Diff of the two buildlogs: -- --- b1/build.log 2025-10-27 10:12:22.724895759 +0000 +++ b2/build.log 2025-10-27 10:18:07.109289393 +0000 @@ -1,6 +1,6 @@ I: pbuilder: network access will be disabled during build -I: Current time: Sun Oct 26 22:09:40 -12 2025 -I: pbuilder-time-stamp: 1761559780 +I: Current time: Mon Nov 30 06:35:24 +14 2026 +I: pbuilder-time-stamp: 1795970124 I: Building the build Environment I: extracting base tarball [/var/cache/pbuilder/forky-reproducible-base.tgz] I: copying local configuration @@ -26,53 +26,85 @@ dpkg-source: info: applying fix-go-attest.patch I: using fakeroot in build. I: Installing the build-deps -I: user script /srv/workspace/pbuilder/313291/tmp/hooks/D02_print_environment starting +I: user script /srv/workspace/pbuilder/1487745/tmp/hooks/D01_modify_environment starting +debug: Running on codethink03-arm64. +I: Changing host+domainname to test build reproducibility +I: Adding a custom variable just for the fun of it... +I: Changing /bin/sh to bash +'/bin/sh' -> '/bin/bash' +lrwxrwxrwx 1 root root 9 Nov 29 16:35 /bin/sh -> /bin/bash +I: Setting pbuilder2's login shell to /bin/bash +I: Setting pbuilder2's GECOS to second user,second room,second work-phone,second home-phone,second other +I: user script /srv/workspace/pbuilder/1487745/tmp/hooks/D01_modify_environment finished +I: user script /srv/workspace/pbuilder/1487745/tmp/hooks/D02_print_environment starting I: set - BUILDDIR='/build/reproducible-path' - BUILDUSERGECOS='first user,first room,first work-phone,first home-phone,first other' - BUILDUSERNAME='pbuilder1' - BUILD_ARCH='arm64' - DEBIAN_FRONTEND='noninteractive' + BASH=/bin/sh + BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath + BASH_ALIASES=() + BASH_ARGC=() + BASH_ARGV=() + BASH_CMDS=() + BASH_LINENO=([0]="12" [1]="0") + BASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:. + BASH_SOURCE=([0]="/tmp/hooks/D02_print_environment" [1]="/tmp/hooks/D02_print_environment") + BASH_VERSINFO=([0]="5" [1]="3" [2]="3" [3]="1" [4]="release" [5]="aarch64-unknown-linux-gnu") + BASH_VERSION='5.3.3(1)-release' + BUILDDIR=/build/reproducible-path + BUILDUSERGECOS='second user,second room,second work-phone,second home-phone,second other' + BUILDUSERNAME=pbuilder2 + BUILD_ARCH=arm64 + DEBIAN_FRONTEND=noninteractive DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=12 ' - DISTRIBUTION='forky' - HOME='/root' - HOST_ARCH='arm64' + DIRSTACK=() + DISTRIBUTION=forky + EUID=0 + FUNCNAME=([0]="Echo" [1]="main") + GROUPS=() + HOME=/root + HOSTNAME=i-capture-the-hostname + HOSTTYPE=aarch64 + HOST_ARCH=arm64 IFS=' ' - INVOCATION_ID='991fe09e96d941e0976c96727e45b829' - LANG='C' - LANGUAGE='en_US:en' - LC_ALL='C' - MAIL='/var/mail/root' - OPTIND='1' - PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games' - PBCURRENTCOMMANDLINEOPERATION='build' - PBUILDER_OPERATION='build' - PBUILDER_PKGDATADIR='/usr/share/pbuilder' - PBUILDER_PKGLIBDIR='/usr/lib/pbuilder' - PBUILDER_SYSCONFDIR='/etc' - PPID='313291' - PS1='# ' - PS2='> ' + INVOCATION_ID=beab6e479fa54ffe8170ce5ca5dcaf08 + LANG=C + LANGUAGE=nl_BE:nl + LC_ALL=C + MACHTYPE=aarch64-unknown-linux-gnu + MAIL=/var/mail/root + OPTERR=1 + OPTIND=1 + OSTYPE=linux-gnu + PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path + PBCURRENTCOMMANDLINEOPERATION=build + PBUILDER_OPERATION=build + PBUILDER_PKGDATADIR=/usr/share/pbuilder + PBUILDER_PKGLIBDIR=/usr/lib/pbuilder + PBUILDER_SYSCONFDIR=/etc + PIPESTATUS=([0]="0") + POSIXLY_CORRECT=y + PPID=1487745 PS4='+ ' - PWD='/' - SHELL='/bin/bash' - SHLVL='2' - SUDO_COMMAND='/usr/bin/timeout -k 18.1h 18h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.v8EvzCsF/pbuilderrc_cqJJ --distribution forky --hookdir /etc/pbuilder/first-build-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/forky-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.v8EvzCsF/b1 --logfile b1/build.log golang-github-smallstep-certificates_0.28.4-2.dsc' - SUDO_GID='109' - SUDO_HOME='/var/lib/jenkins' - SUDO_UID='104' - SUDO_USER='jenkins' - TERM='unknown' - TZ='/usr/share/zoneinfo/Etc/GMT+12' - USER='root' - _='/usr/bin/systemd-run' - http_proxy='http://192.168.101.4:3128' + PWD=/ + SHELL=/bin/bash + SHELLOPTS=braceexpand:errexit:hashall:interactive-comments:posix + SHLVL=3 + SUDO_COMMAND='/usr/bin/timeout -k 24.1h 24h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.v8EvzCsF/pbuilderrc_CR1b --distribution forky --hookdir /etc/pbuilder/rebuild-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/forky-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.v8EvzCsF/b2 --logfile b2/build.log golang-github-smallstep-certificates_0.28.4-2.dsc' + SUDO_GID=109 + SUDO_HOME=/var/lib/jenkins + SUDO_UID=104 + SUDO_USER=jenkins + TERM=unknown + TZ=/usr/share/zoneinfo/Etc/GMT-14 + UID=0 + USER=root + _='I: set' + http_proxy=http://192.168.101.4:3128 I: uname -a - Linux codethink04-arm64 6.12.48+deb13-cloud-arm64 #1 SMP Debian 6.12.48-1 (2025-09-20) aarch64 GNU/Linux + Linux i-capture-the-hostname 6.12.48+deb13-cloud-arm64 #1 SMP Debian 6.12.48-1 (2025-09-20) aarch64 GNU/Linux I: ls -l /bin - lrwxrwxrwx 1 root root 7 Aug 10 12:30 /bin -> usr/bin -I: user script /srv/workspace/pbuilder/313291/tmp/hooks/D02_print_environment finished + lrwxrwxrwx 1 root root 7 Aug 10 2025 /bin -> usr/bin +I: user script /srv/workspace/pbuilder/1487745/tmp/hooks/D02_print_environment finished -> Attempting to satisfy build-dependencies -> Creating pbuilder-satisfydepends-dummy package Package: pbuilder-satisfydepends-dummy @@ -343,7 +375,7 @@ Get: 181 http://deb.debian.org/debian forky/main arm64 golang-step-cli-utils-dev all 0.7.5+ds-3 [54.9 kB] Get: 182 http://deb.debian.org/debian forky/main arm64 libpcsclite1 arm64 2.4.0-1 [54.8 kB] Get: 183 http://deb.debian.org/debian forky/main arm64 libpcsclite-dev arm64 2.4.0-1 [68.1 kB] -Fetched 142 MB in 1s (152 MB/s) +Fetched 142 MB in 1s (101 MB/s) Preconfiguring packages ... Selecting previously unselected package golang-golang-x-sys-dev. (Reading database ... (Reading database ... 5% (Reading database ... 10% (Reading database ... 15% (Reading database ... 20% (Reading database ... 25% (Reading database ... 30% (Reading database ... 35% (Reading database ... 40% (Reading database ... 45% (Reading database ... 50% (Reading database ... 55% (Reading database ... 60% (Reading database ... 65% (Reading database ... 70% (Reading database ... 75% (Reading database ... 80% (Reading database ... 85% (Reading database ... 90% (Reading database ... 95% (Reading database ... 100% (Reading database ... 20002 files and directories currently installed.) @@ -942,8 +974,8 @@ Setting up tzdata (2025b-5) ... Current default time zone: 'Etc/UTC' -Local time is now: Mon Oct 27 10:10:16 UTC 2025. -Universal Time is now: Mon Oct 27 10:10:16 UTC 2025. +Local time is now: Sun Nov 29 16:36:47 UTC 2026. +Universal Time is now: Sun Nov 29 16:36:47 UTC 2026. Run 'dpkg-reconfigure tzdata' if you wish to change it. Setting up golang-github-cespare-xxhash-dev (2.3.0-1) ... @@ -1101,7 +1133,11 @@ fakeroot is already the newest version (1.37.1.2-1). 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. I: Building the package -I: Running cd /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-genchanges -S > ../golang-github-smallstep-certificates_0.28.4-2_source.changes +I: user script /srv/workspace/pbuilder/1487745/tmp/hooks/A99_set_merged_usr starting +Not re-configuring usrmerge for forky +I: user script /srv/workspace/pbuilder/1487745/tmp/hooks/A99_set_merged_usr finished +hostname: Name or service not known +I: Running cd /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-genchanges -S > ../golang-github-smallstep-certificates_0.28.4-2_source.changes dpkg-buildpackage: info: source package golang-github-smallstep-certificates dpkg-buildpackage: info: source version 0.28.4-2 dpkg-buildpackage: info: source distribution unstable @@ -1120,9 +1156,9 @@ debian/rules execute_before_dh_auto_configure make[1]: Entering directory '/build/reproducible-path/golang-github-smallstep-certificates-0.28.4' chmod -v -x policy/engine.go policy/engine_test.go policy/options.go -mode of 'policy/engine.go' changed from 0755 (rwxr-xr-x) to 0644 (rw-r--r--) -mode of 'policy/engine_test.go' changed from 0755 (rwxr-xr-x) to 0644 (rw-r--r--) -mode of 'policy/options.go' changed from 0755 (rwxr-xr-x) to 0644 (rw-r--r--) +mode of 'policy/engine.go' changed from 0775 (rwxrwxr-x) to 0664 (rw-rw-r--) +mode of 'policy/engine_test.go' changed from 0775 (rwxrwxr-x) to 0664 (rw-rw-r--) +mode of 'policy/options.go' changed from 0775 (rwxrwxr-x) to 0664 (rw-rw-r--) rm -fv authority/provisioner/nebula*.go removed 'authority/provisioner/nebula.go' removed 'authority/provisioner/nebula_test.go' @@ -1132,135 +1168,135 @@ dh_auto_build: warning: github.com/smallstep/certificates/test/integration contains no non-test Go files, removing it from build dh_auto_build: warning: github.com/smallstep/certificates/test/integration/scep contains no non-test Go files, removing it from build cd _build && go install -trimpath -v -p 12 github.com/smallstep/certificates/acme github.com/smallstep/certificates/acme/api github.com/smallstep/certificates/acme/db/nosql github.com/smallstep/certificates/acme/wire github.com/smallstep/certificates/api github.com/smallstep/certificates/api/log github.com/smallstep/certificates/api/models github.com/smallstep/certificates/api/read github.com/smallstep/certificates/api/render github.com/smallstep/certificates/authority github.com/smallstep/certificates/authority/admin github.com/smallstep/certificates/authority/admin/api github.com/smallstep/certificates/authority/admin/db/nosql github.com/smallstep/certificates/authority/administrator github.com/smallstep/certificates/authority/config github.com/smallstep/certificates/authority/internal/constraints github.com/smallstep/certificates/authority/policy github.com/smallstep/certificates/authority/poolhttp github.com/smallstep/certificates/authority/provisioner github.com/smallstep/certificates/authority/provisioner/gcp github.com/smallstep/certificates/authority/provisioner/wire github.com/smallstep/certificates/ca github.com/smallstep/certificates/ca/client github.com/smallstep/certificates/ca/identity github.com/smallstep/certificates/cas github.com/smallstep/certificates/cas/apiv1 github.com/smallstep/certificates/cas/softcas github.com/smallstep/certificates/cas/stepcas github.com/smallstep/certificates/commands github.com/smallstep/certificates/db github.com/smallstep/certificates/errs github.com/smallstep/certificates/internal/cast github.com/smallstep/certificates/internal/httptransport github.com/smallstep/certificates/internal/metrix github.com/smallstep/certificates/internal/userid github.com/smallstep/certificates/logging github.com/smallstep/certificates/middleware/requestid github.com/smallstep/certificates/monitoring github.com/smallstep/certificates/pki github.com/smallstep/certificates/policy github.com/smallstep/certificates/scep github.com/smallstep/certificates/scep/api github.com/smallstep/certificates/server github.com/smallstep/certificates/templates github.com/smallstep/certificates/test/integration/scep/internal/x509 github.com/smallstep/certificates/webhook -internal/profilerecord -internal/goarch -internal/goos +internal/unsafeheader internal/coverage/rtcov -internal/asan -internal/msan -internal/byteorder +internal/goos +internal/goarch internal/goexperiment -sync/atomic -internal/unsafeheader +internal/byteorder internal/godebugs +internal/profilerecord +internal/msan +internal/asan internal/runtime/syscall internal/cpu internal/abi internal/runtime/math math/bits -internal/chacha8rand +sync/atomic unicode unicode/utf8 internal/itoa crypto/internal/fips140/alias -crypto/internal/fips140deps/byteorder cmp -crypto/internal/fips140/subtle +internal/chacha8rand +crypto/internal/fips140deps/byteorder crypto/internal/boring/sig unicode/utf16 -math +crypto/internal/fips140/subtle vendor/golang.org/x/crypto/cryptobyte/asn1 container/list vendor/golang.org/x/crypto/internal/alias internal/nettrace encoding +math log/internal golang.org/x/crypto/cryptobyte/asn1 github.com/google/go-tspi/tspiconst google.golang.org/protobuf/internal/flags google.golang.org/protobuf/internal/set google.golang.org/grpc/serviceconfig +golang.org/x/crypto/internal/alias internal/bytealg internal/runtime/atomic internal/runtime/sys crypto/internal/fips140deps/cpu -golang.org/x/crypto/internal/alias golang.org/x/crypto/salsa20/salsa github.com/googleapis/gax-go/v2/internal go.opencensus.io -github.com/golang/groupcache/lru go.opencensus.io/trace/internal +github.com/golang/groupcache/lru go.opencensus.io/internal/tagencoding golang.org/x/net/html/atom -internal/stringslite internal/runtime/exithook +internal/stringslite internal/race -internal/sync internal/runtime/maps +internal/sync runtime -iter internal/reflectlite -weak -crypto/subtle sync +iter +crypto/subtle +weak runtime/metrics maps slices golang.org/x/exp/slices -errors -sort -internal/oserror -path -math/rand/v2 -go.etcd.io/bbolt/errors -vendor/golang.org/x/net/dns/dnsmessage -strconv internal/bisect -io internal/testlog internal/singleflight unique -syscall -runtime/cgo google.golang.org/protobuf/internal/pragma +runtime/cgo +errors +sort +io +vendor/golang.org/x/net/dns/dnsmessage +strconv google.golang.org/grpc/internal/buffer -container/heap -github.com/beorn7/perks/quantile +path +go.etcd.io/bbolt/errors +math/rand/v2 +internal/oserror internal/godebug +bytes +syscall hash -crypto/internal/randutil strings internal/saferio +github.com/beorn7/perks/quantile +go.step.sm/crypto/internal/utils/utfbom +hash/crc32 +hash/fnv +hash/adler32 +github.com/prometheus/client_golang/prometheus/promhttp/internal +container/heap +crypto/internal/fips140deps/godebug +crypto/internal/randutil +math/rand +crypto +reflect net/netip encoding/base32 -reflect -bytes -crypto -crypto/internal/fips140deps/godebug github.com/x448/float16 -hash/crc32 +golang.org/x/crypto/blowfish +vendor/golang.org/x/text/transform +golang.org/x/text/transform crypto/internal/fips140 -hash/fnv -math/rand crypto/internal/impl bufio -vendor/golang.org/x/text/transform -crypto/internal/fips140/sha3 net/http/internal/ascii +regexp/syntax +html crypto/internal/fips140/sha256 +crypto/internal/fips140/sha3 crypto/internal/fips140/sha512 crypto/tls/internal/fips140tls -regexp/syntax -html -golang.org/x/text/transform -crypto/sha3 -hash/adler32 go.step.sm/crypto/internal/emoji github.com/huandu/xstrings -golang.org/x/crypto/blowfish -crypto/internal/fips140/hmac -go.step.sm/crypto/internal/utils/utfbom github.com/munnerz/goautoneg -crypto/internal/fips140hash -github.com/prometheus/client_golang/prometheus/promhttp/internal +crypto/internal/fips140/hmac +crypto/sha3 crypto/internal/fips140/check +time internal/syscall/unix -crypto/internal/fips140/aes +internal/syscall/execenv crypto/internal/fips140/nistec/fiat +crypto/internal/fips140/aes crypto/internal/fips140/edwards25519/field crypto/internal/fips140/bigmod -internal/syscall/execenv -time +crypto/internal/fips140hash crypto/internal/fips140/hkdf crypto/internal/fips140/tls12 crypto/fips140 @@ -1270,114 +1306,102 @@ google.golang.org/api/internal/third_party/uritemplates io/fs internal/poll +context google.golang.org/grpc/backoff google.golang.org/grpc/keepalive -context crypto/internal/fips140/nistec +google.golang.org/grpc/internal/backoff google.golang.org/grpc/internal/grpcsync -github.com/smallstep/certificates/internal/userid github.com/smallstep/certificates/ca/client -google.golang.org/grpc/internal/backoff +github.com/smallstep/certificates/internal/userid internal/filepathlite embed -internal/fmtsort -encoding/binary google.golang.org/protobuf/internal/editiondefaults os +internal/fmtsort +encoding/binary vendor/golang.org/x/crypto/internal/poly1305 -github.com/cespare/xxhash filippo.io/edwards25519/field -golang.org/x/crypto/internal/poly1305 -encoding/base64 golang.org/x/sys/unix +github.com/cespare/xxhash +encoding/base64 +golang.org/x/crypto/internal/poly1305 golang.org/x/crypto/nacl/secretbox encoding/pem filippo.io/edwards25519 -crypto/internal/sysrand -google.golang.org/protobuf/internal/detrand -go.step.sm/crypto/fipsutil fmt google.golang.org/grpc/internal/envconfig -io/ioutil path/filepath -github.com/prometheus/procfs/internal/util +io/ioutil +crypto/internal/sysrand +go.step.sm/crypto/fipsutil os/signal net +google.golang.org/protobuf/internal/detrand +github.com/prometheus/procfs/internal/util crypto/internal/entropy crypto/internal/fips140/drbg +crypto/internal/fips140/aes/gcm crypto/internal/fips140only crypto/internal/fips140/ecdh -crypto/internal/fips140/aes/gcm crypto/internal/fips140/ecdsa -crypto/internal/fips140/rsa -crypto/internal/fips140/ed25519 crypto/internal/fips140/mlkem +crypto/internal/fips140/ed25519 +crypto/internal/fips140/rsa os/exec crypto/md5 crypto/rc4 crypto/cipher crypto/mlkem crypto/internal/boring -golang.org/x/crypto/chacha20 -vendor/golang.org/x/crypto/chacha20 crypto/des -crypto/ecdh -crypto/hmac -crypto/sha512 -crypto/sha1 -crypto/aes -crypto/sha256 -golang.org/x/crypto/pbkdf2 -golang.org/x/crypto/ssh/internal/bcrypt_pbkdf -go.step.sm/crypto/internal/bcrypt_pbkdf -golang.org/x/crypto/scrypt -vendor/golang.org/x/crypto/chacha20poly1305 +vendor/golang.org/x/crypto/chacha20 +golang.org/x/crypto/chacha20 +math/big encoding/hex net/url database/sql/driver -encoding/json mime +encoding/json +crypto/ecdh +crypto/sha512 +crypto/sha256 +crypto/aes +crypto/hmac +vendor/golang.org/x/crypto/chacha20poly1305 +crypto/sha1 compress/flate log -math/big +database/sql vendor/golang.org/x/text/unicode/norm vendor/golang.org/x/net/http2/hpack mime/quotedprintable -vendor/golang.org/x/text/unicode/bidi net/http/internal -database/sql +golang.org/x/crypto/pbkdf2 +vendor/golang.org/x/text/unicode/bidi gopkg.in/square/go-jose.v2/json github.com/pkg/errors google.golang.org/protobuf/internal/errors google.golang.org/protobuf/encoding/protowire -compress/gzip go/token +compress/gzip google.golang.org/protobuf/reflect/protoreflect golang.org/x/net/internal/timeseries text/template/parse text/tabwriter -vendor/golang.org/x/text/secure/bidirule google.golang.org/grpc/attributes google.golang.org/protobuf/internal/version google.golang.org/grpc/internal/idle golang.org/x/text/unicode/bidi -golang.org/x/net/http2/hpack golang.org/x/text/unicode/norm +vendor/golang.org/x/text/secure/bidirule +golang.org/x/net/http2/hpack vendor/golang.org/x/net/idna +github.com/smallstep/certificates/acme/wire +google.golang.org/grpc/grpclog/internal +github.com/smallstep/nosql/database go.etcd.io/bbolt/internal/common compress/zlib -go.step.sm/crypto/fingerprint -github.com/imdario/mergo -go.etcd.io/bbolt/internal/freelist -github.com/mitchellh/reflectwalk -google.golang.org/protobuf/internal/strs -google.golang.org/protobuf/internal/encoding/messageset -google.golang.org/protobuf/internal/descfmt -google.golang.org/protobuf/internal/encoding/json -google.golang.org/protobuf/internal/descopts -google.golang.org/protobuf/internal/encoding/text -google.golang.org/protobuf/internal/genid -google.golang.org/protobuf/internal/order crypto/elliptic crypto/internal/boring/bbig encoding/asn1 @@ -1385,282 +1409,294 @@ crypto/dsa github.com/fxamacker/cbor github.com/google/certificate-transparency-go/asn1 -github.com/smallstep/certificates/acme/wire -google.golang.org/protobuf/reflect/protoregistry -google.golang.org/protobuf/runtime/protoiface crypto/ed25519 crypto/rsa crypto/internal/hpke text/template -google.golang.org/grpc/grpclog/internal golang.org/x/crypto/ed25519 +google.golang.org/grpc/grpclog +google.golang.org/protobuf/internal/strs +google.golang.org/protobuf/internal/encoding/messageset +google.golang.org/protobuf/internal/descfmt +google.golang.org/protobuf/internal/encoding/json +google.golang.org/protobuf/internal/descopts +google.golang.org/protobuf/internal/encoding/text +google.golang.org/protobuf/internal/genid +google.golang.org/protobuf/internal/order +google.golang.org/protobuf/reflect/protoregistry +vendor/golang.org/x/crypto/cryptobyte +crypto/x509/pkix +golang.org/x/crypto/cryptobyte +google.golang.org/protobuf/runtime/protoiface +github.com/google/certificate-transparency-go/x509/pkix +google.golang.org/grpc/connectivity +google.golang.org/grpc/internal/grpclog google.golang.org/protobuf/internal/protolazy golang.org/x/text/secure/bidirule -github.com/smallstep/nosql/database -google.golang.org/protobuf/proto +go.etcd.io/bbolt/internal/freelist google.golang.org/protobuf/internal/encoding/defval -google.golang.org/grpc/grpclog -golang.org/x/net/idna -go.etcd.io/bbolt go.step.sm/crypto/randutil +golang.org/x/net/idna +go.step.sm/crypto/fingerprint +google.golang.org/protobuf/proto github.com/Masterminds/goutils github.com/Masterminds/semver -github.com/mitchellh/copystructure -google.golang.org/grpc/connectivity -vendor/golang.org/x/crypto/cryptobyte -crypto/x509/pkix -github.com/google/certificate-transparency-go/x509/pkix -golang.org/x/crypto/cryptobyte -google.golang.org/grpc/internal/grpclog +github.com/imdario/mergo +github.com/mitchellh/reflectwalk github.com/shopspring/decimal +crypto/ecdsa github.com/spf13/cast/internal +github.com/mitchellh/copystructure golang.org/x/crypto/bcrypt +go.etcd.io/bbolt +golang.org/x/crypto/scrypt github.com/go-jose/go-jose/v3/json go.step.sm/crypto/internal/utils -crypto/ecdsa -google.golang.org/protobuf/internal/filedesc -google.golang.org/protobuf/encoding/prototext golang.org/x/crypto/curve25519 +golang.org/x/crypto/ssh/internal/bcrypt_pbkdf go.step.sm/crypto/x25519 +go.step.sm/crypto/internal/bcrypt_pbkdf github.com/googleapis/gax-go/v2/callctx golang.org/x/oauth2/jws os/user go.opencensus.io/internal +html/template go.opencensus.io/trace/tracestate runtime/trace go.opencensus.io/resource -html/template +google.golang.org/protobuf/internal/filedesc +google.golang.org/protobuf/encoding/prototext go.opencensus.io/trace runtime/pprof go.opencensus.io/metric/metricdata -github.com/ccoveille/go-safecast go.opencensus.io/metric/metricproducer +github.com/ccoveille/go-safecast +github.com/smallstep/certificates/internal/cast +github.com/rs/xid gopkg.in/square/go-jose.v2/cipher github.com/google/certificate-transparency-go/tls github.com/go-jose/go-jose/v3/cipher -github.com/smallstep/certificates/internal/cast -github.com/rs/xid flag github.com/russross/blackfriday/v2 github.com/manifoldco/promptui/list -github.com/smallstep/nosql/bolt github.com/manifoldco/promptui/screenbuf github.com/mattn/go-isatty golang.org/x/net/html -go.step.sm/crypto/kms/uri github.com/mattn/go-colorable +go.step.sm/crypto/kms/uri +github.com/mgutz/ansi github.com/smallstep/scep/cryptoutil +github.com/spf13/cast github.com/sirupsen/logrus internal/profile -github.com/mgutz/ansi runtime/debug google.golang.org/protobuf/encoding/protodelim -github.com/prometheus/procfs/internal/fs -google.golang.org/protobuf/encoding/protojson -github.com/spf13/cast -google.golang.org/protobuf/internal/encoding/tag go.opencensus.io/tag +github.com/prometheus/procfs/internal/fs github.com/newrelic/go-agent/v3/internal/jsonx -google.golang.org/protobuf/internal/impl github.com/newrelic/go-agent/v3/internal/logger -github.com/newrelic/go-agent/v3/internal/cat -github.com/newrelic/go-agent/v3/internal/sysinfo +github.com/smallstep/nosql/bolt +google.golang.org/protobuf/encoding/protojson +google.golang.org/protobuf/internal/encoding/tag go.opencensus.io/stats/internal -github.com/cpuguy83/go-md2man/v2/md2man go.opencensus.io/stats +github.com/newrelic/go-agent/v3/internal/cat go.opencensus.io/stats/view +github.com/newrelic/go-agent/v3/internal/sysinfo +google.golang.org/protobuf/internal/impl +github.com/cpuguy83/go-md2man/v2/md2man github.com/urfave/cli -go.step.sm/cli-utils/errs -vendor/golang.org/x/net/http/httpproxy -net/textproto crypto/x509 google.golang.org/grpc/internal/syscall -github.com/google/uuid -google.golang.org/grpc/internal/resolver/dns/internal +net/textproto +vendor/golang.org/x/net/http/httpproxy github.com/google/go-tpm/tpmutil google.golang.org/grpc/internal github.com/google/certificate-transparency-go/x509 -github.com/prometheus/procfs +google.golang.org/grpc/internal/resolver/dns/internal +github.com/google/uuid github.com/chzyer/readline +github.com/prometheus/procfs +go.step.sm/cli-utils/errs github.com/newrelic/go-agent/v3/internal google.golang.org/grpc/experimental/stats google.golang.org/grpc/metadata google.golang.org/grpc/codes -google.golang.org/grpc/mem -google.golang.org/grpc/internal/grpcutil -google.golang.org/grpc/internal/balancerload -github.com/google/go-tpm/legacy/tpm2 vendor/golang.org/x/net/http/httpguts mime/multipart -github.com/google/go-tpm/tpm +google.golang.org/grpc/internal/grpcutil +google.golang.org/grpc/mem +google.golang.org/grpc/internal/balancerload google.golang.org/grpc/stats golang.org/x/net/http/httpguts -google.golang.org/grpc/tap +github.com/google/go-tpm/legacy/tpm2 +github.com/google/go-tpm/tpm google.golang.org/grpc/internal/stats +google.golang.org/grpc/tap google.golang.org/grpc/encoding github.com/google/go-tpm/legacy/tpm2/credactivation github.com/manifoldco/promptui github.com/google/go-tspi/verification go.step.sm/cli-utils/ui +crypto/tls +gopkg.in/square/go-jose.v2 github.com/google/go-attestation/attest/internal -github.com/go-jose/go-jose/v3 github.com/Masterminds/sprig -gopkg.in/square/go-jose.v2 -github.com/smallstep/pkcs7/internal/legacy/x509 +github.com/go-jose/go-jose/v3 go.step.sm/crypto/kms/apiv1 -crypto/tls -golang.org/x/crypto/ssh +github.com/smallstep/pkcs7/internal/legacy/x509 github.com/smallstep/scep/x509util -github.com/google/go-attestation/attest +golang.org/x/crypto/ssh go.step.sm/cli-utils/step +github.com/google/go-attestation/attest golang.org/x/crypto/ocsp -github.com/smallstep/pkcs7 github.com/smallstep/certificates/test/integration/scep/internal/x509 +github.com/smallstep/pkcs7 github.com/smallstep/scep -github.com/go-jose/go-jose/v3/cryptosigner github.com/go-jose/go-jose/v3/jwt +github.com/go-jose/go-jose/v3/cryptosigner google.golang.org/protobuf/internal/filetype google.golang.org/protobuf/runtime/protoimpl google.golang.org/protobuf/protoadapt -google.golang.org/protobuf/types/known/durationpb -google.golang.org/protobuf/types/known/timestamppb google.golang.org/protobuf/types/known/anypb -google.golang.org/protobuf/types/descriptorpb google.golang.org/protobuf/types/known/structpb +google.golang.org/protobuf/types/known/timestamppb +google.golang.org/protobuf/types/known/durationpb +google.golang.org/protobuf/types/descriptorpb google.golang.org/genproto/googleapis/rpc/code google.golang.org/grpc/internal/pretty google.golang.org/grpc/encoding/proto -github.com/prometheus/client_model/go -google.golang.org/genproto/googleapis/rpc/errdetails github.com/golang/protobuf/ptypes/duration +google.golang.org/genproto/googleapis/rpc/errdetails github.com/golang/protobuf/ptypes/timestamp +github.com/prometheus/client_model/go google.golang.org/genproto/googleapis/rpc/status github.com/googleapis/gax-go/v2/apierror/internal/proto -google.golang.org/grpc/internal/status google.golang.org/grpc/binarylog/grpc_binarylog_v1 -google.golang.org/grpc/status +google.golang.org/grpc/internal/status github.com/prometheus/common/model +google.golang.org/grpc/status go.step.sm/crypto/keyutil golang.org/x/crypto/ssh/agent google.golang.org/grpc/internal/binarylog go.step.sm/crypto/pemutil google.golang.org/protobuf/internal/editionssupport google.golang.org/protobuf/types/gofeaturespb +google.golang.org/protobuf/reflect/protodesc go.step.sm/crypto/kms/softkms github.com/prometheus/client_golang/prometheus/internal go.step.sm/crypto/kms -google.golang.org/protobuf/reflect/protodesc net/http/httptrace +github.com/go-sql-driver/mysql google.golang.org/grpc/internal/credentials google.golang.org/api/transport/cert -github.com/go-sql-driver/mysql google.golang.org/grpc/credentials net/http -github.com/golang/protobuf/proto +google.golang.org/grpc/internal/channelz +google.golang.org/grpc/resolver google.golang.org/grpc/credentials/insecure google.golang.org/grpc/peer -google.golang.org/grpc/resolver -google.golang.org/grpc/internal/channelz google.golang.org/grpc/internal/metadata google.golang.org/grpc/internal/resolver/passthrough google.golang.org/grpc/internal/transport/networktype google.golang.org/grpc/balancer/grpclb/state -google.golang.org/grpc/internal/resolver/dns google.golang.org/grpc/internal/resolver/unix +google.golang.org/grpc/internal/resolver/dns +github.com/golang/protobuf/proto google.golang.org/grpc/resolver/dns google.golang.org/grpc/channelz google.golang.org/grpc/balancer -google.golang.org/grpc/balancer/base google.golang.org/grpc/balancer/pickfirst google.golang.org/grpc/internal/serviceconfig +google.golang.org/grpc/balancer/base google.golang.org/grpc/internal/resolver google.golang.org/grpc/balancer/roundrobin google.golang.org/grpc/internal/balancer/gracefulswitch github.com/smallstep/nosql/mysql github.com/smallstep/nosql golang.org/x/oauth2/internal +google.golang.org/api/googleapi/transport github.com/smallstep/certificates/api/log github.com/go-chi/chi golang.org/x/net/trace -github.com/smallstep/certificates/internal/httptransport net/http/httputil go.step.sm/crypto/jose +github.com/smallstep/certificates/internal/httptransport google.golang.org/api/googleapi -go.opencensus.io/trace/propagation -golang.org/x/net/http2 cloud.google.com/go/compute/metadata -google.golang.org/api/googleapi/transport -go.opencensus.io/plugin/ochttp/propagation/b3 -google.golang.org/api/transport/http/internal/propagation +golang.org/x/net/http2 +go.opencensus.io/trace/propagation +github.com/smallstep/certificates/middleware/requestid github.com/smallstep/certificates/api/render -go.opencensus.io/plugin/ochttp github.com/smallstep/certificates/authority/poolhttp +go.opencensus.io/plugin/ochttp/propagation/b3 golang.org/x/oauth2 +google.golang.org/api/transport/http/internal/propagation +go.opencensus.io/plugin/ochttp github.com/smallstep/certificates/errs -github.com/smallstep/certificates/middleware/requestid -github.com/googleapis/gax-go/v2/apierror go.step.sm/cli-utils/usage +github.com/googleapis/gax-go/v2/apierror github.com/smallstep/certificates/cas/apiv1 -github.com/smallstep/certificates/authority/internal/constraints -github.com/smallstep/certificates/api/read github.com/smallstep/certificates/logging -expvar -net/http/pprof -go.step.sm/crypto/internal/templates -github.com/prometheus/client_golang/internal/github.com/golang/gddo/httputil/header -github.com/prometheus/common/expfmt -github.com/newrelic/go-agent/v3/internal/utilization github.com/coreos/go-oidc/v3/oidc golang.org/x/oauth2/authhandler -go.step.sm/crypto/x509util +go.step.sm/crypto/internal/templates golang.org/x/oauth2/google/internal/impersonate golang.org/x/oauth2/google/internal/stsexchange golang.org/x/oauth2/jwt +go.step.sm/crypto/x509util google.golang.org/api/internal/impersonate -go.step.sm/cli-utils/command go.step.sm/crypto/sshutil -github.com/prometheus/client_golang/internal/github.com/golang/gddo/httputil -go.step.sm/cli-utils/fileutil -github.com/smallstep/certificates/server +github.com/smallstep/certificates/authority/internal/constraints +go.step.sm/cli-utils/command golang.org/x/oauth2/google/externalaccount golang.org/x/oauth2/google/internal/externalaccountauthorizeduser +github.com/smallstep/certificates/api/read +expvar +net/http/pprof +go.step.sm/cli-utils/fileutil +github.com/prometheus/common/expfmt +github.com/prometheus/client_golang/internal/github.com/golang/gddo/httputil/header +github.com/newrelic/go-agent/v3/internal/utilization +github.com/smallstep/certificates/server +go.step.sm/crypto/kms/sshagentkms +github.com/prometheus/client_golang/internal/github.com/golang/gddo/httputil go.step.sm/cli-utils/token -github.com/go-chi/chi/middleware github.com/smallstep/certificates/templates go.step.sm/cli-utils/token/provision -go.step.sm/crypto/kms/sshagentkms -github.com/prometheus/client_golang/prometheus golang.org/x/oauth2/google +github.com/go-chi/chi/middleware +github.com/prometheus/client_golang/prometheus github.com/smallstep/certificates/policy -go.step.sm/crypto/tlsutil github.com/smallstep/certificates/authority/provisioner/wire github.com/smallstep/certificates/webhook github.com/smallstep/certificates/cas/softcas +go.step.sm/crypto/tlsutil github.com/smallstep/certificates/cas google.golang.org/grpc/internal/transport github.com/prometheus/client_golang/prometheus/promhttp google.golang.org/grpc -google.golang.org/api/internal github.com/googleapis/gax-go/v2 +google.golang.org/api/internal github.com/newrelic/go-agent/v3/internal/com_newrelic_trace_v1 github.com/smallstep/linkedca google.golang.org/api/transport/internal/dca -google.golang.org/api/option google.golang.org/api/internal/gensupport +google.golang.org/api/option github.com/newrelic/go-agent/v3/newrelic -google.golang.org/api/transport/http google.golang.org/api/option/internaloption +google.golang.org/api/transport/http google.golang.org/api/cloudresourcemanager/v1 github.com/smallstep/certificates/authority/admin github.com/smallstep/certificates/authority/policy -github.com/smallstep/certificates/authority/admin/db/nosql github.com/smallstep/certificates/authority/provisioner/gcp +github.com/smallstep/certificates/authority/admin/db/nosql github.com/smallstep/certificates/authority/provisioner -github.com/smallstep/certificates/authority/administrator github.com/smallstep/certificates/db +github.com/smallstep/certificates/internal/metrix github.com/smallstep/certificates/scep github.com/smallstep/certificates/api/models -github.com/smallstep/certificates/internal/metrix +github.com/smallstep/certificates/authority/administrator github.com/smallstep/certificates/authority/config github.com/smallstep/certificates/authority github.com/smallstep/certificates/acme @@ -1682,8 +1718,8 @@ === RUN TestKeyToID === RUN TestKeyToID/fail/error-generating-thumbprint === RUN TestKeyToID/ok ---- PASS: TestKeyToID (0.00s) - --- PASS: TestKeyToID/fail/error-generating-thumbprint (0.00s) +--- PASS: TestKeyToID (0.01s) + --- PASS: TestKeyToID/fail/error-generating-thumbprint (0.01s) --- PASS: TestKeyToID/ok (0.00s) === RUN TestAccount_GetLocation === RUN TestAccount_GetLocation/empty @@ -1704,164 +1740,173 @@ --- PASS: TestExternalAccountKey_BindTo/ok (0.00s) --- PASS: TestExternalAccountKey_BindTo/fail/already-bound (0.00s) === RUN TestAuthorization_UpdateStatus -=== RUN TestAuthorization_UpdateStatus/ok/valid -=== RUN TestAuthorization_UpdateStatus/ok/already-invalid === RUN TestAuthorization_UpdateStatus/ok/already-valid === RUN TestAuthorization_UpdateStatus/fail/error-unexpected-status === RUN TestAuthorization_UpdateStatus/ok/expired === RUN TestAuthorization_UpdateStatus/fail/db.UpdateAuthorization-error === RUN TestAuthorization_UpdateStatus/ok/no-valid-challenges +=== RUN TestAuthorization_UpdateStatus/ok/valid +=== RUN TestAuthorization_UpdateStatus/ok/already-invalid --- PASS: TestAuthorization_UpdateStatus (0.00s) - --- PASS: TestAuthorization_UpdateStatus/ok/valid (0.00s) - --- PASS: TestAuthorization_UpdateStatus/ok/already-invalid (0.00s) --- PASS: TestAuthorization_UpdateStatus/ok/already-valid (0.00s) --- PASS: TestAuthorization_UpdateStatus/fail/error-unexpected-status (0.00s) --- PASS: TestAuthorization_UpdateStatus/ok/expired (0.00s) --- PASS: TestAuthorization_UpdateStatus/fail/db.UpdateAuthorization-error (0.00s) --- PASS: TestAuthorization_UpdateStatus/ok/no-valid-challenges (0.00s) + --- PASS: TestAuthorization_UpdateStatus/ok/valid (0.00s) + --- PASS: TestAuthorization_UpdateStatus/ok/already-invalid (0.00s) === RUN Test_storeError -=== RUN Test_storeError/ok -=== RUN Test_storeError/ok/mark-invalid === RUN Test_storeError/fail/db.UpdateChallenge-error === RUN Test_storeError/fail/db.UpdateChallenge-acme-error +=== RUN Test_storeError/ok +=== RUN Test_storeError/ok/mark-invalid --- PASS: Test_storeError (0.00s) - --- PASS: Test_storeError/ok (0.00s) - --- PASS: Test_storeError/ok/mark-invalid (0.00s) --- PASS: Test_storeError/fail/db.UpdateChallenge-error (0.00s) --- PASS: Test_storeError/fail/db.UpdateChallenge-acme-error (0.00s) + --- PASS: Test_storeError/ok (0.00s) + --- PASS: Test_storeError/ok/mark-invalid (0.00s) === RUN TestKeyAuthorization -=== RUN TestKeyAuthorization/ok === RUN TestKeyAuthorization/fail/jwk-thumbprint-error +=== RUN TestKeyAuthorization/ok --- PASS: TestKeyAuthorization (0.00s) - --- PASS: TestKeyAuthorization/ok (0.00s) --- PASS: TestKeyAuthorization/fail/jwk-thumbprint-error (0.00s) + --- PASS: TestKeyAuthorization/ok (0.00s) === RUN TestChallenge_Validate -=== RUN TestChallenge_Validate/fail/unexpected-type === RUN TestChallenge_Validate/fail/http-01 -=== RUN TestChallenge_Validate/fail/dns-01 +=== RUN TestChallenge_Validate/ok/http-01-insecure === RUN TestChallenge_Validate/ok/dns-01 -=== RUN TestChallenge_Validate/ok/wire-oidc-01 -=== RUN TestChallenge_Validate/fail/wire-oidc-01-no-wire-db -=== RUN TestChallenge_Validate/ok/device-attest-01 +=== RUN TestChallenge_Validate/ok/tls-alpn-01 +2026/11/30 06:39:01 http: TLS handshake error from 127.0.0.1:55486: read tcp 127.0.0.1:34021->127.0.0.1:55486: use of closed network connection === RUN TestChallenge_Validate/fail/wire-dpop-01-no-wire-db -=== RUN TestChallenge_Validate/ok/already-valid === RUN TestChallenge_Validate/fail/already-invalid +=== RUN TestChallenge_Validate/ok/device-attest-01 +=== RUN TestChallenge_Validate/ok/already-valid === RUN TestChallenge_Validate/ok/http-01 -=== RUN TestChallenge_Validate/ok/http-01-insecure +=== RUN TestChallenge_Validate/fail/dns-01 === RUN TestChallenge_Validate/fail/tls-alpn-01 -=== RUN TestChallenge_Validate/ok/tls-alpn-01 -=== RUN TestChallenge_Validate/ok/tls-alpn-01-insecure === RUN TestChallenge_Validate/fail/device-attest-01 +=== RUN TestChallenge_Validate/ok/wire-oidc-01 === RUN TestChallenge_Validate/ok/wire-dpop-01 ---- PASS: TestChallenge_Validate (1.11s) - --- PASS: TestChallenge_Validate/fail/unexpected-type (0.00s) +=== RUN TestChallenge_Validate/fail/unexpected-type +=== RUN TestChallenge_Validate/ok/tls-alpn-01-insecure +=== RUN TestChallenge_Validate/fail/wire-oidc-01-no-wire-db +--- PASS: TestChallenge_Validate (1.49s) --- PASS: TestChallenge_Validate/fail/http-01 (0.00s) - --- PASS: TestChallenge_Validate/fail/dns-01 (0.00s) + --- PASS: TestChallenge_Validate/ok/http-01-insecure (0.00s) --- PASS: TestChallenge_Validate/ok/dns-01 (0.00s) - --- PASS: TestChallenge_Validate/ok/wire-oidc-01 (0.01s) - --- PASS: TestChallenge_Validate/fail/wire-oidc-01-no-wire-db (0.00s) - --- PASS: TestChallenge_Validate/ok/device-attest-01 (0.01s) + --- PASS: TestChallenge_Validate/ok/tls-alpn-01 (1.01s) --- PASS: TestChallenge_Validate/fail/wire-dpop-01-no-wire-db (0.00s) - --- PASS: TestChallenge_Validate/ok/already-valid (0.00s) --- PASS: TestChallenge_Validate/fail/already-invalid (0.00s) + --- PASS: TestChallenge_Validate/ok/device-attest-01 (0.00s) + --- PASS: TestChallenge_Validate/ok/already-valid (0.00s) --- PASS: TestChallenge_Validate/ok/http-01 (0.00s) - --- PASS: TestChallenge_Validate/ok/http-01-insecure (0.00s) + --- PASS: TestChallenge_Validate/fail/dns-01 (0.00s) --- PASS: TestChallenge_Validate/fail/tls-alpn-01 (0.00s) - --- PASS: TestChallenge_Validate/ok/tls-alpn-01 (0.88s) - --- PASS: TestChallenge_Validate/ok/tls-alpn-01-insecure (0.19s) --- PASS: TestChallenge_Validate/fail/device-attest-01 (0.00s) + --- PASS: TestChallenge_Validate/ok/wire-oidc-01 (0.00s) --- PASS: TestChallenge_Validate/ok/wire-dpop-01 (0.00s) + --- PASS: TestChallenge_Validate/fail/unexpected-type (0.00s) + --- PASS: TestChallenge_Validate/ok/tls-alpn-01-insecure (0.47s) + --- PASS: TestChallenge_Validate/fail/wire-oidc-01-no-wire-db (0.00s) === RUN TestHTTP01Validate -=== RUN TestHTTP01Validate/fail/http-get-error-store-error === RUN TestHTTP01Validate/ok/http-get-error === RUN TestHTTP01Validate/fail/http-get->=400-store-error -=== RUN TestHTTP01Validate/ok/http-get->=400 -=== RUN TestHTTP01Validate/fail/read-body -=== RUN TestHTTP01Validate/fail/key-auth-mismatch-store-error === RUN TestHTTP01Validate/fail/key-auth-gen-error === RUN TestHTTP01Validate/ok/key-auth-mismatch +=== RUN TestHTTP01Validate/fail/key-auth-mismatch-store-error +=== RUN TestHTTP01Validate/fail/http-get-error-store-error +=== RUN TestHTTP01Validate/ok/http-get->=400 +=== RUN TestHTTP01Validate/fail/read-body === RUN TestHTTP01Validate/fail/update-challenge-error === RUN TestHTTP01Validate/ok --- PASS: TestHTTP01Validate (0.00s) - --- PASS: TestHTTP01Validate/fail/http-get-error-store-error (0.00s) --- PASS: TestHTTP01Validate/ok/http-get-error (0.00s) --- PASS: TestHTTP01Validate/fail/http-get->=400-store-error (0.00s) - --- PASS: TestHTTP01Validate/ok/http-get->=400 (0.00s) - --- PASS: TestHTTP01Validate/fail/read-body (0.00s) - --- PASS: TestHTTP01Validate/fail/key-auth-mismatch-store-error (0.00s) --- PASS: TestHTTP01Validate/fail/key-auth-gen-error (0.00s) --- PASS: TestHTTP01Validate/ok/key-auth-mismatch (0.00s) + --- PASS: TestHTTP01Validate/fail/key-auth-mismatch-store-error (0.00s) + --- PASS: TestHTTP01Validate/fail/http-get-error-store-error (0.00s) + --- PASS: TestHTTP01Validate/ok/http-get->=400 (0.00s) + --- PASS: TestHTTP01Validate/fail/read-body (0.00s) --- PASS: TestHTTP01Validate/fail/update-challenge-error (0.00s) --- PASS: TestHTTP01Validate/ok (0.00s) === RUN TestDNS01Validate +=== RUN TestDNS01Validate/fail/lookupTXT-store-error +=== RUN TestDNS01Validate/ok/lookupTXT-error +=== RUN TestDNS01Validate/fail/key-auth-gen-error === RUN TestDNS01Validate/fail/key-auth-mismatch-store-error === RUN TestDNS01Validate/ok/key-auth-mismatch-store-error === RUN TestDNS01Validate/fail/update-challenge-error === RUN TestDNS01Validate/ok -=== RUN TestDNS01Validate/fail/lookupTXT-store-error -=== RUN TestDNS01Validate/ok/lookupTXT-error -=== RUN TestDNS01Validate/fail/key-auth-gen-error --- PASS: TestDNS01Validate (0.00s) + --- PASS: TestDNS01Validate/fail/lookupTXT-store-error (0.00s) + --- PASS: TestDNS01Validate/ok/lookupTXT-error (0.00s) + --- PASS: TestDNS01Validate/fail/key-auth-gen-error (0.00s) --- PASS: TestDNS01Validate/fail/key-auth-mismatch-store-error (0.00s) --- PASS: TestDNS01Validate/ok/key-auth-mismatch-store-error (0.00s) --- PASS: TestDNS01Validate/fail/update-challenge-error (0.00s) --- PASS: TestDNS01Validate/ok (0.00s) - --- PASS: TestDNS01Validate/fail/lookupTXT-store-error (0.00s) - --- PASS: TestDNS01Validate/ok/lookupTXT-error (0.00s) - --- PASS: TestDNS01Validate/fail/key-auth-gen-error (0.00s) === RUN TestTLSALPN01Validate -=== RUN TestTLSALPN01Validate/fail/tlsDial-store-error -=== RUN TestTLSALPN01Validate/ok/tlsDial-error -=== RUN TestTLSALPN01Validate/fail/no-certificates-store-error +=== RUN TestTLSALPN01Validate/ok/error-malformed-extension +2026/11/30 06:39:02 http: TLS handshake error from 127.0.0.1:60124: read tcp 127.0.0.1:40139->127.0.0.1:60124: use of closed network connection +=== RUN TestTLSALPN01Validate/fail/malformed-extension-store-error +=== RUN TestTLSALPN01Validate/ok/error-keyauth-mismatch === RUN TestTLSALPN01Validate/ok/error-no-protocol -2025/10/26 22:11:02 http: TLS handshake error from 127.0.0.1:60844: tls: client requested unsupported application protocols (["acme-tls/1"]) +2026/11/30 06:39:03 http: TLS handshake error from 127.0.0.1:41142: tls: client requested unsupported application protocols (["acme-tls/1"]) +=== RUN TestTLSALPN01Validate/fail/no-protocol-store-error +2026/11/30 06:39:03 http: TLS handshake error from 127.0.0.1:46074: tls: client requested unsupported application protocols (["acme-tls/1"]) === RUN TestTLSALPN01Validate/ok/no-names-nor-ips-error -=== RUN TestTLSALPN01Validate/ok/tlsDial-timeout +=== RUN TestTLSALPN01Validate/ok/too-many-names-error === RUN TestTLSALPN01Validate/ok/wrong-name -=== RUN TestTLSALPN01Validate/fail/key-auth-gen-error +2026/11/30 06:39:04 http: TLS handshake error from 127.0.0.1:34836: read tcp 127.0.0.1:45711->127.0.0.1:34836: use of closed network connection +=== RUN TestTLSALPN01Validate/ok/error-extension-not-critical +=== RUN TestTLSALPN01Validate/ok +=== RUN TestTLSALPN01Validate/fail/tlsDial-store-error +=== RUN TestTLSALPN01Validate/ok/tlsDial-timeout +=== RUN TestTLSALPN01Validate/ok/no-certificates-error +=== RUN TestTLSALPN01Validate/fail/no-certificates-store-error === RUN TestTLSALPN01Validate/ok/error-no-extension -=== RUN TestTLSALPN01Validate/fail/malformed-extension-store-error === RUN TestTLSALPN01Validate/fail/keyauth-mismatch-store-error +=== RUN TestTLSALPN01Validate/fail/no-names-store-error +2026/11/30 06:39:08 http: TLS handshake error from 127.0.0.1:40020: read tcp 127.0.0.1:44751->127.0.0.1:40020: use of closed network connection +=== RUN TestTLSALPN01Validate/fail/key-auth-gen-error +2026/11/30 06:39:09 http: TLS handshake error from 127.0.0.1:42250: read tcp 127.0.0.1:45703->127.0.0.1:42250: use of closed network connection === RUN TestTLSALPN01Validate/ok/error-obsolete-oid -=== RUN TestTLSALPN01Validate/ok/ip -=== RUN TestTLSALPN01Validate/ok/no-certificates-error -=== RUN TestTLSALPN01Validate/ok/too-many-names-error -=== RUN TestTLSALPN01Validate/ok/error-malformed-extension -=== RUN TestTLSALPN01Validate/ok/error-keyauth-mismatch +2026/11/30 06:39:09 http: TLS handshake error from 127.0.0.1:35210: read tcp 127.0.0.1:33929->127.0.0.1:35210: use of closed network connection === RUN TestTLSALPN01Validate/fail/obsolete-oid-store-error -=== RUN TestTLSALPN01Validate/ok -2025/10/26 22:11:09 http: TLS handshake error from 127.0.0.1:40558: read tcp 127.0.0.1:46305->127.0.0.1:40558: use of closed network connection -=== RUN TestTLSALPN01Validate/fail/no-protocol-store-error -2025/10/26 22:11:09 http: TLS handshake error from 127.0.0.1:43198: tls: client requested unsupported application protocols (["acme-tls/1"]) -=== RUN TestTLSALPN01Validate/fail/no-names-store-error +2026/11/30 06:39:09 http: TLS handshake error from 127.0.0.1:47332: read tcp 127.0.0.1:44913->127.0.0.1:47332: use of closed network connection +=== RUN TestTLSALPN01Validate/ok/ip +2026/11/30 06:39:12 http: TLS handshake error from 127.0.0.1:56002: read tcp 127.0.0.1:46705->127.0.0.1:56002: use of closed network connection +=== RUN TestTLSALPN01Validate/ok/tlsDial-error === RUN TestTLSALPN01Validate/fail/no-extension-store-error -=== RUN TestTLSALPN01Validate/ok/error-extension-not-critical +2026/11/30 06:39:13 http: TLS handshake error from 127.0.0.1:50202: read tcp 127.0.0.1:43217->127.0.0.1:50202: use of closed network connection === RUN TestTLSALPN01Validate/fail/extension-not-critical-store-error ---- PASS: TestTLSALPN01Validate (8.79s) - --- PASS: TestTLSALPN01Validate/fail/tlsDial-store-error (0.00s) - --- PASS: TestTLSALPN01Validate/ok/tlsDial-error (0.00s) - --- PASS: TestTLSALPN01Validate/fail/no-certificates-store-error (0.00s) +2026/11/30 06:39:14 http: TLS handshake error from 127.0.0.1:49092: read tcp 127.0.0.1:45743->127.0.0.1:49092: use of closed network connection +--- PASS: TestTLSALPN01Validate (11.88s) + --- PASS: TestTLSALPN01Validate/ok/error-malformed-extension (0.41s) + --- PASS: TestTLSALPN01Validate/fail/malformed-extension-store-error (0.65s) + --- PASS: TestTLSALPN01Validate/ok/error-keyauth-mismatch (0.24s) --- PASS: TestTLSALPN01Validate/ok/error-no-protocol (0.00s) - --- PASS: TestTLSALPN01Validate/ok/no-names-nor-ips-error (0.96s) - --- PASS: TestTLSALPN01Validate/ok/tlsDial-timeout (1.00s) - --- PASS: TestTLSALPN01Validate/ok/wrong-name (0.33s) - --- PASS: TestTLSALPN01Validate/fail/key-auth-gen-error (0.39s) - --- PASS: TestTLSALPN01Validate/ok/error-no-extension (0.47s) - --- PASS: TestTLSALPN01Validate/fail/malformed-extension-store-error (0.55s) - --- PASS: TestTLSALPN01Validate/fail/keyauth-mismatch-store-error (0.48s) - --- PASS: TestTLSALPN01Validate/ok/error-obsolete-oid (0.44s) - --- PASS: TestTLSALPN01Validate/ok/ip (0.44s) - --- PASS: TestTLSALPN01Validate/ok/no-certificates-error (0.00s) - --- PASS: TestTLSALPN01Validate/ok/too-many-names-error (0.08s) - --- PASS: TestTLSALPN01Validate/ok/error-malformed-extension (0.79s) - --- PASS: TestTLSALPN01Validate/ok/error-keyauth-mismatch (0.84s) - --- PASS: TestTLSALPN01Validate/fail/obsolete-oid-store-error (0.55s) - --- PASS: TestTLSALPN01Validate/ok (0.30s) --- PASS: TestTLSALPN01Validate/fail/no-protocol-store-error (0.00s) - --- PASS: TestTLSALPN01Validate/fail/no-names-store-error (0.09s) - --- PASS: TestTLSALPN01Validate/fail/no-extension-store-error (0.19s) - --- PASS: TestTLSALPN01Validate/ok/error-extension-not-critical (0.52s) - --- PASS: TestTLSALPN01Validate/fail/extension-not-critical-store-error (0.35s) + --- PASS: TestTLSALPN01Validate/ok/no-names-nor-ips-error (0.19s) + --- PASS: TestTLSALPN01Validate/ok/too-many-names-error (0.49s) + --- PASS: TestTLSALPN01Validate/ok/wrong-name (0.37s) + --- PASS: TestTLSALPN01Validate/ok/error-extension-not-critical (0.22s) + --- PASS: TestTLSALPN01Validate/ok (0.14s) + --- PASS: TestTLSALPN01Validate/fail/tlsDial-store-error (0.00s) + --- PASS: TestTLSALPN01Validate/ok/tlsDial-timeout (1.01s) + --- PASS: TestTLSALPN01Validate/ok/no-certificates-error (0.00s) + --- PASS: TestTLSALPN01Validate/fail/no-certificates-store-error (0.00s) + --- PASS: TestTLSALPN01Validate/ok/error-no-extension (0.90s) + --- PASS: TestTLSALPN01Validate/fail/keyauth-mismatch-store-error (1.35s) + --- PASS: TestTLSALPN01Validate/fail/no-names-store-error (0.47s) + --- PASS: TestTLSALPN01Validate/fail/key-auth-gen-error (0.42s) + --- PASS: TestTLSALPN01Validate/ok/error-obsolete-oid (0.33s) + --- PASS: TestTLSALPN01Validate/fail/obsolete-oid-store-error (0.60s) + --- PASS: TestTLSALPN01Validate/ok/ip (2.32s) + --- PASS: TestTLSALPN01Validate/ok/tlsDial-error (0.00s) + --- PASS: TestTLSALPN01Validate/fail/no-extension-store-error (1.01s) + --- PASS: TestTLSALPN01Validate/fail/extension-not-critical-store-error (0.74s) === RUN Test_reverseAddr === RUN Test_reverseAddr/ok/ipv4 === RUN Test_reverseAddr/ok/ipv6 @@ -1928,7 +1973,7 @@ === RUN Test_doStepAttestationFormat/fail_sig_verify_RSA === RUN Test_doStepAttestationFormat/fail_sig_verify_Ed25519 === RUN Test_doStepAttestationFormat/fail_unmarshal_serial_number ---- PASS: Test_doStepAttestationFormat (1.04s) +--- PASS: Test_doStepAttestationFormat (2.17s) --- PASS: Test_doStepAttestationFormat/ok (0.00s) --- PASS: Test_doStepAttestationFormat/fail_yubico_issuer (0.00s) --- PASS: Test_doStepAttestationFormat/fail_x5c_type (0.00s) @@ -1948,55 +1993,55 @@ --- PASS: Test_doStepAttestationFormat/fail_unmarshal_serial_number (0.00s) === RUN Test_doStepAttestationFormat_noCAIntermediate === RUN Test_doStepAttestationFormat_noCAIntermediate/fail_no_intermediate ---- PASS: Test_doStepAttestationFormat_noCAIntermediate (0.00s) +--- PASS: Test_doStepAttestationFormat_noCAIntermediate (0.01s) --- PASS: Test_doStepAttestationFormat_noCAIntermediate/fail_no_intermediate (0.00s) === RUN Test_deviceAttest01Validate -=== RUN Test_deviceAttest01Validate/fail/getAuthorization -=== RUN Test_deviceAttest01Validate/ok/unknown-attestation-format -=== RUN Test_deviceAttest01Validate/fail/db.UpdateChallenge === RUN Test_deviceAttest01Validate/fail/json.Unmarshal === RUN Test_deviceAttest01Validate/ok/base64-decode -=== RUN Test_deviceAttest01Validate/ok/empty-json-attobj === RUN Test_deviceAttest01Validate/ok/cborDecoder.Wellformed -=== RUN Test_deviceAttest01Validate/ok/unsupported-attestation-format === RUN Test_deviceAttest01Validate/ok/doAppleAttestationFormat-storeError +=== RUN Test_deviceAttest01Validate/fail/db.UpdateChallenge +=== RUN Test_deviceAttest01Validate/fail/getAuthorization +=== RUN Test_deviceAttest01Validate/ok/empty-json-attobj +=== RUN Test_deviceAttest01Validate/ok/doAppleAttestationFormat-non-matching-challenge-value +=== RUN Test_deviceAttest01Validate/ok/doStepAttestationFormat-storeError === RUN Test_deviceAttest01Validate/fail/storeError -=== RUN Test_deviceAttest01Validate/ok/storeError-return-nil === RUN Test_deviceAttest01Validate/ok/empty-attobj === RUN Test_deviceAttest01Validate/ok/doAppleAttestationFormat-non-matching-nonce === RUN Test_deviceAttest01Validate/ok/doStepAttestationFormat-non-matching-identifier +=== RUN Test_deviceAttest01Validate/ok/unknown-attestation-format === RUN Test_deviceAttest01Validate/ok +=== RUN Test_deviceAttest01Validate/ok/storeError-return-nil +=== RUN Test_deviceAttest01Validate/ok/unsupported-attestation-format === RUN Test_deviceAttest01Validate/ok/prov.IsAttestationFormatEnabled -=== RUN Test_deviceAttest01Validate/ok/doAppleAttestationFormat-non-matching-challenge-value -=== RUN Test_deviceAttest01Validate/ok/doStepAttestationFormat-storeError === RUN Test_deviceAttest01Validate/fail/db.UpdateAuthorization ---- PASS: Test_deviceAttest01Validate (0.04s) - --- PASS: Test_deviceAttest01Validate/fail/getAuthorization (0.00s) - --- PASS: Test_deviceAttest01Validate/ok/unknown-attestation-format (0.00s) - --- PASS: Test_deviceAttest01Validate/fail/db.UpdateChallenge (0.00s) +--- PASS: Test_deviceAttest01Validate (0.12s) --- PASS: Test_deviceAttest01Validate/fail/json.Unmarshal (0.00s) --- PASS: Test_deviceAttest01Validate/ok/base64-decode (0.00s) - --- PASS: Test_deviceAttest01Validate/ok/empty-json-attobj (0.00s) --- PASS: Test_deviceAttest01Validate/ok/cborDecoder.Wellformed (0.00s) - --- PASS: Test_deviceAttest01Validate/ok/unsupported-attestation-format (0.00s) --- PASS: Test_deviceAttest01Validate/ok/doAppleAttestationFormat-storeError (0.00s) + --- PASS: Test_deviceAttest01Validate/fail/db.UpdateChallenge (0.01s) + --- PASS: Test_deviceAttest01Validate/fail/getAuthorization (0.00s) + --- PASS: Test_deviceAttest01Validate/ok/empty-json-attobj (0.00s) + --- PASS: Test_deviceAttest01Validate/ok/doAppleAttestationFormat-non-matching-challenge-value (0.01s) + --- PASS: Test_deviceAttest01Validate/ok/doStepAttestationFormat-storeError (0.00s) --- PASS: Test_deviceAttest01Validate/fail/storeError (0.00s) - --- PASS: Test_deviceAttest01Validate/ok/storeError-return-nil (0.00s) --- PASS: Test_deviceAttest01Validate/ok/empty-attobj (0.00s) - --- PASS: Test_deviceAttest01Validate/ok/doAppleAttestationFormat-non-matching-nonce (0.01s) - --- PASS: Test_deviceAttest01Validate/ok/doStepAttestationFormat-non-matching-identifier (0.01s) + --- PASS: Test_deviceAttest01Validate/ok/doAppleAttestationFormat-non-matching-nonce (0.05s) + --- PASS: Test_deviceAttest01Validate/ok/doStepAttestationFormat-non-matching-identifier (0.00s) + --- PASS: Test_deviceAttest01Validate/ok/unknown-attestation-format (0.01s) --- PASS: Test_deviceAttest01Validate/ok (0.01s) + --- PASS: Test_deviceAttest01Validate/ok/storeError-return-nil (0.00s) + --- PASS: Test_deviceAttest01Validate/ok/unsupported-attestation-format (0.00s) --- PASS: Test_deviceAttest01Validate/ok/prov.IsAttestationFormatEnabled (0.00s) - --- PASS: Test_deviceAttest01Validate/ok/doAppleAttestationFormat-non-matching-challenge-value (0.00s) - --- PASS: Test_deviceAttest01Validate/ok/doStepAttestationFormat-storeError (0.00s) - --- PASS: Test_deviceAttest01Validate/fail/db.UpdateAuthorization (0.00s) + --- PASS: Test_deviceAttest01Validate/fail/db.UpdateAuthorization (0.01s) === RUN Test_validateAKCertificate === RUN Test_validateAKCertificate/ok === RUN Test_validateAKCertificate/fail/version === RUN Test_validateAKCertificate/fail/subject === RUN Test_validateAKCertificate/fail/isCA === RUN Test_validateAKCertificate/fail/extendedKeyUsage ---- PASS: Test_validateAKCertificate (0.00s) +--- PASS: Test_validateAKCertificate (0.01s) --- PASS: Test_validateAKCertificate/ok (0.00s) --- PASS: Test_validateAKCertificate/fail/version (0.00s) --- PASS: Test_validateAKCertificate/fail/subject (0.00s) @@ -2007,7 +2052,7 @@ === RUN Test_validateAKCertificateSubjectAlternativeNames/fail/missing-manufacturer === RUN Test_validateAKCertificateSubjectAlternativeNames/fail/missing-model === RUN Test_validateAKCertificateSubjectAlternativeNames/fail/missing-firmware-version ---- PASS: Test_validateAKCertificateSubjectAlternativeNames (0.01s) +--- PASS: Test_validateAKCertificateSubjectAlternativeNames (0.02s) --- PASS: Test_validateAKCertificateSubjectAlternativeNames/ok (0.00s) --- PASS: Test_validateAKCertificateSubjectAlternativeNames/fail/missing-manufacturer (0.00s) --- PASS: Test_validateAKCertificateSubjectAlternativeNames/fail/missing-model (0.00s) @@ -2016,7 +2061,7 @@ === RUN Test_validateAKCertificateExtendedKeyUsage/ok === RUN Test_validateAKCertificateExtendedKeyUsage/fail/wrong-eku === RUN Test_validateAKCertificateExtendedKeyUsage/fail/missing-eku ---- PASS: Test_validateAKCertificateExtendedKeyUsage (0.01s) +--- PASS: Test_validateAKCertificateExtendedKeyUsage (0.02s) --- PASS: Test_validateAKCertificateExtendedKeyUsage/ok (0.00s) --- PASS: Test_validateAKCertificateExtendedKeyUsage/fail/wrong-eku (0.00s) --- PASS: Test_validateAKCertificateExtendedKeyUsage/fail/missing-eku (0.00s) @@ -2045,55 +2090,55 @@ --- PASS: Test_dns01ChallengeHost/rooted_dns (0.00s) --- PASS: Test_dns01ChallengeHost/rooted_dns_strict (0.00s) === RUN Test_wireDPOP01Validate +=== RUN Test_wireDPOP01Validate/fail/no-provisioner === RUN Test_wireDPOP01Validate/fail/unmarshal -=== RUN Test_wireDPOP01Validate/fail/wire-parse-id === RUN Test_wireDPOP01Validate/fail/wire-parse-client-id === RUN Test_wireDPOP01Validate/fail/db.UpdateChallenge === RUN Test_wireDPOP01Validate/fail/db.GetAllOrdersByAccountID === RUN Test_wireDPOP01Validate/fail/db.GetAllOrdersByAccountID-zero === RUN Test_wireDPOP01Validate/fail/db.CreateDpopToken === RUN Test_wireDPOP01Validate/ok -=== RUN Test_wireDPOP01Validate/fail/no-provisioner === RUN Test_wireDPOP01Validate/fail/no-linker +=== RUN Test_wireDPOP01Validate/fail/wire-parse-id === RUN Test_wireDPOP01Validate/fail/parse-and-verify ---- PASS: Test_wireDPOP01Validate (0.01s) - --- PASS: Test_wireDPOP01Validate/fail/unmarshal (0.00s) - --- PASS: Test_wireDPOP01Validate/fail/wire-parse-id (0.00s) +--- PASS: Test_wireDPOP01Validate (0.04s) + --- PASS: Test_wireDPOP01Validate/fail/no-provisioner (0.00s) + --- PASS: Test_wireDPOP01Validate/fail/unmarshal (0.02s) --- PASS: Test_wireDPOP01Validate/fail/wire-parse-client-id (0.00s) --- PASS: Test_wireDPOP01Validate/fail/db.UpdateChallenge (0.00s) --- PASS: Test_wireDPOP01Validate/fail/db.GetAllOrdersByAccountID (0.00s) --- PASS: Test_wireDPOP01Validate/fail/db.GetAllOrdersByAccountID-zero (0.00s) - --- PASS: Test_wireDPOP01Validate/fail/db.CreateDpopToken (0.00s) + --- PASS: Test_wireDPOP01Validate/fail/db.CreateDpopToken (0.01s) --- PASS: Test_wireDPOP01Validate/ok (0.00s) - --- PASS: Test_wireDPOP01Validate/fail/no-provisioner (0.00s) --- PASS: Test_wireDPOP01Validate/fail/no-linker (0.00s) + --- PASS: Test_wireDPOP01Validate/fail/wire-parse-id (0.00s) --- PASS: Test_wireDPOP01Validate/fail/parse-and-verify (0.00s) === RUN Test_wireOIDC01Validate -=== RUN Test_wireOIDC01Validate/fail/verify -=== RUN Test_wireOIDC01Validate/fail/validateWireOIDCClaims === RUN Test_wireOIDC01Validate/fail/db.GetAllOrdersByAccountID === RUN Test_wireOIDC01Validate/fail/db.GetAllOrdersByAccountID-zero -=== RUN Test_wireOIDC01Validate/fail/no-provisioner -=== RUN Test_wireOIDC01Validate/fail/unmarshal +=== RUN Test_wireOIDC01Validate/fail/wire-parse-id === RUN Test_wireOIDC01Validate/fail/keyauth-mismatch -=== RUN Test_wireOIDC01Validate/fail/db.UpdateChallenge === RUN Test_wireOIDC01Validate/fail/db.CreateOidcToken === RUN Test_wireOIDC01Validate/ok/wire-oidc-01 +=== RUN Test_wireOIDC01Validate/fail/no-provisioner === RUN Test_wireOIDC01Validate/fail/no-linker -=== RUN Test_wireOIDC01Validate/fail/wire-parse-id +=== RUN Test_wireOIDC01Validate/fail/unmarshal +=== RUN Test_wireOIDC01Validate/fail/verify +=== RUN Test_wireOIDC01Validate/fail/validateWireOIDCClaims +=== RUN Test_wireOIDC01Validate/fail/db.UpdateChallenge --- PASS: Test_wireOIDC01Validate (0.02s) - --- PASS: Test_wireOIDC01Validate/fail/verify (0.00s) - --- PASS: Test_wireOIDC01Validate/fail/validateWireOIDCClaims (0.00s) - --- PASS: Test_wireOIDC01Validate/fail/db.GetAllOrdersByAccountID (0.00s) - --- PASS: Test_wireOIDC01Validate/fail/db.GetAllOrdersByAccountID-zero (0.00s) - --- PASS: Test_wireOIDC01Validate/fail/no-provisioner (0.00s) - --- PASS: Test_wireOIDC01Validate/fail/unmarshal (0.00s) + --- PASS: Test_wireOIDC01Validate/fail/db.GetAllOrdersByAccountID (0.01s) + --- PASS: Test_wireOIDC01Validate/fail/db.GetAllOrdersByAccountID-zero (0.01s) + --- PASS: Test_wireOIDC01Validate/fail/wire-parse-id (0.00s) --- PASS: Test_wireOIDC01Validate/fail/keyauth-mismatch (0.00s) - --- PASS: Test_wireOIDC01Validate/fail/db.UpdateChallenge (0.00s) --- PASS: Test_wireOIDC01Validate/fail/db.CreateOidcToken (0.00s) --- PASS: Test_wireOIDC01Validate/ok/wire-oidc-01 (0.00s) + --- PASS: Test_wireOIDC01Validate/fail/no-provisioner (0.00s) --- PASS: Test_wireOIDC01Validate/fail/no-linker (0.00s) - --- PASS: Test_wireOIDC01Validate/fail/wire-parse-id (0.00s) + --- PASS: Test_wireOIDC01Validate/fail/unmarshal (0.00s) + --- PASS: Test_wireOIDC01Validate/fail/verify (0.00s) + --- PASS: Test_wireOIDC01Validate/fail/validateWireOIDCClaims (0.00s) + --- PASS: Test_wireOIDC01Validate/fail/db.UpdateChallenge (0.00s) === RUN Test_parseAndVerifyWireAccessToken challenge_wire_test.go:2126: skip until we can retrieve public key from e2e test, so that we can actually verify the token --- SKIP: Test_parseAndVerifyWireAccessToken (0.00s) @@ -2172,77 +2217,77 @@ --- PASS: TestLinker_LinkOrdersByAccountID (0.00s) --- PASS: TestLinker_LinkOrdersByAccountID/ok (0.00s) === RUN TestOrder_UpdateStatus -=== RUN TestOrder_UpdateStatus/fail/error-unexpected-status -=== RUN TestOrder_UpdateStatus/ok/pending-expired +=== RUN TestOrder_UpdateStatus/ok/invalid +=== RUN TestOrder_UpdateStatus/ok/ready-expired +=== RUN TestOrder_UpdateStatus/fail/ready-expired-db.UpdateOrder-error === RUN TestOrder_UpdateStatus/ok/still-pending === RUN TestOrder_UpdateStatus/ok/valid === RUN TestOrder_UpdateStatus/ok/already-invalid -=== RUN TestOrder_UpdateStatus/ok/ready-expired -=== RUN TestOrder_UpdateStatus/fail/ready-expired-db.UpdateOrder-error -=== RUN TestOrder_UpdateStatus/ok/invalid === RUN TestOrder_UpdateStatus/ok/already-valid +=== RUN TestOrder_UpdateStatus/fail/error-unexpected-status +=== RUN TestOrder_UpdateStatus/ok/pending-expired --- PASS: TestOrder_UpdateStatus (0.00s) - --- PASS: TestOrder_UpdateStatus/fail/error-unexpected-status (0.00s) - --- PASS: TestOrder_UpdateStatus/ok/pending-expired (0.00s) + --- PASS: TestOrder_UpdateStatus/ok/invalid (0.00s) + --- PASS: TestOrder_UpdateStatus/ok/ready-expired (0.00s) + --- PASS: TestOrder_UpdateStatus/fail/ready-expired-db.UpdateOrder-error (0.00s) --- PASS: TestOrder_UpdateStatus/ok/still-pending (0.00s) --- PASS: TestOrder_UpdateStatus/ok/valid (0.00s) --- PASS: TestOrder_UpdateStatus/ok/already-invalid (0.00s) - --- PASS: TestOrder_UpdateStatus/ok/ready-expired (0.00s) - --- PASS: TestOrder_UpdateStatus/fail/ready-expired-db.UpdateOrder-error (0.00s) - --- PASS: TestOrder_UpdateStatus/ok/invalid (0.00s) --- PASS: TestOrder_UpdateStatus/ok/already-valid (0.00s) + --- PASS: TestOrder_UpdateStatus/fail/error-unexpected-status (0.00s) + --- PASS: TestOrder_UpdateStatus/ok/pending-expired (0.00s) === RUN TestOrder_Finalize === RUN TestOrder_Finalize/ok/new-cert-dns-and-ip -=== RUN TestOrder_Finalize/fail/pending -=== RUN TestOrder_Finalize/ok/already-valid -=== RUN TestOrder_Finalize/fail/error-unexpected-status +=== RUN TestOrder_Finalize/fail/invalid === RUN TestOrder_Finalize/fail/error-provisioner-auth -=== RUN TestOrder_Finalize/fail/error-ca-sign -=== RUN TestOrder_Finalize/fail/webhook-error -=== RUN TestOrder_Finalize/fail/csr-fingerprint -=== RUN TestOrder_Finalize/ok/permanent-identifier -=== RUN TestOrder_Finalize/fail/error-template-options +=== RUN TestOrder_Finalize/fail/error-db.UpdateOrder === RUN TestOrder_Finalize/ok/permanent-identifier-only -=== RUN TestOrder_Finalize/fail/csr-wire-id-csr-uri-missing -=== RUN TestOrder_Finalize/fail/other-than-wire-ids-present +=== RUN TestOrder_Finalize/fail/wire-id-org-missing === RUN TestOrder_Finalize/fail/wire-id-display-name-missing === RUN TestOrder_Finalize/ok/wire-id-device -=== RUN TestOrder_Finalize/ok/new-cert-dns -=== RUN TestOrder_Finalize/fail/error-db.CreateCertificate -=== RUN TestOrder_Finalize/fail/wire-id-org-missing -=== RUN TestOrder_Finalize/fail/wire-id-display-name-mismatch -=== RUN TestOrder_Finalize/ok/wire-id-user -=== RUN TestOrder_Finalize/fail/invalid +=== RUN TestOrder_Finalize/ok/new-cert-ip +=== RUN TestOrder_Finalize/fail/pending === RUN TestOrder_Finalize/fail/non-matching-permanent-identifier-common-name -=== RUN TestOrder_Finalize/fail/error-db.UpdateOrder +=== RUN TestOrder_Finalize/fail/error-ca-sign +=== RUN TestOrder_Finalize/fail/csr-wire-id-csr-uri-missing +=== RUN TestOrder_Finalize/ok/wire-id-user +=== RUN TestOrder_Finalize/fail/error-unexpected-status +=== RUN TestOrder_Finalize/fail/error-db.CreateCertificate +=== RUN TestOrder_Finalize/fail/csr-fingerprint +=== RUN TestOrder_Finalize/ok/permanent-identifier === RUN TestOrder_Finalize/fail/csr-wire-id-csr-uri-mismatch -=== RUN TestOrder_Finalize/ok/new-cert-ip ---- PASS: TestOrder_Finalize (0.01s) +=== RUN TestOrder_Finalize/fail/other-than-wire-ids-present +=== RUN TestOrder_Finalize/fail/wire-id-display-name-mismatch +=== RUN TestOrder_Finalize/ok/new-cert-dns +=== RUN TestOrder_Finalize/ok/already-valid +=== RUN TestOrder_Finalize/fail/error-template-options +=== RUN TestOrder_Finalize/fail/webhook-error +--- PASS: TestOrder_Finalize (0.00s) --- PASS: TestOrder_Finalize/ok/new-cert-dns-and-ip (0.00s) - --- PASS: TestOrder_Finalize/fail/pending (0.00s) - --- PASS: TestOrder_Finalize/ok/already-valid (0.00s) - --- PASS: TestOrder_Finalize/fail/error-unexpected-status (0.00s) + --- PASS: TestOrder_Finalize/fail/invalid (0.00s) --- PASS: TestOrder_Finalize/fail/error-provisioner-auth (0.00s) - --- PASS: TestOrder_Finalize/fail/error-ca-sign (0.00s) - --- PASS: TestOrder_Finalize/fail/webhook-error (0.00s) - --- PASS: TestOrder_Finalize/fail/csr-fingerprint (0.00s) - --- PASS: TestOrder_Finalize/ok/permanent-identifier (0.00s) - --- PASS: TestOrder_Finalize/fail/error-template-options (0.00s) + --- PASS: TestOrder_Finalize/fail/error-db.UpdateOrder (0.00s) --- PASS: TestOrder_Finalize/ok/permanent-identifier-only (0.00s) - --- PASS: TestOrder_Finalize/fail/csr-wire-id-csr-uri-missing (0.00s) - --- PASS: TestOrder_Finalize/fail/other-than-wire-ids-present (0.00s) + --- PASS: TestOrder_Finalize/fail/wire-id-org-missing (0.00s) --- PASS: TestOrder_Finalize/fail/wire-id-display-name-missing (0.00s) --- PASS: TestOrder_Finalize/ok/wire-id-device (0.00s) - --- PASS: TestOrder_Finalize/ok/new-cert-dns (0.00s) - --- PASS: TestOrder_Finalize/fail/error-db.CreateCertificate (0.00s) - --- PASS: TestOrder_Finalize/fail/wire-id-org-missing (0.00s) - --- PASS: TestOrder_Finalize/fail/wire-id-display-name-mismatch (0.00s) - --- PASS: TestOrder_Finalize/ok/wire-id-user (0.00s) - --- PASS: TestOrder_Finalize/fail/invalid (0.00s) + --- PASS: TestOrder_Finalize/ok/new-cert-ip (0.00s) + --- PASS: TestOrder_Finalize/fail/pending (0.00s) --- PASS: TestOrder_Finalize/fail/non-matching-permanent-identifier-common-name (0.00s) - --- PASS: TestOrder_Finalize/fail/error-db.UpdateOrder (0.00s) + --- PASS: TestOrder_Finalize/fail/error-ca-sign (0.00s) + --- PASS: TestOrder_Finalize/fail/csr-wire-id-csr-uri-missing (0.00s) + --- PASS: TestOrder_Finalize/ok/wire-id-user (0.00s) + --- PASS: TestOrder_Finalize/fail/error-unexpected-status (0.00s) + --- PASS: TestOrder_Finalize/fail/error-db.CreateCertificate (0.00s) + --- PASS: TestOrder_Finalize/fail/csr-fingerprint (0.00s) + --- PASS: TestOrder_Finalize/ok/permanent-identifier (0.00s) --- PASS: TestOrder_Finalize/fail/csr-wire-id-csr-uri-mismatch (0.00s) - --- PASS: TestOrder_Finalize/ok/new-cert-ip (0.00s) + --- PASS: TestOrder_Finalize/fail/other-than-wire-ids-present (0.00s) + --- PASS: TestOrder_Finalize/fail/wire-id-display-name-mismatch (0.00s) + --- PASS: TestOrder_Finalize/ok/new-cert-dns (0.00s) + --- PASS: TestOrder_Finalize/ok/already-valid (0.00s) + --- PASS: TestOrder_Finalize/fail/error-template-options (0.00s) + --- PASS: TestOrder_Finalize/fail/webhook-error (0.00s) === RUN Test_uniqueSortedIPs === RUN Test_uniqueSortedIPs/ok/empty === RUN Test_uniqueSortedIPs/ok/single-ipv4 @@ -2255,7 +2300,7 @@ === RUN Test_uniqueSortedIPs/ok/mixed-ipv4-and-ipv6 === RUN Test_uniqueSortedIPs/ok/mixed-ipv4-and-ipv6-and-varying-byte-representations === RUN Test_uniqueSortedIPs/ok/mixed-ipv4-and-ipv6-and-more-varying-byte-representations ---- PASS: Test_uniqueSortedIPs (0.01s) +--- PASS: Test_uniqueSortedIPs (0.00s) --- PASS: Test_uniqueSortedIPs/ok/empty (0.00s) --- PASS: Test_uniqueSortedIPs/ok/single-ipv4 (0.00s) --- PASS: Test_uniqueSortedIPs/ok/multiple-ipv4 (0.00s) @@ -2348,31 +2393,31 @@ --- PASS: TestOrder_getAuthorizationFingerprint/ok_fingerprint (0.00s) --- PASS: TestOrder_getAuthorizationFingerprint/fail (0.00s) PASS -ok github.com/smallstep/certificates/acme 11.114s +ok github.com/smallstep/certificates/acme 15.908s === RUN TestNewAccountRequest_Validate -=== RUN TestNewAccountRequest_Validate/ok -=== RUN TestNewAccountRequest_Validate/ok/onlyReturnExisting === RUN TestNewAccountRequest_Validate/fail/incompatible-input === RUN TestNewAccountRequest_Validate/fail/bad-contact +=== RUN TestNewAccountRequest_Validate/ok +=== RUN TestNewAccountRequest_Validate/ok/onlyReturnExisting --- PASS: TestNewAccountRequest_Validate (0.00s) - --- PASS: TestNewAccountRequest_Validate/ok (0.00s) - --- PASS: TestNewAccountRequest_Validate/ok/onlyReturnExisting (0.00s) --- PASS: TestNewAccountRequest_Validate/fail/incompatible-input (0.00s) --- PASS: TestNewAccountRequest_Validate/fail/bad-contact (0.00s) + --- PASS: TestNewAccountRequest_Validate/ok (0.00s) + --- PASS: TestNewAccountRequest_Validate/ok/onlyReturnExisting (0.00s) === RUN TestUpdateAccountRequest_Validate +=== RUN TestUpdateAccountRequest_Validate/fail/incompatible-input === RUN TestUpdateAccountRequest_Validate/fail/bad-contact === RUN TestUpdateAccountRequest_Validate/fail/bad-status === RUN TestUpdateAccountRequest_Validate/ok/contact === RUN TestUpdateAccountRequest_Validate/ok/status === RUN TestUpdateAccountRequest_Validate/ok/accept-empty -=== RUN TestUpdateAccountRequest_Validate/fail/incompatible-input --- PASS: TestUpdateAccountRequest_Validate (0.00s) + --- PASS: TestUpdateAccountRequest_Validate/fail/incompatible-input (0.00s) --- PASS: TestUpdateAccountRequest_Validate/fail/bad-contact (0.00s) --- PASS: TestUpdateAccountRequest_Validate/fail/bad-status (0.00s) --- PASS: TestUpdateAccountRequest_Validate/ok/contact (0.00s) --- PASS: TestUpdateAccountRequest_Validate/ok/status (0.00s) --- PASS: TestUpdateAccountRequest_Validate/ok/accept-empty (0.00s) - --- PASS: TestUpdateAccountRequest_Validate/fail/incompatible-input (0.00s) === RUN TestHandler_GetOrdersByAccountID === RUN TestHandler_GetOrdersByAccountID/fail/no-account === RUN TestHandler_GetOrdersByAccountID/fail/nil-account @@ -2386,147 +2431,147 @@ --- PASS: TestHandler_GetOrdersByAccountID/fail/db.GetOrdersByAccountID-error (0.00s) --- PASS: TestHandler_GetOrdersByAccountID/ok (0.00s) === RUN TestHandler_NewAccount -=== RUN TestHandler_NewAccount/ok/new-account -=== RUN TestHandler_NewAccount/fail/db.UpdateExternalAccountKey-error -=== RUN TestHandler_NewAccount/ok/return-existing +=== RUN TestHandler_NewAccount/fail/no-existing-account +=== RUN TestHandler_NewAccount/fail/no-jwk === RUN TestHandler_NewAccount/ok/new-account-with-eab -=== RUN TestHandler_NewAccount/fail/no-payload +=== RUN TestHandler_NewAccount/fail/db.UpdateExternalAccountKey-error +=== RUN TestHandler_NewAccount/ok/new-account-no-eab-required === RUN TestHandler_NewAccount/fail/nil-payload === RUN TestHandler_NewAccount/fail/unmarshal-payload-error -=== RUN TestHandler_NewAccount/fail/no-jwk +=== RUN TestHandler_NewAccount/fail/malformed-payload-error === RUN TestHandler_NewAccount/fail/nil-jwk === RUN TestHandler_NewAccount/fail/db.CreateAccount-error -=== RUN TestHandler_NewAccount/fail/new-account-no-eab-provided === RUN TestHandler_NewAccount/fail/acmeProvisionerFromContext -=== RUN TestHandler_NewAccount/ok/new-account-no-eab-required -=== RUN TestHandler_NewAccount/fail/malformed-payload-error -=== RUN TestHandler_NewAccount/fail/no-existing-account ---- PASS: TestHandler_NewAccount (0.01s) - --- PASS: TestHandler_NewAccount/ok/new-account (0.00s) - --- PASS: TestHandler_NewAccount/fail/db.UpdateExternalAccountKey-error (0.00s) - --- PASS: TestHandler_NewAccount/ok/return-existing (0.00s) +=== RUN TestHandler_NewAccount/ok/new-account +=== RUN TestHandler_NewAccount/ok/return-existing +=== RUN TestHandler_NewAccount/fail/no-payload +=== RUN TestHandler_NewAccount/fail/new-account-no-eab-provided +--- PASS: TestHandler_NewAccount (0.00s) + --- PASS: TestHandler_NewAccount/fail/no-existing-account (0.00s) + --- PASS: TestHandler_NewAccount/fail/no-jwk (0.00s) --- PASS: TestHandler_NewAccount/ok/new-account-with-eab (0.00s) - --- PASS: TestHandler_NewAccount/fail/no-payload (0.00s) + --- PASS: TestHandler_NewAccount/fail/db.UpdateExternalAccountKey-error (0.00s) + --- PASS: TestHandler_NewAccount/ok/new-account-no-eab-required (0.00s) --- PASS: TestHandler_NewAccount/fail/nil-payload (0.00s) --- PASS: TestHandler_NewAccount/fail/unmarshal-payload-error (0.00s) - --- PASS: TestHandler_NewAccount/fail/no-jwk (0.00s) + --- PASS: TestHandler_NewAccount/fail/malformed-payload-error (0.00s) --- PASS: TestHandler_NewAccount/fail/nil-jwk (0.00s) --- PASS: TestHandler_NewAccount/fail/db.CreateAccount-error (0.00s) - --- PASS: TestHandler_NewAccount/fail/new-account-no-eab-provided (0.00s) --- PASS: TestHandler_NewAccount/fail/acmeProvisionerFromContext (0.00s) - --- PASS: TestHandler_NewAccount/ok/new-account-no-eab-required (0.00s) - --- PASS: TestHandler_NewAccount/fail/malformed-payload-error (0.00s) - --- PASS: TestHandler_NewAccount/fail/no-existing-account (0.00s) + --- PASS: TestHandler_NewAccount/ok/new-account (0.00s) + --- PASS: TestHandler_NewAccount/ok/return-existing (0.00s) + --- PASS: TestHandler_NewAccount/fail/no-payload (0.00s) + --- PASS: TestHandler_NewAccount/fail/new-account-no-eab-provided (0.00s) === RUN TestHandler_GetOrUpdateAccount -=== RUN TestHandler_GetOrUpdateAccount/ok/post-as-get === RUN TestHandler_GetOrUpdateAccount/fail/no-account +=== RUN TestHandler_GetOrUpdateAccount/fail/unmarshal-payload-error +=== RUN TestHandler_GetOrUpdateAccount/fail/malformed-payload-error +=== RUN TestHandler_GetOrUpdateAccount/ok/update-empty +=== RUN TestHandler_GetOrUpdateAccount/ok/post-as-get === RUN TestHandler_GetOrUpdateAccount/fail/nil-account === RUN TestHandler_GetOrUpdateAccount/fail/no-payload -=== RUN TestHandler_GetOrUpdateAccount/fail/unmarshal-payload-error -=== RUN TestHandler_GetOrUpdateAccount/ok/deactivate -=== RUN TestHandler_GetOrUpdateAccount/ok/update-contacts === RUN TestHandler_GetOrUpdateAccount/fail/nil-payload -=== RUN TestHandler_GetOrUpdateAccount/fail/malformed-payload-error === RUN TestHandler_GetOrUpdateAccount/fail/db.UpdateAccount-error -=== RUN TestHandler_GetOrUpdateAccount/ok/update-empty +=== RUN TestHandler_GetOrUpdateAccount/ok/deactivate +=== RUN TestHandler_GetOrUpdateAccount/ok/update-contacts --- PASS: TestHandler_GetOrUpdateAccount (0.00s) - --- PASS: TestHandler_GetOrUpdateAccount/ok/post-as-get (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/fail/no-account (0.00s) + --- PASS: TestHandler_GetOrUpdateAccount/fail/unmarshal-payload-error (0.00s) + --- PASS: TestHandler_GetOrUpdateAccount/fail/malformed-payload-error (0.00s) + --- PASS: TestHandler_GetOrUpdateAccount/ok/update-empty (0.00s) + --- PASS: TestHandler_GetOrUpdateAccount/ok/post-as-get (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/fail/nil-account (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/fail/no-payload (0.00s) - --- PASS: TestHandler_GetOrUpdateAccount/fail/unmarshal-payload-error (0.00s) - --- PASS: TestHandler_GetOrUpdateAccount/ok/deactivate (0.00s) - --- PASS: TestHandler_GetOrUpdateAccount/ok/update-contacts (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/fail/nil-payload (0.00s) - --- PASS: TestHandler_GetOrUpdateAccount/fail/malformed-payload-error (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/fail/db.UpdateAccount-error (0.00s) - --- PASS: TestHandler_GetOrUpdateAccount/ok/update-empty (0.00s) + --- PASS: TestHandler_GetOrUpdateAccount/ok/deactivate (0.00s) + --- PASS: TestHandler_GetOrUpdateAccount/ok/update-contacts (0.00s) === RUN Test_keysAreEqual === RUN Test_keysAreEqual/ok/nil === RUN Test_keysAreEqual/ok/equal === RUN Test_keysAreEqual/ok/not-equal === RUN Test_keysAreEqual/ok/wrong-key-type ---- PASS: Test_keysAreEqual (0.00s) +--- PASS: Test_keysAreEqual (0.01s) --- PASS: Test_keysAreEqual/ok/nil (0.00s) --- PASS: Test_keysAreEqual/ok/equal (0.00s) --- PASS: Test_keysAreEqual/ok/not-equal (0.00s) --- PASS: Test_keysAreEqual/ok/wrong-key-type (0.00s) === RUN TestHandler_validateExternalAccountBinding -=== RUN TestHandler_validateExternalAccountBinding/fail/parse-eab-jose +=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-wrong-provisioner +=== RUN TestHandler_validateExternalAccountBinding/fail/eab-non-matching-keys === RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-not-found -=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-error +=== RUN TestHandler_validateExternalAccountBinding/fail/no-jwk +=== RUN TestHandler_validateExternalAccountBinding/ok/eab +=== RUN TestHandler_validateExternalAccountBinding/fail/validate-eab-jws-no-signatures === RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-nil -=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-wrong-provisioner +=== RUN TestHandler_validateExternalAccountBinding/fail/eab-verify === RUN TestHandler_validateExternalAccountBinding/fail/nil-jwk +=== RUN TestHandler_validateExternalAccountBinding/fail/eab-already-bound === RUN TestHandler_validateExternalAccountBinding/ok/no-eab-required-but-provided -=== RUN TestHandler_validateExternalAccountBinding/fail/validate-eab-jws-no-signatures +=== RUN TestHandler_validateExternalAccountBinding/fail/acmeProvisionerFromContext +=== RUN TestHandler_validateExternalAccountBinding/fail/parse-eab-jose === RUN TestHandler_validateExternalAccountBinding/fail/retrieve-eab-key-db-failure -=== RUN TestHandler_validateExternalAccountBinding/fail/eab-verify -=== RUN TestHandler_validateExternalAccountBinding/fail/eab-non-matching-keys -=== RUN TestHandler_validateExternalAccountBinding/fail/no-jwk -=== RUN TestHandler_validateExternalAccountBinding/ok/eab +=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-error === RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-no-keybytes -=== RUN TestHandler_validateExternalAccountBinding/fail/acmeProvisionerFromContext -=== RUN TestHandler_validateExternalAccountBinding/fail/eab-already-bound --- PASS: TestHandler_validateExternalAccountBinding (0.01s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/parse-eab-jose (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-wrong-provisioner (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/eab-non-matching-keys (0.00s) --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-not-found (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-error (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/no-jwk (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/ok/eab (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/validate-eab-jws-no-signatures (0.00s) --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-nil (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-wrong-provisioner (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/eab-verify (0.00s) --- PASS: TestHandler_validateExternalAccountBinding/fail/nil-jwk (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/eab-already-bound (0.00s) --- PASS: TestHandler_validateExternalAccountBinding/ok/no-eab-required-but-provided (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/validate-eab-jws-no-signatures (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/acmeProvisionerFromContext (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/parse-eab-jose (0.00s) --- PASS: TestHandler_validateExternalAccountBinding/fail/retrieve-eab-key-db-failure (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/eab-verify (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/eab-non-matching-keys (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/no-jwk (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/ok/eab (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-error (0.00s) --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-no-keybytes (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/acmeProvisionerFromContext (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/eab-already-bound (0.00s) === RUN Test_validateEABJWS -=== RUN Test_validateEABJWS/fail/no-outer-jws -=== RUN Test_validateEABJWS/fail/invalid-algorithm === RUN Test_validateEABJWS/fail/nonce-not-empty +=== RUN Test_validateEABJWS/fail/url-not-set +=== RUN Test_validateEABJWS/fail/no-outer-jws === RUN Test_validateEABJWS/fail/outer-jws-multiple-signatures -=== RUN Test_validateEABJWS/fail/outer-jws-no-url -=== RUN Test_validateEABJWS/fail/outer-jws-with-different-url === RUN Test_validateEABJWS/ok === RUN Test_validateEABJWS/fail/nil-jws -=== RUN Test_validateEABJWS/fail/invalid-number-of-signatures +=== RUN Test_validateEABJWS/fail/invalid-algorithm === RUN Test_validateEABJWS/fail/kid-not-set -=== RUN Test_validateEABJWS/fail/url-not-set ---- PASS: Test_validateEABJWS (0.00s) - --- PASS: Test_validateEABJWS/fail/no-outer-jws (0.00s) - --- PASS: Test_validateEABJWS/fail/invalid-algorithm (0.00s) +=== RUN Test_validateEABJWS/fail/outer-jws-no-url +=== RUN Test_validateEABJWS/fail/outer-jws-with-different-url +=== RUN Test_validateEABJWS/fail/invalid-number-of-signatures +--- PASS: Test_validateEABJWS (0.01s) --- PASS: Test_validateEABJWS/fail/nonce-not-empty (0.00s) + --- PASS: Test_validateEABJWS/fail/url-not-set (0.00s) + --- PASS: Test_validateEABJWS/fail/no-outer-jws (0.00s) --- PASS: Test_validateEABJWS/fail/outer-jws-multiple-signatures (0.00s) - --- PASS: Test_validateEABJWS/fail/outer-jws-no-url (0.00s) - --- PASS: Test_validateEABJWS/fail/outer-jws-with-different-url (0.00s) --- PASS: Test_validateEABJWS/ok (0.00s) --- PASS: Test_validateEABJWS/fail/nil-jws (0.00s) - --- PASS: Test_validateEABJWS/fail/invalid-number-of-signatures (0.00s) + --- PASS: Test_validateEABJWS/fail/invalid-algorithm (0.00s) --- PASS: Test_validateEABJWS/fail/kid-not-set (0.00s) - --- PASS: Test_validateEABJWS/fail/url-not-set (0.00s) + --- PASS: Test_validateEABJWS/fail/outer-jws-no-url (0.00s) + --- PASS: Test_validateEABJWS/fail/outer-jws-with-different-url (0.00s) + --- PASS: Test_validateEABJWS/fail/invalid-number-of-signatures (0.00s) === RUN TestHandler_GetNonce === RUN TestHandler_GetNonce/GET === RUN TestHandler_GetNonce/HEAD ---- PASS: TestHandler_GetNonce (0.00s) +--- PASS: TestHandler_GetNonce (0.01s) --- PASS: TestHandler_GetNonce/GET (0.00s) --- PASS: TestHandler_GetNonce/HEAD (0.00s) === RUN TestHandler_GetDirectory -=== RUN TestHandler_GetDirectory/fail/different-provisioner === RUN TestHandler_GetDirectory/ok === RUN TestHandler_GetDirectory/ok/eab-required === RUN TestHandler_GetDirectory/ok/full-meta === RUN TestHandler_GetDirectory/fail/no-provisioner +=== RUN TestHandler_GetDirectory/fail/different-provisioner --- PASS: TestHandler_GetDirectory (0.00s) - --- PASS: TestHandler_GetDirectory/fail/different-provisioner (0.00s) --- PASS: TestHandler_GetDirectory/ok (0.00s) --- PASS: TestHandler_GetDirectory/ok/eab-required (0.00s) --- PASS: TestHandler_GetDirectory/ok/full-meta (0.00s) --- PASS: TestHandler_GetDirectory/fail/no-provisioner (0.00s) + --- PASS: TestHandler_GetDirectory/fail/different-provisioner (0.00s) === RUN TestHandler_GetAuthorization === RUN TestHandler_GetAuthorization/fail/no-account === RUN TestHandler_GetAuthorization/fail/nil-account @@ -2554,27 +2599,27 @@ --- PASS: TestHandler_GetCertificate/fail/account-id-mismatch (0.00s) --- PASS: TestHandler_GetCertificate/ok (0.00s) === RUN TestHandler_GetChallenge +=== RUN TestHandler_GetChallenge/ok +=== RUN TestHandler_GetChallenge/fail/no-account +=== RUN TestHandler_GetChallenge/fail/nil-account +=== RUN TestHandler_GetChallenge/fail/validate-challenge-error +=== RUN TestHandler_GetChallenge/fail/no-payload === RUN TestHandler_GetChallenge/fail/nil-payload === RUN TestHandler_GetChallenge/fail/db.GetChallenge-error -=== RUN TestHandler_GetChallenge/fail/validate-challenge-error === RUN TestHandler_GetChallenge/fail/account-id-mismatch === RUN TestHandler_GetChallenge/fail/no-jwk === RUN TestHandler_GetChallenge/fail/nil-jwk -=== RUN TestHandler_GetChallenge/ok -=== RUN TestHandler_GetChallenge/fail/no-account -=== RUN TestHandler_GetChallenge/fail/nil-account -=== RUN TestHandler_GetChallenge/fail/no-payload --- PASS: TestHandler_GetChallenge (0.00s) + --- PASS: TestHandler_GetChallenge/ok (0.00s) + --- PASS: TestHandler_GetChallenge/fail/no-account (0.00s) + --- PASS: TestHandler_GetChallenge/fail/nil-account (0.00s) + --- PASS: TestHandler_GetChallenge/fail/validate-challenge-error (0.00s) + --- PASS: TestHandler_GetChallenge/fail/no-payload (0.00s) --- PASS: TestHandler_GetChallenge/fail/nil-payload (0.00s) --- PASS: TestHandler_GetChallenge/fail/db.GetChallenge-error (0.00s) - --- PASS: TestHandler_GetChallenge/fail/validate-challenge-error (0.00s) --- PASS: TestHandler_GetChallenge/fail/account-id-mismatch (0.00s) --- PASS: TestHandler_GetChallenge/fail/no-jwk (0.00s) --- PASS: TestHandler_GetChallenge/fail/nil-jwk (0.00s) - --- PASS: TestHandler_GetChallenge/ok (0.00s) - --- PASS: TestHandler_GetChallenge/fail/no-account (0.00s) - --- PASS: TestHandler_GetChallenge/fail/nil-account (0.00s) - --- PASS: TestHandler_GetChallenge/fail/no-payload (0.00s) === RUN Test_createMetaObject === RUN Test_createMetaObject/no-meta === RUN Test_createMetaObject/terms-of-service @@ -2590,103 +2635,103 @@ --- PASS: Test_createMetaObject/require-eab (0.00s) --- PASS: Test_createMetaObject/full-meta (0.00s) === RUN TestHandler_addNonce -=== RUN TestHandler_addNonce/ok === RUN TestHandler_addNonce/fail/AddNonce-error +=== RUN TestHandler_addNonce/ok --- PASS: TestHandler_addNonce (0.00s) - --- PASS: TestHandler_addNonce/ok (0.00s) --- PASS: TestHandler_addNonce/fail/AddNonce-error (0.00s) + --- PASS: TestHandler_addNonce/ok (0.00s) === RUN TestHandler_addDirLink === RUN TestHandler_addDirLink/ok --- PASS: TestHandler_addDirLink (0.00s) --- PASS: TestHandler_addDirLink/ok (0.00s) === RUN TestHandler_verifyContentType +=== RUN TestHandler_verifyContentType/fail/general-bad-content-type === RUN TestHandler_verifyContentType/fail/certificate-bad-content-type === RUN TestHandler_verifyContentType/ok === RUN TestHandler_verifyContentType/ok/certificate/pkix-cert === RUN TestHandler_verifyContentType/ok/certificate/jose+json === RUN TestHandler_verifyContentType/ok/certificate/pkcs7-mime === RUN TestHandler_verifyContentType/fail/provisioner-not-set -=== RUN TestHandler_verifyContentType/fail/general-bad-content-type --- PASS: TestHandler_verifyContentType (0.00s) + --- PASS: TestHandler_verifyContentType/fail/general-bad-content-type (0.00s) --- PASS: TestHandler_verifyContentType/fail/certificate-bad-content-type (0.00s) --- PASS: TestHandler_verifyContentType/ok (0.00s) --- PASS: TestHandler_verifyContentType/ok/certificate/pkix-cert (0.00s) --- PASS: TestHandler_verifyContentType/ok/certificate/jose+json (0.00s) --- PASS: TestHandler_verifyContentType/ok/certificate/pkcs7-mime (0.00s) --- PASS: TestHandler_verifyContentType/fail/provisioner-not-set (0.00s) - --- PASS: TestHandler_verifyContentType/fail/general-bad-content-type (0.00s) === RUN TestHandler_isPostAsGet -=== RUN TestHandler_isPostAsGet/fail/nil-payload === RUN TestHandler_isPostAsGet/fail/not-post-as-get === RUN TestHandler_isPostAsGet/ok === RUN TestHandler_isPostAsGet/fail/no-payload +=== RUN TestHandler_isPostAsGet/fail/nil-payload --- PASS: TestHandler_isPostAsGet (0.00s) - --- PASS: TestHandler_isPostAsGet/fail/nil-payload (0.00s) --- PASS: TestHandler_isPostAsGet/fail/not-post-as-get (0.00s) --- PASS: TestHandler_isPostAsGet/ok (0.00s) --- PASS: TestHandler_isPostAsGet/fail/no-payload (0.00s) + --- PASS: TestHandler_isPostAsGet/fail/nil-payload (0.00s) === RUN TestHandler_parseJWS -=== RUN TestHandler_parseJWS/fail/read-body-error === RUN TestHandler_parseJWS/fail/parse-jws-error === RUN TestHandler_parseJWS/ok +=== RUN TestHandler_parseJWS/fail/read-body-error --- PASS: TestHandler_parseJWS (0.00s) - --- PASS: TestHandler_parseJWS/fail/read-body-error (0.00s) --- PASS: TestHandler_parseJWS/fail/parse-jws-error (0.00s) --- PASS: TestHandler_parseJWS/ok (0.00s) + --- PASS: TestHandler_parseJWS/fail/read-body-error (0.00s) === RUN TestHandler_verifyAndExtractJWSPayload +=== RUN TestHandler_verifyAndExtractJWSPayload/fail/verify-jws-failure-wrong-jwk +=== RUN TestHandler_verifyAndExtractJWSPayload/fail/verify-jws-failure-too-many-signatures === RUN TestHandler_verifyAndExtractJWSPayload/fail/apple-acmeclient-omitting-leading-null-byte-in-signature-with-wrong-jwk +=== RUN TestHandler_verifyAndExtractJWSPayload/ok === RUN TestHandler_verifyAndExtractJWSPayload/fail/algorithm-mismatch === RUN TestHandler_verifyAndExtractJWSPayload/ok/empty-algorithm-in-jwk === RUN TestHandler_verifyAndExtractJWSPayload/ok/post-as-get -=== RUN TestHandler_verifyAndExtractJWSPayload/ok/apple-acmeclient-omitting-leading-null-byte-in-signature -=== RUN TestHandler_verifyAndExtractJWSPayload/fail/no-jwk -=== RUN TestHandler_verifyAndExtractJWSPayload/fail/nil-jwk -=== RUN TestHandler_verifyAndExtractJWSPayload/fail/verify-jws-failure-wrong-jwk -=== RUN TestHandler_verifyAndExtractJWSPayload/fail/verify-jws-failure-too-many-signatures -=== RUN TestHandler_verifyAndExtractJWSPayload/ok === RUN TestHandler_verifyAndExtractJWSPayload/ok/empty-json +=== RUN TestHandler_verifyAndExtractJWSPayload/ok/apple-acmeclient-omitting-leading-null-byte-in-signature === RUN TestHandler_verifyAndExtractJWSPayload/fail/no-jws === RUN TestHandler_verifyAndExtractJWSPayload/fail/nil-jws ---- PASS: TestHandler_verifyAndExtractJWSPayload (0.00s) +=== RUN TestHandler_verifyAndExtractJWSPayload/fail/no-jwk +=== RUN TestHandler_verifyAndExtractJWSPayload/fail/nil-jwk +--- PASS: TestHandler_verifyAndExtractJWSPayload (0.01s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/verify-jws-failure-wrong-jwk (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/verify-jws-failure-too-many-signatures (0.00s) --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/apple-acmeclient-omitting-leading-null-byte-in-signature-with-wrong-jwk (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/ok (0.00s) --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/algorithm-mismatch (0.00s) --- PASS: TestHandler_verifyAndExtractJWSPayload/ok/empty-algorithm-in-jwk (0.00s) --- PASS: TestHandler_verifyAndExtractJWSPayload/ok/post-as-get (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/ok/apple-acmeclient-omitting-leading-null-byte-in-signature (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/no-jwk (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/nil-jwk (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/verify-jws-failure-wrong-jwk (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/verify-jws-failure-too-many-signatures (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/ok (0.00s) --- PASS: TestHandler_verifyAndExtractJWSPayload/ok/empty-json (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/ok/apple-acmeclient-omitting-leading-null-byte-in-signature (0.00s) --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/no-jws (0.00s) --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/nil-jws (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/no-jwk (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/nil-jwk (0.00s) === RUN TestHandler_lookupJWK +=== RUN TestHandler_lookupJWK/ok/account-with-location-prefix +=== RUN TestHandler_lookupJWK/ok/account-with-provisioner-id === RUN TestHandler_lookupJWK/fail/no-jws -=== RUN TestHandler_lookupJWK/fail/nil-jws +=== RUN TestHandler_lookupJWK/fail/no-kid === RUN TestHandler_lookupJWK/fail/account-not-found === RUN TestHandler_lookupJWK/fail/GetAccount-error -=== RUN TestHandler_lookupJWK/fail/account-with-location-prefix/bad-kid === RUN TestHandler_lookupJWK/fail/account-with-location-prefix/bad-provisioner === RUN TestHandler_lookupJWK/fail/account-with-location-prefix/bad-provisioner-id === RUN TestHandler_lookupJWK/ok/account-without-location-prefix -=== RUN TestHandler_lookupJWK/fail/no-kid +=== RUN TestHandler_lookupJWK/fail/nil-jws === RUN TestHandler_lookupJWK/fail/account-not-valid -=== RUN TestHandler_lookupJWK/ok/account-with-location-prefix -=== RUN TestHandler_lookupJWK/ok/account-with-provisioner-id +=== RUN TestHandler_lookupJWK/fail/account-with-location-prefix/bad-kid --- PASS: TestHandler_lookupJWK (0.00s) + --- PASS: TestHandler_lookupJWK/ok/account-with-location-prefix (0.00s) + --- PASS: TestHandler_lookupJWK/ok/account-with-provisioner-id (0.00s) --- PASS: TestHandler_lookupJWK/fail/no-jws (0.00s) - --- PASS: TestHandler_lookupJWK/fail/nil-jws (0.00s) + --- PASS: TestHandler_lookupJWK/fail/no-kid (0.00s) --- PASS: TestHandler_lookupJWK/fail/account-not-found (0.00s) --- PASS: TestHandler_lookupJWK/fail/GetAccount-error (0.00s) - --- PASS: TestHandler_lookupJWK/fail/account-with-location-prefix/bad-kid (0.00s) --- PASS: TestHandler_lookupJWK/fail/account-with-location-prefix/bad-provisioner (0.00s) --- PASS: TestHandler_lookupJWK/fail/account-with-location-prefix/bad-provisioner-id (0.00s) --- PASS: TestHandler_lookupJWK/ok/account-without-location-prefix (0.00s) - --- PASS: TestHandler_lookupJWK/fail/no-kid (0.00s) + --- PASS: TestHandler_lookupJWK/fail/nil-jws (0.00s) --- PASS: TestHandler_lookupJWK/fail/account-not-valid (0.00s) - --- PASS: TestHandler_lookupJWK/ok/account-with-location-prefix (0.00s) - --- PASS: TestHandler_lookupJWK/ok/account-with-provisioner-id (0.00s) + --- PASS: TestHandler_lookupJWK/fail/account-with-location-prefix/bad-kid (0.00s) === RUN TestHandler_extractJWK === RUN TestHandler_extractJWK/ok/no-account === RUN TestHandler_extractJWK/fail/no-jws @@ -2706,41 +2751,41 @@ --- PASS: TestHandler_extractJWK/fail/account-not-valid (0.00s) --- PASS: TestHandler_extractJWK/ok (0.00s) === RUN TestHandler_validateJWS -=== RUN TestHandler_validateJWS/fail/no-jws -=== RUN TestHandler_validateJWS/fail/no-signature +=== RUN TestHandler_validateJWS/fail/nil-jws === RUN TestHandler_validateJWS/fail/unprotected-header-not-empty -=== RUN TestHandler_validateJWS/fail/unsuitable-algorithm-mac -=== RUN TestHandler_validateJWS/fail/both-jwk-kid -=== RUN TestHandler_validateJWS/ok/jwk/rsa -=== RUN TestHandler_validateJWS/fail/rsa-key-&-alg-mismatch +=== RUN TestHandler_validateJWS/fail/UseNonce-error === RUN TestHandler_validateJWS/fail/no-url-header === RUN TestHandler_validateJWS/fail/url-mismatch -=== RUN TestHandler_validateJWS/ok/jwk/ecdsa +=== RUN TestHandler_validateJWS/fail/no-jws === RUN TestHandler_validateJWS/fail/more-than-one-signature === RUN TestHandler_validateJWS/fail/rsa-key-too-small -=== RUN TestHandler_validateJWS/fail/nil-jws -=== RUN TestHandler_validateJWS/fail/unsuitable-algorithm-none -=== RUN TestHandler_validateJWS/fail/UseNonce-error +=== RUN TestHandler_validateJWS/fail/both-jwk-kid +=== RUN TestHandler_validateJWS/ok/jwk/ecdsa +=== RUN TestHandler_validateJWS/fail/no-signature +=== RUN TestHandler_validateJWS/fail/unsuitable-algorithm-mac === RUN TestHandler_validateJWS/fail/no-jwk-kid +=== RUN TestHandler_validateJWS/fail/unsuitable-algorithm-none +=== RUN TestHandler_validateJWS/fail/rsa-key-&-alg-mismatch === RUN TestHandler_validateJWS/ok/kid ---- PASS: TestHandler_validateJWS (0.53s) - --- PASS: TestHandler_validateJWS/fail/no-jws (0.00s) - --- PASS: TestHandler_validateJWS/fail/no-signature (0.00s) +=== RUN TestHandler_validateJWS/ok/jwk/rsa +--- PASS: TestHandler_validateJWS (0.59s) + --- PASS: TestHandler_validateJWS/fail/nil-jws (0.00s) --- PASS: TestHandler_validateJWS/fail/unprotected-header-not-empty (0.00s) - --- PASS: TestHandler_validateJWS/fail/unsuitable-algorithm-mac (0.00s) - --- PASS: TestHandler_validateJWS/fail/both-jwk-kid (0.00s) - --- PASS: TestHandler_validateJWS/ok/jwk/rsa (0.00s) - --- PASS: TestHandler_validateJWS/fail/rsa-key-&-alg-mismatch (0.00s) + --- PASS: TestHandler_validateJWS/fail/UseNonce-error (0.00s) --- PASS: TestHandler_validateJWS/fail/no-url-header (0.00s) --- PASS: TestHandler_validateJWS/fail/url-mismatch (0.00s) - --- PASS: TestHandler_validateJWS/ok/jwk/ecdsa (0.00s) + --- PASS: TestHandler_validateJWS/fail/no-jws (0.00s) --- PASS: TestHandler_validateJWS/fail/more-than-one-signature (0.00s) --- PASS: TestHandler_validateJWS/fail/rsa-key-too-small (0.00s) - --- PASS: TestHandler_validateJWS/fail/nil-jws (0.00s) - --- PASS: TestHandler_validateJWS/fail/unsuitable-algorithm-none (0.00s) - --- PASS: TestHandler_validateJWS/fail/UseNonce-error (0.00s) + --- PASS: TestHandler_validateJWS/fail/both-jwk-kid (0.00s) + --- PASS: TestHandler_validateJWS/ok/jwk/ecdsa (0.00s) + --- PASS: TestHandler_validateJWS/fail/no-signature (0.00s) + --- PASS: TestHandler_validateJWS/fail/unsuitable-algorithm-mac (0.00s) --- PASS: TestHandler_validateJWS/fail/no-jwk-kid (0.00s) + --- PASS: TestHandler_validateJWS/fail/unsuitable-algorithm-none (0.00s) + --- PASS: TestHandler_validateJWS/fail/rsa-key-&-alg-mismatch (0.00s) --- PASS: TestHandler_validateJWS/ok/kid (0.00s) + --- PASS: TestHandler_validateJWS/ok/jwk/rsa (0.00s) === RUN Test_canExtractJWKFrom === RUN Test_canExtractJWKFrom/no-jws === RUN Test_canExtractJWKFrom/no-signatures @@ -2758,13 +2803,13 @@ --- PASS: TestHandler_extractOrLookupJWK/ok/extract (0.00s) --- PASS: TestHandler_extractOrLookupJWK/ok/lookup (0.00s) === RUN TestHandler_checkPrerequisites +=== RUN TestHandler_checkPrerequisites/fail/prerequisites-nok === RUN TestHandler_checkPrerequisites/ok === RUN TestHandler_checkPrerequisites/fail/error -=== RUN TestHandler_checkPrerequisites/fail/prerequisites-nok --- PASS: TestHandler_checkPrerequisites (0.00s) + --- PASS: TestHandler_checkPrerequisites/fail/prerequisites-nok (0.00s) --- PASS: TestHandler_checkPrerequisites/ok (0.00s) --- PASS: TestHandler_checkPrerequisites/fail/error (0.00s) - --- PASS: TestHandler_checkPrerequisites/fail/prerequisites-nok (0.00s) === RUN Test_retryVerificationWithPatchedSignatures === RUN Test_retryVerificationWithPatchedSignatures/ok/patched-r === RUN Test_retryVerificationWithPatchedSignatures/ok/patched-s @@ -2776,37 +2821,37 @@ --- PASS: Test_retryVerificationWithPatchedSignatures/ok/patched-rs (0.00s) --- PASS: Test_retryVerificationWithPatchedSignatures/fail/patched-r-wrong-jwk (0.00s) === RUN TestNewOrderRequest_Validate +=== RUN TestNewOrderRequest_Validate/fail/bad-identifier === RUN TestNewOrderRequest_Validate/fail/bad-identifier/ip === RUN TestNewOrderRequest_Validate/ok/ipv4 -=== RUN TestNewOrderRequest_Validate/fail/bad-identifier +=== RUN TestNewOrderRequest_Validate/ok/mixed-dns-and-ipv4 +=== RUN TestNewOrderRequest_Validate/ok/mixed-ipv4-and-ipv6 +=== RUN TestNewOrderRequest_Validate/fail/no-identifiers +=== RUN TestNewOrderRequest_Validate/ok === RUN TestNewOrderRequest_Validate/fail/bad-identifier/dns-port === RUN TestNewOrderRequest_Validate/fail/bad-identifier/dns-wildcard-port +=== RUN TestNewOrderRequest_Validate/fail/bad-identifier/wireapp-wrong-scheme === RUN TestNewOrderRequest_Validate/fail/bad-identifier/wireapp-invalid-user-parts -=== RUN TestNewOrderRequest_Validate/fail/no-identifiers === RUN TestNewOrderRequest_Validate/fail/bad-identifier/bad-dns +=== RUN TestNewOrderRequest_Validate/fail/bad-identifier/wireapp-invalid-uri === RUN TestNewOrderRequest_Validate/ok/ipv6 -=== RUN TestNewOrderRequest_Validate/ok/mixed-dns-and-ipv4 -=== RUN TestNewOrderRequest_Validate/ok/mixed-ipv4-and-ipv6 === RUN TestNewOrderRequest_Validate/ok/wireapp -=== RUN TestNewOrderRequest_Validate/fail/bad-identifier/wireapp-invalid-uri -=== RUN TestNewOrderRequest_Validate/fail/bad-identifier/wireapp-wrong-scheme -=== RUN TestNewOrderRequest_Validate/ok ---- PASS: TestNewOrderRequest_Validate (0.00s) +--- PASS: TestNewOrderRequest_Validate (0.01s) + --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier (0.00s) --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/ip (0.00s) --- PASS: TestNewOrderRequest_Validate/ok/ipv4 (0.00s) - --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier (0.00s) + --- PASS: TestNewOrderRequest_Validate/ok/mixed-dns-and-ipv4 (0.00s) + --- PASS: TestNewOrderRequest_Validate/ok/mixed-ipv4-and-ipv6 (0.01s) + --- PASS: TestNewOrderRequest_Validate/fail/no-identifiers (0.00s) + --- PASS: TestNewOrderRequest_Validate/ok (0.00s) --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/dns-port (0.00s) --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/dns-wildcard-port (0.00s) + --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/wireapp-wrong-scheme (0.00s) --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/wireapp-invalid-user-parts (0.00s) - --- PASS: TestNewOrderRequest_Validate/fail/no-identifiers (0.00s) --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/bad-dns (0.00s) + --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/wireapp-invalid-uri (0.00s) --- PASS: TestNewOrderRequest_Validate/ok/ipv6 (0.00s) - --- PASS: TestNewOrderRequest_Validate/ok/mixed-dns-and-ipv4 (0.00s) - --- PASS: TestNewOrderRequest_Validate/ok/mixed-ipv4-and-ipv6 (0.00s) --- PASS: TestNewOrderRequest_Validate/ok/wireapp (0.00s) - --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/wireapp-invalid-uri (0.00s) - --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/wireapp-wrong-scheme (0.00s) - --- PASS: TestNewOrderRequest_Validate/ok (0.00s) === RUN TestFinalizeRequestValidate === RUN TestFinalizeRequestValidate/fail/parse-csr-error === RUN TestFinalizeRequestValidate/fail/invalid-csr-signature @@ -2818,127 +2863,127 @@ --- PASS: TestFinalizeRequestValidate/ok (0.00s) --- PASS: TestFinalizeRequestValidate/ok/padding (0.00s) === RUN TestHandler_GetOrder +=== RUN TestHandler_GetOrder/fail/db.GetOrder-error +=== RUN TestHandler_GetOrder/fail/provisioner-id-mismatch +=== RUN TestHandler_GetOrder/fail/order-update-error +=== RUN TestHandler_GetOrder/fail/no-account === RUN TestHandler_GetOrder/fail/nil-account -=== RUN TestHandler_GetOrder/fail/no-provisioner -=== RUN TestHandler_GetOrder/fail/nil-provisioner === RUN TestHandler_GetOrder/fail/account-id-mismatch -=== RUN TestHandler_GetOrder/fail/provisioner-id-mismatch === RUN TestHandler_GetOrder/ok -=== RUN TestHandler_GetOrder/fail/no-account -=== RUN TestHandler_GetOrder/fail/db.GetOrder-error -=== RUN TestHandler_GetOrder/fail/order-update-error ---- PASS: TestHandler_GetOrder (0.00s) +=== RUN TestHandler_GetOrder/fail/no-provisioner +=== RUN TestHandler_GetOrder/fail/nil-provisioner +--- PASS: TestHandler_GetOrder (0.01s) + --- PASS: TestHandler_GetOrder/fail/db.GetOrder-error (0.00s) + --- PASS: TestHandler_GetOrder/fail/provisioner-id-mismatch (0.00s) + --- PASS: TestHandler_GetOrder/fail/order-update-error (0.00s) + --- PASS: TestHandler_GetOrder/fail/no-account (0.00s) --- PASS: TestHandler_GetOrder/fail/nil-account (0.00s) - --- PASS: TestHandler_GetOrder/fail/no-provisioner (0.00s) - --- PASS: TestHandler_GetOrder/fail/nil-provisioner (0.00s) --- PASS: TestHandler_GetOrder/fail/account-id-mismatch (0.00s) - --- PASS: TestHandler_GetOrder/fail/provisioner-id-mismatch (0.00s) --- PASS: TestHandler_GetOrder/ok (0.00s) - --- PASS: TestHandler_GetOrder/fail/no-account (0.00s) - --- PASS: TestHandler_GetOrder/fail/db.GetOrder-error (0.00s) - --- PASS: TestHandler_GetOrder/fail/order-update-error (0.00s) + --- PASS: TestHandler_GetOrder/fail/no-provisioner (0.00s) + --- PASS: TestHandler_GetOrder/fail/nil-provisioner (0.00s) === RUN TestHandler_newAuthorization -=== RUN TestHandler_newAuthorization/fail/wireapp-user-options -=== RUN TestHandler_newAuthorization/ok/no-wildcard -=== RUN TestHandler_newAuthorization/ok/permanent-identifier-disabled -=== RUN TestHandler_newAuthorization/ok/permanent-identifier-enabled -=== RUN TestHandler_newAuthorization/ok/wireapp-device -=== RUN TestHandler_newAuthorization/fail/error-db.CreateChallenge === RUN TestHandler_newAuthorization/fail/error-db.CreateAuthorization +=== RUN TestHandler_newAuthorization/fail/wireapp-user-options === RUN TestHandler_newAuthorization/fail/wireapp-device-parse-id -=== RUN TestHandler_newAuthorization/fail/wireapp-device-parse-client-id === RUN TestHandler_newAuthorization/fail/wireapp-device-options === RUN TestHandler_newAuthorization/ok/wildcard +=== RUN TestHandler_newAuthorization/ok/permanent-identifier-enabled +=== RUN TestHandler_newAuthorization/ok/wireapp-device +=== RUN TestHandler_newAuthorization/fail/wireapp-device-parse-client-id +=== RUN TestHandler_newAuthorization/ok/no-wildcard +=== RUN TestHandler_newAuthorization/ok/permanent-identifier-disabled === RUN TestHandler_newAuthorization/ok/wireapp-user +=== RUN TestHandler_newAuthorization/fail/error-db.CreateChallenge --- PASS: TestHandler_newAuthorization (0.00s) - --- PASS: TestHandler_newAuthorization/fail/wireapp-user-options (0.00s) - --- PASS: TestHandler_newAuthorization/ok/no-wildcard (0.00s) - --- PASS: TestHandler_newAuthorization/ok/permanent-identifier-disabled (0.00s) - --- PASS: TestHandler_newAuthorization/ok/permanent-identifier-enabled (0.00s) - --- PASS: TestHandler_newAuthorization/ok/wireapp-device (0.00s) - --- PASS: TestHandler_newAuthorization/fail/error-db.CreateChallenge (0.00s) --- PASS: TestHandler_newAuthorization/fail/error-db.CreateAuthorization (0.00s) + --- PASS: TestHandler_newAuthorization/fail/wireapp-user-options (0.00s) --- PASS: TestHandler_newAuthorization/fail/wireapp-device-parse-id (0.00s) - --- PASS: TestHandler_newAuthorization/fail/wireapp-device-parse-client-id (0.00s) --- PASS: TestHandler_newAuthorization/fail/wireapp-device-options (0.00s) --- PASS: TestHandler_newAuthorization/ok/wildcard (0.00s) + --- PASS: TestHandler_newAuthorization/ok/permanent-identifier-enabled (0.00s) + --- PASS: TestHandler_newAuthorization/ok/wireapp-device (0.00s) + --- PASS: TestHandler_newAuthorization/fail/wireapp-device-parse-client-id (0.00s) + --- PASS: TestHandler_newAuthorization/ok/no-wildcard (0.00s) + --- PASS: TestHandler_newAuthorization/ok/permanent-identifier-disabled (0.00s) --- PASS: TestHandler_newAuthorization/ok/wireapp-user (0.00s) + --- PASS: TestHandler_newAuthorization/fail/error-db.CreateChallenge (0.00s) === RUN TestHandler_NewOrder -=== RUN TestHandler_NewOrder/fail/unmarshal-payload-error -=== RUN TestHandler_NewOrder/fail/error-h.newAuthorization +=== RUN TestHandler_NewOrder/ok/naf-nbf === RUN TestHandler_NewOrder/fail/nil-account -=== RUN TestHandler_NewOrder/fail/nil-provisioner -=== RUN TestHandler_NewOrder/fail/no-payload -=== RUN TestHandler_NewOrder/fail/ca.AreSANsAllowed-error -=== RUN TestHandler_NewOrder/ok/naf-no-nbf -=== RUN TestHandler_NewOrder/ok/default-naf-nbf-wireapp -=== RUN TestHandler_NewOrder/fail/no-provisioner -=== RUN TestHandler_NewOrder/fail/nil-payload +=== RUN TestHandler_NewOrder/fail/unmarshal-payload-error === RUN TestHandler_NewOrder/fail/malformed-payload-error -=== RUN TestHandler_NewOrder/fail/acmeProvisionerFromContext-error +=== RUN TestHandler_NewOrder/fail/prov.AuthorizeOrderIdentifier-error +=== RUN TestHandler_NewOrder/ok/naf-no-nbf === RUN TestHandler_NewOrder/fail/isIdentifierAllowed-error -=== RUN TestHandler_NewOrder/ok/default-naf-nbf +=== RUN TestHandler_NewOrder/fail/error-db.CreateOrder === RUN TestHandler_NewOrder/ok/default-naf-nbf-with-policy === RUN TestHandler_NewOrder/fail/no-account +=== RUN TestHandler_NewOrder/fail/no-provisioner +=== RUN TestHandler_NewOrder/fail/nil-provisioner +=== RUN TestHandler_NewOrder/fail/no-payload +=== RUN TestHandler_NewOrder/fail/nil-payload === RUN TestHandler_NewOrder/fail/db.GetExternalAccountKeyByAccountID-error -=== RUN TestHandler_NewOrder/fail/newACMEPolicyEngine-error -=== RUN TestHandler_NewOrder/fail/prov.AuthorizeOrderIdentifier-error -=== RUN TestHandler_NewOrder/fail/error-db.CreateOrder === RUN TestHandler_NewOrder/ok/multiple-authz +=== RUN TestHandler_NewOrder/ok/default-naf-nbf +=== RUN TestHandler_NewOrder/fail/acmeProvisionerFromContext-error +=== RUN TestHandler_NewOrder/fail/newACMEPolicyEngine-error +=== RUN TestHandler_NewOrder/fail/ca.AreSANsAllowed-error +=== RUN TestHandler_NewOrder/fail/error-h.newAuthorization === RUN TestHandler_NewOrder/ok/nbf-no-naf -=== RUN TestHandler_NewOrder/ok/naf-nbf ---- PASS: TestHandler_NewOrder (0.00s) - --- PASS: TestHandler_NewOrder/fail/unmarshal-payload-error (0.00s) - --- PASS: TestHandler_NewOrder/fail/error-h.newAuthorization (0.00s) +=== RUN TestHandler_NewOrder/ok/default-naf-nbf-wireapp +--- PASS: TestHandler_NewOrder (0.01s) + --- PASS: TestHandler_NewOrder/ok/naf-nbf (0.00s) --- PASS: TestHandler_NewOrder/fail/nil-account (0.00s) - --- PASS: TestHandler_NewOrder/fail/nil-provisioner (0.00s) - --- PASS: TestHandler_NewOrder/fail/no-payload (0.00s) - --- PASS: TestHandler_NewOrder/fail/ca.AreSANsAllowed-error (0.00s) - --- PASS: TestHandler_NewOrder/ok/naf-no-nbf (0.00s) - --- PASS: TestHandler_NewOrder/ok/default-naf-nbf-wireapp (0.00s) - --- PASS: TestHandler_NewOrder/fail/no-provisioner (0.00s) - --- PASS: TestHandler_NewOrder/fail/nil-payload (0.00s) + --- PASS: TestHandler_NewOrder/fail/unmarshal-payload-error (0.00s) --- PASS: TestHandler_NewOrder/fail/malformed-payload-error (0.00s) - --- PASS: TestHandler_NewOrder/fail/acmeProvisionerFromContext-error (0.00s) + --- PASS: TestHandler_NewOrder/fail/prov.AuthorizeOrderIdentifier-error (0.00s) + --- PASS: TestHandler_NewOrder/ok/naf-no-nbf (0.00s) --- PASS: TestHandler_NewOrder/fail/isIdentifierAllowed-error (0.00s) - --- PASS: TestHandler_NewOrder/ok/default-naf-nbf (0.00s) + --- PASS: TestHandler_NewOrder/fail/error-db.CreateOrder (0.00s) --- PASS: TestHandler_NewOrder/ok/default-naf-nbf-with-policy (0.00s) --- PASS: TestHandler_NewOrder/fail/no-account (0.00s) + --- PASS: TestHandler_NewOrder/fail/no-provisioner (0.00s) + --- PASS: TestHandler_NewOrder/fail/nil-provisioner (0.00s) + --- PASS: TestHandler_NewOrder/fail/no-payload (0.00s) + --- PASS: TestHandler_NewOrder/fail/nil-payload (0.00s) --- PASS: TestHandler_NewOrder/fail/db.GetExternalAccountKeyByAccountID-error (0.00s) - --- PASS: TestHandler_NewOrder/fail/newACMEPolicyEngine-error (0.00s) - --- PASS: TestHandler_NewOrder/fail/prov.AuthorizeOrderIdentifier-error (0.00s) - --- PASS: TestHandler_NewOrder/fail/error-db.CreateOrder (0.00s) --- PASS: TestHandler_NewOrder/ok/multiple-authz (0.00s) + --- PASS: TestHandler_NewOrder/ok/default-naf-nbf (0.00s) + --- PASS: TestHandler_NewOrder/fail/acmeProvisionerFromContext-error (0.00s) + --- PASS: TestHandler_NewOrder/fail/newACMEPolicyEngine-error (0.00s) + --- PASS: TestHandler_NewOrder/fail/ca.AreSANsAllowed-error (0.00s) + --- PASS: TestHandler_NewOrder/fail/error-h.newAuthorization (0.00s) --- PASS: TestHandler_NewOrder/ok/nbf-no-naf (0.00s) - --- PASS: TestHandler_NewOrder/ok/naf-nbf (0.00s) + --- PASS: TestHandler_NewOrder/ok/default-naf-nbf-wireapp (0.00s) === RUN TestHandler_FinalizeOrder -=== RUN TestHandler_FinalizeOrder/fail/no-account -=== RUN TestHandler_FinalizeOrder/fail/nil-account -=== RUN TestHandler_FinalizeOrder/fail/nil-provisioner === RUN TestHandler_FinalizeOrder/fail/no-payload -=== RUN TestHandler_FinalizeOrder/fail/unmarshal-payload-error -=== RUN TestHandler_FinalizeOrder/fail/account-id-mismatch +=== RUN TestHandler_FinalizeOrder/fail/db.GetOrder-error === RUN TestHandler_FinalizeOrder/fail/provisioner-id-mismatch === RUN TestHandler_FinalizeOrder/fail/order-finalize-error -=== RUN TestHandler_FinalizeOrder/fail/no-provisioner +=== RUN TestHandler_FinalizeOrder/fail/no-account === RUN TestHandler_FinalizeOrder/fail/nil-payload +=== RUN TestHandler_FinalizeOrder/fail/unmarshal-payload-error === RUN TestHandler_FinalizeOrder/fail/malformed-payload-error -=== RUN TestHandler_FinalizeOrder/fail/db.GetOrder-error +=== RUN TestHandler_FinalizeOrder/fail/account-id-mismatch === RUN TestHandler_FinalizeOrder/ok +=== RUN TestHandler_FinalizeOrder/fail/nil-account +=== RUN TestHandler_FinalizeOrder/fail/no-provisioner +=== RUN TestHandler_FinalizeOrder/fail/nil-provisioner --- PASS: TestHandler_FinalizeOrder (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/no-account (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/nil-account (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/nil-provisioner (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/no-payload (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/unmarshal-payload-error (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/account-id-mismatch (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/db.GetOrder-error (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/provisioner-id-mismatch (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/order-finalize-error (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/no-provisioner (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/no-account (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/nil-payload (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/unmarshal-payload-error (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/malformed-payload-error (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/db.GetOrder-error (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/account-id-mismatch (0.00s) --- PASS: TestHandler_FinalizeOrder/ok (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/nil-account (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/no-provisioner (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/nil-provisioner (0.00s) === RUN TestHandler_challengeTypes === RUN TestHandler_challengeTypes/ok/dns === RUN TestHandler_challengeTypes/ok/wildcard @@ -2994,63 +3039,63 @@ --- PASS: Test_revokeOptions/ok/no-reasoncode (0.00s) --- PASS: Test_revokeOptions/ok/including-reasoncode (0.00s) === RUN TestHandler_RevokeCert -=== RUN TestHandler_RevokeCert/fail/no-payload -=== RUN TestHandler_RevokeCert/fail/wrong-certificate-encoding +=== RUN TestHandler_RevokeCert/fail/no-jws +=== RUN TestHandler_RevokeCert/fail/nil-jws +=== RUN TestHandler_RevokeCert/fail/nil-provisioner +=== RUN TestHandler_RevokeCert/fail/nil-payload === RUN TestHandler_RevokeCert/fail/db.GetCertificateBySerial === RUN TestHandler_RevokeCert/fail/different-certificate-contents -=== RUN TestHandler_RevokeCert/fail/account-not-valid -=== RUN TestHandler_RevokeCert/fail/certificate-already-revoked -=== RUN TestHandler_RevokeCert/fail/nil-jws === RUN TestHandler_RevokeCert/fail/no-provisioner -=== RUN TestHandler_RevokeCert/fail/nil-payload -=== RUN TestHandler_RevokeCert/fail/unauthorized-certificate-key +=== RUN TestHandler_RevokeCert/fail/no-certificate-encoded +=== RUN TestHandler_RevokeCert/fail/nil-account +=== RUN TestHandler_RevokeCert/fail/certificate-revoked-check-fails +=== RUN TestHandler_RevokeCert/fail/certificate-already-revoked === RUN TestHandler_RevokeCert/fail/invalid-reasoncode +=== RUN TestHandler_RevokeCert/fail/prov.AuthorizeRevoke === RUN TestHandler_RevokeCert/fail/ca.Revoke +=== RUN TestHandler_RevokeCert/fail/wrong-certificate-encoding +=== RUN TestHandler_RevokeCert/fail/account-not-valid +=== RUN TestHandler_RevokeCert/fail/account-not-authorized +=== RUN TestHandler_RevokeCert/fail/unauthorized-certificate-key === RUN TestHandler_RevokeCert/ok/using-account-key +=== RUN TestHandler_RevokeCert/fail/no-payload === RUN TestHandler_RevokeCert/fail/unmarshal-payload -=== RUN TestHandler_RevokeCert/fail/no-certificate-encoded -=== RUN TestHandler_RevokeCert/fail/nil-account -=== RUN TestHandler_RevokeCert/fail/certificate-revoked-check-fails +=== RUN TestHandler_RevokeCert/fail/no-account === RUN TestHandler_RevokeCert/fail/ca.Revoke-already-revoked === RUN TestHandler_RevokeCert/ok/using-certificate-key -=== RUN TestHandler_RevokeCert/fail/no-jws -=== RUN TestHandler_RevokeCert/fail/nil-provisioner -=== RUN TestHandler_RevokeCert/fail/no-account -=== RUN TestHandler_RevokeCert/fail/account-not-authorized -=== RUN TestHandler_RevokeCert/fail/prov.AuthorizeRevoke ---- PASS: TestHandler_RevokeCert (0.00s) - --- PASS: TestHandler_RevokeCert/fail/no-payload (0.00s) - --- PASS: TestHandler_RevokeCert/fail/wrong-certificate-encoding (0.00s) +--- PASS: TestHandler_RevokeCert (0.03s) + --- PASS: TestHandler_RevokeCert/fail/no-jws (0.00s) + --- PASS: TestHandler_RevokeCert/fail/nil-jws (0.00s) + --- PASS: TestHandler_RevokeCert/fail/nil-provisioner (0.00s) + --- PASS: TestHandler_RevokeCert/fail/nil-payload (0.00s) --- PASS: TestHandler_RevokeCert/fail/db.GetCertificateBySerial (0.00s) --- PASS: TestHandler_RevokeCert/fail/different-certificate-contents (0.00s) - --- PASS: TestHandler_RevokeCert/fail/account-not-valid (0.00s) - --- PASS: TestHandler_RevokeCert/fail/certificate-already-revoked (0.00s) - --- PASS: TestHandler_RevokeCert/fail/nil-jws (0.00s) --- PASS: TestHandler_RevokeCert/fail/no-provisioner (0.00s) - --- PASS: TestHandler_RevokeCert/fail/nil-payload (0.00s) - --- PASS: TestHandler_RevokeCert/fail/unauthorized-certificate-key (0.00s) + --- PASS: TestHandler_RevokeCert/fail/no-certificate-encoded (0.00s) + --- PASS: TestHandler_RevokeCert/fail/nil-account (0.00s) + --- PASS: TestHandler_RevokeCert/fail/certificate-revoked-check-fails (0.00s) + --- PASS: TestHandler_RevokeCert/fail/certificate-already-revoked (0.00s) --- PASS: TestHandler_RevokeCert/fail/invalid-reasoncode (0.00s) + --- PASS: TestHandler_RevokeCert/fail/prov.AuthorizeRevoke (0.00s) --- PASS: TestHandler_RevokeCert/fail/ca.Revoke (0.00s) + --- PASS: TestHandler_RevokeCert/fail/wrong-certificate-encoding (0.00s) + --- PASS: TestHandler_RevokeCert/fail/account-not-valid (0.00s) + --- PASS: TestHandler_RevokeCert/fail/account-not-authorized (0.00s) + --- PASS: TestHandler_RevokeCert/fail/unauthorized-certificate-key (0.00s) --- PASS: TestHandler_RevokeCert/ok/using-account-key (0.00s) + --- PASS: TestHandler_RevokeCert/fail/no-payload (0.00s) --- PASS: TestHandler_RevokeCert/fail/unmarshal-payload (0.00s) - --- PASS: TestHandler_RevokeCert/fail/no-certificate-encoded (0.00s) - --- PASS: TestHandler_RevokeCert/fail/nil-account (0.00s) - --- PASS: TestHandler_RevokeCert/fail/certificate-revoked-check-fails (0.00s) + --- PASS: TestHandler_RevokeCert/fail/no-account (0.00s) --- PASS: TestHandler_RevokeCert/fail/ca.Revoke-already-revoked (0.00s) --- PASS: TestHandler_RevokeCert/ok/using-certificate-key (0.00s) - --- PASS: TestHandler_RevokeCert/fail/no-jws (0.00s) - --- PASS: TestHandler_RevokeCert/fail/nil-provisioner (0.00s) - --- PASS: TestHandler_RevokeCert/fail/no-account (0.00s) - --- PASS: TestHandler_RevokeCert/fail/account-not-authorized (0.00s) - --- PASS: TestHandler_RevokeCert/fail/prov.AuthorizeRevoke (0.00s) === RUN TestHandler_isAccountAuthorized -=== RUN TestHandler_isAccountAuthorized/ok === RUN TestHandler_isAccountAuthorized/fail/account-invalid === RUN TestHandler_isAccountAuthorized/fail/different-account +=== RUN TestHandler_isAccountAuthorized/ok --- PASS: TestHandler_isAccountAuthorized (0.00s) - --- PASS: TestHandler_isAccountAuthorized/ok (0.00s) --- PASS: TestHandler_isAccountAuthorized/fail/account-invalid (0.00s) --- PASS: TestHandler_isAccountAuthorized/fail/different-account (0.00s) + --- PASS: TestHandler_isAccountAuthorized/ok (0.00s) === RUN Test_wrapUnauthorizedError === RUN Test_wrapUnauthorizedError/unauthorizedIdentifiers === RUN Test_wrapUnauthorizedError/subject @@ -3062,20 +3107,20 @@ --- PASS: Test_wrapUnauthorizedError/wrap-subject (0.00s) --- PASS: Test_wrapUnauthorizedError/default (0.00s) === RUN TestWireIntegration - wire_integration_test.go:137: database file name: /tmp/integration-db-3228177510 + wire_integration_test.go:137: database file name: /tmp/integration-db-3497149956 wire_integration_test.go:190: directory: {https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-nonce https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-account https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-order https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/revoke-cert https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/key-change } - wire_integration_test.go:203: nonce: allIOFpidUlhRHRjTmRMdmRaSEZPMzRzcXlGek9tdjY - wire_integration_test.go:237: account ID: BC62DArSN0Ve2ueBI5TS7T8fP18auFM8 - wire_integration_test.go:278: authzs IDs: [awl9sWhtgOdPYvdyyMTvzic53VQof1bV fHrWGcv5Boc14r3xrlJ6s7i8GdmkoawC] - wire_integration_test.go:428: challenge: IyqzmjV5x8eq4CNNfkERPmY5GHATReI1 invalid - wire_integration_test.go:428: challenge: FgftJ4NDi801jGhrtSatLaaeLvacV51y invalid - wire_integration_test.go:452: updated challenge: IyqzmjV5x8eq4CNNfkERPmY5GHATReI1 valid - wire_integration_test.go:452: updated challenge: FgftJ4NDi801jGhrtSatLaaeLvacV51y valid + wire_integration_test.go:203: nonce: aGZjb0kySE5PbnkwNXRwRWtMMUxCMUpHNXphZmRNQjA + wire_integration_test.go:237: account ID: XQrBOsHlId1Tdfip7bhSywIptmUgSpX0 + wire_integration_test.go:278: authzs IDs: [GfvHs1Y6ugpmdDtmbi3RI7xLSEvIpHK3 i5onAYE3az5aPgk6YAw7Y4eITyKXQunJ] + wire_integration_test.go:428: challenge: OKAy2sTjUZXIFVSNQZdwX6wvomvEVM4c invalid + wire_integration_test.go:428: challenge: TCre2XlskGkVi9xegRauiEbZ15LjY9nE invalid + wire_integration_test.go:452: updated challenge: OKAy2sTjUZXIFVSNQZdwX6wvomvEVM4c valid + wire_integration_test.go:452: updated challenge: TCre2XlskGkVi9xegRauiEbZ15LjY9nE valid wire_integration_test.go:490: updated order status: ready wire_integration_test.go:587: finalized order status: valid ---- PASS: TestWireIntegration (0.02s) +--- PASS: TestWireIntegration (0.03s) PASS -ok github.com/smallstep/certificates/acme/api 0.653s +ok github.com/smallstep/certificates/acme/api 0.857s === RUN TestDB_getDBAccount === RUN TestDB_getDBAccount/fail/not-found === RUN TestDB_getDBAccount/fail/db.Get-error @@ -3119,37 +3164,37 @@ --- PASS: TestDB_CreateAccount/fail/account-save-error (0.00s) --- PASS: TestDB_CreateAccount/ok (0.00s) === RUN TestDB_UpdateAccount -=== RUN TestDB_UpdateAccount/ok === RUN TestDB_UpdateAccount/fail/db.Get-error === RUN TestDB_UpdateAccount/fail/already-deactivated === RUN TestDB_UpdateAccount/fail/db.CmpAndSwap-error +=== RUN TestDB_UpdateAccount/ok --- PASS: TestDB_UpdateAccount (0.00s) - --- PASS: TestDB_UpdateAccount/ok (0.00s) --- PASS: TestDB_UpdateAccount/fail/db.Get-error (0.00s) --- PASS: TestDB_UpdateAccount/fail/already-deactivated (0.00s) --- PASS: TestDB_UpdateAccount/fail/db.CmpAndSwap-error (0.00s) + --- PASS: TestDB_UpdateAccount/ok (0.00s) === RUN TestDB_getDBAuthz -=== RUN TestDB_getDBAuthz/fail/not-found === RUN TestDB_getDBAuthz/fail/db.Get-error === RUN TestDB_getDBAuthz/fail/unmarshal-error === RUN TestDB_getDBAuthz/ok +=== RUN TestDB_getDBAuthz/fail/not-found --- PASS: TestDB_getDBAuthz (0.00s) - --- PASS: TestDB_getDBAuthz/fail/not-found (0.00s) --- PASS: TestDB_getDBAuthz/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBAuthz/fail/unmarshal-error (0.00s) --- PASS: TestDB_getDBAuthz/ok (0.00s) + --- PASS: TestDB_getDBAuthz/fail/not-found (0.00s) === RUN TestDB_GetAuthorization -=== RUN TestDB_GetAuthorization/fail/forward-acme-error === RUN TestDB_GetAuthorization/fail/db.GetChallenge-error === RUN TestDB_GetAuthorization/fail/db.GetChallenge-not-found === RUN TestDB_GetAuthorization/ok === RUN TestDB_GetAuthorization/fail/db.Get-error +=== RUN TestDB_GetAuthorization/fail/forward-acme-error --- PASS: TestDB_GetAuthorization (0.00s) - --- PASS: TestDB_GetAuthorization/fail/forward-acme-error (0.00s) --- PASS: TestDB_GetAuthorization/fail/db.GetChallenge-error (0.00s) --- PASS: TestDB_GetAuthorization/fail/db.GetChallenge-not-found (0.00s) --- PASS: TestDB_GetAuthorization/ok (0.00s) --- PASS: TestDB_GetAuthorization/fail/db.Get-error (0.00s) + --- PASS: TestDB_GetAuthorization/fail/forward-acme-error (0.00s) === RUN TestDB_CreateAuthorization === RUN TestDB_CreateAuthorization/fail/cmpAndSwap-error === RUN TestDB_CreateAuthorization/ok @@ -3169,59 +3214,59 @@ === RUN TestDB_GetAuthorizationsByAccountID/fail/unmarshal === RUN TestDB_GetAuthorizationsByAccountID/ok === RUN TestDB_GetAuthorizationsByAccountID/ok/skip-different-account ---- PASS: TestDB_GetAuthorizationsByAccountID (0.00s) +--- PASS: TestDB_GetAuthorizationsByAccountID (0.01s) --- PASS: TestDB_GetAuthorizationsByAccountID/fail/db.List-error (0.00s) --- PASS: TestDB_GetAuthorizationsByAccountID/fail/unmarshal (0.00s) - --- PASS: TestDB_GetAuthorizationsByAccountID/ok (0.00s) + --- PASS: TestDB_GetAuthorizationsByAccountID/ok (0.01s) --- PASS: TestDB_GetAuthorizationsByAccountID/ok/skip-different-account (0.00s) === RUN TestDB_CreateCertificate -=== RUN TestDB_CreateCertificate/fail/cmpAndSwap-error === RUN TestDB_CreateCertificate/ok +=== RUN TestDB_CreateCertificate/fail/cmpAndSwap-error --- PASS: TestDB_CreateCertificate (0.00s) - --- PASS: TestDB_CreateCertificate/fail/cmpAndSwap-error (0.00s) --- PASS: TestDB_CreateCertificate/ok (0.00s) + --- PASS: TestDB_CreateCertificate/fail/cmpAndSwap-error (0.00s) === RUN TestDB_GetCertificate +=== RUN TestDB_GetCertificate/fail/unmarshal-error +=== RUN TestDB_GetCertificate/fail/parseBundle-error === RUN TestDB_GetCertificate/ok === RUN TestDB_GetCertificate/fail/not-found === RUN TestDB_GetCertificate/fail/db.Get-error -=== RUN TestDB_GetCertificate/fail/unmarshal-error -=== RUN TestDB_GetCertificate/fail/parseBundle-error ---- PASS: TestDB_GetCertificate (0.00s) +--- PASS: TestDB_GetCertificate (0.01s) + --- PASS: TestDB_GetCertificate/fail/unmarshal-error (0.00s) + --- PASS: TestDB_GetCertificate/fail/parseBundle-error (0.00s) --- PASS: TestDB_GetCertificate/ok (0.00s) --- PASS: TestDB_GetCertificate/fail/not-found (0.00s) --- PASS: TestDB_GetCertificate/fail/db.Get-error (0.00s) - --- PASS: TestDB_GetCertificate/fail/unmarshal-error (0.00s) - --- PASS: TestDB_GetCertificate/fail/parseBundle-error (0.00s) === RUN Test_parseBundle -=== RUN Test_parseBundle/fail/unexpected-data -=== RUN Test_parseBundle/ok === RUN Test_parseBundle/fail/bad-type-error === RUN Test_parseBundle/fail/bad-pem-error +=== RUN Test_parseBundle/fail/unexpected-data +=== RUN Test_parseBundle/ok --- PASS: Test_parseBundle (0.00s) - --- PASS: Test_parseBundle/fail/unexpected-data (0.00s) - --- PASS: Test_parseBundle/ok (0.00s) --- PASS: Test_parseBundle/fail/bad-type-error (0.00s) --- PASS: Test_parseBundle/fail/bad-pem-error (0.00s) + --- PASS: Test_parseBundle/fail/unexpected-data (0.00s) + --- PASS: Test_parseBundle/ok (0.00s) === RUN TestDB_GetCertificateBySerial -=== RUN TestDB_GetCertificateBySerial/fail/unmarshal-dbSerial -=== RUN TestDB_GetCertificateBySerial/ok === RUN TestDB_GetCertificateBySerial/fail/not-found === RUN TestDB_GetCertificateBySerial/fail/db-error +=== RUN TestDB_GetCertificateBySerial/fail/unmarshal-dbSerial +=== RUN TestDB_GetCertificateBySerial/ok --- PASS: TestDB_GetCertificateBySerial (0.00s) - --- PASS: TestDB_GetCertificateBySerial/fail/unmarshal-dbSerial (0.00s) - --- PASS: TestDB_GetCertificateBySerial/ok (0.00s) --- PASS: TestDB_GetCertificateBySerial/fail/not-found (0.00s) --- PASS: TestDB_GetCertificateBySerial/fail/db-error (0.00s) + --- PASS: TestDB_GetCertificateBySerial/fail/unmarshal-dbSerial (0.00s) + --- PASS: TestDB_GetCertificateBySerial/ok (0.00s) === RUN TestDB_getDBChallenge -=== RUN TestDB_getDBChallenge/fail/not-found -=== RUN TestDB_getDBChallenge/fail/db.Get-error === RUN TestDB_getDBChallenge/fail/unmarshal-error === RUN TestDB_getDBChallenge/ok +=== RUN TestDB_getDBChallenge/fail/not-found +=== RUN TestDB_getDBChallenge/fail/db.Get-error --- PASS: TestDB_getDBChallenge (0.00s) - --- PASS: TestDB_getDBChallenge/fail/not-found (0.00s) - --- PASS: TestDB_getDBChallenge/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBChallenge/fail/unmarshal-error (0.00s) --- PASS: TestDB_getDBChallenge/ok (0.00s) + --- PASS: TestDB_getDBChallenge/fail/not-found (0.00s) + --- PASS: TestDB_getDBChallenge/fail/db.Get-error (0.00s) === RUN TestDB_CreateChallenge === RUN TestDB_CreateChallenge/fail/cmpAndSwap-error === RUN TestDB_CreateChallenge/ok @@ -3263,94 +3308,94 @@ --- PASS: TestDB_GetExternalAccountKey/fail/db.Get-error (0.00s) --- PASS: TestDB_GetExternalAccountKey/fail/non-matching-provisioner (0.00s) === RUN TestDB_GetExternalAccountKeyByReference +=== RUN TestDB_GetExternalAccountKeyByReference/fail/db.GetExternalAccountKey-error === RUN TestDB_GetExternalAccountKeyByReference/ok === RUN TestDB_GetExternalAccountKeyByReference/ok/no-reference === RUN TestDB_GetExternalAccountKeyByReference/fail/reference-not-found === RUN TestDB_GetExternalAccountKeyByReference/fail/reference-load-error === RUN TestDB_GetExternalAccountKeyByReference/fail/reference-unmarshal-error -=== RUN TestDB_GetExternalAccountKeyByReference/fail/db.GetExternalAccountKey-error --- PASS: TestDB_GetExternalAccountKeyByReference (0.00s) + --- PASS: TestDB_GetExternalAccountKeyByReference/fail/db.GetExternalAccountKey-error (0.00s) --- PASS: TestDB_GetExternalAccountKeyByReference/ok (0.00s) --- PASS: TestDB_GetExternalAccountKeyByReference/ok/no-reference (0.00s) --- PASS: TestDB_GetExternalAccountKeyByReference/fail/reference-not-found (0.00s) --- PASS: TestDB_GetExternalAccountKeyByReference/fail/reference-load-error (0.00s) --- PASS: TestDB_GetExternalAccountKeyByReference/fail/reference-unmarshal-error (0.00s) - --- PASS: TestDB_GetExternalAccountKeyByReference/fail/db.GetExternalAccountKey-error (0.00s) === RUN TestDB_GetExternalAccountKeys -=== RUN TestDB_GetExternalAccountKeys/fail/db.Get-externalAccountKeysByProvisionerIDTable-unmarshal -=== RUN TestDB_GetExternalAccountKeys/fail/db.getDBExternalAccountKey === RUN TestDB_GetExternalAccountKeys/ok === RUN TestDB_GetExternalAccountKeys/fail/db.Get-externalAccountKeysByProvisionerIDTable +=== RUN TestDB_GetExternalAccountKeys/fail/db.Get-externalAccountKeysByProvisionerIDTable-unmarshal +=== RUN TestDB_GetExternalAccountKeys/fail/db.getDBExternalAccountKey --- PASS: TestDB_GetExternalAccountKeys (0.00s) - --- PASS: TestDB_GetExternalAccountKeys/fail/db.Get-externalAccountKeysByProvisionerIDTable-unmarshal (0.00s) - --- PASS: TestDB_GetExternalAccountKeys/fail/db.getDBExternalAccountKey (0.00s) --- PASS: TestDB_GetExternalAccountKeys/ok (0.00s) --- PASS: TestDB_GetExternalAccountKeys/fail/db.Get-externalAccountKeysByProvisionerIDTable (0.00s) + --- PASS: TestDB_GetExternalAccountKeys/fail/db.Get-externalAccountKeysByProvisionerIDTable-unmarshal (0.00s) + --- PASS: TestDB_GetExternalAccountKeys/fail/db.getDBExternalAccountKey (0.00s) === RUN TestDB_DeleteExternalAccountKey -=== RUN TestDB_DeleteExternalAccountKey/ok -acme_external_account_keyID_provisionerID_index === RUN TestDB_DeleteExternalAccountKey/fail/not-found === RUN TestDB_DeleteExternalAccountKey/fail/non-matching-provisioner === RUN TestDB_DeleteExternalAccountKey/fail/delete-reference === RUN TestDB_DeleteExternalAccountKey/fail/delete-eak === RUN TestDB_DeleteExternalAccountKey/fail/delete-eakID +=== RUN TestDB_DeleteExternalAccountKey/ok +acme_external_account_keyID_provisionerID_index --- PASS: TestDB_DeleteExternalAccountKey (0.00s) - --- PASS: TestDB_DeleteExternalAccountKey/ok (0.00s) --- PASS: TestDB_DeleteExternalAccountKey/fail/not-found (0.00s) --- PASS: TestDB_DeleteExternalAccountKey/fail/non-matching-provisioner (0.00s) --- PASS: TestDB_DeleteExternalAccountKey/fail/delete-reference (0.00s) --- PASS: TestDB_DeleteExternalAccountKey/fail/delete-eak (0.00s) --- PASS: TestDB_DeleteExternalAccountKey/fail/delete-eakID (0.00s) + --- PASS: TestDB_DeleteExternalAccountKey/ok (0.00s) === RUN TestDB_CreateExternalAccountKey -=== RUN TestDB_CreateExternalAccountKey/fail/externalAccountKeyID-cmpAndSwap-error -=== RUN TestDB_CreateExternalAccountKey/fail/addEAKID-error === RUN TestDB_CreateExternalAccountKey/fail/externalAccountKeyReference-cmpAndSwap-error === RUN TestDB_CreateExternalAccountKey/ok +=== RUN TestDB_CreateExternalAccountKey/fail/externalAccountKeyID-cmpAndSwap-error +=== RUN TestDB_CreateExternalAccountKey/fail/addEAKID-error --- PASS: TestDB_CreateExternalAccountKey (0.00s) - --- PASS: TestDB_CreateExternalAccountKey/fail/externalAccountKeyID-cmpAndSwap-error (0.00s) - --- PASS: TestDB_CreateExternalAccountKey/fail/addEAKID-error (0.00s) --- PASS: TestDB_CreateExternalAccountKey/fail/externalAccountKeyReference-cmpAndSwap-error (0.00s) --- PASS: TestDB_CreateExternalAccountKey/ok (0.00s) + --- PASS: TestDB_CreateExternalAccountKey/fail/externalAccountKeyID-cmpAndSwap-error (0.00s) + --- PASS: TestDB_CreateExternalAccountKey/fail/addEAKID-error (0.00s) === RUN TestDB_UpdateExternalAccountKey +=== RUN TestDB_UpdateExternalAccountKey/fail/provisioner-change +=== RUN TestDB_UpdateExternalAccountKey/fail/reference-change === RUN TestDB_UpdateExternalAccountKey/ok === RUN TestDB_UpdateExternalAccountKey/fail/db.Get-error === RUN TestDB_UpdateExternalAccountKey/fail/provisioner-mismatch -=== RUN TestDB_UpdateExternalAccountKey/fail/provisioner-change -=== RUN TestDB_UpdateExternalAccountKey/fail/reference-change --- PASS: TestDB_UpdateExternalAccountKey (0.00s) + --- PASS: TestDB_UpdateExternalAccountKey/fail/provisioner-change (0.00s) + --- PASS: TestDB_UpdateExternalAccountKey/fail/reference-change (0.00s) --- PASS: TestDB_UpdateExternalAccountKey/ok (0.00s) --- PASS: TestDB_UpdateExternalAccountKey/fail/db.Get-error (0.00s) --- PASS: TestDB_UpdateExternalAccountKey/fail/provisioner-mismatch (0.00s) - --- PASS: TestDB_UpdateExternalAccountKey/fail/provisioner-change (0.00s) - --- PASS: TestDB_UpdateExternalAccountKey/fail/reference-change (0.00s) === RUN TestDB_addEAKID +=== RUN TestDB_addEAKID/ok/db.Get-not-found +=== RUN TestDB_addEAKID/ok === RUN TestDB_addEAKID/fail/empty-eakID === RUN TestDB_addEAKID/fail/db.Get === RUN TestDB_addEAKID/fail/unmarshal === RUN TestDB_addEAKID/fail/eakID-already-exists === RUN TestDB_addEAKID/fail/db.save -=== RUN TestDB_addEAKID/ok/db.Get-not-found -=== RUN TestDB_addEAKID/ok --- PASS: TestDB_addEAKID (0.00s) + --- PASS: TestDB_addEAKID/ok/db.Get-not-found (0.00s) + --- PASS: TestDB_addEAKID/ok (0.00s) --- PASS: TestDB_addEAKID/fail/empty-eakID (0.00s) --- PASS: TestDB_addEAKID/fail/db.Get (0.00s) --- PASS: TestDB_addEAKID/fail/unmarshal (0.00s) --- PASS: TestDB_addEAKID/fail/eakID-already-exists (0.00s) --- PASS: TestDB_addEAKID/fail/db.save (0.00s) - --- PASS: TestDB_addEAKID/ok/db.Get-not-found (0.00s) - --- PASS: TestDB_addEAKID/ok (0.00s) === RUN TestDB_deleteEAKID -=== RUN TestDB_deleteEAKID/ok === RUN TestDB_deleteEAKID/fail/db.Get === RUN TestDB_deleteEAKID/fail/unmarshal === RUN TestDB_deleteEAKID/fail/db.save === RUN TestDB_deleteEAKID/ok/db.Get-not-found +=== RUN TestDB_deleteEAKID/ok --- PASS: TestDB_deleteEAKID (0.00s) - --- PASS: TestDB_deleteEAKID/ok (0.00s) --- PASS: TestDB_deleteEAKID/fail/db.Get (0.00s) --- PASS: TestDB_deleteEAKID/fail/unmarshal (0.00s) --- PASS: TestDB_deleteEAKID/fail/db.save (0.00s) --- PASS: TestDB_deleteEAKID/ok/db.Get-not-found (0.00s) + --- PASS: TestDB_deleteEAKID/ok (0.00s) === RUN TestDB_addAndDeleteEAKID === RUN TestDB_addAndDeleteEAKID/ok/multi --- PASS: TestDB_addAndDeleteEAKID (0.00s) @@ -3372,13 +3417,13 @@ --- PASS: TestDB_CreateNonce/fail/cmpAndSwap-error (0.00s) --- PASS: TestDB_CreateNonce/ok (0.00s) === RUN TestDB_DeleteNonce -=== RUN TestDB_DeleteNonce/fail/not-found === RUN TestDB_DeleteNonce/fail/db.Update-error === RUN TestDB_DeleteNonce/ok +=== RUN TestDB_DeleteNonce/fail/not-found --- PASS: TestDB_DeleteNonce (0.00s) - --- PASS: TestDB_DeleteNonce/fail/not-found (0.00s) --- PASS: TestDB_DeleteNonce/fail/db.Update-error (0.00s) --- PASS: TestDB_DeleteNonce/ok (0.00s) + --- PASS: TestDB_DeleteNonce/fail/not-found (0.00s) === RUN TestNew === RUN TestNew/fail/db.CreateTable-error === RUN TestNew/ok @@ -3400,15 +3445,15 @@ --- PASS: TestDB_save/ok (0.00s) --- PASS: TestDB_save/ok/nils (0.00s) === RUN TestDB_getDBOrder -=== RUN TestDB_getDBOrder/fail/not-found -=== RUN TestDB_getDBOrder/fail/db.Get-error === RUN TestDB_getDBOrder/fail/unmarshal-error === RUN TestDB_getDBOrder/ok +=== RUN TestDB_getDBOrder/fail/not-found +=== RUN TestDB_getDBOrder/fail/db.Get-error --- PASS: TestDB_getDBOrder (0.00s) - --- PASS: TestDB_getDBOrder/fail/not-found (0.00s) - --- PASS: TestDB_getDBOrder/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBOrder/fail/unmarshal-error (0.00s) --- PASS: TestDB_getDBOrder/ok (0.00s) + --- PASS: TestDB_getDBOrder/fail/not-found (0.00s) + --- PASS: TestDB_getDBOrder/fail/db.Get-error (0.00s) === RUN TestDB_GetOrder === RUN TestDB_GetOrder/fail/db.Get-error === RUN TestDB_GetOrder/fail/forward-acme-error @@ -3418,13 +3463,13 @@ --- PASS: TestDB_GetOrder/fail/forward-acme-error (0.00s) --- PASS: TestDB_GetOrder/ok (0.00s) === RUN TestDB_UpdateOrder -=== RUN TestDB_UpdateOrder/fail/db.Get-error === RUN TestDB_UpdateOrder/fail/save-error === RUN TestDB_UpdateOrder/ok +=== RUN TestDB_UpdateOrder/fail/db.Get-error --- PASS: TestDB_UpdateOrder (0.00s) - --- PASS: TestDB_UpdateOrder/fail/db.Get-error (0.00s) --- PASS: TestDB_UpdateOrder/fail/save-error (0.00s) --- PASS: TestDB_UpdateOrder/ok (0.00s) + --- PASS: TestDB_UpdateOrder/fail/db.Get-error (0.00s) === RUN TestDB_CreateOrder === RUN TestDB_CreateOrder/fail/order-save-error === RUN TestDB_CreateOrder/fail/orderIDsByOrderUpdate-error @@ -3434,27 +3479,27 @@ --- PASS: TestDB_CreateOrder/fail/orderIDsByOrderUpdate-error (0.00s) --- PASS: TestDB_CreateOrder/ok (0.00s) === RUN TestDB_updateAddOrderIDs -=== RUN TestDB_updateAddOrderIDs/fail/unmarshal-error === RUN TestDB_updateAddOrderIDs/fail/db.Get-order-error -=== RUN TestDB_updateAddOrderIDs/fail/update-order-status-error === RUN TestDB_updateAddOrderIDs/fail/db.save-order-error -=== RUN TestDB_updateAddOrderIDs/ok/no-old === RUN TestDB_updateAddOrderIDs/ok/all-old-not-pending === RUN TestDB_updateAddOrderIDs/ok/old-and-new === RUN TestDB_updateAddOrderIDs/ok/old-and-new-2 +=== RUN TestDB_updateAddOrderIDs/fail/unmarshal-error +=== RUN TestDB_updateAddOrderIDs/fail/update-order-status-error +=== RUN TestDB_updateAddOrderIDs/ok/no-old === RUN TestDB_updateAddOrderIDs/fail/db.Get-error --- PASS: TestDB_updateAddOrderIDs (0.00s) - --- PASS: TestDB_updateAddOrderIDs/fail/unmarshal-error (0.00s) --- PASS: TestDB_updateAddOrderIDs/fail/db.Get-order-error (0.00s) - --- PASS: TestDB_updateAddOrderIDs/fail/update-order-status-error (0.00s) --- PASS: TestDB_updateAddOrderIDs/fail/db.save-order-error (0.00s) - --- PASS: TestDB_updateAddOrderIDs/ok/no-old (0.00s) --- PASS: TestDB_updateAddOrderIDs/ok/all-old-not-pending (0.00s) --- PASS: TestDB_updateAddOrderIDs/ok/old-and-new (0.00s) --- PASS: TestDB_updateAddOrderIDs/ok/old-and-new-2 (0.00s) + --- PASS: TestDB_updateAddOrderIDs/fail/unmarshal-error (0.00s) + --- PASS: TestDB_updateAddOrderIDs/fail/update-order-status-error (0.00s) + --- PASS: TestDB_updateAddOrderIDs/ok/no-old (0.00s) --- PASS: TestDB_updateAddOrderIDs/fail/db.Get-error (0.00s) PASS -ok github.com/smallstep/certificates/acme/db/nosql 0.068s +ok github.com/smallstep/certificates/acme/db/nosql 0.128s === RUN TestParseUserID === RUN TestParseUserID/ok === RUN TestParseUserID/fail/json @@ -3492,7 +3537,7 @@ --- PASS: TestParseClientID/fail/scheme (0.00s) --- PASS: TestParseClientID/fail/username (0.00s) PASS -ok github.com/smallstep/certificates/acme/wire 0.015s +ok github.com/smallstep/certificates/acme/wire 0.032s === RUN TestNewCertificate --- PASS: TestNewCertificate (0.00s) === RUN TestCertificate_MarshalJSON @@ -3653,8 +3698,8 @@ === RUN Test_Rekey/no_peer_certificates === RUN Test_Rekey/rekey_error === RUN Test_Rekey/json_read_error ---- PASS: Test_Rekey (0.00s) - --- PASS: Test_Rekey/ok (0.00s) +--- PASS: Test_Rekey (0.02s) + --- PASS: Test_Rekey/ok (0.01s) --- PASS: Test_Rekey/no_tls (0.00s) --- PASS: Test_Rekey/no_peer_certificates (0.00s) --- PASS: Test_Rekey/rekey_error (0.00s) @@ -3703,7 +3748,7 @@ === RUN Test_fmtPublicKey/ed25519 === RUN Test_fmtPublicKey/dsa2048 === RUN Test_fmtPublicKey/unknown ---- PASS: Test_fmtPublicKey (2.12s) +--- PASS: Test_fmtPublicKey (33.36s) --- PASS: Test_fmtPublicKey/p256 (0.00s) --- PASS: Test_fmtPublicKey/rsa2048 (0.00s) --- PASS: Test_fmtPublicKey/ed25519 (0.00s) @@ -3717,7 +3762,7 @@ === RUN TestIntermediates/ok === RUN TestIntermediates/ok_multiple === RUN TestIntermediates/fail ---- PASS: TestIntermediates (0.00s) +--- PASS: TestIntermediates (0.01s) --- PASS: TestIntermediates/ok (0.00s) --- PASS: TestIntermediates/ok_multiple (0.00s) --- PASS: TestIntermediates/fail (0.00s) @@ -3756,21 +3801,21 @@ --- PASS: TestRevokeRequestValidate/error/non-passive_not_implemented (0.00s) --- PASS: TestRevokeRequestValidate/ok (0.00s) === RUN Test_caHandler_Revoke +=== RUN Test_caHandler_Revoke/200/ott +=== RUN Test_caHandler_Revoke/400/no_OTT_and_no_peer_certificate === RUN Test_caHandler_Revoke/200/no_ott === RUN Test_caHandler_Revoke/500/ott_authority.Revoke === RUN Test_caHandler_Revoke/403/ott_authority.Revoke === RUN Test_caHandler_Revoke/400/json_read_error === RUN Test_caHandler_Revoke/400/invalid_request_body -=== RUN Test_caHandler_Revoke/200/ott -=== RUN Test_caHandler_Revoke/400/no_OTT_and_no_peer_certificate --- PASS: Test_caHandler_Revoke (0.00s) + --- PASS: Test_caHandler_Revoke/200/ott (0.00s) + --- PASS: Test_caHandler_Revoke/400/no_OTT_and_no_peer_certificate (0.00s) --- PASS: Test_caHandler_Revoke/200/no_ott (0.00s) --- PASS: Test_caHandler_Revoke/500/ott_authority.Revoke (0.00s) --- PASS: Test_caHandler_Revoke/403/ott_authority.Revoke (0.00s) --- PASS: Test_caHandler_Revoke/400/json_read_error (0.00s) --- PASS: Test_caHandler_Revoke/400/invalid_request_body (0.00s) - --- PASS: Test_caHandler_Revoke/200/ott (0.00s) - --- PASS: Test_caHandler_Revoke/400/no_OTT_and_no_peer_certificate (0.00s) === RUN TestSSHCertificate_MarshalJSON === RUN TestSSHCertificate_MarshalJSON/nil === RUN TestSSHCertificate_MarshalJSON/user @@ -3963,14 +4008,14 @@ === RUN Test_getIdentityURI/ok_multiple_with_invalid === RUN Test_getIdentityURI/ok_missing === RUN Test_getIdentityURI/ok_empty ---- PASS: Test_getIdentityURI (0.00s) +--- PASS: Test_getIdentityURI (0.01s) --- PASS: Test_getIdentityURI/ok (0.00s) --- PASS: Test_getIdentityURI/ok_multiple (0.00s) --- PASS: Test_getIdentityURI/ok_multiple_with_invalid (0.00s) --- PASS: Test_getIdentityURI/ok_missing (0.00s) --- PASS: Test_getIdentityURI/ok_empty (0.00s) PASS -ok github.com/smallstep/certificates/api 2.239s +ok github.com/smallstep/certificates/api 33.532s === RUN TestError === RUN TestError/noLogger === RUN TestError/noError @@ -4011,11 +4056,11 @@ === RUN Test_badProtoJSONError_Render === RUN Test_badProtoJSONError_Render/bad_proto_normal_space === RUN Test_badProtoJSONError_Render/bad_proto_non_breaking_space ---- PASS: Test_badProtoJSONError_Render (0.00s) +--- PASS: Test_badProtoJSONError_Render (0.01s) --- PASS: Test_badProtoJSONError_Render/bad_proto_normal_space (0.00s) --- PASS: Test_badProtoJSONError_Render/bad_proto_non_breaking_space (0.00s) PASS -ok github.com/smallstep/certificates/api/read 0.034s +ok github.com/smallstep/certificates/api/read 0.067s === RUN TestJSON --- PASS: TestJSON (0.00s) === RUN TestJSONPanicsOnUnsupportedType @@ -4033,17 +4078,17 @@ === RUN TestStatusCodeFromError --- PASS: TestStatusCodeFromError (0.00s) PASS -ok github.com/smallstep/certificates/api/render 0.023s +ok github.com/smallstep/certificates/api/render 0.028s === RUN TestAuthorityNew +=== RUN TestAuthorityNew/fail_loading_CA_cert === RUN TestAuthorityNew/ok === RUN TestAuthorityNew/fail_bad_root === RUN TestAuthorityNew/fail_bad_password -=== RUN TestAuthorityNew/fail_loading_CA_cert --- PASS: TestAuthorityNew (0.01s) + --- PASS: TestAuthorityNew/fail_loading_CA_cert (0.00s) --- PASS: TestAuthorityNew/ok (0.00s) --- PASS: TestAuthorityNew/fail_bad_root (0.00s) --- PASS: TestAuthorityNew/fail_bad_password (0.00s) - --- PASS: TestAuthorityNew/fail_loading_CA_cert (0.00s) === RUN TestAuthorityNew_bundles === RUN TestAuthorityNew_bundles/ok_ca0 === RUN TestAuthorityNew_bundles/ok_bundle @@ -4051,7 +4096,7 @@ === RUN TestAuthorityNew_bundles/ok_federated_bundle === RUN TestAuthorityNew_bundles/fail_root === RUN TestAuthorityNew_bundles/fail_federated ---- PASS: TestAuthorityNew_bundles (0.01s) +--- PASS: TestAuthorityNew_bundles (0.02s) --- PASS: TestAuthorityNew_bundles/ok_ca0 (0.00s) --- PASS: TestAuthorityNew_bundles/ok_bundle (0.00s) --- PASS: TestAuthorityNew_bundles/ok_federated_ca1 (0.00s) @@ -4059,11 +4104,11 @@ --- PASS: TestAuthorityNew_bundles/fail_root (0.00s) --- PASS: TestAuthorityNew_bundles/fail_federated (0.00s) === RUN TestAuthority_GetDatabase -2025/10/26 22:11:22 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -2025/10/26 22:11:22 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetDatabase/ok === RUN TestAuthority_GetDatabase/ok_WithDatabase ---- PASS: TestAuthority_GetDatabase (0.00s) +--- PASS: TestAuthority_GetDatabase (0.01s) --- PASS: TestAuthority_GetDatabase/ok (0.00s) --- PASS: TestAuthority_GetDatabase/ok_WithDatabase (0.00s) === RUN TestNewEmbedded @@ -4095,16 +4140,16 @@ === RUN TestNewEmbedded_Sign --- PASS: TestNewEmbedded_Sign (0.00s) === RUN TestNewEmbedded_GetTLSCertificate ---- PASS: TestNewEmbedded_GetTLSCertificate (0.00s) +--- PASS: TestNewEmbedded_GetTLSCertificate (0.01s) === RUN TestAuthority_CloseForReload -2025/10/26 22:11:22 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_CloseForReload/ok --- PASS: TestAuthority_CloseForReload (0.00s) --- PASS: TestAuthority_CloseForReload/ok (0.00s) === RUN TestAuthority_GetSCEP === RUN TestAuthority_GetSCEP/ok === RUN TestAuthority_GetSCEP/wrong_password ---- PASS: TestAuthority_GetSCEP (0.00s) +--- PASS: TestAuthority_GetSCEP (0.01s) --- PASS: TestAuthority_GetSCEP/ok (0.00s) --- PASS: TestAuthority_GetSCEP/wrong_password (0.00s) === RUN TestAuthority_GetID @@ -4114,158 +4159,158 @@ --- PASS: TestAuthority_GetID/ok (0.00s) --- PASS: TestAuthority_GetID/ok_with_id (0.00s) === RUN TestAuthority_authorizeToken -2025/10/26 22:11:22 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_authorizeToken/ok/simpledb +=== RUN TestAuthority_authorizeToken/fail/simpledb/token-already-used +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_authorizeToken/fail/sha256/token-already-used +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_authorizeToken/ok/mockNoSQLDB +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_authorizeToken/fail/mockNoSQLDB/token-already-used +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeToken/fail/invalid-token === RUN TestAuthority_authorizeToken/fail/prehistoric-token -=== RUN TestAuthority_authorizeToken/fail/provisioner-not-found === RUN TestAuthority_authorizeToken/ok/sha256 -=== RUN TestAuthority_authorizeToken/fail/sha256/token-already-used -2025/10/26 22:11:22 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeToken/fail/mockNoSQLDB/error -2025/10/26 22:11:22 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeToken/fail/uninitialized -=== RUN TestAuthority_authorizeToken/ok/simpledb -=== RUN TestAuthority_authorizeToken/fail/simpledb/token-already-used -2025/10/26 22:11:22 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_authorizeToken/ok/mockNoSQLDB -2025/10/26 22:11:22 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_authorizeToken/fail/mockNoSQLDB/token-already-used -2025/10/26 22:11:22 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s ---- PASS: TestAuthority_authorizeToken (0.03s) - --- PASS: TestAuthority_authorizeToken/fail/invalid-token (0.00s) - --- PASS: TestAuthority_authorizeToken/fail/prehistoric-token (0.00s) - --- PASS: TestAuthority_authorizeToken/fail/provisioner-not-found (0.00s) - --- PASS: TestAuthority_authorizeToken/ok/sha256 (0.00s) - --- PASS: TestAuthority_authorizeToken/fail/sha256/token-already-used (0.00s) - --- PASS: TestAuthority_authorizeToken/fail/mockNoSQLDB/error (0.00s) - --- PASS: TestAuthority_authorizeToken/fail/uninitialized (0.00s) +=== RUN TestAuthority_authorizeToken/fail/provisioner-not-found +--- PASS: TestAuthority_authorizeToken (0.07s) --- PASS: TestAuthority_authorizeToken/ok/simpledb (0.00s) --- PASS: TestAuthority_authorizeToken/fail/simpledb/token-already-used (0.00s) + --- PASS: TestAuthority_authorizeToken/fail/sha256/token-already-used (0.00s) --- PASS: TestAuthority_authorizeToken/ok/mockNoSQLDB (0.00s) --- PASS: TestAuthority_authorizeToken/fail/mockNoSQLDB/token-already-used (0.00s) + --- PASS: TestAuthority_authorizeToken/fail/invalid-token (0.00s) + --- PASS: TestAuthority_authorizeToken/fail/prehistoric-token (0.00s) + --- PASS: TestAuthority_authorizeToken/ok/sha256 (0.00s) + --- PASS: TestAuthority_authorizeToken/fail/mockNoSQLDB/error (0.01s) + --- PASS: TestAuthority_authorizeToken/fail/uninitialized (0.00s) + --- PASS: TestAuthority_authorizeToken/fail/provisioner-not-found (0.00s) === RUN TestAuthority_authorizeRevoke -2025/10/26 22:11:22 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_authorizeRevoke/ok/token +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeRevoke/fail/token/invalid-token === RUN TestAuthority_authorizeRevoke/fail/token/invalid-subject ---- PASS: TestAuthority_authorizeRevoke (0.03s) - --- PASS: TestAuthority_authorizeRevoke/ok/token (0.00s) +=== RUN TestAuthority_authorizeRevoke/ok/token +--- PASS: TestAuthority_authorizeRevoke (0.04s) --- PASS: TestAuthority_authorizeRevoke/fail/token/invalid-token (0.00s) --- PASS: TestAuthority_authorizeRevoke/fail/token/invalid-subject (0.00s) + --- PASS: TestAuthority_authorizeRevoke/ok/token (0.00s) === RUN TestAuthority_authorizeSign -2025/10/26 22:11:22 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeSign/fail/invalid-token === RUN TestAuthority_authorizeSign/fail/invalid-subject === RUN TestAuthority_authorizeSign/ok ---- PASS: TestAuthority_authorizeSign (0.03s) +--- PASS: TestAuthority_authorizeSign (0.04s) --- PASS: TestAuthority_authorizeSign/fail/invalid-token (0.00s) --- PASS: TestAuthority_authorizeSign/fail/invalid-subject (0.00s) --- PASS: TestAuthority_authorizeSign/ok (0.00s) === RUN TestAuthority_Authorize -2025/10/26 22:11:22 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_Authorize/fail/revoke/invalid-token -=== RUN TestAuthority_Authorize/ok/sshSign -=== RUN TestAuthority_Authorize/ok/sshRekey -=== RUN TestAuthority_Authorize/default-to-signMethod +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Authorize/fail/sign/invalid-token === RUN TestAuthority_Authorize/ok/sign -=== RUN TestAuthority_Authorize/fail/sshSign/disabled -2025/10/26 22:11:22 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_Authorize/fail/sshRenew/disabled -2025/10/26 22:11:22 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_Authorize/ok/revoke +=== RUN TestAuthority_Authorize/ok/sshSign === RUN TestAuthority_Authorize/ok/sshRenew +=== RUN TestAuthority_Authorize/fail/sshRekey/invalid-token === RUN TestAuthority_Authorize/fail/sshRekey/disabled -2025/10/26 22:11:22 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_Authorize/ok/sshRekey +=== RUN TestAuthority_Authorize/fail/sshRenew/disabled +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Authorize/fail/sshSign/invalid-token -=== RUN TestAuthority_Authorize/fail/sshRenew/invalid-token -=== RUN TestAuthority_Authorize/fail/sshRevoke/invalid-token +=== RUN TestAuthority_Authorize/fail/sshSign/disabled +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Authorize/ok/sshRevoke -=== RUN TestAuthority_Authorize/fail/sshRekey/invalid-token === RUN TestAuthority_Authorize/fail/unexpected-method -=== RUN TestAuthority_Authorize/ok/revoke ---- PASS: TestAuthority_Authorize (0.03s) - --- PASS: TestAuthority_Authorize/fail/revoke/invalid-token (0.00s) - --- PASS: TestAuthority_Authorize/ok/sshSign (0.00s) - --- PASS: TestAuthority_Authorize/ok/sshRekey (0.00s) - --- PASS: TestAuthority_Authorize/default-to-signMethod (0.00s) +=== RUN TestAuthority_Authorize/default-to-signMethod +=== RUN TestAuthority_Authorize/fail/revoke/invalid-token +=== RUN TestAuthority_Authorize/fail/sshRenew/invalid-token +=== RUN TestAuthority_Authorize/fail/sshRevoke/invalid-token +--- PASS: TestAuthority_Authorize (0.06s) --- PASS: TestAuthority_Authorize/fail/sign/invalid-token (0.00s) --- PASS: TestAuthority_Authorize/ok/sign (0.00s) - --- PASS: TestAuthority_Authorize/fail/sshSign/disabled (0.00s) - --- PASS: TestAuthority_Authorize/fail/sshRenew/disabled (0.00s) + --- PASS: TestAuthority_Authorize/ok/revoke (0.00s) + --- PASS: TestAuthority_Authorize/ok/sshSign (0.00s) --- PASS: TestAuthority_Authorize/ok/sshRenew (0.00s) + --- PASS: TestAuthority_Authorize/fail/sshRekey/invalid-token (0.00s) --- PASS: TestAuthority_Authorize/fail/sshRekey/disabled (0.00s) + --- PASS: TestAuthority_Authorize/ok/sshRekey (0.00s) + --- PASS: TestAuthority_Authorize/fail/sshRenew/disabled (0.00s) --- PASS: TestAuthority_Authorize/fail/sshSign/invalid-token (0.00s) - --- PASS: TestAuthority_Authorize/fail/sshRenew/invalid-token (0.00s) - --- PASS: TestAuthority_Authorize/fail/sshRevoke/invalid-token (0.00s) + --- PASS: TestAuthority_Authorize/fail/sshSign/disabled (0.00s) --- PASS: TestAuthority_Authorize/ok/sshRevoke (0.00s) - --- PASS: TestAuthority_Authorize/fail/sshRekey/invalid-token (0.00s) --- PASS: TestAuthority_Authorize/fail/unexpected-method (0.00s) - --- PASS: TestAuthority_Authorize/ok/revoke (0.00s) + --- PASS: TestAuthority_Authorize/default-to-signMethod (0.00s) + --- PASS: TestAuthority_Authorize/fail/revoke/invalid-token (0.00s) + --- PASS: TestAuthority_Authorize/fail/sshRenew/invalid-token (0.00s) + --- PASS: TestAuthority_Authorize/fail/sshRevoke/invalid-token (0.00s) === RUN TestAuthority_authorizeRenew -=== RUN TestAuthority_authorizeRenew/ok/from_db -2025/10/26 22:11:22 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeRenew/fail/db.IsRevoked-error -2025/10/26 22:11:22 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeRenew/fail/revoked -2025/10/26 22:11:22 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeRenew/fail/load-provisioner -2025/10/26 22:11:22 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeRenew/fail/provisioner-authorize-renewal-fail -2025/10/26 22:11:22 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeRenew/ok -2025/10/26 22:11:22 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s ---- PASS: TestAuthority_authorizeRenew (0.00s) - --- PASS: TestAuthority_authorizeRenew/ok/from_db (0.00s) +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_authorizeRenew/ok/from_db +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +--- PASS: TestAuthority_authorizeRenew (0.01s) --- PASS: TestAuthority_authorizeRenew/fail/db.IsRevoked-error (0.00s) --- PASS: TestAuthority_authorizeRenew/fail/revoked (0.00s) --- PASS: TestAuthority_authorizeRenew/fail/load-provisioner (0.00s) --- PASS: TestAuthority_authorizeRenew/fail/provisioner-authorize-renewal-fail (0.00s) --- PASS: TestAuthority_authorizeRenew/ok (0.00s) + --- PASS: TestAuthority_authorizeRenew/ok/from_db (0.00s) === RUN TestAuthority_authorizeSSHSign -2025/10/26 22:11:22 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeSSHSign/fail/invalid-token === RUN TestAuthority_authorizeSSHSign/fail/invalid-subject === RUN TestAuthority_authorizeSSHSign/ok ---- PASS: TestAuthority_authorizeSSHSign (0.02s) +--- PASS: TestAuthority_authorizeSSHSign (0.05s) --- PASS: TestAuthority_authorizeSSHSign/fail/invalid-token (0.00s) --- PASS: TestAuthority_authorizeSSHSign/fail/invalid-subject (0.00s) --- PASS: TestAuthority_authorizeSSHSign/ok (0.00s) === RUN TestAuthority_authorizeSSHRenew -2025/10/26 22:11:22 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeSSHRenew/ok === RUN TestAuthority_authorizeSSHRenew/ok/WithAuthorizeSSHRenewFunc -2025/10/26 22:11:22 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeSSHRenew/fail/invalid-token === RUN TestAuthority_authorizeSSHRenew/fail/sshRenew-unimplemented-jwk-provisioner === RUN TestAuthority_authorizeSSHRenew/fail/WithAuthorizeSSHRenewFunc -2025/10/26 22:11:22 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s ---- PASS: TestAuthority_authorizeSSHRenew (0.03s) +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +--- PASS: TestAuthority_authorizeSSHRenew (0.06s) --- PASS: TestAuthority_authorizeSSHRenew/ok (0.00s) --- PASS: TestAuthority_authorizeSSHRenew/ok/WithAuthorizeSSHRenewFunc (0.00s) --- PASS: TestAuthority_authorizeSSHRenew/fail/invalid-token (0.00s) --- PASS: TestAuthority_authorizeSSHRenew/fail/sshRenew-unimplemented-jwk-provisioner (0.00s) --- PASS: TestAuthority_authorizeSSHRenew/fail/WithAuthorizeSSHRenewFunc (0.00s) === RUN TestAuthority_authorizeSSHRevoke -2025/10/26 22:11:22 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeSSHRevoke/fail/invalid-token === RUN TestAuthority_authorizeSSHRevoke/fail/invalid-subject === RUN TestAuthority_authorizeSSHRevoke/ok ---- PASS: TestAuthority_authorizeSSHRevoke (0.02s) +--- PASS: TestAuthority_authorizeSSHRevoke (0.05s) --- PASS: TestAuthority_authorizeSSHRevoke/fail/invalid-token (0.00s) --- PASS: TestAuthority_authorizeSSHRevoke/fail/invalid-subject (0.00s) --- PASS: TestAuthority_authorizeSSHRevoke/ok (0.00s) === RUN TestAuthority_authorizeSSHRekey -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeSSHRekey/fail/sshRekey-unimplemented-jwk-provisioner === RUN TestAuthority_authorizeSSHRekey/ok === RUN TestAuthority_authorizeSSHRekey/fail/invalid-token ---- PASS: TestAuthority_authorizeSSHRekey (0.03s) +--- PASS: TestAuthority_authorizeSSHRekey (0.04s) --- PASS: TestAuthority_authorizeSSHRekey/fail/sshRekey-unimplemented-jwk-provisioner (0.00s) --- PASS: TestAuthority_authorizeSSHRekey/ok (0.00s) --- PASS: TestAuthority_authorizeSSHRekey/fail/invalid-token (0.00s) === RUN TestAuthority_AuthorizeRenewToken -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:39 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_AuthorizeRenewToken/ok === RUN TestAuthority_AuthorizeRenewToken/ok_expired_cert === RUN TestAuthority_AuthorizeRenewToken/ok_provisioner_issuer @@ -4280,7 +4325,7 @@ === RUN TestAuthority_AuthorizeRenewToken/fail_token_iat#01 === RUN TestAuthority_AuthorizeRenewToken/fail_token_iat#02 === RUN TestAuthority_AuthorizeRenewToken/fail_token_aud ---- PASS: TestAuthority_AuthorizeRenewToken (0.04s) +--- PASS: TestAuthority_AuthorizeRenewToken (0.06s) --- PASS: TestAuthority_AuthorizeRenewToken/ok (0.00s) --- PASS: TestAuthority_AuthorizeRenewToken/ok_expired_cert (0.00s) --- PASS: TestAuthority_AuthorizeRenewToken/ok_provisioner_issuer (0.00s) @@ -4290,29 +4335,29 @@ --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_signature (0.00s) --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_provisioner (0.00s) --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_iss (0.00s) - --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_sub (0.00s) + --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_sub (0.01s) --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_iat (0.00s) --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_iat#01 (0.00s) - --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_iat#02 (0.00s) + --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_iat#02 (0.01s) --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_aud (0.00s) === RUN TestAuthority_checkPolicy -=== RUN TestAuthority_checkPolicy/fail/NewX509PolicyEngine-error -=== RUN TestAuthority_checkPolicy/fail/currentAdmin-evaluation-error -=== RUN TestAuthority_checkPolicy/fail/currentAdmin-lockout === RUN TestAuthority_checkPolicy/fail/otherAdmins-evaluation-error === RUN TestAuthority_checkPolicy/fail/otherAdmins-lockout === RUN TestAuthority_checkPolicy/ok/no-policy === RUN TestAuthority_checkPolicy/ok/empty-policy === RUN TestAuthority_checkPolicy/ok/policy +=== RUN TestAuthority_checkPolicy/fail/NewX509PolicyEngine-error +=== RUN TestAuthority_checkPolicy/fail/currentAdmin-evaluation-error +=== RUN TestAuthority_checkPolicy/fail/currentAdmin-lockout --- PASS: TestAuthority_checkPolicy (0.00s) - --- PASS: TestAuthority_checkPolicy/fail/NewX509PolicyEngine-error (0.00s) - --- PASS: TestAuthority_checkPolicy/fail/currentAdmin-evaluation-error (0.00s) - --- PASS: TestAuthority_checkPolicy/fail/currentAdmin-lockout (0.00s) --- PASS: TestAuthority_checkPolicy/fail/otherAdmins-evaluation-error (0.00s) --- PASS: TestAuthority_checkPolicy/fail/otherAdmins-lockout (0.00s) --- PASS: TestAuthority_checkPolicy/ok/no-policy (0.00s) --- PASS: TestAuthority_checkPolicy/ok/empty-policy (0.00s) --- PASS: TestAuthority_checkPolicy/ok/policy (0.00s) + --- PASS: TestAuthority_checkPolicy/fail/NewX509PolicyEngine-error (0.00s) + --- PASS: TestAuthority_checkPolicy/fail/currentAdmin-evaluation-error (0.00s) + --- PASS: TestAuthority_checkPolicy/fail/currentAdmin-lockout (0.00s) === RUN TestAuthority_reloadPolicyEngines === RUN TestAuthority_reloadPolicyEngines/fail/standalone-x509-policy === RUN TestAuthority_reloadPolicyEngines/fail/standalone-ssh-host-policy @@ -4412,24 +4457,24 @@ --- PASS: TestGetEncryptedKey/ok (0.00s) --- PASS: TestGetEncryptedKey/fail-not-found (0.00s) === RUN TestGetProvisioners -=== RUN TestGetProvisioners/ok/rsa === RUN TestGetProvisioners/ok ---- PASS: TestGetProvisioners (0.00s) - --- PASS: TestGetProvisioners/ok/rsa (0.00s) +=== RUN TestGetProvisioners/ok/rsa +--- PASS: TestGetProvisioners (0.01s) --- PASS: TestGetProvisioners/ok (0.00s) + --- PASS: TestGetProvisioners/ok/rsa (0.01s) === RUN TestAuthority_LoadProvisionerByCertificate -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_LoadProvisionerByCertificate/ok_from_certificate === RUN TestAuthority_LoadProvisionerByCertificate/ok_from_db === RUN TestAuthority_LoadProvisionerByCertificate/ok_from_admindb === RUN TestAuthority_LoadProvisionerByCertificate/fail_from_certificate === RUN TestAuthority_LoadProvisionerByCertificate/fail_from_db === RUN TestAuthority_LoadProvisionerByCertificate/fail_from_admindb ---- PASS: TestAuthority_LoadProvisionerByCertificate (0.15s) +--- PASS: TestAuthority_LoadProvisionerByCertificate (0.29s) --- PASS: TestAuthority_LoadProvisionerByCertificate/ok_from_certificate (0.00s) --- PASS: TestAuthority_LoadProvisionerByCertificate/ok_from_db (0.00s) --- PASS: TestAuthority_LoadProvisionerByCertificate/ok_from_admindb (0.00s) @@ -4457,34 +4502,34 @@ --- PASS: Test_isRAProvisioner/nil_ra (0.00s) --- PASS: Test_isRAProvisioner/not_ra (0.00s) === RUN TestRoot -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestRoot/success === RUN TestRoot/not-found === RUN TestRoot/invalid-stored-certificate -=== RUN TestRoot/success --- PASS: TestRoot (0.00s) + --- PASS: TestRoot/success (0.00s) --- PASS: TestRoot/not-found (0.00s) --- PASS: TestRoot/invalid-stored-certificate (0.00s) - --- PASS: TestRoot/success (0.00s) === RUN TestAuthority_GetRootCertificate === RUN TestAuthority_GetRootCertificate/ok -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s --- PASS: TestAuthority_GetRootCertificate (0.00s) --- PASS: TestAuthority_GetRootCertificate/ok (0.00s) === RUN TestAuthority_GetRootCertificates === RUN TestAuthority_GetRootCertificates/ok -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s --- PASS: TestAuthority_GetRootCertificates (0.00s) --- PASS: TestAuthority_GetRootCertificates/ok (0.00s) === RUN TestAuthority_GetRoots -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetRoots/ok --- PASS: TestAuthority_GetRoots (0.00s) --- PASS: TestAuthority_GetRoots/ok (0.00s) === RUN TestAuthority_GetFederation === RUN TestAuthority_GetFederation/ok -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetFederation/fail -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s --- PASS: TestAuthority_GetFederation (0.00s) --- PASS: TestAuthority_GetFederation/ok (0.00s) --- PASS: TestAuthority_GetFederation/fail (0.00s) @@ -4499,89 +4544,89 @@ --- PASS: TestAuthority_GetIntermediateCertificate/ok_empty (0.00s) --- PASS: TestAuthority_GetIntermediateCertificate/ok_nil (0.00s) === RUN TestAuthority_initHostOnly -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s ---- PASS: TestAuthority_initHostOnly (0.01s) +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +--- PASS: TestAuthority_initHostOnly (0.00s) === RUN TestAuthority_initUserOnly -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s ---- PASS: TestAuthority_initUserOnly (0.00s) +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +--- PASS: TestAuthority_initUserOnly (0.01s) === RUN TestAuthority_SignSSH === RUN TestAuthority_SignSSH/ok-user -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-host -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-user-only -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-host-only -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-opts-type-user -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-opts-type-host -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-opts-principals -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-opts-principals#01 -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-opts-valid-after -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-opts-valid-before -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-cert-validator -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-cert-modifier -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-opts-validator -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-opts-modifier -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-custom-template -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-enrich-template -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-user-policy -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-host-policy -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-opts-type -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-cert-validator -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-cert-modifier -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-opts-validator -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-opts-modifier -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-bad-sign-options -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-no-user-key -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-no-host-key -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-bad-type -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-custom-template -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-custom-template-syntax-error-file -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-custom-template-syntax-value-file -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-user-policy -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-user-policy-with-host-cert -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-user-policy-with-bad-user -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-host-policy -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-host-policy-with-user-cert -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-host-policy-with-bad-host -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-enriching-webhooks -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-authorizing-webhooks -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s ---- PASS: TestAuthority_SignSSH (0.03s) +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +--- PASS: TestAuthority_SignSSH (0.07s) --- PASS: TestAuthority_SignSSH/ok-user (0.00s) --- PASS: TestAuthority_SignSSH/ok-host (0.00s) --- PASS: TestAuthority_SignSSH/ok-user-only (0.00s) @@ -4591,12 +4636,12 @@ --- PASS: TestAuthority_SignSSH/ok-opts-principals (0.00s) --- PASS: TestAuthority_SignSSH/ok-opts-principals#01 (0.00s) --- PASS: TestAuthority_SignSSH/ok-opts-valid-after (0.00s) - --- PASS: TestAuthority_SignSSH/ok-opts-valid-before (0.00s) - --- PASS: TestAuthority_SignSSH/ok-cert-validator (0.00s) + --- PASS: TestAuthority_SignSSH/ok-opts-valid-before (0.01s) + --- PASS: TestAuthority_SignSSH/ok-cert-validator (0.01s) --- PASS: TestAuthority_SignSSH/ok-cert-modifier (0.00s) --- PASS: TestAuthority_SignSSH/ok-opts-validator (0.00s) --- PASS: TestAuthority_SignSSH/ok-opts-modifier (0.00s) - --- PASS: TestAuthority_SignSSH/ok-custom-template (0.00s) + --- PASS: TestAuthority_SignSSH/ok-custom-template (0.02s) --- PASS: TestAuthority_SignSSH/ok-enrich-template (0.00s) --- PASS: TestAuthority_SignSSH/ok-user-policy (0.00s) --- PASS: TestAuthority_SignSSH/ok-host-policy (0.00s) @@ -4604,7 +4649,7 @@ --- PASS: TestAuthority_SignSSH/fail-cert-validator (0.00s) --- PASS: TestAuthority_SignSSH/fail-cert-modifier (0.00s) --- PASS: TestAuthority_SignSSH/fail-opts-validator (0.00s) - --- PASS: TestAuthority_SignSSH/fail-opts-modifier (0.00s) + --- PASS: TestAuthority_SignSSH/fail-opts-modifier (0.01s) --- PASS: TestAuthority_SignSSH/fail-bad-sign-options (0.00s) --- PASS: TestAuthority_SignSSH/fail-no-user-key (0.00s) --- PASS: TestAuthority_SignSSH/fail-no-host-key (0.00s) @@ -4622,23 +4667,23 @@ --- PASS: TestAuthority_SignSSH/fail-authorizing-webhooks (0.00s) === RUN TestAuthority_SignSSHAddUser === RUN TestAuthority_SignSSHAddUser/ok -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSHAddUser/ok-no-host-key -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSHAddUser/ok-custom-principal -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSHAddUser/ok-custom-command -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSHAddUser/ok-custom-principal-and-command -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSHAddUser/fail-no-user-key -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSHAddUser/fail-no-user-cert -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSHAddUser/fail-no-principals -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSHAddUser/fail-many-principals -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s --- PASS: TestAuthority_SignSSHAddUser (0.01s) --- PASS: TestAuthority_SignSSHAddUser/ok (0.00s) --- PASS: TestAuthority_SignSSHAddUser/ok-no-host-key (0.00s) @@ -4651,54 +4696,54 @@ --- PASS: TestAuthority_SignSSHAddUser/fail-many-principals (0.00s) === RUN TestAuthority_GetSSHRoots === RUN TestAuthority_GetSSHRoots/ok -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHRoots/nil -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s --- PASS: TestAuthority_GetSSHRoots (0.00s) --- PASS: TestAuthority_GetSSHRoots/ok (0.00s) --- PASS: TestAuthority_GetSSHRoots/nil (0.00s) === RUN TestAuthority_GetSSHFederation === RUN TestAuthority_GetSSHFederation/ok -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHFederation/nil -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s ---- PASS: TestAuthority_GetSSHFederation (0.01s) +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +--- PASS: TestAuthority_GetSSHFederation (0.00s) --- PASS: TestAuthority_GetSSHFederation/ok (0.00s) --- PASS: TestAuthority_GetSSHFederation/nil (0.00s) === RUN TestAuthority_GetSSHConfig === RUN TestAuthority_GetSSHConfig/user -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/user#01 -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/host -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/host#01 -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/userWithData -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/hostWithData -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/userIncludesEmptyData -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/userIncludesWithoutTemplateVersion -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/userIncludesWithTemplateVersion -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/disabled -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/badType -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/userError -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/hostError -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/noTemplates -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/missingData -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/failError -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s ---- PASS: TestAuthority_GetSSHConfig (0.01s) +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +--- PASS: TestAuthority_GetSSHConfig (0.03s) --- PASS: TestAuthority_GetSSHConfig/user (0.00s) --- PASS: TestAuthority_GetSSHConfig/user#01 (0.00s) --- PASS: TestAuthority_GetSSHConfig/host (0.00s) @@ -4717,17 +4762,17 @@ --- PASS: TestAuthority_GetSSHConfig/failError (0.00s) === RUN TestAuthority_CheckSSHHost === RUN TestAuthority_CheckSSHHost/true -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_CheckSSHHost/false -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_CheckSSHHost/notImplemented -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_CheckSSHHost/notImplemented#01 -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_CheckSSHHost/internal -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_CheckSSHHost/internal#01 -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s --- PASS: TestAuthority_CheckSSHHost (0.00s) --- PASS: TestAuthority_CheckSSHHost/true (0.00s) --- PASS: TestAuthority_CheckSSHHost/false (0.00s) @@ -4764,44 +4809,44 @@ --- PASS: TestAuthority_GetSSHBastion/func_err (0.00s) --- PASS: TestAuthority_GetSSHBastion/error (0.00s) === RUN TestAuthority_GetSSHHosts -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_GetSSHHosts/fail/getHostsFunc-fail -=== RUN TestAuthority_GetSSHHosts/ok/getHostsFunc-defined +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHHosts/fail/db-get-fail -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHHosts/ok -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_GetSSHHosts/fail/getHostsFunc-fail +=== RUN TestAuthority_GetSSHHosts/ok/getHostsFunc-defined --- PASS: TestAuthority_GetSSHHosts (0.00s) - --- PASS: TestAuthority_GetSSHHosts/fail/getHostsFunc-fail (0.00s) - --- PASS: TestAuthority_GetSSHHosts/ok/getHostsFunc-defined (0.00s) --- PASS: TestAuthority_GetSSHHosts/fail/db-get-fail (0.00s) --- PASS: TestAuthority_GetSSHHosts/ok (0.00s) + --- PASS: TestAuthority_GetSSHHosts/fail/getHostsFunc-fail (0.00s) + --- PASS: TestAuthority_GetSSHHosts/ok/getHostsFunc-defined (0.00s) === RUN TestAuthority_RekeySSH -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_RekeySSH/fail/old-cert-no-host-key -=== RUN TestAuthority_RekeySSH/fail/unexpected-old-cert-type -=== RUN TestAuthority_RekeySSH/fail/is-revoked-error -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_RekeySSH/fail/opts-type +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_RekeySSH/ok === RUN TestAuthority_RekeySSH/fail/old-cert-validAfter +=== RUN TestAuthority_RekeySSH/fail/old-cert-no-user-key === RUN TestAuthority_RekeySSH/fail/db-store -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_RekeySSH/ok +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_RekeySSH/fail/is-revoked -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_RekeySSH/fail/is-revoked-error +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_RekeySSH/fail/opts-type === RUN TestAuthority_RekeySSH/fail/old-cert-validBefore -=== RUN TestAuthority_RekeySSH/fail/old-cert-no-user-key ---- PASS: TestAuthority_RekeySSH (0.00s) - --- PASS: TestAuthority_RekeySSH/fail/old-cert-no-host-key (0.00s) - --- PASS: TestAuthority_RekeySSH/fail/unexpected-old-cert-type (0.00s) - --- PASS: TestAuthority_RekeySSH/fail/is-revoked-error (0.00s) - --- PASS: TestAuthority_RekeySSH/fail/opts-type (0.00s) +=== RUN TestAuthority_RekeySSH/fail/old-cert-no-host-key +=== RUN TestAuthority_RekeySSH/fail/unexpected-old-cert-type +--- PASS: TestAuthority_RekeySSH (0.01s) + --- PASS: TestAuthority_RekeySSH/ok (0.00s) --- PASS: TestAuthority_RekeySSH/fail/old-cert-validAfter (0.00s) + --- PASS: TestAuthority_RekeySSH/fail/old-cert-no-user-key (0.00s) --- PASS: TestAuthority_RekeySSH/fail/db-store (0.00s) - --- PASS: TestAuthority_RekeySSH/ok (0.00s) --- PASS: TestAuthority_RekeySSH/fail/is-revoked (0.00s) + --- PASS: TestAuthority_RekeySSH/fail/is-revoked-error (0.00s) + --- PASS: TestAuthority_RekeySSH/fail/opts-type (0.00s) --- PASS: TestAuthority_RekeySSH/fail/old-cert-validBefore (0.00s) - --- PASS: TestAuthority_RekeySSH/fail/old-cert-no-user-key (0.00s) + --- PASS: TestAuthority_RekeySSH/fail/old-cert-no-host-key (0.00s) + --- PASS: TestAuthority_RekeySSH/fail/unexpected-old-cert-type (0.00s) === RUN TestIsValidForAddUser === RUN TestIsValidForAddUser/ok === RUN TestIsValidForAddUser/ok_oidc @@ -4819,151 +4864,151 @@ --- PASS: TestIsValidForAddUser/fail_no_principals (0.00s) --- PASS: TestIsValidForAddUser/fail_extra_principals (0.00s) === RUN TestAuthority_SignWithContext -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/fail_invalid_extra_option +=== RUN TestAuthority_SignWithContext/ok +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/ok_with_enforced_modifier +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/ok_with_enriching_webhook +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/ok/csr_with_no_template_critical_SAN_extension +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/ok_with_attestation_data +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignWithContext/fail_create_cert -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/fail_provisioner_duration_claim +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignWithContext/fail_validate_sans_when_adding_common_name_not_in_claims -=== RUN TestAuthority_SignWithContext/fail_bad_JSON_value_template_file -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/fail_enriching_webhooks -=== RUN TestAuthority_SignWithContext/ok_with_custom_template -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/ok_with_enriching_webhook -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/ok_with_policy -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/fail_invalid_signature -=== RUN TestAuthority_SignWithContext/fail_invalid_extra_option -=== RUN TestAuthority_SignWithContext/fail_store_cert_in_db -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/fail_custom_template -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignWithContext/fail_bad_JSON_syntax_template_file -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignWithContext/fail_with_policy -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignWithContext/fail_authorizing_webhooks -=== RUN TestAuthority_SignWithContext/fail_with_cnf -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/ok_with_cnf +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignWithContext/fail_merge_default_ASN1DN -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/fail_provisioner_duration_claim === RUN TestAuthority_SignWithContext/fail_rsa_key_too_short +=== RUN TestAuthority_SignWithContext/fail_bad_JSON_value_template_file +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/fail_with_custom_enforcer +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/fail_store_cert_in_db +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/fail_custom_template +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignWithContext/fail_with_provisioner_enforcer -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/ok_with_enforced_modifier -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/ok/csr_with_no_template_critical_SAN_extension -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/fail_enriching_webhooks +=== RUN TestAuthority_SignWithContext/fail_with_cnf +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/ok_with_custom_template +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignWithContext/ok_with_custom_enforcer -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/ok_with_attestation_data -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/fail_with_custom_enforcer -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/ok -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/ok_with_cnf -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s ---- PASS: TestAuthority_SignWithContext (0.08s) +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/ok_with_policy +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/fail_invalid_signature +--- PASS: TestAuthority_SignWithContext (0.13s) + --- PASS: TestAuthority_SignWithContext/fail_invalid_extra_option (0.00s) + --- PASS: TestAuthority_SignWithContext/ok (0.00s) + --- PASS: TestAuthority_SignWithContext/ok_with_enforced_modifier (0.00s) + --- PASS: TestAuthority_SignWithContext/ok_with_enriching_webhook (0.01s) + --- PASS: TestAuthority_SignWithContext/ok/csr_with_no_template_critical_SAN_extension (0.00s) + --- PASS: TestAuthority_SignWithContext/ok_with_attestation_data (0.01s) --- PASS: TestAuthority_SignWithContext/fail_create_cert (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_provisioner_duration_claim (0.00s) --- PASS: TestAuthority_SignWithContext/fail_validate_sans_when_adding_common_name_not_in_claims (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_bad_JSON_value_template_file (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_enriching_webhooks (0.00s) - --- PASS: TestAuthority_SignWithContext/ok_with_custom_template (0.00s) - --- PASS: TestAuthority_SignWithContext/ok_with_enriching_webhook (0.00s) - --- PASS: TestAuthority_SignWithContext/ok_with_policy (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_invalid_signature (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_invalid_extra_option (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_store_cert_in_db (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_custom_template (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_bad_JSON_syntax_template_file (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_bad_JSON_syntax_template_file (0.01s) --- PASS: TestAuthority_SignWithContext/fail_with_policy (0.00s) --- PASS: TestAuthority_SignWithContext/fail_authorizing_webhooks (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_with_cnf (0.00s) + --- PASS: TestAuthority_SignWithContext/ok_with_cnf (0.01s) --- PASS: TestAuthority_SignWithContext/fail_merge_default_ASN1DN (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_provisioner_duration_claim (0.00s) --- PASS: TestAuthority_SignWithContext/fail_rsa_key_too_short (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_with_provisioner_enforcer (0.00s) - --- PASS: TestAuthority_SignWithContext/ok_with_enforced_modifier (0.00s) - --- PASS: TestAuthority_SignWithContext/ok/csr_with_no_template_critical_SAN_extension (0.00s) - --- PASS: TestAuthority_SignWithContext/ok_with_custom_enforcer (0.00s) - --- PASS: TestAuthority_SignWithContext/ok_with_attestation_data (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_bad_JSON_value_template_file (0.00s) --- PASS: TestAuthority_SignWithContext/fail_with_custom_enforcer (0.00s) - --- PASS: TestAuthority_SignWithContext/ok (0.00s) - --- PASS: TestAuthority_SignWithContext/ok_with_cnf (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_store_cert_in_db (0.01s) + --- PASS: TestAuthority_SignWithContext/fail_custom_template (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_with_provisioner_enforcer (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_enriching_webhooks (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_with_cnf (0.00s) + --- PASS: TestAuthority_SignWithContext/ok_with_custom_template (0.01s) + --- PASS: TestAuthority_SignWithContext/ok_with_custom_enforcer (0.01s) + --- PASS: TestAuthority_SignWithContext/ok_with_policy (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_invalid_signature (0.00s) === RUN TestAuthority_Renew -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_Renew/fail/WithAuthorizeRenewFunc +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_Renew/ok +=== RUN TestAuthority_Renew/ok/WithExtraNames === RUN TestAuthority_Renew/ok/success-new-intermediate -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Renew/ok/WithAuthorizeRenewFunc -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Renew/fail/create-cert -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Renew/fail/unauthorized -=== RUN TestAuthority_Renew/fail/WithAuthorizeRenewFunc -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_Renew/ok -=== RUN TestAuthority_Renew/ok/WithExtraNames ---- PASS: TestAuthority_Renew (0.01s) +--- PASS: TestAuthority_Renew (0.02s) + --- PASS: TestAuthority_Renew/fail/WithAuthorizeRenewFunc (0.00s) + --- PASS: TestAuthority_Renew/ok (0.01s) + --- PASS: TestAuthority_Renew/ok/WithExtraNames (0.00s) --- PASS: TestAuthority_Renew/ok/success-new-intermediate (0.00s) --- PASS: TestAuthority_Renew/ok/WithAuthorizeRenewFunc (0.00s) --- PASS: TestAuthority_Renew/fail/create-cert (0.00s) --- PASS: TestAuthority_Renew/fail/unauthorized (0.00s) - --- PASS: TestAuthority_Renew/fail/WithAuthorizeRenewFunc (0.00s) - --- PASS: TestAuthority_Renew/ok (0.00s) - --- PASS: TestAuthority_Renew/ok/WithExtraNames (0.00s) === RUN TestAuthority_Rekey -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_Rekey/fail/create-cert -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Rekey/fail/unauthorized === RUN TestAuthority_Rekey/ok/renew === RUN TestAuthority_Rekey/ok/rekey === RUN TestAuthority_Rekey/ok/renew/success-new-intermediate -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_Rekey/fail/create-cert +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s --- PASS: TestAuthority_Rekey (0.01s) - --- PASS: TestAuthority_Rekey/fail/create-cert (0.00s) --- PASS: TestAuthority_Rekey/fail/unauthorized (0.00s) --- PASS: TestAuthority_Rekey/ok/renew (0.00s) --- PASS: TestAuthority_Rekey/ok/rekey (0.00s) - --- PASS: TestAuthority_Rekey/ok/renew/success-new-intermediate (0.00s) + --- PASS: TestAuthority_Rekey/ok/renew/success-new-intermediate (0.01s) + --- PASS: TestAuthority_Rekey/fail/create-cert (0.00s) === RUN TestAuthority_GetTLSOptions === RUN TestAuthority_GetTLSOptions/default -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetTLSOptions/non-default -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s --- PASS: TestAuthority_GetTLSOptions (0.00s) --- PASS: TestAuthority_GetTLSOptions/default (0.00s) --- PASS: TestAuthority_GetTLSOptions/non-default (0.00s) === RUN TestAuthority_Revoke -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Revoke/fail/nil-db -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Revoke/fail/already-revoked -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_Revoke/ok/mTLS +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Revoke/ok/mTLS-no-provisioner -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_Revoke/ok/ACME -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Revoke/ok/ssh === RUN TestAuthority_Revoke/fail/token/authorizeRevoke_error -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Revoke/fail/db-revoke -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Revoke/ok/token -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_Revoke/ok/mTLS ---- PASS: TestAuthority_Revoke (0.05s) +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_Revoke/ok/ACME +--- PASS: TestAuthority_Revoke (0.06s) --- PASS: TestAuthority_Revoke/fail/nil-db (0.00s) --- PASS: TestAuthority_Revoke/fail/already-revoked (0.00s) + --- PASS: TestAuthority_Revoke/ok/mTLS (0.00s) --- PASS: TestAuthority_Revoke/ok/mTLS-no-provisioner (0.00s) - --- PASS: TestAuthority_Revoke/ok/ACME (0.00s) --- PASS: TestAuthority_Revoke/ok/ssh (0.00s) --- PASS: TestAuthority_Revoke/fail/token/authorizeRevoke_error (0.00s) --- PASS: TestAuthority_Revoke/fail/db-revoke (0.00s) --- PASS: TestAuthority_Revoke/ok/token (0.00s) - --- PASS: TestAuthority_Revoke/ok/mTLS (0.00s) + --- PASS: TestAuthority_Revoke/ok/ACME (0.00s) === RUN TestAuthority_constraints === RUN TestAuthority_constraints/ok_dns === RUN TestAuthority_constraints/ok_ip @@ -4977,13 +5022,13 @@ === RUN TestAuthority_constraints/fail_excluded_emails === RUN TestAuthority_constraints/fail_permitted_uris === RUN TestAuthority_constraints/fail_excluded_uris ---- PASS: TestAuthority_constraints (0.04s) +--- PASS: TestAuthority_constraints (0.05s) --- PASS: TestAuthority_constraints/ok_dns (0.00s) --- PASS: TestAuthority_constraints/ok_ip (0.00s) --- PASS: TestAuthority_constraints/ok_email (0.00s) --- PASS: TestAuthority_constraints/ok_uri (0.00s) --- PASS: TestAuthority_constraints/fail_permitted_dns (0.00s) - --- PASS: TestAuthority_constraints/fail_excluded_dns (0.00s) + --- PASS: TestAuthority_constraints/fail_excluded_dns (0.01s) --- PASS: TestAuthority_constraints/fail_permitted_ips (0.00s) --- PASS: TestAuthority_constraints/fail_excluded_ips (0.00s) --- PASS: TestAuthority_constraints/fail_permitted_emails (0.00s) @@ -4991,30 +5036,30 @@ --- PASS: TestAuthority_constraints/fail_permitted_uris (0.00s) --- PASS: TestAuthority_constraints/fail_excluded_uris (0.00s) === RUN TestAuthority_CRL -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_CRL/ok/crl-full -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_CRL/fail/empty-crl ---- PASS: TestAuthority_CRL (0.10s) - --- PASS: TestAuthority_CRL/ok/crl-full (0.00s) +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_CRL/ok/crl-full +--- PASS: TestAuthority_CRL (0.19s) --- PASS: TestAuthority_CRL/fail/empty-crl (0.00s) + --- PASS: TestAuthority_CRL/ok/crl-full (0.00s) === RUN TestAuthority_GetX509Signer -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -2025/10/26 22:11:23 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:39:40 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetX509Signer/ok === RUN TestAuthority_GetX509Signer/fail --- PASS: TestAuthority_GetX509Signer (0.00s) --- PASS: TestAuthority_GetX509Signer/ok (0.00s) --- PASS: TestAuthority_GetX509Signer/fail (0.00s) PASS -ok github.com/smallstep/certificates/authority 0.855s +ok github.com/smallstep/certificates/authority 1.572s ? github.com/smallstep/certificates/authority/admin [no test files] === RUN TestHandler_requireEABEnabled === RUN TestHandler_requireEABEnabled/fail/prov.GetDetails.GetACME === RUN TestHandler_requireEABEnabled/ok/eab-disabled === RUN TestHandler_requireEABEnabled/ok/eab-enabled === RUN TestHandler_requireEABEnabled/fail/prov.GetDetails ---- PASS: TestHandler_requireEABEnabled (0.00s) +--- PASS: TestHandler_requireEABEnabled (0.01s) --- PASS: TestHandler_requireEABEnabled/fail/prov.GetDetails.GetACME (0.00s) --- PASS: TestHandler_requireEABEnabled/ok/eab-disabled (0.00s) --- PASS: TestHandler_requireEABEnabled/ok/eab-enabled (0.00s) @@ -5076,9 +5121,9 @@ === RUN TestHandler_GetAdmin === RUN TestHandler_GetAdmin/fail/auth.LoadAdminByID-not-found === RUN TestHandler_GetAdmin/ok ---- PASS: TestHandler_GetAdmin (0.00s) +--- PASS: TestHandler_GetAdmin (0.01s) --- PASS: TestHandler_GetAdmin/fail/auth.LoadAdminByID-not-found (0.00s) - --- PASS: TestHandler_GetAdmin/ok (0.00s) + --- PASS: TestHandler_GetAdmin/ok (0.01s) === RUN TestHandler_GetAdmins === RUN TestHandler_GetAdmins/fail/parse-cursor === RUN TestHandler_GetAdmins/fail/auth.GetAdmins @@ -5088,33 +5133,33 @@ --- PASS: TestHandler_GetAdmins/fail/auth.GetAdmins (0.00s) --- PASS: TestHandler_GetAdmins/ok (0.00s) === RUN TestHandler_CreateAdmin -=== RUN TestHandler_CreateAdmin/fail/auth.StoreAdmin === RUN TestHandler_CreateAdmin/ok === RUN TestHandler_CreateAdmin/fail/ReadJSON === RUN TestHandler_CreateAdmin/fail/validate === RUN TestHandler_CreateAdmin/fail/auth.LoadProvisionerByName +=== RUN TestHandler_CreateAdmin/fail/auth.StoreAdmin --- PASS: TestHandler_CreateAdmin (0.00s) - --- PASS: TestHandler_CreateAdmin/fail/auth.StoreAdmin (0.00s) --- PASS: TestHandler_CreateAdmin/ok (0.00s) --- PASS: TestHandler_CreateAdmin/fail/ReadJSON (0.00s) --- PASS: TestHandler_CreateAdmin/fail/validate (0.00s) --- PASS: TestHandler_CreateAdmin/fail/auth.LoadProvisionerByName (0.00s) + --- PASS: TestHandler_CreateAdmin/fail/auth.StoreAdmin (0.00s) === RUN TestHandler_DeleteAdmin === RUN TestHandler_DeleteAdmin/fail/auth.RemoveAdmin === RUN TestHandler_DeleteAdmin/ok ---- PASS: TestHandler_DeleteAdmin (0.00s) +--- PASS: TestHandler_DeleteAdmin (0.01s) --- PASS: TestHandler_DeleteAdmin/fail/auth.RemoveAdmin (0.00s) --- PASS: TestHandler_DeleteAdmin/ok (0.00s) === RUN TestHandler_UpdateAdmin -=== RUN TestHandler_UpdateAdmin/fail/auth.UpdateAdmin -=== RUN TestHandler_UpdateAdmin/ok === RUN TestHandler_UpdateAdmin/fail/ReadJSON === RUN TestHandler_UpdateAdmin/fail/validate +=== RUN TestHandler_UpdateAdmin/fail/auth.UpdateAdmin +=== RUN TestHandler_UpdateAdmin/ok --- PASS: TestHandler_UpdateAdmin (0.00s) - --- PASS: TestHandler_UpdateAdmin/fail/auth.UpdateAdmin (0.00s) - --- PASS: TestHandler_UpdateAdmin/ok (0.00s) --- PASS: TestHandler_UpdateAdmin/fail/ReadJSON (0.00s) --- PASS: TestHandler_UpdateAdmin/fail/validate (0.00s) + --- PASS: TestHandler_UpdateAdmin/fail/auth.UpdateAdmin (0.00s) + --- PASS: TestHandler_UpdateAdmin/ok (0.00s) === RUN TestHandler_requireAPIEnabled === RUN TestHandler_requireAPIEnabled/fail/auth.IsAdminAPIEnabled === RUN TestHandler_requireAPIEnabled/ok @@ -5122,13 +5167,13 @@ --- PASS: TestHandler_requireAPIEnabled/fail/auth.IsAdminAPIEnabled (0.00s) --- PASS: TestHandler_requireAPIEnabled/ok (0.00s) === RUN TestHandler_extractAuthorizeTokenAdmin +=== RUN TestHandler_extractAuthorizeTokenAdmin/fail/missing-authorization-token === RUN TestHandler_extractAuthorizeTokenAdmin/fail/auth.AuthorizeAdminToken === RUN TestHandler_extractAuthorizeTokenAdmin/ok -=== RUN TestHandler_extractAuthorizeTokenAdmin/fail/missing-authorization-token --- PASS: TestHandler_extractAuthorizeTokenAdmin (0.00s) + --- PASS: TestHandler_extractAuthorizeTokenAdmin/fail/missing-authorization-token (0.00s) --- PASS: TestHandler_extractAuthorizeTokenAdmin/fail/auth.AuthorizeAdminToken (0.00s) --- PASS: TestHandler_extractAuthorizeTokenAdmin/ok (0.00s) - --- PASS: TestHandler_extractAuthorizeTokenAdmin/fail/missing-authorization-token (0.00s) === RUN TestHandler_loadProvisionerByName === RUN TestHandler_loadProvisionerByName/fail/auth.LoadProvisionerByName === RUN TestHandler_loadProvisionerByName/fail/db.GetProvisioner @@ -5146,21 +5191,21 @@ --- PASS: TestHandler_checkAction/standalone-nosql-not-supported (0.00s) --- PASS: TestHandler_checkAction/standalone-no-nosql-not-supported (0.00s) === RUN TestHandler_loadExternalAccountKey -=== RUN TestHandler_loadExternalAccountKey/fail/keyID-not-found-error -=== RUN TestHandler_loadExternalAccountKey/fail/keyID-error -=== RUN TestHandler_loadExternalAccountKey/fail/reference-not-found-error === RUN TestHandler_loadExternalAccountKey/fail/reference-error === RUN TestHandler_loadExternalAccountKey/fail/no-key === RUN TestHandler_loadExternalAccountKey/ok/keyID === RUN TestHandler_loadExternalAccountKey/ok/reference +=== RUN TestHandler_loadExternalAccountKey/fail/keyID-not-found-error +=== RUN TestHandler_loadExternalAccountKey/fail/keyID-error +=== RUN TestHandler_loadExternalAccountKey/fail/reference-not-found-error --- PASS: TestHandler_loadExternalAccountKey (0.00s) - --- PASS: TestHandler_loadExternalAccountKey/fail/keyID-not-found-error (0.00s) - --- PASS: TestHandler_loadExternalAccountKey/fail/keyID-error (0.00s) - --- PASS: TestHandler_loadExternalAccountKey/fail/reference-not-found-error (0.00s) --- PASS: TestHandler_loadExternalAccountKey/fail/reference-error (0.00s) --- PASS: TestHandler_loadExternalAccountKey/fail/no-key (0.00s) --- PASS: TestHandler_loadExternalAccountKey/ok/keyID (0.00s) --- PASS: TestHandler_loadExternalAccountKey/ok/reference (0.00s) + --- PASS: TestHandler_loadExternalAccountKey/fail/keyID-not-found-error (0.00s) + --- PASS: TestHandler_loadExternalAccountKey/fail/keyID-error (0.00s) + --- PASS: TestHandler_loadExternalAccountKey/fail/reference-not-found-error (0.00s) === RUN TestPolicyAdminResponder_GetAuthorityPolicy === RUN TestPolicyAdminResponder_GetAuthorityPolicy/fail/linkedca === RUN TestPolicyAdminResponder_GetAuthorityPolicy/fail/auth.GetAuthorityPolicy-error @@ -5172,103 +5217,103 @@ --- PASS: TestPolicyAdminResponder_GetAuthorityPolicy/fail/auth.GetAuthorityPolicy-not-found (0.00s) --- PASS: TestPolicyAdminResponder_GetAuthorityPolicy/ok (0.00s) === RUN TestPolicyAdminResponder_CreateAuthorityPolicy +=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/read.ProtoJSON +=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/validatePolicy +=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-policy-admin-lockout-error === RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-error === RUN TestPolicyAdminResponder_CreateAuthorityPolicy/ok === RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/linkedca === RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/auth.GetAuthorityPolicy-error === RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/existing-policy -=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/read.ProtoJSON -=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/validatePolicy -=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-policy-admin-lockout-error --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy (0.00s) + --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/read.ProtoJSON (0.00s) + --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/validatePolicy (0.00s) + --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-policy-admin-lockout-error (0.00s) --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-error (0.00s) --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/ok (0.00s) --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/auth.GetAuthorityPolicy-error (0.00s) --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/existing-policy (0.00s) - --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/read.ProtoJSON (0.00s) - --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/validatePolicy (0.00s) - --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-policy-admin-lockout-error (0.00s) === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy -=== RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/ok -=== RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/linkedca === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/auth.GetAuthorityPolicy-error === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/no-existing-policy === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/read.ProtoJSON === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/validatePolicy === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-policy-admin-lockout-error === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-error +=== RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/ok +=== RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/linkedca --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/ok (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/auth.GetAuthorityPolicy-error (0.00s) --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/no-existing-policy (0.00s) --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/read.ProtoJSON (0.00s) --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/validatePolicy (0.00s) --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-policy-admin-lockout-error (0.00s) --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-error (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/ok (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/linkedca (0.00s) === RUN TestPolicyAdminResponder_DeleteAuthorityPolicy +=== RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/ok === RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/linkedca === RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/auth.GetAuthorityPolicy-error === RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/no-existing-policy === RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/auth.RemoveAuthorityPolicy-error -=== RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/ok --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy (0.00s) + --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/ok (0.00s) --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/auth.GetAuthorityPolicy-error (0.00s) --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/no-existing-policy (0.00s) --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/auth.RemoveAuthorityPolicy-error (0.00s) - --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/ok (0.00s) === RUN TestPolicyAdminResponder_GetProvisionerPolicy +=== RUN TestPolicyAdminResponder_GetProvisionerPolicy/fail/linkedca === RUN TestPolicyAdminResponder_GetProvisionerPolicy/fail/prov-no-policy === RUN TestPolicyAdminResponder_GetProvisionerPolicy/ok -=== RUN TestPolicyAdminResponder_GetProvisionerPolicy/fail/linkedca --- PASS: TestPolicyAdminResponder_GetProvisionerPolicy (0.00s) + --- PASS: TestPolicyAdminResponder_GetProvisionerPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_GetProvisionerPolicy/fail/prov-no-policy (0.00s) --- PASS: TestPolicyAdminResponder_GetProvisionerPolicy/ok (0.00s) - --- PASS: TestPolicyAdminResponder_GetProvisionerPolicy/fail/linkedca (0.00s) === RUN TestPolicyAdminResponder_CreateProvisionerPolicy -=== RUN TestPolicyAdminResponder_CreateProvisionerPolicy/fail/linkedca -=== RUN TestPolicyAdminResponder_CreateProvisionerPolicy/fail/existing-policy === RUN TestPolicyAdminResponder_CreateProvisionerPolicy/fail/read.ProtoJSON === RUN TestPolicyAdminResponder_CreateProvisionerPolicy/fail/validatePolicy === RUN TestPolicyAdminResponder_CreateProvisionerPolicy/fail/auth.UpdateProvisioner-policy-admin-lockout-error === RUN TestPolicyAdminResponder_CreateProvisionerPolicy/fail/auth.UpdateProvisioner-error === RUN TestPolicyAdminResponder_CreateProvisionerPolicy/ok +=== RUN TestPolicyAdminResponder_CreateProvisionerPolicy/fail/linkedca +=== RUN TestPolicyAdminResponder_CreateProvisionerPolicy/fail/existing-policy --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/fail/linkedca (0.00s) - --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/fail/existing-policy (0.00s) --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/fail/read.ProtoJSON (0.00s) --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/fail/validatePolicy (0.00s) --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/fail/auth.UpdateProvisioner-policy-admin-lockout-error (0.00s) --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/fail/auth.UpdateProvisioner-error (0.00s) --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/ok (0.00s) + --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/fail/linkedca (0.00s) + --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/fail/existing-policy (0.00s) === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy +=== RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/linkedca === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/no-existing-policy === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/read.ProtoJSON === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/validatePolicy === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/auth.UpdateProvisioner-policy-admin-lockout-error === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/auth.UpdateProvisioner-error === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/ok -=== RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/linkedca --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/no-existing-policy (0.00s) --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/read.ProtoJSON (0.00s) --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/validatePolicy (0.00s) --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/auth.UpdateProvisioner-policy-admin-lockout-error (0.00s) --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/auth.UpdateProvisioner-error (0.00s) --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/ok (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/linkedca (0.00s) === RUN TestPolicyAdminResponder_DeleteProvisionerPolicy -=== RUN TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/linkedca -=== RUN TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/no-existing-policy === RUN TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/auth.UpdateProvisioner-error === RUN TestPolicyAdminResponder_DeleteProvisionerPolicy/ok +=== RUN TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/linkedca +=== RUN TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/no-existing-policy --- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/linkedca (0.00s) - --- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/no-existing-policy (0.00s) --- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/auth.UpdateProvisioner-error (0.00s) --- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy/ok (0.00s) + --- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/linkedca (0.00s) + --- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/no-existing-policy (0.00s) === RUN TestPolicyAdminResponder_GetACMEAccountPolicy === RUN TestPolicyAdminResponder_GetACMEAccountPolicy/fail/linkedca === RUN TestPolicyAdminResponder_GetACMEAccountPolicy/fail/no-policy @@ -5278,43 +5323,43 @@ --- PASS: TestPolicyAdminResponder_GetACMEAccountPolicy/fail/no-policy (0.00s) --- PASS: TestPolicyAdminResponder_GetACMEAccountPolicy/ok (0.00s) === RUN TestPolicyAdminResponder_CreateACMEAccountPolicy +=== RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error +=== RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/ok === RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/linkedca === RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/existing-policy === RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/read.ProtoJSON === RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/validatePolicy -=== RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error -=== RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/ok --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy (0.00s) + --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error (0.00s) + --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/ok (0.00s) --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/existing-policy (0.00s) --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/read.ProtoJSON (0.00s) --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/validatePolicy (0.00s) - --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error (0.00s) - --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/ok (0.00s) === RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy -=== RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error -=== RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/ok -=== RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/linkedca === RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/no-existing-policy === RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/read.ProtoJSON === RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/validatePolicy ---- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/ok (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/linkedca (0.00s) +=== RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error +=== RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/ok +=== RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/linkedca +--- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy (0.01s) --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/no-existing-policy (0.00s) --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/read.ProtoJSON (0.00s) --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/validatePolicy (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/ok (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/linkedca (0.00s) === RUN TestPolicyAdminResponder_DeleteACMEAccountPolicy -=== RUN TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/linkedca === RUN TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/no-existing-policy === RUN TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error === RUN TestPolicyAdminResponder_DeleteACMEAccountPolicy/ok +=== RUN TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/linkedca --- PASS: TestPolicyAdminResponder_DeleteACMEAccountPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/no-existing-policy (0.00s) --- PASS: TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error (0.00s) --- PASS: TestPolicyAdminResponder_DeleteACMEAccountPolicy/ok (0.00s) + --- PASS: TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/linkedca (0.00s) === RUN Test_isBadRequest === RUN Test_isBadRequest/nil === RUN Test_isBadRequest/no-policy-error @@ -5342,19 +5387,19 @@ === RUN TestHandler_GetProvisioner/fail/auth.LoadProvisionerByName === RUN TestHandler_GetProvisioner/fail/db.GetProvisioner === RUN TestHandler_GetProvisioner/ok ---- PASS: TestHandler_GetProvisioner (0.01s) +--- PASS: TestHandler_GetProvisioner (0.00s) --- PASS: TestHandler_GetProvisioner/fail/auth.LoadProvisionerByID (0.00s) --- PASS: TestHandler_GetProvisioner/fail/auth.LoadProvisionerByName (0.00s) --- PASS: TestHandler_GetProvisioner/fail/db.GetProvisioner (0.00s) --- PASS: TestHandler_GetProvisioner/ok (0.00s) === RUN TestHandler_GetProvisioners -=== RUN TestHandler_GetProvisioners/fail/parse-cursor === RUN TestHandler_GetProvisioners/fail/auth.GetProvisioners === RUN TestHandler_GetProvisioners/ok +=== RUN TestHandler_GetProvisioners/fail/parse-cursor --- PASS: TestHandler_GetProvisioners (0.00s) - --- PASS: TestHandler_GetProvisioners/fail/parse-cursor (0.00s) --- PASS: TestHandler_GetProvisioners/fail/auth.GetProvisioners (0.00s) --- PASS: TestHandler_GetProvisioners/ok (0.00s) + --- PASS: TestHandler_GetProvisioners/fail/parse-cursor (0.00s) === RUN TestHandler_CreateProvisioner === RUN TestHandler_CreateProvisioner/fail/readProtoJSON === RUN TestHandler_CreateProvisioner/fail/validateTemplates @@ -5366,39 +5411,39 @@ --- PASS: TestHandler_CreateProvisioner/fail/auth.StoreProvisioner (0.00s) --- PASS: TestHandler_CreateProvisioner/ok (0.00s) === RUN TestHandler_DeleteProvisioner -=== RUN TestHandler_DeleteProvisioner/fail/auth.LoadProvisionerByID -=== RUN TestHandler_DeleteProvisioner/fail/auth.LoadProvisionerByName === RUN TestHandler_DeleteProvisioner/fail/auth.RemoveProvisioner === RUN TestHandler_DeleteProvisioner/ok +=== RUN TestHandler_DeleteProvisioner/fail/auth.LoadProvisionerByID +=== RUN TestHandler_DeleteProvisioner/fail/auth.LoadProvisionerByName --- PASS: TestHandler_DeleteProvisioner (0.00s) - --- PASS: TestHandler_DeleteProvisioner/fail/auth.LoadProvisionerByID (0.00s) - --- PASS: TestHandler_DeleteProvisioner/fail/auth.LoadProvisionerByName (0.00s) --- PASS: TestHandler_DeleteProvisioner/fail/auth.RemoveProvisioner (0.00s) --- PASS: TestHandler_DeleteProvisioner/ok (0.00s) + --- PASS: TestHandler_DeleteProvisioner/fail/auth.LoadProvisionerByID (0.00s) + --- PASS: TestHandler_DeleteProvisioner/fail/auth.LoadProvisionerByName (0.00s) === RUN TestHandler_UpdateProvisioner -=== RUN TestHandler_UpdateProvisioner/fail/db.GetProvisioner -=== RUN TestHandler_UpdateProvisioner/fail/change-deletedAt-error -=== RUN TestHandler_UpdateProvisioner/fail/validateTemplates -=== RUN TestHandler_UpdateProvisioner/fail/auth.UpdateProvisioner -=== RUN TestHandler_UpdateProvisioner/ok +=== RUN TestHandler_UpdateProvisioner/fail/readProtoJSON === RUN TestHandler_UpdateProvisioner/fail/auth.LoadProvisionerByName +=== RUN TestHandler_UpdateProvisioner/fail/db.GetProvisioner === RUN TestHandler_UpdateProvisioner/fail/change-id-error === RUN TestHandler_UpdateProvisioner/fail/change-type-error -=== RUN TestHandler_UpdateProvisioner/fail/change-authority-id-error === RUN TestHandler_UpdateProvisioner/fail/change-createdAt-error -=== RUN TestHandler_UpdateProvisioner/fail/readProtoJSON +=== RUN TestHandler_UpdateProvisioner/fail/auth.UpdateProvisioner +=== RUN TestHandler_UpdateProvisioner/ok +=== RUN TestHandler_UpdateProvisioner/fail/change-authority-id-error +=== RUN TestHandler_UpdateProvisioner/fail/change-deletedAt-error +=== RUN TestHandler_UpdateProvisioner/fail/validateTemplates --- PASS: TestHandler_UpdateProvisioner (0.00s) - --- PASS: TestHandler_UpdateProvisioner/fail/db.GetProvisioner (0.00s) - --- PASS: TestHandler_UpdateProvisioner/fail/change-deletedAt-error (0.00s) - --- PASS: TestHandler_UpdateProvisioner/fail/validateTemplates (0.00s) - --- PASS: TestHandler_UpdateProvisioner/fail/auth.UpdateProvisioner (0.00s) - --- PASS: TestHandler_UpdateProvisioner/ok (0.00s) + --- PASS: TestHandler_UpdateProvisioner/fail/readProtoJSON (0.00s) --- PASS: TestHandler_UpdateProvisioner/fail/auth.LoadProvisionerByName (0.00s) + --- PASS: TestHandler_UpdateProvisioner/fail/db.GetProvisioner (0.00s) --- PASS: TestHandler_UpdateProvisioner/fail/change-id-error (0.00s) --- PASS: TestHandler_UpdateProvisioner/fail/change-type-error (0.00s) - --- PASS: TestHandler_UpdateProvisioner/fail/change-authority-id-error (0.00s) --- PASS: TestHandler_UpdateProvisioner/fail/change-createdAt-error (0.00s) - --- PASS: TestHandler_UpdateProvisioner/fail/readProtoJSON (0.00s) + --- PASS: TestHandler_UpdateProvisioner/fail/auth.UpdateProvisioner (0.00s) + --- PASS: TestHandler_UpdateProvisioner/ok (0.00s) + --- PASS: TestHandler_UpdateProvisioner/fail/change-authority-id-error (0.00s) + --- PASS: TestHandler_UpdateProvisioner/fail/change-deletedAt-error (0.00s) + --- PASS: TestHandler_UpdateProvisioner/fail/validateTemplates (0.00s) === RUN Test_validateTemplates === RUN Test_validateTemplates/ok === RUN Test_validateTemplates/ok/x509 @@ -5418,59 +5463,59 @@ === RUN TestWebhookAdminResponder_CreateProvisionerWebhook === RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/unsupported-webhook-kind === RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/auth.UpdateProvisioner-error -=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/read.ProtoJSON === RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/missing-name === RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/missing-url -=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/http-url -=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/secret-in-request -=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/ok -=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/existing-webhook === RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/relative-url === RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/basic-auth-in-url +=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/ok +=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/existing-webhook +=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/read.ProtoJSON +=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/http-url +=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/secret-in-request --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook (0.00s) --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/unsupported-webhook-kind (0.00s) --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/auth.UpdateProvisioner-error (0.00s) - --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/read.ProtoJSON (0.00s) --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/missing-name (0.00s) --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/missing-url (0.00s) - --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/http-url (0.00s) - --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/secret-in-request (0.00s) - --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/ok (0.00s) - --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/existing-webhook (0.00s) --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/relative-url (0.00s) --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/basic-auth-in-url (0.00s) + --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/ok (0.00s) + --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/existing-webhook (0.00s) + --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/read.ProtoJSON (0.00s) + --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/http-url (0.00s) + --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/secret-in-request (0.00s) === RUN TestWebhookAdminResponder_DeleteProvisionerWebhook === RUN TestWebhookAdminResponder_DeleteProvisionerWebhook/fail/auth.UpdateProvisioner-error === RUN TestWebhookAdminResponder_DeleteProvisionerWebhook/ok/not-found === RUN TestWebhookAdminResponder_DeleteProvisionerWebhook/ok ---- PASS: TestWebhookAdminResponder_DeleteProvisionerWebhook (0.00s) +--- PASS: TestWebhookAdminResponder_DeleteProvisionerWebhook (0.01s) --- PASS: TestWebhookAdminResponder_DeleteProvisionerWebhook/fail/auth.UpdateProvisioner-error (0.00s) --- PASS: TestWebhookAdminResponder_DeleteProvisionerWebhook/ok/not-found (0.00s) --- PASS: TestWebhookAdminResponder_DeleteProvisionerWebhook/ok (0.00s) === RUN TestWebhookAdminResponder_UpdateProvisionerWebhook +=== RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/read.ProtoJSON === RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/missing-url === RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/relative-url -=== RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/basic-auth-in-url -=== RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/different-secret-in-request +=== RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/http-url === RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/auth.UpdateProvisioner-error === RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/ok === RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/not-found === RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/missing-name -=== RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/http-url -=== RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/read.ProtoJSON +=== RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/basic-auth-in-url +=== RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/different-secret-in-request --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook (0.00s) + --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/read.ProtoJSON (0.00s) --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/missing-url (0.00s) --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/relative-url (0.00s) - --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/basic-auth-in-url (0.00s) - --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/different-secret-in-request (0.00s) + --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/http-url (0.00s) --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/auth.UpdateProvisioner-error (0.00s) --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/ok (0.00s) --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/not-found (0.00s) --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/missing-name (0.00s) - --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/http-url (0.00s) - --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/read.ProtoJSON (0.00s) + --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/basic-auth-in-url (0.00s) + --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/different-secret-in-request (0.00s) PASS -ok github.com/smallstep/certificates/authority/admin/api 0.086s +ok github.com/smallstep/certificates/authority/admin/api 0.166s === RUN TestDB_getDBAdminBytes === RUN TestDB_getDBAdminBytes/fail/not-found === RUN TestDB_getDBAdminBytes/fail/db.Get-error @@ -5480,35 +5525,35 @@ --- PASS: TestDB_getDBAdminBytes/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBAdminBytes/ok (0.00s) === RUN TestDB_getDBAdmin +=== RUN TestDB_getDBAdmin/fail/deleted +=== RUN TestDB_getDBAdmin/ok === RUN TestDB_getDBAdmin/fail/not-found === RUN TestDB_getDBAdmin/fail/db.Get-error === RUN TestDB_getDBAdmin/fail/unmarshal-error -=== RUN TestDB_getDBAdmin/fail/deleted -=== RUN TestDB_getDBAdmin/ok --- PASS: TestDB_getDBAdmin (0.00s) + --- PASS: TestDB_getDBAdmin/fail/deleted (0.00s) + --- PASS: TestDB_getDBAdmin/ok (0.00s) --- PASS: TestDB_getDBAdmin/fail/not-found (0.00s) --- PASS: TestDB_getDBAdmin/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBAdmin/fail/unmarshal-error (0.00s) - --- PASS: TestDB_getDBAdmin/fail/deleted (0.00s) - --- PASS: TestDB_getDBAdmin/ok (0.00s) === RUN TestDB_unmarshalDBAdmin +=== RUN TestDB_unmarshalDBAdmin/fail/deleted-error === RUN TestDB_unmarshalDBAdmin/fail/authority-mismatch-error === RUN TestDB_unmarshalDBAdmin/ok === RUN TestDB_unmarshalDBAdmin/fail/unmarshal-error -=== RUN TestDB_unmarshalDBAdmin/fail/deleted-error --- PASS: TestDB_unmarshalDBAdmin (0.00s) + --- PASS: TestDB_unmarshalDBAdmin/fail/deleted-error (0.00s) --- PASS: TestDB_unmarshalDBAdmin/fail/authority-mismatch-error (0.00s) --- PASS: TestDB_unmarshalDBAdmin/ok (0.00s) --- PASS: TestDB_unmarshalDBAdmin/fail/unmarshal-error (0.00s) - --- PASS: TestDB_unmarshalDBAdmin/fail/deleted-error (0.00s) === RUN TestDB_unmarshalAdmin -=== RUN TestDB_unmarshalAdmin/ok === RUN TestDB_unmarshalAdmin/fail/unmarshal-error === RUN TestDB_unmarshalAdmin/fail/deleted-error +=== RUN TestDB_unmarshalAdmin/ok --- PASS: TestDB_unmarshalAdmin (0.00s) - --- PASS: TestDB_unmarshalAdmin/ok (0.00s) --- PASS: TestDB_unmarshalAdmin/fail/unmarshal-error (0.00s) --- PASS: TestDB_unmarshalAdmin/fail/deleted-error (0.00s) + --- PASS: TestDB_unmarshalAdmin/ok (0.00s) === RUN TestDB_GetAdmin === RUN TestDB_GetAdmin/fail/not-found === RUN TestDB_GetAdmin/fail/db.Get-error @@ -5528,21 +5573,21 @@ === RUN TestDB_DeleteAdmin/fail/db.Get-error === RUN TestDB_DeleteAdmin/fail/save-error === RUN TestDB_DeleteAdmin/ok ---- PASS: TestDB_DeleteAdmin (0.00s) +--- PASS: TestDB_DeleteAdmin (0.01s) --- PASS: TestDB_DeleteAdmin/fail/not-found (0.00s) --- PASS: TestDB_DeleteAdmin/fail/db.Get-error (0.00s) --- PASS: TestDB_DeleteAdmin/fail/save-error (0.00s) --- PASS: TestDB_DeleteAdmin/ok (0.00s) === RUN TestDB_UpdateAdmin -=== RUN TestDB_UpdateAdmin/fail/not-found -=== RUN TestDB_UpdateAdmin/fail/db.Get-error === RUN TestDB_UpdateAdmin/fail/save-error === RUN TestDB_UpdateAdmin/ok +=== RUN TestDB_UpdateAdmin/fail/not-found +=== RUN TestDB_UpdateAdmin/fail/db.Get-error --- PASS: TestDB_UpdateAdmin (0.00s) - --- PASS: TestDB_UpdateAdmin/fail/not-found (0.00s) - --- PASS: TestDB_UpdateAdmin/fail/db.Get-error (0.00s) --- PASS: TestDB_UpdateAdmin/fail/save-error (0.00s) --- PASS: TestDB_UpdateAdmin/ok (0.00s) + --- PASS: TestDB_UpdateAdmin/fail/not-found (0.00s) + --- PASS: TestDB_UpdateAdmin/fail/db.Get-error (0.00s) === RUN TestDB_CreateAdmin === RUN TestDB_CreateAdmin/fail/save-error === RUN TestDB_CreateAdmin/ok @@ -5596,15 +5641,15 @@ --- PASS: TestDB_GetAuthorityPolicy/fail/db.Get-error (0.00s) --- PASS: TestDB_GetAuthorityPolicy/ok (0.00s) === RUN TestDB_UpdateAuthorityPolicy -=== RUN TestDB_UpdateAuthorityPolicy/ok === RUN TestDB_UpdateAuthorityPolicy/fail/not-found === RUN TestDB_UpdateAuthorityPolicy/fail/db.Get-error === RUN TestDB_UpdateAuthorityPolicy/fail/save-error +=== RUN TestDB_UpdateAuthorityPolicy/ok --- PASS: TestDB_UpdateAuthorityPolicy (0.00s) - --- PASS: TestDB_UpdateAuthorityPolicy/ok (0.00s) --- PASS: TestDB_UpdateAuthorityPolicy/fail/not-found (0.00s) --- PASS: TestDB_UpdateAuthorityPolicy/fail/db.Get-error (0.00s) --- PASS: TestDB_UpdateAuthorityPolicy/fail/save-error (0.00s) + --- PASS: TestDB_UpdateAuthorityPolicy/ok (0.00s) === RUN TestDB_DeleteAuthorityPolicy === RUN TestDB_DeleteAuthorityPolicy/fail/not-found === RUN TestDB_DeleteAuthorityPolicy/fail/db.Get-error @@ -5642,13 +5687,13 @@ --- PASS: Test_dbToLinked/ssh_host (0.00s) --- PASS: Test_dbToLinked/full_policy (0.00s) === RUN TestDB_getDBProvisionerBytes -=== RUN TestDB_getDBProvisionerBytes/fail/not-found === RUN TestDB_getDBProvisionerBytes/fail/db.Get-error === RUN TestDB_getDBProvisionerBytes/ok +=== RUN TestDB_getDBProvisionerBytes/fail/not-found --- PASS: TestDB_getDBProvisionerBytes (0.00s) - --- PASS: TestDB_getDBProvisionerBytes/fail/not-found (0.00s) --- PASS: TestDB_getDBProvisionerBytes/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBProvisionerBytes/ok (0.00s) + --- PASS: TestDB_getDBProvisionerBytes/fail/not-found (0.00s) === RUN TestDB_getDBProvisioner === RUN TestDB_getDBProvisioner/fail/not-found === RUN TestDB_getDBProvisioner/fail/db.Get-error @@ -5672,27 +5717,27 @@ --- PASS: TestDB_unmarshalDBProvisioner/fail/authority-mismatch-error (0.00s) --- PASS: TestDB_unmarshalDBProvisioner/ok (0.00s) === RUN TestDB_unmarshalProvisioner -=== RUN TestDB_unmarshalProvisioner/ok === RUN TestDB_unmarshalProvisioner/fail/unmarshal-error === RUN TestDB_unmarshalProvisioner/fail/deleted-error +=== RUN TestDB_unmarshalProvisioner/ok --- PASS: TestDB_unmarshalProvisioner (0.00s) - --- PASS: TestDB_unmarshalProvisioner/ok (0.00s) --- PASS: TestDB_unmarshalProvisioner/fail/unmarshal-error (0.00s) --- PASS: TestDB_unmarshalProvisioner/fail/deleted-error (0.00s) + --- PASS: TestDB_unmarshalProvisioner/ok (0.00s) === RUN TestDB_GetProvisioner -=== RUN TestDB_GetProvisioner/fail/not-found === RUN TestDB_GetProvisioner/fail/db.Get-error === RUN TestDB_GetProvisioner/fail/unmarshal-error === RUN TestDB_GetProvisioner/fail/deleted === RUN TestDB_GetProvisioner/fail/authorityID-mismatch === RUN TestDB_GetProvisioner/ok +=== RUN TestDB_GetProvisioner/fail/not-found --- PASS: TestDB_GetProvisioner (0.00s) - --- PASS: TestDB_GetProvisioner/fail/not-found (0.00s) --- PASS: TestDB_GetProvisioner/fail/db.Get-error (0.00s) --- PASS: TestDB_GetProvisioner/fail/unmarshal-error (0.00s) --- PASS: TestDB_GetProvisioner/fail/deleted (0.00s) --- PASS: TestDB_GetProvisioner/fail/authorityID-mismatch (0.00s) --- PASS: TestDB_GetProvisioner/ok (0.00s) + --- PASS: TestDB_GetProvisioner/fail/not-found (0.00s) === RUN TestDB_DeleteProvisioner === RUN TestDB_DeleteProvisioner/fail/db.Get-error === RUN TestDB_DeleteProvisioner/fail/save-error @@ -5716,25 +5761,25 @@ --- PASS: TestDB_GetProvisioners/ok/only-invalid (0.00s) --- PASS: TestDB_GetProvisioners/ok (0.00s) === RUN TestDB_CreateProvisioner -=== RUN TestDB_CreateProvisioner/fail/save-error === RUN TestDB_CreateProvisioner/ok +=== RUN TestDB_CreateProvisioner/fail/save-error --- PASS: TestDB_CreateProvisioner (0.00s) - --- PASS: TestDB_CreateProvisioner/fail/save-error (0.00s) --- PASS: TestDB_CreateProvisioner/ok (0.00s) + --- PASS: TestDB_CreateProvisioner/fail/save-error (0.00s) === RUN TestDB_UpdateProvisioner -=== RUN TestDB_UpdateProvisioner/fail/save-error === RUN TestDB_UpdateProvisioner/ok === RUN TestDB_UpdateProvisioner/fail/not-found === RUN TestDB_UpdateProvisioner/fail/db.Get-error === RUN