# STDOUT:
---v---v---v---v---v---
ansible-playbook 2.9.27
config file = /etc/ansible/ansible.cfg
configured module search path = ['/home/jenkins/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
ansible python module location = /opt/ansible-2.9/lib/python3.9/site-packages/ansible
executable location = /opt/ansible-2.9/bin/ansible-playbook
python version = 3.9.18 (main, Sep 7 2023, 00:00:00) [GCC 11.4.1 20230605 (Red Hat 11.4.1-2)]
Using /etc/ansible/ansible.cfg as config file
Skipping callback 'actionable', as we already have a stdout callback.
Skipping callback 'counter_enabled', as we already have a stdout callback.
Skipping callback 'debug', as we already have a stdout callback.
Skipping callback 'dense', as we already have a stdout callback.
Skipping callback 'dense', as we already have a stdout callback.
Skipping callback 'full_skip', as we already have a stdout callback.
Skipping callback 'json', as we already have a stdout callback.
Skipping callback 'minimal', as we already have a stdout callback.
Skipping callback 'null', as we already have a stdout callback.
Skipping callback 'oneline', as we already have a stdout callback.
Skipping callback 'selective', as we already have a stdout callback.
Skipping callback 'skippy', as we already have a stdout callback.
Skipping callback 'stderr', as we already have a stdout callback.
Skipping callback 'unixy', as we already have a stdout callback.
Skipping callback 'yaml', as we already have a stdout callback.
PLAYBOOK: tests_fs_attrs.yml ***************************************************
5 plays in /WORKDIR/git-weekly-ci4gcjhs0g/tests/tests_fs_attrs.yml
PLAY [Ensure UID and GID exists] ***********************************************
TASK [Gathering Facts] *********************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tests_fs_attrs.yml:2
Saturday 10 August 2024 13:09:53 +0000 (0:00:00.012) 0:00:00.012 *******
ok: [sut]
META: ran handlers
TASK [Ensure user exists] ******************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tests_fs_attrs.yml:5
Saturday 10 August 2024 13:09:53 +0000 (0:00:00.687) 0:00:00.699 *******
changed: [sut] => {
"changed": true,
"comment": "",
"create_home": true,
"group": 1040,
"home": "/home/user1",
"name": "user1",
"shell": "/bin/bash",
"state": "present",
"system": false,
"uid": 1040
}
TASK [Ensure group "somegroup" exists] *****************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tests_fs_attrs.yml:9
Saturday 10 August 2024 13:09:54 +0000 (0:00:00.345) 0:00:01.045 *******
changed: [sut] => {
"changed": true,
"gid": 1041,
"name": "somegroup",
"state": "present",
"system": false
}
META: ran handlers
META: ran handlers
PLAY [Issue certificate setting user/group] ************************************
TASK [Gathering Facts] *********************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tests_fs_attrs.yml:14
Saturday 10 August 2024 13:09:54 +0000 (0:00:00.206) 0:00:01.251 *******
ok: [sut]
META: ran handlers
TASK [linux-system-roles.certificate : Set version specific variables] *********
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:2
Saturday 10 August 2024 13:09:54 +0000 (0:00:00.360) 0:00:01.612 *******
included: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml for sut
TASK [linux-system-roles.certificate : Ensure ansible_facts used by role] ******
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml:2
Saturday 10 August 2024 13:09:54 +0000 (0:00:00.011) 0:00:01.624 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [linux-system-roles.certificate : Check if system is ostree] **************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml:11
Saturday 10 August 2024 13:09:54 +0000 (0:00:00.018) 0:00:01.642 *******
ok: [sut] => {
"changed": false,
"stat": {
"exists": false
}
}
TASK [linux-system-roles.certificate : Set flag to indicate system is ostree] ***
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml:16
Saturday 10 August 2024 13:09:55 +0000 (0:00:00.165) 0:00:01.807 *******
ok: [sut] => {
"ansible_facts": {
"__certificate_is_ostree": false
},
"changed": false
}
TASK [linux-system-roles.certificate : Set platform/version specific variables] ***
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml:20
Saturday 10 August 2024 13:09:55 +0000 (0:00:00.019) 0:00:01.827 *******
skipping: [sut] => (item=RedHat.yml) => {
"ansible_loop_var": "item",
"changed": false,
"item": "RedHat.yml",
"skip_reason": "Conditional result was False"
}
skipping: [sut] => (item=CentOS.yml) => {
"ansible_loop_var": "item",
"changed": false,
"item": "CentOS.yml",
"skip_reason": "Conditional result was False"
}
ok: [sut] => (item=CentOS_7.yml) => {
"ansible_facts": {
"__certificate_default_directory": "/etc/pki/tls",
"__certificate_packages": [
"python-pyasn1",
"python-cryptography",
"python-dbus"
]
},
"ansible_included_var_files": [
"/WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/vars/CentOS_7.yml"
],
"ansible_loop_var": "item",
"changed": false,
"item": "CentOS_7.yml"
}
skipping: [sut] => (item=CentOS_7.9.yml) => {
"ansible_loop_var": "item",
"changed": false,
"item": "CentOS_7.9.yml",
"skip_reason": "Conditional result was False"
}
TASK [linux-system-roles.certificate : Ensure certificate role dependencies are installed] ***
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:5
Saturday 10 August 2024 13:09:55 +0000 (0:00:00.033) 0:00:01.861 *******
changed: [sut] => {
"changed": true,
"changes": {
"installed": [
"python-pyasn1",
"python-cryptography"
]
},
"rc": 0,
"results": [
"dbus-python-1.1.1-9.el7.x86_64 providing python-dbus is already installed",
"Loaded plugins: fastestmirror\nLoading mirror speeds from cached hostfile\nResolving Dependencies\n--> Running transaction check\n---> Package python2-cryptography.x86_64 0:1.7.2-2.el7 will be installed\n--> Processing Dependency: python-idna >= 2.0 for package: python2-cryptography-1.7.2-2.el7.x86_64\n--> Processing Dependency: python-cffi >= 1.4.1 for package: python2-cryptography-1.7.2-2.el7.x86_64\n--> Processing Dependency: python-enum34 for package: python2-cryptography-1.7.2-2.el7.x86_64\n---> Package python2-pyasn1.noarch 0:0.1.9-7.el7 will be installed\n--> Running transaction check\n---> Package python-cffi.x86_64 0:1.6.0-5.el7 will be installed\n--> Processing Dependency: python-pycparser for package: python-cffi-1.6.0-5.el7.x86_64\n---> Package python-enum34.noarch 0:1.0.4-1.el7 will be installed\n---> Package python-idna.noarch 0:2.4-1.el7 will be installed\n--> Running transaction check\n---> Package python-pycparser.noarch 0:2.14-1.el7 will be installed\n--> Processing Dependency: python-ply for package: python-pycparser-2.14-1.el7.noarch\n--> Running transaction check\n---> Package python-ply.noarch 0:3.4-11.el7 will be installed\n--> Finished Dependency Resolution\n\nDependencies Resolved\n\n================================================================================\n Package Arch Version Repository Size\n================================================================================\nInstalling:\n python2-cryptography x86_64 1.7.2-2.el7 base 502 k\n python2-pyasn1 noarch 0.1.9-7.el7 base 100 k\nInstalling for dependencies:\n python-cffi x86_64 1.6.0-5.el7 base 218 k\n python-enum34 noarch 1.0.4-1.el7 base 52 k\n python-idna noarch 2.4-1.el7 base 94 k\n python-ply noarch 3.4-11.el7 base 123 k\n python-pycparser noarch 2.14-1.el7 base 104 k\n\nTransaction Summary\n================================================================================\nInstall 2 Packages (+5 Dependent packages)\n\nTotal download size: 1.2 M\nInstalled size: 6.1 M\nDownloading packages:\n--------------------------------------------------------------------------------\nTotal 4.0 MB/s | 1.2 MB 00:00 \nRunning transaction check\nRunning transaction test\nTransaction test succeeded\nRunning transaction\n Installing : python2-pyasn1-0.1.9-7.el7.noarch 1/7 \n Installing : python-enum34-1.0.4-1.el7.noarch 2/7 \n Installing : python-ply-3.4-11.el7.noarch 3/7 \n Installing : python-pycparser-2.14-1.el7.noarch 4/7 \n Installing : python-cffi-1.6.0-5.el7.x86_64 5/7 \n Installing : python-idna-2.4-1.el7.noarch 6/7 \n Installing : python2-cryptography-1.7.2-2.el7.x86_64 7/7 \n Verifying : python-idna-2.4-1.el7.noarch 1/7 \n Verifying : python-pycparser-2.14-1.el7.noarch 2/7 \n Verifying : python-ply-3.4-11.el7.noarch 3/7 \n Verifying : python-cffi-1.6.0-5.el7.x86_64 4/7 \n Verifying : python-enum34-1.0.4-1.el7.noarch 5/7 \n Verifying : python2-pyasn1-0.1.9-7.el7.noarch 6/7 \n Verifying : python2-cryptography-1.7.2-2.el7.x86_64 7/7 \n\nInstalled:\n python2-cryptography.x86_64 0:1.7.2-2.el7 python2-pyasn1.noarch 0:0.1.9-7.el7\n\nDependency Installed:\n python-cffi.x86_64 0:1.6.0-5.el7 python-enum34.noarch 0:1.0.4-1.el7 \n python-idna.noarch 0:2.4-1.el7 python-ply.noarch 0:3.4-11.el7 \n python-pycparser.noarch 0:2.14-1.el7 \n\nComplete!\n"
]
}
lsrpackages: python-cryptography python-dbus python-pyasn1
TASK [linux-system-roles.certificate : Ensure provider packages are installed] ***
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:24
Saturday 10 August 2024 13:10:01 +0000 (0:00:06.102) 0:00:07.963 *******
