ansible-playbook [core 2.12.6]
config file = /etc/ansible/ansible.cfg
configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
ansible python module location = /usr/lib/python3.9/site-packages/ansible
ansible collection location = /tmp/tmpy2gf3dq8
executable location = /usr/bin/ansible-playbook
python version = 3.9.13 (main, May 18 2022, 00:00:00) [GCC 11.3.1 20220421 (Red Hat 11.3.1-2)]
jinja version = 2.11.3
libyaml = True
Using /etc/ansible/ansible.cfg as config file
Skipping callback 'debug', as we already have a stdout callback.
Skipping callback 'default', as we already have a stdout callback.
Skipping callback 'minimal', as we already have a stdout callback.
Skipping callback 'oneline', as we already have a stdout callback.
PLAYBOOK: tests_many_self_signed.yml *******************************************
2 plays in /tmp/tmpzvh1g0rm/tests/tests_many_self_signed.yml
PLAY [Issue many self-signed certificates] *************************************
TASK [Gathering Facts] *********************************************************
task path: /tmp/tmpzvh1g0rm/tests/tests_many_self_signed.yml:2
Wednesday 06 July 2022 23:23:53 +0000 (0:00:00.013) 0:00:00.013 ********
ok: [/cache/fedora-36.qcow2.snap]
META: ran handlers
TASK [linux-system-roles.certificate : Set version specific variables] *********
task path: /tmp/tmpzvh1g0rm/tests/roles/linux-system-roles.certificate/tasks/main.yml:2
Wednesday 06 July 2022 23:23:54 +0000 (0:00:01.099) 0:00:01.112 ********
included: /tmp/tmpzvh1g0rm/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml for /cache/fedora-36.qcow2.snap
TASK [linux-system-roles.certificate : Ensure ansible_facts used by role] ******
task path: /tmp/tmpzvh1g0rm/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml:2
Wednesday 06 July 2022 23:23:54 +0000 (0:00:00.025) 0:00:01.138 ********
ok: [/cache/fedora-36.qcow2.snap]
TASK [linux-system-roles.certificate : Set platform/version specific variables] ***
task path: /tmp/tmpzvh1g0rm/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml:8
Wednesday 06 July 2022 23:23:55 +0000 (0:00:00.552) 0:00:01.690 ********
skipping: [/cache/fedora-36.qcow2.snap] => (item=RedHat.yml) => {
"ansible_loop_var": "item",
"changed": false,
"item": "RedHat.yml",
"skip_reason": "Conditional result was False"
}
skipping: [/cache/fedora-36.qcow2.snap] => (item=Fedora.yml) => {
"ansible_loop_var": "item",
"changed": false,
"item": "Fedora.yml",
"skip_reason": "Conditional result was False"
}
skipping: [/cache/fedora-36.qcow2.snap] => (item=Fedora_36.yml) => {
"ansible_loop_var": "item",
"changed": false,
"item": "Fedora_36.yml",
"skip_reason": "Conditional result was False"
}
skipping: [/cache/fedora-36.qcow2.snap] => (item=Fedora_36.yml) => {
"ansible_loop_var": "item",
"changed": false,
"item": "Fedora_36.yml",
"skip_reason": "Conditional result was False"
}
TASK [linux-system-roles.certificate : Ensure certificate role dependencies are installed] ***
task path: /tmp/tmpzvh1g0rm/tests/roles/linux-system-roles.certificate/tasks/main.yml:5
Wednesday 06 July 2022 23:23:55 +0000 (0:00:00.039) 0:00:01.729 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
TASK [linux-system-roles.certificate : Ensure provider packages are installed] ***
task path: /tmp/tmpzvh1g0rm/tests/roles/linux-system-roles.certificate/tasks/main.yml:22
Wednesday 06 July 2022 23:23:57 +0000 (0:00:01.905) 0:00:03.635 ********
ok: [/cache/fedora-36.qcow2.snap] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
TASK [linux-system-roles.certificate : Ensure pre-scripts hooks directory exists] ***
task path: /tmp/tmpzvh1g0rm/tests/roles/linux-system-roles.certificate/tasks/main.yml:33
Wednesday 06 July 2022 23:23:58 +0000 (0:00:01.730) 0:00:05.366 ********
ok: [/cache/fedora-36.qcow2.snap] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": false,
"gid": 0,
"group": "root",
"mode": "0700",
"owner": "root",
"path": "/etc/certmonger//pre-scripts",
"secontext": "unconfined_u:object_r:etc_t:s0",
"size": 0,
"state": "directory",
"uid": 0
}
TASK [linux-system-roles.certificate : Ensure post-scripts hooks directory exists] ***
task path: /tmp/tmpzvh1g0rm/tests/roles/linux-system-roles.certificate/tasks/main.yml:59
Wednesday 06 July 2022 23:23:59 +0000 (0:00:00.557) 0:00:05.923 ********
ok: [/cache/fedora-36.qcow2.snap] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": false,
"gid": 0,
"group": "root",
"mode": "0700",
"owner": "root",
"path": "/etc/certmonger//post-scripts",
"secontext": "unconfined_u:object_r:etc_t:s0",
"size": 0,
"state": "directory",
"uid": 0
}
TASK [linux-system-roles.certificate : Ensure provider service is running] *****
task path: /tmp/tmpzvh1g0rm/tests/roles/linux-system-roles.certificate/tasks/main.yml:88
Wednesday 06 July 2022 23:23:59 +0000 (0:00:00.410) 0:00:06.334 ********
ok: [/cache/fedora-36.qcow2.snap] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": false,
"enabled": true,
"name": "certmonger",
"state": "started",
"status": {
"ActiveEnterTimestamp": "Wed 2022-07-06 23:17:45 UTC",
"ActiveEnterTimestampMonotonic": "213660433",
"ActiveExitTimestampMonotonic": "0",
"ActiveState": "active",
"After": "sysinit.target systemd-journald.socket basic.target dbus.socket network.target system.slice dbus-broker.service syslog.target",
"AllowIsolate": "no",
"AssertResult": "yes",
"AssertTimestamp": "Wed 2022-07-06 23:17:45 UTC",
"AssertTimestampMonotonic": "213648024",
"Before": "shutdown.target multi-user.target",
"BlockIOAccounting": "no",
"BlockIOWeight": "[not set]",
"BusName": "org.fedorahosted.certmonger",
"CPUAccounting": "yes",
"CPUAffinityFromNUMA": "no",
"CPUQuotaPerSecUSec": "infinity",
"CPUQuotaPeriodUSec": "infinity",
"CPUSchedulingPolicy": "0",
"CPUSchedulingPriority": "0",
"CPUSchedulingResetOnFork": "no",
"CPUShares": "[not set]",
"CPUUsageNSec": "47129925000",
"CPUWeight": "[not set]",
"CacheDirectoryMode": "0755",
"CanFreeze": "yes",
"CanIsolate": "no",
"CanReload": "no",
"CanStart": "yes",
"CanStop": "yes",
"CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore",
"CleanResult": "success",
"CollectMode": "inactive",
"ConditionResult": "yes",
"ConditionTimestamp": "Wed 2022-07-06 23:17:45 UTC",
"ConditionTimestampMonotonic": "213648022",
"ConfigurationDirectoryMode": "0755",
"Conflicts": "shutdown.target",
"ControlGroup": "/system.slice/certmonger.service",
"ControlPID": "0",
"CoredumpFilter": "0x33",
"DefaultDependencies": "yes",
"DefaultMemoryLow": "0",
"DefaultMemoryMin": "0",
"Delegate": "no",
"Description": "Certificate monitoring and PKI enrollment",
"DevicePolicy": "auto",
"DynamicUser": "no",
"EnvironmentFiles": "/etc/sysconfig/certmonger (ignore_errors=yes)",
"ExecMainCode": "0",
"ExecMainExitTimestampMonotonic": "0",
"ExecMainPID": "6744",
"ExecMainStartTimestamp": "Wed 2022-07-06 23:17:45 UTC",
"ExecMainStartTimestampMonotonic": "213649397",
"ExecMainStatus": "0",
"ExecStart": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /run/certmonger.pid -n $OPTS ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExecStartEx": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /run/certmonger.pid -n $OPTS ; flags= ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExitType": "main",
"FailureAction": "none",
"FileDescriptorStoreMax": "0",
"FinalKillSignal": "9",
"FragmentPath": "/usr/lib/systemd/system/certmonger.service",
"FreezerState": "running",
"GID": "[not set]",
"GuessMainPID": "yes",
"IOAccounting": "no",
"IOReadBytes": "18446744073709551615",
"IOReadOperations": "18446744073709551615",
"IOSchedulingClass": "2",
"IOSchedulingPriority": "4",
"IOWeight": "[not set]",
"IOWriteBytes": "18446744073709551615",
"IOWriteOperations": "18446744073709551615",
"IPAccounting": "no",
"IPEgressBytes": "[no data]",
"IPEgressPackets": "[no data]",
"IPIngressBytes": "[no data]",
"IPIngressPackets": "[no data]",
"Id": "certmonger.service",
"IgnoreOnIsolate": "no",
"IgnoreSIGPIPE": "yes",
"InactiveEnterTimestampMonotonic": "0",
"InactiveExitTimestamp": "Wed 2022-07-06 23:17:45 UTC",
"InactiveExitTimestampMonotonic": "213649980",
"InvocationID": "cb854aa806d149ff883eec765d1c0f42",
"JobRunningTimeoutUSec": "infinity",
"JobTimeoutAction": "none",
"JobTimeoutUSec": "infinity",
"KeyringMode": "private",
"KillMode": "control-group",
"KillSignal": "15",
"LimitAS": "infinity",
"LimitASSoft": "infinity",
"LimitCORE": "infinity",
"LimitCORESoft": "infinity",
"LimitCPU": "infinity",
"LimitCPUSoft": "infinity",
"LimitDATA": "infinity",
"LimitDATASoft": "infinity",
"LimitFSIZE": "infinity",
"LimitFSIZESoft": "infinity",
"LimitLOCKS": "infinity",
"LimitLOCKSSoft": "infinity",
"LimitMEMLOCK": "8388608",
"LimitMEMLOCKSoft": "8388608",
"LimitMSGQUEUE": "819200",
"LimitMSGQUEUESoft": "819200",
"LimitNICE": "0",
"LimitNICESoft": "0",
"LimitNOFILE": "524288",
"LimitNOFILESoft": "1024",
"LimitNPROC": "15524",
"LimitNPROCSoft": "15524",
"LimitRSS": "infinity",
"LimitRSSSoft": "infinity",
"LimitRTPRIO": "0",
"LimitRTPRIOSoft": "0",
"LimitRTTIME": "infinity",
"LimitRTTIMESoft": "infinity",
"LimitSIGPENDING": "15524",
"LimitSIGPENDINGSoft": "15524",
"LimitSTACK": "infinity",
"LimitSTACKSoft": "8388608",
"LoadState": "loaded",
"LockPersonality": "no",
"LogLevelMax": "-1",
"LogRateLimitBurst": "0",
"LogRateLimitIntervalUSec": "0",
"LogsDirectoryMode": "0755",
"MainPID": "6744",
"ManagedOOMMemoryPressure": "auto",
"ManagedOOMMemoryPressureLimit": "0",
"ManagedOOMPreference": "none",
"ManagedOOMSwap": "auto",
"MemoryAccounting": "yes",
"MemoryAvailable": "infinity",
"MemoryCurrent": "2949120",
"MemoryDenyWriteExecute": "no",
"MemoryHigh": "infinity",
"MemoryLimit": "infinity",
"MemoryLow": "0",
"MemoryMax": "infinity",
"MemoryMin": "0",
"MemorySwapMax": "infinity",
"MountAPIVFS": "no",
"NFileDescriptorStore": "0",
"NRestarts": "0",
"NUMAPolicy": "n/a",
"Names": "certmonger.service",
"NeedDaemonReload": "no",
"Nice": "0",
"NoNewPrivileges": "no",
"NonBlocking": "no",
"NotifyAccess": "none",
"OOMPolicy": "stop",
"OOMScoreAdjust": "0",
"OnFailureJobMode": "replace",
"OnSuccessJobMode": "fail",
"PIDFile": "/run/certmonger.pid",
"PartOf": "dbus-broker.service",
"Perpetual": "no",
"PrivateDevices": "no",
"PrivateIPC": "no",
"PrivateMounts": "no",
"PrivateNetwork": "no",
"PrivateTmp": "no",
"PrivateUsers": "no",
"ProcSubset": "all",
"ProtectClock": "no",
"ProtectControlGroups": "no",
"ProtectHome": "no",
"ProtectHostname": "no",
"ProtectKernelLogs": "no",
"ProtectKernelModules": "no",
"ProtectKernelTunables": "no",
"ProtectProc": "default",
"ProtectSystem": "no",
"RefuseManualStart": "no",
"RefuseManualStop": "no",
"ReloadResult": "success",
"RemainAfterExit": "no",
"RemoveIPC": "no",
"Requires": "sysinit.target dbus.socket system.slice",
"Restart": "no",
"RestartKillSignal": "15",
"RestartUSec": "100ms",
"RestrictNamespaces": "no",
"RestrictRealtime": "no",
"RestrictSUIDSGID": "no",
"Result": "success",
"RootDirectoryStartOnly": "no",
"RuntimeDirectoryMode": "0755",
"RuntimeDirectoryPreserve": "no",
"RuntimeMaxUSec": "infinity",
"RuntimeRandomizedExtraUSec": "0",
"SameProcessGroup": "no",
"SecureBits": "0",
"SendSIGHUP": "no",
"SendSIGKILL": "yes",
"Slice": "system.slice",
"StandardError": "inherit",
"StandardInput": "null",
"StandardOutput": "journal",
"StartLimitAction": "none",
"StartLimitBurst": "5",
"StartLimitIntervalUSec": "10s",
"StartupBlockIOWeight": "[not set]",
"StartupCPUShares": "[not set]",
"StartupCPUWeight": "[not set]",
"StartupIOWeight": "[not set]",
"StateChangeTimestamp": "Wed 2022-07-06 23:21:36 UTC",
"StateChangeTimestampMonotonic": "444501790",
"StateDirectoryMode": "0755",
"StatusErrno": "0",
"StopWhenUnneeded": "no",
"SubState": "running",
"SuccessAction": "none",
"SyslogFacility": "3",
"SyslogLevel": "6",
"SyslogLevelPrefix": "yes",
"SyslogPriority": "30",
"SystemCallErrorNumber": "2147483646",
"TTYReset": "no",
"TTYVHangup": "no",
"TTYVTDisallocate": "no",