TestDB_UpdateProvisioner/fail/update-deleted === RUN TestDB_UpdateProvisioner/fail/update-type-error +=== RUN TestDB_UpdateProvisioner/fail/save-error --- PASS: TestDB_UpdateProvisioner (0.00s) - --- PASS: TestDB_UpdateProvisioner/fail/save-error (0.00s) --- PASS: TestDB_UpdateProvisioner/ok (0.00s) --- PASS: TestDB_UpdateProvisioner/fail/not-found (0.00s) --- PASS: TestDB_UpdateProvisioner/fail/db.Get-error (0.00s) --- PASS: TestDB_UpdateProvisioner/fail/update-deleted (0.00s) --- PASS: TestDB_UpdateProvisioner/fail/update-type-error (0.00s) + --- PASS: TestDB_UpdateProvisioner/fail/save-error (0.00s) === RUN Test_linkedcaWebhooksToDB === RUN Test_linkedcaWebhooksToDB/nil === RUN Test_linkedcaWebhooksToDB/zero @@ -5746,60 +5791,60 @@ --- PASS: Test_linkedcaWebhooksToDB/bearer (0.00s) --- PASS: Test_linkedcaWebhooksToDB/basic (0.00s) === RUN Test_dbWebhooksToLinkedca -=== RUN Test_dbWebhooksToLinkedca/zero -=== RUN Test_dbWebhooksToLinkedca/bearer === RUN Test_dbWebhooksToLinkedca/basic === RUN Test_dbWebhooksToLinkedca/nil +=== RUN Test_dbWebhooksToLinkedca/zero +=== RUN Test_dbWebhooksToLinkedca/bearer --- PASS: Test_dbWebhooksToLinkedca (0.00s) - --- PASS: Test_dbWebhooksToLinkedca/zero (0.00s) - --- PASS: Test_dbWebhooksToLinkedca/bearer (0.00s) --- PASS: Test_dbWebhooksToLinkedca/basic (0.00s) --- PASS: Test_dbWebhooksToLinkedca/nil (0.00s) + --- PASS: Test_dbWebhooksToLinkedca/zero (0.00s) + --- PASS: Test_dbWebhooksToLinkedca/bearer (0.00s) PASS -ok github.com/smallstep/certificates/authority/admin/db/nosql 0.053s +ok github.com/smallstep/certificates/authority/admin/db/nosql 0.081s ? github.com/smallstep/certificates/authority/administrator [no test files] === RUN TestConfigValidate -=== RUN TestConfigValidate/empty-address -=== RUN TestConfigValidate/empty-intermediate-key -=== RUN TestConfigValidate/empty-dnsNames -=== RUN TestConfigValidate/empty-TLS -tc.tls = &{[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256] 1.2 1.3 false} -*tc.config.TLS = &{[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256] 1.2 1.3 false} -=== RUN TestConfigValidate/tls-min>max === RUN TestConfigValidate/skip-validation tc.tls = *tc.config.TLS = +=== RUN TestConfigValidate/empty-address === RUN TestConfigValidate/invalid-address -=== RUN TestConfigValidate/empty-root === RUN TestConfigValidate/empty-intermediate-cert -=== RUN TestConfigValidate/empty-TLS-values +=== RUN TestConfigValidate/empty-intermediate-key +=== RUN TestConfigValidate/empty-dnsNames +=== RUN TestConfigValidate/empty-TLS tc.tls = &{[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256] 1.2 1.3 false} *tc.config.TLS = &{[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256] 1.2 1.3 false} === RUN TestConfigValidate/custom-tls-values tc.tls = &{[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305] 1.0 1.1 true} *tc.config.TLS = &{[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305] 1.0 1.1 true} ---- PASS: TestConfigValidate (0.00s) - --- PASS: TestConfigValidate/empty-address (0.00s) +=== RUN TestConfigValidate/empty-root +=== RUN TestConfigValidate/empty-TLS-values +tc.tls = &{[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256] 1.2 1.3 false} +*tc.config.TLS = &{[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256] 1.2 1.3 false} +=== RUN TestConfigValidate/tls-min>max +--- PASS: TestConfigValidate (0.01s) + --- PASS: TestConfigValidate/skip-validation (0.00s) + --- PASS: TestConfigValidate/empty-address (0.01s) + --- PASS: TestConfigValidate/invalid-address (0.00s) + --- PASS: TestConfigValidate/empty-intermediate-cert (0.00s) --- PASS: TestConfigValidate/empty-intermediate-key (0.00s) --- PASS: TestConfigValidate/empty-dnsNames (0.00s) --- PASS: TestConfigValidate/empty-TLS (0.00s) - --- PASS: TestConfigValidate/tls-min>max (0.00s) - --- PASS: TestConfigValidate/skip-validation (0.00s) - --- PASS: TestConfigValidate/invalid-address (0.00s) + --- PASS: TestConfigValidate/custom-tls-values (0.00s) --- PASS: TestConfigValidate/empty-root (0.00s) - --- PASS: TestConfigValidate/empty-intermediate-cert (0.00s) --- PASS: TestConfigValidate/empty-TLS-values (0.00s) - --- PASS: TestConfigValidate/custom-tls-values (0.00s) + --- PASS: TestConfigValidate/tls-min>max (0.00s) === RUN TestAuthConfigValidate -=== RUN TestAuthConfigValidate/fail-nil-authconfig === RUN TestAuthConfigValidate/ok-empty-provisioners === RUN TestAuthConfigValidate/ok-empty-asn1dn-template === RUN TestAuthConfigValidate/ok-custom-asn1dn +=== RUN TestAuthConfigValidate/fail-nil-authconfig --- PASS: TestAuthConfigValidate (0.00s) - --- PASS: TestAuthConfigValidate/fail-nil-authconfig (0.00s) --- PASS: TestAuthConfigValidate/ok-empty-provisioners (0.00s) --- PASS: TestAuthConfigValidate/ok-empty-asn1dn-template (0.00s) --- PASS: TestAuthConfigValidate/ok-custom-asn1dn (0.00s) + --- PASS: TestAuthConfigValidate/fail-nil-authconfig (0.00s) === RUN Test_toHostname === RUN Test_toHostname/localhost === RUN Test_toHostname/ca.smallstep.com @@ -5934,7 +5979,7 @@ === RUN TestCipherSuites_Value/TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 === RUN TestCipherSuites_Value/multiple === RUN TestCipherSuites_Value/fail ---- PASS: TestCipherSuites_Value (0.00s) +--- PASS: TestCipherSuites_Value (0.01s) --- PASS: TestCipherSuites_Value/TLS_RSA_WITH_RC4_128_SHA (0.00s) --- PASS: TestCipherSuites_Value/TLS_RSA_WITH_3DES_EDE_CBC_SHA (0.00s) --- PASS: TestCipherSuites_Value/TLS_RSA_WITH_AES_128_CBC_SHA (0.00s) @@ -6007,11 +6052,11 @@ --- PASS: Test_multiString_UnmarshalJSON/error (0.00s) --- PASS: Test_multiString_UnmarshalJSON/nil (0.00s) PASS -ok github.com/smallstep/certificates/authority/config 0.071s +ok github.com/smallstep/certificates/authority/config 0.140s === RUN TestNew === RUN TestNew/ok === RUN TestNew/ok_with_constraints ---- PASS: TestNew (0.01s) +--- PASS: TestNew (0.03s) --- PASS: TestNew/ok (0.00s) --- PASS: TestNew/ok_with_constraints (0.00s) === RUN TestNew_hasNameConstraints @@ -6089,7 +6134,7 @@ --- PASS: TestEngine_ValidateCertificate/ok_with_constraints (0.00s) --- PASS: TestEngine_ValidateCertificate/fail (0.00s) PASS -ok github.com/smallstep/certificates/authority/internal/constraints 0.054s +ok github.com/smallstep/certificates/authority/internal/constraints 0.107s === RUN TestX509PolicyOptions_IsWildcardLiteralAllowed === RUN TestX509PolicyOptions_IsWildcardLiteralAllowed/nil-options === RUN TestX509PolicyOptions_IsWildcardLiteralAllowed/not-set @@ -6117,20 +6162,20 @@ === RUN TestClient/tls === RUN TestClient/nil === RUN TestClient/empty ---- PASS: TestClient (0.03s) - --- PASS: TestClient/http (0.01s) +--- PASS: TestClient (0.05s) + --- PASS: TestClient/http (0.00s) --- PASS: TestClient/tls (0.02s) - --- PASS: TestClient/nil (0.00s) + --- PASS: TestClient/nil (0.01s) --- PASS: TestClient/empty (0.00s) === RUN TestClient_SetNew === RUN TestClient_SetNew/ok === RUN TestClient_SetNew/fail +2026/11/30 06:39:44 http: TLS handshake error from 127.0.0.1:50292: remote error: tls: bad certificate === RUN TestClient_SetNew/ok_again -2025/10/26 22:11:24 http: TLS handshake error from 127.0.0.1:58492: remote error: tls: bad certificate ---- PASS: TestClient_SetNew (0.03s) - --- PASS: TestClient_SetNew/ok (0.01s) +--- PASS: TestClient_SetNew (0.04s) + --- PASS: TestClient_SetNew/ok (0.02s) --- PASS: TestClient_SetNew/fail (0.01s) - --- PASS: TestClient_SetNew/ok_again (0.01s) + --- PASS: TestClient_SetNew/ok_again (0.02s) === RUN TestClient_parallel === PAUSE TestClient_parallel === CONT TestClient_parallel @@ -6164,29 +6209,27 @@ === CONT TestClient_parallel/3 === CONT TestClient_parallel/2 === CONT TestClient_parallel/1 -2025/10/26 22:11:24 http: TLS handshake error from 127.0.0.1:45762: read tcp 127.0.0.1:33773->127.0.0.1:45762: use of closed network connection -2025/10/26 22:11:24 http: TLS handshake error from 127.0.0.1:45786: write tcp 127.0.0.1:33773->127.0.0.1:45786: use of closed network connection -2025/10/26 22:11:24 http: TLS handshake error from 127.0.0.1:45798: write tcp 127.0.0.1:33773->127.0.0.1:45798: use of closed network connection -2025/10/26 22:11:24 http: TLS handshake error from 127.0.0.1:45810: write tcp 127.0.0.1:33773->127.0.0.1:45810: use of closed network connection -2025/10/26 22:11:24 http: TLS handshake error from 127.0.0.1:45816: write tcp 127.0.0.1:33773->127.0.0.1:45816: use of closed network connection ---- PASS: TestClient_parallel (0.01s) - --- PASS: TestClient_parallel/1 (0.05s) - --- PASS: TestClient_parallel/8 (0.05s) +2026/11/30 06:39:44 http: TLS handshake error from 127.0.0.1:52616: read tcp 127.0.0.1:43773->127.0.0.1:52616: use of closed network connection +2026/11/30 06:39:44 http: TLS handshake error from 127.0.0.1:52590: write tcp 127.0.0.1:43773->127.0.0.1:52590: use of closed network connection +2026/11/30 06:39:44 http: TLS handshake error from 127.0.0.1:52602: write tcp 127.0.0.1:43773->127.0.0.1:52602: use of closed network connection +--- PASS: TestClient_parallel (0.00s) --- PASS: TestClient_parallel/5 (0.05s) - --- PASS: TestClient_parallel/0 (0.05s) - --- PASS: TestClient_parallel/9 (0.05s) - --- PASS: TestClient_parallel/7 (0.05s) - --- PASS: TestClient_parallel/4 (0.05s) - --- PASS: TestClient_parallel/6 (0.05s) - --- PASS: TestClient_parallel/3 (0.05s) - --- PASS: TestClient_parallel/2 (0.05s) + --- PASS: TestClient_parallel/6 (0.07s) + --- PASS: TestClient_parallel/2 (0.07s) + --- PASS: TestClient_parallel/3 (0.07s) + --- PASS: TestClient_parallel/0 (0.07s) + --- PASS: TestClient_parallel/1 (0.07s) + --- PASS: TestClient_parallel/7 (0.10s) + --- PASS: TestClient_parallel/4 (0.10s) + --- PASS: TestClient_parallel/9 (0.10s) + --- PASS: TestClient_parallel/8 (0.10s) PASS -ok github.com/smallstep/certificates/authority/poolhttp 0.149s +ok github.com/smallstep/certificates/authority/poolhttp 0.236s === RUN TestACME_GetAttestationRoots === RUN TestACME_GetAttestationRoots/ok === RUN TestACME_GetAttestationRoots/nil === RUN TestACME_GetAttestationRoots/empty ---- PASS: TestACME_GetAttestationRoots (0.00s) +--- PASS: TestACME_GetAttestationRoots (0.01s) --- PASS: TestACME_GetAttestationRoots/ok (0.00s) --- PASS: TestACME_GetAttestationRoots/nil (0.00s) --- PASS: TestACME_GetAttestationRoots/empty (0.00s) @@ -6223,8 +6266,33 @@ === RUN TestACME_Getters --- PASS: TestACME_Getters (0.00s) === RUN TestACME_Init +=== RUN TestACME_Init/ok/wire + acme_test.go:235: +=== RUN TestACME_Init/fail/empty + acme_test.go:235: +=== RUN TestACME_Init/fail/empty-type + acme_test.go:235: +=== RUN TestACME_Init/fail/bad-challenge + acme_test.go:235: +=== RUN TestACME_Init/fail/parse-attestation-roots + acme_test.go:235: -----BEGIN CERTIFICATE----- + Zm9v + -----END CERTIFICATE----- +=== RUN TestACME_Init/fail/empty-attestation-roots + acme_test.go:235: + === RUN TestACME_Init/fail/wire-missing-options acme_test.go:235: +=== RUN TestACME_Init/fail/wire-missing-wire-options + acme_test.go:235: +=== RUN TestACME_Init/fail/wire-validate-options + acme_test.go:235: +=== RUN TestACME_Init/fail/empty-name + acme_test.go:235: +=== RUN TestACME_Init/fail/bad-claims + acme_test.go:235: +=== RUN TestACME_Init/fail/bad-attestation-format + acme_test.go:235: === RUN TestACME_Init/ok acme_test.go:235: === RUN TestACME_Init/ok/attestation @@ -6261,46 +6329,21 @@ Fqyi4+JE014cSgR57Jcu3dZiehB6UtAPgad9L5cNvua/IWRmm+ANy3O2LH++Pyl8 SREzU8onbBsjMg9QDiSf5oJLKvd/Ren+zGY7 -----END CERTIFICATE----- -=== RUN TestACME_Init/ok/wire - acme_test.go:235: -=== RUN TestACME_Init/fail/empty - acme_test.go:235: -=== RUN TestACME_Init/fail/empty-name - acme_test.go:235: -=== RUN TestACME_Init/fail/empty-type - acme_test.go:235: -=== RUN TestACME_Init/fail/bad-challenge - acme_test.go:235: -=== RUN TestACME_Init/fail/bad-attestation-format - acme_test.go:235: -=== RUN TestACME_Init/fail/parse-attestation-roots - acme_test.go:235: -----BEGIN CERTIFICATE----- - Zm9v - -----END CERTIFICATE----- -=== RUN TestACME_Init/fail/wire-missing-wire-options - acme_test.go:235: -=== RUN TestACME_Init/fail/wire-validate-options - acme_test.go:235: -=== RUN TestACME_Init/fail/bad-claims - acme_test.go:235: -=== RUN TestACME_Init/fail/empty-attestation-roots - acme_test.go:235: - ---- PASS: TestACME_Init (0.00s) - --- PASS: TestACME_Init/fail/wire-missing-options (0.00s) - --- PASS: TestACME_Init/ok (0.00s) - --- PASS: TestACME_Init/ok/attestation (0.00s) +--- PASS: TestACME_Init (0.01s) --- PASS: TestACME_Init/ok/wire (0.00s) --- PASS: TestACME_Init/fail/empty (0.00s) - --- PASS: TestACME_Init/fail/empty-name (0.00s) --- PASS: TestACME_Init/fail/empty-type (0.00s) --- PASS: TestACME_Init/fail/bad-challenge (0.00s) - --- PASS: TestACME_Init/fail/bad-attestation-format (0.00s) --- PASS: TestACME_Init/fail/parse-attestation-roots (0.00s) + --- PASS: TestACME_Init/fail/empty-attestation-roots (0.00s) + --- PASS: TestACME_Init/fail/wire-missing-options (0.00s) --- PASS: TestACME_Init/fail/wire-missing-wire-options (0.00s) --- PASS: TestACME_Init/fail/wire-validate-options (0.00s) + --- PASS: TestACME_Init/fail/empty-name (0.00s) --- PASS: TestACME_Init/fail/bad-claims (0.00s) - --- PASS: TestACME_Init/fail/empty-attestation-roots (0.00s) + --- PASS: TestACME_Init/fail/bad-attestation-format (0.00s) + --- PASS: TestACME_Init/ok (0.00s) + --- PASS: TestACME_Init/ok/attestation (0.00s) === RUN TestACME_AuthorizeRenew === RUN TestACME_AuthorizeRenew/fail/renew-disabled === RUN TestACME_AuthorizeRenew/ok @@ -6385,14 +6428,14 @@ === RUN TestAWS_GetIdentityToken/fail_read_identityURL === RUN TestAWS_GetIdentityToken/fail_read_signatureURL === RUN TestAWS_GetIdentityToken/fail_unmarshal_identityURL ---- PASS: TestAWS_GetIdentityToken (0.01s) +--- PASS: TestAWS_GetIdentityToken (0.03s) --- PASS: TestAWS_GetIdentityToken/ok (0.00s) --- PASS: TestAWS_GetIdentityToken/ok_no_imds (0.00s) --- PASS: TestAWS_GetIdentityToken/fail_ca_url (0.00s) --- PASS: TestAWS_GetIdentityToken/fail_identityURL (0.00s) - --- PASS: TestAWS_GetIdentityToken/fail_signatureURL (0.00s) + --- PASS: TestAWS_GetIdentityToken/fail_signatureURL (0.01s) --- PASS: TestAWS_GetIdentityToken/fail_signature (0.00s) - --- PASS: TestAWS_GetIdentityToken/fail_read_identityURL (0.00s) + --- PASS: TestAWS_GetIdentityToken/fail_read_identityURL (0.01s) --- PASS: TestAWS_GetIdentityToken/fail_read_signatureURL (0.00s) --- PASS: TestAWS_GetIdentityToken/fail_unmarshal_identityURL (0.00s) === RUN TestAWS_GetIdentityToken_V1Only @@ -6428,35 +6471,35 @@ --- PASS: TestAWS_Init/fail/cert (0.00s) --- PASS: TestAWS_Init/fail_claims (0.00s) === RUN TestAWS_authorizeToken -=== RUN TestAWS_authorizeToken/fail/empty-instance-id -=== RUN TestAWS_authorizeToken/fail/empty-region -=== RUN TestAWS_authorizeToken/fail/invalid-token-issuer === RUN TestAWS_authorizeToken/fail/invalid-subject-disabled-custom-SANs === RUN TestAWS_authorizeToken/ok -=== RUN TestAWS_authorizeToken/fail/bad-token +=== RUN TestAWS_authorizeToken/ok/identityCert2 === RUN TestAWS_authorizeToken/fail/cannot-validate-sig +=== RUN TestAWS_authorizeToken/fail/empty-instance-id === RUN TestAWS_authorizeToken/fail/empty-private-ip === RUN TestAWS_authorizeToken/fail/invalid-audience === RUN TestAWS_authorizeToken/fail/invalid-account-id === RUN TestAWS_authorizeToken/fail/instance-age === RUN TestAWS_authorizeToken/ok/identityCert -=== RUN TestAWS_authorizeToken/ok/identityCert2 +=== RUN TestAWS_authorizeToken/fail/bad-token === RUN TestAWS_authorizeToken/fail/empty-account-id ---- PASS: TestAWS_authorizeToken (0.38s) - --- PASS: TestAWS_authorizeToken/fail/empty-instance-id (0.00s) - --- PASS: TestAWS_authorizeToken/fail/empty-region (0.00s) - --- PASS: TestAWS_authorizeToken/fail/invalid-token-issuer (0.00s) +=== RUN TestAWS_authorizeToken/fail/empty-region +=== RUN TestAWS_authorizeToken/fail/invalid-token-issuer +--- PASS: TestAWS_authorizeToken (0.12s) --- PASS: TestAWS_authorizeToken/fail/invalid-subject-disabled-custom-SANs (0.00s) --- PASS: TestAWS_authorizeToken/ok (0.00s) - --- PASS: TestAWS_authorizeToken/fail/bad-token (0.00s) - --- PASS: TestAWS_authorizeToken/fail/cannot-validate-sig (0.00s) + --- PASS: TestAWS_authorizeToken/ok/identityCert2 (0.00s) + --- PASS: TestAWS_authorizeToken/fail/cannot-validate-sig (0.01s) + --- PASS: TestAWS_authorizeToken/fail/empty-instance-id (0.00s) --- PASS: TestAWS_authorizeToken/fail/empty-private-ip (0.00s) - --- PASS: TestAWS_authorizeToken/fail/invalid-audience (0.00s) + --- PASS: TestAWS_authorizeToken/fail/invalid-audience (0.01s) --- PASS: TestAWS_authorizeToken/fail/invalid-account-id (0.00s) --- PASS: TestAWS_authorizeToken/fail/instance-age (0.00s) --- PASS: TestAWS_authorizeToken/ok/identityCert (0.00s) - --- PASS: TestAWS_authorizeToken/ok/identityCert2 (0.00s) + --- PASS: TestAWS_authorizeToken/fail/bad-token (0.00s) --- PASS: TestAWS_authorizeToken/fail/empty-account-id (0.00s) + --- PASS: TestAWS_authorizeToken/fail/empty-region (0.00s) + --- PASS: TestAWS_authorizeToken/fail/invalid-token-issuer (0.00s) === RUN TestAWS_AuthorizeSign === RUN TestAWS_AuthorizeSign/ok === RUN TestAWS_AuthorizeSign/ok#01 @@ -6476,7 +6519,7 @@ === RUN TestAWS_AuthorizeSign/fail_nbf === RUN TestAWS_AuthorizeSign/fail_key === RUN TestAWS_AuthorizeSign/fail_instance_age ---- PASS: TestAWS_AuthorizeSign (0.08s) +--- PASS: TestAWS_AuthorizeSign (0.64s) --- PASS: TestAWS_AuthorizeSign/ok (0.00s) --- PASS: TestAWS_AuthorizeSign/ok#01 (0.00s) --- PASS: TestAWS_AuthorizeSign/ok#02 (0.00s) @@ -6510,7 +6553,7 @@ === RUN TestAWS_AuthorizeSSHSign/fail-extra-principal === RUN TestAWS_AuthorizeSSHSign/fail-sshCA-disabled === RUN TestAWS_AuthorizeSSHSign/fail-invalid-token ---- PASS: TestAWS_AuthorizeSSHSign (0.57s) +--- PASS: TestAWS_AuthorizeSSHSign (1.64s) --- PASS: TestAWS_AuthorizeSSHSign/ok (0.00s) --- PASS: TestAWS_AuthorizeSSHSign/ok-rsa2048 (0.00s) --- PASS: TestAWS_AuthorizeSSHSign/ok-type (0.00s) @@ -6540,7 +6583,7 @@ === RUN TestAzure_GetTokenID/ok_no_TOFU === RUN TestAzure_GetTokenID/fail_token === RUN TestAzure_GetTokenID/fail_claims ---- PASS: TestAzure_GetTokenID (0.00s) +--- PASS: TestAzure_GetTokenID (0.01s) --- PASS: TestAzure_GetTokenID/ok (0.00s) --- PASS: TestAzure_GetTokenID/ok_no_TOFU (0.00s) --- PASS: TestAzure_GetTokenID/fail_token (0.00s) @@ -6555,8 +6598,8 @@ === RUN TestAzure_GetIdentityToken/fail_unmarshal === RUN TestAzure_GetIdentityToken/fail_url === RUN TestAzure_GetIdentityToken/fail_connect ---- PASS: TestAzure_GetIdentityToken (0.00s) - --- PASS: TestAzure_GetIdentityToken/ok (0.00s) +--- PASS: TestAzure_GetIdentityToken (0.01s) + --- PASS: TestAzure_GetIdentityToken/ok (0.01s) --- PASS: TestAzure_GetIdentityToken/ok_azure_china (0.00s) --- PASS: TestAzure_GetIdentityToken/ok_azure_germany (0.00s) --- PASS: TestAzure_GetIdentityToken/ok_azure_us_gov (0.00s) @@ -6575,13 +6618,13 @@ === RUN TestAzure_Init/fail_discovery_URL === RUN TestAzure_Init/fail_JWK_URL === RUN TestAzure_Init/fail_config_Validate ---- PASS: TestAzure_Init (0.00s) +--- PASS: TestAzure_Init (0.01s) --- PASS: TestAzure_Init/ok (0.00s) --- PASS: TestAzure_Init/ok_with_config (0.00s) --- PASS: TestAzure_Init/fail_type (0.00s) --- PASS: TestAzure_Init/fail_name (0.00s) --- PASS: TestAzure_Init/fail_tenant_id (0.00s) - --- PASS: TestAzure_Init/fail_claims (0.00s) + --- PASS: TestAzure_Init/fail_claims (0.01s) --- PASS: TestAzure_Init/fail_discovery_URL (0.00s) --- PASS: TestAzure_Init/fail_JWK_URL (0.00s) --- PASS: TestAzure_Init/fail_config_Validate (0.00s) @@ -6615,7 +6658,7 @@ === RUN TestAzure_AuthorizeSign/fail_exp === RUN TestAzure_AuthorizeSign/fail_nbf === RUN TestAzure_AuthorizeSign/fail_key ---- PASS: TestAzure_AuthorizeSign (0.01s) +--- PASS: TestAzure_AuthorizeSign (0.02s) --- PASS: TestAzure_AuthorizeSign/ok (0.00s) --- PASS: TestAzure_AuthorizeSign/ok#01 (0.00s) --- PASS: TestAzure_AuthorizeSign/ok#02 (0.00s) @@ -6630,7 +6673,7 @@ --- PASS: TestAzure_AuthorizeSign/fail_audience (0.00s) --- PASS: TestAzure_AuthorizeSign/fail_exp (0.00s) --- PASS: TestAzure_AuthorizeSign/fail_nbf (0.00s) - --- PASS: TestAzure_AuthorizeSign/fail_key (0.00s) + --- PASS: TestAzure_AuthorizeSign/fail_key (0.01s) === RUN TestAzure_AuthorizeRenew === RUN TestAzure_AuthorizeRenew/ok === RUN TestAzure_AuthorizeRenew/fail/renew-disabled @@ -6650,10 +6693,10 @@ === RUN TestAzure_AuthorizeSSHSign/fail-extra-principal === RUN TestAzure_AuthorizeSSHSign/fail-sshCA-disabled === RUN TestAzure_AuthorizeSSHSign/fail-invalid-token ---- PASS: TestAzure_AuthorizeSSHSign (0.45s) +--- PASS: TestAzure_AuthorizeSSHSign (0.15s) --- PASS: TestAzure_AuthorizeSSHSign/ok (0.00s) --- PASS: TestAzure_AuthorizeSSHSign/ok-rsa2048 (0.00s) - --- PASS: TestAzure_AuthorizeSSHSign/ok-type (0.00s) + --- PASS: TestAzure_AuthorizeSSHSign/ok-type (0.01s) --- PASS: TestAzure_AuthorizeSSHSign/ok-principals (0.00s) --- PASS: TestAzure_AuthorizeSSHSign/ok-options (0.00s) --- PASS: TestAzure_AuthorizeSSHSign/ok-custom (0.00s) @@ -6676,7 +6719,7 @@ === RUN TestClaimer_DefaultSSHCertDuration/host_global#01 === RUN TestClaimer_DefaultSSHCertDuration/invalid === RUN TestClaimer_DefaultSSHCertDuration/invalid_global ---- PASS: TestClaimer_DefaultSSHCertDuration (0.00s) +--- PASS: TestClaimer_DefaultSSHCertDuration (0.01s) --- PASS: TestClaimer_DefaultSSHCertDuration/user (0.00s) --- PASS: TestClaimer_DefaultSSHCertDuration/user_global (0.00s) --- PASS: TestClaimer_DefaultSSHCertDuration/host_global (0.00s) @@ -6687,7 +6730,7 @@ === RUN TestCollection_Load/ok === RUN TestCollection_Load/fail === RUN TestCollection_Load/invalid ---- PASS: TestCollection_Load (0.13s) +--- PASS: TestCollection_Load (0.18s) --- PASS: TestCollection_Load/ok (0.00s) --- PASS: TestCollection_Load/fail (0.00s) --- PASS: TestCollection_Load/invalid (0.00s) @@ -6699,7 +6742,7 @@ === RUN TestCollection_LoadByToken/bad === RUN TestCollection_LoadByToken/fail === RUN TestCollection_LoadByToken/fail-no-k8sSa-provisioner ---- PASS: TestCollection_LoadByToken (0.51s) +--- PASS: TestCollection_LoadByToken (0.62s) --- PASS: TestCollection_LoadByToken/ok1 (0.00s) --- PASS: TestCollection_LoadByToken/ok2 (0.00s) --- PASS: TestCollection_LoadByToken/ok3 (0.00s) @@ -6714,7 +6757,7 @@ === RUN TestCollection_LoadByCertificate/noExtension === RUN TestCollection_LoadByCertificate/notFound === RUN TestCollection_LoadByCertificate/badCert ---- PASS: TestCollection_LoadByCertificate (0.13s) +--- PASS: TestCollection_LoadByCertificate (0.14s) --- PASS: TestCollection_LoadByCertificate/ok1 (0.00s) --- PASS: TestCollection_LoadByCertificate/ok2 (0.00s) --- PASS: TestCollection_LoadByCertificate/ok3 (0.00s) @@ -6725,7 +6768,7 @@ === RUN TestCollection_LoadEncryptedKey/ok === RUN TestCollection_LoadEncryptedKey/oidc === RUN TestCollection_LoadEncryptedKey/notFound ---- PASS: TestCollection_LoadEncryptedKey (0.13s) +--- PASS: TestCollection_LoadEncryptedKey (0.14s) --- PASS: TestCollection_LoadEncryptedKey/ok (0.00s) --- PASS: TestCollection_LoadEncryptedKey/oidc (0.00s) --- PASS: TestCollection_LoadEncryptedKey/notFound (0.00s) @@ -6734,7 +6777,7 @@ === RUN TestCollection_Store/ok2 === RUN TestCollection_Store/fail1 === RUN TestCollection_Store/fail2 ---- PASS: TestCollection_Store (0.13s) +--- PASS: TestCollection_Store (0.15s) --- PASS: TestCollection_Store/ok1 (0.00s) --- PASS: TestCollection_Store/ok2 (0.00s) --- PASS: TestCollection_Store/fail1 (0.00s) @@ -6748,7 +6791,7 @@ === RUN TestCollection_Find/1_to_5 === RUN TestCollection_Find/defaultLimit === RUN TestCollection_Find/overTheLimit ---- PASS: TestCollection_Find (1.28s) +--- PASS: TestCollection_Find (2.22s) --- PASS: TestCollection_Find/all (0.00s) --- PASS: TestCollection_Find/0_to_19 (0.00s) --- PASS: TestCollection_Find/0_to_9 (0.00s) @@ -6882,7 +6925,7 @@ === RUN TestNewDuration/fail_empty === RUN TestNewDuration/fail_number === RUN TestNewDuration/fail_string ---- PASS: TestNewDuration (0.00s) +--- PASS: TestNewDuration (0.01s) --- PASS: TestNewDuration/ok (0.00s) --- PASS: TestNewDuration/fail_empty (0.00s) --- PASS: TestNewDuration/fail_number (0.00s) @@ -6958,9 +7001,9 @@ gcp_test.go:150: error on identity request: status=400, response=Bad Request === RUN TestGCP_GetIdentityToken/fail_url - gcp_test.go:150: error creating identity request: parse "://ca.smallstep.com?audience=https%3A%2F%2Fca%2F1.0%2Fsign%23gcp%2FW3R5KrNNyu&format=full&licenses=FALSE": missing protocol scheme + gcp_test.go:150: error creating identity request: parse "://ca.smallstep.com?audience=https%3A%2F%2Fca%2F1.0%2Fsign%23gcp%2F7htd2QFdJ0&format=full&licenses=FALSE": missing protocol scheme === RUN TestGCP_GetIdentityToken/fail_connect - gcp_test.go:150: error doing identity request, are you in a GCP VM?: Get "foobarzar?audience=https%3A%2F%2Fca%2F1.0%2Fsign%23gcp%2FW3R5KrNNyu&format=full&licenses=FALSE": unsupported protocol scheme "" + gcp_test.go:150: error doing identity request, are you in a GCP VM?: Get "foobarzar?audience=https%3A%2F%2Fca%2F1.0%2Fsign%23gcp%2F7htd2QFdJ0&format=full&licenses=FALSE": unsupported protocol scheme "" --- PASS: TestGCP_GetIdentityToken (0.00s) --- PASS: TestGCP_GetIdentityToken/ok (0.00s) --- PASS: TestGCP_GetIdentityToken/fail_ca_url (0.00s) @@ -6977,7 +7020,7 @@ === RUN TestGCP_Init/bad_duration === RUN TestGCP_Init/bad_claims === RUN TestGCP_Init/bad_certs ---- PASS: TestGCP_Init (0.01s) +--- PASS: TestGCP_Init (0.00s) --- PASS: TestGCP_Init/ok (0.00s) --- PASS: TestGCP_Init/ok#01 (0.00s) --- PASS: TestGCP_Init/ok#02 (0.00s) @@ -6988,29 +7031,29 @@ --- PASS: TestGCP_Init/bad_claims (0.00s) --- PASS: TestGCP_Init/bad_certs (0.00s) === RUN TestGCP_authorizeToken -=== RUN TestGCP_authorizeToken/fail/invalid-projectID +=== RUN TestGCP_authorizeToken/fail/invalid-serviceAccount === RUN TestGCP_authorizeToken/fail/instance-age -=== RUN TestGCP_authorizeToken/fail/empty-project-id === RUN TestGCP_authorizeToken/fail/empty-instance-id -=== RUN TestGCP_authorizeToken/fail/empty-instance-name -=== RUN TestGCP_authorizeToken/fail/empty-zone === RUN TestGCP_authorizeToken/ok === RUN TestGCP_authorizeToken/fail/bad-token === RUN TestGCP_authorizeToken/fail/cannot-validate-sig === RUN TestGCP_authorizeToken/fail/invalid-issuer -=== RUN TestGCP_authorizeToken/fail/invalid-serviceAccount +=== RUN TestGCP_authorizeToken/fail/invalid-projectID +=== RUN TestGCP_authorizeToken/fail/empty-instance-name +=== RUN TestGCP_authorizeToken/fail/empty-project-id +=== RUN TestGCP_authorizeToken/fail/empty-zone --- PASS: TestGCP_authorizeToken (0.01s) - --- PASS: TestGCP_authorizeToken/fail/invalid-projectID (0.00s) + --- PASS: TestGCP_authorizeToken/fail/invalid-serviceAccount (0.00s) --- PASS: TestGCP_authorizeToken/fail/instance-age (0.00s) - --- PASS: TestGCP_authorizeToken/fail/empty-project-id (0.00s) --- PASS: TestGCP_authorizeToken/fail/empty-instance-id (0.00s) - --- PASS: TestGCP_authorizeToken/fail/empty-instance-name (0.00s) - --- PASS: TestGCP_authorizeToken/fail/empty-zone (0.00s) --- PASS: TestGCP_authorizeToken/ok (0.00s) --- PASS: TestGCP_authorizeToken/fail/bad-token (0.00s) --- PASS: TestGCP_authorizeToken/fail/cannot-validate-sig (0.00s) --- PASS: TestGCP_authorizeToken/fail/invalid-issuer (0.00s) - --- PASS: TestGCP_authorizeToken/fail/invalid-serviceAccount (0.00s) + --- PASS: TestGCP_authorizeToken/fail/invalid-projectID (0.00s) + --- PASS: TestGCP_authorizeToken/fail/empty-instance-name (0.00s) + --- PASS: TestGCP_authorizeToken/fail/empty-project-id (0.00s) + --- PASS: TestGCP_authorizeToken/fail/empty-zone (0.00s) === RUN TestGCP_AuthorizeSign === RUN TestGCP_AuthorizeSign/ok === RUN TestGCP_AuthorizeSign/ok#01 @@ -7028,7 +7071,7 @@ === RUN TestGCP_AuthorizeSign/fail_instance_name === RUN TestGCP_AuthorizeSign/fail_project_id === RUN TestGCP_AuthorizeSign/fail_zone ---- PASS: TestGCP_AuthorizeSign (0.01s) +--- PASS: TestGCP_AuthorizeSign (0.02s) --- PASS: TestGCP_AuthorizeSign/ok (0.00s) --- PASS: TestGCP_AuthorizeSign/ok#01 (0.00s) --- PASS: TestGCP_AuthorizeSign/ok#02 (0.00s) @@ -7062,15 +7105,15 @@ === RUN TestGCP_AuthorizeSSHSign/fail-type-host === RUN TestGCP_AuthorizeSSHSign/fail-type-user === RUN TestGCP_AuthorizeSSHSign/fail-invalid-token ---- PASS: TestGCP_AuthorizeSSHSign (0.37s) +--- PASS: TestGCP_AuthorizeSSHSign (1.90s) --- PASS: TestGCP_AuthorizeSSHSign/ok (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/ok-rsa2048 (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/ok-type-host (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/ok-type-user (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/ok-principals (0.00s) - --- PASS: TestGCP_AuthorizeSSHSign/ok-principal1 (0.01s) + --- PASS: TestGCP_AuthorizeSSHSign/ok-principal1 (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/ok-principal2 (0.00s) - --- PASS: TestGCP_AuthorizeSSHSign/ok-options (0.00s) + --- PASS: TestGCP_AuthorizeSSHSign/ok-options (0.01s) --- PASS: TestGCP_AuthorizeSSHSign/ok-custom (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/fail-rsa1024 (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/fail-principal (0.00s) @@ -7086,21 +7129,21 @@ --- PASS: TestGCP_AuthorizeRenew/ok (0.00s) --- PASS: TestGCP_AuthorizeRenew/fail/renewal-disabled (0.00s) === RUN TestJWK_Getters ---- PASS: TestJWK_Getters (0.13s) +--- PASS: TestJWK_Getters (0.23s) === RUN TestJWK_Init +=== RUN TestJWK_Init/fail-empty +=== RUN TestJWK_Init/fail-empty-name === RUN TestJWK_Init/fail-empty-type === RUN TestJWK_Init/fail-empty-key === RUN TestJWK_Init/fail-bad-claims === RUN TestJWK_Init/ok -=== RUN TestJWK_Init/fail-empty -=== RUN TestJWK_Init/fail-empty-name --- PASS: TestJWK_Init (0.00s) + --- PASS: TestJWK_Init/fail-empty (0.00s) + --- PASS: TestJWK_Init/fail-empty-name (0.00s) --- PASS: TestJWK_Init/fail-empty-type (0.00s) --- PASS: TestJWK_Init/fail-empty-key (0.00s) --- PASS: TestJWK_Init/fail-bad-claims (0.00s) --- PASS: TestJWK_Init/ok (0.00s) - --- PASS: TestJWK_Init/fail-empty (0.00s) - --- PASS: TestJWK_Init/fail-empty-name (0.00s) === RUN TestJWK_authorizeToken === RUN TestJWK_authorizeToken/fail-token === RUN TestJWK_authorizeToken/fail-key @@ -7114,12 +7157,12 @@ === RUN TestJWK_authorizeToken/ok === RUN TestJWK_authorizeToken/ok-no-encrypted-key === RUN TestJWK_authorizeToken/ok-no-sans ---- PASS: TestJWK_authorizeToken (0.58s) +--- PASS: TestJWK_authorizeToken (1.28s) --- PASS: TestJWK_authorizeToken/fail-token (0.00s) --- PASS: TestJWK_authorizeToken/fail-key (0.00s) --- PASS: TestJWK_authorizeToken/fail-claims (0.00s) --- PASS: TestJWK_authorizeToken/fail-signature (0.00s) - --- PASS: TestJWK_authorizeToken/fail-issuer (0.01s) + --- PASS: TestJWK_authorizeToken/fail-issuer (0.00s) --- PASS: TestJWK_authorizeToken/fail-expired (0.00s) --- PASS: TestJWK_authorizeToken/fail-not-before (0.00s) --- PASS: TestJWK_authorizeToken/fail-audience (0.00s) @@ -7130,7 +7173,7 @@ === RUN TestJWK_AuthorizeRevoke === RUN TestJWK_AuthorizeRevoke/fail-signature === RUN TestJWK_AuthorizeRevoke/ok ---- PASS: TestJWK_AuthorizeRevoke (0.28s) +--- PASS: TestJWK_AuthorizeRevoke (0.35s) --- PASS: TestJWK_AuthorizeRevoke/fail-signature (0.00s) --- PASS: TestJWK_AuthorizeRevoke/ok (0.00s) === RUN TestJWK_AuthorizeSign @@ -7138,7 +7181,7 @@ === RUN TestJWK_AuthorizeSign/ok-sans === RUN TestJWK_AuthorizeSign/ok-no-sans === RUN TestJWK_AuthorizeSign/ok-cnf ---- PASS: TestJWK_AuthorizeSign (0.32s) +--- PASS: TestJWK_AuthorizeSign (0.29s) --- PASS: TestJWK_AuthorizeSign/fail-signature (0.00s) --- PASS: TestJWK_AuthorizeSign/ok-sans (0.00s) --- PASS: TestJWK_AuthorizeSign/ok-no-sans (0.00s) @@ -7146,7 +7189,7 @@ === RUN TestJWK_AuthorizeRenew === RUN TestJWK_AuthorizeRenew/ok === RUN TestJWK_AuthorizeRenew/fail/renew-disabled ---- PASS: TestJWK_AuthorizeRenew (0.27s) +--- PASS: TestJWK_AuthorizeRenew (0.48s) --- PASS: TestJWK_AuthorizeRenew/ok (0.00s) --- PASS: TestJWK_AuthorizeRenew/fail/renew-disabled (0.00s) === RUN TestJWK_AuthorizeSSHSign @@ -7164,7 +7207,7 @@ === RUN TestJWK_AuthorizeSSHSign/fail-sshCA-disabled === RUN TestJWK_AuthorizeSSHSign/fail-signature === RUN TestJWK_AuthorizeSSHSign/fail-rsa1024 ---- PASS: TestJWK_AuthorizeSSHSign (0.67s) +--- PASS: TestJWK_AuthorizeSSHSign (1.84s) --- PASS: TestJWK_AuthorizeSSHSign/user (0.00s) --- PASS: TestJWK_AuthorizeSSHSign/user-rsa2048 (0.00s) --- PASS: TestJWK_AuthorizeSSHSign/user-type (0.00s) @@ -7195,12 +7238,12 @@ === RUN TestJWK_AuthorizeSign_SSHOptions/fail-audience === RUN TestJWK_AuthorizeSign_SSHOptions/fail-expired === RUN TestJWK_AuthorizeSign_SSHOptions/fail-notBefore ---- PASS: TestJWK_AuthorizeSign_SSHOptions (0.27s) +--- PASS: TestJWK_AuthorizeSign_SSHOptions (0.56s) --- PASS: TestJWK_AuthorizeSign_SSHOptions/ok-user (0.00s) --- PASS: TestJWK_AuthorizeSign_SSHOptions/ok-host (0.00s) --- PASS: TestJWK_AuthorizeSign_SSHOptions/ok-user-validAfter (0.00s) --- PASS: TestJWK_AuthorizeSign_SSHOptions/ok-user-validBefore (0.00s) - --- PASS: TestJWK_AuthorizeSign_SSHOptions/ok-user-validAfter-validBefore (0.00s) + --- PASS: TestJWK_AuthorizeSign_SSHOptions/ok-user-validAfter-validBefore (0.01s) --- PASS: TestJWK_AuthorizeSign_SSHOptions/ok-user-match (0.00s) --- PASS: TestJWK_AuthorizeSign_SSHOptions/fail-certType (0.00s) --- PASS: TestJWK_AuthorizeSign_SSHOptions/fail-principals (0.00s) @@ -7214,9 +7257,9 @@ === RUN TestJWK_AuthorizeSSHRevoke === RUN TestJWK_AuthorizeSSHRevoke/fail/invalid-token === RUN TestJWK_AuthorizeSSHRevoke/ok ---- PASS: TestJWK_AuthorizeSSHRevoke (0.38s) - --- PASS: TestJWK_AuthorizeSSHRevoke/fail/invalid-token (0.13s) - --- PASS: TestJWK_AuthorizeSSHRevoke/ok (0.25s) +--- PASS: TestJWK_AuthorizeSSHRevoke (0.69s) + --- PASS: TestJWK_AuthorizeSSHRevoke/fail/invalid-token (0.31s) + --- PASS: TestJWK_AuthorizeSSHRevoke/ok (0.37s) === RUN TestK8sSA_Getters --- PASS: TestK8sSA_Getters (0.00s) === RUN TestK8sSA_authorizeToken @@ -7225,18 +7268,18 @@ === RUN TestK8sSA_authorizeToken/fail/error-validating-token === RUN TestK8sSA_authorizeToken/fail/invalid-issuer === RUN TestK8sSA_authorizeToken/ok ---- PASS: TestK8sSA_authorizeToken (0.00s) +--- PASS: TestK8sSA_authorizeToken (0.01s) --- PASS: TestK8sSA_authorizeToken/fail/bad-token (0.00s) --- PASS: TestK8sSA_authorizeToken/fail/not-implemented (0.00s) --- PASS: TestK8sSA_authorizeToken/fail/error-validating-token (0.00s) --- PASS: TestK8sSA_authorizeToken/fail/invalid-issuer (0.00s) --- PASS: TestK8sSA_authorizeToken/ok (0.00s) === RUN TestK8sSA_AuthorizeRevoke -=== RUN TestK8sSA_AuthorizeRevoke/fail/invalid-token === RUN TestK8sSA_AuthorizeRevoke/ok +=== RUN TestK8sSA_AuthorizeRevoke/fail/invalid-token --- PASS: TestK8sSA_AuthorizeRevoke (0.00s) - --- PASS: TestK8sSA_AuthorizeRevoke/fail/invalid-token (0.00s) --- PASS: TestK8sSA_AuthorizeRevoke/ok (0.00s) + --- PASS: TestK8sSA_AuthorizeRevoke/fail/invalid-token (0.00s) === RUN TestK8sSA_AuthorizeRenew === RUN TestK8sSA_AuthorizeRenew/fail/renew-disabled === RUN TestK8sSA_AuthorizeRenew/ok @@ -7261,8 +7304,8 @@ === RUN Test_newKeyStore/ok === RUN Test_newKeyStore/fail === RUN Test_newKeyStore/fail_client -2025/10/26 22:11:33 http: TLS handshake error from 127.0.0.1:34198: remote error: tls: bad certificate ---- PASS: Test_newKeyStore (0.01s) +2026/11/30 06:40:02 http: TLS handshake error from 127.0.0.1:39620: read tcp 127.0.0.1:46061->127.0.0.1:39620: use of closed network connection +--- PASS: Test_newKeyStore (0.02s) --- PASS: Test_newKeyStore/ok (0.00s) --- PASS: Test_newKeyStore/fail (0.00s) --- PASS: Test_newKeyStore/fail_client (0.01s) @@ -7286,7 +7329,7 @@ === RUN Test_abs/ok_minInt64_+_1 === RUN Test_abs/overflow_on_minInt64 === RUN Test_abs/overflow_on_minInt64#01 ---- PASS: Test_abs (0.02s) +--- PASS: Test_abs (0.00s) --- PASS: Test_abs/ok (0.00s) --- PASS: Test_abs/ok#01 (0.00s) --- PASS: Test_abs/ok#02 (0.00s) @@ -7326,7 +7369,7 @@ === RUN TestOIDC_Init/bad-get-url === RUN TestOIDC_Init/bad-listen-address === RUN TestOIDC_Init/bad-http-client -2025/10/26 22:11:38 http: TLS handshake error from 127.0.0.1:42222: read tcp 127.0.0.1:40135->127.0.0.1:42222: use of closed network connection +2026/11/30 06:40:07 http: TLS handshake error from 127.0.0.1:57268: read tcp 127.0.0.1:36571->127.0.0.1:57268: use of closed network connection --- PASS: TestOIDC_Init (0.03s) --- PASS: TestOIDC_Init/ok (0.00s) --- PASS: TestOIDC_Init/ok_tls (0.01s) @@ -7371,7 +7414,7 @@ --- PASS: TestOIDC_authorizeToken/fail-token (0.00s) --- PASS: TestOIDC_authorizeToken/fail-claims (0.00s) --- PASS: TestOIDC_authorizeToken/fail-issuer (0.00s) - --- PASS: TestOIDC_authorizeToken/fail-audience (0.00s) + --- PASS: TestOIDC_authorizeToken/fail-audience (0.01s) --- PASS: TestOIDC_authorizeToken/fail-signature (0.00s) --- PASS: TestOIDC_authorizeToken/fail-expired (0.00s) --- PASS: TestOIDC_authorizeToken/fail-not-before (0.00s) @@ -7380,7 +7423,7 @@ === RUN TestOIDC_AuthorizeSign/admin === RUN TestOIDC_AuthorizeSign/no-email === RUN TestOIDC_AuthorizeSign/bad-token ---- PASS: TestOIDC_AuthorizeSign (0.00s) +--- PASS: TestOIDC_AuthorizeSign (0.01s) --- PASS: TestOIDC_AuthorizeSign/ok1 (0.00s) --- PASS: TestOIDC_AuthorizeSign/admin (0.00s) --- PASS: TestOIDC_AuthorizeSign/no-email (0.00s) @@ -7419,9 +7462,9 @@ === RUN TestOIDC_AuthorizeSSHSign/fail-admin-type === RUN TestOIDC_AuthorizeSSHSign/fail-admin-key-id === RUN TestOIDC_AuthorizeSSHSign/fail-admin-principals ---- PASS: TestOIDC_AuthorizeSSHSign (0.55s) +--- PASS: TestOIDC_AuthorizeSSHSign (1.96s) --- PASS: TestOIDC_AuthorizeSSHSign/ok (0.00s) - --- PASS: TestOIDC_AuthorizeSSHSign/ok-rsa2048 (0.00s) + --- PASS: TestOIDC_AuthorizeSSHSign/ok-rsa2048 (0.01s) --- PASS: TestOIDC_AuthorizeSSHSign/ok-user (0.00s) --- PASS: TestOIDC_AuthorizeSSHSign/ok-empty-email (0.00s) --- PASS: TestOIDC_AuthorizeSSHSign/ok-principals (0.00s) @@ -7430,7 +7473,7 @@ --- PASS: TestOIDC_AuthorizeSSHSign/ok-emptyPrincipals-getIdentity (0.00s) --- PASS: TestOIDC_AuthorizeSSHSign/ok-options (0.00s) --- PASS: TestOIDC_AuthorizeSSHSign/ok-admin-user (0.00s) - --- PASS: TestOIDC_AuthorizeSSHSign/ok-admin-host (0.00s) + --- PASS: TestOIDC_AuthorizeSSHSign/ok-admin-host (0.01s) --- PASS: TestOIDC_AuthorizeSSHSign/ok-admin-options (0.00s) --- PASS: TestOIDC_AuthorizeSSHSign/fail-rsa1024 (0.00s) --- PASS: TestOIDC_AuthorizeSSHSign/fail-user-host (0.00s) @@ -7443,7 +7486,7 @@ === RUN TestOIDC_AuthorizeSSHRevoke/ok === RUN TestOIDC_AuthorizeSSHRevoke/fail/invalid-token === RUN TestOIDC_AuthorizeSSHRevoke/fail/not-admin ---- PASS: TestOIDC_AuthorizeSSHRevoke (0.00s) +--- PASS: TestOIDC_AuthorizeSSHRevoke (0.01s) --- PASS: TestOIDC_AuthorizeSSHRevoke/ok (0.00s) --- PASS: TestOIDC_AuthorizeSSHRevoke/fail/invalid-token (0.00s) --- PASS: TestOIDC_AuthorizeSSHRevoke/fail/not-admin (0.00s) @@ -7513,7 +7556,7 @@ === RUN TestTemplateOptions/ok === RUN TestTemplateOptions/okCustomTemplate === RUN TestTemplateOptions/fail ---- PASS: TestTemplateOptions (0.01s) +--- PASS: TestTemplateOptions (0.00s) --- PASS: TestTemplateOptions/ok (0.00s) --- PASS: TestTemplateOptions/okCustomTemplate (0.00s) --- PASS: TestTemplateOptions/fail (0.00s) @@ -7566,27 +7609,27 @@ --- PASS: TestSanitizeSSHUserPrincipal/email_with_underscores (0.00s) --- PASS: TestSanitizeSSHUserPrincipal/email_with_symbols (0.00s) === RUN TestDefaultIdentityFunc -=== RUN TestDefaultIdentityFunc/ok_username -=== RUN TestDefaultIdentityFunc/ok_usernames -=== RUN TestDefaultIdentityFunc/ok_empty_username === RUN TestDefaultIdentityFunc/ok/badname === RUN TestDefaultIdentityFunc/fail/unsupported-provisioner -=== RUN TestDefaultIdentityFunc/ok_symbol === RUN TestDefaultIdentityFunc/ok === RUN TestDefaultIdentityFunc/ok_letter_case === RUN TestDefaultIdentityFunc/ok_simple +=== RUN TestDefaultIdentityFunc/ok_username +=== RUN TestDefaultIdentityFunc/ok_usernames === RUN TestDefaultIdentityFunc/ok_simple_letter_case +=== RUN TestDefaultIdentityFunc/ok_symbol +=== RUN TestDefaultIdentityFunc/ok_empty_username --- PASS: TestDefaultIdentityFunc (0.00s) - --- PASS: TestDefaultIdentityFunc/ok_username (0.00s) - --- PASS: TestDefaultIdentityFunc/ok_usernames (0.00s) - --- PASS: TestDefaultIdentityFunc/ok_empty_username (0.00s) --- PASS: TestDefaultIdentityFunc/ok/badname (0.00s) --- PASS: TestDefaultIdentityFunc/fail/unsupported-provisioner (0.00s) - --- PASS: TestDefaultIdentityFunc/ok_symbol (0.00s) --- PASS: TestDefaultIdentityFunc/ok (0.00s) --- PASS: TestDefaultIdentityFunc/ok_letter_case (0.00s) --- PASS: TestDefaultIdentityFunc/ok_simple (0.00s) + --- PASS: TestDefaultIdentityFunc/ok_username (0.00s) + --- PASS: TestDefaultIdentityFunc/ok_usernames (0.00s) --- PASS: TestDefaultIdentityFunc/ok_simple_letter_case (0.00s) + --- PASS: TestDefaultIdentityFunc/ok_symbol (0.00s) + --- PASS: TestDefaultIdentityFunc/ok_empty_username (0.00s) === RUN TestUnimplementedMethods === RUN TestUnimplementedMethods/jwk/sshRekey === RUN TestUnimplementedMethods/jwk/sshRenew @@ -7660,7 +7703,7 @@ === RUN Test_challengeValidationController_Validate/fail/not-allowed === RUN Test_challengeValidationController_Validate/ok === RUN Test_challengeValidationController_Validate/ok_with_data ---- PASS: Test_challengeValidationController_Validate (0.00s) +--- PASS: Test_challengeValidationController_Validate (0.01s) --- PASS: Test_challengeValidationController_Validate/fail/no-webhook (0.00s) --- PASS: Test_challengeValidationController_Validate/fail/wrong-cert-type (0.00s) --- PASS: Test_challengeValidationController_Validate/fail/wrong-secret-value (0.00s) @@ -7689,7 +7732,7 @@ === RUN TestSCEP_ValidateChallenge/fail/wrong-static-challenge === RUN TestSCEP_ValidateChallenge/ok/no-challenge === RUN TestSCEP_ValidateChallenge/fail/no-challenge-but-provided ---- PASS: TestSCEP_ValidateChallenge (0.01s) +--- PASS: TestSCEP_ValidateChallenge (0.00s) --- PASS: TestSCEP_ValidateChallenge/ok/webhooks (0.00s) --- PASS: TestSCEP_ValidateChallenge/ok/with-data (0.00s) --- PASS: TestSCEP_ValidateChallenge/fail/webhooks-secret-configuration (0.00s) @@ -7718,7 +7761,7 @@ === RUN TestSCEP_Init/fail_uri_type === RUN TestSCEP_Init/fail_missing_certificate === RUN TestSCEP_Init/fail_key_match ---- PASS: TestSCEP_Init (1.20s) +--- PASS: TestSCEP_Init (1.26s) --- PASS: TestSCEP_Init/ok (0.00s) --- PASS: TestSCEP_Init/ok_no_password (0.00s) --- PASS: TestSCEP_Init/ok_with_uri (0.00s) @@ -7870,48 +7913,49 @@ --- PASS: Test_urisValidator_Valid/fail2 (0.00s) --- PASS: Test_urisValidator_Valid/fail3 (0.00s) === RUN Test_defaultSANsValidator_Valid -=== RUN Test_defaultSANsValidator_Valid/ok/urisBadValidator-SignIdentity === RUN Test_defaultSANsValidator_Valid/ok === RUN Test_defaultSANsValidator_Valid/fail/dnsNamesValidator === RUN Test_defaultSANsValidator_Valid/fail/emailAddressesValidator === RUN Test_defaultSANsValidator_Valid/fail/ipAddressesValidator === RUN Test_defaultSANsValidator_Valid/fail/urisValidator +=== RUN Test_defaultSANsValidator_Valid/ok/urisBadValidator-SignIdentity --- PASS: Test_defaultSANsValidator_Valid (0.00s) - --- PASS: Test_defaultSANsValidator_Valid/ok/urisBadValidator-SignIdentity (0.00s) --- PASS: Test_defaultSANsValidator_Valid/ok (0.00s) --- PASS: Test_defaultSANsValidator_Valid/fail/dnsNamesValidator (0.00s) --- PASS: Test_defaultSANsValidator_Valid/fail/emailAddressesValidator (0.00s) --- PASS: Test_defaultSANsValidator_Valid/fail/ipAddressesValidator (0.00s) --- PASS: Test_defaultSANsValidator_Valid/fail/urisValidator (0.00s) + --- PASS: Test_defaultSANsValidator_Valid/ok/urisBadValidator-SignIdentity (0.00s) === RUN Test_validityValidator_Valid -=== RUN Test_validityValidator_Valid/fail/duration-too-great -=== RUN Test_validityValidator_Valid/ok/duration-exactly-max === RUN Test_validityValidator_Valid/ok/duration-exact-min-with-backdate === RUN Test_validityValidator_Valid/ok/duration-exact-max-with-backdate === RUN Test_validityValidator_Valid/fail/notAfter-past === RUN Test_validityValidator_Valid/fail/notBefore-after-notAfter === RUN Test_validityValidator_Valid/fail/duration-too-short === RUN Test_validityValidator_Valid/ok/duration-exactly-min +=== RUN Test_validityValidator_Valid/fail/duration-too-great +=== RUN Test_validityValidator_Valid/ok/duration-exactly-max --- PASS: Test_validityValidator_Valid (2.00s) - --- PASS: Test_validityValidator_Valid/fail/duration-too-great (0.00s) - --- PASS: Test_validityValidator_Valid/ok/duration-exactly-max (0.00s) --- PASS: Test_validityValidator_Valid/ok/duration-exact-min-with-backdate (1.00s) --- PASS: Test_validityValidator_Valid/ok/duration-exact-max-with-backdate (1.00s) --- PASS: Test_validityValidator_Valid/fail/notAfter-past (0.00s) --- PASS: Test_validityValidator_Valid/fail/notBefore-after-notAfter (0.00s) --- PASS: Test_validityValidator_Valid/fail/duration-too-short (0.00s) --- PASS: Test_validityValidator_Valid/ok/duration-exactly-min (0.00s) + --- PASS: Test_validityValidator_Valid/fail/duration-too-great (0.00s) + --- PASS: Test_validityValidator_Valid/ok/duration-exactly-max (0.00s) === RUN Test_forceCN_Option -=== RUN Test_forceCN_Option/ok/CN-not-forced === RUN Test_forceCN_Option/ok/CN-forced-and-set === RUN Test_forceCN_Option/ok/CN-forced-and-not-set === RUN Test_forceCN_Option/fail/CN-forced-and-empty-DNSNames +=== RUN Test_forceCN_Option/ok/CN-not-forced --- PASS: Test_forceCN_Option (0.00s) - --- PASS: Test_forceCN_Option/ok/CN-not-forced (0.00s) --- PASS: Test_forceCN_Option/ok/CN-forced-and-set (0.00s) --- PASS: Test_forceCN_Option/ok/CN-forced-and-not-set (0.00s) --- PASS: Test_forceCN_Option/fail/CN-forced-and-empty-DNSNames (0.00s) + --- PASS: Test_forceCN_Option/ok/CN-not-forced (0.00s) === RUN Test_profileDefaultDuration_Option +=== RUN Test_profileDefaultDuration_Option/ok/duration-set === RUN Test_profileDefaultDuration_Option/ok/notAfter-set === RUN Test_profileDefaultDuration_Option/ok/notBefore-and-notAfter-set === RUN Test_profileDefaultDuration_Option/ok/cert-with-validity @@ -7919,16 +7963,15 @@ === RUN Test_profileDefaultDuration_Option/ok/cert-notAfter-option-notBefore === RUN Test_profileDefaultDuration_Option/ok/notBefore-notAfter-duration-empty === RUN Test_profileDefaultDuration_Option/ok/notBefore-set -=== RUN Test_profileDefaultDuration_Option/ok/duration-set ---- PASS: Test_profileDefaultDuration_Option (0.81s) +--- PASS: Test_profileDefaultDuration_Option (0.82s) + --- PASS: Test_profileDefaultDuration_Option/ok/duration-set (0.10s) --- PASS: Test_profileDefaultDuration_Option/ok/notAfter-set (0.10s) - --- PASS: Test_profileDefaultDuration_Option/ok/notBefore-and-notAfter-set (0.10s) + --- PASS: Test_profileDefaultDuration_Option/ok/notBefore-and-notAfter-set (0.11s) --- PASS: Test_profileDefaultDuration_Option/ok/cert-with-validity (0.10s) --- PASS: Test_profileDefaultDuration_Option/ok/cert-notBefore-option-notafter (0.10s) --- PASS: Test_profileDefaultDuration_Option/ok/cert-notAfter-option-notBefore (0.10s) --- PASS: Test_profileDefaultDuration_Option/ok/notBefore-notAfter-duration-empty (0.10s) --- PASS: Test_profileDefaultDuration_Option/ok/notBefore-set (0.10s) - --- PASS: Test_profileDefaultDuration_Option/ok/duration-set (0.10s) === RUN Test_newProvisionerExtension_Option === RUN Test_newProvisionerExtension_Option/ok/one-element === RUN Test_newProvisionerExtension_Option/ok/replace @@ -7938,35 +7981,35 @@ --- PASS: Test_newProvisionerExtension_Option/ok/replace (0.00s) --- PASS: Test_newProvisionerExtension_Option/ok/disabled (0.00s) === RUN Test_profileLimitDuration_Option -=== RUN Test_profileLimitDuration_Option/fail/requested-notAfter-after-limit -=== RUN Test_profileLimitDuration_Option/fail/cert-validity-notBefore -=== RUN Test_profileLimitDuration_Option/fail/cert-validity-notAfter -=== RUN Test_profileLimitDuration_Option/ok/valid-notAfter-requested -=== RUN Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-under-default === RUN Test_profileLimitDuration_Option/ok/over-limit-with-backdate === RUN Test_profileLimitDuration_Option/ok/under-limit-with-backdate -=== RUN Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-over-default === RUN Test_profileLimitDuration_Option/ok/cert-validity === RUN Test_profileLimitDuration_Option/ok/cert-notBefore-default -=== RUN Test_profileLimitDuration_Option/ok/cert-notAfter-default === RUN Test_profileLimitDuration_Option/ok/cert-notBefore-option -=== RUN Test_profileLimitDuration_Option/ok/cert-notAfter-option === RUN Test_profileLimitDuration_Option/fail/notBefore-before-active-window +=== RUN Test_profileLimitDuration_Option/ok/valid-notAfter-requested +=== RUN Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-over-default +=== RUN Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-under-default +=== RUN Test_profileLimitDuration_Option/ok/cert-notAfter-default +=== RUN Test_profileLimitDuration_Option/ok/cert-notAfter-option +=== RUN Test_profileLimitDuration_Option/fail/requested-notAfter-after-limit +=== RUN Test_profileLimitDuration_Option/fail/cert-validity-notBefore +=== RUN Test_profileLimitDuration_Option/fail/cert-validity-notAfter --- PASS: Test_profileLimitDuration_Option (0.00s) - --- PASS: Test_profileLimitDuration_Option/fail/requested-notAfter-after-limit (0.00s) - --- PASS: Test_profileLimitDuration_Option/fail/cert-validity-notBefore (0.00s) - --- PASS: Test_profileLimitDuration_Option/fail/cert-validity-notAfter (0.00s) - --- PASS: Test_profileLimitDuration_Option/ok/valid-notAfter-requested (0.00s) - --- PASS: Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-under-default (0.00s) --- PASS: Test_profileLimitDuration_Option/ok/over-limit-with-backdate (0.00s) --- PASS: Test_profileLimitDuration_Option/ok/under-limit-with-backdate (0.00s) - --- PASS: Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-over-default (0.00s) --- PASS: Test_profileLimitDuration_Option/ok/cert-validity (0.00s) --- PASS: Test_profileLimitDuration_Option/ok/cert-notBefore-default (0.00s) - --- PASS: Test_profileLimitDuration_Option/ok/cert-notAfter-default (0.00s) --- PASS: Test_profileLimitDuration_Option/ok/cert-notBefore-option (0.00s) - --- PASS: Test_profileLimitDuration_Option/ok/cert-notAfter-option (0.00s) --- PASS: Test_profileLimitDuration_Option/fail/notBefore-before-active-window (0.00s) + --- PASS: Test_profileLimitDuration_Option/ok/valid-notAfter-requested (0.00s) + --- PASS: Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-over-default (0.00s) + --- PASS: Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-under-default (0.00s) + --- PASS: Test_profileLimitDuration_Option/ok/cert-notAfter-default (0.00s) + --- PASS: Test_profileLimitDuration_Option/ok/cert-notAfter-option (0.00s) + --- PASS: Test_profileLimitDuration_Option/fail/requested-notAfter-after-limit (0.00s) + --- PASS: Test_profileLimitDuration_Option/fail/cert-validity-notBefore (0.00s) + --- PASS: Test_profileLimitDuration_Option/fail/cert-validity-notAfter (0.00s) === RUN TestSSHOptions_Type === RUN TestSSHOptions_Type/user === RUN TestSSHOptions_Type/host @@ -7978,33 +8021,33 @@ --- PASS: TestSSHOptions_Type/empty (0.00s) --- PASS: TestSSHOptions_Type/invalid (0.00s) === RUN TestSSHOptions_Modify +=== RUN TestSSHOptions_Modify/fail/unexpected-cert-type +=== RUN TestSSHOptions_Modify/fail/validAfter-greater-validBefore === RUN TestSSHOptions_Modify/ok/user-cert === RUN TestSSHOptions_Modify/ok/host-cert === RUN TestSSHOptions_Modify/ok -=== RUN TestSSHOptions_Modify/fail/unexpected-cert-type -=== RUN TestSSHOptions_Modify/fail/validAfter-greater-validBefore --- PASS: TestSSHOptions_Modify (0.00s) + --- PASS: TestSSHOptions_Modify/fail/unexpected-cert-type (0.00s) + --- PASS: TestSSHOptions_Modify/fail/validAfter-greater-validBefore (0.00s) --- PASS: TestSSHOptions_Modify/ok/user-cert (0.00s) --- PASS: TestSSHOptions_Modify/ok/host-cert (0.00s) --- PASS: TestSSHOptions_Modify/ok (0.00s) - --- PASS: TestSSHOptions_Modify/fail/unexpected-cert-type (0.00s) - --- PASS: TestSSHOptions_Modify/fail/validAfter-greater-validBefore (0.00s) === RUN TestSSHOptions_Match -=== RUN TestSSHOptions_Match/ok/equal -=== RUN TestSSHOptions_Match/fail/cert-type -=== RUN TestSSHOptions_Match/fail/pricipals === RUN TestSSHOptions_Match/fail/validAfter === RUN TestSSHOptions_Match/fail/validBefore === RUN TestSSHOptions_Match/ok/original-empty === RUN TestSSHOptions_Match/ok/cmp-empty +=== RUN TestSSHOptions_Match/ok/equal +=== RUN TestSSHOptions_Match/fail/cert-type +=== RUN TestSSHOptions_Match/fail/pricipals --- PASS: TestSSHOptions_Match (0.00s) - --- PASS: TestSSHOptions_Match/ok/equal (0.00s) - --- PASS: TestSSHOptions_Match/fail/cert-type (0.00s) - --- PASS: TestSSHOptions_Match/fail/pricipals (0.00s) --- PASS: TestSSHOptions_Match/fail/validAfter (0.00s) --- PASS: TestSSHOptions_Match/fail/validBefore (0.00s) --- PASS: TestSSHOptions_Match/ok/original-empty (0.00s) --- PASS: TestSSHOptions_Match/ok/cmp-empty (0.00s) + --- PASS: TestSSHOptions_Match/ok/equal (0.00s) + --- PASS: TestSSHOptions_Match/fail/cert-type (0.00s) + --- PASS: TestSSHOptions_Match/fail/pricipals (0.00s) === RUN Test_sshCertValidAfterModifier_Modify === RUN Test_sshCertValidAfterModifier_Modify/ok --- PASS: Test_sshCertValidAfterModifier_Modify (0.00s) @@ -8064,23 +8107,23 @@ === RUN Test_sshValidityModifier === RUN Test_sshValidityModifier/ok/no-limit === RUN Test_sshValidityModifier/ok/defaults -=== RUN Test_sshValidityModifier/ok/empty-requested-validBefore-limit-before-default +=== RUN Test_sshValidityModifier/ok/valid-requested-validBefore === RUN Test_sshValidityModifier/fail/type-not-set === RUN Test_sshValidityModifier/fail/requested-validAfter-after-limit -=== RUN Test_sshValidityModifier/fail/requested-validBefore-after-limit -=== RUN Test_sshValidityModifier/ok/valid-requested-validBefore === RUN Test_sshValidityModifier/ok/empty-requested-validBefore-limit-after-default +=== RUN Test_sshValidityModifier/ok/empty-requested-validBefore-limit-before-default === RUN Test_sshValidityModifier/fail/type-not-recognized +=== RUN Test_sshValidityModifier/fail/requested-validBefore-after-limit --- PASS: Test_sshValidityModifier (0.00s) --- PASS: Test_sshValidityModifier/ok/no-limit (0.00s) --- PASS: Test_sshValidityModifier/ok/defaults (0.00s) - --- PASS: Test_sshValidityModifier/ok/empty-requested-validBefore-limit-before-default (0.00s) + --- PASS: Test_sshValidityModifier/ok/valid-requested-validBefore (0.00s) --- PASS: Test_sshValidityModifier/fail/type-not-set (0.00s) --- PASS: Test_sshValidityModifier/fail/requested-validAfter-after-limit (0.00s) - --- PASS: Test_sshValidityModifier/fail/requested-validBefore-after-limit (0.00s) - --- PASS: Test_sshValidityModifier/ok/valid-requested-validBefore (0.00s) --- PASS: Test_sshValidityModifier/ok/empty-requested-validBefore-limit-after-default (0.00s) + --- PASS: Test_sshValidityModifier/ok/empty-requested-validBefore-limit-before-default (0.00s) --- PASS: Test_sshValidityModifier/fail/type-not-recognized (0.00s) + --- PASS: Test_sshValidityModifier/fail/requested-validBefore-after-limit (0.00s) === RUN Test_sshDefaultDuration_Option === RUN Test_sshDefaultDuration_Option/user === RUN Test_sshDefaultDuration_Option/host @@ -8117,7 +8160,7 @@ === RUN TestCustomSSHTemplateOptions/okNulUserOptions === RUN TestCustomSSHTemplateOptions/okBadUserOptions === RUN TestCustomSSHTemplateOptions/fail ---- PASS: TestCustomSSHTemplateOptions (0.01s) +--- PASS: TestCustomSSHTemplateOptions (0.00s) --- PASS: TestCustomSSHTemplateOptions/ok (0.00s) --- PASS: TestCustomSSHTemplateOptions/okNoData (0.00s) --- PASS: TestCustomSSHTemplateOptions/okTemplateData (0.00s) @@ -8134,22 +8177,22 @@ === RUN TestSSHPOP_authorizeToken === RUN TestSSHPOP_authorizeToken/fail/cert-past-validity === RUN TestSSHPOP_authorizeToken/fail/no-signer-found -=== RUN TestSSHPOP_authorizeToken/fail/invalid-claims-issuer -=== RUN TestSSHPOP_authorizeToken/fail/empty-subject +=== RUN TestSSHPOP_authorizeToken/fail/error-parsing-claims-bad-sig === RUN TestSSHPOP_authorizeToken/fail/bad-token === RUN TestSSHPOP_authorizeToken/fail/cert-not-yet-valid -=== RUN TestSSHPOP_authorizeToken/fail/error-parsing-claims-bad-sig +=== RUN TestSSHPOP_authorizeToken/fail/invalid-claims-issuer === RUN TestSSHPOP_authorizeToken/fail/invalid-audience +=== RUN TestSSHPOP_authorizeToken/fail/empty-subject === RUN TestSSHPOP_authorizeToken/ok --- PASS: TestSSHPOP_authorizeToken (0.01s) --- PASS: TestSSHPOP_authorizeToken/fail/cert-past-validity (0.00s) - --- PASS: TestSSHPOP_authorizeToken/fail/no-signer-found (0.00s) - --- PASS: TestSSHPOP_authorizeToken/fail/invalid-claims-issuer (0.00s) - --- PASS: TestSSHPOP_authorizeToken/fail/empty-subject (0.00s) + --- PASS: TestSSHPOP_authorizeToken/fail/no-signer-found (0.01s) + --- PASS: TestSSHPOP_authorizeToken/fail/error-parsing-claims-bad-sig (0.00s) --- PASS: TestSSHPOP_authorizeToken/fail/bad-token (0.00s) --- PASS: TestSSHPOP_authorizeToken/fail/cert-not-yet-valid (0.00s) - --- PASS: TestSSHPOP_authorizeToken/fail/error-parsing-claims-bad-sig (0.01s) + --- PASS: TestSSHPOP_authorizeToken/fail/invalid-claims-issuer (0.00s) --- PASS: TestSSHPOP_authorizeToken/fail/invalid-audience (0.00s) + --- PASS: TestSSHPOP_authorizeToken/fail/empty-subject (0.00s) --- PASS: TestSSHPOP_authorizeToken/ok (0.00s) === RUN TestSSHPOP_AuthorizeSSHRevoke === RUN TestSSHPOP_AuthorizeSSHRevoke/fail/bad-token @@ -8168,27 +8211,27 @@ --- PASS: TestSSHPOP_AuthorizeSSHRenew/fail/not-host-cert (0.00s) --- PASS: TestSSHPOP_AuthorizeSSHRenew/ok (0.00s) === RUN TestSSHPOP_AuthorizeSSHRekey -=== RUN TestSSHPOP_AuthorizeSSHRekey/fail/bad-token === RUN TestSSHPOP_AuthorizeSSHRekey/fail/not-host-cert === RUN TestSSHPOP_AuthorizeSSHRekey/ok +=== RUN TestSSHPOP_AuthorizeSSHRekey/fail/bad-token --- PASS: TestSSHPOP_AuthorizeSSHRekey (0.01s) - --- PASS: TestSSHPOP_AuthorizeSSHRekey/fail/bad-token (0.00s) - --- PASS: TestSSHPOP_AuthorizeSSHRekey/fail/not-host-cert (0.00s) + --- PASS: TestSSHPOP_AuthorizeSSHRekey/fail/not-host-cert (0.01s) --- PASS: TestSSHPOP_AuthorizeSSHRekey/ok (0.00s) + --- PASS: TestSSHPOP_AuthorizeSSHRekey/fail/bad-token (0.00s) === RUN TestSSHPOP_ExtractSSHPOPCert -=== RUN TestSSHPOP_ExtractSSHPOPCert/fail/bad-token -=== RUN TestSSHPOP_ExtractSSHPOPCert/fail/sshpop-missing -=== RUN TestSSHPOP_ExtractSSHPOPCert/fail/wrong-sshpop-type === RUN TestSSHPOP_ExtractSSHPOPCert/fail/base64decode-error === RUN TestSSHPOP_ExtractSSHPOPCert/fail/parsing-sshpop-pubkey === RUN TestSSHPOP_ExtractSSHPOPCert/ok +=== RUN TestSSHPOP_ExtractSSHPOPCert/fail/bad-token +=== RUN TestSSHPOP_ExtractSSHPOPCert/fail/sshpop-missing +=== RUN TestSSHPOP_ExtractSSHPOPCert/fail/wrong-sshpop-type --- PASS: TestSSHPOP_ExtractSSHPOPCert (0.00s) - --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/bad-token (0.00s) - --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/sshpop-missing (0.00s) - --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/wrong-sshpop-type (0.00s) --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/base64decode-error (0.00s) --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/parsing-sshpop-pubkey (0.00s) --- PASS: TestSSHPOP_ExtractSSHPOPCert/ok (0.00s) + --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/bad-token (0.00s) + --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/sshpop-missing (0.00s) + --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/wrong-sshpop-type (0.00s) === RUN TestNewTimeDuration === RUN TestNewTimeDuration/ok === RUN TestNewTimeDuration/zero @@ -8249,7 +8292,7 @@ === RUN TestTimeDuration_UnmarshalJSON/duration === RUN TestTimeDuration_UnmarshalJSON/fail === RUN TestTimeDuration_UnmarshalJSON/fail#01 ---- PASS: TestTimeDuration_UnmarshalJSON (0.00s) +--- PASS: TestTimeDuration_UnmarshalJSON (0.01s) --- PASS: TestTimeDuration_UnmarshalJSON/empty (0.00s) --- PASS: TestTimeDuration_UnmarshalJSON/timestamp (0.00s) --- PASS: TestTimeDuration_UnmarshalJSON/duration (0.00s) @@ -8290,135 +8333,135 @@ --- PASS: TestTimeDuration_String/timestamp (0.00s) --- PASS: TestTimeDuration_String/duration (0.00s) === RUN TestWebhookController_isCertTypeOK -=== RUN TestWebhookController_isCertTypeOK/all/ssh +=== RUN TestWebhookController_isCertTypeOK/all/x509 === RUN TestWebhookController_isCertTypeOK/all/"" +=== RUN TestWebhookController_isCertTypeOK/x509/x509 +=== RUN TestWebhookController_isCertTypeOK/ssh/"" +=== RUN TestWebhookController_isCertTypeOK/all/ssh === RUN TestWebhookController_isCertTypeOK/x509/all === RUN TestWebhookController_isCertTypeOK/x509/ssh +=== RUN TestWebhookController_isCertTypeOK/x509/"" === RUN TestWebhookController_isCertTypeOK/ssh/all === RUN TestWebhookController_isCertTypeOK/ssh/x509 -=== RUN TestWebhookController_isCertTypeOK/all/x509 -=== RUN TestWebhookController_isCertTypeOK/x509/x509 -=== RUN TestWebhookController_isCertTypeOK/x509/"" === RUN TestWebhookController_isCertTypeOK/ssh/ssh -=== RUN TestWebhookController_isCertTypeOK/ssh/"" === RUN TestWebhookController_isCertTypeOK/all/all --- PASS: TestWebhookController_isCertTypeOK (0.00s) - --- PASS: TestWebhookController_isCertTypeOK/all/ssh (0.00s) + --- PASS: TestWebhookController_isCertTypeOK/all/x509 (0.00s) --- PASS: TestWebhookController_isCertTypeOK/all/"" (0.00s) + --- PASS: TestWebhookController_isCertTypeOK/x509/x509 (0.00s) + --- PASS: TestWebhookController_isCertTypeOK/ssh/"" (0.00s) + --- PASS: TestWebhookController_isCertTypeOK/all/ssh (0.00s) --- PASS: TestWebhookController_isCertTypeOK/x509/all (0.00s) --- PASS: TestWebhookController_isCertTypeOK/x509/ssh (0.00s) + --- PASS: TestWebhookController_isCertTypeOK/x509/"" (0.00s) --- PASS: TestWebhookController_isCertTypeOK/ssh/all (0.00s) --- PASS: TestWebhookController_isCertTypeOK/ssh/x509 (0.00s) - --- PASS: TestWebhookController_isCertTypeOK/all/x509 (0.00s) - --- PASS: TestWebhookController_isCertTypeOK/x509/x509 (0.00s) - --- PASS: TestWebhookController_isCertTypeOK/x509/"" (0.00s) --- PASS: TestWebhookController_isCertTypeOK/ssh/ssh (0.00s) - --- PASS: TestWebhookController_isCertTypeOK/ssh/"" (0.00s) --- PASS: TestWebhookController_isCertTypeOK/all/all (0.00s) === RUN TestWebhookController_Enrich -=== RUN TestWebhookController_Enrich/ok/no_enriching_webhooks -=== RUN TestWebhookController_Enrich/ok/one_webhook -=== RUN TestWebhookController_Enrich/ok/two_webhooks -=== RUN TestWebhookController_Enrich/ok/x509_only === RUN TestWebhookController_Enrich/ok/with_options === RUN TestWebhookController_Enrich/deny === RUN TestWebhookController_Enrich/deny/with_error === RUN TestWebhookController_Enrich/fail/with_options ---- PASS: TestWebhookController_Enrich (0.02s) +=== RUN TestWebhookController_Enrich/ok/no_enriching_webhooks +=== RUN TestWebhookController_Enrich/ok/one_webhook +=== RUN TestWebhookController_Enrich/ok/two_webhooks +=== RUN TestWebhookController_Enrich/ok/x509_only +--- PASS: TestWebhookController_Enrich (0.01s) + --- PASS: TestWebhookController_Enrich/ok/with_options (0.00s) + --- PASS: TestWebhookController_Enrich/deny (0.01s) + --- PASS: TestWebhookController_Enrich/deny/with_error (0.00s) + --- PASS: TestWebhookController_Enrich/fail/with_options (0.00s) --- PASS: TestWebhookController_Enrich/ok/no_enriching_webhooks (0.00s) --- PASS: TestWebhookController_Enrich/ok/one_webhook (0.00s) --- PASS: TestWebhookController_Enrich/ok/two_webhooks (0.00s) --- PASS: TestWebhookController_Enrich/ok/x509_only (0.00s) - --- PASS: TestWebhookController_Enrich/ok/with_options (0.00s) - --- PASS: TestWebhookController_Enrich/deny (0.00s) - --- PASS: TestWebhookController_Enrich/deny/with_error (0.00s) - --- PASS: TestWebhookController_Enrich/fail/with_options (0.00s) === RUN TestWebhookController_Authorize +=== RUN TestWebhookController_Authorize/ok/no_enriching_webhooks +=== RUN TestWebhookController_Authorize/ok === RUN TestWebhookController_Authorize/ok/ssh_only === RUN TestWebhookController_Authorize/ok/with_options === RUN TestWebhookController_Authorize/deny === RUN TestWebhookController_Authorize/deny/withError === RUN TestWebhookController_Authorize/fail/with_options -=== RUN TestWebhookController_Authorize/ok/no_enriching_webhooks -=== RUN TestWebhookController_Authorize/ok --- PASS: TestWebhookController_Authorize (0.01s) + --- PASS: TestWebhookController_Authorize/ok/no_enriching_webhooks (0.00s) + --- PASS: TestWebhookController_Authorize/ok (0.00s) --- PASS: TestWebhookController_Authorize/ok/ssh_only (0.00s) --- PASS: TestWebhookController_Authorize/ok/with_options (0.00s) --- PASS: TestWebhookController_Authorize/deny (0.00s) --- PASS: TestWebhookController_Authorize/deny/withError (0.00s) --- PASS: TestWebhookController_Authorize/fail/with_options (0.00s) - --- PASS: TestWebhookController_Authorize/ok/no_enriching_webhooks (0.00s) - --- PASS: TestWebhookController_Authorize/ok (0.00s) === RUN TestWebhook_Do -=== RUN TestWebhook_Do/ok/basic -=== RUN TestWebhook_Do/ok/templated-url -=== RUN TestWebhook_Do/fail/404 === RUN TestWebhook_Do/ok/allow === RUN TestWebhook_Do/ok === RUN TestWebhook_Do/ok/no-request-id === RUN TestWebhook_Do/ok/bearer +=== RUN TestWebhook_Do/ok/basic +=== RUN TestWebhook_Do/ok/templated-url +=== RUN TestWebhook_Do/fail/404 === RUN TestWebhook_Do/disableTLSClientAuth -2025/10/26 22:11:43 http: TLS handshake error from 127.0.0.1:53868: remote error: tls: bad certificate ---- PASS: TestWebhook_Do (1.03s) - --- PASS: TestWebhook_Do/ok/basic (0.00s) - --- PASS: TestWebhook_Do/ok/templated-url (0.00s) - --- PASS: TestWebhook_Do/fail/404 (0.00s) +2026/11/30 06:40:14 http: TLS handshake error from 127.0.0.1:43320: remote error: tls: bad certificate +2026/11/30 06:40:15 http: TLS handshake error from 127.0.0.1:58482: remote error: tls: bad certificate +--- PASS: TestWebhook_Do (1.05s) --- PASS: TestWebhook_Do/ok/allow (0.00s) --- PASS: TestWebhook_Do/ok (0.00s) - --- PASS: TestWebhook_Do/ok/no-request-id (0.00s) + --- PASS: TestWebhook_Do/ok/no-request-id (0.01s) --- PASS: TestWebhook_Do/ok/bearer (0.00s) - --- PASS: TestWebhook_Do/disableTLSClientAuth (1.02s) + --- PASS: TestWebhook_Do/ok/basic (0.00s) + --- PASS: TestWebhook_Do/ok/templated-url (0.00s) + --- PASS: TestWebhook_Do/fail/404 (0.00s) + --- PASS: TestWebhook_Do/disableTLSClientAuth (1.04s) === RUN TestX5C_Getters --- PASS: TestX5C_Getters (0.00s) === RUN TestX5C_Init +=== RUN TestX5C_Init/ok/root-chain +=== RUN TestX5C_Init/fail/empty === RUN TestX5C_Init/fail/empty-name -2025/10/26 22:11:44 http: TLS handshake error from 127.0.0.1:53878: remote error: tls: bad certificate === RUN TestX5C_Init/fail/empty-type === RUN TestX5C_Init/fail/empty-key === RUN TestX5C_Init/fail/no-valid-root-certs === RUN TestX5C_Init/fail/invalid-duration === RUN TestX5C_Init/ok -=== RUN TestX5C_Init/ok/root-chain -=== RUN TestX5C_Init/fail/empty --- PASS: TestX5C_Init (0.00s) + --- PASS: TestX5C_Init/ok/root-chain (0.00s) + --- PASS: TestX5C_Init/fail/empty (0.00s) --- PASS: TestX5C_Init/fail/empty-name (0.00s) --- PASS: TestX5C_Init/fail/empty-type (0.00s) --- PASS: TestX5C_Init/fail/empty-key (0.00s) --- PASS: TestX5C_Init/fail/no-valid-root-certs (0.00s) --- PASS: TestX5C_Init/fail/invalid-duration (0.00s) --- PASS: TestX5C_Init/ok (0.00s) - --- PASS: TestX5C_Init/ok/root-chain (0.00s) - --- PASS: TestX5C_Init/fail/empty (0.00s) === RUN TestX5C_authorizeToken -=== RUN TestX5C_authorizeToken/fail/invalid-audience -=== RUN TestX5C_authorizeToken/fail/bad-token -=== RUN TestX5C_authorizeToken/fail/invalid-cert-chain === RUN TestX5C_authorizeToken/fail/doubled-up-self-signed-cert -=== RUN TestX5C_authorizeToken/fail/digital-signature-ext-required === RUN TestX5C_authorizeToken/fail/signature-does-not-match-x5c-pub-key +=== RUN TestX5C_authorizeToken/fail/invalid-issuer === RUN TestX5C_authorizeToken/fail/empty-subject === RUN TestX5C_authorizeToken/ok -=== RUN TestX5C_authorizeToken/fail/invalid-issuer +=== RUN TestX5C_authorizeToken/fail/bad-token +=== RUN TestX5C_authorizeToken/fail/invalid-cert-chain +=== RUN TestX5C_authorizeToken/fail/digital-signature-ext-required +=== RUN TestX5C_authorizeToken/fail/invalid-audience --- PASS: TestX5C_authorizeToken (0.01s) - --- PASS: TestX5C_authorizeToken/fail/invalid-audience (0.00s) - --- PASS: TestX5C_authorizeToken/fail/bad-token (0.00s) - --- PASS: TestX5C_authorizeToken/fail/invalid-cert-chain (0.00s) --- PASS: TestX5C_authorizeToken/fail/doubled-up-self-signed-cert (0.00s) - --- PASS: TestX5C_authorizeToken/fail/digital-signature-ext-required (0.00s) --- PASS: TestX5C_authorizeToken/fail/signature-does-not-match-x5c-pub-key (0.00s) + --- PASS: TestX5C_authorizeToken/fail/invalid-issuer (0.00s) --- PASS: TestX5C_authorizeToken/fail/empty-subject (0.00s) --- PASS: TestX5C_authorizeToken/ok (0.00s) - --- PASS: TestX5C_authorizeToken/fail/invalid-issuer (0.00s) + --- PASS: TestX5C_authorizeToken/fail/bad-token (0.00s) + --- PASS: TestX5C_authorizeToken/fail/invalid-cert-chain (0.00s) + --- PASS: TestX5C_authorizeToken/fail/digital-signature-ext-required (0.00s) + --- PASS: TestX5C_authorizeToken/fail/invalid-audience (0.00s) === RUN TestX5C_AuthorizeSign +=== RUN TestX5C_AuthorizeSign/ok/cnf === RUN TestX5C_AuthorizeSign/fail/invalid-token === RUN TestX5C_AuthorizeSign/ok/empty-sans === RUN TestX5C_AuthorizeSign/ok/multi-sans -=== RUN TestX5C_AuthorizeSign/ok/cnf ---- PASS: TestX5C_AuthorizeSign (0.01s) +--- PASS: TestX5C_AuthorizeSign (0.02s) + --- PASS: TestX5C_AuthorizeSign/ok/cnf (0.01s) --- PASS: TestX5C_AuthorizeSign/fail/invalid-token (0.00s) --- PASS: TestX5C_AuthorizeSign/ok/empty-sans (0.00s) - --- PASS: TestX5C_AuthorizeSign/ok/multi-sans (0.00s) - --- PASS: TestX5C_AuthorizeSign/ok/cnf (0.00s) + --- PASS: TestX5C_AuthorizeSign/ok/multi-sans (0.01s) === RUN TestX5C_AuthorizeRevoke === RUN TestX5C_AuthorizeRevoke/fail/invalid-token === RUN TestX5C_AuthorizeRevoke/ok @@ -8426,29 +8469,29 @@ --- PASS: TestX5C_AuthorizeRevoke/fail/invalid-token (0.00s) --- PASS: TestX5C_AuthorizeRevoke/ok (0.00s) === RUN TestX5C_AuthorizeRenew -=== RUN TestX5C_AuthorizeRenew/ok === RUN TestX5C_AuthorizeRenew/fail/renew-disabled +=== RUN TestX5C_AuthorizeRenew/ok --- PASS: TestX5C_AuthorizeRenew (0.00s) - --- PASS: TestX5C_AuthorizeRenew/ok (0.00s) --- PASS: TestX5C_AuthorizeRenew/fail/renew-disabled (0.00s) + --- PASS: TestX5C_AuthorizeRenew/ok (0.00s) === RUN TestX5C_AuthorizeSSHSign +=== RUN TestX5C_AuthorizeSSHSign/ok/cnf +=== RUN TestX5C_AuthorizeSSHSign/fail/sshCA-disabled === RUN TestX5C_AuthorizeSSHSign/fail/invalid-token === RUN TestX5C_AuthorizeSSHSign/fail/no-Step-claim === RUN TestX5C_AuthorizeSSHSign/fail/no-SSH-subattribute-in-claims === RUN TestX5C_AuthorizeSSHSign/ok/with-claims === RUN TestX5C_AuthorizeSSHSign/ok/without-claims -=== RUN TestX5C_AuthorizeSSHSign/ok/cnf -=== RUN TestX5C_AuthorizeSSHSign/fail/sshCA-disabled --- PASS: TestX5C_AuthorizeSSHSign (0.01s) + --- PASS: TestX5C_AuthorizeSSHSign/ok/cnf (0.00s) + --- PASS: TestX5C_AuthorizeSSHSign/fail/sshCA-disabled (0.00s) --- PASS: TestX5C_AuthorizeSSHSign/fail/invalid-token (0.00s) --- PASS: TestX5C_AuthorizeSSHSign/fail/no-Step-claim (0.00s) --- PASS: TestX5C_AuthorizeSSHSign/fail/no-SSH-subattribute-in-claims (0.00s) --- PASS: TestX5C_AuthorizeSSHSign/ok/with-claims (0.00s) --- PASS: TestX5C_AuthorizeSSHSign/ok/without-claims (0.00s) - --- PASS: TestX5C_AuthorizeSSHSign/ok/cnf (0.00s) - --- PASS: TestX5C_AuthorizeSSHSign/fail/sshCA-disabled (0.00s) PASS -ok github.com/smallstep/certificates/authority/provisioner 18.078s +ok github.com/smallstep/certificates/authority/provisioner 26.289s === RUN TestProjectValidator_ValidateProject === RUN TestProjectValidator_ValidateProject/allowed-1 === RUN TestProjectValidator_ValidateProject/allowed-2 @@ -8465,12 +8508,12 @@ === RUN TestOrganizationValidator_ValidateProject/ok_projects === RUN TestOrganizationValidator_ValidateProject/fail_projects === RUN TestOrganizationValidator_ValidateProject/fail_organization ---- PASS: TestOrganizationValidator_ValidateProject (0.00s) +--- PASS: TestOrganizationValidator_ValidateProject (0.01s) --- PASS: TestOrganizationValidator_ValidateProject/ok_projects (0.00s) --- PASS: TestOrganizationValidator_ValidateProject/fail_projects (0.00s) --- SKIP: TestOrganizationValidator_ValidateProject/fail_organization (0.00s) PASS -ok github.com/smallstep/certificates/authority/provisioner/gcp 0.041s +ok github.com/smallstep/certificates/authority/provisioner/gcp 0.071s === RUN TestDPOPOptions_EvaluateTarget === RUN TestDPOPOptions_EvaluateTarget/ok === RUN TestDPOPOptions_EvaluateTarget/fail/empty @@ -8528,21 +8571,21 @@ --- PASS: TestOptions_Validate/fail/invalid-key (0.00s) --- PASS: TestOptions_Validate/fail/target-template (0.00s) PASS -ok github.com/smallstep/certificates/authority/provisioner/wire 0.047s +ok github.com/smallstep/certificates/authority/provisioner/wire 0.063s === RUN TestNewACMEClient -=== RUN TestNewACMEClient/fail/error-bad-account -=== RUN TestNewACMEClient/ok -=== RUN TestNewACMEClient/fail/client-option-error === RUN TestNewACMEClient/fail/get-directory === RUN TestNewACMEClient/fail/bad-directory === RUN TestNewACMEClient/fail/error-post-newAccount ---- PASS: TestNewACMEClient (0.01s) +=== RUN TestNewACMEClient/fail/error-bad-account +=== RUN TestNewACMEClient/ok +=== RUN TestNewACMEClient/fail/client-option-error +--- PASS: TestNewACMEClient (0.02s) + --- PASS: TestNewACMEClient/fail/get-directory (0.01s) + --- PASS: TestNewACMEClient/fail/bad-directory (0.00s) + --- PASS: TestNewACMEClient/fail/error-post-newAccount (0.01s) --- PASS: TestNewACMEClient/fail/error-bad-account (0.00s) --- PASS: TestNewACMEClient/ok (0.00s) --- PASS: TestNewACMEClient/fail/client-option-error (0.00s) - --- PASS: TestNewACMEClient/fail/get-directory (0.00s) - --- PASS: TestNewACMEClient/fail/bad-directory (0.00s) - --- PASS: TestNewACMEClient/fail/error-post-newAccount (0.00s) === RUN TestACMEClient_GetDirectory --- PASS: TestACMEClient_GetDirectory (0.00s) === RUN TestACMEClient_GetNonce @@ -8556,41 +8599,41 @@ === RUN TestACMEClient_post/fail/GET-nonce === RUN TestACMEClient_post/ok/jwk === RUN TestACMEClient_post/ok/kid ---- PASS: TestACMEClient_post (0.00s) +--- PASS: TestACMEClient_post (0.02s) --- PASS: TestACMEClient_post/fail/account-not-configured (0.00s) --- PASS: TestACMEClient_post/fail/GET-nonce (0.00s) --- PASS: TestACMEClient_post/ok/jwk (0.00s) - --- PASS: TestACMEClient_post/ok/kid (0.00s) + --- PASS: TestACMEClient_post/ok/kid (0.02s) === RUN TestACMEClient_NewOrder -=== RUN TestACMEClient_NewOrder/fail/client-post -=== RUN TestACMEClient_NewOrder/fail/newOrder-error === RUN TestACMEClient_NewOrder/fail/bad-order === RUN TestACMEClient_NewOrder/ok +=== RUN TestACMEClient_NewOrder/fail/client-post +=== RUN TestACMEClient_NewOrder/fail/newOrder-error --- PASS: TestACMEClient_NewOrder (0.00s) - --- PASS: TestACMEClient_NewOrder/fail/client-post (0.00s) - --- PASS: TestACMEClient_NewOrder/fail/newOrder-error (0.00s) --- PASS: TestACMEClient_NewOrder/fail/bad-order (0.00s) --- PASS: TestACMEClient_NewOrder/ok (0.00s) + --- PASS: TestACMEClient_NewOrder/fail/client-post (0.00s) + --- PASS: TestACMEClient_NewOrder/fail/newOrder-error (0.00s) === RUN TestACMEClient_GetOrder -=== RUN TestACMEClient_GetOrder/ok === RUN TestACMEClient_GetOrder/fail/client-post === RUN TestACMEClient_GetOrder/fail/getOrder-error === RUN TestACMEClient_GetOrder/fail/bad-order ---- PASS: TestACMEClient_GetOrder (0.00s) - --- PASS: TestACMEClient_GetOrder/ok (0.00s) - --- PASS: TestACMEClient_GetOrder/fail/client-post (0.00s) +=== RUN TestACMEClient_GetOrder/ok +--- PASS: TestACMEClient_GetOrder (0.01s) + --- PASS: TestACMEClient_GetOrder/fail/client-post (0.01s) --- PASS: TestACMEClient_GetOrder/fail/getOrder-error (0.00s) --- PASS: TestACMEClient_GetOrder/fail/bad-order (0.00s) + --- PASS: TestACMEClient_GetOrder/ok (0.00s) === RUN TestACMEClient_GetAuthz +=== RUN TestACMEClient_GetAuthz/ok === RUN TestACMEClient_GetAuthz/fail/client-post === RUN TestACMEClient_GetAuthz/fail/getChallenge-error === RUN TestACMEClient_GetAuthz/fail/bad-challenge -=== RUN TestACMEClient_GetAuthz/ok --- PASS: TestACMEClient_GetAuthz (0.01s) + --- PASS: TestACMEClient_GetAuthz/ok (0.00s) --- PASS: TestACMEClient_GetAuthz/fail/client-post (0.00s) --- PASS: TestACMEClient_GetAuthz/fail/getChallenge-error (0.00s) --- PASS: TestACMEClient_GetAuthz/fail/bad-challenge (0.00s) - --- PASS: TestACMEClient_GetAuthz/ok (0.00s) === RUN TestACMEClient_GetChallenge === RUN TestACMEClient_GetChallenge/fail/client-post === RUN TestACMEClient_GetChallenge/fail/getChallenge-error @@ -8598,19 +8641,19 @@ === RUN TestACMEClient_GetChallenge/ok --- PASS: TestACMEClient_GetChallenge (0.01s) --- PASS: TestACMEClient_GetChallenge/fail/client-post (0.00s) - --- PASS: TestACMEClient_GetChallenge/fail/getChallenge-error (0.00s) + --- PASS: TestACMEClient_GetChallenge/fail/getChallenge-error (0.01s) --- PASS: TestACMEClient_GetChallenge/fail/bad-challenge (0.00s) --- PASS: TestACMEClient_GetChallenge/ok (0.00s) === RUN TestACMEClient_ValidateChallenge -=== RUN TestACMEClient_ValidateChallenge/fail/bad-challenge -=== RUN TestACMEClient_ValidateChallenge/ok === RUN TestACMEClient_ValidateChallenge/fail/client-post === RUN TestACMEClient_ValidateChallenge/fail/getChallenge-error +=== RUN TestACMEClient_ValidateChallenge/fail/bad-challenge +=== RUN TestACMEClient_ValidateChallenge/ok --- PASS: TestACMEClient_ValidateChallenge (0.01s) - --- PASS: TestACMEClient_ValidateChallenge/fail/bad-challenge (0.00s) - --- PASS: TestACMEClient_ValidateChallenge/ok (0.00s) --- PASS: TestACMEClient_ValidateChallenge/fail/client-post (0.00s) --- PASS: TestACMEClient_ValidateChallenge/fail/getChallenge-error (0.00s) + --- PASS: TestACMEClient_ValidateChallenge/fail/bad-challenge (0.00s) + --- PASS: TestACMEClient_ValidateChallenge/ok (0.00s) === RUN TestACMEClient_ValidateWithPayload === RUN TestACMEClient_ValidateWithPayload/ok === NAME TestACMEClient_ValidateWithPayload @@ -8628,15 +8671,15 @@ --- PASS: TestACMEClient_ValidateWithPayload/fail_nonce (0.00s) --- PASS: TestACMEClient_ValidateWithPayload/fail_payload (0.00s) === RUN TestACMEClient_FinalizeOrder -=== RUN TestACMEClient_FinalizeOrder/fail/bad-order -=== RUN TestACMEClient_FinalizeOrder/ok === RUN TestACMEClient_FinalizeOrder/fail/client-post === RUN TestACMEClient_FinalizeOrder/fail/finalizeOrder-error ---- PASS: TestACMEClient_FinalizeOrder (0.01s) - --- PASS: TestACMEClient_FinalizeOrder/fail/bad-order (0.00s) - --- PASS: TestACMEClient_FinalizeOrder/ok (0.00s) +=== RUN TestACMEClient_FinalizeOrder/fail/bad-order +=== RUN TestACMEClient_FinalizeOrder/ok +--- PASS: TestACMEClient_FinalizeOrder (0.03s) --- PASS: TestACMEClient_FinalizeOrder/fail/client-post (0.00s) --- PASS: TestACMEClient_FinalizeOrder/fail/finalizeOrder-error (0.00s) + --- PASS: TestACMEClient_FinalizeOrder/fail/bad-order (0.00s) + --- PASS: TestACMEClient_FinalizeOrder/ok (0.01s) === RUN TestACMEClient_GetAccountOrders === RUN TestACMEClient_GetAccountOrders/fail/account-not-configured === RUN TestACMEClient_GetAccountOrders/fail/client-post @@ -8650,141 +8693,141 @@ --- PASS: TestACMEClient_GetAccountOrders/fail/bad-accountOrders (0.00s) --- PASS: TestACMEClient_GetAccountOrders/ok (0.00s) === RUN TestACMEClient_GetCertificate -=== RUN TestACMEClient_GetCertificate/fail/client-post === RUN TestACMEClient_GetCertificate/fail/getAccountOrders-error === RUN TestACMEClient_GetCertificate/fail/bad-certificate === RUN TestACMEClient_GetCertificate/ok +=== RUN TestACMEClient_GetCertificate/fail/client-post --- PASS: TestACMEClient_GetCertificate (0.01s) - --- PASS: TestACMEClient_GetCertificate/fail/client-post (0.00s) - --- PASS: TestACMEClient_GetCertificate/fail/getAccountOrders-error (0.00s) + --- PASS: TestACMEClient_GetCertificate/fail/getAccountOrders-error (0.01s) --- PASS: TestACMEClient_GetCertificate/fail/bad-certificate (0.00s) --- PASS: TestACMEClient_GetCertificate/ok (0.00s) + --- PASS: TestACMEClient_GetCertificate/fail/client-post (0.00s) === RUN TestBootstrap -2025/10/26 22:11:29 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:39:58 Building new tls configuration using step-ca x509 Signer Interface === RUN TestBootstrap/ok === RUN TestBootstrap/token_err === RUN TestBootstrap/bad_claims === RUN TestBootstrap/bad_sha === RUN TestBootstrap/bad_aud ---- PASS: TestBootstrap (0.07s) +--- PASS: TestBootstrap (0.21s) --- PASS: TestBootstrap/ok (0.00s) --- PASS: TestBootstrap/token_err (0.00s) --- PASS: TestBootstrap/bad_claims (0.00s) --- PASS: TestBootstrap/bad_sha (0.00s) --- PASS: TestBootstrap/bad_aud (0.00s) === RUN TestBootstrapServerWithoutMTLS -2025/10/26 22:11:29 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 22:11:29 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:39:58 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:39:58 Building new tls configuration using step-ca x509 Signer Interface === RUN TestBootstrapServerWithoutMTLS/ok === RUN TestBootstrapServerWithoutMTLS/ok_mtls === RUN TestBootstrapServerWithoutMTLS/fail === RUN TestBootstrapServerWithoutMTLS/fail_with_TLSConfig ---- PASS: TestBootstrapServerWithoutMTLS (0.10s) - --- PASS: TestBootstrapServerWithoutMTLS/ok (0.01s) - --- PASS: TestBootstrapServerWithoutMTLS/ok_mtls (0.01s) +--- PASS: TestBootstrapServerWithoutMTLS (0.29s) + --- PASS: TestBootstrapServerWithoutMTLS/ok (0.03s) + --- PASS: TestBootstrapServerWithoutMTLS/ok_mtls (0.02s) --- PASS: TestBootstrapServerWithoutMTLS/fail (0.00s) --- PASS: TestBootstrapServerWithoutMTLS/fail_with_TLSConfig (0.00s) === RUN TestBootstrapServerWithMTLS -2025/10/26 22:11:29 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 22:11:29 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:39:58 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:39:58 Building new tls configuration using step-ca x509 Signer Interface === RUN TestBootstrapServerWithMTLS/ok === RUN TestBootstrapServerWithMTLS/ok_mtls === RUN TestBootstrapServerWithMTLS/fail === RUN TestBootstrapServerWithMTLS/fail_with_TLSConfig ---- PASS: TestBootstrapServerWithMTLS (0.10s) +--- PASS: TestBootstrapServerWithMTLS (0.22s) --- PASS: TestBootstrapServerWithMTLS/ok (0.01s) - --- PASS: TestBootstrapServerWithMTLS/ok_mtls (0.01s) + --- PASS: TestBootstrapServerWithMTLS/ok_mtls (0.02s) --- PASS: TestBootstrapServerWithMTLS/fail (0.00s) --- PASS: TestBootstrapServerWithMTLS/fail_with_TLSConfig (0.00s) === RUN TestBootstrapClient -2025/10/26 22:11:29 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 22:11:29 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:39:58 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:39:58 Building new tls configuration using step-ca x509 Signer Interface === RUN TestBootstrapClient/ok === RUN TestBootstrapClient/ok_mtls === RUN TestBootstrapClient/fail ---- PASS: TestBootstrapClient (0.08s) +--- PASS: TestBootstrapClient (0.18s) --- PASS: TestBootstrapClient/ok (0.02s) - --- PASS: TestBootstrapClient/ok_mtls (0.01s) + --- PASS: TestBootstrapClient/ok_mtls (0.02s) --- PASS: TestBootstrapClient/fail (0.00s) === RUN TestBootstrapClientServerRotation -2025/10/26 22:11:30 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 22:11:30 Serving HTTPS on 127.0.0.1:34913 ... -2025/10/26 22:11:37 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 22:11:38 Serving HTTPS on 127.0.0.1:34913 ... -2025/10/26 22:11:43 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 22:11:43 Serving HTTPS on 127.0.0.1:34913 ... -2025/10/26 22:11:48 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 22:11:48 Serving HTTPS on 127.0.0.1:34913 ... ---- PASS: TestBootstrapClientServerRotation (18.54s) +2026/11/30 06:39:59 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:39:59 Serving HTTPS on 127.0.0.1:40905 ... +2026/11/30 06:40:06 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:40:07 Serving HTTPS on 127.0.0.1:40905 ... +2026/11/30 06:40:12 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:40:12 Serving HTTPS on 127.0.0.1:40905 ... +2026/11/30 06:40:17 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:40:17 Serving HTTPS on 127.0.0.1:40905 ... +--- PASS: TestBootstrapClientServerRotation (18.61s) === RUN TestBootstrapClientServerFederation -2025/10/26 22:11:48 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 22:11:48 Serving HTTPS on 127.0.0.1:40121 ... -2025/10/26 22:11:48 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 22:11:48 Serving HTTPS on 127.0.0.1:46649 ... ---- PASS: TestBootstrapClientServerFederation (2.34s) +2026/11/30 06:40:17 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:40:17 Serving HTTPS on 127.0.0.1:35603 ... +2026/11/30 06:40:17 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:40:17 Serving HTTPS on 127.0.0.1:46077 ... +--- PASS: TestBootstrapClientServerFederation (2.24s) === RUN TestBootstrapListener -2025/10/26 22:11:50 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 22:11:50 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:40:19 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:40:19 Building new tls configuration using step-ca x509 Signer Interface === RUN TestBootstrapListener/ok === RUN TestBootstrapListener/ok_mtls === RUN TestBootstrapListener/fail ---- PASS: TestBootstrapListener (0.27s) +--- PASS: TestBootstrapListener (0.26s) --- PASS: TestBootstrapListener/ok (0.10s) - --- PASS: TestBootstrapListener/ok_mtls (0.06s) + --- PASS: TestBootstrapListener/ok_mtls (0.07s) --- PASS: TestBootstrapListener/fail (0.00s) === RUN TestCASign -2025/10/26 22:11:51 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:40:20 Building new tls configuration using step-ca x509 Signer Interface === RUN TestCASign/fail_commonname-claim === RUN TestCASign/ok === RUN TestCASign/ok-backwards-compat-missing-subject-SAN === RUN TestCASign/fail_invalid-json-body === RUN TestCASign/fail_invalid-csr-sig === RUN TestCASign/fail_unauthorized-ott ---- PASS: TestCASign (0.05s) +--- PASS: TestCASign (0.06s) --- PASS: TestCASign/fail_commonname-claim (0.00s) - --- PASS: TestCASign/ok (0.01s) + --- PASS: TestCASign/ok (0.00s) --- PASS: TestCASign/ok-backwards-compat-missing-subject-SAN (0.01s) --- PASS: TestCASign/fail_invalid-json-body (0.00s) --- PASS: TestCASign/fail_invalid-csr-sig (0.00s) --- PASS: TestCASign/fail_unauthorized-ott (0.00s) === RUN TestCAProvisioners -2025/10/26 22:11:51 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:40:20 Building new tls configuration using step-ca x509 Signer Interface === RUN TestCAProvisioners/ok --- PASS: TestCAProvisioners (0.01s) --- PASS: TestCAProvisioners/ok (0.00s) === RUN TestCAProvisionerEncryptedKey -2025/10/26 22:11:51 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:40:20 Building new tls configuration using step-ca x509 Signer Interface === RUN TestCAProvisionerEncryptedKey/not-found === RUN TestCAProvisionerEncryptedKey/ok ---- PASS: TestCAProvisionerEncryptedKey (0.01s) +--- PASS: TestCAProvisionerEncryptedKey (0.00s) --- PASS: TestCAProvisionerEncryptedKey/not-found (0.00s) --- PASS: TestCAProvisionerEncryptedKey/ok (0.00s) === RUN TestCARoot -2025/10/26 22:11:51 Building new tls configuration using step-ca x509 Signer Interface -=== RUN TestCARoot/not-found +2026/11/30 06:40:20 Building new tls configuration using step-ca x509 Signer Interface === RUN TestCARoot/success +=== RUN TestCARoot/not-found --- PASS: TestCARoot (0.01s) - --- PASS: TestCARoot/not-found (0.00s) --- PASS: TestCARoot/success (0.00s) + --- PASS: TestCARoot/not-found (0.00s) === RUN TestCAHealth -2025/10/26 22:11:51 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:40:20 Building new tls configuration using step-ca x509 Signer Interface === RUN TestCAHealth/success --- PASS: TestCAHealth (0.00s) --- PASS: TestCAHealth/success (0.00s) === RUN TestCARenew -2025/10/26 22:11:51 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:40:20 Building new tls configuration using step-ca x509 Signer Interface +=== RUN TestCARenew/success === RUN TestCARenew/request-missing-tls === RUN TestCARenew/request-missing-peer-certificate -=== RUN TestCARenew/success ---- PASS: TestCARenew (0.01s) +--- PASS: TestCARenew (0.00s) + --- PASS: TestCARenew/success (0.00s) --- PASS: TestCARenew/request-missing-tls (0.00s) --- PASS: TestCARenew/request-missing-peer-certificate (0.00s) - --- PASS: TestCARenew/success (0.00s) === RUN TestClient_Version === RUN TestClient_Version/ok === RUN TestClient_Version/500 === RUN TestClient_Version/404 ---- PASS: TestClient_Version (0.00s) +--- PASS: TestClient_Version (0.01s) --- PASS: TestClient_Version/ok (0.00s) --- PASS: TestClient_Version/500 (0.00s) --- PASS: TestClient_Version/404 (0.00s) @@ -8823,7 +8866,7 @@ === RUN TestClient_Renew/unauthorized === RUN TestClient_Renew/empty_request === RUN TestClient_Renew/nil_request ---- PASS: TestClient_Renew (0.00s) +--- PASS: TestClient_Renew (0.01s) --- PASS: TestClient_Renew/ok (0.00s) --- PASS: TestClient_Renew/unauthorized (0.00s) --- PASS: TestClient_Renew/empty_request (0.00s) @@ -8843,8 +8886,8 @@ === RUN TestClient_Rekey/unauthorized === RUN TestClient_Rekey/empty_request === RUN TestClient_Rekey/nil_request ---- PASS: TestClient_Rekey (0.00s) - --- PASS: TestClient_Rekey/ok (0.00s) +--- PASS: TestClient_Rekey (0.01s) + --- PASS: TestClient_Rekey/ok (0.01s) --- PASS: TestClient_Rekey/unauthorized (0.00s) --- PASS: TestClient_Rekey/empty_request (0.00s) --- PASS: TestClient_Rekey/nil_request (0.00s) @@ -8919,7 +8962,7 @@ --- PASS: TestClient_RootFingerprint/ok_with_error (0.01s) --- PASS: TestClient_RootFingerprint/fail (0.00s) === RUN TestClient_RootFingerprintWithServer -2025/10/26 22:11:51 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:40:20 Building new tls configuration using step-ca x509 Signer Interface --- PASS: TestClient_RootFingerprintWithServer (0.01s) === RUN TestClient_SSHBastion === RUN TestClient_SSHBastion/ok @@ -8958,7 +9001,7 @@ === RUN Test_newRequestID --- PASS: Test_newRequestID (0.00s) === RUN TestNewProvisioner -2025/10/26 22:11:51 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:40:20 Building new tls configuration using step-ca x509 Signer Interface === RUN TestNewProvisioner/ok === RUN TestNewProvisioner/ok-by-name === RUN TestNewProvisioner/ok-with-bundle @@ -8969,31 +9012,31 @@ === RUN TestNewProvisioner/fail-by-password === RUN TestNewProvisioner/fail-by-password-no-kid === RUN TestNewProvisioner/fail-bad-certificate +2026/11/30 06:40:21 http: TLS handshake error from 127.0.0.1:33910: remote error: tls: bad certificate === RUN TestNewProvisioner/fail-not-found-certificate -2025/10/26 22:11:52 http: TLS handshake error from 127.0.0.1:38806: remote error: tls: bad certificate ---- PASS: TestNewProvisioner (0.38s) - --- PASS: TestNewProvisioner/ok (0.07s) +--- PASS: TestNewProvisioner (0.40s) + --- PASS: TestNewProvisioner/ok (0.05s) --- PASS: TestNewProvisioner/ok-by-name (0.05s) - --- PASS: TestNewProvisioner/ok-with-bundle (0.07s) - --- PASS: TestNewProvisioner/ok-with-fingerprint (0.05s) + --- PASS: TestNewProvisioner/ok-with-bundle (0.05s) + --- PASS: TestNewProvisioner/ok-with-fingerprint (0.06s) --- PASS: TestNewProvisioner/fail-bad-kid (0.01s) - --- PASS: TestNewProvisioner/fail-empty-name (0.00s) + --- PASS: TestNewProvisioner/fail-empty-name (0.01s) --- PASS: TestNewProvisioner/fail-bad-name (0.01s) - --- PASS: TestNewProvisioner/fail-by-password (0.07s) - --- PASS: TestNewProvisioner/fail-by-password-no-kid (0.03s) - --- PASS: TestNewProvisioner/fail-bad-certificate (0.00s) + --- PASS: TestNewProvisioner/fail-by-password (0.06s) + --- PASS: TestNewProvisioner/fail-by-password-no-kid (0.06s) + --- PASS: TestNewProvisioner/fail-bad-certificate (0.01s) --- PASS: TestNewProvisioner/fail-not-found-certificate (0.00s) === RUN TestProvisioner_Getters ---- PASS: TestProvisioner_Getters (0.03s) +--- PASS: TestProvisioner_Getters (0.02s) === RUN TestProvisioner_Setters ---- PASS: TestProvisioner_Setters (0.03s) +--- PASS: TestProvisioner_Setters (0.02s) === RUN TestProvisioner_Token === RUN TestProvisioner_Token/ok === RUN TestProvisioner_Token/ok-with-san === RUN TestProvisioner_Token/ok-with-sans === RUN TestProvisioner_Token/fail-no-subject === RUN TestProvisioner_Token/fail-no-key ---- PASS: TestProvisioner_Token (0.02s) +--- PASS: TestProvisioner_Token (0.03s) --- PASS: TestProvisioner_Token/ok (0.00s) --- PASS: TestProvisioner_Token/ok-with-san (0.00s) --- PASS: TestProvisioner_Token/ok-with-sans (0.00s) @@ -9005,7 +9048,7 @@ === RUN TestProvisioner_IPv6Token/ok-with-sans === RUN TestProvisioner_IPv6Token/fail-no-subject === RUN TestProvisioner_IPv6Token/fail-no-key ---- PASS: TestProvisioner_IPv6Token (0.02s) +--- PASS: TestProvisioner_IPv6Token (0.03s) --- PASS: TestProvisioner_IPv6Token/ok (0.00s) --- PASS: TestProvisioner_IPv6Token/ok-with-san (0.00s) --- PASS: TestProvisioner_IPv6Token/ok-with-sans (0.00s) @@ -9052,145 +9095,145 @@ --- PASS: TestAddClientCA (0.00s) --- PASS: TestAddClientCA/ok (0.00s) === RUN TestAddRootsToRootCAs -2025/10/26 22:11:52 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:40:21 Building new tls configuration using step-ca x509 Signer Interface === RUN TestAddRootsToRootCAs/ok === RUN TestAddRootsToRootCAs/fail -2025/10/26 22:11:52 http: TLS handshake error from 127.0.0.1:35786: remote error: tls: bad certificate +2026/11/30 06:40:21 http: TLS handshake error from 127.0.0.1:50002: remote error: tls: bad certificate --- PASS: TestAddRootsToRootCAs (0.01s) --- PASS: TestAddRootsToRootCAs/ok (0.00s) --- PASS: TestAddRootsToRootCAs/fail (0.00s) === RUN TestAddRootsToClientCAs -2025/10/26 22:11:52 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:40:21 Building new tls configuration using step-ca x509 Signer Interface === RUN TestAddRootsToClientCAs/ok === RUN TestAddRootsToClientCAs/fail -2025/10/26 22:11:52 http: TLS handshake error from 127.0.0.1:39064: remote error: tls: bad certificate ---- PASS: TestAddRootsToClientCAs (0.02s) - --- PASS: TestAddRootsToClientCAs/ok (0.01s) +2026/11/30 06:40:21 http: TLS handshake error from 127.0.0.1:40354: remote error: tls: bad certificate +--- PASS: TestAddRootsToClientCAs (0.01s) + --- PASS: TestAddRootsToClientCAs/ok (0.00s) --- PASS: TestAddRootsToClientCAs/fail (0.00s) === RUN TestAddFederationToRootCAs -2025/10/26 22:11:52 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:40:21 Building new tls configuration using step-ca x509 Signer Interface === RUN TestAddFederationToRootCAs/ok === RUN TestAddFederationToRootCAs/fail -2025/10/26 22:11:52 http: TLS handshake error from 127.0.0.1:54302: remote error: tls: bad certificate +2026/11/30 06:40:21 http: TLS handshake error from 127.0.0.1:34862: remote error: tls: bad certificate --- PASS: TestAddFederationToRootCAs (0.01s) - --- PASS: TestAddFederationToRootCAs/ok (0.01s) + --- PASS: TestAddFederationToRootCAs/ok (0.00s) --- PASS: TestAddFederationToRootCAs/fail (0.00s) === RUN TestAddFederationToClientCAs -2025/10/26 22:11:52 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:40:21 Building new tls configuration using step-ca x509 Signer Interface === RUN TestAddFederationToClientCAs/ok === RUN TestAddFederationToClientCAs/fail -2025/10/26 22:11:52 http: TLS handshake error from 127.0.0.1:53624: remote error: tls: bad certificate ---- PASS: TestAddFederationToClientCAs (0.01s) - --- PASS: TestAddFederationToClientCAs/ok (0.01s) +2026/11/30 06:40:21 http: TLS handshake error from 127.0.0.1:50564: remote error: tls: bad certificate +--- PASS: TestAddFederationToClientCAs (0.02s) + --- PASS: TestAddFederationToClientCAs/ok (0.00s) --- PASS: TestAddFederationToClientCAs/fail (0.00s) === RUN TestAddRootsToCAs -2025/10/26 22:11:52 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:40:21 Building new tls configuration using step-ca x509 Signer Interface === RUN TestAddRootsToCAs/ok === RUN TestAddRootsToCAs/fail -2025/10/26 22:11:52 http: TLS handshake error from 127.0.0.1:38776: remote error: tls: bad certificate ---- PASS: TestAddRootsToCAs (0.02s) - --- PASS: TestAddRootsToCAs/ok (0.01s) - --- PASS: TestAddRootsToCAs/fail (0.01s) +2026/11/30 06:40:21 http: TLS handshake error from 127.0.0.1:60140: remote error: tls: bad certificate +--- PASS: TestAddRootsToCAs (0.01s) + --- PASS: TestAddRootsToCAs/ok (0.00s) + --- PASS: TestAddRootsToCAs/fail (0.00s) === RUN TestAddFederationToCAs -2025/10/26 22:11:52 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:40:21 Building new tls configuration using step-ca x509 Signer Interface === RUN TestAddFederationToCAs/ok === RUN TestAddFederationToCAs/fail -2025/10/26 22:11:52 http: TLS handshake error from 127.0.0.1:56764: remote error: tls: bad certificate +2026/11/30 06:40:21 http: TLS handshake error from 127.0.0.1:35212: remote error: tls: bad certificate --- PASS: TestAddFederationToCAs (0.01s) --- PASS: TestAddFederationToCAs/ok (0.00s) --- PASS: TestAddFederationToCAs/fail (0.00s) === RUN TestClient_GetServerTLSConfig_http -2025/10/26 22:11:52 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:40:21 Building new tls configuration using step-ca x509 Signer Interface === RUN TestClient_GetServerTLSConfig_http/with_transport -2025/10/26 22:11:52 Building new tls configuration using step-ca x509 Signer Interface -=== RUN TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:38687 -=== RUN TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:44175 +2026/11/30 06:40:21 Building new tls configuration using step-ca x509 Signer Interface +=== RUN TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:37223 +=== RUN TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:41943 === RUN TestClient_GetServerTLSConfig_http/with_tlsConfig -2025/10/26 22:11:52 Building new tls configuration using step-ca x509 Signer Interface -=== RUN TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:38687 -=== RUN TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:44175 +2026/11/30 06:40:21 Building new tls configuration using step-ca x509 Signer Interface +=== RUN TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:41943 +=== RUN TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:37223 === RUN TestClient_GetServerTLSConfig_http/with_no_ClientCert -2025/10/26 22:11:52 Building new tls configuration using step-ca x509 Signer Interface -=== RUN TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:38687/no-cert -=== RUN TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:44175/no-cert -2025/10/26 22:11:52 http: TLS handshake error from 127.0.0.1:58778: tls: client didn't provide a certificate +2026/11/30 06:40:21 Building new tls configuration using step-ca x509 Signer Interface +=== RUN TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:41943/no-cert +=== RUN TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:37223/no-cert +2026/11/30 06:40:21 http: TLS handshake error from 127.0.0.1:51116: tls: client didn't provide a certificate === RUN TestClient_GetServerTLSConfig_http/fail_with_default -2025/10/26 22:11:52 Building new tls configuration using step-ca x509 Signer Interface -=== RUN TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:38687/no-cert -2025/10/26 22:11:52 http: TLS handshake error from 127.0.0.1:43310: remote error: tls: bad certificate -=== RUN TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:44175/no-cert -2025/10/26 22:11:52 http: TLS handshake error from 127.0.0.1:58788: remote error: tls: bad certificate ---- PASS: TestClient_GetServerTLSConfig_http (0.36s) - --- PASS: TestClient_GetServerTLSConfig_http/with_transport (0.08s) - --- PASS: TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:38687 (0.01s) - --- PASS: TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:44175 (0.01s) - --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig (0.08s) - --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:38687 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:44175 (0.01s) - --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert (0.08s) - --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:38687/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:44175/no-cert (0.01s) - --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default (0.04s) - --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:38687/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:44175/no-cert (0.00s) +2026/11/30 06:40:21 Building new tls configuration using step-ca x509 Signer Interface +=== RUN TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:41943/no-cert +=== RUN TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:37223/no-cert +2026/11/30 06:40:21 http: TLS handshake error from 127.0.0.1:58560: remote error: tls: bad certificate +2026/11/30 06:40:21 http: TLS handshake error from 127.0.0.1:51120: read tcp 127.0.0.1:37223->127.0.0.1:51120: use of closed network connection +--- PASS: TestClient_GetServerTLSConfig_http (0.21s) + --- PASS: TestClient_GetServerTLSConfig_http/with_transport (0.04s) + --- PASS: TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:37223 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:41943 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig (0.04s) + --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:41943 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:37223 (0.01s) + --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert (0.05s) + --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:41943/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:37223/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default (0.03s) + --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:41943/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:37223/no-cert (0.00s) === RUN TestClient_GetServerTLSConfig_renew -2025/10/26 22:11:52 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:40:21 Building new tls configuration using step-ca x509 Signer Interface === RUN TestClient_GetServerTLSConfig_renew/with_transport -=== RUN TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:45247 -=== RUN TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:46715 +=== RUN TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:38091 +=== RUN TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:34693 === RUN TestClient_GetServerTLSConfig_renew/with_tlsConfig -=== RUN TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:45247 -=== RUN TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:46715 +=== RUN TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:38091 +=== RUN TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:34693 === RUN TestClient_GetServerTLSConfig_renew/with_no_ClientCert -=== RUN TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:45247/no-cert -=== RUN TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:46715/no-cert -2025/10/26 22:11:53 http: TLS handshake error from 127.0.0.1:37754: tls: client didn't provide a certificate +=== RUN TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:38091/no-cert +=== RUN TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:34693/no-cert +2026/11/30 06:40:21 http: TLS handshake error from 127.0.0.1:58064: tls: client didn't provide a certificate === RUN TestClient_GetServerTLSConfig_renew/fail_with_default -=== RUN TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:45247/no-cert -2025/10/26 22:11:53 http: TLS handshake error from 127.0.0.1:59840: remote error: tls: bad certificate -=== RUN TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:46715/no-cert -2025/10/26 22:11:53 http: TLS handshake error from 127.0.0.1:37770: remote error: tls: bad certificate -2025/10/26 22:11:53 Sleeping for 5s ... +=== RUN TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:38091/no-cert +=== RUN TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:34693/no-cert +2026/11/30 06:40:21 http: TLS handshake error from 127.0.0.1:46994: remote error: tls: bad certificate +2026/11/30 06:40:21 Sleeping for 5s ... +2026/11/30 06:40:21 http: TLS handshake error from 127.0.0.1:58072: remote error: tls: bad certificate === RUN TestClient_GetServerTLSConfig_renew/renewed_with_transport -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:46715 -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:45247 +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:38091 +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:34693 === RUN TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:45247 -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:46715 +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:38091 +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:34693 === RUN TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:45247/no-cert -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:46715/no-cert -2025/10/26 22:11:58 http: TLS handshake error from 127.0.0.1:42796: tls: client didn't provide a certificate +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:38091/no-cert +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:34693/no-cert +2026/11/30 06:40:26 http: TLS handshake error from 127.0.0.1:42832: tls: client didn't provide a certificate === RUN TestClient_GetServerTLSConfig_renew/renewed_fail_with_default -=== RUN TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:45247/no-cert -2025/10/26 22:11:58 http: TLS handshake error from 127.0.0.1:34988: remote error: tls: bad certificate -=== RUN TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:46715/no-cert -2025/10/26 22:11:58 http: TLS handshake error from 127.0.0.1:42812: remote error: tls: bad certificate ---- PASS: TestClient_GetServerTLSConfig_renew (5.23s) +=== RUN TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:38091/no-cert +=== RUN TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:34693/no-cert +2026/11/30 06:40:26 http: TLS handshake error from 127.0.0.1:44184: remote error: tls: bad certificate +2026/11/30 06:40:26 http: TLS handshake error from 127.0.0.1:42838: remote error: tls: bad certificate +--- PASS: TestClient_GetServerTLSConfig_renew (5.21s) --- PASS: TestClient_GetServerTLSConfig_renew/with_transport (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:45247 (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:46715 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:38091 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:34693 (0.00s) --- PASS: TestClient_GetServerTLSConfig_renew/with_tlsConfig (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:45247 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:46715 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:45247/no-cert (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:46715/no-cert (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:38091 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:34693 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:38091/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:34693/no-cert (0.00s) --- PASS: TestClient_GetServerTLSConfig_renew/fail_with_default (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:45247/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:46715/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:38091/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:34693/no-cert (0.01s) --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport (0.02s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:46715 (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:45247 (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig (0.02s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:45247 (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:46715 (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:38091 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:34693 (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig (0.03s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:38091 (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:34693 (0.02s) --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:45247/no-cert (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:46715/no-cert (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:38091/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:34693/no-cert (0.01s) --- PASS: TestClient_GetServerTLSConfig_renew/renewed_fail_with_default (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:45247/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:46715/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:38091/no-cert (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:34693/no-cert (0.00s) === RUN TestCertificate === RUN TestCertificate/ok === RUN TestCertificate/fail @@ -9212,11 +9255,11 @@ --- PASS: TestRootCertificateCertificate/fail (0.00s) --- PASS: TestRootCertificateCertificate/no_tls (0.00s) PASS -ok github.com/smallstep/certificates/ca 28.619s +ok github.com/smallstep/certificates/ca 29.111s ? github.com/smallstep/certificates/ca/client [no test files] === RUN TestClient -2025/10/26 22:11:29 http: TLS handshake error from 127.0.0.1:53598: read tcp 127.0.0.1:44647->127.0.0.1:53598: use of closed network connection ---- PASS: TestClient (0.01s) +2026/11/30 06:39:57 http: TLS handshake error from 127.0.0.1:38456: read tcp 127.0.0.1:41287->127.0.0.1:38456: use of closed network connection +--- PASS: TestClient (0.04s) === RUN TestClient_ResolveReference === RUN TestClient_ResolveReference/ok === RUN TestClient_ResolveReference/ok#01 @@ -9234,7 +9277,7 @@ === RUN TestLoadClient/fail_ca === RUN TestLoadClient/fail_root === RUN TestLoadClient/fail_type ---- PASS: TestLoadClient (0.01s) +--- PASS: TestLoadClient (0.00s) --- PASS: TestLoadClient/ok (0.00s) --- PASS: TestLoadClient/fail_identity (0.00s) --- PASS: TestLoadClient/fail_identity#01 (0.00s) @@ -9305,13 +9348,13 @@ === RUN TestIdentity_TLSCertificate/fail_certificate === RUN TestIdentity_TLSCertificate/fail_not_after === RUN TestIdentity_TLSCertificate/fail_not_before ---- PASS: TestIdentity_TLSCertificate (0.00s) +--- PASS: TestIdentity_TLSCertificate (0.01s) --- PASS: TestIdentity_TLSCertificate/ok_mTLS (0.00s) --- PASS: TestIdentity_TLSCertificate/ok_tTLS (0.00s) --- PASS: TestIdentity_TLSCertificate/ok_disabled (0.00s) --- PASS: TestIdentity_TLSCertificate/fail_type (0.00s) --- PASS: TestIdentity_TLSCertificate/fail_certificate (0.00s) - --- PASS: TestIdentity_TLSCertificate/fail_not_after (0.00s) + --- PASS: TestIdentity_TLSCertificate/fail_not_after (0.01s) --- PASS: TestIdentity_TLSCertificate/fail_not_before (0.00s) === RUN Test_fileExists === RUN Test_fileExists/ok @@ -9350,7 +9393,7 @@ === RUN TestIdentity_GetCertPool/ok_nil === RUN TestIdentity_GetCertPool/fail_missing === RUN TestIdentity_GetCertPool/fail_no_cert ---- PASS: TestIdentity_GetCertPool (0.01s) +--- PASS: TestIdentity_GetCertPool (0.00s) --- PASS: TestIdentity_GetCertPool/ok (0.00s) --- PASS: TestIdentity_GetCertPool/ok_nil (0.00s) --- PASS: TestIdentity_GetCertPool/fail_missing (0.00s) @@ -9363,7 +9406,7 @@ === RUN TestIdentity_Renew/fail_renew === RUN TestIdentity_Renew/fail_certificate === RUN TestIdentity_Renew/fail_write_identity ---- PASS: TestIdentity_Renew (0.00s) +--- PASS: TestIdentity_Renew (0.01s) --- PASS: TestIdentity_Renew/ok (0.00s) --- PASS: TestIdentity_Renew/ok_old (0.00s) --- PASS: TestIdentity_Renew/ok_disabled (0.00s) @@ -9372,7 +9415,7 @@ --- PASS: TestIdentity_Renew/fail_certificate (0.00s) --- PASS: TestIdentity_Renew/fail_write_identity (0.00s) PASS -ok github.com/smallstep/certificates/ca/identity 0.108s +ok github.com/smallstep/certificates/ca/identity 0.192s === RUN TestNew === RUN TestNew/ok_default === RUN TestNew/ok_softcas @@ -9400,7 +9443,7 @@ --- PASS: TestNewCreator/fail_type (0.00s) --- PASS: TestNewCreator/fail_no_creator (0.00s) PASS -ok github.com/smallstep/certificates/cas 0.027s +ok github.com/smallstep/certificates/cas 0.039s === RUN TestCreateCertificateAuthorityExtension === RUN TestCreateCertificateAuthorityExtension/ok === RUN TestCreateCertificateAuthorityExtension/ok#01 @@ -9465,9 +9508,9 @@ --- PASS: TestOptions_Is/fail#01 (0.00s) === RUN TestRegister === RUN TestRegister/ok -&{{} {{{} 1} {0 0} {[] {} 0x400021fc20} 0x470f20 0x40acb0 10103625803337957731}} +&{{} {{{} 1} {0 0} {[] {} 0x40000f8be0} 0x470f20 0x40acb0 18079112919517509483}} === RUN TestRegister/error -&{{} {{{} 1} {0 0} {[] {} 0x400021fc20} 0x470f20 0x40acb0 10103625803337957731}} +&{{} {{{} 1} {0 0} {[] {} 0x40000f8be0} 0x470f20 0x40acb0 18079112919517509483}} --- PASS: TestRegister (0.00s) --- PASS: TestRegister/ok (0.00s) --- PASS: TestRegister/error (0.00s) @@ -9528,7 +9571,7 @@ --- PASS: TestValidationError_StatusCode/default (0.00s) --- PASS: TestValidationError_StatusCode/with_message (0.00s) PASS -ok github.com/smallstep/certificates/cas/apiv1 0.027s +ok github.com/smallstep/certificates/cas/apiv1 0.052s === RUN TestNew === RUN TestNew/ok === RUN TestNew/ok_with_callback @@ -9549,7 +9592,7 @@ === RUN TestSoftCAS_GetSigner/ok_signer === RUN TestSoftCAS_GetSigner/ok_certificateSigner === RUN TestSoftCAS_GetSigner/fail_certificateSigner ---- PASS: TestSoftCAS_GetSigner (0.00s) +--- PASS: TestSoftCAS_GetSigner (0.02s) --- PASS: TestSoftCAS_GetSigner/ok_signer (0.00s) --- PASS: TestSoftCAS_GetSigner/ok_certificateSigner (0.00s) --- PASS: TestSoftCAS_GetSigner/fail_certificateSigner (0.00s) @@ -9574,9 +9617,9 @@ --- PASS: TestSoftCAS_CreateCertificate/fail_CreateCertificate (0.00s) --- PASS: TestSoftCAS_CreateCertificate/fail_with_callback (0.00s) === RUN TestSoftCAS_CreateCertificate_pss ---- PASS: TestSoftCAS_CreateCertificate_pss (0.65s) +--- PASS: TestSoftCAS_CreateCertificate_pss (1.63s) === RUN TestSoftCAS_CreateCertificate_ec_rsa ---- PASS: TestSoftCAS_CreateCertificate_ec_rsa (0.66s) +--- PASS: TestSoftCAS_CreateCertificate_ec_rsa (0.31s) === RUN TestSoftCAS_RenewCertificate === RUN TestSoftCAS_RenewCertificate/ok === RUN TestSoftCAS_RenewCertificate/ok_signature_algorithm @@ -9585,7 +9628,7 @@ === RUN TestSoftCAS_RenewCertificate/fail_lifetime === RUN TestSoftCAS_RenewCertificate/fail_CreateCertificate === RUN