changed: [sut] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": true,
"changes": {
"installed": [
"certmonger"
]
},
"rc": 0,
"results": [
"Loaded plugins: fastestmirror\nLoading mirror speeds from cached hostfile\nResolving Dependencies\n--> Running transaction check\n---> Package certmonger.x86_64 0:0.78.4-17.el7_9 will be installed\n--> Processing Dependency: libtevent.so.0(TEVENT_0.9.9)(64bit) for package: certmonger-0.78.4-17.el7_9.x86_64\n--> Processing Dependency: libtalloc.so.2(TALLOC_2.0.2)(64bit) for package: certmonger-0.78.4-17.el7_9.x86_64\n--> Processing Dependency: libxmlrpc_util.so.3()(64bit) for package: certmonger-0.78.4-17.el7_9.x86_64\n--> Processing Dependency: libxmlrpc_client.so.3()(64bit) for package: certmonger-0.78.4-17.el7_9.x86_64\n--> Processing Dependency: libxmlrpc.so.3()(64bit) for package: certmonger-0.78.4-17.el7_9.x86_64\n--> Processing Dependency: libtevent.so.0()(64bit) for package: certmonger-0.78.4-17.el7_9.x86_64\n--> Processing Dependency: libtalloc.so.2()(64bit) for package: certmonger-0.78.4-17.el7_9.x86_64\n--> Running transaction check\n---> Package libtalloc.x86_64 0:2.1.16-1.el7 will be installed\n---> Package libtevent.x86_64 0:0.9.39-1.el7 will be installed\n---> Package xmlrpc-c.x86_64 0:1.32.5-1905.svn2451.el7 will be installed\n---> Package xmlrpc-c-client.x86_64 0:1.32.5-1905.svn2451.el7 will be installed\n--> Finished Dependency Resolution\n\nDependencies Resolved\n\n================================================================================\n Package Arch Version Repository Size\n================================================================================\nInstalling:\n certmonger x86_64 0.78.4-17.el7_9 updates 608 k\nInstalling for dependencies:\n libtalloc x86_64 2.1.16-1.el7 base 33 k\n libtevent x86_64 0.9.39-1.el7 base 41 k\n xmlrpc-c x86_64 1.32.5-1905.svn2451.el7 base 130 k\n xmlrpc-c-client x86_64 1.32.5-1905.svn2451.el7 base 32 k\n\nTransaction Summary\n================================================================================\nInstall 1 Package (+4 Dependent packages)\n\nTotal download size: 843 k\nInstalled size: 3.3 M\nDownloading packages:\n--------------------------------------------------------------------------------\nTotal 2.3 MB/s | 843 kB 00:00 \nRunning transaction check\nRunning transaction test\nTransaction test succeeded\nRunning transaction\n Installing : libtalloc-2.1.16-1.el7.x86_64 1/5 \n Installing : xmlrpc-c-1.32.5-1905.svn2451.el7.x86_64 2/5 \n Installing : xmlrpc-c-client-1.32.5-1905.svn2451.el7.x86_64 3/5 \n Installing : libtevent-0.9.39-1.el7.x86_64 4/5 \n Installing : certmonger-0.78.4-17.el7_9.x86_64 5/5 \n Verifying : xmlrpc-c-1.32.5-1905.svn2451.el7.x86_64 1/5 \n Verifying : libtalloc-2.1.16-1.el7.x86_64 2/5 \n Verifying : certmonger-0.78.4-17.el7_9.x86_64 3/5 \n Verifying : xmlrpc-c-client-1.32.5-1905.svn2451.el7.x86_64 4/5 \n Verifying : libtevent-0.9.39-1.el7.x86_64 5/5 \n\nInstalled:\n certmonger.x86_64 0:0.78.4-17.el7_9 \n\nDependency Installed:\n libtalloc.x86_64 0:2.1.16-1.el7 \n libtevent.x86_64 0:0.9.39-1.el7 \n xmlrpc-c.x86_64 0:1.32.5-1905.svn2451.el7 \n xmlrpc-c-client.x86_64 0:1.32.5-1905.svn2451.el7 \n\nComplete!\n"
]
}
lsrpackages: certmonger
TASK [linux-system-roles.certificate : Ensure pre-scripts hooks directory exists] ***
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:37
Saturday 10 August 2024 13:10:07 +0000 (0:00:05.940) 0:00:13.903 *******
changed: [sut] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": true,
"gid": 0,
"group": "root",
"mode": "0700",
"owner": "root",
"path": "/etc/certmonger//pre-scripts",
"secontext": "unconfined_u:object_r:etc_t:s0",
"size": 4096,
"state": "directory",
"uid": 0
}
TASK [linux-system-roles.certificate : Ensure post-scripts hooks directory exists] ***
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:63
Saturday 10 August 2024 13:10:07 +0000 (0:00:00.216) 0:00:14.120 *******
changed: [sut] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": true,
"gid": 0,
"group": "root",
"mode": "0700",
"owner": "root",
"path": "/etc/certmonger//post-scripts",
"secontext": "unconfined_u:object_r:etc_t:s0",
"size": 4096,
"state": "directory",
"uid": 0
}
TASK [linux-system-roles.certificate : Ensure provider service is running] *****
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:92
Saturday 10 August 2024 13:10:07 +0000 (0:00:00.138) 0:00:14.258 *******
changed: [sut] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": true,
"enabled": true,
"name": "certmonger",
"state": "started",
"status": {
"ActiveEnterTimestampMonotonic": "0",
"ActiveExitTimestampMonotonic": "0",
"ActiveState": "inactive",
"After": "systemd-journald.socket network.target basic.target dbus.service syslog.target system.slice",
"AllowIsolate": "no",
"AmbientCapabilities": "0",
"AssertResult": "no",
"AssertTimestampMonotonic": "0",
"Before": "shutdown.target",
"BlockIOAccounting": "no",
"BlockIOWeight": "18446744073709551615",
"BusName": "org.fedorahosted.certmonger",
"CPUAccounting": "no",
"CPUQuotaPerSecUSec": "infinity",
"CPUSchedulingPolicy": "0",
"CPUSchedulingPriority": "0",
"CPUSchedulingResetOnFork": "no",
"CPUShares": "18446744073709551615",
"CanIsolate": "no",
"CanReload": "no",
"CanStart": "yes",
"CanStop": "yes",
"CapabilityBoundingSet": "18446744073709551615",
"CollectMode": "inactive",
"ConditionResult": "no",
"ConditionTimestampMonotonic": "0",
"Conflicts": "shutdown.target",
"ControlPID": "0",
"DefaultDependencies": "yes",
"Delegate": "no",
"Description": "Certificate monitoring and PKI enrollment",
"DevicePolicy": "auto",
"EnvironmentFile": "/etc/sysconfig/certmonger (ignore_errors=yes)",
"ExecMainCode": "0",
"ExecMainExitTimestampMonotonic": "0",
"ExecMainPID": "0",
"ExecMainStartTimestampMonotonic": "0",
"ExecMainStatus": "0",
"ExecStart": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /var/run/certmonger.pid -n $OPTS ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"FailureAction": "none",
"FileDescriptorStoreMax": "0",
"FragmentPath": "/usr/lib/systemd/system/certmonger.service",
"GuessMainPID": "yes",
"IOScheduling": "0",
"Id": "certmonger.service",
"IgnoreOnIsolate": "no",
"IgnoreOnSnapshot": "no",
"IgnoreSIGPIPE": "yes",
"InactiveEnterTimestampMonotonic": "0",
"InactiveExitTimestampMonotonic": "0",
"JobTimeoutAction": "none",
"JobTimeoutUSec": "0",
"KillMode": "control-group",
"KillSignal": "15",
"LimitAS": "18446744073709551615",
"LimitCORE": "18446744073709551615",
"LimitCPU": "18446744073709551615",
"LimitDATA": "18446744073709551615",
"LimitFSIZE": "18446744073709551615",
"LimitLOCKS": "18446744073709551615",
"LimitMEMLOCK": "65536",
"LimitMSGQUEUE": "819200",
"LimitNICE": "0",
"LimitNOFILE": "4096",
"LimitNPROC": "14311",
"LimitRSS": "18446744073709551615",
"LimitRTPRIO": "0",
"LimitRTTIME": "18446744073709551615",
"LimitSIGPENDING": "14311",
"LimitSTACK": "18446744073709551615",
"LoadState": "loaded",
"MainPID": "0",
"MemoryAccounting": "no",
"MemoryCurrent": "18446744073709551615",
"MemoryLimit": "18446744073709551615",
"MountFlags": "0",
"Names": "certmonger.service",
"NeedDaemonReload": "no",
"Nice": "0",
"NoNewPrivileges": "no",
"NonBlocking": "no",
"NotifyAccess": "none",
"OOMScoreAdjust": "0",
"OnFailureJobMode": "replace",
"PIDFile": "/var/run/certmonger.pid",
"PermissionsStartOnly": "no",
"PrivateDevices": "no",
"PrivateNetwork": "no",
"PrivateTmp": "no",
"ProtectHome": "no",
"ProtectSystem": "no",
"RefuseManualStart": "no",
"RefuseManualStop": "no",
"RemainAfterExit": "no",
"Requires": "system.slice basic.target",
"Restart": "no",
"RestartUSec": "100ms",
"Result": "success",
"RootDirectoryStartOnly": "no",
"RuntimeDirectoryMode": "0755",
"SameProcessGroup": "no",
"SecureBits": "0",
"SendSIGHUP": "no",
"SendSIGKILL": "yes",
"Slice": "system.slice",
"StandardError": "inherit",
"StandardInput": "null",
"StandardOutput": "journal",
"StartLimitAction": "none",
"StartLimitBurst": "5",
"StartLimitInterval": "10000000",
"StartupBlockIOWeight": "18446744073709551615",
"StartupCPUShares": "18446744073709551615",
"StatusErrno": "0",
"StopWhenUnneeded": "no",
"SubState": "dead",
"SyslogLevelPrefix": "yes",
"SyslogPriority": "30",
"SystemCallErrorNumber": "0",
"TTYReset": "no",
"TTYVHangup": "no",
"TTYVTDisallocate": "no",
"TasksAccounting": "no",
"TasksCurrent": "18446744073709551615",
"TasksMax": "18446744073709551615",
"TimeoutStartUSec": "1min 30s",
"TimeoutStopUSec": "1min 30s",
"TimerSlackNSec": "50000",
"Transient": "no",
"Type": "dbus",
"UMask": "0022",
"UnitFilePreset": "disabled",
"UnitFileState": "disabled",
"WatchdogTimestampMonotonic": "0",
"WatchdogUSec": "0"
}
}
TASK [linux-system-roles.certificate : Ensure certificate requests] ************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:104
Saturday 10 August 2024 13:10:07 +0000 (0:00:00.440) 0:00:14.699 *******
changed: [sut] => (item={'name': 'mycert_fs_attrs', 'dns': 'www.example.com', 'owner': 'ftp', 'group': 'ftp', 'ca': 'self-sign'}) => {
"ansible_loop_var": "item",
"changed": true,
"item": {
"ca": "self-sign",
"dns": "www.example.com",
"group": "ftp",
"name": "mycert_fs_attrs",
"owner": "ftp"
}
}
MSG:
Certificate requested (new). File attributes updated.
