# STDOUT:
---v---v---v---v---v---
ansible-playbook 2.9.27
config file = /etc/ansible/ansible.cfg
configured module search path = ['/home/jenkins/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules']
ansible python module location = /opt/ansible-2.9/lib/python3.9/site-packages/ansible
executable location = /opt/ansible-2.9/bin/ansible-playbook
python version = 3.9.18 (main, Sep 7 2023, 00:00:00) [GCC 11.4.1 20230605 (Red Hat 11.4.1-2)]
Using /etc/ansible/ansible.cfg as config file
Skipping callback 'actionable', as we already have a stdout callback.
Skipping callback 'counter_enabled', as we already have a stdout callback.
Skipping callback 'debug', as we already have a stdout callback.
Skipping callback 'dense', as we already have a stdout callback.
Skipping callback 'dense', as we already have a stdout callback.
Skipping callback 'full_skip', as we already have a stdout callback.
Skipping callback 'json', as we already have a stdout callback.
Skipping callback 'minimal', as we already have a stdout callback.
Skipping callback 'null', as we already have a stdout callback.
Skipping callback 'oneline', as we already have a stdout callback.
Skipping callback 'selective', as we already have a stdout callback.
Skipping callback 'skippy', as we already have a stdout callback.
Skipping callback 'stderr', as we already have a stdout callback.
Skipping callback 'unixy', as we already have a stdout callback.
Skipping callback 'yaml', as we already have a stdout callback.
PLAYBOOK: tests_no_auto_renew.yml **********************************************
2 plays in /WORKDIR/git-weekly-ci4gcjhs0g/tests/tests_no_auto_renew.yml
PLAY [Issue simple self-signed certificate] ************************************
TASK [Gathering Facts] *********************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tests_no_auto_renew.yml:2
Saturday 10 August 2024 13:57:51 +0000 (0:00:00.012) 0:00:00.012 *******
ok: [sut]
META: ran handlers
TASK [linux-system-roles.certificate : Set version specific variables] *********
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:2
Saturday 10 August 2024 13:57:51 +0000 (0:00:00.825) 0:00:00.838 *******
included: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml for sut
TASK [linux-system-roles.certificate : Ensure ansible_facts used by role] ******
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml:2
Saturday 10 August 2024 13:57:51 +0000 (0:00:00.010) 0:00:00.849 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [linux-system-roles.certificate : Check if system is ostree] **************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml:11
Saturday 10 August 2024 13:57:51 +0000 (0:00:00.017) 0:00:00.867 *******
ok: [sut] => {
"changed": false,
"stat": {
"exists": false
}
}
TASK [linux-system-roles.certificate : Set flag to indicate system is ostree] ***
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml:16
Saturday 10 August 2024 13:57:52 +0000 (0:00:00.205) 0:00:01.073 *******
ok: [sut] => {
"ansible_facts": {
"__certificate_is_ostree": false
},
"changed": false
}
TASK [linux-system-roles.certificate : Set platform/version specific variables] ***
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml:20
Saturday 10 August 2024 13:57:52 +0000 (0:00:00.019) 0:00:01.093 *******
skipping: [sut] => (item=RedHat.yml) => {
"ansible_loop_var": "item",
"changed": false,
"item": "RedHat.yml",
"skip_reason": "Conditional result was False"
}
skipping: [sut] => (item=CentOS.yml) => {
"ansible_loop_var": "item",
"changed": false,
"item": "CentOS.yml",
"skip_reason": "Conditional result was False"
}
ok: [sut] => (item=CentOS_7.yml) => {
"ansible_facts": {
"__certificate_default_directory": "/etc/pki/tls",
"__certificate_packages": [
"python-pyasn1",
"python-cryptography",
"python-dbus"
]
},
"ansible_included_var_files": [
"/WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/vars/CentOS_7.yml"
],
"ansible_loop_var": "item",
"changed": false,
"item": "CentOS_7.yml"
}
skipping: [sut] => (item=CentOS_7.9.yml) => {
"ansible_loop_var": "item",
"changed": false,
"item": "CentOS_7.9.yml",
"skip_reason": "Conditional result was False"
}
TASK [linux-system-roles.certificate : Ensure certificate role dependencies are installed] ***
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:5
Saturday 10 August 2024 13:57:52 +0000 (0:00:00.031) 0:00:01.124 *******
changed: [sut] => {
"changed": true,
