Diff of the two buildlogs: -- --- b1/build.log 2025-10-23 10:27:36.791285593 +0000 +++ b2/build.log 2025-10-23 10:34:57.511592699 +0000 @@ -1,6 +1,6 @@ I: pbuilder: network access will be disabled during build -I: Current time: Wed Nov 25 04:46:52 -12 2026 -I: pbuilder-time-stamp: 1795625212 +I: Current time: Fri Oct 24 00:27:39 +14 2025 +I: pbuilder-time-stamp: 1761215259 I: Building the build Environment I: extracting base tarball [/var/cache/pbuilder/unstable-reproducible-base.tgz] I: copying local configuration @@ -26,53 +26,85 @@ dpkg-source: info: applying fix-go-attest.patch I: using fakeroot in build. I: Installing the build-deps -I: user script /srv/workspace/pbuilder/1953156/tmp/hooks/D02_print_environment starting +I: user script /srv/workspace/pbuilder/1693831/tmp/hooks/D01_modify_environment starting +debug: Running on codethink04-arm64. +I: Changing host+domainname to test build reproducibility +I: Adding a custom variable just for the fun of it... +I: Changing /bin/sh to bash +'/bin/sh' -> '/bin/bash' +lrwxrwxrwx 1 root root 9 Oct 23 10:27 /bin/sh -> /bin/bash +I: Setting pbuilder2's login shell to /bin/bash +I: Setting pbuilder2's GECOS to second user,second room,second work-phone,second home-phone,second other +I: user script /srv/workspace/pbuilder/1693831/tmp/hooks/D01_modify_environment finished +I: user script /srv/workspace/pbuilder/1693831/tmp/hooks/D02_print_environment starting I: set - BUILDDIR='/build/reproducible-path' - BUILDUSERGECOS='first user,first room,first work-phone,first home-phone,first other' - BUILDUSERNAME='pbuilder1' - BUILD_ARCH='arm64' - DEBIAN_FRONTEND='noninteractive' + BASH=/bin/sh + BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath + BASH_ALIASES=() + BASH_ARGC=() + BASH_ARGV=() + BASH_CMDS=() + BASH_LINENO=([0]="12" [1]="0") + BASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:. + BASH_SOURCE=([0]="/tmp/hooks/D02_print_environment" [1]="/tmp/hooks/D02_print_environment") + BASH_VERSINFO=([0]="5" [1]="3" [2]="3" [3]="1" [4]="release" [5]="aarch64-unknown-linux-gnu") + BASH_VERSION='5.3.3(1)-release' + BUILDDIR=/build/reproducible-path + BUILDUSERGECOS='second user,second room,second work-phone,second home-phone,second other' + BUILDUSERNAME=pbuilder2 + BUILD_ARCH=arm64 + DEBIAN_FRONTEND=noninteractive DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=12 ' - DISTRIBUTION='unstable' - HOME='/root' - HOST_ARCH='arm64' + DIRSTACK=() + DISTRIBUTION=unstable + EUID=0 + FUNCNAME=([0]="Echo" [1]="main") + GROUPS=() + HOME=/root + HOSTNAME=i-capture-the-hostname + HOSTTYPE=aarch64 + HOST_ARCH=arm64 IFS=' ' - INVOCATION_ID='78b3cd1ad92c42c5a610495dca9a5285' - LANG='C' - LANGUAGE='en_US:en' - LC_ALL='C' - MAIL='/var/mail/root' - OPTIND='1' - PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games' - PBCURRENTCOMMANDLINEOPERATION='build' - PBUILDER_OPERATION='build' - PBUILDER_PKGDATADIR='/usr/share/pbuilder' - PBUILDER_PKGLIBDIR='/usr/lib/pbuilder' - PBUILDER_SYSCONFDIR='/etc' - PPID='1953156' - PS1='# ' - PS2='> ' + INVOCATION_ID=9c5fd30211d84b3293985a7f9d65b489 + LANG=C + LANGUAGE=nl_BE:nl + LC_ALL=C + MACHTYPE=aarch64-unknown-linux-gnu + MAIL=/var/mail/root + OPTERR=1 + OPTIND=1 + OSTYPE=linux-gnu + PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path + PBCURRENTCOMMANDLINEOPERATION=build + PBUILDER_OPERATION=build + PBUILDER_PKGDATADIR=/usr/share/pbuilder + PBUILDER_PKGLIBDIR=/usr/lib/pbuilder + PBUILDER_SYSCONFDIR=/etc + PIPESTATUS=([0]="0") + POSIXLY_CORRECT=y + PPID=1693831 PS4='+ ' - PWD='/' - SHELL='/bin/bash' - SHLVL='2' - SUDO_COMMAND='/usr/bin/timeout -k 18.1h 18h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.HEyvziiv/pbuilderrc_iTGF --distribution unstable --hookdir /etc/pbuilder/first-build-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/unstable-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.HEyvziiv/b1 --logfile b1/build.log golang-github-smallstep-certificates_0.28.4-2.dsc' - SUDO_GID='109' - SUDO_HOME='/var/lib/jenkins' - SUDO_UID='104' - SUDO_USER='jenkins' - TERM='unknown' - TZ='/usr/share/zoneinfo/Etc/GMT+12' - USER='root' - _='/usr/bin/systemd-run' - http_proxy='http://192.168.101.4:3128' + PWD=/ + SHELL=/bin/bash + SHELLOPTS=braceexpand:errexit:hashall:interactive-comments:posix + SHLVL=3 + SUDO_COMMAND='/usr/bin/timeout -k 24.1h 24h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.HEyvziiv/pbuilderrc_4uro --distribution unstable --hookdir /etc/pbuilder/rebuild-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/unstable-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.HEyvziiv/b2 --logfile b2/build.log golang-github-smallstep-certificates_0.28.4-2.dsc' + SUDO_GID=109 + SUDO_HOME=/var/lib/jenkins + SUDO_UID=104 + SUDO_USER=jenkins + TERM=unknown + TZ=/usr/share/zoneinfo/Etc/GMT-14 + UID=0 + USER=root + _='I: set' + http_proxy=http://192.168.101.4:3128 I: uname -a - Linux codethink03-arm64 6.12.48+deb13-cloud-arm64 #1 SMP Debian 6.12.48-1 (2025-09-20) aarch64 GNU/Linux + Linux i-capture-the-hostname 6.12.48+deb13-cloud-arm64 #1 SMP Debian 6.12.48-1 (2025-09-20) aarch64 GNU/Linux I: ls -l /bin - lrwxrwxrwx 1 root root 7 Aug 10 2025 /bin -> usr/bin -I: user script /srv/workspace/pbuilder/1953156/tmp/hooks/D02_print_environment finished + lrwxrwxrwx 1 root root 7 Aug 10 12:30 /bin -> usr/bin +I: user script /srv/workspace/pbuilder/1693831/tmp/hooks/D02_print_environment finished -> Attempting to satisfy build-dependencies -> Creating pbuilder-satisfydepends-dummy package Package: pbuilder-satisfydepends-dummy @@ -343,7 +375,7 @@ Get: 181 http://deb.debian.org/debian unstable/main arm64 golang-step-cli-utils-dev all 0.7.5+ds-3 [54.9 kB] Get: 182 http://deb.debian.org/debian unstable/main arm64 libpcsclite1 arm64 2.4.0-1 [54.8 kB] Get: 183 http://deb.debian.org/debian unstable/main arm64 libpcsclite-dev arm64 2.4.0-1 [68.1 kB] -Fetched 142 MB in 1s (131 MB/s) +Fetched 142 MB in 2s (62.0 MB/s) Preconfiguring packages ... Selecting previously unselected package golang-golang-x-sys-dev. (Reading database ... (Reading database ... 5% (Reading database ... 10% (Reading database ... 15% (Reading database ... 20% (Reading database ... 25% (Reading database ... 30% (Reading database ... 35% (Reading database ... 40% (Reading database ... 45% (Reading database ... 50% (Reading database ... 55% (Reading database ... 60% (Reading database ... 65% (Reading database ... 70% (Reading database ... 75% (Reading database ... 80% (Reading database ... 85% (Reading database ... 90% (Reading database ... 95% (Reading database ... 100% (Reading database ... 19962 files and directories currently installed.) @@ -942,8 +974,8 @@ Setting up tzdata (2025b-5) ... Current default time zone: 'Etc/UTC' -Local time is now: Wed Nov 25 16:47:28 UTC 2026. -Universal Time is now: Wed Nov 25 16:47:28 UTC 2026. +Local time is now: Thu Oct 23 10:29:12 UTC 2025. +Universal Time is now: Thu Oct 23 10:29:12 UTC 2025. Run 'dpkg-reconfigure tzdata' if you wish to change it. Setting up golang-github-cespare-xxhash-dev (2.3.0-1) ... @@ -1101,7 +1133,11 @@ fakeroot is already the newest version (1.37.1.2-1). 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. I: Building the package -I: Running cd /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-genchanges -S > ../golang-github-smallstep-certificates_0.28.4-2_source.changes +I: user script /srv/workspace/pbuilder/1693831/tmp/hooks/A99_set_merged_usr starting +Not re-configuring usrmerge for unstable +I: user script /srv/workspace/pbuilder/1693831/tmp/hooks/A99_set_merged_usr finished +hostname: Name or service not known +I: Running cd /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-genchanges -S > ../golang-github-smallstep-certificates_0.28.4-2_source.changes dpkg-buildpackage: info: source package golang-github-smallstep-certificates dpkg-buildpackage: info: source version 0.28.4-2 dpkg-buildpackage: info: source distribution unstable @@ -1120,9 +1156,9 @@ debian/rules execute_before_dh_auto_configure make[1]: Entering directory '/build/reproducible-path/golang-github-smallstep-certificates-0.28.4' chmod -v -x policy/engine.go policy/engine_test.go policy/options.go -mode of 'policy/engine.go' changed from 0755 (rwxr-xr-x) to 0644 (rw-r--r--) -mode of 'policy/engine_test.go' changed from 0755 (rwxr-xr-x) to 0644 (rw-r--r--) -mode of 'policy/options.go' changed from 0755 (rwxr-xr-x) to 0644 (rw-r--r--) +mode of 'policy/engine.go' changed from 0775 (rwxrwxr-x) to 0664 (rw-rw-r--) +mode of 'policy/engine_test.go' changed from 0775 (rwxrwxr-x) to 0664 (rw-rw-r--) +mode of 'policy/options.go' changed from 0775 (rwxrwxr-x) to 0664 (rw-rw-r--) rm -fv authority/provisioner/nebula*.go removed 'authority/provisioner/nebula.go' removed 'authority/provisioner/nebula_test.go' @@ -1132,219 +1168,223 @@ dh_auto_build: warning: github.com/smallstep/certificates/test/integration contains no non-test Go files, removing it from build dh_auto_build: warning: github.com/smallstep/certificates/test/integration/scep contains no non-test Go files, removing it from build cd _build && go install -trimpath -v -p 12 github.com/smallstep/certificates/acme github.com/smallstep/certificates/acme/api github.com/smallstep/certificates/acme/db/nosql github.com/smallstep/certificates/acme/wire github.com/smallstep/certificates/api github.com/smallstep/certificates/api/log github.com/smallstep/certificates/api/models github.com/smallstep/certificates/api/read github.com/smallstep/certificates/api/render github.com/smallstep/certificates/authority github.com/smallstep/certificates/authority/admin github.com/smallstep/certificates/authority/admin/api github.com/smallstep/certificates/authority/admin/db/nosql github.com/smallstep/certificates/authority/administrator github.com/smallstep/certificates/authority/config github.com/smallstep/certificates/authority/internal/constraints github.com/smallstep/certificates/authority/policy github.com/smallstep/certificates/authority/poolhttp github.com/smallstep/certificates/authority/provisioner github.com/smallstep/certificates/authority/provisioner/gcp github.com/smallstep/certificates/authority/provisioner/wire github.com/smallstep/certificates/ca github.com/smallstep/certificates/ca/client github.com/smallstep/certificates/ca/identity github.com/smallstep/certificates/cas github.com/smallstep/certificates/cas/apiv1 github.com/smallstep/certificates/cas/softcas github.com/smallstep/certificates/cas/stepcas github.com/smallstep/certificates/commands github.com/smallstep/certificates/db github.com/smallstep/certificates/errs github.com/smallstep/certificates/internal/cast github.com/smallstep/certificates/internal/httptransport github.com/smallstep/certificates/internal/metrix github.com/smallstep/certificates/internal/userid github.com/smallstep/certificates/logging github.com/smallstep/certificates/middleware/requestid github.com/smallstep/certificates/monitoring github.com/smallstep/certificates/pki github.com/smallstep/certificates/policy github.com/smallstep/certificates/scep github.com/smallstep/certificates/scep/api github.com/smallstep/certificates/server github.com/smallstep/certificates/templates github.com/smallstep/certificates/test/integration/scep/internal/x509 github.com/smallstep/certificates/webhook -internal/byteorder -internal/godebugs -internal/profilerecord -internal/coverage/rtcov -internal/goarch internal/unsafeheader -internal/goexperiment -internal/runtime/syscall internal/msan -internal/cpu -internal/goos +internal/godebugs +internal/goarch internal/asan -internal/abi +internal/profilerecord +internal/goos +internal/goexperiment internal/runtime/math -sync/atomic math/bits +internal/coverage/rtcov unicode unicode/utf8 +internal/cpu +internal/abi +sync/atomic +internal/byteorder internal/itoa -crypto/internal/fips140/alias -cmp internal/chacha8rand +internal/runtime/syscall +crypto/internal/fips140/alias crypto/internal/fips140deps/byteorder -crypto/internal/boring/sig crypto/internal/fips140/subtle +math +cmp +crypto/internal/boring/sig unicode/utf16 vendor/golang.org/x/crypto/cryptobyte/asn1 -container/list vendor/golang.org/x/crypto/internal/alias -math -internal/nettrace -encoding +container/list internal/bytealg internal/runtime/atomic internal/runtime/sys crypto/internal/fips140deps/cpu +internal/nettrace +encoding log/internal golang.org/x/crypto/cryptobyte/asn1 github.com/google/go-tspi/tspiconst google.golang.org/protobuf/internal/flags google.golang.org/protobuf/internal/set -google.golang.org/grpc/serviceconfig golang.org/x/crypto/internal/alias +google.golang.org/grpc/serviceconfig golang.org/x/crypto/salsa20/salsa -go.step.sm/crypto/internal/utils/asn1 github.com/googleapis/gax-go/v2/internal github.com/golang/groupcache/lru -go.opencensus.io go.opencensus.io/trace/internal +go.opencensus.io +go.step.sm/crypto/internal/utils/asn1 go.opencensus.io/internal/tagencoding golang.org/x/net/html/atom -internal/runtime/exithook internal/stringslite +internal/runtime/exithook internal/race internal/sync internal/runtime/maps runtime -iter -runtime/metrics crypto/subtle +iter weak +runtime/metrics sync internal/reflectlite maps slices golang.org/x/exp/slices -errors -sort -internal/bisect -internal/singleflight -unique internal/testlog +unique +internal/singleflight +internal/bisect google.golang.org/protobuf/internal/pragma +sort +errors +runtime/cgo +internal/godebug internal/oserror +go.etcd.io/bbolt/errors path +vendor/golang.org/x/net/dns/dnsmessage +google.golang.org/grpc/internal/buffer +math/rand/v2 io strconv -math/rand/v2 -vendor/golang.org/x/net/dns/dnsmessage syscall -runtime/cgo -google.golang.org/grpc/internal/buffer -go.etcd.io/bbolt/errors -internal/godebug -hash bytes crypto/internal/randutil internal/saferio -strings +hash +go.step.sm/crypto/internal/utils/utfbom crypto/internal/fips140deps/godebug -github.com/beorn7/perks/quantile +net/netip math/rand -go.step.sm/crypto/internal/utils/utfbom +strings +reflect crypto -hash/fnv hash/crc32 -reflect -net/netip +hash/fnv encoding/base32 +golang.org/x/text/transform github.com/x448/float16 +vendor/golang.org/x/text/transform hash/adler32 golang.org/x/crypto/blowfish -vendor/golang.org/x/text/transform -golang.org/x/text/transform +github.com/beorn7/perks/quantile github.com/prometheus/client_golang/prometheus/promhttp/internal container/heap +crypto/internal/fips140 +bufio crypto/internal/impl net/http/internal/ascii -regexp/syntax -crypto/internal/fips140 html go.step.sm/crypto/internal/emoji -bufio github.com/huandu/xstrings +regexp/syntax github.com/munnerz/goautoneg crypto/internal/fips140/sha256 -crypto/internal/fips140/sha512 crypto/internal/fips140/sha3 +crypto/internal/fips140/sha512 crypto/tls/internal/fips140tls -crypto/internal/fips140/hmac +internal/syscall/unix +internal/syscall/execenv +time crypto/sha3 -crypto/internal/fips140/check +crypto/internal/fips140/hmac crypto/internal/fips140hash -crypto/internal/fips140/edwards25519/field +crypto/internal/fips140/check +crypto/internal/fips140/hkdf crypto/internal/fips140/tls12 -crypto/internal/fips140/nistec/fiat -crypto/internal/fips140/bigmod crypto/fips140 +crypto/internal/fips140/edwards25519/field +crypto/internal/fips140/bigmod crypto/internal/fips140/aes -crypto/internal/fips140/hkdf -time -internal/syscall/unix -internal/syscall/execenv +crypto/internal/fips140/nistec/fiat crypto/internal/fips140/tls13 crypto/internal/fips140/edwards25519 regexp google.golang.org/api/internal/third_party/uritemplates -context io/fs +google.golang.org/grpc/keepalive +context google.golang.org/grpc/backoff internal/poll -google.golang.org/grpc/keepalive -crypto/internal/fips140/nistec +embed +internal/filepathlite google.golang.org/grpc/internal/backoff -google.golang.org/grpc/internal/grpcsync -github.com/smallstep/certificates/ca/client github.com/smallstep/certificates/internal/userid -internal/filepathlite -embed +github.com/smallstep/certificates/ca/client +google.golang.org/grpc/internal/grpcsync google.golang.org/protobuf/internal/editiondefaults os +crypto/internal/fips140/nistec internal/fmtsort encoding/binary -vendor/golang.org/x/crypto/internal/poly1305 filippo.io/edwards25519/field -golang.org/x/crypto/internal/poly1305 -golang.org/x/sys/unix github.com/cespare/xxhash encoding/base64 +golang.org/x/crypto/internal/poly1305 +vendor/golang.org/x/crypto/internal/poly1305 +golang.org/x/sys/unix golang.org/x/crypto/nacl/secretbox encoding/pem filippo.io/edwards25519 crypto/internal/sysrand -path/filepath -github.com/prometheus/procfs/internal/util -fmt io/ioutil google.golang.org/protobuf/internal/detrand +google.golang.org/grpc/internal/envconfig +path/filepath +fmt +go.step.sm/crypto/fipsutil net os/signal -go.step.sm/crypto/fipsutil -google.golang.org/grpc/internal/envconfig +github.com/prometheus/procfs/internal/util crypto/internal/entropy crypto/internal/fips140/drbg -os/exec -crypto/internal/fips140/aes/gcm -crypto/internal/fips140/mlkem crypto/internal/fips140only -crypto/internal/fips140/ecdh crypto/internal/fips140/ed25519 -crypto/internal/fips140/ecdsa crypto/internal/fips140/rsa -crypto/md5 +crypto/internal/fips140/mlkem +crypto/internal/fips140/aes/gcm crypto/rc4 +crypto/md5 +os/exec crypto/cipher crypto/mlkem crypto/des -crypto/internal/boring -golang.org/x/crypto/chacha20 vendor/golang.org/x/crypto/chacha20 -crypto/ecdh +golang.org/x/crypto/chacha20 +crypto/internal/boring crypto/sha512 crypto/sha256 crypto/aes crypto/hmac crypto/sha1 -math/big +golang.org/x/crypto/pbkdf2 +golang.org/x/crypto/ssh/internal/bcrypt_pbkdf +go.step.sm/crypto/internal/bcrypt_pbkdf +golang.org/x/crypto/scrypt +crypto/internal/fips140/ecdh +vendor/golang.org/x/crypto/chacha20poly1305 +crypto/internal/fips140/ecdsa +crypto/ecdh +golang.org/x/crypto/curve25519 encoding/hex +mime net/url -database/sql/driver +log +vendor/golang.org/x/net/http2/hpack encoding/json -mime -vendor/golang.org/x/crypto/chacha20poly1305 compress/flate -log +math/big +database/sql/driver vendor/golang.org/x/text/unicode/norm -vendor/golang.org/x/net/http2/hpack mime/quotedprintable -vendor/golang.org/x/text/unicode/bidi -database/sql net/http/internal -golang.org/x/crypto/pbkdf2 gopkg.in/square/go-jose.v2/json +vendor/golang.org/x/text/unicode/bidi +database/sql github.com/pkg/errors google.golang.org/protobuf/internal/errors google.golang.org/protobuf/encoding/protowire @@ -1353,31 +1393,25 @@ google.golang.org/protobuf/reflect/protoreflect golang.org/x/net/internal/timeseries text/template/parse -vendor/golang.org/x/text/secure/bidirule text/tabwriter google.golang.org/grpc/attributes google.golang.org/protobuf/internal/version google.golang.org/grpc/internal/idle golang.org/x/text/unicode/bidi -golang.org/x/text/unicode/norm golang.org/x/net/http2/hpack -vendor/golang.org/x/net/idna +golang.org/x/text/unicode/norm +vendor/golang.org/x/text/secure/bidirule go.etcd.io/bbolt/internal/common compress/zlib go.step.sm/crypto/fingerprint +vendor/golang.org/x/net/idna +golang.org/x/text/secure/bidirule github.com/imdario/mergo +text/template +go.etcd.io/bbolt/internal/freelist github.com/mitchellh/reflectwalk -google.golang.org/protobuf/internal/strs -google.golang.org/protobuf/internal/encoding/messageset -github.com/smallstep/certificates/acme/wire -google.golang.org/protobuf/internal/encoding/json -google.golang.org/protobuf/internal/descfmt -google.golang.org/protobuf/internal/descopts -google.golang.org/protobuf/internal/encoding/text -google.golang.org/protobuf/internal/genid -google.golang.org/protobuf/internal/order -google.golang.org/protobuf/reflect/protoregistry -google.golang.org/protobuf/runtime/protoiface +github.com/spf13/cast/internal +github.com/go-jose/go-jose/v3/json crypto/elliptic crypto/internal/boring/bbig encoding/asn1 @@ -1385,255 +1419,257 @@ crypto/dsa github.com/fxamacker/cbor github.com/google/certificate-transparency-go/asn1 -text/template crypto/ed25519 crypto/rsa crypto/internal/hpke +github.com/smallstep/certificates/acme/wire golang.org/x/crypto/ed25519 -google.golang.org/protobuf/proto +google.golang.org/protobuf/internal/encoding/messageset +google.golang.org/protobuf/internal/strs +google.golang.org/protobuf/internal/descfmt +google.golang.org/protobuf/internal/descopts +google.golang.org/protobuf/internal/encoding/json +google.golang.org/protobuf/internal/genid +google.golang.org/protobuf/internal/encoding/text +google.golang.org/protobuf/internal/order +vendor/golang.org/x/crypto/cryptobyte +google.golang.org/protobuf/reflect/protoregistry +crypto/x509/pkix +golang.org/x/crypto/cryptobyte +google.golang.org/protobuf/runtime/protoiface google.golang.org/grpc/grpclog/internal -google.golang.org/protobuf/internal/encoding/defval +golang.org/x/net/idna google.golang.org/protobuf/internal/protolazy -golang.org/x/text/secure/bidirule -github.com/smallstep/nosql/database -go.etcd.io/bbolt/internal/freelist +github.com/google/certificate-transparency-go/x509/pkix +google.golang.org/protobuf/internal/encoding/defval +go.etcd.io/bbolt google.golang.org/grpc/grpclog go.step.sm/crypto/randutil -golang.org/x/net/idna +github.com/smallstep/nosql/database github.com/Masterminds/goutils +google.golang.org/protobuf/proto +html/template github.com/Masterminds/semver +crypto/ecdsa github.com/mitchellh/copystructure -google.golang.org/grpc/connectivity -github.com/google/certificate-transparency-go/x509/pkix -google.golang.org/grpc/internal/grpclog github.com/shopspring/decimal -vendor/golang.org/x/crypto/cryptobyte -go.etcd.io/bbolt -crypto/x509/pkix -golang.org/x/crypto/cryptobyte -github.com/spf13/cast/internal golang.org/x/crypto/bcrypt -golang.org/x/crypto/scrypt -github.com/go-jose/go-jose/v3/json +google.golang.org/grpc/connectivity +google.golang.org/grpc/internal/grpclog go.step.sm/crypto/internal/utils/file -golang.org/x/crypto/curve25519 -google.golang.org/protobuf/internal/filedesc -google.golang.org/protobuf/encoding/prototext go.step.sm/crypto/x25519 -html/template -golang.org/x/crypto/ssh/internal/bcrypt_pbkdf -crypto/ecdsa -go.step.sm/crypto/internal/bcrypt_pbkdf github.com/googleapis/gax-go/v2/callctx golang.org/x/oauth2/jws os/user go.opencensus.io/internal go.opencensus.io/trace/tracestate runtime/trace +google.golang.org/protobuf/encoding/prototext +google.golang.org/protobuf/internal/filedesc go.opencensus.io/resource runtime/pprof go.opencensus.io/trace -github.com/ccoveille/go-safecast go.opencensus.io/metric/metricdata -github.com/smallstep/certificates/internal/cast go.opencensus.io/metric/metricproducer +github.com/ccoveille/go-safecast +gopkg.in/square/go-jose.v2/cipher +github.com/google/certificate-transparency-go/tls +github.com/go-jose/go-jose/v3/cipher +github.com/smallstep/certificates/internal/cast github.com/rs/xid flag github.com/russross/blackfriday/v2 github.com/manifoldco/promptui/list github.com/manifoldco/promptui/screenbuf -gopkg.in/square/go-jose.v2/cipher -github.com/google/certificate-transparency-go/tls -github.com/go-jose/go-jose/v3/cipher -github.com/smallstep/nosql/bolt -github.com/spf13/cast github.com/mattn/go-isatty golang.org/x/net/html go.step.sm/crypto/internal/utils/convert +github.com/spf13/cast golang.org/x/term -github.com/smallstep/scep/cryptoutil github.com/mattn/go-colorable -github.com/sirupsen/logrus github.com/mgutz/ansi +github.com/smallstep/nosql/bolt +github.com/sirupsen/logrus +github.com/smallstep/scep/cryptoutil +go.step.sm/crypto/internal/termutil internal/profile runtime/debug -google.golang.org/protobuf/encoding/protojson -google.golang.org/protobuf/internal/encoding/tag -go.opencensus.io/tag -go.step.sm/crypto/internal/termutil google.golang.org/protobuf/encoding/protodelim go.step.sm/crypto/kms/uri -google.golang.org/protobuf/internal/impl -go.opencensus.io/stats/internal +go.opencensus.io/tag +google.golang.org/protobuf/encoding/protojson +google.golang.org/protobuf/internal/encoding/tag github.com/prometheus/procfs/internal/fs +go.opencensus.io/stats/internal go.opencensus.io/stats github.com/newrelic/go-agent/v3/internal/jsonx github.com/newrelic/go-agent/v3/internal/logger github.com/newrelic/go-agent/v3/internal/cat go.opencensus.io/stats/view +google.golang.org/protobuf/internal/impl github.com/newrelic/go-agent/v3/internal/sysinfo github.com/cpuguy83/go-md2man/v2/md2man github.com/urfave/cli -go.step.sm/cli-utils/errs -crypto/x509 -net/textproto +google.golang.org/grpc/internal/syscall +google.golang.org/grpc/internal/resolver/dns/internal vendor/golang.org/x/net/http/httpproxy +net/textproto github.com/google/go-tpm/tpmutil -github.com/google/certificate-transparency-go/x509 google.golang.org/grpc/internal -google.golang.org/grpc/internal/syscall -google.golang.org/grpc/internal/resolver/dns/internal github.com/google/uuid github.com/chzyer/readline +crypto/x509 +go.step.sm/cli-utils/errs +github.com/google/certificate-transparency-go/x509 github.com/prometheus/procfs -github.com/newrelic/go-agent/v3/internal +google.golang.org/grpc/metadata google.golang.org/grpc/experimental/stats +github.com/newrelic/go-agent/v3/internal google.golang.org/grpc/codes -google.golang.org/grpc/metadata google.golang.org/grpc/mem vendor/golang.org/x/net/http/httpguts -mime/multipart -github.com/google/go-tpm/legacy/tpm2 -github.com/google/go-tpm/tpm google.golang.org/grpc/internal/grpcutil google.golang.org/grpc/internal/balancerload +mime/multipart google.golang.org/grpc/stats +github.com/google/go-tpm/tpm +github.com/google/go-tpm/legacy/tpm2 golang.org/x/net/http/httpguts -google.golang.org/grpc/tap google.golang.org/grpc/encoding google.golang.org/grpc/internal/stats +google.golang.org/grpc/tap github.com/manifoldco/promptui -github.com/google/go-tpm/legacy/tpm2/credactivation go.step.sm/cli-utils/ui -github.com/google/go-tspi/verification +github.com/google/go-tpm/legacy/tpm2/credactivation github.com/google/go-attestation/attest/internal +go.step.sm/crypto/kms/apiv1 github.com/Masterminds/sprig -github.com/go-jose/go-jose/v3 gopkg.in/square/go-jose.v2 +github.com/go-jose/go-jose/v3 +golang.org/x/crypto/ssh github.com/smallstep/pkcs7/internal/legacy/x509 -go.step.sm/crypto/kms/apiv1 crypto/tls -golang.org/x/crypto/ssh +go.step.sm/cli-utils/step +github.com/google/go-tspi/verification github.com/smallstep/scep/x509util github.com/google/go-attestation/attest golang.org/x/crypto/ocsp -go.step.sm/cli-utils/step github.com/smallstep/certificates/test/integration/scep/internal/x509 github.com/smallstep/pkcs7 -github.com/go-jose/go-jose/v3/cryptosigner -github.com/go-jose/go-jose/v3/jwt github.com/smallstep/scep +github.com/go-jose/go-jose/v3/cryptosigner google.golang.org/protobuf/internal/filetype +github.com/go-jose/go-jose/v3/jwt google.golang.org/protobuf/runtime/protoimpl -google.golang.org/protobuf/protoadapt +google.golang.org/genproto/googleapis/rpc/code google.golang.org/protobuf/types/known/timestamppb +google.golang.org/protobuf/types/known/durationpb google.golang.org/protobuf/types/known/anypb google.golang.org/protobuf/types/known/structpb -google.golang.org/genproto/googleapis/rpc/code -google.golang.org/protobuf/types/known/durationpb +google.golang.org/protobuf/protoadapt google.golang.org/protobuf/types/descriptorpb google.golang.org/grpc/internal/pretty google.golang.org/grpc/encoding/proto -github.com/golang/protobuf/ptypes/timestamp -github.com/prometheus/client_model/go -github.com/golang/protobuf/ptypes/duration -google.golang.org/genproto/googleapis/rpc/errdetails google.golang.org/genproto/googleapis/rpc/status github.com/googleapis/gax-go/v2/apierror/internal/proto -google.golang.org/grpc/binarylog/grpc_binarylog_v1 +google.golang.org/genproto/googleapis/rpc/errdetails +github.com/golang/protobuf/ptypes/duration +github.com/golang/protobuf/ptypes/timestamp +github.com/prometheus/client_model/go google.golang.org/grpc/internal/status -github.com/prometheus/common/model +google.golang.org/grpc/binarylog/grpc_binarylog_v1 google.golang.org/grpc/status +github.com/prometheus/common/model google.golang.org/grpc/internal/binarylog google.golang.org/protobuf/internal/editionssupport google.golang.org/protobuf/types/gofeaturespb google.golang.org/protobuf/reflect/protodesc github.com/prometheus/client_golang/prometheus/internal -golang.org/x/crypto/ssh/agent go.step.sm/crypto/keyutil +golang.org/x/crypto/ssh/agent go.step.sm/crypto/pemutil github.com/golang/protobuf/proto go.step.sm/crypto/kms/softkms go.step.sm/crypto/kms net/http/httptrace -google.golang.org/grpc/internal/credentials google.golang.org/api/transport/cert +google.golang.org/grpc/internal/credentials github.com/go-sql-driver/mysql google.golang.org/grpc/credentials net/http -google.golang.org/grpc/resolver -google.golang.org/grpc/peer google.golang.org/grpc/credentials/insecure +google.golang.org/grpc/resolver google.golang.org/grpc/internal/channelz -google.golang.org/grpc/internal/resolver/passthrough -google.golang.org/grpc/internal/transport/networktype +google.golang.org/grpc/peer google.golang.org/grpc/internal/metadata +google.golang.org/grpc/internal/transport/networktype google.golang.org/grpc/balancer/grpclb/state -google.golang.org/grpc/internal/resolver/dns +google.golang.org/grpc/internal/resolver/passthrough google.golang.org/grpc/internal/resolver/unix +google.golang.org/grpc/internal/resolver/dns google.golang.org/grpc/resolver/dns google.golang.org/grpc/channelz google.golang.org/grpc/balancer -google.golang.org/grpc/balancer/base -google.golang.org/grpc/balancer/pickfirst google.golang.org/grpc/internal/serviceconfig -google.golang.org/grpc/internal/resolver +google.golang.org/grpc/balancer/pickfirst +google.golang.org/grpc/balancer/base google.golang.org/grpc/balancer/roundrobin +google.golang.org/grpc/internal/resolver google.golang.org/grpc/internal/balancer/gracefulswitch github.com/smallstep/nosql/mysql github.com/smallstep/nosql golang.org/x/oauth2/internal -github.com/go-chi/chi github.com/smallstep/certificates/api/log golang.org/x/net/trace -golang.org/x/net/http2 -net/http/httputil -go.step.sm/crypto/jose +go.opencensus.io/trace/propagation github.com/smallstep/certificates/internal/httptransport google.golang.org/api/googleapi cloud.google.com/go/compute/metadata -go.opencensus.io/trace/propagation google.golang.org/api/googleapi/transport +github.com/go-chi/chi +net/http/httputil +go.step.sm/crypto/jose +golang.org/x/net/http2 github.com/smallstep/certificates/api/render github.com/smallstep/certificates/middleware/requestid +golang.org/x/oauth2 go.opencensus.io/plugin/ochttp/propagation/b3 -github.com/smallstep/certificates/authority/poolhttp github.com/smallstep/certificates/errs -golang.org/x/oauth2 google.golang.org/api/transport/http/internal/propagation +github.com/smallstep/certificates/authority/poolhttp github.com/googleapis/gax-go/v2/apierror -go.opencensus.io/plugin/ochttp go.step.sm/cli-utils/usage +go.opencensus.io/plugin/ochttp github.com/smallstep/certificates/cas/apiv1 github.com/smallstep/certificates/authority/internal/constraints github.com/smallstep/certificates/api/read -github.com/smallstep/certificates/logging -expvar -github.com/coreos/go-oidc/v3/oidc go.step.sm/crypto/internal/templates -golang.org/x/oauth2/authhandler +github.com/coreos/go-oidc/v3/oidc golang.org/x/oauth2/google/internal/impersonate +golang.org/x/oauth2/authhandler golang.org/x/oauth2/google/internal/stsexchange -go.step.sm/crypto/x509util golang.org/x/oauth2/jwt google.golang.org/api/internal/impersonate go.step.sm/crypto/sshutil +github.com/smallstep/certificates/logging +go.step.sm/crypto/x509util +golang.org/x/oauth2/google/internal/externalaccountauthorizeduser +golang.org/x/oauth2/google/externalaccount +expvar net/http/pprof github.com/prometheus/common/expfmt -golang.org/x/oauth2/google/externalaccount -golang.org/x/oauth2/google/internal/externalaccountauthorizeduser -go.step.sm/cli-utils/command github.com/prometheus/client_golang/internal/github.com/golang/gddo/httputil/header -go.step.sm/cli-utils/fileutil github.com/newrelic/go-agent/v3/internal/utilization +go.step.sm/cli-utils/command github.com/prometheus/client_golang/internal/github.com/golang/gddo/httputil +go.step.sm/cli-utils/fileutil github.com/smallstep/certificates/server -go.step.sm/cli-utils/token github.com/smallstep/certificates/templates -github.com/go-chi/chi/middleware +go.step.sm/cli-utils/token go.step.sm/crypto/kms/sshagentkms -go.step.sm/cli-utils/token/provision golang.org/x/oauth2/google +go.step.sm/cli-utils/token/provision +github.com/go-chi/chi/middleware github.com/prometheus/client_golang/prometheus github.com/smallstep/certificates/policy github.com/smallstep/certificates/authority/provisioner/wire @@ -1644,40 +1680,40 @@ google.golang.org/grpc/internal/transport github.com/prometheus/client_golang/prometheus/promhttp google.golang.org/grpc -github.com/googleapis/gax-go/v2 -github.com/smallstep/linkedca google.golang.org/api/internal +github.com/googleapis/gax-go/v2 github.com/newrelic/go-agent/v3/internal/com_newrelic_trace_v1 +github.com/smallstep/linkedca google.golang.org/api/transport/internal/dca google.golang.org/api/option google.golang.org/api/internal/gensupport +google.golang.org/api/transport/http github.com/newrelic/go-agent/v3/newrelic google.golang.org/api/option/internaloption -google.golang.org/api/transport/http google.golang.org/api/cloudresourcemanager/v1 -github.com/smallstep/certificates/authority/policy github.com/smallstep/certificates/authority/admin +github.com/smallstep/certificates/authority/policy github.com/smallstep/certificates/authority/provisioner/gcp -github.com/smallstep/certificates/authority/provisioner github.com/smallstep/certificates/authority/admin/db/nosql +github.com/smallstep/certificates/authority/provisioner github.com/smallstep/certificates/authority/administrator -github.com/smallstep/certificates/api/models +github.com/smallstep/certificates/db github.com/smallstep/certificates/scep +github.com/smallstep/certificates/api/models github.com/smallstep/certificates/internal/metrix -github.com/smallstep/certificates/db github.com/smallstep/certificates/authority/config github.com/smallstep/certificates/authority github.com/smallstep/certificates/acme github.com/smallstep/certificates/api github.com/smallstep/certificates/monitoring -github.com/smallstep/certificates/ca/identity github.com/smallstep/certificates/scep/api +github.com/smallstep/certificates/ca/identity github.com/smallstep/certificates/acme/api github.com/smallstep/certificates/acme/db/nosql github.com/smallstep/certificates/authority/admin/api github.com/smallstep/certificates/ca -github.com/smallstep/certificates/pki github.com/smallstep/certificates/cas/stepcas +github.com/smallstep/certificates/pki github.com/smallstep/certificates/commands debian/rules override_dh_auto_test make[1]: Entering directory '/build/reproducible-path/golang-github-smallstep-certificates-0.28.4' @@ -1704,35 +1740,35 @@ === RUN TestExternalAccountKey_BindTo === RUN TestExternalAccountKey_BindTo/ok === RUN TestExternalAccountKey_BindTo/fail/already-bound ---- PASS: TestExternalAccountKey_BindTo (0.01s) +--- PASS: TestExternalAccountKey_BindTo (0.00s) --- PASS: TestExternalAccountKey_BindTo/ok (0.00s) --- PASS: TestExternalAccountKey_BindTo/fail/already-bound (0.00s) === RUN TestAuthorization_UpdateStatus +=== RUN TestAuthorization_UpdateStatus/ok/no-valid-challenges +=== RUN TestAuthorization_UpdateStatus/ok/valid === RUN TestAuthorization_UpdateStatus/ok/already-invalid === RUN TestAuthorization_UpdateStatus/ok/already-valid === RUN TestAuthorization_UpdateStatus/fail/error-unexpected-status === RUN TestAuthorization_UpdateStatus/ok/expired === RUN TestAuthorization_UpdateStatus/fail/db.UpdateAuthorization-error -=== RUN TestAuthorization_UpdateStatus/ok/no-valid-challenges -=== RUN TestAuthorization_UpdateStatus/ok/valid ---- PASS: TestAuthorization_UpdateStatus (0.00s) +--- PASS: TestAuthorization_UpdateStatus (0.01s) + --- PASS: TestAuthorization_UpdateStatus/ok/no-valid-challenges (0.00s) + --- PASS: TestAuthorization_UpdateStatus/ok/valid (0.00s) --- PASS: TestAuthorization_UpdateStatus/ok/already-invalid (0.00s) --- PASS: TestAuthorization_UpdateStatus/ok/already-valid (0.00s) --- PASS: TestAuthorization_UpdateStatus/fail/error-unexpected-status (0.00s) --- PASS: TestAuthorization_UpdateStatus/ok/expired (0.00s) --- PASS: TestAuthorization_UpdateStatus/fail/db.UpdateAuthorization-error (0.00s) - --- PASS: TestAuthorization_UpdateStatus/ok/no-valid-challenges (0.00s) - --- PASS: TestAuthorization_UpdateStatus/ok/valid (0.00s) === RUN Test_storeError +=== RUN Test_storeError/ok/mark-invalid === RUN Test_storeError/fail/db.UpdateChallenge-error === RUN Test_storeError/fail/db.UpdateChallenge-acme-error === RUN Test_storeError/ok -=== RUN Test_storeError/ok/mark-invalid --- PASS: Test_storeError (0.00s) + --- PASS: Test_storeError/ok/mark-invalid (0.00s) --- PASS: Test_storeError/fail/db.UpdateChallenge-error (0.00s) --- PASS: Test_storeError/fail/db.UpdateChallenge-acme-error (0.00s) --- PASS: Test_storeError/ok (0.00s) - --- PASS: Test_storeError/ok/mark-invalid (0.00s) === RUN TestKeyAuthorization === RUN TestKeyAuthorization/fail/jwk-thumbprint-error === RUN TestKeyAuthorization/ok @@ -1740,144 +1776,145 @@ --- PASS: TestKeyAuthorization/fail/jwk-thumbprint-error (0.00s) --- PASS: TestKeyAuthorization/ok (0.00s) === RUN TestChallenge_Validate -=== RUN TestChallenge_Validate/fail/wire-oidc-01-no-wire-db -=== RUN TestChallenge_Validate/fail/unexpected-type +=== RUN TestChallenge_Validate/ok/already-valid === RUN TestChallenge_Validate/ok/tls-alpn-01 -2026/11/25 04:48:55 http: TLS handshake error from 127.0.0.1:45880: read tcp 127.0.0.1:43365->127.0.0.1:45880: use of closed network connection -=== RUN TestChallenge_Validate/fail/device-attest-01 +2025/10/24 00:31:29 http: TLS handshake error from 127.0.0.1:48520: read tcp 127.0.0.1:40871->127.0.0.1:48520: use of closed network connection +=== RUN TestChallenge_Validate/ok/tls-alpn-01-insecure +2025/10/24 00:31:30 http: TLS handshake error from 127.0.0.1:39098: read tcp 127.0.0.1:46455->127.0.0.1:39098: use of closed network connection +=== RUN TestChallenge_Validate/ok/device-attest-01 +=== RUN TestChallenge_Validate/ok/wire-dpop-01 === RUN TestChallenge_Validate/fail/wire-dpop-01-no-wire-db -=== RUN TestChallenge_Validate/ok/http-01 +=== RUN TestChallenge_Validate/fail/http-01 +=== RUN TestChallenge_Validate/ok/http-01-insecure === RUN TestChallenge_Validate/ok/dns-01 -=== RUN TestChallenge_Validate/ok/wire-dpop-01 === RUN TestChallenge_Validate/fail/already-invalid -=== RUN TestChallenge_Validate/ok/http-01-insecure +=== RUN TestChallenge_Validate/fail/unexpected-type +=== RUN TestChallenge_Validate/ok/http-01 === RUN TestChallenge_Validate/fail/dns-01 -=== RUN TestChallenge_Validate/ok/tls-alpn-01-insecure -=== RUN TestChallenge_Validate/ok/device-attest-01 -=== RUN TestChallenge_Validate/ok/already-valid -=== RUN TestChallenge_Validate/fail/http-01 -=== RUN TestChallenge_Validate/fail/tls-alpn-01 === RUN TestChallenge_Validate/ok/wire-oidc-01 ---- PASS: TestChallenge_Validate (0.93s) - --- PASS: TestChallenge_Validate/fail/wire-oidc-01-no-wire-db (0.00s) - --- PASS: TestChallenge_Validate/fail/unexpected-type (0.00s) - --- PASS: TestChallenge_Validate/ok/tls-alpn-01 (0.37s) - --- PASS: TestChallenge_Validate/fail/device-attest-01 (0.00s) - --- PASS: TestChallenge_Validate/fail/wire-dpop-01-no-wire-db (0.01s) - --- PASS: TestChallenge_Validate/ok/http-01 (0.00s) - --- PASS: TestChallenge_Validate/ok/dns-01 (0.00s) +=== RUN TestChallenge_Validate/fail/wire-oidc-01-no-wire-db +=== RUN TestChallenge_Validate/fail/tls-alpn-01 +=== RUN TestChallenge_Validate/fail/device-attest-01 +--- PASS: TestChallenge_Validate (0.97s) + --- PASS: TestChallenge_Validate/ok/already-valid (0.00s) + --- PASS: TestChallenge_Validate/ok/tls-alpn-01 (0.67s) + --- PASS: TestChallenge_Validate/ok/tls-alpn-01-insecure (0.28s) + --- PASS: TestChallenge_Validate/ok/device-attest-01 (0.00s) --- PASS: TestChallenge_Validate/ok/wire-dpop-01 (0.00s) - --- PASS: TestChallenge_Validate/fail/already-invalid (0.00s) + --- PASS: TestChallenge_Validate/fail/wire-dpop-01-no-wire-db (0.00s) + --- PASS: TestChallenge_Validate/fail/http-01 (0.00s) --- PASS: TestChallenge_Validate/ok/http-01-insecure (0.00s) + --- PASS: TestChallenge_Validate/ok/dns-01 (0.00s) + --- PASS: TestChallenge_Validate/fail/already-invalid (0.00s) + --- PASS: TestChallenge_Validate/fail/unexpected-type (0.00s) + --- PASS: TestChallenge_Validate/ok/http-01 (0.00s) --- PASS: TestChallenge_Validate/fail/dns-01 (0.00s) - --- PASS: TestChallenge_Validate/ok/tls-alpn-01-insecure (0.53s) - --- PASS: TestChallenge_Validate/ok/device-attest-01 (0.01s) - --- PASS: TestChallenge_Validate/ok/already-valid (0.00s) - --- PASS: TestChallenge_Validate/fail/http-01 (0.00s) - --- PASS: TestChallenge_Validate/fail/tls-alpn-01 (0.00s) --- PASS: TestChallenge_Validate/ok/wire-oidc-01 (0.00s) + --- PASS: TestChallenge_Validate/fail/wire-oidc-01-no-wire-db (0.00s) + --- PASS: TestChallenge_Validate/fail/tls-alpn-01 (0.00s) + --- PASS: TestChallenge_Validate/fail/device-attest-01 (0.00s) === RUN TestHTTP01Validate === RUN TestHTTP01Validate/fail/http-get-error-store-error === RUN TestHTTP01Validate/fail/http-get->=400-store-error === RUN TestHTTP01Validate/ok/http-get->=400 -=== RUN TestHTTP01Validate/fail/read-body === RUN TestHTTP01Validate/fail/key-auth-gen-error +=== RUN TestHTTP01Validate/ok/key-auth-mismatch +=== RUN TestHTTP01Validate/fail/update-challenge-error === RUN TestHTTP01Validate/ok === RUN TestHTTP01Validate/ok/http-get-error -=== RUN TestHTTP01Validate/ok/key-auth-mismatch +=== RUN TestHTTP01Validate/fail/read-body === RUN TestHTTP01Validate/fail/key-auth-mismatch-store-error -=== RUN TestHTTP01Validate/fail/update-challenge-error ---- PASS: TestHTTP01Validate (0.01s) +--- PASS: TestHTTP01Validate (0.00s) --- PASS: TestHTTP01Validate/fail/http-get-error-store-error (0.00s) --- PASS: TestHTTP01Validate/fail/http-get->=400-store-error (0.00s) --- PASS: TestHTTP01Validate/ok/http-get->=400 (0.00s) - --- PASS: TestHTTP01Validate/fail/read-body (0.00s) --- PASS: TestHTTP01Validate/fail/key-auth-gen-error (0.00s) + --- PASS: TestHTTP01Validate/ok/key-auth-mismatch (0.00s) + --- PASS: TestHTTP01Validate/fail/update-challenge-error (0.00s) --- PASS: TestHTTP01Validate/ok (0.00s) --- PASS: TestHTTP01Validate/ok/http-get-error (0.00s) - --- PASS: TestHTTP01Validate/ok/key-auth-mismatch (0.00s) + --- PASS: TestHTTP01Validate/fail/read-body (0.00s) --- PASS: TestHTTP01Validate/fail/key-auth-mismatch-store-error (0.00s) - --- PASS: TestHTTP01Validate/fail/update-challenge-error (0.00s) === RUN TestDNS01Validate -=== RUN TestDNS01Validate/fail/update-challenge-error -=== RUN TestDNS01Validate/ok === RUN TestDNS01Validate/fail/lookupTXT-store-error === RUN TestDNS01Validate/ok/lookupTXT-error === RUN TestDNS01Validate/fail/key-auth-gen-error === RUN TestDNS01Validate/fail/key-auth-mismatch-store-error === RUN TestDNS01Validate/ok/key-auth-mismatch-store-error +=== RUN TestDNS01Validate/fail/update-challenge-error +=== RUN TestDNS01Validate/ok --- PASS: TestDNS01Validate (0.00s) - --- PASS: TestDNS01Validate/fail/update-challenge-error (0.00s) - --- PASS: TestDNS01Validate/ok (0.00s) --- PASS: TestDNS01Validate/fail/lookupTXT-store-error (0.00s) --- PASS: TestDNS01Validate/ok/lookupTXT-error (0.00s) --- PASS: TestDNS01Validate/fail/key-auth-gen-error (0.00s) --- PASS: TestDNS01Validate/fail/key-auth-mismatch-store-error (0.00s) --- PASS: TestDNS01Validate/ok/key-auth-mismatch-store-error (0.00s) + --- PASS: TestDNS01Validate/fail/update-challenge-error (0.00s) + --- PASS: TestDNS01Validate/ok (0.00s) === RUN TestTLSALPN01Validate -=== RUN TestTLSALPN01Validate/ok/tlsDial-timeout -=== RUN TestTLSALPN01Validate/fail/no-names-store-error -2026/11/25 04:48:57 http: TLS handshake error from 127.0.0.1:42014: read tcp 127.0.0.1:42275->127.0.0.1:42014: use of closed network connection +=== RUN TestTLSALPN01Validate/ok/error-no-protocol +2025/10/24 00:31:30 http: TLS handshake error from 127.0.0.1:42428: tls: client requested unsupported application protocols (["acme-tls/1"]) +=== RUN TestTLSALPN01Validate/ok/too-many-names-error +=== RUN TestTLSALPN01Validate/ok/wrong-name +=== RUN TestTLSALPN01Validate/fail/key-auth-gen-error +2025/10/24 00:31:33 http: TLS handshake error from 127.0.0.1:48470: read tcp 127.0.0.1:37791->127.0.0.1:48470: use of closed network connection === RUN TestTLSALPN01Validate/ok/error-extension-not-critical +2025/10/24 00:31:34 http: TLS handshake error from 127.0.0.1:57970: read tcp 127.0.0.1:39925->127.0.0.1:57970: use of closed network connection +=== RUN TestTLSALPN01Validate/fail/no-protocol-store-error +2025/10/24 00:31:34 http: TLS handshake error from 127.0.0.1:36828: tls: client requested unsupported application protocols (["acme-tls/1"]) +=== RUN TestTLSALPN01Validate/ok/error-no-extension +=== RUN TestTLSALPN01Validate/fail/no-extension-store-error +2025/10/24 00:31:36 http: TLS handshake error from 127.0.0.1:35356: read tcp 127.0.0.1:45069->127.0.0.1:35356: use of closed network connection === RUN TestTLSALPN01Validate/fail/extension-not-critical-store-error -2026/11/25 04:48:57 http: TLS handshake error from 127.0.0.1:52148: read tcp 127.0.0.1:40213->127.0.0.1:52148: use of closed network connection +2025/10/24 00:31:37 http: TLS handshake error from 127.0.0.1:56758: read tcp 127.0.0.1:35371->127.0.0.1:56758: use of closed network connection === RUN TestTLSALPN01Validate/ok/error-malformed-extension -2026/11/25 04:48:59 http: TLS handshake error from 127.0.0.1:46040: read tcp 127.0.0.1:40309->127.0.0.1:46040: use of closed network connection +2025/10/24 00:31:38 http: TLS handshake error from 127.0.0.1:41452: read tcp 127.0.0.1:43569->127.0.0.1:41452: use of closed network connection === RUN TestTLSALPN01Validate/fail/malformed-extension-store-error -2026/11/25 04:48:59 http: TLS handshake error from 127.0.0.1:41386: read tcp 127.0.0.1:33041->127.0.0.1:41386: use of closed network connection +=== RUN TestTLSALPN01Validate/ok/error-keyauth-mismatch +2025/10/24 00:31:43 http: TLS handshake error from 127.0.0.1:48326: read tcp 127.0.0.1:39501->127.0.0.1:48326: use of closed network connection +=== RUN TestTLSALPN01Validate/fail/keyauth-mismatch-store-error +2025/10/24 00:31:45 http: TLS handshake error from 127.0.0.1:45846: read tcp 127.0.0.1:40899->127.0.0.1:45846: use of closed network connection +=== RUN TestTLSALPN01Validate/fail/no-names-store-error === RUN TestTLSALPN01Validate/ok/error-obsolete-oid +2025/10/24 00:31:47 http: TLS handshake error from 127.0.0.1:44510: read tcp 127.0.0.1:40751->127.0.0.1:44510: use of closed network connection +=== RUN TestTLSALPN01Validate/fail/obsolete-oid-store-error +2025/10/24 00:31:48 http: TLS handshake error from 127.0.0.1:46882: read tcp 127.0.0.1:38391->127.0.0.1:46882: use of closed network connection === RUN TestTLSALPN01Validate/ok -2026/11/25 04:49:00 http: TLS handshake error from 127.0.0.1:51218: read tcp 127.0.0.1:36087->127.0.0.1:51218: use of closed network connection +2025/10/24 00:31:52 http: TLS handshake error from 127.0.0.1:45912: read tcp 127.0.0.1:44165->127.0.0.1:45912: use of closed network connection +=== RUN TestTLSALPN01Validate/ok/tlsDial-error === RUN TestTLSALPN01Validate/ok/no-certificates-error === RUN TestTLSALPN01Validate/ok/no-names-nor-ips-error -2026/11/25 04:49:01 http: TLS handshake error from 127.0.0.1:41148: read tcp 127.0.0.1:40773->127.0.0.1:41148: use of closed network connection -=== RUN TestTLSALPN01Validate/ok/wrong-name -=== RUN TestTLSALPN01Validate/fail/key-auth-gen-error -2026/11/25 04:49:02 http: TLS handshake error from 127.0.0.1:56688: read tcp 127.0.0.1:43515->127.0.0.1:56688: use of closed network connection -=== RUN TestTLSALPN01Validate/ok/error-no-extension -2026/11/25 04:49:02 http: TLS handshake error from 127.0.0.1:43034: read tcp 127.0.0.1:39823->127.0.0.1:43034: use of closed network connection -=== RUN TestTLSALPN01Validate/fail/obsolete-oid-store-error +2025/10/24 00:31:52 http: TLS handshake error from 127.0.0.1:44236: read tcp 127.0.0.1:36813->127.0.0.1:44236: use of closed network connection === RUN TestTLSALPN01Validate/ok/ip -2026/11/25 04:49:03 http: TLS handshake error from 127.0.0.1:38076: read tcp 127.0.0.1:34251->127.0.0.1:38076: use of closed network connection +2025/10/24 00:31:53 http: TLS handshake error from 127.0.0.1:49830: read tcp 127.0.0.1:33383->127.0.0.1:49830: use of closed network connection === RUN TestTLSALPN01Validate/fail/tlsDial-store-error -=== RUN TestTLSALPN01Validate/ok/tlsDial-error +=== RUN TestTLSALPN01Validate/ok/tlsDial-timeout === RUN TestTLSALPN01Validate/fail/no-certificates-store-error -=== RUN TestTLSALPN01Validate/ok/error-no-protocol -2026/11/25 04:49:03 http: TLS handshake error from 127.0.0.1:39356: tls: client requested unsupported application protocols (["acme-tls/1"]) -=== RUN TestTLSALPN01Validate/ok/too-many-names-error -2026/11/25 04:49:03 http: TLS handshake error from 127.0.0.1:41594: read tcp 127.0.0.1:33195->127.0.0.1:41594: use of closed network connection -=== RUN TestTLSALPN01Validate/fail/no-extension-store-error -2026/11/25 04:49:04 http: TLS handshake error from 127.0.0.1:51964: read tcp 127.0.0.1:39575->127.0.0.1:51964: use of closed network connection -=== RUN TestTLSALPN01Validate/ok/error-keyauth-mismatch -2026/11/25 04:49:04 http: TLS handshake error from 127.0.0.1:53630: read tcp 127.0.0.1:46839->127.0.0.1:53630: use of closed network connection -=== RUN TestTLSALPN01Validate/fail/keyauth-mismatch-store-error -=== RUN TestTLSALPN01Validate/fail/no-protocol-store-error -2026/11/25 04:49:05 http: TLS handshake error from 127.0.0.1:59048: tls: client requested unsupported application protocols (["acme-tls/1"]) ---- PASS: TestTLSALPN01Validate (10.04s) - --- PASS: TestTLSALPN01Validate/ok/tlsDial-timeout (1.00s) - --- PASS: TestTLSALPN01Validate/fail/no-names-store-error (0.73s) - --- PASS: TestTLSALPN01Validate/ok/error-extension-not-critical (0.19s) - --- PASS: TestTLSALPN01Validate/fail/extension-not-critical-store-error (0.34s) - --- PASS: TestTLSALPN01Validate/ok/error-malformed-extension (1.12s) - --- PASS: TestTLSALPN01Validate/fail/malformed-extension-store-error (0.37s) - --- PASS: TestTLSALPN01Validate/ok/error-obsolete-oid (0.41s) - --- PASS: TestTLSALPN01Validate/ok (0.53s) +--- PASS: TestTLSALPN01Validate (23.95s) + --- PASS: TestTLSALPN01Validate/ok/error-no-protocol (0.01s) + --- PASS: TestTLSALPN01Validate/ok/too-many-names-error (1.59s) + --- PASS: TestTLSALPN01Validate/ok/wrong-name (0.41s) + --- PASS: TestTLSALPN01Validate/fail/key-auth-gen-error (0.84s) + --- PASS: TestTLSALPN01Validate/ok/error-extension-not-critical (1.28s) + --- PASS: TestTLSALPN01Validate/fail/no-protocol-store-error (0.00s) + --- PASS: TestTLSALPN01Validate/ok/error-no-extension (1.02s) + --- PASS: TestTLSALPN01Validate/fail/no-extension-store-error (1.19s) + --- PASS: TestTLSALPN01Validate/fail/extension-not-critical-store-error (1.00s) + --- PASS: TestTLSALPN01Validate/ok/error-malformed-extension (0.81s) + --- PASS: TestTLSALPN01Validate/fail/malformed-extension-store-error (4.11s) + --- PASS: TestTLSALPN01Validate/ok/error-keyauth-mismatch (1.51s) + --- PASS: TestTLSALPN01Validate/fail/keyauth-mismatch-store-error (1.38s) + --- PASS: TestTLSALPN01Validate/fail/no-names-store-error (1.30s) + --- PASS: TestTLSALPN01Validate/ok/error-obsolete-oid (0.83s) + --- PASS: TestTLSALPN01Validate/fail/obsolete-oid-store-error (1.40s) + --- PASS: TestTLSALPN01Validate/ok (3.10s) + --- PASS: TestTLSALPN01Validate/ok/tlsDial-error (0.00s) --- PASS: TestTLSALPN01Validate/ok/no-certificates-error (0.00s) - --- PASS: TestTLSALPN01Validate/ok/no-names-nor-ips-error (1.04s) - --- PASS: TestTLSALPN01Validate/ok/wrong-name (0.69s) - --- PASS: TestTLSALPN01Validate/fail/key-auth-gen-error (0.34s) - --- PASS: TestTLSALPN01Validate/ok/error-no-extension (0.50s) - --- PASS: TestTLSALPN01Validate/fail/obsolete-oid-store-error (0.37s) - --- PASS: TestTLSALPN01Validate/ok/ip (0.14s) + --- PASS: TestTLSALPN01Validate/ok/no-names-nor-ips-error (0.90s) + --- PASS: TestTLSALPN01Validate/ok/ip (0.26s) --- PASS: TestTLSALPN01Validate/fail/tlsDial-store-error (0.00s) - --- PASS: TestTLSALPN01Validate/ok/tlsDial-error (0.00s) + --- PASS: TestTLSALPN01Validate/ok/tlsDial-timeout (1.00s) --- PASS: TestTLSALPN01Validate/fail/no-certificates-store-error (0.00s) - --- PASS: TestTLSALPN01Validate/ok/error-no-protocol (0.00s) - --- PASS: TestTLSALPN01Validate/ok/too-many-names-error (0.47s) - --- PASS: TestTLSALPN01Validate/fail/no-extension-store-error (0.89s) - --- PASS: TestTLSALPN01Validate/ok/error-keyauth-mismatch (0.18s) - --- PASS: TestTLSALPN01Validate/fail/keyauth-mismatch-store-error (0.72s) - --- PASS: TestTLSALPN01Validate/fail/no-protocol-store-error (0.00s) === RUN Test_reverseAddr === RUN Test_reverseAddr/ok/ipv4 === RUN Test_reverseAddr/ok/ipv6 @@ -1944,7 +1981,7 @@ === RUN Test_doStepAttestationFormat/fail_sig_verify_RSA === RUN Test_doStepAttestationFormat/fail_sig_verify_Ed25519 === RUN Test_doStepAttestationFormat/fail_unmarshal_serial_number ---- PASS: Test_doStepAttestationFormat (0.40s) +--- PASS: Test_doStepAttestationFormat (0.53s) --- PASS: Test_doStepAttestationFormat/ok (0.00s) --- PASS: Test_doStepAttestationFormat/fail_yubico_issuer (0.00s) --- PASS: Test_doStepAttestationFormat/fail_x5c_type (0.00s) @@ -1964,48 +2001,48 @@ --- PASS: Test_doStepAttestationFormat/fail_unmarshal_serial_number (0.00s) === RUN Test_doStepAttestationFormat_noCAIntermediate === RUN Test_doStepAttestationFormat_noCAIntermediate/fail_no_intermediate ---- PASS: Test_doStepAttestationFormat_noCAIntermediate (0.01s) +--- PASS: Test_doStepAttestationFormat_noCAIntermediate (0.00s) --- PASS: Test_doStepAttestationFormat_noCAIntermediate/fail_no_intermediate (0.00s) === RUN Test_deviceAttest01Validate +=== RUN Test_deviceAttest01Validate/ok/empty-attobj === RUN Test_deviceAttest01Validate/ok/cborDecoder.Wellformed +=== RUN Test_deviceAttest01Validate/ok/doAppleAttestationFormat-non-matching-challenge-value +=== RUN Test_deviceAttest01Validate/ok/unknown-attestation-format +=== RUN Test_deviceAttest01Validate/fail/db.UpdateAuthorization +=== RUN Test_deviceAttest01Validate/ok/empty-json-attobj === RUN Test_deviceAttest01Validate/ok/prov.IsAttestationFormatEnabled -=== RUN Test_deviceAttest01Validate/fail/db.UpdateChallenge +=== RUN Test_deviceAttest01Validate/ok/doAppleAttestationFormat-non-matching-nonce +=== RUN Test_deviceAttest01Validate/ok/doStepAttestationFormat-storeError === RUN Test_deviceAttest01Validate/ok -=== RUN Test_deviceAttest01Validate/fail/storeError -=== RUN Test_deviceAttest01Validate/ok/storeError-return-nil -=== RUN Test_deviceAttest01Validate/ok/empty-attobj -=== RUN Test_deviceAttest01Validate/ok/doStepAttestationFormat-non-matching-identifier -=== RUN Test_deviceAttest01Validate/ok/unknown-attestation-format +=== RUN Test_deviceAttest01Validate/ok/unsupported-attestation-format === RUN Test_deviceAttest01Validate/fail/getAuthorization -=== RUN Test_deviceAttest01Validate/fail/json.Unmarshal === RUN Test_deviceAttest01Validate/ok/base64-decode === RUN Test_deviceAttest01Validate/ok/doAppleAttestationFormat-storeError -=== RUN Test_deviceAttest01Validate/ok/doStepAttestationFormat-storeError -=== RUN Test_deviceAttest01Validate/ok/empty-json-attobj -=== RUN Test_deviceAttest01Validate/ok/unsupported-attestation-format -=== RUN Test_deviceAttest01Validate/ok/doAppleAttestationFormat-non-matching-nonce -=== RUN Test_deviceAttest01Validate/ok/doAppleAttestationFormat-non-matching-challenge-value -=== RUN Test_deviceAttest01Validate/fail/db.UpdateAuthorization ---- PASS: Test_deviceAttest01Validate (0.04s) +=== RUN Test_deviceAttest01Validate/ok/doStepAttestationFormat-non-matching-identifier +=== RUN Test_deviceAttest01Validate/fail/db.UpdateChallenge +=== RUN Test_deviceAttest01Validate/fail/json.Unmarshal +=== RUN Test_deviceAttest01Validate/fail/storeError +=== RUN Test_deviceAttest01Validate/ok/storeError-return-nil +--- PASS: Test_deviceAttest01Validate (0.06s) + --- PASS: Test_deviceAttest01Validate/ok/empty-attobj (0.00s) --- PASS: Test_deviceAttest01Validate/ok/cborDecoder.Wellformed (0.00s) + --- PASS: Test_deviceAttest01Validate/ok/doAppleAttestationFormat-non-matching-challenge-value (0.00s) + --- PASS: Test_deviceAttest01Validate/ok/unknown-attestation-format (0.01s) + --- PASS: Test_deviceAttest01Validate/fail/db.UpdateAuthorization (0.01s) + --- PASS: Test_deviceAttest01Validate/ok/empty-json-attobj (0.00s) --- PASS: Test_deviceAttest01Validate/ok/prov.IsAttestationFormatEnabled (0.00s) - --- PASS: Test_deviceAttest01Validate/fail/db.UpdateChallenge (0.00s) + --- PASS: Test_deviceAttest01Validate/ok/doAppleAttestationFormat-non-matching-nonce (0.00s) + --- PASS: Test_deviceAttest01Validate/ok/doStepAttestationFormat-storeError (0.01s) --- PASS: Test_deviceAttest01Validate/ok (0.00s) - --- PASS: Test_deviceAttest01Validate/fail/storeError (0.00s) - --- PASS: Test_deviceAttest01Validate/ok/storeError-return-nil (0.00s) - --- PASS: Test_deviceAttest01Validate/ok/empty-attobj (0.00s) - --- PASS: Test_deviceAttest01Validate/ok/doStepAttestationFormat-non-matching-identifier (0.00s) - --- PASS: Test_deviceAttest01Validate/ok/unknown-attestation-format (0.01s) + --- PASS: Test_deviceAttest01Validate/ok/unsupported-attestation-format (0.00s) --- PASS: Test_deviceAttest01Validate/fail/getAuthorization (0.00s) - --- PASS: Test_deviceAttest01Validate/fail/json.Unmarshal (0.00s) --- PASS: Test_deviceAttest01Validate/ok/base64-decode (0.00s) --- PASS: Test_deviceAttest01Validate/ok/doAppleAttestationFormat-storeError (0.00s) - --- PASS: Test_deviceAttest01Validate/ok/doStepAttestationFormat-storeError (0.00s) - --- PASS: Test_deviceAttest01Validate/ok/empty-json-attobj (0.00s) - --- PASS: Test_deviceAttest01Validate/ok/unsupported-attestation-format (0.00s) - --- PASS: Test_deviceAttest01Validate/ok/doAppleAttestationFormat-non-matching-nonce (0.00s) - --- PASS: Test_deviceAttest01Validate/ok/doAppleAttestationFormat-non-matching-challenge-value (0.01s) - --- PASS: Test_deviceAttest01Validate/fail/db.UpdateAuthorization (0.00s) + --- PASS: Test_deviceAttest01Validate/ok/doStepAttestationFormat-non-matching-identifier (0.00s) + --- PASS: Test_deviceAttest01Validate/fail/db.UpdateChallenge (0.00s) + --- PASS: Test_deviceAttest01Validate/fail/json.Unmarshal (0.00s) + --- PASS: Test_deviceAttest01Validate/fail/storeError (0.00s) + --- PASS: Test_deviceAttest01Validate/ok/storeError-return-nil (0.00s) === RUN Test_validateAKCertificate === RUN Test_validateAKCertificate/ok === RUN Test_validateAKCertificate/fail/version @@ -2023,7 +2060,7 @@ === RUN Test_validateAKCertificateSubjectAlternativeNames/fail/missing-manufacturer === RUN Test_validateAKCertificateSubjectAlternativeNames/fail/missing-model === RUN Test_validateAKCertificateSubjectAlternativeNames/fail/missing-firmware-version ---- PASS: Test_validateAKCertificateSubjectAlternativeNames (0.01s) +--- PASS: Test_validateAKCertificateSubjectAlternativeNames (0.02s) --- PASS: Test_validateAKCertificateSubjectAlternativeNames/ok (0.00s) --- PASS: Test_validateAKCertificateSubjectAlternativeNames/fail/missing-manufacturer (0.00s) --- PASS: Test_validateAKCertificateSubjectAlternativeNames/fail/missing-model (0.00s) @@ -2032,7 +2069,7 @@ === RUN Test_validateAKCertificateExtendedKeyUsage/ok === RUN Test_validateAKCertificateExtendedKeyUsage/fail/wrong-eku === RUN Test_validateAKCertificateExtendedKeyUsage/fail/missing-eku ---- PASS: Test_validateAKCertificateExtendedKeyUsage (0.01s) +--- PASS: Test_validateAKCertificateExtendedKeyUsage (0.02s) --- PASS: Test_validateAKCertificateExtendedKeyUsage/ok (0.00s) --- PASS: Test_validateAKCertificateExtendedKeyUsage/fail/wrong-eku (0.00s) --- PASS: Test_validateAKCertificateExtendedKeyUsage/fail/missing-eku (0.00s) @@ -2061,55 +2098,55 @@ --- PASS: Test_dns01ChallengeHost/rooted_dns (0.00s) --- PASS: Test_dns01ChallengeHost/rooted_dns_strict (0.00s) === RUN Test_wireDPOP01Validate +=== RUN Test_wireDPOP01Validate/fail/unmarshal +=== RUN Test_wireDPOP01Validate/fail/wire-parse-client-id +=== RUN Test_wireDPOP01Validate/fail/parse-and-verify +=== RUN Test_wireDPOP01Validate/fail/db.UpdateChallenge === RUN Test_wireDPOP01Validate/fail/db.GetAllOrdersByAccountID === RUN Test_wireDPOP01Validate/fail/db.GetAllOrdersByAccountID-zero === RUN Test_wireDPOP01Validate/fail/db.CreateDpopToken +=== RUN Test_wireDPOP01Validate/ok === RUN Test_wireDPOP01Validate/fail/no-provisioner === RUN Test_wireDPOP01Validate/fail/no-linker -=== RUN Test_wireDPOP01Validate/fail/unmarshal -=== RUN Test_wireDPOP01Validate/fail/wire-parse-client-id -=== RUN Test_wireDPOP01Validate/ok === RUN Test_wireDPOP01Validate/fail/wire-parse-id -=== RUN Test_wireDPOP01Validate/fail/parse-and-verify -=== RUN Test_wireDPOP01Validate/fail/db.UpdateChallenge --- PASS: Test_wireDPOP01Validate (0.01s) + --- PASS: Test_wireDPOP01Validate/fail/unmarshal (0.00s) + --- PASS: Test_wireDPOP01Validate/fail/wire-parse-client-id (0.00s) + --- PASS: Test_wireDPOP01Validate/fail/parse-and-verify (0.00s) + --- PASS: Test_wireDPOP01Validate/fail/db.UpdateChallenge (0.00s) --- PASS: Test_wireDPOP01Validate/fail/db.GetAllOrdersByAccountID (0.00s) --- PASS: Test_wireDPOP01Validate/fail/db.GetAllOrdersByAccountID-zero (0.00s) --- PASS: Test_wireDPOP01Validate/fail/db.CreateDpopToken (0.00s) + --- PASS: Test_wireDPOP01Validate/ok (0.00s) --- PASS: Test_wireDPOP01Validate/fail/no-provisioner (0.00s) --- PASS: Test_wireDPOP01Validate/fail/no-linker (0.00s) - --- PASS: Test_wireDPOP01Validate/fail/unmarshal (0.00s) - --- PASS: Test_wireDPOP01Validate/fail/wire-parse-client-id (0.00s) - --- PASS: Test_wireDPOP01Validate/ok (0.00s) --- PASS: Test_wireDPOP01Validate/fail/wire-parse-id (0.00s) - --- PASS: Test_wireDPOP01Validate/fail/parse-and-verify (0.00s) - --- PASS: Test_wireDPOP01Validate/fail/db.UpdateChallenge (0.00s) === RUN Test_wireOIDC01Validate -=== RUN Test_wireOIDC01Validate/fail/verify +=== RUN Test_wireOIDC01Validate/fail/db.GetAllOrdersByAccountID-zero === RUN Test_wireOIDC01Validate/fail/db.CreateOidcToken -=== RUN Test_wireOIDC01Validate/ok/wire-oidc-01 === RUN Test_wireOIDC01Validate/fail/no-provisioner -=== RUN Test_wireOIDC01Validate/fail/keyauth-mismatch +=== RUN Test_wireOIDC01Validate/fail/no-linker +=== RUN Test_wireOIDC01Validate/fail/verify === RUN Test_wireOIDC01Validate/fail/validateWireOIDCClaims === RUN Test_wireOIDC01Validate/fail/db.UpdateChallenge === RUN Test_wireOIDC01Validate/fail/db.GetAllOrdersByAccountID -=== RUN Test_wireOIDC01Validate/fail/db.GetAllOrdersByAccountID-zero -=== RUN Test_wireOIDC01Validate/fail/no-linker +=== RUN Test_wireOIDC01Validate/ok/wire-oidc-01 === RUN Test_wireOIDC01Validate/fail/unmarshal === RUN Test_wireOIDC01Validate/fail/wire-parse-id ---- PASS: Test_wireOIDC01Validate (0.02s) - --- PASS: Test_wireOIDC01Validate/fail/verify (0.00s) - --- PASS: Test_wireOIDC01Validate/fail/db.CreateOidcToken (0.00s) - --- PASS: Test_wireOIDC01Validate/ok/wire-oidc-01 (0.01s) +=== RUN Test_wireOIDC01Validate/fail/keyauth-mismatch +--- PASS: Test_wireOIDC01Validate (0.03s) + --- PASS: Test_wireOIDC01Validate/fail/db.GetAllOrdersByAccountID-zero (0.00s) + --- PASS: Test_wireOIDC01Validate/fail/db.CreateOidcToken (0.01s) --- PASS: Test_wireOIDC01Validate/fail/no-provisioner (0.00s) - --- PASS: Test_wireOIDC01Validate/fail/keyauth-mismatch (0.00s) + --- PASS: Test_wireOIDC01Validate/fail/no-linker (0.00s) + --- PASS: Test_wireOIDC01Validate/fail/verify (0.00s) --- PASS: Test_wireOIDC01Validate/fail/validateWireOIDCClaims (0.00s) --- PASS: Test_wireOIDC01Validate/fail/db.UpdateChallenge (0.00s) --- PASS: Test_wireOIDC01Validate/fail/db.GetAllOrdersByAccountID (0.00s) - --- PASS: Test_wireOIDC01Validate/fail/db.GetAllOrdersByAccountID-zero (0.00s) - --- PASS: Test_wireOIDC01Validate/fail/no-linker (0.00s) + --- PASS: Test_wireOIDC01Validate/ok/wire-oidc-01 (0.00s) --- PASS: Test_wireOIDC01Validate/fail/unmarshal (0.00s) --- PASS: Test_wireOIDC01Validate/fail/wire-parse-id (0.00s) + --- PASS: Test_wireOIDC01Validate/fail/keyauth-mismatch (0.00s) === RUN Test_parseAndVerifyWireAccessToken challenge_wire_test.go:2126: skip until we can retrieve public key from e2e test, so that we can actually verify the token --- SKIP: Test_parseAndVerifyWireAccessToken (0.00s) @@ -2150,7 +2187,7 @@ === RUN TestLinker_DNS/ipv6-port-no-brackets === RUN TestLinker_DNS/ipv6-long-no-brackets === RUN TestLinker_DNS/ipv6-long-port-no-brackets ---- PASS: TestLinker_DNS (0.00s) +--- PASS: TestLinker_DNS (0.01s) --- PASS: TestLinker_DNS/domain (0.00s) --- PASS: TestLinker_DNS/domain-port (0.00s) --- PASS: TestLinker_DNS/ipv4 (0.00s) @@ -2191,74 +2228,74 @@ === RUN TestOrder_UpdateStatus/ok/ready-expired === RUN TestOrder_UpdateStatus/ok/pending-expired === RUN TestOrder_UpdateStatus/ok/still-pending -=== RUN TestOrder_UpdateStatus/ok/valid === RUN TestOrder_UpdateStatus/ok/already-invalid -=== RUN TestOrder_UpdateStatus/ok/already-valid -=== RUN TestOrder_UpdateStatus/fail/error-unexpected-status === RUN TestOrder_UpdateStatus/fail/ready-expired-db.UpdateOrder-error === RUN TestOrder_UpdateStatus/ok/invalid +=== RUN TestOrder_UpdateStatus/ok/valid +=== RUN TestOrder_UpdateStatus/ok/already-valid +=== RUN TestOrder_UpdateStatus/fail/error-unexpected-status --- PASS: TestOrder_UpdateStatus (0.00s) --- PASS: TestOrder_UpdateStatus/ok/ready-expired (0.00s) --- PASS: TestOrder_UpdateStatus/ok/pending-expired (0.00s) --- PASS: TestOrder_UpdateStatus/ok/still-pending (0.00s) - --- PASS: TestOrder_UpdateStatus/ok/valid (0.00s) --- PASS: TestOrder_UpdateStatus/ok/already-invalid (0.00s) - --- PASS: TestOrder_UpdateStatus/ok/already-valid (0.00s) - --- PASS: TestOrder_UpdateStatus/fail/error-unexpected-status (0.00s) --- PASS: TestOrder_UpdateStatus/fail/ready-expired-db.UpdateOrder-error (0.00s) --- PASS: TestOrder_UpdateStatus/ok/invalid (0.00s) + --- PASS: TestOrder_UpdateStatus/ok/valid (0.00s) + --- PASS: TestOrder_UpdateStatus/ok/already-valid (0.00s) + --- PASS: TestOrder_UpdateStatus/fail/error-unexpected-status (0.00s) === RUN TestOrder_Finalize -=== RUN TestOrder_Finalize/ok/new-cert-dns -=== RUN TestOrder_Finalize/ok/new-cert-ip -=== RUN TestOrder_Finalize/ok/already-valid -=== RUN TestOrder_Finalize/fail/error-provisioner-auth === RUN TestOrder_Finalize/fail/error-db.CreateCertificate -=== RUN TestOrder_Finalize/fail/csr-fingerprint +=== RUN TestOrder_Finalize/ok/permanent-identifier +=== RUN TestOrder_Finalize/ok/permanent-identifier-only === RUN TestOrder_Finalize/fail/csr-wire-id-csr-uri-mismatch -=== RUN TestOrder_Finalize/ok/wire-id-device === RUN TestOrder_Finalize/ok/new-cert-dns-and-ip -=== RUN TestOrder_Finalize/fail/invalid +=== RUN TestOrder_Finalize/ok/already-valid +=== RUN TestOrder_Finalize/fail/error-provisioner-auth +=== RUN TestOrder_Finalize/fail/error-ca-sign +=== RUN TestOrder_Finalize/fail/webhook-error +=== RUN TestOrder_Finalize/fail/wire-id-org-missing +=== RUN TestOrder_Finalize/ok/new-cert-dns +=== RUN TestOrder_Finalize/ok/new-cert-ip === RUN TestOrder_Finalize/fail/pending -=== RUN TestOrder_Finalize/fail/error-db.UpdateOrder -=== RUN TestOrder_Finalize/fail/wire-id-display-name-missing -=== RUN TestOrder_Finalize/ok/wire-id-user === RUN TestOrder_Finalize/fail/error-unexpected-status === RUN TestOrder_Finalize/fail/non-matching-permanent-identifier-common-name +=== RUN TestOrder_Finalize/fail/wire-id-display-name-missing +=== RUN TestOrder_Finalize/fail/wire-id-display-name-mismatch +=== RUN TestOrder_Finalize/ok/wire-id-device === RUN TestOrder_Finalize/fail/error-template-options -=== RUN TestOrder_Finalize/fail/error-ca-sign -=== RUN TestOrder_Finalize/fail/webhook-error -=== RUN TestOrder_Finalize/ok/permanent-identifier -=== RUN TestOrder_Finalize/ok/permanent-identifier-only +=== RUN TestOrder_Finalize/fail/error-db.UpdateOrder +=== RUN TestOrder_Finalize/fail/csr-fingerprint === RUN TestOrder_Finalize/fail/csr-wire-id-csr-uri-missing === RUN TestOrder_Finalize/fail/other-than-wire-ids-present -=== RUN TestOrder_Finalize/fail/wire-id-org-missing -=== RUN TestOrder_Finalize/fail/wire-id-display-name-mismatch ---- PASS: TestOrder_Finalize (0.00s) - --- PASS: TestOrder_Finalize/ok/new-cert-dns (0.00s) - --- PASS: TestOrder_Finalize/ok/new-cert-ip (0.00s) - --- PASS: TestOrder_Finalize/ok/already-valid (0.00s) - --- PASS: TestOrder_Finalize/fail/error-provisioner-auth (0.00s) +=== RUN TestOrder_Finalize/ok/wire-id-user +=== RUN TestOrder_Finalize/fail/invalid +--- PASS: TestOrder_Finalize (0.01s) --- PASS: TestOrder_Finalize/fail/error-db.CreateCertificate (0.00s) - --- PASS: TestOrder_Finalize/fail/csr-fingerprint (0.00s) + --- PASS: TestOrder_Finalize/ok/permanent-identifier (0.00s) + --- PASS: TestOrder_Finalize/ok/permanent-identifier-only (0.00s) --- PASS: TestOrder_Finalize/fail/csr-wire-id-csr-uri-mismatch (0.00s) - --- PASS: TestOrder_Finalize/ok/wire-id-device (0.00s) --- PASS: TestOrder_Finalize/ok/new-cert-dns-and-ip (0.00s) - --- PASS: TestOrder_Finalize/fail/invalid (0.00s) + --- PASS: TestOrder_Finalize/ok/already-valid (0.00s) + --- PASS: TestOrder_Finalize/fail/error-provisioner-auth (0.00s) + --- PASS: TestOrder_Finalize/fail/error-ca-sign (0.00s) + --- PASS: TestOrder_Finalize/fail/webhook-error (0.00s) + --- PASS: TestOrder_Finalize/fail/wire-id-org-missing (0.00s) + --- PASS: TestOrder_Finalize/ok/new-cert-dns (0.00s) + --- PASS: TestOrder_Finalize/ok/new-cert-ip (0.00s) --- PASS: TestOrder_Finalize/fail/pending (0.00s) - --- PASS: TestOrder_Finalize/fail/error-db.UpdateOrder (0.00s) - --- PASS: TestOrder_Finalize/fail/wire-id-display-name-missing (0.00s) - --- PASS: TestOrder_Finalize/ok/wire-id-user (0.00s) --- PASS: TestOrder_Finalize/fail/error-unexpected-status (0.00s) --- PASS: TestOrder_Finalize/fail/non-matching-permanent-identifier-common-name (0.00s) + --- PASS: TestOrder_Finalize/fail/wire-id-display-name-missing (0.00s) + --- PASS: TestOrder_Finalize/fail/wire-id-display-name-mismatch (0.00s) + --- PASS: TestOrder_Finalize/ok/wire-id-device (0.00s) --- PASS: TestOrder_Finalize/fail/error-template-options (0.00s) - --- PASS: TestOrder_Finalize/fail/error-ca-sign (0.00s) - --- PASS: TestOrder_Finalize/fail/webhook-error (0.00s) - --- PASS: TestOrder_Finalize/ok/permanent-identifier (0.00s) - --- PASS: TestOrder_Finalize/ok/permanent-identifier-only (0.00s) + --- PASS: TestOrder_Finalize/fail/error-db.UpdateOrder (0.00s) + --- PASS: TestOrder_Finalize/fail/csr-fingerprint (0.00s) --- PASS: TestOrder_Finalize/fail/csr-wire-id-csr-uri-missing (0.00s) --- PASS: TestOrder_Finalize/fail/other-than-wire-ids-present (0.00s) - --- PASS: TestOrder_Finalize/fail/wire-id-org-missing (0.00s) - --- PASS: TestOrder_Finalize/fail/wire-id-display-name-mismatch (0.00s) + --- PASS: TestOrder_Finalize/ok/wire-id-user (0.00s) + --- PASS: TestOrder_Finalize/fail/invalid (0.00s) === RUN Test_uniqueSortedIPs === RUN Test_uniqueSortedIPs/ok/empty === RUN Test_uniqueSortedIPs/ok/single-ipv4 @@ -2326,7 +2363,7 @@ === RUN Test_canonicalize/ok/mixed === RUN Test_canonicalize/ok/mixed-common-name === RUN Test_canonicalize/ok/ip-common-name ---- PASS: Test_canonicalize (0.00s) +--- PASS: Test_canonicalize (0.01s) --- PASS: Test_canonicalize/ok/dns (0.00s) --- PASS: Test_canonicalize/ok/common-name (0.00s) --- PASS: Test_canonicalize/ok/ipv4 (0.00s) @@ -2364,7 +2401,7 @@ --- PASS: TestOrder_getAuthorizationFingerprint/ok_fingerprint (0.00s) --- PASS: TestOrder_getAuthorizationFingerprint/fail (0.00s) PASS -ok github.com/smallstep/certificates/acme 11.583s +ok github.com/smallstep/certificates/acme 25.747s === RUN TestNewAccountRequest_Validate === RUN TestNewAccountRequest_Validate/fail/incompatible-input === RUN TestNewAccountRequest_Validate/fail/bad-contact @@ -2376,86 +2413,86 @@ --- PASS: TestNewAccountRequest_Validate/ok (0.00s) --- PASS: TestNewAccountRequest_Validate/ok/onlyReturnExisting (0.00s) === RUN TestUpdateAccountRequest_Validate +=== RUN TestUpdateAccountRequest_Validate/fail/bad-contact +=== RUN TestUpdateAccountRequest_Validate/fail/bad-status === RUN TestUpdateAccountRequest_Validate/ok/contact === RUN TestUpdateAccountRequest_Validate/ok/status === RUN TestUpdateAccountRequest_Validate/ok/accept-empty === RUN TestUpdateAccountRequest_Validate/fail/incompatible-input -=== RUN TestUpdateAccountRequest_Validate/fail/bad-contact -=== RUN TestUpdateAccountRequest_Validate/fail/bad-status --- PASS: TestUpdateAccountRequest_Validate (0.00s) + --- PASS: TestUpdateAccountRequest_Validate/fail/bad-contact (0.00s) + --- PASS: TestUpdateAccountRequest_Validate/fail/bad-status (0.00s) --- PASS: TestUpdateAccountRequest_Validate/ok/contact (0.00s) --- PASS: TestUpdateAccountRequest_Validate/ok/status (0.00s) --- PASS: TestUpdateAccountRequest_Validate/ok/accept-empty (0.00s) --- PASS: TestUpdateAccountRequest_Validate/fail/incompatible-input (0.00s) - --- PASS: TestUpdateAccountRequest_Validate/fail/bad-contact (0.00s) - --- PASS: TestUpdateAccountRequest_Validate/fail/bad-status (0.00s) === RUN TestHandler_GetOrdersByAccountID +=== RUN TestHandler_GetOrdersByAccountID/fail/db.GetOrdersByAccountID-error +=== RUN TestHandler_GetOrdersByAccountID/ok === RUN TestHandler_GetOrdersByAccountID/fail/no-account === RUN TestHandler_GetOrdersByAccountID/fail/nil-account === RUN TestHandler_GetOrdersByAccountID/fail/account-id-mismatch -=== RUN TestHandler_GetOrdersByAccountID/fail/db.GetOrdersByAccountID-error -=== RUN TestHandler_GetOrdersByAccountID/ok --- PASS: TestHandler_GetOrdersByAccountID (0.00s) + --- PASS: TestHandler_GetOrdersByAccountID/fail/db.GetOrdersByAccountID-error (0.00s) + --- PASS: TestHandler_GetOrdersByAccountID/ok (0.00s) --- PASS: TestHandler_GetOrdersByAccountID/fail/no-account (0.00s) --- PASS: TestHandler_GetOrdersByAccountID/fail/nil-account (0.00s) --- PASS: TestHandler_GetOrdersByAccountID/fail/account-id-mismatch (0.00s) - --- PASS: TestHandler_GetOrdersByAccountID/fail/db.GetOrdersByAccountID-error (0.00s) - --- PASS: TestHandler_GetOrdersByAccountID/ok (0.00s) === RUN TestHandler_NewAccount -=== RUN TestHandler_NewAccount/fail/malformed-payload-error -=== RUN TestHandler_NewAccount/fail/no-jwk -=== RUN TestHandler_NewAccount/fail/new-account-no-eab-provided -=== RUN TestHandler_NewAccount/fail/db.UpdateExternalAccountKey-error -=== RUN TestHandler_NewAccount/fail/nil-payload +=== RUN TestHandler_NewAccount/fail/acmeProvisionerFromContext === RUN TestHandler_NewAccount/fail/unmarshal-payload-error -=== RUN TestHandler_NewAccount/ok/new-account-no-eab-required -=== RUN TestHandler_NewAccount/ok/new-account-with-eab +=== RUN TestHandler_NewAccount/fail/db.UpdateExternalAccountKey-error +=== RUN TestHandler_NewAccount/fail/malformed-payload-error === RUN TestHandler_NewAccount/fail/no-existing-account -=== RUN TestHandler_NewAccount/fail/nil-jwk -=== RUN TestHandler_NewAccount/fail/acmeProvisionerFromContext -=== RUN TestHandler_NewAccount/fail/no-payload +=== RUN TestHandler_NewAccount/ok/new-account-with-eab === RUN TestHandler_NewAccount/fail/db.CreateAccount-error === RUN TestHandler_NewAccount/ok/new-account === RUN TestHandler_NewAccount/ok/return-existing +=== RUN TestHandler_NewAccount/ok/new-account-no-eab-required +=== RUN TestHandler_NewAccount/fail/no-payload +=== RUN TestHandler_NewAccount/fail/nil-payload +=== RUN TestHandler_NewAccount/fail/no-jwk +=== RUN TestHandler_NewAccount/fail/nil-jwk +=== RUN TestHandler_NewAccount/fail/new-account-no-eab-provided --- PASS: TestHandler_NewAccount (0.01s) - --- PASS: TestHandler_NewAccount/fail/malformed-payload-error (0.00s) - --- PASS: TestHandler_NewAccount/fail/no-jwk (0.00s) - --- PASS: TestHandler_NewAccount/fail/new-account-no-eab-provided (0.00s) - --- PASS: TestHandler_NewAccount/fail/db.UpdateExternalAccountKey-error (0.00s) - --- PASS: TestHandler_NewAccount/fail/nil-payload (0.00s) + --- PASS: TestHandler_NewAccount/fail/acmeProvisionerFromContext (0.00s) --- PASS: TestHandler_NewAccount/fail/unmarshal-payload-error (0.00s) - --- PASS: TestHandler_NewAccount/ok/new-account-no-eab-required (0.00s) - --- PASS: TestHandler_NewAccount/ok/new-account-with-eab (0.00s) + --- PASS: TestHandler_NewAccount/fail/db.UpdateExternalAccountKey-error (0.00s) + --- PASS: TestHandler_NewAccount/fail/malformed-payload-error (0.00s) --- PASS: TestHandler_NewAccount/fail/no-existing-account (0.00s) - --- PASS: TestHandler_NewAccount/fail/nil-jwk (0.00s) - --- PASS: TestHandler_NewAccount/fail/acmeProvisionerFromContext (0.00s) - --- PASS: TestHandler_NewAccount/fail/no-payload (0.00s) + --- PASS: TestHandler_NewAccount/ok/new-account-with-eab (0.00s) --- PASS: TestHandler_NewAccount/fail/db.CreateAccount-error (0.00s) --- PASS: TestHandler_NewAccount/ok/new-account (0.00s) --- PASS: TestHandler_NewAccount/ok/return-existing (0.00s) + --- PASS: TestHandler_NewAccount/ok/new-account-no-eab-required (0.00s) + --- PASS: TestHandler_NewAccount/fail/no-payload (0.00s) + --- PASS: TestHandler_NewAccount/fail/nil-payload (0.00s) + --- PASS: TestHandler_NewAccount/fail/no-jwk (0.00s) + --- PASS: TestHandler_NewAccount/fail/nil-jwk (0.00s) + --- PASS: TestHandler_NewAccount/fail/new-account-no-eab-provided (0.00s) === RUN TestHandler_GetOrUpdateAccount -=== RUN TestHandler_GetOrUpdateAccount/fail/no-account +=== RUN TestHandler_GetOrUpdateAccount/fail/nil-account === RUN TestHandler_GetOrUpdateAccount/fail/no-payload -=== RUN TestHandler_GetOrUpdateAccount/fail/nil-payload -=== RUN TestHandler_GetOrUpdateAccount/ok/update-empty +=== RUN TestHandler_GetOrUpdateAccount/fail/db.UpdateAccount-error +=== RUN TestHandler_GetOrUpdateAccount/ok/deactivate === RUN TestHandler_GetOrUpdateAccount/ok/update-contacts -=== RUN TestHandler_GetOrUpdateAccount/fail/nil-account +=== RUN TestHandler_GetOrUpdateAccount/fail/no-account +=== RUN TestHandler_GetOrUpdateAccount/fail/nil-payload === RUN TestHandler_GetOrUpdateAccount/fail/unmarshal-payload-error === RUN TestHandler_GetOrUpdateAccount/fail/malformed-payload-error -=== RUN TestHandler_GetOrUpdateAccount/fail/db.UpdateAccount-error -=== RUN TestHandler_GetOrUpdateAccount/ok/deactivate +=== RUN TestHandler_GetOrUpdateAccount/ok/update-empty === RUN TestHandler_GetOrUpdateAccount/ok/post-as-get --- PASS: TestHandler_GetOrUpdateAccount (0.00s) - --- PASS: TestHandler_GetOrUpdateAccount/fail/no-account (0.00s) + --- PASS: TestHandler_GetOrUpdateAccount/fail/nil-account (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/fail/no-payload (0.00s) - --- PASS: TestHandler_GetOrUpdateAccount/fail/nil-payload (0.00s) - --- PASS: TestHandler_GetOrUpdateAccount/ok/update-empty (0.00s) + --- PASS: TestHandler_GetOrUpdateAccount/fail/db.UpdateAccount-error (0.00s) + --- PASS: TestHandler_GetOrUpdateAccount/ok/deactivate (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/ok/update-contacts (0.00s) - --- PASS: TestHandler_GetOrUpdateAccount/fail/nil-account (0.00s) + --- PASS: TestHandler_GetOrUpdateAccount/fail/no-account (0.00s) + --- PASS: TestHandler_GetOrUpdateAccount/fail/nil-payload (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/fail/unmarshal-payload-error (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/fail/malformed-payload-error (0.00s) - --- PASS: TestHandler_GetOrUpdateAccount/fail/db.UpdateAccount-error (0.00s) - --- PASS: TestHandler_GetOrUpdateAccount/ok/deactivate (0.00s) + --- PASS: TestHandler_GetOrUpdateAccount/ok/update-empty (0.00s) --- PASS: TestHandler_GetOrUpdateAccount/ok/post-as-get (0.00s) === RUN Test_keysAreEqual === RUN Test_keysAreEqual/ok/nil @@ -2468,62 +2505,62 @@ --- PASS: Test_keysAreEqual/ok/not-equal (0.00s) --- PASS: Test_keysAreEqual/ok/wrong-key-type (0.00s) === RUN TestHandler_validateExternalAccountBinding +=== RUN TestHandler_validateExternalAccountBinding/ok/eab === RUN TestHandler_validateExternalAccountBinding/fail/acmeProvisionerFromContext -=== RUN TestHandler_validateExternalAccountBinding/fail/retrieve-eab-key-db-failure === RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-not-found -=== RUN TestHandler_validateExternalAccountBinding/fail/eab-non-matching-keys -=== RUN TestHandler_validateExternalAccountBinding/fail/nil-jwk -=== RUN TestHandler_validateExternalAccountBinding/ok/no-eab-required-but-provided -=== RUN TestHandler_validateExternalAccountBinding/ok/eab +=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-no-keybytes +=== RUN TestHandler_validateExternalAccountBinding/fail/eab-verify +=== RUN TestHandler_validateExternalAccountBinding/fail/validate-eab-jws-no-signatures +=== RUN TestHandler_validateExternalAccountBinding/fail/retrieve-eab-key-db-failure === RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-error === RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-wrong-provisioner +=== RUN TestHandler_validateExternalAccountBinding/fail/no-jwk +=== RUN TestHandler_validateExternalAccountBinding/ok/no-eab-required-but-provided +=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-nil === RUN TestHandler_validateExternalAccountBinding/fail/eab-already-bound -=== RUN TestHandler_validateExternalAccountBinding/fail/eab-verify +=== RUN TestHandler_validateExternalAccountBinding/fail/eab-non-matching-keys +=== RUN TestHandler_validateExternalAccountBinding/fail/nil-jwk === RUN TestHandler_validateExternalAccountBinding/fail/parse-eab-jose -=== RUN TestHandler_validateExternalAccountBinding/fail/validate-eab-jws-no-signatures -=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-nil -=== RUN TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-no-keybytes -=== RUN TestHandler_validateExternalAccountBinding/fail/no-jwk ---- PASS: TestHandler_validateExternalAccountBinding (0.02s) +--- PASS: TestHandler_validateExternalAccountBinding (0.03s) + --- PASS: TestHandler_validateExternalAccountBinding/ok/eab (0.00s) --- PASS: TestHandler_validateExternalAccountBinding/fail/acmeProvisionerFromContext (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/retrieve-eab-key-db-failure (0.00s) --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-not-found (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/eab-non-matching-keys (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/nil-jwk (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/ok/no-eab-required-but-provided (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/ok/eab (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-error (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-wrong-provisioner (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/eab-already-bound (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-no-keybytes (0.00s) --- PASS: TestHandler_validateExternalAccountBinding/fail/eab-verify (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/parse-eab-jose (0.00s) --- PASS: TestHandler_validateExternalAccountBinding/fail/validate-eab-jws-no-signatures (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-nil (0.00s) - --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-no-keybytes (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/retrieve-eab-key-db-failure (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-error (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-wrong-provisioner (0.01s) --- PASS: TestHandler_validateExternalAccountBinding/fail/no-jwk (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/ok/no-eab-required-but-provided (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/db.GetExternalAccountKey-nil (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/eab-already-bound (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/eab-non-matching-keys (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/nil-jwk (0.00s) + --- PASS: TestHandler_validateExternalAccountBinding/fail/parse-eab-jose (0.00s) === RUN Test_validateEABJWS -=== RUN Test_validateEABJWS/fail/invalid-algorithm -=== RUN Test_validateEABJWS/fail/kid-not-set === RUN Test_validateEABJWS/fail/url-not-set === RUN Test_validateEABJWS/fail/no-outer-jws === RUN Test_validateEABJWS/fail/outer-jws-multiple-signatures === RUN Test_validateEABJWS/fail/outer-jws-no-url === RUN Test_validateEABJWS/fail/outer-jws-with-different-url === RUN Test_validateEABJWS/ok -=== RUN Test_validateEABJWS/fail/nil-jws === RUN Test_validateEABJWS/fail/invalid-number-of-signatures +=== RUN Test_validateEABJWS/fail/invalid-algorithm +=== RUN Test_validateEABJWS/fail/kid-not-set +=== RUN Test_validateEABJWS/fail/nil-jws === RUN Test_validateEABJWS/fail/nonce-not-empty ---- PASS: Test_validateEABJWS (0.01s) - --- PASS: Test_validateEABJWS/fail/invalid-algorithm (0.00s) - --- PASS: Test_validateEABJWS/fail/kid-not-set (0.00s) +--- PASS: Test_validateEABJWS (0.00s) --- PASS: Test_validateEABJWS/fail/url-not-set (0.00s) --- PASS: Test_validateEABJWS/fail/no-outer-jws (0.00s) --- PASS: Test_validateEABJWS/fail/outer-jws-multiple-signatures (0.00s) --- PASS: Test_validateEABJWS/fail/outer-jws-no-url (0.00s) --- PASS: Test_validateEABJWS/fail/outer-jws-with-different-url (0.00s) --- PASS: Test_validateEABJWS/ok (0.00s) - --- PASS: Test_validateEABJWS/fail/nil-jws (0.00s) --- PASS: Test_validateEABJWS/fail/invalid-number-of-signatures (0.00s) + --- PASS: Test_validateEABJWS/fail/invalid-algorithm (0.00s) + --- PASS: Test_validateEABJWS/fail/kid-not-set (0.00s) + --- PASS: Test_validateEABJWS/fail/nil-jws (0.00s) --- PASS: Test_validateEABJWS/fail/nonce-not-empty (0.00s) === RUN TestHandler_GetNonce === RUN TestHandler_GetNonce/GET @@ -2532,31 +2569,31 @@ --- PASS: TestHandler_GetNonce/GET (0.00s) --- PASS: TestHandler_GetNonce/HEAD (0.00s) === RUN TestHandler_GetDirectory +=== RUN TestHandler_GetDirectory/fail/no-provisioner === RUN TestHandler_GetDirectory/fail/different-provisioner === RUN TestHandler_GetDirectory/ok === RUN TestHandler_GetDirectory/ok/eab-required === RUN TestHandler_GetDirectory/ok/full-meta -=== RUN TestHandler_GetDirectory/fail/no-provisioner ---- PASS: TestHandler_GetDirectory (0.00s) +--- PASS: TestHandler_GetDirectory (0.01s) + --- PASS: TestHandler_GetDirectory/fail/no-provisioner (0.00s) --- PASS: TestHandler_GetDirectory/fail/different-provisioner (0.00s) --- PASS: TestHandler_GetDirectory/ok (0.00s) --- PASS: TestHandler_GetDirectory/ok/eab-required (0.00s) --- PASS: TestHandler_GetDirectory/ok/full-meta (0.00s) - --- PASS: TestHandler_GetDirectory/fail/no-provisioner (0.00s) === RUN TestHandler_GetAuthorization -=== RUN TestHandler_GetAuthorization/fail/account-id-mismatch -=== RUN TestHandler_GetAuthorization/fail/db.UpdateAuthorization-error -=== RUN TestHandler_GetAuthorization/ok === RUN TestHandler_GetAuthorization/fail/no-account === RUN TestHandler_GetAuthorization/fail/nil-account === RUN TestHandler_GetAuthorization/fail/db.GetAuthorization-error ---- PASS: TestHandler_GetAuthorization (0.00s) - --- PASS: TestHandler_GetAuthorization/fail/account-id-mismatch (0.00s) - --- PASS: TestHandler_GetAuthorization/fail/db.UpdateAuthorization-error (0.00s) - --- PASS: TestHandler_GetAuthorization/ok (0.00s) +=== RUN TestHandler_GetAuthorization/fail/account-id-mismatch +=== RUN TestHandler_GetAuthorization/fail/db.UpdateAuthorization-error +=== RUN TestHandler_GetAuthorization/ok +--- PASS: TestHandler_GetAuthorization (0.01s) --- PASS: TestHandler_GetAuthorization/fail/no-account (0.00s) --- PASS: TestHandler_GetAuthorization/fail/nil-account (0.00s) --- PASS: TestHandler_GetAuthorization/fail/db.GetAuthorization-error (0.00s) + --- PASS: TestHandler_GetAuthorization/fail/account-id-mismatch (0.00s) + --- PASS: TestHandler_GetAuthorization/fail/db.UpdateAuthorization-error (0.00s) + --- PASS: TestHandler_GetAuthorization/ok (0.01s) === RUN TestHandler_GetCertificate === RUN TestHandler_GetCertificate/fail/no-account === RUN TestHandler_GetCertificate/fail/nil-account @@ -2570,27 +2607,27 @@ --- PASS: TestHandler_GetCertificate/fail/account-id-mismatch (0.00s) --- PASS: TestHandler_GetCertificate/ok (0.00s) === RUN TestHandler_GetChallenge -=== RUN TestHandler_GetChallenge/fail/nil-payload -=== RUN TestHandler_GetChallenge/fail/account-id-mismatch -=== RUN TestHandler_GetChallenge/fail/validate-challenge-error -=== RUN TestHandler_GetChallenge/ok -=== RUN TestHandler_GetChallenge/fail/db.GetChallenge-error -=== RUN TestHandler_GetChallenge/fail/no-jwk === RUN TestHandler_GetChallenge/fail/nil-jwk +=== RUN TestHandler_GetChallenge/fail/validate-challenge-error === RUN TestHandler_GetChallenge/fail/no-account === RUN TestHandler_GetChallenge/fail/nil-account === RUN TestHandler_GetChallenge/fail/no-payload +=== RUN TestHandler_GetChallenge/fail/nil-payload +=== RUN TestHandler_GetChallenge/fail/db.GetChallenge-error +=== RUN TestHandler_GetChallenge/fail/account-id-mismatch +=== RUN TestHandler_GetChallenge/ok +=== RUN TestHandler_GetChallenge/fail/no-jwk --- PASS: TestHandler_GetChallenge (0.00s) - --- PASS: TestHandler_GetChallenge/fail/nil-payload (0.00s) - --- PASS: TestHandler_GetChallenge/fail/account-id-mismatch (0.00s) - --- PASS: TestHandler_GetChallenge/fail/validate-challenge-error (0.00s) - --- PASS: TestHandler_GetChallenge/ok (0.00s) - --- PASS: TestHandler_GetChallenge/fail/db.GetChallenge-error (0.00s) - --- PASS: TestHandler_GetChallenge/fail/no-jwk (0.00s) --- PASS: TestHandler_GetChallenge/fail/nil-jwk (0.00s) + --- PASS: TestHandler_GetChallenge/fail/validate-challenge-error (0.00s) --- PASS: TestHandler_GetChallenge/fail/no-account (0.00s) --- PASS: TestHandler_GetChallenge/fail/nil-account (0.00s) --- PASS: TestHandler_GetChallenge/fail/no-payload (0.00s) + --- PASS: TestHandler_GetChallenge/fail/nil-payload (0.00s) + --- PASS: TestHandler_GetChallenge/fail/db.GetChallenge-error (0.00s) + --- PASS: TestHandler_GetChallenge/fail/account-id-mismatch (0.00s) + --- PASS: TestHandler_GetChallenge/ok (0.00s) + --- PASS: TestHandler_GetChallenge/fail/no-jwk (0.00s) === RUN Test_createMetaObject === RUN Test_createMetaObject/no-meta === RUN Test_createMetaObject/terms-of-service @@ -2598,7 +2635,7 @@ === RUN Test_createMetaObject/caa === RUN Test_createMetaObject/require-eab === RUN Test_createMetaObject/full-meta ---- PASS: Test_createMetaObject (0.01s) +--- PASS: Test_createMetaObject (0.00s) --- PASS: Test_createMetaObject/no-meta (0.00s) --- PASS: Test_createMetaObject/terms-of-service (0.00s) --- PASS: Test_createMetaObject/website (0.00s) @@ -2616,21 +2653,21 @@ --- PASS: TestHandler_addDirLink (0.00s) --- PASS: TestHandler_addDirLink/ok (0.00s) === RUN TestHandler_verifyContentType +=== RUN TestHandler_verifyContentType/ok +=== RUN TestHandler_verifyContentType/ok/certificate/pkix-cert === RUN TestHandler_verifyContentType/ok/certificate/jose+json === RUN TestHandler_verifyContentType/ok/certificate/pkcs7-mime === RUN TestHandler_verifyContentType/fail/provisioner-not-set === RUN TestHandler_verifyContentType/fail/general-bad-content-type === RUN TestHandler_verifyContentType/fail/certificate-bad-content-type -=== RUN TestHandler_verifyContentType/ok -=== RUN TestHandler_verifyContentType/ok/certificate/pkix-cert ---- PASS: TestHandler_verifyContentType (0.01s) +--- PASS: TestHandler_verifyContentType (0.00s) + --- PASS: TestHandler_verifyContentType/ok (0.00s) + --- PASS: TestHandler_verifyContentType/ok/certificate/pkix-cert (0.00s) --- PASS: TestHandler_verifyContentType/ok/certificate/jose+json (0.00s) --- PASS: TestHandler_verifyContentType/ok/certificate/pkcs7-mime (0.00s) --- PASS: TestHandler_verifyContentType/fail/provisioner-not-set (0.00s) --- PASS: TestHandler_verifyContentType/fail/general-bad-content-type (0.00s) --- PASS: TestHandler_verifyContentType/fail/certificate-bad-content-type (0.00s) - --- PASS: TestHandler_verifyContentType/ok (0.00s) - --- PASS: TestHandler_verifyContentType/ok/certificate/pkix-cert (0.00s) === RUN TestHandler_isPostAsGet === RUN TestHandler_isPostAsGet/fail/no-payload === RUN TestHandler_isPostAsGet/fail/nil-payload @@ -2642,121 +2679,121 @@ --- PASS: TestHandler_isPostAsGet/fail/not-post-as-get (0.00s) --- PASS: TestHandler_isPostAsGet/ok (0.00s) === RUN TestHandler_parseJWS -=== RUN TestHandler_parseJWS/fail/read-body-error === RUN TestHandler_parseJWS/fail/parse-jws-error === RUN TestHandler_parseJWS/ok ---- PASS: TestHandler_parseJWS (0.00s) - --- PASS: TestHandler_parseJWS/fail/read-body-error (0.00s) +=== RUN TestHandler_parseJWS/fail/read-body-error +--- PASS: TestHandler_parseJWS (0.01s) --- PASS: TestHandler_parseJWS/fail/parse-jws-error (0.00s) --- PASS: TestHandler_parseJWS/ok (0.00s) + --- PASS: TestHandler_parseJWS/fail/read-body-error (0.00s) === RUN TestHandler_verifyAndExtractJWSPayload +=== RUN TestHandler_verifyAndExtractJWSPayload/ok === RUN TestHandler_verifyAndExtractJWSPayload/ok/post-as-get -=== RUN TestHandler_verifyAndExtractJWSPayload/fail/no-jws +=== RUN TestHandler_verifyAndExtractJWSPayload/ok/apple-acmeclient-omitting-leading-null-byte-in-signature +=== RUN TestHandler_verifyAndExtractJWSPayload/fail/nil-jws === RUN TestHandler_verifyAndExtractJWSPayload/fail/no-jwk === RUN TestHandler_verifyAndExtractJWSPayload/fail/verify-jws-failure-wrong-jwk -=== RUN TestHandler_verifyAndExtractJWSPayload/fail/algorithm-mismatch +=== RUN TestHandler_verifyAndExtractJWSPayload/fail/apple-acmeclient-omitting-leading-null-byte-in-signature-with-wrong-jwk +=== RUN TestHandler_verifyAndExtractJWSPayload/ok/empty-algorithm-in-jwk === RUN TestHandler_verifyAndExtractJWSPayload/ok/empty-json -=== RUN TestHandler_verifyAndExtractJWSPayload/ok/apple-acmeclient-omitting-leading-null-byte-in-signature -=== RUN TestHandler_verifyAndExtractJWSPayload/fail/nil-jws +=== RUN TestHandler_verifyAndExtractJWSPayload/fail/no-jws === RUN TestHandler_verifyAndExtractJWSPayload/fail/nil-jwk === RUN TestHandler_verifyAndExtractJWSPayload/fail/verify-jws-failure-too-many-signatures -=== RUN TestHandler_verifyAndExtractJWSPayload/fail/apple-acmeclient-omitting-leading-null-byte-in-signature-with-wrong-jwk -=== RUN TestHandler_verifyAndExtractJWSPayload/ok -=== RUN TestHandler_verifyAndExtractJWSPayload/ok/empty-algorithm-in-jwk +=== RUN TestHandler_verifyAndExtractJWSPayload/fail/algorithm-mismatch --- PASS: TestHandler_verifyAndExtractJWSPayload (0.01s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/ok (0.00s) --- PASS: TestHandler_verifyAndExtractJWSPayload/ok/post-as-get (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/no-jws (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/ok/apple-acmeclient-omitting-leading-null-byte-in-signature (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/nil-jws (0.00s) --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/no-jwk (0.00s) --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/verify-jws-failure-wrong-jwk (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/algorithm-mismatch (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/apple-acmeclient-omitting-leading-null-byte-in-signature-with-wrong-jwk (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/ok/empty-algorithm-in-jwk (0.00s) --- PASS: TestHandler_verifyAndExtractJWSPayload/ok/empty-json (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/ok/apple-acmeclient-omitting-leading-null-byte-in-signature (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/nil-jws (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/no-jws (0.00s) --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/nil-jwk (0.00s) --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/verify-jws-failure-too-many-signatures (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/apple-acmeclient-omitting-leading-null-byte-in-signature-with-wrong-jwk (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/ok (0.00s) - --- PASS: TestHandler_verifyAndExtractJWSPayload/ok/empty-algorithm-in-jwk (0.00s) + --- PASS: TestHandler_verifyAndExtractJWSPayload/fail/algorithm-mismatch (0.00s) === RUN TestHandler_lookupJWK -=== RUN TestHandler_lookupJWK/fail/account-with-location-prefix/bad-provisioner -=== RUN TestHandler_lookupJWK/fail/account-with-location-prefix/bad-provisioner-id -=== RUN TestHandler_lookupJWK/ok/account-with-provisioner-id -=== RUN TestHandler_lookupJWK/fail/nil-jws -=== RUN TestHandler_lookupJWK/fail/GetAccount-error === RUN TestHandler_lookupJWK/fail/account-with-location-prefix/bad-kid === RUN TestHandler_lookupJWK/ok/account-with-location-prefix +=== RUN TestHandler_lookupJWK/fail/nil-jws +=== RUN TestHandler_lookupJWK/fail/account-not-found +=== RUN TestHandler_lookupJWK/fail/account-not-valid +=== RUN TestHandler_lookupJWK/fail/account-with-location-prefix/bad-provisioner +=== RUN TestHandler_lookupJWK/fail/account-with-location-prefix/bad-provisioner-id === RUN TestHandler_lookupJWK/ok/account-without-location-prefix +=== RUN TestHandler_lookupJWK/ok/account-with-provisioner-id === RUN TestHandler_lookupJWK/fail/no-jws === RUN TestHandler_lookupJWK/fail/no-kid -=== RUN TestHandler_lookupJWK/fail/account-not-found -=== RUN TestHandler_lookupJWK/fail/account-not-valid ---- PASS: TestHandler_lookupJWK (0.00s) - --- PASS: TestHandler_lookupJWK/fail/account-with-location-prefix/bad-provisioner (0.00s) - --- PASS: TestHandler_lookupJWK/fail/account-with-location-prefix/bad-provisioner-id (0.00s) - --- PASS: TestHandler_lookupJWK/ok/account-with-provisioner-id (0.00s) - --- PASS: TestHandler_lookupJWK/fail/nil-jws (0.00s) - --- PASS: TestHandler_lookupJWK/fail/GetAccount-error (0.00s) +=== RUN TestHandler_lookupJWK/fail/GetAccount-error +--- PASS: TestHandler_lookupJWK (0.01s) --- PASS: TestHandler_lookupJWK/fail/account-with-location-prefix/bad-kid (0.00s) --- PASS: TestHandler_lookupJWK/ok/account-with-location-prefix (0.00s) + --- PASS: TestHandler_lookupJWK/fail/nil-jws (0.00s) + --- PASS: TestHandler_lookupJWK/fail/account-not-found (0.00s) + --- PASS: TestHandler_lookupJWK/fail/account-not-valid (0.00s) + --- PASS: TestHandler_lookupJWK/fail/account-with-location-prefix/bad-provisioner (0.00s) + --- PASS: TestHandler_lookupJWK/fail/account-with-location-prefix/bad-provisioner-id (0.00s) --- PASS: TestHandler_lookupJWK/ok/account-without-location-prefix (0.00s) + --- PASS: TestHandler_lookupJWK/ok/account-with-provisioner-id (0.00s) --- PASS: TestHandler_lookupJWK/fail/no-jws (0.00s) --- PASS: TestHandler_lookupJWK/fail/no-kid (0.00s) - --- PASS: TestHandler_lookupJWK/fail/account-not-found (0.00s) - --- PASS: TestHandler_lookupJWK/fail/account-not-valid (0.00s) + --- PASS: TestHandler_lookupJWK/fail/GetAccount-error (0.00s) === RUN TestHandler_extractJWK -=== RUN TestHandler_extractJWK/fail/account-not-valid -=== RUN TestHandler_extractJWK/ok === RUN TestHandler_extractJWK/ok/no-account === RUN TestHandler_extractJWK/fail/no-jws === RUN TestHandler_extractJWK/fail/nil-jws === RUN TestHandler_extractJWK/fail/nil-jwk === RUN TestHandler_extractJWK/fail/invalid-jwk === RUN TestHandler_extractJWK/fail/GetAccountByKey-error +=== RUN TestHandler_extractJWK/fail/account-not-valid +=== RUN TestHandler_extractJWK/ok --- PASS: TestHandler_extractJWK (0.00s) - --- PASS: TestHandler_extractJWK/fail/account-not-valid (0.00s) - --- PASS: TestHandler_extractJWK/ok (0.00s) --- PASS: TestHandler_extractJWK/ok/no-account (0.00s) --- PASS: TestHandler_extractJWK/fail/no-jws (0.00s) --- PASS: TestHandler_extractJWK/fail/nil-jws (0.00s) --- PASS: TestHandler_extractJWK/fail/nil-jwk (0.00s) --- PASS: TestHandler_extractJWK/fail/invalid-jwk (0.00s) --- PASS: TestHandler_extractJWK/fail/GetAccountByKey-error (0.00s) + --- PASS: TestHandler_extractJWK/fail/account-not-valid (0.00s) + --- PASS: TestHandler_extractJWK/ok (0.00s) === RUN TestHandler_validateJWS -=== RUN TestHandler_validateJWS/ok/jwk/ecdsa -=== RUN TestHandler_validateJWS/fail/unsuitable-algorithm-none +=== RUN TestHandler_validateJWS/fail/nil-jws +=== RUN TestHandler_validateJWS/fail/unprotected-header-not-empty +=== RUN TestHandler_validateJWS/fail/unsuitable-algorithm-mac +=== RUN TestHandler_validateJWS/fail/rsa-key-&-alg-mismatch +=== RUN TestHandler_validateJWS/ok/jwk/rsa +=== RUN TestHandler_validateJWS/fail/no-signature === RUN TestHandler_validateJWS/fail/UseNonce-error -=== RUN TestHandler_validateJWS/ok/kid +=== RUN TestHandler_validateJWS/fail/url-mismatch === RUN TestHandler_validateJWS/fail/both-jwk-kid -=== RUN TestHandler_validateJWS/fail/no-jwk-kid -=== RUN TestHandler_validateJWS/ok/jwk/rsa +=== RUN TestHandler_validateJWS/ok/jwk/ecdsa === RUN TestHandler_validateJWS/fail/no-jws -=== RUN TestHandler_validateJWS/fail/nil-jws +=== RUN TestHandler_validateJWS/fail/unsuitable-algorithm-none +=== RUN TestHandler_validateJWS/fail/no-url-header +=== RUN TestHandler_validateJWS/fail/no-jwk-kid +=== RUN TestHandler_validateJWS/ok/kid === RUN TestHandler_validateJWS/fail/more-than-one-signature -=== RUN TestHandler_validateJWS/fail/unsuitable-algorithm-mac -=== RUN TestHandler_validateJWS/fail/rsa-key-&-alg-mismatch === RUN TestHandler_validateJWS/fail/rsa-key-too-small -=== RUN TestHandler_validateJWS/fail/no-url-header -=== RUN TestHandler_validateJWS/fail/url-mismatch -=== RUN TestHandler_validateJWS/fail/no-signature -=== RUN TestHandler_validateJWS/fail/unprotected-header-not-empty ---- PASS: TestHandler_validateJWS (0.82s) - --- PASS: TestHandler_validateJWS/ok/jwk/ecdsa (0.00s) - --- PASS: TestHandler_validateJWS/fail/unsuitable-algorithm-none (0.00s) +--- PASS: TestHandler_validateJWS (0.49s) + --- PASS: TestHandler_validateJWS/fail/nil-jws (0.00s) + --- PASS: TestHandler_validateJWS/fail/unprotected-header-not-empty (0.00s) + --- PASS: TestHandler_validateJWS/fail/unsuitable-algorithm-mac (0.00s) + --- PASS: TestHandler_validateJWS/fail/rsa-key-&-alg-mismatch (0.00s) + --- PASS: TestHandler_validateJWS/ok/jwk/rsa (0.00s) + --- PASS: TestHandler_validateJWS/fail/no-signature (0.00s) --- PASS: TestHandler_validateJWS/fail/UseNonce-error (0.00s) - --- PASS: TestHandler_validateJWS/ok/kid (0.00s) + --- PASS: TestHandler_validateJWS/fail/url-mismatch (0.00s) --- PASS: TestHandler_validateJWS/fail/both-jwk-kid (0.00s) - --- PASS: TestHandler_validateJWS/fail/no-jwk-kid (0.00s) - --- PASS: TestHandler_validateJWS/ok/jwk/rsa (0.00s) + --- PASS: TestHandler_validateJWS/ok/jwk/ecdsa (0.00s) --- PASS: TestHandler_validateJWS/fail/no-jws (0.00s) - --- PASS: TestHandler_validateJWS/fail/nil-jws (0.00s) + --- PASS: TestHandler_validateJWS/fail/unsuitable-algorithm-none (0.00s) + --- PASS: TestHandler_validateJWS/fail/no-url-header (0.00s) + --- PASS: TestHandler_validateJWS/fail/no-jwk-kid (0.00s) + --- PASS: TestHandler_validateJWS/ok/kid (0.00s) --- PASS: TestHandler_validateJWS/fail/more-than-one-signature (0.00s) - --- PASS: TestHandler_validateJWS/fail/unsuitable-algorithm-mac (0.00s) - --- PASS: TestHandler_validateJWS/fail/rsa-key-&-alg-mismatch (0.00s) --- PASS: TestHandler_validateJWS/fail/rsa-key-too-small (0.00s) - --- PASS: TestHandler_validateJWS/fail/no-url-header (0.00s) - --- PASS: TestHandler_validateJWS/fail/url-mismatch (0.00s) - --- PASS: TestHandler_validateJWS/fail/no-signature (0.00s) - --- PASS: TestHandler_validateJWS/fail/unprotected-header-not-empty (0.00s) === RUN Test_canExtractJWKFrom === RUN Test_canExtractJWKFrom/no-jws === RUN Test_canExtractJWKFrom/no-signatures @@ -2792,169 +2829,169 @@ --- PASS: Test_retryVerificationWithPatchedSignatures/ok/patched-rs (0.00s) --- PASS: Test_retryVerificationWithPatchedSignatures/fail/patched-r-wrong-jwk (0.00s) === RUN TestNewOrderRequest_Validate -=== RUN TestNewOrderRequest_Validate/ok/wireapp +=== RUN TestNewOrderRequest_Validate/ok +=== RUN TestNewOrderRequest_Validate/ok/mixed-dns-and-ipv4 +=== RUN TestNewOrderRequest_Validate/fail/no-identifiers === RUN TestNewOrderRequest_Validate/fail/bad-identifier/ip -=== RUN TestNewOrderRequest_Validate/ok/ipv4 === RUN TestNewOrderRequest_Validate/ok/mixed-ipv4-and-ipv6 -=== RUN TestNewOrderRequest_Validate/fail/no-identifiers -=== RUN TestNewOrderRequest_Validate/fail/bad-identifier +=== RUN TestNewOrderRequest_Validate/ok/wireapp === RUN TestNewOrderRequest_Validate/fail/bad-identifier/dns-port -=== RUN TestNewOrderRequest_Validate/fail/bad-identifier/dns-wildcard-port -=== RUN TestNewOrderRequest_Validate/ok +=== RUN TestNewOrderRequest_Validate/ok/ipv4 === RUN TestNewOrderRequest_Validate/ok/ipv6 === RUN TestNewOrderRequest_Validate/fail/bad-identifier/bad-dns +=== RUN TestNewOrderRequest_Validate/fail/bad-identifier/dns-wildcard-port +=== RUN TestNewOrderRequest_Validate/fail/bad-identifier === RUN TestNewOrderRequest_Validate/fail/bad-identifier/wireapp-invalid-uri === RUN TestNewOrderRequest_Validate/fail/bad-identifier/wireapp-wrong-scheme === RUN TestNewOrderRequest_Validate/fail/bad-identifier/wireapp-invalid-user-parts -=== RUN TestNewOrderRequest_Validate/ok/mixed-dns-and-ipv4 --- PASS: TestNewOrderRequest_Validate (0.00s) - --- PASS: TestNewOrderRequest_Validate/ok/wireapp (0.00s) + --- PASS: TestNewOrderRequest_Validate/ok (0.00s) + --- PASS: TestNewOrderRequest_Validate/ok/mixed-dns-and-ipv4 (0.00s) + --- PASS: TestNewOrderRequest_Validate/fail/no-identifiers (0.00s) --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/ip (0.00s) - --- PASS: TestNewOrderRequest_Validate/ok/ipv4 (0.00s) --- PASS: TestNewOrderRequest_Validate/ok/mixed-ipv4-and-ipv6 (0.00s) - --- PASS: TestNewOrderRequest_Validate/fail/no-identifiers (0.00s) - --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier (0.00s) + --- PASS: TestNewOrderRequest_Validate/ok/wireapp (0.00s) --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/dns-port (0.00s) - --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/dns-wildcard-port (0.00s) - --- PASS: TestNewOrderRequest_Validate/ok (0.00s) + --- PASS: TestNewOrderRequest_Validate/ok/ipv4 (0.00s) --- PASS: TestNewOrderRequest_Validate/ok/ipv6 (0.00s) --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/bad-dns (0.00s) + --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/dns-wildcard-port (0.00s) + --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier (0.00s) --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/wireapp-invalid-uri (0.00s) --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/wireapp-wrong-scheme (0.00s) --- PASS: TestNewOrderRequest_Validate/fail/bad-identifier/wireapp-invalid-user-parts (0.00s) - --- PASS: TestNewOrderRequest_Validate/ok/mixed-dns-and-ipv4 (0.00s) === RUN TestFinalizeRequestValidate +=== RUN TestFinalizeRequestValidate/ok/padding === RUN TestFinalizeRequestValidate/fail/parse-csr-error === RUN TestFinalizeRequestValidate/fail/invalid-csr-signature === RUN TestFinalizeRequestValidate/ok -=== RUN TestFinalizeRequestValidate/ok/padding ---- PASS: TestFinalizeRequestValidate (0.01s) +--- PASS: TestFinalizeRequestValidate (0.00s) + --- PASS: TestFinalizeRequestValidate/ok/padding (0.00s) --- PASS: TestFinalizeRequestValidate/fail/parse-csr-error (0.00s) --- PASS: TestFinalizeRequestValidate/fail/invalid-csr-signature (0.00s) --- PASS: TestFinalizeRequestValidate/ok (0.00s) - --- PASS: TestFinalizeRequestValidate/ok/padding (0.00s) === RUN TestHandler_GetOrder +=== RUN TestHandler_GetOrder/fail/no-provisioner +=== RUN TestHandler_GetOrder/fail/nil-provisioner === RUN TestHandler_GetOrder/fail/account-id-mismatch +=== RUN TestHandler_GetOrder/fail/provisioner-id-mismatch +=== RUN TestHandler_GetOrder/fail/order-update-error === RUN TestHandler_GetOrder/fail/no-account === RUN TestHandler_GetOrder/fail/nil-account === RUN TestHandler_GetOrder/fail/db.GetOrder-error -=== RUN TestHandler_GetOrder/fail/provisioner-id-mismatch -=== RUN TestHandler_GetOrder/fail/order-update-error === RUN TestHandler_GetOrder/ok -=== RUN TestHandler_GetOrder/fail/no-provisioner -=== RUN TestHandler_GetOrder/fail/nil-provisioner --- PASS: TestHandler_GetOrder (0.00s) + --- PASS: TestHandler_GetOrder/fail/no-provisioner (0.00s) + --- PASS: TestHandler_GetOrder/fail/nil-provisioner (0.00s) --- PASS: TestHandler_GetOrder/fail/account-id-mismatch (0.00s) + --- PASS: TestHandler_GetOrder/fail/provisioner-id-mismatch (0.00s) + --- PASS: TestHandler_GetOrder/fail/order-update-error (0.00s) --- PASS: TestHandler_GetOrder/fail/no-account (0.00s) --- PASS: TestHandler_GetOrder/fail/nil-account (0.00s) --- PASS: TestHandler_GetOrder/fail/db.GetOrder-error (0.00s) - --- PASS: TestHandler_GetOrder/fail/provisioner-id-mismatch (0.00s) - --- PASS: TestHandler_GetOrder/fail/order-update-error (0.00s) --- PASS: TestHandler_GetOrder/ok (0.00s) - --- PASS: TestHandler_GetOrder/fail/no-provisioner (0.00s) - --- PASS: TestHandler_GetOrder/fail/nil-provisioner (0.00s) === RUN TestHandler_newAuthorization -=== RUN TestHandler_newAuthorization/fail/wireapp-device-parse-id -=== RUN TestHandler_newAuthorization/fail/wireapp-device-parse-client-id -=== RUN TestHandler_newAuthorization/ok/no-wildcard +=== RUN TestHandler_newAuthorization/ok/permanent-identifier-disabled === RUN TestHandler_newAuthorization/ok/wildcard === RUN TestHandler_newAuthorization/ok/permanent-identifier-enabled === RUN TestHandler_newAuthorization/ok/wireapp-user -=== RUN TestHandler_newAuthorization/fail/error-db.CreateAuthorization -=== RUN TestHandler_newAuthorization/fail/wireapp-device-options -=== RUN TestHandler_newAuthorization/ok/permanent-identifier-disabled === RUN TestHandler_newAuthorization/ok/wireapp-device === RUN TestHandler_newAuthorization/fail/error-db.CreateChallenge +=== RUN TestHandler_newAuthorization/fail/error-db.CreateAuthorization === RUN TestHandler_newAuthorization/fail/wireapp-user-options +=== RUN TestHandler_newAuthorization/fail/wireapp-device-parse-id +=== RUN TestHandler_newAuthorization/fail/wireapp-device-parse-client-id +=== RUN TestHandler_newAuthorization/fail/wireapp-device-options +=== RUN TestHandler_newAuthorization/ok/no-wildcard --- PASS: TestHandler_newAuthorization (0.00s) - --- PASS: TestHandler_newAuthorization/fail/wireapp-device-parse-id (0.00s) - --- PASS: TestHandler_newAuthorization/fail/wireapp-device-parse-client-id (0.00s) - --- PASS: TestHandler_newAuthorization/ok/no-wildcard (0.00s) + --- PASS: TestHandler_newAuthorization/ok/permanent-identifier-disabled (0.00s) --- PASS: TestHandler_newAuthorization/ok/wildcard (0.00s) --- PASS: TestHandler_newAuthorization/ok/permanent-identifier-enabled (0.00s) --- PASS: TestHandler_newAuthorization/ok/wireapp-user (0.00s) - --- PASS: TestHandler_newAuthorization/fail/error-db.CreateAuthorization (0.00s) - --- PASS: TestHandler_newAuthorization/fail/wireapp-device-options (0.00s) - --- PASS: TestHandler_newAuthorization/ok/permanent-identifier-disabled (0.00s) --- PASS: TestHandler_newAuthorization/ok/wireapp-device (0.00s) --- PASS: TestHandler_newAuthorization/fail/error-db.CreateChallenge (0.00s) + --- PASS: TestHandler_newAuthorization/fail/error-db.CreateAuthorization (0.00s) --- PASS: TestHandler_newAuthorization/fail/wireapp-user-options (0.00s) + --- PASS: TestHandler_newAuthorization/fail/wireapp-device-parse-id (0.00s) + --- PASS: TestHandler_newAuthorization/fail/wireapp-device-parse-client-id (0.00s) + --- PASS: TestHandler_newAuthorization/fail/wireapp-device-options (0.00s) + --- PASS: TestHandler_newAuthorization/ok/no-wildcard (0.00s) === RUN TestHandler_NewOrder -=== RUN TestHandler_NewOrder/fail/unmarshal-payload-error -=== RUN TestHandler_NewOrder/fail/malformed-payload-error === RUN TestHandler_NewOrder/fail/newACMEPolicyEngine-error === RUN TestHandler_NewOrder/fail/ca.AreSANsAllowed-error -=== RUN TestHandler_NewOrder/ok/naf-nbf -=== RUN TestHandler_NewOrder/fail/no-provisioner -=== RUN TestHandler_NewOrder/fail/prov.AuthorizeOrderIdentifier-error -=== RUN TestHandler_NewOrder/fail/error-h.newAuthorization === RUN TestHandler_NewOrder/ok/multiple-authz -=== RUN TestHandler_NewOrder/ok/default-naf-nbf +=== RUN TestHandler_NewOrder/ok/nbf-no-naf === RUN TestHandler_NewOrder/ok/naf-no-nbf -=== RUN TestHandler_NewOrder/fail/nil-account +=== RUN TestHandler_NewOrder/ok/default-naf-nbf-with-policy +=== RUN TestHandler_NewOrder/fail/nil-provisioner === RUN TestHandler_NewOrder/fail/no-payload === RUN TestHandler_NewOrder/fail/acmeProvisionerFromContext-error +=== RUN TestHandler_NewOrder/ok/naf-nbf +=== RUN TestHandler_NewOrder/fail/no-account +=== RUN TestHandler_NewOrder/fail/nil-account +=== RUN TestHandler_NewOrder/fail/prov.AuthorizeOrderIdentifier-error +=== RUN TestHandler_NewOrder/fail/error-h.newAuthorization +=== RUN TestHandler_NewOrder/ok/default-naf-nbf-wireapp +=== RUN TestHandler_NewOrder/fail/nil-payload +=== RUN TestHandler_NewOrder/fail/unmarshal-payload-error === RUN TestHandler_NewOrder/fail/db.GetExternalAccountKeyByAccountID-error === RUN TestHandler_NewOrder/fail/isIdentifierAllowed-error === RUN TestHandler_NewOrder/fail/error-db.CreateOrder -=== RUN TestHandler_NewOrder/ok/default-naf-nbf-wireapp -=== RUN TestHandler_NewOrder/fail/no-account -=== RUN TestHandler_NewOrder/fail/nil-provisioner -=== RUN TestHandler_NewOrder/fail/nil-payload -=== RUN TestHandler_NewOrder/ok/nbf-no-naf -=== RUN TestHandler_NewOrder/ok/default-naf-nbf-with-policy +=== RUN TestHandler_NewOrder/ok/default-naf-nbf +=== RUN TestHandler_NewOrder/fail/no-provisioner +=== RUN TestHandler_NewOrder/fail/malformed-payload-error --- PASS: TestHandler_NewOrder (0.01s) - --- PASS: TestHandler_NewOrder/fail/unmarshal-payload-error (0.00s) - --- PASS: TestHandler_NewOrder/fail/malformed-payload-error (0.00s) --- PASS: TestHandler_NewOrder/fail/newACMEPolicyEngine-error (0.00s) --- PASS: TestHandler_NewOrder/fail/ca.AreSANsAllowed-error (0.00s) - --- PASS: TestHandler_NewOrder/ok/naf-nbf (0.00s) - --- PASS: TestHandler_NewOrder/fail/no-provisioner (0.00s) - --- PASS: TestHandler_NewOrder/fail/prov.AuthorizeOrderIdentifier-error (0.00s) - --- PASS: TestHandler_NewOrder/fail/error-h.newAuthorization (0.00s) --- PASS: TestHandler_NewOrder/ok/multiple-authz (0.00s) - --- PASS: TestHandler_NewOrder/ok/default-naf-nbf (0.00s) + --- PASS: TestHandler_NewOrder/ok/nbf-no-naf (0.00s) --- PASS: TestHandler_NewOrder/ok/naf-no-nbf (0.00s) - --- PASS: TestHandler_NewOrder/fail/nil-account (0.00s) + --- PASS: TestHandler_NewOrder/ok/default-naf-nbf-with-policy (0.00s) + --- PASS: TestHandler_NewOrder/fail/nil-provisioner (0.00s) --- PASS: TestHandler_NewOrder/fail/no-payload (0.00s) --- PASS: TestHandler_NewOrder/fail/acmeProvisionerFromContext-error (0.00s) + --- PASS: TestHandler_NewOrder/ok/naf-nbf (0.00s) + --- PASS: TestHandler_NewOrder/fail/no-account (0.00s) + --- PASS: TestHandler_NewOrder/fail/nil-account (0.00s) + --- PASS: TestHandler_NewOrder/fail/prov.AuthorizeOrderIdentifier-error (0.00s) + --- PASS: TestHandler_NewOrder/fail/error-h.newAuthorization (0.00s) + --- PASS: TestHandler_NewOrder/ok/default-naf-nbf-wireapp (0.00s) + --- PASS: TestHandler_NewOrder/fail/nil-payload (0.00s) + --- PASS: TestHandler_NewOrder/fail/unmarshal-payload-error (0.00s) --- PASS: TestHandler_NewOrder/fail/db.GetExternalAccountKeyByAccountID-error (0.00s) --- PASS: TestHandler_NewOrder/fail/isIdentifierAllowed-error (0.00s) --- PASS: TestHandler_NewOrder/fail/error-db.CreateOrder (0.00s) - --- PASS: TestHandler_NewOrder/ok/default-naf-nbf-wireapp (0.00s) - --- PASS: TestHandler_NewOrder/fail/no-account (0.00s) - --- PASS: TestHandler_NewOrder/fail/nil-provisioner (0.00s) - --- PASS: TestHandler_NewOrder/fail/nil-payload (0.00s) - --- PASS: TestHandler_NewOrder/ok/nbf-no-naf (0.00s) - --- PASS: TestHandler_NewOrder/ok/default-naf-nbf-with-policy (0.00s) + --- PASS: TestHandler_NewOrder/ok/default-naf-nbf (0.00s) + --- PASS: TestHandler_NewOrder/fail/no-provisioner (0.00s) + --- PASS: TestHandler_NewOrder/fail/malformed-payload-error (0.00s) === RUN TestHandler_FinalizeOrder -=== RUN TestHandler_FinalizeOrder/fail/db.GetOrder-error +=== RUN TestHandler_FinalizeOrder/fail/order-finalize-error === RUN TestHandler_FinalizeOrder/ok +=== RUN TestHandler_FinalizeOrder/fail/no-account +=== RUN TestHandler_FinalizeOrder/fail/nil-account === RUN TestHandler_FinalizeOrder/fail/no-provisioner +=== RUN TestHandler_FinalizeOrder/fail/nil-provisioner === RUN TestHandler_FinalizeOrder/fail/no-payload === RUN TestHandler_FinalizeOrder/fail/nil-payload +=== RUN TestHandler_FinalizeOrder/fail/malformed-payload-error === RUN TestHandler_FinalizeOrder/fail/account-id-mismatch -=== RUN TestHandler_FinalizeOrder/fail/provisioner-id-mismatch -=== RUN TestHandler_FinalizeOrder/fail/order-finalize-error -=== RUN TestHandler_FinalizeOrder/fail/no-account -=== RUN TestHandler_FinalizeOrder/fail/nil-account -=== RUN TestHandler_FinalizeOrder/fail/nil-provisioner === RUN TestHandler_FinalizeOrder/fail/unmarshal-payload-error -=== RUN TestHandler_FinalizeOrder/fail/malformed-payload-error ---- PASS: TestHandler_FinalizeOrder (0.01s) - --- PASS: TestHandler_FinalizeOrder/fail/db.GetOrder-error (0.00s) +=== RUN TestHandler_FinalizeOrder/fail/db.GetOrder-error +=== RUN TestHandler_FinalizeOrder/fail/provisioner-id-mismatch +--- PASS: TestHandler_FinalizeOrder (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/order-finalize-error (0.00s) --- PASS: TestHandler_FinalizeOrder/ok (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/no-account (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/nil-account (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/no-provisioner (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/nil-provisioner (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/no-payload (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/nil-payload (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/malformed-payload-error (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/account-id-mismatch (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/provisioner-id-mismatch (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/order-finalize-error (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/no-account (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/nil-account (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/nil-provisioner (0.00s) --- PASS: TestHandler_FinalizeOrder/fail/unmarshal-payload-error (0.00s) - --- PASS: TestHandler_FinalizeOrder/fail/malformed-payload-error (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/db.GetOrder-error (0.00s) + --- PASS: TestHandler_FinalizeOrder/fail/provisioner-id-mismatch (0.00s) === RUN TestHandler_challengeTypes === RUN TestHandler_challengeTypes/ok/dns === RUN TestHandler_challengeTypes/ok/wildcard @@ -3006,67 +3043,67 @@ === RUN Test_revokeOptions === RUN Test_revokeOptions/ok/no-reasoncode === RUN Test_revokeOptions/ok/including-reasoncode ---- PASS: Test_revokeOptions (0.01s) +--- PASS: Test_revokeOptions (0.00s) --- PASS: Test_revokeOptions/ok/no-reasoncode (0.00s) --- PASS: Test_revokeOptions/ok/including-reasoncode (0.00s) === RUN TestHandler_RevokeCert -=== RUN TestHandler_RevokeCert/fail/prov.AuthorizeRevoke +=== RUN TestHandler_RevokeCert/fail/ca.Revoke-already-revoked === RUN TestHandler_RevokeCert/ok/using-account-key -=== RUN TestHandler_RevokeCert/ok/using-certificate-key -=== RUN TestHandler_RevokeCert/fail/no-jws -=== RUN TestHandler_RevokeCert/fail/nil-provisioner -=== RUN TestHandler_RevokeCert/fail/wrong-certificate-encoding -=== RUN TestHandler_RevokeCert/fail/db.GetCertificateBySerial -=== RUN TestHandler_RevokeCert/fail/certificate-revoked-check-fails -=== RUN TestHandler_RevokeCert/fail/nil-jws === RUN TestHandler_RevokeCert/fail/no-provisioner -=== RUN TestHandler_RevokeCert/fail/nil-payload === RUN TestHandler_RevokeCert/fail/unmarshal-payload -=== RUN TestHandler_RevokeCert/fail/account-not-authorized -=== RUN TestHandler_RevokeCert/fail/invalid-reasoncode -=== RUN