TestSoftCAS_RenewCertificate/fail_with_callback ---- PASS: TestSoftCAS_RenewCertificate (0.00s) +--- PASS: TestSoftCAS_RenewCertificate (0.01s) --- PASS: TestSoftCAS_RenewCertificate/ok (0.00s) --- PASS: TestSoftCAS_RenewCertificate/ok_signature_algorithm (0.00s) --- PASS: TestSoftCAS_RenewCertificate/ok_with_callback (0.00s) @@ -9656,7 +9699,7 @@ === RUN Test_isRSA/ECDSAWithSHA384 === RUN Test_isRSA/ECDSAWithSHA512 === RUN Test_isRSA/PureEd25519 ---- PASS: Test_isRSA (0.01s) +--- PASS: Test_isRSA (0.00s) --- PASS: Test_isRSA/SHA256WithRSA (0.00s) --- PASS: Test_isRSA/SHA384WithRSA (0.00s) --- PASS: Test_isRSA/SHA512WithRSA (0.00s) @@ -9668,7 +9711,7 @@ --- PASS: Test_isRSA/ECDSAWithSHA512 (0.00s) --- PASS: Test_isRSA/PureEd25519 (0.00s) PASS -ok github.com/smallstep/certificates/cas/softcas 1.398s +ok github.com/smallstep/certificates/cas/softcas 2.062s === RUN Test_newServerEndpointID === RUN Test_newServerEndpointID/ok === RUN Test_newServerEndpointID/ok_uuid @@ -9679,7 +9722,7 @@ === RUN Test_newStepIssuer/x5c === RUN Test_newStepIssuer/jwk === RUN Test_newStepIssuer/fail ---- PASS: Test_newStepIssuer (0.13s) +--- PASS: Test_newStepIssuer (0.25s) --- PASS: Test_newStepIssuer/x5c (0.00s) --- PASS: Test_newStepIssuer/jwk (0.00s) --- PASS: Test_newStepIssuer/fail (0.00s) @@ -9688,7 +9731,7 @@ === RUN Test_jwkIssuer_SignToken/ok_ra === RUN Test_jwkIssuer_SignToken/ok_ra_endpoint_id === RUN Test_jwkIssuer_SignToken/fail ---- PASS: Test_jwkIssuer_SignToken (0.13s) +--- PASS: Test_jwkIssuer_SignToken (0.29s) --- PASS: Test_jwkIssuer_SignToken/ok (0.00s) --- PASS: Test_jwkIssuer_SignToken/ok_ra (0.00s) --- PASS: Test_jwkIssuer_SignToken/ok_ra_endpoint_id (0.00s) @@ -9696,23 +9739,23 @@ === RUN Test_jwkIssuer_RevokeToken === RUN Test_jwkIssuer_RevokeToken/ok === RUN Test_jwkIssuer_RevokeToken/ok#01 ---- PASS: Test_jwkIssuer_RevokeToken (0.14s) +--- PASS: Test_jwkIssuer_RevokeToken (0.45s) --- PASS: Test_jwkIssuer_RevokeToken/ok (0.00s) --- PASS: Test_jwkIssuer_RevokeToken/ok#01 (0.00s) === RUN Test_jwkIssuer_Lifetime === RUN Test_jwkIssuer_Lifetime/ok ---- PASS: Test_jwkIssuer_Lifetime (0.15s) +--- PASS: Test_jwkIssuer_Lifetime (0.39s) --- PASS: Test_jwkIssuer_Lifetime/ok (0.00s) === RUN Test_newJWKSignerFromEncryptedKey === RUN Test_newJWKSignerFromEncryptedKey/ok === RUN Test_newJWKSignerFromEncryptedKey/fail_decrypt === RUN Test_newJWKSignerFromEncryptedKey/fail_unmarshal === RUN Test_newJWKSignerFromEncryptedKey/fail_not_signer ---- PASS: Test_newJWKSignerFromEncryptedKey (0.89s) - --- PASS: Test_newJWKSignerFromEncryptedKey/ok (0.13s) - --- PASS: Test_newJWKSignerFromEncryptedKey/fail_decrypt (0.13s) - --- PASS: Test_newJWKSignerFromEncryptedKey/fail_unmarshal (0.14s) - --- PASS: Test_newJWKSignerFromEncryptedKey/fail_not_signer (0.17s) +--- PASS: Test_newJWKSignerFromEncryptedKey (2.28s) + --- PASS: Test_newJWKSignerFromEncryptedKey/ok (0.31s) + --- PASS: Test_newJWKSignerFromEncryptedKey/fail_decrypt (0.30s) + --- PASS: Test_newJWKSignerFromEncryptedKey/fail_unmarshal (0.38s) + --- PASS: Test_newJWKSignerFromEncryptedKey/fail_not_signer (0.45s) === RUN Test_init --- PASS: Test_init (0.00s) === RUN TestNew @@ -9738,22 +9781,22 @@ === RUN TestNew/fail_new_jwk_issuer === RUN TestNew/bad_issuer === RUN TestNew/bad_issuer_type ---- PASS: TestNew (0.49s) +--- PASS: TestNew (1.23s) --- PASS: TestNew/ok (0.00s) --- PASS: TestNew/ok_jwk (0.00s) - --- PASS: TestNew/ok_jwk_provisioners (0.14s) + --- PASS: TestNew/ok_jwk_provisioners (0.38s) --- PASS: TestNew/ok_ca_getter (0.00s) --- PASS: TestNew/fail_authority (0.00s) --- PASS: TestNew/fail_fingerprint (0.00s) --- PASS: TestNew/fail_type (0.00s) --- PASS: TestNew/fail_provisioner (0.00s) - --- PASS: TestNew/fail_provisioner_jwk (0.00s) + --- PASS: TestNew/fail_provisioner_jwk (0.01s) --- PASS: TestNew/fail_provisioner_not_found (0.00s) - --- PASS: TestNew/fail_invalid_password (0.14s) + --- PASS: TestNew/fail_invalid_password (0.33s) --- PASS: TestNew/fail_no_key (0.00s) --- PASS: TestNew/fail_certificate (0.00s) --- PASS: TestNew/fail_key (0.00s) - --- PASS: TestNew/fail_key_jwk (0.01s) + --- PASS: TestNew/fail_key_jwk (0.00s) --- PASS: TestNew/bad_authority (0.00s) --- PASS: TestNew/fail_parse_url (0.00s) --- PASS: TestNew/fail_new_client (0.00s) @@ -9779,10 +9822,10 @@ === RUN TestStepCAS_CreateCertificate/fail_sign_token === RUN TestStepCAS_CreateCertificate/fail_client_sign === RUN TestStepCAS_CreateCertificate/fail_password ---- PASS: TestStepCAS_CreateCertificate (0.59s) +--- PASS: TestStepCAS_CreateCertificate (0.66s) --- PASS: TestStepCAS_CreateCertificate/ok (0.00s) --- PASS: TestStepCAS_CreateCertificate/ok_with_different_CSR (0.00s) - --- PASS: TestStepCAS_CreateCertificate/ok_with_password (0.13s) + --- PASS: TestStepCAS_CreateCertificate/ok_with_password (0.14s) --- PASS: TestStepCAS_CreateCertificate/ok_jwk (0.00s) --- PASS: TestStepCAS_CreateCertificate/ok_jwk_with_password (0.00s) --- PASS: TestStepCAS_CreateCertificate/ok_with_provisioner (0.00s) @@ -9797,7 +9840,7 @@ === RUN TestStepCAS_RenewCertificate/ok === RUN TestStepCAS_RenewCertificate/fail_no_token === RUN TestStepCAS_RenewCertificate/fail_bad_token ---- PASS: TestStepCAS_RenewCertificate (0.00s) +--- PASS: TestStepCAS_RenewCertificate (0.01s) --- PASS: TestStepCAS_RenewCertificate/ok (0.00s) --- PASS: TestStepCAS_RenewCertificate/fail_no_token (0.00s) --- PASS: TestStepCAS_RenewCertificate/fail_bad_token (0.00s) @@ -9814,11 +9857,11 @@ === RUN TestStepCAS_RevokeCertificate/fail_revoke_token === RUN TestStepCAS_RevokeCertificate/fail_client_revoke === RUN TestStepCAS_RevokeCertificate/fail_password ---- PASS: TestStepCAS_RevokeCertificate (0.66s) - --- PASS: TestStepCAS_RevokeCertificate/ok_serial_number (0.00s) +--- PASS: TestStepCAS_RevokeCertificate (1.32s) + --- PASS: TestStepCAS_RevokeCertificate/ok_serial_number (0.01s) --- PASS: TestStepCAS_RevokeCertificate/ok_certificate (0.00s) --- PASS: TestStepCAS_RevokeCertificate/ok_both (0.00s) - --- PASS: TestStepCAS_RevokeCertificate/ok_with_password (0.13s) + --- PASS: TestStepCAS_RevokeCertificate/ok_with_password (0.27s) --- PASS: TestStepCAS_RevokeCertificate/ok_serial_number_jwk (0.00s) --- PASS: TestStepCAS_RevokeCertificate/ok_certificate_jwk (0.00s) --- PASS: TestStepCAS_RevokeCertificate/ok_both_jwk (0.00s) @@ -9826,7 +9869,7 @@ --- PASS: TestStepCAS_RevokeCertificate/fail_request (0.00s) --- PASS: TestStepCAS_RevokeCertificate/fail_revoke_token (0.00s) --- PASS: TestStepCAS_RevokeCertificate/fail_client_revoke (0.00s) - --- PASS: TestStepCAS_RevokeCertificate/fail_password (0.13s) + --- PASS: TestStepCAS_RevokeCertificate/fail_password (0.27s) === RUN TestStepCAS_GetCertificateAuthority === RUN TestStepCAS_GetCertificateAuthority/ok === RUN TestStepCAS_GetCertificateAuthority/ok_jwk @@ -9842,7 +9885,7 @@ === RUN Test_x5cIssuer_SignToken/fail_crt === RUN Test_x5cIssuer_SignToken/fail_key === RUN Test_x5cIssuer_SignToken/fail_no_signer ---- PASS: Test_x5cIssuer_SignToken (0.00s) +--- PASS: Test_x5cIssuer_SignToken (0.01s) --- PASS: Test_x5cIssuer_SignToken/ok (0.00s) --- PASS: Test_x5cIssuer_SignToken/ok_ra (0.00s) --- PASS: Test_x5cIssuer_SignToken/ok_ra_endpoint_id (0.00s) @@ -9881,7 +9924,7 @@ === RUN Test_newJoseSigner/rsa === RUN Test_newJoseSigner/fail_p224 === RUN Test_newJoseSigner/fail_signer ---- PASS: Test_newJoseSigner (0.56s) +--- PASS: Test_newJoseSigner (0.34s) --- PASS: Test_newJoseSigner/p256 (0.00s) --- PASS: Test_newJoseSigner/p384 (0.00s) --- PASS: Test_newJoseSigner/p521 (0.00s) @@ -9890,18 +9933,18 @@ --- PASS: Test_newJoseSigner/fail_p224 (0.00s) --- PASS: Test_newJoseSigner/fail_signer (0.00s) PASS -ok github.com/smallstep/certificates/cas/stepcas 4.125s +ok github.com/smallstep/certificates/cas/stepcas 8.225s ? github.com/smallstep/certificates/commands [no test files] === RUN TestIsRevoked +=== RUN TestIsRevoked/false/ErrNotFound === RUN TestIsRevoked/error/checking_bucket === RUN TestIsRevoked/true === RUN TestIsRevoked/false/nil_db -=== RUN TestIsRevoked/false/ErrNotFound --- PASS: TestIsRevoked (0.00s) + --- PASS: TestIsRevoked/false/ErrNotFound (0.00s) --- PASS: TestIsRevoked/error/checking_bucket (0.00s) --- PASS: TestIsRevoked/true (0.00s) --- PASS: TestIsRevoked/false/nil_db (0.00s) - --- PASS: TestIsRevoked/false/ErrNotFound (0.00s) === RUN TestRevoke === RUN TestRevoke/error/force_isRevoked === RUN TestRevoke/error/was_already_revoked @@ -9951,7 +9994,7 @@ === RUN TestSimpleDB --- PASS: TestSimpleDB (0.00s) PASS -ok github.com/smallstep/certificates/db 0.032s +ok github.com/smallstep/certificates/db 0.070s === RUN TestError_MarshalJSON === RUN TestError_MarshalJSON/ok === RUN TestError_MarshalJSON/ok_no_error @@ -9999,7 +10042,7 @@ --- PASS: TestError_Unwrap_As/fail_Errorf (0.00s) --- PASS: TestError_Unwrap_As/fail_Errorf_v-wrap (0.00s) PASS -ok github.com/smallstep/certificates/errs 0.015s +ok github.com/smallstep/certificates/errs 0.049s === RUN TestUintConvertsValues --- PASS: TestUintConvertsValues (0.00s) === RUN TestUintPanicsOnNegativeValue @@ -10031,7 +10074,7 @@ === RUN TestUint16PanicsOnLargeValue --- PASS: TestUint16PanicsOnLargeValue (0.00s) PASS -ok github.com/smallstep/certificates/internal/cast 0.013s +ok github.com/smallstep/certificates/internal/cast 0.050s ? github.com/smallstep/certificates/internal/httptransport [no test files] ? github.com/smallstep/certificates/internal/metrix [no test files] ? github.com/smallstep/certificates/internal/userid [no test files] @@ -10047,9 +10090,9 @@ === RUN TestHandlingRegardlessOfOptions/500_should_be_logged_at_Error_level_for_non-health_requests === RUN TestHandlingRegardlessOfOptions/400_should_be_logged_at_Warn_level_even_for_/health_requests === RUN TestHandlingRegardlessOfOptions/500_should_be_logged_at_Error_level_even_for_/health_requests ---- PASS: TestHandlingRegardlessOfOptions (0.00s) +--- PASS: TestHandlingRegardlessOfOptions (0.01s) --- PASS: TestHandlingRegardlessOfOptions/200_should_be_logged_at_Info_level_for_non-health_requests (0.00s) - --- PASS: TestHandlingRegardlessOfOptions/400_should_be_logged_at_Warn_level_for_non-health_requests (0.00s) + --- PASS: TestHandlingRegardlessOfOptions/400_should_be_logged_at_Warn_level_for_non-health_requests (0.01s) --- PASS: TestHandlingRegardlessOfOptions/500_should_be_logged_at_Error_level_for_non-health_requests (0.00s) --- PASS: TestHandlingRegardlessOfOptions/400_should_be_logged_at_Warn_level_even_for_/health_requests (0.00s) --- PASS: TestHandlingRegardlessOfOptions/500_should_be_logged_at_Error_level_even_for_/health_requests (0.00s) @@ -10074,42 +10117,42 @@ --- PASS: TestLogRealIP/setting_is_turned_off,_True-Client-IP_header_is_set (0.00s) --- PASS: TestLogRealIP/setting_is_turned_off,_no_header_is_set (0.00s) PASS -ok github.com/smallstep/certificates/logging 0.018s +ok github.com/smallstep/certificates/logging 0.048s === RUN Test_Middleware === RUN Test_Middleware/default-request-id === RUN Test_Middleware/no-request-id === RUN Test_Middleware/empty-header === RUN Test_Middleware/fallback-header-name ---- PASS: Test_Middleware (0.00s) +--- PASS: Test_Middleware (0.01s) --- PASS: Test_Middleware/default-request-id (0.00s) --- PASS: Test_Middleware/no-request-id (0.00s) --- PASS: Test_Middleware/empty-header (0.00s) --- PASS: Test_Middleware/fallback-header-name (0.00s) PASS -ok github.com/smallstep/certificates/middleware/requestid 0.021s +ok github.com/smallstep/certificates/middleware/requestid 0.034s ? github.com/smallstep/certificates/monitoring [no test files] === RUN TestPKI_WriteHelmTemplate === RUN TestPKI_WriteHelmTemplate/ok/simple +=== RUN TestPKI_WriteHelmTemplate/ok/with-provisioner +=== RUN TestPKI_WriteHelmTemplate/ok/with-ssh-and-duplicate-provisioner-name +=== RUN TestPKI_WriteHelmTemplate/fail/authority.ProvisionerToCertificates === RUN TestPKI_WriteHelmTemplate/ok/with-acme === RUN TestPKI_WriteHelmTemplate/ok/with-acme-and-duplicate-provisioner-name === RUN TestPKI_WriteHelmTemplate/ok/with-admin -=== RUN TestPKI_WriteHelmTemplate/ok/with-ssh-and-acme -=== RUN TestPKI_WriteHelmTemplate/fail/authority.ProvisionerToCertificates -=== RUN TestPKI_WriteHelmTemplate/ok/with-provisioner === RUN TestPKI_WriteHelmTemplate/ok/with-ssh -=== RUN TestPKI_WriteHelmTemplate/ok/with-ssh-and-duplicate-provisioner-name ---- PASS: TestPKI_WriteHelmTemplate (0.10s) +=== RUN TestPKI_WriteHelmTemplate/ok/with-ssh-and-acme +--- PASS: TestPKI_WriteHelmTemplate (0.17s) --- PASS: TestPKI_WriteHelmTemplate/ok/simple (0.01s) + --- PASS: TestPKI_WriteHelmTemplate/ok/with-provisioner (0.01s) + --- PASS: TestPKI_WriteHelmTemplate/ok/with-ssh-and-duplicate-provisioner-name (0.03s) + --- PASS: TestPKI_WriteHelmTemplate/fail/authority.ProvisionerToCertificates (0.00s) --- PASS: TestPKI_WriteHelmTemplate/ok/with-acme (0.01s) - --- PASS: TestPKI_WriteHelmTemplate/ok/with-acme-and-duplicate-provisioner-name (0.01s) - --- PASS: TestPKI_WriteHelmTemplate/ok/with-admin (0.00s) + --- PASS: TestPKI_WriteHelmTemplate/ok/with-acme-and-duplicate-provisioner-name (0.00s) + --- PASS: TestPKI_WriteHelmTemplate/ok/with-admin (0.03s) + --- PASS: TestPKI_WriteHelmTemplate/ok/with-ssh (0.02s) --- PASS: TestPKI_WriteHelmTemplate/ok/with-ssh-and-acme (0.01s) - --- PASS: TestPKI_WriteHelmTemplate/fail/authority.ProvisionerToCertificates (0.00s) - --- PASS: TestPKI_WriteHelmTemplate/ok/with-provisioner (0.02s) - --- PASS: TestPKI_WriteHelmTemplate/ok/with-ssh (0.01s) - --- PASS: TestPKI_WriteHelmTemplate/ok/with-ssh-and-duplicate-provisioner-name (0.02s) PASS -ok github.com/smallstep/certificates/pki 0.188s +ok github.com/smallstep/certificates/pki 0.328s === RUN TestNamePolicyEngine_matchDomainConstraint === RUN TestNamePolicyEngine_matchDomainConstraint/fail/wildcard === RUN TestNamePolicyEngine_matchDomainConstraint/fail/wildcard-literal @@ -10187,7 +10230,7 @@ === RUN TestNamePolicyEngine_matchEmailConstraint/ok/specific-mail === RUN TestNamePolicyEngine_matchEmailConstraint/ok/wildcard-tld === RUN TestNamePolicyEngine_matchEmailConstraint/ok/different-case ---- PASS: TestNamePolicyEngine_matchEmailConstraint (0.00s) +--- PASS: TestNamePolicyEngine_matchEmailConstraint (0.01s) --- PASS: TestNamePolicyEngine_matchEmailConstraint/fail/asterisk-label (0.00s) --- PASS: TestNamePolicyEngine_matchEmailConstraint/fail/asterisk-inside-domain (0.00s) --- PASS: TestNamePolicyEngine_matchEmailConstraint/fail/parse-email (0.00s) @@ -10346,7 +10389,7 @@ === RUN TestNamePolicyEngine_X509_AllAllowed/ok/combined-simple-permitted === RUN TestNamePolicyEngine_X509_AllAllowed/ok/combined-simple-permitted-without-subject-verification === RUN TestNamePolicyEngine_X509_AllAllowed/ok/combined-simple-all ---- PASS: TestNamePolicyEngine_X509_AllAllowed (0.02s) +--- PASS: TestNamePolicyEngine_X509_AllAllowed (0.04s) --- PASS: TestNamePolicyEngine_X509_AllAllowed/fail/dns-permitted (0.00s) --- PASS: TestNamePolicyEngine_X509_AllAllowed/fail/dns-permitted-wildcard-literal-x509 (0.00s) --- PASS: TestNamePolicyEngine_X509_AllAllowed/fail/dns-permitted-single-host (0.00s) @@ -10523,27 +10566,27 @@ --- PASS: TestNamePolicyEngine_SSH_ArePrincipalsAllowed/ok/combined-user-with-excluded-user-principal (0.00s) --- PASS: TestNamePolicyEngine_SSH_ArePrincipalsAllowed/ok/combined-host (0.00s) === RUN Test_splitSSHPrincipals -=== RUN Test_splitSSHPrincipals/ok/user-localhost -=== RUN Test_splitSSHPrincipals/fail/user-ip -=== RUN Test_splitSSHPrincipals/fail/host-uri -=== RUN Test_splitSSHPrincipals/ok/host-ip -=== RUN Test_splitSSHPrincipals/ok/user-username-with-period === RUN Test_splitSSHPrincipals/ok/user-maillike === RUN Test_splitSSHPrincipals/fail/unexpected-cert-type +=== RUN Test_splitSSHPrincipals/fail/user-ip === RUN Test_splitSSHPrincipals/fail/user-uri === RUN Test_splitSSHPrincipals/ok/host-dns +=== RUN Test_splitSSHPrincipals/ok/host-ip +=== RUN Test_splitSSHPrincipals/ok/user-localhost +=== RUN Test_splitSSHPrincipals/fail/host-uri === RUN Test_splitSSHPrincipals/ok/host-email ---- PASS: Test_splitSSHPrincipals (0.00s) - --- PASS: Test_splitSSHPrincipals/ok/user-localhost (0.00s) - --- PASS: Test_splitSSHPrincipals/fail/user-ip (0.00s) - --- PASS: Test_splitSSHPrincipals/fail/host-uri (0.00s) - --- PASS: Test_splitSSHPrincipals/ok/host-ip (0.00s) - --- PASS: Test_splitSSHPrincipals/ok/user-username-with-period (0.00s) +=== RUN Test_splitSSHPrincipals/ok/user-username-with-period +--- PASS: Test_splitSSHPrincipals (0.01s) --- PASS: Test_splitSSHPrincipals/ok/user-maillike (0.00s) --- PASS: Test_splitSSHPrincipals/fail/unexpected-cert-type (0.00s) + --- PASS: Test_splitSSHPrincipals/fail/user-ip (0.00s) --- PASS: Test_splitSSHPrincipals/fail/user-uri (0.00s) --- PASS: Test_splitSSHPrincipals/ok/host-dns (0.00s) + --- PASS: Test_splitSSHPrincipals/ok/host-ip (0.00s) + --- PASS: Test_splitSSHPrincipals/ok/user-localhost (0.00s) + --- PASS: Test_splitSSHPrincipals/fail/host-uri (0.00s) --- PASS: Test_splitSSHPrincipals/ok/host-email (0.00s) + --- PASS: Test_splitSSHPrincipals/ok/user-username-with-period (0.00s) === RUN Test_removeDuplicates === RUN Test_removeDuplicates/empty-slice === RUN Test_removeDuplicates/single-item @@ -10556,7 +10599,7 @@ === RUN Test_removeDuplicateIPNets/empty-slice === RUN Test_removeDuplicateIPNets/single-item === RUN Test_removeDuplicateIPNets/multiple ---- PASS: Test_removeDuplicateIPNets (0.00s) +--- PASS: Test_removeDuplicateIPNets (0.01s) --- PASS: Test_removeDuplicateIPNets/empty-slice (0.00s) --- PASS: Test_removeDuplicateIPNets/single-item (0.00s) --- PASS: Test_removeDuplicateIPNets/multiple (0.00s) @@ -10629,69 +10672,69 @@ --- PASS: Test_normalizeAndValidateEmailConstraint/ok/wildcard (0.00s) --- PASS: Test_normalizeAndValidateEmailConstraint/ok/specific-mail (0.00s) === RUN TestNew -=== RUN TestNew/fail/with-permitted-ipsOrCIDRs-ip -=== RUN TestNew/fail/with-permitted-emails -=== RUN TestNew/ok/subject-verification -=== RUN TestNew/ok/with-excluded-uris -=== RUN TestNew/fail/with-excluded-dns-domains -=== RUN TestNew/fail/with-permitted-ipsOrCIDRs-cidr -=== RUN TestNew/fail/with-excluded-emails === RUN TestNew/ok/with-excluded-ip-ranges -=== RUN TestNew/ok/with-excluded-cidrs -=== RUN TestNew/fail/with-excluded-common-name -=== RUN TestNew/fail/with-permitted-dns-domains +=== RUN TestNew/fail/with-excluded-emails +=== RUN TestNew/fail/with-permitted-uris +=== RUN TestNew/ok/literal-wildcards +=== RUN TestNew/ok/with-permitted-ip-ranges === RUN TestNew/ok/with-permitted-ipsOrCIDRs-cidr +=== RUN TestNew/ok/with-excluded-uris +=== RUN TestNew/ok/subject-verification +=== RUN TestNew/ok/with-excluded-cidrs +=== RUN TestNew/fail/with-excluded-uris +=== RUN TestNew/ok/with-permitted-dns-wildcard-domains +=== RUN TestNew/fail/with-excluded-ipsOrCIDRs-ip +=== RUN TestNew/ok/default +=== RUN TestNew/ok/with-permitted-emails +=== RUN TestNew/ok/with-excluded-principals +=== RUN TestNew/fail/with-permitted-common-name +=== RUN TestNew/fail/with-permitted-ipsOrCIDRs-ip === RUN TestNew/fail/with-excluded-ipsOrCIDRs-cidr -=== RUN TestNew/ok/with-excluded-dns-domains +=== RUN TestNew/fail/with-permitted-emails === RUN TestNew/ok/with-excluded-ipsOrCIDRs-cidr -=== RUN TestNew/ok/with-permitted-emails -=== RUN TestNew/fail/with-permitted-uris +=== RUN TestNew/ok/with-permitted-uris +=== RUN TestNew/fail/with-excluded-common-name +=== RUN TestNew/fail/with-permitted-dns-domains === RUN TestNew/ok/with-permitted-cidrs === RUN TestNew/ok/with-permitted-principals === RUN TestNew/fail/with-excluded-cidrs -=== RUN TestNew/ok/with-permitted-ip-ranges -=== RUN TestNew/ok/with-permitted-uris -=== RUN TestNew/fail/with-permitted-cidrs -=== RUN TestNew/fail/with-excluded-ipsOrCIDRs-ip -=== RUN TestNew/fail/with-excluded-uris -=== RUN TestNew/ok/default -=== RUN TestNew/ok/literal-wildcards -=== RUN TestNew/ok/with-permitted-dns-wildcard-domains === RUN TestNew/ok/with-excluded-emails -=== RUN TestNew/ok/with-excluded-principals -=== RUN TestNew/fail/with-permitted-common-name ---- PASS: TestNew (0.00s) - --- PASS: TestNew/fail/with-permitted-ipsOrCIDRs-ip (0.00s) - --- PASS: TestNew/fail/with-permitted-emails (0.00s) - --- PASS: TestNew/ok/subject-verification (0.00s) - --- PASS: TestNew/ok/with-excluded-uris (0.00s) - --- PASS: TestNew/fail/with-excluded-dns-domains (0.00s) - --- PASS: TestNew/fail/with-permitted-ipsOrCIDRs-cidr (0.00s) - --- PASS: TestNew/fail/with-excluded-emails (0.00s) +=== RUN TestNew/fail/with-excluded-dns-domains +=== RUN TestNew/fail/with-permitted-cidrs +=== RUN TestNew/fail/with-permitted-ipsOrCIDRs-cidr +=== RUN TestNew/ok/with-excluded-dns-domains +--- PASS: TestNew (0.01s) --- PASS: TestNew/ok/with-excluded-ip-ranges (0.00s) - --- PASS: TestNew/ok/with-excluded-cidrs (0.00s) - --- PASS: TestNew/fail/with-excluded-common-name (0.00s) - --- PASS: TestNew/fail/with-permitted-dns-domains (0.00s) + --- PASS: TestNew/fail/with-excluded-emails (0.00s) + --- PASS: TestNew/fail/with-permitted-uris (0.00s) + --- PASS: TestNew/ok/literal-wildcards (0.00s) + --- PASS: TestNew/ok/with-permitted-ip-ranges (0.00s) --- PASS: TestNew/ok/with-permitted-ipsOrCIDRs-cidr (0.00s) + --- PASS: TestNew/ok/with-excluded-uris (0.00s) + --- PASS: TestNew/ok/subject-verification (0.00s) + --- PASS: TestNew/ok/with-excluded-cidrs (0.00s) + --- PASS: TestNew/fail/with-excluded-uris (0.00s) + --- PASS: TestNew/ok/with-permitted-dns-wildcard-domains (0.00s) + --- PASS: TestNew/fail/with-excluded-ipsOrCIDRs-ip (0.00s) + --- PASS: TestNew/ok/default (0.00s) + --- PASS: TestNew/ok/with-permitted-emails (0.00s) + --- PASS: TestNew/ok/with-excluded-principals (0.00s) + --- PASS: TestNew/fail/with-permitted-common-name (0.00s) + --- PASS: TestNew/fail/with-permitted-ipsOrCIDRs-ip (0.00s) --- PASS: TestNew/fail/with-excluded-ipsOrCIDRs-cidr (0.00s) - --- PASS: TestNew/ok/with-excluded-dns-domains (0.00s) + --- PASS: TestNew/fail/with-permitted-emails (0.00s) --- PASS: TestNew/ok/with-excluded-ipsOrCIDRs-cidr (0.00s) - --- PASS: TestNew/ok/with-permitted-emails (0.00s) - --- PASS: TestNew/fail/with-permitted-uris (0.00s) + --- PASS: TestNew/ok/with-permitted-uris (0.00s) + --- PASS: TestNew/fail/with-excluded-common-name (0.00s) + --- PASS: TestNew/fail/with-permitted-dns-domains (0.00s) --- PASS: TestNew/ok/with-permitted-cidrs (0.00s) --- PASS: TestNew/ok/with-permitted-principals (0.00s) --- PASS: TestNew/fail/with-excluded-cidrs (0.00s) - --- PASS: TestNew/ok/with-permitted-ip-ranges (0.00s) - --- PASS: TestNew/ok/with-permitted-uris (0.00s) - --- PASS: TestNew/fail/with-permitted-cidrs (0.00s) - --- PASS: TestNew/fail/with-excluded-ipsOrCIDRs-ip (0.00s) - --- PASS: TestNew/fail/with-excluded-uris (0.00s) - --- PASS: TestNew/ok/default (0.00s) - --- PASS: TestNew/ok/literal-wildcards (0.00s) - --- PASS: TestNew/ok/with-permitted-dns-wildcard-domains (0.00s) --- PASS: TestNew/ok/with-excluded-emails (0.00s) - --- PASS: TestNew/ok/with-excluded-principals (0.00s) - --- PASS: TestNew/fail/with-permitted-common-name (0.00s) + --- PASS: TestNew/fail/with-excluded-dns-domains (0.00s) + --- PASS: TestNew/fail/with-permitted-cidrs (0.00s) + --- PASS: TestNew/fail/with-permitted-ipsOrCIDRs-cidr (0.00s) + --- PASS: TestNew/ok/with-excluded-dns-domains (0.00s) === RUN Test_normalizeAndValidateURIDomainConstraint === RUN Test_normalizeAndValidateURIDomainConstraint/fail/empty-constraint === RUN Test_normalizeAndValidateURIDomainConstraint/fail/scheme-https @@ -10727,13 +10770,13 @@ --- PASS: Test_normalizeAndValidateURIDomainConstraint/ok/idna-internationalized-domain-name-lookup (0.00s) --- PASS: Test_normalizeAndValidateURIDomainConstraint/ok/idna-internationalized-domain-name-lookup-deviation (0.00s) PASS -ok github.com/smallstep/certificates/policy 0.108s +ok github.com/smallstep/certificates/policy 0.187s === RUN TestAuthority_encrypt === PAUSE TestAuthority_encrypt === RUN TestAuthority_SignCSR === RUN TestAuthority_SignCSR/ok === RUN TestAuthority_SignCSR/ok_no_sign_options ---- PASS: TestAuthority_SignCSR (0.76s) +--- PASS: TestAuthority_SignCSR (3.41s) --- PASS: TestAuthority_SignCSR/ok (0.01s) --- PASS: TestAuthority_SignCSR/ok_no_sign_options (0.01s) === CONT TestAuthority_encrypt @@ -10751,19 +10794,19 @@ === PAUSE TestAuthority_encrypt/alg-unknown === CONT TestAuthority_encrypt/alg-0 === CONT TestAuthority_encrypt/alg-unknown -=== CONT TestAuthority_encrypt/alg-2 -=== CONT TestAuthority_encrypt/alg-3 === CONT TestAuthority_encrypt/alg-4 +=== CONT TestAuthority_encrypt/alg-3 +=== CONT TestAuthority_encrypt/alg-2 === CONT TestAuthority_encrypt/alg-1 ---- PASS: TestAuthority_encrypt (0.26s) +--- PASS: TestAuthority_encrypt (0.32s) --- PASS: TestAuthority_encrypt/alg-0 (0.00s) --- PASS: TestAuthority_encrypt/alg-unknown (0.00s) - --- PASS: TestAuthority_encrypt/alg-2 (0.00s) - --- PASS: TestAuthority_encrypt/alg-3 (0.00s) --- PASS: TestAuthority_encrypt/alg-4 (0.00s) + --- PASS: TestAuthority_encrypt/alg-3 (0.00s) + --- PASS: TestAuthority_encrypt/alg-2 (0.00s) --- PASS: TestAuthority_encrypt/alg-1 (0.00s) PASS -ok github.com/smallstep/certificates/scep 1.093s +ok github.com/smallstep/certificates/scep 3.842s === RUN Test_decodeRequest === RUN Test_decodeRequest/fail/invalid-query === RUN Test_decodeRequest/fail/empty-operation @@ -10779,7 +10822,7 @@ === RUN Test_decodeRequest/ok/get-PKIOperation-not-escaped === RUN Test_decodeRequest/ok/get-PKIOperation-weird-macos-case === RUN Test_decodeRequest/ok/post-PKIOperation ---- PASS: Test_decodeRequest (0.00s) +--- PASS: Test_decodeRequest (0.02s) --- PASS: Test_decodeRequest/fail/invalid-query (0.00s) --- PASS: Test_decodeRequest/fail/empty-operation (0.00s) --- PASS: Test_decodeRequest/fail/unsupported-method (0.00s) @@ -10795,7 +10838,7 @@ --- PASS: Test_decodeRequest/ok/get-PKIOperation-weird-macos-case (0.00s) --- PASS: Test_decodeRequest/ok/post-PKIOperation (0.00s) PASS -ok github.com/smallstep/certificates/scep/api 0.049s +ok github.com/smallstep/certificates/scep/api 0.151s ? github.com/smallstep/certificates/server [no test files] === RUN TestTemplates_Validate === RUN TestTemplates_Validate/ok @@ -10891,9 +10934,9 @@ === RUN TestTemplate_Output/file#01 === RUN TestTemplate_Output/directory === RUN TestTemplate_Output/error ---- PASS: TestTemplate_Output (0.01s) +--- PASS: TestTemplate_Output (0.00s) --- PASS: TestTemplate_Output/snippet (0.00s) - --- PASS: TestTemplate_Output/file (0.01s) + --- PASS: TestTemplate_Output/file (0.00s) --- PASS: TestTemplate_Output/file#01 (0.00s) --- PASS: TestTemplate_Output/directory (0.00s) --- PASS: TestTemplate_Output/error (0.00s) @@ -10906,7 +10949,7 @@ === RUN TestOutput_Write/snippetErr === RUN TestOutput_Write/fileErr === RUN TestOutput_Write/directoryErr ---- PASS: TestOutput_Write (0.00s) +--- PASS: TestOutput_Write (0.01s) --- PASS: TestOutput_Write/snippet (0.00s) --- PASS: TestOutput_Write/file (0.00s) --- PASS: TestOutput_Write/snippetInDir (0.00s) @@ -10934,259 +10977,271 @@ --- PASS: TestDefaultTemplates (0.00s) --- PASS: TestDefaultTemplates/ok (0.00s) PASS -ok github.com/smallstep/certificates/templates 0.076s +ok github.com/smallstep/certificates/templates 0.144s === RUN Test_reflectRequestID -2025/10/26 22:11:32 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 22:11:32 Starting Smallstep CLI/0000000-dev (linux/arm64) -2025/10/26 22:11:32 Documentation: https://u.step.sm/docs/ca -2025/10/26 22:11:32 Community Discord: https://u.step.sm/discord -2025/10/26 22:11:32 Config file: loaded from token -2025/10/26 22:11:32 The primary server URL is https://127.0.0.1:43925 -2025/10/26 22:11:32 Root certificates are available at https://127.0.0.1:43925/roots.pem -2025/10/26 22:11:32 Additional configured hostnames: [::1], localhost -2025/10/26 22:11:32 X.509 Root Fingerprint: 1ca65c9f8411fecd238a68b9f9cbb5591af1da76cfe05f4fd89df55ea7dca61b -2025/10/26 22:11:32 Serving HTTPS on [::]:43925 ... -2025/10/26 22:11:32 /usr/lib/go-1.24/src/net/http/server.go:3638: http: TLS handshake error from 127.0.0.1:57132: EOF -time="2025-10-26T22:11:32-12:00" level=info duration="58.28µs" duration-ns=58280 fields.time="2025-10-26T22:11:32-12:00" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=34690f4b-5a4b-4ee1-af75-0bfcf2772632 size=16 status=200 user-agent=step-http-client/1.0 user-id= -time="2025-10-26T22:11:32-12:00" level=warning duration="203.321µs" duration-ns=203321 error="/root/invalid was not found: certificate with fingerprint invalid was not found" fields.time="2025-10-26T22:11:32-12:00" method=GET name=ca path=/root/invalid protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=dd9e4f35-5867-4841-bb9f-b637b7fce188 size=127 status=404 user-agent=step-http-client/1.0 user-id= -time="2025-10-26T22:11:32-12:00" level=warning duration="67.72µs" duration-ns=67720 error="/root/invalid was not found: certificate with fingerprint invalid was not found" fields.time="2025-10-26T22:11:32-12:00" method=GET name=ca path=/root/invalid protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=reqID size=127 status=404 user-agent=step-http-client/1.0 user-id= -time="2025-10-26T22:11:33-12:00" level=info certificate="MIIB/jCCAaOgAwIBAgIQB7ilbCVMs9rhtBvfo8eAsjAKBggqhkjOPQQDAjAjMSEwHwYDVQQDExhTdGVwIEUyRSBJbnRlcm1lZGlhdGUgQ0EwHhcNMjUxMDI3MDkxMTMzWhcNMjUxMDI3MTExMTMzWjAPMQ0wCwYDVQQDEwR0ZXN0MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEv2N5Obd0+nlTqIagaoNzAwWHDiEu+FJwt7XXURb20LyVvz6F22kPyFGujMG9xqpwkkusjTEb2hhMLM8FWLUb+aOBzDCByTAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBQelBcGn8AcoEKO8sr7QQzVJvCTLjAfBgNVHSMEGDAWgBR2FtuAr6fHW9DL2t40QTEsdPSpLzAPBgNVHREECDAGggR0ZXN0MEcGDCsGAQQBgqRkxihAAQQ3MDUCAQEEA2p3awQrMDM0ZjYxTEMyZkctVFhNV3Z0dmtXX3dlMWFJZHZsRGZYSGpPS1daZV9EZzAKBggqhkjOPQQDAgNJADBGAiEAxXP6z2cftDyKv8eosbViqLSY/5dJ2P/aH1G5MWEGJ3ICIQDj9UXOF+qH3VskihDgYWbhpIA8l/VTQBT0QS4IdKdV+Q==" duration=7.40809ms duration-ns=7408090 fields.time="2025-10-26T22:11:33-12:00" issuer="Step E2E Intermediate CA" method=POST name=ca ott=eyJhbGciOiJFUzI1NiIsImtpZCI6IjAzNGY2MUxDMmZHLVRYTVd2dHZrV193ZTFhSWR2bERmWEhqT0tXWmVfRGciLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovLzEyNy4wLjAuMS8xLjAvc2lnbiIsImV4cCI6MTc2MTU1OTk1MywiaXNzIjoiandrIiwianRpIjoiVygtWnUjWnVTRShsZHgoaVxcMid2XHUwMDI2TH1mfHVudDtmbUxTY2UrQXxUPXJGe0VEOX4_dCdYW0osemYrWmZvVGlsdCIsIm5iZiI6MTc2MTU1OTg5Mywic2FucyI6WyJ0ZXN0Il0sInN1YiI6InRlc3QifQ.cqzXlBpnv9PrAfKcFNmpOk3u7UMRJN-5GHbxPdiZsGS-KXibzcvCSZHkxsCqCzzqsumfxW8lW0NNPJcPaY5Afg path=/sign protocol=HTTP/2.0 provisioner="jwk (034f61LC2fG-TXMWvtvkW_we1aIdvlDfXHjOKWZe_Dg)" public-key="ECDSA P-256" referer= remote-address=127.0.0.1 request-id=signRequestID sans="map[dns:[test]]" serial=10263333758234646527079448042698932402 size=3025 status=201 subject=test user-agent=step-http-client/1.0 user-id= valid-from="2025-10-27T09:11:33Z" valid-to="2025-10-27T11:11:33Z" ---- PASS: Test_reflectRequestID (1.45s) +2026/11/30 06:40:07 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:40:07 Starting Smallstep CLI/0000000-dev (linux/arm64) +2026/11/30 06:40:07 Documentation: https://u.step.sm/docs/ca +2026/11/30 06:40:07 Community Discord: https://u.step.sm/discord +2026/11/30 06:40:07 Config file: loaded from token +2026/11/30 06:40:07 The primary server URL is https://127.0.0.1:35487 +2026/11/30 06:40:07 Root certificates are available at https://127.0.0.1:35487/roots.pem +2026/11/30 06:40:07 Additional configured hostnames: [::1], localhost +2026/11/30 06:40:07 X.509 Root Fingerprint: ad976bf93de79e87440232c57ce0caaece650443d490dd62910fedc67f501f0a +2026/11/30 06:40:07 Serving HTTPS on [::]:35487 ... +2026/11/30 06:40:07 /usr/lib/go-1.24/src/net/http/server.go:3638: http: TLS handshake error from 127.0.0.1:45308: EOF +time="2026-11-30T06:40:07+14:00" level=info duration="61.84µs" duration-ns=61840 fields.time="2026-11-30T06:40:07+14:00" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=56953880-e948-449f-988f-09c2e0d03c5f size=16 status=200 user-agent=step-http-client/1.0 user-id= +time="2026-11-30T06:40:07+14:00" level=warning duration="331.76µs" duration-ns=331760 error="/root/invalid was not found: certificate with fingerprint invalid was not found" fields.time="2026-11-30T06:40:07+14:00" method=GET name=ca path=/root/invalid protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=50266580-6f07-431e-848b-e20749a53e9f size=127 status=404 user-agent=step-http-client/1.0 user-id= +time="2026-11-30T06:40:07+14:00" level=warning duration="82µs" duration-ns=82000 error="/root/invalid was not found: certificate with fingerprint invalid was not found" fields.time="2026-11-30T06:40:07+14:00" method=GET name=ca path=/root/invalid protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=reqID size=127 status=404 user-agent=step-http-client/1.0 user-id= +time="2026-11-30T06:40:08+14:00" level=info certificate=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 duration=7.30864ms duration-ns=7308640 fields.time="2026-11-30T06:40:08+14:00" issuer="Step E2E Intermediate CA" method=POST name=ca ott=eyJhbGciOiJFUzI1NiIsImtpZCI6IlBtdlFkS2lOUTZ4MEd4bUZmb2pPdkR0YU1HUFlDMklhNTMzakd3QW1lX00iLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovLzEyNy4wLjAuMS8xLjAvc2lnbiIsImV4cCI6MTc5NTk3MDQ2OCwiaXNzIjoiandrIiwianRpIjoiW1YyLHdFbV5BPU04QWRcXHRBTGRHMi1gW1x1MDAzZUktfmdJfFI5Wk1cdTAwM2MjPzF3dVxcbWFISycuU0U4S1JiaFE2MGg9VDpNeSIsIm5iZiI6MTc5NTk3MDQwOCwic2FucyI6WyJ0ZXN0Il0sInN1YiI6InRlc3QifQ.6cZwITH1dssbZ0NRTCJnX62XxhpIE7PPZ-QiwFb_LFQ9-gvBJngwCPEFqFMwG23fvQ1dp6Bd6cgfeOYRMhhfkg path=/sign protocol=HTTP/2.0 provisioner="jwk (PmvQdKiNQ6x0GxmFfojOvDtaMGPYC2Ia533jGwAme_M)" public-key="ECDSA P-256" referer= remote-address=127.0.0.1 request-id=signRequestID sans="map[dns:[test]]" serial=141599867877578095006894515080792966873 size=3017 status=201 subject=test user-agent=step-http-client/1.0 user-id= valid-from="2026-11-29T15:40:08Z" valid-to="2026-11-29T17:40:08Z" +--- PASS: Test_reflectRequestID (1.49s) PASS -ok github.com/smallstep/certificates/test/integration 1.492s +ok github.com/smallstep/certificates/test/integration 1.575s === RUN TestIssuesCertificateUsingSCEPWithDecrypterAndUpstreamCAS -2025/10/26 22:11:32 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 22:11:32 Starting Smallstep CLI/0000000-dev (linux/arm64) -2025/10/26 22:11:32 Documentation: https://u.step.sm/docs/ca -2025/10/26 22:11:32 Community Discord: https://u.step.sm/discord -2025/10/26 22:11:32 Config file: loaded from token -2025/10/26 22:11:32 The primary server URL is https://127.0.0.1:46135 -2025/10/26 22:11:32 Root certificates are available at https://127.0.0.1:46135/roots.pem -2025/10/26 22:11:32 Additional configured hostnames: [::1], localhost -2025/10/26 22:11:32 X.509 Root Fingerprint: 11d4925e81947578da4631307ead5edd3974282244dc611102e12284b3b0ff1c -2025/10/26 22:11:32 Serving HTTPS on [::]:46135 ... -time="2025-10-26T22:11:33-12:00" level=info duration="332.042µs" duration-ns=332042 fields.time="2025-10-26T22:11:33-12:00" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=44b870ea-cd0f-4da3-b9d7-391a9724085e size=16 status=200 user-agent=step-http-client/1.0 user-id= -time="2025-10-26T22:11:33-12:00" level=info duration="98.801µs" duration-ns=98801 fields.time="2025-10-26T22:11:33-12:00" method=GET name=ca path="/scep/scep/scep/scep?operation=GetCACert&message=test" protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=e2659bc0-f986-436d-9397-4a043fb3e0ce size=1161 status=200 user-agent=Go-http-client/2.0 user-id= - common_test.go:204: 0 *H v0r10  *H X0j00 - *H=0D1B0@U 9Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA0 251027091132Z 251027111132Z010U decrypter0"0  *H 0 - 8YDox9+m! sNt0?-ճG(zwr(CACп`hP XpWgC]Sӂ:CAx Bi;he%&J _[Q~3k_k6z&iphZڒK.=R%^$ 0x@(`k*KHYj !;DH+Z<|&-u8t;X0V0UPBeZld9 d0U#0xƆ֤۹؊k0U 0 decrypter0 - *H=H0E!NK l:vA_u4F4-T !:"8@͇o˩Řq^i$]00B C#dJD0 - *H=0<1:08U 1Step E2E | SCEP Decrypter w/ Upstream CAS Root CA0 251027101132Z 251028101132Z0D1B0@U 9Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA0Y0*H=*H=B!C؊'xBS1DF]mEhT:e(t$.Љ(% %Dm-=5un3i90-ƄD4oD*S ׀g.؂q7FN{/hzȞ5Ze0\p< vTEGFֱH;EwҐT) A MwC)!B[|ӡ,8g_5,-(hV'!! 5 ıi=" \h˜nSr7Zh J͏DGQ1@ٚf\'6%툩,9Ҋy$ k!pźVV zA'.6 'i000  *H  010Utest.localhost0 251027091134Z 251027111134Z010Utest.localhost0"0  *H 0 - 4*POҨFZ - {St]6[? J˅p=IfR7/F4\rs - Џ*Àt-V7 %!b9#nt NϗM) T\%܏Q"p֙z<S\~00U0test.localhost0  *H  kp'L͗'0n*ZK*٧W@oVo.S鈧2~y9'/+!>VmRIķRWIm̐X%yZZ{1fjl %3cT(^AC3i|c 2pcobxRsY{MyӜne}~l klT,ne`3c4䈞 U;r\&B4^$P֐^'u B}100010Utest.localhost0+0 - `HE 1190 *H  1  *H 0 *H  1 251027101134Z0  - `HE 1mҼy-/0# *H  1pOcb}ӫYMMĜ$/=4)J18lE}gOe@,L%QmI(89e@*7datUV(M@a\>⦨Hz@:)/3NxER.m - X"ܐ/zY_ɀ8g3_kwN3lBLK[kͰJ͇E4NdkhxrܴI'L~ȣɷʧF?B -time="2025-10-26T22:11:35-12:00" level=info certificate=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 duration=11.996241ms duration-ns=11996241 fields.time="2025-10-26T22:11:35-12:00" issuer="Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA" method=GET name=ca path="/scep/scep/scep/scep?operation=PKIOperation&message=MIIJSgYJKoZIhvcNAQcCoIIJOzCCCTcCAQExCTAHBgUrDgMCGjCCBEoGCSqGSIb3DQEHAaCCBDsEggQ3MIIEMwYJKoZIhvcNAQcDoIIEJDCCBCACAQAxggFjMIIBXwIBADBJMEQxQjBABgNVBAMMOVN0ZXAgRTJFIHwgU0NFUCBEZWNyeXB0ZXIgdy8gVXBzdHJlYW0gQ0FTIEludGVybWVkaWF0ZSBDQQIBATALBgkqhkiG9w0BAQEEggEAfIvV0iXRYNTHJCG1ncESw1Bhbhp949dD2HBnhKUHU8Gt4%2BJoZtcadCdFTW8SKDbzBcPsmsXDJhTMitN42yxYCypJyB%2BxlZwlD3UXwOvGvEqfecBH3l7JHsBzfG2qfIhEC5dRGWi7DafvaGnGeowICwdLWEgpVYLLeW1TyaSrJ4gaVao3TO0C9fpHHI7FPfzp0hHcvuD8zgsfsNIqh1RAFSXvJBVJpxpaQS3BbvLcD%2BHAcUhjUAGGf9DxsZ%2FSUlBtoXH1YoS%2F1aSXmlsYCsFWtfkq6hnx%2FGibQPHFFO1fuyL90Y6L0xMEics7L9RvI3m4oZbrwABpiGpntE2uBFDTXjCCArIGCSqGSIb3DQEHATARBgUrDgMCBwQIZnA15gnnVNuAggKQaqejNYctnkN%2FNhoeg18CsI5BeXILEjCvqnkk%2FM%2FMXUrATk%2BwfhHYWeQHCY3F0hkpf6IKvk6yV1HzO%2FT0ht07qCdlk4lJw0Nu1cGXtVL1QU5zDRCF4V4pAkv45FbfqQleZ1SzE6w4K5bHPvu7J9t4m5XvQlMxHa9EuEZdbUVoVDriD6tl7Sh%2F9HQkLs3QiSjxJcEQICVEbS09NXWlbjPz%2FZSvaTnK76zoFzAtxoRE6sM0hG8dRCpTAbqt0Ayn5pfXgGcu2IIB8h7w6HE3RthOe8P%2BL2jq1HrInjVahPOo62UwoMhc3nCMq%2Bw8jQ12gPNUhhbXxthFmL5HhL5Gmtax1Uga8TtFd9KQVNH9h4nyECmHIB1BCU13oNTLQ%2B%2BsAMEpvPXJIaFCWwB806GvLJY4mmdfETXRHiylLShoAvVWBichqSHGCZQc87bfwTULxLH6rtJpvYKqtz0iC%2F2eH%2BpcFmjLnKBu0lNyN1poDRin2uBKzY%2BFDkTbR6RRn7u7A%2FkxQNvfDvjZmmb%2BXCe3vZ4PFo029iXtiKmSiqwBLPL5p%2B450op5ySTbDGvupYwhxnDFuvT1zvlWFI%2F5VgmaBft6Qb8nPHfjvmdwzHoYm8ZLSxRVlOjqixX6eFj2%2BJst%2FQ8gyw5bHKLnPQ7Sq1SqDRx6lHxutRYCzNcsmw6wPZ9cFYgsbLTRkslTAZ2U%2BtcENkCQgUkBoSK6%2Bl4OzIYB8FDhET%2BLnapANYtLG10OyMcBVohSVQgY6TeXVUvH1sSh5YjVGtftgwC%2BFeznKbZHQUfBZgd%2BbMn1%2FAZ2dmQii42fO1E%2F5NzZFSj8mRaH9A9fyBsQVXxI825WOiz93iNfkAY%2B6S7G8hDpNoEPDc4nsBayFWmgggLOMIICyjCCAbKgAwIBAgIBATANBgkqhkiG9w0BAQsFADAZMRcwFQYDVQQDEw50ZXN0LmxvY2FsaG9zdDAeFw0yNTEwMjcwOTExMzRaFw0yNTEwMjcxMTExMzRaMBkxFzAVBgNVBAMTDnRlc3QubG9jYWxob3N0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDTWKlDmT8jSqEaSvFqgDgp7wVN0XTZbPw0JSu7LhRECcD1JZlI3kJLCL6NGNPLqXKj%2BthRytYrwEL9zCtCPKr4IHcHRw4B0LeBWAI34FTcMpfElnyGCxWI8kHQQ1QuWlyOhhUC4MZ16T3vxiMPBd3T8ATcghSlfDF5ytYYyVS%2FmJM1myyZlapQDzaawBNEcNsYXpx9jwO%2BpnpTA1p9Tm0Nw44diR3A7x5i3hE50Q2fifNj1aBKvsITNF%2BcX4ZpszD6UOSNu3NIVdMIfHgnsEoZOAs%2BXTSmzjq%2BwDFRcEOMl%2B%2Fvcj41R5iJwH9aZBHq0%2BOkcPBOpU53nXH7D6L4E1QIDAQABox0wGzAZBgNVHREEEjAQgg50ZXN0LmxvY2FsaG9zdDANBgkqhkiG9w0BAQsFAAOCAQEAa3ASJ6VMsI6B4PIdFQLNl64nkjDSEbRuKqDjG6JayhIGBUuWKp3JyNmns1eLQG%2BN0FZvyy4Ckp3gU4%2Fp6YinMvp%2B4Hm1%2Bzmv997NJy%2BiKyEeFuCIwj5W5m1S0EnEt7RSHFdJtr5tzJBY4eglDnkasFqnoVp7McQRxGbmAbbwsZFqn%2FrqbAklqzMR3GPqVChe8UHnQ5iw%2BB8zafzzseJ8pc73%2FGMXDf%2BM8DJwvPJjqr6kb2J4UnOtWXv%2FTXnTnG77AWV9fqdsrCBrbFT%2BLPqMbtb0ZQdgM2O6NOSIngtViDv6yXLzANPSXCZCNF4WHh4kh%2BYfUNaQXqCkJ3UJ8EJ98DGCAgUwggIBAgEBMB4wGTEXMBUGA1UEAxMOdGVzdC5sb2NhbGhvc3QCAQEwBwYFKw4DAhqggcEwEgYKYIZIAYb4RQEJAjEEEwIxOTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yNTEwMjcxMDExMzRaMCAGCmCGSAGG%2BEUBCQUxEgQQm23SvHnlLaLD0Re56%2FYv%2BjAjBgkqhkiG9w0BCQQxFgQUPI6x%2B4neS54wzaRFriqX%2B5gJgXEwLAYKYIZIAYb4RQEJBzEeExx0Mmd6OVRSditTU210UEp2NURJUTA4azhGamM9MAsGCSqGSIb3DQEBBQSCAQB5eweAWdQqZzMFKNPtPra%2FBg7Q1HCutU9jYsnpx9zxu32OpaXTqw%2FE41lNgE3EnCT%2Fiy8EPTQXmSkHSjE4bEWifWeD7atPmWVALEzOHyUO7a29qdHgH1Ee%2F%2BimbbpJKLs4m7E5Zei3QBr2KvA3ZLJhu4l0F%2BFVsOiOVowoTUBhXJmRrZKpPuKmqEiWvcCRevxAOpnIKS8zhItOeJDu6EWO21IuHwJtkgpY8O4i3JAvAnrp%2FFkUX8mAmjhn5zNfa3eqTjNsQkxLANNba%2FzNsJWp%2F0rNh6ukRTQe7E5kmpX6hmtoeNbeE6py3LSsn0knTH6fA77Io8m35sqnRj%2B2QvSy" protocol=HTTP/2.0 public-key="RSA 2048" referer= remote-address=127.0.0.1 request-id=59aecb5f-0e04-448c-a1bb-a8083fd30170 sans="map[dns:[test.localhost]]" serial=115311980886587516719768694025058259220 size=3142 status=200 subject=test.localhost user-agent=Go-http-client/2.0 user-id= valid-from="2025-10-27T10:11:35Z" valid-to="2025-10-28T10:11:35Z" - common_test.go:309: 0 B *H  30 /1 0+0 *H |x0t *H e0a18040010Utest.localhost0  *H IV `j<;mHqfngw7 iI:郥gdLD^S4<#*mrg2փv$0 *H 0 `He*No1nWڶ7$:oxQ6Pj#>ot;ω'´ֿ2~pTdI{p=t]MKt@Tt\нwl~^{& - 4pI;`Fة>` UF.B$oDlA\NQag R.䤒>l=O`ju$sz[ Q6+|Vמ)$uCHkx܉'rk}fkA1-P i5wB򃩦BEB{j˵,tOWM*Z֨jl)pڃ}2_)!ંyKܼ*SX R8#V3e IJRujs;c#,S{ub]:/`< EQrcg|[t.6VÊ@1apԂ$#BJIE7yXYo>Z([N [7i`@a#hnRrON{ׁ,!P Uw)xݍH{gL'vK&Y r歯B䐴٬b[rkx(u5s8Y(ղ 4ӌ c;qBXpp2I`n4_%C?pho_#vLzפ, - >E*4@Ys6HZ&00ZVG{9J0 - *H=0D1B0@U 9Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA0 251027101135Z 251028101135Z010Utest.localhost0"0  *H 0 - 4*POҨFZ - {St]6[? J˅p=IfR7/F4\rs - Џ*Àt-V7 %!b9#nt NϗM) T\%܏Q"p֙z<S\~00U0U%0++0Ue9OP!lh`0U#0xƆ֤۹؊k0U0test.localhost0 - *H=H0E ?<HYNx/F3l X96[!P/ʹۥ8~j>vY0j00 - *H=0D1B0@U 9Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA0 251027091132Z 251027111132Z010U decrypter0"0  *H 0 - 8YDox9+m! sNt0?-ճG(zwr(CACп`hP XpWgC]Sӂ:CAx Bi;he%&J _[Q~3k_k6z&iphZڒK.=R%^$ 0x@(`k*KHYj !;DH+Z<|&-u8t;X0V0UPBeZld9 d0U#0xƆ֤۹؊k0U 0 decrypter0 - *H=H0E!NK l:vA_u4F4-T !:"8@͇o˩Řq^i$]1d0`0I0D1B0@U 9Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA0+0 +2026/11/30 06:40:10 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:40:10 Starting Smallstep CLI/0000000-dev (linux/arm64) +2026/11/30 06:40:10 Documentation: https://u.step.sm/docs/ca +2026/11/30 06:40:10 Community Discord: https://u.step.sm/discord +2026/11/30 06:40:10 Config file: loaded from token +2026/11/30 06:40:10 The primary server URL is https://127.0.0.1:41751 +2026/11/30 06:40:10 Root certificates are available at https://127.0.0.1:41751/roots.pem +2026/11/30 06:40:10 Additional configured hostnames: [::1], localhost +2026/11/30 06:40:10 X.509 Root Fingerprint: 46acee85fa71724c220ee370eef1b400109bf20dd89d23d55fd92def8821f854 +2026/11/30 06:40:10 Serving HTTPS on [::]:41751 ... +time="2026-11-30T06:40:11+14:00" level=info duration="816.76µs" duration-ns=816760 fields.time="2026-11-30T06:40:11+14:00" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=637c42ab-844a-4bbe-999b-b7dc7af334d0 size=16 status=200 user-agent=step-http-client/1.0 user-id= +time="2026-11-30T06:40:11+14:00" level=info duration="102.08µs" duration-ns=102080 fields.time="2026-11-30T06:40:11+14:00" method=GET name=ca path="/scep/scep/scep/scep?operation=GetCACert&message=test" protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=06ddb20b-4e4a-4710-8f03-75ace0a4bd34 size=1161 status=200 user-agent=Go-http-client/2.0 user-id= + common_test.go:204: 0 *H v0r10  *H X0k00 + *H=0D1B0@U 9Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA0 261129154010Z 261129174010Z010U decrypter0"0  *H 0 + `%bЈnT;O&48SQ[nvC(|Fw @:J\;x#q#YD@G7rH !V=pz}9W#CLˊ}u)!6wލ4l3:A~e7rE$34,mw)$;׫nUwz$ZtW~2ms,6T:xȅw[c#1tT_2%(8X0V0UPIِBjJ0U#05\2nK׈hs20U 0 decrypter0 + *H=I0F!@ 58լdy + `Se!o#x{Ǖ[3 k;OSx@<006`'aM`Y*0 + *H=0<1:08U 1Step E2E | SCEP Decrypter w/ Upstream CAS Root CA0 261129164009Z 261130164009Z0D1B0@U 9Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA0Y0*H=*H=Bh /Cc,@1Ӟ%jf _H_b#Fa҈]n00l8f[f0d0U0U00U5\2nK׈hs20U#05\2nK׈hs20 + *H=H0E!XC>.'(Uiҭ,ߒB9 r.YMJwCU%c71 + common_test.go:286: 0 J *H  ;0 71 0+0J *H ;703 *H $0 1c0_0I0D1B0@U 9Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA0  *H n բ7cuӟ*WSF`L]i$@*/ʐoh_P o@HN LY.]ys U( + >i_7O + "ʦ1xޝAKӇ5m-G;\e(zE!eY3y$޹f"jܣRx*T˶6C4Zbo ZdPV5ƓNVV3&}0 *H 0+4ꀂ^N6fWEAix)RE&QfY:(*I^Mog_;5O ZO1M-^κHNڌ']kJӷnJ":whsݰZ [ȗ9GkB;䌡`I n>`[Ь3J0tW + %M"^ 2Ysl͘QswuEtCo8 ᳎7n%NPݷxĴc^iu_a B + JNts + +xgVf8Z-#pDdfwN%I RnU6ꞼMy $IkN]Etϟ}sunVlT;y42yeB2<joἽ5ox2$H!%2"Fe< *Пb]7آ2bfO8"PG䘅 + kQR ڑhpٶ4:N;]Nq)qebW, ڐXg8 <V *Fo+Kdl)Ԟ@]000  *H  010Utest.localhost0 261129154013Z 261129174013Z010Utest.localhost0"0  *H 0 + (zae<š:lp N[Ѭ;x "H/y.RO"'%Ƞ6o* + I(ф|iiSE-fwP`Duf /TGИ, e| 5T7LòD|d$a&>5G;4zeVQ + M&䀘CfwibB>]>uәmF(nl OTl/:E#W.wm%U'NA_AU + iUs>*RH$Q. %bg/ҭ)~ES>1Tr ܂aHvAe',Xx%QEυNUI.dUMعD ƵdJLt`xMxt\82ףYJM9E9en YximV0mƨzkb.:ijlƗHጫ6쇂/{[!fp +time="2026-11-30T06:40:13+14:00" level=info certificate=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 duration=18.90904ms duration-ns=18909040 fields.time="2026-11-30T06:40:13+14:00" issuer="Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA" method=GET name=ca path="/scep/scep/scep/scep?operation=PKIOperation&message=MIIJSgYJKoZIhvcNAQcCoIIJOzCCCTcCAQExCTAHBgUrDgMCGjCCBEoGCSqGSIb3DQEHAaCCBDsEggQ3MIIEMwYJKoZIhvcNAQcDoIIEJDCCBCACAQAxggFjMIIBXwIBADBJMEQxQjBABgNVBAMMOVN0ZXAgRTJFIHwgU0NFUCBEZWNyeXB0ZXIgdy8gVXBzdHJlYW0gQ0FTIEludGVybWVkaWF0ZSBDQQIBATALBgkqhkiG9w0BAQEEggEAiPbmCOiO%2FYpuDA9%2F1aLgNx2Y1mPOdYi8q9OfKhGokNBX8FNGYJiumh%2BciUwej4DcBF1%2Ff7QOuujAafAC2iRAKvcen64vi%2Brj%2FLncypCBb6R%2FaLhfo1ALq6LTb5ZAFUhOxAlMHanmWS7B813sf7t5cyBVKBIKPmlf5jeSw08Kw9Mi3sqmqumsMXjgD96dgxhBS8vThzXE%2Bttt%2Fonlmy242Pa4R4A7FbRcBWUo2ewaerhFIYCIZdlZA9bb7BvYM%2BGJeSTeuWb8Imq5HNyj%2B95SxXgqVMu25jbJQ4M0FIrvWreQ57ZibxMFCVpk1gJQVjXGk81OHMFWjvD2%2B1YzJn0AfzCCArIGCSqGSIb3DQEHATARBgUrDgMCBwQIyBcSBTSs%2FeqAggKQBQ62XptOvP%2B7NsJmV7%2F%2BRZBBaXjmiCmjUkUmUWZZ7zoo8ypJul7WTfj4A29nX6%2FeGjs1Tx4Quw1aT%2FEF5sTt8DG2TeYtXs66DkgXTqzajLMnXWtK07eDA24dA0q3r%2B79tSLAzuE6%2FXdo9HPdsB5a1%2FYLwa1byJfDOUdrQn87ra%2FkjKFg%2Fv5JC%2Fexf24%2Bk2Bb0KwzSqmXnokwtnSN%2Fx%2BunVcKiSUQTez1wuG6Il4NmakyWXNsvBzNmKxRl9Jzyd3Jd3VFdNBDb%2Fw4C9HS3uGzjjduz%2FbLJeVO%2BolQ7BLwoajdt7flrXgVs6HEtGOIXmnfdYpfkcTCw2ENlEKvD4sKSpKWTnRzCs4reGfr8FZmm%2BSmEzhaLZAjcLJEZLRmd%2BHfTgPRJTxCWRyj9DEN5C9UMdIHsk9H%2BDYxqhZOznUYaPoi430iRxKzdlPLTBnPjUBPmkxyTL72gWrBLL8%2BhkkL%2FP3eUm5V9RY26eqevMlNsKR5DCSApxtJ92uJTl0CE62qRRl0t8%2BffXN1ps5us1ZsDvG%2B9VQ7eaU07DLueWUdiEIyPM76vZ3REmq9b%2BG8vTWOb3jB8DL37O0kSCET2h3pJTIi30aYwGWIrBCwrjwMKtCfYl2ON9HQf9iiMqyVghNilqSRhTzjSL03Su6BiY2nvv9pxDV0x%2FmK4tUWmBg1VVe5Q9%2BieKUVDolu5O6WoIbd4bsDCjKlPo32nwFmT8s4wwciUO6oR%2BSYhQprUd5SDPuIkgDakam65sBo13DZthmo5TQ6To8ZrtXZO6DyXfz2TtNx8K0pvHFlYqKjV8Asvw3akFjy1sjx%2BGc4sg2sPIXxAOFWDeT0CypGbyvuzUvYBvDSZB7TbI4p%2F9SerMFAGF2gggLOMIICyjCCAbKgAwIBAgIBATANBgkqhkiG9w0BAQsFADAZMRcwFQYDVQQDEw50ZXN0LmxvY2FsaG9zdDAeFw0yNjExMjkxNTQwMTNaFw0yNjExMjkxNzQwMTNaMBkxFzAVBgNVBAMTDnRlc3QubG9jYWxob3N0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vgoeq1hrcFlBjzCmpPMOpFscAu1Tspb79GssxnzO7Hhm3gJ5uya5q4ilUgvD3kuqFJPDyInCCXIoKc25vFv1yoK1tRJrCjRhI2%2BfGlpU5eERcT3By0VZnfjUGBE%2BcPbda%2BWZsoM9azXL1RHvrXQmCwgw2WpmBSssnzs650HvQw16FToN0yA8NrDskR8ZOvDH4fC4%2BD1JGHR2yan%2BonFPjVH5Mk7CAXwpjTZeuRlirJWUQpNJgbkgJhDZnfB6IDW2mnzYqHKQsHTzRQ%2BXT5105ltRihuimyJDJGZT1RsL5gRkpE6y0UE1eaMI1cuvhp3bZQl8lU8eIDFkWAxp9vxkwIDAQABox0wGzAZBgNVHREEEjAQgg50ZXN0LmxvY2FsaG9zdDANBgkqhkiG9w0BAQsFAAOCAQEAzE0Vnvi%2B5Axv3iIpJDz927nvze5rSueY7OYDjvfMdLoeEggsmI9M5MOUKye8hwBI4KhVnRLykKFG7tB70%2B3W3gONFpl26c4YWndLE0nOKtcJgERA6cREaXvob8ijXt3kz7TR7XhSCMzjasC08ktzRJVN2qJgIWth87KKq8k3L1oWoaHy%2FGERU8i0tCsc0rF%2FDVkd4gSHQ%2Fh71ZhCgYAe9xatBIPV4udNow8vDlPp3JwZGUcgnxya%2B8qM3ISDbGZhtNv4k%2FrFLfJUEMUgoI4PtpgUUyJQM6BBJNeEiOXInTHT7KWUBAW4f18ghsVinYzpMoJEIC6S1VWFHRpOjScYkzGCAgUwggIBAgEBMB4wGTEXMBUGA1UEAxMOdGVzdC5sb2NhbGhvc3QCAQEwBwYFKw4DAhqggcEwEgYKYIZIAYb4RQEJAjEEEwIxOTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yNjExMjkxNjQwMTNaMCAGCmCGSAGG%2BEUBCQUxEgQQ5Zer4VMExD2Wj7Djw4A%2F2zAjBgkqhkiG9w0BCQQxFgQUGKILDz%2F1BLBqoBNjYC6X7Lcqn2swLAYKYIZIAYb4RQEJBzEeExxGM2hjaVhxTWhLTzFzVkdxY0dWTkRKOGpYd0U9MAsGCSqGSIb3DQEBBQSCAQBw2XONGhgSXHPg8z6%2FjYQn28AETqiIGgBBuF%2FbBYxBVQq50hybwWkRVZp%2F6RpzPipSvUiRJFEuuA2UvRUlYmffL6wZwdKtKX6jyOTDRfagU4Y%2BMVRyCdyC5WG9koBIhpAHtXb%2Fy8xBZReiqoHVJwOBrdEsWHgUJYZRRZEPz4VOVelJLmRVTeTYudpEDav0m8a10mRKvEx0EGADn5N4u026eMZ0XBoBDzjLMtejWc9KTTnBRZM5GGWXBdJuINVZfxMeeGnlbVYw5%2BjKG22xtcvGqHqBmWutYuouOrDEs5bKbMPGl6Oeikj87pThjKv0NrKa7IeCL%2BR7ulshZv1w77n1" protocol=HTTP/2.0 public-key="RSA 2048" referer= remote-address=127.0.0.1 request-id=c95784d5-0c89-4ec2-9eaa-3f8d9e1ea064 sans="map[dns:[test.localhost]]" serial=208808538963706928621310825383411030549 size=3143 status=200 subject=test.localhost user-agent=Go-http-client/2.0 user-id= valid-from="2026-11-29T16:40:13Z" valid-to="2026-11-30T16:40:13Z" + common_test.go:309: 0 C *H  40 01 0+0 *H |x0t *H e0a18040010Utest.localhost0  *H )CoT^(ZW\ap4}+;Gd?nli:Qz>$Esi.HwOxL TU2 Ҷo`ӉDKHHoc^Ys/e[&(R)s"ҲgCvHCތa $FgJGoX$)ut+(:n;a R ꤐJ>f5G;4zeVQ + M&䀘CfwibB>]>uәmF(nl OTl/:E#W.wm%U - =0, - `HE 1t2gz9TRv+SSmtPJv5DIQ08k8Fjc=0  *H 7qw7uN i}_&)]QFʵfKL;H`@&iCq'Z)vn"9BV_s2cO#CJĖ"fN MJȮuJ#:7l5e;PE鎜ZNVi059nS!9f%Ӛ?YD #~ B ӟQIVI/7x鄰ͽ^ + w룕;NA ---- PASS: TestIssuesCertificateUsingSCEPWithDecrypterAndUpstreamCAS (3.32s) + `HE 100 *H  1  *H 0 *H  1 261129164013Z0  + `HE 1嗫S=À?0  + `HE 1嗫S=À?0# *H  1#s-0, + `HE 1F3hciXqMhKO1sVGqcGVNDJ8jXwE=0  *H 6a}̮Qg`ֵW;s!DrrLP ;y Ʀ2ib Hxs3s>lhoa"aإV'1/;_n/ï6-Wla';F^M;TE>/\]#In O0N - 2BYXX),>]UѼߨn;y[$hE+l+hglw[8/I)Y.J9`{AioP#9u jM)"OkC3@.+w_,rF?TeV :ƒq].t/ 6c5⡸؇:JF`_dT@[j_CI;4^BىUT]O%SϮWJN.GVdgzUĈBytbAc|)hv1XK _c#nDH=v:3+TS;k_w0&Xn ï5Ǜ3 lj*ؗgII?[T|?$\"ڈV'G٠ - 9-QIjv.sv%rj)Woomܟ6O Vq) Y8.vMi-4qO|k bPf~%'T֭TsFWҖa"TaLO+m)>)J3]Դ]<000  *H  010Utest.localhost0 251027091137Z 251027111137Z010Utest.localhost0"0  *H 0 - g _.m+iB%g`\i**wO"8HGEVuFO)EI⻿r+HMDK'?a rcY| 3 4_x4ll]&zqU*QIV9-obZ45;teyUB׆%0CÓ5ӵ$`99,E$q=-^`t:7-r4ĚD}a00U0test.localhost0  *H  ǀѨ>ĝ݋s?vg&#Ҁ! cogEb.PWA43Y9*B92]? - Z@/*Bu=,Zhk1*ƂͼI01xu-̗Gld v":E>u ^_ O98:6j?nWp;|KI x6A%d]o0*gV*1Vl΅DV|xPŭHM Ņը_AT\ǥU - O[+u5Y Xz{eGsU "G-q壒E(u6ihkgAk`)誑EȠt6 =ry_xѬ4ɑWKyuίwK7څVS0"I֢4BT]PޣqrB8&ksЫ" OW@ - ɮ ۅٗR,dRg|K ە%l|xGS/8l<_L]ĉi,N*ZJz?j*h1FSn^ ۦ['5գf0d0U0U00U̕IYq-@0U#0̕IYq-@0 + *H=H0E F5|#HT=>̴>%!4dJPky-AU¡1 + common_test.go:286: 0 : *H  +0 '1 0+0: *H +'0# *H 01S0O09041200U )Step E2E | SCEP Decrypter Intermediate CA0  *H #;Ws-P}JG_nC٩9 qwMsʯyM1CYX^,k~T}RC8d2@]-PItVE`U1':`4j/c{]ˬ~6 rQ-{.ѱ| [jG)đ: + DSvn(HhYǸv>>dG0Vt΅ə `q:g?>\t< + Q1}?ϩWCcH `?Z5B)N Qj + >B xsfj 8# c MoםjB/c*.,,;*4쓝,k *NdUE/~T|nοӱh16z\!U&r X}1RK˛ưϦ~Ԡ $Bp|`SxN%쏩~5}ez,58{0"MYլ}* 鸔[H8000  *H  010Utest.localhost0 261129154016Z 261129174016Z010Utest.localhost0"0  *H 0 + y]w:h%,hz7c>/V6`bZxMmE9/3.jk%4CX1#CQWX%`"fI |\GO~#t:Wu\@-Czf5(I_!8QJpr2a|z *$o`Oߵ߃xk㾯p9װ8_hEjN"擘z|wP~۳8@K100U0test.localhost0  *H  6zG3؉6`Kš"g"l1]VZˣvl[)o,`YAmgj0# *H  1W}lMZ60, + `HE 1VYki+I7LN8MCnmA7d+L8Hb5ce+s=0  *H |B.Qo Ɋ̇iDYM + R + (_xwv4|[gub]3 S hc.y⳨Vec~=\gB Gv4RӉޒ5XXyr q٣Vf Z7$_ $Si&{E!Y3}@i= zMv.QËlu$~[ZP/HTU*w' +time="2026-11-30T06:40:16+14:00" level=info certificate="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" duration=11.54296ms duration-ns=11542960 fields.time="2026-11-30T06:40:16+14:00" issuer="Step E2E | SCEP Decrypter Intermediate CA" method=GET name=ca path="/scep/scep/scep/scep?operation=PKIOperation&message=MIIJOgYJKoZIhvcNAQcCoIIJKzCCCScCAQExCTAHBgUrDgMCGjCCBDoGCSqGSIb3DQEHAaCCBCsEggQnMIIEIwYJKoZIhvcNAQcDoIIEFDCCBBACAQAxggFTMIIBTwIBADA5MDQxMjAwBgNVBAMMKVN0ZXAgRTJFIHwgU0NFUCBEZWNyeXB0ZXIgSW50ZXJtZWRpYXRlIENBAgEBMAsGCSqGSIb3DQEBAQSCAQCiwKrqAqulnPEj18I78ehXcy1QiJrofbxKR19uQ%2BfZqTkF8RSZCXF3TeDBy3PKr3kF3k0xQ45Z7RdYXizRPEXbDDyoD6K61QkrjynTVB2zB8jiM5UMHNXPYNHBYZgsJYLf2C5ilL8E20H1dZj%2FBPvlXxCAsZIULvgyHpC5dNnorgJk%2FISqw6lSa4crp1gEdKvjNE8zbow4tXOAudlcEifqrRuNsptIhjOp%2FBq7h%2BE9fgcNlXMKL5REJ7606GbdhYRqZs7dXHT5mKbdPCHs%2FwmKnuOFH1qVcaAqszItjc6171gygkwK4Ge3pB3z1EQgWdJIHTtHiRH1Wh%2FUXNfrt1TWMIICsgYJKoZIhvcNAQcBMBEGBSsOAwIHBAgg%2BrKvy%2FFSq4CCApBorSQQDOQPrFOxgyjiyv8vZL2aa0Sf2fFDrj6x%2Bb60EqVrflS9t5HaycEDfYniUphDOOCIZA6tFzLgQP9d1sItUN%2FFSQSTdFatkeD5RecGYBFVMecn0zqbYAPVNGrXwi8DYxJ7yN75XeG%2Fy6wG64vAfhu0CDYLqnK5US17LgMU0bHSfAyu9FvHEmoCR%2FUplfzvxJHzjv86H9cKRLb%2B5qJT94x21W4oo7kQSGi%2FwcYDFsAXWf2kx7h2Pj6WZEcwElb7dM6FFMmZ1ukNF%2BwGsGBxsTqfZ9vwpD%2B9Pv9c4oV0Hjy2ClExockCfT%2Bgls%2Bpi%2F1XQ7FjSO6hAA2uAmA%2Fn1o1QtHfxNrmKcG02ev%2FThraC6u1UZClagqOkj5CDBC%2FrAbtGniR08AT2O6573McZrZqHhAMOKU871nbyG6clPRV5fJjJtGKpk%2BaYNrNbBrk8B6n%2BO7wsf9vCYZAORkKfKAo%2BUxBZBlNVtoX%2FlyAGLF4W3cjAo%2FpLC0yumAjk11blsfx3ZPY%2FjXkyJmx7BEdT8y%2FP3bzqoK7Dm8O5au%2B21G9X%2FrnttFUfRz5%2FgbDsnaCD8v1sz7VzeuOI74MkwmMY4WfmxmNDbRN5xBv2Ned9n%2FsasBCL2Mq1i7lLCzEO%2FoqNOUa%2Bekf7JOd%2FyxrhImlDCqJpo%2BwTgWuZJ8Xq8jXVbhFL7iNlH5UwHyh1snltm7Ov9OxjROoaMACMeU2eh6JXLLV%2FyEaF5%2FYVSaCcrQMWH0IMVJLqsubxrCjz6Z%2BjI6uy9Sg7uUN0ukk9ULCcBqs%2FxrxfLsd5sjFYO1TunjX4R1OqKz8Jdfsj6n2fhM1fWV6EiyQlLk1OHswIhBNj1nVrASqffe9Kg3puJTREOOnW0ifOKCCAs4wggLKMIIBsqADAgECAgEBMA0GCSqGSIb3DQEBCwUAMBkxFzAVBgNVBAMTDnRlc3QubG9jYWxob3N0MB4XDTI2MTEyOTE1NDAxNloXDTI2MTEyOTE3NDAxNlowGTEXMBUGA1UEAxMOdGVzdC5sb2NhbGhvc3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT8XldgHetH4DQ9%2F6pmZo6aKMQtPiiohHUJbYshWjrxXqp6sY3gNz%2FY9%2FQPi9WNrFgYoLBibOkWnhNuZ5tjKVFFMs5LzPKLuVq3c3ya5sIixUl0f00p6ryn0NYMYsO2SNDUfpXWPP8JRxg5iJmSX%2F3DZ%2BymHyTXNVHA0%2FJfiOkxHTGB%2B86V%2F91i1zSQBYtGUN6oLb14PNm3DUohklfmL2TIeWXEDjsUQIUStZwcjJh6uXI0XyhyB2hBnqYDabbKiRvYByJT9%2B1hN%2BDeGvjvq9wlzkIgo%2FXsDhf6mhFatBO6SLG5pOYevT3%2BHyrd%2FVQsn7bs5z2%2BTjiQNBLMfO3HZjTAgMBAAGjHTAbMBkGA1UdEQQSMBCCDnRlc3QubG9jYWxob3N0MA0GCSqGSIb3DQEBCwUAA4IBAQA2BoZ6nkczor2sqQXi2sn92IkDNsvMYBdLxMzC98PCmgWh%2BCLFZ84ibJEx1RtdGBiLVptakrnLowF2oR9sxv9blindbyxgWc9BzAYbbfqMZ%2BtqhTxQryej61MkqjFJs%2BNjjqcEZwWcHlQfwbURtgviAMnrNLeHI10Qr5hnoXZTXYx1fQxexCoSbN0DjIcxRv%2BUZ7z0MFbaZQDd0qzWDdywh2eRd%2FhgRF2w%2BtvLlcPhrRiewtgejcNNqbdBqb5k1mf27AYkDqpG0Y12iJkzDXpyB8LjloTZ5SWaSiMcaMEqniuBVBQwNPA0achOan9%2FMznOh22aKvBGj3TpF1V5bLkNMYICBTCCAgECAQEwHjAZMRcwFQYDVQQDEw50ZXN0LmxvY2FsaG9zdAIBATAHBgUrDgMCGqCBwTASBgpghkgBhvhFAQkCMQQTAjE5MBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTI2MTEyOTE2NDAxNlowIAYKYIZIAYb4RQEJBTESBBA%2F307Wg%2Bj9QLpO9AZCjz73MCMGCSqGSIb3DQEJBDEWBBSW1FfyghB9BLRs9U1a0xL5n4823DAsBgpghkgBhvhFAQkHMR4THFZZa2krSTdMTjhNQ25tQTdkK0w4SGI1Y2Urcz0wCwYJKoZIhvcNAQEFBIIBAL58EfQYQradLlGa%2FhoS87%2F5DgMF3G%2FuxQeRDcmKq%2FWGzIdp1h22RFlN8QoHUowKKF94FRybznd2iao0w3xbz%2FVndWL3XTMgU7sJaAaLvGO97Yku23nis6hWZYdjiX6F2H%2F2Pchc%2BdJn%2F0LcDEfzdgeuNNHtUsbTid6SvA6i%2FDWyw1jnWHlykQxx5Nmj5uRWZrZ%2FDIOtWhyyN%2FkkXw2jgeS3JA6K%2BI1Ti4vCnb%2B3aSZ72EUC6%2BSCGyHP1VnWM33lQA9pgO%2FmrBDvrj0JetvQTb7%2F39J2g4oulJP36cFRw4vqbHUkfthbFL%2BRht5aUC8V8khU1VXW6yp3DqYYDvDTJ6Q%3D" protocol=HTTP/2.0 provisioner=scep public-key="RSA 2048" referer= remote-address=127.0.0.1 request-id=28d7e799-1d38-43db-a77c-60bea27cb0db sans="map[dns:[test.localhost]]" serial=256368031985007321271030768979270902061 size=3143 status=200 subject=test.localhost user-agent=Go-http-client/2.0 user-id= valid-from="2026-11-29T16:39:16Z" valid-to="2026-11-30T16:40:16Z" + common_test.go:309: 0 C *H  40 01 0+0 *H 0 *H u0q18040010Utest.localhost0  *H ,%mݾ-I+aͻcWtcņG r)1R~Ŗ}b\ըF0k~|X(7 /EUXB}x7ү%הh߸-l衢zmrkqb,.7;NO̴nRpwLBxX~fKmT1[Н ,E3ᚬ;E^ N/}jOa|(jDyYL0. *H 0 `He*?G q]-o+*1 =]Ŧ?%͗HfR + :y=ʚ `u;Ե{=㬯M+Lvvfzk*B̀3@SpUVl1Iȃ*A9s;i3L u52 Ay7Mίg.n?':PX̀aJCǯ8h0Wف CpGO*DI26K&E?J/zF5٠Xv˘[J/V6`bZxMmE9/3.jk%4CX1#CQWX%`"fI |\GO~#t:Wu\@-Czf5(I_!8QJpr2a|z *$o`Oߵ߃xk㾯p9װ8_hEjN"擘z|wP~۳8@K100U0U%0++0U#ءQB)CR[m0U#0̕IYq-@0U0test.localhost0 +d(@ 0  scep0 - *H=I0F!V(g@qzGP<ׇ|E!,#%]ph2'{}wj0[00 - *H=041200U )Step E2E | SCEP Decrypter Intermediate CA0 251027091136Z 251027111136Z010U decrypter0"0  *H 0 - Hؚ\,LeSrh( v@ - / =6ОϏf9d~8X8V~6FWLـǠ%M,!bo. x IxWxH$LgS@J@B2w\Nj9?7D~+WlIm_析Jy=Rgq*j!FNϗqȄTѶ|gɥ{8n - 4 - P{ٳJlnJ/әX0V0UAwAխ Pk̅0U#0hL6+6I{0U 0 decrypter0 - *H=I0F!j0t <jj粧 D?!Y=MmƵ膗Hz' n0t7vS61T0P09041200U )Step E2E | SCEP Decrypter Intermediate CA0+0 + *H=I0F!J8ƤT/j 3'%c!r]%ko~&aa$l0Z00 + *H=041200U )Step E2E | SCEP Decrypter Intermediate CA0 261129154014Z 261129174014Z010U decrypter0"0  *H 0 + 3L3x}d2,K.H8A,#CySC $U ("H0~h‡'JYvOLg9aks!9҄df:Xֳ 4@?_Vk[n J&daZAJA<Ķs7H /9%hL˦: +S:hWt2|׺Cv=C9׭OLŸ*h1ymGUk w{aĽ;S&| - 6{/B"EtwDJ$|4!A2ojCʡ35ayXE:ǿ>خV!, ---- PASS: TestIssuesCertificateUsingSCEPWithDecrypter (2.87s) + `HE 100 *H  1  *H 0 *H  1 261129164016Z0  + `HE 1?Nփ@NB>0  + `HE 1?Nփ@NB>0# *H  1u:XdiY! [0, + `HE 1VYki+I7LN8MCnmA7d+L8Hb5ce+s=0  *H )%ӱZw~/VI싊@ lM0ew1+޳Pz| ܟ\2Ov !~:`?+ao=gM"={$hxᓟ}n.[겘lzIO0r2HC>x-h#c* f3RٯیE|'=v/nm̸ "[1>+Gn;g?