"changes": {
"installed": [
"python-pyasn1",
"python-cryptography"
]
},
"rc": 0,
"results": [
"dbus-python-1.1.1-9.el7.x86_64 providing python-dbus is already installed",
"Loaded plugins: fastestmirror\nLoading mirror speeds from cached hostfile\nResolving Dependencies\n--> Running transaction check\n---> Package python2-cryptography.x86_64 0:1.7.2-2.el7 will be installed\n--> Processing Dependency: python-idna >= 2.0 for package: python2-cryptography-1.7.2-2.el7.x86_64\n--> Processing Dependency: python-cffi >= 1.4.1 for package: python2-cryptography-1.7.2-2.el7.x86_64\n--> Processing Dependency: python-enum34 for package: python2-cryptography-1.7.2-2.el7.x86_64\n---> Package python2-pyasn1.noarch 0:0.1.9-7.el7 will be installed\n--> Running transaction check\n---> Package python-cffi.x86_64 0:1.6.0-5.el7 will be installed\n--> Processing Dependency: python-pycparser for package: python-cffi-1.6.0-5.el7.x86_64\n---> Package python-enum34.noarch 0:1.0.4-1.el7 will be installed\n---> Package python-idna.noarch 0:2.4-1.el7 will be installed\n--> Running transaction check\n---> Package python-pycparser.noarch 0:2.14-1.el7 will be installed\n--> Processing Dependency: python-ply for package: python-pycparser-2.14-1.el7.noarch\n--> Running transaction check\n---> Package python-ply.noarch 0:3.4-11.el7 will be installed\n--> Finished Dependency Resolution\n\nDependencies Resolved\n\n================================================================================\n Package Arch Version Repository Size\n================================================================================\nInstalling:\n python2-cryptography x86_64 1.7.2-2.el7 base 502 k\n python2-pyasn1 noarch 0.1.9-7.el7 base 100 k\nInstalling for dependencies:\n python-cffi x86_64 1.6.0-5.el7 base 218 k\n python-enum34 noarch 1.0.4-1.el7 base 52 k\n python-idna noarch 2.4-1.el7 base 94 k\n python-ply noarch 3.4-11.el7 base 123 k\n python-pycparser noarch 2.14-1.el7 base 104 k\n\nTransaction Summary\n================================================================================\nInstall 2 Packages (+5 Dependent packages)\n\nTotal download size: 1.2 M\nInstalled size: 6.1 M\nDownloading packages:\n--------------------------------------------------------------------------------\nTotal 3.5 MB/s | 1.2 MB 00:00 \nRunning transaction check\nRunning transaction test\nTransaction test succeeded\nRunning transaction\n Installing : python2-pyasn1-0.1.9-7.el7.noarch 1/7 \n Installing : python-enum34-1.0.4-1.el7.noarch 2/7 \n Installing : python-ply-3.4-11.el7.noarch 3/7 \n Installing : python-pycparser-2.14-1.el7.noarch 4/7 \n Installing : python-cffi-1.6.0-5.el7.x86_64 5/7 \n Installing : python-idna-2.4-1.el7.noarch 6/7 \n Installing : python2-cryptography-1.7.2-2.el7.x86_64 7/7 \n Verifying : python-idna-2.4-1.el7.noarch 1/7 \n Verifying : python-pycparser-2.14-1.el7.noarch 2/7 \n Verifying : python-ply-3.4-11.el7.noarch 3/7 \n Verifying : python-cffi-1.6.0-5.el7.x86_64 4/7 \n Verifying : python-enum34-1.0.4-1.el7.noarch 5/7 \n Verifying : python2-pyasn1-0.1.9-7.el7.noarch 6/7 \n Verifying : python2-cryptography-1.7.2-2.el7.x86_64 7/7 \n\nInstalled:\n python2-cryptography.x86_64 0:1.7.2-2.el7 python2-pyasn1.noarch 0:0.1.9-7.el7\n\nDependency Installed:\n python-cffi.x86_64 0:1.6.0-5.el7 python-enum34.noarch 0:1.0.4-1.el7 \n python-idna.noarch 0:2.4-1.el7 python-ply.noarch 0:3.4-11.el7 \n python-pycparser.noarch 0:2.14-1.el7 \n\nComplete!\n"
]
}
lsrpackages: python-cryptography python-dbus python-pyasn1
TASK [linux-system-roles.certificate : Ensure provider packages are installed] ***
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:24
Saturday 10 August 2024 13:57:59 +0000 (0:00:06.994) 0:00:08.118 *******
changed: [sut] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": true,
"changes": {
"installed": [
"certmonger"
]
},
"rc": 0,
"results": [
