Diff of the two buildlogs: -- --- b1/build.log 2025-07-09 11:52:59.883729045 +0000 +++ b2/build.log 2025-07-09 11:55:36.464778457 +0000 @@ -1,6 +1,6 @@ I: pbuilder: network access will be disabled during build -I: Current time: Tue Jul 8 23:50:11 -12 2025 -I: pbuilder-time-stamp: 1752061811 +I: Current time: Wed Aug 12 08:16:03 +14 2026 +I: pbuilder-time-stamp: 1786472163 I: Building the build Environment I: extracting base tarball [/var/cache/pbuilder/trixie-reproducible-base.tgz] I: copying local configuration @@ -30,52 +30,84 @@ dpkg-source: info: applying fix-nebula-test.patch I: Not using root during the build. I: Installing the build-deps -I: user script /srv/workspace/pbuilder/2725380/tmp/hooks/D02_print_environment starting +I: user script /srv/workspace/pbuilder/3370375/tmp/hooks/D01_modify_environment starting +debug: Running on codethink03-arm64. +I: Changing host+domainname to test build reproducibility +I: Adding a custom variable just for the fun of it... +I: Changing /bin/sh to bash +'/bin/sh' -> '/bin/bash' +lrwxrwxrwx 1 root root 9 Aug 11 18:16 /bin/sh -> /bin/bash +I: Setting pbuilder2's login shell to /bin/bash +I: Setting pbuilder2's GECOS to second user,second room,second work-phone,second home-phone,second other +I: user script /srv/workspace/pbuilder/3370375/tmp/hooks/D01_modify_environment finished +I: user script /srv/workspace/pbuilder/3370375/tmp/hooks/D02_print_environment starting I: set - BUILDDIR='/build/reproducible-path' - BUILDUSERGECOS='first user,first room,first work-phone,first home-phone,first other' - BUILDUSERNAME='pbuilder1' - BUILD_ARCH='arm64' - DEBIAN_FRONTEND='noninteractive' + BASH=/bin/sh + BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath + BASH_ALIASES=() + BASH_ARGC=() + BASH_ARGV=() + BASH_CMDS=() + BASH_LINENO=([0]="12" [1]="0") + BASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:. + BASH_SOURCE=([0]="/tmp/hooks/D02_print_environment" [1]="/tmp/hooks/D02_print_environment") + BASH_VERSINFO=([0]="5" [1]="2" [2]="37" [3]="1" [4]="release" [5]="aarch64-unknown-linux-gnu") + BASH_VERSION='5.2.37(1)-release' + BUILDDIR=/build/reproducible-path + BUILDUSERGECOS='second user,second room,second work-phone,second home-phone,second other' + BUILDUSERNAME=pbuilder2 + BUILD_ARCH=arm64 + DEBIAN_FRONTEND=noninteractive DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=12 ' - DISTRIBUTION='trixie' - HOME='/root' - HOST_ARCH='arm64' + DIRSTACK=() + DISTRIBUTION=trixie + EUID=0 + FUNCNAME=([0]="Echo" [1]="main") + GROUPS=() + HOME=/root + HOSTNAME=i-capture-the-hostname + HOSTTYPE=aarch64 + HOST_ARCH=arm64 IFS=' ' - INVOCATION_ID='4896150af003493286c38a738780966c' - LANG='C' - LANGUAGE='en_US:en' - LC_ALL='C' - MAIL='/var/mail/root' - OPTIND='1' - PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games' - PBCURRENTCOMMANDLINEOPERATION='build' - PBUILDER_OPERATION='build' - PBUILDER_PKGDATADIR='/usr/share/pbuilder' - PBUILDER_PKGLIBDIR='/usr/lib/pbuilder' - PBUILDER_SYSCONFDIR='/etc' - PPID='2725380' - PS1='# ' - PS2='> ' + INVOCATION_ID=63f2b87d587c4e78b0e6892388b9b1ec + LANG=C + LANGUAGE=nl_BE:nl + LC_ALL=C + MACHTYPE=aarch64-unknown-linux-gnu + MAIL=/var/mail/root + OPTERR=1 + OPTIND=1 + OSTYPE=linux-gnu + PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path + PBCURRENTCOMMANDLINEOPERATION=build + PBUILDER_OPERATION=build + PBUILDER_PKGDATADIR=/usr/share/pbuilder + PBUILDER_PKGLIBDIR=/usr/lib/pbuilder + PBUILDER_SYSCONFDIR=/etc + PIPESTATUS=([0]="0") + POSIXLY_CORRECT=y + PPID=3370375 PS4='+ ' - PWD='/' - SHELL='/bin/bash' - SHLVL='2' - SUDO_COMMAND='/usr/bin/timeout -k 18.1h 18h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.hko2MtaI/pbuilderrc_Q1QE --distribution trixie --hookdir /etc/pbuilder/first-build-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/trixie-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.hko2MtaI/b1 --logfile b1/build.log golang-github-smallstep-certificates_0.20.0-5.dsc' - SUDO_GID='109' - SUDO_UID='104' - SUDO_USER='jenkins' - TERM='unknown' - TZ='/usr/share/zoneinfo/Etc/GMT+12' - USER='root' - _='/usr/bin/systemd-run' - http_proxy='http://192.168.101.4:3128' + PWD=/ + SHELL=/bin/bash + SHELLOPTS=braceexpand:errexit:hashall:interactive-comments:posix + SHLVL=3 + SUDO_COMMAND='/usr/bin/timeout -k 24.1h 24h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.hko2MtaI/pbuilderrc_wu8R --distribution trixie --hookdir /etc/pbuilder/rebuild-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/trixie-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.hko2MtaI/b2 --logfile b2/build.log golang-github-smallstep-certificates_0.20.0-5.dsc' + SUDO_GID=109 + SUDO_UID=104 + SUDO_USER=jenkins + TERM=unknown + TZ=/usr/share/zoneinfo/Etc/GMT-14 + UID=0 + USER=root + _='I: set' + http_proxy=http://192.168.101.4:3128 I: uname -a - Linux codethink04-arm64 6.1.0-37-cloud-arm64 #1 SMP Debian 6.1.140-1 (2025-05-22) aarch64 GNU/Linux + Linux i-capture-the-hostname 6.1.0-37-cloud-arm64 #1 SMP Debian 6.1.140-1 (2025-05-22) aarch64 GNU/Linux I: ls -l /bin - lrwxrwxrwx 1 root root 7 May 12 19:25 /bin -> usr/bin -I: user script /srv/workspace/pbuilder/2725380/tmp/hooks/D02_print_environment finished + lrwxrwxrwx 1 root root 7 May 12 2025 /bin -> usr/bin +I: user script /srv/workspace/pbuilder/3370375/tmp/hooks/D02_print_environment finished -> Attempting to satisfy build-dependencies -> Creating pbuilder-satisfydepends-dummy package Package: pbuilder-satisfydepends-dummy @@ -438,7 +470,7 @@ Get: 271 http://deb.debian.org/debian trixie/main arm64 golang-step-linkedca-dev all 0.19.0-1 [41.3 kB] Get: 272 http://deb.debian.org/debian trixie/main arm64 libpcsclite1 arm64 2.3.3-1 [55.0 kB] Get: 273 http://deb.debian.org/debian trixie/main arm64 libpcsclite-dev arm64 2.3.3-1 [68.1 kB] -Fetched 168 MB in 2s (93.7 MB/s) +Fetched 168 MB in 1s (200 MB/s) Preconfiguring packages ... Selecting previously unselected package golang-golang-x-sys-dev. (Reading database ... (Reading database ... 5% (Reading database ... 10% (Reading database ... 15% (Reading database ... 20% (Reading database ... 25% (Reading database ... 30% (Reading database ... 35% (Reading database ... 40% (Reading database ... 45% (Reading database ... 50% (Reading database ... 55% (Reading database ... 60% (Reading database ... 65% (Reading database ... 70% (Reading database ... 75% (Reading database ... 80% (Reading database ... 85% (Reading database ... 90% (Reading database ... 95% (Reading database ... 100% (Reading database ... 19964 files and directories currently installed.) @@ -1323,8 +1355,8 @@ Setting up tzdata (2025b-4) ... Current default time zone: 'Etc/UTC' -Local time is now: Wed Jul 9 11:50:48 UTC 2025. -Universal Time is now: Wed Jul 9 11:50:48 UTC 2025. +Local time is now: Tue Aug 11 18:16:46 UTC 2026. +Universal Time is now: Tue Aug 11 18:16:46 UTC 2026. Run 'dpkg-reconfigure tzdata' if you wish to change it. Setting up golang-github-coreos-go-semver-dev (0.3.0-1) ... @@ -1551,7 +1583,11 @@ Building tag database... -> Finished parsing the build-deps I: Building the package -I: Running cd /build/reproducible-path/golang-github-smallstep-certificates-0.20.0/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-genchanges -S > ../golang-github-smallstep-certificates_0.20.0-5_source.changes +I: user script /srv/workspace/pbuilder/3370375/tmp/hooks/A99_set_merged_usr starting +Not re-configuring usrmerge for trixie +I: user script /srv/workspace/pbuilder/3370375/tmp/hooks/A99_set_merged_usr finished +hostname: Name or service not known +I: Running cd /build/reproducible-path/golang-github-smallstep-certificates-0.20.0/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-genchanges -S > ../golang-github-smallstep-certificates_0.20.0-5_source.changes dpkg-buildpackage: info: source package golang-github-smallstep-certificates dpkg-buildpackage: info: source version 0.20.0-5 dpkg-buildpackage: info: source distribution unstable @@ -2182,7 +2218,7 @@ GOEXPERIMENT='' GOFIPS140='off' GOFLAGS='' -GOGCCFLAGS='-fPIC -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build3237670130=/tmp/go-build -gno-record-gcc-switches' +GOGCCFLAGS='-fPIC -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build3648889954=/tmp/go-build -gno-record-gcc-switches' GOHOSTARCH='arm64' GOHOSTOS='linux' GOINSECURE='' @@ -2206,48 +2242,48 @@ GOWORK='' PKG_CONFIG='pkg-config' cd _build && go install -trimpath -v -p 12 github.com/smallstep/certificates/acme github.com/smallstep/certificates/acme/api github.com/smallstep/certificates/acme/db/nosql github.com/smallstep/certificates/api github.com/smallstep/certificates/api/log github.com/smallstep/certificates/api/read github.com/smallstep/certificates/api/render github.com/smallstep/certificates/authority github.com/smallstep/certificates/authority/admin github.com/smallstep/certificates/authority/admin/api github.com/smallstep/certificates/authority/admin/db/nosql github.com/smallstep/certificates/authority/administrator github.com/smallstep/certificates/authority/config github.com/smallstep/certificates/authority/policy github.com/smallstep/certificates/authority/provisioner github.com/smallstep/certificates/ca github.com/smallstep/certificates/ca/identity github.com/smallstep/certificates/cas github.com/smallstep/certificates/cas/apiv1 github.com/smallstep/certificates/cas/softcas github.com/smallstep/certificates/cas/stepcas github.com/smallstep/certificates/commands github.com/smallstep/certificates/db github.com/smallstep/certificates/errs github.com/smallstep/certificates/kms github.com/smallstep/certificates/kms/apiv1 github.com/smallstep/certificates/kms/awskms github.com/smallstep/certificates/kms/pkcs11 github.com/smallstep/certificates/kms/softkms github.com/smallstep/certificates/kms/sshagentkms github.com/smallstep/certificates/kms/uri github.com/smallstep/certificates/kms/yubikey github.com/smallstep/certificates/logging github.com/smallstep/certificates/monitoring github.com/smallstep/certificates/pki github.com/smallstep/certificates/policy github.com/smallstep/certificates/scep github.com/smallstep/certificates/scep/api github.com/smallstep/certificates/server github.com/smallstep/certificates/templates -internal/goos -internal/goarch -internal/godebugs -internal/byteorder internal/unsafeheader -internal/cpu -sync/atomic -internal/runtime/syscall -internal/goexperiment +internal/godebugs +internal/goarch internal/coverage/rtcov -internal/profilerecord -internal/msan +internal/goexperiment +internal/byteorder internal/runtime/math -internal/abi -internal/asan math/bits +internal/asan unicode +internal/msan +internal/profilerecord +internal/goos unicode/utf8 -internal/chacha8rand internal/itoa crypto/internal/fips140/alias -crypto/internal/fips140deps/byteorder cmp crypto/internal/boring/sig +internal/abi +sync/atomic +internal/cpu +internal/chacha8rand +math +crypto/internal/fips140deps/byteorder +internal/runtime/syscall +crypto/internal/fips140/subtle container/list unicode/utf16 vendor/golang.org/x/crypto/cryptobyte/asn1 -crypto/internal/fips140/subtle -math vendor/golang.org/x/crypto/internal/alias internal/nettrace encoding log/internal google.golang.org/protobuf/internal/flags google.golang.org/protobuf/internal/set +google.golang.org/grpc/serviceconfig +github.com/dgraph-io/badger/options +github.com/dgryski/go-farm internal/bytealg internal/runtime/atomic internal/runtime/sys crypto/internal/fips140deps/cpu -google.golang.org/grpc/serviceconfig -github.com/dgraph-io/badger/options -github.com/dgryski/go-farm github.com/dgraph-io/badger/trie golang.org/x/crypto/internal/alias golang.org/x/crypto/salsa20/salsa @@ -2256,10 +2292,10 @@ github.com/aws/aws-sdk-go/aws/client/metadata internal/runtime/exithook internal/stringslite +github.com/aws/aws-sdk-go/internal/sdkmath internal/race -internal/sync internal/runtime/maps -github.com/aws/aws-sdk-go/internal/sdkmath +internal/sync runtime internal/reflectlite iter @@ -2270,220 +2306,219 @@ slices errors sort +internal/oserror +vendor/golang.org/x/net/dns/dnsmessage +strconv +path +math/rand/v2 +io internal/bisect internal/testlog internal/singleflight unique -google.golang.org/protobuf/internal/pragma -github.com/aws/aws-sdk-go/internal/sync/singleflight +syscall runtime/cgo -io -internal/oserror -path -strconv -math/rand/v2 -vendor/golang.org/x/net/dns/dnsmessage +google.golang.org/protobuf/internal/pragma google.golang.org/grpc/internal/buffer -syscall +github.com/aws/aws-sdk-go/internal/sync/singleflight internal/godebug bytes hash strings crypto/internal/randutil go.step.sm/crypto/internal/utils/utfbom +container/heap github.com/aws/aws-sdk-go/internal/sdkio hash/crc32 hash/fnv -container/heap hash/adler32 crypto reflect net/netip encoding/base32 golang.org/x/crypto/blowfish -crypto/internal/fips140deps/godebug -math/rand vendor/golang.org/x/text/transform golang.org/x/text/transform +crypto/internal/fips140deps/godebug +math/rand crypto/internal/impl bufio net/http/internal/ascii -crypto/internal/fips140 regexp/syntax html +crypto/internal/fips140 +go.step.sm/crypto/internal/emoji +github.com/aws/aws-sdk-go/internal/strings crypto/internal/fips140/sha256 crypto/internal/fips140/sha3 crypto/internal/fips140/sha512 crypto/tls/internal/fips140tls google.golang.org/grpc/internal/grpcrand -go.step.sm/crypto/internal/emoji -crypto/sha3 github.com/huandu/xstrings -github.com/aws/aws-sdk-go/internal/strings github.com/aws/aws-sdk-go/internal/sdkuri -crypto/internal/fips140hash +crypto/sha3 crypto/internal/fips140/hmac crypto/internal/fips140/check -crypto/internal/fips140/aes -crypto/internal/fips140/nistec/fiat +crypto/internal/fips140hash crypto/internal/fips140/edwards25519/field +crypto/internal/fips140/nistec/fiat crypto/internal/fips140/bigmod crypto/internal/fips140/hkdf crypto/internal/fips140/tls12 +crypto/internal/fips140/aes +crypto/internal/fips140/tls13 regexp +crypto/internal/fips140/edwards25519 time internal/syscall/unix internal/syscall/execenv -crypto/internal/fips140/tls13 -crypto/internal/fips140/edwards25519 +crypto/internal/fips140/nistec context io/fs -internal/poll google.golang.org/grpc/backoff google.golang.org/grpc/keepalive +internal/poll github.com/aws/aws-sdk-go/internal/sdkrand google.golang.org/grpc/internal/backoff google.golang.org/grpc/internal/grpcsync internal/filepathlite embed -crypto/internal/fips140/nistec -google.golang.org/protobuf/internal/editiondefaults -os internal/fmtsort encoding/binary +google.golang.org/protobuf/internal/editiondefaults +os vendor/golang.org/x/crypto/internal/poly1305 encoding/base64 -golang.org/x/crypto/blake2b -github.com/cespare/xxhash golang.org/x/sys/unix -filippo.io/edwards25519/field +github.com/cespare/xxhash github.com/golang/snappy +filippo.io/edwards25519/field +golang.org/x/crypto/blake2b golang.org/x/crypto/internal/poly1305 encoding/pem golang.org/x/crypto/nacl/secretbox golang.org/x/crypto/argon2 +filippo.io/edwards25519 crypto/internal/sysrand fmt -net path/filepath io/ioutil google.golang.org/protobuf/internal/detrand google.golang.org/grpc/internal/envconfig os/signal internal/sysinfo -filippo.io/edwards25519 +net crypto/internal/entropy crypto/internal/fips140/drbg os/exec crypto/internal/fips140only -crypto/internal/fips140/mlkem -crypto/internal/fips140/aes/gcm crypto/internal/fips140/ecdh -crypto/internal/fips140/ecdsa +crypto/internal/fips140/aes/gcm crypto/internal/fips140/ed25519 +crypto/internal/fips140/mlkem crypto/internal/fips140/rsa +crypto/internal/fips140/ecdsa crypto/md5 crypto/rc4 crypto/cipher +crypto/internal/boring +crypto/des +vendor/golang.org/x/crypto/chacha20 +golang.org/x/crypto/chacha20 math/big -vendor/golang.org/x/net/http2/hpack encoding/hex net/url -encoding/json compress/flate log -mime -vendor/golang.org/x/text/unicode/norm -crypto/internal/boring -crypto/des +encoding/json crypto/sha256 crypto/aes crypto/ecdh crypto/sha512 crypto/hmac -vendor/golang.org/x/crypto/chacha20 crypto/sha1 +vendor/golang.org/x/crypto/chacha20poly1305 +vendor/golang.org/x/text/unicode/norm +vendor/golang.org/x/net/http2/hpack vendor/golang.org/x/text/unicode/bidi +mime mime/quotedprintable net/http/internal -github.com/pkg/errors compress/gzip +github.com/pkg/errors database/sql/driver google.golang.org/protobuf/internal/errors -vendor/golang.org/x/crypto/chacha20poly1305 go/token golang.org/x/net/internal/timeseries vendor/golang.org/x/text/secure/bidirule -text/template/parse google.golang.org/protobuf/encoding/protowire +text/template/parse text/tabwriter google.golang.org/grpc/internal/grpclog -google.golang.org/grpc/attributes google.golang.org/protobuf/reflect/protoreflect +google.golang.org/grpc/attributes google.golang.org/protobuf/internal/version google.golang.org/grpc/internal/idle golang.org/x/text/unicode/bidi -vendor/golang.org/x/net/idna golang.org/x/text/unicode/norm golang.org/x/net/http2/hpack github.com/DataDog/zstd github.com/smallstep/nosql/database database/sql +go.etcd.io/bbolt +vendor/golang.org/x/net/idna compress/zlib -google.golang.org/grpc/grpclog -golang.org/x/text/secure/bidirule -github.com/dgraph-io/ristretto/z -golang.org/x/crypto/curve25519 -github.com/sirupsen/logrus +text/template crypto/elliptic crypto/internal/boring/bbig encoding/asn1 crypto/rand crypto/dsa -text/template -google.golang.org/grpc/connectivity +github.com/sirupsen/logrus +google.golang.org/protobuf/internal/strs crypto/ed25519 crypto/internal/hpke crypto/rsa github.com/rs/xid -google.golang.org/protobuf/internal/strs +google.golang.org/protobuf/internal/encoding/json google.golang.org/protobuf/internal/encoding/messageset google.golang.org/protobuf/internal/descfmt google.golang.org/protobuf/internal/descopts +google.golang.org/protobuf/internal/encoding/text google.golang.org/protobuf/internal/genid google.golang.org/protobuf/internal/order -google.golang.org/protobuf/internal/encoding/json -google.golang.org/protobuf/internal/encoding/text google.golang.org/protobuf/reflect/protoregistry +vendor/golang.org/x/crypto/cryptobyte +crypto/x509/pkix google.golang.org/protobuf/runtime/protoiface +google.golang.org/grpc/grpclog google.golang.org/protobuf/internal/protolazy +golang.org/x/text/secure/bidirule +github.com/dgraph-io/ristretto/z golang.org/x/net/idna -github.com/dgraph-io/ristretto +google.golang.org/protobuf/proto github.com/dustin/go-humanize -vendor/golang.org/x/crypto/cryptobyte -crypto/x509/pkix -go.etcd.io/bbolt +google.golang.org/grpc/connectivity +github.com/smallstep/nosql/bolt +github.com/dgraph-io/ristretto google.golang.org/protobuf/internal/encoding/defval go.step.sm/crypto/randutil -google.golang.org/protobuf/proto +golang.org/x/crypto/curve25519 go.step.sm/crypto/fingerprint github.com/Masterminds/goutils +html/template github.com/Masterminds/semver -github.com/mitchellh/reflectwalk github.com/imdario/mergo -github.com/shopspring/decimal +github.com/mitchellh/reflectwalk crypto/ecdsa +github.com/shopspring/decimal golang.org/x/crypto/bcrypt -github.com/mitchellh/copystructure -html/template golang.org/x/crypto/pbkdf2 +github.com/mitchellh/copystructure +golang.org/x/crypto/scrypt github.com/go-jose/go-jose/v3/json go.step.sm/crypto/internal/utils -golang.org/x/crypto/scrypt go.step.sm/crypto/x25519 -golang.org/x/crypto/chacha20 -google.golang.org/protobuf/internal/filedesc -google.golang.org/protobuf/encoding/prototext golang.org/x/crypto/ssh/internal/bcrypt_pbkdf go.step.sm/crypto/internal/bcrypt_pbkdf golang.org/x/crypto/cryptobyte @@ -2492,36 +2527,36 @@ flag github.com/russross/blackfriday/v2 os/user -github.com/smallstep/nosql/bolt +google.golang.org/protobuf/internal/filedesc +google.golang.org/protobuf/encoding/prototext github.com/mattn/go-isatty -github.com/go-jose/go-jose/v3/cipher github.com/mattn/go-colorable -golang.org/x/net/html -github.com/smallstep/scep/cryptoutil -github.com/spf13/cast github.com/mgutz/ansi +golang.org/x/net/html runtime/debug runtime/trace +github.com/go-jose/go-jose/v3/cipher +github.com/smallstep/scep/cryptoutil github.com/newrelic/go-agent/internal/jsonx github.com/newrelic/go-agent/internal/logger +github.com/spf13/cast github.com/newrelic/go-agent/internal/sysinfo github.com/aws/aws-sdk-go/aws/awserr github.com/newrelic/go-agent/internal/cat github.com/jmespath/go-jmespath encoding/xml -github.com/smallstep/certificates/kms/uri github.com/aws/aws-sdk-go/internal/ini -testing github.com/aws/aws-sdk-go/aws/endpoints +testing +github.com/smallstep/certificates/kms/uri github.com/miekg/pkcs11 -google.golang.org/protobuf/encoding/protojson -google.golang.org/protobuf/internal/encoding/tag -github.com/cpuguy83/go-md2man/v2/md2man github.com/aws/aws-sdk-go/aws/awsutil -google.golang.org/protobuf/internal/impl +github.com/cpuguy83/go-md2man/v2/md2man github.com/thales-e-security/pool github.com/urfave/cli -go.step.sm/cli-utils/errs +google.golang.org/protobuf/encoding/protojson +google.golang.org/protobuf/internal/encoding/tag +google.golang.org/protobuf/internal/impl github.com/aws/aws-sdk-go/internal/shareddefaults github.com/aws/aws-sdk-go/aws/credentials # github.com/DataDog/zstd @@ -2532,13 +2567,14 @@ 214 | ZSTDLIB_API unsigned long long ZSTD_getDecompressedSize(const void* src, size_t srcSize); | ^~~~~~~~~~~~~~~~~~~~~~~~ github.com/aws/aws-sdk-go/aws/credentials/processcreds +go.step.sm/cli-utils/errs +vendor/golang.org/x/net/http/httpproxy net/textproto crypto/x509 google.golang.org/grpc/internal google.golang.org/grpc/internal/syscall -vendor/golang.org/x/net/http/httpproxy -github.com/google/uuid google.golang.org/grpc/internal/resolver/dns/internal +github.com/google/uuid github.com/chzyer/readline google.golang.org/grpc/metadata google.golang.org/grpc/codes @@ -2551,15 +2587,15 @@ google.golang.org/grpc/tap google.golang.org/grpc/encoding github.com/manifoldco/promptui -github.com/go-jose/go-jose/v3 -golang.org/x/crypto/ssh -github.com/Masterminds/sprig -github.com/smallstep/certificates/kms/apiv1 +go.step.sm/cli-utils/ui github.com/micromdm/scep/cryptoutil/x509util -github.com/smallstep/scep/x509util +github.com/smallstep/certificates/kms/apiv1 github.com/smallstep/pkcs7/internal/legacy/x509 +github.com/Masterminds/sprig crypto/tls -go.step.sm/cli-utils/ui +github.com/smallstep/scep/x509util +github.com/go-jose/go-jose/v3 +golang.org/x/crypto/ssh go.mozilla.org/pkcs7 golang.org/x/crypto/ocsp go.step.sm/cli-utils/step @@ -2570,33 +2606,32 @@ github.com/go-jose/go-jose/v3/jwt google.golang.org/protobuf/internal/filetype google.golang.org/protobuf/runtime/protoimpl +github.com/smallstep/certificates/kms/yubikey google.golang.org/protobuf/protoadapt -google.golang.org/protobuf/types/known/anypb -google.golang.org/protobuf/types/known/structpb google.golang.org/protobuf/types/descriptorpb -google.golang.org/protobuf/types/known/timestamppb github.com/slackhq/nebula/cert google.golang.org/protobuf/types/known/durationpb +google.golang.org/protobuf/types/known/timestamppb +google.golang.org/protobuf/types/known/anypb +google.golang.org/protobuf/types/known/structpb google.golang.org/grpc/encoding/proto google.golang.org/grpc/internal/pretty +go.step.sm/crypto/keyutil github.com/golang/protobuf/ptypes/timestamp +golang.org/x/crypto/ssh/agent github.com/golang/protobuf/ptypes/duration +go.step.sm/crypto/pemutil google.golang.org/genproto/googleapis/rpc/status google.golang.org/grpc/binarylog/grpc_binarylog_v1 google.golang.org/grpc/internal/status google.golang.org/grpc/status +github.com/smallstep/certificates/kms/softkms +github.com/smallstep/certificates/kms/sshagentkms google.golang.org/grpc/internal/binarylog +github.com/smallstep/certificates/kms google.golang.org/protobuf/internal/editionssupport google.golang.org/protobuf/types/gofeaturespb -go.step.sm/crypto/keyutil -golang.org/x/crypto/ssh/agent -github.com/smallstep/certificates/kms/yubikey google.golang.org/protobuf/reflect/protodesc -go.step.sm/crypto/pemutil -github.com/smallstep/certificates/kms/softkms -github.com/smallstep/certificates/kms/sshagentkms -github.com/smallstep/certificates/kms -github.com/golang/protobuf/proto net/http/httptrace google.golang.org/grpc/internal/credentials github.com/go-sql-driver/mysql @@ -2606,83 +2641,84 @@ google.golang.org/grpc/resolver google.golang.org/grpc/credentials/insecure google.golang.org/grpc/peer +github.com/golang/protobuf/proto google.golang.org/grpc/internal/metadata google.golang.org/grpc/internal/resolver/passthrough google.golang.org/grpc/internal/transport/networktype google.golang.org/grpc/balancer/grpclb/state -google.golang.org/grpc/internal/resolver/dns google.golang.org/grpc/internal/resolver/unix +google.golang.org/grpc/internal/resolver/dns +google.golang.org/grpc/resolver/dns google.golang.org/grpc/channelz google.golang.org/grpc/balancer -google.golang.org/grpc/resolver/dns google.golang.org/grpc/balancer/base google.golang.org/grpc/internal/serviceconfig -github.com/dgraph-io/badger/pb -google.golang.org/grpc/internal/resolver google.golang.org/grpc/balancer/roundrobin google.golang.org/grpc/internal/balancer/gracefulswitch +google.golang.org/grpc/internal/resolver github.com/smallstep/nosql/mysql +github.com/dgraph-io/badger/pb github.com/ThalesIgnite/crypto11 +github.com/smallstep/certificates/kms/pkcs11 github.com/go-chi/chi github.com/smallstep/certificates/logging golang.org/x/net/trace +golang.org/x/net/http2 net/http/httputil expvar -golang.org/x/net/http2 -github.com/newrelic/go-agent/internal +go.step.sm/crypto/jose github.com/smallstep/certificates/cas/apiv1 go.step.sm/cli-utils/usage -github.com/newrelic/go-agent/internal/utilization -go.step.sm/crypto/jose +github.com/newrelic/go-agent/internal github.com/smallstep/certificates/server +github.com/newrelic/go-agent/internal/utilization github.com/aws/aws-sdk-go/aws -github.com/smallstep/certificates/kms/pkcs11 -github.com/smallstep/certificates/api/log go.step.sm/crypto/internal/templates go.step.sm/cli-utils/token -github.com/smallstep/certificates/api/render -github.com/dgraph-io/badger/y go.step.sm/cli-utils/command +go.step.sm/cli-utils/fileutil go.step.sm/crypto/x509util -github.com/smallstep/certificates/errs go.step.sm/crypto/sshutil -go.step.sm/cli-utils/fileutil +github.com/smallstep/certificates/api/log +github.com/smallstep/certificates/api/render go.step.sm/cli-utils/token/provision -github.com/aws/aws-sdk-go/aws/auth/bearer +github.com/smallstep/certificates/errs +github.com/smallstep/certificates/templates github.com/aws/aws-sdk-go/aws/request +github.com/aws/aws-sdk-go/aws/auth/bearer +github.com/dgraph-io/badger/y github.com/smallstep/certificates/api/read -github.com/smallstep/certificates/templates -github.com/dgraph-io/badger/skl -github.com/dgraph-io/badger/table github.com/aws/aws-sdk-go/aws/client github.com/aws/aws-sdk-go/aws/corehandlers github.com/aws/aws-sdk-go/private/protocol github.com/aws/aws-sdk-go/aws/csm +github.com/dgraph-io/badger/skl +github.com/dgraph-io/badger/table github.com/smallstep/certificates/policy -github.com/aws/aws-sdk-go/private/protocol/rest github.com/smallstep/certificates/cas/softcas +go.step.sm/crypto/tlsutil +github.com/aws/aws-sdk-go/aws/ec2metadata +github.com/aws/aws-sdk-go/aws/credentials/ec2rolecreds +github.com/smallstep/certificates/cas +github.com/aws/aws-sdk-go/private/protocol/rest github.com/aws/aws-sdk-go/private/protocol/json/jsonutil github.com/aws/aws-sdk-go/private/protocol/query/queryutil -github.com/aws/aws-sdk-go/aws/ec2metadata github.com/aws/aws-sdk-go/private/protocol/xml/xmlutil -go.step.sm/crypto/tlsutil github.com/dgraph-io/badger -github.com/smallstep/certificates/cas -github.com/aws/aws-sdk-go/aws/credentials/endpointcreds +github.com/newrelic/go-agent github.com/aws/aws-sdk-go/private/protocol/query -github.com/aws/aws-sdk-go/aws/signer/v4 +github.com/aws/aws-sdk-go/aws/credentials/endpointcreds github.com/aws/aws-sdk-go/private/protocol/jsonrpc -github.com/aws/aws-sdk-go/aws/credentials/ec2rolecreds -github.com/newrelic/go-agent -github.com/aws/aws-sdk-go/private/protocol/restjson +github.com/aws/aws-sdk-go/aws/signer/v4 github.com/aws/aws-sdk-go/aws/defaults +github.com/aws/aws-sdk-go/private/protocol/restjson github.com/aws/aws-sdk-go/service/sts github.com/aws/aws-sdk-go/service/kms github.com/aws/aws-sdk-go/service/sso github.com/aws/aws-sdk-go/service/ssooidc +google.golang.org/grpc/internal/transport github.com/aws/aws-sdk-go/service/sso/ssoiface github.com/aws/aws-sdk-go/service/sts/stsiface -google.golang.org/grpc/internal/transport github.com/aws/aws-sdk-go/aws/credentials/ssocreds github.com/aws/aws-sdk-go/aws/credentials/stscreds github.com/aws/aws-sdk-go/aws/session @@ -2702,13 +2738,13 @@ github.com/smallstep/certificates/scep github.com/smallstep/certificates/authority/config github.com/smallstep/certificates/authority -github.com/smallstep/certificates/acme github.com/smallstep/certificates/api +github.com/smallstep/certificates/acme github.com/smallstep/certificates/ca/identity github.com/smallstep/certificates/scep/api github.com/smallstep/certificates/acme/api -github.com/smallstep/certificates/authority/admin/api github.com/smallstep/certificates/acme/db/nosql +github.com/smallstep/certificates/authority/admin/api github.com/smallstep/certificates/ca github.com/smallstep/certificates/cas/stepcas github.com/smallstep/certificates/pki @@ -2807,51 +2843,51 @@ --- PASS: TestLinker_LinkOrdersByAccountID (0.00s) --- PASS: TestLinker_LinkOrdersByAccountID/ok (0.00s) === RUN TestOrder_UpdateStatus -=== RUN TestOrder_UpdateStatus/ok/ready-expired === RUN TestOrder_UpdateStatus/ok/pending-expired === RUN TestOrder_UpdateStatus/ok/invalid === RUN TestOrder_UpdateStatus/ok/still-pending -=== RUN TestOrder_UpdateStatus/ok/valid === RUN TestOrder_UpdateStatus/ok/already-invalid === RUN TestOrder_UpdateStatus/ok/already-valid === RUN TestOrder_UpdateStatus/fail/error-unexpected-status === RUN TestOrder_UpdateStatus/fail/ready-expired-db.UpdateOrder-error +=== RUN TestOrder_UpdateStatus/ok/valid +=== RUN TestOrder_UpdateStatus/ok/ready-expired --- PASS: TestOrder_UpdateStatus (0.00s) - --- PASS: TestOrder_UpdateStatus/ok/ready-expired (0.00s) --- PASS: TestOrder_UpdateStatus/ok/pending-expired (0.00s) --- PASS: TestOrder_UpdateStatus/ok/invalid (0.00s) --- PASS: TestOrder_UpdateStatus/ok/still-pending (0.00s) - --- PASS: TestOrder_UpdateStatus/ok/valid (0.00s) --- PASS: TestOrder_UpdateStatus/ok/already-invalid (0.00s) --- PASS: TestOrder_UpdateStatus/ok/already-valid (0.00s) --- PASS: TestOrder_UpdateStatus/fail/error-unexpected-status (0.00s) --- PASS: TestOrder_UpdateStatus/fail/ready-expired-db.UpdateOrder-error (0.00s) + --- PASS: TestOrder_UpdateStatus/ok/valid (0.00s) + --- PASS: TestOrder_UpdateStatus/ok/ready-expired (0.00s) === RUN TestOrder_Finalize -=== RUN TestOrder_Finalize/fail/error-unexpected-status -=== RUN TestOrder_Finalize/fail/error-template-options -=== RUN TestOrder_Finalize/ok/new-cert-ip +=== RUN TestOrder_Finalize/fail/error-db.CreateCertificate === RUN TestOrder_Finalize/ok/new-cert-dns-and-ip === RUN TestOrder_Finalize/fail/pending +=== RUN TestOrder_Finalize/fail/error-unexpected-status === RUN TestOrder_Finalize/fail/error-provisioner-auth -=== RUN TestOrder_Finalize/fail/error-ca-sign -=== RUN TestOrder_Finalize/fail/error-db.CreateCertificate === RUN TestOrder_Finalize/fail/error-db.UpdateOrder === RUN TestOrder_Finalize/ok/new-cert-dns +=== RUN TestOrder_Finalize/ok/new-cert-ip === RUN TestOrder_Finalize/fail/invalid === RUN TestOrder_Finalize/ok/already-valid +=== RUN TestOrder_Finalize/fail/error-template-options +=== RUN TestOrder_Finalize/fail/error-ca-sign --- PASS: TestOrder_Finalize (0.00s) - --- PASS: TestOrder_Finalize/fail/error-unexpected-status (0.00s) - --- PASS: TestOrder_Finalize/fail/error-template-options (0.00s) - --- PASS: TestOrder_Finalize/ok/new-cert-ip (0.00s) + --- PASS: TestOrder_Finalize/fail/error-db.CreateCertificate (0.00s) --- PASS: TestOrder_Finalize/ok/new-cert-dns-and-ip (0.00s) --- PASS: TestOrder_Finalize/fail/pending (0.00s) + --- PASS: TestOrder_Finalize/fail/error-unexpected-status (0.00s) --- PASS: TestOrder_Finalize/fail/error-provisioner-auth (0.00s) - --- PASS: TestOrder_Finalize/fail/error-ca-sign (0.00s) - --- PASS: TestOrder_Finalize/fail/error-db.CreateCertificate (0.00s) --- PASS: TestOrder_Finalize/fail/error-db.UpdateOrder (0.00s) --- PASS: TestOrder_Finalize/ok/new-cert-dns (0.00s) + --- PASS: TestOrder_Finalize/ok/new-cert-ip (0.00s) --- PASS: TestOrder_Finalize/fail/invalid (0.00s) --- PASS: TestOrder_Finalize/ok/already-valid (0.00s) + --- PASS: TestOrder_Finalize/fail/error-template-options (0.00s) + --- PASS: TestOrder_Finalize/fail/error-ca-sign (0.00s) === RUN Test_uniqueSortedIPs === RUN Test_uniqueSortedIPs/ok/empty === RUN Test_uniqueSortedIPs/ok/single-ipv4 @@ -2951,17 +2987,17 @@ --- PASS: TestOrder_sans/ok/mixed (0.00s) --- PASS: TestOrder_sans/fail/unsupported-identifier-type (0.00s) PASS -ok github.com/smallstep/certificates/acme 0.041s +ok github.com/smallstep/certificates/acme 0.027s === RUN TestNewAccountRequest_Validate -=== RUN TestNewAccountRequest_Validate/fail/incompatible-input === RUN TestNewAccountRequest_Validate/fail/bad-contact === RUN TestNewAccountRequest_Validate/ok === RUN TestNewAccountRequest_Validate/ok/onlyReturnExisting +=== RUN TestNewAccountRequest_Validate/fail/incompatible-input --- PASS: TestNewAccountRequest_Validate (0.00s) - --- PASS: TestNewAccountRequest_Validate/fail/incompatible-input (0.00s) --- PASS: TestNewAccountRequest_Validate/fail/bad-contact (0.00s) --- PASS: TestNewAccountRequest_Validate/ok (0.00s) --- PASS: TestNewAccountRequest_Validate/ok/onlyReturnExisting (0.00s) + --- PASS: TestNewAccountRequest_Validate/fail/incompatible-input (0.00s) === RUN TestUpdateAccountRequest_Validate === RUN TestUpdateAccountRequest_Validate/fail/incompatible-input === RUN TestUpdateAccountRequest_Validate/fail/bad-contact @@ -2977,125 +3013,125 @@ --- PASS: TestUpdateAccountRequest_Validate/ok/status (0.00s) --- PASS: TestUpdateAccountRequest_Validate/ok/accept-empty (0.00s) === RUN TestHandler_GetOrdersByAccountID -=== RUN TestHandler_GetOrdersByAccountID/fail/account-id-mismatch -2025/07/08 23:51:36 The client lacks sufficient authorization -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} === RUN TestHandler_GetOrdersByAccountID/fail/db.GetOrdersByAccountID-error -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_GetOrdersByAccountID/ok === RUN TestHandler_GetOrdersByAccountID/fail/no-account -2025/07/08 23:51:36 Account does not exist -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +2026/08/12 08:17:35 Account does not exist +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} === RUN TestHandler_GetOrdersByAccountID/fail/nil-account -2025/07/08 23:51:36 Account does not exist -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +2026/08/12 08:17:35 Account does not exist +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +=== RUN TestHandler_GetOrdersByAccountID/fail/account-id-mismatch +2026/08/12 08:17:35 The client lacks sufficient authorization +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} --- PASS: TestHandler_GetOrdersByAccountID (0.00s) - --- PASS: TestHandler_GetOrdersByAccountID/fail/account-id-mismatch (0.00s) --- PASS: TestHandler_GetOrdersByAccountID/fail/db.GetOrdersByAccountID-error (0.00s) --- PASS: TestHandler_GetOrdersByAccountID/ok (0.00s) --- PASS: TestHandler_GetOrdersByAccountID/fail/no-account (0.00s) --- PASS: TestHandler_GetOrdersByAccountID/fail/nil-account (0.00s) + --- PASS: TestHandler_GetOrdersByAccountID/fail/account-id-mismatch (0.00s) === RUN TestHandler_NewAccount +=== RUN TestHandler_NewAccount/fail/no-payload +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_NewAccount/fail/no-jwk +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_NewAccount/ok/new-account-no-eab-required +2026/08/12 08:17:35 {"contact":["foo","bar"],"status":"valid","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} +=== RUN TestHandler_NewAccount/fail/db.CreateAccount-error +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_NewAccount/fail/db.UpdateExternalAccountKey-error -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_NewAccount/fail/no-existing-account -2025/07/08 23:51:36 Account does not exist -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_NewAccount/fail/nil-payload +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_NewAccount/fail/nil-jwk -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_NewAccount/ok/new-account -2025/07/08 23:51:36 {"contact":["foo","bar"],"status":"valid","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_NewAccount/fail/new-account-no-eab-provided +2026/08/12 08:17:35 The request must include a value for the "externalAccountBinding" field +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:externalAccountRequired","detail":"The request must include a value for the \"externalAccountBinding\" field"} +=== RUN TestHandler_NewAccount/fail/acmeProvisionerFromContext +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_NewAccount/ok/return-existing -2025/07/08 23:51:36 {"contact":["foo","bar"],"status":"valid","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} -=== RUN TestHandler_NewAccount/ok/new-account-no-eab-required -2025/07/08 23:51:36 {"contact":["foo","bar"],"status":"valid","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} +2026/08/12 08:17:35 {"contact":["foo","bar"],"status":"valid","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} === RUN TestHandler_NewAccount/ok/new-account-with-eab -2025/07/08 23:51:36 {"contact":["foo","bar"],"status":"valid","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders","externalAccountBinding":{"protected":"eyJhbGciOiJIUzI1NiIsImtpZCI6ImVha0lEIiwidXJsIjoiaHR0cHM6Ly90ZXN0LmNhLnNtYWxsc3RlcC5jb20vYWNtZS90ZXN0QGFjbWUtJTNDdGVzdCUzRXByb3Zpc2lvbmVyLmNvbS9hY2NvdW50L25ldy1hY2NvdW50In0","payload":"eyJ1c2UiOiJzaWciLCJrdHkiOiJFQyIsImtpZCI6InpuTUtYbThqdDZQWE9DLUVxUVFPOTZYNHBQS1BDMklYRE1VSTNzdTd1MjgiLCJjcnYiOiJQLTI1NiIsImFsZyI6IkVTMjU2IiwieCI6Im5YVEhsMl9xdDk2TXZuWmNDbEJGSWxZNURWMVl4YnFpY0NDOFcyblYzcWMiLCJ5Ijoia29sT0kxNlhOZmx5UjljcFlpUWNlRy1XNmx6a3hjUU1aLXVPUkNFbmpqOCJ9","signature":"UTN7bdX8DbLbxC4R7GOCyXOjaKAWqj8dPWOBw4bqdDg"}} -=== RUN TestHandler_NewAccount/fail/nil-payload -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 {"contact":["foo","bar"],"status":"valid","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders","externalAccountBinding":{"protected":"eyJhbGciOiJIUzI1NiIsImtpZCI6ImVha0lEIiwidXJsIjoiaHR0cHM6Ly90ZXN0LmNhLnNtYWxsc3RlcC5jb20vYWNtZS90ZXN0QGFjbWUtJTNDdGVzdCUzRXByb3Zpc2lvbmVyLmNvbS9hY2NvdW50L25ldy1hY2NvdW50In0","payload":"eyJ1c2UiOiJzaWciLCJrdHkiOiJFQyIsImtpZCI6Ikd4TDJxTElDbGJQb0hrY0JuRkVFRWVueDZsb3JsX1FPOHUwNnFmZUVUVnciLCJjcnYiOiJQLTI1NiIsImFsZyI6IkVTMjU2IiwieCI6ImM4V2xVaWJ3dTM5VmVTSmZ0Z0JSWWtPSUNCLVpIbkRKeVVOdXVnT0ZYQ3MiLCJ5IjoiUk9NOGVvLXJ4S0hEWmZuOVZJYWVSNnA4bnNoZGp3R3g4M1JaWjY0eEkyUSJ9","signature":"s1UDln4hUpoJYCiud8MrYmHb1akAKwfPOvuaVlPibZQ"}} === RUN TestHandler_NewAccount/fail/unmarshal-payload-error -2025/07/08 23:51:36 The request message was malformed -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_NewAccount/fail/new-account-no-eab-provided -2025/07/08 23:51:36 The request must include a value for the "externalAccountBinding" field -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:externalAccountRequired","detail":"The request must include a value for the \"externalAccountBinding\" field"} -=== RUN TestHandler_NewAccount/fail/no-payload -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestHandler_NewAccount/fail/malformed-payload-error -2025/07/08 23:51:36 The request message was malformed -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_NewAccount/fail/db.CreateAccount-error -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_NewAccount/fail/no-jwk -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_NewAccount/fail/acmeProvisionerFromContext -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} ---- PASS: TestHandler_NewAccount (0.01s) +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_NewAccount/fail/no-existing-account +2026/08/12 08:17:35 Account does not exist +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +=== RUN TestHandler_NewAccount/ok/new-account +2026/08/12 08:17:35 {"contact":["foo","bar"],"status":"valid","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} +--- PASS: TestHandler_NewAccount (0.00s) + --- PASS: TestHandler_NewAccount/fail/no-payload (0.00s) + --- PASS: TestHandler_NewAccount/fail/no-jwk (0.00s) + --- PASS: TestHandler_NewAccount/ok/new-account-no-eab-required (0.00s) + --- PASS: TestHandler_NewAccount/fail/db.CreateAccount-error (0.00s) --- PASS: TestHandler_NewAccount/fail/db.UpdateExternalAccountKey-error (0.00s) - --- PASS: TestHandler_NewAccount/fail/no-existing-account (0.00s) + --- PASS: TestHandler_NewAccount/fail/nil-payload (0.00s) --- PASS: TestHandler_NewAccount/fail/nil-jwk (0.00s) - --- PASS: TestHandler_NewAccount/ok/new-account (0.00s) + --- PASS: TestHandler_NewAccount/fail/new-account-no-eab-provided (0.00s) + --- PASS: TestHandler_NewAccount/fail/acmeProvisionerFromContext (0.00s) --- PASS: TestHandler_NewAccount/ok/return-existing (0.00s) - --- PASS: TestHandler_NewAccount/ok/new-account-no-eab-required (0.00s) --- PASS: TestHandler_NewAccount/ok/new-account-with-eab (0.00s) - --- PASS: TestHandler_NewAccount/fail/nil-payload (0.00s) --- PASS: TestHandler_NewAccount/fail/unmarshal-payload-error (0.00s) - --- PASS: TestHandler_NewAccount/fail/new-account-no-eab-provided (0.00s) - --- PASS: TestHandler_NewAccount/fail/no-payload (0.00s) --- PASS: TestHandler_NewAccount/fail/malformed-payload-error (0.00s) - --- PASS: TestHandler_NewAccount/fail/db.CreateAccount-error (0.00s) - --- PASS: TestHandler_NewAccount/fail/no-jwk (0.00s) - --- PASS: TestHandler_NewAccount/fail/acmeProvisionerFromContext (0.00s) + --- PASS: TestHandler_NewAccount/fail/no-existing-account (0.00s) + --- PASS: TestHandler_NewAccount/ok/new-account (0.00s) === RUN TestHandler_GetOrUpdateAccount -=== RUN TestHandler_GetOrUpdateAccount/fail/nil-payload -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_GetOrUpdateAccount/fail/nil-account +2026/08/12 08:17:35 Account does not exist +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} === RUN TestHandler_GetOrUpdateAccount/fail/unmarshal-payload-error -2025/07/08 23:51:36 The request message was malformed -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestHandler_GetOrUpdateAccount/ok/deactivate -2025/07/08 23:51:36 {"status":"deactivated","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} -=== RUN TestHandler_GetOrUpdateAccount/fail/no-account -2025/07/08 23:51:36 Account does not exist -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} -=== RUN TestHandler_GetOrUpdateAccount/fail/nil-account -2025/07/08 23:51:36 Account does not exist -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} -=== RUN TestHandler_GetOrUpdateAccount/fail/malformed-payload-error -2025/07/08 23:51:36 The request message was malformed -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_GetOrUpdateAccount/fail/db.UpdateAccount-error -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 {"status":"deactivated","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} === RUN TestHandler_GetOrUpdateAccount/ok/update-empty -2025/07/08 23:51:36 {"status":"deactivated","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} +2026/08/12 08:17:35 {"status":"deactivated","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} === RUN TestHandler_GetOrUpdateAccount/ok/update-contacts -2025/07/08 23:51:36 {"contact":["foo","bar"],"status":"deactivated","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} +2026/08/12 08:17:35 {"contact":["foo","bar"],"status":"deactivated","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} === RUN TestHandler_GetOrUpdateAccount/ok/post-as-get -2025/07/08 23:51:36 {"contact":["foo","bar"],"status":"deactivated","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} +2026/08/12 08:17:35 {"contact":["foo","bar"],"status":"deactivated","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} +=== RUN TestHandler_GetOrUpdateAccount/fail/no-account +2026/08/12 08:17:35 Account does not exist +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} === RUN TestHandler_GetOrUpdateAccount/fail/no-payload -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_GetOrUpdateAccount/fail/nil-payload +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_GetOrUpdateAccount/fail/malformed-payload-error +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_GetOrUpdateAccount/fail/db.UpdateAccount-error +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} --- PASS: TestHandler_GetOrUpdateAccount (0.00s) - --- PASS: TestHandler_GetOrUpdateAccount/fail/nil-payload (0.00s) + --- PASS: TestHandler_GetOrUpdateAccount/fail/nil-account (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/fail/unmarshal-payload-error (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/ok/deactivate (0.00s) - --- PASS: TestHandler_GetOrUpdateAccount/fail/no-account (0.00s) - --- PASS: TestHandler_GetOrUpdateAccount/fail/nil-account (0.00s) - --- PASS: TestHandler_GetOrUpdateAccount/fail/malformed-payload-error (0.00s) - --- PASS: TestHandler_GetOrUpdateAccount/fail/db.UpdateAccount-error (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/ok/update-empty (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/ok/update-contacts (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/ok/post-as-get (0.00s) + --- PASS: TestHandler_GetOrUpdateAccount/fail/no-account (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/fail/no-payload (0.00s) + --- PASS: TestHandler_GetOrUpdateAccount/fail/nil-payload (0.00s) + --- PASS: TestHandler_GetOrUpdateAccount/fail/malformed-payload-error (0.00s) + --- PASS: TestHandler_GetOrUpdateAccount/fail/db.UpdateAccount-error (0.00s) === RUN Test_keysAreEqual === RUN Test_keysAreEqual/ok/nil === RUN Test_keysAreEqual/ok/equal @@ -3108,62 +3144,62 @@ --- PASS: Test_keysAreEqual/ok/wrong-key-type (0.00s) === RUN TestHandler_validateExternalAccountBinding === RUN TestHandler_validateExternalAccountBinding/ok/no-eab-required-but-provided -=== RUN TestHandler_validateExternalAccountBinding/ok/eab -=== RUN TestHandler_validateExternalAccountBinding/fail/retrieve-eab-key-db-failure -=== RUN TestHandler_validateExternalAccountBinding/fail/eab-verify -=== RUN TestHandler_validateExternalAccountBinding/fail/nil-jwk +=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-not-found +=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-error === RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-nil -=== RUN TestHandler_validateExternalAccountBinding/fail/no-jwk +=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-no-keybytes +=== RUN TestHandler_validateExternalAccountBinding/fail/eab-verify +=== RUN TestHandler_validateExternalAccountBinding/fail/eab-non-matching-keys === RUN TestHandler_validateExternalAccountBinding/fail/acmeProvisionerFromContext +=== RUN TestHandler_validateExternalAccountBinding/fail/parse-eab-jose === RUN TestHandler_validateExternalAccountBinding/fail/validate-eab-jws-no-signatures -=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-not-found +=== RUN TestHandler_validateExternalAccountBinding/fail/nil-jwk +=== RUN TestHandler_validateExternalAccountBinding/fail/retrieve-eab-key-db-failure === RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-wrong-provisioner -=== RUN TestHandler_validateExternalAccountBinding/fail/eab-non-matching-keys -=== RUN TestHandler_validateExternalAccountBinding/fail/parse-eab-jose -=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-error -=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-no-keybytes === RUN TestHandler_validateExternalAccountBinding/fail/eab-already-bound +=== RUN TestHandler_validateExternalAccountBinding/fail/no-jwk +=== RUN TestHandler_validateExternalAccountBinding/ok/eab --- PASS: TestHandler_validateExternalAccountBinding (0.01s) --- PASS: TestHandler_validateExternalAccountBinding/ok/no-eab-required-but-provided (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/ok/eab (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/retrieve-eab-key-db-failure (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/eab-verify (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/nil-jwk (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-not-found (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-error (0.00s) --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-nil (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/no-jwk (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-no-keybytes (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/eab-verify (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/eab-non-matching-keys (0.00s) --- PASS: TestHandler_validateExternalAccountBinding/fail/acmeProvisionerFromContext (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/parse-eab-jose (0.00s) --- PASS: TestHandler_validateExternalAccountBinding/fail/validate-eab-jws-no-signatures (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-not-found (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/nil-jwk (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/retrieve-eab-key-db-failure (0.00s) --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-wrong-provisioner (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/eab-non-matching-keys (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/parse-eab-jose (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-error (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-no-keybytes (0.00s) --- PASS: TestHandler_validateExternalAccountBinding/fail/eab-already-bound (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/no-jwk (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/ok/eab (0.00s) === RUN Test_validateEABJWS +=== RUN Test_validateEABJWS/fail/outer-jws-no-url +=== RUN Test_validateEABJWS/fail/nil-jws === RUN Test_validateEABJWS/fail/invalid-number-of-signatures -=== RUN Test_validateEABJWS/fail/invalid-algorithm -=== RUN Test_validateEABJWS/fail/nonce-not-empty +=== RUN Test_validateEABJWS/fail/kid-not-set === RUN Test_validateEABJWS/fail/url-not-set +=== RUN Test_validateEABJWS/fail/outer-jws-with-different-url === RUN Test_validateEABJWS/ok -=== RUN Test_validateEABJWS/fail/kid-not-set +=== RUN Test_validateEABJWS/fail/invalid-algorithm +=== RUN Test_validateEABJWS/fail/nonce-not-empty === RUN Test_validateEABJWS/fail/no-outer-jws === RUN Test_validateEABJWS/fail/outer-jws-multiple-signatures -=== RUN Test_validateEABJWS/fail/outer-jws-no-url -=== RUN Test_validateEABJWS/fail/outer-jws-with-different-url -=== RUN Test_validateEABJWS/fail/nil-jws --- PASS: Test_validateEABJWS (0.00s) + --- PASS: Test_validateEABJWS/fail/outer-jws-no-url (0.00s) + --- PASS: Test_validateEABJWS/fail/nil-jws (0.00s) --- PASS: Test_validateEABJWS/fail/invalid-number-of-signatures (0.00s) - --- PASS: Test_validateEABJWS/fail/invalid-algorithm (0.00s) - --- PASS: Test_validateEABJWS/fail/nonce-not-empty (0.00s) + --- PASS: Test_validateEABJWS/fail/kid-not-set (0.00s) --- PASS: Test_validateEABJWS/fail/url-not-set (0.00s) + --- PASS: Test_validateEABJWS/fail/outer-jws-with-different-url (0.00s) --- PASS: Test_validateEABJWS/ok (0.00s) - --- PASS: Test_validateEABJWS/fail/kid-not-set (0.00s) + --- PASS: Test_validateEABJWS/fail/invalid-algorithm (0.00s) + --- PASS: Test_validateEABJWS/fail/nonce-not-empty (0.00s) --- PASS: Test_validateEABJWS/fail/no-outer-jws (0.00s) --- PASS: Test_validateEABJWS/fail/outer-jws-multiple-signatures (0.00s) - --- PASS: Test_validateEABJWS/fail/outer-jws-no-url (0.00s) - --- PASS: Test_validateEABJWS/fail/outer-jws-with-different-url (0.00s) - --- PASS: Test_validateEABJWS/fail/nil-jws (0.00s) === RUN TestHandler_GetNonce === RUN TestHandler_GetNonce/GET === RUN TestHandler_GetNonce/HEAD @@ -3171,39 +3207,39 @@ --- PASS: TestHandler_GetNonce/GET (0.00s) --- PASS: TestHandler_GetNonce/HEAD (0.00s) === RUN TestHandler_GetDirectory -=== RUN TestHandler_GetDirectory/ok -2025/07/08 23:51:36 {"newNonce":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-nonce","newAccount":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-account","newOrder":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-order","revokeCert":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/revoke-cert","keyChange":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/key-change","meta":{}} -=== RUN TestHandler_GetDirectory/ok/eab-required -2025/07/08 23:51:36 {"newNonce":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-nonce","newAccount":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-account","newOrder":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-order","revokeCert":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/revoke-cert","keyChange":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/key-change","meta":{"externalAccountRequired":true}} === RUN TestHandler_GetDirectory/fail/no-provisioner -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_GetDirectory/fail/different-provisioner -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_GetDirectory/ok +2026/08/12 08:17:35 {"newNonce":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-nonce","newAccount":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-account","newOrder":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-order","revokeCert":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/revoke-cert","keyChange":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/key-change","meta":{}} +=== RUN TestHandler_GetDirectory/ok/eab-required +2026/08/12 08:17:35 {"newNonce":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-nonce","newAccount":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-account","newOrder":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-order","revokeCert":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/revoke-cert","keyChange":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/key-change","meta":{"externalAccountRequired":true}} --- PASS: TestHandler_GetDirectory (0.00s) - --- PASS: TestHandler_GetDirectory/ok (0.00s) - --- PASS: TestHandler_GetDirectory/ok/eab-required (0.00s) --- PASS: TestHandler_GetDirectory/fail/no-provisioner (0.00s) --- PASS: TestHandler_GetDirectory/fail/different-provisioner (0.00s) + --- PASS: TestHandler_GetDirectory/ok (0.00s) + --- PASS: TestHandler_GetDirectory/ok/eab-required (0.00s) === RUN TestHandler_GetAuthorization === RUN TestHandler_GetAuthorization/fail/no-account -2025/07/08 23:51:36 Account does not exist -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +2026/08/12 08:17:35 Account does not exist +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} === RUN TestHandler_GetAuthorization/fail/nil-account -2025/07/08 23:51:36 Account does not exist -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +2026/08/12 08:17:35 Account does not exist +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} === RUN TestHandler_GetAuthorization/fail/db.GetAuthorization-error -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_GetAuthorization/fail/account-id-mismatch -2025/07/08 23:51:36 The client lacks sufficient authorization -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} +2026/08/12 08:17:35 The client lacks sufficient authorization +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} === RUN TestHandler_GetAuthorization/fail/db.UpdateAuthorization-error -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_GetAuthorization/ok -2025/07/08 23:51:36 {"identifier":{"type":"dns","value":"example.com"},"status":"pending","challenges":[{"type":"http-01","status":"pending","token":"tok2","url":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/challenge/authzID/chHTTP01ID"},{"type":"dns-01","status":"pending","token":"tok2","url":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/challenge/authzID/chDNSID"}],"wildcard":false,"expires":"2025-07-09T17:51:36.633550346Z"} +2026/08/12 08:17:35 {"identifier":{"type":"dns","value":"example.com"},"status":"pending","challenges":[{"type":"http-01","status":"pending","token":"tok2","url":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/challenge/authzID/chHTTP01ID"},{"type":"dns-01","status":"pending","token":"tok2","url":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/challenge/authzID/chDNSID"}],"wildcard":false,"expires":"2026-08-12T00:17:35.754613534Z"} --- PASS: TestHandler_GetAuthorization (0.00s) --- PASS: TestHandler_GetAuthorization/fail/no-account (0.00s) --- PASS: TestHandler_GetAuthorization/fail/nil-account (0.00s) @@ -3212,70 +3248,70 @@ --- PASS: TestHandler_GetAuthorization/fail/db.UpdateAuthorization-error (0.00s) --- PASS: TestHandler_GetAuthorization/ok (0.00s) === RUN TestHandler_GetCertificate +=== RUN TestHandler_GetCertificate/fail/no-account +2026/08/12 08:17:35 Account does not exist +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} === RUN TestHandler_GetCertificate/fail/nil-account -2025/07/08 23:51:36 Account does not exist -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +2026/08/12 08:17:35 Account does not exist +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} === RUN TestHandler_GetCertificate/fail/db.GetCertificate-error -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_GetCertificate/fail/account-id-mismatch -2025/07/08 23:51:36 The client lacks sufficient authorization -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} +2026/08/12 08:17:35 The client lacks sufficient authorization +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} === RUN TestHandler_GetCertificate/ok -=== RUN TestHandler_GetCertificate/fail/no-account -2025/07/08 23:51:36 Account does not exist -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} --- PASS: TestHandler_GetCertificate (0.00s) + --- PASS: TestHandler_GetCertificate/fail/no-account (0.00s) --- PASS: TestHandler_GetCertificate/fail/nil-account (0.00s) --- PASS: TestHandler_GetCertificate/fail/db.GetCertificate-error (0.00s) --- PASS: TestHandler_GetCertificate/fail/account-id-mismatch (0.00s) --- PASS: TestHandler_GetCertificate/ok (0.00s) - --- PASS: TestHandler_GetCertificate/fail/no-account (0.00s) === RUN TestHandler_GetChallenge === RUN TestHandler_GetChallenge/ok -2025/07/08 23:51:36 {"type":"http-01","status":"pending","token":"","url":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/challenge/authzID/chID","error":{"type":"urn:ietf:params:acme:error:connection","detail":"The server could not connect to validation target"}} +2026/08/12 08:17:35 {"type":"http-01","status":"pending","token":"","url":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/challenge/authzID/chID","error":{"type":"urn:ietf:params:acme:error:connection","detail":"The server could not connect to validation target"}} === RUN TestHandler_GetChallenge/fail/nil-account -2025/07/08 23:51:36 Account does not exist -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} -=== RUN TestHandler_GetChallenge/fail/no-payload -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_GetChallenge/fail/nil-payload -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_GetChallenge/fail/no-jwk -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_GetChallenge/fail/no-account -2025/07/08 23:51:36 Account does not exist -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +2026/08/12 08:17:35 Account does not exist +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} === RUN TestHandler_GetChallenge/fail/db.GetChallenge-error -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_GetChallenge/fail/account-id-mismatch -2025/07/08 23:51:36 The client lacks sufficient authorization -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_GetChallenge/fail/nil-jwk -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_GetChallenge/fail/validate-challenge-error -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_GetChallenge/fail/no-account +2026/08/12 08:17:35 Account does not exist +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +=== RUN TestHandler_GetChallenge/fail/no-payload +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_GetChallenge/fail/nil-payload +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_GetChallenge/fail/account-id-mismatch +2026/08/12 08:17:35 The client lacks sufficient authorization +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} +=== RUN TestHandler_GetChallenge/fail/no-jwk +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} --- PASS: TestHandler_GetChallenge (0.00s) --- PASS: TestHandler_GetChallenge/ok (0.00s) --- PASS: TestHandler_GetChallenge/fail/nil-account (0.00s) - --- PASS: TestHandler_GetChallenge/fail/no-payload (0.00s) - --- PASS: TestHandler_GetChallenge/fail/nil-payload (0.00s) - --- PASS: TestHandler_GetChallenge/fail/no-jwk (0.00s) - --- PASS: TestHandler_GetChallenge/fail/no-account (0.00s) --- PASS: TestHandler_GetChallenge/fail/db.GetChallenge-error (0.00s) - --- PASS: TestHandler_GetChallenge/fail/account-id-mismatch (0.00s) --- PASS: TestHandler_GetChallenge/fail/nil-jwk (0.00s) --- PASS: TestHandler_GetChallenge/fail/validate-challenge-error (0.00s) + --- PASS: TestHandler_GetChallenge/fail/no-account (0.00s) + --- PASS: TestHandler_GetChallenge/fail/no-payload (0.00s) + --- PASS: TestHandler_GetChallenge/fail/nil-payload (0.00s) + --- PASS: TestHandler_GetChallenge/fail/account-id-mismatch (0.00s) + --- PASS: TestHandler_GetChallenge/fail/no-jwk (0.00s) === RUN TestHandler_addNonce === RUN TestHandler_addNonce/fail/AddNonce-error -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_addNonce/ok --- PASS: TestHandler_addNonce (0.00s) --- PASS: TestHandler_addNonce/fail/AddNonce-error (0.00s) @@ -3285,143 +3321,144 @@ --- PASS: TestHandler_addDirLink (0.00s) --- PASS: TestHandler_addDirLink/ok (0.00s) === RUN TestHandler_verifyContentType +=== RUN TestHandler_verifyContentType/fail/general-bad-content-type +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_verifyContentType/fail/certificate-bad-content-type +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestHandler_verifyContentType/ok === RUN TestHandler_verifyContentType/ok/certificate/pkix-cert === RUN TestHandler_verifyContentType/ok/certificate/jose+json === RUN TestHandler_verifyContentType/ok/certificate/pkcs7-mime === RUN TestHandler_verifyContentType/fail/provisioner-not-set -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_verifyContentType/fail/general-bad-content-type -2025/07/08 23:51:36 The request message was malformed -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_verifyContentType/fail/certificate-bad-content-type -2025/07/08 23:51:36 The request message was malformed -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} --- PASS: TestHandler_verifyContentType (0.00s) + --- PASS: TestHandler_verifyContentType/fail/general-bad-content-type (0.00s) + --- PASS: TestHandler_verifyContentType/fail/certificate-bad-content-type (0.00s) --- PASS: TestHandler_verifyContentType/ok (0.00s) --- PASS: TestHandler_verifyContentType/ok/certificate/pkix-cert (0.00s) --- PASS: TestHandler_verifyContentType/ok/certificate/jose+json (0.00s) --- PASS: TestHandler_verifyContentType/ok/certificate/pkcs7-mime (0.00s) --- PASS: TestHandler_verifyContentType/fail/provisioner-not-set (0.00s) - --- PASS: TestHandler_verifyContentType/fail/general-bad-content-type (0.00s) - --- PASS: TestHandler_verifyContentType/fail/certificate-bad-content-type (0.00s) === RUN TestHandler_isPostAsGet -=== RUN TestHandler_isPostAsGet/fail/nil-payload -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_isPostAsGet/fail/not-post-as-get -2025/07/08 23:51:36 The request message was malformed -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestHandler_isPostAsGet/ok === RUN TestHandler_isPostAsGet/fail/no-payload -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_isPostAsGet/fail/nil-payload +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} --- PASS: TestHandler_isPostAsGet (0.00s) - --- PASS: TestHandler_isPostAsGet/fail/nil-payload (0.00s) --- PASS: TestHandler_isPostAsGet/fail/not-post-as-get (0.00s) --- PASS: TestHandler_isPostAsGet/ok (0.00s) --- PASS: TestHandler_isPostAsGet/fail/no-payload (0.00s) + --- PASS: TestHandler_isPostAsGet/fail/nil-payload (0.00s) === RUN TestHandler_parseJWS -=== RUN TestHandler_parseJWS/fail/read-body-error -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_parseJWS/fail/parse-jws-error -2025/07/08 23:51:36 The request message was malformed -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestHandler_parseJWS/ok +=== RUN TestHandler_parseJWS/fail/read-body-error +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} --- PASS: TestHandler_parseJWS (0.00s) - --- PASS: TestHandler_parseJWS/fail/read-body-error (0.00s) --- PASS: TestHandler_parseJWS/fail/parse-jws-error (0.00s) --- PASS: TestHandler_parseJWS/ok (0.00s) + --- PASS: TestHandler_parseJWS/fail/read-body-error (0.00s) === RUN TestHandler_verifyAndExtractJWSPayload -=== RUN TestHandler_verifyAndExtractJWSPayload/fail/no-jws -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_verifyAndExtractJWSPayload/fail/nil-jws -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_verifyAndExtractJWSPayload/fail/nil-jwk -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_verifyAndExtractJWSPayload/fail/verify-jws-failure -2025/07/08 23:51:36 The request message was malformed -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_verifyAndExtractJWSPayload/ok/post-as-get -=== RUN TestHandler_verifyAndExtractJWSPayload/fail/no-jwk -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_verifyAndExtractJWSPayload/fail/algorithm-mismatch -2025/07/08 23:51:36 The request message was malformed -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_verifyAndExtractJWSPayload/ok +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestHandler_verifyAndExtractJWSPayload/ok/empty-algorithm-in-jwk +=== RUN TestHandler_verifyAndExtractJWSPayload/ok/post-as-get === RUN TestHandler_verifyAndExtractJWSPayload/ok/empty-json ---- PASS: TestHandler_verifyAndExtractJWSPayload (0.01s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/no-jws (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/nil-jws (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/nil-jwk (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/verify-jws-failure (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/ok/post-as-get (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/no-jwk (0.00s) +=== RUN TestHandler_verifyAndExtractJWSPayload/fail/nil-jws +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_verifyAndExtractJWSPayload/fail/verify-jws-failure +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_verifyAndExtractJWSPayload/ok +=== RUN TestHandler_verifyAndExtractJWSPayload/fail/no-jws +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_verifyAndExtractJWSPayload/fail/no-jwk +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_verifyAndExtractJWSPayload/fail/nil-jwk +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +--- PASS: TestHandler_verifyAndExtractJWSPayload (0.00s) --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/algorithm-mismatch (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/ok (0.00s) --- PASS: TestHandler_verifyAndExtractJWSPayload/ok/empty-algorithm-in-jwk (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/ok/post-as-get (0.00s) --- PASS: TestHandler_verifyAndExtractJWSPayload/ok/empty-json (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/nil-jws (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/verify-jws-failure (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/ok (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/no-jws (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/no-jwk (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/nil-jwk (0.00s) === RUN TestHandler_lookupJWK +=== RUN TestHandler_lookupJWK/fail/no-kid +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_lookupJWK/fail/bad-kid-prefix +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestHandler_lookupJWK/fail/account-not-found -2025/07/08 23:51:36 Account does not exist -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +2026/08/12 08:17:35 Account does not exist +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} === RUN TestHandler_lookupJWK/fail/GetAccount-error -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_lookupJWK/fail/account-not-valid -2025/07/08 23:51:36 The client lacks sufficient authorization -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} +2026/08/12 08:17:35 The client lacks sufficient authorization +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} === RUN TestHandler_lookupJWK/ok === RUN TestHandler_lookupJWK/fail/no-jws -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_lookupJWK/fail/nil-jws -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_lookupJWK/fail/no-kid -2025/07/08 23:51:36 The request message was malformed -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_lookupJWK/fail/bad-kid-prefix -2025/07/08 23:51:36 The request message was malformed -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} --- PASS: TestHandler_lookupJWK (0.00s) + --- PASS: TestHandler_lookupJWK/fail/no-kid (0.00s) + --- PASS: TestHandler_lookupJWK/fail/bad-kid-prefix (0.00s) --- PASS: TestHandler_lookupJWK/fail/account-not-found (0.00s) --- PASS: TestHandler_lookupJWK/fail/GetAccount-error (0.00s) --- PASS: TestHandler_lookupJWK/fail/account-not-valid (0.00s) --- PASS: TestHandler_lookupJWK/ok (0.00s) --- PASS: TestHandler_lookupJWK/fail/no-jws (0.00s) --- PASS: TestHandler_lookupJWK/fail/nil-jws (0.00s) - --- PASS: TestHandler_lookupJWK/fail/no-kid (0.00s) - --- PASS: TestHandler_lookupJWK/fail/bad-kid-prefix (0.00s) === RUN TestHandler_extractJWK +=== RUN TestHandler_extractJWK/fail/nil-jwk +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestHandler_extractJWK/fail/invalid-jwk -2025/07/08 23:51:36 The request message was malformed -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestHandler_extractJWK/fail/GetAccountByKey-error -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_extractJWK/fail/account-not-valid -2025/07/08 23:51:36 The client lacks sufficient authorization -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} +2026/08/12 08:17:35 The client lacks sufficient authorization +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} === RUN TestHandler_extractJWK/ok === RUN TestHandler_extractJWK/ok/no-account === RUN TestHandler_extractJWK/fail/no-jws -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_extractJWK/fail/nil-jws -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_extractJWK/fail/nil-jwk -2025/07/08 23:51:36 The request message was malformed -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} --- PASS: TestHandler_extractJWK (0.00s) + --- PASS: TestHandler_extractJWK/fail/nil-jwk (0.00s) --- PASS: TestHandler_extractJWK/fail/invalid-jwk (0.00s) --- PASS: TestHandler_extractJWK/fail/GetAccountByKey-error (0.00s) --- PASS: TestHandler_extractJWK/fail/account-not-valid (0.00s) @@ -3429,67 +3466,66 @@ --- PASS: TestHandler_extractJWK/ok/no-account (0.00s) --- PASS: TestHandler_extractJWK/fail/no-jws (0.00s) --- PASS: TestHandler_extractJWK/fail/nil-jws (0.00s) - --- PASS: TestHandler_extractJWK/fail/nil-jwk (0.00s) === RUN TestHandler_validateJWS -=== RUN TestHandler_validateJWS/fail/unsuitable-algorithm-mac -2025/07/08 23:51:36 The JWS was signed with an algorithm the server does not support -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:badSignatureAlgorithm","detail":"The JWS was signed with an algorithm the server does not support"} +=== RUN TestHandler_validateJWS/fail/rsa-key-&-alg-mismatch +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_validateJWS/fail/url-mismatch +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_validateJWS/fail/both-jwk-kid +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_validateJWS/ok/jwk/rsa +=== RUN TestHandler_validateJWS/fail/no-signature +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_validateJWS/fail/unprotected-header-not-empty +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_validateJWS/fail/unsuitable-algorithm-none +2026/08/12 08:17:35 The JWS was signed with an algorithm the server does not support +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:badSignatureAlgorithm","detail":"The JWS was signed with an algorithm the server does not support"} === RUN TestHandler_validateJWS/fail/UseNonce-error -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_validateJWS/fail/no-url-header -2025/07/08 23:51:36 The request message was malformed -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_validateJWS/ok/jwk/ecdsa === RUN TestHandler_validateJWS/fail/no-jwk-kid -2025/07/08 23:51:36 The request message was malformed -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_validateJWS/ok/kid === RUN TestHandler_validateJWS/fail/no-jws -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_validateJWS/fail/nil-jws -2025/07/08 23:51:36 The server experienced an internal error -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_validateJWS/fail/more-than-one-signature -2025/07/08 23:51:36 The request message was malformed -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_validateJWS/fail/both-jwk-kid -2025/07/08 23:51:36 The request message was malformed -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_validateJWS/fail/no-signature -2025/07/08 23:51:36 The request message was malformed -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_validateJWS/fail/rsa-key-&-alg-mismatch -2025/07/08 23:51:36 The request message was malformed -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_validateJWS/fail/url-mismatch -2025/07/08 23:51:36 The request message was malformed -2025/07/08 23:51:36 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_validateJWS/ok/jwk/ecdsa -=== RUN TestHandler_validateJWS/ok/jwk/rsa -=== RUN TestHandler_validateJWS/fail/unprotected-header-not-empty -2025/07/08 23:51:37 The request message was malformed -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_validateJWS/ok/kid -=== RUN TestHandler_validateJWS/fail/unsuitable-algorithm-none -2025/07/08 23:51:37 The JWS was signed with an algorithm the server does not support -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:badSignatureAlgorithm","detail":"The JWS was signed with an algorithm the server does not support"} ---- PASS: TestHandler_validateJWS (0.58s) - --- PASS: TestHandler_validateJWS/fail/unsuitable-algorithm-mac (0.00s) +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_validateJWS/fail/unsuitable-algorithm-mac +2026/08/12 08:17:35 The JWS was signed with an algorithm the server does not support +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:badSignatureAlgorithm","detail":"The JWS was signed with an algorithm the server does not support"} +--- PASS: TestHandler_validateJWS (0.15s) + --- PASS: TestHandler_validateJWS/fail/rsa-key-&-alg-mismatch (0.00s) + --- PASS: TestHandler_validateJWS/fail/url-mismatch (0.00s) + --- PASS: TestHandler_validateJWS/fail/both-jwk-kid (0.00s) + --- PASS: TestHandler_validateJWS/ok/jwk/rsa (0.00s) + --- PASS: TestHandler_validateJWS/fail/no-signature (0.00s) + --- PASS: TestHandler_validateJWS/fail/unprotected-header-not-empty (0.00s) + --- PASS: TestHandler_validateJWS/fail/unsuitable-algorithm-none (0.00s) --- PASS: TestHandler_validateJWS/fail/UseNonce-error (0.00s) --- PASS: TestHandler_validateJWS/fail/no-url-header (0.00s) + --- PASS: TestHandler_validateJWS/ok/jwk/ecdsa (0.00s) --- PASS: TestHandler_validateJWS/fail/no-jwk-kid (0.00s) + --- PASS: TestHandler_validateJWS/ok/kid (0.00s) --- PASS: TestHandler_validateJWS/fail/no-jws (0.00s) --- PASS: TestHandler_validateJWS/fail/nil-jws (0.00s) --- PASS: TestHandler_validateJWS/fail/more-than-one-signature (0.00s) - --- PASS: TestHandler_validateJWS/fail/both-jwk-kid (0.00s) - --- PASS: TestHandler_validateJWS/fail/no-signature (0.00s) - --- PASS: TestHandler_validateJWS/fail/rsa-key-&-alg-mismatch (0.00s) - --- PASS: TestHandler_validateJWS/fail/url-mismatch (0.00s) - --- PASS: TestHandler_validateJWS/ok/jwk/ecdsa (0.00s) - --- PASS: TestHandler_validateJWS/ok/jwk/rsa (0.00s) - --- PASS: TestHandler_validateJWS/fail/unprotected-header-not-empty (0.00s) - --- PASS: TestHandler_validateJWS/ok/kid (0.00s) - --- PASS: TestHandler_validateJWS/fail/unsuitable-algorithm-none (0.00s) + --- PASS: TestHandler_validateJWS/fail/unsuitable-algorithm-mac (0.00s) === RUN Test_canExtractJWKFrom === RUN Test_canExtractJWKFrom/no-jws === RUN Test_canExtractJWKFrom/no-signatures @@ -3501,24 +3537,25 @@ --- PASS: Test_canExtractJWKFrom/no-jwk (0.00s) --- PASS: Test_canExtractJWKFrom/ok (0.00s) === RUN TestHandler_extractOrLookupJWK -=== RUN TestHandler_extractOrLookupJWK/ok/lookup === RUN TestHandler_extractOrLookupJWK/ok/extract +=== RUN TestHandler_extractOrLookupJWK/ok/lookup --- PASS: TestHandler_extractOrLookupJWK (0.00s) - --- PASS: TestHandler_extractOrLookupJWK/ok/lookup (0.00s) --- PASS: TestHandler_extractOrLookupJWK/ok/extract (0.00s) + --- PASS: TestHandler_extractOrLookupJWK/ok/lookup (0.00s) === RUN TestHandler_checkPrerequisites === RUN TestHandler_checkPrerequisites/fail/error -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_checkPrerequisites/fail/prerequisites-nok -2025/07/08 23:51:37 The requested operation is not implemented -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:rejectedIdentifier","detail":"The requested operation is not implemented"} +2026/08/12 08:17:35 The requested operation is not implemented +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:rejectedIdentifier","detail":"The requested operation is not implemented"} === RUN TestHandler_checkPrerequisites/ok --- PASS: TestHandler_checkPrerequisites (0.00s) --- PASS: TestHandler_checkPrerequisites/fail/error (0.00s) --- PASS: TestHandler_checkPrerequisites/fail/prerequisites-nok (0.00s) --- PASS: TestHandler_checkPrerequisites/ok (0.00s) === RUN TestNewOrderRequest_Validate +=== RUN TestNewOrderRequest_Validate/ok/ipv6 === RUN TestNewOrderRequest_Validate/ok/mixed-dns-and-ipv4 === RUN TestNewOrderRequest_Validate/ok/mixed-ipv4-and-ipv6 === RUN TestNewOrderRequest_Validate/fail/no-identifiers @@ -3526,8 +3563,8 @@ === RUN TestNewOrderRequest_Validate/fail/bad-ip === RUN TestNewOrderRequest_Validate/ok === RUN TestNewOrderRequest_Validate/ok/ipv4 -=== RUN TestNewOrderRequest_Validate/ok/ipv6 --- PASS: TestNewOrderRequest_Validate (0.00s) + --- PASS: TestNewOrderRequest_Validate/ok/ipv6 (0.00s) --- PASS: TestNewOrderRequest_Validate/ok/mixed-dns-and-ipv4 (0.00s) --- PASS: TestNewOrderRequest_Validate/ok/mixed-ipv4-and-ipv6 (0.00s) --- PASS: TestNewOrderRequest_Validate/fail/no-identifiers (0.00s) @@ -3535,7 +3572,6 @@ --- PASS: TestNewOrderRequest_Validate/fail/bad-ip (0.00s) --- PASS: TestNewOrderRequest_Validate/ok (0.00s) --- PASS: TestNewOrderRequest_Validate/ok/ipv4 (0.00s) - --- PASS: TestNewOrderRequest_Validate/ok/ipv6 (0.00s) === RUN TestFinalizeRequestValidate === RUN TestFinalizeRequestValidate/fail/parse-csr-error === RUN TestFinalizeRequestValidate/fail/invalid-csr-signature @@ -3547,42 +3583,42 @@ --- PASS: TestFinalizeRequestValidate/ok (0.00s) --- PASS: TestFinalizeRequestValidate/ok/padding (0.00s) === RUN TestHandler_GetOrder +=== RUN TestHandler_GetOrder/fail/order-update-error +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_GetOrder/fail/nil-account +2026/08/12 08:17:35 Account does not exist +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} === RUN TestHandler_GetOrder/fail/no-provisioner -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_GetOrder/fail/nil-provisioner -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_GetOrder/fail/db.GetOrder-error -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_GetOrder/fail/provisioner-id-mismatch -2025/07/08 23:51:37 The client lacks sufficient authorization -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} -=== RUN TestHandler_GetOrder/fail/order-update-error -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_GetOrder/ok +2026/08/12 08:17:35 {"id":"orderID","status":"invalid","expires":"2026-08-11T17:17:35Z","identifiers":[{"type":"dns","value":"example.com"},{"type":"dns","value":"*.smallstep.com"}],"notBefore":"2026-08-11T18:17:35Z","notAfter":"2026-08-12T18:17:35Z","error":{"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"},"authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/foo","https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/bar","https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/baz"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/orderID/finalize"} === RUN TestHandler_GetOrder/fail/no-account -2025/07/08 23:51:37 Account does not exist -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} -=== RUN TestHandler_GetOrder/fail/nil-account -2025/07/08 23:51:37 Account does not exist -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +2026/08/12 08:17:35 Account does not exist +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} === RUN TestHandler_GetOrder/fail/account-id-mismatch -2025/07/08 23:51:37 The client lacks sufficient authorization -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} -=== RUN TestHandler_GetOrder/ok -2025/07/08 23:51:37 {"id":"orderID","status":"invalid","expires":"2025-07-09T10:51:37Z","identifiers":[{"type":"dns","value":"example.com"},{"type":"dns","value":"*.smallstep.com"}],"notBefore":"2025-07-09T11:51:37Z","notAfter":"2025-07-10T11:51:37Z","error":{"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"},"authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/foo","https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/bar","https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/baz"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/orderID/finalize"} +2026/08/12 08:17:35 The client lacks sufficient authorization +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} +=== RUN TestHandler_GetOrder/fail/provisioner-id-mismatch +2026/08/12 08:17:35 The client lacks sufficient authorization +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} --- PASS: TestHandler_GetOrder (0.00s) + --- PASS: TestHandler_GetOrder/fail/order-update-error (0.00s) + --- PASS: TestHandler_GetOrder/fail/nil-account (0.00s) --- PASS: TestHandler_GetOrder/fail/no-provisioner (0.00s) --- PASS: TestHandler_GetOrder/fail/nil-provisioner (0.00s) --- PASS: TestHandler_GetOrder/fail/db.GetOrder-error (0.00s) - --- PASS: TestHandler_GetOrder/fail/provisioner-id-mismatch (0.00s) - --- PASS: TestHandler_GetOrder/fail/order-update-error (0.00s) + --- PASS: TestHandler_GetOrder/ok (0.00s) --- PASS: TestHandler_GetOrder/fail/no-account (0.00s) - --- PASS: TestHandler_GetOrder/fail/nil-account (0.00s) --- PASS: TestHandler_GetOrder/fail/account-id-mismatch (0.00s) - --- PASS: TestHandler_GetOrder/ok (0.00s) + --- PASS: TestHandler_GetOrder/fail/provisioner-id-mismatch (0.00s) === RUN TestHandler_newAuthorization === RUN TestHandler_newAuthorization/fail/error-db.CreateChallenge === RUN TestHandler_newAuthorization/fail/error-db.CreateAuthorization @@ -3594,142 +3630,142 @@ --- PASS: TestHandler_newAuthorization/ok/no-wildcard (0.00s) --- PASS: TestHandler_newAuthorization/ok/wildcard (0.00s) === RUN TestHandler_NewOrder -=== RUN TestHandler_NewOrder/fail/no-provisioner -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_NewOrder/fail/no-payload -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_NewOrder/fail/nil-payload -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_NewOrder/fail/malformed-payload-error -2025/07/08 23:51:37 The request message was malformed -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_NewOrder/fail/error-db.CreateOrder -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_NewOrder/ok/multiple-authz -2025/07/08 23:51:37 {"id":"ordID","status":"pending","expires":"2025-07-10T11:51:37Z","identifiers":[{"type":"dns","value":"zap.internal"},{"type":"dns","value":"*.zar.internal"}],"notBefore":"2025-07-09T11:50:37Z","notAfter":"2025-07-10T11:51:37Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az1ID","https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az2ID"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/ordID/finalize"} -=== RUN TestHandler_NewOrder/fail/nil-account -2025/07/08 23:51:37 Account does not exist -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} -=== RUN TestHandler_NewOrder/fail/unmarshal-payload-error -2025/07/08 23:51:37 The request message was malformed -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestHandler_NewOrder/fail/acmeProvisionerFromContext-error -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_NewOrder/fail/newACMEPolicyEngine-error -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_NewOrder/ok/default-naf-nbf -2025/07/08 23:51:37 {"id":"ordID","status":"pending","expires":"2025-07-10T11:51:37Z","identifiers":[{"type":"dns","value":"zap.internal"}],"notBefore":"2025-07-09T11:50:37Z","notAfter":"2025-07-10T11:51:37Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az1ID"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/ordID/finalize"} -=== RUN TestHandler_NewOrder/fail/no-account -2025/07/08 23:51:37 Account does not exist -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_NewOrder/fail/db.GetExternalAccountKeyByAccountID-error -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_NewOrder/fail/isIdentifierAllowed-error -2025/07/08 23:51:37 The server will not issue certificates for the identifier -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:rejectedIdentifier","detail":"The server will not issue certificates for the identifier"} -=== RUN TestHandler_NewOrder/fail/error-h.newAuthorization -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server will not issue certificates for the identifier +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:rejectedIdentifier","detail":"The server will not issue certificates for the identifier"} +=== RUN TestHandler_NewOrder/fail/ca.AreSANsAllowed-error +2026/08/12 08:17:35 The server will not issue certificates for the identifier +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:rejectedIdentifier","detail":"The server will not issue certificates for the identifier"} === RUN TestHandler_NewOrder/ok/naf-nbf -2025/07/08 23:51:37 {"id":"ordID","status":"pending","expires":"2025-07-10T11:51:37Z","identifiers":[{"type":"dns","value":"zap.internal"}],"notBefore":"2025-07-09T11:56:37Z","notAfter":"2025-07-09T12:06:37Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az1ID"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/ordID/finalize"} -=== RUN TestHandler_NewOrder/ok/default-naf-nbf-with-policy -2025/07/08 23:51:37 {"id":"ordID","status":"pending","expires":"2025-07-10T11:51:37Z","identifiers":[{"type":"dns","value":"zap.internal"}],"notBefore":"2025-07-09T11:50:37Z","notAfter":"2025-07-10T11:51:37Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az1ID"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/ordID/finalize"} -=== RUN TestHandler_NewOrder/fail/nil-provisioner -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 {"id":"ordID","status":"pending","expires":"2026-08-12T18:17:35Z","identifiers":[{"type":"dns","value":"zap.internal"}],"notBefore":"2026-08-11T18:22:35Z","notAfter":"2026-08-11T18:32:35Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az1ID"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/ordID/finalize"} +=== RUN TestHandler_NewOrder/fail/no-provisioner +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_NewOrder/fail/unmarshal-payload-error +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestHandler_NewOrder/fail/prov.AuthorizeOrderIdentifier-error -2025/07/08 23:51:37 The server will not issue certificates for the identifier -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:rejectedIdentifier","detail":"The server will not issue certificates for the identifier"} -=== RUN TestHandler_NewOrder/fail/ca.AreSANsAllowed-error -2025/07/08 23:51:37 The server will not issue certificates for the identifier -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:rejectedIdentifier","detail":"The server will not issue certificates for the identifier"} +2026/08/12 08:17:35 The server will not issue certificates for the identifier +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:rejectedIdentifier","detail":"The server will not issue certificates for the identifier"} +=== RUN TestHandler_NewOrder/ok/default-naf-nbf +2026/08/12 08:17:35 {"id":"ordID","status":"pending","expires":"2026-08-12T18:17:35Z","identifiers":[{"type":"dns","value":"zap.internal"}],"notBefore":"2026-08-11T18:16:35Z","notAfter":"2026-08-12T18:17:35Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az1ID"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/ordID/finalize"} === RUN TestHandler_NewOrder/ok/nbf-no-naf -2025/07/08 23:51:37 {"id":"ordID","status":"pending","expires":"2025-07-10T11:51:37Z","identifiers":[{"type":"dns","value":"zap.internal"}],"notBefore":"2025-07-09T12:01:37Z","notAfter":"2025-07-10T12:01:37Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az1ID"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/ordID/finalize"} +2026/08/12 08:17:35 {"id":"ordID","status":"pending","expires":"2026-08-12T18:17:35Z","identifiers":[{"type":"dns","value":"zap.internal"}],"notBefore":"2026-08-11T18:27:35Z","notAfter":"2026-08-12T18:27:35Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az1ID"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/ordID/finalize"} +=== RUN TestHandler_NewOrder/fail/no-account +2026/08/12 08:17:35 Account does not exist +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +=== RUN TestHandler_NewOrder/fail/nil-account +2026/08/12 08:17:35 Account does not exist +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +=== RUN TestHandler_NewOrder/fail/newACMEPolicyEngine-error +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_NewOrder/fail/error-db.CreateOrder +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_NewOrder/ok/multiple-authz +2026/08/12 08:17:35 {"id":"ordID","status":"pending","expires":"2026-08-12T18:17:35Z","identifiers":[{"type":"dns","value":"zap.internal"},{"type":"dns","value":"*.zar.internal"}],"notBefore":"2026-08-11T18:16:35Z","notAfter":"2026-08-12T18:17:35Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az1ID","https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az2ID"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/ordID/finalize"} +=== RUN TestHandler_NewOrder/ok/default-naf-nbf-with-policy +2026/08/12 08:17:35 {"id":"ordID","status":"pending","expires":"2026-08-12T18:17:35Z","identifiers":[{"type":"dns","value":"zap.internal"}],"notBefore":"2026-08-11T18:16:35Z","notAfter":"2026-08-12T18:17:35Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az1ID"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/ordID/finalize"} +=== RUN TestHandler_NewOrder/fail/nil-provisioner +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_NewOrder/fail/error-h.newAuthorization +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_NewOrder/ok/naf-no-nbf -2025/07/08 23:51:37 {"id":"ordID","status":"pending","expires":"2025-07-10T11:51:37Z","identifiers":[{"type":"dns","value":"zap.internal"}],"notBefore":"2025-07-09T11:50:37Z","notAfter":"2025-07-09T12:06:37Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az1ID"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/ordID/finalize"} +2026/08/12 08:17:35 {"id":"ordID","status":"pending","expires":"2026-08-12T18:17:35Z","identifiers":[{"type":"dns","value":"zap.internal"}],"notBefore":"2026-08-11T18:16:35Z","notAfter":"2026-08-11T18:32:35Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az1ID"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/ordID/finalize"} --- PASS: TestHandler_NewOrder (0.00s) - --- PASS: TestHandler_NewOrder/fail/no-provisioner (0.00s) --- PASS: TestHandler_NewOrder/fail/no-payload (0.00s) --- PASS: TestHandler_NewOrder/fail/nil-payload (0.00s) --- PASS: TestHandler_NewOrder/fail/malformed-payload-error (0.00s) - --- PASS: TestHandler_NewOrder/fail/error-db.CreateOrder (0.00s) - --- PASS: TestHandler_NewOrder/ok/multiple-authz (0.00s) - --- PASS: TestHandler_NewOrder/fail/nil-account (0.00s) - --- PASS: TestHandler_NewOrder/fail/unmarshal-payload-error (0.00s) --- PASS: TestHandler_NewOrder/fail/acmeProvisionerFromContext-error (0.00s) - --- PASS: TestHandler_NewOrder/fail/newACMEPolicyEngine-error (0.00s) - --- PASS: TestHandler_NewOrder/ok/default-naf-nbf (0.00s) - --- PASS: TestHandler_NewOrder/fail/no-account (0.00s) --- PASS: TestHandler_NewOrder/fail/db.GetExternalAccountKeyByAccountID-error (0.00s) --- PASS: TestHandler_NewOrder/fail/isIdentifierAllowed-error (0.00s) - --- PASS: TestHandler_NewOrder/fail/error-h.newAuthorization (0.00s) + --- PASS: TestHandler_NewOrder/fail/ca.AreSANsAllowed-error (0.00s) --- PASS: TestHandler_NewOrder/ok/naf-nbf (0.00s) - --- PASS: TestHandler_NewOrder/ok/default-naf-nbf-with-policy (0.00s) - --- PASS: TestHandler_NewOrder/fail/nil-provisioner (0.00s) + --- PASS: TestHandler_NewOrder/fail/no-provisioner (0.00s) + --- PASS: TestHandler_NewOrder/fail/unmarshal-payload-error (0.00s) --- PASS: TestHandler_NewOrder/fail/prov.AuthorizeOrderIdentifier-error (0.00s) - --- PASS: TestHandler_NewOrder/fail/ca.AreSANsAllowed-error (0.00s) + --- PASS: TestHandler_NewOrder/ok/default-naf-nbf (0.00s) --- PASS: TestHandler_NewOrder/ok/nbf-no-naf (0.00s) + --- PASS: TestHandler_NewOrder/fail/no-account (0.00s) + --- PASS: TestHandler_NewOrder/fail/nil-account (0.00s) + --- PASS: TestHandler_NewOrder/fail/newACMEPolicyEngine-error (0.00s) + --- PASS: TestHandler_NewOrder/fail/error-db.CreateOrder (0.00s) + --- PASS: TestHandler_NewOrder/ok/multiple-authz (0.00s) + --- PASS: TestHandler_NewOrder/ok/default-naf-nbf-with-policy (0.00s) + --- PASS: TestHandler_NewOrder/fail/nil-provisioner (0.00s) + --- PASS: TestHandler_NewOrder/fail/error-h.newAuthorization (0.00s) --- PASS: TestHandler_NewOrder/ok/naf-no-nbf (0.00s) === RUN TestHandler_FinalizeOrder -=== RUN TestHandler_FinalizeOrder/fail/no-account -2025/07/08 23:51:37 Account does not exist -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +=== RUN TestHandler_FinalizeOrder/fail/account-id-mismatch +2026/08/12 08:17:35 The client lacks sufficient authorization +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} +=== RUN TestHandler_FinalizeOrder/ok +2026/08/12 08:17:35 {"id":"orderID","status":"valid","expires":"2026-08-12T18:17:35Z","identifiers":[{"type":"dns","value":"example.com"},{"type":"dns","value":"*.smallstep.com"}],"notBefore":"2026-08-11T18:17:35Z","notAfter":"2026-08-12T18:17:35Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/foo","https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/bar","https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/baz"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/orderID/finalize","certificate":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/certificate/certID"} +=== RUN TestHandler_FinalizeOrder/fail/no-provisioner +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_FinalizeOrder/fail/nil-provisioner -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_FinalizeOrder/fail/no-payload -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_FinalizeOrder/fail/nil-payload -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_FinalizeOrder/fail/unmarshal-payload-error -2025/07/08 23:51:37 The request message was malformed -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_FinalizeOrder/fail/malformed-payload-error +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestHandler_FinalizeOrder/fail/db.GetOrder-error -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_FinalizeOrder/fail/account-id-mismatch -2025/07/08 23:51:37 The client lacks sufficient authorization -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_FinalizeOrder/fail/provisioner-id-mismatch -2025/07/08 23:51:37 The client lacks sufficient authorization -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} -=== RUN TestHandler_FinalizeOrder/fail/nil-account -2025/07/08 23:51:37 Account does not exist -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} -=== RUN TestHandler_FinalizeOrder/fail/no-provisioner -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_FinalizeOrder/fail/malformed-payload-error -2025/07/08 23:51:37 The request message was malformed -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2026/08/12 08:17:35 The client lacks sufficient authorization +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} === RUN TestHandler_FinalizeOrder/fail/order-finalize-error -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_FinalizeOrder/ok -2025/07/08 23:51:37 {"id":"orderID","status":"valid","expires":"2025-07-10T11:51:37Z","identifiers":[{"type":"dns","value":"example.com"},{"type":"dns","value":"*.smallstep.com"}],"notBefore":"2025-07-09T11:51:37Z","notAfter":"2025-07-10T11:51:37Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/foo","https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/bar","https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/baz"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/orderID/finalize","certificate":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/certificate/certID"} ---- PASS: TestHandler_FinalizeOrder (0.01s) - --- PASS: TestHandler_FinalizeOrder/fail/no-account (0.00s) +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_FinalizeOrder/fail/no-account +2026/08/12 08:17:35 Account does not exist +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +=== RUN TestHandler_FinalizeOrder/fail/nil-account +2026/08/12 08:17:35 Account does not exist +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +=== RUN TestHandler_FinalizeOrder/fail/nil-payload +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_FinalizeOrder/fail/unmarshal-payload-error +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +--- PASS: TestHandler_FinalizeOrder (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/account-id-mismatch (0.00s) + --- PASS: TestHandler_FinalizeOrder/ok (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/no-provisioner (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/nil-provisioner (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/no-payload (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/nil-payload (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/unmarshal-payload-error (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/malformed-payload-error (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/db.GetOrder-error (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/account-id-mismatch (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/provisioner-id-mismatch (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/nil-account (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/no-provisioner (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/malformed-payload-error (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/order-finalize-error (0.00s) - --- PASS: TestHandler_FinalizeOrder/ok (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/no-account (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/nil-account (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/nil-payload (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/unmarshal-payload-error (0.00s) === RUN TestHandler_challengeTypes === RUN TestHandler_challengeTypes/ok/dns === RUN TestHandler_challengeTypes/ok/wildcard @@ -3779,107 +3815,107 @@ --- PASS: Test_revokeOptions/ok/no-reasoncode (0.00s) --- PASS: Test_revokeOptions/ok/including-reasoncode (0.00s) === RUN TestHandler_RevokeCert -=== RUN TestHandler_RevokeCert/fail/unmarshal-payload -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_RevokeCert/fail/certificate-revoked-check-fails -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_RevokeCert/fail/invalid-reasoncode -2025/07/08 23:51:37 The revocation reason provided is not allowed by the server -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:badRevocationReason","detail":"The revocation reason provided is not allowed by the server"} +2026/08/12 08:17:35 The revocation reason provided is not allowed by the server +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:badRevocationReason","detail":"The revocation reason provided is not allowed by the server"} === RUN TestHandler_RevokeCert/fail/ca.Revoke -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_RevokeCert/fail/ca.Revoke-already-revoked -2025/07/08 23:51:37 Certificate already revoked -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:alreadyRevoked","detail":"Certificate already revoked"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_RevokeCert/ok/using-account-key -=== RUN TestHandler_RevokeCert/fail/nil-provisioner -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_RevokeCert/fail/unauthorized-certificate-key -2025/07/08 23:51:37 No authorization provided for name 127.0.0.1 -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"No authorization provided for name 127.0.0.1"} -=== RUN TestHandler_RevokeCert/fail/nil-payload -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_RevokeCert/fail/no-certificate-encoded -2025/07/08 23:51:37 The request message was malformed -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_RevokeCert/fail/nil-account -2025/07/08 23:51:37 Account does not exist -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +=== RUN TestHandler_RevokeCert/fail/unmarshal-payload +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_RevokeCert/fail/different-certificate-contents +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_RevokeCert/fail/account-not-valid -2025/07/08 23:51:37 No authorization provided for name 127.0.0.1 -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"No authorization provided for name 127.0.0.1"} -=== RUN TestHandler_RevokeCert/fail/certificate-already-revoked -2025/07/08 23:51:37 Certificate already revoked -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:alreadyRevoked","detail":"Certificate already revoked"} -=== RUN TestHandler_RevokeCert/ok/using-certificate-key +2026/08/12 08:17:35 No authorization provided for name 127.0.0.1 +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"No authorization provided for name 127.0.0.1"} +=== RUN TestHandler_RevokeCert/fail/no-jws +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_RevokeCert/fail/nil-jws -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_RevokeCert/fail/no-payload -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_RevokeCert/fail/wrong-certificate-encoding -2025/07/08 23:51:37 The request message was malformed -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_RevokeCert/fail/no-provisioner +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_RevokeCert/fail/nil-provisioner +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_RevokeCert/fail/db.GetCertificateBySerial -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_RevokeCert/fail/different-certificate-contents -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_RevokeCert/fail/no-account -2025/07/08 23:51:37 Account does not exist -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} -=== RUN TestHandler_RevokeCert/fail/account-not-authorized -2025/07/08 23:51:37 No authorization provided for name 127.0.0.1 -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"No authorization provided for name 127.0.0.1"} +2026/08/12 08:17:35 Account does not exist +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +=== RUN TestHandler_RevokeCert/fail/certificate-revoked-check-fails +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_RevokeCert/fail/prov.AuthorizeRevoke -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_RevokeCert/fail/no-jws -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_RevokeCert/fail/no-provisioner -2025/07/08 23:51:37 The server experienced an internal error -2025/07/08 23:51:37 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} ---- PASS: TestHandler_RevokeCert (0.01s) - --- PASS: TestHandler_RevokeCert/fail/unmarshal-payload (0.00s) - --- PASS: TestHandler_RevokeCert/fail/certificate-revoked-check-fails (0.00s) +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_RevokeCert/fail/nil-payload +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_RevokeCert/fail/account-not-authorized +2026/08/12 08:17:35 No authorization provided for name 127.0.0.1 +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"No authorization provided for name 127.0.0.1"} +=== RUN TestHandler_RevokeCert/fail/unauthorized-certificate-key +2026/08/12 08:17:35 No authorization provided for name 127.0.0.1 +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"No authorization provided for name 127.0.0.1"} +=== RUN TestHandler_RevokeCert/fail/ca.Revoke-already-revoked +2026/08/12 08:17:35 Certificate already revoked +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:alreadyRevoked","detail":"Certificate already revoked"} +=== RUN TestHandler_RevokeCert/ok/using-certificate-key +=== RUN TestHandler_RevokeCert/fail/no-payload +2026/08/12 08:17:35 The server experienced an internal error +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_RevokeCert/fail/wrong-certificate-encoding +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_RevokeCert/fail/no-certificate-encoded +2026/08/12 08:17:35 The request message was malformed +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_RevokeCert/fail/nil-account +2026/08/12 08:17:35 Account does not exist +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +=== RUN TestHandler_RevokeCert/fail/certificate-already-revoked +2026/08/12 08:17:35 Certificate already revoked +2026/08/12 08:17:35 {"type":"urn:ietf:params:acme:error:alreadyRevoked","detail":"Certificate already revoked"} +--- PASS: TestHandler_RevokeCert (0.00s) --- PASS: TestHandler_RevokeCert/fail/invalid-reasoncode (0.00s) --- PASS: TestHandler_RevokeCert/fail/ca.Revoke (0.00s) - --- PASS: TestHandler_RevokeCert/fail/ca.Revoke-already-revoked (0.00s) --- PASS: TestHandler_RevokeCert/ok/using-account-key (0.00s) - --- PASS: TestHandler_RevokeCert/fail/nil-provisioner (0.00s) - --- PASS: TestHandler_RevokeCert/fail/unauthorized-certificate-key (0.00s) - --- PASS: TestHandler_RevokeCert/fail/nil-payload (0.00s) - --- PASS: TestHandler_RevokeCert/fail/no-certificate-encoded (0.00s) - --- PASS: TestHandler_RevokeCert/fail/nil-account (0.00s) + --- PASS: TestHandler_RevokeCert/fail/unmarshal-payload (0.00s) + --- PASS: TestHandler_RevokeCert/fail/different-certificate-contents (0.00s) --- PASS: TestHandler_RevokeCert/fail/account-not-valid (0.00s) - --- PASS: TestHandler_RevokeCert/fail/certificate-already-revoked (0.00s) - --- PASS: TestHandler_RevokeCert/ok/using-certificate-key (0.00s) + --- PASS: TestHandler_RevokeCert/fail/no-jws (0.00s) --- PASS: TestHandler_RevokeCert/fail/nil-jws (0.00s) - --- PASS: TestHandler_RevokeCert/fail/no-payload (0.00s) - --- PASS: TestHandler_RevokeCert/fail/wrong-certificate-encoding (0.00s) + --- PASS: TestHandler_RevokeCert/fail/no-provisioner (0.00s) + --- PASS: TestHandler_RevokeCert/fail/nil-provisioner (0.00s) --- PASS: TestHandler_RevokeCert/fail/db.GetCertificateBySerial (0.00s) - --- PASS: TestHandler_RevokeCert/fail/different-certificate-contents (0.00s) --- PASS: TestHandler_RevokeCert/fail/no-account (0.00s) - --- PASS: TestHandler_RevokeCert/fail/account-not-authorized (0.00s) + --- PASS: TestHandler_RevokeCert/fail/certificate-revoked-check-fails (0.00s) --- PASS: TestHandler_RevokeCert/fail/prov.AuthorizeRevoke (0.00s) - --- PASS: TestHandler_RevokeCert/fail/no-jws (0.00s) - --- PASS: TestHandler_RevokeCert/fail/no-provisioner (0.00s) + --- PASS: TestHandler_RevokeCert/fail/nil-payload (0.00s) + --- PASS: TestHandler_RevokeCert/fail/account-not-authorized (0.00s) + --- PASS: TestHandler_RevokeCert/fail/unauthorized-certificate-key (0.00s) + --- PASS: TestHandler_RevokeCert/fail/ca.Revoke-already-revoked (0.00s) + --- PASS: TestHandler_RevokeCert/ok/using-certificate-key (0.00s) + --- PASS: TestHandler_RevokeCert/fail/no-payload (0.00s) + --- PASS: TestHandler_RevokeCert/fail/wrong-certificate-encoding (0.00s) + --- PASS: TestHandler_RevokeCert/fail/no-certificate-encoded (0.00s) + --- PASS: TestHandler_RevokeCert/fail/nil-account (0.00s) + --- PASS: TestHandler_RevokeCert/fail/certificate-already-revoked (0.00s) === RUN TestHandler_isAccountAuthorized +=== RUN TestHandler_isAccountAuthorized/fail/account-invalid === RUN TestHandler_isAccountAuthorized/fail/different-account === RUN TestHandler_isAccountAuthorized/ok -=== RUN TestHandler_isAccountAuthorized/fail/account-invalid --- PASS: TestHandler_isAccountAuthorized (0.00s) + --- PASS: TestHandler_isAccountAuthorized/fail/account-invalid (0.00s) --- PASS: TestHandler_isAccountAuthorized/fail/different-account (0.00s) --- PASS: TestHandler_isAccountAuthorized/ok (0.00s) - --- PASS: TestHandler_isAccountAuthorized/fail/account-invalid (0.00s) === RUN Test_wrapUnauthorizedError === RUN Test_wrapUnauthorizedError/unauthorizedIdentifiers === RUN Test_wrapUnauthorizedError/subject @@ -3891,7 +3927,7 @@ --- PASS: Test_wrapUnauthorizedError/wrap-subject (0.00s) --- PASS: Test_wrapUnauthorizedError/default (0.00s) PASS -ok github.com/smallstep/certificates/acme/api 0.688s +ok github.com/smallstep/certificates/acme/api 0.216s === RUN TestDB_getDBAccount === RUN TestDB_getDBAccount/fail/not-found === RUN TestDB_getDBAccount/fail/db.Get-error @@ -3925,25 +3961,25 @@ --- PASS: TestDB_GetAccountByKeyID/fail/db.GetAccount-error (0.00s) --- PASS: TestDB_GetAccountByKeyID/ok (0.00s) === RUN TestDB_CreateAccount -=== RUN TestDB_CreateAccount/ok === RUN TestDB_CreateAccount/fail/keyID-cmpAndSwap-error === RUN TestDB_CreateAccount/fail/keyID-cmpAndSwap-false === RUN TestDB_CreateAccount/fail/account-save-error +=== RUN TestDB_CreateAccount/ok --- PASS: TestDB_CreateAccount (0.00s) - --- PASS: TestDB_CreateAccount/ok (0.00s) --- PASS: TestDB_CreateAccount/fail/keyID-cmpAndSwap-error (0.00s) --- PASS: TestDB_CreateAccount/fail/keyID-cmpAndSwap-false (0.00s) --- PASS: TestDB_CreateAccount/fail/account-save-error (0.00s) + --- PASS: TestDB_CreateAccount/ok (0.00s) === RUN TestDB_UpdateAccount -=== RUN TestDB_UpdateAccount/fail/db.Get-error === RUN TestDB_UpdateAccount/fail/already-deactivated === RUN TestDB_UpdateAccount/fail/db.CmpAndSwap-error === RUN TestDB_UpdateAccount/ok +=== RUN TestDB_UpdateAccount/fail/db.Get-error --- PASS: TestDB_UpdateAccount (0.00s) - --- PASS: TestDB_UpdateAccount/fail/db.Get-error (0.00s) --- PASS: TestDB_UpdateAccount/fail/already-deactivated (0.00s) --- PASS: TestDB_UpdateAccount/fail/db.CmpAndSwap-error (0.00s) --- PASS: TestDB_UpdateAccount/ok (0.00s) + --- PASS: TestDB_UpdateAccount/fail/db.Get-error (0.00s) === RUN TestDB_getDBAuthz === RUN TestDB_getDBAuthz/fail/not-found === RUN TestDB_getDBAuthz/fail/db.Get-error @@ -3955,17 +3991,17 @@ --- PASS: TestDB_getDBAuthz/fail/unmarshal-error (0.00s) --- PASS: TestDB_getDBAuthz/ok (0.00s) === RUN TestDB_GetAuthorization -=== RUN TestDB_GetAuthorization/fail/db.GetChallenge-not-found -=== RUN TestDB_GetAuthorization/ok === RUN TestDB_GetAuthorization/fail/db.Get-error === RUN TestDB_GetAuthorization/fail/forward-acme-error === RUN TestDB_GetAuthorization/fail/db.GetChallenge-error +=== RUN TestDB_GetAuthorization/fail/db.GetChallenge-not-found +=== RUN TestDB_GetAuthorization/ok --- PASS: TestDB_GetAuthorization (0.00s) - --- PASS: TestDB_GetAuthorization/fail/db.GetChallenge-not-found (0.00s) - --- PASS: TestDB_GetAuthorization/ok (0.00s) --- PASS: TestDB_GetAuthorization/fail/db.Get-error (0.00s) --- PASS: TestDB_GetAuthorization/fail/forward-acme-error (0.00s) --- PASS: TestDB_GetAuthorization/fail/db.GetChallenge-error (0.00s) + --- PASS: TestDB_GetAuthorization/fail/db.GetChallenge-not-found (0.00s) + --- PASS: TestDB_GetAuthorization/ok (0.00s) === RUN TestDB_CreateAuthorization === RUN TestDB_CreateAuthorization/fail/cmpAndSwap-error === RUN TestDB_CreateAuthorization/ok @@ -3991,23 +4027,23 @@ --- PASS: TestDB_GetAuthorizationsByAccountID/ok (0.00s) --- PASS: TestDB_GetAuthorizationsByAccountID/ok/skip-different-account (0.00s) === RUN TestDB_CreateCertificate -=== RUN TestDB_CreateCertificate/fail/cmpAndSwap-error === RUN TestDB_CreateCertificate/ok +=== RUN TestDB_CreateCertificate/fail/cmpAndSwap-error --- PASS: TestDB_CreateCertificate (0.00s) - --- PASS: TestDB_CreateCertificate/fail/cmpAndSwap-error (0.00s) --- PASS: TestDB_CreateCertificate/ok (0.00s) + --- PASS: TestDB_CreateCertificate/fail/cmpAndSwap-error (0.00s) === RUN TestDB_GetCertificate -=== RUN TestDB_GetCertificate/fail/not-found -=== RUN TestDB_GetCertificate/fail/db.Get-error === RUN TestDB_GetCertificate/fail/unmarshal-error === RUN TestDB_GetCertificate/fail/parseBundle-error === RUN TestDB_GetCertificate/ok +=== RUN TestDB_GetCertificate/fail/not-found +=== RUN TestDB_GetCertificate/fail/db.Get-error --- PASS: TestDB_GetCertificate (0.00s) - --- PASS: TestDB_GetCertificate/fail/not-found (0.00s) - --- PASS: TestDB_GetCertificate/fail/db.Get-error (0.00s) --- PASS: TestDB_GetCertificate/fail/unmarshal-error (0.00s) --- PASS: TestDB_GetCertificate/fail/parseBundle-error (0.00s) --- PASS: TestDB_GetCertificate/ok (0.00s) + --- PASS: TestDB_GetCertificate/fail/not-found (0.00s) + --- PASS: TestDB_GetCertificate/fail/db.Get-error (0.00s) === RUN Test_parseBundle === RUN Test_parseBundle/fail/bad-type-error === RUN Test_parseBundle/fail/bad-pem-error @@ -4039,27 +4075,27 @@ --- PASS: TestDB_getDBExternalAccountKey/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBExternalAccountKey/fail/unmarshal-error (0.00s) === RUN TestDB_GetExternalAccountKey -=== RUN TestDB_GetExternalAccountKey/fail/non-matching-provisioner === RUN TestDB_GetExternalAccountKey/ok === RUN TestDB_GetExternalAccountKey/fail/db.Get-error +=== RUN TestDB_GetExternalAccountKey/fail/non-matching-provisioner --- PASS: TestDB_GetExternalAccountKey (0.00s) - --- PASS: TestDB_GetExternalAccountKey/fail/non-matching-provisioner (0.00s) --- PASS: TestDB_GetExternalAccountKey/ok (0.00s) --- PASS: TestDB_GetExternalAccountKey/fail/db.Get-error (0.00s) + --- PASS: TestDB_GetExternalAccountKey/fail/non-matching-provisioner (0.00s) === RUN TestDB_GetExternalAccountKeyByReference -=== RUN TestDB_GetExternalAccountKeyByReference/fail/reference-unmarshal-error -=== RUN TestDB_GetExternalAccountKeyByReference/fail/db.GetExternalAccountKey-error === RUN TestDB_GetExternalAccountKeyByReference/ok === RUN TestDB_GetExternalAccountKeyByReference/ok/no-reference === RUN TestDB_GetExternalAccountKeyByReference/fail/reference-not-found === RUN TestDB_GetExternalAccountKeyByReference/fail/reference-load-error +=== RUN TestDB_GetExternalAccountKeyByReference/fail/reference-unmarshal-error +=== RUN TestDB_GetExternalAccountKeyByReference/fail/db.GetExternalAccountKey-error --- PASS: TestDB_GetExternalAccountKeyByReference (0.00s) - --- PASS: TestDB_GetExternalAccountKeyByReference/fail/reference-unmarshal-error (0.00s) - --- PASS: TestDB_GetExternalAccountKeyByReference/fail/db.GetExternalAccountKey-error (0.00s) --- PASS: TestDB_GetExternalAccountKeyByReference/ok (0.00s) --- PASS: TestDB_GetExternalAccountKeyByReference/ok/no-reference (0.00s) --- PASS: TestDB_GetExternalAccountKeyByReference/fail/reference-not-found (0.00s) --- PASS: TestDB_GetExternalAccountKeyByReference/fail/reference-load-error (0.00s) + --- PASS: TestDB_GetExternalAccountKeyByReference/fail/reference-unmarshal-error (0.00s) + --- PASS: TestDB_GetExternalAccountKeyByReference/fail/db.GetExternalAccountKey-error (0.00s) === RUN TestDB_GetExternalAccountKeys === RUN TestDB_GetExternalAccountKeys/fail/db.getDBExternalAccountKey === RUN TestDB_GetExternalAccountKeys/ok @@ -4071,70 +4107,70 @@ --- PASS: TestDB_GetExternalAccountKeys/fail/db.Get-externalAccountKeysByProvisionerIDTable (0.00s) --- PASS: TestDB_GetExternalAccountKeys/fail/db.Get-externalAccountKeysByProvisionerIDTable-unmarshal (0.00s) === RUN TestDB_DeleteExternalAccountKey +=== RUN TestDB_DeleteExternalAccountKey/fail/delete-eakID === RUN TestDB_DeleteExternalAccountKey/ok acme_external_account_keyID_provisionerID_index === RUN TestDB_DeleteExternalAccountKey/fail/not-found === RUN TestDB_DeleteExternalAccountKey/fail/non-matching-provisioner === RUN TestDB_DeleteExternalAccountKey/fail/delete-reference === RUN TestDB_DeleteExternalAccountKey/fail/delete-eak -=== RUN TestDB_DeleteExternalAccountKey/fail/delete-eakID --- PASS: TestDB_DeleteExternalAccountKey (0.00s) + --- PASS: TestDB_DeleteExternalAccountKey/fail/delete-eakID (0.00s) --- PASS: TestDB_DeleteExternalAccountKey/ok (0.00s) --- PASS: TestDB_DeleteExternalAccountKey/fail/not-found (0.00s) --- PASS: TestDB_DeleteExternalAccountKey/fail/non-matching-provisioner (0.00s) --- PASS: TestDB_DeleteExternalAccountKey/fail/delete-reference (0.00s) --- PASS: TestDB_DeleteExternalAccountKey/fail/delete-eak (0.00s) - --- PASS: TestDB_DeleteExternalAccountKey/fail/delete-eakID (0.00s) === RUN TestDB_CreateExternalAccountKey -=== RUN TestDB_CreateExternalAccountKey/fail/addEAKID-error -=== RUN TestDB_CreateExternalAccountKey/fail/externalAccountKeyReference-cmpAndSwap-error === RUN TestDB_CreateExternalAccountKey/ok === RUN TestDB_CreateExternalAccountKey/fail/externalAccountKeyID-cmpAndSwap-error +=== RUN TestDB_CreateExternalAccountKey/fail/addEAKID-error +=== RUN TestDB_CreateExternalAccountKey/fail/externalAccountKeyReference-cmpAndSwap-error --- PASS: TestDB_CreateExternalAccountKey (0.00s) - --- PASS: TestDB_CreateExternalAccountKey/fail/addEAKID-error (0.00s) - --- PASS: TestDB_CreateExternalAccountKey/fail/externalAccountKeyReference-cmpAndSwap-error (0.00s) --- PASS: TestDB_CreateExternalAccountKey/ok (0.00s) --- PASS: TestDB_CreateExternalAccountKey/fail/externalAccountKeyID-cmpAndSwap-error (0.00s) + --- PASS: TestDB_CreateExternalAccountKey/fail/addEAKID-error (0.00s) + --- PASS: TestDB_CreateExternalAccountKey/fail/externalAccountKeyReference-cmpAndSwap-error (0.00s) === RUN TestDB_UpdateExternalAccountKey +=== RUN TestDB_UpdateExternalAccountKey/ok +=== RUN TestDB_UpdateExternalAccountKey/fail/db.Get-error === RUN TestDB_UpdateExternalAccountKey/fail/provisioner-mismatch === RUN TestDB_UpdateExternalAccountKey/fail/provisioner-change === RUN TestDB_UpdateExternalAccountKey/fail/reference-change -=== RUN TestDB_UpdateExternalAccountKey/ok -=== RUN TestDB_UpdateExternalAccountKey/fail/db.Get-error --- PASS: TestDB_UpdateExternalAccountKey (0.00s) + --- PASS: TestDB_UpdateExternalAccountKey/ok (0.00s) + --- PASS: TestDB_UpdateExternalAccountKey/fail/db.Get-error (0.00s) --- PASS: TestDB_UpdateExternalAccountKey/fail/provisioner-mismatch (0.00s) --- PASS: TestDB_UpdateExternalAccountKey/fail/provisioner-change (0.00s) --- PASS: TestDB_UpdateExternalAccountKey/fail/reference-change (0.00s) - --- PASS: TestDB_UpdateExternalAccountKey/ok (0.00s) - --- PASS: TestDB_UpdateExternalAccountKey/fail/db.Get-error (0.00s) === RUN TestDB_addEAKID -=== RUN TestDB_addEAKID/ok/db.Get-not-found -=== RUN TestDB_addEAKID/ok === RUN TestDB_addEAKID/fail/empty-eakID === RUN TestDB_addEAKID/fail/db.Get === RUN TestDB_addEAKID/fail/unmarshal === RUN TestDB_addEAKID/fail/eakID-already-exists === RUN TestDB_addEAKID/fail/db.save +=== RUN TestDB_addEAKID/ok/db.Get-not-found +=== RUN TestDB_addEAKID/ok --- PASS: TestDB_addEAKID (0.00s) - --- PASS: TestDB_addEAKID/ok/db.Get-not-found (0.00s) - --- PASS: TestDB_addEAKID/ok (0.00s) --- PASS: TestDB_addEAKID/fail/empty-eakID (0.00s) --- PASS: TestDB_addEAKID/fail/db.Get (0.00s) --- PASS: TestDB_addEAKID/fail/unmarshal (0.00s) --- PASS: TestDB_addEAKID/fail/eakID-already-exists (0.00s) --- PASS: TestDB_addEAKID/fail/db.save (0.00s) + --- PASS: TestDB_addEAKID/ok/db.Get-not-found (0.00s) + --- PASS: TestDB_addEAKID/ok (0.00s) === RUN TestDB_deleteEAKID +=== RUN TestDB_deleteEAKID/fail/db.Get +=== RUN TestDB_deleteEAKID/fail/unmarshal === RUN TestDB_deleteEAKID/fail/db.save === RUN TestDB_deleteEAKID/ok/db.Get-not-found === RUN TestDB_deleteEAKID/ok -=== RUN TestDB_deleteEAKID/fail/db.Get -=== RUN TestDB_deleteEAKID/fail/unmarshal --- PASS: TestDB_deleteEAKID (0.00s) + --- PASS: TestDB_deleteEAKID/fail/db.Get (0.00s) + --- PASS: TestDB_deleteEAKID/fail/unmarshal (0.00s) --- PASS: TestDB_deleteEAKID/fail/db.save (0.00s) --- PASS: TestDB_deleteEAKID/ok/db.Get-not-found (0.00s) --- PASS: TestDB_deleteEAKID/ok (0.00s) - --- PASS: TestDB_deleteEAKID/fail/db.Get (0.00s) - --- PASS: TestDB_deleteEAKID/fail/unmarshal (0.00s) === RUN TestDB_addAndDeleteEAKID === RUN TestDB_addAndDeleteEAKID/ok/multi --- PASS: TestDB_addAndDeleteEAKID (0.00s) @@ -4156,13 +4192,13 @@ --- PASS: TestDB_CreateNonce/fail/cmpAndSwap-error (0.00s) --- PASS: TestDB_CreateNonce/ok (0.00s) === RUN TestDB_DeleteNonce +=== RUN TestDB_DeleteNonce/ok === RUN TestDB_DeleteNonce/fail/not-found === RUN TestDB_DeleteNonce/fail/db.Update-error -=== RUN TestDB_DeleteNonce/ok --- PASS: TestDB_DeleteNonce (0.00s) + --- PASS: TestDB_DeleteNonce/ok (0.00s) --- PASS: TestDB_DeleteNonce/fail/not-found (0.00s) --- PASS: TestDB_DeleteNonce/fail/db.Update-error (0.00s) - --- PASS: TestDB_DeleteNonce/ok (0.00s) === RUN TestNew === RUN TestNew/fail/db.CreateTable-error === RUN TestNew/ok @@ -4170,19 +4206,19 @@ --- PASS: TestNew/fail/db.CreateTable-error (0.00s) --- PASS: TestNew/ok (0.00s) === RUN TestDB_save +=== RUN TestDB_save/fail/error-marshaling-old === RUN TestDB_save/fail/db.CmpAndSwap-error === RUN TestDB_save/fail/db.CmpAndSwap-false-marshaling-old === RUN TestDB_save/ok === RUN TestDB_save/ok/nils === RUN TestDB_save/fail/error-marshaling-new -=== RUN TestDB_save/fail/error-marshaling-old --- PASS: TestDB_save (0.00s) + --- PASS: TestDB_save/fail/error-marshaling-old (0.00s) --- PASS: TestDB_save/fail/db.CmpAndSwap-error (0.00s) --- PASS: TestDB_save/fail/db.CmpAndSwap-false-marshaling-old (0.00s) --- PASS: TestDB_save/ok (0.00s) --- PASS: TestDB_save/ok/nils (0.00s) --- PASS: TestDB_save/fail/error-marshaling-new (0.00s) - --- PASS: TestDB_save/fail/error-marshaling-old (0.00s) === RUN TestDB_getDBOrder === RUN TestDB_getDBOrder/fail/not-found === RUN TestDB_getDBOrder/fail/db.Get-error @@ -4202,13 +4238,13 @@ --- PASS: TestDB_GetOrder/fail/forward-acme-error (0.00s) --- PASS: TestDB_GetOrder/ok (0.00s) === RUN TestDB_UpdateOrder -=== RUN TestDB_UpdateOrder/ok === RUN TestDB_UpdateOrder/fail/db.Get-error === RUN TestDB_UpdateOrder/fail/save-error +=== RUN TestDB_UpdateOrder/ok --- PASS: TestDB_UpdateOrder (0.00s) - --- PASS: TestDB_UpdateOrder/ok (0.00s) --- PASS: TestDB_UpdateOrder/fail/db.Get-error (0.00s) --- PASS: TestDB_UpdateOrder/fail/save-error (0.00s) + --- PASS: TestDB_UpdateOrder/ok (0.00s) === RUN TestDB_CreateOrder === RUN TestDB_CreateOrder/fail/order-save-error === RUN TestDB_CreateOrder/fail/orderIDsByOrderUpdate-error @@ -4218,27 +4254,27 @@ --- PASS: TestDB_CreateOrder/fail/orderIDsByOrderUpdate-error (0.00s) --- PASS: TestDB_CreateOrder/ok (0.00s) === RUN TestDB_updateAddOrderIDs -=== RUN TestDB_updateAddOrderIDs/fail/db.Get-error -=== RUN TestDB_updateAddOrderIDs/fail/db.Get-order-error +=== RUN TestDB_updateAddOrderIDs/fail/unmarshal-error === RUN TestDB_updateAddOrderIDs/fail/db.save-order-error === RUN TestDB_updateAddOrderIDs/ok/no-old -=== RUN TestDB_updateAddOrderIDs/ok/all-old-not-pending -=== RUN TestDB_updateAddOrderIDs/ok/old-and-new === RUN TestDB_updateAddOrderIDs/ok/old-and-new-2 -=== RUN TestDB_updateAddOrderIDs/fail/unmarshal-error +=== RUN TestDB_updateAddOrderIDs/fail/db.Get-error +=== RUN TestDB_updateAddOrderIDs/fail/db.Get-order-error === RUN TestDB_updateAddOrderIDs/fail/update-order-status-error +=== RUN TestDB_updateAddOrderIDs/ok/all-old-not-pending +=== RUN TestDB_updateAddOrderIDs/ok/old-and-new --- PASS: TestDB_updateAddOrderIDs (0.00s) - --- PASS: TestDB_updateAddOrderIDs/fail/db.Get-error (0.00s) - --- PASS: TestDB_updateAddOrderIDs/fail/db.Get-order-error (0.00s) + --- PASS: TestDB_updateAddOrderIDs/fail/unmarshal-error (0.00s) --- PASS: TestDB_updateAddOrderIDs/fail/db.save-order-error (0.00s) --- PASS: TestDB_updateAddOrderIDs/ok/no-old (0.00s) - --- PASS: TestDB_updateAddOrderIDs/ok/all-old-not-pending (0.00s) - --- PASS: TestDB_updateAddOrderIDs/ok/old-and-new (0.00s) --- PASS: TestDB_updateAddOrderIDs/ok/old-and-new-2 (0.00s) - --- PASS: TestDB_updateAddOrderIDs/fail/unmarshal-error (0.00s) + --- PASS: TestDB_updateAddOrderIDs/fail/db.Get-error (0.00s) + --- PASS: TestDB_updateAddOrderIDs/fail/db.Get-order-error (0.00s) --- PASS: TestDB_updateAddOrderIDs/fail/update-order-status-error (0.00s) + --- PASS: TestDB_updateAddOrderIDs/ok/all-old-not-pending (0.00s) + --- PASS: TestDB_updateAddOrderIDs/ok/old-and-new (0.00s) PASS -ok github.com/smallstep/certificates/acme/db/nosql 0.055s +ok github.com/smallstep/certificates/acme/db/nosql 0.039s === RUN TestNewCertificate --- PASS: TestNewCertificate (0.00s) === RUN TestCertificate_MarshalJSON @@ -4360,7 +4396,7 @@ === RUN Test_Root === RUN Test_Root/ok === RUN Test_Root/fail -2025/07/08 23:51:41 http://example.com/root/efc7d6b475a56fe587650bcdb999a4a308f815ba44db4bf0371ea68a786ccd36 was not found: not found +2026/08/12 08:17:39 http://example.com/root/efc7d6b475a56fe587650bcdb999a4a308f815ba44db4bf0371ea68a786ccd36 was not found: not found --- PASS: Test_Root (0.00s) --- PASS: Test_Root/ok (0.00s) --- PASS: Test_Root/fail (0.00s) @@ -4386,7 +4422,7 @@ === RUN Test_Renew/renew_error === RUN Test_Renew/fail_expired_token === RUN Test_Renew/fail_invalid_root ---- PASS: Test_Renew (0.02s) +--- PASS: Test_Renew (0.01s) --- PASS: Test_Renew/ok (0.00s) --- PASS: Test_Renew/ok_renew_after_expiry (0.00s) --- PASS: Test_Renew/no_tls (0.00s) @@ -4409,9 +4445,9 @@ === RUN Test_Provisioners === RUN Test_Provisioners/ok === RUN Test_Provisioners/fail -2025/07/08 23:51:41 the error +2026/08/12 08:17:39 the error === RUN Test_Provisioners/limit_fail -2025/07/08 23:51:41 limit 'abc' is not an integer: strconv.Atoi: parsing "abc": invalid syntax +2026/08/12 08:17:39 limit 'abc' is not an integer: strconv.Atoi: parsing "abc": invalid syntax --- PASS: Test_Provisioners (0.00s) --- PASS: Test_Provisioners/ok (0.00s) --- PASS: Test_Provisioners/fail (0.00s) @@ -4419,7 +4455,7 @@ === RUN Test_ProvisionerKey === RUN Test_ProvisionerKey/ok === RUN Test_ProvisionerKey/fail -2025/07/08 23:51:41 not found +2026/08/12 08:17:39 not found --- PASS: Test_ProvisionerKey (0.00s) --- PASS: Test_ProvisionerKey/ok (0.00s) --- PASS: Test_ProvisionerKey/fail (0.00s) @@ -4427,7 +4463,7 @@ === RUN Test_Roots/ok === RUN Test_Roots/no_peer_certificates === RUN Test_Roots/fail -2025/07/08 23:51:41 error getting roots: an error +2026/08/12 08:17:39 error getting roots: an error --- PASS: Test_Roots (0.00s) --- PASS: Test_Roots/ok (0.00s) --- PASS: Test_Roots/no_peer_certificates (0.00s) @@ -4436,7 +4472,7 @@ === RUN Test_caHandler_RootsPEM/one_root === RUN Test_caHandler_RootsPEM/two_roots === RUN Test_caHandler_RootsPEM/fail -2025/07/08 23:51:41 an error +2026/08/12 08:17:39 an error --- PASS: Test_caHandler_RootsPEM (0.00s) --- PASS: Test_caHandler_RootsPEM/one_root (0.00s) --- PASS: Test_caHandler_RootsPEM/two_roots (0.00s) @@ -4445,7 +4481,7 @@ === RUN Test_Federation/ok === RUN