/grpclog github.com/newrelic/go-agent/v3/internal/cat +google.golang.org/protobuf/proto go.opencensus.io/tag golang.org/x/crypto/ed25519 go.step.sm/crypto/x25519 -google.golang.org/protobuf/internal/encoding/defval -google.golang.org/grpc/grpclog -golang.org/x/oauth2/jws html/template github.com/urfave/cli -go.opencensus.io/stats/internal -github.com/smallstep/nosql/bolt +google.golang.org/protobuf/internal/encoding/defval google.golang.org/grpc/connectivity google.golang.org/grpc/internal/grpclog -github.com/google/certificate-transparency-go/x509/pkix -go.opencensus.io/stats +golang.org/x/oauth2/jws crypto/x509/pkix golang.org/x/crypto/cryptobyte vendor/golang.org/x/crypto/cryptobyte -go.opencensus.io/stats/view -google.golang.org/protobuf/encoding/protodelim +github.com/google/certificate-transparency-go/x509/pkix +go.opencensus.io/stats/internal google.golang.org/protobuf/encoding/prototext google.golang.org/protobuf/internal/filedesc -crypto/ecdsa +google.golang.org/protobuf/encoding/protodelim +go.opencensus.io/stats github.com/spf13/cast +github.com/smallstep/nosql/bolt go.step.sm/cli-utils/errs -github.com/smallstep/scep/cryptoutil -gopkg.in/square/go-jose.v2/cipher -github.com/go-jose/go-jose/v3/cipher -github.com/google/certificate-transparency-go/tls +go.opencensus.io/stats/view +crypto/ecdsa google.golang.org/protobuf/internal/encoding/tag google.golang.org/protobuf/encoding/protojson +gopkg.in/square/go-jose.v2/cipher +github.com/smallstep/scep/cryptoutil +github.com/google/certificate-transparency-go/tls +github.com/go-jose/go-jose/v3/cipher google.golang.org/protobuf/internal/impl -google.golang.org/grpc/internal/syscall -google.golang.org/grpc/internal -google.golang.org/grpc/internal/resolver/dns/internal -github.com/google/go-tpm/tpmutil vendor/golang.org/x/net/http/httpproxy +github.com/google/go-tpm/tpmutil net/textproto +google.golang.org/grpc/internal github.com/google/uuid crypto/x509 -github.com/newrelic/go-agent/v3/internal -github.com/chzyer/readline github.com/google/certificate-transparency-go/x509 +google.golang.org/grpc/internal/syscall +google.golang.org/grpc/internal/resolver/dns/internal +github.com/chzyer/readline +github.com/newrelic/go-agent/v3/internal github.com/prometheus/procfs +google.golang.org/grpc/experimental/stats google.golang.org/grpc/metadata google.golang.org/grpc/codes -google.golang.org/grpc/experimental/stats google.golang.org/grpc/mem +google.golang.org/grpc/internal/balancerload +google.golang.org/grpc/tap +google.golang.org/grpc/stats +google.golang.org/grpc/internal/grpcutil +google.golang.org/protobuf/internal/filetype github.com/google/go-tpm/tpm github.com/google/go-tpm/legacy/tpm2 vendor/golang.org/x/net/http/httpguts -mime/multipart golang.org/x/net/http/httpguts -google.golang.org/grpc/internal/balancerload -google.golang.org/grpc/internal/grpcutil -google.golang.org/grpc/stats -google.golang.org/grpc/tap +mime/multipart google.golang.org/grpc/encoding google.golang.org/grpc/internal/stats -github.com/google/go-tpm/legacy/tpm2/credactivation +github.com/google/go-tspi/verification +github.com/manifoldco/promptui +google.golang.org/protobuf/runtime/protoimpl github.com/google/go-attestation/attest/internal -go.step.sm/crypto/kms/apiv1 +github.com/smallstep/scep/x509util +github.com/smallstep/pkcs7/internal/legacy/x509 golang.org/x/crypto/ocsp +go.step.sm/crypto/kms/apiv1 +github.com/smallstep/certificates/test/integration/scep/internal/x509 gopkg.in/square/go-jose.v2 -github.com/smallstep/pkcs7/internal/legacy/x509 +github.com/go-jose/go-jose/v3 github.com/Masterminds/sprig -github.com/smallstep/scep/x509util -github.com/smallstep/certificates/test/integration/scep/internal/x509 crypto/tls -github.com/go-jose/go-jose/v3 golang.org/x/crypto/ssh -github.com/manifoldco/promptui -github.com/google/go-tspi/verification -github.com/google/go-attestation/attest -go.step.sm/cli-utils/ui -github.com/smallstep/pkcs7 -google.golang.org/protobuf/internal/filetype -go.step.sm/cli-utils/step -google.golang.org/protobuf/runtime/protoimpl -github.com/smallstep/scep -github.com/go-jose/go-jose/v3/cryptosigner -github.com/go-jose/go-jose/v3/jwt +google.golang.org/protobuf/types/known/durationpb google.golang.org/protobuf/protoadapt google.golang.org/protobuf/types/known/timestamppb -google.golang.org/protobuf/types/known/durationpb -google.golang.org/protobuf/types/known/structpb -google.golang.org/genproto/googleapis/rpc/code google.golang.org/protobuf/types/known/anypb +google.golang.org/genproto/googleapis/rpc/code +google.golang.org/protobuf/types/known/structpb google.golang.org/protobuf/types/descriptorpb google.golang.org/grpc/internal/pretty google.golang.org/grpc/encoding/proto -github.com/golang/protobuf/ptypes/duration -google.golang.org/genproto/googleapis/rpc/errdetails github.com/golang/protobuf/ptypes/timestamp github.com/prometheus/client_model/go +github.com/golang/protobuf/ptypes/duration google.golang.org/genproto/googleapis/rpc/status +google.golang.org/genproto/googleapis/rpc/errdetails github.com/googleapis/gax-go/v2/apierror/internal/proto -google.golang.org/grpc/internal/status +go.step.sm/cli-utils/ui +github.com/smallstep/pkcs7 +github.com/go-jose/go-jose/v3/cryptosigner +github.com/google/go-tpm/legacy/tpm2/credactivation +github.com/go-jose/go-jose/v3/jwt +google.golang.org/protobuf/types/gofeaturespb +google.golang.org/protobuf/internal/editionssupport google.golang.org/grpc/binarylog/grpc_binarylog_v1 -google.golang.org/grpc/status +github.com/google/go-attestation/attest +google.golang.org/grpc/internal/status github.com/prometheus/common/model -google.golang.org/grpc/internal/binarylog -google.golang.org/protobuf/internal/editionssupport -google.golang.org/protobuf/types/gofeaturespb +go.step.sm/cli-utils/step +google.golang.org/grpc/status google.golang.org/protobuf/reflect/protodesc +google.golang.org/grpc/internal/binarylog +github.com/smallstep/scep +github.com/golang/protobuf/proto github.com/prometheus/client_golang/prometheus/internal go.step.sm/crypto/keyutil golang.org/x/crypto/ssh/agent -go.step.sm/crypto/pemutil -github.com/golang/protobuf/proto -go.step.sm/crypto/kms/softkms net/http/httptrace -google.golang.org/grpc/internal/credentials google.golang.org/api/transport/cert +google.golang.org/grpc/internal/credentials github.com/go-sql-driver/mysql -go.step.sm/crypto/kms +go.step.sm/crypto/pemutil google.golang.org/grpc/credentials net/http +google.golang.org/grpc/credentials/insecure google.golang.org/grpc/peer google.golang.org/grpc/resolver google.golang.org/grpc/internal/channelz -google.golang.org/grpc/credentials/insecure google.golang.org/grpc/internal/metadata -google.golang.org/grpc/internal/transport/networktype google.golang.org/grpc/internal/resolver/passthrough +google.golang.org/grpc/internal/transport/networktype google.golang.org/grpc/balancer/grpclb/state -google.golang.org/grpc/internal/resolver/unix +go.step.sm/crypto/kms/softkms google.golang.org/grpc/internal/resolver/dns +google.golang.org/grpc/internal/resolver/unix google.golang.org/grpc/channelz -google.golang.org/grpc/resolver/dns google.golang.org/grpc/balancer +go.step.sm/crypto/kms +google.golang.org/grpc/resolver/dns google.golang.org/grpc/balancer/base google.golang.org/grpc/balancer/pickfirst google.golang.org/grpc/internal/serviceconfig -github.com/smallstep/nosql/mysql google.golang.org/grpc/internal/resolver google.golang.org/grpc/balancer/roundrobin google.golang.org/grpc/internal/balancer/gracefulswitch +github.com/smallstep/nosql/mysql github.com/smallstep/nosql +github.com/smallstep/certificates/api/log github.com/smallstep/certificates/internal/httptransport -go.opencensus.io/trace/propagation +golang.org/x/net/trace cloud.google.com/go/compute/metadata -github.com/smallstep/certificates/api/log -github.com/go-chi/chi -go.step.sm/crypto/jose -net/http/httputil -github.com/smallstep/certificates/middleware/requestid -expvar -golang.org/x/oauth2/internal google.golang.org/api/googleapi/transport -golang.org/x/net/trace google.golang.org/api/googleapi -github.com/smallstep/certificates/cas/apiv1 -net/http/pprof -github.com/prometheus/client_golang/internal/github.com/golang/gddo/httputil/header -github.com/prometheus/common/expfmt +go.opencensus.io/trace/propagation +github.com/smallstep/certificates/middleware/requestid github.com/smallstep/certificates/server +github.com/go-chi/chi +net/http/httputil github.com/newrelic/go-agent/v3/internal/utilization +go.step.sm/crypto/jose +net/http/pprof +golang.org/x/oauth2/internal +github.com/prometheus/client_golang/internal/github.com/golang/gddo/httputil/header go.step.sm/cli-utils/usage +expvar +github.com/prometheus/common/expfmt +github.com/smallstep/certificates/cas/apiv1 golang.org/x/net/http2 -google.golang.org/api/transport/http/internal/propagation +github.com/prometheus/client_golang/internal/github.com/golang/gddo/httputil go.opencensus.io/plugin/ochttp/propagation/b3 -github.com/smallstep/certificates/logging +google.golang.org/api/transport/http/internal/propagation github.com/smallstep/certificates/api/render +github.com/smallstep/certificates/logging github.com/smallstep/certificates/authority/poolhttp -github.com/prometheus/client_golang/internal/github.com/golang/gddo/httputil +github.com/googleapis/gax-go/v2/apierror golang.org/x/oauth2 +go.step.sm/cli-utils/command +go.step.sm/crypto/internal/templates +go.step.sm/cli-utils/token +github.com/go-chi/chi/middleware go.opencensus.io/plugin/ochttp github.com/smallstep/certificates/errs -github.com/googleapis/gax-go/v2/apierror +go.step.sm/cli-utils/fileutil +go.step.sm/crypto/sshutil +go.step.sm/crypto/x509util github.com/smallstep/certificates/api/read github.com/smallstep/certificates/authority/internal/constraints -go.step.sm/crypto/internal/templates -go.step.sm/cli-utils/token golang.org/x/oauth2/authhandler golang.org/x/oauth2/google/internal/impersonate golang.org/x/oauth2/google/internal/stsexchange -github.com/coreos/go-oidc/v3/oidc golang.org/x/oauth2/jwt google.golang.org/api/internal/impersonate -go.step.sm/cli-utils/command -go.step.sm/crypto/sshutil -go.step.sm/crypto/x509util -github.com/go-chi/chi/middleware -go.step.sm/cli-utils/fileutil +github.com/coreos/go-oidc/v3/oidc go.step.sm/cli-utils/token/provision +github.com/prometheus/client_golang/prometheus +github.com/smallstep/certificates/templates golang.org/x/oauth2/google/internal/externalaccountauthorizeduser golang.org/x/oauth2/google/externalaccount -github.com/smallstep/certificates/templates go.step.sm/crypto/kms/sshagentkms -github.com/prometheus/client_golang/prometheus golang.org/x/oauth2/google github.com/smallstep/certificates/webhook -github.com/smallstep/certificates/cas/softcas github.com/smallstep/certificates/authority/provisioner/wire github.com/smallstep/certificates/policy +github.com/smallstep/certificates/cas/softcas go.step.sm/crypto/tlsutil github.com/smallstep/certificates/cas google.golang.org/grpc/internal/transport @@ -1637,30 +1673,30 @@ github.com/smallstep/linkedca google.golang.org/api/transport/internal/dca google.golang.org/api/option -github.com/newrelic/go-agent/v3/newrelic google.golang.org/api/internal/gensupport +github.com/newrelic/go-agent/v3/newrelic google.golang.org/api/option/internaloption google.golang.org/api/transport/http google.golang.org/api/cloudresourcemanager/v1 github.com/smallstep/certificates/authority/admin github.com/smallstep/certificates/authority/policy -github.com/smallstep/certificates/authority/provisioner/gcp github.com/smallstep/certificates/authority/admin/db/nosql +github.com/smallstep/certificates/authority/provisioner/gcp github.com/smallstep/certificates/authority/provisioner github.com/smallstep/certificates/authority/administrator -github.com/smallstep/certificates/db -github.com/smallstep/certificates/scep github.com/smallstep/certificates/api/models +github.com/smallstep/certificates/scep +github.com/smallstep/certificates/db github.com/smallstep/certificates/internal/metrix github.com/smallstep/certificates/authority/config github.com/smallstep/certificates/authority github.com/smallstep/certificates/monitoring github.com/smallstep/certificates/api github.com/smallstep/certificates/acme -github.com/smallstep/certificates/scep/api github.com/smallstep/certificates/ca/identity -github.com/smallstep/certificates/acme/api +github.com/smallstep/certificates/scep/api github.com/smallstep/certificates/acme/db/nosql +github.com/smallstep/certificates/acme/api github.com/smallstep/certificates/authority/admin/api github.com/smallstep/certificates/ca github.com/smallstep/certificates/cas/stepcas @@ -1669,13 +1705,13 @@ debian/rules override_dh_auto_test make[1]: Entering directory '/build/reproducible-path/golang-github-smallstep-certificates-0.28.4' dh_auto_test -- -skip "Test_newHTTPClient|TestPKI_GenerateConfig|TestDB_GetDpopToken|TestDB_CreateDpopToken|TestDB_GetOidcToken|TestDB_CreateOidcToken|TestCustomTemplateOptions" - cd _build && go test -vet=off -v -p 40 -skip Test_newHTTPClient\|TestPKI_GenerateConfig\|TestDB_GetDpopToken\|TestDB_CreateDpopToken\|TestDB_GetOidcToken\|TestDB_CreateOidcToken\|TestCustomTemplateOptions github.com/smallstep/certificates/acme github.com/smallstep/certificates/acme/api github.com/smallstep/certificates/acme/db/nosql github.com/smallstep/certificates/acme/wire github.com/smallstep/certificates/api github.com/smallstep/certificates/api/log github.com/smallstep/certificates/api/models github.com/smallstep/certificates/api/read github.com/smallstep/certificates/api/render github.com/smallstep/certificates/authority github.com/smallstep/certificates/authority/admin github.com/smallstep/certificates/authority/admin/api github.com/smallstep/certificates/authority/admin/db/nosql github.com/smallstep/certificates/authority/administrator github.com/smallstep/certificates/authority/config github.com/smallstep/certificates/authority/internal/constraints github.com/smallstep/certificates/authority/policy github.com/smallstep/certificates/authority/poolhttp github.com/smallstep/certificates/authority/provisioner github.com/smallstep/certificates/authority/provisioner/gcp github.com/smallstep/certificates/authority/provisioner/wire github.com/smallstep/certificates/ca github.com/smallstep/certificates/ca/client github.com/smallstep/certificates/ca/identity github.com/smallstep/certificates/cas github.com/smallstep/certificates/cas/apiv1 github.com/smallstep/certificates/cas/softcas github.com/smallstep/certificates/cas/stepcas github.com/smallstep/certificates/commands github.com/smallstep/certificates/db github.com/smallstep/certificates/errs github.com/smallstep/certificates/internal/cast github.com/smallstep/certificates/internal/httptransport github.com/smallstep/certificates/internal/metrix github.com/smallstep/certificates/internal/userid github.com/smallstep/certificates/logging github.com/smallstep/certificates/middleware/requestid github.com/smallstep/certificates/monitoring github.com/smallstep/certificates/pki github.com/smallstep/certificates/policy github.com/smallstep/certificates/scep github.com/smallstep/certificates/scep/api github.com/smallstep/certificates/server github.com/smallstep/certificates/templates github.com/smallstep/certificates/test/integration github.com/smallstep/certificates/test/integration/scep github.com/smallstep/certificates/test/integration/scep/internal/x509 github.com/smallstep/certificates/webhook + cd _build && go test -vet=off -v -p 42 -skip Test_newHTTPClient\|TestPKI_GenerateConfig\|TestDB_GetDpopToken\|TestDB_CreateDpopToken\|TestDB_GetOidcToken\|TestDB_CreateOidcToken\|TestCustomTemplateOptions github.com/smallstep/certificates/acme github.com/smallstep/certificates/acme/api github.com/smallstep/certificates/acme/db/nosql github.com/smallstep/certificates/acme/wire github.com/smallstep/certificates/api github.com/smallstep/certificates/api/log github.com/smallstep/certificates/api/models github.com/smallstep/certificates/api/read github.com/smallstep/certificates/api/render github.com/smallstep/certificates/authority github.com/smallstep/certificates/authority/admin github.com/smallstep/certificates/authority/admin/api github.com/smallstep/certificates/authority/admin/db/nosql github.com/smallstep/certificates/authority/administrator github.com/smallstep/certificates/authority/config github.com/smallstep/certificates/authority/internal/constraints github.com/smallstep/certificates/authority/policy github.com/smallstep/certificates/authority/poolhttp github.com/smallstep/certificates/authority/provisioner github.com/smallstep/certificates/authority/provisioner/gcp github.com/smallstep/certificates/authority/provisioner/wire github.com/smallstep/certificates/ca github.com/smallstep/certificates/ca/client github.com/smallstep/certificates/ca/identity github.com/smallstep/certificates/cas github.com/smallstep/certificates/cas/apiv1 github.com/smallstep/certificates/cas/softcas github.com/smallstep/certificates/cas/stepcas github.com/smallstep/certificates/commands github.com/smallstep/certificates/db github.com/smallstep/certificates/errs github.com/smallstep/certificates/internal/cast github.com/smallstep/certificates/internal/httptransport github.com/smallstep/certificates/internal/metrix github.com/smallstep/certificates/internal/userid github.com/smallstep/certificates/logging github.com/smallstep/certificates/middleware/requestid github.com/smallstep/certificates/monitoring github.com/smallstep/certificates/pki github.com/smallstep/certificates/policy github.com/smallstep/certificates/scep github.com/smallstep/certificates/scep/api github.com/smallstep/certificates/server github.com/smallstep/certificates/templates github.com/smallstep/certificates/test/integration github.com/smallstep/certificates/test/integration/scep github.com/smallstep/certificates/test/integration/scep/internal/x509 github.com/smallstep/certificates/webhook === RUN TestKeyToID -=== RUN TestKeyToID/fail/error-generating-thumbprint === RUN TestKeyToID/ok +=== RUN TestKeyToID/fail/error-generating-thumbprint --- PASS: TestKeyToID (0.00s) - --- PASS: TestKeyToID/fail/error-generating-thumbprint (0.00s) --- PASS: TestKeyToID/ok (0.00s) + --- PASS: TestKeyToID/fail/error-generating-thumbprint (0.00s) === RUN TestAccount_GetLocation === RUN TestAccount_GetLocation/empty === RUN TestAccount_GetLocation/not-empty @@ -1695,163 +1731,164 @@ --- PASS: TestExternalAccountKey_BindTo/ok (0.00s) --- PASS: TestExternalAccountKey_BindTo/fail/already-bound (0.00s) === RUN TestAuthorization_UpdateStatus +=== RUN TestAuthorization_UpdateStatus/ok/no-valid-challenges === RUN TestAuthorization_UpdateStatus/ok/valid === RUN TestAuthorization_UpdateStatus/ok/already-invalid === RUN TestAuthorization_UpdateStatus/ok/already-valid === RUN TestAuthorization_UpdateStatus/fail/error-unexpected-status === RUN TestAuthorization_UpdateStatus/ok/expired === RUN TestAuthorization_UpdateStatus/fail/db.UpdateAuthorization-error -=== RUN TestAuthorization_UpdateStatus/ok/no-valid-challenges --- PASS: TestAuthorization_UpdateStatus (0.00s) + --- PASS: TestAuthorization_UpdateStatus/ok/no-valid-challenges (0.00s) --- PASS: TestAuthorization_UpdateStatus/ok/valid (0.00s) --- PASS: TestAuthorization_UpdateStatus/ok/already-invalid (0.00s) --- PASS: TestAuthorization_UpdateStatus/ok/already-valid (0.00s) --- PASS: TestAuthorization_UpdateStatus/fail/error-unexpected-status (0.00s) --- PASS: TestAuthorization_UpdateStatus/ok/expired (0.00s) --- PASS: TestAuthorization_UpdateStatus/fail/db.UpdateAuthorization-error (0.00s) - --- PASS: TestAuthorization_UpdateStatus/ok/no-valid-challenges (0.00s) === RUN Test_storeError -=== RUN Test_storeError/ok/mark-invalid -=== RUN Test_storeError/fail/db.UpdateChallenge-error === RUN Test_storeError/fail/db.UpdateChallenge-acme-error === RUN Test_storeError/ok +=== RUN Test_storeError/ok/mark-invalid +=== RUN Test_storeError/fail/db.UpdateChallenge-error --- PASS: Test_storeError (0.00s) - --- PASS: Test_storeError/ok/mark-invalid (0.00s) - --- PASS: Test_storeError/fail/db.UpdateChallenge-error (0.00s) --- PASS: Test_storeError/fail/db.UpdateChallenge-acme-error (0.00s) --- PASS: Test_storeError/ok (0.00s) + --- PASS: Test_storeError/ok/mark-invalid (0.00s) + --- PASS: Test_storeError/fail/db.UpdateChallenge-error (0.00s) === RUN TestKeyAuthorization -=== RUN TestKeyAuthorization/ok === RUN TestKeyAuthorization/fail/jwk-thumbprint-error +=== RUN TestKeyAuthorization/ok --- PASS: TestKeyAuthorization (0.00s) - --- PASS: TestKeyAuthorization/ok (0.00s) --- PASS: TestKeyAuthorization/fail/jwk-thumbprint-error (0.00s) + --- PASS: TestKeyAuthorization/ok (0.00s) === RUN TestChallenge_Validate -=== RUN TestChallenge_Validate/ok/device-attest-01 -=== RUN TestChallenge_Validate/ok/wire-oidc-01 -=== RUN TestChallenge_Validate/ok/dns-01 +=== RUN TestChallenge_Validate/fail/device-attest-01 +=== RUN TestChallenge_Validate/fail/wire-dpop-01-no-wire-db +=== RUN TestChallenge_Validate/fail/tls-alpn-01 +=== RUN TestChallenge_Validate/ok/tls-alpn-01 +2026/11/30 06:00:22 http: TLS handshake error from 127.0.0.1:57634: read tcp 127.0.0.1:40851->127.0.0.1:57634: use of closed network connection +=== RUN TestChallenge_Validate/ok/tls-alpn-01-insecure +=== RUN TestChallenge_Validate/ok/already-valid +=== RUN TestChallenge_Validate/fail/unexpected-type === RUN TestChallenge_Validate/fail/dns-01 +=== RUN TestChallenge_Validate/ok/dns-01 +=== RUN TestChallenge_Validate/ok/device-attest-01 === RUN TestChallenge_Validate/fail/wire-oidc-01-no-wire-db === RUN TestChallenge_Validate/ok/wire-dpop-01 -=== RUN TestChallenge_Validate/fail/wire-dpop-01-no-wire-db -=== RUN TestChallenge_Validate/ok/already-valid === RUN TestChallenge_Validate/fail/already-invalid === RUN TestChallenge_Validate/fail/http-01 === RUN TestChallenge_Validate/ok/http-01 === RUN TestChallenge_Validate/ok/http-01-insecure -=== RUN TestChallenge_Validate/fail/tls-alpn-01 -=== RUN TestChallenge_Validate/ok/tls-alpn-01-insecure -=== RUN TestChallenge_Validate/fail/device-attest-01 -=== RUN TestChallenge_Validate/fail/unexpected-type -=== RUN TestChallenge_Validate/ok/tls-alpn-01 ---- PASS: TestChallenge_Validate (1.04s) - --- PASS: TestChallenge_Validate/ok/device-attest-01 (0.01s) - --- PASS: TestChallenge_Validate/ok/wire-oidc-01 (0.00s) - --- PASS: TestChallenge_Validate/ok/dns-01 (0.00s) +=== RUN TestChallenge_Validate/ok/wire-oidc-01 +--- PASS: TestChallenge_Validate (1.42s) + --- PASS: TestChallenge_Validate/fail/device-attest-01 (0.00s) + --- PASS: TestChallenge_Validate/fail/wire-dpop-01-no-wire-db (0.00s) + --- PASS: TestChallenge_Validate/fail/tls-alpn-01 (0.00s) + --- PASS: TestChallenge_Validate/ok/tls-alpn-01 (0.34s) + --- PASS: TestChallenge_Validate/ok/tls-alpn-01-insecure (1.06s) + --- PASS: TestChallenge_Validate/ok/already-valid (0.00s) + --- PASS: TestChallenge_Validate/fail/unexpected-type (0.00s) --- PASS: TestChallenge_Validate/fail/dns-01 (0.00s) + --- PASS: TestChallenge_Validate/ok/dns-01 (0.00s) + --- PASS: TestChallenge_Validate/ok/device-attest-01 (0.01s) --- PASS: TestChallenge_Validate/fail/wire-oidc-01-no-wire-db (0.00s) --- PASS: TestChallenge_Validate/ok/wire-dpop-01 (0.00s) - --- PASS: TestChallenge_Validate/fail/wire-dpop-01-no-wire-db (0.00s) - --- PASS: TestChallenge_Validate/ok/already-valid (0.00s) --- PASS: TestChallenge_Validate/fail/already-invalid (0.00s) --- PASS: TestChallenge_Validate/fail/http-01 (0.00s) --- PASS: TestChallenge_Validate/ok/http-01 (0.00s) --- PASS: TestChallenge_Validate/ok/http-01-insecure (0.00s) - --- PASS: TestChallenge_Validate/fail/tls-alpn-01 (0.00s) - --- PASS: TestChallenge_Validate/ok/tls-alpn-01-insecure (0.89s) - --- PASS: TestChallenge_Validate/fail/device-attest-01 (0.00s) - --- PASS: TestChallenge_Validate/fail/unexpected-type (0.00s) - --- PASS: TestChallenge_Validate/ok/tls-alpn-01 (0.14s) + --- PASS: TestChallenge_Validate/ok/wire-oidc-01 (0.00s) === RUN TestHTTP01Validate -=== RUN TestHTTP01Validate/ok -=== RUN TestHTTP01Validate/fail/http-get-error-store-error -=== RUN TestHTTP01Validate/ok/http-get-error === RUN TestHTTP01Validate/fail/http-get->=400-store-error === RUN TestHTTP01Validate/fail/read-body === RUN TestHTTP01Validate/fail/key-auth-gen-error === RUN TestHTTP01Validate/ok/key-auth-mismatch -=== RUN TestHTTP01Validate/fail/key-auth-mismatch-store-error === RUN TestHTTP01Validate/fail/update-challenge-error +=== RUN TestHTTP01Validate/fail/http-get-error-store-error +=== RUN TestHTTP01Validate/ok/http-get-error === RUN TestHTTP01Validate/ok/http-get->=400 +=== RUN TestHTTP01Validate/fail/key-auth-mismatch-store-error +=== RUN TestHTTP01Validate/ok --- PASS: TestHTTP01Validate (0.00s) - --- PASS: TestHTTP01Validate/ok (0.00s) - --- PASS: TestHTTP01Validate/fail/http-get-error-store-error (0.00s) - --- PASS: TestHTTP01Validate/ok/http-get-error (0.00s) --- PASS: TestHTTP01Validate/fail/http-get->=400-store-error (0.00s) --- PASS: TestHTTP01Validate/fail/read-body (0.00s) --- PASS: TestHTTP01Validate/fail/key-auth-gen-error (0.00s) --- PASS: TestHTTP01Validate/ok/key-auth-mismatch (0.00s) - --- PASS: TestHTTP01Validate/fail/key-auth-mismatch-store-error (0.00s) --- PASS: TestHTTP01Validate/fail/update-challenge-error (0.00s) + --- PASS: TestHTTP01Validate/fail/http-get-error-store-error (0.00s) + --- PASS: TestHTTP01Validate/ok/http-get-error (0.00s) --- PASS: TestHTTP01Validate/ok/http-get->=400 (0.00s) + --- PASS: TestHTTP01Validate/fail/key-auth-mismatch-store-error (0.00s) + --- PASS: TestHTTP01Validate/ok (0.00s) === RUN TestDNS01Validate +=== RUN TestDNS01Validate/fail/key-auth-gen-error +=== RUN TestDNS01Validate/fail/key-auth-mismatch-store-error +=== RUN TestDNS01Validate/ok/key-auth-mismatch-store-error === RUN TestDNS01Validate/fail/update-challenge-error === RUN TestDNS01Validate/ok === RUN TestDNS01Validate/fail/lookupTXT-store-error === RUN TestDNS01Validate/ok/lookupTXT-error -=== RUN TestDNS01Validate/fail/key-auth-gen-error -=== RUN TestDNS01Validate/fail/key-auth-mismatch-store-error -=== RUN TestDNS01Validate/ok/key-auth-mismatch-store-error --- PASS: TestDNS01Validate (0.00s) + --- PASS: TestDNS01Validate/fail/key-auth-gen-error (0.00s) + --- PASS: TestDNS01Validate/fail/key-auth-mismatch-store-error (0.00s) + --- PASS: TestDNS01Validate/ok/key-auth-mismatch-store-error (0.00s) --- PASS: TestDNS01Validate/fail/update-challenge-error (0.00s) --- PASS: TestDNS01Validate/ok (0.00s) --- PASS: TestDNS01Validate/fail/lookupTXT-store-error (0.00s) --- PASS: TestDNS01Validate/ok/lookupTXT-error (0.00s) - --- PASS: TestDNS01Validate/fail/key-auth-gen-error (0.00s) - --- PASS: TestDNS01Validate/fail/key-auth-mismatch-store-error (0.00s) - --- PASS: TestDNS01Validate/ok/key-auth-mismatch-store-error (0.00s) === RUN TestTLSALPN01Validate +=== RUN TestTLSALPN01Validate/ok/tlsDial-error +=== RUN TestTLSALPN01Validate/ok/no-certificates-error +=== RUN TestTLSALPN01Validate/ok/no-names-nor-ips-error +=== RUN TestTLSALPN01Validate/fail/no-names-store-error +=== RUN TestTLSALPN01Validate/ok/error-extension-not-critical +=== RUN TestTLSALPN01Validate/fail/extension-not-critical-store-error +=== RUN TestTLSALPN01Validate/ok/error-malformed-extension === RUN TestTLSALPN01Validate/fail/tlsDial-store-error -=== RUN TestTLSALPN01Validate/fail/no-certificates-store-error -=== RUN TestTLSALPN01Validate/fail/no-protocol-store-error -2025/10/26 21:31:13 http: TLS handshake error from 127.0.0.1:39376: tls: client requested unsupported application protocols (["acme-tls/1"]) +=== RUN TestTLSALPN01Validate/ok/tlsDial-timeout +=== RUN TestTLSALPN01Validate/ok/too-many-names-error === RUN TestTLSALPN01Validate/ok/wrong-name === RUN TestTLSALPN01Validate/fail/no-extension-store-error -=== RUN TestTLSALPN01Validate/ok/error-extension-not-critical -=== RUN TestTLSALPN01Validate/ok/error-malformed-extension +=== RUN TestTLSALPN01Validate/fail/malformed-extension-store-error === RUN TestTLSALPN01Validate/ok/error-obsolete-oid -=== RUN TestTLSALPN01Validate/ok/tlsDial-timeout +=== RUN TestTLSALPN01Validate/fail/no-certificates-store-error +=== RUN TestTLSALPN01Validate/fail/no-protocol-store-error +2026/11/30 06:00:28 http: TLS handshake error from 127.0.0.1:37596: tls: client requested unsupported application protocols (["acme-tls/1"]) +=== RUN TestTLSALPN01Validate/fail/key-auth-gen-error === RUN TestTLSALPN01Validate/ok/error-no-extension -=== RUN TestTLSALPN01Validate/fail/malformed-extension-store-error === RUN TestTLSALPN01Validate/ok/error-keyauth-mismatch === RUN TestTLSALPN01Validate/fail/keyauth-mismatch-store-error -=== RUN TestTLSALPN01Validate/ok/ip -=== RUN TestTLSALPN01Validate/ok/tlsDial-error +=== RUN TestTLSALPN01Validate/ok === RUN TestTLSALPN01Validate/ok/error-no-protocol -2025/10/26 21:31:21 http: TLS handshake error from 127.0.0.1:47574: tls: client requested unsupported application protocols (["acme-tls/1"]) -=== RUN TestTLSALPN01Validate/fail/no-names-store-error -=== RUN TestTLSALPN01Validate/ok/no-certificates-error -=== RUN TestTLSALPN01Validate/ok/no-names-nor-ips-error -=== RUN TestTLSALPN01Validate/ok/too-many-names-error -=== RUN TestTLSALPN01Validate/fail/key-auth-gen-error -=== RUN TestTLSALPN01Validate/fail/extension-not-critical-store-error +2026/11/30 06:00:29 http: TLS handshake error from 127.0.0.1:38272: tls: client requested unsupported application protocols (["acme-tls/1"]) === RUN TestTLSALPN01Validate/fail/obsolete-oid-store-error -=== RUN TestTLSALPN01Validate/ok ---- PASS: TestTLSALPN01Validate (11.65s) +=== RUN TestTLSALPN01Validate/ok/ip +--- PASS: TestTLSALPN01Validate (7.29s) + --- PASS: TestTLSALPN01Validate/ok/tlsDial-error (0.00s) + --- PASS: TestTLSALPN01Validate/ok/no-certificates-error (0.00s) + --- PASS: TestTLSALPN01Validate/ok/no-names-nor-ips-error (0.03s) + --- PASS: TestTLSALPN01Validate/fail/no-names-store-error (0.90s) + --- PASS: TestTLSALPN01Validate/ok/error-extension-not-critical (0.45s) + --- PASS: TestTLSALPN01Validate/fail/extension-not-critical-store-error (0.43s) + --- PASS: TestTLSALPN01Validate/ok/error-malformed-extension (0.55s) --- PASS: TestTLSALPN01Validate/fail/tlsDial-store-error (0.00s) + --- PASS: TestTLSALPN01Validate/ok/tlsDial-timeout (1.00s) + --- PASS: TestTLSALPN01Validate/ok/too-many-names-error (0.19s) + --- PASS: TestTLSALPN01Validate/ok/wrong-name (0.40s) + --- PASS: TestTLSALPN01Validate/fail/no-extension-store-error (0.51s) + --- PASS: TestTLSALPN01Validate/fail/malformed-extension-store-error (0.61s) + --- PASS: TestTLSALPN01Validate/ok/error-obsolete-oid (0.18s) --- PASS: TestTLSALPN01Validate/fail/no-certificates-store-error (0.00s) --- PASS: TestTLSALPN01Validate/fail/no-protocol-store-error (0.00s) - --- PASS: TestTLSALPN01Validate/ok/wrong-name (0.24s) - --- PASS: TestTLSALPN01Validate/fail/no-extension-store-error (0.87s) - --- PASS: TestTLSALPN01Validate/ok/error-extension-not-critical (2.09s) - --- PASS: TestTLSALPN01Validate/ok/error-malformed-extension (0.53s) - --- PASS: TestTLSALPN01Validate/ok/error-obsolete-oid (1.21s) - --- PASS: TestTLSALPN01Validate/ok/tlsDial-timeout (1.00s) - --- PASS: TestTLSALPN01Validate/ok/error-no-extension (1.19s) - --- PASS: TestTLSALPN01Validate/fail/malformed-extension-store-error (0.03s) - --- PASS: TestTLSALPN01Validate/ok/error-keyauth-mismatch (0.69s) - --- PASS: TestTLSALPN01Validate/fail/keyauth-mismatch-store-error (0.28s) - --- PASS: TestTLSALPN01Validate/ok/ip (0.13s) - --- PASS: TestTLSALPN01Validate/ok/tlsDial-error (0.00s) + --- PASS: TestTLSALPN01Validate/fail/key-auth-gen-error (0.26s) + --- PASS: TestTLSALPN01Validate/ok/error-no-extension (0.15s) + --- PASS: TestTLSALPN01Validate/ok/error-keyauth-mismatch (0.37s) + --- PASS: TestTLSALPN01Validate/fail/keyauth-mismatch-store-error (0.38s) + --- PASS: TestTLSALPN01Validate/ok (0.11s) --- PASS: TestTLSALPN01Validate/ok/error-no-protocol (0.00s) - --- PASS: TestTLSALPN01Validate/fail/no-names-store-error (0.42s) - --- PASS: TestTLSALPN01Validate/ok/no-certificates-error (0.00s) - --- PASS: TestTLSALPN01Validate/ok/no-names-nor-ips-error (0.38s) - --- PASS: TestTLSALPN01Validate/ok/too-many-names-error (0.61s) - --- PASS: TestTLSALPN01Validate/fail/key-auth-gen-error (0.34s) - --- PASS: TestTLSALPN01Validate/fail/extension-not-critical-store-error (0.49s) - --- PASS: TestTLSALPN01Validate/fail/obsolete-oid-store-error (0.37s) - --- PASS: TestTLSALPN01Validate/ok (0.78s) + --- PASS: TestTLSALPN01Validate/fail/obsolete-oid-store-error (0.53s) + --- PASS: TestTLSALPN01Validate/ok/ip (0.23s) === RUN Test_reverseAddr === RUN Test_reverseAddr/ok/ipv4 === RUN Test_reverseAddr/ok/ipv6 @@ -1890,7 +1927,7 @@ === RUN Test_doAppleAttestationFormat/fail_intermediate_type === RUN Test_doAppleAttestationFormat/fail_intermediate_parse === RUN Test_doAppleAttestationFormat/fail_verify ---- PASS: Test_doAppleAttestationFormat (0.00s) +--- PASS: Test_doAppleAttestationFormat (0.01s) --- PASS: Test_doAppleAttestationFormat/ok (0.00s) --- PASS: Test_doAppleAttestationFormat/fail_apple_issuer (0.00s) --- PASS: Test_doAppleAttestationFormat/fail_missing_x5c (0.00s) @@ -1918,7 +1955,7 @@ === RUN Test_doStepAttestationFormat/fail_sig_verify_RSA === RUN Test_doStepAttestationFormat/fail_sig_verify_Ed25519 === RUN Test_doStepAttestationFormat/fail_unmarshal_serial_number ---- PASS: Test_doStepAttestationFormat (0.77s) +--- PASS: Test_doStepAttestationFormat (0.91s) --- PASS: Test_doStepAttestationFormat/ok (0.00s) --- PASS: Test_doStepAttestationFormat/fail_yubico_issuer (0.00s) --- PASS: Test_doStepAttestationFormat/fail_x5c_type (0.00s) @@ -1941,45 +1978,45 @@ --- PASS: Test_doStepAttestationFormat_noCAIntermediate (0.00s) --- PASS: Test_doStepAttestationFormat_noCAIntermediate/fail_no_intermediate (0.00s) === RUN Test_deviceAttest01Validate -=== RUN Test_deviceAttest01Validate/ok/unsupported-attestation-format -=== RUN Test_deviceAttest01Validate/ok/doAppleAttestationFormat-non-matching-nonce -=== RUN Test_deviceAttest01Validate/ok/doStepAttestationFormat-storeError -=== RUN Test_deviceAttest01Validate/ok/storeError-return-nil -=== RUN Test_deviceAttest01Validate/ok/empty-attobj -=== RUN Test_deviceAttest01Validate/ok/empty-json-attobj -=== RUN Test_deviceAttest01Validate/ok/doAppleAttestationFormat-non-matching-challenge-value -=== RUN Test_deviceAttest01Validate/ok -=== RUN Test_deviceAttest01Validate/ok/cborDecoder.Wellformed -=== RUN Test_deviceAttest01Validate/ok/unknown-attestation-format -=== RUN Test_deviceAttest01Validate/fail/db.UpdateAuthorization -=== RUN Test_deviceAttest01Validate/fail/db.UpdateChallenge === RUN Test_deviceAttest01Validate/fail/json.Unmarshal +=== RUN Test_deviceAttest01Validate/ok/storeError-return-nil === RUN Test_deviceAttest01Validate/ok/base64-decode -=== RUN Test_deviceAttest01Validate/ok/prov.IsAttestationFormatEnabled +=== RUN Test_deviceAttest01Validate/ok/cborDecoder.Wellformed === RUN Test_deviceAttest01Validate/ok/doAppleAttestationFormat-storeError +=== RUN Test_deviceAttest01Validate/ok/doAppleAttestationFormat-non-matching-challenge-value +=== RUN Test_deviceAttest01Validate/fail/storeError === RUN Test_deviceAttest01Validate/ok/doStepAttestationFormat-non-matching-identifier +=== RUN Test_deviceAttest01Validate/ok/unknown-attestation-format +=== RUN Test_deviceAttest01Validate/fail/db.UpdateChallenge === RUN Test_deviceAttest01Validate/fail/getAuthorization -=== RUN Test_deviceAttest01Validate/fail/storeError ---- PASS: Test_deviceAttest01Validate (0.04s) - --- PASS: Test_deviceAttest01Validate/ok/unsupported-attestation-format (0.00s) - --- PASS: Test_deviceAttest01Validate/ok/doAppleAttestationFormat-non-matching-nonce (0.01s) - --- PASS: Test_deviceAttest01Validate/ok/doStepAttestationFormat-storeError (0.00s) - --- PASS: Test_deviceAttest01Validate/ok/storeError-return-nil (0.00s) - --- PASS: Test_deviceAttest01Validate/ok/empty-attobj (0.00s) - --- PASS: Test_deviceAttest01Validate/ok/empty-json-attobj (0.00s) - --- PASS: Test_deviceAttest01Validate/ok/doAppleAttestationFormat-non-matching-challenge-value (0.00s) - --- PASS: Test_deviceAttest01Validate/ok (0.00s) - --- PASS: Test_deviceAttest01Validate/ok/cborDecoder.Wellformed (0.00s) - --- PASS: Test_deviceAttest01Validate/ok/unknown-attestation-format (0.00s) - --- PASS: Test_deviceAttest01Validate/fail/db.UpdateAuthorization (0.00s) - --- PASS: Test_deviceAttest01Validate/fail/db.UpdateChallenge (0.00s) +=== RUN Test_deviceAttest01Validate/ok/empty-attobj +=== RUN Test_deviceAttest01Validate/ok/empty-json-attobj +=== RUN Test_deviceAttest01Validate/ok/unsupported-attestation-format +=== RUN Test_deviceAttest01Validate/ok/doAppleAttestationFormat-non-matching-nonce +=== RUN Test_deviceAttest01Validate/ok +=== RUN Test_deviceAttest01Validate/ok/prov.IsAttestationFormatEnabled +=== RUN Test_deviceAttest01Validate/ok/doStepAttestationFormat-storeError +=== RUN Test_deviceAttest01Validate/fail/db.UpdateAuthorization +--- PASS: Test_deviceAttest01Validate (0.02s) --- PASS: Test_deviceAttest01Validate/fail/json.Unmarshal (0.00s) + --- PASS: Test_deviceAttest01Validate/ok/storeError-return-nil (0.00s) --- PASS: Test_deviceAttest01Validate/ok/base64-decode (0.00s) - --- PASS: Test_deviceAttest01Validate/ok/prov.IsAttestationFormatEnabled (0.00s) + --- PASS: Test_deviceAttest01Validate/ok/cborDecoder.Wellformed (0.00s) --- PASS: Test_deviceAttest01Validate/ok/doAppleAttestationFormat-storeError (0.00s) + --- PASS: Test_deviceAttest01Validate/ok/doAppleAttestationFormat-non-matching-challenge-value (0.00s) + --- PASS: Test_deviceAttest01Validate/fail/storeError (0.00s) --- PASS: Test_deviceAttest01Validate/ok/doStepAttestationFormat-non-matching-identifier (0.00s) + --- PASS: Test_deviceAttest01Validate/ok/unknown-attestation-format (0.00s) + --- PASS: Test_deviceAttest01Validate/fail/db.UpdateChallenge (0.00s) --- PASS: Test_deviceAttest01Validate/fail/getAuthorization (0.00s) - --- PASS: Test_deviceAttest01Validate/fail/storeError (0.00s) + --- PASS: Test_deviceAttest01Validate/ok/empty-attobj (0.00s) + --- PASS: Test_deviceAttest01Validate/ok/empty-json-attobj (0.00s) + --- PASS: Test_deviceAttest01Validate/ok/unsupported-attestation-format (0.00s) + --- PASS: Test_deviceAttest01Validate/ok/doAppleAttestationFormat-non-matching-nonce (0.00s) + --- PASS: Test_deviceAttest01Validate/ok (0.00s) + --- PASS: Test_deviceAttest01Validate/ok/prov.IsAttestationFormatEnabled (0.00s) + --- PASS: Test_deviceAttest01Validate/ok/doStepAttestationFormat-storeError (0.00s) + --- PASS: Test_deviceAttest01Validate/fail/db.UpdateAuthorization (0.00s) === RUN Test_validateAKCertificate === RUN Test_validateAKCertificate/ok === RUN Test_validateAKCertificate/fail/version @@ -2035,55 +2072,55 @@ --- PASS: Test_dns01ChallengeHost/rooted_dns (0.00s) --- PASS: Test_dns01ChallengeHost/rooted_dns_strict (0.00s) === RUN Test_wireDPOP01Validate -=== RUN Test_wireDPOP01Validate/fail/parse-and-verify -=== RUN Test_wireDPOP01Validate/fail/db.GetAllOrdersByAccountID -=== RUN Test_wireDPOP01Validate/fail/db.CreateDpopToken === RUN Test_wireDPOP01Validate/ok -=== RUN Test_wireDPOP01Validate/fail/no-provisioner === RUN Test_wireDPOP01Validate/fail/no-linker +=== RUN Test_wireDPOP01Validate/fail/unmarshal === RUN Test_wireDPOP01Validate/fail/wire-parse-client-id -=== RUN Test_wireDPOP01Validate/fail/db.UpdateChallenge +=== RUN Test_wireDPOP01Validate/fail/db.GetAllOrdersByAccountID === RUN Test_wireDPOP01Validate/fail/db.GetAllOrdersByAccountID-zero -=== RUN Test_wireDPOP01Validate/fail/unmarshal +=== RUN Test_wireDPOP01Validate/fail/no-provisioner === RUN Test_wireDPOP01Validate/fail/wire-parse-id +=== RUN Test_wireDPOP01Validate/fail/parse-and-verify +=== RUN Test_wireDPOP01Validate/fail/db.UpdateChallenge +=== RUN Test_wireDPOP01Validate/fail/db.CreateDpopToken --- PASS: Test_wireDPOP01Validate (0.01s) - --- PASS: Test_wireDPOP01Validate/fail/parse-and-verify (0.00s) - --- PASS: Test_wireDPOP01Validate/fail/db.GetAllOrdersByAccountID (0.00s) - --- PASS: Test_wireDPOP01Validate/fail/db.CreateDpopToken (0.00s) --- PASS: Test_wireDPOP01Validate/ok (0.00s) - --- PASS: Test_wireDPOP01Validate/fail/no-provisioner (0.00s) --- PASS: Test_wireDPOP01Validate/fail/no-linker (0.00s) + --- PASS: Test_wireDPOP01Validate/fail/unmarshal (0.00s) --- PASS: Test_wireDPOP01Validate/fail/wire-parse-client-id (0.00s) - --- PASS: Test_wireDPOP01Validate/fail/db.UpdateChallenge (0.00s) + --- PASS: Test_wireDPOP01Validate/fail/db.GetAllOrdersByAccountID (0.00s) --- PASS: Test_wireDPOP01Validate/fail/db.GetAllOrdersByAccountID-zero (0.00s) - --- PASS: Test_wireDPOP01Validate/fail/unmarshal (0.00s) + --- PASS: Test_wireDPOP01Validate/fail/no-provisioner (0.00s) --- PASS: Test_wireDPOP01Validate/fail/wire-parse-id (0.00s) + --- PASS: Test_wireDPOP01Validate/fail/parse-and-verify (0.00s) + --- PASS: Test_wireDPOP01Validate/fail/db.UpdateChallenge (0.00s) + --- PASS: Test_wireDPOP01Validate/fail/db.CreateDpopToken (0.00s) === RUN Test_wireOIDC01Validate +=== RUN Test_wireOIDC01Validate/fail/keyauth-mismatch +=== RUN Test_wireOIDC01Validate/fail/db.UpdateChallenge +=== RUN Test_wireOIDC01Validate/ok/wire-oidc-01 === RUN Test_wireOIDC01Validate/fail/no-provisioner -=== RUN Test_wireOIDC01Validate/fail/no-linker +=== RUN Test_wireOIDC01Validate/fail/wire-parse-id === RUN Test_wireOIDC01Validate/fail/verify -=== RUN Test_wireOIDC01Validate/fail/db.UpdateChallenge +=== RUN Test_wireOIDC01Validate/fail/validateWireOIDCClaims === RUN Test_wireOIDC01Validate/fail/db.GetAllOrdersByAccountID === RUN Test_wireOIDC01Validate/fail/db.GetAllOrdersByAccountID-zero === RUN Test_wireOIDC01Validate/fail/db.CreateOidcToken +=== RUN Test_wireOIDC01Validate/fail/no-linker === RUN Test_wireOIDC01Validate/fail/unmarshal -=== RUN Test_wireOIDC01Validate/fail/wire-parse-id -=== RUN Test_wireOIDC01Validate/fail/keyauth-mismatch -=== RUN Test_wireOIDC01Validate/fail/validateWireOIDCClaims -=== RUN Test_wireOIDC01Validate/ok/wire-oidc-01 --- PASS: Test_wireOIDC01Validate (0.01s) + --- PASS: Test_wireOIDC01Validate/fail/keyauth-mismatch (0.00s) + --- PASS: Test_wireOIDC01Validate/fail/db.UpdateChallenge (0.00s) + --- PASS: Test_wireOIDC01Validate/ok/wire-oidc-01 (0.00s) --- PASS: Test_wireOIDC01Validate/fail/no-provisioner (0.00s) - --- PASS: Test_wireOIDC01Validate/fail/no-linker (0.00s) + --- PASS: Test_wireOIDC01Validate/fail/wire-parse-id (0.00s) --- PASS: Test_wireOIDC01Validate/fail/verify (0.00s) - --- PASS: Test_wireOIDC01Validate/fail/db.UpdateChallenge (0.00s) + --- PASS: Test_wireOIDC01Validate/fail/validateWireOIDCClaims (0.00s) --- PASS: Test_wireOIDC01Validate/fail/db.GetAllOrdersByAccountID (0.00s) --- PASS: Test_wireOIDC01Validate/fail/db.GetAllOrdersByAccountID-zero (0.00s) --- PASS: Test_wireOIDC01Validate/fail/db.CreateOidcToken (0.00s) + --- PASS: Test_wireOIDC01Validate/fail/no-linker (0.00s) --- PASS: Test_wireOIDC01Validate/fail/unmarshal (0.00s) - --- PASS: Test_wireOIDC01Validate/fail/wire-parse-id (0.00s) - --- PASS: Test_wireOIDC01Validate/fail/keyauth-mismatch (0.00s) - --- PASS: Test_wireOIDC01Validate/fail/validateWireOIDCClaims (0.00s) - --- PASS: Test_wireOIDC01Validate/ok/wire-oidc-01 (0.00s) === RUN Test_parseAndVerifyWireAccessToken challenge_wire_test.go:2126: skip until we can retrieve public key from e2e test, so that we can actually verify the token --- SKIP: Test_parseAndVerifyWireAccessToken (0.00s) @@ -2162,77 +2199,77 @@ --- PASS: TestLinker_LinkOrdersByAccountID (0.00s) --- PASS: TestLinker_LinkOrdersByAccountID/ok (0.00s) === RUN TestOrder_UpdateStatus -=== RUN TestOrder_UpdateStatus/ok/already-valid -=== RUN TestOrder_UpdateStatus/fail/ready-expired-db.UpdateOrder-error === RUN TestOrder_UpdateStatus/ok/invalid +=== RUN TestOrder_UpdateStatus/ok/still-pending === RUN TestOrder_UpdateStatus/ok/valid === RUN TestOrder_UpdateStatus/ok/already-invalid +=== RUN TestOrder_UpdateStatus/ok/pending-expired +=== RUN TestOrder_UpdateStatus/ok/already-valid === RUN TestOrder_UpdateStatus/fail/error-unexpected-status === RUN TestOrder_UpdateStatus/ok/ready-expired -=== RUN TestOrder_UpdateStatus/ok/pending-expired -=== RUN TestOrder_UpdateStatus/ok/still-pending +=== RUN TestOrder_UpdateStatus/fail/ready-expired-db.UpdateOrder-error --- PASS: TestOrder_UpdateStatus (0.00s) - --- PASS: TestOrder_UpdateStatus/ok/already-valid (0.00s) - --- PASS: TestOrder_UpdateStatus/fail/ready-expired-db.UpdateOrder-error (0.00s) --- PASS: TestOrder_UpdateStatus/ok/invalid (0.00s) + --- PASS: TestOrder_UpdateStatus/ok/still-pending (0.00s) --- PASS: TestOrder_UpdateStatus/ok/valid (0.00s) --- PASS: TestOrder_UpdateStatus/ok/already-invalid (0.00s) + --- PASS: TestOrder_UpdateStatus/ok/pending-expired (0.00s) + --- PASS: TestOrder_UpdateStatus/ok/already-valid (0.00s) --- PASS: TestOrder_UpdateStatus/fail/error-unexpected-status (0.00s) --- PASS: TestOrder_UpdateStatus/ok/ready-expired (0.00s) - --- PASS: TestOrder_UpdateStatus/ok/pending-expired (0.00s) - --- PASS: TestOrder_UpdateStatus/ok/still-pending (0.00s) + --- PASS: TestOrder_UpdateStatus/fail/ready-expired-db.UpdateOrder-error (0.00s) === RUN TestOrder_Finalize -=== RUN TestOrder_Finalize/fail/csr-wire-id-csr-uri-mismatch +=== RUN TestOrder_Finalize/fail/webhook-error +=== RUN TestOrder_Finalize/fail/error-db.CreateCertificate +=== RUN TestOrder_Finalize/fail/csr-wire-id-csr-uri-missing === RUN TestOrder_Finalize/fail/other-than-wire-ids-present === RUN TestOrder_Finalize/fail/wire-id-display-name-mismatch +=== RUN TestOrder_Finalize/ok/wire-id-user === RUN TestOrder_Finalize/ok/new-cert-ip === RUN TestOrder_Finalize/ok/new-cert-dns-and-ip === RUN TestOrder_Finalize/fail/invalid === RUN TestOrder_Finalize/fail/pending +=== RUN TestOrder_Finalize/ok/already-valid === RUN TestOrder_Finalize/fail/error-unexpected-status -=== RUN TestOrder_Finalize/fail/error-template-options -=== RUN TestOrder_Finalize/fail/error-db.CreateCertificate +=== RUN TestOrder_Finalize/fail/non-matching-permanent-identifier-common-name +=== RUN TestOrder_Finalize/fail/error-db.UpdateOrder === RUN TestOrder_Finalize/ok/permanent-identifier -=== RUN TestOrder_Finalize/ok/wire-id-user +=== RUN TestOrder_Finalize/fail/csr-wire-id-csr-uri-mismatch +=== RUN TestOrder_Finalize/fail/error-template-options +=== RUN TestOrder_Finalize/fail/wire-id-org-missing +=== RUN TestOrder_Finalize/fail/wire-id-display-name-missing === RUN TestOrder_Finalize/ok/wire-id-device +=== RUN TestOrder_Finalize/ok/new-cert-dns === RUN TestOrder_Finalize/fail/error-provisioner-auth -=== RUN TestOrder_Finalize/fail/csr-fingerprint -=== RUN TestOrder_Finalize/fail/csr-wire-id-csr-uri-missing -=== RUN TestOrder_Finalize/fail/wire-id-display-name-missing -=== RUN TestOrder_Finalize/ok/already-valid -=== RUN TestOrder_Finalize/fail/non-matching-permanent-identifier-common-name === RUN TestOrder_Finalize/fail/error-ca-sign +=== RUN TestOrder_Finalize/fail/csr-fingerprint === RUN TestOrder_Finalize/ok/permanent-identifier-only -=== RUN TestOrder_Finalize/fail/wire-id-org-missing -=== RUN TestOrder_Finalize/ok/new-cert-dns -=== RUN TestOrder_Finalize/fail/webhook-error -=== RUN TestOrder_Finalize/fail/error-db.UpdateOrder --- PASS: TestOrder_Finalize (0.00s) - --- PASS: TestOrder_Finalize/fail/csr-wire-id-csr-uri-mismatch (0.00s) + --- PASS: TestOrder_Finalize/fail/webhook-error (0.00s) + --- PASS: TestOrder_Finalize/fail/error-db.CreateCertificate (0.00s) + --- PASS: TestOrder_Finalize/fail/csr-wire-id-csr-uri-missing (0.00s) --- PASS: TestOrder_Finalize/fail/other-than-wire-ids-present (0.00s) --- PASS: TestOrder_Finalize/fail/wire-id-display-name-mismatch (0.00s) + --- PASS: TestOrder_Finalize/ok/wire-id-user (0.00s) --- PASS: TestOrder_Finalize/ok/new-cert-ip (0.00s) --- PASS: TestOrder_Finalize/ok/new-cert-dns-and-ip (0.00s) --- PASS: TestOrder_Finalize/fail/invalid (0.00s) --- PASS: TestOrder_Finalize/fail/pending (0.00s) + --- PASS: TestOrder_Finalize/ok/already-valid (0.00s) --- PASS: TestOrder_Finalize/fail/error-unexpected-status (0.00s) - --- PASS: TestOrder_Finalize/fail/error-template-options (0.00s) - --- PASS: TestOrder_Finalize/fail/error-db.CreateCertificate (0.00s) + --- PASS: TestOrder_Finalize/fail/non-matching-permanent-identifier-common-name (0.00s) + --- PASS: TestOrder_Finalize/fail/error-db.UpdateOrder (0.00s) --- PASS: TestOrder_Finalize/ok/permanent-identifier (0.00s) - --- PASS: TestOrder_Finalize/ok/wire-id-user (0.00s) + --- PASS: TestOrder_Finalize/fail/csr-wire-id-csr-uri-mismatch (0.00s) + --- PASS: TestOrder_Finalize/fail/error-template-options (0.00s) + --- PASS: TestOrder_Finalize/fail/wire-id-org-missing (0.00s) + --- PASS: TestOrder_Finalize/fail/wire-id-display-name-missing (0.00s) --- PASS: TestOrder_Finalize/ok/wire-id-device (0.00s) + --- PASS: TestOrder_Finalize/ok/new-cert-dns (0.00s) --- PASS: TestOrder_Finalize/fail/error-provisioner-auth (0.00s) - --- PASS: TestOrder_Finalize/fail/csr-fingerprint (0.00s) - --- PASS: TestOrder_Finalize/fail/csr-wire-id-csr-uri-missing (0.00s) - --- PASS: TestOrder_Finalize/fail/wire-id-display-name-missing (0.00s) - --- PASS: TestOrder_Finalize/ok/already-valid (0.00s) - --- PASS: TestOrder_Finalize/fail/non-matching-permanent-identifier-common-name (0.00s) --- PASS: TestOrder_Finalize/fail/error-ca-sign (0.00s) + --- PASS: TestOrder_Finalize/fail/csr-fingerprint (0.00s) --- PASS: TestOrder_Finalize/ok/permanent-identifier-only (0.00s) - --- PASS: TestOrder_Finalize/fail/wire-id-org-missing (0.00s) - --- PASS: TestOrder_Finalize/ok/new-cert-dns (0.00s) - --- PASS: TestOrder_Finalize/fail/webhook-error (0.00s) - --- PASS: TestOrder_Finalize/fail/error-db.UpdateOrder (0.00s) === RUN Test_uniqueSortedIPs === RUN Test_uniqueSortedIPs/ok/empty === RUN Test_uniqueSortedIPs/ok/single-ipv4 @@ -2338,7 +2375,7 @@ --- PASS: TestOrder_getAuthorizationFingerprint/ok_fingerprint (0.00s) --- PASS: TestOrder_getAuthorizationFingerprint/fail (0.00s) PASS -ok github.com/smallstep/certificates/acme 13.590s +ok github.com/smallstep/certificates/acme 9.750s === RUN TestNewAccountRequest_Validate === RUN TestNewAccountRequest_Validate/fail/incompatible-input === RUN TestNewAccountRequest_Validate/fail/bad-contact @@ -2376,59 +2413,59 @@ --- PASS: TestHandler_GetOrdersByAccountID/fail/db.GetOrdersByAccountID-error (0.00s) --- PASS: TestHandler_GetOrdersByAccountID/ok (0.00s) === RUN TestHandler_NewAccount -=== RUN TestHandler_NewAccount/fail/nil-payload -=== RUN TestHandler_NewAccount/fail/unmarshal-payload-error -=== RUN TestHandler_NewAccount/fail/no-jwk +=== RUN TestHandler_NewAccount/fail/nil-jwk === RUN TestHandler_NewAccount/fail/db.CreateAccount-error === RUN TestHandler_NewAccount/fail/acmeProvisionerFromContext -=== RUN TestHandler_NewAccount/ok/new-account-with-eab -=== RUN TestHandler_NewAccount/fail/nil-jwk -=== RUN TestHandler_NewAccount/ok/new-account === RUN TestHandler_NewAccount/ok/return-existing -=== RUN TestHandler_NewAccount/ok/new-account-no-eab-required +=== RUN TestHandler_NewAccount/ok/new-account-with-eab === RUN TestHandler_NewAccount/fail/no-payload +=== RUN TestHandler_NewAccount/fail/no-jwk +=== RUN TestHandler_NewAccount/fail/nil-payload === RUN TestHandler_NewAccount/fail/malformed-payload-error === RUN TestHandler_NewAccount/fail/no-existing-account -=== RUN TestHandler_NewAccount/fail/new-account-no-eab-provided === RUN TestHandler_NewAccount/fail/db.UpdateExternalAccountKey-error +=== RUN TestHandler_NewAccount/ok/new-account +=== RUN TestHandler_NewAccount/fail/unmarshal-payload-error +=== RUN TestHandler_NewAccount/fail/new-account-no-eab-provided +=== RUN TestHandler_NewAccount/ok/new-account-no-eab-required --- PASS: TestHandler_NewAccount (0.01s) - --- PASS: TestHandler_NewAccount/fail/nil-payload (0.00s) - --- PASS: TestHandler_NewAccount/fail/unmarshal-payload-error (0.00s) - --- PASS: TestHandler_NewAccount/fail/no-jwk (0.00s) + --- PASS: TestHandler_NewAccount/fail/nil-jwk (0.00s) --- PASS: TestHandler_NewAccount/fail/db.CreateAccount-error (0.00s) --- PASS: TestHandler_NewAccount/fail/acmeProvisionerFromContext (0.00s) - --- PASS: TestHandler_NewAccount/ok/new-account-with-eab (0.00s) - --- PASS: TestHandler_NewAccount/fail/nil-jwk (0.00s) - --- PASS: TestHandler_NewAccount/ok/new-account (0.00s) --- PASS: TestHandler_NewAccount/ok/return-existing (0.00s) - --- PASS: TestHandler_NewAccount/ok/new-account-no-eab-required (0.00s) + --- PASS: TestHandler_NewAccount/ok/new-account-with-eab (0.00s) --- PASS: TestHandler_NewAccount/fail/no-payload (0.00s) + --- PASS: TestHandler_NewAccount/fail/no-jwk (0.00s) + --- PASS: TestHandler_NewAccount/fail/nil-payload (0.00s) --- PASS: TestHandler_NewAccount/fail/malformed-payload-error (0.00s) --- PASS: TestHandler_NewAccount/fail/no-existing-account (0.00s) - --- PASS: TestHandler_NewAccount/fail/new-account-no-eab-provided (0.00s) --- PASS: TestHandler_NewAccount/fail/db.UpdateExternalAccountKey-error (0.00s) + --- PASS: TestHandler_NewAccount/ok/new-account (0.00s) + --- PASS: TestHandler_NewAccount/fail/unmarshal-payload-error (0.00s) + --- PASS: TestHandler_NewAccount/fail/new-account-no-eab-provided (0.00s) + --- PASS: TestHandler_NewAccount/ok/new-account-no-eab-required (0.00s) === RUN TestHandler_GetOrUpdateAccount -=== RUN TestHandler_GetOrUpdateAccount/ok/update-contacts -=== RUN TestHandler_GetOrUpdateAccount/ok/post-as-get -=== RUN TestHandler_GetOrUpdateAccount/fail/nil-account +=== RUN TestHandler_GetOrUpdateAccount/fail/no-account === RUN TestHandler_GetOrUpdateAccount/fail/no-payload === RUN TestHandler_GetOrUpdateAccount/fail/unmarshal-payload-error === RUN TestHandler_GetOrUpdateAccount/fail/db.UpdateAccount-error === RUN TestHandler_GetOrUpdateAccount/ok/deactivate === RUN TestHandler_GetOrUpdateAccount/ok/update-empty -=== RUN TestHandler_GetOrUpdateAccount/fail/no-account +=== RUN TestHandler_GetOrUpdateAccount/ok/update-contacts +=== RUN TestHandler_GetOrUpdateAccount/ok/post-as-get +=== RUN TestHandler_GetOrUpdateAccount/fail/nil-account === RUN TestHandler_GetOrUpdateAccount/fail/nil-payload === RUN TestHandler_GetOrUpdateAccount/fail/malformed-payload-error --- PASS: TestHandler_GetOrUpdateAccount (0.00s) - --- PASS: TestHandler_GetOrUpdateAccount/ok/update-contacts (0.00s) - --- PASS: TestHandler_GetOrUpdateAccount/ok/post-as-get (0.00s) - --- PASS: TestHandler_GetOrUpdateAccount/fail/nil-account (0.00s) + --- PASS: TestHandler_GetOrUpdateAccount/fail/no-account (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/fail/no-payload (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/fail/unmarshal-payload-error (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/fail/db.UpdateAccount-error (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/ok/deactivate (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/ok/update-empty (0.00s) - --- PASS: TestHandler_GetOrUpdateAccount/fail/no-account (0.00s) + --- PASS: TestHandler_GetOrUpdateAccount/ok/update-contacts (0.00s) + --- PASS: TestHandler_GetOrUpdateAccount/ok/post-as-get (0.00s) + --- PASS: TestHandler_GetOrUpdateAccount/fail/nil-account (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/fail/nil-payload (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/fail/malformed-payload-error (0.00s) === RUN Test_keysAreEqual @@ -2442,63 +2479,63 @@ --- PASS: Test_keysAreEqual/ok/not-equal (0.00s) --- PASS: Test_keysAreEqual/ok/wrong-key-type (0.00s) === RUN TestHandler_validateExternalAccountBinding -=== RUN TestHandler_validateExternalAccountBinding/fail/eab-non-matching-keys -=== RUN TestHandler_validateExternalAccountBinding/ok/no-eab-required-but-provided -=== RUN TestHandler_validateExternalAccountBinding/ok/eab === RUN TestHandler_validateExternalAccountBinding/fail/validate-eab-jws-no-signatures -=== RUN TestHandler_validateExternalAccountBinding/fail/retrieve-eab-key-db-failure -=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-nil === RUN TestHandler_validateExternalAccountBinding/fail/eab-verify -=== RUN TestHandler_validateExternalAccountBinding/fail/no-jwk -=== RUN TestHandler_validateExternalAccountBinding/fail/parse-eab-jose -=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-no-keybytes -=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-wrong-provisioner -=== RUN TestHandler_validateExternalAccountBinding/fail/nil-jwk -=== RUN TestHandler_validateExternalAccountBinding/fail/acmeProvisionerFromContext === RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-not-found === RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-error +=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-nil +=== RUN TestHandler_validateExternalAccountBinding/fail/no-jwk +=== RUN TestHandler_validateExternalAccountBinding/ok/no-eab-required-but-provided +=== RUN TestHandler_validateExternalAccountBinding/fail/acmeProvisionerFromContext +=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-wrong-provisioner +=== RUN TestHandler_validateExternalAccountBinding/fail/retrieve-eab-key-db-failure +=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-no-keybytes === RUN TestHandler_validateExternalAccountBinding/fail/eab-already-bound +=== RUN TestHandler_validateExternalAccountBinding/fail/eab-non-matching-keys +=== RUN TestHandler_validateExternalAccountBinding/fail/nil-jwk +=== RUN TestHandler_validateExternalAccountBinding/ok/eab +=== RUN TestHandler_validateExternalAccountBinding/fail/parse-eab-jose --- PASS: TestHandler_validateExternalAccountBinding (0.01s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/eab-non-matching-keys (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/ok/no-eab-required-but-provided (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/ok/eab (0.00s) --- PASS: TestHandler_validateExternalAccountBinding/fail/validate-eab-jws-no-signatures (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/retrieve-eab-key-db-failure (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-nil (0.00s) --- PASS: TestHandler_validateExternalAccountBinding/fail/eab-verify (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/no-jwk (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/parse-eab-jose (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-no-keybytes (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-wrong-provisioner (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/nil-jwk (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/acmeProvisionerFromContext (0.00s) --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-not-found (0.00s) --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-error (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-nil (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/no-jwk (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/ok/no-eab-required-but-provided (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/acmeProvisionerFromContext (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-wrong-provisioner (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/retrieve-eab-key-db-failure (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-no-keybytes (0.00s) --- PASS: TestHandler_validateExternalAccountBinding/fail/eab-already-bound (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/eab-non-matching-keys (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/nil-jwk (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/ok/eab (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/parse-eab-jose (0.00s) === RUN Test_validateEABJWS -=== RUN Test_validateEABJWS/fail/no-outer-jws -=== RUN Test_validateEABJWS/fail/outer-jws-no-url -=== RUN Test_validateEABJWS/fail/nil-jws === RUN Test_validateEABJWS/fail/invalid-algorithm === RUN Test_validateEABJWS/fail/kid-not-set +=== RUN Test_validateEABJWS/fail/nonce-not-empty +=== RUN Test_validateEABJWS/ok +=== RUN Test_validateEABJWS/fail/nil-jws +=== RUN Test_validateEABJWS/fail/invalid-number-of-signatures === RUN Test_validateEABJWS/fail/url-not-set +=== RUN Test_validateEABJWS/fail/no-outer-jws === RUN Test_validateEABJWS/fail/outer-jws-multiple-signatures +=== RUN Test_validateEABJWS/fail/outer-jws-no-url === RUN Test_validateEABJWS/fail/outer-jws-with-different-url -=== RUN Test_validateEABJWS/ok -=== RUN Test_validateEABJWS/fail/invalid-number-of-signatures -=== RUN Test_validateEABJWS/fail/nonce-not-empty ---- PASS: Test_validateEABJWS (0.01s) - --- PASS: Test_validateEABJWS/fail/no-outer-jws (0.00s) - --- PASS: Test_validateEABJWS/fail/outer-jws-no-url (0.00s) - --- PASS: Test_validateEABJWS/fail/nil-jws (0.00s) +--- PASS: Test_validateEABJWS (0.00s) --- PASS: Test_validateEABJWS/fail/invalid-algorithm (0.00s) --- PASS: Test_validateEABJWS/fail/kid-not-set (0.00s) + --- PASS: Test_validateEABJWS/fail/nonce-not-empty (0.00s) + --- PASS: Test_validateEABJWS/ok (0.00s) + --- PASS: Test_validateEABJWS/fail/nil-jws (0.00s) + --- PASS: Test_validateEABJWS/fail/invalid-number-of-signatures (0.00s) --- PASS: Test_validateEABJWS/fail/url-not-set (0.00s) + --- PASS: Test_validateEABJWS/fail/no-outer-jws (0.00s) --- PASS: Test_validateEABJWS/fail/outer-jws-multiple-signatures (0.00s) + --- PASS: Test_validateEABJWS/fail/outer-jws-no-url (0.00s) --- PASS: Test_validateEABJWS/fail/outer-jws-with-different-url (0.00s) - --- PASS: Test_validateEABJWS/ok (0.00s) - --- PASS: Test_validateEABJWS/fail/invalid-number-of-signatures (0.00s) - --- PASS: Test_validateEABJWS/fail/nonce-not-empty (0.00s) === RUN TestHandler_GetNonce === RUN TestHandler_GetNonce/GET === RUN TestHandler_GetNonce/HEAD @@ -2506,65 +2543,65 @@ --- PASS: TestHandler_GetNonce/GET (0.00s) --- PASS: TestHandler_GetNonce/HEAD (0.00s) === RUN TestHandler_GetDirectory +=== RUN TestHandler_GetDirectory/fail/no-provisioner === RUN TestHandler_GetDirectory/fail/different-provisioner === RUN TestHandler_GetDirectory/ok === RUN TestHandler_GetDirectory/ok/eab-required === RUN TestHandler_GetDirectory/ok/full-meta -=== RUN TestHandler_GetDirectory/fail/no-provisioner --- PASS: TestHandler_GetDirectory (0.00s) + --- PASS: TestHandler_GetDirectory/fail/no-provisioner (0.00s) --- PASS: TestHandler_GetDirectory/fail/different-provisioner (0.00s) --- PASS: TestHandler_GetDirectory/ok (0.00s) --- PASS: TestHandler_GetDirectory/ok/eab-required (0.00s) --- PASS: TestHandler_GetDirectory/ok/full-meta (0.00s) - --- PASS: TestHandler_GetDirectory/fail/no-provisioner (0.00s) === RUN TestHandler_GetAuthorization -=== RUN TestHandler_GetAuthorization/fail/no-account === RUN TestHandler_GetAuthorization/fail/nil-account === RUN TestHandler_GetAuthorization/fail/db.GetAuthorization-error === RUN TestHandler_GetAuthorization/fail/account-id-mismatch === RUN TestHandler_GetAuthorization/fail/db.UpdateAuthorization-error === RUN TestHandler_GetAuthorization/ok +=== RUN TestHandler_GetAuthorization/fail/no-account --- PASS: TestHandler_GetAuthorization (0.00s) - --- PASS: TestHandler_GetAuthorization/fail/no-account (0.00s) --- PASS: TestHandler_GetAuthorization/fail/nil-account (0.00s) --- PASS: TestHandler_GetAuthorization/fail/db.GetAuthorization-error (0.00s) --- PASS: TestHandler_GetAuthorization/fail/account-id-mismatch (0.00s) --- PASS: TestHandler_GetAuthorization/fail/db.UpdateAuthorization-error (0.00s) --- PASS: TestHandler_GetAuthorization/ok (0.00s) + --- PASS: TestHandler_GetAuthorization/fail/no-account (0.00s) === RUN TestHandler_GetCertificate -=== RUN TestHandler_GetCertificate/fail/account-id-mismatch -=== RUN TestHandler_GetCertificate/ok === RUN TestHandler_GetCertificate/fail/no-account === RUN TestHandler_GetCertificate/fail/nil-account === RUN TestHandler_GetCertificate/fail/db.GetCertificate-error +=== RUN TestHandler_GetCertificate/fail/account-id-mismatch +=== RUN TestHandler_GetCertificate/ok --- PASS: TestHandler_GetCertificate (0.00s) - --- PASS: TestHandler_GetCertificate/fail/account-id-mismatch (0.00s) - --- PASS: TestHandler_GetCertificate/ok (0.00s) --- PASS: TestHandler_GetCertificate/fail/no-account (0.00s) --- PASS: TestHandler_GetCertificate/fail/nil-account (0.00s) --- PASS: TestHandler_GetCertificate/fail/db.GetCertificate-error (0.00s) + --- PASS: TestHandler_GetCertificate/fail/account-id-mismatch (0.00s) + --- PASS: TestHandler_GetCertificate/ok (0.00s) === RUN TestHandler_GetChallenge -=== RUN TestHandler_GetChallenge/fail/nil-account -=== RUN TestHandler_GetChallenge/fail/nil-payload -=== RUN TestHandler_GetChallenge/fail/account-id-mismatch === RUN TestHandler_GetChallenge/fail/no-jwk === RUN TestHandler_GetChallenge/fail/validate-challenge-error +=== RUN TestHandler_GetChallenge/fail/nil-payload +=== RUN TestHandler_GetChallenge/fail/account-id-mismatch +=== RUN TestHandler_GetChallenge/fail/nil-jwk === RUN TestHandler_GetChallenge/ok === RUN TestHandler_GetChallenge/fail/no-account +=== RUN TestHandler_GetChallenge/fail/nil-account === RUN TestHandler_GetChallenge/fail/no-payload === RUN TestHandler_GetChallenge/fail/db.GetChallenge-error -=== RUN TestHandler_GetChallenge/fail/nil-jwk --- PASS: TestHandler_GetChallenge (0.00s) - --- PASS: TestHandler_GetChallenge/fail/nil-account (0.00s) - --- PASS: TestHandler_GetChallenge/fail/nil-payload (0.00s) - --- PASS: TestHandler_GetChallenge/fail/account-id-mismatch (0.00s) --- PASS: TestHandler_GetChallenge/fail/no-jwk (0.00s) --- PASS: TestHandler_GetChallenge/fail/validate-challenge-error (0.00s) + --- PASS: TestHandler_GetChallenge/fail/nil-payload (0.00s) + --- PASS: TestHandler_GetChallenge/fail/account-id-mismatch (0.00s) + --- PASS: TestHandler_GetChallenge/fail/nil-jwk (0.00s) --- PASS: TestHandler_GetChallenge/ok (0.00s) --- PASS: TestHandler_GetChallenge/fail/no-account (0.00s) + --- PASS: TestHandler_GetChallenge/fail/nil-account (0.00s) --- PASS: TestHandler_GetChallenge/fail/no-payload (0.00s) --- PASS: TestHandler_GetChallenge/fail/db.GetChallenge-error (0.00s) - --- PASS: TestHandler_GetChallenge/fail/nil-jwk (0.00s) === RUN Test_createMetaObject === RUN Test_createMetaObject/no-meta === RUN Test_createMetaObject/terms-of-service @@ -2580,157 +2617,157 @@ --- PASS: Test_createMetaObject/require-eab (0.00s) --- PASS: Test_createMetaObject/full-meta (0.00s) === RUN TestHandler_addNonce -=== RUN TestHandler_addNonce/fail/AddNonce-error === RUN TestHandler_addNonce/ok +=== RUN TestHandler_addNonce/fail/AddNonce-error --- PASS: TestHandler_addNonce (0.00s) - --- PASS: TestHandler_addNonce/fail/AddNonce-error (0.00s) --- PASS: TestHandler_addNonce/ok (0.00s) + --- PASS: TestHandler_addNonce/fail/AddNonce-error (0.00s) === RUN TestHandler_addDirLink === RUN TestHandler_addDirLink/ok ---- PASS: TestHandler_addDirLink (0.01s) +--- PASS: TestHandler_addDirLink (0.00s) --- PASS: TestHandler_addDirLink/ok (0.00s) === RUN TestHandler_verifyContentType -=== RUN TestHandler_verifyContentType/ok/certificate/pkcs7-mime -=== RUN TestHandler_verifyContentType/fail/provisioner-not-set -=== RUN TestHandler_verifyContentType/fail/general-bad-content-type === RUN TestHandler_verifyContentType/fail/certificate-bad-content-type === RUN TestHandler_verifyContentType/ok === RUN TestHandler_verifyContentType/ok/certificate/pkix-cert === RUN TestHandler_verifyContentType/ok/certificate/jose+json +=== RUN TestHandler_verifyContentType/ok/certificate/pkcs7-mime +=== RUN TestHandler_verifyContentType/fail/provisioner-not-set +=== RUN TestHandler_verifyContentType/fail/general-bad-content-type --- PASS: TestHandler_verifyContentType (0.00s) - --- PASS: TestHandler_verifyContentType/ok/certificate/pkcs7-mime (0.00s) - --- PASS: TestHandler_verifyContentType/fail/provisioner-not-set (0.00s) - --- PASS: TestHandler_verifyContentType/fail/general-bad-content-type (0.00s) --- PASS: TestHandler_verifyContentType/fail/certificate-bad-content-type (0.00s) --- PASS: TestHandler_verifyContentType/ok (0.00s) --- PASS: TestHandler_verifyContentType/ok/certificate/pkix-cert (0.00s) --- PASS: TestHandler_verifyContentType/ok/certificate/jose+json (0.00s) + --- PASS: TestHandler_verifyContentType/ok/certificate/pkcs7-mime (0.00s) + --- PASS: TestHandler_verifyContentType/fail/provisioner-not-set (0.00s) + --- PASS: TestHandler_verifyContentType/fail/general-bad-content-type (0.00s) === RUN TestHandler_isPostAsGet -=== RUN TestHandler_isPostAsGet/fail/not-post-as-get -=== RUN TestHandler_isPostAsGet/ok === RUN TestHandler_isPostAsGet/fail/no-payload === RUN TestHandler_isPostAsGet/fail/nil-payload +=== RUN TestHandler_isPostAsGet/fail/not-post-as-get +=== RUN TestHandler_isPostAsGet/ok --- PASS: TestHandler_isPostAsGet (0.00s) - --- PASS: TestHandler_isPostAsGet/fail/not-post-as-get (0.00s) - --- PASS: TestHandler_isPostAsGet/ok (0.00s) --- PASS: TestHandler_isPostAsGet/fail/no-payload (0.00s) --- PASS: TestHandler_isPostAsGet/fail/nil-payload (0.00s) + --- PASS: TestHandler_isPostAsGet/fail/not-post-as-get (0.00s) + --- PASS: TestHandler_isPostAsGet/ok (0.00s) === RUN TestHandler_parseJWS -=== RUN TestHandler_parseJWS/fail/read-body-error === RUN TestHandler_parseJWS/fail/parse-jws-error === RUN TestHandler_parseJWS/ok +=== RUN TestHandler_parseJWS/fail/read-body-error --- PASS: TestHandler_parseJWS (0.00s) - --- PASS: TestHandler_parseJWS/fail/read-body-error (0.00s) --- PASS: TestHandler_parseJWS/fail/parse-jws-error (0.00s) --- PASS: TestHandler_parseJWS/ok (0.00s) + --- PASS: TestHandler_parseJWS/fail/read-body-error (0.00s) === RUN TestHandler_verifyAndExtractJWSPayload -=== RUN TestHandler_verifyAndExtractJWSPayload/fail/nil-jwk -=== RUN TestHandler_verifyAndExtractJWSPayload/fail/verify-jws-failure-wrong-jwk +=== RUN TestHandler_verifyAndExtractJWSPayload/fail/algorithm-mismatch === RUN TestHandler_verifyAndExtractJWSPayload/ok -=== RUN TestHandler_verifyAndExtractJWSPayload/ok/post-as-get +=== RUN TestHandler_verifyAndExtractJWSPayload/ok/apple-acmeclient-omitting-leading-null-byte-in-signature === RUN TestHandler_verifyAndExtractJWSPayload/fail/no-jws +=== RUN TestHandler_verifyAndExtractJWSPayload/fail/no-jwk +=== RUN TestHandler_verifyAndExtractJWSPayload/fail/nil-jwk +=== RUN TestHandler_verifyAndExtractJWSPayload/ok/empty-algorithm-in-jwk +=== RUN TestHandler_verifyAndExtractJWSPayload/ok/post-as-get +=== RUN TestHandler_verifyAndExtractJWSPayload/ok/empty-json === RUN TestHandler_verifyAndExtractJWSPayload/fail/nil-jws +=== RUN TestHandler_verifyAndExtractJWSPayload/fail/verify-jws-failure-wrong-jwk === RUN TestHandler_verifyAndExtractJWSPayload/fail/verify-jws-failure-too-many-signatures === RUN TestHandler_verifyAndExtractJWSPayload/fail/apple-acmeclient-omitting-leading-null-byte-in-signature-with-wrong-jwk -=== RUN TestHandler_verifyAndExtractJWSPayload/fail/algorithm-mismatch -=== RUN TestHandler_verifyAndExtractJWSPayload/ok/empty-algorithm-in-jwk -=== RUN TestHandler_verifyAndExtractJWSPayload/ok/empty-json -=== RUN TestHandler_verifyAndExtractJWSPayload/ok/apple-acmeclient-omitting-leading-null-byte-in-signature -=== RUN TestHandler_verifyAndExtractJWSPayload/fail/no-jwk ---- PASS: TestHandler_verifyAndExtractJWSPayload (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/nil-jwk (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/verify-jws-failure-wrong-jwk (0.00s) +--- PASS: TestHandler_verifyAndExtractJWSPayload (0.01s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/algorithm-mismatch (0.00s) --- PASS: TestHandler_verifyAndExtractJWSPayload/ok (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/ok/post-as-get (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/ok/apple-acmeclient-omitting-leading-null-byte-in-signature (0.00s) --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/no-jws (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/no-jwk (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/nil-jwk (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/ok/empty-algorithm-in-jwk (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/ok/post-as-get (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/ok/empty-json (0.00s) --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/nil-jws (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/verify-jws-failure-wrong-jwk (0.00s) --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/verify-jws-failure-too-many-signatures (0.00s) --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/apple-acmeclient-omitting-leading-null-byte-in-signature-with-wrong-jwk (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/algorithm-mismatch (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/ok/empty-algorithm-in-jwk (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/ok/empty-json (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/ok/apple-acmeclient-omitting-leading-null-byte-in-signature (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/no-jwk (0.00s) === RUN TestHandler_lookupJWK -=== RUN TestHandler_lookupJWK/ok/account-with-provisioner-id === RUN TestHandler_lookupJWK/fail/no-jws +=== RUN TestHandler_lookupJWK/fail/account-with-location-prefix/bad-provisioner +=== RUN TestHandler_lookupJWK/ok/account-without-location-prefix +=== RUN TestHandler_lookupJWK/ok/account-with-provisioner-id === RUN TestHandler_lookupJWK/fail/nil-jws +=== RUN TestHandler_lookupJWK/fail/no-kid === RUN TestHandler_lookupJWK/fail/account-not-found === RUN TestHandler_lookupJWK/fail/GetAccount-error -=== RUN TestHandler_lookupJWK/fail/account-with-location-prefix/bad-provisioner-id -=== RUN TestHandler_lookupJWK/ok/account-without-location-prefix -=== RUN TestHandler_lookupJWK/fail/no-kid === RUN TestHandler_lookupJWK/fail/account-not-valid === RUN TestHandler_lookupJWK/fail/account-with-location-prefix/bad-kid -=== RUN TestHandler_lookupJWK/fail/account-with-location-prefix/bad-provisioner +=== RUN TestHandler_lookupJWK/fail/account-with-location-prefix/bad-provisioner-id === RUN TestHandler_lookupJWK/ok/account-with-location-prefix --- PASS: TestHandler_lookupJWK (0.00s) - --- PASS: TestHandler_lookupJWK/ok/account-with-provisioner-id (0.00s) --- PASS: TestHandler_lookupJWK/fail/no-jws (0.00s) + --- PASS: TestHandler_lookupJWK/fail/account-with-location-prefix/bad-provisioner (0.00s) + --- PASS: TestHandler_lookupJWK/ok/account-without-location-prefix (0.00s) + --- PASS: TestHandler_lookupJWK/ok/account-with-provisioner-id (0.00s) --- PASS: TestHandler_lookupJWK/fail/nil-jws (0.00s) + --- PASS: TestHandler_lookupJWK/fail/no-kid (0.00s) --- PASS: TestHandler_lookupJWK/fail/account-not-found (0.00s) --- PASS: TestHandler_lookupJWK/fail/GetAccount-error (0.00s) - --- PASS: TestHandler_lookupJWK/fail/account-with-location-prefix/bad-provisioner-id (0.00s) - --- PASS: TestHandler_lookupJWK/ok/account-without-location-prefix (0.00s) - --- PASS: TestHandler_lookupJWK/fail/no-kid (0.00s) --- PASS: TestHandler_lookupJWK/fail/account-not-valid (0.00s) --- PASS: TestHandler_lookupJWK/fail/account-with-location-prefix/bad-kid (0.00s) - --- PASS: TestHandler_lookupJWK/fail/account-with-location-prefix/bad-provisioner (0.00s) + --- PASS: TestHandler_lookupJWK/fail/account-with-location-prefix/bad-provisioner-id (0.00s) --- PASS: TestHandler_lookupJWK/ok/account-with-location-prefix (0.00s) === RUN TestHandler_extractJWK -=== RUN TestHandler_extractJWK/ok -=== RUN TestHandler_extractJWK/ok/no-account === RUN TestHandler_extractJWK/fail/no-jws === RUN TestHandler_extractJWK/fail/nil-jws === RUN TestHandler_extractJWK/fail/nil-jwk === RUN TestHandler_extractJWK/fail/invalid-jwk === RUN TestHandler_extractJWK/fail/GetAccountByKey-error === RUN TestHandler_extractJWK/fail/account-not-valid +=== RUN TestHandler_extractJWK/ok +=== RUN TestHandler_extractJWK/ok/no-account --- PASS: TestHandler_extractJWK (0.00s) - --- PASS: TestHandler_extractJWK/ok (0.00s) - --- PASS: TestHandler_extractJWK/ok/no-account (0.00s) --- PASS: TestHandler_extractJWK/fail/no-jws (0.00s) --- PASS: TestHandler_extractJWK/fail/nil-jws (0.00s) --- PASS: TestHandler_extractJWK/fail/nil-jwk (0.00s) --- PASS: TestHandler_extractJWK/fail/invalid-jwk (0.00s) --- PASS: TestHandler_extractJWK/fail/GetAccountByKey-error (0.00s) --- PASS: TestHandler_extractJWK/fail/account-not-valid (0.00s) + --- PASS: TestHandler_extractJWK/ok (0.00s) + --- PASS: TestHandler_extractJWK/ok/no-account (0.00s) === RUN TestHandler_validateJWS -=== RUN TestHandler_validateJWS/ok/jwk/rsa -=== RUN TestHandler_validateJWS/fail/no-jws +=== RUN TestHandler_validateJWS/fail/more-than-one-signature +=== RUN TestHandler_validateJWS/fail/unprotected-header-not-empty === RUN TestHandler_validateJWS/fail/unsuitable-algorithm-none -=== RUN TestHandler_validateJWS/fail/unsuitable-algorithm-mac +=== RUN TestHandler_validateJWS/fail/UseNonce-error === RUN TestHandler_validateJWS/fail/both-jwk-kid -=== RUN TestHandler_validateJWS/fail/no-jwk-kid +=== RUN TestHandler_validateJWS/ok/jwk/rsa +=== RUN TestHandler_validateJWS/fail/no-jws +=== RUN TestHandler_validateJWS/fail/no-signature === RUN TestHandler_validateJWS/fail/rsa-key-too-small -=== RUN TestHandler_validateJWS/fail/UseNonce-error +=== RUN TestHandler_validateJWS/fail/rsa-key-&-alg-mismatch === RUN TestHandler_validateJWS/fail/no-url-header === RUN TestHandler_validateJWS/fail/url-mismatch +=== RUN TestHandler_validateJWS/fail/no-jwk-kid === RUN TestHandler_validateJWS/ok/kid -=== RUN TestHandler_validateJWS/ok/jwk/ecdsa -=== RUN TestHandler_validateJWS/fail/more-than-one-signature -=== RUN TestHandler_validateJWS/fail/unprotected-header-not-empty -=== RUN TestHandler_validateJWS/fail/rsa-key-&-alg-mismatch === RUN TestHandler_validateJWS/fail/nil-jws -=== RUN TestHandler_validateJWS/fail/no-signature ---- PASS: TestHandler_validateJWS (0.62s) - --- PASS: TestHandler_validateJWS/ok/jwk/rsa (0.00s) - --- PASS: TestHandler_validateJWS/fail/no-jws (0.00s) +=== RUN TestHandler_validateJWS/fail/unsuitable-algorithm-mac +=== RUN TestHandler_validateJWS/ok/jwk/ecdsa +--- PASS: TestHandler_validateJWS (0.30s) + --- PASS: TestHandler_validateJWS/fail/more-than-one-signature (0.00s) + --- PASS: TestHandler_validateJWS/fail/unprotected-header-not-empty (0.00s) --- PASS: TestHandler_validateJWS/fail/unsuitable-algorithm-none (0.00s) - --- PASS: TestHandler_validateJWS/fail/unsuitable-algorithm-mac (0.00s) + --- PASS: TestHandler_validateJWS/fail/UseNonce-error (0.00s) --- PASS: TestHandler_validateJWS/fail/both-jwk-kid (0.00s) - --- PASS: TestHandler_validateJWS/fail/no-jwk-kid (0.00s) + --- PASS: TestHandler_validateJWS/ok/jwk/rsa (0.00s) + --- PASS: TestHandler_validateJWS/fail/no-jws (0.00s) + --- PASS: TestHandler_validateJWS/fail/no-signature (0.00s) --- PASS: TestHandler_validateJWS/fail/rsa-key-too-small (0.00s) - --- PASS: TestHandler_validateJWS/fail/UseNonce-error (0.00s) + --- PASS: TestHandler_validateJWS/fail/rsa-key-&-alg-mismatch (0.00s) --- PASS: TestHandler_validateJWS/fail/no-url-header (0.00s) --- PASS: TestHandler_validateJWS/fail/url-mismatch (0.00s) + --- PASS: TestHandler_validateJWS/fail/no-jwk-kid (0.00s) --- PASS: TestHandler_validateJWS/ok/kid (0.00s) - --- PASS: TestHandler_validateJWS/ok/jwk/ecdsa (0.00s) - --- PASS: TestHandler_validateJWS/fail/more-than-one-signature (0.00s) - --- PASS: TestHandler_validateJWS/fail/unprotected-header-not-empty (0.00s) - --- PASS: TestHandler_validateJWS/fail/rsa-key-&-alg-mismatch (0.00s) --- PASS: TestHandler_validateJWS/fail/nil-jws (0.00s) - --- PASS: TestHandler_validateJWS/fail/no-signature (0.00s) + --- PASS: TestHandler_validateJWS/fail/unsuitable-algorithm-mac (0.00s) + --- PASS: TestHandler_validateJWS/ok/jwk/ecdsa (0.00s) === RUN Test_canExtractJWKFrom === RUN Test_canExtractJWKFrom/no-jws === RUN Test_canExtractJWKFrom/no-signatures @@ -2766,169 +2803,169 @@ --- PASS: Test_retryVerificationWithPatchedSignatures/ok/patched-rs (0.00s) --- PASS: Test_retryVerificationWithPatchedSignatures/fail/patched-r-wrong-jwk (0.00s) === RUN TestNewOrderRequest_Validate -=== RUN TestNewOrderRequest_Validate/fail/bad-identifier/dns-port -=== RUN TestNewOrderRequest_Validate/fail/bad-identifier/wireapp-invalid-uri -=== RUN TestNewOrderRequest_Validate/fail/no-identifiers -=== RUN TestNewOrderRequest_Validate/fail/bad-identifier/dns-wildcard-port -=== RUN TestNewOrderRequest_Validate/ok -=== RUN TestNewOrderRequest_Validate/ok/mixed-ipv4-and-ipv6 === RUN TestNewOrderRequest_Validate/fail/bad-identifier/bad-dns -=== RUN TestNewOrderRequest_Validate/fail/bad-identifier/ip -=== RUN TestNewOrderRequest_Validate/ok/ipv4 -=== RUN TestNewOrderRequest_Validate/ok/mixed-dns-and-ipv4 +=== RUN TestNewOrderRequest_Validate/fail/bad-identifier/dns-wildcard-port +=== RUN TestNewOrderRequest_Validate/fail/bad-identifier/wireapp-invalid-uri === RUN TestNewOrderRequest_Validate/fail/bad-identifier/wireapp-wrong-scheme === RUN TestNewOrderRequest_Validate/fail/bad-identifier/wireapp-invalid-user-parts === RUN TestNewOrderRequest_Validate/ok/ipv6 === RUN TestNewOrderRequest_Validate/ok/wireapp +=== RUN TestNewOrderRequest_Validate/fail/bad-identifier/dns-port +=== RUN TestNewOrderRequest_Validate/fail/bad-identifier/ip +=== RUN TestNewOrderRequest_Validate/ok/ipv4 +=== RUN TestNewOrderRequest_Validate/ok/mixed-ipv4-and-ipv6 +=== RUN TestNewOrderRequest_Validate/fail/no-identifiers +=== RUN TestNewOrderRequest_Validate/ok +=== RUN TestNewOrderRequest_Validate/ok/mixed-dns-and-ipv4 === RUN TestNewOrderRequest_Validate/fail/bad-identifier --- PASS: TestNewOrderRequest_Validate (0.00s) - --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/dns-port (0.00s) - --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/wireapp-invalid-uri (0.00s) - --- PASS: TestNewOrderRequest_Validate/fail/no-identifiers (0.00s) - --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/dns-wildcard-port (0.00s) - --- PASS: TestNewOrderRequest_Validate/ok (0.00s) - --- PASS: TestNewOrderRequest_Validate/ok/mixed-ipv4-and-ipv6 (0.00s) --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/bad-dns (0.00s) - --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/ip (0.00s) - --- PASS: TestNewOrderRequest_Validate/ok/ipv4 (0.00s) - --- PASS: TestNewOrderRequest_Validate/ok/mixed-dns-and-ipv4 (0.00s) + --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/dns-wildcard-port (0.00s) + --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/wireapp-invalid-uri (0.00s) --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/wireapp-wrong-scheme (0.00s) --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/wireapp-invalid-user-parts (0.00s) --- PASS: TestNewOrderRequest_Validate/ok/ipv6 (0.00s) --- PASS: TestNewOrderRequest_Validate/ok/wireapp (0.00s) + --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/dns-port (0.00s) + --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/ip (0.00s) + --- PASS: TestNewOrderRequest_Validate/ok/ipv4 (0.00s) + --- PASS: TestNewOrderRequest_Validate/ok/mixed-ipv4-and-ipv6 (0.00s) + --- PASS: TestNewOrderRequest_Validate/fail/no-identifiers (0.00s) + --- PASS: TestNewOrderRequest_Validate/ok (0.00s) + --- PASS: TestNewOrderRequest_Validate/ok/mixed-dns-and-ipv4 (0.00s) --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier (0.00s) === RUN TestFinalizeRequestValidate === RUN TestFinalizeRequestValidate/fail/parse-csr-error === RUN TestFinalizeRequestValidate/fail/invalid-csr-signature === RUN TestFinalizeRequestValidate/ok === RUN TestFinalizeRequestValidate/ok/padding ---- PASS: TestFinalizeRequestValidate (0.00s) +--- PASS: TestFinalizeRequestValidate (0.05s) --- PASS: TestFinalizeRequestValidate/fail/parse-csr-error (0.00s) --- PASS: TestFinalizeRequestValidate/fail/invalid-csr-signature (0.00s) --- PASS: TestFinalizeRequestValidate/ok (0.00s) --- PASS: TestFinalizeRequestValidate/ok/padding (0.00s) === RUN TestHandler_GetOrder +=== RUN TestHandler_GetOrder/fail/nil-account === RUN TestHandler_GetOrder/fail/no-provisioner -=== RUN TestHandler_GetOrder/fail/account-id-mismatch -=== RUN TestHandler_GetOrder/fail/provisioner-id-mismatch -=== RUN TestHandler_GetOrder/fail/no-account === RUN TestHandler_GetOrder/fail/nil-provisioner -=== RUN TestHandler_GetOrder/fail/db.GetOrder-error +=== RUN TestHandler_GetOrder/fail/provisioner-id-mismatch === RUN TestHandler_GetOrder/fail/order-update-error === RUN TestHandler_GetOrder/ok -=== RUN TestHandler_GetOrder/fail/nil-account ---- PASS: TestHandler_GetOrder (0.01s) +=== RUN TestHandler_GetOrder/fail/no-account +=== RUN TestHandler_GetOrder/fail/db.GetOrder-error +=== RUN TestHandler_GetOrder/fail/account-id-mismatch +--- PASS: TestHandler_GetOrder (0.00s) + --- PASS: TestHandler_GetOrder/fail/nil-account (0.00s) --- PASS: TestHandler_GetOrder/fail/no-provisioner (0.00s) - --- PASS: TestHandler_GetOrder/fail/account-id-mismatch (0.00s) - --- PASS: TestHandler_GetOrder/fail/provisioner-id-mismatch (0.00s) - --- PASS: TestHandler_GetOrder/fail/no-account (0.00s) --- PASS: TestHandler_GetOrder/fail/nil-provisioner (0.00s) - --- PASS: TestHandler_GetOrder/fail/db.GetOrder-error (0.00s) + --- PASS: TestHandler_GetOrder/fail/provisioner-id-mismatch (0.00s) --- PASS: TestHandler_GetOrder/fail/order-update-error (0.00s) --- PASS: TestHandler_GetOrder/ok (0.00s) - --- PASS: TestHandler_GetOrder/fail/nil-account (0.00s) + --- PASS: TestHandler_GetOrder/fail/no-account (0.00s) + --- PASS: TestHandler_GetOrder/fail/db.GetOrder-error (0.00s) + --- PASS: TestHandler_GetOrder/fail/account-id-mismatch (0.00s) === RUN TestHandler_newAuthorization +=== RUN TestHandler_newAuthorization/fail/error-db.CreateChallenge === RUN TestHandler_newAuthorization/fail/error-db.CreateAuthorization +=== RUN TestHandler_newAuthorization/fail/wireapp-device-parse-client-id +=== RUN TestHandler_newAuthorization/fail/wireapp-device-options +=== RUN TestHandler_newAuthorization/ok/permanent-identifier-disabled +=== RUN TestHandler_newAuthorization/ok/permanent-identifier-enabled +=== RUN TestHandler_newAuthorization/ok/wireapp-device +=== RUN TestHandler_newAuthorization/fail/wireapp-user-options === RUN TestHandler_newAuthorization/fail/wireapp-device-parse-id === RUN TestHandler_newAuthorization/ok/no-wildcard === RUN TestHandler_newAuthorization/ok/wildcard -=== RUN TestHandler_newAuthorization/ok/permanent-identifier-disabled === RUN TestHandler_newAuthorization/ok/wireapp-user -=== RUN TestHandler_newAuthorization/ok/wireapp-device -=== RUN TestHandler_newAuthorization/fail/wireapp-user-options -=== RUN TestHandler_newAuthorization/fail/wireapp-device-parse-client-id -=== RUN TestHandler_newAuthorization/fail/wireapp-device-options -=== RUN TestHandler_newAuthorization/ok/permanent-identifier-enabled -=== RUN TestHandler_newAuthorization/fail/error-db.CreateChallenge --- PASS: TestHandler_newAuthorization (0.00s) + --- PASS: TestHandler_newAuthorization/fail/error-db.CreateChallenge (0.00s) --- PASS: TestHandler_newAuthorization/fail/error-db.CreateAuthorization (0.00s) + --- PASS: TestHandler_newAuthorization/fail/wireapp-device-parse-client-id (0.00s) + --- PASS: TestHandler_newAuthorization/fail/wireapp-device-options (0.00s) + --- PASS: TestHandler_newAuthorization/ok/permanent-identifier-disabled (0.00s) + --- PASS: TestHandler_newAuthorization/ok/permanent-identifier-enabled (0.00s) + --- PASS: TestHandler_newAuthorization/ok/wireapp-device (0.00s) + --- PASS: TestHandler_newAuthorization/fail/wireapp-user-options (0.00s) --- PASS: TestHandler_newAuthorization/fail/wireapp-device-parse-id (0.00s) --- PASS: TestHandler_newAuthorization/ok/no-wildcard (0.00s) --- PASS: TestHandler_newAuthorization/ok/wildcard (0.00s) - --- PASS: TestHandler_newAuthorization/ok/permanent-identifier-disabled (0.00s) --- PASS: TestHandler_newAuthorization/ok/wireapp-user (0.00s) - --- PASS: TestHandler_newAuthorization/ok/wireapp-device (0.00s) - --- PASS: TestHandler_newAuthorization/fail/wireapp-user-options (0.00s) - --- PASS: TestHandler_newAuthorization/fail/wireapp-device-parse-client-id (0.00s) - --- PASS: TestHandler_newAuthorization/fail/wireapp-device-options (0.00s) - --- PASS: TestHandler_newAuthorization/ok/permanent-identifier-enabled (0.00s) - --- PASS: TestHandler_newAuthorization/fail/error-db.CreateChallenge (0.00s) === RUN TestHandler_NewOrder -=== RUN TestHandler_NewOrder/fail/nil-payload -=== RUN TestHandler_NewOrder/fail/db.GetExternalAccountKeyByAccountID-error -=== RUN TestHandler_NewOrder/fail/ca.AreSANsAllowed-error -=== RUN TestHandler_NewOrder/fail/error-h.newAuthorization -=== RUN TestHandler_NewOrder/ok/default-naf-nbf -=== RUN TestHandler_NewOrder/ok/default-naf-nbf-with-policy -=== RUN TestHandler_NewOrder/fail/no-account +=== RUN TestHandler_NewOrder/fail/unmarshal-payload-error +=== RUN TestHandler_NewOrder/fail/malformed-payload-error +=== RUN TestHandler_NewOrder/ok/default-naf-nbf-wireapp === RUN TestHandler_NewOrder/fail/nil-account -=== RUN TestHandler_NewOrder/fail/error-db.CreateOrder +=== RUN TestHandler_NewOrder/fail/isIdentifierAllowed-error === RUN TestHandler_NewOrder/ok/multiple-authz -=== RUN TestHandler_NewOrder/ok/nbf-no-naf === RUN TestHandler_NewOrder/ok/naf-no-nbf -=== RUN TestHandler_NewOrder/ok/default-naf-nbf-wireapp -=== RUN TestHandler_NewOrder/fail/no-payload -=== RUN TestHandler_NewOrder/fail/malformed-payload-error -=== RUN TestHandler_NewOrder/fail/isIdentifierAllowed-error -=== RUN TestHandler_NewOrder/fail/prov.AuthorizeOrderIdentifier-error === RUN TestHandler_NewOrder/ok/naf-nbf === RUN TestHandler_NewOrder/fail/no-provisioner === RUN TestHandler_NewOrder/fail/nil-provisioner -=== RUN TestHandler_NewOrder/fail/unmarshal-payload-error +=== RUN TestHandler_NewOrder/fail/nil-payload === RUN TestHandler_NewOrder/fail/acmeProvisionerFromContext-error +=== RUN TestHandler_NewOrder/fail/prov.AuthorizeOrderIdentifier-error +=== RUN TestHandler_NewOrder/fail/ca.AreSANsAllowed-error +=== RUN TestHandler_NewOrder/fail/error-db.CreateOrder +=== RUN TestHandler_NewOrder/ok/nbf-no-naf +=== RUN TestHandler_NewOrder/fail/no-account +=== RUN TestHandler_NewOrder/fail/db.GetExternalAccountKeyByAccountID-error === RUN TestHandler_NewOrder/fail/newACMEPolicyEngine-error +=== RUN TestHandler_NewOrder/fail/error-h.newAuthorization +=== RUN TestHandler_NewOrder/ok/default-naf-nbf +=== RUN TestHandler_NewOrder/ok/default-naf-nbf-with-policy +=== RUN TestHandler_NewOrder/fail/no-payload --- PASS: TestHandler_NewOrder (0.01s) - --- PASS: TestHandler_NewOrder/fail/nil-payload (0.00s) - --- PASS: TestHandler_NewOrder/fail/db.GetExternalAccountKeyByAccountID-error (0.00s) - --- PASS: TestHandler_NewOrder/fail/ca.AreSANsAllowed-error (0.00s) - --- PASS: TestHandler_NewOrder/fail/error-h.newAuthorization (0.00s) - --- PASS: TestHandler_NewOrder/ok/default-naf-nbf (0.00s) - --- PASS: TestHandler_NewOrder/ok/default-naf-nbf-with-policy (0.00s) - --- PASS: TestHandler_NewOrder/fail/no-account (0.00s) + --- PASS: TestHandler_NewOrder/fail/unmarshal-payload-error (0.00s) + --- PASS: TestHandler_NewOrder/fail/malformed-payload-error (0.00s) + --- PASS: TestHandler_NewOrder/ok/default-naf-nbf-wireapp (0.00s) --- PASS: TestHandler_NewOrder/fail/nil-account (0.00s) - --- PASS: TestHandler_NewOrder/fail/error-db.CreateOrder (0.00s) + --- PASS: TestHandler_NewOrder/fail/isIdentifierAllowed-error (0.00s) --- PASS: TestHandler_NewOrder/ok/multiple-authz (0.00s) - --- PASS: TestHandler_NewOrder/ok/nbf-no-naf (0.00s) --- PASS: TestHandler_NewOrder/ok/naf-no-nbf (0.00s) - --- PASS: TestHandler_NewOrder/ok/default-naf-nbf-wireapp (0.00s) - --- PASS: TestHandler_NewOrder/fail/no-payload (0.00s) - --- PASS: TestHandler_NewOrder/fail/malformed-payload-error (0.00s) - --- PASS: TestHandler_NewOrder/fail/isIdentifierAllowed-error (0.00s) - --- PASS: TestHandler_NewOrder/fail/prov.AuthorizeOrderIdentifier-error (0.00s) --- PASS: TestHandler_NewOrder/ok/naf-nbf (0.00s) --- PASS: TestHandler_NewOrder/fail/no-provisioner (0.00s) --- PASS: TestHandler_NewOrder/fail/nil-provisioner (0.00s) - --- PASS: TestHandler_NewOrder/fail/unmarshal-payload-error (0.00s) + --- PASS: TestHandler_NewOrder/fail/nil-payload (0.00s) --- PASS: TestHandler_NewOrder/fail/acmeProvisionerFromContext-error (0.00s) + --- PASS: TestHandler_NewOrder/fail/prov.AuthorizeOrderIdentifier-error (0.00s) + --- PASS: TestHandler_NewOrder/fail/ca.AreSANsAllowed-error (0.00s) + --- PASS: TestHandler_NewOrder/fail/error-db.CreateOrder (0.00s) + --- PASS: TestHandler_NewOrder/ok/nbf-no-naf (0.00s) + --- PASS: TestHandler_NewOrder/fail/no-account (0.00s) + --- PASS: TestHandler_NewOrder/fail/db.GetExternalAccountKeyByAccountID-error (0.00s) --- PASS: TestHandler_NewOrder/fail/newACMEPolicyEngine-error (0.00s) + --- PASS: TestHandler_NewOrder/fail/error-h.newAuthorization (0.00s) + --- PASS: TestHandler_NewOrder/ok/default-naf-nbf (0.00s) + --- PASS: TestHandler_NewOrder/ok/default-naf-nbf-with-policy (0.00s) + --- PASS: TestHandler_NewOrder/fail/no-payload (0.00s) === RUN TestHandler_FinalizeOrder +=== RUN TestHandler_FinalizeOrder/fail/nil-account +=== RUN TestHandler_FinalizeOrder/fail/no-provisioner === RUN TestHandler_FinalizeOrder/fail/no-payload === RUN TestHandler_FinalizeOrder/fail/unmarshal-payload-error === RUN TestHandler_FinalizeOrder/fail/malformed-payload-error -=== RUN TestHandler_FinalizeOrder/fail/account-id-mismatch -=== RUN TestHandler_FinalizeOrder/fail/nil-payload -=== RUN TestHandler_FinalizeOrder/fail/db.GetOrder-error === RUN TestHandler_FinalizeOrder/fail/provisioner-id-mismatch === RUN TestHandler_FinalizeOrder/fail/order-finalize-error -=== RUN TestHandler_FinalizeOrder/ok === RUN TestHandler_FinalizeOrder/fail/no-account -=== RUN TestHandler_FinalizeOrder/fail/nil-account -=== RUN TestHandler_FinalizeOrder/fail/no-provisioner === RUN TestHandler_FinalizeOrder/fail/nil-provisioner +=== RUN TestHandler_FinalizeOrder/fail/nil-payload +=== RUN TestHandler_FinalizeOrder/fail/db.GetOrder-error +=== RUN TestHandler_FinalizeOrder/fail/account-id-mismatch +=== RUN TestHandler_FinalizeOrder/ok --- PASS: TestHandler_FinalizeOrder (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/nil-account (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/no-provisioner (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/no-payload (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/unmarshal-payload-error (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/malformed-payload-error (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/account-id-mismatch (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/nil-payload (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/db.GetOrder-error (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/provisioner-id-mismatch (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/order-finalize-error (0.00s) - --- PASS: TestHandler_FinalizeOrder/ok (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/no-account (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/nil-account (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/no-provisioner (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/nil-provisioner (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/nil-payload (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/db.GetOrder-error (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/account-id-mismatch (0.00s) + --- PASS: TestHandler_FinalizeOrder/ok (0.00s) === RUN TestHandler_challengeTypes === RUN TestHandler_challengeTypes/ok/dns === RUN TestHandler_challengeTypes/ok/wildcard @@ -2984,120 +3021,120 @@ --- PASS: Test_revokeOptions/ok/no-reasoncode (0.00s) --- PASS: Test_revokeOptions/ok/including-reasoncode (0.00s) === RUN TestHandler_RevokeCert -=== RUN TestHandler_RevokeCert/fail/no-jws +=== RUN TestHandler_RevokeCert/fail/no-payload +=== RUN TestHandler_RevokeCert/fail/nil-payload === RUN TestHandler_RevokeCert/fail/unmarshal-payload -=== RUN TestHandler_RevokeCert/fail/wrong-certificate-encoding === RUN TestHandler_RevokeCert/fail/db.GetCertificateBySerial +=== RUN TestHandler_RevokeCert/fail/no-account +=== RUN TestHandler_RevokeCert/fail/wrong-certificate-encoding +=== RUN TestHandler_RevokeCert/fail/different-certificate-contents +=== RUN TestHandler_RevokeCert/fail/account-not-valid +=== RUN TestHandler_RevokeCert/fail/unauthorized-certificate-key +=== RUN TestHandler_RevokeCert/fail/certificate-already-revoked +=== RUN TestHandler_RevokeCert/fail/ca.Revoke-already-revoked +=== RUN TestHandler_RevokeCert/fail/no-certificate-encoded +=== RUN TestHandler_RevokeCert/fail/certificate-revoked-check-fails +=== RUN TestHandler_RevokeCert/fail/invalid-reasoncode === RUN TestHandler_RevokeCert/fail/prov.AuthorizeRevoke -=== RUN TestHandler_RevokeCert/fail/ca.Revoke === RUN TestHandler_RevokeCert/ok/using-account-key -=== RUN TestHandler_RevokeCert/fail/nil-jws === RUN TestHandler_RevokeCert/fail/no-provisioner -=== RUN TestHandler_RevokeCert/fail/nil-provisioner -=== RUN TestHandler_RevokeCert/fail/ca.Revoke-already-revoked -=== RUN TestHandler_RevokeCert/fail/no-certificate-encoded -=== RUN TestHandler_RevokeCert/fail/different-certificate-contents -=== RUN TestHandler_RevokeCert/fail/no-account +=== RUN TestHandler_RevokeCert/fail/nil-account === RUN TestHandler_RevokeCert/fail/account-not-authorized -=== RUN TestHandler_RevokeCert/fail/certificate-already-revoked -=== RUN TestHandler_RevokeCert/fail/invalid-reasoncode +=== RUN TestHandler_RevokeCert/fail/ca.Revoke === RUN TestHandler_RevokeCert/ok/using-certificate-key -=== RUN TestHandler_RevokeCert/fail/no-payload -=== RUN TestHandler_RevokeCert/fail/nil-payload -=== RUN TestHandler_RevokeCert/fail/nil-account -=== RUN TestHandler_RevokeCert/fail/account-not-valid -=== RUN TestHandler_RevokeCert/fail/unauthorized-certificate-key -=== RUN TestHandler_RevokeCert/fail/certificate-revoked-check-fails +=== RUN TestHandler_RevokeCert/fail/no-jws +=== RUN TestHandler_RevokeCert/fail/nil-jws +=== RUN TestHandler_RevokeCert/fail/nil-provisioner --- PASS: TestHandler_RevokeCert (0.01s) - --- PASS: TestHandler_RevokeCert/fail/no-jws (0.00s) + --- PASS: TestHandler_RevokeCert/fail/no-payload (0.00s) + --- PASS: TestHandler_RevokeCert/fail/nil-payload (0.00s) --- PASS: TestHandler_RevokeCert/fail/unmarshal-payload (0.00s) - --- PASS: TestHandler_RevokeCert/fail/wrong-certificate-encoding (0.00s) --- PASS: TestHandler_RevokeCert/fail/db.GetCertificateBySerial (0.00s) + --- PASS: TestHandler_RevokeCert/fail/no-account (0.00s) + --- PASS: TestHandler_RevokeCert/fail/wrong-certificate-encoding (0.00s) + --- PASS: TestHandler_RevokeCert/fail/different-certificate-contents (0.00s) + --- PASS: TestHandler_RevokeCert/fail/account-not-valid (0.00s) + --- PASS: TestHandler_RevokeCert/fail/unauthorized-certificate-key (0.00s) + --- PASS: TestHandler_RevokeCert/fail/certificate-already-revoked (0.00s) + --- PASS: TestHandler_RevokeCert/fail/ca.Revoke-already-revoked (0.00s) + --- PASS: TestHandler_RevokeCert/fail/no-certificate-encoded (0.00s) + --- PASS: TestHandler_RevokeCert/fail/certificate-revoked-check-fails (0.00s) + --- PASS: TestHandler_RevokeCert/fail/invalid-reasoncode (0.00s) --- PASS: TestHandler_RevokeCert/fail/prov.AuthorizeRevoke (0.00s) - --- PASS: TestHandler_RevokeCert/fail/ca.Revoke (0.00s) --- PASS: TestHandler_RevokeCert/ok/using-account-key (0.00s) - --- PASS: TestHandler_RevokeCert/fail/nil-jws (0.00s) --- PASS: TestHandler_RevokeCert/fail/no-provisioner (0.00s) - --- PASS: TestHandler_RevokeCert/fail/nil-provisioner (0.00s) - --- PASS: TestHandler_RevokeCert/fail/ca.Revoke-already-revoked (0.00s) - --- PASS: TestHandler_RevokeCert/fail/no-certificate-encoded (0.00s) - --- PASS: TestHandler_RevokeCert/fail/different-certificate-contents (0.00s) - --- PASS: TestHandler_RevokeCert/fail/no-account (0.00s) + --- PASS: TestHandler_RevokeCert/fail/nil-account (0.00s) --- PASS: TestHandler_RevokeCert/fail/account-not-authorized (0.00s) - --- PASS: TestHandler_RevokeCert/fail/certificate-already-revoked (0.00s) - --- PASS: TestHandler_RevokeCert/fail/invalid-reasoncode (0.00s) + --- PASS: TestHandler_RevokeCert/fail/ca.Revoke (0.00s) --- PASS: TestHandler_RevokeCert/ok/using-certificate-key (0.00s) - --- PASS: TestHandler_RevokeCert/fail/no-payload (0.00s) - --- PASS: TestHandler_RevokeCert/fail/nil-payload (0.00s) - --- PASS: TestHandler_RevokeCert/fail/nil-account (0.00s) - --- PASS: TestHandler_RevokeCert/fail/account-not-valid (0.00s) - --- PASS: TestHandler_RevokeCert/fail/unauthorized-certificate-key (0.00s) - --- PASS: TestHandler_RevokeCert/fail/certificate-revoked-check-fails (0.00s) + --- PASS: TestHandler_RevokeCert/fail/no-jws (0.00s) + --- PASS: TestHandler_RevokeCert/fail/nil-jws (0.00s) + --- PASS: TestHandler_RevokeCert/fail/nil-provisioner (0.00s) === RUN TestHandler_isAccountAuthorized +=== RUN TestHandler_isAccountAuthorized/fail/account-invalid === RUN TestHandler_isAccountAuthorized/fail/different-account === RUN TestHandler_isAccountAuthorized/ok -=== RUN TestHandler_isAccountAuthorized/fail/account-invalid --- PASS: TestHandler_isAccountAuthorized (0.00s) + --- PASS: TestHandler_isAccountAuthorized/fail/account-invalid (0.00s) --- PASS: TestHandler_isAccountAuthorized/fail/different-account (0.00s) --- PASS: TestHandler_isAccountAuthorized/ok (0.00s) - --- PASS: TestHandler_isAccountAuthorized/fail/account-invalid (0.00s) === RUN Test_wrapUnauthorizedError -=== RUN Test_wrapUnauthorizedError/unauthorizedIdentifiers === RUN Test_wrapUnauthorizedError/subject === RUN Test_wrapUnauthorizedError/wrap-subject === RUN Test_wrapUnauthorizedError/default +=== RUN Test_wrapUnauthorizedError/unauthorizedIdentifiers --- PASS: Test_wrapUnauthorizedError (0.00s) - --- PASS: Test_wrapUnauthorizedError/unauthorizedIdentifiers (0.00s) --- PASS: Test_wrapUnauthorizedError/subject (0.00s) --- PASS: Test_wrapUnauthorizedError/wrap-subject (0.00s) --- PASS: Test_wrapUnauthorizedError/default (0.00s) + --- PASS: Test_wrapUnauthorizedError/unauthorizedIdentifiers (0.00s) === RUN TestWireIntegration - wire_integration_test.go:137: database file name: /tmp/integration-db-2567767120 + wire_integration_test.go:137: database file name: /tmp/integration-db-4176433898 wire_integration_test.go:190: directory: {https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-nonce https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-account https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-order https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/revoke-cert https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/key-change } - wire_integration_test.go:203: nonce: T0JNcFNzdVpMZGt6b0xMSEFvY3BxQ3JNeDBzOGRxc2w - wire_integration_test.go:237: account ID: jq1EgzKgw5oNK4q1BrnP8noeTV4lfQk7 - wire_integration_test.go:278: authzs IDs: [nHZTkXzOAMEm0mEBRXyATvQhwnvUXu8g 4NaD3iel2cuKKoYEzo38fCk12aHW2fqY] - wire_integration_test.go:428: challenge: yIT1kPe7K5SIS8HySD0kaSeZrvknByms invalid - wire_integration_test.go:428: challenge: hwxtfnaMJJ81zpNC0NYh6SNLmZ2d6FyW invalid - wire_integration_test.go:452: updated challenge: yIT1kPe7K5SIS8HySD0kaSeZrvknByms valid - wire_integration_test.go:452: updated challenge: hwxtfnaMJJ81zpNC0NYh6SNLmZ2d6FyW valid + wire_integration_test.go:203: nonce: T3NxOXhRQ2psR0pqa1ZzTWRjWTF0SXVCNUNyVmRBcVo + wire_integration_test.go:237: account ID: bDA9Ip8JplKOUeayZTgs4oXv8svyTD5w + wire_integration_test.go:278: authzs IDs: [ljzs9bGhuKJqp6yFM1PvRsI9vRetRlni QkD6aWO6pQqxn86UzK1ct2IlrMvjCnkc] + wire_integration_test.go:428: challenge: Cpfpe3Scijc1WjMN33Yc8WHtgydC22Wk invalid + wire_integration_test.go:428: challenge: hL9QrdvU4Hhxegw8hAgg0n7BXHlDiS3m invalid + wire_integration_test.go:452: updated challenge: Cpfpe3Scijc1WjMN33Yc8WHtgydC22Wk valid + wire_integration_test.go:452: updated challenge: hL9QrdvU4Hhxegw8hAgg0n7BXHlDiS3m valid wire_integration_test.go:490: updated order status: ready wire_integration_test.go:587: finalized order status: valid ---- PASS: TestWireIntegration (0.09s) +--- PASS: TestWireIntegration (7.29s) PASS -ok github.com/smallstep/certificates/acme/api 0.859s +ok github.com/smallstep/certificates/acme/api 7.763s === RUN TestDB_getDBAccount -=== RUN TestDB_getDBAccount/ok === RUN TestDB_getDBAccount/fail/not-found === RUN TestDB_getDBAccount/fail/db.Get-error === RUN TestDB_getDBAccount/fail/unmarshal-error +=== RUN TestDB_getDBAccount/ok --- PASS: TestDB_getDBAccount (0.00s) - --- PASS: TestDB_getDBAccount/ok (0.00s) --- PASS: TestDB_getDBAccount/fail/not-found (0.00s) --- PASS: TestDB_getDBAccount/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBAccount/fail/unmarshal-error (0.00s) + --- PASS: TestDB_getDBAccount/ok (0.00s) === RUN TestDB_getAccountIDByKeyID -=== RUN TestDB_getAccountIDByKeyID/fail/not-found === RUN TestDB_getAccountIDByKeyID/fail/db.Get-error === RUN TestDB_getAccountIDByKeyID/ok +=== RUN TestDB_getAccountIDByKeyID/fail/not-found --- PASS: TestDB_getAccountIDByKeyID (0.00s) - --- PASS: TestDB_getAccountIDByKeyID/fail/not-found (0.00s) --- PASS: TestDB_getAccountIDByKeyID/fail/db.Get-error (0.00s) --- PASS: TestDB_getAccountIDByKeyID/ok (0.00s) + --- PASS: TestDB_getAccountIDByKeyID/fail/not-found (0.00s) === RUN TestDB_GetAccount -=== RUN TestDB_GetAccount/fail/db.Get-error === RUN TestDB_GetAccount/ok +=== RUN TestDB_GetAccount/fail/db.Get-error --- PASS: TestDB_GetAccount (0.00s) - --- PASS: TestDB_GetAccount/fail/db.Get-error (0.00s) --- PASS: TestDB_GetAccount/ok (0.00s) + --- PASS: TestDB_GetAccount/fail/db.Get-error (0.00s) === RUN TestDB_GetAccountByKeyID +=== RUN TestDB_GetAccountByKeyID/fail/db.getAccountIDByKeyID-error === RUN TestDB_GetAccountByKeyID/fail/db.GetAccount-error === RUN TestDB_GetAccountByKeyID/ok -=== RUN TestDB_GetAccountByKeyID/fail/db.getAccountIDByKeyID-error --- PASS: TestDB_GetAccountByKeyID (0.00s) + --- PASS: TestDB_GetAccountByKeyID/fail/db.getAccountIDByKeyID-error (0.00s) --- PASS: TestDB_GetAccountByKeyID/fail/db.GetAccount-error (0.00s) --- PASS: TestDB_GetAccountByKeyID/ok (0.00s) - --- PASS: TestDB_GetAccountByKeyID/fail/db.getAccountIDByKeyID-error (0.00s) === RUN TestDB_CreateAccount === RUN TestDB_CreateAccount/fail/keyID-cmpAndSwap-error === RUN TestDB_CreateAccount/fail/keyID-cmpAndSwap-false @@ -3109,15 +3146,15 @@ --- PASS: TestDB_CreateAccount/fail/account-save-error (0.00s) --- PASS: TestDB_CreateAccount/ok (0.00s) === RUN TestDB_UpdateAccount -=== RUN TestDB_UpdateAccount/ok -=== RUN TestDB_UpdateAccount/fail/db.Get-error === RUN TestDB_UpdateAccount/fail/already-deactivated === RUN TestDB_UpdateAccount/fail/db.CmpAndSwap-error +=== RUN TestDB_UpdateAccount/ok +=== RUN TestDB_UpdateAccount/fail/db.Get-error --- PASS: TestDB_UpdateAccount (0.00s) - --- PASS: TestDB_UpdateAccount/ok (0.00s) - --- PASS: TestDB_UpdateAccount/fail/db.Get-error (0.00s) --- PASS: TestDB_UpdateAccount/fail/already-deactivated (0.00s) --- PASS: TestDB_UpdateAccount/fail/db.CmpAndSwap-error (0.00s) + --- PASS: TestDB_UpdateAccount/ok (0.00s) + --- PASS: TestDB_UpdateAccount/fail/db.Get-error (0.00s) === RUN TestDB_getDBAuthz === RUN TestDB_getDBAuthz/fail/not-found === RUN TestDB_getDBAuthz/fail/db.Get-error @@ -3155,15 +3192,15 @@ --- PASS: TestDB_UpdateAuthorization/fail/db.CmpAndSwap-error (0.00s) --- PASS: TestDB_UpdateAuthorization/ok (0.00s) === RUN TestDB_GetAuthorizationsByAccountID -=== RUN TestDB_GetAuthorizationsByAccountID/fail/db.List-error === RUN TestDB_GetAuthorizationsByAccountID/fail/unmarshal === RUN TestDB_GetAuthorizationsByAccountID/ok === RUN TestDB_GetAuthorizationsByAccountID/ok/skip-different-account +=== RUN TestDB_GetAuthorizationsByAccountID/fail/db.List-error --- PASS: TestDB_GetAuthorizationsByAccountID (0.00s) - --- PASS: TestDB_GetAuthorizationsByAccountID/fail/db.List-error (0.00s) --- PASS: TestDB_GetAuthorizationsByAccountID/fail/unmarshal (0.00s) --- PASS: TestDB_GetAuthorizationsByAccountID/ok (0.00s) --- PASS: TestDB_GetAuthorizationsByAccountID/ok/skip-different-account (0.00s) + --- PASS: TestDB_GetAuthorizationsByAccountID/fail/db.List-error (0.00s) === RUN TestDB_CreateCertificate === RUN TestDB_CreateCertificate/fail/cmpAndSwap-error === RUN TestDB_CreateCertificate/ok @@ -3171,47 +3208,47 @@ --- PASS: TestDB_CreateCertificate/fail/cmpAndSwap-error (0.00s) --- PASS: TestDB_CreateCertificate/ok (0.00s) === RUN TestDB_GetCertificate +=== RUN TestDB_GetCertificate/ok +=== RUN TestDB_GetCertificate/fail/not-found === RUN TestDB_GetCertificate/fail/db.Get-error === RUN TestDB_GetCertificate/fail/unmarshal-error === RUN TestDB_GetCertificate/fail/parseBundle-error -=== RUN TestDB_GetCertificate/ok -=== RUN TestDB_GetCertificate/fail/not-found --- PASS: TestDB_GetCertificate (0.00s) + --- PASS: TestDB_GetCertificate/ok (0.00s) + --- PASS: TestDB_GetCertificate/fail/not-found (0.00s) --- PASS: TestDB_GetCertificate/fail/db.Get-error (0.00s) --- PASS: TestDB_GetCertificate/fail/unmarshal-error (0.00s) --- PASS: TestDB_GetCertificate/fail/parseBundle-error (0.00s) - --- PASS: TestDB_GetCertificate/ok (0.00s) - --- PASS: TestDB_GetCertificate/fail/not-found (0.00s) === RUN Test_parseBundle -=== RUN Test_parseBundle/ok -=== RUN Test_parseBundle/fail/bad-type-error === RUN Test_parseBundle/fail/bad-pem-error === RUN Test_parseBundle/fail/unexpected-data +=== RUN Test_parseBundle/ok +=== RUN Test_parseBundle/fail/bad-type-error --- PASS: Test_parseBundle (0.00s) - --- PASS: Test_parseBundle/ok (0.00s) - --- PASS: Test_parseBundle/fail/bad-type-error (0.00s) --- PASS: Test_parseBundle/fail/bad-pem-error (0.00s) --- PASS: Test_parseBundle/fail/unexpected-data (0.00s) + --- PASS: Test_parseBundle/ok (0.00s) + --- PASS: Test_parseBundle/fail/bad-type-error (0.00s) === RUN TestDB_GetCertificateBySerial -=== RUN TestDB_GetCertificateBySerial/ok === RUN TestDB_GetCertificateBySerial/fail/not-found === RUN TestDB_GetCertificateBySerial/fail/db-error === RUN TestDB_GetCertificateBySerial/fail/unmarshal-dbSerial +=== RUN TestDB_GetCertificateBySerial/ok --- PASS: TestDB_GetCertificateBySerial (0.00s) - --- PASS: TestDB_GetCertificateBySerial/ok (0.00s) --- PASS: TestDB_GetCertificateBySerial/fail/not-found (0.00s) --- PASS: TestDB_GetCertificateBySerial/fail/db-error (0.00s) --- PASS: TestDB_GetCertificateBySerial/fail/unmarshal-dbSerial (0.00s) + --- PASS: TestDB_GetCertificateBySerial/ok (0.00s) === RUN TestDB_getDBChallenge -=== RUN TestDB_getDBChallenge/fail/db.Get-error === RUN TestDB_getDBChallenge/fail/unmarshal-error === RUN TestDB_getDBChallenge/ok === RUN TestDB_getDBChallenge/fail/not-found +=== RUN TestDB_getDBChallenge/fail/db.Get-error --- PASS: TestDB_getDBChallenge (0.00s) - --- PASS: TestDB_getDBChallenge/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBChallenge/fail/unmarshal-error (0.00s) --- PASS: TestDB_getDBChallenge/ok (0.00s) --- PASS: TestDB_getDBChallenge/fail/not-found (0.00s) + --- PASS: TestDB_getDBChallenge/fail/db.Get-error (0.00s) === RUN TestDB_CreateChallenge === RUN TestDB_CreateChallenge/fail/cmpAndSwap-error === RUN TestDB_CreateChallenge/ok @@ -3219,31 +3256,31 @@ --- PASS: TestDB_CreateChallenge/fail/cmpAndSwap-error (0.00s) --- PASS: TestDB_CreateChallenge/ok (0.00s) === RUN TestDB_GetChallenge +=== RUN TestDB_GetChallenge/fail/db.Get-error === RUN TestDB_GetChallenge/fail/forward-acme-error === RUN TestDB_GetChallenge/ok -=== RUN TestDB_GetChallenge/fail/db.Get-error --- PASS: TestDB_GetChallenge (0.00s) + --- PASS: TestDB_GetChallenge/fail/db.Get-error (0.00s) --- PASS: TestDB_GetChallenge/fail/forward-acme-error (0.00s) --- PASS: TestDB_GetChallenge/ok (0.00s) - --- PASS: TestDB_GetChallenge/fail/db.Get-error (0.00s) === RUN TestDB_UpdateChallenge -=== RUN TestDB_UpdateChallenge/fail/db.Get-error === RUN TestDB_UpdateChallenge/fail/db.CmpAndSwap-error === RUN TestDB_UpdateChallenge/ok +=== RUN TestDB_UpdateChallenge/fail/db.Get-error --- PASS: TestDB_UpdateChallenge (0.00s) - --- PASS: TestDB_UpdateChallenge/fail/db.Get-error (0.00s) --- PASS: TestDB_UpdateChallenge/fail/db.CmpAndSwap-error (0.00s) --- PASS: TestDB_UpdateChallenge/ok (0.00s) + --- PASS: TestDB_UpdateChallenge/fail/db.Get-error (0.00s) === RUN TestDB_getDBExternalAccountKey -=== RUN TestDB_getDBExternalAccountKey/ok -=== RUN TestDB_getDBExternalAccountKey/fail/not-found === RUN TestDB_getDBExternalAccountKey/fail/db.Get-error === RUN TestDB_getDBExternalAccountKey/fail/unmarshal-error +=== RUN TestDB_getDBExternalAccountKey/ok +=== RUN TestDB_getDBExternalAccountKey/fail/not-found --- PASS: TestDB_getDBExternalAccountKey (0.00s) - --- PASS: TestDB_getDBExternalAccountKey/ok (0.00s) - --- PASS: TestDB_getDBExternalAccountKey/fail/not-found (0.00s) --- PASS: TestDB_getDBExternalAccountKey/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBExternalAccountKey/fail/unmarshal-error (0.00s) + --- PASS: TestDB_getDBExternalAccountKey/ok (0.00s) + --- PASS: TestDB_getDBExternalAccountKey/fail/not-found (0.00s) === RUN TestDB_GetExternalAccountKey === RUN TestDB_GetExternalAccountKey/ok === RUN TestDB_GetExternalAccountKey/fail/db.Get-error @@ -3253,54 +3290,54 @@ --- PASS: TestDB_GetExternalAccountKey/fail/db.Get-error (0.00s) --- PASS: TestDB_GetExternalAccountKey/fail/non-matching-provisioner (0.00s) === RUN TestDB_GetExternalAccountKeyByReference -=== RUN TestDB_GetExternalAccountKeyByReference/ok -=== RUN TestDB_GetExternalAccountKeyByReference/ok/no-reference === RUN TestDB_GetExternalAccountKeyByReference/fail/reference-not-found === RUN TestDB_GetExternalAccountKeyByReference/fail/reference-load-error === RUN TestDB_GetExternalAccountKeyByReference/fail/reference-unmarshal-error === RUN TestDB_GetExternalAccountKeyByReference/fail/db.GetExternalAccountKey-error +=== RUN TestDB_GetExternalAccountKeyByReference/ok +=== RUN TestDB_GetExternalAccountKeyByReference/ok/no-reference --- PASS: TestDB_GetExternalAccountKeyByReference (0.00s) - --- PASS: TestDB_GetExternalAccountKeyByReference/ok (0.00s) - --- PASS: TestDB_GetExternalAccountKeyByReference/ok/no-reference (0.00s) --- PASS: TestDB_GetExternalAccountKeyByReference/fail/reference-not-found (0.00s) --- PASS: TestDB_GetExternalAccountKeyByReference/fail/reference-load-error (0.00s) --- PASS: TestDB_GetExternalAccountKeyByReference/fail/reference-unmarshal-error (0.00s) --- PASS: TestDB_GetExternalAccountKeyByReference/fail/db.GetExternalAccountKey-error (0.00s) + --- PASS: TestDB_GetExternalAccountKeyByReference/ok (0.00s) + --- PASS: TestDB_GetExternalAccountKeyByReference/ok/no-reference (0.00s) === RUN TestDB_GetExternalAccountKeys -=== RUN TestDB_GetExternalAccountKeys/fail/db.getDBExternalAccountKey === RUN TestDB_GetExternalAccountKeys/ok === RUN TestDB_GetExternalAccountKeys/fail/db.Get-externalAccountKeysByProvisionerIDTable === RUN TestDB_GetExternalAccountKeys/fail/db.Get-externalAccountKeysByProvisionerIDTable-unmarshal +=== RUN TestDB_GetExternalAccountKeys/fail/db.getDBExternalAccountKey --- PASS: TestDB_GetExternalAccountKeys (0.00s) - --- PASS: TestDB_GetExternalAccountKeys/fail/db.getDBExternalAccountKey (0.00s) --- PASS: TestDB_GetExternalAccountKeys/ok (0.00s) --- PASS: TestDB_GetExternalAccountKeys/fail/db.Get-externalAccountKeysByProvisionerIDTable (0.00s) --- PASS: TestDB_GetExternalAccountKeys/fail/db.Get-externalAccountKeysByProvisionerIDTable-unmarshal (0.00s) + --- PASS: TestDB_GetExternalAccountKeys/fail/db.getDBExternalAccountKey (0.00s) === RUN TestDB_DeleteExternalAccountKey +=== RUN TestDB_DeleteExternalAccountKey/ok +acme_external_account_keyID_provisionerID_index +=== RUN TestDB_DeleteExternalAccountKey/fail/not-found === RUN TestDB_DeleteExternalAccountKey/fail/non-matching-provisioner === RUN TestDB_DeleteExternalAccountKey/fail/delete-reference === RUN TestDB_DeleteExternalAccountKey/fail/delete-eak === RUN TestDB_DeleteExternalAccountKey/fail/delete-eakID -=== RUN TestDB_DeleteExternalAccountKey/ok -acme_external_account_keyID_provisionerID_index -=== RUN TestDB_DeleteExternalAccountKey/fail/not-found ---- PASS: TestDB_DeleteExternalAccountKey (0.01s) +--- PASS: TestDB_DeleteExternalAccountKey (0.00s) + --- PASS: TestDB_DeleteExternalAccountKey/ok (0.00s) + --- PASS: TestDB_DeleteExternalAccountKey/fail/not-found (0.00s) --- PASS: TestDB_DeleteExternalAccountKey/fail/non-matching-provisioner (0.00s) --- PASS: TestDB_DeleteExternalAccountKey/fail/delete-reference (0.00s) --- PASS: TestDB_DeleteExternalAccountKey/fail/delete-eak (0.00s) --- PASS: TestDB_DeleteExternalAccountKey/fail/delete-eakID (0.00s) - --- PASS: TestDB_DeleteExternalAccountKey/ok (0.00s) - --- PASS: TestDB_DeleteExternalAccountKey/fail/not-found (0.00s) === RUN TestDB_CreateExternalAccountKey +=== RUN TestDB_CreateExternalAccountKey/fail/externalAccountKeyReference-cmpAndSwap-error === RUN TestDB_CreateExternalAccountKey/ok === RUN TestDB_CreateExternalAccountKey/fail/externalAccountKeyID-cmpAndSwap-error === RUN TestDB_CreateExternalAccountKey/fail/addEAKID-error -=== RUN TestDB_CreateExternalAccountKey/fail/externalAccountKeyReference-cmpAndSwap-error --- PASS: TestDB_CreateExternalAccountKey (0.00s) + --- PASS: TestDB_CreateExternalAccountKey/fail/externalAccountKeyReference-cmpAndSwap-error (0.00s) --- PASS: TestDB_CreateExternalAccountKey/ok (0.00s) --- PASS: TestDB_CreateExternalAccountKey/fail/externalAccountKeyID-cmpAndSwap-error (0.00s) --- PASS: TestDB_CreateExternalAccountKey/fail/addEAKID-error (0.00s) - --- PASS: TestDB_CreateExternalAccountKey/fail/externalAccountKeyReference-cmpAndSwap-error (0.00s) === RUN TestDB_UpdateExternalAccountKey === RUN TestDB_UpdateExternalAccountKey/ok === RUN TestDB_UpdateExternalAccountKey/fail/db.Get-error @@ -3330,17 +3367,17 @@ --- PASS: TestDB_addEAKID/ok/db.Get-not-found (0.00s) --- PASS: TestDB_addEAKID/ok (0.00s) === RUN TestDB_deleteEAKID -=== RUN TestDB_deleteEAKID/fail/db.Get -=== RUN TestDB_deleteEAKID/fail/unmarshal === RUN TestDB_deleteEAKID/fail/db.save === RUN TestDB_deleteEAKID/ok/db.Get-not-found === RUN TestDB_deleteEAKID/ok +=== RUN TestDB_deleteEAKID/fail/db.Get +=== RUN TestDB_deleteEAKID/fail/unmarshal --- PASS: TestDB_deleteEAKID (0.00s) - --- PASS: TestDB_deleteEAKID/fail/db.Get (0.00s) - --- PASS: TestDB_deleteEAKID/fail/unmarshal (0.00s) --- PASS: TestDB_deleteEAKID/fail/db.save (0.00s) --- PASS: TestDB_deleteEAKID/ok/db.Get-not-found (0.00s) --- PASS: TestDB_deleteEAKID/ok (0.00s) + --- PASS: TestDB_deleteEAKID/fail/db.Get (0.00s) + --- PASS: TestDB_deleteEAKID/fail/unmarshal (0.00s) === RUN TestDB_addAndDeleteEAKID === RUN TestDB_addAndDeleteEAKID/ok/multi --- PASS: TestDB_addAndDeleteEAKID (0.00s) @@ -3370,43 +3407,43 @@ --- PASS: TestDB_DeleteNonce/fail/db.Update-error (0.00s) --- PASS: TestDB_DeleteNonce/ok (0.00s) === RUN TestNew -=== RUN TestNew/fail/db.CreateTable-error === RUN TestNew/ok +=== RUN TestNew/fail/db.CreateTable-error --- PASS: TestNew (0.00s) - --- PASS: TestNew/fail/db.CreateTable-error (0.00s) --- PASS: TestNew/ok (0.00s) + --- PASS: TestNew/fail/db.CreateTable-error (0.00s) === RUN TestDB_save +=== RUN TestDB_save/ok +=== RUN TestDB_save/ok/nils === RUN TestDB_save/fail/error-marshaling-new === RUN TestDB_save/fail/error-marshaling-old === RUN TestDB_save/fail/db.CmpAndSwap-error === RUN TestDB_save/fail/db.CmpAndSwap-false-marshaling-old -=== RUN TestDB_save/ok -=== RUN TestDB_save/ok/nils --- PASS: TestDB_save (0.00s) + --- PASS: TestDB_save/ok (0.00s) + --- PASS: TestDB_save/ok/nils (0.00s) --- PASS: TestDB_save/fail/error-marshaling-new (0.00s) --- PASS: TestDB_save/fail/error-marshaling-old (0.00s) --- PASS: TestDB_save/fail/db.CmpAndSwap-error (0.00s) --- PASS: TestDB_save/fail/db.CmpAndSwap-false-marshaling-old (0.00s) - --- PASS: TestDB_save/ok (0.00s) - --- PASS: TestDB_save/ok/nils (0.00s) === RUN TestDB_getDBOrder +=== RUN TestDB_getDBOrder/fail/not-found === RUN TestDB_getDBOrder/fail/db.Get-error === RUN TestDB_getDBOrder/fail/unmarshal-error === RUN TestDB_getDBOrder/ok -=== RUN TestDB_getDBOrder/fail/not-found --- PASS: TestDB_getDBOrder (0.00s) + --- PASS: TestDB_getDBOrder/fail/not-found (0.00s) --- PASS: TestDB_getDBOrder/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBOrder/fail/unmarshal-error (0.00s) --- PASS: TestDB_getDBOrder/ok (0.00s) - --- PASS: TestDB_getDBOrder/fail/not-found (0.00s) === RUN TestDB_GetOrder +=== RUN TestDB_GetOrder/ok === RUN TestDB_GetOrder/fail/db.Get-error === RUN TestDB_GetOrder/fail/forward-acme-error -=== RUN TestDB_GetOrder/ok --- PASS: TestDB_GetOrder (0.00s) + --- PASS: TestDB_GetOrder/ok (0.00s) --- PASS: TestDB_GetOrder/fail/db.Get-error (0.00s) --- PASS: TestDB_GetOrder/fail/forward-acme-error (0.00s) - --- PASS: TestDB_GetOrder/ok (0.00s) === RUN TestDB_UpdateOrder === RUN TestDB_UpdateOrder/fail/db.Get-error === RUN TestDB_UpdateOrder/fail/save-error @@ -3424,27 +3461,27 @@ --- PASS: TestDB_CreateOrder/ok (0.00s) --- PASS: TestDB_CreateOrder/fail/order-save-error (0.00s) === RUN TestDB_updateAddOrderIDs -=== RUN TestDB_updateAddOrderIDs/fail/db.Get-error === RUN TestDB_updateAddOrderIDs/fail/unmarshal-error +=== RUN TestDB_updateAddOrderIDs/ok/no-old === RUN TestDB_updateAddOrderIDs/ok/all-old-not-pending === RUN TestDB_updateAddOrderIDs/ok/old-and-new === RUN TestDB_updateAddOrderIDs/fail/db.Get-order-error === RUN TestDB_updateAddOrderIDs/fail/update-order-status-error === RUN TestDB_updateAddOrderIDs/fail/db.save-order-error -=== RUN TestDB_updateAddOrderIDs/ok/no-old === RUN TestDB_updateAddOrderIDs/ok/old-and-new-2 +=== RUN TestDB_updateAddOrderIDs/fail/db.Get-error --- PASS: TestDB_updateAddOrderIDs (0.00s) - --- PASS: TestDB_updateAddOrderIDs/fail/db.Get-error (0.00s) --- PASS: TestDB_updateAddOrderIDs/fail/unmarshal-error (0.00s) + --- PASS: TestDB_updateAddOrderIDs/ok/no-old (0.00s) --- PASS: TestDB_updateAddOrderIDs/ok/all-old-not-pending (0.00s) --- PASS: TestDB_updateAddOrderIDs/ok/old-and-new (0.00s) --- PASS: TestDB_updateAddOrderIDs/fail/db.Get-order-error (0.00s) --- PASS: TestDB_updateAddOrderIDs/fail/update-order-status-error (0.00s) --- PASS: TestDB_updateAddOrderIDs/fail/db.save-order-error (0.00s) - --- PASS: TestDB_updateAddOrderIDs/ok/no-old (0.00s) --- PASS: TestDB_updateAddOrderIDs/ok/old-and-new-2 (0.00s) + --- PASS: TestDB_updateAddOrderIDs/fail/db.Get-error (0.00s) PASS -ok github.com/smallstep/certificates/acme/db/nosql 0.066s +ok github.com/smallstep/certificates/acme/db/nosql 0.092s === RUN TestParseUserID === RUN TestParseUserID/ok === RUN TestParseUserID/fail/json @@ -3482,7 +3519,7 @@ --- PASS: TestParseClientID/fail/scheme (0.00s) --- PASS: TestParseClientID/fail/username (0.00s) PASS -ok github.com/smallstep/certificates/acme/wire 0.010s +ok github.com/smallstep/certificates/acme/wire 0.025s === RUN TestNewCertificate --- PASS: TestNewCertificate (0.00s) === RUN TestCertificate_MarshalJSON @@ -3693,7 +3730,7 @@ === RUN Test_fmtPublicKey/ed25519 === RUN Test_fmtPublicKey/dsa2048 === RUN Test_fmtPublicKey/unknown ---- PASS: Test_fmtPublicKey (4.96s) +--- PASS: Test_fmtPublicKey (1.04s) --- PASS: Test_fmtPublicKey/p256 (0.00s) --- PASS: Test_fmtPublicKey/rsa2048 (0.00s) --- PASS: Test_fmtPublicKey/ed25519 (0.00s) @@ -3746,21 +3783,21 @@ --- PASS: TestRevokeRequestValidate/error/non-passive_not_implemented (0.00s) --- PASS: TestRevokeRequestValidate/ok (0.00s) === RUN Test_caHandler_Revoke +=== RUN Test_caHandler_Revoke/200/no_ott +=== RUN Test_caHandler_Revoke/500/ott_authority.Revoke === RUN Test_caHandler_Revoke/403/ott_authority.Revoke === RUN Test_caHandler_Revoke/400/json_read_error === RUN Test_caHandler_Revoke/400/invalid_request_body === RUN Test_caHandler_Revoke/200/ott === RUN Test_caHandler_Revoke/400/no_OTT_and_no_peer_certificate -=== RUN Test_caHandler_Revoke/200/no_ott -=== RUN Test_caHandler_Revoke/500/ott_authority.Revoke --- PASS: Test_caHandler_Revoke (0.00s) + --- PASS: Test_caHandler_Revoke/200/no_ott (0.00s) + --- PASS: Test_caHandler_Revoke/500/ott_authority.Revoke (0.00s) --- PASS: Test_caHandler_Revoke/403/ott_authority.Revoke (0.00s) --- PASS: Test_caHandler_Revoke/400/json_read_error (0.00s) --- PASS: Test_caHandler_Revoke/400/invalid_request_body (0.00s) --- PASS: Test_caHandler_Revoke/200/ott (0.00s) --- PASS: Test_caHandler_Revoke/400/no_OTT_and_no_peer_certificate (0.00s) - --- PASS: Test_caHandler_Revoke/200/no_ott (0.00s) - --- PASS: Test_caHandler_Revoke/500/ott_authority.Revoke (0.00s) === RUN TestSSHCertificate_MarshalJSON === RUN TestSSHCertificate_MarshalJSON/nil === RUN TestSSHCertificate_MarshalJSON/user @@ -3822,7 +3859,7 @@ === RUN Test_SSHSign/fail-signSSH === RUN Test_SSHSign/fail-SignSSHAddUser === RUN Test_SSHSign/fail-user-identity ---- PASS: Test_SSHSign (0.00s) +--- PASS: Test_SSHSign (0.01s) --- PASS: Test_SSHSign/ok-user (0.00s) --- PASS: Test_SSHSign/ok-host (0.00s) --- PASS: Test_SSHSign/ok-user-add (0.00s) @@ -3960,7 +3997,7 @@ --- PASS: Test_getIdentityURI/ok_missing (0.00s) --- PASS: Test_getIdentityURI/ok_empty (0.00s) PASS -ok github.com/smallstep/certificates/api 5.059s +ok github.com/smallstep/certificates/api 1.160s === RUN TestError === RUN TestError/noLogger === RUN TestError/noError @@ -3982,7 +4019,7 @@ --- PASS: TestError/slogWithNoError (0.00s) --- PASS: TestError/slogWithError (0.00s) PASS -ok github.com/smallstep/certificates/api/log 0.014s +ok github.com/smallstep/certificates/api/log 0.019s ? github.com/smallstep/certificates/api/models [no test files] === RUN TestJSON === RUN TestJSON/ok @@ -4005,7 +4042,7 @@ --- PASS: Test_badProtoJSONError_Render/bad_proto_normal_space (0.00s) --- PASS: Test_badProtoJSONError_Render/bad_proto_non_breaking_space (0.00s) PASS -ok github.com/smallstep/certificates/api/read 0.014s +ok github.com/smallstep/certificates/api/read 0.022s === RUN TestJSON --- PASS: TestJSON (0.00s) === RUN TestJSONPanicsOnUnsupportedType @@ -4023,17 +4060,17 @@ === RUN TestStatusCodeFromError --- PASS: TestStatusCodeFromError (0.00s) PASS -ok github.com/smallstep/certificates/api/render 0.014s +ok github.com/smallstep/certificates/api/render 0.019s === RUN TestAuthorityNew +=== RUN TestAuthorityNew/fail_bad_password === RUN TestAuthorityNew/fail_loading_CA_cert === RUN TestAuthorityNew/ok === RUN TestAuthorityNew/fail_bad_root -=== RUN TestAuthorityNew/fail_bad_password --- PASS: TestAuthorityNew (0.01s) - --- PASS: TestAuthorityNew/fail_loading_CA_cert (0.01s) + --- PASS: TestAuthorityNew/fail_bad_password (0.00s) + --- PASS: TestAuthorityNew/fail_loading_CA_cert (0.00s) --- PASS: TestAuthorityNew/ok (0.00s) --- PASS: TestAuthorityNew/fail_bad_root (0.00s) - --- PASS: TestAuthorityNew/fail_bad_password (0.00s) === RUN TestAuthorityNew_bundles === RUN TestAuthorityNew_bundles/ok_ca0 === RUN TestAuthorityNew_bundles/ok_bundle @@ -4041,7 +4078,7 @@ === RUN TestAuthorityNew_bundles/ok_federated_bundle === RUN TestAuthorityNew_bundles/fail_root === RUN TestAuthorityNew_bundles/fail_federated ---- PASS: TestAuthorityNew_bundles (0.02s) +--- PASS: TestAuthorityNew_bundles (0.01s) --- PASS: TestAuthorityNew_bundles/ok_ca0 (0.00s) --- PASS: TestAuthorityNew_bundles/ok_bundle (0.00s) --- PASS: TestAuthorityNew_bundles/ok_federated_ca1 (0.00s) @@ -4049,8 +4086,8 @@ --- PASS: TestAuthorityNew_bundles/fail_root (0.00s) --- PASS: TestAuthorityNew_bundles/fail_federated (0.00s) === RUN TestAuthority_GetDatabase -2025/10/26 21:31:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -2025/10/26 21:31:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetDatabase/ok === RUN TestAuthority_GetDatabase/ok_WithDatabase --- PASS: TestAuthority_GetDatabase (0.00s) @@ -4069,7 +4106,7 @@ === RUN TestNewEmbedded/fail_missing_issuer === RUN TestNewEmbedded/fail_missing_signer#01 === RUN TestNewEmbedded/fail_bad_password ---- PASS: TestNewEmbedded (0.01s) +--- PASS: TestNewEmbedded (0.00s) --- PASS: TestNewEmbedded/ok (0.00s) --- PASS: TestNewEmbedded/ok_empty_config (0.00s) --- PASS: TestNewEmbedded/ok_config_file (0.00s) @@ -4087,14 +4124,14 @@ === RUN TestNewEmbedded_GetTLSCertificate --- PASS: TestNewEmbedded_GetTLSCertificate (0.00s) === RUN TestAuthority_CloseForReload -2025/10/26 21:31:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_CloseForReload/ok --- PASS: TestAuthority_CloseForReload (0.00s) --- PASS: TestAuthority_CloseForReload/ok (0.00s) === RUN TestAuthority_GetSCEP === RUN TestAuthority_GetSCEP/ok === RUN TestAuthority_GetSCEP/wrong_password ---- PASS: TestAuthority_GetSCEP (0.01s) +--- PASS: TestAuthority_GetSCEP (0.00s) --- PASS: TestAuthority_GetSCEP/ok (0.00s) --- PASS: TestAuthority_GetSCEP/wrong_password (0.00s) === RUN TestAuthority_GetID @@ -4104,46 +4141,46 @@ --- PASS: TestAuthority_GetID/ok (0.00s) --- PASS: TestAuthority_GetID/ok_with_id (0.00s) === RUN TestAuthority_authorizeToken -2025/10/26 21:31:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_authorizeToken/fail/mockNoSQLDB/error +2026/11/30 06:00:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeToken/fail/invalid-token === RUN TestAuthority_authorizeToken/fail/prehistoric-token -=== RUN TestAuthority_authorizeToken/fail/provisioner-not-found === RUN TestAuthority_authorizeToken/ok/simpledb === RUN TestAuthority_authorizeToken/fail/simpledb/token-already-used -2025/10/26 21:31:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_authorizeToken/ok/sha256 -=== RUN TestAuthority_authorizeToken/fail/sha256/token-already-used -2025/10/26 21:31:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeToken/ok/mockNoSQLDB -2025/10/26 21:31:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_authorizeToken/fail/mockNoSQLDB/error -2025/10/26 21:31:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeToken/fail/mockNoSQLDB/token-already-used -2025/10/26 21:31:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeToken/fail/uninitialized ---- PASS: TestAuthority_authorizeToken (0.12s) +=== RUN TestAuthority_authorizeToken/fail/provisioner-not-found +=== RUN TestAuthority_authorizeToken/ok/sha256 +=== RUN TestAuthority_authorizeToken/fail/sha256/token-already-used +2026/11/30 06:00:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +--- PASS: TestAuthority_authorizeToken (0.08s) + --- PASS: TestAuthority_authorizeToken/fail/mockNoSQLDB/error (0.00s) --- PASS: TestAuthority_authorizeToken/fail/invalid-token (0.00s) --- PASS: TestAuthority_authorizeToken/fail/prehistoric-token (0.00s) - --- PASS: TestAuthority_authorizeToken/fail/provisioner-not-found (0.00s) --- PASS: TestAuthority_authorizeToken/ok/simpledb (0.00s) --- PASS: TestAuthority_authorizeToken/fail/simpledb/token-already-used (0.00s) - --- PASS: TestAuthority_authorizeToken/ok/sha256 (0.00s) - --- PASS: TestAuthority_authorizeToken/fail/sha256/token-already-used (0.00s) --- PASS: TestAuthority_authorizeToken/ok/mockNoSQLDB (0.00s) - --- PASS: TestAuthority_authorizeToken/fail/mockNoSQLDB/error (0.00s) --- PASS: TestAuthority_authorizeToken/fail/mockNoSQLDB/token-already-used (0.00s) --- PASS: TestAuthority_authorizeToken/fail/uninitialized (0.00s) + --- PASS: TestAuthority_authorizeToken/fail/provisioner-not-found (0.00s) + --- PASS: TestAuthority_authorizeToken/ok/sha256 (0.00s) + --- PASS: TestAuthority_authorizeToken/fail/sha256/token-already-used (0.00s) === RUN TestAuthority_authorizeRevoke -2025/10/26 21:31:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_authorizeRevoke/fail/token/invalid-subject === RUN TestAuthority_authorizeRevoke/ok/token === RUN TestAuthority_authorizeRevoke/fail/token/invalid-token -=== RUN TestAuthority_authorizeRevoke/fail/token/invalid-subject --- PASS: TestAuthority_authorizeRevoke (0.11s) + --- PASS: TestAuthority_authorizeRevoke/fail/token/invalid-subject (0.00s) --- PASS: TestAuthority_authorizeRevoke/ok/token (0.00s) --- PASS: TestAuthority_authorizeRevoke/fail/token/invalid-token (0.00s) - --- PASS: TestAuthority_authorizeRevoke/fail/token/invalid-subject (0.00s) === RUN TestAuthority_authorizeSign -2025/10/26 21:31:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeSign/fail/invalid-token === RUN TestAuthority_authorizeSign/fail/invalid-subject === RUN TestAuthority_authorizeSign/ok @@ -4152,110 +4189,110 @@ --- PASS: TestAuthority_authorizeSign/fail/invalid-subject (0.00s) --- PASS: TestAuthority_authorizeSign/ok (0.00s) === RUN TestAuthority_Authorize -2025/10/26 21:31:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_Authorize/fail/sshSign/invalid-token +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Authorize/fail/sshRenew/invalid-token -=== RUN TestAuthority_Authorize/fail/unexpected-method -=== RUN TestAuthority_Authorize/default-to-signMethod -=== RUN TestAuthority_Authorize/ok/sshSign -=== RUN TestAuthority_Authorize/fail/sshRenew/disabled -2025/10/26 21:31:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_Authorize/fail/revoke/invalid-token -=== RUN TestAuthority_Authorize/ok/revoke -=== RUN TestAuthority_Authorize/ok/sshRenew === RUN TestAuthority_Authorize/fail/sshRekey/invalid-token -=== RUN TestAuthority_Authorize/fail/sshRekey/disabled -2025/10/26 21:31:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Authorize/ok/sshRekey +=== RUN TestAuthority_Authorize/fail/sshRenew/disabled +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_Authorize/fail/sshRekey/disabled +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_Authorize/fail/unexpected-method === RUN TestAuthority_Authorize/ok/sign -=== RUN TestAuthority_Authorize/fail/sshSign/disabled -2025/10/26 21:31:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_Authorize/fail/revoke/invalid-token +=== RUN TestAuthority_Authorize/fail/sshSign/invalid-token +=== RUN TestAuthority_Authorize/ok/sshSign === RUN TestAuthority_Authorize/fail/sshRevoke/invalid-token -=== RUN TestAuthority_Authorize/ok/sshRevoke === RUN TestAuthority_Authorize/fail/sign/invalid-token ---- PASS: TestAuthority_Authorize (0.09s) - --- PASS: TestAuthority_Authorize/fail/sshSign/invalid-token (0.00s) +=== RUN TestAuthority_Authorize/ok/revoke +=== RUN TestAuthority_Authorize/fail/sshSign/disabled +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_Authorize/ok/sshRenew +=== RUN TestAuthority_Authorize/ok/sshRevoke +=== RUN TestAuthority_Authorize/default-to-signMethod +--- PASS: TestAuthority_Authorize (0.12s) --- PASS: TestAuthority_Authorize/fail/sshRenew/invalid-token (0.00s) - --- PASS: TestAuthority_Authorize/fail/unexpected-method (0.00s) - --- PASS: TestAuthority_Authorize/default-to-signMethod (0.00s) - --- PASS: TestAuthority_Authorize/ok/sshSign (0.00s) - --- PASS: TestAuthority_Authorize/fail/sshRenew/disabled (0.00s) - --- PASS: TestAuthority_Authorize/fail/revoke/invalid-token (0.00s) - --- PASS: TestAuthority_Authorize/ok/revoke (0.00s) - --- PASS: TestAuthority_Authorize/ok/sshRenew (0.00s) --- PASS: TestAuthority_Authorize/fail/sshRekey/invalid-token (0.00s) + --- PASS: TestAuthority_Authorize/ok/sshRekey (0.00s) + --- PASS: TestAuthority_Authorize/fail/sshRenew/disabled (0.00s) --- PASS: TestAuthority_Authorize/fail/sshRekey/disabled (0.00s) - --- PASS: TestAuthority_Authorize/ok/sshRekey (0.01s) + --- PASS: TestAuthority_Authorize/fail/unexpected-method (0.00s) --- PASS: TestAuthority_Authorize/ok/sign (0.00s) - --- PASS: TestAuthority_Authorize/fail/sshSign/disabled (0.00s) + --- PASS: TestAuthority_Authorize/fail/revoke/invalid-token (0.00s) + --- PASS: TestAuthority_Authorize/fail/sshSign/invalid-token (0.00s) + --- PASS: TestAuthority_Authorize/ok/sshSign (0.00s) --- PASS: TestAuthority_Authorize/fail/sshRevoke/invalid-token (0.00s) - --- PASS: TestAuthority_Authorize/ok/sshRevoke (0.00s) --- PASS: TestAuthority_Authorize/fail/sign/invalid-token (0.00s) + --- PASS: TestAuthority_Authorize/ok/revoke (0.00s) + --- PASS: TestAuthority_Authorize/fail/sshSign/disabled (0.00s) + --- PASS: TestAuthority_Authorize/ok/sshRenew (0.00s) + --- PASS: TestAuthority_Authorize/ok/sshRevoke (0.00s) + --- PASS: TestAuthority_Authorize/default-to-signMethod (0.00s) === RUN TestAuthority_authorizeRenew -=== RUN TestAuthority_authorizeRenew/fail/provisioner-authorize-renewal-fail -2025/10/26 21:31:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_authorizeRenew/ok -2025/10/26 21:31:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_authorizeRenew/ok/from_db -2025/10/26 21:31:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeRenew/fail/db.IsRevoked-error -2025/10/26 21:31:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeRenew/fail/revoked -2025/10/26 21:31:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeRenew/fail/load-provisioner -2025/10/26 21:31:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s ---- PASS: TestAuthority_authorizeRenew (0.01s) - --- PASS: TestAuthority_authorizeRenew/fail/provisioner-authorize-renewal-fail (0.00s) - --- PASS: TestAuthority_authorizeRenew/ok (0.00s) - --- PASS: TestAuthority_authorizeRenew/ok/from_db (0.00s) +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_authorizeRenew/fail/provisioner-authorize-renewal-fail +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_authorizeRenew/ok +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_authorizeRenew/ok/from_db +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +--- PASS: TestAuthority_authorizeRenew (0.00s) --- PASS: TestAuthority_authorizeRenew/fail/db.IsRevoked-error (0.00s) --- PASS: TestAuthority_authorizeRenew/fail/revoked (0.00s) --- PASS: TestAuthority_authorizeRenew/fail/load-provisioner (0.00s) + --- PASS: TestAuthority_authorizeRenew/fail/provisioner-authorize-renewal-fail (0.00s) + --- PASS: TestAuthority_authorizeRenew/ok (0.00s) + --- PASS: TestAuthority_authorizeRenew/ok/from_db (0.00s) === RUN TestAuthority_authorizeSSHSign -2025/10/26 21:31:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeSSHSign/fail/invalid-token === RUN TestAuthority_authorizeSSHSign/fail/invalid-subject === RUN TestAuthority_authorizeSSHSign/ok ---- PASS: TestAuthority_authorizeSSHSign (0.11s) +--- PASS: TestAuthority_authorizeSSHSign (0.07s) --- PASS: TestAuthority_authorizeSSHSign/fail/invalid-token (0.00s) --- PASS: TestAuthority_authorizeSSHSign/fail/invalid-subject (0.00s) --- PASS: TestAuthority_authorizeSSHSign/ok (0.00s) === RUN TestAuthority_authorizeSSHRenew -2025/10/26 21:31:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_authorizeSSHRenew/fail/invalid-token +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeSSHRenew/fail/sshRenew-unimplemented-jwk-provisioner === RUN TestAuthority_authorizeSSHRenew/fail/WithAuthorizeSSHRenewFunc -2025/10/26 21:31:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeSSHRenew/ok === RUN TestAuthority_authorizeSSHRenew/ok/WithAuthorizeSSHRenewFunc -2025/10/26 21:31:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s ---- PASS: TestAuthority_authorizeSSHRenew (0.13s) - --- PASS: TestAuthority_authorizeSSHRenew/fail/invalid-token (0.00s) +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_authorizeSSHRenew/fail/invalid-token +--- PASS: TestAuthority_authorizeSSHRenew (0.07s) --- PASS: TestAuthority_authorizeSSHRenew/fail/sshRenew-unimplemented-jwk-provisioner (0.00s) --- PASS: TestAuthority_authorizeSSHRenew/fail/WithAuthorizeSSHRenewFunc (0.00s) --- PASS: TestAuthority_authorizeSSHRenew/ok (0.00s) --- PASS: TestAuthority_authorizeSSHRenew/ok/WithAuthorizeSSHRenewFunc (0.00s) + --- PASS: TestAuthority_authorizeSSHRenew/fail/invalid-token (0.00s) === RUN TestAuthority_authorizeSSHRevoke -2025/10/26 21:31:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeSSHRevoke/fail/invalid-token === RUN TestAuthority_authorizeSSHRevoke/fail/invalid-subject === RUN TestAuthority_authorizeSSHRevoke/ok ---- PASS: TestAuthority_authorizeSSHRevoke (0.12s) +--- PASS: TestAuthority_authorizeSSHRevoke (0.06s) --- PASS: TestAuthority_authorizeSSHRevoke/fail/invalid-token (0.00s) --- PASS: TestAuthority_authorizeSSHRevoke/fail/invalid-subject (0.00s) --- PASS: TestAuthority_authorizeSSHRevoke/ok (0.00s) === RUN TestAuthority_authorizeSSHRekey -2025/10/26 21:31:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeSSHRekey/fail/sshRekey-unimplemented-jwk-provisioner === RUN TestAuthority_authorizeSSHRekey/ok === RUN TestAuthority_authorizeSSHRekey/fail/invalid-token ---- PASS: TestAuthority_authorizeSSHRekey (0.09s) +--- PASS: TestAuthority_authorizeSSHRekey (0.06s) --- PASS: TestAuthority_authorizeSSHRekey/fail/sshRekey-unimplemented-jwk-provisioner (0.00s) --- PASS: TestAuthority_authorizeSSHRekey/ok (0.00s) --- PASS: TestAuthority_authorizeSSHRekey/fail/invalid-token (0.00s) === RUN TestAuthority_AuthorizeRenewToken -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_AuthorizeRenewToken/ok === RUN TestAuthority_AuthorizeRenewToken/ok_expired_cert === RUN TestAuthority_AuthorizeRenewToken/ok_provisioner_issuer @@ -4270,7 +4307,7 @@ === RUN TestAuthority_AuthorizeRenewToken/fail_token_iat#01 === RUN TestAuthority_AuthorizeRenewToken/fail_token_iat#02 === RUN TestAuthority_AuthorizeRenewToken/fail_token_aud ---- PASS: TestAuthority_AuthorizeRenewToken (0.03s) +--- PASS: TestAuthority_AuthorizeRenewToken (0.02s) --- PASS: TestAuthority_AuthorizeRenewToken/ok (0.00s) --- PASS: TestAuthority_AuthorizeRenewToken/ok_expired_cert (0.00s) --- PASS: TestAuthority_AuthorizeRenewToken/ok_provisioner_issuer (0.00s) @@ -4286,7 +4323,6 @@ --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_iat#02 (0.00s) --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_aud (0.00s) === RUN TestAuthority_checkPolicy -=== RUN TestAuthority_checkPolicy/ok/policy === RUN TestAuthority_checkPolicy/fail/NewX509PolicyEngine-error === RUN TestAuthority_checkPolicy/fail/currentAdmin-evaluation-error === RUN TestAuthority_checkPolicy/fail/currentAdmin-lockout @@ -4294,8 +4330,8 @@ === RUN TestAuthority_checkPolicy/fail/otherAdmins-lockout === RUN TestAuthority_checkPolicy/ok/no-policy === RUN TestAuthority_checkPolicy/ok/empty-policy +=== RUN TestAuthority_checkPolicy/ok/policy --- PASS: TestAuthority_checkPolicy (0.00s) - --- PASS: TestAuthority_checkPolicy/ok/policy (0.00s) --- PASS: TestAuthority_checkPolicy/fail/NewX509PolicyEngine-error (0.00s) --- PASS: TestAuthority_checkPolicy/fail/currentAdmin-evaluation-error (0.00s) --- PASS: TestAuthority_checkPolicy/fail/currentAdmin-lockout (0.00s) @@ -4303,6 +4339,7 @@ --- PASS: TestAuthority_checkPolicy/fail/otherAdmins-lockout (0.00s) --- PASS: TestAuthority_checkPolicy/ok/no-policy (0.00s) --- PASS: TestAuthority_checkPolicy/ok/empty-policy (0.00s) + --- PASS: TestAuthority_checkPolicy/ok/policy (0.00s) === RUN TestAuthority_reloadPolicyEngines === RUN TestAuthority_reloadPolicyEngines/fail/standalone-x509-policy === RUN TestAuthority_reloadPolicyEngines/fail/standalone-ssh-host-policy @@ -4396,11 +4433,11 @@ --- PASS: TestAuthority_UpdateAuthorityPolicy/fail/a.reloadPolicyEngines (0.00s) --- PASS: TestAuthority_UpdateAuthorityPolicy/ok (0.00s) === RUN TestGetEncryptedKey -=== RUN TestGetEncryptedKey/ok === RUN TestGetEncryptedKey/fail-not-found +=== RUN TestGetEncryptedKey/ok --- PASS: TestGetEncryptedKey (0.00s) - --- PASS: TestGetEncryptedKey/ok (0.00s) --- PASS: TestGetEncryptedKey/fail-not-found (0.00s) + --- PASS: TestGetEncryptedKey/ok (0.00s) === RUN TestGetProvisioners === RUN TestGetProvisioners/ok === RUN TestGetProvisioners/ok/rsa @@ -4408,18 +4445,18 @@ --- PASS: TestGetProvisioners/ok (0.00s) --- PASS: TestGetProvisioners/ok/rsa (0.01s) === RUN TestAuthority_LoadProvisionerByCertificate -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_LoadProvisionerByCertificate/ok_from_certificate === RUN TestAuthority_LoadProvisionerByCertificate/ok_from_db === RUN TestAuthority_LoadProvisionerByCertificate/ok_from_admindb === RUN TestAuthority_LoadProvisionerByCertificate/fail_from_certificate === RUN TestAuthority_LoadProvisionerByCertificate/fail_from_db === RUN TestAuthority_LoadProvisionerByCertificate/fail_from_admindb ---- PASS: TestAuthority_LoadProvisionerByCertificate (0.47s) +--- PASS: TestAuthority_LoadProvisionerByCertificate (0.52s) --- PASS: TestAuthority_LoadProvisionerByCertificate/ok_from_certificate (0.00s) --- PASS: TestAuthority_LoadProvisionerByCertificate/ok_from_db (0.00s) --- PASS: TestAuthority_LoadProvisionerByCertificate/ok_from_admindb (0.00s) @@ -4447,7 +4484,7 @@ --- PASS: Test_isRAProvisioner/nil_ra (0.00s) --- PASS: Test_isRAProvisioner/not_ra (0.00s) === RUN TestRoot -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestRoot/success === RUN TestRoot/not-found === RUN TestRoot/invalid-stored-certificate @@ -4457,24 +4494,24 @@ --- PASS: TestRoot/invalid-stored-certificate (0.00s) === RUN TestAuthority_GetRootCertificate === RUN TestAuthority_GetRootCertificate/ok -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s --- PASS: TestAuthority_GetRootCertificate (0.00s) --- PASS: TestAuthority_GetRootCertificate/ok (0.00s) === RUN TestAuthority_GetRootCertificates === RUN TestAuthority_GetRootCertificates/ok -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s --- PASS: TestAuthority_GetRootCertificates (0.00s) --- PASS: TestAuthority_GetRootCertificates/ok (0.00s) === RUN TestAuthority_GetRoots -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetRoots/ok --- PASS: TestAuthority_GetRoots (0.00s) --- PASS: TestAuthority_GetRoots/ok (0.00s) === RUN TestAuthority_GetFederation === RUN TestAuthority_GetFederation/ok -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetFederation/fail -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s --- PASS: TestAuthority_GetFederation (0.00s) --- PASS: TestAuthority_GetFederation/ok (0.00s) --- PASS: TestAuthority_GetFederation/fail (0.00s) @@ -4489,89 +4526,89 @@ --- PASS: TestAuthority_GetIntermediateCertificate/ok_empty (0.00s) --- PASS: TestAuthority_GetIntermediateCertificate/ok_nil (0.00s) === RUN TestAuthority_initHostOnly -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s --- PASS: TestAuthority_initHostOnly (0.00s) === RUN TestAuthority_initUserOnly -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s ---- PASS: TestAuthority_initUserOnly (0.01s) +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +--- PASS: TestAuthority_initUserOnly (0.00s) === RUN TestAuthority_SignSSH === RUN TestAuthority_SignSSH/ok-user -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-host -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-user-only -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-host-only -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-opts-type-user -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-opts-type-host -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-opts-principals -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-opts-principals#01 -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-opts-valid-after -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-opts-valid-before -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-cert-validator -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-cert-modifier -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:24 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-opts-validator -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-opts-modifier -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-custom-template -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-enrich-template -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-user-policy -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-host-policy -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-opts-type -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-cert-validator -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-cert-modifier -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-opts-validator -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-opts-modifier -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-bad-sign-options -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-no-user-key -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-no-host-key -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-bad-type -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-custom-template -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-custom-template-syntax-error-file -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-custom-template-syntax-value-file -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-user-policy -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-user-policy-with-host-cert -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-user-policy-with-bad-user -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-host-policy -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-host-policy-with-user-cert -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-host-policy-with-bad-host -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-enriching-webhooks -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-authorizing-webhooks -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s ---- PASS: TestAuthority_SignSSH (0.06s) +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +--- PASS: TestAuthority_SignSSH (0.05s) --- PASS: TestAuthority_SignSSH/ok-user (0.00s) --- PASS: TestAuthority_SignSSH/ok-host (0.00s) --- PASS: TestAuthority_SignSSH/ok-user-only (0.00s) @@ -4584,7 +4621,7 @@ --- PASS: TestAuthority_SignSSH/ok-opts-valid-before (0.00s) --- PASS: TestAuthority_SignSSH/ok-cert-validator (0.00s) --- PASS: TestAuthority_SignSSH/ok-cert-modifier (0.00s) - --- PASS: TestAuthority_SignSSH/ok-opts-validator (0.00s) + --- PASS: TestAuthority_SignSSH/ok-opts-validator (0.01s) --- PASS: TestAuthority_SignSSH/ok-opts-modifier (0.00s) --- PASS: TestAuthority_SignSSH/ok-custom-template (0.00s) --- PASS: TestAuthority_SignSSH/ok-enrich-template (0.00s) @@ -4612,23 +4649,23 @@ --- PASS: TestAuthority_SignSSH/fail-authorizing-webhooks (0.00s) === RUN TestAuthority_SignSSHAddUser === RUN TestAuthority_SignSSHAddUser/ok -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSHAddUser/ok-no-host-key -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSHAddUser/ok-custom-principal -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSHAddUser/ok-custom-command -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSHAddUser/ok-custom-principal-and-command -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSHAddUser/fail-no-user-key -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSHAddUser/fail-no-user-cert -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSHAddUser/fail-no-principals -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSHAddUser/fail-many-principals -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s --- PASS: TestAuthority_SignSSHAddUser (0.01s) --- PASS: TestAuthority_SignSSHAddUser/ok (0.00s) --- PASS: TestAuthority_SignSSHAddUser/ok-no-host-key (0.00s) @@ -4641,54 +4678,54 @@ --- PASS: TestAuthority_SignSSHAddUser/fail-many-principals (0.00s) === RUN TestAuthority_GetSSHRoots === RUN TestAuthority_GetSSHRoots/ok -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHRoots/nil -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s --- PASS: TestAuthority_GetSSHRoots (0.00s) --- PASS: TestAuthority_GetSSHRoots/ok (0.00s) --- PASS: TestAuthority_GetSSHRoots/nil (0.00s) === RUN TestAuthority_GetSSHFederation === RUN TestAuthority_GetSSHFederation/ok -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHFederation/nil -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s --- PASS: TestAuthority_GetSSHFederation (0.00s) --- PASS: TestAuthority_GetSSHFederation/ok (0.00s) --- PASS: TestAuthority_GetSSHFederation/nil (0.00s) === RUN TestAuthority_GetSSHConfig === RUN TestAuthority_GetSSHConfig/user -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/user#01 -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/host -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/host#01 -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/userWithData -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/hostWithData -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/userIncludesEmptyData -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/userIncludesWithoutTemplateVersion -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/userIncludesWithTemplateVersion -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/disabled -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/badType -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/userError -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/hostError -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/noTemplates -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/missingData -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/failError -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s ---- PASS: TestAuthority_GetSSHConfig (0.03s) +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +--- PASS: TestAuthority_GetSSHConfig (0.02s) --- PASS: TestAuthority_GetSSHConfig/user (0.00s) --- PASS: TestAuthority_GetSSHConfig/user#01 (0.00s) --- PASS: TestAuthority_GetSSHConfig/host (0.00s) @@ -4707,18 +4744,18 @@ --- PASS: TestAuthority_GetSSHConfig/failError (0.00s) === RUN TestAuthority_CheckSSHHost === RUN TestAuthority_CheckSSHHost/true -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_CheckSSHHost/false -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_CheckSSHHost/notImplemented -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_CheckSSHHost/notImplemented#01 -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_CheckSSHHost/internal -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_CheckSSHHost/internal#01 -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s ---- PASS: TestAuthority_CheckSSHHost (0.01s) +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +--- PASS: TestAuthority_CheckSSHHost (0.00s) --- PASS: TestAuthority_CheckSSHHost/true (0.00s) --- PASS: TestAuthority_CheckSSHHost/false (0.00s) --- PASS: TestAuthority_CheckSSHHost/notImplemented (0.00s) @@ -4754,44 +4791,44 @@ --- PASS: TestAuthority_GetSSHBastion/func_err (0.00s) --- PASS: TestAuthority_GetSSHBastion/error (0.00s) === RUN TestAuthority_GetSSHHosts -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHHosts/fail/getHostsFunc-fail === RUN TestAuthority_GetSSHHosts/ok/getHostsFunc-defined === RUN TestAuthority_GetSSHHosts/fail/db-get-fail -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHHosts/ok -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s --- PASS: TestAuthority_GetSSHHosts (0.00s) --- PASS: TestAuthority_GetSSHHosts/fail/getHostsFunc-fail (0.00s) --- PASS: TestAuthority_GetSSHHosts/ok/getHostsFunc-defined (0.00s) --- PASS: TestAuthority_GetSSHHosts/fail/db-get-fail (0.00s) --- PASS: TestAuthority_GetSSHHosts/ok (0.00s) === RUN TestAuthority_RekeySSH -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_RekeySSH/fail/opts-type +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_RekeySSH/fail/old-cert-validBefore === RUN TestAuthority_RekeySSH/fail/old-cert-no-user-key -=== RUN TestAuthority_RekeySSH/fail/old-cert-no-host-key -=== RUN TestAuthority_RekeySSH/fail/db-store -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_RekeySSH/ok === RUN TestAuthority_RekeySSH/fail/is-revoked -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_RekeySSH/fail/old-cert-validAfter +=== RUN TestAuthority_RekeySSH/fail/old-cert-no-host-key === RUN TestAuthority_RekeySSH/fail/unexpected-old-cert-type +=== RUN TestAuthority_RekeySSH/fail/db-store +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_RekeySSH/ok === RUN TestAuthority_RekeySSH/fail/is-revoked-error -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_RekeySSH/fail/opts-type --- PASS: TestAuthority_RekeySSH (0.01s) - --- PASS: TestAuthority_RekeySSH/fail/opts-type (0.00s) --- PASS: TestAuthority_RekeySSH/fail/old-cert-validBefore (0.00s) --- PASS: TestAuthority_RekeySSH/fail/old-cert-no-user-key (0.00s) - --- PASS: TestAuthority_RekeySSH/fail/old-cert-no-host-key (0.00s) - --- PASS: TestAuthority_RekeySSH/fail/db-store (0.00s) - --- PASS: TestAuthority_RekeySSH/ok (0.00s) --- PASS: TestAuthority_RekeySSH/fail/is-revoked (0.00s) --- PASS: TestAuthority_RekeySSH/fail/old-cert-validAfter (0.00s) + --- PASS: TestAuthority_RekeySSH/fail/old-cert-no-host-key (0.00s) --- PASS: TestAuthority_RekeySSH/fail/unexpected-old-cert-type (0.00s) + --- PASS: TestAuthority_RekeySSH/fail/db-store (0.00s) + --- PASS: TestAuthority_RekeySSH/ok (0.00s) --- PASS: TestAuthority_RekeySSH/fail/is-revoked-error (0.00s) + --- PASS: TestAuthority_RekeySSH/fail/opts-type (0.00s) === RUN TestIsValidForAddUser === RUN TestIsValidForAddUser/ok === RUN TestIsValidForAddUser/ok_oidc @@ -4809,151 +4846,151 @@ --- PASS: TestIsValidForAddUser/fail_no_principals (0.00s) --- PASS: TestIsValidForAddUser/fail_extra_principals (0.00s) === RUN TestAuthority_SignWithContext -2025/10/26 21:31:14 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/fail_merge_default_ASN1DN +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/fail_create_cert +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/fail_provisioner_duration_claim +=== RUN TestAuthority_SignWithContext/fail_bad_JSON_syntax_template_file +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/fail_bad_JSON_value_template_file +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignWithContext/fail_with_policy -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/fail_with_cnf -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/ok/csr_with_no_template_critical_SAN_extension -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/ok_with_policy -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/fail_invalid_extra_option +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/ok_with_custom_enforcer +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/fail_validate_sans_when_adding_common_name_not_in_claims +=== RUN TestAuthority_SignWithContext/fail_rsa_key_too_short === RUN TestAuthority_SignWithContext/fail_store_cert_in_db -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignWithContext/fail_with_custom_enforcer -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/fail_authorizing_webhooks +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/fail_enriching_webhooks +=== RUN TestAuthority_SignWithContext/fail_with_cnf +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/ok_with_enforced_modifier +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/ok_with_custom_template +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/fail_custom_template +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignWithContext/ok -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/ok_with_custom_enforcer -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/ok_with_enriching_webhook +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/ok/csr_with_no_template_critical_SAN_extension +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/ok_with_policy +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/ok_with_attestation_data +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignWithContext/ok_with_cnf -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignWithContext/fail_invalid_signature -=== RUN TestAuthority_SignWithContext/fail_merge_default_ASN1DN -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/fail_bad_JSON_syntax_template_file -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignWithContext/fail_with_provisioner_enforcer -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/ok_with_custom_template -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/ok_with_enriching_webhook -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/ok_with_attestation_data -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/fail_validate_sans_when_adding_common_name_not_in_claims -=== RUN TestAuthority_SignWithContext/fail_custom_template -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/fail_enriching_webhooks -=== RUN TestAuthority_SignWithContext/ok_with_enforced_modifier -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/fail_create_cert -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/fail_provisioner_duration_claim -=== RUN TestAuthority_SignWithContext/fail_rsa_key_too_short -=== RUN TestAuthority_SignWithContext/fail_bad_JSON_value_template_file -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s ---- PASS: TestAuthority_SignWithContext (1.63s) - --- PASS: TestAuthority_SignWithContext/fail_with_policy (1.44s) - --- PASS: TestAuthority_SignWithContext/fail_with_cnf (0.00s) - --- PASS: TestAuthority_SignWithContext/ok/csr_with_no_template_critical_SAN_extension (0.00s) - --- PASS: TestAuthority_SignWithContext/ok_with_policy (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_invalid_extra_option (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_store_cert_in_db (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_with_custom_enforcer (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_authorizing_webhooks (0.00s) - --- PASS: TestAuthority_SignWithContext/ok (0.00s) - --- PASS: TestAuthority_SignWithContext/ok_with_custom_enforcer (0.00s) - --- PASS: TestAuthority_SignWithContext/ok_with_cnf (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_invalid_signature (0.00s) +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/fail_authorizing_webhooks +=== RUN TestAuthority_SignWithContext/fail_invalid_extra_option +--- PASS: TestAuthority_SignWithContext (0.16s) --- PASS: TestAuthority_SignWithContext/fail_merge_default_ASN1DN (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_create_cert (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_provisioner_duration_claim (0.00s) --- PASS: TestAuthority_SignWithContext/fail_bad_JSON_syntax_template_file (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_with_provisioner_enforcer (0.01s) - --- PASS: TestAuthority_SignWithContext/ok_with_custom_template (0.00s) - --- PASS: TestAuthority_SignWithContext/ok_with_enriching_webhook (0.01s) - --- PASS: TestAuthority_SignWithContext/ok_with_attestation_data (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_bad_JSON_value_template_file (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_with_policy (0.00s) + --- PASS: TestAuthority_SignWithContext/ok_with_custom_enforcer (0.00s) --- PASS: TestAuthority_SignWithContext/fail_validate_sans_when_adding_common_name_not_in_claims (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_custom_template (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_rsa_key_too_short (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_store_cert_in_db (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_with_custom_enforcer (0.00s) --- PASS: TestAuthority_SignWithContext/fail_enriching_webhooks (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_with_cnf (0.00s) --- PASS: TestAuthority_SignWithContext/ok_with_enforced_modifier (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_create_cert (0.01s) - --- PASS: TestAuthority_SignWithContext/fail_provisioner_duration_claim (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_rsa_key_too_short (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_bad_JSON_value_template_file (0.00s) + --- PASS: TestAuthority_SignWithContext/ok_with_custom_template (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_custom_template (0.00s) + --- PASS: TestAuthority_SignWithContext/ok (0.00s) + --- PASS: TestAuthority_SignWithContext/ok_with_enriching_webhook (0.00s) + --- PASS: TestAuthority_SignWithContext/ok/csr_with_no_template_critical_SAN_extension (0.00s) + --- PASS: TestAuthority_SignWithContext/ok_with_policy (0.00s) + --- PASS: TestAuthority_SignWithContext/ok_with_attestation_data (0.00s) + --- PASS: TestAuthority_SignWithContext/ok_with_cnf (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_invalid_signature (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_with_provisioner_enforcer (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_authorizing_webhooks (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_invalid_extra_option (0.00s) === RUN TestAuthority_Renew -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_Renew/fail/create-cert -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Renew/fail/unauthorized === RUN TestAuthority_Renew/fail/WithAuthorizeRenewFunc -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Renew/ok === RUN TestAuthority_Renew/ok/WithExtraNames === RUN TestAuthority_Renew/ok/success-new-intermediate -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Renew/ok/WithAuthorizeRenewFunc -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_Renew/fail/create-cert +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s --- PASS: TestAuthority_Renew (0.02s) - --- PASS: TestAuthority_Renew/fail/create-cert (0.00s) --- PASS: TestAuthority_Renew/fail/unauthorized (0.00s) --- PASS: TestAuthority_Renew/fail/WithAuthorizeRenewFunc (0.00s) --- PASS: TestAuthority_Renew/ok (0.00s) --- PASS: TestAuthority_Renew/ok/WithExtraNames (0.00s) - --- PASS: TestAuthority_Renew/ok/success-new-intermediate (0.01s) + --- PASS: TestAuthority_Renew/ok/success-new-intermediate (0.00s) --- PASS: TestAuthority_Renew/ok/WithAuthorizeRenewFunc (0.00s) + --- PASS: TestAuthority_Renew/fail/create-cert (0.00s) === RUN TestAuthority_Rekey -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_Rekey/ok/rekey -=== RUN TestAuthority_Rekey/ok/renew/success-new-intermediate -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Rekey/fail/create-cert -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Rekey/fail/unauthorized === RUN TestAuthority_Rekey/ok/renew +=== RUN TestAuthority_Rekey/ok/rekey +=== RUN TestAuthority_Rekey/ok/renew/success-new-intermediate +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s --- PASS: TestAuthority_Rekey (0.01s) - --- PASS: TestAuthority_Rekey/ok/rekey (0.00s) - --- PASS: TestAuthority_Rekey/ok/renew/success-new-intermediate (0.00s) --- PASS: TestAuthority_Rekey/fail/create-cert (0.00s) --- PASS: TestAuthority_Rekey/fail/unauthorized (0.00s) --- PASS: TestAuthority_Rekey/ok/renew (0.00s) + --- PASS: TestAuthority_Rekey/ok/rekey (0.00s) + --- PASS: TestAuthority_Rekey/ok/renew/success-new-intermediate (0.00s) === RUN TestAuthority_GetTLSOptions === RUN TestAuthority_GetTLSOptions/default -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetTLSOptions/non-default -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s --- PASS: TestAuthority_GetTLSOptions (0.00s) --- PASS: TestAuthority_GetTLSOptions/default (0.00s) --- PASS: TestAuthority_GetTLSOptions/non-default (0.00s) === RUN TestAuthority_Revoke -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_Revoke/fail/token/authorizeRevoke_error -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_Revoke/ok/mTLS -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_Revoke/ok/mTLS-no-provisioner +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Revoke/fail/nil-db -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Revoke/fail/db-revoke -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Revoke/fail/already-revoked -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_Revoke/ok/token -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_Revoke/ok/mTLS +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_Revoke/ok/mTLS-no-provisioner +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Revoke/ok/ACME -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Revoke/ok/ssh ---- PASS: TestAuthority_Revoke (0.08s) - --- PASS: TestAuthority_Revoke/fail/token/authorizeRevoke_error (0.00s) - --- PASS: TestAuthority_Revoke/ok/mTLS (0.00s) - --- PASS: TestAuthority_Revoke/ok/mTLS-no-provisioner (0.00s) +=== RUN TestAuthority_Revoke/fail/token/authorizeRevoke_error +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_Revoke/ok/token +--- PASS: TestAuthority_Revoke (0.07s) --- PASS: TestAuthority_Revoke/fail/nil-db (0.00s) --- PASS: TestAuthority_Revoke/fail/db-revoke (0.00s) --- PASS: TestAuthority_Revoke/fail/already-revoked (0.00s) - --- PASS: TestAuthority_Revoke/ok/token (0.00s) + --- PASS: TestAuthority_Revoke/ok/mTLS (0.00s) + --- PASS: TestAuthority_Revoke/ok/mTLS-no-provisioner (0.00s) --- PASS: TestAuthority_Revoke/ok/ACME (0.00s) --- PASS: TestAuthority_Revoke/ok/ssh (0.00s) + --- PASS: TestAuthority_Revoke/fail/token/authorizeRevoke_error (0.00s) + --- PASS: TestAuthority_Revoke/ok/token (0.00s) === RUN TestAuthority_constraints === RUN TestAuthority_constraints/ok_dns === RUN TestAuthority_constraints/ok_ip @@ -4967,7 +5004,7 @@ === RUN TestAuthority_constraints/fail_excluded_emails === RUN TestAuthority_constraints/fail_permitted_uris === RUN TestAuthority_constraints/fail_excluded_uris ---- PASS: TestAuthority_constraints (0.02s) +--- PASS: TestAuthority_constraints (0.03s) --- PASS: TestAuthority_constraints/ok_dns (0.00s) --- PASS: TestAuthority_constraints/ok_ip (0.00s) --- PASS: TestAuthority_constraints/ok_email (0.00s) @@ -4981,34 +5018,34 @@ --- PASS: TestAuthority_constraints/fail_permitted_uris (0.00s) --- PASS: TestAuthority_constraints/fail_excluded_uris (0.00s) === RUN TestAuthority_CRL -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_CRL/fail/empty-crl -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_CRL/ok/crl-full ---- PASS: TestAuthority_CRL (0.12s) +--- PASS: TestAuthority_CRL (0.13s) --- PASS: TestAuthority_CRL/fail/empty-crl (0.00s) --- PASS: TestAuthority_CRL/ok/crl-full (0.00s) === RUN TestAuthority_GetX509Signer -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -2025/10/26 21:31:16 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:00:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetX509Signer/ok === RUN TestAuthority_GetX509Signer/fail --- PASS: TestAuthority_GetX509Signer (0.00s) --- PASS: TestAuthority_GetX509Signer/ok (0.00s) --- PASS: TestAuthority_GetX509Signer/fail (0.00s) PASS -ok github.com/smallstep/certificates/authority 3.492s +ok github.com/smallstep/certificates/authority 1.814s ? github.com/smallstep/certificates/authority/admin [no test files] === RUN TestHandler_requireEABEnabled -=== RUN TestHandler_requireEABEnabled/fail/prov.GetDetails === RUN TestHandler_requireEABEnabled/fail/prov.GetDetails.GetACME === RUN TestHandler_requireEABEnabled/ok/eab-disabled === RUN TestHandler_requireEABEnabled/ok/eab-enabled +=== RUN TestHandler_requireEABEnabled/fail/prov.GetDetails --- PASS: TestHandler_requireEABEnabled (0.00s) - --- PASS: TestHandler_requireEABEnabled/fail/prov.GetDetails (0.00s) --- PASS: TestHandler_requireEABEnabled/fail/prov.GetDetails.GetACME (0.00s) --- PASS: TestHandler_requireEABEnabled/ok/eab-disabled (0.00s) --- PASS: TestHandler_requireEABEnabled/ok/eab-enabled (0.00s) + --- PASS: TestHandler_requireEABEnabled/fail/prov.GetDetails (0.00s) === RUN TestCreateExternalAccountKeyRequest_Validate === RUN TestCreateExternalAccountKeyRequest_Validate/fail/reference-too-long === RUN TestCreateExternalAccountKeyRequest_Validate/ok/empty-reference @@ -5070,25 +5107,25 @@ --- PASS: TestHandler_GetAdmin/fail/auth.LoadAdminByID-not-found (0.00s) --- PASS: TestHandler_GetAdmin/ok (0.00s) === RUN TestHandler_GetAdmins -=== RUN TestHandler_GetAdmins/ok === RUN TestHandler_GetAdmins/fail/parse-cursor === RUN TestHandler_GetAdmins/fail/auth.GetAdmins +=== RUN TestHandler_GetAdmins/ok --- PASS: TestHandler_GetAdmins (0.00s) - --- PASS: TestHandler_GetAdmins/ok (0.00s) --- PASS: TestHandler_GetAdmins/fail/parse-cursor (0.00s) --- PASS: TestHandler_GetAdmins/fail/auth.GetAdmins (0.00s) + --- PASS: TestHandler_GetAdmins/ok (0.00s) === RUN TestHandler_CreateAdmin -=== RUN TestHandler_CreateAdmin/fail/ReadJSON === RUN TestHandler_CreateAdmin/fail/validate === RUN TestHandler_CreateAdmin/fail/auth.LoadProvisionerByName === RUN TestHandler_CreateAdmin/fail/auth.StoreAdmin === RUN TestHandler_CreateAdmin/ok +=== RUN TestHandler_CreateAdmin/fail/ReadJSON --- PASS: TestHandler_CreateAdmin (0.00s) - --- PASS: TestHandler_CreateAdmin/fail/ReadJSON (0.00s) --- PASS: TestHandler_CreateAdmin/fail/validate (0.00s) --- PASS: TestHandler_CreateAdmin/fail/auth.LoadProvisionerByName (0.00s) --- PASS: TestHandler_CreateAdmin/fail/auth.StoreAdmin (0.00s) --- PASS: TestHandler_CreateAdmin/ok (0.00s) + --- PASS: TestHandler_CreateAdmin/fail/ReadJSON (0.00s) === RUN TestHandler_DeleteAdmin === RUN TestHandler_DeleteAdmin/fail/auth.RemoveAdmin === RUN TestHandler_DeleteAdmin/ok @@ -5096,19 +5133,19 @@ --- PASS: TestHandler_DeleteAdmin/fail/auth.RemoveAdmin (0.00s) --- PASS: TestHandler_DeleteAdmin/ok (0.00s) === RUN TestHandler_UpdateAdmin -=== RUN TestHandler_UpdateAdmin/fail/auth.UpdateAdmin -=== RUN TestHandler_UpdateAdmin/ok === RUN TestHandler_UpdateAdmin/fail/ReadJSON === RUN TestHandler_UpdateAdmin/fail/validate ---- PASS: TestHandler_UpdateAdmin (0.00s) - --- PASS: TestHandler_UpdateAdmin/fail/auth.UpdateAdmin (0.00s) - --- PASS: TestHandler_UpdateAdmin/ok (0.00s) +=== RUN TestHandler_UpdateAdmin/fail/auth.UpdateAdmin +=== RUN TestHandler_UpdateAdmin/ok +--- PASS: TestHandler_UpdateAdmin (0.01s) --- PASS: TestHandler_UpdateAdmin/fail/ReadJSON (0.00s) --- PASS: TestHandler_UpdateAdmin/fail/validate (0.00s) + --- PASS: TestHandler_UpdateAdmin/fail/auth.UpdateAdmin (0.00s) + --- PASS: TestHandler_UpdateAdmin/ok (0.00s) === RUN TestHandler_requireAPIEnabled === RUN TestHandler_requireAPIEnabled/fail/auth.IsAdminAPIEnabled === RUN TestHandler_requireAPIEnabled/ok ---- PASS: TestHandler_requireAPIEnabled (0.00s) +--- PASS: TestHandler_requireAPIEnabled (0.01s) --- PASS: TestHandler_requireAPIEnabled/fail/auth.IsAdminAPIEnabled (0.00s) --- PASS: TestHandler_requireAPIEnabled/ok (0.00s) === RUN TestHandler_extractAuthorizeTokenAdmin @@ -5152,35 +5189,34 @@ --- PASS: TestHandler_loadExternalAccountKey/fail/reference-error (0.00s) --- PASS: TestHandler_loadExternalAccountKey/fail/no-key (0.00s) === RUN TestPolicyAdminResponder_GetAuthorityPolicy +=== RUN TestPolicyAdminResponder_GetAuthorityPolicy/fail/linkedca === RUN TestPolicyAdminResponder_GetAuthorityPolicy/fail/auth.GetAuthorityPolicy-error === RUN TestPolicyAdminResponder_GetAuthorityPolicy/fail/auth.GetAuthorityPolicy-not-found === RUN TestPolicyAdminResponder_GetAuthorityPolicy/ok -=== RUN TestPolicyAdminResponder_GetAuthorityPolicy/fail/linkedca --- PASS: TestPolicyAdminResponder_GetAuthorityPolicy (0.00s) + --- PASS: TestPolicyAdminResponder_GetAuthorityPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_GetAuthorityPolicy/fail/auth.GetAuthorityPolicy-error (0.00s) --- PASS: TestPolicyAdminResponder_GetAuthorityPolicy/fail/auth.GetAuthorityPolicy-not-found (0.00s) --- PASS: TestPolicyAdminResponder_GetAuthorityPolicy/ok (0.00s) - --- PASS: TestPolicyAdminResponder_GetAuthorityPolicy/fail/linkedca (0.00s) === RUN TestPolicyAdminResponder_CreateAuthorityPolicy -=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-policy-admin-lockout-error -=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-error -=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/ok === RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/linkedca === RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/auth.GetAuthorityPolicy-error === RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/existing-policy === RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/read.ProtoJSON === RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/validatePolicy +=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-policy-admin-lockout-error +=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-error +=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/ok --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-policy-admin-lockout-error (0.00s) - --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-error (0.00s) - --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/ok (0.00s) --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/auth.GetAuthorityPolicy-error (0.00s) --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/existing-policy (0.00s) --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/read.ProtoJSON (0.00s) --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/validatePolicy (0.00s) + --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-policy-admin-lockout-error (0.00s) + --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-error (0.00s) + --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/ok (0.00s) === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy -=== RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-policy-admin-lockout-error === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-error === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/ok === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/linkedca @@ -5188,8 +5224,8 @@ === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/no-existing-policy === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/read.ProtoJSON === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/validatePolicy +=== RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-policy-admin-lockout-error --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-policy-admin-lockout-error (0.00s) --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-error (0.00s) --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/ok (0.00s) --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/linkedca (0.00s) @@ -5197,18 +5233,19 @@ --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/no-existing-policy (0.00s) --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/read.ProtoJSON (0.00s) --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/validatePolicy (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-policy-admin-lockout-error (0.00s) === RUN TestPolicyAdminResponder_DeleteAuthorityPolicy +=== RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/auth.RemoveAuthorityPolicy-error +=== RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/ok === RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/linkedca === RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/auth.GetAuthorityPolicy-error === RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/no-existing-policy -=== RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/auth.RemoveAuthorityPolicy-error -=== RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/ok --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy (0.00s) + --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/auth.RemoveAuthorityPolicy-error (0.00s) + --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/ok (0.00s) --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/auth.GetAuthorityPolicy-error (0.00s) --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/no-existing-policy (0.00s) - --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/auth.RemoveAuthorityPolicy-error (0.00s) - --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/ok (0.00s) === RUN TestPolicyAdminResponder_GetProvisionerPolicy === RUN TestPolicyAdminResponder_GetProvisionerPolicy/fail/linkedca === RUN TestPolicyAdminResponder_GetProvisionerPolicy/fail/prov-no-policy @@ -5234,21 +5271,21 @@ --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/fail/auth.UpdateProvisioner-error (0.00s) --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/ok (0.00s) === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy -=== RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/linkedca -=== RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/no-existing-policy -=== RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/read.ProtoJSON === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/validatePolicy === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/auth.UpdateProvisioner-policy-admin-lockout-error === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/auth.UpdateProvisioner-error === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/ok +=== RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/linkedca +=== RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/no-existing-policy +=== RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/read.ProtoJSON --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/linkedca (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/no-existing-policy (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/read.ProtoJSON (0.00s) --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/validatePolicy (0.00s) --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/auth.UpdateProvisioner-policy-admin-lockout-error (0.00s) --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/auth.UpdateProvisioner-error (0.00s) --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/ok (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/linkedca (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/no-existing-policy (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/read.ProtoJSON (0.00s) === RUN TestPolicyAdminResponder_DeleteProvisionerPolicy === RUN TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/linkedca === RUN TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/no-existing-policy @@ -5260,51 +5297,51 @@ --- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/auth.UpdateProvisioner-error (0.00s) --- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy/ok (0.00s) === RUN TestPolicyAdminResponder_GetACMEAccountPolicy +=== RUN TestPolicyAdminResponder_GetACMEAccountPolicy/fail/linkedca === RUN TestPolicyAdminResponder_GetACMEAccountPolicy/fail/no-policy === RUN TestPolicyAdminResponder_GetACMEAccountPolicy/ok -=== RUN TestPolicyAdminResponder_GetACMEAccountPolicy/fail/linkedca --- PASS: TestPolicyAdminResponder_GetACMEAccountPolicy (0.00s) + --- PASS: TestPolicyAdminResponder_GetACMEAccountPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_GetACMEAccountPolicy/fail/no-policy (0.00s) --- PASS: TestPolicyAdminResponder_GetACMEAccountPolicy/ok (0.00s) - --- PASS: TestPolicyAdminResponder_GetACMEAccountPolicy/fail/linkedca (0.00s) === RUN TestPolicyAdminResponder_CreateACMEAccountPolicy +=== RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/ok === RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/linkedca === RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/existing-policy === RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/read.ProtoJSON === RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/validatePolicy === RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error -=== RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/ok --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy (0.00s) + --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/ok (0.00s) --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/existing-policy (0.00s) --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/read.ProtoJSON (0.00s) --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/validatePolicy (0.00s) --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error (0.00s) - --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/ok (0.00s) === RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy -=== RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/linkedca -=== RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/no-existing-policy === RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/read.ProtoJSON === RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/validatePolicy === RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error === RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/ok +=== RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/linkedca +=== RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/no-existing-policy --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/linkedca (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/no-existing-policy (0.00s) --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/read.ProtoJSON (0.00s) --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/validatePolicy (0.00s) --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error (0.00s) --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/ok (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/linkedca (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/no-existing-policy (0.00s) === RUN TestPolicyAdminResponder_DeleteACMEAccountPolicy +=== RUN TestPolicyAdminResponder_DeleteACMEAccountPolicy/ok === RUN TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/linkedca === RUN TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/no-existing-policy === RUN TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error -=== RUN TestPolicyAdminResponder_DeleteACMEAccountPolicy/ok --- PASS: TestPolicyAdminResponder_DeleteACMEAccountPolicy (0.00s) + --- PASS: TestPolicyAdminResponder_DeleteACMEAccountPolicy/ok (0.00s) --- PASS: TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/no-existing-policy (0.00s) --- PASS: TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error (0.00s) - --- PASS: TestPolicyAdminResponder_DeleteACMEAccountPolicy/ok (0.00s) === RUN Test_isBadRequest === RUN Test_isBadRequest/nil === RUN Test_isBadRequest/no-policy-error @@ -5338,13 +5375,13 @@ --- PASS: TestHandler_GetProvisioner/fail/db.GetProvisioner (0.00s) --- PASS: TestHandler_GetProvisioner/ok (0.00s) === RUN TestHandler_GetProvisioners +=== RUN TestHandler_GetProvisioners/ok === RUN TestHandler_GetProvisioners/fail/parse-cursor === RUN TestHandler_GetProvisioners/fail/auth.GetProvisioners -=== RUN TestHandler_GetProvisioners/ok --- PASS: TestHandler_GetProvisioners (0.00s) + --- PASS: TestHandler_GetProvisioners/ok (0.00s) --- PASS: TestHandler_GetProvisioners/fail/parse-cursor (0.00s) --- PASS: TestHandler_GetProvisioners/fail/auth.GetProvisioners (0.00s) - --- PASS: TestHandler_GetProvisioners/ok (0.00s) === RUN TestHandler_CreateProvisioner === RUN TestHandler_CreateProvisioner/fail/readProtoJSON === RUN TestHandler_CreateProvisioner/fail/validateTemplates @@ -5366,28 +5403,28 @@ --- PASS: TestHandler_DeleteProvisioner/fail/auth.RemoveProvisioner (0.00s) --- PASS: TestHandler_DeleteProvisioner/ok (0.00s) === RUN TestHandler_UpdateProvisioner -=== RUN TestHandler_UpdateProvisioner/fail/readProtoJSON -=== RUN TestHandler_UpdateProvisioner/fail/auth.LoadProvisionerByName -=== RUN TestHandler_UpdateProvisioner/fail/db.GetProvisioner === RUN TestHandler_UpdateProvisioner/fail/change-deletedAt-error === RUN TestHandler_UpdateProvisioner/fail/validateTemplates -=== RUN TestHandler_UpdateProvisioner/fail/auth.UpdateProvisioner -=== RUN TestHandler_UpdateProvisioner/ok +=== RUN TestHandler_UpdateProvisioner/fail/auth.LoadProvisionerByName === RUN TestHandler_UpdateProvisioner/fail/change-id-error === RUN TestHandler_UpdateProvisioner/fail/change-type-error === RUN TestHandler_UpdateProvisioner/fail/change-authority-id-error +=== RUN TestHandler_UpdateProvisioner/fail/auth.UpdateProvisioner +=== RUN TestHandler_UpdateProvisioner/ok +=== RUN TestHandler_UpdateProvisioner/fail/readProtoJSON +=== RUN TestHandler_UpdateProvisioner/fail/db.GetProvisioner === RUN TestHandler_UpdateProvisioner/fail/change-createdAt-error --- PASS: TestHandler_UpdateProvisioner (0.00s) - --- PASS: TestHandler_UpdateProvisioner/fail/readProtoJSON (0.00s) - --- PASS: TestHandler_UpdateProvisioner/fail/auth.LoadProvisionerByName (0.00s) - --- PASS: TestHandler_UpdateProvisioner/fail/db.GetProvisioner (0.00s) --- PASS: TestHandler_UpdateProvisioner/fail/change-deletedAt-error (0.00s) --- PASS: TestHandler_UpdateProvisioner/fail/validateTemplates (0.00s) - --- PASS: TestHandler_UpdateProvisioner/fail/auth.UpdateProvisioner (0.00s) - --- PASS: TestHandler_UpdateProvisioner/ok (0.00s) + --- PASS: TestHandler_UpdateProvisioner/fail/auth.LoadProvisionerByName (0.00s) --- PASS: TestHandler_UpdateProvisioner/fail/change-id-error (0.00s) --- PASS: TestHandler_UpdateProvisioner/fail/change-type-error (0.00s) --- PASS: TestHandler_UpdateProvisioner/fail/change-authority-id-error (0.00s) + --- PASS: TestHandler_UpdateProvisioner/fail/auth.UpdateProvisioner (0.00s) + --- PASS: TestHandler_UpdateProvisioner/ok (0.00s) + --- PASS: TestHandler_UpdateProvisioner/fail/readProtoJSON (0.00s) + --- PASS: TestHandler_UpdateProvisioner/fail/db.GetProvisioner (0.00s) --- PASS: TestHandler_UpdateProvisioner/fail/change-createdAt-error (0.00s) === RUN Test_validateTemplates === RUN Test_validateTemplates/ok @@ -5406,29 +5443,29 @@ --- PASS: Test_validateTemplates/fail/ssh-template-unknown-function (0.00s) --- PASS: Test_validateTemplates/fail/ssh-template-data (0.00s) === RUN TestWebhookAdminResponder_CreateProvisionerWebhook +=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/http-url === RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/unsupported-webhook-kind -=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/auth.UpdateProvisioner-error +=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/existing-webhook === RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/read.ProtoJSON -=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/relative-url -=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/http-url +=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/missing-url === RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/basic-auth-in-url === RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/secret-in-request +=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/auth.UpdateProvisioner-error === RUN TestWebhookAdminResponder_CreateProvisionerWebhook/ok -=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/existing-webhook === RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/missing-name -=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/missing-url +=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/relative-url --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook (0.00s) + --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/http-url (0.00s) --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/unsupported-webhook-kind (0.00s) - --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/auth.UpdateProvisioner-error (0.00s) + --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/existing-webhook (0.00s) --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/read.ProtoJSON (0.00s) - --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/relative-url (0.00s) - --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/http-url (0.00s) + --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/missing-url (0.00s) --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/basic-auth-in-url (0.00s) --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/secret-in-request (0.00s) + --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/auth.UpdateProvisioner-error (0.00s) --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/ok (0.00s) - --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/existing-webhook (0.00s) --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/missing-name (0.00s) - --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/missing-url (0.00s) + --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/relative-url (0.00s) === RUN TestWebhookAdminResponder_DeleteProvisionerWebhook === RUN TestWebhookAdminResponder_DeleteProvisionerWebhook/fail/auth.UpdateProvisioner-error === RUN TestWebhookAdminResponder_DeleteProvisionerWebhook/ok/not-found @@ -5440,27 +5477,27 @@ === RUN TestWebhookAdminResponder_UpdateProvisionerWebhook === RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/read.ProtoJSON === RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/missing-name -=== RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/relative-url +=== RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/missing-url +=== RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/http-url === RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/basic-auth-in-url +=== RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/not-found +=== RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/relative-url === RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/different-secret-in-request === RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/auth.UpdateProvisioner-error -=== RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/not-found -=== RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/missing-url -=== RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/http-url === RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/ok ---- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook (0.01s) +--- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook (0.00s) --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/read.ProtoJSON (0.00s) --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/missing-name (0.00s) - --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/relative-url (0.00s) + --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/missing-url (0.00s) + --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/http-url (0.00s) --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/basic-auth-in-url (0.00s) + --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/not-found (0.00s) + --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/relative-url (0.00s) --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/different-secret-in-request (0.00s) --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/auth.UpdateProvisioner-error (0.00s) - --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/not-found (0.00s) - --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/missing-url (0.00s) - --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/http-url (0.00s) --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/ok (0.00s) PASS -ok github.com/smallstep/certificates/authority/admin/api 0.092s +ok github.com/smallstep/certificates/authority/admin/api 0.105s === RUN TestDB_getDBAdminBytes === RUN TestDB_getDBAdminBytes/fail/not-found === RUN TestDB_getDBAdminBytes/fail/db.Get-error @@ -5470,69 +5507,69 @@ --- PASS: TestDB_getDBAdminBytes/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBAdminBytes/ok (0.00s) === RUN TestDB_getDBAdmin +=== RUN TestDB_getDBAdmin/fail/not-found +=== RUN TestDB_getDBAdmin/fail/db.Get-error === RUN TestDB_getDBAdmin/fail/unmarshal-error === RUN TestDB_getDBAdmin/fail/deleted === RUN TestDB_getDBAdmin/ok -=== RUN TestDB_getDBAdmin/fail/not-found -=== RUN TestDB_getDBAdmin/fail/db.Get-error --- PASS: TestDB_getDBAdmin (0.00s) + --- PASS: TestDB_getDBAdmin/fail/not-found (0.00s) + --- PASS: TestDB_getDBAdmin/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBAdmin/fail/unmarshal-error (0.00s) --- PASS: TestDB_getDBAdmin/fail/deleted (0.00s) --- PASS: TestDB_getDBAdmin/ok (0.00s) - --- PASS: TestDB_getDBAdmin/fail/not-found (0.00s) - --- PASS: TestDB_getDBAdmin/fail/db.Get-error (0.00s) === RUN TestDB_unmarshalDBAdmin === RUN TestDB_unmarshalDBAdmin/fail/unmarshal-error === RUN TestDB_unmarshalDBAdmin/fail/deleted-error === RUN TestDB_unmarshalDBAdmin/fail/authority-mismatch-error === RUN TestDB_unmarshalDBAdmin/ok ---- PASS: TestDB_unmarshalDBAdmin (0.00s) +--- PASS: TestDB_unmarshalDBAdmin (0.01s) --- PASS: TestDB_unmarshalDBAdmin/fail/unmarshal-error (0.00s) --- PASS: TestDB_unmarshalDBAdmin/fail/deleted-error (0.00s) --- PASS: TestDB_unmarshalDBAdmin/fail/authority-mismatch-error (0.00s) --- PASS: TestDB_unmarshalDBAdmin/ok (0.00s) === RUN TestDB_unmarshalAdmin -=== RUN TestDB_unmarshalAdmin/ok === RUN TestDB_unmarshalAdmin/fail/unmarshal-error === RUN TestDB_unmarshalAdmin/fail/deleted-error +=== RUN TestDB_unmarshalAdmin/ok --- PASS: TestDB_unmarshalAdmin (0.00s) - --- PASS: TestDB_unmarshalAdmin/ok (0.00s) --- PASS: TestDB_unmarshalAdmin/fail/unmarshal-error (0.00s) --- PASS: TestDB_unmarshalAdmin/fail/deleted-error (0.00s) + --- PASS: TestDB_unmarshalAdmin/ok (0.00s) === RUN TestDB_GetAdmin +=== RUN TestDB_GetAdmin/fail/not-found +=== RUN TestDB_GetAdmin/fail/db.Get-error === RUN TestDB_GetAdmin/fail/unmarshal-error === RUN TestDB_GetAdmin/fail/deleted === RUN TestDB_GetAdmin/fail/authorityID-mismatch === RUN TestDB_GetAdmin/ok -=== RUN TestDB_GetAdmin/fail/not-found -=== RUN TestDB_GetAdmin/fail/db.Get-error --- PASS: TestDB_GetAdmin (0.00s) + --- PASS: TestDB_GetAdmin/fail/not-found (0.00s) + --- PASS: TestDB_GetAdmin/fail/db.Get-error (0.00s) --- PASS: TestDB_GetAdmin/fail/unmarshal-error (0.00s) --- PASS: TestDB_GetAdmin/fail/deleted (0.00s) --- PASS: TestDB_GetAdmin/fail/authorityID-mismatch (0.00s) --- PASS: TestDB_GetAdmin/ok (0.00s) - --- PASS: TestDB_GetAdmin/fail/not-found (0.00s) - --- PASS: TestDB_GetAdmin/fail/db.Get-error (0.00s) === RUN TestDB_DeleteAdmin -=== RUN TestDB_DeleteAdmin/fail/not-found === RUN TestDB_DeleteAdmin/fail/db.Get-error === RUN TestDB_DeleteAdmin/fail/save-error === RUN TestDB_DeleteAdmin/ok +=== RUN TestDB_DeleteAdmin/fail/not-found --- PASS: TestDB_DeleteAdmin (0.00s) - --- PASS: TestDB_DeleteAdmin/fail/not-found (0.00s) --- PASS: TestDB_DeleteAdmin/fail/db.Get-error (0.00s) --- PASS: TestDB_DeleteAdmin/fail/save-error (0.00s) --- PASS: TestDB_DeleteAdmin/ok (0.00s) + --- PASS: TestDB_DeleteAdmin/fail/not-found (0.00s) === RUN TestDB_UpdateAdmin +=== RUN TestDB_UpdateAdmin/fail/save-error === RUN TestDB_UpdateAdmin/ok === RUN TestDB_UpdateAdmin/fail/not-found === RUN TestDB_UpdateAdmin/fail/db.Get-error -=== RUN TestDB_UpdateAdmin/fail/save-error --- PASS: TestDB_UpdateAdmin (0.00s) + --- PASS: TestDB_UpdateAdmin/fail/save-error (0.00s) --- PASS: TestDB_UpdateAdmin/ok (0.00s) --- PASS: TestDB_UpdateAdmin/fail/not-found (0.00s) --- PASS: TestDB_UpdateAdmin/fail/db.Get-error (0.00s) - --- PASS: TestDB_UpdateAdmin/fail/save-error (0.00s) === RUN TestDB_CreateAdmin === RUN TestDB_CreateAdmin/fail/save-error === RUN TestDB_CreateAdmin/ok @@ -5552,31 +5589,31 @@ --- PASS: TestDB_GetAdmins/ok (0.00s) --- PASS: TestDB_GetAdmins/fail/db.List-error (0.00s) === RUN TestDB_getDBAuthorityPolicyBytes +=== RUN TestDB_getDBAuthorityPolicyBytes/fail/not-found === RUN TestDB_getDBAuthorityPolicyBytes/fail/db.Get-error === RUN TestDB_getDBAuthorityPolicyBytes/ok -=== RUN TestDB_getDBAuthorityPolicyBytes/fail/not-found --- PASS: TestDB_getDBAuthorityPolicyBytes (0.00s) + --- PASS: TestDB_getDBAuthorityPolicyBytes/fail/not-found (0.00s) --- PASS: TestDB_getDBAuthorityPolicyBytes/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBAuthorityPolicyBytes/ok (0.00s) - --- PASS: TestDB_getDBAuthorityPolicyBytes/fail/not-found (0.00s) === RUN TestDB_getDBAuthorityPolicy -=== RUN TestDB_getDBAuthorityPolicy/ok/empty-bytes === RUN TestDB_getDBAuthorityPolicy/ok === RUN TestDB_getDBAuthorityPolicy/fail/not-found === RUN TestDB_getDBAuthorityPolicy/fail/unmarshal-error === RUN TestDB_getDBAuthorityPolicy/fail/authorityID-error +=== RUN TestDB_getDBAuthorityPolicy/ok/empty-bytes --- PASS: TestDB_getDBAuthorityPolicy (0.00s) - --- PASS: TestDB_getDBAuthorityPolicy/ok/empty-bytes (0.00s) --- PASS: TestDB_getDBAuthorityPolicy/ok (0.00s) --- PASS: TestDB_getDBAuthorityPolicy/fail/not-found (0.00s) --- PASS: TestDB_getDBAuthorityPolicy/fail/unmarshal-error (0.00s) --- PASS: TestDB_getDBAuthorityPolicy/fail/authorityID-error (0.00s) + --- PASS: TestDB_getDBAuthorityPolicy/ok/empty-bytes (0.00s) === RUN TestDB_CreateAuthorityPolicy -=== RUN TestDB_CreateAuthorityPolicy/ok === RUN TestDB_CreateAuthorityPolicy/fail/save-error +=== RUN TestDB_CreateAuthorityPolicy/ok --- PASS: TestDB_CreateAuthorityPolicy (0.00s) - --- PASS: TestDB_CreateAuthorityPolicy/ok (0.00s) --- PASS: TestDB_CreateAuthorityPolicy/fail/save-error (0.00s) + --- PASS: TestDB_CreateAuthorityPolicy/ok (0.00s) === RUN TestDB_GetAuthorityPolicy === RUN TestDB_GetAuthorityPolicy/fail/not-found === RUN TestDB_GetAuthorityPolicy/fail/db.Get-error @@ -5586,25 +5623,25 @@ --- PASS: TestDB_GetAuthorityPolicy/fail/db.Get-error (0.00s) --- PASS: TestDB_GetAuthorityPolicy/ok (0.00s) === RUN TestDB_UpdateAuthorityPolicy -=== RUN TestDB_UpdateAuthorityPolicy/ok === RUN TestDB_UpdateAuthorityPolicy/fail/not-found === RUN TestDB_UpdateAuthorityPolicy/fail/db.Get-error === RUN TestDB_UpdateAuthorityPolicy/fail/save-error +=== RUN TestDB_UpdateAuthorityPolicy/ok --- PASS: TestDB_UpdateAuthorityPolicy (0.00s) - --- PASS: TestDB_UpdateAuthorityPolicy/ok (0.00s) --- PASS: TestDB_UpdateAuthorityPolicy/fail/not-found (0.00s) --- PASS: TestDB_UpdateAuthorityPolicy/fail/db.Get-error (0.00s) --- PASS: TestDB_UpdateAuthorityPolicy/fail/save-error (0.00s) + --- PASS: TestDB_UpdateAuthorityPolicy/ok (0.00s) === RUN TestDB_DeleteAuthorityPolicy +=== RUN TestDB_DeleteAuthorityPolicy/fail/not-found === RUN TestDB_DeleteAuthorityPolicy/fail/db.Get-error === RUN TestDB_DeleteAuthorityPolicy/fail/save-error === RUN TestDB_DeleteAuthorityPolicy/ok -=== RUN TestDB_DeleteAuthorityPolicy/fail/not-found --- PASS: TestDB_DeleteAuthorityPolicy (0.00s) + --- PASS: TestDB_DeleteAuthorityPolicy/fail/not-found (0.00s) --- PASS: TestDB_DeleteAuthorityPolicy/fail/db.Get-error (0.00s) --- PASS: TestDB_DeleteAuthorityPolicy/fail/save-error (0.00s) --- PASS: TestDB_DeleteAuthorityPolicy/ok (0.00s) - --- PASS: TestDB_DeleteAuthorityPolicy/fail/not-found (0.00s) === RUN Test_linkedToDB === RUN Test_linkedToDB/nil_policy === RUN Test_linkedToDB/no_x509_nor_ssh @@ -5612,7 +5649,7 @@ === RUN Test_linkedToDB/ssh_user === RUN Test_linkedToDB/full_ssh_policy === RUN Test_linkedToDB/full_policy ---- PASS: Test_linkedToDB (0.01s) +--- PASS: Test_linkedToDB (0.00s) --- PASS: Test_linkedToDB/nil_policy (0.00s) --- PASS: Test_linkedToDB/no_x509_nor_ssh (0.00s) --- PASS: Test_linkedToDB/x509 (0.00s) @@ -5640,27 +5677,27 @@ --- PASS: TestDB_getDBProvisionerBytes/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBProvisionerBytes/ok (0.00s) === RUN TestDB_getDBProvisioner -=== RUN TestDB_getDBProvisioner/fail/not-found -=== RUN TestDB_getDBProvisioner/fail/db.Get-error === RUN TestDB_getDBProvisioner/fail/unmarshal-error === RUN TestDB_getDBProvisioner/fail/deleted === RUN TestDB_getDBProvisioner/ok +=== RUN TestDB_getDBProvisioner/fail/not-found +=== RUN TestDB_getDBProvisioner/fail/db.Get-error --- PASS: TestDB_getDBProvisioner (0.00s) - --- PASS: TestDB_getDBProvisioner/fail/not-found (0.00s) - --- PASS: TestDB_getDBProvisioner/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBProvisioner/fail/unmarshal-error (0.00s) --- PASS: TestDB_getDBProvisioner/fail/deleted (0.00s) --- PASS: TestDB_getDBProvisioner/ok (0.00s) + --- PASS: TestDB_getDBProvisioner/fail/not-found (0.00s) + --- PASS: TestDB_getDBProvisioner/fail/db.Get-error (0.00s) === RUN TestDB_unmarshalDBProvisioner -=== RUN TestDB_unmarshalDBProvisioner/fail/unmarshal-error -=== RUN TestDB_unmarshalDBProvisioner/fail/deleted-error === RUN TestDB_unmarshalDBProvisioner/fail/authority-mismatch-error === RUN TestDB_unmarshalDBProvisioner/ok +=== RUN TestDB_unmarshalDBProvisioner/fail/unmarshal-error +=== RUN TestDB_unmarshalDBProvisioner/fail/deleted-error --- PASS: TestDB_unmarshalDBProvisioner (0.00s) - --- PASS: TestDB_unmarshalDBProvisioner/fail/unmarshal-error (0.00s) - --- PASS: TestDB_unmarshalDBProvisioner/fail/deleted-error (0.00s) --- PASS: TestDB_unmarshalDBProvisioner/fail/authority-mismatch-error (0.00s) --- PASS: TestDB_unmarshalDBProvisioner/ok (0.00s) + --- PASS: TestDB_unmarshalDBProvisioner/fail/unmarshal-error (0.00s) + --- PASS: TestDB_unmarshalDBProvisioner/fail/deleted-error (0.00s) === RUN TestDB_unmarshalProvisioner === RUN TestDB_unmarshalProvisioner/fail/deleted-error === RUN TestDB_unmarshalProvisioner/ok @@ -5684,15 +5721,15 @@ --- PASS: TestDB_GetProvisioner/fail/authorityID-mismatch (0.00s) --- PASS: TestDB_GetProvisioner/ok (0.00s) === RUN TestDB_DeleteProvisioner -=== RUN TestDB_DeleteProvisioner/fail/not-found -=== RUN TestDB_DeleteProvisioner/fail/db.Get-error === RUN TestDB_DeleteProvisioner/fail/save-error === RUN TestDB_DeleteProvisioner/ok +=== RUN TestDB_DeleteProvisioner/fail/not-found +=== RUN TestDB_DeleteProvisioner/fail/db.Get-error --- PASS: TestDB_DeleteProvisioner (0.00s) - --- PASS: TestDB_DeleteProvisioner/fail/not-found (0.00s) - --- PASS: TestDB_DeleteProvisioner/fail/db.Get-error (0.00s) --- PASS: TestDB_DeleteProvisioner/fail/save-error (0.00s) --- PASS: TestDB_DeleteProvisioner/ok (0.00s) + --- PASS: TestDB_DeleteProvisioner/fail/not-found (0.00s) + --- PASS: TestDB_DeleteProvisioner/fail/db.Get-error (0.00s) === RUN TestDB_GetProvisioners === RUN TestDB_GetProvisioners/fail/db.List-error === RUN TestDB_GetProvisioners/fail/unmarshal-error @@ -5712,19 +5749,19 @@ --- PASS: TestDB_CreateProvisioner/fail/save-error (0.00s) --- PASS: TestDB_CreateProvisioner/ok (0.00s) === RUN TestDB_UpdateProvisioner +=== RUN TestDB_UpdateProvisioner/fail/db.Get-error +=== RUN TestDB_UpdateProvisioner/fail/update-deleted === RUN TestDB_UpdateProvisioner/fail/update-type-error === RUN TestDB_UpdateProvisioner/fail/save-error === RUN TestDB_UpdateProvisioner/ok === RUN TestDB_UpdateProvisioner/fail/not-found -=== RUN TestDB_UpdateProvisioner/fail/db.Get-error -=== RUN TestDB_UpdateProvisioner/fail/update-deleted --- PASS: TestDB_UpdateProvisioner (0.00s) + --- PASS: TestDB_UpdateProvisioner/fail/db.Get-error (0.00s) + --- PASS: TestDB_UpdateProvisioner/fail/update-deleted (0.00s) --- PASS: TestDB_UpdateProvisioner/fail/update-type-error (0.00s) --- PASS: TestDB_UpdateProvisioner/fail/save-error (0.00s) --- PASS: TestDB_UpdateProvisioner/ok (0.00s) --- PASS: TestDB_UpdateProvisioner/fail/not-found (0.00s) - --- PASS: TestDB_UpdateProvisioner/fail/db.Get-error (0.00s) - --- PASS: TestDB_UpdateProvisioner/fail/update-deleted (0.00s) === RUN Test_linkedcaWebhooksToDB === RUN Test_linkedcaWebhooksToDB/nil === RUN Test_linkedcaWebhooksToDB/zero @@ -5746,9 +5783,14 @@ --- PASS: Test_dbWebhooksToLinkedca/bearer (0.00s) --- PASS: Test_dbWebhooksToLinkedca/basic (0.00s) PASS -ok github.com/smallstep/certificates/authority/admin/db/nosql 0.065s +ok github.com/smallstep/certificates/authority/admin/db/nosql 0.067s ? github.com/smallstep/certificates/authority/administrator [no test files] === RUN TestConfigValidate +=== RUN TestConfigValidate/skip-validation +tc.tls = +*tc.config.TLS = +=== RUN TestConfigValidate/invalid-address +=== RUN TestConfigValidate/empty-dnsNames === RUN TestConfigValidate/empty-TLS tc.tls = &{[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256] 1.2 1.3 false} *tc.config.TLS = &{[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256] 1.2 1.3 false} @@ -5758,28 +5800,23 @@ === RUN TestConfigValidate/custom-tls-values tc.tls = &{[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305] 1.0 1.1 true} *tc.config.TLS = &{[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305] 1.0 1.1 true} -=== RUN TestConfigValidate/skip-validation -tc.tls = -*tc.config.TLS = === RUN TestConfigValidate/empty-address -=== RUN TestConfigValidate/invalid-address -=== RUN TestConfigValidate/empty-intermediate-cert -=== RUN TestConfigValidate/empty-dnsNames -=== RUN TestConfigValidate/tls-min>max === RUN TestConfigValidate/empty-root +=== RUN TestConfigValidate/empty-intermediate-cert === RUN TestConfigValidate/empty-intermediate-key ---- PASS: TestConfigValidate (0.01s) +=== RUN TestConfigValidate/tls-min>max +--- PASS: TestConfigValidate (0.00s) + --- PASS: TestConfigValidate/skip-validation (0.00s) + --- PASS: TestConfigValidate/invalid-address (0.00s) + --- PASS: TestConfigValidate/empty-dnsNames (0.00s) --- PASS: TestConfigValidate/empty-TLS (0.00s) --- PASS: TestConfigValidate/empty-TLS-values (0.00s) --- PASS: TestConfigValidate/custom-tls-values (0.00s) - --- PASS: TestConfigValidate/skip-validation (0.00s) --- PASS: TestConfigValidate/empty-address (0.00s) - --- PASS: TestConfigValidate/invalid-address (0.00s) - --- PASS: TestConfigValidate/empty-intermediate-cert (0.00s) - --- PASS: TestConfigValidate/empty-dnsNames (0.00s) - --- PASS: TestConfigValidate/tls-min>max (0.00s) --- PASS: TestConfigValidate/empty-root (0.00s) + --- PASS: TestConfigValidate/empty-intermediate-cert (0.00s) --- PASS: TestConfigValidate/empty-intermediate-key (0.00s) + --- PASS: TestConfigValidate/tls-min>max (0.00s) === RUN TestAuthConfigValidate === RUN TestAuthConfigValidate/fail-nil-authconfig === RUN TestAuthConfigValidate/ok-empty-provisioners @@ -5997,7 +6034,7 @@ --- PASS: Test_multiString_UnmarshalJSON/error (0.00s) --- PASS: Test_multiString_UnmarshalJSON/nil (0.00s) PASS -ok github.com/smallstep/certificates/authority/config 0.059s +ok github.com/smallstep/certificates/authority/config 0.056s === RUN TestNew === RUN TestNew/ok === RUN TestNew/ok_with_constraints @@ -6101,26 +6138,26 @@ --- PASS: TestPolicyToCertificates/partial-policy (0.00s) --- PASS: TestPolicyToCertificates/full-policy (0.00s) PASS -ok github.com/smallstep/certificates/authority/policy 0.022s +ok github.com/smallstep/certificates/authority/policy 0.019s === RUN TestClient === RUN TestClient/http === RUN TestClient/tls === RUN TestClient/nil === RUN TestClient/empty ---- PASS: TestClient (0.04s) - --- PASS: TestClient/http (0.01s) - --- PASS: TestClient/tls (0.02s) +--- PASS: TestClient (0.03s) + --- PASS: TestClient/http (0.00s) + --- PASS: TestClient/tls (0.01s) --- PASS: TestClient/nil (0.00s) --- PASS: TestClient/empty (0.00s) === RUN TestClient_SetNew === RUN TestClient_SetNew/ok === RUN TestClient_SetNew/fail === RUN TestClient_SetNew/ok_again -2025/10/26 21:31:13 http: TLS handshake error from 127.0.0.1:54466: remote error: tls: bad certificate ---- PASS: TestClient_SetNew (0.01s) - --- PASS: TestClient_SetNew/ok (0.00s) - --- PASS: TestClient_SetNew/fail (0.00s) - --- PASS: TestClient_SetNew/ok_again (0.00s) +2026/11/30 06:00:23 http: TLS handshake error from 127.0.0.1:36074: remote error: tls: bad certificate +--- PASS: TestClient_SetNew (0.02s) + --- PASS: TestClient_SetNew/ok (0.01s) + --- PASS: TestClient_SetNew/fail (0.01s) + --- PASS: TestClient_SetNew/ok_again (0.01s) === RUN TestClient_parallel === PAUSE TestClient_parallel === CONT TestClient_parallel @@ -6144,34 +6181,35 @@ === PAUSE TestClient_parallel/8 === RUN TestClient_parallel/9 === PAUSE TestClient_parallel/9 -=== CONT TestClient_parallel/8 === CONT TestClient_parallel/0 +=== CONT TestClient_parallel/4 +=== CONT TestClient_parallel/1 === CONT TestClient_parallel/7 +=== CONT TestClient_parallel/9 +=== CONT TestClient_parallel/8 === CONT TestClient_parallel/6 +=== CONT TestClient_parallel/2 === CONT TestClient_parallel/5 -=== CONT TestClient_parallel/4 === CONT TestClient_parallel/3 -=== CONT TestClient_parallel/2 -=== CONT TestClient_parallel/1 -=== CONT TestClient_parallel/9 -2025/10/26 21:31:13 http: TLS handshake error from 127.0.0.1:40082: write tcp 127.0.0.1:45385->127.0.0.1:40082: use of closed network connection -2025/10/26 21:31:13 http: TLS handshake error from 127.0.0.1:40066: write tcp 127.0.0.1:45385->127.0.0.1:40066: use of closed network connection -2025/10/26 21:31:13 http: TLS handshake error from 127.0.0.1:40088: write tcp 127.0.0.1:45385->127.0.0.1:40088: use of closed network connection -2025/10/26 21:31:13 http: TLS handshake error from 127.0.0.1:40058: write tcp 127.0.0.1:45385->127.0.0.1:40058: use of closed network connection -2025/10/26 21:31:13 http: TLS handshake error from 127.0.0.1:40096: write tcp 127.0.0.1:45385->127.0.0.1:40096: use of closed network connection +2026/11/30 06:00:23 http: TLS handshake error from 127.0.0.1:33392: read tcp 127.0.0.1:41887->127.0.0.1:33392: use of closed network connection +2026/11/30 06:00:23 http: TLS handshake error from 127.0.0.1:33394: write tcp 127.0.0.1:41887->127.0.0.1:33394: use of closed network connection +2026/11/30 06:00:23 http: TLS handshake error from 127.0.0.1:33390: write tcp 127.0.0.1:41887->127.0.0.1:33390: use of closed network connection +2026/11/30 06:00:23 http: TLS handshake error from 127.0.0.1:33374: write tcp 127.0.0.1:41887->127.0.0.1:33374: use of closed network connection +2026/11/30 06:00:23 http: TLS handshake error from 127.0.0.1:33406: write tcp 127.0.0.1:41887->127.0.0.1:33406: use of closed network connection +2026/11/30 06:00:23 http: TLS handshake error from 127.0.0.1:33368: write tcp 127.0.0.1:41887->127.0.0.1:33368: use of closed network connection --- PASS: TestClient_parallel (0.01s) + --- PASS: TestClient_parallel/5 (0.02s) --- PASS: TestClient_parallel/4 (0.02s) + --- PASS: TestClient_parallel/2 (0.02s) --- PASS: TestClient_parallel/3 (0.02s) - --- PASS: TestClient_parallel/1 (0.02s) - --- PASS: TestClient_parallel/6 (0.02s) - --- PASS: TestClient_parallel/5 (0.02s) --- PASS: TestClient_parallel/8 (0.02s) - --- PASS: TestClient_parallel/0 (0.03s) - --- PASS: TestClient_parallel/2 (0.03s) + --- PASS: TestClient_parallel/6 (0.02s) + --- PASS: TestClient_parallel/0 (0.02s) + --- PASS: TestClient_parallel/7 (0.02s) + --- PASS: TestClient_parallel/1 (0.02s) --- PASS: TestClient_parallel/9 (0.03s) - --- PASS: TestClient_parallel/7 (0.03s) PASS -ok github.com/smallstep/certificates/authority/poolhttp 0.111s +ok github.com/smallstep/certificates/authority/poolhttp 0.100s === RUN TestACME_GetAttestationRoots === RUN TestACME_GetAttestationRoots/ok === RUN TestACME_GetAttestationRoots/nil @@ -6189,7 +6227,7 @@ === RUN TestACMEChallenge_Validate/wire-dpop-01 === RUN TestACMEChallenge_Validate/uppercase === RUN TestACMEChallenge_Validate/fail ---- PASS: TestACMEChallenge_Validate (0.01s) +--- PASS: TestACMEChallenge_Validate (0.00s) --- PASS: TestACMEChallenge_Validate/http-01 (0.00s) --- PASS: TestACMEChallenge_Validate/dns-01 (0.00s) --- PASS: TestACMEChallenge_Validate/tls-alpn-01 (0.00s) @@ -6213,21 +6251,27 @@ === RUN TestACME_Getters --- PASS: TestACME_Getters (0.00s) === RUN TestACME_Init -=== RUN TestACME_Init/fail/empty-name +=== RUN TestACME_Init/ok/wire acme_test.go:235: -=== RUN TestACME_Init/fail/empty-type +=== RUN TestACME_Init/fail/empty acme_test.go:235: === RUN TestACME_Init/fail/bad-claims acme_test.go:235: === RUN TestACME_Init/fail/bad-challenge acme_test.go:235: -=== RUN TestACME_Init/fail/bad-attestation-format - acme_test.go:235: === RUN TestACME_Init/fail/empty-attestation-roots acme_test.go:235: === RUN TestACME_Init/fail/wire-missing-wire-options acme_test.go:235: +=== RUN TestACME_Init/ok + acme_test.go:235: +=== RUN TestACME_Init/fail/empty-name + acme_test.go:235: +=== RUN TestACME_Init/fail/empty-type + acme_test.go:235: +=== RUN TestACME_Init/fail/bad-attestation-format + acme_test.go:235: === RUN TestACME_Init/fail/parse-attestation-roots acme_test.go:235: -----BEGIN CERTIFICATE----- Zm9v @@ -6236,8 +6280,6 @@ acme_test.go:235: === RUN TestACME_Init/fail/wire-validate-options acme_test.go:235: -=== RUN TestACME_Init/ok - acme_test.go:235: === RUN TestACME_Init/ok/attestation acme_test.go:235: -----BEGIN CERTIFICATE----- MIICJDCCAamgAwIBAgIUQsDCuyxyfFxeq/bxpm8frF15hzcwCgYIKoZIzj0EAwMw @@ -6272,25 +6314,21 @@ Fqyi4+JE014cSgR57Jcu3dZiehB6UtAPgad9L5cNvua/IWRmm+ANy3O2LH++Pyl8 SREzU8onbBsjMg9QDiSf5oJLKvd/Ren+zGY7 -----END CERTIFICATE----- -=== RUN TestACME_Init/ok/wire - acme_test.go:235: -=== RUN TestACME_Init/fail/empty - acme_test.go:235: --- PASS: TestACME_Init (0.00s) - --- PASS: TestACME_Init/fail/empty-name (0.00s) - --- PASS: TestACME_Init/fail/empty-type (0.00s) + --- PASS: TestACME_Init/ok/wire (0.00s) + --- PASS: TestACME_Init/fail/empty (0.00s) --- PASS: TestACME_Init/fail/bad-claims (0.00s) --- PASS: TestACME_Init/fail/bad-challenge (0.00s) - --- PASS: TestACME_Init/fail/bad-attestation-format (0.00s) --- PASS: TestACME_Init/fail/empty-attestation-roots (0.00s) --- PASS: TestACME_Init/fail/wire-missing-wire-options (0.00s) + --- PASS: TestACME_Init/ok (0.00s) + --- PASS: TestACME_Init/fail/empty-name (0.00s) + --- PASS: TestACME_Init/fail/empty-type (0.00s) + --- PASS: TestACME_Init/fail/bad-attestation-format (0.00s) --- PASS: TestACME_Init/fail/parse-attestation-roots (0.00s) --- PASS: TestACME_Init/fail/wire-missing-options (0.00s) --- PASS: TestACME_Init/fail/wire-validate-options (0.00s) - --- PASS: TestACME_Init/ok (0.00s) --- PASS: TestACME_Init/ok/attestation (0.00s) - --- PASS: TestACME_Init/ok/wire (0.00s) - --- PASS: TestACME_Init/fail/empty (0.00s) === RUN TestACME_AuthorizeRenew === RUN TestACME_AuthorizeRenew/fail/renew-disabled === RUN TestACME_AuthorizeRenew/ok @@ -6376,7 +6414,7 @@ === RUN TestAWS_GetIdentityToken/fail_read_signatureURL === RUN TestAWS_GetIdentityToken/fail_unmarshal_identityURL --- PASS: TestAWS_GetIdentityToken (0.02s) - --- PASS: TestAWS_GetIdentityToken/ok (0.01s) + --- PASS: TestAWS_GetIdentityToken/ok (0.00s) --- PASS: TestAWS_GetIdentityToken/ok_no_imds (0.00s) --- PASS: TestAWS_GetIdentityToken/fail_ca_url (0.00s) --- PASS: TestAWS_GetIdentityToken/fail_identityURL (0.00s) @@ -6419,33 +6457,33 @@ --- PASS: TestAWS_Init/fail_claims (0.00s) === RUN TestAWS_authorizeToken === RUN TestAWS_authorizeToken/fail/instance-age +=== RUN TestAWS_authorizeToken/ok/identityCert2 === RUN TestAWS_authorizeToken/fail/bad-token === RUN TestAWS_authorizeToken/fail/cannot-validate-sig -=== RUN TestAWS_authorizeToken/fail/invalid-audience -=== RUN TestAWS_authorizeToken/fail/invalid-subject-disabled-custom-SANs -=== RUN TestAWS_authorizeToken/ok -=== RUN TestAWS_authorizeToken/ok/identityCert -=== RUN TestAWS_authorizeToken/ok/identityCert2 === RUN TestAWS_authorizeToken/fail/empty-account-id -=== RUN TestAWS_authorizeToken/fail/empty-instance-id === RUN TestAWS_authorizeToken/fail/empty-private-ip === RUN TestAWS_authorizeToken/fail/empty-region === RUN TestAWS_authorizeToken/fail/invalid-token-issuer +=== RUN TestAWS_authorizeToken/ok +=== RUN TestAWS_authorizeToken/ok/identityCert +=== RUN TestAWS_authorizeToken/fail/empty-instance-id +=== RUN TestAWS_authorizeToken/fail/invalid-audience +=== RUN TestAWS_authorizeToken/fail/invalid-subject-disabled-custom-SANs === RUN TestAWS_authorizeToken/fail/invalid-account-id ---- PASS: TestAWS_authorizeToken (0.24s) +--- PASS: TestAWS_authorizeToken (0.53s) --- PASS: TestAWS_authorizeToken/fail/instance-age (0.00s) + --- PASS: TestAWS_authorizeToken/ok/identityCert2 (0.00s) --- PASS: TestAWS_authorizeToken/fail/bad-token (0.00s) --- PASS: TestAWS_authorizeToken/fail/cannot-validate-sig (0.00s) - --- PASS: TestAWS_authorizeToken/fail/invalid-audience (0.00s) - --- PASS: TestAWS_authorizeToken/fail/invalid-subject-disabled-custom-SANs (0.00s) - --- PASS: TestAWS_authorizeToken/ok (0.00s) - --- PASS: TestAWS_authorizeToken/ok/identityCert (0.00s) - --- PASS: TestAWS_authorizeToken/ok/identityCert2 (0.00s) --- PASS: TestAWS_authorizeToken/fail/empty-account-id (0.00s) - --- PASS: TestAWS_authorizeToken/fail/empty-instance-id (0.00s) --- PASS: TestAWS_authorizeToken/fail/empty-private-ip (0.00s) --- PASS: TestAWS_authorizeToken/fail/empty-region (0.00s) --- PASS: TestAWS_authorizeToken/fail/invalid-token-issuer (0.00s) + --- PASS: TestAWS_authorizeToken/ok (0.00s) + --- PASS: TestAWS_authorizeToken/ok/identityCert (0.00s) + --- PASS: TestAWS_authorizeToken/fail/empty-instance-id (0.00s) + --- PASS: TestAWS_authorizeToken/fail/invalid-audience (0.00s) + --- PASS: TestAWS_authorizeToken/fail/invalid-subject-disabled-custom-SANs (0.00s) --- PASS: TestAWS_authorizeToken/fail/invalid-account-id (0.00s) === RUN TestAWS_AuthorizeSign === RUN TestAWS_AuthorizeSign/ok @@ -6466,7 +6504,7 @@ === RUN TestAWS_AuthorizeSign/fail_nbf === RUN TestAWS_AuthorizeSign/fail_key === RUN TestAWS_AuthorizeSign/fail_instance_age ---- PASS: TestAWS_AuthorizeSign (0.25s) +--- PASS: TestAWS_AuthorizeSign (0.85s) --- PASS: TestAWS_AuthorizeSign/ok (0.00s) --- PASS: TestAWS_AuthorizeSign/ok#01 (0.00s) --- PASS: TestAWS_AuthorizeSign/ok#02 (0.00s) @@ -6500,7 +6538,7 @@ === RUN TestAWS_AuthorizeSSHSign/fail-extra-principal === RUN TestAWS_AuthorizeSSHSign/fail-sshCA-disabled === RUN TestAWS_AuthorizeSSHSign/fail-invalid-token ---- PASS: TestAWS_AuthorizeSSHSign (0.44s) +--- PASS: TestAWS_AuthorizeSSHSign (0.19s) --- PASS: TestAWS_AuthorizeSSHSign/ok (0.00s) --- PASS: TestAWS_AuthorizeSSHSign/ok-rsa2048 (0.00s) --- PASS: TestAWS_AuthorizeSSHSign/ok-type (0.00s) @@ -6548,7 +6586,7 @@ --- PASS: TestAzure_GetIdentityToken (0.01s) --- PASS: TestAzure_GetIdentityToken/ok (0.00s) --- PASS: TestAzure_GetIdentityToken/ok_azure_china (0.00s) - --- PASS: TestAzure_GetIdentityToken/ok_azure_germany (0.01s) + --- PASS: TestAzure_GetIdentityToken/ok_azure_germany (0.00s) --- PASS: TestAzure_GetIdentityToken/ok_azure_us_gov (0.00s) --- PASS: TestAzure_GetIdentityToken/fail_instance_request (0.00s) --- PASS: TestAzure_GetIdentityToken/fail_request (0.00s) @@ -6565,7 +6603,7 @@ === RUN TestAzure_Init/fail_discovery_URL === RUN TestAzure_Init/fail_JWK_URL === RUN TestAzure_Init/fail_config_Validate ---- PASS: TestAzure_Init (0.01s) +--- PASS: TestAzure_Init (0.00s) --- PASS: TestAzure_Init/ok (0.00s) --- PASS: TestAzure_Init/ok_with_config (0.00s) --- PASS: TestAzure_Init/fail_type (0.00s) @@ -6582,7 +6620,7 @@ === RUN TestAzure_authorizeToken/fail/invalid-xms-mir-id === RUN TestAzure_authorizeToken/ok === RUN TestAzure_authorizeToken/fail/bad-token ---- PASS: TestAzure_authorizeToken (0.01s) +--- PASS: TestAzure_authorizeToken (0.00s) --- PASS: TestAzure_authorizeToken/fail/cannot-validate-sig (0.00s) --- PASS: TestAzure_authorizeToken/fail/invalid-token-issuer (0.00s) --- PASS: TestAzure_authorizeToken/fail/invalid-tenant-id (0.00s) @@ -6605,7 +6643,7 @@ === RUN TestAzure_AuthorizeSign/fail_exp === RUN TestAzure_AuthorizeSign/fail_nbf === RUN TestAzure_AuthorizeSign/fail_key ---- PASS: TestAzure_AuthorizeSign (0.02s) +--- PASS: TestAzure_AuthorizeSign (0.01s) --- PASS: TestAzure_AuthorizeSign/ok (0.00s) --- PASS: TestAzure_AuthorizeSign/ok#01 (0.00s) --- PASS: TestAzure_AuthorizeSign/ok#02 (0.00s) @@ -6640,7 +6678,7 @@ === RUN TestAzure_AuthorizeSSHSign/fail-extra-principal === RUN TestAzure_AuthorizeSSHSign/fail-sshCA-disabled === RUN TestAzure_AuthorizeSSHSign/fail-invalid-token ---- PASS: TestAzure_AuthorizeSSHSign (0.36s) +--- PASS: TestAzure_AuthorizeSSHSign (0.20s) --- PASS: TestAzure_AuthorizeSSHSign/ok (0.00s) --- PASS: TestAzure_AuthorizeSSHSign/ok-rsa2048 (0.00s) --- PASS: TestAzure_AuthorizeSSHSign/ok-type (0.00s) @@ -6677,7 +6715,7 @@ === RUN TestCollection_Load/ok === RUN TestCollection_Load/fail === RUN TestCollection_Load/invalid ---- PASS: TestCollection_Load (0.48s) +--- PASS: TestCollection_Load (0.38s) --- PASS: TestCollection_Load/ok (0.00s) --- PASS: TestCollection_Load/fail (0.00s) --- PASS: TestCollection_Load/invalid (0.00s) @@ -6689,7 +6727,7 @@ === RUN TestCollection_LoadByToken/bad === RUN TestCollection_LoadByToken/fail === RUN TestCollection_LoadByToken/fail-no-k8sSa-provisioner ---- PASS: TestCollection_LoadByToken (1.68s) +--- PASS: TestCollection_LoadByToken (1.45s) --- PASS: TestCollection_LoadByToken/ok1 (0.00s) --- PASS: TestCollection_LoadByToken/ok2 (0.00s) --- PASS: TestCollection_LoadByToken/ok3 (0.00s) @@ -6724,7 +6762,7 @@ === RUN TestCollection_Store/ok2 === RUN TestCollection_Store/fail1 === RUN TestCollection_Store/fail2 ---- PASS: TestCollection_Store (0.48s) +--- PASS: TestCollection_Store (0.37s) --- PASS: TestCollection_Store/ok1 (0.00s) --- PASS: TestCollection_Store/ok2 (0.00s) --- PASS: TestCollection_Store/fail1 (0.00s) @@ -6738,7 +6776,7 @@ === RUN TestCollection_Find/1_to_5 === RUN TestCollection_Find/defaultLimit === RUN TestCollection_Find/overTheLimit ---- PASS: TestCollection_Find (3.75s) +--- PASS: TestCollection_Find (3.63s) --- PASS: TestCollection_Find/all (0.00s) --- PASS: TestCollection_Find/0_to_19 (0.00s) --- PASS: TestCollection_Find/0_to_9 (0.00s) @@ -6866,7 +6904,7 @@ --- PASS: TestDefaultAuthorizeSSHRenew/fail_not_yet_valid (0.00s) --- PASS: TestDefaultAuthorizeSSHRenew/fail_expired (0.00s) === RUN Test_newWebhookController ---- PASS: Test_newWebhookController (0.02s) +--- PASS: Test_newWebhookController (0.00s) === RUN TestNewDuration === RUN TestNewDuration/ok === RUN TestNewDuration/fail_empty @@ -6923,7 +6961,7 @@ === RUN TestGetProvisionerExtension/ok === RUN TestGetProvisionerExtension/fail_unmarshal === RUN TestGetProvisionerExtension/missing_extension ---- PASS: TestGetProvisionerExtension (0.01s) +--- PASS: TestGetProvisionerExtension (0.00s) --- PASS: TestGetProvisionerExtension/ok (0.00s) --- PASS: TestGetProvisionerExtension/fail_unmarshal (0.00s) --- PASS: TestGetProvisionerExtension/missing_extension (0.00s) @@ -6948,9 +6986,9 @@ gcp_test.go:150: error on identity request: status=400, response=Bad Request === RUN TestGCP_GetIdentityToken/fail_url - gcp_test.go:150: error creating identity request: parse "://ca.smallstep.com?audience=https%3A%2F%2Fca%2F1.0%2Fsign%23gcp%2FgoBYSmQKIU&format=full&licenses=FALSE": missing protocol scheme + gcp_test.go:150: error creating identity request: parse "://ca.smallstep.com?audience=https%3A%2F%2Fca%2F1.0%2Fsign%23gcp%2FZyRxVynfdM&format=full&licenses=FALSE": missing protocol scheme === RUN TestGCP_GetIdentityToken/fail_connect - gcp_test.go:150: error doing identity request, are you in a GCP VM?: Get "foobarzar?audience=https%3A%2F%2Fca%2F1.0%2Fsign%23gcp%2FgoBYSmQKIU&format=full&licenses=FALSE": unsupported protocol scheme "" + gcp_test.go:150: error doing identity request, are you in a GCP VM?: Get "foobarzar?audience=https%3A%2F%2Fca%2F1.0%2Fsign%23gcp%2FZyRxVynfdM&format=full&licenses=FALSE": unsupported protocol scheme "" --- PASS: TestGCP_GetIdentityToken (0.00s) --- PASS: TestGCP_GetIdentityToken/ok (0.00s) --- PASS: TestGCP_GetIdentityToken/fail_ca_url (0.00s) @@ -6978,29 +7016,29 @@ --- PASS: TestGCP_Init/bad_claims (0.00s) --- PASS: TestGCP_Init/bad_certs (0.00s) === RUN TestGCP_authorizeToken -=== RUN TestGCP_authorizeToken/ok -=== RUN TestGCP_authorizeToken/fail/bad-token -=== RUN TestGCP_authorizeToken/fail/cannot-validate-sig -=== RUN TestGCP_authorizeToken/fail/invalid-projectID -=== RUN TestGCP_authorizeToken/fail/instance-age -=== RUN TestGCP_authorizeToken/fail/empty-instance-name === RUN TestGCP_authorizeToken/fail/invalid-issuer -=== RUN TestGCP_authorizeToken/fail/invalid-serviceAccount +=== RUN TestGCP_authorizeToken/fail/instance-age === RUN TestGCP_authorizeToken/fail/empty-instance-id +=== RUN TestGCP_authorizeToken/fail/empty-instance-name === RUN TestGCP_authorizeToken/fail/empty-project-id +=== RUN TestGCP_authorizeToken/fail/bad-token +=== RUN TestGCP_authorizeToken/fail/invalid-serviceAccount +=== RUN TestGCP_authorizeToken/fail/invalid-projectID === RUN TestGCP_authorizeToken/fail/empty-zone +=== RUN TestGCP_authorizeToken/ok +=== RUN TestGCP_authorizeToken/fail/cannot-validate-sig --- PASS: TestGCP_authorizeToken (0.01s) - --- PASS: TestGCP_authorizeToken/ok (0.00s) - --- PASS: TestGCP_authorizeToken/fail/bad-token (0.00s) - --- PASS: TestGCP_authorizeToken/fail/cannot-validate-sig (0.00s) - --- PASS: TestGCP_authorizeToken/fail/invalid-projectID (0.00s) - --- PASS: TestGCP_authorizeToken/fail/instance-age (0.00s) - --- PASS: TestGCP_authorizeToken/fail/empty-instance-name (0.00s) --- PASS: TestGCP_authorizeToken/fail/invalid-issuer (0.00s) - --- PASS: TestGCP_authorizeToken/fail/invalid-serviceAccount (0.00s) + --- PASS: TestGCP_authorizeToken/fail/instance-age (0.00s) --- PASS: TestGCP_authorizeToken/fail/empty-instance-id (0.00s) + --- PASS: TestGCP_authorizeToken/fail/empty-instance-name (0.00s) --- PASS: TestGCP_authorizeToken/fail/empty-project-id (0.00s) + --- PASS: TestGCP_authorizeToken/fail/bad-token (0.00s) + --- PASS: TestGCP_authorizeToken/fail/invalid-serviceAccount (0.00s) + --- PASS: TestGCP_authorizeToken/fail/invalid-projectID (0.00s) --- PASS: TestGCP_authorizeToken/fail/empty-zone (0.00s) + --- PASS: TestGCP_authorizeToken/ok (0.00s) + --- PASS: TestGCP_authorizeToken/fail/cannot-validate-sig (0.00s) === RUN TestGCP_AuthorizeSign === RUN TestGCP_AuthorizeSign/ok === RUN TestGCP_AuthorizeSign/ok#01 @@ -7052,7 +7090,7 @@ === RUN TestGCP_AuthorizeSSHSign/fail-type-host === RUN TestGCP_AuthorizeSSHSign/fail-type-user === RUN TestGCP_AuthorizeSSHSign/fail-invalid-token ---- PASS: TestGCP_AuthorizeSSHSign (0.50s) +--- PASS: TestGCP_AuthorizeSSHSign (0.58s) --- PASS: TestGCP_AuthorizeSSHSign/ok (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/ok-rsa2048 (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/ok-type-host (0.00s) @@ -7076,7 +7114,7 @@ --- PASS: TestGCP_AuthorizeRenew/ok (0.00s) --- PASS: TestGCP_AuthorizeRenew/fail/renewal-disabled (0.00s) === RUN TestJWK_Getters ---- PASS: TestJWK_Getters (0.67s) +--- PASS: TestJWK_Getters (0.36s) === RUN TestJWK_Init === RUN TestJWK_Init/fail-empty-type === RUN TestJWK_Init/fail-empty-key @@ -7084,7 +7122,7 @@ === RUN TestJWK_Init/ok === RUN TestJWK_Init/fail-empty === RUN TestJWK_Init/fail-empty-name ---- PASS: TestJWK_Init (0.55s) +--- PASS: TestJWK_Init (0.00s) --- PASS: TestJWK_Init/fail-empty-type (0.00s) --- PASS: TestJWK_Init/fail-empty-key (0.00s) --- PASS: TestJWK_Init/fail-bad-claims (0.00s) @@ -7104,7 +7142,7 @@ === RUN TestJWK_authorizeToken/ok === RUN TestJWK_authorizeToken/ok-no-encrypted-key === RUN TestJWK_authorizeToken/ok-no-sans ---- PASS: TestJWK_authorizeToken (1.58s) +--- PASS: TestJWK_authorizeToken (1.54s) --- PASS: TestJWK_authorizeToken/fail-token (0.00s) --- PASS: TestJWK_authorizeToken/fail-key (0.00s) --- PASS: TestJWK_authorizeToken/fail-claims (0.00s) @@ -7120,7 +7158,7 @@ === RUN TestJWK_AuthorizeRevoke === RUN TestJWK_AuthorizeRevoke/fail-signature === RUN TestJWK_AuthorizeRevoke/ok ---- PASS: TestJWK_AuthorizeRevoke (0.73s) +--- PASS: TestJWK_AuthorizeRevoke (0.81s) --- PASS: TestJWK_AuthorizeRevoke/fail-signature (0.00s) --- PASS: TestJWK_AuthorizeRevoke/ok (0.00s) === RUN TestJWK_AuthorizeSign @@ -7128,7 +7166,7 @@ === RUN TestJWK_AuthorizeSign/ok-sans === RUN TestJWK_AuthorizeSign/ok-no-sans === RUN TestJWK_AuthorizeSign/ok-cnf ---- PASS: TestJWK_AuthorizeSign (0.75s) +--- PASS: TestJWK_AuthorizeSign (0.99s) --- PASS: TestJWK_AuthorizeSign/fail-signature (0.00s) --- PASS: TestJWK_AuthorizeSign/ok-sans (0.00s) --- PASS: TestJWK_AuthorizeSign/ok-no-sans (0.00s) @@ -7136,7 +7174,7 @@ === RUN TestJWK_AuthorizeRenew === RUN TestJWK_AuthorizeRenew/ok === RUN TestJWK_AuthorizeRenew/fail/renew-disabled ---- PASS: TestJWK_AuthorizeRenew (0.75s) +--- PASS: TestJWK_AuthorizeRenew (0.76s) --- PASS: TestJWK_AuthorizeRenew/ok (0.00s) --- PASS: TestJWK_AuthorizeRenew/fail/renew-disabled (0.00s) === RUN TestJWK_AuthorizeSSHSign @@ -7154,7 +7192,7 @@ === RUN TestJWK_AuthorizeSSHSign/fail-sshCA-disabled === RUN TestJWK_AuthorizeSSHSign/fail-signature === RUN TestJWK_AuthorizeSSHSign/fail-rsa1024 ---- PASS: TestJWK_AuthorizeSSHSign (1.61s) +--- PASS: TestJWK_AuthorizeSSHSign (1.50s) --- PASS: TestJWK_AuthorizeSSHSign/user (0.00s) --- PASS: TestJWK_AuthorizeSSHSign/user-rsa2048 (0.00s) --- PASS: TestJWK_AuthorizeSSHSign/user-type (0.00s) @@ -7185,7 +7223,7 @@ === RUN TestJWK_AuthorizeSign_SSHOptions/fail-audience === RUN TestJWK_AuthorizeSign_SSHOptions/fail-expired === RUN TestJWK_AuthorizeSign_SSHOptions/fail-notBefore ---- PASS: TestJWK_AuthorizeSign_SSHOptions (0.73s) +--- PASS: TestJWK_AuthorizeSign_SSHOptions (0.95s) --- PASS: TestJWK_AuthorizeSign_SSHOptions/ok-user (0.00s) --- PASS: TestJWK_AuthorizeSign_SSHOptions/ok-host (0.00s) --- PASS: TestJWK_AuthorizeSign_SSHOptions/ok-user-validAfter (0.00s) @@ -7204,23 +7242,23 @@ === RUN TestJWK_AuthorizeSSHRevoke === RUN TestJWK_AuthorizeSSHRevoke/fail/invalid-token === RUN TestJWK_AuthorizeSSHRevoke/ok ---- PASS: TestJWK_AuthorizeSSHRevoke (1.09s) - --- PASS: TestJWK_AuthorizeSSHRevoke/fail/invalid-token (0.36s) - --- PASS: TestJWK_AuthorizeSSHRevoke/ok (0.73s) +--- PASS: TestJWK_AuthorizeSSHRevoke (1.12s) + --- PASS: TestJWK_AuthorizeSSHRevoke/fail/invalid-token (0.37s) + --- PASS: TestJWK_AuthorizeSSHRevoke/ok (0.75s) === RUN TestK8sSA_Getters --- PASS: TestK8sSA_Getters (0.00s) === RUN TestK8sSA_authorizeToken +=== RUN TestK8sSA_authorizeToken/fail/bad-token +=== RUN TestK8sSA_authorizeToken/fail/not-implemented === RUN TestK8sSA_authorizeToken/fail/error-validating-token === RUN TestK8sSA_authorizeToken/fail/invalid-issuer === RUN TestK8sSA_authorizeToken/ok -=== RUN TestK8sSA_authorizeToken/fail/bad-token -=== RUN TestK8sSA_authorizeToken/fail/not-implemented --- PASS: TestK8sSA_authorizeToken (0.00s) + --- PASS: TestK8sSA_authorizeToken/fail/bad-token (0.00s) + --- PASS: TestK8sSA_authorizeToken/fail/not-implemented (0.00s) --- PASS: TestK8sSA_authorizeToken/fail/error-validating-token (0.00s) --- PASS: TestK8sSA_authorizeToken/fail/invalid-issuer (0.00s) --- PASS: TestK8sSA_authorizeToken/ok (0.00s) - --- PASS: TestK8sSA_authorizeToken/fail/bad-token (0.00s) - --- PASS: TestK8sSA_authorizeToken/fail/not-implemented (0.00s) === RUN TestK8sSA_AuthorizeRevoke === RUN TestK8sSA_AuthorizeRevoke/fail/invalid-token === RUN TestK8sSA_AuthorizeRevoke/ok @@ -7228,11 +7266,11 @@ --- PASS: TestK8sSA_AuthorizeRevoke/fail/invalid-token (0.00s) --- PASS: TestK8sSA_AuthorizeRevoke/ok (0.00s) === RUN TestK8sSA_AuthorizeRenew -=== RUN TestK8sSA_AuthorizeRenew/ok === RUN TestK8sSA_AuthorizeRenew/fail/renew-disabled +=== RUN TestK8sSA_AuthorizeRenew/ok --- PASS: TestK8sSA_AuthorizeRenew (0.00s) - --- PASS: TestK8sSA_AuthorizeRenew/ok (0.00s) --- PASS: TestK8sSA_AuthorizeRenew/fail/renew-disabled (0.00s) + --- PASS: TestK8sSA_AuthorizeRenew/ok (0.00s) === RUN TestK8sSA_AuthorizeSign === RUN TestK8sSA_AuthorizeSign/fail/invalid-token === RUN TestK8sSA_AuthorizeSign/ok @@ -7240,24 +7278,24 @@ --- PASS: TestK8sSA_AuthorizeSign/fail/invalid-token (0.00s) --- PASS: TestK8sSA_AuthorizeSign/ok (0.00s) === RUN TestK8sSA_AuthorizeSSHSign +=== RUN TestK8sSA_AuthorizeSSHSign/ok === RUN TestK8sSA_AuthorizeSSHSign/fail/sshCA-disabled === RUN TestK8sSA_AuthorizeSSHSign/fail/invalid-token -=== RUN TestK8sSA_AuthorizeSSHSign/ok --- PASS: TestK8sSA_AuthorizeSSHSign (0.00s) + --- PASS: TestK8sSA_AuthorizeSSHSign/ok (0.00s) --- PASS: TestK8sSA_AuthorizeSSHSign/fail/sshCA-disabled (0.00s) --- PASS: TestK8sSA_AuthorizeSSHSign/fail/invalid-token (0.00s) - --- PASS: TestK8sSA_AuthorizeSSHSign/ok (0.00s) === RUN Test_newKeyStore === RUN Test_newKeyStore/ok === RUN Test_newKeyStore/fail === RUN Test_newKeyStore/fail_client -2025/10/26 21:31:31 http: TLS handshake error from 127.0.0.1:50404: remote error: tls: bad certificate ---- PASS: Test_newKeyStore (0.01s) +2026/11/30 06:00:40 http: TLS handshake error from 127.0.0.1:56452: remote error: tls: bad certificate +--- PASS: Test_newKeyStore (0.02s) --- PASS: Test_newKeyStore/ok (0.00s) --- PASS: Test_newKeyStore/fail (0.00s) - --- PASS: Test_newKeyStore/fail_client (0.00s) + --- PASS: Test_newKeyStore/fail_client (0.01s) === RUN Test_keyStore ---- PASS: Test_keyStore (5.02s) +--- PASS: Test_keyStore (5.01s) === RUN Test_keyStore_noCache --- PASS: Test_keyStore_noCache (0.00s) === RUN Test_keyStore_Get @@ -7316,10 +7354,10 @@ === RUN TestOIDC_Init/bad-get-url === RUN TestOIDC_Init/bad-listen-address === RUN TestOIDC_Init/bad-http-client -2025/10/26 21:31:36 http: TLS handshake error from 127.0.0.1:34938: remote error: tls: bad certificate ---- PASS: TestOIDC_Init (0.01s) +2026/11/30 06:00:45 http: TLS handshake error from 127.0.0.1:39658: remote error: tls: bad certificate +--- PASS: TestOIDC_Init (0.02s) --- PASS: TestOIDC_Init/ok (0.00s) - --- PASS: TestOIDC_Init/ok_tls (0.00s) + --- PASS: TestOIDC_Init/ok_tls (0.01s) --- PASS: TestOIDC_Init/ok-admins (0.00s) --- PASS: TestOIDC_Init/ok-domains (0.00s) --- PASS: TestOIDC_Init/ok-listen-port (0.00s) @@ -7334,7 +7372,7 @@ --- PASS: TestOIDC_Init/bad-parse-url (0.00s) --- PASS: TestOIDC_Init/bad-get-url (0.00s) --- PASS: TestOIDC_Init/bad-listen-address (0.00s) - --- PASS: TestOIDC_Init/bad-http-client (0.00s) + --- PASS: TestOIDC_Init/bad-http-client (0.01s) === RUN TestOIDC_authorizeToken === RUN TestOIDC_authorizeToken/ok1 === RUN TestOIDC_authorizeToken/ok_tenantid @@ -7370,7 +7408,7 @@ === RUN TestOIDC_AuthorizeSign/admin === RUN TestOIDC_AuthorizeSign/no-email === RUN TestOIDC_AuthorizeSign/bad-token ---- PASS: TestOIDC_AuthorizeSign (0.00s) +--- PASS: TestOIDC_AuthorizeSign (0.01s) --- PASS: TestOIDC_AuthorizeSign/ok1 (0.00s) --- PASS: TestOIDC_AuthorizeSign/admin (0.00s) --- PASS: TestOIDC_AuthorizeSign/no-email (0.00s) @@ -7409,7 +7447,7 @@ === RUN TestOIDC_AuthorizeSSHSign/fail-admin-type === RUN TestOIDC_AuthorizeSSHSign/fail-admin-key-id === RUN TestOIDC_AuthorizeSSHSign/fail-admin-principals ---- PASS: TestOIDC_AuthorizeSSHSign (0.27s) +--- PASS: TestOIDC_AuthorizeSSHSign (0.46s) --- PASS: TestOIDC_AuthorizeSSHSign/ok (0.00s) --- PASS: TestOIDC_AuthorizeSSHSign/ok-rsa2048 (0.00s) --- PASS: TestOIDC_AuthorizeSSHSign/ok-user (0.00s) @@ -7433,7 +7471,7 @@ === RUN TestOIDC_AuthorizeSSHRevoke/ok === RUN TestOIDC_AuthorizeSSHRevoke/fail/invalid-token === RUN TestOIDC_AuthorizeSSHRevoke/fail/not-admin ---- PASS: TestOIDC_AuthorizeSSHRevoke (0.00s) +--- PASS: TestOIDC_AuthorizeSSHRevoke (0.01s) --- PASS: TestOIDC_AuthorizeSSHRevoke/ok (0.00s) --- PASS: TestOIDC_AuthorizeSSHRevoke/fail/invalid-token (0.00s) --- PASS: TestOIDC_AuthorizeSSHRevoke/fail/not-admin (0.00s) @@ -7503,7 +7541,7 @@ === RUN TestTemplateOptions/ok === RUN TestTemplateOptions/okCustomTemplate === RUN TestTemplateOptions/fail ---- PASS: TestTemplateOptions (0.00s) +--- PASS: TestTemplateOptions (0.14s) --- PASS: TestTemplateOptions/ok (0.00s) --- PASS: TestTemplateOptions/okCustomTemplate (0.00s) --- PASS: TestTemplateOptions/fail (0.00s) @@ -7556,27 +7594,27 @@ --- PASS: TestSanitizeSSHUserPrincipal/email_with_underscores (0.00s) --- PASS: TestSanitizeSSHUserPrincipal/email_with_symbols (0.00s) === RUN TestDefaultIdentityFunc -=== RUN TestDefaultIdentityFunc/ok_symbol === RUN TestDefaultIdentityFunc/ok_empty_username === RUN TestDefaultIdentityFunc/ok/badname === RUN TestDefaultIdentityFunc/fail/unsupported-provisioner +=== RUN TestDefaultIdentityFunc/ok === RUN TestDefaultIdentityFunc/ok_letter_case +=== RUN TestDefaultIdentityFunc/ok_simple === RUN TestDefaultIdentityFunc/ok_simple_letter_case +=== RUN TestDefaultIdentityFunc/ok_symbol === RUN TestDefaultIdentityFunc/ok_username === RUN TestDefaultIdentityFunc/ok_usernames -=== RUN TestDefaultIdentityFunc/ok -=== RUN TestDefaultIdentityFunc/ok_simple --- PASS: TestDefaultIdentityFunc (0.00s) - --- PASS: TestDefaultIdentityFunc/ok_symbol (0.00s) --- PASS: TestDefaultIdentityFunc/ok_empty_username (0.00s) --- PASS: TestDefaultIdentityFunc/ok/badname (0.00s) --- PASS: TestDefaultIdentityFunc/fail/unsupported-provisioner (0.00s) + --- PASS: TestDefaultIdentityFunc/ok (0.00s) --- PASS: TestDefaultIdentityFunc/ok_letter_case (0.00s) + --- PASS: TestDefaultIdentityFunc/ok_simple (0.00s) --- PASS: TestDefaultIdentityFunc/ok_simple_letter_case (0.00s) + --- PASS: TestDefaultIdentityFunc/ok_symbol (0.00s) --- PASS: TestDefaultIdentityFunc/ok_username (0.00s) --- PASS: TestDefaultIdentityFunc/ok_usernames (0.00s) - --- PASS: TestDefaultIdentityFunc/ok (0.00s) - --- PASS: TestDefaultIdentityFunc/ok_simple (0.00s) === RUN TestUnimplementedMethods === RUN TestUnimplementedMethods/jwk/sshRekey === RUN TestUnimplementedMethods/jwk/sshRenew @@ -7608,7 +7646,7 @@ === RUN TestUnimplementedMethods/k8ssa/sshRekey === RUN TestUnimplementedMethods/k8ssa/sshRenew === RUN TestUnimplementedMethods/k8ssa/sshRevoke ---- PASS: TestUnimplementedMethods (0.00s) +--- PASS: TestUnimplementedMethods (0.01s) --- PASS: TestUnimplementedMethods/jwk/sshRekey (0.00s) --- PASS: TestUnimplementedMethods/jwk/sshRenew (0.00s) --- PASS: TestUnimplementedMethods/aws/revoke (0.00s) @@ -7650,11 +7688,11 @@ === RUN Test_challengeValidationController_Validate/fail/not-allowed === RUN Test_challengeValidationController_Validate/ok === RUN Test_challengeValidationController_Validate/ok_with_data ---- PASS: Test_challengeValidationController_Validate (0.00s) +--- PASS: Test_challengeValidationController_Validate (0.01s) --- PASS: Test_challengeValidationController_Validate/fail/no-webhook (0.00s) --- PASS: Test_challengeValidationController_Validate/fail/wrong-cert-type (0.00s) --- PASS: Test_challengeValidationController_Validate/fail/wrong-secret-value (0.00s) - --- PASS: Test_challengeValidationController_Validate/fail/not-allowed (0.00s) + --- PASS: Test_challengeValidationController_Validate/fail/not-allowed (0.01s) --- PASS: Test_challengeValidationController_Validate/ok (0.00s) --- PASS: Test_challengeValidationController_Validate/ok_with_data (0.00s) === RUN TestController_isCertTypeOK @@ -7708,11 +7746,11 @@ === RUN TestSCEP_Init/fail_uri_type === RUN TestSCEP_Init/fail_missing_certificate === RUN TestSCEP_Init/fail_key_match ---- PASS: TestSCEP_Init (2.02s) +--- PASS: TestSCEP_Init (1.10s) --- PASS: TestSCEP_Init/ok (0.00s) --- PASS: TestSCEP_Init/ok_no_password (0.00s) --- PASS: TestSCEP_Init/ok_with_uri (0.00s) - --- PASS: TestSCEP_Init/ok_with_uri_no_password (0.06s) + --- PASS: TestSCEP_Init/ok_with_uri_no_password (0.00s) --- PASS: TestSCEP_Init/ok_with_SCEPKeyManager (0.00s) --- PASS: TestSCEP_Init/ok_intermediate (0.00s) --- PASS: TestSCEP_Init/fail_type (0.00s) @@ -7725,7 +7763,7 @@ --- PASS: TestSCEP_Init/fail_certificate_with_intermediate (0.00s) --- PASS: TestSCEP_Init/fail_decrypter_password (0.00s) --- PASS: TestSCEP_Init/fail_uri (0.00s) - --- PASS: TestSCEP_Init/fail_uri_password (0.10s) + --- PASS: TestSCEP_Init/fail_uri_password (0.00s) --- PASS: TestSCEP_Init/fail_uri_type (0.00s) --- PASS: TestSCEP_Init/fail_missing_certificate (0.00s) --- PASS: TestSCEP_Init/fail_key_match (0.00s) @@ -7860,37 +7898,37 @@ --- PASS: Test_urisValidator_Valid/fail2 (0.00s) --- PASS: Test_urisValidator_Valid/fail3 (0.00s) === RUN Test_defaultSANsValidator_Valid -=== RUN Test_defaultSANsValidator_Valid/ok === RUN Test_defaultSANsValidator_Valid/fail/dnsNamesValidator === RUN Test_defaultSANsValidator_Valid/fail/emailAddressesValidator === RUN Test_defaultSANsValidator_Valid/fail/ipAddressesValidator === RUN Test_defaultSANsValidator_Valid/fail/urisValidator === RUN Test_defaultSANsValidator_Valid/ok/urisBadValidator-SignIdentity +=== RUN Test_defaultSANsValidator_Valid/ok --- PASS: Test_defaultSANsValidator_Valid (0.00s) - --- PASS: Test_defaultSANsValidator_Valid/ok (0.00s) --- PASS: Test_defaultSANsValidator_Valid/fail/dnsNamesValidator (0.00s) --- PASS: Test_defaultSANsValidator_Valid/fail/emailAddressesValidator (0.00s) --- PASS: Test_defaultSANsValidator_Valid/fail/ipAddressesValidator (0.00s) --- PASS: Test_defaultSANsValidator_Valid/fail/urisValidator (0.00s) --- PASS: Test_defaultSANsValidator_Valid/ok/urisBadValidator-SignIdentity (0.00s) + --- PASS: Test_defaultSANsValidator_Valid/ok (0.00s) === RUN Test_validityValidator_Valid +=== RUN Test_validityValidator_Valid/ok/duration-exact-max-with-backdate +=== RUN Test_validityValidator_Valid/fail/notAfter-past === RUN Test_validityValidator_Valid/fail/notBefore-after-notAfter === RUN Test_validityValidator_Valid/fail/duration-too-short === RUN Test_validityValidator_Valid/ok/duration-exactly-min === RUN Test_validityValidator_Valid/fail/duration-too-great === RUN Test_validityValidator_Valid/ok/duration-exactly-max === RUN Test_validityValidator_Valid/ok/duration-exact-min-with-backdate -=== RUN Test_validityValidator_Valid/ok/duration-exact-max-with-backdate -=== RUN Test_validityValidator_Valid/fail/notAfter-past --- PASS: Test_validityValidator_Valid (2.01s) + --- PASS: Test_validityValidator_Valid/ok/duration-exact-max-with-backdate (1.00s) + --- PASS: Test_validityValidator_Valid/fail/notAfter-past (0.00s) --- PASS: Test_validityValidator_Valid/fail/notBefore-after-notAfter (0.00s) --- PASS: Test_validityValidator_Valid/fail/duration-too-short (0.00s) --- PASS: Test_validityValidator_Valid/ok/duration-exactly-min (0.00s) --- PASS: Test_validityValidator_Valid/fail/duration-too-great (0.00s) --- PASS: Test_validityValidator_Valid/ok/duration-exactly-max (0.00s) --- PASS: Test_validityValidator_Valid/ok/duration-exact-min-with-backdate (1.00s) - --- PASS: Test_validityValidator_Valid/ok/duration-exact-max-with-backdate (1.00s) - --- PASS: Test_validityValidator_Valid/fail/notAfter-past (0.00s) === RUN Test_forceCN_Option === RUN Test_forceCN_Option/ok/CN-not-forced === RUN Test_forceCN_Option/ok/CN-forced-and-set @@ -7902,6 +7940,7 @@ --- PASS: Test_forceCN_Option/ok/CN-forced-and-not-set (0.00s) --- PASS: Test_forceCN_Option/fail/CN-forced-and-empty-DNSNames (0.00s) === RUN Test_profileDefaultDuration_Option +=== RUN Test_profileDefaultDuration_Option/ok/cert-with-validity === RUN Test_profileDefaultDuration_Option/ok/cert-notBefore-option-notafter === RUN Test_profileDefaultDuration_Option/ok/cert-notAfter-option-notBefore === RUN Test_profileDefaultDuration_Option/ok/notBefore-notAfter-duration-empty @@ -7909,8 +7948,8 @@ === RUN Test_profileDefaultDuration_Option/ok/duration-set === RUN Test_profileDefaultDuration_Option/ok/notAfter-set === RUN Test_profileDefaultDuration_Option/ok/notBefore-and-notAfter-set -=== RUN Test_profileDefaultDuration_Option/ok/cert-with-validity --- PASS: Test_profileDefaultDuration_Option (0.81s) + --- PASS: Test_profileDefaultDuration_Option/ok/cert-with-validity (0.10s) --- PASS: Test_profileDefaultDuration_Option/ok/cert-notBefore-option-notafter (0.10s) --- PASS: Test_profileDefaultDuration_Option/ok/cert-notAfter-option-notBefore (0.10s) --- PASS: Test_profileDefaultDuration_Option/ok/notBefore-notAfter-duration-empty (0.10s) @@ -7918,7 +7957,6 @@ --- PASS: Test_profileDefaultDuration_Option/ok/duration-set (0.10s) --- PASS: Test_profileDefaultDuration_Option/ok/notAfter-set (0.10s) --- PASS: Test_profileDefaultDuration_Option/ok/notBefore-and-notAfter-set (0.10s) - --- PASS: Test_profileDefaultDuration_Option/ok/cert-with-validity (0.10s) === RUN Test_newProvisionerExtension_Option === RUN Test_newProvisionerExtension_Option/ok/one-element === RUN Test_newProvisionerExtension_Option/ok/replace @@ -7928,35 +7966,35 @@ --- PASS: Test_newProvisionerExtension_Option/ok/replace (0.00s) --- PASS: Test_newProvisionerExtension_Option/ok/disabled (0.00s) === RUN Test_profileLimitDuration_Option -=== RUN Test_profileLimitDuration_Option/ok/cert-notAfter-default -=== RUN Test_profileLimitDuration_Option/fail/notBefore-before-active-window -=== RUN Test_profileLimitDuration_Option/fail/requested-notAfter-after-limit -=== RUN Test_profileLimitDuration_Option/fail/cert-validity-notBefore -=== RUN Test_profileLimitDuration_Option/fail/cert-validity-notAfter +=== RUN Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-over-default +=== RUN Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-under-default === RUN Test_profileLimitDuration_Option/ok/cert-notBefore-default === RUN Test_profileLimitDuration_Option/ok/cert-notBefore-option -=== RUN Test_profileLimitDuration_Option/ok/cert-notAfter-option +=== RUN Test_profileLimitDuration_Option/fail/notBefore-before-active-window +=== RUN Test_profileLimitDuration_Option/fail/cert-validity-notAfter === RUN Test_profileLimitDuration_Option/ok/valid-notAfter-requested -=== RUN Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-over-default -=== RUN Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-under-default === RUN Test_profileLimitDuration_Option/ok/over-limit-with-backdate === RUN Test_profileLimitDuration_Option/ok/under-limit-with-backdate === RUN Test_profileLimitDuration_Option/ok/cert-validity +=== RUN Test_profileLimitDuration_Option/ok/cert-notAfter-default +=== RUN Test_profileLimitDuration_Option/ok/cert-notAfter-option +=== RUN Test_profileLimitDuration_Option/fail/requested-notAfter-after-limit +=== RUN Test_profileLimitDuration_Option/fail/cert-validity-notBefore --- PASS: Test_profileLimitDuration_Option (0.00s) - --- PASS: Test_profileLimitDuration_Option/ok/cert-notAfter-default (0.00s) - --- PASS: Test_profileLimitDuration_Option/fail/notBefore-before-active-window (0.00s) - --- PASS: Test_profileLimitDuration_Option/fail/requested-notAfter-after-limit (0.00s) - --- PASS: Test_profileLimitDuration_Option/fail/cert-validity-notBefore (0.00s) - --- PASS: Test_profileLimitDuration_Option/fail/cert-validity-notAfter (0.00s) + --- PASS: Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-over-default (0.00s) + --- PASS: Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-under-default (0.00s) --- PASS: Test_profileLimitDuration_Option/ok/cert-notBefore-default (0.00s) --- PASS: Test_profileLimitDuration_Option/ok/cert-notBefore-option (0.00s) - --- PASS: Test_profileLimitDuration_Option/ok/cert-notAfter-option (0.00s) + --- PASS: Test_profileLimitDuration_Option/fail/notBefore-before-active-window (0.00s) + --- PASS: Test_profileLimitDuration_Option/fail/cert-validity-notAfter (0.00s) --- PASS: Test_profileLimitDuration_Option/ok/valid-notAfter-requested (0.00s) - --- PASS: Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-over-default (0.00s) - --- PASS: Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-under-default (0.00s) --- PASS: Test_profileLimitDuration_Option/ok/over-limit-with-backdate (0.00s) --- PASS: Test_profileLimitDuration_Option/ok/under-limit-with-backdate (0.00s) --- PASS: Test_profileLimitDuration_Option/ok/cert-validity (0.00s) + --- PASS: Test_profileLimitDuration_Option/ok/cert-notAfter-default (0.00s) + --- PASS: Test_profileLimitDuration_Option/ok/cert-notAfter-option (0.00s) + --- PASS: Test_profileLimitDuration_Option/fail/requested-notAfter-after-limit (0.00s) + --- PASS: Test_profileLimitDuration_Option/fail/cert-validity-notBefore (0.00s) === RUN TestSSHOptions_Type === RUN TestSSHOptions_Type/user === RUN TestSSHOptions_Type/host @@ -7968,33 +8006,33 @@ --- PASS: TestSSHOptions_Type/empty (0.00s) --- PASS: TestSSHOptions_Type/invalid (0.00s) === RUN TestSSHOptions_Modify -=== RUN TestSSHOptions_Modify/ok/host-cert -=== RUN TestSSHOptions_Modify/ok === RUN TestSSHOptions_Modify/fail/unexpected-cert-type === RUN TestSSHOptions_Modify/fail/validAfter-greater-validBefore === RUN TestSSHOptions_Modify/ok/user-cert +=== RUN TestSSHOptions_Modify/ok/host-cert +=== RUN TestSSHOptions_Modify/ok --- PASS: TestSSHOptions_Modify (0.00s) - --- PASS: TestSSHOptions_Modify/ok/host-cert (0.00s) - --- PASS: TestSSHOptions_Modify/ok (0.00s) --- PASS: TestSSHOptions_Modify/fail/unexpected-cert-type (0.00s) --- PASS: TestSSHOptions_Modify/fail/validAfter-greater-validBefore (0.00s) --- PASS: TestSSHOptions_Modify/ok/user-cert (0.00s) + --- PASS: TestSSHOptions_Modify/ok/host-cert (0.00s) + --- PASS: TestSSHOptions_Modify/ok (0.00s) === RUN TestSSHOptions_Match +=== RUN TestSSHOptions_Match/fail/pricipals +=== RUN TestSSHOptions_Match/fail/validAfter === RUN TestSSHOptions_Match/fail/validBefore === RUN TestSSHOptions_Match/ok/original-empty === RUN TestSSHOptions_Match/ok/cmp-empty === RUN TestSSHOptions_Match/ok/equal === RUN TestSSHOptions_Match/fail/cert-type -=== RUN TestSSHOptions_Match/fail/pricipals -=== RUN TestSSHOptions_Match/fail/validAfter --- PASS: TestSSHOptions_Match (0.00s) + --- PASS: TestSSHOptions_Match/fail/pricipals (0.00s) + --- PASS: TestSSHOptions_Match/fail/validAfter (0.00s) --- PASS: TestSSHOptions_Match/fail/validBefore (0.00s) --- PASS: TestSSHOptions_Match/ok/original-empty (0.00s) --- PASS: TestSSHOptions_Match/ok/cmp-empty (0.00s) --- PASS: TestSSHOptions_Match/ok/equal (0.00s) --- PASS: TestSSHOptions_Match/fail/cert-type (0.00s) - --- PASS: TestSSHOptions_Match/fail/pricipals (0.00s) - --- PASS: TestSSHOptions_Match/fail/validAfter (0.00s) === RUN Test_sshCertValidAfterModifier_Modify === RUN Test_sshCertValidAfterModifier_Modify/ok --- PASS: Test_sshCertValidAfterModifier_Modify (0.00s) @@ -8052,23 +8090,23 @@ --- PASS: Test_sshCertValidityValidator/ok/duration-exactly-max (0.00s) --- PASS: Test_sshCertValidityValidator/ok (0.00s) === RUN Test_sshValidityModifier -=== RUN Test_sshValidityModifier/ok/valid-requested-validBefore === RUN Test_sshValidityModifier/ok/empty-requested-validBefore-limit-after-default === RUN Test_sshValidityModifier/ok/empty-requested-validBefore-limit-before-default +=== RUN Test_sshValidityModifier/fail/type-not-recognized +=== RUN Test_sshValidityModifier/ok/defaults +=== RUN Test_sshValidityModifier/ok/valid-requested-validBefore === RUN Test_sshValidityModifier/fail/type-not-set === RUN Test_sshValidityModifier/fail/requested-validAfter-after-limit -=== RUN Test_sshValidityModifier/ok/defaults -=== RUN Test_sshValidityModifier/fail/type-not-recognized === RUN Test_sshValidityModifier/fail/requested-validBefore-after-limit === RUN Test_sshValidityModifier/ok/no-limit --- PASS: Test_sshValidityModifier (0.00s) - --- PASS: Test_sshValidityModifier/ok/valid-requested-validBefore (0.00s) --- PASS: Test_sshValidityModifier/ok/empty-requested-validBefore-limit-after-default (0.00s) --- PASS: Test_sshValidityModifier/ok/empty-requested-validBefore-limit-before-default (0.00s) + --- PASS: Test_sshValidityModifier/fail/type-not-recognized (0.00s) + --- PASS: Test_sshValidityModifier/ok/defaults (0.00s) + --- PASS: Test_sshValidityModifier/ok/valid-requested-validBefore (0.00s) --- PASS: Test_sshValidityModifier/fail/type-not-set (0.00s) --- PASS: Test_sshValidityModifier/fail/requested-validAfter-after-limit (0.00s) - --- PASS: Test_sshValidityModifier/ok/defaults (0.00s) - --- PASS: Test_sshValidityModifier/fail/type-not-recognized (0.00s) --- PASS: Test_sshValidityModifier/fail/requested-validBefore-after-limit (0.00s) --- PASS: Test_sshValidityModifier/ok/no-limit (0.00s) === RUN Test_sshDefaultDuration_Option @@ -8107,13 +8145,13 @@ === RUN TestCustomSSHTemplateOptions/okNulUserOptions === RUN TestCustomSSHTemplateOptions/okBadUserOptions === RUN TestCustomSSHTemplateOptions/fail ---- PASS: TestCustomSSHTemplateOptions (0.06s) +--- PASS: TestCustomSSHTemplateOptions (0.00s) --- PASS: TestCustomSSHTemplateOptions/ok (0.00s) --- PASS: TestCustomSSHTemplateOptions/okNoData (0.00s) --- PASS: TestCustomSSHTemplateOptions/okTemplateData (0.00s) --- PASS: TestCustomSSHTemplateOptions/okNullTemplateData (0.00s) --- PASS: TestCustomSSHTemplateOptions/okTemplate (0.00s) - --- PASS: TestCustomSSHTemplateOptions/okFile (0.06s) + --- PASS: TestCustomSSHTemplateOptions/okFile (0.00s) --- PASS: TestCustomSSHTemplateOptions/okBase64 (0.00s) --- PASS: TestCustomSSHTemplateOptions/okUserOptions (0.00s) --- PASS: TestCustomSSHTemplateOptions/okNulUserOptions (0.00s) @@ -8122,63 +8160,63 @@ === RUN TestSSHPOP_Getters --- PASS: TestSSHPOP_Getters (0.00s) === RUN TestSSHPOP_authorizeToken -=== RUN TestSSHPOP_authorizeToken/fail/bad-token -=== RUN TestSSHPOP_authorizeToken/fail/invalid-audience === RUN TestSSHPOP_authorizeToken/fail/empty-subject +=== RUN TestSSHPOP_authorizeToken/fail/bad-token === RUN TestSSHPOP_authorizeToken/fail/cert-not-yet-valid === RUN TestSSHPOP_authorizeToken/fail/cert-past-validity === RUN TestSSHPOP_authorizeToken/fail/no-signer-found === RUN TestSSHPOP_authorizeToken/fail/error-parsing-claims-bad-sig -=== RUN TestSSHPOP_authorizeToken/fail/invalid-claims-issuer +=== RUN TestSSHPOP_authorizeToken/fail/invalid-audience === RUN TestSSHPOP_authorizeToken/ok +=== RUN TestSSHPOP_authorizeToken/fail/invalid-claims-issuer --- PASS: TestSSHPOP_authorizeToken (0.01s) - --- PASS: TestSSHPOP_authorizeToken/fail/bad-token (0.00s) - --- PASS: TestSSHPOP_authorizeToken/fail/invalid-audience (0.00s) --- PASS: TestSSHPOP_authorizeToken/fail/empty-subject (0.00s) + --- PASS: TestSSHPOP_authorizeToken/fail/bad-token (0.00s) --- PASS: TestSSHPOP_authorizeToken/fail/cert-not-yet-valid (0.00s) --- PASS: TestSSHPOP_authorizeToken/fail/cert-past-validity (0.00s) --- PASS: TestSSHPOP_authorizeToken/fail/no-signer-found (0.00s) --- PASS: TestSSHPOP_authorizeToken/fail/error-parsing-claims-bad-sig (0.00s) - --- PASS: TestSSHPOP_authorizeToken/fail/invalid-claims-issuer (0.00s) + --- PASS: TestSSHPOP_authorizeToken/fail/invalid-audience (0.00s) --- PASS: TestSSHPOP_authorizeToken/ok (0.00s) + --- PASS: TestSSHPOP_authorizeToken/fail/invalid-claims-issuer (0.00s) === RUN TestSSHPOP_AuthorizeSSHRevoke +=== RUN TestSSHPOP_AuthorizeSSHRevoke/ok === RUN TestSSHPOP_AuthorizeSSHRevoke/fail/bad-token === RUN TestSSHPOP_AuthorizeSSHRevoke/fail/subject-not-equal-serial -=== RUN TestSSHPOP_AuthorizeSSHRevoke/ok --- PASS: TestSSHPOP_AuthorizeSSHRevoke (0.00s) + --- PASS: TestSSHPOP_AuthorizeSSHRevoke/ok (0.00s) --- PASS: TestSSHPOP_AuthorizeSSHRevoke/fail/bad-token (0.00s) --- PASS: TestSSHPOP_AuthorizeSSHRevoke/fail/subject-not-equal-serial (0.00s) - --- PASS: TestSSHPOP_AuthorizeSSHRevoke/ok (0.00s) === RUN TestSSHPOP_AuthorizeSSHRenew +=== RUN TestSSHPOP_AuthorizeSSHRenew/ok === RUN TestSSHPOP_AuthorizeSSHRenew/fail/bad-token === RUN TestSSHPOP_AuthorizeSSHRenew/fail/not-host-cert -=== RUN TestSSHPOP_AuthorizeSSHRenew/ok --- PASS: TestSSHPOP_AuthorizeSSHRenew (0.00s) + --- PASS: TestSSHPOP_AuthorizeSSHRenew/ok (0.00s) --- PASS: TestSSHPOP_AuthorizeSSHRenew/fail/bad-token (0.00s) --- PASS: TestSSHPOP_AuthorizeSSHRenew/fail/not-host-cert (0.00s) - --- PASS: TestSSHPOP_AuthorizeSSHRenew/ok (0.00s) === RUN TestSSHPOP_AuthorizeSSHRekey -=== RUN TestSSHPOP_AuthorizeSSHRekey/ok === RUN TestSSHPOP_AuthorizeSSHRekey/fail/bad-token === RUN TestSSHPOP_AuthorizeSSHRekey/fail/not-host-cert +=== RUN TestSSHPOP_AuthorizeSSHRekey/ok --- PASS: TestSSHPOP_AuthorizeSSHRekey (0.00s) - --- PASS: TestSSHPOP_AuthorizeSSHRekey/ok (0.00s) --- PASS: TestSSHPOP_AuthorizeSSHRekey/fail/bad-token (0.00s) --- PASS: TestSSHPOP_AuthorizeSSHRekey/fail/not-host-cert (0.00s) + --- PASS: TestSSHPOP_AuthorizeSSHRekey/ok (0.00s) === RUN TestSSHPOP_ExtractSSHPOPCert -=== RUN TestSSHPOP_ExtractSSHPOPCert/fail/parsing-sshpop-pubkey -=== RUN TestSSHPOP_ExtractSSHPOPCert/ok -=== RUN TestSSHPOP_ExtractSSHPOPCert/fail/bad-token === RUN TestSSHPOP_ExtractSSHPOPCert/fail/sshpop-missing === RUN TestSSHPOP_ExtractSSHPOPCert/fail/wrong-sshpop-type === RUN TestSSHPOP_ExtractSSHPOPCert/fail/base64decode-error +=== RUN TestSSHPOP_ExtractSSHPOPCert/fail/parsing-sshpop-pubkey +=== RUN TestSSHPOP_ExtractSSHPOPCert/ok +=== RUN TestSSHPOP_ExtractSSHPOPCert/fail/bad-token --- PASS: TestSSHPOP_ExtractSSHPOPCert (0.00s) - --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/parsing-sshpop-pubkey (0.00s) - --- PASS: TestSSHPOP_ExtractSSHPOPCert/ok (0.00s) - --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/bad-token (0.00s) --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/sshpop-missing (0.00s) --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/wrong-sshpop-type (0.00s) --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/base64decode-error (0.00s) + --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/parsing-sshpop-pubkey (0.00s) + --- PASS: TestSSHPOP_ExtractSSHPOPCert/ok (0.00s) + --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/bad-token (0.00s) === RUN TestNewTimeDuration === RUN TestNewTimeDuration/ok === RUN TestNewTimeDuration/zero @@ -8280,165 +8318,165 @@ --- PASS: TestTimeDuration_String/timestamp (0.00s) --- PASS: TestTimeDuration_String/duration (0.00s) === RUN TestWebhookController_isCertTypeOK -=== RUN TestWebhookController_isCertTypeOK/ssh/x509 +=== RUN TestWebhookController_isCertTypeOK/all/"" +=== RUN TestWebhookController_isCertTypeOK/x509/x509 +=== RUN TestWebhookController_isCertTypeOK/x509/ssh +=== RUN TestWebhookController_isCertTypeOK/ssh/all === RUN TestWebhookController_isCertTypeOK/ssh/ssh -=== RUN TestWebhookController_isCertTypeOK/ssh/"" === RUN TestWebhookController_isCertTypeOK/all/all -=== RUN TestWebhookController_isCertTypeOK/all/x509 === RUN TestWebhookController_isCertTypeOK/all/ssh === RUN TestWebhookController_isCertTypeOK/x509/all -=== RUN TestWebhookController_isCertTypeOK/ssh/all -=== RUN TestWebhookController_isCertTypeOK/all/"" -=== RUN