Diff of the two buildlogs: -- --- b1/build.log 2025-11-09 18:00:32.332312453 +0000 +++ b2/build.log 2025-11-09 18:08:40.216918701 +0000 @@ -1,6 +1,6 @@ I: pbuilder: network access will be disabled during build -I: Current time: Sat Dec 12 12:08:47 -12 2026 -I: pbuilder-time-stamp: 1797120527 +I: Current time: Mon Nov 10 08:00:34 +14 2025 +I: pbuilder-time-stamp: 1762711234 I: Building the build Environment I: extracting base tarball [/var/cache/pbuilder/forky-reproducible-base.tgz] I: copying local configuration @@ -22,53 +22,85 @@ dpkg-source: info: unpacking golang-github-cloudflare-cfssl_1.6.5-2.debian.tar.xz I: using fakeroot in build. I: Installing the build-deps -I: user script /srv/workspace/pbuilder/722924/tmp/hooks/D02_print_environment starting +I: user script /srv/workspace/pbuilder/3678060/tmp/hooks/D01_modify_environment starting +debug: Running on ionos1-amd64. +I: Changing host+domainname to test build reproducibility +I: Adding a custom variable just for the fun of it... +I: Changing /bin/sh to bash +'/bin/sh' -> '/bin/bash' +lrwxrwxrwx 1 root root 9 Nov 9 18:00 /bin/sh -> /bin/bash +I: Setting pbuilder2's login shell to /bin/bash +I: Setting pbuilder2's GECOS to second user,second room,second work-phone,second home-phone,second other +I: user script /srv/workspace/pbuilder/3678060/tmp/hooks/D01_modify_environment finished +I: user script /srv/workspace/pbuilder/3678060/tmp/hooks/D02_print_environment starting I: set - BUILDDIR='/build/reproducible-path' - BUILDUSERGECOS='first user,first room,first work-phone,first home-phone,first other' - BUILDUSERNAME='pbuilder1' - BUILD_ARCH='amd64' - DEBIAN_FRONTEND='noninteractive' - DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=42 ' - DISTRIBUTION='forky' - HOME='/root' - HOST_ARCH='amd64' + BASH=/bin/sh + BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath + BASH_ALIASES=() + BASH_ARGC=() + BASH_ARGV=() + BASH_CMDS=() + BASH_LINENO=([0]="12" [1]="0") + BASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:. + BASH_SOURCE=([0]="/tmp/hooks/D02_print_environment" [1]="/tmp/hooks/D02_print_environment") + BASH_VERSINFO=([0]="5" [1]="3" [2]="3" [3]="1" [4]="release" [5]="x86_64-pc-linux-gnu") + BASH_VERSION='5.3.3(1)-release' + BUILDDIR=/build/reproducible-path + BUILDUSERGECOS='second user,second room,second work-phone,second home-phone,second other' + BUILDUSERNAME=pbuilder2 + BUILD_ARCH=amd64 + DEBIAN_FRONTEND=noninteractive + DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=40 nocheck' + DIRSTACK=() + DISTRIBUTION=forky + EUID=0 + FUNCNAME=([0]="Echo" [1]="main") + GROUPS=() + HOME=/root + HOSTNAME=i-capture-the-hostname + HOSTTYPE=x86_64 + HOST_ARCH=amd64 IFS=' ' - INVOCATION_ID='c2ca20757ff945069be816f7aea1ed18' - LANG='C' - LANGUAGE='en_US:en' - LC_ALL='C' - MAIL='/var/mail/root' - OPTIND='1' - PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games' - PBCURRENTCOMMANDLINEOPERATION='build' - PBUILDER_OPERATION='build' - PBUILDER_PKGDATADIR='/usr/share/pbuilder' - PBUILDER_PKGLIBDIR='/usr/lib/pbuilder' - PBUILDER_SYSCONFDIR='/etc' - PPID='722924' - PS1='# ' - PS2='> ' + INVOCATION_ID=6cf5497eddd64138bc0f4cbeb454b199 + LANG=C + LANGUAGE=et_EE:et + LC_ALL=C + MACHTYPE=x86_64-pc-linux-gnu + MAIL=/var/mail/root + OPTERR=1 + OPTIND=1 + OSTYPE=linux-gnu + PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path + PBCURRENTCOMMANDLINEOPERATION=build + PBUILDER_OPERATION=build + PBUILDER_PKGDATADIR=/usr/share/pbuilder + PBUILDER_PKGLIBDIR=/usr/lib/pbuilder + PBUILDER_SYSCONFDIR=/etc + PIPESTATUS=([0]="0") + POSIXLY_CORRECT=y + PPID=3678060 PS4='+ ' - PWD='/' - SHELL='/bin/bash' - SHLVL='2' - SUDO_COMMAND='/usr/bin/timeout -k 18.1h 18h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.3IT6K4F4/pbuilderrc_mOFU --distribution forky --hookdir /etc/pbuilder/first-build-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/forky-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.3IT6K4F4/b1 --logfile b1/build.log golang-github-cloudflare-cfssl_1.6.5-2.dsc' - SUDO_GID='111' - SUDO_HOME='/var/lib/jenkins' - SUDO_UID='106' - SUDO_USER='jenkins' - TERM='unknown' - TZ='/usr/share/zoneinfo/Etc/GMT+12' - USER='root' - _='/usr/bin/systemd-run' - http_proxy='http://213.165.73.152:3128' + PWD=/ + SHELL=/bin/bash + SHELLOPTS=braceexpand:errexit:hashall:interactive-comments:posix + SHLVL=3 + SUDO_COMMAND='/usr/bin/timeout -k 24.1h 24h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.3IT6K4F4/pbuilderrc_p48T --distribution forky --hookdir /etc/pbuilder/rebuild-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/forky-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.3IT6K4F4/b2 --logfile b2/build.log golang-github-cloudflare-cfssl_1.6.5-2.dsc' + SUDO_GID=110 + SUDO_HOME=/var/lib/jenkins + SUDO_UID=105 + SUDO_USER=jenkins + TERM=unknown + TZ=/usr/share/zoneinfo/Etc/GMT-14 + UID=0 + USER=root + _='I: set' + http_proxy=http://46.16.76.132:3128 I: uname -a - Linux ionos15-amd64 6.12.48+deb13-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.48-1 (2025-09-20) x86_64 GNU/Linux + Linux i-capture-the-hostname 6.12.48+deb13-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.48-1 (2025-09-20) x86_64 GNU/Linux I: ls -l /bin - lrwxrwxrwx 1 root root 7 Aug 10 2025 /bin -> usr/bin -I: user script /srv/workspace/pbuilder/722924/tmp/hooks/D02_print_environment finished + lrwxrwxrwx 1 root root 7 Aug 10 12:30 /bin -> usr/bin +I: user script /srv/workspace/pbuilder/3678060/tmp/hooks/D02_print_environment finished -> Attempting to satisfy build-dependencies -> Creating pbuilder-satisfydepends-dummy package Package: pbuilder-satisfydepends-dummy @@ -305,7 +337,7 @@ Get: 169 http://deb.debian.org/debian forky/main amd64 golang-gopkg-check.v1-dev all 0.0+git20200902.038fdea-2 [31.2 kB] Get: 170 http://deb.debian.org/debian forky/main amd64 golang-github-zmap-zcrypto-dev all 0.0~git20240512.0fef58d-2 [749 kB] Get: 171 http://deb.debian.org/debian forky/main amd64 golang-github-zmap-zlint-dev all 3.6.2-4 [203 kB] -Fetched 134 MB in 25s (5302 kB/s) +Fetched 134 MB in 1min 3s (2137 kB/s) Preconfiguring packages ... Selecting previously unselected package tzdata. (Reading database ... (Reading database ... 