"TasksAccounting": "yes",
"TasksCurrent": "1",
"TasksMax": "4657",
"TimeoutAbortUSec": "1min 30s",
"TimeoutCleanUSec": "infinity",
"TimeoutStartFailureMode": "terminate",
"TimeoutStartUSec": "1min 30s",
"TimeoutStopFailureMode": "terminate",
"TimeoutStopUSec": "1min 30s",
"TimerSlackNSec": "50000",
"Transient": "no",
"Type": "dbus",
"UID": "[not set]",
"UMask": "0022",
"UnitFilePreset": "disabled",
"UnitFileState": "enabled",
"UtmpMode": "init",
"WantedBy": "multi-user.target",
"WatchdogSignal": "6",
"WatchdogTimestampMonotonic": "0",
"WatchdogUSec": "0"
}
}
TASK [linux-system-roles.certificate : Ensure certificate requests] ************
task path: /tmp/tmpzvh1g0rm/tests/roles/linux-system-roles.certificate/tasks/main.yml:100
Wednesday 06 July 2022 23:24:00 +0000 (0:00:00.776) 0:00:07.111 ********
changed: [/cache/fedora-36.qcow2.snap] => (item={'name': 'mycert_many_self_signed', 'dns': 'www.example.com', 'ca': 'self-sign'}) => {
"ansible_loop_var": "item",
"changed": true,
"item": {
"ca": "self-sign",
"dns": "www.example.com",
"name": "mycert_many_self_signed"
}
}
MSG:
Certificate requested (new).
changed: [/cache/fedora-36.qcow2.snap] => (item={'name': 'other-cert', 'dns': 'www.example.org', 'ca': 'self-sign'}) => {
"ansible_loop_var": "item",
"changed": true,
"item": {
"ca": "self-sign",
"dns": "www.example.org",
"name": "other-cert"
}
}
MSG:
Certificate requested (new).
changed: [/cache/fedora-36.qcow2.snap] => (item={'name': 'another-cert', 'dns': 'www.example.net', 'ca': 'self-sign'}) => {
"ansible_loop_var": "item",
"changed": true,
"item": {
"ca": "self-sign",
"dns": "www.example.net",
"name": "another-cert"
}
}
MSG:
Certificate requested (new).
META: role_complete for /cache/fedora-36.qcow2.snap
META: ran handlers
META: ran handlers
PLAY [Verify certificate] ******************************************************
TASK [Gathering Facts] *********************************************************
task path: /tmp/tmpzvh1g0rm/tests/tests_many_self_signed.yml:18
Wednesday 06 July 2022 23:24:04 +0000 (0:00:03.555) 0:00:10.667 ********
ok: [/cache/fedora-36.qcow2.snap]
META: ran handlers
TASK [Verify each certificate] *************************************************
task path: /tmp/tmpzvh1g0rm/tests/tests_many_self_signed.yml:50
Wednesday 06 July 2022 23:24:04 +0000 (0:00:00.789) 0:00:11.456 ********
included: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml for /cache/fedora-36.qcow2.snap => (item={'path': '/etc/pki/tls/certs/mycert_many_self_signed.crt', 'key_path': '/etc/pki/tls/private/mycert_many_self_signed.key', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'www.example.com'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'www.example.com'}]})
included: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml for /cache/fedora-36.qcow2.snap => (item={'path': '/etc/pki/tls/certs/other-cert.crt', 'key_path': '/etc/pki/tls/private/other-cert.key', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'www.example.org'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'www.example.org'}]})
included: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml for /cache/fedora-36.qcow2.snap => (item={'path': '/etc/pki/tls/certs/another-cert.crt', 'key_path': '/etc/pki/tls/private/another-cert.key', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'www.example.net'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'www.example.net'}]})
TASK [Set virtualenv_path] *****************************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:2
Wednesday 06 July 2022 23:24:04 +0000 (0:00:00.051) 0:00:11.508 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"ansible_facts": {
"__virtualenv_path": "/tmp/certificate-tests-venv"
},
"changed": false
}
TASK [Ensure python3 is installed] *********************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:6
Wednesday 06 July 2022 23:24:05 +0000 (0:00:00.026) 0:00:11.534 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
TASK [Install the package, force upgrade] **************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:11
Wednesday 06 July 2022 23:24:06 +0000 (0:00:01.889) 0:00:13.424 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"cmd": [
"/tmp/certificate-tests-venv/bin/pip3",
"install",
"-U",
"pip"
],
"name": [
"pip"
],
"requirements": null,
"state": "latest",
"version": null,
"virtualenv": "/tmp/certificate-tests-venv"
}
STDOUT:
Requirement already satisfied: pip in ./certificate-tests-venv/lib/python3.10/site-packages (22.1.2)
TASK [Install certreader] ******************************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:18
Wednesday 06 July 2022 23:24:08 +0000 (0:00:01.163) 0:00:14.587 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"cmd": [
"/tmp/certificate-tests-venv/bin/pip3",
"install",
"cryptography<35",
"certreader>=0.1.1"
],
"name": [
"cryptography<35",
"certreader>=0.1.1"
],
"requirements": null,
"state": "present",
"version": null,
"virtualenv": "/tmp/certificate-tests-venv"
}
STDOUT:
Requirement already satisfied: cryptography<35 in ./certificate-tests-venv/lib/python3.10/site-packages (3.4.8)
Requirement already satisfied: certreader>=0.1.1 in ./certificate-tests-venv/lib/python3.10/site-packages (0.1.1)
Requirement already satisfied: cffi>=1.12 in ./certificate-tests-venv/lib/python3.10/site-packages (from cryptography<35) (1.15.1)
Requirement already satisfied: pyasn1 in ./certificate-tests-venv/lib/python3.10/site-packages (from certreader>=0.1.1) (0.4.8)
Requirement already satisfied: pyyaml in ./certificate-tests-venv/lib/python3.10/site-packages (from certreader>=0.1.1) (6.0)
Requirement already satisfied: pycparser in ./certificate-tests-venv/lib/python3.10/site-packages (from cffi>=1.12->cryptography<35) (2.21)
TASK [Retrieve certificate file stats] *****************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:26
Wednesday 06 July 2022 23:24:08 +0000 (0:00:00.880) 0:00:15.467 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"stat": {
"atime": 1657149841.2103922,
"attr_flags": "",
"attributes": [],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "e3eff10870b5a23f2b5ded79d7906883077b76cc",
"ctime": 1657149841.2073922,
"dev": 31,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 0,
"gr_name": "root",
"inode": 60620,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0600",
"mtime": 1657149841.2073922,
"nlink": 1,
"path": "/etc/pki/tls/certs/mycert_many_self_signed.crt",
"pw_name": "root",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1294,
"uid": 0,
"version": "70",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if certificate file exists] ***************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:31
Wednesday 06 July 2022 23:24:09 +0000 (0:00:00.528) 0:00:15.996 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate file owner and group] *********************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:37
Wednesday 06 July 2022 23:24:09 +0000 (0:00:00.061) 0:00:16.057 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate permissions] ******************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:49
Wednesday 06 July 2022 23:24:09 +0000 (0:00:00.068) 0:00:16.125 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve key file stats] *************************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:55
Wednesday 06 July 2022 23:24:09 +0000 (0:00:00.043) 0:00:16.168 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"stat": {
"atime": 1657149841.1473923,
"attr_flags": "",
"attributes": [],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "4a2f002509d7c39e3e9f1f391c3e7f6dc2e98998",
"ctime": 1657149841.2073922,
"dev": 31,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 0,
"gr_name": "root",
"inode": 60607,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0600",
"mtime": 1657149841.2073922,
"nlink": 1,
"path": "/etc/pki/tls/private/mycert_many_self_signed.key",
"pw_name": "root",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1704,
"uid": 0,
"version": "70",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if key file exists] ***********************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:60
Wednesday 06 July 2022 23:24:10 +0000 (0:00:00.396) 0:00:16.565 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key file owner and group] *****************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:66
Wednesday 06 July 2022 23:24:10 +0000 (0:00:00.032) 0:00:16.598 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Parse certificate] *******************************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:78
Wednesday 06 July 2022 23:24:10 +0000 (0:00:00.047) 0:00:16.645 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"cmd": [
"/tmp/certificate-tests-venv/bin/certreader2json",
"/etc/pki/tls/certs/mycert_many_self_signed.crt"
],
"delta": "0:00:00.207483",
"end": "2022-07-06 23:24:10.244201",
"rc": 0,
"start": "2022-07-06 23:24:10.036718"
}
STDOUT:
{
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.com"
}
],
"extensions": {
"keyUsage": {
"value": [
"digital_signature",
"key_encipherment"
],
"critical": false
},
"subjectAltName": {
"value": [
{
"name": "DNS",
"value": "www.example.com"
}
],
"critical": false
},
"extendedKeyUsage": {
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
],
"critical": false
},
"basicConstraints": {
"value": {
"ca": false
},
"critical": true
},
"subjectKeyIdentifier": {
"value": "C2:AF:82:FC:97:43:70:18:14:2D:32:54:E5:D8:E9:E9:6D:3F:89:AF",
"critical": false
},
"authorityKeyIdentifier": {
"value": "D9:69:C3:F9:77:BD:82:02:43:29:A8:70:BD:5C:3C:FA:BB:39:29:3B",
"critical": false
}
},
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"key_size": 2048,
"validity": {
"not_valid_after": "2023-07-06 23:17:45",
"not_valid_before": "2022-07-06 23:24:01"
}
}
TASK [Load certificate YAML to cert_issued variable] ***************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:83
Wednesday 06 July 2022 23:24:10 +0000 (0:00:00.693) 0:00:17.339 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"ansible_facts": {
"cert_issued": {
"extensions": {
"authorityKeyIdentifier": {
"critical": false,
"value": "D9:69:C3:F9:77:BD:82:02:43:29:A8:70:BD:5C:3C:FA:BB:39:29:3B"
},
"basicConstraints": {
"critical": true,
"value": {
"ca": false
}
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": false,
"value": [
"digital_signature",
"key_encipherment"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "www.example.com"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "C2:AF:82:FC:97:43:70:18:14:2D:32:54:E5:D8:E9:E9:6D:3F:89:AF"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.com"
}
],
"validity": {
"not_valid_after": "2023-07-06 23:17:45",
"not_valid_before": "2022-07-06 23:24:01"
}
}
},
"changed": false
}
TASK [Verify certificate subject] **********************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:87
Wednesday 06 July 2022 23:24:10 +0000 (0:00:00.042) 0:00:17.381 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate SAN] **************************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:96
Wednesday 06 July 2022 23:24:10 +0000 (0:00:00.043) 0:00:17.425 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key size] *********************************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:105
Wednesday 06 July 2022 23:24:10 +0000 (0:00:00.034) 0:00:17.459 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Key Usage] ********************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:112
Wednesday 06 July 2022 23:24:10 +0000 (0:00:00.042) 0:00:17.502 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Extended Key Usage] ***********************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:125