TestWebhookController_isCertTypeOK/x509/x509 -=== RUN TestWebhookController_isCertTypeOK/x509/ssh === RUN TestWebhookController_isCertTypeOK/x509/"" +=== RUN TestWebhookController_isCertTypeOK/ssh/x509 +=== RUN TestWebhookController_isCertTypeOK/ssh/"" +=== RUN TestWebhookController_isCertTypeOK/all/x509 --- PASS: TestWebhookController_isCertTypeOK (0.00s) - --- PASS: TestWebhookController_isCertTypeOK/ssh/x509 (0.00s) + --- PASS: TestWebhookController_isCertTypeOK/all/"" (0.00s) + --- PASS: TestWebhookController_isCertTypeOK/x509/x509 (0.00s) + --- PASS: TestWebhookController_isCertTypeOK/x509/ssh (0.00s) + --- PASS: TestWebhookController_isCertTypeOK/ssh/all (0.00s) --- PASS: TestWebhookController_isCertTypeOK/ssh/ssh (0.00s) - --- PASS: TestWebhookController_isCertTypeOK/ssh/"" (0.00s) --- PASS: TestWebhookController_isCertTypeOK/all/all (0.00s) - --- PASS: TestWebhookController_isCertTypeOK/all/x509 (0.00s) --- PASS: TestWebhookController_isCertTypeOK/all/ssh (0.00s) --- PASS: TestWebhookController_isCertTypeOK/x509/all (0.00s) - --- PASS: TestWebhookController_isCertTypeOK/ssh/all (0.00s) - --- PASS: TestWebhookController_isCertTypeOK/all/"" (0.00s) - --- PASS: TestWebhookController_isCertTypeOK/x509/x509 (0.00s) - --- PASS: TestWebhookController_isCertTypeOK/x509/ssh (0.00s) --- PASS: TestWebhookController_isCertTypeOK/x509/"" (0.00s) + --- PASS: TestWebhookController_isCertTypeOK/ssh/x509 (0.00s) + --- PASS: TestWebhookController_isCertTypeOK/ssh/"" (0.00s) + --- PASS: TestWebhookController_isCertTypeOK/all/x509 (0.00s) === RUN TestWebhookController_Enrich -=== RUN TestWebhookController_Enrich/ok/x509_only -=== RUN TestWebhookController_Enrich/ok/with_options -=== RUN TestWebhookController_Enrich/deny -=== RUN TestWebhookController_Enrich/deny/with_error === RUN TestWebhookController_Enrich/fail/with_options === RUN TestWebhookController_Enrich/ok/no_enriching_webhooks === RUN TestWebhookController_Enrich/ok/one_webhook === RUN TestWebhookController_Enrich/ok/two_webhooks +=== RUN TestWebhookController_Enrich/ok/x509_only +=== RUN TestWebhookController_Enrich/ok/with_options +=== RUN TestWebhookController_Enrich/deny +=== RUN TestWebhookController_Enrich/deny/with_error --- PASS: TestWebhookController_Enrich (0.01s) - --- PASS: TestWebhookController_Enrich/ok/x509_only (0.00s) - --- PASS: TestWebhookController_Enrich/ok/with_options (0.00s) - --- PASS: TestWebhookController_Enrich/deny (0.00s) - --- PASS: TestWebhookController_Enrich/deny/with_error (0.00s) --- PASS: TestWebhookController_Enrich/fail/with_options (0.00s) --- PASS: TestWebhookController_Enrich/ok/no_enriching_webhooks (0.00s) --- PASS: TestWebhookController_Enrich/ok/one_webhook (0.00s) --- PASS: TestWebhookController_Enrich/ok/two_webhooks (0.00s) + --- PASS: TestWebhookController_Enrich/ok/x509_only (0.00s) + --- PASS: TestWebhookController_Enrich/ok/with_options (0.00s) + --- PASS: TestWebhookController_Enrich/deny (0.00s) + --- PASS: TestWebhookController_Enrich/deny/with_error (0.00s) === RUN TestWebhookController_Authorize -=== RUN TestWebhookController_Authorize/deny/withError -=== RUN TestWebhookController_Authorize/fail/with_options -=== RUN TestWebhookController_Authorize/ok/no_enriching_webhooks === RUN TestWebhookController_Authorize/ok === RUN TestWebhookController_Authorize/ok/ssh_only === RUN TestWebhookController_Authorize/ok/with_options === RUN TestWebhookController_Authorize/deny ---- PASS: TestWebhookController_Authorize (0.00s) - --- PASS: TestWebhookController_Authorize/deny/withError (0.00s) - --- PASS: TestWebhookController_Authorize/fail/with_options (0.00s) - --- PASS: TestWebhookController_Authorize/ok/no_enriching_webhooks (0.00s) +=== RUN TestWebhookController_Authorize/deny/withError +=== RUN TestWebhookController_Authorize/fail/with_options +=== RUN TestWebhookController_Authorize/ok/no_enriching_webhooks +--- PASS: TestWebhookController_Authorize (0.01s) --- PASS: TestWebhookController_Authorize/ok (0.00s) --- PASS: TestWebhookController_Authorize/ok/ssh_only (0.00s) --- PASS: TestWebhookController_Authorize/ok/with_options (0.00s) --- PASS: TestWebhookController_Authorize/deny (0.00s) + --- PASS: TestWebhookController_Authorize/deny/withError (0.00s) + --- PASS: TestWebhookController_Authorize/fail/with_options (0.00s) + --- PASS: TestWebhookController_Authorize/ok/no_enriching_webhooks (0.00s) === RUN TestWebhook_Do -=== RUN TestWebhook_Do/ok/allow === RUN TestWebhook_Do/ok === RUN TestWebhook_Do/ok/no-request-id === RUN TestWebhook_Do/ok/bearer === RUN TestWebhook_Do/ok/basic === RUN TestWebhook_Do/ok/templated-url === RUN TestWebhook_Do/fail/404 +=== RUN TestWebhook_Do/ok/allow === RUN TestWebhook_Do/disableTLSClientAuth -2025/10/26 21:31:42 http: TLS handshake error from 127.0.0.1:44826: remote error: tls: bad certificate -2025/10/26 21:31:43 http: TLS handshake error from 127.0.0.1:44834: remote error: tls: bad certificate +2026/11/30 06:00:50 http: TLS handshake error from 127.0.0.1:40824: remote error: tls: bad certificate +2026/11/30 06:00:51 http: TLS handshake error from 127.0.0.1:40834: remote error: tls: bad certificate --- PASS: TestWebhook_Do (1.02s) - --- PASS: TestWebhook_Do/ok/allow (0.00s) --- PASS: TestWebhook_Do/ok (0.00s) --- PASS: TestWebhook_Do/ok/no-request-id (0.00s) --- PASS: TestWebhook_Do/ok/bearer (0.00s) --- PASS: TestWebhook_Do/ok/basic (0.00s) --- PASS: TestWebhook_Do/ok/templated-url (0.00s) --- PASS: TestWebhook_Do/fail/404 (0.00s) + --- PASS: TestWebhook_Do/ok/allow (0.00s) --- PASS: TestWebhook_Do/disableTLSClientAuth (1.01s) === RUN TestX5C_Getters --- PASS: TestX5C_Getters (0.00s) === RUN TestX5C_Init +=== RUN TestX5C_Init/fail/empty-key +=== RUN TestX5C_Init/fail/no-valid-root-certs === RUN TestX5C_Init/fail/invalid-duration === RUN TestX5C_Init/ok === RUN TestX5C_Init/ok/root-chain === RUN TestX5C_Init/fail/empty === RUN TestX5C_Init/fail/empty-name === RUN TestX5C_Init/fail/empty-type -=== RUN TestX5C_Init/fail/empty-key -=== RUN TestX5C_Init/fail/no-valid-root-certs --- PASS: TestX5C_Init (0.00s) + --- PASS: TestX5C_Init/fail/empty-key (0.00s) + --- PASS: TestX5C_Init/fail/no-valid-root-certs (0.00s) --- PASS: TestX5C_Init/fail/invalid-duration (0.00s) --- PASS: TestX5C_Init/ok (0.00s) --- PASS: TestX5C_Init/ok/root-chain (0.00s) --- PASS: TestX5C_Init/fail/empty (0.00s) --- PASS: TestX5C_Init/fail/empty-name (0.00s) --- PASS: TestX5C_Init/fail/empty-type (0.00s) - --- PASS: TestX5C_Init/fail/empty-key (0.00s) - --- PASS: TestX5C_Init/fail/no-valid-root-certs (0.00s) === RUN TestX5C_authorizeToken -=== RUN TestX5C_authorizeToken/fail/invalid-cert-chain +=== RUN TestX5C_authorizeToken/fail/bad-token +=== RUN TestX5C_authorizeToken/fail/doubled-up-self-signed-cert === RUN TestX5C_authorizeToken/fail/signature-does-not-match-x5c-pub-key === RUN TestX5C_authorizeToken/fail/invalid-issuer === RUN TestX5C_authorizeToken/fail/empty-subject -=== RUN TestX5C_authorizeToken/fail/doubled-up-self-signed-cert +=== RUN TestX5C_authorizeToken/ok +=== RUN TestX5C_authorizeToken/fail/invalid-cert-chain === RUN TestX5C_authorizeToken/fail/digital-signature-ext-required === RUN TestX5C_authorizeToken/fail/invalid-audience -=== RUN TestX5C_authorizeToken/ok -=== RUN TestX5C_authorizeToken/fail/bad-token --- PASS: TestX5C_authorizeToken (0.01s) - --- PASS: TestX5C_authorizeToken/fail/invalid-cert-chain (0.00s) + --- PASS: TestX5C_authorizeToken/fail/bad-token (0.00s) + --- PASS: TestX5C_authorizeToken/fail/doubled-up-self-signed-cert (0.00s) --- PASS: TestX5C_authorizeToken/fail/signature-does-not-match-x5c-pub-key (0.00s) --- PASS: TestX5C_authorizeToken/fail/invalid-issuer (0.00s) --- PASS: TestX5C_authorizeToken/fail/empty-subject (0.00s) - --- PASS: TestX5C_authorizeToken/fail/doubled-up-self-signed-cert (0.00s) + --- PASS: TestX5C_authorizeToken/ok (0.00s) + --- PASS: TestX5C_authorizeToken/fail/invalid-cert-chain (0.00s) --- PASS: TestX5C_authorizeToken/fail/digital-signature-ext-required (0.00s) --- PASS: TestX5C_authorizeToken/fail/invalid-audience (0.00s) - --- PASS: TestX5C_authorizeToken/ok (0.00s) - --- PASS: TestX5C_authorizeToken/fail/bad-token (0.00s) === RUN TestX5C_AuthorizeSign +=== RUN TestX5C_AuthorizeSign/fail/invalid-token === RUN TestX5C_AuthorizeSign/ok/empty-sans === RUN TestX5C_AuthorizeSign/ok/multi-sans === RUN TestX5C_AuthorizeSign/ok/cnf -=== RUN TestX5C_AuthorizeSign/fail/invalid-token --- PASS: TestX5C_AuthorizeSign (0.00s) + --- PASS: TestX5C_AuthorizeSign/fail/invalid-token (0.00s) --- PASS: TestX5C_AuthorizeSign/ok/empty-sans (0.00s) --- PASS: TestX5C_AuthorizeSign/ok/multi-sans (0.00s) --- PASS: TestX5C_AuthorizeSign/ok/cnf (0.00s) - --- PASS: TestX5C_AuthorizeSign/fail/invalid-token (0.00s) === RUN TestX5C_AuthorizeRevoke -=== RUN TestX5C_AuthorizeRevoke/ok === RUN TestX5C_AuthorizeRevoke/fail/invalid-token +=== RUN TestX5C_AuthorizeRevoke/ok --- PASS: TestX5C_AuthorizeRevoke (0.00s) - --- PASS: TestX5C_AuthorizeRevoke/ok (0.00s) --- PASS: TestX5C_AuthorizeRevoke/fail/invalid-token (0.00s) + --- PASS: TestX5C_AuthorizeRevoke/ok (0.00s) === RUN TestX5C_AuthorizeRenew -=== RUN TestX5C_AuthorizeRenew/ok === RUN TestX5C_AuthorizeRenew/fail/renew-disabled +=== RUN TestX5C_AuthorizeRenew/ok --- PASS: TestX5C_AuthorizeRenew (0.00s) - --- PASS: TestX5C_AuthorizeRenew/ok (0.00s) --- PASS: TestX5C_AuthorizeRenew/fail/renew-disabled (0.00s) + --- PASS: TestX5C_AuthorizeRenew/ok (0.00s) === RUN TestX5C_AuthorizeSSHSign +=== RUN TestX5C_AuthorizeSSHSign/ok/with-claims === RUN TestX5C_AuthorizeSSHSign/ok/without-claims === RUN TestX5C_AuthorizeSSHSign/ok/cnf === RUN TestX5C_AuthorizeSSHSign/fail/sshCA-disabled === RUN TestX5C_AuthorizeSSHSign/fail/invalid-token === RUN TestX5C_AuthorizeSSHSign/fail/no-Step-claim === RUN TestX5C_AuthorizeSSHSign/fail/no-SSH-subattribute-in-claims -=== RUN TestX5C_AuthorizeSSHSign/ok/with-claims --- PASS: TestX5C_AuthorizeSSHSign (0.01s) + --- PASS: TestX5C_AuthorizeSSHSign/ok/with-claims (0.00s) --- PASS: TestX5C_AuthorizeSSHSign/ok/without-claims (0.00s) --- PASS: TestX5C_AuthorizeSSHSign/ok/cnf (0.00s) --- PASS: TestX5C_AuthorizeSSHSign/fail/sshCA-disabled (0.00s) --- PASS: TestX5C_AuthorizeSSHSign/fail/invalid-token (0.00s) --- PASS: TestX5C_AuthorizeSSHSign/fail/no-Step-claim (0.00s) --- PASS: TestX5C_AuthorizeSSHSign/fail/no-SSH-subattribute-in-claims (0.00s) - --- PASS: TestX5C_AuthorizeSSHSign/ok/with-claims (0.00s) PASS -ok github.com/smallstep/certificates/authority/provisioner 30.123s +ok github.com/smallstep/certificates/authority/provisioner 27.860s === RUN TestProjectValidator_ValidateProject === RUN TestProjectValidator_ValidateProject/allowed-1 === RUN TestProjectValidator_ValidateProject/allowed-2 @@ -8460,7 +8498,7 @@ --- PASS: TestOrganizationValidator_ValidateProject/fail_projects (0.00s) --- SKIP: TestOrganizationValidator_ValidateProject/fail_organization (0.00s) PASS -ok github.com/smallstep/certificates/authority/provisioner/gcp 0.017s +ok github.com/smallstep/certificates/authority/provisioner/gcp 0.026s === RUN TestDPOPOptions_EvaluateTarget === RUN TestDPOPOptions_EvaluateTarget/ok === RUN TestDPOPOptions_EvaluateTarget/fail/empty @@ -8518,21 +8556,21 @@ --- PASS: TestOptions_Validate/fail/invalid-key (0.00s) --- PASS: TestOptions_Validate/fail/target-template (0.00s) PASS -ok github.com/smallstep/certificates/authority/provisioner/wire 0.048s +ok github.com/smallstep/certificates/authority/provisioner/wire 0.045s === RUN TestNewACMEClient +=== RUN TestNewACMEClient/ok === RUN TestNewACMEClient/fail/client-option-error === RUN TestNewACMEClient/fail/get-directory === RUN TestNewACMEClient/fail/bad-directory === RUN TestNewACMEClient/fail/error-post-newAccount === RUN TestNewACMEClient/fail/error-bad-account -=== RUN TestNewACMEClient/ok --- PASS: TestNewACMEClient (0.01s) + --- PASS: TestNewACMEClient/ok (0.00s) --- PASS: TestNewACMEClient/fail/client-option-error (0.00s) --- PASS: TestNewACMEClient/fail/get-directory (0.00s) --- PASS: TestNewACMEClient/fail/bad-directory (0.00s) --- PASS: TestNewACMEClient/fail/error-post-newAccount (0.00s) --- PASS: TestNewACMEClient/fail/error-bad-account (0.00s) - --- PASS: TestNewACMEClient/ok (0.00s) === RUN TestACMEClient_GetDirectory --- PASS: TestACMEClient_GetDirectory (0.00s) === RUN TestACMEClient_GetNonce @@ -8542,25 +8580,25 @@ --- PASS: TestACMEClient_GetNonce/fail/GET-nonce (0.00s) --- PASS: TestACMEClient_GetNonce/ok (0.00s) === RUN TestACMEClient_post +=== RUN TestACMEClient_post/ok/kid === RUN TestACMEClient_post/fail/account-not-configured === RUN TestACMEClient_post/fail/GET-nonce === RUN TestACMEClient_post/ok/jwk -=== RUN TestACMEClient_post/ok/kid --- PASS: TestACMEClient_post (0.00s) + --- PASS: TestACMEClient_post/ok/kid (0.00s) --- PASS: TestACMEClient_post/fail/account-not-configured (0.00s) --- PASS: TestACMEClient_post/fail/GET-nonce (0.00s) --- PASS: TestACMEClient_post/ok/jwk (0.00s) - --- PASS: TestACMEClient_post/ok/kid (0.00s) === RUN TestACMEClient_NewOrder -=== RUN TestACMEClient_NewOrder/ok === RUN TestACMEClient_NewOrder/fail/client-post === RUN TestACMEClient_NewOrder/fail/newOrder-error === RUN TestACMEClient_NewOrder/fail/bad-order +=== RUN TestACMEClient_NewOrder/ok --- PASS: TestACMEClient_NewOrder (0.01s) - --- PASS: TestACMEClient_NewOrder/ok (0.00s) --- PASS: TestACMEClient_NewOrder/fail/client-post (0.00s) --- PASS: TestACMEClient_NewOrder/fail/newOrder-error (0.00s) --- PASS: TestACMEClient_NewOrder/fail/bad-order (0.00s) + --- PASS: TestACMEClient_NewOrder/ok (0.00s) === RUN TestACMEClient_GetOrder === RUN TestACMEClient_GetOrder/fail/client-post === RUN TestACMEClient_GetOrder/fail/getOrder-error @@ -8576,31 +8614,31 @@ === RUN TestACMEClient_GetAuthz/fail/getChallenge-error === RUN TestACMEClient_GetAuthz/fail/bad-challenge === RUN TestACMEClient_GetAuthz/ok ---- PASS: TestACMEClient_GetAuthz (0.01s) +--- PASS: TestACMEClient_GetAuthz (0.00s) --- PASS: TestACMEClient_GetAuthz/fail/client-post (0.00s) --- PASS: TestACMEClient_GetAuthz/fail/getChallenge-error (0.00s) --- PASS: TestACMEClient_GetAuthz/fail/bad-challenge (0.00s) --- PASS: TestACMEClient_GetAuthz/ok (0.00s) === RUN TestACMEClient_GetChallenge -=== RUN TestACMEClient_GetChallenge/fail/client-post -=== RUN TestACMEClient_GetChallenge/fail/getChallenge-error === RUN TestACMEClient_GetChallenge/fail/bad-challenge === RUN TestACMEClient_GetChallenge/ok +=== RUN TestACMEClient_GetChallenge/fail/client-post +=== RUN TestACMEClient_GetChallenge/fail/getChallenge-error --- PASS: TestACMEClient_GetChallenge (0.01s) - --- PASS: TestACMEClient_GetChallenge/fail/client-post (0.00s) - --- PASS: TestACMEClient_GetChallenge/fail/getChallenge-error (0.00s) --- PASS: TestACMEClient_GetChallenge/fail/bad-challenge (0.00s) --- PASS: TestACMEClient_GetChallenge/ok (0.00s) + --- PASS: TestACMEClient_GetChallenge/fail/client-post (0.00s) + --- PASS: TestACMEClient_GetChallenge/fail/getChallenge-error (0.00s) === RUN TestACMEClient_ValidateChallenge -=== RUN TestACMEClient_ValidateChallenge/fail/client-post === RUN TestACMEClient_ValidateChallenge/fail/getChallenge-error === RUN TestACMEClient_ValidateChallenge/fail/bad-challenge === RUN TestACMEClient_ValidateChallenge/ok +=== RUN TestACMEClient_ValidateChallenge/fail/client-post --- PASS: TestACMEClient_ValidateChallenge (0.01s) - --- PASS: TestACMEClient_ValidateChallenge/fail/client-post (0.00s) --- PASS: TestACMEClient_ValidateChallenge/fail/getChallenge-error (0.00s) --- PASS: TestACMEClient_ValidateChallenge/fail/bad-challenge (0.00s) --- PASS: TestACMEClient_ValidateChallenge/ok (0.00s) + --- PASS: TestACMEClient_ValidateChallenge/fail/client-post (0.00s) === RUN TestACMEClient_ValidateWithPayload === RUN TestACMEClient_ValidateWithPayload/ok === NAME TestACMEClient_ValidateWithPayload @@ -8628,142 +8666,141 @@ --- PASS: TestACMEClient_FinalizeOrder/fail/bad-order (0.00s) --- PASS: TestACMEClient_FinalizeOrder/ok (0.00s) === RUN TestACMEClient_GetAccountOrders -=== RUN TestACMEClient_GetAccountOrders/fail/bad-accountOrders === RUN TestACMEClient_GetAccountOrders/ok === RUN TestACMEClient_GetAccountOrders/fail/account-not-configured === RUN TestACMEClient_GetAccountOrders/fail/client-post === RUN TestACMEClient_GetAccountOrders/fail/getAccountOrders-error ---- PASS: TestACMEClient_GetAccountOrders (0.01s) - --- PASS: TestACMEClient_GetAccountOrders/fail/bad-accountOrders (0.00s) +=== RUN TestACMEClient_GetAccountOrders/fail/bad-accountOrders +--- PASS: TestACMEClient_GetAccountOrders (0.00s) --- PASS: TestACMEClient_GetAccountOrders/ok (0.00s) --- PASS: TestACMEClient_GetAccountOrders/fail/account-not-configured (0.00s) --- PASS: TestACMEClient_GetAccountOrders/fail/client-post (0.00s) --- PASS: TestACMEClient_GetAccountOrders/fail/getAccountOrders-error (0.00s) + --- PASS: TestACMEClient_GetAccountOrders/fail/bad-accountOrders (0.00s) === RUN TestACMEClient_GetCertificate === RUN TestACMEClient_GetCertificate/fail/client-post === RUN TestACMEClient_GetCertificate/fail/getAccountOrders-error === RUN TestACMEClient_GetCertificate/fail/bad-certificate === RUN TestACMEClient_GetCertificate/ok ---- PASS: TestACMEClient_GetCertificate (0.01s) +--- PASS: TestACMEClient_GetCertificate (0.00s) --- PASS: TestACMEClient_GetCertificate/fail/client-post (0.00s) --- PASS: TestACMEClient_GetCertificate/fail/getAccountOrders-error (0.00s) --- PASS: TestACMEClient_GetCertificate/fail/bad-certificate (0.00s) --- PASS: TestACMEClient_GetCertificate/ok (0.00s) === RUN TestBootstrap -2025/10/26 21:31:19 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:26 Building new tls configuration using step-ca x509 Signer Interface === RUN TestBootstrap/ok === RUN TestBootstrap/token_err === RUN TestBootstrap/bad_claims === RUN TestBootstrap/bad_sha === RUN TestBootstrap/bad_aud ---- PASS: TestBootstrap (0.33s) +--- PASS: TestBootstrap (0.20s) --- PASS: TestBootstrap/ok (0.00s) --- PASS: TestBootstrap/token_err (0.00s) --- PASS: TestBootstrap/bad_claims (0.00s) --- PASS: TestBootstrap/bad_sha (0.00s) --- PASS: TestBootstrap/bad_aud (0.00s) === RUN TestBootstrapServerWithoutMTLS -2025/10/26 21:31:19 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 21:31:19 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:26 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:26 Building new tls configuration using step-ca x509 Signer Interface === RUN TestBootstrapServerWithoutMTLS/ok === RUN TestBootstrapServerWithoutMTLS/ok_mtls === RUN TestBootstrapServerWithoutMTLS/fail === RUN TestBootstrapServerWithoutMTLS/fail_with_TLSConfig ---- PASS: TestBootstrapServerWithoutMTLS (0.31s) +--- PASS: TestBootstrapServerWithoutMTLS (0.21s) --- PASS: TestBootstrapServerWithoutMTLS/ok (0.01s) --- PASS: TestBootstrapServerWithoutMTLS/ok_mtls (0.01s) --- PASS: TestBootstrapServerWithoutMTLS/fail (0.00s) --- PASS: TestBootstrapServerWithoutMTLS/fail_with_TLSConfig (0.00s) === RUN TestBootstrapServerWithMTLS -2025/10/26 21:31:19 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 21:31:19 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:27 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:27 Building new tls configuration using step-ca x509 Signer Interface === RUN TestBootstrapServerWithMTLS/ok === RUN TestBootstrapServerWithMTLS/ok_mtls === RUN TestBootstrapServerWithMTLS/fail === RUN TestBootstrapServerWithMTLS/fail_with_TLSConfig ---- PASS: TestBootstrapServerWithMTLS (0.22s) +--- PASS: TestBootstrapServerWithMTLS (0.25s) --- PASS: TestBootstrapServerWithMTLS/ok (0.01s) --- PASS: TestBootstrapServerWithMTLS/ok_mtls (0.01s) --- PASS: TestBootstrapServerWithMTLS/fail (0.00s) --- PASS: TestBootstrapServerWithMTLS/fail_with_TLSConfig (0.00s) === RUN TestBootstrapClient -2025/10/26 21:31:20 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 21:31:20 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:27 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:27 Building new tls configuration using step-ca x509 Signer Interface === RUN TestBootstrapClient/ok === RUN TestBootstrapClient/ok_mtls === RUN TestBootstrapClient/fail ---- PASS: TestBootstrapClient (0.15s) +--- PASS: TestBootstrapClient (0.16s) --- PASS: TestBootstrapClient/ok (0.01s) --- PASS: TestBootstrapClient/ok_mtls (0.01s) --- PASS: TestBootstrapClient/fail (0.00s) === RUN TestBootstrapClientServerRotation -2025/10/26 21:31:20 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 21:31:20 Serving HTTPS on 127.0.0.1:34057 ... -2025/10/26 21:31:27 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 21:31:28 Serving HTTPS on 127.0.0.1:34057 ... -2025/10/26 21:31:33 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 21:31:33 Serving HTTPS on 127.0.0.1:34057 ... -2025/10/26 21:31:38 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 21:31:38 Serving HTTPS on 127.0.0.1:34057 ... -2025/10/26 21:31:38 /usr/lib/go-1.24/src/net/http/server.go:3638: http: TLS handshake error from 127.0.0.1:51290: tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2025-10-26T21:31:38-12:00 is after 2025-10-27T09:31:38Z ---- PASS: TestBootstrapClientServerRotation (18.71s) +2026/11/30 06:00:27 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:27 Serving HTTPS on 127.0.0.1:46247 ... +2026/11/30 06:00:34 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:35 Serving HTTPS on 127.0.0.1:46247 ... +2026/11/30 06:00:40 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:40 Serving HTTPS on 127.0.0.1:46247 ... +2026/11/30 06:00:45 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:45 Serving HTTPS on 127.0.0.1:46247 ... +--- PASS: TestBootstrapClientServerRotation (21.28s) === RUN TestBootstrapClientServerFederation -2025/10/26 21:31:38 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 21:31:38 Serving HTTPS on 127.0.0.1:38625 ... -2025/10/26 21:31:39 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 21:31:39 Serving HTTPS on 127.0.0.1:38593 ... ---- PASS: TestBootstrapClientServerFederation (2.41s) +2026/11/30 06:00:48 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:48 Serving HTTPS on 127.0.0.1:38763 ... +2026/11/30 06:00:48 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:48 Serving HTTPS on 127.0.0.1:40187 ... +--- PASS: TestBootstrapClientServerFederation (2.32s) === RUN TestBootstrapListener -2025/10/26 21:31:41 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 21:31:41 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:51 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:51 Building new tls configuration using step-ca x509 Signer Interface === RUN TestBootstrapListener/ok === RUN TestBootstrapListener/ok_mtls === RUN TestBootstrapListener/fail ---- PASS: TestBootstrapListener (0.28s) +--- PASS: TestBootstrapListener (0.30s) --- PASS: TestBootstrapListener/ok (0.08s) --- PASS: TestBootstrapListener/ok_mtls (0.08s) --- PASS: TestBootstrapListener/fail (0.00s) === RUN TestCASign -2025/10/26 21:31:41 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:51 Building new tls configuration using step-ca x509 Signer Interface +=== RUN TestCASign/fail_invalid-json-body +=== RUN TestCASign/fail_invalid-csr-sig === RUN TestCASign/fail_unauthorized-ott === RUN TestCASign/fail_commonname-claim === RUN TestCASign/ok === RUN TestCASign/ok-backwards-compat-missing-subject-SAN -=== RUN TestCASign/fail_invalid-json-body -=== RUN TestCASign/fail_invalid-csr-sig ---- PASS: TestCASign (0.12s) +--- PASS: TestCASign (0.25s) + --- PASS: TestCASign/fail_invalid-json-body (0.00s) + --- PASS: TestCASign/fail_invalid-csr-sig (0.00s) --- PASS: TestCASign/fail_unauthorized-ott (0.00s) --- PASS: TestCASign/fail_commonname-claim (0.00s) --- PASS: TestCASign/ok (0.00s) --- PASS: TestCASign/ok-backwards-compat-missing-subject-SAN (0.00s) - --- PASS: TestCASign/fail_invalid-json-body (0.00s) - --- PASS: TestCASign/fail_invalid-csr-sig (0.00s) === RUN TestCAProvisioners -2025/10/26 21:31:41 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:51 Building new tls configuration using step-ca x509 Signer Interface === RUN TestCAProvisioners/ok --- PASS: TestCAProvisioners (0.00s) --- PASS: TestCAProvisioners/ok (0.00s) === RUN TestCAProvisionerEncryptedKey -2025/10/26 21:31:41 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:51 Building new tls configuration using step-ca x509 Signer Interface === RUN TestCAProvisionerEncryptedKey/not-found === RUN TestCAProvisionerEncryptedKey/ok --- PASS: TestCAProvisionerEncryptedKey (0.00s) --- PASS: TestCAProvisionerEncryptedKey/not-found (0.00s) --- PASS: TestCAProvisionerEncryptedKey/ok (0.00s) === RUN TestCARoot -2025/10/26 21:31:41 Building new tls configuration using step-ca x509 Signer Interface -=== RUN TestCARoot/not-found +2026/11/30 06:00:51 Building new tls configuration using step-ca x509 Signer Interface === RUN TestCARoot/success +=== RUN TestCARoot/not-found --- PASS: TestCARoot (0.00s) - --- PASS: TestCARoot/not-found (0.00s) --- PASS: TestCARoot/success (0.00s) + --- PASS: TestCARoot/not-found (0.00s) === RUN TestCAHealth -2025/10/26 21:31:41 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:51 Building new tls configuration using step-ca x509 Signer Interface === RUN TestCAHealth/success --- PASS: TestCAHealth (0.00s) --- PASS: TestCAHealth/success (0.00s) === RUN TestCARenew -2025/10/26 21:31:41 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:51 Building new tls configuration using step-ca x509 Signer Interface === RUN TestCARenew/request-missing-tls === RUN TestCARenew/request-missing-peer-certificate === RUN TestCARenew/success @@ -8910,7 +8947,7 @@ --- PASS: TestClient_RootFingerprint/ok_with_error (0.00s) --- PASS: TestClient_RootFingerprint/fail (0.00s) === RUN TestClient_RootFingerprintWithServer -2025/10/26 21:31:41 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:51 Building new tls configuration using step-ca x509 Signer Interface --- PASS: TestClient_RootFingerprintWithServer (0.00s) === RUN TestClient_SSHBastion === RUN TestClient_SSHBastion/ok @@ -8934,7 +8971,7 @@ === RUN TestClient_WithTimeout/ok === RUN TestClient_WithTimeout/ok_with_timeout === RUN TestClient_WithTimeout/fail_with_timeout ---- PASS: TestClient_WithTimeout (0.60s) +--- PASS: TestClient_WithTimeout (0.61s) --- PASS: TestClient_WithTimeout/ok (0.20s) --- PASS: TestClient_WithTimeout/ok_with_timeout (0.20s) --- PASS: TestClient_WithTimeout/fail_with_timeout (0.01s) @@ -8949,7 +8986,7 @@ === RUN Test_newRequestID --- PASS: Test_newRequestID (0.00s) === RUN TestNewProvisioner -2025/10/26 21:31:42 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:52 Building new tls configuration using step-ca x509 Signer Interface === RUN TestNewProvisioner/ok === RUN TestNewProvisioner/ok-by-name === RUN TestNewProvisioner/ok-with-bundle @@ -8960,31 +8997,31 @@ === RUN TestNewProvisioner/fail-by-password === RUN TestNewProvisioner/fail-by-password-no-kid === RUN TestNewProvisioner/fail-bad-certificate -2025/10/26 21:31:42 http: TLS handshake error from 127.0.0.1:60620: remote error: tls: bad certificate +2026/11/30 06:00:54 http: TLS handshake error from 127.0.0.1:53160: remote error: tls: bad certificate === RUN TestNewProvisioner/fail-not-found-certificate ---- PASS: TestNewProvisioner (0.48s) - --- PASS: TestNewProvisioner/ok (0.07s) - --- PASS: TestNewProvisioner/ok-by-name (0.07s) - --- PASS: TestNewProvisioner/ok-with-bundle (0.06s) - --- PASS: TestNewProvisioner/ok-with-fingerprint (0.07s) - --- PASS: TestNewProvisioner/fail-bad-kid (0.00s) +--- PASS: TestNewProvisioner (1.88s) + --- PASS: TestNewProvisioner/ok (0.33s) + --- PASS: TestNewProvisioner/ok-by-name (0.31s) + --- PASS: TestNewProvisioner/ok-with-bundle (0.24s) + --- PASS: TestNewProvisioner/ok-with-fingerprint (0.22s) + --- PASS: TestNewProvisioner/fail-bad-kid (0.01s) --- PASS: TestNewProvisioner/fail-empty-name (0.00s) - --- PASS: TestNewProvisioner/fail-bad-name (0.00s) - --- PASS: TestNewProvisioner/fail-by-password (0.07s) - --- PASS: TestNewProvisioner/fail-by-password-no-kid (0.07s) + --- PASS: TestNewProvisioner/fail-bad-name (0.03s) + --- PASS: TestNewProvisioner/fail-by-password (0.28s) + --- PASS: TestNewProvisioner/fail-by-password-no-kid (0.15s) --- PASS: TestNewProvisioner/fail-bad-certificate (0.00s) --- PASS: TestNewProvisioner/fail-not-found-certificate (0.00s) === RUN TestProvisioner_Getters ---- PASS: TestProvisioner_Getters (0.06s) +--- PASS: TestProvisioner_Getters (0.12s) === RUN TestProvisioner_Setters ---- PASS: TestProvisioner_Setters (0.06s) +--- PASS: TestProvisioner_Setters (0.20s) === RUN TestProvisioner_Token === RUN TestProvisioner_Token/ok === RUN TestProvisioner_Token/ok-with-san === RUN TestProvisioner_Token/ok-with-sans === RUN TestProvisioner_Token/fail-no-subject === RUN TestProvisioner_Token/fail-no-key ---- PASS: TestProvisioner_Token (0.06s) +--- PASS: TestProvisioner_Token (0.13s) --- PASS: TestProvisioner_Token/ok (0.00s) --- PASS: TestProvisioner_Token/ok-with-san (0.00s) --- PASS: TestProvisioner_Token/ok-with-sans (0.00s) @@ -8996,7 +9033,7 @@ === RUN TestProvisioner_IPv6Token/ok-with-sans === RUN TestProvisioner_IPv6Token/fail-no-subject === RUN TestProvisioner_IPv6Token/fail-no-key ---- PASS: TestProvisioner_IPv6Token (0.07s) +--- PASS: TestProvisioner_IPv6Token (0.23s) --- PASS: TestProvisioner_IPv6Token/ok (0.00s) --- PASS: TestProvisioner_IPv6Token/ok-with-san (0.00s) --- PASS: TestProvisioner_IPv6Token/ok-with-sans (0.00s) @@ -9008,7 +9045,7 @@ === RUN TestProvisioner_SSHToken/ok_multiple_principals === RUN TestProvisioner_SSHToken/fail-no-subject === RUN TestProvisioner_SSHToken/fail-no-key ---- PASS: TestProvisioner_SSHToken (0.06s) +--- PASS: TestProvisioner_SSHToken (0.25s) --- PASS: TestProvisioner_SSHToken/ok (0.00s) --- PASS: TestProvisioner_SSHToken/ok_host (0.00s) --- PASS: TestProvisioner_SSHToken/ok_multiple_principals (0.00s) @@ -9043,145 +9080,145 @@ --- PASS: TestAddClientCA (0.00s) --- PASS: TestAddClientCA/ok (0.00s) === RUN TestAddRootsToRootCAs -2025/10/26 21:31:43 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:55 Building new tls configuration using step-ca x509 Signer Interface === RUN TestAddRootsToRootCAs/ok === RUN TestAddRootsToRootCAs/fail -2025/10/26 21:31:43 http: TLS handshake error from 127.0.0.1:48010: remote error: tls: bad certificate ---- PASS: TestAddRootsToRootCAs (0.01s) +2026/11/30 06:00:55 http: TLS handshake error from 127.0.0.1:51162: remote error: tls: bad certificate +--- PASS: TestAddRootsToRootCAs (0.02s) --- PASS: TestAddRootsToRootCAs/ok (0.00s) --- PASS: TestAddRootsToRootCAs/fail (0.00s) === RUN TestAddRootsToClientCAs -2025/10/26 21:31:43 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:55 Building new tls configuration using step-ca x509 Signer Interface === RUN TestAddRootsToClientCAs/ok === RUN TestAddRootsToClientCAs/fail -2025/10/26 21:31:43 http: TLS handshake error from 127.0.0.1:45804: remote error: tls: bad certificate ---- PASS: TestAddRootsToClientCAs (0.01s) +2026/11/30 06:00:55 http: TLS handshake error from 127.0.0.1:51350: remote error: tls: bad certificate +--- PASS: TestAddRootsToClientCAs (0.02s) --- PASS: TestAddRootsToClientCAs/ok (0.00s) - --- PASS: TestAddRootsToClientCAs/fail (0.00s) + --- PASS: TestAddRootsToClientCAs/fail (0.01s) === RUN TestAddFederationToRootCAs -2025/10/26 21:31:43 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:55 Building new tls configuration using step-ca x509 Signer Interface === RUN TestAddFederationToRootCAs/ok === RUN TestAddFederationToRootCAs/fail -2025/10/26 21:31:43 http: TLS handshake error from 127.0.0.1:37544: remote error: tls: bad certificate ---- PASS: TestAddFederationToRootCAs (0.01s) - --- PASS: TestAddFederationToRootCAs/ok (0.00s) - --- PASS: TestAddFederationToRootCAs/fail (0.00s) +2026/11/30 06:00:55 http: TLS handshake error from 127.0.0.1:33850: read tcp 127.0.0.1:42213->127.0.0.1:33850: use of closed network connection +--- PASS: TestAddFederationToRootCAs (0.04s) + --- PASS: TestAddFederationToRootCAs/ok (0.01s) + --- PASS: TestAddFederationToRootCAs/fail (0.01s) === RUN TestAddFederationToClientCAs -2025/10/26 21:31:43 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:55 Building new tls configuration using step-ca x509 Signer Interface === RUN TestAddFederationToClientCAs/ok === RUN TestAddFederationToClientCAs/fail -2025/10/26 21:31:43 http: TLS handshake error from 127.0.0.1:42704: remote error: tls: bad certificate ---- PASS: TestAddFederationToClientCAs (0.01s) - --- PASS: TestAddFederationToClientCAs/ok (0.00s) +2026/11/30 06:00:55 http: TLS handshake error from 127.0.0.1:39320: read tcp 127.0.0.1:45213->127.0.0.1:39320: use of closed network connection +--- PASS: TestAddFederationToClientCAs (0.02s) + --- PASS: TestAddFederationToClientCAs/ok (0.01s) --- PASS: TestAddFederationToClientCAs/fail (0.00s) === RUN TestAddRootsToCAs -2025/10/26 21:31:43 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:55 Building new tls configuration using step-ca x509 Signer Interface === RUN TestAddRootsToCAs/ok === RUN TestAddRootsToCAs/fail -2025/10/26 21:31:43 http: TLS handshake error from 127.0.0.1:44740: remote error: tls: bad certificate ---- PASS: TestAddRootsToCAs (0.01s) - --- PASS: TestAddRootsToCAs/ok (0.00s) +2026/11/30 06:00:55 http: TLS handshake error from 127.0.0.1:34348: read tcp 127.0.0.1:39075->127.0.0.1:34348: use of closed network connection +--- PASS: TestAddRootsToCAs (0.02s) + --- PASS: TestAddRootsToCAs/ok (0.01s) --- PASS: TestAddRootsToCAs/fail (0.00s) === RUN TestAddFederationToCAs -2025/10/26 21:31:43 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:55 Building new tls configuration using step-ca x509 Signer Interface === RUN TestAddFederationToCAs/ok === RUN TestAddFederationToCAs/fail -2025/10/26 21:31:43 http: TLS handshake error from 127.0.0.1:49622: remote error: tls: bad certificate ---- PASS: TestAddFederationToCAs (0.01s) +2026/11/30 06:00:55 http: TLS handshake error from 127.0.0.1:46276: remote error: tls: bad certificate +--- PASS: TestAddFederationToCAs (0.02s) --- PASS: TestAddFederationToCAs/ok (0.00s) - --- PASS: TestAddFederationToCAs/fail (0.00s) + --- PASS: TestAddFederationToCAs/fail (0.01s) === RUN TestClient_GetServerTLSConfig_http -2025/10/26 21:31:43 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:55 Building new tls configuration using step-ca x509 Signer Interface === RUN TestClient_GetServerTLSConfig_http/with_transport -2025/10/26 21:31:43 Building new tls configuration using step-ca x509 Signer Interface -=== RUN TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:44439 -=== RUN TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:39413 +2026/11/30 06:00:55 Building new tls configuration using step-ca x509 Signer Interface +=== RUN TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:34511 +=== RUN TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:40833 === RUN TestClient_GetServerTLSConfig_http/with_tlsConfig -2025/10/26 21:31:43 Building new tls configuration using step-ca x509 Signer Interface -=== RUN TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:39413 -=== RUN TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:44439 +2026/11/30 06:00:55 Building new tls configuration using step-ca x509 Signer Interface +=== RUN TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:34511 +=== RUN TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:40833 === RUN TestClient_GetServerTLSConfig_http/with_no_ClientCert -2025/10/26 21:31:43 Building new tls configuration using step-ca x509 Signer Interface -=== RUN TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:39413/no-cert -=== RUN TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:44439/no-cert -2025/10/26 21:31:43 http: TLS handshake error from 127.0.0.1:40288: tls: client didn't provide a certificate +2026/11/30 06:00:56 Building new tls configuration using step-ca x509 Signer Interface +=== RUN TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:34511/no-cert +=== RUN TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:40833/no-cert +2026/11/30 06:00:56 http: TLS handshake error from 127.0.0.1:58074: tls: client didn't provide a certificate === RUN TestClient_GetServerTLSConfig_http/fail_with_default -2025/10/26 21:31:43 Building new tls configuration using step-ca x509 Signer Interface -=== RUN TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:39413/no-cert -2025/10/26 21:31:43 http: TLS handshake error from 127.0.0.1:37662: remote error: tls: bad certificate -=== RUN TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:44439/no-cert -2025/10/26 21:31:43 http: TLS handshake error from 127.0.0.1:40304: remote error: tls: bad certificate ---- PASS: TestClient_GetServerTLSConfig_http (0.36s) - --- PASS: TestClient_GetServerTLSConfig_http/with_transport (0.07s) - --- PASS: TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:44439 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:39413 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig (0.07s) - --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:39413 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:44439 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert (0.07s) - --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:39413/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:44439/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default (0.07s) - --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:39413/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:44439/no-cert (0.00s) +2026/11/30 06:00:56 Building new tls configuration using step-ca x509 Signer Interface +=== RUN TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:34511/no-cert +2026/11/30 06:00:56 http: TLS handshake error from 127.0.0.1:35864: remote error: tls: bad certificate +=== RUN TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:40833/no-cert +2026/11/30 06:00:56 http: TLS handshake error from 127.0.0.1:58086: remote error: tls: bad certificate +--- PASS: TestClient_GetServerTLSConfig_http (1.17s) + --- PASS: TestClient_GetServerTLSConfig_http/with_transport (0.33s) + --- PASS: TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:34511 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:40833 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig (0.24s) + --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:34511 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:40833 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert (0.14s) + --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:34511/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:40833/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default (0.17s) + --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:34511/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:40833/no-cert (0.00s) === RUN TestClient_GetServerTLSConfig_renew -2025/10/26 21:31:43 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:56 Building new tls configuration using step-ca x509 Signer Interface === RUN TestClient_GetServerTLSConfig_renew/with_transport -=== RUN TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:40739 -=== RUN TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:37443 +=== RUN TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:40929 +=== RUN TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:38467 === RUN TestClient_GetServerTLSConfig_renew/with_tlsConfig -=== RUN TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:40739 -=== RUN TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:37443 +=== RUN TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:40929 +=== RUN TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:38467 === RUN TestClient_GetServerTLSConfig_renew/with_no_ClientCert -=== RUN TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:40739/no-cert -=== RUN TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:37443/no-cert -2025/10/26 21:31:43 http: TLS handshake error from 127.0.0.1:35984: tls: client didn't provide a certificate +=== RUN TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:40929/no-cert +=== RUN TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:38467/no-cert +2026/11/30 06:00:57 http: TLS handshake error from 127.0.0.1:50744: tls: client didn't provide a certificate === RUN TestClient_GetServerTLSConfig_renew/fail_with_default -=== RUN TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:40739/no-cert -2025/10/26 21:31:43 http: TLS handshake error from 127.0.0.1:55008: remote error: tls: bad certificate -=== RUN TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:37443/no-cert -2025/10/26 21:31:43 http: TLS handshake error from 127.0.0.1:35986: remote error: tls: bad certificate -2025/10/26 21:31:43 Sleeping for 5s ... +=== RUN TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:40929/no-cert +=== RUN TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:38467/no-cert +2026/11/30 06:00:57 http: TLS handshake error from 127.0.0.1:46944: remote error: tls: bad certificate +2026/11/30 06:00:57 http: TLS handshake error from 127.0.0.1:50760: remote error: tls: bad certificate +2026/11/30 06:00:57 Sleeping for 5s ... === RUN TestClient_GetServerTLSConfig_renew/renewed_with_transport -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:40739 -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:37443 +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:40929 +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:38467 === RUN TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:40739 -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:37443 +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:40929 +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:38467 === RUN TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:37443/no-cert -2025/10/26 21:31:48 http: TLS handshake error from 127.0.0.1:33762: tls: client didn't provide a certificate -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:40739/no-cert +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:40929/no-cert +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:38467/no-cert +2026/11/30 06:01:02 http: TLS handshake error from 127.0.0.1:50792: tls: client didn't provide a certificate === RUN TestClient_GetServerTLSConfig_renew/renewed_fail_with_default -=== RUN TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:40739/no-cert -2025/10/26 21:31:48 http: TLS handshake error from 127.0.0.1:40252: remote error: tls: bad certificate -=== RUN TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:37443/no-cert -2025/10/26 21:31:48 http: TLS handshake error from 127.0.0.1:33768: remote error: tls: bad certificate ---- PASS: TestClient_GetServerTLSConfig_renew (5.24s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_transport (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:40739 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:37443 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_tlsConfig (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:40739 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:37443 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:40739/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:37443/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/fail_with_default (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:40739/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:37443/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:40739 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:37443 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:40739 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:37443 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:37443/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:40739/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_fail_with_default (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:40739/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:37443/no-cert (0.00s) +=== RUN TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:38467/no-cert +=== RUN TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:40929/no-cert +2026/11/30 06:01:02 http: TLS handshake error from 127.0.0.1:50804: remote error: tls: bad certificate +2026/11/30 06:01:02 http: TLS handshake error from 127.0.0.1:46988: remote error: tls: bad certificate +--- PASS: TestClient_GetServerTLSConfig_renew (5.74s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_transport (0.02s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:40929 (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:38467 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_tlsConfig (0.02s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:40929 (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:38467 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:40929/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:38467/no-cert (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/fail_with_default (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:40929/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:38467/no-cert (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport (0.02s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:40929 (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:38467 (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:40929 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:38467 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:40929/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:38467/no-cert (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_fail_with_default (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:38467/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:40929/no-cert (0.01s) === RUN TestCertificate === RUN TestCertificate/ok === RUN TestCertificate/fail @@ -9191,7 +9228,7 @@ === RUN TestIntermediateCertificate === RUN TestIntermediateCertificate/ok === RUN TestIntermediateCertificate/fail ---- PASS: TestIntermediateCertificate (0.00s) +--- PASS: TestIntermediateCertificate (0.01s) --- PASS: TestIntermediateCertificate/ok (0.00s) --- PASS: TestIntermediateCertificate/fail (0.00s) === RUN TestRootCertificateCertificate @@ -9203,10 +9240,10 @@ --- PASS: TestRootCertificateCertificate/fail (0.00s) --- PASS: TestRootCertificateCertificate/no_tls (0.00s) PASS -ok github.com/smallstep/certificates/ca 29.723s +ok github.com/smallstep/certificates/ca 35.636s ? github.com/smallstep/certificates/ca/client [no test files] === RUN TestClient -2025/10/26 21:31:19 http: TLS handshake error from 127.0.0.1:56282: read tcp 127.0.0.1:45441->127.0.0.1:56282: use of closed network connection +2026/11/30 06:00:26 http: TLS handshake error from 127.0.0.1:46780: remote error: tls: bad certificate --- PASS: TestClient (0.01s) === RUN TestClient_ResolveReference === RUN TestClient_ResolveReference/ok @@ -9296,7 +9333,7 @@ === RUN TestIdentity_TLSCertificate/fail_certificate === RUN TestIdentity_TLSCertificate/fail_not_after === RUN TestIdentity_TLSCertificate/fail_not_before ---- PASS: TestIdentity_TLSCertificate (0.01s) +--- PASS: TestIdentity_TLSCertificate (0.00s) --- PASS: TestIdentity_TLSCertificate/ok_mTLS (0.00s) --- PASS: TestIdentity_TLSCertificate/ok_tTLS (0.00s) --- PASS: TestIdentity_TLSCertificate/ok_disabled (0.00s) @@ -9319,13 +9356,13 @@ === RUN TestWriteDefaultIdentity/fail_certificate === RUN TestWriteDefaultIdentity/fail_key === RUN TestWriteDefaultIdentity/fail_write_identity ---- PASS: TestWriteDefaultIdentity (0.01s) +--- PASS: TestWriteDefaultIdentity (0.43s) --- PASS: TestWriteDefaultIdentity/ok (0.00s) --- PASS: TestWriteDefaultIdentity/fail_mkdir_config (0.00s) --- PASS: TestWriteDefaultIdentity/fail_mkdir_identity (0.00s) --- PASS: TestWriteDefaultIdentity/fail_certificate (0.00s) - --- PASS: TestWriteDefaultIdentity/fail_key (0.00s) - --- PASS: TestWriteDefaultIdentity/fail_write_identity (0.00s) + --- PASS: TestWriteDefaultIdentity/fail_key (0.11s) + --- PASS: TestWriteDefaultIdentity/fail_write_identity (0.20s) === RUN TestIdentity_GetClientCertificateFunc === RUN TestIdentity_GetClientCertificateFunc/ok_mTLS === RUN TestIdentity_GetClientCertificateFunc/ok_tTLS @@ -9354,16 +9391,16 @@ === RUN TestIdentity_Renew/fail_renew === RUN TestIdentity_Renew/fail_certificate === RUN TestIdentity_Renew/fail_write_identity ---- PASS: TestIdentity_Renew (0.00s) - --- PASS: TestIdentity_Renew/ok (0.00s) - --- PASS: TestIdentity_Renew/ok_old (0.00s) +--- PASS: TestIdentity_Renew (0.11s) + --- PASS: TestIdentity_Renew/ok (0.09s) + --- PASS: TestIdentity_Renew/ok_old (0.02s) --- PASS: TestIdentity_Renew/ok_disabled (0.00s) --- PASS: TestIdentity_Renew/fail_type (0.00s) --- PASS: TestIdentity_Renew/fail_renew (0.00s) --- PASS: TestIdentity_Renew/fail_certificate (0.00s) --- PASS: TestIdentity_Renew/fail_write_identity (0.00s) PASS -ok github.com/smallstep/certificates/ca/identity 0.067s +ok github.com/smallstep/certificates/ca/identity 0.582s === RUN TestNew === RUN TestNew/ok_default === RUN TestNew/ok_softcas @@ -9391,7 +9428,7 @@ --- PASS: TestNewCreator/fail_type (0.00s) --- PASS: TestNewCreator/fail_no_creator (0.00s) PASS -ok github.com/smallstep/certificates/cas 0.011s +ok github.com/smallstep/certificates/cas 0.010s === RUN TestCreateCertificateAuthorityExtension === RUN TestCreateCertificateAuthorityExtension/ok === RUN TestCreateCertificateAuthorityExtension/ok#01 @@ -9456,9 +9493,9 @@ --- PASS: TestOptions_Is/fail#01 (0.00s) === RUN TestRegister === RUN TestRegister/ok -&{{} {{{} 1} {0 0} {[] {} 0xc0002b3cc0} 0x4725a0 0x40cc40 7415213140279817717}} +&{{} {{{} 1} {0 0} {[] {} 0xc00028fae0} 0x4725a0 0x40cc40 17034097311191534130}} === RUN TestRegister/error -&{{} {{{} 1} {0 0} {[] {} 0xc0002b3cc0} 0x4725a0 0x40cc40 7415213140279817717}} +&{{} {{{} 1} {0 0} {[] {} 0xc00028fae0} 0x4725a0 0x40cc40 17034097311191534130}} --- PASS: TestRegister (0.00s) --- PASS: TestRegister/ok (0.00s) --- PASS: TestRegister/error (0.00s) @@ -9565,9 +9602,9 @@ --- PASS: TestSoftCAS_CreateCertificate/fail_CreateCertificate (0.00s) --- PASS: TestSoftCAS_CreateCertificate/fail_with_callback (0.00s) === RUN TestSoftCAS_CreateCertificate_pss ---- PASS: TestSoftCAS_CreateCertificate_pss (0.15s) +--- PASS: TestSoftCAS_CreateCertificate_pss (0.76s) === RUN TestSoftCAS_CreateCertificate_ec_rsa ---- PASS: TestSoftCAS_CreateCertificate_ec_rsa (0.78s) +--- PASS: TestSoftCAS_CreateCertificate_ec_rsa (0.09s) === RUN TestSoftCAS_RenewCertificate === RUN TestSoftCAS_RenewCertificate/ok === RUN TestSoftCAS_RenewCertificate/ok_signature_algorithm @@ -9659,7 +9696,7 @@ --- PASS: Test_isRSA/ECDSAWithSHA512 (0.00s) --- PASS: Test_isRSA/PureEd25519 (0.00s) PASS -ok github.com/smallstep/certificates/cas/softcas 0.951s +ok github.com/smallstep/certificates/cas/softcas 0.886s === RUN Test_newServerEndpointID === RUN Test_newServerEndpointID/ok === RUN Test_newServerEndpointID/ok_uuid @@ -9670,8 +9707,8 @@ === RUN Test_newStepIssuer/x5c === RUN Test_newStepIssuer/jwk === RUN Test_newStepIssuer/fail ---- PASS: Test_newStepIssuer (0.43s) - --- PASS: Test_newStepIssuer/x5c (0.00s) +--- PASS: Test_newStepIssuer (0.46s) + --- PASS: Test_newStepIssuer/x5c (0.09s) --- PASS: Test_newStepIssuer/jwk (0.00s) --- PASS: Test_newStepIssuer/fail (0.00s) === RUN Test_jwkIssuer_SignToken @@ -9679,7 +9716,7 @@ === RUN Test_jwkIssuer_SignToken/ok_ra === RUN Test_jwkIssuer_SignToken/ok_ra_endpoint_id === RUN Test_jwkIssuer_SignToken/fail ---- PASS: Test_jwkIssuer_SignToken (0.36s) +--- PASS: Test_jwkIssuer_SignToken (0.37s) --- PASS: Test_jwkIssuer_SignToken/ok (0.00s) --- PASS: Test_jwkIssuer_SignToken/ok_ra (0.00s) --- PASS: Test_jwkIssuer_SignToken/ok_ra_endpoint_id (0.00s) @@ -9687,7 +9724,7 @@ === RUN Test_jwkIssuer_RevokeToken === RUN Test_jwkIssuer_RevokeToken/ok === RUN Test_jwkIssuer_RevokeToken/ok#01 ---- PASS: Test_jwkIssuer_RevokeToken (0.36s) +--- PASS: Test_jwkIssuer_RevokeToken (0.41s) --- PASS: Test_jwkIssuer_RevokeToken/ok (0.00s) --- PASS: Test_jwkIssuer_RevokeToken/ok#01 (0.00s) === RUN Test_jwkIssuer_Lifetime @@ -9699,10 +9736,10 @@ === RUN Test_newJWKSignerFromEncryptedKey/fail_decrypt === RUN Test_newJWKSignerFromEncryptedKey/fail_unmarshal === RUN Test_newJWKSignerFromEncryptedKey/fail_not_signer ---- PASS: Test_newJWKSignerFromEncryptedKey (3.02s) - --- PASS: Test_newJWKSignerFromEncryptedKey/ok (0.37s) - --- PASS: Test_newJWKSignerFromEncryptedKey/fail_decrypt (0.37s) - --- PASS: Test_newJWKSignerFromEncryptedKey/fail_unmarshal (0.40s) +--- PASS: Test_newJWKSignerFromEncryptedKey (2.16s) + --- PASS: Test_newJWKSignerFromEncryptedKey/ok (0.36s) + --- PASS: Test_newJWKSignerFromEncryptedKey/fail_decrypt (0.36s) + --- PASS: Test_newJWKSignerFromEncryptedKey/fail_unmarshal (0.36s) --- PASS: Test_newJWKSignerFromEncryptedKey/fail_not_signer (0.36s) === RUN Test_init --- PASS: Test_init (0.00s) @@ -9729,10 +9766,10 @@ === RUN TestNew/fail_new_jwk_issuer === RUN TestNew/bad_issuer === RUN TestNew/bad_issuer_type ---- PASS: TestNew (1.20s) +--- PASS: TestNew (1.14s) --- PASS: TestNew/ok (0.00s) --- PASS: TestNew/ok_jwk (0.00s) - --- PASS: TestNew/ok_jwk_provisioners (0.44s) + --- PASS: TestNew/ok_jwk_provisioners (0.37s) --- PASS: TestNew/ok_ca_getter (0.00s) --- PASS: TestNew/fail_authority (0.00s) --- PASS: TestNew/fail_fingerprint (0.00s) @@ -9740,7 +9777,7 @@ --- PASS: TestNew/fail_provisioner (0.00s) --- PASS: TestNew/fail_provisioner_jwk (0.00s) --- PASS: TestNew/fail_provisioner_not_found (0.00s) - --- PASS: TestNew/fail_invalid_password (0.36s) + --- PASS: TestNew/fail_invalid_password (0.37s) --- PASS: TestNew/fail_no_key (0.00s) --- PASS: TestNew/fail_certificate (0.00s) --- PASS: TestNew/fail_key (0.00s) @@ -9770,10 +9807,10 @@ === RUN TestStepCAS_CreateCertificate/fail_sign_token === RUN TestStepCAS_CreateCertificate/fail_client_sign === RUN TestStepCAS_CreateCertificate/fail_password ---- PASS: TestStepCAS_CreateCertificate (1.51s) +--- PASS: TestStepCAS_CreateCertificate (1.60s) --- PASS: TestStepCAS_CreateCertificate/ok (0.00s) --- PASS: TestStepCAS_CreateCertificate/ok_with_different_CSR (0.00s) - --- PASS: TestStepCAS_CreateCertificate/ok_with_password (0.38s) + --- PASS: TestStepCAS_CreateCertificate/ok_with_password (0.40s) --- PASS: TestStepCAS_CreateCertificate/ok_jwk (0.00s) --- PASS: TestStepCAS_CreateCertificate/ok_jwk_with_password (0.00s) --- PASS: TestStepCAS_CreateCertificate/ok_with_provisioner (0.00s) @@ -9805,11 +9842,11 @@ === RUN TestStepCAS_RevokeCertificate/fail_revoke_token === RUN TestStepCAS_RevokeCertificate/fail_client_revoke === RUN TestStepCAS_RevokeCertificate/fail_password ---- PASS: TestStepCAS_RevokeCertificate (1.81s) +--- PASS: TestStepCAS_RevokeCertificate (2.06s) --- PASS: TestStepCAS_RevokeCertificate/ok_serial_number (0.00s) --- PASS: TestStepCAS_RevokeCertificate/ok_certificate (0.00s) --- PASS: TestStepCAS_RevokeCertificate/ok_both (0.00s) - --- PASS: TestStepCAS_RevokeCertificate/ok_with_password (0.36s) + --- PASS: TestStepCAS_RevokeCertificate/ok_with_password (0.37s) --- PASS: TestStepCAS_RevokeCertificate/ok_serial_number_jwk (0.00s) --- PASS: TestStepCAS_RevokeCertificate/ok_certificate_jwk (0.00s) --- PASS: TestStepCAS_RevokeCertificate/ok_both_jwk (0.00s) @@ -9817,7 +9854,7 @@ --- PASS: TestStepCAS_RevokeCertificate/fail_request (0.00s) --- PASS: TestStepCAS_RevokeCertificate/fail_revoke_token (0.00s) --- PASS: TestStepCAS_RevokeCertificate/fail_client_revoke (0.00s) - --- PASS: TestStepCAS_RevokeCertificate/fail_password (0.36s) + --- PASS: TestStepCAS_RevokeCertificate/fail_password (0.58s) === RUN TestStepCAS_GetCertificateAuthority === RUN TestStepCAS_GetCertificateAuthority/ok === RUN TestStepCAS_GetCertificateAuthority/ok_jwk @@ -9872,7 +9909,7 @@ === RUN Test_newJoseSigner/rsa === RUN Test_newJoseSigner/fail_p224 === RUN Test_newJoseSigner/fail_signer ---- PASS: Test_newJoseSigner (0.48s) +--- PASS: Test_newJoseSigner (0.39s) --- PASS: Test_newJoseSigner/p256 (0.00s) --- PASS: Test_newJoseSigner/p384 (0.00s) --- PASS: Test_newJoseSigner/p521 (0.00s) @@ -9881,7 +9918,7 @@ --- PASS: Test_newJoseSigner/fail_p224 (0.00s) --- PASS: Test_newJoseSigner/fail_signer (0.00s) PASS -ok github.com/smallstep/certificates/cas/stepcas 10.923s +ok github.com/smallstep/certificates/cas/stepcas 9.796s ? github.com/smallstep/certificates/commands [no test files] === RUN TestIsRevoked === RUN TestIsRevoked/false/nil_db @@ -9894,21 +9931,21 @@ --- PASS: TestIsRevoked/error/checking_bucket (0.00s) --- PASS: TestIsRevoked/true (0.00s) === RUN TestRevoke +=== RUN TestRevoke/ok === RUN TestRevoke/error/force_isRevoked === RUN TestRevoke/error/was_already_revoked -=== RUN TestRevoke/ok --- PASS: TestRevoke (0.00s) + --- PASS: TestRevoke/ok (0.00s) --- PASS: TestRevoke/error/force_isRevoked (0.00s) --- PASS: TestRevoke/error/was_already_revoked (0.00s) - --- PASS: TestRevoke/ok (0.00s) === RUN TestUseToken -=== RUN TestUseToken/fail/force-CmpAndSwap-error === RUN TestUseToken/fail/CmpAndSwap-already-exists === RUN TestUseToken/ok/cmpAndSwap-success +=== RUN TestUseToken/fail/force-CmpAndSwap-error --- PASS: TestUseToken (0.00s) - --- PASS: TestUseToken/fail/force-CmpAndSwap-error (0.00s) --- PASS: TestUseToken/fail/CmpAndSwap-already-exists (0.00s) --- PASS: TestUseToken/ok/cmpAndSwap-success (0.00s) + --- PASS: TestUseToken/fail/force-CmpAndSwap-error (0.00s) === RUN TestDB_StoreCertificateChain === RUN TestDB_StoreCertificateChain/ok === RUN TestDB_StoreCertificateChain/ok_ra_provisioner @@ -9942,7 +9979,7 @@ === RUN TestSimpleDB --- PASS: TestSimpleDB (0.00s) PASS -ok github.com/smallstep/certificates/db 0.026s +ok github.com/smallstep/certificates/db 0.030s === RUN TestError_MarshalJSON === RUN TestError_MarshalJSON/ok === RUN TestError_MarshalJSON/ok_no_error @@ -9980,7 +10017,7 @@ === RUN TestError_Unwrap_As/fail_New_v-wrap === RUN TestError_Unwrap_As/fail_Errorf === RUN TestError_Unwrap_As/fail_Errorf_v-wrap ---- PASS: TestError_Unwrap_As (0.00s) +--- PASS: TestError_Unwrap_As (0.01s) --- PASS: TestError_Unwrap_As/ok_NewError (0.00s) --- PASS: TestError_Unwrap_As/ok_NewErr (0.00s) --- PASS: TestError_Unwrap_As/ok_NewErr_wit_message (0.00s) @@ -9990,7 +10027,7 @@ --- PASS: TestError_Unwrap_As/fail_Errorf (0.00s) --- PASS: TestError_Unwrap_As/fail_Errorf_v-wrap (0.00s) PASS -ok github.com/smallstep/certificates/errs 0.018s +ok github.com/smallstep/certificates/errs 0.019s === RUN TestUintConvertsValues --- PASS: TestUintConvertsValues (0.00s) === RUN TestUintPanicsOnNegativeValue @@ -10022,7 +10059,7 @@ === RUN TestUint16PanicsOnLargeValue --- PASS: TestUint16PanicsOnLargeValue (0.00s) PASS -ok github.com/smallstep/certificates/internal/cast 0.012s +ok github.com/smallstep/certificates/internal/cast 0.014s ? github.com/smallstep/certificates/internal/httptransport [no test files] ? github.com/smallstep/certificates/internal/metrix [no test files] ? github.com/smallstep/certificates/internal/userid [no test files] @@ -10077,30 +10114,30 @@ --- PASS: Test_Middleware/empty-header (0.00s) --- PASS: Test_Middleware/fallback-header-name (0.00s) PASS -ok github.com/smallstep/certificates/middleware/requestid 0.008s +ok github.com/smallstep/certificates/middleware/requestid 0.013s ? github.com/smallstep/certificates/monitoring [no test files] === RUN TestPKI_WriteHelmTemplate -=== RUN TestPKI_WriteHelmTemplate/ok/simple === RUN TestPKI_WriteHelmTemplate/ok/with-provisioner === RUN TestPKI_WriteHelmTemplate/ok/with-acme === RUN TestPKI_WriteHelmTemplate/ok/with-acme-and-duplicate-provisioner-name === RUN TestPKI_WriteHelmTemplate/ok/with-admin === RUN TestPKI_WriteHelmTemplate/ok/with-ssh -=== RUN TestPKI_WriteHelmTemplate/ok/with-ssh-and-acme === RUN TestPKI_WriteHelmTemplate/fail/authority.ProvisionerToCertificates +=== RUN TestPKI_WriteHelmTemplate/ok/simple === RUN TestPKI_WriteHelmTemplate/ok/with-ssh-and-duplicate-provisioner-name ---- PASS: TestPKI_WriteHelmTemplate (0.08s) - --- PASS: TestPKI_WriteHelmTemplate/ok/simple (0.01s) +=== RUN TestPKI_WriteHelmTemplate/ok/with-ssh-and-acme +--- PASS: TestPKI_WriteHelmTemplate (0.05s) --- PASS: TestPKI_WriteHelmTemplate/ok/with-provisioner (0.01s) --- PASS: TestPKI_WriteHelmTemplate/ok/with-acme (0.01s) --- PASS: TestPKI_WriteHelmTemplate/ok/with-acme-and-duplicate-provisioner-name (0.01s) --- PASS: TestPKI_WriteHelmTemplate/ok/with-admin (0.01s) --- PASS: TestPKI_WriteHelmTemplate/ok/with-ssh (0.01s) - --- PASS: TestPKI_WriteHelmTemplate/ok/with-ssh-and-acme (0.01s) --- PASS: TestPKI_WriteHelmTemplate/fail/authority.ProvisionerToCertificates (0.00s) + --- PASS: TestPKI_WriteHelmTemplate/ok/simple (0.01s) --- PASS: TestPKI_WriteHelmTemplate/ok/with-ssh-and-duplicate-provisioner-name (0.01s) + --- PASS: TestPKI_WriteHelmTemplate/ok/with-ssh-and-acme (0.01s) PASS -ok github.com/smallstep/certificates/pki 0.117s +ok github.com/smallstep/certificates/pki 0.077s === RUN TestNamePolicyEngine_matchDomainConstraint === RUN TestNamePolicyEngine_matchDomainConstraint/fail/wildcard === RUN TestNamePolicyEngine_matchDomainConstraint/fail/wildcard-literal @@ -10483,7 +10520,7 @@ === RUN TestNamePolicyEngine_SSH_ArePrincipalsAllowed/ok/combined-user === RUN TestNamePolicyEngine_SSH_ArePrincipalsAllowed/ok/combined-user-with-excluded-user-principal === RUN TestNamePolicyEngine_SSH_ArePrincipalsAllowed/ok/combined-host ---- PASS: TestNamePolicyEngine_SSH_ArePrincipalsAllowed (0.01s) +--- PASS: TestNamePolicyEngine_SSH_ArePrincipalsAllowed (0.00s) --- PASS: TestNamePolicyEngine_SSH_ArePrincipalsAllowed/fail/host-with-permitted-dns-domain (0.00s) --- PASS: TestNamePolicyEngine_SSH_ArePrincipalsAllowed/fail/host-with-excluded-dns-domain (0.00s) --- PASS: TestNamePolicyEngine_SSH_ArePrincipalsAllowed/fail/host-with-permitted-cidr (0.00s) @@ -10514,27 +10551,27 @@ --- PASS: TestNamePolicyEngine_SSH_ArePrincipalsAllowed/ok/combined-user-with-excluded-user-principal (0.00s) --- PASS: TestNamePolicyEngine_SSH_ArePrincipalsAllowed/ok/combined-host (0.00s) === RUN Test_splitSSHPrincipals -=== RUN Test_splitSSHPrincipals/ok/host-email -=== RUN Test_splitSSHPrincipals/ok/user-maillike -=== RUN Test_splitSSHPrincipals/fail/user-uri === RUN Test_splitSSHPrincipals/fail/host-uri === RUN Test_splitSSHPrincipals/ok/host-dns -=== RUN Test_splitSSHPrincipals/ok/user-localhost -=== RUN Test_splitSSHPrincipals/ok/user-username-with-period +=== RUN Test_splitSSHPrincipals/ok/host-ip +=== RUN Test_splitSSHPrincipals/ok/user-maillike === RUN Test_splitSSHPrincipals/fail/unexpected-cert-type === RUN Test_splitSSHPrincipals/fail/user-ip -=== RUN Test_splitSSHPrincipals/ok/host-ip +=== RUN Test_splitSSHPrincipals/fail/user-uri +=== RUN Test_splitSSHPrincipals/ok/host-email +=== RUN Test_splitSSHPrincipals/ok/user-localhost +=== RUN Test_splitSSHPrincipals/ok/user-username-with-period --- PASS: Test_splitSSHPrincipals (0.00s) - --- PASS: Test_splitSSHPrincipals/ok/host-email (0.00s) - --- PASS: Test_splitSSHPrincipals/ok/user-maillike (0.00s) - --- PASS: Test_splitSSHPrincipals/fail/user-uri (0.00s) --- PASS: Test_splitSSHPrincipals/fail/host-uri (0.00s) --- PASS: Test_splitSSHPrincipals/ok/host-dns (0.00s) - --- PASS: Test_splitSSHPrincipals/ok/user-localhost (0.00s) - --- PASS: Test_splitSSHPrincipals/ok/user-username-with-period (0.00s) + --- PASS: Test_splitSSHPrincipals/ok/host-ip (0.00s) + --- PASS: Test_splitSSHPrincipals/ok/user-maillike (0.00s) --- PASS: Test_splitSSHPrincipals/fail/unexpected-cert-type (0.00s) --- PASS: Test_splitSSHPrincipals/fail/user-ip (0.00s) - --- PASS: Test_splitSSHPrincipals/ok/host-ip (0.00s) + --- PASS: Test_splitSSHPrincipals/fail/user-uri (0.00s) + --- PASS: Test_splitSSHPrincipals/ok/host-email (0.00s) + --- PASS: Test_splitSSHPrincipals/ok/user-localhost (0.00s) + --- PASS: Test_splitSSHPrincipals/ok/user-username-with-period (0.00s) === RUN Test_removeDuplicates === RUN Test_removeDuplicates/empty-slice === RUN Test_removeDuplicates/single-item @@ -10620,69 +10657,69 @@ --- PASS: Test_normalizeAndValidateEmailConstraint/ok/wildcard (0.00s) --- PASS: Test_normalizeAndValidateEmailConstraint/ok/specific-mail (0.00s) === RUN TestNew -=== RUN TestNew/ok/literal-wildcards +=== RUN TestNew/fail/with-excluded-dns-domains +=== RUN TestNew/fail/with-permitted-emails +=== RUN TestNew/ok/default === RUN TestNew/ok/with-excluded-dns-domains -=== RUN TestNew/ok/with-permitted-ipsOrCIDRs-cidr +=== RUN TestNew/ok/with-excluded-ipsOrCIDRs-cidr +=== RUN TestNew/fail/with-permitted-ipsOrCIDRs-cidr +=== RUN TestNew/ok/literal-wildcards +=== RUN TestNew/ok/with-permitted-cidrs === RUN TestNew/fail/with-excluded-ipsOrCIDRs-cidr -=== RUN TestNew/fail/with-excluded-ipsOrCIDRs-ip -=== RUN TestNew/fail/with-excluded-emails -=== RUN TestNew/ok/default -=== RUN TestNew/ok/with-excluded-uris -=== RUN TestNew/ok/with-excluded-principals -=== RUN TestNew/fail/with-excluded-cidrs +=== RUN TestNew/ok/subject-verification +=== RUN TestNew/ok/with-permitted-uris +=== RUN TestNew/fail/with-excluded-common-name +=== RUN TestNew/fail/with-permitted-uris === RUN TestNew/ok/with-excluded-ip-ranges +=== RUN TestNew/fail/with-permitted-dns-domains === RUN TestNew/fail/with-permitted-cidrs -=== RUN TestNew/ok/with-permitted-emails -=== RUN TestNew/fail/with-permitted-common-name -=== RUN TestNew/fail/with-excluded-common-name === RUN TestNew/fail/with-excluded-uris +=== RUN TestNew/ok/with-permitted-emails +=== RUN TestNew/ok/with-excluded-principals +=== RUN TestNew/fail/with-permitted-ipsOrCIDRs-ip +=== RUN TestNew/fail/with-excluded-ipsOrCIDRs-ip === RUN TestNew/ok/with-permitted-ip-ranges -=== RUN TestNew/ok/with-excluded-cidrs +=== RUN TestNew/ok/with-permitted-ipsOrCIDRs-cidr === RUN TestNew/ok/with-excluded-emails -=== RUN TestNew/ok/with-permitted-uris -=== RUN TestNew/ok/subject-verification -=== RUN TestNew/ok/with-permitted-dns-wildcard-domains === RUN TestNew/ok/with-permitted-principals -=== RUN TestNew/fail/with-excluded-dns-domains -=== RUN TestNew/fail/with-permitted-ipsOrCIDRs-cidr -=== RUN TestNew/ok/with-permitted-cidrs -=== RUN TestNew/ok/with-excluded-ipsOrCIDRs-cidr -=== RUN TestNew/fail/with-permitted-ipsOrCIDRs-ip -=== RUN TestNew/fail/with-permitted-dns-domains -=== RUN TestNew/fail/with-permitted-emails -=== RUN TestNew/fail/with-permitted-uris ---- PASS: TestNew (0.01s) - --- PASS: TestNew/ok/literal-wildcards (0.00s) +=== RUN TestNew/fail/with-permitted-common-name +=== RUN TestNew/fail/with-excluded-cidrs +=== RUN TestNew/fail/with-excluded-emails +=== RUN TestNew/ok/with-permitted-dns-wildcard-domains +=== RUN TestNew/ok/with-excluded-uris +=== RUN TestNew/ok/with-excluded-cidrs +--- PASS: TestNew (0.00s) + --- PASS: TestNew/fail/with-excluded-dns-domains (0.00s) + --- PASS: TestNew/fail/with-permitted-emails (0.00s) + --- PASS: TestNew/ok/default (0.00s) --- PASS: TestNew/ok/with-excluded-dns-domains (0.00s) - --- PASS: TestNew/ok/with-permitted-ipsOrCIDRs-cidr (0.00s) + --- PASS: TestNew/ok/with-excluded-ipsOrCIDRs-cidr (0.00s) + --- PASS: TestNew/fail/with-permitted-ipsOrCIDRs-cidr (0.00s) + --- PASS: TestNew/ok/literal-wildcards (0.00s) + --- PASS: TestNew/ok/with-permitted-cidrs (0.00s) --- PASS: TestNew/fail/with-excluded-ipsOrCIDRs-cidr (0.00s) - --- PASS: TestNew/fail/with-excluded-ipsOrCIDRs-ip (0.00s) - --- PASS: TestNew/fail/with-excluded-emails (0.00s) - --- PASS: TestNew/ok/default (0.00s) - --- PASS: TestNew/ok/with-excluded-uris (0.00s) - --- PASS: TestNew/ok/with-excluded-principals (0.00s) - --- PASS: TestNew/fail/with-excluded-cidrs (0.00s) + --- PASS: TestNew/ok/subject-verification (0.00s) + --- PASS: TestNew/ok/with-permitted-uris (0.00s) + --- PASS: TestNew/fail/with-excluded-common-name (0.00s) + --- PASS: TestNew/fail/with-permitted-uris (0.00s) --- PASS: TestNew/ok/with-excluded-ip-ranges (0.00s) + --- PASS: TestNew/fail/with-permitted-dns-domains (0.00s) --- PASS: TestNew/fail/with-permitted-cidrs (0.00s) - --- PASS: TestNew/ok/with-permitted-emails (0.00s) - --- PASS: TestNew/fail/with-permitted-common-name (0.00s) - --- PASS: TestNew/fail/with-excluded-common-name (0.00s) --- PASS: TestNew/fail/with-excluded-uris (0.00s) + --- PASS: TestNew/ok/with-permitted-emails (0.00s) + --- PASS: TestNew/ok/with-excluded-principals (0.00s) + --- PASS: TestNew/fail/with-permitted-ipsOrCIDRs-ip (0.00s) + --- PASS: TestNew/fail/with-excluded-ipsOrCIDRs-ip (0.00s) --- PASS: TestNew/ok/with-permitted-ip-ranges (0.00s) - --- PASS: TestNew/ok/with-excluded-cidrs (0.00s) + --- PASS: TestNew/ok/with-permitted-ipsOrCIDRs-cidr (0.00s) --- PASS: TestNew/ok/with-excluded-emails (0.00s) - --- PASS: TestNew/ok/with-permitted-uris (0.00s) - --- PASS: TestNew/ok/subject-verification (0.00s) - --- PASS: TestNew/ok/with-permitted-dns-wildcard-domains (0.00s) --- PASS: TestNew/ok/with-permitted-principals (0.00s) - --- PASS: TestNew/fail/with-excluded-dns-domains (0.00s) - --- PASS: TestNew/fail/with-permitted-ipsOrCIDRs-cidr (0.00s) - --- PASS: TestNew/ok/with-permitted-cidrs (0.00s) - --- PASS: TestNew/ok/with-excluded-ipsOrCIDRs-cidr (0.00s) - --- PASS: TestNew/fail/with-permitted-ipsOrCIDRs-ip (0.00s) - --- PASS: TestNew/fail/with-permitted-dns-domains (0.00s) - --- PASS: TestNew/fail/with-permitted-emails (0.00s) - --- PASS: TestNew/fail/with-permitted-uris (0.00s) + --- PASS: TestNew/fail/with-permitted-common-name (0.00s) + --- PASS: TestNew/fail/with-excluded-cidrs (0.00s) + --- PASS: TestNew/fail/with-excluded-emails (0.00s) + --- PASS: TestNew/ok/with-permitted-dns-wildcard-domains (0.00s) + --- PASS: TestNew/ok/with-excluded-uris (0.00s) + --- PASS: TestNew/ok/with-excluded-cidrs (0.00s) === RUN Test_normalizeAndValidateURIDomainConstraint === RUN Test_normalizeAndValidateURIDomainConstraint/fail/empty-constraint === RUN Test_normalizeAndValidateURIDomainConstraint/fail/scheme-https @@ -10718,15 +10755,15 @@ --- PASS: Test_normalizeAndValidateURIDomainConstraint/ok/idna-internationalized-domain-name-lookup (0.00s) --- PASS: Test_normalizeAndValidateURIDomainConstraint/ok/idna-internationalized-domain-name-lookup-deviation (0.00s) PASS -ok github.com/smallstep/certificates/policy 0.063s +ok github.com/smallstep/certificates/policy 0.049s === RUN TestAuthority_encrypt === PAUSE TestAuthority_encrypt === RUN TestAuthority_SignCSR === RUN TestAuthority_SignCSR/ok === RUN TestAuthority_SignCSR/ok_no_sign_options ---- PASS: TestAuthority_SignCSR (1.88s) +--- PASS: TestAuthority_SignCSR (0.93s) --- PASS: TestAuthority_SignCSR/ok (0.01s) - --- PASS: TestAuthority_SignCSR/ok_no_sign_options (0.01s) + --- PASS: TestAuthority_SignCSR/ok_no_sign_options (0.00s) === CONT TestAuthority_encrypt === RUN TestAuthority_encrypt/alg-0 === PAUSE TestAuthority_encrypt/alg-0 @@ -10742,19 +10779,19 @@ === PAUSE TestAuthority_encrypt/alg-unknown === CONT TestAuthority_encrypt/alg-0 === CONT TestAuthority_encrypt/alg-3 -=== CONT TestAuthority_encrypt/alg-unknown === CONT TestAuthority_encrypt/alg-2 -=== CONT TestAuthority_encrypt/alg-4 +=== CONT TestAuthority_encrypt/alg-unknown === CONT TestAuthority_encrypt/alg-1 ---- PASS: TestAuthority_encrypt (0.37s) +=== CONT TestAuthority_encrypt/alg-4 +--- PASS: TestAuthority_encrypt (0.29s) --- PASS: TestAuthority_encrypt/alg-0 (0.00s) --- PASS: TestAuthority_encrypt/alg-3 (0.00s) - --- PASS: TestAuthority_encrypt/alg-unknown (0.00s) --- PASS: TestAuthority_encrypt/alg-2 (0.00s) - --- PASS: TestAuthority_encrypt/alg-4 (0.00s) + --- PASS: TestAuthority_encrypt/alg-unknown (0.00s) --- PASS: TestAuthority_encrypt/alg-1 (0.00s) + --- PASS: TestAuthority_encrypt/alg-4 (0.00s) PASS -ok github.com/smallstep/certificates/scep 2.271s +ok github.com/smallstep/certificates/scep 1.243s === RUN Test_decodeRequest === RUN Test_decodeRequest/fail/invalid-query === RUN Test_decodeRequest/fail/empty-operation @@ -10770,7 +10807,7 @@ === RUN Test_decodeRequest/ok/get-PKIOperation-not-escaped === RUN Test_decodeRequest/ok/get-PKIOperation-weird-macos-case === RUN Test_decodeRequest/ok/post-PKIOperation ---- PASS: Test_decodeRequest (0.01s) +--- PASS: Test_decodeRequest (0.00s) --- PASS: Test_decodeRequest/fail/invalid-query (0.00s) --- PASS: Test_decodeRequest/fail/empty-operation (0.00s) --- PASS: Test_decodeRequest/fail/unsupported-method (0.00s) @@ -10786,7 +10823,7 @@ --- PASS: Test_decodeRequest/ok/get-PKIOperation-weird-macos-case (0.00s) --- PASS: Test_decodeRequest/ok/post-PKIOperation (0.00s) PASS -ok github.com/smallstep/certificates/scep/api 0.031s +ok github.com/smallstep/certificates/scep/api 0.021s ? github.com/smallstep/certificates/server [no test files] === RUN TestTemplates_Validate === RUN TestTemplates_Validate/ok @@ -10870,9 +10907,9 @@ === RUN TestTemplate_Render/file#01 === RUN TestTemplate_Render/directory === RUN TestTemplate_Render/error ---- PASS: TestTemplate_Render (0.01s) +--- PASS: TestTemplate_Render (0.00s) --- PASS: TestTemplate_Render/snippet (0.00s) - --- PASS: TestTemplate_Render/file (0.01s) + --- PASS: TestTemplate_Render/file (0.00s) --- PASS: TestTemplate_Render/file#01 (0.00s) --- PASS: TestTemplate_Render/directory (0.00s) --- PASS: TestTemplate_Render/error (0.00s) @@ -10897,7 +10934,7 @@ === RUN TestOutput_Write/snippetErr === RUN TestOutput_Write/fileErr === RUN TestOutput_Write/directoryErr ---- PASS: TestOutput_Write (0.00s) +--- PASS: TestOutput_Write (0.15s) --- PASS: TestOutput_Write/snippet (0.00s) --- PASS: TestOutput_Write/file (0.00s) --- PASS: TestOutput_Write/snippetInDir (0.00s) @@ -10925,317 +10962,300 @@ --- PASS: TestDefaultTemplates (0.00s) --- PASS: TestDefaultTemplates/ok (0.00s) PASS -ok github.com/smallstep/certificates/templates 0.043s +ok github.com/smallstep/certificates/templates 0.190s === RUN Test_reflectRequestID -2025/10/26 21:31:19 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 21:31:19 Starting Smallstep CLI/0000000-dev (linux/amd64) -2025/10/26 21:31:19 Documentation: https://u.step.sm/docs/ca -2025/10/26 21:31:19 Community Discord: https://u.step.sm/discord -2025/10/26 21:31:19 Config file: loaded from token -2025/10/26 21:31:19 The primary server URL is https://127.0.0.1:41851 -2025/10/26 21:31:19 Root certificates are available at https://127.0.0.1:41851/roots.pem -2025/10/26 21:31:19 Additional configured hostnames: [::1], localhost -2025/10/26 21:31:19 X.509 Root Fingerprint: 3279d3d9b95c3d112afcc55efabd501a3b1144b0c4d691d2be48371f338456a2 -2025/10/26 21:31:19 Serving HTTPS on [::]:41851 ... -2025/10/26 21:31:19 /usr/lib/go-1.24/src/net/http/server.go:3638: http: TLS handshake error from 127.0.0.1:59064: EOF -time="2025-10-26T21:31:19-12:00" level=info duration="86.996µs" duration-ns=86996 fields.time="2025-10-26T21:31:19-12:00" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=843dff87-5e42-4883-916d-b45fa0a574d1 size=16 status=200 user-agent=step-http-client/1.0 user-id= -time="2025-10-26T21:31:19-12:00" level=warning duration="158.638µs" duration-ns=158638 error="/root/invalid was not found: certificate with fingerprint invalid was not found" fields.time="2025-10-26T21:31:19-12:00" method=GET name=ca path=/root/invalid protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=850b63fa-5059-4322-807d-cd2553b2c98a size=127 status=404 user-agent=step-http-client/1.0 user-id= -time="2025-10-26T21:31:19-12:00" level=warning duration="54.057µs" duration-ns=54057 error="/root/invalid was not found: certificate with fingerprint invalid was not found" fields.time="2025-10-26T21:31:19-12:00" method=GET name=ca path=/root/invalid protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=reqID size=127 status=404 user-agent=step-http-client/1.0 user-id= -time="2025-10-26T21:31:20-12:00" level=info certificate="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" duration=4.86764ms duration-ns=4867640 fields.time="2025-10-26T21:31:20-12:00" issuer="Step E2E Intermediate CA" method=POST name=ca ott=eyJhbGciOiJFUzI1NiIsImtpZCI6IlJ1eFlFb0pJSnNtWDZaMFNBbkRFM3hPOUpWaU5nSmNySzZiN0hWTE40ZEEiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovLzEyNy4wLjAuMS8xLjAvc2lnbiIsImV4cCI6MTc2MTU1NzU0MCwiaXNzIjoiandrIiwianRpIjoiV3EzLVM3NztcIlZbNy9sWGRLRVx1MDAyNnFQbjonNix6LENoV25HS3UuXHUwMDNlfn5oJ0VBcy4rQE1uaDRtdzp6KVpbMk98fEhdIiwibmJmIjoxNzYxNTU3NDgwLCJzYW5zIjpbInRlc3QiXSwic3ViIjoidGVzdCJ9.Tf7Ii2GZrSnw5hjiDszhSZwNfkDFaKoT52Eq3EvrlFmvSWMbNJT5j4P98cMoW6vz0ShisUDIUWG2hCqJyoQYhg path=/sign protocol=HTTP/2.0 provisioner="jwk (RuxYEoJIJsmX6Z0SAnDE3xO9JViNgJcrK6b7HVLN4dA)" public-key="ECDSA P-256" referer= remote-address=127.0.0.1 request-id=signRequestID sans="map[dns:[test]]" serial=193972986222661641544658490533468686549 size=3025 status=201 subject=test user-agent=step-http-client/1.0 user-id= valid-from="2025-10-27T08:31:20Z" valid-to="2025-10-27T10:31:20Z" ---- PASS: Test_reflectRequestID (1.88s) +2026/11/30 06:00:29 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:29 Starting Smallstep CLI/0000000-dev (linux/amd64) +2026/11/30 06:00:29 Documentation: https://u.step.sm/docs/ca +2026/11/30 06:00:29 Community Discord: https://u.step.sm/discord +2026/11/30 06:00:29 Config file: loaded from token +2026/11/30 06:00:29 The primary server URL is https://127.0.0.1:40775 +2026/11/30 06:00:29 Root certificates are available at https://127.0.0.1:40775/roots.pem +2026/11/30 06:00:29 Additional configured hostnames: [::1], localhost +2026/11/30 06:00:29 X.509 Root Fingerprint: ecdd3508038ab20e0730b0dfe2f546726c535b864cc01ef23064cc20287632c6 +2026/11/30 06:00:29 Serving HTTPS on [::]:40775 ... +2026/11/30 06:00:29 /usr/lib/go-1.24/src/net/http/server.go:3638: http: TLS handshake error from 127.0.0.1:33130: EOF +time="2026-11-30T06:00:29+14:00" level=info duration="98.182µs" duration-ns=98182 fields.time="2026-11-30T06:00:29+14:00" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=87439afc-99db-45d3-a227-fe7d940ee890 size=16 status=200 user-agent=step-http-client/1.0 user-id= +time="2026-11-30T06:00:29+14:00" level=warning duration="138.774µs" duration-ns=138774 error="/root/invalid was not found: certificate with fingerprint invalid was not found" fields.time="2026-11-30T06:00:29+14:00" method=GET name=ca path=/root/invalid protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=c905438f-561a-427e-8932-2d50c5d308cd size=127 status=404 user-agent=step-http-client/1.0 user-id= +time="2026-11-30T06:00:29+14:00" level=warning duration="71.96µs" duration-ns=71960 error="/root/invalid was not found: certificate with fingerprint invalid was not found" fields.time="2026-11-30T06:00:29+14:00" method=GET name=ca path=/root/invalid protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=reqID size=127 status=404 user-agent=step-http-client/1.0 user-id= +time="2026-11-30T06:00:29+14:00" level=info certificate="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" duration=6.56381ms duration-ns=6563810 fields.time="2026-11-30T06:00:29+14:00" issuer="Step E2E Intermediate CA" method=POST name=ca ott=eyJhbGciOiJFUzI1NiIsImtpZCI6IjBlY1JTS3U3bUlZTjZMUG5hTkk0d0x3WFdzWEFJemlCellUZndySlR5eDQiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovLzEyNy4wLjAuMS8xLjAvc2lnbiIsImV4cCI6MTc5NTk2ODA4OSwiaXNzIjoiandrIiwianRpIjoiczNLeUhRYWVoIS4jU3g6YXtjQGxnQ1RZJF9cXFx1MDAyNjZ5LnNrSSEoXHUwMDNlUCFcdTAwM2VhMXVrZ3BIaTYkUWhHSkA0KkcrTlkzWkEiLCJuYmYiOjE3OTU5NjgwMjksInNhbnMiOlsidGVzdCJdLCJzdWIiOiJ0ZXN0In0.tG6YM7EPaXjCQBOUBiSWXDUNIgMzGVWNxto-j3S0AiUtSe-CsIc_67XAjI2B0IVIDg9d786ZtXhza_foNhwX_g path=/sign protocol=HTTP/2.0 provisioner="jwk (0ecRSKu7mIYN6LPnaNI4wLwXWsXAIziBzYTfwrJTyx4)" public-key="ECDSA P-256" referer= remote-address=127.0.0.1 request-id=signRequestID sans="map[dns:[test]]" serial=28124347181076866664479138340267552995 size=3017 status=201 subject=test user-agent=step-http-client/1.0 user-id= valid-from="2026-11-29T15:00:29Z" valid-to="2026-11-29T17:00:29Z" +--- PASS: Test_reflectRequestID (1.91s) PASS -ok github.com/smallstep/certificates/test/integration 1.908s +ok github.com/smallstep/certificates/test/integration 1.926s === RUN TestIssuesCertificateUsingSCEPWithDecrypterAndUpstreamCAS -2025/10/26 21:31:19 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 21:31:19 Starting Smallstep CLI/0000000-dev (linux/amd64) -2025/10/26 21:31:19 Documentation: https://u.step.sm/docs/ca -2025/10/26 21:31:19 Community Discord: https://u.step.sm/discord -2025/10/26 21:31:19 Config file: loaded from token -2025/10/26 21:31:19 The primary server URL is https://127.0.0.1:46519 -2025/10/26 21:31:19 Root certificates are available at https://127.0.0.1:46519/roots.pem -2025/10/26 21:31:19 Additional configured hostnames: [::1], localhost -2025/10/26 21:31:19 X.509 Root Fingerprint: 7f9ef8982fabf289552e7fb4f3b583c638e3753f94c0b04598d92744ad31f457 -2025/10/26 21:31:19 Serving HTTPS on [::]:46519 ... -time="2025-10-26T21:31:20-12:00" level=info duration="135.109µs" duration-ns=135109 fields.time="2025-10-26T21:31:20-12:00" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=ce81281d-0cef-4614-8a1f-1cdd2d17443a size=16 status=200 user-agent=step-http-client/1.0 user-id= -time="2025-10-26T21:31:20-12:00" level=info duration="170.727µs" duration-ns=170727 fields.time="2025-10-26T21:31:20-12:00" method=GET name=ca path="/scep/scep/scep/scep?operation=GetCACert&message=test" protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=05c73700-b30b-4528-b8af-69a5ae89dae2 size=1160 status=200 user-agent=Go-http-client/2.0 user-id= - common_test.go:204: 0 *H u0q10  *H W0k00 - *H=0D1B0@U 9Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA0 251027083119Z 251027103119Z010U decrypter0"0  *H 0 - QTq1٠e,whB*Bc*սPv By^%yyGKTOMyiWvrP1է *64BR#/U{=] J5+LFf0d0U0U00U:9Sఞr&k*00U#0:9Sఞr&k*00 - *H=H0E!dM:k - 5 Ot( Zk{o_?8|a83uIx.n;1 - common_test.go:286: 0 J *H  ;0 71 0+0J *H ;703 *H $0 1c0_0I0D1B0@U 9Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA0  *H ]HNkȋ}@孼)"tdk YFa}|.D(lUIu{fPrUtζuHSA/U>8S|j`q =AoSěi'W3f$M$ smmzo:rA_b_}-.Yrt26rĪIJT - Lw. - i ~AG k͡j[i"Fn4N} +KQt]I(E7#şғ&3']g~jKc8ÇɦbQ1sw[}%JX eX5&}i>﷟@oSF(}FP5\O@u<}Dž TKkE˯q;R4@+_000  *H  010Utest.localhost0 251027083121Z 251027103121Z010Utest.localhost0"0  *H 0 - ' ۟UYٖeaȠL\GUy |cT61ӺerGPoL1ugϨD~O82Ҵå7F:b?c^P pJaG;/1yceC,uGUNq(q~D3⽴/oyIB.ϡbFXqK&ڂ^ ʿlyd_3lр I@Z^6Vkb00U0test.localhost0  *H  l=yq_N}o%9?n*h`}w"{ʳB0w{e,=WܒXG:^h͵q =[7ޢpH W2iƛXU HB^l"a!>,ü4X BibG4%U %t!UOfIKj)uQWCW==|!9f[BUNF7jWL;~\(.100010Utest.localhost0+0 - `HE 1190 *H  1  *H 0 *H  1 251027093121Z0  - `HE 1V#R - )ep&` - 0# *H  1%YD!|0,2r0, - `HE 1kwQ8vIaHWby5S2Ff98LWYuaE+Z8=0  *H vW K(" P*`lR R|)ah}Ih z/ZbSOe:ļ)"i - һ&CE+5eTFn7ޠ5HڮwS} =ލ,^ r4 ):XfgPH<, g1JEUQ禎;wBJdҰ$++83EU<1j:5LKJndBʹ%e=`OYU}hq!UT y9(TF[L~XL{1X_0 *H 0 `He*YգΞ=[44`9.cBx+<)dRIdG _ѥcg&H.EAs+u\UY#2+R[!ZW嵿FpW#ءH^=|vwZ2nuvRsg9tXcF1]r9EQ']=֩E6.W$8(18Fā-ܵ'$Je VL//a!0>7^=HK78[s]@ʨBjEWpyG+.s秓ǿ=HO ffnH/,ktoFrIZ/+J.i s8_&jWhʧ\0+g,yBvfՐ - 5@uaRt=SP޿A7;؜Ӿ2M ,UB}m]Dgfgl_q d~0oQ{PE-F&uK@ϦD - K+/2jq?5IdGWտEi9xpEдĸo_J;_ - ( ƨ@ "_-ٝd-ܷO; R90E<,UR"pafωE_H֟~>LoǁvH}GN-Kӕ - Zcѱ4d)ǏC,+NRd/~=0cgAb--:qed)00[˿S = n_&0 - *H=0D1B0@U 9Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA0 251027093121Z 251028093121Z010Utest.localhost0"0  *H 0 - ' ۟UYٖeaȠL\GUy |cT61ӺerGPoL1ugϨD~O82Ҵå7F:b?c^P pJaG;/1yceC,uGUNq(q~D3⽴/oyIB.ϡbFXqK&ڂ^ ʿlyd_3lр I@Z^6Vkb00U0U%0++0UHNu qŭgs0U#0:9Sఞr&k*00U0test.localhost0 - *H=I0F!߀bB|a/UF[ҁk^I6Svi7!؅T]䥟x1+RlZ;0k00 - *H=0D1B0@U 9Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA0 251027083119Z 251027103119Z010U decrypter0"0  *H 0 - QTq1٠e,whB*Bc*սPv By^%yyGKTOMyiWvr2i*j6#d%yxrn-z0[Em<R.3@N==iN,Sj޿A͂1#4E" &HX0V0U4P!&1yre%+a0U#0`s()E6UV0U 0 decrypter0 + *H=G0D \97;7&Il^D3f~ WަSTO`TRW@PŐ==00\qrm湋 0 + *H=0<1:08U 1Step E2E | SCEP Decrypter w/ Upstream CAS Root CA0 261129160028Z 261130160028Z0D1B0@U 9Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA0Y0*H=*H=BxDQ"KX c#>f,53522)eԎWtG Ț]ArA< f0d0U0U00U`s()E6UV0U#0`s()E6UV0 + *H=G0D pHxbbҺ`S!~Oԭ7fXGbKJ{/M>?A- >$^Y@T3ˉ׎*)긼#ܨEC?9X F!iO! ."Yode*0\MMjxd"PsKՉ"{%K樁u׏Q3sf'1UUW<ٚ2g*- !یF"-n + b~0 *H 0+/OQo<l$ 暎pw?1恕^pCW^#Q 4l| RWYzYV*!ZwP]G$8]^'&ppW fQVА]/Ϫ/}v'FD\2wGK0WmZ_'@$Zo=iT'ntfcwk0C̒dud#j?]*Eܱ ?{{D v3cvJ]n(FC 5Cwڌ3RͻG {`[[:zTBB%CK_ZYdg + YtϏQ@A'J]u{@>2kUVmJh}/Hv7xThۮoUWdwҢlF/; + y=,Vf馔'j5ZY1فsjQ1 @(J`un9)|p_&ax/]3};}եG|Z!0aYrwe,`g^'Ix + Ev. 000  *H  010Utest.localhost0 261129150030Z 261129170030Z010Utest.localhost0"0  *H 0 + X`,ˈCr[js O(8P)yof;ƁPs>uđ_%WdKrok:"N*#F@;a[di"IӦ?C-w^}S,DcbaƚɎwxV[L47!哫2Eaxw[!c$0T; paGVЬ`6>m N^Ad>NL ̭Rʴ"^300U0test.localhost0  *H  t'jJ]1Uf-&BW)oIحiElr􃯔U,#CҸo+3GTebԶ%>ej`*1Ct]wUWj vd"})05aEr{TXҩ)OnhS7BmQi M U<{eA[^joɓrUH]͸*KijZ`[E)?ߖVKr2)~#v0*M7Qh^*Ls<:W@sPC>0F؉׻NDU^B`߃vGouR2$BH|؃GC5sEfQ Ї]Xx + FX%Y9myooyՃm95,-=UͨH1Vy{a;qC=YX>u(@##J$ :=qAUCxTx 6'IOk7ۺ5*èZvš6@l#m>CkZ燼bb͵PV95O'n/ + Q6D V`iah6PV"\|58 DhHE䰓 + |E%:nj/p;k'LwPUwӠ%00Z..d„tRZ0 + *H=0D1B0@U 9Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA0 261129160030Z 261130160030Z010Utest.localhost0"0  *H 0 + X`,ˈCr[js O(8P)yof;ƁPs>uđ_%WdKrok:"N*#F@;a[di"IӦ?C-w^}S,DcbaƚɎwxV[L47!哫2Eaxw[!c$0T; paGVЬ`6>m N^Ad>NL ̭Rʴ"^300U0U%0++0U%DNb64@WS>0U#0`s()E6UV0U0test.localhost0 + *H=H0E!>3_:\g7g(x + Qs{Gl. !楳yA WyC!c2Tq0i00 + *H=0D1B0@U 9Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA0 261129150029Z 261129170029Z010U decrypter0"0  *H 0 + $u+-8[ꮓƬٴGwI5ND!ɥqZTcʸ! 9Cn˔wJ¼nZʁ#e7G#qMukX + 0{:#׉,ϯVxO].~/ M{>2i*j6#d%yxrn-z0[Em<R.3@N==iN,Sj޿A͂1#4E" &HX0V0U4P!&1yre%+a0U#0`s()E6UV0U 0 decrypter0 + *H=G0D \97;7&Il^D3f~ WަSTO`TRW@PŐ==1d0`0I0D1B0@U 9Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA0+0 `HE 130 - `HE 100 *H  1  *H 0 *H  1 251027093121Z0  - `HE 1V#R - )ep&` - 0  - `HE 1V#R - )ep&` - 0# *H  1=`]E xO^=+0, - `HE 1kwQ8vIaHWby5S2Ff98LWYuaE+Z8=0  *H )]dOQR=ו@Y]Qg MkvY(U S%ŚƉXy1>]^M<-d}z$MD4)rx9v>k]B>df=$iZ w =,ðH p YIVFvuk c8Iw&>ne Dj9@~Sq(EG3Z ---- PASS: TestIssuesCertificateUsingSCEPWithDecrypterAndUpstreamCAS (2.84s) + `HE 100 *H  1  *H 0 *H  1 261129160030Z0  + `HE 1U-.$o90  + `HE 1U-.$o90# *H  1i:"'\7x$50, + `HE 11UpFugUtr5XMrmmFg6GtEDls8eI=0  *H P*uQ;zWy`~H"ܻ#nT,<_oN + kx.ͨ"[]R29&@&$aR׷eB !,>vgkNt}klYR/"r~%4NX}!\q$ /43Eއ0(ݥwAӒt;rDXKK #^*4vC飍aņQcڨTBs H +--- PASS: TestIssuesCertificateUsingSCEPWithDecrypterAndUpstreamCAS (3.05s) === RUN TestIssuesCertificateUsingSCEPWithDecrypter -2025/10/26 21:31:22 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 21:31:22 Starting Smallstep CLI/0000000-dev (linux/amd64) -2025/10/26 21:31:22 Documentation: https://u.step.sm/docs/ca -2025/10/26 21:31:22 Community Discord: https://u.step.sm/discord -2025/10/26 21:31:22 Config file: loaded from token -2025/10/26 21:31:22 The primary server URL is https://127.0.0.1:33091 -2025/10/26 21:31:22 Root certificates are available at https://127.0.0.1:33091/roots.pem -2025/10/26 21:31:22 Additional configured hostnames: [::1], localhost -2025/10/26 21:31:22 X.509 Root Fingerprint: 9f2189b538c6014d6e4683b175f66fb44a999ddcada88a4add2e05bac25540ef -2025/10/26 21:31:22 Serving HTTPS on [::]:33091 ... -time="2025-10-26T21:31:23-12:00" level=info duration="35.182µs" duration-ns=35182 fields.time="2025-10-26T21:31:23-12:00" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=6d66ea4a-7418-4a5f-a716-7d038eb3a790 size=16 status=200 user-agent=step-http-client/1.0 user-id= -time="2025-10-26T21:31:23-12:00" level=info duration="161.237µs" duration-ns=161237 fields.time="2025-10-26T21:31:23-12:00" method=GET name=ca path="/scep/scep/scep/scep?operation=GetCACert&message=test" protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=a67bb13f-0dfd-44d6-aa4e-781b8a86aa39 size=1112 status=200 user-agent=Go-http-client/2.0 user-id= - common_test.go:204: 0T *H E0A10  *H '0Y00 - *H=041200U )Step E2E | SCEP Decrypter Intermediate CA0 251027083122Z 251027103122Z010U decrypter0"0  *H 0 - N7`?,Wy#L[}KĪ s;;%%yB?K FZ|3c\> ޤq7bء:~sEϟctπFKj<'w63a8] opizii0&s@7%00kc& 3aҎ0 - *H=0,1*0(U !Step E2E | SCEP Decrypter Root CA0 251027093122Z 251028093122Z041200U )Step E2E | SCEP Decrypter Intermediate CA0Y0*H=*H=B6YqLN  ey6)Nx+ڷ4g.uߒM}e[W݂}:F]U`~ f0d0U0U00US69sl Ү|EoV}0U#0S69sl Ү|EoV}0 - *H=I0F!K&1BMu 8Cf(Gg4ژ!7F\'rƖC.3NMD7=稲1 - common_test.go:286: 0 : *H  +0 '1 0+0: *H +'0# *H 01S0O09041200U )Step E2E | SCEP Decrypter Intermediate CA0  *H  @+I(pQVsa0C`uFH)}Al^ӹT !Q^נMeɓ@bgeZxsVb.L!;)ktR4gY3D5+*!  x6eDy/|{HJC?dAxEh {gܿ6;Vf0TVN9cG^AJT0N)ړ-fƟ>N=0 *H 0+yv\,-rMhy_R4)xYw)ݰʖi Ey ߵgniɉ^d$̖{l S1 6'%cPP8Ї]8"Q;oɇ;{Vq{sdn J^`){n}<O7m4E˄ns+hYsEq59V Ѿe4XʩGL 9ՒR.a:Dh.D“ߴa"%;E܊e~"mPntB\O)+D|ގ}/2щIK.0+kK%;{BܛVyD(Nۓ+9]~~'_&4]N%T =lu[lfغ) Nw - "^H54rD'ϤEb&%wW; BXx=jNb\ Kk-p%E-Yˊ^2;)xd1_%S*.Rh99]"yZ,zЮES -time="2025-10-26T21:31:24-12:00" level=info certificate=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 duration=7.087994ms duration-ns=7087994 fields.time="2025-10-26T21:31:24-12:00" issuer="Step E2E | SCEP Decrypter Intermediate CA" method=GET name=ca path="/scep/scep/scep/scep?operation=PKIOperation&message=MIIJOgYJKoZIhvcNAQcCoIIJKzCCCScCAQExCTAHBgUrDgMCGjCCBDoGCSqGSIb3DQEHAaCCBCsEggQnMIIEIwYJKoZIhvcNAQcDoIIEFDCCBBACAQAxggFTMIIBTwIBADA5MDQxMjAwBgNVBAMMKVN0ZXAgRTJFIHwgU0NFUCBEZWNyeXB0ZXIgSW50ZXJtZWRpYXRlIENBAgEBMAsGCSqGSIb3DQEBAQSCAQAJBd3BQJ8rEb2JSZAocFFWc7kI2WGWujD9Q%2Bi882AGg%2FiXvQScpeKP0u11nkag7NBIrOsp54cCyOp9QfFsXhSi07mlBMhUDSESsVFe16AZquRNwYzvZR7Jk0BiE4KujICQZ4plnNUS6FrbFXhzVqrHYi5MIcoSOxi1qxApkpHxa7Z0Ur00Z1kzRJc1K6Db0yrhIbGn4J%2Fisc8NHKn5ugt4NmVEeS%2BeknwP9Z36e0hKrrmYQz%2FIwGS0QXj9A61FgJn%2BaAUNe%2B8QmvH22Wfcv7c2O1bA72b%2BMP5UVk45Y0f9ArpeQehK%2FsjXVPMwTsQpsoHP2pPnLclm%2BgfGn%2FA%2BTss9MIICsgYJKoZIhvcNAQcBMBEGBSsOAwIHBAgRwNB5doxcLICCApAIwewtAHJNibUUaKeI5fB5X1LCNN8peMH49Vnr03cppvyZ3bAaypZpC0V59QsOg9%2B1Z8BunKmGaZHTyYnkXukYocQXGGQklcyWe2y9gNsQFpvPDfNTMbSzENkgo7T8ksP2NuzC98bzySccJahjUJ4PUDjw0IddvDiVIlH6iDtvyYc7zBx7zd1WcXunc50cE2TQ8m7bC99KXplgKc572m7vGeh9PByhFs%2FdHwZPjs%2F6nDeFrW00EkXLhG6uBYnlc5mhBRIraP9Zc0XgcTU59FYL0b5lNFjW4qbKqbfcR5VMqJHaE%2FbLCznr%2BdWSHRav5VKTs73d3i5hOpKaROVoquXjsdkdLkTCkxzKEt%2B0YaHewfIilO2ouK%2FaJQU7Rf3ciuBl9ep%2BIqhtAVDNPEm4Z0ElCwY6nAzYtjXyrTw53oxPVmLRbMEfk3DkPDdSog%2FGhilqprCUEPgIZqQovCNW08%2FCoU7MZ6wHdmXRVJFXhs%2FfEXLJKxPub1Eyn2EqYF%2B1YHTrbJgDrKrZInAXIgEgD5yG%2BPbUr7E2X4PHgIX3eDdIREs8sQ1wJG57FI9knnVHNM2wP%2BG4dy7ChbXygk8ylbEOZIJ18U4YscfaAiMORJnuurj%2BmFfMj7Vm405XpmVeoRqOdIxT7aQPbLX0Frt9Vuol3%2B%2BXKKW3XIdiR%2F2Lk05OpJseNKTcNxGFhWtVAA0cQohZpOc3jxbWgiAWP9fp%2FdmTcAC3kfAzQe%2F301ZAVF3yacF%2FZYZIrUkQ%2F1639oHD4kWV7YEjcVyIDIm2DoZHvvLeGvf3ioQ5%2FytQx7YcqJ8D19tCWSU2lh3G294lofUxgiSRm5bkgKE4vS5pcj9OYV0eM1QypK729g2h6S7Yt7CPKKCCAs4wggLKMIIBsqADAgECAgEBMA0GCSqGSIb3DQEBCwUAMBkxFzAVBgNVBAMTDnRlc3QubG9jYWxob3N0MB4XDTI1MTAyNzA4MzEyNFoXDTI1MTAyNzEwMzEyNFowGTEXMBUGA1UEAxMOdGVzdC5sb2NhbGhvc3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKCGRHeODFkEm3%2F2sBreZuJ5Onjn3cN%2Fe0a8LhnkNll3OzSS4mdAiW3lAmWei1fVD9kndR1wb%2F0fyNjietqR6K9WGadQTcqqY8%2FmjpAUNDj9oN1g%2FZZnVo%2ButssJQWGozVIwNitRFc7JIvMPCRqdbQq%2BOMjbKJWHwZ7CTlTIwshbFxWMkub1iNlf5fhE%2Frn40qYMCDxJb%2BsPaXaug44tjmvUuZG3U35r5sNJsDNhdKL2qtH4AH3AYSXEb9aoPH5Ni9VVmcH7GJP7d6LMnilqCMDxFIa14uKcEGRkk2ZRBSp5jHMoYQE5t%2BNnS77SqnJXmeNcqZ%2FiXQr%2FzkNNhr35BfAgMBAAGjHTAbMBkGA1UdEQQSMBCCDnRlc3QubG9jYWxob3N0MA0GCSqGSIb3DQEBCwUAA4IBAQB%2BtK9u2xfO4ZavE%2F9z5E2Fc6o0ZBrm8nAuBj0SsBMWV6uB8wr36Ceny4fB2BoeFQwfaKcoWq%2BF5rjcFuXRLuy6NowRtZaEwRMsTLOvTezh%2FcWfHtm1PqCebhQQoHQWj93UQlwZ5IRP%2BykrRNIUHxN877r53o59LwDIMtGJSUsuFTxiJb6oY4eKMqyPOUu2pZSttIUScrXQgGZ5GqmFTtrn46bvfHAwdQC0QhxlwwArSdewZLumuUNnblERTuInAKKTR3u0iWTl%2B%2B%2Feomi5a2tJSMOiG%2F5eQdZvFh%2BO7fMqBsF%2BmUfRx%2BSFDDDcMev0%2FqhiifcZcHaZGp8KFI9y9lvGMYICBTCCAgECAQEwHjAZMRcwFQYDVQQDEw50ZXN0LmxvY2FsaG9zdAIBATAHBgUrDgMCGqCBwTASBgpghkgBhvhFAQkCMQQTAjE5MBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTI1MTAyNzA5MzEyNFowIAYKYIZIAYb4RQEJBTESBBCYKzaGsrQuHR5v8NiTOev6MCMGCSqGSIb3DQEJBDEWBBSMuEIgzuG7u0Of717i0TXenvL4NDAsBgpghkgBhvhFAQkHMR4THG9KbUJzQ0hib0pFdGVIU3JCaXBLdXhkVTFmbz0wCwYJKoZIhvcNAQEFBIIBAHyd1w97CjGlnn8eeu6znTw%2BGDAra%2F1LJTt7pfXltkLx3JvHVhF5lBPiRNncKIhO25OlKzkQgPP2XZi4%2FNt%2Bjot%2BviewXybmNO8aXU70JblUDT3U0Wy22HVblAaubGbYupeLxCm10SAbTtcYuA6sd%2FbDBRkKIsDcXkgbNTQWlXJE9yca6asHGombz6Se30UShWImh6%2BoFCV3ulfG7Ow74g2k2UJYeLM9sr3OxBfjyWpO9GIC1FwNnAitEeMIjUtrLapw2iWbq0XmiC3fwIdZ3MuK%2FP9e6TI75ynxeGQxj18lUyouUmgF0Dk5XSJ5WhUsnweE5ukEgqF6iNCu7UWIU4o%3D" protocol=HTTP/2.0 provisioner=scep public-key="RSA 2048" referer= remote-address=127.0.0.1 request-id=f243be87-6c09-4f79-a0fa-301d66289201 sans="map[dns:[test.localhost]]" serial=20519863779165832984617463610839424190 size=3140 status=200 subject=test.localhost user-agent=Go-http-client/2.0 user-id= valid-from="2025-10-27T09:30:24Z" valid-to="2025-10-28T09:31:24Z" - common_test.go:309: 0 @ *H  10 -1 0+0 *H 0 *H u0q18040010Utest.localhost0  *H 6-0?לMC - `wH - Sz#6+'( (s - TEE胬>J xDR`k" 9XM#71>Q"rII^k!I2n˿shYʌR֠'*_~~-|{K!;n.$̬$U^+ssmC'~0΍Pe"Ӭ7TXw'H0. *H 0 `He* *W5WFƷWl;G*Wr3Ul_PVU(3U?j fv$_u`<8 )kƙ~c;GkVQ|R(|t5C>oĐ[prWڻW3SXUW+g:w]9NȺ"vR} aMXŰH8 - #diTy"yXٹx6$4x|Wi+_`}g&t޷y*G El>/NIA ^z&o]5+Elm>Y58o5/-R~u\x2ZT+ZWwnSGǤXYF}X r!v=biLyKD F4B*`uÕQpʖ c%Q - y!e;* diK(kbuc P2 V{v~ii̻()t1' V - ~LmlJ3]?!vrN*m,BC"*&9`Dc%x]Ve< u:Ѻ3 - 3[:h~kw zSJYO{>Y[&X|,skؿme9. Ő* bwŻ-(]xhfG} - FYNؐƪ:5kؓkUul#LɁ7^ȩˎB^CZ0!Z8;*& zfm  +HΖy5Dž'"WP0W_?/JG?ڞ圸?%h[B)dmF45>0 *H 0+יeՀ5HYX251 + ٬j|y )RSQ>Us*%>MGojR0bGJ(9TCOWw.a x4ުN‰,4Ac(C BS5c2kSj;&3/L/`9ڷz\!P|vȠ^hY{Kp|zu-@yeЅGf|KP@Iд,J4GW8;,"tiwQgF}o64p/1DXÈh Nr-#^yTJd-[ ~[IrOËz'_QWel8rmܔkYPzm״%Hxkgxʲfu + }O@dH$`J69rFz5Gso>>cnYZ:E fN!}V2?n}[Nmp!sO'}:F3YDh&4 + YĄ*oBwǒ4Aүqtb9 rHAb000  *H  010Utest.localhost0 261129150033Z 261129170033Z010Utest.localhost0"0  *H 0 + +Ç9](Au%@_WX&:kPO%0V|'i_C;dQMxuC޶݉LV)_$#@NiEΦ + YQbFp*6}ue꽩J}Q^c?m5OTٜ]wSh3zW˗Ɂ,8f`KŬLr,SDြsYrHs0urD`E`!Xxh$!AbrY00U0test.localhost0  *H  #A}0&Y OFσRlE×k`jWPwꁎ.3E?îsWUşT7O6h⁏b]'s + ZFv)=pMNTΒ1-*e0*KR"[{}RNPnɕ!gIgיh\Fڡe~ĝ/.4ӷa: FcLہр>{fVꕣV1kvPkVOۣP۸*L[g100010Utest.localhost0+0 + `HE 1190 *H  1  *H 0 *H  1 261129160033Z0  + `HE 11>.Հ0ࢂ\0# *H  103. !rT0, + `HE 1uYqjYAeyHgV/rs97GkdonkkG4WQ=0  *H z1} YAdH:+u֌3^pk#{|!1{b@J'U!bL4 ojQfn-0ţ穳}V\EgO[*3YsQGz:6 +time="2026-11-30T06:00:33+14:00" level=info certificate=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 duration=5.946715ms duration-ns=5946715 fields.time="2026-11-30T06:00:33+14:00" issuer="Step E2E | SCEP Decrypter Intermediate CA" method=GET name=ca path="/scep/scep/scep/scep?operation=PKIOperation&message=MIIJOgYJKoZIhvcNAQcCoIIJKzCCCScCAQExCTAHBgUrDgMCGjCCBDoGCSqGSIb3DQEHAaCCBCsEggQnMIIEIwYJKoZIhvcNAQcDoIIEFDCCBBACAQAxggFTMIIBTwIBADA5MDQxMjAwBgNVBAMMKVN0ZXAgRTJFIHwgU0NFUCBEZWNyeXB0ZXIgSW50ZXJtZWRpYXRlIENBAgEBMAsGCSqGSIb3DQEBAQSCAQC9gtIvPUkj5fGw94hpJFUmhItNdiz04uKyEexUyFV8mJ9G7sNdw48uUuilF5oxQRI6VP03ee%2F1tDN%2BGZ6x0DJ1P1N5Xz2Uyqv4FL0CZF2FgooFrGJC5X832tDkM5cY5%2B%2FQtWgxwf7PbVVoxkaC7uoRb9TlodNU7hmbeMU%2BvgMjTMmBN17pyKnLjphCsKxeQ1ow%2BSEOlVo4OyomIPELDuzNembGBm3KC%2FECICvIAt9IEs6Wp3mpohM1qseFlRUnvh75Iq5XCFAwEIcfV9ZfPy%2B2Spry5rLlR4s%2FEdnanuWcuD8lmqPqaNhbQurvzxQpZG3lRgCqiJk0qNL%2B2jX1fz6%2FMIICsgYJKoZIhvcNAQcBMBEGBSsOAwIHBAiopteZv%2Bdl1YCCApA1SKOcWVgy6NUVNTEK2az0anz%2BvHmhDClSU1G8PoEE7rdVvHOFvKTOFOsqyCXioz7Bh0320kfgb7FqUqesMGJHz0rg0Cg5glTk0N4ZgK9DT6e0oqHjh%2FVXd8ARvRUuB4cCYQUfCZjrm3jV8xY08oj%2Blt6qTpTCiSw07v%2BuQYm7isfIY%2BiRf6Wm0P0oFkMNQpzo8VOJHRmjyDXdYzLRa1NqOyYzL0yCLwPwYKs57fLat8l6iI1cHiF%2FpFB8dsigv5cT%2BI8S2vwagl5oWXvUS3D9iHzpepl1LbiTQHllf%2B600IUYwxCg9xMWk0dmfEtQE4qypUD5rf9J8dC0iqy9LJFKxzStR1eLODsYgizK5Zl%2FrSJ0adx3Ua3JZ0appo2IqX33bwA26gTXNHAPBJmv%2BbC2jy8xyURYw4hoC9Yau06tci0jXqL4eYVU3vRKZC2No90DWyDeflsOnTxN8Ks59ZekpVJ7DZZpFaiPA%2F%2FsFY8C38vfr3LRpYdVcDCq2wkxa7IBorZhThBkctWBbSqNO8Mr%2BFhuPsFJFQSHEHJPvcOLeifNX9ToURHTV2UG0wIXjGy1OBmpcm2BrPnclOqma8tZ7VDwem3oBZzJ17QlSNPceGvOZ3jKsq9mdZC09BUKiaMGfRhPGQBAZJKH7UgkvmAApko2OXKCHEbH2eG43RB6NawG4BmYR%2FP6lnPVb6zdPj5jbvRZxFoaOkWdtgvIZrHfBqDQTvwhBRr2oX3k2BpWMrM%2F1xkG3W79uH1bTpWOf23KzXAhpLeIc0%2FoJ3062kYz4K5ZiERouOPrBpmYJjSkCqRZ2sSEoyqgn29Cd8eSjsPENEHSr3G6qQcBmsd0DmLYADkeDHK6SK%2BChazlQfZivqCCAs4wggLKMIIBsqADAgECAgEBMA0GCSqGSIb3DQEBCwUAMBkxFzAVBgNVBAMTDnRlc3QubG9jYWxob3N0MB4XDTI2MTEyOTE1MDAzM1oXDTI2MTEyOTE3MDAzM1owGTEXMBUGA1UEAxMOdGVzdC5sb2NhbGhvc3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvm6CFsCsX48OHOV0o7fS65dTVQfUF%2Fvoa2XUlEUACxOIaf1%2BBgqxXWLQmFDprUPCAgr%2B%2BnLSlqQEBnexPxCUwVnzAzMwnaV9DEuM7ZFFNeB7xi3VD3ragi%2Fzdiaz%2FTIabVp6OnSkdtV8k6yNA4E7HaUWzzqa2ClkYUWIQRnAqgjbVfXXsZYusiRjg6r2pSg59UV6EYz%2F%2BB201T1TZ2Zzb2v4QXXfP21No8jN6V4mPjucCy5fJgerVLPA4ZoOWwmDn3UvFrExylKcsU%2BlE4YC8u3OMWeWackj4cx8c5jC3dX%2FWwnKbB%2FuQ2%2FxEYEVgIVjki3hoqOwkFO8hl0G7YnJZAgMBAAGjHTAbMBkGA1UdEQQSMBCCDnRlc3QubG9jYWxob3N0MA0GCSqGSIb3DQEBCwUAA4IBAQAjQX0I7MMwJulZDU9Gz4NS2GzzRb%2FDlxKx92uwYL9qV1CTd%2BqBjpUuhjMEo%2BJFhcI%2F28Ou1XMcEOZXqNQEGFUHk5vFn1S46IU3T7I2aOKBj2IcXYEFofm8pIzaJ9Jz5fEK9VpGGMl2Kew9qelwq01OVAj3zpLvMS2DqqXkoyoC9v6uZeXwMIeNKh1LUogiBt9bt497HYR9Uk7KUG7JlX%2FzhiFnrK3jSWfXmYS3%2BGhcBMn1RtTaoWURB37ZAcSdLy7%2FNNO3YToNgw8QFUbtwYX21WPR%2FkzbgbAH0YA%2Be%2BJmv1aTi93qlaPwVjEOa3ZQa1ZP26NQHd7oFJnbuCq5TFtnMYICBTCCAgECAQEwHjAZMRcwFQYDVQQDEw50ZXN0LmxvY2FsaG9zdAIBATAHBgUrDgMCGqCBwTASBgpghkgBhvhFAQkCMQQTAjE5MBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTI2MTEyOTE2MDAzM1owIAYKYIZIAYb4RQEJBTESBBAxkj4u%2BNWAhTC%2B1%2BCiglyeMCMGCSqGSIb3DQEJBDEWBBQwhI7G2TO3LtkLIbdyVK%2Bmmr7tiTAsBgpghkgBhvhFAQkHMR4THHVZcWpZQWV5SGdWL3JzOTdHa2RvbmtrRzRXUT0wCwYJKoZIhvcNAQEFBIIBAHoxzH0cC1lBjwVkSM8WsDorddaMM176%2FnBrIxLc2HuC9RZ8rhwhMbh7DjxkZpQTg22qIIo6GZZrQMBoRK0mzqXrK7%2B%2Fw96Bc09x6bkNCLtUxgJqE8nJasYfkxE2F70zymRIYGuJIu66HsfkKM27vU2ai7TcHKIYX3HUEGHNVyO63U4o9FtGGL6TorFIEVCdXzG1G8%2B1%2FE%2BKbiF1JEGGttCC2JARjqcbmeWkcSGnSVJtDJVhr6g%2BHGKa0UCJxcJKJxLDVQ8h1GIS7Uz6zzTtiSChyG%2BZzGqaHVFmbi0wxaPnqbN9VpfyDlxFsGcT3k%2Bzr1sqM1lzUZGVhb5Heoo6NpE%3D" protocol=HTTP/2.0 provisioner=scep public-key="RSA 2048" referer= remote-address=127.0.0.1 request-id=e0a7b51f-2cfe-482a-919e-0e61a36d4c80 sans="map[dns:[test.localhost]]" serial=198030881964430225600334650056081174286 size=3141 status=200 subject=test.localhost user-agent=Go-http-client/2.0 user-id= valid-from="2026-11-29T15:59:33Z" valid-to="2026-11-30T16:00:33Z" + common_test.go:309: 0 A *H  20 .1 0+0 *H 0 *H u0q18040010Utest.localhost0  *H QQ,teg-𶳗 "Wcs۲b64'e3Z{be_1bBX5Ci-vؓ~Pa-uCo{~o$X=o r%PnV nz"[&֒:=vjo^E\b}0!E^)0sS~9E.FCCf@M1#]{/UAOvU>9E + A@S0. *H 0 `He*#o-NK怂9Ec &'Dʴ>J[/ `.w_&]q3 + oe_ !=AXU;; $qm~0SVY=Ϣ<~"0jn{y12GX-<,sQPCM! ̒%nYX4|zjSHU |ee/%n\a5|ުZQWLqyT#lGU2 hܤl_jTSȢ6 ܖTЛTY´[ZpJs@6t2䃳P({ae)r2XlNCt 9QT|W1~n]Bݍ7/a1ŠEI7\w Od=@Z-ZU}bGM}JDfmHຮ&&_JKsQ [dW + 1 Jrw'Zs`c6$0"8Λbq/*ȉl+PjYbz&cӕ6'6+C-핀]TN4ɇze)F$:Kp4'wKe'v{5$_?R3_=v,QvM + FE xOZv$Aor$Y``=FΆ+ecUEit̕nimo[%| jM(T bʹKFmmWEgp~>ƇD`[h;XgԷڧͫ^BdLVpj;@AtL%00j\LIk?o0 + *H=041200U )Step E2E | SCEP Decrypter Intermediate CA0 261129155933Z 261130160033Z010Utest.localhost0"0  *H 0 + +Ç9](Au%@_WX&:kPO%0V|'i_C;dQMxuC޶݉LV)_$#@NiEΦ + YQbFp*6}ue꽩J}Q^c?m5OTٜ]wSh3zW˗Ɂ,8f`KŬLr,SDြsYrHs0urD`E`!Xxh$!AbrY00U0U%0++0U3`2cVF0U#0q z$[ 9?0U0test.localhost0 +d(@ 0  scep0 - *H=H0E O "C~_ʰ`R95bC$!jF1!֥ZtT:?أi?_Gh0Y00 - *H=041200U )Step E2E | SCEP Decrypter Intermediate CA0 251027083122Z 251027103122Z010U decrypter0"0  *H 0 - N7`?,Wy#L[}KĪ s;;%%yB?K FZ|3c\> ޤq7bء:~sEϟctπFKj<'w63a8] opizii0&s@7%1T0P09041200U )Step E2E | SCEP Decrypter Intermediate CA0+0 + *H=G0D (]on{\(!# {4ᎬYeW : fsY!vͦ,9h#9|Udҳ0Z00 + *H=041200U )Step E2E | SCEP Decrypter Intermediate CA0 261129150032Z 261129170032Z010U decrypter0"0  *H 0 +  ǻWt4*etqMmؽ5Ź"{-x]iCo#!}8}2 + "F`^=86}օ#Ot|H41!Pٺ<e;5iL^ ݋ *@)ךx;9⟻֔v7%f˂ + =p2qw/ϷPDW{L7)qc3 sX0V0UM+SRP^ԬEg0U#0q z$[ 9?0U 0 decrypter0 + *H=H0E!u tB7*t|٭ (sA S0MpZdU(Pf0@M1T0P09041200U )Step E2E | SCEP Decrypter Intermediate CA0+0 `HE 130 - `HE 100 *H  1  *H 0 *H  1 251027093124Z0  - `HE 1+6.oؓ90  - `HE 1+6.oؓ90# *H  1=6i6v*`"/`0, - `HE 1oJmBsCHboJEteHSrBipKuxdU1fo=0  *H Q(J66԰Eъ=S%@_.Хu:6 >ޑoQy_cs !;rʹyͅ үFGeߏEXTez@ o2BO[? |+rJ 2C? ,IW`ȱ5+99Z|ܺ>v8˩TS;wGQ6{| D8tquZ ---- PASS: TestIssuesCertificateUsingSCEPWithDecrypter (3.90s) + `HE 100 *H  1  *H 0 *H  1 261129160033Z0  + `HE 11>.Հ0ࢂ\0  + `HE 11>.Հ0ࢂ\0# *H  1b"xCnu f۾J0, + `HE 1uYqjYAeyHgV/rs97GkdonkkG4WQ=0  *H D3N5X\`9eiTM0R%f B"gIh 3ҕruec4 p 3Ə! .>"&n-Xv7Qag,d8P&p.ݢ`!sq's<*(KLxieA?D $ n`/au͇%#X%K x-k(5|6WLaלӗ3K{sPi.O3F$ +--- PASS: TestIssuesCertificateUsingSCEPWithDecrypter (2.54s) === RUN TestFailsIssuingCertificateUsingRegularSCEPWithUpstreamCAS -2025/10/26 21:31:26 failed validating SCEP authority: SCEP provisioner "scep" does not have a decrypter certificate -2025/10/26 21:31:26 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 21:31:26 Starting Smallstep CLI/0000000-dev (linux/amd64) -2025/10/26 21:31:26 Documentation: https://u.step.sm/docs/ca -2025/10/26 21:31:26 Community Discord: https://u.step.sm/discord -2025/10/26 21:31:26 Config file: loaded from token -2025/10/26 21:31:26 The primary server URL is https://127.0.0.1:44729 -2025/10/26 21:31:26 Root certificates are available at https://127.0.0.1:44729/roots.pem -2025/10/26 21:31:26 Additional configured hostnames: [::1], localhost -2025/10/26 21:31:26 X.509 Root Fingerprint: 595215f706073e7304d3aff6f270f51f19fce260fdfefcd6c8f71acc13af1c19 -2025/10/26 21:31:26 Serving HTTPS on [::]:44729 ... -time="2025-10-26T21:31:27-12:00" level=info duration="29.443µs" duration-ns=29443 fields.time="2025-10-26T21:31:27-12:00" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=e26e97f6-f82a-481c-b922-8e133560a62e size=16 status=200 user-agent=step-http-client/1.0 user-id= -time="2025-10-26T21:31:27-12:00" level=info duration="44.462µs" duration-ns=44462 fields.time="2025-10-26T21:31:27-12:00" method=GET name=ca path="/scep/scep/scep/scep?operation=GetCACert&message=test" protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=28704728-f0e3-4920-8a16-a7cafbe46307 size=880 status=200 user-agent=Go-http-client/2.0 user-id= - common_test.go:204: 0l0TV7H+ֺ,&ac~0  *H  0:1806U /Step E2E | SCEP Regular w/ Upstream CAS Root CA0 251027093126Z 251028093126Z0B1@0>U 7Step E2E | SCEP Regular w/ Upstream CAS Intermediate CA0"0  *H 0 - kdLj3aɝmf4!3N O{{nemj>ӧ4p`8de}uhrh&.U!D}J,uV橷Ja#7 ɩ|; g+p:SGpFƗzT 6s~ T}.Ϗ!]gC]h^,q ^+ #W[c1#|P:}bW]lġKF&'6HzlT;f0d0U0U00U - nqTEl#RIy0U#0 - nqTEl#RIy0  *H  0>?˵}ӆ7x$' po G h@$zS8,B_|دaѭ/5r{IQ *zO1HՄ1s hH7b4~~͓2Cdrȹ4rd5‹ EnT3G 9HYUjҗ7ZL[=8|*)!j>9Nj?r5r d;tNp.?J[4v/|m*") ` - common_test.go:286: 0 O *H  @0 <1 0+0O *H @<08 *H )0%1h0d0N0:1806U /Step E2E | SCEP Regular w/ Upstream CAS Root CAV7H+ֺ,&ac~0  *H CUUbL"z]%2MD(Zn2~?G<Q^Ѽ BOG,ՐrqTɘ*Xf0]0)dߢa .N!_Z9&x3Rf\8l{OېnJ_VT"oo]?8H_1޶j\@1Q98Y {/" /ϵ:OMk <ި&0 *H 0+}S퀂xD!d,9xȗRU9ojY)Q/ WV~t%) StZkwXc6Wh0b$%YB~R?bmĦb؄a r38䡌 WыHj7Ky~C?vIW?V#$" L>+>) V#7|H\/;k@o = >IPێ&u0_XgP,|W ,,ϞTWZ(,l[}nfgf6 2lphIMv t2Ļ-?]t| M9*wx" %3J=wʛʒ~9c;a >lBz9T=L8)prL@fI00U0test.localhost0  *H  jv|*{byqT|$x s2ě>>3YMk( 7bڮơRv(%5rem Xpύd )jq@eW6 ]*Jh$ME( Ө2{3TjU]3Ъulc)D-&)$wgG| Zn"OyQ+YVN;fIPѵ#i9 s:.†#, - }Myb` - \ d - '3ƈ*Q.֤}-R32]gૻ}m100010Utest.localhost0+0 - `HE 1190 *H  1  *H 0 *H  1 251027093127Z0  - `HE 1rqȗ_sYC0# *H  1MWީ ,ol0, - `HE 1YVLDN0fI2iyGXZxwf026gtPnn1w=0  *H  - /Z1_,I!GEN!q_մNg .k7{NFGtY˟UuU - ϬЉE(=)\"QjPzqRKw{?uʳ3Vf(g.