"Loaded plugins: fastestmirror\nLoading mirror speeds from cached hostfile\nResolving Dependencies\n--> Running transaction check\n---> Package certmonger.x86_64 0:0.78.4-17.el7_9 will be installed\n--> Processing Dependency: libtevent.so.0(TEVENT_0.9.9)(64bit) for package: certmonger-0.78.4-17.el7_9.x86_64\n--> Processing Dependency: libtalloc.so.2(TALLOC_2.0.2)(64bit) for package: certmonger-0.78.4-17.el7_9.x86_64\n--> Processing Dependency: libxmlrpc_util.so.3()(64bit) for package: certmonger-0.78.4-17.el7_9.x86_64\n--> Processing Dependency: libxmlrpc_client.so.3()(64bit) for package: certmonger-0.78.4-17.el7_9.x86_64\n--> Processing Dependency: libxmlrpc.so.3()(64bit) for package: certmonger-0.78.4-17.el7_9.x86_64\n--> Processing Dependency: libtevent.so.0()(64bit) for package: certmonger-0.78.4-17.el7_9.x86_64\n--> Processing Dependency: libtalloc.so.2()(64bit) for package: certmonger-0.78.4-17.el7_9.x86_64\n--> Running transaction check\n---> Package libtalloc.x86_64 0:2.1.16-1.el7 will be installed\n---> Package libtevent.x86_64 0:0.9.39-1.el7 will be installed\n---> Package xmlrpc-c.x86_64 0:1.32.5-1905.svn2451.el7 will be installed\n---> Package xmlrpc-c-client.x86_64 0:1.32.5-1905.svn2451.el7 will be installed\n--> Finished Dependency Resolution\n\nDependencies Resolved\n\n================================================================================\n Package Arch Version Repository Size\n================================================================================\nInstalling:\n certmonger x86_64 0.78.4-17.el7_9 updates 608 k\nInstalling for dependencies:\n libtalloc x86_64 2.1.16-1.el7 base 33 k\n libtevent x86_64 0.9.39-1.el7 base 41 k\n xmlrpc-c x86_64 1.32.5-1905.svn2451.el7 base 130 k\n xmlrpc-c-client x86_64 1.32.5-1905.svn2451.el7 base 32 k\n\nTransaction Summary\n================================================================================\nInstall 1 Package (+4 Dependent packages)\n\nTotal download size: 843 k\nInstalled size: 3.3 M\nDownloading packages:\n--------------------------------------------------------------------------------\nTotal 2.1 MB/s | 843 kB 00:00 \nRunning transaction check\nRunning transaction test\nTransaction test succeeded\nRunning transaction\n Installing : libtalloc-2.1.16-1.el7.x86_64 1/5 \n Installing : xmlrpc-c-1.32.5-1905.svn2451.el7.x86_64 2/5 \n Installing : xmlrpc-c-client-1.32.5-1905.svn2451.el7.x86_64 3/5 \n Installing : libtevent-0.9.39-1.el7.x86_64 4/5 \n Installing : certmonger-0.78.4-17.el7_9.x86_64 5/5 \n Verifying : xmlrpc-c-1.32.5-1905.svn2451.el7.x86_64 1/5 \n Verifying : libtalloc-2.1.16-1.el7.x86_64 2/5 \n Verifying : certmonger-0.78.4-17.el7_9.x86_64 3/5 \n Verifying : xmlrpc-c-client-1.32.5-1905.svn2451.el7.x86_64 4/5 \n Verifying : libtevent-0.9.39-1.el7.x86_64 5/5 \n\nInstalled:\n certmonger.x86_64 0:0.78.4-17.el7_9 \n\nDependency Installed:\n libtalloc.x86_64 0:2.1.16-1.el7 \n libtevent.x86_64 0:0.9.39-1.el7 \n xmlrpc-c.x86_64 0:1.32.5-1905.svn2451.el7 \n xmlrpc-c-client.x86_64 0:1.32.5-1905.svn2451.el7 \n\nComplete!\n"
]
}
lsrpackages: certmonger
TASK [linux-system-roles.certificate : Ensure pre-scripts hooks directory exists] ***
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:37
Saturday 10 August 2024 13:58:06 +0000 (0:00:07.192) 0:00:15.311 *******
changed: [sut] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": true,
"gid": 0,
"group": "root",
"mode": "0700",
"owner": "root",
"path": "/etc/certmonger//pre-scripts",
"secontext": "unconfined_u:object_r:etc_t:s0",
"size": 4096,
"state": "directory",
"uid": 0
}
TASK [linux-system-roles.certificate : Ensure post-scripts hooks directory exists] ***
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:63
Saturday 10 August 2024 13:58:06 +0000 (0:00:00.229) 0:00:15.541 *******
changed: [sut] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": true,
"gid": 0,
"group": "root",
"mode": "0700",
"owner": "root",
"path": "/etc/certmonger//post-scripts",
"secontext": "unconfined_u:object_r:etc_t:s0",
"size": 4096,
"state": "directory",
"uid": 0
}
TASK [linux-system-roles.certificate : Ensure provider service is running] *****
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:92
Saturday 10 August 2024 13:58:06 +0000 (0:00:00.157) 0:00:15.698 *******
changed: [sut] => (item=certmonger) => {
"__certificate_provider": "certmonger",
"ansible_loop_var": "__certificate_provider",
"changed": true,
"enabled": true,
"name": "certmonger",
"state": "started",
"status": {
"ActiveEnterTimestampMonotonic": "0",
"ActiveExitTimestampMonotonic": "0",
"ActiveState": "inactive",
"After": "syslog.target dbus.service basic.target systemd-journald.socket system.slice network.target",
"AllowIsolate": "no",
"AmbientCapabilities": "0",
"AssertResult": "no",
"AssertTimestampMonotonic": "0",
"Before": "shutdown.target",
"BlockIOAccounting": "no",
"BlockIOWeight": "18446744073709551615",
"BusName": "org.fedorahosted.certmonger",