Test_Federation/no_peer_certificates === RUN Test_Federation/fail -2025/07/08 23:51:41 error getting federated roots: an error +2026/08/12 08:17:39 error getting federated roots: an error --- PASS: Test_Federation (0.00s) --- PASS: Test_Federation/ok (0.00s) --- PASS: Test_Federation/no_peer_certificates (0.00s) @@ -4456,7 +4492,7 @@ === RUN Test_fmtPublicKey/ed25519 === RUN Test_fmtPublicKey/dsa2048 === RUN Test_fmtPublicKey/unknown ---- PASS: Test_fmtPublicKey (7.99s) +--- PASS: Test_fmtPublicKey (1.11s) --- PASS: Test_fmtPublicKey/p256 (0.00s) --- PASS: Test_fmtPublicKey/rsa1024 (0.00s) --- PASS: Test_fmtPublicKey/ed25519 (0.00s) @@ -4549,7 +4585,7 @@ === RUN Test_SSHSign/fail-signSSH === RUN Test_SSHSign/fail-SignSSHAddUser === RUN Test_SSHSign/fail-user-identity ---- PASS: Test_SSHSign (0.00s) +--- PASS: Test_SSHSign (0.01s) --- PASS: Test_SSHSign/ok-user (0.00s) --- PASS: Test_SSHSign/ok-host (0.00s) --- PASS: Test_SSHSign/ok-user-add (0.00s) @@ -4657,7 +4693,7 @@ === RUN TestSSHPublicKey_UnmarshalJSON/noString === RUN TestSSHPublicKey_UnmarshalJSON/badB64 === RUN TestSSHPublicKey_UnmarshalJSON/badKey ---- PASS: TestSSHPublicKey_UnmarshalJSON (0.01s) +--- PASS: TestSSHPublicKey_UnmarshalJSON (0.00s) --- PASS: TestSSHPublicKey_UnmarshalJSON/ok (0.00s) --- PASS: TestSSHPublicKey_UnmarshalJSON/empty (0.00s) --- PASS: TestSSHPublicKey_UnmarshalJSON/null (0.00s) @@ -4665,16 +4701,16 @@ --- PASS: TestSSHPublicKey_UnmarshalJSON/badB64 (0.00s) --- PASS: TestSSHPublicKey_UnmarshalJSON/badKey (0.00s) PASS -ok github.com/smallstep/certificates/api 8.101s +ok github.com/smallstep/certificates/api 1.191s === RUN TestError === RUN TestError/normalLogger -2025/07/08 23:51:41 the error +2026/08/12 08:17:39 the error === RUN TestError/responseLogger --- PASS: TestError (0.00s) --- PASS: TestError/normalLogger (0.00s) --- PASS: TestError/responseLogger (0.00s) PASS -ok github.com/smallstep/certificates/api/log 0.022s +ok github.com/smallstep/certificates/api/log 0.019s === RUN TestJSON === RUN TestJSON/ok === RUN TestJSON/fail @@ -4696,33 +4732,33 @@ --- PASS: Test_badProtoJSONError_Render/bad_proto_normal_space (0.00s) --- PASS: Test_badProtoJSONError_Render/bad_proto_non_breaking_space (0.00s) PASS -ok github.com/smallstep/certificates/api/read 0.038s +ok github.com/smallstep/certificates/api/read 0.035s === RUN TestJSON --- PASS: TestJSON (0.00s) === RUN TestJSONPanics --- PASS: TestJSONPanics (0.00s) === RUN TestError === RUN TestError/0 -2025/07/08 23:51:41 some string +2026/08/12 08:17:39 some string === RUN TestError/1 -2025/07/08 23:51:41 123 +2026/08/12 08:17:39 123 --- PASS: TestError (0.00s) --- PASS: TestError/0 (0.00s) --- PASS: TestError/1 (0.00s) === RUN TestStatusCodeFromError --- PASS: TestStatusCodeFromError (0.00s) PASS -ok github.com/smallstep/certificates/api/render 0.029s +ok github.com/smallstep/certificates/api/render 0.026s === RUN TestAuthorityNew -=== RUN TestAuthorityNew/fail_bad_password -=== RUN TestAuthorityNew/fail_loading_CA_cert === RUN TestAuthorityNew/ok === RUN TestAuthorityNew/fail_bad_root ---- PASS: TestAuthorityNew (0.01s) - --- PASS: TestAuthorityNew/fail_bad_password (0.00s) - --- PASS: TestAuthorityNew/fail_loading_CA_cert (0.00s) +=== RUN TestAuthorityNew/fail_bad_password +=== RUN TestAuthorityNew/fail_loading_CA_cert +--- PASS: TestAuthorityNew (0.00s) --- PASS: TestAuthorityNew/ok (0.00s) --- PASS: TestAuthorityNew/fail_bad_root (0.00s) + --- PASS: TestAuthorityNew/fail_bad_password (0.00s) + --- PASS: TestAuthorityNew/fail_loading_CA_cert (0.00s) === RUN TestAuthority_GetDatabase === RUN TestAuthority_GetDatabase/ok === RUN TestAuthority_GetDatabase/ok_WithDatabase @@ -4777,26 +4813,26 @@ --- PASS: TestAuthority_GetID/ok_with_id (0.00s) === RUN TestAuthority_authorizeToken === RUN TestAuthority_authorizeToken/fail/mockNoSQLDB/error -=== RUN TestAuthority_authorizeToken/ok/simpledb -=== RUN TestAuthority_authorizeToken/fail/sha256/token-already-used -=== RUN TestAuthority_authorizeToken/ok/mockNoSQLDB -=== RUN TestAuthority_authorizeToken/fail/mockNoSQLDB/token-already-used === RUN TestAuthority_authorizeToken/fail/invalid-token === RUN TestAuthority_authorizeToken/fail/prehistoric-token === RUN TestAuthority_authorizeToken/fail/provisioner-not-found === RUN TestAuthority_authorizeToken/fail/simpledb/token-already-used === RUN TestAuthority_authorizeToken/ok/sha256 +=== RUN TestAuthority_authorizeToken/ok/mockNoSQLDB +=== RUN TestAuthority_authorizeToken/fail/mockNoSQLDB/token-already-used +=== RUN TestAuthority_authorizeToken/ok/simpledb +=== RUN TestAuthority_authorizeToken/fail/sha256/token-already-used --- PASS: TestAuthority_authorizeToken (0.03s) --- PASS: TestAuthority_authorizeToken/fail/mockNoSQLDB/error (0.00s) - --- PASS: TestAuthority_authorizeToken/ok/simpledb (0.00s) - --- PASS: TestAuthority_authorizeToken/fail/sha256/token-already-used (0.00s) - --- PASS: TestAuthority_authorizeToken/ok/mockNoSQLDB (0.00s) - --- PASS: TestAuthority_authorizeToken/fail/mockNoSQLDB/token-already-used (0.00s) --- PASS: TestAuthority_authorizeToken/fail/invalid-token (0.00s) --- PASS: TestAuthority_authorizeToken/fail/prehistoric-token (0.00s) --- PASS: TestAuthority_authorizeToken/fail/provisioner-not-found (0.00s) --- PASS: TestAuthority_authorizeToken/fail/simpledb/token-already-used (0.00s) --- PASS: TestAuthority_authorizeToken/ok/sha256 (0.00s) + --- PASS: TestAuthority_authorizeToken/ok/mockNoSQLDB (0.00s) + --- PASS: TestAuthority_authorizeToken/fail/mockNoSQLDB/token-already-used (0.00s) + --- PASS: TestAuthority_authorizeToken/ok/simpledb (0.00s) + --- PASS: TestAuthority_authorizeToken/fail/sha256/token-already-used (0.00s) === RUN TestAuthority_authorizeRevoke === RUN TestAuthority_authorizeRevoke/ok/token === RUN TestAuthority_authorizeRevoke/fail/token/invalid-token @@ -4814,55 +4850,55 @@ --- PASS: TestAuthority_authorizeSign/fail/invalid-subject (0.00s) --- PASS: TestAuthority_authorizeSign/ok (0.00s) === RUN TestAuthority_Authorize +=== RUN TestAuthority_Authorize/fail/sshRenew/disabled === RUN TestAuthority_Authorize/ok/sshRevoke === RUN TestAuthority_Authorize/fail/sshRekey/invalid-token -=== RUN TestAuthority_Authorize/ok/revoke -=== RUN TestAuthority_Authorize/fail/sshRevoke/invalid-token -=== RUN TestAuthority_Authorize/fail/sshRenew/disabled -=== RUN TestAuthority_Authorize/ok/sshRenew -=== RUN TestAuthority_Authorize/fail/unexpected-method === RUN TestAuthority_Authorize/default-to-signMethod -=== RUN TestAuthority_Authorize/ok/sshSign -=== RUN TestAuthority_Authorize/fail/sshRenew/invalid-token -=== RUN TestAuthority_Authorize/fail/sshRekey/disabled -=== RUN TestAuthority_Authorize/ok/sshRekey === RUN TestAuthority_Authorize/fail/sign/invalid-token === RUN TestAuthority_Authorize/ok/sign -=== RUN TestAuthority_Authorize/fail/revoke/invalid-token === RUN TestAuthority_Authorize/fail/sshSign/invalid-token +=== RUN TestAuthority_Authorize/fail/sshRevoke/invalid-token +=== RUN TestAuthority_Authorize/fail/sshRekey/disabled === RUN TestAuthority_Authorize/fail/sshSign/disabled +=== RUN TestAuthority_Authorize/fail/sshRenew/invalid-token +=== RUN TestAuthority_Authorize/ok/sshRenew +=== RUN TestAuthority_Authorize/fail/unexpected-method +=== RUN TestAuthority_Authorize/ok/revoke +=== RUN TestAuthority_Authorize/ok/sshRekey +=== RUN TestAuthority_Authorize/fail/revoke/invalid-token +=== RUN TestAuthority_Authorize/ok/sshSign --- PASS: TestAuthority_Authorize (0.03s) + --- PASS: TestAuthority_Authorize/fail/sshRenew/disabled (0.00s) --- PASS: TestAuthority_Authorize/ok/sshRevoke (0.00s) --- PASS: TestAuthority_Authorize/fail/sshRekey/invalid-token (0.00s) - --- PASS: TestAuthority_Authorize/ok/revoke (0.00s) - --- PASS: TestAuthority_Authorize/fail/sshRevoke/invalid-token (0.00s) - --- PASS: TestAuthority_Authorize/fail/sshRenew/disabled (0.00s) - --- PASS: TestAuthority_Authorize/ok/sshRenew (0.00s) - --- PASS: TestAuthority_Authorize/fail/unexpected-method (0.00s) --- PASS: TestAuthority_Authorize/default-to-signMethod (0.00s) - --- PASS: TestAuthority_Authorize/ok/sshSign (0.00s) - --- PASS: TestAuthority_Authorize/fail/sshRenew/invalid-token (0.00s) - --- PASS: TestAuthority_Authorize/fail/sshRekey/disabled (0.00s) - --- PASS: TestAuthority_Authorize/ok/sshRekey (0.00s) --- PASS: TestAuthority_Authorize/fail/sign/invalid-token (0.00s) --- PASS: TestAuthority_Authorize/ok/sign (0.00s) - --- PASS: TestAuthority_Authorize/fail/revoke/invalid-token (0.00s) --- PASS: TestAuthority_Authorize/fail/sshSign/invalid-token (0.00s) + --- PASS: TestAuthority_Authorize/fail/sshRevoke/invalid-token (0.00s) + --- PASS: TestAuthority_Authorize/fail/sshRekey/disabled (0.00s) --- PASS: TestAuthority_Authorize/fail/sshSign/disabled (0.00s) + --- PASS: TestAuthority_Authorize/fail/sshRenew/invalid-token (0.00s) + --- PASS: TestAuthority_Authorize/ok/sshRenew (0.00s) + --- PASS: TestAuthority_Authorize/fail/unexpected-method (0.00s) + --- PASS: TestAuthority_Authorize/ok/revoke (0.00s) + --- PASS: TestAuthority_Authorize/ok/sshRekey (0.00s) + --- PASS: TestAuthority_Authorize/fail/revoke/invalid-token (0.00s) + --- PASS: TestAuthority_Authorize/ok/sshSign (0.00s) === RUN TestAuthority_authorizeRenew -=== RUN TestAuthority_authorizeRenew/fail/revoked -=== RUN TestAuthority_authorizeRenew/fail/load-provisioner === RUN TestAuthority_authorizeRenew/fail/provisioner-authorize-renewal-fail === RUN TestAuthority_authorizeRenew/ok === RUN TestAuthority_authorizeRenew/ok/from_db === RUN TestAuthority_authorizeRenew/fail/db.IsRevoked-error +=== RUN TestAuthority_authorizeRenew/fail/revoked +=== RUN TestAuthority_authorizeRenew/fail/load-provisioner --- PASS: TestAuthority_authorizeRenew (0.00s) - --- PASS: TestAuthority_authorizeRenew/fail/revoked (0.00s) - --- PASS: TestAuthority_authorizeRenew/fail/load-provisioner (0.00s) --- PASS: TestAuthority_authorizeRenew/fail/provisioner-authorize-renewal-fail (0.00s) --- PASS: TestAuthority_authorizeRenew/ok (0.00s) --- PASS: TestAuthority_authorizeRenew/ok/from_db (0.00s) --- PASS: TestAuthority_authorizeRenew/fail/db.IsRevoked-error (0.00s) + --- PASS: TestAuthority_authorizeRenew/fail/revoked (0.00s) + --- PASS: TestAuthority_authorizeRenew/fail/load-provisioner (0.00s) === RUN TestAuthority_authorizeSSHSign === RUN TestAuthority_authorizeSSHSign/fail/invalid-token === RUN TestAuthority_authorizeSSHSign/fail/invalid-subject @@ -4872,33 +4908,33 @@ --- PASS: TestAuthority_authorizeSSHSign/fail/invalid-subject (0.00s) --- PASS: TestAuthority_authorizeSSHSign/ok (0.00s) === RUN TestAuthority_authorizeSSHRenew +=== RUN TestAuthority_authorizeSSHRenew/ok/WithAuthorizeSSHRenewFunc === RUN TestAuthority_authorizeSSHRenew/fail/invalid-token === RUN TestAuthority_authorizeSSHRenew/fail/sshRenew-unimplemented-jwk-provisioner === RUN TestAuthority_authorizeSSHRenew/fail/WithAuthorizeSSHRenewFunc === RUN TestAuthority_authorizeSSHRenew/ok -=== RUN TestAuthority_authorizeSSHRenew/ok/WithAuthorizeSSHRenewFunc ---- PASS: TestAuthority_authorizeSSHRenew (0.04s) +--- PASS: TestAuthority_authorizeSSHRenew (0.03s) + --- PASS: TestAuthority_authorizeSSHRenew/ok/WithAuthorizeSSHRenewFunc (0.00s) --- PASS: TestAuthority_authorizeSSHRenew/fail/invalid-token (0.00s) --- PASS: TestAuthority_authorizeSSHRenew/fail/sshRenew-unimplemented-jwk-provisioner (0.00s) --- PASS: TestAuthority_authorizeSSHRenew/fail/WithAuthorizeSSHRenewFunc (0.00s) --- PASS: TestAuthority_authorizeSSHRenew/ok (0.00s) - --- PASS: TestAuthority_authorizeSSHRenew/ok/WithAuthorizeSSHRenewFunc (0.00s) === RUN TestAuthority_authorizeSSHRevoke -=== RUN TestAuthority_authorizeSSHRevoke/ok === RUN TestAuthority_authorizeSSHRevoke/fail/invalid-token === RUN TestAuthority_authorizeSSHRevoke/fail/invalid-subject ---- PASS: TestAuthority_authorizeSSHRevoke (0.03s) - --- PASS: TestAuthority_authorizeSSHRevoke/ok (0.00s) +=== RUN TestAuthority_authorizeSSHRevoke/ok +--- PASS: TestAuthority_authorizeSSHRevoke (0.02s) --- PASS: TestAuthority_authorizeSSHRevoke/fail/invalid-token (0.00s) --- PASS: TestAuthority_authorizeSSHRevoke/fail/invalid-subject (0.00s) + --- PASS: TestAuthority_authorizeSSHRevoke/ok (0.00s) === RUN TestAuthority_authorizeSSHRekey +=== RUN TestAuthority_authorizeSSHRekey/fail/invalid-token === RUN TestAuthority_authorizeSSHRekey/fail/sshRekey-unimplemented-jwk-provisioner === RUN TestAuthority_authorizeSSHRekey/ok -=== RUN TestAuthority_authorizeSSHRekey/fail/invalid-token --- PASS: TestAuthority_authorizeSSHRekey (0.02s) + --- PASS: TestAuthority_authorizeSSHRekey/fail/invalid-token (0.00s) --- PASS: TestAuthority_authorizeSSHRekey/fail/sshRekey-unimplemented-jwk-provisioner (0.00s) --- PASS: TestAuthority_authorizeSSHRekey/ok (0.00s) - --- PASS: TestAuthority_authorizeSSHRekey/fail/invalid-token (0.00s) === RUN TestAuthority_AuthorizeRenewToken === RUN TestAuthority_AuthorizeRenewToken/ok === RUN TestAuthority_AuthorizeRenewToken/ok_expired_cert @@ -4913,12 +4949,12 @@ === RUN TestAuthority_AuthorizeRenewToken/fail_token_iat#01 === RUN TestAuthority_AuthorizeRenewToken/fail_token_iat#02 === RUN TestAuthority_AuthorizeRenewToken/fail_token_aud ---- PASS: TestAuthority_AuthorizeRenewToken (0.04s) +--- PASS: TestAuthority_AuthorizeRenewToken (0.03s) --- PASS: TestAuthority_AuthorizeRenewToken/ok (0.00s) --- PASS: TestAuthority_AuthorizeRenewToken/ok_expired_cert (0.00s) --- PASS: TestAuthority_AuthorizeRenewToken/ok_provisioner_issuer (0.00s) --- PASS: TestAuthority_AuthorizeRenewToken/fail_token (0.00s) - --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_reuse (0.01s) + --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_reuse (0.00s) --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_signature (0.00s) --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_provisioner (0.00s) --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_iss (0.00s) @@ -4928,23 +4964,23 @@ --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_iat#02 (0.00s) --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_aud (0.00s) === RUN TestAuthority_checkPolicy -=== RUN TestAuthority_checkPolicy/ok/policy -=== RUN TestAuthority_checkPolicy/fail/NewX509PolicyEngine-error -=== RUN TestAuthority_checkPolicy/fail/currentAdmin-evaluation-error === RUN TestAuthority_checkPolicy/fail/currentAdmin-lockout === RUN TestAuthority_checkPolicy/fail/otherAdmins-evaluation-error === RUN TestAuthority_checkPolicy/fail/otherAdmins-lockout === RUN TestAuthority_checkPolicy/ok/no-policy === RUN TestAuthority_checkPolicy/ok/empty-policy +=== RUN TestAuthority_checkPolicy/ok/policy +=== RUN TestAuthority_checkPolicy/fail/NewX509PolicyEngine-error +=== RUN TestAuthority_checkPolicy/fail/currentAdmin-evaluation-error --- PASS: TestAuthority_checkPolicy (0.00s) - --- PASS: TestAuthority_checkPolicy/ok/policy (0.00s) - --- PASS: TestAuthority_checkPolicy/fail/NewX509PolicyEngine-error (0.00s) - --- PASS: TestAuthority_checkPolicy/fail/currentAdmin-evaluation-error (0.00s) --- PASS: TestAuthority_checkPolicy/fail/currentAdmin-lockout (0.00s) --- PASS: TestAuthority_checkPolicy/fail/otherAdmins-evaluation-error (0.00s) --- PASS: TestAuthority_checkPolicy/fail/otherAdmins-lockout (0.00s) --- PASS: TestAuthority_checkPolicy/ok/no-policy (0.00s) --- PASS: TestAuthority_checkPolicy/ok/empty-policy (0.00s) + --- PASS: TestAuthority_checkPolicy/ok/policy (0.00s) + --- PASS: TestAuthority_checkPolicy/fail/NewX509PolicyEngine-error (0.00s) + --- PASS: TestAuthority_checkPolicy/fail/currentAdmin-evaluation-error (0.00s) === RUN TestAuthority_reloadPolicyEngines === RUN TestAuthority_reloadPolicyEngines/fail/standalone-x509-policy === RUN TestAuthority_reloadPolicyEngines/fail/standalone-ssh-host-policy @@ -5062,13 +5098,13 @@ --- PASS: TestAuthority_LoadProvisionerByCertificate/fail_from_db (0.00s) --- PASS: TestAuthority_LoadProvisionerByCertificate/fail_from_admindb (0.00s) === RUN TestRoot -=== RUN TestRoot/success === RUN TestRoot/not-found === RUN TestRoot/invalid-stored-certificate +=== RUN TestRoot/success --- PASS: TestRoot (0.00s) - --- PASS: TestRoot/success (0.00s) --- PASS: TestRoot/not-found (0.00s) --- PASS: TestRoot/invalid-stored-certificate (0.00s) + --- PASS: TestRoot/success (0.00s) === RUN TestAuthority_GetRootCertificate === RUN TestAuthority_GetRootCertificate/ok --- PASS: TestAuthority_GetRootCertificate (0.00s) @@ -5173,7 +5209,7 @@ === RUN TestAuthority_SignSSHAddUser/fail-no-user-cert === RUN TestAuthority_SignSSHAddUser/fail-no-principals === RUN TestAuthority_SignSSHAddUser/fail-many-principals ---- PASS: TestAuthority_SignSSHAddUser (0.01s) +--- PASS: TestAuthority_SignSSHAddUser (0.00s) --- PASS: TestAuthority_SignSSHAddUser/ok (0.00s) --- PASS: TestAuthority_SignSSHAddUser/ok-no-host-key (0.00s) --- PASS: TestAuthority_SignSSHAddUser/ok-custom-principal (0.00s) @@ -5212,7 +5248,7 @@ === RUN TestAuthority_GetSSHConfig/noTemplates === RUN TestAuthority_GetSSHConfig/missingData === RUN TestAuthority_GetSSHConfig/failError ---- PASS: TestAuthority_GetSSHConfig (0.02s) +--- PASS: TestAuthority_GetSSHConfig (0.01s) --- PASS: TestAuthority_GetSSHConfig/user (0.00s) --- PASS: TestAuthority_GetSSHConfig/user#01 (0.00s) --- PASS: TestAuthority_GetSSHConfig/host (0.00s) @@ -5282,27 +5318,27 @@ --- PASS: TestAuthority_GetSSHHosts/fail/db-get-fail (0.00s) --- PASS: TestAuthority_GetSSHHosts/ok (0.00s) === RUN TestAuthority_RekeySSH -=== RUN TestAuthority_RekeySSH/fail/is-revoked-error -=== RUN TestAuthority_RekeySSH/fail/old-cert-validAfter +=== RUN TestAuthority_RekeySSH/fail/old-cert-validBefore === RUN TestAuthority_RekeySSH/fail/old-cert-no-user-key +=== RUN TestAuthority_RekeySSH/ok +=== RUN TestAuthority_RekeySSH/fail/old-cert-validAfter +=== RUN TestAuthority_RekeySSH/fail/old-cert-no-host-key +=== RUN TestAuthority_RekeySSH/fail/unexpected-old-cert-type === RUN TestAuthority_RekeySSH/fail/db-store === RUN TestAuthority_RekeySSH/fail/is-revoked +=== RUN TestAuthority_RekeySSH/fail/is-revoked-error === RUN TestAuthority_RekeySSH/fail/opts-type -=== RUN TestAuthority_RekeySSH/fail/old-cert-validBefore -=== RUN TestAuthority_RekeySSH/fail/old-cert-no-host-key -=== RUN TestAuthority_RekeySSH/fail/unexpected-old-cert-type -=== RUN TestAuthority_RekeySSH/ok --- PASS: TestAuthority_RekeySSH (0.00s) - --- PASS: TestAuthority_RekeySSH/fail/is-revoked-error (0.00s) - --- PASS: TestAuthority_RekeySSH/fail/old-cert-validAfter (0.00s) + --- PASS: TestAuthority_RekeySSH/fail/old-cert-validBefore (0.00s) --- PASS: TestAuthority_RekeySSH/fail/old-cert-no-user-key (0.00s) + --- PASS: TestAuthority_RekeySSH/ok (0.00s) + --- PASS: TestAuthority_RekeySSH/fail/old-cert-validAfter (0.00s) + --- PASS: TestAuthority_RekeySSH/fail/old-cert-no-host-key (0.00s) + --- PASS: TestAuthority_RekeySSH/fail/unexpected-old-cert-type (0.00s) --- PASS: TestAuthority_RekeySSH/fail/db-store (0.00s) --- PASS: TestAuthority_RekeySSH/fail/is-revoked (0.00s) + --- PASS: TestAuthority_RekeySSH/fail/is-revoked-error (0.00s) --- PASS: TestAuthority_RekeySSH/fail/opts-type (0.00s) - --- PASS: TestAuthority_RekeySSH/fail/old-cert-validBefore (0.00s) - --- PASS: TestAuthority_RekeySSH/fail/old-cert-no-host-key (0.00s) - --- PASS: TestAuthority_RekeySSH/fail/unexpected-old-cert-type (0.00s) - --- PASS: TestAuthority_RekeySSH/ok (0.00s) === RUN TestIsValidForAddUser === RUN TestIsValidForAddUser/ok === RUN TestIsValidForAddUser/ok_oidc @@ -5320,119 +5356,119 @@ --- PASS: TestIsValidForAddUser/fail_no_principals (0.00s) --- PASS: TestIsValidForAddUser/fail_extra_principals (0.00s) === RUN TestAuthority_Sign -=== RUN TestAuthority_Sign/ok_with_policy -CN=smallstep test,O=Acme Co,STREET=TNT,L=Landscapes,ST=Sudden Cliffs,C=Tazmania -=== RUN TestAuthority_Sign/fail_create_cert -=== RUN TestAuthority_Sign/ok/csr_with_no_template_critical_SAN_extension +=== RUN TestAuthority_Sign/fail_bad_JSON_value_template_file +=== RUN TestAuthority_Sign/ok_with_enforced_modifier === RUN TestAuthority_Sign/fail_invalid_signature === RUN TestAuthority_Sign/fail_invalid_extra_option -=== RUN TestAuthority_Sign/fail_bad_JSON_value_template_file -=== RUN TestAuthority_Sign/fail_with_provisioner_enforcer === RUN TestAuthority_Sign/fail_provisioner_duration_claim === RUN TestAuthority_Sign/fail_validate_sans_when_adding_common_name_not_in_claims === RUN TestAuthority_Sign/fail_rsa_key_too_short -=== RUN TestAuthority_Sign/fail_store_cert_in_db -=== RUN TestAuthority_Sign/fail_with_custom_enforcer -=== RUN TestAuthority_Sign/fail_with_policy -=== RUN TestAuthority_Sign/ok -=== RUN TestAuthority_Sign/ok_with_enforced_modifier +=== RUN TestAuthority_Sign/fail_with_provisioner_enforcer === RUN TestAuthority_Sign/fail_merge_default_ASN1DN -=== RUN TestAuthority_Sign/fail_custom_template === RUN TestAuthority_Sign/fail_bad_JSON_syntax_template_file +=== RUN TestAuthority_Sign/fail_with_policy === RUN TestAuthority_Sign/ok_with_custom_template +=== RUN TestAuthority_Sign/ok/csr_with_no_template_critical_SAN_extension === RUN TestAuthority_Sign/ok_with_custom_enforcer ---- PASS: TestAuthority_Sign (0.06s) - --- PASS: TestAuthority_Sign/ok_with_policy (0.00s) - --- PASS: TestAuthority_Sign/fail_create_cert (0.00s) - --- PASS: TestAuthority_Sign/ok/csr_with_no_template_critical_SAN_extension (0.00s) +=== RUN TestAuthority_Sign/fail_store_cert_in_db +=== RUN TestAuthority_Sign/fail_with_custom_enforcer +=== RUN TestAuthority_Sign/ok +=== RUN TestAuthority_Sign/ok_with_policy +CN=smallstep test,O=Acme Co,STREET=TNT,L=Landscapes,ST=Sudden Cliffs,C=Tazmania +=== RUN TestAuthority_Sign/fail_create_cert +=== RUN TestAuthority_Sign/fail_custom_template +--- PASS: TestAuthority_Sign (0.05s) + --- PASS: TestAuthority_Sign/fail_bad_JSON_value_template_file (0.00s) + --- PASS: TestAuthority_Sign/ok_with_enforced_modifier (0.00s) --- PASS: TestAuthority_Sign/fail_invalid_signature (0.00s) --- PASS: TestAuthority_Sign/fail_invalid_extra_option (0.00s) - --- PASS: TestAuthority_Sign/fail_bad_JSON_value_template_file (0.00s) - --- PASS: TestAuthority_Sign/fail_with_provisioner_enforcer (0.00s) --- PASS: TestAuthority_Sign/fail_provisioner_duration_claim (0.00s) --- PASS: TestAuthority_Sign/fail_validate_sans_when_adding_common_name_not_in_claims (0.00s) --- PASS: TestAuthority_Sign/fail_rsa_key_too_short (0.00s) - --- PASS: TestAuthority_Sign/fail_store_cert_in_db (0.00s) - --- PASS: TestAuthority_Sign/fail_with_custom_enforcer (0.00s) - --- PASS: TestAuthority_Sign/fail_with_policy (0.00s) - --- PASS: TestAuthority_Sign/ok (0.00s) - --- PASS: TestAuthority_Sign/ok_with_enforced_modifier (0.00s) + --- PASS: TestAuthority_Sign/fail_with_provisioner_enforcer (0.00s) --- PASS: TestAuthority_Sign/fail_merge_default_ASN1DN (0.00s) - --- PASS: TestAuthority_Sign/fail_custom_template (0.00s) --- PASS: TestAuthority_Sign/fail_bad_JSON_syntax_template_file (0.00s) + --- PASS: TestAuthority_Sign/fail_with_policy (0.00s) --- PASS: TestAuthority_Sign/ok_with_custom_template (0.00s) + --- PASS: TestAuthority_Sign/ok/csr_with_no_template_critical_SAN_extension (0.00s) --- PASS: TestAuthority_Sign/ok_with_custom_enforcer (0.00s) + --- PASS: TestAuthority_Sign/fail_store_cert_in_db (0.00s) + --- PASS: TestAuthority_Sign/fail_with_custom_enforcer (0.00s) + --- PASS: TestAuthority_Sign/ok (0.00s) + --- PASS: TestAuthority_Sign/ok_with_policy (0.00s) + --- PASS: TestAuthority_Sign/fail_create_cert (0.00s) + --- PASS: TestAuthority_Sign/fail_custom_template (0.00s) === RUN TestAuthority_Renew -=== RUN TestAuthority_Renew/fail/WithAuthorizeRenewFunc -=== RUN TestAuthority_Renew/ok -=== RUN TestAuthority_Renew/ok/success-new-intermediate === RUN TestAuthority_Renew/ok/WithAuthorizeRenewFunc === RUN TestAuthority_Renew/fail/create-cert === RUN TestAuthority_Renew/fail/unauthorized ---- PASS: TestAuthority_Renew (0.02s) - --- PASS: TestAuthority_Renew/fail/WithAuthorizeRenewFunc (0.00s) - --- PASS: TestAuthority_Renew/ok (0.00s) - --- PASS: TestAuthority_Renew/ok/success-new-intermediate (0.01s) +=== RUN TestAuthority_Renew/fail/WithAuthorizeRenewFunc +=== RUN TestAuthority_Renew/ok +=== RUN TestAuthority_Renew/ok/success-new-intermediate +--- PASS: TestAuthority_Renew (0.01s) --- PASS: TestAuthority_Renew/ok/WithAuthorizeRenewFunc (0.00s) --- PASS: TestAuthority_Renew/fail/create-cert (0.00s) --- PASS: TestAuthority_Renew/fail/unauthorized (0.00s) + --- PASS: TestAuthority_Renew/fail/WithAuthorizeRenewFunc (0.00s) + --- PASS: TestAuthority_Renew/ok (0.00s) + --- PASS: TestAuthority_Renew/ok/success-new-intermediate (0.00s) === RUN TestAuthority_Rekey -=== RUN TestAuthority_Rekey/fail/create-cert -=== RUN TestAuthority_Rekey/fail/unauthorized === RUN TestAuthority_Rekey/ok/renew === RUN TestAuthority_Rekey/ok/rekey === RUN TestAuthority_Rekey/ok/renew/success-new-intermediate +=== RUN TestAuthority_Rekey/fail/create-cert +=== RUN TestAuthority_Rekey/fail/unauthorized --- PASS: TestAuthority_Rekey (0.01s) - --- PASS: TestAuthority_Rekey/fail/create-cert (0.00s) - --- PASS: TestAuthority_Rekey/fail/unauthorized (0.00s) --- PASS: TestAuthority_Rekey/ok/renew (0.00s) --- PASS: TestAuthority_Rekey/ok/rekey (0.00s) --- PASS: TestAuthority_Rekey/ok/renew/success-new-intermediate (0.00s) + --- PASS: TestAuthority_Rekey/fail/create-cert (0.00s) + --- PASS: TestAuthority_Rekey/fail/unauthorized (0.00s) === RUN TestAuthority_GetTLSOptions -=== RUN TestAuthority_GetTLSOptions/non-default === RUN TestAuthority_GetTLSOptions/default +=== RUN TestAuthority_GetTLSOptions/non-default --- PASS: TestAuthority_GetTLSOptions (0.00s) - --- PASS: TestAuthority_GetTLSOptions/non-default (0.00s) --- PASS: TestAuthority_GetTLSOptions/default (0.00s) + --- PASS: TestAuthority_GetTLSOptions/non-default (0.00s) === RUN TestAuthority_Revoke +=== RUN TestAuthority_Revoke/fail/already-revoked +=== RUN TestAuthority_Revoke/ok/token +=== RUN TestAuthority_Revoke/ok/mTLS-no-provisioner +=== RUN TestAuthority_Revoke/ok/ACME === RUN TestAuthority_Revoke/fail/token/authorizeRevoke_error === RUN TestAuthority_Revoke/fail/nil-db === RUN TestAuthority_Revoke/fail/db-revoke -=== RUN TestAuthority_Revoke/fail/already-revoked -=== RUN TestAuthority_Revoke/ok/mTLS-no-provisioner -=== RUN TestAuthority_Revoke/ok/ssh -=== RUN TestAuthority_Revoke/ok/token === RUN TestAuthority_Revoke/ok/mTLS -=== RUN TestAuthority_Revoke/ok/ACME ---- PASS: TestAuthority_Revoke (0.04s) +=== RUN TestAuthority_Revoke/ok/ssh +--- PASS: TestAuthority_Revoke (0.03s) + --- PASS: TestAuthority_Revoke/fail/already-revoked (0.00s) + --- PASS: TestAuthority_Revoke/ok/token (0.00s) + --- PASS: TestAuthority_Revoke/ok/mTLS-no-provisioner (0.00s) + --- PASS: TestAuthority_Revoke/ok/ACME (0.00s) --- PASS: TestAuthority_Revoke/fail/token/authorizeRevoke_error (0.00s) --- PASS: TestAuthority_Revoke/fail/nil-db (0.00s) --- PASS: TestAuthority_Revoke/fail/db-revoke (0.00s) - --- PASS: TestAuthority_Revoke/fail/already-revoked (0.00s) - --- PASS: TestAuthority_Revoke/ok/mTLS-no-provisioner (0.00s) - --- PASS: TestAuthority_Revoke/ok/ssh (0.00s) - --- PASS: TestAuthority_Revoke/ok/token (0.00s) --- PASS: TestAuthority_Revoke/ok/mTLS (0.00s) - --- PASS: TestAuthority_Revoke/ok/ACME (0.00s) + --- PASS: TestAuthority_Revoke/ok/ssh (0.00s) PASS -ok github.com/smallstep/certificates/authority 0.657s +ok github.com/smallstep/certificates/authority 0.586s ? github.com/smallstep/certificates/authority/admin [no test files] === RUN TestHandler_requireEABEnabled +=== RUN TestHandler_requireEABEnabled/fail/prov.GetDetails +2026/08/12 08:17:41 error getting ACME details for provisioner 'provName' +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error getting ACME details for provisioner 'provName'"} === RUN TestHandler_requireEABEnabled/fail/prov.GetDetails.GetACME -2025/07/08 23:51:43 error getting ACME details for provisioner 'provName' -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error getting ACME details for provisioner 'provName'"} +2026/08/12 08:17:41 error getting ACME details for provisioner 'provName' +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error getting ACME details for provisioner 'provName'"} === RUN TestHandler_requireEABEnabled/ok/eab-disabled -2025/07/08 23:51:43 ACME EAB not enabled for provisioner 'provName' -2025/07/08 23:51:43 {"type":"badRequest","detail":"bad request","message":"ACME EAB not enabled for provisioner 'provName'"} +2026/08/12 08:17:41 ACME EAB not enabled for provisioner 'provName' +2026/08/12 08:17:41 {"type":"badRequest","detail":"bad request","message":"ACME EAB not enabled for provisioner 'provName'"} === RUN TestHandler_requireEABEnabled/ok/eab-enabled -=== RUN TestHandler_requireEABEnabled/fail/prov.GetDetails -2025/07/08 23:51:43 error getting ACME details for provisioner 'provName' -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error getting ACME details for provisioner 'provName'"} --- PASS: TestHandler_requireEABEnabled (0.00s) + --- PASS: TestHandler_requireEABEnabled/fail/prov.GetDetails (0.00s) --- PASS: TestHandler_requireEABEnabled/fail/prov.GetDetails.GetACME (0.00s) --- PASS: TestHandler_requireEABEnabled/ok/eab-disabled (0.00s) --- PASS: TestHandler_requireEABEnabled/ok/eab-enabled (0.00s) - --- PASS: TestHandler_requireEABEnabled/fail/prov.GetDetails (0.00s) === RUN TestCreateExternalAccountKeyRequest_Validate === RUN TestCreateExternalAccountKeyRequest_Validate/fail/reference-too-long === RUN TestCreateExternalAccountKeyRequest_Validate/ok/empty-reference @@ -5443,20 +5479,20 @@ --- PASS: TestCreateExternalAccountKeyRequest_Validate/ok (0.00s) === RUN TestHandler_CreateExternalAccountKey === RUN TestHandler_CreateExternalAccountKey/ok -2025/07/08 23:51:43 this functionality is currently only available in Certificate Manager: https://u.step.sm/cm -2025/07/08 23:51:43 {"type":"notImplemented","detail":"not implemented","message":"this functionality is currently only available in Certificate Manager: https://u.step.sm/cm"} +2026/08/12 08:17:41 this functionality is currently only available in Certificate Manager: https://u.step.sm/cm +2026/08/12 08:17:41 {"type":"notImplemented","detail":"not implemented","message":"this functionality is currently only available in Certificate Manager: https://u.step.sm/cm"} --- PASS: TestHandler_CreateExternalAccountKey (0.00s) --- PASS: TestHandler_CreateExternalAccountKey/ok (0.00s) === RUN TestHandler_DeleteExternalAccountKey === RUN TestHandler_DeleteExternalAccountKey/ok -2025/07/08 23:51:43 this functionality is currently only available in Certificate Manager: https://u.step.sm/cm -2025/07/08 23:51:43 {"type":"notImplemented","detail":"not implemented","message":"this functionality is currently only available in Certificate Manager: https://u.step.sm/cm"} +2026/08/12 08:17:41 this functionality is currently only available in Certificate Manager: https://u.step.sm/cm +2026/08/12 08:17:41 {"type":"notImplemented","detail":"not implemented","message":"this functionality is currently only available in Certificate Manager: https://u.step.sm/cm"} --- PASS: TestHandler_DeleteExternalAccountKey (0.00s) --- PASS: TestHandler_DeleteExternalAccountKey/ok (0.00s) === RUN TestHandler_GetExternalAccountKeys === RUN TestHandler_GetExternalAccountKeys/ok -2025/07/08 23:51:43 this functionality is currently only available in Certificate Manager: https://u.step.sm/cm -2025/07/08 23:51:43 {"type":"notImplemented","detail":"not implemented","message":"this functionality is currently only available in Certificate Manager: https://u.step.sm/cm"} +2026/08/12 08:17:41 this functionality is currently only available in Certificate Manager: https://u.step.sm/cm +2026/08/12 08:17:41 {"type":"notImplemented","detail":"not implemented","message":"this functionality is currently only available in Certificate Manager: https://u.step.sm/cm"} --- PASS: TestHandler_GetExternalAccountKeys (0.00s) --- PASS: TestHandler_GetExternalAccountKeys/ok (0.00s) === RUN Test_eakToLinked @@ -5495,95 +5531,95 @@ --- PASS: TestUpdateAdminRequest_Validate/ok (0.00s) === RUN TestHandler_GetAdmin === RUN TestHandler_GetAdmin/fail/auth.LoadAdminByID-not-found -2025/07/08 23:51:43 admin adminID not found -2025/07/08 23:51:43 {"type":"notFound","detail":"resource not found","message":"admin adminID not found"} +2026/08/12 08:17:41 admin adminID not found +2026/08/12 08:17:41 {"type":"notFound","detail":"resource not found","message":"admin adminID not found"} === RUN TestHandler_GetAdmin/ok --- PASS: TestHandler_GetAdmin (0.00s) --- PASS: TestHandler_GetAdmin/fail/auth.LoadAdminByID-not-found (0.00s) --- PASS: TestHandler_GetAdmin/ok (0.00s) === RUN TestHandler_GetAdmins -=== RUN TestHandler_GetAdmins/fail/parse-cursor -2025/07/08 23:51:43 error parsing cursor and limit from query params: limit 'A' is not an integer: strconv.Atoi: parsing "A": invalid syntax -2025/07/08 23:51:43 {"type":"badRequest","detail":"bad request","message":"error parsing cursor and limit from query params: limit 'A' is not an integer: strconv.Atoi: parsing \"A\": invalid syntax"} === RUN TestHandler_GetAdmins/fail/auth.GetAdmins -2025/07/08 23:51:43 error retrieving paginated admins: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving paginated admins: force"} +2026/08/12 08:17:41 error retrieving paginated admins: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving paginated admins: force"} === RUN TestHandler_GetAdmins/ok +=== RUN TestHandler_GetAdmins/fail/parse-cursor +2026/08/12 08:17:41 error parsing cursor and limit from query params: limit 'A' is not an integer: strconv.Atoi: parsing "A": invalid syntax +2026/08/12 08:17:41 {"type":"badRequest","detail":"bad request","message":"error parsing cursor and limit from query params: limit 'A' is not an integer: strconv.Atoi: parsing \"A\": invalid syntax"} --- PASS: TestHandler_GetAdmins (0.00s) - --- PASS: TestHandler_GetAdmins/fail/parse-cursor (0.00s) --- PASS: TestHandler_GetAdmins/fail/auth.GetAdmins (0.00s) --- PASS: TestHandler_GetAdmins/ok (0.00s) + --- PASS: TestHandler_GetAdmins/fail/parse-cursor (0.00s) === RUN TestHandler_CreateAdmin +=== RUN TestHandler_CreateAdmin/ok === RUN TestHandler_CreateAdmin/fail/ReadJSON -2025/07/08 23:51:43 error reading request body: error decoding json: invalid character '!' looking for beginning of object key string -2025/07/08 23:51:43 {"type":"badRequest","detail":"bad request","message":"error reading request body: error decoding json: invalid character '!' looking for beginning of object key string"} +2026/08/12 08:17:41 error reading request body: error decoding json: invalid character '!' looking for beginning of object key string +2026/08/12 08:17:41 {"type":"badRequest","detail":"bad request","message":"error reading request body: error decoding json: invalid character '!' looking for beginning of object key string"} === RUN TestHandler_CreateAdmin/fail/validate -2025/07/08 23:51:43 subject cannot be empty -2025/07/08 23:51:43 {"type":"badRequest","detail":"bad request","message":"subject cannot be empty"} +2026/08/12 08:17:41 subject cannot be empty +2026/08/12 08:17:41 {"type":"badRequest","detail":"bad request","message":"subject cannot be empty"} === RUN TestHandler_CreateAdmin/fail/auth.LoadProvisionerByName -2025/07/08 23:51:43 error loading provisioner prov: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner prov: force"} +2026/08/12 08:17:41 error loading provisioner prov: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner prov: force"} === RUN TestHandler_CreateAdmin/fail/auth.StoreAdmin -2025/07/08 23:51:43 error storing admin: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error storing admin: force"} -=== RUN TestHandler_CreateAdmin/ok +2026/08/12 08:17:41 error storing admin: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error storing admin: force"} --- PASS: TestHandler_CreateAdmin (0.00s) + --- PASS: TestHandler_CreateAdmin/ok (0.00s) --- PASS: TestHandler_CreateAdmin/fail/ReadJSON (0.00s) --- PASS: TestHandler_CreateAdmin/fail/validate (0.00s) --- PASS: TestHandler_CreateAdmin/fail/auth.LoadProvisionerByName (0.00s) --- PASS: TestHandler_CreateAdmin/fail/auth.StoreAdmin (0.00s) - --- PASS: TestHandler_CreateAdmin/ok (0.00s) === RUN TestHandler_DeleteAdmin -=== RUN TestHandler_DeleteAdmin/fail/auth.RemoveAdmin -2025/07/08 23:51:43 error deleting admin adminID: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error deleting admin adminID: force"} === RUN TestHandler_DeleteAdmin/ok +=== RUN TestHandler_DeleteAdmin/fail/auth.RemoveAdmin +2026/08/12 08:17:41 error deleting admin adminID: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error deleting admin adminID: force"} --- PASS: TestHandler_DeleteAdmin (0.00s) - --- PASS: TestHandler_DeleteAdmin/fail/auth.RemoveAdmin (0.00s) --- PASS: TestHandler_DeleteAdmin/ok (0.00s) + --- PASS: TestHandler_DeleteAdmin/fail/auth.RemoveAdmin (0.00s) === RUN TestHandler_UpdateAdmin +=== RUN TestHandler_UpdateAdmin/ok === RUN TestHandler_UpdateAdmin/fail/ReadJSON -2025/07/08 23:51:43 error reading request body: error decoding json: invalid character '!' looking for beginning of object key string -2025/07/08 23:51:43 {"type":"badRequest","detail":"bad request","message":"error reading request body: error decoding json: invalid character '!' looking for beginning of object key string"} +2026/08/12 08:17:41 error reading request body: error decoding json: invalid character '!' looking for beginning of object key string +2026/08/12 08:17:41 {"type":"badRequest","detail":"bad request","message":"error reading request body: error decoding json: invalid character '!' looking for beginning of object key string"} === RUN TestHandler_UpdateAdmin/fail/validate -2025/07/08 23:51:43 invalid value for admin type -2025/07/08 23:51:43 {"type":"badRequest","detail":"bad request","message":"invalid value for admin type"} +2026/08/12 08:17:41 invalid value for admin type +2026/08/12 08:17:41 {"type":"badRequest","detail":"bad request","message":"invalid value for admin type"} === RUN TestHandler_UpdateAdmin/fail/auth.UpdateAdmin -2025/07/08 23:51:43 error updating admin adminID: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error updating admin adminID: force"} -=== RUN TestHandler_UpdateAdmin/ok +2026/08/12 08:17:41 error updating admin adminID: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error updating admin adminID: force"} --- PASS: TestHandler_UpdateAdmin (0.00s) + --- PASS: TestHandler_UpdateAdmin/ok (0.00s) --- PASS: TestHandler_UpdateAdmin/fail/ReadJSON (0.00s) --- PASS: TestHandler_UpdateAdmin/fail/validate (0.00s) --- PASS: TestHandler_UpdateAdmin/fail/auth.UpdateAdmin (0.00s) - --- PASS: TestHandler_UpdateAdmin/ok (0.00s) === RUN TestHandler_requireAPIEnabled === RUN TestHandler_requireAPIEnabled/fail/auth.IsAdminAPIEnabled -2025/07/08 23:51:43 administration API not enabled -2025/07/08 23:51:43 {"type":"notImplemented","detail":"not implemented","message":"administration API not enabled"} +2026/08/12 08:17:41 administration API not enabled +2026/08/12 08:17:41 {"type":"notImplemented","detail":"not implemented","message":"administration API not enabled"} === RUN TestHandler_requireAPIEnabled/ok --- PASS: TestHandler_requireAPIEnabled (0.00s) --- PASS: TestHandler_requireAPIEnabled/fail/auth.IsAdminAPIEnabled (0.00s) --- PASS: TestHandler_requireAPIEnabled/ok (0.00s) === RUN TestHandler_extractAuthorizeTokenAdmin +=== RUN TestHandler_extractAuthorizeTokenAdmin/ok === RUN TestHandler_extractAuthorizeTokenAdmin/fail/missing-authorization-token -2025/07/08 23:51:43 missing authorization header token -2025/07/08 23:51:43 {"type":"unauthorized","detail":"unauthorized","message":"missing authorization header token"} +2026/08/12 08:17:41 missing authorization header token +2026/08/12 08:17:41 {"type":"unauthorized","detail":"unauthorized","message":"missing authorization header token"} === RUN TestHandler_extractAuthorizeTokenAdmin/fail/auth.AuthorizeAdminToken -2025/07/08 23:51:43 not authorized -2025/07/08 23:51:43 {"type":"unauthorized","detail":"unauthorized","message":"not authorized"} -=== RUN TestHandler_extractAuthorizeTokenAdmin/ok +2026/08/12 08:17:41 not authorized +2026/08/12 08:17:41 {"type":"unauthorized","detail":"unauthorized","message":"not authorized"} --- PASS: TestHandler_extractAuthorizeTokenAdmin (0.00s) + --- PASS: TestHandler_extractAuthorizeTokenAdmin/ok (0.00s) --- PASS: TestHandler_extractAuthorizeTokenAdmin/fail/missing-authorization-token (0.00s) --- PASS: TestHandler_extractAuthorizeTokenAdmin/fail/auth.AuthorizeAdminToken (0.00s) - --- PASS: TestHandler_extractAuthorizeTokenAdmin/ok (0.00s) === RUN TestHandler_loadProvisionerByName === RUN TestHandler_loadProvisionerByName/fail/auth.LoadProvisionerByName -2025/07/08 23:51:43 error loading provisioner provName: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner provName: force"} +2026/08/12 08:17:41 error loading provisioner provName: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner provName: force"} === RUN TestHandler_loadProvisionerByName/fail/db.GetProvisioner -2025/07/08 23:51:43 error retrieving provisioner provName: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving provisioner provName: force"} +2026/08/12 08:17:41 error retrieving provisioner provName: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving provisioner provName: force"} === RUN TestHandler_loadProvisionerByName/ok --- PASS: TestHandler_loadProvisionerByName (0.00s) --- PASS: TestHandler_loadProvisionerByName/fail/auth.LoadProvisionerByName (0.00s) @@ -5592,49 +5628,49 @@ === RUN TestHandler_checkAction === RUN TestHandler_checkAction/standalone-nosql-supported === RUN TestHandler_checkAction/standalone-nosql-not-supported -2025/07/08 23:51:43 operation not supported in standalone mode -2025/07/08 23:51:43 {"type":"notImplemented","detail":"not implemented","message":"operation not supported in standalone mode"} +2026/08/12 08:17:41 operation not supported in standalone mode +2026/08/12 08:17:41 {"type":"notImplemented","detail":"not implemented","message":"operation not supported in standalone mode"} === RUN TestHandler_checkAction/standalone-no-nosql-not-supported --- PASS: TestHandler_checkAction (0.00s) --- PASS: TestHandler_checkAction/standalone-nosql-supported (0.00s) --- PASS: TestHandler_checkAction/standalone-nosql-not-supported (0.00s) --- PASS: TestHandler_checkAction/standalone-no-nosql-not-supported (0.00s) === RUN TestHandler_loadExternalAccountKey -=== RUN TestHandler_loadExternalAccountKey/fail/reference-error -2025/07/08 23:51:43 error retrieving ACME External Account Key: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving ACME External