changed: [sut] => (item={'name': 'certid', 'dns': 'www.example.com', 'owner': 1040, 'group': 1041, 'ca': 'self-sign'}) => {
"ansible_loop_var": "item",
"changed": true,
"item": {
"ca": "self-sign",
"dns": "www.example.com",
"group": 1041,
"name": "certid",
"owner": 1040
}
}
MSG:
Certificate requested (new). File attributes updated.
TASK [linux-system-roles.certificate : Slurp the contents of the files] ********
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:156
Saturday 10 August 2024 13:10:09 +0000 (0:00:01.235) 0:00:15.935 *******
skipping: [sut] => (item=['cert', {'name': 'mycert_fs_attrs', 'dns': 'www.example.com', 'owner': 'ftp', 'group': 'ftp', 'ca': 'self-sign'}]) => {
"ansible_loop_var": "item",
"changed": false,
"item": [
"cert",
{
"ca": "self-sign",
"dns": "www.example.com",
"group": "ftp",
"name": "mycert_fs_attrs",
"owner": "ftp"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [sut] => (item=['cert', {'name': 'certid', 'dns': 'www.example.com', 'owner': 1040, 'group': 1041, 'ca': 'self-sign'}]) => {
"ansible_loop_var": "item",
"changed": false,
"item": [
"cert",
{
"ca": "self-sign",
"dns": "www.example.com",
"group": 1041,
"name": "certid",
"owner": 1040
}
],
"skip_reason": "Conditional result was False"
}
skipping: [sut] => (item=['key', {'name': 'mycert_fs_attrs', 'dns': 'www.example.com', 'owner': 'ftp', 'group': 'ftp', 'ca': 'self-sign'}]) => {
"ansible_loop_var": "item",
"changed": false,
"item": [
"key",
{
"ca": "self-sign",
"dns": "www.example.com",
"group": "ftp",
"name": "mycert_fs_attrs",
"owner": "ftp"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [sut] => (item=['key', {'name': 'certid', 'dns': 'www.example.com', 'owner': 1040, 'group': 1041, 'ca': 'self-sign'}]) => {
"ansible_loop_var": "item",
"changed": false,
"item": [
"key",
{
"ca": "self-sign",
"dns": "www.example.com",
"group": 1041,
"name": "certid",
"owner": 1040
}
],
"skip_reason": "Conditional result was False"
}
skipping: [sut] => (item=['ca', {'name': 'mycert_fs_attrs', 'dns': 'www.example.com', 'owner': 'ftp', 'group': 'ftp', 'ca': 'self-sign'}]) => {
"ansible_loop_var": "item",
"changed": false,
"item": [
"ca",
{
"ca": "self-sign",
"dns": "www.example.com",
"group": "ftp",
"name": "mycert_fs_attrs",
"owner": "ftp"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [sut] => (item=['ca', {'name': 'certid', 'dns': 'www.example.com', 'owner': 1040, 'group': 1041, 'ca': 'self-sign'}]) => {
"ansible_loop_var": "item",
"changed": false,
"item": [
"ca",
{
"ca": "self-sign",
"dns": "www.example.com",
"group": 1041,
"name": "certid",
"owner": 1040
}
],
"skip_reason": "Conditional result was False"
}
TASK [linux-system-roles.certificate : Create return data] *********************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:168
Saturday 10 August 2024 13:10:09 +0000 (0:00:00.032) 0:00:15.967 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [linux-system-roles.certificate : Stop tracking certificates] *************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:184
Saturday 10 August 2024 13:10:09 +0000 (0:00:00.017) 0:00:15.985 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [linux-system-roles.certificate : Remove files] ***************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:189
Saturday 10 August 2024 13:10:09 +0000 (0:00:00.018) 0:00:16.003 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
META: ran handlers
META: ran handlers
PLAY [Verify certificate] ******************************************************
TASK [Gathering Facts] *********************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tests_fs_attrs.yml:32
Saturday 10 August 2024 13:10:09 +0000 (0:00:00.022) 0:00:16.026 *******
ok: [sut]
META: ran handlers
TASK [Verify each certificate] *************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tests_fs_attrs.yml:61
Saturday 10 August 2024 13:10:09 +0000 (0:00:00.348) 0:00:16.374 *******
included: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml for sut
included: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml for sut
TASK [Set virtualenv_path] *****************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:2
Saturday 10 August 2024 13:10:09 +0000 (0:00:00.034) 0:00:16.408 *******
ok: [sut] => {
"ansible_facts": {
"__virtualenv_path": "/tmp/certificate-tests-venv"
},
"changed": false
}
TASK [Check if system is ostree] ***********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:9
Saturday 10 August 2024 13:10:09 +0000 (0:00:00.008) 0:00:16.417 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [Set flag to indicate system is ostree] ***********************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:14
Saturday 10 August 2024 13:10:09 +0000 (0:00:00.017) 0:00:16.435 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [Ensure python3 is installed] *********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:18
Saturday 10 August 2024 13:10:09 +0000 (0:00:00.018) 0:00:16.453 *******
ok: [sut] => {
"changed": false,
"rc": 0,
"results": [
"python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed",
"python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed"
]
}
lsrpackages: python2-cryptography
TASK [Ensure python3 is installed] *********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:29
Saturday 10 August 2024 13:10:10 +0000 (0:00:00.329) 0:00:16.783 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [Retrieve certificate file stats] *****************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:40
Saturday 10 August 2024 13:10:10 +0000 (0:00:00.017) 0:00:16.800 *******
ok: [sut] => {
"changed": false,
"stat": {
"atime": 1723295408.488733,
"attr_flags": "e",
"attributes": [
"extents"
],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "21d62935ccbb63fca51b3ee3a29d3f58ef01d8f1",
"ctime": 1723295408.5237331,
"dev": 51713,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 50,
"gr_name": "ftp",
"inode": 172756,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0640",
"mtime": 1723295408.481733,
"nlink": 1,
"path": "/etc/pki/tls/certs/mycert_fs_attrs.crt",
"pw_name": "ftp",
"readable": true,
"rgrp": true,
"roth": false,
"rusr": true,
"size": 1294,
"uid": 14,
"version": "1592706550",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if certificate file exists] ***************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:45
Saturday 10 August 2024 13:10:10 +0000 (0:00:00.131) 0:00:16.932 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate file owner and group] *********************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:51
Saturday 10 August 2024 13:10:10 +0000 (0:00:00.021) 0:00:16.953 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate permissions] ******************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:63
Saturday 10 August 2024 13:10:10 +0000 (0:00:00.021) 0:00:16.975 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve key file stats] *************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:69
Saturday 10 August 2024 13:10:10 +0000 (0:00:00.020) 0:00:16.995 *******
ok: [sut] => {
"changed": false,
"stat": {
"atime": 1723295408.443733,
"attr_flags": "e",
"attributes": [
"extents"
],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "887c43331659afc38095194ca5e86e9ba7abbcea",
"ctime": 1723295408.5237331,
"dev": 51713,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 50,
"gr_name": "ftp",
"inode": 172755,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0640",
"mtime": 1723295408.481733,
"nlink": 1,
"path": "/etc/pki/tls/private/mycert_fs_attrs.key",
"pw_name": "ftp",
"readable": true,
"rgrp": true,
"roth": false,
"rusr": true,
"size": 1704,
"uid": 14,
"version": "1592706537",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if key file exists] ***********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:74