"CPUAccounting": "no",
"CPUQuotaPerSecUSec": "infinity",
"CPUSchedulingPolicy": "0",
"CPUSchedulingPriority": "0",
"CPUSchedulingResetOnFork": "no",
"CPUShares": "18446744073709551615",
"CanIsolate": "no",
"CanReload": "no",
"CanStart": "yes",
"CanStop": "yes",
"CapabilityBoundingSet": "18446744073709551615",
"CollectMode": "inactive",
"ConditionResult": "no",
"ConditionTimestampMonotonic": "0",
"Conflicts": "shutdown.target",
"ControlPID": "0",
"DefaultDependencies": "yes",
"Delegate": "no",
"Description": "Certificate monitoring and PKI enrollment",
"DevicePolicy": "auto",
"EnvironmentFile": "/etc/sysconfig/certmonger (ignore_errors=yes)",
"ExecMainCode": "0",
"ExecMainExitTimestampMonotonic": "0",
"ExecMainPID": "0",
"ExecMainStartTimestampMonotonic": "0",
"ExecMainStatus": "0",
"ExecStart": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /var/run/certmonger.pid -n $OPTS ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }",
"FailureAction": "none",
"FileDescriptorStoreMax": "0",
"FragmentPath": "/usr/lib/systemd/system/certmonger.service",
"GuessMainPID": "yes",
"IOScheduling": "0",
"Id": "certmonger.service",
"IgnoreOnIsolate": "no",
"IgnoreOnSnapshot": "no",
"IgnoreSIGPIPE": "yes",
"InactiveEnterTimestampMonotonic": "0",
"InactiveExitTimestampMonotonic": "0",
"JobTimeoutAction": "none",
"JobTimeoutUSec": "0",
"KillMode": "control-group",
"KillSignal": "15",
"LimitAS": "18446744073709551615",
"LimitCORE": "18446744073709551615",
"LimitCPU": "18446744073709551615",
"LimitDATA": "18446744073709551615",
"LimitFSIZE": "18446744073709551615",
"LimitLOCKS": "18446744073709551615",
"LimitMEMLOCK": "65536",
"LimitMSGQUEUE": "819200",
"LimitNICE": "0",
"LimitNOFILE": "4096",
"LimitNPROC": "14311",
"LimitRSS": "18446744073709551615",
"LimitRTPRIO": "0",
"LimitRTTIME": "18446744073709551615",
"LimitSIGPENDING": "14311",
"LimitSTACK": "18446744073709551615",
"LoadState": "loaded",
"MainPID": "0",
"MemoryAccounting": "no",
"MemoryCurrent": "18446744073709551615",
"MemoryLimit": "18446744073709551615",
"MountFlags": "0",
"Names": "certmonger.service",
"NeedDaemonReload": "no",
"Nice": "0",
"NoNewPrivileges": "no",
"NonBlocking": "no",
"NotifyAccess": "none",
"OOMScoreAdjust": "0",
"OnFailureJobMode": "replace",
"PIDFile": "/var/run/certmonger.pid",
"PermissionsStartOnly": "no",
"PrivateDevices": "no",
"PrivateNetwork": "no",
"PrivateTmp": "no",
"ProtectHome": "no",
"ProtectSystem": "no",
"RefuseManualStart": "no",
"RefuseManualStop": "no",
"RemainAfterExit": "no",
"Requires": "basic.target system.slice",
"Restart": "no",
"RestartUSec": "100ms",
"Result": "success",
"RootDirectoryStartOnly": "no",
"RuntimeDirectoryMode": "0755",
"SameProcessGroup": "no",
"SecureBits": "0",
"SendSIGHUP": "no",
"SendSIGKILL": "yes",
"Slice": "system.slice",
"StandardError": "inherit",
"StandardInput": "null",
"StandardOutput": "journal",
"StartLimitAction": "none",
"StartLimitBurst": "5",
"StartLimitInterval": "10000000",
"StartupBlockIOWeight": "18446744073709551615",
"StartupCPUShares": "18446744073709551615",
"StatusErrno": "0",
"StopWhenUnneeded": "no",
"SubState": "dead",
"SyslogLevelPrefix": "yes",
"SyslogPriority": "30",
"SystemCallErrorNumber": "0",
"TTYReset": "no",
"TTYVHangup": "no",
"TTYVTDisallocate": "no",
"TasksAccounting": "no",
"TasksCurrent": "18446744073709551615",
"TasksMax": "18446744073709551615",
"TimeoutStartUSec": "1min 30s",
"TimeoutStopUSec": "1min 30s",
"TimerSlackNSec": "50000",
"Transient": "no",
"Type": "dbus",
"UMask": "0022",
"UnitFilePreset": "disabled",
"UnitFileState": "disabled",
"WatchdogTimestampMonotonic": "0",
"WatchdogUSec": "0"
}
}
TASK [linux-system-roles.certificate : Ensure certificate requests] ************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:104
Saturday 10 August 2024 13:58:07 +0000 (0:00:00.476) 0:00:16.175 *******
changed: [sut] => (item={'name': 'mycert_no_auto_renew', 'dns': 'www.example.com', 'ca': 'self-sign', 'auto_renew': False}) => {
"ansible_loop_var": "item",
"changed": true,
"item": {
"auto_renew": false,
"ca": "self-sign",
"dns": "www.example.com",
"name": "mycert_no_auto_renew"
}
}
MSG:
Certificate requested (new).
changed: [sut] => (item={'name': 'defaultcert', 'dns': 'www.example.com', 'ca': 'self-sign'}) => {
"ansible_loop_var": "item",
"changed": true,
"item": {
"ca": "self-sign",
"dns": "www.example.com",
"name": "defaultcert"
}
}
MSG:
Certificate requested (new).