5% (Reading database ... 10% (Reading database ... 15% (Reading database ... 20% (Reading database ... 25% (Reading database ... 30% (Reading database ... 35% (Reading database ... 40% (Reading database ... 45% (Reading database ... 50% (Reading database ... 55% (Reading database ... 60% (Reading database ... 65% (Reading database ... 70% (Reading database ... 75% (Reading database ... 80% (Reading database ... 85% (Reading database ... 90% (Reading database ... 95% (Reading database ... 100% (Reading database ... 19862 files and directories currently installed.) @@ -865,8 +897,8 @@ Setting up tzdata (2025b-5) ... Current default time zone: 'Etc/UTC' -Local time is now: Sun Dec 13 00:12:18 UTC 2026. -Universal Time is now: Sun Dec 13 00:12:18 UTC 2026. +Local time is now: Sun Nov 9 18:07:05 UTC 2025. +Universal Time is now: Sun Nov 9 18:07:05 UTC 2025. Run 'dpkg-reconfigure tzdata' if you wish to change it. Setting up golang-github-cespare-xxhash-dev (2.3.0-1) ... @@ -1016,7 +1048,11 @@ Solving dependencies... 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. I: Building the package -I: Running cd /build/reproducible-path/golang-github-cloudflare-cfssl-1.6.5/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-genchanges -S > ../golang-github-cloudflare-cfssl_1.6.5-2_source.changes +I: user script /srv/workspace/pbuilder/3678060/tmp/hooks/A99_set_merged_usr starting +Not re-configuring usrmerge for forky +I: user script /srv/workspace/pbuilder/3678060/tmp/hooks/A99_set_merged_usr finished +hostname: Name or service not known +I: Running cd /build/reproducible-path/golang-github-cloudflare-cfssl-1.6.5/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-genchanges -S > ../golang-github-cloudflare-cfssl_1.6.5-2_source.changes dpkg-buildpackage: info: source package golang-github-cloudflare-cfssl dpkg-buildpackage: info: source version 1.6.5-2 dpkg-buildpackage: info: source distribution unstable @@ -1034,280 +1070,280 @@ dh_autoreconf -O--buildsystem=golang dh_auto_configure -O--buildsystem=golang dh_auto_build -O--buildsystem=golang - cd obj-x86_64-linux-gnu && go install -trimpath -v -p 42 github.com/cloudflare/cfssl/api github.com/cloudflare/cfssl/api/bundle github.com/cloudflare/cfssl/api/certadd github.com/cloudflare/cfssl/api/certinfo github.com/cloudflare/cfssl/api/client github.com/cloudflare/cfssl/api/crl github.com/cloudflare/cfssl/api/gencrl github.com/cloudflare/cfssl/api/generator github.com/cloudflare/cfssl/api/health github.com/cloudflare/cfssl/api/info github.com/cloudflare/cfssl/api/initca github.com/cloudflare/cfssl/api/ocsp github.com/cloudflare/cfssl/api/revoke github.com/cloudflare/cfssl/api/scan github.com/cloudflare/cfssl/api/sign github.com/cloudflare/cfssl/api/signhandler github.com/cloudflare/cfssl/auth github.com/cloudflare/cfssl/bundler github.com/cloudflare/cfssl/certdb github.com/cloudflare/cfssl/certdb/dbconf github.com/cloudflare/cfssl/certdb/ocspstapling github.com/cloudflare/cfssl/certdb/sql github.com/cloudflare/cfssl/certdb/testdb github.com/cloudflare/cfssl/certinfo github.com/cloudflare/cfssl/cli github.com/cloudflare/cfssl/cli/bundle github.com/cloudflare/cfssl/cli/certinfo github.com/cloudflare/cfssl/cli/crl github.com/cloudflare/cfssl/cli/gencert github.com/cloudflare/cfssl/cli/gencrl github.com/cloudflare/cfssl/cli/gencsr github.com/cloudflare/cfssl/cli/genkey github.com/cloudflare/cfssl/cli/info github.com/cloudflare/cfssl/cli/ocspdump github.com/cloudflare/cfssl/cli/ocsprefresh github.com/cloudflare/cfssl/cli/ocspserve github.com/cloudflare/cfssl/cli/ocspsign github.com/cloudflare/cfssl/cli/printdefault github.com/cloudflare/cfssl/cli/revoke github.com/cloudflare/cfssl/cli/scan github.com/cloudflare/cfssl/cli/selfsign github.com/cloudflare/cfssl/cli/serve github.com/cloudflare/cfssl/cli/sign github.com/cloudflare/cfssl/cli/version github.com/cloudflare/cfssl/cmd/cfssl github.com/cloudflare/cfssl/cmd/cfssl-bundle github.com/cloudflare/cfssl/cmd/cfssl-certinfo github.com/cloudflare/cfssl/cmd/cfssl-newkey github.com/cloudflare/cfssl/cmd/cfssl-scan github.com/cloudflare/cfssl/cmd/cfssljson github.com/cloudflare/cfssl/cmd/mkbundle github.com/cloudflare/cfssl/cmd/multirootca github.com/cloudflare/cfssl/config github.com/cloudflare/cfssl/crl github.com/cloudflare/cfssl/crypto github.com/cloudflare/cfssl/crypto/pkcs7 github.com/cloudflare/cfssl/csr github.com/cloudflare/cfssl/errors github.com/cloudflare/cfssl/helpers github.com/cloudflare/cfssl/helpers/derhelpers github.com/cloudflare/cfssl/helpers/testsuite github.com/cloudflare/cfssl/info github.com/cloudflare/cfssl/initca github.com/cloudflare/cfssl/log github.com/cloudflare/cfssl/multiroot/config github.com/cloudflare/cfssl/ocsp github.com/cloudflare/cfssl/ocsp/config github.com/cloudflare/cfssl/ocsp/universal github.com/cloudflare/cfssl/revoke github.com/cloudflare/cfssl/scan github.com/cloudflare/cfssl/scan/crypto github.com/cloudflare/cfssl/scan/crypto/md5 github.com/cloudflare/cfssl/scan/crypto/rsa github.com/cloudflare/cfssl/scan/crypto/sha1 github.com/cloudflare/cfssl/scan/crypto/sha256 github.com/cloudflare/cfssl/scan/crypto/sha512 github.com/cloudflare/cfssl/scan/crypto/tls github.com/cloudflare/cfssl/selfsign github.com/cloudflare/cfssl/signer github.com/cloudflare/cfssl/signer/local github.com/cloudflare/cfssl/signer/remote github.com/cloudflare/cfssl/signer/universal github.com/cloudflare/cfssl/transport