ansible-playbook [core 2.12.6] config file = /etc/ansible/ansible.cfg configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /usr/lib/python3.9/site-packages/ansible ansible collection location = /tmp/tmppc8868jw executable location = /usr/bin/ansible-playbook python version = 3.9.13 (main, May 18 2022, 00:00:00) [GCC 11.3.1 20220421 (Red Hat 11.3.1-2)] jinja version = 2.11.3 libyaml = True Using /etc/ansible/ansible.cfg as config file Skipping callback 'debug', as we already have a stdout callback. Skipping callback 'default', as we already have a stdout callback. Skipping callback 'minimal', as we already have a stdout callback. Skipping callback 'oneline', as we already have a stdout callback. PLAYBOOK: tests_many_self_signed.yml ******************************************* 2 plays in /tmp/tmprylna2eo/tests/tests_many_self_signed.yml PLAY [Issue many self-signed certificates] ************************************* TASK [Gathering Facts] ********************************************************* task path: /tmp/tmprylna2eo/tests/tests_many_self_signed.yml:2 Wednesday 06 July 2022 06:27:20 +0000 (0:00:00.014) 0:00:00.014 ******** ok: [/cache/rhel-9.qcow2.snap] META: ran handlers TASK [linux-system-roles.certificate : Set version specific variables] ********* task path: /tmp/tmprylna2eo/tests/roles/linux-system-roles.certificate/tasks/main.yml:2 Wednesday 06 July 2022 06:27:21 +0000 (0:00:01.130) 0:00:01.145 ******** included: /tmp/tmprylna2eo/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml for /cache/rhel-9.qcow2.snap TASK [linux-system-roles.certificate : Ensure ansible_facts used by role] ****** task path: /tmp/tmprylna2eo/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml:2 Wednesday 06 July 2022 06:27:21 +0000 (0:00:00.027) 0:00:01.173 ******** ok: [/cache/rhel-9.qcow2.snap] TASK [linux-system-roles.certificate : Set platform/version specific variables] *** task path: /tmp/tmprylna2eo/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml:8 Wednesday 06 July 2022 06:27:21 +0000 (0:00:00.549) 0:00:01.722 ******** skipping: [/cache/rhel-9.qcow2.snap] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [/cache/rhel-9.qcow2.snap] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [/cache/rhel-9.qcow2.snap] => (item=RedHat_9.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat_9.yml", "skip_reason": "Conditional result was False" } skipping: [/cache/rhel-9.qcow2.snap] => (item=RedHat_9.0.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat_9.0.yml", "skip_reason": "Conditional result was False" } TASK [linux-system-roles.certificate : Ensure certificate role dependencies are installed] *** task path: /tmp/tmprylna2eo/tests/roles/linux-system-roles.certificate/tasks/main.yml:5 Wednesday 06 July 2022 06:27:21 +0000 (0:00:00.042) 0:00:01.764 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [linux-system-roles.certificate : Ensure provider packages are installed] *** task path: /tmp/tmprylna2eo/tests/roles/linux-system-roles.certificate/tasks/main.yml:22 Wednesday 06 July 2022 06:27:23 +0000 (0:00:01.127) 0:00:02.891 ******** ok: [/cache/rhel-9.qcow2.snap] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [linux-system-roles.certificate : Ensure pre-scripts hooks directory exists] *** task path: /tmp/tmprylna2eo/tests/roles/linux-system-roles.certificate/tasks/main.yml:33 Wednesday 06 July 2022 06:27:23 +0000 (0:00:00.965) 0:00:03.857 ******** ok: [/cache/rhel-9.qcow2.snap] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "gid": 0, "group": "root", "mode": "0700", "owner": "root", "path": "/etc/certmonger//pre-scripts", "secontext": "unconfined_u:object_r:etc_t:s0", "size": 6, "state": "directory", "uid": 0 } TASK [linux-system-roles.certificate : Ensure post-scripts hooks directory exists] *** task path: /tmp/tmprylna2eo/tests/roles/linux-system-roles.certificate/tasks/main.yml:59 Wednesday 06 July 2022 06:27:24 +0000 (0:00:00.543) 0:00:04.400 ******** ok: [/cache/rhel-9.qcow2.snap] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "gid": 0, "group": "root", "mode": "0700", "owner": "root", "path": "/etc/certmonger//post-scripts", "secontext": "unconfined_u:object_r:etc_t:s0", "size": 6, "state": "directory", "uid": 0 } TASK [linux-system-roles.certificate : Ensure provider service is running] ***** task path: /tmp/tmprylna2eo/tests/roles/linux-system-roles.certificate/tasks/main.yml:88 Wednesday 06 July 2022 06:27:24 +0000 (0:00:00.397) 0:00:04.798 ******** ok: [/cache/rhel-9.qcow2.snap] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "enabled": true, "name": "certmonger", "state": "started", "status": { "ActiveEnterTimestamp": "Wed 2022-07-06 02:21:33 EDT", "ActiveEnterTimestampMonotonic": "202991623", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-journald.socket sysinit.target dbus-broker.service network.target syslog.target basic.target system.slice dbus.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Wed 2022-07-06 02:21:33 EDT", "AssertTimestampMonotonic": "202981017", "Before": "shutdown.target multi-user.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedorahosted.certmonger", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "39418445000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Wed 2022-07-06 02:21:33 EDT", "ConditionTimestampMonotonic": "202981015", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/certmonger.service", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Certificate monitoring and PKI enrollment", "DevicePolicy": "auto", "DynamicUser": "no", "EnvironmentFiles": "/etc/sysconfig/certmonger (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "19556", "ExecMainStartTimestamp": "Wed 2022-07-06 02:21:33 EDT", "ExecMainStartTimestampMonotonic": "202982480", "ExecMainStatus": "0", "ExecStart": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /run/certmonger.pid -n $OPTS ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStartEx": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /run/certmonger.pid -n $OPTS ; flags= ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/certmonger.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "certmonger.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Wed 2022-07-06 02:21:33 EDT", "InactiveExitTimestampMonotonic": "202982812", "InvocationID": "c0689ec12baa457caecfdc36591ca310", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "14636", "LimitNPROCSoft": "14636", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "14636", "LimitSIGPENDINGSoft": "14636", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "19556", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "2912256", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "certmonger.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/certmonger.pid", "PartOf": "dbus-broker.service", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "dbus.socket system.slice sysinit.target", "Restart": "no", "RestartKillSignal": "15", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Wed 2022-07-06 02:25:19 EDT", "StateChangeTimestampMonotonic": "428838015", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "23418", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "disabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0" } } TASK [linux-system-roles.certificate : Ensure certificate requests] ************ task path: /tmp/tmprylna2eo/tests/roles/linux-system-roles.certificate/tasks/main.yml:100 Wednesday 06 July 2022 06:27:25 +0000 (0:00:00.802) 0:00:05.601 ******** changed: [/cache/rhel-9.qcow2.snap] => (item={'name': 'mycert_many_self_signed', 'dns': 'www.example.com', 'ca': 'self-sign'}) => { "ansible_loop_var": "item", "changed": true, "item": { "ca": "self-sign", "dns": "www.example.com", "name": "mycert_many_self_signed" } } MSG: Certificate requested (new). changed: [/cache/rhel-9.qcow2.snap] => (item={'name': 'other-cert', 'dns': 'www.example.org', 'ca': 'self-sign'}) => { "ansible_loop_var": "item", "changed": true, "item": { "ca": "self-sign", "dns": "www.example.org", "name": "other-cert" } } MSG: Certificate requested (new). changed: [/cache/rhel-9.qcow2.snap] => (item={'name': 'another-cert', 'dns': 'www.example.net', 'ca': 'self-sign'}) => { "ansible_loop_var": "item", "changed": true, "item": { "ca": "self-sign", "dns": "www.example.net", "name": "another-cert" } } MSG: Certificate requested (new). META: role_complete for /cache/rhel-9.qcow2.snap META: ran handlers META: ran handlers PLAY [Verify certificate] ****************************************************** TASK [Gathering Facts] ********************************************************* task path: /tmp/tmprylna2eo/tests/tests_many_self_signed.yml:18 Wednesday 06 July 2022 06:27:28 +0000 (0:00:03.079) 0:00:08.680 ******** ok: [/cache/rhel-9.qcow2.snap] META: ran handlers TASK [Verify each certificate] ************************************************* task path: /tmp/tmprylna2eo/tests/tests_many_self_signed.yml:50 Wednesday 06 July 2022 06:27:29 +0000 (0:00:00.800) 0:00:09.481 ******** included: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml for /cache/rhel-9.qcow2.snap => (item={'path': '/etc/pki/tls/certs/mycert_many_self_signed.crt', 'key_path': '/etc/pki/tls/private/mycert_many_self_signed.key', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'www.example.com'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'www.example.com'}]}) included: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml for /cache/rhel-9.qcow2.snap => (item={'path': '/etc/pki/tls/certs/other-cert.crt', 'key_path': '/etc/pki/tls/private/other-cert.key', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'www.example.org'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'www.example.org'}]}) included: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml for /cache/rhel-9.qcow2.snap => (item={'path': '/etc/pki/tls/certs/another-cert.crt', 'key_path': '/etc/pki/tls/private/another-cert.key', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'www.example.net'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'www.example.net'}]}) TASK [Set virtualenv_path] ***************************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:2 Wednesday 06 July 2022 06:27:29 +0000 (0:00:00.055) 0:00:09.536 ******** ok: [/cache/rhel-9.qcow2.snap] => { "ansible_facts": { "__virtualenv_path": "/tmp/certificate-tests-venv" }, "changed": false } TASK [Ensure python3 is installed] ********************************************* task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:6 Wednesday 06 July 2022 06:27:29 +0000 (0:00:00.029) 0:00:09.566 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [Install the package, force upgrade] ************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:11 