Saturday 10 August 2024 13:10:10 +0000 (0:00:00.134) 0:00:17.129 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key file owner and group] *****************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:80
Saturday 10 August 2024 13:10:10 +0000 (0:00:00.021) 0:00:17.150 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Parse certificate] *******************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:92
Saturday 10 August 2024 13:10:10 +0000 (0:00:00.028) 0:00:17.179 *******
ok: [sut] => {
"certificate": {
"extensions": {
"authorityKeyIdentifier": {
"critical": false,
"value": "3B:1B:7E:AE:F5:0C:9C:28:9F:18:AB:C5:8B:9C:6B:0A:E3:2B:D4:FA"
},
"basicConstraints": {
"critical": true,
"value": {
"ca": false
}
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": false,
"value": [
"key_encipherment",
"digital_signature"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "www.example.com"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "61:53:E3:AE:EA:7C:A5:E9:4D:D4:07:7F:66:72:17:21:11:C7:46:DE"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature": "4B:3A:CE:BD:3D:FE:7A:5B:84:92:AF:1F:A9:36:95:35:84:E9:2E:18:06:90:97:EC:A8:79:64:46:66:AF:3B:66:6A:78:C0:BD:29:5A:E5:A1:8F:8E:92:4F:C6:35:55:1A:54:31:0D:DC:12:80:9B:36:28:9B:D5:48:11:5B:91:30:B6:48:42:67:38:70:46:DA:44:9A:19:8F:0E:CE:57:7E:C5:68:F7:2B:72:EE:63:5E:63:BF:20:C0:C2:A5:B8:86:F3:40:44:0F:15:D8:3B:9E:2E:90:05:62:A5:ED:FA:46:BD:C9:C1:25:AE:5D:FC:64:9D:4F:A8:C9:8A:42:1A:97:3C:56:C1:31:AA:A3:B4:AC:A0:3B:BA:96:35:A1:90:6D:7E:63:97:F2:F0:F1:F9:AB:A4:7B:98:7A:14:65:7A:15:5D:91:91:FF:BC:97:58:31:52:D5:8A:B7:F8:0E:0E:A4:7E:C3:70:0B:DD:DE:D9:1A:90:05:F9:6B:7B:66:48:89:52:96:54:29:76:90:40:92:2A:78:49:0D:3D:4C:0F:E0:B2:D9:B0:9D:05:A7:96:12:B1:8F:1D:D2:DA:0E:5A:23:06:52:67:28:8A:48:A3:A8:4D:1B:38:F1:71:E4:2B:73:31:0B:E6:DC:C9:EE:9C:E9:BB:55:AA:B7:78:AC:10:2B"
},
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.com"
}
],
"validity": {
"not_valid_after": "20250810131008Z",
"not_valid_before": "20240810131008Z"
}
},
"changed": false
}
TASK [Load certificate YAML to cert_issued variable] ***************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:98
Saturday 10 August 2024 13:10:10 +0000 (0:00:00.465) 0:00:17.645 *******
ok: [sut] => {
"ansible_facts": {
"cert_issued": {
"extensions": {
"authorityKeyIdentifier": {
"critical": false,
"value": "3B:1B:7E:AE:F5:0C:9C:28:9F:18:AB:C5:8B:9C:6B:0A:E3:2B:D4:FA"
},
"basicConstraints": {
"critical": true,
"value": {
"ca": false
}
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": false,
"value": [
"key_encipherment",
"digital_signature"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "www.example.com"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "61:53:E3:AE:EA:7C:A5:E9:4D:D4:07:7F:66:72:17:21:11:C7:46:DE"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.com"
}
],
"validity": {
"not_valid_after": "20250810131008Z",
"not_valid_before": "20240810131008Z"
}
}
},
"changed": false
}
TASK [Verify certificate subject] **********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:102
Saturday 10 August 2024 13:10:10 +0000 (0:00:00.021) 0:00:17.666 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate SAN] **************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:111
Saturday 10 August 2024 13:10:10 +0000 (0:00:00.021) 0:00:17.687 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key size] *********************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:120
Saturday 10 August 2024 13:10:10 +0000 (0:00:00.019) 0:00:17.707 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Key Usage] ********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:127
Saturday 10 August 2024 13:10:10 +0000 (0:00:00.019) 0:00:17.727 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Extended Key Usage] ***********************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:138
Saturday 10 August 2024 13:10:11 +0000 (0:00:00.022) 0:00:17.749 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve auto-renew flag] ************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:151
Saturday 10 August 2024 13:10:11 +0000 (0:00:00.023) 0:00:17.773 *******
ok: [sut] => {
"changed": false,
"cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/mycert_fs_attrs.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'",
"delta": "0:00:00.040016",
"end": "2024-08-10 13:10:11.260015",
"rc": 0,
"start": "2024-08-10 13:10:11.219999"
}
STDOUT:
yes
TASK [Verify certificate auto-renew flag] **************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:160
Saturday 10 August 2024 13:10:11 +0000 (0:00:00.231) 0:00:18.004 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Set virtualenv_path] *****************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:2
Saturday 10 August 2024 13:10:11 +0000 (0:00:00.021) 0:00:18.025 *******
ok: [sut] => {
"ansible_facts": {
"__virtualenv_path": "/tmp/certificate-tests-venv"
},
"changed": false
}
TASK [Check if system is ostree] ***********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:9
Saturday 10 August 2024 13:10:11 +0000 (0:00:00.008) 0:00:18.034 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [Set flag to indicate system is ostree] ***********************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:14
Saturday 10 August 2024 13:10:11 +0000 (0:00:00.017) 0:00:18.051 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [Ensure python3 is installed] *********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:18
Saturday 10 August 2024 13:10:11 +0000 (0:00:00.017) 0:00:18.069 *******
ok: [sut] => {
"changed": false,
"rc": 0,
"results": [
"python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed",
"python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed"
]
}
lsrpackages: python2-cryptography
TASK [Ensure python3 is installed] *********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:29
Saturday 10 August 2024 13:10:11 +0000 (0:00:00.330) 0:00:18.399 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [Retrieve certificate file stats] *****************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:40
Saturday 10 August 2024 13:10:11 +0000 (0:00:00.019) 0:00:18.419 *******
ok: [sut] => {
"changed": false,
"stat": {
"atime": 1723295409.1427348,
"attr_flags": "e",
"attributes": [
"extents"
],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "e6d560667cee30d6dc11003c19f67ba2bc72144d",
"ctime": 1723295409.182735,
"dev": 51713,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 1041,
"gr_name": "somegroup",
"inode": 172758,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0640",
"mtime": 1723295409.1387348,
"nlink": 1,
"path": "/etc/pki/tls/certs/certid.crt",
"pw_name": "user1",
"readable": true,
"rgrp": true,
"roth": false,
"rusr": true,
"size": 1294,
"uid": 1040,
"version": "1592706586",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if certificate file exists] ***************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:45
Saturday 10 August 2024 13:10:11 +0000 (0:00:00.132) 0:00:18.551 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate file owner and group] *********************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:51
Saturday 10 August 2024 13:10:11 +0000 (0:00:00.019) 0:00:18.571 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate permissions] ******************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:63
Saturday 10 August 2024 13:10:11 +0000 (0:00:00.021) 0:00:18.593 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve key file stats] *************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:69
Saturday 10 August 2024 13:10:11 +0000 (0:00:00.020) 0:00:18.613 *******
ok: [sut] => {
"changed": false,
"stat": {
"atime": 1723295409.0997345,
"attr_flags": "e",
"attributes": [