TASK [linux-system-roles.certificate : Slurp the contents of the files] ********
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:156
Saturday 10 August 2024 13:58:08 +0000 (0:00:01.231) 0:00:17.406 *******
skipping: [sut] => (item=['cert', {'name': 'mycert_no_auto_renew', 'dns': 'www.example.com', 'ca': 'self-sign', 'auto_renew': False}]) => {
"ansible_loop_var": "item",
"changed": false,
"item": [
"cert",
{
"auto_renew": false,
"ca": "self-sign",
"dns": "www.example.com",
"name": "mycert_no_auto_renew"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [sut] => (item=['cert', {'name': 'defaultcert', 'dns': 'www.example.com', 'ca': 'self-sign'}]) => {
"ansible_loop_var": "item",
"changed": false,
"item": [
"cert",
{
"ca": "self-sign",
"dns": "www.example.com",
"name": "defaultcert"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [sut] => (item=['key', {'name': 'mycert_no_auto_renew', 'dns': 'www.example.com', 'ca': 'self-sign', 'auto_renew': False}]) => {
"ansible_loop_var": "item",
"changed": false,
"item": [
"key",
{
"auto_renew": false,
"ca": "self-sign",
"dns": "www.example.com",
"name": "mycert_no_auto_renew"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [sut] => (item=['key', {'name': 'defaultcert', 'dns': 'www.example.com', 'ca': 'self-sign'}]) => {
"ansible_loop_var": "item",
"changed": false,
"item": [
"key",
{
"ca": "self-sign",
"dns": "www.example.com",
"name": "defaultcert"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [sut] => (item=['ca', {'name': 'mycert_no_auto_renew', 'dns': 'www.example.com', 'ca': 'self-sign', 'auto_renew': False}]) => {
"ansible_loop_var": "item",
"changed": false,
"item": [
"ca",
{
"auto_renew": false,
"ca": "self-sign",
"dns": "www.example.com",
"name": "mycert_no_auto_renew"
}
],
"skip_reason": "Conditional result was False"
}
skipping: [sut] => (item=['ca', {'name': 'defaultcert', 'dns': 'www.example.com', 'ca': 'self-sign'}]) => {
"ansible_loop_var": "item",
"changed": false,
"item": [
"ca",
{
"ca": "self-sign",
"dns": "www.example.com",
"name": "defaultcert"
}
],
"skip_reason": "Conditional result was False"
}
TASK [linux-system-roles.certificate : Create return data] *********************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:168
Saturday 10 August 2024 13:58:08 +0000 (0:00:00.031) 0:00:17.437 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [linux-system-roles.certificate : Stop tracking certificates] *************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:184
Saturday 10 August 2024 13:58:08 +0000 (0:00:00.017) 0:00:17.454 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [linux-system-roles.certificate : Remove files] ***************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:189
Saturday 10 August 2024 13:58:08 +0000 (0:00:00.017) 0:00:17.472 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
META: ran handlers
META: ran handlers
PLAY [Verify certificate] ******************************************************
TASK [Gathering Facts] *********************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tests_no_auto_renew.yml:17
Saturday 10 August 2024 13:58:08 +0000 (0:00:00.019) 0:00:17.492 *******
ok: [sut]
META: ran handlers
TASK [Verify each certificate] *************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tests_no_auto_renew.yml:42
Saturday 10 August 2024 13:58:08 +0000 (0:00:00.426) 0:00:17.919 *******
included: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml for sut
included: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml for sut
TASK [Set virtualenv_path] *****************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:2
Saturday 10 August 2024 13:58:08 +0000 (0:00:00.032) 0:00:17.952 *******
ok: [sut] => {
"ansible_facts": {
"__virtualenv_path": "/tmp/certificate-tests-venv"
},
"changed": false
}
TASK [Check if system is ostree] ***********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:9
Saturday 10 August 2024 13:58:08 +0000 (0:00:00.009) 0:00:17.961 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [Set flag to indicate system is ostree] ***********************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:14
Saturday 10 August 2024 13:58:08 +0000 (0:00:00.017) 0:00:17.979 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [Ensure python3 is installed] *********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:18
Saturday 10 August 2024 13:58:09 +0000 (0:00:00.017) 0:00:17.996 *******
ok: [sut] => {
"changed": false,
"rc": 0,
"results": [
"python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed",
"python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed"
]
}
lsrpackages: python2-cryptography
TASK [Ensure python3 is installed] *********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:29
Saturday 10 August 2024 13:58:09 +0000 (0:00:00.389) 0:00:18.385 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [Retrieve certificate file stats] *****************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:40
Saturday 10 August 2024 13:58:09 +0000 (0:00:00.018) 0:00:18.404 *******
ok: [sut] => {
"changed": false,
"stat": {
"atime": 1723298287.924572,
"attr_flags": "e",
"attributes": [
"extents"
],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "24c26a241cd2c2eaf52688e77eb2da4b9e45a675",
"ctime": 1723298287.919572,
"dev": 51713,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 0,
"gr_name": "root",
"inode": 172754,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0600",
"mtime": 1723298287.919572,
"nlink": 1,
"path": "/etc/pki/tls/certs/mycert_no_auto_renew.crt",
"pw_name": "root",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1294,
"uid": 0,