Wednesday 06 July 2022 06:27:30 +0000 (0:00:00.927) 0:00:10.493 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "cmd": [ "/tmp/certificate-tests-venv/bin/pip3", "install", "-U", "pip" ], "name": [ "pip" ], "requirements": null, "state": "latest", "version": null, "virtualenv": "/tmp/certificate-tests-venv" } STDOUT: Requirement already satisfied: pip in ./certificate-tests-venv/lib/python3.9/site-packages (22.1.2) TASK [Install certreader] ****************************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:18 Wednesday 06 July 2022 06:27:31 +0000 (0:00:01.148) 0:00:11.642 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "cmd": [ "/tmp/certificate-tests-venv/bin/pip3", "install", "cryptography<35", "certreader>=0.1.1" ], "name": [ "cryptography<35", "certreader>=0.1.1" ], "requirements": null, "state": "present", "version": null, "virtualenv": "/tmp/certificate-tests-venv" } STDOUT: Requirement already satisfied: cryptography<35 in ./certificate-tests-venv/lib/python3.9/site-packages (3.4.8) Requirement already satisfied: certreader>=0.1.1 in ./certificate-tests-venv/lib/python3.9/site-packages (0.1.1) Requirement already satisfied: cffi>=1.12 in ./certificate-tests-venv/lib/python3.9/site-packages (from cryptography<35) (1.15.1) Requirement already satisfied: pyasn1 in ./certificate-tests-venv/lib/python3.9/site-packages (from certreader>=0.1.1) (0.4.8) Requirement already satisfied: pyyaml in ./certificate-tests-venv/lib/python3.9/site-packages (from certreader>=0.1.1) (6.0) Requirement already satisfied: pycparser in ./certificate-tests-venv/lib/python3.9/site-packages (from cffi>=1.12->cryptography<35) (2.21) TASK [Retrieve certificate file stats] ***************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:26 Wednesday 06 July 2022 06:27:32 +0000 (0:00:00.900) 0:00:12.543 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "stat": { "atime": 1657088846.776071, "attr_flags": "", "attributes": [], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "860d58b3939724d0b98292e226e5423545b2046b", "ctime": 1657088846.773071, "dev": 64516, "device_type": 0, "executable": false, "exists": true, "gid": 0, "gr_name": "root", "inode": 25734805, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0600", "mtime": 1657088846.773071, "nlink": 1, "path": "/etc/pki/tls/certs/mycert_many_self_signed.crt", "pw_name": "root", "readable": true, "rgrp": false, "roth": false, "rusr": true, "size": 1294, "uid": 0, "version": "3977640926", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if certificate file exists] *************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:31 Wednesday 06 July 2022 06:27:33 +0000 (0:00:00.518) 0:00:13.061 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate file owner and group] ********************************* task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:37 Wednesday 06 July 2022 06:27:33 +0000 (0:00:00.034) 0:00:13.095 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate permissions] ****************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:49 Wednesday 06 July 2022 06:27:33 +0000 (0:00:00.078) 0:00:13.173 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Retrieve key file stats] ************************************************* task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:55 Wednesday 06 July 2022 06:27:33 +0000 (0:00:00.073) 0:00:13.247 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "stat": { "atime": 1657088846.713071, "attr_flags": "", "attributes": [], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "afe00f80b68f06adaf33531c03bb800fc38266c0", "ctime": 1657088846.773071, "dev": 64516, "device_type": 0, "executable": false, "exists": true, "gid": 0, "gr_name": "root", "inode": 16829265, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0600", "mtime": 1657088846.773071, "nlink": 1, "path": "/etc/pki/tls/private/mycert_many_self_signed.key", "pw_name": "root", "readable": true, "rgrp": false, "roth": false, "rusr": true, "size": 1704, "uid": 0, "version": "2999205816", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if key file exists] *********************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:60 Wednesday 06 July 2022 06:27:33 +0000 (0:00:00.402) 0:00:13.650 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify key file owner and group] ***************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:66 Wednesday 06 July 2022 06:27:33 +0000 (0:00:00.036) 0:00:13.686 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Parse certificate] ******************************************************* task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:78 Wednesday 06 July 2022 06:27:33 +0000 (0:00:00.075) 0:00:13.761 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "cmd": [ "/tmp/certificate-tests-venv/bin/certreader2json", "/etc/pki/tls/certs/mycert_many_self_signed.crt" ], "delta": "0:00:00.197274", "end": "2022-07-06 02:27:34.637131", "rc": 0, "start": "2022-07-06 02:27:34.439857" } STDOUT: { "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.com" } ], "extensions": { "keyUsage": { "value": [ "digital_signature", "key_encipherment" ], "critical": false }, "subjectAltName": { "value": [ { "name": "DNS", "value": "www.example.com" } ], "critical": false }, "extendedKeyUsage": { "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ], "critical": false }, "basicConstraints": { "value": { "ca": false }, "critical": true }, "subjectKeyIdentifier": { "value": "E3:BC:CB:4D:5E:BA:4E:28:2C:4D:3E:96:49:CE:79:15:9D:49:14:01", "critical": false }, "authorityKeyIdentifier": { "value": "E2:7D:58:1C:3B:07:55:BD:7E:79:94:D5:33:C0:12:12:C8:60:DF:80", "critical": false } }, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature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}, "key_size": 2048, "validity": { "not_valid_after": "2023-07-06 06:21:34", "not_valid_before": "2022-07-06 06:27:26" } } TASK [Load certificate YAML to cert_issued variable] *************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:83 Wednesday 06 July 2022 06:27:34 +0000 (0:00:00.679) 0:00:14.441 ******** ok: [/cache/rhel-9.qcow2.snap] => { "ansible_facts": { "cert_issued": { "extensions": { "authorityKeyIdentifier": { "critical": false, "value": "E2:7D:58:1C:3B:07:55:BD:7E:79:94:D5:33:C0:12:12:C8:60:DF:80" }, "basicConstraints": { "critical": true, "value": { "ca": false } }, "extendedKeyUsage": { "critical": false, "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ] }, "keyUsage": { "critical": false, "value": [ "digital_signature", "key_encipherment" ] }, "subjectAltName": { "critical": false, "value": [ { "name": "DNS", "value": "www.example.com" } ] }, "subjectKeyIdentifier": { "critical": false, "value": "E3:BC:CB:4D:5E:BA:4E:28:2C:4D:3E:96:49:CE:79:15:9D:49:14:01" } }, "key_size": 2048, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature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}, "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.com" } ], "validity": { "not_valid_after": "2023-07-06 06:21:34", "not_valid_before": "2022-07-06 06:27:26" } } }, "changed": false } TASK [Verify certificate subject] ********************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:87 Wednesday 06 July 2022 06:27:34 +0000 (0:00:00.069) 0:00:14.510 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate SAN] ************************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:96 Wednesday 06 July 2022 06:27:34 +0000 (0:00:00.073) 0:00:14.584 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify key size] ********************************************************* task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:105 Wednesday 06 July 2022 06:27:34 +0000 (0:00:00.031) 0:00:14.615 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Key Usage] ******************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:112 Wednesday 06 July 2022 06:27:34 +0000 (0:00:00.053) 0:00:14.669 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Extended Key Usage] *********************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:125 Wednesday 06 July 2022 06:27:34 +0000 (0:00:00.044) 0:00:14.713 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Retrieve auto-renew flag] ************************************************ task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:141 Wednesday 06 July 2022 06:27:34 +0000 (0:00:00.042) 0:00:14.755 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/mycert_many_self_signed.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'", "delta": "0:00:00.059768", "end": "2022-07-06 02:27:35.373407", "rc": 0, "start": "2022-07-06 02:27:35.313639" } STDOUT: yes TASK [Verify certificate auto-renew flag] ************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:150 Wednesday 06 July 2022 06:27:35 +0000 (0:00:00.420) 0:00:15.176 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Set virtualenv_path] ***************************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:2 Wednesday 06 July 2022 06:27:35 +0000 (0:00:00.047) 0:00:15.224 ******** ok: [/cache/rhel-9.qcow2.snap] => { "ansible_facts": { "__virtualenv_path": "/tmp/certificate-tests-venv" }, "changed": false } TASK [Ensure python3 is installed] ********************************************* task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:6 Wednesday 06 July 2022 06:27:35 +0000 (0:00:00.027) 0:00:15.251 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [Install the package, force upgrade] ************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:11 Wednesday 06 July 2022 06:27:36 +0000 (0:00:00.923) 0:00:16.175 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "cmd": [ "/tmp/certificate-tests-venv/bin/pip3", "install", "-U", "pip" ], "name": [ "pip" ], "requirements": null, "state": "latest", "version": null, "virtualenv": "/tmp/certificate-tests-venv" } STDOUT: Requirement already satisfied: pip in ./certificate-tests-venv/lib/python3.9/site-packages (22.1.2) TASK [Install certreader] ****************************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:18 Wednesday 06 July 2022 06:27:37 +0000 (0:00:01.015) 0:00:17.190 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "cmd": [ "/tmp/certificate-tests-venv/bin/pip3", "install", "cryptography<35", "certreader>=0.1.1" ], "name": [ "cryptography<35", "certreader>=0.1.1" ], "requirements": null, "state": "present", "version": null, "virtualenv": "/tmp/certificate-tests-venv" } STDOUT: Requirement already satisfied: cryptography<35 in ./certificate-tests-venv/lib/python3.9/site-packages (3.4.8) Requirement already satisfied: certreader>=0.1.1 in ./certificate-tests-venv/lib/python3.9/site-packages (0.1.1) Requirement already satisfied: cffi>=1.12 in ./certificate-tests-venv/lib/python3.9/site-packages (from cryptography<35) (1.15.1) Requirement already satisfied: pyasn1 in ./certificate-tests-venv/lib/python3.9/site-packages (from certreader>=0.1.1) (0.4.8) Requirement already satisfied: pyyaml in ./certificate-tests-venv/lib/python3.9/site-packages (from certreader>=0.1.1) (6.0) Requirement already satisfied: pycparser in ./certificate-tests-venv/lib/python3.9/site-packages (from cffi>=1.12->cryptography<35) (2.21) TASK [Retrieve certificate file stats] ***************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:26 Wednesday 06 July 2022 06:27:38 +0000 (0:00:00.905) 0:00:18.095 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "stat": { "atime": 1657088847.938071, "attr_flags": "", "attributes": [], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "67d9d8ff0769850ae548afb6a5738cdabd7bca42", "ctime": 1657088847.935071, "dev": 64516, "device_type": 0, "executable": false, "exists": true, "gid": 0, "gr_name": "root", "inode": 25734797, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0600", "mtime": 1657088847.935071, "nlink": 1, "path": "/etc/pki/tls/certs/other-cert.crt", "pw_name": "root", "readable": true, "rgrp": false, "roth": false, "rusr": true, "size": 1294, "uid": 0, "version": "855666892", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if certificate file exists] *************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:31 Wednesday 06 July 2022 06:27:38 +0000 (0:00:00.380) 0:00:18.475 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate file owner and group] ********************************* task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:37 Wednesday 06 July 2022 06:27:38 +0000 (0:00:00.033) 0:00:18.509 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate permissions] ****************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:49 Wednesday 06 July 2022 06:27:38 +0000 (0:00:00.048) 0:00:18.558 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Retrieve key file stats] ************************************************* task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:55 Wednesday 06 July 2022 06:27:38 +0000 (0:00:00.046) 0:00:18.604 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "stat": { "atime": 1657088847.876071, "attr_flags": "", "attributes": [], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "28189fa9bc939a8c1f421e725c9762d9ca5a07f8", "ctime": 1657088847.935071, "dev": 64516, "device_type": 0, "executable": false, "exists": true, "gid": 0, "gr_name": "root", "inode": 16829268, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0600", "mtime": 1657088847.935071, "nlink": 1, "path": "/etc/pki/tls/private/other-cert.key", "pw_name": "root", "readable": true, "rgrp": false, "roth": false, "rusr": true, "size": 1704, "uid": 0, "version": "747475188", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if key file exists] *********************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:60 Wednesday 06 July 2022 06:27:39 +0000 (0:00:00.382) 0:00:18.986 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify key file owner and group] ***************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:66 Wednesday 06 July 2022 06:27:39 +0000 (0:00:00.034) 0:00:19.021 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Parse certificate] ******************************************************* task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:78 Wednesday 06 July 2022 06:27:39 +0000 (0:00:00.045) 0:00:19.066 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "cmd": [ "/tmp/certificate-tests-venv/bin/certreader2json", "/etc/pki/tls/certs/other-cert.crt" ], "delta": "0:00:00.200860", "end": "2022-07-06 02:27:39.842085", "rc": 0, "start": "2022-07-06 02:27:39.641225" } STDOUT: { "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.org" } ], "extensions": { "keyUsage": { "value": [ "digital_signature", "key_encipherment" ], "critical": false }, "subjectAltName": { "value": [ { "name": "DNS", "value": "www.example.org" } ], "critical": false }, "extendedKeyUsage": { "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ], "critical": false }, "basicConstraints": { "value": { "ca": false }, "critical": true }, "subjectKeyIdentifier": { "value": "1A:43:F5:2C:48:36:B9:23:FB:02:16:8D:9C:2B:E1:D3:35:79:F5:6C", "critical": false }, "authorityKeyIdentifier": { "value": "E2:7D:58:1C:3B:07:55:BD:7E:79:94:D5:33:C0:12:12:C8:60:DF:80", "critical": false } }, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature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}, "key_size": 2048, "validity": { "not_valid_after": "2023-07-06 06:21:34", "not_valid_before": "2022-07-06 06:27:27" } } TASK [Load certificate YAML to cert_issued variable] *************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:83 Wednesday 06 July 2022 06:27:39 +0000 (0:00:00.579) 0:00:19.646 ******** ok: [/cache/rhel-9.qcow2.snap] => { "ansible_facts": { "cert_issued": { "extensions": { "authorityKeyIdentifier": { "critical": false, "value": "E2:7D:58:1C:3B:07:55:BD:7E:79:94:D5:33:C0:12:12:C8:60:DF:80" }, "basicConstraints": { "critical": true, "value": { "ca": false } }, "extendedKeyUsage": { "critical": false, "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ] }, "keyUsage": { "critical": false, "value": [ "digital_signature", "key_encipherment" ] }, "subjectAltName": { "critical": false, "value": [ { "name": "DNS", "value": "www.example.org" } ] }, "subjectKeyIdentifier": { "critical": false, "value": "1A:43:F5:2C:48:36:B9:23:FB:02:16:8D:9C:2B:E1:D3:35:79:F5:6C" } }, "key_size": 2048, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature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}, "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.org" } ], "validity": { "not_valid_after": "2023-07-06 06:21:34", "not_valid_before": "2022-07-06 06:27:27" } } }, "changed": false } TASK [Verify certificate subject] ********************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:87 Wednesday 06 July 2022 06:27:39 +0000 (0:00:00.044) 0:00:19.691 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate SAN] ************************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:96 Wednesday 06 July 2022 06:27:39 +0000 (0:00:00.046) 0:00:19.738 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify key size] ********************************************************* task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:105 Wednesday 06 July 2022 06:27:39 +0000 (0:00:00.032) 0:00:19.770 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Key Usage] ******************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:112 Wednesday 06 July 2022 06:27:39 +0000 (0:00:00.043) 0:00:19.814 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Extended Key Usage] *********************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:125 Wednesday 06 July 2022 06:27:39 +0000 (0:00:00.047) 0:00:19.861 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Retrieve auto-renew flag] ************************************************ task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:141 Wednesday 06 July 2022 06:27:40 +0000 (0:00:00.045) 0:00:19.907 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/other-cert.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'", "delta": "0:00:00.052813", "end": "2022-07-06 02:27:40.515049", "rc": 0, "start": "2022-07-06 02:27:40.462236" } STDOUT: yes TASK [Verify certificate auto-renew flag] ************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:150 Wednesday 06 July 2022 06:27:40 +0000 (0:00:00.409) 0:00:20.317 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Set virtualenv_path] ***************************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:2 Wednesday 06 July 2022 06:27:40 +0000 (0:00:00.047) 0:00:20.364 ******** ok: [/cache/rhel-9.qcow2.snap] => { "ansible_facts": { "__virtualenv_path": "/tmp/certificate-tests-venv" }, "changed": false } TASK [Ensure python3 is installed] ********************************************* task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:6 Wednesday 06 July 2022 06:27:40 +0000 (0:00:00.027) 0:00:20.391 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [Install the package, force upgrade] ************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:11 Wednesday 06 July 2022 06:27:41 +0000 (0:00:00.949) 0:00:21.340 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "cmd": [ "/tmp/certificate-tests-venv/bin/pip3", "install", "-U", "pip" ], "name": [ "pip" ], "requirements": null, "state": "latest", "version": null, "virtualenv": "/tmp/certificate-tests-venv" } STDOUT: Requirement already satisfied: pip in ./certificate-tests-venv/lib/python3.9/site-packages (22.1.2) TASK [Install certreader] ****************************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:18 Wednesday 06 July 2022 06:27:42 +0000 (0:00:01.047) 0:00:22.388 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "cmd": [ "/tmp/certificate-tests-venv/bin/pip3", "install", "cryptography<35", "certreader>=0.1.1" ], "name": [ "cryptography<35", "certreader>=0.1.1" ], "requirements": null, "state": "present", "version": null, "virtualenv": "/tmp/certificate-tests-venv" } STDOUT: Requirement already satisfied: cryptography<35 in ./certificate-tests-venv/lib/python3.9/site-packages (3.4.8) Requirement already satisfied: certreader>=0.1.1 in ./certificate-tests-venv/lib/python3.9/site-packages (0.1.1) Requirement already satisfied: cffi>=1.12 in ./certificate-tests-venv/lib/python3.9/site-packages (from cryptography<35) (1.15.1) Requirement already satisfied: pyasn1 in ./certificate-tests-venv/lib/python3.9/site-packages (from certreader>=0.1.1) (0.4.8) Requirement already satisfied: pyyaml in ./certificate-tests-venv/lib/python3.9/site-packages (from certreader>=0.1.1) (6.0) Requirement already satisfied: pycparser in ./certificate-tests-venv/lib/python3.9/site-packages (from cffi>=1.12->cryptography<35) (2.21) TASK [Retrieve certificate file stats] ***************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:26 Wednesday 06 July 2022 06:27:43 +0000 (0:00:00.864) 0:00:23.253 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "stat": { "atime": 1657088848.790071, "attr_flags": "", "attributes": [], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "8bef64442af9036b048638bd83d7ff91822941f8", "ctime": 1657088848.786071, "dev": 64516, "device_type": 0, "executable": false, "exists": true, "gid": 0, "gr_name": "root", "inode": 25734809, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0600", "mtime": 1657088848.786071, "nlink": 