Wednesday 06 July 2022 23:24:11 +0000 (0:00:00.040) 0:00:17.542 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve auto-renew flag] ************************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:141
Wednesday 06 July 2022 23:24:11 +0000 (0:00:00.040) 0:00:17.583 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/mycert_many_self_signed.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'",
"delta": "0:00:00.058938",
"end": "2022-07-06 23:24:10.930778",
"rc": 0,
"start": "2022-07-06 23:24:10.871840"
}
STDOUT:
yes
TASK [Verify certificate auto-renew flag] **************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:150
Wednesday 06 July 2022 23:24:11 +0000 (0:00:00.442) 0:00:18.025 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Set virtualenv_path] *****************************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:2
Wednesday 06 July 2022 23:24:11 +0000 (0:00:00.046) 0:00:18.071 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"ansible_facts": {
"__virtualenv_path": "/tmp/certificate-tests-venv"
},
"changed": false
}
TASK [Ensure python3 is installed] *********************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:6
Wednesday 06 July 2022 23:24:11 +0000 (0:00:00.027) 0:00:18.099 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
TASK [Install the package, force upgrade] **************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:11
Wednesday 06 July 2022 23:24:13 +0000 (0:00:01.739) 0:00:19.839 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"cmd": [
"/tmp/certificate-tests-venv/bin/pip3",
"install",
"-U",
"pip"
],
"name": [
"pip"
],
"requirements": null,
"state": "latest",
"version": null,
"virtualenv": "/tmp/certificate-tests-venv"
}
STDOUT:
Requirement already satisfied: pip in ./certificate-tests-venv/lib/python3.10/site-packages (22.1.2)
TASK [Install certreader] ******************************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:18
Wednesday 06 July 2022 23:24:14 +0000 (0:00:01.025) 0:00:20.864 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"cmd": [
"/tmp/certificate-tests-venv/bin/pip3",
"install",
"cryptography<35",
"certreader>=0.1.1"
],
"name": [
"cryptography<35",
"certreader>=0.1.1"
],
"requirements": null,
"state": "present",
"version": null,
"virtualenv": "/tmp/certificate-tests-venv"
}
STDOUT:
Requirement already satisfied: cryptography<35 in ./certificate-tests-venv/lib/python3.10/site-packages (3.4.8)
Requirement already satisfied: certreader>=0.1.1 in ./certificate-tests-venv/lib/python3.10/site-packages (0.1.1)
Requirement already satisfied: cffi>=1.12 in ./certificate-tests-venv/lib/python3.10/site-packages (from cryptography<35) (1.15.1)
Requirement already satisfied: pyasn1 in ./certificate-tests-venv/lib/python3.10/site-packages (from certreader>=0.1.1) (0.4.8)
Requirement already satisfied: pyyaml in ./certificate-tests-venv/lib/python3.10/site-packages (from certreader>=0.1.1) (6.0)
Requirement already satisfied: pycparser in ./certificate-tests-venv/lib/python3.10/site-packages (from cffi>=1.12->cryptography<35) (2.21)
TASK [Retrieve certificate file stats] *****************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:26
Wednesday 06 July 2022 23:24:15 +0000 (0:00:00.881) 0:00:21.746 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"stat": {
"atime": 1657149842.1573923,
"attr_flags": "",
"attributes": [],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "820612398972e84a8b02559e880ed8fe6043f425",
"ctime": 1657149842.1533923,
"dev": 31,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 0,
"gr_name": "root",
"inode": 60655,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0600",
"mtime": 1657149842.1533923,
"nlink": 1,
"path": "/etc/pki/tls/certs/other-cert.crt",
"pw_name": "root",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1294,
"uid": 0,
"version": "70",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if certificate file exists] ***************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:31
Wednesday 06 July 2022 23:24:15 +0000 (0:00:00.407) 0:00:22.154 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate file owner and group] *********************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:37
Wednesday 06 July 2022 23:24:15 +0000 (0:00:00.033) 0:00:22.188 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate permissions] ******************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:49
Wednesday 06 July 2022 23:24:15 +0000 (0:00:00.045) 0:00:22.233 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve key file stats] *************************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:55
Wednesday 06 July 2022 23:24:15 +0000 (0:00:00.045) 0:00:22.279 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"stat": {
"atime": 1657149842.0933924,
"attr_flags": "",
"attributes": [],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "be134da35f99b80ca47696032d33fa84ac9abd67",
"ctime": 1657149842.1533923,
"dev": 31,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 0,
"gr_name": "root",
"inode": 60642,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0600",
"mtime": 1657149842.1533923,
"nlink": 1,
"path": "/etc/pki/tls/private/other-cert.key",
"pw_name": "root",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1704,
"uid": 0,
"version": "70",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if key file exists] ***********************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:60
Wednesday 06 July 2022 23:24:16 +0000 (0:00:00.403) 0:00:22.683 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key file owner and group] *****************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:66
Wednesday 06 July 2022 23:24:16 +0000 (0:00:00.033) 0:00:22.716 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Parse certificate] *******************************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:78
Wednesday 06 July 2022 23:24:16 +0000 (0:00:00.046) 0:00:22.763 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"cmd": [
"/tmp/certificate-tests-venv/bin/certreader2json",
"/etc/pki/tls/certs/other-cert.crt"
],
"delta": "0:00:00.202670",
"end": "2022-07-06 23:24:16.247950",
"rc": 0,
"start": "2022-07-06 23:24:16.045280"
}
STDOUT:
{
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.org"
}
],
"extensions": {
"keyUsage": {
"value": [
"digital_signature",
"key_encipherment"
],
"critical": false
},
"subjectAltName": {
"value": [
{
"name": "DNS",
"value": "www.example.org"
}
],
"critical": false
},
"extendedKeyUsage": {
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
],
"critical": false
},
"basicConstraints": {
"value": {
"ca": false
},
"critical": true
},
"subjectKeyIdentifier": {
"value": "E1:DC:03:11:2D:9E:46:61:45:EB:A6:45:18:A0:43:62:C6:3C:1A:70",
"critical": false
},
"authorityKeyIdentifier": {
"value": "D9:69:C3:F9:77:BD:82:02:43:29:A8:70:BD:5C:3C:FA:BB:39:29:3B",
"critical": false
}
},
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature": "77:9F:6C:28:BD:A4:B8:41:FE:AF:B6:CF:D5:3C:0C:FC:12:BE:5F:94:0D:FB:97:EF:41:31:E5:F8:C6:8A:F4:E0:6A:51:D2:4C:DE:5E:84:CE:B9:7C:FB:44:F3:AC:AD:5D:6A:6D:56:64:14:E1:01:94:C7:D4:80:81:AE:06:25:70:13:84:50:77:6D:E0:B4:0B:94:13:27:C3:99:0F:73:24:2D:7F:F6:AA:76:9B:45:54:ED:E6:24:C4:D7:FD:E1:65:F9:71:44:60:59:E6:38:2C:75:A5:A1:C9:AC:85:67:DA:2A:8D:C6:B1:34:EA:A8:5E:A8:10:62:EB:6E:27:7F:07:BD:B4:85:75:66:81:69:BD:C3:E5:BD:1D:81:C2:F5:7D:69:41:6B:03:E2:7B:04:4A:30:9E:1F:FC:77:C9:B0:09:C9:83:79:5B:15:12:02:21:93:3D:E7:8D:BF:DD:8B:23:62:69:65:8F:2E:82:09:D3:C4:57:63:A6:20:0F:12:A0:37:24:29:A3:9D:8E:F2:A0:5A:F9:0B:47:B6:7F:5B:BC:14:29:E4:E0:92:34:10:B7:F7:6C:88:48:68:A5:D8:98:A9:AB:8A:17:CC:07:D0:78:F4:53:47:92:BF:9C:A1:DD:BE:1E:A4:A8:14:D1:02:48:C8:69:C7:7F:DA:B3:14:DF"
},
"key_size": 2048,
"validity": {
"not_valid_after": "2023-07-06 23:17:45",
"not_valid_before": "2022-07-06 23:24:02"
}
}
TASK [Load certificate YAML to cert_issued variable] ***************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:83
Wednesday 06 July 2022 23:24:16 +0000 (0:00:00.581) 0:00:23.344 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"ansible_facts": {
"cert_issued": {
"extensions": {
"authorityKeyIdentifier": {
"critical": false,
"value": "D9:69:C3:F9:77:BD:82:02:43:29:A8:70:BD:5C:3C:FA:BB:39:29:3B"
},
"basicConstraints": {
"critical": true,
"value": {
"ca": false
}
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": false,
"value": [
"digital_signature",
"key_encipherment"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "www.example.org"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "E1:DC:03:11:2D:9E:46:61:45:EB:A6:45:18:A0:43:62:C6:3C:1A:70"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.org"
}
],
"validity": {
"not_valid_after": "2023-07-06 23:17:45",
"not_valid_before": "2022-07-06 23:24:02"
}
}
},
"changed": false
}
TASK [Verify certificate subject] **********************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:87
Wednesday 06 July 2022 23:24:16 +0000 (0:00:00.043) 0:00:23.388 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate SAN] **************************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:96
Wednesday 06 July 2022 23:24:16 +0000 (0:00:00.044) 0:00:23.432 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key size] *********************************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:105
Wednesday 06 July 2022 23:24:16 +0000 (0:00:00.033) 0:00:23.465 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Key Usage] ********************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:112
Wednesday 06 July 2022 23:24:16 +0000 (0:00:00.044) 0:00:23.510 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Extended Key Usage] ***********************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:125
Wednesday 06 July 2022 23:24:17 +0000 (0:00:00.042) 0:00:23.552 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve auto-renew flag] ************************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:141
Wednesday 06 July 2022 23:24:17 +0000 (0:00:00.042) 0:00:23.595 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/other-cert.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'",
"delta": "0:00:00.060143",
"end": "2022-07-06 23:24:16.951447",
"rc": 0,
"start": "2022-07-06 23:24:16.891304"
}
STDOUT:
yes
TASK [Verify certificate auto-renew flag] **************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:150
Wednesday 06 July 2022 23:24:17 +0000 (0:00:00.446) 0:00:24.042 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Set virtualenv_path] *****************************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:2
Wednesday 06 July 2022 23:24:17 +0000 (0:00:00.072) 0:00:24.114 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"ansible_facts": {
"__virtualenv_path": "/tmp/certificate-tests-venv"
},
"changed": false
}
TASK [Ensure python3 is installed] *********************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:6
Wednesday 06 July 2022 23:24:17 +0000 (0:00:00.026) 0:00:24.140 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
TASK [Install the package, force upgrade] **************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:11
Wednesday 06 July 2022 23:24:19 +0000 (0:00:01.691) 0:00:25.832 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"cmd": [
"/tmp/certificate-tests-venv/bin/pip3",
"install",
"-U",
"pip"
],
"name": [
"pip"
],
"requirements": null,
"state": "latest",
"version": null,
"virtualenv": "/tmp/certificate-tests-venv"
}
STDOUT:
Requirement already satisfied: pip in ./certificate-tests-venv/lib/python3.10/site-packages (22.1.2)
TASK [Install certreader] ******************************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:18
Wednesday 06 July 2022 23:24:20 +0000 (0:00:01.040) 0:00:26.873 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"cmd": [