"version": "1961320302",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if certificate file exists] ***************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:45
Saturday 10 August 2024 13:58:09 +0000 (0:00:00.150) 0:00:18.554 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate file owner and group] *********************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:51
Saturday 10 August 2024 13:58:09 +0000 (0:00:00.021) 0:00:18.576 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate permissions] ******************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:63
Saturday 10 August 2024 13:58:09 +0000 (0:00:00.022) 0:00:18.598 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve key file stats] *************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:69
Saturday 10 August 2024 13:58:09 +0000 (0:00:00.020) 0:00:18.618 *******
ok: [sut] => {
"changed": false,
"stat": {
"atime": 1723298287.873573,
"attr_flags": "e",
"attributes": [
"extents"
],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "d65eba66e6898f3c4268a26b438c971811957b6a",
"ctime": 1723298287.919572,
"dev": 51713,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 0,
"gr_name": "root",
"inode": 172753,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0600",
"mtime": 1723298287.919572,
"nlink": 1,
"path": "/etc/pki/tls/private/mycert_no_auto_renew.key",
"pw_name": "root",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1704,
"uid": 0,
"version": "1961320289",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if key file exists] ***********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:74
Saturday 10 August 2024 13:58:09 +0000 (0:00:00.150) 0:00:18.769 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key file owner and group] *****************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:80
Saturday 10 August 2024 13:58:09 +0000 (0:00:00.020) 0:00:18.790 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Parse certificate] *******************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:92
Saturday 10 August 2024 13:58:09 +0000 (0:00:00.022) 0:00:18.812 *******
ok: [sut] => {
"certificate": {
"extensions": {
"authorityKeyIdentifier": {
"critical": false,
"value": "57:98:67:1C:FB:58:97:B5:31:8F:60:E2:B9:DF:09:F1:B1:DD:1A:1E"
},
"basicConstraints": {
"critical": true,
"value": {
"ca": false
}
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": false,
"value": [
"key_encipherment",
"digital_signature"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "www.example.com"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "C5:BD:B8:8B:DF:2B:E8:0C:F7:BA:7D:A8:0E:99:B7:1A:4A:5A:F3:98"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.com"
}
],
"validity": {
"not_valid_after": "20250810135807Z",
"not_valid_before": "20240810135807Z"
}
},
"changed": false
}
TASK [Load certificate YAML to cert_issued variable] ***************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:98
Saturday 10 August 2024 13:58:10 +0000 (0:00:00.490) 0:00:19.303 *******
ok: [sut] => {
"ansible_facts": {
"cert_issued": {
"extensions": {
"authorityKeyIdentifier": {
"critical": false,
"value": "57:98:67:1C:FB:58:97:B5:31:8F:60:E2:B9:DF:09:F1:B1:DD:1A:1E"
},
"basicConstraints": {
"critical": true,
"value": {
"ca": false
}
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": false,
"value": [
"key_encipherment",
"digital_signature"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "www.example.com"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "C5:BD:B8:8B:DF:2B:E8:0C:F7:BA:7D:A8:0E:99:B7:1A:4A:5A:F3:98"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.com"
}
],
"validity": {
"not_valid_after": "20250810135807Z",
"not_valid_before": "20240810135807Z"
}
}
},
"changed": false
}
TASK [Verify certificate subject] **********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:102
Saturday 10 August 2024 13:58:10 +0000 (0:00:00.019) 0:00:19.322 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate SAN] **************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:111
Saturday 10 August 2024 13:58:10 +0000 (0:00:00.020) 0:00:19.342 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key size] *********************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:120
Saturday 10 August 2024 13:58:10 +0000 (0:00:00.019) 0:00:19.362 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Key Usage] ********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:127
Saturday 10 August 2024 13:58:10 +0000 (0:00:00.018) 0:00:19.380 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Extended Key Usage] ***********************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:138
Saturday 10 August 2024 13:58:10 +0000 (0:00:00.022) 0:00:19.402 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve auto-renew flag] ************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:151
Saturday 10 August 2024 13:58:10 +0000 (0:00:00.022) 0:00:19.425 *******
ok: [sut] => {
"changed": false,
"cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/mycert_no_auto_renew.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'",
"delta": "0:00:00.054224",
"end": "2024-08-10 13:58:10.681211",
"rc": 0,
"start": "2024-08-10 13:58:10.626987"
}
STDOUT:
no
TASK [Verify certificate auto-renew flag] **************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:160
Saturday 10 August 2024 13:58:10 +0000 (0:00:00.256) 0:00:19.681 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Set virtualenv_path] *****************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:2
Saturday 10 August 2024 13:58:10 +0000 (0:00:00.020) 0:00:19.701 *******
ok: [sut] => {
"ansible_facts": {
"__virtualenv_path": "/tmp/certificate-tests-venv"
},
"changed": false
}