1, "path": "/etc/pki/tls/certs/another-cert.crt", "pw_name": "root", "readable": true, "rgrp": false, "roth": false, "rusr": true, "size": 1294, "uid": 0, "version": "65158932", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if certificate file exists] *************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:31 Wednesday 06 July 2022 06:27:43 +0000 (0:00:00.396) 0:00:23.649 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate file owner and group] ********************************* task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:37 Wednesday 06 July 2022 06:27:43 +0000 (0:00:00.034) 0:00:23.684 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate permissions] ****************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:49 Wednesday 06 July 2022 06:27:43 +0000 (0:00:00.050) 0:00:23.734 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Retrieve key file stats] ************************************************* task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:55 Wednesday 06 July 2022 06:27:43 +0000 (0:00:00.045) 0:00:23.779 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "stat": { "atime": 1657088848.724071, "attr_flags": "", "attributes": [], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "73904784820f52ff5b2b262d8f8cc97c3bcc2ee5", "ctime": 1657088848.786071, "dev": 64516, "device_type": 0, "executable": false, "exists": true, "gid": 0, "gr_name": "root", "inode": 16829266, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0600", "mtime": 1657088848.786071, "nlink": 1, "path": "/etc/pki/tls/private/another-cert.key", "pw_name": "root", "readable": true, "rgrp": false, "roth": false, "rusr": true, "size": 1704, "uid": 0, "version": "2211012704", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if key file exists] *********************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:60 Wednesday 06 July 2022 06:27:44 +0000 (0:00:00.386) 0:00:24.165 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify key file owner and group] ***************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:66 Wednesday 06 July 2022 06:27:44 +0000 (0:00:00.061) 0:00:24.227 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Parse certificate] ******************************************************* task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:78 Wednesday 06 July 2022 06:27:44 +0000 (0:00:00.048) 0:00:24.275 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "cmd": [ "/tmp/certificate-tests-venv/bin/certreader2json", "/etc/pki/tls/certs/another-cert.crt" ], "delta": "0:00:00.213746", "end": "2022-07-06 02:27:45.047179", "rc": 0, "start": "2022-07-06 02:27:44.833433" } STDOUT: { "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.net" } ], "extensions": { "keyUsage": { "value": [ "digital_signature", "key_encipherment" ], "critical": false }, "subjectAltName": { "value": [ { "name": "DNS", "value": "www.example.net" } ], "critical": false }, "extendedKeyUsage": { "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ], "critical": false }, "basicConstraints": { "value": { "ca": false }, "critical": true }, "subjectKeyIdentifier": { "value": "DB:1B:1D:E6:0B:89:43:38:47:B5:44:9E:10:AF:65:01:C3:A6:7A:8D", "critical": false }, "authorityKeyIdentifier": { "value": "E2:7D:58:1C:3B:07:55:BD:7E:79:94:D5:33:C0:12:12:C8:60:DF:80", "critical": false } }, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature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}, "key_size": 2048, "validity": { "not_valid_after": "2023-07-06 06:21:34", "not_valid_before": "2022-07-06 06:27:28" } } TASK [Load certificate YAML to cert_issued variable] *************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:83 Wednesday 06 July 2022 06:27:44 +0000 (0:00:00.577) 0:00:24.853 ******** ok: [/cache/rhel-9.qcow2.snap] => { "ansible_facts": { "cert_issued": { "extensions": { "authorityKeyIdentifier": { "critical": false, "value": "E2:7D:58:1C:3B:07:55:BD:7E:79:94:D5:33:C0:12:12:C8:60:DF:80" }, "basicConstraints": { "critical": true, "value": { "ca": false } }, "extendedKeyUsage": { "critical": false, "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ] }, "keyUsage": { "critical": false, "value": [ "digital_signature", "key_encipherment" ] }, "subjectAltName": { "critical": false, "value": [ { "name": "DNS", "value": "www.example.net" } ] }, "subjectKeyIdentifier": { "critical": false, "value": "DB:1B:1D:E6:0B:89:43:38:47:B5:44:9E:10:AF:65:01:C3:A6:7A:8D" } }, "key_size": 2048, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature": "29:A6:48:33:A5:E9:C1:CF:B2:05:BB:F9:7A:30:86:C4:86:F3:B5:14:A9:33:29:8A:AC:E1:88:27:22:F4:B3:50:F4:DD:BC:B0:33:D1:0C:DB:AA:21:33:31:13:22:2C:A5:99:BA:46:58:C0:7E:E8:09:61:13:AB:49:29:01:6B:70:5C:67:83:87:A6:5E:D8:E2:4B:A1:54:58:6C:35:F6:FE:A2:E7:10:1D:F7:D2:BB:67:F4:B1:B8:23:4B:CC:B5:D5:8C:11:81:0B:9E:4E:57:21:2E:01:7F:97:52:A4:79:E5:70:04:14:0F:12:DB:56:43:20:E4:5A:39:B6:62:6F:7A:D3:F1:41:3A:DF:5F:34:E4:D0:18:A9:0C:34:E4:FE:96:A4:6B:22:60:E8:70:AC:7E:55:67:B5:EE:48:42:86:EF:33:6D:53:DF:CC:24:03:31:9E:D8:BD:83:6D:F6:F0:0C:DE:35:9E:7E:6D:7E:7A:E0:E9:8F:4D:A7:97:26:E9:EB:A0:20:A0:94:0D:0E:DE:51:0E:12:95:5C:99:F1:B6:2C:BC:06:D8:08:30:2A:ED:5F:2A:94:98:30:DB:CD:97:C8:55:71:EA:A9:9B:F3:94:04:C6:1E:C2:D8:5F:D9:7E:D9:55:EC:6B:97:66:6A:5A:70:EC:7F:58:F6:47:41:93:7F" }, "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.net" } ], "validity": { "not_valid_after": "2023-07-06 06:21:34", "not_valid_before": "2022-07-06 06:27:28" } } }, "changed": false } TASK [Verify certificate subject] ********************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:87 Wednesday 06 July 2022 06:27:45 +0000 (0:00:00.045) 0:00:24.899 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate SAN] ************************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:96 Wednesday 06 July 2022 06:27:45 +0000 (0:00:00.046) 0:00:24.945 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify key size] ********************************************************* task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:105 Wednesday 06 July 2022 06:27:45 +0000 (0:00:00.036) 0:00:24.982 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Key Usage] ******************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:112 Wednesday 06 July 2022 06:27:45 +0000 (0:00:00.075) 0:00:25.057 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Extended Key Usage] *********************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:125 Wednesday 06 July 2022 06:27:45 +0000 (0:00:00.073) 0:00:25.131 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Retrieve auto-renew flag] ************************************************ task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:141 Wednesday 06 July 2022 06:27:45 +0000 (0:00:00.045) 0:00:25.177 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/another-cert.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'", "delta": "0:00:00.057545", "end": "2022-07-06 02:27:45.792279", "rc": 0, "start": "2022-07-06 02:27:45.734734" } STDOUT: yes TASK [Verify certificate auto-renew flag] ************************************** task path: /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:150 Wednesday 06 July 2022 06:27:45 +0000 (0:00:00.422) 0:00:25.599 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/rhel-9.qcow2.snap : ok=73 changed=1 unreachable=0 failed=0 skipped=1 rescued=0 ignored=0 Wednesday 06 July 2022 06:27:45 +0000 (0:00:00.083) 0:00:25.683 ******** =============================================================================== linux-system-roles.certificate : Ensure certificate requests ------------ 3.08s /tmp/tmprylna2eo/tests/roles/linux-system-roles.certificate/tasks/main.yml:100 Install the package, force upgrade -------------------------------------- 1.15s /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:11 ------------- Gathering Facts --------------------------------------------------------- 1.13s /tmp/tmprylna2eo/tests/tests_many_self_signed.yml:2 --------------------------- linux-system-roles.certificate : Ensure certificate role dependencies are installed --- 1.13s /tmp/tmprylna2eo/tests/roles/linux-system-roles.certificate/tasks/main.yml:5 -- Install the package, force upgrade -------------------------------------- 1.05s /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:11 ------------- Install the package, force upgrade -------------------------------------- 1.02s /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:11 ------------- linux-system-roles.certificate : Ensure provider packages are installed --- 0.97s /tmp/tmprylna2eo/tests/roles/linux-system-roles.certificate/tasks/main.yml:22 - Ensure python3 is installed --------------------------------------------- 0.95s /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:6 -------------- Ensure python3 is installed --------------------------------------------- 0.93s /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:6 -------------- Ensure python3 is installed --------------------------------------------- 0.92s /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:6 -------------- Install certreader ------------------------------------------------------ 0.91s /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:18 ------------- Install certreader ------------------------------------------------------ 0.90s /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:18 ------------- Install certreader ------------------------------------------------------ 0.86s /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:18 ------------- linux-system-roles.certificate : Ensure provider service is running ----- 0.80s /tmp/tmprylna2eo/tests/roles/linux-system-roles.certificate/tasks/main.yml:88 - Gathering Facts --------------------------------------------------------- 0.80s /tmp/tmprylna2eo/tests/tests_many_self_signed.yml:18 -------------------------- Parse certificate ------------------------------------------------------- 0.68s /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:78 ------------- Parse certificate ------------------------------------------------------- 0.58s /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:78 ------------- Parse certificate ------------------------------------------------------- 0.58s /tmp/tmprylna2eo/tests/tasks/assert_certificate_parameters.yml:78 ------------- linux-system-roles.certificate : Ensure ansible_facts used by role ------ 0.55s /tmp/tmprylna2eo/tests/roles/linux-system-roles.certificate/tasks/set_vars.yml:2 linux-system-roles.certificate : Ensure pre-scripts hooks directory exists --- 0.54s /tmp/tmprylna2eo/tests/roles/linux-system-roles.certificate/tasks/main.yml:33 - ansible-playbook [core 