"/tmp/certificate-tests-venv/bin/pip3",
"install",
"cryptography<35",
"certreader>=0.1.1"
],
"name": [
"cryptography<35",
"certreader>=0.1.1"
],
"requirements": null,
"state": "present",
"version": null,
"virtualenv": "/tmp/certificate-tests-venv"
}
STDOUT:
Requirement already satisfied: cryptography<35 in ./certificate-tests-venv/lib/python3.10/site-packages (3.4.8)
Requirement already satisfied: certreader>=0.1.1 in ./certificate-tests-venv/lib/python3.10/site-packages (0.1.1)
Requirement already satisfied: cffi>=1.12 in ./certificate-tests-venv/lib/python3.10/site-packages (from cryptography<35) (1.15.1)
Requirement already satisfied: pyasn1 in ./certificate-tests-venv/lib/python3.10/site-packages (from certreader>=0.1.1) (0.4.8)
Requirement already satisfied: pyyaml in ./certificate-tests-venv/lib/python3.10/site-packages (from certreader>=0.1.1) (6.0)
Requirement already satisfied: pycparser in ./certificate-tests-venv/lib/python3.10/site-packages (from cffi>=1.12->cryptography<35) (2.21)
TASK [Retrieve certificate file stats] *****************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:26
Wednesday 06 July 2022 23:24:21 +0000 (0:00:00.917) 0:00:27.791 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"stat": {
"atime": 1657149843.4833922,
"attr_flags": "",
"attributes": [],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "88bb76af3871748c91985a5c0e4fa645e8cab1e3",
"ctime": 1657149843.4803922,
"dev": 31,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 0,
"gr_name": "root",
"inode": 60690,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0600",
"mtime": 1657149843.4803922,
"nlink": 1,
"path": "/etc/pki/tls/certs/another-cert.crt",
"pw_name": "root",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1294,
"uid": 0,
"version": "71",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if certificate file exists] ***************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:31
Wednesday 06 July 2022 23:24:21 +0000 (0:00:00.406) 0:00:28.197 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate file owner and group] *********************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:37
Wednesday 06 July 2022 23:24:21 +0000 (0:00:00.033) 0:00:28.231 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate permissions] ******************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:49
Wednesday 06 July 2022 23:24:21 +0000 (0:00:00.071) 0:00:28.302 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve key file stats] *************************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:55
Wednesday 06 July 2022 23:24:21 +0000 (0:00:00.069) 0:00:28.371 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"stat": {
"atime": 1657149843.4203923,
"attr_flags": "",
"attributes": [],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "27e695f54afd7969195597028cc4529ed93c5c25",
"ctime": 1657149843.4803922,
"dev": 31,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 0,
"gr_name": "root",
"inode": 60677,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0600",
"mtime": 1657149843.4803922,
"nlink": 1,
"path": "/etc/pki/tls/private/another-cert.key",
"pw_name": "root",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1704,
"uid": 0,
"version": "71",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if key file exists] ***********************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:60
Wednesday 06 July 2022 23:24:22 +0000 (0:00:00.403) 0:00:28.774 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key file owner and group] *****************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:66
Wednesday 06 July 2022 23:24:22 +0000 (0:00:00.031) 0:00:28.806 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Parse certificate] *******************************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:78
Wednesday 06 July 2022 23:24:22 +0000 (0:00:00.071) 0:00:28.877 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"cmd": [
"/tmp/certificate-tests-venv/bin/certreader2json",
"/etc/pki/tls/certs/another-cert.crt"
],
"delta": "0:00:00.202660",
"end": "2022-07-06 23:24:22.404658",
"rc": 0,
"start": "2022-07-06 23:24:22.201998"
}
STDOUT:
{
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.net"
}
],
"extensions": {
"keyUsage": {
"value": [
"digital_signature",
"key_encipherment"
],
"critical": false
},
"subjectAltName": {
"value": [
{
"name": "DNS",
"value": "www.example.net"
}
],
"critical": false
},
"extendedKeyUsage": {
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
],
"critical": false
},
"basicConstraints": {
"value": {
"ca": false
},
"critical": true
},
"subjectKeyIdentifier": {
"value": "20:79:BA:AF:57:86:BD:E6:D3:A3:F1:C8:5B:93:D5:BC:92:DA:E0:74",
"critical": false
},
"authorityKeyIdentifier": {
"value": "D9:69:C3:F9:77:BD:82:02:43:29:A8:70:BD:5C:3C:FA:BB:39:29:3B",
"critical": false
}
},
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"key_size": 2048,
"validity": {
"not_valid_after": "2023-07-06 23:17:45",
"not_valid_before": "2022-07-06 23:24:03"
}
}
TASK [Load certificate YAML to cert_issued variable] ***************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:83
Wednesday 06 July 2022 23:24:22 +0000 (0:00:00.620) 0:00:29.498 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"ansible_facts": {
"cert_issued": {
"extensions": {
"authorityKeyIdentifier": {
"critical": false,
"value": "D9:69:C3:F9:77:BD:82:02:43:29:A8:70:BD:5C:3C:FA:BB:39:29:3B"
},
"basicConstraints": {
"critical": true,
"value": {
"ca": false
}
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": false,
"value": [
"digital_signature",
"key_encipherment"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "www.example.net"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "20:79:BA:AF:57:86:BD:E6:D3:A3:F1:C8:5B:93:D5:BC:92:DA:E0:74"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.net"
}
],
"validity": {
"not_valid_after": "2023-07-06 23:17:45",
"not_valid_before": "2022-07-06 23:24:03"
}
}
},
"changed": false
}
TASK [Verify certificate subject] **********************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:87
Wednesday 06 July 2022 23:24:23 +0000 (0:00:00.068) 0:00:29.567 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate SAN] **************************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:96
Wednesday 06 July 2022 23:24:23 +0000 (0:00:00.044) 0:00:29.611 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key size] *********************************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:105
Wednesday 06 July 2022 23:24:23 +0000 (0:00:00.032) 0:00:29.644 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Key Usage] ********************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:112
Wednesday 06 July 2022 23:24:23 +0000 (0:00:00.071) 0:00:29.716 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Extended Key Usage] ***********************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:125
Wednesday 06 July 2022 23:24:23 +0000 (0:00:00.073) 0:00:29.790 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve auto-renew flag] ************************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:141
Wednesday 06 July 2022 23:24:23 +0000 (0:00:00.087) 0:00:29.877 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/another-cert.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'",
"delta": "0:00:00.059023",
"end": "2022-07-06 23:24:23.221032",
"rc": 0,
"start": "2022-07-06 23:24:23.162009"
}
STDOUT:
yes
TASK [Verify certificate auto-renew flag] **************************************
task path: /tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:150
Wednesday 06 July 2022 23:24:23 +0000 (0:00:00.438) 0:00:30.316 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
META: ran handlers
META: ran handlers
PLAY RECAP *********************************************************************
/cache/fedora-36.qcow2.snap : ok=73 changed=1 unreachable=0 failed=0 skipped=1 rescued=0 ignored=0
Wednesday 06 July 2022 23:24:23 +0000 (0:00:00.051) 0:00:30.367 ********
===============================================================================
linux-system-roles.certificate : Ensure certificate requests ------------ 3.56s
/tmp/tmpzvh1g0rm/tests/roles/linux-system-roles.certificate/tasks/main.yml:100
linux-system-roles.certificate : Ensure certificate role dependencies are installed --- 1.91s
/tmp/tmpzvh1g0rm/tests/roles/linux-system-roles.certificate/tasks/main.yml:5 --
Ensure python3 is installed --------------------------------------------- 1.89s
/tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:6 --------------
Ensure python3 is installed --------------------------------------------- 1.74s
/tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:6 --------------
linux-system-roles.certificate : Ensure provider packages are installed --- 1.73s
/tmp/tmpzvh1g0rm/tests/roles/linux-system-roles.certificate/tasks/main.yml:22 -
Ensure python3 is installed --------------------------------------------- 1.69s
/tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:6 --------------
Install the package, force upgrade -------------------------------------- 1.16s
/tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:11 -------------
Gathering Facts --------------------------------------------------------- 1.10s
/tmp/tmpzvh1g0rm/tests/tests_many_self_signed.yml:2 ---------------------------
Install the package, force upgrade -------------------------------------- 1.04s
/tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:11 -------------
Install the package, force upgrade -------------------------------------- 1.03s
/tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:11 -------------
Install certreader ------------------------------------------------------ 0.92s
/tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:18 -------------
Install certreader ------------------------------------------------------ 0.88s
/tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:18 -------------
Install certreader ------------------------------------------------------ 0.88s
/tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:18 -------------
Gathering Facts --------------------------------------------------------- 0.79s
/tmp/tmpzvh1g0rm/tests/tests_many_self_signed.yml:18 --------------------------
linux-system-roles.certificate : Ensure provider service is running ----- 0.78s
/tmp/tmpzvh1g0rm/tests/roles/linux-system-roles.certificate/tasks/main.yml:88 -
Parse certificate ------------------------------------------------------- 0.69s
/tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:78 -------------
Parse certificate ------------------------------------------------------- 0.62s
/tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:78 -------------
Parse certificate ------------------------------------------------------- 0.58s
/tmp/tmpzvh1g0rm/tests/tasks/assert_certificate_parameters.yml:78 -------------
linux-system-roles.certificate : Ensure pre-scripts hooks directory exists --- 0.56s
/tmp/tmpzvh1g0rm/tests/roles/linux-system-roles.certificate/tasks/main.yml:33 -
linux-system-roles.certificate : Ensure ansible_facts used by role ------ 0.55s
/tmp/tmpzvh1g0rm/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml:2
ansible-playbook [core 2.12.6]
config file = /etc/ansible/ansible.cfg
configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
ansible python module location = /usr/lib/python3.9/site-packages/ansible
ansible collection location = /tmp/tmpy2gf3dq8
executable location = /usr/bin/ansible-playbook
python version = 3.9.13 (main, May 18 2022, 00:00:00) [GCC 11.3.1 20220421 (Red Hat 11.3.1-2)]
jinja version = 2.11.3
libyaml = True
Using /etc/ansible/ansible.cfg as config file
Skipping callback 'debug', as we already have a stdout callback.