"extents"
],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "6e2425ab673b432378a1221550e538de319a26d2",
"ctime": 1723295409.182735,
"dev": 51713,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 1041,
"gr_name": "somegroup",
"inode": 172757,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0640",
"mtime": 1723295409.1387348,
"nlink": 1,
"path": "/etc/pki/tls/private/certid.key",
"pw_name": "user1",
"readable": true,
"rgrp": true,
"roth": false,
"rusr": true,
"size": 1708,
"uid": 1040,
"version": "1592706573",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if key file exists] ***********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:74
Saturday 10 August 2024 13:10:12 +0000 (0:00:00.133) 0:00:18.747 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key file owner and group] *****************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:80
Saturday 10 August 2024 13:10:12 +0000 (0:00:00.019) 0:00:18.767 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Parse certificate] *******************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:92
Saturday 10 August 2024 13:10:12 +0000 (0:00:00.023) 0:00:18.790 *******
ok: [sut] => {
"certificate": {
"extensions": {
"authorityKeyIdentifier": {
"critical": false,
"value": "3B:1B:7E:AE:F5:0C:9C:28:9F:18:AB:C5:8B:9C:6B:0A:E3:2B:D4:FA"
},
"basicConstraints": {
"critical": true,
"value": {
"ca": false
}
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": false,
"value": [
"key_encipherment",
"digital_signature"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "www.example.com"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "C9:87:93:20:F2:14:CC:8A:F7:45:55:2C:01:03:1E:D0:CA:C0:5D:B1"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature": "55:4C:FD:52:3B:5D:2C:F9:BB:43:BA:6E:95:AD:B1:0D:9C:69:61:F4:AB:03:7D:6A:70:A8:C9:FB:FE:5A:29:0A:9F:09:1D:1E:76:AA:17:33:42:B7:3D:A5:B1:BA:CE:F1:64:D5:3D:1F:F9:B3:5F:0D:9D:17:37:6B:95:83:DA:80:4E:21:1F:32:67:DB:81:12:8A:8F:A5:77:95:A0:94:6A:A3:D5:DC:B1:C7:C6:0D:FA:62:CC:BE:91:78:60:0A:DE:63:E1:E1:13:E2:0B:39:90:76:BB:30:81:99:DD:22:C8:E8:6F:B2:0A:7C:70:C1:44:8B:33:85:1E:61:30:AE:05:8C:E2:09:0F:47:F1:B0:6A:6C:DB:B9:D7:00:C9:13:81:36:5F:B7:90:91:4E:6B:20:A9:E8:67:A0:35:D4:FD:C7:CD:62:09:8B:E3:14:7C:54:8D:E8:EF:16:7C:87:3F:4C:62:F4:2E:F7:BE:61:E5:83:6A:F2:24:10:74:A8:13:9D:C3:CA:CB:9E:15:17:C3:FF:CB:A5:7B:B0:12:FC:93:D0:4D:F8:58:E8:00:8D:C7:8C:B6:0D:4E:BB:27:7E:A4:07:0D:52:E0:3A:A9:EB:70:59:CD:D4:61:C7:47:B4:97:0E:63:5E:6D:1E:75:F4:E2:AE:E2:C9:F0:98:A3:CC:D2:87"
},
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.com"
}
],
"validity": {
"not_valid_after": "20250810131008Z",
"not_valid_before": "20240810131009Z"
}
},
"changed": false
}
TASK [Load certificate YAML to cert_issued variable] ***************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:98
Saturday 10 August 2024 13:10:12 +0000 (0:00:00.188) 0:00:18.978 *******
ok: [sut] => {
"ansible_facts": {
"cert_issued": {
"extensions": {
"authorityKeyIdentifier": {
"critical": false,
"value": "3B:1B:7E:AE:F5:0C:9C:28:9F:18:AB:C5:8B:9C:6B:0A:E3:2B:D4:FA"
},
"basicConstraints": {
"critical": true,
"value": {
"ca": false
}
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": false,
"value": [
"key_encipherment",
"digital_signature"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "www.example.com"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "C9:87:93:20:F2:14:CC:8A:F7:45:55:2C:01:03:1E:D0:CA:C0:5D:B1"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.com"
}
],
"validity": {
"not_valid_after": "20250810131008Z",
"not_valid_before": "20240810131009Z"
}
}
},
"changed": false
}
TASK [Verify certificate subject] **********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:102
Saturday 10 August 2024 13:10:12 +0000 (0:00:00.021) 0:00:18.999 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate SAN] **************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:111
Saturday 10 August 2024 13:10:12 +0000 (0:00:00.022) 0:00:19.021 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key size] *********************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:120
Saturday 10 August 2024 13:10:12 +0000 (0:00:00.021) 0:00:19.042 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Key Usage] ********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:127
Saturday 10 August 2024 13:10:12 +0000 (0:00:00.025) 0:00:19.068 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Extended Key Usage] ***********************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:138
Saturday 10 August 2024 13:10:12 +0000 (0:00:00.023) 0:00:19.092 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve auto-renew flag] ************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:151
Saturday 10 August 2024 13:10:12 +0000 (0:00:00.022) 0:00:19.115 *******
ok: [sut] => {
"changed": false,
"cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/certid.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'",
"delta": "0:00:00.039870",
"end": "2024-08-10 13:10:12.534478",
"rc": 0,
"start": "2024-08-10 13:10:12.494608"
}
STDOUT:
yes
TASK [Verify certificate auto-renew flag] **************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:160
Saturday 10 August 2024 13:10:12 +0000 (0:00:00.162) 0:00:19.278 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
META: ran handlers
META: ran handlers
PLAY [Issue certificate setting user/group/mode] *******************************
TASK [Gathering Facts] *********************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tests_fs_attrs.yml:67
Saturday 10 August 2024 13:10:12 +0000 (0:00:00.023) 0:00:19.302 *******
ok: [sut]
META: ran handlers
TASK [linux-system-roles.certificate : Set version specific variables] *********
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:2
Saturday 10 August 2024 13:10:12 +0000 (0:00:00.366) 0:00:19.668 *******
included: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml for sut
TASK [linux-system-roles.certificate : Ensure ansible_facts used by role] ******
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml:2
Saturday 10 August 2024 13:10:12 +0000 (0:00:00.010) 0:00:19.679 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [linux-system-roles.certificate : Check if system is ostree] **************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml:11
Saturday 10 August 2024 13:10:12 +0000 (0:00:00.018) 0:00:19.697 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [linux-system-roles.certificate : Set flag to indicate system is ostree] ***
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml:16
Saturday 10 August 2024 13:10:12 +0000 (0:00:00.017) 0:00:19.715 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [linux-system-roles.certificate : Set platform/version specific variables] ***
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml:20
Saturday 10 August 2024 13:10:13 +0000 (0:00:00.017) 0:00:19.732 *******
skipping: [sut] => (item=RedHat.yml) => {
"ansible_loop_var": "item",
"changed": false,
"item": "RedHat.yml",
"skip_reason": "Conditional result was False"
}
skipping: [sut] => (item=CentOS.yml) => {
"ansible_loop_var": "item",
"changed": false,
"item": "CentOS.yml",
"skip_reason": "Conditional result was False"
}
ok: [sut] => (item=CentOS_7.yml) => {
"ansible_facts": {
"__certificate_default_directory": "/etc/pki/tls",
"__certificate_packages": [
"python-pyasn1",
"python-cryptography",
"python-dbus"
]
},
"ansible_included_var_files": [
"/WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/vars/CentOS_7.yml"
],
"ansible_loop_var": "item",
"changed": false,
"item": "CentOS_7.yml"
}
skipping: [sut] => (item=CentOS_7.9.yml) => {
"ansible_loop_var": "item",
"changed": false,
"item": "CentOS_7.9.yml",
"skip_reason": "Conditional result was False"
}