2.12.6] config file = /etc/ansible/ansible.cfg configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /usr/lib/python3.9/site-packages/ansible ansible collection location = /tmp/tmppc8868jw executable location = /usr/bin/ansible-playbook python version = 3.9.13 (main, May 18 2022, 00:00:00) [GCC 11.3.1 20220421 (Red Hat 11.3.1-2)] jinja version = 2.11.3 libyaml = True Using /etc/ansible/ansible.cfg as config file Skipping callback 'debug', as we already have a stdout callback. Skipping callback 'default', as we already have a stdout callback. Skipping callback 'minimal', as we already have a stdout callback. Skipping callback 'oneline', as we already have a stdout callback. PLAYBOOK: tests_many_self_signed.yml ******************************************* 2 plays in /tmp/tmppcorpegn/tests/certificate/tests_many_self_signed.yml PLAY [Issue many self-signed certificates] ************************************* TASK [Gathering Facts] ********************************************************* task path: /tmp/tmppcorpegn/tests/certificate/tests_many_self_signed.yml:2 Wednesday 06 July 2022 06:38:55 +0000 (0:00:00.014) 0:00:00.014 ******** ok: [/cache/rhel-9.qcow2.snap] META: ran handlers TASK [fedora.linux_system_roles.certificate : Set version specific variables] *** task path: /tmp/tmppc8868jw/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:2 Wednesday 06 July 2022 06:38:56 +0000 (0:00:01.113) 0:00:01.128 ******** included: /tmp/tmppc8868jw/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml for /cache/rhel-9.qcow2.snap TASK [fedora.linux_system_roles.certificate : Ensure ansible_facts used by role] *** task path: /tmp/tmppc8868jw/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2 Wednesday 06 July 2022 06:38:57 +0000 (0:00:00.027) 0:00:01.155 ******** ok: [/cache/rhel-9.qcow2.snap] TASK [fedora.linux_system_roles.certificate : Set platform/version specific variables] *** task path: /tmp/tmppc8868jw/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:7 Wednesday 06 July 2022 06:38:57 +0000 (0:00:00.532) 0:00:01.688 ******** skipping: [/cache/rhel-9.qcow2.snap] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [/cache/rhel-9.qcow2.snap] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat.yml", "skip_reason": "Conditional result was False" } skipping: [/cache/rhel-9.qcow2.snap] => (item=RedHat_9.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat_9.yml", "skip_reason": "Conditional result was False" } skipping: [/cache/rhel-9.qcow2.snap] => (item=RedHat_9.0.yml) => { "ansible_loop_var": "item", "changed": false, "item": "RedHat_9.0.yml", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.certificate : Ensure certificate role dependencies are installed] *** task path: /tmp/tmppc8868jw/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:5 Wednesday 06 July 2022 06:38:57 +0000 (0:00:00.041) 0:00:01.729 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.certificate : Ensure provider packages are installed] *** task path: /tmp/tmppc8868jw/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:22 Wednesday 06 July 2022 06:38:58 +0000 (0:00:01.089) 0:00:02.819 ******** ok: [/cache/rhel-9.qcow2.snap] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [fedora.linux_system_roles.certificate : Ensure pre-scripts hooks directory exists] *** task path: /tmp/tmppc8868jw/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:33 Wednesday 06 July 2022 06:38:59 +0000 (0:00:00.938) 0:00:03.758 ******** ok: [/cache/rhel-9.qcow2.snap] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "gid": 0, "group": "root", "mode": "0700", "owner": "root", "path": "/etc/certmonger//pre-scripts", "secontext": "unconfined_u:object_r:etc_t:s0", "size": 6, "state": "directory", "uid": 0 } TASK [fedora.linux_system_roles.certificate : Ensure post-scripts hooks directory exists] *** task path: /tmp/tmppc8868jw/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:59 Wednesday 06 July 2022 06:39:00 +0000 (0:00:00.523) 0:00:04.281 ******** ok: [/cache/rhel-9.qcow2.snap] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "gid": 0, "group": "root", "mode": "0700", "owner": "root", "path": "/etc/certmonger//post-scripts", "secontext": "unconfined_u:object_r:etc_t:s0", "size": 6, "state": "directory", "uid": 0 } TASK [fedora.linux_system_roles.certificate : Ensure provider service is running] *** task path: /tmp/tmppc8868jw/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:88 Wednesday 06 July 2022 06:39:00 +0000 (0:00:00.426) 0:00:04.707 ******** ok: [/cache/rhel-9.qcow2.snap] => (item=certmonger) => { "__certificate_provider": "certmonger", "ansible_loop_var": "__certificate_provider", "changed": false, "enabled": true, "name": "certmonger", "state": "started", "status": { "ActiveEnterTimestamp": "Wed 2022-07-06 02:33:03 EDT", "ActiveEnterTimestampMonotonic": "196651017", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "system.slice network.target sysinit.target basic.target syslog.target dbus-broker.service systemd-journald.socket dbus.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Wed 2022-07-06 02:33:03 EDT", "AssertTimestampMonotonic": "196638069", "Before": "shutdown.target multi-user.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "BusName": "org.fedorahosted.certmonger", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "40486759000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Wed 2022-07-06 02:33:03 EDT", "ConditionTimestampMonotonic": "196638067", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/certmonger.service", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "yes", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Certificate monitoring and PKI enrollment", "DevicePolicy": "auto", "DynamicUser": "no", "EnvironmentFiles": "/etc/sysconfig/certmonger (ignore_errors=yes)", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "19537", "ExecMainStartTimestamp": "Wed 2022-07-06 02:33:03 EDT", "ExecMainStartTimestampMonotonic": "196639864", "ExecMainStatus": "0", "ExecStart": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /run/certmonger.pid -n $OPTS ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStartEx": "{ path=/usr/sbin/certmonger ; argv[]=/usr/sbin/certmonger -S -p /run/certmonger.pid -n $OPTS ; flags= ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/certmonger.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "certmonger.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Wed 2022-07-06 02:33:03 EDT", "InactiveExitTimestampMonotonic": "196640238", "InvocationID": "54468520e6274a09a70579107544ed55", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "14636", "LimitNPROCSoft": "14636", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "14636", "LimitSIGPENDINGSoft": "14636", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "no", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "19537", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "2887680", "MemoryDenyWriteExecute": "no", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "certmonger.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/certmonger.pid", "PartOf": "dbus-broker.service", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "dbus.socket system.slice sysinit.target", "Restart": "no", "RestartKillSignal": "15", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "no", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Wed 2022-07-06 02:36:52 EDT", "StateChangeTimestampMonotonic": "425846403", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "1", "TasksMax": "23418", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "dbus", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "disabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0" } } TASK [fedora.linux_system_roles.certificate : Ensure certificate requests] ***** task path: /tmp/tmppc8868jw/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:99 Wednesday 06 July 2022 06:39:01 +0000 (0:00:00.793) 0:00:05.501 ******** changed: [/cache/rhel-9.qcow2.snap] => (item={'name': 'mycert_many_self_signed', 'dns': 'www.example.com', 'ca': 'self-sign'}) => { "ansible_loop_var": "item", "changed": true, "item": { "ca": "self-sign", "dns": "www.example.com", "name": "mycert_many_self_signed" } } MSG: Certificate requested (new). changed: [/cache/rhel-9.qcow2.snap] => (item={'name': 'other-cert', 'dns': 'www.example.org', 'ca': 'self-sign'}) => { "ansible_loop_var": "item", "changed": true, "item": { "ca": "self-sign", "dns": "www.example.org", "name": "other-cert" } } MSG: Certificate requested (new). changed: [/cache/rhel-9.qcow2.snap] => (item={'name': 'another-cert', 'dns': 'www.example.net', 'ca': 'self-sign'}) => { "ansible_loop_var": "item", "changed": true, "item": { "ca": "self-sign", "dns": "www.example.net", "name": "another-cert" } } MSG: Certificate requested (new). META: role_complete for /cache/rhel-9.qcow2.snap META: ran handlers META: ran handlers PLAY [Verify certificate] ****************************************************** TASK [Gathering Facts] ********************************************************* task path: /tmp/tmppcorpegn/tests/certificate/tests_many_self_signed.yml:18 Wednesday 06 July 2022 06:39:04 +0000 (0:00:03.562) 0:00:09.064 ******** ok: [/cache/rhel-9.qcow2.snap] META: ran handlers TASK [Verify each certificate] ************************************************* task path: /tmp/tmppcorpegn/tests/certificate/tests_many_self_signed.yml:50 Wednesday 06 July 2022 06:39:05 +0000 (0:00:00.815) 0:00:09.880 ******** included: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml for /cache/rhel-9.qcow2.snap => (item={'path': '/etc/pki/tls/certs/mycert_many_self_signed.crt', 'key_path': '/etc/pki/tls/private/mycert_many_self_signed.key', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'www.example.com'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'www.example.com'}]}) included: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml for /cache/rhel-9.qcow2.snap => (item={'path': '/etc/pki/tls/certs/other-cert.crt', 'key_path': '/etc/pki/tls/private/other-cert.key', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'www.example.org'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'www.example.org'}]}) included: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml for /cache/rhel-9.qcow2.snap => (item={'path': '/etc/pki/tls/certs/another-cert.crt', 'key_path': '/etc/pki/tls/private/another-cert.key', 'subject': [{'name': 'commonName', 'oid': '2.5.4.3', 'value': 'www.example.net'}], 'subject_alt_name': [{'name': 'DNS', 'value': 'www.example.net'}]}) TASK [Set virtualenv_path] ***************************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:2 Wednesday 06 July 2022 06:39:05 +0000 (0:00:00.057) 0:00:09.937 ******** ok: [/cache/rhel-9.qcow2.snap] => { "ansible_facts": { "__virtualenv_path": "/tmp/certificate-tests-venv" }, "changed": false } TASK [Ensure python3 is installed] ********************************************* task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:6 Wednesday 06 July 2022 06:39:05 +0000 (0:00:00.062) 0:00:10.000 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [Install the package, force upgrade] ************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:11 Wednesday 06 July 2022 06:39:06 +0000 (0:00:00.928) 0:00:10.929 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "cmd": [ "/tmp/certificate-tests-venv/bin/pip3", "install", "-U", "pip" ], "name": [ "pip" ], "requirements": null, "state": "latest", "version": null, "virtualenv": "/tmp/certificate-tests-venv" } STDOUT: Requirement already satisfied: pip in ./certificate-tests-venv/lib/python3.9/site-packages (22.1.2) TASK [Install certreader] ****************************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:18 Wednesday 06 July 2022 06:39:07 +0000 (0:00:01.176) 0:00:12.105 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "cmd": [ "/tmp/certificate-tests-venv/bin/pip3", "install", "cryptography<35", "certreader>=0.1.1" ], "name": [ "cryptography<35", "certreader>=0.1.1" ], "requirements": null, "state": "present", "version": null, "virtualenv": "/tmp/certificate-tests-venv" } STDOUT: Requirement already satisfied: cryptography<35 in ./certificate-tests-venv/lib/python3.9/site-packages (3.4.8) Requirement already satisfied: certreader>=0.1.1 in ./certificate-tests-venv/lib/python3.9/site-packages (0.1.1) Requirement already satisfied: cffi>=1.12 in ./certificate-tests-venv/lib/python3.9/site-packages (from cryptography<35) (1.15.1) Requirement already satisfied: pyasn1 in ./certificate-tests-venv/lib/python3.9/site-packages (from certreader>=0.1.1) (0.4.8) Requirement already satisfied: pyyaml in ./certificate-tests-venv/lib/python3.9/site-packages (from certreader>=0.1.1) (6.0) Requirement already satisfied: pycparser in ./certificate-tests-venv/lib/python3.9/site-packages (from cffi>=1.12->cryptography<35) (2.21) TASK [Retrieve certificate file stats] ***************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:26 Wednesday 06 July 2022 06:39:08 +0000 (0:00:00.892) 0:00:12.997 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "stat": { "atime": 1657089542.3952816, "attr_flags": "", "attributes": [], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "62453fd69589d54328a0c61b29b6e8c9ad8c4492", "ctime": 1657089542.3922815, "dev": 64516, "device_type": 0, "executable": false, "exists": true, "gid": 0, "gr_name": "root", "inode": 25742228, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0600", "mtime": 1657089542.3922815, "nlink": 1, "path": "/etc/pki/tls/certs/mycert_many_self_signed.crt", "pw_name": "root", "readable": true, "rgrp": false, "roth": false, "rusr": true, "size": 1294, "uid": 0, "version": "1235935986", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if certificate file exists] *************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:31 Wednesday 06 July 2022 06:39:09 +0000 (0:00:00.497) 0:00:13.495 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate file owner and group] ********************************* task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:37 Wednesday 06 July 2022 06:39:09 +0000 (0:00:00.075) 0:00:13.570 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate permissions] ****************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:47 Wednesday 06 July 2022 06:39:09 +0000 (0:00:00.077) 0:00:13.648 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Retrieve key file stats] ************************************************* task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:53 Wednesday 06 July 2022 06:39:09 +0000 (0:00:00.088) 0:00:13.736 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "stat": { "atime": 1657089542.3322816, "attr_flags": "", "attributes": [], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "d01b81714514359342dde776ab011fdd9f8fca0b", "ctime": 1657089542.3922815, "dev": 64516, "device_type": 0, "executable": false, "exists": true, "gid": 0, "gr_name": "root", "inode": 16829265, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0600", "mtime": 1657089542.3922815, "nlink": 1, "path": "/etc/pki/tls/private/mycert_many_self_signed.key", "pw_name": "root", "readable": true, "rgrp": false, "roth": false, "rusr": true, "size": 1704, "uid": 0, "version": "4265449683", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if key file exists] *********************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:58 Wednesday 06 July 2022 06:39:09 +0000 (0:00:00.373) 0:00:14.110 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify key file owner and group] ***************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:64 Wednesday 06 July 2022 06:39:09 +0000 (0:00:00.034) 0:00:14.144 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Parse certificate] ******************************************************* task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:74 Wednesday 06 July 2022 06:39:10 +0000 (0:00:00.060) 0:00:14.205 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "cmd": [ "/tmp/certificate-tests-venv/bin/certreader2json", "/etc/pki/tls/certs/mycert_many_self_signed.crt" ], "delta": "0:00:00.207066", "end": "2022-07-06 02:39:10.808009", "rc": 0, "start": "2022-07-06 02:39:10.600943" } STDOUT: { "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.com" } ], "extensions": { "keyUsage": { "value": [ "digital_signature", "key_encipherment" ], "critical": false }, "subjectAltName": { "value": [ { "name": "DNS", "value": "www.example.com" } ], "critical": false }, "extendedKeyUsage": { "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ], "critical": false }, "basicConstraints": { "value": { "ca": false }, "critical": true }, "subjectKeyIdentifier": { "value": "95:D0:A9:25:A1:39:F7:E6:B5:9D:B5:39:30:18:18:FD:AB:23:E5:72", "critical": false }, "authorityKeyIdentifier": { "value": "54:AF:7E:70:34:A9:C1:47:38:E3:1B:3F:D8:F2:4D:5B:65:C9:80:D2", "critical": false } }, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature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}, "key_size": 2048, "validity": { "not_valid_after": "2023-07-06 06:33:04", "not_valid_before": "2022-07-06 06:39:02" } } TASK [Load certificate YAML to cert_issued variable] *************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:79 Wednesday 06 July 2022 06:39:10 +0000 (0:00:00.657) 0:00:14.863 ******** ok: [/cache/rhel-9.qcow2.snap] => { "ansible_facts": { "cert_issued": { "extensions": { "authorityKeyIdentifier": { "critical": false, "value": "54:AF:7E:70:34:A9:C1:47:38:E3:1B:3F:D8:F2:4D:5B:65:C9:80:D2" }, "basicConstraints": { "critical": true, "value": { "ca": false } }, "extendedKeyUsage": { "critical": false, "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ] }, "keyUsage": { "critical": false, "value": [ "digital_signature", "key_encipherment" ] }, "subjectAltName": { "critical": false, "value": [ { "name": "DNS", "value": "www.example.com" } ] }, "subjectKeyIdentifier": { "critical": false, "value": "95:D0:A9:25:A1:39:F7:E6:B5:9D:B5:39:30:18:18:FD:AB:23:E5:72" } }, "key_size": 2048, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature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}, "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.com" } ], "validity": { "not_valid_after": "2023-07-06 06:33:04", "not_valid_before": "2022-07-06 06:39:02" } } }, "changed": false } TASK [Verify certificate subject] ********************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:83 Wednesday 06 July 2022 06:39:10 +0000 (0:00:00.042) 0:00:14.906 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate SAN] ************************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:91 Wednesday 06 July 2022 06:39:10 +0000 (0:00:00.046) 0:00:14.952 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify key size] ********************************************************* task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:99 Wednesday 06 July 2022 06:39:10 +0000 (0:00:00.031) 0:00:14.984 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Key Usage] ******************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:106 Wednesday 06 July 2022 06:39:10 +0000 (0:00:00.043) 0:00:15.028 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Extended Key Usage] *********************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:118 Wednesday 06 July 2022 06:39:10 +0000 (0:00:00.043) 0:00:15.071 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Retrieve auto-renew flag] ************************************************ task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:132 Wednesday 06 July 2022 06:39:10 +0000 (0:00:00.048) 0:00:15.120 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/mycert_many_self_signed.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'", "delta": "0:00:00.060366", "end": "2022-07-06 02:39:11.482465", "rc": 0, "start": "2022-07-06 02:39:11.422099" } STDOUT: yes TASK [Verify certificate auto-renew flag] ************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:141 Wednesday 06 July 2022 06:39:11 +0000 (0:00:00.415) 0:00:15.536 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Set virtualenv_path] ***************************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:2 Wednesday 06 July 2022 06:39:11 +0000 (0:00:00.048) 0:00:15.584 ******** ok: [/cache/rhel-9.qcow2.snap] => { "ansible_facts": { "__virtualenv_path": "/tmp/certificate-tests-venv" }, "changed": false } TASK [Ensure python3 is installed] ********************************************* task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:6 Wednesday 06 July 2022 06:39:11 +0000 (0:00:00.032) 0:00:15.617 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [Install the package, force upgrade] ************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:11 Wednesday 06 July 2022 06:39:12 +0000 (0:00:00.928) 0:00:16.545 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "cmd": [ "/tmp/certificate-tests-venv/bin/pip3", "install", "-U", "pip" ], "name": [ "pip" ], "requirements": null, "state": "latest", "version": null, "virtualenv": "/tmp/certificate-tests-venv" } STDOUT: Requirement already satisfied: pip in ./certificate-tests-venv/lib/python3.9/site-packages (22.1.2) TASK [Install certreader] ****************************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:18 Wednesday 06 July 2022 06:39:13 +0000 (0:00:01.011) 0:00:17.557 