github.com/cloudflare/cfssl/transport/ca github.com/cloudflare/cfssl/transport/ca/localca github.com/cloudflare/cfssl/transport/core github.com/cloudflare/cfssl/transport/example/exlib github.com/cloudflare/cfssl/transport/example/maclient github.com/cloudflare/cfssl/transport/example/maserver github.com/cloudflare/cfssl/transport/kp github.com/cloudflare/cfssl/transport/roots github.com/cloudflare/cfssl/transport/roots/system github.com/cloudflare/cfssl/ubiquity github.com/cloudflare/cfssl/whitelist -github.com/zmap/zcrypto/cryptobyte/asn1 -internal/godebugs + cd obj-x86_64-linux-gnu && go install -trimpath -v -p 40 github.com/cloudflare/cfssl/api github.com/cloudflare/cfssl/api/bundle github.com/cloudflare/cfssl/api/certadd github.com/cloudflare/cfssl/api/certinfo github.com/cloudflare/cfssl/api/client github.com/cloudflare/cfssl/api/crl github.com/cloudflare/cfssl/api/gencrl github.com/cloudflare/cfssl/api/generator github.com/cloudflare/cfssl/api/health github.com/cloudflare/cfssl/api/info github.com/cloudflare/cfssl/api/initca github.com/cloudflare/cfssl/api/ocsp github.com/cloudflare/cfssl/api/revoke github.com/cloudflare/cfssl/api/scan github.com/cloudflare/cfssl/api/sign github.com/cloudflare/cfssl/api/signhandler github.com/cloudflare/cfssl/auth github.com/cloudflare/cfssl/bundler github.com/cloudflare/cfssl/certdb github.com/cloudflare/cfssl/certdb/dbconf github.com/cloudflare/cfssl/certdb/ocspstapling github.com/cloudflare/cfssl/certdb/sql github.com/cloudflare/cfssl/certdb/testdb github.com/cloudflare/cfssl/certinfo github.com/cloudflare/cfssl/cli github.com/cloudflare/cfssl/cli/bundle github.com/cloudflare/cfssl/cli/certinfo github.com/cloudflare/cfssl/cli/crl github.com/cloudflare/cfssl/cli/gencert github.com/cloudflare/cfssl/cli/gencrl github.com/cloudflare/cfssl/cli/gencsr github.com/cloudflare/cfssl/cli/genkey github.com/cloudflare/cfssl/cli/info github.com/cloudflare/cfssl/cli/ocspdump github.com/cloudflare/cfssl/cli/ocsprefresh github.com/cloudflare/cfssl/cli/ocspserve github.com/cloudflare/cfssl/cli/ocspsign github.com/cloudflare/cfssl/cli/printdefault github.com/cloudflare/cfssl/cli/revoke github.com/cloudflare/cfssl/cli/scan github.com/cloudflare/cfssl/cli/selfsign github.com/cloudflare/cfssl/cli/serve github.com/cloudflare/cfssl/cli/sign github.com/cloudflare/cfssl/cli/version github.com/cloudflare/cfssl/cmd/cfssl github.com/cloudflare/cfssl/cmd/cfssl-bundle github.com/cloudflare/cfssl/cmd/cfssl-certinfo github.com/cloudflare/cfssl/cmd/cfssl-newkey github.com/cloudflare/cfssl/cmd/cfssl-scan github.com/cloudflare/cfssl/cmd/cfssljson github.com/cloudflare/cfssl/cmd/mkbundle github.com/cloudflare/cfssl/cmd/multirootca github.com/cloudflare/cfssl/config github.com/cloudflare/cfssl/crl github.com/cloudflare/cfssl/crypto github.com/cloudflare/cfssl/crypto/pkcs7 github.com/cloudflare/cfssl/csr github.com/cloudflare/cfssl/errors github.com/cloudflare/cfssl/helpers github.com/cloudflare/cfssl/helpers/derhelpers github.com/cloudflare/cfssl/helpers/testsuite github.com/cloudflare/cfssl/info github.com/cloudflare/cfssl/initca github.com/cloudflare/cfssl/log github.com/cloudflare/cfssl/multiroot/config github.com/cloudflare/cfssl/ocsp github.com/cloudflare/cfssl/ocsp/config github.com/cloudflare/cfssl/ocsp/universal github.com/cloudflare/cfssl/revoke github.com/cloudflare/cfssl/scan github.com/cloudflare/cfssl/scan/crypto github.com/cloudflare/cfssl/scan/crypto/md5 github.com/cloudflare/cfssl/scan/crypto/rsa github.com/cloudflare/cfssl/scan/crypto/sha1 github.com/cloudflare/cfssl/scan/crypto/sha256 github.com/cloudflare/cfssl/scan/crypto/sha512 github.com/cloudflare/cfssl/scan/crypto/tls github.com/cloudflare/cfssl/selfsign github.com/cloudflare/cfssl/signer github.com/cloudflare/cfssl/signer/local github.com/cloudflare/cfssl/signer/remote github.com/cloudflare/cfssl/signer/universal github.com/cloudflare/cfssl/transport github.com/cloudflare/cfssl/transport/ca github.com/cloudflare/cfssl/transport/ca/localca github.com/cloudflare/cfssl/transport/core github.com/cloudflare/cfssl/transport/example/exlib github.com/cloudflare/cfssl/transport/example/maclient github.com/cloudflare/cfssl/transport/example/maserver github.com/cloudflare/cfssl/transport/kp github.com/cloudflare/cfssl/transport/roots github.com/cloudflare/cfssl/transport/roots/system github.com/cloudflare/cfssl/ubiquity github.com/cloudflare/cfssl/whitelist +internal/byteorder internal/goarch -unicode/utf16 -internal/nettrace -internal/asan internal/unsafeheader -internal/byteorder -vendor/golang.org/x/crypto/internal/alias +internal/profilerecord +github.com/lib/pq/oid vendor/golang.org/x/crypto/cryptobyte/asn1 -log/internal -internal/coverage/rtcov github.com/cloudflare/cfssl/info -internal/profilerecord -math/bits -internal/goos cmp -internal/goexperiment -internal/runtime/syscall internal/itoa -google.golang.org/protobuf/internal/flags -github.com/cloudflare/cfssl/crypto -crypto/internal/boring/sig golang.org/x/crypto/cryptobyte/asn1 +unicode/utf8 +container/list +internal/asan +internal/msan +log/internal +google.golang.org/protobuf/internal/flags encoding +crypto/internal/boring/sig +github.com/zmap/zcrypto/cryptobyte/asn1 +internal/godebugs +internal/nettrace crypto/internal/fips140/alias -internal/msan +internal/coverage/rtcov +math/bits +unicode/utf16 +internal/goos +internal/cpu +github.com/cloudflare/cfssl/crypto +internal/goexperiment +vendor/golang.org/x/crypto/internal/alias sync/atomic -unicode/utf8 -github.com/lib/pq/oid -container/list -internal/runtime/math +internal/runtime/atomic unicode -internal/cpu +internal/runtime/syscall +internal/runtime/math internal/abi -internal/runtime/atomic -internal/runtime/sys -crypto/internal/fips140/subtle crypto/internal/fips140deps/byteorder internal/chacha8rand +internal/runtime/sys +crypto/internal/fips140/subtle google.golang.org/protobuf/internal/set +internal/runtime/exithook crypto/internal/fips140deps/cpu internal/bytealg -internal/runtime/exithook math -internal/stringslite internal/race internal/sync internal/runtime/maps +internal/stringslite runtime iter +weak crypto/subtle internal/reflectlite -weak -sync runtime/metrics +sync maps slices -internal/testlog +errors +sort internal/bisect internal/singleflight -unique +internal/testlog google.golang.org/protobuf/internal/pragma -errors -sort +unique runtime/cgo +internal/oserror io -strconv -container/heap github.com/cloudflare/redoctober/padding +path vendor/golang.org/x/net/dns/dnsmessage -internal/godebug -internal/oserror math/rand/v2 -path +strconv +internal/godebug +syscall +bytes +container/heap hash -internal/saferio github.com/zmap/zcrypto/internal/randutil -github.com/beorn7/perks/quantile github.com/prometheus/client_golang/prometheus/promhttp/internal +crypto/internal/randutil +github.com/beorn7/perks/quantile +internal/saferio strings -bytes -syscall -hash/fnv +reflect +encoding/base32 +crypto +net/netip +crypto/internal/fips140deps/godebug hash/crc32 -hash/adler32 -crypto/internal/randutil +hash/fnv math/rand -crypto/internal/fips140deps/godebug -crypto -encoding/base32 +hash/adler32 github.com/cloudflare/cfssl/scan/crypto -net/netip -reflect -vendor/golang.org/x/text/transform -golang.org/x/text/transform +github.com/cloudflare/cfssl/scan/crypto/md5 github.com/cloudflare/cfssl/scan/crypto/sha256 github.com/cloudflare/cfssl/scan/crypto/sha1 github.com/cloudflare/cfssl/scan/crypto/sha512 -github.com/cloudflare/cfssl/scan/crypto/md5 +golang.org/x/text/transform +vendor/golang.org/x/text/transform crypto/internal/impl net/http/internal/ascii -crypto/internal/fips140 -github.com/munnerz/goautoneg bufio +github.com/munnerz/goautoneg +crypto/internal/fips140 regexp/syntax crypto/tls/internal/fips140tls -crypto/internal/fips140/sha256 crypto/internal/fips140/sha512 +crypto/internal/fips140/sha256 crypto/internal/fips140/sha3 -crypto/internal/fips140/hmac +time +internal/syscall/unix +internal/syscall/execenv crypto/sha3 +crypto/internal/fips140/hmac crypto/internal/fips140/check crypto/internal/fips140hash -crypto/internal/fips140/edwards25519/field -crypto/internal/fips140/aes -crypto/internal/fips140/hkdf crypto/internal/fips140/tls12 +crypto/internal/fips140/hkdf +crypto/internal/fips140/aes crypto/internal/fips140/bigmod +crypto/internal/fips140/edwards25519/field crypto/internal/fips140/nistec/fiat crypto/internal/fips140/tls13 -crypto/internal/fips140/edwards25519 -internal/syscall/execenv -internal/syscall/unix -time regexp -crypto/internal/fips140/nistec +crypto/internal/fips140/edwards25519 +context github.com/cloudflare/cfssl/ocsp/config github.com/jmhodges/clock -context io/fs internal/poll +crypto/internal/fips140/nistec +github.com/jmoiron/sqlx/reflectx +encoding/binary +internal/fmtsort embed internal/filepathlite google.golang.org/protobuf/internal/editiondefaults -internal/fmtsort -github.com/jmoiron/sqlx/reflectx -encoding/binary os +filippo.io/edwards25519/field encoding/base64 -vendor/golang.org/x/crypto/internal/poly1305 github.com/cespare/xxhash -filippo.io/edwards25519/field +vendor/golang.org/x/crypto/internal/poly1305 golang.org/x/sys/unix encoding/pem -filippo.io/edwards25519 -google.golang.org/protobuf/internal/detrand -io/ioutil -fmt -internal/sysinfo path/filepath -crypto/internal/sysrand -github.com/prometheus/procfs/internal/util vendor/golang.org/x/sys/cpu -net +fmt +io/ioutil +google.golang.org/protobuf/internal/detrand +github.com/prometheus/procfs/internal/util +crypto/internal/sysrand +internal/sysinfo crypto/internal/entropy crypto/internal/fips140/drbg crypto/internal/fips140only crypto/internal/fips140/ecdh -crypto/internal/fips140/ed25519 crypto/internal/fips140/aes/gcm +crypto/internal/fips140/ed25519 +crypto/internal/fips140/mlkem crypto/internal/fips140/ecdsa crypto/internal/fips140/rsa -crypto/internal/fips140/mlkem -crypto/rc4 -crypto/md5 os/exec +crypto/md5 +crypto/rc4 +net +filippo.io/edwards25519 crypto/cipher -golang.org/x/crypto/pkcs12/internal/rc2 -crypto/des -crypto/internal/boring -vendor/golang.org/x/crypto/chacha20 -encoding/json encoding/hex -log net/url -compress/flate -mime +log +encoding/json +mime/quotedprintable net/http/internal -database/sql/driver -vendor/golang.org/x/net/http2/hpack google.golang.org/protobuf/internal/errors -math/big +mime +vendor/golang.org/x/net/http2/hpack +database/sql/driver +compress/flate google.golang.org/protobuf/internal/version +runtime/debug go/token -vendor/golang.org/x/text/unicode/norm -flag -os/user github.com/prometheus/procfs/internal/fs -mime/quotedprintable +os/user runtime/trace +github.com/cloudflare/cfssl/transport/example/exlib +flag +math/big encoding/csv +vendor/golang.org/x/text/unicode/norm golang.org/x/text/unicode/norm -github.com/cloudflare/cfssl/transport/example/exlib +google.golang.org/protobuf/encoding/protowire +crypto/internal/boring +crypto/des +golang.org/x/crypto/pkcs12/internal/rc2 +vendor/golang.org/x/crypto/chacha20 +google.golang.org/protobuf/reflect/protoreflect +github.com/cloudflare/cfssl/log +vendor/golang.org/x/text/unicode/bidi +golang.org/x/text/unicode/bidi +database/sql crypto/aes crypto/sha512 -runtime/debug -crypto/sha1 -crypto/hmac crypto/sha256 crypto/ecdh -google.golang.org/protobuf/encoding/protowire +crypto/hmac +crypto/sha1 vendor/golang.org/x/crypto/chacha20poly1305 +github.com/zmap/zcrypto/util +testing +compress/gzip +compress/zlib github.com/cloudflare/cfssl/auth golang.org/x/crypto/pbkdf2 golang.org/x/crypto/scrypt -google.golang.org/protobuf/reflect/protoreflect -github.com/cloudflare/cfssl/log -golang.org/x/text/unicode/bidi -vendor/golang.org/x/text/unicode/bidi -database/sql -testing -github.com/zmap/zcrypto/util -compress/zlib -compress/gzip -golang.org/x/text/secure/bidirule vendor/golang.org/x/text/secure/bidirule -google.golang.org/protobuf/internal/descfmt +golang.org/x/text/secure/bidirule +vendor/golang.org/x/net/idna +golang.org/x/net/idna google.golang.org/protobuf/internal/descopts +google.golang.org/protobuf/internal/descfmt google.golang.org/protobuf/internal/strs google.golang.org/protobuf/internal/encoding/messageset +google.golang.org/protobuf/internal/order google.golang.org/protobuf/runtime/protoiface google.golang.org/protobuf/internal/genid -google.golang.org/protobuf/internal/order -golang.org/x/net/idna google.golang.org/protobuf/internal/protolazy -vendor/golang.org/x/net/idna google.golang.org/protobuf/internal/encoding/text google.golang.org/protobuf/reflect/protoregistry -google.golang.org/protobuf/internal/encoding/defval -github.com/jmoiron/sqlx/types -github.com/cloudflare/redoctober/config -github.com/zmap/zcrypto/x509/ct -google.golang.org/protobuf/proto github.com/kisielk/sqlstruct github.com/jmoiron/sqlx github.com/mattn/go-sqlite3 +github.com/jmoiron/sqlx/types +github.com/cloudflare/redoctober/config +github.com/zmap/zcrypto/x509/ct github.com/cloudflare/cfssl/certdb -crypto/internal/boring/bbig crypto/dsa -github.com/zmap/zcrypto/encoding/asn1 crypto/elliptic +crypto/internal/boring/bbig crypto/rand -encoding/asn1 github.com/zmap/zcrypto/dsa +github.com/zmap/zcrypto/encoding/asn1 github.com/google/certificate-transparency-go/asn1 +encoding/asn1 github.com/pelletier/go-toml +google.golang.org/protobuf/proto crypto/ed25519 github.com/cloudflare/redoctober/symcrypt -github.com/cloudflare/backoff -crypto/internal/hpke github.com/lib/pq/scram +github.com/cloudflare/backoff github.com/cloudflare/cfssl/scan/crypto/rsa -crypto/rsa github.com/cloudflare/redoctober/msp +crypto/internal/hpke +crypto/rsa +google.golang.org/protobuf/internal/encoding/defval golang.org/x/crypto/ed25519 -google.golang.org/protobuf/internal/filedesc -google.golang.org/protobuf/encoding/prototext -google.golang.org/protobuf/encoding/protodelim github.com/zmap/zcrypto/json +github.com/google/certificate-transparency-go/x509/pkix github.com/zmap/zcrypto/cryptobyte github.com/zmap/zcrypto/x509/pkix +google.golang.org/protobuf/encoding/protodelim +google.golang.org/protobuf/encoding/prototext +google.golang.org/protobuf/internal/filedesc crypto/x509/pkix vendor/golang.org/x/crypto/cryptobyte golang.org/x/crypto/cryptobyte -github.com/google/certificate-transparency-go/x509/pkix crypto/ecdsa google.golang.org/protobuf/internal/encoding/tag -google.golang.org/protobuf/internal/impl github.com/cloudflare/redoctober/ecdh github.com/google/certificate-transparency-go/tls -vendor/golang.org/x/net/http/httpproxy +google.golang.org/protobuf/internal/impl net/textproto +vendor/golang.org/x/net/http/httpproxy crypto/x509 github.com/google/certificate-transparency-go/x509 github.com/prometheus/procfs @@ -1315,16 +1351,16 @@ net/mail mime/multipart golang.org/x/crypto/ocsp -github.com/cloudflare/cfssl/transport/roots/system -github.com/cloudflare/redoctober/passvault golang.org/x/crypto/pkcs12 -github.com/cloudflare/cfssl/scan/crypto/tls +github.com/cloudflare/redoctober/passvault +github.com/cloudflare/cfssl/transport/roots/system crypto/tls -github.com/cloudflare/redoctober/keycache +github.com/cloudflare/cfssl/scan/crypto/tls github.com/google/certificate-transparency-go +github.com/cloudflare/redoctober/keycache +google.golang.org/protobuf/internal/filetype github.com/cloudflare/redoctober/persist github.com/cloudflare/redoctober/cryptor -google.golang.org/protobuf/internal/filetype google.golang.org/protobuf/runtime/protoimpl google.golang.org/protobuf/types/known/timestamppb github.com/google/certificate-transparency-go/client/configpb @@ -1335,62 +1371,61 @@ github.com/lib/pq github.com/go-sql-driver/mysql net/http -github.com/cloudflare/cfssl/certdb/testdb -github.com/cloudflare/cfssl/whitelist -github.com/google/certificate-transparency-go/jsonclient github.com/cloudflare/cfssl/errors -github.com/cloudflare/redoctober/hipchat -github.com/prometheus/client_golang/internal/github.com/golang/gddo/httputil/header net/http/cookiejar +github.com/google/certificate-transparency-go/jsonclient +github.com/cloudflare/cfssl/whitelist +github.com/cloudflare/redoctober/hipchat expvar +github.com/prometheus/client_golang/internal/github.com/golang/gddo/httputil/header net/http/httputil github.com/prometheus/common/expfmt -github.com/prometheus/client_golang/internal/github.com/golang/gddo/httputil github.com/cloudflare/redoctober/order github.com/cloudflare/cfssl/api +github.com/cloudflare/cfssl/helpers/derhelpers github.com/cloudflare/cfssl/crypto/pkcs7 -github.com/cloudflare/cfssl/certdb/sql github.com/cloudflare/cfssl/certdb/dbconf -github.com/cloudflare/cfssl/helpers/derhelpers +github.com/cloudflare/cfssl/certdb/sql +github.com/prometheus/client_golang/internal/github.com/golang/gddo/httputil +github.com/cloudflare/cfssl/helpers github.com/cloudflare/redoctober/core github.com/google/certificate-transparency-go/client -github.com/cloudflare/cfssl/helpers -github.com/weppos/publicsuffix-go/publicsuffix github.com/cloudflare/cfssl/api/health github.com/cloudflare/cfssl/api/client -github.com/cloudflare/cfssl/crl +github.com/weppos/publicsuffix-go/publicsuffix +github.com/cloudflare/redoctober/client +github.com/cloudflare/cfssl/ocsp +github.com/cloudflare/cfssl/certinfo github.com/cloudflare/cfssl/ubiquity github.com/cloudflare/cfssl/api/gencrl +github.com/cloudflare/cfssl/crl github.com/cloudflare/cfssl/revoke github.com/cloudflare/cfssl/csr github.com/cloudflare/cfssl/certdb/ocspstapling -github.com/cloudflare/cfssl/ocsp -github.com/cloudflare/cfssl/certinfo -github.com/cloudflare/redoctober/client +github.com/prometheus/client_golang/prometheus +github.com/zmap/zcrypto/x509 github.com/cloudflare/cfssl/api/crl github.com/cloudflare/cfssl/cmd/mkbundle github.com/cloudflare/cfssl/api/certinfo -github.com/prometheus/client_golang/prometheus github.com/cloudflare/cfssl/transport/core github.com/cloudflare/cfssl/bundler +github.com/cloudflare/cfssl/api/certadd github.com/cloudflare/cfssl/api/ocsp -github.com/cloudflare/cfssl/api/revoke github.com/cloudflare/cfssl/ocsp/universal -github.com/cloudflare/cfssl/api/certadd +github.com/cloudflare/cfssl/api/revoke github.com/cloudflare/cfssl/transport/kp github.com/cloudflare/cfssl/transport/roots github.com/cloudflare/cfssl/api/bundle github.com/cloudflare/cfssl/scan -github.com/zmap/zcrypto/x509 -github.com/cloudflare/cfssl/api/scan github.com/zmap/zlint/v3/util github.com/prometheus/client_golang/prometheus/promauto github.com/prometheus/client_golang/prometheus/promhttp +github.com/cloudflare/cfssl/api/scan github.com/zmap/zlint/v3/lint -github.com/zmap/zlint/v3/lints/cabf_ev github.com/zmap/zlint/v3/lints/apple -github.com/zmap/zlint/v3/lints/mozilla +github.com/zmap/zlint/v3/lints/cabf_ev github.com/zmap/zlint/v3/lints/etsi +github.com/zmap/zlint/v3/lints/mozilla github.com/zmap/zlint/v3/lints/community github.com/zmap/zlint/v3/lints/cabf_smime_br github.com/zmap/zlint/v3/lints/rfc @@ -1398,2360 +1433,54 @@ github.com/zmap/zlint/v3 github.com/cloudflare/cfssl/config github.com/cloudflare/cfssl/signer -github.com/cloudflare/cfssl/multiroot/config github.com/cloudflare/cfssl/helpers/testsuite -github.com/cloudflare/cfssl/api/signhandler -github.com/cloudflare/cfssl/api/info +github.com/cloudflare/cfssl/multiroot/config +github.com/cloudflare/cfssl/signer/remote github.com/cloudflare/cfssl/signer/local +github.com/cloudflare/cfssl/api/info +github.com/cloudflare/cfssl/api/signhandler github.com/cloudflare/cfssl/selfsign -github.com/cloudflare/cfssl/signer/remote github.com/cloudflare/cfssl/transport/ca github.com/cloudflare/cfssl/transport github.com/cloudflare/cfssl/signer/universal github.com/cloudflare/cfssl/initca -github.com/cloudflare/cfssl/cmd/multirootca -github.com/cloudflare/cfssl/transport/example/maserver github.com/cloudflare/cfssl/transport/example/maclient +github.com/cloudflare/cfssl/transport/example/maserver github.com/cloudflare/cfssl/api/initca github.com/cloudflare/cfssl/transport/ca/localca -github.com/cloudflare/cfssl/api/sign github.com/cloudflare/cfssl/api/generator +github.com/cloudflare/cfssl/api/sign github.com/cloudflare/cfssl/cli github.com/cloudflare/cfssl/cli/bundle -github.com/cloudflare/cfssl/cli/genkey -github.com/cloudflare/cfssl/cli/crl -github.com/cloudflare/cfssl/cli/sign -github.com/cloudflare/cfssl/cli/gencrl -github.com/cloudflare/cfssl/cli/certinfo github.com/cloudflare/cfssl/cli/ocspsign -github.com/cloudflare/cfssl/cli/gencsr -github.com/cloudflare/cfssl/cli/ocspdump -github.com/cloudflare/cfssl/cli/ocspserve github.com/cloudflare/cfssl/cli/scan +github.com/cloudflare/cfssl/cli/certinfo github.com/cloudflare/cfssl/cli/printdefault github.com/cloudflare/cfssl/cli/ocsprefresh -github.com/cloudflare/cfssl/cli/revoke +github.com/cloudflare/cfssl/cli/ocspdump github.com/cloudflare/cfssl/cli/version +github.com/cloudflare/cfssl/cli/gencrl +github.com/cloudflare/cfssl/cli/gencsr +github.com/cloudflare/cfssl/cli/genkey +github.com/cloudflare/cfssl/cli/ocspserve +github.com/cloudflare/cfssl/cli/revoke +github.com/cloudflare/cfssl/cli/sign +github.com/cloudflare/cfssl/cli/crl github.com/cloudflare/cfssl/cli/selfsign github.com/cloudflare/cfssl/cmd/cfssl-newkey github.com/cloudflare/cfssl/cmd/cfssl-bundle github.com/cloudflare/cfssl/cmd/cfssljson github.com/cloudflare/cfssl/cmd/cfssl-scan -github.com/cloudflare/cfssl/cmd/cfssl-certinfo github.com/cloudflare/cfssl/cli/gencert github.com/cloudflare/cfssl/cli/info github.com/cloudflare/cfssl/cli/serve +github.com/cloudflare/cfssl/certdb/testdb github.com/cloudflare/cfssl/cmd/cfssl +github.com/cloudflare/cfssl/cmd/cfssl-certinfo +github.com/cloudflare/cfssl/cmd/multirootca debian/rules override_dh_auto_test make[1]: Entering directory '/build/reproducible-path/golang-github-cloudflare-cfssl-1.6.5' dh_auto_test - cd obj-x86_64-linux-gnu && go test -vet=off -v -p 42 github.com/cloudflare/cfssl/api github.com/cloudflare/cfssl/api/bundle github.com/cloudflare/cfssl/api/certadd github.com/cloudflare/cfssl/api/certinfo github.com/cloudflare/cfssl/api/client github.com/cloudflare/cfssl/api/crl github.com/cloudflare/cfssl/api/gencrl github.com/cloudflare/cfssl/api/generator github.com/cloudflare/cfssl/api/health github.com/cloudflare/cfssl/api/info github.com/cloudflare/cfssl/api/initca github.com/cloudflare/cfssl/api/ocsp github.com/cloudflare/cfssl/api/revoke github.com/cloudflare/cfssl/api/scan github.com/cloudflare/cfssl/api/sign github.com/cloudflare/cfssl/api/signhandler github.com/cloudflare/cfssl/auth github.com/cloudflare/cfssl/bundler github.com/cloudflare/cfssl/certdb github.com/cloudflare/cfssl/certdb/dbconf github.com/cloudflare/cfssl/certdb/ocspstapling github.com/cloudflare/cfssl/certdb/sql github.com/cloudflare/cfssl/certdb/testdb github.com/cloudflare/cfssl/certinfo github.com/cloudflare/cfssl/cli github.com/cloudflare/cfssl/cli/bundle github.com/cloudflare/cfssl/cli/certinfo github.com/cloudflare/cfssl/cli/crl github.com/cloudflare/cfssl/cli/gencert github.com/cloudflare/cfssl/cli/gencrl github.com/cloudflare/cfssl/cli/gencsr github.com/cloudflare/cfssl/cli/genkey github.com/cloudflare/cfssl/cli/info github.com/cloudflare/cfssl/cli/ocspdump github.com/cloudflare/cfssl/cli/ocsprefresh github.com/cloudflare/cfssl/cli/ocspserve github.com/cloudflare/cfssl/cli/ocspsign github.com/cloudflare/cfssl/cli/printdefault github.com/cloudflare/cfssl/cli/revoke