TASK [linux-system-roles.certificate : Ensure certificate role dependencies are installed] ***
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:5
Saturday 10 August 2024 13:10:13 +0000 (0:00:00.031) 0:00:19.764 *******
ok: [sut] => {
"changed": false,
"rc": 0,
"results": [
"python2-pyasn1-0.1.9-7.el7.noarch providing python-pyasn1 is already installed",
"python2-cryptography-1.7.2-2.el7.x86_64 providing python-cryptography is already installed",
"dbus-python-1.1.1-9.el7.x86_64 providing python-dbus is already installed"
]
}
lsrpackages: python-cryptography python-dbus python-pyasn1
TASK [linux-system-roles.certificate : Ensure provider packages are installed] ***
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:24
Saturday 10 August 2024 13:10:13 +0000 (0:00:00.799) 0:00:20.563 *******
ok: [sut] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": false,
"rc": 0,
"results": [
"certmonger-0.78.4-17.el7_9.x86_64 providing certmonger is already installed"
]
}
lsrpackages: certmonger
TASK [linux-system-roles.certificate : Ensure pre-scripts hooks directory exists] ***
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:37
Saturday 10 August 2024 13:10:14 +0000 (0:00:00.328) 0:00:20.892 *******
ok: [sut] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": false,
"gid": 0,
"group": "root",
"mode": "0700",
"owner": "root",
"path": "/etc/certmonger//pre-scripts",
"secontext": "unconfined_u:object_r:etc_t:s0",
"size": 4096,
"state": "directory",
"uid": 0
}
TASK [linux-system-roles.certificate : Ensure post-scripts hooks directory exists] ***
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:63
Saturday 10 August 2024 13:10:14 +0000 (0:00:00.138) 0:00:21.030 *******
ok: [sut] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": false,
"gid": 0,
"group": "root",
"mode": "0700",
"owner": "root",
"path": "/etc/certmonger//post-scripts",
"secontext": "unconfined_u:object_r:etc_t:s0",
"size": 4096,
"state": "directory",
"uid": 0
}
TASK [linux-system-roles.certificate : Ensure provider service is running] *****
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:92
Saturday 10 August 2024 13:10:14 +0000 (0:00:00.136) 0:00:21.166 *******
ok: [sut] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": false,
"enabled": true,
"name": "certmonger",
"state": "started",
"status": {
"ActiveEnterTimestamp": "Sat 2024-08-10 13:10:07 UTC",
"ActiveEnterTimestampMonotonic": "1263239703",
"ActiveExitTimestampMonotonic": "0",
"ActiveState": "active",
"After": "syslog.target system.slice systemd-journald.socket basic.target dbus.service network.target",
"AllowIsolate": "no",
"AmbientCapabilities": "0",
"AssertResult": "yes",
"AssertTimestamp": "Sat 2024-08-10 13:10:07 UTC",
"AssertTimestampMonotonic": "1263214435",
"Before": "shutdown.target multi-user.target",
"BlockIOAccounting": "no",
"BlockIOWeight": "18446744073709551615",
"BusName": "org.fedorahosted.certmonger",
"CPUAccounting": "no",
"CPUQuotaPerSecUSec": "infinity",
"CPUSchedulingPolicy": "0",
"CPUSchedulingPriority": "0",
"CPUSchedulingResetOnFork": "no",
"CPUShares": "18446744073709551615",
"CanIsolate": "no",
"CanReload": "no",
"CanStart": "yes",
"CanStop": "yes",
"CapabilityBoundingSet": "18446744073709551615",
"CollectMode": "inactive",
"ConditionResult": "yes",
"ConditionTimestamp": "Sat 2024-08-10 13:10:07 UTC",
"ConditionTimestampMonotonic": "1263214434",
"Conflicts": "shutdown.target",
"ControlGroup": "/system.slice/certmonger.service",
"ControlPID": "0",
"DefaultDependencies": "yes",
"Delegate": "no",
"Description": "Certificate monitoring and PKI enrollment",
"DevicePolicy": "auto",
"EnvironmentFile": "/etc/sysconfig/certmonger (ignore_errors=yes)",
"ExecMainCode": "0",
"ExecMainExitTimestampMonotonic": "0",
"ExecMainPID": "12070",
"ExecMainStartTimestamp": "Sat 2024-08-10 13:10:07 UTC",
"ExecMainStartTimestampMonotonic": "1263215111",
"ExecMainStatus": "0",
"ExecStart": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /var/run/certmonger.pid -n $OPTS ; ignore_errors=no ; start_time=[Sat 2024-08-10 13:10:07 UTC] ; stop_time=[n/a] ; pid=12070 ; code=(null) ; status=0/0 }",
"FailureAction": "none",
"FileDescriptorStoreMax": "0",
"FragmentPath": "/usr/lib/systemd/system/certmonger.service",
"GuessMainPID": "yes",
"IOScheduling": "0",
"Id": "certmonger.service",
"IgnoreOnIsolate": "no",
"IgnoreOnSnapshot": "no",
"IgnoreSIGPIPE": "yes",
"InactiveEnterTimestampMonotonic": "0",
"InactiveExitTimestamp": "Sat 2024-08-10 13:10:07 UTC",
"InactiveExitTimestampMonotonic": "1263215144",
"JobTimeoutAction": "none",
"JobTimeoutUSec": "0",
"KillMode": "control-group",
"KillSignal": "15",
"LimitAS": "18446744073709551615",
"LimitCORE": "18446744073709551615",
"LimitCPU": "18446744073709551615",
"LimitDATA": "18446744073709551615",
"LimitFSIZE": "18446744073709551615",
"LimitLOCKS": "18446744073709551615",
"LimitMEMLOCK": "65536",
"LimitMSGQUEUE": "819200",
"LimitNICE": "0",
"LimitNOFILE": "4096",
"LimitNPROC": "14311",
"LimitRSS": "18446744073709551615",
"LimitRTPRIO": "0",
"LimitRTTIME": "18446744073709551615",
"LimitSIGPENDING": "14311",
"LimitSTACK": "18446744073709551615",
"LoadState": "loaded",
"MainPID": "12070",
"MemoryAccounting": "no",
"MemoryCurrent": "18446744073709551615",
"MemoryLimit": "18446744073709551615",
"MountFlags": "0",
"Names": "certmonger.service",
"NeedDaemonReload": "no",
"Nice": "0",
"NoNewPrivileges": "no",
"NonBlocking": "no",
"NotifyAccess": "none",
"OOMScoreAdjust": "0",
"OnFailureJobMode": "replace",
"PIDFile": "/var/run/certmonger.pid",
"PermissionsStartOnly": "no",
"PrivateDevices": "no",
"PrivateNetwork": "no",
"PrivateTmp": "no",
"ProtectHome": "no",
"ProtectSystem": "no",
"RefuseManualStart": "no",
"RefuseManualStop": "no",
"RemainAfterExit": "no",
"Requires": "system.slice basic.target",
"Restart": "no",
"RestartUSec": "100ms",
"Result": "success",
"RootDirectoryStartOnly": "no",
"RuntimeDirectoryMode": "0755",
"SameProcessGroup": "no",
"SecureBits": "0",
"SendSIGHUP": "no",
"SendSIGKILL": "yes",
"Slice": "system.slice",
"StandardError": "inherit",
"StandardInput": "null",
"StandardOutput": "journal",
"StartLimitAction": "none",
"StartLimitBurst": "5",
"StartLimitInterval": "10000000",
"StartupBlockIOWeight": "18446744073709551615",
"StartupCPUShares": "18446744073709551615",
"StatusErrno": "0",
"StopWhenUnneeded": "no",
"SubState": "running",
"SyslogLevelPrefix": "yes",
"SyslogPriority": "30",
"SystemCallErrorNumber": "0",
"TTYReset": "no",
"TTYVHangup": "no",
"TTYVTDisallocate": "no",
"TasksAccounting": "no",
"TasksCurrent": "18446744073709551615",
"TasksMax": "18446744073709551615",
"TimeoutStartUSec": "1min 30s",
"TimeoutStopUSec": "1min 30s",
"TimerSlackNSec": "50000",
"Transient": "no",
"Type": "dbus",
"UMask": "0022",
"UnitFilePreset": "disabled",
"UnitFileState": "enabled",
"WantedBy": "multi-user.target",
"WatchdogTimestamp": "Sat 2024-08-10 13:10:07 UTC",
"WatchdogTimestampMonotonic": "1263239662",
"WatchdogUSec": "0"
}
}
TASK [linux-system-roles.certificate : Ensure certificate requests] ************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:104
Saturday 10 August 2024 13:10:14 +0000 (0:00:00.192) 0:00:21.359 *******
changed: [sut] => (item={'name': 'mycert_fs_attrs_mode', 'dns': 'www.example.com', 'owner': 'ftp', 'group': 'ftp', 'mode': '0620', 'ca': 'self-sign'}) => {
"ansible_loop_var": "item",
"changed": true,
"item": {
"ca": "self-sign",
"dns": "www.example.com",
"group": "ftp",
"mode": "0620",
"name": "mycert_fs_attrs_mode",
"owner": "ftp"
}
}
MSG:
Certificate requested (new). File attributes updated.
changed: [sut] => (item={'name': 'certid_mode', 'dns': 'www.example.com', 'mode': '0600', 'ca': 'self-sign'}) => {
"ansible_loop_var": "item",
"changed": true,
"item": {
"ca": "self-sign",
"dns": "www.example.com",
"mode": "0600",
"name": "certid_mode"
}
}
MSG:
Certificate requested (new).