TestHandler_RevokeCert/fail/no-payload -=== RUN TestHandler_RevokeCert/fail/different-certificate-contents -=== RUN TestHandler_RevokeCert/fail/nil-account +=== RUN TestHandler_RevokeCert/fail/db.GetCertificateBySerial +=== RUN TestHandler_RevokeCert/fail/unauthorized-certificate-key +=== RUN TestHandler_RevokeCert/fail/certificate-revoked-check-fails === RUN TestHandler_RevokeCert/fail/certificate-already-revoked === RUN TestHandler_RevokeCert/fail/ca.Revoke -=== RUN TestHandler_RevokeCert/fail/ca.Revoke-already-revoked +=== RUN TestHandler_RevokeCert/ok/using-certificate-key +=== RUN TestHandler_RevokeCert/fail/no-payload +=== RUN TestHandler_RevokeCert/fail/nil-account +=== RUN TestHandler_RevokeCert/fail/account-not-valid +=== RUN TestHandler_RevokeCert/fail/prov.AuthorizeRevoke +=== RUN TestHandler_RevokeCert/fail/no-jws +=== RUN TestHandler_RevokeCert/fail/nil-jws +=== RUN TestHandler_RevokeCert/fail/nil-payload +=== RUN TestHandler_RevokeCert/fail/wrong-certificate-encoding === RUN TestHandler_RevokeCert/fail/no-certificate-encoded === RUN TestHandler_RevokeCert/fail/no-account -=== RUN TestHandler_RevokeCert/fail/account-not-valid -=== RUN TestHandler_RevokeCert/fail/unauthorized-certificate-key +=== RUN TestHandler_RevokeCert/fail/nil-provisioner +=== RUN TestHandler_RevokeCert/fail/different-certificate-contents +=== RUN TestHandler_RevokeCert/fail/account-not-authorized +=== RUN TestHandler_RevokeCert/fail/invalid-reasoncode --- PASS: TestHandler_RevokeCert (0.01s) - --- PASS: TestHandler_RevokeCert/fail/prov.AuthorizeRevoke (0.00s) + --- PASS: TestHandler_RevokeCert/fail/ca.Revoke-already-revoked (0.00s) --- PASS: TestHandler_RevokeCert/ok/using-account-key (0.00s) - --- PASS: TestHandler_RevokeCert/ok/using-certificate-key (0.00s) - --- PASS: TestHandler_RevokeCert/fail/no-jws (0.00s) - --- PASS: TestHandler_RevokeCert/fail/nil-provisioner (0.00s) - --- PASS: TestHandler_RevokeCert/fail/wrong-certificate-encoding (0.00s) - --- PASS: TestHandler_RevokeCert/fail/db.GetCertificateBySerial (0.00s) - --- PASS: TestHandler_RevokeCert/fail/certificate-revoked-check-fails (0.00s) - --- PASS: TestHandler_RevokeCert/fail/nil-jws (0.00s) --- PASS: TestHandler_RevokeCert/fail/no-provisioner (0.00s) - --- PASS: TestHandler_RevokeCert/fail/nil-payload (0.00s) --- PASS: TestHandler_RevokeCert/fail/unmarshal-payload (0.00s) - --- PASS: TestHandler_RevokeCert/fail/account-not-authorized (0.00s) - --- PASS: TestHandler_RevokeCert/fail/invalid-reasoncode (0.00s) - --- PASS: TestHandler_RevokeCert/fail/no-payload (0.00s) - --- PASS: TestHandler_RevokeCert/fail/different-certificate-contents (0.00s) - --- PASS: TestHandler_RevokeCert/fail/nil-account (0.00s) + --- PASS: TestHandler_RevokeCert/fail/db.GetCertificateBySerial (0.00s) + --- PASS: TestHandler_RevokeCert/fail/unauthorized-certificate-key (0.00s) + --- PASS: TestHandler_RevokeCert/fail/certificate-revoked-check-fails (0.00s) --- PASS: TestHandler_RevokeCert/fail/certificate-already-revoked (0.00s) --- PASS: TestHandler_RevokeCert/fail/ca.Revoke (0.00s) - --- PASS: TestHandler_RevokeCert/fail/ca.Revoke-already-revoked (0.00s) + --- PASS: TestHandler_RevokeCert/ok/using-certificate-key (0.00s) + --- PASS: TestHandler_RevokeCert/fail/no-payload (0.00s) + --- PASS: TestHandler_RevokeCert/fail/nil-account (0.00s) + --- PASS: TestHandler_RevokeCert/fail/account-not-valid (0.00s) + --- PASS: TestHandler_RevokeCert/fail/prov.AuthorizeRevoke (0.00s) + --- PASS: TestHandler_RevokeCert/fail/no-jws (0.00s) + --- PASS: TestHandler_RevokeCert/fail/nil-jws (0.00s) + --- PASS: TestHandler_RevokeCert/fail/nil-payload (0.00s) + --- PASS: TestHandler_RevokeCert/fail/wrong-certificate-encoding (0.00s) --- PASS: TestHandler_RevokeCert/fail/no-certificate-encoded (0.00s) --- PASS: TestHandler_RevokeCert/fail/no-account (0.00s) - --- PASS: TestHandler_RevokeCert/fail/account-not-valid (0.00s) - --- PASS: TestHandler_RevokeCert/fail/unauthorized-certificate-key (0.00s) + --- PASS: TestHandler_RevokeCert/fail/nil-provisioner (0.00s) + --- PASS: TestHandler_RevokeCert/fail/different-certificate-contents (0.00s) + --- PASS: TestHandler_RevokeCert/fail/account-not-authorized (0.00s) + --- PASS: TestHandler_RevokeCert/fail/invalid-reasoncode (0.00s) === RUN TestHandler_isAccountAuthorized -=== RUN TestHandler_isAccountAuthorized/ok === RUN TestHandler_isAccountAuthorized/fail/account-invalid === RUN TestHandler_isAccountAuthorized/fail/different-account +=== RUN TestHandler_isAccountAuthorized/ok --- PASS: TestHandler_isAccountAuthorized (0.00s) - --- PASS: TestHandler_isAccountAuthorized/ok (0.00s) --- PASS: TestHandler_isAccountAuthorized/fail/account-invalid (0.00s) --- PASS: TestHandler_isAccountAuthorized/fail/different-account (0.00s) + --- PASS: TestHandler_isAccountAuthorized/ok (0.00s) === RUN Test_wrapUnauthorizedError === RUN Test_wrapUnauthorizedError/unauthorizedIdentifiers === RUN Test_wrapUnauthorizedError/subject @@ -3078,26 +3115,26 @@ --- PASS: Test_wrapUnauthorizedError/wrap-subject (0.00s) --- PASS: Test_wrapUnauthorizedError/default (0.00s) === RUN TestWireIntegration - wire_integration_test.go:137: database file name: /tmp/integration-db-3837904811 + wire_integration_test.go:137: database file name: /tmp/integration-db-1224629080 wire_integration_test.go:190: directory: {https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-nonce https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-account https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/new-order https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/revoke-cert https://test.ca.smallstep.com/acme/test@acme-%3Ctest%3Eprovisioner.com/key-change } - wire_integration_test.go:203: nonce: dXNhbTQ5d0JCd0t0RE5zMkt6M09mdEFISmpjakVXMTc - wire_integration_test.go:237: account ID: fWzNlWUNSuxmuDSaP2AMfBzc1KodEAts - wire_integration_test.go:278: authzs IDs: [LZVRl0nBMaQfNUguPhfa5Gy9e7KIirro sPelh13Kn43fy9em2CwnRfKT0DB9jegX] - wire_integration_test.go:428: challenge: nrA304kdGmhVIdbaprBVLtV6x81MFGfG invalid - wire_integration_test.go:428: challenge: tCoY9KHIIesm05hN9Oy1AFQA70AR1EMP invalid - wire_integration_test.go:452: updated challenge: nrA304kdGmhVIdbaprBVLtV6x81MFGfG valid - wire_integration_test.go:452: updated challenge: tCoY9KHIIesm05hN9Oy1AFQA70AR1EMP valid + wire_integration_test.go:203: nonce: dWFyNXVlNE1ydGo0UGNBekY0R1Z5SVdaem83aWJaa3Y + wire_integration_test.go:237: account ID: tFcJ9rAYYDDwUmGO4md4z5HiJc8rnABw + wire_integration_test.go:278: authzs IDs: [TTZAfyFSw4nfh2n7PwEul74zxn7IZhs3 whu8q38mhy3xwwiuNTdiLcSwakvrcHgD] + wire_integration_test.go:428: challenge: JS0XLW7xqvUWhG5wEj86aDY9GFxVOOHS invalid + wire_integration_test.go:428: challenge: UveVOy3GKCRJAOKkZnhcIgmXgd5bwK4z invalid + wire_integration_test.go:452: updated challenge: JS0XLW7xqvUWhG5wEj86aDY9GFxVOOHS valid + wire_integration_test.go:452: updated challenge: UveVOy3GKCRJAOKkZnhcIgmXgd5bwK4z valid wire_integration_test.go:490: updated order status: ready wire_integration_test.go:587: finalized order status: valid ---- PASS: TestWireIntegration (0.04s) +--- PASS: TestWireIntegration (0.07s) PASS -ok github.com/smallstep/certificates/acme/api 1.059s +ok github.com/smallstep/certificates/acme/api 0.821s === RUN TestDB_getDBAccount === RUN TestDB_getDBAccount/fail/not-found === RUN TestDB_getDBAccount/fail/db.Get-error === RUN TestDB_getDBAccount/fail/unmarshal-error === RUN TestDB_getDBAccount/ok ---- PASS: TestDB_getDBAccount (0.01s) +--- PASS: TestDB_getDBAccount (0.00s) --- PASS: TestDB_getDBAccount/fail/not-found (0.00s) --- PASS: TestDB_getDBAccount/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBAccount/fail/unmarshal-error (0.00s) @@ -3129,21 +3166,21 @@ === RUN TestDB_CreateAccount/fail/keyID-cmpAndSwap-false === RUN TestDB_CreateAccount/fail/account-save-error === RUN TestDB_CreateAccount/ok ---- PASS: TestDB_CreateAccount (0.01s) +--- PASS: TestDB_CreateAccount (0.00s) --- PASS: TestDB_CreateAccount/fail/keyID-cmpAndSwap-error (0.00s) --- PASS: TestDB_CreateAccount/fail/keyID-cmpAndSwap-false (0.00s) --- PASS: TestDB_CreateAccount/fail/account-save-error (0.00s) --- PASS: TestDB_CreateAccount/ok (0.00s) === RUN TestDB_UpdateAccount +=== RUN TestDB_UpdateAccount/ok === RUN TestDB_UpdateAccount/fail/db.Get-error === RUN TestDB_UpdateAccount/fail/already-deactivated === RUN TestDB_UpdateAccount/fail/db.CmpAndSwap-error -=== RUN TestDB_UpdateAccount/ok --- PASS: TestDB_UpdateAccount (0.00s) + --- PASS: TestDB_UpdateAccount/ok (0.00s) --- PASS: TestDB_UpdateAccount/fail/db.Get-error (0.00s) --- PASS: TestDB_UpdateAccount/fail/already-deactivated (0.00s) --- PASS: TestDB_UpdateAccount/fail/db.CmpAndSwap-error (0.00s) - --- PASS: TestDB_UpdateAccount/ok (0.00s) === RUN TestDB_getDBAuthz === RUN TestDB_getDBAuthz/fail/not-found === RUN TestDB_getDBAuthz/fail/db.Get-error @@ -3155,17 +3192,17 @@ --- PASS: TestDB_getDBAuthz/fail/unmarshal-error (0.00s) --- PASS: TestDB_getDBAuthz/ok (0.00s) === RUN TestDB_GetAuthorization -=== RUN TestDB_GetAuthorization/fail/db.GetChallenge-not-found -=== RUN TestDB_GetAuthorization/ok === RUN TestDB_GetAuthorization/fail/db.Get-error === RUN TestDB_GetAuthorization/fail/forward-acme-error === RUN TestDB_GetAuthorization/fail/db.GetChallenge-error ---- PASS: TestDB_GetAuthorization (0.01s) - --- PASS: TestDB_GetAuthorization/fail/db.GetChallenge-not-found (0.00s) - --- PASS: TestDB_GetAuthorization/ok (0.00s) +=== RUN TestDB_GetAuthorization/fail/db.GetChallenge-not-found +=== RUN TestDB_GetAuthorization/ok +--- PASS: TestDB_GetAuthorization (0.00s) --- PASS: TestDB_GetAuthorization/fail/db.Get-error (0.00s) --- PASS: TestDB_GetAuthorization/fail/forward-acme-error (0.00s) --- PASS: TestDB_GetAuthorization/fail/db.GetChallenge-error (0.00s) + --- PASS: TestDB_GetAuthorization/fail/db.GetChallenge-not-found (0.00s) + --- PASS: TestDB_GetAuthorization/ok (0.00s) === RUN TestDB_CreateAuthorization === RUN TestDB_CreateAuthorization/fail/cmpAndSwap-error === RUN TestDB_CreateAuthorization/ok @@ -3173,61 +3210,61 @@ --- PASS: TestDB_CreateAuthorization/fail/cmpAndSwap-error (0.00s) --- PASS: TestDB_CreateAuthorization/ok (0.00s) === RUN TestDB_UpdateAuthorization -=== RUN TestDB_UpdateAuthorization/fail/db.Get-error === RUN TestDB_UpdateAuthorization/fail/db.CmpAndSwap-error === RUN TestDB_UpdateAuthorization/ok +=== RUN TestDB_UpdateAuthorization/fail/db.Get-error --- PASS: TestDB_UpdateAuthorization (0.00s) - --- PASS: TestDB_UpdateAuthorization/fail/db.Get-error (0.00s) --- PASS: TestDB_UpdateAuthorization/fail/db.CmpAndSwap-error (0.00s) --- PASS: TestDB_UpdateAuthorization/ok (0.00s) + --- PASS: TestDB_UpdateAuthorization/fail/db.Get-error (0.00s) === RUN TestDB_GetAuthorizationsByAccountID -=== RUN TestDB_GetAuthorizationsByAccountID/ok -=== RUN TestDB_GetAuthorizationsByAccountID/ok/skip-different-account === RUN TestDB_GetAuthorizationsByAccountID/fail/db.List-error === RUN TestDB_GetAuthorizationsByAccountID/fail/unmarshal +=== RUN TestDB_GetAuthorizationsByAccountID/ok +=== RUN TestDB_GetAuthorizationsByAccountID/ok/skip-different-account --- PASS: TestDB_GetAuthorizationsByAccountID (0.00s) - --- PASS: TestDB_GetAuthorizationsByAccountID/ok (0.00s) - --- PASS: TestDB_GetAuthorizationsByAccountID/ok/skip-different-account (0.00s) --- PASS: TestDB_GetAuthorizationsByAccountID/fail/db.List-error (0.00s) --- PASS: TestDB_GetAuthorizationsByAccountID/fail/unmarshal (0.00s) + --- PASS: TestDB_GetAuthorizationsByAccountID/ok (0.00s) + --- PASS: TestDB_GetAuthorizationsByAccountID/ok/skip-different-account (0.00s) === RUN TestDB_CreateCertificate === RUN TestDB_CreateCertificate/fail/cmpAndSwap-error === RUN TestDB_CreateCertificate/ok ---- PASS: TestDB_CreateCertificate (0.00s) +--- PASS: TestDB_CreateCertificate (0.02s) --- PASS: TestDB_CreateCertificate/fail/cmpAndSwap-error (0.00s) --- PASS: TestDB_CreateCertificate/ok (0.00s) === RUN TestDB_GetCertificate +=== RUN TestDB_GetCertificate/fail/parseBundle-error +=== RUN TestDB_GetCertificate/ok === RUN TestDB_GetCertificate/fail/not-found === RUN TestDB_GetCertificate/fail/db.Get-error === RUN TestDB_GetCertificate/fail/unmarshal-error -=== RUN TestDB_GetCertificate/fail/parseBundle-error -=== RUN TestDB_GetCertificate/ok --- PASS: TestDB_GetCertificate (0.00s) + --- PASS: TestDB_GetCertificate/fail/parseBundle-error (0.00s) + --- PASS: TestDB_GetCertificate/ok (0.00s) --- PASS: TestDB_GetCertificate/fail/not-found (0.00s) --- PASS: TestDB_GetCertificate/fail/db.Get-error (0.00s) --- PASS: TestDB_GetCertificate/fail/unmarshal-error (0.00s) - --- PASS: TestDB_GetCertificate/fail/parseBundle-error (0.00s) - --- PASS: TestDB_GetCertificate/ok (0.00s) === RUN Test_parseBundle === RUN Test_parseBundle/fail/bad-type-error === RUN Test_parseBundle/fail/bad-pem-error === RUN Test_parseBundle/fail/unexpected-data === RUN Test_parseBundle/ok ---- PASS: Test_parseBundle (0.00s) +--- PASS: Test_parseBundle (0.01s) --- PASS: Test_parseBundle/fail/bad-type-error (0.00s) --- PASS: Test_parseBundle/fail/bad-pem-error (0.00s) - --- PASS: Test_parseBundle/fail/unexpected-data (0.00s) + --- PASS: Test_parseBundle/fail/unexpected-data (0.01s) --- PASS: Test_parseBundle/ok (0.00s) === RUN TestDB_GetCertificateBySerial -=== RUN TestDB_GetCertificateBySerial/fail/not-found -=== RUN TestDB_GetCertificateBySerial/fail/db-error === RUN TestDB_GetCertificateBySerial/fail/unmarshal-dbSerial === RUN TestDB_GetCertificateBySerial/ok +=== RUN TestDB_GetCertificateBySerial/fail/not-found +=== RUN TestDB_GetCertificateBySerial/fail/db-error --- PASS: TestDB_GetCertificateBySerial (0.00s) - --- PASS: TestDB_GetCertificateBySerial/fail/not-found (0.00s) - --- PASS: TestDB_GetCertificateBySerial/fail/db-error (0.00s) --- PASS: TestDB_GetCertificateBySerial/fail/unmarshal-dbSerial (0.00s) --- PASS: TestDB_GetCertificateBySerial/ok (0.00s) + --- PASS: TestDB_GetCertificateBySerial/fail/not-found (0.00s) + --- PASS: TestDB_GetCertificateBySerial/fail/db-error (0.00s) === RUN TestDB_getDBChallenge === RUN TestDB_getDBChallenge/fail/unmarshal-error === RUN TestDB_getDBChallenge/ok @@ -3245,13 +3282,13 @@ --- PASS: TestDB_CreateChallenge/fail/cmpAndSwap-error (0.00s) --- PASS: TestDB_CreateChallenge/ok (0.00s) === RUN TestDB_GetChallenge +=== RUN TestDB_GetChallenge/fail/db.Get-error === RUN TestDB_GetChallenge/fail/forward-acme-error === RUN TestDB_GetChallenge/ok -=== RUN TestDB_GetChallenge/fail/db.Get-error --- PASS: TestDB_GetChallenge (0.00s) + --- PASS: TestDB_GetChallenge/fail/db.Get-error (0.00s) --- PASS: TestDB_GetChallenge/fail/forward-acme-error (0.00s) --- PASS: TestDB_GetChallenge/ok (0.00s) - --- PASS: TestDB_GetChallenge/fail/db.Get-error (0.00s) === RUN TestDB_UpdateChallenge === RUN TestDB_UpdateChallenge/fail/db.Get-error === RUN TestDB_UpdateChallenge/fail/db.CmpAndSwap-error @@ -3261,15 +3298,15 @@ --- PASS: TestDB_UpdateChallenge/fail/db.CmpAndSwap-error (0.00s) --- PASS: TestDB_UpdateChallenge/ok (0.00s) === RUN TestDB_getDBExternalAccountKey -=== RUN TestDB_getDBExternalAccountKey/fail/not-found -=== RUN TestDB_getDBExternalAccountKey/fail/db.Get-error === RUN TestDB_getDBExternalAccountKey/fail/unmarshal-error === RUN TestDB_getDBExternalAccountKey/ok +=== RUN TestDB_getDBExternalAccountKey/fail/not-found +=== RUN TestDB_getDBExternalAccountKey/fail/db.Get-error --- PASS: TestDB_getDBExternalAccountKey (0.00s) - --- PASS: TestDB_getDBExternalAccountKey/fail/not-found (0.00s) - --- PASS: TestDB_getDBExternalAccountKey/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBExternalAccountKey/fail/unmarshal-error (0.00s) --- PASS: TestDB_getDBExternalAccountKey/ok (0.00s) + --- PASS: TestDB_getDBExternalAccountKey/fail/not-found (0.00s) + --- PASS: TestDB_getDBExternalAccountKey/fail/db.Get-error (0.00s) === RUN TestDB_GetExternalAccountKey === RUN TestDB_GetExternalAccountKey/ok === RUN TestDB_GetExternalAccountKey/fail/db.Get-error @@ -3285,7 +3322,7 @@ === RUN TestDB_GetExternalAccountKeyByReference/ok/no-reference === RUN TestDB_GetExternalAccountKeyByReference/fail/reference-not-found === RUN TestDB_GetExternalAccountKeyByReference/fail/reference-load-error ---- PASS: TestDB_GetExternalAccountKeyByReference (0.01s) +--- PASS: TestDB_GetExternalAccountKeyByReference (0.00s) --- PASS: TestDB_GetExternalAccountKeyByReference/fail/reference-unmarshal-error (0.00s) --- PASS: TestDB_GetExternalAccountKeyByReference/fail/db.GetExternalAccountKey-error (0.00s) --- PASS: TestDB_GetExternalAccountKeyByReference/ok (0.00s) @@ -3318,43 +3355,43 @@ --- PASS: TestDB_DeleteExternalAccountKey/fail/delete-eak (0.00s) --- PASS: TestDB_DeleteExternalAccountKey/fail/delete-eakID (0.00s) === RUN TestDB_CreateExternalAccountKey +=== RUN TestDB_CreateExternalAccountKey/fail/externalAccountKeyReference-cmpAndSwap-error === RUN TestDB_CreateExternalAccountKey/ok === RUN TestDB_CreateExternalAccountKey/fail/externalAccountKeyID-cmpAndSwap-error === RUN TestDB_CreateExternalAccountKey/fail/addEAKID-error -=== RUN TestDB_CreateExternalAccountKey/fail/externalAccountKeyReference-cmpAndSwap-error --- PASS: TestDB_CreateExternalAccountKey (0.00s) + --- PASS: TestDB_CreateExternalAccountKey/fail/externalAccountKeyReference-cmpAndSwap-error (0.00s) --- PASS: TestDB_CreateExternalAccountKey/ok (0.00s) --- PASS: TestDB_CreateExternalAccountKey/fail/externalAccountKeyID-cmpAndSwap-error (0.00s) --- PASS: TestDB_CreateExternalAccountKey/fail/addEAKID-error (0.00s) - --- PASS: TestDB_CreateExternalAccountKey/fail/externalAccountKeyReference-cmpAndSwap-error (0.00s) === RUN TestDB_UpdateExternalAccountKey -=== RUN TestDB_UpdateExternalAccountKey/fail/provisioner-change -=== RUN TestDB_UpdateExternalAccountKey/fail/reference-change === RUN TestDB_UpdateExternalAccountKey/ok === RUN TestDB_UpdateExternalAccountKey/fail/db.Get-error === RUN TestDB_UpdateExternalAccountKey/fail/provisioner-mismatch +=== RUN TestDB_UpdateExternalAccountKey/fail/provisioner-change +=== RUN TestDB_UpdateExternalAccountKey/fail/reference-change --- PASS: TestDB_UpdateExternalAccountKey (0.00s) - --- PASS: TestDB_UpdateExternalAccountKey/fail/provisioner-change (0.00s) - --- PASS: TestDB_UpdateExternalAccountKey/fail/reference-change (0.00s) --- PASS: TestDB_UpdateExternalAccountKey/ok (0.00s) --- PASS: TestDB_UpdateExternalAccountKey/fail/db.Get-error (0.00s) --- PASS: TestDB_UpdateExternalAccountKey/fail/provisioner-mismatch (0.00s) + --- PASS: TestDB_UpdateExternalAccountKey/fail/provisioner-change (0.00s) + --- PASS: TestDB_UpdateExternalAccountKey/fail/reference-change (0.00s) === RUN TestDB_addEAKID +=== RUN TestDB_addEAKID/fail/unmarshal +=== RUN TestDB_addEAKID/fail/eakID-already-exists === RUN TestDB_addEAKID/fail/db.save === RUN TestDB_addEAKID/ok/db.Get-not-found === RUN TestDB_addEAKID/ok === RUN TestDB_addEAKID/fail/empty-eakID === RUN TestDB_addEAKID/fail/db.Get -=== RUN TestDB_addEAKID/fail/unmarshal -=== RUN TestDB_addEAKID/fail/eakID-already-exists ---- PASS: TestDB_addEAKID (0.00s) +--- PASS: TestDB_addEAKID (0.01s) + --- PASS: TestDB_addEAKID/fail/unmarshal (0.00s) + --- PASS: TestDB_addEAKID/fail/eakID-already-exists (0.00s) --- PASS: TestDB_addEAKID/fail/db.save (0.00s) --- PASS: TestDB_addEAKID/ok/db.Get-not-found (0.00s) --- PASS: TestDB_addEAKID/ok (0.00s) --- PASS: TestDB_addEAKID/fail/empty-eakID (0.00s) --- PASS: TestDB_addEAKID/fail/db.Get (0.00s) - --- PASS: TestDB_addEAKID/fail/unmarshal (0.00s) - --- PASS: TestDB_addEAKID/fail/eakID-already-exists (0.00s) === RUN TestDB_deleteEAKID === RUN TestDB_deleteEAKID/fail/db.save === RUN TestDB_deleteEAKID/ok/db.Get-not-found @@ -3426,13 +3463,13 @@ --- PASS: TestDB_getDBOrder/fail/unmarshal-error (0.00s) --- PASS: TestDB_getDBOrder/ok (0.00s) === RUN TestDB_GetOrder +=== RUN TestDB_GetOrder/ok === RUN TestDB_GetOrder/fail/db.Get-error === RUN TestDB_GetOrder/fail/forward-acme-error -=== RUN TestDB_GetOrder/ok --- PASS: TestDB_GetOrder (0.00s) + --- PASS: TestDB_GetOrder/ok (0.00s) --- PASS: TestDB_GetOrder/fail/db.Get-error (0.00s) --- PASS: TestDB_GetOrder/fail/forward-acme-error (0.00s) - --- PASS: TestDB_GetOrder/ok (0.00s) === RUN TestDB_UpdateOrder === RUN TestDB_UpdateOrder/fail/db.Get-error === RUN TestDB_UpdateOrder/fail/save-error @@ -3442,35 +3479,35 @@ --- PASS: TestDB_UpdateOrder/fail/save-error (0.00s) --- PASS: TestDB_UpdateOrder/ok (0.00s) === RUN TestDB_CreateOrder -=== RUN TestDB_CreateOrder/ok === RUN TestDB_CreateOrder/fail/order-save-error === RUN TestDB_CreateOrder/fail/orderIDsByOrderUpdate-error +=== RUN TestDB_CreateOrder/ok --- PASS: TestDB_CreateOrder (0.00s) - --- PASS: TestDB_CreateOrder/ok (0.00s) --- PASS: TestDB_CreateOrder/fail/order-save-error (0.00s) --- PASS: TestDB_CreateOrder/fail/orderIDsByOrderUpdate-error (0.00s) + --- PASS: TestDB_CreateOrder/ok (0.00s) === RUN TestDB_updateAddOrderIDs -=== RUN TestDB_updateAddOrderIDs/fail/update-order-status-error -=== RUN TestDB_updateAddOrderIDs/ok/all-old-not-pending -=== RUN TestDB_updateAddOrderIDs/ok/old-and-new -=== RUN TestDB_updateAddOrderIDs/ok/old-and-new-2 === RUN TestDB_updateAddOrderIDs/fail/db.Get-error -=== RUN TestDB_updateAddOrderIDs/fail/unmarshal-error === RUN TestDB_updateAddOrderIDs/fail/db.Get-order-error +=== RUN TestDB_updateAddOrderIDs/fail/update-order-status-error === RUN TestDB_updateAddOrderIDs/fail/db.save-order-error === RUN TestDB_updateAddOrderIDs/ok/no-old ---- PASS: TestDB_updateAddOrderIDs (0.00s) - --- PASS: TestDB_updateAddOrderIDs/fail/update-order-status-error (0.00s) - --- PASS: TestDB_updateAddOrderIDs/ok/all-old-not-pending (0.00s) - --- PASS: TestDB_updateAddOrderIDs/ok/old-and-new (0.00s) - --- PASS: TestDB_updateAddOrderIDs/ok/old-and-new-2 (0.00s) +=== RUN TestDB_updateAddOrderIDs/fail/unmarshal-error +=== RUN TestDB_updateAddOrderIDs/ok/all-old-not-pending +=== RUN TestDB_updateAddOrderIDs/ok/old-and-new +=== RUN TestDB_updateAddOrderIDs/ok/old-and-new-2 +--- PASS: TestDB_updateAddOrderIDs (0.01s) --- PASS: TestDB_updateAddOrderIDs/fail/db.Get-error (0.00s) - --- PASS: TestDB_updateAddOrderIDs/fail/unmarshal-error (0.00s) --- PASS: TestDB_updateAddOrderIDs/fail/db.Get-order-error (0.00s) + --- PASS: TestDB_updateAddOrderIDs/fail/update-order-status-error (0.00s) --- PASS: TestDB_updateAddOrderIDs/fail/db.save-order-error (0.00s) --- PASS: TestDB_updateAddOrderIDs/ok/no-old (0.00s) + --- PASS: TestDB_updateAddOrderIDs/fail/unmarshal-error (0.00s) + --- PASS: TestDB_updateAddOrderIDs/ok/all-old-not-pending (0.00s) + --- PASS: TestDB_updateAddOrderIDs/ok/old-and-new (0.00s) + --- PASS: TestDB_updateAddOrderIDs/ok/old-and-new-2 (0.00s) PASS -ok github.com/smallstep/certificates/acme/db/nosql 0.147s +ok github.com/smallstep/certificates/acme/db/nosql 0.218s === RUN TestParseUserID === RUN TestParseUserID/ok === RUN TestParseUserID/fail/json @@ -3508,7 +3545,7 @@ --- PASS: TestParseClientID/fail/scheme (0.00s) --- PASS: TestParseClientID/fail/username (0.00s) PASS -ok github.com/smallstep/certificates/acme/wire 0.025s +ok github.com/smallstep/certificates/acme/wire 0.048s === RUN TestNewCertificate --- PASS: TestNewCertificate (0.00s) === RUN TestCertificate_MarshalJSON @@ -3534,7 +3571,7 @@ === RUN TestCertificate_UnmarshalJSON/json_null === RUN TestCertificate_UnmarshalJSON/valid_root === RUN TestCertificate_UnmarshalJSON/valid_cert ---- PASS: TestCertificate_UnmarshalJSON (0.00s) +--- PASS: TestCertificate_UnmarshalJSON (0.02s) --- PASS: TestCertificate_UnmarshalJSON/no_data (0.00s) --- PASS: TestCertificate_UnmarshalJSON/incomplete_string_1 (0.00s) --- PASS: TestCertificate_UnmarshalJSON/incomplete_string_2 (0.00s) @@ -3626,7 +3663,7 @@ --- PASS: Test_caHandler_Route (0.00s) --- PASS: Test_caHandler_Route/ok (0.00s) === RUN Test_Health ---- PASS: Test_Health (0.00s) +--- PASS: Test_Health (0.01s) === RUN Test_Root === RUN Test_Root/ok === RUN Test_Root/fail @@ -3640,7 +3677,7 @@ === RUN Test_Sign/validate_error === RUN Test_Sign/authorize_error === RUN Test_Sign/sign_error ---- PASS: Test_Sign (0.01s) +--- PASS: Test_Sign (0.02s) --- PASS: Test_Sign/ok (0.00s) --- PASS: Test_Sign/ok_with_Provisioner (0.00s) --- PASS: Test_Sign/json_read_error (0.00s) @@ -3655,7 +3692,7 @@ === RUN Test_Renew/renew_error === RUN Test_Renew/fail_expired_token === RUN Test_Renew/fail_invalid_root ---- PASS: Test_Renew (0.01s) +--- PASS: Test_Renew (0.06s) --- PASS: Test_Renew/ok (0.00s) --- PASS: Test_Renew/ok_renew_after_expiry (0.00s) --- PASS: Test_Renew/no_tls (0.00s) @@ -3709,8 +3746,8 @@ === RUN Test_Federation/ok === RUN Test_Federation/no_peer_certificates === RUN Test_Federation/fail ---- PASS: Test_Federation (0.00s) - --- PASS: Test_Federation/ok (0.00s) +--- PASS: Test_Federation (0.02s) + --- PASS: Test_Federation/ok (0.01s) --- PASS: Test_Federation/no_peer_certificates (0.00s) --- PASS: Test_Federation/fail (0.00s) === RUN Test_fmtPublicKey @@ -3719,7 +3756,7 @@ === RUN Test_fmtPublicKey/ed25519 === RUN Test_fmtPublicKey/dsa2048 === RUN Test_fmtPublicKey/unknown ---- PASS: Test_fmtPublicKey (4.42s) +--- PASS: Test_fmtPublicKey (18.06s) --- PASS: Test_fmtPublicKey/p256 (0.00s) --- PASS: Test_fmtPublicKey/rsa2048 (0.00s) --- PASS: Test_fmtPublicKey/ed25519 (0.00s) @@ -3741,7 +3778,7 @@ === RUN TestIntermediatesPEM/ok === RUN TestIntermediatesPEM/ok_multiple === RUN TestIntermediatesPEM/fail ---- PASS: TestIntermediatesPEM (0.01s) +--- PASS: TestIntermediatesPEM (0.00s) --- PASS: TestIntermediatesPEM/ok (0.00s) --- PASS: TestIntermediatesPEM/ok_multiple (0.00s) --- PASS: TestIntermediatesPEM/fail (0.00s) @@ -3753,40 +3790,40 @@ === RUN Test_CRL/fail/internal === RUN Test_CRL/fail/nil --- PASS: Test_CRL (0.01s) - --- PASS: Test_CRL/ok (0.00s) + --- PASS: Test_CRL/ok (0.01s) --- PASS: Test_CRL/ok/pem (0.00s) --- PASS: Test_CRL/ok/empty (0.00s) --- PASS: Test_CRL/ok/empty-pem (0.00s) --- PASS: Test_CRL/fail/internal (0.00s) --- PASS: Test_CRL/fail/nil (0.00s) === RUN TestRevokeRequestValidate -=== RUN TestRevokeRequestValidate/error/missing_serial -=== RUN TestRevokeRequestValidate/error/bad_sn === RUN TestRevokeRequestValidate/error/bad_reasonCode === RUN TestRevokeRequestValidate/error/non-passive_not_implemented === RUN TestRevokeRequestValidate/ok +=== RUN TestRevokeRequestValidate/error/missing_serial +=== RUN TestRevokeRequestValidate/error/bad_sn --- PASS: TestRevokeRequestValidate (0.00s) - --- PASS: TestRevokeRequestValidate/error/missing_serial (0.00s) - --- PASS: TestRevokeRequestValidate/error/bad_sn (0.00s) --- PASS: TestRevokeRequestValidate/error/bad_reasonCode (0.00s) --- PASS: TestRevokeRequestValidate/error/non-passive_not_implemented (0.00s) --- PASS: TestRevokeRequestValidate/ok (0.00s) + --- PASS: TestRevokeRequestValidate/error/missing_serial (0.00s) + --- PASS: TestRevokeRequestValidate/error/bad_sn (0.00s) === RUN Test_caHandler_Revoke -=== RUN Test_caHandler_Revoke/400/json_read_error -=== RUN Test_caHandler_Revoke/400/invalid_request_body -=== RUN Test_caHandler_Revoke/200/ott === RUN Test_caHandler_Revoke/400/no_OTT_and_no_peer_certificate === RUN Test_caHandler_Revoke/200/no_ott === RUN Test_caHandler_Revoke/500/ott_authority.Revoke === RUN Test_caHandler_Revoke/403/ott_authority.Revoke +=== RUN Test_caHandler_Revoke/400/json_read_error +=== RUN Test_caHandler_Revoke/400/invalid_request_body +=== RUN Test_caHandler_Revoke/200/ott --- PASS: Test_caHandler_Revoke (0.00s) - --- PASS: Test_caHandler_Revoke/400/json_read_error (0.00s) - --- PASS: Test_caHandler_Revoke/400/invalid_request_body (0.00s) - --- PASS: Test_caHandler_Revoke/200/ott (0.00s) --- PASS: Test_caHandler_Revoke/400/no_OTT_and_no_peer_certificate (0.00s) --- PASS: Test_caHandler_Revoke/200/no_ott (0.00s) --- PASS: Test_caHandler_Revoke/500/ott_authority.Revoke (0.00s) --- PASS: Test_caHandler_Revoke/403/ott_authority.Revoke (0.00s) + --- PASS: Test_caHandler_Revoke/400/json_read_error (0.00s) + --- PASS: Test_caHandler_Revoke/400/invalid_request_body (0.00s) + --- PASS: Test_caHandler_Revoke/200/ott (0.00s) === RUN TestSSHCertificate_MarshalJSON === RUN TestSSHCertificate_MarshalJSON/nil === RUN TestSSHCertificate_MarshalJSON/user @@ -3824,7 +3861,7 @@ === RUN TestSignSSHRequest_Validate/type === RUN TestSignSSHRequest_Validate/ott === RUN TestSignSSHRequest_Validate/identityCSR ---- PASS: TestSignSSHRequest_Validate (0.00s) +--- PASS: TestSignSSHRequest_Validate (0.01s) --- PASS: TestSignSSHRequest_Validate/ok-empty (0.00s) --- PASS: TestSignSSHRequest_Validate/ok-user (0.00s) --- PASS: TestSignSSHRequest_Validate/ok-host (0.00s) @@ -3848,7 +3885,7 @@ === RUN Test_SSHSign/fail-signSSH === RUN Test_SSHSign/fail-SignSSHAddUser === RUN Test_SSHSign/fail-user-identity ---- PASS: Test_SSHSign (0.00s) +--- PASS: Test_SSHSign (0.04s) --- PASS: Test_SSHSign/ok-user (0.00s) --- PASS: Test_SSHSign/ok-host (0.00s) --- PASS: Test_SSHSign/ok-user-add (0.00s) @@ -3956,7 +3993,7 @@ === RUN TestSSHPublicKey_UnmarshalJSON/noString === RUN TestSSHPublicKey_UnmarshalJSON/badB64 === RUN TestSSHPublicKey_UnmarshalJSON/badKey ---- PASS: TestSSHPublicKey_UnmarshalJSON (0.01s) +--- PASS: TestSSHPublicKey_UnmarshalJSON (0.00s) --- PASS: TestSSHPublicKey_UnmarshalJSON/ok (0.00s) --- PASS: TestSSHPublicKey_UnmarshalJSON/empty (0.00s) --- PASS: TestSSHPublicKey_UnmarshalJSON/null (0.00s) @@ -3986,7 +4023,7 @@ --- PASS: Test_getIdentityURI/ok_missing (0.00s) --- PASS: Test_getIdentityURI/ok_empty (0.00s) PASS -ok github.com/smallstep/certificates/api 4.575s +ok github.com/smallstep/certificates/api 18.430s === RUN TestError === RUN TestError/noLogger === RUN TestError/noError @@ -4008,7 +4045,7 @@ --- PASS: TestError/slogWithNoError (0.00s) --- PASS: TestError/slogWithError (0.00s) PASS -ok github.com/smallstep/certificates/api/log 0.023s +ok github.com/smallstep/certificates/api/log 0.076s ? github.com/smallstep/certificates/api/models [no test files] === RUN TestJSON === RUN TestJSON/ok @@ -4031,7 +4068,7 @@ --- PASS: Test_badProtoJSONError_Render/bad_proto_normal_space (0.00s) --- PASS: Test_badProtoJSONError_Render/bad_proto_non_breaking_space (0.00s) PASS -ok github.com/smallstep/certificates/api/read 0.044s +ok github.com/smallstep/certificates/api/read 0.074s === RUN TestJSON --- PASS: TestJSON (0.00s) === RUN TestJSONPanicsOnUnsupportedType @@ -4049,17 +4086,17 @@ === RUN TestStatusCodeFromError --- PASS: TestStatusCodeFromError (0.00s) PASS -ok github.com/smallstep/certificates/api/render 0.029s +ok github.com/smallstep/certificates/api/render 0.060s === RUN TestAuthorityNew +=== RUN TestAuthorityNew/fail_loading_CA_cert === RUN TestAuthorityNew/ok === RUN TestAuthorityNew/fail_bad_root === RUN TestAuthorityNew/fail_bad_password -=== RUN TestAuthorityNew/fail_loading_CA_cert --- PASS: TestAuthorityNew (0.01s) + --- PASS: TestAuthorityNew/fail_loading_CA_cert (0.00s) --- PASS: TestAuthorityNew/ok (0.00s) - --- PASS: TestAuthorityNew/fail_bad_root (0.01s) + --- PASS: TestAuthorityNew/fail_bad_root (0.00s) --- PASS: TestAuthorityNew/fail_bad_password (0.00s) - --- PASS: TestAuthorityNew/fail_loading_CA_cert (0.00s) === RUN TestAuthorityNew_bundles === RUN TestAuthorityNew_bundles/ok_ca0 === RUN TestAuthorityNew_bundles/ok_bundle @@ -4067,7 +4104,7 @@ === RUN TestAuthorityNew_bundles/ok_federated_bundle === RUN TestAuthorityNew_bundles/fail_root === RUN TestAuthorityNew_bundles/fail_federated ---- PASS: TestAuthorityNew_bundles (0.02s) +--- PASS: TestAuthorityNew_bundles (0.03s) --- PASS: TestAuthorityNew_bundles/ok_ca0 (0.00s) --- PASS: TestAuthorityNew_bundles/ok_bundle (0.00s) --- PASS: TestAuthorityNew_bundles/ok_federated_ca1 (0.00s) @@ -4075,8 +4112,8 @@ --- PASS: TestAuthorityNew_bundles/fail_root (0.00s) --- PASS: TestAuthorityNew_bundles/fail_federated (0.00s) === RUN TestAuthority_GetDatabase -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetDatabase/ok === RUN TestAuthority_GetDatabase/ok_WithDatabase --- PASS: TestAuthority_GetDatabase (0.01s) @@ -4109,58 +4146,58 @@ --- PASS: TestNewEmbedded/fail_missing_signer#01 (0.00s) --- PASS: TestNewEmbedded/fail_bad_password (0.00s) === RUN TestNewEmbedded_Sign ---- PASS: TestNewEmbedded_Sign (0.01s) +--- PASS: TestNewEmbedded_Sign (0.00s) === RUN TestNewEmbedded_GetTLSCertificate --- PASS: TestNewEmbedded_GetTLSCertificate (0.00s) === RUN TestAuthority_CloseForReload -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_CloseForReload/ok --- PASS: TestAuthority_CloseForReload (0.00s) --- PASS: TestAuthority_CloseForReload/ok (0.00s) === RUN TestAuthority_GetSCEP === RUN TestAuthority_GetSCEP/ok === RUN TestAuthority_GetSCEP/wrong_password ---- PASS: TestAuthority_GetSCEP (0.01s) +--- PASS: TestAuthority_GetSCEP (0.00s) --- PASS: TestAuthority_GetSCEP/ok (0.00s) --- PASS: TestAuthority_GetSCEP/wrong_password (0.00s) === RUN TestAuthority_GetID === RUN TestAuthority_GetID/ok === RUN TestAuthority_GetID/ok_with_id ---- PASS: TestAuthority_GetID (0.01s) +--- PASS: TestAuthority_GetID (0.00s) --- PASS: TestAuthority_GetID/ok (0.00s) --- PASS: TestAuthority_GetID/ok_with_id (0.00s) === RUN TestAuthority_authorizeToken -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_authorizeToken/ok/mockNoSQLDB +2025/10/24 00:32:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_authorizeToken/fail/mockNoSQLDB/token-already-used +2025/10/24 00:32:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeToken/fail/uninitialized +=== RUN TestAuthority_authorizeToken/fail/invalid-token === RUN TestAuthority_authorizeToken/fail/prehistoric-token -=== RUN TestAuthority_authorizeToken/fail/provisioner-not-found -=== RUN TestAuthority_authorizeToken/ok/simpledb === RUN TestAuthority_authorizeToken/fail/simpledb/token-already-used -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeToken/ok/sha256 -=== RUN TestAuthority_authorizeToken/fail/sha256/token-already-used -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_authorizeToken/ok/mockNoSQLDB -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_authorizeToken/fail/mockNoSQLDB/token-already-used -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_authorizeToken/fail/invalid-token === RUN TestAuthority_authorizeToken/fail/mockNoSQLDB/error -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s ---- PASS: TestAuthority_authorizeToken (0.07s) +2025/10/24 00:32:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_authorizeToken/fail/provisioner-not-found +=== RUN TestAuthority_authorizeToken/ok/simpledb +=== RUN TestAuthority_authorizeToken/fail/sha256/token-already-used +2025/10/24 00:32:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +--- PASS: TestAuthority_authorizeToken (0.06s) + --- PASS: TestAuthority_authorizeToken/ok/mockNoSQLDB (0.01s) + --- PASS: TestAuthority_authorizeToken/fail/mockNoSQLDB/token-already-used (0.00s) --- PASS: TestAuthority_authorizeToken/fail/uninitialized (0.00s) + --- PASS: TestAuthority_authorizeToken/fail/invalid-token (0.00s) --- PASS: TestAuthority_authorizeToken/fail/prehistoric-token (0.00s) - --- PASS: TestAuthority_authorizeToken/fail/provisioner-not-found (0.00s) - --- PASS: TestAuthority_authorizeToken/ok/simpledb (0.00s) --- PASS: TestAuthority_authorizeToken/fail/simpledb/token-already-used (0.00s) --- PASS: TestAuthority_authorizeToken/ok/sha256 (0.00s) - --- PASS: TestAuthority_authorizeToken/fail/sha256/token-already-used (0.00s) - --- PASS: TestAuthority_authorizeToken/ok/mockNoSQLDB (0.00s) - --- PASS: TestAuthority_authorizeToken/fail/mockNoSQLDB/token-already-used (0.01s) - --- PASS: TestAuthority_authorizeToken/fail/invalid-token (0.00s) --- PASS: TestAuthority_authorizeToken/fail/mockNoSQLDB/error (0.00s) + --- PASS: TestAuthority_authorizeToken/fail/provisioner-not-found (0.00s) + --- PASS: TestAuthority_authorizeToken/ok/simpledb (0.00s) + --- PASS: TestAuthority_authorizeToken/fail/sha256/token-already-used (0.00s) === RUN TestAuthority_authorizeRevoke -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeRevoke/fail/token/invalid-token === RUN TestAuthority_authorizeRevoke/fail/token/invalid-subject === RUN TestAuthority_authorizeRevoke/ok/token @@ -4169,7 +4206,7 @@ --- PASS: TestAuthority_authorizeRevoke/fail/token/invalid-subject (0.00s) --- PASS: TestAuthority_authorizeRevoke/ok/token (0.00s) === RUN TestAuthority_authorizeSign -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeSign/fail/invalid-token === RUN TestAuthority_authorizeSign/fail/invalid-subject === RUN TestAuthority_authorizeSign/ok @@ -4178,110 +4215,110 @@ --- PASS: TestAuthority_authorizeSign/fail/invalid-subject (0.00s) --- PASS: TestAuthority_authorizeSign/ok (0.00s) === RUN TestAuthority_Authorize -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_Authorize/default-to-signMethod -=== RUN TestAuthority_Authorize/fail/sign/invalid-token +2025/10/24 00:32:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_Authorize/fail/sshRekey/invalid-token +=== RUN TestAuthority_Authorize/fail/sshRekey/disabled +2025/10/24 00:32:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Authorize/ok/sshRekey +=== RUN TestAuthority_Authorize/fail/sign/invalid-token +=== RUN TestAuthority_Authorize/fail/sshRevoke/invalid-token +=== RUN TestAuthority_Authorize/fail/unexpected-method +=== RUN TestAuthority_Authorize/ok/sign +=== RUN TestAuthority_Authorize/fail/sshRenew/disabled +2025/10/24 00:32:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_Authorize/default-to-signMethod === RUN TestAuthority_Authorize/fail/revoke/invalid-token === RUN TestAuthority_Authorize/ok/revoke +=== RUN TestAuthority_Authorize/fail/sshSign/invalid-token === RUN TestAuthority_Authorize/ok/sshSign -=== RUN TestAuthority_Authorize/fail/sshRenew/invalid-token -=== RUN TestAuthority_Authorize/fail/sshRenew/disabled -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Authorize/ok/sshRenew -=== RUN TestAuthority_Authorize/fail/sshRevoke/invalid-token -=== RUN TestAuthority_Authorize/fail/sshRekey/invalid-token -=== RUN TestAuthority_Authorize/ok/sign -=== RUN TestAuthority_Authorize/fail/sshSign/invalid-token -=== RUN TestAuthority_Authorize/fail/sshRekey/disabled -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_Authorize/fail/unexpected-method -=== RUN TestAuthority_Authorize/fail/sshSign/disabled -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Authorize/ok/sshRevoke ---- PASS: TestAuthority_Authorize (0.05s) - --- PASS: TestAuthority_Authorize/default-to-signMethod (0.00s) - --- PASS: TestAuthority_Authorize/fail/sign/invalid-token (0.00s) +=== RUN TestAuthority_Authorize/fail/sshSign/disabled +2025/10/24 00:32:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_Authorize/fail/sshRenew/invalid-token +--- PASS: TestAuthority_Authorize (0.07s) + --- PASS: TestAuthority_Authorize/fail/sshRekey/invalid-token (0.00s) + --- PASS: TestAuthority_Authorize/fail/sshRekey/disabled (0.00s) --- PASS: TestAuthority_Authorize/ok/sshRekey (0.00s) + --- PASS: TestAuthority_Authorize/fail/sign/invalid-token (0.00s) + --- PASS: TestAuthority_Authorize/fail/sshRevoke/invalid-token (0.00s) + --- PASS: TestAuthority_Authorize/fail/unexpected-method (0.00s) + --- PASS: TestAuthority_Authorize/ok/sign (0.00s) + --- PASS: TestAuthority_Authorize/fail/sshRenew/disabled (0.01s) + --- PASS: TestAuthority_Authorize/default-to-signMethod (0.00s) --- PASS: TestAuthority_Authorize/fail/revoke/invalid-token (0.00s) --- PASS: TestAuthority_Authorize/ok/revoke (0.00s) + --- PASS: TestAuthority_Authorize/fail/sshSign/invalid-token (0.00s) --- PASS: TestAuthority_Authorize/ok/sshSign (0.00s) - --- PASS: TestAuthority_Authorize/fail/sshRenew/invalid-token (0.00s) - --- PASS: TestAuthority_Authorize/fail/sshRenew/disabled (0.00s) --- PASS: TestAuthority_Authorize/ok/sshRenew (0.00s) - --- PASS: TestAuthority_Authorize/fail/sshRevoke/invalid-token (0.00s) - --- PASS: TestAuthority_Authorize/fail/sshRekey/invalid-token (0.00s) - --- PASS: TestAuthority_Authorize/ok/sign (0.00s) - --- PASS: TestAuthority_Authorize/fail/sshSign/invalid-token (0.00s) - --- PASS: TestAuthority_Authorize/fail/sshRekey/disabled (0.00s) - --- PASS: TestAuthority_Authorize/fail/unexpected-method (0.00s) - --- PASS: TestAuthority_Authorize/fail/sshSign/disabled (0.00s) --- PASS: TestAuthority_Authorize/ok/sshRevoke (0.00s) + --- PASS: TestAuthority_Authorize/fail/sshSign/disabled (0.00s) + --- PASS: TestAuthority_Authorize/fail/sshRenew/invalid-token (0.00s) === RUN TestAuthority_authorizeRenew === RUN TestAuthority_authorizeRenew/fail/db.IsRevoked-error -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeRenew/fail/revoked -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeRenew/fail/load-provisioner -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeRenew/fail/provisioner-authorize-renewal-fail -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeRenew/ok -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeRenew/ok/from_db -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s --- PASS: TestAuthority_authorizeRenew (0.01s) - --- PASS: TestAuthority_authorizeRenew/fail/db.IsRevoked-error (0.01s) - --- PASS: TestAuthority_authorizeRenew/fail/revoked (0.01s) + --- PASS: TestAuthority_authorizeRenew/fail/db.IsRevoked-error (0.00s) + --- PASS: TestAuthority_authorizeRenew/fail/revoked (0.00s) --- PASS: TestAuthority_authorizeRenew/fail/load-provisioner (0.00s) --- PASS: TestAuthority_authorizeRenew/fail/provisioner-authorize-renewal-fail (0.00s) --- PASS: TestAuthority_authorizeRenew/ok (0.00s) --- PASS: TestAuthority_authorizeRenew/ok/from_db (0.00s) === RUN TestAuthority_authorizeSSHSign -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeSSHSign/fail/invalid-token === RUN TestAuthority_authorizeSSHSign/fail/invalid-subject === RUN TestAuthority_authorizeSSHSign/ok ---- PASS: TestAuthority_authorizeSSHSign (0.05s) +--- PASS: TestAuthority_authorizeSSHSign (0.06s) --- PASS: TestAuthority_authorizeSSHSign/fail/invalid-token (0.00s) --- PASS: TestAuthority_authorizeSSHSign/fail/invalid-subject (0.00s) --- PASS: TestAuthority_authorizeSSHSign/ok (0.00s) === RUN TestAuthority_authorizeSSHRenew -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_authorizeSSHRenew/ok/WithAuthorizeSSHRenewFunc -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeSSHRenew/fail/invalid-token === RUN TestAuthority_authorizeSSHRenew/fail/sshRenew-unimplemented-jwk-provisioner === RUN TestAuthority_authorizeSSHRenew/fail/WithAuthorizeSSHRenewFunc -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeSSHRenew/ok ---- PASS: TestAuthority_authorizeSSHRenew (0.05s) - --- PASS: TestAuthority_authorizeSSHRenew/ok/WithAuthorizeSSHRenewFunc (0.00s) +=== RUN TestAuthority_authorizeSSHRenew/ok/WithAuthorizeSSHRenewFunc +2025/10/24 00:32:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +--- PASS: TestAuthority_authorizeSSHRenew (0.09s) --- PASS: TestAuthority_authorizeSSHRenew/fail/invalid-token (0.00s) --- PASS: TestAuthority_authorizeSSHRenew/fail/sshRenew-unimplemented-jwk-provisioner (0.00s) --- PASS: TestAuthority_authorizeSSHRenew/fail/WithAuthorizeSSHRenewFunc (0.00s) --- PASS: TestAuthority_authorizeSSHRenew/ok (0.00s) + --- PASS: TestAuthority_authorizeSSHRenew/ok/WithAuthorizeSSHRenewFunc (0.00s) === RUN TestAuthority_authorizeSSHRevoke -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeSSHRevoke/fail/invalid-token === RUN TestAuthority_authorizeSSHRevoke/fail/invalid-subject === RUN TestAuthority_authorizeSSHRevoke/ok ---- PASS: TestAuthority_authorizeSSHRevoke (0.05s) +--- PASS: TestAuthority_authorizeSSHRevoke (0.06s) --- PASS: TestAuthority_authorizeSSHRevoke/fail/invalid-token (0.00s) --- PASS: TestAuthority_authorizeSSHRevoke/fail/invalid-subject (0.00s) --- PASS: TestAuthority_authorizeSSHRevoke/ok (0.00s) === RUN TestAuthority_authorizeSSHRekey -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_authorizeSSHRekey/fail/sshRekey-unimplemented-jwk-provisioner === RUN TestAuthority_authorizeSSHRekey/ok === RUN TestAuthority_authorizeSSHRekey/fail/invalid-token ---- PASS: TestAuthority_authorizeSSHRekey (0.04s) +--- PASS: TestAuthority_authorizeSSHRekey (0.07s) --- PASS: TestAuthority_authorizeSSHRekey/fail/sshRekey-unimplemented-jwk-provisioner (0.00s) --- PASS: TestAuthority_authorizeSSHRekey/ok (0.00s) --- PASS: TestAuthority_authorizeSSHRekey/fail/invalid-token (0.00s) === RUN TestAuthority_AuthorizeRenewToken -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_AuthorizeRenewToken/ok === RUN TestAuthority_AuthorizeRenewToken/ok_expired_cert === RUN TestAuthority_AuthorizeRenewToken/ok_provisioner_issuer @@ -4296,7 +4333,7 @@ === RUN TestAuthority_AuthorizeRenewToken/fail_token_iat#01 === RUN TestAuthority_AuthorizeRenewToken/fail_token_iat#02 === RUN TestAuthority_AuthorizeRenewToken/fail_token_aud ---- PASS: TestAuthority_AuthorizeRenewToken (0.06s) +--- PASS: TestAuthority_AuthorizeRenewToken (0.07s) --- PASS: TestAuthority_AuthorizeRenewToken/ok (0.00s) --- PASS: TestAuthority_AuthorizeRenewToken/ok_expired_cert (0.00s) --- PASS: TestAuthority_AuthorizeRenewToken/ok_provisioner_issuer (0.00s) @@ -4304,7 +4341,7 @@ --- PASS: TestAuthority_AuthorizeRenewToken/fail_token (0.00s) --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_reuse (0.00s) --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_signature (0.00s) - --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_provisioner (0.00s) + --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_provisioner (0.01s) --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_iss (0.00s) --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_sub (0.00s) --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_iat (0.00s) @@ -4312,23 +4349,23 @@ --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_iat#02 (0.00s) --- PASS: TestAuthority_AuthorizeRenewToken/fail_token_aud (0.00s) === RUN TestAuthority_checkPolicy -=== RUN TestAuthority_checkPolicy/ok/policy -=== RUN TestAuthority_checkPolicy/fail/NewX509PolicyEngine-error -=== RUN TestAuthority_checkPolicy/fail/currentAdmin-evaluation-error === RUN TestAuthority_checkPolicy/fail/currentAdmin-lockout === RUN TestAuthority_checkPolicy/fail/otherAdmins-evaluation-error === RUN TestAuthority_checkPolicy/fail/otherAdmins-lockout === RUN TestAuthority_checkPolicy/ok/no-policy === RUN TestAuthority_checkPolicy/ok/empty-policy +=== RUN TestAuthority_checkPolicy/ok/policy +=== RUN TestAuthority_checkPolicy/fail/NewX509PolicyEngine-error +=== RUN TestAuthority_checkPolicy/fail/currentAdmin-evaluation-error --- PASS: TestAuthority_checkPolicy (0.00s) - --- PASS: TestAuthority_checkPolicy/ok/policy (0.00s) - --- PASS: TestAuthority_checkPolicy/fail/NewX509PolicyEngine-error (0.00s) - --- PASS: TestAuthority_checkPolicy/fail/currentAdmin-evaluation-error (0.00s) --- PASS: TestAuthority_checkPolicy/fail/currentAdmin-lockout (0.00s) --- PASS: TestAuthority_checkPolicy/fail/otherAdmins-evaluation-error (0.00s) --- PASS: TestAuthority_checkPolicy/fail/otherAdmins-lockout (0.00s) --- PASS: TestAuthority_checkPolicy/ok/no-policy (0.00s) --- PASS: TestAuthority_checkPolicy/ok/empty-policy (0.00s) + --- PASS: TestAuthority_checkPolicy/ok/policy (0.00s) + --- PASS: TestAuthority_checkPolicy/fail/NewX509PolicyEngine-error (0.00s) + --- PASS: TestAuthority_checkPolicy/fail/currentAdmin-evaluation-error (0.00s) === RUN TestAuthority_reloadPolicyEngines === RUN TestAuthority_reloadPolicyEngines/fail/standalone-x509-policy === RUN TestAuthority_reloadPolicyEngines/fail/standalone-ssh-host-policy @@ -4349,7 +4386,7 @@ === RUN TestAuthority_reloadPolicyEngines/ok/admin-ssh-user-policy === RUN TestAuthority_reloadPolicyEngines/ok/admin-full-policy === RUN TestAuthority_reloadPolicyEngines/ok/admin-over-standalone ---- PASS: TestAuthority_reloadPolicyEngines (0.00s) +--- PASS: TestAuthority_reloadPolicyEngines (0.02s) --- PASS: TestAuthority_reloadPolicyEngines/fail/standalone-x509-policy (0.00s) --- PASS: TestAuthority_reloadPolicyEngines/fail/standalone-ssh-host-policy (0.00s) --- PASS: TestAuthority_reloadPolicyEngines/fail/standalone-ssh-user-policy (0.00s) @@ -4374,7 +4411,7 @@ === RUN TestAuthority_checkAuthorityPolicy/fail/adminDB.GetAdmins-error === RUN TestAuthority_checkAuthorityPolicy/fail/policy === RUN TestAuthority_checkAuthorityPolicy/ok ---- PASS: TestAuthority_checkAuthorityPolicy (0.01s) +--- PASS: TestAuthority_checkAuthorityPolicy (0.00s) --- PASS: TestAuthority_checkAuthorityPolicy/no_policy (0.00s) --- PASS: TestAuthority_checkAuthorityPolicy/fail/adminDB.GetAdmins-error (0.00s) --- PASS: TestAuthority_checkAuthorityPolicy/fail/policy (0.00s) @@ -4422,11 +4459,11 @@ --- PASS: TestAuthority_UpdateAuthorityPolicy/fail/a.reloadPolicyEngines (0.00s) --- PASS: TestAuthority_UpdateAuthorityPolicy/ok (0.00s) === RUN TestGetEncryptedKey -=== RUN TestGetEncryptedKey/fail-not-found === RUN TestGetEncryptedKey/ok +=== RUN TestGetEncryptedKey/fail-not-found --- PASS: TestGetEncryptedKey (0.00s) - --- PASS: TestGetEncryptedKey/fail-not-found (0.00s) --- PASS: TestGetEncryptedKey/ok (0.00s) + --- PASS: TestGetEncryptedKey/fail-not-found (0.00s) === RUN TestGetProvisioners === RUN TestGetProvisioners/ok === RUN TestGetProvisioners/ok/rsa @@ -4434,18 +4471,18 @@ --- PASS: TestGetProvisioners/ok (0.00s) --- PASS: TestGetProvisioners/ok/rsa (0.01s) === RUN TestAuthority_LoadProvisionerByCertificate -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_LoadProvisionerByCertificate/ok_from_certificate === RUN TestAuthority_LoadProvisionerByCertificate/ok_from_db === RUN TestAuthority_LoadProvisionerByCertificate/ok_from_admindb === RUN TestAuthority_LoadProvisionerByCertificate/fail_from_certificate === RUN TestAuthority_LoadProvisionerByCertificate/fail_from_db === RUN TestAuthority_LoadProvisionerByCertificate/fail_from_admindb ---- PASS: TestAuthority_LoadProvisionerByCertificate (0.27s) +--- PASS: TestAuthority_LoadProvisionerByCertificate (0.53s) --- PASS: TestAuthority_LoadProvisionerByCertificate/ok_from_certificate (0.00s) --- PASS: TestAuthority_LoadProvisionerByCertificate/ok_from_db (0.00s) --- PASS: TestAuthority_LoadProvisionerByCertificate/ok_from_admindb (0.00s) @@ -4456,7 +4493,7 @@ === RUN TestProvisionerWebhookToLinkedca/enriching_ssh_basic_auth === RUN TestProvisionerWebhookToLinkedca/authorizing_x509_bearer_auth === RUN TestProvisionerWebhookToLinkedca/empty ---- PASS: TestProvisionerWebhookToLinkedca (0.00s) +--- PASS: TestProvisionerWebhookToLinkedca (0.01s) --- PASS: TestProvisionerWebhookToLinkedca/enriching_ssh_basic_auth (0.00s) --- PASS: TestProvisionerWebhookToLinkedca/authorizing_x509_bearer_auth (0.00s) --- PASS: TestProvisionerWebhookToLinkedca/empty (0.00s) @@ -4473,7 +4510,7 @@ --- PASS: Test_isRAProvisioner/nil_ra (0.00s) --- PASS: Test_isRAProvisioner/not_ra (0.00s) === RUN TestRoot -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestRoot/success === RUN TestRoot/not-found === RUN TestRoot/invalid-stored-certificate @@ -4483,24 +4520,24 @@ --- PASS: TestRoot/invalid-stored-certificate (0.00s) === RUN TestAuthority_GetRootCertificate === RUN TestAuthority_GetRootCertificate/ok -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s --- PASS: TestAuthority_GetRootCertificate (0.00s) --- PASS: TestAuthority_GetRootCertificate/ok (0.00s) === RUN TestAuthority_GetRootCertificates === RUN TestAuthority_GetRootCertificates/ok -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s ---- PASS: TestAuthority_GetRootCertificates (0.00s) +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +--- PASS: TestAuthority_GetRootCertificates (0.01s) --- PASS: TestAuthority_GetRootCertificates/ok (0.00s) === RUN TestAuthority_GetRoots -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetRoots/ok --- PASS: TestAuthority_GetRoots (0.00s) --- PASS: TestAuthority_GetRoots/ok (0.00s) === RUN TestAuthority_GetFederation === RUN TestAuthority_GetFederation/ok -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetFederation/fail -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s --- PASS: TestAuthority_GetFederation (0.00s) --- PASS: TestAuthority_GetFederation/ok (0.00s) --- PASS: TestAuthority_GetFederation/fail (0.00s) @@ -4509,107 +4546,107 @@ === RUN TestAuthority_GetIntermediateCertificate/ok_multiple === RUN TestAuthority_GetIntermediateCertificate/ok_empty === RUN TestAuthority_GetIntermediateCertificate/ok_nil ---- PASS: TestAuthority_GetIntermediateCertificate (0.00s) +--- PASS: TestAuthority_GetIntermediateCertificate (0.02s) --- PASS: TestAuthority_GetIntermediateCertificate/ok_one (0.00s) --- PASS: TestAuthority_GetIntermediateCertificate/ok_multiple (0.00s) --- PASS: TestAuthority_GetIntermediateCertificate/ok_empty (0.00s) --- PASS: TestAuthority_GetIntermediateCertificate/ok_nil (0.00s) === RUN TestAuthority_initHostOnly -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s --- PASS: TestAuthority_initHostOnly (0.00s) === RUN TestAuthority_initUserOnly -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s ---- PASS: TestAuthority_initUserOnly (0.02s) +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +--- PASS: TestAuthority_initUserOnly (0.00s) === RUN TestAuthority_SignSSH === RUN TestAuthority_SignSSH/ok-user -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-host -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-user-only -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-host-only -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-opts-type-user -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-opts-type-host -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-opts-principals -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-opts-principals#01 -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-opts-valid-after -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-opts-valid-before -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-cert-validator -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-cert-modifier -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-opts-validator -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-opts-modifier -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-custom-template -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-enrich-template -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-user-policy -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/ok-host-policy -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-opts-type -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-cert-validator -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-cert-modifier -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-opts-validator -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-opts-modifier -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-bad-sign-options -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-no-user-key -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-no-host-key -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-bad-type -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-custom-template -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-custom-template-syntax-error-file -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-custom-template-syntax-value-file -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-user-policy -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-user-policy-with-host-cert -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-user-policy-with-bad-user -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-host-policy -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-host-policy-with-user-cert -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-host-policy-with-bad-host -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-enriching-webhooks -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSH/fail-authorizing-webhooks -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s ---- PASS: TestAuthority_SignSSH (0.05s) +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +--- PASS: TestAuthority_SignSSH (0.11s) --- PASS: TestAuthority_SignSSH/ok-user (0.00s) --- PASS: TestAuthority_SignSSH/ok-host (0.00s) --- PASS: TestAuthority_SignSSH/ok-user-only (0.00s) - --- PASS: TestAuthority_SignSSH/ok-host-only (0.01s) + --- PASS: TestAuthority_SignSSH/ok-host-only (0.00s) --- PASS: TestAuthority_SignSSH/ok-opts-type-user (0.00s) - --- PASS: TestAuthority_SignSSH/ok-opts-type-host (0.00s) - --- PASS: TestAuthority_SignSSH/ok-opts-principals (0.00s) + --- PASS: TestAuthority_SignSSH/ok-opts-type-host (0.02s) + --- PASS: TestAuthority_SignSSH/ok-opts-principals (0.01s) --- PASS: TestAuthority_SignSSH/ok-opts-principals#01 (0.00s) --- PASS: TestAuthority_SignSSH/ok-opts-valid-after (0.00s) --- PASS: TestAuthority_SignSSH/ok-opts-valid-before (0.00s) --- PASS: TestAuthority_SignSSH/ok-cert-validator (0.00s) - --- PASS: TestAuthority_SignSSH/ok-cert-modifier (0.00s) + --- PASS: TestAuthority_SignSSH/ok-cert-modifier (0.01s) --- PASS: TestAuthority_SignSSH/ok-opts-validator (0.00s) --- PASS: TestAuthority_SignSSH/ok-opts-modifier (0.00s) --- PASS: TestAuthority_SignSSH/ok-custom-template (0.00s) @@ -4625,7 +4662,7 @@ --- PASS: TestAuthority_SignSSH/fail-no-user-key (0.00s) --- PASS: TestAuthority_SignSSH/fail-no-host-key (0.00s) --- PASS: TestAuthority_SignSSH/fail-bad-type (0.00s) - --- PASS: TestAuthority_SignSSH/fail-custom-template (0.00s) + --- PASS: TestAuthority_SignSSH/fail-custom-template (0.02s) --- PASS: TestAuthority_SignSSH/fail-custom-template-syntax-error-file (0.00s) --- PASS: TestAuthority_SignSSH/fail-custom-template-syntax-value-file (0.00s) --- PASS: TestAuthority_SignSSH/fail-user-policy (0.00s) @@ -4638,86 +4675,86 @@ --- PASS: TestAuthority_SignSSH/fail-authorizing-webhooks (0.00s) === RUN TestAuthority_SignSSHAddUser === RUN TestAuthority_SignSSHAddUser/ok -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSHAddUser/ok-no-host-key -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSHAddUser/ok-custom-principal -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSHAddUser/ok-custom-command -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSHAddUser/ok-custom-principal-and-command -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSHAddUser/fail-no-user-key -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSHAddUser/fail-no-user-cert -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSHAddUser/fail-no-principals -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignSSHAddUser/fail-many-principals -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s ---- PASS: TestAuthority_SignSSHAddUser (0.01s) +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +--- PASS: TestAuthority_SignSSHAddUser (0.02s) --- PASS: TestAuthority_SignSSHAddUser/ok (0.00s) --- PASS: TestAuthority_SignSSHAddUser/ok-no-host-key (0.00s) --- PASS: TestAuthority_SignSSHAddUser/ok-custom-principal (0.00s) --- PASS: TestAuthority_SignSSHAddUser/ok-custom-command (0.00s) --- PASS: TestAuthority_SignSSHAddUser/ok-custom-principal-and-command (0.00s) - --- PASS: TestAuthority_SignSSHAddUser/fail-no-user-key (0.00s) - --- PASS: TestAuthority_SignSSHAddUser/fail-no-user-cert (0.00s) + --- PASS: TestAuthority_SignSSHAddUser/fail-no-user-key (0.01s) + --- PASS: TestAuthority_SignSSHAddUser/fail-no-user-cert (0.01s) --- PASS: TestAuthority_SignSSHAddUser/fail-no-principals (0.00s) --- PASS: TestAuthority_SignSSHAddUser/fail-many-principals (0.00s) === RUN TestAuthority_GetSSHRoots === RUN TestAuthority_GetSSHRoots/ok -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHRoots/nil -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s --- PASS: TestAuthority_GetSSHRoots (0.00s) --- PASS: TestAuthority_GetSSHRoots/ok (0.00s) --- PASS: TestAuthority_GetSSHRoots/nil (0.00s) === RUN TestAuthority_GetSSHFederation === RUN TestAuthority_GetSSHFederation/ok -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHFederation/nil -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s --- PASS: TestAuthority_GetSSHFederation (0.00s) --- PASS: TestAuthority_GetSSHFederation/ok (0.00s) --- PASS: TestAuthority_GetSSHFederation/nil (0.00s) === RUN TestAuthority_GetSSHConfig === RUN TestAuthority_GetSSHConfig/user -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/user#01 -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/host -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/host#01 -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/userWithData -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/hostWithData -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/userIncludesEmptyData -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/userIncludesWithoutTemplateVersion -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/userIncludesWithTemplateVersion -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/disabled -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/badType -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/userError -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/hostError -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/noTemplates -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/missingData -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHConfig/failError -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s ---- PASS: TestAuthority_GetSSHConfig (0.04s) +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +--- PASS: TestAuthority_GetSSHConfig (0.01s) --- PASS: TestAuthority_GetSSHConfig/user (0.00s) --- PASS: TestAuthority_GetSSHConfig/user#01 (0.00s) - --- PASS: TestAuthority_GetSSHConfig/host (0.01s) + --- PASS: TestAuthority_GetSSHConfig/host (0.00s) --- PASS: TestAuthority_GetSSHConfig/host#01 (0.00s) --- PASS: TestAuthority_GetSSHConfig/userWithData (0.00s) --- PASS: TestAuthority_GetSSHConfig/hostWithData (0.00s) @@ -4725,26 +4762,26 @@ --- PASS: TestAuthority_GetSSHConfig/userIncludesWithoutTemplateVersion (0.00s) --- PASS: TestAuthority_GetSSHConfig/userIncludesWithTemplateVersion (0.00s) --- PASS: TestAuthority_GetSSHConfig/disabled (0.00s) - --- PASS: TestAuthority_GetSSHConfig/badType (0.01s) + --- PASS: TestAuthority_GetSSHConfig/badType (0.00s) --- PASS: TestAuthority_GetSSHConfig/userError (0.00s) --- PASS: TestAuthority_GetSSHConfig/hostError (0.00s) --- PASS: TestAuthority_GetSSHConfig/noTemplates (0.00s) --- PASS: TestAuthority_GetSSHConfig/missingData (0.00s) - --- PASS: TestAuthority_GetSSHConfig/failError (0.01s) + --- PASS: TestAuthority_GetSSHConfig/failError (0.00s) === RUN TestAuthority_CheckSSHHost === RUN TestAuthority_CheckSSHHost/true -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_CheckSSHHost/false -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_CheckSSHHost/notImplemented -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_CheckSSHHost/notImplemented#01 -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_CheckSSHHost/internal -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_CheckSSHHost/internal#01 -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s ---- PASS: TestAuthority_CheckSSHHost (0.00s) +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +--- PASS: TestAuthority_CheckSSHHost (0.01s) --- PASS: TestAuthority_CheckSSHHost/true (0.00s) --- PASS: TestAuthority_CheckSSHHost/false (0.00s) --- PASS: TestAuthority_CheckSSHHost/notImplemented (0.00s) @@ -4780,44 +4817,44 @@ --- PASS: TestAuthority_GetSSHBastion/func_err (0.00s) --- PASS: TestAuthority_GetSSHBastion/error (0.00s) === RUN TestAuthority_GetSSHHosts -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHHosts/fail/getHostsFunc-fail === RUN TestAuthority_GetSSHHosts/ok/getHostsFunc-defined === RUN TestAuthority_GetSSHHosts/fail/db-get-fail -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetSSHHosts/ok -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s --- PASS: TestAuthority_GetSSHHosts (0.00s) --- PASS: TestAuthority_GetSSHHosts/fail/getHostsFunc-fail (0.00s) --- PASS: TestAuthority_GetSSHHosts/ok/getHostsFunc-defined (0.00s) --- PASS: TestAuthority_GetSSHHosts/fail/db-get-fail (0.00s) --- PASS: TestAuthority_GetSSHHosts/ok (0.00s) === RUN TestAuthority_RekeySSH -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_RekeySSH/fail/opts-type +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_RekeySSH/fail/db-store +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_RekeySSH/ok === RUN TestAuthority_RekeySSH/fail/old-cert-validBefore === RUN TestAuthority_RekeySSH/fail/old-cert-no-user-key === RUN TestAuthority_RekeySSH/fail/old-cert-no-host-key -=== RUN TestAuthority_RekeySSH/fail/unexpected-old-cert-type -=== RUN TestAuthority_RekeySSH/fail/db-store -2026/11/25 04:49:25 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_RekeySSH/ok === RUN TestAuthority_RekeySSH/fail/is-revoked -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_RekeySSH/fail/old-cert-validAfter +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_RekeySSH/fail/is-revoked-error -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s ---- PASS: TestAuthority_RekeySSH (0.00s) - --- PASS: TestAuthority_RekeySSH/fail/opts-type (0.00s) +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_RekeySSH/fail/opts-type +=== RUN TestAuthority_RekeySSH/fail/old-cert-validAfter +=== RUN TestAuthority_RekeySSH/fail/unexpected-old-cert-type +--- PASS: TestAuthority_RekeySSH (0.02s) + --- PASS: TestAuthority_RekeySSH/fail/db-store (0.00s) + --- PASS: TestAuthority_RekeySSH/ok (0.00s) --- PASS: TestAuthority_RekeySSH/fail/old-cert-validBefore (0.00s) --- PASS: TestAuthority_RekeySSH/fail/old-cert-no-user-key (0.00s) --- PASS: TestAuthority_RekeySSH/fail/old-cert-no-host-key (0.00s) - --- PASS: TestAuthority_RekeySSH/fail/unexpected-old-cert-type (0.00s) - --- PASS: TestAuthority_RekeySSH/fail/db-store (0.00s) - --- PASS: TestAuthority_RekeySSH/ok (0.00s) --- PASS: TestAuthority_RekeySSH/fail/is-revoked (0.00s) + --- PASS: TestAuthority_RekeySSH/fail/is-revoked-error (0.01s) + --- PASS: TestAuthority_RekeySSH/fail/opts-type (0.00s) --- PASS: TestAuthority_RekeySSH/fail/old-cert-validAfter (0.00s) - --- PASS: TestAuthority_RekeySSH/fail/is-revoked-error (0.00s) + --- PASS: TestAuthority_RekeySSH/fail/unexpected-old-cert-type (0.00s) === RUN TestIsValidForAddUser === RUN TestIsValidForAddUser/ok === RUN TestIsValidForAddUser/ok_oidc @@ -4835,150 +4872,150 @@ --- PASS: TestIsValidForAddUser/fail_no_principals (0.00s) --- PASS: TestIsValidForAddUser/fail_extra_principals (0.00s) === RUN TestAuthority_SignWithContext -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/ok -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/fail_invalid_signature -=== RUN TestAuthority_SignWithContext/fail_provisioner_duration_claim -=== RUN TestAuthority_SignWithContext/fail_rsa_key_too_short -=== RUN TestAuthority_SignWithContext/fail_with_provisioner_enforcer -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/fail_with_policy -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/ok_with_policy -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/ok_with_cnf -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/fail_merge_default_ASN1DN -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/fail_create_cert -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/fail_bad_JSON_syntax_template_file -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/fail_enriching_webhooks -=== RUN TestAuthority_SignWithContext/fail_authorizing_webhooks -=== RUN TestAuthority_SignWithContext/ok_with_custom_enforcer -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/fail_with_custom_enforcer -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignWithContext/fail_with_cnf -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignWithContext/ok_with_enforced_modifier -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/ok_with_custom_template -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/ok_with_enriching_webhook -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/ok/csr_with_no_template_critical_SAN_extension -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/ok_with_policy +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignWithContext/ok_with_attestation_data -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/ok_with_cnf +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignWithContext/fail_invalid_extra_option +=== RUN TestAuthority_SignWithContext/fail_merge_default_ASN1DN +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/fail_provisioner_duration_claim === RUN TestAuthority_SignWithContext/fail_validate_sans_when_adding_common_name_not_in_claims +=== RUN TestAuthority_SignWithContext/fail_bad_JSON_value_template_file +2025/10/24 00:32:27 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/fail_with_custom_enforcer +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/fail_enriching_webhooks +=== RUN TestAuthority_SignWithContext/ok_with_enriching_webhook +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/fail_create_cert +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/fail_authorizing_webhooks +=== RUN TestAuthority_SignWithContext/ok +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/fail_invalid_signature +=== RUN TestAuthority_SignWithContext/fail_rsa_key_too_short === RUN TestAuthority_SignWithContext/fail_store_cert_in_db -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_SignWithContext/fail_custom_template -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_SignWithContext/fail_bad_JSON_value_template_file -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s ---- PASS: TestAuthority_SignWithContext (0.13s) - --- PASS: TestAuthority_SignWithContext/ok (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_invalid_signature (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_provisioner_duration_claim (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_rsa_key_too_short (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_with_provisioner_enforcer (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_with_policy (0.00s) +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/fail_bad_JSON_syntax_template_file +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/ok_with_custom_template +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/ok/csr_with_no_template_critical_SAN_extension +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/ok_with_custom_enforcer +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/fail_with_provisioner_enforcer +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_SignWithContext/fail_with_policy +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +--- PASS: TestAuthority_SignWithContext (0.23s) + --- PASS: TestAuthority_SignWithContext/fail_with_cnf (0.00s) + --- PASS: TestAuthority_SignWithContext/ok_with_enforced_modifier (0.03s) --- PASS: TestAuthority_SignWithContext/ok_with_policy (0.00s) - --- PASS: TestAuthority_SignWithContext/ok_with_cnf (0.00s) + --- PASS: TestAuthority_SignWithContext/ok_with_attestation_data (0.01s) + --- PASS: TestAuthority_SignWithContext/ok_with_cnf (0.01s) + --- PASS: TestAuthority_SignWithContext/fail_invalid_extra_option (0.00s) --- PASS: TestAuthority_SignWithContext/fail_merge_default_ASN1DN (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_create_cert (0.01s) - --- PASS: TestAuthority_SignWithContext/fail_bad_JSON_syntax_template_file (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_provisioner_duration_claim (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_validate_sans_when_adding_common_name_not_in_claims (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_bad_JSON_value_template_file (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_with_custom_enforcer (0.01s) --- PASS: TestAuthority_SignWithContext/fail_enriching_webhooks (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_authorizing_webhooks (0.00s) - --- PASS: TestAuthority_SignWithContext/ok_with_custom_enforcer (0.01s) - --- PASS: TestAuthority_SignWithContext/fail_with_custom_enforcer (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_with_cnf (0.00s) - --- PASS: TestAuthority_SignWithContext/ok_with_enforced_modifier (0.01s) - --- PASS: TestAuthority_SignWithContext/ok_with_custom_template (0.00s) --- PASS: TestAuthority_SignWithContext/ok_with_enriching_webhook (0.01s) - --- PASS: TestAuthority_SignWithContext/ok/csr_with_no_template_critical_SAN_extension (0.00s) - --- PASS: TestAuthority_SignWithContext/ok_with_attestation_data (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_invalid_extra_option (0.00s) - --- PASS: TestAuthority_SignWithContext/fail_validate_sans_when_adding_common_name_not_in_claims (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_create_cert (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_authorizing_webhooks (0.00s) + --- PASS: TestAuthority_SignWithContext/ok (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_invalid_signature (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_rsa_key_too_short (0.00s) --- PASS: TestAuthority_SignWithContext/fail_store_cert_in_db (0.00s) --- PASS: TestAuthority_SignWithContext/fail_custom_template (0.01s) - --- PASS: TestAuthority_SignWithContext/fail_bad_JSON_value_template_file (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_bad_JSON_syntax_template_file (0.01s) + --- PASS: TestAuthority_SignWithContext/ok_with_custom_template (0.01s) + --- PASS: TestAuthority_SignWithContext/ok/csr_with_no_template_critical_SAN_extension (0.00s) + --- PASS: TestAuthority_SignWithContext/ok_with_custom_enforcer (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_with_provisioner_enforcer (0.00s) + --- PASS: TestAuthority_SignWithContext/fail_with_policy (0.00s) === RUN TestAuthority_Renew -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Renew/fail/create-cert -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Renew/fail/unauthorized === RUN TestAuthority_Renew/fail/WithAuthorizeRenewFunc -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Renew/ok === RUN TestAuthority_Renew/ok/WithExtraNames === RUN TestAuthority_Renew/ok/success-new-intermediate -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Renew/ok/WithAuthorizeRenewFunc -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s ---- PASS: TestAuthority_Renew (0.03s) +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +--- PASS: TestAuthority_Renew (0.02s) --- PASS: TestAuthority_Renew/fail/create-cert (0.00s) --- PASS: TestAuthority_Renew/fail/unauthorized (0.00s) --- PASS: TestAuthority_Renew/fail/WithAuthorizeRenewFunc (0.00s) - --- PASS: TestAuthority_Renew/ok (0.01s) - --- PASS: TestAuthority_Renew/ok/WithExtraNames (0.00s) - --- PASS: TestAuthority_Renew/ok/success-new-intermediate (0.01s) - --- PASS: TestAuthority_Renew/ok/WithAuthorizeRenewFunc (0.01s) + --- PASS: TestAuthority_Renew/ok (0.00s) + --- PASS: TestAuthority_Renew/ok/WithExtraNames (0.01s) + --- PASS: TestAuthority_Renew/ok/success-new-intermediate (0.00s) + --- PASS: TestAuthority_Renew/ok/WithAuthorizeRenewFunc (0.00s) === RUN TestAuthority_Rekey -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_Rekey/fail/unauthorized === RUN TestAuthority_Rekey/ok/renew === RUN TestAuthority_Rekey/ok/rekey === RUN TestAuthority_Rekey/ok/renew/success-new-intermediate -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Rekey/fail/create-cert -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_Rekey/fail/unauthorized ---- PASS: TestAuthority_Rekey (0.02s) +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +--- PASS: TestAuthority_Rekey (0.03s) + --- PASS: TestAuthority_Rekey/fail/unauthorized (0.00s) --- PASS: TestAuthority_Rekey/ok/renew (0.00s) --- PASS: TestAuthority_Rekey/ok/rekey (0.00s) - --- PASS: TestAuthority_Rekey/ok/renew/success-new-intermediate (0.01s) + --- PASS: TestAuthority_Rekey/ok/renew/success-new-intermediate (0.02s) --- PASS: TestAuthority_Rekey/fail/create-cert (0.00s) - --- PASS: TestAuthority_Rekey/fail/unauthorized (0.00s) === RUN TestAuthority_GetTLSOptions === RUN TestAuthority_GetTLSOptions/default -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetTLSOptions/non-default -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s --- PASS: TestAuthority_GetTLSOptions (0.00s) --- PASS: TestAuthority_GetTLSOptions/default (0.00s) --- PASS: TestAuthority_GetTLSOptions/non-default (0.00s) === RUN TestAuthority_Revoke -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_Revoke/ok/token -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_Revoke/ok/mTLS-no-provisioner -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_Revoke/ok/mTLS +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Revoke/ok/ACME -=== RUN TestAuthority_Revoke/fail/token/authorizeRevoke_error +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_Revoke/ok/ssh === RUN TestAuthority_Revoke/fail/nil-db -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Revoke/fail/already-revoked -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_Revoke/ok/mTLS -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -=== RUN TestAuthority_Revoke/ok/ssh -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_Revoke/ok/token +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +=== RUN TestAuthority_Revoke/ok/mTLS-no-provisioner +=== RUN TestAuthority_Revoke/fail/token/authorizeRevoke_error +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_Revoke/fail/db-revoke ---- PASS: TestAuthority_Revoke (0.03s) - --- PASS: TestAuthority_Revoke/ok/token (0.00s) - --- PASS: TestAuthority_Revoke/ok/mTLS-no-provisioner (0.00s) +--- PASS: TestAuthority_Revoke (0.06s) + --- PASS: TestAuthority_Revoke/ok/mTLS (0.00s) --- PASS: TestAuthority_Revoke/ok/ACME (0.00s) - --- PASS: TestAuthority_Revoke/fail/token/authorizeRevoke_error (0.00s) + --- PASS: TestAuthority_Revoke/ok/ssh (0.00s) --- PASS: TestAuthority_Revoke/fail/nil-db (0.00s) --- PASS: TestAuthority_Revoke/fail/already-revoked (0.00s) - --- PASS: TestAuthority_Revoke/ok/mTLS (0.00s) - --- PASS: TestAuthority_Revoke/ok/ssh (0.00s) + --- PASS: TestAuthority_Revoke/ok/token (0.00s) + --- PASS: TestAuthority_Revoke/ok/mTLS-no-provisioner (0.00s) + --- PASS: TestAuthority_Revoke/fail/token/authorizeRevoke_error (0.00s) --- PASS: TestAuthority_Revoke/fail/db-revoke (0.00s) === RUN TestAuthority_constraints === RUN TestAuthority_constraints/ok_dns @@ -4993,12 +5030,12 @@ === RUN TestAuthority_constraints/fail_excluded_emails === RUN TestAuthority_constraints/fail_permitted_uris === RUN TestAuthority_constraints/fail_excluded_uris ---- PASS: TestAuthority_constraints (0.05s) +--- PASS: TestAuthority_constraints (0.08s) --- PASS: TestAuthority_constraints/ok_dns (0.01s) - --- PASS: TestAuthority_constraints/ok_ip (0.00s) - --- PASS: TestAuthority_constraints/ok_email (0.00s) - --- PASS: TestAuthority_constraints/ok_uri (0.01s) - --- PASS: TestAuthority_constraints/fail_permitted_dns (0.00s) + --- PASS: TestAuthority_constraints/ok_ip (0.01s) + --- PASS: TestAuthority_constraints/ok_email (0.01s) + --- PASS: TestAuthority_constraints/ok_uri (0.00s) + --- PASS: TestAuthority_constraints/fail_permitted_dns (0.01s) --- PASS: TestAuthority_constraints/fail_excluded_dns (0.00s) --- PASS: TestAuthority_constraints/fail_permitted_ips (0.00s) --- PASS: TestAuthority_constraints/fail_excluded_ips (0.00s) @@ -5007,23 +5044,23 @@ --- PASS: TestAuthority_constraints/fail_permitted_uris (0.00s) --- PASS: TestAuthority_constraints/fail_excluded_uris (0.00s) === RUN TestAuthority_CRL -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_CRL/fail/empty-crl -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_CRL/ok/crl-full ---- PASS: TestAuthority_CRL (0.15s) +--- PASS: TestAuthority_CRL (0.30s) --- PASS: TestAuthority_CRL/fail/empty-crl (0.00s) --- PASS: TestAuthority_CRL/ok/crl-full (0.00s) === RUN TestAuthority_GetX509Signer -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s -2026/11/25 04:49:26 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:32:28 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN TestAuthority_GetX509Signer/ok === RUN TestAuthority_GetX509Signer/fail --- PASS: TestAuthority_GetX509Signer (0.00s) --- PASS: TestAuthority_GetX509Signer/ok (0.00s) --- PASS: TestAuthority_GetX509Signer/fail (0.00s) PASS -ok github.com/smallstep/certificates/authority 1.468s +ok github.com/smallstep/certificates/authority 2.240s ? github.com/smallstep/certificates/authority/admin [no test files] === RUN TestHandler_requireEABEnabled === RUN TestHandler_requireEABEnabled/fail/prov.GetDetails @@ -5086,7 +5123,7 @@ === RUN TestUpdateAdminRequest_Validate === RUN TestUpdateAdminRequest_Validate/fail/invalid-type === RUN TestUpdateAdminRequest_Validate/ok ---- PASS: TestUpdateAdminRequest_Validate (0.00s) +--- PASS: TestUpdateAdminRequest_Validate (0.01s) --- PASS: TestUpdateAdminRequest_Validate/fail/invalid-type (0.00s) --- PASS: TestUpdateAdminRequest_Validate/ok (0.00s) === RUN TestHandler_GetAdmin @@ -5116,11 +5153,11 @@ --- PASS: TestHandler_CreateAdmin/fail/auth.StoreAdmin (0.00s) --- PASS: TestHandler_CreateAdmin/ok (0.00s) === RUN TestHandler_DeleteAdmin -=== RUN TestHandler_DeleteAdmin/ok === RUN TestHandler_DeleteAdmin/fail/auth.RemoveAdmin +=== RUN TestHandler_DeleteAdmin/ok --- PASS: TestHandler_DeleteAdmin (0.00s) - --- PASS: TestHandler_DeleteAdmin/ok (0.00s) --- PASS: TestHandler_DeleteAdmin/fail/auth.RemoveAdmin (0.00s) + --- PASS: TestHandler_DeleteAdmin/ok (0.00s) === RUN TestHandler_UpdateAdmin === RUN TestHandler_UpdateAdmin/fail/ReadJSON === RUN TestHandler_UpdateAdmin/fail/validate @@ -5146,13 +5183,13 @@ --- PASS: TestHandler_extractAuthorizeTokenAdmin/fail/auth.AuthorizeAdminToken (0.00s) --- PASS: TestHandler_extractAuthorizeTokenAdmin/ok (0.00s) === RUN TestHandler_loadProvisionerByName +=== RUN TestHandler_loadProvisionerByName/fail/auth.LoadProvisionerByName === RUN TestHandler_loadProvisionerByName/fail/db.GetProvisioner === RUN TestHandler_loadProvisionerByName/ok -=== RUN TestHandler_loadProvisionerByName/fail/auth.LoadProvisionerByName --- PASS: TestHandler_loadProvisionerByName (0.00s) + --- PASS: TestHandler_loadProvisionerByName/fail/auth.LoadProvisionerByName (0.00s) --- PASS: TestHandler_loadProvisionerByName/fail/db.GetProvisioner (0.00s) --- PASS: TestHandler_loadProvisionerByName/ok (0.00s) - --- PASS: TestHandler_loadProvisionerByName/fail/auth.LoadProvisionerByName (0.00s) === RUN TestHandler_checkAction === RUN TestHandler_checkAction/standalone-nosql-supported === RUN TestHandler_checkAction/standalone-nosql-not-supported @@ -5162,21 +5199,21 @@ --- PASS: TestHandler_checkAction/standalone-nosql-not-supported (0.00s) --- PASS: TestHandler_checkAction/standalone-no-nosql-not-supported (0.00s) === RUN TestHandler_loadExternalAccountKey +=== RUN TestHandler_loadExternalAccountKey/fail/keyID-not-found-error +=== RUN TestHandler_loadExternalAccountKey/fail/keyID-error +=== RUN TestHandler_loadExternalAccountKey/fail/reference-not-found-error === RUN TestHandler_loadExternalAccountKey/fail/reference-error === RUN TestHandler_loadExternalAccountKey/fail/no-key === RUN TestHandler_loadExternalAccountKey/ok/keyID === RUN TestHandler_loadExternalAccountKey/ok/reference -=== RUN TestHandler_loadExternalAccountKey/fail/keyID-not-found-error -=== RUN TestHandler_loadExternalAccountKey/fail/keyID-error -=== RUN TestHandler_loadExternalAccountKey/fail/reference-not-found-error ---- PASS: TestHandler_loadExternalAccountKey (0.00s) +--- PASS: TestHandler_loadExternalAccountKey (0.01s) + --- PASS: TestHandler_loadExternalAccountKey/fail/keyID-not-found-error (0.01s) + --- PASS: TestHandler_loadExternalAccountKey/fail/keyID-error (0.00s) + --- PASS: TestHandler_loadExternalAccountKey/fail/reference-not-found-error (0.00s) --- PASS: TestHandler_loadExternalAccountKey/fail/reference-error (0.00s) --- PASS: TestHandler_loadExternalAccountKey/fail/no-key (0.00s) --- PASS: TestHandler_loadExternalAccountKey/ok/keyID (0.00s) --- PASS: TestHandler_loadExternalAccountKey/ok/reference (0.00s) - --- PASS: TestHandler_loadExternalAccountKey/fail/keyID-not-found-error (0.00s) - --- PASS: TestHandler_loadExternalAccountKey/fail/keyID-error (0.00s) - --- PASS: TestHandler_loadExternalAccountKey/fail/reference-not-found-error (0.00s) === RUN TestPolicyAdminResponder_GetAuthorityPolicy === RUN TestPolicyAdminResponder_GetAuthorityPolicy/fail/linkedca === RUN TestPolicyAdminResponder_GetAuthorityPolicy/fail/auth.GetAuthorityPolicy-error @@ -5188,25 +5225,24 @@ --- PASS: TestPolicyAdminResponder_GetAuthorityPolicy/fail/auth.GetAuthorityPolicy-not-found (0.00s) --- PASS: TestPolicyAdminResponder_GetAuthorityPolicy/ok (0.00s) === RUN TestPolicyAdminResponder_CreateAuthorityPolicy -=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-policy-admin-lockout-error -=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-error -=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/ok -=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/linkedca === RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/auth.GetAuthorityPolicy-error === RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/existing-policy === RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/read.ProtoJSON === RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/validatePolicy +=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-policy-admin-lockout-error +=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-error +=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/ok +=== RUN TestPolicyAdminResponder_CreateAuthorityPolicy/fail/linkedca --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-policy-admin-lockout-error (0.00s) - --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-error (0.00s) - --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/ok (0.00s) - --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/auth.GetAuthorityPolicy-error (0.00s) --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/existing-policy (0.00s) --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/read.ProtoJSON (0.00s) --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/validatePolicy (0.00s) + --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-policy-admin-lockout-error (0.00s) + --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/CreateAuthorityPolicy-error (0.00s) + --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/ok (0.00s) + --- PASS: TestPolicyAdminResponder_CreateAuthorityPolicy/fail/linkedca (0.00s) === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy -=== RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/ok === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/linkedca === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/auth.GetAuthorityPolicy-error === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/no-existing-policy @@ -5214,15 +5250,16 @@ === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/validatePolicy === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-policy-admin-lockout-error === RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-error ---- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/ok (0.00s) +=== RUN TestPolicyAdminResponder_UpdateAuthorityPolicy/ok +--- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy (0.01s) --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/auth.GetAuthorityPolicy-error (0.00s) --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/no-existing-policy (0.00s) --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/read.ProtoJSON (0.00s) --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/validatePolicy (0.00s) --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-policy-admin-lockout-error (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-error (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/fail/UpdateAuthorityPolicy-error (0.01s) + --- PASS: TestPolicyAdminResponder_UpdateAuthorityPolicy/ok (0.00s) === RUN TestPolicyAdminResponder_DeleteAuthorityPolicy === RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/linkedca === RUN TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/auth.GetAuthorityPolicy-error @@ -5236,13 +5273,13 @@ --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/fail/auth.RemoveAuthorityPolicy-error (0.00s) --- PASS: TestPolicyAdminResponder_DeleteAuthorityPolicy/ok (0.00s) === RUN TestPolicyAdminResponder_GetProvisionerPolicy -=== RUN TestPolicyAdminResponder_GetProvisionerPolicy/ok === RUN TestPolicyAdminResponder_GetProvisionerPolicy/fail/linkedca === RUN TestPolicyAdminResponder_GetProvisionerPolicy/fail/prov-no-policy ---- PASS: TestPolicyAdminResponder_GetProvisionerPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_GetProvisionerPolicy/ok (0.00s) +=== RUN TestPolicyAdminResponder_GetProvisionerPolicy/ok +--- PASS: TestPolicyAdminResponder_GetProvisionerPolicy (0.01s) --- PASS: TestPolicyAdminResponder_GetProvisionerPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_GetProvisionerPolicy/fail/prov-no-policy (0.00s) + --- PASS: TestPolicyAdminResponder_GetProvisionerPolicy/ok (0.00s) === RUN TestPolicyAdminResponder_CreateProvisionerPolicy === RUN TestPolicyAdminResponder_CreateProvisionerPolicy/fail/read.ProtoJSON === RUN TestPolicyAdminResponder_CreateProvisionerPolicy/fail/validatePolicy @@ -5260,67 +5297,67 @@ --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_CreateProvisionerPolicy/fail/existing-policy (0.00s) === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy -=== RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/read.ProtoJSON === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/validatePolicy === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/auth.UpdateProvisioner-policy-admin-lockout-error === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/auth.UpdateProvisioner-error === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/ok === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/linkedca === RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/no-existing-policy +=== RUN TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/read.ProtoJSON --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/read.ProtoJSON (0.00s) --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/validatePolicy (0.00s) --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/auth.UpdateProvisioner-policy-admin-lockout-error (0.00s) --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/auth.UpdateProvisioner-error (0.00s) --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/ok (0.00s) --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/no-existing-policy (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateProvisionerPolicy/fail/read.ProtoJSON (0.00s) === RUN TestPolicyAdminResponder_DeleteProvisionerPolicy -=== RUN TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/auth.UpdateProvisioner-error === RUN TestPolicyAdminResponder_DeleteProvisionerPolicy/ok === RUN TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/linkedca === RUN TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/no-existing-policy ---- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/auth.UpdateProvisioner-error (0.00s) +=== RUN TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/auth.UpdateProvisioner-error +--- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy (0.01s) --- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy/ok (0.00s) --- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/no-existing-policy (0.00s) + --- PASS: TestPolicyAdminResponder_DeleteProvisionerPolicy/fail/auth.UpdateProvisioner-error (0.00s) === RUN TestPolicyAdminResponder_GetACMEAccountPolicy -=== RUN TestPolicyAdminResponder_GetACMEAccountPolicy/ok === RUN TestPolicyAdminResponder_GetACMEAccountPolicy/fail/linkedca === RUN TestPolicyAdminResponder_GetACMEAccountPolicy/fail/no-policy +=== RUN TestPolicyAdminResponder_GetACMEAccountPolicy/ok --- PASS: TestPolicyAdminResponder_GetACMEAccountPolicy (0.00s) - --- PASS: TestPolicyAdminResponder_GetACMEAccountPolicy/ok (0.00s) --- PASS: TestPolicyAdminResponder_GetACMEAccountPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_GetACMEAccountPolicy/fail/no-policy (0.00s) + --- PASS: TestPolicyAdminResponder_GetACMEAccountPolicy/ok (0.00s) === RUN TestPolicyAdminResponder_CreateACMEAccountPolicy +=== RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/linkedca +=== RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/existing-policy === RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/read.ProtoJSON === RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/validatePolicy === RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error === RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/ok -=== RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/linkedca -=== RUN TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/existing-policy --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy (0.00s) + --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/linkedca (0.00s) + --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/existing-policy (0.00s) --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/read.ProtoJSON (0.00s) --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/validatePolicy (0.00s) --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error (0.00s) --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/ok (0.00s) - --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/linkedca (0.00s) - --- PASS: TestPolicyAdminResponder_CreateACMEAccountPolicy/fail/existing-policy (0.00s) === RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy +=== RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/linkedca === RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/no-existing-policy === RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/read.ProtoJSON === RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/validatePolicy === RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error === RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/ok -=== RUN TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/linkedca --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy (0.00s) + --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/linkedca (0.00s) --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/no-existing-policy (0.00s) --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/read.ProtoJSON (0.00s) --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/validatePolicy (0.00s) --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/acmeDB.UpdateExternalAccountKey-error (0.00s) --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/ok (0.00s) - --- PASS: TestPolicyAdminResponder_UpdateACMEAccountPolicy/fail/linkedca (0.00s) === RUN TestPolicyAdminResponder_DeleteACMEAccountPolicy === RUN TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/linkedca === RUN TestPolicyAdminResponder_DeleteACMEAccountPolicy/fail/no-existing-policy @@ -5358,11 +5395,11 @@ === RUN TestHandler_GetProvisioner/fail/auth.LoadProvisionerByName === RUN TestHandler_GetProvisioner/fail/db.GetProvisioner === RUN TestHandler_GetProvisioner/ok ---- PASS: TestHandler_GetProvisioner (0.00s) +--- PASS: TestHandler_GetProvisioner (0.01s) --- PASS: TestHandler_GetProvisioner/fail/auth.LoadProvisionerByID (0.00s) --- PASS: TestHandler_GetProvisioner/fail/auth.LoadProvisionerByName (0.00s) --- PASS: TestHandler_GetProvisioner/fail/db.GetProvisioner (0.00s) - --- PASS: TestHandler_GetProvisioner/ok (0.00s) + --- PASS: TestHandler_GetProvisioner/ok (0.01s) === RUN TestHandler_GetProvisioners === RUN TestHandler_GetProvisioners/fail/parse-cursor === RUN TestHandler_GetProvisioners/fail/auth.GetProvisioners @@ -5382,38 +5419,38 @@ --- PASS: TestHandler_CreateProvisioner/fail/auth.StoreProvisioner (0.00s) --- PASS: TestHandler_CreateProvisioner/ok (0.00s) === RUN TestHandler_DeleteProvisioner -=== RUN TestHandler_DeleteProvisioner/fail/auth.LoadProvisionerByID === RUN TestHandler_DeleteProvisioner/fail/auth.LoadProvisionerByName === RUN TestHandler_DeleteProvisioner/fail/auth.RemoveProvisioner === RUN TestHandler_DeleteProvisioner/ok +=== RUN TestHandler_DeleteProvisioner/fail/auth.LoadProvisionerByID --- PASS: TestHandler_DeleteProvisioner (0.00s) - --- PASS: TestHandler_DeleteProvisioner/fail/auth.LoadProvisionerByID (0.00s) --- PASS: TestHandler_DeleteProvisioner/fail/auth.LoadProvisionerByName (0.00s) --- PASS: TestHandler_DeleteProvisioner/fail/auth.RemoveProvisioner (0.00s) --- PASS: TestHandler_DeleteProvisioner/ok (0.00s) + --- PASS: TestHandler_DeleteProvisioner/fail/auth.LoadProvisionerByID (0.00s) === RUN TestHandler_UpdateProvisioner === RUN TestHandler_UpdateProvisioner/fail/readProtoJSON === RUN TestHandler_UpdateProvisioner/fail/auth.LoadProvisionerByName === RUN TestHandler_UpdateProvisioner/fail/db.GetProvisioner +=== RUN TestHandler_UpdateProvisioner/fail/change-id-error === RUN TestHandler_UpdateProvisioner/fail/change-type-error -=== RUN TestHandler_UpdateProvisioner/fail/change-deletedAt-error === RUN TestHandler_UpdateProvisioner/fail/auth.UpdateProvisioner === RUN TestHandler_UpdateProvisioner/ok -=== RUN TestHandler_UpdateProvisioner/fail/change-id-error === RUN TestHandler_UpdateProvisioner/fail/change-authority-id-error === RUN TestHandler_UpdateProvisioner/fail/change-createdAt-error +=== RUN TestHandler_UpdateProvisioner/fail/change-deletedAt-error === RUN TestHandler_UpdateProvisioner/fail/validateTemplates ---- PASS: TestHandler_UpdateProvisioner (0.00s) +--- PASS: TestHandler_UpdateProvisioner (0.01s) --- PASS: TestHandler_UpdateProvisioner/fail/readProtoJSON (0.00s) --- PASS: TestHandler_UpdateProvisioner/fail/auth.LoadProvisionerByName (0.00s) --- PASS: TestHandler_UpdateProvisioner/fail/db.GetProvisioner (0.00s) + --- PASS: TestHandler_UpdateProvisioner/fail/change-id-error (0.00s) --- PASS: TestHandler_UpdateProvisioner/fail/change-type-error (0.00s) - --- PASS: TestHandler_UpdateProvisioner/fail/change-deletedAt-error (0.00s) --- PASS: TestHandler_UpdateProvisioner/fail/auth.UpdateProvisioner (0.00s) --- PASS: TestHandler_UpdateProvisioner/ok (0.00s) - --- PASS: TestHandler_UpdateProvisioner/fail/change-id-error (0.00s) --- PASS: TestHandler_UpdateProvisioner/fail/change-authority-id-error (0.00s) --- PASS: TestHandler_UpdateProvisioner/fail/change-createdAt-error (0.00s) + --- PASS: TestHandler_UpdateProvisioner/fail/change-deletedAt-error (0.00s) --- PASS: TestHandler_UpdateProvisioner/fail/validateTemplates (0.00s) === RUN Test_validateTemplates === RUN Test_validateTemplates/ok @@ -5432,76 +5469,76 @@ --- PASS: Test_validateTemplates/fail/ssh-template-unknown-function (0.00s) --- PASS: Test_validateTemplates/fail/ssh-template-data (0.00s) === RUN TestWebhookAdminResponder_CreateProvisionerWebhook -=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/read.ProtoJSON -=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/missing-name -=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/relative-url -=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/http-url -=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/ok === RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/existing-webhook === RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/missing-url -=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/basic-auth-in-url +=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/relative-url +=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/http-url === RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/secret-in-request === RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/unsupported-webhook-kind +=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/read.ProtoJSON +=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/missing-name +=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/basic-auth-in-url === RUN TestWebhookAdminResponder_CreateProvisionerWebhook/fail/auth.UpdateProvisioner-error +=== RUN TestWebhookAdminResponder_CreateProvisionerWebhook/ok --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook (0.00s) - --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/read.ProtoJSON (0.00s) - --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/missing-name (0.00s) - --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/relative-url (0.00s) - --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/http-url (0.00s) - --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/ok (0.00s) --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/existing-webhook (0.00s) --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/missing-url (0.00s) - --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/basic-auth-in-url (0.00s) + --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/relative-url (0.00s) + --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/http-url (0.00s) --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/secret-in-request (0.00s) --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/unsupported-webhook-kind (0.00s) + --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/read.ProtoJSON (0.00s) + --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/missing-name (0.00s) + --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/basic-auth-in-url (0.00s) --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/fail/auth.UpdateProvisioner-error (0.00s) + --- PASS: TestWebhookAdminResponder_CreateProvisionerWebhook/ok (0.00s) === RUN TestWebhookAdminResponder_DeleteProvisionerWebhook +=== RUN TestWebhookAdminResponder_DeleteProvisionerWebhook/fail/auth.UpdateProvisioner-error === RUN TestWebhookAdminResponder_DeleteProvisionerWebhook/ok/not-found === RUN TestWebhookAdminResponder_DeleteProvisionerWebhook/ok -=== RUN TestWebhookAdminResponder_DeleteProvisionerWebhook/fail/auth.UpdateProvisioner-error --- PASS: TestWebhookAdminResponder_DeleteProvisionerWebhook (0.00s) + --- PASS: TestWebhookAdminResponder_DeleteProvisionerWebhook/fail/auth.UpdateProvisioner-error (0.00s) --- PASS: TestWebhookAdminResponder_DeleteProvisionerWebhook/ok/not-found (0.00s) --- PASS: TestWebhookAdminResponder_DeleteProvisionerWebhook/ok (0.00s) - --- PASS: TestWebhookAdminResponder_DeleteProvisionerWebhook/fail/auth.UpdateProvisioner-error (0.00s) === RUN TestWebhookAdminResponder_UpdateProvisionerWebhook -=== RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/not-found -=== RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/read.ProtoJSON -=== RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/missing-name -=== RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/different-secret-in-request -=== RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/auth.UpdateProvisioner-error === RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/ok +=== RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/read.ProtoJSON === RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/missing-url +=== RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/auth.UpdateProvisioner-error +=== RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/not-found +=== RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/missing-name === RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/relative-url === RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/http-url === RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/basic-auth-in-url ---- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook (0.00s) - --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/not-found (0.00s) - --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/read.ProtoJSON (0.00s) - --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/missing-name (0.00s) - --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/different-secret-in-request (0.00s) - --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/auth.UpdateProvisioner-error (0.00s) +=== RUN TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/different-secret-in-request +--- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook (0.01s) --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/ok (0.00s) + --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/read.ProtoJSON (0.00s) --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/missing-url (0.00s) + --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/auth.UpdateProvisioner-error (0.00s) + --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/not-found (0.00s) + --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/missing-name (0.00s) --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/relative-url (0.00s) --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/http-url (0.00s) --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/basic-auth-in-url (0.00s) + --- PASS: TestWebhookAdminResponder_UpdateProvisionerWebhook/fail/different-secret-in-request (0.00s) PASS -ok github.com/smallstep/certificates/authority/admin/api 0.108s +ok github.com/smallstep/certificates/authority/admin/api 0.217s === RUN TestDB_getDBAdminBytes +=== RUN TestDB_getDBAdminBytes/fail/not-found === RUN TestDB_getDBAdminBytes/fail/db.Get-error === RUN TestDB_getDBAdminBytes/ok -=== RUN TestDB_getDBAdminBytes/fail/not-found ---- PASS: TestDB_getDBAdminBytes (0.00s) +--- PASS: TestDB_getDBAdminBytes (0.01s) + --- PASS: TestDB_getDBAdminBytes/fail/not-found (0.00s) --- PASS: TestDB_getDBAdminBytes/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBAdminBytes/ok (0.00s) - --- PASS: TestDB_getDBAdminBytes/fail/not-found (0.00s) === RUN TestDB_getDBAdmin === RUN TestDB_getDBAdmin/fail/not-found === RUN TestDB_getDBAdmin/fail/db.Get-error === RUN TestDB_getDBAdmin/fail/unmarshal-error === RUN TestDB_getDBAdmin/fail/deleted === RUN TestDB_getDBAdmin/ok ---- PASS: TestDB_getDBAdmin (0.01s) +--- PASS: TestDB_getDBAdmin (0.00s) --- PASS: TestDB_getDBAdmin/fail/not-found (0.00s) --- PASS: TestDB_getDBAdmin/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBAdmin/fail/unmarshal-error (0.00s) @@ -5518,47 +5555,47 @@ --- PASS: TestDB_unmarshalDBAdmin/ok (0.00s) --- PASS: TestDB_unmarshalDBAdmin/fail/unmarshal-error (0.00s) === RUN TestDB_unmarshalAdmin +=== RUN TestDB_unmarshalAdmin/fail/unmarshal-error === RUN TestDB_unmarshalAdmin/fail/deleted-error === RUN TestDB_unmarshalAdmin/ok -=== RUN TestDB_unmarshalAdmin/fail/unmarshal-error --- PASS: TestDB_unmarshalAdmin (0.00s) + --- PASS: TestDB_unmarshalAdmin/fail/unmarshal-error (0.00s) --- PASS: TestDB_unmarshalAdmin/fail/deleted-error (0.00s) --- PASS: TestDB_unmarshalAdmin/ok (0.00s) - --- PASS: TestDB_unmarshalAdmin/fail/unmarshal-error (0.00s) === RUN TestDB_GetAdmin -=== RUN TestDB_GetAdmin/fail/unmarshal-error === RUN TestDB_GetAdmin/fail/deleted === RUN TestDB_GetAdmin/fail/authorityID-mismatch === RUN TestDB_GetAdmin/ok === RUN TestDB_GetAdmin/fail/not-found === RUN TestDB_GetAdmin/fail/db.Get-error ---- PASS: TestDB_GetAdmin (0.00s) - --- PASS: TestDB_GetAdmin/fail/unmarshal-error (0.00s) +=== RUN TestDB_GetAdmin/fail/unmarshal-error +--- PASS: TestDB_GetAdmin (0.02s) --- PASS: TestDB_GetAdmin/fail/deleted (0.00s) --- PASS: TestDB_GetAdmin/fail/authorityID-mismatch (0.00s) --- PASS: TestDB_GetAdmin/ok (0.00s) --- PASS: TestDB_GetAdmin/fail/not-found (0.00s) --- PASS: TestDB_GetAdmin/fail/db.Get-error (0.00s) + --- PASS: TestDB_GetAdmin/fail/unmarshal-error (0.00s) === RUN TestDB_DeleteAdmin -=== RUN TestDB_DeleteAdmin/ok === RUN TestDB_DeleteAdmin/fail/not-found === RUN TestDB_DeleteAdmin/fail/db.Get-error === RUN TestDB_DeleteAdmin/fail/save-error ---- PASS: TestDB_DeleteAdmin (0.01s) - --- PASS: TestDB_DeleteAdmin/ok (0.00s) +=== RUN TestDB_DeleteAdmin/ok +--- PASS: TestDB_DeleteAdmin (0.00s) --- PASS: TestDB_DeleteAdmin/fail/not-found (0.00s) --- PASS: TestDB_DeleteAdmin/fail/db.Get-error (0.00s) --- PASS: TestDB_DeleteAdmin/fail/save-error (0.00s) + --- PASS: TestDB_DeleteAdmin/ok (0.00s) === RUN TestDB_UpdateAdmin +=== RUN TestDB_UpdateAdmin/fail/save-error === RUN TestDB_UpdateAdmin/ok === RUN TestDB_UpdateAdmin/fail/not-found === RUN TestDB_UpdateAdmin/fail/db.Get-error -=== RUN TestDB_UpdateAdmin/fail/save-error --- PASS: TestDB_UpdateAdmin (0.00s) + --- PASS: TestDB_UpdateAdmin/fail/save-error (0.00s) --- PASS: TestDB_UpdateAdmin/ok (0.00s) --- PASS: TestDB_UpdateAdmin/fail/not-found (0.00s) --- PASS: TestDB_UpdateAdmin/fail/db.Get-error (0.00s) - --- PASS: TestDB_UpdateAdmin/fail/save-error (0.00s) === RUN TestDB_CreateAdmin === RUN TestDB_CreateAdmin/fail/save-error === RUN TestDB_CreateAdmin/ok @@ -5566,25 +5603,25 @@ --- PASS: TestDB_CreateAdmin/fail/save-error (0.00s) --- PASS: TestDB_CreateAdmin/ok (0.00s) === RUN TestDB_GetAdmins +=== RUN TestDB_GetAdmins/ok === RUN TestDB_GetAdmins/fail/db.List-error === RUN TestDB_GetAdmins/fail/unmarshal-error === RUN TestDB_GetAdmins/ok/none === RUN TestDB_GetAdmins/ok/only-invalid -=== RUN TestDB_GetAdmins/ok --- PASS: TestDB_GetAdmins (0.00s) + --- PASS: TestDB_GetAdmins/ok (0.00s) --- PASS: TestDB_GetAdmins/fail/db.List-error (0.00s) --- PASS: TestDB_GetAdmins/fail/unmarshal-error (0.00s) --- PASS: TestDB_GetAdmins/ok/none (0.00s) --- PASS: TestDB_GetAdmins/ok/only-invalid (0.00s) - --- PASS: TestDB_GetAdmins/ok (0.00s) === RUN TestDB_getDBAuthorityPolicyBytes -=== RUN TestDB_getDBAuthorityPolicyBytes/fail/db.Get-error === RUN TestDB_getDBAuthorityPolicyBytes/ok === RUN TestDB_getDBAuthorityPolicyBytes/fail/not-found +=== RUN TestDB_getDBAuthorityPolicyBytes/fail/db.Get-error --- PASS: TestDB_getDBAuthorityPolicyBytes (0.00s) - --- PASS: TestDB_getDBAuthorityPolicyBytes/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBAuthorityPolicyBytes/ok (0.00s) --- PASS: TestDB_getDBAuthorityPolicyBytes/fail/not-found (0.00s) + --- PASS: TestDB_getDBAuthorityPolicyBytes/fail/db.Get-error (0.00s) === RUN TestDB_getDBAuthorityPolicy === RUN TestDB_getDBAuthorityPolicy/fail/not-found === RUN TestDB_getDBAuthorityPolicy/fail/unmarshal-error @@ -5622,15 +5659,15 @@ --- PASS: TestDB_UpdateAuthorityPolicy/fail/save-error (0.00s) --- PASS: TestDB_UpdateAuthorityPolicy/ok (0.00s) === RUN TestDB_DeleteAuthorityPolicy -=== RUN TestDB_DeleteAuthorityPolicy/fail/save-error === RUN TestDB_DeleteAuthorityPolicy/ok === RUN TestDB_DeleteAuthorityPolicy/fail/not-found === RUN TestDB_DeleteAuthorityPolicy/fail/db.Get-error +=== RUN TestDB_DeleteAuthorityPolicy/fail/save-error --- PASS: TestDB_DeleteAuthorityPolicy (0.00s) - --- PASS: TestDB_DeleteAuthorityPolicy/fail/save-error (0.00s) --- PASS: TestDB_DeleteAuthorityPolicy/ok (0.00s) --- PASS: TestDB_DeleteAuthorityPolicy/fail/not-found (0.00s) --- PASS: TestDB_DeleteAuthorityPolicy/fail/db.Get-error (0.00s) + --- PASS: TestDB_DeleteAuthorityPolicy/fail/save-error (0.00s) === RUN Test_linkedToDB === RUN Test_linkedToDB/nil_policy === RUN Test_linkedToDB/no_x509_nor_ssh @@ -5666,49 +5703,49 @@ --- PASS: TestDB_getDBProvisionerBytes/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBProvisionerBytes/ok (0.00s) === RUN TestDB_getDBProvisioner +=== RUN TestDB_getDBProvisioner/fail/not-found +=== RUN TestDB_getDBProvisioner/fail/db.Get-error === RUN TestDB_getDBProvisioner/fail/unmarshal-error === RUN TestDB_getDBProvisioner/fail/deleted === RUN TestDB_getDBProvisioner/ok -=== RUN TestDB_getDBProvisioner/fail/not-found -=== RUN TestDB_getDBProvisioner/fail/db.Get-error --- PASS: TestDB_getDBProvisioner (0.00s) + --- PASS: TestDB_getDBProvisioner/fail/not-found (0.00s) + --- PASS: TestDB_getDBProvisioner/fail/db.Get-error (0.00s) --- PASS: TestDB_getDBProvisioner/fail/unmarshal-error (0.00s) --- PASS: TestDB_getDBProvisioner/fail/deleted (0.00s) --- PASS: TestDB_getDBProvisioner/ok (0.00s) - --- PASS: TestDB_getDBProvisioner/fail/not-found (0.00s) - --- PASS: TestDB_getDBProvisioner/fail/db.Get-error (0.00s) === RUN TestDB_unmarshalDBProvisioner +=== RUN TestDB_unmarshalDBProvisioner/ok === RUN TestDB_unmarshalDBProvisioner/fail/unmarshal-error === RUN TestDB_unmarshalDBProvisioner/fail/deleted-error === RUN TestDB_unmarshalDBProvisioner/fail/authority-mismatch-error -=== RUN TestDB_unmarshalDBProvisioner/ok --- PASS: TestDB_unmarshalDBProvisioner (0.00s) + --- PASS: TestDB_unmarshalDBProvisioner/ok (0.00s) --- PASS: TestDB_unmarshalDBProvisioner/fail/unmarshal-error (0.00s) --- PASS: TestDB_unmarshalDBProvisioner/fail/deleted-error (0.00s) --- PASS: TestDB_unmarshalDBProvisioner/fail/authority-mismatch-error (0.00s) - --- PASS: TestDB_unmarshalDBProvisioner/ok (0.00s) === RUN TestDB_unmarshalProvisioner +=== RUN TestDB_unmarshalProvisioner/fail/unmarshal-error === RUN TestDB_unmarshalProvisioner/fail/deleted-error === RUN TestDB_unmarshalProvisioner/ok -=== RUN TestDB_unmarshalProvisioner/fail/unmarshal-error ---- PASS: TestDB_unmarshalProvisioner (0.00s) +--- PASS: TestDB_unmarshalProvisioner (0.01s) + --- PASS: TestDB_unmarshalProvisioner/fail/unmarshal-error (0.00s) --- PASS: TestDB_unmarshalProvisioner/fail/deleted-error (0.00s) --- PASS: TestDB_unmarshalProvisioner/ok (0.00s) - --- PASS: TestDB_unmarshalProvisioner/fail/unmarshal-error (0.00s) === RUN TestDB_GetProvisioner +=== RUN TestDB_GetProvisioner/fail/unmarshal-error +=== RUN TestDB_GetProvisioner/fail/deleted === RUN TestDB_GetProvisioner/fail/authorityID-mismatch === RUN TestDB_GetProvisioner/ok === RUN TestDB_GetProvisioner/fail/not-found === RUN TestDB_GetProvisioner/fail/db.Get-error -=== RUN TestDB_GetProvisioner/fail/unmarshal-error -=== RUN TestDB_GetProvisioner/fail/deleted --- PASS: TestDB_GetProvisioner (0.00s) + --- PASS: TestDB_GetProvisioner/fail/unmarshal-error (0.00s) + --- PASS: TestDB_GetProvisioner/fail/deleted (0.00s) --- PASS: TestDB_GetProvisioner/fail/authorityID-mismatch (0.00s) --- PASS: TestDB_GetProvisioner/ok (0.00s) --- PASS: TestDB_GetProvisioner/fail/not-found (0.00s) --- PASS: TestDB_GetProvisioner/fail/db.Get-error (0.00s) - --- PASS: TestDB_GetProvisioner/fail/unmarshal-error (0.00s) - --- PASS: TestDB_GetProvisioner/fail/deleted (0.00s) === RUN TestDB_DeleteProvisioner === RUN TestDB_DeleteProvisioner/fail/not-found === RUN TestDB_DeleteProvisioner/fail/db.Get-error @@ -5720,17 +5757,17 @@ --- PASS: TestDB_DeleteProvisioner/fail/save-error (0.00s) --- PASS: TestDB_DeleteProvisioner/ok (0.00s) === RUN TestDB_GetProvisioners -=== RUN TestDB_GetProvisioners/fail/db.List-error === RUN TestDB_GetProvisioners/fail/unmarshal-error === RUN TestDB_GetProvisioners/ok/none === RUN TestDB_GetProvisioners/ok/only-invalid === RUN TestDB_GetProvisioners/ok +=== RUN TestDB_GetProvisioners/fail/db.List-error --- PASS: TestDB_GetProvisioners (0.00s) - --- PASS: TestDB_GetProvisioners/fail/db.List-error (0.00s) --- PASS: TestDB_GetProvisioners/fail/unmarshal-error (0.00s) --- PASS: TestDB_GetProvisioners/ok/none (0.00s) --- PASS: TestDB_GetProvisioners/ok/only-invalid (0.00s) --- PASS: TestDB_GetProvisioners/ok (0.00s) + --- PASS: TestDB_GetProvisioners/fail/db.List-error (0.00s) === RUN TestDB_CreateProvisioner === RUN TestDB_CreateProvisioner/fail/save-error === RUN TestDB_CreateProvisioner/ok @@ -5738,29 +5775,29 @@ --- PASS: TestDB_CreateProvisioner/fail/save-error (0.00s) --- PASS: TestDB_CreateProvisioner/ok (0.00s) === RUN TestDB_UpdateProvisioner -=== RUN TestDB_UpdateProvisioner/fail/not-found -=== RUN TestDB_UpdateProvisioner/fail/db.Get-error -=== RUN TestDB_UpdateProvisioner/fail/update-deleted === RUN TestDB_UpdateProvisioner/fail/update-type-error === RUN TestDB_UpdateProvisioner/fail/save-error === RUN TestDB_UpdateProvisioner/ok +=== RUN TestDB_UpdateProvisioner/fail/not-found +=== RUN TestDB_UpdateProvisioner/fail/db.Get-error +=== RUN TestDB_UpdateProvisioner/fail/update-deleted --- PASS: TestDB_UpdateProvisioner (0.00s) - --- PASS: TestDB_UpdateProvisioner/fail/not-found (0.00s) - --- PASS: TestDB_UpdateProvisioner/fail/db.Get-error (0.00s) - --- PASS: TestDB_UpdateProvisioner/fail/update-deleted (0.00s) --- PASS: TestDB_UpdateProvisioner/fail/update-type-error (0.00s) --- PASS: TestDB_UpdateProvisioner/fail/save-error (0.00s) --- PASS: TestDB_UpdateProvisioner/ok (0.00s) + --- PASS: TestDB_UpdateProvisioner/fail/not-found (0.00s) + --- PASS: TestDB_UpdateProvisioner/fail/db.Get-error (0.00s) + --- PASS: TestDB_UpdateProvisioner/fail/update-deleted (0.00s) === RUN Test_linkedcaWebhooksToDB -=== RUN Test_linkedcaWebhooksToDB/nil -=== RUN Test_linkedcaWebhooksToDB/zero === RUN Test_linkedcaWebhooksToDB/bearer === RUN Test_linkedcaWebhooksToDB/basic +=== RUN Test_linkedcaWebhooksToDB/nil +=== RUN Test_linkedcaWebhooksToDB/zero --- PASS: Test_linkedcaWebhooksToDB (0.00s) - --- PASS: Test_linkedcaWebhooksToDB/nil (0.00s) - --- PASS: Test_linkedcaWebhooksToDB/zero (0.00s) --- PASS: Test_linkedcaWebhooksToDB/bearer (0.00s) --- PASS: Test_linkedcaWebhooksToDB/basic (0.00s) + --- PASS: Test_linkedcaWebhooksToDB/nil (0.00s) + --- PASS: Test_linkedcaWebhooksToDB/zero (0.00s) === RUN Test_dbWebhooksToLinkedca === RUN Test_dbWebhooksToLinkedca/nil === RUN Test_dbWebhooksToLinkedca/zero @@ -5772,46 +5809,46 @@ --- PASS: Test_dbWebhooksToLinkedca/bearer (0.00s) --- PASS: Test_dbWebhooksToLinkedca/basic (0.00s) PASS -ok github.com/smallstep/certificates/authority/admin/db/nosql 0.092s +ok github.com/smallstep/certificates/authority/admin/db/nosql 0.156s ? github.com/smallstep/certificates/authority/administrator [no test files] === RUN TestConfigValidate -=== RUN TestConfigValidate/empty-address === RUN TestConfigValidate/invalid-address === RUN TestConfigValidate/empty-intermediate-cert +=== RUN TestConfigValidate/empty-dnsNames === RUN TestConfigValidate/empty-TLS tc.tls = &{[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256] 1.2 1.3 false} *tc.config.TLS = &{[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256] 1.2 1.3 false} === RUN TestConfigValidate/empty-TLS-values tc.tls = &{[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256] 1.2 1.3 false} *tc.config.TLS = &{[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256] 1.2 1.3 false} +=== RUN TestConfigValidate/skip-validation +tc.tls = +*tc.config.TLS = +=== RUN TestConfigValidate/empty-address === RUN TestConfigValidate/empty-root === RUN TestConfigValidate/empty-intermediate-key -=== RUN TestConfigValidate/empty-dnsNames === RUN TestConfigValidate/custom-tls-values tc.tls = &{[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305] 1.0 1.1 true} *tc.config.TLS = &{[TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305] 1.0 1.1 true} === RUN TestConfigValidate/tls-min>max -=== RUN TestConfigValidate/skip-validation -tc.tls = -*tc.config.TLS = --- PASS: TestConfigValidate (0.00s) - --- PASS: TestConfigValidate/empty-address (0.00s) --- PASS: TestConfigValidate/invalid-address (0.00s) --- PASS: TestConfigValidate/empty-intermediate-cert (0.00s) + --- PASS: TestConfigValidate/empty-dnsNames (0.00s) --- PASS: TestConfigValidate/empty-TLS (0.00s) --- PASS: TestConfigValidate/empty-TLS-values (0.00s) + --- PASS: TestConfigValidate/skip-validation (0.00s) + --- PASS: TestConfigValidate/empty-address (0.00s) --- PASS: TestConfigValidate/empty-root (0.00s) --- PASS: TestConfigValidate/empty-intermediate-key (0.00s) - --- PASS: TestConfigValidate/empty-dnsNames (0.00s) --- PASS: TestConfigValidate/custom-tls-values (0.00s) --- PASS: TestConfigValidate/tls-min>max (0.00s) - --- PASS: TestConfigValidate/skip-validation (0.00s) === RUN TestAuthConfigValidate === RUN TestAuthConfigValidate/fail-nil-authconfig === RUN TestAuthConfigValidate/ok-empty-provisioners === RUN TestAuthConfigValidate/ok-empty-asn1dn-template === RUN TestAuthConfigValidate/ok-custom-asn1dn ---- PASS: TestAuthConfigValidate (0.00s) +--- PASS: TestAuthConfigValidate (0.01s) --- PASS: TestAuthConfigValidate/fail-nil-authconfig (0.00s) --- PASS: TestAuthConfigValidate/ok-empty-provisioners (0.00s) --- PASS: TestAuthConfigValidate/ok-empty-asn1dn-template (0.00s) @@ -5977,7 +6014,7 @@ === RUN TestTLSOptions_TLSConfig === RUN TestTLSOptions_TLSConfig/default === RUN TestTLSOptions_TLSConfig/renegotation ---- PASS: TestTLSOptions_TLSConfig (0.00s) +--- PASS: TestTLSOptions_TLSConfig (0.01s) --- PASS: TestTLSOptions_TLSConfig/default (0.00s) --- PASS: TestTLSOptions_TLSConfig/renegotation (0.00s) === RUN Test_multiString_First @@ -6023,11 +6060,11 @@ --- PASS: Test_multiString_UnmarshalJSON/error (0.00s) --- PASS: Test_multiString_UnmarshalJSON/nil (0.00s) PASS -ok github.com/smallstep/certificates/authority/config 0.073s +ok github.com/smallstep/certificates/authority/config 0.121s === RUN TestNew === RUN TestNew/ok === RUN TestNew/ok_with_constraints ---- PASS: TestNew (0.02s) +--- PASS: TestNew (0.01s) --- PASS: TestNew/ok (0.00s) --- PASS: TestNew/ok_with_constraints (0.00s) === RUN TestNew_hasNameConstraints @@ -6072,7 +6109,7 @@ === RUN TestEngine_Validate/fail_match_dns === RUN TestEngine_Validate/fail_match_email === RUN TestEngine_Validate/fail_match_uri ---- PASS: TestEngine_Validate (0.01s) +--- PASS: TestEngine_Validate (0.00s) --- PASS: TestEngine_Validate/ok (0.00s) --- PASS: TestEngine_Validate/ok_permitted_dns (0.00s) --- PASS: TestEngine_Validate/ok_not_excluded_dns (0.00s) @@ -6105,7 +6142,7 @@ --- PASS: TestEngine_ValidateCertificate/ok_with_constraints (0.00s) --- PASS: TestEngine_ValidateCertificate/fail (0.00s) PASS -ok github.com/smallstep/certificates/authority/internal/constraints 0.078s +ok github.com/smallstep/certificates/authority/internal/constraints 0.050s === RUN TestX509PolicyOptions_IsWildcardLiteralAllowed === RUN TestX509PolicyOptions_IsWildcardLiteralAllowed/nil-options === RUN TestX509PolicyOptions_IsWildcardLiteralAllowed/not-set @@ -6127,26 +6164,26 @@ --- PASS: TestPolicyToCertificates/partial-policy (0.00s) --- PASS: TestPolicyToCertificates/full-policy (0.00s) PASS -ok github.com/smallstep/certificates/authority/policy 0.056s +ok github.com/smallstep/certificates/authority/policy 0.086s === RUN TestClient === RUN TestClient/http === RUN TestClient/tls === RUN TestClient/nil === RUN TestClient/empty ---- PASS: TestClient (0.03s) - --- PASS: TestClient/http (0.00s) - --- PASS: TestClient/tls (0.03s) - --- PASS: TestClient/nil (0.00s) +--- PASS: TestClient (0.04s) + --- PASS: TestClient/http (0.01s) + --- PASS: TestClient/tls (0.02s) + --- PASS: TestClient/nil (0.01s) --- PASS: TestClient/empty (0.00s) === RUN TestClient_SetNew === RUN TestClient_SetNew/ok === RUN TestClient_SetNew/fail === RUN TestClient_SetNew/ok_again -2026/11/25 04:49:28 http: TLS handshake error from 127.0.0.1:38944: remote error: tls: bad certificate ---- PASS: TestClient_SetNew (0.02s) +2025/10/24 00:32:36 http: TLS handshake error from 127.0.0.1:37304: remote error: tls: bad certificate +--- PASS: TestClient_SetNew (0.04s) --- PASS: TestClient_SetNew/ok (0.01s) --- PASS: TestClient_SetNew/fail (0.01s) - --- PASS: TestClient_SetNew/ok_again (0.01s) + --- PASS: TestClient_SetNew/ok_again (0.02s) === RUN TestClient_parallel === PAUSE TestClient_parallel === CONT TestClient_parallel @@ -6172,32 +6209,29 @@ === PAUSE TestClient_parallel/9 === CONT TestClient_parallel/0 === CONT TestClient_parallel/5 -=== CONT TestClient_parallel/3 -=== CONT TestClient_parallel/4 -=== CONT TestClient_parallel/8 === CONT TestClient_parallel/9 -=== CONT TestClient_parallel/2 -=== CONT TestClient_parallel/1 +=== CONT TestClient_parallel/8 === CONT TestClient_parallel/7 === CONT TestClient_parallel/6 -2026/11/25 04:49:28 http: TLS handshake error from 127.0.0.1:42520: write tcp 127.0.0.1:34415->127.0.0.1:42520: use of closed network connection -2026/11/25 04:49:28 http: TLS handshake error from 127.0.0.1:42582: write tcp 127.0.0.1:34415->127.0.0.1:42582: use of closed network connection -2026/11/25 04:49:28 http: TLS handshake error from 127.0.0.1:42478: write tcp 127.0.0.1:34415->127.0.0.1:42478: use of closed network connection -2026/11/25 04:49:28 http: TLS handshake error from 127.0.0.1:42514: read tcp 127.0.0.1:34415->127.0.0.1:42514: use of closed network connection -2026/11/25 04:49:28 http: TLS handshake error from 127.0.0.1:42506: write tcp 127.0.0.1:34415->127.0.0.1:42506: use of closed network connection +=== CONT TestClient_parallel/3 +=== CONT TestClient_parallel/2 +=== CONT TestClient_parallel/4 +=== CONT TestClient_parallel/1 +2025/10/24 00:32:36 http: TLS handshake error from 127.0.0.1:38282: read tcp 127.0.0.1:35261->127.0.0.1:38282: use of closed network connection +2025/10/24 00:32:36 http: TLS handshake error from 127.0.0.1:38228: write tcp 127.0.0.1:35261->127.0.0.1:38228: use of closed network connection --- PASS: TestClient_parallel (0.01s) - --- PASS: TestClient_parallel/3 (0.02s) - --- PASS: TestClient_parallel/4 (0.02s) - --- PASS: TestClient_parallel/8 (0.02s) - --- PASS: TestClient_parallel/9 (0.03s) - --- PASS: TestClient_parallel/2 (0.03s) - --- PASS: TestClient_parallel/5 (0.05s) - --- PASS: TestClient_parallel/0 (0.05s) - --- PASS: TestClient_parallel/1 (0.04s) - --- PASS: TestClient_parallel/6 (0.04s) - --- PASS: TestClient_parallel/7 (0.04s) + --- PASS: TestClient_parallel/0 (0.07s) + --- PASS: TestClient_parallel/5 (0.07s) + --- PASS: TestClient_parallel/6 (0.07s) + --- PASS: TestClient_parallel/8 (0.07s) + --- PASS: TestClient_parallel/2 (0.07s) + --- PASS: TestClient_parallel/9 (0.11s) + --- PASS: TestClient_parallel/7 (0.11s) + --- PASS: TestClient_parallel/1 (0.09s) + --- PASS: TestClient_parallel/4 (0.11s) + --- PASS: TestClient_parallel/3 (0.11s) PASS -ok github.com/smallstep/certificates/authority/poolhttp 0.175s +ok github.com/smallstep/certificates/authority/poolhttp 0.267s === RUN TestACME_GetAttestationRoots === RUN TestACME_GetAttestationRoots/ok === RUN TestACME_GetAttestationRoots/nil @@ -6243,21 +6277,14 @@ acme_test.go:235: === RUN TestACME_Init/ok acme_test.go:235: -=== RUN TestACME_Init/ok/wire - acme_test.go:235: -=== RUN TestACME_Init/fail/empty-type +=== RUN TestACME_Init/fail/empty-name acme_test.go:235: === RUN TestACME_Init/fail/bad-claims acme_test.go:235: -=== RUN TestACME_Init/fail/bad-challenge - acme_test.go:235: -=== RUN TestACME_Init/fail/bad-attestation-format +=== RUN TestACME_Init/fail/empty-attestation-roots acme_test.go:235: -=== RUN TestACME_Init/fail/parse-attestation-roots - acme_test.go:235: -----BEGIN CERTIFICATE----- - Zm9v - -----END CERTIFICATE----- -=== RUN TestACME_Init/fail/wire-missing-wire-options + +=== RUN TestACME_Init/fail/wire-missing-options acme_test.go:235: === RUN TestACME_Init/ok/attestation acme_test.go:235: -----BEGIN CERTIFICATE----- @@ -6293,30 +6320,37 @@ Fqyi4+JE014cSgR57Jcu3dZiehB6UtAPgad9L5cNvua/IWRmm+ANy3O2LH++Pyl8 SREzU8onbBsjMg9QDiSf5oJLKvd/Ren+zGY7 -----END CERTIFICATE----- +=== RUN TestACME_Init/ok/wire + acme_test.go:235: === RUN TestACME_Init/fail/empty acme_test.go:235: -=== RUN TestACME_Init/fail/empty-name +=== RUN TestACME_Init/fail/empty-type acme_test.go:235: -=== RUN TestACME_Init/fail/empty-attestation-roots +=== RUN TestACME_Init/fail/bad-challenge acme_test.go:235: - -=== RUN TestACME_Init/fail/wire-missing-options +=== RUN TestACME_Init/fail/bad-attestation-format + acme_test.go:235: +=== RUN TestACME_Init/fail/parse-attestation-roots + acme_test.go:235: -----BEGIN CERTIFICATE----- + Zm9v + -----END CERTIFICATE----- +=== RUN TestACME_Init/fail/wire-missing-wire-options acme_test.go:235: --- PASS: TestACME_Init (0.00s) --- PASS: TestACME_Init/fail/wire-validate-options (0.00s) --- PASS: TestACME_Init/ok (0.00s) + --- PASS: TestACME_Init/fail/empty-name (0.00s) + --- PASS: TestACME_Init/fail/bad-claims (0.00s) + --- PASS: TestACME_Init/fail/empty-attestation-roots (0.00s) + --- PASS: TestACME_Init/fail/wire-missing-options (0.00s) + --- PASS: TestACME_Init/ok/attestation (0.00s) --- PASS: TestACME_Init/ok/wire (0.00s) + --- PASS: TestACME_Init/fail/empty (0.00s) --- PASS: TestACME_Init/fail/empty-type (0.00s) - --- PASS: TestACME_Init/fail/bad-claims (0.00s) --- PASS: TestACME_Init/fail/bad-challenge (0.00s) --- PASS: TestACME_Init/fail/bad-attestation-format (0.00s) --- PASS: TestACME_Init/fail/parse-attestation-roots (0.00s) --- PASS: TestACME_Init/fail/wire-missing-wire-options (0.00s) - --- PASS: TestACME_Init/ok/attestation (0.00s) - --- PASS: TestACME_Init/fail/empty (0.00s) - --- PASS: TestACME_Init/fail/empty-name (0.00s) - --- PASS: TestACME_Init/fail/empty-attestation-roots (0.00s) - --- PASS: TestACME_Init/fail/wire-missing-options (0.00s) === RUN TestACME_AuthorizeRenew === RUN TestACME_AuthorizeRenew/fail/renew-disabled === RUN TestACME_AuthorizeRenew/ok @@ -6345,7 +6379,7 @@ === RUN TestACME_IsChallengeEnabled/fail_wire-oidc-01 === RUN TestACME_IsChallengeEnabled/fail_wire-dpop-01 === RUN TestACME_IsChallengeEnabled/fail_unknown ---- PASS: TestACME_IsChallengeEnabled (0.00s) +--- PASS: TestACME_IsChallengeEnabled (0.01s) --- PASS: TestACME_IsChallengeEnabled/ok_http-01 (0.00s) --- PASS: TestACME_IsChallengeEnabled/ok_dns-01 (0.00s) --- PASS: TestACME_IsChallengeEnabled/ok_tls-alpn-01 (0.00s) @@ -6401,12 +6435,12 @@ === RUN TestAWS_GetIdentityToken/fail_read_identityURL === RUN TestAWS_GetIdentityToken/fail_read_signatureURL === RUN TestAWS_GetIdentityToken/fail_unmarshal_identityURL ---- PASS: TestAWS_GetIdentityToken (0.01s) - --- PASS: TestAWS_GetIdentityToken/ok (0.00s) +--- PASS: TestAWS_GetIdentityToken (0.02s) + --- PASS: TestAWS_GetIdentityToken/ok (0.01s) --- PASS: TestAWS_GetIdentityToken/ok_no_imds (0.00s) --- PASS: TestAWS_GetIdentityToken/fail_ca_url (0.00s) --- PASS: TestAWS_GetIdentityToken/fail_identityURL (0.00s) - --- PASS: TestAWS_GetIdentityToken/fail_signatureURL (0.00s) + --- PASS: TestAWS_GetIdentityToken/fail_signatureURL (0.01s) --- PASS: TestAWS_GetIdentityToken/fail_signature (0.00s) --- PASS: TestAWS_GetIdentityToken/fail_read_identityURL (0.00s) --- PASS: TestAWS_GetIdentityToken/fail_read_signatureURL (0.00s) @@ -6429,7 +6463,7 @@ === RUN TestAWS_Init/fail/missing === RUN TestAWS_Init/fail/cert === RUN TestAWS_Init/fail_claims ---- PASS: TestAWS_Init (0.01s) +--- PASS: TestAWS_Init (0.02s) --- PASS: TestAWS_Init/ok (0.00s) --- PASS: TestAWS_Init/ok/v1 (0.00s) --- PASS: TestAWS_Init/ok/v2 (0.00s) @@ -6444,35 +6478,35 @@ --- PASS: TestAWS_Init/fail/cert (0.00s) --- PASS: TestAWS_Init/fail_claims (0.00s) === RUN TestAWS_authorizeToken +=== RUN TestAWS_authorizeToken/ok +=== RUN TestAWS_authorizeToken/ok/identityCert === RUN TestAWS_authorizeToken/fail/cannot-validate-sig +=== RUN TestAWS_authorizeToken/fail/empty-account-id +=== RUN TestAWS_authorizeToken/fail/empty-private-ip +=== RUN TestAWS_authorizeToken/fail/invalid-token-issuer === RUN TestAWS_authorizeToken/fail/invalid-audience -=== RUN TestAWS_authorizeToken/fail/invalid-subject-disabled-custom-SANs -=== RUN TestAWS_authorizeToken/fail/invalid-account-id === RUN TestAWS_authorizeToken/fail/instance-age -=== RUN TestAWS_authorizeToken/ok/identityCert === RUN TestAWS_authorizeToken/ok/identityCert2 -=== RUN TestAWS_authorizeToken/fail/empty-account-id +=== RUN TestAWS_authorizeToken/fail/bad-token === RUN TestAWS_authorizeToken/fail/empty-instance-id -=== RUN TestAWS_authorizeToken/fail/empty-private-ip === RUN TestAWS_authorizeToken/fail/empty-region -=== RUN TestAWS_authorizeToken/fail/invalid-token-issuer -=== RUN TestAWS_authorizeToken/ok -=== RUN TestAWS_authorizeToken/fail/bad-token ---- PASS: TestAWS_authorizeToken (0.15s) - --- PASS: TestAWS_authorizeToken/fail/cannot-validate-sig (0.00s) - --- PASS: TestAWS_authorizeToken/fail/invalid-audience (0.00s) - --- PASS: TestAWS_authorizeToken/fail/invalid-subject-disabled-custom-SANs (0.00s) - --- PASS: TestAWS_authorizeToken/fail/invalid-account-id (0.00s) - --- PASS: TestAWS_authorizeToken/fail/instance-age (0.00s) +=== RUN TestAWS_authorizeToken/fail/invalid-subject-disabled-custom-SANs +=== RUN TestAWS_authorizeToken/fail/invalid-account-id +--- PASS: TestAWS_authorizeToken (0.46s) + --- PASS: TestAWS_authorizeToken/ok (0.00s) --- PASS: TestAWS_authorizeToken/ok/identityCert (0.00s) - --- PASS: TestAWS_authorizeToken/ok/identityCert2 (0.00s) + --- PASS: TestAWS_authorizeToken/fail/cannot-validate-sig (0.00s) --- PASS: TestAWS_authorizeToken/fail/empty-account-id (0.00s) - --- PASS: TestAWS_authorizeToken/fail/empty-instance-id (0.00s) --- PASS: TestAWS_authorizeToken/fail/empty-private-ip (0.00s) - --- PASS: TestAWS_authorizeToken/fail/empty-region (0.00s) --- PASS: TestAWS_authorizeToken/fail/invalid-token-issuer (0.00s) - --- PASS: TestAWS_authorizeToken/ok (0.00s) + --- PASS: TestAWS_authorizeToken/fail/invalid-audience (0.00s) + --- PASS: TestAWS_authorizeToken/fail/instance-age (0.00s) + --- PASS: TestAWS_authorizeToken/ok/identityCert2 (0.01s) --- PASS: TestAWS_authorizeToken/fail/bad-token (0.00s) + --- PASS: TestAWS_authorizeToken/fail/empty-instance-id (0.00s) + --- PASS: TestAWS_authorizeToken/fail/empty-region (0.00s) + --- PASS: TestAWS_authorizeToken/fail/invalid-subject-disabled-custom-SANs (0.00s) + --- PASS: TestAWS_authorizeToken/fail/invalid-account-id (0.00s) === RUN TestAWS_AuthorizeSign === RUN TestAWS_AuthorizeSign/ok === RUN TestAWS_AuthorizeSign/ok#01 @@ -6492,7 +6526,7 @@ === RUN TestAWS_AuthorizeSign/fail_nbf === RUN TestAWS_AuthorizeSign/fail_key === RUN TestAWS_AuthorizeSign/fail_instance_age ---- PASS: TestAWS_AuthorizeSign (0.46s) +--- PASS: TestAWS_AuthorizeSign (1.09s) --- PASS: TestAWS_AuthorizeSign/ok (0.00s) --- PASS: TestAWS_AuthorizeSign/ok#01 (0.00s) --- PASS: TestAWS_AuthorizeSign/ok#02 (0.00s) @@ -6526,16 +6560,16 @@ === RUN TestAWS_AuthorizeSSHSign/fail-extra-principal === RUN TestAWS_AuthorizeSSHSign/fail-sshCA-disabled === RUN TestAWS_AuthorizeSSHSign/fail-invalid-token ---- PASS: TestAWS_AuthorizeSSHSign (0.71s) - --- PASS: TestAWS_AuthorizeSSHSign/ok (0.00s) - --- PASS: TestAWS_AuthorizeSSHSign/ok-rsa2048 (0.00s) +--- PASS: TestAWS_AuthorizeSSHSign (5.59s) + --- PASS: TestAWS_AuthorizeSSHSign/ok (0.20s) + --- PASS: TestAWS_AuthorizeSSHSign/ok-rsa2048 (0.64s) --- PASS: TestAWS_AuthorizeSSHSign/ok-type (0.00s) - --- PASS: TestAWS_AuthorizeSSHSign/ok-principals (0.00s) - --- PASS: TestAWS_AuthorizeSSHSign/ok-principal-ip (0.00s) + --- PASS: TestAWS_AuthorizeSSHSign/ok-principals (0.24s) + --- PASS: TestAWS_AuthorizeSSHSign/ok-principal-ip (0.15s) --- PASS: TestAWS_AuthorizeSSHSign/ok-principal-hostname (0.00s) --- PASS: TestAWS_AuthorizeSSHSign/ok-options (0.00s) --- PASS: TestAWS_AuthorizeSSHSign/ok-custom (0.00s) - --- PASS: TestAWS_AuthorizeSSHSign/fail-rsa1024 (0.00s) + --- PASS: TestAWS_AuthorizeSSHSign/fail-rsa1024 (0.01s) --- PASS: TestAWS_AuthorizeSSHSign/fail-type (0.00s) --- PASS: TestAWS_AuthorizeSSHSign/fail-principal (0.00s) --- PASS: TestAWS_AuthorizeSSHSign/fail-extra-principal (0.00s) @@ -6556,7 +6590,7 @@ === RUN TestAzure_GetTokenID/ok_no_TOFU === RUN TestAzure_GetTokenID/fail_token === RUN TestAzure_GetTokenID/fail_claims ---- PASS: TestAzure_GetTokenID (0.00s) +--- PASS: TestAzure_GetTokenID (0.01s) --- PASS: TestAzure_GetTokenID/ok (0.00s) --- PASS: TestAzure_GetTokenID/ok_no_TOFU (0.00s) --- PASS: TestAzure_GetTokenID/fail_token (0.00s) @@ -6571,7 +6605,7 @@ === RUN TestAzure_GetIdentityToken/fail_unmarshal === RUN TestAzure_GetIdentityToken/fail_url === RUN TestAzure_GetIdentityToken/fail_connect ---- PASS: TestAzure_GetIdentityToken (0.01s) +--- PASS: TestAzure_GetIdentityToken (0.00s) --- PASS: TestAzure_GetIdentityToken/ok (0.00s) --- PASS: TestAzure_GetIdentityToken/ok_azure_china (0.00s) --- PASS: TestAzure_GetIdentityToken/ok_azure_germany (0.00s) @@ -6591,7 +6625,7 @@ === RUN TestAzure_Init/fail_discovery_URL === RUN TestAzure_Init/fail_JWK_URL === RUN TestAzure_Init/fail_config_Validate ---- PASS: TestAzure_Init (0.00s) +--- PASS: TestAzure_Init (0.01s) --- PASS: TestAzure_Init/ok (0.00s) --- PASS: TestAzure_Init/ok_with_config (0.00s) --- PASS: TestAzure_Init/fail_type (0.00s) @@ -6602,19 +6636,19 @@ --- PASS: TestAzure_Init/fail_JWK_URL (0.00s) --- PASS: TestAzure_Init/fail_config_Validate (0.00s) === RUN TestAzure_authorizeToken +=== RUN TestAzure_authorizeToken/fail/invalid-token-issuer === RUN TestAzure_authorizeToken/fail/invalid-tenant-id === RUN TestAzure_authorizeToken/fail/invalid-xms-mir-id === RUN TestAzure_authorizeToken/ok === RUN TestAzure_authorizeToken/fail/bad-token === RUN TestAzure_authorizeToken/fail/cannot-validate-sig -=== RUN TestAzure_authorizeToken/fail/invalid-token-issuer --- PASS: TestAzure_authorizeToken (0.01s) + --- PASS: TestAzure_authorizeToken/fail/invalid-token-issuer (0.00s) --- PASS: TestAzure_authorizeToken/fail/invalid-tenant-id (0.00s) --- PASS: TestAzure_authorizeToken/fail/invalid-xms-mir-id (0.00s) --- PASS: TestAzure_authorizeToken/ok (0.00s) --- PASS: TestAzure_authorizeToken/fail/bad-token (0.00s) --- PASS: TestAzure_authorizeToken/fail/cannot-validate-sig (0.00s) - --- PASS: TestAzure_authorizeToken/fail/invalid-token-issuer (0.00s) === RUN TestAzure_AuthorizeSign === RUN TestAzure_AuthorizeSign/ok === RUN TestAzure_AuthorizeSign/ok#01 @@ -6631,7 +6665,7 @@ === RUN TestAzure_AuthorizeSign/fail_exp === RUN TestAzure_AuthorizeSign/fail_nbf === RUN TestAzure_AuthorizeSign/fail_key ---- PASS: TestAzure_AuthorizeSign (0.02s) +--- PASS: TestAzure_AuthorizeSign (0.03s) --- PASS: TestAzure_AuthorizeSign/ok (0.00s) --- PASS: TestAzure_AuthorizeSign/ok#01 (0.00s) --- PASS: TestAzure_AuthorizeSign/ok#02 (0.00s) @@ -6666,7 +6700,7 @@ === RUN TestAzure_AuthorizeSSHSign/fail-extra-principal === RUN TestAzure_AuthorizeSSHSign/fail-sshCA-disabled === RUN TestAzure_AuthorizeSSHSign/fail-invalid-token ---- PASS: TestAzure_AuthorizeSSHSign (0.34s) +--- PASS: TestAzure_AuthorizeSSHSign (0.20s) --- PASS: TestAzure_AuthorizeSSHSign/ok (0.00s) --- PASS: TestAzure_AuthorizeSSHSign/ok-rsa2048 (0.00s) --- PASS: TestAzure_AuthorizeSSHSign/ok-type (0.00s) @@ -6703,7 +6737,7 @@ === RUN TestCollection_Load/ok === RUN TestCollection_Load/fail === RUN TestCollection_Load/invalid ---- PASS: TestCollection_Load (0.13s) +--- PASS: TestCollection_Load (0.31s) --- PASS: TestCollection_Load/ok (0.00s) --- PASS: TestCollection_Load/fail (0.00s) --- PASS: TestCollection_Load/invalid (0.00s) @@ -6715,7 +6749,7 @@ === RUN TestCollection_LoadByToken/bad === RUN TestCollection_LoadByToken/fail === RUN TestCollection_LoadByToken/fail-no-k8sSa-provisioner ---- PASS: TestCollection_LoadByToken (0.53s) +--- PASS: TestCollection_LoadByToken (2.09s) --- PASS: TestCollection_LoadByToken/ok1 (0.00s) --- PASS: TestCollection_LoadByToken/ok2 (0.00s) --- PASS: TestCollection_LoadByToken/ok3 (0.00s) @@ -6730,7 +6764,7 @@ === RUN TestCollection_LoadByCertificate/noExtension === RUN TestCollection_LoadByCertificate/notFound === RUN TestCollection_LoadByCertificate/badCert ---- PASS: TestCollection_LoadByCertificate (0.19s) +--- PASS: TestCollection_LoadByCertificate (0.59s) --- PASS: TestCollection_LoadByCertificate/ok1 (0.00s) --- PASS: TestCollection_LoadByCertificate/ok2 (0.00s) --- PASS: TestCollection_LoadByCertificate/ok3 (0.00s) @@ -6741,7 +6775,7 @@ === RUN TestCollection_LoadEncryptedKey/ok === RUN TestCollection_LoadEncryptedKey/oidc === RUN TestCollection_LoadEncryptedKey/notFound ---- PASS: TestCollection_LoadEncryptedKey (0.13s) +--- PASS: TestCollection_LoadEncryptedKey (0.47s) --- PASS: TestCollection_LoadEncryptedKey/ok (0.00s) --- PASS: TestCollection_LoadEncryptedKey/oidc (0.00s) --- PASS: TestCollection_LoadEncryptedKey/notFound (0.00s) @@ -6750,7 +6784,7 @@ === RUN TestCollection_Store/ok2 === RUN TestCollection_Store/fail1 === RUN TestCollection_Store/fail2 ---- PASS: TestCollection_Store (0.13s) +--- PASS: TestCollection_Store (0.44s) --- PASS: TestCollection_Store/ok1 (0.00s) --- PASS: TestCollection_Store/ok2 (0.00s) --- PASS: TestCollection_Store/fail1 (0.00s) @@ -6764,7 +6798,7 @@ === RUN TestCollection_Find/1_to_5 === RUN TestCollection_Find/defaultLimit === RUN TestCollection_Find/overTheLimit ---- PASS: TestCollection_Find (1.32s) +--- PASS: TestCollection_Find (4.33s) --- PASS: TestCollection_Find/all (0.00s) --- PASS: TestCollection_Find/0_to_19 (0.00s) --- PASS: TestCollection_Find/0_to_9 (0.00s) @@ -6782,7 +6816,7 @@ === RUN Test_matchesAudience/true,portsA === RUN Test_matchesAudience/true,portsB === RUN Test_matchesAudience/true,portsAB ---- PASS: Test_matchesAudience (0.01s) +--- PASS: Test_matchesAudience (0.00s) --- PASS: Test_matchesAudience/false_arg1_empty (0.00s) --- PASS: Test_matchesAudience/false_arg2_empty (0.00s) --- PASS: Test_matchesAudience/false_arg1,arg2_empty (0.00s) @@ -6885,7 +6919,7 @@ === RUN TestDefaultAuthorizeSSHRenew/fail_disabled === RUN TestDefaultAuthorizeSSHRenew/fail_not_yet_valid === RUN TestDefaultAuthorizeSSHRenew/fail_expired ---- PASS: TestDefaultAuthorizeSSHRenew (0.01s) +--- PASS: TestDefaultAuthorizeSSHRenew (0.00s) --- PASS: TestDefaultAuthorizeSSHRenew/ok (0.00s) --- PASS: TestDefaultAuthorizeSSHRenew/ok_renew_after_expiry (0.00s) --- PASS: TestDefaultAuthorizeSSHRenew/fail_disabled (0.00s) @@ -6960,7 +6994,7 @@ === RUN TestGCP_GetTokenID/ok#01 === RUN TestGCP_GetTokenID/fail_token === RUN TestGCP_GetTokenID/fail_claims ---- PASS: TestGCP_GetTokenID (0.00s) +--- PASS: TestGCP_GetTokenID (0.02s) --- PASS: TestGCP_GetTokenID/ok (0.00s) --- PASS: TestGCP_GetTokenID/ok#01 (0.00s) --- PASS: TestGCP_GetTokenID/fail_token (0.00s) @@ -6974,9 +7008,9 @@ gcp_test.go:150: error on identity request: status=400, response=Bad Request === RUN TestGCP_GetIdentityToken/fail_url - gcp_test.go:150: error creating identity request: parse "://ca.smallstep.com?audience=https%3A%2F%2Fca%2F1.0%2Fsign%23gcp%2FiFBkqpiQuL&format=full&licenses=FALSE": missing protocol scheme + gcp_test.go:150: error creating identity request: parse "://ca.smallstep.com?audience=https%3A%2F%2Fca%2F1.0%2Fsign%23gcp%2F7WM0pIPD4b&format=full&licenses=FALSE": missing protocol scheme === RUN TestGCP_GetIdentityToken/fail_connect - gcp_test.go:150: error doing identity request, are you in a GCP VM?: Get "foobarzar?audience=https%3A%2F%2Fca%2F1.0%2Fsign%23gcp%2FiFBkqpiQuL&format=full&licenses=FALSE": unsupported protocol scheme "" + gcp_test.go:150: error doing identity request, are you in a GCP VM?: Get "foobarzar?audience=https%3A%2F%2Fca%2F1.0%2Fsign%23gcp%2F7WM0pIPD4b&format=full&licenses=FALSE": unsupported protocol scheme "" --- PASS: TestGCP_GetIdentityToken (0.00s) --- PASS: TestGCP_GetIdentityToken/ok (0.00s) --- PASS: TestGCP_GetIdentityToken/fail_ca_url (0.00s) @@ -6993,7 +7027,7 @@ === RUN TestGCP_Init/bad_duration === RUN TestGCP_Init/bad_claims === RUN TestGCP_Init/bad_certs ---- PASS: TestGCP_Init (0.01s) +--- PASS: TestGCP_Init (0.00s) --- PASS: TestGCP_Init/ok (0.00s) --- PASS: TestGCP_Init/ok#01 (0.00s) --- PASS: TestGCP_Init/ok#02 (0.00s) @@ -7004,29 +7038,29 @@ --- PASS: TestGCP_Init/bad_claims (0.00s) --- PASS: TestGCP_Init/bad_certs (0.00s) === RUN TestGCP_authorizeToken -=== RUN TestGCP_authorizeToken/fail/instance-age -=== RUN TestGCP_authorizeToken/fail/empty-instance-id +=== RUN TestGCP_authorizeToken/fail/cannot-validate-sig +=== RUN TestGCP_authorizeToken/fail/invalid-serviceAccount +=== RUN TestGCP_authorizeToken/fail/invalid-projectID === RUN TestGCP_authorizeToken/fail/empty-instance-name === RUN TestGCP_authorizeToken/fail/empty-project-id === RUN TestGCP_authorizeToken/ok === RUN TestGCP_authorizeToken/fail/bad-token === RUN TestGCP_authorizeToken/fail/invalid-issuer -=== RUN TestGCP_authorizeToken/fail/invalid-projectID +=== RUN TestGCP_authorizeToken/fail/instance-age +=== RUN TestGCP_authorizeToken/fail/empty-instance-id === RUN TestGCP_authorizeToken/fail/empty-zone -=== RUN TestGCP_authorizeToken/fail/cannot-validate-sig -=== RUN TestGCP_authorizeToken/fail/invalid-serviceAccount ---- PASS: TestGCP_authorizeToken (0.01s) - --- PASS: TestGCP_authorizeToken/fail/instance-age (0.00s) - --- PASS: TestGCP_authorizeToken/fail/empty-instance-id (0.00s) +--- PASS: TestGCP_authorizeToken (0.04s) + --- PASS: TestGCP_authorizeToken/fail/cannot-validate-sig (0.00s) + --- PASS: TestGCP_authorizeToken/fail/invalid-serviceAccount (0.00s) + --- PASS: TestGCP_authorizeToken/fail/invalid-projectID (0.01s) --- PASS: TestGCP_authorizeToken/fail/empty-instance-name (0.00s) --- PASS: TestGCP_authorizeToken/fail/empty-project-id (0.00s) - --- PASS: TestGCP_authorizeToken/ok (0.00s) + --- PASS: TestGCP_authorizeToken/ok (0.01s) --- PASS: TestGCP_authorizeToken/fail/bad-token (0.00s) --- PASS: TestGCP_authorizeToken/fail/invalid-issuer (0.00s) - --- PASS: TestGCP_authorizeToken/fail/invalid-projectID (0.00s) + --- PASS: TestGCP_authorizeToken/fail/instance-age (0.00s) + --- PASS: TestGCP_authorizeToken/fail/empty-instance-id (0.00s) --- PASS: TestGCP_authorizeToken/fail/empty-zone (0.00s) - --- PASS: TestGCP_authorizeToken/fail/cannot-validate-sig (0.00s) - --- PASS: TestGCP_authorizeToken/fail/invalid-serviceAccount (0.00s) === RUN TestGCP_AuthorizeSign === RUN TestGCP_AuthorizeSign/ok === RUN TestGCP_AuthorizeSign/ok#01 @@ -7078,19 +7112,19 @@ === RUN TestGCP_AuthorizeSSHSign/fail-type-host === RUN TestGCP_AuthorizeSSHSign/fail-type-user === RUN TestGCP_AuthorizeSSHSign/fail-invalid-token ---- PASS: TestGCP_AuthorizeSSHSign (0.82s) - --- PASS: TestGCP_AuthorizeSSHSign/ok (0.00s) +--- PASS: TestGCP_AuthorizeSSHSign (1.06s) + --- PASS: TestGCP_AuthorizeSSHSign/ok (0.02s) --- PASS: TestGCP_AuthorizeSSHSign/ok-rsa2048 (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/ok-type-host (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/ok-type-user (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/ok-principals (0.00s) - --- PASS: TestGCP_AuthorizeSSHSign/ok-principal1 (0.01s) + --- PASS: TestGCP_AuthorizeSSHSign/ok-principal1 (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/ok-principal2 (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/ok-options (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/ok-custom (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/fail-rsa1024 (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/fail-principal (0.00s) - --- PASS: TestGCP_AuthorizeSSHSign/fail-extra-principal (0.00s) + --- PASS: TestGCP_AuthorizeSSHSign/fail-extra-principal (0.01s) --- PASS: TestGCP_AuthorizeSSHSign/fail-sshCA-disabled (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/fail-type-host (0.00s) --- PASS: TestGCP_AuthorizeSSHSign/fail-type-user (0.00s) @@ -7102,7 +7136,7 @@ --- PASS: TestGCP_AuthorizeRenew/ok (0.00s) --- PASS: TestGCP_AuthorizeRenew/fail/renewal-disabled (0.00s) === RUN TestJWK_Getters ---- PASS: TestJWK_Getters (0.24s) +--- PASS: TestJWK_Getters (0.64s) === RUN TestJWK_Init === RUN TestJWK_Init/fail-empty-key === RUN TestJWK_Init/fail-bad-claims @@ -7130,7 +7164,7 @@ === RUN TestJWK_authorizeToken/ok === RUN TestJWK_authorizeToken/ok-no-encrypted-key === RUN TestJWK_authorizeToken/ok-no-sans ---- PASS: TestJWK_authorizeToken (0.68s) +--- PASS: TestJWK_authorizeToken (2.22s) --- PASS: TestJWK_authorizeToken/fail-token (0.00s) --- PASS: TestJWK_authorizeToken/fail-key (0.00s) --- PASS: TestJWK_authorizeToken/fail-claims (0.00s) @@ -7146,7 +7180,7 @@ === RUN TestJWK_AuthorizeRevoke === RUN TestJWK_AuthorizeRevoke/fail-signature === RUN TestJWK_AuthorizeRevoke/ok ---- PASS: TestJWK_AuthorizeRevoke (0.36s) +--- PASS: TestJWK_AuthorizeRevoke (0.92s) --- PASS: TestJWK_AuthorizeRevoke/fail-signature (0.00s) --- PASS: TestJWK_AuthorizeRevoke/ok (0.00s) === RUN TestJWK_AuthorizeSign @@ -7154,7 +7188,7 @@ === RUN TestJWK_AuthorizeSign/ok-sans === RUN TestJWK_AuthorizeSign/ok-no-sans === RUN TestJWK_AuthorizeSign/ok-cnf ---- PASS: TestJWK_AuthorizeSign (0.30s) +--- PASS: TestJWK_AuthorizeSign (1.12s) --- PASS: TestJWK_AuthorizeSign/fail-signature (0.00s) --- PASS: TestJWK_AuthorizeSign/ok-sans (0.00s) --- PASS: TestJWK_AuthorizeSign/ok-no-sans (0.00s) @@ -7162,7 +7196,7 @@ === RUN TestJWK_AuthorizeRenew === RUN TestJWK_AuthorizeRenew/ok === RUN TestJWK_AuthorizeRenew/fail/renew-disabled ---- PASS: TestJWK_AuthorizeRenew (0.33s) +--- PASS: TestJWK_AuthorizeRenew (1.06s) --- PASS: TestJWK_AuthorizeRenew/ok (0.00s) --- PASS: TestJWK_AuthorizeRenew/fail/renew-disabled (0.00s) === RUN TestJWK_AuthorizeSSHSign @@ -7180,7 +7214,7 @@ === RUN TestJWK_AuthorizeSSHSign/fail-sshCA-disabled === RUN TestJWK_AuthorizeSSHSign/fail-signature === RUN TestJWK_AuthorizeSSHSign/fail-rsa1024 ---- PASS: TestJWK_AuthorizeSSHSign (0.95s) +--- PASS: TestJWK_AuthorizeSSHSign (1.39s) --- PASS: TestJWK_AuthorizeSSHSign/user (0.00s) --- PASS: TestJWK_AuthorizeSSHSign/user-rsa2048 (0.00s) --- PASS: TestJWK_AuthorizeSSHSign/user-type (0.00s) @@ -7211,11 +7245,11 @@ === RUN TestJWK_AuthorizeSign_SSHOptions/fail-audience === RUN TestJWK_AuthorizeSign_SSHOptions/fail-expired === RUN TestJWK_AuthorizeSign_SSHOptions/fail-notBefore ---- PASS: TestJWK_AuthorizeSign_SSHOptions (0.43s) +--- PASS: TestJWK_AuthorizeSign_SSHOptions (2.82s) --- PASS: TestJWK_AuthorizeSign_SSHOptions/ok-user (0.00s) --- PASS: TestJWK_AuthorizeSign_SSHOptions/ok-host (0.00s) - --- PASS: TestJWK_AuthorizeSign_SSHOptions/ok-user-validAfter (0.00s) - --- PASS: TestJWK_AuthorizeSign_SSHOptions/ok-user-validBefore (0.00s) + --- PASS: TestJWK_AuthorizeSign_SSHOptions/ok-user-validAfter (0.01s) + --- PASS: TestJWK_AuthorizeSign_SSHOptions/ok-user-validBefore (0.38s) --- PASS: TestJWK_AuthorizeSign_SSHOptions/ok-user-validAfter-validBefore (0.00s) --- PASS: TestJWK_AuthorizeSign_SSHOptions/ok-user-match (0.00s) --- PASS: TestJWK_AuthorizeSign_SSHOptions/fail-certType (0.00s) @@ -7230,23 +7264,23 @@ === RUN TestJWK_AuthorizeSSHRevoke === RUN TestJWK_AuthorizeSSHRevoke/fail/invalid-token === RUN TestJWK_AuthorizeSSHRevoke/ok ---- PASS: TestJWK_AuthorizeSSHRevoke (0.49s) - --- PASS: TestJWK_AuthorizeSSHRevoke/fail/invalid-token (0.23s) +--- PASS: TestJWK_AuthorizeSSHRevoke (0.52s) + --- PASS: TestJWK_AuthorizeSSHRevoke/fail/invalid-token (0.26s) --- PASS: TestJWK_AuthorizeSSHRevoke/ok (0.26s) === RUN TestK8sSA_Getters --- PASS: TestK8sSA_Getters (0.00s) === RUN TestK8sSA_authorizeToken +=== RUN TestK8sSA_authorizeToken/fail/bad-token +=== RUN TestK8sSA_authorizeToken/fail/not-implemented === RUN TestK8sSA_authorizeToken/fail/error-validating-token === RUN TestK8sSA_authorizeToken/fail/invalid-issuer === RUN TestK8sSA_authorizeToken/ok -=== RUN TestK8sSA_authorizeToken/fail/bad-token -=== RUN TestK8sSA_authorizeToken/fail/not-implemented --- PASS: TestK8sSA_authorizeToken (0.00s) + --- PASS: TestK8sSA_authorizeToken/fail/bad-token (0.00s) + --- PASS: TestK8sSA_authorizeToken/fail/not-implemented (0.00s) --- PASS: TestK8sSA_authorizeToken/fail/error-validating-token (0.00s) --- PASS: TestK8sSA_authorizeToken/fail/invalid-issuer (0.00s) --- PASS: TestK8sSA_authorizeToken/ok (0.00s) - --- PASS: TestK8sSA_authorizeToken/fail/bad-token (0.00s) - --- PASS: TestK8sSA_authorizeToken/fail/not-implemented (0.00s) === RUN TestK8sSA_AuthorizeRevoke === RUN TestK8sSA_AuthorizeRevoke/fail/invalid-token === RUN TestK8sSA_AuthorizeRevoke/ok @@ -7266,22 +7300,22 @@ --- PASS: TestK8sSA_AuthorizeSign/fail/invalid-token (0.00s) --- PASS: TestK8sSA_AuthorizeSign/ok (0.00s) === RUN TestK8sSA_AuthorizeSSHSign -=== RUN TestK8sSA_AuthorizeSSHSign/fail/sshCA-disabled === RUN TestK8sSA_AuthorizeSSHSign/fail/invalid-token === RUN TestK8sSA_AuthorizeSSHSign/ok +=== RUN TestK8sSA_AuthorizeSSHSign/fail/sshCA-disabled --- PASS: TestK8sSA_AuthorizeSSHSign (0.00s) - --- PASS: TestK8sSA_AuthorizeSSHSign/fail/sshCA-disabled (0.00s) --- PASS: TestK8sSA_AuthorizeSSHSign/fail/invalid-token (0.00s) --- PASS: TestK8sSA_AuthorizeSSHSign/ok (0.00s) + --- PASS: TestK8sSA_AuthorizeSSHSign/fail/sshCA-disabled (0.00s) === RUN Test_newKeyStore === RUN Test_newKeyStore/ok === RUN Test_newKeyStore/fail === RUN Test_newKeyStore/fail_client -2026/11/25 04:49:40 http: TLS handshake error from 127.0.0.1:33434: read tcp 127.0.0.1:46233->127.0.0.1:33434: use of closed network connection ---- PASS: Test_newKeyStore (0.02s) +2025/10/24 00:33:13 http: TLS handshake error from 127.0.0.1:44096: remote error: tls: bad certificate +--- PASS: Test_newKeyStore (0.39s) --- PASS: Test_newKeyStore/ok (0.00s) --- PASS: Test_newKeyStore/fail (0.00s) - --- PASS: Test_newKeyStore/fail_client (0.01s) + --- PASS: Test_newKeyStore/fail_client (0.02s) === RUN Test_keyStore --- PASS: Test_keyStore (5.02s) === RUN Test_keyStore_noCache @@ -7342,8 +7376,8 @@ === RUN TestOIDC_Init/bad-get-url === RUN TestOIDC_Init/bad-listen-address === RUN TestOIDC_Init/bad-http-client -2026/11/25 04:49:45 http: TLS handshake error from 127.0.0.1:47934: remote error: tls: bad certificate ---- PASS: TestOIDC_Init (0.03s) +2025/10/24 00:33:18 http: TLS handshake error from 127.0.0.1:42280: read tcp 127.0.0.1:42751->127.0.0.1:42280: use of closed network connection +--- PASS: TestOIDC_Init (0.04s) --- PASS: TestOIDC_Init/ok (0.00s) --- PASS: TestOIDC_Init/ok_tls (0.02s) --- PASS: TestOIDC_Init/ok-admins (0.00s) @@ -7360,7 +7394,7 @@ --- PASS: TestOIDC_Init/bad-parse-url (0.00s) --- PASS: TestOIDC_Init/bad-get-url (0.00s) --- PASS: TestOIDC_Init/bad-listen-address (0.00s) - --- PASS: TestOIDC_Init/bad-http-client (0.01s) + --- PASS: TestOIDC_Init/bad-http-client (0.02s) === RUN TestOIDC_authorizeToken === RUN TestOIDC_authorizeToken/ok1 === RUN TestOIDC_authorizeToken/ok_tenantid @@ -7376,7 +7410,7 @@ === RUN TestOIDC_authorizeToken/fail-signature === RUN TestOIDC_authorizeToken/fail-expired === RUN TestOIDC_authorizeToken/fail-not-before ---- PASS: TestOIDC_authorizeToken (0.01s) +--- PASS: TestOIDC_authorizeToken (0.03s) --- PASS: TestOIDC_authorizeToken/ok1 (0.00s) --- PASS: TestOIDC_authorizeToken/ok_tenantid (0.00s) --- PASS: TestOIDC_authorizeToken/ok_admin (0.00s) @@ -7390,7 +7424,7 @@ --- PASS: TestOIDC_authorizeToken/fail-audience (0.00s) --- PASS: TestOIDC_authorizeToken/fail-signature (0.00s) --- PASS: TestOIDC_authorizeToken/fail-expired (0.00s) - --- PASS: TestOIDC_authorizeToken/fail-not-before (0.00s) + --- PASS: TestOIDC_authorizeToken/fail-not-before (0.01s) === RUN TestOIDC_AuthorizeSign === RUN TestOIDC_AuthorizeSign/ok1 === RUN TestOIDC_AuthorizeSign/admin @@ -7399,7 +7433,7 @@ --- PASS: TestOIDC_AuthorizeSign (0.02s) --- PASS: TestOIDC_AuthorizeSign/ok1 (0.00s) --- PASS: TestOIDC_AuthorizeSign/admin (0.00s) - --- PASS: TestOIDC_AuthorizeSign/no-email (0.00s) + --- PASS: TestOIDC_AuthorizeSign/no-email (0.01s) --- PASS: TestOIDC_AuthorizeSign/bad-token (0.00s) === RUN TestOIDC_AuthorizeRevoke === RUN TestOIDC_AuthorizeRevoke/ok1 @@ -7435,13 +7469,13 @@ === RUN TestOIDC_AuthorizeSSHSign/fail-admin-type === RUN TestOIDC_AuthorizeSSHSign/fail-admin-key-id === RUN TestOIDC_AuthorizeSSHSign/fail-admin-principals ---- PASS: TestOIDC_AuthorizeSSHSign (0.96s) +--- PASS: TestOIDC_AuthorizeSSHSign (0.74s) --- PASS: TestOIDC_AuthorizeSSHSign/ok (0.00s) --- PASS: TestOIDC_AuthorizeSSHSign/ok-rsa2048 (0.00s) --- PASS: TestOIDC_AuthorizeSSHSign/ok-user (0.00s) --- PASS: TestOIDC_AuthorizeSSHSign/ok-empty-email (0.00s) --- PASS: TestOIDC_AuthorizeSSHSign/ok-principals (0.00s) - --- PASS: TestOIDC_AuthorizeSSHSign/ok-principals-ignore-passed (0.00s) + --- PASS: TestOIDC_AuthorizeSSHSign/ok-principals-ignore-passed (0.02s) --- PASS: TestOIDC_AuthorizeSSHSign/ok-principals-getIdentity (0.00s) --- PASS: TestOIDC_AuthorizeSSHSign/ok-emptyPrincipals-getIdentity (0.00s) --- PASS: TestOIDC_AuthorizeSSHSign/ok-options (0.00s) @@ -7529,7 +7563,7 @@ === RUN TestTemplateOptions/ok === RUN TestTemplateOptions/okCustomTemplate === RUN TestTemplateOptions/fail ---- PASS: TestTemplateOptions (0.00s) +--- PASS: TestTemplateOptions (0.01s) --- PASS: TestTemplateOptions/ok (0.00s) --- PASS: TestTemplateOptions/okCustomTemplate (0.00s) --- PASS: TestTemplateOptions/fail (0.00s) @@ -7582,27 +7616,27 @@ --- PASS: TestSanitizeSSHUserPrincipal/email_with_underscores (0.00s) --- PASS: TestSanitizeSSHUserPrincipal/email_with_symbols (0.00s) === RUN TestDefaultIdentityFunc -=== RUN TestDefaultIdentityFunc/fail/unsupported-provisioner +=== RUN TestDefaultIdentityFunc/ok === RUN TestDefaultIdentityFunc/ok_letter_case +=== RUN TestDefaultIdentityFunc/ok_simple === RUN TestDefaultIdentityFunc/ok_symbol === RUN TestDefaultIdentityFunc/ok_username -=== RUN TestDefaultIdentityFunc/ok_empty_username -=== RUN TestDefaultIdentityFunc/ok -=== RUN TestDefaultIdentityFunc/ok_simple -=== RUN TestDefaultIdentityFunc/ok_simple_letter_case === RUN TestDefaultIdentityFunc/ok_usernames +=== RUN TestDefaultIdentityFunc/ok_simple_letter_case +=== RUN TestDefaultIdentityFunc/ok_empty_username === RUN TestDefaultIdentityFunc/ok/badname ---- PASS: TestDefaultIdentityFunc (0.00s) - --- PASS: TestDefaultIdentityFunc/fail/unsupported-provisioner (0.00s) +=== RUN TestDefaultIdentityFunc/fail/unsupported-provisioner +--- PASS: TestDefaultIdentityFunc (0.01s) + --- PASS: TestDefaultIdentityFunc/ok (0.00s) --- PASS: TestDefaultIdentityFunc/ok_letter_case (0.00s) + --- PASS: TestDefaultIdentityFunc/ok_simple (0.00s) --- PASS: TestDefaultIdentityFunc/ok_symbol (0.00s) --- PASS: TestDefaultIdentityFunc/ok_username (0.00s) - --- PASS: TestDefaultIdentityFunc/ok_empty_username (0.00s) - --- PASS: TestDefaultIdentityFunc/ok (0.00s) - --- PASS: TestDefaultIdentityFunc/ok_simple (0.00s) - --- PASS: TestDefaultIdentityFunc/ok_simple_letter_case (0.00s) --- PASS: TestDefaultIdentityFunc/ok_usernames (0.00s) + --- PASS: TestDefaultIdentityFunc/ok_simple_letter_case (0.00s) + --- PASS: TestDefaultIdentityFunc/ok_empty_username (0.00s) --- PASS: TestDefaultIdentityFunc/ok/badname (0.00s) + --- PASS: TestDefaultIdentityFunc/fail/unsupported-provisioner (0.00s) === RUN TestUnimplementedMethods === RUN TestUnimplementedMethods/jwk/sshRekey === RUN TestUnimplementedMethods/jwk/sshRenew @@ -7634,7 +7668,7 @@ === RUN TestUnimplementedMethods/k8ssa/sshRekey === RUN TestUnimplementedMethods/k8ssa/sshRenew === RUN TestUnimplementedMethods/k8ssa/sshRevoke ---- PASS: TestUnimplementedMethods (0.01s) +--- PASS: TestUnimplementedMethods (0.00s) --- PASS: TestUnimplementedMethods/jwk/sshRekey (0.00s) --- PASS: TestUnimplementedMethods/jwk/sshRenew (0.00s) --- PASS: TestUnimplementedMethods/aws/revoke (0.00s) @@ -7680,7 +7714,7 @@ --- PASS: Test_challengeValidationController_Validate/fail/no-webhook (0.00s) --- PASS: Test_challengeValidationController_Validate/fail/wrong-cert-type (0.00s) --- PASS: Test_challengeValidationController_Validate/fail/wrong-secret-value (0.00s) - --- PASS: Test_challengeValidationController_Validate/fail/not-allowed (0.00s) + --- PASS: Test_challengeValidationController_Validate/fail/not-allowed (0.01s) --- PASS: Test_challengeValidationController_Validate/ok (0.00s) --- PASS: Test_challengeValidationController_Validate/ok_with_data (0.00s) === RUN TestController_isCertTypeOK @@ -7734,7 +7768,7 @@ === RUN TestSCEP_Init/fail_uri_type === RUN TestSCEP_Init/fail_missing_certificate === RUN TestSCEP_Init/fail_key_match ---- PASS: TestSCEP_Init (0.79s) +--- PASS: TestSCEP_Init (4.05s) --- PASS: TestSCEP_Init/ok (0.00s) --- PASS: TestSCEP_Init/ok_no_password (0.00s) --- PASS: TestSCEP_Init/ok_with_uri (0.00s) @@ -7886,19 +7920,19 @@ --- PASS: Test_urisValidator_Valid/fail2 (0.00s) --- PASS: Test_urisValidator_Valid/fail3 (0.00s) === RUN Test_defaultSANsValidator_Valid -=== RUN Test_defaultSANsValidator_Valid/fail/dnsNamesValidator === RUN Test_defaultSANsValidator_Valid/fail/emailAddressesValidator === RUN Test_defaultSANsValidator_Valid/fail/ipAddressesValidator === RUN Test_defaultSANsValidator_Valid/fail/urisValidator === RUN Test_defaultSANsValidator_Valid/ok/urisBadValidator-SignIdentity === RUN Test_defaultSANsValidator_Valid/ok +=== RUN Test_defaultSANsValidator_Valid/fail/dnsNamesValidator --- PASS: Test_defaultSANsValidator_Valid (0.00s) - --- PASS: Test_defaultSANsValidator_Valid/fail/dnsNamesValidator (0.00s) --- PASS: Test_defaultSANsValidator_Valid/fail/emailAddressesValidator (0.00s) --- PASS: Test_defaultSANsValidator_Valid/fail/ipAddressesValidator (0.00s) --- PASS: Test_defaultSANsValidator_Valid/fail/urisValidator (0.00s) --- PASS: Test_defaultSANsValidator_Valid/ok/urisBadValidator-SignIdentity (0.00s) --- PASS: Test_defaultSANsValidator_Valid/ok (0.00s) + --- PASS: Test_defaultSANsValidator_Valid/fail/dnsNamesValidator (0.00s) === RUN Test_validityValidator_Valid === RUN Test_validityValidator_Valid/fail/duration-too-short === RUN Test_validityValidator_Valid/ok/duration-exactly-min @@ -7913,38 +7947,38 @@ --- PASS: Test_validityValidator_Valid/ok/duration-exactly-min (0.00s) --- PASS: Test_validityValidator_Valid/fail/duration-too-great (0.00s) --- PASS: Test_validityValidator_Valid/ok/duration-exactly-max (0.00s) - --- PASS: Test_validityValidator_Valid/ok/duration-exact-min-with-backdate (1.01s) + --- PASS: Test_validityValidator_Valid/ok/duration-exact-min-with-backdate (1.00s) --- PASS: Test_validityValidator_Valid/ok/duration-exact-max-with-backdate (1.00s) --- PASS: Test_validityValidator_Valid/fail/notAfter-past (0.00s) --- PASS: Test_validityValidator_Valid/fail/notBefore-after-notAfter (0.00s) === RUN Test_forceCN_Option -=== RUN Test_forceCN_Option/fail/CN-forced-and-empty-DNSNames === RUN Test_forceCN_Option/ok/CN-not-forced === RUN Test_forceCN_Option/ok/CN-forced-and-set === RUN Test_forceCN_Option/ok/CN-forced-and-not-set +=== RUN Test_forceCN_Option/fail/CN-forced-and-empty-DNSNames --- PASS: Test_forceCN_Option (0.00s) - --- PASS: Test_forceCN_Option/fail/CN-forced-and-empty-DNSNames (0.00s) --- PASS: Test_forceCN_Option/ok/CN-not-forced (0.00s) --- PASS: Test_forceCN_Option/ok/CN-forced-and-set (0.00s) --- PASS: Test_forceCN_Option/ok/CN-forced-and-not-set (0.00s) + --- PASS: Test_forceCN_Option/fail/CN-forced-and-empty-DNSNames (0.00s) === RUN Test_profileDefaultDuration_Option -=== RUN Test_profileDefaultDuration_Option/ok/cert-notBefore-option-notafter -=== RUN Test_profileDefaultDuration_Option/ok/cert-notAfter-option-notBefore -=== RUN Test_profileDefaultDuration_Option/ok/notBefore-notAfter-duration-empty -=== RUN Test_profileDefaultDuration_Option/ok/notBefore-set === RUN Test_profileDefaultDuration_Option/ok/duration-set === RUN Test_profileDefaultDuration_Option/ok/notAfter-set === RUN Test_profileDefaultDuration_Option/ok/notBefore-and-notAfter-set === RUN Test_profileDefaultDuration_Option/ok/cert-with-validity ---- PASS: Test_profileDefaultDuration_Option (0.81s) - --- PASS: Test_profileDefaultDuration_Option/ok/cert-notBefore-option-notafter (0.10s) - --- PASS: Test_profileDefaultDuration_Option/ok/cert-notAfter-option-notBefore (0.10s) - --- PASS: Test_profileDefaultDuration_Option/ok/notBefore-notAfter-duration-empty (0.10s) - --- PASS: Test_profileDefaultDuration_Option/ok/notBefore-set (0.10s) +=== RUN Test_profileDefaultDuration_Option/ok/cert-notBefore-option-notafter +=== RUN Test_profileDefaultDuration_Option/ok/cert-notAfter-option-notBefore +=== RUN Test_profileDefaultDuration_Option/ok/notBefore-notAfter-duration-empty +=== RUN Test_profileDefaultDuration_Option/ok/notBefore-set +--- PASS: Test_profileDefaultDuration_Option (0.83s) --- PASS: Test_profileDefaultDuration_Option/ok/duration-set (0.10s) --- PASS: Test_profileDefaultDuration_Option/ok/notAfter-set (0.10s) --- PASS: Test_profileDefaultDuration_Option/ok/notBefore-and-notAfter-set (0.10s) --- PASS: Test_profileDefaultDuration_Option/ok/cert-with-validity (0.10s) + --- PASS: Test_profileDefaultDuration_Option/ok/cert-notBefore-option-notafter (0.11s) + --- PASS: Test_profileDefaultDuration_Option/ok/cert-notAfter-option-notBefore (0.10s) + --- PASS: Test_profileDefaultDuration_Option/ok/notBefore-notAfter-duration-empty (0.10s) + --- PASS: Test_profileDefaultDuration_Option/ok/notBefore-set (0.11s) === RUN Test_newProvisionerExtension_Option === RUN Test_newProvisionerExtension_Option/ok/one-element === RUN Test_newProvisionerExtension_Option/ok/replace @@ -7954,35 +7988,35 @@ --- PASS: Test_newProvisionerExtension_Option/ok/replace (0.00s) --- PASS: Test_newProvisionerExtension_Option/ok/disabled (0.00s) === RUN Test_profileLimitDuration_Option -=== RUN Test_profileLimitDuration_Option/ok/cert-notBefore-option -=== RUN Test_profileLimitDuration_Option/ok/cert-notAfter-option -=== RUN Test_profileLimitDuration_Option/fail/notBefore-before-active-window === RUN Test_profileLimitDuration_Option/fail/requested-notAfter-after-limit === RUN Test_profileLimitDuration_Option/fail/cert-validity-notBefore === RUN Test_profileLimitDuration_Option/fail/cert-validity-notAfter -=== RUN Test_profileLimitDuration_Option/ok/valid-notAfter-requested === RUN Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-over-default -=== RUN Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-under-default === RUN Test_profileLimitDuration_Option/ok/over-limit-with-backdate -=== RUN Test_profileLimitDuration_Option/ok/under-limit-with-backdate -=== RUN Test_profileLimitDuration_Option/ok/cert-validity === RUN Test_profileLimitDuration_Option/ok/cert-notBefore-default === RUN Test_profileLimitDuration_Option/ok/cert-notAfter-default +=== RUN Test_profileLimitDuration_Option/ok/cert-notBefore-option +=== RUN Test_profileLimitDuration_Option/fail/notBefore-before-active-window +=== RUN Test_profileLimitDuration_Option/ok/valid-notAfter-requested +=== RUN Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-under-default +=== RUN Test_profileLimitDuration_Option/ok/under-limit-with-backdate +=== RUN Test_profileLimitDuration_Option/ok/cert-validity +=== RUN Test_profileLimitDuration_Option/ok/cert-notAfter-option --- PASS: Test_profileLimitDuration_Option (0.00s) - --- PASS: Test_profileLimitDuration_Option/ok/cert-notBefore-option (0.00s) - --- PASS: Test_profileLimitDuration_Option/ok/cert-notAfter-option (0.00s) - --- PASS: Test_profileLimitDuration_Option/fail/notBefore-before-active-window (0.00s) --- PASS: Test_profileLimitDuration_Option/fail/requested-notAfter-after-limit (0.00s) --- PASS: Test_profileLimitDuration_Option/fail/cert-validity-notBefore (0.00s) --- PASS: Test_profileLimitDuration_Option/fail/cert-validity-notAfter (0.00s) - --- PASS: Test_profileLimitDuration_Option/ok/valid-notAfter-requested (0.00s) --- PASS: Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-over-default (0.00s) - --- PASS: Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-under-default (0.00s) --- PASS: Test_profileLimitDuration_Option/ok/over-limit-with-backdate (0.00s) - --- PASS: Test_profileLimitDuration_Option/ok/under-limit-with-backdate (0.00s) - --- PASS: Test_profileLimitDuration_Option/ok/cert-validity (0.00s) --- PASS: Test_profileLimitDuration_Option/ok/cert-notBefore-default (0.00s) --- PASS: Test_profileLimitDuration_Option/ok/cert-notAfter-default (0.00s) + --- PASS: Test_profileLimitDuration_Option/ok/cert-notBefore-option (0.00s) + --- PASS: Test_profileLimitDuration_Option/fail/notBefore-before-active-window (0.00s) + --- PASS: Test_profileLimitDuration_Option/ok/valid-notAfter-requested (0.00s) + --- PASS: Test_profileLimitDuration_Option/ok/valid-notAfter-nil-limit-under-default (0.00s) + --- PASS: Test_profileLimitDuration_Option/ok/under-limit-with-backdate (0.00s) + --- PASS: Test_profileLimitDuration_Option/ok/cert-validity (0.00s) + --- PASS: Test_profileLimitDuration_Option/ok/cert-notAfter-option (0.00s) === RUN TestSSHOptions_Type === RUN TestSSHOptions_Type/user === RUN TestSSHOptions_Type/host @@ -7994,33 +8028,33 @@ --- PASS: TestSSHOptions_Type/empty (0.00s) --- PASS: TestSSHOptions_Type/invalid (0.00s) === RUN TestSSHOptions_Modify -=== RUN TestSSHOptions_Modify/fail/unexpected-cert-type -=== RUN TestSSHOptions_Modify/fail/validAfter-greater-validBefore === RUN TestSSHOptions_Modify/ok/user-cert === RUN TestSSHOptions_Modify/ok/host-cert === RUN TestSSHOptions_Modify/ok +=== RUN TestSSHOptions_Modify/fail/unexpected-cert-type +=== RUN TestSSHOptions_Modify/fail/validAfter-greater-validBefore --- PASS: TestSSHOptions_Modify (0.00s) - --- PASS: TestSSHOptions_Modify/fail/unexpected-cert-type (0.00s) - --- PASS: TestSSHOptions_Modify/fail/validAfter-greater-validBefore (0.00s) --- PASS: TestSSHOptions_Modify/ok/user-cert (0.00s) --- PASS: TestSSHOptions_Modify/ok/host-cert (0.00s) --- PASS: TestSSHOptions_Modify/ok (0.00s) + --- PASS: TestSSHOptions_Modify/fail/unexpected-cert-type (0.00s) + --- PASS: TestSSHOptions_Modify/fail/validAfter-greater-validBefore (0.00s) === RUN TestSSHOptions_Match -=== RUN TestSSHOptions_Match/ok/equal -=== RUN TestSSHOptions_Match/fail/cert-type === RUN TestSSHOptions_Match/fail/pricipals === RUN TestSSHOptions_Match/fail/validAfter === RUN TestSSHOptions_Match/fail/validBefore === RUN TestSSHOptions_Match/ok/original-empty === RUN TestSSHOptions_Match/ok/cmp-empty ---- PASS: TestSSHOptions_Match (0.01s) - --- PASS: TestSSHOptions_Match/ok/equal (0.00s) - --- PASS: TestSSHOptions_Match/fail/cert-type (0.00s) +=== RUN TestSSHOptions_Match/ok/equal +=== RUN TestSSHOptions_Match/fail/cert-type +--- PASS: TestSSHOptions_Match (0.00s) --- PASS: TestSSHOptions_Match/fail/pricipals (0.00s) --- PASS: TestSSHOptions_Match/fail/validAfter (0.00s) --- PASS: TestSSHOptions_Match/fail/validBefore (0.00s) --- PASS: TestSSHOptions_Match/ok/original-empty (0.00s) --- PASS: TestSSHOptions_Match/ok/cmp-empty (0.00s) + --- PASS: TestSSHOptions_Match/ok/equal (0.00s) + --- PASS: TestSSHOptions_Match/fail/cert-type (0.00s) === RUN Test_sshCertValidAfterModifier_Modify === RUN Test_sshCertValidAfterModifier_Modify/ok --- PASS: Test_sshCertValidAfterModifier_Modify (0.00s) @@ -8040,7 +8074,7 @@ === RUN Test_sshCertDefaultValidator_Valid/ok/hostCert === RUN Test_sshCertDefaultValidator_Valid/ok/emptyPrincipals === RUN Test_sshCertDefaultValidator_Valid/ok/empty-extensions ---- PASS: Test_sshCertDefaultValidator_Valid (0.00s) +--- PASS: Test_sshCertDefaultValidator_Valid (0.01s) --- PASS: Test_sshCertDefaultValidator_Valid/fail/zero-nonce (0.00s) --- PASS: Test_sshCertDefaultValidator_Valid/fail/nil-key (0.00s) --- PASS: Test_sshCertDefaultValidator_Valid/fail/zero-serial (0.00s) @@ -8078,25 +8112,25 @@ --- PASS: Test_sshCertValidityValidator/ok/duration-exactly-max (0.00s) --- PASS: Test_sshCertValidityValidator/ok (0.00s) === RUN Test_sshValidityModifier -=== RUN Test_sshValidityModifier/ok/empty-requested-validBefore-limit-before-default === RUN Test_sshValidityModifier/fail/requested-validBefore-after-limit +=== RUN Test_sshValidityModifier/ok/empty-requested-validBefore-limit-before-default +=== RUN Test_sshValidityModifier/ok/no-limit === RUN Test_sshValidityModifier/ok/defaults +=== RUN Test_sshValidityModifier/ok/valid-requested-validBefore +=== RUN Test_sshValidityModifier/ok/empty-requested-validBefore-limit-after-default === RUN Test_sshValidityModifier/fail/type-not-set === RUN Test_sshValidityModifier/fail/type-not-recognized === RUN Test_sshValidityModifier/fail/requested-validAfter-after-limit -=== RUN Test_sshValidityModifier/ok/no-limit -=== RUN Test_sshValidityModifier/ok/valid-requested-validBefore -=== RUN Test_sshValidityModifier/ok/empty-requested-validBefore-limit-after-default --- PASS: Test_sshValidityModifier (0.00s) - --- PASS: Test_sshValidityModifier/ok/empty-requested-validBefore-limit-before-default (0.00s) --- PASS: Test_sshValidityModifier/fail/requested-validBefore-after-limit (0.00s) + --- PASS: Test_sshValidityModifier/ok/empty-requested-validBefore-limit-before-default (0.00s) + --- PASS: Test_sshValidityModifier/ok/no-limit (0.00s) --- PASS: Test_sshValidityModifier/ok/defaults (0.00s) + --- PASS: Test_sshValidityModifier/ok/valid-requested-validBefore (0.00s) + --- PASS: Test_sshValidityModifier/ok/empty-requested-validBefore-limit-after-default (0.00s) --- PASS: Test_sshValidityModifier/fail/type-not-set (0.00s) --- PASS: Test_sshValidityModifier/fail/type-not-recognized (0.00s) --- PASS: Test_sshValidityModifier/fail/requested-validAfter-after-limit (0.00s) - --- PASS: Test_sshValidityModifier/ok/no-limit (0.00s) - --- PASS: Test_sshValidityModifier/ok/valid-requested-validBefore (0.00s) - --- PASS: Test_sshValidityModifier/ok/empty-requested-validBefore-limit-after-default (0.00s) === RUN Test_sshDefaultDuration_Option === RUN Test_sshDefaultDuration_Option/user === RUN Test_sshDefaultDuration_Option/host @@ -8133,7 +8167,7 @@ === RUN TestCustomSSHTemplateOptions/okNulUserOptions === RUN TestCustomSSHTemplateOptions/okBadUserOptions === RUN TestCustomSSHTemplateOptions/fail ---- PASS: TestCustomSSHTemplateOptions (0.01s) +--- PASS: TestCustomSSHTemplateOptions (0.02s) --- PASS: TestCustomSSHTemplateOptions/ok (0.00s) --- PASS: TestCustomSSHTemplateOptions/okNoData (0.00s) --- PASS: TestCustomSSHTemplateOptions/okTemplateData (0.00s) @@ -8142,69 +8176,69 @@ --- PASS: TestCustomSSHTemplateOptions/okFile (0.00s) --- PASS: TestCustomSSHTemplateOptions/okBase64 (0.00s) --- PASS: TestCustomSSHTemplateOptions/okUserOptions (0.00s) - --- PASS: TestCustomSSHTemplateOptions/okNulUserOptions (0.01s) + --- PASS: TestCustomSSHTemplateOptions/okNulUserOptions (0.00s) --- PASS: TestCustomSSHTemplateOptions/okBadUserOptions (0.00s) --- PASS: TestCustomSSHTemplateOptions/fail (0.00s) === RUN TestSSHPOP_Getters --- PASS: TestSSHPOP_Getters (0.00s) === RUN TestSSHPOP_authorizeToken -=== RUN TestSSHPOP_authorizeToken/fail/cert-past-validity +=== RUN TestSSHPOP_authorizeToken/fail/cert-not-yet-valid === RUN TestSSHPOP_authorizeToken/fail/no-signer-found -=== RUN TestSSHPOP_authorizeToken/fail/invalid-claims-issuer -=== RUN TestSSHPOP_authorizeToken/fail/invalid-audience +=== RUN TestSSHPOP_authorizeToken/fail/error-parsing-claims-bad-sig === RUN TestSSHPOP_authorizeToken/fail/empty-subject === RUN TestSSHPOP_authorizeToken/ok +=== RUN TestSSHPOP_authorizeToken/fail/cert-past-validity +=== RUN TestSSHPOP_authorizeToken/fail/invalid-claims-issuer +=== RUN TestSSHPOP_authorizeToken/fail/invalid-audience === RUN TestSSHPOP_authorizeToken/fail/bad-token -=== RUN TestSSHPOP_authorizeToken/fail/cert-not-yet-valid -=== RUN TestSSHPOP_authorizeToken/fail/error-parsing-claims-bad-sig ---- PASS: TestSSHPOP_authorizeToken (0.01s) - --- PASS: TestSSHPOP_authorizeToken/fail/cert-past-validity (0.00s) +--- PASS: TestSSHPOP_authorizeToken (0.02s) + --- PASS: TestSSHPOP_authorizeToken/fail/cert-not-yet-valid (0.00s) --- PASS: TestSSHPOP_authorizeToken/fail/no-signer-found (0.00s) - --- PASS: TestSSHPOP_authorizeToken/fail/invalid-claims-issuer (0.00s) - --- PASS: TestSSHPOP_authorizeToken/fail/invalid-audience (0.00s) + --- PASS: TestSSHPOP_authorizeToken/fail/error-parsing-claims-bad-sig (0.01s) --- PASS: TestSSHPOP_authorizeToken/fail/empty-subject (0.00s) --- PASS: TestSSHPOP_authorizeToken/ok (0.00s) + --- PASS: TestSSHPOP_authorizeToken/fail/cert-past-validity (0.00s) + --- PASS: TestSSHPOP_authorizeToken/fail/invalid-claims-issuer (0.00s) + --- PASS: TestSSHPOP_authorizeToken/fail/invalid-audience (0.00s) --- PASS: TestSSHPOP_authorizeToken/fail/bad-token (0.00s) - --- PASS: TestSSHPOP_authorizeToken/fail/cert-not-yet-valid (0.00s) - --- PASS: TestSSHPOP_authorizeToken/fail/error-parsing-claims-bad-sig (0.00s) === RUN TestSSHPOP_AuthorizeSSHRevoke +=== RUN TestSSHPOP_AuthorizeSSHRevoke/ok === RUN TestSSHPOP_AuthorizeSSHRevoke/fail/bad-token === RUN TestSSHPOP_AuthorizeSSHRevoke/fail/subject-not-equal-serial -=== RUN TestSSHPOP_AuthorizeSSHRevoke/ok ---- PASS: TestSSHPOP_AuthorizeSSHRevoke (0.01s) - --- PASS: TestSSHPOP_AuthorizeSSHRevoke/fail/bad-token (0.00s) - --- PASS: TestSSHPOP_AuthorizeSSHRevoke/fail/subject-not-equal-serial (0.01s) +--- PASS: TestSSHPOP_AuthorizeSSHRevoke (0.00s) --- PASS: TestSSHPOP_AuthorizeSSHRevoke/ok (0.00s) + --- PASS: TestSSHPOP_AuthorizeSSHRevoke/fail/bad-token (0.00s) + --- PASS: TestSSHPOP_AuthorizeSSHRevoke/fail/subject-not-equal-serial (0.00s) === RUN TestSSHPOP_AuthorizeSSHRenew === RUN TestSSHPOP_AuthorizeSSHRenew/fail/bad-token === RUN TestSSHPOP_AuthorizeSSHRenew/fail/not-host-cert === RUN TestSSHPOP_AuthorizeSSHRenew/ok ---- PASS: TestSSHPOP_AuthorizeSSHRenew (0.00s) +--- PASS: TestSSHPOP_AuthorizeSSHRenew (0.02s) --- PASS: TestSSHPOP_AuthorizeSSHRenew/fail/bad-token (0.00s) - --- PASS: TestSSHPOP_AuthorizeSSHRenew/fail/not-host-cert (0.00s) + --- PASS: TestSSHPOP_AuthorizeSSHRenew/fail/not-host-cert (0.02s) --- PASS: TestSSHPOP_AuthorizeSSHRenew/ok (0.00s) === RUN TestSSHPOP_AuthorizeSSHRekey -=== RUN TestSSHPOP_AuthorizeSSHRekey/ok === RUN TestSSHPOP_AuthorizeSSHRekey/fail/bad-token === RUN TestSSHPOP_AuthorizeSSHRekey/fail/not-host-cert +=== RUN TestSSHPOP_AuthorizeSSHRekey/ok --- PASS: TestSSHPOP_AuthorizeSSHRekey (0.01s) - --- PASS: TestSSHPOP_AuthorizeSSHRekey/ok (0.00s) --- PASS: TestSSHPOP_AuthorizeSSHRekey/fail/bad-token (0.00s) - --- PASS: TestSSHPOP_AuthorizeSSHRekey/fail/not-host-cert (0.01s) + --- PASS: TestSSHPOP_AuthorizeSSHRekey/fail/not-host-cert (0.00s) + --- PASS: TestSSHPOP_AuthorizeSSHRekey/ok (0.01s) === RUN TestSSHPOP_ExtractSSHPOPCert +=== RUN TestSSHPOP_ExtractSSHPOPCert/fail/bad-token +=== RUN TestSSHPOP_ExtractSSHPOPCert/fail/sshpop-missing === RUN TestSSHPOP_ExtractSSHPOPCert/fail/wrong-sshpop-type === RUN TestSSHPOP_ExtractSSHPOPCert/fail/base64decode-error === RUN TestSSHPOP_ExtractSSHPOPCert/fail/parsing-sshpop-pubkey === RUN TestSSHPOP_ExtractSSHPOPCert/ok -=== RUN TestSSHPOP_ExtractSSHPOPCert/fail/bad-token -=== RUN TestSSHPOP_ExtractSSHPOPCert/fail/sshpop-missing ---- PASS: TestSSHPOP_ExtractSSHPOPCert (0.00s) +--- PASS: TestSSHPOP_ExtractSSHPOPCert (0.01s) + --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/bad-token (0.00s) + --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/sshpop-missing (0.00s) --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/wrong-sshpop-type (0.00s) --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/base64decode-error (0.00s) --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/parsing-sshpop-pubkey (0.00s) --- PASS: TestSSHPOP_ExtractSSHPOPCert/ok (0.00s) - --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/bad-token (0.00s) - --- PASS: TestSSHPOP_ExtractSSHPOPCert/fail/sshpop-missing (0.00s) === RUN TestNewTimeDuration === RUN TestNewTimeDuration/ok === RUN TestNewTimeDuration/zero @@ -8265,7 +8299,7 @@ === RUN TestTimeDuration_UnmarshalJSON/duration === RUN TestTimeDuration_UnmarshalJSON/fail === RUN TestTimeDuration_UnmarshalJSON/fail#01 ---- PASS: TestTimeDuration_UnmarshalJSON (0.00s) +--- PASS: TestTimeDuration_UnmarshalJSON (0.01s) --- PASS: TestTimeDuration_UnmarshalJSON/empty (0.00s) --- PASS: TestTimeDuration_UnmarshalJSON/timestamp (0.00s) --- PASS: TestTimeDuration_UnmarshalJSON/duration (0.00s) @@ -8306,124 +8340,125 @@ --- PASS: TestTimeDuration_String/timestamp (0.00s) --- PASS: TestTimeDuration_String/duration (0.00s) === RUN TestWebhookController_isCertTypeOK +=== RUN TestWebhookController_isCertTypeOK/all/all +=== RUN TestWebhookController_isCertTypeOK/all/x509 +=== RUN TestWebhookController_isCertTypeOK/x509/all +=== RUN TestWebhookController_isCertTypeOK/x509/x509 +=== RUN TestWebhookController_isCertTypeOK/x509/ssh === RUN TestWebhookController_isCertTypeOK/ssh/all === RUN TestWebhookController_isCertTypeOK/ssh/ssh -=== RUN TestWebhookController_isCertTypeOK/x509/ssh -=== RUN TestWebhookController_isCertTypeOK/x509/"" -=== RUN TestWebhookController_isCertTypeOK/ssh/x509 === RUN TestWebhookController_isCertTypeOK/ssh/"" -=== RUN TestWebhookController_isCertTypeOK/all/all -=== RUN TestWebhookController_isCertTypeOK/all/x509 === RUN TestWebhookController_isCertTypeOK/all/ssh === RUN TestWebhookController_isCertTypeOK/all/"" -=== RUN TestWebhookController_isCertTypeOK/x509/all -=== RUN TestWebhookController_isCertTypeOK/x509/x509 +=== RUN TestWebhookController_isCertTypeOK/x509/"" +=== RUN TestWebhookController_isCertTypeOK/ssh/x509 --- PASS: TestWebhookController_isCertTypeOK (0.00s) + --- PASS: TestWebhookController_isCertTypeOK/all/all (0.00s) + --- PASS: TestWebhookController_isCertTypeOK/all/x509 (0.00s) + --- PASS: TestWebhookController_isCertTypeOK/x509/all (0.00s) + --- PASS: TestWebhookController_isCertTypeOK/x509/x509 (0.00s) + --- PASS: TestWebhookController_isCertTypeOK/x509/ssh (0.00s) --- PASS: TestWebhookController_isCertTypeOK/ssh/all (0.00s) --- PASS: TestWebhookController_isCertTypeOK/ssh/ssh (0.00s) - --- PASS: TestWebhookController_isCertTypeOK/x509/ssh (0.00s) - --- PASS: TestWebhookController_isCertTypeOK/x509/"" (0.00s) - --- PASS: TestWebhookController_isCertTypeOK/ssh/x509 (0.00s) --- PASS: TestWebhookController_isCertTypeOK/ssh/"" (0.00s) - --- PASS: TestWebhookController_isCertTypeOK/all/all (0.00s) - --- PASS: TestWebhookController_isCertTypeOK/all/x509 (0.00s) --- PASS: TestWebhookController_isCertTypeOK/all/ssh (0.00s) --- PASS: TestWebhookController_isCertTypeOK/all/"" (0.00s) - --- PASS: TestWebhookController_isCertTypeOK/x509/all (0.00s) - --- PASS: TestWebhookController_isCertTypeOK/x509/x509 (0.00s) + --- PASS: TestWebhookController_isCertTypeOK/x509/"" (0.00s) + --- PASS: TestWebhookController_isCertTypeOK/ssh/x509 (0.00s) === RUN TestWebhookController_Enrich -=== RUN TestWebhookController_Enrich/deny/with_error -=== RUN TestWebhookController_Enrich/fail/with_options === RUN TestWebhookController_Enrich/ok/no_enriching_webhooks === RUN TestWebhookController_Enrich/ok/one_webhook === RUN TestWebhookController_Enrich/ok/two_webhooks === RUN TestWebhookController_Enrich/ok/x509_only === RUN TestWebhookController_Enrich/ok/with_options === RUN TestWebhookController_Enrich/deny +=== RUN TestWebhookController_Enrich/deny/with_error +=== RUN TestWebhookController_Enrich/fail/with_options --- PASS: TestWebhookController_Enrich (0.01s) - --- PASS: TestWebhookController_Enrich/deny/with_error (0.00s) - --- PASS: TestWebhookController_Enrich/fail/with_options (0.00s) --- PASS: TestWebhookController_Enrich/ok/no_enriching_webhooks (0.00s) --- PASS: TestWebhookController_Enrich/ok/one_webhook (0.00s) --- PASS: TestWebhookController_Enrich/ok/two_webhooks (0.00s) --- PASS: TestWebhookController_Enrich/ok/x509_only (0.00s) - --- PASS: TestWebhookController_Enrich/ok/with_options (0.01s) + --- PASS: TestWebhookController_Enrich/ok/with_options (0.00s) --- PASS: TestWebhookController_Enrich/deny (0.00s) + --- PASS: TestWebhookController_Enrich/deny/with_error (0.00s) + --- PASS: TestWebhookController_Enrich/fail/with_options (0.00s) === RUN TestWebhookController_Authorize +=== RUN TestWebhookController_Authorize/ok === RUN TestWebhookController_Authorize/ok/ssh_only === RUN TestWebhookController_Authorize/ok/with_options === RUN TestWebhookController_Authorize/deny === RUN TestWebhookController_Authorize/deny/withError === RUN TestWebhookController_Authorize/fail/with_options === RUN TestWebhookController_Authorize/ok/no_enriching_webhooks -=== RUN TestWebhookController_Authorize/ok ---- PASS: TestWebhookController_Authorize (0.01s) +--- PASS: TestWebhookController_Authorize (0.00s) + --- PASS: TestWebhookController_Authorize/ok (0.00s) --- PASS: TestWebhookController_Authorize/ok/ssh_only (0.00s) --- PASS: TestWebhookController_Authorize/ok/with_options (0.00s) --- PASS: TestWebhookController_Authorize/deny (0.00s) --- PASS: TestWebhookController_Authorize/deny/withError (0.00s) --- PASS: TestWebhookController_Authorize/fail/with_options (0.00s) --- PASS: TestWebhookController_Authorize/ok/no_enriching_webhooks (0.00s) - --- PASS: TestWebhookController_Authorize/ok (0.00s) === RUN TestWebhook_Do +=== RUN TestWebhook_Do/ok/basic === RUN TestWebhook_Do/ok/templated-url === RUN TestWebhook_Do/fail/404 === RUN TestWebhook_Do/ok/allow === RUN TestWebhook_Do/ok === RUN TestWebhook_Do/ok/no-request-id === RUN TestWebhook_Do/ok/bearer -=== RUN TestWebhook_Do/ok/basic === RUN TestWebhook_Do/disableTLSClientAuth -2026/11/25 04:49:50 http: TLS handshake error from 127.0.0.1:35092: remote error: tls: bad certificate ---- PASS: TestWebhook_Do (1.06s) +2025/10/24 00:33:26 http: TLS handshake error from 127.0.0.1:56516: remote error: tls: bad certificate +--- PASS: TestWebhook_Do (1.07s) + --- PASS: TestWebhook_Do/ok/basic (0.01s) --- PASS: TestWebhook_Do/ok/templated-url (0.00s) --- PASS: TestWebhook_Do/fail/404 (0.00s) --- PASS: TestWebhook_Do/ok/allow (0.00s) --- PASS: TestWebhook_Do/ok (0.00s) --- PASS: TestWebhook_Do/ok/no-request-id (0.00s) --- PASS: TestWebhook_Do/ok/bearer (0.00s) - --- PASS: TestWebhook_Do/ok/basic (0.00s) - --- PASS: TestWebhook_Do/disableTLSClientAuth (1.06s) + --- PASS: TestWebhook_Do/disableTLSClientAuth (1.03s) === RUN TestX5C_Getters --- PASS: TestX5C_Getters (0.00s) === RUN TestX5C_Init -=== RUN TestX5C_Init/fail/no-valid-root-certs -=== RUN TestX5C_Init/fail/invalid-duration -=== RUN TestX5C_Init/ok === RUN TestX5C_Init/ok/root-chain === RUN TestX5C_Init/fail/empty === RUN TestX5C_Init/fail/empty-name === RUN TestX5C_Init/fail/empty-type === RUN TestX5C_Init/fail/empty-key +=== RUN TestX5C_Init/fail/no-valid-root-certs +=== RUN TestX5C_Init/fail/invalid-duration +=== RUN TestX5C_Init/ok --- PASS: TestX5C_Init (0.00s) - --- PASS: TestX5C_Init/fail/no-valid-root-certs (0.00s) - --- PASS: TestX5C_Init/fail/invalid-duration (0.00s) - --- PASS: TestX5C_Init/ok (0.00s) --- PASS: TestX5C_Init/ok/root-chain (0.00s) --- PASS: TestX5C_Init/fail/empty (0.00s) --- PASS: TestX5C_Init/fail/empty-name (0.00s) --- PASS: TestX5C_Init/fail/empty-type (0.00s) --- PASS: TestX5C_Init/fail/empty-key (0.00s) + --- PASS: TestX5C_Init/fail/no-valid-root-certs (0.00s) + --- PASS: TestX5C_Init/fail/invalid-duration (0.00s) + --- PASS: TestX5C_Init/ok (0.00s) === RUN TestX5C_authorizeToken +=== RUN TestX5C_authorizeToken/ok === RUN TestX5C_authorizeToken/fail/invalid-cert-chain +=== RUN TestX5C_authorizeToken/fail/doubled-up-self-signed-cert === RUN TestX5C_authorizeToken/fail/digital-signature-ext-required -=== RUN TestX5C_authorizeToken/fail/signature-does-not-match-x5c-pub-key +=== RUN TestX5C_authorizeToken/fail/invalid-issuer === RUN TestX5C_authorizeToken/fail/invalid-audience +2025/10/24 00:33:27 http: TLS handshake error from 127.0.0.1:56520: remote error: tls: bad certificate === RUN TestX5C_authorizeToken/fail/bad-token -=== RUN TestX5C_authorizeToken/fail/doubled-up-self-signed-cert -=== RUN TestX5C_authorizeToken/fail/invalid-issuer +=== RUN TestX5C_authorizeToken/fail/signature-does-not-match-x5c-pub-key === RUN TestX5C_authorizeToken/fail/empty-subject -=== RUN TestX5C_authorizeToken/ok --- PASS: TestX5C_authorizeToken (0.01s) + --- PASS: TestX5C_authorizeToken/ok (0.00s) --- PASS: TestX5C_authorizeToken/fail/invalid-cert-chain (0.00s) + --- PASS: TestX5C_authorizeToken/fail/doubled-up-self-signed-cert (0.00s) --- PASS: TestX5C_authorizeToken/fail/digital-signature-ext-required (0.00s) - --- PASS: TestX5C_authorizeToken/fail/signature-does-not-match-x5c-pub-key (0.00s) + --- PASS: TestX5C_authorizeToken/fail/invalid-issuer (0.00s) --- PASS: TestX5C_authorizeToken/fail/invalid-audience (0.00s) --- PASS: TestX5C_authorizeToken/fail/bad-token (0.00s) - --- PASS: TestX5C_authorizeToken/fail/doubled-up-self-signed-cert (0.00s) - --- PASS: TestX5C_authorizeToken/fail/invalid-issuer (0.00s) + --- PASS: TestX5C_authorizeToken/fail/signature-does-not-match-x5c-pub-key (0.00s) --- PASS: TestX5C_authorizeToken/fail/empty-subject (0.00s) - --- PASS: TestX5C_authorizeToken/ok (0.00s) === RUN TestX5C_AuthorizeSign === RUN TestX5C_AuthorizeSign/fail/invalid-token === RUN TestX5C_AuthorizeSign/ok/empty-sans @@ -8432,8 +8467,8 @@ --- PASS: TestX5C_AuthorizeSign (0.01s) --- PASS: TestX5C_AuthorizeSign/fail/invalid-token (0.00s) --- PASS: TestX5C_AuthorizeSign/ok/empty-sans (0.00s) - --- PASS: TestX5C_AuthorizeSign/ok/multi-sans (0.01s) - --- PASS: TestX5C_AuthorizeSign/ok/cnf (0.00s) + --- PASS: TestX5C_AuthorizeSign/ok/multi-sans (0.00s) + --- PASS: TestX5C_AuthorizeSign/ok/cnf (0.01s) === RUN TestX5C_AuthorizeRevoke === RUN TestX5C_AuthorizeRevoke/fail/invalid-token === RUN TestX5C_AuthorizeRevoke/ok @@ -8447,30 +8482,29 @@ --- PASS: TestX5C_AuthorizeRenew/fail/renew-disabled (0.00s) --- PASS: TestX5C_AuthorizeRenew/ok (0.00s) === RUN TestX5C_AuthorizeSSHSign +=== RUN TestX5C_AuthorizeSSHSign/ok/without-claims +=== RUN TestX5C_AuthorizeSSHSign/ok/cnf === RUN TestX5C_AuthorizeSSHSign/fail/sshCA-disabled === RUN TestX5C_AuthorizeSSHSign/fail/invalid-token === RUN TestX5C_AuthorizeSSHSign/fail/no-Step-claim === RUN TestX5C_AuthorizeSSHSign/fail/no-SSH-subattribute-in-claims -2026/11/25 04:49:51 http: TLS handshake error from 127.0.0.1:35100: remote error: tls: bad certificate === RUN TestX5C_AuthorizeSSHSign/ok/with-claims -=== RUN TestX5C_AuthorizeSSHSign/ok/without-claims -=== RUN TestX5C_AuthorizeSSHSign/ok/cnf --- PASS: TestX5C_AuthorizeSSHSign (0.01s) + --- PASS: TestX5C_AuthorizeSSHSign/ok/without-claims (0.00s) + --- PASS: TestX5C_AuthorizeSSHSign/ok/cnf (0.01s) --- PASS: TestX5C_AuthorizeSSHSign/fail/sshCA-disabled (0.00s) --- PASS: TestX5C_AuthorizeSSHSign/fail/invalid-token (0.00s) --- PASS: TestX5C_AuthorizeSSHSign/fail/no-Step-claim (0.00s) --- PASS: TestX5C_AuthorizeSSHSign/fail/no-SSH-subattribute-in-claims (0.00s) - --- PASS: TestX5C_AuthorizeSSHSign/ok/with-claims (0.01s) - --- PASS: TestX5C_AuthorizeSSHSign/ok/without-claims (0.00s) - --- PASS: TestX5C_AuthorizeSSHSign/ok/cnf (0.00s) + --- PASS: TestX5C_AuthorizeSSHSign/ok/with-claims (0.00s) PASS -ok github.com/smallstep/certificates/authority/provisioner 19.829s +ok github.com/smallstep/certificates/authority/provisioner 42.133s === RUN TestProjectValidator_ValidateProject === RUN TestProjectValidator_ValidateProject/allowed-1 === RUN TestProjectValidator_ValidateProject/allowed-2 === RUN TestProjectValidator_ValidateProject/empty === RUN TestProjectValidator_ValidateProject/not_allowed ---- PASS: TestProjectValidator_ValidateProject (0.00s) +--- PASS: TestProjectValidator_ValidateProject (0.01s) --- PASS: TestProjectValidator_ValidateProject/allowed-1 (0.00s) --- PASS: TestProjectValidator_ValidateProject/allowed-2 (0.00s) --- PASS: TestProjectValidator_ValidateProject/empty (0.00s) @@ -8486,7 +8520,7 @@ --- PASS: TestOrganizationValidator_ValidateProject/fail_projects (0.00s) --- SKIP: TestOrganizationValidator_ValidateProject/fail_organization (0.00s) PASS -ok github.com/smallstep/certificates/authority/provisioner/gcp 0.042s +ok github.com/smallstep/certificates/authority/provisioner/gcp 0.132s === RUN TestDPOPOptions_EvaluateTarget === RUN TestDPOPOptions_EvaluateTarget/ok === RUN TestDPOPOptions_EvaluateTarget/fail/empty @@ -8501,7 +8535,7 @@ === RUN TestOIDCOptions_Transform/ok/default-transform === RUN TestOIDCOptions_Transform/ok/swap-transform === RUN TestOIDCOptions_Transform/ok/transform-with-functions ---- PASS: TestOIDCOptions_Transform (0.00s) +--- PASS: TestOIDCOptions_Transform (0.01s) --- PASS: TestOIDCOptions_Transform/ok/no-transform (0.00s) --- PASS: TestOIDCOptions_Transform/ok/empty-data (0.00s) --- PASS: TestOIDCOptions_Transform/ok/default-transform (0.00s) @@ -8520,7 +8554,7 @@ === RUN TestOIDCOptions_GetVerifier/ok/auto === RUN TestOIDCOptions_GetVerifier/ok/fixed --- PASS: TestOIDCOptions_GetVerifier (0.01s) - --- PASS: TestOIDCOptions_GetVerifier/fail/invalid-discovery-url (0.00s) + --- PASS: TestOIDCOptions_GetVerifier/fail/invalid-discovery-url (0.01s) --- PASS: TestOIDCOptions_GetVerifier/ok/auto (0.00s) --- PASS: TestOIDCOptions_GetVerifier/ok/fixed (0.00s) === RUN TestOptions_Validate @@ -8544,7 +8578,7 @@ --- PASS: TestOptions_Validate/fail/invalid-key (0.00s) --- PASS: TestOptions_Validate/fail/target-template (0.00s) PASS -ok github.com/smallstep/certificates/authority/provisioner/wire 0.042s +ok github.com/smallstep/certificates/authority/provisioner/wire 0.091s === RUN TestNewACMEClient === RUN TestNewACMEClient/fail/client-option-error === RUN TestNewACMEClient/fail/get-directory @@ -8552,9 +8586,9 @@ === RUN TestNewACMEClient/fail/error-post-newAccount === RUN TestNewACMEClient/fail/error-bad-account === RUN TestNewACMEClient/ok ---- PASS: TestNewACMEClient (0.01s) +--- PASS: TestNewACMEClient (0.02s) --- PASS: TestNewACMEClient/fail/client-option-error (0.00s) - --- PASS: TestNewACMEClient/fail/get-directory (0.00s) + --- PASS: TestNewACMEClient/fail/get-directory (0.01s) --- PASS: TestNewACMEClient/fail/bad-directory (0.00s) --- PASS: TestNewACMEClient/fail/error-post-newAccount (0.00s) --- PASS: TestNewACMEClient/fail/error-bad-account (0.00s) @@ -8572,61 +8606,61 @@ === RUN TestACMEClient_post/ok/jwk === RUN TestACMEClient_post/ok/kid === RUN TestACMEClient_post/fail/account-not-configured ---- PASS: TestACMEClient_post (0.01s) +--- PASS: TestACMEClient_post (0.04s) --- PASS: TestACMEClient_post/fail/GET-nonce (0.00s) - --- PASS: TestACMEClient_post/ok/jwk (0.00s) + --- PASS: TestACMEClient_post/ok/jwk (0.03s) --- PASS: TestACMEClient_post/ok/kid (0.00s) --- PASS: TestACMEClient_post/fail/account-not-configured (0.00s) === RUN TestACMEClient_NewOrder +=== RUN TestACMEClient_NewOrder/fail/bad-order === RUN TestACMEClient_NewOrder/ok === RUN TestACMEClient_NewOrder/fail/client-post === RUN TestACMEClient_NewOrder/fail/newOrder-error -=== RUN TestACMEClient_NewOrder/fail/bad-order ---- PASS: TestACMEClient_NewOrder (0.01s) - --- PASS: TestACMEClient_NewOrder/ok (0.01s) +--- PASS: TestACMEClient_NewOrder (0.03s) + --- PASS: TestACMEClient_NewOrder/fail/bad-order (0.01s) + --- PASS: TestACMEClient_NewOrder/ok (0.00s) --- PASS: TestACMEClient_NewOrder/fail/client-post (0.00s) --- PASS: TestACMEClient_NewOrder/fail/newOrder-error (0.00s) - --- PASS: TestACMEClient_NewOrder/fail/bad-order (0.00s) === RUN TestACMEClient_GetOrder === RUN TestACMEClient_GetOrder/fail/client-post === RUN TestACMEClient_GetOrder/fail/getOrder-error === RUN TestACMEClient_GetOrder/fail/bad-order === RUN TestACMEClient_GetOrder/ok --- PASS: TestACMEClient_GetOrder (0.02s) - --- PASS: TestACMEClient_GetOrder/fail/client-post (0.00s) + --- PASS: TestACMEClient_GetOrder/fail/client-post (0.02s) --- PASS: TestACMEClient_GetOrder/fail/getOrder-error (0.00s) - --- PASS: TestACMEClient_GetOrder/fail/bad-order (0.01s) - --- PASS: TestACMEClient_GetOrder/ok (0.01s) + --- PASS: TestACMEClient_GetOrder/fail/bad-order (0.00s) + --- PASS: TestACMEClient_GetOrder/ok (0.00s) === RUN TestACMEClient_GetAuthz === RUN TestACMEClient_GetAuthz/fail/client-post === RUN TestACMEClient_GetAuthz/fail/getChallenge-error === RUN TestACMEClient_GetAuthz/fail/bad-challenge === RUN TestACMEClient_GetAuthz/ok ---- PASS: TestACMEClient_GetAuthz (0.01s) +--- PASS: TestACMEClient_GetAuthz (0.02s) --- PASS: TestACMEClient_GetAuthz/fail/client-post (0.00s) - --- PASS: TestACMEClient_GetAuthz/fail/getChallenge-error (0.00s) + --- PASS: TestACMEClient_GetAuthz/fail/getChallenge-error (0.01s) --- PASS: TestACMEClient_GetAuthz/fail/bad-challenge (0.00s) - --- PASS: TestACMEClient_GetAuthz/ok (0.00s) + --- PASS: TestACMEClient_GetAuthz/ok (0.01s) === RUN TestACMEClient_GetChallenge +=== RUN TestACMEClient_GetChallenge/fail/getChallenge-error === RUN TestACMEClient_GetChallenge/fail/bad-challenge === RUN TestACMEClient_GetChallenge/ok === RUN TestACMEClient_GetChallenge/fail/client-post -=== RUN TestACMEClient_GetChallenge/fail/getChallenge-error ---- PASS: TestACMEClient_GetChallenge (0.01s) +--- PASS: TestACMEClient_GetChallenge (0.02s) + --- PASS: TestACMEClient_GetChallenge/fail/getChallenge-error (0.00s) --- PASS: TestACMEClient_GetChallenge/fail/bad-challenge (0.00s) --- PASS: TestACMEClient_GetChallenge/ok (0.00s) --- PASS: TestACMEClient_GetChallenge/fail/client-post (0.00s) - --- PASS: TestACMEClient_GetChallenge/fail/getChallenge-error (0.00s) === RUN TestACMEClient_ValidateChallenge +=== RUN TestACMEClient_ValidateChallenge/fail/bad-challenge === RUN TestACMEClient_ValidateChallenge/ok === RUN TestACMEClient_ValidateChallenge/fail/client-post === RUN TestACMEClient_ValidateChallenge/fail/getChallenge-error -=== RUN TestACMEClient_ValidateChallenge/fail/bad-challenge ---- PASS: TestACMEClient_ValidateChallenge (0.01s) - --- PASS: TestACMEClient_ValidateChallenge/ok (0.00s) - --- PASS: TestACMEClient_ValidateChallenge/fail/client-post (0.00s) +--- PASS: TestACMEClient_ValidateChallenge (0.04s) + --- PASS: TestACMEClient_ValidateChallenge/fail/bad-challenge (0.02s) + --- PASS: TestACMEClient_ValidateChallenge/ok (0.01s) + --- PASS: TestACMEClient_ValidateChallenge/fail/client-post (0.01s) --- PASS: TestACMEClient_ValidateChallenge/fail/getChallenge-error (0.00s) - --- PASS: TestACMEClient_ValidateChallenge/fail/bad-challenge (0.00s) === RUN TestACMEClient_ValidateWithPayload === RUN TestACMEClient_ValidateWithPayload/ok === NAME TestACMEClient_ValidateWithPayload @@ -8639,156 +8673,156 @@ === NAME TestACMEClient_ValidateWithPayload acmeClient_test.go:991: /nonce acmeClient_test.go:991: /fail ---- PASS: TestACMEClient_ValidateWithPayload (0.01s) - --- PASS: TestACMEClient_ValidateWithPayload/ok (0.00s) - --- PASS: TestACMEClient_ValidateWithPayload/fail_nonce (0.00s) +--- PASS: TestACMEClient_ValidateWithPayload (0.02s) + --- PASS: TestACMEClient_ValidateWithPayload/ok (0.01s) + --- PASS: TestACMEClient_ValidateWithPayload/fail_nonce (0.01s) --- PASS: TestACMEClient_ValidateWithPayload/fail_payload (0.00s) === RUN TestACMEClient_FinalizeOrder === RUN TestACMEClient_FinalizeOrder/fail/client-post === RUN TestACMEClient_FinalizeOrder/fail/finalizeOrder-error === RUN TestACMEClient_FinalizeOrder/fail/bad-order === RUN TestACMEClient_FinalizeOrder/ok ---- PASS: TestACMEClient_FinalizeOrder (0.01s) +--- PASS: TestACMEClient_FinalizeOrder (0.02s) --- PASS: TestACMEClient_FinalizeOrder/fail/client-post (0.00s) - --- PASS: TestACMEClient_FinalizeOrder/fail/finalizeOrder-error (0.00s) + --- PASS: TestACMEClient_FinalizeOrder/fail/finalizeOrder-error (0.01s) --- PASS: TestACMEClient_FinalizeOrder/fail/bad-order (0.00s) - --- PASS: TestACMEClient_FinalizeOrder/ok (0.00s) + --- PASS: TestACMEClient_FinalizeOrder/ok (0.01s) === RUN TestACMEClient_GetAccountOrders -=== RUN TestACMEClient_GetAccountOrders/ok -=== RUN TestACMEClient_GetAccountOrders/fail/account-not-configured === RUN TestACMEClient_GetAccountOrders/fail/client-post === RUN TestACMEClient_GetAccountOrders/fail/getAccountOrders-error === RUN TestACMEClient_GetAccountOrders/fail/bad-accountOrders ---- PASS: TestACMEClient_GetAccountOrders (0.01s) - --- PASS: TestACMEClient_GetAccountOrders/ok (0.00s) - --- PASS: TestACMEClient_GetAccountOrders/fail/account-not-configured (0.00s) +=== RUN TestACMEClient_GetAccountOrders/ok +=== RUN TestACMEClient_GetAccountOrders/fail/account-not-configured +--- PASS: TestACMEClient_GetAccountOrders (0.03s) --- PASS: TestACMEClient_GetAccountOrders/fail/client-post (0.00s) --- PASS: TestACMEClient_GetAccountOrders/fail/getAccountOrders-error (0.00s) - --- PASS: TestACMEClient_GetAccountOrders/fail/bad-accountOrders (0.01s) + --- PASS: TestACMEClient_GetAccountOrders/fail/bad-accountOrders (0.00s) + --- PASS: TestACMEClient_GetAccountOrders/ok (0.02s) + --- PASS: TestACMEClient_GetAccountOrders/fail/account-not-configured (0.00s) === RUN TestACMEClient_GetCertificate === RUN TestACMEClient_GetCertificate/fail/client-post === RUN TestACMEClient_GetCertificate/fail/getAccountOrders-error === RUN TestACMEClient_GetCertificate/fail/bad-certificate === RUN TestACMEClient_GetCertificate/ok ---- PASS: TestACMEClient_GetCertificate (0.01s) +--- PASS: TestACMEClient_GetCertificate (0.00s) --- PASS: TestACMEClient_GetCertificate/fail/client-post (0.00s) --- PASS: TestACMEClient_GetCertificate/fail/getAccountOrders-error (0.00s) --- PASS: TestACMEClient_GetCertificate/fail/bad-certificate (0.00s) --- PASS: TestACMEClient_GetCertificate/ok (0.00s) === RUN TestBootstrap -2026/11/25 04:49:35 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:01 Building new tls configuration using step-ca x509 Signer Interface === RUN TestBootstrap/ok === RUN TestBootstrap/token_err === RUN TestBootstrap/bad_claims === RUN TestBootstrap/bad_sha === RUN TestBootstrap/bad_aud ---- PASS: TestBootstrap (0.08s) - --- PASS: TestBootstrap/ok (0.00s) +--- PASS: TestBootstrap (0.39s) + --- PASS: TestBootstrap/ok (0.02s) --- PASS: TestBootstrap/token_err (0.00s) --- PASS: TestBootstrap/bad_claims (0.00s) --- PASS: TestBootstrap/bad_sha (0.00s) --- PASS: TestBootstrap/bad_aud (0.00s) === RUN TestBootstrapServerWithoutMTLS -2026/11/25 04:49:35 Building new tls configuration using step-ca x509 Signer Interface -2026/11/25 04:49:35 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:01 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:01 Building new tls configuration using step-ca x509 Signer Interface === RUN TestBootstrapServerWithoutMTLS/ok === RUN TestBootstrapServerWithoutMTLS/ok_mtls === RUN TestBootstrapServerWithoutMTLS/fail === RUN TestBootstrapServerWithoutMTLS/fail_with_TLSConfig ---- PASS: TestBootstrapServerWithoutMTLS (0.10s) - --- PASS: TestBootstrapServerWithoutMTLS/ok (0.01s) +--- PASS: TestBootstrapServerWithoutMTLS (0.29s) + --- PASS: TestBootstrapServerWithoutMTLS/ok (0.02s) --- PASS: TestBootstrapServerWithoutMTLS/ok_mtls (0.01s) --- PASS: TestBootstrapServerWithoutMTLS/fail (0.00s) --- PASS: TestBootstrapServerWithoutMTLS/fail_with_TLSConfig (0.00s) === RUN TestBootstrapServerWithMTLS -2026/11/25 04:49:35 Building new tls configuration using step-ca x509 Signer Interface -2026/11/25 04:49:35 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:02 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:02 Building new tls configuration using step-ca x509 Signer Interface === RUN TestBootstrapServerWithMTLS/ok === RUN TestBootstrapServerWithMTLS/ok_mtls === RUN TestBootstrapServerWithMTLS/fail === RUN TestBootstrapServerWithMTLS/fail_with_TLSConfig ---- PASS: TestBootstrapServerWithMTLS (0.09s) - --- PASS: TestBootstrapServerWithMTLS/ok (0.01s) - --- PASS: TestBootstrapServerWithMTLS/ok_mtls (0.01s) +--- PASS: TestBootstrapServerWithMTLS (0.28s) + --- PASS: TestBootstrapServerWithMTLS/ok (0.02s) + --- PASS: TestBootstrapServerWithMTLS/ok_mtls (0.02s) --- PASS: TestBootstrapServerWithMTLS/fail (0.00s) --- PASS: TestBootstrapServerWithMTLS/fail_with_TLSConfig (0.00s) === RUN TestBootstrapClient -2026/11/25 04:49:36 Building new tls configuration using step-ca x509 Signer Interface -2026/11/25 04:49:36 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:02 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:02 Building new tls configuration using step-ca x509 Signer Interface === RUN TestBootstrapClient/ok === RUN TestBootstrapClient/ok_mtls === RUN TestBootstrapClient/fail ---- PASS: TestBootstrapClient (0.09s) - --- PASS: TestBootstrapClient/ok (0.01s) - --- PASS: TestBootstrapClient/ok_mtls (0.02s) +--- PASS: TestBootstrapClient (0.29s) + --- PASS: TestBootstrapClient/ok (0.02s) + --- PASS: TestBootstrapClient/ok_mtls (0.03s) --- PASS: TestBootstrapClient/fail (0.00s) === RUN TestBootstrapClientServerRotation -2026/11/25 04:49:36 Building new tls configuration using step-ca x509 Signer Interface -2026/11/25 04:49:36 Serving HTTPS on 127.0.0.1:46401 ... -2026/11/25 04:49:43 Building new tls configuration using step-ca x509 Signer Interface -2026/11/25 04:49:44 Serving HTTPS on 127.0.0.1:46401 ... -2026/11/25 04:49:49 Building new tls configuration using step-ca x509 Signer Interface -2026/11/25 04:49:49 Serving HTTPS on 127.0.0.1:46401 ... -2026/11/25 04:49:54 Building new tls configuration using step-ca x509 Signer Interface -2026/11/25 04:49:54 Serving HTTPS on 127.0.0.1:46401 ... ---- PASS: TestBootstrapClientServerRotation (18.52s) +2025/10/24 00:33:02 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:02 Serving HTTPS on 127.0.0.1:39005 ... +2025/10/24 00:33:10 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:11 Serving HTTPS on 127.0.0.1:39005 ... +2025/10/24 00:33:16 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:16 Serving HTTPS on 127.0.0.1:39005 ... +2025/10/24 00:33:21 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:21 Serving HTTPS on 127.0.0.1:39005 ... +--- PASS: TestBootstrapClientServerRotation (18.78s) === RUN TestBootstrapClientServerFederation -2026/11/25 04:49:54 Building new tls configuration using step-ca x509 Signer Interface -2026/11/25 04:49:54 Serving HTTPS on 127.0.0.1:33251 ... -2026/11/25 04:49:54 Building new tls configuration using step-ca x509 Signer Interface -2026/11/25 04:49:54 Serving HTTPS on 127.0.0.1:34217 ... ---- PASS: TestBootstrapClientServerFederation (2.31s) +2025/10/24 00:33:21 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:21 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:21 Serving HTTPS on 127.0.0.1:33803 ... +2025/10/24 00:33:21 Serving HTTPS on 127.0.0.1:45813 ... +--- PASS: TestBootstrapClientServerFederation (2.48s) === RUN TestBootstrapListener -2026/11/25 04:49:56 Building new tls configuration using step-ca x509 Signer Interface -2026/11/25 04:49:56 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:24 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:24 Building new tls configuration using step-ca x509 Signer Interface === RUN TestBootstrapListener/ok === RUN TestBootstrapListener/ok_mtls === RUN TestBootstrapListener/fail ---- PASS: TestBootstrapListener (0.25s) - --- PASS: TestBootstrapListener/ok (0.07s) - --- PASS: TestBootstrapListener/ok_mtls (0.07s) +--- PASS: TestBootstrapListener (0.50s) + --- PASS: TestBootstrapListener/ok (0.16s) + --- PASS: TestBootstrapListener/ok_mtls (0.16s) --- PASS: TestBootstrapListener/fail (0.00s) === RUN TestCASign -2026/11/25 04:49:57 Building new tls configuration using step-ca x509 Signer Interface -=== RUN TestCASign/fail_invalid-json-body -=== RUN TestCASign/fail_invalid-csr-sig +2025/10/24 00:33:24 Building new tls configuration using step-ca x509 Signer Interface === RUN TestCASign/fail_unauthorized-ott === RUN TestCASign/fail_commonname-claim === RUN TestCASign/ok === RUN TestCASign/ok-backwards-compat-missing-subject-SAN ---- PASS: TestCASign (0.05s) - --- PASS: TestCASign/fail_invalid-json-body (0.00s) - --- PASS: TestCASign/fail_invalid-csr-sig (0.00s) +=== RUN TestCASign/fail_invalid-json-body +=== RUN TestCASign/fail_invalid-csr-sig +--- PASS: TestCASign (0.14s) --- PASS: TestCASign/fail_unauthorized-ott (0.00s) --- PASS: TestCASign/fail_commonname-claim (0.00s) - --- PASS: TestCASign/ok (0.00s) + --- PASS: TestCASign/ok (0.01s) --- PASS: TestCASign/ok-backwards-compat-missing-subject-SAN (0.00s) + --- PASS: TestCASign/fail_invalid-json-body (0.00s) + --- PASS: TestCASign/fail_invalid-csr-sig (0.00s) === RUN TestCAProvisioners -2026/11/25 04:49:57 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:24 Building new tls configuration using step-ca x509 Signer Interface === RUN TestCAProvisioners/ok ---- PASS: TestCAProvisioners (0.00s) - --- PASS: TestCAProvisioners/ok (0.00s) +--- PASS: TestCAProvisioners (0.02s) + --- PASS: TestCAProvisioners/ok (0.01s) === RUN TestCAProvisionerEncryptedKey -2026/11/25 04:49:57 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:24 Building new tls configuration using step-ca x509 Signer Interface === RUN TestCAProvisionerEncryptedKey/not-found === RUN TestCAProvisionerEncryptedKey/ok --- PASS: TestCAProvisionerEncryptedKey (0.00s) --- PASS: TestCAProvisionerEncryptedKey/not-found (0.00s) --- PASS: TestCAProvisionerEncryptedKey/ok (0.00s) === RUN TestCARoot -2026/11/25 04:49:57 Building new tls configuration using step-ca x509 Signer Interface -=== RUN TestCARoot/success +2025/10/24 00:33:24 Building new tls configuration using step-ca x509 Signer Interface === RUN TestCARoot/not-found ---- PASS: TestCARoot (0.00s) - --- PASS: TestCARoot/success (0.00s) +=== RUN TestCARoot/success +--- PASS: TestCARoot (0.01s) --- PASS: TestCARoot/not-found (0.00s) + --- PASS: TestCARoot/success (0.00s) === RUN TestCAHealth -2026/11/25 04:49:57 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:24 Building new tls configuration using step-ca x509 Signer Interface === RUN TestCAHealth/success ---- PASS: TestCAHealth (0.00s) +--- PASS: TestCAHealth (0.01s) --- PASS: TestCAHealth/success (0.00s) === RUN TestCARenew -2026/11/25 04:49:57 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:24 Building new tls configuration using step-ca x509 Signer Interface === RUN TestCARenew/request-missing-tls === RUN TestCARenew/request-missing-peer-certificate === RUN TestCARenew/success @@ -8807,22 +8841,22 @@ === RUN TestClient_Health === RUN TestClient_Health/ok === RUN TestClient_Health/not_ok ---- PASS: TestClient_Health (0.01s) - --- PASS: TestClient_Health/ok (0.01s) +--- PASS: TestClient_Health (0.00s) + --- PASS: TestClient_Health/ok (0.00s) --- PASS: TestClient_Health/not_ok (0.00s) === RUN TestClient_Root === RUN TestClient_Root/ok === RUN TestClient_Root/not_found ---- PASS: TestClient_Root (0.01s) - --- PASS: TestClient_Root/ok (0.01s) +--- PASS: TestClient_Root (0.00s) + --- PASS: TestClient_Root/ok (0.00s) --- PASS: TestClient_Root/not_found (0.00s) === RUN TestClient_Sign === RUN TestClient_Sign/ok === RUN TestClient_Sign/unauthorized === RUN TestClient_Sign/empty_request === RUN TestClient_Sign/nil_request ---- PASS: TestClient_Sign (0.00s) - --- PASS: TestClient_Sign/ok (0.00s) +--- PASS: TestClient_Sign (0.01s) + --- PASS: TestClient_Sign/ok (0.01s) --- PASS: TestClient_Sign/unauthorized (0.00s) --- PASS: TestClient_Sign/empty_request (0.00s) --- PASS: TestClient_Sign/nil_request (0.00s) @@ -8830,7 +8864,7 @@ === RUN TestClient_Revoke/ok === RUN TestClient_Revoke/unauthorized === RUN TestClient_Revoke/nil_request ---- PASS: TestClient_Revoke (0.00s) +--- PASS: TestClient_Revoke (0.01s) --- PASS: TestClient_Revoke/ok (0.00s) --- PASS: TestClient_Revoke/unauthorized (0.00s) --- PASS: TestClient_Revoke/nil_request (0.00s) @@ -8839,7 +8873,7 @@ === RUN TestClient_Renew/unauthorized === RUN TestClient_Renew/empty_request === RUN TestClient_Renew/nil_request ---- PASS: TestClient_Renew (0.01s) +--- PASS: TestClient_Renew (0.00s) --- PASS: TestClient_Renew/ok (0.00s) --- PASS: TestClient_Renew/unauthorized (0.00s) --- PASS: TestClient_Renew/empty_request (0.00s) @@ -8849,7 +8883,7 @@ === RUN TestClient_RenewWithToken/unauthorized === RUN TestClient_RenewWithToken/empty_request === RUN TestClient_RenewWithToken/nil_request ---- PASS: TestClient_RenewWithToken (0.00s) +--- PASS: TestClient_RenewWithToken (0.01s) --- PASS: TestClient_RenewWithToken/ok (0.00s) --- PASS: TestClient_RenewWithToken/unauthorized (0.00s) --- PASS: TestClient_RenewWithToken/empty_request (0.00s) @@ -8870,9 +8904,9 @@ === RUN TestClient_Provisioners/ok_with_limit === RUN TestClient_Provisioners/ok_with_cursor+limit === RUN TestClient_Provisioners/fail ---- PASS: TestClient_Provisioners (0.01s) +--- PASS: TestClient_Provisioners (0.00s) --- PASS: TestClient_Provisioners/ok (0.00s) - --- PASS: TestClient_Provisioners/ok_with_cursor (0.01s) + --- PASS: TestClient_Provisioners/ok_with_cursor (0.00s) --- PASS: TestClient_Provisioners/ok_with_limit (0.00s) --- PASS: TestClient_Provisioners/ok_with_cursor+limit (0.00s) --- PASS: TestClient_Provisioners/fail (0.00s) @@ -8893,9 +8927,9 @@ === RUN TestClient_Federation === RUN TestClient_Federation/ok === RUN TestClient_Federation/unauthorized ---- PASS: TestClient_Federation (0.00s) +--- PASS: TestClient_Federation (0.01s) --- PASS: TestClient_Federation/ok (0.00s) - --- PASS: TestClient_Federation/unauthorized (0.00s) + --- PASS: TestClient_Federation/unauthorized (0.01s) === RUN TestClient_SSHRoots === RUN TestClient_SSHRoots/ok === RUN TestClient_SSHRoots/not_found @@ -8914,7 +8948,7 @@ === RUN Test_parseEndpoint/ok_host,_path_and_port === RUN Test_parseEndpoint/fail_bad_url === RUN Test_parseEndpoint/fail_no_host ---- PASS: Test_parseEndpoint (0.01s) +--- PASS: Test_parseEndpoint (0.00s) --- PASS: Test_parseEndpoint/ok (0.00s) --- PASS: Test_parseEndpoint/ok_no_scheme (0.00s) --- PASS: Test_parseEndpoint/ok_only_host (0.00s) @@ -8930,13 +8964,13 @@ === RUN TestClient_RootFingerprint/ok === RUN TestClient_RootFingerprint/ok_with_error === RUN TestClient_RootFingerprint/fail ---- PASS: TestClient_RootFingerprint (0.01s) - --- PASS: TestClient_RootFingerprint/ok (0.01s) +--- PASS: TestClient_RootFingerprint (0.03s) + --- PASS: TestClient_RootFingerprint/ok (0.02s) --- PASS: TestClient_RootFingerprint/ok_with_error (0.01s) --- PASS: TestClient_RootFingerprint/fail (0.00s) === RUN TestClient_RootFingerprintWithServer -2026/11/25 04:49:57 Building new tls configuration using step-ca x509 Signer Interface ---- PASS: TestClient_RootFingerprintWithServer (0.01s) +2025/10/24 00:33:24 Building new tls configuration using step-ca x509 Signer Interface +--- PASS: TestClient_RootFingerprintWithServer (0.02s) === RUN TestClient_SSHBastion === RUN TestClient_SSHBastion/ok === RUN TestClient_SSHBastion/bad-response @@ -8974,7 +9008,7 @@ === RUN Test_newRequestID --- PASS: Test_newRequestID (0.00s) === RUN TestNewProvisioner -2026/11/25 04:49:57 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:25 Building new tls configuration using step-ca x509 Signer Interface === RUN TestNewProvisioner/ok === RUN TestNewProvisioner/ok-by-name === RUN TestNewProvisioner/ok-with-bundle @@ -8985,31 +9019,31 @@ === RUN TestNewProvisioner/fail-by-password === RUN TestNewProvisioner/fail-by-password-no-kid === RUN TestNewProvisioner/fail-bad-certificate -2026/11/25 04:49:58 http: TLS handshake error from 127.0.0.1:39484: remote error: tls: bad certificate === RUN TestNewProvisioner/fail-not-found-certificate ---- PASS: TestNewProvisioner (0.30s) - --- PASS: TestNewProvisioner/ok (0.04s) - --- PASS: TestNewProvisioner/ok-by-name (0.03s) - --- PASS: TestNewProvisioner/ok-with-bundle (0.03s) - --- PASS: TestNewProvisioner/ok-with-fingerprint (0.04s) +2025/10/24 00:33:26 http: TLS handshake error from 127.0.0.1:36382: read tcp 127.0.0.1:40067->127.0.0.1:36382: use of closed network connection +--- PASS: TestNewProvisioner (0.78s) + --- PASS: TestNewProvisioner/ok (0.10s) + --- PASS: TestNewProvisioner/ok-by-name (0.12s) + --- PASS: TestNewProvisioner/ok-with-bundle (0.11s) + --- PASS: TestNewProvisioner/ok-with-fingerprint (0.08s) --- PASS: TestNewProvisioner/fail-bad-kid (0.01s) - --- PASS: TestNewProvisioner/fail-empty-name (0.01s) - --- PASS: TestNewProvisioner/fail-bad-name (0.01s) - --- PASS: TestNewProvisioner/fail-by-password (0.05s) - --- PASS: TestNewProvisioner/fail-by-password-no-kid (0.04s) + --- PASS: TestNewProvisioner/fail-empty-name (0.00s) + --- PASS: TestNewProvisioner/fail-bad-name (0.04s) + --- PASS: TestNewProvisioner/fail-by-password (0.10s) + --- PASS: TestNewProvisioner/fail-by-password-no-kid (0.09s) --- PASS: TestNewProvisioner/fail-bad-certificate (0.00s) --- PASS: TestNewProvisioner/fail-not-found-certificate (0.00s) === RUN TestProvisioner_Getters ---- PASS: TestProvisioner_Getters (0.03s) +--- PASS: TestProvisioner_Getters (0.07s) === RUN TestProvisioner_Setters ---- PASS: TestProvisioner_Setters (0.04s) +--- PASS: TestProvisioner_Setters (0.08s) === RUN TestProvisioner_Token === RUN TestProvisioner_Token/ok === RUN TestProvisioner_Token/ok-with-san === RUN TestProvisioner_Token/ok-with-sans === RUN TestProvisioner_Token/fail-no-subject === RUN TestProvisioner_Token/fail-no-key ---- PASS: TestProvisioner_Token (0.04s) +--- PASS: TestProvisioner_Token (0.13s) --- PASS: TestProvisioner_Token/ok (0.00s) --- PASS: TestProvisioner_Token/ok-with-san (0.00s) --- PASS: TestProvisioner_Token/ok-with-sans (0.00s) @@ -9021,7 +9055,7 @@ === RUN TestProvisioner_IPv6Token/ok-with-sans === RUN TestProvisioner_IPv6Token/fail-no-subject === RUN TestProvisioner_IPv6Token/fail-no-key ---- PASS: TestProvisioner_IPv6Token (0.04s) +--- PASS: TestProvisioner_IPv6Token (0.14s) --- PASS: TestProvisioner_IPv6Token/ok (0.00s) --- PASS: TestProvisioner_IPv6Token/ok-with-san (0.00s) --- PASS: TestProvisioner_IPv6Token/ok-with-sans (0.00s) @@ -9033,7 +9067,7 @@ === RUN TestProvisioner_SSHToken/ok_multiple_principals === RUN TestProvisioner_SSHToken/fail-no-subject === RUN TestProvisioner_SSHToken/fail-no-key ---- PASS: TestProvisioner_SSHToken (0.05s) +--- PASS: TestProvisioner_SSHToken (0.08s) --- PASS: TestProvisioner_SSHToken/ok (0.00s) --- PASS: TestProvisioner_SSHToken/ok_host (0.00s) --- PASS: TestProvisioner_SSHToken/ok_multiple_principals (0.00s) @@ -9068,145 +9102,145 @@ --- PASS: TestAddClientCA (0.00s) --- PASS: TestAddClientCA/ok (0.00s) === RUN TestAddRootsToRootCAs -2026/11/25 04:49:58 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:26 Building new tls configuration using step-ca x509 Signer Interface === RUN TestAddRootsToRootCAs/ok === RUN TestAddRootsToRootCAs/fail -2026/11/25 04:49:58 http: TLS handshake error from 127.0.0.1:60716: remote error: tls: bad certificate +2025/10/24 00:33:26 http: TLS handshake error from 127.0.0.1:53638: read tcp 127.0.0.1:33175->127.0.0.1:53638: use of closed network connection --- PASS: TestAddRootsToRootCAs (0.02s) - --- PASS: TestAddRootsToRootCAs/ok (0.01s) - --- PASS: TestAddRootsToRootCAs/fail (0.00s) + --- PASS: TestAddRootsToRootCAs/ok (0.00s) + --- PASS: TestAddRootsToRootCAs/fail (0.01s) === RUN TestAddRootsToClientCAs -2026/11/25 04:49:58 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:26 Building new tls configuration using step-ca x509 Signer Interface === RUN TestAddRootsToClientCAs/ok === RUN TestAddRootsToClientCAs/fail -2026/11/25 04:49:58 http: TLS handshake error from 127.0.0.1:36542: remote error: tls: bad certificate +2025/10/24 00:33:26 http: TLS handshake error from 127.0.0.1:33292: read tcp 127.0.0.1:36393->127.0.0.1:33292: use of closed network connection --- PASS: TestAddRootsToClientCAs (0.02s) - --- PASS: TestAddRootsToClientCAs/ok (0.00s) + --- PASS: TestAddRootsToClientCAs/ok (0.01s) --- PASS: TestAddRootsToClientCAs/fail (0.01s) === RUN TestAddFederationToRootCAs -2026/11/25 04:49:58 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:26 Building new tls configuration using step-ca x509 Signer Interface === RUN TestAddFederationToRootCAs/ok === RUN TestAddFederationToRootCAs/fail -2026/11/25 04:49:58 http: TLS handshake error from 127.0.0.1:49964: remote error: tls: bad certificate +2025/10/24 00:33:26 http: TLS handshake error from 127.0.0.1:56330: remote error: tls: bad certificate --- PASS: TestAddFederationToRootCAs (0.02s) - --- PASS: TestAddFederationToRootCAs/ok (0.01s) - --- PASS: TestAddFederationToRootCAs/fail (0.00s) + --- PASS: TestAddFederationToRootCAs/ok (0.02s) + --- PASS: TestAddFederationToRootCAs/fail (0.01s) === RUN TestAddFederationToClientCAs -2026/11/25 04:49:58 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:26 Building new tls configuration using step-ca x509 Signer Interface === RUN TestAddFederationToClientCAs/ok === RUN TestAddFederationToClientCAs/fail -2026/11/25 04:49:58 http: TLS handshake error from 127.0.0.1:57434: read tcp 127.0.0.1:39633->127.0.0.1:57434: use of closed network connection ---- PASS: TestAddFederationToClientCAs (0.01s) +2025/10/24 00:33:26 http: TLS handshake error from 127.0.0.1:40968: remote error: tls: bad certificate +--- PASS: TestAddFederationToClientCAs (0.02s) --- PASS: TestAddFederationToClientCAs/ok (0.00s) --- PASS: TestAddFederationToClientCAs/fail (0.00s) === RUN TestAddRootsToCAs -2026/11/25 04:49:58 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:26 Building new tls configuration using step-ca x509 Signer Interface === RUN TestAddRootsToCAs/ok === RUN TestAddRootsToCAs/fail -2026/11/25 04:49:58 http: TLS handshake error from 127.0.0.1:54280: remote error: tls: bad certificate ---- PASS: TestAddRootsToCAs (0.02s) - --- PASS: TestAddRootsToCAs/ok (0.01s) - --- PASS: TestAddRootsToCAs/fail (0.01s) +2025/10/24 00:33:26 http: TLS handshake error from 127.0.0.1:46614: read tcp 127.0.0.1:36889->127.0.0.1:46614: use of closed network connection +--- PASS: TestAddRootsToCAs (0.04s) + --- PASS: TestAddRootsToCAs/ok (0.02s) + --- PASS: TestAddRootsToCAs/fail (0.00s) === RUN TestAddFederationToCAs -2026/11/25 04:49:58 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:26 Building new tls configuration using step-ca x509 Signer Interface === RUN TestAddFederationToCAs/ok === RUN TestAddFederationToCAs/fail -2026/11/25 04:49:58 http: TLS handshake error from 127.0.0.1:58676: read tcp 127.0.0.1:46725->127.0.0.1:58676: use of closed network connection ---- PASS: TestAddFederationToCAs (0.01s) +2025/10/24 00:33:26 http: TLS handshake error from 127.0.0.1:41082: read tcp 127.0.0.1:37251->127.0.0.1:41082: use of closed network connection +--- PASS: TestAddFederationToCAs (0.02s) --- PASS: TestAddFederationToCAs/ok (0.01s) - --- PASS: TestAddFederationToCAs/fail (0.00s) + --- PASS: TestAddFederationToCAs/fail (0.01s) === RUN TestClient_GetServerTLSConfig_http -2026/11/25 04:49:58 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:26 Building new tls configuration using step-ca x509 Signer Interface === RUN TestClient_GetServerTLSConfig_http/with_transport -2026/11/25 04:49:58 Building new tls configuration using step-ca x509 Signer Interface -=== RUN TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:32971 -=== RUN TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:40091 +2025/10/24 00:33:27 Building new tls configuration using step-ca x509 Signer Interface +=== RUN TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:44301 +=== RUN TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:34999 === RUN TestClient_GetServerTLSConfig_http/with_tlsConfig -2026/11/25 04:49:58 Building new tls configuration using step-ca x509 Signer Interface -=== RUN TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:32971 -=== RUN TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:40091 +2025/10/24 00:33:27 Building new tls configuration using step-ca x509 Signer Interface +=== RUN TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:44301 +=== RUN TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:34999 === RUN TestClient_GetServerTLSConfig_http/with_no_ClientCert -2026/11/25 04:49:58 Building new tls configuration using step-ca x509 Signer Interface -=== RUN TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:32971/no-cert -=== RUN TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:40091/no-cert -2026/11/25 04:49:58 http: TLS handshake error from 127.0.0.1:52900: tls: client didn't provide a certificate +2025/10/24 00:33:27 Building new tls configuration using step-ca x509 Signer Interface +=== RUN TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:44301/no-cert +=== RUN TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:34999/no-cert +2025/10/24 00:33:27 http: TLS handshake error from 127.0.0.1:42156: tls: client didn't provide a certificate === RUN TestClient_GetServerTLSConfig_http/fail_with_default -2026/11/25 04:49:58 Building new tls configuration using step-ca x509 Signer Interface -=== RUN TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:32971/no-cert -2026/11/25 04:49:58 http: TLS handshake error from 127.0.0.1:43426: remote error: tls: bad certificate -=== RUN TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:40091/no-cert -2026/11/25 04:49:58 http: TLS handshake error from 127.0.0.1:52902: remote error: tls: bad certificate ---- PASS: TestClient_GetServerTLSConfig_http (0.21s) - --- PASS: TestClient_GetServerTLSConfig_http/with_transport (0.04s) - --- PASS: TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:32971 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:40091 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig (0.04s) - --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:32971 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:40091 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert (0.04s) - --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:32971/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:40091/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default (0.03s) - --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:32971/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:40091/no-cert (0.00s) +2025/10/24 00:33:27 Building new tls configuration using step-ca x509 Signer Interface +=== RUN TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:44301/no-cert +=== RUN TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:34999/no-cert +2025/10/24 00:33:27 http: TLS handshake error from 127.0.0.1:51538: remote error: tls: bad certificate +2025/10/24 00:33:27 http: TLS handshake error from 127.0.0.1:42162: read tcp 127.0.0.1:34999->127.0.0.1:42162: use of closed network connection +--- PASS: TestClient_GetServerTLSConfig_http (0.62s) + --- PASS: TestClient_GetServerTLSConfig_http/with_transport (0.13s) + --- PASS: TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:44301 (0.02s) + --- PASS: TestClient_GetServerTLSConfig_http/with_transport/https://127.0.0.1:34999 (0.01s) + --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig (0.14s) + --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:44301 (0.01s) + --- PASS: TestClient_GetServerTLSConfig_http/with_tlsConfig/https://127.0.0.1:34999 (0.03s) + --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert (0.13s) + --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:44301/no-cert (0.01s) + --- PASS: TestClient_GetServerTLSConfig_http/with_no_ClientCert/https://127.0.0.1:34999/no-cert (0.01s) + --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default (0.11s) + --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:44301/no-cert (0.01s) + --- PASS: TestClient_GetServerTLSConfig_http/fail_with_default/https://127.0.0.1:34999/no-cert (0.00s) === RUN TestClient_GetServerTLSConfig_renew -2026/11/25 04:49:58 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:27 Building new tls configuration using step-ca x509 Signer Interface === RUN TestClient_GetServerTLSConfig_renew/with_transport -=== RUN TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:44297 -=== RUN TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:41255 +=== RUN TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:38853 +=== RUN TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:41227 === RUN TestClient_GetServerTLSConfig_renew/with_tlsConfig -=== RUN TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:44297 -=== RUN TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:41255 +=== RUN TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:38853 +=== RUN TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:41227 === RUN TestClient_GetServerTLSConfig_renew/with_no_ClientCert -=== RUN TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:44297/no-cert -=== RUN TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:41255/no-cert -2026/11/25 04:49:58 http: TLS handshake error from 127.0.0.1:45516: tls: client didn't provide a certificate +=== RUN TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:38853/no-cert +=== RUN TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:41227/no-cert === RUN TestClient_GetServerTLSConfig_renew/fail_with_default -=== RUN TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:44297/no-cert -=== RUN TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:41255/no-cert -2026/11/25 04:49:58 http: TLS handshake error from 127.0.0.1:51018: remote error: tls: bad certificate -2026/11/25 04:49:58 http: TLS handshake error from 127.0.0.1:45528: remote error: tls: bad certificate -2026/11/25 04:49:58 Sleeping for 5s ... +=== RUN TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:38853/no-cert +2025/10/24 00:33:27 http: TLS handshake error from 127.0.0.1:36496: tls: client didn't provide a certificate +=== RUN TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:41227/no-cert +2025/10/24 00:33:27 http: TLS handshake error from 127.0.0.1:45604: remote error: tls: bad certificate +2025/10/24 00:33:27 http: TLS handshake error from 127.0.0.1:36500: remote error: tls: bad certificate +2025/10/24 00:33:27 Sleeping for 5s ... === RUN TestClient_GetServerTLSConfig_renew/renewed_with_transport -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:44297 -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:41255 +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:38853 +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:41227 === RUN TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:44297 -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:41255 +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:41227 +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:38853 === RUN TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:44297/no-cert -=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:41255/no-cert -2026/11/25 04:50:03 http: TLS handshake error from 127.0.0.1:38282: tls: client didn't provide a certificate +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:38853/no-cert +=== RUN TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:41227/no-cert +2025/10/24 00:33:32 http: TLS handshake error from 127.0.0.1:36520: tls: client didn't provide a certificate === RUN TestClient_GetServerTLSConfig_renew/renewed_fail_with_default -=== RUN TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:44297/no-cert -2026/11/25 04:50:03 http: TLS handshake error from 127.0.0.1:57554: remote error: tls: bad certificate -=== RUN TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:41255/no-cert -2026/11/25 04:50:03 http: TLS handshake error from 127.0.0.1:38292: read tcp 127.0.0.1:41255->127.0.0.1:38292: use of closed network connection ---- PASS: TestClient_GetServerTLSConfig_renew (5.20s) +=== RUN TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:38853/no-cert +=== RUN TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:41227/no-cert +2025/10/24 00:33:32 http: TLS handshake error from 127.0.0.1:45646: remote error: tls: bad certificate +2025/10/24 00:33:32 http: TLS handshake error from 127.0.0.1:36522: read tcp 127.0.0.1:41227->127.0.0.1:36522: use of closed network connection +--- PASS: TestClient_GetServerTLSConfig_renew (5.36s) --- PASS: TestClient_GetServerTLSConfig_renew/with_transport (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:44297 (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:41255 (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:38853 (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_transport/https://127.0.0.1:41227 (0.01s) --- PASS: TestClient_GetServerTLSConfig_renew/with_tlsConfig (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:44297 (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:41255 (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:44297/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:41255/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:38853 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_tlsConfig/https://127.0.0.1:41227 (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert (0.05s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:38853/no-cert (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/with_no_ClientCert/https://127.0.0.1:41227/no-cert (0.04s) --- PASS: TestClient_GetServerTLSConfig_renew/fail_with_default (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:44297/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:41255/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:44297 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:41255 (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:44297 (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:41255 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:38853/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/fail_with_default/https://127.0.0.1:41227/no-cert (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport (0.02s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:38853 (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_transport/https://127.0.0.1:41227 (0.02s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig (0.02s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:41227 (0.02s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_tlsConfig/https://127.0.0.1:38853 (0.00s) --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:44297/no-cert (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:41255/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:38853/no-cert (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_with_no_ClientCert/https://127.0.0.1:41227/no-cert (0.00s) --- PASS: TestClient_GetServerTLSConfig_renew/renewed_fail_with_default (0.01s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:44297/no-cert (0.00s) - --- PASS: TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:41255/no-cert (0.01s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:38853/no-cert (0.00s) + --- PASS: TestClient_GetServerTLSConfig_renew/renewed_fail_with_default/https://127.0.0.1:41227/no-cert (0.01s) === RUN TestCertificate === RUN TestCertificate/ok === RUN TestCertificate/fail @@ -9228,11 +9262,11 @@ --- PASS: TestRootCertificateCertificate/fail (0.00s) --- PASS: TestRootCertificateCertificate/no_tls (0.00s) PASS -ok github.com/smallstep/certificates/ca 28.373s +ok github.com/smallstep/certificates/ca 31.800s ? github.com/smallstep/certificates/ca/client [no test files] === RUN TestClient -2026/11/25 04:49:35 http: TLS handshake error from 127.0.0.1:50972: remote error: tls: bad certificate ---- PASS: TestClient (0.02s) +2025/10/24 00:33:01 http: TLS handshake error from 127.0.0.1:36390: remote error: tls: bad certificate +--- PASS: TestClient (0.05s) === RUN TestClient_ResolveReference === RUN TestClient_ResolveReference/ok === RUN TestClient_ResolveReference/ok#01 @@ -9321,7 +9355,7 @@ === RUN TestIdentity_TLSCertificate/fail_certificate === RUN TestIdentity_TLSCertificate/fail_not_after === RUN TestIdentity_TLSCertificate/fail_not_before ---- PASS: TestIdentity_TLSCertificate (0.00s) +--- PASS: TestIdentity_TLSCertificate (0.01s) --- PASS: TestIdentity_TLSCertificate/ok_mTLS (0.00s) --- PASS: TestIdentity_TLSCertificate/ok_tTLS (0.00s) --- PASS: TestIdentity_TLSCertificate/ok_disabled (0.00s) @@ -9356,9 +9390,9 @@ === RUN TestIdentity_GetClientCertificateFunc/ok_tTLS === RUN TestIdentity_GetClientCertificateFunc/fail_missing_cert === RUN TestIdentity_GetClientCertificateFunc/fail_missing_key ---- PASS: TestIdentity_GetClientCertificateFunc (0.00s) +--- PASS: TestIdentity_GetClientCertificateFunc (0.01s) --- PASS: TestIdentity_GetClientCertificateFunc/ok_mTLS (0.00s) - --- PASS: TestIdentity_GetClientCertificateFunc/ok_tTLS (0.00s) + --- PASS: TestIdentity_GetClientCertificateFunc/ok_tTLS (0.01s) --- PASS: TestIdentity_GetClientCertificateFunc/fail_missing_cert (0.00s) --- PASS: TestIdentity_GetClientCertificateFunc/fail_missing_key (0.00s) === RUN TestIdentity_GetCertPool @@ -9388,7 +9422,7 @@ --- PASS: TestIdentity_Renew/fail_certificate (0.00s) --- PASS: TestIdentity_Renew/fail_write_identity (0.00s) PASS -ok github.com/smallstep/certificates/ca/identity 0.099s +ok github.com/smallstep/certificates/ca/identity 0.234s === RUN TestNew === RUN TestNew/ok_default === RUN TestNew/ok_softcas @@ -9416,7 +9450,7 @@ --- PASS: TestNewCreator/fail_type (0.00s) --- PASS: TestNewCreator/fail_no_creator (0.00s) PASS -ok github.com/smallstep/certificates/cas 0.039s +ok github.com/smallstep/certificates/cas 0.078s === RUN TestCreateCertificateAuthorityExtension === RUN TestCreateCertificateAuthorityExtension/ok === RUN TestCreateCertificateAuthorityExtension/ok#01 @@ -9481,9 +9515,9 @@ --- PASS: TestOptions_Is/fail#01 (0.00s) === RUN TestRegister === RUN TestRegister/ok -&{{} {{{} 1} {0 0} {[] {} 0x4000263d60} 0x470f20 0x40acb0 11076491026074439543}} +&{{} {{{} 1} {0 0} {[] {} 0x40002aa280} 0x470f20 0x40acb0 10169777114222675068}} === RUN TestRegister/error -&{{} {{{} 1} {0 0} {[] {} 0x4000263d60} 0x470f20 0x40acb0 11076491026074439543}} +&{{} {{{} 1} {0 0} {[] {} 0x40002aa280} 0x470f20 0x40acb0 10169777114222675068}} --- PASS: TestRegister (0.00s) --- PASS: TestRegister/ok (0.00s) --- PASS: TestRegister/error (0.00s) @@ -9544,13 +9578,13 @@ --- PASS: TestValidationError_StatusCode/default (0.00s) --- PASS: TestValidationError_StatusCode/with_message (0.00s) PASS -ok github.com/smallstep/certificates/cas/apiv1 0.063s +ok github.com/smallstep/certificates/cas/apiv1 0.050s === RUN TestNew === RUN TestNew/ok === RUN TestNew/ok_with_callback === RUN TestNew/fail_no_issuer === RUN TestNew/fail_no_signer ---- PASS: TestNew (0.00s) +--- PASS: TestNew (0.01s) --- PASS: TestNew/ok (0.00s) --- PASS: TestNew/ok_with_callback (0.00s) --- PASS: TestNew/fail_no_issuer (0.00s) @@ -9565,7 +9599,7 @@ === RUN TestSoftCAS_GetSigner/ok_signer === RUN TestSoftCAS_GetSigner/ok_certificateSigner === RUN TestSoftCAS_GetSigner/fail_certificateSigner ---- PASS: TestSoftCAS_GetSigner (0.01s) +--- PASS: TestSoftCAS_GetSigner (0.00s) --- PASS: TestSoftCAS_GetSigner/ok_signer (0.00s) --- PASS: TestSoftCAS_GetSigner/ok_certificateSigner (0.00s) --- PASS: TestSoftCAS_GetSigner/fail_certificateSigner (0.00s) @@ -9579,20 +9613,20 @@ === RUN TestSoftCAS_CreateCertificate/fail_lifetime === RUN TestSoftCAS_CreateCertificate/fail_CreateCertificate === RUN TestSoftCAS_CreateCertificate/fail_with_callback ---- PASS: TestSoftCAS_CreateCertificate (0.00s) +--- PASS: TestSoftCAS_CreateCertificate (0.02s) --- PASS: TestSoftCAS_CreateCertificate/ok (0.00s) --- PASS: TestSoftCAS_CreateCertificate/ok_signature_algorithm (0.00s) --- PASS: TestSoftCAS_CreateCertificate/ok_with_notBefore (0.00s) - --- PASS: TestSoftCAS_CreateCertificate/ok_with_notBefore+notAfter (0.00s) + --- PASS: TestSoftCAS_CreateCertificate/ok_with_notBefore+notAfter (0.02s) --- PASS: TestSoftCAS_CreateCertificate/ok_with_callback (0.00s) --- PASS: TestSoftCAS_CreateCertificate/fail_template (0.00s) --- PASS: TestSoftCAS_CreateCertificate/fail_lifetime (0.00s) --- PASS: TestSoftCAS_CreateCertificate/fail_CreateCertificate (0.00s) --- PASS: TestSoftCAS_CreateCertificate/fail_with_callback (0.00s) === RUN TestSoftCAS_CreateCertificate_pss ---- PASS: TestSoftCAS_CreateCertificate_pss (0.24s) +--- PASS: TestSoftCAS_CreateCertificate_pss (2.92s) === RUN TestSoftCAS_CreateCertificate_ec_rsa ---- PASS: TestSoftCAS_CreateCertificate_ec_rsa (0.14s) +--- PASS: TestSoftCAS_CreateCertificate_ec_rsa (2.42s) === RUN TestSoftCAS_RenewCertificate === RUN TestSoftCAS_RenewCertificate/ok === RUN TestSoftCAS_RenewCertificate/ok_signature_algorithm @@ -9615,7 +9649,7 @@ === RUN TestSoftCAS_RevokeCertificate/ok_empty === RUN TestSoftCAS_RevokeCertificate/ok_with_callback === RUN TestSoftCAS_RevokeCertificate/fail_with_callback ---- PASS: TestSoftCAS_RevokeCertificate (0.01s) +--- PASS: TestSoftCAS_RevokeCertificate (0.00s) --- PASS: TestSoftCAS_RevokeCertificate/ok (0.00s) --- PASS: TestSoftCAS_RevokeCertificate/ok_no_cert (0.00s) --- PASS: TestSoftCAS_RevokeCertificate/ok_empty (0.00s) @@ -9638,7 +9672,7 @@ === RUN TestSoftCAS_CreateCertificateAuthority/fail_createSigner === RUN TestSoftCAS_CreateCertificateAuthority/fail_sign_root === RUN TestSoftCAS_CreateCertificateAuthority/fail_sign_intermediate ---- PASS: TestSoftCAS_CreateCertificateAuthority (0.00s) +--- PASS: TestSoftCAS_CreateCertificateAuthority (0.02s) --- PASS: TestSoftCAS_CreateCertificateAuthority/ok_root (0.00s) --- PASS: TestSoftCAS_CreateCertificateAuthority/ok_intermediate (0.00s) --- PASS: TestSoftCAS_CreateCertificateAuthority/ok_signature_algorithm (0.00s) @@ -9684,7 +9718,7 @@ --- PASS: Test_isRSA/ECDSAWithSHA512 (0.00s) --- PASS: Test_isRSA/PureEd25519 (0.00s) PASS -ok github.com/smallstep/certificates/cas/softcas 0.466s +ok github.com/smallstep/certificates/cas/softcas 5.549s === RUN Test_newServerEndpointID === RUN Test_newServerEndpointID/ok === RUN Test_newServerEndpointID/ok_uuid @@ -9695,7 +9729,7 @@ === RUN Test_newStepIssuer/x5c === RUN Test_newStepIssuer/jwk === RUN Test_newStepIssuer/fail ---- PASS: Test_newStepIssuer (0.13s) +--- PASS: Test_newStepIssuer (0.65s) --- PASS: Test_newStepIssuer/x5c (0.00s) --- PASS: Test_newStepIssuer/jwk (0.00s) --- PASS: Test_newStepIssuer/fail (0.00s) @@ -9704,33 +9738,33 @@ === RUN Test_jwkIssuer_SignToken/ok_ra === RUN Test_jwkIssuer_SignToken/ok_ra_endpoint_id === RUN Test_jwkIssuer_SignToken/fail ---- PASS: Test_jwkIssuer_SignToken (0.14s) +--- PASS: Test_jwkIssuer_SignToken (0.52s) --- PASS: Test_jwkIssuer_SignToken/ok (0.00s) - --- PASS: Test_jwkIssuer_SignToken/ok_ra (0.00s) + --- PASS: Test_jwkIssuer_SignToken/ok_ra (0.01s) --- PASS: Test_jwkIssuer_SignToken/ok_ra_endpoint_id (0.00s) --- PASS: Test_jwkIssuer_SignToken/fail (0.00s) === RUN Test_jwkIssuer_RevokeToken === RUN Test_jwkIssuer_RevokeToken/ok === RUN Test_jwkIssuer_RevokeToken/ok#01 ---- PASS: Test_jwkIssuer_RevokeToken (0.13s) +--- PASS: Test_jwkIssuer_RevokeToken (0.67s) --- PASS: Test_jwkIssuer_RevokeToken/ok (0.00s) --- PASS: Test_jwkIssuer_RevokeToken/ok#01 (0.00s) === RUN Test_jwkIssuer_Lifetime === RUN Test_jwkIssuer_Lifetime/ok ---- PASS: Test_jwkIssuer_Lifetime (0.19s) +--- PASS: Test_jwkIssuer_Lifetime (0.62s) --- PASS: Test_jwkIssuer_Lifetime/ok (0.00s) === RUN Test_newJWKSignerFromEncryptedKey === RUN Test_newJWKSignerFromEncryptedKey/ok === RUN Test_newJWKSignerFromEncryptedKey/fail_decrypt === RUN Test_newJWKSignerFromEncryptedKey/fail_unmarshal === RUN Test_newJWKSignerFromEncryptedKey/fail_not_signer ---- PASS: Test_newJWKSignerFromEncryptedKey (0.99s) - --- PASS: Test_newJWKSignerFromEncryptedKey/ok (0.13s) - --- PASS: Test_newJWKSignerFromEncryptedKey/fail_decrypt (0.22s) - --- PASS: Test_newJWKSignerFromEncryptedKey/fail_unmarshal (0.16s) - --- PASS: Test_newJWKSignerFromEncryptedKey/fail_not_signer (0.15s) +--- PASS: Test_newJWKSignerFromEncryptedKey (3.84s) + --- PASS: Test_newJWKSignerFromEncryptedKey/ok (0.64s) + --- PASS: Test_newJWKSignerFromEncryptedKey/fail_decrypt (0.60s) + --- PASS: Test_newJWKSignerFromEncryptedKey/fail_unmarshal (0.71s) + --- PASS: Test_newJWKSignerFromEncryptedKey/fail_not_signer (0.55s) === RUN Test_init ---- PASS: Test_init (0.00s) +--- PASS: Test_init (0.02s) === RUN TestNew === RUN TestNew/ok === RUN TestNew/ok_jwk @@ -9754,10 +9788,10 @@ === RUN TestNew/fail_new_jwk_issuer === RUN TestNew/bad_issuer === RUN TestNew/bad_issuer_type ---- PASS: TestNew (0.42s) +--- PASS: TestNew (1.69s) --- PASS: TestNew/ok (0.00s) --- PASS: TestNew/ok_jwk (0.00s) - --- PASS: TestNew/ok_jwk_provisioners (0.13s) + --- PASS: TestNew/ok_jwk_provisioners (0.58s) --- PASS: TestNew/ok_ca_getter (0.00s) --- PASS: TestNew/fail_authority (0.00s) --- PASS: TestNew/fail_fingerprint (0.00s) @@ -9765,12 +9799,12 @@ --- PASS: TestNew/fail_provisioner (0.00s) --- PASS: TestNew/fail_provisioner_jwk (0.00s) --- PASS: TestNew/fail_provisioner_not_found (0.00s) - --- PASS: TestNew/fail_invalid_password (0.13s) + --- PASS: TestNew/fail_invalid_password (0.44s) --- PASS: TestNew/fail_no_key (0.00s) --- PASS: TestNew/fail_certificate (0.00s) --- PASS: TestNew/fail_key (0.00s) --- PASS: TestNew/fail_key_jwk (0.00s) - --- PASS: TestNew/bad_authority (0.00s) + --- PASS: TestNew/bad_authority (0.01s) --- PASS: TestNew/fail_parse_url (0.00s) --- PASS: TestNew/fail_new_client (0.00s) --- PASS: TestNew/fail_new_x5c_issuer (0.00s) @@ -9795,14 +9829,14 @@ === RUN TestStepCAS_CreateCertificate/fail_sign_token === RUN TestStepCAS_CreateCertificate/fail_client_sign === RUN TestStepCAS_CreateCertificate/fail_password ---- PASS: TestStepCAS_CreateCertificate (0.59s) - --- PASS: TestStepCAS_CreateCertificate/ok (0.00s) - --- PASS: TestStepCAS_CreateCertificate/ok_with_different_CSR (0.00s) - --- PASS: TestStepCAS_CreateCertificate/ok_with_password (0.20s) +--- PASS: TestStepCAS_CreateCertificate (3.92s) + --- PASS: TestStepCAS_CreateCertificate/ok (0.35s) + --- PASS: TestStepCAS_CreateCertificate/ok_with_different_CSR (0.01s) + --- PASS: TestStepCAS_CreateCertificate/ok_with_password (0.21s) --- PASS: TestStepCAS_CreateCertificate/ok_jwk (0.00s) --- PASS: TestStepCAS_CreateCertificate/ok_jwk_with_password (0.00s) - --- PASS: TestStepCAS_CreateCertificate/ok_with_provisioner (0.00s) - --- PASS: TestStepCAS_CreateCertificate/ok_with_server_cert (0.00s) + --- PASS: TestStepCAS_CreateCertificate/ok_with_provisioner (0.63s) + --- PASS: TestStepCAS_CreateCertificate/ok_with_server_cert (0.30s) --- PASS: TestStepCAS_CreateCertificate/fail_CSR (0.00s) --- PASS: TestStepCAS_CreateCertificate/fail_Template (0.00s) --- PASS: TestStepCAS_CreateCertificate/fail_lifetime (0.00s) @@ -9813,7 +9847,7 @@ === RUN TestStepCAS_RenewCertificate/ok === RUN TestStepCAS_RenewCertificate/fail_no_token === RUN TestStepCAS_RenewCertificate/fail_bad_token ---- PASS: TestStepCAS_RenewCertificate (0.01s) +--- PASS: TestStepCAS_RenewCertificate (0.00s) --- PASS: TestStepCAS_RenewCertificate/ok (0.00s) --- PASS: TestStepCAS_RenewCertificate/fail_no_token (0.00s) --- PASS: TestStepCAS_RenewCertificate/fail_bad_token (0.00s) @@ -9830,11 +9864,11 @@ === RUN TestStepCAS_RevokeCertificate/fail_revoke_token === RUN TestStepCAS_RevokeCertificate/fail_client_revoke === RUN TestStepCAS_RevokeCertificate/fail_password ---- PASS: TestStepCAS_RevokeCertificate (0.76s) - --- PASS: TestStepCAS_RevokeCertificate/ok_serial_number (0.00s) +--- PASS: TestStepCAS_RevokeCertificate (3.25s) + --- PASS: TestStepCAS_RevokeCertificate/ok_serial_number (0.04s) --- PASS: TestStepCAS_RevokeCertificate/ok_certificate (0.00s) --- PASS: TestStepCAS_RevokeCertificate/ok_both (0.00s) - --- PASS: TestStepCAS_RevokeCertificate/ok_with_password (0.13s) + --- PASS: TestStepCAS_RevokeCertificate/ok_with_password (0.50s) --- PASS: TestStepCAS_RevokeCertificate/ok_serial_number_jwk (0.00s) --- PASS: TestStepCAS_RevokeCertificate/ok_certificate_jwk (0.00s) --- PASS: TestStepCAS_RevokeCertificate/ok_both_jwk (0.00s) @@ -9842,12 +9876,12 @@ --- PASS: TestStepCAS_RevokeCertificate/fail_request (0.00s) --- PASS: TestStepCAS_RevokeCertificate/fail_revoke_token (0.00s) --- PASS: TestStepCAS_RevokeCertificate/fail_client_revoke (0.00s) - --- PASS: TestStepCAS_RevokeCertificate/fail_password (0.22s) + --- PASS: TestStepCAS_RevokeCertificate/fail_password (0.54s) === RUN TestStepCAS_GetCertificateAuthority === RUN TestStepCAS_GetCertificateAuthority/ok === RUN TestStepCAS_GetCertificateAuthority/ok_jwk === RUN TestStepCAS_GetCertificateAuthority/fail_fingerprint ---- PASS: TestStepCAS_GetCertificateAuthority (0.00s) +--- PASS: TestStepCAS_GetCertificateAuthority (0.02s) --- PASS: TestStepCAS_GetCertificateAuthority/ok (0.00s) --- PASS: TestStepCAS_GetCertificateAuthority/ok_jwk (0.00s) --- PASS: TestStepCAS_GetCertificateAuthority/fail_fingerprint (0.00s) @@ -9870,8 +9904,8 @@ === RUN Test_x5cIssuer_RevokeToken/fail_crt === RUN Test_x5cIssuer_RevokeToken/fail_key === RUN Test_x5cIssuer_RevokeToken/fail_no_signer ---- PASS: Test_x5cIssuer_RevokeToken (0.00s) - --- PASS: Test_x5cIssuer_RevokeToken/ok (0.00s) +--- PASS: Test_x5cIssuer_RevokeToken (0.01s) + --- PASS: Test_x5cIssuer_RevokeToken/ok (0.01s) --- PASS: Test_x5cIssuer_RevokeToken/fail_crt (0.00s) --- PASS: Test_x5cIssuer_RevokeToken/fail_key (0.00s) --- PASS: Test_x5cIssuer_RevokeToken/fail_no_signer (0.00s) @@ -9897,16 +9931,16 @@ === RUN Test_newJoseSigner/rsa === RUN Test_newJoseSigner/fail_p224 === RUN Test_newJoseSigner/fail_signer ---- PASS: Test_newJoseSigner (0.73s) +--- PASS: Test_newJoseSigner (1.64s) --- PASS: Test_newJoseSigner/p256 (0.00s) --- PASS: Test_newJoseSigner/p384 (0.00s) - --- PASS: Test_newJoseSigner/p521 (0.00s) + --- PASS: Test_newJoseSigner/p521 (0.02s) --- PASS: Test_newJoseSigner/ed25519 (0.00s) - --- PASS: Test_newJoseSigner/rsa (0.00s) + --- PASS: Test_newJoseSigner/rsa (0.02s) --- PASS: Test_newJoseSigner/fail_p224 (0.00s) --- PASS: Test_newJoseSigner/fail_signer (0.00s) PASS -ok github.com/smallstep/certificates/cas/stepcas 4.450s +ok github.com/smallstep/certificates/cas/stepcas 18.514s ? github.com/smallstep/certificates/commands [no test files] === RUN TestIsRevoked === RUN TestIsRevoked/false/nil_db @@ -9919,13 +9953,13 @@ --- PASS: TestIsRevoked/error/checking_bucket (0.00s) --- PASS: TestIsRevoked/true (0.00s) === RUN TestRevoke -=== RUN TestRevoke/error/force_isRevoked === RUN TestRevoke/error/was_already_revoked === RUN TestRevoke/ok ---- PASS: TestRevoke (0.00s) - --- PASS: TestRevoke/error/force_isRevoked (0.00s) +=== RUN TestRevoke/error/force_isRevoked +--- PASS: TestRevoke (0.02s) --- PASS: TestRevoke/error/was_already_revoked (0.00s) --- PASS: TestRevoke/ok (0.00s) + --- PASS: TestRevoke/error/force_isRevoked (0.00s) === RUN TestUseToken === RUN TestUseToken/fail/force-CmpAndSwap-error === RUN TestUseToken/fail/CmpAndSwap-already-exists @@ -9967,7 +10001,7 @@ === RUN TestSimpleDB --- PASS: TestSimpleDB (0.00s) PASS -ok github.com/smallstep/certificates/db 0.061s +ok github.com/smallstep/certificates/db 0.215s === RUN TestError_MarshalJSON === RUN TestError_MarshalJSON/ok === RUN TestError_MarshalJSON/ok_no_error @@ -9988,7 +10022,7 @@ === RUN TestError_Unwrap/ok_NewErr_wit_message === RUN TestError_Unwrap/ok_Errorf === RUN TestError_Unwrap/ok_Errorf_v-wrap ---- PASS: TestError_Unwrap (0.01s) +--- PASS: TestError_Unwrap (0.00s) --- PASS: TestError_Unwrap/ok_New (0.00s) --- PASS: TestError_Unwrap/ok_New_v-wrap (0.00s) --- PASS: TestError_Unwrap/ok_NewError (0.00s) @@ -10015,7 +10049,7 @@ --- PASS: TestError_Unwrap_As/fail_Errorf (0.00s) --- PASS: TestError_Unwrap_As/fail_Errorf_v-wrap (0.00s) PASS -ok github.com/smallstep/certificates/errs 0.038s +ok github.com/smallstep/certificates/errs 0.055s === RUN TestUintConvertsValues --- PASS: TestUintConvertsValues (0.00s) === RUN TestUintPanicsOnNegativeValue @@ -10047,7 +10081,7 @@ === RUN TestUint16PanicsOnLargeValue --- PASS: TestUint16PanicsOnLargeValue (0.00s) PASS -ok github.com/smallstep/certificates/internal/cast 0.025s +ok github.com/smallstep/certificates/internal/cast 0.038s ? github.com/smallstep/certificates/internal/httptransport [no test files] ? github.com/smallstep/certificates/internal/metrix [no test files] ? github.com/smallstep/certificates/internal/userid [no test files] @@ -10079,18 +10113,18 @@ === RUN TestLogRealIP/setting_is_turned_on,_all_headers_are_set === RUN TestLogRealIP/setting_is_turned_off,_True-Client-IP_header_is_set === RUN TestLogRealIP/setting_is_turned_off,_no_header_is_set ---- PASS: TestLogRealIP (0.00s) +--- PASS: TestLogRealIP (0.01s) --- PASS: TestLogRealIP/setting_is_turned_on,_no_header_is_set (0.00s) --- PASS: TestLogRealIP/setting_is_turned_on,_True-Client-IP_header_is_set (0.00s) --- PASS: TestLogRealIP/setting_is_turned_on,_True-Client-IP_header_is_set_with_invalid_value (0.00s) --- PASS: TestLogRealIP/setting_is_turned_on,_X-Real-IP_header_is_set (0.00s) --- PASS: TestLogRealIP/setting_is_turned_on,_X-Forwarded-For_header_is_set (0.00s) - --- PASS: TestLogRealIP/setting_is_turned_on,_X-Forwarded-For_header_is_set_with_multiple_IPs (0.00s) + --- PASS: TestLogRealIP/setting_is_turned_on,_X-Forwarded-For_header_is_set_with_multiple_IPs (0.01s) --- PASS: TestLogRealIP/setting_is_turned_on,_all_headers_are_set (0.00s) --- PASS: TestLogRealIP/setting_is_turned_off,_True-Client-IP_header_is_set (0.00s) --- PASS: TestLogRealIP/setting_is_turned_off,_no_header_is_set (0.00s) PASS -ok github.com/smallstep/certificates/logging 0.017s +ok github.com/smallstep/certificates/logging 0.086s === RUN Test_Middleware === RUN Test_Middleware/default-request-id === RUN Test_Middleware/no-request-id @@ -10102,30 +10136,30 @@ --- PASS: Test_Middleware/empty-header (0.00s) --- PASS: Test_Middleware/fallback-header-name (0.00s) PASS -ok github.com/smallstep/certificates/middleware/requestid 0.018s +ok github.com/smallstep/certificates/middleware/requestid 0.038s ? github.com/smallstep/certificates/monitoring [no test files] === RUN TestPKI_WriteHelmTemplate -=== RUN TestPKI_WriteHelmTemplate/ok/with-acme +=== RUN TestPKI_WriteHelmTemplate/fail/authority.ProvisionerToCertificates === RUN TestPKI_WriteHelmTemplate/ok/with-admin === RUN TestPKI_WriteHelmTemplate/ok/with-ssh === RUN TestPKI_WriteHelmTemplate/ok/with-ssh-and-duplicate-provisioner-name -=== RUN TestPKI_WriteHelmTemplate/ok/with-ssh-and-acme -=== RUN TestPKI_WriteHelmTemplate/fail/authority.ProvisionerToCertificates === RUN TestPKI_WriteHelmTemplate/ok/simple === RUN TestPKI_WriteHelmTemplate/ok/with-provisioner +=== RUN TestPKI_WriteHelmTemplate/ok/with-acme === RUN TestPKI_WriteHelmTemplate/ok/with-acme-and-duplicate-provisioner-name ---- PASS: TestPKI_WriteHelmTemplate (0.08s) - --- PASS: TestPKI_WriteHelmTemplate/ok/with-acme (0.01s) - --- PASS: TestPKI_WriteHelmTemplate/ok/with-admin (0.01s) - --- PASS: TestPKI_WriteHelmTemplate/ok/with-ssh (0.01s) - --- PASS: TestPKI_WriteHelmTemplate/ok/with-ssh-and-duplicate-provisioner-name (0.02s) - --- PASS: TestPKI_WriteHelmTemplate/ok/with-ssh-and-acme (0.01s) +=== RUN TestPKI_WriteHelmTemplate/ok/with-ssh-and-acme +--- PASS: TestPKI_WriteHelmTemplate (0.15s) --- PASS: TestPKI_WriteHelmTemplate/fail/authority.ProvisionerToCertificates (0.00s) - --- PASS: TestPKI_WriteHelmTemplate/ok/simple (0.01s) + --- PASS: TestPKI_WriteHelmTemplate/ok/with-admin (0.02s) + --- PASS: TestPKI_WriteHelmTemplate/ok/with-ssh (0.01s) + --- PASS: TestPKI_WriteHelmTemplate/ok/with-ssh-and-duplicate-provisioner-name (0.03s) + --- PASS: TestPKI_WriteHelmTemplate/ok/simple (0.02s) --- PASS: TestPKI_WriteHelmTemplate/ok/with-provisioner (0.01s) - --- PASS: TestPKI_WriteHelmTemplate/ok/with-acme-and-duplicate-provisioner-name (0.00s) + --- PASS: TestPKI_WriteHelmTemplate/ok/with-acme (0.00s) + --- PASS: TestPKI_WriteHelmTemplate/ok/with-acme-and-duplicate-provisioner-name (0.02s) + --- PASS: TestPKI_WriteHelmTemplate/ok/with-ssh-and-acme (0.02s) PASS -ok github.com/smallstep/certificates/pki 0.170s +ok github.com/smallstep/certificates/pki 0.405s === RUN TestNamePolicyEngine_matchDomainConstraint === RUN TestNamePolicyEngine_matchDomainConstraint/fail/wildcard === RUN TestNamePolicyEngine_matchDomainConstraint/fail/wildcard-literal @@ -10362,7 +10396,7 @@ === RUN TestNamePolicyEngine_X509_AllAllowed/ok/combined-simple-permitted === RUN TestNamePolicyEngine_X509_AllAllowed/ok/combined-simple-permitted-without-subject-verification === RUN TestNamePolicyEngine_X509_AllAllowed/ok/combined-simple-all ---- PASS: TestNamePolicyEngine_X509_AllAllowed (0.03s) +--- PASS: TestNamePolicyEngine_X509_AllAllowed (0.05s) --- PASS: TestNamePolicyEngine_X509_AllAllowed/fail/dns-permitted (0.00s) --- PASS: TestNamePolicyEngine_X509_AllAllowed/fail/dns-permitted-wildcard-literal-x509 (0.00s) --- PASS: TestNamePolicyEngine_X509_AllAllowed/fail/dns-permitted-single-host (0.00s) @@ -10508,7 +10542,7 @@ === RUN TestNamePolicyEngine_SSH_ArePrincipalsAllowed/ok/combined-user === RUN TestNamePolicyEngine_SSH_ArePrincipalsAllowed/ok/combined-user-with-excluded-user-principal === RUN TestNamePolicyEngine_SSH_ArePrincipalsAllowed/ok/combined-host ---- PASS: TestNamePolicyEngine_SSH_ArePrincipalsAllowed (0.00s) +--- PASS: TestNamePolicyEngine_SSH_ArePrincipalsAllowed (0.01s) --- PASS: TestNamePolicyEngine_SSH_ArePrincipalsAllowed/fail/host-with-permitted-dns-domain (0.00s) --- PASS: TestNamePolicyEngine_SSH_ArePrincipalsAllowed/fail/host-with-excluded-dns-domain (0.00s) --- PASS: TestNamePolicyEngine_SSH_ArePrincipalsAllowed/fail/host-with-permitted-cidr (0.00s) @@ -10540,26 +10574,26 @@ --- PASS: TestNamePolicyEngine_SSH_ArePrincipalsAllowed/ok/combined-host (0.00s) === RUN Test_splitSSHPrincipals === RUN Test_splitSSHPrincipals/fail/unexpected-cert-type -=== RUN Test_splitSSHPrincipals/fail/user-ip === RUN Test_splitSSHPrincipals/fail/user-uri -=== RUN Test_splitSSHPrincipals/ok/host-ip -=== RUN Test_splitSSHPrincipals/ok/host-email -=== RUN Test_splitSSHPrincipals/ok/user-username-with-period -=== RUN Test_splitSSHPrincipals/ok/user-maillike === RUN Test_splitSSHPrincipals/fail/host-uri === RUN Test_splitSSHPrincipals/ok/host-dns +=== RUN Test_splitSSHPrincipals/ok/host-email === RUN Test_splitSSHPrincipals/ok/user-localhost ---- PASS: Test_splitSSHPrincipals (0.01s) +=== RUN Test_splitSSHPrincipals/ok/user-maillike +=== RUN Test_splitSSHPrincipals/fail/user-ip +=== RUN Test_splitSSHPrincipals/ok/host-ip +=== RUN Test_splitSSHPrincipals/ok/user-username-with-period +--- PASS: Test_splitSSHPrincipals (0.00s) --- PASS: Test_splitSSHPrincipals/fail/unexpected-cert-type (0.00s) - --- PASS: Test_splitSSHPrincipals/fail/user-ip (0.00s) --- PASS: Test_splitSSHPrincipals/fail/user-uri (0.00s) - --- PASS: Test_splitSSHPrincipals/ok/host-ip (0.00s) - --- PASS: Test_splitSSHPrincipals/ok/host-email (0.00s) - --- PASS: Test_splitSSHPrincipals/ok/user-username-with-period (0.00s) - --- PASS: Test_splitSSHPrincipals/ok/user-maillike (0.00s) --- PASS: Test_splitSSHPrincipals/fail/host-uri (0.00s) --- PASS: Test_splitSSHPrincipals/ok/host-dns (0.00s) + --- PASS: Test_splitSSHPrincipals/ok/host-email (0.00s) --- PASS: Test_splitSSHPrincipals/ok/user-localhost (0.00s) + --- PASS: Test_splitSSHPrincipals/ok/user-maillike (0.00s) + --- PASS: Test_splitSSHPrincipals/fail/user-ip (0.00s) + --- PASS: Test_splitSSHPrincipals/ok/host-ip (0.00s) + --- PASS: Test_splitSSHPrincipals/ok/user-username-with-period (0.00s) === RUN Test_removeDuplicates === RUN Test_removeDuplicates/empty-slice === RUN Test_removeDuplicates/single-item @@ -10645,69 +10679,69 @@ --- PASS: Test_normalizeAndValidateEmailConstraint/ok/wildcard (0.00s) --- PASS: Test_normalizeAndValidateEmailConstraint/ok/specific-mail (0.00s) === RUN TestNew +=== RUN TestNew/ok/with-permitted-cidrs +=== RUN TestNew/ok/with-permitted-uris === RUN TestNew/fail/with-excluded-common-name -=== RUN TestNew/fail/with-permitted-ipsOrCIDRs-cidr -=== RUN TestNew/ok/with-excluded-ip-ranges +=== RUN TestNew/fail/with-permitted-uris +=== RUN TestNew/ok/with-permitted-ip-ranges === RUN TestNew/ok/with-excluded-cidrs +=== RUN TestNew/ok/with-excluded-emails === RUN TestNew/fail/with-permitted-cidrs -=== RUN TestNew/ok/with-excluded-ipsOrCIDRs-cidr -=== RUN TestNew/ok/with-excluded-uris -=== RUN TestNew/fail/with-permitted-dns-domains -=== RUN TestNew/fail/with-permitted-uris -=== RUN TestNew/ok/subject-verification +=== RUN TestNew/fail/with-excluded-cidrs +=== RUN TestNew/fail/with-permitted-ipsOrCIDRs-ip +=== RUN TestNew/fail/with-permitted-emails +=== RUN TestNew/ok/with-excluded-ip-ranges === RUN TestNew/ok/literal-wildcards -=== RUN TestNew/ok/with-permitted-dns-wildcard-domains -=== RUN TestNew/ok/with-excluded-emails -=== RUN TestNew/ok/with-permitted-uris +=== RUN TestNew/ok/with-excluded-principals === RUN TestNew/fail/with-excluded-emails -=== RUN TestNew/ok/default -=== RUN TestNew/ok/with-permitted-ipsOrCIDRs-cidr -=== RUN TestNew/fail/with-permitted-common-name -=== RUN TestNew/fail/with-permitted-ipsOrCIDRs-ip -=== RUN TestNew/fail/with-excluded-ipsOrCIDRs-ip -=== RUN TestNew/ok/with-excluded-dns-domains -=== RUN TestNew/ok/with-permitted-ip-ranges +=== RUN TestNew/ok/with-permitted-dns-wildcard-domains === RUN TestNew/ok/with-permitted-principals === RUN TestNew/fail/with-excluded-dns-domains -=== RUN TestNew/fail/with-excluded-cidrs -=== RUN TestNew/fail/with-excluded-ipsOrCIDRs-cidr +=== RUN TestNew/fail/with-permitted-ipsOrCIDRs-cidr +=== RUN TestNew/fail/with-excluded-ipsOrCIDRs-ip +=== RUN TestNew/ok/default +=== RUN TestNew/ok/with-excluded-ipsOrCIDRs-cidr +=== RUN TestNew/ok/with-excluded-uris +=== RUN TestNew/fail/with-permitted-common-name +=== RUN TestNew/ok/with-permitted-ipsOrCIDRs-cidr === RUN TestNew/ok/with-permitted-emails -=== RUN TestNew/ok/with-excluded-principals -=== RUN TestNew/fail/with-permitted-emails +=== RUN TestNew/fail/with-permitted-dns-domains +=== RUN TestNew/fail/with-excluded-ipsOrCIDRs-cidr === RUN TestNew/fail/with-excluded-uris -=== RUN TestNew/ok/with-permitted-cidrs ---- PASS: TestNew (0.01s) +=== RUN TestNew/ok/subject-verification +=== RUN TestNew/ok/with-excluded-dns-domains +--- PASS: TestNew (0.00s) + --- PASS: TestNew/ok/with-permitted-cidrs (0.00s) + --- PASS: TestNew/ok/with-permitted-uris (0.00s) --- PASS: TestNew/fail/with-excluded-common-name (0.00s) - --- PASS: TestNew/fail/with-permitted-ipsOrCIDRs-cidr (0.00s) - --- PASS: TestNew/ok/with-excluded-ip-ranges (0.00s) + --- PASS: TestNew/fail/with-permitted-uris (0.00s) + --- PASS: TestNew/ok/with-permitted-ip-ranges (0.00s) --- PASS: TestNew/ok/with-excluded-cidrs (0.00s) + --- PASS: TestNew/ok/with-excluded-emails (0.00s) --- PASS: TestNew/fail/with-permitted-cidrs (0.00s) - --- PASS: TestNew/ok/with-excluded-ipsOrCIDRs-cidr (0.00s) - --- PASS: TestNew/ok/with-excluded-uris (0.00s) - --- PASS: TestNew/fail/with-permitted-dns-domains (0.00s) - --- PASS: TestNew/fail/with-permitted-uris (0.00s) - --- PASS: TestNew/ok/subject-verification (0.00s) + --- PASS: TestNew/fail/with-excluded-cidrs (0.00s) + --- PASS: TestNew/fail/with-permitted-ipsOrCIDRs-ip (0.00s) + --- PASS: TestNew/fail/with-permitted-emails (0.00s) + --- PASS: TestNew/ok/with-excluded-ip-ranges (0.00s) --- PASS: TestNew/ok/literal-wildcards (0.00s) - --- PASS: TestNew/ok/with-permitted-dns-wildcard-domains (0.00s) - --- PASS: TestNew/ok/with-excluded-emails (0.00s) - --- PASS: TestNew/ok/with-permitted-uris (0.00s) + --- PASS: TestNew/ok/with-excluded-principals (0.00s) --- PASS: TestNew/fail/with-excluded-emails (0.00s) - --- PASS: TestNew/ok/default (0.00s) - --- PASS: TestNew/ok/with-permitted-ipsOrCIDRs-cidr (0.00s) - --- PASS: TestNew/fail/with-permitted-common-name (0.00s) - --- PASS: TestNew/fail/with-permitted-ipsOrCIDRs-ip (0.00s) - --- PASS: TestNew/fail/with-excluded-ipsOrCIDRs-ip (0.00s) - --- PASS: TestNew/ok/with-excluded-dns-domains (0.00s) - --- PASS: TestNew/ok/with-permitted-ip-ranges (0.00s) + --- PASS: TestNew/ok/with-permitted-dns-wildcard-domains (0.00s) --- PASS: TestNew/ok/with-permitted-principals (0.00s) --- PASS: TestNew/fail/with-excluded-dns-domains (0.00s) - --- PASS: TestNew/fail/with-excluded-cidrs (0.00s) - --- PASS: TestNew/fail/with-excluded-ipsOrCIDRs-cidr (0.00s) + --- PASS: TestNew/fail/with-permitted-ipsOrCIDRs-cidr (0.00s) + --- PASS: TestNew/fail/with-excluded-ipsOrCIDRs-ip (0.00s) + --- PASS: TestNew/ok/default (0.00s) + --- PASS: TestNew/ok/with-excluded-ipsOrCIDRs-cidr (0.00s) + --- PASS: TestNew/ok/with-excluded-uris (0.00s) + --- PASS: TestNew/fail/with-permitted-common-name (0.00s) + --- PASS: TestNew/ok/with-permitted-ipsOrCIDRs-cidr (0.00s) --- PASS: TestNew/ok/with-permitted-emails (0.00s) - --- PASS: TestNew/ok/with-excluded-principals (0.00s) - --- PASS: TestNew/fail/with-permitted-emails (0.00s) + --- PASS: TestNew/fail/with-permitted-dns-domains (0.00s) + --- PASS: TestNew/fail/with-excluded-ipsOrCIDRs-cidr (0.00s) --- PASS: TestNew/fail/with-excluded-uris (0.00s) - --- PASS: TestNew/ok/with-permitted-cidrs (0.00s) + --- PASS: TestNew/ok/subject-verification (0.00s) + --- PASS: TestNew/ok/with-excluded-dns-domains (0.00s) === RUN Test_normalizeAndValidateURIDomainConstraint === RUN Test_normalizeAndValidateURIDomainConstraint/fail/empty-constraint === RUN Test_normalizeAndValidateURIDomainConstraint/fail/scheme-https @@ -10743,15 +10777,15 @@ --- PASS: Test_normalizeAndValidateURIDomainConstraint/ok/idna-internationalized-domain-name-lookup (0.00s) --- PASS: Test_normalizeAndValidateURIDomainConstraint/ok/idna-internationalized-domain-name-lookup-deviation (0.00s) PASS -ok github.com/smallstep/certificates/policy 0.128s +ok github.com/smallstep/certificates/policy 0.147s === RUN TestAuthority_encrypt === PAUSE TestAuthority_encrypt === RUN TestAuthority_SignCSR === RUN TestAuthority_SignCSR/ok === RUN TestAuthority_SignCSR/ok_no_sign_options ---- PASS: TestAuthority_SignCSR (2.01s) +--- PASS: TestAuthority_SignCSR (7.81s) --- PASS: TestAuthority_SignCSR/ok (0.01s) - --- PASS: TestAuthority_SignCSR/ok_no_sign_options (0.01s) + --- PASS: TestAuthority_SignCSR/ok_no_sign_options (0.05s) === CONT TestAuthority_encrypt === RUN TestAuthority_encrypt/alg-0 === PAUSE TestAuthority_encrypt/alg-0 @@ -10771,15 +10805,15 @@ === CONT TestAuthority_encrypt/alg-4 === CONT TestAuthority_encrypt/alg-2 === CONT TestAuthority_encrypt/alg-1 ---- PASS: TestAuthority_encrypt (0.74s) +--- PASS: TestAuthority_encrypt (1.32s) --- PASS: TestAuthority_encrypt/alg-0 (0.00s) - --- PASS: TestAuthority_encrypt/alg-3 (0.00s) --- PASS: TestAuthority_encrypt/alg-unknown (0.00s) --- PASS: TestAuthority_encrypt/alg-4 (0.00s) + --- PASS: TestAuthority_encrypt/alg-3 (0.00s) --- PASS: TestAuthority_encrypt/alg-2 (0.00s) --- PASS: TestAuthority_encrypt/alg-1 (0.00s) PASS -ok github.com/smallstep/certificates/scep 2.801s +ok github.com/smallstep/certificates/scep 9.201s === RUN Test_decodeRequest === RUN Test_decodeRequest/fail/invalid-query === RUN Test_decodeRequest/fail/empty-operation @@ -10795,7 +10829,7 @@ === RUN Test_decodeRequest/ok/get-PKIOperation-not-escaped === RUN Test_decodeRequest/ok/get-PKIOperation-weird-macos-case === RUN Test_decodeRequest/ok/post-PKIOperation ---- PASS: Test_decodeRequest (0.00s) +--- PASS: Test_decodeRequest (0.02s) --- PASS: Test_decodeRequest/fail/invalid-query (0.00s) --- PASS: Test_decodeRequest/fail/empty-operation (0.00s) --- PASS: Test_decodeRequest/fail/unsupported-method (0.00s) @@ -10811,7 +10845,7 @@ --- PASS: Test_decodeRequest/ok/get-PKIOperation-weird-macos-case (0.00s) --- PASS: Test_decodeRequest/ok/post-PKIOperation (0.00s) PASS -ok github.com/smallstep/certificates/scep/api 0.086s +ok github.com/smallstep/certificates/scep/api 0.150s ? github.com/smallstep/certificates/server [no test files] === RUN TestTemplates_Validate === RUN TestTemplates_Validate/ok @@ -10854,7 +10888,7 @@ === RUN TestTemplate_Validate/badPath === RUN TestTemplate_Validate/missingTemplate === RUN TestTemplate_Validate/directoryTemplate ---- PASS: TestTemplate_Validate (0.00s) +--- PASS: TestTemplate_Validate (0.01s) --- PASS: TestTemplate_Validate/okSnippet (0.00s) --- PASS: TestTemplate_Validate/okFile (0.00s) --- PASS: TestTemplate_Validate/okDirectory (0.00s) @@ -10895,9 +10929,9 @@ === RUN TestTemplate_Render/file#01 === RUN TestTemplate_Render/directory === RUN TestTemplate_Render/error ---- PASS: TestTemplate_Render (0.02s) +--- PASS: TestTemplate_Render (0.00s) --- PASS: TestTemplate_Render/snippet (0.00s) - --- PASS: TestTemplate_Render/file (0.01s) + --- PASS: TestTemplate_Render/file (0.00s) --- PASS: TestTemplate_Render/file#01 (0.00s) --- PASS: TestTemplate_Render/directory (0.00s) --- PASS: TestTemplate_Render/error (0.00s) @@ -10907,7 +10941,7 @@ === RUN TestTemplate_Output/file#01 === RUN TestTemplate_Output/directory === RUN TestTemplate_Output/error ---- PASS: TestTemplate_Output (0.00s) +--- PASS: TestTemplate_Output (0.03s) --- PASS: TestTemplate_Output/snippet (0.00s) --- PASS: TestTemplate_Output/file (0.00s) --- PASS: TestTemplate_Output/file#01 (0.00s) @@ -10950,300 +10984,309 @@ --- PASS: TestDefaultTemplates (0.00s) --- PASS: TestDefaultTemplates/ok (0.00s) PASS -ok github.com/smallstep/certificates/templates 0.113s +ok github.com/smallstep/certificates/templates 0.194s === RUN Test_reflectRequestID -2026/11/25 04:49:39 Building new tls configuration using step-ca x509 Signer Interface -2026/11/25 04:49:39 Starting Smallstep CLI/0000000-dev (linux/arm64) -2026/11/25 04:49:39 Documentation: https://u.step.sm/docs/ca -2026/11/25 04:49:39 Community Discord: https://u.step.sm/discord -2026/11/25 04:49:39 Config file: loaded from token -2026/11/25 04:49:39 The primary server URL is https://127.0.0.1:36651 -2026/11/25 04:49:39 Root certificates are available at https://127.0.0.1:36651/roots.pem -2026/11/25 04:49:39 Additional configured hostnames: [::1], localhost -2026/11/25 04:49:39 X.509 Root Fingerprint: 4fd04562cb79985b8beed12aa285c28ad66b8d865130fdabd27fdd35fd3d03f8 -2026/11/25 04:49:39 Serving HTTPS on [::]:36651 ... -2026/11/25 04:49:39 /usr/lib/go-1.24/src/net/http/server.go:3638: http: TLS handshake error from 127.0.0.1:38916: EOF -time="2026-11-25T04:49:39-12:00" level=info duration="168.04µs" duration-ns=168040 fields.time="2026-11-25T04:49:39-12:00" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=cad2a2d1-6432-4d28-98b5-3f34e14db7a3 size=16 status=200 user-agent=step-http-client/1.0 user-id= -time="2026-11-25T04:49:39-12:00" level=warning duration="135.6µs" duration-ns=135600 error="/root/invalid was not found: certificate with fingerprint invalid was not found" fields.time="2026-11-25T04:49:39-12:00" method=GET name=ca path=/root/invalid protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=d67e5d2a-cd7b-4ff0-b341-103eebfadbe2 size=127 status=404 user-agent=step-http-client/1.0 user-id= -time="2026-11-25T04:49:39-12:00" level=warning duration="87.44µs" duration-ns=87440 error="/root/invalid was not found: certificate with fingerprint invalid was not found" fields.time="2026-11-25T04:49:39-12:00" method=GET name=ca path=/root/invalid protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=reqID size=127 status=404 user-agent=step-http-client/1.0 user-id= -time="2026-11-25T04:49:39-12:00" level=info certificate="MIIB/DCCAaOgAwIBAgIQci8ojJrl5ABzYnPMoJXcnTAKBggqhkjOPQQDAjAjMSEwHwYDVQQDExhTdGVwIEUyRSBJbnRlcm1lZGlhdGUgQ0EwHhcNMjYxMTI1MTU0OTM5WhcNMjYxMTI1MTc0OTM5WjAPMQ0wCwYDVQQDEwR0ZXN0MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEA4e0z5+NGGNczPX/axiyb9mUo8ShWkwJrjFh4hrgq635u6pyabPSngObYZs42otkjl5+F6k+Xi5nl42Wh0hlLKOBzDCByTAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBRKSX8LBcALb5C2h29tCRBL72AD7jAfBgNVHSMEGDAWgBT8jyeQQRNUxhroN7Oh07uyzaqSmDAPBgNVHREECDAGggR0ZXN0MEcGDCsGAQQBgqRkxihAAQQ3MDUCAQEEA2p3awQrVVEzWmVDWW8ycWhyb3N1SklTUjFtVjRsLW9TOFVyZjNsT1JkUWplZ2F4ODAKBggqhkjOPQQDAgNHADBEAiBf52EgKooRBiamae223cbdZhj4zyD7XbE6PLSvM1xhTgIgfGne3YB230OPifexWckdystwQMvWGTHu2q0+1BViLvE=" duration=10.0446ms duration-ns=10044600 fields.time="2026-11-25T04:49:39-12:00" issuer="Step E2E Intermediate CA" method=POST name=ca ott=eyJhbGciOiJFUzI1NiIsImtpZCI6IlVRM1plQ1lvMnFocm9zdUpJU1IxbVY0bC1vUzhVcmYzbE9SZFFqZWdheDgiLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovLzEyNy4wLjAuMS8xLjAvc2lnbiIsImV4cCI6MTc5NTYyNTQzOSwiaXNzIjoiandrIiwianRpIjoiYGYqIXBhXXBdb35gJHFfLFcjVi1bPWx6fEtcInZadG5qNlwieHcsQ2Y6WG5KOU8zVCU9MTo0N3YzUVx1MDAyNn5-TGQqVEgiLCJuYmYiOjE3OTU2MjUzNzksInNhbnMiOlsidGVzdCJdLCJzdWIiOiJ0ZXN0In0.RXSQISmb3I8T4jrybFN9xfLF1vY1Jd_JazW_DWsU1S6DhHlkIKnpsSVhie6CZYRk1g7iF-ELX7e6T04TNsLUEQ path=/sign protocol=HTTP/2.0 provisioner="jwk (UQ3ZeCYo2qhrosuJISR1mV4l-oS8Urf3lORdQjegax8)" public-key="ECDSA P-256" referer= remote-address=127.0.0.1 request-id=signRequestID sans="map[dns:[test]]" serial=151776851908097056706450479314153888925 size=3017 status=201 subject=test user-agent=step-http-client/1.0 user-id= valid-from="2026-11-25T15:49:39Z" valid-to="2026-11-25T17:49:39Z" ---- PASS: Test_reflectRequestID (1.65s) +2025/10/24 00:33:16 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:16 Starting Smallstep CLI/0000000-dev (linux/arm64) +2025/10/24 00:33:16 Documentation: https://u.step.sm/docs/ca +2025/10/24 00:33:16 Community Discord: https://u.step.sm/discord +2025/10/24 00:33:16 Config file: loaded from token +2025/10/24 00:33:16 The primary server URL is https://127.0.0.1:44877 +2025/10/24 00:33:16 Root certificates are available at https://127.0.0.1:44877/roots.pem +2025/10/24 00:33:16 Additional configured hostnames: [::1], localhost +2025/10/24 00:33:16 X.509 Root Fingerprint: ba1d223b54b6962c7e24265014a3adbcab01dca3700f0cf4a3381ee8ace02f47 +2025/10/24 00:33:16 Serving HTTPS on [::]:44877 ... +2025/10/24 00:33:16 /usr/lib/go-1.24/src/net/http/server.go:3638: http: TLS handshake error from 127.0.0.1:43436: EOF +time="2025-10-24T00:33:16+14:00" level=info duration="145.441µs" duration-ns=145441 fields.time="2025-10-24T00:33:16+14:00" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=2723b5ab-6d42-4a0d-92bc-825229e4b459 size=16 status=200 user-agent=step-http-client/1.0 user-id= +time="2025-10-24T00:33:16+14:00" level=warning duration="126.041µs" duration-ns=126041 error="/root/invalid was not found: certificate with fingerprint invalid was not found" fields.time="2025-10-24T00:33:16+14:00" method=GET name=ca path=/root/invalid protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=1b869512-ada9-4117-99ca-1fc590b319f1 size=127 status=404 user-agent=step-http-client/1.0 user-id= +time="2025-10-24T00:33:16+14:00" level=warning duration="92.44µs" duration-ns=92440 error="/root/invalid was not found: certificate with fingerprint invalid was not found" fields.time="2025-10-24T00:33:16+14:00" method=GET name=ca path=/root/invalid protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=reqID size=127 status=404 user-agent=step-http-client/1.0 user-id= +time="2025-10-24T00:33:16+14:00" level=info certificate="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" duration=27.202977ms duration-ns=27202977 fields.time="2025-10-24T00:33:16+14:00" issuer="Step E2E Intermediate CA" method=POST name=ca ott=eyJhbGciOiJFUzI1NiIsImtpZCI6InVEZXkzLUlDcWEwRjY1S0pfV1hsd1dfcVJWZXl6NUhfekxydzlIRURPNGciLCJ0eXAiOiJKV1QifQ.eyJhdWQiOiJodHRwczovLzEyNy4wLjAuMS8xLjAvc2lnbiIsImV4cCI6MTc2MTIxNTY1NiwiaXNzIjoiandrIiwianRpIjoiRFx1MDAyNm81LjBxa3tDfEp1WEB7a1VRO1UuWzQ7UnRfWWx2THlsXHUwMDNlKFlZZHl8U1tGbzJ5NjVDWiMjaWNjSHs3Z0ZdZXgiLCJuYmYiOjE3NjEyMTU1OTYsInNhbnMiOlsidGVzdCJdLCJzdWIiOiJ0ZXN0In0.jQRFqRfWH1vOFgJJFr5fn5P2qKoXBuI-isQy_tszl6n-f36JyH8KTrwHID7YkcTCguqDeadfGboI3Z6AW5sbeQ path=/sign protocol=HTTP/2.0 provisioner="jwk (uDey3-ICqa0F65KJ_WXlwW_qRVeyz5H_zLrw9HEDO4g)" public-key="ECDSA P-256" referer= remote-address=127.0.0.1 request-id=signRequestID sans="map[dns:[test]]" serial=241400764202737211455558308015902501111 size=3025 status=201 subject=test user-agent=step-http-client/1.0 user-id= valid-from="2025-10-23T09:33:16Z" valid-to="2025-10-23T11:33:16Z" +--- PASS: Test_reflectRequestID (2.55s) PASS -ok github.com/smallstep/certificates/test/integration 1.716s +ok github.com/smallstep/certificates/test/integration 2.758s === RUN TestIssuesCertificateUsingSCEPWithDecrypterAndUpstreamCAS -2026/11/25 04:49:39 Building new tls configuration using step-ca x509 Signer Interface -2026/11/25 04:49:39 Starting Smallstep CLI/0000000-dev (linux/arm64) -2026/11/25 04:49:39 Documentation: https://u.step.sm/docs/ca -2026/11/25 04:49:39 Community Discord: https://u.step.sm/discord -2026/11/25 04:49:39 Config file: loaded from token -2026/11/25 04:49:39 The primary server URL is https://127.0.0.1:45111 -2026/11/25 04:49:39 Root certificates are available at https://127.0.0.1:45111/roots.pem -2026/11/25 04:49:39 Additional configured hostnames: [::1], localhost -2026/11/25 04:49:39 X.509 Root Fingerprint: 7126895a331006d6e576f71e86cea0d8934e1e3434dd2fd4af186e7430e8526c -2026/11/25 04:49:39 Serving HTTPS on [::]:45111 ... -time="2026-11-25T04:49:40-12:00" level=info duration="163µs" duration-ns=163000 fields.time="2026-11-25T04:49:40-12:00" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=cd07c549-766b-4eb2-bead-d30629fbbb56 size=16 status=200 user-agent=step-http-client/1.0 user-id= -time="2026-11-25T04:49:40-12:00" level=info duration="106.28µs" duration-ns=106280 fields.time="2026-11-25T04:49:40-12:00" method=GET name=ca path="/scep/scep/scep/scep?operation=GetCACert&message=test" protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=4b81d045-7862-44a2-bdfd-45027ca99c96 size=1160 status=200 user-agent=Go-http-client/2.0 user-id= - common_test.go:204: 0 *H u0q10  *H W0j00 - *H=0D1B0@U 9Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA0 261125154939Z 261125174939Z010U decrypter0"0  *H 0 - Ѷjޑʺn!Z&%ko{,8h64وEC}Hp>jNfyM3'FgtuMs}<\yr-HϮaqS['?Kc6{1b{m)MW̜/hQ"eZ [F"8uty8M?Lb*BDjk\gTq$cY/'k-!'fy=DrRKO"*xGVVX0V0Uc֬ѥ7_0U#073OKu`U 0U 0 decrypter0 - *H=H0E -Y65Cv6b;ݨkޮ%~!fCGD2Ї3Papj. 00Rիڠ0 - *H=0<1:08U 1Step E2E | SCEP Decrypter w/ Upstream CAS Root CA0 261125164939Z 261126164939Z0D1B0@U 9Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA0Y0*H=*H=B8T;v N腢VHPzzÅGL'pB64Ed֌nFZ>qR'f0d0U0U00U73OKu`U 0U#073OKu`U 0 - *H=H0E!ԝW6ҟq*.?F`X/ [!$3]+q;JߏLJTn0#})1 - common_test.go:286: 0 J *H  ;0 71 0+0J *H ;703 *H $0 1c0_0I0D1B0@U 9Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA0  *H !L6ɜniKw q+h?g%`)hߛjq=`Ppb#o#6xˉ8-NJ”."16!ORD͢3֣pQb 7.$2Ű?o #bp`lO䶵gMc-aӰ^U\虑!D%^iP:l-ٓqЇ;dkZ#εaFgTȣ剛KYO0 *H 0+e#>{UkbKF(4[ob#Ai׽wdx  - -}RWoIg $ATE;h .0'1*.ItZ,&uVbu1+fE:I 4URs-Tg1ƅO6h?4D*D{U:w"m - OT!;@Pq,M݀^P :mLWI8\e!"#``qE],?PzAN,5 hA&a&Fc(_ϛh - 1}9[ "YI#Зj`NUJC!P$N_b5kC?4颻,LapHsm{xLAĂw${#C::'~Ѯ^nЫD}uE4s,2bÈ|ҨUL-ثKVsvnk\a tRl"'WɬOp%~A6W#JGǒ/W.0"OPu>;HHIoOwEr[C7!9ۊÆ000  *H  010Utest.localhost0 261125154941Z 261125174941Z010Utest.localhost0"0  *H 0 - *ey5<~Y/G%DG$wA@g7ęs*j!D\+$XO;a xN˼cI N[vVJͲ-~y\Fiخra,9 b= G@ԢG^I "9>x5Ux+#$]v0{25 - mcEE:%E'lnNR ӕ* PyZ?šۘE4892>FL".+ۡ?;|ҳ00U0test.localhost0  *H  NQ +(@h$3*D>t{429pDWDld%3ӛz\P~ypzs)=H39z<#yͽlb 4 SIc$ûABպ~J0o+j|5hOJpwL#8;W4rQĘPǨ􀅝KINC4cuYAc ԋµQ`@B]1 - yΩ&2100010Utest.localhost0+0 - `HE 1190 *H  1  *H 0 *H  1 261125164941Z0  - `HE 1Kwqi3rYW0# *H  1tj[~C - IH.(/(q0, - `HE 1As8Oz/Jy/EOkbhJd4LOzj/mi1C8=0  *H '8RQ&e  - -&ʸvws"*ᗒ]"\Sw=  - 5 =ϝ#? 8p5=m - H`1Rǥؠ,k0Rk&Ř)b87O,SD"M{pQ= - !(A HZVE=K\Ȯ&_ʙwqsF OTl$fZ#P`ψ[-N_OɮԂe~6]Un I{ >M.ʥ]Y#[({:`%[d2 - 7#gh 2<^* cuJVMa4" - f`dm~-;悝&Nu&&Fؓl$R#.-Qb$v7מ`}tYp\8iЮǁ]M8{L.{г}+p0霪鰠6hpőzP1s5:h|@f p(Gu^,bʓG9\崔= Pv!Ǡ&00[~xi N.T0 - *H=0D1B0@U 9Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA0 261125164941Z 261126164941Z010Utest.localhost0"0  *H 0 - *ey5<~Y/G%DG$wA@g7ęs*j!D\+$XO;a xN˼cI N[vVJͲ-~y\Fiخra,9 b= G@ԢG^I "9>x5Ux+#$]v0{25 - mcEE:%E'lnNR ӕ* PyZ?šۘE4892>FL".+ۡ?;|ҳ00U0U%0++0UdAdz;sL@u:R0U#073OKu`U 0U0test.localhost0 - *H=G0D Vr6畂ȍ-=Љzm<{j 3d[exx3oMzV0j00 - *H=0D1B0@U 9Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA0 261125154939Z 261125174939Z010U decrypter0"0  *H 0 - Ѷjޑʺn!Z&%ko{,8h64وEC}Hp>jNfyM3'FgtuMs}<\yr-HϮaqS['?Kc6{1b{m)MW̜/hQ"eZ [F"8uty8M?Lb*BDjk\gTq$cY/'k-!'fy=DrRKO"*xGVVX0V0Uc֬ѥ7_0U#073OKu`U 0U 0 decrypter0 - *H=H0E -Y65Cv6b;ݨkޮ%~!fCGD2Ї3Papj. 1d0`0I0D1B0@U 9Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA0+0 +2025/10/24 00:33:20 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:20 Starting Smallstep CLI/0000000-dev (linux/arm64) +2025/10/24 00:33:20 Documentation: https://u.step.sm/docs/ca +2025/10/24 00:33:20 Community Discord: https://u.step.sm/discord +2025/10/24 00:33:20 Config file: loaded from token +2025/10/24 00:33:20 The primary server URL is https://127.0.0.1:38669 +2025/10/24 00:33:20 Root certificates are available at https://127.0.0.1:38669/roots.pem +2025/10/24 00:33:20 Additional configured hostnames: [::1], localhost +2025/10/24 00:33:20 X.509 Root Fingerprint: aa712fb90482f855f7fbd35e1672adfb7a5f5d2d85394ad375540811e45e2797 +2025/10/24 00:33:20 Serving HTTPS on [::]:38669 ... +time="2025-10-24T00:33:21+14:00" level=info duration="285.482µs" duration-ns=285482 fields.time="2025-10-24T00:33:21+14:00" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=142fa159-2a54-4cc4-8d9e-714c3ae2e6a6 size=16 status=200 user-agent=step-http-client/1.0 user-id= +time="2025-10-24T00:33:21+14:00" level=info duration="100.08µs" duration-ns=100080 fields.time="2025-10-24T00:33:21+14:00" method=GET name=ca path="/scep/scep/scep/scep?operation=GetCACert&message=test" protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=a1173304-3114-448b-a256-540bd30b3c01 size=1159 status=200 user-agent=Go-http-client/2.0 user-id= + common_test.go:204: 0 *H t0p10  *H V0i00 + *H=0D1B0@U 9Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA0 251023093320Z 251023113320Z010U decrypter0"0  *H 0 + 1̣~w3Lk3O%MR#c4 {Fu*2nJq/mE]Koc{v x f XL%Vh + J϶|b=K É4ka/=CԪ + ytΤ[Ա{#`AÀ 3 wuH >õOMGT2 + zQ+%CB`CHspԪJ[sa],{$c`x|Kĩx,نtsS;pzsi}+>YJ + ܃  + :vw0P)RB{Ѓ5( !2~e9w"z2Ͳ[=)31+]ҐByݡqĊIS+"9o.GM+gݓhæ3L]ޭ@L*Z&Wt*…r/_uA l9A{}X9z_Slh|țZeEvR-G?cP c!ڲ6XC&ki(6˙֩6b@c>?Jwwxa]qGqe˕$1 9>O.@HȬz/g #tths!$6vdX׬H7c|<) yà==Strwl2V7L>^1<X'7 fUsAI<7h($000  *H  010Utest.localhost0 251023093322Z 251023113322Z010Utest.localhost0"0  *H 0 + e4Fm^ri}Ec.=t$^.'B)_VLUw"LةN+PnsoYQLV|8>ٝPcdLx + [3j/O6UwWSLkdapF>o b@h ~D&\ED@Boˍ3oOm#.@kɚF$86k69c[3"m L(O"Gh?b=50.m00U0test.localhost0  *H  .UP + e@A9rihףY$US8:a'G=qא?nh>m.o"NBT\:ճ L$6s,፬'ך:$,7\:(o *^C +time="2025-10-24T00:33:23+14:00" level=info certificate=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 duration=27.407299ms duration-ns=27407299 fields.time="2025-10-24T00:33:23+14:00" issuer="Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA" method=GET name=ca path="/scep/scep/scep/scep?operation=PKIOperation&message=MIIJSgYJKoZIhvcNAQcCoIIJOzCCCTcCAQExCTAHBgUrDgMCGjCCBEoGCSqGSIb3DQEHAaCCBDsEggQ3MIIEMwYJKoZIhvcNAQcDoIIEJDCCBCACAQAxggFjMIIBXwIBADBJMEQxQjBABgNVBAMMOVN0ZXAgRTJFIHwgU0NFUCBEZWNyeXB0ZXIgdy8gVXBzdHJlYW0gQ0FTIEludGVybWVkaWF0ZSBDQQIBATALBgkqhkiG9w0BAQEEggEAZpxdaOCM%2BrVKeq3rEqVDfonL%2FmZExmyT1390vAjaFFD5aP%2B00IuueMcGouWWhLmW7XS%2F%2FOI%2BPbOoS9ogpKzDiTRr8%2Bph4JeGtZuaLxc9Q9SqiY%2BhCvN5vBV0v9wHj86kW8LQ99Sxzf%2FR%2Bnsjwf6XhvaVkB8CYH%2FQDzyYtO22tWi9pvtnbFj0bJnvjTY5gLE8wlse7mCaomikNgmi7%2FudZqthIskrGmiJ0btYww5AekjghjSh4ZP1UymOwlHij6ngslwcBS6jLi%2FJdFS5ewHDcZKDLJbiFtzSAeKYEbYSPPS0NvnX65cl4AMPyjp9yOr68QMXusTsKm2NI%2BqwOfFlhjCCArIGCSqGSIb3DQEHATARBgUrDgMCBwQI2S8%2BQQCc4sOAggKQDgyQuZYzC8G0pXd1vkj07M3bDM%2FMPuUfw7W4k08Qt91NR1TuqTIKk7x6oVHLK%2BoXJYVDQstgt0NI3XNw1KpKWxqUvbpz%2B2EHXSzze7sk5LsfY6BgeB18S9DtxKl4LH8O2YZ%2F23T5%2B3NTO%2Fy7cAOAeh36DnPk5ml90ys%2BWUr2Ct3cgwwWmuUKHQM6q%2Fl2dzCh7r9Q0h%2Fm7ynMyFLrDtFCe%2B380IMbNSiPDCHmMhR%2BZTl3Inoy6c2y3ls9hbn0%2Fyn75DPUMR0rqF3SkI2mBELhlh553aGMcX%2B5xIrGzwD6Sd8O9Z1TAisi5DlvvhEu28JHTbIrZwIW3ZNow6YzTF3U3q3EQEwqWibEwvNXtnQqvhmkwoV%2FinIvEIrgX%2FB1%2FeH%2BhqJByA2Ptmz8f8Y5h0Hb9AGje6T%2FyX1YlTkW%2BXpfho3pGfPxU2yJaAfdF%2B18u7Wj8qi2yJtaB%2Fllx9PC9uyTRen9khV2Ui2Ntkc%2FY6ZQ%2FYXdDPuXY4iEGZWFCPSiEyHO2rI2WARD2iZroGn0KAQ2y5nWqTasoWJAY7qiPj%2FmSneAd9R4YQOGXReHEomw5x1xikeh9XGOvWXiy5X8JK0xuwXpDTm0tj5PLkBIBBbIrHovZwsIGyOymuZ0h%2BkGHnSi8gFolspzIST6NnaSZNnnw1gFFpS1krDXrJM8j%2BlQWi4X%2BHLieFN9g7czzZRd5lrBc5p67T7rSDepY3984Y3MFzwpIMd5w6A9rQGNsxy1lrIRieq4PVPn6LYfust0HnKvtRbo4XfDbPoatpKaMsj5VjdM8j5eMYA8HViJhSc3DP32BWbAVTxqQg2TIyyxoCbfAIIV8RezKkFjXPBKuxnQadI%2Bc6IDQcdJPMCYN85oKCSgggLOMIICyjCCAbKgAwIBAgIBATANBgkqhkiG9w0BAQsFADAZMRcwFQYDVQQDEw50ZXN0LmxvY2FsaG9zdDAeFw0yNTEwMjMwOTMzMjJaFw0yNTEwMjMxMTMzMjJaMBkxFzAVBgNVBAMTDnRlc3QubG9jYWxob3N0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4akBKRlNEbWHW39nqJecqbyaX2p2EVjxS49uBh0ovMA%2B7MeJIZe9NouJ5fTQikAp9NfoYXS3FZMVaDZd7T3kSJMp%2FbYqU7SGZgrUPJuc29ZuFHP%2FUxWfDg%2Bldmdgp%2F%2FkVBj7BbmZP%2BRTHijCluWizNq%2Fy%2B0%2FZW8T6s2guxVd%2BEazVeaU0xrp2Rhh3AGxUYRyT5vrQSHgAa0IMV%2F5mJA9WjLGbQNyn6hRPrXJlxFRECTBvlCb6jLjbDeM28OyNRPsgJtIy5Aa8matQadB0YkODZrseiSNjnt4PT4xmNbwtIzIm3nnAyQTNj5KO1PgiKI9PitR2g%2FYrI9xTWq5zAubQIDAQABox0wGzAZBgNVHREEEjAQgg50ZXN0LmxvY2FsaG9zdDANBgkqhkiG9w0BAQsFAAOCAQEALrVVH5pQiRP9CmWeQEE5cpUWwLtp1GiTvNejWSRVl1Oy6sHfODphJ0eo2D3VErzzcbGT%2BLLXkD%2BYsNtuaBXzzAfnPqasbS74hdAfw2%2FZIpfo%2FAbA2U645L9CVOXgXJs68wUBHdWzjuP9C0wkiLw2c4GqLOGNrCfsGqHi15qk%2FKk6JAQs%2F9w3XDoo9RdvILzMPEL7g5KHtRvEO1S15Mm53TA%2F7SjI%2BVKqKzfy0pSwOS%2Fnn8Q6VjaA0rhIAsKNcr1HpUmbZbo%2FrYTkUlbNkKqkpZCJPOekvtrno74EJjPeUGeMv0E12duP%2B0AGxs8ZYzJbmZKZrAzlY1XPYncAxCy%2FXTGCAgUwggIBAgEBMB4wGTEXMBUGA1UEAxMOdGVzdC5sb2NhbGhvc3QCAQEwBwYFKw4DAhqggcEwEgYKYIZIAYb4RQEJAjEEEwIxOTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yNTEwMjMxMDMzMjJaMCAGCmCGSAGG%2BEUBCQUxEgQQWmt59yabMmhIBoSn06h4jjAjBgkqhkiG9w0BCQQxFgQUKM91GpyMn6LgHBZW3filjlpk7lMwLAYKYIZIAYb4RQEJBzEeExxmbk4xeFkrdnNQRnRoeWdEUVhkSnFRaHJMNzQ9MAsGCSqGSIb3DQEBBQSCAQBH2pBiwfMmKo%2FmxzqHGtAT2T2xAxl7UEsfjptTGXEHcgsS%2FsPjcbjm7cL%2Br2lBw2FhJskwAsYJc6sz2AuIE1YL9B2f3qBOI1s79%2BIH%2FRbrMmK%2BuKBCWKBJh9e%2BBPLlKkuiXw8ehzgiftOGXT8BaLHCV%2F3FsO70%2FsZsPwOAY%2FUOfAhav7J2%2Flhed%2BlvyBnJFIajv3xlIoFp4HgJPZj65wxr5aNd%2FTjRSIrgyRVpGs292dRtibDZisT%2BJvfGmvdSF4XCBKCHbvFpoSx%2FIEfMktI29rrO6ajGDzHS7ZqYI3TgcQFOHHrRoYH8hUSczn6Bdu%2FU347XO7AEGIM%2BKl5%2FqEPd" protocol=HTTP/2.0 public-key="RSA 2048" referer= remote-address=127.0.0.1 request-id=17ef8b92-e674-4979-9041-2d87161b32c9 sans="map[dns:[test.localhost]]" serial=41427592782372507657343144391913707968 size=3141 status=200 subject=test.localhost user-agent=Go-http-client/2.0 user-id= valid-from="2025-10-23T10:33:23Z" valid-to="2025-10-24T10:33:23Z" + common_test.go:309: 0 A *H  20 .1 0+0 *H |x0t *H e0a18040010Utest.localhost0  *H r) ŽJ#Zy8Yv)yoޤJDYs)lZGx%IP sqɬXX8Ab| y~;i `}I + Mqddd/gh98 P~7 / ^ϥae1]<ՇKTP5}}_ζ^>.sI8qfUfS.b4e^{'v4ǫ3lnd+j+Ի$0 *H 0 `He*%ʛ}@#~^!a|<Ƭ3=v6u + rr(QJG)1&UyaAsBϰYrq&tQspzHD~݇ + KљQh l> L4䴩bE.\קE$+Cn + (e2IMW+jƩ%՟2/EyhZH[ҭ7A{t0 4)6Q>NwTby;c*UnQd0(g4Mwp7 jcYP͖%F? @81ߟ̗l|cgJʦKM1[BJPQ? g z:HuB׵GNbPיrOd~qrRCs=vޱu=*0IA.|TD}}jp]ؼ-giT9}fU`<؝YR@%yv`EJ%^ݑ%u/pݭTU#l?{DsH)/CʿѸQZA>HW-3o6Jlo0kkʊ)7)Cun탙u$U@3:ݰ"~N=h#2fpn/d!Η3}ϗXKt + hɡXm xvY&qJ_TVtmۤ1Dz蘳}7UIOrVbQ+R![ Fv1'n-0[Å%00Z*~GmR&>30 + *H=0D1B0@U 9Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA0 251023103323Z 251024103323Z010Utest.localhost0"0  *H 0 + e4Fm^ri}Ec.=t$^.'B)_VLUw"LةN+PnsoYQLV|8>ٝPcdLx + [3j/O6UwWSLkdapF>o b@h ~D&\ED@Boˍ3oOm#.@kɚF$86k69c[3"m L(O"Gh?b=50.m00U0U%0++0U4b ËX ߆0U#0 S + O!%x0U0test.localhost0 + *H=H0E!`Z 5!yX Ԏw&Ƽ/-c T֢ߜ2\%Ir"QsQ7IC:9<0i00 + *H=0D1B0@U 9Step E2E | SCEP Decrypter w/ Upstream CAS Intermediate CA0 251023093320Z 251023113320Z010U decrypter0"0  *H 0 + 1̣~w3Lk3O%MR#c4 {Fu*2nJq/mE]Koc{v x f XL%Vh + J϶|blG%ڈQd9a vԟ?qW! o:KV\ pוH zCdMEGI2g4"j%6XfjrU.ER1bH*9MFƼF`5c`ۡv<@:8V r9o+8م_NY#o.*#4ED ܯ:;*bK - aDhfX0V0Uu730Gdg'7nhaesf0d0U0U00U x*-,7Qc_5(0U#0 x*-,7Qc_5(0 - *H=H0E!\۽XOpi(ZnFm=ۺۜs 3 "lj - hw+EN4y1 - common_test.go:286: 0 : *H  +0 '1 0+0: *H +'0# *H 01S0O09041200U )Step E2E | SCEP Decrypter Intermediate CA0  *H qS"wyR[n _Hp:R.p - Os'ndmoo+PR6{Q;}} }/," uɩC@KIQjA7nt - 6&+YO|:.N B}\W $Hxi۷Q8:K!Ϡ9QSPlv Vb D}'{DYz0 *H 0+ (m147pCđ/*1[yC;ruQg M _=LmOC^NwߡN<ӗ& (W%|0([b0TmOPhKܶxiޛ~EqZ2]{;~pBMw@3t=޽G]ኯ>Rқ:Au,YR ~j'A)HE>/g:S(qf̿IxɕqN:R[)cDiXyOoQQ>ߥUu@ޱ|~a?>urQ: N4c[Zl,BwbL1IA䦌#cĪ@OR-z>㇃i/TH F)vwgrT'!0(}?AfҭZ - (HtUzEәPBP޽00U0test.localhost0  *H  yNjfqHi➁ \ ;lp79{HmLcUqIz7)X]̰:K(+p.;3nQPꜧ#xjEOh[$Pб@}*ȵs34nC$ɳޓ:h@}=BxhX@\Oz<}Q tTz>> fBN[;?jj{-![ R22gwh 100010Utest.localhost0+0 - `HE 1190 *H  1  *H 0 *H  1 261125164943Z0  - `HE 1P7{8rTd0# *H  1.Ƈ[c_s}40, - `HE 1pvU/rj0whoWT5cdKXVRlBHdzu4E=0  *H xoIq{:%V6چ6=SfUI - quHndPpQЏDV!ޒ\SdAF\Юe6ƪ ꀰ Ϋ@0LdH5QIaKQJu&2) /5OMޙ#s%n'eHdu ^_c ʌ0yDho&5p.dhXw9:Δczd3;h&2fGm5LX -time="2026-11-25T04:49:43-12:00" level=info certificate="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" duration=9.37728ms duration-ns=9377280 fields.time="2026-11-25T04:49:43-12:00" issuer="Step E2E | SCEP Decrypter Intermediate CA" method=GET name=ca path="/scep/scep/scep/scep?operation=PKIOperation&message=MIIJOgYJKoZIhvcNAQcCoIIJKzCCCScCAQExCTAHBgUrDgMCGjCCBDoGCSqGSIb3DQEHAaCCBCsEggQnMIIEIwYJKoZIhvcNAQcDoIIEFDCCBBACAQAxggFTMIIBTwIBADA5MDQxMjAwBgNVBAMMKVN0ZXAgRTJFIHwgU0NFUCBEZWNyeXB0ZXIgSW50ZXJtZWRpYXRlIENBAgEBMAsGCSqGSIb3DQEBAQSCAQCLtxj9cbGI3%2BpTIo0Td5N5UlvCAeq7wm4MX57wycNIoakIcJ%2F7OtzCFf1S%2FS5wqKuh2eMXk7oKFU9zliduZJxtrQ4ClW%2FIb%2FG12Cup75z3UKKWAIQen8tSyjZ7UTt9fen7IH0vxCwiDXX%2F%2BsmpCEOxQEtJUWpBracXqQQ31W72%2F610DaPJCoqMNoG986TyJivl%2FaZZkQ7q%2FoEUG8LD2098Oi61ThbNDYPoQrKFvH1cVxQMJEi4eKWmadu3gPpRvjiuwzq10xwXxkuqIc%2BgGTlRU6u%2FlrwEUGzqtnbpkxipDL3979QIVo5i%2FgnMRN7tD8DrfSf7qNDae6j%2BRB5Z4XqvMIICsgYJKoZIhvcNAQcBMBEGBSsOAwIHBAjrDOP195rjBICCApAop%2FaCbTGKhvanNMX3HjeNcEPEkS%2BaH7MqMVu9g3ntQztyHP51UZFnCxTvkE2x3uYLxupfPRLgTOcZHfXx%2B23VT8DN8gND9bn%2BgV5OE7l3At%2Bh8vvJGOhOlzzTlx8mwAzLKOSbVyWsi6mtyHwwyChbYo38MNbpl1S6bd5PUBiu7WhL3LZ4ad%2Fem35F53G%2BWvbvMl2b0ns7gKN%2BcELQH00d0XcTQJQz09H3dLg9n969R4jT57DzXcPhiq8%2B99JSGdKbHDreQd916%2BoslVmTEFLoIH5q2ifiQSm2SEXMBBOP5rY%2B3i%2BumGfpmTqEU9sDwxP%2B6Bzj3yhxZq%2FMv0n7eAMXvQ72ucmVsLAIcU67%2Buo64lJbk9kpyTz4VbF9zN4pGghGpxMwOAgVK3ekKADcvGvvxwGOe60CjMg1%2FI7qWdecRWNr8RifdJOedIrrYyhV62VD4p%2BHSZS2%2FRRM%2FVfodWKLHzXhZqGDJ0qm18TuJCEqDN5Cr74bUJ3U92nth7MznOU9sfGy86O2CD5jRIdpWBiTx%2BMe9awVmdnH7XnyTwNvUVE%2B36VVjJh1QPDesXzTf4R%2BYfc%2FPoR1gHJRtJuvrB06wQ3giOhOPFecA34noJPdylIGel74LRecGQ10UMfqc2r5qPMNwJ9kfPzTTchsDEPiJfhWrFK7c4EmvusBf3atnb3KWan4%2FohQvP4UW4T4KYm%2FBoWDKQVKHa7a%2BbCuCMGxL4%2FOBS4Ws57GNf8XZdD%2B6TocfRnnHwYVD6Tsb9dZXq%2BgE%2BMgrkvHpxVlS%2FBYvMV%2FEvdN2SBPnW3QrYQZ6ODuFlt0R00jinlbmzjgbRAksU3orVhoj6yftKS%2FICpBy%2Fx7z%2B2A%2B65nwj%2BCIpvRArBX0qCCAs4wggLKMIIBsqADAgECAgEBMA0GCSqGSIb3DQEBCwUAMBkxFzAVBgNVBAMTDnRlc3QubG9jYWxob3N0MB4XDTI2MTEyNTE1NDk0M1oXDTI2MTEyNTE3NDk0M1owGTEXMBUGA1UEAxMOdGVzdC5sb2NhbGhvc3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk4suD7rftbuc4knhSLIaWS8k6%2FoQ%2BNK2JY77mjxTN21taHmws8UJ3Yky%2FrKvQPEfUoGdNAQX%2FdLZzMPQyzVewaPsej0yFMNVaXqj2%2BwbxNuzDBzl%2BYiNy35gAU8mYsnz2P74QDs658iBAACmfGo%2Fq3TA9Y%2B9dICW1aKrAVqwpv60%2BqJEx8ZKuD4%2B4ukmfQZnkpoy0I6OGY8Sq6UAFs08YUuqLBgOMLZAQrXr48T7jh4Npn4ISgS%2BEB9njVEjX7JALi0aJKZG0dp93xmdyVCfWIbMw8eSW9h4offoIP7oWQWbR0q1aFgrBrLPT5ihIg3RVehRFpNOZ4YDvUELfUN69AgMBAAGjHTAbMBkGA1UdEQQSMBCCDnRlc3QubG9jYWxob3N0MA0GCSqGSIb3DQEBCwUAA4IBAQB50MeLxBhmFoRxwRNIu7Cv7vZp%2FKgS7uKegeW7GZSdC1wMIOc7sfCXA5f0bBnwcDfiOXu6SG2gTI7%2BY1VxSbh6NykYWKhdzLDr8TocS%2FMog5gD5itwlL6iAS47tTOkqG5RUOqcpyOaeGpFjE%2F%2FaH9bhNr8siSQpVDQsUCovv19KsHItZIHrnP3M%2F00H25DJI%2FHBqvJs5vek74AOmidQIV9PZxCg%2B949WjQWOyoQFyRGk%2BrevK39%2F4VPMLBfY9R1NUNdKjxjLFUej7wPuQCwQmfZrJCqwdOiVs7P%2B20qZftamoS93u0LRAEIVsJ595SMvG0kDK3Z%2FN3tWi3jqnZycMNMYICBTCCAgECAQEwHjAZMRcwFQYDVQQDEw50ZXN0LmxvY2FsaG9zdAIBATAHBgUrDgMCGqCBwTASBgpghkgBhvhFAQkCMQQTAjE5MBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTI2MTEyNTE2NDk0M1owIAYKYIZIAYb4RQEJBTESBBBQN7Z78TioclSErmSsho0CMCMGCSqGSIb3DQEJBDEWBBTxLsaHW2Nfh6dz47YOAAJ9NLWJ2zAsBgpghkgBhvhFAQkHMR4THHB2VS9yajB3aG9XVDVjZEtYVlJsQkhkenU0RT0wCwYJKoZIhvcNAQEFBIIBAHhvSdPeynF70jrDD48lVo82wNqG9DaPmD1T%2Fbgb8GYX6VXs%2F0kKfw7gEujriHF1SND0bmSMUOdwulGn0I9ErVbE1SHekvVc11NkE0FGksf6Er5cphSz0K5lNhqOHPj0o5%2FGqpwM5OqAsAzOq%2BhAMEzbZOPZSBk1UdxJxGHnSwNRj8DFSqWNuZK9dc3SACbxzTKCnB2pKQ0XL6kBxQfyhzVPTcremSOLcyVuJxwDpprXFGWWSGSJdSDgpV73XxsEYwzKjLieMHlE8mhvjSY1cL%2FaLhHzvolkaNtYxQh39IOh8Tk6kc6UY3rbZDPBk%2Bs7f2gmMmZHbTXcTPcU29NY%2Bqk%3D" protocol=HTTP/2.0 provisioner=scep public-key="RSA 2048" referer= remote-address=127.0.0.1 request-id=b83b0f3e-7a54-48a5-aa9c-5addb4c09cc2 sans="map[dns:[test.localhost]]" serial=264404390443336470955327105302739891506 size=3143 status=200 subject=test.localhost user-agent=Go-http-client/2.0 user-id= valid-from="2026-11-25T16:48:43Z" valid-to="2026-11-26T16:49:43Z" - common_test.go:309: 0 C *H  40 01 0+0 *H 0 *H u0q18040010Utest.localhost0  *H 8]U <Ȩ#Lѷ,U$$ET4t̳yVꯕOvC}L$hap eHnu"]w'\)3&֡7G>ZQg ⭃wz3yґW+qF&iUgljbgr.TLgFɱS~Oh~؇rH r[M - 69[Wyxp.2SqE0. *H 0 `He*)]ahʞ9Lmh|ݮOob&\7\WF:+`>ORN 7 `?6SӲkfh\L53{?sr54KDX65[`_t^!o7ê4X# \)WA%%͝-%9~ - =HY93#1 l<+ !NIй=ŧų=j+ޠ0sL;b^?.Ml`CƱ G¢-KO:to2!IZsLbR /&` pnAPkϋİg[dܳﳸ (JH,[b1SsLo\9 T˘P\hit~g&${$ :rof̉IZP}ah;ICLcuIgۮCT1ˏNb֝&jN\4\!prm& H'aȡ!4W lXAl ɖ9IQ'00jnidp520 - *H=041200U )Step E2E | SCEP Decrypter Intermediate CA0 261125164843Z 261126164943Z010Utest.localhost0"0  *H 0 - ˃n8xR,K:>4c[Zl,BwbL1IA䦌#cĪ@OR-z>㇃i/TH F)vwgrT'!0(}?AfҭZ - (HtUzEәPBP޽00U0U%0++0U!r8*gй0U#0 x*-,7Qc_5(0U0test.localhost0 +d(@ 0  +2025/10/24 00:33:26 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:26 Starting Smallstep CLI/0000000-dev (linux/arm64) +2025/10/24 00:33:26 Documentation: https://u.step.sm/docs/ca +2025/10/24 00:33:26 Community Discord: https://u.step.sm/discord +2025/10/24 00:33:26 Config file: loaded from token +2025/10/24 00:33:26 The primary server URL is https://127.0.0.1:41217 +2025/10/24 00:33:26 Root certificates are available at https://127.0.0.1:41217/roots.pem +2025/10/24 00:33:26 Additional configured hostnames: [::1], localhost +2025/10/24 00:33:26 X.509 Root Fingerprint: 04de82049bb530bff8020d4d3338a36147ad742e5b46d5ff085fc1c7eae44ca3 +2025/10/24 00:33:26 Serving HTTPS on [::]:41217 ... +time="2025-10-24T00:33:27+14:00" level=info duration="25.04µs" duration-ns=25040 fields.time="2025-10-24T00:33:27+14:00" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=b27c1324-ca94-427b-8219-fcd09138400e size=16 status=200 user-agent=step-http-client/1.0 user-id= +time="2025-10-24T00:33:27+14:00" level=info duration="85.4µs" duration-ns=85400 fields.time="2025-10-24T00:33:27+14:00" method=GET name=ca path="/scep/scep/scep/scep?operation=GetCACert&message=test" protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=5b093812-d668-4d0a-bddc-adcd822874b7 size=1111 status=200 user-agent=Go-http-client/2.0 user-id= + common_test.go:204: 0S *H D0@10  *H &0Z00 + *H=041200U )Step E2E | SCEP Decrypter Intermediate CA0 251023093326Z 251023113326Z010U decrypter0"0  *H 0 + ,8b t $:HsօcVC7C#ݢdP[tQ(pw&ix#ΔX q$% ԉ o?NZߒ躺](F,=$kr.4IOP ip'O6!:'i۰Y E. % + j#A'R5dOiooYJt0adŶ槜k OZRvSӡRyjX0V0U~qR½g1[@r0U#0,Յ*)g\J0U 0 decrypter0 + *H=H0E {KOJ3]5Q}fc1EKf0d0U0U00U,Յ*)g\J0U#0,Յ*)g\J0 + *H=H0E _guX&c?.ˌ4Ԛ*!àwŨY\o L  ,N1 + common_test.go:286: 0 : *H  +0 '1 0+0: *H +'0# *H 01S0O09041200U )Step E2E | SCEP Decrypter Intermediate CA0  *H |l tRoa<`2@G_ s-T3Y@d^~FMW#]qP"\qjͶIH%VtH\ylѝPa`Sx`y2Rd4v&>ml/_/ xXk.O5j@?&9CKuɹ ~~g=eWo ?>lш3E? +д+\ej~,4y)B0 *H 0+dj®~83΁ jWG$:J2%~8 4}*f`.:[pf=(ὣue׳ĨDwpv5]j0бtW/6ع]0D)Ӟm{øjQ[ m# Rb4mFNgai PS&2K0˫.)Rd"T7i$ʆG+?ӁEH4_|GKU1klஒ*@Ì%V OS Ƿwn ǃ:gqκ_vk>Aa| + #[;Oh6aMpTrN8b>H3{N |?gh $ty s_VLFCvWon|2(T*MTaн`GX3dJ;{9;J:2]8iArDtN + T[5|C<8_[xz6V!=&!aJ}nGŜgQ2r@B + r2 e&;+hK$M8.#Q"i/  :'M/M@ hmt=:yNG'X6bE>l[Ԭ!VEvR,8a + =!Hjp h+000  *H  010Utest.localhost0 251023093327Z 251023113327Z010Utest.localhost0"0  *H 0 + Qy$Zak'NNpj!?licO3n + 8-54nՙ9K7TQbd:Mj5v/ڌl=gA{X`fTyl9:K՝C$`S/qg[9b%X|Yu@j,X$OlFS`H}  >atf ի00U0test.localhost0  *H  WvD:NfъT4aZLR + CEq' ew$6dWI8A"F + $}j&tqIuT=B1^-_3f[;>ԀŻϧ+wh|߫E:9zNE T҆t3th DB$O|!1dp0D=E ,B #B}Kj?3J .r>Ī + ҹyϫ<E0=(ܷ#ρnV{}'r?f\ R.=wLdeUke + _R}}k|dt.'LU\unS\-ŹswnE,:!3fg!]7)DJk +time="2025-10-24T00:33:28+14:00" level=info certificate="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" duration=131.533498ms duration-ns=131533498 fields.time="2025-10-24T00:33:27+14:00" issuer="Step E2E | SCEP Decrypter Intermediate CA" method=GET name=ca path="/scep/scep/scep/scep?operation=PKIOperation&message=MIIJOgYJKoZIhvcNAQcCoIIJKzCCCScCAQExCTAHBgUrDgMCGjCCBDoGCSqGSIb3DQEHAaCCBCsEggQnMIIEIwYJKoZIhvcNAQcDoIIEFDCCBBACAQAxggFTMIIBTwIBADA5MDQxMjAwBgNVBAMMKVN0ZXAgRTJFIHwgU0NFUCBEZWNyeXB0ZXIgSW50ZXJtZWRpYXRlIENBAgEBMAsGCSqGSIb3DQEBAQSCAQB8q6Oq6OKuz2yTlLfOxgl0Um9h3DxgMo0D1u%2FB4qzjQEfun8vq3F8LcxCHLa3TVImJM8VZEI5AZF6kEaV%2BRk2F9LhXI8hdAXHtglDfIt38XHFqlJHTzbaRSdNIJVZ0SLfKAlx5bNGdUNXH%2F2HCG2CNU3gXnWB5MlJkB6I0diaAwPQ%2BnG1sL%2FOUEfMc7%2FPKXy8JFXiiELdY4muxLqBPNZDRakA%2FJt3%2FuvEWyBs5Q0t1scm5DH6ifme3PfdlopdXbw33P%2F2rqv649aPU7j4Ov2yP0YjX1tkzpONFP4UL5ewr0LS6lO8HK8%2FmhlzDZWocoH4srga%2BNHkcrLjjlPQpQsDWMIICsgYJKoZIhvcNAQcBMBEGBSsOAwIHBAhkB%2FvigBAXaoCCApDCrn6i2ji6%2BBszzoEgiGrlVxhHuKIaE8IkmAOThjpKMuAlFKl%2BpTjq7BAbDZc0fSpmYC6NOpO2ucVb6nBmuNXwPeXQxSiA4b2jlPF1kOax6GWUstezEaWkxKhEd7iccMJ2hTWl2NTsXWrUMB2G0LF0qlcvNu672LldMNhE%2B9TXKdOegctte4vDuMnLagRRs9RbCcHTbYLdI7gM01LU8GKnNG3iD89GTmeGrGFpC1Ca5lP76o%2Fd8f2gJpoySzDLqy4pk5N%2FxlJkIoBUN2mPJBjKhke%2FK6c%2F04FFF6BINF985pYWrg9HFK1LVaLNzjFrbOCukrgqQMOMJaQWFlbklAUJGE%2FJ7hqGhIbxklMVC6HHt%2Fbzj3ecy24N78LHgzpncbfOul92a%2Bw%2BEUFhsnwKI1u5mKI7T2g2YQVNcKFUj7FyD6epTjhiPhS2SLMze06JxA29snwHhD8DqPHWZ2geDCR0rPmqv955yQtz%2FV%2Bl61b3TEbzFar%2BpUPqGOx2V9Vv%2Bp3axcdufDIoVCqk5tdNnLtUr8oChmHQvc4GYEdY3cczZBCGStc7e8gdyzk7uoNKGtw67TJd%2BeuNOOFpQXLjRKLodE4K38TJVNP3WzV8Q64PPDjaX8TX5Ft4jrefeuA2Vq6eiyGFPSa6GiHLGu9hkkody33M%2BL8GFW6ER8Wc%2FGf9HdNRMqRy7EBCs9TzxQpyMgtliyb0OxcraEu1JE3hOC7%2BsiNRIqyYaS%2ByCx0LugfjOoAnTa8v9NpNzfIDlEDLDQusaG10PfYaOpodmI8AHu15TrHUwkexJ1g2tWJF57g%2BpmyKW9SsIaXYVkX79KfCdlL0Evjh2Sw4hGGH3Ao9j7MhSOvYHJxqcO7tyPUNpMxoK6CCAs4wggLKMIIBsqADAgECAgEBMA0GCSqGSIb3DQEBCwUAMBkxFzAVBgNVBAMTDnRlc3QubG9jYWxob3N0MB4XDTI1MTAyMzA5MzMyN1oXDTI1MTAyMzExMzMyN1owGTEXMBUGA1UEAxMOdGVzdC5sb2NhbGhvc3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt%2FlE85uJ0ZATSNhM4YaACqVcePnnbJAhaEWHCa7vQB%2BEnTh1O%2FnADGmohP5bziRdspGmIgmPUyk%2BuM24KqxA4oZzpLZo1NIsBmaG8zOOK826Zz8fh1Zk5SwM3VNUQo9RRGbhiGo4fwmTmOsJNFxxqNZ7V%2B3YvGrLajBKHB2w9Z0ESGdF7WGCkZgRUee%2BB3MRslIv4h%2BoOOd8COksHs9WdQ8YkYP1TnB3H9LKVL3EcBQAOBGdbuRvjsubQ7xA5YiX12%2FTMWHz6iVl1krJAEGos3VgPJOZPtY2EbEZTYPGBsftI7H3wCRAgPqCRje9hhJ74ldbjdO6U3MtmkX8Mo9WrAgMBAAGjHTAbMBkGA1UdEQQSMBCCDnRlc3QubG9jYWxob3N0MA0GCSqGSIb3DQEBCwUAA4IBAQCEA1d2RDpO2eTzoPDDZtGKVPmxt5PrwjRh5lqIGEyKv6nBUoMKQ8GkAUUepgea4cETunEnhn%2FMDdcfvcxlq%2BZ3sCQ2ZPUekRlXmZvuScCMqvc4v0EVIo4Zoa9GCiSug%2BR9auomdKlxykl19PVUPZ4eqRz%2Bs0Ixul4tX5AzphienOKN1hCX8fdmW88QOz7UgJurxbvPp7wfKxisF4h3aHyk36uCkUU6OZB6TkW%2FDb21os5U0oYSdNXCM3Tg9uCqaAlE20IkT8jBBnzlITxpglW8svPUt%2FLy1k%2BPT8PgVKLE0yiCkKkDYrJkf2uBXT9WTCIlDKpxiO2dX%2B14kAXui6LlMYICBTCCAgECAQEwHjAZMRcwFQYDVQQDEw50ZXN0LmxvY2FsaG9zdAIBATAHBgUrDgMCGqCBwTASBgpghkgBhvhFAQkCMQQTAjE5MBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTI1MTAyMzEwMzMyN1owIAYKYIZIAYb4RQEJBTESBBABku2%2FBhVNs1%2FZKN%2BpQiFxMCMGCSqGSIb3DQEJBDEWBBS67VUwIciE0iaqMlEplO4shq8AgTAsBgpghkgBhvhFAQkHMR4THDYwUDIzbkxWRHIwc21vb0c4bzhvbE9EeGUydz0wCwYJKoZIhvcNAQEFBIIBAKpHgUsSFuVFgWNQahW%2FSrg8t0UzLK1aaIm0N8EIpmELAm1lDgubppKN4R8%2BlDEU%2FGTvnbUDhvpw1sgwROk9RcYg98YsyUKnE4EfICPeQrJ9S7vpaj%2FpEJoz8UqT8gmioC7BmHLRPsSqCtK5rnmns%2FzPq7ehPBtFgDDNEj3XKNy3iyPPgQZu%2BKG5Vnt9J%2Fjmcj%2FLHWYVXA2OUi4933dMsqOsG2RlVWtlGArEX1J9q33ua%2ByFfPtkdC4n6ExVnFx1uOfXbvJTjFwGAC3Fuatzd8du10UsGhw6GSE82HQ6rY5Qjkma9ucVjO6iJ3ZLPjNmZyFdDvY3uSkORO5Ka%2B6oxuk%3D" protocol=HTTP/2.0 provisioner=scep public-key="RSA 2048" referer= remote-address=127.0.0.1 request-id=4ea79909-e82d-4e7d-871b-060d63891f67 sans="map[dns:[test.localhost]]" serial=180231162448727744353231474290414132944 size=3143 status=200 subject=test.localhost user-agent=Go-http-client/2.0 user-id= valid-from="2025-10-23T10:32:27Z" valid-to="2025-10-24T10:33:27Z" + common_test.go:309: 0 C *H  40 01 0+0 *H 0 *H u0q18040010Utest.localhost0  *H WmGéJ;!؝,u [1;:vn4S?}nRlm + +;Xɹiվ$pDu/q /xN,Z뇅E=`8 Xձ&ήחA.p֍dj]99_ RAn= ny$iCP͢.jXd ؍}1FRv_l SfO҃P}ܪ+M)`\e|hA}p x7n6dn0. *H 0 `He*Fa_v &VTpa&dd(Gz7z慓~КY; ?j\$\\`|TO!@Ҏ1ŭ$Y@˴40.\.V?%Y&;у]RZb_Vӟ AwY&mNe%[B~2[}Ĕ /E]挦u5q%Wj>F=rŌ + g & + xّuIDr ,܅^4^MsgԁǺj̈́U\m.!Xs(D>u|E!cK[~%%]k4j_B9V)ï z0Y.R༰?¨ ʹ젪6Üg:i*w LJGp.䟧gQ >+ѿU*$^)gB=&F+ + J9k:xīO+Tۅ% Nl-6#0L.wPf"1@-"+CSR{蹞 + s:fH@j@U|$NP1q!1+Ԉ$kOClW:ΔsJL+e1"q'M$J t=/)`Ы73* ՋJ'00jB_UZ>Y0 + *H=041200U )Step E2E | SCEP Decrypter Intermediate CA0 251023103227Z 251024103327Z010Utest.localhost0"0  *H 0 + Qy$Zak'NNpj!?licO3n + 8-54nՙ9K7TQbd:Mj5v/ڌl=gA{X`fTyl9:K՝C$`S/qg[9b%X|Yu@j,X$OlFS`H}  >atf ի00U0U%0++0U)#2J~$tHu0U#0,Յ*)g\J0U0test.localhost0 +d(@ 0  scep0 - *H=H0E iDQ! 2\]t'__:YGm!V!\JשRgϘ>G yW*HZ0[00 - *H=041200U )Step E2E | SCEP Decrypter Intermediate CA0 261125154942Z 261125174942Z010U decrypter0"0  *H 0 - ͽXux_M - 3hΞMb% 3k>lG%ڈQd9a vԟ?qW! o:KV\ pוH zCdMEGI2g4"j%6XfjrU.ER1bH*9MFƼF`5c`ۡv<@:8V r9o+8م_NY#o.*#4ED ܯ:;*bK - aDhfX0V0Uu730Gdg'B[䘔(J43)}y&%pX*CuΆ?L_~,vELǕrmހf#y"Cf ---- PASS: TestIssuesCertificateUsingSCEPWithDecrypter (2.75s) + `HE 100 *H  1  *H 0 *H  1 251023103327Z0  + `HE 1M_(ߩB!q0  + `HE 1M_(ߩB!q0# *H  1sxC"JW v0, + `HE 160P23nLVDr0smooG8o8olODxe2w=0  *H tYO|?" kb )HIchwuìzx`.CGRj_̠mNÄMWHݎ;9=s+bm&EئJx9`- ?!nڈ۳4B4[ҁAR|{ ;I;GqAz<85@ܢU 7Step E2E | SCEP Regular w/ Upstream CAS Intermediate CA0"0  *H 0 - ™hMCE}]*RBڴn[rC - 'γ#rS7{DbehaBq7Jp=Yc]w_謬W@'J+Z.bw2Dk{c!QO3h^h% bTVVy碬VAx7}koLu'4@߼0ўSgdELL85찓b|n%F?x+!R-e+`OtFetosjC3Q!C;lO _`Zh=t]uowQFE`^<]G (H - common_test.go:286: 0 O *H  @0 <1 0+0O *H @<08 *H )0%1h0d0N0:1806U /Step E2E | SCEP Regular w/ Upstream CAS Root CA)N V8Z0  *H 7;Tȥ.DAMy+aRh6m)IK'mH n;Iq7-gj9qlWuɂold;iפ:̺;GFFz5; G~F#$Q=ÏM`* - Wc D0^ ;oE1RҔ7ޒ4ܫm:#:6on~y 6Ύ O)< $֚ ;p: 0 *H 0+QE݀ qr@xQbo;g|Qn/><0N`jyHS?TX6X9M1URƲ žKU[ő8aNjt >h3p4 m2 (. ׀3WX+U[AV¼9U_4 - < $l$sJ ^!NGek#CS)Mk'f?€M_yv|oߏ`6 - t7˪!TVO>kwc/Џ1Ec?R"ʎ7KL/ P!ıR%~@^/lO)] ?~sMI";Qεp[KsOKJ(fDBts$kq5MD#m{)]S>(OmIշiA<*axnym23a HPkJYOgʒ00U0test.localhost0  *H  vE>y咕hDV/HT-($U,2p Ral\ݰt0?Ď/Y5+RFW- i[ MPJ$ơҳH8%evjк}cįtAbcSv;eL,1w،Eu7ro(gNÓFN#ʂfo)sP'CrɕWֈ@5yP'ۿs-ɾбKa100010Utest.localhost0+0 - `HE 1190 *H  1  *H 0 *H  1 261125164946Z0  - `HE 1 - HGn[I1?0# *H  1螺BFgPFk=0, - `HE 190TMVhr0E3mssu2nR09wCnUs2yU=0  *H [_K94j2c 6<ӿq >hf(C - Tu2Y/> ΥMS Иe3"u"-Fӄk5 pҐfEӨWb. 0z$'82qZ@#aQ|0 LqYƃnK'^jVWhV܀6FވgRUzA,!Hp - sFs(Tx4P - 4U 7Step E2E | SCEP Regular w/ Upstream CAS Intermediate CA0"0  *H 0 + d(Cz90d՗i"aG}]aA!fU"qʰ|<ǧ|u$ۦA +-przDɤ"Q(X$,9I'cxfV_ sUŜh8`!dIT%p m$2|ffO|HjLAk$d0tkhD+4kU i>B@KJ{fUWfP{J%&l'Qa @wi0wf0d0U0U00U&)s/o<(bP10U#0&)s/o<(bP10  *H  !