TASK [Check if system is ostree] ***********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:9
Saturday 10 August 2024 13:58:10 +0000 (0:00:00.007) 0:00:19.708 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [Set flag to indicate system is ostree] ***********************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:14
Saturday 10 August 2024 13:58:10 +0000 (0:00:00.016) 0:00:19.725 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [Ensure python3 is installed] *********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:18
Saturday 10 August 2024 13:58:10 +0000 (0:00:00.016) 0:00:19.742 *******
ok: [sut] => {
"changed": false,
"rc": 0,
"results": [
"python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed",
"python2-cryptography-1.7.2-2.el7.x86_64 providing python2-cryptography is already installed"
]
}
lsrpackages: python2-cryptography
TASK [Ensure python3 is installed] *********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:29
Saturday 10 August 2024 13:58:11 +0000 (0:00:00.394) 0:00:20.137 *******
skipping: [sut] => {
"changed": false,
"skip_reason": "Conditional result was False"
}
TASK [Retrieve certificate file stats] *****************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:40
Saturday 10 August 2024 13:58:11 +0000 (0:00:00.018) 0:00:20.155 *******
ok: [sut] => {
"changed": false,
"stat": {
"atime": 1723298288.3675616,
"attr_flags": "e",
"attributes": [
"extents"
],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "a2f50568dbf541552979f83373aab9bf972f3078",
"ctime": 1723298288.3635616,
"dev": 51713,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 0,
"gr_name": "root",
"inode": 172756,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0600",
"mtime": 1723298288.3635616,
"nlink": 1,
"path": "/etc/pki/tls/certs/defaultcert.crt",
"pw_name": "root",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1294,
"uid": 0,
"version": "1961320338",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if certificate file exists] ***************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:45
Saturday 10 August 2024 13:58:11 +0000 (0:00:00.157) 0:00:20.313 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate file owner and group] *********************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:51
Saturday 10 August 2024 13:58:11 +0000 (0:00:00.019) 0:00:20.332 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate permissions] ******************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:63
Saturday 10 August 2024 13:58:11 +0000 (0:00:00.021) 0:00:20.354 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve key file stats] *************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:69
Saturday 10 August 2024 13:58:11 +0000 (0:00:00.019) 0:00:20.373 *******
ok: [sut] => {
"changed": false,
"stat": {
"atime": 1723298288.3185627,
"attr_flags": "e",
"attributes": [
"extents"
],
"block_size": 4096,
"blocks": 8,
"charset": "us-ascii",
"checksum": "88f07b3e544cebcfc7e7d80e06b557c209f45501",
"ctime": 1723298288.3635616,
"dev": 51713,
"device_type": 0,
"executable": false,
"exists": true,
"gid": 0,
"gr_name": "root",
"inode": 172755,
"isblk": false,
"ischr": false,
"isdir": false,
"isfifo": false,
"isgid": false,
"islnk": false,
"isreg": true,
"issock": false,
"isuid": false,
"mimetype": "text/plain",
"mode": "0600",
"mtime": 1723298288.3635616,
"nlink": 1,
"path": "/etc/pki/tls/private/defaultcert.key",
"pw_name": "root",
"readable": true,
"rgrp": false,
"roth": false,
"rusr": true,
"size": 1704,
"uid": 0,
"version": "1961320325",
"wgrp": false,
"woth": false,
"writeable": true,
"wusr": true,
"xgrp": false,
"xoth": false,
"xusr": false
}
}
TASK [Verify if key file exists] ***********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:74
Saturday 10 August 2024 13:58:11 +0000 (0:00:00.153) 0:00:20.527 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key file owner and group] *****************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:80
Saturday 10 August 2024 13:58:11 +0000 (0:00:00.019) 0:00:20.546 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Parse certificate] *******************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:92
Saturday 10 August 2024 13:58:11 +0000 (0:00:00.021) 0:00:20.568 *******
ok: [sut] => {
"certificate": {
"extensions": {
"authorityKeyIdentifier": {
"critical": false,
"value": "57:98:67:1C:FB:58:97:B5:31:8F:60:E2:B9:DF:09:F1:B1:DD:1A:1E"
},
"basicConstraints": {
"critical": true,
"value": {
"ca": false
}
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": false,
"value": [
"key_encipherment",
"digital_signature"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "www.example.com"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "7E:3A:39:35:E3:D7:F6:E7:7E:84:9B:DF:0D:C6:7A:17:C4:25:FF:37"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.com"
}
],
"validity": {
"not_valid_after": "20250810135807Z",
"not_valid_before": "20240810135808Z"
}
},
"changed": false
}
TASK [Load certificate YAML to cert_issued variable] ***************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:98
Saturday 10 August 2024 13:58:11 +0000 (0:00:00.223) 0:00:20.791 *******
ok: [sut] => {
"ansible_facts": {
"cert_issued": {
"extensions": {
"authorityKeyIdentifier": {
"critical": false,
"value": "57:98:67:1C:FB:58:97:B5:31:8F:60:E2:B9:DF:09:F1:B1:DD:1A:1E"
},
"basicConstraints": {
"critical": true,
"value": {
"ca": false
}
},
"extendedKeyUsage": {
"critical": false,
"value": [
{
"name": "id-kp-serverAuth",
"oid": "1.3.6.1.5.5.7.3.1"
},
{
"name": "id-kp-clientAuth",
"oid": "1.3.6.1.5.5.7.3.2"
}
]
},
"keyUsage": {
"critical": false,
"value": [
"key_encipherment",
"digital_signature"
]
},
"subjectAltName": {
"critical": false,