Skipping callback 'default', as we already have a stdout callback.
Skipping callback 'minimal', as we already have a stdout callback.
Skipping callback 'oneline', as we already have a stdout callback.
PLAYBOOK: tests_many_self_signed.yml *******************************************
2 plays in /tmp/tmpyv0bgwd0/tests/certificate/tests_many_self_signed.yml
PLAY [Issue many self-signed certificates] *************************************
TASK [Gathering Facts] *********************************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tests_many_self_signed.yml:2
Wednesday 06 July 2022 23:36:23 +0000 (0:00:00.014) 0:00:00.014 ********
ok: [/cache/fedora-36.qcow2.snap]
META: ran handlers
TASK [fedora.linux_system_roles.certificate : Set version specific variables] ***
task path: /tmp/tmpy2gf3dq8/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:2
Wednesday 06 July 2022 23:36:24 +0000 (0:00:01.097) 0:00:01.111 ********
included: /tmp/tmpy2gf3dq8/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml for /cache/fedora-36.qcow2.snap
TASK [fedora.linux_system_roles.certificate : Ensure ansible_facts used by role] ***
task path: /tmp/tmpy2gf3dq8/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2
Wednesday 06 July 2022 23:36:24 +0000 (0:00:00.027) 0:00:01.138 ********
ok: [/cache/fedora-36.qcow2.snap]
TASK [fedora.linux_system_roles.certificate : Set platform/version specific variables] ***
task path: /tmp/tmpy2gf3dq8/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:7
Wednesday 06 July 2022 23:36:25 +0000 (0:00:00.538) 0:00:01.677 ********
skipping: [/cache/fedora-36.qcow2.snap] => (item=RedHat.yml) => {
"ansible_loop_var": "item",
"changed": false,
"item": "RedHat.yml",
"skip_reason": "Conditional result was False"
}
skipping: [/cache/fedora-36.qcow2.snap] => (item=Fedora.yml) => {
"ansible_loop_var": "item",
"changed": false,
"item": "Fedora.yml",
"skip_reason": "Conditional result was False"
}
skipping: [/cache/fedora-36.qcow2.snap] => (item=Fedora_36.yml) => {
"ansible_loop_var": "item",
"changed": false,
"item": "Fedora_36.yml",
"skip_reason": "Conditional result was False"
}
skipping: [/cache/fedora-36.qcow2.snap] => (item=Fedora_36.yml) => {
"ansible_loop_var": "item",
"changed": false,
"item": "Fedora_36.yml",
"skip_reason": "Conditional result was False"
}
TASK [fedora.linux_system_roles.certificate : Ensure certificate role dependencies are installed] ***
task path: /tmp/tmpy2gf3dq8/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:5
Wednesday 06 July 2022 23:36:25 +0000 (0:00:00.039) 0:00:01.717 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
TASK [fedora.linux_system_roles.certificate : Ensure provider packages are installed] ***
task path: /tmp/tmpy2gf3dq8/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:22
Wednesday 06 July 2022 23:36:27 +0000 (0:00:02.098) 0:00:03.816 ********
ok: [/cache/fedora-36.qcow2.snap] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
TASK [fedora.linux_system_roles.certificate : Ensure pre-scripts hooks directory exists] ***
task path: /tmp/tmpy2gf3dq8/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:33
Wednesday 06 July 2022 23:36:29 +0000 (0:00:01.743) 0:00:05.559 ********
ok: [/cache/fedora-36.qcow2.snap] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": false,
"gid": 0,
"group": "root",
"mode": "0700",
"owner": "root",
"path": "/etc/certmonger//pre-scripts",
"secontext": "unconfined_u:object_r:etc_t:s0",
"size": 0,
"state": "directory",
"uid": 0
}
TASK [fedora.linux_system_roles.certificate : Ensure post-scripts hooks directory exists] ***
task path: /tmp/tmpy2gf3dq8/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:59
Wednesday 06 July 2022 23:36:29 +0000 (0:00:00.526) 0:00:06.085 ********
ok: [/cache/fedora-36.qcow2.snap] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": false,
"gid": 0,
"group": "root",
"mode": "0700",
"owner": "root",
"path": "/etc/certmonger//post-scripts",
"secontext": "unconfined_u:object_r:etc_t:s0",
"size": 0,
"state": "directory",
"uid": 0
}
TASK [fedora.linux_system_roles.certificate : Ensure provider service is running] ***
task path: /tmp/tmpy2gf3dq8/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:88
Wednesday 06 July 2022 23:36:30 +0000 (0:00:00.406) 0:00:06.492 ********
ok: [/cache/fedora-36.qcow2.snap] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": false,
"enabled": true,
"name": "certmonger",
"state": "started",
"status": {
"ActiveEnterTimestamp": "Wed 2022-07-06 23:30:10 UTC",
"ActiveEnterTimestampMonotonic": "204468724",
"ActiveExitTimestampMonotonic": "0",
"ActiveState": "active",
"After": "system.slice dbus.socket sysinit.target basic.target network.target syslog.target dbus-broker.service systemd-journald.socket",
"AllowIsolate": "no",
"AssertResult": "yes",
"AssertTimestamp": "Wed 2022-07-06 23:30:10 UTC",
"AssertTimestampMonotonic": "204456677",
"Before": "multi-user.target shutdown.target",
"BlockIOAccounting": "no",
"BlockIOWeight": "[not set]",
"BusName": "org.fedorahosted.certmonger",
"CPUAccounting": "yes",
"CPUAffinityFromNUMA": "no",
"CPUQuotaPerSecUSec": "infinity",
"CPUQuotaPeriodUSec": "infinity",
"CPUSchedulingPolicy": "0",
"CPUSchedulingPriority": "0",
"CPUSchedulingResetOnFork": "no",
"CPUShares": "[not set]",
"CPUUsageNSec": "45055619000",
"CPUWeight": "[not set]",
"CacheDirectoryMode": "0755",
"CanFreeze": "yes",
"CanIsolate": "no",
"CanReload": "no",
"CanStart": "yes",
"CanStop": "yes",
"CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore",
"CleanResult": "success",
"CollectMode": "inactive",
"ConditionResult": "yes",
"ConditionTimestamp": "Wed 2022-07-06 23:30:10 UTC",
"ConditionTimestampMonotonic": "204456676",
"ConfigurationDirectoryMode": "0755",
"Conflicts": "shutdown.target",
"ControlGroup": "/system.slice/certmonger.service",
"ControlPID": "0",
"CoredumpFilter": "0x33",
"DefaultDependencies": "yes",
"DefaultMemoryLow": "0",
"DefaultMemoryMin": "0",
"Delegate": "no",
"Description": "Certificate monitoring and PKI enrollment",
"DevicePolicy": "auto",
"DynamicUser": "no",
"EnvironmentFiles": "/etc/sysconfig/certmonger (ignore_errors=yes)",
"ExecMainCode": "0",
"ExecMainExitTimestampMonotonic": "0",
"ExecMainPID": "6978",
"ExecMainStartTimestamp": "Wed 2022-07-06 23:30:10 UTC",
"ExecMainStartTimestampMonotonic": "204457888",
"ExecMainStatus": "0",
"ExecStart": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /run/certmonger.pid -n $OPTS ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExecStartEx": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /run/certmonger.pid -n $OPTS ; flags= ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"ExitType": "main",
"FailureAction": "none",
"FileDescriptorStoreMax": "0",
"FinalKillSignal": "9",
"FragmentPath": "/usr/lib/systemd/system/certmonger.service",
"FreezerState": "running",
"GID": "[not set]",
"GuessMainPID": "yes",
"IOAccounting": "no",
"IOReadBytes": "18446744073709551615",
"IOReadOperations": "18446744073709551615",
"IOSchedulingClass": "2",
"IOSchedulingPriority": "4",
"IOWeight": "[not set]",
"IOWriteBytes": "18446744073709551615",
"IOWriteOperations": "18446744073709551615",
"IPAccounting": "no",
"IPEgressBytes": "[no data]",
"IPEgressPackets": "[no data]",
"IPIngressBytes": "[no data]",
"IPIngressPackets": "[no data]",
"Id": "certmonger.service",
"IgnoreOnIsolate": "no",
"IgnoreSIGPIPE": "yes",
"InactiveEnterTimestampMonotonic": "0",
"InactiveExitTimestamp": "Wed 2022-07-06 23:30:10 UTC",
"InactiveExitTimestampMonotonic": "204458184",
"InvocationID": "0603aa74b38f4c68ac63e20db89081ee",
"JobRunningTimeoutUSec": "infinity",
"JobTimeoutAction": "none",
"JobTimeoutUSec": "infinity",
"KeyringMode": "private",
"KillMode": "control-group",
"KillSignal": "15",
"LimitAS": "infinity",
"LimitASSoft": "infinity",
"LimitCORE": "infinity",
"LimitCORESoft": "infinity",
"LimitCPU": "infinity",
"LimitCPUSoft": "infinity",
"LimitDATA": "infinity",
"LimitDATASoft": "infinity",
"LimitFSIZE": "infinity",
"LimitFSIZESoft": "infinity",
"LimitLOCKS": "infinity",
"LimitLOCKSSoft": "infinity",
"LimitMEMLOCK": "8388608",
"LimitMEMLOCKSoft": "8388608",
"LimitMSGQUEUE": "819200",
"LimitMSGQUEUESoft": "819200",
"LimitNICE": "0",
"LimitNICESoft": "0",
"LimitNOFILE": "524288",
"LimitNOFILESoft": "1024",
"LimitNPROC": "15524",
"LimitNPROCSoft": "15524",
"LimitRSS": "infinity",
"LimitRSSSoft": "infinity",
"LimitRTPRIO": "0",
"LimitRTPRIOSoft": "0",
"LimitRTTIME": "infinity",
"LimitRTTIMESoft": "infinity",
"LimitSIGPENDING": "15524",
"LimitSIGPENDINGSoft": "15524",
"LimitSTACK": "infinity",
"LimitSTACKSoft": "8388608",
"LoadState": "loaded",
"LockPersonality": "no",
"LogLevelMax": "-1",
"LogRateLimitBurst": "0",
"LogRateLimitIntervalUSec": "0",
"LogsDirectoryMode": "0755",
"MainPID": "6978",
"ManagedOOMMemoryPressure": "auto",
"ManagedOOMMemoryPressureLimit": "0",
"ManagedOOMPreference": "none",
"ManagedOOMSwap": "auto",
"MemoryAccounting": "yes",
"MemoryAvailable": "infinity",
"MemoryCurrent": "3010560",
"MemoryDenyWriteExecute": "no",
"MemoryHigh": "infinity",
"MemoryLimit": "infinity",
"MemoryLow": "0",
"MemoryMax": "infinity",
"MemoryMin": "0",
"MemorySwapMax": "infinity",
"MountAPIVFS": "no",
"NFileDescriptorStore": "0",
"NRestarts": "0",
"NUMAPolicy": "n/a",
"Names": "certmonger.service",
"NeedDaemonReload": "no",
"Nice": "0",
"NoNewPrivileges": "no",
"NonBlocking": "no",
"NotifyAccess": "none",
"OOMPolicy": "stop",
"OOMScoreAdjust": "0",
"OnFailureJobMode": "replace",
"OnSuccessJobMode": "fail",
"PIDFile": "/run/certmonger.pid",
"PartOf": "dbus-broker.service",
"Perpetual": "no",
"PrivateDevices": "no",
"PrivateIPC": "no",
"PrivateMounts": "no",
"PrivateNetwork": "no",
"PrivateTmp": "no",
"PrivateUsers": "no",
"ProcSubset": "all",
"ProtectClock": "no",
"ProtectControlGroups": "no",
"ProtectHome": "no",
"ProtectHostname": "no",
"ProtectKernelLogs": "no",
"ProtectKernelModules": "no",
"ProtectKernelTunables": "no",
"ProtectProc": "default",
"ProtectSystem": "no",
"RefuseManualStart": "no",
"RefuseManualStop": "no",
"ReloadResult": "success",
"RemainAfterExit": "no",
"RemoveIPC": "no",
"Requires": "sysinit.target dbus.socket system.slice",
"Restart": "no",
"RestartKillSignal": "15",
"RestartUSec": "100ms",
"RestrictNamespaces": "no",
"RestrictRealtime": "no",
"RestrictSUIDSGID": "no",
"Result": "success",
"RootDirectoryStartOnly": "no",
"RuntimeDirectoryMode": "0755",
"RuntimeDirectoryPreserve": "no",
"RuntimeMaxUSec": "infinity",
"RuntimeRandomizedExtraUSec": "0",
"SameProcessGroup": "no",
"SecureBits": "0",
"SendSIGHUP": "no",
"SendSIGKILL": "yes",
"Slice": "system.slice",
"StandardError": "inherit",
"StandardInput": "null",
"StandardOutput": "journal",
"StartLimitAction": "none",
"StartLimitBurst": "5",
"StartLimitIntervalUSec": "10s",
"StartupBlockIOWeight": "[not set]",
"StartupCPUShares": "[not set]",
"StartupCPUWeight": "[not set]",
"StartupIOWeight": "[not set]",
"StateChangeTimestamp": "Wed 2022-07-06 23:34:08 UTC",
"StateChangeTimestampMonotonic": "442526482",
"StateDirectoryMode": "0755",
"StatusErrno": "0",
"StopWhenUnneeded": "no",
"SubState": "running",
"SuccessAction": "none",
"SyslogFacility": "3",
"SyslogLevel": "6",
"SyslogLevelPrefix": "yes",
"SyslogPriority": "30",
"SystemCallErrorNumber": "2147483646",
"TTYReset": "no",
"TTYVHangup": "no",
"TTYVTDisallocate": "no",
"TasksAccounting": "yes",
"TasksCurrent": "1",
"TasksMax": "4657",
"TimeoutAbortUSec": "1min 30s",
"TimeoutCleanUSec": "infinity",
"TimeoutStartFailureMode": "terminate",
"TimeoutStartUSec": "1min 30s",
"TimeoutStopFailureMode": "terminate",
"TimeoutStopUSec": "1min 30s",