Account Key: force"} -=== RUN TestHandler_loadExternalAccountKey/fail/no-key -2025/07/08 23:51:43 ACME External Account Key not found -2025/07/08 23:51:43 {"type":"notFound","detail":"resource not found","message":"ACME External Account Key not found"} === RUN TestHandler_loadExternalAccountKey/ok/keyID === RUN TestHandler_loadExternalAccountKey/ok/reference === RUN TestHandler_loadExternalAccountKey/fail/keyID-not-found-error -2025/07/08 23:51:43 ACME External Account Key not found -2025/07/08 23:51:43 {"type":"notFound","detail":"resource not found","message":"ACME External Account Key not found"} +2026/08/12 08:17:41 ACME External Account Key not found +2026/08/12 08:17:41 {"type":"notFound","detail":"resource not found","message":"ACME External Account Key not found"} === RUN TestHandler_loadExternalAccountKey/fail/keyID-error -2025/07/08 23:51:43 error retrieving ACME External Account Key: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving ACME External Account Key: force"} +2026/08/12 08:17:41 error retrieving ACME External Account Key: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving ACME External Account Key: force"} === RUN TestHandler_loadExternalAccountKey/fail/reference-not-found-error -2025/07/08 23:51:43 ACME External Account Key not found -2025/07/08 23:51:43 {"type":"notFound","detail":"resource not found","message":"ACME External Account Key not found"} +2026/08/12 08:17:41 ACME External Account Key not found +2026/08/12 08:17:41 {"type":"notFound","detail":"resource not found","message":"ACME External Account Key not found"} +=== RUN TestHandler_loadExternalAccountKey/fail/reference-error +2026/08/12 08:17:41 error retrieving ACME External Account Key: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving ACME External Account Key: force"} +=== RUN TestHandler_loadExternalAccountKey/fail/no-key +2026/08/12 08:17:41 ACME External Account Key not found +2026/08/12 08:17:41 {"type":"notFound","detail":"resource not found","message":"ACME External Account Key not found"} --- PASS: TestHandler_loadExternalAccountKey (0.00s) - --- PASS: TestHandler_loadExternalAccountKey/fail/reference-error (0.00s) - --- PASS: TestHandler_loadExternalAccountKey/fail/no-key (0.00s) --- PASS: TestHandler_loadExternalAccountKey/ok/keyID (0.00s) --- PASS: TestHandler_loadExternalAccountKey/ok/reference (0.00s) --- PASS: TestHandler_loadExternalAccountKey/fail/keyID-not-found-error (0.00s) --- PASS: TestHandler_loadExternalAccountKey/fail/keyID-error (0.00s) --- PASS: TestHandler_loadExternalAccountKey/fail/reference-not-found-error (0.00s) + --- PASS: TestHandler_loadExternalAccountKey/fail/reference-error (0.00s) + --- PASS: TestHandler_loadExternalAccountKey/fail/no-key (0.00s) === RUN TestPolicyAdminResponder_GetAuthorityPolicy === RUN TestPolicyAdminResponder_GetAuthorityPolicy/fail/linkedca -2025/07/08 23:51:43 policy operations not yet supported in linked deployments -2025/07/08 23:51:43 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} +2026/08/12 08:17:41 policy operations not yet supported in linked deployments +2026/08/12 08:17:41 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} === RUN TestPolicyAdminResponder_GetAuthorityPolicy/fail/auth.GetAuthorityPolicy-error -2025/07/08 23:51:43 error retrieving authority policy: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving authority policy: force"} +2026/08/12 08:17:41 error retrieving authority policy: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving authority policy: force"} === RUN TestPolicyAdminResponder_GetAuthorityPolicy/fail/auth.GetAuthorityPolicy-not-found -2025/07/08 23:51:43 authority policy does not exist -2025/07/08 23:51:43 {"type":"notFound","detail":"resource not found","message":"authority policy does not exist"} +2026/08/12 08:17:41 authority policy does not exist +2026/08/12 08:17:41 {"type":"notFound","detail":"resource not found","message":"authority policy does not exist"} === RUN TestPolicyAdminResponder_GetAuthorityPolicy/ok --- PASS: TestPolicyAdminResponder_GetAuthorityPolicy (0.00s) --- PASS: TestPolicyAdminResponder_GetAuthorityPolicy/fail/linkedca (0.00s) @@ -5642,243 +5678,243 @@ --- PASS: TestPolicyAdminResponder_GetAuthorityPolicy/fail/auth.GetAuthorityPolicy-not-found (0.00s) --- PASS: TestPolicyAdminResponder_GetAuthorityPolicy/ok (0.00s) === RUN TestPolicyAdminResponder_CreateAuthorityPolicy +=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/read.ProtoJSON +2026/08/12 08:17:41 proto: syntax error (line 1:2): invalid value ? +=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/validatePolicy +2026/08/12 08:17:41 error validating authority policy: cannot parse permitted URI domain constraint "https://example.com": URI domain constraint "https://example.com" contains scheme (not supported yet) +2026/08/12 08:17:41 {"type":"badRequest","detail":"bad request","message":"error validating authority policy: cannot parse permitted URI domain constraint \"https://example.com\": URI domain constraint \"https://example.com\" contains scheme (not supported yet)"} === RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-policy-admin-lockout-error -2025/07/08 23:51:43 error storing authority policy: admin lock out -2025/07/08 23:51:43 {"type":"badRequest","detail":"bad request","message":"error storing authority policy: admin lock out"} +2026/08/12 08:17:41 error storing authority policy: admin lock out +2026/08/12 08:17:41 {"type":"badRequest","detail":"bad request","message":"error storing authority policy: admin lock out"} === RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-error -2025/07/08 23:51:43 error storing authority policy: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error storing authority policy: force"} +2026/08/12 08:17:41 error storing authority policy: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error storing authority policy: force"} === RUN TestPolicyAdminResponder_CreateAuthorityPolicy/ok === RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/linkedca -2025/07/08 23:51:43 policy operations not yet supported in linked deployments -2025/07/08 23:51:43 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} +2026/08/12 08:17:41 policy operations not yet supported in linked deployments +2026/08/12 08:17:41 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} === RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/auth.GetAuthorityPolicy-error -2025/07/08 23:51:43 error retrieving authority policy: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving authority policy: force"} +2026/08/12 08:17:41 error retrieving authority policy: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving authority policy: force"} === RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/existing-policy -2025/07/08 23:51:43 authority already has a policy -2025/07/08 23:51:43 {"type":"conflict","detail":"conflict","message":"authority already has a policy"} -=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/read.ProtoJSON -2025/07/08 23:51:43 proto: syntax error (line 1:2): invalid value ? -=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/validatePolicy -2025/07/08 23:51:43 error validating authority policy: cannot parse permitted URI domain constraint "https://example.com": URI domain constraint "https://example.com" contains scheme (not supported yet) -2025/07/08 23:51:43 {"type":"badRequest","detail":"bad request","message":"error validating authority policy: cannot parse permitted URI domain constraint \"https://example.com\": URI domain constraint \"https://example.com\" contains scheme (not supported yet)"} +2026/08/12 08:17:41 authority already has a policy +2026/08/12 08:17:41 {"type":"conflict","detail":"conflict","message":"authority already has a policy"} --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy (0.00s) + --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/read.ProtoJSON (0.00s) + --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/validatePolicy (0.00s) --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-policy-admin-lockout-error (0.00s) --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-error (0.00s) --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/ok (0.00s) --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/auth.GetAuthorityPolicy-error (0.00s) --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/existing-policy (0.00s) - --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/read.ProtoJSON (0.00s) - --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/validatePolicy (0.00s) === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy -=== RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/no-existing-policy -2025/07/08 23:51:43 authority policy does not exist -2025/07/08 23:51:43 {"type":"notFound","detail":"resource not found","message":"authority policy does not exist"} -=== RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/read.ProtoJSON -2025/07/08 23:51:43 proto: syntax error (line 1:2): invalid value ? -=== RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/validatePolicy -2025/07/08 23:51:43 error validating authority policy: cannot parse permitted URI domain constraint "https://example.com": URI domain constraint "https://example.com" contains scheme (not supported yet) -2025/07/08 23:51:43 {"type":"badRequest","detail":"bad request","message":"error validating authority policy: cannot parse permitted URI domain constraint \"https://example.com\": URI domain constraint \"https://example.com\" contains scheme (not supported yet)"} -=== RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-policy-admin-lockout-error -2025/07/08 23:51:43 error updating authority policy: admin lock out -2025/07/08 23:51:43 {"type":"badRequest","detail":"bad request","message":"error updating authority policy: admin lock out"} === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-error -2025/07/08 23:51:43 error updating authority policy: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error updating authority policy: force"} +2026/08/12 08:17:41 error updating authority policy: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error updating authority policy: force"} === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/ok === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/linkedca -2025/07/08 23:51:43 policy operations not yet supported in linked deployments -2025/07/08 23:51:43 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} +2026/08/12 08:17:41 policy operations not yet supported in linked deployments +2026/08/12 08:17:41 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/auth.GetAuthorityPolicy-error -2025/07/08 23:51:43 error retrieving authority policy: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving authority policy: force"} +2026/08/12 08:17:41 error retrieving authority policy: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving authority policy: force"} +=== RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/no-existing-policy +2026/08/12 08:17:41 authority policy does not exist +2026/08/12 08:17:41 {"type":"notFound","detail":"resource not found","message":"authority policy does not exist"} +=== RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/read.ProtoJSON +2026/08/12 08:17:41 proto: syntax error (line 1:2): invalid value ? +=== RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/validatePolicy +2026/08/12 08:17:41 error validating authority policy: cannot parse permitted URI domain constraint "https://example.com": URI domain constraint "https://example.com" contains scheme (not supported yet) +2026/08/12 08:17:41 {"type":"badRequest","detail":"bad request","message":"error validating authority policy: cannot parse permitted URI domain constraint \"https://example.com\": URI domain constraint \"https://example.com\" contains scheme (not supported yet)"} +=== RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-policy-admin-lockout-error +2026/08/12 08:17:41 error updating authority policy: admin lock out +2026/08/12 08:17:41 {"type":"badRequest","detail":"bad request","message":"error updating authority policy: admin lock out"} --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/no-existing-policy (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/read.ProtoJSON (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/validatePolicy (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-policy-admin-lockout-error (0.00s) --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-error (0.00s) --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/ok (0.00s) --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/auth.GetAuthorityPolicy-error (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/no-existing-policy (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/read.ProtoJSON (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/validatePolicy (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-policy-admin-lockout-error (0.00s) === RUN TestPolicyAdminResponder_DeleteAuthorityPolicy +=== RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/auth.RemoveAuthorityPolicy-error +2026/08/12 08:17:41 error deleting authority policy: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error deleting authority policy: force"} +=== RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/ok === RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/linkedca -2025/07/08 23:51:43 policy operations not yet supported in linked deployments -2025/07/08 23:51:43 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} +2026/08/12 08:17:41 policy operations not yet supported in linked deployments +2026/08/12 08:17:41 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} === RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/auth.GetAuthorityPolicy-error -2025/07/08 23:51:43 error retrieving authority policy: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving authority policy: force"} +2026/08/12 08:17:41 error retrieving authority policy: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving authority policy: force"} === RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/no-existing-policy -2025/07/08 23:51:43 authority policy does not exist -2025/07/08 23:51:43 {"type":"notFound","detail":"resource not found","message":"authority policy does not exist"} -=== RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/auth.RemoveAuthorityPolicy-error -2025/07/08 23:51:43 error deleting authority policy: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error deleting authority policy: force"} -=== RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/ok +2026/08/12 08:17:41 authority policy does not exist +2026/08/12 08:17:41 {"type":"notFound","detail":"resource not found","message":"authority policy does not exist"} --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy (0.00s) + --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/auth.RemoveAuthorityPolicy-error (0.00s) + --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/ok (0.00s) --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/auth.GetAuthorityPolicy-error (0.00s) --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/no-existing-policy (0.00s) - --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/auth.RemoveAuthorityPolicy-error (0.00s) - --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/ok (0.00s) === RUN TestPolicyAdminResponder_GetProvisionerPolicy -=== RUN TestPolicyAdminResponder_GetProvisionerPolicy/ok === RUN TestPolicyAdminResponder_GetProvisionerPolicy/fail/linkedca -2025/07/08 23:51:43 policy operations not yet supported in linked deployments -2025/07/08 23:51:43 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} +2026/08/12 08:17:41 policy operations not yet supported in linked deployments +2026/08/12 08:17:41 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} === RUN TestPolicyAdminResponder_GetProvisionerPolicy/fail/prov-no-policy -2025/07/08 23:51:43 provisioner policy does not exist -2025/07/08 23:51:43 {"type":"notFound","detail":"resource not found","message":"provisioner policy does not exist"} +2026/08/12 08:17:41 provisioner policy does not exist +2026/08/12 08:17:41 {"type":"notFound","detail":"resource not found","message":"provisioner policy does not exist"} +=== RUN TestPolicyAdminResponder_GetProvisionerPolicy/ok --- PASS: TestPolicyAdminResponder_GetProvisionerPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_GetProvisionerPolicy/ok (0.00s) --- PASS: TestPolicyAdminResponder_GetProvisionerPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_GetProvisionerPolicy/fail/prov-no-policy (0.00s) + --- PASS: TestPolicyAdminResponder_GetProvisionerPolicy/ok (0.00s) === RUN TestPolicyAdminResponder_CreateProvisionerPolicy -=== RUN TestPolicyAdminResponder_CreateProvisionerPolicy/ok -=== RUN TestPolicyAdminResponder_CreateProvisionerPolicy/fail/linkedca -2025/07/08 23:51:43 policy operations not yet supported in linked deployments -2025/07/08 23:51:43 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} === RUN TestPolicyAdminResponder_CreateProvisionerPolicy/fail/existing-policy -2025/07/08 23:51:43 provisioner provName already has a policy -2025/07/08 23:51:43 {"type":"conflict","detail":"conflict","message":"provisioner provName already has a policy"} +2026/08/12 08:17:41 provisioner provName already has a policy +2026/08/12 08:17:41 {"type":"conflict","detail":"conflict","message":"provisioner provName already has a policy"} === RUN TestPolicyAdminResponder_CreateProvisionerPolicy/fail/read.ProtoJSON -2025/07/08 23:51:43 proto: syntax error (line 1:2): invalid value ? +2026/08/12 08:17:41 proto: syntax error (line 1:2): invalid value ? === RUN TestPolicyAdminResponder_CreateProvisionerPolicy/fail/validatePolicy -2025/07/08 23:51:43 error validating provisioner policy: cannot parse permitted URI domain constraint "https://example.com": URI domain constraint "https://example.com" contains scheme (not supported yet) -2025/07/08 23:51:43 {"type":"badRequest","detail":"bad request","message":"error validating provisioner policy: cannot parse permitted URI domain constraint \"https://example.com\": URI domain constraint \"https://example.com\" contains scheme (not supported yet)"} +2026/08/12 08:17:41 error validating provisioner policy: cannot parse permitted URI domain constraint "https://example.com": URI domain constraint "https://example.com" contains scheme (not supported yet) +2026/08/12 08:17:41 {"type":"badRequest","detail":"bad request","message":"error validating provisioner policy: cannot parse permitted URI domain constraint \"https://example.com\": URI domain constraint \"https://example.com\" contains scheme (not supported yet)"} === RUN TestPolicyAdminResponder_CreateProvisionerPolicy/fail/auth.UpdateProvisioner-policy-admin-lockout-error -2025/07/08 23:51:43 error creating provisioner policy: admin lock out -2025/07/08 23:51:43 {"type":"badRequest","detail":"bad request","message":"error creating provisioner policy: admin lock out"} +2026/08/12 08:17:41 error creating provisioner policy: admin lock out +2026/08/12 08:17:41 {"type":"badRequest","detail":"bad request","message":"error creating provisioner policy: admin lock out"} === RUN TestPolicyAdminResponder_CreateProvisionerPolicy/fail/auth.UpdateProvisioner-error -2025/07/08 23:51:43 error creating provisioner policy: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error creating provisioner policy: force"} +2026/08/12 08:17:41 error creating provisioner policy: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error creating provisioner policy: force"} +=== RUN TestPolicyAdminResponder_CreateProvisionerPolicy/ok +=== RUN TestPolicyAdminResponder_CreateProvisionerPolicy/fail/linkedca +2026/08/12 08:17:41 policy operations not yet supported in linked deployments +2026/08/12 08:17:41 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/ok (0.00s) - --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/fail/existing-policy (0.00s) --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/fail/read.ProtoJSON (0.00s) --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/fail/validatePolicy (0.00s) --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/fail/auth.UpdateProvisioner-policy-admin-lockout-error (0.00s) --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/fail/auth.UpdateProvisioner-error (0.00s) + --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/ok (0.00s) + --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/fail/linkedca (0.00s) === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy +=== RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/auth.UpdateProvisioner-policy-admin-lockout-error +2026/08/12 08:17:41 error updating provisioner policy: admin lock out +2026/08/12 08:17:41 {"type":"badRequest","detail":"bad request","message":"error updating provisioner policy: admin lock out"} === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/auth.UpdateProvisioner-error -2025/07/08 23:51:43 error updating provisioner policy: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error updating provisioner policy: force"} +2026/08/12 08:17:41 error updating provisioner policy: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error updating provisioner policy: force"} === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/ok === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/linkedca -2025/07/08 23:51:43 policy operations not yet supported in linked deployments -2025/07/08 23:51:43 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} +2026/08/12 08:17:41 policy operations not yet supported in linked deployments +2026/08/12 08:17:41 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/no-existing-policy -2025/07/08 23:51:43 provisioner policy does not exist -2025/07/08 23:51:43 {"type":"notFound","detail":"resource not found","message":"provisioner policy does not exist"} +2026/08/12 08:17:41 provisioner policy does not exist +2026/08/12 08:17:41 {"type":"notFound","detail":"resource not found","message":"provisioner policy does not exist"} === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/read.ProtoJSON -2025/07/08 23:51:43 proto: syntax error (line 1:2): invalid value ? +2026/08/12 08:17:41 proto: syntax error (line 1:2): invalid value ? === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/validatePolicy -2025/07/08 23:51:43 error validating provisioner policy: cannot parse permitted URI domain constraint "https://example.com": URI domain constraint "https://example.com" contains scheme (not supported yet) -2025/07/08 23:51:43 {"type":"badRequest","detail":"bad request","message":"error validating provisioner policy: cannot parse permitted URI domain constraint \"https://example.com\": URI domain constraint \"https://example.com\" contains scheme (not supported yet)"} -=== RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/auth.UpdateProvisioner-policy-admin-lockout-error -2025/07/08 23:51:43 error updating provisioner policy: admin lock out -2025/07/08 23:51:43 {"type":"badRequest","detail":"bad request","message":"error updating provisioner policy: admin lock out"} +2026/08/12 08:17:41 error validating provisioner policy: cannot parse permitted URI domain constraint "https://example.com": URI domain constraint "https://example.com" contains scheme (not supported yet) +2026/08/12 08:17:41 {"type":"badRequest","detail":"bad request","message":"error validating provisioner policy: cannot parse permitted URI domain constraint \"https://example.com\": URI domain constraint \"https://example.com\" contains scheme (not supported yet)"} --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/auth.UpdateProvisioner-policy-admin-lockout-error (0.00s) --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/auth.UpdateProvisioner-error (0.00s) --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/ok (0.00s) --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/no-existing-policy (0.00s) --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/read.ProtoJSON (0.00s) --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/validatePolicy (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/auth.UpdateProvisioner-policy-admin-lockout-error (0.00s) === RUN TestPolicyAdminResponder_DeleteProvisionerPolicy -=== RUN TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/linkedca -2025/07/08 23:51:43 policy operations not yet supported in linked deployments -2025/07/08 23:51:43 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} === RUN TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/no-existing-policy -2025/07/08 23:51:43 provisioner policy does not exist -2025/07/08 23:51:43 {"type":"notFound","detail":"resource not found","message":"provisioner policy does not exist"} +2026/08/12 08:17:41 provisioner policy does not exist +2026/08/12 08:17:41 {"type":"notFound","detail":"resource not found","message":"provisioner policy does not exist"} === RUN TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/auth.UpdateProvisioner-error -2025/07/08 23:51:43 error deleting provisioner policy: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error deleting provisioner policy: force"} +2026/08/12 08:17:41 error deleting provisioner policy: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error deleting provisioner policy: force"} === RUN TestPolicyAdminResponder_DeleteProvisionerPolicy/ok +=== RUN TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/linkedca +2026/08/12 08:17:41 policy operations not yet supported in linked deployments +2026/08/12 08:17:41 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} --- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/no-existing-policy (0.00s) --- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/auth.UpdateProvisioner-error (0.00s) --- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy/ok (0.00s) + --- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/linkedca (0.00s) === RUN TestPolicyAdminResponder_GetACMEAccountPolicy === RUN TestPolicyAdminResponder_GetACMEAccountPolicy/fail/linkedca -2025/07/08 23:51:43 policy operations not yet supported in linked deployments -2025/07/08 23:51:43 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} +2026/08/12 08:17:41 policy operations not yet supported in linked deployments +2026/08/12 08:17:41 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} === RUN TestPolicyAdminResponder_GetACMEAccountPolicy/fail/no-policy -2025/07/08 23:51:43 ACME EAK policy does not exist -2025/07/08 23:51:43 {"type":"notFound","detail":"resource not found","message":"ACME EAK policy does not exist"} +2026/08/12 08:17:41 ACME EAK policy does not exist +2026/08/12 08:17:41 {"type":"notFound","detail":"resource not found","message":"ACME EAK policy does not exist"} === RUN TestPolicyAdminResponder_GetACMEAccountPolicy/ok --- PASS: TestPolicyAdminResponder_GetACMEAccountPolicy (0.00s) --- PASS: TestPolicyAdminResponder_GetACMEAccountPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_GetACMEAccountPolicy/fail/no-policy (0.00s) --- PASS: TestPolicyAdminResponder_GetACMEAccountPolicy/ok (0.00s) === RUN TestPolicyAdminResponder_CreateACMEAccountPolicy -=== RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/existing-policy -2025/07/08 23:51:43 ACME EAK eakID already has a policy -2025/07/08 23:51:43 {"type":"conflict","detail":"conflict","message":"ACME EAK eakID already has a policy"} -=== RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/read.ProtoJSON -2025/07/08 23:51:43 proto: syntax error (line 1:2): invalid value ? === RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/validatePolicy -2025/07/08 23:51:43 error validating ACME EAK policy: cannot parse permitted URI domain constraint "https://example.com": URI domain constraint "https://example.com" contains scheme (not supported yet) -2025/07/08 23:51:43 {"type":"badRequest","detail":"bad request","message":"error validating ACME EAK policy: cannot parse permitted URI domain constraint \"https://example.com\": URI domain constraint \"https://example.com\" contains scheme (not supported yet)"} +2026/08/12 08:17:41 error validating ACME EAK policy: cannot parse permitted URI domain constraint "https://example.com": URI domain constraint "https://example.com" contains scheme (not supported yet) +2026/08/12 08:17:41 {"type":"badRequest","detail":"bad request","message":"error validating ACME EAK policy: cannot parse permitted URI domain constraint \"https://example.com\": URI domain constraint \"https://example.com\" contains scheme (not supported yet)"} === RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error -2025/07/08 23:51:43 error creating ACME EAK policy: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error creating ACME EAK policy: force"} +2026/08/12 08:17:41 error creating ACME EAK policy: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error creating ACME EAK policy: force"} === RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/ok === RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/linkedca -2025/07/08 23:51:43 policy operations not yet supported in linked deployments -2025/07/08 23:51:43 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} +2026/08/12 08:17:41 policy operations not yet supported in linked deployments +2026/08/12 08:17:41 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} +=== RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/existing-policy +2026/08/12 08:17:41 ACME EAK eakID already has a policy +2026/08/12 08:17:41 {"type":"conflict","detail":"conflict","message":"ACME EAK eakID already has a policy"} +=== RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/read.ProtoJSON +2026/08/12 08:17:41 proto: syntax error (line 1:2): invalid value ? --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/existing-policy (0.00s) - --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/read.ProtoJSON (0.00s) --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/validatePolicy (0.00s) --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error (0.00s) --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/ok (0.00s) --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/linkedca (0.00s) + --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/existing-policy (0.00s) + --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/read.ProtoJSON (0.00s) === RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy +=== RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/linkedca +2026/08/12 08:17:41 policy operations not yet supported in linked deployments +2026/08/12 08:17:41 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} === RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/no-existing-policy -2025/07/08 23:51:43 ACME EAK policy does not exist -2025/07/08 23:51:43 {"type":"notFound","detail":"resource not found","message":"ACME EAK policy does not exist"} +2026/08/12 08:17:41 ACME EAK policy does not exist +2026/08/12 08:17:41 {"type":"notFound","detail":"resource not found","message":"ACME EAK policy does not exist"} === RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/read.ProtoJSON -2025/07/08 23:51:43 proto: syntax error (line 1:2): invalid value ? +2026/08/12 08:17:41 proto: syntax error (line 1:2): invalid value ? === RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/validatePolicy -2025/07/08 23:51:43 error validating ACME EAK policy: cannot parse permitted URI domain constraint "https://example.com": URI domain constraint "https://example.com" contains scheme (not supported yet) -2025/07/08 23:51:43 {"type":"badRequest","detail":"bad request","message":"error validating ACME EAK policy: cannot parse permitted URI domain constraint \"https://example.com\": URI domain constraint \"https://example.com\" contains scheme (not supported yet)"} +2026/08/12 08:17:41 error validating ACME EAK policy: cannot parse permitted URI domain constraint "https://example.com": URI domain constraint "https://example.com" contains scheme (not supported yet) +2026/08/12 08:17:41 {"type":"badRequest","detail":"bad request","message":"error validating ACME EAK policy: cannot parse permitted URI domain constraint \"https://example.com\": URI domain constraint \"https://example.com\" contains scheme (not supported yet)"} === RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error -2025/07/08 23:51:43 error updating ACME EAK policy: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error updating ACME EAK policy: force"} +2026/08/12 08:17:41 error updating ACME EAK policy: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error updating ACME EAK policy: force"} === RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/ok -=== RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/linkedca -2025/07/08 23:51:43 policy operations not yet supported in linked deployments -2025/07/08 23:51:43 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/no-existing-policy (0.00s) --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/read.ProtoJSON (0.00s) --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/validatePolicy (0.00s) --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error (0.00s) --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/ok (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/linkedca (0.00s) === RUN TestPolicyAdminResponder_DeleteACMEAccountPolicy -=== RUN TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/linkedca -2025/07/08 23:51:43 policy operations not yet supported in linked deployments -2025/07/08 23:51:43 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} === RUN TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/no-existing-policy -2025/07/08 23:51:43 ACME EAK policy does not exist -2025/07/08 23:51:43 {"type":"notFound","detail":"resource not found","message":"ACME EAK policy does not exist"} +2026/08/12 08:17:41 ACME EAK policy does not exist +2026/08/12 08:17:41 {"type":"notFound","detail":"resource not found","message":"ACME EAK policy does not exist"} === RUN TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error -2025/07/08 23:51:43 error deleting ACME EAK policy: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error deleting ACME EAK policy: force"} +2026/08/12 08:17:41 error deleting ACME EAK policy: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error deleting ACME EAK policy: force"} === RUN TestPolicyAdminResponder_DeleteACMEAccountPolicy/ok +=== RUN TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/linkedca +2026/08/12 08:17:41 policy operations not yet supported in linked deployments +2026/08/12 08:17:41 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} --- PASS: TestPolicyAdminResponder_DeleteACMEAccountPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/no-existing-policy (0.00s) --- PASS: TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error (0.00s) --- PASS: TestPolicyAdminResponder_DeleteACMEAccountPolicy/ok (0.00s) + --- PASS: TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/linkedca (0.00s) === RUN Test_isBadRequest === RUN Test_isBadRequest/nil === RUN Test_isBadRequest/no-policy-error @@ -5902,53 +5938,53 @@ --- PASS: Test_validatePolicy/ssh_host (0.00s) --- PASS: Test_validatePolicy/ok (0.00s) === RUN TestHandler_GetProvisioner +=== RUN TestHandler_GetProvisioner/ok === RUN TestHandler_GetProvisioner/fail/auth.LoadProvisionerByID -2025/07/08 23:51:43 error loading provisioner provID: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner provID: force"} +2026/08/12 08:17:41 error loading provisioner provID: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner provID: force"} === RUN TestHandler_GetProvisioner/fail/auth.LoadProvisionerByName -2025/07/08 23:51:43 error loading provisioner provName: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner provName: force"} +2026/08/12 08:17:41 error loading provisioner provName: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner provName: force"} === RUN TestHandler_GetProvisioner/fail/db.GetProvisioner -2025/07/08 23:51:43 error loading provisioner provName: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner provName: force"} -=== RUN TestHandler_GetProvisioner/ok +2026/08/12 08:17:41 error loading provisioner provName: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner provName: force"} --- PASS: TestHandler_GetProvisioner (0.00s) + --- PASS: TestHandler_GetProvisioner/ok (0.00s) --- PASS: TestHandler_GetProvisioner/fail/auth.LoadProvisionerByID (0.00s) --- PASS: TestHandler_GetProvisioner/fail/auth.LoadProvisionerByName (0.00s) --- PASS: TestHandler_GetProvisioner/fail/db.GetProvisioner (0.00s) - --- PASS: TestHandler_GetProvisioner/ok (0.00s) === RUN TestHandler_GetProvisioners +=== RUN TestHandler_GetProvisioners/ok === RUN TestHandler_GetProvisioners/fail/parse-cursor -2025/07/08 23:51:43 error parsing cursor and limit from query params: limit 'X' is not an integer: strconv.Atoi: parsing "X": invalid syntax -2025/07/08 23:51:43 {"type":"badRequest","detail":"bad request","message":"error parsing cursor and limit from query params: limit 'X' is not an integer: strconv.Atoi: parsing \"X\": invalid syntax"} +2026/08/12 08:17:41 error parsing cursor and limit from query params: limit 'X' is not an integer: strconv.Atoi: parsing "X": invalid syntax +2026/08/12 08:17:41 {"type":"badRequest","detail":"bad request","message":"error parsing cursor and limit from query params: limit 'X' is not an integer: strconv.Atoi: parsing \"X\": invalid syntax"} === RUN TestHandler_GetProvisioners/fail/auth.GetProvisioners -2025/07/08 23:51:43 force -=== RUN TestHandler_GetProvisioners/ok +2026/08/12 08:17:41 force --- PASS: TestHandler_GetProvisioners (0.00s) + --- PASS: TestHandler_GetProvisioners/ok (0.00s) --- PASS: TestHandler_GetProvisioners/fail/parse-cursor (0.00s) --- PASS: TestHandler_GetProvisioners/fail/auth.GetProvisioners (0.00s) - --- PASS: TestHandler_GetProvisioners/ok (0.00s) === RUN TestHandler_CreateProvisioner +=== RUN TestHandler_CreateProvisioner/ok === RUN TestHandler_CreateProvisioner/fail/readProtoJSON -2025/07/08 23:51:43 proto: syntax error (line 1:2): invalid value ! +2026/08/12 08:17:41 proto: syntax error (line 1:2): invalid value ! === RUN TestHandler_CreateProvisioner/fail/auth.StoreProvisioner -2025/07/08 23:51:43 error storing provisioner provName: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error storing provisioner provName: force"} -=== RUN TestHandler_CreateProvisioner/ok +2026/08/12 08:17:41 error storing provisioner provName: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error storing provisioner provName: force"} --- PASS: TestHandler_CreateProvisioner (0.00s) + --- PASS: TestHandler_CreateProvisioner/ok (0.00s) --- PASS: TestHandler_CreateProvisioner/fail/readProtoJSON (0.00s) --- PASS: TestHandler_CreateProvisioner/fail/auth.StoreProvisioner (0.00s) - --- PASS: TestHandler_CreateProvisioner/ok (0.00s) === RUN TestHandler_DeleteProvisioner === RUN TestHandler_DeleteProvisioner/fail/auth.LoadProvisionerByID -2025/07/08 23:51:43 error loading provisioner provID: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner provID: force"} +2026/08/12 08:17:41 error loading provisioner provID: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner provID: force"} === RUN TestHandler_DeleteProvisioner/fail/auth.LoadProvisionerByName -2025/07/08 23:51:43 error loading provisioner provName: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner provName: force"} +2026/08/12 08:17:41 error loading provisioner provName: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner provName: force"} === RUN TestHandler_DeleteProvisioner/fail/auth.RemoveProvisioner -2025/07/08 23:51:43 error removing provisioner provName: force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error removing provisioner provName: force"} +2026/08/12 08:17:41 error removing provisioner provName: force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error removing provisioner provName: force"} === RUN TestHandler_DeleteProvisioner/ok --- PASS: TestHandler_DeleteProvisioner (0.00s) --- PASS: TestHandler_DeleteProvisioner/fail/auth.LoadProvisionerByID (0.00s) @@ -5956,45 +5992,45 @@ --- PASS: TestHandler_DeleteProvisioner/fail/auth.RemoveProvisioner (0.00s) --- PASS: TestHandler_DeleteProvisioner/ok (0.00s) === RUN TestHandler_UpdateProvisioner +=== RUN TestHandler_UpdateProvisioner/fail/readProtoJSON +2026/08/12 08:17:41 proto: syntax error (line 1:2): invalid value ! === RUN TestHandler_UpdateProvisioner/fail/auth.LoadProvisionerByName -2025/07/08 23:51:43 error loading provisioner from cached configuration 'provName': force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner from cached configuration 'provName': force"} +2026/08/12 08:17:41 error loading provisioner from cached configuration 'provName': force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner from cached configuration 'provName': force"} +=== RUN TestHandler_UpdateProvisioner/fail/change-createdAt-error +2026/08/12 08:17:41 cannot change provisioner createdAt +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"cannot change provisioner createdAt"} +=== RUN TestHandler_UpdateProvisioner/fail/change-deletedAt-error +2026/08/12 08:17:41 cannot change provisioner deletedAt +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"cannot change provisioner deletedAt"} +=== RUN TestHandler_UpdateProvisioner/fail/auth.UpdateProvisioner +2026/08/12 08:17:41 force === RUN TestHandler_UpdateProvisioner/fail/db.GetProvisioner -2025/07/08 23:51:43 error loading provisioner from db 'provID': force -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner from db 'provID': force"} +2026/08/12 08:17:41 error loading provisioner from db 'provID': force +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner from db 'provID': force"} === RUN TestHandler_UpdateProvisioner/fail/change-id-error -2025/07/08 23:51:43 cannot change provisioner ID -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"cannot change provisioner ID"} -=== RUN TestHandler_UpdateProvisioner/fail/change-deletedAt-error -2025/07/08 23:51:43 cannot change provisioner deletedAt -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"cannot change provisioner deletedAt"} -=== RUN TestHandler_UpdateProvisioner/fail/readProtoJSON -2025/07/08 23:51:43 proto: syntax error (line 1:2): invalid value ! +2026/08/12 08:17:41 cannot change provisioner ID +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"cannot change provisioner ID"} === RUN TestHandler_UpdateProvisioner/fail/change-type-error -2025/07/08 23:51:43 cannot change provisioner type -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"cannot change provisioner type"} +2026/08/12 08:17:41 cannot change provisioner type +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"cannot change provisioner type"} === RUN TestHandler_UpdateProvisioner/fail/change-authority-id-error -2025/07/08 23:51:43 cannot change provisioner authorityID -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"cannot change provisioner authorityID"} -=== RUN TestHandler_UpdateProvisioner/fail/change-createdAt-error -2025/07/08 23:51:43 cannot change provisioner createdAt -2025/07/08 23:51:43 {"type":"internalServerError","detail":"the server experienced an internal error","message":"cannot change provisioner createdAt"} -=== RUN TestHandler_UpdateProvisioner/fail/auth.UpdateProvisioner -2025/07/08 23:51:43 force +2026/08/12 08:17:41 cannot change provisioner authorityID +2026/08/12 08:17:41 {"type":"internalServerError","detail":"the server experienced an internal error","message":"cannot change provisioner authorityID"} === RUN TestHandler_UpdateProvisioner/ok --- PASS: TestHandler_UpdateProvisioner (0.00s) + --- PASS: TestHandler_UpdateProvisioner/fail/readProtoJSON (0.00s) --- PASS: TestHandler_UpdateProvisioner/fail/auth.LoadProvisionerByName (0.00s) + --- PASS: TestHandler_UpdateProvisioner/fail/change-createdAt-error (0.00s) + --- PASS: TestHandler_UpdateProvisioner/fail/change-deletedAt-error (0.00s) + --- PASS: TestHandler_UpdateProvisioner/fail/auth.UpdateProvisioner (0.00s) --- PASS: TestHandler_UpdateProvisioner/fail/db.GetProvisioner (0.00s) --- PASS: TestHandler_UpdateProvisioner/fail/change-id-error (0.00s) - --- PASS: TestHandler_UpdateProvisioner/fail/change-deletedAt-error (0.00s) - --- PASS: TestHandler_UpdateProvisioner/fail/readProtoJSON (0.00s) --- PASS: TestHandler_UpdateProvisioner/fail/change-type-error (0.00s) --- PASS: TestHandler_UpdateProvisioner/fail/change-authority-id-error (0.00s) - --- PASS: TestHandler_UpdateProvisioner/fail/change-createdAt-error (0.00s) - --- PASS: TestHandler_UpdateProvisioner/fail/auth.UpdateProvisioner (0.00s) --- PASS: TestHandler_UpdateProvisioner/ok (0.00s) PASS -ok github.com/smallstep/certificates/authority/admin/api 0.040s +ok github.com/smallstep/certificates/authority/admin/api 0.041s === RUN TestDB_getDBAdminBytes === RUN TestDB_getDBAdminBytes/fail/not-found === RUN TestDB_getDBAdminBytes/fail/db.Get-error @@ -6016,15 +6052,15 @@ --- PASS: TestDB_getDBAdmin/fail/deleted (0.00s) --- PASS: TestDB_getDBAdmin/ok (0.00s) === RUN TestDB_unmarshalDBAdmin +=== RUN TestDB_unmarshalDBAdmin/fail/unmarshal-error === RUN TestDB_unmarshalDBAdmin/fail/deleted-error === RUN TestDB_unmarshalDBAdmin/fail/authority-mismatch-error === RUN TestDB_unmarshalDBAdmin/ok -=== RUN TestDB_unmarshalDBAdmin/fail/unmarshal-error --- PASS: TestDB_unmarshalDBAdmin (0.00s) + --- PASS: TestDB_unmarshalDBAdmin/fail/unmarshal-error (0.00s) --- PASS: TestDB_unmarshalDBAdmin/fail/deleted-error (0.00s) --- PASS: TestDB_unmarshalDBAdmin/fail/authority-mismatch-error (0.00s) --- PASS: TestDB_unmarshalDBAdmin/ok (0.00s) - --- PASS: TestDB_unmarshalDBAdmin/fail/unmarshal-error (0.00s) === RUN TestDB_unmarshalAdmin === RUN TestDB_unmarshalAdmin/fail/unmarshal-error === RUN TestDB_unmarshalAdmin/fail/deleted-error @@ -6034,29 +6070,29 @@ --- PASS: TestDB_unmarshalAdmin/fail/deleted-error (0.00s) --- PASS: TestDB_unmarshalAdmin/ok (0.00s) === RUN TestDB_GetAdmin -=== RUN TestDB_GetAdmin/fail/not-found === RUN TestDB_GetAdmin/fail/db.Get-error === RUN TestDB_GetAdmin/fail/unmarshal-error === RUN TestDB_GetAdmin/fail/deleted === RUN TestDB_GetAdmin/fail/authorityID-mismatch === RUN TestDB_GetAdmin/ok +=== RUN TestDB_GetAdmin/fail/not-found --- PASS: TestDB_GetAdmin (0.00s) - --- PASS: TestDB_GetAdmin/fail/not-found (0.00s) --- PASS: TestDB_GetAdmin/fail/db.Get-error (0.00s) --- PASS: TestDB_GetAdmin/fail/unmarshal-error (0.00s) --- PASS: TestDB_GetAdmin/fail/deleted (0.00s) --- PASS: TestDB_GetAdmin/fail/authorityID-mismatch (0.00s) --- PASS: TestDB_GetAdmin/ok (0.00s) + --- PASS: TestDB_GetAdmin/fail/not-found (0.00s) === RUN TestDB_DeleteAdmin -=== RUN TestDB_DeleteAdmin/ok === RUN TestDB_DeleteAdmin/fail/not-found === RUN TestDB_DeleteAdmin/fail/db.Get-error === RUN TestDB_DeleteAdmin/fail/save-error +=== RUN TestDB_DeleteAdmin/ok --- PASS: TestDB_DeleteAdmin (0.00s) - --- PASS: TestDB_DeleteAdmin/ok (0.00s) --- PASS: TestDB_DeleteAdmin/fail/not-found (0.00s) --- PASS: TestDB_DeleteAdmin/fail/db.Get-error (0.00s) --- PASS: TestDB_DeleteAdmin/fail/save-error (0.00s) + --- PASS: TestDB_DeleteAdmin/ok (0.00s) === RUN TestDB_UpdateAdmin === RUN TestDB_UpdateAdmin/ok === RUN TestDB_UpdateAdmin/fail/not-found @@ -6068,31 +6104,31 @@ --- PASS: TestDB_UpdateAdmin/fail/db.Get-error (0.00s) --- PASS: TestDB_UpdateAdmin/fail/save-error (0.00s) === RUN TestDB_CreateAdmin -=== RUN TestDB_CreateAdmin/ok === RUN TestDB_CreateAdmin/fail/save-error +=== RUN TestDB_CreateAdmin/ok --- PASS: TestDB_CreateAdmin (0.00s) - --- PASS: TestDB_CreateAdmin/ok (0.00s) --- PASS: TestDB_CreateAdmin/fail/save-error (0.00s) + --- PASS: TestDB_CreateAdmin/ok (0.00s) === RUN TestDB_GetAdmins +=== RUN TestDB_GetAdmins/ok/only-invalid === RUN TestDB_GetAdmins/ok === RUN TestDB_GetAdmins/fail/db.List-error === RUN TestDB_GetAdmins/fail/unmarshal-error === RUN TestDB_GetAdmins/ok/none -=== RUN TestDB_GetAdmins/ok/only-invalid --- PASS: TestDB_GetAdmins (0.00s) + --- PASS: TestDB_GetAdmins/ok/only-invalid (0.00s) --- PASS: TestDB_GetAdmins/ok (0.00s) --- PASS: TestDB_GetAdmins/fail/db.List-error (0.00s) --- PASS: TestDB_GetAdmins/fail/unmarshal-error (0.00s) --- PASS: TestDB_GetAdmins/ok/none (0.00s) - --- PASS: TestDB_GetAdmins/ok/only-invalid (0.00s) === RUN TestDB_getDBAuthorityPolicyBytes -=== RUN TestDB_getDBAuthorityPolicyBytes/ok === RUN TestDB_getDBAuthorityPolicyBytes/fail/not-found === RUN TestDB_getDBAuthorityPolicyBytes/fail/db.Get-error +=== RUN TestDB_getDBAuthorityPolicyBytes/ok --- PASS: TestDB_getDBAuthorityPolicyBytes (0.00s) - --- PASS: TestDB_getDBAuthorityPolicyBytes/ok (0.00s) --- PASS: TestDB_getDBAuthorityPolicyBytes/fail/not-found (0.00s) --- PASS: TestDB_getDBAuthorityPolicyBytes/fail/db.Get-error (0.00s) + --- PASS: TestDB_getDBAuthorityPolicyBytes/ok (0.00s) === RUN TestDB_getDBAuthorityPolicy === RUN TestDB_getDBAuthorityPolicy/fail/unmarshal-error === RUN TestDB_getDBAuthorityPolicy/fail/authorityID-error @@ -6112,33 +6148,33 @@ --- PASS: TestDB_CreateAuthorityPolicy/fail/save-error (0.00s) --- PASS: TestDB_CreateAuthorityPolicy/ok (0.00s) === RUN TestDB_GetAuthorityPolicy -=== RUN TestDB_GetAuthorityPolicy/fail/not-found === RUN TestDB_GetAuthorityPolicy/fail/db.Get-error === RUN TestDB_GetAuthorityPolicy/ok +=== RUN TestDB_GetAuthorityPolicy/fail/not-found --- PASS: TestDB_GetAuthorityPolicy (0.00s) - --- PASS: TestDB_GetAuthorityPolicy/fail/not-found (0.00s) --- PASS: TestDB_GetAuthorityPolicy/fail/db.Get-error (0.00s) --- PASS: TestDB_GetAuthorityPolicy/ok (0.00s) + --- PASS: TestDB_GetAuthorityPolicy/fail/not-found (0.00s) === RUN TestDB_UpdateAuthorityPolicy -=== RUN TestDB_UpdateAuthorityPolicy/fail/not-found -=== RUN TestDB_UpdateAuthorityPolicy/fail/db.Get-error === RUN TestDB_UpdateAuthorityPolicy/fail/save-error === RUN TestDB_UpdateAuthorityPolicy/ok +=== RUN TestDB_UpdateAuthorityPolicy/fail/not-found +=== RUN TestDB_UpdateAuthorityPolicy/fail/db.Get-error --- PASS: TestDB_UpdateAuthorityPolicy (0.00s) - --- PASS: TestDB_UpdateAuthorityPolicy/fail/not-found (0.00s) - --- PASS: TestDB_UpdateAuthorityPolicy/fail/db.Get-error (0.00s) --- PASS: TestDB_UpdateAuthorityPolicy/fail/save-error (0.00s) --- PASS: TestDB_UpdateAuthorityPolicy/ok (0.00s) + --- PASS: TestDB_UpdateAuthorityPolicy/fail/not-found (0.00s) + --- PASS: TestDB_UpdateAuthorityPolicy/fail/db.Get-error (0.00s) === RUN TestDB_DeleteAuthorityPolicy +=== RUN TestDB_DeleteAuthorityPolicy/ok === RUN TestDB_DeleteAuthorityPolicy/fail/not-found === RUN TestDB_DeleteAuthorityPolicy/fail/db.Get-error === RUN TestDB_DeleteAuthorityPolicy/fail/save-error -=== RUN TestDB_DeleteAuthorityPolicy/ok --- PASS: TestDB_DeleteAuthorityPolicy (0.00s) + --- PASS: TestDB_DeleteAuthorityPolicy/ok (0.00s) --- PASS: TestDB_DeleteAuthorityPolicy/fail/not-found (0.00s) --- PASS: TestDB_DeleteAuthorityPolicy/fail/db.Get-error (0.00s) --- PASS: TestDB_DeleteAuthorityPolicy/fail/save-error (0.00s) - --- PASS: TestDB_DeleteAuthorityPolicy/ok (0.00s) === RUN Test_linkedToDB === RUN Test_linkedToDB/nil_policy === RUN Test_linkedToDB/no_x509_nor_ssh @@ -6166,79 +6202,79 @@ --- PASS: Test_dbToLinked/ssh_host (0.00s) --- PASS: Test_dbToLinked/full_policy (0.00s) === RUN TestDB_getDBProvisionerBytes +=== RUN TestDB_getDBProvisionerBytes/fail/not-found === RUN TestDB_getDBProvisionerBytes/fail/db.Get-error === RUN TestDB_getDBProvisionerBytes/ok -=== RUN TestDB_getDBProvisionerBytes/fail/not-found --- PASS: TestDB_getDBProvisionerBytes (0.00s) + --- PASS: TestDB_getDBProvisionerBytes/fail/not-found (0.00s) --- PASS: TestDB_getDBProvisionerBytes/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBProvisionerBytes/ok (0.00s) - --- PASS: TestDB_getDBProvisionerBytes/fail/not-found (0.00s) === RUN TestDB_getDBProvisioner -=== RUN TestDB_getDBProvisioner/fail/not-found === RUN TestDB_getDBProvisioner/fail/db.Get-error === RUN TestDB_getDBProvisioner/fail/unmarshal-error === RUN TestDB_getDBProvisioner/fail/deleted === RUN TestDB_getDBProvisioner/ok +=== RUN TestDB_getDBProvisioner/fail/not-found --- PASS: TestDB_getDBProvisioner (0.00s) - --- PASS: TestDB_getDBProvisioner/fail/not-found (0.00s) --- PASS: TestDB_getDBProvisioner/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBProvisioner/fail/unmarshal-error (0.00s) --- PASS: TestDB_getDBProvisioner/fail/deleted (0.00s) --- PASS: TestDB_getDBProvisioner/ok (0.00s) + --- PASS: TestDB_getDBProvisioner/fail/not-found (0.00s) === RUN TestDB_unmarshalDBProvisioner -=== RUN TestDB_unmarshalDBProvisioner/fail/authority-mismatch-error === RUN TestDB_unmarshalDBProvisioner/ok === RUN TestDB_unmarshalDBProvisioner/fail/unmarshal-error === RUN TestDB_unmarshalDBProvisioner/fail/deleted-error +=== RUN TestDB_unmarshalDBProvisioner/fail/authority-mismatch-error --- PASS: TestDB_unmarshalDBProvisioner (0.00s) - --- PASS: TestDB_unmarshalDBProvisioner/fail/authority-mismatch-error (0.00s) --- PASS: TestDB_unmarshalDBProvisioner/ok (0.00s) --- PASS: TestDB_unmarshalDBProvisioner/fail/unmarshal-error (0.00s) --- PASS: TestDB_unmarshalDBProvisioner/fail/deleted-error (0.00s) + --- PASS: TestDB_unmarshalDBProvisioner/fail/authority-mismatch-error (0.00s) === RUN TestDB_unmarshalProvisioner +=== RUN TestDB_unmarshalProvisioner/fail/unmarshal-error === RUN TestDB_unmarshalProvisioner/fail/deleted-error === RUN TestDB_unmarshalProvisioner/ok -=== RUN TestDB_unmarshalProvisioner/fail/unmarshal-error --- PASS: TestDB_unmarshalProvisioner (0.00s) + --- PASS: TestDB_unmarshalProvisioner/fail/unmarshal-error (0.00s) --- PASS: TestDB_unmarshalProvisioner/fail/deleted-error (0.00s) --- PASS: TestDB_unmarshalProvisioner/ok (0.00s) - --- PASS: TestDB_unmarshalProvisioner/fail/unmarshal-error (0.00s) === RUN TestDB_GetProvisioner +=== RUN TestDB_GetProvisioner/ok === RUN TestDB_GetProvisioner/fail/not-found === RUN TestDB_GetProvisioner/fail/db.Get-error === RUN TestDB_GetProvisioner/fail/unmarshal-error === RUN TestDB_GetProvisioner/fail/deleted === RUN TestDB_GetProvisioner/fail/authorityID-mismatch -=== RUN TestDB_GetProvisioner/ok --- PASS: TestDB_GetProvisioner (0.00s) + --- PASS: TestDB_GetProvisioner/ok (0.00s) --- PASS: TestDB_GetProvisioner/fail/not-found (0.00s) --- PASS: TestDB_GetProvisioner/fail/db.Get-error (0.00s) --- PASS: TestDB_GetProvisioner/fail/unmarshal-error (0.00s) --- PASS: TestDB_GetProvisioner/fail/deleted (0.00s) --- PASS: TestDB_GetProvisioner/fail/authorityID-mismatch (0.00s) - --- PASS: TestDB_GetProvisioner/ok (0.00s) === RUN TestDB_DeleteProvisioner +=== RUN TestDB_DeleteProvisioner/ok === RUN TestDB_DeleteProvisioner/fail/not-found === RUN TestDB_DeleteProvisioner/fail/db.Get-error === RUN TestDB_DeleteProvisioner/fail/save-error -=== RUN TestDB_DeleteProvisioner/ok --- PASS: TestDB_DeleteProvisioner (0.00s) + --- PASS: TestDB_DeleteProvisioner/ok (0.00s) --- PASS: TestDB_DeleteProvisioner/fail/not-found (0.00s) --- PASS: TestDB_DeleteProvisioner/fail/db.Get-error (0.00s) --- PASS: TestDB_DeleteProvisioner/fail/save-error (0.00s) - --- PASS: TestDB_DeleteProvisioner/ok (0.00s) === RUN TestDB_GetProvisioners +=== RUN TestDB_GetProvisioners/fail/db.List-error +=== RUN TestDB_GetProvisioners/fail/unmarshal-error === RUN TestDB_GetProvisioners/ok/none === RUN TestDB_GetProvisioners/ok/only-invalid === RUN TestDB_GetProvisioners/ok -=== RUN TestDB_GetProvisioners/fail/db.List-error -=== RUN TestDB_GetProvisioners/fail/unmarshal-error --- PASS: TestDB_GetProvisioners (0.00s) + --- PASS: TestDB_GetProvisioners/fail/db.List-error (0.00s) + --- PASS: TestDB_GetProvisioners/fail/unmarshal-error (0.00s) --- PASS: TestDB_GetProvisioners/ok/none (0.00s) --- PASS: TestDB_GetProvisioners/ok/only-invalid (0.00s) --- PASS: TestDB_GetProvisioners/ok (0.00s) - --- PASS: TestDB_GetProvisioners/fail/db.List-error (0.00s) - --- PASS: TestDB_GetProvisioners/fail/unmarshal-error (0.00s) === RUN TestDB_CreateProvisioner === RUN TestDB_CreateProvisioner/fail/save-error === RUN TestDB_CreateProvisioner/ok @@ -6246,60 +6282,60 @@ --- PASS: TestDB_CreateProvisioner/fail/save-error (0.00s) --- PASS: TestDB_CreateProvisioner/ok (0.00s) === RUN TestDB_UpdateProvisioner +=== RUN TestDB_UpdateProvisioner/fail/db.Get-error +=== RUN TestDB_UpdateProvisioner/fail/update-deleted === RUN TestDB_UpdateProvisioner/fail/update-type-error === RUN TestDB_UpdateProvisioner/fail/save-error === RUN TestDB_UpdateProvisioner/ok === RUN TestDB_UpdateProvisioner/fail/not-found -=== RUN TestDB_UpdateProvisioner/fail/db.Get-error -=== RUN TestDB_UpdateProvisioner/fail/update-deleted --- PASS: TestDB_UpdateProvisioner (0.00s) + --- PASS: TestDB_UpdateProvisioner/fail/db.Get-error (0.00s) + --- PASS: TestDB_UpdateProvisioner/fail/update-deleted (0.00s) --- PASS: TestDB_UpdateProvisioner/fail/update-type-error (0.00s) --- PASS: TestDB_UpdateProvisioner/fail/save-error (0.00s) --- PASS: TestDB_UpdateProvisioner/ok (0.00s) --- PASS: TestDB_UpdateProvisioner/fail/not-found (0.00s) - --- PASS: TestDB_UpdateProvisioner/fail/db.Get-error (0.00s) - --- PASS: TestDB_UpdateProvisioner/fail/update-deleted (0.00s) PASS -ok github.com/smallstep/certificates/authority/admin/db/nosql 0.029s +ok github.com/smallstep/certificates/authority/admin/db/nosql 0.036s ? github.com/smallstep/certificates/authority/administrator [no test files] === RUN TestConfigValidate -=== RUN TestConfigValidate/empty-address +=== RUN TestConfigValidate/invalid-address === RUN TestConfigValidate/empty-intermediate-cert +=== RUN TestConfigValidate/empty-intermediate-key === RUN TestConfigValidate/empty-dnsNames === RUN TestConfigValidate/empty-TLS tc.tls = {CipherSuites:[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256] MinVersion:1.2 MaxVersion:1.3 Renegotiation:false} *tc.config.TLS = {CipherSuites:[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256] MinVersion:1.2 MaxVersion:1.3 Renegotiation:false} +=== RUN TestConfigValidate/empty-address +=== RUN TestConfigValidate/empty-root === RUN TestConfigValidate/empty-TLS-values tc.tls = {CipherSuites:[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256] MinVersion:1.2 MaxVersion:1.3 Renegotiation:false} *tc.config.TLS = {CipherSuites:[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256] MinVersion:1.2 MaxVersion:1.3 Renegotiation:false} === RUN TestConfigValidate/custom-tls-values tc.tls = {CipherSuites:[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305] MinVersion:1.0 MaxVersion:1.1 Renegotiation:true} *tc.config.TLS = {CipherSuites:[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305] MinVersion:1.0 MaxVersion:1.1 Renegotiation:true} -=== RUN TestConfigValidate/invalid-address -=== RUN TestConfigValidate/empty-root -=== RUN TestConfigValidate/empty-intermediate-key === RUN TestConfigValidate/tls-min>max --- PASS: TestConfigValidate (0.00s) - --- PASS: TestConfigValidate/empty-address (0.00s) + --- PASS: TestConfigValidate/invalid-address (0.00s) --- PASS: TestConfigValidate/empty-intermediate-cert (0.00s) + --- PASS: TestConfigValidate/empty-intermediate-key (0.00s) --- PASS: TestConfigValidate/empty-dnsNames (0.00s) --- PASS: TestConfigValidate/empty-TLS (0.00s) + --- PASS: TestConfigValidate/empty-address (0.00s) + --- PASS: TestConfigValidate/empty-root (0.00s) --- PASS: TestConfigValidate/empty-TLS-values (0.00s) --- PASS: TestConfigValidate/custom-tls-values (0.00s) - --- PASS: TestConfigValidate/invalid-address (0.00s) - --- PASS: TestConfigValidate/empty-root (0.00s) - --- PASS: TestConfigValidate/empty-intermediate-key (0.00s) --- PASS: TestConfigValidate/tls-min>max (0.00s) === RUN TestAuthConfigValidate -=== RUN TestAuthConfigValidate/ok-custom-asn1dn === RUN TestAuthConfigValidate/fail-nil-authconfig === RUN TestAuthConfigValidate/ok-empty-provisioners === RUN TestAuthConfigValidate/ok-empty-asn1dn-template +=== RUN TestAuthConfigValidate/ok-custom-asn1dn --- PASS: TestAuthConfigValidate (0.00s) - --- PASS: TestAuthConfigValidate/ok-custom-asn1dn (0.00s) --- PASS: TestAuthConfigValidate/fail-nil-authconfig (0.00s) --- PASS: TestAuthConfigValidate/ok-empty-provisioners (0.00s) --- PASS: TestAuthConfigValidate/ok-empty-asn1dn-template (0.00s) + --- PASS: TestAuthConfigValidate/ok-custom-asn1dn (0.00s) === RUN Test_toHostname === RUN Test_toHostname/localhost === RUN Test_toHostname/ca.smallstep.com @@ -6507,7 +6543,7 @@ --- PASS: Test_multiString_UnmarshalJSON/error (0.00s) --- PASS: Test_multiString_UnmarshalJSON/nil (0.00s) PASS -ok github.com/smallstep/certificates/authority/config 0.037s +ok github.com/smallstep/certificates/authority/config 0.044s === RUN TestX509PolicyOptions_IsWildcardLiteralAllowed === RUN TestX509PolicyOptions_IsWildcardLiteralAllowed/nil-options === RUN TestX509PolicyOptions_IsWildcardLiteralAllowed/not-set @@ -6529,7 +6565,7 @@ --- PASS: TestPolicyToCertificates/partial-policy (0.00s) --- PASS: TestPolicyToCertificates/full-policy (0.00s) PASS -ok github.com/smallstep/certificates/authority/policy 0.032s +ok github.com/smallstep/certificates/authority/policy 0.036s === RUN TestACME_Getters --- PASS: TestACME_Getters (0.00s) === RUN TestACME_Init @@ -6545,11 +6581,11 @@ --- PASS: TestACME_Init/fail-bad-claims (0.00s) --- PASS: TestACME_Init/ok (0.00s) === RUN TestACME_AuthorizeRenew -=== RUN TestACME_AuthorizeRenew/fail/renew-disabled === RUN TestACME_AuthorizeRenew/ok +=== RUN TestACME_AuthorizeRenew/fail/renew-disabled --- PASS: TestACME_AuthorizeRenew (0.00s) - --- PASS: TestACME_AuthorizeRenew/fail/renew-disabled (0.00s) --- PASS: TestACME_AuthorizeRenew/ok (0.00s) + --- PASS: TestACME_AuthorizeRenew/fail/renew-disabled (0.00s) === RUN TestACME_AuthorizeSign === RUN TestACME_AuthorizeSign/ok --- PASS: TestACME_AuthorizeSign (0.00s) @@ -6560,7 +6596,7 @@ === RUN TestAWS_GetTokenID/ok === RUN TestAWS_GetTokenID/ok_no_TOFU === RUN TestAWS_GetTokenID/fail ---- PASS: TestAWS_GetTokenID (0.01s) +--- PASS: TestAWS_GetTokenID (0.00s) --- PASS: TestAWS_GetTokenID/ok (0.00s) --- PASS: TestAWS_GetTokenID/ok_no_TOFU (0.00s) --- PASS: TestAWS_GetTokenID/fail (0.00s) @@ -6602,7 +6638,7 @@ === RUN TestAWS_Init/fail/missing === RUN TestAWS_Init/fail/cert === RUN TestAWS_Init/fail_claims ---- PASS: TestAWS_Init (0.00s) +--- PASS: TestAWS_Init (0.01s) --- PASS: TestAWS_Init/ok (0.00s) --- PASS: TestAWS_Init/ok/v1 (0.00s) --- PASS: TestAWS_Init/ok/v2 (0.00s) @@ -6617,35 +6653,35 @@ --- PASS: TestAWS_Init/fail/cert (0.00s) --- PASS: TestAWS_Init/fail_claims (0.00s) === RUN TestAWS_authorizeToken -=== RUN TestAWS_authorizeToken/fail/invalid-account-id -=== RUN TestAWS_authorizeToken/ok -=== RUN TestAWS_authorizeToken/ok/identityCert +=== RUN TestAWS_authorizeToken/ok/identityCert2 === RUN TestAWS_authorizeToken/fail/bad-token +=== RUN TestAWS_authorizeToken/fail/cannot-validate-sig === RUN TestAWS_authorizeToken/fail/empty-account-id === RUN TestAWS_authorizeToken/fail/empty-instance-id === RUN TestAWS_authorizeToken/fail/empty-private-ip -=== RUN TestAWS_authorizeToken/fail/invalid-audience -=== RUN TestAWS_authorizeToken/fail/instance-age -=== RUN TestAWS_authorizeToken/ok/identityCert2 -=== RUN TestAWS_authorizeToken/fail/cannot-validate-sig === RUN TestAWS_authorizeToken/fail/empty-region === RUN TestAWS_authorizeToken/fail/invalid-token-issuer +=== RUN TestAWS_authorizeToken/fail/invalid-account-id +=== RUN TestAWS_authorizeToken/fail/invalid-audience === RUN TestAWS_authorizeToken/fail/invalid-subject-disabled-custom-SANs ---- PASS: TestAWS_authorizeToken (0.02s) - --- PASS: TestAWS_authorizeToken/fail/invalid-account-id (0.00s) - --- PASS: TestAWS_authorizeToken/ok (0.00s) - --- PASS: TestAWS_authorizeToken/ok/identityCert (0.00s) +=== RUN TestAWS_authorizeToken/fail/instance-age +=== RUN TestAWS_authorizeToken/ok +=== RUN TestAWS_authorizeToken/ok/identityCert +--- PASS: TestAWS_authorizeToken (0.03s) + --- PASS: TestAWS_authorizeToken/ok/identityCert2 (0.00s) --- PASS: TestAWS_authorizeToken/fail/bad-token (0.00s) + --- PASS: TestAWS_authorizeToken/fail/cannot-validate-sig (0.00s) --- PASS: TestAWS_authorizeToken/fail/empty-account-id (0.00s) --- PASS: TestAWS_authorizeToken/fail/empty-instance-id (0.00s) --- PASS: TestAWS_authorizeToken/fail/empty-private-ip (0.00s) - --- PASS: TestAWS_authorizeToken/fail/invalid-audience (0.00s) - --- PASS: TestAWS_authorizeToken/fail/instance-age (0.00s) - --- PASS: TestAWS_authorizeToken/ok/identityCert2 (0.00s) - --- PASS: TestAWS_authorizeToken/fail/cannot-validate-sig (0.00s) --- PASS: TestAWS_authorizeToken/fail/empty-region (0.00s) --- PASS: TestAWS_authorizeToken/fail/invalid-token-issuer (0.00s) + --- PASS: TestAWS_authorizeToken/fail/invalid-account-id (0.00s) + --- PASS: TestAWS_authorizeToken/fail/invalid-audience (0.00s) --- PASS: TestAWS_authorizeToken/fail/invalid-subject-disabled-custom-SANs (0.00s) + --- PASS: TestAWS_authorizeToken/fail/instance-age (0.00s) + --- PASS: TestAWS_authorizeToken/ok (0.00s) + --- PASS: TestAWS_authorizeToken/ok/identityCert (0.00s) === RUN TestAWS_AuthorizeSign === RUN TestAWS_AuthorizeSign/ok === RUN TestAWS_AuthorizeSign/ok#01 @@ -6665,7 +6701,7 @@ === RUN TestAWS_AuthorizeSign/fail_nbf === RUN TestAWS_AuthorizeSign/fail_key === RUN TestAWS_AuthorizeSign/fail_instance_age ---- PASS: TestAWS_AuthorizeSign (0.05s) +--- PASS: TestAWS_AuthorizeSign (0.07s) --- PASS: TestAWS_AuthorizeSign/ok (0.00s) --- PASS: TestAWS_AuthorizeSign/ok#01 (0.00s) --- PASS: TestAWS_AuthorizeSign/ok#02 (0.00s) @@ -6699,7 +6735,7 @@ === RUN TestAWS_AuthorizeSSHSign/fail-extra-principal === RUN TestAWS_AuthorizeSSHSign/fail-sshCA-disabled === RUN TestAWS_AuthorizeSSHSign/fail-invalid-token ---- PASS: TestAWS_AuthorizeSSHSign (0.40s) +--- PASS: TestAWS_AuthorizeSSHSign (1.12s) --- PASS: TestAWS_AuthorizeSSHSign/ok (0.00s) --- PASS: TestAWS_AuthorizeSSHSign/ok-rsa2048 (0.00s) --- PASS: TestAWS_AuthorizeSSHSign/ok-type (0.00s) @@ -6727,7 +6763,7 @@ === RUN TestAzure_GetTokenID/ok_no_TOFU === RUN TestAzure_GetTokenID/fail_token === RUN TestAzure_GetTokenID/fail_claims ---- PASS: TestAzure_GetTokenID (0.02s) +--- PASS: TestAzure_GetTokenID (0.00s) --- PASS: TestAzure_GetTokenID/ok (0.00s) --- PASS: TestAzure_GetTokenID/ok_no_TOFU (0.00s) --- PASS: TestAzure_GetTokenID/fail_token (0.00s) @@ -6765,19 +6801,19 @@ --- PASS: TestAzure_Init/fail_JWK_URL (0.00s) --- PASS: TestAzure_Init/fail_config_Validate (0.00s) === RUN TestAzure_authorizeToken -=== RUN TestAzure_authorizeToken/fail/bad-token === RUN TestAzure_authorizeToken/fail/cannot-validate-sig === RUN TestAzure_authorizeToken/fail/invalid-token-issuer === RUN TestAzure_authorizeToken/fail/invalid-tenant-id === RUN TestAzure_authorizeToken/fail/invalid-xms-mir-id === RUN TestAzure_authorizeToken/ok ---- PASS: TestAzure_authorizeToken (0.00s) - --- PASS: TestAzure_authorizeToken/fail/bad-token (0.00s) +=== RUN TestAzure_authorizeToken/fail/bad-token +--- PASS: TestAzure_authorizeToken (0.01s) --- PASS: TestAzure_authorizeToken/fail/cannot-validate-sig (0.00s) --- PASS: TestAzure_authorizeToken/fail/invalid-token-issuer (0.00s) --- PASS: TestAzure_authorizeToken/fail/invalid-tenant-id (0.00s) --- PASS: TestAzure_authorizeToken/fail/invalid-xms-mir-id (0.00s) --- PASS: TestAzure_authorizeToken/ok (0.00s) + --- PASS: TestAzure_authorizeToken/fail/bad-token (0.00s) === RUN TestAzure_AuthorizeSign === RUN TestAzure_AuthorizeSign/ok === RUN TestAzure_AuthorizeSign/ok#01 @@ -6794,7 +6830,7 @@ === RUN TestAzure_AuthorizeSign/fail_exp === RUN TestAzure_AuthorizeSign/fail_nbf === RUN TestAzure_AuthorizeSign/fail_key ---- PASS: TestAzure_AuthorizeSign (0.01s) +--- PASS: TestAzure_AuthorizeSign (0.02s) --- PASS: TestAzure_AuthorizeSign/ok (0.00s) --- PASS: TestAzure_AuthorizeSign/ok#01 (0.00s) --- PASS: TestAzure_AuthorizeSign/ok#02 (0.00s) @@ -6829,7 +6865,7 @@ === RUN TestAzure_AuthorizeSSHSign/fail-extra-principal === RUN TestAzure_AuthorizeSSHSign/fail-sshCA-disabled === RUN TestAzure_AuthorizeSSHSign/fail-invalid-token ---- PASS: TestAzure_AuthorizeSSHSign (0.27s) +--- PASS: TestAzure_AuthorizeSSHSign (0.47s) --- PASS: TestAzure_AuthorizeSSHSign/ok (0.00s) --- PASS: TestAzure_AuthorizeSSHSign/ok-rsa2048 (0.00s) --- PASS: TestAzure_AuthorizeSSHSign/ok-type (0.00s) @@ -6866,7 +6902,7 @@ === RUN TestCollection_Load/ok === RUN TestCollection_Load/fail === RUN TestCollection_Load/invalid ---- PASS: TestCollection_Load (0.13s) +--- PASS: TestCollection_Load (0.14s) --- PASS: TestCollection_Load/ok (0.00s) --- PASS: TestCollection_Load/fail (0.00s) --- PASS: TestCollection_Load/invalid (0.00s) @@ -6878,7 +6914,7 @@ === RUN TestCollection_LoadByToken/bad === RUN TestCollection_LoadByToken/fail === RUN TestCollection_LoadByToken/fail-no-k8sSa-provisioner ---- PASS: TestCollection_LoadByToken (0.65s) +--- PASS: TestCollection_LoadByToken (0.60s) --- PASS: TestCollection_LoadByToken/ok1 (0.00s) --- PASS: TestCollection_LoadByToken/ok2 (0.00s) --- PASS: TestCollection_LoadByToken/ok3 (0.00s) @@ -6893,7 +6929,7 @@ === RUN TestCollection_LoadByCertificate/noExtension === RUN TestCollection_LoadByCertificate/notFound === RUN TestCollection_LoadByCertificate/badCert ---- PASS: TestCollection_LoadByCertificate (0.13s) +--- PASS: TestCollection_LoadByCertificate (0.14s) --- PASS: TestCollection_LoadByCertificate/ok1 (0.00s) --- PASS: TestCollection_LoadByCertificate/ok2 (0.00s) --- PASS: TestCollection_LoadByCertificate/ok3 (0.00s) @@ -6927,7 +6963,7 @@ === RUN TestCollection_Find/1_to_5 === RUN TestCollection_Find/defaultLimit === RUN TestCollection_Find/overTheLimit ---- PASS: TestCollection_Find (1.38s) +--- PASS: TestCollection_Find (1.30s) --- PASS: TestCollection_Find/all (0.00s) --- PASS: TestCollection_Find/0_to_19 (0.00s) --- PASS: TestCollection_Find/0_to_9 (0.00s) @@ -6937,6 +6973,7 @@ --- PASS: TestCollection_Find/defaultLimit (0.00s) --- PASS: TestCollection_Find/overTheLimit (0.00s) === RUN Test_matchesAudience +=== RUN Test_matchesAudience/false_arg2_empty === RUN Test_matchesAudience/false_arg1,arg2_empty === RUN Test_matchesAudience/false === RUN Test_matchesAudience/true @@ -6944,8 +6981,8 @@ === RUN Test_matchesAudience/true,portsB === RUN Test_matchesAudience/true,portsAB === RUN Test_matchesAudience/false_arg1_empty -=== RUN Test_matchesAudience/false_arg2_empty --- PASS: Test_matchesAudience (0.00s) + --- PASS: Test_matchesAudience/false_arg2_empty (0.00s) --- PASS: Test_matchesAudience/false_arg1,arg2_empty (0.00s) --- PASS: Test_matchesAudience/false (0.00s) --- PASS: Test_matchesAudience/true (0.00s) @@ -6953,7 +6990,6 @@ --- PASS: Test_matchesAudience/true,portsB (0.00s) --- PASS: Test_matchesAudience/true,portsAB (0.00s) --- PASS: Test_matchesAudience/false_arg1_empty (0.00s) - --- PASS: Test_matchesAudience/false_arg2_empty (0.00s) === RUN Test_stripPort === RUN Test_stripPort/with_port === RUN Test_stripPort/with_no_port @@ -7100,7 +7136,7 @@ === RUN TestGetProvisionerExtension/ok === RUN TestGetProvisionerExtension/fail_unmarshal === RUN TestGetProvisionerExtension/missing_extension ---- PASS: TestGetProvisionerExtension (0.01s) +--- PASS: TestGetProvisionerExtension (0.00s) --- PASS: TestGetProvisionerExtension/ok (0.00s) --- PASS: TestGetProvisionerExtension/fail_unmarshal (0.00s) --- PASS: TestGetProvisionerExtension/missing_extension (0.00s) @@ -7111,7 +7147,7 @@ === RUN TestGCP_GetTokenID/ok#01 === RUN TestGCP_GetTokenID/fail_token === RUN TestGCP_GetTokenID/fail_claims ---- PASS: TestGCP_GetTokenID (0.01s) +--- PASS: TestGCP_GetTokenID (0.00s) --- PASS: TestGCP_GetTokenID/ok (0.00s) --- PASS: TestGCP_GetTokenID/ok#01 (0.00s) --- PASS: TestGCP_GetTokenID/fail_token (0.00s) @@ -7125,9 +7161,9 @@ gcp_test.go:149: error on identity request: status=400, response=Bad Request === RUN TestGCP_GetIdentityToken/fail_url - gcp_test.go:149: error creating identity request: parse "://ca.smallstep.com?audience=https%3A%2F%2Fca%2F1.0%2Fsign%23gcp%2FBoAe2bToRs&format=full&licenses=FALSE": missing protocol scheme + gcp_test.go:149: error creating identity request: parse "://ca.smallstep.com?audience=https%3A%2F%2Fca%2F1.0%2Fsign%23gcp%2FcGyvQdll2m&format=full&licenses=FALSE": missing protocol scheme === RUN TestGCP_GetIdentityToken/fail_connect - gcp_test.go:149: error doing identity request, are you in a GCP VM?: Get "foobarzar?audience=https%3A%2F%2Fca%2F1.0%2Fsign%23gcp%2FBoAe2bToRs&format=full&licenses=FALSE": unsupported protocol scheme "" + gcp_test.go:149: error doing identity request, are you in a GCP VM?: Get "foobarzar?audience=https%3A%2F%2Fca%2F1.0%2Fsign%23gcp%2FcGyvQdll2m&format=full&licenses=FALSE": unsupported protocol scheme "" --- PASS: TestGCP_GetIdentityToken (0.00s) --- PASS: TestGCP_GetIdentityToken/ok (0.00s) --- PASS: TestGCP_GetIdentityToken/fail_ca_url (0.00s) @@ -7143,7 +7179,7 @@ === RUN TestGCP_Init/bad_duration === RUN TestGCP_Init/bad_claims === RUN TestGCP_Init/bad_certs ---- PASS: TestGCP_Init (0.01s) +--- PASS: TestGCP_Init (0.00s) --- PASS: TestGCP_Init/ok (0.00s) --- PASS: TestGCP_Init/ok#01 (0.00s) --- PASS: TestGCP_Init/ok#02 (0.00s) @@ -7153,28 +7189,28 @@ --- PASS: TestGCP_Init/bad_claims (0.00s) --- PASS: TestGCP_Init/bad_certs (0.00s) === RUN TestGCP_authorizeToken -=== RUN TestGCP_authorizeToken/ok === RUN TestGCP_authorizeToken/fail/cannot-validate-sig -=== RUN TestGCP_authorizeToken/fail/invalid-issuer === RUN TestGCP_authorizeToken/fail/invalid-serviceAccount === RUN TestGCP_authorizeToken/fail/instance-age -=== RUN TestGCP_authorizeToken/fail/empty-instance-name -=== RUN TestGCP_authorizeToken/fail/empty-project-id +=== RUN TestGCP_authorizeToken/ok === RUN TestGCP_authorizeToken/fail/bad-token +=== RUN TestGCP_authorizeToken/fail/invalid-issuer === RUN TestGCP_authorizeToken/fail/invalid-projectID === RUN TestGCP_authorizeToken/fail/empty-instance-id +=== RUN TestGCP_authorizeToken/fail/empty-instance-name +=== RUN TestGCP_authorizeToken/fail/empty-project-id === RUN TestGCP_authorizeToken/fail/empty-zone ---- PASS: TestGCP_authorizeToken (0.00s) - --- PASS: TestGCP_authorizeToken/ok (0.00s) +--- PASS: TestGCP_authorizeToken (0.01s) --- PASS: TestGCP_authorizeToken/fail/cannot-validate-sig (0.00s) - --- PASS: TestGCP_authorizeToken/fail/invalid-issuer (0.00s) --- PASS: TestGCP_authorizeToken/fail/invalid-serviceAccount (0.00s) --- PASS: TestGCP_authorizeToken/fail/instance-age (0.00s) - --- PASS: TestGCP_authorizeToken/fail/empty-instance-name (0.00s) - --- PASS: TestGCP_authorizeToken/fail/empty-project-id (0.00s) + --- PASS: TestGCP_authorizeToken/ok (0.00s) --- PASS: TestGCP_authorizeToken/fail/bad-token (0.00s) + --- PASS: TestGCP_authorizeToken/fail/invalid-issuer (0.00s) --- PASS: TestGCP_authorizeToken/fail/invalid-projectID (0.00s) --- PASS: TestGCP_authorizeToken/fail/empty-instance-id (0.00s) + --- PASS: TestGCP_authorizeToken/fail/empty-instance-name (0.00s) + --- PASS: TestGCP_authorizeToken/fail/empty-project-id (0.00s) --- PASS: TestGCP_authorizeToken/fail/empty-zone (0.00s) === RUN TestGCP_AuthorizeSign === RUN TestGCP_AuthorizeSign/ok @@ -7193,7 +7229,7 @@ === RUN TestGCP_AuthorizeSign/fail_instance_name === RUN TestGCP_AuthorizeSign/fail_project_id === RUN TestGCP_AuthorizeSign/fail_zone ---- PASS: TestGCP_AuthorizeSign (0.02s) +--- PASS: TestGCP_AuthorizeSign (0.01s) --- PASS: TestGCP_AuthorizeSign/ok (0.00s) --- PASS: TestGCP_AuthorizeSign/ok#01 (0.00s) --- PASS: TestGCP_AuthorizeSign/ok#02 (0.00s) @@ -7225,7 +7261,7 @@ === RUN TestGCP_AuthorizeSSHSign/fail-extra-principal === RUN TestGCP_AuthorizeSSHSign/fail-sshCA-disabled === RUN TestGCP_AuthorizeSSHSign/fail-invalid-token ---- PASS: TestGCP_AuthorizeSSHSign (0.57s) +--- PASS: TestGCP_AuthorizeSSHSign (0.37s) --- PASS: TestGCP_AuthorizeSSHSign/ok (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/ok-rsa2048 (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/ok-type (0.00s) @@ -7247,21 +7283,21 @@ --- PASS: TestGCP_AuthorizeRenew/ok (0.00s) --- PASS: TestGCP_AuthorizeRenew/fail/renewal-disabled (0.00s) === RUN TestJWK_Getters ---- PASS: TestJWK_Getters (0.13s) +--- PASS: TestJWK_Getters (0.15s) === RUN TestJWK_Init +=== RUN TestJWK_Init/fail-bad-claims +=== RUN TestJWK_Init/ok === RUN TestJWK_Init/fail-empty === RUN TestJWK_Init/fail-empty-name === RUN TestJWK_Init/fail-empty-type === RUN TestJWK_Init/fail-empty-key -=== RUN TestJWK_Init/fail-bad-claims -=== RUN TestJWK_Init/ok --- PASS: TestJWK_Init (0.00s) + --- PASS: TestJWK_Init/fail-bad-claims (0.00s) + --- PASS: TestJWK_Init/ok (0.00s) --- PASS: TestJWK_Init/fail-empty (0.00s) --- PASS: TestJWK_Init/fail-empty-name (0.00s) --- PASS: TestJWK_Init/fail-empty-type (0.00s) --- PASS: TestJWK_Init/fail-empty-key (0.00s) - --- PASS: TestJWK_Init/fail-bad-claims (0.00s) - --- PASS: TestJWK_Init/ok (0.00s) === RUN TestJWK_authorizeToken === RUN TestJWK_authorizeToken/fail-token === RUN TestJWK_authorizeToken/fail-key @@ -7275,7 +7311,7 @@ === RUN TestJWK_authorizeToken/ok === RUN TestJWK_authorizeToken/ok-no-encrypted-key === RUN TestJWK_authorizeToken/ok-no-sans ---- PASS: TestJWK_authorizeToken (0.53s) +--- PASS: TestJWK_authorizeToken (0.57s) --- PASS: TestJWK_authorizeToken/fail-token (0.00s) --- PASS: TestJWK_authorizeToken/fail-key (0.00s) --- PASS: TestJWK_authorizeToken/fail-claims (0.00s) @@ -7291,21 +7327,21 @@ === RUN TestJWK_AuthorizeRevoke === RUN TestJWK_AuthorizeRevoke/fail-signature === RUN TestJWK_AuthorizeRevoke/ok ---- PASS: TestJWK_AuthorizeRevoke (0.29s) +--- PASS: TestJWK_AuthorizeRevoke (0.26s) --- PASS: TestJWK_AuthorizeRevoke/fail-signature (0.00s) --- PASS: TestJWK_AuthorizeRevoke/ok (0.00s) === RUN TestJWK_AuthorizeSign === RUN TestJWK_AuthorizeSign/fail-signature === RUN TestJWK_AuthorizeSign/ok-sans === RUN TestJWK_AuthorizeSign/ok-no-sans ---- PASS: TestJWK_AuthorizeSign (0.27s) +--- PASS: TestJWK_AuthorizeSign (0.26s) --- PASS: TestJWK_AuthorizeSign/fail-signature (0.00s) --- PASS: TestJWK_AuthorizeSign/ok-sans (0.00s) --- PASS: TestJWK_AuthorizeSign/ok-no-sans (0.00s) === RUN TestJWK_AuthorizeRenew === RUN TestJWK_AuthorizeRenew/ok === RUN TestJWK_AuthorizeRenew/fail/renew-disabled ---- PASS: TestJWK_AuthorizeRenew (0.38s) +--- PASS: TestJWK_AuthorizeRenew (0.26s) --- PASS: TestJWK_AuthorizeRenew/ok (0.00s) --- PASS: TestJWK_AuthorizeRenew/fail/renew-disabled (0.00s) === RUN TestJWK_AuthorizeSSHSign @@ -7321,7 +7357,7 @@ === RUN TestJWK_AuthorizeSSHSign/fail-sshCA-disabled === RUN TestJWK_AuthorizeSSHSign/fail-signature === RUN TestJWK_AuthorizeSSHSign/rail-rsa1024 ---- PASS: TestJWK_AuthorizeSSHSign (0.73s) +--- PASS: TestJWK_AuthorizeSSHSign (1.12s) --- PASS: TestJWK_AuthorizeSSHSign/user (0.00s) --- PASS: TestJWK_AuthorizeSSHSign/user-rsa2048 (0.00s) --- PASS: TestJWK_AuthorizeSSHSign/user-type (0.00s) @@ -7350,7 +7386,7 @@ === RUN TestJWK_AuthorizeSign_SSHOptions/fail-audience === RUN TestJWK_AuthorizeSign_SSHOptions/fail-expired === RUN TestJWK_AuthorizeSign_SSHOptions/fail-notBefore ---- PASS: TestJWK_AuthorizeSign_SSHOptions (0.28s) +--- PASS: TestJWK_AuthorizeSign_SSHOptions (0.27s) --- PASS: TestJWK_AuthorizeSign_SSHOptions/ok-user (0.00s) --- PASS: TestJWK_AuthorizeSign_SSHOptions/ok-host (0.00s) --- PASS: TestJWK_AuthorizeSign_SSHOptions/ok-user-validAfter (0.00s) @@ -7369,35 +7405,35 @@ === RUN TestJWK_AuthorizeSSHRevoke === RUN TestJWK_AuthorizeSSHRevoke/fail/invalid-token === RUN TestJWK_AuthorizeSSHRevoke/ok ---- PASS: TestJWK_AuthorizeSSHRevoke (0.40s) +--- PASS: TestJWK_AuthorizeSSHRevoke (0.39s) --- PASS: TestJWK_AuthorizeSSHRevoke/fail/invalid-token (0.13s) --- PASS: TestJWK_AuthorizeSSHRevoke/ok (0.26s) === RUN TestK8sSA_Getters --- PASS: TestK8sSA_Getters (0.00s) === RUN TestK8sSA_authorizeToken +=== RUN TestK8sSA_authorizeToken/fail/invalid-issuer +=== RUN TestK8sSA_authorizeToken/ok === RUN TestK8sSA_authorizeToken/fail/bad-token === RUN TestK8sSA_authorizeToken/fail/not-implemented === RUN TestK8sSA_authorizeToken/fail/error-validating-token -=== RUN TestK8sSA_authorizeToken/fail/invalid-issuer -=== RUN TestK8sSA_authorizeToken/ok --- PASS: TestK8sSA_authorizeToken (0.00s) + --- PASS: TestK8sSA_authorizeToken/fail/invalid-issuer (0.00s) + --- PASS: TestK8sSA_authorizeToken/ok (0.00s) --- PASS: TestK8sSA_authorizeToken/fail/bad-token (0.00s) --- PASS: TestK8sSA_authorizeToken/fail/not-implemented (0.00s) --- PASS: TestK8sSA_authorizeToken/fail/error-validating-token (0.00s) - --- PASS: TestK8sSA_authorizeToken/fail/invalid-issuer (0.00s) - --- PASS: TestK8sSA_authorizeToken/ok (0.00s) === RUN TestK8sSA_AuthorizeRevoke -=== RUN TestK8sSA_AuthorizeRevoke/fail/invalid-token === RUN TestK8sSA_AuthorizeRevoke/ok +=== RUN TestK8sSA_AuthorizeRevoke/fail/invalid-token --- PASS: TestK8sSA_AuthorizeRevoke (0.00s) - --- PASS: TestK8sSA_AuthorizeRevoke/fail/invalid-token (0.00s) --- PASS: TestK8sSA_AuthorizeRevoke/ok (0.00s) + --- PASS: TestK8sSA_AuthorizeRevoke/fail/invalid-token (0.00s) === RUN TestK8sSA_AuthorizeRenew -=== RUN TestK8sSA_AuthorizeRenew/ok === RUN TestK8sSA_AuthorizeRenew/fail/renew-disabled +=== RUN TestK8sSA_AuthorizeRenew/ok --- PASS: TestK8sSA_AuthorizeRenew (0.00s) - --- PASS: TestK8sSA_AuthorizeRenew/ok (0.00s) --- PASS: TestK8sSA_AuthorizeRenew/fail/renew-disabled (0.00s) + --- PASS: TestK8sSA_AuthorizeRenew/ok (0.00s) === RUN TestK8sSA_AuthorizeSign === RUN TestK8sSA_AuthorizeSign/fail/invalid-token === RUN TestK8sSA_AuthorizeSign/ok @@ -7421,7 +7457,7 @@ === RUN Test_keyStore --- PASS: Test_keyStore (5.00s) === RUN Test_keyStore_noCache ---- PASS: Test_keyStore_noCache (0.00s) +--- PASS: Test_keyStore_noCache (0.01s) === RUN Test_keyStore_Get === RUN Test_keyStore_Get/ok1 === RUN Test_keyStore_Get/ok2 @@ -7455,7 +7491,7 @@ === RUN TestNebula_Init/fail_root === RUN TestNebula_Init/fail_bad_root === RUN TestNebula_Init/fail_bad_claims ---- PASS: TestNebula_Init (0.01s) +--- PASS: TestNebula_Init (0.02s) --- PASS: TestNebula_Init/ok (0.00s) --- PASS: TestNebula_Init/ok_with_claims (0.00s) --- PASS: TestNebula_Init/ok_with_options (0.00s) @@ -7513,7 +7549,7 @@ === RUN TestNebula_AuthorizeSSHSign/fail_principals === RUN TestNebula_AuthorizeSSHSign/fail_disabled === RUN TestNebula_AuthorizeSSHSign/fail_template ---- PASS: TestNebula_AuthorizeSSHSign (0.01s) +--- PASS: TestNebula_AuthorizeSSHSign (0.02s) --- PASS: TestNebula_AuthorizeSSHSign/ok (0.00s) --- PASS: TestNebula_AuthorizeSSHSign/ok_no_options (0.00s) --- PASS: TestNebula_AuthorizeSSHSign/ok_with_validity (0.00s) @@ -7531,14 +7567,14 @@ === RUN TestNebula_AuthorizeRevoke === RUN TestNebula_AuthorizeRevoke/ok === RUN TestNebula_AuthorizeRevoke/fail_token ---- PASS: TestNebula_AuthorizeRevoke (0.00s) +--- PASS: TestNebula_AuthorizeRevoke (0.01s) --- PASS: TestNebula_AuthorizeRevoke/ok (0.00s) --- PASS: TestNebula_AuthorizeRevoke/fail_token (0.00s) === RUN TestNebula_AuthorizeSSHRevoke === RUN TestNebula_AuthorizeSSHRevoke/ok === RUN TestNebula_AuthorizeSSHRevoke/fail_token === RUN TestNebula_AuthorizeSSHRevoke/fail_disabled ---- PASS: TestNebula_AuthorizeSSHRevoke (0.00s) +--- PASS: TestNebula_AuthorizeSSHRevoke (0.01s) --- PASS: TestNebula_AuthorizeSSHRevoke/ok (0.00s) --- PASS: TestNebula_AuthorizeSSHRevoke/fail_token (0.00s) --- PASS: TestNebula_AuthorizeSSHRevoke/fail_disabled (0.00s) @@ -7562,7 +7598,7 @@ === RUN TestNebula_authorizeToken/fail_claims_iss === RUN TestNebula_authorizeToken/fail_claims_aud === RUN TestNebula_authorizeToken/fail_claims_sub ---- PASS: TestNebula_authorizeToken (0.01s) +--- PASS: TestNebula_authorizeToken (0.02s) --- PASS: TestNebula_authorizeToken/ok_x509 (0.00s) --- PASS: TestNebula_authorizeToken/ok_x509_no_sans (0.00s) --- PASS: TestNebula_authorizeToken/ok_ssh (0.00s) @@ -7702,7 +7738,7 @@ === RUN TestOIDC_AuthorizeRevoke/ok1 === RUN TestOIDC_AuthorizeRevoke/admin === RUN TestOIDC_AuthorizeRevoke/fail-email ---- PASS: TestOIDC_AuthorizeRevoke (0.00s) +--- PASS: TestOIDC_AuthorizeRevoke (0.01s) --- PASS: TestOIDC_AuthorizeRevoke/ok1 (0.00s) --- PASS: TestOIDC_AuthorizeRevoke/admin (0.00s) --- PASS: TestOIDC_AuthorizeRevoke/fail-email (0.00s) @@ -7732,7 +7768,7 @@ === RUN TestOIDC_AuthorizeSSHSign/fail-admin-type === RUN TestOIDC_AuthorizeSSHSign/fail-admin-key-id === RUN TestOIDC_AuthorizeSSHSign/fail-admin-principals ---- PASS: TestOIDC_AuthorizeSSHSign (0.31s) +--- PASS: TestOIDC_AuthorizeSSHSign (0.50s) --- PASS: TestOIDC_AuthorizeSSHSign/ok (0.00s) --- PASS: TestOIDC_AuthorizeSSHSign/ok-rsa2048 (0.00s) --- PASS: TestOIDC_AuthorizeSSHSign/ok-user (0.00s) @@ -7756,7 +7792,7 @@ === RUN TestOIDC_AuthorizeSSHRevoke/ok === RUN TestOIDC_AuthorizeSSHRevoke/fail/invalid-token === RUN TestOIDC_AuthorizeSSHRevoke/fail/not-admin ---- PASS: TestOIDC_AuthorizeSSHRevoke (0.00s) +--- PASS: TestOIDC_AuthorizeSSHRevoke (0.01s) --- PASS: TestOIDC_AuthorizeSSHRevoke/ok (0.00s) --- PASS: TestOIDC_AuthorizeSSHRevoke/fail/invalid-token (0.00s) --- PASS: TestOIDC_AuthorizeSSHRevoke/fail/not-admin (0.00s) @@ -7818,7 +7854,7 @@ === RUN TestTemplateOptions/ok === RUN TestTemplateOptions/okCustomTemplate === RUN TestTemplateOptions/fail ---- PASS: TestTemplateOptions (0.01s) +--- PASS: TestTemplateOptions (0.00s) --- PASS: TestTemplateOptions/ok (0.00s) --- PASS: TestTemplateOptions/okCustomTemplate (0.00s) --- PASS: TestTemplateOptions/fail (0.00s) @@ -7897,27 +7933,27 @@ --- PASS: TestSanitizeSSHUserPrincipal/email_with_underscores (0.00s) --- PASS: TestSanitizeSSHUserPrincipal/email_with_symbols (0.00s) === RUN TestDefaultIdentityFunc -=== RUN TestDefaultIdentityFunc/ok_symbol -=== RUN TestDefaultIdentityFunc/ok_username === RUN TestDefaultIdentityFunc/ok -=== RUN TestDefaultIdentityFunc/ok_simple_letter_case +=== RUN TestDefaultIdentityFunc/ok_letter_case +=== RUN TestDefaultIdentityFunc/ok_username === RUN TestDefaultIdentityFunc/ok_usernames === RUN TestDefaultIdentityFunc/ok_empty_username === RUN TestDefaultIdentityFunc/fail/unsupported-provisioner === RUN TestDefaultIdentityFunc/fail/bad-ssh-regex -=== RUN TestDefaultIdentityFunc/ok_letter_case === RUN TestDefaultIdentityFunc/ok_simple +=== RUN TestDefaultIdentityFunc/ok_simple_letter_case +=== RUN TestDefaultIdentityFunc/ok_symbol --- PASS: TestDefaultIdentityFunc (0.00s) - --- PASS: TestDefaultIdentityFunc/ok_symbol (0.00s) - --- PASS: TestDefaultIdentityFunc/ok_username (0.00s) --- PASS: TestDefaultIdentityFunc/ok (0.00s) - --- PASS: TestDefaultIdentityFunc/ok_simple_letter_case (0.00s) + --- PASS: TestDefaultIdentityFunc/ok_letter_case (0.00s) + --- PASS: TestDefaultIdentityFunc/ok_username (0.00s) --- PASS: TestDefaultIdentityFunc/ok_usernames (0.00s) --- PASS: TestDefaultIdentityFunc/ok_empty_username (0.00s) --- PASS: TestDefaultIdentityFunc/fail/unsupported-provisioner (0.00s) --- PASS: TestDefaultIdentityFunc/fail/bad-ssh-regex (0.00s) - --- PASS: TestDefaultIdentityFunc/ok_letter_case (0.00s) --- PASS: TestDefaultIdentityFunc/ok_simple (0.00s) + --- PASS: TestDefaultIdentityFunc/ok_simple_letter_case (0.00s) + --- PASS: TestDefaultIdentityFunc/ok_symbol (0.00s) === RUN TestUnimplementedMethods === RUN TestUnimplementedMethods/jwk/sshRekey === RUN TestUnimplementedMethods/jwk/sshRenew @@ -8099,35 +8135,35 @@ --- PASS: Test_urisValidator_Valid/fail2 (0.00s) --- PASS: Test_urisValidator_Valid/fail3 (0.00s) === RUN Test_defaultSANsValidator_Valid +=== RUN Test_defaultSANsValidator_Valid/fail/emailAddressesValidator +=== RUN Test_defaultSANsValidator_Valid/fail/ipAddressesValidator === RUN Test_defaultSANsValidator_Valid/fail/urisValidator === RUN Test_defaultSANsValidator_Valid/ok === RUN Test_defaultSANsValidator_Valid/fail/dnsNamesValidator -=== RUN Test_defaultSANsValidator_Valid/fail/emailAddressesValidator -=== RUN Test_defaultSANsValidator_Valid/fail/ipAddressesValidator --- PASS: Test_defaultSANsValidator_Valid (0.00s) + --- PASS: Test_defaultSANsValidator_Valid/fail/emailAddressesValidator (0.00s) + --- PASS: Test_defaultSANsValidator_Valid/fail/ipAddressesValidator (0.00s) --- PASS: Test_defaultSANsValidator_Valid/fail/urisValidator (0.00s) --- PASS: Test_defaultSANsValidator_Valid/ok (0.00s) --- PASS: Test_defaultSANsValidator_Valid/fail/dnsNamesValidator (0.00s) - --- PASS: Test_defaultSANsValidator_Valid/fail/emailAddressesValidator (0.00s) - --- PASS: Test_defaultSANsValidator_Valid/fail/ipAddressesValidator (0.00s) === RUN Test_validityValidator_Valid +=== RUN Test_validityValidator_Valid/fail/notBefore-after-notAfter +=== RUN Test_validityValidator_Valid/fail/duration-too-short === RUN Test_validityValidator_Valid/ok/duration-exactly-min === RUN Test_validityValidator_Valid/fail/duration-too-great === RUN Test_validityValidator_Valid/ok/duration-exactly-max === RUN Test_validityValidator_Valid/ok/duration-exact-min-with-backdate === RUN Test_validityValidator_Valid/ok/duration-exact-max-with-backdate === RUN Test_validityValidator_Valid/fail/notAfter-past -=== RUN Test_validityValidator_Valid/fail/notBefore-after-notAfter -=== RUN Test_validityValidator_Valid/fail/duration-too-short --- PASS: Test_validityValidator_Valid (2.00s) + --- PASS: Test_validityValidator_Valid/fail/notBefore-after-notAfter (0.00s) + --- PASS: Test_validityValidator_Valid/fail/duration-too-short (0.00s) --- PASS: Test_validityValidator_Valid/ok/duration-exactly-min (0.00s) --- PASS: Test_validityValidator_Valid/fail/duration-too-great (0.00s) --- PASS: Test_validityValidator_Valid/ok/duration-exactly-max (0.00s) --- PASS: Test_validityValidator_Valid/ok/duration-exact-min-with-backdate (1.00s) --- PASS: Test_validityValidator_Valid/ok/duration-exact-max-with-backdate (1.00s) --- PASS: Test_validityValidator_Valid/fail/notAfter-past (0.00s) - --- PASS: Test_validityValidator_Valid/fail/notBefore-after-notAfter (0.00s) - --- PASS: Test_validityValidator_Valid/fail/duration-too-short (0.00s) === RUN Test_forceCN_Option === RUN Test_forceCN_Option/ok/CN-not-forced === RUN Test_forceCN_Option/ok/CN-forced-and-set @@ -8139,17 +8175,17 @@ --- PASS: Test_forceCN_Option/ok/CN-forced-and-not-set (0.00s) --- PASS: Test_forceCN_Option/fail/CN-forced-and-empty-DNSNames (0.00s) === RUN Test_profileDefaultDuration_Option +=== RUN Test_profileDefaultDuration_Option/ok/notBefore-notAfter-duration-empty +=== RUN Test_profileDefaultDuration_Option/ok/notBefore-set === RUN Test_profileDefaultDuration_Option/ok/duration-set === RUN Test_profileDefaultDuration_Option/ok/notAfter-set === RUN Test_profileDefaultDuration_Option/ok/notBefore-and-notAfter-set -=== RUN Test_profileDefaultDuration_Option/ok/notBefore-notAfter-duration-empty -=== RUN Test_profileDefaultDuration_Option/ok/notBefore-set ---- PASS: Test_profileDefaultDuration_Option (0.51s) +--- PASS: Test_profileDefaultDuration_Option (0.50s) + --- PASS: Test_profileDefaultDuration_Option/ok/notBefore-notAfter-duration-empty (0.10s) + --- PASS: Test_profileDefaultDuration_Option/ok/notBefore-set (0.10s) --- PASS: Test_profileDefaultDuration_Option/ok/duration-set (0.10s) --- PASS: Test_profileDefaultDuration_Option/ok/notAfter-set (0.10s) --- PASS: Test_profileDefaultDuration_Option/ok/notBefore-and-notAfter-set (0.10s) - --- PASS: Test_profileDefaultDuration_Option/ok/notBefore-notAfter-duration-empty (0.10s) - --- PASS: Test_profileDefaultDuration_Option/ok/notBefore-set (0.10s) === RUN Test_newProvisionerExtension_Option === RUN Test_newProvisionerExtension_Option/ok/one-element === RUN Test_newProvisionerExtension_Option/ok/prepend @@ -8157,21 +8193,21 @@ --- PASS: Test_newProvisionerExtension_Option/ok/one-element (0.00s) --- PASS: Test_newProvisionerExtension_Option/ok/prepend (0.00s) === RUN Test_profileLimitDuration_Option +=== RUN Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-under-default +=== RUN Test_profileLimitDuration_Option/ok/over-limit-with-backdate +=== RUN Test_profileLimitDuration_Option/ok/under-limit-with-backdate === RUN Test_profileLimitDuration_Option/fail/notBefore-before-active-window === RUN Test_profileLimitDuration_Option/fail/requested-notAfter-after-limit === RUN Test_profileLimitDuration_Option/ok/valid-notAfter-requested === RUN Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-over-default -=== RUN Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-under-default -=== RUN Test_profileLimitDuration_Option/ok/over-limit-with-backdate -=== RUN Test_profileLimitDuration_Option/ok/under-limit-with-backdate --- PASS: Test_profileLimitDuration_Option (0.00s) + --- PASS: Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-under-default (0.00s) + --- PASS: Test_profileLimitDuration_Option/ok/over-limit-with-backdate (0.00s) + --- PASS: Test_profileLimitDuration_Option/ok/under-limit-with-backdate (0.00s) --- PASS: Test_profileLimitDuration_Option/fail/notBefore-before-active-window (0.00s) --- PASS: Test_profileLimitDuration_Option/fail/requested-notAfter-after-limit (0.00s) --- PASS: Test_profileLimitDuration_Option/ok/valid-notAfter-requested (0.00s) --- PASS: Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-over-default (0.00s) - --- PASS: Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-under-default (0.00s) - --- PASS: Test_profileLimitDuration_Option/ok/over-limit-with-backdate (0.00s) - --- PASS: Test_profileLimitDuration_Option/ok/under-limit-with-backdate (0.00s) === RUN TestSSHOptions_Type === RUN TestSSHOptions_Type/user === RUN TestSSHOptions_Type/host @@ -8183,33 +8219,33 @@ --- PASS: TestSSHOptions_Type/empty (0.00s) --- PASS: TestSSHOptions_Type/invalid (0.00s) === RUN TestSSHOptions_Modify -=== RUN TestSSHOptions_Modify/ok === RUN TestSSHOptions_Modify/fail/unexpected-cert-type === RUN TestSSHOptions_Modify/fail/validAfter-greater-validBefore === RUN TestSSHOptions_Modify/ok/user-cert === RUN TestSSHOptions_Modify/ok/host-cert +=== RUN TestSSHOptions_Modify/ok --- PASS: TestSSHOptions_Modify (0.00s) - --- PASS: TestSSHOptions_Modify/ok (0.00s) --- PASS: TestSSHOptions_Modify/fail/unexpected-cert-type (0.00s) --- PASS: TestSSHOptions_Modify/fail/validAfter-greater-validBefore (0.00s) --- PASS: TestSSHOptions_Modify/ok/user-cert (0.00s) --- PASS: TestSSHOptions_Modify/ok/host-cert (0.00s) + --- PASS: TestSSHOptions_Modify/ok (0.00s) === RUN TestSSHOptions_Match +=== RUN TestSSHOptions_Match/fail/cert-type +=== RUN TestSSHOptions_Match/fail/pricipals +=== RUN TestSSHOptions_Match/fail/validAfter === RUN TestSSHOptions_Match/fail/validBefore === RUN TestSSHOptions_Match/ok/original-empty === RUN TestSSHOptions_Match/ok/cmp-empty === RUN TestSSHOptions_Match/ok/equal -=== RUN TestSSHOptions_Match/fail/cert-type -=== RUN TestSSHOptions_Match/fail/pricipals -=== RUN TestSSHOptions_Match/fail/validAfter --- PASS: TestSSHOptions_Match (0.00s) + --- PASS: TestSSHOptions_Match/fail/cert-type (0.00s) + --- PASS: TestSSHOptions_Match/fail/pricipals (0.00s) + --- PASS: TestSSHOptions_Match/fail/validAfter (0.00s) --- PASS: TestSSHOptions_Match/fail/validBefore (0.00s) --- PASS: TestSSHOptions_Match/ok/original-empty (0.00s) --- PASS: TestSSHOptions_Match/ok/cmp-empty (0.00s) --- PASS: TestSSHOptions_Match/ok/equal (0.00s) - --- PASS: TestSSHOptions_Match/fail/cert-type (0.00s) - --- PASS: TestSSHOptions_Match/fail/pricipals (0.00s) - --- PASS: TestSSHOptions_Match/fail/validAfter (0.00s) === RUN Test_sshCertPrincipalsModifier_Modify === RUN Test_sshCertPrincipalsModifier_Modify/ok --- PASS: Test_sshCertPrincipalsModifier_Modify (0.00s) @@ -8237,15 +8273,15 @@ --- PASS: Test_sshCertDefaultsModifier_Modify/ok/changes (0.00s) --- PASS: Test_sshCertDefaultsModifier_Modify/ok/no-changes (0.00s) === RUN Test_sshDefaultExtensionModifier_Modify -=== RUN Test_sshDefaultExtensionModifier_Modify/fail/unexpected-cert-type -=== RUN Test_sshDefaultExtensionModifier_Modify/ok/host === RUN Test_sshDefaultExtensionModifier_Modify/ok/user/extensions-exists === RUN Test_sshDefaultExtensionModifier_Modify/ok/user/no-extensions +=== RUN Test_sshDefaultExtensionModifier_Modify/fail/unexpected-cert-type +=== RUN Test_sshDefaultExtensionModifier_Modify/ok/host --- PASS: Test_sshDefaultExtensionModifier_Modify (0.00s) - --- PASS: Test_sshDefaultExtensionModifier_Modify/fail/unexpected-cert-type (0.00s) - --- PASS: Test_sshDefaultExtensionModifier_Modify/ok/host (0.00s) --- PASS: Test_sshDefaultExtensionModifier_Modify/ok/user/extensions-exists (0.00s) --- PASS: Test_sshDefaultExtensionModifier_Modify/ok/user/no-extensions (0.00s) + --- PASS: Test_sshDefaultExtensionModifier_Modify/fail/unexpected-cert-type (0.00s) + --- PASS: Test_sshDefaultExtensionModifier_Modify/ok/host (0.00s) === RUN Test_sshCertDefaultValidator_Valid === RUN Test_sshCertDefaultValidator_Valid/fail/zero-nonce === RUN Test_sshCertDefaultValidator_Valid/fail/nil-key @@ -8300,23 +8336,23 @@ --- PASS: Test_sshCertValidityValidator/ok (0.00s) === RUN Test_sshValidityModifier === RUN Test_sshValidityModifier/fail/type-not-set -=== RUN Test_sshValidityModifier/fail/requested-validAfter-after-limit -=== RUN Test_sshValidityModifier/ok/no-limit -=== RUN Test_sshValidityModifier/ok/empty-requested-validBefore-limit-before-default === RUN Test_sshValidityModifier/fail/type-not-recognized -=== RUN Test_sshValidityModifier/fail/requested-validBefore-after-limit === RUN Test_sshValidityModifier/ok/defaults === RUN Test_sshValidityModifier/ok/valid-requested-validBefore +=== RUN Test_sshValidityModifier/ok/empty-requested-validBefore-limit-before-default +=== RUN Test_sshValidityModifier/fail/requested-validAfter-after-limit +=== RUN Test_sshValidityModifier/fail/requested-validBefore-after-limit +=== RUN Test_sshValidityModifier/ok/no-limit === RUN Test_sshValidityModifier/ok/empty-requested-validBefore-limit-after-default --- PASS: Test_sshValidityModifier (0.00s) --- PASS: Test_sshValidityModifier/fail/type-not-set (0.00s) - --- PASS: Test_sshValidityModifier/fail/requested-validAfter-after-limit (0.00s) - --- PASS: Test_sshValidityModifier/ok/no-limit (0.00s) - --- PASS: Test_sshValidityModifier/ok/empty-requested-validBefore-limit-before-default (0.00s) --- PASS: Test_sshValidityModifier/fail/type-not-recognized (0.00s) - --- PASS: Test_sshValidityModifier/fail/requested-validBefore-after-limit (0.00s) --- PASS: Test_sshValidityModifier/ok/defaults (0.00s) --- PASS: Test_sshValidityModifier/ok/valid-requested-validBefore (0.00s) + --- PASS: Test_sshValidityModifier/ok/empty-requested-validBefore-limit-before-default (0.00s) + --- PASS: Test_sshValidityModifier/fail/requested-validAfter-after-limit (0.00s) + --- PASS: Test_sshValidityModifier/fail/requested-validBefore-after-limit (0.00s) + --- PASS: Test_sshValidityModifier/ok/no-limit (0.00s) --- PASS: Test_sshValidityModifier/ok/empty-requested-validBefore-limit-after-default (0.00s) === RUN Test_sshDefaultDuration_Option === RUN Test_sshDefaultDuration_Option/user @@ -8369,25 +8405,25 @@ === RUN TestSSHPOP_Getters --- PASS: TestSSHPOP_Getters (0.00s) === RUN TestSSHPOP_authorizeToken -=== RUN TestSSHPOP_authorizeToken/fail/no-signer-found -=== RUN TestSSHPOP_authorizeToken/fail/error-parsing-claims-bad-sig === RUN TestSSHPOP_authorizeToken/fail/invalid-claims-issuer === RUN TestSSHPOP_authorizeToken/fail/invalid-audience === RUN TestSSHPOP_authorizeToken/fail/empty-subject === RUN TestSSHPOP_authorizeToken/ok -=== RUN TestSSHPOP_authorizeToken/fail/cert-past-validity === RUN TestSSHPOP_authorizeToken/fail/bad-token === RUN TestSSHPOP_authorizeToken/fail/cert-not-yet-valid +=== RUN TestSSHPOP_authorizeToken/fail/cert-past-validity +=== RUN TestSSHPOP_authorizeToken/fail/no-signer-found +=== RUN TestSSHPOP_authorizeToken/fail/error-parsing-claims-bad-sig --- PASS: TestSSHPOP_authorizeToken (0.02s) - --- PASS: TestSSHPOP_authorizeToken/fail/no-signer-found (0.00s) - --- PASS: TestSSHPOP_authorizeToken/fail/error-parsing-claims-bad-sig (0.00s) --- PASS: TestSSHPOP_authorizeToken/fail/invalid-claims-issuer (0.00s) --- PASS: TestSSHPOP_authorizeToken/fail/invalid-audience (0.00s) --- PASS: TestSSHPOP_authorizeToken/fail/empty-subject (0.00s) --- PASS: TestSSHPOP_authorizeToken/ok (0.00s) - --- PASS: TestSSHPOP_authorizeToken/fail/cert-past-validity (0.00s) --- PASS: TestSSHPOP_authorizeToken/fail/bad-token (0.00s) --- PASS: TestSSHPOP_authorizeToken/fail/cert-not-yet-valid (0.00s) + --- PASS: TestSSHPOP_authorizeToken/fail/cert-past-validity (0.00s) + --- PASS: TestSSHPOP_authorizeToken/fail/no-signer-found (0.00s) + --- PASS: TestSSHPOP_authorizeToken/fail/error-parsing-claims-bad-sig (0.00s) === RUN TestSSHPOP_AuthorizeSSHRevoke === RUN TestSSHPOP_AuthorizeSSHRevoke/fail/bad-token === RUN TestSSHPOP_AuthorizeSSHRevoke/fail/subject-not-equal-serial @@ -8397,35 +8433,35 @@ --- PASS: TestSSHPOP_AuthorizeSSHRevoke/fail/subject-not-equal-serial (0.00s) --- PASS: TestSSHPOP_AuthorizeSSHRevoke/ok (0.00s) === RUN TestSSHPOP_AuthorizeSSHRenew -=== RUN TestSSHPOP_AuthorizeSSHRenew/fail/bad-token === RUN TestSSHPOP_AuthorizeSSHRenew/fail/not-host-cert === RUN TestSSHPOP_AuthorizeSSHRenew/ok +=== RUN TestSSHPOP_AuthorizeSSHRenew/fail/bad-token --- PASS: TestSSHPOP_AuthorizeSSHRenew (0.00s) - --- PASS: TestSSHPOP_AuthorizeSSHRenew/fail/bad-token (0.00s) --- PASS: TestSSHPOP_AuthorizeSSHRenew/fail/not-host-cert (0.00s) --- PASS: TestSSHPOP_AuthorizeSSHRenew/ok (0.00s) + --- PASS: TestSSHPOP_AuthorizeSSHRenew/fail/bad-token (0.00s) === RUN TestSSHPOP_AuthorizeSSHRekey +=== RUN TestSSHPOP_AuthorizeSSHRekey/fail/bad-token === RUN TestSSHPOP_AuthorizeSSHRekey/fail/not-host-cert === RUN TestSSHPOP_AuthorizeSSHRekey/ok -=== RUN TestSSHPOP_AuthorizeSSHRekey/fail/bad-token --- PASS: TestSSHPOP_AuthorizeSSHRekey (0.00s) + --- PASS: TestSSHPOP_AuthorizeSSHRekey/fail/bad-token (0.00s) --- PASS: TestSSHPOP_AuthorizeSSHRekey/fail/not-host-cert (0.00s) --- PASS: TestSSHPOP_AuthorizeSSHRekey/ok (0.00s) - --- PASS: TestSSHPOP_AuthorizeSSHRekey/fail/bad-token (0.00s) === RUN TestSSHPOP_ExtractSSHPOPCert -=== RUN TestSSHPOP_ExtractSSHPOPCert/fail/parsing-sshpop-pubkey -=== RUN TestSSHPOP_ExtractSSHPOPCert/ok -=== RUN TestSSHPOP_ExtractSSHPOPCert/fail/bad-token === RUN TestSSHPOP_ExtractSSHPOPCert/fail/sshpop-missing === RUN TestSSHPOP_ExtractSSHPOPCert/fail/wrong-sshpop-type === RUN TestSSHPOP_ExtractSSHPOPCert/fail/base64decode-error +=== RUN TestSSHPOP_ExtractSSHPOPCert/fail/parsing-sshpop-pubkey +=== RUN TestSSHPOP_ExtractSSHPOPCert/ok +=== RUN TestSSHPOP_ExtractSSHPOPCert/fail/bad-token --- PASS: TestSSHPOP_ExtractSSHPOPCert (0.00s) - --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/parsing-sshpop-pubkey (0.00s) - --- PASS: TestSSHPOP_ExtractSSHPOPCert/ok (0.00s) - --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/bad-token (0.00s) --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/sshpop-missing (0.00s) --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/wrong-sshpop-type (0.00s) --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/base64decode-error (0.00s) + --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/parsing-sshpop-pubkey (0.00s) + --- PASS: TestSSHPOP_ExtractSSHPOPCert/ok (0.00s) + --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/bad-token (0.00s) === RUN TestNewTimeDuration === RUN TestNewTimeDuration/ok === RUN TestNewTimeDuration/zero @@ -8529,43 +8565,43 @@ === RUN TestX5C_Getters --- PASS: TestX5C_Getters (0.00s) === RUN TestX5C_Init -=== RUN TestX5C_Init/fail/invalid-duration -=== RUN TestX5C_Init/ok -=== RUN TestX5C_Init/ok/root-chain -=== RUN TestX5C_Init/fail/empty === RUN TestX5C_Init/fail/empty-name === RUN TestX5C_Init/fail/empty-type === RUN TestX5C_Init/fail/empty-key === RUN TestX5C_Init/fail/no-valid-root-certs +=== RUN TestX5C_Init/fail/invalid-duration +=== RUN TestX5C_Init/ok +=== RUN TestX5C_Init/ok/root-chain +=== RUN TestX5C_Init/fail/empty --- PASS: TestX5C_Init (0.00s) - --- PASS: TestX5C_Init/fail/invalid-duration (0.00s) - --- PASS: TestX5C_Init/ok (0.00s) - --- PASS: TestX5C_Init/ok/root-chain (0.00s) - --- PASS: TestX5C_Init/fail/empty (0.00s) --- PASS: TestX5C_Init/fail/empty-name (0.00s) --- PASS: TestX5C_Init/fail/empty-type (0.00s) --- PASS: TestX5C_Init/fail/empty-key (0.00s) --- PASS: TestX5C_Init/fail/no-valid-root-certs (0.00s) + --- PASS: TestX5C_Init/fail/invalid-duration (0.00s) + --- PASS: TestX5C_Init/ok (0.00s) + --- PASS: TestX5C_Init/ok/root-chain (0.00s) + --- PASS: TestX5C_Init/fail/empty (0.00s) === RUN TestX5C_authorizeToken -=== RUN TestX5C_authorizeToken/fail/invalid-issuer -=== RUN TestX5C_authorizeToken/fail/bad-token -=== RUN TestX5C_authorizeToken/fail/invalid-cert-chain -=== RUN TestX5C_authorizeToken/fail/doubled-up-self-signed-cert === RUN TestX5C_authorizeToken/fail/invalid-audience -=== RUN TestX5C_authorizeToken/fail/empty-subject === RUN TestX5C_authorizeToken/ok +=== RUN TestX5C_authorizeToken/fail/bad-token +=== RUN TestX5C_authorizeToken/fail/doubled-up-self-signed-cert === RUN TestX5C_authorizeToken/fail/digital-signature-ext-required +=== RUN TestX5C_authorizeToken/fail/empty-subject +=== RUN TestX5C_authorizeToken/fail/invalid-cert-chain === RUN TestX5C_authorizeToken/fail/signature-does-not-match-x5c-pub-key +=== RUN TestX5C_authorizeToken/fail/invalid-issuer --- PASS: TestX5C_authorizeToken (0.01s) - --- PASS: TestX5C_authorizeToken/fail/invalid-issuer (0.00s) - --- PASS: TestX5C_authorizeToken/fail/bad-token (0.00s) - --- PASS: TestX5C_authorizeToken/fail/invalid-cert-chain (0.00s) - --- PASS: TestX5C_authorizeToken/fail/doubled-up-self-signed-cert (0.00s) --- PASS: TestX5C_authorizeToken/fail/invalid-audience (0.00s) - --- PASS: TestX5C_authorizeToken/fail/empty-subject (0.00s) --- PASS: TestX5C_authorizeToken/ok (0.00s) + --- PASS: TestX5C_authorizeToken/fail/bad-token (0.00s) + --- PASS: TestX5C_authorizeToken/fail/doubled-up-self-signed-cert (0.00s) --- PASS: TestX5C_authorizeToken/fail/digital-signature-ext-required (0.00s) + --- PASS: TestX5C_authorizeToken/fail/empty-subject (0.00s) + --- PASS: TestX5C_authorizeToken/fail/invalid-cert-chain (0.00s) --- PASS: TestX5C_authorizeToken/fail/signature-does-not-match-x5c-pub-key (0.00s) + --- PASS: TestX5C_authorizeToken/fail/invalid-issuer (0.00s) === RUN TestX5C_AuthorizeSign === RUN TestX5C_AuthorizeSign/fail/invalid-token === RUN TestX5C_AuthorizeSign/ok/empty-sans @@ -8601,84 +8637,84 @@ --- PASS: TestX5C_AuthorizeSSHSign/ok/with-claims (0.00s) --- PASS: TestX5C_AuthorizeSSHSign/ok/without-claims (0.00s) PASS -ok github.com/smallstep/certificates/authority/provisioner 15.006s +ok github.com/smallstep/certificates/authority/provisioner 16.140s === RUN TestNewACMEClient -=== RUN TestNewACMEClient/fail/error-post-newAccount -2025/07/08 23:51:49 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} === RUN TestNewACMEClient/fail/error-bad-account === RUN TestNewACMEClient/ok === RUN TestNewACMEClient/fail/client-option-error === RUN TestNewACMEClient/fail/get-directory -2025/07/08 23:51:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2026/08/12 08:17:45 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestNewACMEClient/fail/bad-directory +=== RUN TestNewACMEClient/fail/error-post-newAccount +2026/08/12 08:17:45 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} --- PASS: TestNewACMEClient (0.01s) - --- PASS: TestNewACMEClient/fail/error-post-newAccount (0.00s) --- PASS: TestNewACMEClient/fail/error-bad-account (0.00s) --- PASS: TestNewACMEClient/ok (0.00s) --- PASS: TestNewACMEClient/fail/client-option-error (0.00s) --- PASS: TestNewACMEClient/fail/get-directory (0.00s) --- PASS: TestNewACMEClient/fail/bad-directory (0.00s) + --- PASS: TestNewACMEClient/fail/error-post-newAccount (0.00s) === RUN TestACMEClient_GetDirectory --- PASS: TestACMEClient_GetDirectory (0.00s) === RUN TestACMEClient_GetNonce -=== RUN TestACMEClient_GetNonce/fail/GET-nonce -2025/07/08 23:51:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_GetNonce/ok +=== RUN TestACMEClient_GetNonce/fail/GET-nonce +2026/08/12 08:17:45 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} --- PASS: TestACMEClient_GetNonce (0.00s) - --- PASS: TestACMEClient_GetNonce/fail/GET-nonce (0.00s) --- PASS: TestACMEClient_GetNonce/ok (0.00s) + --- PASS: TestACMEClient_GetNonce/fail/GET-nonce (0.00s) === RUN TestACMEClient_post +=== RUN TestACMEClient_post/fail/GET-nonce +2026/08/12 08:17:45 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_post/ok/jwk === RUN TestACMEClient_post/ok/kid === RUN TestACMEClient_post/fail/account-not-configured -=== RUN TestACMEClient_post/fail/GET-nonce -2025/07/08 23:51:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} ---- PASS: TestACMEClient_post (0.00s) - --- PASS: TestACMEClient_post/ok/jwk (0.00s) +--- PASS: TestACMEClient_post (0.02s) + --- PASS: TestACMEClient_post/fail/GET-nonce (0.00s) + --- PASS: TestACMEClient_post/ok/jwk (0.01s) --- PASS: TestACMEClient_post/ok/kid (0.00s) --- PASS: TestACMEClient_post/fail/account-not-configured (0.00s) - --- PASS: TestACMEClient_post/fail/GET-nonce (0.00s) === RUN TestACMEClient_NewOrder -=== RUN TestACMEClient_NewOrder/fail/newOrder-error -2025/07/08 23:51:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_NewOrder/fail/bad-order === RUN TestACMEClient_NewOrder/ok === RUN TestACMEClient_NewOrder/fail/client-post -2025/07/08 23:51:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2026/08/12 08:17:45 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestACMEClient_NewOrder/fail/newOrder-error +2026/08/12 08:17:45 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} --- PASS: TestACMEClient_NewOrder (0.01s) - --- PASS: TestACMEClient_NewOrder/fail/newOrder-error (0.01s) --- PASS: TestACMEClient_NewOrder/fail/bad-order (0.00s) --- PASS: TestACMEClient_NewOrder/ok (0.00s) --- PASS: TestACMEClient_NewOrder/fail/client-post (0.00s) + --- PASS: TestACMEClient_NewOrder/fail/newOrder-error (0.00s) === RUN TestACMEClient_GetOrder +=== RUN TestACMEClient_GetOrder/ok === RUN TestACMEClient_GetOrder/fail/client-post -2025/07/08 23:51:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2026/08/12 08:17:45 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_GetOrder/fail/getOrder-error -2025/07/08 23:51:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2026/08/12 08:17:45 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_GetOrder/fail/bad-order -=== RUN TestACMEClient_GetOrder/ok ---- PASS: TestACMEClient_GetOrder (0.02s) - --- PASS: TestACMEClient_GetOrder/fail/client-post (0.00s) - --- PASS: TestACMEClient_GetOrder/fail/getOrder-error (0.01s) - --- PASS: TestACMEClient_GetOrder/fail/bad-order (0.01s) +--- PASS: TestACMEClient_GetOrder (0.00s) --- PASS: TestACMEClient_GetOrder/ok (0.00s) + --- PASS: TestACMEClient_GetOrder/fail/client-post (0.00s) + --- PASS: TestACMEClient_GetOrder/fail/getOrder-error (0.00s) + --- PASS: TestACMEClient_GetOrder/fail/bad-order (0.00s) === RUN TestACMEClient_GetAuthz === RUN TestACMEClient_GetAuthz/fail/client-post -2025/07/08 23:51:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2026/08/12 08:17:45 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_GetAuthz/fail/getChallenge-error -2025/07/08 23:51:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2026/08/12 08:17:45 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_GetAuthz/fail/bad-challenge === RUN TestACMEClient_GetAuthz/ok ---- PASS: TestACMEClient_GetAuthz (0.00s) +--- PASS: TestACMEClient_GetAuthz (0.01s) --- PASS: TestACMEClient_GetAuthz/fail/client-post (0.00s) --- PASS: TestACMEClient_GetAuthz/fail/getChallenge-error (0.00s) --- PASS: TestACMEClient_GetAuthz/fail/bad-challenge (0.00s) --- PASS: TestACMEClient_GetAuthz/ok (0.00s) === RUN TestACMEClient_GetChallenge === RUN TestACMEClient_GetChallenge/fail/client-post -2025/07/08 23:51:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2026/08/12 08:17:45 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_GetChallenge/fail/getChallenge-error -2025/07/08 23:51:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2026/08/12 08:17:45 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_GetChallenge/fail/bad-challenge === RUN TestACMEClient_GetChallenge/ok --- PASS: TestACMEClient_GetChallenge (0.01s) @@ -8687,35 +8723,35 @@ --- PASS: TestACMEClient_GetChallenge/fail/bad-challenge (0.00s) --- PASS: TestACMEClient_GetChallenge/ok (0.00s) === RUN TestACMEClient_ValidateChallenge -=== RUN TestACMEClient_ValidateChallenge/fail/bad-challenge -=== RUN TestACMEClient_ValidateChallenge/ok === RUN TestACMEClient_ValidateChallenge/fail/client-post -2025/07/08 23:51:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2026/08/12 08:17:45 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_ValidateChallenge/fail/getChallenge-error -2025/07/08 23:51:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} ---- PASS: TestACMEClient_ValidateChallenge (0.01s) - --- PASS: TestACMEClient_ValidateChallenge/fail/bad-challenge (0.00s) - --- PASS: TestACMEClient_ValidateChallenge/ok (0.00s) +2026/08/12 08:17:45 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestACMEClient_ValidateChallenge/fail/bad-challenge +=== RUN TestACMEClient_ValidateChallenge/ok +--- PASS: TestACMEClient_ValidateChallenge (0.00s) --- PASS: TestACMEClient_ValidateChallenge/fail/client-post (0.00s) --- PASS: TestACMEClient_ValidateChallenge/fail/getChallenge-error (0.00s) + --- PASS: TestACMEClient_ValidateChallenge/fail/bad-challenge (0.00s) + --- PASS: TestACMEClient_ValidateChallenge/ok (0.00s) === RUN TestACMEClient_FinalizeOrder -=== RUN TestACMEClient_FinalizeOrder/fail/bad-order -=== RUN TestACMEClient_FinalizeOrder/ok === RUN TestACMEClient_FinalizeOrder/fail/client-post -2025/07/08 23:51:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2026/08/12 08:17:45 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_FinalizeOrder/fail/finalizeOrder-error -2025/07/08 23:51:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} ---- PASS: TestACMEClient_FinalizeOrder (0.02s) - --- PASS: TestACMEClient_FinalizeOrder/fail/bad-order (0.00s) - --- PASS: TestACMEClient_FinalizeOrder/ok (0.01s) +2026/08/12 08:17:45 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestACMEClient_FinalizeOrder/fail/bad-order +=== RUN TestACMEClient_FinalizeOrder/ok +--- PASS: TestACMEClient_FinalizeOrder (0.01s) --- PASS: TestACMEClient_FinalizeOrder/fail/client-post (0.00s) --- PASS: TestACMEClient_FinalizeOrder/fail/finalizeOrder-error (0.00s) + --- PASS: TestACMEClient_FinalizeOrder/fail/bad-order (0.01s) + --- PASS: TestACMEClient_FinalizeOrder/ok (0.00s) === RUN TestACMEClient_GetAccountOrders === RUN TestACMEClient_GetAccountOrders/fail/account-not-configured === RUN TestACMEClient_GetAccountOrders/fail/client-post -2025/07/08 23:51:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2026/08/12 08:17:45 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_GetAccountOrders/fail/getAccountOrders-error -2025/07/08 23:51:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2026/08/12 08:17:45 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_GetAccountOrders/fail/bad-accountOrders === RUN TestACMEClient_GetAccountOrders/ok --- PASS: TestACMEClient_GetAccountOrders (0.00s) @@ -8725,25 +8761,25 @@ --- PASS: TestACMEClient_GetAccountOrders/fail/bad-accountOrders (0.00s) --- PASS: TestACMEClient_GetAccountOrders/ok (0.00s) === RUN TestACMEClient_GetCertificate -=== RUN TestACMEClient_GetCertificate/fail/client-post -2025/07/08 23:51:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestACMEClient_GetCertificate/fail/getAccountOrders-error -2025/07/08 23:51:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_GetCertificate/fail/bad-certificate === RUN TestACMEClient_GetCertificate/ok +=== RUN TestACMEClient_GetCertificate/fail/client-post +2026/08/12 08:17:45 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestACMEClient_GetCertificate/fail/getAccountOrders-error +2026/08/12 08:17:45 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} --- PASS: TestACMEClient_GetCertificate (0.01s) - --- PASS: TestACMEClient_GetCertificate/fail/client-post (0.00s) - --- PASS: TestACMEClient_GetCertificate/fail/getAccountOrders-error (0.00s) --- PASS: TestACMEClient_GetCertificate/fail/bad-certificate (0.00s) --- PASS: TestACMEClient_GetCertificate/ok (0.00s) + --- PASS: TestACMEClient_GetCertificate/fail/client-post (0.00s) + --- PASS: TestACMEClient_GetCertificate/fail/getAccountOrders-error (0.01s) === RUN TestBootstrap === RUN TestBootstrap/ok === RUN TestBootstrap/token_err === RUN TestBootstrap/bad_claims === RUN TestBootstrap/bad_sha === RUN TestBootstrap/bad_aud ---- PASS: TestBootstrap (0.09s) - --- PASS: TestBootstrap/ok (0.01s) +--- PASS: TestBootstrap (0.07s) + --- PASS: TestBootstrap/ok (0.00s) --- PASS: TestBootstrap/token_err (0.00s) --- PASS: TestBootstrap/bad_claims (0.00s) --- PASS: TestBootstrap/bad_sha (0.00s) @@ -8753,7 +8789,7 @@ === RUN TestBootstrapServerWithoutMTLS/ok_mtls === RUN TestBootstrapServerWithoutMTLS/fail === RUN TestBootstrapServerWithoutMTLS/fail_with_TLSConfig ---- PASS: TestBootstrapServerWithoutMTLS (0.14s) +--- PASS: TestBootstrapServerWithoutMTLS (0.10s) --- PASS: TestBootstrapServerWithoutMTLS/ok (0.01s) --- PASS: TestBootstrapServerWithoutMTLS/ok_mtls (0.01s) --- PASS: TestBootstrapServerWithoutMTLS/fail (0.00s) @@ -8763,7 +8799,7 @@ === RUN TestBootstrapServerWithMTLS/ok_mtls === RUN TestBootstrapServerWithMTLS/fail === RUN TestBootstrapServerWithMTLS/fail_with_TLSConfig ---- PASS: TestBootstrapServerWithMTLS (0.10s) +--- PASS: TestBootstrapServerWithMTLS (0.09s) --- PASS: TestBootstrapServerWithMTLS/ok (0.01s) --- PASS: TestBootstrapServerWithMTLS/ok_mtls (0.01s) --- PASS: TestBootstrapServerWithMTLS/fail (0.00s) @@ -8772,57 +8808,57 @@ === RUN TestBootstrapClient/ok === RUN TestBootstrapClient/ok_mtls === RUN TestBootstrapClient/fail ---- PASS: TestBootstrapClient (0.09s) - --- PASS: TestBootstrapClient/ok (0.01s) +--- PASS: TestBootstrapClient (0.08s) + --- PASS: TestBootstrapClient/ok (0.02s) --- PASS: TestBootstrapClient/ok_mtls (0.01s) --- PASS: TestBootstrapClient/fail (0.00s) === RUN TestBootstrapClientServerRotation bootstrap_test.go:379: skip until we fix https://github.com/smallstep/certificates/issues/873 --- SKIP: TestBootstrapClientServerRotation (0.00s) === RUN TestBootstrapClientServerFederation -2025/07/08 23:51:49 Serving HTTPS on 127.0.0.1:45349 ... -2025/07/08 23:51:49 Serving HTTPS on 127.0.0.1:42331 ... ---- PASS: TestBootstrapClientServerFederation (2.22s) +2026/08/12 08:17:45 Serving HTTPS on 127.0.0.1:36377 ... +2026/08/12 08:17:45 Serving HTTPS on 127.0.0.1:46695 ... +--- PASS: TestBootstrapClientServerFederation (2.24s) === RUN TestBootstrapListener === RUN TestBootstrapListener/ok === RUN TestBootstrapListener/ok_mtls === RUN TestBootstrapListener/fail ---- PASS: TestBootstrapListener (0.17s) - --- PASS: TestBootstrapListener/ok (0.07s) +--- PASS: TestBootstrapListener (0.14s) + --- PASS: TestBootstrapListener/ok (0.04s) --- PASS: TestBootstrapListener/ok_mtls (0.05s) --- PASS: TestBootstrapListener/fail (0.00s) === RUN TestCASign -=== RUN TestCASign/fail_commonname-claim -2025/07/08 23:51:51 certificate request does not contain the valid common name - got test.smallstep.com, want invalid -=== RUN TestCASign/ok === RUN TestCASign/ok-backwards-compat-missing-subject-SAN === RUN TestCASign/fail_invalid-json-body -2025/07/08 23:51:51 error decoding json: invalid character 'i' looking for beginning of value +2026/08/12 08:17:47 error decoding json: invalid character 'i' looking for beginning of value === RUN TestCASign/fail_invalid-csr-sig -2025/07/08 23:51:51 invalid csr: crypto/rsa: verification error +2026/08/12 08:17:47 invalid csr: crypto/rsa: verification error === RUN TestCASign/fail_unauthorized-ott -2025/07/08 23:51:52 authority.Authorize: authority.authorizeSign: error parsing token: go-jose/go-jose: compact JWS format must have three parts +2026/08/12 08:17:47 authority.Authorize: authority.authorizeSign: error parsing token: go-jose/go-jose: compact JWS format must have three parts +=== RUN TestCASign/fail_commonname-claim +2026/08/12 08:17:47 certificate request does not contain the valid common name - got test.smallstep.com, want invalid +=== RUN TestCASign/ok --- PASS: TestCASign (0.03s) - --- PASS: TestCASign/fail_commonname-claim (0.00s) - --- PASS: TestCASign/ok (0.00s) --- PASS: TestCASign/ok-backwards-compat-missing-subject-SAN (0.00s) --- PASS: TestCASign/fail_invalid-json-body (0.00s) --- PASS: TestCASign/fail_invalid-csr-sig (0.00s) --- PASS: TestCASign/fail_unauthorized-ott (0.00s) + --- PASS: TestCASign/fail_commonname-claim (0.00s) + --- PASS: TestCASign/ok (0.00s) === RUN TestCAProvisioners === RUN TestCAProvisioners/ok --- PASS: TestCAProvisioners (0.00s) --- PASS: TestCAProvisioners/ok (0.00s) === RUN TestCAProvisionerEncryptedKey === RUN TestCAProvisionerEncryptedKey/not-found -2025/07/08 23:51:52 encrypted key with kid foo was not found +2026/08/12 08:17:47 encrypted key with kid foo was not found === RUN TestCAProvisionerEncryptedKey/ok --- PASS: TestCAProvisionerEncryptedKey (0.00s) --- PASS: TestCAProvisionerEncryptedKey/not-found (0.00s) --- PASS: TestCAProvisionerEncryptedKey/ok (0.00s) === RUN TestCARoot === RUN TestCARoot/not-found -2025/07/08 23:51:52 was not found: certificate with fingerprint foo was not found +2026/08/12 08:17:47 was not found: certificate with fingerprint foo was not found === RUN TestCARoot/success --- PASS: TestCARoot (0.00s) --- PASS: TestCARoot/not-found (0.00s) @@ -8833,9 +8869,9 @@ --- PASS: TestCAHealth/success (0.00s) === RUN TestCARenew === RUN TestCARenew/request-missing-tls -2025/07/08 23:51:52 missing client certificate +2026/08/12 08:17:47 missing client certificate === RUN TestCARenew/request-missing-peer-certificate -2025/07/08 23:51:52 missing client certificate +2026/08/12 08:17:47 missing client certificate === RUN TestCARenew/success --- PASS: TestCARenew (0.00s) --- PASS: TestCARenew/request-missing-tls (0.00s) @@ -8866,7 +8902,7 @@ === RUN TestClient_Sign/unauthorized === RUN TestClient_Sign/empty_request === RUN TestClient_Sign/nil_request ---- PASS: TestClient_Sign (0.00s) +--- PASS: TestClient_Sign (0.01s) --- PASS: TestClient_Sign/ok (0.00s) --- PASS: TestClient_Sign/unauthorized (0.00s) --- PASS: TestClient_Sign/empty_request (0.00s) @@ -8875,8 +8911,8 @@ === RUN TestClient_Revoke/ok === RUN TestClient_Revoke/unauthorized === RUN TestClient_Revoke/nil_request ---- PASS: TestClient_Revoke (0.01s) - --- PASS: TestClient_Revoke/ok (0.01s) +--- PASS: TestClient_Revoke (0.00s) + --- PASS: TestClient_Revoke/ok (0.00s) --- PASS: TestClient_Revoke/unauthorized (0.00s) --- PASS: TestClient_Revoke/nil_request (0.00s) === RUN TestClient_Renew @@ -8884,7 +8920,7 @@ === RUN TestClient_Renew/unauthorized === RUN TestClient_Renew/empty_request === RUN TestClient_Renew/nil_request ---- PASS: TestClient_Renew (0.01s) +--- PASS: TestClient_Renew (0.00s) --- PASS: TestClient_Renew/ok (0.00s) --- PASS: TestClient_Renew/unauthorized (0.00s) --- PASS: TestClient_Renew/empty_request (0.00s) @@ -8894,8 +8930,8 @@ === RUN TestClient_RenewWithToken/unauthorized === RUN TestClient_RenewWithToken/empty_request === RUN TestClient_RenewWithToken/nil_request ---- PASS: TestClient_RenewWithToken (0.01s) - --- PASS: TestClient_RenewWithToken/ok (0.01s) +--- PASS: TestClient_RenewWithToken (0.00s) + --- PASS: TestClient_RenewWithToken/ok (0.00s) --- PASS: TestClient_RenewWithToken/unauthorized (0.00s) --- PASS: TestClient_RenewWithToken/empty_request (0.00s) --- PASS: TestClient_RenewWithToken/nil_request (0.00s) @@ -8980,7 +9016,7 @@ --- PASS: TestClient_RootFingerprint/ok_with_error (0.01s) --- PASS: TestClient_RootFingerprint/fail (0.00s) === RUN TestClient_RootFingerprintWithServer ---- PASS: TestClient_RootFingerprintWithServer (0.00s) +--- PASS: TestClient_RootFingerprintWithServer (0.01s) === RUN TestClient_SSHBastion === RUN TestClient_SSHBastion/ok === RUN TestClient_SSHBastion/bad-response @@ -9005,22 +9041,22 @@ === RUN TestNewProvisioner/ok-with-bundle === RUN TestNewProvisioner/ok-with-fingerprint === RUN TestNewProvisioner/fail-bad-kid -2025/07/08 23:51:52 encrypted key with kid bad-kid was not found +2026/08/12 08:17:48 encrypted key with kid bad-kid was not found === RUN TestNewProvisioner/fail-empty-name === RUN TestNewProvisioner/fail-bad-name === RUN TestNewProvisioner/fail-by-password === RUN TestNewProvisioner/fail-by-password-no-kid === RUN TestNewProvisioner/fail-bad-certificate === RUN TestNewProvisioner/fail-not-found-certificate -2025/07/08 23:51:52 http: TLS handshake error from 127.0.0.1:39718: read tcp 127.0.0.1:40943->127.0.0.1:39718: use of closed network connection ---- PASS: TestNewProvisioner (0.28s) +2026/08/12 08:17:48 http: TLS handshake error from 127.0.0.1:32930: read tcp 127.0.0.1:39769->127.0.0.1:32930: use of closed network connection +--- PASS: TestNewProvisioner (0.25s) --- PASS: TestNewProvisioner/ok (0.03s) --- PASS: TestNewProvisioner/ok-by-name (0.03s) --- PASS: TestNewProvisioner/ok-with-bundle (0.03s) - --- PASS: TestNewProvisioner/ok-with-fingerprint (0.08s) - --- PASS: TestNewProvisioner/fail-bad-kid (0.01s) - --- PASS: TestNewProvisioner/fail-empty-name (0.00s) - --- PASS: TestNewProvisioner/fail-bad-name (0.00s) + --- PASS: TestNewProvisioner/ok-with-fingerprint (0.07s) + --- PASS: TestNewProvisioner/fail-bad-kid (0.00s) + --- PASS: TestNewProvisioner/fail-empty-name (0.01s) + --- PASS: TestNewProvisioner/fail-bad-name (0.01s) --- PASS: TestNewProvisioner/fail-by-password (0.03s) --- PASS: TestNewProvisioner/fail-by-password-no-kid (0.03s) --- PASS: TestNewProvisioner/fail-bad-certificate (0.00s) @@ -9033,7 +9069,7 @@ === RUN TestProvisioner_Token/ok-with-sans === RUN TestProvisioner_Token/fail-no-subject === RUN TestProvisioner_Token/fail-no-key ---- PASS: TestProvisioner_Token (0.02s) +--- PASS: TestProvisioner_Token (0.03s) --- PASS: TestProvisioner_Token/ok (0.00s) --- PASS: TestProvisioner_Token/ok-with-san (0.00s) --- PASS: TestProvisioner_Token/ok-with-sans (0.00s) @@ -9094,131 +9130,131 @@ === RUN TestAddRootsToRootCAs === RUN TestAddRootsToRootCAs/ok === RUN TestAddRootsToRootCAs/fail -2025/07/08 23:51:52 http: TLS handshake error from 127.0.0.1:52710: read tcp 127.0.0.1:46781->127.0.0.1:52710: use of closed network connection +2026/08/12 08:17:48 http: TLS handshake error from 127.0.0.1:35194: remote error: tls: bad certificate --- PASS: TestAddRootsToRootCAs (0.01s) --- PASS: TestAddRootsToRootCAs/ok (0.00s) --- PASS: TestAddRootsToRootCAs/fail (0.00s) === RUN TestAddRootsToClientCAs === RUN TestAddRootsToClientCAs/ok === RUN TestAddRootsToClientCAs/fail -2025/07/08 23:51:52 http: TLS handshake error from 127.0.0.1:52512: read tcp 127.0.0.1:36089->127.0.0.1:52512: use of closed network connection +2026/08/12 08:17:48 http: TLS handshake error from 127.0.0.1:46796: read tcp 127.0.0.1:39297->127.0.0.1:46796: use of closed network connection --- PASS: TestAddRootsToClientCAs (0.01s) - --- PASS: TestAddRootsToClientCAs/ok (0.01s) + --- PASS: TestAddRootsToClientCAs/ok (0.00s) --- PASS: TestAddRootsToClientCAs/fail (0.00s) === RUN TestAddFederationToRootCAs === RUN TestAddFederationToRootCAs/ok === RUN TestAddFederationToRootCAs/fail -2025/07/08 23:51:52 http: TLS handshake error from 127.0.0.1:57992: read tcp 127.0.0.1:46783->127.0.0.1:57992: use of closed network connection +2026/08/12 08:17:48 http: TLS handshake error from 127.0.0.1:35936: remote error: tls: bad certificate --- PASS: TestAddFederationToRootCAs (0.01s) - --- PASS: TestAddFederationToRootCAs/ok (0.00s) - --- PASS: TestAddFederationToRootCAs/fail (0.01s) + --- PASS: TestAddFederationToRootCAs/ok (0.01s) + --- PASS: TestAddFederationToRootCAs/fail (0.00s) === RUN TestAddFederationToClientCAs === RUN TestAddFederationToClientCAs/ok === RUN TestAddFederationToClientCAs/fail -2025/07/08 23:51:52 http: TLS handshake error from 127.0.0.1:54336: read tcp 127.0.0.1:35837->127.0.0.1:54336: use of closed network connection +2026/08/12 08:17:48 http: TLS handshake error from 127.0.0.1:46654: remote error: tls: bad certificate --- PASS: TestAddFederationToClientCAs (0.01s) - --- PASS: TestAddFederationToClientCAs/ok (0.01s) + --- PASS: TestAddFederationToClientCAs/ok (0.00s) --- PASS: TestAddFederationToClientCAs/fail (0.00s) === RUN TestAddRootsToCAs === RUN TestAddRootsToCAs/ok === RUN TestAddRootsToCAs/fail -2025/07/08 23:51:52 http: TLS handshake error from 127.0.0.1:38618: read tcp 127.0.0.1:43737->127.0.0.1:38618: use of closed network connection +2026/08/12 08:17:48 http: TLS handshake error from 127.0.0.1:32848: read tcp 127.0.0.1:38607->127.0.0.1:32848: use of closed network connection --- PASS: TestAddRootsToCAs (0.01s) --- PASS: TestAddRootsToCAs/ok (0.00s) --- PASS: TestAddRootsToCAs/fail (0.00s) === RUN TestAddFederationToCAs === RUN TestAddFederationToCAs/ok === RUN TestAddFederationToCAs/fail -2025/07/08 23:51:52 http: TLS handshake error from 127.0.0.1:37948: read tcp 127.0.0.1:45071->127.0.0.1:37948: use of closed network connection +2026/08/12 08:17:48 http: TLS handshake error from 127.0.0.1:48380: read tcp 127.0.0.1:36085->127.0.0.1:48380: use of closed network connection --- PASS: TestAddFederationToCAs (0.01s) --- PASS: TestAddFederationToCAs/ok (0.00s) --- PASS: TestAddFederationToCAs/fail (0.00s) === RUN TestClient_GetServerTLSConfig_http === RUN TestClient_GetServerTLSConfig_http/with_transport -=== RUN TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:43735 -=== RUN TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:44171 +=== RUN TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:34965 +=== RUN TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:45617 === RUN TestClient_GetServerTLSConfig_http/with_tlsConfig -=== RUN TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:43735 -=== RUN TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:44171 +=== RUN TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:34965 +=== RUN TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:45617 === RUN TestClient_GetServerTLSConfig_http/with_no_ClientCert -=== RUN TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:43735/no-cert -=== RUN TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:44171/no-cert -2025/07/08 23:51:52 http: TLS handshake error from 127.0.0.1:59102: tls: client didn't provide a certificate +=== RUN TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:34965/no-cert +=== RUN TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:45617/no-cert +2026/08/12 08:17:48 http: TLS handshake error from 127.0.0.1:45578: tls: client didn't provide a certificate === RUN TestClient_GetServerTLSConfig_http/fail_with_default -=== RUN TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:43735/no-cert -=== RUN TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:44171/no-cert -2025/07/08 23:51:52 http: TLS handshake error from 127.0.0.1:50494: remote error: tls: bad certificate -2025/07/08 23:51:52 http: TLS handshake error from 127.0.0.1:59118: read tcp 127.0.0.1:44171->127.0.0.1:59118: use of closed network connection ---- PASS: TestClient_GetServerTLSConfig_http (0.20s) - --- PASS: TestClient_GetServerTLSConfig_http/with_transport (0.06s) - --- PASS: TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:43735 (0.01s) - --- PASS: TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:44171 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig (0.04s) - --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:43735 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:44171 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert (0.03s) - --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:43735/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:44171/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default (0.04s) - --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:43735/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:44171/no-cert (0.01s) +=== RUN TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:34965/no-cert +2026/08/12 08:17:48 http: TLS handshake error from 127.0.0.1:46726: remote error: tls: bad certificate +=== RUN TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:45617/no-cert +2026/08/12 08:17:48 http: TLS handshake error from 127.0.0.1:45582: remote error: tls: bad certificate +--- PASS: TestClient_GetServerTLSConfig_http (0.19s) + --- PASS: TestClient_GetServerTLSConfig_http/with_transport (0.04s) + --- PASS: TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:34965 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:45617 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig (0.05s) + --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:34965 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:45617 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert (0.04s) + --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:34965/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:45617/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default (0.03s) + --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:34965/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:45617/no-cert (0.00s) === RUN TestClient_GetServerTLSConfig_renew === RUN TestClient_GetServerTLSConfig_renew/with_transport -=== RUN TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:42869 -=== RUN TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:33211 +=== RUN TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:38313 +=== RUN TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:45083 === RUN TestClient_GetServerTLSConfig_renew/with_tlsConfig -=== RUN TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:33211 -=== RUN TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:42869 +=== RUN TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:38313 +=== RUN TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:45083 === RUN TestClient_GetServerTLSConfig_renew/with_no_ClientCert -=== RUN TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:42869/no-cert -2025/07/08 23:51:52 http: TLS handshake error from 127.0.0.1:44620: tls: client didn't provide a certificate -=== RUN TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:33211/no-cert +=== RUN TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:38313/no-cert +=== RUN TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:45083/no-cert +2026/08/12 08:17:48 http: TLS handshake error from 127.0.0.1:48634: tls: client didn't provide a certificate === RUN TestClient_GetServerTLSConfig_renew/fail_with_default -=== RUN TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:33211/no-cert -=== RUN TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:42869/no-cert -2025/07/08 23:51:52 http: TLS handshake error from 127.0.0.1:40342: remote error: tls: bad certificate -2025/07/08 23:51:52 Sleeping for 5s ... -2025/07/08 23:51:52 http: TLS handshake error from 127.0.0.1:44630: remote error: tls: bad certificate +=== RUN TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:38313/no-cert +=== RUN TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:45083/no-cert +2026/08/12 08:17:48 http: TLS handshake error from 127.0.0.1:47030: remote error: tls: bad certificate +2026/08/12 08:17:48 Sleeping for 5s ... +2026/08/12 08:17:48 http: TLS handshake error from 127.0.0.1:48646: remote error: tls: bad certificate === RUN TestClient_GetServerTLSConfig_renew/renewed_with_transport -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:33211 -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:42869 +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:45083 +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:38313 === RUN TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:33211 -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:42869 +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:38313 +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:45083 === RUN TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:33211/no-cert -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:42869/no-cert -2025/07/08 23:51:57 http: TLS handshake error from 127.0.0.1:44666: tls: client didn't provide a certificate +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:38313/no-cert +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:45083/no-cert +2026/08/12 08:17:53 http: TLS handshake error from 127.0.0.1:53242: tls: client didn't provide a certificate === RUN TestClient_GetServerTLSConfig_renew/renewed_fail_with_default -=== RUN TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:33211/no-cert -=== RUN TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:42869/no-cert -2025/07/08 23:51:57 http: TLS handshake error from 127.0.0.1:40382: remote error: tls: bad certificate -2025/07/08 23:51:57 http: TLS handshake error from 127.0.0.1:44670: remote error: tls: bad certificate ---- PASS: TestClient_GetServerTLSConfig_renew (5.17s) +=== RUN TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:38313/no-cert +=== RUN TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:45083/no-cert +2026/08/12 08:17:53 http: TLS handshake error from 127.0.0.1:56892: remote error: tls: bad certificate +2026/08/12 08:17:53 http: TLS handshake error from 127.0.0.1:53244: read tcp 127.0.0.1:45083->127.0.0.1:53244: use of closed network connection +--- PASS: TestClient_GetServerTLSConfig_renew (5.16s) --- PASS: TestClient_GetServerTLSConfig_renew/with_transport (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:42869 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:33211 (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_tlsConfig (0.02s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:33211 (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:42869 (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:38313 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:45083 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_tlsConfig (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:38313 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:45083 (0.00s) --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:42869/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:33211/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:38313/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:45083/no-cert (0.00s) --- PASS: TestClient_GetServerTLSConfig_renew/fail_with_default (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:33211/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:42869/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:33211 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:42869 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:38313/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:45083/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport (0.02s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:45083 (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:38313 (0.01s) --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:33211 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:42869 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:33211/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:42869/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_fail_with_default (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:33211/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:42869/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:38313 (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:45083 (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:38313/no-cert (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:45083/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_fail_with_default (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:38313/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:45083/no-cert (0.00s) === RUN TestCertificate === RUN TestCertificate/ok === RUN TestCertificate/fail @@ -9240,10 +9276,10 @@ --- PASS: TestRootCertificateCertificate/fail (0.00s) --- PASS: TestRootCertificateCertificate/no_tls (0.00s) PASS -ok github.com/smallstep/certificates/ca 8.862s +ok github.com/smallstep/certificates/ca 8.697s === RUN TestClient -2025/07/08 23:51:49 http: TLS handshake error from 127.0.0.1:50500: read tcp 127.0.0.1:44991->127.0.0.1:50500: use of closed network connection ---- PASS: TestClient (0.04s) +2026/08/12 08:17:45 http: TLS handshake error from 127.0.0.1:35982: read tcp 127.0.0.1:36833->127.0.0.1:35982: use of closed network connection +--- PASS: TestClient (0.02s) === RUN TestClient_ResolveReference === RUN TestClient_ResolveReference/ok === RUN TestClient_ResolveReference/ok#01 @@ -9261,13 +9297,13 @@ === RUN TestLoadClient/fail_ca === RUN TestLoadClient/fail_root === RUN TestLoadClient/fail_type ---- PASS: TestLoadClient (0.01s) +--- PASS: TestLoadClient (0.00s) --- PASS: TestLoadClient/ok (0.00s) --- PASS: TestLoadClient/fail_identity (0.00s) --- PASS: TestLoadClient/fail_identity#01 (0.00s) --- PASS: TestLoadClient/fail_defaults (0.00s) --- PASS: TestLoadClient/fail_defaults#01 (0.00s) - --- PASS: TestLoadClient/fail_ca (0.01s) + --- PASS: TestLoadClient/fail_ca (0.00s) --- PASS: TestLoadClient/fail_root (0.00s) --- PASS: TestLoadClient/fail_type (0.00s) === RUN Test_defaultsConfig_Validate @@ -9332,14 +9368,14 @@ === RUN TestIdentity_TLSCertificate/fail_certificate === RUN TestIdentity_TLSCertificate/fail_not_after === RUN TestIdentity_TLSCertificate/fail_not_before ---- PASS: TestIdentity_TLSCertificate (0.01s) +--- PASS: TestIdentity_TLSCertificate (0.00s) --- PASS: TestIdentity_TLSCertificate/ok_mTLS (0.00s) --- PASS: TestIdentity_TLSCertificate/ok_tTLS (0.00s) --- PASS: TestIdentity_TLSCertificate/ok_disabled (0.00s) --- PASS: TestIdentity_TLSCertificate/fail_type (0.00s) --- PASS: TestIdentity_TLSCertificate/fail_certificate (0.00s) --- PASS: TestIdentity_TLSCertificate/fail_not_after (0.00s) - --- PASS: TestIdentity_TLSCertificate/fail_not_before (0.01s) + --- PASS: TestIdentity_TLSCertificate/fail_not_before (0.00s) === RUN Test_fileExists === RUN Test_fileExists/ok === RUN Test_fileExists/missing @@ -9355,7 +9391,7 @@ === RUN TestWriteDefaultIdentity/fail_certificate === RUN TestWriteDefaultIdentity/fail_key === RUN TestWriteDefaultIdentity/fail_write_identity ---- PASS: TestWriteDefaultIdentity (0.00s) +--- PASS: TestWriteDefaultIdentity (0.01s) --- PASS: TestWriteDefaultIdentity/ok (0.00s) --- PASS: TestWriteDefaultIdentity/fail_mkdir_config (0.00s) --- PASS: TestWriteDefaultIdentity/fail_mkdir_identity (0.00s) @@ -9399,7 +9435,7 @@ --- PASS: TestIdentity_Renew/fail_certificate (0.00s) --- PASS: TestIdentity_Renew/fail_write_identity (0.00s) PASS -ok github.com/smallstep/certificates/ca/identity 0.114s +ok github.com/smallstep/certificates/ca/identity 0.118s === RUN TestNew === RUN TestNew/ok_default === RUN TestNew/ok_softcas @@ -9427,7 +9463,7 @@ --- PASS: TestNewCreator/fail_type (0.00s) --- PASS: TestNewCreator/fail_no_creator (0.00s) PASS -ok github.com/smallstep/certificates/cas 0.067s +ok github.com/smallstep/certificates/cas 0.052s === RUN TestCreateCertificateAuthorityExtension === RUN TestCreateCertificateAuthorityExtension/ok === RUN TestCreateCertificateAuthorityExtension/ok#01 @@ -9492,9 +9528,9 @@ --- PASS: TestOptions_Is/fail#01 (0.00s) === RUN TestRegister === RUN TestRegister/ok -&{{} {{{} 1} {0 0} {[] {} 0x4000116500} 0x4757b0 0x40e620 8326341693323361694}} +&{{} {{{} 1} {0 0} {[] {} 0x40000a2c80} 0x4757b0 0x40e620 13147088081807297507}} === RUN TestRegister/error -&{{} {{{} 1} {0 0} {[] {} 0x4000116500} 0x4757b0 0x40e620 8326341693323361694}} +&{{} {{{} 1} {0 0} {[] {} 0x40000a2c80} 0x4757b0 0x40e620 13147088081807297507}} --- PASS: TestRegister (0.00s) --- PASS: TestRegister/ok (0.00s) --- PASS: TestRegister/error (0.00s) @@ -9535,7 +9571,7 @@ --- PASS: TestErrNotImplemented_StatusCode/default (0.00s) --- PASS: TestErrNotImplemented_StatusCode/with_message (0.00s) PASS -ok github.com/smallstep/certificates/cas/apiv1 0.056s +ok github.com/smallstep/certificates/cas/apiv1 0.030s === RUN TestNew === RUN TestNew/ok === RUN TestNew/ok_with_callback @@ -9637,25 +9673,25 @@ --- PASS: TestSoftCAS_defaultKeyManager/ok_intermediate (0.00s) --- PASS: TestSoftCAS_defaultKeyManager/fail_with_default_key_manager (0.00s) PASS -ok github.com/smallstep/certificates/cas/softcas 0.053s +ok github.com/smallstep/certificates/cas/softcas 0.082s === RUN Test_newStepIssuer === RUN Test_newStepIssuer/x5c === RUN Test_newStepIssuer/jwk === RUN Test_newStepIssuer/fail ---- PASS: Test_newStepIssuer (0.14s) +--- PASS: Test_newStepIssuer (0.13s) --- PASS: Test_newStepIssuer/x5c (0.00s) --- PASS: Test_newStepIssuer/jwk (0.00s) --- PASS: Test_newStepIssuer/fail (0.00s) === RUN Test_jwkIssuer_SignToken === RUN Test_jwkIssuer_SignToken/ok === RUN Test_jwkIssuer_SignToken/fail ---- PASS: Test_jwkIssuer_SignToken (0.15s) +--- PASS: Test_jwkIssuer_SignToken (0.13s) --- PASS: Test_jwkIssuer_SignToken/ok (0.00s) --- PASS: Test_jwkIssuer_SignToken/fail (0.00s) === RUN Test_jwkIssuer_RevokeToken === RUN Test_jwkIssuer_RevokeToken/ok === RUN Test_jwkIssuer_RevokeToken/ok#01 ---- PASS: Test_jwkIssuer_RevokeToken (0.19s) +--- PASS: Test_jwkIssuer_RevokeToken (0.13s) --- PASS: Test_jwkIssuer_RevokeToken/ok (0.00s) --- PASS: Test_jwkIssuer_RevokeToken/ok#01 (0.00s) === RUN Test_jwkIssuer_Lifetime @@ -9667,11 +9703,11 @@ === RUN Test_newJWKSignerFromEncryptedKey/fail_decrypt === RUN Test_newJWKSignerFromEncryptedKey/fail_unmarshal === RUN Test_newJWKSignerFromEncryptedKey/fail_not_signer ---- PASS: Test_newJWKSignerFromEncryptedKey (0.80s) +--- PASS: Test_newJWKSignerFromEncryptedKey (0.84s) --- PASS: Test_newJWKSignerFromEncryptedKey/ok (0.13s) --- PASS: Test_newJWKSignerFromEncryptedKey/fail_decrypt (0.14s) --- PASS: Test_newJWKSignerFromEncryptedKey/fail_unmarshal (0.13s) - --- PASS: Test_newJWKSignerFromEncryptedKey/fail_not_signer (0.13s) + --- PASS: Test_newJWKSignerFromEncryptedKey/fail_not_signer (0.18s) === RUN Test_init --- PASS: Test_init (0.00s) === RUN TestNew @@ -9697,14 +9733,14 @@ === RUN TestNew/fail_new_jwk_issuer === RUN TestNew/bad_issuer === RUN TestNew/bad_issuer_type ---- PASS: TestNew (0.41s) +--- PASS: TestNew (0.43s) --- PASS: TestNew/ok (0.00s) --- PASS: TestNew/ok_jwk (0.00s) - --- PASS: TestNew/ok_jwk_provisioners (0.13s) + --- PASS: TestNew/ok_jwk_provisioners (0.14s) --- PASS: TestNew/ok_ca_getter (0.00s) --- PASS: TestNew/fail_authority (0.00s) --- PASS: TestNew/fail_fingerprint (0.00s) - --- PASS: TestNew/fail_type (0.01s) + --- PASS: TestNew/fail_type (0.00s) --- PASS: TestNew/fail_provisioner (0.00s) --- PASS: TestNew/fail_provisioner_jwk (0.00s) --- PASS: TestNew/fail_provisioner_not_found (0.00s) @@ -9730,9 +9766,9 @@ === RUN TestStepCAS_CreateCertificate/fail_sign_token === RUN TestStepCAS_CreateCertificate/fail_client_sign === RUN TestStepCAS_CreateCertificate/fail_password ---- PASS: TestStepCAS_CreateCertificate (0.72s) +--- PASS: TestStepCAS_CreateCertificate (0.65s) --- PASS: TestStepCAS_CreateCertificate/ok (0.00s) - --- PASS: TestStepCAS_CreateCertificate/ok_with_password (0.16s) + --- PASS: TestStepCAS_CreateCertificate/ok_with_password (0.13s) --- PASS: TestStepCAS_CreateCertificate/ok_jwk (0.00s) --- PASS: TestStepCAS_CreateCertificate/ok_jwk_with_password (0.00s) --- PASS: TestStepCAS_CreateCertificate/fail_CSR (0.00s) @@ -9759,11 +9795,11 @@ === RUN TestStepCAS_RevokeCertificate/fail_revoke_token === RUN TestStepCAS_RevokeCertificate/fail_client_revoke === RUN TestStepCAS_RevokeCertificate/fail_password ---- PASS: TestStepCAS_RevokeCertificate (0.77s) +--- PASS: TestStepCAS_RevokeCertificate (0.65s) --- PASS: TestStepCAS_RevokeCertificate/ok_serial_number (0.00s) --- PASS: TestStepCAS_RevokeCertificate/ok_certificate (0.00s) --- PASS: TestStepCAS_RevokeCertificate/ok_both (0.00s) - --- PASS: TestStepCAS_RevokeCertificate/ok_with_password (0.16s) + --- PASS: TestStepCAS_RevokeCertificate/ok_with_password (0.13s) --- PASS: TestStepCAS_RevokeCertificate/ok_serial_number_jwk (0.00s) --- PASS: TestStepCAS_RevokeCertificate/ok_certificate_jwk (0.00s) --- PASS: TestStepCAS_RevokeCertificate/ok_both_jwk (0.00s) @@ -9771,7 +9807,7 @@ --- PASS: TestStepCAS_RevokeCertificate/fail_request (0.00s) --- PASS: TestStepCAS_RevokeCertificate/fail_revoke_token (0.00s) --- PASS: TestStepCAS_RevokeCertificate/fail_client_revoke (0.00s) - --- PASS: TestStepCAS_RevokeCertificate/fail_password (0.14s) + --- PASS: TestStepCAS_RevokeCertificate/fail_password (0.13s) === RUN TestStepCAS_GetCertificateAuthority === RUN TestStepCAS_GetCertificateAuthority/ok === RUN TestStepCAS_GetCertificateAuthority/ok_jwk @@ -9822,7 +9858,7 @@ === RUN Test_newJoseSigner/rsa === RUN Test_newJoseSigner/fail_p224 === RUN Test_newJoseSigner/fail_signer ---- PASS: Test_newJoseSigner (0.19s) +--- PASS: Test_newJoseSigner (0.41s) --- PASS: Test_newJoseSigner/p256 (0.00s) --- PASS: Test_newJoseSigner/p384 (0.00s) --- PASS: Test_newJoseSigner/p521 (0.00s) @@ -9831,18 +9867,18 @@ --- PASS: Test_newJoseSigner/fail_p224 (0.00s) --- PASS: Test_newJoseSigner/fail_signer (0.00s) PASS -ok github.com/smallstep/certificates/cas/stepcas 3.882s +ok github.com/smallstep/certificates/cas/stepcas 3.880s ? github.com/smallstep/certificates/commands [no test files] === RUN TestIsRevoked -=== RUN TestIsRevoked/false/nil_db -=== RUN TestIsRevoked/false/ErrNotFound === RUN TestIsRevoked/error/checking_bucket === RUN TestIsRevoked/true +=== RUN TestIsRevoked/false/nil_db +=== RUN TestIsRevoked/false/ErrNotFound --- PASS: TestIsRevoked (0.00s) - --- PASS: TestIsRevoked/false/nil_db (0.00s) - --- PASS: TestIsRevoked/false/ErrNotFound (0.00s) --- PASS: TestIsRevoked/error/checking_bucket (0.00s) --- PASS: TestIsRevoked/true (0.00s) + --- PASS: TestIsRevoked/false/nil_db (0.00s) + --- PASS: TestIsRevoked/false/ErrNotFound (0.00s) === RUN TestRevoke === RUN TestRevoke/error/force_isRevoked === RUN TestRevoke/error/was_already_revoked @@ -9880,7 +9916,7 @@ === RUN TestSimpleDB --- PASS: TestSimpleDB (0.00s) PASS -ok github.com/smallstep/certificates/db 0.063s +ok github.com/smallstep/certificates/db 0.031s === RUN TestError_MarshalJSON === RUN TestError_MarshalJSON/ok === RUN TestError_MarshalJSON/ok_no_error @@ -9908,7 +9944,7 @@ --- PASS: TestNew/pkcs11 (0.00s) --- PASS: TestNew/fail_validation (0.00s) PASS -ok github.com/smallstep/certificates/kms 0.029s +ok github.com/smallstep/certificates/kms 0.040s === RUN TestOptions_Validate === RUN TestOptions_Validate/nil === RUN TestOptions_Validate/softkms @@ -9974,7 +10010,7 @@ --- PASS: TestSignatureAlgorithm_String/PureEd25519 (0.00s) --- PASS: TestSignatureAlgorithm_String/unknown (0.00s) PASS -ok github.com/smallstep/certificates/kms/apiv1 0.011s +ok github.com/smallstep/certificates/kms/apiv1 0.009s === RUN TestNew === RUN TestNew/ok === RUN TestNew/ok_with_options @@ -10094,7 +10130,7 @@ --- PASS: Test_getSigningAlgorithm/fail_rsa_alg (0.00s) --- PASS: Test_getSigningAlgorithm/fail_ecdsa_alg (0.00s) PASS -ok github.com/smallstep/certificates/kms/awskms 0.031s +ok github.com/smallstep/certificates/kms/awskms 0.054s === RUN TestNew setup_test.go:76: Running using Golang crypto === RUN TestNew/ok @@ -10111,7 +10147,7 @@ === RUN TestNew/fail_slot-id === RUN TestNew/fail_scheme === RUN TestNew/fail_configure ---- PASS: TestNew (2.13s) +--- PASS: TestNew (1.79s) --- PASS: TestNew/ok (0.00s) --- PASS: TestNew/ok_with_serial (0.00s) --- PASS: TestNew/ok_with_slot-id (0.00s) @@ -10138,7 +10174,7 @@ === RUN TestPKCS11_GetPublicKey/fail_uri === RUN TestPKCS11_GetPublicKey/fail_missing === RUN TestPKCS11_GetPublicKey/fail_FindKeyPair ---- PASS: TestPKCS11_GetPublicKey (3.60s) +--- PASS: TestPKCS11_GetPublicKey (1.22s) --- PASS: TestPKCS11_GetPublicKey/RSA (0.00s) --- PASS: TestPKCS11_GetPublicKey/RSA_by_id (0.00s) --- PASS: TestPKCS11_GetPublicKey/RSA_by_label (0.00s) @@ -10173,17 +10209,17 @@ === RUN TestPKCS11_CreateKey/fail_unknown === RUN TestPKCS11_CreateKey/fail_FindKeyPair === RUN TestPKCS11_CreateKey/fail_already_exists ---- PASS: TestPKCS11_CreateKey (21.94s) +--- PASS: TestPKCS11_CreateKey (14.87s) --- PASS: TestPKCS11_CreateKey/default (0.00s) --- PASS: TestPKCS11_CreateKey/default_extractable (0.00s) - --- PASS: TestPKCS11_CreateKey/RSA_SHA256WithRSA (0.64s) - --- PASS: TestPKCS11_CreateKey/RSA_SHA384WithRSA (1.29s) - --- PASS: TestPKCS11_CreateKey/RSA_SHA512WithRSA (2.42s) - --- PASS: TestPKCS11_CreateKey/RSA_SHA256WithRSAPSS (1.08s) - --- PASS: TestPKCS11_CreateKey/RSA_SHA384WithRSAPSS (0.48s) - --- PASS: TestPKCS11_CreateKey/RSA_SHA512WithRSAPSS (2.81s) - --- PASS: TestPKCS11_CreateKey/RSA_2048 (0.06s) - --- PASS: TestPKCS11_CreateKey/RSA_4096 (6.89s) + --- PASS: TestPKCS11_CreateKey/RSA_SHA256WithRSA (4.24s) + --- PASS: TestPKCS11_CreateKey/RSA_SHA384WithRSA (0.84s) + --- PASS: TestPKCS11_CreateKey/RSA_SHA512WithRSA (1.12s) + --- PASS: TestPKCS11_CreateKey/RSA_SHA256WithRSAPSS (2.48s) + --- PASS: TestPKCS11_CreateKey/RSA_SHA384WithRSAPSS (0.63s) + --- PASS: TestPKCS11_CreateKey/RSA_SHA512WithRSAPSS (0.48s) + --- PASS: TestPKCS11_CreateKey/RSA_2048 (0.40s) + --- PASS: TestPKCS11_CreateKey/RSA_4096 (3.31s) --- PASS: TestPKCS11_CreateKey/ECDSA_P256 (0.00s) --- PASS: TestPKCS11_CreateKey/ECDSA_P384 (0.00s) --- PASS: TestPKCS11_CreateKey/ECDSA_P521 (0.00s) @@ -10206,12 +10242,12 @@ === RUN TestPKCS11_CreateSigner/fail_SigningKey === RUN TestPKCS11_CreateSigner/fail_uri === RUN TestPKCS11_CreateSigner/fail_FindKeyPair ---- PASS: TestPKCS11_CreateSigner (0.67s) +--- PASS: TestPKCS11_CreateSigner (2.29s) --- PASS: TestPKCS11_CreateSigner/RSA (0.00s) --- PASS: TestPKCS11_CreateSigner/RSA_PSS (0.01s) --- PASS: TestPKCS11_CreateSigner/ECDSA_P256 (0.00s) --- PASS: TestPKCS11_CreateSigner/ECDSA_P384 (0.00s) - --- PASS: TestPKCS11_CreateSigner/ECDSA_P521 (0.01s) + --- PASS: TestPKCS11_CreateSigner/ECDSA_P521 (0.00s) --- PASS: TestPKCS11_CreateSigner/fail_SigningKey (0.00s) --- PASS: TestPKCS11_CreateSigner/fail_uri (0.00s) --- PASS: TestPKCS11_CreateSigner/fail_FindKeyPair (0.00s) @@ -10225,9 +10261,9 @@ === RUN TestPKCS11_CreateDecrypter/fail_DecryptionKey === RUN TestPKCS11_CreateDecrypter/fail_uri === RUN TestPKCS11_CreateDecrypter/fail_FindKeyPair ---- PASS: TestPKCS11_CreateDecrypter (1.37s) +--- PASS: TestPKCS11_CreateDecrypter (1.25s) --- PASS: TestPKCS11_CreateDecrypter/RSA (0.01s) - --- PASS: TestPKCS11_CreateDecrypter/RSA_PSS (0.03s) + --- PASS: TestPKCS11_CreateDecrypter/RSA_PSS (0.02s) --- PASS: TestPKCS11_CreateDecrypter/ECDSA_P256 (0.00s) --- PASS: TestPKCS11_CreateDecrypter/ECDSA_P384 (0.00s) --- PASS: TestPKCS11_CreateDecrypter/ECDSA_P521 (0.00s) @@ -10245,7 +10281,7 @@ === RUN TestPKCS11_LoadCertificate/fail_scheme === RUN TestPKCS11_LoadCertificate/fail_serial === RUN TestPKCS11_LoadCertificate/fail_FindCertificate ---- PASS: TestPKCS11_LoadCertificate (2.29s) +--- PASS: TestPKCS11_LoadCertificate (2.57s) --- PASS: TestPKCS11_LoadCertificate/load (0.00s) --- PASS: TestPKCS11_LoadCertificate/load_by_id (0.00s) --- PASS: TestPKCS11_LoadCertificate/load_by_label (0.00s) @@ -10265,7 +10301,7 @@ === RUN TestPKCS11_StoreCertificate/fail_uri === RUN TestPKCS11_StoreCertificate/fail_missing_id === RUN TestPKCS11_StoreCertificate/fail_missing_object ---- PASS: TestPKCS11_StoreCertificate (10.51s) +--- PASS: TestPKCS11_StoreCertificate (2.27s) --- PASS: TestPKCS11_StoreCertificate/ok (0.00s) --- PASS: TestPKCS11_StoreCertificate/ok_extractable (0.00s) --- PASS: TestPKCS11_StoreCertificate/fail_already_exists (0.00s) @@ -10282,7 +10318,7 @@ === RUN TestPKCS11_DeleteKey/delete_missing === RUN TestPKCS11_DeleteKey/fail_name === RUN TestPKCS11_DeleteKey/fail_FindKeyPair ---- PASS: TestPKCS11_DeleteKey (2.13s) +--- PASS: TestPKCS11_DeleteKey (1.60s) --- PASS: TestPKCS11_DeleteKey/delete (0.00s) --- PASS: TestPKCS11_DeleteKey/delete_by_id (0.00s) --- PASS: TestPKCS11_DeleteKey/delete_by_label (0.00s) @@ -10297,7 +10333,7 @@ === RUN TestPKCS11_DeleteCertificate/delete_missing === RUN TestPKCS11_DeleteCertificate/fail_name === RUN TestPKCS11_DeleteCertificate/fail_DeleteCertificate ---- PASS: TestPKCS11_DeleteCertificate (1.58s) +--- PASS: TestPKCS11_DeleteCertificate (0.81s) --- PASS: TestPKCS11_DeleteCertificate/delete (0.00s) --- PASS: TestPKCS11_DeleteCertificate/delete_by_id (0.00s) --- PASS: TestPKCS11_DeleteCertificate/delete_by_label (0.00s) @@ -10308,11 +10344,11 @@ setup_test.go:76: Running using Golang crypto === RUN TestPKCS11_Close/ok === RUN TestPKCS11_Close/second ---- PASS: TestPKCS11_Close (2.63s) +--- PASS: TestPKCS11_Close (1.36s) --- PASS: TestPKCS11_Close/ok (0.00s) --- PASS: TestPKCS11_Close/second (0.00s) PASS -ok github.com/smallstep/certificates/kms/pkcs11 48.858s +ok github.com/smallstep/certificates/kms/pkcs11 30.037s === RUN TestNew === RUN TestNew/ok --- PASS: TestNew (0.00s) @@ -10332,7 +10368,7 @@ === RUN TestSoftKMS_CreateSigner/fail_not_a_signer === RUN TestSoftKMS_CreateSigner/fail_not_a_signer_from_file === RUN TestSoftKMS_CreateSigner/fail_missing ---- PASS: TestSoftKMS_CreateSigner (0.01s) +--- PASS: TestSoftKMS_CreateSigner (0.00s) --- PASS: TestSoftKMS_CreateSigner/signer (0.00s) --- PASS: TestSoftKMS_CreateSigner/pem (0.00s) --- PASS: TestSoftKMS_CreateSigner/pem_password (0.00s) @@ -10353,7 +10389,7 @@ === RUN TestSoftKMS_CreateKey/fail_algorithm === RUN TestSoftKMS_CreateKey/fail_generate_key === RUN TestSoftKMS_CreateKey/fail_no_signer ---- PASS: TestSoftKMS_CreateKey (0.28s) +--- PASS: TestSoftKMS_CreateKey (0.64s) --- PASS: TestSoftKMS_CreateKey/p256 (0.00s) --- PASS: TestSoftKMS_CreateKey/rsa (0.00s) --- PASS: TestSoftKMS_CreateKey/rsa2048 (0.00s) @@ -10381,9 +10417,9 @@ === RUN Test_generateKey/fail_kty === RUN Test_generateKey/fail_crv === RUN Test_generateKey/fail_size ---- PASS: Test_generateKey (1.50s) - --- PASS: Test_generateKey/rsa2048 (0.75s) - --- PASS: Test_generateKey/rsa2048#01 (0.75s) +--- PASS: Test_generateKey (1.68s) + --- PASS: Test_generateKey/rsa2048 (1.44s) + --- PASS: Test_generateKey/rsa2048#01 (0.24s) --- PASS: Test_generateKey/p256 (0.00s) --- PASS: Test_generateKey/ed25519 (0.00s) --- PASS: Test_generateKey/fail_kty (0.00s) @@ -10400,7 +10436,7 @@ === RUN TestSoftKMS_CreateDecrypter/fail_bad_password === RUN TestSoftKMS_CreateDecrypter/fail_not_a_decrypter_(ecdsa_key) === RUN TestSoftKMS_CreateDecrypter/fail_not_a_decrypter_from_file ---- PASS: TestSoftKMS_CreateDecrypter (0.44s) +--- PASS: TestSoftKMS_CreateDecrypter (0.14s) --- PASS: TestSoftKMS_CreateDecrypter/decrypter (0.00s) --- PASS: TestSoftKMS_CreateDecrypter/file (0.00s) --- PASS: TestSoftKMS_CreateDecrypter/pem (0.00s) @@ -10412,7 +10448,7 @@ --- PASS: TestSoftKMS_CreateDecrypter/fail_not_a_decrypter_(ecdsa_key) (0.00s) --- PASS: TestSoftKMS_CreateDecrypter/fail_not_a_decrypter_from_file (0.00s) PASS -ok github.com/smallstep/certificates/kms/softkms 2.266s +ok github.com/smallstep/certificates/kms/softkms 2.502s === RUN TestNew sshagentkms_test.go:43: could not find ssh-agent --- SKIP: TestNew (0.00s) @@ -10429,15 +10465,15 @@ --- PASS: TestSSHAgentKMS_Close/ok (0.00s) === RUN TestSSHAgentKMS_CreateSigner sshagentkms_test.go:43: could not find ssh-agent ---- SKIP: TestSSHAgentKMS_CreateSigner (0.06s) +--- SKIP: TestSSHAgentKMS_CreateSigner (0.03s) === RUN TestSSHAgentKMS_GetPublicKey sshagentkms_test.go:43: could not find ssh-agent ---- SKIP: TestSSHAgentKMS_GetPublicKey (0.04s) +--- SKIP: TestSSHAgentKMS_GetPublicKey (0.03s) === RUN TestSSHAgentKMS_CreateKey sshagentkms_test.go:43: could not find ssh-agent --- SKIP: TestSSHAgentKMS_CreateKey (0.00s) PASS -ok github.com/smallstep/certificates/kms/sshagentkms 0.143s +ok github.com/smallstep/certificates/kms/sshagentkms 0.085s === RUN TestNew === RUN TestNew/ok === RUN TestNew/ok_multiple @@ -10547,9 +10583,9 @@ === RUN TestURI_Pin/from_source === RUN TestURI_Pin/from_missing === RUN TestURI_Pin/from_source_missing ---- PASS: TestURI_Pin (0.01s) +--- PASS: TestURI_Pin (0.00s) --- PASS: TestURI_Pin/from_value (0.00s) - --- PASS: TestURI_Pin/from_source (0.01s) + --- PASS: TestURI_Pin/from_source (0.00s) --- PASS: TestURI_Pin/from_missing (0.00s) --- PASS: TestURI_Pin/from_source_missing (0.00s) === RUN TestURI_String @@ -10559,7 +10595,7 @@ --- PASS: TestURI_String/ok_new (0.00s) --- PASS: TestURI_String/ok_parse (0.00s) PASS -ok github.com/smallstep/certificates/kms/uri 0.032s +ok github.com/smallstep/certificates/kms/uri 0.016s ? github.com/smallstep/certificates/kms/yubikey [no test files] === RUN TestHealthOKHandling === RUN TestHealthOKHandling/200_should_be_logged_at_Info_level_for_/health_request_without_explicit_opt-in @@ -10580,7 +10616,7 @@ --- PASS: TestHandlingRegardlessOfOptions/400_should_be_logged_at_Warn_level_even_for_/health_requests (0.00s) --- PASS: TestHandlingRegardlessOfOptions/500_should_be_logged_at_Error_level_even_for_/health_requests (0.00s) PASS -ok github.com/smallstep/certificates/logging 0.032s +ok github.com/smallstep/certificates/logging 0.016s ? github.com/smallstep/certificates/monitoring [no test files] ? github.com/smallstep/certificates/pki [no test files] === RUN TestNamePolicyEngine_matchDomainConstraint @@ -10819,7 +10855,7 @@ === RUN TestNamePolicyEngine_X509_AllAllowed/ok/combined-simple-permitted === RUN TestNamePolicyEngine_X509_AllAllowed/ok/combined-simple-permitted-without-subject-verification === RUN TestNamePolicyEngine_X509_AllAllowed/ok/combined-simple-all ---- PASS: TestNamePolicyEngine_X509_AllAllowed (0.01s) +--- PASS: TestNamePolicyEngine_X509_AllAllowed (0.00s) --- PASS: TestNamePolicyEngine_X509_AllAllowed/fail/dns-permitted (0.00s) --- PASS: TestNamePolicyEngine_X509_AllAllowed/fail/dns-permitted-wildcard-literal-x509 (0.00s) --- PASS: TestNamePolicyEngine_X509_AllAllowed/fail/dns-permitted-single-host (0.00s) @@ -10996,27 +11032,27 @@ --- PASS: TestNamePolicyEngine_SSH_ArePrincipalsAllowed/ok/combined-user-with-excluded-user-principal (0.00s) --- PASS: TestNamePolicyEngine_SSH_ArePrincipalsAllowed/ok/combined-host (0.00s) === RUN Test_splitSSHPrincipals -=== RUN Test_splitSSHPrincipals/ok/user-maillike +=== RUN Test_splitSSHPrincipals/fail/host-uri +=== RUN Test_splitSSHPrincipals/ok/host-email === RUN Test_splitSSHPrincipals/fail/unexpected-cert-type -=== RUN Test_splitSSHPrincipals/fail/user-uri === RUN Test_splitSSHPrincipals/ok/host-dns === RUN Test_splitSSHPrincipals/ok/host-ip -=== RUN Test_splitSSHPrincipals/ok/host-email +=== RUN Test_splitSSHPrincipals/ok/user-localhost === RUN Test_splitSSHPrincipals/ok/user-username-with-period +=== RUN Test_splitSSHPrincipals/ok/user-maillike === RUN Test_splitSSHPrincipals/fail/user-ip -=== RUN Test_splitSSHPrincipals/fail/host-uri -=== RUN Test_splitSSHPrincipals/ok/user-localhost +=== RUN Test_splitSSHPrincipals/fail/user-uri --- PASS: Test_splitSSHPrincipals (0.00s) - --- PASS: Test_splitSSHPrincipals/ok/user-maillike (0.00s) + --- PASS: Test_splitSSHPrincipals/fail/host-uri (0.00s) + --- PASS: Test_splitSSHPrincipals/ok/host-email (0.00s) --- PASS: Test_splitSSHPrincipals/fail/unexpected-cert-type (0.00s) - --- PASS: Test_splitSSHPrincipals/fail/user-uri (0.00s) --- PASS: Test_splitSSHPrincipals/ok/host-dns (0.00s) --- PASS: Test_splitSSHPrincipals/ok/host-ip (0.00s) - --- PASS: Test_splitSSHPrincipals/ok/host-email (0.00s) + --- PASS: Test_splitSSHPrincipals/ok/user-localhost (0.00s) --- PASS: Test_splitSSHPrincipals/ok/user-username-with-period (0.00s) + --- PASS: Test_splitSSHPrincipals/ok/user-maillike (0.00s) --- PASS: Test_splitSSHPrincipals/fail/user-ip (0.00s) - --- PASS: Test_splitSSHPrincipals/fail/host-uri (0.00s) - --- PASS: Test_splitSSHPrincipals/ok/user-localhost (0.00s) + --- PASS: Test_splitSSHPrincipals/fail/user-uri (0.00s) === RUN Test_removeDuplicates === RUN Test_removeDuplicates/empty-slice === RUN Test_removeDuplicates/single-item @@ -11136,71 +11172,71 @@ --- PASS: Test_normalizeAndValidateEmailConstraint/ok/wildcard (0.00s) --- PASS: Test_normalizeAndValidateEmailConstraint/ok/specific-mail (0.00s) === RUN TestNew -=== RUN TestNew/fail/with-excluded-ipsOrCIDRs-cidr -=== RUN TestNew/ok/with-excluded-ipsOrCIDRs-cidr -=== RUN TestNew/fail/with-excluded-emails -=== RUN TestNew/fail/with-excluded-uris +=== RUN TestNew/ok/default === RUN TestNew/ok/literal-wildcards +=== RUN TestNew/ok/with-excluded-dns-domains +=== RUN TestNew/ok/with-permitted-cidrs === RUN TestNew/ok/with-permitted-ipsOrCIDRs-cidr +=== RUN TestNew/fail/with-excluded-emails === RUN TestNew/ok/with-excluded-emails +=== RUN TestNew/fail/with-excluded-dns-domains +=== RUN TestNew/ok/with-permitted-dns-wildcard-domains === RUN TestNew/ok/with-permitted-uris === RUN TestNew/ok/with-excluded-uris -=== RUN TestNew/fail/with-excluded-dns-domains -=== RUN TestNew/fail/with-permitted-ipsOrCIDRs-cidr +=== RUN TestNew/ok/with-permitted-principals +=== RUN TestNew/ok/with-excluded-principals +=== RUN TestNew/fail/with-excluded-ipsOrCIDRs-cidr === RUN TestNew/fail/with-excluded-ipsOrCIDRs-ip +=== RUN TestNew/fail/with-excluded-uris +=== RUN TestNew/ok/with-excluded-ipsOrCIDRs-cidr +=== RUN TestNew/fail/with-excluded-cidrs +=== RUN TestNew/fail/with-permitted-ipsOrCIDRs-cidr === RUN TestNew/fail/with-permitted-uris -=== RUN TestNew/ok/default -=== RUN TestNew/ok/with-permitted-ip-ranges -=== RUN TestNew/ok/with-permitted-cidrs === RUN TestNew/fail/with-permitted-common-name -=== RUN TestNew/ok/with-excluded-dns-domains -=== RUN TestNew/ok/with-permitted-emails -=== RUN TestNew/ok/with-excluded-cidrs === RUN TestNew/fail/with-permitted-dns-domains === RUN TestNew/fail/with-permitted-cidrs -=== RUN TestNew/ok/subject-verification -=== RUN TestNew/ok/with-permitted-dns-wildcard-domains +=== RUN TestNew/ok/with-permitted-ip-ranges === RUN TestNew/ok/with-excluded-ip-ranges -=== RUN TestNew/ok/with-permitted-principals -=== RUN TestNew/ok/with-excluded-principals +=== RUN TestNew/ok/with-permitted-emails === RUN TestNew/fail/with-excluded-common-name -=== RUN TestNew/fail/with-excluded-cidrs === RUN TestNew/fail/with-permitted-ipsOrCIDRs-ip === RUN TestNew/fail/with-permitted-emails +=== RUN TestNew/ok/subject-verification +=== RUN TestNew/ok/with-excluded-cidrs --- PASS: TestNew (0.00s) - --- PASS: TestNew/fail/with-excluded-ipsOrCIDRs-cidr (0.00s) - --- PASS: TestNew/ok/with-excluded-ipsOrCIDRs-cidr (0.00s) - --- PASS: TestNew/fail/with-excluded-emails (0.00s) - --- PASS: TestNew/fail/with-excluded-uris (0.00s) + --- PASS: TestNew/ok/default (0.00s) --- PASS: TestNew/ok/literal-wildcards (0.00s) + --- PASS: TestNew/ok/with-excluded-dns-domains (0.00s) + --- PASS: TestNew/ok/with-permitted-cidrs (0.00s) --- PASS: TestNew/ok/with-permitted-ipsOrCIDRs-cidr (0.00s) + --- PASS: TestNew/fail/with-excluded-emails (0.00s) --- PASS: TestNew/ok/with-excluded-emails (0.00s) + --- PASS: TestNew/fail/with-excluded-dns-domains (0.00s) + --- PASS: TestNew/ok/with-permitted-dns-wildcard-domains (0.00s) --- PASS: TestNew/ok/with-permitted-uris (0.00s) --- PASS: TestNew/ok/with-excluded-uris (0.00s) - --- PASS: TestNew/fail/with-excluded-dns-domains (0.00s) - --- PASS: TestNew/fail/with-permitted-ipsOrCIDRs-cidr (0.00s) + --- PASS: TestNew/ok/with-permitted-principals (0.00s) + --- PASS: TestNew/ok/with-excluded-principals (0.00s) + --- PASS: TestNew/fail/with-excluded-ipsOrCIDRs-cidr (0.00s) --- PASS: TestNew/fail/with-excluded-ipsOrCIDRs-ip (0.00s) + --- PASS: TestNew/fail/with-excluded-uris (0.00s) + --- PASS: TestNew/ok/with-excluded-ipsOrCIDRs-cidr (0.00s) + --- PASS: TestNew/fail/with-excluded-cidrs (0.00s) + --- PASS: TestNew/fail/with-permitted-ipsOrCIDRs-cidr (0.00s) --- PASS: TestNew/fail/with-permitted-uris (0.00s) - --- PASS: TestNew/ok/default (0.00s) - --- PASS: TestNew/ok/with-permitted-ip-ranges (0.00s) - --- PASS: TestNew/ok/with-permitted-cidrs (0.00s) --- PASS: TestNew/fail/with-permitted-common-name (0.00s) - --- PASS: TestNew/ok/with-excluded-dns-domains (0.00s) - --- PASS: TestNew/ok/with-permitted-emails (0.00s) - --- PASS: TestNew/ok/with-excluded-cidrs (0.00s) --- PASS: TestNew/fail/with-permitted-dns-domains (0.00s) --- PASS: TestNew/fail/with-permitted-cidrs (0.00s) - --- PASS: TestNew/ok/subject-verification (0.00s) - --- PASS: TestNew/ok/with-permitted-dns-wildcard-domains (0.00s) + --- PASS: TestNew/ok/with-permitted-ip-ranges (0.00s) --- PASS: TestNew/ok/with-excluded-ip-ranges (0.00s) - --- PASS: TestNew/ok/with-permitted-principals (0.00s) - --- PASS: TestNew/ok/with-excluded-principals (0.00s) + --- PASS: TestNew/ok/with-permitted-emails (0.00s) --- PASS: TestNew/fail/with-excluded-common-name (0.00s) - --- PASS: TestNew/fail/with-excluded-cidrs (0.00s) --- PASS: TestNew/fail/with-permitted-ipsOrCIDRs-ip (0.00s) --- PASS: TestNew/fail/with-permitted-emails (0.00s) + --- PASS: TestNew/ok/subject-verification (0.00s) + --- PASS: TestNew/ok/with-excluded-cidrs (0.00s) PASS -ok github.com/smallstep/certificates/policy 0.044s +ok github.com/smallstep/certificates/policy 0.040s ? github.com/smallstep/certificates/scep [no test files] === RUN Test_decodeRequest === RUN Test_decodeRequest/fail/unsupported-method @@ -11221,7 +11257,7 @@ --- PASS: Test_decodeRequest/ok/get-PKIOperation (0.00s) --- PASS: Test_decodeRequest/ok/post-PKIOperation (0.00s) PASS -ok github.com/smallstep/certificates/scep/api 0.050s +ok github.com/smallstep/certificates/scep/api 0.054s ? github.com/smallstep/certificates/server [no test files] === RUN TestTemplates_Validate === RUN TestTemplates_Validate/ok @@ -11360,8 +11396,8 @@ --- PASS: TestDefaultTemplates (0.00s) --- PASS: TestDefaultTemplates/ok (0.00s) PASS -ok github.com/smallstep/certificates/templates 0.026s - rm -fr -- /tmp/dh-xdg-rundir-VEAiQizI +ok github.com/smallstep/certificates/templates 0.048s + rm -fr -- /tmp/dh-xdg-rundir-Yxm2tp5E create-stamp debian/debhelper-build-stamp dh_testroot -O--builddirectory=_build -O--buildsystem=golang dh_prep -O--builddirectory=_build -O--buildsystem=golang @@ -11960,12 +11996,14 @@ dpkg-buildpackage: info: binary-only upload (no source included) dpkg-genchanges: info: not including original source code in upload I: copying local configuration +I: user script /srv/workspace/pbuilder/3370375/tmp/hooks/B01_cleanup starting +I: user script /srv/workspace/pbuilder/3370375/tmp/hooks/B01_cleanup finished I: unmounting dev/ptmx filesystem I: unmounting dev/pts filesystem I: unmounting dev/shm filesystem I: unmounting proc filesystem I: unmounting sys filesystem I: cleaning the build env -I: removing directory /srv/workspace/pbuilder/2725380 and its subdirectories -I: Current time: Tue Jul 8 23:52:57 -12 2025 -I: pbuilder-time-stamp: 1752061977 +I: removing directory /srv/workspace/pbuilder/3370375 and its subdirectories +I: Current time: Wed Aug 12 08:18:33 +14 2026 +I: pbuilder-time-stamp: 1786472313