github.com/cloudflare/cfssl/cli/scan github.com/cloudflare/cfssl/cli/selfsign github.com/cloudflare/cfssl/cli/serve github.com/cloudflare/cfssl/cli/sign github.com/cloudflare/cfssl/cli/version github.com/cloudflare/cfssl/cmd/cfssl github.com/cloudflare/cfssl/cmd/cfssl-bundle github.com/cloudflare/cfssl/cmd/cfssl-certinfo github.com/cloudflare/cfssl/cmd/cfssl-newkey github.com/cloudflare/cfssl/cmd/cfssl-scan github.com/cloudflare/cfssl/cmd/cfssljson github.com/cloudflare/cfssl/cmd/mkbundle github.com/cloudflare/cfssl/cmd/multirootca github.com/cloudflare/cfssl/config github.com/cloudflare/cfssl/crl github.com/cloudflare/cfssl/crypto github.com/cloudflare/cfssl/crypto/pkcs7 github.com/cloudflare/cfssl/csr github.com/cloudflare/cfssl/errors github.com/cloudflare/cfssl/helpers github.com/cloudflare/cfssl/helpers/derhelpers github.com/cloudflare/cfssl/helpers/testsuite github.com/cloudflare/cfssl/info github.com/cloudflare/cfssl/initca github.com/cloudflare/cfssl/log github.com/cloudflare/cfssl/multiroot/config github.com/cloudflare/cfssl/ocsp github.com/cloudflare/cfssl/ocsp/config github.com/cloudflare/cfssl/ocsp/universal github.com/cloudflare/cfssl/revoke github.com/cloudflare/cfssl/scan github.com/cloudflare/cfssl/scan/crypto github.com/cloudflare/cfssl/scan/crypto/md5 github.com/cloudflare/cfssl/scan/crypto/rsa github.com/cloudflare/cfssl/scan/crypto/sha1 github.com/cloudflare/cfssl/scan/crypto/sha256 github.com/cloudflare/cfssl/scan/crypto/sha512 github.com/cloudflare/cfssl/scan/crypto/tls github.com/cloudflare/cfssl/selfsign github.com/cloudflare/cfssl/signer github.com/cloudflare/cfssl/signer/local github.com/cloudflare/cfssl/signer/remote github.com/cloudflare/cfssl/signer/universal github.com/cloudflare/cfssl/transport github.com/cloudflare/cfssl/transport/ca github.com/cloudflare/cfssl/transport/ca/localca github.com/cloudflare/cfssl/transport/core github.com/cloudflare/cfssl/transport/example/exlib github.com/cloudflare/cfssl/transport/example/maclient github.com/cloudflare/cfssl/transport/example/maserver github.com/cloudflare/cfssl/transport/kp github.com/cloudflare/cfssl/transport/roots github.com/cloudflare/cfssl/transport/roots/system github.com/cloudflare/cfssl/ubiquity github.com/cloudflare/cfssl/whitelist -=== RUN TestRigidHandle -2026/12/12 12:13:01 [INFO] 127.0.0.1:44714 - "POST /" 200 -2026/12/12 12:13:01 [INFO] 127.0.0.1:44714 - "POST /" 200 -2026/12/12 12:13:01 [INFO] 127.0.0.1:44714 - "POST /" 400 -2026/12/12 12:13:01 [INFO] 127.0.0.1:44714 - "POST /" 400 -2026/12/12 12:13:01 [INFO] 127.0.0.1:44714 - "GET /" 405 ---- PASS: TestRigidHandle (0.00s) -=== RUN TestCleverHandle -2026/12/12 12:13:01 [INFO] 127.0.0.1:41094 - "POST /" 200 -2026/12/12 12:13:01 [INFO] 127.0.0.1:41094 - "POST /" 200 -2026/12/12 12:13:01 [INFO] 127.0.0.1:41094 - "POST /" 200 -2026/12/12 12:13:01 [INFO] 127.0.0.1:41094 - "POST /" 400 -2026/12/12 12:13:01 [INFO] 127.0.0.1:41094 - "GET /" 405 ---- PASS: TestCleverHandle (0.00s) -PASS -ok github.com/cloudflare/cfssl/api 0.010s -=== RUN TestNewHandler -2026/12/12 12:13:01 [INFO] bundler API ready ---- PASS: TestNewHandler (0.00s) -=== RUN TestBundle - bundle_test.go:187: expired cert https://github.com/cloudflare/cfssl/issues/1237 ---- SKIP: TestBundle (0.00s) -PASS -ok github.com/cloudflare/cfssl/api/bundle 0.005s -=== RUN TestInsertValidCertificate -2026/12/12 12:13:01 [INFO] 127.0.0.1:38942 - "POST /" 200 ---- PASS: TestInsertValidCertificate (0.62s) -=== RUN TestInsertMissingSerial -2026/12/12 12:13:02 [INFO] 127.0.0.1:60610 - "POST /" 400 ---- PASS: TestInsertMissingSerial (0.65s) -=== RUN TestInsertMissingAKI -2026/12/12 12:13:02 [INFO] 127.0.0.1:46378 - "POST /" 400 ---- PASS: TestInsertMissingAKI (0.43s) -=== RUN TestInsertMissingExpiry -2026/12/12 12:13:03 [INFO] 127.0.0.1:34648 - "POST /" 400 ---- PASS: TestInsertMissingExpiry (0.32s) -=== RUN TestInsertMissingPEM -2026/12/12 12:13:03 [INFO] 127.0.0.1:34230 - "POST /" 400 ---- PASS: TestInsertMissingPEM (0.40s) -=== RUN TestInsertInvalidSerial -2026/12/12 12:13:03 [INFO] 127.0.0.1:53826 - "POST /" 400 ---- PASS: TestInsertInvalidSerial (0.15s) -=== RUN TestInsertInvalidAKI -2026/12/12 12:13:04 [INFO] 127.0.0.1:38404 - "POST /" 400 ---- PASS: TestInsertInvalidAKI (0.71s) -=== RUN TestInsertInvalidStatus -2026/12/12 12:13:04 [INFO] 127.0.0.1:59800 - "POST /" 400 ---- PASS: TestInsertInvalidStatus (0.22s) -=== RUN TestInsertInvalidPEM -2026/12/12 12:13:05 [INFO] 127.0.0.1:55168 - "POST /" 400 ---- PASS: TestInsertInvalidPEM (0.49s) -=== RUN TestInsertInvalidExpiry -2026/12/12 12:13:05 [INFO] 127.0.0.1:60636 - "POST /" 400 ---- PASS: TestInsertInvalidExpiry (0.26s) -=== RUN TestInsertWrongSerial -2026/12/12 12:13:07 [INFO] 127.0.0.1:35224 - "POST /" 400 ---- PASS: TestInsertWrongSerial (1.48s) -=== RUN TestInsertWrongAKI -2026/12/12 12:13:09 [INFO] 127.0.0.1:60584 - "POST /" 400 ---- PASS: TestInsertWrongAKI (2.89s) -=== RUN TestInsertWrongExpiry -2026/12/12 12:13:10 [INFO] 127.0.0.1:44610 - "POST /" 400 ---- PASS: TestInsertWrongExpiry (0.53s) -=== RUN TestInsertRevokedCertificate -2026/12/12 12:13:10 [INFO] 127.0.0.1:45958 - "POST /" 200 ---- PASS: TestInsertRevokedCertificate (0.13s) -=== RUN TestInsertRevokedCertificateWithoutTime -2026/12/12 12:13:10 [INFO] 127.0.0.1:36034 - "POST /" 400 ---- PASS: TestInsertRevokedCertificateWithoutTime (0.26s) -PASS -ok github.com/cloudflare/cfssl/api/certadd 9.532s -? github.com/cloudflare/cfssl/api/certinfo [no test files] -=== RUN TestNewServer -2026/12/12 12:13:01 [ERROR] bad url: parse "1.1.1.1:::123456789": first path segment in URL cannot contain colon -2026/12/12 12:13:01 [ERROR] bad url: parse "1.1.1.1:[]": first path segment in URL cannot contain colon ---- PASS: TestNewServer (0.00s) -=== RUN TestInvalidPort -2026/12/12 12:13:01 [ERROR] bad