TASK [linux-system-roles.certificate : Slurp the contents of the files] ********
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:156
Saturday 10 August 2024 13:10:15 +0000 (0:00:01.020) 0:00:22.379 *******
skipping: [sut] => (item=['cert', {'name': 'mycert_fs_attrs_mode', 'dns': 'www.example.com', 'owner': 'ftp', 'group': 'ftp', 'mode': '0620', 'ca': 'self-sign'}]) => {
"ansible_loop_var": "item",
"changed": false,
"item": [
"cert",
{
"ca": "self-sign",
"dns": "www.example.com",
"group": "ftp",
"mode": "0620",
"name": "mycert_fs_attrs_mode",
"owner": "ftp"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [sut] => (item=['cert', {'name': 'certid_mode', 'dns': 'www.example.com', 'mode': '0600', 'ca': 'self-sign'}]) => {
"ansible_loop_var": "item",
"changed": false,
"item": [
"cert",
{
"ca": "self-sign",
"dns": "www.example.com",
"mode": "0600",
"name": "certid_mode"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [sut] => (item=['key', {'name': 'mycert_fs_attrs_mode', 'dns': 'www.example.com', 'owner': 'ftp', 'group': 'ftp', 'mode': '0620', 'ca': 'self-sign'}]) => {
"ansible_loop_var": "item",
"changed": false,
"item": [
"key",
{
"ca": "self-sign",
"dns": "www.example.com",
"group": "ftp",
"mode": "0620",
"name": "mycert_fs_attrs_mode",
"owner": "ftp"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [sut] => (item=['key', {'name': 'certid_mode', 'dns': 'www.example.com', 'mode': '0600', 'ca': 'self-sign'}]) => {
"ansible_loop_var": "item",
"changed": false,
"item": [
"key",
{
"ca": "self-sign",
"dns": "www.example.com",
"mode": "0600",
"name": "certid_mode"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [sut] => (item=['ca', {'name': 'mycert_fs_attrs_mode', 'dns': 'www.example.com', 'owner': 'ftp', 'group': 'ftp', 'mode': '0620', 'ca': 'self-sign'}]) => {
"ansible_loop_var": "item",
"changed": false,
"item": [
"ca",
{
"ca": "self-sign",
"dns": "www.example.com",
"group": "ftp",
"mode": "0620",
"name": "mycert_fs_attrs_mode",
"owner": "ftp"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [sut] => (item=['ca', {'name': 'certid_mode', 'dns': 'www.example.com', 'mode': '0600', 'ca': 'self-sign'}]) => {
"ansible_loop_var": "item",
"changed": false,
"item": [
"ca",
{
"ca": "self-sign",
"dns": "www.example.com",
"mode": "0600",
"name": "certid_mode"
}
],
"skip_reason": "Conditional result was False"
}
TASK [linux-system-roles.certificate : Create return data] *********************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:168
Saturday 10 August 2024 13:10:15 +0000 (0:00:00.033) 0:00:22.413 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [linux-system-roles.certificate : Stop tracking certificates] *************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:184
Saturday 10 August 2024 13:10:15 +0000 (0:00:00.017) 0:00:22.430 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [linux-system-roles.certificate : Remove files] ***************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:189
Saturday 10 August 2024 13:10:15 +0000 (0:00:00.018) 0:00:22.448 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
META: ran handlers
META: ran handlers
PLAY [Verify certificate] ******************************************************
TASK [Gathering Facts] *********************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tests_fs_attrs.yml:85
Saturday 10 August 2024 13:10:15 +0000 (0:00:00.021) 0:00:22.470 *******
ok: [sut]
META: ran handlers
TASK [Verify each certificate] *************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tests_fs_attrs.yml:112
Saturday 10 August 2024 13:10:16 +0000 (0:00:00.350) 0:00:22.821 *******
included: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml for sut
included: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml for sut
TASK [Set virtualenv_path] *****************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:2
Saturday 10 August 2024 13:10:16 +0000 (0:00:00.032) 0:00:22.853 *******
ok: [sut] => {
"ansible_facts": {
"__virtualenv_path": "/tmp/certificate-tests-venv"
},
"changed": false
}
TASK [Check if system is ostree] ***********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:9
Saturday 10 August 2024 13:10:16 +0000 (0:00:00.008) 0:00:22.862 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [Set flag to indicate system is ostree] ***********************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:14
Saturday 10 August 2024 13:10:16 +0000 (0:00:00.019) 0:00:22.882 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [Ensure python3 is installed] *********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:18
Saturday 10 August 2024 13:10:16 +0000 (0:00:00.019) 0:00:22.901 *******
ok: [sut] => {
"changed": false,
"rc": 0,
"results": [
"python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed",
"python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed"
]
}
lsrpackages: python2-cryptography
TASK [Ensure python3 is installed] *********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:29
Saturday 10 August 2024 13:10:16 +0000 (0:00:00.329) 0:00:23.231 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [Retrieve certificate file stats] *****************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:40
Saturday 10 August 2024 13:10:16 +0000 (0:00:00.019) 0:00:23.250 *******
ok: [sut] => {
"changed": false,
"stat": {
"atime": 1723295414.9767504,
"attr_flags": "e",
"attributes": [
"extents"
],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "8c73653376a3fdd044d886b31fc3d13f60ca9ba2",
"ctime": 1723295415.1217506,
"dev": 51713,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 50,
"gr_name": "ftp",
"inode": 172760,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0620",
"mtime": 1723295414.9727502,
"nlink": 1,
"path": "/etc/pki/tls/certs/mycert_fs_attrs_mode.crt",
"pw_name": "ftp",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1294,
"uid": 14,
"version": "1592706675",
"wgrp": true,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if certificate file exists] ***************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:45
Saturday 10 August 2024 13:10:16 +0000 (0:00:00.132) 0:00:23.382 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate file owner and group] *********************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:51
Saturday 10 August 2024 13:10:16 +0000 (0:00:00.022) 0:00:23.404 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate permissions] ******************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:63
Saturday 10 August 2024 13:10:16 +0000 (0:00:00.023) 0:00:23.428 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve key file stats] *************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:69
Saturday 10 August 2024 13:10:16 +0000 (0:00:00.021) 0:00:23.449 *******
ok: [sut] => {
"changed": false,
"stat": {
"atime": 1723295414.9337502,
"attr_flags": "e",
"attributes": [
"extents"
],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "e4d5ecf21ae5e2b0a63ac836aa3f92a8acc335f8",
"ctime": 1723295415.1217506,
"dev": 51713,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 50,
"gr_name": "ftp",
"inode": 172759,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0620",
"mtime": 1723295414.9727502,
"nlink": 1,
"path": "/etc/pki/tls/private/mycert_fs_attrs_mode.key",
"pw_name": "ftp",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1704,
"uid": 14,
"version": "1592706662",
"wgrp": true,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if key file exists] ***********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:74
Saturday 10 August 2024 13:10:16 +0000 (0:00:00.130) 0:00:23.580 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key file owner and group] *****************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:80
Saturday 10 August 2024 13:10:16 +0000 (0:00:00.021) 0:00:23.601 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Parse certificate] *******************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:92
Saturday 10 August 2024 13:10:16 +0000 (0:00:00.023) 0:00:23.625 *******
ok: [sut] => {
"certificate": {
"extensions": {
"authorityKeyIdentifier": {
"critical": false,
"value": "3B:1B:7E:AE:F5:0C:9C:28:9F:18:AB:C5:8B:9C:6B:0A:E3:2B:D4:FA"
},
"basicConstraints": {
"critical": true,
"value": {
"ca": false
}
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": false,
"value": [
"key_encipherment",
"digital_signature"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "www.example.com"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "6E:D1:0E:F8:7B:7E:81:56:FA:DE:32:D5:49:5C:5A:71:2D:A7:DC:16"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature": "62:51:09:88:82:E1:22:24:11:C2:E6:C7:B1:6A:B3:86:0F:7B:5E:BC:DC:51:1A:BD:EB:F8:65:60:55:14:1E:5E:9F:2C:5A:BA:22:B1:A3:79:C2:A8:86:67:75:83:3A:C8:DC:6E:D8:09:11:3E:5B:CA:62:94:48:03:C3:69:22:EC:54:C2:89:B7:C6:A7:0E:CD:95:5D:70:E1:EB:C1:01:57:B9:5B:39:60:00:D0:86:58:DE:2D:19:44:A2:DF:E5:C7:5E:C7:5F:F9:79:A6:5D:A4:75:14:BC:EF:D5:17:A2:A6:BB:65:BE:5D:6B:68:E7:18:32:D4:99:3C:ED:84:AF:B7:ED:60:D9:24:D2:C6:9E:65:7F:77:A2:8A:F7:CE:61:24:7A:C8:72:A3:42:3F:BE:20:97:0B:AC:C4:5E:4D:CB:CA:20:53:1B:C3:27:A3:67:BE:44:6E:6A:89:68:38:28:3A:49:19:31:94:C7:C8:10:AD:FB:1F:42:B0:53:A4:01:C0:BF:8C:18:AB:03:D3:FA:32:5A:30:0E:14:E6:47:F3:00:CE:7C:FF:B1:7E:09:04:70:8B:96:3E:E2:0C:BD:DE:16:E8:14:56:C2:BA:88:9B:81:7D:73:02:D3:78:F0:35:B8:F9:8C:6D:5B:CD:4F:B5:3E:42:B0:42:52:8F:CC:44:4E"
},
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.com"
}
],
"validity": {
"not_valid_after": "20250810131008Z",
"not_valid_before": "20240810131014Z"
}
},
"changed": false
}
TASK [Load certificate YAML to cert_issued variable] ***************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:98
Saturday 10 August 2024 13:10:17 +0000 (0:00:00.199) 0:00:23.825 *******
ok: [sut] => {
"ansible_facts": {
"cert_issued": {
"extensions": {
"authorityKeyIdentifier": {
"critical": false,
"value": "3B:1B:7E:AE:F5:0C:9C:28:9F:18:AB:C5:8B:9C:6B:0A:E3:2B:D4:FA"
},
"basicConstraints": {
"critical": true,
"value": {
"ca": false
}
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": false,
"value": [
"key_encipherment",
"digital_signature"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "www.example.com"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "6E:D1:0E:F8:7B:7E:81:56:FA:DE:32:D5:49:5C:5A:71:2D:A7:DC:16"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.com"
}
],
"validity": {
"not_valid_after": "20250810131008Z",
"not_valid_before": "20240810131014Z"
}
}
},
"changed": false
}
TASK [Verify certificate subject] **********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:102
Saturday 10 August 2024 13:10:17 +0000 (0:00:00.020) 0:00:23.845 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate SAN] **************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:111
Saturday 10 August 2024 13:10:17 +0000 (0:00:00.021) 0:00:23.867 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key size] *********************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:120
Saturday 10 August 2024 13:10:17 +0000 (0:00:00.019) 0:00:23.886 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Key Usage] ********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:127
Saturday 10 August 2024 13:10:17 +0000 (0:00:00.019) 0:00:23.906 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Extended Key Usage] ***********************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:138
Saturday 10 August 2024 13:10:17 +0000 (0:00:00.023) 0:00:23.930 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve auto-renew flag] ************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:151