/L׳]ش6~ +--- PASS: TestIssuesCertificateUsingSCEPWithDecrypter (2.88s) === RUN TestFailsIssuingCertificateUsingRegularSCEPWithUpstreamCAS -2025/10/26 22:11:39 failed validating SCEP authority: SCEP provisioner "scep" does not have a decrypter certificate -2025/10/26 22:11:39 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 22:11:39 Starting Smallstep CLI/0000000-dev (linux/arm64) -2025/10/26 22:11:39 Documentation: https://u.step.sm/docs/ca -2025/10/26 22:11:39 Community Discord: https://u.step.sm/discord -2025/10/26 22:11:39 Config file: loaded from token -2025/10/26 22:11:39 The primary server URL is https://127.0.0.1:38053 -2025/10/26 22:11:39 Root certificates are available at https://127.0.0.1:38053/roots.pem -2025/10/26 22:11:39 Additional configured hostnames: [::1], localhost -2025/10/26 22:11:39 X.509 Root Fingerprint: 9a9b5c3cfefcf8accf49064ebc3733df69f5af5d557b38a9b8dff53a2d7fb51b -2025/10/26 22:11:39 Serving HTTPS on [::]:38053 ... -time="2025-10-26T22:11:40-12:00" level=info duration="19.44µs" duration-ns=19440 fields.time="2025-10-26T22:11:40-12:00" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=fc3a99e7-091b-478e-b9c1-5ae3d44f7223 size=16 status=200 user-agent=step-http-client/1.0 user-id= -time="2025-10-26T22:11:40-12:00" level=info duration="39.8µs" duration-ns=39800 fields.time="2025-10-26T22:11:40-12:00" method=GET name=ca path="/scep/scep/scep/scep?operation=GetCACert&message=test" protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=ad3c599d-e8a8-460d-99e4-1aead8d0d3bf size=881 status=200 user-agent=Go-http-client/2.0 user-id= - common_test.go:204: 0m0Ud&QHW>0  *H  0:1806U /Step E2E | SCEP Regular w/ Upstream CAS Root CA0 251027101139Z 251028101139Z0B1@0>U 7Step E2E | SCEP Regular w/ Upstream CAS Intermediate CA0"0  *H 0 - +i;m7;%Mo!wZކO`*C(tv)CV3HyE-(x]j"afKVyP*ӝAhԩ_'pJn G7b% - o$yg٧?1cM;@ N٩Y+"Cf0d0U0U00UEDj.wK h|̯F70U#0EDj.wK h|̯F70  *H  BCRgQ`v<҃c$kZXWscBQ-{֧^[}(92~R-s1gnKs7T&ӠPg^Zŀ~:]x&c - Y?·LrP}! \ax3t3xU GI# F\7.TTg&Q-fTi}n*c'/6G,oT…T<#+DXuS@Q - common_test.go:286: 0 P *H  A0 =1 0+0P *H A=09 *H *0&1i0e0O0:1806U /Step E2E | SCEP Regular w/ Upstream CAS Root CAd&QHW>0  *H B؍ġ(w{:xi@K9L|qZٻBϺH⠖4ɑ湙MK]dj> :@.OP( UvJ< `a4D@04JRjG qR$W<+ML҉q \Mߘ{< K7#@0FQǟ.'Zw8eg?Fm/6c - ' #3!=Mw3|+:0 *H 0+1sJ3wwҏuh}({$uC]F0:KM|(H]^Bd` <(RXp<ӂ9yХ,#X*6 74oEH !o7 ]*'V:)W.Ћ'Z,֚O,7 h:?D,R#Gz?z1NitVOoʈkWso݅( n2Z^ֱѳj-_2 lM &(_~uë0O*Sm֍q4ĹF,o$!&QCWƅYA7Nӿb%o!@VմMxn?S)%Fc e(^~n^$@d6yE֖vS vYJ"`Qd:ТzbNfs9^1m[Ưeub2NeK`Ƣxm.R&ʝv/j - RD~[i( 8Cϱ!lqx͸wtRaL9>K?1pS5ځf $0׎.7Jk^ѹ?#clo@kDVr- - h-Ac*RkYＲ.}G25 ik>000  *H  010Utest.localhost0 251027091141Z 251027111141Z010Utest.localhost0"0  *H 0 - ǡm+-9֑hR/{~ Box u"%: e:ԃFms\Xש#0e;@8|&{疹kz \c:ԮI j5 p&Mn - wۘiw-_7\,ARlJKz]wzUxLKu֊ջNmNUU HؤSO]JTr$zsGHɘ}"ZI+mR(/DB*J:Fl|rl 2~2tX4m@(1/e_j100010Utest.localhost0+0 - `HE 1190 *H  1  *H 0 *H  1 251027101141Z0  - `HE 1k9KۧrsP-0# *H  1)9*M7ǥw[0, - `HE 1TryzbLPLyyPIAHIastufV8qTRt8=0  *H &KTJ`ȯtPEiVsCgm1VW#b7Vhi"{:WLʁSDzKM_@y)7bۂtUh(52wǠx[ےKݮž/W60.l[B5̈́q JqjҥHa6$)j_̚\8]&a-!uȂ~Sqltັʱ"ÚI=$ - N8ЪC+Q -time="2025-10-26T22:11:41-12:00" level=error duration="527.004µs" duration-ns=527004 error="scep get request failed: failed selecting decrypter: provisioner \"scep\" does not have a default decrypter available" fields.time="2025-10-26T22:11:41-12:00" method=GET name=ca path="/scep/scep/scep/scep?operation=PKIOperation&message=MIIJUAYJKoZIhvcNAQcCoIIJQTCCCT0CAQExCTAHBgUrDgMCGjCCBFAGCSqGSIb3DQEHAaCCBEEEggQ9MIIEOQYJKoZIhvcNAQcDoIIEKjCCBCYCAQAxggFpMIIBZQIBADBPMDoxODA2BgNVBAMML1N0ZXAgRTJFIHwgU0NFUCBSZWd1bGFyIHcvIFVwc3RyZWFtIENBUyBSb290IENBAhEA6mQmUcpIE8NX5erbwj7X4zALBgkqhkiG9w0BAQEEggEA84YDQuSB2I3EoSiUd3s6%2F3jpaQRA00s52d4YTJHO3%2BwV9cJ84HHvsVoY0%2F3H2bu3QujPukiZ4qCWzjSLyZHmuZkWgZu1hLBNSxnjXcZk%2BaERHZ9qPg2zOkAuT7QZHlCHlRSmKNQYDI2hVQF2SjzV6foamRPp4%2FDrog2yYAhhszTEREDJMI1%2FNKqaFsxKUhL19WpHDdlxg%2BzvpVIFJJ1XPNQrTd9MiNKJ%2FKGj1sRxHtMJXAaPu03fmBzie4o8nsXfDUs3I0AwRqn0%2BlGehsKNx5%2BnLg8n8Qev3Fp3OPLmt2Vn7j9GbS824A9jCicMkCPYM7chPfdNdzOc1OR8tCs63zCCArIGCSqGSIb3DQEHATARBgUrDgMCBwQI9zHH9bpzSpiAggKQ7IAzd%2Bl30o%2BzAKF1j5pogpR9KLWIeyR19RRDXavyRh0wOkuzTXzvHSjxHkhdxl7p9pTS%2FdxC9WTABmAgiDylKFLmAPVYcDzF2xHTgpqQBDnnedClgiyYvPWRrOivI1gq1O%2BmNiA3NI9vRUgNIfFvNyBd%2Be0qzx4cGicaVjqqKVeXAugEES7Qi93RJ1osAqrWmk8sN7iCmguYpAtoOj%2FDRH%2F7kyyPUiNHlcZ6%2Fes%2FejFOD2kV5x10%2B40AvMjxVhPgT4FvyohrVxri1HOtb%2FvdhfPeKBUgD49uAYoyWrihvx5e1rG6oq8FgrjRs52oaqmvLV%2BiDzLICYWmbE0MuibBKBxf0PN%2BdbQRw6vN%2FY8wmLXDTypTbdaNA3GprzSWxLnW6UYPHyxvJIOMugXDIeLVJlH3hAPj%2BkMWu1cfxoUaWRgbg0HzkMLf2zeT1U4T078XYpoC%2FLyiFiVvgf0SjrTE%2F%2B0hQI4dVtW05E3neB9u8j9TAikltxuRRmOhDcAaZSjBnv3oXtN%2BvPNuXrbwJECYZI829KV5lEXWlvt2Uwl2tLLjWUqm7hT9ImBRqvbysGQ6sdCipnoCYp%2B%2B8E5mc4nZ5TnykvQfAq9eMfiEbaOBW8av8b3nZfR1iebTYvmr84KjMk5lS91gxqL7eG0uUrkm5sqd1Bp27i%2Ffao0K2g3wqVJEftZbtLe3aRub0PjnKIgJOL0fr0PPsSFscXjNuHerdFLq1WFMuTk%2BSz%2BLxzH8l3CBw9RTmu6ovzWv2oFm3wsHHyS4MJW53deOLjdKaweNXuT20bk%2FIxobj2PLbG%2B7QGuNRFZyyeaZLQrMaC1BY50q%2FNhSDtprrtXfWe%2B8soUVLoV9RweI%2Fh0yFzX4IGlr7j6gggLOMIICyjCCAbKgAwIBAgIBATANBgkqhkiG9w0BAQsFADAZMRcwFQYDVQQDEw50ZXN0LmxvY2FsaG9zdDAeFw0yNTEwMjcwOTExNDFaFw0yNTEwMjcxMTExNDFaMBkxFzAVBgNVBAMTDnRlc3QubG9jYWxob3N0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6HibQeHhSuI7tMt4qY51pGsaFIvA%2BJ79H7B8%2B7NC0JveAt1f6QimrYD8oO%2BJRP6OhQgzOu6ZTrUg0anbXPbXJFY0depIzCmD2U7QN44q3zhit0me4TnlrlreoeU%2B84LnqvEXGM61K5JEw1qNbEg2xNwGyZNkm6Tio0K2nfbmGmot9J3vbfl6Y8tG183GblcLASTu81BUmxKm%2FlLjuN6qB%2Bc9F2Wd4rDevU8pHVz9s43sJ2CaOcLXPoiPJTAkw2khTAjc6UY6RWEkuEadeYe%2FGJJizbPzRkJ0kVQs3bSc%2BqyaiZm2zwr5lwkcVUfmYO7PF0PZYW2U5cM1LWMUmHLVQIDAQABox0wGzAZBgNVHREEEjAQgg50ZXN0LmxvY2FsaG9zdDANBgkqhkiG9w0BAQsFAAOCAQEABA5JT1%2F9ScfD5w7e526PTgovfMtYMjKXiTERw%2FldVCPPzES7hU7Pa1%2BeJsgik5Ot6bacYeUHuJy924D9PdDz91wIt3pX2DS6CvH9J2Hnl0bOTFEP4AZCRnkiXZT9dBaV9%2F9M4sKB3ejdcMS3x7E%2BG1V4y%2FQBTEuTuH8Dxsx1DtaK%2FtW7k4brTm0UTvfrVVWIxeUgSNikU0%2FIFV24SlS1EQi0n3KADyR6c69HFMlI2x3JmH2kuZbw7QARzskiBxdaSSsHbVIoFaYvREKZiCpKOkapuIWAbHxybNnBC6SWMtV%2BMnRYrqMZqb2bNPxtQBbiKDGfux4vBrF%2F9h2vpmVfajGCAgUwggIBAgEBMB4wGTEXMBUGA1UEAxMOdGVzdC5sb2NhbGhvc3QCAQEwBwYFKw4DAhqggcEwEgYKYIZIAYb4RQEJAjEEEwIxOTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yNTEwMjcxMDExNDFaMCAGCmCGSAGG%2BEUBCQUxEgQQo6LD7mvAOUsI26dycxZQLTAjBgkqhkiG9w0BCQQxFgQUohMp3Tkqsk03FQXpGMeld4WAWwgwLAYKYIZIAYb4RQEJBzEeExxUcnl6YkxQTHl5UElBSElhc3R1ZlY4cVRSdDg9MAsGCSqGSIb3DQEBBQSCAQAPFyblrNxLgVRKioLmf2Doxsivpqd0UMdFxOSKaQNWcxJDZ23E9fyQMVZXIw9iN1awaIdpIt7s3Xs6HsJXTBXKgeoYU0R6S5CyTZ1fQLV5uin4N%2BBi%2B9nbgh903VVomxIoNTJ3f7LS6Jf8uevHoHhbg9rs7NuS29dL3a7FvqGbL%2BlXxTYw79juLtTB5xMXbFvzQq%2BiNc4H8c2Ecc4LjUrPccpq0qVIYTbUxPnhAQW16ySxKQ5q44tft8yaXDjsEpBdJtIYYS3EzP4ht3XIgtvJfpNT%2BHFsdN%2F84LqxHhqn9gaRioR%2FyrGkIsOaST0B6yQPCk7WDxvDONCqQytR%2BuTK" protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=4b206286-92dd-4adb-b91e-a14fe65bb3f1 size=116 status=500 user-agent=Go-http-client/2.0 user-id= ---- PASS: TestFailsIssuingCertificateUsingRegularSCEPWithUpstreamCAS (3.18s) +2026/11/30 06:40:18 failed validating SCEP authority: SCEP provisioner "scep" does not have a decrypter certificate +2026/11/30 06:40:18 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:40:18 Starting Smallstep CLI/0000000-dev (linux/arm64) +2026/11/30 06:40:18 Documentation: https://u.step.sm/docs/ca +2026/11/30 06:40:18 Community Discord: https://u.step.sm/discord +2026/11/30 06:40:18 Config file: loaded from token +2026/11/30 06:40:18 The primary server URL is https://127.0.0.1:34865 +2026/11/30 06:40:18 Root certificates are available at https://127.0.0.1:34865/roots.pem +2026/11/30 06:40:18 Additional configured hostnames: [::1], localhost +2026/11/30 06:40:18 X.509 Root Fingerprint: b375ee0e14a24972ba1f51bf7f8c3218d61f3a9201e3c83099765838ae0ba674 +2026/11/30 06:40:18 Serving HTTPS on [::]:34865 ... +time="2026-11-30T06:40:19+14:00" level=info duration="20.88µs" duration-ns=20880 fields.time="2026-11-30T06:40:19+14:00" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=1be9c623-a978-474c-a65a-b377534ba64a size=16 status=200 user-agent=step-http-client/1.0 user-id= +time="2026-11-30T06:40:19+14:00" level=info duration="787.24µs" duration-ns=787240 fields.time="2026-11-30T06:40:19+14:00" method=GET name=ca path="/scep/scep/scep/scep?operation=GetCACert&message=test" protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=f4680fc5-9e45-4615-8a46-43cd362f137a size=881 status=200 user-agent=Go-http-client/2.0 user-id= + common_test.go:204: 0m0UwgldT0  *H  0:1806U /Step E2E | SCEP Regular w/ Upstream CAS Root CA0 261129164018Z 261130164018Z0B1@0>U 7Step E2E | SCEP Regular w/ Upstream CAS Intermediate CA0"0  *H 0 + 7kэ SB(y-o\.Sozi jhM0eχ\ɛ& h,NJ1CחZQ8o&& + e٧P;K{;݈>"=0px3ϲ̕B-aHoډ:X*ͼȚ5[|F j1[1,CdDU閇9޺2c + DvDNƾffXVM+ŦLmkBkB}zCN`a 4ǝ<&a &ʡю a#cx$!MӅh5<";YwByo6bYS\}r&G 0 *H 0+W1>ɀ bEBU4R$jy C0 + 2Airk/hM=Ș2 PIVg71bsD#ӡ%7 Im2+oX?HJ0./۳WX eGۺCUg;6ahqi@OBguKc&; :T + u9B1>> D-|yj)rr_0db_z&蕂{#" ɻ%fXbVfdվƽg0>8I1`Wb&1I6*sb0EK1>%Q7"n{(6Xנudo>ۛ݁A9C ~#/$mW r%BՄ} P[JJf]ɯ7m+iYHn=)OUR(b虏{ф\^\ 2rMhJd7ܝT^5bp_oweURCkQ{ї J|8,W)swO;A%XSü + VpUկ#s }=yPw0.$?F:+Q*Y @a KFO'}o:qNsXWb=&X000  *H  010Utest.localhost0 261129154020Z 261129174020Z010Utest.localhost0"0  *H 0 + ,wv@-| (zmCKdRqQX%lT4MwH[fDžPxq CǭP~Jn!@طuV8PRQZ//q + ^k+|5;Pϵ@*ڿ*nAmB'* q~IojS/kwɨP @ 62 Ԅ CFz-,g/!}B}80QD~7$ + R:X 䢴 Bm'up|<]u-ny| [P +time="2026-11-30T06:40:20+14:00" level=error duration="572.8µs" duration-ns=572800 error="scep get request failed: failed selecting decrypter: provisioner \"scep\" does not have a default decrypter available" fields.time="2026-11-30T06:40:20+14:00" method=GET name=ca path="/scep/scep/scep/scep?operation=PKIOperation&message=MIIJUAYJKoZIhvcNAQcCoIIJQTCCCT0CAQExCTAHBgUrDgMCGjCCBFAGCSqGSIb3DQEHAaCCBEEEggQ9MIIEOQYJKoZIhvcNAQcDoIIEKjCCBCYCAQAxggFpMIIBZQIBADBPMDoxODA2BgNVBAMML1N0ZXAgRTJFIHwgU0NFUCBSZWd1bGFyIHcvIFVwc3RyZWFtIENBUyBSb290IENBAhEAheB3%2BeFnjtkYkmxkVOgUpzALBgkqhkiG9w0BAQEEggEAgdjmsis%2FWStG%2BoAtqzjpi2EOiKURL8yzrI0cvAmxg3Pyax5fsq7HBp4E5p0UYF5u3g6okYjEPA3W5JHXWR1G4QS00xR58n5wtLrTFXm%2BN0a2lYLWCN3RFnF2USiSMSEPcY%2BxbkmHYqw9B5VyYt7ENDZULqSUVT9hlBE76QVRW0fNeJU%2BwKtrQo1rQn39ekNOFOJgjWEg%2BqA0p7Kax508AiYCrZAQYYC%2BCPzpDBqztiYSxuHKoY7lzNGOj8ffDYT9YdQjuoVj0QSxeCQhTdOFqmg1PCL7O%2FuhWRIftrj2p5N3QgJ5nm%2FBs9bJ4zZi2FnO9YZTwVx9cvImmBuhRyC9pDCCArIGCSqGSIb3DQEHATARBgUrDgMCBwQI7lfSMRLKPsmAggKQINbCYhzDRdFCVTRS5PwkzsPTHhezasB5DBpDMMMKMthBrmmocmuH9i%2BdaE09y8iYmZnaF9DHMqQNtlCdSfrJVvH%2FirUfmGfyNzHVYvoeqnPMRCOg06EloOcepDcH%2BZicIIefSeGw5W0yK6vg4sGM9oqPb1g%2FqEhKMOChLoUBL9uz6ldYudILymVH99u6Q1VnuTvziZDHNmG2aHFpQBFPk0JndbPNS8wdYyY7IB06CFQKu8l1zDlChzGDPj6mCQ7fRK63LRh8m5ni2nmAailyFXJfjDC9%2BKBk7Klii8foX3oT6SbA7OiVgsh77pgjIgwBybv4%2BCW6f2ZYYqSQVvPGHGYAvmSwme%2F21b7Gve2hZzDoq9oWPuvnOP2TqZRJHTFgV2ImMatJNipz8mIw3OvVRUsEMT68ysUWiN8lAc8EpFH%2BA7Uf%2B4U3IrC0obmzbnvEKPg2ja6ZpKdYhNegodF1ZB2vzsT%2BmQhvvryhPtub3YHpQa%2B89TmTQwt%2BhCMvJG1XCAlyJUKZsd%2FVhH2Vs78MjbaXUFtKSpGD1B%2BysYkVZvzlXcmvm5qF8QDCN20rsmm2WflIAG49EaIpT8IXprBV7pVSutAowKpi6JmPj%2FF7uNvsFh3RhJFcXlwNnoEycs0DTRxoywWCEgNK9GQ3ztH63J30%2BBtUXgGJNWK4rHBfFG%2B%2Bd5VlkOhVH%2FvyUkOSax1Re%2FTRl5iDC4QG6EoRfDgs8vrUV44pc6B3T6C2tNnHxzsUQSX8WFPDvNbv6QrJVvfucFXVryPgc8UgfbAOkD15UHfYMC6FjCTdP6BGhgI6K6i8USpZCUD7YQlL%2FUbVTyei7QR97BjmbzqkcfKVTuJz%2F9v0hIRYV9vq4ttiuj0mxligggLOMIICyjCCAbKgAwIBAgIBATANBgkqhkiG9w0BAQsFADAZMRcwFQYDVQQDEw50ZXN0LmxvY2FsaG9zdDAeFw0yNjExMjkxNTQwMjBaFw0yNjExMjkxNzQwMjBaMBkxFzAVBgNVBAMTDnRlc3QubG9jYWxob3N0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8IaLKis63eBoXZALXwJKHpt4J6J6UNLDxzWZLvgUnFRWCVsyVSTi5k0FJtNd%2BMXSFtmqOrE96T9x4VQ%2BayfeI2K%2F3EMQ8etUJbVfkrXbiHoQBfYt3WK3VaJOFBSzgWeUTxpvd3h%2Bo%2FNEjCoeZMoNEhhdE%2BfCFuDuEskHtxtp6yx5vtwLCHaFIkPgmJUZdDMxGUNU6Oif7Eq%2F%2FigfYKSK%2B3T1w6OKXC%2BVjSkiQCTOqYJ%2F5DGw8RM6rMLLJWdGCFhFQmgpJgDks7kQ2Jc9%2BkRcCev4UikdQxokSZtSfLbdn0BpTxccQdpDhfoMDMDr22J9tfHlQt8ll%2B9a8MZCBZvDwIDAQABox0wGzAZBgNVHREEEjAQgg50ZXN0LmxvY2FsaG9zdDANBgkqhkiG9w0BAQsFAAOCAQEAQG4RYYZ%2Fv38yGqRZgwdS1O9mEcynXO1f45jdR21j8TrwYRirjIHe7yGRq00pq7K%2Befbq9FZjN3wMcSHI33LaqZFlFPQSHxZG7UOqjvDzK1li40kehex7MUskw6ve%2B%2FGQi1DiMbbMJyc9AImlnK%2Bz9FsodbIop9ZExieXwYpL0lx6vt%2Fv%2BXPMBM2KYxPhP6zSVimSHCnZT6IdnzFe2FlJyqcuZmgZnH3ADVQZ7e504DbWnAJw59n83%2BKASPv3iVHPGyx6oYcfqhHmYqGC4LoBEX0KKL74AqWl%2BwgUv5AQ5nvVSrdMhRqqKELrtL5Ir1stoB%2FKp0kpysEYjrxMHILuZzGCAgUwggIBAgEBMB4wGTEXMBUGA1UEAxMOdGVzdC5sb2NhbGhvc3QCAQEwBwYFKw4DAhqggcEwEgYKYIZIAYb4RQEJAjEEEwIxOTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yNjExMjkxNjQwMjBaMCAGCmCGSAGG%2BEUBCQUxEgQQjQDjdI56DQ%2F6o3sDl0X4RDAjBgkqhkiG9w0BCQQxFgQUg4nHt2RfdXlFlJ%2Fc2YloAXz546MwLAYKYIZIAYb4RQEJBzEeExxYTUFFUTREZnNqc2NraGp3R3RITTR2ZVZyS1E9MAsGCSqGSIb3DQEBBQSCAQCCruGsyisig%2FAcAckbR9VRfoiOrdkGTOE0pA5UCQXwIN4b08sj3QTz498OD8QKNz2iKKkRPloDEC%2F1tC9x4Qpeayt8NYU7FftQz7X%2ByEDgAyrv2r%2F9tf8qbrtBtd7%2BbYZCDycqlP0NcZt%2BGklv%2FWqGU%2FGkzS%2Fda7H1%2FRikhgYPd4Dryajmo1DXC0CgwOodE%2B4ggq66gzbB%2FTIgztSEso0JQ0Z629DELYkDLGfbLwKVBCGsBn3ot89%2FQn04MFFEuH7fA9PR7DckzfIKHuRSGzqasRtYCxEd5KK0qwmNQtrUbSd1cHw85halXb78dS0Abux5%2BvGEtXznDM7KAFumUB7e" protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=4bbbf5cd-35e9-457d-b214-b7effe6ca567 size=116 status=500 user-agent=Go-http-client/2.0 user-id= +--- PASS: TestFailsIssuingCertificateUsingRegularSCEPWithUpstreamCAS (4.18s) === RUN TestIssuesCertificateUsingRegularSCEPConfiguration -2025/10/26 22:11:42 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 22:11:42 Starting Smallstep CLI/0000000-dev (linux/arm64) -2025/10/26 22:11:42 Documentation: https://u.step.sm/docs/ca -2025/10/26 22:11:42 Community Discord: https://u.step.sm/discord -2025/10/26 22:11:42 Config file: loaded from token -2025/10/26 22:11:42 The primary server URL is https://127.0.0.1:42883 -2025/10/26 22:11:42 Root certificates are available at https://127.0.0.1:42883/roots.pem -2025/10/26 22:11:42 Additional configured hostnames: [::1], localhost -2025/10/26 22:11:42 X.509 Root Fingerprint: 7af59252b683a780984fcd6440732b4bbe4631c194e0761b3469181e754d78f7 -2025/10/26 22:11:42 Serving HTTPS on [::]:42883 ... -time="2025-10-26T22:11:43-12:00" level=info duration="16.72µs" duration-ns=16720 fields.time="2025-10-26T22:11:43-12:00" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=54c5198a-312e-4525-9d28-00798d5f6a2d size=16 status=200 user-agent=step-http-client/1.0 user-id= -time="2025-10-26T22:11:43-12:00" level=info duration="31.12µs" duration-ns=31120 fields.time="2025-10-26T22:11:43-12:00" method=GET name=ca path="/scep/scep?operation=GetCACert&message=test" protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=d43c0576-3649-4829-882c-e2a4ca805b1f size=849 status=200 user-agent=Go-http-client/2.0 user-id= - common_test.go:204: 0M05b*\8wxC 0  *H  0*1(0&U Step E2E | SCEP Regular Root CA0 251027101142Z 251028101142Z02100.U 'Step E2E | SCEP Regular Intermediate CA0"0  *H 0 - ȩrtʍρ/pHDJm[҅ؽ2-:ʱq) Q!}J5=SHuBN<!8Լ`:-sv srSn\@ q\?#K FL:̽\'q TR.4iܠq< D43G-I1o\xȺWRЀHbV2 K~oiP e^K\\l(7i"~ L_Wf0d0U0U00UJ{.ͷ{HZMhU0U#0J{.ͷ{HZMhU0  *H  .drvjz\S$l(֨Jf.fJ/bG[?pVfy"`3#qt@@-^Qaj&fY - 9[fD&oҳlb};:_J'i~-qB56ߔ`=o7Aƌ@,JἒEbֱ - common_test.go:286: 0 @ *H  10 -1 0+0@ *H 1-0) *H 01Y0U0?0*1(0&U Step E2E | SCEP Regular Root CAb*\8wxC 0  *H ghO ; ?U#ȝ%w&[]XU;yTGy,hfɯJ@w.|X.E^Ŕ0 *H 0+NQ\fwd?PSpVY;S$uɧսܧޯ[BZ~S$V ";~dDG1%ixtT`UK~`TѪ8fy(Gv}Ϳ:[9\bN(dۆs fR P]tӔtѪ]A%W$?(,"pp\ST "!^4f( nJxL5 F;aj`rIY@fm/YfQX Y&&)HKU|J - /Go - q}000  *H  010Utest.localhost0 251027091143Z 251027111143Z010Utest.localhost0"0  *H 0 - agǑ"' DvF׆Q*NDA;OԦHцm*gZ=/+IA2 e>}|lǢ - #yy?/>o;,Hp} - 4ϊ:=NwPg4{iPT]wEF3³q5%[\d!f(n_S4=GP ߌ-_tqHMUMTqi-7 #ȕL@"@*<_#%J?^WӑSoP!H8ϹT - _/ - 2#cUx \ ))F=>4X14&`"&>@kAqw9Gz7P4}I5V$u [U&>G$#^)v+n4Kjq:p*׸kA( 9I*Ved9ot vHrY\L0zO:)Ff*aF,жSTJ8WU&8An x5U^ n*B#|RƞXjM&ǩTwBS2n}l!$w;5Jk"mu - r:/MˏaY8_QAl 4~IgSs_\MΈ^%- - }4W69Yڍ0Ơ-BdS - s:_޺nѱf - kA+Ñ \wfC9z1U#U{6Wuft[Aq4"am*H茤%SϽ#q'*Qʻt.lқ%Q fHO>ڑlpmJrOMTJ@doKXqIYj:dUT"!z濎=KRf(b_*k vD|ђnOْY - y]{۹X"P:lkCD6W0>jMZk`(-|4֠00kre%ԧ80  *H  02100.U 'Step E2E | SCEP Regular Intermediate CA0 251027101043Z 251028101143Z010Utest.localhost0"0  *H 0 - agǑ"' DvF׆Q*NDA;OԦHцm*gZ=/+IA2 e>}|lǢ - #yy?/>o;,Hp} - 4ϊ:=NwPg4{iPT]wEF3³q5%[\d!f(n_S4=GP ߌ-PFl^2iz9H%Aj$^/p[ux׻L͟)3 > hp.O !rŌՈ]&\䛹dZ% + common_test.go:286: 0 ? *H  00 ,1 0+0? *H 0,0( *H 01X0T0>0*1(0&U Step E2E | SCEP Regular Root CA+U[슥%!=,0  *H HW<6=0k؋?L VN)-024 F3 + 2e}wL?$<. 4Yyڒ"?lV M@"N`4\3 ^0񀣑Edu>G + .~+1S/H #V#ߴݶB$kmP@OvEDtojъKA,q=.l)pJxGh*A:Y0O4S2tG_+eb0 *H 0+moEO4RȔɤZfKL Xh\d(^oɲtr<[sۭ}kfQ/I>Ioy+HqQ{RK3i(Ng5ɽJ=Wf=k8?Q]N"Bo}~WVi7AizD!J):rs9|2faA:BjB!YIy茼'ҭH_04ssZ폗y9̝~!wm8Ƞ2<36jُƉ"B_cdrT"+X2!(}&҉zqCfC~~W ^يn4.k]pʦRKGdxuZ *y-Q٦1W,t<5S(|{o|lוL,IAb\,LoZxz⢞QbXZ^зYFG~F[XǸaZA&}fuuĭ*e#v8!%ypHIfL[kN2~GF%$=C^3”%*D9ou=e$BFx Ω: +time="2026-11-30T06:40:24+14:00" level=info certificate=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 duration=13.14984ms duration-ns=13149840 fields.time="2026-11-30T06:40:24+14:00" issuer="Step E2E | SCEP Regular Intermediate CA" method=GET name=ca path="/scep/scep?operation=PKIOperation&message=MIIJPwYJKoZIhvcNAQcCoIIJMDCCCSwCAQExCTAHBgUrDgMCGjCCBD8GCSqGSIb3DQEHAaCCBDAEggQsMIIEKAYJKoZIhvcNAQcDoIIEGTCCBBUCAQAxggFYMIIBVAIBADA%2BMCoxKDAmBgNVBAMMH1N0ZXAgRTJFIHwgU0NFUCBSZWd1bGFyIFJvb3QgQ0ECECtVW42ok6LsiqXwJSE9pywwCwYJKoZIhvcNAQEBBIIBAA7eSFfsPKU2ET2MiTD6a9iL2z9M%2FrIJ7VZOgIopLTAFBDKsBOI0rfQEC94RjEaPMwocMmX6fXdMiz8kPC7FCAmEk5%2BPCPc01wEQqFl52pL8IqzUP%2BBs%2Blac2MUd0xwTEg2%2BTUDdIpeWTmA0XDOVCV7byzDxgKOR19wfx0XKZK%2FOdccQPkcWCi6bG51bUsz1hn6fByuVmjHe91MRL0jI1SD4I65WzuMj37TdtskIrkIka21Q4ED49KVPdkWORO10b2r1tNLRiktBoSyUtbRxPYEubClw%2BYVK9JXoeKlH5miRHCr3uRBBpoQ6WdT2MBvST4I0kPVTAjJ0EUdfK2WWYvcwggKyBgkqhkiG9w0BBwEwEQYFKw4DAgcECBZth%2F1v3kVPgIICkKI0BuThUsiUyaSTWmbXS4S%2FxN3UTAmavVjkaORcZLn1xyhey%2Bqhb8mydHI8W%2Ftz262p731r3%2BXXZvsHUYXc0y9JEpGMPkkRb%2BUbeStIxvytrwLokMJxUXtSzBuW%2BA5LM2koTstnjDXByb2l%2B0r%2FPeFXZpnDPb5r5Lk4FT%2BQxx5Ru13uTqAiikJv6PJ9fldWabo320FpetREIUopOnJzOfWCfPEyZvLC5mG0yEE6xkJqmkIhvvdZSXmH%2BeiMvOIn0q1IXzA0qe3k2HOYc1rtj5d5HO%2BROQXq2cydfvIhd2048cig3TI8MzZqs97Vf6DZj8aJIkLgX2OmsWRyVH%2BVlCIr%2FwFYMiEC1fsofYGTjq4UxCa10omjAIuB4npxt0NmQ4OsfgZ%2BV%2BnwDF74mOCMyNmKbh%2FINC5rXbz6cBXKprUDUuukyktHZPR4BeDhdeq2WuD8CSq36qLzjnktrJq7h6OyAJweUdmmA6Mx2Ve5jjzoiGzD7TaTAcQPuw8Roj2pVk0ssJgwtvu7ugcrGS7baPnBsXcksZ2DAVlqy5VEAjRRvOBZfWa0O%2F4aqACgwFl4v%2FVKlGcOsGGvJYq9RtHtAEk6C79bQxoarY7fdSJ5T9UnFy299BdyZ80C4DclDbjfz9%2FkhRyXcQ5%2Fu4L9iIzKb666GXq5%2F9%2FcESnAhccvQT4s1HQ8t%2FeqNZzjUygP09zSfHtvrnyebAjXlRKx8kyN6NEsSUHkYtdcsSypPLaCn1SZsSIfmYzagxdmud3YzuxRvwKvMUnEewKA0Z%2FbcNFBIX4hPdOaHLgqzb9RKRH1CIlslHQWbmtaPhJMPMzQ3FKN9DrkvQSqrAn7lCsBsFP1VuJiQi%2FFvAIX%2BhJIXR7ujFMqoIICzjCCAsowggGyoAMCAQICAQEwDQYJKoZIhvcNAQELBQAwGTEXMBUGA1UEAxMOdGVzdC5sb2NhbGhvc3QwHhcNMjYxMTI5MTU0MDI0WhcNMjYxMTI5MTc0MDI0WjAZMRcwFQYDVQQDEw50ZXN0LmxvY2FsaG9zdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMTYwMuyXY%2BHvpImIJ%2Fta9DPa751kQKVPHA0V14BNlrRrrhaYQTs9o8SV3wRceuYfGdLHga7Af5ZOHOcaAuBzapozXOiFwqmdqe6iiLN%2BWimyM2SV%2Be%2BQdcVIVf7BIDnko8TXpW73IiQyC3Kmav9%2BnG%2FntigCdsmnjhvsVtgbnCg6J8PhHFoyEsyo5%2BhcOLQn7pn2hUD%2BjBgVQnOYLyfUo%2Fh5LIMWZJ2%2B18jV7jzj632Ncliui24mW3svcKOJjVcJb8UzQpC%2B34HIvFAFs7uHtkCtra%2BLipqT7DImj3OIgp2ivATfBM59RRAiB6ti3MGLDoYAVlcGwPq72dJpL%2Bag%2BkCAwEAAaMdMBswGQYDVR0RBBIwEIIOdGVzdC5sb2NhbGhvc3QwDQYJKoZIhvcNAQELBQADggEBAA0n3BwKl98m22GTvns8bltbd1SXRJzI5bkJtI1KUgAFW02Njv%2Ftm62cL1YFyJFlOztITSCMi3Kp53VJBn6zIXlCyqxm88deDvD1L7Y6WQJAfMgSods2zVOiP91Meb0PGs8kcMz8ESZaO0wfrY%2FmYdTdC5SdY91RE1hs3jtZXHvVwLw5AX%2FCmfb02mkgCF2jiS2e5n2Thyla2GYN9PDF1C2WINr%2Fx7lc5vfdrDnSYzF2qVRbmWaIx57gFWbsenu%2FNFWpg0UePCgd%2F3PCQKFKzbllHPIbdwxeE7otMhSbkf5mqPqECMg8Bez%2FU%2Fp05YAy%2Fmaq4MioGbNkXv7%2BUj1z%2BqwxggIFMIICAQIBATAeMBkxFzAVBgNVBAMTDnRlc3QubG9jYWxob3N0AgEBMAcGBSsOAwIaoIHBMBIGCmCGSAGG%2BEUBCQIxBBMCMTkwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjYxMTI5MTY0MDI0WjAgBgpghkgBhvhFAQkFMRIEEMFKTrUddRqfdAzvJ9PysDEwIwYJKoZIhvcNAQkEMRYEFNl%2BCNBJbamOQfrya7RriMSVVArbMCwGCmCGSAGG%2BEUBCQcxHhMcTFh2VWNXRlQvSDBuYzJoTUorNFBFaXdRTjZNPTALBgkqhkiG9w0BAQUEggEAT%2B8yJWPTdM0sk2EKyMpT%2FXc7C2u1AFiEAOhCOjqslE04oA78%2FFgKmCseWHRAYLtoHfr98OXeKMLTp1aoB2oiTeawbutgnE%2B%2F96XjDfCZD1yaZmulF7SzET5vWnji39J6uqed4qKeuNZRYlha5F7Qt53ukVlGnkd%2BRlv9WMe4pmFao0Gqtia2fWa6dbH91wCkda2ExK2gqdvTKhDmA2UbA5oeziPudhuXGDj7wSHZJcjnvBXqEtbWeXBISRobnWaKk0wH%2FFvva%2BHkseNOn%2BgyfkfOytFG2Qa6JSQ93sjAQ14zwMKUJSqrRBv%2BObbR%2Bm%2FwdT25ZSQCEUJGeOQLFs6pOg%3D%3D" protocol=HTTP/2.0 provisioner=scep public-key="RSA 2048" referer= remote-address=127.0.0.1 request-id=7f7c55af-6354-4dd1-8000-a6414fa44dec sans="map[dns:[test.localhost]]" serial=269864029677293714739769928738095913747 size=3772 status=200 subject=test.localhost user-agent=Go-http-client/2.0 user-id= valid-from="2026-11-29T16:39:24Z" valid-to="2026-11-30T16:40:24Z" + common_test.go:309: 0 *H 01 0+0[ *H LH0D *H 50118040010Utest.localhost0  *H ui8| hS,'/ht6}_1 + :Hu ;_qAb̆]g(o#jɫ\#`ߞp5ZC$t]8 9 {3-!Uen ̆hy"k+u7$\ \eq:XELm ǵ8-'njVIy3q8(ҌMkvWM iͪk -[%`QC[ڽjOG5,TB{t@T0 *H 0 `He*'1^ -oؐ0LUH>H(G J1[ !VTfLTn[j\\ε=EǶmӋs3%;HΔXE؍Pv-Wŋ]]D;xp͟7ci:gx~T2=+dyrK[+mcsxbkcG + wY9.|+TAaz~bW"_*$.ԏC;WP-H1 ~.nʴGr +kV6gG錄$0w|~o35- ju04ϑ>vx! ojsQﭹd.bá~?xQ$ZQx +HA<SXhfΦh4*R$OXF˂fm5 r6w/UȅFὭxC~~ђYJ' $ m6`J{ 4s% + ɝR32쳻5H*r(OF{iEASx^ + p_Ⱥ-ل&-ޏF09eԄ3sHh\nedHRiԗOky{K-oJON$Wإp,L%E~%D}kEQv'⸡/m>k{;3wu~b -4{6Hw{ y4oXrAQ-mjd}BD7bAQӇXxN1WC?@ӭeu_pn#vCQxyx]#v wl3WGh)pRIf{XD0+=;l{t-v5eF) #BJ#X00kA9n~[0  *H  02100.U 'Step E2E | SCEP Regular Intermediate CA0 261129163924Z 261130164024Z010Utest.localhost0"0  *H 0 + ˲]& kkuPFl^2iz9H%Aj$^/p[ux׻L͟)3 > hp.O !rŌՈ]&\䛹dZ%1Y0U0>0*1(0&U Step E2E | SCEP Regular Root CA+U[슥%!=,0+0 `HE 130 - `HE 100 *H  1  *H 0 *H  1 251027101143Z0  - `HE 1)^ɋ )D0  - `HE 1)^ɋ )D0# *H  1Ni\_$Wvh30, - `HE 1hJddCS5QAN3CcvFRwHTB0/oqnkY=0  *H /A0e-@7Ըo1e봣 9o$>+81Gܸ湆qbR3'֛|m=.BS{HNԊA `B+O̠>Vc0&S,Ppwra=dŏޣ\p .U䣲|=8~,;Qo;:1W=ьrDMdc=hxʮv _9 =[cSwU ---- PASS: TestIssuesCertificateUsingRegularSCEPConfiguration (2.86s) + `HE 100 *H  1  *H 0 *H  1 261129164024Z0  + `HE 1JNut '10  + `HE 1JNut '10# *H  1a.6=#>'m0, + `HE 1LXvUcWFT/H0nc2hMJ+4PEiwQN6M=0  *H M7),D'z$4Nhe7'QJ$y!3lQۋ$H#5f.~/) lɱ{c?i&o\3V4?^R^Fs6e£ݼ5=hC=H]O9Z7%̓dB߁Y/?p#^_@T{ȑ"bHmeye`<bd/TV *nz +--- PASS: TestIssuesCertificateUsingRegularSCEPConfiguration (3.88s) === RUN TestIssuesCertificateToEmulatedWindowsClientGo123 -2025/10/26 22:11:45 Building new tls configuration using step-ca x509 Signer Interface -2025/10/26 22:11:45 Starting Smallstep CLI/0000000-dev (linux/arm64) -2025/10/26 22:11:45 Documentation: https://u.step.sm/docs/ca -2025/10/26 22:11:45 Community Discord: https://u.step.sm/discord -2025/10/26 22:11:45 Config file: loaded from token -2025/10/26 22:11:45 The primary server URL is https://127.0.0.1:36993 -2025/10/26 22:11:45 Root certificates are available at https://127.0.0.1:36993/roots.pem -2025/10/26 22:11:45 Additional configured hostnames: [::1], localhost -2025/10/26 22:11:45 X.509 Root Fingerprint: 84d0193260aabfc084a29128ec0d9f70b5c38d880ca219a564b6b4df94c2e38f -2025/10/26 22:11:45 Serving HTTPS on [::]:36993 ... -time="2025-10-26T22:11:46-12:00" level=info duration="20.6µs" duration-ns=20600 fields.time="2025-10-26T22:11:46-12:00" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=6c6a8d53-535a-4906-ba60-6608a95d7c34 size=16 status=200 user-agent=step-http-client/1.0 user-id= -time="2025-10-26T22:11:46-12:00" level=info duration="39.52µs" duration-ns=39520 fields.time="2025-10-26T22:11:46-12:00" method=GET name=ca path="/scep/scep?operation=GetCACert&message=test" protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=75649c04-06e0-4d68-9fe3-27ff6f6887bd size=884 status=200 user-agent=Go-http-client/2.0 user-id= - common_test.go:204: 0p0XlZ )_y0  *H  0<1:08U 1Step E2E | SCEP Regular w/ Windows Client Root CA0 251027101145Z 251028101145Z0D1B0@U 9Step E2E | SCEP Regular w/ Windows Client Intermediate CA0"0  *H 0 - CS#4X0ˋ.יOI6ŖO¹G9&l&YVD#. ߭(>H,ek(w"͝"V}UNM"6 +eۈ-bWʳۋQ>Ȭ''w{:(`AMzO~*ӖT ,.jj R8ׂOcA"ȹ9Az:9m - common_test.go:436: 0  *H  z0 v1 0+0Q *H B>0: *H +0'1j0f0P0<1:08U 1Step E2E | SCEP Regular w/ Windows Client Root CAlZ )_y0  *H *&qxC:D%lȶ"sO Ѻdz^NX3'bjB՞2 û3dX>Ѧ#eR`xb"C )!tƟCZHo>2JEo%ÖE\چFc1MV:N?0)gS\ZZi<# Q3a)3>T֯ꌠ]u`J3\^Ž n(X^G\ǿ,ٺ vd0ij0 *H 0+Чֆ[s5>eM<#>.s?$T29hr35UȱQD6}\čė%57dNN9У8FpZnmZ~\QM(Q/2P3V }6 !>c[TRԛ=( :y*jXv?rذYh)Wt ic#n9;:dui1q[f۳.Y! :O ;Έ# 0"NlZcZw£9ר:=+א`9/rߠ+duA+m%QGLA/7<$]ٺV<0Uqȋ,uH0`SݺJoG5W08=tȂbκ2T[9#}B(5R'-uEydz :!Q"),\u %-MU HoގuHa!I_ <8 "(e:ɲq+q8ַA J& ;`w]>WHOc10 0)0$1"0 USCEP Protocol Certificate0+0 - `HE 1190 *H  1  *H 0 *H  1 251027101147Z0  - `HE 1E,C Ќث0# *H  1ԁ0Tnm)Aka/_wGc)0, - `HE 1u26QVza/06gwBVhIq4ijycMzHWE=0  *H Y*A,YWWŭ5Goc8BݞRe\i+?ȅc:Pq^by˕pK":*M,,Dׂ7ip&UO;# - _ ml[C׭Y(&wI[wwEv[,d~6xY&m@LcT,b0l푝.<<Ly7k$vb-m'HdH7vw+q*<]1L,T -time="2025-10-26T22:11:47-12:00" level=info certificate="MIIDlDCCAnygAwIBAgIQSOVMUoaSmpHDHWh5YUJhhTANBgkqhkiG9w0BAQsFADBEMUIwQAYDVQQDDDlTdGVwIEUyRSB8IFNDRVAgUmVndWxhciB3LyBXaW5kb3dzIENsaWVudCBJbnRlcm1lZGlhdGUgQ0EwHhcNMjUxMDI3MTAxMDQ3WhcNMjUxMDI4MTAxMTQ3WjAZMRcwFQYDVQQDEw50ZXN0LmxvY2FsaG9zdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMpZEvarn5c5lLRPeqmZwFXFu+vi0VjRjdjLZp49YyN0Ipv+AMwio06aLU/8+73nKmlzEQS6CW0EGPYHmKq1t7T1RCcSupKDLweFSHRWesPitcyxe1ruN4GDM4XUNXiM7zC+9BjHp9SMS4YhZ6YXAKIw3WZvLcg/6h6qlwVVIprQ4D89Z1ld7KofeplkZvkz5+Ka+gj+7yw72WfjAKpncHrjhn+nMDDaDsjGjJ7RdbKMMCKB5ylgHlFRjy+ODHtxxh6omu8EfCd8x4d0yS/i4VWs/J3zFJcIl67zKYZsDbU6O9c17iLHZOYXYMmVFYg4WQLFTb5ok3EWgiZ8562G0Z8CAwEAAaOBrDCBqTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBRaiWLjMRxr3+QgsV83OGlz13jENTAfBgNVHSMEGDAWgBTcLO1kWlbWIdnfAUpOdG8MVMeG1DAZBgNVHREEEjAQgg50ZXN0LmxvY2FsaG9zdDAdBgwrBgEEAYKkZMYoQAEEDTALAgEKBARzY2VwBAAwDQYJKoZIhvcNAQELBQADggEBAAvCWRrg37EAfLbpbKYAdUcfW9Vr2lEumY4FR0BZXJYj4dBWWw/GvtIX4rG97sImp2mW3RYVuRZN3AXyobmavg9hscpwzyY4Fm5g0VvzURBhEUocrNR3z6KvwleYu5Ia+ORj7QQ68eSJv6WdC22ISOuZS1gRvodfTlWEXeV8bRJU1XxNA4lLZhQkwf0l9IaVFN/NPynUS63E5EafLe33TH//LomrEifQ7f/rhdzQNDLRYIpRPooo2EAiIqCLVfxiFoKGUcO66Pt15IRajRzIDlmMR7xxvrqNIbpfsGiXfqH39nlc9tMnWQv71ollqBmHoSYqT6giU1mrCDwXikejdlk=" duration=37.236092ms duration-ns=37236092 fields.time="2025-10-26T22:11:47-12:00" issuer="Step E2E | SCEP Regular w/ Windows Client Intermediate CA" method=GET name=ca path="/scep/scep?operation=PKIOperation&message=MIIJiQYJKoZIhvcNAQcCoIIJejCCCXYCAQExCTAHBgUrDgMCGjCCBFEGCSqGSIb3DQEHAaCCBEIEggQ%2BMIIEOgYJKoZIhvcNAQcDoIIEKzCCBCcCAQAxggFqMIIBZgIBADBQMDwxOjA4BgNVBAMMMVN0ZXAgRTJFIHwgU0NFUCBSZWd1bGFyIHcvIFdpbmRvd3MgQ2xpZW50IFJvb3QgQ0ECEGyHu7ns%2FZtaC9DvgSlft3kwCwYJKoZIhvcNAQEBBIIBAADiKiZx63i4Qzq%2FRLymJWyv8%2BTKyLbvByKwc0%2FjC9G6ZHoOo%2FBeToAPnFjaMxMn%2FGJqQtPVnjIMkcO7%2BrOlwTP8ZNFYPtGmI8FlF8HHA1JgeKgczmIiQ%2FQBgv65C5CbstMpIXQGxp%2FvqkPXAlpIb9s%2BHDKwSoZF7eJvJZ3DlkWcs1zeB9qG7sLgv0YEY8UxkA9NuhaVVjoYqNZOPzDnpX8pk7m7Z1OWXFpa44MOaTwjCVEzYSmihpwzPv7C91QZxuP%2F1q%2Bb6oyg4l2mEXXCYErg3DNcq75egMW9IN7kbs4oi1heiuNH7AZcGRoRx7%2FG6AKfGiywyeYb2boLdmQwxLMwggKyBgkqhkiG9w0BBwEwEQYFKw4DAgcECNjQp9aGovq6gIICkO%2FDW6pzuIaBsTU%2BZU08Iz6ULnPfP4i%2B3vYkGrxUMjnZaHLRMzXeVcixilGZtEQ2fQaUxxT35QRcxI3ElyUC1jXJN7xkTgCe1k450KM4RtBw4lqAbv63mW1aflxRTSjTUfup6C8yGQFQM1bVCc7gkn3F3TYH09EOILuEIT5jt71bmeBUUhbUmxQ9KA0E2%2FwXOnkG6%2Fegjypqslh2P4wHctiwgVn8q%2FH3gQ5oKadXdNINacCzYxgjxm45OzqXZIGbdQ4XwZJpEsAxgnFbHmac27MukYLkzFnOIRAUtQPljBcXtAy9Ot9PBw3eO86IHyMMvzDOErzxIuZObFrmY8Na7HeWwqM516gIOj0UhCua7deQ1%2FKkYLnt%2FePxOS8Ei3LfoCvXPEa%2F4LWKJFG1AgIgE6rS4o7uo2%2FUB4Wa3fXFv%2BwcnVXo%2Fwx%2FGxHYFa90D3BGbwpno4wPL1qHVWxP%2B8gQ9zpkW6oonVpf%2B51DRRpW2W875GdC3U8aE6cP2J1Krm1JjQJREP6TNYSp5zdWo1%2FStk8DG13Rl6ZV4Pt3CD%2B84teBVsNFQ72k4073POtWvll%2FM9aAdBHlSfWBwhVhILyU%2BECJgOFz%2B8wSD%2BSxmmBTd%2BiwoG2zl5ioggVcDTm0hSSnvoYd61sVMs8fFCPd0NRVdSmzn4RSnzFfbNIaz%2Bekb6uy6cuQPXz2YWY8JlBX4S9d9i4nfsLjhXupaPOXqkWc5eSFVjMln%2F%2FV401CxTf1nVoCMtirhrksnVsD6kQHzXhE9hSvcnFwHz9C61PFsoFCMPTEirSvrxaKJvTJYT9Q%2B8shcTPowEDncdiCcx%2F%2F1rz6josYXsf7%2BLEo83SJQc7OjhOx7bupjQyhh5Y4yEAykLCPoIIC%2BzCCAvcwggHfoAMCAQICAQEwDQYJKoZIhvcNAQEFBQAwJDEiMCAGA1UEAxMZU0NFUCBQcm90b2NvbCBDZXJ0aWZpY2F0ZTAeFw0yNTEwMjcwOTExNDdaFw0yNjEwMjcxMDExNDdaMCQxIjAgBgNVBAMTGVNDRVAgUHJvdG9jb2wgQ2VydGlmaWNhdGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKWRL2q5%2BXOZS0T3qpmcBVxbvr4tFY0Y3Yy2aePWMjdCKb%2FgDMIqNOmi1P%2FPu95yppcxEEugltBBj2B5iqtbe09UQnErqSgy8HhUh0VnrD4rXMsXta7jeBgzOF1DV4jO8wvvQYx6fUjEuGIWemFwCiMN1mby3IP%2BoeqpcFVSKa0OA%2FPWdZXeyqH3qZZGb5M%2BfimvoI%2Fu8sO9ln4wCqZ3B644Z%2FpzAw2g7Ixoye0XWyjDAigecpYB5RUY8vjgx7ccYeqJrvBHwnfMeHdMkv4uFVrPyd8xSXCJeu8ymGbA21OjvXNe4ix2TmF2DJlRWIOFkCxU2%2BaJNxFoImfOethtGfAgMBAAGjNDAyMBEGA1UdIwEB%2FwQHMAWAA2JsYTAdBgNVHQ4EFgQUWoli4zEca9%2FkILFfNzhpc9d4xDUwDQYJKoZIhvcNAQEFBQADggEBAC8B0w4vPmSADvN1zNtBgittJVFHEUzs0kGmLzc8GrAkjxMBXa7ZulY8MJxV3cZxyIu3LMF1B0jFMLmH3tNg%2F1PdugRKz2%2F6g0efNYxXH7EwOD10yIKkuJ5izroyv1RbORuzI33vCEK2vfnDBCg15oJSJy11wdcURe55tpkFZI4CehT1Cdo63BkhUbkiFR8p9CxcBzx0M9ahDD51CQe76CUtTe5VEg2JrPWIBUj1mW%2BU3o51SPZhktbjIY9JX5jGDZQWPJ04DCLgi%2B%2BenOauKGXd%2FDrJsnGoK%2FtxhZc41rdBEfIgmkrfHR2sJqwgkNw78GDhd12LPuIG2FdIuNjUT2MxggIQMIICDAIBATApMCQxIjAgBgNVBAMTGVNDRVAgUHJvdG9jb2wgQ2VydGlmaWNhdGUCAQEwBwYFKw4DAhqggcEwEgYKYIZIAYb4RQEJAjEEEwIxOTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yNTEwMjcxMDExNDdaMCAGCmCGSAGG%2BEUBCQUxEgQQRR2nrSxDsX8JodCM2Ku%2FpzAjBgkqhkiG9w0BCQQxFgQU1IEwVG6jbSlBa2EvX3dHnmMpB64wLAYKYIZIAYb4RQEJBzEeExx1MjZRVnphLzA2Z3dCVmhJcTRpanljTXpIV0U9MAsGCSqGSIb3DQEBBQSCAQBZKu1BsiyOsIFZV4VXxa0YfxyeAbo1wUccb2M4m0IT3Z5S9WWTXA6axGmPBys%2FxBiGyIW5Yzrdw%2FhQHnG8sqqphF5iecuVcBVLIsC1OoiTKs4RTSwsFESw14LcA42CjjdpkepwEIb8JuEEVdji2MxPO%2F%2BcIwpfCMoLvpFtbFumQ9etsFm1D6jeKBMA2Sb7d5UZuc1JW3d38PtFdqPsW4L66P4sZKsPFwd%2B8zazEXihWSYW7W1As%2BjtkUzZY1Qs9WIUrTD%2B66ts7ZGdLuQ8ujzJzn9MeTfN%2FmskdmIAGS2dks9tJ6JInmSCSDd2Fne1ghQXK3GDKrY83xVdMUwHuixU" protocol=HTTP/2.0 provisioner=scep public-key="RSA 2048" referer= remote-address=127.0.0.1 request-id=6f17bcd0-892e-4eca-8c16-b07bea071f4b sans="map[dns:[test.localhost]]" serial=96894999678605846491635230825406161285 size=3870 status=200 subject=test.localhost user-agent=Go-http-client/2.0 user-id= valid-from="2025-10-27T10:10:47Z" valid-to="2025-10-28T10:11:47Z" - common_test.go:459: 0 *H  01 0+0v *H gc0_ *H P0L1C0?0)0$1"0 USCEP Protocol Certificate0  *H MتX_R36]`ke L5{xlԞyF*l=RcA6mj} QVG)|;josu±;ew"Q1M_yxP;_UTE%DXV-HatYV`,ZPu6EtOCѓps-#T6n=t6um [$x*ІC{K=+CZOHԃfQt ֋uA"O= ܁DûRߨ:gW|XXa㪡9I7-zU֭XpG|ڀ3P8* (@""UbQúuZYGq!_h~y\'Y ։e&*O"SY<GvY0p0XlZ )_y0  *H  0<1:08U 1Step E2E | SCEP Regular w/ Windows Client Root CA0 251027101145Z 251028101145Z0D1B0@U 9Step E2E | SCEP Regular w/ Windows Client Intermediate CA0"0  *H 0 - CS#4X0ˋ.יOI6ŖO¹G9&l&YVD#. ߭(>H,ek(w"͝"V}UNM"6 +eۈ-bWʳۋQ>Ȭ''w{:(`AMzO~*ӖT ,.jj R8ׂOcA"ȹ9Az:9m1k0g0P0<1:08U 1Step E2E | SCEP Regular w/ Windows Client Root CAlZ )_y0+0 +2026/11/30 06:40:25 Building new tls configuration using step-ca x509 Signer Interface +2026/11/30 06:40:25 Starting Smallstep CLI/0000000-dev (linux/arm64) +2026/11/30 06:40:25 Documentation: https://u.step.sm/docs/ca +2026/11/30 06:40:25 Community Discord: https://u.step.sm/discord +2026/11/30 06:40:25 Config file: loaded from token +2026/11/30 06:40:25 The primary server URL is https://127.0.0.1:41533 +2026/11/30 06:40:25 Root certificates are available at https://127.0.0.1:41533/roots.pem +2026/11/30 06:40:25 Additional configured hostnames: [::1], localhost +2026/11/30 06:40:25 X.509 Root Fingerprint: 5b2aea156af12223fb5c7759f5edf3c3268e99023b092ca222e92c92ba454f43 +2026/11/30 06:40:25 Serving HTTPS on [::]:41533 ... +time="2026-11-30T06:40:26+14:00" level=info duration="22.72µs" duration-ns=22720 fields.time="2026-11-30T06:40:26+14:00" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=e14d76fe-ec28-49de-8f65-8cb2c2695cab size=16 status=200 user-agent=step-http-client/1.0 user-id= +time="2026-11-30T06:40:26+14:00" level=info duration="41.04µs" duration-ns=41040 fields.time="2026-11-30T06:40:26+14:00" method=GET name=ca path="/scep/scep?operation=GetCACert&message=test" protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=91e4d125-60b5-4b22-a5c7-3bec91dd1269 size=884 status=200 user-agent=Go-http-client/2.0 user-id= + common_test.go:204: 0p0XkR_ʹ{ɜe0  *H  0<1:08U 1Step E2E | SCEP Regular w/ Windows Client Root CA0 261129164025Z 261130164025Z0D1B0@U 9Step E2E | SCEP Regular w/ Windows Client Intermediate CA0"0  *H 0 + $'MQ$ + ғZ6Ίya~ RP2rGF"\^?OQ5j(ʐyۮ7N##Ѱ̼e1_ђ1aj4A\⍹ + 8gbo"vl5Vcnh@%lH @(!֟ + u?͏~x[x?dC'[&~d-LʐIw. sM)I6U-O[78f0d0U0U00Uwh3|<ǃOm@0U#0wh3|<ǃOm@0  *H  g-wXRJSUFlW‹mf@gy;dnɯd%VΕiH[&oLSbk %0\ɷTp{-/|L/&Z%1&/ezT4 д}{PYoO5s'$|-_ ]u]E`]aF[ꇂ_״<ӀKB0V CӀ<L>)D 9L)3~>&Qy + common_test.go:436: 0  *H  z0 v1 0+0Q *H B>0: *H +0'1j0f0P0<1:08U 1Step E2E | SCEP Regular w/ Windows Client Root CAkR_ʹ{ɜe0  *H JϺiͬx:5+*R[H (F4V'hIrevnFg̣̜؜w bhz[rѡmGR\f`VUiBYsS + )FV F=ꦏ1bĦYJXG9 zד;Ѯ;+%uǥ*]4+Y穂n s: h;$bwrkNn0<72"'!nifU =g+RrhK-ok l0 *H 0+ 6u ݀Íq!l/$0A8\Y=~0 : + L?V|ݢyy + Z*(/0N(*#` "p%[<ٮv%RWjhC,ԡ KŒyhelHv X=KR:M xo-?'Y|%sQ + w tZ]2MjAϡc;~ UH:cB˗-4> $%BZaPn+ѹ,8Mq"]DUn%aFmGlVB}^}5v? 5q ꍷr]"4jCv?:[(N^E5ˠ7Oonml* B7m{- + } + jQLJ-+͍hm|/lz۔?ERCnXvFu`,w}=DhH:#32e5UFd 83$mFtJ|H]js ߓ ?GG!TUj`yܹ5ʠ00ߠ0  *H 0$1"0 USCEP Protocol Certificate0 261129154027Z 271129164027Z0$1"0 USCEP Protocol Certificate0"0  *H 0 + }K:?C'Gsf5~K"bl5>$jxlU~'җu$K ⛀S9HOP^0rsʾO['0Jq} _m*qq:!V} Y + TUH4020U#0bla0Ubðɠ3e핆0  *H 5TpWA)mڐ+jF3miD~\i|b9xd%P 4@qH,kJh5D#/]:\^oX]DZ'MG*Iv53m5'L&xglZ^&?Z G)BvM!M)UPuXvy>a+vdz r"B +time="2026-11-30T06:40:27+14:00" level=info certificate=MIIDlTCCAn2gAwIBAgIRAPYmBmRBZB21MIQKHgUIgHwwDQYJKoZIhvcNAQELBQAwRDFCMEAGA1UEAww5U3RlcCBFMkUgfCBTQ0VQIFJlZ3VsYXIgdy8gV2luZG93cyBDbGllbnQgSW50ZXJtZWRpYXRlIENBMB4XDTI2MTEyOTE2MzkyN1oXDTI2MTEzMDE2NDAyN1owGTEXMBUGA1UEAxMOdGVzdC5sb2NhbGhvc3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCufaVLOj+RQ5gnR3NmNX5LIuNiktBsFjU+JGoUrxaoeIfXbFV+J9KX7dZ1vCRLuxkgBK7h4puAFlM58ki/T7jewVBeMJmYct5zyr5PsFsnMAG88UqC0QG+cX0gX97+bSpxcTohPJr812OPgtYVttH7eeFypTttAv3LPJ4XtN8hFyRa2kwnzCI9rawcO2t4cO/zsdRaCxcIObiPStCnx6LT4+B0+lFRZjLvax2KR94aX3LzBd/p1EduIA2MAHFkaVOgAO5iEYyFGv5mwMajXw/yxb+YdWwDsBjz3EaqDIbIqhnTGVI/Pla9oIt9lIl/5wwF7Y8UBIUIWQqmVJ+sVUjjAgMBAAGjgawwgakwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQU5X/vYsOw8KXJoDPi/2WjGLHtlYYwHwYDVR0jBBgwFoAUd59oM3w8f/icx8eDDhVPh21AhBowGQYDVR0RBBIwEIIOdGVzdC5sb2NhbGhvc3QwHQYMKwYBBAGCpGTGKEABBA0wCwIBCgQEc2NlcAQAMA0GCSqGSIb3DQEBCwUAA4IBAQBH4y2O9CAltNETYZbGw+pLcO2YmdNOcPoWGX+uJ3ag2OU4lD+Fa5xFFs6d84rJPD8Od5WbQetsLR86Ce2uucoQvuHc0YZXGq1hkl928VbXW0DJQB6iswmGIv87S4ptDAPMX6T+hYLY6/bNMYsqV+hvVxrQihWfWzM7G3sGxxsGYtjbi79YKtQwkPO3kT0CxfVmjTWoRV2gvsjemExeoRmSHsv5ghaAZOe88IUHf2w45IZ9gMZ63JXgc8LSL3QrVZfbezSj5o6pudAeQQ+koCAgp+GqBpN7Y72pvb4a/BEvmB+5cLsXE+ehJqWfLrq098LjbhULIWbfUYuRmHeVwvdW duration=23.24732ms duration-ns=23247320 fields.time="2026-11-30T06:40:27+14:00" issuer="Step E2E | SCEP Regular w/ Windows Client Intermediate CA" method=GET name=ca path="/scep/scep?operation=PKIOperation&message=MIIJiQYJKoZIhvcNAQcCoIIJejCCCXYCAQExCTAHBgUrDgMCGjCCBFEGCSqGSIb3DQEHAaCCBEIEggQ%2BMIIEOgYJKoZIhvcNAQcDoIIEKzCCBCcCAQAxggFqMIIBZgIBADBQMDwxOjA4BgNVBAMMMVN0ZXAgRTJFIHwgU0NFUCBSZWd1bGFyIHcvIFdpbmRvd3MgQ2xpZW50IFJvb3QgQ0ECEA66f2tSj1%2BSiM20e8mcZYowCwYJKoZIhvcNAQEBBIIBAEqTz7ppzax44Zs6NSu9KpLorlKL8FvHSO6bibcN%2FdPgq8zV9vYGKEY0vfFWEAInaEly0vyTZXZuhEbHGRWjZ7nMo8ycy9icdwmcuK1ikmjDelvwv6Zy0aFtR1L6u%2FyFmVzhyWbY8uVgVp%2F%2BVWlCmVlzhdx%2Fo1MK5sEpk%2FhGVgy%2FRrM96qaP4DGEA2L%2BxKZZSlhH8PU5Dwx6DteTO9GuoriLO%2FHSFvzjwysldcelKuxdwMvQNCvmWQXnqYJuAoEMczqMIMFoFqo7JBCG66JitndyjpZrTpyLHG4wPDe8MsC6Iich99JuacBmELGdVQwJPaC9qWcrUnJoSy1vayCGbJAwggKyBgkqhkiG9w0BBwEwEQYFKw4DAgcECA3irjZ1tgndgIICkJDDjYaMlhGe3%2FdxnQIhA2yCLyTvqTBBOFxZxj1%2B3zAJOvkKTD%2B0VvB8D92ioHmHgaB%2FeZUfClrstCoo4i%2BMHzBOKCruI2AEDCKEcOglkFu57zzZrogeyPYH03arJbe9noTZElKkV83suGoSF5RoAUMs1KGDIBBLxZIVecRo2QGMHGWUmWwSSHYJWD2jS1I6Ta%2BOHrS5vb%2B2CXhv%2BS3j2B4%2FJ97QWbIBfMIVkCVzBVEKdwl0HlpdMvbBTRazvmpBz6FjO5STiH7ADX%2Bp5J%2F4AVXtSJCfHw46q77eY0LLl4WQLTT5PoHaDeugJCVC6hvcHwhaYR9QrW4r0bmV3iylGts4Td3H7HHc6SLdXQ6mRNdV3dbvbiW%2FgeQauWGvRvRtR5UYh6Fs%2B1amQoCgqX1eyO195TV2Pwk1lJyo7HG2ggz36o23cl0iyvo0aqyEQ5t2P%2F%2Bvz%2FI6WyihTvKEG4W01F5F8eKWNcwef%2BId6cugkqg3BLlPb27QbWyoyvgqrb4MQtgIN217LdUKyX0KavoEkVFMSi0E3yvNjekfls1ogm2afAS1DhYvjGx6%2FLjPyduUEKS9oj88T7QKwUR%2B6XjnlMxbiLEdpgaRgjgfl%2BTXnKHQ6j3qOntUeBjxKvnDKcnds5lbb20reLpX9Oc65N9em8sEJWS5MCYU07E0gt9H9oZtiNOQmiQfcJbRHgOfXIbyufSDeyjnRnfeJOi%2BPr6d9fr6x0VS%2BadDFm5Ydv5GdWCYLHfHfRTSPUS6kx1otQRIpDrZH6sjMzK58bem5OucZf3ZDjWp9v1VRmSYDMI4M%2Ba45uoSDqEksm3DEEZ0Sny8SF3YanMJ35MLsj9HRyHAkA4PVNZVg9BqGWAeedy50zXKoIIC%2BzCCAvcwggHfoAMCAQICAQEwDQYJKoZIhvcNAQEFBQAwJDEiMCAGA1UEAxMZU0NFUCBQcm90b2NvbCBDZXJ0aWZpY2F0ZTAeFw0yNjExMjkxNTQwMjdaFw0yNzExMjkxNjQwMjdaMCQxIjAgBgNVBAMTGVNDRVAgUHJvdG9jb2wgQ2VydGlmaWNhdGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCufaVLOj%2BRQ5gnR3NmNX5LIuNiktBsFjU%2BJGoUrxaoeIfXbFV%2BJ9KX7dZ1vCRLuxkgBK7h4puAFlM58ki%2FT7jewVBeMJmYct5zyr5PsFsnMAG88UqC0QG%2BcX0gX97%2BbSpxcTohPJr812OPgtYVttH7eeFypTttAv3LPJ4XtN8hFyRa2kwnzCI9rawcO2t4cO%2FzsdRaCxcIObiPStCnx6LT4%2BB0%2BlFRZjLvax2KR94aX3LzBd%2Fp1EduIA2MAHFkaVOgAO5iEYyFGv5mwMajXw%2Fyxb%2BYdWwDsBjz3EaqDIbIqhnTGVI%2FPla9oIt9lIl%2F5wwF7Y8UBIUIWQqmVJ%2BsVUjjAgMBAAGjNDAyMBEGA1UdIwEB%2FwQHMAWAA2JsYTAdBgNVHQ4EFgQU5X%2FvYsOw8KXJoDPi%2F2WjGLHtlYYwDQYJKoZIhvcNAQEFBQADggEBADVUcPDts1eVFIhBHinluM1tGtqQAitqRvEzbaz%2BafpEAIG%2FtX7EXGnsAnz2PEYXFpV51HxT8Zyhwm5%2BK%2FPGIUmsoRdUIbMT07Rtj2dFE7AR7w4SVcqNO5vu12EjVZlExqjIjBfSXN9rT%2BtJcrqd519DifBJOsISbxH%2FgzXBfuJJaLD049%2BUVFLw7t%2BM6s7S6r3flFYmmwZHm7DeSp3r3xssZBcJox1xQ23Nti4g%2F%2B%2BHojFeX0Xu0RYxsExHFdYAIVXkFywqwuHDH1bvOFKBBT%2B9QNmOtjQViPy66OyYNdjjF7X%2FwJ3Wk2Nb00NGqbOhUsrN%2F0hxvymMzAOm38wyQ%2FkxggIQMIICDAIBATApMCQxIjAgBgNVBAMTGVNDRVAgUHJvdG9jb2wgQ2VydGlmaWNhdGUCAQEwBwYFKw4DAhqggcEwEgYKYIZIAYb4RQEJAjEEEwIxOTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yNjExMjkxNjQwMjdaMCAGCmCGSAGG%2BEUBCQUxEgQQnqgeb16NQHhqBJ6r0Yt8djAjBgkqhkiG9w0BCQQxFgQU%2FakBjjceFPBdg3MTEr8dcVScoVgwLAYKYIZIAYb4RQEJBzEeExxwZldLYWdPUVBWL1dNWENYc3B0Tk14WEpBSjQ9MAsGCSqGSIb3DQEBBQSCAQA1nwMJTi6Z2kjJ%2BLs6t31UOoNg6x3bB2PpAeXimPD1uuHTKNrqrI3vSr9v0iqyWz1lgh9Z08HLxQC4e%2BatGS3JQl4LARr43j65YrGh6zn16HjP52SRJY2sifBQhAt%2FxTRAhHGxFYVILLoW%2FMCba%2BdK7utozRg1RCMQL12guJXxt9464Vxe%2BgBvWNld9cexh7qKJw%2BF54%2Fwl5XoTbnO%2BxL850fUKpIDrbdJduI1hrr2wjNtpTUUJwPcA0wms%2Bi4zHhn82xaXoej9%2FwmjL4EwYc%2FpVrm2wtH1ylC1XZN3uQX5yFNKVXXUHVY%2Fg526Ph%2FeT7nYSt2x7PA2vPXCXLzIpxC" protocol=HTTP/2.0 provisioner=scep public-key="RSA 2048" referer= remote-address=127.0.0.1 request-id=31e14f36-2174-4b6a-be76-0be296e7d9c4 sans="map[dns:[test.localhost]]" serial=327187523881225060032010502007895392380 size=3871 status=200 subject=test.localhost user-agent=Go-http-client/2.0 user-id= valid-from="2026-11-29T16:39:27Z" valid-to="2026-11-30T16:40:27Z" + common_test.go:459: 0 *H  01 0+0v *H gc0_ *H P0L1C0?0)0$1"0 USCEP Protocol Certificate0  *H {f @ギ 5띃 y tz5cZGI Uj/7LPS2KI*1eL(u]E4Y^GcfԤ v8P?~oP C !kΦ!+ь9f \ =:W`g4%ITm@4鏍E{LCfg֐/#9<&0C9‚0TيG#>zRQ6=%Y]5U a%~ fb&xAvb 3;(66LjB̺#u8`1d& :i4hY4|C0[D:c-߄6ˇ.hh9ц5mliz4>KYB-[p:ęy1NC' oiw <Oj8jm:g6@ + (vn #ϯJFU (1|N, ghiq{|׋*Ei`8aPxKA}`0MOEHG#̒X4toCjG9;n|ɺ6H85lel6,`",ߵ^5ɲdں,i\ z.>7xd/3YH{˛mq^h*hliƁ!ݠ 00}&dAd0 + |0  *H  0D1B0@U 9Step E2E | SCEP Regular w/ Windows Client Intermediate CA0 261129163927Z 261130164027Z010Utest.localhost0"0  *H 0 + }K:?C'Gsf5~K"bl5>$jxlU~'җu$K ⛀S9HOP^0rsʾO['0Jq} _m*qq:!V} Y + TUH00U0U%0++0Ubðɠ3e핆0U#0wh3|<ǃOm@0U0test.localhost0 +d(@ 0  + scep0  *H  G- %aKp혙Np'v8?kEΝ)D 9L)3~>&Qy 1k0g0P0<1:08U 1Step E2E | SCEP Regular w/ Windows Client Root CAkR_ʹ{ɜe0+0 `HE 130 - `HE 100 *H  1  *H 0 *H  1 251027101147Z0  - `HE 1E,C Ќث0  - `HE 1E,C Ќث0# *H  1:J"%E7d"p0, - `HE 1u26QVza/06gwBVhIq4ijycMzHWE=0  *H Iqwmn%R%'k^: lH@n¯dO\U'-ɢɹ1g&[l ~]۵MahpX@V>u`Á Zf - c!n(y?a TV2 - ETU=7 `5fFP'k7@|d3Wzh= kAlmf09 ~seԛ< ---- PASS: TestIssuesCertificateToEmulatedWindowsClientGo123 (3.41s) + `HE 100 *H  1  *H 0 *H  1 261129164027Z0  + `HE 1o^@xjы|v0  + `HE 1o^@xjы|v0# *H  13]X0GFUyrD.0, + `HE 1pfWKagOQPV/WMXCXsptNMxXJAJ4=0  *H  _zJ}P,sNY6.BHbo&u + ٛҖ,8OG|ǫPWL+ HF5.bS_U+`48*"eǏSR.n!< + MIyA8y1V*R8Ev_kM&?͞+XDɈ`Ż!{zFhP*VO/ Bl&"Y&pϟC ]Ž[5 + %\#mH +--- PASS: TestIssuesCertificateToEmulatedWindowsClientGo123 (2.56s) PASS -ok github.com/smallstep/certificates/test/integration/scep 15.687s +ok github.com/smallstep/certificates/test/integration/scep 18.446s ? github.com/smallstep/certificates/test/integration/scep/internal/x509 [no test files] === RUN TestNewRequestBody === RUN TestNewRequestBody/X5C_Certificate @@ -11205,15 +11260,15 @@ --- PASS: TestNewRequestBody/SSH_Certificate_Request (0.00s) --- PASS: TestNewRequestBody/SSH_Certificate (0.00s) PASS -ok github.com/smallstep/certificates/webhook 0.017s +ok github.com/smallstep/certificates/webhook 0.032s timeout 5m dh_auto_test -- -run "Test_newHTTPClient|TestPKI_GenerateConfig|TestDB_GetDpopToken|TestDB_CreateDpopToken|TestDB_GetOidcToken|TestDB_CreateOidcToken|TestCustomTemplateOptions" cd _build && go test -vet=off -v -p 12 -run Test_newHTTPClient\|TestPKI_GenerateConfig\|TestDB_GetDpopToken\|TestDB_CreateDpopToken\|TestDB_GetOidcToken\|TestDB_CreateOidcToken\|TestCustomTemplateOptions github.com/smallstep/certificates/acme github.com/smallstep/certificates/acme/api github.com/smallstep/certificates/acme/db/nosql github.com/smallstep/certificates/acme/wire github.com/smallstep/certificates/api github.com/smallstep/certificates/api/log github.com/smallstep/certificates/api/models github.com/smallstep/certificates/api/read github.com/smallstep/certificates/api/render github.com/smallstep/certificates/authority github.com/smallstep/certificates/authority/admin github.com/smallstep/certificates/authority/admin/api github.com/smallstep/certificates/authority/admin/db/nosql github.com/smallstep/certificates/authority/administrator github.com/smallstep/certificates/authority/config github.com/smallstep/certificates/authority/internal/constraints github.com/smallstep/certificates/authority/policy github.com/smallstep/certificates/authority/poolhttp github.com/smallstep/certificates/authority/provisioner github.com/smallstep/certificates/authority/provisioner/gcp github.com/smallstep/certificates/authority/provisioner/wire github.com/smallstep/certificates/ca github.com/smallstep/certificates/ca/client github.com/smallstep/certificates/ca/identity github.com/smallstep/certificates/cas github.com/smallstep/certificates/cas/apiv1 github.com/smallstep/certificates/cas/softcas github.com/smallstep/certificates/cas/stepcas github.com/smallstep/certificates/commands github.com/smallstep/certificates/db github.com/smallstep/certificates/errs github.com/smallstep/certificates/internal/cast github.com/smallstep/certificates/internal/httptransport github.com/smallstep/certificates/internal/metrix github.com/smallstep/certificates/internal/userid github.com/smallstep/certificates/logging github.com/smallstep/certificates/middleware/requestid github.com/smallstep/certificates/monitoring github.com/smallstep/certificates/pki github.com/smallstep/certificates/policy github.com/smallstep/certificates/scep github.com/smallstep/certificates/scep/api github.com/smallstep/certificates/server github.com/smallstep/certificates/templates github.com/smallstep/certificates/test/integration github.com/smallstep/certificates/test/integration/scep github.com/smallstep/certificates/test/integration/scep/internal/x509 github.com/smallstep/certificates/webhook testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/acme 0.044s [no tests to run] +ok github.com/smallstep/certificates/acme 0.179s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/acme/api 0.041s [no tests to run] +ok github.com/smallstep/certificates/acme/api 0.134s [no tests to run] === RUN TestDB_GetDpopToken wire_test.go:28: Error Trace: /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:28 @@ -11254,15 +11309,17 @@ --- FAIL: TestDB_CreateDpopToken (0.00s) --- PASS: TestDB_CreateDpopToken/fail/db.Save (0.00s) === RUN TestDB_GetOidcToken - wire_test.go:216: - Error Trace: /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:216 +=== RUN TestDB_GetOidcToken/fail/db.Get +=== NAME TestDB_GetOidcToken + wire_test.go:270: + Error Trace: /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:270 /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:293 Error: Received unexpected error: badgerv2 database not supported github.com/smallstep/nosql.New /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/nosql/nosql.go:65 - github.com/smallstep/certificates/acme/db/nosql.TestDB_GetOidcToken.func1 - /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:215 + github.com/smallstep/certificates/acme/db/nosql.TestDB_GetOidcToken.func4 + /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:269 github.com/smallstep/certificates/acme/db/nosql.TestDB_GetOidcToken /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:293 testing.tRunner @@ -11271,6 +11328,7 @@ /usr/lib/go-1.24/src/runtime/asm_arm64.s:1223 Test: TestDB_GetOidcToken --- FAIL: TestDB_GetOidcToken (0.00s) + --- PASS: TestDB_GetOidcToken/fail/db.Get (0.00s) === RUN TestDB_CreateOidcToken === RUN TestDB_CreateOidcToken/fail/db.Save === NAME TestDB_CreateOidcToken @@ -11290,65 +11348,65 @@ runtime.goexit /usr/lib/go-1.24/src/runtime/asm_arm64.s:1223 Test: TestDB_CreateOidcToken ---- FAIL: TestDB_CreateOidcToken (0.00s) +--- FAIL: TestDB_CreateOidcToken (0.01s) --- PASS: TestDB_CreateOidcToken/fail/db.Save (0.00s) FAIL -FAIL github.com/smallstep/certificates/acme/db/nosql 0.039s +FAIL github.com/smallstep/certificates/acme/db/nosql 0.104s testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/acme/wire 0.011s [no tests to run] +ok github.com/smallstep/certificates/acme/wire 0.046s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/api 0.059s [no tests to run] +ok github.com/smallstep/certificates/api 0.113s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/api/log 0.028s [no tests to run] +ok github.com/smallstep/certificates/api/log 0.042s [no tests to run] ? github.com/smallstep/certificates/api/models [no test files] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/api/read 0.037s [no tests to run] +ok github.com/smallstep/certificates/api/read 0.065s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/api/render 0.035s [no tests to run] +ok github.com/smallstep/certificates/api/render 0.043s [no tests to run] === RUN Test_newHTTPClient -2025/10/26 22:12:01 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2026/11/30 06:40:37 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN Test_newHTTPClient/SystemCertPool http_client_test.go:72: Error Trace: /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/authority/http_client_test.go:72 Error: Received unexpected error: - Get "https://smallstep.com": dial tcp: lookup smallstep.com on [::1]:53: read udp [::1]:48913->[::1]:53: read: connection refused + Get "https://smallstep.com": dial tcp: lookup smallstep.com on [::1]:53: read udp [::1]:42691->[::1]:53: read: connection refused Test: Test_newHTTPClient/SystemCertPool === RUN Test_newHTTPClient/LocalCertPool === RUN Test_newHTTPClient/LocalCertPool/DefaultClient -2025/10/26 22:12:01 http: TLS handshake error from 127.0.0.1:45162: remote error: tls: bad certificate +2026/11/30 06:40:37 http: TLS handshake error from 127.0.0.1:49704: read tcp 127.0.0.1:41765->127.0.0.1:49704: use of closed network connection === RUN Test_newHTTPClient/custom_transport ---- FAIL: Test_newHTTPClient (0.03s) +--- FAIL: Test_newHTTPClient (0.08s) --- FAIL: Test_newHTTPClient/SystemCertPool (0.00s) --- PASS: Test_newHTTPClient/LocalCertPool (0.01s) --- PASS: Test_newHTTPClient/LocalCertPool/DefaultClient (0.00s) --- PASS: Test_newHTTPClient/custom_transport (0.00s) FAIL -FAIL github.com/smallstep/certificates/authority 0.080s +FAIL github.com/smallstep/certificates/authority 0.176s ? github.com/smallstep/certificates/authority/admin [no test files] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/authority/admin/api 0.035s [no tests to run] +ok github.com/smallstep/certificates/authority/admin/api 0.116s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/authority/admin/db/nosql 0.027s [no tests to run] +ok github.com/smallstep/certificates/authority/admin/db/nosql 0.103s [no tests to run] ? github.com/smallstep/certificates/authority/administrator [no test files] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/authority/config 0.050s [no tests to run] +ok github.com/smallstep/certificates/authority/config 0.078s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/authority/internal/constraints 0.036s [no tests to run] +ok github.com/smallstep/certificates/authority/internal/constraints 0.081s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/authority/policy 0.051s [no tests to run] +ok github.com/smallstep/certificates/authority/policy 0.066s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/authority/poolhttp 0.024s [no tests to run] +ok github.com/smallstep/certificates/authority/poolhttp 0.034s [no tests to run] === RUN TestCustomTemplateOptions === RUN TestCustomTemplateOptions/ok === RUN TestCustomTemplateOptions/okIID @@ -11379,53 +11437,57 @@ --- PASS: TestCustomTemplateOptions/fail (0.00s) --- PASS: TestCustomTemplateOptions/failTemplateData (0.00s) FAIL -FAIL github.com/smallstep/certificates/authority/provisioner 0.054s +FAIL github.com/smallstep/certificates/authority/provisioner 0.101s testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/authority/provisioner/gcp 0.024s [no tests to run] +ok github.com/smallstep/certificates/authority/provisioner/gcp 0.065s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/authority/provisioner/wire 0.036s [no tests to run] +ok github.com/smallstep/certificates/authority/provisioner/wire 0.045s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/ca 0.064s [no tests to run] +ok github.com/smallstep/certificates/ca 0.116s [no tests to run] ? github.com/smallstep/certificates/ca/client [no test files] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/ca/identity 0.052s [no tests to run] +ok github.com/smallstep/certificates/ca/identity 0.108s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/cas 0.035s [no tests to run] +ok github.com/smallstep/certificates/cas 0.042s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/cas/apiv1 0.027s [no tests to run] +ok github.com/smallstep/certificates/cas/apiv1 0.038s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/cas/softcas 0.060s [no tests to run] +ok github.com/smallstep/certificates/cas/softcas 0.094s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/cas/stepcas 0.351s [no tests to run] +ok github.com/smallstep/certificates/cas/stepcas 0.440s [no tests to run] ? github.com/smallstep/certificates/commands [no test files] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/db 0.069s [no tests to run] +ok github.com/smallstep/certificates/db 0.059s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/errs 0.018s [no tests to run] +ok github.com/smallstep/certificates/errs 0.029s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/internal/cast 0.018s [no tests to run] +ok github.com/smallstep/certificates/internal/cast 0.038s [no tests to run] ? github.com/smallstep/certificates/internal/httptransport [no test files] ? github.com/smallstep/certificates/internal/metrix [no test files] ? github.com/smallstep/certificates/internal/userid [no test files] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/logging 0.015s [no tests to run] +ok github.com/smallstep/certificates/logging 0.022s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/middleware/requestid 0.021s [no tests to run] +ok github.com/smallstep/certificates/middleware/requestid 0.035s [no tests to run] ? github.com/smallstep/certificates/monitoring [no test files] === RUN TestPKI_GenerateConfig +=== RUN TestPKI_GenerateConfig/ok/simple +=== RUN TestPKI_GenerateConfig/ok/with-acme +=== RUN TestPKI_GenerateConfig/ok/with-acme-and-double-provisioner-name +=== RUN TestPKI_GenerateConfig/ok/with-ssh === RUN TestPKI_GenerateConfig/ok/with-ssh-and-double-provisioner-name === RUN TestPKI_GenerateConfig/ok/with-admin pki_test.go:281: @@ -11436,42 +11498,38 @@ Error Trace: /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/pki/pki_test.go:282 Error: Expected value not to be nil. Test: TestPKI_GenerateConfig/ok/with-admin -=== RUN TestPKI_GenerateConfig/ok/simple -=== RUN TestPKI_GenerateConfig/ok/with-acme -=== RUN TestPKI_GenerateConfig/ok/with-acme-and-double-provisioner-name -=== RUN TestPKI_GenerateConfig/ok/with-ssh ---- FAIL: TestPKI_GenerateConfig (0.00s) - --- PASS: TestPKI_GenerateConfig/ok/with-ssh-and-double-provisioner-name (0.00s) - --- FAIL: TestPKI_GenerateConfig/ok/with-admin (0.00s) +--- FAIL: TestPKI_GenerateConfig (0.01s) --- PASS: TestPKI_GenerateConfig/ok/simple (0.00s) --- PASS: TestPKI_GenerateConfig/ok/with-acme (0.00s) --- PASS: TestPKI_GenerateConfig/ok/with-acme-and-double-provisioner-name (0.00s) --- PASS: TestPKI_GenerateConfig/ok/with-ssh (0.00s) + --- PASS: TestPKI_GenerateConfig/ok/with-ssh-and-double-provisioner-name (0.00s) + --- FAIL: TestPKI_GenerateConfig/ok/with-admin (0.00s) FAIL -FAIL github.com/smallstep/certificates/pki 0.078s +FAIL github.com/smallstep/certificates/pki 0.114s testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/policy 0.049s [no tests to run] +ok github.com/smallstep/certificates/policy 0.059s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/scep 0.062s [no tests to run] +ok github.com/smallstep/certificates/scep 0.086s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/scep/api 0.065s [no tests to run] +ok github.com/smallstep/certificates/scep/api 0.078s [no tests to run] ? github.com/smallstep/certificates/server [no test files] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/templates 0.045s [no tests to run] +ok github.com/smallstep/certificates/templates 0.061s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/test/integration 0.035s [no tests to run] +ok github.com/smallstep/certificates/test/integration 0.079s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/test/integration/scep 0.043s [no tests to run] +ok github.com/smallstep/certificates/test/integration/scep 0.078s [no tests to run] ? github.com/smallstep/certificates/test/integration/scep/internal/x509 [no test files] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/webhook 0.014s [no tests to run] +ok github.com/smallstep/certificates/webhook 0.034s [no tests to run] FAIL dh_auto_test: error: cd _build && go test -vet=off -v -p 12 -run Test_newHTTPClient\|TestPKI_GenerateConfig\|TestDB_GetDpopToken\|TestDB_CreateDpopToken\|TestDB_GetOidcToken\|TestDB_CreateOidcToken\|TestCustomTemplateOptions github.com/smallstep/certificates/acme github.com/smallstep/certificates/acme/api github.com/smallstep/certificates/acme/db/nosql github.com/smallstep/certificates/acme/wire github.com/smallstep/certificates/api github.com/smallstep/certificates/api/log github.com/smallstep/certificates/api/models github.com/smallstep/certificates/api/read github.com/smallstep/certificates/api/render github.com/smallstep/certificates/authority github.com/smallstep/certificates/authority/admin github.com/smallstep/certificates/authority/admin/api github.com/smallstep/certificates/authority/admin/db/nosql github.com/smallstep/certificates/authority/administrator github.com/smallstep/certificates/authority/config github.com/smallstep/certificates/authority/internal/constraints github.com/smallstep/certificates/authority/policy github.com/smallstep/certificates/authority/poolhttp github.com/smallstep/certificates/authority/provisioner github.com/smallstep/certificates/authority/provisioner/gcp github.com/smallstep/certificates/authority/provisioner/wire github.com/smallstep/certificates/ca github.com/smallstep/certificates/ca/client github.com/smallstep/certificates/ca/identity github.com/smallstep/certificates/cas github.com/smallstep/certificates/cas/apiv1 github.com/smallstep/certificates/cas/softcas github.com/smallstep/certificates/cas/stepcas github.com/smallstep/certificates/commands github.com/smallstep/certificates/db github.com/smallstep/certificates/errs github.com/smallstep/certificates/internal/cast github.com/smallstep/certificates/internal/httptransport github.com/smallstep/certificates/internal/metrix github.com/smallstep/certificates/internal/userid github.com/smallstep/certificates/logging github.com/smallstep/certificates/middleware/requestid github.com/smallstep/certificates/monitoring github.com/smallstep/certificates/pki github.com/smallstep/certificates/policy github.com/smallstep/certificates/scep github.com/smallstep/certificates/scep/api github.com/smallstep/certificates/server github.com/smallstep/certificates/templates github.com/smallstep/certificates/test/integration github.com/smallstep/certificates/test/integration/scep github.com/smallstep/certificates/test/integration/scep/internal/x509 github.com/smallstep/certificates/webhook returned exit code 1 make[1]: [debian/rules:31: override_dh_auto_test] Error 25 (ignored) @@ -11506,12 +11564,14 @@ dpkg-buildpackage: info: binary-only upload (no source included) dpkg-genchanges: info: not including original source code in upload I: copying local configuration +I: user script /srv/workspace/pbuilder/1487745/tmp/hooks/B01_cleanup starting +I: user script /srv/workspace/pbuilder/1487745/tmp/hooks/B01_cleanup finished I: unmounting dev/ptmx filesystem I: unmounting dev/pts filesystem I: unmounting dev/shm filesystem I: unmounting proc filesystem I: unmounting sys filesystem I: cleaning the build env -I: removing directory /srv/workspace/pbuilder/313291 and its subdirectories -I: Current time: Sun Oct 26 22:12:20 -12 2025 -I: pbuilder-time-stamp: 1761559940 +I: removing directory /srv/workspace/pbuilder/1487745 and its subdirectories +I: Current time: Mon Nov 30 06:41:06 +14 2026 +I: pbuilder-time-stamp: 1795970466