Diff of the two buildlogs: -- --- b1/build.log 2025-04-16 05:36:14.862891765 +0000 +++ b2/build.log 2025-04-16 05:43:31.817481711 +0000 @@ -1,6 +1,6 @@ I: pbuilder: network access will be disabled during build -I: Current time: Mon May 18 23:54:32 -12 2026 -I: pbuilder-time-stamp: 1779191672 +I: Current time: Wed Apr 16 19:36:18 +14 2025 +I: pbuilder-time-stamp: 1744781778 I: Building the build Environment I: extracting base tarball [/var/cache/pbuilder/unstable-reproducible-base.tgz] I: copying local configuration @@ -30,52 +30,84 @@ dpkg-source: info: applying fix-nebula-test.patch I: Not using root during the build. I: Installing the build-deps -I: user script /srv/workspace/pbuilder/259617/tmp/hooks/D02_print_environment starting +I: user script /srv/workspace/pbuilder/3284310/tmp/hooks/D01_modify_environment starting +debug: Running on codethink04-arm64. +I: Changing host+domainname to test build reproducibility +I: Adding a custom variable just for the fun of it... +I: Changing /bin/sh to bash +'/bin/sh' -> '/bin/bash' +lrwxrwxrwx 1 root root 9 Apr 16 05:36 /bin/sh -> /bin/bash +I: Setting pbuilder2's login shell to /bin/bash +I: Setting pbuilder2's GECOS to second user,second room,second work-phone,second home-phone,second other +I: user script /srv/workspace/pbuilder/3284310/tmp/hooks/D01_modify_environment finished +I: user script /srv/workspace/pbuilder/3284310/tmp/hooks/D02_print_environment starting I: set - BUILDDIR='/build/reproducible-path' - BUILDUSERGECOS='first user,first room,first work-phone,first home-phone,first other' - BUILDUSERNAME='pbuilder1' - BUILD_ARCH='arm64' - DEBIAN_FRONTEND='noninteractive' + BASH=/bin/sh + BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath + BASH_ALIASES=() + BASH_ARGC=() + BASH_ARGV=() + BASH_CMDS=() + BASH_LINENO=([0]="12" [1]="0") + BASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:. + BASH_SOURCE=([0]="/tmp/hooks/D02_print_environment" [1]="/tmp/hooks/D02_print_environment") + BASH_VERSINFO=([0]="5" [1]="2" [2]="37" [3]="1" [4]="release" [5]="aarch64-unknown-linux-gnu") + BASH_VERSION='5.2.37(1)-release' + BUILDDIR=/build/reproducible-path + BUILDUSERGECOS='second user,second room,second work-phone,second home-phone,second other' + BUILDUSERNAME=pbuilder2 + BUILD_ARCH=arm64 + DEBIAN_FRONTEND=noninteractive DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=12 ' - DISTRIBUTION='unstable' - HOME='/root' - HOST_ARCH='arm64' + DIRSTACK=() + DISTRIBUTION=unstable + EUID=0 + FUNCNAME=([0]="Echo" [1]="main") + GROUPS=() + HOME=/root + HOSTNAME=i-capture-the-hostname + HOSTTYPE=aarch64 + HOST_ARCH=arm64 IFS=' ' - INVOCATION_ID='a9a082f46dce4265850b8dac45953f81' - LANG='C' - LANGUAGE='en_US:en' - LC_ALL='C' - MAIL='/var/mail/root' - OPTIND='1' - PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games' - PBCURRENTCOMMANDLINEOPERATION='build' - PBUILDER_OPERATION='build' - PBUILDER_PKGDATADIR='/usr/share/pbuilder' - PBUILDER_PKGLIBDIR='/usr/lib/pbuilder' - PBUILDER_SYSCONFDIR='/etc' - PPID='259617' - PS1='# ' - PS2='> ' + INVOCATION_ID=968a04893dfb4655aa17e609d5cf7508 + LANG=C + LANGUAGE=nl_BE:nl + LC_ALL=C + MACHTYPE=aarch64-unknown-linux-gnu + MAIL=/var/mail/root + OPTERR=1 + OPTIND=1 + OSTYPE=linux-gnu + PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path + PBCURRENTCOMMANDLINEOPERATION=build + PBUILDER_OPERATION=build + PBUILDER_PKGDATADIR=/usr/share/pbuilder + PBUILDER_PKGLIBDIR=/usr/lib/pbuilder + PBUILDER_SYSCONFDIR=/etc + PIPESTATUS=([0]="0") + POSIXLY_CORRECT=y + PPID=3284310 PS4='+ ' - PWD='/' - SHELL='/bin/bash' - SHLVL='2' - SUDO_COMMAND='/usr/bin/timeout -k 18.1h 18h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.eFa9NOeU/pbuilderrc_PSpv --distribution unstable --hookdir /etc/pbuilder/first-build-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/unstable-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.eFa9NOeU/b1 --logfile b1/build.log golang-github-smallstep-certificates_0.20.0-5.dsc' - SUDO_GID='109' - SUDO_UID='104' - SUDO_USER='jenkins' - TERM='unknown' - TZ='/usr/share/zoneinfo/Etc/GMT+12' - USER='root' - _='/usr/bin/systemd-run' - http_proxy='http://192.168.101.4:3128' + PWD=/ + SHELL=/bin/bash + SHELLOPTS=braceexpand:errexit:hashall:interactive-comments:posix + SHLVL=3 + SUDO_COMMAND='/usr/bin/timeout -k 24.1h 24h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.eFa9NOeU/pbuilderrc_q5sm --distribution unstable --hookdir /etc/pbuilder/rebuild-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/unstable-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.eFa9NOeU/b2 --logfile b2/build.log golang-github-smallstep-certificates_0.20.0-5.dsc' + SUDO_GID=109 + SUDO_UID=104 + SUDO_USER=jenkins + TERM=unknown + TZ=/usr/share/zoneinfo/Etc/GMT-14 + UID=0 + USER=root + _='I: set' + http_proxy=http://192.168.101.4:3128 I: uname -a - Linux codethink03-arm64 6.1.0-33-cloud-arm64 #1 SMP Debian 6.1.133-1 (2025-04-10) aarch64 GNU/Linux + Linux i-capture-the-hostname 6.1.0-33-cloud-arm64 #1 SMP Debian 6.1.133-1 (2025-04-10) aarch64 GNU/Linux I: ls -l /bin - lrwxrwxrwx 1 root root 7 Mar 4 2025 /bin -> usr/bin -I: user script /srv/workspace/pbuilder/259617/tmp/hooks/D02_print_environment finished + lrwxrwxrwx 1 root root 7 Mar 4 11:20 /bin -> usr/bin +I: user script /srv/workspace/pbuilder/3284310/tmp/hooks/D02_print_environment finished -> Attempting to satisfy build-dependencies -> Creating pbuilder-satisfydepends-dummy package Package: pbuilder-satisfydepends-dummy @@ -438,7 +470,7 @@ Get: 271 http://deb.debian.org/debian unstable/main arm64 golang-step-linkedca-dev all 0.19.0-1 [41.3 kB] Get: 272 http://deb.debian.org/debian unstable/main arm64 libpcsclite1 arm64 2.3.3-1 [55.0 kB] Get: 273 http://deb.debian.org/debian unstable/main arm64 libpcsclite-dev arm64 2.3.3-1 [68.1 kB] -Fetched 167 MB in 2s (93.7 MB/s) +Fetched 167 MB in 2s (91.9 MB/s) Preconfiguring packages ... Selecting previously unselected package golang-golang-x-sys-dev. (Reading database ... (Reading database ... 5% (Reading database ... 10% (Reading database ... 15% (Reading database ... 20% (Reading database ... 25% (Reading database ... 30% (Reading database ... 35% (Reading database ... 40% (Reading database ... 45% (Reading database ... 50% (Reading database ... 55% (Reading database ... 60% (Reading database ... 65% (Reading database ... 70% (Reading database ... 75% (Reading database ... 80% (Reading database ... 85% (Reading database ... 90% (Reading database ... 95% (Reading database ... 100% (Reading database ... 19954 files and directories currently installed.) @@ -1323,8 +1355,8 @@ Setting up tzdata (2025b-2) ... Current default time zone: 'Etc/UTC' -Local time is now: Tue May 19 11:55:58 UTC 2026. -Universal Time is now: Tue May 19 11:55:58 UTC 2026. +Local time is now: Wed Apr 16 05:38:05 UTC 2025. +Universal Time is now: Wed Apr 16 05:38:05 UTC 2025. Run 'dpkg-reconfigure tzdata' if you wish to change it. Setting up golang-github-coreos-go-semver-dev (0.3.0-1) ... @@ -1551,7 +1583,11 @@ Building tag database... -> Finished parsing the build-deps I: Building the package -I: Running cd /build/reproducible-path/golang-github-smallstep-certificates-0.20.0/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-genchanges -S > ../golang-github-smallstep-certificates_0.20.0-5_source.changes +I: user script /srv/workspace/pbuilder/3284310/tmp/hooks/A99_set_merged_usr starting +Not re-configuring usrmerge for unstable +I: user script /srv/workspace/pbuilder/3284310/tmp/hooks/A99_set_merged_usr finished +hostname: Name or service not known +I: Running cd /build/reproducible-path/golang-github-smallstep-certificates-0.20.0/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-genchanges -S > ../golang-github-smallstep-certificates_0.20.0-5_source.changes dpkg-buildpackage: info: source package golang-github-smallstep-certificates dpkg-buildpackage: info: source version 0.20.0-5 dpkg-buildpackage: info: source distribution unstable @@ -2182,7 +2218,7 @@ GOEXPERIMENT='' GOFIPS140='off' GOFLAGS='' -GOGCCFLAGS='-fPIC -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build1237713741=/tmp/go-build -gno-record-gcc-switches' +GOGCCFLAGS='-fPIC -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build666872595=/tmp/go-build -gno-record-gcc-switches' GOHOSTARCH='arm64' GOHOSTOS='linux' GOINSECURE='' @@ -2206,60 +2242,60 @@ GOWORK='' PKG_CONFIG='pkg-config' cd _build && go install -trimpath -v -p 12 github.com/smallstep/certificates/acme github.com/smallstep/certificates/acme/api github.com/smallstep/certificates/acme/db/nosql github.com/smallstep/certificates/api github.com/smallstep/certificates/api/log github.com/smallstep/certificates/api/read github.com/smallstep/certificates/api/render github.com/smallstep/certificates/authority github.com/smallstep/certificates/authority/admin github.com/smallstep/certificates/authority/admin/api github.com/smallstep/certificates/authority/admin/db/nosql github.com/smallstep/certificates/authority/administrator github.com/smallstep/certificates/authority/config github.com/smallstep/certificates/authority/policy github.com/smallstep/certificates/authority/provisioner github.com/smallstep/certificates/ca github.com/smallstep/certificates/ca/identity github.com/smallstep/certificates/cas github.com/smallstep/certificates/cas/apiv1 github.com/smallstep/certificates/cas/softcas github.com/smallstep/certificates/cas/stepcas github.com/smallstep/certificates/commands github.com/smallstep/certificates/db github.com/smallstep/certificates/errs github.com/smallstep/certificates/kms github.com/smallstep/certificates/kms/apiv1 github.com/smallstep/certificates/kms/awskms github.com/smallstep/certificates/kms/pkcs11 github.com/smallstep/certificates/kms/softkms github.com/smallstep/certificates/kms/sshagentkms github.com/smallstep/certificates/kms/uri github.com/smallstep/certificates/kms/yubikey github.com/smallstep/certificates/logging github.com/smallstep/certificates/monitoring github.com/smallstep/certificates/pki github.com/smallstep/certificates/policy github.com/smallstep/certificates/scep github.com/smallstep/certificates/scep/api github.com/smallstep/certificates/server github.com/smallstep/certificates/templates -internal/asan -internal/unsafeheader -internal/coverage/rtcov +internal/goos +internal/godebugs internal/goexperiment internal/msan +internal/coverage/rtcov internal/goarch -internal/godebugs -internal/goos -internal/profilerecord +internal/asan +internal/unsafeheader internal/byteorder +internal/runtime/syscall +sync/atomic +internal/profilerecord math/bits -internal/cpu +internal/abi internal/runtime/math -internal/runtime/syscall unicode unicode/utf8 -internal/abi internal/itoa crypto/internal/fips140/alias -cmp +internal/cpu internal/chacha8rand crypto/internal/fips140deps/byteorder -crypto/internal/fips140/subtle +cmp crypto/internal/boring/sig -sync/atomic +crypto/internal/fips140/subtle container/list unicode/utf16 -math vendor/golang.org/x/crypto/cryptobyte/asn1 vendor/golang.org/x/crypto/internal/alias internal/nettrace encoding log/internal +math google.golang.org/protobuf/internal/flags google.golang.org/protobuf/internal/set google.golang.org/grpc/serviceconfig github.com/dgraph-io/badger/options github.com/dgryski/go-farm github.com/dgraph-io/badger/trie -golang.org/x/crypto/internal/alias -golang.org/x/crypto/salsa20/salsa -golang.org/x/crypto/cryptobyte/asn1 -golang.org/x/net/html/atom internal/bytealg internal/runtime/atomic internal/runtime/sys crypto/internal/fips140deps/cpu +golang.org/x/crypto/internal/alias +golang.org/x/crypto/salsa20/salsa +golang.org/x/crypto/cryptobyte/asn1 +golang.org/x/net/html/atom github.com/aws/aws-sdk-go/aws/client/metadata internal/runtime/exithook internal/stringslite -github.com/aws/aws-sdk-go/internal/sdkmath internal/race internal/runtime/maps internal/sync +github.com/aws/aws-sdk-go/internal/sdkmath runtime internal/reflectlite sync @@ -2274,8 +2310,8 @@ unique google.golang.org/protobuf/internal/pragma github.com/aws/aws-sdk-go/internal/sync/singleflight -runtime/cgo errors +runtime/cgo sort internal/godebug io @@ -2286,26 +2322,26 @@ vendor/golang.org/x/net/dns/dnsmessage google.golang.org/grpc/internal/buffer syscall +container/heap +crypto/internal/fips140deps/godebug +math/rand bytes hash strings +crypto/internal/randutil go.step.sm/crypto/internal/utils/utfbom github.com/aws/aws-sdk-go/internal/sdkio -crypto/internal/randutil hash/crc32 hash/fnv hash/adler32 -container/heap -crypto/internal/fips140deps/godebug -math/rand +google.golang.org/grpc/internal/grpcrand crypto -net/netip reflect +net/netip encoding/base32 golang.org/x/crypto/blowfish vendor/golang.org/x/text/transform golang.org/x/text/transform -google.golang.org/grpc/internal/grpcrand crypto/internal/fips140 crypto/internal/impl bufio @@ -2321,209 +2357,209 @@ crypto/tls/internal/fips140tls github.com/aws/aws-sdk-go/internal/sdkuri crypto/sha3 -crypto/internal/fips140hash crypto/internal/fips140/hmac +crypto/internal/fips140hash crypto/internal/fips140/check -regexp crypto/internal/fips140/aes crypto/internal/fips140/nistec/fiat crypto/internal/fips140/edwards25519/field crypto/internal/fips140/bigmod crypto/internal/fips140/hkdf crypto/internal/fips140/tls12 -crypto/internal/fips140/tls13 time internal/syscall/unix internal/syscall/execenv +crypto/internal/fips140/tls13 +regexp crypto/internal/fips140/edwards25519 crypto/internal/fips140/nistec -context io/fs internal/poll google.golang.org/grpc/backoff google.golang.org/grpc/keepalive github.com/aws/aws-sdk-go/internal/sdkrand +context internal/filepathlite embed google.golang.org/grpc/internal/backoff google.golang.org/grpc/internal/grpcsync google.golang.org/protobuf/internal/editiondefaults -os internal/fmtsort encoding/binary +os vendor/golang.org/x/crypto/internal/poly1305 encoding/base64 github.com/cespare/xxhash github.com/golang/snappy filippo.io/edwards25519/field golang.org/x/crypto/blake2b +golang.org/x/sys/unix golang.org/x/crypto/internal/poly1305 -golang.org/x/crypto/nacl/secretbox encoding/pem +golang.org/x/crypto/nacl/secretbox golang.org/x/crypto/argon2 filippo.io/edwards25519 -golang.org/x/sys/unix crypto/internal/sysrand fmt -path/filepath net +internal/sysinfo +path/filepath io/ioutil google.golang.org/protobuf/internal/detrand google.golang.org/grpc/internal/envconfig os/signal -internal/sysinfo crypto/internal/entropy -os/exec crypto/internal/fips140/drbg -crypto/internal/fips140/aes/gcm crypto/internal/fips140only +crypto/internal/fips140/aes/gcm crypto/internal/fips140/ecdh -crypto/internal/fips140/ecdsa -crypto/internal/fips140/rsa crypto/internal/fips140/ed25519 +crypto/internal/fips140/ecdsa crypto/internal/fips140/mlkem +crypto/internal/fips140/rsa +os/exec crypto/md5 crypto/rc4 crypto/cipher +math/big encoding/hex +net/url encoding/json +mime compress/flate log -mime vendor/golang.org/x/text/unicode/norm -math/big vendor/golang.org/x/net/http2/hpack -net/url crypto/internal/boring -crypto/des crypto/sha256 crypto/aes +crypto/des crypto/ecdh crypto/sha512 crypto/hmac vendor/golang.org/x/crypto/chacha20 crypto/sha1 -compress/gzip vendor/golang.org/x/text/unicode/bidi mime/quotedprintable net/http/internal +compress/gzip +vendor/golang.org/x/crypto/chacha20poly1305 github.com/pkg/errors database/sql/driver +vendor/golang.org/x/text/secure/bidirule google.golang.org/protobuf/internal/errors go/token -vendor/golang.org/x/crypto/chacha20poly1305 -google.golang.org/protobuf/encoding/protowire golang.org/x/net/internal/timeseries text/template/parse text/tabwriter -google.golang.org/protobuf/reflect/protoreflect +google.golang.org/protobuf/encoding/protowire google.golang.org/grpc/internal/grpclog +google.golang.org/protobuf/reflect/protoreflect google.golang.org/grpc/attributes google.golang.org/protobuf/internal/version -vendor/golang.org/x/text/secure/bidirule google.golang.org/grpc/internal/idle golang.org/x/text/unicode/bidi golang.org/x/text/unicode/norm golang.org/x/net/http2/hpack github.com/DataDog/zstd github.com/smallstep/nosql/database +go.etcd.io/bbolt database/sql -vendor/golang.org/x/net/idna compress/zlib +text/template +golang.org/x/crypto/curve25519 +github.com/sirupsen/logrus +google.golang.org/grpc/grpclog +google.golang.org/protobuf/internal/strs +google.golang.org/protobuf/internal/encoding/messageset +google.golang.org/protobuf/internal/encoding/json +vendor/golang.org/x/net/idna +google.golang.org/protobuf/internal/descfmt +google.golang.org/protobuf/internal/descopts +google.golang.org/protobuf/internal/encoding/text crypto/elliptic crypto/internal/boring/bbig encoding/asn1 crypto/rand crypto/dsa -google.golang.org/protobuf/internal/strs +google.golang.org/protobuf/internal/genid +google.golang.org/protobuf/internal/encoding/defval crypto/ed25519 crypto/internal/hpke -github.com/rs/xid crypto/rsa -google.golang.org/protobuf/internal/encoding/json -github.com/sirupsen/logrus -google.golang.org/protobuf/internal/encoding/messageset -google.golang.org/protobuf/internal/descfmt -google.golang.org/protobuf/internal/descopts -google.golang.org/protobuf/internal/encoding/text -google.golang.org/protobuf/internal/genid +github.com/rs/xid google.golang.org/protobuf/internal/order google.golang.org/protobuf/reflect/protoregistry google.golang.org/protobuf/runtime/protoiface -text/template -google.golang.org/grpc/grpclog +google.golang.org/grpc/connectivity +google.golang.org/protobuf/internal/protolazy golang.org/x/text/secure/bidirule github.com/dgraph-io/ristretto/z -google.golang.org/protobuf/internal/protolazy -vendor/golang.org/x/crypto/cryptobyte -crypto/x509/pkix -golang.org/x/net/idna -google.golang.org/protobuf/internal/encoding/defval -github.com/dgraph-io/ristretto -google.golang.org/grpc/connectivity -google.golang.org/protobuf/proto github.com/dustin/go-humanize -go.etcd.io/bbolt +github.com/smallstep/nosql/bolt go.step.sm/crypto/randutil -golang.org/x/crypto/curve25519 +golang.org/x/net/idna +html/template go.step.sm/crypto/fingerprint github.com/Masterminds/goutils github.com/Masterminds/semver +github.com/dgraph-io/ristretto github.com/imdario/mergo +google.golang.org/protobuf/proto github.com/mitchellh/reflectwalk -crypto/ecdsa github.com/shopspring/decimal -github.com/mitchellh/copystructure golang.org/x/crypto/bcrypt +github.com/mitchellh/copystructure golang.org/x/crypto/pbkdf2 +golang.org/x/crypto/scrypt github.com/go-jose/go-jose/v3/json go.step.sm/crypto/internal/utils -golang.org/x/crypto/scrypt -google.golang.org/protobuf/internal/filedesc -google.golang.org/protobuf/encoding/prototext go.step.sm/crypto/x25519 golang.org/x/crypto/chacha20 golang.org/x/crypto/ssh/internal/bcrypt_pbkdf +vendor/golang.org/x/crypto/cryptobyte +crypto/x509/pkix go.step.sm/crypto/internal/bcrypt_pbkdf golang.org/x/crypto/cryptobyte github.com/manifoldco/promptui/list github.com/manifoldco/promptui/screenbuf -html/template flag -github.com/russross/blackfriday/v2 os/user -github.com/smallstep/nosql/bolt -github.com/go-jose/go-jose/v3/cipher +github.com/russross/blackfriday/v2 github.com/mattn/go-isatty golang.org/x/net/html github.com/mattn/go-colorable -github.com/smallstep/scep/cryptoutil +google.golang.org/protobuf/internal/filedesc +google.golang.org/protobuf/encoding/prototext +github.com/spf13/cast +github.com/mgutz/ansi +crypto/ecdsa runtime/debug runtime/trace github.com/newrelic/go-agent/internal/jsonx -github.com/mgutz/ansi github.com/newrelic/go-agent/internal/logger github.com/newrelic/go-agent/internal/cat github.com/newrelic/go-agent/internal/sysinfo github.com/aws/aws-sdk-go/aws/awserr github.com/jmespath/go-jmespath encoding/xml -github.com/smallstep/certificates/kms/uri -testing github.com/aws/aws-sdk-go/internal/ini +testing +github.com/aws/aws-sdk-go/aws/endpoints google.golang.org/protobuf/encoding/protojson google.golang.org/protobuf/internal/encoding/tag -github.com/spf13/cast +github.com/go-jose/go-jose/v3/cipher +github.com/smallstep/scep/cryptoutil +github.com/smallstep/certificates/kms/uri google.golang.org/protobuf/internal/impl +github.com/miekg/pkcs11 github.com/cpuguy83/go-md2man/v2/md2man -github.com/aws/aws-sdk-go/aws/endpoints -github.com/urfave/cli github.com/aws/aws-sdk-go/aws/awsutil -github.com/miekg/pkcs11 +github.com/urfave/cli github.com/thales-e-security/pool -go.step.sm/cli-utils/errs github.com/aws/aws-sdk-go/internal/shareddefaults github.com/aws/aws-sdk-go/aws/credentials +github.com/aws/aws-sdk-go/aws/credentials/processcreds # github.com/DataDog/zstd cgo-gcc-prolog: In function '_cgo_b9bf7713f076_Cfunc_ZSTD_getDecompressedSize': cgo-gcc-prolog:117:2: warning: 'ZSTD_getDecompressedSize' is deprecated [-Wdeprecated-declarations] @@ -2531,42 +2567,44 @@ /usr/include/zstd.h:214:32: note: declared here 214 | ZSTDLIB_API unsigned long long ZSTD_getDecompressedSize(const void* src, size_t srcSize); | ^~~~~~~~~~~~~~~~~~~~~~~~ -github.com/aws/aws-sdk-go/aws/credentials/processcreds crypto/x509 -vendor/golang.org/x/net/http/httpproxy -github.com/chzyer/readline net/textproto +vendor/golang.org/x/net/http/httpproxy google.golang.org/grpc/internal google.golang.org/grpc/internal/syscall google.golang.org/grpc/internal/resolver/dns/internal github.com/google/uuid +github.com/chzyer/readline google.golang.org/grpc/metadata google.golang.org/grpc/codes +vendor/golang.org/x/net/http/httpguts +mime/multipart +golang.org/x/net/http/httpguts google.golang.org/grpc/internal/grpcutil google.golang.org/grpc/internal/balancerload google.golang.org/grpc/stats google.golang.org/grpc/tap -vendor/golang.org/x/net/http/httpguts -mime/multipart -golang.org/x/net/http/httpguts google.golang.org/grpc/encoding -github.com/manifoldco/promptui -go.step.sm/cli-utils/ui +go.step.sm/cli-utils/errs crypto/tls github.com/Masterminds/sprig github.com/go-jose/go-jose/v3 golang.org/x/crypto/ssh -github.com/smallstep/pkcs7/internal/legacy/x509 github.com/smallstep/certificates/kms/apiv1 -github.com/smallstep/scep/x509util github.com/micromdm/scep/cryptoutil/x509util +github.com/smallstep/pkcs7/internal/legacy/x509 +github.com/smallstep/scep/x509util go.mozilla.org/pkcs7 golang.org/x/crypto/ocsp -go.step.sm/cli-utils/step github.com/go-piv/piv-go/piv +github.com/manifoldco/promptui github.com/smallstep/pkcs7 -google.golang.org/protobuf/internal/filetype +go.step.sm/cli-utils/ui +go.step.sm/cli-utils/step github.com/smallstep/scep +github.com/go-jose/go-jose/v3/cryptosigner +github.com/go-jose/go-jose/v3/jwt +google.golang.org/protobuf/internal/filetype google.golang.org/protobuf/runtime/protoimpl google.golang.org/protobuf/protoadapt google.golang.org/protobuf/types/known/durationpb @@ -2576,14 +2614,13 @@ google.golang.org/protobuf/types/descriptorpb github.com/slackhq/nebula/cert google.golang.org/grpc/encoding/proto -google.golang.org/genproto/googleapis/rpc/status github.com/golang/protobuf/ptypes/duration -google.golang.org/grpc/internal/pretty +google.golang.org/genproto/googleapis/rpc/status github.com/golang/protobuf/ptypes/timestamp -github.com/go-jose/go-jose/v3/cryptosigner +google.golang.org/grpc/internal/pretty google.golang.org/grpc/internal/status -github.com/go-jose/go-jose/v3/jwt google.golang.org/grpc/binarylog/grpc_binarylog_v1 +github.com/smallstep/certificates/kms/yubikey google.golang.org/grpc/status google.golang.org/grpc/internal/binarylog google.golang.org/protobuf/internal/editionssupport @@ -2592,17 +2629,15 @@ go.step.sm/crypto/keyutil golang.org/x/crypto/ssh/agent go.step.sm/crypto/pemutil -github.com/smallstep/certificates/kms/yubikey github.com/smallstep/certificates/kms/softkms -github.com/smallstep/certificates/kms/sshagentkms github.com/golang/protobuf/proto +github.com/smallstep/certificates/kms/sshagentkms github.com/smallstep/certificates/kms net/http/httptrace google.golang.org/grpc/internal/credentials github.com/go-sql-driver/mysql -github.com/dgraph-io/badger/pb -google.golang.org/grpc/credentials net/http +google.golang.org/grpc/credentials google.golang.org/grpc/internal/channelz google.golang.org/grpc/resolver google.golang.org/grpc/credentials/insecure @@ -2611,10 +2646,11 @@ google.golang.org/grpc/internal/resolver/passthrough google.golang.org/grpc/internal/transport/networktype google.golang.org/grpc/balancer/grpclb/state -google.golang.org/grpc/internal/resolver/dns google.golang.org/grpc/internal/resolver/unix -google.golang.org/grpc/channelz +google.golang.org/grpc/internal/resolver/dns +github.com/dgraph-io/badger/pb google.golang.org/grpc/resolver/dns +google.golang.org/grpc/channelz google.golang.org/grpc/balancer google.golang.org/grpc/balancer/base google.golang.org/grpc/internal/serviceconfig @@ -2635,61 +2671,61 @@ github.com/newrelic/go-agent/internal github.com/newrelic/go-agent/internal/utilization github.com/smallstep/certificates/server -go.step.sm/crypto/internal/templates -go.step.sm/cli-utils/token github.com/aws/aws-sdk-go/aws +github.com/smallstep/certificates/kms/pkcs11 github.com/smallstep/certificates/api/log -go.step.sm/cli-utils/command +go.step.sm/crypto/internal/templates +go.step.sm/cli-utils/token +github.com/aws/aws-sdk-go/aws/request +github.com/aws/aws-sdk-go/aws/auth/bearer github.com/smallstep/certificates/api/render +go.step.sm/cli-utils/command go.step.sm/crypto/x509util go.step.sm/crypto/sshutil go.step.sm/cli-utils/fileutil +github.com/smallstep/certificates/errs go.step.sm/cli-utils/token/provision github.com/dgraph-io/badger/y -github.com/smallstep/certificates/errs github.com/smallstep/certificates/templates github.com/smallstep/certificates/api/read -github.com/aws/aws-sdk-go/aws/request -github.com/aws/aws-sdk-go/aws/auth/bearer -github.com/dgraph-io/badger/skl -github.com/dgraph-io/badger/table github.com/aws/aws-sdk-go/aws/client github.com/aws/aws-sdk-go/aws/corehandlers github.com/aws/aws-sdk-go/private/protocol github.com/aws/aws-sdk-go/aws/csm +github.com/dgraph-io/badger/skl +github.com/dgraph-io/badger/table +github.com/aws/aws-sdk-go/aws/ec2metadata +github.com/aws/aws-sdk-go/private/protocol/rest +github.com/aws/aws-sdk-go/private/protocol/json/jsonutil +github.com/aws/aws-sdk-go/private/protocol/query/queryutil +github.com/aws/aws-sdk-go/private/protocol/xml/xmlutil github.com/smallstep/certificates/policy github.com/smallstep/certificates/cas/softcas go.step.sm/crypto/tlsutil github.com/dgraph-io/badger github.com/smallstep/certificates/cas -github.com/aws/aws-sdk-go/aws/ec2metadata -github.com/smallstep/certificates/kms/pkcs11 -github.com/newrelic/go-agent -github.com/aws/aws-sdk-go/private/protocol/rest -github.com/aws/aws-sdk-go/private/protocol/xml/xmlutil -github.com/aws/aws-sdk-go/private/protocol/json/jsonutil -github.com/aws/aws-sdk-go/private/protocol/query/queryutil github.com/aws/aws-sdk-go/aws/credentials/ec2rolecreds github.com/aws/aws-sdk-go/aws/credentials/endpointcreds -github.com/aws/aws-sdk-go/private/protocol/query -github.com/aws/aws-sdk-go/aws/defaults github.com/aws/aws-sdk-go/aws/signer/v4 github.com/aws/aws-sdk-go/private/protocol/jsonrpc +github.com/aws/aws-sdk-go/private/protocol/query github.com/aws/aws-sdk-go/private/protocol/restjson +github.com/aws/aws-sdk-go/aws/defaults +github.com/newrelic/go-agent github.com/aws/aws-sdk-go/service/sts github.com/aws/aws-sdk-go/service/kms github.com/aws/aws-sdk-go/service/sso github.com/aws/aws-sdk-go/service/ssooidc -google.golang.org/grpc/internal/transport -github.com/aws/aws-sdk-go/service/sts/stsiface github.com/aws/aws-sdk-go/service/sso/ssoiface -github.com/aws/aws-sdk-go/aws/credentials/stscreds github.com/aws/aws-sdk-go/aws/credentials/ssocreds +github.com/aws/aws-sdk-go/service/sts/stsiface +google.golang.org/grpc/internal/transport +github.com/aws/aws-sdk-go/aws/credentials/stscreds github.com/aws/aws-sdk-go/aws/session google.golang.org/grpc +github.com/smallstep/certificates/kms/awskms github.com/smallstep/nosql/badger/v1 github.com/smallstep/nosql/badger/v2 -github.com/smallstep/certificates/kms/awskms github.com/smallstep/nosql go.step.sm/linkedca github.com/smallstep/certificates/monitoring @@ -2807,50 +2843,50 @@ --- PASS: TestLinker_LinkOrdersByAccountID (0.00s) --- PASS: TestLinker_LinkOrdersByAccountID/ok (0.00s) === RUN TestOrder_UpdateStatus -=== RUN TestOrder_UpdateStatus/ok/already-invalid -=== RUN TestOrder_UpdateStatus/fail/ready-expired-db.UpdateOrder-error -=== RUN TestOrder_UpdateStatus/ok/pending-expired +=== RUN TestOrder_UpdateStatus/ok/already-valid +=== RUN TestOrder_UpdateStatus/ok/ready-expired === RUN TestOrder_UpdateStatus/ok/invalid === RUN TestOrder_UpdateStatus/ok/still-pending -=== RUN TestOrder_UpdateStatus/ok/already-valid === RUN TestOrder_UpdateStatus/fail/error-unexpected-status -=== RUN TestOrder_UpdateStatus/ok/ready-expired +=== RUN TestOrder_UpdateStatus/fail/ready-expired-db.UpdateOrder-error +=== RUN TestOrder_UpdateStatus/ok/pending-expired === RUN TestOrder_UpdateStatus/ok/valid +=== RUN TestOrder_UpdateStatus/ok/already-invalid --- PASS: TestOrder_UpdateStatus (0.00s) - --- PASS: TestOrder_UpdateStatus/ok/already-invalid (0.00s) - --- PASS: TestOrder_UpdateStatus/fail/ready-expired-db.UpdateOrder-error (0.00s) - --- PASS: TestOrder_UpdateStatus/ok/pending-expired (0.00s) + --- PASS: TestOrder_UpdateStatus/ok/already-valid (0.00s) + --- PASS: TestOrder_UpdateStatus/ok/ready-expired (0.00s) --- PASS: TestOrder_UpdateStatus/ok/invalid (0.00s) --- PASS: TestOrder_UpdateStatus/ok/still-pending (0.00s) - --- PASS: TestOrder_UpdateStatus/ok/already-valid (0.00s) --- PASS: TestOrder_UpdateStatus/fail/error-unexpected-status (0.00s) - --- PASS: TestOrder_UpdateStatus/ok/ready-expired (0.00s) + --- PASS: TestOrder_UpdateStatus/fail/ready-expired-db.UpdateOrder-error (0.00s) + --- PASS: TestOrder_UpdateStatus/ok/pending-expired (0.00s) --- PASS: TestOrder_UpdateStatus/ok/valid (0.00s) + --- PASS: TestOrder_UpdateStatus/ok/already-invalid (0.00s) === RUN TestOrder_Finalize === RUN TestOrder_Finalize/fail/invalid -=== RUN TestOrder_Finalize/fail/pending -=== RUN TestOrder_Finalize/fail/error-template-options -=== RUN TestOrder_Finalize/fail/error-ca-sign -=== RUN TestOrder_Finalize/ok/new-cert-ip === RUN TestOrder_Finalize/ok/already-valid === RUN TestOrder_Finalize/fail/error-unexpected-status === RUN TestOrder_Finalize/fail/error-provisioner-auth +=== RUN TestOrder_Finalize/fail/error-template-options === RUN TestOrder_Finalize/fail/error-db.CreateCertificate === RUN TestOrder_Finalize/fail/error-db.UpdateOrder === RUN TestOrder_Finalize/ok/new-cert-dns +=== RUN TestOrder_Finalize/fail/pending +=== RUN TestOrder_Finalize/fail/error-ca-sign +=== RUN TestOrder_Finalize/ok/new-cert-ip === RUN TestOrder_Finalize/ok/new-cert-dns-and-ip --- PASS: TestOrder_Finalize (0.00s) --- PASS: TestOrder_Finalize/fail/invalid (0.00s) - --- PASS: TestOrder_Finalize/fail/pending (0.00s) - --- PASS: TestOrder_Finalize/fail/error-template-options (0.00s) - --- PASS: TestOrder_Finalize/fail/error-ca-sign (0.00s) - --- PASS: TestOrder_Finalize/ok/new-cert-ip (0.00s) --- PASS: TestOrder_Finalize/ok/already-valid (0.00s) --- PASS: TestOrder_Finalize/fail/error-unexpected-status (0.00s) --- PASS: TestOrder_Finalize/fail/error-provisioner-auth (0.00s) + --- PASS: TestOrder_Finalize/fail/error-template-options (0.00s) --- PASS: TestOrder_Finalize/fail/error-db.CreateCertificate (0.00s) --- PASS: TestOrder_Finalize/fail/error-db.UpdateOrder (0.00s) --- PASS: TestOrder_Finalize/ok/new-cert-dns (0.00s) + --- PASS: TestOrder_Finalize/fail/pending (0.00s) + --- PASS: TestOrder_Finalize/fail/error-ca-sign (0.00s) + --- PASS: TestOrder_Finalize/ok/new-cert-ip (0.00s) --- PASS: TestOrder_Finalize/ok/new-cert-dns-and-ip (0.00s) === RUN Test_uniqueSortedIPs === RUN Test_uniqueSortedIPs/ok/empty @@ -2951,151 +2987,151 @@ --- PASS: TestOrder_sans/ok/mixed (0.00s) --- PASS: TestOrder_sans/fail/unsupported-identifier-type (0.00s) PASS -ok github.com/smallstep/certificates/acme 0.073s +ok github.com/smallstep/certificates/acme 0.111s === RUN TestNewAccountRequest_Validate +=== RUN TestNewAccountRequest_Validate/fail/incompatible-input === RUN TestNewAccountRequest_Validate/fail/bad-contact === RUN TestNewAccountRequest_Validate/ok === RUN TestNewAccountRequest_Validate/ok/onlyReturnExisting -=== RUN TestNewAccountRequest_Validate/fail/incompatible-input --- PASS: TestNewAccountRequest_Validate (0.00s) + --- PASS: TestNewAccountRequest_Validate/fail/incompatible-input (0.00s) --- PASS: TestNewAccountRequest_Validate/fail/bad-contact (0.00s) --- PASS: TestNewAccountRequest_Validate/ok (0.00s) --- PASS: TestNewAccountRequest_Validate/ok/onlyReturnExisting (0.00s) - --- PASS: TestNewAccountRequest_Validate/fail/incompatible-input (0.00s) === RUN TestUpdateAccountRequest_Validate +=== RUN TestUpdateAccountRequest_Validate/ok/accept-empty === RUN TestUpdateAccountRequest_Validate/fail/incompatible-input === RUN TestUpdateAccountRequest_Validate/fail/bad-contact === RUN TestUpdateAccountRequest_Validate/fail/bad-status === RUN TestUpdateAccountRequest_Validate/ok/contact === RUN TestUpdateAccountRequest_Validate/ok/status -=== RUN TestUpdateAccountRequest_Validate/ok/accept-empty --- PASS: TestUpdateAccountRequest_Validate (0.00s) + --- PASS: TestUpdateAccountRequest_Validate/ok/accept-empty (0.00s) --- PASS: TestUpdateAccountRequest_Validate/fail/incompatible-input (0.00s) --- PASS: TestUpdateAccountRequest_Validate/fail/bad-contact (0.00s) --- PASS: TestUpdateAccountRequest_Validate/fail/bad-status (0.00s) --- PASS: TestUpdateAccountRequest_Validate/ok/contact (0.00s) --- PASS: TestUpdateAccountRequest_Validate/ok/status (0.00s) - --- PASS: TestUpdateAccountRequest_Validate/ok/accept-empty (0.00s) === RUN TestHandler_GetOrdersByAccountID -=== RUN TestHandler_GetOrdersByAccountID/fail/no-account -2026/05/18 23:57:24 Account does not exist -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} -=== RUN TestHandler_GetOrdersByAccountID/fail/nil-account -2026/05/18 23:57:24 Account does not exist -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} === RUN TestHandler_GetOrdersByAccountID/fail/account-id-mismatch -2026/05/18 23:57:24 The client lacks sufficient authorization -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} +2025/04/16 19:40:17 The client lacks sufficient authorization +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} === RUN TestHandler_GetOrdersByAccountID/fail/db.GetOrdersByAccountID-error -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_GetOrdersByAccountID/ok ---- PASS: TestHandler_GetOrdersByAccountID (0.00s) - --- PASS: TestHandler_GetOrdersByAccountID/fail/no-account (0.00s) - --- PASS: TestHandler_GetOrdersByAccountID/fail/nil-account (0.00s) +=== RUN TestHandler_GetOrdersByAccountID/fail/no-account +2025/04/16 19:40:17 Account does not exist +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +=== RUN TestHandler_GetOrdersByAccountID/fail/nil-account +2025/04/16 19:40:17 Account does not exist +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +--- PASS: TestHandler_GetOrdersByAccountID (0.01s) --- PASS: TestHandler_GetOrdersByAccountID/fail/account-id-mismatch (0.00s) --- PASS: TestHandler_GetOrdersByAccountID/fail/db.GetOrdersByAccountID-error (0.00s) --- PASS: TestHandler_GetOrdersByAccountID/ok (0.00s) + --- PASS: TestHandler_GetOrdersByAccountID/fail/no-account (0.00s) + --- PASS: TestHandler_GetOrdersByAccountID/fail/nil-account (0.00s) === RUN TestHandler_NewAccount -=== RUN TestHandler_NewAccount/fail/no-payload -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_NewAccount/fail/nil-payload -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_NewAccount/fail/unmarshal-payload-error -2026/05/18 23:57:24 The request message was malformed -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_NewAccount/fail/malformed-payload-error -2026/05/18 23:57:24 The request message was malformed -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestHandler_NewAccount/fail/no-existing-account -2026/05/18 23:57:24 Account does not exist -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} -=== RUN TestHandler_NewAccount/fail/nil-jwk -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 Account does not exist +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +=== RUN TestHandler_NewAccount/fail/new-account-no-eab-provided +2025/04/16 19:40:17 The request must include a value for the "externalAccountBinding" field +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:externalAccountRequired","detail":"The request must include a value for the \"externalAccountBinding\" field"} === RUN TestHandler_NewAccount/fail/db.CreateAccount-error -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_NewAccount/fail/acmeProvisionerFromContext +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_NewAccount/fail/db.UpdateExternalAccountKey-error -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_NewAccount/ok/new-account -2026/05/18 23:57:24 {"contact":["foo","bar"],"status":"valid","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_NewAccount/ok/new-account-with-eab +2025/04/16 19:40:17 {"contact":["foo","bar"],"status":"valid","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders","externalAccountBinding":{"protected":"eyJhbGciOiJIUzI1NiIsImtpZCI6ImVha0lEIiwidXJsIjoiaHR0cHM6Ly90ZXN0LmNhLnNtYWxsc3RlcC5jb20vYWNtZS90ZXN0QGFjbWUtJTNDdGVzdCUzRXByb3Zpc2lvbmVyLmNvbS9hY2NvdW50L25ldy1hY2NvdW50In0","payload":"eyJ1c2UiOiJzaWciLCJrdHkiOiJFQyIsImtpZCI6InQyZmZfV1ozNlJ6cTV3emxtUDd2dVNfWTFqeTBLdk0xLVNsVFdibV84bFUiLCJjcnYiOiJQLTI1NiIsImFsZyI6IkVTMjU2IiwieCI6InFUVlNueFNTZGcwQTd6aTVnR1ZxajNPekI5UWlWTDRnZjdRNFhVN0NPdXciLCJ5IjoicDBJS2RWT0RIenpnWnktU0NoWi1yMVJXY3dYOFlTUUg0WG5qc0NnSFZ5byJ9","signature":"Z-_2e2dZ8d3a_wQPdEQ8xECNNKIZW1UsWddf4g_WYRs"}} === RUN TestHandler_NewAccount/fail/no-jwk -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_NewAccount/fail/new-account-no-eab-provided -2026/05/18 23:57:24 The request must include a value for the "externalAccountBinding" field -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:externalAccountRequired","detail":"The request must include a value for the \"externalAccountBinding\" field"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_NewAccount/fail/nil-jwk +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_NewAccount/ok/return-existing -2026/05/18 23:57:24 {"contact":["foo","bar"],"status":"valid","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} -=== RUN TestHandler_NewAccount/fail/acmeProvisionerFromContext -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 {"contact":["foo","bar"],"status":"valid","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} === RUN TestHandler_NewAccount/ok/new-account-no-eab-required -2026/05/18 23:57:24 {"contact":["foo","bar"],"status":"valid","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} -=== RUN TestHandler_NewAccount/ok/new-account-with-eab -2026/05/18 23:57:24 {"contact":["foo","bar"],"status":"valid","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders","externalAccountBinding":{"protected":"eyJhbGciOiJIUzI1NiIsImtpZCI6ImVha0lEIiwidXJsIjoiaHR0cHM6Ly90ZXN0LmNhLnNtYWxsc3RlcC5jb20vYWNtZS90ZXN0QGFjbWUtJTNDdGVzdCUzRXByb3Zpc2lvbmVyLmNvbS9hY2NvdW50L25ldy1hY2NvdW50In0","payload":"eyJ1c2UiOiJzaWciLCJrdHkiOiJFQyIsImtpZCI6IjZra1Nld1lIMGRRdFQ2RjNuMDQ1MkVCa2x0UGtJaHBla3JlREVXUVZWc2MiLCJjcnYiOiJQLTI1NiIsImFsZyI6IkVTMjU2IiwieCI6IlA4SlFxUmlHQnRodVBPb3J5UnA0b0N1T0hYa3FfcDBTdktPUnVrQ0ZKSXMiLCJ5IjoiNTZrMHZXcW1FQ19scTZQcDV4YXNHb2JQREFmRXdvVkQyUTdMd0pMbHM1dyJ9","signature":"gxac0oG7-LKt00FYHHl-zGMMZznL7qRo122a1gsExtA"}} ---- PASS: TestHandler_NewAccount (0.01s) - --- PASS: TestHandler_NewAccount/fail/no-payload (0.00s) - --- PASS: TestHandler_NewAccount/fail/nil-payload (0.00s) +2025/04/16 19:40:17 {"contact":["foo","bar"],"status":"valid","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} +=== RUN TestHandler_NewAccount/fail/nil-payload +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_NewAccount/fail/no-payload +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_NewAccount/fail/malformed-payload-error +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_NewAccount/ok/new-account +2025/04/16 19:40:17 {"contact":["foo","bar"],"status":"valid","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} +--- PASS: TestHandler_NewAccount (0.00s) --- PASS: TestHandler_NewAccount/fail/unmarshal-payload-error (0.00s) - --- PASS: TestHandler_NewAccount/fail/malformed-payload-error (0.00s) --- PASS: TestHandler_NewAccount/fail/no-existing-account (0.00s) - --- PASS: TestHandler_NewAccount/fail/nil-jwk (0.00s) + --- PASS: TestHandler_NewAccount/fail/new-account-no-eab-provided (0.00s) --- PASS: TestHandler_NewAccount/fail/db.CreateAccount-error (0.00s) + --- PASS: TestHandler_NewAccount/fail/acmeProvisionerFromContext (0.00s) --- PASS: TestHandler_NewAccount/fail/db.UpdateExternalAccountKey-error (0.00s) - --- PASS: TestHandler_NewAccount/ok/new-account (0.00s) + --- PASS: TestHandler_NewAccount/ok/new-account-with-eab (0.00s) --- PASS: TestHandler_NewAccount/fail/no-jwk (0.00s) - --- PASS: TestHandler_NewAccount/fail/new-account-no-eab-provided (0.00s) + --- PASS: TestHandler_NewAccount/fail/nil-jwk (0.00s) --- PASS: TestHandler_NewAccount/ok/return-existing (0.00s) - --- PASS: TestHandler_NewAccount/fail/acmeProvisionerFromContext (0.00s) --- PASS: TestHandler_NewAccount/ok/new-account-no-eab-required (0.00s) - --- PASS: TestHandler_NewAccount/ok/new-account-with-eab (0.00s) + --- PASS: TestHandler_NewAccount/fail/nil-payload (0.00s) + --- PASS: TestHandler_NewAccount/fail/no-payload (0.00s) + --- PASS: TestHandler_NewAccount/fail/malformed-payload-error (0.00s) + --- PASS: TestHandler_NewAccount/ok/new-account (0.00s) === RUN TestHandler_GetOrUpdateAccount -=== RUN TestHandler_GetOrUpdateAccount/fail/nil-payload -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_GetOrUpdateAccount/fail/unmarshal-payload-error -2026/05/18 23:57:24 The request message was malformed -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestHandler_GetOrUpdateAccount/fail/malformed-payload-error -2026/05/18 23:57:24 The request message was malformed -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestHandler_GetOrUpdateAccount/fail/db.UpdateAccount-error -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_GetOrUpdateAccount/ok/deactivate -2026/05/18 23:57:24 {"status":"deactivated","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} +2025/04/16 19:40:17 {"status":"deactivated","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} === RUN TestHandler_GetOrUpdateAccount/ok/update-contacts -2026/05/18 23:57:24 {"contact":["foo","bar"],"status":"deactivated","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} -=== RUN TestHandler_GetOrUpdateAccount/ok/post-as-get -2026/05/18 23:57:24 {"contact":["foo","bar"],"status":"deactivated","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} +2025/04/16 19:40:17 {"contact":["foo","bar"],"status":"deactivated","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} === RUN TestHandler_GetOrUpdateAccount/fail/no-account -2026/05/18 23:57:24 Account does not exist -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +2025/04/16 19:40:17 Account does not exist +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} === RUN TestHandler_GetOrUpdateAccount/fail/nil-account -2026/05/18 23:57:24 Account does not exist -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +2025/04/16 19:40:17 Account does not exist +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} === RUN TestHandler_GetOrUpdateAccount/fail/no-payload -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_GetOrUpdateAccount/fail/nil-payload +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_GetOrUpdateAccount/ok/update-empty -2026/05/18 23:57:24 {"contact":["foo","bar"],"status":"deactivated","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} +2025/04/16 19:40:17 {"contact":["foo","bar"],"status":"deactivated","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} +=== RUN TestHandler_GetOrUpdateAccount/ok/post-as-get +2025/04/16 19:40:17 {"contact":["foo","bar"],"status":"deactivated","orders":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/account/accountID/orders"} --- PASS: TestHandler_GetOrUpdateAccount (0.00s) - --- PASS: TestHandler_GetOrUpdateAccount/fail/nil-payload (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/fail/unmarshal-payload-error (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/fail/malformed-payload-error (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/fail/db.UpdateAccount-error (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/ok/deactivate (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/ok/update-contacts (0.00s) - --- PASS: TestHandler_GetOrUpdateAccount/ok/post-as-get (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/fail/no-account (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/fail/nil-account (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/fail/no-payload (0.00s) + --- PASS: TestHandler_GetOrUpdateAccount/fail/nil-payload (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/ok/update-empty (0.00s) + --- PASS: TestHandler_GetOrUpdateAccount/ok/post-as-get (0.00s) === RUN Test_keysAreEqual === RUN Test_keysAreEqual/ok/nil === RUN Test_keysAreEqual/ok/equal @@ -3107,62 +3143,62 @@ --- PASS: Test_keysAreEqual/ok/not-equal (0.00s) --- PASS: Test_keysAreEqual/ok/wrong-key-type (0.00s) === RUN TestHandler_validateExternalAccountBinding -=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-nil -=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-no-keybytes +=== RUN TestHandler_validateExternalAccountBinding/fail/parse-eab-jose +=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-not-found +=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-error === RUN TestHandler_validateExternalAccountBinding/fail/eab-verify === RUN TestHandler_validateExternalAccountBinding/fail/nil-jwk -=== RUN TestHandler_validateExternalAccountBinding/fail/retrieve-eab-key-db-failure -=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-error -=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-wrong-provisioner === RUN TestHandler_validateExternalAccountBinding/ok/no-eab-required-but-provided === RUN TestHandler_validateExternalAccountBinding/ok/eab -=== RUN TestHandler_validateExternalAccountBinding/fail/validate-eab-jws-no-signatures -=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-not-found -=== RUN TestHandler_validateExternalAccountBinding/fail/eab-non-matching-keys === RUN TestHandler_validateExternalAccountBinding/fail/acmeProvisionerFromContext -=== RUN TestHandler_validateExternalAccountBinding/fail/parse-eab-jose +=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-nil +=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-no-keybytes +=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-wrong-provisioner +=== RUN TestHandler_validateExternalAccountBinding/fail/eab-non-matching-keys +=== RUN TestHandler_validateExternalAccountBinding/fail/validate-eab-jws-no-signatures +=== RUN TestHandler_validateExternalAccountBinding/fail/retrieve-eab-key-db-failure === RUN TestHandler_validateExternalAccountBinding/fail/eab-already-bound === RUN TestHandler_validateExternalAccountBinding/fail/no-jwk ---- PASS: TestHandler_validateExternalAccountBinding (0.04s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-nil (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-no-keybytes (0.00s) +--- PASS: TestHandler_validateExternalAccountBinding (0.03s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/parse-eab-jose (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-not-found (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-error (0.00s) --- PASS: TestHandler_validateExternalAccountBinding/fail/eab-verify (0.00s) --- PASS: TestHandler_validateExternalAccountBinding/fail/nil-jwk (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/retrieve-eab-key-db-failure (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-error (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-wrong-provisioner (0.00s) --- PASS: TestHandler_validateExternalAccountBinding/ok/no-eab-required-but-provided (0.00s) --- PASS: TestHandler_validateExternalAccountBinding/ok/eab (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/validate-eab-jws-no-signatures (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-not-found (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/eab-non-matching-keys (0.00s) --- PASS: TestHandler_validateExternalAccountBinding/fail/acmeProvisionerFromContext (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/parse-eab-jose (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-nil (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-no-keybytes (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-wrong-provisioner (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/eab-non-matching-keys (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/validate-eab-jws-no-signatures (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/retrieve-eab-key-db-failure (0.00s) --- PASS: TestHandler_validateExternalAccountBinding/fail/eab-already-bound (0.00s) --- PASS: TestHandler_validateExternalAccountBinding/fail/no-jwk (0.00s) === RUN Test_validateEABJWS === RUN Test_validateEABJWS/fail/invalid-number-of-signatures +=== RUN Test_validateEABJWS/fail/invalid-algorithm === RUN Test_validateEABJWS/fail/kid-not-set +=== RUN Test_validateEABJWS/fail/url-not-set === RUN Test_validateEABJWS/fail/outer-jws-multiple-signatures +=== RUN Test_validateEABJWS/fail/outer-jws-no-url === RUN Test_validateEABJWS/ok === RUN Test_validateEABJWS/fail/nil-jws -=== RUN Test_validateEABJWS/fail/invalid-algorithm === RUN Test_validateEABJWS/fail/nonce-not-empty -=== RUN Test_validateEABJWS/fail/url-not-set === RUN Test_validateEABJWS/fail/no-outer-jws -=== RUN Test_validateEABJWS/fail/outer-jws-no-url === RUN Test_validateEABJWS/fail/outer-jws-with-different-url ---- PASS: Test_validateEABJWS (0.00s) +--- PASS: Test_validateEABJWS (0.01s) --- PASS: Test_validateEABJWS/fail/invalid-number-of-signatures (0.00s) + --- PASS: Test_validateEABJWS/fail/invalid-algorithm (0.00s) --- PASS: Test_validateEABJWS/fail/kid-not-set (0.00s) + --- PASS: Test_validateEABJWS/fail/url-not-set (0.00s) --- PASS: Test_validateEABJWS/fail/outer-jws-multiple-signatures (0.00s) + --- PASS: Test_validateEABJWS/fail/outer-jws-no-url (0.00s) --- PASS: Test_validateEABJWS/ok (0.00s) --- PASS: Test_validateEABJWS/fail/nil-jws (0.00s) - --- PASS: Test_validateEABJWS/fail/invalid-algorithm (0.00s) --- PASS: Test_validateEABJWS/fail/nonce-not-empty (0.00s) - --- PASS: Test_validateEABJWS/fail/url-not-set (0.00s) --- PASS: Test_validateEABJWS/fail/no-outer-jws (0.00s) - --- PASS: Test_validateEABJWS/fail/outer-jws-no-url (0.00s) --- PASS: Test_validateEABJWS/fail/outer-jws-with-different-url (0.00s) === RUN TestHandler_GetNonce === RUN TestHandler_GetNonce/GET @@ -3171,151 +3207,151 @@ --- PASS: TestHandler_GetNonce/GET (0.00s) --- PASS: TestHandler_GetNonce/HEAD (0.00s) === RUN TestHandler_GetDirectory -=== RUN TestHandler_GetDirectory/fail/no-provisioner -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_GetDirectory/fail/different-provisioner -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_GetDirectory/ok -2026/05/18 23:57:24 {"newNonce":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-nonce","newAccount":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-account","newOrder":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-order","revokeCert":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/revoke-cert","keyChange":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/key-change","meta":{}} +2025/04/16 19:40:17 {"newNonce":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-nonce","newAccount":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-account","newOrder":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-order","revokeCert":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/revoke-cert","keyChange":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/key-change","meta":{}} === RUN TestHandler_GetDirectory/ok/eab-required -2026/05/18 23:57:24 {"newNonce":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-nonce","newAccount":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-account","newOrder":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-order","revokeCert":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/revoke-cert","keyChange":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/key-change","meta":{"externalAccountRequired":true}} +2025/04/16 19:40:17 {"newNonce":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-nonce","newAccount":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-account","newOrder":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-order","revokeCert":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/revoke-cert","keyChange":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/key-change","meta":{"externalAccountRequired":true}} +=== RUN TestHandler_GetDirectory/fail/no-provisioner +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} --- PASS: TestHandler_GetDirectory (0.00s) - --- PASS: TestHandler_GetDirectory/fail/no-provisioner (0.00s) --- PASS: TestHandler_GetDirectory/fail/different-provisioner (0.00s) --- PASS: TestHandler_GetDirectory/ok (0.00s) --- PASS: TestHandler_GetDirectory/ok/eab-required (0.00s) + --- PASS: TestHandler_GetDirectory/fail/no-provisioner (0.00s) === RUN TestHandler_GetAuthorization -=== RUN TestHandler_GetAuthorization/fail/nil-account -2026/05/18 23:57:24 Account does not exist -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} -=== RUN TestHandler_GetAuthorization/fail/db.GetAuthorization-error -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_GetAuthorization/fail/account-id-mismatch -2026/05/18 23:57:24 The client lacks sufficient authorization -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} +2025/04/16 19:40:17 The client lacks sufficient authorization +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} === RUN TestHandler_GetAuthorization/fail/db.UpdateAuthorization-error -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_GetAuthorization/ok -2026/05/18 23:57:24 {"identifier":{"type":"dns","value":"example.com"},"status":"pending","challenges":[{"type":"http-01","status":"pending","token":"tok2","url":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/challenge/authzID/chHTTP01ID"},{"type":"dns-01","status":"pending","token":"tok2","url":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/challenge/authzID/chDNSID"}],"wildcard":false,"expires":"2026-05-19T17:57:24.590253997Z"} +2025/04/16 19:40:17 {"identifier":{"type":"dns","value":"example.com"},"status":"pending","challenges":[{"type":"http-01","status":"pending","token":"tok2","url":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/challenge/authzID/chHTTP01ID"},{"type":"dns-01","status":"pending","token":"tok2","url":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/challenge/authzID/chDNSID"}],"wildcard":false,"expires":"2025-04-16T11:40:17.082277291Z"} === RUN TestHandler_GetAuthorization/fail/no-account -2026/05/18 23:57:24 Account does not exist -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +2025/04/16 19:40:17 Account does not exist +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +=== RUN TestHandler_GetAuthorization/fail/nil-account +2025/04/16 19:40:17 Account does not exist +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +=== RUN TestHandler_GetAuthorization/fail/db.GetAuthorization-error +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} --- PASS: TestHandler_GetAuthorization (0.00s) - --- PASS: TestHandler_GetAuthorization/fail/nil-account (0.00s) - --- PASS: TestHandler_GetAuthorization/fail/db.GetAuthorization-error (0.00s) --- PASS: TestHandler_GetAuthorization/fail/account-id-mismatch (0.00s) --- PASS: TestHandler_GetAuthorization/fail/db.UpdateAuthorization-error (0.00s) --- PASS: TestHandler_GetAuthorization/ok (0.00s) --- PASS: TestHandler_GetAuthorization/fail/no-account (0.00s) + --- PASS: TestHandler_GetAuthorization/fail/nil-account (0.00s) + --- PASS: TestHandler_GetAuthorization/fail/db.GetAuthorization-error (0.00s) === RUN TestHandler_GetCertificate -=== RUN TestHandler_GetCertificate/ok === RUN TestHandler_GetCertificate/fail/no-account -2026/05/18 23:57:24 Account does not exist -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +2025/04/16 19:40:17 Account does not exist +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} === RUN TestHandler_GetCertificate/fail/nil-account -2026/05/18 23:57:24 Account does not exist -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +2025/04/16 19:40:17 Account does not exist +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} === RUN TestHandler_GetCertificate/fail/db.GetCertificate-error -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_GetCertificate/fail/account-id-mismatch -2026/05/18 23:57:24 The client lacks sufficient authorization -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} ---- PASS: TestHandler_GetCertificate (0.01s) - --- PASS: TestHandler_GetCertificate/ok (0.00s) +2025/04/16 19:40:17 The client lacks sufficient authorization +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} +=== RUN TestHandler_GetCertificate/ok +--- PASS: TestHandler_GetCertificate (0.00s) --- PASS: TestHandler_GetCertificate/fail/no-account (0.00s) --- PASS: TestHandler_GetCertificate/fail/nil-account (0.00s) --- PASS: TestHandler_GetCertificate/fail/db.GetCertificate-error (0.00s) --- PASS: TestHandler_GetCertificate/fail/account-id-mismatch (0.00s) + --- PASS: TestHandler_GetCertificate/ok (0.00s) === RUN TestHandler_GetChallenge -=== RUN TestHandler_GetChallenge/fail/no-payload -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_GetChallenge/fail/nil-payload -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_GetChallenge/fail/db.GetChallenge-error +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_GetChallenge/fail/account-id-mismatch -2026/05/18 23:57:24 The client lacks sufficient authorization -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} +2025/04/16 19:40:17 The client lacks sufficient authorization +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} +=== RUN TestHandler_GetChallenge/ok +2025/04/16 19:40:17 {"type":"http-01","status":"pending","token":"","url":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/challenge/authzID/chID","error":{"type":"urn:ietf:params:acme:error:connection","detail":"The server could not connect to validation target"}} +=== RUN TestHandler_GetChallenge/fail/no-account +2025/04/16 19:40:17 Account does not exist +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +=== RUN TestHandler_GetChallenge/fail/no-payload +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_GetChallenge/fail/no-jwk -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_GetChallenge/fail/nil-jwk -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_GetChallenge/fail/validate-challenge-error -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_GetChallenge/ok -2026/05/18 23:57:24 {"type":"http-01","status":"pending","token":"","url":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/challenge/authzID/chID","error":{"type":"urn:ietf:params:acme:error:connection","detail":"The server could not connect to validation target"}} -=== RUN TestHandler_GetChallenge/fail/no-account -2026/05/18 23:57:24 Account does not exist -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_GetChallenge/fail/nil-account -2026/05/18 23:57:24 Account does not exist -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} -=== RUN TestHandler_GetChallenge/fail/db.GetChallenge-error -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 Account does not exist +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +=== RUN TestHandler_GetChallenge/fail/nil-payload +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} --- PASS: TestHandler_GetChallenge (0.00s) - --- PASS: TestHandler_GetChallenge/fail/no-payload (0.00s) - --- PASS: TestHandler_GetChallenge/fail/nil-payload (0.00s) + --- PASS: TestHandler_GetChallenge/fail/db.GetChallenge-error (0.00s) --- PASS: TestHandler_GetChallenge/fail/account-id-mismatch (0.00s) + --- PASS: TestHandler_GetChallenge/ok (0.00s) + --- PASS: TestHandler_GetChallenge/fail/no-account (0.00s) + --- PASS: TestHandler_GetChallenge/fail/no-payload (0.00s) --- PASS: TestHandler_GetChallenge/fail/no-jwk (0.00s) --- PASS: TestHandler_GetChallenge/fail/nil-jwk (0.00s) --- PASS: TestHandler_GetChallenge/fail/validate-challenge-error (0.00s) - --- PASS: TestHandler_GetChallenge/ok (0.00s) - --- PASS: TestHandler_GetChallenge/fail/no-account (0.00s) --- PASS: TestHandler_GetChallenge/fail/nil-account (0.00s) - --- PASS: TestHandler_GetChallenge/fail/db.GetChallenge-error (0.00s) + --- PASS: TestHandler_GetChallenge/fail/nil-payload (0.00s) === RUN TestHandler_addNonce -=== RUN TestHandler_addNonce/fail/AddNonce-error -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_addNonce/ok +=== RUN TestHandler_addNonce/fail/AddNonce-error +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} --- PASS: TestHandler_addNonce (0.00s) - --- PASS: TestHandler_addNonce/fail/AddNonce-error (0.00s) --- PASS: TestHandler_addNonce/ok (0.00s) + --- PASS: TestHandler_addNonce/fail/AddNonce-error (0.00s) === RUN TestHandler_addDirLink === RUN TestHandler_addDirLink/ok --- PASS: TestHandler_addDirLink (0.00s) --- PASS: TestHandler_addDirLink/ok (0.00s) === RUN TestHandler_verifyContentType +=== RUN TestHandler_verifyContentType/fail/certificate-bad-content-type +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_verifyContentType/ok +=== RUN TestHandler_verifyContentType/ok/certificate/pkix-cert === RUN TestHandler_verifyContentType/ok/certificate/jose+json === RUN TestHandler_verifyContentType/ok/certificate/pkcs7-mime === RUN TestHandler_verifyContentType/fail/provisioner-not-set -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_verifyContentType/fail/general-bad-content-type -2026/05/18 23:57:24 The request message was malformed -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_verifyContentType/fail/certificate-bad-content-type -2026/05/18 23:57:24 The request message was malformed -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_verifyContentType/ok -=== RUN TestHandler_verifyContentType/ok/certificate/pkix-cert +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} --- PASS: TestHandler_verifyContentType (0.00s) + --- PASS: TestHandler_verifyContentType/fail/certificate-bad-content-type (0.00s) + --- PASS: TestHandler_verifyContentType/ok (0.00s) + --- PASS: TestHandler_verifyContentType/ok/certificate/pkix-cert (0.00s) --- PASS: TestHandler_verifyContentType/ok/certificate/jose+json (0.00s) --- PASS: TestHandler_verifyContentType/ok/certificate/pkcs7-mime (0.00s) --- PASS: TestHandler_verifyContentType/fail/provisioner-not-set (0.00s) --- PASS: TestHandler_verifyContentType/fail/general-bad-content-type (0.00s) - --- PASS: TestHandler_verifyContentType/fail/certificate-bad-content-type (0.00s) - --- PASS: TestHandler_verifyContentType/ok (0.00s) - --- PASS: TestHandler_verifyContentType/ok/certificate/pkix-cert (0.00s) === RUN TestHandler_isPostAsGet === RUN TestHandler_isPostAsGet/fail/no-payload -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_isPostAsGet/fail/nil-payload -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_isPostAsGet/fail/not-post-as-get -2026/05/18 23:57:24 The request message was malformed -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestHandler_isPostAsGet/ok --- PASS: TestHandler_isPostAsGet (0.00s) --- PASS: TestHandler_isPostAsGet/fail/no-payload (0.00s) @@ -3324,74 +3360,75 @@ --- PASS: TestHandler_isPostAsGet/ok (0.00s) === RUN TestHandler_parseJWS === RUN TestHandler_parseJWS/fail/read-body-error -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_parseJWS/fail/parse-jws-error -2026/05/18 23:57:24 The request message was malformed -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestHandler_parseJWS/ok --- PASS: TestHandler_parseJWS (0.00s) --- PASS: TestHandler_parseJWS/fail/read-body-error (0.00s) --- PASS: TestHandler_parseJWS/fail/parse-jws-error (0.00s) --- PASS: TestHandler_parseJWS/ok (0.00s) === RUN TestHandler_verifyAndExtractJWSPayload +=== RUN TestHandler_verifyAndExtractJWSPayload/ok === RUN TestHandler_verifyAndExtractJWSPayload/ok/empty-json === RUN TestHandler_verifyAndExtractJWSPayload/fail/no-jws -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_verifyAndExtractJWSPayload/fail/nil-jws -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_verifyAndExtractJWSPayload/fail/nil-jwk -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_verifyAndExtractJWSPayload/fail/verify-jws-failure -2026/05/18 23:57:24 The request message was malformed -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_verifyAndExtractJWSPayload/ok +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_verifyAndExtractJWSPayload/fail/algorithm-mismatch +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestHandler_verifyAndExtractJWSPayload/ok/empty-algorithm-in-jwk === RUN TestHandler_verifyAndExtractJWSPayload/ok/post-as-get +=== RUN TestHandler_verifyAndExtractJWSPayload/fail/nil-jws +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_verifyAndExtractJWSPayload/fail/no-jwk -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_verifyAndExtractJWSPayload/fail/algorithm-mismatch -2026/05/18 23:57:24 The request message was malformed -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_verifyAndExtractJWSPayload/fail/verify-jws-failure +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} --- PASS: TestHandler_verifyAndExtractJWSPayload (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/ok (0.00s) --- PASS: TestHandler_verifyAndExtractJWSPayload/ok/empty-json (0.00s) --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/no-jws (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/nil-jws (0.00s) --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/nil-jwk (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/verify-jws-failure (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/ok (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/algorithm-mismatch (0.00s) --- PASS: TestHandler_verifyAndExtractJWSPayload/ok/empty-algorithm-in-jwk (0.00s) --- PASS: TestHandler_verifyAndExtractJWSPayload/ok/post-as-get (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/nil-jws (0.00s) --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/no-jwk (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/algorithm-mismatch (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/verify-jws-failure (0.00s) === RUN TestHandler_lookupJWK +=== RUN TestHandler_lookupJWK/fail/bad-kid-prefix +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestHandler_lookupJWK/fail/account-not-found -2026/05/18 23:57:24 Account does not exist -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +2025/04/16 19:40:17 Account does not exist +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} === RUN TestHandler_lookupJWK/fail/GetAccount-error -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_lookupJWK/fail/account-not-valid -2026/05/18 23:57:24 The client lacks sufficient authorization -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} +2025/04/16 19:40:17 The client lacks sufficient authorization +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} === RUN TestHandler_lookupJWK/ok === RUN TestHandler_lookupJWK/fail/no-jws -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_lookupJWK/fail/nil-jws -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_lookupJWK/fail/no-kid -2026/05/18 23:57:24 The request message was malformed -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_lookupJWK/fail/bad-kid-prefix -2026/05/18 23:57:24 The request message was malformed -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} --- PASS: TestHandler_lookupJWK (0.00s) + --- PASS: TestHandler_lookupJWK/fail/bad-kid-prefix (0.00s) --- PASS: TestHandler_lookupJWK/fail/account-not-found (0.00s) --- PASS: TestHandler_lookupJWK/fail/GetAccount-error (0.00s) --- PASS: TestHandler_lookupJWK/fail/account-not-valid (0.00s) @@ -3399,97 +3436,96 @@ --- PASS: TestHandler_lookupJWK/fail/no-jws (0.00s) --- PASS: TestHandler_lookupJWK/fail/nil-jws (0.00s) --- PASS: TestHandler_lookupJWK/fail/no-kid (0.00s) - --- PASS: TestHandler_lookupJWK/fail/bad-kid-prefix (0.00s) === RUN TestHandler_extractJWK -=== RUN TestHandler_extractJWK/fail/no-jws -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_extractJWK/fail/nil-jws -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_extractJWK/fail/nil-jwk -2026/05/18 23:57:24 The request message was malformed -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestHandler_extractJWK/fail/invalid-jwk -2026/05/18 23:57:24 The request message was malformed -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestHandler_extractJWK/fail/GetAccountByKey-error -2026/05/18 23:57:24 The server experienced an internal error -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_extractJWK/fail/account-not-valid -2026/05/18 23:57:24 The client lacks sufficient authorization -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} +2025/04/16 19:40:17 The client lacks sufficient authorization +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} === RUN TestHandler_extractJWK/ok === RUN TestHandler_extractJWK/ok/no-account +=== RUN TestHandler_extractJWK/fail/no-jws +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_extractJWK/fail/nil-jws +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_extractJWK/fail/nil-jwk +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} --- PASS: TestHandler_extractJWK (0.00s) - --- PASS: TestHandler_extractJWK/fail/no-jws (0.00s) - --- PASS: TestHandler_extractJWK/fail/nil-jws (0.00s) - --- PASS: TestHandler_extractJWK/fail/nil-jwk (0.00s) --- PASS: TestHandler_extractJWK/fail/invalid-jwk (0.00s) --- PASS: TestHandler_extractJWK/fail/GetAccountByKey-error (0.00s) --- PASS: TestHandler_extractJWK/fail/account-not-valid (0.00s) --- PASS: TestHandler_extractJWK/ok (0.00s) --- PASS: TestHandler_extractJWK/ok/no-account (0.00s) + --- PASS: TestHandler_extractJWK/fail/no-jws (0.00s) + --- PASS: TestHandler_extractJWK/fail/nil-jws (0.00s) + --- PASS: TestHandler_extractJWK/fail/nil-jwk (0.00s) === RUN TestHandler_validateJWS -=== RUN TestHandler_validateJWS/fail/url-mismatch -2026/05/18 23:57:24 The request message was malformed -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_validateJWS/fail/both-jwk-kid -2026/05/18 23:57:24 The request message was malformed -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_validateJWS/fail/no-jws +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_validateJWS/fail/no-signature -2026/05/18 23:57:24 The request message was malformed -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_validateJWS/fail/more-than-one-signature -2026/05/18 23:57:24 The request message was malformed -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_validateJWS/fail/no-jwk-kid -2026/05/18 23:57:24 The request message was malformed -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_validateJWS/ok/jwk/ecdsa +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestHandler_validateJWS/fail/unprotected-header-not-empty -2026/05/18 23:57:24 The request message was malformed -2026/05/18 23:57:24 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_validateJWS/ok/jwk/rsa -=== RUN TestHandler_validateJWS/fail/unsuitable-algorithm-mac -2026/05/18 23:57:25 The JWS was signed with an algorithm the server does not support -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:badSignatureAlgorithm","detail":"The JWS was signed with an algorithm the server does not support"} +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestHandler_validateJWS/fail/rsa-key-&-alg-mismatch -2026/05/18 23:57:25 The request message was malformed -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestHandler_validateJWS/fail/no-url-header -2026/05/18 23:57:25 The request message was malformed -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_validateJWS/ok/kid -=== RUN TestHandler_validateJWS/fail/no-jws -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_validateJWS/fail/nil-jws -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_validateJWS/ok/jwk/ecdsa === RUN TestHandler_validateJWS/fail/unsuitable-algorithm-none -2026/05/18 23:57:25 The JWS was signed with an algorithm the server does not support -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:badSignatureAlgorithm","detail":"The JWS was signed with an algorithm the server does not support"} +2025/04/16 19:40:17 The JWS was signed with an algorithm the server does not support +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:badSignatureAlgorithm","detail":"The JWS was signed with an algorithm the server does not support"} +=== RUN TestHandler_validateJWS/fail/unsuitable-algorithm-mac +2025/04/16 19:40:17 The JWS was signed with an algorithm the server does not support +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:badSignatureAlgorithm","detail":"The JWS was signed with an algorithm the server does not support"} === RUN TestHandler_validateJWS/fail/UseNonce-error -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} ---- PASS: TestHandler_validateJWS (0.79s) - --- PASS: TestHandler_validateJWS/fail/url-mismatch (0.00s) - --- PASS: TestHandler_validateJWS/fail/both-jwk-kid (0.00s) +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_validateJWS/ok/kid +=== RUN TestHandler_validateJWS/fail/both-jwk-kid +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_validateJWS/fail/no-jwk-kid +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_validateJWS/fail/nil-jws +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_validateJWS/fail/more-than-one-signature +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_validateJWS/fail/url-mismatch +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_validateJWS/ok/jwk/rsa +--- PASS: TestHandler_validateJWS (0.64s) + --- PASS: TestHandler_validateJWS/fail/no-jws (0.00s) --- PASS: TestHandler_validateJWS/fail/no-signature (0.00s) - --- PASS: TestHandler_validateJWS/fail/more-than-one-signature (0.00s) - --- PASS: TestHandler_validateJWS/fail/no-jwk-kid (0.00s) - --- PASS: TestHandler_validateJWS/ok/jwk/ecdsa (0.00s) --- PASS: TestHandler_validateJWS/fail/unprotected-header-not-empty (0.00s) - --- PASS: TestHandler_validateJWS/ok/jwk/rsa (0.00s) - --- PASS: TestHandler_validateJWS/fail/unsuitable-algorithm-mac (0.00s) --- PASS: TestHandler_validateJWS/fail/rsa-key-&-alg-mismatch (0.00s) --- PASS: TestHandler_validateJWS/fail/no-url-header (0.00s) + --- PASS: TestHandler_validateJWS/ok/jwk/ecdsa (0.00s) + --- PASS: TestHandler_validateJWS/fail/unsuitable-algorithm-none (0.00s) + --- PASS: TestHandler_validateJWS/fail/unsuitable-algorithm-mac (0.00s) + --- PASS: TestHandler_validateJWS/fail/UseNonce-error (0.01s) --- PASS: TestHandler_validateJWS/ok/kid (0.00s) - --- PASS: TestHandler_validateJWS/fail/no-jws (0.00s) + --- PASS: TestHandler_validateJWS/fail/both-jwk-kid (0.00s) + --- PASS: TestHandler_validateJWS/fail/no-jwk-kid (0.00s) --- PASS: TestHandler_validateJWS/fail/nil-jws (0.00s) - --- PASS: TestHandler_validateJWS/fail/unsuitable-algorithm-none (0.00s) - --- PASS: TestHandler_validateJWS/fail/UseNonce-error (0.00s) + --- PASS: TestHandler_validateJWS/fail/more-than-one-signature (0.00s) + --- PASS: TestHandler_validateJWS/fail/url-mismatch (0.00s) + --- PASS: TestHandler_validateJWS/ok/jwk/rsa (0.00s) === RUN Test_canExtractJWKFrom === RUN Test_canExtractJWKFrom/no-jws === RUN Test_canExtractJWKFrom/no-signatures @@ -3508,81 +3544,81 @@ --- PASS: TestHandler_extractOrLookupJWK/ok/lookup (0.00s) === RUN TestHandler_checkPrerequisites === RUN TestHandler_checkPrerequisites/fail/error -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_checkPrerequisites/fail/prerequisites-nok -2026/05/18 23:57:25 The requested operation is not implemented -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:rejectedIdentifier","detail":"The requested operation is not implemented"} +2025/04/16 19:40:17 The requested operation is not implemented +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:rejectedIdentifier","detail":"The requested operation is not implemented"} === RUN TestHandler_checkPrerequisites/ok --- PASS: TestHandler_checkPrerequisites (0.00s) --- PASS: TestHandler_checkPrerequisites/fail/error (0.00s) --- PASS: TestHandler_checkPrerequisites/fail/prerequisites-nok (0.00s) --- PASS: TestHandler_checkPrerequisites/ok (0.00s) === RUN TestNewOrderRequest_Validate +=== RUN TestNewOrderRequest_Validate/fail/bad-identifier +=== RUN TestNewOrderRequest_Validate/fail/bad-ip === RUN TestNewOrderRequest_Validate/ok === RUN TestNewOrderRequest_Validate/ok/ipv4 === RUN TestNewOrderRequest_Validate/ok/ipv6 === RUN TestNewOrderRequest_Validate/ok/mixed-dns-and-ipv4 === RUN TestNewOrderRequest_Validate/ok/mixed-ipv4-and-ipv6 === RUN TestNewOrderRequest_Validate/fail/no-identifiers -=== RUN TestNewOrderRequest_Validate/fail/bad-identifier -=== RUN TestNewOrderRequest_Validate/fail/bad-ip --- PASS: TestNewOrderRequest_Validate (0.00s) + --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier (0.00s) + --- PASS: TestNewOrderRequest_Validate/fail/bad-ip (0.00s) --- PASS: TestNewOrderRequest_Validate/ok (0.00s) --- PASS: TestNewOrderRequest_Validate/ok/ipv4 (0.00s) --- PASS: TestNewOrderRequest_Validate/ok/ipv6 (0.00s) --- PASS: TestNewOrderRequest_Validate/ok/mixed-dns-and-ipv4 (0.00s) --- PASS: TestNewOrderRequest_Validate/ok/mixed-ipv4-and-ipv6 (0.00s) --- PASS: TestNewOrderRequest_Validate/fail/no-identifiers (0.00s) - --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier (0.00s) - --- PASS: TestNewOrderRequest_Validate/fail/bad-ip (0.00s) === RUN TestFinalizeRequestValidate === RUN TestFinalizeRequestValidate/fail/parse-csr-error === RUN TestFinalizeRequestValidate/fail/invalid-csr-signature === RUN TestFinalizeRequestValidate/ok === RUN TestFinalizeRequestValidate/ok/padding ---- PASS: TestFinalizeRequestValidate (0.01s) +--- PASS: TestFinalizeRequestValidate (0.00s) --- PASS: TestFinalizeRequestValidate/fail/parse-csr-error (0.00s) --- PASS: TestFinalizeRequestValidate/fail/invalid-csr-signature (0.00s) --- PASS: TestFinalizeRequestValidate/ok (0.00s) --- PASS: TestFinalizeRequestValidate/ok/padding (0.00s) === RUN TestHandler_GetOrder -=== RUN TestHandler_GetOrder/fail/no-account -2026/05/18 23:57:25 Account does not exist -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} -=== RUN TestHandler_GetOrder/fail/no-provisioner -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_GetOrder/fail/account-id-mismatch -2026/05/18 23:57:25 The client lacks sufficient authorization -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} +=== RUN TestHandler_GetOrder/fail/provisioner-id-mismatch +2025/04/16 19:40:17 The client lacks sufficient authorization +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} === RUN TestHandler_GetOrder/fail/order-update-error -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_GetOrder/ok -2026/05/18 23:57:25 {"id":"orderID","status":"invalid","expires":"2026-05-19T10:57:25Z","identifiers":[{"type":"dns","value":"example.com"},{"type":"dns","value":"*.smallstep.com"}],"notBefore":"2026-05-19T11:57:25Z","notAfter":"2026-05-20T11:57:25Z","error":{"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"},"authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/foo","https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/bar","https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/baz"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/orderID/finalize"} +2025/04/16 19:40:17 {"id":"orderID","status":"invalid","expires":"2025-04-16T04:40:17Z","identifiers":[{"type":"dns","value":"example.com"},{"type":"dns","value":"*.smallstep.com"}],"notBefore":"2025-04-16T05:40:17Z","notAfter":"2025-04-17T05:40:17Z","error":{"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"},"authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/foo","https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/bar","https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/baz"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/orderID/finalize"} +=== RUN TestHandler_GetOrder/fail/no-account +2025/04/16 19:40:17 Account does not exist +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} === RUN TestHandler_GetOrder/fail/nil-account -2026/05/18 23:57:25 Account does not exist -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +2025/04/16 19:40:17 Account does not exist +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} === RUN TestHandler_GetOrder/fail/nil-provisioner -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_GetOrder/fail/no-provisioner +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_GetOrder/fail/db.GetOrder-error -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_GetOrder/fail/provisioner-id-mismatch -2026/05/18 23:57:25 The client lacks sufficient authorization -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} ---- PASS: TestHandler_GetOrder (0.00s) - --- PASS: TestHandler_GetOrder/fail/no-account (0.00s) - --- PASS: TestHandler_GetOrder/fail/no-provisioner (0.00s) - --- PASS: TestHandler_GetOrder/fail/account-id-mismatch (0.00s) +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_GetOrder/fail/account-id-mismatch +2025/04/16 19:40:17 The client lacks sufficient authorization +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} +--- PASS: TestHandler_GetOrder (0.01s) + --- PASS: TestHandler_GetOrder/fail/provisioner-id-mismatch (0.00s) --- PASS: TestHandler_GetOrder/fail/order-update-error (0.00s) --- PASS: TestHandler_GetOrder/ok (0.00s) + --- PASS: TestHandler_GetOrder/fail/no-account (0.01s) --- PASS: TestHandler_GetOrder/fail/nil-account (0.00s) --- PASS: TestHandler_GetOrder/fail/nil-provisioner (0.00s) + --- PASS: TestHandler_GetOrder/fail/no-provisioner (0.00s) --- PASS: TestHandler_GetOrder/fail/db.GetOrder-error (0.00s) - --- PASS: TestHandler_GetOrder/fail/provisioner-id-mismatch (0.00s) + --- PASS: TestHandler_GetOrder/fail/account-id-mismatch (0.00s) === RUN TestHandler_newAuthorization === RUN TestHandler_newAuthorization/fail/error-db.CreateChallenge === RUN TestHandler_newAuthorization/fail/error-db.CreateAuthorization @@ -3594,140 +3630,140 @@ --- PASS: TestHandler_newAuthorization/ok/no-wildcard (0.00s) --- PASS: TestHandler_newAuthorization/ok/wildcard (0.00s) === RUN TestHandler_NewOrder -=== RUN TestHandler_NewOrder/fail/nil-account -2026/05/18 23:57:25 Account does not exist -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} -=== RUN TestHandler_NewOrder/fail/no-provisioner -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_NewOrder/fail/nil-payload -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_NewOrder/fail/newACMEPolicyEngine-error -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_NewOrder/fail/error-db.CreateOrder -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_NewOrder/ok/nbf-no-naf -2026/05/18 23:57:25 {"id":"ordID","status":"pending","expires":"2026-05-20T11:57:25Z","identifiers":[{"type":"dns","value":"zap.internal"}],"notBefore":"2026-05-19T12:07:25Z","notAfter":"2026-05-20T12:07:25Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az1ID"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/ordID/finalize"} +=== RUN TestHandler_NewOrder/ok/naf-nbf +2025/04/16 19:40:17 {"id":"ordID","status":"pending","expires":"2025-04-17T05:40:17Z","identifiers":[{"type":"dns","value":"zap.internal"}],"notBefore":"2025-04-16T05:45:17Z","notAfter":"2025-04-16T05:55:17Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az1ID"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/ordID/finalize"} +=== RUN TestHandler_NewOrder/fail/no-account +2025/04/16 19:40:17 Account does not exist +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} === RUN TestHandler_NewOrder/fail/no-payload -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_NewOrder/fail/unmarshal-payload-error -2026/05/18 23:57:25 The request message was malformed -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_NewOrder/fail/malformed-payload-error -2026/05/18 23:57:25 The request message was malformed -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_NewOrder/fail/nil-payload +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_NewOrder/fail/db.GetExternalAccountKeyByAccountID-error -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_NewOrder/fail/isIdentifierAllowed-error -2026/05/18 23:57:25 The server will not issue certificates for the identifier -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:rejectedIdentifier","detail":"The server will not issue certificates for the identifier"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_NewOrder/fail/newACMEPolicyEngine-error +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_NewOrder/fail/prov.AuthorizeOrderIdentifier-error -2026/05/18 23:57:25 The server will not issue certificates for the identifier -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:rejectedIdentifier","detail":"The server will not issue certificates for the identifier"} +2025/04/16 19:40:17 The server will not issue certificates for the identifier +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:rejectedIdentifier","detail":"The server will not issue certificates for the identifier"} +=== RUN TestHandler_NewOrder/ok/multiple-authz +2025/04/16 19:40:17 {"id":"ordID","status":"pending","expires":"2025-04-17T05:40:17Z","identifiers":[{"type":"dns","value":"zap.internal"},{"type":"dns","value":"*.zar.internal"}],"notBefore":"2025-04-16T05:39:17Z","notAfter":"2025-04-17T05:40:17Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az1ID","https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az2ID"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/ordID/finalize"} === RUN TestHandler_NewOrder/fail/ca.AreSANsAllowed-error -2026/05/18 23:57:25 The server will not issue certificates for the identifier -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:rejectedIdentifier","detail":"The server will not issue certificates for the identifier"} -=== RUN TestHandler_NewOrder/fail/error-h.newAuthorization -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_NewOrder/fail/no-account -2026/05/18 23:57:25 Account does not exist -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +2025/04/16 19:40:17 The server will not issue certificates for the identifier +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:rejectedIdentifier","detail":"The server will not issue certificates for the identifier"} +=== RUN TestHandler_NewOrder/ok/default-naf-nbf-with-policy +2025/04/16 19:40:17 {"id":"ordID","status":"pending","expires":"2025-04-17T05:40:17Z","identifiers":[{"type":"dns","value":"zap.internal"}],"notBefore":"2025-04-16T05:39:17Z","notAfter":"2025-04-17T05:40:17Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az1ID"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/ordID/finalize"} === RUN TestHandler_NewOrder/fail/acmeProvisionerFromContext-error -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_NewOrder/ok/multiple-authz -2026/05/18 23:57:25 {"id":"ordID","status":"pending","expires":"2026-05-20T11:57:25Z","identifiers":[{"type":"dns","value":"zap.internal"},{"type":"dns","value":"*.zar.internal"}],"notBefore":"2026-05-19T11:56:25Z","notAfter":"2026-05-20T11:57:25Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az1ID","https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az2ID"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/ordID/finalize"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_NewOrder/fail/isIdentifierAllowed-error +2025/04/16 19:40:17 The server will not issue certificates for the identifier +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:rejectedIdentifier","detail":"The server will not issue certificates for the identifier"} +=== RUN TestHandler_NewOrder/fail/error-h.newAuthorization +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_NewOrder/fail/error-db.CreateOrder +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_NewOrder/ok/default-naf-nbf -2026/05/18 23:57:25 {"id":"ordID","status":"pending","expires":"2026-05-20T11:57:25Z","identifiers":[{"type":"dns","value":"zap.internal"}],"notBefore":"2026-05-19T11:56:25Z","notAfter":"2026-05-20T11:57:25Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az1ID"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/ordID/finalize"} +2025/04/16 19:40:17 {"id":"ordID","status":"pending","expires":"2025-04-17T05:40:17Z","identifiers":[{"type":"dns","value":"zap.internal"}],"notBefore":"2025-04-16T05:39:17Z","notAfter":"2025-04-17T05:40:17Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az1ID"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/ordID/finalize"} === RUN TestHandler_NewOrder/ok/naf-no-nbf -2026/05/18 23:57:25 {"id":"ordID","status":"pending","expires":"2026-05-20T11:57:25Z","identifiers":[{"type":"dns","value":"zap.internal"}],"notBefore":"2026-05-19T11:56:25Z","notAfter":"2026-05-19T12:12:25Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az1ID"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/ordID/finalize"} -=== RUN TestHandler_NewOrder/ok/naf-nbf -2026/05/18 23:57:25 {"id":"ordID","status":"pending","expires":"2026-05-20T11:57:25Z","identifiers":[{"type":"dns","value":"zap.internal"}],"notBefore":"2026-05-19T12:02:25Z","notAfter":"2026-05-19T12:12:25Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az1ID"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/ordID/finalize"} -=== RUN TestHandler_NewOrder/ok/default-naf-nbf-with-policy -2026/05/18 23:57:25 {"id":"ordID","status":"pending","expires":"2026-05-20T11:57:25Z","identifiers":[{"type":"dns","value":"zap.internal"}],"notBefore":"2026-05-19T11:56:25Z","notAfter":"2026-05-20T11:57:25Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az1ID"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/ordID/finalize"} +2025/04/16 19:40:17 {"id":"ordID","status":"pending","expires":"2025-04-17T05:40:17Z","identifiers":[{"type":"dns","value":"zap.internal"}],"notBefore":"2025-04-16T05:39:17Z","notAfter":"2025-04-16T05:55:17Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az1ID"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/ordID/finalize"} +=== RUN TestHandler_NewOrder/fail/nil-account +2025/04/16 19:40:17 Account does not exist +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +=== RUN TestHandler_NewOrder/fail/no-provisioner +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_NewOrder/fail/nil-provisioner -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_NewOrder/fail/unmarshal-payload-error +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_NewOrder/fail/malformed-payload-error +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_NewOrder/ok/nbf-no-naf +2025/04/16 19:40:17 {"id":"ordID","status":"pending","expires":"2025-04-17T05:40:17Z","identifiers":[{"type":"dns","value":"zap.internal"}],"notBefore":"2025-04-16T05:50:17Z","notAfter":"2025-04-17T05:50:17Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/az1ID"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/ordID/finalize"} --- PASS: TestHandler_NewOrder (0.00s) - --- PASS: TestHandler_NewOrder/fail/nil-account (0.00s) - --- PASS: TestHandler_NewOrder/fail/no-provisioner (0.00s) - --- PASS: TestHandler_NewOrder/fail/nil-payload (0.00s) - --- PASS: TestHandler_NewOrder/fail/newACMEPolicyEngine-error (0.00s) - --- PASS: TestHandler_NewOrder/fail/error-db.CreateOrder (0.00s) - --- PASS: TestHandler_NewOrder/ok/nbf-no-naf (0.00s) + --- PASS: TestHandler_NewOrder/ok/naf-nbf (0.00s) + --- PASS: TestHandler_NewOrder/fail/no-account (0.00s) --- PASS: TestHandler_NewOrder/fail/no-payload (0.00s) - --- PASS: TestHandler_NewOrder/fail/unmarshal-payload-error (0.00s) - --- PASS: TestHandler_NewOrder/fail/malformed-payload-error (0.00s) + --- PASS: TestHandler_NewOrder/fail/nil-payload (0.00s) --- PASS: TestHandler_NewOrder/fail/db.GetExternalAccountKeyByAccountID-error (0.00s) - --- PASS: TestHandler_NewOrder/fail/isIdentifierAllowed-error (0.00s) + --- PASS: TestHandler_NewOrder/fail/newACMEPolicyEngine-error (0.00s) --- PASS: TestHandler_NewOrder/fail/prov.AuthorizeOrderIdentifier-error (0.00s) + --- PASS: TestHandler_NewOrder/ok/multiple-authz (0.00s) --- PASS: TestHandler_NewOrder/fail/ca.AreSANsAllowed-error (0.00s) - --- PASS: TestHandler_NewOrder/fail/error-h.newAuthorization (0.00s) - --- PASS: TestHandler_NewOrder/fail/no-account (0.00s) + --- PASS: TestHandler_NewOrder/ok/default-naf-nbf-with-policy (0.00s) --- PASS: TestHandler_NewOrder/fail/acmeProvisionerFromContext-error (0.00s) - --- PASS: TestHandler_NewOrder/ok/multiple-authz (0.00s) + --- PASS: TestHandler_NewOrder/fail/isIdentifierAllowed-error (0.00s) + --- PASS: TestHandler_NewOrder/fail/error-h.newAuthorization (0.00s) + --- PASS: TestHandler_NewOrder/fail/error-db.CreateOrder (0.00s) --- PASS: TestHandler_NewOrder/ok/default-naf-nbf (0.00s) --- PASS: TestHandler_NewOrder/ok/naf-no-nbf (0.00s) - --- PASS: TestHandler_NewOrder/ok/naf-nbf (0.00s) - --- PASS: TestHandler_NewOrder/ok/default-naf-nbf-with-policy (0.00s) + --- PASS: TestHandler_NewOrder/fail/nil-account (0.00s) + --- PASS: TestHandler_NewOrder/fail/no-provisioner (0.00s) --- PASS: TestHandler_NewOrder/fail/nil-provisioner (0.00s) + --- PASS: TestHandler_NewOrder/fail/unmarshal-payload-error (0.00s) + --- PASS: TestHandler_NewOrder/fail/malformed-payload-error (0.00s) + --- PASS: TestHandler_NewOrder/ok/nbf-no-naf (0.00s) === RUN TestHandler_FinalizeOrder === RUN TestHandler_FinalizeOrder/fail/nil-payload -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_FinalizeOrder/fail/unmarshal-payload-error -2026/05/18 23:57:25 The request message was malformed -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_FinalizeOrder/fail/malformed-payload-error +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestHandler_FinalizeOrder/fail/db.GetOrder-error -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_FinalizeOrder/fail/account-id-mismatch -2026/05/18 23:57:25 The client lacks sufficient authorization -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} -=== RUN TestHandler_FinalizeOrder/fail/no-account -2026/05/18 23:57:25 Account does not exist -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} -=== RUN TestHandler_FinalizeOrder/fail/malformed-payload-error -2026/05/18 23:57:25 The request message was malformed -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:17 The client lacks sufficient authorization +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} +=== RUN TestHandler_FinalizeOrder/fail/nil-account +2025/04/16 19:40:17 Account does not exist +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +=== RUN TestHandler_FinalizeOrder/fail/no-provisioner +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_FinalizeOrder/fail/provisioner-id-mismatch -2026/05/18 23:57:25 The client lacks sufficient authorization -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} +2025/04/16 19:40:17 The client lacks sufficient authorization +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"The client lacks sufficient authorization"} === RUN TestHandler_FinalizeOrder/fail/order-finalize-error -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_FinalizeOrder/ok -2026/05/18 23:57:25 {"id":"orderID","status":"valid","expires":"2026-05-20T11:57:25Z","identifiers":[{"type":"dns","value":"example.com"},{"type":"dns","value":"*.smallstep.com"}],"notBefore":"2026-05-19T11:57:25Z","notAfter":"2026-05-20T11:57:25Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/foo","https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/bar","https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/baz"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/orderID/finalize","certificate":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/certificate/certID"} -=== RUN TestHandler_FinalizeOrder/fail/nil-account -2026/05/18 23:57:25 Account does not exist -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} -=== RUN TestHandler_FinalizeOrder/fail/no-provisioner -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 {"id":"orderID","status":"valid","expires":"2025-04-17T05:40:17Z","identifiers":[{"type":"dns","value":"example.com"},{"type":"dns","value":"*.smallstep.com"}],"notBefore":"2025-04-16T05:40:17Z","notAfter":"2025-04-17T05:40:17Z","authorizations":["https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/foo","https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/bar","https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/authz/baz"],"finalize":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/order/orderID/finalize","certificate":"https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/certificate/certID"} +=== RUN TestHandler_FinalizeOrder/fail/no-account +2025/04/16 19:40:17 Account does not exist +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} === RUN TestHandler_FinalizeOrder/fail/nil-provisioner -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_FinalizeOrder/fail/no-payload -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} --- PASS: TestHandler_FinalizeOrder (0.01s) --- PASS: TestHandler_FinalizeOrder/fail/nil-payload (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/unmarshal-payload-error (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/malformed-payload-error (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/db.GetOrder-error (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/account-id-mismatch (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/no-account (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/malformed-payload-error (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/provisioner-id-mismatch (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/order-finalize-error (0.00s) - --- PASS: TestHandler_FinalizeOrder/ok (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/nil-account (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/no-provisioner (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/provisioner-id-mismatch (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/order-finalize-error (0.01s) + --- PASS: TestHandler_FinalizeOrder/ok (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/no-account (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/nil-provisioner (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/no-payload (0.00s) === RUN TestHandler_challengeTypes @@ -3779,99 +3815,99 @@ --- PASS: Test_revokeOptions/ok/no-reasoncode (0.00s) --- PASS: Test_revokeOptions/ok/including-reasoncode (0.00s) === RUN TestHandler_RevokeCert -=== RUN TestHandler_RevokeCert/fail/no-payload -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_RevokeCert/fail/wrong-certificate-encoding -2026/05/18 23:57:25 The request message was malformed -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_RevokeCert/fail/no-certificate-encoded -2026/05/18 23:57:25 The request message was malformed -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestHandler_RevokeCert/fail/db.GetCertificateBySerial -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_RevokeCert/fail/ca.Revoke-already-revoked -2026/05/18 23:57:25 Certificate already revoked -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:alreadyRevoked","detail":"Certificate already revoked"} -=== RUN TestHandler_RevokeCert/ok/using-account-key +=== RUN TestHandler_RevokeCert/fail/no-jws +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_RevokeCert/fail/no-provisioner -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_RevokeCert/fail/nil-provisioner -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_RevokeCert/fail/no-account -2026/05/18 23:57:25 Account does not exist -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} -=== RUN TestHandler_RevokeCert/fail/unauthorized-certificate-key -2026/05/18 23:57:25 No authorization provided for name 127.0.0.1 -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"No authorization provided for name 127.0.0.1"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_RevokeCert/fail/nil-account +2025/04/16 19:40:17 Account does not exist +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} === RUN TestHandler_RevokeCert/fail/certificate-already-revoked -2026/05/18 23:57:25 Certificate already revoked -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:alreadyRevoked","detail":"Certificate already revoked"} -=== RUN TestHandler_RevokeCert/fail/invalid-reasoncode -2026/05/18 23:57:25 The revocation reason provided is not allowed by the server -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:badRevocationReason","detail":"The revocation reason provided is not allowed by the server"} -=== RUN TestHandler_RevokeCert/fail/prov.AuthorizeRevoke -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_RevokeCert/fail/no-jws -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 Certificate already revoked +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:alreadyRevoked","detail":"Certificate already revoked"} === RUN TestHandler_RevokeCert/fail/nil-jws -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_RevokeCert/fail/nil-payload -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_RevokeCert/fail/no-payload +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_RevokeCert/fail/unmarshal-payload -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_RevokeCert/fail/nil-account -2026/05/18 23:57:25 Account does not exist -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} -=== RUN TestHandler_RevokeCert/fail/account-not-authorized -2026/05/18 23:57:25 No authorization provided for name 127.0.0.1 -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"No authorization provided for name 127.0.0.1"} -=== RUN TestHandler_RevokeCert/fail/certificate-revoked-check-fails -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} -=== RUN TestHandler_RevokeCert/ok/using-certificate-key +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_RevokeCert/fail/wrong-certificate-encoding +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_RevokeCert/fail/db.GetCertificateBySerial +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_RevokeCert/fail/different-certificate-contents -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_RevokeCert/fail/account-not-valid -2026/05/18 23:57:25 No authorization provided for name 127.0.0.1 -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"No authorization provided for name 127.0.0.1"} +2025/04/16 19:40:17 No authorization provided for name 127.0.0.1 +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"No authorization provided for name 127.0.0.1"} +=== RUN TestHandler_RevokeCert/fail/certificate-revoked-check-fails +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_RevokeCert/fail/nil-payload +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_RevokeCert/fail/no-account +2025/04/16 19:40:17 Account does not exist +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +=== RUN TestHandler_RevokeCert/fail/unauthorized-certificate-key +2025/04/16 19:40:17 No authorization provided for name 127.0.0.1 +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"No authorization provided for name 127.0.0.1"} +=== RUN TestHandler_RevokeCert/fail/prov.AuthorizeRevoke +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} === RUN TestHandler_RevokeCert/fail/ca.Revoke -2026/05/18 23:57:25 The server experienced an internal error -2026/05/18 23:57:25 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} ---- PASS: TestHandler_RevokeCert (0.00s) - --- PASS: TestHandler_RevokeCert/fail/no-payload (0.00s) - --- PASS: TestHandler_RevokeCert/fail/wrong-certificate-encoding (0.00s) - --- PASS: TestHandler_RevokeCert/fail/no-certificate-encoded (0.00s) - --- PASS: TestHandler_RevokeCert/fail/db.GetCertificateBySerial (0.00s) - --- PASS: TestHandler_RevokeCert/fail/ca.Revoke-already-revoked (0.00s) - --- PASS: TestHandler_RevokeCert/ok/using-account-key (0.00s) +2025/04/16 19:40:17 The server experienced an internal error +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:serverInternal","detail":"The server experienced an internal error"} +=== RUN TestHandler_RevokeCert/fail/ca.Revoke-already-revoked +2025/04/16 19:40:17 Certificate already revoked +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:alreadyRevoked","detail":"Certificate already revoked"} +=== RUN TestHandler_RevokeCert/ok/using-account-key +=== RUN TestHandler_RevokeCert/fail/no-certificate-encoded +2025/04/16 19:40:17 The request message was malformed +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +=== RUN TestHandler_RevokeCert/fail/account-not-authorized +2025/04/16 19:40:17 No authorization provided for name 127.0.0.1 +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:unauthorized","detail":"No authorization provided for name 127.0.0.1"} +=== RUN TestHandler_RevokeCert/fail/invalid-reasoncode +2025/04/16 19:40:17 The revocation reason provided is not allowed by the server +2025/04/16 19:40:17 {"type":"urn:ietf:params:acme:error:badRevocationReason","detail":"The revocation reason provided is not allowed by the server"} +=== RUN TestHandler_RevokeCert/ok/using-certificate-key +--- PASS: TestHandler_RevokeCert (0.02s) + --- PASS: TestHandler_RevokeCert/fail/no-jws (0.00s) --- PASS: TestHandler_RevokeCert/fail/no-provisioner (0.00s) --- PASS: TestHandler_RevokeCert/fail/nil-provisioner (0.00s) - --- PASS: TestHandler_RevokeCert/fail/no-account (0.00s) - --- PASS: TestHandler_RevokeCert/fail/unauthorized-certificate-key (0.00s) + --- PASS: TestHandler_RevokeCert/fail/nil-account (0.00s) --- PASS: TestHandler_RevokeCert/fail/certificate-already-revoked (0.00s) - --- PASS: TestHandler_RevokeCert/fail/invalid-reasoncode (0.00s) - --- PASS: TestHandler_RevokeCert/fail/prov.AuthorizeRevoke (0.00s) - --- PASS: TestHandler_RevokeCert/fail/no-jws (0.00s) --- PASS: TestHandler_RevokeCert/fail/nil-jws (0.00s) - --- PASS: TestHandler_RevokeCert/fail/nil-payload (0.00s) + --- PASS: TestHandler_RevokeCert/fail/no-payload (0.00s) --- PASS: TestHandler_RevokeCert/fail/unmarshal-payload (0.00s) - --- PASS: TestHandler_RevokeCert/fail/nil-account (0.00s) - --- PASS: TestHandler_RevokeCert/fail/account-not-authorized (0.00s) - --- PASS: TestHandler_RevokeCert/fail/certificate-revoked-check-fails (0.00s) - --- PASS: TestHandler_RevokeCert/ok/using-certificate-key (0.00s) + --- PASS: TestHandler_RevokeCert/fail/wrong-certificate-encoding (0.00s) + --- PASS: TestHandler_RevokeCert/fail/db.GetCertificateBySerial (0.00s) --- PASS: TestHandler_RevokeCert/fail/different-certificate-contents (0.00s) --- PASS: TestHandler_RevokeCert/fail/account-not-valid (0.00s) + --- PASS: TestHandler_RevokeCert/fail/certificate-revoked-check-fails (0.00s) + --- PASS: TestHandler_RevokeCert/fail/nil-payload (0.00s) + --- PASS: TestHandler_RevokeCert/fail/no-account (0.00s) + --- PASS: TestHandler_RevokeCert/fail/unauthorized-certificate-key (0.00s) + --- PASS: TestHandler_RevokeCert/fail/prov.AuthorizeRevoke (0.00s) --- PASS: TestHandler_RevokeCert/fail/ca.Revoke (0.00s) + --- PASS: TestHandler_RevokeCert/fail/ca.Revoke-already-revoked (0.00s) + --- PASS: TestHandler_RevokeCert/ok/using-account-key (0.00s) + --- PASS: TestHandler_RevokeCert/fail/no-certificate-encoded (0.00s) + --- PASS: TestHandler_RevokeCert/fail/account-not-authorized (0.00s) + --- PASS: TestHandler_RevokeCert/fail/invalid-reasoncode (0.00s) + --- PASS: TestHandler_RevokeCert/ok/using-certificate-key (0.00s) === RUN TestHandler_isAccountAuthorized === RUN TestHandler_isAccountAuthorized/fail/account-invalid === RUN TestHandler_isAccountAuthorized/fail/different-account @@ -3881,17 +3917,17 @@ --- PASS: TestHandler_isAccountAuthorized/fail/different-account (0.00s) --- PASS: TestHandler_isAccountAuthorized/ok (0.00s) === RUN Test_wrapUnauthorizedError -=== RUN Test_wrapUnauthorizedError/wrap-subject === RUN Test_wrapUnauthorizedError/default === RUN Test_wrapUnauthorizedError/unauthorizedIdentifiers === RUN Test_wrapUnauthorizedError/subject ---- PASS: Test_wrapUnauthorizedError (0.00s) - --- PASS: Test_wrapUnauthorizedError/wrap-subject (0.00s) +=== RUN Test_wrapUnauthorizedError/wrap-subject +--- PASS: Test_wrapUnauthorizedError (0.01s) --- PASS: Test_wrapUnauthorizedError/default (0.00s) --- PASS: Test_wrapUnauthorizedError/unauthorizedIdentifiers (0.00s) --- PASS: Test_wrapUnauthorizedError/subject (0.00s) + --- PASS: Test_wrapUnauthorizedError/wrap-subject (0.00s) PASS -ok github.com/smallstep/certificates/acme/api 0.980s +ok github.com/smallstep/certificates/acme/api 0.827s === RUN TestDB_getDBAccount === RUN TestDB_getDBAccount/fail/not-found === RUN TestDB_getDBAccount/fail/db.Get-error @@ -3911,11 +3947,11 @@ --- PASS: TestDB_getAccountIDByKeyID/fail/db.Get-error (0.00s) --- PASS: TestDB_getAccountIDByKeyID/ok (0.00s) === RUN TestDB_GetAccount -=== RUN TestDB_GetAccount/fail/db.Get-error === RUN TestDB_GetAccount/ok +=== RUN TestDB_GetAccount/fail/db.Get-error --- PASS: TestDB_GetAccount (0.00s) - --- PASS: TestDB_GetAccount/fail/db.Get-error (0.00s) --- PASS: TestDB_GetAccount/ok (0.00s) + --- PASS: TestDB_GetAccount/fail/db.Get-error (0.00s) === RUN TestDB_GetAccountByKeyID === RUN TestDB_GetAccountByKeyID/fail/db.getAccountIDByKeyID-error === RUN TestDB_GetAccountByKeyID/fail/db.GetAccount-error @@ -3925,15 +3961,15 @@ --- PASS: TestDB_GetAccountByKeyID/fail/db.GetAccount-error (0.00s) --- PASS: TestDB_GetAccountByKeyID/ok (0.00s) === RUN TestDB_CreateAccount -=== RUN TestDB_CreateAccount/ok === RUN TestDB_CreateAccount/fail/keyID-cmpAndSwap-error === RUN TestDB_CreateAccount/fail/keyID-cmpAndSwap-false === RUN TestDB_CreateAccount/fail/account-save-error +=== RUN TestDB_CreateAccount/ok --- PASS: TestDB_CreateAccount (0.00s) - --- PASS: TestDB_CreateAccount/ok (0.00s) --- PASS: TestDB_CreateAccount/fail/keyID-cmpAndSwap-error (0.00s) --- PASS: TestDB_CreateAccount/fail/keyID-cmpAndSwap-false (0.00s) --- PASS: TestDB_CreateAccount/fail/account-save-error (0.00s) + --- PASS: TestDB_CreateAccount/ok (0.00s) === RUN TestDB_UpdateAccount === RUN TestDB_UpdateAccount/fail/db.Get-error === RUN TestDB_UpdateAccount/fail/already-deactivated @@ -3945,15 +3981,15 @@ --- PASS: TestDB_UpdateAccount/fail/db.CmpAndSwap-error (0.00s) --- PASS: TestDB_UpdateAccount/ok (0.00s) === RUN TestDB_getDBAuthz -=== RUN TestDB_getDBAuthz/fail/not-found -=== RUN TestDB_getDBAuthz/fail/db.Get-error === RUN TestDB_getDBAuthz/fail/unmarshal-error === RUN TestDB_getDBAuthz/ok +=== RUN TestDB_getDBAuthz/fail/not-found +=== RUN TestDB_getDBAuthz/fail/db.Get-error --- PASS: TestDB_getDBAuthz (0.00s) - --- PASS: TestDB_getDBAuthz/fail/not-found (0.00s) - --- PASS: TestDB_getDBAuthz/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBAuthz/fail/unmarshal-error (0.00s) --- PASS: TestDB_getDBAuthz/ok (0.00s) + --- PASS: TestDB_getDBAuthz/fail/not-found (0.00s) + --- PASS: TestDB_getDBAuthz/fail/db.Get-error (0.00s) === RUN TestDB_GetAuthorization === RUN TestDB_GetAuthorization/fail/db.Get-error === RUN TestDB_GetAuthorization/fail/forward-acme-error @@ -3973,13 +4009,13 @@ --- PASS: TestDB_CreateAuthorization/fail/cmpAndSwap-error (0.00s) --- PASS: TestDB_CreateAuthorization/ok (0.00s) === RUN TestDB_UpdateAuthorization -=== RUN TestDB_UpdateAuthorization/fail/db.Get-error === RUN TestDB_UpdateAuthorization/fail/db.CmpAndSwap-error === RUN TestDB_UpdateAuthorization/ok ---- PASS: TestDB_UpdateAuthorization (0.00s) - --- PASS: TestDB_UpdateAuthorization/fail/db.Get-error (0.00s) +=== RUN TestDB_UpdateAuthorization/fail/db.Get-error +--- PASS: TestDB_UpdateAuthorization (0.01s) --- PASS: TestDB_UpdateAuthorization/fail/db.CmpAndSwap-error (0.00s) - --- PASS: TestDB_UpdateAuthorization/ok (0.00s) + --- PASS: TestDB_UpdateAuthorization/ok (0.01s) + --- PASS: TestDB_UpdateAuthorization/fail/db.Get-error (0.00s) === RUN TestDB_GetAuthorizationsByAccountID === RUN TestDB_GetAuthorizationsByAccountID/fail/db.List-error === RUN TestDB_GetAuthorizationsByAccountID/fail/unmarshal @@ -4023,21 +4059,21 @@ === RUN TestDB_GetCertificateBySerial/fail/db-error === RUN TestDB_GetCertificateBySerial/fail/unmarshal-dbSerial === RUN TestDB_GetCertificateBySerial/ok ---- PASS: TestDB_GetCertificateBySerial (0.01s) +--- PASS: TestDB_GetCertificateBySerial (0.00s) --- PASS: TestDB_GetCertificateBySerial/fail/not-found (0.00s) --- PASS: TestDB_GetCertificateBySerial/fail/db-error (0.00s) --- PASS: TestDB_GetCertificateBySerial/fail/unmarshal-dbSerial (0.00s) - --- PASS: TestDB_GetCertificateBySerial/ok (0.01s) + --- PASS: TestDB_GetCertificateBySerial/ok (0.00s) === RUN TestDB_getDBExternalAccountKey +=== RUN TestDB_getDBExternalAccountKey/fail/unmarshal-error === RUN TestDB_getDBExternalAccountKey/ok === RUN TestDB_getDBExternalAccountKey/fail/not-found === RUN TestDB_getDBExternalAccountKey/fail/db.Get-error -=== RUN TestDB_getDBExternalAccountKey/fail/unmarshal-error --- PASS: TestDB_getDBExternalAccountKey (0.00s) + --- PASS: TestDB_getDBExternalAccountKey/fail/unmarshal-error (0.00s) --- PASS: TestDB_getDBExternalAccountKey/ok (0.00s) --- PASS: TestDB_getDBExternalAccountKey/fail/not-found (0.00s) --- PASS: TestDB_getDBExternalAccountKey/fail/db.Get-error (0.00s) - --- PASS: TestDB_getDBExternalAccountKey/fail/unmarshal-error (0.00s) === RUN TestDB_GetExternalAccountKey === RUN TestDB_GetExternalAccountKey/ok === RUN TestDB_GetExternalAccountKey/fail/db.Get-error @@ -4047,19 +4083,19 @@ --- PASS: TestDB_GetExternalAccountKey/fail/db.Get-error (0.00s) --- PASS: TestDB_GetExternalAccountKey/fail/non-matching-provisioner (0.00s) === RUN TestDB_GetExternalAccountKeyByReference +=== RUN TestDB_GetExternalAccountKeyByReference/fail/db.GetExternalAccountKey-error === RUN TestDB_GetExternalAccountKeyByReference/ok === RUN TestDB_GetExternalAccountKeyByReference/ok/no-reference === RUN TestDB_GetExternalAccountKeyByReference/fail/reference-not-found === RUN TestDB_GetExternalAccountKeyByReference/fail/reference-load-error === RUN TestDB_GetExternalAccountKeyByReference/fail/reference-unmarshal-error -=== RUN TestDB_GetExternalAccountKeyByReference/fail/db.GetExternalAccountKey-error --- PASS: TestDB_GetExternalAccountKeyByReference (0.00s) + --- PASS: TestDB_GetExternalAccountKeyByReference/fail/db.GetExternalAccountKey-error (0.00s) --- PASS: TestDB_GetExternalAccountKeyByReference/ok (0.00s) --- PASS: TestDB_GetExternalAccountKeyByReference/ok/no-reference (0.00s) --- PASS: TestDB_GetExternalAccountKeyByReference/fail/reference-not-found (0.00s) --- PASS: TestDB_GetExternalAccountKeyByReference/fail/reference-load-error (0.00s) --- PASS: TestDB_GetExternalAccountKeyByReference/fail/reference-unmarshal-error (0.00s) - --- PASS: TestDB_GetExternalAccountKeyByReference/fail/db.GetExternalAccountKey-error (0.00s) === RUN TestDB_GetExternalAccountKeys === RUN TestDB_GetExternalAccountKeys/ok === RUN TestDB_GetExternalAccountKeys/fail/db.Get-externalAccountKeysByProvisionerIDTable @@ -4071,37 +4107,37 @@ --- PASS: TestDB_GetExternalAccountKeys/fail/db.Get-externalAccountKeysByProvisionerIDTable-unmarshal (0.00s) --- PASS: TestDB_GetExternalAccountKeys/fail/db.getDBExternalAccountKey (0.00s) === RUN TestDB_DeleteExternalAccountKey -=== RUN TestDB_DeleteExternalAccountKey/ok -acme_external_account_keyID_provisionerID_index -=== RUN TestDB_DeleteExternalAccountKey/fail/not-found === RUN TestDB_DeleteExternalAccountKey/fail/non-matching-provisioner === RUN TestDB_DeleteExternalAccountKey/fail/delete-reference === RUN TestDB_DeleteExternalAccountKey/fail/delete-eak === RUN TestDB_DeleteExternalAccountKey/fail/delete-eakID +=== RUN TestDB_DeleteExternalAccountKey/ok +acme_external_account_keyID_provisionerID_index +=== RUN TestDB_DeleteExternalAccountKey/fail/not-found --- PASS: TestDB_DeleteExternalAccountKey (0.00s) - --- PASS: TestDB_DeleteExternalAccountKey/ok (0.00s) - --- PASS: TestDB_DeleteExternalAccountKey/fail/not-found (0.00s) --- PASS: TestDB_DeleteExternalAccountKey/fail/non-matching-provisioner (0.00s) --- PASS: TestDB_DeleteExternalAccountKey/fail/delete-reference (0.00s) --- PASS: TestDB_DeleteExternalAccountKey/fail/delete-eak (0.00s) --- PASS: TestDB_DeleteExternalAccountKey/fail/delete-eakID (0.00s) + --- PASS: TestDB_DeleteExternalAccountKey/ok (0.00s) + --- PASS: TestDB_DeleteExternalAccountKey/fail/not-found (0.00s) === RUN TestDB_CreateExternalAccountKey -=== RUN TestDB_CreateExternalAccountKey/fail/addEAKID-error -=== RUN TestDB_CreateExternalAccountKey/fail/externalAccountKeyReference-cmpAndSwap-error === RUN TestDB_CreateExternalAccountKey/ok === RUN TestDB_CreateExternalAccountKey/fail/externalAccountKeyID-cmpAndSwap-error +=== RUN TestDB_CreateExternalAccountKey/fail/addEAKID-error +=== RUN TestDB_CreateExternalAccountKey/fail/externalAccountKeyReference-cmpAndSwap-error --- PASS: TestDB_CreateExternalAccountKey (0.00s) - --- PASS: TestDB_CreateExternalAccountKey/fail/addEAKID-error (0.00s) - --- PASS: TestDB_CreateExternalAccountKey/fail/externalAccountKeyReference-cmpAndSwap-error (0.00s) --- PASS: TestDB_CreateExternalAccountKey/ok (0.00s) --- PASS: TestDB_CreateExternalAccountKey/fail/externalAccountKeyID-cmpAndSwap-error (0.00s) + --- PASS: TestDB_CreateExternalAccountKey/fail/addEAKID-error (0.00s) + --- PASS: TestDB_CreateExternalAccountKey/fail/externalAccountKeyReference-cmpAndSwap-error (0.00s) === RUN TestDB_UpdateExternalAccountKey === RUN TestDB_UpdateExternalAccountKey/ok === RUN TestDB_UpdateExternalAccountKey/fail/db.Get-error === RUN TestDB_UpdateExternalAccountKey/fail/provisioner-mismatch === RUN TestDB_UpdateExternalAccountKey/fail/provisioner-change === RUN TestDB_UpdateExternalAccountKey/fail/reference-change ---- PASS: TestDB_UpdateExternalAccountKey (0.01s) +--- PASS: TestDB_UpdateExternalAccountKey (0.00s) --- PASS: TestDB_UpdateExternalAccountKey/ok (0.00s) --- PASS: TestDB_UpdateExternalAccountKey/fail/db.Get-error (0.00s) --- PASS: TestDB_UpdateExternalAccountKey/fail/provisioner-mismatch (0.00s) @@ -4184,15 +4220,15 @@ --- PASS: TestDB_save/ok (0.00s) --- PASS: TestDB_save/ok/nils (0.00s) === RUN TestDB_getDBOrder -=== RUN TestDB_getDBOrder/fail/not-found === RUN TestDB_getDBOrder/fail/db.Get-error === RUN TestDB_getDBOrder/fail/unmarshal-error === RUN TestDB_getDBOrder/ok +=== RUN TestDB_getDBOrder/fail/not-found --- PASS: TestDB_getDBOrder (0.00s) - --- PASS: TestDB_getDBOrder/fail/not-found (0.00s) --- PASS: TestDB_getDBOrder/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBOrder/fail/unmarshal-error (0.00s) --- PASS: TestDB_getDBOrder/ok (0.00s) + --- PASS: TestDB_getDBOrder/fail/not-found (0.00s) === RUN TestDB_GetOrder === RUN TestDB_GetOrder/fail/db.Get-error === RUN TestDB_GetOrder/fail/forward-acme-error @@ -4202,43 +4238,43 @@ --- PASS: TestDB_GetOrder/fail/forward-acme-error (0.00s) --- PASS: TestDB_GetOrder/ok (0.00s) === RUN TestDB_UpdateOrder -=== RUN TestDB_UpdateOrder/ok === RUN TestDB_UpdateOrder/fail/db.Get-error === RUN TestDB_UpdateOrder/fail/save-error +=== RUN TestDB_UpdateOrder/ok --- PASS: TestDB_UpdateOrder (0.00s) - --- PASS: TestDB_UpdateOrder/ok (0.00s) --- PASS: TestDB_UpdateOrder/fail/db.Get-error (0.00s) --- PASS: TestDB_UpdateOrder/fail/save-error (0.00s) + --- PASS: TestDB_UpdateOrder/ok (0.00s) === RUN TestDB_CreateOrder -=== RUN TestDB_CreateOrder/ok === RUN TestDB_CreateOrder/fail/order-save-error === RUN TestDB_CreateOrder/fail/orderIDsByOrderUpdate-error +=== RUN TestDB_CreateOrder/ok --- PASS: TestDB_CreateOrder (0.00s) - --- PASS: TestDB_CreateOrder/ok (0.00s) --- PASS: TestDB_CreateOrder/fail/order-save-error (0.00s) --- PASS: TestDB_CreateOrder/fail/orderIDsByOrderUpdate-error (0.00s) + --- PASS: TestDB_CreateOrder/ok (0.00s) === RUN TestDB_updateAddOrderIDs -=== RUN TestDB_updateAddOrderIDs/fail/db.Get-error +=== RUN TestDB_updateAddOrderIDs/ok/old-and-new +=== RUN TestDB_updateAddOrderIDs/ok/old-and-new-2 === RUN TestDB_updateAddOrderIDs/fail/unmarshal-error -=== RUN TestDB_updateAddOrderIDs/fail/db.save-order-error -=== RUN TestDB_updateAddOrderIDs/ok/all-old-not-pending === RUN TestDB_updateAddOrderIDs/fail/db.Get-order-error === RUN TestDB_updateAddOrderIDs/fail/update-order-status-error +=== RUN TestDB_updateAddOrderIDs/fail/db.save-order-error +=== RUN TestDB_updateAddOrderIDs/ok/all-old-not-pending +=== RUN TestDB_updateAddOrderIDs/fail/db.Get-error === RUN TestDB_updateAddOrderIDs/ok/no-old -=== RUN TestDB_updateAddOrderIDs/ok/old-and-new -=== RUN TestDB_updateAddOrderIDs/ok/old-and-new-2 --- PASS: TestDB_updateAddOrderIDs (0.00s) - --- PASS: TestDB_updateAddOrderIDs/fail/db.Get-error (0.00s) + --- PASS: TestDB_updateAddOrderIDs/ok/old-and-new (0.00s) + --- PASS: TestDB_updateAddOrderIDs/ok/old-and-new-2 (0.00s) --- PASS: TestDB_updateAddOrderIDs/fail/unmarshal-error (0.00s) - --- PASS: TestDB_updateAddOrderIDs/fail/db.save-order-error (0.00s) - --- PASS: TestDB_updateAddOrderIDs/ok/all-old-not-pending (0.00s) --- PASS: TestDB_updateAddOrderIDs/fail/db.Get-order-error (0.00s) --- PASS: TestDB_updateAddOrderIDs/fail/update-order-status-error (0.00s) + --- PASS: TestDB_updateAddOrderIDs/fail/db.save-order-error (0.00s) + --- PASS: TestDB_updateAddOrderIDs/ok/all-old-not-pending (0.00s) + --- PASS: TestDB_updateAddOrderIDs/fail/db.Get-error (0.00s) --- PASS: TestDB_updateAddOrderIDs/ok/no-old (0.00s) - --- PASS: TestDB_updateAddOrderIDs/ok/old-and-new (0.00s) - --- PASS: TestDB_updateAddOrderIDs/ok/old-and-new-2 (0.00s) PASS -ok github.com/smallstep/certificates/acme/db/nosql 0.112s +ok github.com/smallstep/certificates/acme/db/nosql 0.136s === RUN TestNewCertificate --- PASS: TestNewCertificate (0.00s) === RUN TestCertificate_MarshalJSON @@ -4335,21 +4371,21 @@ === RUN TestCertificateRequest_UnmarshalJSON_json/empty_csr_(string) === RUN TestCertificateRequest_UnmarshalJSON_json/empty_csr === RUN TestCertificateRequest_UnmarshalJSON_json/valid_csr ---- PASS: TestCertificateRequest_UnmarshalJSON_json (0.01s) +--- PASS: TestCertificateRequest_UnmarshalJSON_json (0.00s) --- PASS: TestCertificateRequest_UnmarshalJSON_json/invalid_type_(bool) (0.00s) --- PASS: TestCertificateRequest_UnmarshalJSON_json/invalid_type_(number) (0.00s) --- PASS: TestCertificateRequest_UnmarshalJSON_json/invalid_type_(object) (0.00s) --- PASS: TestCertificateRequest_UnmarshalJSON_json/empty_csr_(null) (0.00s) --- PASS: TestCertificateRequest_UnmarshalJSON_json/empty_csr_(string) (0.00s) - --- PASS: TestCertificateRequest_UnmarshalJSON_json/empty_csr (0.01s) + --- PASS: TestCertificateRequest_UnmarshalJSON_json/empty_csr (0.00s) --- PASS: TestCertificateRequest_UnmarshalJSON_json/valid_csr (0.00s) === RUN TestSignRequest_Validate === RUN TestSignRequest_Validate/missing_csr === RUN TestSignRequest_Validate/invalid_csr === RUN TestSignRequest_Validate/missing_ott ---- PASS: TestSignRequest_Validate (0.00s) +--- PASS: TestSignRequest_Validate (0.01s) --- PASS: TestSignRequest_Validate/missing_csr (0.00s) - --- PASS: TestSignRequest_Validate/invalid_csr (0.00s) + --- PASS: TestSignRequest_Validate/invalid_csr (0.01s) --- PASS: TestSignRequest_Validate/missing_ott (0.00s) === RUN Test_caHandler_Route === RUN Test_caHandler_Route/ok @@ -4360,7 +4396,7 @@ === RUN Test_Root === RUN Test_Root/ok === RUN Test_Root/fail -2026/05/18 23:57:30 http://example.com/root/efc7d6b475a56fe587650bcdb999a4a308f815ba44db4bf0371ea68a786ccd36 was not found: not found +2025/04/16 19:40:27 http://example.com/root/efc7d6b475a56fe587650bcdb999a4a308f815ba44db4bf0371ea68a786ccd36 was not found: not found --- PASS: Test_Root (0.00s) --- PASS: Test_Root/ok (0.00s) --- PASS: Test_Root/fail (0.00s) @@ -4371,9 +4407,9 @@ === RUN Test_Sign/validate_error === RUN Test_Sign/authorize_error === RUN Test_Sign/sign_error ---- PASS: Test_Sign (0.02s) +--- PASS: Test_Sign (0.04s) --- PASS: Test_Sign/ok (0.00s) - --- PASS: Test_Sign/ok_with_Provisioner (0.01s) + --- PASS: Test_Sign/ok_with_Provisioner (0.02s) --- PASS: Test_Sign/json_read_error (0.00s) --- PASS: Test_Sign/validate_error (0.00s) --- PASS: Test_Sign/authorize_error (0.00s) @@ -4386,7 +4422,7 @@ === RUN Test_Renew/renew_error === RUN Test_Renew/fail_expired_token === RUN Test_Renew/fail_invalid_root ---- PASS: Test_Renew (0.02s) +--- PASS: Test_Renew (0.03s) --- PASS: Test_Renew/ok (0.00s) --- PASS: Test_Renew/ok_renew_after_expiry (0.00s) --- PASS: Test_Renew/no_tls (0.00s) @@ -4401,7 +4437,7 @@ === RUN Test_Rekey/rekey_error === RUN Test_Rekey/json_read_error --- PASS: Test_Rekey (0.01s) - --- PASS: Test_Rekey/ok (0.00s) + --- PASS: Test_Rekey/ok (0.01s) --- PASS: Test_Rekey/no_tls (0.00s) --- PASS: Test_Rekey/no_peer_certificates (0.00s) --- PASS: Test_Rekey/rekey_error (0.00s) @@ -4409,9 +4445,9 @@ === RUN Test_Provisioners === RUN Test_Provisioners/ok === RUN Test_Provisioners/fail -2026/05/18 23:57:30 the error +2025/04/16 19:40:27 the error === RUN Test_Provisioners/limit_fail -2026/05/18 23:57:30 limit 'abc' is not an integer: strconv.Atoi: parsing "abc": invalid syntax +2025/04/16 19:40:27 limit 'abc' is not an integer: strconv.Atoi: parsing "abc": invalid syntax --- PASS: Test_Provisioners (0.00s) --- PASS: Test_Provisioners/ok (0.00s) --- PASS: Test_Provisioners/fail (0.00s) @@ -4419,7 +4455,7 @@ === RUN Test_ProvisionerKey === RUN Test_ProvisionerKey/ok === RUN Test_ProvisionerKey/fail -2026/05/18 23:57:30 not found +2025/04/16 19:40:27 not found --- PASS: Test_ProvisionerKey (0.00s) --- PASS: Test_ProvisionerKey/ok (0.00s) --- PASS: Test_ProvisionerKey/fail (0.00s) @@ -4427,7 +4463,7 @@ === RUN Test_Roots/ok === RUN Test_Roots/no_peer_certificates === RUN Test_Roots/fail -2026/05/18 23:57:30 error getting roots: an error +2025/04/16 19:40:27 error getting roots: an error --- PASS: Test_Roots (0.00s) --- PASS: Test_Roots/ok (0.00s) --- PASS: Test_Roots/no_peer_certificates (0.00s) @@ -4436,7 +4472,7 @@ === RUN Test_caHandler_RootsPEM/one_root === RUN Test_caHandler_RootsPEM/two_roots === RUN Test_caHandler_RootsPEM/fail -2026/05/18 23:57:30 an error +2025/04/16 19:40:27 an error --- PASS: Test_caHandler_RootsPEM (0.00s) --- PASS: Test_caHandler_RootsPEM/one_root (0.00s) --- PASS: Test_caHandler_RootsPEM/two_roots (0.00s) @@ -4445,7 +4481,7 @@ === RUN Test_Federation/ok === RUN Test_Federation/no_peer_certificates === RUN Test_Federation/fail -2026/05/18 23:57:30 error getting federated roots: an error +2025/04/16 19:40:27 error getting federated roots: an error --- PASS: Test_Federation (0.00s) --- PASS: Test_Federation/ok (0.00s) --- PASS: Test_Federation/no_peer_certificates (0.00s) @@ -4456,7 +4492,7 @@ === RUN Test_fmtPublicKey/ed25519 === RUN Test_fmtPublicKey/dsa2048 === RUN Test_fmtPublicKey/unknown ---- PASS: Test_fmtPublicKey (6.43s) +--- PASS: Test_fmtPublicKey (17.86s) --- PASS: Test_fmtPublicKey/p256 (0.00s) --- PASS: Test_fmtPublicKey/rsa1024 (0.00s) --- PASS: Test_fmtPublicKey/ed25519 (0.00s) @@ -4467,27 +4503,27 @@ === RUN TestRevokeRequestValidate/error/bad_reasonCode === RUN TestRevokeRequestValidate/error/non-passive_not_implemented === RUN TestRevokeRequestValidate/ok ---- PASS: TestRevokeRequestValidate (0.00s) +--- PASS: TestRevokeRequestValidate (0.01s) --- PASS: TestRevokeRequestValidate/error/missing_serial (0.00s) --- PASS: TestRevokeRequestValidate/error/bad_reasonCode (0.00s) --- PASS: TestRevokeRequestValidate/error/non-passive_not_implemented (0.00s) --- PASS: TestRevokeRequestValidate/ok (0.00s) === RUN Test_caHandler_Revoke -=== RUN Test_caHandler_Revoke/500/ott_authority.Revoke -=== RUN Test_caHandler_Revoke/403/ott_authority.Revoke === RUN Test_caHandler_Revoke/400/json_read_error === RUN Test_caHandler_Revoke/400/invalid_request_body === RUN Test_caHandler_Revoke/200/ott === RUN Test_caHandler_Revoke/400/no_OTT_and_no_peer_certificate === RUN Test_caHandler_Revoke/200/no_ott +=== RUN Test_caHandler_Revoke/500/ott_authority.Revoke +=== RUN Test_caHandler_Revoke/403/ott_authority.Revoke --- PASS: Test_caHandler_Revoke (0.00s) - --- PASS: Test_caHandler_Revoke/500/ott_authority.Revoke (0.00s) - --- PASS: Test_caHandler_Revoke/403/ott_authority.Revoke (0.00s) --- PASS: Test_caHandler_Revoke/400/json_read_error (0.00s) --- PASS: Test_caHandler_Revoke/400/invalid_request_body (0.00s) --- PASS: Test_caHandler_Revoke/200/ott (0.00s) --- PASS: Test_caHandler_Revoke/400/no_OTT_and_no_peer_certificate (0.00s) --- PASS: Test_caHandler_Revoke/200/no_ott (0.00s) + --- PASS: Test_caHandler_Revoke/500/ott_authority.Revoke (0.00s) + --- PASS: Test_caHandler_Revoke/403/ott_authority.Revoke (0.00s) === RUN TestSSHCertificate_MarshalJSON === RUN TestSSHCertificate_MarshalJSON/nil === RUN TestSSHCertificate_MarshalJSON/user @@ -4549,12 +4585,12 @@ === RUN Test_SSHSign/fail-signSSH === RUN Test_SSHSign/fail-SignSSHAddUser === RUN Test_SSHSign/fail-user-identity ---- PASS: Test_SSHSign (0.00s) +--- PASS: Test_SSHSign (0.01s) --- PASS: Test_SSHSign/ok-user (0.00s) --- PASS: Test_SSHSign/ok-host (0.00s) --- PASS: Test_SSHSign/ok-user-add (0.00s) --- PASS: Test_SSHSign/ok-user-identity (0.00s) - --- PASS: Test_SSHSign/fail-body (0.00s) + --- PASS: Test_SSHSign/fail-body (0.01s) --- PASS: Test_SSHSign/fail-validate (0.00s) --- PASS: Test_SSHSign/fail-publicKey (0.00s) --- PASS: Test_SSHSign/fail-publicKey#01 (0.00s) @@ -4635,7 +4671,7 @@ === RUN Test_SSHBastion/bad_json === RUN Test_SSHBastion/bad_request === RUN Test_SSHBastion/error ---- PASS: Test_SSHBastion (0.01s) +--- PASS: Test_SSHBastion (0.00s) --- PASS: Test_SSHBastion/ok (0.00s) --- PASS: Test_SSHBastion/ok#01 (0.00s) --- PASS: Test_SSHBastion/empty (0.00s) @@ -4665,16 +4701,16 @@ --- PASS: TestSSHPublicKey_UnmarshalJSON/badB64 (0.00s) --- PASS: TestSSHPublicKey_UnmarshalJSON/badKey (0.00s) PASS -ok github.com/smallstep/certificates/api 6.572s +ok github.com/smallstep/certificates/api 18.118s === RUN TestError === RUN TestError/normalLogger -2026/05/18 23:57:30 the error +2025/04/16 19:40:27 the error === RUN TestError/responseLogger --- PASS: TestError (0.00s) --- PASS: TestError/normalLogger (0.00s) --- PASS: TestError/responseLogger (0.00s) PASS -ok github.com/smallstep/certificates/api/log 0.056s +ok github.com/smallstep/certificates/api/log 0.080s === RUN TestJSON === RUN TestJSON/ok === RUN TestJSON/fail @@ -4692,41 +4728,41 @@ === RUN Test_badProtoJSONError_Render === RUN Test_badProtoJSONError_Render/bad_proto_normal_space === RUN Test_badProtoJSONError_Render/bad_proto_non_breaking_space ---- PASS: Test_badProtoJSONError_Render (0.00s) - --- PASS: Test_badProtoJSONError_Render/bad_proto_normal_space (0.00s) +--- PASS: Test_badProtoJSONError_Render (0.01s) + --- PASS: Test_badProtoJSONError_Render/bad_proto_normal_space (0.01s) --- PASS: Test_badProtoJSONError_Render/bad_proto_non_breaking_space (0.00s) PASS -ok github.com/smallstep/certificates/api/read 0.056s +ok github.com/smallstep/certificates/api/read 0.067s === RUN TestJSON --- PASS: TestJSON (0.00s) === RUN TestJSONPanics --- PASS: TestJSONPanics (0.00s) === RUN TestError === RUN TestError/0 -2026/05/18 23:57:30 some string +2025/04/16 19:40:27 some string === RUN TestError/1 -2026/05/18 23:57:30 123 +2025/04/16 19:40:27 123 --- PASS: TestError (0.00s) --- PASS: TestError/0 (0.00s) --- PASS: TestError/1 (0.00s) === RUN TestStatusCodeFromError --- PASS: TestStatusCodeFromError (0.00s) PASS -ok github.com/smallstep/certificates/api/render 0.048s +ok github.com/smallstep/certificates/api/render 0.083s === RUN TestAuthorityNew -=== RUN TestAuthorityNew/ok === RUN TestAuthorityNew/fail_bad_root === RUN TestAuthorityNew/fail_bad_password === RUN TestAuthorityNew/fail_loading_CA_cert +=== RUN TestAuthorityNew/ok --- PASS: TestAuthorityNew (0.01s) - --- PASS: TestAuthorityNew/ok (0.01s) --- PASS: TestAuthorityNew/fail_bad_root (0.00s) --- PASS: TestAuthorityNew/fail_bad_password (0.00s) - --- PASS: TestAuthorityNew/fail_loading_CA_cert (0.00s) + --- PASS: TestAuthorityNew/fail_loading_CA_cert (0.01s) + --- PASS: TestAuthorityNew/ok (0.00s) === RUN TestAuthority_GetDatabase === RUN TestAuthority_GetDatabase/ok === RUN TestAuthority_GetDatabase/ok_WithDatabase ---- PASS: TestAuthority_GetDatabase (0.02s) +--- PASS: TestAuthority_GetDatabase (0.00s) --- PASS: TestAuthority_GetDatabase/ok (0.00s) --- PASS: TestAuthority_GetDatabase/ok_WithDatabase (0.00s) === RUN TestNewEmbedded @@ -4742,7 +4778,7 @@ === RUN TestNewEmbedded/fail_missing_issuer === RUN TestNewEmbedded/fail_missing_signer#01 === RUN TestNewEmbedded/fail_bad_password ---- PASS: TestNewEmbedded (0.00s) +--- PASS: TestNewEmbedded (0.01s) --- PASS: TestNewEmbedded/ok (0.00s) --- PASS: TestNewEmbedded/ok_empty_config (0.00s) --- PASS: TestNewEmbedded/ok_config_file (0.00s) @@ -4766,8 +4802,8 @@ === RUN TestAuthority_GetSCEPService === RUN TestAuthority_GetSCEPService/ok === RUN TestAuthority_GetSCEPService/wrong_password ---- PASS: TestAuthority_GetSCEPService (0.02s) - --- PASS: TestAuthority_GetSCEPService/ok (0.00s) +--- PASS: TestAuthority_GetSCEPService (0.03s) + --- PASS: TestAuthority_GetSCEPService/ok (0.01s) --- PASS: TestAuthority_GetSCEPService/wrong_password (0.00s) === RUN TestAuthority_GetID === RUN TestAuthority_GetID/ok @@ -4777,128 +4813,128 @@ --- PASS: TestAuthority_GetID/ok_with_id (0.00s) === RUN TestAuthority_authorizeToken === RUN TestAuthority_authorizeToken/fail/prehistoric-token +=== RUN TestAuthority_authorizeToken/fail/provisioner-not-found === RUN TestAuthority_authorizeToken/fail/simpledb/token-already-used -=== RUN TestAuthority_authorizeToken/fail/sha256/token-already-used === RUN TestAuthority_authorizeToken/ok/mockNoSQLDB === RUN TestAuthority_authorizeToken/fail/mockNoSQLDB/error === RUN TestAuthority_authorizeToken/fail/mockNoSQLDB/token-already-used -=== RUN TestAuthority_authorizeToken/fail/invalid-token -=== RUN TestAuthority_authorizeToken/fail/provisioner-not-found === RUN TestAuthority_authorizeToken/ok/simpledb === RUN TestAuthority_authorizeToken/ok/sha256 ---- PASS: TestAuthority_authorizeToken (0.06s) +=== RUN TestAuthority_authorizeToken/fail/sha256/token-already-used +=== RUN TestAuthority_authorizeToken/fail/invalid-token +--- PASS: TestAuthority_authorizeToken (0.08s) --- PASS: TestAuthority_authorizeToken/fail/prehistoric-token (0.00s) - --- PASS: TestAuthority_authorizeToken/fail/simpledb/token-already-used (0.00s) - --- PASS: TestAuthority_authorizeToken/fail/sha256/token-already-used (0.00s) + --- PASS: TestAuthority_authorizeToken/fail/provisioner-not-found (0.00s) + --- PASS: TestAuthority_authorizeToken/fail/simpledb/token-already-used (0.01s) --- PASS: TestAuthority_authorizeToken/ok/mockNoSQLDB (0.00s) --- PASS: TestAuthority_authorizeToken/fail/mockNoSQLDB/error (0.00s) --- PASS: TestAuthority_authorizeToken/fail/mockNoSQLDB/token-already-used (0.00s) - --- PASS: TestAuthority_authorizeToken/fail/invalid-token (0.00s) - --- PASS: TestAuthority_authorizeToken/fail/provisioner-not-found (0.00s) --- PASS: TestAuthority_authorizeToken/ok/simpledb (0.00s) --- PASS: TestAuthority_authorizeToken/ok/sha256 (0.00s) + --- PASS: TestAuthority_authorizeToken/fail/sha256/token-already-used (0.00s) + --- PASS: TestAuthority_authorizeToken/fail/invalid-token (0.00s) === RUN TestAuthority_authorizeRevoke +=== RUN TestAuthority_authorizeRevoke/ok/token === RUN TestAuthority_authorizeRevoke/fail/token/invalid-token === RUN TestAuthority_authorizeRevoke/fail/token/invalid-subject -=== RUN TestAuthority_authorizeRevoke/ok/token ---- PASS: TestAuthority_authorizeRevoke (0.04s) +--- PASS: TestAuthority_authorizeRevoke (0.06s) + --- PASS: TestAuthority_authorizeRevoke/ok/token (0.00s) --- PASS: TestAuthority_authorizeRevoke/fail/token/invalid-token (0.00s) --- PASS: TestAuthority_authorizeRevoke/fail/token/invalid-subject (0.00s) - --- PASS: TestAuthority_authorizeRevoke/ok/token (0.00s) === RUN TestAuthority_authorizeSign +=== RUN TestAuthority_authorizeSign/ok === RUN TestAuthority_authorizeSign/fail/invalid-token === RUN TestAuthority_authorizeSign/fail/invalid-subject -=== RUN TestAuthority_authorizeSign/ok ---- PASS: TestAuthority_authorizeSign (0.04s) +--- PASS: TestAuthority_authorizeSign (0.07s) + --- PASS: TestAuthority_authorizeSign/ok (0.00s) --- PASS: TestAuthority_authorizeSign/fail/invalid-token (0.00s) --- PASS: TestAuthority_authorizeSign/fail/invalid-subject (0.00s) - --- PASS: TestAuthority_authorizeSign/ok (0.00s) === RUN TestAuthority_Authorize -=== RUN TestAuthority_Authorize/fail/sshRenew/invalid-token -=== RUN TestAuthority_Authorize/fail/sshRenew/disabled -=== RUN TestAuthority_Authorize/ok/sshRenew -=== RUN TestAuthority_Authorize/ok/revoke -=== RUN TestAuthority_Authorize/fail/sshSign/disabled -=== RUN TestAuthority_Authorize/ok/sshSign -=== RUN TestAuthority_Authorize/fail/sshRevoke/invalid-token +=== RUN TestAuthority_Authorize/ok/sign +=== RUN TestAuthority_Authorize/fail/sshRekey/invalid-token === RUN TestAuthority_Authorize/fail/sshRekey/disabled +=== RUN TestAuthority_Authorize/ok/sshRekey === RUN TestAuthority_Authorize/fail/unexpected-method === RUN TestAuthority_Authorize/default-to-signMethod -=== RUN TestAuthority_Authorize/fail/revoke/invalid-token +=== RUN TestAuthority_Authorize/ok/revoke +=== RUN TestAuthority_Authorize/fail/sshSign/invalid-token +=== RUN TestAuthority_Authorize/fail/sshSign/disabled +=== RUN TestAuthority_Authorize/fail/sshRevoke/invalid-token === RUN TestAuthority_Authorize/ok/sshRevoke -=== RUN TestAuthority_Authorize/fail/sshRekey/invalid-token -=== RUN TestAuthority_Authorize/ok/sshRekey +=== RUN TestAuthority_Authorize/ok/sshSign +=== RUN TestAuthority_Authorize/fail/sshRenew/invalid-token +=== RUN TestAuthority_Authorize/fail/sshRenew/disabled +=== RUN TestAuthority_Authorize/ok/sshRenew +=== RUN TestAuthority_Authorize/fail/revoke/invalid-token === RUN TestAuthority_Authorize/fail/sign/invalid-token -=== RUN TestAuthority_Authorize/ok/sign -=== RUN TestAuthority_Authorize/fail/sshSign/invalid-token ---- PASS: TestAuthority_Authorize (0.05s) - --- PASS: TestAuthority_Authorize/fail/sshRenew/invalid-token (0.00s) - --- PASS: TestAuthority_Authorize/fail/sshRenew/disabled (0.00s) - --- PASS: TestAuthority_Authorize/ok/sshRenew (0.00s) - --- PASS: TestAuthority_Authorize/ok/revoke (0.00s) - --- PASS: TestAuthority_Authorize/fail/sshSign/disabled (0.00s) - --- PASS: TestAuthority_Authorize/ok/sshSign (0.00s) - --- PASS: TestAuthority_Authorize/fail/sshRevoke/invalid-token (0.00s) +--- PASS: TestAuthority_Authorize (0.08s) + --- PASS: TestAuthority_Authorize/ok/sign (0.00s) + --- PASS: TestAuthority_Authorize/fail/sshRekey/invalid-token (0.00s) --- PASS: TestAuthority_Authorize/fail/sshRekey/disabled (0.00s) + --- PASS: TestAuthority_Authorize/ok/sshRekey (0.00s) --- PASS: TestAuthority_Authorize/fail/unexpected-method (0.00s) --- PASS: TestAuthority_Authorize/default-to-signMethod (0.00s) - --- PASS: TestAuthority_Authorize/fail/revoke/invalid-token (0.00s) + --- PASS: TestAuthority_Authorize/ok/revoke (0.01s) + --- PASS: TestAuthority_Authorize/fail/sshSign/invalid-token (0.00s) + --- PASS: TestAuthority_Authorize/fail/sshSign/disabled (0.00s) + --- PASS: TestAuthority_Authorize/fail/sshRevoke/invalid-token (0.00s) --- PASS: TestAuthority_Authorize/ok/sshRevoke (0.00s) - --- PASS: TestAuthority_Authorize/fail/sshRekey/invalid-token (0.00s) - --- PASS: TestAuthority_Authorize/ok/sshRekey (0.00s) + --- PASS: TestAuthority_Authorize/ok/sshSign (0.00s) + --- PASS: TestAuthority_Authorize/fail/sshRenew/invalid-token (0.00s) + --- PASS: TestAuthority_Authorize/fail/sshRenew/disabled (0.00s) + --- PASS: TestAuthority_Authorize/ok/sshRenew (0.00s) + --- PASS: TestAuthority_Authorize/fail/revoke/invalid-token (0.00s) --- PASS: TestAuthority_Authorize/fail/sign/invalid-token (0.00s) - --- PASS: TestAuthority_Authorize/ok/sign (0.00s) - --- PASS: TestAuthority_Authorize/fail/sshSign/invalid-token (0.00s) === RUN TestAuthority_authorizeRenew -=== RUN TestAuthority_authorizeRenew/ok/from_db === RUN TestAuthority_authorizeRenew/fail/db.IsRevoked-error === RUN TestAuthority_authorizeRenew/fail/revoked === RUN TestAuthority_authorizeRenew/fail/load-provisioner === RUN TestAuthority_authorizeRenew/fail/provisioner-authorize-renewal-fail === RUN TestAuthority_authorizeRenew/ok +=== RUN TestAuthority_authorizeRenew/ok/from_db --- PASS: TestAuthority_authorizeRenew (0.01s) - --- PASS: TestAuthority_authorizeRenew/ok/from_db (0.00s) --- PASS: TestAuthority_authorizeRenew/fail/db.IsRevoked-error (0.00s) --- PASS: TestAuthority_authorizeRenew/fail/revoked (0.00s) --- PASS: TestAuthority_authorizeRenew/fail/load-provisioner (0.00s) --- PASS: TestAuthority_authorizeRenew/fail/provisioner-authorize-renewal-fail (0.00s) --- PASS: TestAuthority_authorizeRenew/ok (0.00s) + --- PASS: TestAuthority_authorizeRenew/ok/from_db (0.00s) === RUN TestAuthority_authorizeSSHSign === RUN TestAuthority_authorizeSSHSign/fail/invalid-token === RUN TestAuthority_authorizeSSHSign/fail/invalid-subject === RUN TestAuthority_authorizeSSHSign/ok ---- PASS: TestAuthority_authorizeSSHSign (0.04s) +--- PASS: TestAuthority_authorizeSSHSign (0.09s) --- PASS: TestAuthority_authorizeSSHSign/fail/invalid-token (0.00s) --- PASS: TestAuthority_authorizeSSHSign/fail/invalid-subject (0.00s) - --- PASS: TestAuthority_authorizeSSHSign/ok (0.00s) + --- PASS: TestAuthority_authorizeSSHSign/ok (0.01s) === RUN TestAuthority_authorizeSSHRenew +=== RUN TestAuthority_authorizeSSHRenew/fail/sshRenew-unimplemented-jwk-provisioner +=== RUN TestAuthority_authorizeSSHRenew/fail/WithAuthorizeSSHRenewFunc === RUN TestAuthority_authorizeSSHRenew/ok === RUN TestAuthority_authorizeSSHRenew/ok/WithAuthorizeSSHRenewFunc === RUN TestAuthority_authorizeSSHRenew/fail/invalid-token -=== RUN TestAuthority_authorizeSSHRenew/fail/sshRenew-unimplemented-jwk-provisioner -=== RUN TestAuthority_authorizeSSHRenew/fail/WithAuthorizeSSHRenewFunc ---- PASS: TestAuthority_authorizeSSHRenew (0.05s) - --- PASS: TestAuthority_authorizeSSHRenew/ok (0.00s) - --- PASS: TestAuthority_authorizeSSHRenew/ok/WithAuthorizeSSHRenewFunc (0.01s) - --- PASS: TestAuthority_authorizeSSHRenew/fail/invalid-token (0.00s) +--- PASS: TestAuthority_authorizeSSHRenew (0.09s) --- PASS: TestAuthority_authorizeSSHRenew/fail/sshRenew-unimplemented-jwk-provisioner (0.00s) --- PASS: TestAuthority_authorizeSSHRenew/fail/WithAuthorizeSSHRenewFunc (0.00s) + --- PASS: TestAuthority_authorizeSSHRenew/ok (0.00s) + --- PASS: TestAuthority_authorizeSSHRenew/ok/WithAuthorizeSSHRenewFunc (0.00s) + --- PASS: TestAuthority_authorizeSSHRenew/fail/invalid-token (0.00s) === RUN TestAuthority_authorizeSSHRevoke === RUN TestAuthority_authorizeSSHRevoke/fail/invalid-token === RUN TestAuthority_authorizeSSHRevoke/fail/invalid-subject === RUN TestAuthority_authorizeSSHRevoke/ok ---- PASS: TestAuthority_authorizeSSHRevoke (0.04s) +--- PASS: TestAuthority_authorizeSSHRevoke (0.08s) --- PASS: TestAuthority_authorizeSSHRevoke/fail/invalid-token (0.00s) --- PASS: TestAuthority_authorizeSSHRevoke/fail/invalid-subject (0.00s) --- PASS: TestAuthority_authorizeSSHRevoke/ok (0.00s) === RUN TestAuthority_authorizeSSHRekey -=== RUN TestAuthority_authorizeSSHRekey/ok === RUN TestAuthority_authorizeSSHRekey/fail/invalid-token === RUN TestAuthority_authorizeSSHRekey/fail/sshRekey-unimplemented-jwk-provisioner ---- PASS: TestAuthority_authorizeSSHRekey (0.03s) - --- PASS: TestAuthority_authorizeSSHRekey/ok (0.00s) +=== RUN TestAuthority_authorizeSSHRekey/ok +--- PASS: TestAuthority_authorizeSSHRekey (0.11s) --- PASS: TestAuthority_authorizeSSHRekey/fail/invalid-token (0.00s) --- PASS: TestAuthority_authorizeSSHRekey/fail/sshRekey-unimplemented-jwk-provisioner (0.00s) + --- PASS: TestAuthority_authorizeSSHRekey/ok (0.00s) === RUN TestAuthority_AuthorizeRenewToken === RUN TestAuthority_AuthorizeRenewToken/ok === RUN TestAuthority_AuthorizeRenewToken/ok_expired_cert @@ -4913,22 +4949,21 @@ === RUN TestAuthority_AuthorizeRenewToken/fail_token_iat#01 === RUN TestAuthority_AuthorizeRenewToken/fail_token_iat#02 === RUN TestAuthority_AuthorizeRenewToken/fail_token_aud ---- PASS: TestAuthority_AuthorizeRenewToken (0.03s) +--- PASS: TestAuthority_AuthorizeRenewToken (0.13s) --- PASS: TestAuthority_AuthorizeRenewToken/ok (0.00s) --- PASS: TestAuthority_AuthorizeRenewToken/ok_expired_cert (0.00s) - --- PASS: TestAuthority_AuthorizeRenewToken/ok_provisioner_issuer (0.00s) + --- PASS: TestAuthority_AuthorizeRenewToken/ok_provisioner_issuer (0.01s) --- PASS: TestAuthority_AuthorizeRenewToken/fail_token (0.00s) --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_reuse (0.00s) - --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_signature (0.00s) + --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_signature (0.01s) --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_provisioner (0.00s) --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_iss (0.00s) --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_sub (0.00s) - --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_iat (0.00s) + --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_iat (0.01s) --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_iat#01 (0.00s) - --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_iat#02 (0.00s) + --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_iat#02 (0.01s) --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_aud (0.00s) === RUN TestAuthority_checkPolicy -=== RUN TestAuthority_checkPolicy/ok/empty-policy === RUN TestAuthority_checkPolicy/ok/policy === RUN TestAuthority_checkPolicy/fail/NewX509PolicyEngine-error === RUN TestAuthority_checkPolicy/fail/currentAdmin-evaluation-error @@ -4936,8 +4971,8 @@ === RUN TestAuthority_checkPolicy/fail/otherAdmins-evaluation-error === RUN TestAuthority_checkPolicy/fail/otherAdmins-lockout === RUN TestAuthority_checkPolicy/ok/no-policy +=== RUN TestAuthority_checkPolicy/ok/empty-policy --- PASS: TestAuthority_checkPolicy (0.00s) - --- PASS: TestAuthority_checkPolicy/ok/empty-policy (0.00s) --- PASS: TestAuthority_checkPolicy/ok/policy (0.00s) --- PASS: TestAuthority_checkPolicy/fail/NewX509PolicyEngine-error (0.00s) --- PASS: TestAuthority_checkPolicy/fail/currentAdmin-evaluation-error (0.00s) @@ -4945,6 +4980,7 @@ --- PASS: TestAuthority_checkPolicy/fail/otherAdmins-evaluation-error (0.00s) --- PASS: TestAuthority_checkPolicy/fail/otherAdmins-lockout (0.00s) --- PASS: TestAuthority_checkPolicy/ok/no-policy (0.00s) + --- PASS: TestAuthority_checkPolicy/ok/empty-policy (0.00s) === RUN TestAuthority_reloadPolicyEngines === RUN TestAuthority_reloadPolicyEngines/fail/standalone-x509-policy === RUN TestAuthority_reloadPolicyEngines/fail/standalone-ssh-host-policy @@ -5040,7 +5076,7 @@ === RUN TestGetEncryptedKey === RUN TestGetEncryptedKey/ok === RUN TestGetEncryptedKey/fail-not-found ---- PASS: TestGetEncryptedKey (0.00s) +--- PASS: TestGetEncryptedKey (0.01s) --- PASS: TestGetEncryptedKey/ok (0.00s) --- PASS: TestGetEncryptedKey/fail-not-found (0.00s) === RUN TestGetProvisioners @@ -5054,7 +5090,7 @@ === RUN TestAuthority_LoadProvisionerByCertificate/fail_from_certificate === RUN TestAuthority_LoadProvisionerByCertificate/fail_from_db === RUN TestAuthority_LoadProvisionerByCertificate/fail_from_admindb ---- PASS: TestAuthority_LoadProvisionerByCertificate (0.17s) +--- PASS: TestAuthority_LoadProvisionerByCertificate (0.33s) --- PASS: TestAuthority_LoadProvisionerByCertificate/ok_from_certificate (0.00s) --- PASS: TestAuthority_LoadProvisionerByCertificate/ok_from_db (0.00s) --- PASS: TestAuthority_LoadProvisionerByCertificate/ok_from_admindb (0.00s) @@ -5127,25 +5163,25 @@ === RUN TestAuthority_SignSSH/fail-host-policy === RUN TestAuthority_SignSSH/fail-host-policy-with-user-cert === RUN TestAuthority_SignSSH/fail-host-policy-with-bad-host ---- PASS: TestAuthority_SignSSH (0.06s) +--- PASS: TestAuthority_SignSSH (0.10s) --- PASS: TestAuthority_SignSSH/ok-user (0.00s) --- PASS: TestAuthority_SignSSH/ok-host (0.00s) --- PASS: TestAuthority_SignSSH/ok-user-only (0.00s) - --- PASS: TestAuthority_SignSSH/ok-host-only (0.00s) + --- PASS: TestAuthority_SignSSH/ok-host-only (0.01s) --- PASS: TestAuthority_SignSSH/ok-opts-type-user (0.00s) --- PASS: TestAuthority_SignSSH/ok-opts-type-host (0.00s) --- PASS: TestAuthority_SignSSH/ok-opts-principals (0.00s) - --- PASS: TestAuthority_SignSSH/ok-opts-principals#01 (0.00s) + --- PASS: TestAuthority_SignSSH/ok-opts-principals#01 (0.01s) --- PASS: TestAuthority_SignSSH/ok-opts-valid-after (0.00s) --- PASS: TestAuthority_SignSSH/ok-opts-valid-before (0.00s) --- PASS: TestAuthority_SignSSH/ok-cert-validator (0.00s) --- PASS: TestAuthority_SignSSH/ok-cert-modifier (0.00s) - --- PASS: TestAuthority_SignSSH/ok-opts-validator (0.00s) + --- PASS: TestAuthority_SignSSH/ok-opts-validator (0.01s) --- PASS: TestAuthority_SignSSH/ok-opts-modifier (0.00s) --- PASS: TestAuthority_SignSSH/ok-custom-template (0.00s) - --- PASS: TestAuthority_SignSSH/ok-user-policy (0.01s) + --- PASS: TestAuthority_SignSSH/ok-user-policy (0.00s) --- PASS: TestAuthority_SignSSH/ok-host-policy (0.00s) - --- PASS: TestAuthority_SignSSH/fail-opts-type (0.00s) + --- PASS: TestAuthority_SignSSH/fail-opts-type (0.01s) --- PASS: TestAuthority_SignSSH/fail-cert-validator (0.00s) --- PASS: TestAuthority_SignSSH/fail-cert-modifier (0.00s) --- PASS: TestAuthority_SignSSH/fail-opts-validator (0.00s) @@ -5160,8 +5196,8 @@ --- PASS: TestAuthority_SignSSH/fail-user-policy (0.00s) --- PASS: TestAuthority_SignSSH/fail-user-policy-with-host-cert (0.00s) --- PASS: TestAuthority_SignSSH/fail-user-policy-with-bad-user (0.00s) - --- PASS: TestAuthority_SignSSH/fail-host-policy (0.00s) - --- PASS: TestAuthority_SignSSH/fail-host-policy-with-user-cert (0.01s) + --- PASS: TestAuthority_SignSSH/fail-host-policy (0.01s) + --- PASS: TestAuthority_SignSSH/fail-host-policy-with-user-cert (0.00s) --- PASS: TestAuthority_SignSSH/fail-host-policy-with-bad-host (0.00s) === RUN TestAuthority_SignSSHAddUser === RUN TestAuthority_SignSSHAddUser/ok @@ -5181,7 +5217,7 @@ --- PASS: TestAuthority_SignSSHAddUser/ok-custom-principal-and-command (0.00s) --- PASS: TestAuthority_SignSSHAddUser/fail-no-user-key (0.00s) --- PASS: TestAuthority_SignSSHAddUser/fail-no-user-cert (0.00s) - --- PASS: TestAuthority_SignSSHAddUser/fail-no-principals (0.01s) + --- PASS: TestAuthority_SignSSHAddUser/fail-no-principals (0.00s) --- PASS: TestAuthority_SignSSHAddUser/fail-many-principals (0.00s) === RUN TestAuthority_GetSSHRoots === RUN TestAuthority_GetSSHRoots/ok @@ -5212,23 +5248,23 @@ === RUN TestAuthority_GetSSHConfig/noTemplates === RUN TestAuthority_GetSSHConfig/missingData === RUN TestAuthority_GetSSHConfig/failError ---- PASS: TestAuthority_GetSSHConfig (0.04s) - --- PASS: TestAuthority_GetSSHConfig/user (0.00s) +--- PASS: TestAuthority_GetSSHConfig (0.06s) + --- PASS: TestAuthority_GetSSHConfig/user (0.01s) --- PASS: TestAuthority_GetSSHConfig/user#01 (0.00s) --- PASS: TestAuthority_GetSSHConfig/host (0.00s) --- PASS: TestAuthority_GetSSHConfig/host#01 (0.00s) --- PASS: TestAuthority_GetSSHConfig/userWithData (0.00s) --- PASS: TestAuthority_GetSSHConfig/hostWithData (0.00s) - --- PASS: TestAuthority_GetSSHConfig/userIncludesEmptyData (0.00s) - --- PASS: TestAuthority_GetSSHConfig/userIncludesWithoutTemplateVersion (0.00s) + --- PASS: TestAuthority_GetSSHConfig/userIncludesEmptyData (0.01s) + --- PASS: TestAuthority_GetSSHConfig/userIncludesWithoutTemplateVersion (0.01s) --- PASS: TestAuthority_GetSSHConfig/userIncludesWithTemplateVersion (0.00s) --- PASS: TestAuthority_GetSSHConfig/disabled (0.00s) --- PASS: TestAuthority_GetSSHConfig/badType (0.00s) --- PASS: TestAuthority_GetSSHConfig/userError (0.00s) --- PASS: TestAuthority_GetSSHConfig/hostError (0.00s) --- PASS: TestAuthority_GetSSHConfig/noTemplates (0.00s) - --- PASS: TestAuthority_GetSSHConfig/missingData (0.00s) - --- PASS: TestAuthority_GetSSHConfig/failError (0.01s) + --- PASS: TestAuthority_GetSSHConfig/missingData (0.01s) + --- PASS: TestAuthority_GetSSHConfig/failError (0.00s) === RUN TestAuthority_CheckSSHHost === RUN TestAuthority_CheckSSHHost/true === RUN TestAuthority_CheckSSHHost/false @@ -5282,27 +5318,27 @@ --- PASS: TestAuthority_GetSSHHosts/fail/db-get-fail (0.00s) --- PASS: TestAuthority_GetSSHHosts/ok (0.00s) === RUN TestAuthority_RekeySSH -=== RUN TestAuthority_RekeySSH/fail/old-cert-validAfter +=== RUN TestAuthority_RekeySSH/fail/old-cert-validBefore === RUN TestAuthority_RekeySSH/fail/old-cert-no-user-key -=== RUN TestAuthority_RekeySSH/fail/unexpected-old-cert-type +=== RUN TestAuthority_RekeySSH/fail/db-store === RUN TestAuthority_RekeySSH/fail/is-revoked +=== RUN TestAuthority_RekeySSH/fail/is-revoked-error === RUN TestAuthority_RekeySSH/fail/opts-type -=== RUN TestAuthority_RekeySSH/fail/old-cert-validBefore +=== RUN TestAuthority_RekeySSH/fail/old-cert-validAfter === RUN TestAuthority_RekeySSH/fail/old-cert-no-host-key -=== RUN TestAuthority_RekeySSH/fail/db-store +=== RUN TestAuthority_RekeySSH/fail/unexpected-old-cert-type === RUN TestAuthority_RekeySSH/ok -=== RUN TestAuthority_RekeySSH/fail/is-revoked-error --- PASS: TestAuthority_RekeySSH (0.00s) - --- PASS: TestAuthority_RekeySSH/fail/old-cert-validAfter (0.00s) + --- PASS: TestAuthority_RekeySSH/fail/old-cert-validBefore (0.00s) --- PASS: TestAuthority_RekeySSH/fail/old-cert-no-user-key (0.00s) - --- PASS: TestAuthority_RekeySSH/fail/unexpected-old-cert-type (0.00s) + --- PASS: TestAuthority_RekeySSH/fail/db-store (0.00s) --- PASS: TestAuthority_RekeySSH/fail/is-revoked (0.00s) + --- PASS: TestAuthority_RekeySSH/fail/is-revoked-error (0.00s) --- PASS: TestAuthority_RekeySSH/fail/opts-type (0.00s) - --- PASS: TestAuthority_RekeySSH/fail/old-cert-validBefore (0.00s) + --- PASS: TestAuthority_RekeySSH/fail/old-cert-validAfter (0.00s) --- PASS: TestAuthority_RekeySSH/fail/old-cert-no-host-key (0.00s) - --- PASS: TestAuthority_RekeySSH/fail/db-store (0.00s) + --- PASS: TestAuthority_RekeySSH/fail/unexpected-old-cert-type (0.00s) --- PASS: TestAuthority_RekeySSH/ok (0.00s) - --- PASS: TestAuthority_RekeySSH/fail/is-revoked-error (0.00s) === RUN TestIsValidForAddUser === RUN TestIsValidForAddUser/ok === RUN TestIsValidForAddUser/ok_oidc @@ -5320,62 +5356,62 @@ --- PASS: TestIsValidForAddUser/fail_no_principals (0.00s) --- PASS: TestIsValidForAddUser/fail_extra_principals (0.00s) === RUN TestAuthority_Sign -=== RUN TestAuthority_Sign/fail_with_provisioner_enforcer +=== RUN TestAuthority_Sign/fail_bad_JSON_value_template_file === RUN TestAuthority_Sign/ok -=== RUN TestAuthority_Sign/fail_create_cert -=== RUN TestAuthority_Sign/fail_validate_sans_when_adding_common_name_not_in_claims +=== RUN TestAuthority_Sign/ok_with_custom_enforcer +=== RUN TestAuthority_Sign/ok_with_policy +CN=smallstep test,O=Acme Co,STREET=TNT,L=Landscapes,ST=Sudden Cliffs,C=Tazmania +=== RUN TestAuthority_Sign/fail_invalid_signature === RUN TestAuthority_Sign/fail_store_cert_in_db +=== RUN TestAuthority_Sign/fail_with_provisioner_enforcer === RUN TestAuthority_Sign/fail_with_custom_enforcer -=== RUN TestAuthority_Sign/ok_with_enforced_modifier -=== RUN TestAuthority_Sign/ok_with_custom_enforcer +=== RUN TestAuthority_Sign/fail_with_policy === RUN TestAuthority_Sign/fail_invalid_extra_option -=== RUN TestAuthority_Sign/fail_provisioner_duration_claim -=== RUN TestAuthority_Sign/fail_bad_JSON_value_template_file -=== RUN TestAuthority_Sign/ok_with_custom_template +=== RUN TestAuthority_Sign/ok_with_enforced_modifier +=== RUN TestAuthority_Sign/ok/csr_with_no_template_critical_SAN_extension === RUN TestAuthority_Sign/fail_merge_default_ASN1DN +=== RUN TestAuthority_Sign/fail_provisioner_duration_claim +=== RUN TestAuthority_Sign/fail_validate_sans_when_adding_common_name_not_in_claims === RUN TestAuthority_Sign/fail_rsa_key_too_short -=== RUN TestAuthority_Sign/fail_with_policy -=== RUN TestAuthority_Sign/ok/csr_with_no_template_critical_SAN_extension -=== RUN TestAuthority_Sign/ok_with_policy -CN=smallstep test,O=Acme Co,STREET=TNT,L=Landscapes,ST=Sudden Cliffs,C=Tazmania -=== RUN TestAuthority_Sign/fail_invalid_signature -=== RUN TestAuthority_Sign/fail_custom_template === RUN TestAuthority_Sign/fail_bad_JSON_syntax_template_file ---- PASS: TestAuthority_Sign (0.12s) - --- PASS: TestAuthority_Sign/fail_with_provisioner_enforcer (0.01s) +=== RUN TestAuthority_Sign/ok_with_custom_template +=== RUN TestAuthority_Sign/fail_create_cert +=== RUN TestAuthority_Sign/fail_custom_template +--- PASS: TestAuthority_Sign (0.18s) + --- PASS: TestAuthority_Sign/fail_bad_JSON_value_template_file (0.01s) --- PASS: TestAuthority_Sign/ok (0.00s) - --- PASS: TestAuthority_Sign/fail_create_cert (0.00s) - --- PASS: TestAuthority_Sign/fail_validate_sans_when_adding_common_name_not_in_claims (0.00s) + --- PASS: TestAuthority_Sign/ok_with_custom_enforcer (0.02s) + --- PASS: TestAuthority_Sign/ok_with_policy (0.00s) + --- PASS: TestAuthority_Sign/fail_invalid_signature (0.00s) --- PASS: TestAuthority_Sign/fail_store_cert_in_db (0.00s) + --- PASS: TestAuthority_Sign/fail_with_provisioner_enforcer (0.00s) --- PASS: TestAuthority_Sign/fail_with_custom_enforcer (0.01s) - --- PASS: TestAuthority_Sign/ok_with_enforced_modifier (0.00s) - --- PASS: TestAuthority_Sign/ok_with_custom_enforcer (0.01s) + --- PASS: TestAuthority_Sign/fail_with_policy (0.00s) --- PASS: TestAuthority_Sign/fail_invalid_extra_option (0.00s) - --- PASS: TestAuthority_Sign/fail_provisioner_duration_claim (0.00s) - --- PASS: TestAuthority_Sign/fail_bad_JSON_value_template_file (0.01s) - --- PASS: TestAuthority_Sign/ok_with_custom_template (0.01s) + --- PASS: TestAuthority_Sign/ok_with_enforced_modifier (0.01s) + --- PASS: TestAuthority_Sign/ok/csr_with_no_template_critical_SAN_extension (0.00s) --- PASS: TestAuthority_Sign/fail_merge_default_ASN1DN (0.00s) + --- PASS: TestAuthority_Sign/fail_provisioner_duration_claim (0.01s) + --- PASS: TestAuthority_Sign/fail_validate_sans_when_adding_common_name_not_in_claims (0.00s) --- PASS: TestAuthority_Sign/fail_rsa_key_too_short (0.00s) - --- PASS: TestAuthority_Sign/fail_with_policy (0.00s) - --- PASS: TestAuthority_Sign/ok/csr_with_no_template_critical_SAN_extension (0.00s) - --- PASS: TestAuthority_Sign/ok_with_policy (0.00s) - --- PASS: TestAuthority_Sign/fail_invalid_signature (0.00s) - --- PASS: TestAuthority_Sign/fail_custom_template (0.01s) --- PASS: TestAuthority_Sign/fail_bad_JSON_syntax_template_file (0.00s) + --- PASS: TestAuthority_Sign/ok_with_custom_template (0.00s) + --- PASS: TestAuthority_Sign/fail_create_cert (0.02s) + --- PASS: TestAuthority_Sign/fail_custom_template (0.02s) === RUN TestAuthority_Renew -=== RUN TestAuthority_Renew/fail/create-cert -=== RUN TestAuthority_Renew/fail/unauthorized -=== RUN TestAuthority_Renew/fail/WithAuthorizeRenewFunc === RUN TestAuthority_Renew/ok === RUN TestAuthority_Renew/ok/success-new-intermediate === RUN TestAuthority_Renew/ok/WithAuthorizeRenewFunc ---- PASS: TestAuthority_Renew (0.03s) - --- PASS: TestAuthority_Renew/fail/create-cert (0.00s) - --- PASS: TestAuthority_Renew/fail/unauthorized (0.00s) - --- PASS: TestAuthority_Renew/fail/WithAuthorizeRenewFunc (0.00s) +=== RUN TestAuthority_Renew/fail/create-cert +=== RUN TestAuthority_Renew/fail/unauthorized +=== RUN TestAuthority_Renew/fail/WithAuthorizeRenewFunc +--- PASS: TestAuthority_Renew (0.01s) --- PASS: TestAuthority_Renew/ok (0.00s) --- PASS: TestAuthority_Renew/ok/success-new-intermediate (0.01s) --- PASS: TestAuthority_Renew/ok/WithAuthorizeRenewFunc (0.00s) + --- PASS: TestAuthority_Renew/fail/create-cert (0.00s) + --- PASS: TestAuthority_Renew/fail/unauthorized (0.00s) + --- PASS: TestAuthority_Renew/fail/WithAuthorizeRenewFunc (0.00s) === RUN TestAuthority_Rekey === RUN TestAuthority_Rekey/fail/create-cert === RUN TestAuthority_Rekey/fail/unauthorized @@ -5395,38 +5431,38 @@ --- PASS: TestAuthority_GetTLSOptions/non-default (0.00s) --- PASS: TestAuthority_GetTLSOptions/default (0.00s) === RUN TestAuthority_Revoke +=== RUN TestAuthority_Revoke/ok/token +=== RUN TestAuthority_Revoke/ok/mTLS === RUN TestAuthority_Revoke/ok/mTLS-no-provisioner -=== RUN TestAuthority_Revoke/ok/ACME +=== RUN TestAuthority_Revoke/fail/token/authorizeRevoke_error === RUN TestAuthority_Revoke/fail/db-revoke -=== RUN TestAuthority_Revoke/ok/mTLS +=== RUN TestAuthority_Revoke/ok/ACME === RUN TestAuthority_Revoke/ok/ssh -=== RUN TestAuthority_Revoke/fail/token/authorizeRevoke_error === RUN TestAuthority_Revoke/fail/nil-db === RUN TestAuthority_Revoke/fail/already-revoked -=== RUN TestAuthority_Revoke/ok/token ---- PASS: TestAuthority_Revoke (0.09s) - --- PASS: TestAuthority_Revoke/ok/mTLS-no-provisioner (0.00s) - --- PASS: TestAuthority_Revoke/ok/ACME (0.00s) - --- PASS: TestAuthority_Revoke/fail/db-revoke (0.00s) +--- PASS: TestAuthority_Revoke (0.06s) + --- PASS: TestAuthority_Revoke/ok/token (0.00s) --- PASS: TestAuthority_Revoke/ok/mTLS (0.00s) - --- PASS: TestAuthority_Revoke/ok/ssh (0.01s) + --- PASS: TestAuthority_Revoke/ok/mTLS-no-provisioner (0.00s) --- PASS: TestAuthority_Revoke/fail/token/authorizeRevoke_error (0.00s) + --- PASS: TestAuthority_Revoke/fail/db-revoke (0.00s) + --- PASS: TestAuthority_Revoke/ok/ACME (0.00s) + --- PASS: TestAuthority_Revoke/ok/ssh (0.00s) --- PASS: TestAuthority_Revoke/fail/nil-db (0.00s) --- PASS: TestAuthority_Revoke/fail/already-revoked (0.00s) - --- PASS: TestAuthority_Revoke/ok/token (0.00s) PASS -ok github.com/smallstep/certificates/authority 1.053s +ok github.com/smallstep/certificates/authority 1.731s ? github.com/smallstep/certificates/authority/admin [no test files] === RUN TestHandler_requireEABEnabled === RUN TestHandler_requireEABEnabled/fail/prov.GetDetails -2026/05/18 23:57:34 error getting ACME details for provisioner 'provName' -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error getting ACME details for provisioner 'provName'"} +2025/04/16 19:40:34 error getting ACME details for provisioner 'provName' +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error getting ACME details for provisioner 'provName'"} === RUN TestHandler_requireEABEnabled/fail/prov.GetDetails.GetACME -2026/05/18 23:57:34 error getting ACME details for provisioner 'provName' -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error getting ACME details for provisioner 'provName'"} +2025/04/16 19:40:34 error getting ACME details for provisioner 'provName' +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error getting ACME details for provisioner 'provName'"} === RUN TestHandler_requireEABEnabled/ok/eab-disabled -2026/05/18 23:57:34 ACME EAB not enabled for provisioner 'provName' -2026/05/18 23:57:34 {"type":"badRequest","detail":"bad request","message":"ACME EAB not enabled for provisioner 'provName'"} +2025/04/16 19:40:34 ACME EAB not enabled for provisioner 'provName' +2025/04/16 19:40:34 {"type":"badRequest","detail":"bad request","message":"ACME EAB not enabled for provisioner 'provName'"} === RUN TestHandler_requireEABEnabled/ok/eab-enabled --- PASS: TestHandler_requireEABEnabled (0.00s) --- PASS: TestHandler_requireEABEnabled/fail/prov.GetDetails (0.00s) @@ -5443,20 +5479,20 @@ --- PASS: TestCreateExternalAccountKeyRequest_Validate/ok (0.00s) === RUN TestHandler_CreateExternalAccountKey === RUN TestHandler_CreateExternalAccountKey/ok -2026/05/18 23:57:34 this functionality is currently only available in Certificate Manager: https://u.step.sm/cm -2026/05/18 23:57:34 {"type":"notImplemented","detail":"not implemented","message":"this functionality is currently only available in Certificate Manager: https://u.step.sm/cm"} +2025/04/16 19:40:34 this functionality is currently only available in Certificate Manager: https://u.step.sm/cm +2025/04/16 19:40:34 {"type":"notImplemented","detail":"not implemented","message":"this functionality is currently only available in Certificate Manager: https://u.step.sm/cm"} --- PASS: TestHandler_CreateExternalAccountKey (0.00s) --- PASS: TestHandler_CreateExternalAccountKey/ok (0.00s) === RUN TestHandler_DeleteExternalAccountKey === RUN TestHandler_DeleteExternalAccountKey/ok -2026/05/18 23:57:34 this functionality is currently only available in Certificate Manager: https://u.step.sm/cm -2026/05/18 23:57:34 {"type":"notImplemented","detail":"not implemented","message":"this functionality is currently only available in Certificate Manager: https://u.step.sm/cm"} +2025/04/16 19:40:34 this functionality is currently only available in Certificate Manager: https://u.step.sm/cm +2025/04/16 19:40:34 {"type":"notImplemented","detail":"not implemented","message":"this functionality is currently only available in Certificate Manager: https://u.step.sm/cm"} --- PASS: TestHandler_DeleteExternalAccountKey (0.00s) --- PASS: TestHandler_DeleteExternalAccountKey/ok (0.00s) === RUN TestHandler_GetExternalAccountKeys === RUN TestHandler_GetExternalAccountKeys/ok -2026/05/18 23:57:34 this functionality is currently only available in Certificate Manager: https://u.step.sm/cm -2026/05/18 23:57:34 {"type":"notImplemented","detail":"not implemented","message":"this functionality is currently only available in Certificate Manager: https://u.step.sm/cm"} +2025/04/16 19:40:34 this functionality is currently only available in Certificate Manager: https://u.step.sm/cm +2025/04/16 19:40:34 {"type":"notImplemented","detail":"not implemented","message":"this functionality is currently only available in Certificate Manager: https://u.step.sm/cm"} --- PASS: TestHandler_GetExternalAccountKeys (0.00s) --- PASS: TestHandler_GetExternalAccountKeys/ok (0.00s) === RUN Test_eakToLinked @@ -5495,83 +5531,83 @@ --- PASS: TestUpdateAdminRequest_Validate/ok (0.00s) === RUN TestHandler_GetAdmin === RUN TestHandler_GetAdmin/fail/auth.LoadAdminByID-not-found -2026/05/18 23:57:34 admin adminID not found -2026/05/18 23:57:34 {"type":"notFound","detail":"resource not found","message":"admin adminID not found"} +2025/04/16 19:40:34 admin adminID not found +2025/04/16 19:40:34 {"type":"notFound","detail":"resource not found","message":"admin adminID not found"} === RUN TestHandler_GetAdmin/ok --- PASS: TestHandler_GetAdmin (0.00s) --- PASS: TestHandler_GetAdmin/fail/auth.LoadAdminByID-not-found (0.00s) --- PASS: TestHandler_GetAdmin/ok (0.00s) === RUN TestHandler_GetAdmins === RUN TestHandler_GetAdmins/fail/parse-cursor -2026/05/18 23:57:34 error parsing cursor and limit from query params: limit 'A' is not an integer: strconv.Atoi: parsing "A": invalid syntax -2026/05/18 23:57:34 {"type":"badRequest","detail":"bad request","message":"error parsing cursor and limit from query params: limit 'A' is not an integer: strconv.Atoi: parsing \"A\": invalid syntax"} +2025/04/16 19:40:34 error parsing cursor and limit from query params: limit 'A' is not an integer: strconv.Atoi: parsing "A": invalid syntax +2025/04/16 19:40:34 {"type":"badRequest","detail":"bad request","message":"error parsing cursor and limit from query params: limit 'A' is not an integer: strconv.Atoi: parsing \"A\": invalid syntax"} === RUN TestHandler_GetAdmins/fail/auth.GetAdmins -2026/05/18 23:57:34 error retrieving paginated admins: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving paginated admins: force"} +2025/04/16 19:40:34 error retrieving paginated admins: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving paginated admins: force"} === RUN TestHandler_GetAdmins/ok --- PASS: TestHandler_GetAdmins (0.00s) --- PASS: TestHandler_GetAdmins/fail/parse-cursor (0.00s) --- PASS: TestHandler_GetAdmins/fail/auth.GetAdmins (0.00s) --- PASS: TestHandler_GetAdmins/ok (0.00s) === RUN TestHandler_CreateAdmin -=== RUN TestHandler_CreateAdmin/fail/ReadJSON -2026/05/18 23:57:34 error reading request body: error decoding json: invalid character '!' looking for beginning of object key string -2026/05/18 23:57:34 {"type":"badRequest","detail":"bad request","message":"error reading request body: error decoding json: invalid character '!' looking for beginning of object key string"} === RUN TestHandler_CreateAdmin/fail/validate -2026/05/18 23:57:34 subject cannot be empty -2026/05/18 23:57:34 {"type":"badRequest","detail":"bad request","message":"subject cannot be empty"} +2025/04/16 19:40:34 subject cannot be empty +2025/04/16 19:40:34 {"type":"badRequest","detail":"bad request","message":"subject cannot be empty"} === RUN TestHandler_CreateAdmin/fail/auth.LoadProvisionerByName -2026/05/18 23:57:34 error loading provisioner prov: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner prov: force"} +2025/04/16 19:40:34 error loading provisioner prov: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner prov: force"} === RUN TestHandler_CreateAdmin/fail/auth.StoreAdmin -2026/05/18 23:57:34 error storing admin: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error storing admin: force"} +2025/04/16 19:40:34 error storing admin: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error storing admin: force"} === RUN TestHandler_CreateAdmin/ok +=== RUN TestHandler_CreateAdmin/fail/ReadJSON +2025/04/16 19:40:34 error reading request body: error decoding json: invalid character '!' looking for beginning of object key string +2025/04/16 19:40:34 {"type":"badRequest","detail":"bad request","message":"error reading request body: error decoding json: invalid character '!' looking for beginning of object key string"} --- PASS: TestHandler_CreateAdmin (0.00s) - --- PASS: TestHandler_CreateAdmin/fail/ReadJSON (0.00s) --- PASS: TestHandler_CreateAdmin/fail/validate (0.00s) --- PASS: TestHandler_CreateAdmin/fail/auth.LoadProvisionerByName (0.00s) --- PASS: TestHandler_CreateAdmin/fail/auth.StoreAdmin (0.00s) --- PASS: TestHandler_CreateAdmin/ok (0.00s) + --- PASS: TestHandler_CreateAdmin/fail/ReadJSON (0.00s) === RUN TestHandler_DeleteAdmin === RUN TestHandler_DeleteAdmin/fail/auth.RemoveAdmin -2026/05/18 23:57:34 error deleting admin adminID: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error deleting admin adminID: force"} +2025/04/16 19:40:34 error deleting admin adminID: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error deleting admin adminID: force"} === RUN TestHandler_DeleteAdmin/ok --- PASS: TestHandler_DeleteAdmin (0.00s) --- PASS: TestHandler_DeleteAdmin/fail/auth.RemoveAdmin (0.00s) --- PASS: TestHandler_DeleteAdmin/ok (0.00s) === RUN TestHandler_UpdateAdmin +=== RUN TestHandler_UpdateAdmin/ok === RUN TestHandler_UpdateAdmin/fail/ReadJSON -2026/05/18 23:57:34 error reading request body: error decoding json: invalid character '!' looking for beginning of object key string -2026/05/18 23:57:34 {"type":"badRequest","detail":"bad request","message":"error reading request body: error decoding json: invalid character '!' looking for beginning of object key string"} +2025/04/16 19:40:34 error reading request body: error decoding json: invalid character '!' looking for beginning of object key string +2025/04/16 19:40:34 {"type":"badRequest","detail":"bad request","message":"error reading request body: error decoding json: invalid character '!' looking for beginning of object key string"} === RUN TestHandler_UpdateAdmin/fail/validate -2026/05/18 23:57:34 invalid value for admin type -2026/05/18 23:57:34 {"type":"badRequest","detail":"bad request","message":"invalid value for admin type"} +2025/04/16 19:40:34 invalid value for admin type +2025/04/16 19:40:34 {"type":"badRequest","detail":"bad request","message":"invalid value for admin type"} === RUN TestHandler_UpdateAdmin/fail/auth.UpdateAdmin -2026/05/18 23:57:34 error updating admin adminID: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error updating admin adminID: force"} -=== RUN TestHandler_UpdateAdmin/ok +2025/04/16 19:40:34 error updating admin adminID: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error updating admin adminID: force"} --- PASS: TestHandler_UpdateAdmin (0.00s) + --- PASS: TestHandler_UpdateAdmin/ok (0.00s) --- PASS: TestHandler_UpdateAdmin/fail/ReadJSON (0.00s) --- PASS: TestHandler_UpdateAdmin/fail/validate (0.00s) --- PASS: TestHandler_UpdateAdmin/fail/auth.UpdateAdmin (0.00s) - --- PASS: TestHandler_UpdateAdmin/ok (0.00s) === RUN TestHandler_requireAPIEnabled === RUN TestHandler_requireAPIEnabled/fail/auth.IsAdminAPIEnabled -2026/05/18 23:57:34 administration API not enabled -2026/05/18 23:57:34 {"type":"notImplemented","detail":"not implemented","message":"administration API not enabled"} +2025/04/16 19:40:34 administration API not enabled +2025/04/16 19:40:34 {"type":"notImplemented","detail":"not implemented","message":"administration API not enabled"} === RUN TestHandler_requireAPIEnabled/ok --- PASS: TestHandler_requireAPIEnabled (0.00s) --- PASS: TestHandler_requireAPIEnabled/fail/auth.IsAdminAPIEnabled (0.00s) --- PASS: TestHandler_requireAPIEnabled/ok (0.00s) === RUN TestHandler_extractAuthorizeTokenAdmin === RUN TestHandler_extractAuthorizeTokenAdmin/fail/missing-authorization-token -2026/05/18 23:57:34 missing authorization header token -2026/05/18 23:57:34 {"type":"unauthorized","detail":"unauthorized","message":"missing authorization header token"} +2025/04/16 19:40:34 missing authorization header token +2025/04/16 19:40:34 {"type":"unauthorized","detail":"unauthorized","message":"missing authorization header token"} === RUN TestHandler_extractAuthorizeTokenAdmin/fail/auth.AuthorizeAdminToken -2026/05/18 23:57:34 not authorized -2026/05/18 23:57:34 {"type":"unauthorized","detail":"unauthorized","message":"not authorized"} +2025/04/16 19:40:34 not authorized +2025/04/16 19:40:34 {"type":"unauthorized","detail":"unauthorized","message":"not authorized"} === RUN TestHandler_extractAuthorizeTokenAdmin/ok --- PASS: TestHandler_extractAuthorizeTokenAdmin (0.00s) --- PASS: TestHandler_extractAuthorizeTokenAdmin/fail/missing-authorization-token (0.00s) @@ -5579,306 +5615,306 @@ --- PASS: TestHandler_extractAuthorizeTokenAdmin/ok (0.00s) === RUN TestHandler_loadProvisionerByName === RUN TestHandler_loadProvisionerByName/fail/auth.LoadProvisionerByName -2026/05/18 23:57:34 error loading provisioner provName: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner provName: force"} +2025/04/16 19:40:34 error loading provisioner provName: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner provName: force"} === RUN TestHandler_loadProvisionerByName/fail/db.GetProvisioner -2026/05/18 23:57:34 error retrieving provisioner provName: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving provisioner provName: force"} +2025/04/16 19:40:34 error retrieving provisioner provName: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving provisioner provName: force"} === RUN TestHandler_loadProvisionerByName/ok --- PASS: TestHandler_loadProvisionerByName (0.00s) --- PASS: TestHandler_loadProvisionerByName/fail/auth.LoadProvisionerByName (0.00s) --- PASS: TestHandler_loadProvisionerByName/fail/db.GetProvisioner (0.00s) --- PASS: TestHandler_loadProvisionerByName/ok (0.00s) === RUN TestHandler_checkAction -=== RUN TestHandler_checkAction/standalone-nosql-supported === RUN TestHandler_checkAction/standalone-nosql-not-supported -2026/05/18 23:57:34 operation not supported in standalone mode -2026/05/18 23:57:34 {"type":"notImplemented","detail":"not implemented","message":"operation not supported in standalone mode"} +2025/04/16 19:40:34 operation not supported in standalone mode +2025/04/16 19:40:34 {"type":"notImplemented","detail":"not implemented","message":"operation not supported in standalone mode"} === RUN TestHandler_checkAction/standalone-no-nosql-not-supported +=== RUN TestHandler_checkAction/standalone-nosql-supported --- PASS: TestHandler_checkAction (0.00s) - --- PASS: TestHandler_checkAction/standalone-nosql-supported (0.00s) --- PASS: TestHandler_checkAction/standalone-nosql-not-supported (0.00s) --- PASS: TestHandler_checkAction/standalone-no-nosql-not-supported (0.00s) + --- PASS: TestHandler_checkAction/standalone-nosql-supported (0.00s) === RUN TestHandler_loadExternalAccountKey +=== RUN TestHandler_loadExternalAccountKey/fail/no-key +2025/04/16 19:40:34 ACME External Account Key not found +2025/04/16 19:40:34 {"type":"notFound","detail":"resource not found","message":"ACME External Account Key not found"} === RUN TestHandler_loadExternalAccountKey/ok/keyID === RUN TestHandler_loadExternalAccountKey/ok/reference === RUN TestHandler_loadExternalAccountKey/fail/keyID-not-found-error -2026/05/18 23:57:34 ACME External Account Key not found -2026/05/18 23:57:34 {"type":"notFound","detail":"resource not found","message":"ACME External Account Key not found"} +2025/04/16 19:40:34 ACME External Account Key not found +2025/04/16 19:40:34 {"type":"notFound","detail":"resource not found","message":"ACME External Account Key not found"} === RUN TestHandler_loadExternalAccountKey/fail/keyID-error -2026/05/18 23:57:34 error retrieving ACME External Account Key: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving ACME External Account Key: force"} +2025/04/16 19:40:34 error retrieving ACME External Account Key: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving ACME External Account Key: force"} === RUN TestHandler_loadExternalAccountKey/fail/reference-not-found-error -2026/05/18 23:57:34 ACME External Account Key not found -2026/05/18 23:57:34 {"type":"notFound","detail":"resource not found","message":"ACME External Account Key not found"} +2025/04/16 19:40:34 ACME External Account Key not found +2025/04/16 19:40:34 {"type":"notFound","detail":"resource not found","message":"ACME External Account Key not found"} === RUN TestHandler_loadExternalAccountKey/fail/reference-error -2026/05/18 23:57:34 error retrieving ACME External Account Key: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving ACME External Account Key: force"} -=== RUN TestHandler_loadExternalAccountKey/fail/no-key -2026/05/18 23:57:34 ACME External Account Key not found -2026/05/18 23:57:34 {"type":"notFound","detail":"resource not found","message":"ACME External Account Key not found"} ---- PASS: TestHandler_loadExternalAccountKey (0.01s) +2025/04/16 19:40:34 error retrieving ACME External Account Key: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving ACME External Account Key: force"} +--- PASS: TestHandler_loadExternalAccountKey (0.00s) + --- PASS: TestHandler_loadExternalAccountKey/fail/no-key (0.00s) --- PASS: TestHandler_loadExternalAccountKey/ok/keyID (0.00s) --- PASS: TestHandler_loadExternalAccountKey/ok/reference (0.00s) --- PASS: TestHandler_loadExternalAccountKey/fail/keyID-not-found-error (0.00s) --- PASS: TestHandler_loadExternalAccountKey/fail/keyID-error (0.00s) --- PASS: TestHandler_loadExternalAccountKey/fail/reference-not-found-error (0.00s) --- PASS: TestHandler_loadExternalAccountKey/fail/reference-error (0.00s) - --- PASS: TestHandler_loadExternalAccountKey/fail/no-key (0.00s) === RUN TestPolicyAdminResponder_GetAuthorityPolicy -=== RUN TestPolicyAdminResponder_GetAuthorityPolicy/fail/linkedca -2026/05/18 23:57:34 policy operations not yet supported in linked deployments -2026/05/18 23:57:34 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} -=== RUN TestPolicyAdminResponder_GetAuthorityPolicy/fail/auth.GetAuthorityPolicy-error -2026/05/18 23:57:34 error retrieving authority policy: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving authority policy: force"} === RUN TestPolicyAdminResponder_GetAuthorityPolicy/fail/auth.GetAuthorityPolicy-not-found -2026/05/18 23:57:34 authority policy does not exist -2026/05/18 23:57:34 {"type":"notFound","detail":"resource not found","message":"authority policy does not exist"} +2025/04/16 19:40:34 authority policy does not exist +2025/04/16 19:40:34 {"type":"notFound","detail":"resource not found","message":"authority policy does not exist"} === RUN TestPolicyAdminResponder_GetAuthorityPolicy/ok ---- PASS: TestPolicyAdminResponder_GetAuthorityPolicy (0.00s) +=== RUN TestPolicyAdminResponder_GetAuthorityPolicy/fail/linkedca +2025/04/16 19:40:34 policy operations not yet supported in linked deployments +2025/04/16 19:40:34 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} +=== RUN TestPolicyAdminResponder_GetAuthorityPolicy/fail/auth.GetAuthorityPolicy-error +2025/04/16 19:40:34 error retrieving authority policy: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving authority policy: force"} +--- PASS: TestPolicyAdminResponder_GetAuthorityPolicy (0.01s) + --- PASS: TestPolicyAdminResponder_GetAuthorityPolicy/fail/auth.GetAuthorityPolicy-not-found (0.00s) + --- PASS: TestPolicyAdminResponder_GetAuthorityPolicy/ok (0.01s) --- PASS: TestPolicyAdminResponder_GetAuthorityPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_GetAuthorityPolicy/fail/auth.GetAuthorityPolicy-error (0.00s) - --- PASS: TestPolicyAdminResponder_GetAuthorityPolicy/fail/auth.GetAuthorityPolicy-not-found (0.00s) - --- PASS: TestPolicyAdminResponder_GetAuthorityPolicy/ok (0.00s) === RUN TestPolicyAdminResponder_CreateAuthorityPolicy -=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/existing-policy -2026/05/18 23:57:34 authority already has a policy -2026/05/18 23:57:34 {"type":"conflict","detail":"conflict","message":"authority already has a policy"} -=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/read.ProtoJSON -2026/05/18 23:57:34 proto: syntax error (line 1:2): invalid value ? === RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/validatePolicy -2026/05/18 23:57:34 error validating authority policy: cannot parse permitted URI domain constraint "https://example.com": URI domain constraint "https://example.com" contains scheme (not supported yet) -2026/05/18 23:57:34 {"type":"badRequest","detail":"bad request","message":"error validating authority policy: cannot parse permitted URI domain constraint \"https://example.com\": URI domain constraint \"https://example.com\" contains scheme (not supported yet)"} +2025/04/16 19:40:34 error validating authority policy: cannot parse permitted URI domain constraint "https://example.com": URI domain constraint "https://example.com" contains scheme (not supported yet) +2025/04/16 19:40:34 {"type":"badRequest","detail":"bad request","message":"error validating authority policy: cannot parse permitted URI domain constraint \"https://example.com\": URI domain constraint \"https://example.com\" contains scheme (not supported yet)"} === RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-policy-admin-lockout-error -2026/05/18 23:57:34 error storing authority policy: admin lock out -2026/05/18 23:57:34 {"type":"badRequest","detail":"bad request","message":"error storing authority policy: admin lock out"} +2025/04/16 19:40:34 error storing authority policy: admin lock out +2025/04/16 19:40:34 {"type":"badRequest","detail":"bad request","message":"error storing authority policy: admin lock out"} === RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-error -2026/05/18 23:57:34 error storing authority policy: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error storing authority policy: force"} +2025/04/16 19:40:34 error storing authority policy: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error storing authority policy: force"} === RUN TestPolicyAdminResponder_CreateAuthorityPolicy/ok === RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/linkedca -2026/05/18 23:57:34 policy operations not yet supported in linked deployments -2026/05/18 23:57:34 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} +2025/04/16 19:40:34 policy operations not yet supported in linked deployments +2025/04/16 19:40:34 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} === RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/auth.GetAuthorityPolicy-error -2026/05/18 23:57:34 error retrieving authority policy: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving authority policy: force"} ---- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/existing-policy (0.00s) - --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/read.ProtoJSON (0.00s) +2025/04/16 19:40:34 error retrieving authority policy: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving authority policy: force"} +=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/existing-policy +2025/04/16 19:40:34 authority already has a policy +2025/04/16 19:40:34 {"type":"conflict","detail":"conflict","message":"authority already has a policy"} +=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/read.ProtoJSON +2025/04/16 19:40:34 proto: syntax error (line 1:2): invalid value ? +--- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy (0.01s) --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/validatePolicy (0.00s) --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-policy-admin-lockout-error (0.00s) --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-error (0.00s) --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/ok (0.00s) --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/auth.GetAuthorityPolicy-error (0.00s) + --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/existing-policy (0.00s) + --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/read.ProtoJSON (0.00s) === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy -=== RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/read.ProtoJSON -2026/05/18 23:57:34 proto: syntax error (line 1:2): invalid value ? -=== RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/validatePolicy -2026/05/18 23:57:34 error validating authority policy: cannot parse permitted URI domain constraint "https://example.com": URI domain constraint "https://example.com" contains scheme (not supported yet) -2026/05/18 23:57:34 {"type":"badRequest","detail":"bad request","message":"error validating authority policy: cannot parse permitted URI domain constraint \"https://example.com\": URI domain constraint \"https://example.com\" contains scheme (not supported yet)"} -=== RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-policy-admin-lockout-error -2026/05/18 23:57:34 error updating authority policy: admin lock out -2026/05/18 23:57:34 {"type":"badRequest","detail":"bad request","message":"error updating authority policy: admin lock out"} -=== RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-error -2026/05/18 23:57:34 error updating authority policy: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error updating authority policy: force"} === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/ok === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/linkedca -2026/05/18 23:57:34 policy operations not yet supported in linked deployments -2026/05/18 23:57:34 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} +2025/04/16 19:40:34 policy operations not yet supported in linked deployments +2025/04/16 19:40:34 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/auth.GetAuthorityPolicy-error -2026/05/18 23:57:34 error retrieving authority policy: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving authority policy: force"} +2025/04/16 19:40:34 error retrieving authority policy: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving authority policy: force"} === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/no-existing-policy -2026/05/18 23:57:34 authority policy does not exist -2026/05/18 23:57:34 {"type":"notFound","detail":"resource not found","message":"authority policy does not exist"} +2025/04/16 19:40:34 authority policy does not exist +2025/04/16 19:40:34 {"type":"notFound","detail":"resource not found","message":"authority policy does not exist"} +=== RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/read.ProtoJSON +2025/04/16 19:40:34 proto: syntax error (line 1:2): invalid value ? +=== RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/validatePolicy +2025/04/16 19:40:34 error validating authority policy: cannot parse permitted URI domain constraint "https://example.com": URI domain constraint "https://example.com" contains scheme (not supported yet) +2025/04/16 19:40:34 {"type":"badRequest","detail":"bad request","message":"error validating authority policy: cannot parse permitted URI domain constraint \"https://example.com\": URI domain constraint \"https://example.com\" contains scheme (not supported yet)"} +=== RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-policy-admin-lockout-error +2025/04/16 19:40:34 error updating authority policy: admin lock out +2025/04/16 19:40:34 {"type":"badRequest","detail":"bad request","message":"error updating authority policy: admin lock out"} +=== RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-error +2025/04/16 19:40:34 error updating authority policy: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error updating authority policy: force"} --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/read.ProtoJSON (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/validatePolicy (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-policy-admin-lockout-error (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-error (0.00s) --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/ok (0.00s) --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/auth.GetAuthorityPolicy-error (0.00s) --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/no-existing-policy (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/read.ProtoJSON (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/validatePolicy (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-policy-admin-lockout-error (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-error (0.00s) === RUN TestPolicyAdminResponder_DeleteAuthorityPolicy +=== RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/linkedca +2025/04/16 19:40:34 policy operations not yet supported in linked deployments +2025/04/16 19:40:34 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} +=== RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/auth.GetAuthorityPolicy-error +2025/04/16 19:40:34 error retrieving authority policy: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving authority policy: force"} === RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/no-existing-policy -2026/05/18 23:57:34 authority policy does not exist -2026/05/18 23:57:34 {"type":"notFound","detail":"resource not found","message":"authority policy does not exist"} +2025/04/16 19:40:34 authority policy does not exist +2025/04/16 19:40:34 {"type":"notFound","detail":"resource not found","message":"authority policy does not exist"} === RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/auth.RemoveAuthorityPolicy-error -2026/05/18 23:57:34 error deleting authority policy: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error deleting authority policy: force"} +2025/04/16 19:40:34 error deleting authority policy: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error deleting authority policy: force"} === RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/ok -=== RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/linkedca -2026/05/18 23:57:34 policy operations not yet supported in linked deployments -2026/05/18 23:57:34 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} -=== RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/auth.GetAuthorityPolicy-error -2026/05/18 23:57:34 error retrieving authority policy: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error retrieving authority policy: force"} ---- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/no-existing-policy (0.00s) - --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/auth.RemoveAuthorityPolicy-error (0.00s) - --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/ok (0.00s) +--- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy (0.03s) --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/auth.GetAuthorityPolicy-error (0.00s) + --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/no-existing-policy (0.00s) + --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/auth.RemoveAuthorityPolicy-error (0.03s) + --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/ok (0.00s) === RUN TestPolicyAdminResponder_GetProvisionerPolicy +=== RUN TestPolicyAdminResponder_GetProvisionerPolicy/ok === RUN TestPolicyAdminResponder_GetProvisionerPolicy/fail/linkedca -2026/05/18 23:57:34 policy operations not yet supported in linked deployments -2026/05/18 23:57:34 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} +2025/04/16 19:40:34 policy operations not yet supported in linked deployments +2025/04/16 19:40:34 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} === RUN TestPolicyAdminResponder_GetProvisionerPolicy/fail/prov-no-policy -2026/05/18 23:57:34 provisioner policy does not exist -2026/05/18 23:57:34 {"type":"notFound","detail":"resource not found","message":"provisioner policy does not exist"} -=== RUN TestPolicyAdminResponder_GetProvisionerPolicy/ok +2025/04/16 19:40:34 provisioner policy does not exist +2025/04/16 19:40:34 {"type":"notFound","detail":"resource not found","message":"provisioner policy does not exist"} --- PASS: TestPolicyAdminResponder_GetProvisionerPolicy (0.00s) + --- PASS: TestPolicyAdminResponder_GetProvisionerPolicy/ok (0.00s) --- PASS: TestPolicyAdminResponder_GetProvisionerPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_GetProvisionerPolicy/fail/prov-no-policy (0.00s) - --- PASS: TestPolicyAdminResponder_GetProvisionerPolicy/ok (0.00s) === RUN TestPolicyAdminResponder_CreateProvisionerPolicy +=== RUN TestPolicyAdminResponder_CreateProvisionerPolicy/ok +=== RUN TestPolicyAdminResponder_CreateProvisionerPolicy/fail/linkedca +2025/04/16 19:40:34 policy operations not yet supported in linked deployments +2025/04/16 19:40:34 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} +=== RUN TestPolicyAdminResponder_CreateProvisionerPolicy/fail/existing-policy +2025/04/16 19:40:34 provisioner provName already has a policy +2025/04/16 19:40:34 {"type":"conflict","detail":"conflict","message":"provisioner provName already has a policy"} === RUN TestPolicyAdminResponder_CreateProvisionerPolicy/fail/read.ProtoJSON -2026/05/18 23:57:34 proto: syntax error (line 1:2): invalid value ? +2025/04/16 19:40:34 proto: syntax error (line 1:2): invalid value ? === RUN TestPolicyAdminResponder_CreateProvisionerPolicy/fail/validatePolicy -2026/05/18 23:57:34 error validating provisioner policy: cannot parse permitted URI domain constraint "https://example.com": URI domain constraint "https://example.com" contains scheme (not supported yet) -2026/05/18 23:57:34 {"type":"badRequest","detail":"bad request","message":"error validating provisioner policy: cannot parse permitted URI domain constraint \"https://example.com\": URI domain constraint \"https://example.com\" contains scheme (not supported yet)"} +2025/04/16 19:40:34 error validating provisioner policy: cannot parse permitted URI domain constraint "https://example.com": URI domain constraint "https://example.com" contains scheme (not supported yet) +2025/04/16 19:40:34 {"type":"badRequest","detail":"bad request","message":"error validating provisioner policy: cannot parse permitted URI domain constraint \"https://example.com\": URI domain constraint \"https://example.com\" contains scheme (not supported yet)"} === RUN TestPolicyAdminResponder_CreateProvisionerPolicy/fail/auth.UpdateProvisioner-policy-admin-lockout-error -2026/05/18 23:57:34 error creating provisioner policy: admin lock out -2026/05/18 23:57:34 {"type":"badRequest","detail":"bad request","message":"error creating provisioner policy: admin lock out"} +2025/04/16 19:40:34 error creating provisioner policy: admin lock out +2025/04/16 19:40:34 {"type":"badRequest","detail":"bad request","message":"error creating provisioner policy: admin lock out"} === RUN TestPolicyAdminResponder_CreateProvisionerPolicy/fail/auth.UpdateProvisioner-error -2026/05/18 23:57:34 error creating provisioner policy: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error creating provisioner policy: force"} -=== RUN TestPolicyAdminResponder_CreateProvisionerPolicy/ok -=== RUN TestPolicyAdminResponder_CreateProvisionerPolicy/fail/linkedca -2026/05/18 23:57:34 policy operations not yet supported in linked deployments -2026/05/18 23:57:34 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} -=== RUN TestPolicyAdminResponder_CreateProvisionerPolicy/fail/existing-policy -2026/05/18 23:57:34 provisioner provName already has a policy -2026/05/18 23:57:34 {"type":"conflict","detail":"conflict","message":"provisioner provName already has a policy"} +2025/04/16 19:40:34 error creating provisioner policy: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error creating provisioner policy: force"} --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy (0.00s) + --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/ok (0.00s) + --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/fail/linkedca (0.00s) + --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/fail/existing-policy (0.00s) --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/fail/read.ProtoJSON (0.00s) --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/fail/validatePolicy (0.00s) --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/fail/auth.UpdateProvisioner-policy-admin-lockout-error (0.00s) --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/fail/auth.UpdateProvisioner-error (0.00s) - --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/ok (0.00s) - --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/fail/linkedca (0.00s) - --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/fail/existing-policy (0.00s) === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy -=== RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/linkedca -2026/05/18 23:57:34 policy operations not yet supported in linked deployments -2026/05/18 23:57:34 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} -=== RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/no-existing-policy -2026/05/18 23:57:34 provisioner policy does not exist -2026/05/18 23:57:34 {"type":"notFound","detail":"resource not found","message":"provisioner policy does not exist"} === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/read.ProtoJSON -2026/05/18 23:57:34 proto: syntax error (line 1:2): invalid value ? +2025/04/16 19:40:34 proto: syntax error (line 1:2): invalid value ? === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/validatePolicy -2026/05/18 23:57:34 error validating provisioner policy: cannot parse permitted URI domain constraint "https://example.com": URI domain constraint "https://example.com" contains scheme (not supported yet) -2026/05/18 23:57:34 {"type":"badRequest","detail":"bad request","message":"error validating provisioner policy: cannot parse permitted URI domain constraint \"https://example.com\": URI domain constraint \"https://example.com\" contains scheme (not supported yet)"} +2025/04/16 19:40:34 error validating provisioner policy: cannot parse permitted URI domain constraint "https://example.com": URI domain constraint "https://example.com" contains scheme (not supported yet) +2025/04/16 19:40:34 {"type":"badRequest","detail":"bad request","message":"error validating provisioner policy: cannot parse permitted URI domain constraint \"https://example.com\": URI domain constraint \"https://example.com\" contains scheme (not supported yet)"} === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/auth.UpdateProvisioner-policy-admin-lockout-error -2026/05/18 23:57:34 error updating provisioner policy: admin lock out -2026/05/18 23:57:34 {"type":"badRequest","detail":"bad request","message":"error updating provisioner policy: admin lock out"} +2025/04/16 19:40:34 error updating provisioner policy: admin lock out +2025/04/16 19:40:34 {"type":"badRequest","detail":"bad request","message":"error updating provisioner policy: admin lock out"} === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/auth.UpdateProvisioner-error -2026/05/18 23:57:34 error updating provisioner policy: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error updating provisioner policy: force"} +2025/04/16 19:40:34 error updating provisioner policy: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error updating provisioner policy: force"} === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/ok +=== RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/linkedca +2025/04/16 19:40:34 policy operations not yet supported in linked deployments +2025/04/16 19:40:34 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} +=== RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/no-existing-policy +2025/04/16 19:40:34 provisioner policy does not exist +2025/04/16 19:40:34 {"type":"notFound","detail":"resource not found","message":"provisioner policy does not exist"} --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/linkedca (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/no-existing-policy (0.00s) --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/read.ProtoJSON (0.00s) --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/validatePolicy (0.00s) --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/auth.UpdateProvisioner-policy-admin-lockout-error (0.00s) --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/auth.UpdateProvisioner-error (0.00s) --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/ok (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/linkedca (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/no-existing-policy (0.00s) === RUN TestPolicyAdminResponder_DeleteProvisionerPolicy -=== RUN TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/auth.UpdateProvisioner-error -2026/05/18 23:57:34 error deleting provisioner policy: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error deleting provisioner policy: force"} -=== RUN TestPolicyAdminResponder_DeleteProvisionerPolicy/ok === RUN TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/linkedca -2026/05/18 23:57:34 policy operations not yet supported in linked deployments -2026/05/18 23:57:34 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} +2025/04/16 19:40:34 policy operations not yet supported in linked deployments +2025/04/16 19:40:34 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} === RUN TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/no-existing-policy -2026/05/18 23:57:34 provisioner policy does not exist -2026/05/18 23:57:34 {"type":"notFound","detail":"resource not found","message":"provisioner policy does not exist"} +2025/04/16 19:40:34 provisioner policy does not exist +2025/04/16 19:40:34 {"type":"notFound","detail":"resource not found","message":"provisioner policy does not exist"} +=== RUN TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/auth.UpdateProvisioner-error +2025/04/16 19:40:34 error deleting provisioner policy: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error deleting provisioner policy: force"} +=== RUN TestPolicyAdminResponder_DeleteProvisionerPolicy/ok --- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/auth.UpdateProvisioner-error (0.00s) - --- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy/ok (0.00s) --- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/no-existing-policy (0.00s) + --- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/auth.UpdateProvisioner-error (0.00s) + --- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy/ok (0.00s) === RUN TestPolicyAdminResponder_GetACMEAccountPolicy === RUN TestPolicyAdminResponder_GetACMEAccountPolicy/fail/linkedca -2026/05/18 23:57:34 policy operations not yet supported in linked deployments -2026/05/18 23:57:34 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} +2025/04/16 19:40:34 policy operations not yet supported in linked deployments +2025/04/16 19:40:34 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} === RUN TestPolicyAdminResponder_GetACMEAccountPolicy/fail/no-policy -2026/05/18 23:57:34 ACME EAK policy does not exist -2026/05/18 23:57:34 {"type":"notFound","detail":"resource not found","message":"ACME EAK policy does not exist"} +2025/04/16 19:40:34 ACME EAK policy does not exist +2025/04/16 19:40:34 {"type":"notFound","detail":"resource not found","message":"ACME EAK policy does not exist"} === RUN TestPolicyAdminResponder_GetACMEAccountPolicy/ok --- PASS: TestPolicyAdminResponder_GetACMEAccountPolicy (0.00s) --- PASS: TestPolicyAdminResponder_GetACMEAccountPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_GetACMEAccountPolicy/fail/no-policy (0.00s) --- PASS: TestPolicyAdminResponder_GetACMEAccountPolicy/ok (0.00s) === RUN TestPolicyAdminResponder_CreateACMEAccountPolicy +=== RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/ok +=== RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/linkedca +2025/04/16 19:40:34 policy operations not yet supported in linked deployments +2025/04/16 19:40:34 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} === RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/existing-policy -2026/05/18 23:57:34 ACME EAK eakID already has a policy -2026/05/18 23:57:34 {"type":"conflict","detail":"conflict","message":"ACME EAK eakID already has a policy"} +2025/04/16 19:40:34 ACME EAK eakID already has a policy +2025/04/16 19:40:34 {"type":"conflict","detail":"conflict","message":"ACME EAK eakID already has a policy"} === RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/read.ProtoJSON -2026/05/18 23:57:34 proto: syntax error (line 1:2): invalid value ? +2025/04/16 19:40:34 proto: syntax error (line 1:2): invalid value ? === RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/validatePolicy -2026/05/18 23:57:34 error validating ACME EAK policy: cannot parse permitted URI domain constraint "https://example.com": URI domain constraint "https://example.com" contains scheme (not supported yet) -2026/05/18 23:57:34 {"type":"badRequest","detail":"bad request","message":"error validating ACME EAK policy: cannot parse permitted URI domain constraint \"https://example.com\": URI domain constraint \"https://example.com\" contains scheme (not supported yet)"} +2025/04/16 19:40:34 error validating ACME EAK policy: cannot parse permitted URI domain constraint "https://example.com": URI domain constraint "https://example.com" contains scheme (not supported yet) +2025/04/16 19:40:34 {"type":"badRequest","detail":"bad request","message":"error validating ACME EAK policy: cannot parse permitted URI domain constraint \"https://example.com\": URI domain constraint \"https://example.com\" contains scheme (not supported yet)"} === RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error -2026/05/18 23:57:34 error creating ACME EAK policy: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error creating ACME EAK policy: force"} -=== RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/ok -=== RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/linkedca -2026/05/18 23:57:34 policy operations not yet supported in linked deployments -2026/05/18 23:57:34 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} +2025/04/16 19:40:34 error creating ACME EAK policy: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error creating ACME EAK policy: force"} --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy (0.00s) + --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/ok (0.00s) + --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/existing-policy (0.00s) --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/read.ProtoJSON (0.00s) --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/validatePolicy (0.00s) --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error (0.00s) - --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/ok (0.00s) - --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/linkedca (0.00s) === RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy -=== RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/no-existing-policy -2026/05/18 23:57:34 ACME EAK policy does not exist -2026/05/18 23:57:34 {"type":"notFound","detail":"resource not found","message":"ACME EAK policy does not exist"} -=== RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/read.ProtoJSON -2026/05/18 23:57:34 proto: syntax error (line 1:2): invalid value ? === RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/validatePolicy -2026/05/18 23:57:34 error validating ACME EAK policy: cannot parse permitted URI domain constraint "https://example.com": URI domain constraint "https://example.com" contains scheme (not supported yet) -2026/05/18 23:57:34 {"type":"badRequest","detail":"bad request","message":"error validating ACME EAK policy: cannot parse permitted URI domain constraint \"https://example.com\": URI domain constraint \"https://example.com\" contains scheme (not supported yet)"} +2025/04/16 19:40:34 error validating ACME EAK policy: cannot parse permitted URI domain constraint "https://example.com": URI domain constraint "https://example.com" contains scheme (not supported yet) +2025/04/16 19:40:34 {"type":"badRequest","detail":"bad request","message":"error validating ACME EAK policy: cannot parse permitted URI domain constraint \"https://example.com\": URI domain constraint \"https://example.com\" contains scheme (not supported yet)"} === RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error -2026/05/18 23:57:34 error updating ACME EAK policy: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error updating ACME EAK policy: force"} +2025/04/16 19:40:34 error updating ACME EAK policy: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error updating ACME EAK policy: force"} === RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/ok === RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/linkedca -2026/05/18 23:57:34 policy operations not yet supported in linked deployments -2026/05/18 23:57:34 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} +2025/04/16 19:40:34 policy operations not yet supported in linked deployments +2025/04/16 19:40:34 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} +=== RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/no-existing-policy +2025/04/16 19:40:34 ACME EAK policy does not exist +2025/04/16 19:40:34 {"type":"notFound","detail":"resource not found","message":"ACME EAK policy does not exist"} +=== RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/read.ProtoJSON +2025/04/16 19:40:34 proto: syntax error (line 1:2): invalid value ? --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/no-existing-policy (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/read.ProtoJSON (0.00s) --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/validatePolicy (0.00s) --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error (0.00s) --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/ok (0.00s) --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/linkedca (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/no-existing-policy (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/read.ProtoJSON (0.00s) === RUN TestPolicyAdminResponder_DeleteACMEAccountPolicy -=== RUN TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/no-existing-policy -2026/05/18 23:57:34 ACME EAK policy does not exist -2026/05/18 23:57:34 {"type":"notFound","detail":"resource not found","message":"ACME EAK policy does not exist"} === RUN TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error -2026/05/18 23:57:34 error deleting ACME EAK policy: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error deleting ACME EAK policy: force"} +2025/04/16 19:40:34 error deleting ACME EAK policy: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error deleting ACME EAK policy: force"} === RUN TestPolicyAdminResponder_DeleteACMEAccountPolicy/ok === RUN TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/linkedca -2026/05/18 23:57:34 policy operations not yet supported in linked deployments -2026/05/18 23:57:34 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} +2025/04/16 19:40:34 policy operations not yet supported in linked deployments +2025/04/16 19:40:34 {"type":"notImplemented","detail":"not implemented","message":"policy operations not yet supported in linked deployments"} +=== RUN TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/no-existing-policy +2025/04/16 19:40:34 ACME EAK policy does not exist +2025/04/16 19:40:34 {"type":"notFound","detail":"resource not found","message":"ACME EAK policy does not exist"} --- PASS: TestPolicyAdminResponder_DeleteACMEAccountPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/no-existing-policy (0.00s) --- PASS: TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error (0.00s) --- PASS: TestPolicyAdminResponder_DeleteACMEAccountPolicy/ok (0.00s) --- PASS: TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/linkedca (0.00s) + --- PASS: TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/no-existing-policy (0.00s) === RUN Test_isBadRequest === RUN Test_isBadRequest/nil === RUN Test_isBadRequest/no-policy-error @@ -5902,38 +5938,38 @@ --- PASS: Test_validatePolicy/ssh_host (0.00s) --- PASS: Test_validatePolicy/ok (0.00s) === RUN TestHandler_GetProvisioner -=== RUN TestHandler_GetProvisioner/fail/auth.LoadProvisionerByID -2026/05/18 23:57:34 error loading provisioner provID: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner provID: force"} === RUN TestHandler_GetProvisioner/fail/auth.LoadProvisionerByName -2026/05/18 23:57:34 error loading provisioner provName: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner provName: force"} +2025/04/16 19:40:34 error loading provisioner provName: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner provName: force"} === RUN TestHandler_GetProvisioner/fail/db.GetProvisioner -2026/05/18 23:57:34 error loading provisioner provName: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner provName: force"} +2025/04/16 19:40:34 error loading provisioner provName: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner provName: force"} === RUN TestHandler_GetProvisioner/ok +=== RUN TestHandler_GetProvisioner/fail/auth.LoadProvisionerByID +2025/04/16 19:40:34 error loading provisioner provID: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner provID: force"} --- PASS: TestHandler_GetProvisioner (0.00s) - --- PASS: TestHandler_GetProvisioner/fail/auth.LoadProvisionerByID (0.00s) --- PASS: TestHandler_GetProvisioner/fail/auth.LoadProvisionerByName (0.00s) --- PASS: TestHandler_GetProvisioner/fail/db.GetProvisioner (0.00s) --- PASS: TestHandler_GetProvisioner/ok (0.00s) + --- PASS: TestHandler_GetProvisioner/fail/auth.LoadProvisionerByID (0.00s) === RUN TestHandler_GetProvisioners === RUN TestHandler_GetProvisioners/fail/parse-cursor -2026/05/18 23:57:34 error parsing cursor and limit from query params: limit 'X' is not an integer: strconv.Atoi: parsing "X": invalid syntax -2026/05/18 23:57:34 {"type":"badRequest","detail":"bad request","message":"error parsing cursor and limit from query params: limit 'X' is not an integer: strconv.Atoi: parsing \"X\": invalid syntax"} +2025/04/16 19:40:34 error parsing cursor and limit from query params: limit 'X' is not an integer: strconv.Atoi: parsing "X": invalid syntax +2025/04/16 19:40:34 {"type":"badRequest","detail":"bad request","message":"error parsing cursor and limit from query params: limit 'X' is not an integer: strconv.Atoi: parsing \"X\": invalid syntax"} === RUN TestHandler_GetProvisioners/fail/auth.GetProvisioners -2026/05/18 23:57:34 force +2025/04/16 19:40:34 force === RUN TestHandler_GetProvisioners/ok ---- PASS: TestHandler_GetProvisioners (0.00s) +--- PASS: TestHandler_GetProvisioners (0.01s) --- PASS: TestHandler_GetProvisioners/fail/parse-cursor (0.00s) --- PASS: TestHandler_GetProvisioners/fail/auth.GetProvisioners (0.00s) - --- PASS: TestHandler_GetProvisioners/ok (0.00s) + --- PASS: TestHandler_GetProvisioners/ok (0.01s) === RUN TestHandler_CreateProvisioner === RUN TestHandler_CreateProvisioner/fail/readProtoJSON -2026/05/18 23:57:34 proto: syntax error (line 1:2): invalid value ! +2025/04/16 19:40:34 proto: syntax error (line 1:2): invalid value ! === RUN TestHandler_CreateProvisioner/fail/auth.StoreProvisioner -2026/05/18 23:57:34 error storing provisioner provName: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error storing provisioner provName: force"} +2025/04/16 19:40:34 error storing provisioner provName: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error storing provisioner provName: force"} === RUN TestHandler_CreateProvisioner/ok --- PASS: TestHandler_CreateProvisioner (0.00s) --- PASS: TestHandler_CreateProvisioner/fail/readProtoJSON (0.00s) @@ -5941,14 +5977,14 @@ --- PASS: TestHandler_CreateProvisioner/ok (0.00s) === RUN TestHandler_DeleteProvisioner === RUN TestHandler_DeleteProvisioner/fail/auth.LoadProvisionerByID -2026/05/18 23:57:34 error loading provisioner provID: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner provID: force"} +2025/04/16 19:40:34 error loading provisioner provID: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner provID: force"} === RUN TestHandler_DeleteProvisioner/fail/auth.LoadProvisionerByName -2026/05/18 23:57:34 error loading provisioner provName: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner provName: force"} +2025/04/16 19:40:34 error loading provisioner provName: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner provName: force"} === RUN TestHandler_DeleteProvisioner/fail/auth.RemoveProvisioner -2026/05/18 23:57:34 error removing provisioner provName: force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error removing provisioner provName: force"} +2025/04/16 19:40:34 error removing provisioner provName: force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error removing provisioner provName: force"} === RUN TestHandler_DeleteProvisioner/ok --- PASS: TestHandler_DeleteProvisioner (0.00s) --- PASS: TestHandler_DeleteProvisioner/fail/auth.LoadProvisionerByID (0.00s) @@ -5956,45 +5992,45 @@ --- PASS: TestHandler_DeleteProvisioner/fail/auth.RemoveProvisioner (0.00s) --- PASS: TestHandler_DeleteProvisioner/ok (0.00s) === RUN TestHandler_UpdateProvisioner -=== RUN TestHandler_UpdateProvisioner/fail/readProtoJSON -2026/05/18 23:57:34 proto: syntax error (line 1:2): invalid value ! +=== RUN TestHandler_UpdateProvisioner/ok === RUN TestHandler_UpdateProvisioner/fail/auth.LoadProvisionerByName -2026/05/18 23:57:34 error loading provisioner from cached configuration 'provName': force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner from cached configuration 'provName': force"} +2025/04/16 19:40:34 error loading provisioner from cached configuration 'provName': force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner from cached configuration 'provName': force"} === RUN TestHandler_UpdateProvisioner/fail/db.GetProvisioner -2026/05/18 23:57:34 error loading provisioner from db 'provID': force -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner from db 'provID': force"} -=== RUN TestHandler_UpdateProvisioner/fail/change-authority-id-error -2026/05/18 23:57:34 cannot change provisioner authorityID -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"cannot change provisioner authorityID"} -=== RUN TestHandler_UpdateProvisioner/fail/change-createdAt-error -2026/05/18 23:57:34 cannot change provisioner createdAt -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"cannot change provisioner createdAt"} -=== RUN TestHandler_UpdateProvisioner/fail/change-deletedAt-error -2026/05/18 23:57:34 cannot change provisioner deletedAt -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"cannot change provisioner deletedAt"} +2025/04/16 19:40:34 error loading provisioner from db 'provID': force +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"error loading provisioner from db 'provID': force"} === RUN TestHandler_UpdateProvisioner/fail/change-id-error -2026/05/18 23:57:34 cannot change provisioner ID -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"cannot change provisioner ID"} +2025/04/16 19:40:34 cannot change provisioner ID +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"cannot change provisioner ID"} === RUN TestHandler_UpdateProvisioner/fail/change-type-error -2026/05/18 23:57:34 cannot change provisioner type -2026/05/18 23:57:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"cannot change provisioner type"} +2025/04/16 19:40:34 cannot change provisioner type +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"cannot change provisioner type"} +=== RUN TestHandler_UpdateProvisioner/fail/change-createdAt-error +2025/04/16 19:40:34 cannot change provisioner createdAt +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"cannot change provisioner createdAt"} +=== RUN TestHandler_UpdateProvisioner/fail/change-deletedAt-error +2025/04/16 19:40:34 cannot change provisioner deletedAt +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"cannot change provisioner deletedAt"} +=== RUN TestHandler_UpdateProvisioner/fail/readProtoJSON +2025/04/16 19:40:34 proto: syntax error (line 1:2): invalid value ! +=== RUN TestHandler_UpdateProvisioner/fail/change-authority-id-error +2025/04/16 19:40:34 cannot change provisioner authorityID +2025/04/16 19:40:34 {"type":"internalServerError","detail":"the server experienced an internal error","message":"cannot change provisioner authorityID"} === RUN TestHandler_UpdateProvisioner/fail/auth.UpdateProvisioner -2026/05/18 23:57:34 force -=== RUN TestHandler_UpdateProvisioner/ok ---- PASS: TestHandler_UpdateProvisioner (0.01s) - --- PASS: TestHandler_UpdateProvisioner/fail/readProtoJSON (0.00s) +2025/04/16 19:40:34 force +--- PASS: TestHandler_UpdateProvisioner (0.00s) + --- PASS: TestHandler_UpdateProvisioner/ok (0.00s) --- PASS: TestHandler_UpdateProvisioner/fail/auth.LoadProvisionerByName (0.00s) - --- PASS: TestHandler_UpdateProvisioner/fail/db.GetProvisioner (0.01s) - --- PASS: TestHandler_UpdateProvisioner/fail/change-authority-id-error (0.00s) - --- PASS: TestHandler_UpdateProvisioner/fail/change-createdAt-error (0.00s) - --- PASS: TestHandler_UpdateProvisioner/fail/change-deletedAt-error (0.00s) + --- PASS: TestHandler_UpdateProvisioner/fail/db.GetProvisioner (0.00s) --- PASS: TestHandler_UpdateProvisioner/fail/change-id-error (0.00s) --- PASS: TestHandler_UpdateProvisioner/fail/change-type-error (0.00s) + --- PASS: TestHandler_UpdateProvisioner/fail/change-createdAt-error (0.00s) + --- PASS: TestHandler_UpdateProvisioner/fail/change-deletedAt-error (0.00s) + --- PASS: TestHandler_UpdateProvisioner/fail/readProtoJSON (0.00s) + --- PASS: TestHandler_UpdateProvisioner/fail/change-authority-id-error (0.00s) --- PASS: TestHandler_UpdateProvisioner/fail/auth.UpdateProvisioner (0.00s) - --- PASS: TestHandler_UpdateProvisioner/ok (0.00s) PASS -ok github.com/smallstep/certificates/authority/admin/api 0.101s +ok github.com/smallstep/certificates/authority/admin/api 0.216s === RUN TestDB_getDBAdminBytes === RUN TestDB_getDBAdminBytes/fail/not-found === RUN TestDB_getDBAdminBytes/fail/db.Get-error @@ -6004,49 +6040,49 @@ --- PASS: TestDB_getDBAdminBytes/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBAdminBytes/ok (0.00s) === RUN TestDB_getDBAdmin +=== RUN TestDB_getDBAdmin/fail/deleted === RUN TestDB_getDBAdmin/ok === RUN TestDB_getDBAdmin/fail/not-found === RUN TestDB_getDBAdmin/fail/db.Get-error === RUN TestDB_getDBAdmin/fail/unmarshal-error -=== RUN TestDB_getDBAdmin/fail/deleted --- PASS: TestDB_getDBAdmin (0.00s) + --- PASS: TestDB_getDBAdmin/fail/deleted (0.00s) --- PASS: TestDB_getDBAdmin/ok (0.00s) --- PASS: TestDB_getDBAdmin/fail/not-found (0.00s) --- PASS: TestDB_getDBAdmin/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBAdmin/fail/unmarshal-error (0.00s) - --- PASS: TestDB_getDBAdmin/fail/deleted (0.00s) === RUN TestDB_unmarshalDBAdmin +=== RUN TestDB_unmarshalDBAdmin/fail/deleted-error === RUN TestDB_unmarshalDBAdmin/fail/authority-mismatch-error === RUN TestDB_unmarshalDBAdmin/ok === RUN TestDB_unmarshalDBAdmin/fail/unmarshal-error -=== RUN TestDB_unmarshalDBAdmin/fail/deleted-error --- PASS: TestDB_unmarshalDBAdmin (0.00s) + --- PASS: TestDB_unmarshalDBAdmin/fail/deleted-error (0.00s) --- PASS: TestDB_unmarshalDBAdmin/fail/authority-mismatch-error (0.00s) --- PASS: TestDB_unmarshalDBAdmin/ok (0.00s) --- PASS: TestDB_unmarshalDBAdmin/fail/unmarshal-error (0.00s) - --- PASS: TestDB_unmarshalDBAdmin/fail/deleted-error (0.00s) === RUN TestDB_unmarshalAdmin +=== RUN TestDB_unmarshalAdmin/ok === RUN TestDB_unmarshalAdmin/fail/unmarshal-error === RUN TestDB_unmarshalAdmin/fail/deleted-error -=== RUN TestDB_unmarshalAdmin/ok --- PASS: TestDB_unmarshalAdmin (0.00s) + --- PASS: TestDB_unmarshalAdmin/ok (0.00s) --- PASS: TestDB_unmarshalAdmin/fail/unmarshal-error (0.00s) --- PASS: TestDB_unmarshalAdmin/fail/deleted-error (0.00s) - --- PASS: TestDB_unmarshalAdmin/ok (0.00s) === RUN TestDB_GetAdmin +=== RUN TestDB_GetAdmin/fail/deleted === RUN TestDB_GetAdmin/fail/authorityID-mismatch === RUN TestDB_GetAdmin/ok === RUN TestDB_GetAdmin/fail/not-found === RUN TestDB_GetAdmin/fail/db.Get-error === RUN TestDB_GetAdmin/fail/unmarshal-error -=== RUN TestDB_GetAdmin/fail/deleted --- PASS: TestDB_GetAdmin (0.00s) + --- PASS: TestDB_GetAdmin/fail/deleted (0.00s) --- PASS: TestDB_GetAdmin/fail/authorityID-mismatch (0.00s) --- PASS: TestDB_GetAdmin/ok (0.00s) --- PASS: TestDB_GetAdmin/fail/not-found (0.00s) --- PASS: TestDB_GetAdmin/fail/db.Get-error (0.00s) --- PASS: TestDB_GetAdmin/fail/unmarshal-error (0.00s) - --- PASS: TestDB_GetAdmin/fail/deleted (0.00s) === RUN TestDB_DeleteAdmin === RUN TestDB_DeleteAdmin/fail/not-found === RUN TestDB_DeleteAdmin/fail/db.Get-error @@ -6058,15 +6094,15 @@ --- PASS: TestDB_DeleteAdmin/fail/save-error (0.00s) --- PASS: TestDB_DeleteAdmin/ok (0.00s) === RUN TestDB_UpdateAdmin +=== RUN TestDB_UpdateAdmin/ok === RUN TestDB_UpdateAdmin/fail/not-found === RUN TestDB_UpdateAdmin/fail/db.Get-error === RUN TestDB_UpdateAdmin/fail/save-error -=== RUN TestDB_UpdateAdmin/ok --- PASS: TestDB_UpdateAdmin (0.00s) + --- PASS: TestDB_UpdateAdmin/ok (0.00s) --- PASS: TestDB_UpdateAdmin/fail/not-found (0.00s) --- PASS: TestDB_UpdateAdmin/fail/db.Get-error (0.00s) --- PASS: TestDB_UpdateAdmin/fail/save-error (0.00s) - --- PASS: TestDB_UpdateAdmin/ok (0.00s) === RUN TestDB_CreateAdmin === RUN TestDB_CreateAdmin/fail/save-error === RUN TestDB_CreateAdmin/ok @@ -6074,37 +6110,37 @@ --- PASS: TestDB_CreateAdmin/fail/save-error (0.00s) --- PASS: TestDB_CreateAdmin/ok (0.00s) === RUN TestDB_GetAdmins -=== RUN TestDB_GetAdmins/ok/only-invalid -=== RUN TestDB_GetAdmins/ok === RUN TestDB_GetAdmins/fail/db.List-error === RUN TestDB_GetAdmins/fail/unmarshal-error === RUN TestDB_GetAdmins/ok/none +=== RUN TestDB_GetAdmins/ok/only-invalid +=== RUN TestDB_GetAdmins/ok --- PASS: TestDB_GetAdmins (0.00s) - --- PASS: TestDB_GetAdmins/ok/only-invalid (0.00s) - --- PASS: TestDB_GetAdmins/ok (0.00s) --- PASS: TestDB_GetAdmins/fail/db.List-error (0.00s) --- PASS: TestDB_GetAdmins/fail/unmarshal-error (0.00s) --- PASS: TestDB_GetAdmins/ok/none (0.00s) + --- PASS: TestDB_GetAdmins/ok/only-invalid (0.00s) + --- PASS: TestDB_GetAdmins/ok (0.00s) === RUN TestDB_getDBAuthorityPolicyBytes +=== RUN TestDB_getDBAuthorityPolicyBytes/ok === RUN TestDB_getDBAuthorityPolicyBytes/fail/not-found === RUN TestDB_getDBAuthorityPolicyBytes/fail/db.Get-error -=== RUN TestDB_getDBAuthorityPolicyBytes/ok --- PASS: TestDB_getDBAuthorityPolicyBytes (0.00s) + --- PASS: TestDB_getDBAuthorityPolicyBytes/ok (0.00s) --- PASS: TestDB_getDBAuthorityPolicyBytes/fail/not-found (0.00s) --- PASS: TestDB_getDBAuthorityPolicyBytes/fail/db.Get-error (0.00s) - --- PASS: TestDB_getDBAuthorityPolicyBytes/ok (0.00s) === RUN TestDB_getDBAuthorityPolicy -=== RUN TestDB_getDBAuthorityPolicy/fail/unmarshal-error === RUN TestDB_getDBAuthorityPolicy/fail/authorityID-error === RUN TestDB_getDBAuthorityPolicy/ok/empty-bytes === RUN TestDB_getDBAuthorityPolicy/ok === RUN TestDB_getDBAuthorityPolicy/fail/not-found +=== RUN TestDB_getDBAuthorityPolicy/fail/unmarshal-error --- PASS: TestDB_getDBAuthorityPolicy (0.00s) - --- PASS: TestDB_getDBAuthorityPolicy/fail/unmarshal-error (0.00s) --- PASS: TestDB_getDBAuthorityPolicy/fail/authorityID-error (0.00s) --- PASS: TestDB_getDBAuthorityPolicy/ok/empty-bytes (0.00s) --- PASS: TestDB_getDBAuthorityPolicy/ok (0.00s) --- PASS: TestDB_getDBAuthorityPolicy/fail/not-found (0.00s) + --- PASS: TestDB_getDBAuthorityPolicy/fail/unmarshal-error (0.00s) === RUN TestDB_CreateAuthorityPolicy === RUN TestDB_CreateAuthorityPolicy/fail/save-error === RUN TestDB_CreateAuthorityPolicy/ok @@ -6174,49 +6210,49 @@ --- PASS: TestDB_getDBProvisionerBytes/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBProvisionerBytes/ok (0.00s) === RUN TestDB_getDBProvisioner +=== RUN TestDB_getDBProvisioner/fail/deleted +=== RUN TestDB_getDBProvisioner/ok === RUN TestDB_getDBProvisioner/fail/not-found === RUN TestDB_getDBProvisioner/fail/db.Get-error === RUN TestDB_getDBProvisioner/fail/unmarshal-error -=== RUN TestDB_getDBProvisioner/fail/deleted -=== RUN TestDB_getDBProvisioner/ok --- PASS: TestDB_getDBProvisioner (0.00s) + --- PASS: TestDB_getDBProvisioner/fail/deleted (0.00s) + --- PASS: TestDB_getDBProvisioner/ok (0.00s) --- PASS: TestDB_getDBProvisioner/fail/not-found (0.00s) --- PASS: TestDB_getDBProvisioner/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBProvisioner/fail/unmarshal-error (0.00s) - --- PASS: TestDB_getDBProvisioner/fail/deleted (0.00s) - --- PASS: TestDB_getDBProvisioner/ok (0.00s) === RUN TestDB_unmarshalDBProvisioner -=== RUN TestDB_unmarshalDBProvisioner/fail/unmarshal-error === RUN TestDB_unmarshalDBProvisioner/fail/deleted-error === RUN TestDB_unmarshalDBProvisioner/fail/authority-mismatch-error === RUN TestDB_unmarshalDBProvisioner/ok +=== RUN TestDB_unmarshalDBProvisioner/fail/unmarshal-error --- PASS: TestDB_unmarshalDBProvisioner (0.00s) - --- PASS: TestDB_unmarshalDBProvisioner/fail/unmarshal-error (0.00s) --- PASS: TestDB_unmarshalDBProvisioner/fail/deleted-error (0.00s) --- PASS: TestDB_unmarshalDBProvisioner/fail/authority-mismatch-error (0.00s) --- PASS: TestDB_unmarshalDBProvisioner/ok (0.00s) + --- PASS: TestDB_unmarshalDBProvisioner/fail/unmarshal-error (0.00s) === RUN TestDB_unmarshalProvisioner +=== RUN TestDB_unmarshalProvisioner/fail/unmarshal-error === RUN TestDB_unmarshalProvisioner/fail/deleted-error === RUN TestDB_unmarshalProvisioner/ok -=== RUN TestDB_unmarshalProvisioner/fail/unmarshal-error --- PASS: TestDB_unmarshalProvisioner (0.00s) + --- PASS: TestDB_unmarshalProvisioner/fail/unmarshal-error (0.00s) --- PASS: TestDB_unmarshalProvisioner/fail/deleted-error (0.00s) --- PASS: TestDB_unmarshalProvisioner/ok (0.00s) - --- PASS: TestDB_unmarshalProvisioner/fail/unmarshal-error (0.00s) === RUN TestDB_GetProvisioner -=== RUN TestDB_GetProvisioner/fail/not-found -=== RUN TestDB_GetProvisioner/fail/db.Get-error === RUN TestDB_GetProvisioner/fail/unmarshal-error === RUN TestDB_GetProvisioner/fail/deleted === RUN TestDB_GetProvisioner/fail/authorityID-mismatch === RUN TestDB_GetProvisioner/ok +=== RUN TestDB_GetProvisioner/fail/not-found +=== RUN TestDB_GetProvisioner/fail/db.Get-error --- PASS: TestDB_GetProvisioner (0.00s) - --- PASS: TestDB_GetProvisioner/fail/not-found (0.00s) - --- PASS: TestDB_GetProvisioner/fail/db.Get-error (0.00s) --- PASS: TestDB_GetProvisioner/fail/unmarshal-error (0.00s) --- PASS: TestDB_GetProvisioner/fail/deleted (0.00s) --- PASS: TestDB_GetProvisioner/fail/authorityID-mismatch (0.00s) --- PASS: TestDB_GetProvisioner/ok (0.00s) + --- PASS: TestDB_GetProvisioner/fail/not-found (0.00s) + --- PASS: TestDB_GetProvisioner/fail/db.Get-error (0.00s) === RUN TestDB_DeleteProvisioner === RUN TestDB_DeleteProvisioner/fail/not-found === RUN TestDB_DeleteProvisioner/fail/db.Get-error @@ -6246,28 +6282,23 @@ --- PASS: TestDB_CreateProvisioner/fail/save-error (0.00s) --- PASS: TestDB_CreateProvisioner/ok (0.00s) === RUN TestDB_UpdateProvisioner +=== RUN TestDB_UpdateProvisioner/fail/not-found +=== RUN TestDB_UpdateProvisioner/fail/db.Get-error === RUN TestDB_UpdateProvisioner/fail/update-deleted === RUN TestDB_UpdateProvisioner/fail/update-type-error === RUN TestDB_UpdateProvisioner/fail/save-error === RUN TestDB_UpdateProvisioner/ok -=== RUN TestDB_UpdateProvisioner/fail/not-found -=== RUN TestDB_UpdateProvisioner/fail/db.Get-error --- PASS: TestDB_UpdateProvisioner (0.00s) + --- PASS: TestDB_UpdateProvisioner/fail/not-found (0.00s) + --- PASS: TestDB_UpdateProvisioner/fail/db.Get-error (0.00s) --- PASS: TestDB_UpdateProvisioner/fail/update-deleted (0.00s) --- PASS: TestDB_UpdateProvisioner/fail/update-type-error (0.00s) --- PASS: TestDB_UpdateProvisioner/fail/save-error (0.00s) --- PASS: TestDB_UpdateProvisioner/ok (0.00s) - --- PASS: TestDB_UpdateProvisioner/fail/not-found (0.00s) - --- PASS: TestDB_UpdateProvisioner/fail/db.Get-error (0.00s) PASS -ok github.com/smallstep/certificates/authority/admin/db/nosql 0.076s +ok github.com/smallstep/certificates/authority/admin/db/nosql 0.115s ? github.com/smallstep/certificates/authority/administrator [no test files] === RUN TestConfigValidate -=== RUN TestConfigValidate/tls-min>max -=== RUN TestConfigValidate/empty-address -=== RUN TestConfigValidate/invalid-address -=== RUN TestConfigValidate/empty-root -=== RUN TestConfigValidate/empty-intermediate-cert === RUN TestConfigValidate/empty-intermediate-key === RUN TestConfigValidate/empty-dnsNames === RUN TestConfigValidate/empty-TLS @@ -6276,20 +6307,25 @@ === RUN TestConfigValidate/empty-TLS-values tc.tls = {CipherSuites:[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256] MinVersion:1.2 MaxVersion:1.3 Renegotiation:false} *tc.config.TLS = {CipherSuites:[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256] MinVersion:1.2 MaxVersion:1.3 Renegotiation:false} +=== RUN TestConfigValidate/tls-min>max +=== RUN TestConfigValidate/invalid-address === RUN TestConfigValidate/custom-tls-values tc.tls = {CipherSuites:[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305] MinVersion:1.0 MaxVersion:1.1 Renegotiation:true} *tc.config.TLS = {CipherSuites:[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305] MinVersion:1.0 MaxVersion:1.1 Renegotiation:true} +=== RUN TestConfigValidate/empty-address +=== RUN TestConfigValidate/empty-root +=== RUN TestConfigValidate/empty-intermediate-cert --- PASS: TestConfigValidate (0.00s) - --- PASS: TestConfigValidate/tls-min>max (0.00s) - --- PASS: TestConfigValidate/empty-address (0.00s) - --- PASS: TestConfigValidate/invalid-address (0.00s) - --- PASS: TestConfigValidate/empty-root (0.00s) - --- PASS: TestConfigValidate/empty-intermediate-cert (0.00s) --- PASS: TestConfigValidate/empty-intermediate-key (0.00s) --- PASS: TestConfigValidate/empty-dnsNames (0.00s) --- PASS: TestConfigValidate/empty-TLS (0.00s) --- PASS: TestConfigValidate/empty-TLS-values (0.00s) + --- PASS: TestConfigValidate/tls-min>max (0.00s) + --- PASS: TestConfigValidate/invalid-address (0.00s) --- PASS: TestConfigValidate/custom-tls-values (0.00s) + --- PASS: TestConfigValidate/empty-address (0.00s) + --- PASS: TestConfigValidate/empty-root (0.00s) + --- PASS: TestConfigValidate/empty-intermediate-cert (0.00s) === RUN TestAuthConfigValidate === RUN TestAuthConfigValidate/fail-nil-authconfig === RUN TestAuthConfigValidate/ok-empty-provisioners @@ -6507,7 +6543,7 @@ --- PASS: Test_multiString_UnmarshalJSON/error (0.00s) --- PASS: Test_multiString_UnmarshalJSON/nil (0.00s) PASS -ok github.com/smallstep/certificates/authority/config 0.085s +ok github.com/smallstep/certificates/authority/config 0.117s === RUN TestX509PolicyOptions_IsWildcardLiteralAllowed === RUN TestX509PolicyOptions_IsWildcardLiteralAllowed/nil-options === RUN TestX509PolicyOptions_IsWildcardLiteralAllowed/not-set @@ -6529,21 +6565,21 @@ --- PASS: TestPolicyToCertificates/partial-policy (0.00s) --- PASS: TestPolicyToCertificates/full-policy (0.00s) PASS -ok github.com/smallstep/certificates/authority/policy 0.053s +ok github.com/smallstep/certificates/authority/policy 0.156s === RUN TestACME_Getters --- PASS: TestACME_Getters (0.00s) === RUN TestACME_Init -=== RUN TestACME_Init/fail-bad-claims -=== RUN TestACME_Init/ok === RUN TestACME_Init/fail-empty === RUN TestACME_Init/fail-empty-name === RUN TestACME_Init/fail-empty-type +=== RUN TestACME_Init/fail-bad-claims +=== RUN TestACME_Init/ok --- PASS: TestACME_Init (0.00s) - --- PASS: TestACME_Init/fail-bad-claims (0.00s) - --- PASS: TestACME_Init/ok (0.00s) --- PASS: TestACME_Init/fail-empty (0.00s) --- PASS: TestACME_Init/fail-empty-name (0.00s) --- PASS: TestACME_Init/fail-empty-type (0.00s) + --- PASS: TestACME_Init/fail-bad-claims (0.00s) + --- PASS: TestACME_Init/ok (0.00s) === RUN TestACME_AuthorizeRenew === RUN TestACME_AuthorizeRenew/fail/renew-disabled === RUN TestACME_AuthorizeRenew/ok @@ -6560,7 +6596,7 @@ === RUN TestAWS_GetTokenID/ok === RUN TestAWS_GetTokenID/ok_no_TOFU === RUN TestAWS_GetTokenID/fail ---- PASS: TestAWS_GetTokenID (0.01s) +--- PASS: TestAWS_GetTokenID (0.02s) --- PASS: TestAWS_GetTokenID/ok (0.00s) --- PASS: TestAWS_GetTokenID/ok_no_TOFU (0.00s) --- PASS: TestAWS_GetTokenID/fail (0.00s) @@ -6574,8 +6610,8 @@ === RUN TestAWS_GetIdentityToken/fail_read_identityURL === RUN TestAWS_GetIdentityToken/fail_read_signatureURL === RUN TestAWS_GetIdentityToken/fail_unmarshal_identityURL ---- PASS: TestAWS_GetIdentityToken (0.01s) - --- PASS: TestAWS_GetIdentityToken/ok (0.00s) +--- PASS: TestAWS_GetIdentityToken (0.02s) + --- PASS: TestAWS_GetIdentityToken/ok (0.01s) --- PASS: TestAWS_GetIdentityToken/ok_no_imds (0.00s) --- PASS: TestAWS_GetIdentityToken/fail_ca_url (0.00s) --- PASS: TestAWS_GetIdentityToken/fail_identityURL (0.00s) @@ -6602,50 +6638,50 @@ === RUN TestAWS_Init/fail/missing === RUN TestAWS_Init/fail/cert === RUN TestAWS_Init/fail_claims ---- PASS: TestAWS_Init (0.02s) +--- PASS: TestAWS_Init (0.00s) --- PASS: TestAWS_Init/ok (0.00s) --- PASS: TestAWS_Init/ok/v1 (0.00s) --- PASS: TestAWS_Init/ok/v2 (0.00s) --- PASS: TestAWS_Init/ok/empty (0.00s) --- PASS: TestAWS_Init/ok/duration (0.00s) - --- PASS: TestAWS_Init/ok/cert (0.01s) + --- PASS: TestAWS_Init/ok/cert (0.00s) --- PASS: TestAWS_Init/fail_type_ (0.00s) --- PASS: TestAWS_Init/fail_name (0.00s) --- PASS: TestAWS_Init/bad_instance_age (0.00s) --- PASS: TestAWS_Init/fail/imds (0.00s) --- PASS: TestAWS_Init/fail/missing (0.00s) --- PASS: TestAWS_Init/fail/cert (0.00s) - --- PASS: TestAWS_Init/fail_claims (0.01s) + --- PASS: TestAWS_Init/fail_claims (0.00s) === RUN TestAWS_authorizeToken +=== RUN TestAWS_authorizeToken/fail/invalid-account-id +=== RUN TestAWS_authorizeToken/ok === RUN TestAWS_authorizeToken/ok/identityCert -=== RUN TestAWS_authorizeToken/ok/identityCert2 -=== RUN TestAWS_authorizeToken/fail/bad-token === RUN TestAWS_authorizeToken/fail/empty-instance-id === RUN TestAWS_authorizeToken/fail/empty-private-ip === RUN TestAWS_authorizeToken/fail/empty-region -=== RUN TestAWS_authorizeToken/fail/invalid-token-issuer === RUN TestAWS_authorizeToken/fail/invalid-subject-disabled-custom-SANs === RUN TestAWS_authorizeToken/fail/instance-age -=== RUN TestAWS_authorizeToken/ok +=== RUN TestAWS_authorizeToken/ok/identityCert2 +=== RUN TestAWS_authorizeToken/fail/bad-token === RUN TestAWS_authorizeToken/fail/cannot-validate-sig === RUN TestAWS_authorizeToken/fail/empty-account-id +=== RUN TestAWS_authorizeToken/fail/invalid-token-issuer === RUN TestAWS_authorizeToken/fail/invalid-audience -=== RUN TestAWS_authorizeToken/fail/invalid-account-id ---- PASS: TestAWS_authorizeToken (0.17s) +--- PASS: TestAWS_authorizeToken (0.12s) + --- PASS: TestAWS_authorizeToken/fail/invalid-account-id (0.00s) + --- PASS: TestAWS_authorizeToken/ok (0.01s) --- PASS: TestAWS_authorizeToken/ok/identityCert (0.00s) - --- PASS: TestAWS_authorizeToken/ok/identityCert2 (0.00s) - --- PASS: TestAWS_authorizeToken/fail/bad-token (0.00s) --- PASS: TestAWS_authorizeToken/fail/empty-instance-id (0.00s) - --- PASS: TestAWS_authorizeToken/fail/empty-private-ip (0.01s) - --- PASS: TestAWS_authorizeToken/fail/empty-region (0.00s) - --- PASS: TestAWS_authorizeToken/fail/invalid-token-issuer (0.00s) + --- PASS: TestAWS_authorizeToken/fail/empty-private-ip (0.00s) + --- PASS: TestAWS_authorizeToken/fail/empty-region (0.01s) --- PASS: TestAWS_authorizeToken/fail/invalid-subject-disabled-custom-SANs (0.00s) --- PASS: TestAWS_authorizeToken/fail/instance-age (0.00s) - --- PASS: TestAWS_authorizeToken/ok (0.00s) - --- PASS: TestAWS_authorizeToken/fail/cannot-validate-sig (0.00s) + --- PASS: TestAWS_authorizeToken/ok/identityCert2 (0.00s) + --- PASS: TestAWS_authorizeToken/fail/bad-token (0.00s) + --- PASS: TestAWS_authorizeToken/fail/cannot-validate-sig (0.01s) --- PASS: TestAWS_authorizeToken/fail/empty-account-id (0.00s) + --- PASS: TestAWS_authorizeToken/fail/invalid-token-issuer (0.00s) --- PASS: TestAWS_authorizeToken/fail/invalid-audience (0.00s) - --- PASS: TestAWS_authorizeToken/fail/invalid-account-id (0.00s) === RUN TestAWS_AuthorizeSign === RUN TestAWS_AuthorizeSign/ok === RUN TestAWS_AuthorizeSign/ok#01 @@ -6665,16 +6701,16 @@ === RUN TestAWS_AuthorizeSign/fail_nbf === RUN TestAWS_AuthorizeSign/fail_key === RUN TestAWS_AuthorizeSign/fail_instance_age ---- PASS: TestAWS_AuthorizeSign (0.27s) +--- PASS: TestAWS_AuthorizeSign (0.21s) --- PASS: TestAWS_AuthorizeSign/ok (0.00s) - --- PASS: TestAWS_AuthorizeSign/ok#01 (0.01s) + --- PASS: TestAWS_AuthorizeSign/ok#01 (0.00s) --- PASS: TestAWS_AuthorizeSign/ok#02 (0.00s) --- PASS: TestAWS_AuthorizeSign/ok#03 (0.00s) --- PASS: TestAWS_AuthorizeSign/ok#04 (0.00s) --- PASS: TestAWS_AuthorizeSign/fail_account (0.00s) --- PASS: TestAWS_AuthorizeSign/fail_token (0.00s) --- PASS: TestAWS_AuthorizeSign/fail_subject (0.00s) - --- PASS: TestAWS_AuthorizeSign/fail_issuer (0.00s) + --- PASS: TestAWS_AuthorizeSign/fail_issuer (0.01s) --- PASS: TestAWS_AuthorizeSign/fail_audience (0.00s) --- PASS: TestAWS_AuthorizeSign/fail_account#01 (0.00s) --- PASS: TestAWS_AuthorizeSign/fail_instanceID (0.00s) @@ -6699,7 +6735,7 @@ === RUN TestAWS_AuthorizeSSHSign/fail-extra-principal === RUN TestAWS_AuthorizeSSHSign/fail-sshCA-disabled === RUN TestAWS_AuthorizeSSHSign/fail-invalid-token ---- PASS: TestAWS_AuthorizeSSHSign (0.17s) +--- PASS: TestAWS_AuthorizeSSHSign (0.63s) --- PASS: TestAWS_AuthorizeSSHSign/ok (0.00s) --- PASS: TestAWS_AuthorizeSSHSign/ok-rsa2048 (0.00s) --- PASS: TestAWS_AuthorizeSSHSign/ok-type (0.00s) @@ -6707,7 +6743,7 @@ --- PASS: TestAWS_AuthorizeSSHSign/ok-principal-ip (0.00s) --- PASS: TestAWS_AuthorizeSSHSign/ok-principal-hostname (0.00s) --- PASS: TestAWS_AuthorizeSSHSign/ok-options (0.00s) - --- PASS: TestAWS_AuthorizeSSHSign/ok-custom (0.00s) + --- PASS: TestAWS_AuthorizeSSHSign/ok-custom (0.01s) --- PASS: TestAWS_AuthorizeSSHSign/fail-rsa1024 (0.00s) --- PASS: TestAWS_AuthorizeSSHSign/fail-type (0.00s) --- PASS: TestAWS_AuthorizeSSHSign/fail-principal (0.00s) @@ -6727,7 +6763,7 @@ === RUN TestAzure_GetTokenID/ok_no_TOFU === RUN TestAzure_GetTokenID/fail_token === RUN TestAzure_GetTokenID/fail_claims ---- PASS: TestAzure_GetTokenID (0.02s) +--- PASS: TestAzure_GetTokenID (0.00s) --- PASS: TestAzure_GetTokenID/ok (0.00s) --- PASS: TestAzure_GetTokenID/ok_no_TOFU (0.00s) --- PASS: TestAzure_GetTokenID/fail_token (0.00s) @@ -6771,7 +6807,7 @@ === RUN TestAzure_authorizeToken/fail/invalid-tenant-id === RUN TestAzure_authorizeToken/fail/invalid-xms-mir-id === RUN TestAzure_authorizeToken/ok ---- PASS: TestAzure_authorizeToken (0.00s) +--- PASS: TestAzure_authorizeToken (0.01s) --- PASS: TestAzure_authorizeToken/fail/bad-token (0.00s) --- PASS: TestAzure_authorizeToken/fail/cannot-validate-sig (0.00s) --- PASS: TestAzure_authorizeToken/fail/invalid-token-issuer (0.00s) @@ -6794,7 +6830,7 @@ === RUN TestAzure_AuthorizeSign/fail_exp === RUN TestAzure_AuthorizeSign/fail_nbf === RUN TestAzure_AuthorizeSign/fail_key ---- PASS: TestAzure_AuthorizeSign (0.01s) +--- PASS: TestAzure_AuthorizeSign (0.02s) --- PASS: TestAzure_AuthorizeSign/ok (0.00s) --- PASS: TestAzure_AuthorizeSign/ok#01 (0.00s) --- PASS: TestAzure_AuthorizeSign/ok#02 (0.00s) @@ -6829,7 +6865,7 @@ === RUN TestAzure_AuthorizeSSHSign/fail-extra-principal === RUN TestAzure_AuthorizeSSHSign/fail-sshCA-disabled === RUN TestAzure_AuthorizeSSHSign/fail-invalid-token ---- PASS: TestAzure_AuthorizeSSHSign (1.11s) +--- PASS: TestAzure_AuthorizeSSHSign (0.80s) --- PASS: TestAzure_AuthorizeSSHSign/ok (0.00s) --- PASS: TestAzure_AuthorizeSSHSign/ok-rsa2048 (0.00s) --- PASS: TestAzure_AuthorizeSSHSign/ok-type (0.00s) @@ -6866,7 +6902,7 @@ === RUN TestCollection_Load/ok === RUN TestCollection_Load/fail === RUN TestCollection_Load/invalid ---- PASS: TestCollection_Load (0.19s) +--- PASS: TestCollection_Load (0.36s) --- PASS: TestCollection_Load/ok (0.00s) --- PASS: TestCollection_Load/fail (0.00s) --- PASS: TestCollection_Load/invalid (0.00s) @@ -6878,7 +6914,7 @@ === RUN TestCollection_LoadByToken/bad === RUN TestCollection_LoadByToken/fail === RUN TestCollection_LoadByToken/fail-no-k8sSa-provisioner ---- PASS: TestCollection_LoadByToken (0.52s) +--- PASS: TestCollection_LoadByToken (2.17s) --- PASS: TestCollection_LoadByToken/ok1 (0.00s) --- PASS: TestCollection_LoadByToken/ok2 (0.00s) --- PASS: TestCollection_LoadByToken/ok3 (0.00s) @@ -6893,7 +6929,7 @@ === RUN TestCollection_LoadByCertificate/noExtension === RUN TestCollection_LoadByCertificate/notFound === RUN TestCollection_LoadByCertificate/badCert ---- PASS: TestCollection_LoadByCertificate (0.13s) +--- PASS: TestCollection_LoadByCertificate (0.55s) --- PASS: TestCollection_LoadByCertificate/ok1 (0.00s) --- PASS: TestCollection_LoadByCertificate/ok2 (0.00s) --- PASS: TestCollection_LoadByCertificate/ok3 (0.00s) @@ -6904,7 +6940,7 @@ === RUN TestCollection_LoadEncryptedKey/ok === RUN TestCollection_LoadEncryptedKey/oidc === RUN TestCollection_LoadEncryptedKey/notFound ---- PASS: TestCollection_LoadEncryptedKey (0.13s) +--- PASS: TestCollection_LoadEncryptedKey (0.56s) --- PASS: TestCollection_LoadEncryptedKey/ok (0.00s) --- PASS: TestCollection_LoadEncryptedKey/oidc (0.00s) --- PASS: TestCollection_LoadEncryptedKey/notFound (0.00s) @@ -6913,7 +6949,7 @@ === RUN TestCollection_Store/ok2 === RUN TestCollection_Store/fail1 === RUN TestCollection_Store/fail2 ---- PASS: TestCollection_Store (0.15s) +--- PASS: TestCollection_Store (0.56s) --- PASS: TestCollection_Store/ok1 (0.00s) --- PASS: TestCollection_Store/ok2 (0.00s) --- PASS: TestCollection_Store/fail1 (0.00s) @@ -6927,7 +6963,7 @@ === RUN TestCollection_Find/1_to_5 === RUN TestCollection_Find/defaultLimit === RUN TestCollection_Find/overTheLimit ---- PASS: TestCollection_Find (1.94s) +--- PASS: TestCollection_Find (3.87s) --- PASS: TestCollection_Find/all (0.00s) --- PASS: TestCollection_Find/0_to_19 (0.00s) --- PASS: TestCollection_Find/0_to_9 (0.00s) @@ -6937,7 +6973,6 @@ --- PASS: TestCollection_Find/defaultLimit (0.00s) --- PASS: TestCollection_Find/overTheLimit (0.00s) === RUN Test_matchesAudience -=== RUN Test_matchesAudience/false === RUN Test_matchesAudience/true === RUN Test_matchesAudience/true,portsA === RUN Test_matchesAudience/true,portsB @@ -6945,8 +6980,8 @@ === RUN Test_matchesAudience/false_arg1_empty === RUN Test_matchesAudience/false_arg2_empty === RUN Test_matchesAudience/false_arg1,arg2_empty +=== RUN Test_matchesAudience/false --- PASS: Test_matchesAudience (0.00s) - --- PASS: Test_matchesAudience/false (0.00s) --- PASS: Test_matchesAudience/true (0.00s) --- PASS: Test_matchesAudience/true,portsA (0.00s) --- PASS: Test_matchesAudience/true,portsB (0.00s) @@ -6954,6 +6989,7 @@ --- PASS: Test_matchesAudience/false_arg1_empty (0.00s) --- PASS: Test_matchesAudience/false_arg2_empty (0.00s) --- PASS: Test_matchesAudience/false_arg1,arg2_empty (0.00s) + --- PASS: Test_matchesAudience/false (0.00s) === RUN Test_stripPort === RUN Test_stripPort/with_port === RUN Test_stripPort/with_no_port @@ -7125,9 +7161,9 @@ gcp_test.go:149: error on identity request: status=400, response=Bad Request === RUN TestGCP_GetIdentityToken/fail_url - gcp_test.go:149: error creating identity request: parse "://ca.smallstep.com?audience=https%3A%2F%2Fca%2F1.0%2Fsign%23gcp%2FVT1fBhhvOv&format=full&licenses=FALSE": missing protocol scheme + gcp_test.go:149: error creating identity request: parse "://ca.smallstep.com?audience=https%3A%2F%2Fca%2F1.0%2Fsign%23gcp%2Fe9iTEzrP1H&format=full&licenses=FALSE": missing protocol scheme === RUN TestGCP_GetIdentityToken/fail_connect - gcp_test.go:149: error doing identity request, are you in a GCP VM?: Get "foobarzar?audience=https%3A%2F%2Fca%2F1.0%2Fsign%23gcp%2FVT1fBhhvOv&format=full&licenses=FALSE": unsupported protocol scheme "" + gcp_test.go:149: error doing identity request, are you in a GCP VM?: Get "foobarzar?audience=https%3A%2F%2Fca%2F1.0%2Fsign%23gcp%2Fe9iTEzrP1H&format=full&licenses=FALSE": unsupported protocol scheme "" --- PASS: TestGCP_GetIdentityToken (0.01s) --- PASS: TestGCP_GetIdentityToken/ok (0.01s) --- PASS: TestGCP_GetIdentityToken/fail_ca_url (0.00s) @@ -7153,29 +7189,29 @@ --- PASS: TestGCP_Init/bad_claims (0.00s) --- PASS: TestGCP_Init/bad_certs (0.00s) === RUN TestGCP_authorizeToken -=== RUN TestGCP_authorizeToken/fail/cannot-validate-sig -=== RUN TestGCP_authorizeToken/fail/invalid-issuer -=== RUN TestGCP_authorizeToken/fail/invalid-serviceAccount -=== RUN TestGCP_authorizeToken/fail/invalid-projectID -=== RUN TestGCP_authorizeToken/fail/empty-instance-name -=== RUN TestGCP_authorizeToken/fail/empty-project-id -=== RUN TestGCP_authorizeToken/fail/bad-token -=== RUN TestGCP_authorizeToken/fail/instance-age === RUN TestGCP_authorizeToken/fail/empty-instance-id +=== RUN TestGCP_authorizeToken/fail/empty-instance-name === RUN TestGCP_authorizeToken/fail/empty-zone === RUN TestGCP_authorizeToken/ok ---- PASS: TestGCP_authorizeToken (0.00s) - --- PASS: TestGCP_authorizeToken/fail/cannot-validate-sig (0.00s) - --- PASS: TestGCP_authorizeToken/fail/invalid-issuer (0.00s) - --- PASS: TestGCP_authorizeToken/fail/invalid-serviceAccount (0.00s) - --- PASS: TestGCP_authorizeToken/fail/invalid-projectID (0.00s) +=== RUN TestGCP_authorizeToken/fail/bad-token +=== RUN TestGCP_authorizeToken/fail/invalid-issuer +=== RUN TestGCP_authorizeToken/fail/invalid-serviceAccount +=== RUN TestGCP_authorizeToken/fail/instance-age +=== RUN TestGCP_authorizeToken/fail/empty-project-id +=== RUN TestGCP_authorizeToken/fail/cannot-validate-sig +=== RUN TestGCP_authorizeToken/fail/invalid-projectID +--- PASS: TestGCP_authorizeToken (0.02s) + --- PASS: TestGCP_authorizeToken/fail/empty-instance-id (0.00s) --- PASS: TestGCP_authorizeToken/fail/empty-instance-name (0.00s) - --- PASS: TestGCP_authorizeToken/fail/empty-project-id (0.00s) + --- PASS: TestGCP_authorizeToken/fail/empty-zone (0.00s) + --- PASS: TestGCP_authorizeToken/ok (0.01s) --- PASS: TestGCP_authorizeToken/fail/bad-token (0.00s) + --- PASS: TestGCP_authorizeToken/fail/invalid-issuer (0.00s) + --- PASS: TestGCP_authorizeToken/fail/invalid-serviceAccount (0.00s) --- PASS: TestGCP_authorizeToken/fail/instance-age (0.00s) - --- PASS: TestGCP_authorizeToken/fail/empty-instance-id (0.00s) - --- PASS: TestGCP_authorizeToken/fail/empty-zone (0.00s) - --- PASS: TestGCP_authorizeToken/ok (0.00s) + --- PASS: TestGCP_authorizeToken/fail/empty-project-id (0.00s) + --- PASS: TestGCP_authorizeToken/fail/cannot-validate-sig (0.00s) + --- PASS: TestGCP_authorizeToken/fail/invalid-projectID (0.00s) === RUN TestGCP_AuthorizeSign === RUN TestGCP_AuthorizeSign/ok === RUN TestGCP_AuthorizeSign/ok#01 @@ -7193,9 +7229,9 @@ === RUN TestGCP_AuthorizeSign/fail_instance_name === RUN TestGCP_AuthorizeSign/fail_project_id === RUN TestGCP_AuthorizeSign/fail_zone ---- PASS: TestGCP_AuthorizeSign (0.04s) +--- PASS: TestGCP_AuthorizeSign (0.03s) --- PASS: TestGCP_AuthorizeSign/ok (0.00s) - --- PASS: TestGCP_AuthorizeSign/ok#01 (0.01s) + --- PASS: TestGCP_AuthorizeSign/ok#01 (0.00s) --- PASS: TestGCP_AuthorizeSign/ok#02 (0.00s) --- PASS: TestGCP_AuthorizeSign/fail_token (0.00s) --- PASS: TestGCP_AuthorizeSign/fail_key (0.00s) @@ -7225,14 +7261,14 @@ === RUN TestGCP_AuthorizeSSHSign/fail-extra-principal === RUN TestGCP_AuthorizeSSHSign/fail-sshCA-disabled === RUN TestGCP_AuthorizeSSHSign/fail-invalid-token ---- PASS: TestGCP_AuthorizeSSHSign (0.73s) +--- PASS: TestGCP_AuthorizeSSHSign (0.28s) --- PASS: TestGCP_AuthorizeSSHSign/ok (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/ok-rsa2048 (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/ok-type (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/ok-principals (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/ok-principal1 (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/ok-principal2 (0.00s) - --- PASS: TestGCP_AuthorizeSSHSign/ok-options (0.00s) + --- PASS: TestGCP_AuthorizeSSHSign/ok-options (0.01s) --- PASS: TestGCP_AuthorizeSSHSign/ok-custom (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/fail-rsa1024 (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/fail-type (0.00s) @@ -7247,21 +7283,21 @@ --- PASS: TestGCP_AuthorizeRenew/ok (0.00s) --- PASS: TestGCP_AuthorizeRenew/fail/renewal-disabled (0.00s) === RUN TestJWK_Getters ---- PASS: TestJWK_Getters (0.20s) +--- PASS: TestJWK_Getters (0.38s) === RUN TestJWK_Init -=== RUN TestJWK_Init/fail-empty-key -=== RUN TestJWK_Init/fail-bad-claims -=== RUN TestJWK_Init/ok === RUN TestJWK_Init/fail-empty === RUN TestJWK_Init/fail-empty-name === RUN TestJWK_Init/fail-empty-type +=== RUN TestJWK_Init/fail-empty-key +=== RUN TestJWK_Init/fail-bad-claims +=== RUN TestJWK_Init/ok --- PASS: TestJWK_Init (0.00s) - --- PASS: TestJWK_Init/fail-empty-key (0.00s) - --- PASS: TestJWK_Init/fail-bad-claims (0.00s) - --- PASS: TestJWK_Init/ok (0.00s) --- PASS: TestJWK_Init/fail-empty (0.00s) --- PASS: TestJWK_Init/fail-empty-name (0.00s) --- PASS: TestJWK_Init/fail-empty-type (0.00s) + --- PASS: TestJWK_Init/fail-empty-key (0.00s) + --- PASS: TestJWK_Init/fail-bad-claims (0.00s) + --- PASS: TestJWK_Init/ok (0.00s) === RUN TestJWK_authorizeToken === RUN TestJWK_authorizeToken/fail-token === RUN TestJWK_authorizeToken/fail-key @@ -7275,13 +7311,13 @@ === RUN TestJWK_authorizeToken/ok === RUN TestJWK_authorizeToken/ok-no-encrypted-key === RUN TestJWK_authorizeToken/ok-no-sans ---- PASS: TestJWK_authorizeToken (0.58s) +--- PASS: TestJWK_authorizeToken (1.61s) --- PASS: TestJWK_authorizeToken/fail-token (0.00s) --- PASS: TestJWK_authorizeToken/fail-key (0.00s) --- PASS: TestJWK_authorizeToken/fail-claims (0.00s) --- PASS: TestJWK_authorizeToken/fail-signature (0.00s) --- PASS: TestJWK_authorizeToken/fail-issuer (0.00s) - --- PASS: TestJWK_authorizeToken/fail-expired (0.00s) + --- PASS: TestJWK_authorizeToken/fail-expired (0.01s) --- PASS: TestJWK_authorizeToken/fail-not-before (0.00s) --- PASS: TestJWK_authorizeToken/fail-audience (0.00s) --- PASS: TestJWK_authorizeToken/fail-subject (0.00s) @@ -7291,21 +7327,21 @@ === RUN TestJWK_AuthorizeRevoke === RUN TestJWK_AuthorizeRevoke/fail-signature === RUN TestJWK_AuthorizeRevoke/ok ---- PASS: TestJWK_AuthorizeRevoke (0.28s) +--- PASS: TestJWK_AuthorizeRevoke (0.84s) --- PASS: TestJWK_AuthorizeRevoke/fail-signature (0.00s) --- PASS: TestJWK_AuthorizeRevoke/ok (0.00s) === RUN TestJWK_AuthorizeSign === RUN TestJWK_AuthorizeSign/fail-signature === RUN TestJWK_AuthorizeSign/ok-sans === RUN TestJWK_AuthorizeSign/ok-no-sans ---- PASS: TestJWK_AuthorizeSign (0.26s) +--- PASS: TestJWK_AuthorizeSign (0.81s) --- PASS: TestJWK_AuthorizeSign/fail-signature (0.00s) --- PASS: TestJWK_AuthorizeSign/ok-sans (0.00s) --- PASS: TestJWK_AuthorizeSign/ok-no-sans (0.00s) === RUN TestJWK_AuthorizeRenew === RUN TestJWK_AuthorizeRenew/ok === RUN TestJWK_AuthorizeRenew/fail/renew-disabled ---- PASS: TestJWK_AuthorizeRenew (0.39s) +--- PASS: TestJWK_AuthorizeRenew (0.80s) --- PASS: TestJWK_AuthorizeRenew/ok (0.00s) --- PASS: TestJWK_AuthorizeRenew/fail/renew-disabled (0.00s) === RUN TestJWK_AuthorizeSSHSign @@ -7321,8 +7357,8 @@ === RUN TestJWK_AuthorizeSSHSign/fail-sshCA-disabled === RUN TestJWK_AuthorizeSSHSign/fail-signature === RUN TestJWK_AuthorizeSSHSign/rail-rsa1024 ---- PASS: TestJWK_AuthorizeSSHSign (0.67s) - --- PASS: TestJWK_AuthorizeSSHSign/user (0.00s) +--- PASS: TestJWK_AuthorizeSSHSign (2.78s) + --- PASS: TestJWK_AuthorizeSSHSign/user (0.01s) --- PASS: TestJWK_AuthorizeSSHSign/user-rsa2048 (0.00s) --- PASS: TestJWK_AuthorizeSSHSign/user-type (0.00s) --- PASS: TestJWK_AuthorizeSSHSign/user-principals (0.00s) @@ -7350,7 +7386,7 @@ === RUN TestJWK_AuthorizeSign_SSHOptions/fail-audience === RUN TestJWK_AuthorizeSign_SSHOptions/fail-expired === RUN TestJWK_AuthorizeSign_SSHOptions/fail-notBefore ---- PASS: TestJWK_AuthorizeSign_SSHOptions (0.31s) +--- PASS: TestJWK_AuthorizeSign_SSHOptions (0.84s) --- PASS: TestJWK_AuthorizeSign_SSHOptions/ok-user (0.00s) --- PASS: TestJWK_AuthorizeSign_SSHOptions/ok-host (0.00s) --- PASS: TestJWK_AuthorizeSign_SSHOptions/ok-user-validAfter (0.00s) @@ -7367,31 +7403,31 @@ --- PASS: TestJWK_AuthorizeSign_SSHOptions/fail-expired (0.00s) --- PASS: TestJWK_AuthorizeSign_SSHOptions/fail-notBefore (0.00s) === RUN TestJWK_AuthorizeSSHRevoke -=== RUN TestJWK_AuthorizeSSHRevoke/fail/invalid-token === RUN TestJWK_AuthorizeSSHRevoke/ok ---- PASS: TestJWK_AuthorizeSSHRevoke (0.39s) - --- PASS: TestJWK_AuthorizeSSHRevoke/fail/invalid-token (0.13s) - --- PASS: TestJWK_AuthorizeSSHRevoke/ok (0.26s) +=== RUN TestJWK_AuthorizeSSHRevoke/fail/invalid-token +--- PASS: TestJWK_AuthorizeSSHRevoke (0.91s) + --- PASS: TestJWK_AuthorizeSSHRevoke/ok (0.65s) + --- PASS: TestJWK_AuthorizeSSHRevoke/fail/invalid-token (0.26s) === RUN TestK8sSA_Getters --- PASS: TestK8sSA_Getters (0.00s) === RUN TestK8sSA_authorizeToken +=== RUN TestK8sSA_authorizeToken/fail/invalid-issuer +=== RUN TestK8sSA_authorizeToken/ok === RUN TestK8sSA_authorizeToken/fail/bad-token === RUN TestK8sSA_authorizeToken/fail/not-implemented === RUN TestK8sSA_authorizeToken/fail/error-validating-token -=== RUN TestK8sSA_authorizeToken/fail/invalid-issuer -=== RUN TestK8sSA_authorizeToken/ok ---- PASS: TestK8sSA_authorizeToken (0.00s) +--- PASS: TestK8sSA_authorizeToken (0.01s) + --- PASS: TestK8sSA_authorizeToken/fail/invalid-issuer (0.00s) + --- PASS: TestK8sSA_authorizeToken/ok (0.00s) --- PASS: TestK8sSA_authorizeToken/fail/bad-token (0.00s) --- PASS: TestK8sSA_authorizeToken/fail/not-implemented (0.00s) --- PASS: TestK8sSA_authorizeToken/fail/error-validating-token (0.00s) - --- PASS: TestK8sSA_authorizeToken/fail/invalid-issuer (0.00s) - --- PASS: TestK8sSA_authorizeToken/ok (0.00s) === RUN TestK8sSA_AuthorizeRevoke -=== RUN TestK8sSA_AuthorizeRevoke/fail/invalid-token === RUN TestK8sSA_AuthorizeRevoke/ok +=== RUN TestK8sSA_AuthorizeRevoke/fail/invalid-token --- PASS: TestK8sSA_AuthorizeRevoke (0.00s) - --- PASS: TestK8sSA_AuthorizeRevoke/fail/invalid-token (0.00s) --- PASS: TestK8sSA_AuthorizeRevoke/ok (0.00s) + --- PASS: TestK8sSA_AuthorizeRevoke/fail/invalid-token (0.00s) === RUN TestK8sSA_AuthorizeRenew === RUN TestK8sSA_AuthorizeRenew/fail/renew-disabled === RUN TestK8sSA_AuthorizeRenew/ok @@ -7405,23 +7441,23 @@ --- PASS: TestK8sSA_AuthorizeSign/fail/invalid-token (0.00s) --- PASS: TestK8sSA_AuthorizeSign/ok (0.00s) === RUN TestK8sSA_AuthorizeSSHSign +=== RUN TestK8sSA_AuthorizeSSHSign/fail/sshCA-disabled === RUN TestK8sSA_AuthorizeSSHSign/fail/invalid-token === RUN TestK8sSA_AuthorizeSSHSign/ok -=== RUN TestK8sSA_AuthorizeSSHSign/fail/sshCA-disabled --- PASS: TestK8sSA_AuthorizeSSHSign (0.00s) + --- PASS: TestK8sSA_AuthorizeSSHSign/fail/sshCA-disabled (0.00s) --- PASS: TestK8sSA_AuthorizeSSHSign/fail/invalid-token (0.00s) --- PASS: TestK8sSA_AuthorizeSSHSign/ok (0.00s) - --- PASS: TestK8sSA_AuthorizeSSHSign/fail/sshCA-disabled (0.00s) === RUN Test_newKeyStore === RUN Test_newKeyStore/ok === RUN Test_newKeyStore/fail ---- PASS: Test_newKeyStore (0.17s) - --- PASS: Test_newKeyStore/ok (0.13s) - --- PASS: Test_newKeyStore/fail (0.03s) +--- PASS: Test_newKeyStore (0.00s) + --- PASS: Test_newKeyStore/ok (0.00s) + --- PASS: Test_newKeyStore/fail (0.00s) === RUN Test_keyStore --- PASS: Test_keyStore (5.00s) === RUN Test_keyStore_noCache ---- PASS: Test_keyStore_noCache (0.37s) +--- PASS: Test_keyStore_noCache (0.00s) === RUN Test_keyStore_Get === RUN Test_keyStore_Get/ok1 === RUN Test_keyStore_Get/ok2 @@ -7455,7 +7491,7 @@ === RUN TestNebula_Init/fail_root === RUN TestNebula_Init/fail_bad_root === RUN TestNebula_Init/fail_bad_claims ---- PASS: TestNebula_Init (0.01s) +--- PASS: TestNebula_Init (0.04s) --- PASS: TestNebula_Init/ok (0.00s) --- PASS: TestNebula_Init/ok_with_claims (0.00s) --- PASS: TestNebula_Init/ok_with_options (0.00s) @@ -7478,7 +7514,7 @@ === RUN TestNebula_GetTokenID/ok === RUN TestNebula_GetTokenID/fail_parse === RUN TestNebula_GetTokenID/fail_claims ---- PASS: TestNebula_GetTokenID (0.01s) +--- PASS: TestNebula_GetTokenID (0.02s) --- PASS: TestNebula_GetTokenID/ok (0.00s) --- PASS: TestNebula_GetTokenID/fail_parse (0.00s) --- PASS: TestNebula_GetTokenID/fail_claims (0.00s) @@ -7513,9 +7549,9 @@ === RUN TestNebula_AuthorizeSSHSign/fail_principals === RUN TestNebula_AuthorizeSSHSign/fail_disabled === RUN TestNebula_AuthorizeSSHSign/fail_template ---- PASS: TestNebula_AuthorizeSSHSign (1.04s) - --- PASS: TestNebula_AuthorizeSSHSign/ok (0.08s) - --- PASS: TestNebula_AuthorizeSSHSign/ok_no_options (0.31s) +--- PASS: TestNebula_AuthorizeSSHSign (0.04s) + --- PASS: TestNebula_AuthorizeSSHSign/ok (0.00s) + --- PASS: TestNebula_AuthorizeSSHSign/ok_no_options (0.00s) --- PASS: TestNebula_AuthorizeSSHSign/ok_with_validity (0.00s) --- PASS: TestNebula_AuthorizeSSHSign/fail_token (0.00s) --- PASS: TestNebula_AuthorizeSSHSign/fail_user (0.00s) @@ -7531,24 +7567,24 @@ === RUN TestNebula_AuthorizeRevoke === RUN TestNebula_AuthorizeRevoke/ok === RUN TestNebula_AuthorizeRevoke/fail_token ---- PASS: TestNebula_AuthorizeRevoke (0.02s) - --- PASS: TestNebula_AuthorizeRevoke/ok (0.00s) +--- PASS: TestNebula_AuthorizeRevoke (0.04s) + --- PASS: TestNebula_AuthorizeRevoke/ok (0.01s) --- PASS: TestNebula_AuthorizeRevoke/fail_token (0.00s) === RUN TestNebula_AuthorizeSSHRevoke === RUN TestNebula_AuthorizeSSHRevoke/ok === RUN TestNebula_AuthorizeSSHRevoke/fail_token === RUN TestNebula_AuthorizeSSHRevoke/fail_disabled ---- PASS: TestNebula_AuthorizeSSHRevoke (0.75s) +--- PASS: TestNebula_AuthorizeSSHRevoke (0.01s) --- PASS: TestNebula_AuthorizeSSHRevoke/ok (0.00s) --- PASS: TestNebula_AuthorizeSSHRevoke/fail_token (0.00s) --- PASS: TestNebula_AuthorizeSSHRevoke/fail_disabled (0.00s) === RUN TestNebula_AuthorizeSSHRenew === RUN TestNebula_AuthorizeSSHRenew/fail ---- PASS: TestNebula_AuthorizeSSHRenew (0.22s) +--- PASS: TestNebula_AuthorizeSSHRenew (0.00s) --- PASS: TestNebula_AuthorizeSSHRenew/fail (0.00s) === RUN TestNebula_AuthorizeSSHRekey === RUN TestNebula_AuthorizeSSHRekey/fail ---- PASS: TestNebula_AuthorizeSSHRekey (0.05s) +--- PASS: TestNebula_AuthorizeSSHRekey (0.02s) --- PASS: TestNebula_AuthorizeSSHRekey/fail (0.00s) === RUN TestNebula_authorizeToken === RUN TestNebula_authorizeToken/ok_x509 @@ -7562,14 +7598,14 @@ === RUN TestNebula_authorizeToken/fail_claims_iss === RUN TestNebula_authorizeToken/fail_claims_aud === RUN TestNebula_authorizeToken/fail_claims_sub ---- PASS: TestNebula_authorizeToken (0.58s) +--- PASS: TestNebula_authorizeToken (0.05s) --- PASS: TestNebula_authorizeToken/ok_x509 (0.00s) --- PASS: TestNebula_authorizeToken/ok_x509_no_sans (0.00s) - --- PASS: TestNebula_authorizeToken/ok_ssh (0.00s) + --- PASS: TestNebula_authorizeToken/ok_ssh (0.02s) --- PASS: TestNebula_authorizeToken/ok_ssh_no_principals (0.00s) --- PASS: TestNebula_authorizeToken/fail_parse (0.00s) --- PASS: TestNebula_authorizeToken/fail_header (0.00s) - --- PASS: TestNebula_authorizeToken/fail_verify (0.55s) + --- PASS: TestNebula_authorizeToken/fail_verify (0.00s) --- PASS: TestNebula_authorizeToken/fail_claims_nbf (0.00s) --- PASS: TestNebula_authorizeToken/fail_claims_iss (0.00s) --- PASS: TestNebula_authorizeToken/fail_claims_aud (0.00s) @@ -7643,7 +7679,7 @@ === RUN TestOIDC_Init/bad-get-url === RUN TestOIDC_Init/bad-listen-address --- PASS: TestOIDC_Init (0.01s) - --- PASS: TestOIDC_Init/ok (0.01s) + --- PASS: TestOIDC_Init/ok (0.00s) --- PASS: TestOIDC_Init/ok-admins (0.00s) --- PASS: TestOIDC_Init/ok-domains (0.00s) --- PASS: TestOIDC_Init/ok-listen-port (0.00s) @@ -7673,10 +7709,10 @@ === RUN TestOIDC_authorizeToken/fail-signature === RUN TestOIDC_authorizeToken/fail-expired === RUN TestOIDC_authorizeToken/fail-not-before ---- PASS: TestOIDC_authorizeToken (0.01s) +--- PASS: TestOIDC_authorizeToken (0.03s) --- PASS: TestOIDC_authorizeToken/ok1 (0.00s) --- PASS: TestOIDC_authorizeToken/ok_tenantid (0.00s) - --- PASS: TestOIDC_authorizeToken/ok_admin (0.01s) + --- PASS: TestOIDC_authorizeToken/ok_admin (0.00s) --- PASS: TestOIDC_authorizeToken/ok_domain (0.00s) --- PASS: TestOIDC_authorizeToken/ok_no_email (0.00s) --- PASS: TestOIDC_authorizeToken/fail-domain (0.00s) @@ -7684,7 +7720,7 @@ --- PASS: TestOIDC_authorizeToken/fail-token (0.00s) --- PASS: TestOIDC_authorizeToken/fail-claims (0.00s) --- PASS: TestOIDC_authorizeToken/fail-issuer (0.00s) - --- PASS: TestOIDC_authorizeToken/fail-audience (0.00s) + --- PASS: TestOIDC_authorizeToken/fail-audience (0.01s) --- PASS: TestOIDC_authorizeToken/fail-signature (0.00s) --- PASS: TestOIDC_authorizeToken/fail-expired (0.00s) --- PASS: TestOIDC_authorizeToken/fail-not-before (0.00s) @@ -7693,7 +7729,7 @@ === RUN TestOIDC_AuthorizeSign/admin === RUN TestOIDC_AuthorizeSign/no-email === RUN TestOIDC_AuthorizeSign/bad-token ---- PASS: TestOIDC_AuthorizeSign (0.00s) +--- PASS: TestOIDC_AuthorizeSign (0.01s) --- PASS: TestOIDC_AuthorizeSign/ok1 (0.00s) --- PASS: TestOIDC_AuthorizeSign/admin (0.00s) --- PASS: TestOIDC_AuthorizeSign/no-email (0.00s) @@ -7702,7 +7738,7 @@ === RUN TestOIDC_AuthorizeRevoke/ok1 === RUN TestOIDC_AuthorizeRevoke/admin === RUN TestOIDC_AuthorizeRevoke/fail-email ---- PASS: TestOIDC_AuthorizeRevoke (0.03s) +--- PASS: TestOIDC_AuthorizeRevoke (0.02s) --- PASS: TestOIDC_AuthorizeRevoke/ok1 (0.00s) --- PASS: TestOIDC_AuthorizeRevoke/admin (0.00s) --- PASS: TestOIDC_AuthorizeRevoke/fail-email (0.00s) @@ -7732,14 +7768,14 @@ === RUN TestOIDC_AuthorizeSSHSign/fail-admin-type === RUN TestOIDC_AuthorizeSSHSign/fail-admin-key-id === RUN TestOIDC_AuthorizeSSHSign/fail-admin-principals ---- PASS: TestOIDC_AuthorizeSSHSign (1.78s) +--- PASS: TestOIDC_AuthorizeSSHSign (2.68s) --- PASS: TestOIDC_AuthorizeSSHSign/ok (0.00s) --- PASS: TestOIDC_AuthorizeSSHSign/ok-rsa2048 (0.00s) --- PASS: TestOIDC_AuthorizeSSHSign/ok-user (0.00s) --- PASS: TestOIDC_AuthorizeSSHSign/ok-principals (0.00s) --- PASS: TestOIDC_AuthorizeSSHSign/ok-principals-getIdentity (0.00s) --- PASS: TestOIDC_AuthorizeSSHSign/ok-emptyPrincipals-getIdentity (0.00s) - --- PASS: TestOIDC_AuthorizeSSHSign/ok-options (0.00s) + --- PASS: TestOIDC_AuthorizeSSHSign/ok-options (0.01s) --- PASS: TestOIDC_AuthorizeSSHSign/ok-admin-user (0.00s) --- PASS: TestOIDC_AuthorizeSSHSign/ok-admin-host (0.00s) --- PASS: TestOIDC_AuthorizeSSHSign/ok-admin-options (0.00s) @@ -7818,7 +7854,7 @@ === RUN TestTemplateOptions/ok === RUN TestTemplateOptions/okCustomTemplate === RUN TestTemplateOptions/fail ---- PASS: TestTemplateOptions (0.01s) +--- PASS: TestTemplateOptions (0.00s) --- PASS: TestTemplateOptions/ok (0.00s) --- PASS: TestTemplateOptions/okCustomTemplate (0.00s) --- PASS: TestTemplateOptions/fail (0.00s) @@ -7835,10 +7871,10 @@ === RUN TestCustomTemplateOptions/okNullTemplateData === RUN TestCustomTemplateOptions/fail === RUN TestCustomTemplateOptions/failTemplateData ---- PASS: TestCustomTemplateOptions (0.02s) +--- PASS: TestCustomTemplateOptions (0.00s) --- PASS: TestCustomTemplateOptions/ok (0.00s) --- PASS: TestCustomTemplateOptions/okIID (0.00s) - --- PASS: TestCustomTemplateOptions/okNoData (0.01s) + --- PASS: TestCustomTemplateOptions/okNoData (0.00s) --- PASS: TestCustomTemplateOptions/okTemplateData (0.00s) --- PASS: TestCustomTemplateOptions/okTemplate (0.00s) --- PASS: TestCustomTemplateOptions/okFile (0.00s) @@ -7897,27 +7933,27 @@ --- PASS: TestSanitizeSSHUserPrincipal/email_with_underscores (0.00s) --- PASS: TestSanitizeSSHUserPrincipal/email_with_symbols (0.00s) === RUN TestDefaultIdentityFunc -=== RUN TestDefaultIdentityFunc/ok_username -=== RUN TestDefaultIdentityFunc/ok_usernames +=== RUN TestDefaultIdentityFunc/fail/unsupported-provisioner === RUN TestDefaultIdentityFunc/fail/bad-ssh-regex +=== RUN TestDefaultIdentityFunc/ok_simple === RUN TestDefaultIdentityFunc/ok_simple_letter_case -=== RUN TestDefaultIdentityFunc/ok_empty_username -=== RUN TestDefaultIdentityFunc/fail/unsupported-provisioner +=== RUN TestDefaultIdentityFunc/ok_symbol +=== RUN TestDefaultIdentityFunc/ok_username === RUN TestDefaultIdentityFunc/ok === RUN TestDefaultIdentityFunc/ok_letter_case -=== RUN TestDefaultIdentityFunc/ok_simple -=== RUN TestDefaultIdentityFunc/ok_symbol +=== RUN TestDefaultIdentityFunc/ok_usernames +=== RUN TestDefaultIdentityFunc/ok_empty_username --- PASS: TestDefaultIdentityFunc (0.00s) - --- PASS: TestDefaultIdentityFunc/ok_username (0.00s) - --- PASS: TestDefaultIdentityFunc/ok_usernames (0.00s) + --- PASS: TestDefaultIdentityFunc/fail/unsupported-provisioner (0.00s) --- PASS: TestDefaultIdentityFunc/fail/bad-ssh-regex (0.00s) + --- PASS: TestDefaultIdentityFunc/ok_simple (0.00s) --- PASS: TestDefaultIdentityFunc/ok_simple_letter_case (0.00s) - --- PASS: TestDefaultIdentityFunc/ok_empty_username (0.00s) - --- PASS: TestDefaultIdentityFunc/fail/unsupported-provisioner (0.00s) + --- PASS: TestDefaultIdentityFunc/ok_symbol (0.00s) + --- PASS: TestDefaultIdentityFunc/ok_username (0.00s) --- PASS: TestDefaultIdentityFunc/ok (0.00s) --- PASS: TestDefaultIdentityFunc/ok_letter_case (0.00s) - --- PASS: TestDefaultIdentityFunc/ok_simple (0.00s) - --- PASS: TestDefaultIdentityFunc/ok_symbol (0.00s) + --- PASS: TestDefaultIdentityFunc/ok_usernames (0.00s) + --- PASS: TestDefaultIdentityFunc/ok_empty_username (0.00s) === RUN TestUnimplementedMethods === RUN TestUnimplementedMethods/jwk/sshRekey === RUN TestUnimplementedMethods/jwk/sshRenew @@ -7949,7 +7985,7 @@ === RUN TestUnimplementedMethods/k8ssa/sshRekey === RUN TestUnimplementedMethods/k8ssa/sshRenew === RUN TestUnimplementedMethods/k8ssa/sshRevoke ---- PASS: TestUnimplementedMethods (0.00s) +--- PASS: TestUnimplementedMethods (0.01s) --- PASS: TestUnimplementedMethods/jwk/sshRekey (0.00s) --- PASS: TestUnimplementedMethods/jwk/sshRenew (0.00s) --- PASS: TestUnimplementedMethods/aws/revoke (0.00s) @@ -8002,7 +8038,7 @@ === RUN Test_defaultPublicKeyValidator_Valid/ok/rsa === RUN Test_defaultPublicKeyValidator_Valid/ok/ecdsa === RUN Test_defaultPublicKeyValidator_Valid/ok/ed25519 ---- PASS: Test_defaultPublicKeyValidator_Valid (0.01s) +--- PASS: Test_defaultPublicKeyValidator_Valid (0.00s) --- PASS: Test_defaultPublicKeyValidator_Valid/fail/unrecognized-key-type (0.00s) --- PASS: Test_defaultPublicKeyValidator_Valid/fail/rsa/too-short (0.00s) --- PASS: Test_defaultPublicKeyValidator_Valid/ok/rsa (0.00s) @@ -8099,17 +8135,17 @@ --- PASS: Test_urisValidator_Valid/fail2 (0.00s) --- PASS: Test_urisValidator_Valid/fail3 (0.00s) === RUN Test_defaultSANsValidator_Valid -=== RUN Test_defaultSANsValidator_Valid/ok === RUN Test_defaultSANsValidator_Valid/fail/dnsNamesValidator === RUN Test_defaultSANsValidator_Valid/fail/emailAddressesValidator === RUN Test_defaultSANsValidator_Valid/fail/ipAddressesValidator === RUN Test_defaultSANsValidator_Valid/fail/urisValidator +=== RUN Test_defaultSANsValidator_Valid/ok --- PASS: Test_defaultSANsValidator_Valid (0.00s) - --- PASS: Test_defaultSANsValidator_Valid/ok (0.00s) --- PASS: Test_defaultSANsValidator_Valid/fail/dnsNamesValidator (0.00s) --- PASS: Test_defaultSANsValidator_Valid/fail/emailAddressesValidator (0.00s) --- PASS: Test_defaultSANsValidator_Valid/fail/ipAddressesValidator (0.00s) --- PASS: Test_defaultSANsValidator_Valid/fail/urisValidator (0.00s) + --- PASS: Test_defaultSANsValidator_Valid/ok (0.00s) === RUN Test_validityValidator_Valid === RUN Test_validityValidator_Valid/ok/duration-exact-max-with-backdate === RUN Test_validityValidator_Valid/fail/notAfter-past @@ -8119,37 +8155,37 @@ === RUN Test_validityValidator_Valid/fail/duration-too-great === RUN Test_validityValidator_Valid/ok/duration-exactly-max === RUN Test_validityValidator_Valid/ok/duration-exact-min-with-backdate ---- PASS: Test_validityValidator_Valid (3.35s) +--- PASS: Test_validityValidator_Valid (2.01s) --- PASS: Test_validityValidator_Valid/ok/duration-exact-max-with-backdate (1.00s) --- PASS: Test_validityValidator_Valid/fail/notAfter-past (0.00s) --- PASS: Test_validityValidator_Valid/fail/notBefore-after-notAfter (0.00s) --- PASS: Test_validityValidator_Valid/fail/duration-too-short (0.00s) --- PASS: Test_validityValidator_Valid/ok/duration-exactly-min (0.00s) --- PASS: Test_validityValidator_Valid/fail/duration-too-great (0.00s) - --- PASS: Test_validityValidator_Valid/ok/duration-exactly-max (1.35s) + --- PASS: Test_validityValidator_Valid/ok/duration-exactly-max (0.00s) --- PASS: Test_validityValidator_Valid/ok/duration-exact-min-with-backdate (1.00s) === RUN Test_forceCN_Option +=== RUN Test_forceCN_Option/fail/CN-forced-and-empty-DNSNames === RUN Test_forceCN_Option/ok/CN-not-forced === RUN Test_forceCN_Option/ok/CN-forced-and-set === RUN Test_forceCN_Option/ok/CN-forced-and-not-set -=== RUN Test_forceCN_Option/fail/CN-forced-and-empty-DNSNames --- PASS: Test_forceCN_Option (0.00s) + --- PASS: Test_forceCN_Option/fail/CN-forced-and-empty-DNSNames (0.00s) --- PASS: Test_forceCN_Option/ok/CN-not-forced (0.00s) --- PASS: Test_forceCN_Option/ok/CN-forced-and-set (0.00s) --- PASS: Test_forceCN_Option/ok/CN-forced-and-not-set (0.00s) - --- PASS: Test_forceCN_Option/fail/CN-forced-and-empty-DNSNames (0.00s) === RUN Test_profileDefaultDuration_Option +=== RUN Test_profileDefaultDuration_Option/ok/duration-set === RUN Test_profileDefaultDuration_Option/ok/notAfter-set === RUN Test_profileDefaultDuration_Option/ok/notBefore-and-notAfter-set === RUN Test_profileDefaultDuration_Option/ok/notBefore-notAfter-duration-empty === RUN Test_profileDefaultDuration_Option/ok/notBefore-set -=== RUN Test_profileDefaultDuration_Option/ok/duration-set ---- PASS: Test_profileDefaultDuration_Option (0.51s) +--- PASS: Test_profileDefaultDuration_Option (0.52s) + --- PASS: Test_profileDefaultDuration_Option/ok/duration-set (0.10s) --- PASS: Test_profileDefaultDuration_Option/ok/notAfter-set (0.10s) --- PASS: Test_profileDefaultDuration_Option/ok/notBefore-and-notAfter-set (0.10s) --- PASS: Test_profileDefaultDuration_Option/ok/notBefore-notAfter-duration-empty (0.10s) --- PASS: Test_profileDefaultDuration_Option/ok/notBefore-set (0.10s) - --- PASS: Test_profileDefaultDuration_Option/ok/duration-set (0.10s) === RUN Test_newProvisionerExtension_Option === RUN Test_newProvisionerExtension_Option/ok/one-element === RUN Test_newProvisionerExtension_Option/ok/prepend @@ -8157,21 +8193,21 @@ --- PASS: Test_newProvisionerExtension_Option/ok/one-element (0.00s) --- PASS: Test_newProvisionerExtension_Option/ok/prepend (0.00s) === RUN Test_profileLimitDuration_Option -=== RUN Test_profileLimitDuration_Option/ok/valid-notAfter-requested -=== RUN Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-over-default -=== RUN Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-under-default === RUN Test_profileLimitDuration_Option/ok/over-limit-with-backdate === RUN Test_profileLimitDuration_Option/ok/under-limit-with-backdate === RUN Test_profileLimitDuration_Option/fail/notBefore-before-active-window === RUN Test_profileLimitDuration_Option/fail/requested-notAfter-after-limit +=== RUN Test_profileLimitDuration_Option/ok/valid-notAfter-requested +=== RUN Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-over-default +=== RUN Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-under-default --- PASS: Test_profileLimitDuration_Option (0.00s) - --- PASS: Test_profileLimitDuration_Option/ok/valid-notAfter-requested (0.00s) - --- PASS: Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-over-default (0.00s) - --- PASS: Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-under-default (0.00s) --- PASS: Test_profileLimitDuration_Option/ok/over-limit-with-backdate (0.00s) --- PASS: Test_profileLimitDuration_Option/ok/under-limit-with-backdate (0.00s) --- PASS: Test_profileLimitDuration_Option/fail/notBefore-before-active-window (0.00s) --- PASS: Test_profileLimitDuration_Option/fail/requested-notAfter-after-limit (0.00s) + --- PASS: Test_profileLimitDuration_Option/ok/valid-notAfter-requested (0.00s) + --- PASS: Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-over-default (0.00s) + --- PASS: Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-under-default (0.00s) === RUN TestSSHOptions_Type === RUN TestSSHOptions_Type/user === RUN TestSSHOptions_Type/host @@ -8183,33 +8219,33 @@ --- PASS: TestSSHOptions_Type/empty (0.00s) --- PASS: TestSSHOptions_Type/invalid (0.00s) === RUN TestSSHOptions_Modify +=== RUN TestSSHOptions_Modify/ok === RUN TestSSHOptions_Modify/fail/unexpected-cert-type === RUN TestSSHOptions_Modify/fail/validAfter-greater-validBefore === RUN TestSSHOptions_Modify/ok/user-cert === RUN TestSSHOptions_Modify/ok/host-cert -=== RUN TestSSHOptions_Modify/ok --- PASS: TestSSHOptions_Modify (0.00s) + --- PASS: TestSSHOptions_Modify/ok (0.00s) --- PASS: TestSSHOptions_Modify/fail/unexpected-cert-type (0.00s) --- PASS: TestSSHOptions_Modify/fail/validAfter-greater-validBefore (0.00s) --- PASS: TestSSHOptions_Modify/ok/user-cert (0.00s) --- PASS: TestSSHOptions_Modify/ok/host-cert (0.00s) - --- PASS: TestSSHOptions_Modify/ok (0.00s) === RUN TestSSHOptions_Match +=== RUN TestSSHOptions_Match/fail/validBefore === RUN TestSSHOptions_Match/ok/original-empty === RUN TestSSHOptions_Match/ok/cmp-empty === RUN TestSSHOptions_Match/ok/equal === RUN TestSSHOptions_Match/fail/cert-type === RUN TestSSHOptions_Match/fail/pricipals === RUN TestSSHOptions_Match/fail/validAfter -=== RUN TestSSHOptions_Match/fail/validBefore --- PASS: TestSSHOptions_Match (0.00s) + --- PASS: TestSSHOptions_Match/fail/validBefore (0.00s) --- PASS: TestSSHOptions_Match/ok/original-empty (0.00s) --- PASS: TestSSHOptions_Match/ok/cmp-empty (0.00s) --- PASS: TestSSHOptions_Match/ok/equal (0.00s) --- PASS: TestSSHOptions_Match/fail/cert-type (0.00s) --- PASS: TestSSHOptions_Match/fail/pricipals (0.00s) --- PASS: TestSSHOptions_Match/fail/validAfter (0.00s) - --- PASS: TestSSHOptions_Match/fail/validBefore (0.00s) === RUN Test_sshCertPrincipalsModifier_Modify === RUN Test_sshCertPrincipalsModifier_Modify/ok --- PASS: Test_sshCertPrincipalsModifier_Modify (0.00s) @@ -8219,13 +8255,13 @@ --- PASS: Test_sshCertKeyIDModifier_Modify (0.00s) --- PASS: Test_sshCertKeyIDModifier_Modify/ok (0.00s) === RUN Test_sshCertTypeModifier_Modify -=== RUN Test_sshCertTypeModifier_Modify/ok/user === RUN Test_sshCertTypeModifier_Modify/ok/host === RUN Test_sshCertTypeModifier_Modify/ok/default +=== RUN Test_sshCertTypeModifier_Modify/ok/user --- PASS: Test_sshCertTypeModifier_Modify (0.00s) - --- PASS: Test_sshCertTypeModifier_Modify/ok/user (0.00s) --- PASS: Test_sshCertTypeModifier_Modify/ok/host (0.00s) --- PASS: Test_sshCertTypeModifier_Modify/ok/default (0.00s) + --- PASS: Test_sshCertTypeModifier_Modify/ok/user (0.00s) === RUN Test_sshCertValidAfterModifier_Modify === RUN Test_sshCertValidAfterModifier_Modify/ok --- PASS: Test_sshCertValidAfterModifier_Modify (0.00s) @@ -8237,15 +8273,15 @@ --- PASS: Test_sshCertDefaultsModifier_Modify/ok/changes (0.00s) --- PASS: Test_sshCertDefaultsModifier_Modify/ok/no-changes (0.00s) === RUN Test_sshDefaultExtensionModifier_Modify -=== RUN Test_sshDefaultExtensionModifier_Modify/fail/unexpected-cert-type === RUN Test_sshDefaultExtensionModifier_Modify/ok/host === RUN Test_sshDefaultExtensionModifier_Modify/ok/user/extensions-exists === RUN Test_sshDefaultExtensionModifier_Modify/ok/user/no-extensions +=== RUN Test_sshDefaultExtensionModifier_Modify/fail/unexpected-cert-type --- PASS: Test_sshDefaultExtensionModifier_Modify (0.00s) - --- PASS: Test_sshDefaultExtensionModifier_Modify/fail/unexpected-cert-type (0.00s) --- PASS: Test_sshDefaultExtensionModifier_Modify/ok/host (0.00s) --- PASS: Test_sshDefaultExtensionModifier_Modify/ok/user/extensions-exists (0.00s) --- PASS: Test_sshDefaultExtensionModifier_Modify/ok/user/no-extensions (0.00s) + --- PASS: Test_sshDefaultExtensionModifier_Modify/fail/unexpected-cert-type (0.00s) === RUN Test_sshCertDefaultValidator_Valid === RUN Test_sshCertDefaultValidator_Valid/fail/zero-nonce === RUN Test_sshCertDefaultValidator_Valid/fail/nil-key @@ -8299,24 +8335,24 @@ --- PASS: Test_sshCertValidityValidator/ok/duration-exactly-max (0.00s) --- PASS: Test_sshCertValidityValidator/ok (0.00s) === RUN Test_sshValidityModifier +=== RUN Test_sshValidityModifier/ok/empty-requested-validBefore-limit-before-default +=== RUN Test_sshValidityModifier/fail/type-not-set === RUN Test_sshValidityModifier/fail/type-not-recognized -=== RUN Test_sshValidityModifier/fail/requested-validBefore-after-limit === RUN Test_sshValidityModifier/ok/no-limit -=== RUN Test_sshValidityModifier/ok/defaults === RUN Test_sshValidityModifier/ok/valid-requested-validBefore -=== RUN Test_sshValidityModifier/ok/empty-requested-validBefore-limit-before-default -=== RUN Test_sshValidityModifier/fail/type-not-set === RUN Test_sshValidityModifier/fail/requested-validAfter-after-limit +=== RUN Test_sshValidityModifier/fail/requested-validBefore-after-limit +=== RUN Test_sshValidityModifier/ok/defaults === RUN Test_sshValidityModifier/ok/empty-requested-validBefore-limit-after-default --- PASS: Test_sshValidityModifier (0.00s) + --- PASS: Test_sshValidityModifier/ok/empty-requested-validBefore-limit-before-default (0.00s) + --- PASS: Test_sshValidityModifier/fail/type-not-set (0.00s) --- PASS: Test_sshValidityModifier/fail/type-not-recognized (0.00s) - --- PASS: Test_sshValidityModifier/fail/requested-validBefore-after-limit (0.00s) --- PASS: Test_sshValidityModifier/ok/no-limit (0.00s) - --- PASS: Test_sshValidityModifier/ok/defaults (0.00s) --- PASS: Test_sshValidityModifier/ok/valid-requested-validBefore (0.00s) - --- PASS: Test_sshValidityModifier/ok/empty-requested-validBefore-limit-before-default (0.00s) - --- PASS: Test_sshValidityModifier/fail/type-not-set (0.00s) --- PASS: Test_sshValidityModifier/fail/requested-validAfter-after-limit (0.00s) + --- PASS: Test_sshValidityModifier/fail/requested-validBefore-after-limit (0.00s) + --- PASS: Test_sshValidityModifier/ok/defaults (0.00s) --- PASS: Test_sshValidityModifier/ok/empty-requested-validBefore-limit-after-default (0.00s) === RUN Test_sshDefaultDuration_Option === RUN Test_sshDefaultDuration_Option/user @@ -8371,28 +8407,28 @@ === RUN TestSSHPOP_authorizeToken === RUN TestSSHPOP_authorizeToken/fail/bad-token === RUN TestSSHPOP_authorizeToken/fail/cert-not-yet-valid -=== RUN TestSSHPOP_authorizeToken/fail/error-parsing-claims-bad-sig -=== RUN TestSSHPOP_authorizeToken/fail/empty-subject === RUN TestSSHPOP_authorizeToken/fail/cert-past-validity === RUN TestSSHPOP_authorizeToken/fail/no-signer-found -=== RUN TestSSHPOP_authorizeToken/fail/invalid-claims-issuer +=== RUN TestSSHPOP_authorizeToken/fail/error-parsing-claims-bad-sig === RUN TestSSHPOP_authorizeToken/fail/invalid-audience +=== RUN TestSSHPOP_authorizeToken/fail/empty-subject === RUN TestSSHPOP_authorizeToken/ok ---- PASS: TestSSHPOP_authorizeToken (0.01s) +=== RUN TestSSHPOP_authorizeToken/fail/invalid-claims-issuer +--- PASS: TestSSHPOP_authorizeToken (0.04s) --- PASS: TestSSHPOP_authorizeToken/fail/bad-token (0.00s) --- PASS: TestSSHPOP_authorizeToken/fail/cert-not-yet-valid (0.00s) + --- PASS: TestSSHPOP_authorizeToken/fail/cert-past-validity (0.01s) + --- PASS: TestSSHPOP_authorizeToken/fail/no-signer-found (0.00s) --- PASS: TestSSHPOP_authorizeToken/fail/error-parsing-claims-bad-sig (0.00s) + --- PASS: TestSSHPOP_authorizeToken/fail/invalid-audience (0.00s) --- PASS: TestSSHPOP_authorizeToken/fail/empty-subject (0.00s) - --- PASS: TestSSHPOP_authorizeToken/fail/cert-past-validity (0.00s) - --- PASS: TestSSHPOP_authorizeToken/fail/no-signer-found (0.00s) + --- PASS: TestSSHPOP_authorizeToken/ok (0.01s) --- PASS: TestSSHPOP_authorizeToken/fail/invalid-claims-issuer (0.00s) - --- PASS: TestSSHPOP_authorizeToken/fail/invalid-audience (0.01s) - --- PASS: TestSSHPOP_authorizeToken/ok (0.00s) === RUN TestSSHPOP_AuthorizeSSHRevoke === RUN TestSSHPOP_AuthorizeSSHRevoke/fail/bad-token === RUN TestSSHPOP_AuthorizeSSHRevoke/fail/subject-not-equal-serial === RUN TestSSHPOP_AuthorizeSSHRevoke/ok ---- PASS: TestSSHPOP_AuthorizeSSHRevoke (0.01s) +--- PASS: TestSSHPOP_AuthorizeSSHRevoke (0.00s) --- PASS: TestSSHPOP_AuthorizeSSHRevoke/fail/bad-token (0.00s) --- PASS: TestSSHPOP_AuthorizeSSHRevoke/fail/subject-not-equal-serial (0.00s) --- PASS: TestSSHPOP_AuthorizeSSHRevoke/ok (0.00s) @@ -8405,27 +8441,27 @@ --- PASS: TestSSHPOP_AuthorizeSSHRenew/fail/not-host-cert (0.00s) --- PASS: TestSSHPOP_AuthorizeSSHRenew/ok (0.00s) === RUN TestSSHPOP_AuthorizeSSHRekey -=== RUN TestSSHPOP_AuthorizeSSHRekey/fail/bad-token === RUN TestSSHPOP_AuthorizeSSHRekey/fail/not-host-cert === RUN TestSSHPOP_AuthorizeSSHRekey/ok +=== RUN TestSSHPOP_AuthorizeSSHRekey/fail/bad-token --- PASS: TestSSHPOP_AuthorizeSSHRekey (0.01s) - --- PASS: TestSSHPOP_AuthorizeSSHRekey/fail/bad-token (0.00s) --- PASS: TestSSHPOP_AuthorizeSSHRekey/fail/not-host-cert (0.00s) --- PASS: TestSSHPOP_AuthorizeSSHRekey/ok (0.01s) + --- PASS: TestSSHPOP_AuthorizeSSHRekey/fail/bad-token (0.00s) === RUN TestSSHPOP_ExtractSSHPOPCert -=== RUN TestSSHPOP_ExtractSSHPOPCert/fail/parsing-sshpop-pubkey -=== RUN TestSSHPOP_ExtractSSHPOPCert/ok === RUN TestSSHPOP_ExtractSSHPOPCert/fail/bad-token === RUN TestSSHPOP_ExtractSSHPOPCert/fail/sshpop-missing === RUN TestSSHPOP_ExtractSSHPOPCert/fail/wrong-sshpop-type === RUN TestSSHPOP_ExtractSSHPOPCert/fail/base64decode-error +=== RUN TestSSHPOP_ExtractSSHPOPCert/fail/parsing-sshpop-pubkey +=== RUN TestSSHPOP_ExtractSSHPOPCert/ok --- PASS: TestSSHPOP_ExtractSSHPOPCert (0.00s) - --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/parsing-sshpop-pubkey (0.00s) - --- PASS: TestSSHPOP_ExtractSSHPOPCert/ok (0.00s) --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/bad-token (0.00s) --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/sshpop-missing (0.00s) --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/wrong-sshpop-type (0.00s) --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/base64decode-error (0.00s) + --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/parsing-sshpop-pubkey (0.00s) + --- PASS: TestSSHPOP_ExtractSSHPOPCert/ok (0.00s) === RUN TestNewTimeDuration === RUN TestNewTimeDuration/ok === RUN TestNewTimeDuration/zero @@ -8529,57 +8565,57 @@ === RUN TestX5C_Getters --- PASS: TestX5C_Getters (0.00s) === RUN TestX5C_Init +=== RUN TestX5C_Init/fail/empty-name +=== RUN TestX5C_Init/fail/empty-type +=== RUN TestX5C_Init/fail/empty-key === RUN TestX5C_Init/fail/no-valid-root-certs === RUN TestX5C_Init/fail/invalid-duration === RUN TestX5C_Init/ok === RUN TestX5C_Init/ok/root-chain === RUN TestX5C_Init/fail/empty -=== RUN TestX5C_Init/fail/empty-name -=== RUN TestX5C_Init/fail/empty-type -=== RUN TestX5C_Init/fail/empty-key --- PASS: TestX5C_Init (0.00s) + --- PASS: TestX5C_Init/fail/empty-name (0.00s) + --- PASS: TestX5C_Init/fail/empty-type (0.00s) + --- PASS: TestX5C_Init/fail/empty-key (0.00s) --- PASS: TestX5C_Init/fail/no-valid-root-certs (0.00s) --- PASS: TestX5C_Init/fail/invalid-duration (0.00s) --- PASS: TestX5C_Init/ok (0.00s) --- PASS: TestX5C_Init/ok/root-chain (0.00s) --- PASS: TestX5C_Init/fail/empty (0.00s) - --- PASS: TestX5C_Init/fail/empty-name (0.00s) - --- PASS: TestX5C_Init/fail/empty-type (0.00s) - --- PASS: TestX5C_Init/fail/empty-key (0.00s) === RUN TestX5C_authorizeToken +=== RUN TestX5C_authorizeToken/fail/empty-subject +=== RUN TestX5C_authorizeToken/ok === RUN TestX5C_authorizeToken/fail/bad-token === RUN TestX5C_authorizeToken/fail/doubled-up-self-signed-cert === RUN TestX5C_authorizeToken/fail/digital-signature-ext-required === RUN TestX5C_authorizeToken/fail/signature-does-not-match-x5c-pub-key -=== RUN TestX5C_authorizeToken/fail/invalid-issuer === RUN TestX5C_authorizeToken/fail/invalid-audience -=== RUN TestX5C_authorizeToken/fail/empty-subject -=== RUN TestX5C_authorizeToken/ok === RUN TestX5C_authorizeToken/fail/invalid-cert-chain ---- PASS: TestX5C_authorizeToken (0.01s) +=== RUN TestX5C_authorizeToken/fail/invalid-issuer +--- PASS: TestX5C_authorizeToken (0.03s) + --- PASS: TestX5C_authorizeToken/fail/empty-subject (0.01s) + --- PASS: TestX5C_authorizeToken/ok (0.00s) --- PASS: TestX5C_authorizeToken/fail/bad-token (0.00s) --- PASS: TestX5C_authorizeToken/fail/doubled-up-self-signed-cert (0.00s) --- PASS: TestX5C_authorizeToken/fail/digital-signature-ext-required (0.00s) - --- PASS: TestX5C_authorizeToken/fail/signature-does-not-match-x5c-pub-key (0.00s) - --- PASS: TestX5C_authorizeToken/fail/invalid-issuer (0.00s) + --- PASS: TestX5C_authorizeToken/fail/signature-does-not-match-x5c-pub-key (0.01s) --- PASS: TestX5C_authorizeToken/fail/invalid-audience (0.00s) - --- PASS: TestX5C_authorizeToken/fail/empty-subject (0.00s) - --- PASS: TestX5C_authorizeToken/ok (0.00s) --- PASS: TestX5C_authorizeToken/fail/invalid-cert-chain (0.00s) + --- PASS: TestX5C_authorizeToken/fail/invalid-issuer (0.01s) === RUN TestX5C_AuthorizeSign +=== RUN TestX5C_AuthorizeSign/ok/empty-sans === RUN TestX5C_AuthorizeSign/ok/multi-sans === RUN TestX5C_AuthorizeSign/fail/invalid-token -=== RUN TestX5C_AuthorizeSign/ok/empty-sans ---- PASS: TestX5C_AuthorizeSign (0.00s) - --- PASS: TestX5C_AuthorizeSign/ok/multi-sans (0.00s) - --- PASS: TestX5C_AuthorizeSign/fail/invalid-token (0.00s) +--- PASS: TestX5C_AuthorizeSign (0.01s) --- PASS: TestX5C_AuthorizeSign/ok/empty-sans (0.00s) + --- PASS: TestX5C_AuthorizeSign/ok/multi-sans (0.01s) + --- PASS: TestX5C_AuthorizeSign/fail/invalid-token (0.00s) === RUN TestX5C_AuthorizeRevoke === RUN TestX5C_AuthorizeRevoke/fail/invalid-token === RUN TestX5C_AuthorizeRevoke/ok ---- PASS: TestX5C_AuthorizeRevoke (0.01s) +--- PASS: TestX5C_AuthorizeRevoke (0.00s) --- PASS: TestX5C_AuthorizeRevoke/fail/invalid-token (0.00s) - --- PASS: TestX5C_AuthorizeRevoke/ok (0.01s) + --- PASS: TestX5C_AuthorizeRevoke/ok (0.00s) === RUN TestX5C_AuthorizeRenew === RUN TestX5C_AuthorizeRenew/fail/renew-disabled === RUN TestX5C_AuthorizeRenew/ok @@ -8587,42 +8623,42 @@ --- PASS: TestX5C_AuthorizeRenew/fail/renew-disabled (0.00s) --- PASS: TestX5C_AuthorizeRenew/ok (0.00s) === RUN TestX5C_AuthorizeSSHSign -=== RUN TestX5C_AuthorizeSSHSign/fail/no-Step-claim -=== RUN TestX5C_AuthorizeSSHSign/fail/no-SSH-subattribute-in-claims -=== RUN TestX5C_AuthorizeSSHSign/ok/with-claims === RUN TestX5C_AuthorizeSSHSign/ok/without-claims === RUN TestX5C_AuthorizeSSHSign/fail/sshCA-disabled === RUN TestX5C_AuthorizeSSHSign/fail/invalid-token +=== RUN TestX5C_AuthorizeSSHSign/fail/no-Step-claim +=== RUN TestX5C_AuthorizeSSHSign/fail/no-SSH-subattribute-in-claims +=== RUN TestX5C_AuthorizeSSHSign/ok/with-claims --- PASS: TestX5C_AuthorizeSSHSign (0.01s) - --- PASS: TestX5C_AuthorizeSSHSign/fail/no-Step-claim (0.00s) - --- PASS: TestX5C_AuthorizeSSHSign/fail/no-SSH-subattribute-in-claims (0.01s) - --- PASS: TestX5C_AuthorizeSSHSign/ok/with-claims (0.00s) - --- PASS: TestX5C_AuthorizeSSHSign/ok/without-claims (0.00s) + --- PASS: TestX5C_AuthorizeSSHSign/ok/without-claims (0.01s) --- PASS: TestX5C_AuthorizeSSHSign/fail/sshCA-disabled (0.00s) --- PASS: TestX5C_AuthorizeSSHSign/fail/invalid-token (0.00s) + --- PASS: TestX5C_AuthorizeSSHSign/fail/no-Step-claim (0.00s) + --- PASS: TestX5C_AuthorizeSSHSign/fail/no-SSH-subattribute-in-claims (0.00s) + --- PASS: TestX5C_AuthorizeSSHSign/ok/with-claims (0.00s) PASS -ok github.com/smallstep/certificates/authority/provisioner 22.858s +ok github.com/smallstep/certificates/authority/provisioner 29.985s === RUN TestNewACMEClient === RUN TestNewACMEClient/fail/client-option-error === RUN TestNewACMEClient/fail/get-directory -2026/05/18 23:57:43 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestNewACMEClient/fail/bad-directory === RUN TestNewACMEClient/fail/error-post-newAccount -2026/05/18 23:57:43 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} +2025/04/16 19:40:49 {"type":"urn:ietf:params:acme:error:accountDoesNotExist","detail":"Account does not exist"} === RUN TestNewACMEClient/fail/error-bad-account === RUN TestNewACMEClient/ok ---- PASS: TestNewACMEClient (0.01s) +--- PASS: TestNewACMEClient (0.02s) --- PASS: TestNewACMEClient/fail/client-option-error (0.00s) --- PASS: TestNewACMEClient/fail/get-directory (0.01s) --- PASS: TestNewACMEClient/fail/bad-directory (0.00s) --- PASS: TestNewACMEClient/fail/error-post-newAccount (0.00s) --- PASS: TestNewACMEClient/fail/error-bad-account (0.00s) - --- PASS: TestNewACMEClient/ok (0.00s) + --- PASS: TestNewACMEClient/ok (0.01s) === RUN TestACMEClient_GetDirectory --- PASS: TestACMEClient_GetDirectory (0.00s) === RUN TestACMEClient_GetNonce === RUN TestACMEClient_GetNonce/fail/GET-nonce -2026/05/18 23:57:43 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_GetNonce/ok --- PASS: TestACMEClient_GetNonce (0.00s) --- PASS: TestACMEClient_GetNonce/fail/GET-nonce (0.00s) @@ -8630,111 +8666,111 @@ === RUN TestACMEClient_post === RUN TestACMEClient_post/fail/account-not-configured === RUN TestACMEClient_post/fail/GET-nonce -2026/05/18 23:57:43 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_post/ok/jwk === RUN TestACMEClient_post/ok/kid ---- PASS: TestACMEClient_post (0.01s) +--- PASS: TestACMEClient_post (0.00s) --- PASS: TestACMEClient_post/fail/account-not-configured (0.00s) --- PASS: TestACMEClient_post/fail/GET-nonce (0.00s) - --- PASS: TestACMEClient_post/ok/jwk (0.01s) + --- PASS: TestACMEClient_post/ok/jwk (0.00s) --- PASS: TestACMEClient_post/ok/kid (0.00s) === RUN TestACMEClient_NewOrder -=== RUN TestACMEClient_NewOrder/ok === RUN TestACMEClient_NewOrder/fail/client-post -2026/05/18 23:57:43 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_NewOrder/fail/newOrder-error -2026/05/18 23:57:43 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_NewOrder/fail/bad-order ---- PASS: TestACMEClient_NewOrder (0.02s) - --- PASS: TestACMEClient_NewOrder/ok (0.00s) +=== RUN TestACMEClient_NewOrder/ok +--- PASS: TestACMEClient_NewOrder (0.03s) --- PASS: TestACMEClient_NewOrder/fail/client-post (0.00s) - --- PASS: TestACMEClient_NewOrder/fail/newOrder-error (0.02s) + --- PASS: TestACMEClient_NewOrder/fail/newOrder-error (0.01s) --- PASS: TestACMEClient_NewOrder/fail/bad-order (0.00s) + --- PASS: TestACMEClient_NewOrder/ok (0.01s) === RUN TestACMEClient_GetOrder === RUN TestACMEClient_GetOrder/fail/client-post -2026/05/18 23:57:43 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_GetOrder/fail/getOrder-error -2026/05/18 23:57:43 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_GetOrder/fail/bad-order === RUN TestACMEClient_GetOrder/ok ---- PASS: TestACMEClient_GetOrder (0.01s) +--- PASS: TestACMEClient_GetOrder (0.02s) --- PASS: TestACMEClient_GetOrder/fail/client-post (0.00s) --- PASS: TestACMEClient_GetOrder/fail/getOrder-error (0.00s) - --- PASS: TestACMEClient_GetOrder/fail/bad-order (0.00s) + --- PASS: TestACMEClient_GetOrder/fail/bad-order (0.01s) --- PASS: TestACMEClient_GetOrder/ok (0.00s) === RUN TestACMEClient_GetAuthz +=== RUN TestACMEClient_GetAuthz/ok === RUN TestACMEClient_GetAuthz/fail/client-post -2026/05/18 23:57:43 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_GetAuthz/fail/getChallenge-error -2026/05/18 23:57:43 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_GetAuthz/fail/bad-challenge -=== RUN TestACMEClient_GetAuthz/ok ---- PASS: TestACMEClient_GetAuthz (0.00s) +--- PASS: TestACMEClient_GetAuthz (0.01s) + --- PASS: TestACMEClient_GetAuthz/ok (0.01s) --- PASS: TestACMEClient_GetAuthz/fail/client-post (0.00s) --- PASS: TestACMEClient_GetAuthz/fail/getChallenge-error (0.00s) --- PASS: TestACMEClient_GetAuthz/fail/bad-challenge (0.00s) - --- PASS: TestACMEClient_GetAuthz/ok (0.00s) === RUN TestACMEClient_GetChallenge === RUN TestACMEClient_GetChallenge/fail/bad-challenge === RUN TestACMEClient_GetChallenge/ok === RUN TestACMEClient_GetChallenge/fail/client-post -2026/05/18 23:57:43 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_GetChallenge/fail/getChallenge-error -2026/05/18 23:57:43 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} ---- PASS: TestACMEClient_GetChallenge (0.02s) - --- PASS: TestACMEClient_GetChallenge/fail/bad-challenge (0.01s) +2025/04/16 19:40:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +--- PASS: TestACMEClient_GetChallenge (0.01s) + --- PASS: TestACMEClient_GetChallenge/fail/bad-challenge (0.00s) --- PASS: TestACMEClient_GetChallenge/ok (0.00s) --- PASS: TestACMEClient_GetChallenge/fail/client-post (0.00s) - --- PASS: TestACMEClient_GetChallenge/fail/getChallenge-error (0.01s) + --- PASS: TestACMEClient_GetChallenge/fail/getChallenge-error (0.00s) === RUN TestACMEClient_ValidateChallenge === RUN TestACMEClient_ValidateChallenge/fail/client-post -2026/05/18 23:57:43 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_ValidateChallenge/fail/getChallenge-error -2026/05/18 23:57:43 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_ValidateChallenge/fail/bad-challenge === RUN TestACMEClient_ValidateChallenge/ok ---- PASS: TestACMEClient_ValidateChallenge (0.01s) +--- PASS: TestACMEClient_ValidateChallenge (0.03s) --- PASS: TestACMEClient_ValidateChallenge/fail/client-post (0.00s) --- PASS: TestACMEClient_ValidateChallenge/fail/getChallenge-error (0.00s) - --- PASS: TestACMEClient_ValidateChallenge/fail/bad-challenge (0.00s) - --- PASS: TestACMEClient_ValidateChallenge/ok (0.00s) + --- PASS: TestACMEClient_ValidateChallenge/fail/bad-challenge (0.02s) + --- PASS: TestACMEClient_ValidateChallenge/ok (0.01s) === RUN TestACMEClient_FinalizeOrder +=== RUN TestACMEClient_FinalizeOrder/ok === RUN TestACMEClient_FinalizeOrder/fail/client-post -2026/05/18 23:57:43 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_FinalizeOrder/fail/finalizeOrder-error -2026/05/18 23:57:43 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_FinalizeOrder/fail/bad-order -=== RUN TestACMEClient_FinalizeOrder/ok ---- PASS: TestACMEClient_FinalizeOrder (0.03s) +--- PASS: TestACMEClient_FinalizeOrder (0.02s) + --- PASS: TestACMEClient_FinalizeOrder/ok (0.00s) --- PASS: TestACMEClient_FinalizeOrder/fail/client-post (0.02s) --- PASS: TestACMEClient_FinalizeOrder/fail/finalizeOrder-error (0.00s) --- PASS: TestACMEClient_FinalizeOrder/fail/bad-order (0.00s) - --- PASS: TestACMEClient_FinalizeOrder/ok (0.01s) === RUN TestACMEClient_GetAccountOrders +=== RUN TestACMEClient_GetAccountOrders/fail/bad-accountOrders +=== RUN TestACMEClient_GetAccountOrders/ok === RUN TestACMEClient_GetAccountOrders/fail/account-not-configured === RUN TestACMEClient_GetAccountOrders/fail/client-post -2026/05/18 23:57:43 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_GetAccountOrders/fail/getAccountOrders-error -2026/05/18 23:57:43 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} -=== RUN TestACMEClient_GetAccountOrders/fail/bad-accountOrders -=== RUN TestACMEClient_GetAccountOrders/ok ---- PASS: TestACMEClient_GetAccountOrders (0.00s) +2025/04/16 19:40:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +--- PASS: TestACMEClient_GetAccountOrders (0.01s) + --- PASS: TestACMEClient_GetAccountOrders/fail/bad-accountOrders (0.00s) + --- PASS: TestACMEClient_GetAccountOrders/ok (0.01s) --- PASS: TestACMEClient_GetAccountOrders/fail/account-not-configured (0.00s) --- PASS: TestACMEClient_GetAccountOrders/fail/client-post (0.00s) --- PASS: TestACMEClient_GetAccountOrders/fail/getAccountOrders-error (0.00s) - --- PASS: TestACMEClient_GetAccountOrders/fail/bad-accountOrders (0.00s) - --- PASS: TestACMEClient_GetAccountOrders/ok (0.00s) === RUN TestACMEClient_GetCertificate === RUN TestACMEClient_GetCertificate/fail/client-post -2026/05/18 23:57:43 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_GetCertificate/fail/getAccountOrders-error -2026/05/18 23:57:43 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} +2025/04/16 19:40:49 {"type":"urn:ietf:params:acme:error:malformed","detail":"The request message was malformed"} === RUN TestACMEClient_GetCertificate/fail/bad-certificate === RUN TestACMEClient_GetCertificate/ok ---- PASS: TestACMEClient_GetCertificate (0.00s) +--- PASS: TestACMEClient_GetCertificate (0.01s) --- PASS: TestACMEClient_GetCertificate/fail/client-post (0.00s) --- PASS: TestACMEClient_GetCertificate/fail/getAccountOrders-error (0.00s) - --- PASS: TestACMEClient_GetCertificate/fail/bad-certificate (0.00s) + --- PASS: TestACMEClient_GetCertificate/fail/bad-certificate (0.01s) --- PASS: TestACMEClient_GetCertificate/ok (0.00s) === RUN TestBootstrap === RUN TestBootstrap/ok @@ -8742,8 +8778,8 @@ === RUN TestBootstrap/bad_claims === RUN TestBootstrap/bad_sha === RUN TestBootstrap/bad_aud ---- PASS: TestBootstrap (0.14s) - --- PASS: TestBootstrap/ok (0.00s) +--- PASS: TestBootstrap (0.34s) + --- PASS: TestBootstrap/ok (0.02s) --- PASS: TestBootstrap/token_err (0.00s) --- PASS: TestBootstrap/bad_claims (0.00s) --- PASS: TestBootstrap/bad_sha (0.00s) @@ -8753,9 +8789,9 @@ === RUN TestBootstrapServerWithoutMTLS/ok_mtls === RUN TestBootstrapServerWithoutMTLS/fail === RUN TestBootstrapServerWithoutMTLS/fail_with_TLSConfig ---- PASS: TestBootstrapServerWithoutMTLS (0.18s) - --- PASS: TestBootstrapServerWithoutMTLS/ok (0.01s) - --- PASS: TestBootstrapServerWithoutMTLS/ok_mtls (0.02s) +--- PASS: TestBootstrapServerWithoutMTLS (0.39s) + --- PASS: TestBootstrapServerWithoutMTLS/ok (0.04s) + --- PASS: TestBootstrapServerWithoutMTLS/ok_mtls (0.03s) --- PASS: TestBootstrapServerWithoutMTLS/fail (0.00s) --- PASS: TestBootstrapServerWithoutMTLS/fail_with_TLSConfig (0.00s) === RUN TestBootstrapServerWithMTLS @@ -8763,91 +8799,91 @@ === RUN TestBootstrapServerWithMTLS/ok_mtls === RUN TestBootstrapServerWithMTLS/fail === RUN TestBootstrapServerWithMTLS/fail_with_TLSConfig ---- PASS: TestBootstrapServerWithMTLS (0.16s) - --- PASS: TestBootstrapServerWithMTLS/ok (0.01s) - --- PASS: TestBootstrapServerWithMTLS/ok_mtls (0.02s) +--- PASS: TestBootstrapServerWithMTLS (0.33s) + --- PASS: TestBootstrapServerWithMTLS/ok (0.02s) + --- PASS: TestBootstrapServerWithMTLS/ok_mtls (0.03s) --- PASS: TestBootstrapServerWithMTLS/fail (0.00s) --- PASS: TestBootstrapServerWithMTLS/fail_with_TLSConfig (0.00s) === RUN TestBootstrapClient === RUN TestBootstrapClient/ok === RUN TestBootstrapClient/ok_mtls === RUN TestBootstrapClient/fail ---- PASS: TestBootstrapClient (0.14s) - --- PASS: TestBootstrapClient/ok (0.02s) - --- PASS: TestBootstrapClient/ok_mtls (0.02s) +--- PASS: TestBootstrapClient (0.22s) + --- PASS: TestBootstrapClient/ok (0.03s) + --- PASS: TestBootstrapClient/ok_mtls (0.04s) --- PASS: TestBootstrapClient/fail (0.00s) === RUN TestBootstrapClientServerRotation bootstrap_test.go:379: skip until we fix https://github.com/smallstep/certificates/issues/873 --- SKIP: TestBootstrapClientServerRotation (0.00s) === RUN TestBootstrapClientServerFederation -2026/05/18 23:57:43 Serving HTTPS on 127.0.0.1:45383 ... -2026/05/18 23:57:44 Serving HTTPS on 127.0.0.1:35987 ... ---- PASS: TestBootstrapClientServerFederation (2.31s) +2025/04/16 19:40:51 Serving HTTPS on 127.0.0.1:45481 ... +2025/04/16 19:40:51 Serving HTTPS on 127.0.0.1:34829 ... +--- PASS: TestBootstrapClientServerFederation (2.37s) === RUN TestBootstrapListener === RUN TestBootstrapListener/ok === RUN TestBootstrapListener/ok_mtls === RUN TestBootstrapListener/fail ---- PASS: TestBootstrapListener (0.22s) +--- PASS: TestBootstrapListener (0.35s) --- PASS: TestBootstrapListener/ok (0.07s) --- PASS: TestBootstrapListener/ok_mtls (0.06s) --- PASS: TestBootstrapListener/fail (0.00s) === RUN TestCASign -=== RUN TestCASign/ok-backwards-compat-missing-subject-SAN -=== RUN TestCASign/fail_invalid-json-body -2026/05/18 23:57:46 error decoding json: invalid character 'i' looking for beginning of value === RUN TestCASign/fail_invalid-csr-sig -2026/05/18 23:57:46 invalid csr: crypto/rsa: verification error +2025/04/16 19:40:53 invalid csr: crypto/rsa: verification error === RUN TestCASign/fail_unauthorized-ott -2026/05/18 23:57:46 authority.Authorize: authority.authorizeSign: error parsing token: go-jose/go-jose: compact JWS format must have three parts +2025/04/16 19:40:53 authority.Authorize: authority.authorizeSign: error parsing token: go-jose/go-jose: compact JWS format must have three parts === RUN TestCASign/fail_commonname-claim -2026/05/18 23:57:46 certificate request does not contain the valid common name - got test.smallstep.com, want invalid +2025/04/16 19:40:53 certificate request does not contain the valid common name - got test.smallstep.com, want invalid === RUN TestCASign/ok ---- PASS: TestCASign (0.06s) - --- PASS: TestCASign/ok-backwards-compat-missing-subject-SAN (0.01s) - --- PASS: TestCASign/fail_invalid-json-body (0.00s) +=== RUN TestCASign/ok-backwards-compat-missing-subject-SAN +=== RUN TestCASign/fail_invalid-json-body +2025/04/16 19:40:53 error decoding json: invalid character 'i' looking for beginning of value +--- PASS: TestCASign (0.12s) --- PASS: TestCASign/fail_invalid-csr-sig (0.00s) --- PASS: TestCASign/fail_unauthorized-ott (0.00s) --- PASS: TestCASign/fail_commonname-claim (0.00s) --- PASS: TestCASign/ok (0.01s) + --- PASS: TestCASign/ok-backwards-compat-missing-subject-SAN (0.01s) + --- PASS: TestCASign/fail_invalid-json-body (0.00s) === RUN TestCAProvisioners === RUN TestCAProvisioners/ok ---- PASS: TestCAProvisioners (0.01s) +--- PASS: TestCAProvisioners (0.00s) --- PASS: TestCAProvisioners/ok (0.00s) === RUN TestCAProvisionerEncryptedKey === RUN TestCAProvisionerEncryptedKey/not-found -2026/05/18 23:57:46 encrypted key with kid foo was not found +2025/04/16 19:40:53 encrypted key with kid foo was not found === RUN TestCAProvisionerEncryptedKey/ok --- PASS: TestCAProvisionerEncryptedKey (0.01s) --- PASS: TestCAProvisionerEncryptedKey/not-found (0.00s) --- PASS: TestCAProvisionerEncryptedKey/ok (0.00s) === RUN TestCARoot === RUN TestCARoot/not-found -2026/05/18 23:57:46 was not found: certificate with fingerprint foo was not found +2025/04/16 19:40:53 was not found: certificate with fingerprint foo was not found === RUN TestCARoot/success --- PASS: TestCARoot (0.00s) --- PASS: TestCARoot/not-found (0.00s) --- PASS: TestCARoot/success (0.00s) === RUN TestCAHealth === RUN TestCAHealth/success ---- PASS: TestCAHealth (0.00s) +--- PASS: TestCAHealth (0.01s) --- PASS: TestCAHealth/success (0.00s) === RUN TestCARenew === RUN TestCARenew/request-missing-tls -2026/05/18 23:57:46 missing client certificate +2025/04/16 19:40:53 missing client certificate === RUN TestCARenew/request-missing-peer-certificate -2026/05/18 23:57:46 missing client certificate +2025/04/16 19:40:53 missing client certificate === RUN TestCARenew/success ---- PASS: TestCARenew (0.01s) +--- PASS: TestCARenew (0.02s) --- PASS: TestCARenew/request-missing-tls (0.00s) - --- PASS: TestCARenew/request-missing-peer-certificate (0.01s) - --- PASS: TestCARenew/success (0.00s) + --- PASS: TestCARenew/request-missing-peer-certificate (0.00s) + --- PASS: TestCARenew/success (0.01s) === RUN TestClient_Version === RUN TestClient_Version/ok === RUN TestClient_Version/500 === RUN TestClient_Version/404 ---- PASS: TestClient_Version (0.00s) - --- PASS: TestClient_Version/ok (0.00s) - --- PASS: TestClient_Version/500 (0.00s) +--- PASS: TestClient_Version (0.02s) + --- PASS: TestClient_Version/ok (0.01s) + --- PASS: TestClient_Version/500 (0.01s) --- PASS: TestClient_Version/404 (0.00s) === RUN TestClient_Health === RUN TestClient_Health/ok @@ -8866,10 +8902,10 @@ === RUN TestClient_Sign/unauthorized === RUN TestClient_Sign/empty_request === RUN TestClient_Sign/nil_request ---- PASS: TestClient_Sign (0.01s) - --- PASS: TestClient_Sign/ok (0.01s) +--- PASS: TestClient_Sign (0.03s) + --- PASS: TestClient_Sign/ok (0.00s) --- PASS: TestClient_Sign/unauthorized (0.00s) - --- PASS: TestClient_Sign/empty_request (0.00s) + --- PASS: TestClient_Sign/empty_request (0.02s) --- PASS: TestClient_Sign/nil_request (0.00s) === RUN TestClient_Revoke === RUN TestClient_Revoke/ok @@ -8894,18 +8930,18 @@ === RUN TestClient_RenewWithToken/unauthorized === RUN TestClient_RenewWithToken/empty_request === RUN TestClient_RenewWithToken/nil_request ---- PASS: TestClient_RenewWithToken (0.00s) +--- PASS: TestClient_RenewWithToken (0.02s) --- PASS: TestClient_RenewWithToken/ok (0.00s) --- PASS: TestClient_RenewWithToken/unauthorized (0.00s) - --- PASS: TestClient_RenewWithToken/empty_request (0.00s) + --- PASS: TestClient_RenewWithToken/empty_request (0.01s) --- PASS: TestClient_RenewWithToken/nil_request (0.00s) === RUN TestClient_Rekey === RUN TestClient_Rekey/ok === RUN TestClient_Rekey/unauthorized === RUN TestClient_Rekey/empty_request === RUN TestClient_Rekey/nil_request ---- PASS: TestClient_Rekey (0.01s) - --- PASS: TestClient_Rekey/ok (0.01s) +--- PASS: TestClient_Rekey (0.00s) + --- PASS: TestClient_Rekey/ok (0.00s) --- PASS: TestClient_Rekey/unauthorized (0.00s) --- PASS: TestClient_Rekey/empty_request (0.00s) --- PASS: TestClient_Rekey/nil_request (0.00s) @@ -8931,10 +8967,10 @@ === RUN TestClient_Roots/ok === RUN TestClient_Roots/unauthorized === RUN TestClient_Roots/bad-request ---- PASS: TestClient_Roots (0.00s) +--- PASS: TestClient_Roots (0.01s) --- PASS: TestClient_Roots/ok (0.00s) --- PASS: TestClient_Roots/unauthorized (0.00s) - --- PASS: TestClient_Roots/bad-request (0.00s) + --- PASS: TestClient_Roots/bad-request (0.01s) === RUN TestClient_Federation === RUN TestClient_Federation/ok === RUN TestClient_Federation/unauthorized @@ -8975,9 +9011,9 @@ === RUN TestClient_RootFingerprint/ok === RUN TestClient_RootFingerprint/ok_with_error === RUN TestClient_RootFingerprint/fail ---- PASS: TestClient_RootFingerprint (0.02s) +--- PASS: TestClient_RootFingerprint (0.04s) --- PASS: TestClient_RootFingerprint/ok (0.01s) - --- PASS: TestClient_RootFingerprint/ok_with_error (0.01s) + --- PASS: TestClient_RootFingerprint/ok_with_error (0.02s) --- PASS: TestClient_RootFingerprint/fail (0.00s) === RUN TestClient_RootFingerprintWithServer --- PASS: TestClient_RootFingerprintWithServer (0.01s) @@ -9005,35 +9041,35 @@ === RUN TestNewProvisioner/ok-with-bundle === RUN TestNewProvisioner/ok-with-fingerprint === RUN TestNewProvisioner/fail-bad-kid -2026/05/18 23:57:46 encrypted key with kid bad-kid was not found +2025/04/16 19:40:54 encrypted key with kid bad-kid was not found === RUN TestNewProvisioner/fail-empty-name === RUN TestNewProvisioner/fail-bad-name === RUN TestNewProvisioner/fail-by-password === RUN TestNewProvisioner/fail-by-password-no-kid === RUN TestNewProvisioner/fail-bad-certificate === RUN TestNewProvisioner/fail-not-found-certificate -2026/05/18 23:57:47 http: TLS handshake error from 127.0.0.1:37374: remote error: tls: bad certificate ---- PASS: TestNewProvisioner (0.40s) - --- PASS: TestNewProvisioner/ok (0.04s) - --- PASS: TestNewProvisioner/ok-by-name (0.05s) - --- PASS: TestNewProvisioner/ok-with-bundle (0.05s) - --- PASS: TestNewProvisioner/ok-with-fingerprint (0.09s) +2025/04/16 19:40:54 http: TLS handshake error from 127.0.0.1:52034: read tcp 127.0.0.1:37145->127.0.0.1:52034: use of closed network connection +--- PASS: TestNewProvisioner (0.64s) + --- PASS: TestNewProvisioner/ok (0.10s) + --- PASS: TestNewProvisioner/ok-by-name (0.08s) + --- PASS: TestNewProvisioner/ok-with-bundle (0.07s) + --- PASS: TestNewProvisioner/ok-with-fingerprint (0.12s) --- PASS: TestNewProvisioner/fail-bad-kid (0.01s) --- PASS: TestNewProvisioner/fail-empty-name (0.00s) --- PASS: TestNewProvisioner/fail-bad-name (0.01s) - --- PASS: TestNewProvisioner/fail-by-password (0.05s) - --- PASS: TestNewProvisioner/fail-by-password-no-kid (0.05s) - --- PASS: TestNewProvisioner/fail-bad-certificate (0.01s) + --- PASS: TestNewProvisioner/fail-by-password (0.07s) + --- PASS: TestNewProvisioner/fail-by-password-no-kid (0.09s) + --- PASS: TestNewProvisioner/fail-bad-certificate (0.00s) --- PASS: TestNewProvisioner/fail-not-found-certificate (0.00s) === RUN TestProvisioner_Getters ---- PASS: TestProvisioner_Getters (0.04s) +--- PASS: TestProvisioner_Getters (0.06s) === RUN TestProvisioner_Token === RUN TestProvisioner_Token/ok === RUN TestProvisioner_Token/ok-with-san === RUN TestProvisioner_Token/ok-with-sans === RUN TestProvisioner_Token/fail-no-subject === RUN TestProvisioner_Token/fail-no-key ---- PASS: TestProvisioner_Token (0.04s) +--- PASS: TestProvisioner_Token (0.07s) --- PASS: TestProvisioner_Token/ok (0.00s) --- PASS: TestProvisioner_Token/ok-with-san (0.00s) --- PASS: TestProvisioner_Token/ok-with-sans (0.00s) @@ -9045,9 +9081,9 @@ === RUN TestProvisioner_IPv6Token/ok-with-sans === RUN TestProvisioner_IPv6Token/fail-no-subject === RUN TestProvisioner_IPv6Token/fail-no-key ---- PASS: TestProvisioner_IPv6Token (0.05s) +--- PASS: TestProvisioner_IPv6Token (0.08s) --- PASS: TestProvisioner_IPv6Token/ok (0.00s) - --- PASS: TestProvisioner_IPv6Token/ok-with-san (0.00s) + --- PASS: TestProvisioner_IPv6Token/ok-with-san (0.01s) --- PASS: TestProvisioner_IPv6Token/ok-with-sans (0.00s) --- PASS: TestProvisioner_IPv6Token/fail-no-subject (0.00s) --- PASS: TestProvisioner_IPv6Token/fail-no-key (0.00s) @@ -9057,7 +9093,7 @@ === RUN TestProvisioner_SSHToken/ok_multiple_principals === RUN TestProvisioner_SSHToken/fail-no-subject === RUN TestProvisioner_SSHToken/fail-no-key ---- PASS: TestProvisioner_SSHToken (0.04s) +--- PASS: TestProvisioner_SSHToken (0.07s) --- PASS: TestProvisioner_SSHToken/ok (0.00s) --- PASS: TestProvisioner_SSHToken/ok_host (0.00s) --- PASS: TestProvisioner_SSHToken/ok_multiple_principals (0.00s) @@ -9094,131 +9130,131 @@ === RUN TestAddRootsToRootCAs === RUN TestAddRootsToRootCAs/ok === RUN TestAddRootsToRootCAs/fail -2026/05/18 23:57:47 http: TLS handshake error from 127.0.0.1:47000: read tcp 127.0.0.1:37095->127.0.0.1:47000: use of closed network connection ---- PASS: TestAddRootsToRootCAs (0.03s) - --- PASS: TestAddRootsToRootCAs/ok (0.01s) +2025/04/16 19:40:54 http: TLS handshake error from 127.0.0.1:54474: read tcp 127.0.0.1:32859->127.0.0.1:54474: use of closed network connection +--- PASS: TestAddRootsToRootCAs (0.02s) + --- PASS: TestAddRootsToRootCAs/ok (0.02s) --- PASS: TestAddRootsToRootCAs/fail (0.01s) === RUN TestAddRootsToClientCAs === RUN TestAddRootsToClientCAs/ok === RUN TestAddRootsToClientCAs/fail -2026/05/18 23:57:47 http: TLS handshake error from 127.0.0.1:41356: remote error: tls: bad certificate +2025/04/16 19:40:55 http: TLS handshake error from 127.0.0.1:37192: read tcp 127.0.0.1:37635->127.0.0.1:37192: use of closed network connection --- PASS: TestAddRootsToClientCAs (0.01s) --- PASS: TestAddRootsToClientCAs/ok (0.01s) --- PASS: TestAddRootsToClientCAs/fail (0.00s) === RUN TestAddFederationToRootCAs === RUN TestAddFederationToRootCAs/ok === RUN TestAddFederationToRootCAs/fail -2026/05/18 23:57:47 http: TLS handshake error from 127.0.0.1:59216: read tcp 127.0.0.1:38607->127.0.0.1:59216: use of closed network connection +2025/04/16 19:40:55 http: TLS handshake error from 127.0.0.1:57776: read tcp 127.0.0.1:38591->127.0.0.1:57776: use of closed network connection --- PASS: TestAddFederationToRootCAs (0.01s) --- PASS: TestAddFederationToRootCAs/ok (0.01s) - --- PASS: TestAddFederationToRootCAs/fail (0.00s) + --- PASS: TestAddFederationToRootCAs/fail (0.01s) === RUN TestAddFederationToClientCAs === RUN TestAddFederationToClientCAs/ok === RUN TestAddFederationToClientCAs/fail -2026/05/18 23:57:47 http: TLS handshake error from 127.0.0.1:41694: read tcp 127.0.0.1:46207->127.0.0.1:41694: use of closed network connection +2025/04/16 19:40:55 http: TLS handshake error from 127.0.0.1:36790: read tcp 127.0.0.1:41841->127.0.0.1:36790: use of closed network connection --- PASS: TestAddFederationToClientCAs (0.01s) --- PASS: TestAddFederationToClientCAs/ok (0.01s) --- PASS: TestAddFederationToClientCAs/fail (0.00s) === RUN TestAddRootsToCAs === RUN TestAddRootsToCAs/ok === RUN TestAddRootsToCAs/fail -2026/05/18 23:57:47 http: TLS handshake error from 127.0.0.1:53840: read tcp 127.0.0.1:33639->127.0.0.1:53840: use of closed network connection +2025/04/16 19:40:55 http: TLS handshake error from 127.0.0.1:40450: read tcp 127.0.0.1:35707->127.0.0.1:40450: use of closed network connection --- PASS: TestAddRootsToCAs (0.01s) - --- PASS: TestAddRootsToCAs/ok (0.01s) + --- PASS: TestAddRootsToCAs/ok (0.00s) --- PASS: TestAddRootsToCAs/fail (0.00s) === RUN TestAddFederationToCAs === RUN TestAddFederationToCAs/ok === RUN TestAddFederationToCAs/fail -2026/05/18 23:57:47 http: TLS handshake error from 127.0.0.1:41702: read tcp 127.0.0.1:36495->127.0.0.1:41702: use of closed network connection ---- PASS: TestAddFederationToCAs (0.01s) - --- PASS: TestAddFederationToCAs/ok (0.01s) - --- PASS: TestAddFederationToCAs/fail (0.00s) +2025/04/16 19:40:55 http: TLS handshake error from 127.0.0.1:55926: remote error: tls: bad certificate +--- PASS: TestAddFederationToCAs (0.05s) + --- PASS: TestAddFederationToCAs/ok (0.00s) + --- PASS: TestAddFederationToCAs/fail (0.01s) === RUN TestClient_GetServerTLSConfig_http === RUN TestClient_GetServerTLSConfig_http/with_transport -=== RUN TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:43239 -=== RUN TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:38759 +=== RUN TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:35663 +=== RUN TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:44301 === RUN TestClient_GetServerTLSConfig_http/with_tlsConfig -=== RUN TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:38759 -=== RUN TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:43239 +=== RUN TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:35663 +=== RUN TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:44301 === RUN TestClient_GetServerTLSConfig_http/with_no_ClientCert -=== RUN TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:38759/no-cert -=== RUN TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:43239/no-cert -2026/05/18 23:57:47 http: TLS handshake error from 127.0.0.1:46202: tls: client didn't provide a certificate +=== RUN TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:35663/no-cert +=== RUN TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:44301/no-cert +2025/04/16 