Saturday 10 August 2024 13:10:17 +0000 (0:00:00.022) 0:00:23.952 *******
ok: [sut] => {
"changed": false,
"cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/mycert_fs_attrs_mode.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'",
"delta": "0:00:00.043856",
"end": "2024-08-10 13:10:17.373347",
"rc": 0,
"start": "2024-08-10 13:10:17.329491"
}
STDOUT:
yes
TASK [Verify certificate auto-renew flag] **************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:160
Saturday 10 August 2024 13:10:17 +0000 (0:00:00.164) 0:00:24.117 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Set virtualenv_path] *****************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:2
Saturday 10 August 2024 13:10:17 +0000 (0:00:00.020) 0:00:24.138 *******
ok: [sut] => {
"ansible_facts": {
"__virtualenv_path": "/tmp/certificate-tests-venv"
},
"changed": false
}
TASK [Check if system is ostree] ***********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:9
Saturday 10 August 2024 13:10:17 +0000 (0:00:00.008) 0:00:24.146 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [Set flag to indicate system is ostree] ***********************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:14
Saturday 10 August 2024 13:10:17 +0000 (0:00:00.017) 0:00:24.164 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [Ensure python3 is installed] *********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:18
Saturday 10 August 2024 13:10:17 +0000 (0:00:00.019) 0:00:24.184 *******
ok: [sut] => {
"changed": false,
"rc": 0,
"results": [
"python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed",
"python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed"
]
}
lsrpackages: python2-cryptography
TASK [Ensure python3 is installed] *********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:29
Saturday 10 August 2024 13:10:17 +0000 (0:00:00.328) 0:00:24.512 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [Retrieve certificate file stats] *****************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:40
Saturday 10 August 2024 13:10:17 +0000 (0:00:00.018) 0:00:24.531 *******
ok: [sut] => {
"changed": false,
"stat": {
"atime": 1723295415.534752,
"attr_flags": "e",
"attributes": [
"extents"
],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "a729999d4fd3d286af50a03717f162390e58b595",
"ctime": 1723295415.5307517,
"dev": 51713,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 0,
"gr_name": "root",
"inode": 172762,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0600",
"mtime": 1723295415.5307517,
"nlink": 1,
"path": "/etc/pki/tls/certs/certid_mode.crt",
"pw_name": "root",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1294,
"uid": 0,
"version": "1592706711",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if certificate file exists] ***************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:45
Saturday 10 August 2024 13:10:17 +0000 (0:00:00.130) 0:00:24.662 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate file owner and group] *********************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:51
Saturday 10 August 2024 13:10:17 +0000 (0:00:00.019) 0:00:24.681 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate permissions] ******************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:63
Saturday 10 August 2024 13:10:17 +0000 (0:00:00.022) 0:00:24.704 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve key file stats] *************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:69
Saturday 10 August 2024 13:10:17 +0000 (0:00:00.020) 0:00:24.725 *******
ok: [sut] => {
"changed": false,
"stat": {
"atime": 1723295415.4927516,
"attr_flags": "e",
"attributes": [
"extents"
],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "e2077acecf50b89a76cd863b6b3f6215f715b1a1",
"ctime": 1723295415.5307517,
"dev": 51713,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 0,
"gr_name": "root",
"inode": 172761,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0600",
"mtime": 1723295415.5307517,
"nlink": 1,
"path": "/etc/pki/tls/private/certid_mode.key",
"pw_name": "root",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1704,
"uid": 0,
"version": "1592706698",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if key file exists] ***********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:74
Saturday 10 August 2024 13:10:18 +0000 (0:00:00.133) 0:00:24.858 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key file owner and group] *****************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:80
Saturday 10 August 2024 13:10:18 +0000 (0:00:00.022) 0:00:24.880 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Parse certificate] *******************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:92
Saturday 10 August 2024 13:10:18 +0000 (0:00:00.026) 0:00:24.907 *******
ok: [sut] => {
"certificate": {
"extensions": {
"authorityKeyIdentifier": {
"critical": false,
"value": "3B:1B:7E:AE:F5:0C:9C:28:9F:18:AB:C5:8B:9C:6B:0A:E3:2B:D4:FA"
},
"basicConstraints": {
"critical": true,
"value": {
"ca": false
}
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": false,
"value": [
"key_encipherment",
"digital_signature"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "www.example.com"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "8C:78:E5:26:94:21:6B:14:06:E6:56:53:3C:3F:DB:9A:55:98:D1:B4"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.com"
}
],
"validity": {
"not_valid_after": "20250810131008Z",
"not_valid_before": "20240810131015Z"
}
},
"changed": false
}
TASK [Load certificate YAML to cert_issued variable] ***************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:98
Saturday 10 August 2024 13:10:18 +0000 (0:00:00.184) 0:00:25.092 *******
ok: [sut] => {
"ansible_facts": {
"cert_issued": {
"extensions": {
"authorityKeyIdentifier": {
"critical": false,
"value": "3B:1B:7E:AE:F5:0C:9C:28:9F:18:AB:C5:8B:9C:6B:0A:E3:2B:D4:FA"
},
"basicConstraints": {
"critical": true,
"value": {
"ca": false
}
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": false,
"value": [
"key_encipherment",
"digital_signature"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "www.example.com"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "8C:78:E5:26:94:21:6B:14:06:E6:56:53:3C:3F:DB:9A:55:98:D1:B4"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.com"
}
],
"validity": {
"not_valid_after": "20250810131008Z",
"not_valid_before": "20240810131015Z"
}
}
},
"changed": false
}
TASK [Verify certificate subject] **********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:102
Saturday 10 August 2024 13:10:18 +0000 (0:00:00.019) 0:00:25.111 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate SAN] **************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:111
Saturday 10 August 2024 13:10:18 +0000 (0:00:00.020) 0:00:25.132 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key size] *********************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:120
Saturday 10 August 2024 13:10:18 +0000 (0:00:00.019) 0:00:25.152 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Key Usage] ********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:127
Saturday 10 August 2024 13:10:18 +0000 (0:00:00.019) 0:00:25.171 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Extended Key Usage] ***********************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:138
Saturday 10 August 2024 13:10:18 +0000 (0:00:00.022) 0:00:25.194 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve auto-renew flag] ************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:151
Saturday 10 August 2024 13:10:18 +0000 (0:00:00.027) 0:00:25.221 *******
ok: [sut] => {
"changed": false,
"cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/certid_mode.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'",
"delta": "0:00:00.043037",
"end": "2024-08-10 13:10:18.642308",
"rc": 0,
"start": "2024-08-10 13:10:18.599271"
}
STDOUT:
yes
TASK [Verify certificate auto-renew flag] **************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:160
Saturday 10 August 2024 13:10:18 +0000 (0:00:00.164) 0:00:25.385 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
META: ran handlers
META: ran handlers
PLAY RECAP *********************************************************************
sut : ok=101 changed=9 unreachable=0 failed=0 skipped=24 rescued=0 ignored=0
Saturday 10 August 2024 13:10:18 +0000 (0:00:00.020) 0:00:25.406 *******
===============================================================================
linux-system-roles.certificate : Ensure certificate role dependencies are installed --- 6.10s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:5
linux-system-roles.certificate : Ensure provider packages are installed --- 5.94s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:24
linux-system-roles.certificate : Ensure certificate requests ------------ 1.24s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:104
linux-system-roles.certificate : Ensure certificate requests ------------ 1.02s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:104
linux-system-roles.certificate : Ensure certificate role dependencies are installed --- 0.80s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:5
Gathering Facts --------------------------------------------------------- 0.69s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/tests_fs_attrs.yml:2 ---------------------
Parse certificate ------------------------------------------------------- 0.47s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:92
linux-system-roles.certificate : Ensure provider service is running ----- 0.44s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:92
Gathering Facts --------------------------------------------------------- 0.37s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/tests_fs_attrs.yml:67 --------------------
Gathering Facts --------------------------------------------------------- 0.36s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/tests_fs_attrs.yml:14 --------------------
Gathering Facts --------------------------------------------------------- 0.35s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/tests_fs_attrs.yml:85 --------------------
Gathering Facts --------------------------------------------------------- 0.35s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/tests_fs_attrs.yml:32 --------------------
Ensure user exists ------------------------------------------------------ 0.35s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/tests_fs_attrs.yml:5 ---------------------
Ensure python3 is installed --------------------------------------------- 0.33s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:18
Ensure python3 is installed --------------------------------------------- 0.33s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:18
Ensure python3 is installed --------------------------------------------- 0.33s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:18
Ensure python3 is installed --------------------------------------------- 0.33s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:18
linux-system-roles.certificate : Ensure provider packages are installed --- 0.33s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:24
Retrieve auto-renew flag ------------------------------------------------ 0.23s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:151
linux-system-roles.certificate : Ensure pre-scripts hooks directory exists --- 0.22s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:37
---^---^---^---^---^---
# STDERR:
---v---v---v---v---v---
---^---^---^---^---^---