"TimerSlackNSec": "50000",
"Transient": "no",
"Type": "dbus",
"UID": "[not set]",
"UMask": "0022",
"UnitFilePreset": "disabled",
"UnitFileState": "enabled",
"UtmpMode": "init",
"WantedBy": "multi-user.target",
"WatchdogSignal": "6",
"WatchdogTimestampMonotonic": "0",
"WatchdogUSec": "0"
}
}
TASK [fedora.linux_system_roles.certificate : Ensure certificate requests] *****
task path: /tmp/tmpy2gf3dq8/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:99
Wednesday 06 July 2022 23:36:31 +0000 (0:00:00.811) 0:00:07.303 ********
changed: [/cache/fedora-36.qcow2.snap] => (item={'name': 'mycert_many_self_signed', 'dns': 'www.example.com', 'ca': 'self-sign'}) => {
"ansible_loop_var": "item",
"changed": true,
"item": {
"ca": "self-sign",
"dns": "www.example.com",
"name": "mycert_many_self_signed"
}
}
MSG:
Certificate requested (new).
changed: [/cache/fedora-36.qcow2.snap] => (item={'name': 'other-cert', 'dns': 'www.example.org', 'ca': 'self-sign'}) => {
"ansible_loop_var": "item",
"changed": true,
"item": {
"ca": "self-sign",
"dns": "www.example.org",
"name": "other-cert"
}
}
MSG:
Certificate requested (new).
changed: [/cache/fedora-36.qcow2.snap] => (item={'name': 'another-cert', 'dns': 'www.example.net', 'ca': 'self-sign'}) => {
"ansible_loop_var": "item",
"changed": true,
"item": {
"ca": "self-sign",
"dns": "www.example.net",
"name": "another-cert"
}
}
MSG:
Certificate requested (new).
META: role_complete for /cache/fedora-36.qcow2.snap
META: ran handlers
META: ran handlers
PLAY [Verify certificate] ******************************************************
TASK [Gathering Facts] *********************************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tests_many_self_signed.yml:18
Wednesday 06 July 2022 23:36:34 +0000 (0:00:03.256) 0:00:10.559 ********
ok: [/cache/fedora-36.qcow2.snap]
META: ran handlers
TASK [Verify each certificate] *************************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tests_many_self_signed.yml:50
Wednesday 06 July 2022 23:36:35 +0000 (0:00:00.782) 0:00:11.342 ********
included: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml for /cache/fedora-36.qcow2.snap => (item={'path': '/etc/pki/tls/certs/mycert_many_self_signed.crt', 'key_path': '/etc/pki/tls/private/mycert_many_self_signed.key', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'www.example.com'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'www.example.com'}]})
included: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml for /cache/fedora-36.qcow2.snap => (item={'path': '/etc/pki/tls/certs/other-cert.crt', 'key_path': '/etc/pki/tls/private/other-cert.key', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'www.example.org'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'www.example.org'}]})
included: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml for /cache/fedora-36.qcow2.snap => (item={'path': '/etc/pki/tls/certs/another-cert.crt', 'key_path': '/etc/pki/tls/private/another-cert.key', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'www.example.net'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'www.example.net'}]})
TASK [Set virtualenv_path] *****************************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:2
Wednesday 06 July 2022 23:36:35 +0000 (0:00:00.052) 0:00:11.394 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"ansible_facts": {
"__virtualenv_path": "/tmp/certificate-tests-venv"
},
"changed": false
}
TASK [Ensure python3 is installed] *********************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:6
Wednesday 06 July 2022 23:36:35 +0000 (0:00:00.056) 0:00:11.451 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
TASK [Install the package, force upgrade] **************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:11
Wednesday 06 July 2022 23:36:37 +0000 (0:00:01.904) 0:00:13.355 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"cmd": [
"/tmp/certificate-tests-venv/bin/pip3",
"install",
"-U",
"pip"
],
"name": [
"pip"
],
"requirements": null,
"state": "latest",
"version": null,
"virtualenv": "/tmp/certificate-tests-venv"
}
STDOUT:
Requirement already satisfied: pip in ./certificate-tests-venv/lib/python3.10/site-packages (22.1.2)
TASK [Install certreader] ******************************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:18
Wednesday 06 July 2022 23:36:38 +0000 (0:00:01.127) 0:00:14.483 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"cmd": [
"/tmp/certificate-tests-venv/bin/pip3",
"install",
"cryptography<35",
"certreader>=0.1.1"
],
"name": [
"cryptography<35",
"certreader>=0.1.1"
],
"requirements": null,
"state": "present",
"version": null,
"virtualenv": "/tmp/certificate-tests-venv"
}
STDOUT:
Requirement already satisfied: cryptography<35 in ./certificate-tests-venv/lib/python3.10/site-packages (3.4.8)
Requirement already satisfied: certreader>=0.1.1 in ./certificate-tests-venv/lib/python3.10/site-packages (0.1.1)
Requirement already satisfied: cffi>=1.12 in ./certificate-tests-venv/lib/python3.10/site-packages (from cryptography<35) (1.15.1)
Requirement already satisfied: pyasn1 in ./certificate-tests-venv/lib/python3.10/site-packages (from certreader>=0.1.1) (0.4.8)
Requirement already satisfied: pyyaml in ./certificate-tests-venv/lib/python3.10/site-packages (from certreader>=0.1.1) (6.0)
Requirement already satisfied: pycparser in ./certificate-tests-venv/lib/python3.10/site-packages (from cffi>=1.12->cryptography<35) (2.21)
TASK [Retrieve certificate file stats] *****************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:26
Wednesday 06 July 2022 23:36:39 +0000 (0:00:00.908) 0:00:15.391 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"stat": {
"atime": 1657150591.6823704,
"attr_flags": "",
"attributes": [],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "e0c41097054910d1e7850bd998baf9c8650a36de",
"ctime": 1657150591.6793704,
"dev": 31,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 0,
"gr_name": "root",
"inode": 60620,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0600",
"mtime": 1657150591.6793704,
"nlink": 1,
"path": "/etc/pki/tls/certs/mycert_many_self_signed.crt",
"pw_name": "root",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1294,
"uid": 0,
"version": "70",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if certificate file exists] ***************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:31
Wednesday 06 July 2022 23:36:39 +0000 (0:00:00.518) 0:00:15.910 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate file owner and group] *********************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:37
Wednesday 06 July 2022 23:36:39 +0000 (0:00:00.030) 0:00:15.940 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate permissions] ******************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:47
Wednesday 06 July 2022 23:36:39 +0000 (0:00:00.045) 0:00:15.986 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve key file stats] *************************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:53
Wednesday 06 July 2022 23:36:39 +0000 (0:00:00.042) 0:00:16.028 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"stat": {
"atime": 1657150591.6203704,
"attr_flags": "",
"attributes": [],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "b2314106a1b70f0b5ad4fdb4a9cb82bc377adac2",
"ctime": 1657150591.6793704,
"dev": 31,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 0,
"gr_name": "root",
"inode": 60607,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0600",
"mtime": 1657150591.6793704,
"nlink": 1,
"path": "/etc/pki/tls/private/mycert_many_self_signed.key",
"pw_name": "root",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1704,
"uid": 0,
"version": "70",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if key file exists] ***********************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:58
Wednesday 06 July 2022 23:36:40 +0000 (0:00:00.395) 0:00:16.423 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key file owner and group] *****************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:64
Wednesday 06 July 2022 23:36:40 +0000 (0:00:00.031) 0:00:16.454 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Parse certificate] *******************************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:74
Wednesday 06 July 2022 23:36:40 +0000 (0:00:00.045) 0:00:16.500 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"cmd": [
"/tmp/certificate-tests-venv/bin/certreader2json",
"/etc/pki/tls/certs/mycert_many_self_signed.crt"
],
"delta": "0:00:00.205155",
"end": "2022-07-06 23:36:40.443070",
"rc": 0,
"start": "2022-07-06 23:36:40.237915"
}
STDOUT:
{
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.com"
}
],
"extensions": {
"keyUsage": {
"value": [
"digital_signature",
"key_encipherment"
],
"critical": false
},
"subjectAltName": {
"value": [
{
"name": "DNS",
"value": "www.example.com"
}
],
"critical": false
},
"extendedKeyUsage": {
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
],
"critical": false
},
"basicConstraints": {
"value": {
"ca": false
},
"critical": true
},
"subjectKeyIdentifier": {
"value": "00:3B:A5:F7:BB:C4:9F:6A:62:74:B4:2F:E3:9C:F8:8D:3E:79:38:EC",
"critical": false
},
"authorityKeyIdentifier": {
"value": "5E:52:CD:04:1D:A6:B4:4F:6D:84:D8:82:A2:63:74:23:0B:B0:BF:FB",
"critical": false
}
},
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"key_size": 2048,
"validity": {
"not_valid_after": "2023-07-06 23:30:12",
"not_valid_before": "2022-07-06 23:36:31"
}
}
TASK [Load certificate YAML to cert_issued variable] ***************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:79
Wednesday 06 July 2022 23:36:40 +0000 (0:00:00.671) 0:00:17.171 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"ansible_facts": {
"cert_issued": {
"extensions": {
"authorityKeyIdentifier": {
"critical": false,
"value": "5E:52:CD:04:1D:A6:B4:4F:6D:84:D8:82:A2:63:74:23:0B:B0:BF:FB"
},
"basicConstraints": {
"critical": true,
"value": {
"ca": false
}
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": false,
"value": [
"digital_signature",
"key_encipherment"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "www.example.com"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "00:3B:A5:F7:BB:C4:9F:6A:62:74:B4:2F:E3:9C:F8:8D:3E:79:38:EC"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.com"
}
],
"validity": {
"not_valid_after": "2023-07-06 23:30:12",
"not_valid_before": "2022-07-06 23:36:31"
}
}
},
"changed": false
}
TASK [Verify certificate subject] **********************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:83
Wednesday 06 July 2022 23:36:40 +0000 (0:00:00.041) 0:00:17.213 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate SAN] **************************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:91
Wednesday 06 July 2022 23:36:40 +0000 (0:00:00.042) 0:00:17.255 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key size] *********************************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:99
Wednesday 06 July 2022 23:36:41 +0000 (0:00:00.030) 0:00:17.285 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Key Usage] ********************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:106
Wednesday 06 July 2022 23:36:41 +0000 (0:00:00.041) 0:00:17.327 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Extended Key Usage] ***********************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:118
Wednesday 06 July 2022 23:36:41 +0000 (0:00:00.043) 0:00:17.371 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve auto-renew flag] ************************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:132