19:40:55 http: TLS handshake error from 127.0.0.1:55226: tls: client didn't provide a certificate === RUN TestClient_GetServerTLSConfig_http/fail_with_default -=== RUN TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:38759/no-cert -=== RUN TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:43239/no-cert -2026/05/18 23:57:47 http: TLS handshake error from 127.0.0.1:43396: remote error: tls: bad certificate -2026/05/18 23:57:47 http: TLS handshake error from 127.0.0.1:46214: read tcp 127.0.0.1:43239->127.0.0.1:46214: use of closed network connection ---- PASS: TestClient_GetServerTLSConfig_http (0.33s) - --- PASS: TestClient_GetServerTLSConfig_http/with_transport (0.08s) - --- PASS: TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:43239 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:38759 (0.01s) - --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig (0.06s) - --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:38759 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:43239 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert (0.06s) - --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:38759/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:43239/no-cert (0.01s) - --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default (0.08s) - --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:38759/no-cert (0.01s) - --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:43239/no-cert (0.00s) +=== RUN TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:35663/no-cert +=== RUN TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:44301/no-cert +2025/04/16 19:40:55 http: TLS handshake error from 127.0.0.1:42322: remote error: tls: bad certificate +2025/04/16 19:40:55 http: TLS handshake error from 127.0.0.1:55232: read tcp 127.0.0.1:44301->127.0.0.1:55232: use of closed network connection +--- PASS: TestClient_GetServerTLSConfig_http (0.48s) + --- PASS: TestClient_GetServerTLSConfig_http/with_transport (0.07s) + --- PASS: TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:35663 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:44301 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig (0.08s) + --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:35663 (0.01s) + --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:44301 (0.01s) + --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert (0.14s) + --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:35663/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:44301/no-cert (0.01s) + --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default (0.12s) + --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:35663/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:44301/no-cert (0.00s) === RUN TestClient_GetServerTLSConfig_renew === RUN TestClient_GetServerTLSConfig_renew/with_transport -=== RUN TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:40829 -=== RUN TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:41973 +=== RUN TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:40161 +=== RUN TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:39967 === RUN TestClient_GetServerTLSConfig_renew/with_tlsConfig -=== RUN TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:40829 -=== RUN TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:41973 +=== RUN TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:40161 +=== RUN TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:39967 === RUN TestClient_GetServerTLSConfig_renew/with_no_ClientCert -=== RUN TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:41973/no-cert -2026/05/18 23:57:47 http: TLS handshake error from 127.0.0.1:41068: tls: client didn't provide a certificate -=== RUN TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:40829/no-cert +=== RUN TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:40161/no-cert +=== RUN TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:39967/no-cert +2025/04/16 19:40:55 http: TLS handshake error from 127.0.0.1:33320: tls: client didn't provide a certificate === RUN TestClient_GetServerTLSConfig_renew/fail_with_default -=== RUN TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:40829/no-cert -=== RUN TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:41973/no-cert -2026/05/18 23:57:47 http: TLS handshake error from 127.0.0.1:52530: remote error: tls: bad certificate -2026/05/18 23:57:47 http: TLS handshake error from 127.0.0.1:41084: remote error: tls: bad certificate -2026/05/18 23:57:47 Sleeping for 5s ... +=== RUN TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:40161/no-cert +=== RUN TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:39967/no-cert +2025/04/16 19:40:55 http: TLS handshake error from 127.0.0.1:41022: remote error: tls: bad certificate +2025/04/16 19:40:55 Sleeping for 5s ... +2025/04/16 19:40:55 http: TLS handshake error from 127.0.0.1:33336: remote error: tls: bad certificate === RUN TestClient_GetServerTLSConfig_renew/renewed_with_transport -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:40829 -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:41973 +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:40161 +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:39967 === RUN TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:40829 -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:41973 +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:40161 +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:39967 === RUN TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:40829/no-cert -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:41973/no-cert -2026/05/18 23:57:53 http: TLS handshake error from 127.0.0.1:42042: tls: client didn't provide a certificate +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:40161/no-cert +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:39967/no-cert +2025/04/16 19:41:00 http: TLS handshake error from 127.0.0.1:33358: tls: client didn't provide a certificate === RUN TestClient_GetServerTLSConfig_renew/renewed_fail_with_default -=== RUN TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:40829/no-cert -=== RUN TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:41973/no-cert -2026/05/18 23:57:53 http: TLS handshake error from 127.0.0.1:35590: remote error: tls: bad certificate -2026/05/18 23:57:53 http: TLS handshake error from 127.0.0.1:42050: remote error: tls: bad certificate ---- PASS: TestClient_GetServerTLSConfig_renew (5.64s) +=== RUN TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:40161/no-cert +=== RUN TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:39967/no-cert +2025/04/16 19:41:00 http: TLS handshake error from 127.0.0.1:41072: remote error: tls: bad certificate +2025/04/16 19:41:00 http: TLS handshake error from 127.0.0.1:33366: read tcp 127.0.0.1:39967->127.0.0.1:33366: use of closed network connection +--- PASS: TestClient_GetServerTLSConfig_renew (5.30s) --- PASS: TestClient_GetServerTLSConfig_renew/with_transport (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:40829 (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:41973 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:40161 (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:39967 (0.00s) --- PASS: TestClient_GetServerTLSConfig_renew/with_tlsConfig (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:40829 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:41973 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:40161 (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:39967 (0.00s) --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:41973/no-cert (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:40829/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/fail_with_default (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:40829/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:41973/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport (0.03s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:40829 (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:41973 (0.02s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:40829 (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:41973 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert (0.40s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:40829/no-cert (0.39s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:41973/no-cert (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:40161/no-cert (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:39967/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/fail_with_default (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:40161/no-cert (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:39967/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport (0.02s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:40161 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:39967 (0.02s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig (0.02s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:40161 (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:39967 (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert (0.02s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:40161/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:39967/no-cert (0.01s) --- PASS: TestClient_GetServerTLSConfig_renew/renewed_fail_with_default (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:40829/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:41973/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:40161/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:39967/no-cert (0.01s) === RUN TestCertificate === RUN TestCertificate/ok === RUN TestCertificate/fail @@ -9240,9 +9276,9 @@ --- PASS: TestRootCertificateCertificate/fail (0.00s) --- PASS: TestRootCertificateCertificate/no_tls (0.00s) PASS -ok github.com/smallstep/certificates/ca 10.177s +ok github.com/smallstep/certificates/ca 11.495s === RUN TestClient -2026/05/18 23:57:43 http: TLS handshake error from 127.0.0.1:37258: read tcp 127.0.0.1:41309->127.0.0.1:37258: use of closed network connection +2025/04/16 19:40:49 http: TLS handshake error from 127.0.0.1:58418: read tcp 127.0.0.1:33739->127.0.0.1:58418: use of closed network connection --- PASS: TestClient (0.03s) === RUN TestClient_ResolveReference === RUN TestClient_ResolveReference/ok @@ -9332,9 +9368,9 @@ === RUN TestIdentity_TLSCertificate/fail_certificate === RUN TestIdentity_TLSCertificate/fail_not_after === RUN TestIdentity_TLSCertificate/fail_not_before ---- PASS: TestIdentity_TLSCertificate (0.00s) +--- PASS: TestIdentity_TLSCertificate (0.01s) --- PASS: TestIdentity_TLSCertificate/ok_mTLS (0.00s) - --- PASS: TestIdentity_TLSCertificate/ok_tTLS (0.00s) + --- PASS: TestIdentity_TLSCertificate/ok_tTLS (0.01s) --- PASS: TestIdentity_TLSCertificate/ok_disabled (0.00s) --- PASS: TestIdentity_TLSCertificate/fail_type (0.00s) --- PASS: TestIdentity_TLSCertificate/fail_certificate (0.00s) @@ -9367,7 +9403,7 @@ === RUN TestIdentity_GetClientCertificateFunc/ok_tTLS === RUN TestIdentity_GetClientCertificateFunc/fail_missing_cert === RUN TestIdentity_GetClientCertificateFunc/fail_missing_key ---- PASS: TestIdentity_GetClientCertificateFunc (0.01s) +--- PASS: TestIdentity_GetClientCertificateFunc (0.00s) --- PASS: TestIdentity_GetClientCertificateFunc/ok_mTLS (0.00s) --- PASS: TestIdentity_GetClientCertificateFunc/ok_tTLS (0.00s) --- PASS: TestIdentity_GetClientCertificateFunc/fail_missing_cert (0.00s) @@ -9399,7 +9435,7 @@ --- PASS: TestIdentity_Renew/fail_certificate (0.00s) --- PASS: TestIdentity_Renew/fail_write_identity (0.00s) PASS -ok github.com/smallstep/certificates/ca/identity 0.128s +ok github.com/smallstep/certificates/ca/identity 0.183s === RUN TestNew === RUN TestNew/ok_default === RUN TestNew/ok_softcas @@ -9427,7 +9463,7 @@ --- PASS: TestNewCreator/fail_type (0.00s) --- PASS: TestNewCreator/fail_no_creator (0.00s) PASS -ok github.com/smallstep/certificates/cas 0.068s +ok github.com/smallstep/certificates/cas 0.104s === RUN TestCreateCertificateAuthorityExtension === RUN TestCreateCertificateAuthorityExtension/ok === RUN TestCreateCertificateAuthorityExtension/ok#01 @@ -9492,9 +9528,9 @@ --- PASS: TestOptions_Is/fail#01 (0.00s) === RUN TestRegister === RUN TestRegister/ok -&{{} {{{} 1} {0 0} {[] {} 0x4000120be0} 0x4757a0 0x40e620 666879760808617755}} +&{{} {{{} 1} {0 0} {[] {} 0x40000a2d20} 0x4757a0 0x40e620 15213218364383997644}} === RUN TestRegister/error -&{{} {{{} 1} {0 0} {[] {} 0x4000120be0} 0x4757a0 0x40e620 666879760808617755}} +&{{} {{{} 1} {0 0} {[] {} 0x40000a2d20} 0x4757a0 0x40e620 15213218364383997644}} --- PASS: TestRegister (0.00s) --- PASS: TestRegister/ok (0.00s) --- PASS: TestRegister/error (0.00s) @@ -9535,7 +9571,7 @@ --- PASS: TestErrNotImplemented_StatusCode/default (0.00s) --- PASS: TestErrNotImplemented_StatusCode/with_message (0.00s) PASS -ok github.com/smallstep/certificates/cas/apiv1 0.072s +ok github.com/smallstep/certificates/cas/apiv1 0.111s === RUN TestNew === RUN TestNew/ok === RUN TestNew/ok_with_callback @@ -9559,11 +9595,11 @@ === RUN TestSoftCAS_CreateCertificate/fail_CreateCertificate === RUN TestSoftCAS_CreateCertificate/fail_with_callback --- PASS: TestSoftCAS_CreateCertificate (0.01s) - --- PASS: TestSoftCAS_CreateCertificate/ok (0.00s) + --- PASS: TestSoftCAS_CreateCertificate/ok (0.01s) --- PASS: TestSoftCAS_CreateCertificate/ok_signature_algorithm (0.00s) --- PASS: TestSoftCAS_CreateCertificate/ok_with_notBefore (0.00s) --- PASS: TestSoftCAS_CreateCertificate/ok_with_notBefore+notAfter (0.00s) - --- PASS: TestSoftCAS_CreateCertificate/ok_with_callback (0.01s) + --- PASS: TestSoftCAS_CreateCertificate/ok_with_callback (0.00s) --- PASS: TestSoftCAS_CreateCertificate/fail_template (0.00s) --- PASS: TestSoftCAS_CreateCertificate/fail_lifetime (0.00s) --- PASS: TestSoftCAS_CreateCertificate/fail_CreateCertificate (0.00s) @@ -9613,8 +9649,8 @@ === RUN TestSoftCAS_CreateCertificateAuthority/fail_createSigner === RUN TestSoftCAS_CreateCertificateAuthority/fail_sign_root === RUN TestSoftCAS_CreateCertificateAuthority/fail_sign_intermediate ---- PASS: TestSoftCAS_CreateCertificateAuthority (0.00s) - --- PASS: TestSoftCAS_CreateCertificateAuthority/ok_root (0.00s) +--- PASS: TestSoftCAS_CreateCertificateAuthority (0.01s) + --- PASS: TestSoftCAS_CreateCertificateAuthority/ok_root (0.01s) --- PASS: TestSoftCAS_CreateCertificateAuthority/ok_intermediate (0.00s) --- PASS: TestSoftCAS_CreateCertificateAuthority/ok_signature_algorithm (0.00s) --- PASS: TestSoftCAS_CreateCertificateAuthority/ok_createKey (0.00s) @@ -9637,43 +9673,43 @@ --- PASS: TestSoftCAS_defaultKeyManager/ok_intermediate (0.00s) --- PASS: TestSoftCAS_defaultKeyManager/fail_with_default_key_manager (0.00s) PASS -ok github.com/smallstep/certificates/cas/softcas 0.120s +ok github.com/smallstep/certificates/cas/softcas 0.176s === RUN Test_newStepIssuer === RUN Test_newStepIssuer/x5c === RUN Test_newStepIssuer/jwk === RUN Test_newStepIssuer/fail ---- PASS: Test_newStepIssuer (0.38s) +--- PASS: Test_newStepIssuer (0.56s) --- PASS: Test_newStepIssuer/x5c (0.00s) --- PASS: Test_newStepIssuer/jwk (0.00s) --- PASS: Test_newStepIssuer/fail (0.00s) === RUN Test_jwkIssuer_SignToken === RUN Test_jwkIssuer_SignToken/ok === RUN Test_jwkIssuer_SignToken/fail ---- PASS: Test_jwkIssuer_SignToken (0.26s) +--- PASS: Test_jwkIssuer_SignToken (0.56s) --- PASS: Test_jwkIssuer_SignToken/ok (0.00s) --- PASS: Test_jwkIssuer_SignToken/fail (0.00s) === RUN Test_jwkIssuer_RevokeToken === RUN Test_jwkIssuer_RevokeToken/ok === RUN Test_jwkIssuer_RevokeToken/ok#01 ---- PASS: Test_jwkIssuer_RevokeToken (0.26s) +--- PASS: Test_jwkIssuer_RevokeToken (0.56s) --- PASS: Test_jwkIssuer_RevokeToken/ok (0.00s) --- PASS: Test_jwkIssuer_RevokeToken/ok#01 (0.00s) === RUN Test_jwkIssuer_Lifetime === RUN Test_jwkIssuer_Lifetime/ok ---- PASS: Test_jwkIssuer_Lifetime (0.24s) +--- PASS: Test_jwkIssuer_Lifetime (0.56s) --- PASS: Test_jwkIssuer_Lifetime/ok (0.00s) === RUN Test_newJWKSignerFromEncryptedKey === RUN Test_newJWKSignerFromEncryptedKey/ok === RUN Test_newJWKSignerFromEncryptedKey/fail_decrypt === RUN Test_newJWKSignerFromEncryptedKey/fail_unmarshal === RUN Test_newJWKSignerFromEncryptedKey/fail_not_signer ---- PASS: Test_newJWKSignerFromEncryptedKey (1.49s) - --- PASS: Test_newJWKSignerFromEncryptedKey/ok (0.23s) - --- PASS: Test_newJWKSignerFromEncryptedKey/fail_decrypt (0.24s) - --- PASS: Test_newJWKSignerFromEncryptedKey/fail_unmarshal (0.25s) - --- PASS: Test_newJWKSignerFromEncryptedKey/fail_not_signer (0.28s) +--- PASS: Test_newJWKSignerFromEncryptedKey (2.51s) + --- PASS: Test_newJWKSignerFromEncryptedKey/ok (0.44s) + --- PASS: Test_newJWKSignerFromEncryptedKey/fail_decrypt (0.40s) + --- PASS: Test_newJWKSignerFromEncryptedKey/fail_unmarshal (0.33s) + --- PASS: Test_newJWKSignerFromEncryptedKey/fail_not_signer (0.30s) === RUN Test_init ---- PASS: Test_init (0.01s) +--- PASS: Test_init (0.00s) === RUN TestNew === RUN TestNew/ok === RUN TestNew/ok_jwk @@ -9697,27 +9733,27 @@ === RUN TestNew/fail_new_jwk_issuer === RUN TestNew/bad_issuer === RUN TestNew/bad_issuer_type ---- PASS: TestNew (0.89s) - --- PASS: TestNew/ok (0.01s) +--- PASS: TestNew (0.50s) + --- PASS: TestNew/ok (0.00s) --- PASS: TestNew/ok_jwk (0.00s) - --- PASS: TestNew/ok_jwk_provisioners (0.33s) + --- PASS: TestNew/ok_jwk_provisioners (0.14s) --- PASS: TestNew/ok_ca_getter (0.00s) --- PASS: TestNew/fail_authority (0.00s) --- PASS: TestNew/fail_fingerprint (0.00s) --- PASS: TestNew/fail_type (0.00s) --- PASS: TestNew/fail_provisioner (0.00s) --- PASS: TestNew/fail_provisioner_jwk (0.00s) - --- PASS: TestNew/fail_provisioner_not_found (0.01s) - --- PASS: TestNew/fail_invalid_password (0.24s) + --- PASS: TestNew/fail_provisioner_not_found (0.00s) + --- PASS: TestNew/fail_invalid_password (0.13s) --- PASS: TestNew/fail_no_key (0.00s) --- PASS: TestNew/fail_certificate (0.00s) --- PASS: TestNew/fail_key (0.00s) --- PASS: TestNew/fail_key_jwk (0.00s) - --- PASS: TestNew/bad_authority (0.00s) + --- PASS: TestNew/bad_authority (0.01s) --- PASS: TestNew/fail_parse_url (0.00s) --- PASS: TestNew/fail_new_client (0.00s) - --- PASS: TestNew/fail_new_x5c_issuer (0.02s) - --- PASS: TestNew/fail_new_jwk_issuer (0.01s) + --- PASS: TestNew/fail_new_x5c_issuer (0.00s) + --- PASS: TestNew/fail_new_jwk_issuer (0.00s) --- PASS: TestNew/bad_issuer (0.00s) --- PASS: TestNew/bad_issuer_type (0.00s) === RUN TestStepCAS_CreateCertificate @@ -9730,16 +9766,16 @@ === RUN TestStepCAS_CreateCertificate/fail_sign_token === RUN TestStepCAS_CreateCertificate/fail_client_sign === RUN TestStepCAS_CreateCertificate/fail_password ---- PASS: TestStepCAS_CreateCertificate (1.76s) +--- PASS: TestStepCAS_CreateCertificate (1.05s) --- PASS: TestStepCAS_CreateCertificate/ok (0.00s) - --- PASS: TestStepCAS_CreateCertificate/ok_with_password (0.47s) + --- PASS: TestStepCAS_CreateCertificate/ok_with_password (0.26s) --- PASS: TestStepCAS_CreateCertificate/ok_jwk (0.00s) --- PASS: TestStepCAS_CreateCertificate/ok_jwk_with_password (0.00s) --- PASS: TestStepCAS_CreateCertificate/fail_CSR (0.00s) --- PASS: TestStepCAS_CreateCertificate/fail_lifetime (0.00s) --- PASS: TestStepCAS_CreateCertificate/fail_sign_token (0.00s) --- PASS: TestStepCAS_CreateCertificate/fail_client_sign (0.00s) - --- PASS: TestStepCAS_CreateCertificate/fail_password (0.34s) + --- PASS: TestStepCAS_CreateCertificate/fail_password (0.28s) === RUN TestStepCAS_RenewCertificate === RUN TestStepCAS_RenewCertificate/not_implemented === RUN TestStepCAS_RenewCertificate/not_implemented_jwk @@ -9759,11 +9795,11 @@ === RUN TestStepCAS_RevokeCertificate/fail_revoke_token === RUN TestStepCAS_RevokeCertificate/fail_client_revoke === RUN TestStepCAS_RevokeCertificate/fail_password ---- PASS: TestStepCAS_RevokeCertificate (1.29s) +--- PASS: TestStepCAS_RevokeCertificate (1.19s) --- PASS: TestStepCAS_RevokeCertificate/ok_serial_number (0.00s) --- PASS: TestStepCAS_RevokeCertificate/ok_certificate (0.00s) - --- PASS: TestStepCAS_RevokeCertificate/ok_both (0.48s) - --- PASS: TestStepCAS_RevokeCertificate/ok_with_password (0.20s) + --- PASS: TestStepCAS_RevokeCertificate/ok_both (0.00s) + --- PASS: TestStepCAS_RevokeCertificate/ok_with_password (0.17s) --- PASS: TestStepCAS_RevokeCertificate/ok_serial_number_jwk (0.00s) --- PASS: TestStepCAS_RevokeCertificate/ok_certificate_jwk (0.00s) --- PASS: TestStepCAS_RevokeCertificate/ok_both_jwk (0.00s) @@ -9771,7 +9807,7 @@ --- PASS: TestStepCAS_RevokeCertificate/fail_request (0.00s) --- PASS: TestStepCAS_RevokeCertificate/fail_revoke_token (0.00s) --- PASS: TestStepCAS_RevokeCertificate/fail_client_revoke (0.00s) - --- PASS: TestStepCAS_RevokeCertificate/fail_password (0.16s) + --- PASS: TestStepCAS_RevokeCertificate/fail_password (0.30s) === RUN TestStepCAS_GetCertificateAuthority === RUN TestStepCAS_GetCertificateAuthority/ok === RUN TestStepCAS_GetCertificateAuthority/ok_jwk @@ -9807,7 +9843,7 @@ === RUN Test_x5cIssuer_Lifetime/ok_max === RUN Test_x5cIssuer_Lifetime/ok_max+1m === RUN Test_x5cIssuer_Lifetime/ok_fail ---- PASS: Test_x5cIssuer_Lifetime (0.16s) +--- PASS: Test_x5cIssuer_Lifetime (0.00s) --- PASS: Test_x5cIssuer_Lifetime/ok_0s (0.00s) --- PASS: Test_x5cIssuer_Lifetime/ok_1m (0.00s) --- PASS: Test_x5cIssuer_Lifetime/ok_max-1m (0.00s) @@ -9822,16 +9858,16 @@ === RUN Test_newJoseSigner/rsa === RUN Test_newJoseSigner/fail_p224 === RUN Test_newJoseSigner/fail_signer ---- PASS: Test_newJoseSigner (0.40s) +--- PASS: Test_newJoseSigner (0.35s) --- PASS: Test_newJoseSigner/p256 (0.00s) --- PASS: Test_newJoseSigner/p384 (0.00s) - --- PASS: Test_newJoseSigner/p521 (0.00s) + --- PASS: Test_newJoseSigner/p521 (0.01s) --- PASS: Test_newJoseSigner/ed25519 (0.00s) - --- PASS: Test_newJoseSigner/rsa (0.00s) + --- PASS: Test_newJoseSigner/rsa (0.01s) --- PASS: Test_newJoseSigner/fail_p224 (0.00s) --- PASS: Test_newJoseSigner/fail_signer (0.00s) PASS -ok github.com/smallstep/certificates/cas/stepcas 7.730s +ok github.com/smallstep/certificates/cas/stepcas 9.048s ? github.com/smallstep/certificates/commands [no test files] === RUN TestIsRevoked === RUN TestIsRevoked/false/nil_db @@ -9852,13 +9888,13 @@ --- PASS: TestRevoke/error/was_already_revoked (0.00s) --- PASS: TestRevoke/ok (0.00s) === RUN TestUseToken -=== RUN TestUseToken/fail/force-CmpAndSwap-error === RUN TestUseToken/fail/CmpAndSwap-already-exists === RUN TestUseToken/ok/cmpAndSwap-success +=== RUN TestUseToken/fail/force-CmpAndSwap-error --- PASS: TestUseToken (0.00s) - --- PASS: TestUseToken/fail/force-CmpAndSwap-error (0.00s) --- PASS: TestUseToken/fail/CmpAndSwap-already-exists (0.00s) --- PASS: TestUseToken/ok/cmpAndSwap-success (0.00s) + --- PASS: TestUseToken/fail/force-CmpAndSwap-error (0.00s) === RUN TestDB_StoreCertificateChain === RUN TestDB_StoreCertificateChain/ok === RUN TestDB_StoreCertificateChain/ok_no_provisioner @@ -9894,7 +9930,7 @@ --- PASS: TestError_UnmarshalJSON/ok (0.00s) --- PASS: TestError_UnmarshalJSON/fail (0.00s) PASS -ok github.com/smallstep/certificates/errs 0.043s +ok github.com/smallstep/certificates/errs 0.076s === RUN TestNew === RUN TestNew/softkms === RUN TestNew/default @@ -9908,7 +9944,7 @@ --- PASS: TestNew/pkcs11 (0.00s) --- PASS: TestNew/fail_validation (0.00s) PASS -ok github.com/smallstep/certificates/kms 0.065s +ok github.com/smallstep/certificates/kms 0.114s === RUN TestOptions_Validate === RUN TestOptions_Validate/nil === RUN TestOptions_Validate/softkms @@ -9974,14 +10010,14 @@ --- PASS: TestSignatureAlgorithm_String/PureEd25519 (0.00s) --- PASS: TestSignatureAlgorithm_String/unknown (0.00s) PASS -ok github.com/smallstep/certificates/kms/apiv1 0.056s +ok github.com/smallstep/certificates/kms/apiv1 0.054s === RUN TestNew === RUN TestNew/ok === RUN TestNew/ok_with_options === RUN TestNew/ok_with_uri === RUN TestNew/fail === RUN TestNew/fail_uri ---- PASS: TestNew (0.01s) +--- PASS: TestNew (0.00s) --- PASS: TestNew/ok (0.00s) --- PASS: TestNew/ok_with_options (0.00s) --- PASS: TestNew/ok_with_uri (0.00s) @@ -10094,7 +10130,7 @@ --- PASS: Test_getSigningAlgorithm/fail_rsa_alg (0.00s) --- PASS: Test_getSigningAlgorithm/fail_ecdsa_alg (0.00s) PASS -ok github.com/smallstep/certificates/kms/awskms 0.100s +ok github.com/smallstep/certificates/kms/awskms 0.112s === RUN TestNew setup_test.go:76: Running using Golang crypto === RUN TestNew/ok @@ -10111,7 +10147,7 @@ === RUN TestNew/fail_slot-id === RUN TestNew/fail_scheme === RUN TestNew/fail_configure ---- PASS: TestNew (11.12s) +--- PASS: TestNew (4.56s) --- PASS: TestNew/ok (0.00s) --- PASS: TestNew/ok_with_serial (0.00s) --- PASS: TestNew/ok_with_slot-id (0.00s) @@ -10138,7 +10174,7 @@ === RUN TestPKCS11_GetPublicKey/fail_uri === RUN TestPKCS11_GetPublicKey/fail_missing === RUN TestPKCS11_GetPublicKey/fail_FindKeyPair ---- PASS: TestPKCS11_GetPublicKey (4.14s) +--- PASS: TestPKCS11_GetPublicKey (8.29s) --- PASS: TestPKCS11_GetPublicKey/RSA (0.00s) --- PASS: TestPKCS11_GetPublicKey/RSA_by_id (0.00s) --- PASS: TestPKCS11_GetPublicKey/RSA_by_label (0.00s) @@ -10173,20 +10209,20 @@ === RUN TestPKCS11_CreateKey/fail_unknown === RUN TestPKCS11_CreateKey/fail_FindKeyPair === RUN TestPKCS11_CreateKey/fail_already_exists ---- PASS: TestPKCS11_CreateKey (17.48s) +--- PASS: TestPKCS11_CreateKey (74.31s) --- PASS: TestPKCS11_CreateKey/default (0.00s) --- PASS: TestPKCS11_CreateKey/default_extractable (0.00s) - --- PASS: TestPKCS11_CreateKey/RSA_SHA256WithRSA (1.08s) - --- PASS: TestPKCS11_CreateKey/RSA_SHA384WithRSA (3.96s) - --- PASS: TestPKCS11_CreateKey/RSA_SHA512WithRSA (0.30s) - --- PASS: TestPKCS11_CreateKey/RSA_SHA256WithRSAPSS (1.83s) - --- PASS: TestPKCS11_CreateKey/RSA_SHA384WithRSAPSS (2.53s) - --- PASS: TestPKCS11_CreateKey/RSA_SHA512WithRSAPSS (0.68s) - --- PASS: TestPKCS11_CreateKey/RSA_2048 (0.67s) - --- PASS: TestPKCS11_CreateKey/RSA_4096 (3.07s) + --- PASS: TestPKCS11_CreateKey/RSA_SHA256WithRSA (4.54s) + --- PASS: TestPKCS11_CreateKey/RSA_SHA384WithRSA (1.82s) + --- PASS: TestPKCS11_CreateKey/RSA_SHA512WithRSA (3.85s) + --- PASS: TestPKCS11_CreateKey/RSA_SHA256WithRSAPSS (5.70s) + --- PASS: TestPKCS11_CreateKey/RSA_SHA384WithRSAPSS (7.09s) + --- PASS: TestPKCS11_CreateKey/RSA_SHA512WithRSAPSS (6.03s) + --- PASS: TestPKCS11_CreateKey/RSA_2048 (0.56s) + --- PASS: TestPKCS11_CreateKey/RSA_4096 (39.10s) --- PASS: TestPKCS11_CreateKey/ECDSA_P256 (0.00s) --- PASS: TestPKCS11_CreateKey/ECDSA_P384 (0.00s) - --- PASS: TestPKCS11_CreateKey/ECDSA_P521 (0.00s) + --- PASS: TestPKCS11_CreateKey/ECDSA_P521 (0.01s) --- PASS: TestPKCS11_CreateKey/fail_name (0.00s) --- PASS: TestPKCS11_CreateKey/fail_no_id (0.00s) --- PASS: TestPKCS11_CreateKey/fail_no_object (0.00s) @@ -10206,11 +10242,11 @@ === RUN TestPKCS11_CreateSigner/fail_SigningKey === RUN TestPKCS11_CreateSigner/fail_uri === RUN TestPKCS11_CreateSigner/fail_FindKeyPair ---- PASS: TestPKCS11_CreateSigner (4.50s) +--- PASS: TestPKCS11_CreateSigner (3.83s) --- PASS: TestPKCS11_CreateSigner/RSA (0.01s) --- PASS: TestPKCS11_CreateSigner/RSA_PSS (0.02s) --- PASS: TestPKCS11_CreateSigner/ECDSA_P256 (0.00s) - --- PASS: TestPKCS11_CreateSigner/ECDSA_P384 (0.00s) + --- PASS: TestPKCS11_CreateSigner/ECDSA_P384 (0.01s) --- PASS: TestPKCS11_CreateSigner/ECDSA_P521 (0.01s) --- PASS: TestPKCS11_CreateSigner/fail_SigningKey (0.00s) --- PASS: TestPKCS11_CreateSigner/fail_uri (0.00s) @@ -10225,9 +10261,9 @@ === RUN TestPKCS11_CreateDecrypter/fail_DecryptionKey === RUN TestPKCS11_CreateDecrypter/fail_uri === RUN TestPKCS11_CreateDecrypter/fail_FindKeyPair ---- PASS: TestPKCS11_CreateDecrypter (5.86s) - --- PASS: TestPKCS11_CreateDecrypter/RSA (0.01s) - --- PASS: TestPKCS11_CreateDecrypter/RSA_PSS (0.03s) +--- PASS: TestPKCS11_CreateDecrypter (6.14s) + --- PASS: TestPKCS11_CreateDecrypter/RSA (0.02s) + --- PASS: TestPKCS11_CreateDecrypter/RSA_PSS (0.05s) --- PASS: TestPKCS11_CreateDecrypter/ECDSA_P256 (0.00s) --- PASS: TestPKCS11_CreateDecrypter/ECDSA_P384 (0.00s) --- PASS: TestPKCS11_CreateDecrypter/ECDSA_P521 (0.00s) @@ -10245,7 +10281,7 @@ === RUN TestPKCS11_LoadCertificate/fail_scheme === RUN TestPKCS11_LoadCertificate/fail_serial === RUN TestPKCS11_LoadCertificate/fail_FindCertificate ---- PASS: TestPKCS11_LoadCertificate (2.93s) +--- PASS: TestPKCS11_LoadCertificate (5.44s) --- PASS: TestPKCS11_LoadCertificate/load (0.00s) --- PASS: TestPKCS11_LoadCertificate/load_by_id (0.00s) --- PASS: TestPKCS11_LoadCertificate/load_by_label (0.00s) @@ -10265,7 +10301,7 @@ === RUN TestPKCS11_StoreCertificate/fail_uri === RUN TestPKCS11_StoreCertificate/fail_missing_id === RUN TestPKCS11_StoreCertificate/fail_missing_object ---- PASS: TestPKCS11_StoreCertificate (0.54s) +--- PASS: TestPKCS11_StoreCertificate (4.13s) --- PASS: TestPKCS11_StoreCertificate/ok (0.00s) --- PASS: TestPKCS11_StoreCertificate/ok_extractable (0.00s) --- PASS: TestPKCS11_StoreCertificate/fail_already_exists (0.00s) @@ -10282,7 +10318,7 @@ === RUN TestPKCS11_DeleteKey/delete_missing === RUN TestPKCS11_DeleteKey/fail_name === RUN TestPKCS11_DeleteKey/fail_FindKeyPair ---- PASS: TestPKCS11_DeleteKey (2.33s) +--- PASS: TestPKCS11_DeleteKey (7.23s) --- PASS: TestPKCS11_DeleteKey/delete (0.00s) --- PASS: TestPKCS11_DeleteKey/delete_by_id (0.00s) --- PASS: TestPKCS11_DeleteKey/delete_by_label (0.00s) @@ -10297,7 +10333,7 @@ === RUN TestPKCS11_DeleteCertificate/delete_missing === RUN TestPKCS11_DeleteCertificate/fail_name === RUN TestPKCS11_DeleteCertificate/fail_DeleteCertificate ---- PASS: TestPKCS11_DeleteCertificate (5.32s) +--- PASS: TestPKCS11_DeleteCertificate (3.64s) --- PASS: TestPKCS11_DeleteCertificate/delete (0.00s) --- PASS: TestPKCS11_DeleteCertificate/delete_by_id (0.00s) --- PASS: TestPKCS11_DeleteCertificate/delete_by_label (0.00s) @@ -10308,11 +10344,11 @@ setup_test.go:76: Running using Golang crypto === RUN TestPKCS11_Close/ok === RUN TestPKCS11_Close/second ---- PASS: TestPKCS11_Close (1.76s) +--- PASS: TestPKCS11_Close (3.35s) --- PASS: TestPKCS11_Close/ok (0.00s) --- PASS: TestPKCS11_Close/second (0.00s) PASS -ok github.com/smallstep/certificates/kms/pkcs11 56.021s +ok github.com/smallstep/certificates/kms/pkcs11 120.965s === RUN TestNew === RUN TestNew/ok --- PASS: TestNew (0.00s) @@ -10341,7 +10377,7 @@ --- PASS: TestSoftKMS_CreateSigner/fail_bad_pem (0.00s) --- PASS: TestSoftKMS_CreateSigner/fail_bad_password (0.00s) --- PASS: TestSoftKMS_CreateSigner/fail_not_a_signer (0.00s) - --- PASS: TestSoftKMS_CreateSigner/fail_not_a_signer_from_file (0.01s) + --- PASS: TestSoftKMS_CreateSigner/fail_not_a_signer_from_file (0.00s) --- PASS: TestSoftKMS_CreateSigner/fail_missing (0.00s) === RUN TestSoftKMS_CreateKey === RUN TestSoftKMS_CreateKey/p256 @@ -10353,7 +10389,7 @@ === RUN TestSoftKMS_CreateKey/fail_algorithm === RUN TestSoftKMS_CreateKey/fail_generate_key === RUN TestSoftKMS_CreateKey/fail_no_signer ---- PASS: TestSoftKMS_CreateKey (1.63s) +--- PASS: TestSoftKMS_CreateKey (2.09s) --- PASS: TestSoftKMS_CreateKey/p256 (0.00s) --- PASS: TestSoftKMS_CreateKey/rsa (0.00s) --- PASS: TestSoftKMS_CreateKey/rsa2048 (0.00s) @@ -10381,9 +10417,9 @@ === RUN Test_generateKey/fail_kty === RUN Test_generateKey/fail_crv === RUN Test_generateKey/fail_size ---- PASS: Test_generateKey (9.29s) - --- PASS: Test_generateKey/rsa2048 (8.85s) - --- PASS: Test_generateKey/rsa2048#01 (0.44s) +--- PASS: Test_generateKey (8.65s) + --- PASS: Test_generateKey/rsa2048 (4.67s) + --- PASS: Test_generateKey/rsa2048#01 (3.97s) --- PASS: Test_generateKey/p256 (0.00s) --- PASS: Test_generateKey/ed25519 (0.00s) --- PASS: Test_generateKey/fail_kty (0.00s) @@ -10400,7 +10436,7 @@ === RUN TestSoftKMS_CreateDecrypter/fail_bad_password === RUN TestSoftKMS_CreateDecrypter/fail_not_a_decrypter_(ecdsa_key) === RUN TestSoftKMS_CreateDecrypter/fail_not_a_decrypter_from_file ---- PASS: TestSoftKMS_CreateDecrypter (0.50s) +--- PASS: TestSoftKMS_CreateDecrypter (2.59s) --- PASS: TestSoftKMS_CreateDecrypter/decrypter (0.00s) --- PASS: TestSoftKMS_CreateDecrypter/file (0.00s) --- PASS: TestSoftKMS_CreateDecrypter/pem (0.00s) @@ -10412,7 +10448,7 @@ --- PASS: TestSoftKMS_CreateDecrypter/fail_not_a_decrypter_(ecdsa_key) (0.00s) --- PASS: TestSoftKMS_CreateDecrypter/fail_not_a_decrypter_from_file (0.00s) PASS -ok github.com/smallstep/certificates/kms/softkms 11.500s +ok github.com/smallstep/certificates/kms/softkms 13.432s === RUN TestNew sshagentkms_test.go:43: could not find ssh-agent --- SKIP: TestNew (0.00s) @@ -10429,15 +10465,15 @@ --- PASS: TestSSHAgentKMS_Close/ok (0.00s) === RUN TestSSHAgentKMS_CreateSigner sshagentkms_test.go:43: could not find ssh-agent ---- SKIP: TestSSHAgentKMS_CreateSigner (0.08s) +--- SKIP: TestSSHAgentKMS_CreateSigner (0.13s) === RUN TestSSHAgentKMS_GetPublicKey sshagentkms_test.go:43: could not find ssh-agent ---- SKIP: TestSSHAgentKMS_GetPublicKey (0.13s) +--- SKIP: TestSSHAgentKMS_GetPublicKey (0.11s) === RUN TestSSHAgentKMS_CreateKey sshagentkms_test.go:43: could not find ssh-agent --- SKIP: TestSSHAgentKMS_CreateKey (0.00s) PASS -ok github.com/smallstep/certificates/kms/sshagentkms 0.262s +ok github.com/smallstep/certificates/kms/sshagentkms 0.308s === RUN TestNew === RUN TestNew/ok === RUN TestNew/ok_multiple @@ -10559,7 +10595,7 @@ --- PASS: TestURI_String/ok_new (0.00s) --- PASS: TestURI_String/ok_parse (0.00s) PASS -ok github.com/smallstep/certificates/kms/uri 0.030s +ok github.com/smallstep/certificates/kms/uri 0.056s ? github.com/smallstep/certificates/kms/yubikey [no test files] === RUN TestHealthOKHandling === RUN TestHealthOKHandling/200_should_be_logged_at_Info_level_for_/health_request_without_explicit_opt-in @@ -10573,14 +10609,14 @@ === RUN TestHandlingRegardlessOfOptions/500_should_be_logged_at_Error_level_for_non-health_requests === RUN TestHandlingRegardlessOfOptions/400_should_be_logged_at_Warn_level_even_for_/health_requests === RUN TestHandlingRegardlessOfOptions/500_should_be_logged_at_Error_level_even_for_/health_requests ---- PASS: TestHandlingRegardlessOfOptions (0.00s) +--- PASS: TestHandlingRegardlessOfOptions (0.01s) --- PASS: TestHandlingRegardlessOfOptions/200_should_be_logged_at_Info_level_for_non-health_requests (0.00s) --- PASS: TestHandlingRegardlessOfOptions/400_should_be_logged_at_Warn_level_for_non-health_requests (0.00s) --- PASS: TestHandlingRegardlessOfOptions/500_should_be_logged_at_Error_level_for_non-health_requests (0.00s) - --- PASS: TestHandlingRegardlessOfOptions/400_should_be_logged_at_Warn_level_even_for_/health_requests (0.00s) + --- PASS: TestHandlingRegardlessOfOptions/400_should_be_logged_at_Warn_level_even_for_/health_requests (0.01s) --- PASS: TestHandlingRegardlessOfOptions/500_should_be_logged_at_Error_level_even_for_/health_requests (0.00s) PASS -ok github.com/smallstep/certificates/logging 0.048s +ok github.com/smallstep/certificates/logging 0.084s ? github.com/smallstep/certificates/monitoring [no test files] ? github.com/smallstep/certificates/pki [no test files] === RUN TestNamePolicyEngine_matchDomainConstraint @@ -10996,27 +11032,27 @@ --- PASS: TestNamePolicyEngine_SSH_ArePrincipalsAllowed/ok/combined-user-with-excluded-user-principal (0.00s) --- PASS: TestNamePolicyEngine_SSH_ArePrincipalsAllowed/ok/combined-host (0.00s) === RUN Test_splitSSHPrincipals -=== RUN Test_splitSSHPrincipals/ok/host-ip === RUN Test_splitSSHPrincipals/ok/host-email -=== RUN Test_splitSSHPrincipals/ok/user-username-with-period -=== RUN Test_splitSSHPrincipals/fail/unexpected-cert-type -=== RUN Test_splitSSHPrincipals/fail/user-ip -=== RUN Test_splitSSHPrincipals/fail/host-uri -=== RUN Test_splitSSHPrincipals/ok/host-dns === RUN Test_splitSSHPrincipals/ok/user-localhost === RUN Test_splitSSHPrincipals/ok/user-maillike +=== RUN Test_splitSSHPrincipals/fail/unexpected-cert-type === RUN Test_splitSSHPrincipals/fail/user-uri ---- PASS: Test_splitSSHPrincipals (0.01s) - --- PASS: Test_splitSSHPrincipals/ok/host-ip (0.00s) - --- PASS: Test_splitSSHPrincipals/ok/host-email (0.01s) - --- PASS: Test_splitSSHPrincipals/ok/user-username-with-period (0.00s) - --- PASS: Test_splitSSHPrincipals/fail/unexpected-cert-type (0.00s) - --- PASS: Test_splitSSHPrincipals/fail/user-ip (0.00s) - --- PASS: Test_splitSSHPrincipals/fail/host-uri (0.00s) - --- PASS: Test_splitSSHPrincipals/ok/host-dns (0.00s) +=== RUN Test_splitSSHPrincipals/fail/host-uri +=== RUN Test_splitSSHPrincipals/ok/host-dns +=== RUN Test_splitSSHPrincipals/ok/user-username-with-period +=== RUN Test_splitSSHPrincipals/fail/user-ip +=== RUN Test_splitSSHPrincipals/ok/host-ip +--- PASS: Test_splitSSHPrincipals (0.00s) + --- PASS: Test_splitSSHPrincipals/ok/host-email (0.00s) --- PASS: Test_splitSSHPrincipals/ok/user-localhost (0.00s) --- PASS: Test_splitSSHPrincipals/ok/user-maillike (0.00s) + --- PASS: Test_splitSSHPrincipals/fail/unexpected-cert-type (0.00s) --- PASS: Test_splitSSHPrincipals/fail/user-uri (0.00s) + --- PASS: Test_splitSSHPrincipals/fail/host-uri (0.00s) + --- PASS: Test_splitSSHPrincipals/ok/host-dns (0.00s) + --- PASS: Test_splitSSHPrincipals/ok/user-username-with-period (0.00s) + --- PASS: Test_splitSSHPrincipals/fail/user-ip (0.00s) + --- PASS: Test_splitSSHPrincipals/ok/host-ip (0.00s) === RUN Test_removeDuplicates === RUN Test_removeDuplicates/empty-slice === RUN Test_removeDuplicates/single-item @@ -11136,71 +11172,71 @@ --- PASS: Test_normalizeAndValidateEmailConstraint/ok/wildcard (0.00s) --- PASS: Test_normalizeAndValidateEmailConstraint/ok/specific-mail (0.00s) === RUN TestNew -=== RUN TestNew/fail/with-permitted-cidrs -=== RUN TestNew/fail/with-permitted-ipsOrCIDRs-ip -=== RUN TestNew/fail/with-excluded-ipsOrCIDRs-cidr -=== RUN TestNew/fail/with-excluded-uris -=== RUN TestNew/ok/with-excluded-ip-ranges +=== RUN TestNew/fail/with-excluded-dns-domains === RUN TestNew/fail/with-excluded-ipsOrCIDRs-ip -=== RUN TestNew/fail/with-permitted-emails -=== RUN TestNew/fail/with-excluded-emails +=== RUN TestNew/ok/with-excluded-ip-ranges +=== RUN TestNew/ok/with-permitted-cidrs === RUN TestNew/fail/with-permitted-uris -=== RUN TestNew/ok/with-permitted-ip-ranges +=== RUN TestNew/ok/default +=== RUN TestNew/ok/subject-verification +=== RUN TestNew/ok/with-permitted-dns-wildcard-domains === RUN TestNew/ok/with-permitted-emails -=== RUN TestNew/ok/with-excluded-emails +=== RUN TestNew/fail/with-permitted-emails +=== RUN TestNew/ok/with-excluded-ipsOrCIDRs-cidr === RUN TestNew/ok/with-permitted-principals -=== RUN TestNew/fail/with-excluded-cidrs -=== RUN TestNew/ok/with-permitted-uris -=== RUN TestNew/ok/subject-verification +=== RUN TestNew/fail/with-permitted-ipsOrCIDRs-cidr +=== RUN TestNew/ok/with-permitted-ip-ranges +=== RUN TestNew/ok/with-excluded-cidrs === RUN TestNew/ok/with-permitted-ipsOrCIDRs-cidr -=== RUN TestNew/ok/with-excluded-uris -=== RUN TestNew/fail/with-excluded-common-name -=== RUN TestNew/fail/with-permitted-dns-domains -=== RUN TestNew/ok/literal-wildcards +=== RUN TestNew/ok/with-excluded-emails === RUN TestNew/ok/with-excluded-principals +=== RUN TestNew/fail/with-excluded-cidrs +=== RUN TestNew/fail/with-excluded-emails +=== RUN TestNew/ok/literal-wildcards +=== RUN TestNew/fail/with-excluded-common-name +=== RUN TestNew/fail/with-permitted-cidrs +=== RUN TestNew/fail/with-permitted-ipsOrCIDRs-ip +=== RUN TestNew/fail/with-excluded-uris +=== RUN TestNew/ok/with-permitted-uris === RUN TestNew/fail/with-permitted-common-name -=== RUN TestNew/fail/with-excluded-dns-domains -=== RUN TestNew/ok/with-permitted-dns-wildcard-domains -=== RUN TestNew/ok/with-permitted-cidrs -=== RUN TestNew/ok/with-excluded-cidrs -=== RUN TestNew/fail/with-permitted-ipsOrCIDRs-cidr -=== RUN TestNew/ok/default +=== RUN TestNew/fail/with-excluded-ipsOrCIDRs-cidr +=== RUN TestNew/fail/with-permitted-dns-domains === RUN TestNew/ok/with-excluded-dns-domains -=== RUN TestNew/ok/with-excluded-ipsOrCIDRs-cidr ---- PASS: TestNew (0.00s) - --- PASS: TestNew/fail/with-permitted-cidrs (0.00s) - --- PASS: TestNew/fail/with-permitted-ipsOrCIDRs-ip (0.00s) - --- PASS: TestNew/fail/with-excluded-ipsOrCIDRs-cidr (0.00s) - --- PASS: TestNew/fail/with-excluded-uris (0.00s) - --- PASS: TestNew/ok/with-excluded-ip-ranges (0.00s) +=== RUN TestNew/ok/with-excluded-uris +--- PASS: TestNew (0.01s) + --- PASS: TestNew/fail/with-excluded-dns-domains (0.00s) --- PASS: TestNew/fail/with-excluded-ipsOrCIDRs-ip (0.00s) - --- PASS: TestNew/fail/with-permitted-emails (0.00s) - --- PASS: TestNew/fail/with-excluded-emails (0.00s) + --- PASS: TestNew/ok/with-excluded-ip-ranges (0.00s) + --- PASS: TestNew/ok/with-permitted-cidrs (0.00s) --- PASS: TestNew/fail/with-permitted-uris (0.00s) - --- PASS: TestNew/ok/with-permitted-ip-ranges (0.00s) + --- PASS: TestNew/ok/default (0.00s) + --- PASS: TestNew/ok/subject-verification (0.00s) + --- PASS: TestNew/ok/with-permitted-dns-wildcard-domains (0.00s) --- PASS: TestNew/ok/with-permitted-emails (0.00s) - --- PASS: TestNew/ok/with-excluded-emails (0.00s) + --- PASS: TestNew/fail/with-permitted-emails (0.00s) + --- PASS: TestNew/ok/with-excluded-ipsOrCIDRs-cidr (0.00s) --- PASS: TestNew/ok/with-permitted-principals (0.00s) - --- PASS: TestNew/fail/with-excluded-cidrs (0.00s) - --- PASS: TestNew/ok/with-permitted-uris (0.00s) - --- PASS: TestNew/ok/subject-verification (0.00s) + --- PASS: TestNew/fail/with-permitted-ipsOrCIDRs-cidr (0.00s) + --- PASS: TestNew/ok/with-permitted-ip-ranges (0.00s) + --- PASS: TestNew/ok/with-excluded-cidrs (0.00s) --- PASS: TestNew/ok/with-permitted-ipsOrCIDRs-cidr (0.00s) - --- PASS: TestNew/ok/with-excluded-uris (0.00s) - --- PASS: TestNew/fail/with-excluded-common-name (0.00s) - --- PASS: TestNew/fail/with-permitted-dns-domains (0.00s) - --- PASS: TestNew/ok/literal-wildcards (0.00s) + --- PASS: TestNew/ok/with-excluded-emails (0.00s) --- PASS: TestNew/ok/with-excluded-principals (0.00s) + --- PASS: TestNew/fail/with-excluded-cidrs (0.00s) + --- PASS: TestNew/fail/with-excluded-emails (0.00s) + --- PASS: TestNew/ok/literal-wildcards (0.00s) + --- PASS: TestNew/fail/with-excluded-common-name (0.00s) + --- PASS: TestNew/fail/with-permitted-cidrs (0.00s) + --- PASS: TestNew/fail/with-permitted-ipsOrCIDRs-ip (0.00s) + --- PASS: TestNew/fail/with-excluded-uris (0.00s) + --- PASS: TestNew/ok/with-permitted-uris (0.00s) --- PASS: TestNew/fail/with-permitted-common-name (0.00s) - --- PASS: TestNew/fail/with-excluded-dns-domains (0.00s) - --- PASS: TestNew/ok/with-permitted-dns-wildcard-domains (0.00s) - --- PASS: TestNew/ok/with-permitted-cidrs (0.00s) - --- PASS: TestNew/ok/with-excluded-cidrs (0.00s) - --- PASS: TestNew/fail/with-permitted-ipsOrCIDRs-cidr (0.00s) - --- PASS: TestNew/ok/default (0.00s) + --- PASS: TestNew/fail/with-excluded-ipsOrCIDRs-cidr (0.00s) + --- PASS: TestNew/fail/with-permitted-dns-domains (0.00s) --- PASS: TestNew/ok/with-excluded-dns-domains (0.00s) - --- PASS: TestNew/ok/with-excluded-ipsOrCIDRs-cidr (0.00s) + --- PASS: TestNew/ok/with-excluded-uris (0.00s) PASS -ok github.com/smallstep/certificates/policy 0.068s +ok github.com/smallstep/certificates/policy 0.116s ? github.com/smallstep/certificates/scep [no test files] === RUN Test_decodeRequest === RUN Test_decodeRequest/fail/unsupported-method @@ -11221,7 +11257,7 @@ --- PASS: Test_decodeRequest/ok/get-PKIOperation (0.00s) --- PASS: Test_decodeRequest/ok/post-PKIOperation (0.00s) PASS -ok github.com/smallstep/certificates/scep/api 0.082s +ok github.com/smallstep/certificates/scep/api 0.116s ? github.com/smallstep/certificates/server [no test files] === RUN TestTemplates_Validate === RUN TestTemplates_Validate/ok @@ -11283,7 +11319,7 @@ === RUN TestLoadAll/nil === RUN TestLoadAll/badUser === RUN TestLoadAll/badHost ---- PASS: TestLoadAll (0.00s) +--- PASS: TestLoadAll (0.01s) --- PASS: TestLoadAll/ok (0.00s) --- PASS: TestLoadAll/empty (0.00s) --- PASS: TestLoadAll/nil (0.00s) @@ -11348,7 +11384,7 @@ === RUN TestTemplate_ValidateRequiredData/ok_multiple === RUN TestTemplate_ValidateRequiredData/fail_nil === RUN TestTemplate_ValidateRequiredData/fail_missing ---- PASS: TestTemplate_ValidateRequiredData (0.00s) +--- PASS: TestTemplate_ValidateRequiredData (0.01s) --- PASS: TestTemplate_ValidateRequiredData/ok_nil (0.00s) --- PASS: TestTemplate_ValidateRequiredData/ok_empty (0.00s) --- PASS: TestTemplate_ValidateRequiredData/ok_one (0.00s) @@ -11360,8 +11396,8 @@ --- PASS: TestDefaultTemplates (0.00s) --- PASS: TestDefaultTemplates/ok (0.00s) PASS -ok github.com/smallstep/certificates/templates 0.032s - rm -fr -- /tmp/dh-xdg-rundir-ZFD2riej +ok github.com/smallstep/certificates/templates 0.109s + rm -fr -- /tmp/dh-xdg-rundir-YFTDqnAr create-stamp debian/debhelper-build-stamp dh_testroot -O--builddirectory=_build -O--buildsystem=golang dh_prep -O--builddirectory=_build -O--buildsystem=golang @@ -11960,12 +11996,14 @@ dpkg-buildpackage: info: binary-only upload (no source included) dpkg-genchanges: info: not including original source code in upload I: copying local configuration +I: user script /srv/workspace/pbuilder/3284310/tmp/hooks/B01_cleanup starting +I: user script /srv/workspace/pbuilder/3284310/tmp/hooks/B01_cleanup finished I: unmounting dev/ptmx filesystem I: unmounting dev/pts filesystem I: unmounting dev/shm filesystem I: unmounting proc filesystem I: unmounting sys filesystem I: cleaning the build env -I: removing directory /srv/workspace/pbuilder/259617 and its subdirectories -I: Current time: Mon May 18 23:59:12 -12 2026 -I: pbuilder-time-stamp: 1779191952 +I: removing directory /srv/workspace/pbuilder/3284310 and its subdirectories +I: Current time: Wed Apr 16 19:43:30 +14 2025 +I: pbuilder-time-stamp: 1744782210