"value": [
{
"name": "DNS",
"value": "www.example.com"
}
]
},
"subjectKeyIdentifier": {
"critical": false,
"value": "7E:3A:39:35:E3:D7:F6:E7:7E:84:9B:DF:0D:C6:7A:17:C4:25:FF:37"
}
},
"key_size": 2048,
"signature_algorithm": {
"algorithm": "sha256WithRSAEncryption",
"signature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
},
"subject": [
{
"name": "commonName",
"oid": "2.5.4.3",
"value": "www.example.com"
}
],
"validity": {
"not_valid_after": "20250810135807Z",
"not_valid_before": "20240810135808Z"
}
}
},
"changed": false
}
TASK [Verify certificate subject] **********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:102
Saturday 10 August 2024 13:58:11 +0000 (0:00:00.019) 0:00:20.811 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate SAN] **************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:111
Saturday 10 August 2024 13:58:11 +0000 (0:00:00.020) 0:00:20.832 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify key size] *********************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:120
Saturday 10 August 2024 13:58:11 +0000 (0:00:00.019) 0:00:20.851 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Key Usage] ********************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:127
Saturday 10 August 2024 13:58:11 +0000 (0:00:00.019) 0:00:20.870 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Verify certificate Extended Key Usage] ***********************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:138
Saturday 10 August 2024 13:58:11 +0000 (0:00:00.022) 0:00:20.892 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
TASK [Retrieve auto-renew flag] ************************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:151
Saturday 10 August 2024 13:58:11 +0000 (0:00:00.021) 0:00:20.913 *******
ok: [sut] => {
"changed": false,
"cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/defaultcert.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'",
"delta": "0:00:00.054025",
"end": "2024-08-10 13:58:12.107564",
"rc": 0,
"start": "2024-08-10 13:58:12.053539"
}
STDOUT:
yes
TASK [Verify certificate auto-renew flag] **************************************
task path: /WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:160
Saturday 10 August 2024 13:58:12 +0000 (0:00:00.194) 0:00:21.108 *******
ok: [sut] => {
"changed": false
}
MSG:
All assertions passed
META: ran handlers
META: ran handlers
PLAY RECAP *********************************************************************
sut : ok=50 changed=6 unreachable=0 failed=0 skipped=11 rescued=0 ignored=0
Saturday 10 August 2024 13:58:12 +0000 (0:00:00.019) 0:00:21.128 *******
===============================================================================
linux-system-roles.certificate : Ensure provider packages are installed --- 7.19s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:24
linux-system-roles.certificate : Ensure certificate role dependencies are installed --- 6.99s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:5
linux-system-roles.certificate : Ensure certificate requests ------------ 1.23s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:104
Gathering Facts --------------------------------------------------------- 0.83s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/tests_no_auto_renew.yml:2 ----------------
Parse certificate ------------------------------------------------------- 0.49s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:92
linux-system-roles.certificate : Ensure provider service is running ----- 0.48s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:92
Gathering Facts --------------------------------------------------------- 0.43s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/tests_no_auto_renew.yml:17 ---------------
Ensure python3 is installed --------------------------------------------- 0.39s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:18
Ensure python3 is installed --------------------------------------------- 0.39s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:18
Retrieve auto-renew flag ------------------------------------------------ 0.26s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:151
linux-system-roles.certificate : Ensure pre-scripts hooks directory exists --- 0.23s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:37
Parse certificate ------------------------------------------------------- 0.22s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:92
linux-system-roles.certificate : Check if system is ostree -------------- 0.21s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml:11
Retrieve auto-renew flag ------------------------------------------------ 0.19s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:151
Retrieve certificate file stats ----------------------------------------- 0.16s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:40
linux-system-roles.certificate : Ensure post-scripts hooks directory exists --- 0.16s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/roles/linux-system-roles.certificate/tasks/main.yml:63
Retrieve key file stats ------------------------------------------------- 0.15s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:69
Retrieve key file stats ------------------------------------------------- 0.15s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:69
Retrieve certificate file stats ----------------------------------------- 0.15s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/tasks/assert_certificate_parameters.yml:40
Verify each certificate ------------------------------------------------- 0.03s
/WORKDIR/git-weekly-ci4gcjhs0g/tests/tests_no_auto_renew.yml:42 ---------------
---^---^---^---^---^---
# STDERR:
---v---v---v---v---v---
---^---^---^---^---^---