Wednesday 06 July 2022 23:36:41 +0000 (0:00:00.044) 0:00:17.415 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/mycert_many_self_signed.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'",
"delta": "0:00:00.064024",
"end": "2022-07-06 23:36:41.131822",
"rc": 0,
"start": "2022-07-06 23:36:41.067798"
}
STDOUT:
yes
TASK [Verify certificate auto-renew flag] **************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:141
Wednesday 06 July 2022 23:36:41 +0000 (0:00:00.441) 0:00:17.857 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Set virtualenv_path] *****************************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:2
Wednesday 06 July 2022 23:36:41 +0000 (0:00:00.043) 0:00:17.901 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"ansible_facts": {
"__virtualenv_path": "/tmp/certificate-tests-venv"
},
"changed": false
}
TASK [Ensure python3 is installed] *********************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:6
Wednesday 06 July 2022 23:36:41 +0000 (0:00:00.026) 0:00:17.927 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
TASK [Install the package, force upgrade] **************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:11
Wednesday 06 July 2022 23:36:43 +0000 (0:00:01.694) 0:00:19.621 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"cmd": [
"/tmp/certificate-tests-venv/bin/pip3",
"install",
"-U",
"pip"
],
"name": [
"pip"
],
"requirements": null,
"state": "latest",
"version": null,
"virtualenv": "/tmp/certificate-tests-venv"
}
STDOUT:
Requirement already satisfied: pip in ./certificate-tests-venv/lib/python3.10/site-packages (22.1.2)
TASK [Install certreader] ******************************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:18
Wednesday 06 July 2022 23:36:44 +0000 (0:00:00.989) 0:00:20.611 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"cmd": [
"/tmp/certificate-tests-venv/bin/pip3",
"install",
"cryptography<35",
"certreader>=0.1.1"
],
"name": [
"cryptography<35",
"certreader>=0.1.1"
],
"requirements": null,
"state": "present",
"version": null,
"virtualenv": "/tmp/certificate-tests-venv"
}
STDOUT:
Requirement already satisfied: cryptography<35 in ./certificate-tests-venv/lib/python3.10/site-packages (3.4.8)
Requirement already satisfied: certreader>=0.1.1 in ./certificate-tests-venv/lib/python3.10/site-packages (0.1.1)
Requirement already satisfied: cffi>=1.12 in ./certificate-tests-venv/lib/python3.10/site-packages (from cryptography<35) (1.15.1)
Requirement already satisfied: pyasn1 in ./certificate-tests-venv/lib/python3.10/site-packages (from certreader>=0.1.1) (0.4.8)
Requirement already satisfied: pyyaml in ./certificate-tests-venv/lib/python3.10/site-packages (from certreader>=0.1.1) (6.0)
Requirement already satisfied: pycparser in ./certificate-tests-venv/lib/python3.10/site-packages (from cffi>=1.12->cryptography<35) (2.21)
TASK [Retrieve certificate file stats] *****************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:26
Wednesday 06 July 2022 23:36:45 +0000 (0:00:00.871) 0:00:21.482 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"stat": {
"atime": 1657150592.8473704,
"attr_flags": "",
"attributes": [],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "450465bab45f911ea52fd0eda48509f7a99e74aa",
"ctime": 1657150592.8443704,
"dev": 31,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 0,
"gr_name": "root",
"inode": 60655,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0600",
"mtime": 1657150592.8443704,
"nlink": 1,
"path": "/etc/pki/tls/certs/other-cert.crt",
"pw_name": "root",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1294,
"uid": 0,
"version": "70",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if certificate file exists] ***************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:31
Wednesday 06 July 2022 23:36:45 +0000 (0:00:00.400) 0:00:21.883 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate file owner and group] *********************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:37
Wednesday 06 July 2022 23:36:45 +0000 (0:00:00.031) 0:00:21.914 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate permissions] ******************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:47
Wednesday 06 July 2022 23:36:45 +0000 (0:00:00.047) 0:00:21.962 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve key file stats] *************************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:53
Wednesday 06 July 2022 23:36:45 +0000 (0:00:00.045) 0:00:22.007 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"stat": {
"atime": 1657150592.7863705,
"attr_flags": "",
"attributes": [],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "282f62b0377f9ea2b317b6a3a9bd4d97ac2ee167",
"ctime": 1657150592.8443704,
"dev": 31,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 0,
"gr_name": "root",
"inode": 60642,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0600",
"mtime": 1657150592.8443704,
"nlink": 1,
"path": "/etc/pki/tls/private/other-cert.key",
"pw_name": "root",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1704,
"uid": 0,
"version": "70",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if key file exists] ***********************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:58
Wednesday 06 July 2022 23:36:46 +0000 (0:00:00.389) 0:00:22.397 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key file owner and group] *****************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:64
Wednesday 06 July 2022 23:36:46 +0000 (0:00:00.032) 0:00:22.430 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Parse certificate] *******************************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:74
Wednesday 06 July 2022 23:36:46 +0000 (0:00:00.046) 0:00:22.476 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"cmd": [
"/tmp/certificate-tests-venv/bin/certreader2json",
"/etc/pki/tls/certs/other-cert.crt"
],
"delta": "0:00:00.204276",
"end": "2022-07-06 23:36:46.330103",
"rc": 0,
"start": "2022-07-06 23:36:46.125827"
}
STDOUT:
{
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.org"
}
],
"extensions": {
"keyUsage": {
"value": [
"digital_signature",
"key_encipherment"
],
"critical": false
},
"subjectAltName": {
"value": [
{
"name": "DNS",
"value": "www.example.org"
}
],
"critical": false
},
"extendedKeyUsage": {
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
],
"critical": false
},
"basicConstraints": {
"value": {
"ca": false
},
"critical": true
},
"subjectKeyIdentifier": {
"value": "01:F7:B7:D1:0D:40:25:AC:1F:6F:CC:2E:60:7D:6D:CA:2F:D6:7F:9E",
"critical": false
},
"authorityKeyIdentifier": {
"value": "5E:52:CD:04:1D:A6:B4:4F:6D:84:D8:82:A2:63:74:23:0B:B0:BF:FB",
"critical": false
}
},
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"key_size": 2048,
"validity": {
"not_valid_after": "2023-07-06 23:30:12",
"not_valid_before": "2022-07-06 23:36:32"
}
}
TASK [Load certificate YAML to cert_issued variable] ***************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:79
Wednesday 06 July 2022 23:36:46 +0000 (0:00:00.580) 0:00:23.056 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"ansible_facts": {
"cert_issued": {
"extensions": {
"authorityKeyIdentifier": {
"critical": false,
"value": "5E:52:CD:04:1D:A6:B4:4F:6D:84:D8:82:A2:63:74:23:0B:B0:BF:FB"
},
"basicConstraints": {
"critical": true,
"value": {
"ca": false
}
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": false,
"value": [
"digital_signature",
"key_encipherment"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "www.example.org"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "01:F7:B7:D1:0D:40:25:AC:1F:6F:CC:2E:60:7D:6D:CA:2F:D6:7F:9E"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.org"
}
],
"validity": {
"not_valid_after": "2023-07-06 23:30:12",
"not_valid_before": "2022-07-06 23:36:32"
}
}
},
"changed": false
}
TASK [Verify certificate subject] **********************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:83
Wednesday 06 July 2022 23:36:46 +0000 (0:00:00.041) 0:00:23.098 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate SAN] **************************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:91
Wednesday 06 July 2022 23:36:46 +0000 (0:00:00.042) 0:00:23.140 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key size] *********************************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:99
Wednesday 06 July 2022 23:36:46 +0000 (0:00:00.030) 0:00:23.170 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Key Usage] ********************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:106
Wednesday 06 July 2022 23:36:46 +0000 (0:00:00.041) 0:00:23.212 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Extended Key Usage] ***********************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:118
Wednesday 06 July 2022 23:36:46 +0000 (0:00:00.041) 0:00:23.254 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve auto-renew flag] ************************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:132
Wednesday 06 July 2022 23:36:47 +0000 (0:00:00.041) 0:00:23.296 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/other-cert.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'",
"delta": "0:00:00.059083",
"end": "2022-07-06 23:36:47.001222",
"rc": 0,
"start": "2022-07-06 23:36:46.942139"
}
STDOUT:
yes
TASK [Verify certificate auto-renew flag] **************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:141
Wednesday 06 July 2022 23:36:47 +0000 (0:00:00.430) 0:00:23.726 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Set virtualenv_path] *****************************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:2
Wednesday 06 July 2022 23:36:47 +0000 (0:00:00.043) 0:00:23.770 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"ansible_facts": {
"__virtualenv_path": "/tmp/certificate-tests-venv"
},
"changed": false
}
TASK [Ensure python3 is installed] *********************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:6
Wednesday 06 July 2022 23:36:47 +0000 (0:00:00.026) 0:00:23.797 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"rc": 0,
"results": []
}
MSG:
Nothing to do
TASK [Install the package, force upgrade] **************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:11
Wednesday 06 July 2022 23:36:49 +0000 (0:00:01.702) 0:00:25.500 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"cmd": [
"/tmp/certificate-tests-venv/bin/pip3",
"install",
"-U",
"pip"
],
"name": [
"pip"
],
"requirements": null,
"state": "latest",
"version": null,
"virtualenv": "/tmp/certificate-tests-venv"
}
STDOUT:
Requirement already satisfied: pip in ./certificate-tests-venv/lib/python3.10/site-packages (22.1.2)
TASK [Install certreader] ******************************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:18
Wednesday 06 July 2022 23:36:50 +0000 (0:00:01.006) 0:00:26.506 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"cmd": [
"/tmp/certificate-tests-venv/bin/pip3",
"install",
"cryptography<35",
"certreader>=0.1.1"
],
"name": [
"cryptography<35",
"certreader>=0.1.1"
],
"requirements": null,
"state": "present",
"version": null,
"virtualenv": "/tmp/certificate-tests-venv"
}
STDOUT:
Requirement already satisfied: cryptography<35 in ./certificate-tests-venv/lib/python3.10/site-packages (3.4.8)
Requirement already satisfied: certreader>=0.1.1 in ./certificate-tests-venv/lib/python3.10/site-packages (0.1.1)