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "cmd": [ "/tmp/certificate-tests-venv/bin/pip3", "install", "cryptography<35", "certreader>=0.1.1" ], "name": [ "cryptography<35", "certreader>=0.1.1" ], "requirements": null, "state": "present", "version": null, "virtualenv": "/tmp/certificate-tests-venv" } STDOUT: Requirement already satisfied: cryptography<35 in ./certificate-tests-venv/lib/python3.9/site-packages (3.4.8) Requirement already satisfied: certreader>=0.1.1 in ./certificate-tests-venv/lib/python3.9/site-packages (0.1.1) Requirement already satisfied: cffi>=1.12 in ./certificate-tests-venv/lib/python3.9/site-packages (from cryptography<35) (1.15.1) Requirement already satisfied: pyasn1 in ./certificate-tests-venv/lib/python3.9/site-packages (from certreader>=0.1.1) (0.4.8) Requirement already satisfied: pyyaml in ./certificate-tests-venv/lib/python3.9/site-packages (from certreader>=0.1.1) (6.0) Requirement already satisfied: pycparser in ./certificate-tests-venv/lib/python3.9/site-packages (from cffi>=1.12->cryptography<35) (2.21) TASK [Retrieve certificate file stats] ***************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:26 Wednesday 06 July 2022 06:39:14 +0000 (0:00:00.862) 0:00:18.420 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "stat": { "atime": 1657089543.7772818, "attr_flags": "", "attributes": [], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "0d3b2f33c998051167454c2d553516ee9822d77f", "ctime": 1657089543.7752817, "dev": 64516, "device_type": 0, "executable": false, "exists": true, "gid": 0, "gr_name": "root", "inode": 25742214, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0600", "mtime": 1657089543.7752817, "nlink": 1, "path": "/etc/pki/tls/certs/other-cert.crt", "pw_name": "root", "readable": true, "rgrp": false, "roth": false, "rusr": true, "size": 1294, "uid": 0, "version": "3618868660", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if certificate file exists] *************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:31 Wednesday 06 July 2022 06:39:14 +0000 (0:00:00.375) 0:00:18.795 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate file owner and group] ********************************* task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:37 Wednesday 06 July 2022 06:39:14 +0000 (0:00:00.033) 0:00:18.829 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate permissions] ****************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:47 Wednesday 06 July 2022 06:39:14 +0000 (0:00:00.047) 0:00:18.877 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Retrieve key file stats] ************************************************* task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:53 Wednesday 06 July 2022 06:39:14 +0000 (0:00:00.045) 0:00:18.922 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "stat": { "atime": 1657089543.7132816, "attr_flags": "", "attributes": [], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "c13092afa589e16ef5e1e224b24139fdcd02f29e", "ctime": 1657089543.7742817, "dev": 64516, "device_type": 0, "executable": false, "exists": true, "gid": 0, "gr_name": "root", "inode": 16829268, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0600", "mtime": 1657089543.7742817, "nlink": 1, "path": "/etc/pki/tls/private/other-cert.key", "pw_name": "root", "readable": true, "rgrp": false, "roth": false, "rusr": true, "size": 1700, "uid": 0, "version": "565062302", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if key file exists] *********************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:58 Wednesday 06 July 2022 06:39:15 +0000 (0:00:00.375) 0:00:19.297 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify key file owner and group] ***************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:64 Wednesday 06 July 2022 06:39:15 +0000 (0:00:00.033) 0:00:19.331 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Parse certificate] ******************************************************* task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:74 Wednesday 06 July 2022 06:39:15 +0000 (0:00:00.049) 0:00:19.380 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "cmd": [ "/tmp/certificate-tests-venv/bin/certreader2json", "/etc/pki/tls/certs/other-cert.crt" ], "delta": "0:00:00.202033", "end": "2022-07-06 02:39:15.887985", "rc": 0, "start": "2022-07-06 02:39:15.685952" } STDOUT: { "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.org" } ], "extensions": { "keyUsage": { "value": [ "digital_signature", "key_encipherment" ], "critical": false }, "subjectAltName": { "value": [ { "name": "DNS", "value": "www.example.org" } ], "critical": false }, "extendedKeyUsage": { "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ], "critical": false }, "basicConstraints": { "value": { "ca": false }, "critical": true }, "subjectKeyIdentifier": { "value": "49:A8:3F:8A:CB:D3:5F:07:7A:07:30:C0:72:FE:80:41:E0:C1:FA:3A", "critical": false }, "authorityKeyIdentifier": { "value": "54:AF:7E:70:34:A9:C1:47:38:E3:1B:3F:D8:F2:4D:5B:65:C9:80:D2", "critical": false } }, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature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}, "key_size": 2048, "validity": { "not_valid_after": "2023-07-06 06:33:04", "not_valid_before": "2022-07-06 06:39:03" } } TASK [Load certificate YAML to cert_issued variable] *************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:79 Wednesday 06 July 2022 06:39:15 +0000 (0:00:00.564) 0:00:19.945 ******** ok: [/cache/rhel-9.qcow2.snap] => { "ansible_facts": { "cert_issued": { "extensions": { "authorityKeyIdentifier": { "critical": false, "value": "54:AF:7E:70:34:A9:C1:47:38:E3:1B:3F:D8:F2:4D:5B:65:C9:80:D2" }, "basicConstraints": { "critical": true, "value": { "ca": false } }, "extendedKeyUsage": { "critical": false, "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ] }, "keyUsage": { "critical": false, "value": [ "digital_signature", "key_encipherment" ] }, "subjectAltName": { "critical": false, "value": [ { "name": "DNS", "value": "www.example.org" } ] }, "subjectKeyIdentifier": { "critical": false, "value": "49:A8:3F:8A:CB:D3:5F:07:7A:07:30:C0:72:FE:80:41:E0:C1:FA:3A" } }, "key_size": 2048, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature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}, "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.org" } ], "validity": { "not_valid_after": "2023-07-06 06:33:04", "not_valid_before": "2022-07-06 06:39:03" } } }, "changed": false } TASK [Verify certificate subject] ********************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:83 Wednesday 06 July 2022 06:39:15 +0000 (0:00:00.044) 0:00:19.990 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate SAN] ************************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:91 Wednesday 06 July 2022 06:39:15 +0000 (0:00:00.047) 0:00:20.037 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify key size] ********************************************************* task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:99 Wednesday 06 July 2022 06:39:15 +0000 (0:00:00.034) 0:00:20.071 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Key Usage] ******************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:106 Wednesday 06 July 2022 06:39:15 +0000 (0:00:00.046) 0:00:20.118 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Extended Key Usage] *********************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:118 Wednesday 06 July 2022 06:39:16 +0000 (0:00:00.044) 0:00:20.162 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Retrieve auto-renew flag] ************************************************ task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:132 Wednesday 06 July 2022 06:39:16 +0000 (0:00:00.045) 0:00:20.208 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/other-cert.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'", "delta": "0:00:00.053309", "end": "2022-07-06 02:39:16.575644", "rc": 0, "start": "2022-07-06 02:39:16.522335" } STDOUT: yes TASK [Verify certificate auto-renew flag] ************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:141 Wednesday 06 July 2022 06:39:16 +0000 (0:00:00.422) 0:00:20.630 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Set virtualenv_path] ***************************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:2 Wednesday 06 July 2022 06:39:16 +0000 (0:00:00.045) 0:00:20.676 ******** ok: [/cache/rhel-9.qcow2.snap] => { "ansible_facts": { "__virtualenv_path": "/tmp/certificate-tests-venv" }, "changed": false } TASK [Ensure python3 is installed] ********************************************* task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:6 Wednesday 06 July 2022 06:39:16 +0000 (0:00:00.029) 0:00:20.705 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do TASK [Install the package, force upgrade] ************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:11 Wednesday 06 July 2022 06:39:17 +0000 (0:00:00.927) 0:00:21.632 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "cmd": [ "/tmp/certificate-tests-venv/bin/pip3", "install", "-U", "pip" ], "name": [ "pip" ], "requirements": null, "state": "latest", "version": null, "virtualenv": "/tmp/certificate-tests-venv" } STDOUT: Requirement already satisfied: pip in ./certificate-tests-venv/lib/python3.9/site-packages (22.1.2) TASK [Install certreader] ****************************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:18 Wednesday 06 July 2022 06:39:18 +0000 (0:00:01.062) 0:00:22.695 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "cmd": [ "/tmp/certificate-tests-venv/bin/pip3", "install", "cryptography<35", "certreader>=0.1.1" ], "name": [ "cryptography<35", "certreader>=0.1.1" ], "requirements": null, "state": "present", "version": null, "virtualenv": "/tmp/certificate-tests-venv" } STDOUT: Requirement already satisfied: cryptography<35 in ./certificate-tests-venv/lib/python3.9/site-packages (3.4.8) Requirement already satisfied: certreader>=0.1.1 in ./certificate-tests-venv/lib/python3.9/site-packages (0.1.1) Requirement already satisfied: cffi>=1.12 in ./certificate-tests-venv/lib/python3.9/site-packages (from cryptography<35) (1.15.1) Requirement already satisfied: pyasn1 in ./certificate-tests-venv/lib/python3.9/site-packages (from certreader>=0.1.1) (0.4.8) Requirement already satisfied: pyyaml in ./certificate-tests-venv/lib/python3.9/site-packages (from certreader>=0.1.1) (6.0) Requirement already satisfied: pycparser in ./certificate-tests-venv/lib/python3.9/site-packages (from cffi>=1.12->cryptography<35) (2.21) TASK [Retrieve certificate file stats] ***************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:26 Wednesday 06 July 2022 