@q"9PAr8YIn:V8?' +_־+3Z|.85{u렸=+MX,ԹW1' dVTc>0Dd -time="2025-10-26T21:31:27-12:00" level=error duration=1.758681ms duration-ns=1758681 error="scep get request failed: failed selecting decrypter: provisioner \"scep\" does not have a default decrypter available" fields.time="2025-10-26T21:31:27-12:00" method=GET name=ca path="/scep/scep/scep/scep?operation=PKIOperation&message=MIIJTwYJKoZIhvcNAQcCoIIJQDCCCTwCAQExCTAHBgUrDgMCGjCCBE8GCSqGSIb3DQEHAaCCBEAEggQ8MIIEOAYJKoZIhvcNAQcDoIIEKTCCBCUCAQAxggFoMIIBZAIBADBOMDoxODA2BgNVBAMML1N0ZXAgRTJFIHwgU0NFUCBSZWd1bGFyIHcvIFVwc3RyZWFtIENBUyBSb290IENBAhBWN0gAgivWuiyRgt8mYWN%2BMAsGCSqGSIb3DQEBAQSCAQBDVbcAmrhVAmKapRtMqR0ierjHXSUCBDJN0UQegdAOHbYDASiO2QBakJ8O%2Bm6bMn6pP%2BFHszznBrhRpL%2B0XrqF69G8nwtCFvwWT4hHLNWQu3KvAspxVMmY%2BajlKrdYD2b71zBd5oMSoKqLnzAp7GR%2F36LDYc%2Fi3wzr1y4aTsMEIbDUF1%2BiWjmL%2FQSSJrTluh54M%2FTU9VJmBlw4udDKbNh7%2F0%2B525BukEpfVqTtqsDp0VShIm9vXT84BwcXnkioz18x3rbeFWrf6AVckEAxGYYCkFHx5zk4WfIL93vxL68iqQwbL8%2B1Hzoa5%2FEZuE%2Bg%2FaLVTZRrIN1%2Fq%2FKsPN6o3AgmMIICsgYJKoZIhvcNAQcBMBEGBSsOAwIHBAj4rQd901OO7YCCApB4RCGvZI4frJssuTmLq3i4yJe5UlXXOfpv1Gq6WZ4pUS%2FCIFdWfnQl5J0p%2BBKWILHq4KzHU%2FL1dFprd1jtAWMSEe42ozzqkT9u3Hjn14alyJk2AKJZ2IarJNvjKLFkrbW5Xo4pVn7SntA7VOucYqOZAr21evBbFOHRpIPp%2B%2FaB1%2FtG8HLR%2FjP50PpIXQj0sP4uSa2pIqvFdGddSTMWy2LnzL9VmRaHvR4G8TyAxTSF%2FP7eZoFJGtw4E%2Bagac6LO8LXL9RTvq53kjnUU0A4Q293xxCq8Nb6NviaLnALzkxooaCZost14dJXY9CBm0VtkKH27nafNXqI7DQzAgsLucWpkxNK3RWzYbZpbpMjwyfJATS%2FjWDGHnZuBSy0NiuFabDjTTa9t9sVuMa0LhBtGVTCqcr3ECCc2qsqyVoJ9JW0lIbS4KRkdg2%2FqwhUQdo%2BEQ5Xr6lo4zBiJBMlnVkGl0J%2BylLgPwRiGOD%2FbZwXs7%2BToIb7xKayrJq1zBl%2FYtiEn6CkYQwXvo%2F8rqZyM%2FrIOOShjMrsDeBXlNGLSO5qN0vfedV%2BBAOBmcCa5UM%2FFacYdklXFz%2FjVr4jgCQiiZkgtQtMPhgrwRA%2B1SmpmwtWBK4jN3zKSFwvnRPxjw47%2B7przfO3EkDcwW8g%2F8vdHD3ooxGdw%2FAgPq%2F5GElQj9uOwCamnZR1MF9YZ1Cn4Q%2FouOipLL88Y4MTEq3sS2n0gNbBzQfsoZVtQFfGYCa%2BQYUyuHvF4vDBL7BvWezDNtcVu0bboTuFHTMU%2FOeLulz%2BaXq4K8iMDN3yr3B4UXKJFb1Q9BAWKFWVYp%2B1KyzZNv5g6wbz63SiAjxo%2FCcoT2RzE5zxO7GDp%2FVJtURgoG%2FvGRfsDDIopaCCAs4wggLKMIIBsqADAgECAgEBMA0GCSqGSIb3DQEBCwUAMBkxFzAVBgNVBAMTDnRlc3QubG9jYWxob3N0MB4XDTI1MTAyNzA4MzEyN1oXDTI1MTAyNzEwMzEyN1owGTEXMBUGA1UEAxMOdGVzdC5sb2NhbGhvc3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjuWii2F1NQ%2FURBjL%2Fnl%2By%2FI1yyeMbf1Ux%2BiS9dTUovoK7%2BodJnzyrni79ZYg2g5EfNW1HkG0wZBzdVOl4O17HCZt3%2F7CX%2B%2FbtkT%2BXdxhDTjCPT5jmPnz08Rmo4PGCEZ7eVwmLlSy4LMzPnlQfvVdaKBgsbPYGW5h9k9RuZuinZ%2BoRf%2F5muDYgMmxwrKZorqdJyk2ZtLfpdgsbunSzHTLEuxi6A4qGpS0%2FXXTbyAewfCAEorhNOQcqd6PKEtZ4sCLzDR2nJTOBSuLpyz139bOHypvKkn45YzsDqmEgPpFsQu16r7HPyf05i%2BGN7FQIPUzmOKvEKXByTIrNQNdmSdrTAgMBAAGjHTAbMBkGA1UdEQQSMBCCDnRlc3QubG9jYWxob3N0MA0GCSqGSIb3DQEBCwUAA4IBAQBqAHZ8KntigHlxqFTLfNDIJKt4BCD39emlczKUxJs%2BgT4X5DNZ%2BNNNa94ouQyB6zeFYuCS2q7GoVJ2KCU1h3LvZZFt4wyuWHD74dPPjfZkDOYpaqBxQGVXNr%2FTC%2F%2FjXSpKaCT%2BTUUoCdOoMh25ezNUrp23oMCzu2pVXa4z0KoUs3VsGoNjKasGRNktJikkd2dH1c98tb2hDeFabu7pIk95mVErm1lWm%2BROOwMbAmZJUNG1I43BaZI5IB9zOi4FycKGiSOWLP0KfcBNeWL5YLoKXAsL9WQKvyeNM8aIByoc9JfrUYbXLrfWpO%2ByfeKwLVIzrzL49F1nleCru8jSfYttMYICBTCCAgECAQEwHjAZMRcwFQYDVQQDEw50ZXN0LmxvY2FsaG9zdAIBATAHBgUrDgMCGqCBwTASBgpghkgBhvhFAQkCMQQTAjE5MBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTI1MTAyNzA5MzEyN1owIAYKYIZIAYb4RQEJBTESBBATcnHIl6mtX3OjWUOwshWwMCMGCSqGSIb3DQEJBDEWBBQBTYJX9rXeqZShj4cJuyxvwtrzbDAsBgpghkgBhvhFAQkHMR4THFlWTEROMGZJMml5R1haeHdmMDI2Z3RQbm4xdz0wCwYJKoZIhvcNAQEFBIIBAAoSL4ZaqsUxXxisLIj42e%2FMz0khD0fwRbJOhCHpcee52wKyX9W0TpPqH2cJzc34LmvAN3v56E7upvWQ%2F0ZHdNhZ86HLnwetxlUfdRK1VQrPrNCJRSg9yClci6UEIlFqtFDu8nr1cb%2BinFJLd93Ne%2Bqd7aiFHz%2FJdcqzM%2BlWZiiNHGfxkhQuk0BxGokGIjmijKRQQfoWAXK%2FOFnLwkmw981ulwc6z1bCOL%2B8lLk%2F6ieXzw0rhl%2Fx65US7da%2BupkrM1p8Lu44NajkAt%2FwexumzML4EtF19%2BuguJE9EStNWCz4ldS5v1cZiTHP2ieO4w1kpVan%2FedUYx31k4M%2BMKXKRGQ%3D" protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=b96b4b71-aa0e-4c29-9781-a3e93a12ce63 size=116 status=500 user-agent=Go-http-client/2.0 user-id= ---- PASS: TestFailsIssuingCertificateUsingRegularSCEPWithUpstreamCAS (3.19s) +2026/11/30 06:00:34 failed validating SCEP authority: SCEP provisioner "scep" does not have a decrypter certificate +2026/11/30 06:00:34 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:34 Starting Smallstep CLI/0000000-dev (linux/amd64) +2026/11/30 06:00:34 Documentation: https://u.step.sm/docs/ca +2026/11/30 06:00:34 Community Discord: https://u.step.sm/discord +2026/11/30 06:00:34 Config file: loaded from token +2026/11/30 06:00:34 The primary server URL is https://127.0.0.1:46377 +2026/11/30 06:00:34 Root certificates are available at https://127.0.0.1:46377/roots.pem +2026/11/30 06:00:34 Additional configured hostnames: [::1], localhost +2026/11/30 06:00:34 X.509 Root Fingerprint: 860b25c6e3fba370ab70bf674d0ca3ef0ebc9a96141e41bd311a244c2e2701db +2026/11/30 06:00:34 Serving HTTPS on [::]:46377 ... +time="2026-11-30T06:00:35+14:00" level=info duration="39.805µs" duration-ns=39805 fields.time="2026-11-30T06:00:35+14:00" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=c15b3d65-00da-4787-9a8c-75a8db0f1edf size=16 status=200 user-agent=step-http-client/1.0 user-id= +time="2026-11-30T06:00:35+14:00" level=info duration="59.606µs" duration-ns=59606 fields.time="2026-11-30T06:00:35+14:00" method=GET name=ca path="/scep/scep/scep/scep?operation=GetCACert&message=test" protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=f897157c-9ea3-4e32-b62d-00f4d58e66d8 size=880 status=200 user-agent=Go-http-client/2.0 user-id= + common_test.go:204: 0l0T4qs^7.0  *H  0:1806U /Step E2E | SCEP Regular w/ Upstream CAS Root CA0 261129160034Z 261130160034Z0B1@0>U 7Step E2E | SCEP Regular w/ Upstream CAS Intermediate CA0"0  *H 0 + 81+}"h%{_1Ì0d^hb{=$\GX]pxvQ + )R[6Q-h{2tg$]KPɅ7+VVzF즉.Ziᾳ'p]4Ǵ.p/0/4u2-pSGIBBX!3\]]4%o8JO٢>0kLT⑄`PuuueimEDڐt⍖Z7{%f0d0U0U00UWt4<|m.c0U#0Wt4<|m.c0  *H  &EͲXUHKzW]-• lYZ{%z'nn:"MUkC-UeO`ťv + HMOCox`mQE%}7b\CM2U + 4;5ag*|Kv~ʒ:Q:\uGI]9r ga)3#|B βoDŽ/:%<4G + l,֓5Oi2kJn,^EHcL ]{"㊑I A)H;ÑE%*.FcὢTQObs^ bM(/ERa& + s`चleQihFW!rt^ِ; ߯ͧykDbLR OO \iAuŇĨ]=_首_F$xӉˬT MJ~E.M7 )(g 9M\3r N=~A/-uPIOP2bru1 V100010Utest.localhost0+0 + `HE 1190 *H  1  *H 0 *H  1 261129160036Z0  + `HE 1j}tiTj #0# *H  1q k./q 0, + `HE 1Ule2jc9dZz01Lr6sXBOBStbecfM=0  *H (B;?AO^wjOS)u/]P2OXi@ M_rzԡyE[ 1:a8l;7>j3ݍ( `߮jK\L>,?z\Ǚ u'ۅQHrC>j|qf?J A0`c_8-%=DuŵQPw<ƵM*?!5x\JrєDmtn597hm_\Ll,$ hqc_ޫf0d0U0U00UW͞7 - فuu0U#0W͞7 - فuu0  *H  Idr1^L?B4}LwwM%|4~]ƒw%̪X|z D6WCBdLTiP8!5:o8R@q;4wF YB@sjJթ!z>ElbOvԈ w^C;Fh$6>LS)˄B6g @mPKyGչ!;YI}el - common_test.go:286: 0 ? *H  00 ,1 0+0? *H 0,0( *H 01X0T0>0*1(0&U Step E2E | SCEP Regular Root CA2֛%il10  *H 'R>ũD4unHvk3N:nxH0(7 &mpY_EIнt툺2eP8$xm?7Ru&Iov#tB=Vf@nw 9Wsv{R ,MdHz"F{xhZ,L򎖍|Y*0vl!!<~PI_fZ4 űE<D0 *H 0+7tSp}D`2?zTŘC)vCǝ0ϕ)6悸WUIir - آpp0rSc)Ul单󊴌x?M,݉Ɣ LAY? gPH^6;R$fTr!VnZ:760Ypx=:<0G_*.^mu0|s>N룐p J fRF^-V~lS*,@Y* !knQ0aKre8!Q|J]hL*jVCQ ^ - d6m.ϬZ-.FKL[A4le(}DYӪs]IM=ƾh1gcgUKxՎx8~V-ɂG:;.$&EN( rZ=1;i?éMX/OJfDl$>s%D.GI$1Eԭ#Z Iꑅ sryW`Zn )%ng(͉Va;KvASbdhsu#O#>ߚ1 ys,%:@0 *H 0 `He*~ n(LxM+HaВfط)O0ZL7)8rۑ*rSw< I%b;/{ ~wl&{jP^Jx,:BJYCL5NB|/Ӻ-|U%`4 B+@щԱo*ڙh\mfUgSʇ{Ry&'W(֮J+ᘍzɀŨntlq!Ll)GNlGvq?p,"qē#jlCߪJ\Vo^ڃu6,d`o&adnJ)Ll#1[Qܒ=i”TP&$bKPeT\J3\\$#݈Rɢ&9Cv;B6*xcq.yK1!ҭ e1,QŮ60]5r/,' ݉mbny;\tF0}/@{ES1Ej:ǂeGtFaPkoknQuߓm!$@h$ )))g`jOt)rp#~_geI۪vfE-6Cn=ٜ/;T.A^nb֋ D#!5g;J`WmZ]co>j_BW+f - IOw.4\@0N׶FiL=.}@M/UwDiM蹢)$d[TA59a(1ŠVw - l762Rݬ"tfcUpoS#[,^|)ƂUJ - N#{/ - rA1.~p$ݮhxLJMidv6% &)*$!fۄEH0*5嬛p}0 1 Jy T11 ũSKŰN7k0L042֛%il10  *H  0*1(0&U Step E2E | SCEP Regular Root CA0 251027093129Z 251028093129Z02100.U 'Step E2E | SCEP Regular Intermediate CA0"0  *H 0 - ź3zw_ - R(y.=a 4tSuγ"}\%jenM@K%0תOzΜGg5H>z\Ǚ u'ۅQHrC>j|qf?J A0`c_8-%=DuŵQPw<ƵM*?!5x\JrєDmtn597hm_\Ll,$ hqc_ޫf0d0U0U00UW͞7 - فuu0U#0W͞7 - فuu0  *H  Idr1^L?B4}LwwM%|4~]ƒw%̪X|z D6WCBdLTiP8!5:o8R@q;4wF YB@sjJթ!z>ElbOvԈ w^C;Fh$6>LS)˄B6g @mPKyGչ!;YI}el1Y0U0>0*1(0&U Step E2E | SCEP Regular Root CA2֛%il10+0 +2026/11/30 06:00:38 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:38 Starting Smallstep CLI/0000000-dev (linux/amd64) +2026/11/30 06:00:38 Documentation: https://u.step.sm/docs/ca +2026/11/30 06:00:38 Community Discord: https://u.step.sm/discord +2026/11/30 06:00:38 Config file: loaded from token +2026/11/30 06:00:38 The primary server URL is https://127.0.0.1:45275 +2026/11/30 06:00:38 Root certificates are available at https://127.0.0.1:45275/roots.pem +2026/11/30 06:00:38 Additional configured hostnames: [::1], localhost +2026/11/30 06:00:38 X.509 Root Fingerprint: 36e228de1f5ff2a65007b68c7678af59067dea0de699629924dc92a56eacb943 +2026/11/30 06:00:38 Serving HTTPS on [::]:45275 ... +time="2026-11-30T06:00:39+14:00" level=info duration="46.44µs" duration-ns=46440 fields.time="2026-11-30T06:00:39+14:00" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=0fb04730-489c-49c5-941f-ef817be61a72 size=16 status=200 user-agent=step-http-client/1.0 user-id= +time="2026-11-30T06:00:39+14:00" level=info duration="58.749µs" duration-ns=58749 fields.time="2026-11-30T06:00:39+14:00" method=GET name=ca path="/scep/scep?operation=GetCACert&message=test" protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=a6863a13-31ac-4ef5-8dd4-103e7c2eefb9 size=849 status=200 user-agent=Go-http-client/2.0 user-id= + common_test.go:204: 0M05nbt-. 5,0  *H  0*1(0&U Step E2E | SCEP Regular Root CA0 261129160038Z 261130160038Z02100.U 'Step E2E | SCEP Regular Intermediate CA0"0  *H 0 + S37d@30/aeʳUxfpjnk7:.O /*Ua7\ȓ>MBs0݄B+eӱWd[SEsY*zkTF_@> G^,>XASPtdyqBi7P|t84a8n8G++|Y"{"oG N-sqsxD2;IkK֢I8"DNSf0d0U0U00U%Ӛ@ ry#0U#0%Ӛ@ ry#0  *H  : ʪ{<-cuj@OϦI].@7NjK(ա.d;DK;"l6ʃK};sNu.-O׹ѼB%N`@Wh ;J5/XVcϰX2LfB($y]Wuߍ eT$YI+7K>z,rkXQ> +'F$%a$7!f-sy8B…b*.vkU 7\Uk ?, + common_test.go:286: 0 @ *H  10 -1 0+0@ *H 1-0) *H 01Y0U0?0*1(0&U Step E2E | SCEP Regular Root CAnbt-. 5,0  *H ;h=G\OV:0jL_/x(vÉ֭gSHԚ)s $ 6%0Y'q)=(l5bݿ\UqOC%./*:HPN6j7 =,x4A7ӧ>k\VMCIPM" ((yGg  gVn-@nBDcK ~ωo۽/&&:.h< 'ql0 *H 0+XB^EkYY$Б[W + __?(TiiH>\V)wm^Ue$ix[<ӄlܙ-O㳠v0 .bW8[J5[ŐWuʀB + o2Yҡ,J}lL~jer 7>mB52P;@XE %ｼ ,. />j9uAǤ,<3ĩxw@ѦVCoP e̸s%0eO 'm㦑klթ)aP<>;nu'&L!i\ABL娪X5P le`ІC(WT*vq<3Ȗ/!av㎾fRx$ APZT8TfW{:.nA>ScCW1p + $%7EkrD@C픑u,4q<)qogҾ˅[Hlq-b2*mvHȶh5pOetO#uHq#ϻgUP|soƊ /ǝ\I^n'B + hE1 =Z]}b6"ynfy000  *H  010Utest.localhost0 261129150039Z 261129170039Z010Utest.localhost0"0  *H 0 + B5_b,܁Dag5{-|1]R8 + 7?ja?FRb１~4<"6OqI-K_U=ja*hK`+ȶT1Ñ1%~U*7x@m uc+C7ꙇf&C|dYuӳ_NTj iOl6FdOC Tu&ŢT5,]ٙ !ӯ7n: 00U0test.localhost0  *H  A*H~*?>eތs@ ``V?Z1B:&S˓=Cno2F /3y#QHPlu Gd7#3Dm~zѬt,%R?3SdJ0 + = /̺C;qM(0I100010Utest.localhost0+0 + `HE 1190 *H  1  *H 0 *H  1 261129160039Z0  + `HE 1g[zH9e[h_0# *H  17 aEBIݢ0, + `HE 1984I+Ms/7dBpoaqVvfQEfq9CuKA=0  *H 0}xB#wSTT^'H:ES + ͦo:=c:I՗4l\E] ;4X5?hN#|̵'jKTnakkjE9,MUGvO2h T@ke4*w6ɖSQ,[@҃L~2x4PE{0=v2MQ,-,@d + AoEɮ9z +time="2026-11-30T06:00:39+14:00" level=info certificate=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 duration=12.401277ms duration-ns=12401277 fields.time="2026-11-30T06:00:39+14:00" issuer="Step E2E | SCEP Regular Intermediate CA" method=GET name=ca path="/scep/scep?operation=PKIOperation&message=MIIJQAYJKoZIhvcNAQcCoIIJMTCCCS0CAQExCTAHBgUrDgMCGjCCBEAGCSqGSIb3DQEHAaCCBDEEggQtMIIEKQYJKoZIhvcNAQcDoIIEGjCCBBYCAQAxggFZMIIBVQIBADA%2FMCoxKDAmBgNVBAMMH1N0ZXAgRTJFIHwgU0NFUCBSZWd1bGFyIFJvb3QgQ0ECEQDE%2BG5idC0uyg3V%2BsYHxjUsMAsGCSqGSIb3DQEBAQSCAQCkO4ZoFT1HXI5PCPblVjqaoqQwahOG3dPJ%2BBNMXx6ukJQv9Q54pSh29x3DidatZ1NI1JrbHikPvnMLoa2vie8kxwXAB%2B0LNiXigzAZGlnZJ6dx9ykRPYIAwCjLEgEVlWw14GKtFLqV3b%2FuXK%2FgiFUXcU9DhLwlLu2TLyoGOpRIUMBONvG23WqRrzcJPaR%2FLHg0QZ8306f6PuBrHVwOVk1DyfVJllAGFk2K0fPuIgmShSgOKLgY%2B3kX5%2FmXp99HZ44LHguTZ1Zuv567Ldr5QOLBwm4YQq%2BeRGNLIPSIx37PibtvxNu9jcIY2i%2BXgyYmmsDiOi5oPLmoCydxmo7LbBDNMIICsgYJKoZIhvcNAQcBMBEGBSsOAwIHBAgFH%2B1YQl5Fa4CCApC0WVkVt%2FDKGsckD6vQkc1bV7oKit5fBV8%2Fhf4oVIykaWn1SD5cVgYdKbcWd21eVWWHJGl4nNVbPNOEbNyZ4B8txgHMT9vjs6ChduIwDS5iV8%2FOOFtKNVunxZDM96i9V%2Bl19d3KgEL7Cm8yWb7bwL3%2F0P7SoSxKlH38xOZsTH4bamVy%2BAw32j5tQsGkHRA1MlA7y0BYwUX09gwl9O%2B9vPu6DCy2LiCrLxg8a%2FH1xbbopZWrm%2Bsg2k9ReiCHxeYcAq1%2Fpuy6uowm2xR24PLY%2BWd5fzQwb8pUwD4%2B1mo5sHXe2haYQZj%2Bx6Qsn7k8M7vEqXh3F8FA0aZWQxhvBlALFd7Bg2UUwgCh4u%2FMuHPEJbuEtfXbMGXETyCIvidt46aRaxu1bJPVqbjHHhwUAKEIKWFQPD65%2FdU7xvribnWQJya1TM7gIaOi1GlcQQGcgN9CTMX%2B5aiqgVi8NVALpeoWbIVlYInF0IbbQyiFV1T3ps0qdnHS%2Fho8MxsfyJYv2x6J%2FxAQ5SFhkfl2446%2B7Wbni1J4JAuQuYuq0fat2EFQsO5aFlSPBxv%2F2u342fo4VBcBZuxXstkRhtd7vjoubkGN4JoTPlNjmUNXMYqucNwKqggkJY43RWtyREBDpu2UkRGFgbF1LDTdcTyIGQMpqOFxb%2BTbZ9K%2BH8uFWwPiSLqeiWwGvXG6LfpiMiqqbXbB%2BJUWSMi22%2BGraKrKHd36NXBPot31iR5loHSSsE8jgdV1nr5IsLYOkNVx8RXb9q4Suo8j%2FaEdm8%2B7EJ%2BKgmdVUHxzb8aKkqMLyucvytbHnVz8x0m8ul5urCf8Qof3CrnEaEUxlyA9vZNa2cldixJ9vWI2InnupNJu6rj51flms4kHBa%2B1eaCCAs4wggLKMIIBsqADAgECAgEBMA0GCSqGSIb3DQEBCwUAMBkxFzAVBgNVBAMTDnRlc3QubG9jYWxob3N0MB4XDTI2MTEyOTE1MDAzOVoXDTI2MTEyOTE3MDAzOVowGTEXMBUGA1UEAxMOdGVzdC5sb2NhbGhvc3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp3EIFt581X%2BVi6SzcgcFE871h1v%2F2ZzWie8GmhYEt3xvMG3ypAjH7XVI4CjfPPwFqnfphBz%2FO%2B0bUUmK75e%2B8kfXwfo40E7fpPCI2T7yWcaZJvi1LX%2BqqVT2GpYLe%2BoVqYaPAKqnmaIUZ%2BedLEWAOzQGpK8sOyLZUMcORxzH6Jdp%2BrKxVoryHKqs3eOJAxPVtIHVjK6aOQ52TN%2BqZh%2FqP1x5m%2FyZDrJJ8vx%2FvZJ1Z2XXQ69OzX%2FFOEFRqCYhpuZFPbBCL%2FI3w4JwU84E2h7JG32RPQ9TPIPO47wlUhXUmq8Wi6FShvNLyNSwF213c2ZmP%2FI26tX8LIdOvr9w3bjoLAgMBAAGjHTAbMBkGA1UdEQQSMBCCDnRlc3QubG9jYWxob3N0MA0GCSqGSIb3DQEBCwUAA4IBAQCGh5X5oUEqAUja%2BwN%2B%2Fef6Kj8%2BZa2Hk96M9%2F3mc0CnnpMN5ItgFuywYOXbG1bJwK8%2FHFoxgxCima%2FPAULWOiZTy5MZycw9yeITQ25vMkaRIC8zyXnuoLwcEZW%2FI1HRE95IUGyidZQguveC30dkkDeF%2Bg4j%2BzM81k0sswUK9YBOHo2UD8gajUzBbsPe9rOHkmHXkrhVKpT3XtSeXq3gZ%2BM9sGwz20gEUd%2F8HIu1Mv5Ak38vF5ibLAOjPkQSoG2RfnoDFNEDs6aC0ayGEvGldCwPuSVSBxk%2Fqfja4zOxUxsTCB5k8UowoIwKPei%2FIC%2FMuq%2FXQ7U7%2BnGKTSgwzwJJ%2BMnaMYICBTCCAgECAQEwHjAZMRcwFQYDVQQDEw50ZXN0LmxvY2FsaG9zdAIBATAHBgUrDgMCGqCBwTASBgpghkgBhvhFAQkCMQQTAjE5MBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTI2MTEyOTE2MDAzOVowIAYKYIZIAYb4RQEJBTESBBBn4e5bekimlg85ZVv8aIlfMCMGCSqGSIb3DQEJBDEWBBSYpdY3BgxhRasdErAerkIeSczdojAsBgpghkgBhvhFAQkHMR4THDk4NEkrTXMvN2RCcG9hcVZ2ZlFFZnE5Q3VLQT0wCwYJKoZIhvcNAQEFBIIBADDt6hR98HjiveJC8oQjhHdTm1SHgFResSfISDpFU6EKzaZvvu7rtzqW5%2Fym4D1j9n8HOoBJ9Rjy1Zc05WzCBMMcsFwf2kWg410JgpABO8c0WOXFNaE%2F3um4aAPR%2Fk4CvZKGI6h8zLXWJ9xq3UviVMJutNjtq6aTYb0Va2uFaruznUUBijksj02auBBVR3ZP99UytmgJHFRA1muGu2U0ug8qdwg2EP3JlqRTvVGbLP2oWxDMQOa50oOdTM0El34y8e54NNVQRXvhmxnXE50wPXb%2FMk1RLIYtLKUa873p55RA8MPjZNvhCpimieDNDxCbQW9Fya4T6znR5MC65%2FJ6srY%3D" protocol=HTTP/2.0 provisioner=scep public-key="RSA 2048" referer= remote-address=127.0.0.1 request-id=8c252403-c024-42a1-b546-069b6bc2e224 sans="map[dns:[test.localhost]]" serial=245360601511039677368946310913415379793 size=3774 status=200 subject=test.localhost user-agent=Go-http-client/2.0 user-id= valid-from="2026-11-29T15:59:39Z" valid-to="2026-11-30T16:00:39Z" + common_test.go:309: 0 *H 01 0+0[ *H LH0D *H 50118040010Utest.localhost0  *H Q^nDǪu ZM3e5+FYڼj}w \Ykrjċe,,O/>jo + P|7udr4\˃ODž:\P̬Yv*;òaKFĠPT\sƍN:Ocg:{voލ.QBBz:²ۂplu6ޡb7]"(EUw͟>OԲcQG1ɵ |9Ib NZ'WY;q׀ˉoD ,1<1VH}]91R|귄fdNh ht p.gWՀBAbyLGի𤤼MDP_ mvmk e@ݛX57-2NdOQ8h(UO}3``'7tKrI6ȐsyfllJ4!&m|8:S1>rߢfT|4~B۟D jBLWWL0W^dR +Mv%+km*9 Z + sru1nyx)02!kب + 45 Q 2dJob}Hڤj8i43 uYIǮK\*͒2W<כH*a~$V-YإV0[L-qߑ$U:̼,48~ 7»ˈ$E6X^۝6K[)vBGUNWa(ޠn7=2 + aF $!ޯCBfgF&Q?YXj-Oq;B΋|A2&dU."h]=2=hI-FG;"1G8PiPR)}'6MZ՚NR =boLB%Nbre3%{h`X00kj K$`MQ0  *H  02100.U 'Step E2E | SCEP Regular Intermediate CA0 261129155939Z 261130160039Z010Utest.localhost0"0  *H 0 + B5_b,܁Dag5{-|1]R8 + 7?ja?FRb１~4<"6OqI-K_U=ja*hK`+ȶT1Ñ1%~U*7x@m uc+C7ꙇf&C|dYuӳ_NTj iOl6FdOC Tu&ŢT5,]ٙ !ӯ7n: 00U0U%0++0U.&B-tRTI8F0U#0%Ӛ@ ry#0U0test.localhost0 +d(@ 0  + scep0  *H  "&T"<5C-dۢr#w,}F%t, S{DlS^XZcJ@;`yF5S`* 5-IY4s xڷ2Wܝ@1noV@;2 fGFi4"!(TM]RQ>Ϧ7[:i\,|5]|q6H&*7GN_s?%,=#Epp+Z0M05nbt-. 5,0  *H  0*1(0&U Step E2E | SCEP Regular Root CA0 261129160038Z 261130160038Z02100.U 'Step E2E | SCEP Regular Intermediate CA0"0  *H 0 + S37d@30/aeʳUxfpjnk7:.O /*Ua7\ȓ>MBs0݄B+eӱWd[SEsY*zkTF_@> G^,>XASPtdyqBi7P|t84a8n8G++|Y"{"oG N-sqsxD2;IkK֢I8"DNSf0d0U0U00U%Ӛ@ ry#0U#0%Ӛ@ ry#0  *H  : ʪ{<-cuj@OϦI].@7NjK(ա.d;DK;"l6ʃK};sNu.-O׹ѼB%N`@Wh ;J5/XVcϰX2LfB($y]Wuߍ eT$YI+7K>z,rkXQ> +'F$%a$7!f-sy8B…b*.vkU 7\Uk ?,1Z0V0?0*1(0&U Step E2E | SCEP Regular Root CAnbt-. 5,0+0 `HE 130 - `HE 100 *H  1  *H 0 *H  1 251027093131Z0  - `HE 1Xh*3o}Qj0  - `HE 1Xh*3o}Qj0# *H  11ss\qFo0, - `HE 1wUBQLapbDzvG3L+CXdtoJSAGe7s=0  *H @D>1.U;B~JHj5_'j6/e!`zlkӬ=;\(&OeOy H·>\ҩWp IWuݻ*u1Ǹo +.8i"Fhr=l3>|-SM+p X^򧠧@~΀uhyqR - ԥ<;Oh蠏n)UؒDPm!dBSϳ*-o uF - a_ ---- PASS: TestIssuesCertificateUsingRegularSCEPConfiguration (3.07s) + `HE 100 *H  1  *H 0 *H  1 261129160039Z0  + `HE 1g[zH9e[h_0  + `HE 1g[zH9e[h_0# *H  1&LITA1Y"0, + `HE 1984I+Ms/7dBpoaqVvfQEfq9CuKA=0  *H .;.A + tٷp59RLt&yE׉@״FڇVDZq`{<-kpJ .`̱33V%öVHW!%$7A!ȋ6X,[&pb!d?CZa5c$l>ne Խ\O,S,bjDA~Ə*XUp4pfW/X)ӴXۜijV?A +--- PASS: TestIssuesCertificateUsingRegularSCEPConfiguration (3.14s) === RUN TestIssuesCertificateToEmulatedWindowsClientGo123 -2025/10/26 21:31:32 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 21:31:32 Starting Smallstep CLI/0000000-dev (linux/amd64) -2025/10/26 21:31:32 Documentation: https://u.step.sm/docs/ca -2025/10/26 21:31:32 Community Discord: https://u.step.sm/discord -2025/10/26 21:31:32 Config file: loaded from token -2025/10/26 21:31:32 The primary server URL is https://127.0.0.1:46883 -2025/10/26 21:31:32 Root certificates are available at https://127.0.0.1:46883/roots.pem -2025/10/26 21:31:32 Additional configured hostnames: [::1], localhost -2025/10/26 21:31:32 X.509 Root Fingerprint: e50d5e13406d92948e8a8bf09f46124ea18763f5cdc5b93feb5c04e548975807 -2025/10/26 21:31:32 Serving HTTPS on [::]:46883 ... -time="2025-10-26T21:31:33-12:00" level=info duration="37.103µs" duration-ns=37103 fields.time="2025-10-26T21:31:33-12:00" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=1db24449-e6e5-4ebf-b9ef-31cb001b4355 size=16 status=200 user-agent=step-http-client/1.0 user-id= -time="2025-10-26T21:31:33-12:00" level=info duration="42.449µs" duration-ns=42449 fields.time="2025-10-26T21:31:33-12:00" method=GET name=ca path="/scep/scep?operation=GetCACert&message=test" protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=7536adbc-e6ce-41c1-82ae-ac7218ed760d size=884 status=200 user-agent=Go-http-client/2.0 user-id= - common_test.go:204: 0p0XQ mb`/0  *H  0<1:08U 1Step E2E | SCEP Regular w/ Windows Client Root CA0 251027093132Z 251028093132Z0D1B0@U 9Step E2E | SCEP Regular w/ Windows Client Intermediate CA0"0  *H 0 - : 7(Rsي1 h"a._L)&EwugWr+Iŷ6˜ - ѝrG}HGM2#6vv1E 'UAMߘ[$wt)z,0 - %.6Y l5)|.M/!j H4_S$rG6&W|x }QOϪ-xPk%T4(C - ~Hb )E`Sa lf0d0U0U00U*WR" RщD0U#0*WR" RщD0  *H   S`ڇNg>tGh4laӰc?x+"͔zYe/Zq|f9^'u<0/.hǦBCԾh(iY3uD!0*-ZB~^Q/Œa|I - iQdB5L=!7VzO7tǩ'](/uw!ҙ(~諹`%ѝvO/^uޱkCE>fR0^RPi - common_test.go:436: 0  *H  z0 v1 0+0Q *H B>0: *H +0'1j0f0P0<1:08U 1Step E2E | SCEP Regular w/ Windows Client Root CAQ mb`/0  *H 4JmrN8r-D9BjGÑBA:P05c_TDUx Zg4CDKgVVQl} B} P^VnT+% 5>7D GN>~ut zn|gʘ;ZOW{\DcG[ǖ+7q2+D0N7U~qtRum̮V^4t?0 *H 0+DzE0_okhqSu@YqR5"TϨG^+6vzXTx=;R=j3$-;R6˜=>fᮬ^ꋀMsNbwX^n Bmytj-Љ>7|׃;^b5|ԴzD{+ǏU^p9+mn`඿ҚJ Z ВNf0pC?NkM;S_F>1ـ(?CJ - " sC*[ R07X+{^un=>4XYjGo-#B_BYe"t ށnP[êD";Uz)i2}"UvD- 8 0{C]{Ai7iؼ - qv?ؑ.|*CryQsdEEF ;O0_^;p6غ[f*xj]ϱ4ƏBk.4J.Fr3, ~bz&NwY_vp9XaD2sb5e4R!we ;t|~#e QCGIb)8vnK±!>ąD\v}K ( Lb R. - N&v"dk%[*\WcгHE@Pw%#x~n2fBl07g7,̩RLF wI %'r4 - %%琪)76~pzIF{AUXSZ0"+}Ȋ'l+ΒOq!F02hΕ2ߋu> 'P7&TDL^ pը4Q@X10 0)0$1"0 USCEP Protocol Certificate0+0 - `HE 1190 *H  1  *H 0 *H  1 251027093133Z0  - `HE 1DDL-bj0# *H  1F*c0lJ뫈)`]:x0, - `HE 1IjnGDwre5RIrQngpDUTemiVO4LY=0  *H @V]iW;rs<:._5>ȶXUSBMa2 =,dScA/YS=Qڄ 0 ’G7nD:뱹Jg,oT,ږl˜ - #KaF ׭ ƣOXO/ĜSs| - E@wg#';*jE?:keNEb8L̈ O4W}4ZUYN>a9#Z:1V!/[ϒguE&PA /bQNA\L@'=㾱Ta-11g*iypo_ZQ8{1x1("k\[t0 *H 0 `He*۠ wa*KЗTͲr>DĻN 逋nMt3&hK&ۜJCY'ySCt|X+6wq/sT cwv0l*O; @]Y A5OPUI$E_bzU'xG*#y mԏ.]|cѸ[i - YZםH`8 %ʞi(Lrv3T1c@<;T/c() - Ղot70%+0>ć 5J} - b3ܬC@Vǁw4Sȡf={kVKanϨ?y bdnbQB:3xb__ d, A)_Ut9f - Vj~&sW*^1ضA2-[v~k ᒭ*Z޲6uݣJC^zP-6A|,6ksTG[rv#~Oӣ?;q9p a^:ᰙJo=hk[H es1[2$?Kl!(ph<ai\;UTU$.~|aiwEOcp%z wi?| 7@@q/i~9?taD2sb5e4R!we ;t|~#e QCGIb)8vnK±!>ąD\v}K ( Lb*.T>ڡfu:o)Tz ]ALV6 %&y=G^#᱔IH#Z0ES> CvfOyI{P8^710FXx=Z9א8eym l\-Ls\Ы;FkcXy& 9pY3٫Q<0p0XQ mb`/0  *H  0<1:08U 1Step E2E | SCEP Regular w/ Windows Client Root CA0 251027093132Z 251028093132Z0D1B0@U 9Step E2E | SCEP Regular w/ Windows Client Intermediate CA0"0  *H 0 - : 7(Rsي1 h"a._L)&EwugWr+Iŷ6˜ - ѝrG}HGM2#6vv1E 'UAMߘ[$wt)z,0 - %.6Y l5)|.M/!j H4_S$rG6&W|x }QOϪ-xPk%T4(C - ~Hb )E`Sa lf0d0U0U00U*WR" RщD0U#0*WR" RщD0  *H   S`ڇNg>tGh4laӰc?x+"͔zYe/Zq|f9^'u<0/.hǦBCԾh(iY3uD!0*-ZB~^Q/Œa|I - iQdB5L=!7VzO7tǩ'](/uw!ҙ(~諹`%ѝvO/^uޱkCE>fR0^RPi1k0g0P0<1:08U 1Step E2E | SCEP Regular w/ Windows Client Root CAQ mb`/0+0 +2026/11/30 06:00:41 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:00:41 Starting Smallstep CLI/0000000-dev (linux/amd64) +2026/11/30 06:00:41 Documentation: https://u.step.sm/docs/ca +2026/11/30 06:00:41 Community Discord: https://u.step.sm/discord +2026/11/30 06:00:41 Config file: loaded from token +2026/11/30 06:00:41 The primary server URL is https://127.0.0.1:37535 +2026/11/30 06:00:41 Root certificates are available at https://127.0.0.1:37535/roots.pem +2026/11/30 06:00:41 Additional configured hostnames: [::1], localhost +2026/11/30 06:00:41 X.509 Root Fingerprint: fec04422e0f9355b16fc5037e90d63723d5d8737993557793d634a72e164faa4 +2026/11/30 06:00:41 Serving HTTPS on [::]:37535 ... +time="2026-11-30T06:00:42+14:00" level=info duration="34.811µs" duration-ns=34811 fields.time="2026-11-30T06:00:42+14:00" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=9d0c57fc-11e0-4cad-88e2-dfbc82ed5cb0 size=16 status=200 user-agent=step-http-client/1.0 user-id= +time="2026-11-30T06:00:42+14:00" level=info duration="62.218µs" duration-ns=62218 fields.time="2026-11-30T06:00:42+14:00" method=GET name=ca path="/scep/scep?operation=GetCACert&message=test" protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=2ccb8e38-aae2-4fab-9efc-0a6a7b29d547 size=885 status=200 user-agent=Go-http-client/2.0 user-id= + common_test.go:204: 0q0Y0Gaɔ+x0  *H  0<1:08U 1Step E2E | SCEP Regular w/ Windows Client Root CA0 261129160041Z 261130160041Z0D1B0@U 9Step E2E | SCEP Regular w/ Windows Client Intermediate CA0"0  *H 0 + jxQ`F}/2K,?4ǨmTyF7Rg ̃S#my!#Rnrbث᢬c`.i-j03B + MsGeʂpB#R$THDh0!K= "a77 \h#݅0OQ%.O.ze 7GvK apG (^R❱;v𳾪+[4XfQɚ^f0d0U0U00U:M~|oH0U#0:M~|oH0  *H  ;(uzR* ťêLڈvq1qLgި?B3нw4sTOzfhZ&*=3'#`S` 7fcv2Wm 1w%Ī_x[ryjKf?1"?Cb-Zz¯p} J} 6[KMMYQ(gQVc^pKVE0hYJeZPN + jʀӥuw1ž@X ?[+q + common_test.go:436: 0  *H  {0 w1 0+0R *H C?0; *H ,0(1k0g0Q0<1:08U 1Step E2E | SCEP Regular w/ Windows Client Root CA0Gaɔ+x0  *H +puMRa^%JSAu;Qql3P_ύ'%[d2\%|b DUy4eKwpE0v?<{lP zՉ wyqU NxVǙ:2? wD1PrYylFeE«%ho[A(ԩנrPRw_ K{s-:sF,QrH~q:< rgXvƄSI"o + x&0 *H 0+TS޾-z>TСlEPCkH*~Gܵ!5?ȸkehD~;6j+(QMRIi(L?:;D + MV69-u?8 y1*H 6?\h,SloL2#V)j̄eR+{hL+"9!ʱ)2d4 56GB.[V1rc ~,4>MNVPǭ,'JiS*sq`~*4\Tnʇ[L;P6{-5|>FO~|.#|e[&`%D&^EkZC@v UXM&p gOܜRr/cb9Et۲ی0fLY;߮|unzDlWrzӣ%MYMk0{)2tws@yUmQ>{;pn3% o䓏&2eVns- + /mvܖ `n%: 6L kN(%u/e5UpTgN$(Ha)ZnwRHq\ bj*yZT<|&ܩ%PIHLyUrE00ߠ0  *H 0$1"0 USCEP Protocol Certificate0 261129150043Z 271129160043Z0$1"0 USCEP Protocol Certificate0"0  *H 0 + ZRJT"/xvqژ|%o"9BY>ԫzQ k!7|-?e.lqI|AhkP_9.FLƇv]hzx%]*ЩPbrжõdٷ50<RW^ B[򯈛enxQ _xq/0\PJJ4!҄)4020U#0bla0U.,`nD JgVsQ0  *H wq4 k[a)H̜l<ڒcI+^jva.‘D#Wm#R",ٌpӟyvg7#kT[TmDUuFPKΝNgֵ==x'is۳5&%)@o!q>5RV+@<%yL}@pX-Y[ ;lw + t-)4@ W$w'_!I(10 0)0$1"0 USCEP Protocol Certificate0+0 + `HE 1190 *H  1  *H 0 *H  1 261129160043Z0  + `HE 1@RhbkqCx0# *H  1)y{=Hi|}<{ٸ0, + `HE 1yjGRMfA+w2LA47U15vJjqzmn7wc=0  *H F× QcyI}  i-boSah풋}t/0M6t4 hr_ :pDtH=SY[&;IyDya;|X辄 + ~1XM $,Sռ|GPȒ7hM>4y?#~M.fE`!FXvjAoT&Gdcq^ű[RWare)ttĨoiyJwkwA ) +time="2026-11-30T06:00:43+14:00" level=info certificate="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" duration=13.227187ms duration-ns=13227187 fields.time="2026-11-30T06:00:43+14:00" issuer="Step E2E | SCEP Regular w/ Windows Client Intermediate CA" method=GET name=ca path="/scep/scep?operation=PKIOperation&message=MIIJigYJKoZIhvcNAQcCoIIJezCCCXcCAQExCTAHBgUrDgMCGjCCBFIGCSqGSIb3DQEHAaCCBEMEggQ%2FMIIEOwYJKoZIhvcNAQcDoIIELDCCBCgCAQAxggFrMIIBZwIBADBRMDwxOjA4BgNVBAMMMVN0ZXAgRTJFIHwgU0NFUCBSZWd1bGFyIHcvIFdpbmRvd3MgQ2xpZW50IFJvb3QgQ0ECEQDq4zD3uUf1YRG5AcmU1Ct4MAsGCSqGSIb3DQEBAQSCAQArcHVN8B2NUmHLXtMlj7VK5N5TQbr7HIL3dTuaUXEUbDNQtZ1f88%2BNJwYlW%2BhkBbAytbPVGwFcJQOofGKb%2FxYJjER%2FDpmJ2QVVeYwPNMoGZUt3cOtFMHaFP%2Bb5PJUce8D%2BbFANgIi5etWJC%2Ft3eehxmo1VCRAeTnhWyceZkvE654EbH9HcMtr9jD8Jd0SwGBPxMVByWRYYjbN5bEZloUWMwqslaNrkb6%2BjW0EXKKXUqbYSAdegchNQUt70d18LSwKmoeN7cy06c0Ysppcbq49RcotIfqnYxt4R28Zx%2BTrmPPgM63JnF4qtWMGnhLbydsaEU0mWhawih28KtXiqhb0mMIICsgYJKoZIhvcNAQcBMBEGBSsOAwIHBAhU0QfsEZLYFoCCApATGwZT%2Bt6%2BLXq1PsrgmA7kVNChbKVFuwKvuJhQ3UMGlWuAuEiFKvoS9t7BfsRHkdy14CGINYI%2Fla7VyLjb9cRrF2UXjIoEaER%2BCNzWO6s2wxBqFMgrKKJRTYzZUtva%2FLPkSZ8baQ%2BeKLKLTKnZFD865zv0DuDAoEQK6pJN58fo6wVWNjnuLYd12z%2BdOO0e95cMeRTX6jHXKrqm%2BQJIrCDy8rjaNrvOP1ybGN7Z6x6yaA8sU4sDbP2yb6Kh9UyPEDKkI5pWmykcgmrMhP3fZeDrGo6%2B7Y9Si%2BwrznsasrtoTNnZGCsiOez4IcqxKTJkNKIalQw1NtFHmkIuW1blnvkxw3LJYw3pG%2F70fv6b2yza%2FjTEPrT7TRal%2FU5WUN3Hresswconz0ppnaTIUwKcKo38H5FzcWCXfiqUr930NFxUbgjnyodbTBc7swYWr5GfBlA2A8x7Lbv%2B5DV8PstGT6J%2BfJ8uI3y4HWUFWxuKtCZg2RKcvSVECNYmooKrXkWTa1pD9EB2GPiVIFXGEYZYTSZwlyBnf7hPk9ycythSctbN1g4vY6RiGjnyzUV027LbjDBmTMXmWTsQ3658dW56y0RsHu%2BJogRXh%2FCIFZNy9Ph64dTToyVNFpuiBFnlTWuwMBvWe9jwCJm1KTKUdMUZ03dzQHlVbVHaPnvxO3BuMyXXIAWpb9nkk4%2F8DhW34Z7w5CYyxttlVsXsbuFzLQoDL20WxBiArHbclgTS7J0L%2B2BuJd46DInZ6OM2TOkJo2tOxygldS9loDVVcIwSVLhnxU4k1dwogxBIYSl%2FoFq3q5lulHcdUrBIhXGvXPgM9GLJau0qeZta%2FO6bVDyi9nwm3Kkl1VBJAEhMefixVXKPgMnyRaCCAvswggL3MIIB36ADAgECAgEBMA0GCSqGSIb3DQEBBQUAMCQxIjAgBgNVBAMTGVNDRVAgUHJvdG9jb2wgQ2VydGlmaWNhdGUwHhcNMjYxMTI5MTUwMDQzWhcNMjcxMTI5MTYwMDQzWjAkMSIwIAYDVQQDExlTQ0VQIFByb3RvY29sIENlcnRpZmljYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1pSSqdUIpAveLWf4nZx2ph8qrol8W8iOUJZHj7Uq%2BsCeuRR4a0Y9OHKC5prg8shuTcfwxu6fKkbHi0%2FsmUubNBx5aPnSfKR5QN8QWgea1C4X4E5CKouv%2F1GqUy4xoeOduddaHp4pSVd4IcqG%2FjrrdCpBVDoYqCOctC2urzEw7X%2B1GTZtzxU5O73eI2vQYDMyPpUlGJXHTWUGhPdecvCn8NcHj7iNQT9%2B4D90TA88n%2Bn8MVSj4hX3PFejA3KQvGpgluHG%2FKviJtlbrCbGnimoFGyqdwODeFfhOwP8x8HiQKzmfDy3HiEcZGDLzBcDlCsz0rWzUqJNCHShOf96ckp8QIDAQABozQwMjARBgNVHSMBAf8EBzAFgANibGEwHQYDVR0OBBYEFMwuLGCpbkSE1gxK3mdWc%2F%2BdURqVMA0GCSqGSIb3DQEBBQUAA4IBAQAUd3HrBACw6xA0DGukW2GZKUjMnOlsuf48mOQf2pKiY0krxMde96Zq8Xb1nhKok2GqLsKRRCPHBRpX3Pdt1PjhtPLwI1IiFCzZjPpwF%2BmZ05%2FLErJ5dqWy9L9nN4IjmrRrVFt%2FxvxUzgdtvhJE9M5VFKgQFv%2FMdcfORlCQkkuezp1OZ9a1Bj09eOUnaYONg5vxc%2BgEmduz9jWGBasmJY8p%2BvZAb5PxIbuucT6omDVS1VYdswGXK6tAPCV5HvwdiZJMfcL%2FqUDI53DrDq6zWBvGLdFZsFsLO6lswncNCuDhDnS1LSniNOeT%2FkALiuRXgo%2F7JBTIdycBsJnbXyFJKBkAMYICEDCCAgwCAQEwKTAkMSIwIAYDVQQDExlTQ0VQIFByb3RvY29sIENlcnRpZmljYXRlAgEBMAcGBSsOAwIaoIHBMBIGCmCGSAGG%2BEUBCQIxBBMCMTkwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjYxMTI5MTYwMDQzWjAgBgpghkgBhvhFAQkFMRIEEEAGqaThUmjvl2JrxnFD%2BngwIwYJKoZIhvcNAQkEMRYEFCl51%2Bt7Dz1IaXyWtn2bkjyxe9m4MCwGCmCGSAGG%2BEUBCQcxHhMceWpHUk1mQSt3MkxBNDdVMTV2Smpxem1uN3djPTALBgkqhkiG9w0BAQUEggEARpzW5dXDlwxRxWOo53lJfYwNFyCFlQCsmmkt0WJvU2GZaIuc7ZKL7YYPfXQvsNfkhjCTTTZ07s80DWjNEHIOjF%2Ba9AuMOtFwEUS%2FdKW%2BSD1TucfK%2Fr7V%2B5rL45NZW%2FYmkTuEpxGbSXlEFHmQo2HjuDt8WP3ovoQKEH74MZ3S71hNCZAkoILrLBLSzFO%2F1bwZfPSRR1C2yJI3GmiATQIGPpo0qZXHeT8bgszc0MHYI36vTS7mZkVgIQjK3Eb1WHbP5t1qQW9Unrq0DibCFs1HZGNxj9PcXg4agsWxW1KgV6dhjHJlKXQGDvqRdLvEqA6Qn2%2FlaZeWeaNKd2t3rUEgKQ%3D%3D" protocol=HTTP/2.0 provisioner=scep public-key="RSA 2048" referer= remote-address=127.0.0.1 request-id=a490f862-f2b4-4e9d-b225-585f2c66383d sans="map[dns:[test.localhost]]" serial=150081259678995364331993174089373713035 size=3872 status=200 subject=test.localhost user-agent=Go-http-client/2.0 user-id= valid-from="2026-11-29T15:59:43Z" valid-to="2026-11-30T16:00:43Z" + common_test.go:459: 0 *H  0 1 0+0v *H gc0_ *H P0L1C0?0)0$1"0 USCEP Protocol Certificate0  *H D$3H # 夁1̫>}vug@_ObV8OW|#Trp!R~=b7$f@g4MMâ0oTQ}}+UѴgp֏K9H)Nt| `r\,#z!GW׸vTmϩK3 Ɉ;Y,驃c͋ F\v"ݱhbcj@Ƿǐ'%2}u XxjbP w\٘,\(O4Fm$R!.ܱD$2ܻؒRR;15$談IE[ϲW o+z7]Ldc~P;wݜl!.{ AYv2F k7EPṲ۽ (ԼQn %Jɓ?tK$~mua + _h{;5R"\+Y(_3X D~e,ڷ^ + `[oȹ *5ƢOB4-K+ 01G:Ҋ J+;'N4a!(}A^>YR#O﫭*x~JLh ;g+aӂR.8.T_GyB׉?Cj;Ov\FU'vުg=+h:5r1ڮs1=ЗdFX2$~g`)%̓nt>厩a|svHn]P3`ŇL~Cp,m{8ԫzQ k!7|-?e.lqI|AhkP_9.FLƇv]hzx%]*ЩPbrжõdٷ50<RW^ B[򯈛enxQ _xq/0\PJJ4!҄)00U0U%0++0U.,`nD JgVsQ0U#0:M~|oH0U0test.localhost0 +d(@ 0  + scep0  *H  #? gBUG{ kj>/|su60`@D'+t=?|&a}xHGkBYr yBq_sW`uƙmz+bd{Aj@T|M !C_7vۛ /gS=p﫾Gb<2M'\zz qjaR]Ȅ# O19C˧ ,e]y%55D5[!&[Yy|t#~b67sg>˸6^LӊPqfWN.iKl'nr6"e[& Tj*΢JM2t - &Ȇqbګyp(rRM ---- PASS: TestIssuesCertificateToEmulatedWindowsClientGo123 (2.69s) + `HE 100 *H  1  *H 0 *H  1 261129160043Z0  + `HE 1@RhbkqCx0  + `HE 1@RhbkqCx0# *H  1(hA#L+Qif0, + `HE 1yjGRMfA+w2LA47U15vJjqzmn7wc=0  *H :-M + ’TJw*ܩѦkl=&j5kZTLl@ H Ì/0 pmE_*^!r0T5x"+* T8xGci3 g + |}h[`[b9O6IwV_}X#MU%Lnrw#㷃hu"/d + ,TmM;.:;-q/mdg1/ +--- PASS: TestIssuesCertificateToEmulatedWindowsClientGo123 (3.84s) PASS -ok github.com/smallstep/certificates/test/integration/scep 15.720s +ok github.com/smallstep/certificates/test/integration/scep 15.970s ? github.com/smallstep/certificates/test/integration/scep/internal/x509 [no test files] === RUN TestNewRequestBody -=== RUN TestNewRequestBody/SSH_Certificate_Request -=== RUN TestNewRequestBody/SSH_Certificate === RUN TestNewRequestBody/X5C_Certificate === RUN TestNewRequestBody/fail/X5C_Certificate === RUN TestNewRequestBody/Permanent_Identifier === RUN TestNewRequestBody/X509_Certificate_Request === RUN TestNewRequestBody/X509_Certificate +=== RUN TestNewRequestBody/SSH_Certificate_Request +=== RUN TestNewRequestBody/SSH_Certificate --- PASS: TestNewRequestBody (0.00s) - --- PASS: TestNewRequestBody/SSH_Certificate_Request (0.00s) - --- PASS: TestNewRequestBody/SSH_Certificate (0.00s) --- PASS: TestNewRequestBody/X5C_Certificate (0.00s) --- PASS: TestNewRequestBody/fail/X5C_Certificate (0.00s) --- PASS: TestNewRequestBody/Permanent_Identifier (0.00s) --- PASS: TestNewRequestBody/X509_Certificate_Request (0.00s) --- PASS: TestNewRequestBody/X509_Certificate (0.00s) + --- PASS: TestNewRequestBody/SSH_Certificate_Request (0.00s) + --- PASS: TestNewRequestBody/SSH_Certificate (0.00s) PASS -ok github.com/smallstep/certificates/webhook 0.007s +ok github.com/smallstep/certificates/webhook 0.009s timeout 5m dh_auto_test -- -run "Test_newHTTPClient|TestPKI_GenerateConfig|TestDB_GetDpopToken|TestDB_CreateDpopToken|TestDB_GetOidcToken|TestDB_CreateOidcToken|TestCustomTemplateOptions" - cd _build && go test -vet=off -v -p 40 -run Test_newHTTPClient\|TestPKI_GenerateConfig\|TestDB_GetDpopToken\|TestDB_CreateDpopToken\|TestDB_GetOidcToken\|TestDB_CreateOidcToken\|TestCustomTemplateOptions github.com/smallstep/certificates/acme github.com/smallstep/certificates/acme/api github.com/smallstep/certificates/acme/db/nosql github.com/smallstep/certificates/acme/wire github.com/smallstep/certificates/api github.com/smallstep/certificates/api/log github.com/smallstep/certificates/api/models github.com/smallstep/certificates/api/read github.com/smallstep/certificates/api/render github.com/smallstep/certificates/authority github.com/smallstep/certificates/authority/admin github.com/smallstep/certificates/authority/admin/api github.com/smallstep/certificates/authority/admin/db/nosql github.com/smallstep/certificates/authority/administrator github.com/smallstep/certificates/authority/config github.com/smallstep/certificates/authority/internal/constraints github.com/smallstep/certificates/authority/policy github.com/smallstep/certificates/authority/poolhttp github.com/smallstep/certificates/authority/provisioner github.com/smallstep/certificates/authority/provisioner/gcp github.com/smallstep/certificates/authority/provisioner/wire github.com/smallstep/certificates/ca github.com/smallstep/certificates/ca/client github.com/smallstep/certificates/ca/identity github.com/smallstep/certificates/cas github.com/smallstep/certificates/cas/apiv1 github.com/smallstep/certificates/cas/softcas github.com/smallstep/certificates/cas/stepcas github.com/smallstep/certificates/commands github.com/smallstep/certificates/db github.com/smallstep/certificates/errs github.com/smallstep/certificates/internal/cast github.com/smallstep/certificates/internal/httptransport github.com/smallstep/certificates/internal/metrix github.com/smallstep/certificates/internal/userid github.com/smallstep/certificates/logging github.com/smallstep/certificates/middleware/requestid github.com/smallstep/certificates/monitoring github.com/smallstep/certificates/pki github.com/smallstep/certificates/policy github.com/smallstep/certificates/scep github.com/smallstep/certificates/scep/api github.com/smallstep/certificates/server github.com/smallstep/certificates/templates github.com/smallstep/certificates/test/integration github.com/smallstep/certificates/test/integration/scep github.com/smallstep/certificates/test/integration/scep/internal/x509 github.com/smallstep/certificates/webhook + cd _build && go test -vet=off -v -p 42 -run Test_newHTTPClient\|TestPKI_GenerateConfig\|TestDB_GetDpopToken\|TestDB_CreateDpopToken\|TestDB_GetOidcToken\|TestDB_CreateOidcToken\|TestCustomTemplateOptions github.com/smallstep/certificates/acme github.com/smallstep/certificates/acme/api github.com/smallstep/certificates/acme/db/nosql github.com/smallstep/certificates/acme/wire github.com/smallstep/certificates/api github.com/smallstep/certificates/api/log github.com/smallstep/certificates/api/models github.com/smallstep/certificates/api/read github.com/smallstep/certificates/api/render github.com/smallstep/certificates/authority github.com/smallstep/certificates/authority/admin github.com/smallstep/certificates/authority/admin/api github.com/smallstep/certificates/authority/admin/db/nosql github.com/smallstep/certificates/authority/administrator github.com/smallstep/certificates/authority/config github.com/smallstep/certificates/authority/internal/constraints github.com/smallstep/certificates/authority/policy github.com/smallstep/certificates/authority/poolhttp github.com/smallstep/certificates/authority/provisioner github.com/smallstep/certificates/authority/provisioner/gcp github.com/smallstep/certificates/authority/provisioner/wire github.com/smallstep/certificates/ca github.com/smallstep/certificates/ca/client github.com/smallstep/certificates/ca/identity github.com/smallstep/certificates/cas github.com/smallstep/certificates/cas/apiv1 github.com/smallstep/certificates/cas/softcas github.com/smallstep/certificates/cas/stepcas github.com/smallstep/certificates/commands github.com/smallstep/certificates/db github.com/smallstep/certificates/errs github.com/smallstep/certificates/internal/cast github.com/smallstep/certificates/internal/httptransport github.com/smallstep/certificates/internal/metrix github.com/smallstep/certificates/internal/userid github.com/smallstep/certificates/logging github.com/smallstep/certificates/middleware/requestid github.com/smallstep/certificates/monitoring github.com/smallstep/certificates/pki github.com/smallstep/certificates/policy github.com/smallstep/certificates/scep github.com/smallstep/certificates/scep/api github.com/smallstep/certificates/server github.com/smallstep/certificates/templates github.com/smallstep/certificates/test/integration github.com/smallstep/certificates/test/integration/scep github.com/smallstep/certificates/test/integration/scep/internal/x509 github.com/smallstep/certificates/webhook testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/acme 0.019s [no tests to run] +ok github.com/smallstep/certificates/acme 0.074s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/acme/api 0.030s [no tests to run] +ok github.com/smallstep/certificates/acme/api 0.074s [no tests to run] === RUN TestDB_GetDpopToken - wire_test.go:28: - Error Trace: /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:28 + wire_test.go:45: + Error Trace: /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:45 /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:104 Error: Received unexpected error: badgerv2 database not supported github.com/smallstep/nosql.New /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/nosql/nosql.go:65 - github.com/smallstep/certificates/acme/db/nosql.TestDB_GetDpopToken.func1 - /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:27 + github.com/smallstep/certificates/acme/db/nosql.TestDB_GetDpopToken.func2 + /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:44 github.com/smallstep/certificates/acme/db/nosql.TestDB_GetDpopToken /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:104 testing.tRunner @@ -11245,6 +11265,8 @@ Test: TestDB_GetDpopToken --- FAIL: TestDB_GetDpopToken (0.00s) === RUN TestDB_CreateDpopToken +=== RUN TestDB_CreateDpopToken/fail/db.Save +=== NAME TestDB_CreateDpopToken wire_test.go:157: Error Trace: /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:157 /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:182 @@ -11262,18 +11284,17 @@ /usr/lib/go-1.24/src/runtime/asm_amd64.s:1700 Test: TestDB_CreateDpopToken --- FAIL: TestDB_CreateDpopToken (0.00s) + --- PASS: TestDB_CreateDpopToken/fail/db.Save (0.00s) === RUN TestDB_GetOidcToken -=== RUN TestDB_GetOidcToken/fail/db.Get -=== NAME TestDB_GetOidcToken - wire_test.go:270: - Error Trace: /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:270 + wire_test.go:233: + Error Trace: /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:233 /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:293 Error: Received unexpected error: badgerv2 database not supported github.com/smallstep/nosql.New /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/nosql/nosql.go:65 - github.com/smallstep/certificates/acme/db/nosql.TestDB_GetOidcToken.func4 - /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:269 + github.com/smallstep/certificates/acme/db/nosql.TestDB_GetOidcToken.func2 + /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:232 github.com/smallstep/certificates/acme/db/nosql.TestDB_GetOidcToken /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:293 testing.tRunner @@ -11282,7 +11303,6 @@ /usr/lib/go-1.24/src/runtime/asm_amd64.s:1700 Test: TestDB_GetOidcToken --- FAIL: TestDB_GetOidcToken (0.00s) - --- PASS: TestDB_GetOidcToken/fail/db.Get (0.00s) === RUN TestDB_CreateOidcToken === RUN TestDB_CreateOidcToken/fail/db.Save === NAME TestDB_CreateOidcToken @@ -11305,62 +11325,62 @@ --- FAIL: TestDB_CreateOidcToken (0.00s) --- PASS: TestDB_CreateOidcToken/fail/db.Save (0.00s) FAIL -FAIL github.com/smallstep/certificates/acme/db/nosql 0.032s +FAIL github.com/smallstep/certificates/acme/db/nosql 0.066s testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/acme/wire 0.008s [no tests to run] +ok github.com/smallstep/certificates/acme/wire 0.025s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/api 0.025s [no tests to run] +ok github.com/smallstep/certificates/api 0.061s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/api/log 0.007s [no tests to run] +ok github.com/smallstep/certificates/api/log 0.018s [no tests to run] ? github.com/smallstep/certificates/api/models [no test files] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/api/read 0.009s [no tests to run] +ok github.com/smallstep/certificates/api/read 0.032s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/api/render 0.007s [no tests to run] +ok github.com/smallstep/certificates/api/render 0.037s [no tests to run] === RUN Test_newHTTPClient -2025/10/26 21:31:51 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:01:13 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN Test_newHTTPClient/SystemCertPool http_client_test.go:72: Error Trace: /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/authority/http_client_test.go:72 Error: Received unexpected error: - Get "https://smallstep.com": dial tcp: lookup smallstep.com on [::1]:53: read udp [::1]:59846->[::1]:53: read: connection refused + Get "https://smallstep.com": dial tcp: lookup smallstep.com on [::1]:53: read udp [::1]:39743->[::1]:53: read: connection refused Test: Test_newHTTPClient/SystemCertPool === RUN Test_newHTTPClient/LocalCertPool === RUN Test_newHTTPClient/LocalCertPool/DefaultClient -2025/10/26 21:31:51 http: TLS handshake error from 127.0.0.1:44580: remote error: tls: bad certificate +2026/11/30 06:01:13 http: TLS handshake error from 127.0.0.1:56866: remote error: tls: bad certificate === RUN Test_newHTTPClient/custom_transport ---- FAIL: Test_newHTTPClient (0.09s) +--- FAIL: Test_newHTTPClient (0.27s) --- FAIL: Test_newHTTPClient/SystemCertPool (0.00s) --- PASS: Test_newHTTPClient/LocalCertPool (0.01s) --- PASS: Test_newHTTPClient/LocalCertPool/DefaultClient (0.00s) --- PASS: Test_newHTTPClient/custom_transport (0.00s) FAIL -FAIL github.com/smallstep/certificates/authority 0.114s +FAIL github.com/smallstep/certificates/authority 0.306s ? github.com/smallstep/certificates/authority/admin [no test files] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/authority/admin/api 0.029s [no tests to run] +ok github.com/smallstep/certificates/authority/admin/api 0.068s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/authority/admin/db/nosql 0.026s [no tests to run] +ok github.com/smallstep/certificates/authority/admin/db/nosql 0.040s [no tests to run] ? github.com/smallstep/certificates/authority/administrator [no test files] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/authority/config 0.021s [no tests to run] +ok github.com/smallstep/certificates/authority/config 0.054s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/authority/internal/constraints 0.014s [no tests to run] +ok github.com/smallstep/certificates/authority/internal/constraints 0.041s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/authority/policy 0.020s [no tests to run] +ok github.com/smallstep/certificates/authority/policy 0.035s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/authority/poolhttp 0.008s [no tests to run] +ok github.com/smallstep/certificates/authority/poolhttp 0.023s [no tests to run] === RUN TestCustomTemplateOptions === RUN TestCustomTemplateOptions/ok === RUN TestCustomTemplateOptions/okIID @@ -11391,53 +11411,54 @@ --- PASS: TestCustomTemplateOptions/fail (0.00s) --- PASS: TestCustomTemplateOptions/failTemplateData (0.00s) FAIL -FAIL github.com/smallstep/certificates/authority/provisioner 0.042s +FAIL github.com/smallstep/certificates/authority/provisioner 0.069s testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/authority/provisioner/gcp 0.019s [no tests to run] +ok github.com/smallstep/certificates/authority/provisioner/gcp 0.024s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/authority/provisioner/wire 0.013s [no tests to run] +ok github.com/smallstep/certificates/authority/provisioner/wire 0.028s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/ca 0.028s [no tests to run] +ok github.com/smallstep/certificates/ca 0.104s [no tests to run] ? github.com/smallstep/certificates/ca/client [no test files] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/ca/identity 0.013s [no tests to run] +ok github.com/smallstep/certificates/ca/identity 0.068s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/cas 0.008s [no tests to run] +ok github.com/smallstep/certificates/cas 0.031s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/cas/apiv1 0.006s [no tests to run] +ok github.com/smallstep/certificates/cas/apiv1 0.019s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/cas/softcas 0.011s [no tests to run] +ok github.com/smallstep/certificates/cas/softcas 0.035s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/cas/stepcas 0.829s [no tests to run] +ok github.com/smallstep/certificates/cas/stepcas 1.897s [no tests to run] ? github.com/smallstep/certificates/commands [no test files] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/db 0.015s [no tests to run] +ok github.com/smallstep/certificates/db 0.070s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/errs 0.007s [no tests to run] +ok github.com/smallstep/certificates/errs 0.030s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/internal/cast 0.008s [no tests to run] +ok github.com/smallstep/certificates/internal/cast 0.022s [no tests to run] ? github.com/smallstep/certificates/internal/httptransport [no test files] ? github.com/smallstep/certificates/internal/metrix [no test files] ? github.com/smallstep/certificates/internal/userid [no test files] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/logging 0.006s [no tests to run] +ok github.com/smallstep/certificates/logging 0.021s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/middleware/requestid 0.008s [no tests to run] +ok github.com/smallstep/certificates/middleware/requestid 0.025s [no tests to run] ? github.com/smallstep/certificates/monitoring [no test files] === RUN TestPKI_GenerateConfig +=== RUN TestPKI_GenerateConfig/ok/simple === RUN TestPKI_GenerateConfig/ok/with-acme === RUN TestPKI_GenerateConfig/ok/with-acme-and-double-provisioner-name === RUN TestPKI_GenerateConfig/ok/with-ssh @@ -11451,41 +11472,40 @@ Error Trace: /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/pki/pki_test.go:282 Error: Expected value not to be nil. Test: TestPKI_GenerateConfig/ok/with-admin -=== RUN TestPKI_GenerateConfig/ok/simple ---- FAIL: TestPKI_GenerateConfig (0.00s) +--- FAIL: TestPKI_GenerateConfig (0.01s) + --- PASS: TestPKI_GenerateConfig/ok/simple (0.00s) --- PASS: TestPKI_GenerateConfig/ok/with-acme (0.00s) --- PASS: TestPKI_GenerateConfig/ok/with-acme-and-double-provisioner-name (0.00s) --- PASS: TestPKI_GenerateConfig/ok/with-ssh (0.00s) --- PASS: TestPKI_GenerateConfig/ok/with-ssh-and-double-provisioner-name (0.00s) --- FAIL: TestPKI_GenerateConfig/ok/with-admin (0.00s) - --- PASS: TestPKI_GenerateConfig/ok/simple (0.00s) FAIL -FAIL github.com/smallstep/certificates/pki 0.020s +FAIL github.com/smallstep/certificates/pki 0.196s testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/policy 0.008s [no tests to run] +ok github.com/smallstep/certificates/policy 0.195s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/scep 0.011s [no tests to run] +ok github.com/smallstep/certificates/scep 0.195s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/scep/api 0.013s [no tests to run] +ok github.com/smallstep/certificates/scep/api 0.071s [no tests to run] ? github.com/smallstep/certificates/server [no test files] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/templates 0.008s [no tests to run] +ok github.com/smallstep/certificates/templates 0.069s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/test/integration 0.016s [no tests to run] +ok github.com/smallstep/certificates/test/integration 0.224s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/test/integration/scep 0.016s [no tests to run] +ok github.com/smallstep/certificates/test/integration/scep 0.466s [no tests to run] ? github.com/smallstep/certificates/test/integration/scep/internal/x509 [no test files] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/webhook 0.007s [no tests to run] +ok github.com/smallstep/certificates/webhook 0.254s [no tests to run] FAIL -dh_auto_test: error: cd _build && go test -vet=off -v -p 40 -run Test_newHTTPClient\|TestPKI_GenerateConfig\|TestDB_GetDpopToken\|TestDB_CreateDpopToken\|TestDB_GetOidcToken\|TestDB_CreateOidcToken\|TestCustomTemplateOptions github.com/smallstep/certificates/acme github.com/smallstep/certificates/acme/api github.com/smallstep/certificates/acme/db/nosql github.com/smallstep/certificates/acme/wire github.com/smallstep/certificates/api github.com/smallstep/certificates/api/log github.com/smallstep/certificates/api/models github.com/smallstep/certificates/api/read github.com/smallstep/certificates/api/render github.com/smallstep/certificates/authority github.com/smallstep/certificates/authority/admin github.com/smallstep/certificates/authority/admin/api github.com/smallstep/certificates/authority/admin/db/nosql github.com/smallstep/certificates/authority/administrator github.com/smallstep/certificates/authority/config github.com/smallstep/certificates/authority/internal/constraints github.com/smallstep/certificates/authority/policy github.com/smallstep/certificates/authority/poolhttp github.com/smallstep/certificates/authority/provisioner github.com/smallstep/certificates/authority/provisioner/gcp github.com/smallstep/certificates/authority/provisioner/wire github.com/smallstep/certificates/ca github.com/smallstep/certificates/ca/client github.com/smallstep/certificates/ca/identity github.com/smallstep/certificates/cas github.com/smallstep/certificates/cas/apiv1 github.com/smallstep/certificates/cas/softcas github.com/smallstep/certificates/cas/stepcas github.com/smallstep/certificates/commands github.com/smallstep/certificates/db github.com/smallstep/certificates/errs github.com/smallstep/certificates/internal/cast github.com/smallstep/certificates/internal/httptransport github.com/smallstep/certificates/internal/metrix github.com/smallstep/certificates/internal/userid github.com/smallstep/certificates/logging github.com/smallstep/certificates/middleware/requestid github.com/smallstep/certificates/monitoring github.com/smallstep/certificates/pki github.com/smallstep/certificates/policy github.com/smallstep/certificates/scep github.com/smallstep/certificates/scep/api github.com/smallstep/certificates/server github.com/smallstep/certificates/templates github.com/smallstep/certificates/test/integration github.com/smallstep/certificates/test/integration/scep github.com/smallstep/certificates/test/integration/scep/internal/x509 github.com/smallstep/certificates/webhook returned exit code 1 +dh_auto_test: error: cd _build && go test -vet=off -v -p 42 -run Test_newHTTPClient\|TestPKI_GenerateConfig\|TestDB_GetDpopToken\|TestDB_CreateDpopToken\|TestDB_GetOidcToken\|TestDB_CreateOidcToken\|TestCustomTemplateOptions github.com/smallstep/certificates/acme github.com/smallstep/certificates/acme/api github.com/smallstep/certificates/acme/db/nosql github.com/smallstep/certificates/acme/wire github.com/smallstep/certificates/api github.com/smallstep/certificates/api/log github.com/smallstep/certificates/api/models github.com/smallstep/certificates/api/read github.com/smallstep/certificates/api/render github.com/smallstep/certificates/authority github.com/smallstep/certificates/authority/admin github.com/smallstep/certificates/authority/admin/api github.com/smallstep/certificates/authority/admin/db/nosql github.com/smallstep/certificates/authority/administrator github.com/smallstep/certificates/authority/config github.com/smallstep/certificates/authority/internal/constraints github.com/smallstep/certificates/authority/policy github.com/smallstep/certificates/authority/poolhttp github.com/smallstep/certificates/authority/provisioner github.com/smallstep/certificates/authority/provisioner/gcp github.com/smallstep/certificates/authority/provisioner/wire github.com/smallstep/certificates/ca github.com/smallstep/certificates/ca/client github.com/smallstep/certificates/ca/identity github.com/smallstep/certificates/cas github.com/smallstep/certificates/cas/apiv1 github.com/smallstep/certificates/cas/softcas github.com/smallstep/certificates/cas/stepcas github.com/smallstep/certificates/commands github.com/smallstep/certificates/db github.com/smallstep/certificates/errs github.com/smallstep/certificates/internal/cast github.com/smallstep/certificates/internal/httptransport github.com/smallstep/certificates/internal/metrix github.com/smallstep/certificates/internal/userid github.com/smallstep/certificates/logging github.com/smallstep/certificates/middleware/requestid github.com/smallstep/certificates/monitoring github.com/smallstep/certificates/pki github.com/smallstep/certificates/policy github.com/smallstep/certificates/scep github.com/smallstep/certificates/scep/api github.com/smallstep/certificates/server github.com/smallstep/certificates/templates github.com/smallstep/certificates/test/integration github.com/smallstep/certificates/test/integration/scep github.com/smallstep/certificates/test/integration/scep/internal/x509 github.com/smallstep/certificates/webhook returned exit code 1 make[1]: [debian/rules:31: override_dh_auto_test] Error 25 (ignored) make[1]: Leaving directory '/build/reproducible-path/golang-github-smallstep-certificates-0.28.4' create-stamp debian/debhelper-build-stamp @@ -11518,12 +11538,14 @@ dpkg-buildpackage: info: binary-only upload (no source included) dpkg-genchanges: info: not including original source code in upload I: copying local configuration +I: user script /srv/workspace/pbuilder/617956/tmp/hooks/B01_cleanup starting +I: user script /srv/workspace/pbuilder/617956/tmp/hooks/B01_cleanup finished I: unmounting dev/ptmx filesystem I: unmounting dev/pts filesystem I: unmounting dev/shm filesystem I: unmounting proc filesystem I: unmounting sys filesystem I: cleaning the build env -I: removing directory /srv/workspace/pbuilder/781894 and its subdirectories -I: Current time: Sun Oct 26 21:32:27 -12 2025 -I: pbuilder-time-stamp: 1761557547 +I: removing directory /srv/workspace/pbuilder/617956 and its subdirectories +I: Current time: Mon Nov 30 06:02:07 +14 2026 +I: pbuilder-time-stamp: 1795968127