Requirement already satisfied: cffi>=1.12 in ./certificate-tests-venv/lib/python3.10/site-packages (from cryptography<35) (1.15.1)
Requirement already satisfied: pyasn1 in ./certificate-tests-venv/lib/python3.10/site-packages (from certreader>=0.1.1) (0.4.8)
Requirement already satisfied: pyyaml in ./certificate-tests-venv/lib/python3.10/site-packages (from certreader>=0.1.1) (6.0)
Requirement already satisfied: pycparser in ./certificate-tests-venv/lib/python3.10/site-packages (from cffi>=1.12->cryptography<35) (2.21)
TASK [Retrieve certificate file stats] *****************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:26
Wednesday 06 July 2022 23:36:51 +0000 (0:00:00.871) 0:00:27.378 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"stat": {
"atime": 1657150593.7113705,
"attr_flags": "",
"attributes": [],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "c776c631c05bedc2d8a656a249746266927300f3",
"ctime": 1657150593.7083704,
"dev": 31,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 0,
"gr_name": "root",
"inode": 60690,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0600",
"mtime": 1657150593.7083704,
"nlink": 1,
"path": "/etc/pki/tls/certs/another-cert.crt",
"pw_name": "root",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1294,
"uid": 0,
"version": "70",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if certificate file exists] ***************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:31
Wednesday 06 July 2022 23:36:51 +0000 (0:00:00.475) 0:00:27.853 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate file owner and group] *********************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:37
Wednesday 06 July 2022 23:36:51 +0000 (0:00:00.031) 0:00:27.884 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate permissions] ******************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:47
Wednesday 06 July 2022 23:36:51 +0000 (0:00:00.071) 0:00:27.955 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve key file stats] *************************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:53
Wednesday 06 July 2022 23:36:51 +0000 (0:00:00.078) 0:00:28.033 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"stat": {
"atime": 1657150593.6483705,
"attr_flags": "",
"attributes": [],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "27e5ebf318ca2df33021854f2aef611d86e28f25",
"ctime": 1657150593.7083704,
"dev": 31,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 0,
"gr_name": "root",
"inode": 60677,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0600",
"mtime": 1657150593.7083704,
"nlink": 1,
"path": "/etc/pki/tls/private/another-cert.key",
"pw_name": "root",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1704,
"uid": 0,
"version": "70",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if key file exists] ***********************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:58
Wednesday 06 July 2022 23:36:52 +0000 (0:00:00.414) 0:00:28.448 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key file owner and group] *****************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:64
Wednesday 06 July 2022 23:36:52 +0000 (0:00:00.030) 0:00:28.479 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Parse certificate] *******************************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:74
Wednesday 06 July 2022 23:36:52 +0000 (0:00:00.070) 0:00:28.549 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"cmd": [
"/tmp/certificate-tests-venv/bin/certreader2json",
"/etc/pki/tls/certs/another-cert.crt"
],
"delta": "0:00:00.204936",
"end": "2022-07-06 23:36:52.429990",
"rc": 0,
"start": "2022-07-06 23:36:52.225054"
}
STDOUT:
{
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.net"
}
],
"extensions": {
"keyUsage": {
"value": [
"digital_signature",
"key_encipherment"
],
"critical": false
},
"subjectAltName": {
"value": [
{
"name": "DNS",
"value": "www.example.net"
}
],
"critical": false
},
"extendedKeyUsage": {
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
],
"critical": false
},
"basicConstraints": {
"value": {
"ca": false
},
"critical": true
},
"subjectKeyIdentifier": {
"value": "0E:CC:B6:EF:C3:AB:A2:52:30:5B:A6:74:BF:60:5A:69:0C:2C:57:EA",
"critical": false
},
"authorityKeyIdentifier": {
"value": "5E:52:CD:04:1D:A6:B4:4F:6D:84:D8:82:A2:63:74:23:0B:B0:BF:FB",
"critical": false
}
},
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"key_size": 2048,
"validity": {
"not_valid_after": "2023-07-06 23:30:12",
"not_valid_before": "2022-07-06 23:36:33"
}
}
TASK [Load certificate YAML to cert_issued variable] ***************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:79
Wednesday 06 July 2022 23:36:52 +0000 (0:00:00.607) 0:00:29.156 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"ansible_facts": {
"cert_issued": {
"extensions": {
"authorityKeyIdentifier": {
"critical": false,
"value": "5E:52:CD:04:1D:A6:B4:4F:6D:84:D8:82:A2:63:74:23:0B:B0:BF:FB"
},
"basicConstraints": {
"critical": true,
"value": {
"ca": false
}
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": false,
"value": [
"digital_signature",
"key_encipherment"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "www.example.net"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "0E:CC:B6:EF:C3:AB:A2:52:30:5B:A6:74:BF:60:5A:69:0C:2C:57:EA"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature": "69:BA:AA:8A:0C:D8:5D:D2:85:F4:11:CD:F7:FC:95:5F:0D:DC:BD:82:23:DB:71:F0:01:61:61:59:F7:5D:13:4B:E7:21:42:CD:3A:A0:CB:FB:19:6E:A1:99:0F:01:2D:FB:70:61:90:59:40:FE:E0:0C:6B:82:B9:04:B1:58:4E:05:33:6A:9B:F7:3F:1C:DD:2C:A7:E9:2A:2E:46:3F:74:40:32:E3:6F:43:3C:0B:2D:5C:EC:38:D9:92:61:E3:6A:B5:62:FF:53:12:9D:CC:9D:17:F1:6C:4F:83:7F:03:91:B1:1E:5F:29:ED:7B:E0:50:F4:F7:FE:08:59:0D:C0:6A:9D:94:5E:B5:A1:84:A4:65:A4:DD:44:4A:32:3D:31:58:57:58:EF:91:F5:55:48:29:D3:A7:5D:EB:7C:B9:D2:7D:70:30:C0:B0:52:36:00:74:65:D4:24:76:02:99:46:44:08:EE:96:ED:00:94:9E:F7:D6:83:14:0F:55:AE:70:BA:1E:9F:FD:38:20:A0:56:BA:92:30:17:8E:2D:E8:F3:8F:09:69:E1:5E:9C:AC:23:87:B6:49:66:70:05:A1:12:69:74:C3:F9:37:9D:FE:1A:1C:06:40:BB:D2:A4:52:78:99:AE:38:B0:F4:B1:72:94:DF:D2:7C:65:CF:FE:96:66:02:81"
},
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.net"
}
],
"validity": {
"not_valid_after": "2023-07-06 23:30:12",
"not_valid_before": "2022-07-06 23:36:33"
}
}
},
"changed": false
}
TASK [Verify certificate subject] **********************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:83
Wednesday 06 July 2022 23:36:52 +0000 (0:00:00.066) 0:00:29.223 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate SAN] **************************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:91
Wednesday 06 July 2022 23:36:52 +0000 (0:00:00.043) 0:00:29.267 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key size] *********************************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:99
Wednesday 06 July 2022 23:36:53 +0000 (0:00:00.031) 0:00:29.298 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Key Usage] ********************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:106
Wednesday 06 July 2022 23:36:53 +0000 (0:00:00.069) 0:00:29.367 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Extended Key Usage] ***********************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:118
Wednesday 06 July 2022 23:36:53 +0000 (0:00:00.070) 0:00:29.437 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve auto-renew flag] ************************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:132
Wednesday 06 July 2022 23:36:53 +0000 (0:00:00.073) 0:00:29.510 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false,
"cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/another-cert.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'",
"delta": "0:00:00.058712",
"end": "2022-07-06 23:36:53.249956",
"rc": 0,
"start": "2022-07-06 23:36:53.191244"
}
STDOUT:
yes
TASK [Verify certificate auto-renew flag] **************************************
task path: /tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:141
Wednesday 06 July 2022 23:36:53 +0000 (0:00:00.462) 0:00:29.973 ********
ok: [/cache/fedora-36.qcow2.snap] => {
"changed": false
}
MSG:
All assertions passed
META: ran handlers
META: ran handlers
PLAY RECAP *********************************************************************
/cache/fedora-36.qcow2.snap : ok=73 changed=1 unreachable=0 failed=0 skipped=1 rescued=0 ignored=0
Wednesday 06 July 2022 23:36:53 +0000 (0:00:00.051) 0:00:30.024 ********
===============================================================================
fedora.linux_system_roles.certificate : Ensure certificate requests ----- 3.26s
/tmp/tmpy2gf3dq8/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:99
fedora.linux_system_roles.certificate : Ensure certificate role dependencies are installed --- 2.10s
/tmp/tmpy2gf3dq8/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:5
Ensure python3 is installed --------------------------------------------- 1.90s
/tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:6 --
fedora.linux_system_roles.certificate : Ensure provider packages are installed --- 1.74s
/tmp/tmpy2gf3dq8/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:22
Ensure python3 is installed --------------------------------------------- 1.70s
/tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:6 --
Ensure python3 is installed --------------------------------------------- 1.69s
/tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:6 --
Install the package, force upgrade -------------------------------------- 1.13s
/tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:11 -
Gathering Facts --------------------------------------------------------- 1.10s
/tmp/tmpyv0bgwd0/tests/certificate/tests_many_self_signed.yml:2 ---------------
Install the package, force upgrade -------------------------------------- 1.01s
/tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:11 -
Install the package, force upgrade -------------------------------------- 0.99s
/tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:11 -
Install certreader ------------------------------------------------------ 0.91s
/tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:18 -
Install certreader ------------------------------------------------------ 0.87s
/tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:18 -
Install certreader ------------------------------------------------------ 0.87s
/tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:18 -
fedora.linux_system_roles.certificate : Ensure provider service is running --- 0.81s
/tmp/tmpy2gf3dq8/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:88
Gathering Facts --------------------------------------------------------- 0.78s
/tmp/tmpyv0bgwd0/tests/certificate/tests_many_self_signed.yml:18 --------------
Parse certificate ------------------------------------------------------- 0.67s
/tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:74 -
Parse certificate ------------------------------------------------------- 0.61s
/tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:74 -
Parse certificate ------------------------------------------------------- 0.58s
/tmp/tmpyv0bgwd0/tests/certificate/tasks/assert_certificate_parameters.yml:74 -
fedora.linux_system_roles.certificate : Ensure ansible_facts used by role --- 0.54s
/tmp/tmpy2gf3dq8/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2
fedora.linux_system_roles.certificate : Ensure pre-scripts hooks directory exists --- 0.53s
/tmp/tmpy2gf3dq8/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:33