06:39:19 +0000 (0:00:00.889) 0:00:23.585 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "stat": { "atime": 1657089544.8582816, "attr_flags": "", "attributes": [], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "5358c9382272505e03eb20b33c5cc9949e072a54", "ctime": 1657089544.8552816, "dev": 64516, "device_type": 0, "executable": false, "exists": true, "gid": 0, "gr_name": "root", "inode": 25742232, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0600", "mtime": 1657089544.8552816, "nlink": 1, "path": "/etc/pki/tls/certs/another-cert.crt", "pw_name": "root", "readable": true, "rgrp": false, "roth": false, "rusr": true, "size": 1294, "uid": 0, "version": "3472559814", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if certificate file exists] *************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:31 Wednesday 06 July 2022 06:39:19 +0000 (0:00:00.426) 0:00:24.012 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate file owner and group] ********************************* task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:37 Wednesday 06 July 2022 06:39:19 +0000 (0:00:00.030) 0:00:24.043 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate permissions] ****************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:47 Wednesday 06 July 2022 06:39:19 +0000 (0:00:00.072) 0:00:24.116 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Retrieve key file stats] ************************************************* task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:53 Wednesday 06 July 2022 06:39:20 +0000 (0:00:00.079) 0:00:24.196 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "stat": { "atime": 1657089544.7942817, "attr_flags": "", "attributes": [], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "c12898850a8588c0c0bf454cc3a31e91560a2833", "ctime": 1657089544.8552816, "dev": 64516, "device_type": 0, "executable": false, "exists": true, "gid": 0, "gr_name": "root", "inode": 16829266, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0600", "mtime": 1657089544.8552816, "nlink": 1, "path": "/etc/pki/tls/private/another-cert.key", "pw_name": "root", "readable": true, "rgrp": false, "roth": false, "rusr": true, "size": 1708, "uid": 0, "version": "3072549270", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [Verify if key file exists] *********************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:58 Wednesday 06 July 2022 06:39:20 +0000 (0:00:00.401) 0:00:24.597 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify key file owner and group] ***************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:64 Wednesday 06 July 2022 06:39:20 +0000 (0:00:00.032) 0:00:24.630 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Parse certificate] ******************************************************* task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:74 Wednesday 06 July 2022 06:39:20 +0000 (0:00:00.076) 0:00:24.706 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "cmd": [ "/tmp/certificate-tests-venv/bin/certreader2json", "/etc/pki/tls/certs/another-cert.crt" ], "delta": "0:00:00.196538", "end": "2022-07-06 02:39:21.231118", "rc": 0, "start": "2022-07-06 02:39:21.034580" } STDOUT: { "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.net" } ], "extensions": { "keyUsage": { "value": [ "digital_signature", "key_encipherment" ], "critical": false }, "subjectAltName": { "value": [ { "name": "DNS", "value": "www.example.net" } ], "critical": false }, "extendedKeyUsage": { "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ], "critical": false }, "basicConstraints": { "value": { "ca": false }, "critical": true }, "subjectKeyIdentifier": { "value": "13:E3:33:D1:39:61:A8:15:7B:8E:70:4F:1F:37:0A:BB:4B:D0:94:9C", "critical": false }, "authorityKeyIdentifier": { "value": "54:AF:7E:70:34:A9:C1:47:38:E3:1B:3F:D8:F2:4D:5B:65:C9:80:D2", "critical": false } }, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature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}, "key_size": 2048, "validity": { "not_valid_after": "2023-07-06 06:33:04", "not_valid_before": "2022-07-06 06:39:04" } } TASK [Load certificate YAML to cert_issued variable] *************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:79 Wednesday 06 July 2022 06:39:21 +0000 (0:00:00.579) 0:00:25.286 ******** ok: [/cache/rhel-9.qcow2.snap] => { "ansible_facts": { "cert_issued": { "extensions": { "authorityKeyIdentifier": { "critical": false, "value": "54:AF:7E:70:34:A9:C1:47:38:E3:1B:3F:D8:F2:4D:5B:65:C9:80:D2" }, "basicConstraints": { "critical": true, "value": { "ca": false } }, "extendedKeyUsage": { "critical": false, "value": [ { "name": "id-kp-serverAuth", "oid": "1.3.6.1.5.5.7.3.1" }, { "name": "id-kp-clientAuth", "oid": "1.3.6.1.5.5.7.3.2" } ] }, "keyUsage": { "critical": false, "value": [ "digital_signature", "key_encipherment" ] }, "subjectAltName": { "critical": false, "value": [ { "name": "DNS", "value": "www.example.net" } ] }, "subjectKeyIdentifier": { "critical": false, "value": "13:E3:33:D1:39:61:A8:15:7B:8E:70:4F:1F:37:0A:BB:4B:D0:94:9C" } }, "key_size": 2048, "signature_algorithm": { "algorithm": "sha256WithRSAEncryption", "signature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}, "subject": [ { "name": "commonName", "oid": "2.5.4.3", "value": "www.example.net" } ], "validity": { "not_valid_after": "2023-07-06 06:33:04", "not_valid_before": "2022-07-06 06:39:04" } } }, "changed": false } TASK [Verify certificate subject] ********************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:83 Wednesday 06 July 2022 06:39:21 +0000 (0:00:00.075) 0:00:25.361 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate SAN] ************************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:91 Wednesday 06 July 2022 06:39:21 +0000 (0:00:00.075) 0:00:25.437 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify key size] ********************************************************* task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:99 Wednesday 06 July 2022 06:39:21 +0000 (0:00:00.034) 0:00:25.472 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Key Usage] ******************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:106 Wednesday 06 July 2022 06:39:21 +0000 (0:00:00.075) 0:00:25.547 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Verify certificate Extended Key Usage] *********************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:118 Wednesday 06 July 2022 06:39:21 +0000 (0:00:00.087) 0:00:25.635 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed TASK [Retrieve auto-renew flag] ************************************************ task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:132 Wednesday 06 July 2022 06:39:21 +0000 (0:00:00.071) 0:00:25.706 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false, "cmd": "set -euo pipefail; getcert list -f /etc/pki/tls/certs/another-cert.crt | grep 'auto-renew' | sed 's/^\\s\\+auto-renew: //g'", "delta": "0:00:00.056137", "end": "2022-07-06 02:39:22.087934", "rc": 0, "start": "2022-07-06 02:39:22.031797" } STDOUT: yes TASK [Verify certificate auto-renew flag] ************************************** task path: /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:141 Wednesday 06 July 2022 06:39:21 +0000 (0:00:00.440) 0:00:26.146 ******** ok: [/cache/rhel-9.qcow2.snap] => { "changed": false } MSG: All assertions passed META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* /cache/rhel-9.qcow2.snap : ok=73 changed=1 unreachable=0 failed=0 skipped=1 rescued=0 ignored=0 Wednesday 06 July 2022 06:39:22 +0000 (0:00:00.083) 0:00:26.230 ******** =============================================================================== fedora.linux_system_roles.certificate : Ensure certificate requests ----- 3.56s /tmp/tmppc8868jw/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:99 Install the package, force upgrade -------------------------------------- 1.18s /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:11 - Gathering Facts --------------------------------------------------------- 1.11s /tmp/tmppcorpegn/tests/certificate/tests_many_self_signed.yml:2 --------------- fedora.linux_system_roles.certificate : Ensure certificate role dependencies are installed --- 1.09s /tmp/tmppc8868jw/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:5 Install the package, force upgrade -------------------------------------- 1.06s /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:11 - Install the package, force upgrade -------------------------------------- 1.01s /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:11 - fedora.linux_system_roles.certificate : Ensure provider packages are installed --- 0.94s /tmp/tmppc8868jw/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:22 Ensure python3 is installed --------------------------------------------- 0.93s /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:6 -- Ensure python3 is installed --------------------------------------------- 0.93s /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:6 -- Ensure python3 is installed --------------------------------------------- 0.93s /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:6 -- Install certreader ------------------------------------------------------ 0.89s /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:18 - Install certreader ------------------------------------------------------ 0.89s /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:18 - Install certreader ------------------------------------------------------ 0.86s /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:18 - Gathering Facts --------------------------------------------------------- 0.82s /tmp/tmppcorpegn/tests/certificate/tests_many_self_signed.yml:18 -------------- fedora.linux_system_roles.certificate : Ensure provider service is running --- 0.79s /tmp/tmppc8868jw/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:88 Parse certificate ------------------------------------------------------- 0.66s /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:74 - Parse certificate ------------------------------------------------------- 0.58s /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:74 - Parse certificate ------------------------------------------------------- 0.57s /tmp/tmppcorpegn/tests/certificate/tasks/assert_certificate_parameters.yml:74 - fedora.linux_system_roles.certificate : Ensure ansible_facts used by role --- 0.53s /tmp/tmppc8868jw/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/set_vars.yml:2 fedora.linux_system_roles.certificate : Ensure pre-scripts hooks directory exists --- 0.52s /tmp/tmppc8868jw/ansible_collections/fedora/linux_system_roles/roles/certificate/tasks/main.yml:33