{A(Whي "JLߠfRjNxb ʖcB)@8a;L=SwbvVM(|RnjH iClV+~GxUD6@ְNa0).;X*5]Zzț + Vxp?o@7V@.ҷx@[h#^'qyjFsMm[՛IWKRr#cvʼ-/!Yuv;EmEv=})jY@=cv\8IйL#w>LC n8xYx}0/0{xq,[h>*'JP46LÅצּ, 2:GQķSv + 0 *H 0+$΀6ZKi7V~iFQK*3C!e^"~m96gȝuӼHIDyXXٵKQL!K|dW8^blS(yvVڰ&ñ˙)rGPXʜ H#QHS"woh2<.??(3)%E$̿#?ҿf1߾S]6ߨ_;%RTqd(6MP">mŢvޞ1Exn&)v ёYU~"ns{a9c000  *H  010Utest.localhost0 251023093335Z 251023113335Z010Utest.localhost0"0  *H 0 + ڙ~u+ + )F|%ڀ S݀uGޟ %˜Ma %Q!wHCWӬ;~)q\`tZo^\\t-f ~)o{T+"}zC6TW3#Y6Gm$x=Gp=% f"/@ڸ0&[㇈NN я6^]y6Sfא/MSUme+I^|3\NcV"%J :t7o9 1G@gQg[ . + M߭aݩ2}p{g 6_Cz100010Utest.localhost0+0 + `HE 1190 *H  1  *H 0 *H  1 251023103335Z0  + `HE 1ӛL g12Mf0# *H  1 Pkޘ]-u0, + `HE 1tfLY5uEaMK0d5l9aysino6nXqVY=0  *H } 0gFhx%VV1~ΰIYaU*(鎂W!QM0]Vֆ esϭ&ģ{yfkO)e)üϐkY:$Vzט2qaùc6BT$\+? A&: T ι#t go׳VhXXIK1s; :a{'.4n}1%;VΞwQKpwojT+ - +time="2025-10-24T00:33:35+14:00" level=error duration="451.723µs" duration-ns=451723 error="scep get request failed: failed selecting decrypter: provisioner \"scep\" does not have a default decrypter available" fields.time="2025-10-24T00:33:35+14:00" method=GET name=ca path="/scep/scep/scep/scep?operation=PKIOperation&message=MIIJTwYJKoZIhvcNAQcCoIIJQDCCCTwCAQExCTAHBgUrDgMCGjCCBE8GCSqGSIb3DQEHAaCCBEAEggQ8MIIEOAYJKoZIhvcNAQcDoIIEKTCCBCUCAQAxggFoMIIBZAIBADBOMDoxODA2BgNVBAMML1N0ZXAgRTJFIHwgU0NFUCBSZWd1bGFyIHcvIFVwc3RyZWFtIENBUyBSb290IENBAhB%2FrGigDGBud2YY6fmjWjRiMAsGCSqGSIb3DQEBAQSCAQAeFvTzqzdMWg9lFSInJNwjgOIEzKyuScYQFw53jVYdoPfWpggPQRu7zHn%2BAxDsOurm8DJH2fkwBVfBulx3YU6NZ%2Fq9FnNqPeHB%2FEAGw%2BH7KTO%2FZoBRM6z24XY265FHnIXwz3M%2BcoojY%2F52yrwZLS8h5n%2FcWaqxdaaSE%2FR2sLA79xFF7v3hbY1F8HY9pn2yKR5qWQKos4dAPWN2xlw4EUm60LlMI6THdz765rARTEMDCcZuOHgUqll4Hn25MM0v%2BzB7BpSteINxLFto%2BD4qJwdK3VDmNJwWstQBkzb3hK5Mw4XO762GLLMICYkQMjoXivJHURvEt1PhCHb3ChDRzhAfMIICsgYJKoZIhvcNAQcBMBEGBSsOAwIHBAgd%2BSSbxO8OzoCCApB%2Fy8MW7TZa8EuZaTfAVul%2BaUZRS%2BgquInNM0MWAYMhZcBe3CKyyPF%2Bbf6HOe2z6jZnyJ2yEBd107wPgAHaCEgAuH8T5uUeGUlEeYnCgf%2B7WFjJ2bVLUUy8pvHXB58huh3smkt8ZFc8aSQzeAcle8ErXkZW22YeXxANJ11qSYJZqzP3gFjsqIKdzigTFwDXymN3N0L3e9HddxW9T5CpZ9HUa5k15q0Ds3alepvgDOvDP%2B7qLCPVG0TL0z9JvBJKpLATx9GJBTrq5jI2iaIDnIidfBxkBycwX38i0B8H0tx2x%2FOHvI1GMs34ZXIhQn4%2FV0xVUKvVgIbozPx8zS5i2Aa5nSzK8nUD5hOA7YjV1sXUTg4jS0xzFTh6ger9kH4L0r5JAd7tEsl9KXlAU%2BS31DZUPos4XuyyA4X7CKX5YmxTKAF5knaIVtqwn48mj9n9v8Oxy5kpcqdHEVBY7Mqc9yCZ%2Bki8mYWcI1H%2BSFMOydUEFCJ35chvCMH23Bmeg9doMhSiraL%2FPJzq0M4uP4aSPygzKdgfJcLBRSQQmcHE5fe5zL%2BpI8Mc9AQ%2F0r%2BKZjHM377QzVMSrl0236ioyQFfO9sGEp8lUvP7VByzcWTEKDapTdpQ5yI%2BPHahx63zVzNnOJbN%2BycBP9UiwhDUDsmJdjn7QEKcrYRJvnS%2Br%2FgpHukuWedVy7oqNX2sNyqbj%2F%2FXR3pdCq5wETC%2BJ0w5jra2CFUp9vypwx8KktrE%2FU1csXoFPVqnglybuBrYPAh6374Gt1%2Fm%2FuvRpiBN6eW49ibyhAstAumd086IzaEJGrdAPm0GxaK9os8amnbenjEeRR54bp3nutQmKXbFDQ7d0ZGdWVWwwn6YIm6Pc3thOdz6mgKMY6CCAs4wggLKMIIBsqADAgECAgEBMA0GCSqGSIb3DQEBCwUAMBkxFzAVBgNVBAMTDnRlc3QubG9jYWxob3N0MB4XDTI1MTAyMzA5MzMzNVoXDTI1MTAyMzExMzMzNVowGTEXMBUGA1UEAxMOdGVzdC5sb2NhbGhvc3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDamdB%2BgOnh4HWJKwop1EaWpHwl2oCSDh37whoTC73N%2FB2IU63dgLEasXVHu5MDpn%2Fen5iJAyATxdTVJe%2FCmB3VTWGcGA0lUechFHdI5O1DmVfZ8KgH49Os2%2FrwOxTaf6x%2BKXG2o6qcXGB0Wq%2Br2uvEb%2B1e%2BFzaXMp057kaPHgPEGmoYc4EKdHUPq0Y%2BC1mIH77jN%2FDKQC%2Bp42T2m%2BeewhU%2FoegKyJ9eon8Q5GtzfKPvjaMsMEXEgfpllRXMyPlWYk2R8Nt7CQIeLgTPZcf9PbZR7BwPSWS3PvNDTxZqvVR0ql5Kv0vzL%2BFyuUd66lAIJM7mlfPo0E8xdRz0M7H4cCPAgMBAAGjHTAbMBkGA1UdEQQSMBCCDnRlc3QubG9jYWxob3N0MA0GCSqGSIb3DQEBCwUAA4IBAQBfO%2B8RQj0VSqAm25rnaw6KB%2FaQycRNaPhy7Xdd30jb3R%2BCAACYBCMUO2pOuhVhL1Jf3jyT70DunH2V68DbEov%2F8tjPVyhGzgx5uhuVc2pqWz7TZiIvqUAd2riBMAEm%2B45b44eITu1Osd0N0Y82gV4IXXn6m5KMyDaX5xVTE%2B%2B6H%2BZm15CFLwFNCNMfvNoTjL6tU6JVbesZ4mUOyePXK7JJ5l6UfLa1%2FTPUXPiGihZOY6iNViKBqRIlgEoACzrL4tB0N2%2BzOQ3jMUeC60CX6NZnE1GMZ1sLti6OCk0GiLffrWHdqdT%2B8qgP%2FzLkfaUPcBZ79xe%2BZ%2BwJNl9D0nqPBsMTMYICBTCCAgECAQEwHjAZMRcwFQYDVQQDEw50ZXN0LmxvY2FsaG9zdAIBATAHBgUrDgMCGqCBwTASBgpghkgBhvhFAQkCMQQTAjE5MBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTI1MTAyMzEwMzMzNVowIAYKYIZIAYb4RQEJBTESBBCjHtObzkwNqAhnMTJNCLBmMCMGCSqGSIb3DQEJBDEWBBQNUJ6G9AZrq96YXS0WkROzHYbhdTAsBgpghkgBhvhFAQkHMR4THHRmTFk1dUVhTUswZDVsOWF5c2lubzZuWHFWWT0wCwYJKoZIhvcNAQEFBIIBAAAT7H3TCwSMgzBnRmh4JRNWEO1Wyt0xfs6wrkmeWb%2F%2F9KDiYQJVuyoo6Y6CV8MhgrQTrbNR1E0wXVbWhq4NC2Vzjs%2BtnyYfi5%2FEo9jp9A4Se%2B6LeWaNa4L7Tyke%2Fbpl%2BQAp7MO8o8%2BQa8FZFDrzxxoeJLHkrwFWeteYMuXsccrh%2FBG%2F4PO052GMw7lj5a4QNkJUGSTqCMjXwtjeAlwrpz8J30G3xSbKOhGiDVQM4c65I3S5DWeHrG%2BLlNez8VZovlhYSYFLMXM7vQurpKU61PqtjmF7JxkuNG6dfRwxJTv7jLFWjRrOnnebUYi0S%2Fbgp3DsxnfYb2oe6FQrDC3475k%3D" protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=f40f9c1e-0852-4738-af72-fc309618ca6f size=116 status=500 user-agent=Go-http-client/2.0 user-id= +--- PASS: TestFailsIssuingCertificateUsingRegularSCEPWithUpstreamCAS (7.21s) === RUN TestIssuesCertificateUsingRegularSCEPConfiguration -2026/11/25 04:49:48 Building new tls configuration using step-ca x509 Signer Interface -2026/11/25 04:49:48 Starting Smallstep CLI/0000000-dev (linux/arm64) -2026/11/25 04:49:48 Documentation: https://u.step.sm/docs/ca -2026/11/25 04:49:48 Community Discord: https://u.step.sm/discord -2026/11/25 04:49:48 Config file: loaded from token -2026/11/25 04:49:48 The primary server URL is https://127.0.0.1:34451 -2026/11/25 04:49:48 Root certificates are available at https://127.0.0.1:34451/roots.pem -2026/11/25 04:49:48 Additional configured hostnames: [::1], localhost -2026/11/25 04:49:48 X.509 Root Fingerprint: a35d323b1053a79ab0be35704cb0f047334c797f54beeb039c2d4ddccdc44347 -2026/11/25 04:49:48 Serving HTTPS on [::]:34451 ... -time="2026-11-25T04:49:49-12:00" level=info duration="48.4µs" duration-ns=48400 fields.time="2026-11-25T04:49:49-12:00" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=322a5df1-a147-42f0-a260-3d700e8100d9 size=16 status=200 user-agent=step-http-client/1.0 user-id= -time="2026-11-25T04:49:49-12:00" level=info duration="37.4µs" duration-ns=37400 fields.time="2026-11-25T04:49:49-12:00" method=GET name=ca path="/scep/scep?operation=GetCACert&message=test" protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=268948e5-0232-4123-b175-c83cb8a81857 size=849 status=200 user-agent=Go-http-client/2.0 user-id= - common_test.go:204: 0M05{LQ>I0  *H  0*1(0&U Step E2E | SCEP Regular Root CA0 261125164948Z 261126164948Z02100.U 'Step E2E | SCEP Regular Intermediate CA0"0  *H 0 - s=%;"ZEΖT T5dţ6ShWp4p߷N㯌vBE Ɂ~(>Q}^ɲƁGu2,(Us GNva~sNBl1iiۺ=q}fj+-R#֥w|@TY$gP5ysZԇ:H^Q}@7eDʹ%/a5c Sf0d0U0U00U^x\#bMfIM0U#0^x\#bMfIM0  *H  psg,u}SFeIR)wZ06WK|: _@#@OqI0  *H N8$ eyױ8??畿 1EXV+KWü2vȦ|Zzti'g ]y}$UɴΦs[>m:ɐعW cR/iB@Q?|g}}ecjRRφZM}>5 e &HYY:Ŏg@"FMa(oSkbzwxP0 *H 0+0:R ˶HHgo$r8X)/=F`İ^[=c9\ZWm]Mކ*R%1w}zL<=hHnwiLЩYL{DtǸNO ˷^B`#<{8^"ubኚŒ'ғx?DdIMqj_YW5LZCjԀ}4I\m{`#:äzUkrRUz/Ԭ2WYa[kwJK:WPy?- {үF!!`L["?H6jTэ(`ϺeKeSM*/ Ey98 3FT%akhl@J϶M#mBq/hT$;줌m7^ - h\PtY7eM Y4d=$SqϡmaWq Ļ6\ 1HeKX2Z&Z1VEC++1g% Նc%xoDNE³(H6\2: !됑9 ^դ A(շ=^3ȮW - 1w~o% ,Ȧ SfSـTPm)N3ƫ:'G,2n000  *H  010Utest.localhost0 261125154950Z 261125174950Z010Utest.localhost0"0  *H 0 - ʄYiD 23)jYc;i#ʏUmyVZ;aVRŹZbAi5j\1?M#RV[s,IV槕x=V,;VNx)U9?[^gie3vDR5Kfi^"M* F•|%(200U0test.localhost0  *H  Sw3_%?t;(X-ޘ:EȠ엍06*&3;CM UWL9Y1I̪+'@2(APZo- \x"{Ľܺ4z~CQ1n#_l>jHFqI_ o쐳Za(nz—{>C$ iXU }h2sUY -c @(®Oh :Y_Fd7r!_100010Utest.localhost0+0 - `HE 1190 *H  1  *H 0 *H  1 261125164950Z0  - `HE 1'cd 0 Qd0# *H  155#y&>F0, - `HE 1M9SmsVjvatSyk9I19XZE+Y3NkIk=0  *H :% bb;lpT?;i[ymS*_`A$Ƿy7ZhX‚1V\rP-]Oku#]sHH *Uk;CW+Bnc]HRۖ$L5攸zE1 d- e2 7!k(9eΩ"Wy\JhN2&S 3Z)SJCy[PP6q\i-] -time="2026-11-25T04:49:50-12:00" level=info certificate="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" duration=20.5468ms duration-ns=20546800 fields.time="2026-11-25T04:49:50-12:00" issuer="Step E2E | SCEP Regular Intermediate CA" method=GET name=ca path="/scep/scep?operation=PKIOperation&message=MIIJQAYJKoZIhvcNAQcCoIIJMTCCCS0CAQExCTAHBgUrDgMCGjCCBEAGCSqGSIb3DQEHAaCCBDEEggQtMIIEKQYJKoZIhvcNAQcDoIIEGjCCBBYCAQAxggFZMIIBVQIBADA%2FMCoxKDAmBgNVBAMMH1N0ZXAgRTJFIHwgU0NFUCBSZWd1bGFyIFJvb3QgQ0ECEQC3i7l7HUz%2F4VGbmT5JAafLMAsGCSqGSIb3DQEBAQSCAQAQtbfvEk6%2Fq7AX78Q44R7ZJAGqFw22ZRZ5h9exOD8%2F55W%2FCfWNuN7CCPTVwDFFgJzoWFaoHCvDSxy%2F9R5XgrYDlZvDvBzhhOqxMuV28cimfBBaenSCwgKvae8njfyJtGcJXZ550H0eJPmeCAJV48m05qUZnqa3xQDM%2BM6mke3Wc7KY9ZXRWz6mbZ869L6TqMmQjti5xFcLY5lSoy9p%2FKi5QkCeUT987GcIGq3wu319xABlmWNq3eGnUlLPhhpayNhN%2BH0%2B8jUNwIkPZQjlmgmwrIwmhcRI5VlZucs6xY6b8aRnQOO3ByIClUaSTRPIYSjO8m%2B8U2tiwY16hnexeO1QMIICsgYJKoZIhvcNAQcBMBEGBSsOAwIHBAiuMOyFOlK0v4CCApDBpAnLtsjY%2BEhIF6VnbxgkcjhYKQEvDz3wRun7sxjkYMGuAITEsF72%2BFs9YwDSOapcvFrhz1dtpl2xr%2FxNwN6Gr5Lz2ioYUtglMea13XePyX167x%2FFyUwdPLmGoD2U9B5o7kj6pG53wWlM0KkYWUzh3Huzp41%2FRLd0wMe4lr9OTw3Lt%2BTXBANeQrPCFWAj6KMO08n%2FPHs4FqBeGZIi9HViq7Xn4YqaxZInk9KTqZd4k8U%2FRJYbZNpJ%2BaJNEZcCHLaycfVqyV9ZwdRXNUy6WrH1Q6hqk9SAfTRJ%2BlwUbXtg5yPx3joDyMOkeri6VR7zr2tyUoBVHHroL9Ss1%2BwyxFeqx%2BS1WdhhW2t3SrdLOldQGLUUeT8RLeoOh6wM83vSr0YhAwYhYJFMl1sX4euAIj%2BfSKmM3Dab7s5q6FSdCNGNKIRguJGv9Y%2FXz7qlq%2BHOyWXivUtlU03mKhEv4dLxiyBFsYR5Oac4DIHwM8EG%2BrQS2skbRvf%2FVCWLYWtosM9swxRAkErPtsJNDruEI5AYbbnmQqlxBcIvaFTHJK47qOykjLy3im0QN17DCrW%2FsGhc4VB0jFk3ZbDrEbeoTQu01NrCWYqM4TTyZD2Ei98kU3HDz6HDbWHjV3Ef%2BKMMxLusNlyFGgzfMUhlS%2FSwHIGF2VivMgharp0c1u8cyRrQJstazTEcE1ZFQyv4K9UxZyUdDB7Vhsv222OU8BclHvOSeG8RorKjRE7HRcKzKOUa1fWySDZcMjq5Dcgh65CROfMLp17VpIyuhuULF0G9vCj%2FpIDVt5uCPV4zyK4OV6bTCjF3n34AbyULBiwXyKYMF1NmGFPx2YDd7lSYUBiJ%2FG0PiZspvx5OM8arOvQnRywyttBuv6CCAs4wggLKMIIBsqADAgECAgEBMA0GCSqGSIb3DQEBCwUAMBkxFzAVBgNVBAMTDnRlc3QubG9jYWxob3N0MB4XDTI2MTEyNTE1NDk1MFoXDTI2MTEyNTE3NDk1MFowGTEXMBUGA1UEAxMOdGVzdC5sb2NhbGhvc3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKhBpZmfcYFb9pRLELszLglzMA%2FylqhVnBlmM7vGmhI6Mc28qPvhLbVW15Vs5aO2FWllLFuVqGYkFpo9s1HBBqA1wABzG76IMWlD9N8O8CI1JWj4xbcxUsw0mLtVb05qeVs8N4Pc9WBSx%2FO1ZOlBSMzRl4hLKpKZeW2VUclzmO8Ic8kdNGt1Jsz30fnGCwvObnPEv7pqFlVhMeCVCBPMmLlwvcAZxBF%2FCxrQP9kO3LlQBwMntV3mLt0%2FLvdD%2FaPg8ckYc%2FW14VZ5%2BUaWUW9zMGdoFEh4HZ0vBSxTVLZpT5aV7zzyKph%2BBN677GKiBG4uDHwpV8hxWHEODlEJIlKDLvAgMBAAGjHTAbMBkGA1UdEQQSMBCCDnRlc3QubG9jYWxob3N0MA0GCSqGSIb3DQEBCwUAA4IBAQAdU8kG83eFM1%2FmiCXrP3TtOygel%2BZYtS2W9IDemBvLOkXIoMDsl40wNiq0JjM7Q%2FBNfwnaVeIQVwa5TP0HOVkxivEIyEnMqivh4SfJ0cNA9jLBKJzBQVC9qARarm%2BNieYtDFyMeAPpkCJ7qMS9FBDcujSWlXq4zH6qQ7oX%2FvVRMRb63spuI1%2FskhbnbD5qA%2FCoiUhGB3FJA7%2FqhwdfFgyJb7fskLNawmHiKG56wpewjXs%2BQyTv2e3zCWnC7LFYEFWu6c8LxH285mgycxvA5tlVtlmIIC1jgwn9QCj%2Br5LCrk%2BC5pNo6wmOlIUfOllf1EaQrqFkEDfZxMKBciGRBAJfMYICBTCCAgECAQEwHjAZMRcwFQYDVQQDEw50ZXN0LmxvY2FsaG9zdAIBATAHBgUrDgMCGqCBwTASBgpghkgBhvhFAQkCMQQTAjE5MBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTI2MTEyNTE2NDk1MFowIAYKYIZIAYb4RQEJBTESBBAnY4WXgMVkGYcMwzDLDVFkMCMGCSqGSIb3DQEJBDEWBBQ1szW69yPU%2BRt5%2FtkmPri59ooPRjAsBgpghkgBhvhFAQkHMR4THE05U21zVmp2YXRTeWs5STE5WFpFK1kzTmtJaz0wCwYJKoZIhvcNAQEFBIIBAAI6448IJdQN8An1Frf1Yo2TYjtscIkbVD%2BHO2n7mVug13kT8m3dEObpU6odhhIqmPns619gqqflQRi%2FGSQIx7d5HP03Wo%2BQsGhYzRXXwoIGMVbmXNJyiVCOLV2c4ORPa%2BJ1zRS5I4BdjR%2BxhHOWSB2YpIWhSAwMDypVa%2BE7Q9vXVytCiG7jY98cudhdj%2BKlSJUeUqrblpgkTDXmlLh68kXpMRILGM5kLZ3xv9IA4b8JZZSRgqMyCbjVN%2BIhayg5vvyjg2XOqYAigFcQeYKpXEqpaNxOMtIm4VOqpQ0B5J0zWriogdEHqClT9UpDeVtQlAJQNv9xXIyQaeXsLeWlXag%3D" protocol=HTTP/2.0 provisioner=scep public-key="RSA 2048" referer= remote-address=127.0.0.1 request-id=2e109931-7708-4a32-82f0-b09630888544 sans="map[dns:[test.localhost]]" serial=16015678798693825334357847139392976162 size=3773 status=200 subject=test.localhost user-agent=Go-http-client/2.0 user-id= valid-from="2026-11-25T16:48:50Z" valid-to="2026-11-26T16:49:50Z" - common_test.go:309: 0 *H 01 0+0[ *H LH0D *H 50118040010Utest.localhost0  *H mHT'ngP"dc"V_^@zH\Q|ˬJo}6p͂Qwt]/GgPPe@cϻ1\* bɥsLysmB:Î$9z85@ 8ybm[bplЀ\P=ݚ+2]jq6n24{/'>ڶ- xgGI8-֟LNl MYC6rtI­ώʬgj3Wa%9<jc\bZ}̓qvF30J[/?qݨrz5sb.kЬ9izog.Eexk5Q[u,w"34jޟENz!K._;J3{:)`l[~qB es-Q+ZyV_Bn;/ ff$= $pg4t45^W9b*I<-?ۿ8MOge/}O-BLxMxEMS#` Ɗr8XnGFG O慂Z+ApQ&_Y~F-;-n% iSO3A:ñj5, - >$Pvyq&nQ7i3kRk*ud3DMh3J0lKWjǡ.-C;^gaߕV'ռ?Z( z+u"­]8ޡ$r%Nˣs# u/auBf:?a&XIOyT5E- rFͿʷ+B&BUPXvUaH=yM~;1*LLcI&EG䕏w!k@[+}@Բ9 Q,'Dz(::kPX <&u"0  *H  02100.U 'Step E2E | SCEP Regular Intermediate CA0 261125164850Z 261126164950Z010Utest.localhost0"0  *H 0 - ʄYiD 23)jYc;i#ʏUmyVZ;aVRŹZbAi5j\1?M#RV[s,IV槕x=V,;VNx)U9?[^gie3vDR5Kfi^"M* F•|%(200U0U%0++0UPI)2C&H - wxm4Q 0U#0^x\#bMfIM0U0test.localhost0 +d(@ 0  - scep0  *H  _q,\cA6`Rmה^Rʰp8CL[}B4%b怮jڧ^$RjK]̕(Ei岚{TG3$Y_b?!|mټaջȲs 3P0ucENiIֻ2RI,–%2!t!"O2\aC`t-0zӤ: - Qc}?S^,ٯe/*:13=JIZ[;j'[0M05{LQ>I0  *H  0*1(0&U Step E2E | SCEP Regular Root CA0 261125164948Z 261126164948Z02100.U 'Step E2E | SCEP Regular Intermediate CA0"0  *H 0 - s=%;"ZEΖT T5dţ6ShWp4p߷N㯌vBE Ɂ~(>Q}^ɲƁGu2,(Us GNva~sNBl1iiۺ=q}fj+-R#֥w|@TY$gP5ysZԇ:H^Q}@7eDʹ%/a5c Sf0d0U0U00U^x\#bMfIM0U#0^x\#bMfIM0  *H  psg,u}SFeIR)wZ06WK|: _@#@OqI0+0 +2025/10/24 00:33:37 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:37 Starting Smallstep CLI/0000000-dev (linux/arm64) +2025/10/24 00:33:37 Documentation: https://u.step.sm/docs/ca +2025/10/24 00:33:37 Community Discord: https://u.step.sm/discord +2025/10/24 00:33:37 Config file: loaded from token +2025/10/24 00:33:37 The primary server URL is https://127.0.0.1:40813 +2025/10/24 00:33:37 Root certificates are available at https://127.0.0.1:40813/roots.pem +2025/10/24 00:33:37 Additional configured hostnames: [::1], localhost +2025/10/24 00:33:37 X.509 Root Fingerprint: c9efe64adff7e1a05b9446dff33ce70b1b380914cf8e5bdc859224d8241dec63 +2025/10/24 00:33:37 Serving HTTPS on [::]:40813 ... +time="2025-10-24T00:33:38+14:00" level=info duration="18.28µs" duration-ns=18280 fields.time="2025-10-24T00:33:38+14:00" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=1244e32e-6cdf-475f-b83c-7b83f5daa4c8 size=16 status=200 user-agent=step-http-client/1.0 user-id= +time="2025-10-24T00:33:38+14:00" level=info duration="31.24µs" duration-ns=31240 fields.time="2025-10-24T00:33:38+14:00" method=GET name=ca path="/scep/scep?operation=GetCACert&message=test" protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=9920bf27-ffcf-4368-bfd4-0053933f75cf size=848 status=200 user-agent=Go-http-client/2.0 user-id= + common_test.go:204: 0L04C5l q0  *H  0*1(0&U Step E2E | SCEP Regular Root CA0 251023103337Z 251024103337Z02100.U 'Step E2E | SCEP Regular Intermediate CA0"0  *H 0 + FmTAƧl`#c`٫hj2eMeYĝhvBn_<h .5N:dȃ!%o-UAC iUiF[%i-v1CL+'c mՕwyQp.)ms+i?x$$*$ateHvh5Qp + [ei~ђ .hDhuiQ"YL:p? + common_test.go:286: 0 ? *H  00 ,1 0+0? *H 0,0( *H 01X0T0>0*1(0&U Step E2E | SCEP Regular Root CAC5l q0  *H cQ3d53;$4m$@z6y ϼ5 (Pk=Q$t {jvn'O@IK_X!t#S2d\3<_-j}޻YX|RXK< 8&2Z#>Aw.5+ܞ°A@Mqz q> XlF*[avOT'ᰌNhqFәzWbE.Sd89,܄ ϓql\0Y> *0 *H 0+xZwfKaiu*X-y\)UMt!N]9ʩ͛LI  y :FTD*}&ۗrvpޫ巽ONjl#qۦF4JinTMhz\Y!% |n* + Fa%m5;҄:/o݆,Ԓ㤭ԒO<ІUCp_ 6vįi\`6CwqF?[@1bB2pɊq~ჲgr@UW1;Yh=stwa=]`ށ{ɔoiUG`Z[\],PIzU-* :O)MR{<)WRm)`2ٌhOY=ެ [IjwJקcȑk,蓰e8 iF/X*gWH!gA\| z~(#,b0Ibw8Ы&qdVC| xWBD.XRo(/[ӘX~ϚnrB^G100010Utest.localhost0+0 + `HE 1190 *H  1  *H 0 *H  1 251023103338Z0  + `HE 1~:`yz1:0# *H  1q7fY3,Ԟf'0, + `HE 1ERmfblb/5uE2OOmUpj7/2PncZ1M=0  *H S5NPM=.ƺfK<۴f25ҽ۳- + NOO vw,Hob + ڕe'<]/1{Ÿ + ߸]I|T=䵐%tEy^R/\yyY#I\ôMہq'.d0JFО3 H tN;-6(f9?IlTXV RgnV!{ʩHb@!POt +time="2025-10-24T00:33:38+14:00" level=info certificate=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 duration=14.073892ms duration-ns=14073892 fields.time="2025-10-24T00:33:38+14:00" issuer="Step E2E | SCEP Regular Intermediate CA" method=GET name=ca path="/scep/scep?operation=PKIOperation&message=MIIJPwYJKoZIhvcNAQcCoIIJMDCCCSwCAQExCTAHBgUrDgMCGjCCBD8GCSqGSIb3DQEHAaCCBDAEggQsMIIEKAYJKoZIhvcNAQcDoIIEGTCCBBUCAQAxggFYMIIBVAIBADA%2BMCoxKDAmBgNVBAMMH1N0ZXAgRTJFIHwgU0NFUCBSZWd1bGFyIFJvb3QgQ0ECEEO9tqn3%2BjWq7GwODKLocacwCwYJKoZIhvcNAQEBBIIBAKn90xfUY6NRM6yaomTNNaSnzDM7kSSVNANtHSRA%2FnqmteQ2hRN5vI7aEICkst8N6ZnPvJw1CN8MKJpQjxEYaz2JUZgkdJEPyiCEwLx7nLoH%2FBiY7Gp2bieET0BJ1e1LX7RYIcsf3A8b3h90I1Myh%2BJkXDM8Xy1qfd67hcxZ0liMfH%2FQUljhS7gakDyQCRk446kmMlojPvdBd6UuNQcAHwYr3J7CsOwHQUDpTXEArwd6C3GEPiCJWNRsRiobW9sbYad2T1QnrOGwjPxO8WhxvUbisdOZtd16V79iRe%2BgtC4AU9ZkODks3IQOC%2FOoEM%2BTm5RxFuBs98pcMNxZPgkLHSowggKyBgkqhkiG9w0BBwEwEQYFKw4DAgcECLaTxhraeAOrgIICkKvEANDjr1rIB3dmSxCqYeNpdbQqWC15pxVcKVXcTXTiIQ8GsU6N3R725Zhd8znKqc2bTLrGSaYSwJ%2B20CCZBtcNwXkgOubcRsVURCp9qAIm25eU1XKF08t21vpwr%2FyA3qvlt71P%2FxSkTmqv%2BN4XbJIjcZgS26btzefsgwJG9TScSoRpiW6LVE35kGiCGvaSes9cxVkhJQnVfK9uAioKvAXLRmH9JW01GgfdF8w70oTCOi9v3YaNLMTUkh%2FvmPOk46St1JLtuwdPPJiT0IYUvxlV%2FB2RGOLyQ3BfnpIMAjaV4%2FmH%2FOl2xK8RaR5cYOQ2Q5EUd3GU5%2FCvRvO1%2F%2BQP8ec%2Ff1tAMcnP9KNiQtXiMjyawi855aTa07nkdheCEcj41pSoKCd2imucxo8ZqaHa5I7N9zfEmRnaz42rn4%2BGzR7VNu7JwOYU%2F1eVKwH8Ii0ImWR0pv7C2Nm7q23e66SJdCaIMdvjVUcEaKMBCd8IaW4wUEjS8zmrP%2FhGDYV2roGySL4ZT7YL5G9gEWvkcqZqOkQ4Vk1BARhxRTHdRYL9hMR%2FDauj82kPssTusbAMunyxb9Bx9WFxswor9gGYWwsWR%2Fk51%2FzVeJN4b8DnzQh1vMD%2BeKxwv%2FUI33xRh6VI75LX%2Bfg17kWdGr7d8lWhYm6C4fO7wVtzD9B%2FE5cni0FllFwb23ACkc6I9%2FMWCezE%2F4OXvwy7f3so8UDOKSSqZH15%2FaGgsWSKF8xjuohYu75OWiHewVhTJpHhF2t%2Bp5hMS2ZkxjarPYamD0qvxIQ45nSYimLRfow2EgXdEFoLFJGSLypHmvJdHP0ARArnqqqSLYfAWcnjpUzV2yKgR1gjwjDzI7ImpwXvQ43b7CSJuPKNyw%2FfoIICzjCCAsowggGyoAMCAQICAQEwDQYJKoZIhvcNAQELBQAwGTEXMBUGA1UEAxMOdGVzdC5sb2NhbGhvc3QwHhcNMjUxMDIzMDkzMzM4WhcNMjUxMDIzMTEzMzM4WjAZMRcwFQYDVQQDEw50ZXN0LmxvY2FsaG9zdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMEHR6un%2BQ8DZljNCx%2FxZwTQLhn7hKMgPoD2o7vocInJiukGqHF%2BgMThg7JnckAawKv8BVVXMYw70VkAaD3y2%2BRzdLmd3vXZd59hPYtdYNz5Eb%2FWDuCWgRP23oF7pM%2FJlK9vaakS7lWkR6JgWltcx131gyxQSap6utniVdru%2FC3vxioNiKCjOk%2BsKeSxTVLwezyjKVf5oPxStNPM6wURz%2Fttg5SgKR9gMtmMwPyxCIzY0WipE09ZPd6sq67bDRrfW0k89L5P3HckqEu%2BrrtrscWWItjf39em4lwCtG5hff8b05wGG3DZw%2BjiURNkzbe3VOehdVyTMFvIhb9hj8maQIkCAwEAAaMdMBswGQYDVR0RBBIwEIIOdGVzdC5sb2NhbGhvc3QwDQYJKoZIhvcNAQELBQADggEBABqBJj9YuGz80rqW0jWas%2Fen7vBsK5Wi8PNvGQxRILrHlaOPIh4SQzn1VBXRGQ45ia5QF1GVoXPR2R2%2FHUGsGuAUfbKjbkc%2Brx%2FHCGqRd%2B%2Fhne1K8tUHjJfXp5W9Y6XsFRrIkWu2tb4s6JOwZTiZDYfEaUYv7limhCpnwfPQFJ76V%2BasxQTNSCGKtRHUZ7yT%2Bd%2FaQQTdXHwZkSCR9Xq55JUY3x1%2BKCMsYjBJGmK%2Bd4w4sN%2FQq88fASZxisVknMxW7UOAfLH9DHiU91eMr0IU%2FUSf94AuAH%2BxiVjyhVIeb9721igvW9OYjFh%2B3vkZz5puhYJyQoq4GYiR%2FZZeip1HB5YxggIFMIICAQIBATAeMBkxFzAVBgNVBAMTDnRlc3QubG9jYWxob3N0AgEBMAcGBSsOAwIaoIHBMBIGCmCGSAGG%2BEUBCQIxBBMCMTkwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjUxMDIzMTAzMzM4WjAgBgpghkgBhvhFAQkFMRIEELl%2B8rM6khLmYK55ejH2OgYwIwYJKoZIhvcNAQkEMRYEFHG1uAM3Zln7M%2BMst9Sej5vAZuAnMCwGCmCGSAGG%2BEUBCQcxHhMcRVJtZmJsYi81dUUyT09tVXBqNy8yUG5jWjFNPTALBgkqhkiG9w0BAQUEggEAUzVOf1D0kBL3TT0uxrpmrUs82du0yuFmvJX8hozql9kyho8GNb2C0r2727MtCk6fT6FP5g0ciXbtdx3b2CxIv4ionW%2BCi2IKnczalWX9JzwAXdMvMXvCn6AKAJGfnZjfuKZdHbmbSaJ8VLk95OS1kNrBJXSQRZ3IeeSnf15SL1x53wHteVkjSYvIf1zbH8O00U2hqqfbgXEnnuEBLmQwSkbQnjPvyxD%2BHrCgDbjxSNkSDJV0ThM7pcwtNq0F57ooZrE5mz%2F8SWwIr7VU8%2BXsWA9WDgn9UhRnbssfVqshexoSx%2BHc69wR6%2B%2FEztPMyqnXEUhiQCH%2FBf%2F69VCZ5k90ng%3D%3D" protocol=HTTP/2.0 provisioner=scep public-key="RSA 2048" referer= remote-address=127.0.0.1 request-id=732b90b6-2a88-45cd-8334-999f91e39508 sans="map[dns:[test.localhost]]" serial=317325997843060654229052230663002480715 size=3772 status=200 subject=test.localhost user-agent=Go-http-client/2.0 user-id= valid-from="2025-10-23T10:32:38Z" valid-to="2025-10-24T10:33:38Z" + common_test.go:309: 0 *H 01 0+0[ *H LH0D *H 50118040010Utest.localhost0  *H ^`z + 3R۹3` dw`~]$:3r$CYX<9u%h 78|@ݘYumyM7(ѻQn7䐺8srÓ^,^LrĶ*Gb"Xwx*ʷOA@ҮU|,楦B"^:fLzY/LdF c5h |NCe"67Ȑ;[{E"ǢB׿ȗWݳY%BUQqTmql7Iρ)_ ĦIT UEA⪍D9C"w yD O6Ś<yӲQ,/t5nTXꨋ y)8Q_l"f6p ^'@COڴpC[@ gL`+R(p-NNEz + w* + +{ƽU׮&!JV}(AlNB)?-mܧފRi#xzFPJ`# gdxwiN"V9x2!Ģh'>.Pm֟}_3tgWF_2iGe7]O/J, ,vMސ%ÀS"j3j-ykXP';w Ube0R-92":-5HiJ2l: YT 1hK?gBΖ57]w^"U %4uM<=VfH[{3YS + [M[w, + lw%IkΒr6#կprQXA(X#F+:/UecoǺџ= 8 x!(L!ӄg0@'XUdw1~pHIwY7_ܒ4y8M݁"<;yMu%[5^n=4@=g#mbH dݣ=cx'4n3>]DlېB P_Zх6t4cwk;sv@O܇h}/6tiJࠂ00kÞǦYO`K0  *H  02100.U 'Step E2E | SCEP Regular Intermediate CA0 251023103238Z 251024103338Z010Utest.localhost0"0  *H 0 + GfX g. >pɊq~ჲgr@UW1;Yh=stwa=]`ށ{ɔoiUG`Z[\],PIzU-* :O)MR{<)WRm)`2ٌhOY=ެ [IyAv[4%&ҀBexHY+[T0XDDJ8#i},:)@\ ~cY&% H!PSiku'j( };]Ui=PK{ZB-» + EnǕHxhCf.CD#?Y!=^Ou0L04C5l q0  *H  0*1(0&U Step E2E | SCEP Regular Root CA0 251023103337Z 251024103337Z02100.U 'Step E2E | SCEP Regular Intermediate CA0"0  *H 0 + FmTAƧl`#c`٫hj2eMeYĝhvBn_<h .5N:dȃ!%o-UAC iUiF[%i-v1CL+'c mՕwyQp.)ms+i?x$$*$ateHvh5Qp + [ei~ђ .hDhuiQ"YL:p? 1Y0U0>0*1(0&U Step E2E | SCEP Regular Root CAC5l q0+0 `HE 130 - `HE 100 *H  1  *H 0 *H  1 261125164950Z0  - `HE 1'cd 0 Qd0  - `HE 1'cd 0 Qd0# *H  1 *Jlº} 0, - `HE 1M9SmsVjvatSyk9I19XZE+Y3NkIk=0  *H | >d2Y.=~}[V`O~i_qO% XuKQp?ʓ<2W9,ґ;ӣHYfへu&KFxC#x㦄g\Ø$2Zjr - O/Jͦ - <:S{z#qA/a8ffюf> 7~G qD=VC!8jacJ:M fo?3T*NdG8\M|T"<ԧ=cHސ3s{#!'Bbdm(a4ν4c 8N5Ϩlh9FEe:R1"ޔm ҃g{bc/w\$؊HakU)t .xmEfSj) + :֡ +--- PASS: TestIssuesCertificateUsingRegularSCEPConfiguration (3.54s) === RUN TestIssuesCertificateToEmulatedWindowsClientGo123 -2026/11/25 04:49:52 Building new tls configuration using step-ca x509 Signer Interface -2026/11/25 04:49:52 Starting Smallstep CLI/0000000-dev (linux/arm64) -2026/11/25 04:49:52 Documentation: https://u.step.sm/docs/ca -2026/11/25 04:49:52 Community Discord: https://u.step.sm/discord -2026/11/25 04:49:52 Config file: loaded from token -2026/11/25 04:49:52 The primary server URL is https://127.0.0.1:39615 -2026/11/25 04:49:52 Root certificates are available at https://127.0.0.1:39615/roots.pem -2026/11/25 04:49:52 Additional configured hostnames: [::1], localhost -2026/11/25 04:49:52 X.509 Root Fingerprint: 087c95b2258a85621d4f10de9d83a1ce963874d02dd7a2f2ac99b1f6398c9e90 -2026/11/25 04:49:52 Serving HTTPS on [::]:39615 ... -time="2026-11-25T04:49:53-12:00" level=info duration="21.76µs" duration-ns=21760 fields.time="2026-11-25T04:49:53-12:00" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=a2c8e2bf-5955-4d9f-b1a0-acfef36e9164 size=16 status=200 user-agent=step-http-client/1.0 user-id= -time="2026-11-25T04:49:53-12:00" level=info duration="34.76µs" duration-ns=34760 fields.time="2026-11-25T04:49:53-12:00" method=GET name=ca path="/scep/scep?operation=GetCACert&message=test" protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=0e3da81e-8435-4dad-b24a-d99aa3889223 size=885 status=200 user-agent=Go-http-client/2.0 user-id= - common_test.go:204: 0q0Y$ǂ_Ek0  *H  0<1:08U 1Step E2E | SCEP Regular w/ Windows Client Root CA0 261125164952Z 261126164952Z0D1B0@U 9Step E2E | SCEP Regular w/ Windows Client Intermediate CA0"0  *H 0 - ~h}s}>ٍ9ATEk{Wh|uv9it)4of92_M+j52em&Jg [/g2L5I - $)Ip,pxfI8S+j7ފi7RIp*7gT(yޒGLtP@\E9FV4jW4>\?UJz* - < mosqd#0i:hoQ+CEb9>AW.f0d0U0U00URo_HYagFk!0U#0Ro_HYagFk!0  *H  hc?oÏ\u ,A0 GFH>JB"ū 9FkMs!6> - #DR7kFmm͝#r"J"` Hr =eQ0?"|Cg@hGX%q:Q{u[߆ ɹ>rA1&#;ů̥[H0S5iDW(Rg[&ˏ(SRV)s,Y - common_test.go:436: 0  *H  {0 w1 0+0R *H C?0; *H ,0(1k0g0Q0<1:08U 1Step E2E | SCEP Regular w/ Windows Client Root CA$ǂ_Ek0  *H #@βyŬe#>0sk&mI^HM - g,&U,n&-Rғ,8"K2'_E?1:~s ChXۊnQMpvjŽ2`pe P@ (q=^$eP2Uap߾C{@err"~ Aaw>'ia]2w[j>>muvRu0 *H 0+y|V Ȁ绗gҙ M - CXGʂK3ΤlUl+( Va-g<.gJ4US7)  ?#R#]c8B: };د +IUhc7vYLv3tƴ1p7#L6_ֺKc/5CHh)(uXuj`Vr*j?@=xǐrxοT6l{Z "&%XJl_kuq)[A_erVOޡ\viPM  |a4I)*WL+ZvSh ;m7bg?¯ON%;um3a h\ w̠@p&0ҞM4 niT@Pie l8aMw"iXաĢr9hU)B<ޘsH^XѨB,:J.o#kZ5ߺ00ߠ0  *H 0$1"0 USCEP Protocol Certificate0 261125154954Z 271125164954Z0$1"0 USCEP Protocol Certificate0"0  *H 0 - T{wƾo )|Xc - %VG d쫪G٘OLյq!nUXe$iiL`--vr" 7taV|nrJ*N#zSbｫ٘L~P*2} ѿV ͤ=D K89a]{4020U#0bla0Usj~[FzBnF0  *H I.=Y9' ]]'vzH s)@ - 4Z*YN&hաw*lX-QY6}ip=/+_l$vv1CݵЎb-\34pq:=^rFU~tIq$-e)+STt!TDG2YL*e*SȾ~yÔ89ħue ;w𓀮rE~o*8΅d2FTs}10 0)0$1"0 USCEP Protocol Certificate0+0 - `HE 1190 *H  1  *H 0 *H  1 261125164954Z0  - `HE 1ؤS}H7Iuv]$0# *H  1%y0, - `HE 1+Gl0gKXu5h4lOb4IvPQd1LflBj8=0  *H v^*`HW^!y#_oaGc#7RzGߑpb-1!ebWƱ - C3W JOϬfX^R])P#ׂ=ݟY9cp^>b uT[T&T#O]8)蒒w1XUl<[1.zē!e;t[2ƣz.5-D_ Cܲm۔_?QҖ64 I*s잋;u /k}_T -time="2026-11-25T04:49:54-12:00" level=info certificate="MIIDlDCCAnygAwIBAgIQWigPbydk2R+EPCgyKvWTlzANBgkqhkiG9w0BAQsFADBEMUIwQAYDVQQDDDlTdGVwIEUyRSB8IFNDRVAgUmVndWxhciB3LyBXaW5kb3dzIENsaWVudCBJbnRlcm1lZGlhdGUgQ0EwHhcNMjYxMTI1MTY0ODU0WhcNMjYxMTI2MTY0OTU0WjAZMRcwFQYDVQQDEw50ZXN0LmxvY2FsaG9zdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOCp4KxUe3eToNTGvoMCb+XskdvlDCl8pOQ8L0OLZ0YLqNb+uYYfPDLf1KURtbET90Kg0WaTSg0ACqDoc25pg+3glYe1fF1PO3k5roBdShDlJK02PopYYwolt9dWBQbvAkeG5e8LZOyrqkfZmIhPTNW1cSFumPvFfxTS+N5VrB1YZSRpD8HJw9Ia6GmDTJO4kwCj+mAtLaJ2cogiHwgJqDd0YdRWfMjjG+O0bv5yzErCDiroHAROt+7jvt/lI8Tc7/56q4e4vVMEjGKuD+H+jhjvvauo2ZiSFQJMfr2lUCoeMpJ9DfTRv6tWuQuWzaQ9RAQNSziItx+GnI051e1hXXsCAwEAAaOBrDCBqTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBQIc71q035bp8ZGBxmxeuVCbtkZRjAfBgNVHSMEGDAWgBS2Um/sX0hZ5tRhomdG2OOJa8DTITAZBgNVHREEEjAQgg50ZXN0LmxvY2FsaG9zdDAdBgwrBgEEAYKkZMYoQAEEDTALAgEKBARzY2VwBAAwDQYJKoZIhvcNAQELBQADggEBAAb3jfpr9cuk9KL/M15MLvd8nx0NzBiRvMMuxYz62MSc+/mi+YV7pCzeiSyJQu4WeEjpqiLIf17EkJOtuLJOU7N0EGmQsw5hTX6RqE43Tz7I70CsiXUUEOS4jLhaLAUmFZax/JhLdHsQoUFS8UgddbwnXQnvcgl0SAQC5+mc/Vpv0ewI3nlxk3BahuD9cOivLL0kTD0LUJ6ov75C014Hgjxxti3tOV5sZwTPHWGz9GqId05DN2bB/4meRQ1qayHwuFo3a9ZF29Kzzk9KsF2dCdjfZMVLvD/DqUoYT4Y5gnuCIo+HbkVBXy58OQeYgg//Ig3V0tC0aWtf6S/YMFWeSCA=" duration=13.5994ms duration-ns=13599400 fields.time="2026-11-25T04:49:54-12:00" issuer="Step E2E | SCEP Regular w/ Windows Client Intermediate CA" method=GET name=ca path="/scep/scep?operation=PKIOperation&message=MIIJigYJKoZIhvcNAQcCoIIJezCCCXcCAQExCTAHBgUrDgMCGjCCBFIGCSqGSIb3DQEHAaCCBEMEggQ%2FMIIEOwYJKoZIhvcNAQcDoIIELDCCBCgCAQAxggFrMIIBZwIBADBRMDwxOjA4BgNVBAMMMVN0ZXAgRTJFIHwgU0NFUCBSZWd1bGFyIHcvIFdpbmRvd3MgQ2xpZW50IFJvb3QgQ0ECEQDRACSBlseCX0XcwfXl9A9rMAsGCSqGSIb3DQEBAQSCAQAjQM6yecWs5QBlGSOnPgQwgnPKxPq2a7cm8uFtSeRerkgeok0VFqsKu8hn2CyDlOOc2AUm3FW6pixu4CaHLVIXFtKTLDiiIuTNS6UyJ4X%2BjYiVX5NF8T%2BOq%2BiUMfsOqxg6zX5zFh4g8EPxaFjc24oXFW5RAk2Nlo1wdpNqxb354OqYMmBwHGULIFDJ%2BslAC7u4zRgornGgPV4VB8UkZRoZUDJVYXDfvkOr7xh7qEAX22WE%2F4YVcpK24nIBIqV%2BDEGfYXeuPieZaWH6PJu58nZGtJzm59ONa9FnHPHHgG9cWSaPI2ehg%2BjyPvgW212H0zJ3W2oF9w7ZPo0%2BbXV2UrR1MIICsgYJKoZIhvcNAQcBMBEGBSsOAwIHBAgOeXzJVoYJyICCApCa57uXZ%2FjSmQu%2BTdXCCsCqQ1j6R8qC8xsUFUsCgKIzEc6k%2B7%2FVbFWYbL8rKKzW5AzB6e3m6YFWlgJhLWc8vy4G75hnShI0zlUV2VM3gOWLH%2BwpDfcVfxUMlj8jG1LikiOfXWM4QjoN33078aAQhNivC%2BeKK%2FyLh41JklUW02jBFQhjzTeoHRMYdou0WUy%2BGRPK2AZ2M80UdMa0MZtwDx3dNyMA3Ew2maLZX4zWuktj5BIvNbhDu8r24R%2BuEZCZ%2Bki5uBSOtJC2y2ifKanPKHWeWJONdZng9H9qrmBWi3KZKmo%2F18dA5z2heMeQnHJ4FLXOvzxEznJ281hVxhoW%2FzJJBBDl9gtBsWV8DwSRMqzrQ2zLAnwkT91s%2FOJ1uY9SkzIGnYIOj9hPebPm66%2Fzlrj8ejpnX14hmqe%2BEcOWhg%2FxK1%2FATyhht3uqfpmiVRsEjYvBoDUGAxM87AOfTEegYIVtVuZoi1oqjBdHumCDl2xiI7asuRx7nD5UNq2VbHtaDbQi1iYl%2FlhKl%2F32bF9r4OB1DnEpFlsevkGbX2W7clZPmd6h41x2hmmcxlCITR0MIKfm6RMVCRfY8PF8YTRJKSr741e5q0ysFYcriFp2GVPwaJflpxUGygyb2Tuf6m03BRnj4WL7Z%2FjLP439wq8V9E%2FT7e9O4iWL7pU7%2F3XLx236f%2B6tM2G%2BwL8LaA%2B1XAt3msygQHAmpzDSnqFNkq0TNO4Ml24daVRAi%2FDcUMYZaaOuy2UNHusFsBSm%2BLNsOGERTXcO6RCFIo7%2BhqeyaViI1aHM50fZzKcPgfFy1fLROY7taLtV9SmAw0I8kgDzpd6Yc7lIXljH2tGovH9CoSw6Si6AxW8ja1rVyQDnBfM137rvAqCCAvswggL3MIIB36ADAgECAgEBMA0GCSqGSIb3DQEBBQUAMCQxIjAgBgNVBAMTGVNDRVAgUHJvdG9jb2wgQ2VydGlmaWNhdGUwHhcNMjYxMTI1MTU0OTU0WhcNMjcxMTI1MTY0OTU0WjAkMSIwIAYDVQQDExlTQ0VQIFByb3RvY29sIENlcnRpZmljYXRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KngrFR7d5Og1Ma%2BgwJv5eyR2%2BUMKXyk5DwvQ4tnRguo1v65hh88Mt%2FUpRG1sRP3QqDRZpNKDQAKoOhzbmmD7eCVh7V8XU87eTmugF1KEOUkrTY%2BilhjCiW311YFBu8CR4bl7wtk7KuqR9mYiE9M1bVxIW6Y%2B8V%2FFNL43lWsHVhlJGkPwcnD0hroaYNMk7iTAKP6YC0tonZyiCIfCAmoN3Rh1FZ8yOMb47Ru%2FnLMSsIOKugcBE637uO%2B3%2BUjxNzv%2Fnqrh7i9UwSMYq4P4f6OGO%2B9q6jZmJIVAkx%2BvaVQKh4ykn0N9NG%2Fq1a5C5bNpD1EBA1LOIi3H4acjTnV7WFdewIDAQABozQwMjARBgNVHSMBAf8EBzAFgANibGEwHQYDVR0OBBYEFAhzvWrTflunxkYHGbF65UJu2RlGMA0GCSqGSIb3DQEBBQUAA4IBAQDH10kuPZpZ%2B8cOssYdOcAnC11dJ4B2egEUs0gMBYRzvd%2FyKe2iQAo0%2FAFaKrOXxVlOJoto1aF3%2F4kqbFiELfVR71k2uKZ9EhVpcPo9LwO5K71fv7fqBmwk7nZ2MUPdtePQjmIt01yCMzTVcHEPOj1exXKYuOK1RhtVEZV%2BdEkPA3GM%2FLokLWXzKSu32FP5ne6DVJuOhXSaIQKuoKhUGbFERzJ%2FWR5MERO0j7iBKhIFG2UqvlOS29HIvr9%2Bef%2FDlMoE8es41DkexKfE4oR11GUPsgvkuRfaxzt3GhflFBDwk4CuckW5E369hm%2BwBSrkOOzOhdJk%2B%2BUy1kYB4L1U%2FHN9MYICEDCCAgwCAQEwKTAkMSIwIAYDVQQDExlTQ0VQIFByb3RvY29sIENlcnRpZmljYXRlAgEBMAcGBSsOAwIaoIHBMBIGCmCGSAGG%2BEUBCQIxBBMCMTkwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjYxMTI1MTY0OTU0WjAgBgpghkgBhvhFAQkFMRIEENikm1N9SDdJdXbS3f9dniQwIwYJKoZIhvcNAQkEMRYEFIqpJZzE7hd5%2BsQcrfv%2FtwN%2Fl5HqMCwGCmCGSAGG%2BEUBCQcxHhMcK0dsMGdLWHU1aDRsT2I0SXZQUWQxTGZsQmo4PTALBgkqhkiG9w0BAQUEggEAdgCO%2BV4qBWC9lh%2BSSFdeA64heare3dAYHiNfb2FHheVjIzdSepjER66n35HycGItMQgUIWWaYlfPxrHA%2BwrKQ5rYHzP3jNdXC6uHSk%2FPrOlmg%2F1YXlLykOwV6l2BKa23G1DmI9%2FG%2FwHq14LhPd2foFk5t2NwXtA%2BYgEgGAJ1VFsZHlQRsxb67yZUI5xPXTgpF%2BiSknccs6D%2BvDFYG1X78mzuPOdbtInBMfbYLnrEkyFlzDuP6pcfq4KNdATYW%2FkyxqMeoXouNS26RF8gQ9yyo7ttvpXblF%2FAP1HSlrmBNoc0lfDu4vONDUkqc5KG4%2Byeizue4XULL4ZrfYWJwfdfVA%3D%3D" protocol=HTTP/2.0 provisioner=scep public-key="RSA 2048" referer= remote-address=127.0.0.1 request-id=ec273091-1ae7-4564-b1e7-dac57a6abcfa sans="map[dns:[test.localhost]]" serial=119838524537645748824779992073835484055 size=3872 status=200 subject=test.localhost user-agent=Go-http-client/2.0 user-id= valid-from="2026-11-25T16:48:54Z" valid-to="2026-11-26T16:49:54Z" - common_test.go:459: 0 *H  0 1 0+0v *H gc0_ *H P0L1C0?0)0$1"0 USCEP Protocol Certificate0  *H '~9F1۵cqɐfs&ROM\մhsJ̴p5yBh9m%rEqĩW&K%(04=B0ջb "(Yoq/VI-} Z7vw5OAas+3CZ p]-@〔~ QuSNwVE$d͑ṳYob;eanDߍњ %l/BD,t蚾P}BQxl *βC0ksWM1gx*[׉}k2݄лbCyP }bdINqAM&云|>tZS,#BKOX2 Ajθ9#4̡.l - ݾ7'_sn#׻<au%6Qm'PZ+EdK'V7=V*t7r-8Nn r[UV֯:I0Y"mSD)S{`a &]2`+/Kb>`Mg~Ju3ȅf.K<-,'֕| 6!ac8ʸ wf`~}¹ ֲv|j1 # 01lڃԑ?,!0 HmjZQ@|ahz܌ސ#<qOg&Z`3(DHe؏hG@of{+]m){?*AmDoz]K0=r\ U8,<İYRV~$51vMΟN%\?+e˳.>qL09\HU}3>\ȉBv^ݤ}X9Mq:o@ǁo 00|Z(o'd<(2*0  *H  0D1B0@U 9Step E2E | SCEP Regular w/ Windows Client Intermediate CA0 261125164854Z 261126164954Z010Utest.localhost0"0  *H 0 - T{wƾo )|Xc - %VG d쫪G٘OLյq!nUXe$iiL`--vr" 7taV|nrJ*N#zSbｫ٘L~P*2} ѿV ͤ=D K89a]{00U0U%0++0Usj~[FzBnF0U#0Ro_HYagFk!0U0test.localhost0 +d(@ 0  - scep0  *H  kˤ3^L.| .ŌĜ{,މ,BxH"^ĐNStiaM~N7O>@u丌Z,&Kt{ARHu'] r tHZoyqpZp,$L= PB^ٍ9ATEk{Wh|uv9it)4of92_M+j52em&Jg [/g2L5I - $)Ip,pxfI8S+j7ފi7RIp*7gT(yޒGLtP@\E9FV4jW4>\?UJz* - < mosqd#0i:hoQ+CEb9>AW.f0d0U0U00URo_HYagFk!0U#0Ro_HYagFk!0  *H  hc?oÏ\u ,A0 GFH>JB"ū 9FkMs!6> - #DR7kFmm͝#r"J"` Hr =eQ0?"|Cg@hGX%q:Q{u[߆ ɹ>rA1&#;ů̥[H0S5iDW(Rg[&ˏ(SRV)s,Y1l0h0Q0<1:08U 1Step E2E | SCEP Regular w/ Windows Client Root CA$ǂ_Ek0+0 +2025/10/24 00:33:41 Building new tls configuration using step-ca x509 Signer Interface +2025/10/24 00:33:41 Starting Smallstep CLI/0000000-dev (linux/arm64) +2025/10/24 00:33:41 Documentation: https://u.step.sm/docs/ca +2025/10/24 00:33:41 Community Discord: https://u.step.sm/discord +2025/10/24 00:33:41 Config file: loaded from token +2025/10/24 00:33:41 The primary server URL is https://127.0.0.1:35225 +2025/10/24 00:33:41 Root certificates are available at https://127.0.0.1:35225/roots.pem +2025/10/24 00:33:41 Additional configured hostnames: [::1], localhost +2025/10/24 00:33:41 X.509 Root Fingerprint: 5f51a7ea972628792042635369140813d764e043f6521af1c3227c61da750d2f +2025/10/24 00:33:41 Serving HTTPS on [::]:35225 ... +time="2025-10-24T00:33:42+14:00" level=info duration="18.88µs" duration-ns=18880 fields.time="2025-10-24T00:33:42+14:00" method=GET name=ca path=/health protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=6f415cf7-4209-440c-8cb5-37d8f9b1b941 size=16 status=200 user-agent=step-http-client/1.0 user-id= +time="2025-10-24T00:33:42+14:00" level=info duration="39.08µs" duration-ns=39080 fields.time="2025-10-24T00:33:42+14:00" method=GET name=ca path="/scep/scep?operation=GetCACert&message=test" protocol=HTTP/2.0 referer= remote-address=127.0.0.1 request-id=0a02fcd4-0382-438a-abfc-c56150fb32bb size=884 status=200 user-agent=Go-http-client/2.0 user-id= + common_test.go:204: 0p0Xvpgpe I^{w;00  *H  0<1:08U 1Step E2E | SCEP Regular w/ Windows Client Root CA0 251023103341Z 251024103341Z0D1B0@U 9Step E2E | SCEP Regular w/ Windows Client Intermediate CA0"0  *H 0 + V|$d£iPߤK5XFOrSǶҶ o-Bu-ϳѢq]֒_ AWgMJ,nhQFM^־i|W + <2=A82̷ZȠOwoHjzZN` 䛝'2(NŃhҠBM{ 縯4,Sg#F Wg)f0d0U0U00UV pXv{h0U#0V pXv{h0  *H  9Նk8UDd7Շa>O\M,hrwӨx_?QUsEVz0f-(/2\c|{-hswa9fSCP`[|uҳ3'r<@o:T JC1t@Fd + common_test.go:436: 0  *H  z0 v1 0+0Q *H B>0: *H +0'1j0f0P0<1:08U 1Step E2E | SCEP Regular w/ Windows Client Root CAvpgpe I^{w;00  *H 0wO;]+L0LTC1Lx1TtKA"L%2 + P @Ą UT6S|=;(^9ؠ ; ,>jCWӵJHLk 9جX*ϋ9nðBof o|DfD lF@r62d6*ʠO ,8KTIbhEtf3@:{⪹"r)ZKuKGf C1pM |KvL|nf4-0 *H 0+h;|;1jH p~ qߺƤHHzzLOlmvtTŅ-x6em,>S)~2Ět(Hɋ(mB~$MBc(Ԛ0]w"lJ5ɇC"#Lg + kxk4癌7 Kb^=+0c*ɇxھ[+Q`dW.j5R3*fesz1ߕV̅Mf~0plG_VQF\##sLUgs*#fag + vwCip`VZ3 + JE%dw83F6]#0I;G.< + &* + NZ%)ozwob!ؐ3!m':% ehw/P;ZI+ml^Pj O`h1Jи3KnyO~gCg q/E*tZJ|C?_Bgߏ‹?ihaԴ00ߠ0  *H 0$1"0 USCEP Protocol Certificate0 251023093344Z 261023103344Z0$1"0 USCEP Protocol Certificate0"0  *H 0 + wrorǴ1aڳ:83IwjH-1=GnFB5tA{Wt 8afC{ݐAHuƚIeKG`@md8T9)8UXk7E>yl;Cȏy*. dqkՋ|z$ SILP[!5@376-,Q `U=;|pLኙ6&`‘$wTU34020U#0bla0U=m.o~_z2c>0  *H a'ǮYD.J7g Bpj)N[^w˙ɅQS z(p+T;-bZJ~|m6Ya N/3*' + }QeT4zzıX(9u~(T_G$6P7ZS P~< + K +time="2025-10-24T00:33:44+14:00" level=info certificate=MIIDlTCCAn2gAwIBAgIRAKEGmyP4oyiFVw4sG2QxTCUwDQYJKoZIhvcNAQELBQAwRDFCMEAGA1UEAww5U3RlcCBFMkUgfCBTQ0VQIFJlZ3VsYXIgdy8gV2luZG93cyBDbGllbnQgSW50ZXJtZWRpYXRlIENBMB4XDTI1MTAyMzEwMzI0NFoXDTI1MTAyNDEwMzM0NFowGTEXMBUGA1UEAxMOdGVzdC5sb2NhbGhvc3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3tPx36nLvGveoum/jw3Lb0ce0iB6zMdNh2rMPtxeKOoHtOKX+nTNJd6WfaotI+8nnLR8xPUdurMFGnoYYQhY1ERV0hkETe1f2ApTw8HSYzuGpDfU4YWZDe+cXCBDdkEEO3EiXiPd1xprBkUllSwUQR91gipNAr23o7B5klPzcOFQSgvvZOSk45VXkWAHIa+Ph9hY3RT55HIK77KRsic47Q5eGyI+FgRh5Ki7pC2S//gOJcWvVi3yh4HodG9kkheggU0lMqFATjrLsW6QhDjUPQLYz/zc2LaMsUe7UCWCDg1X49z0dO3xwhMpM4YqZ6TYmg6FgwpGGJHcSB1T9+lUzAgMBAAGjgawwgakwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQU7j1tpC714G+sgfp+p/NfejKyYz4wHwYDVR0jBBgwFoAU6lbLCcJw76bVwwJYltt2e4ZoHsowGQYDVR0RBBIwEIIOdGVzdC5sb2NhbGhvc3QwHQYMKwYBBAGCpGTGKEABBA0wCwIBCgQEc2NlcAQAMA0GCSqGSIb3DQEBCwUAA4IBAQAD/ZdrjHtURCpNHvMavhWbg0TpJU4k1zaw1JRPWjii5skGMvRc829UZqIH9Y1tX/Q1JYCje0/34gjRRZ0vi3rZw9L2N2T0Hw367J6bXeu1iyeEU0EP2f1fF/057xjwlf9o4L//5FIHh/3vOlHRkqBjOUzDSz+gZFyXzvYxcfbNS6HETtVaydIyvyXjF97suPdHTNqUGhQ9qheYVkHlcVjcH5yMQkKdyPOaMCxfShki4bLGNdziqV5gpjx+StL0BFx3KfmQ90Giwye/jZH95n9DVr0oYp/pA+x9/mwRI9n84vNPugCuyeVaHWSfy0IjXR20fmMlbXDkj1EWIs54Q7Uc duration=47.370909ms duration-ns=47370909 fields.time="2025-10-24T00:33:44+14:00" issuer="Step E2E | SCEP Regular w/ Windows Client Intermediate CA" method=GET name=ca path="/scep/scep?operation=PKIOperation&message=MIIJiQYJKoZIhvcNAQcCoIIJejCCCXYCAQExCTAHBgUrDgMCGjCCBFEGCSqGSIb3DQEHAaCCBEIEggQ%2BMIIEOgYJKoZIhvcNAQcDoIIEKzCCBCcCAQAxggFqMIIBZgIBADBQMDwxOjA4BgNVBAMMMVN0ZXAgRTJFIHwgU0NFUCBSZWd1bGFyIHcvIFdpbmRvd3MgQ2xpZW50IFJvb3QgQ0ECEHZwZ3BlDMRJXg57d%2BcYOzAwCwYJKoZIhvcNAQEBBIIBADCMd0%2FkOxBdK4hMMExUQzFMeJ4CAbuLEQgxVJ1010tBhSJMJQgyjArH5lAapglAuvXEhO8LDVUb98JUnfy2GRis2RY2U3w9OyherN852KDAIJI7CyyUqT5q4EPh9OAV9fRX07XtSrGyowZIBJTNTGsbCznYrOxYm5Qqts%2BL4t7POfFuw7DqssZCjv38s29mDW%2FDHaV8wwVEZrVElw2twN9sRkD1cuc2MvVk4zYqyqDbTw0GLBukOEtUzkliGuNoRaJ09slmyDNAOq17hYcV4qq5IpzacveyKbZaqEt1S0dmC0MIMQgZcE0g19bj2nxLdkwI4HyAbuQDZgXiFfI0mC0wggKyBgkqhkiG9w0BBwEwEQYFKw4DAgcECKJoxOA7fDsxgIICkB1qSIn4DHB%2BIIpx37qeBB6Sz8akSJ78lkh6sut6TE8abJhtuXbPdFQAzcWFsy2ngQLpxQ94NqeGiGUZbSw%2BU5TJKX4yxJoBlQJ0tKeamAD7EgEoEfhIyYsosm2PtxNCfiSR5U1CYyjUmjDuBV13IuWnBmxK3TWJyYdD%2BSIDI0xnkrASj9wKs9Xca3jwF2s0HeeZjK61N6qD%2BfKNAgxL78liBp%2FWPE4cS99mlsHqC3iBIzme0tEBeIi%2B%2F%2BHyfJ3R%2BVp6FDlVcJs%2F1OHH3lFXHDt0F2OINSN5zf47WnasBDDNXCSgzj%2BPTtaxD6LB16gT%2BzZ7PV%2F5CHQBfiIYjuYDyxOxUGtOB%2BqV4Q5oKRoq0HiosnW6tDBnbnnENusfOVFWRRJn4O1txD5ePZqplxGeKzCsYyrJh3iA2r6Sf8hbKxdRYO9krBBXjS6%2FFWo1UjOK9ypmCGVzG%2Bd6Mebf35VWrMyFyk3l%2BmZ%2BMAHycGwFBUe1x1%2BbFFYXUQaJkUZcI38jc0xVCBeNy2dzxSojGv%2FfZv5hvr0U9hK2lKeBZwrAurGMtHZ3jZG7t0OYaXBgEVbb0Voz2wpKRSVk2Xc4usMzRjYVgJ9dEgQGAyMwqEmgxztHLjzZzNsKxCYbKhMRwIbWCk7FWiWcqimoqavk0%2BESlG%2BHk7WRxXrzd7RvmKW9YpchsP7YkMgRM6uKIcVtEyehojolq4UM7rMDZaloEdx3L1CFvdw77B1af0kriObBhLUeBt9tomzOXtbt2VC98GrM4QmtT6XbYKFo9xOoMYLPSh%2Fn0LgzG0vI8255iBtPfmdDF2flDXEVAbnyL0Uql3Tb6AWSWpSfSnwZk49DP%2BxfQrhnvt%2BP9cKL3T9ppGhh1LTwoIIC%2BzCCAvcwggHfoAMCAQICAQEwDQYJKoZIhvcNAQEFBQAwJDEiMCAGA1UEAxMZU0NFUCBQcm90b2NvbCBDZXJ0aWZpY2F0ZTAeFw0yNTEwMjMwOTMzNDRaFw0yNjEwMjMxMDMzNDRaMCQxIjAgBgNVBAMTGVNDRVAgUHJvdG9jb2wgQ2VydGlmaWNhdGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3tPx36nLvGveoum%2Fjw3Lb0ce0iB6zMdNh2rMPtxeKOoHtOKX%2BnTNJd6WfaotI%2B8nnLR8xPUdurMFGnoYYQhY1ERV0hkETe1f2ApTw8HSYzuGpDfU4YWZDe%2BcXCBDdkEEO3EiXiPd1xprBkUllSwUQR91gipNAr23o7B5klPzcOFQSgvvZOSk45VXkWAHIa%2BPh9hY3RT55HIK77KRsic47Q5eGyI%2BFgRh5Ki7pC2S%2F%2FgOJcWvVi3yh4HodG9kkheggU0lMqFATjrLsW6QhDjUPQLYz%2Fzc2LaMsUe7UCWCDg1X49z0dO3xwhMpM4YqZ6TYmg6FgwpGGJHcSB1T9%2BlUzAgMBAAGjNDAyMBEGA1UdIwEB%2FwQHMAWAA2JsYTAdBgNVHQ4EFgQU7j1tpC714G%2Bsgfp%2Bp%2FNfejKyYz4wDQYJKoZIhvcNAQEFBQADggEBAAdhJ7%2FHrln4RC5KN%2FmThGcLrUJwHmopj06c4lteFJq3vhZ3y5nJhbX0UVObIMB6KHCzv7PFK1Q7LQ%2FQxWIS%2FRoa3hj0xFp%2FvPLDSn7U0nyRbbPB0jbk9R%2FpWaIBF%2Bex19vbYQn5xRH3i04vh6i0MwMqiCeuCn2rUWVUNHp6F6ql8pzDxLGKlYHuWH%2F%2F9ig5mnV%2BKJAI7YVUPOlXDtUaW3SFREJMaRxlsFg68cTsyoiKWES7e61YMcbbKpulkQLdQf0gMyqKcbJzMQLFAn5C%2B7CHfltdKdhJZbxEsEFnD4BQ6AuyEPautObfsIsh5SQc%2BkeAp7eynv8wxU9kF%2FXAqmAxggIQMIICDAIBATApMCQxIjAgBgNVBAMTGVNDRVAgUHJvdG9jb2wgQ2VydGlmaWNhdGUCAQEwBwYFKw4DAhqggcEwEgYKYIZIAYb4RQEJAjEEEwIxOTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0yNTEwMjMxMDMzNDRaMCAGCmCGSAGG%2BEUBCQUxEgQQB8Et9dvtph8Ftt4M4EN3QDAjBgkqhkiG9w0BCQQxFgQU8p7NsqFm1VFbEkf5RGneaZTVD0UwLAYKYIZIAYb4RQEJBzEeExxpYjhHaEpIRjVsbHd6QkljZXo0Q25DZFNtWU09MAsGCSqGSIb3DQEBBQSCAQCfuTv6d3SiG0C%2BTnJ1lDDnpHr2slQpcKxNVtw9GF7TQeMkTlqWzcg9nw1pBN8Kbk%2BmOCiXhmAESTtYSfcoyDxBnkaz%2BhhCNIYfV62Vy83Kb6xMTNc3rlEv7PLvIFg6znXi%2Fhr63xOHHZttAOJo%2Fldnpgu9OODYUfg9hWvhlWHp3OhQnvaFDtEDSG1l%2BHDH71OvrgEHnzBcKTU69J8n811QIvr7sEEc8Wo%2FNTxBKgG%2BdBfVopri%2BgNHgI3bxlFDwYEh4AblI0M1iCsRdxF0%2FsO6ghZaTt2U0St4SEfh0T5fGbZHzSQeDzZQN5YSWu%2F3mVMSpgsbqFB%2BjDyCoQrbS7OJ" protocol=HTTP/2.0 provisioner=scep public-key="RSA 2048" referer= remote-address=127.0.0.1 request-id=f26e5b85-8ea9-42a7-b585-a896eba75f62 sans="map[dns:[test.localhost]]" serial=214040007725946447210091685296630484005 size=3871 status=200 subject=test.localhost user-agent=Go-http-client/2.0 user-id= valid-from="2025-10-23T10:32:44Z" valid-to="2025-10-24T10:33:44Z" + common_test.go:459: 0 *H  01 0+0v *H gc0_ *H P0L1C0?0)0$1"0 USCEP Protocol Certificate0  *H ԔaC2 + E{M*En2ӊǨ).OUniMݺC-+OLJm&^r9g{'HߤM*Dğ9ἯQ<E4*{}p1@&D+ p3'(Lƍ9#Ֆ AYIC$)2\2uq? J?"Zg!av#6aNVh "fSf͇#[P+8`Qn0 *H 0 `He*70Df7H,DK\\AaR@f4mlV + "^EͷnC􊔈fY<+>neUHT: , xq]l3-7 K|p;%'R<mp'[`gv6q$R i>Նrp˿ K ⿭" NW= 'Ow]8j1}?]'@~`k|$n[nUx}=4:.o ؅ND%:?؞eO%xny, URbj |AIfޥ_0\f(g&S18{ӇCKH8GqA%ԤrҔN*7{M  gָVô5&Uzk(o$f>*Lx¯ܰUp1 ŹA.nFAcƝ+5f׽4Ra@_ޓ64W}t:m+Ӌ+K,mϤlZ.n4F稾ϖAmw؊[YMf ޲}bCuӧNIB @|Wk0%;PF䃓rZ5o(tΘ]mO1 @ -㹁@` vS?_ + lg`yz}_3,9+w?۸7̠ 00}#(W,d1L%0  *H  0D1B0@U 9Step E2E | SCEP Regular w/ Windows Client Intermediate CA0 251023103244Z 251024103344Z010Utest.localhost0"0  *H 0 + wrorǴ1aڳ:83IwjH-1=GnFB5tA{Wt 8afC{ݐAHuƚIeKG`@md8T9)8UXk7E>yl;Cȏy*. dqkՋ|z$ SILP[!5@376-,Q `U=;|pLኙ6&`‘$wTU300U0U%0++0U=m.o~_z2c>0U#0V pXv{h0U0test.localhost0 +d(@ 0  + scep0  *H  k{TD*MD%N$6ԔOZ82\oTfm_5%{OE/z7d 잛]뵋'SA_9hR:Qђc9LK?d\1qKNZ2%GLڔ=VAqXBB0,_J"5^`<~J\w)A'CV(b}l#OZdB#]~c%mpQ"xC0p0Xvpgpe I^{w;00  *H  0<1:08U 1Step E2E | SCEP Regular w/ Windows Client Root CA0 251023103341Z 251024103341Z0D1B0@U 9Step E2E | SCEP Regular w/ Windows Client Intermediate CA0"0  *H 0 + V|$d£iPߤK5XFOrSǶҶ o-Bu-ϳѢq]֒_ AWgMJ,nhQFM^־i|W + <2=A82̷ZȠOwoHjzZN` 䛝'2(NŃhҠBM{ 縯4,Sg#F Wg)f0d0U0U00UV pXv{h0U#0V pXv{h0  *H  9Նk8UDd7Շa>O\M,hrwӨx_?QUsEVz0f-(/2\c|{-hswa9fSCP`[|uҳ3'r<@o:T JC1t@Fd1k0g0P0<1:08U 1Step E2E | SCEP Regular w/ Windows Client Root CAvpgpe I^{w;00+0 `HE 130 - `HE 100 *H  1  *H 0 *H  1 261125164954Z0  - `HE 1ؤS}H7Iuv]$0  - `HE 1ؤS}H7Iuv]$0# *H  1IIܴ}Ma0, - `HE 1+Gl0gKXu5h4lOb4IvPQd1LflBj8=0  *H 9̻ XC<?n7ۢ1aٞ7 F  |dp `JA ýDEdC_PPϧP@ ,llɮ0m ?I} IP-hDzI`֘b<6k>Gfu_xg]aZG(;!ڂz{~OCLg¼qs7&cy⴨Wmca +ƯE-IuqwXXZ937*Ʋ[ٴHEI@ lnDO`ـ}ugsȕůK ۀ'-[\f]ՠ"<\|蔱>3[ܠUZ"F +--- PASS: TestIssuesCertificateToEmulatedWindowsClientGo123 (5.50s) PASS -ok github.com/smallstep/certificates/test/integration/scep 15.862s +ok github.com/smallstep/certificates/test/integration/scep 28.871s ? github.com/smallstep/certificates/test/integration/scep/internal/x509 [no test files] === RUN TestNewRequestBody +=== RUN TestNewRequestBody/X509_Certificate === RUN TestNewRequestBody/SSH_Certificate_Request === RUN TestNewRequestBody/SSH_Certificate === RUN TestNewRequestBody/X5C_Certificate === RUN TestNewRequestBody/fail/X5C_Certificate === RUN TestNewRequestBody/Permanent_Identifier === RUN TestNewRequestBody/X509_Certificate_Request -=== RUN TestNewRequestBody/X509_Certificate --- PASS: TestNewRequestBody (0.00s) + --- PASS: TestNewRequestBody/X509_Certificate (0.00s) --- PASS: TestNewRequestBody/SSH_Certificate_Request (0.00s) --- PASS: TestNewRequestBody/SSH_Certificate (0.00s) --- PASS: TestNewRequestBody/X5C_Certificate (0.00s) --- PASS: TestNewRequestBody/fail/X5C_Certificate (0.00s) --- PASS: TestNewRequestBody/Permanent_Identifier (0.00s) --- PASS: TestNewRequestBody/X509_Certificate_Request (0.00s) - --- PASS: TestNewRequestBody/X509_Certificate (0.00s) PASS -ok github.com/smallstep/certificates/webhook 0.019s +ok github.com/smallstep/certificates/webhook 0.057s timeout 5m dh_auto_test -- -run "Test_newHTTPClient|TestPKI_GenerateConfig|TestDB_GetDpopToken|TestDB_CreateDpopToken|TestDB_GetOidcToken|TestDB_CreateOidcToken|TestCustomTemplateOptions" cd _build && go test -vet=off -v -p 12 -run Test_newHTTPClient\|TestPKI_GenerateConfig\|TestDB_GetDpopToken\|TestDB_CreateDpopToken\|TestDB_GetOidcToken\|TestDB_CreateOidcToken\|TestCustomTemplateOptions github.com/smallstep/certificates/acme github.com/smallstep/certificates/acme/api github.com/smallstep/certificates/acme/db/nosql github.com/smallstep/certificates/acme/wire github.com/smallstep/certificates/api github.com/smallstep/certificates/api/log github.com/smallstep/certificates/api/models github.com/smallstep/certificates/api/read github.com/smallstep/certificates/api/render github.com/smallstep/certificates/authority github.com/smallstep/certificates/authority/admin github.com/smallstep/certificates/authority/admin/api github.com/smallstep/certificates/authority/admin/db/nosql github.com/smallstep/certificates/authority/administrator github.com/smallstep/certificates/authority/config github.com/smallstep/certificates/authority/internal/constraints github.com/smallstep/certificates/authority/policy github.com/smallstep/certificates/authority/poolhttp github.com/smallstep/certificates/authority/provisioner github.com/smallstep/certificates/authority/provisioner/gcp github.com/smallstep/certificates/authority/provisioner/wire github.com/smallstep/certificates/ca github.com/smallstep/certificates/ca/client github.com/smallstep/certificates/ca/identity github.com/smallstep/certificates/cas github.com/smallstep/certificates/cas/apiv1 github.com/smallstep/certificates/cas/softcas github.com/smallstep/certificates/cas/stepcas github.com/smallstep/certificates/commands github.com/smallstep/certificates/db github.com/smallstep/certificates/errs github.com/smallstep/certificates/internal/cast github.com/smallstep/certificates/internal/httptransport github.com/smallstep/certificates/internal/metrix github.com/smallstep/certificates/internal/userid github.com/smallstep/certificates/logging github.com/smallstep/certificates/middleware/requestid github.com/smallstep/certificates/monitoring github.com/smallstep/certificates/pki github.com/smallstep/certificates/policy github.com/smallstep/certificates/scep github.com/smallstep/certificates/scep/api github.com/smallstep/certificates/server github.com/smallstep/certificates/templates github.com/smallstep/certificates/test/integration github.com/smallstep/certificates/test/integration/scep github.com/smallstep/certificates/test/integration/scep/internal/x509 github.com/smallstep/certificates/webhook testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/acme 0.074s [no tests to run] +ok github.com/smallstep/certificates/acme 0.148s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/acme/api 0.069s [no tests to run] +ok github.com/smallstep/certificates/acme/api 0.165s [no tests to run] === RUN TestDB_GetDpopToken - wire_test.go:45: - Error Trace: /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:45 + wire_test.go:28: + Error Trace: /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:28 /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:104 Error: Received unexpected error: badgerv2 database not supported github.com/smallstep/nosql.New /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/nosql/nosql.go:65 - github.com/smallstep/certificates/acme/db/nosql.TestDB_GetDpopToken.func2 - /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:44 + github.com/smallstep/certificates/acme/db/nosql.TestDB_GetDpopToken.func1 + /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:27 github.com/smallstep/certificates/acme/db/nosql.TestDB_GetDpopToken /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:104 testing.tRunner @@ -11253,17 +11296,15 @@ Test: TestDB_GetDpopToken --- FAIL: TestDB_GetDpopToken (0.00s) === RUN TestDB_CreateDpopToken -=== RUN TestDB_CreateDpopToken/fail/db.Save -=== NAME TestDB_CreateDpopToken - wire_test.go:157: - Error Trace: /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:157 + wire_test.go:171: + Error Trace: /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:171 /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:182 Error: Received unexpected error: badgerv2 database not supported github.com/smallstep/nosql.New /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/nosql/nosql.go:65 - github.com/smallstep/certificates/acme/db/nosql.TestDB_CreateDpopToken.func2 - /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:156 + github.com/smallstep/certificates/acme/db/nosql.TestDB_CreateDpopToken.func3 + /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:170 github.com/smallstep/certificates/acme/db/nosql.TestDB_CreateDpopToken /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:182 testing.tRunner @@ -11272,7 +11313,6 @@ /usr/lib/go-1.24/src/runtime/asm_arm64.s:1223 Test: TestDB_CreateDpopToken --- FAIL: TestDB_CreateDpopToken (0.00s) - --- PASS: TestDB_CreateDpopToken/fail/db.Save (0.00s) === RUN TestDB_GetOidcToken wire_test.go:216: Error Trace: /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/acme/db/nosql/wire_test.go:216 @@ -11313,62 +11353,62 @@ --- FAIL: TestDB_CreateOidcToken (0.00s) --- PASS: TestDB_CreateOidcToken/fail/db.Save (0.00s) FAIL -FAIL github.com/smallstep/certificates/acme/db/nosql 0.124s +FAIL github.com/smallstep/certificates/acme/db/nosql 0.226s testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/acme/wire 0.025s [no tests to run] +ok github.com/smallstep/certificates/acme/wire 0.073s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/api 0.079s [no tests to run] +ok github.com/smallstep/certificates/api 0.217s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/api/log 0.032s [no tests to run] +ok github.com/smallstep/certificates/api/log 0.088s [no tests to run] ? github.com/smallstep/certificates/api/models [no test files] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/api/read 0.073s [no tests to run] +ok github.com/smallstep/certificates/api/read 0.135s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/api/render 0.048s [no tests to run] +ok github.com/smallstep/certificates/api/render 0.070s [no tests to run] === RUN Test_newHTTPClient -2026/11/25 04:50:12 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s +2025/10/24 00:33:58 failed to initialize JWK provisioner "uninitialized": claims: MaxCertDuration cannot be less than MinCertDuration: MaxCertDuration - 1m0s, MinCertDuration - 5m0s === RUN Test_newHTTPClient/SystemCertPool http_client_test.go:72: Error Trace: /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/authority/http_client_test.go:72 Error: Received unexpected error: - Get "https://smallstep.com": dial tcp: lookup smallstep.com on [::1]:53: read udp [::1]:48825->[::1]:53: read: connection refused + Get "https://smallstep.com": dial tcp: lookup smallstep.com on [::1]:53: read udp [::1]:33295->[::1]:53: read: connection refused Test: Test_newHTTPClient/SystemCertPool === RUN Test_newHTTPClient/LocalCertPool === RUN Test_newHTTPClient/LocalCertPool/DefaultClient -2026/11/25 04:50:12 http: TLS handshake error from 127.0.0.1:43006: read tcp 127.0.0.1:41127->127.0.0.1:43006: use of closed network connection +2025/10/24 00:33:58 http: TLS handshake error from 127.0.0.1:43572: read tcp 127.0.0.1:46323->127.0.0.1:43572: use of closed network connection === RUN Test_newHTTPClient/custom_transport ---- FAIL: Test_newHTTPClient (0.09s) - --- FAIL: Test_newHTTPClient/SystemCertPool (0.01s) - --- PASS: Test_newHTTPClient/LocalCertPool (0.01s) - --- PASS: Test_newHTTPClient/LocalCertPool/DefaultClient (0.00s) +--- FAIL: Test_newHTTPClient (0.11s) + --- FAIL: Test_newHTTPClient/SystemCertPool (0.00s) + --- PASS: Test_newHTTPClient/LocalCertPool (0.02s) + --- PASS: Test_newHTTPClient/LocalCertPool/DefaultClient (0.01s) --- PASS: Test_newHTTPClient/custom_transport (0.00s) FAIL -FAIL github.com/smallstep/certificates/authority 0.171s +FAIL github.com/smallstep/certificates/authority 0.303s ? github.com/smallstep/certificates/authority/admin [no test files] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/authority/admin/api 0.139s [no tests to run] +ok github.com/smallstep/certificates/authority/admin/api 0.269s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/authority/admin/db/nosql 0.087s [no tests to run] +ok github.com/smallstep/certificates/authority/admin/db/nosql 0.150s [no tests to run] ? github.com/smallstep/certificates/authority/administrator [no test files] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/authority/config 0.094s [no tests to run] +ok github.com/smallstep/certificates/authority/config 0.142s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/authority/internal/constraints 0.033s [no tests to run] +ok github.com/smallstep/certificates/authority/internal/constraints 0.120s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/authority/policy 0.085s [no tests to run] +ok github.com/smallstep/certificates/authority/policy 0.125s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/authority/poolhttp 0.033s [no tests to run] +ok github.com/smallstep/certificates/authority/poolhttp 0.107s [no tests to run] === RUN TestCustomTemplateOptions === RUN TestCustomTemplateOptions/ok === RUN TestCustomTemplateOptions/okIID @@ -11382,7 +11422,7 @@ === RUN TestCustomTemplateOptions/okNullTemplateData === RUN TestCustomTemplateOptions/fail === RUN TestCustomTemplateOptions/failTemplateData ---- PASS: TestCustomTemplateOptions (0.01s) +--- PASS: TestCustomTemplateOptions (0.02s) --- PASS: TestCustomTemplateOptions/ok (0.00s) --- PASS: TestCustomTemplateOptions/okIID (0.00s) --- PASS: TestCustomTemplateOptions/okNoData (0.00s) @@ -11391,62 +11431,58 @@ --- PASS: TestCustomTemplateOptions/okFile (0.00s) --- PASS: TestCustomTemplateOptions/okBase64 (0.00s) --- PASS: TestCustomTemplateOptions/okUserOptions (0.00s) - --- PASS: TestCustomTemplateOptions/okBadUserOptions (0.00s) + --- PASS: TestCustomTemplateOptions/okBadUserOptions (0.01s) --- PASS: TestCustomTemplateOptions/okNullTemplateData (0.00s) --- PASS: TestCustomTemplateOptions/fail (0.00s) --- PASS: TestCustomTemplateOptions/failTemplateData (0.00s) PASS -ok github.com/smallstep/certificates/authority/provisioner 0.110s +ok github.com/smallstep/certificates/authority/provisioner 0.248s testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/authority/provisioner/gcp 0.062s [no tests to run] +ok github.com/smallstep/certificates/authority/provisioner/gcp 0.180s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/authority/provisioner/wire 0.043s [no tests to run] +ok github.com/smallstep/certificates/authority/provisioner/wire 0.108s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/ca 0.112s [no tests to run] +ok github.com/smallstep/certificates/ca 0.263s [no tests to run] ? github.com/smallstep/certificates/ca/client [no test files] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/ca/identity 0.074s [no tests to run] +ok github.com/smallstep/certificates/ca/identity 0.098s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/cas 0.050s [no tests to run] +ok github.com/smallstep/certificates/cas 0.109s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/cas/apiv1 0.033s [no tests to run] +ok github.com/smallstep/certificates/cas/apiv1 0.075s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/cas/softcas 0.061s [no tests to run] +ok github.com/smallstep/certificates/cas/softcas 0.143s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/cas/stepcas 0.656s [no tests to run] +ok github.com/smallstep/certificates/cas/stepcas 1.385s [no tests to run] ? github.com/smallstep/certificates/commands [no test files] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/db 0.059s [no tests to run] +ok github.com/smallstep/certificates/db 0.182s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/errs 0.029s [no tests to run] +ok github.com/smallstep/certificates/errs 0.072s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/internal/cast 0.035s [no tests to run] +ok github.com/smallstep/certificates/internal/cast 0.053s [no tests to run] ? github.com/smallstep/certificates/internal/httptransport [no test files] ? github.com/smallstep/certificates/internal/metrix [no test files] ? github.com/smallstep/certificates/internal/userid [no test files] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/logging 0.027s [no tests to run] +ok github.com/smallstep/certificates/logging 0.033s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/middleware/requestid 0.039s [no tests to run] +ok github.com/smallstep/certificates/middleware/requestid 0.027s [no tests to run] ? github.com/smallstep/certificates/monitoring [no test files] === RUN TestPKI_GenerateConfig -=== RUN TestPKI_GenerateConfig/ok/with-acme -=== RUN TestPKI_GenerateConfig/ok/with-acme-and-double-provisioner-name -=== RUN TestPKI_GenerateConfig/ok/with-ssh -=== RUN TestPKI_GenerateConfig/ok/with-ssh-and-double-provisioner-name === RUN TestPKI_GenerateConfig/ok/with-admin pki_test.go:281: Error Trace: /build/reproducible-path/golang-github-smallstep-certificates-0.28.4/_build/src/github.com/smallstep/certificates/pki/pki_test.go:281 @@ -11457,38 +11493,42 @@ Error: Expected value not to be nil. Test: TestPKI_GenerateConfig/ok/with-admin === RUN TestPKI_GenerateConfig/ok/simple +=== RUN TestPKI_GenerateConfig/ok/with-acme +=== RUN TestPKI_GenerateConfig/ok/with-acme-and-double-provisioner-name +=== RUN TestPKI_GenerateConfig/ok/with-ssh +=== RUN TestPKI_GenerateConfig/ok/with-ssh-and-double-provisioner-name --- FAIL: TestPKI_GenerateConfig (0.00s) + --- FAIL: TestPKI_GenerateConfig/ok/with-admin (0.00s) + --- PASS: TestPKI_GenerateConfig/ok/simple (0.00s) --- PASS: TestPKI_GenerateConfig/ok/with-acme (0.00s) --- PASS: TestPKI_GenerateConfig/ok/with-acme-and-double-provisioner-name (0.00s) --- PASS: TestPKI_GenerateConfig/ok/with-ssh (0.00s) --- PASS: TestPKI_GenerateConfig/ok/with-ssh-and-double-provisioner-name (0.00s) - --- FAIL: TestPKI_GenerateConfig/ok/with-admin (0.00s) - --- PASS: TestPKI_GenerateConfig/ok/simple (0.00s) FAIL -FAIL github.com/smallstep/certificates/pki 0.093s +FAIL github.com/smallstep/certificates/pki 0.204s testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/policy 0.034s [no tests to run] +ok github.com/smallstep/certificates/policy 0.120s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/scep 0.060s [no tests to run] +ok github.com/smallstep/certificates/scep 0.104s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/scep/api 0.066s [no tests to run] +ok github.com/smallstep/certificates/scep/api 0.087s [no tests to run] ? github.com/smallstep/certificates/server [no test files] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/templates 0.062s [no tests to run] +ok github.com/smallstep/certificates/templates 0.112s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/test/integration 0.074s [no tests to run] +ok github.com/smallstep/certificates/test/integration 0.218s [no tests to run] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/test/integration/scep 0.037s [no tests to run] +ok github.com/smallstep/certificates/test/integration/scep 0.161s [no tests to run] ? github.com/smallstep/certificates/test/integration/scep/internal/x509 [no test files] testing: warning: no tests to run PASS -ok github.com/smallstep/certificates/webhook 0.014s [no tests to run] +ok github.com/smallstep/certificates/webhook 0.088s [no tests to run] FAIL dh_auto_test: error: cd _build && go test -vet=off -v -p 12 -run Test_newHTTPClient\|TestPKI_GenerateConfig\|TestDB_GetDpopToken\|TestDB_CreateDpopToken\|TestDB_GetOidcToken\|TestDB_CreateOidcToken\|TestCustomTemplateOptions github.com/smallstep/certificates/acme github.com/smallstep/certificates/acme/api github.com/smallstep/certificates/acme/db/nosql github.com/smallstep/certificates/acme/wire github.com/smallstep/certificates/api github.com/smallstep/certificates/api/log github.com/smallstep/certificates/api/models github.com/smallstep/certificates/api/read github.com/smallstep/certificates/api/render github.com/smallstep/certificates/authority github.com/smallstep/certificates/authority/admin github.com/smallstep/certificates/authority/admin/api github.com/smallstep/certificates/authority/admin/db/nosql github.com/smallstep/certificates/authority/administrator github.com/smallstep/certificates/authority/config github.com/smallstep/certificates/authority/internal/constraints github.com/smallstep/certificates/authority/policy github.com/smallstep/certificates/authority/poolhttp github.com/smallstep/certificates/authority/provisioner github.com/smallstep/certificates/authority/provisioner/gcp github.com/smallstep/certificates/authority/provisioner/wire github.com/smallstep/certificates/ca github.com/smallstep/certificates/ca/client github.com/smallstep/certificates/ca/identity github.com/smallstep/certificates/cas github.com/smallstep/certificates/cas/apiv1 github.com/smallstep/certificates/cas/softcas github.com/smallstep/certificates/cas/stepcas github.com/smallstep/certificates/commands github.com/smallstep/certificates/db github.com/smallstep/certificates/errs github.com/smallstep/certificates/internal/cast github.com/smallstep/certificates/internal/httptransport github.com/smallstep/certificates/internal/metrix github.com/smallstep/certificates/internal/userid github.com/smallstep/certificates/logging github.com/smallstep/certificates/middleware/requestid github.com/smallstep/certificates/monitoring github.com/smallstep/certificates/pki github.com/smallstep/certificates/policy github.com/smallstep/certificates/scep github.com/smallstep/certificates/scep/api github.com/smallstep/certificates/server github.com/smallstep/certificates/templates github.com/smallstep/certificates/test/integration github.com/smallstep/certificates/test/integration/scep github.com/smallstep/certificates/test/integration/scep/internal/x509 github.com/smallstep/certificates/webhook returned exit code 1 make[1]: [debian/rules:31: override_dh_auto_test] Error 25 (ignored) @@ -11523,12 +11563,14 @@ dpkg-buildpackage: info: binary-only upload (no source included) dpkg-genchanges: info: not including original source code in upload I: copying local configuration +I: user script /srv/workspace/pbuilder/1693831/tmp/hooks/B01_cleanup starting +I: user script /srv/workspace/pbuilder/1693831/tmp/hooks/B01_cleanup finished I: unmounting dev/ptmx filesystem I: unmounting dev/pts filesystem I: unmounting dev/shm filesystem I: unmounting proc filesystem I: unmounting sys filesystem I: cleaning the build env -I: removing directory /srv/workspace/pbuilder/1953156 and its subdirectories -I: Current time: Wed Nov 25 04:50:35 -12 2026 -I: pbuilder-time-stamp: 1795625435 +I: removing directory /srv/workspace/pbuilder/1693831 and its subdirectories +I: Current time: Fri Oct 24 00:34:56 +14 2025 +I: pbuilder-time-stamp: 1761215696