url: parse "1.1.1.1:99999999999999999999999999999": first path segment in URL cannot contain colon ---- PASS: TestInvalidPort (0.00s) -=== RUN TestAuthSign ---- PASS: TestAuthSign (0.00s) -=== RUN TestDefaultAuthSign ---- PASS: TestDefaultAuthSign (0.00s) -=== RUN TestSign ---- PASS: TestSign (0.00s) -=== RUN TestNewMutualTLSServer ---- PASS: TestNewMutualTLSServer (0.00s) -=== RUN TestNewServerGroup ---- PASS: TestNewServerGroup (0.00s) -=== RUN TestNewTLSServerGroup ---- PASS: TestNewTLSServerGroup (0.00s) -=== RUN TestNewMutualTLSServerGroup ---- PASS: TestNewMutualTLSServerGroup (0.00s) -=== RUN TestNewOGLGroup ---- PASS: TestNewOGLGroup (0.00s) -PASS -ok github.com/cloudflare/cfssl/api/client 0.008s -=== RUN TestCRLGeneration -2026/12/12 12:13:01 [INFO] 127.0.0.1:35590 - "GET /" 200 ---- PASS: TestCRLGeneration (0.26s) -=== RUN TestCRLGenerationWithExpiry -2026/12/12 12:13:01 [INFO] requested expiry time of 119h -2026/12/12 12:13:01 [INFO] 127.0.0.1:48652 - "GET /?expiry=119h" 200 ---- PASS: TestCRLGenerationWithExpiry (0.10s) -PASS -ok github.com/cloudflare/cfssl/api/crl 0.367s -=== RUN TestNewHandler ---- PASS: TestNewHandler (0.00s) -=== RUN TestCRL -2026/12/12 12:13:01 [INFO] 127.0.0.1:34734 - "POST /" 200 ---- PASS: TestCRL (0.01s) -PASS -ok github.com/cloudflare/cfssl/api/gencrl 0.010s -=== RUN TestGeneratorRESTfulVerbs -2026/12/12 12:13:03 [INFO] setting up key / CSR generator -2026/12/12 12:13:03 [INFO] request for CSR -2026/12/12 12:13:03 [INFO] generate received request -2026/12/12 12:13:03 [INFO] received CSR -2026/12/12 12:13:03 [INFO] generating key: ecdsa-256 -2026/12/12 12:13:03 [INFO] encoded CSR -2026/12/12 12:13:03 [INFO] 127.0.0.1:33688 - "POST /" 200 -2026/12/12 12:13:03 [INFO] 127.0.0.1:33700 - "GET /" 405 -2026/12/12 12:13:03 [INFO] 127.0.0.1:33712 - "PUT /" 405 -2026/12/12 12:13:03 [INFO] 127.0.0.1:33724 - "DELETE /" 405 -2026/12/12 12:13:03 [INFO] 127.0.0.1:33736 - "WHATEVER /" 405 ---- PASS: TestGeneratorRESTfulVerbs (0.01s) -=== RUN TestCSRValidate ---- PASS: TestCSRValidate (0.00s) -=== RUN TestNewCertGeneratorHandlerFromSigner ---- PASS: TestNewCertGeneratorHandlerFromSigner (0.02s) -PASS -ok github.com/cloudflare/cfssl/api/generator 0.046s -? github.com/cloudflare/cfssl/api/health [no test files] -=== RUN TestNewHandler ---- PASS: TestNewHandler (0.00s) -=== RUN TestNewMultiHandler ---- PASS: TestNewMultiHandler (0.00s) -=== RUN TestInfo -2026/12/12 12:13:03 [INFO] 127.0.0.1:52074 - "POST /" 200 -2026/12/12 12:13:03 [WARNING] failed to unmarshal request: json: cannot unmarshal number into Go struct field Req.label of type string -2026/12/12 12:13:03 [INFO] 127.0.0.1:59518 - "POST /" 400 ---- PASS: TestInfo (0.00s) -=== RUN TestMultiInfo -2026/12/12 12:13:03 [INFO] 127.0.0.1:39190 - "POST /" 200 -2026/12/12 12:13:03 [INFO] 127.0.0.1:34524 - "POST /" 200 -2026/12/12 12:13:03 [INFO] 127.0.0.1:39718 - "POST /" 200 -2026/12/12 12:13:03 [WARNING] request for invalid endpoint -2026/12/12 12:13:03 [INFO] 127.0.0.1:49560 - "POST /" 400 -2026/12/12 12:13:03 [WARNING] failed to unmarshal request: json: cannot unmarshal number into Go struct field Req.label of type string -2026/12/12 12:13:03 [INFO] 127.0.0.1:56808 - "POST /" 400 ---- PASS: TestMultiInfo (0.01s) -PASS -ok github.com/cloudflare/cfssl/api/info 0.032s -=== RUN TestInitCARESTfulVerbs -2026/12/12 12:13:03 [INFO] setting up initial CA handler -2026/12/12 12:13:03 [INFO] generate received request -2026/12/12 12:13:03 [INFO] received CSR -2026/12/12 12:13:03 [INFO] generating key: ecdsa-256 -2026/12/12 12:13:03 [INFO] encoded CSR -2026/12/12 12:13:03 [INFO] signed certificate with serial number 240181510831850923293496780866102090508082690796 -2026/12/12 12:13:03 [INFO] 127.0.0.1:47846 - "POST /" 200 -2026/12/12 12:13:03 [INFO] 127.0.0.1:47862 - "GET /" 405 -2026/12/12 12:13:03 [INFO] 127.0.0.1:47878 - "PUT /" 405 -2026/12/12 12:13:03 [INFO] 127.0.0.1:47890 - "DELETE /" 405 -2026/12/12 12:13:03 [INFO] 127.0.0.1:47894 - "WHATEVER /" 405 ---- PASS: TestInitCARESTfulVerbs (0.01s) -=== RUN TestBadRequestBody -2026/12/12 12:13:03 [INFO] setting up initial CA handler -2026/12/12 12:13:03 [WARNING] failed to unmarshal request: unexpected end of JSON input -2026/12/12 12:13:03 [INFO] 127.0.0.1:45518 - "POST /" 400 ---- PASS: TestBadRequestBody (0.00s) -=== RUN TestBadRequestBody_2 -2026/12/12 12:13:03 [INFO] setting up initial CA handler -2026/12/12 12:13:03 [INFO] generate received request -2026/12/12 12:13:03 [WARNING] invalid request: {"code":5300,"message":"missing subject information"} -2026/12/12 12:13:03 [ERROR] failed to process request: {"code":5300,"message":"missing subject information"} -2026/12/12 12:13:03 [WARNING] failed to initialise new CA: {"code":5300,"message":"missing subject information"} -2026/12/12 12:13:03 [INFO] 127.0.0.1:55348 - "POST /" 5300 ---- PASS: TestBadRequestBody_2 (0.00s) -PASS -ok github.com/cloudflare/cfssl/api/initca 0.031s -=== RUN TestNewHandler ---- PASS: TestNewHandler (0.00s) -=== RUN TestSign -2026/12/12 12:13:03 [INFO] 127.0.0.1:46706 - "POST /" 200 -2026/12/12 12:13:03 [INFO] 127.0.0.1:45324 - "POST /" 200 -2026/12/12 12:13:03 [INFO] 127.0.0.1:48660 - "POST /" 200 -2026/12/12 12:13:03 [INFO] 127.0.0.1:34492 - "POST /" 200 -2026/12/12 12:13:03 [INFO] 127.0.0.1:41426 - "POST /" 400 -2026/12/12 12:13:03 [ERROR] Error from ParseCertificatePEM{"code":1002,"message":"Failed to decode certificate"} -2026/12/12 12:13:03 [INFO] 127.0.0.1:45070 - "POST /" 400 -2026/12/12 12:13:03 [INFO] 127.0.0.1:43930 - "POST /" 8200 -2026/12/12 12:13:03 [INFO] 127.0.0.1:38696 - "POST /" 200 -2026/12/12 12:13:03 [INFO] 127.0.0.1:45556 - "POST /" 400 ---- PASS: TestSign (0.02s) -PASS -ok github.com/cloudflare/cfssl/api/ocsp 0.025s -=== RUN TestInvalidRevocation -2026/12/12 12:13:03 [INFO] 127.0.0.1:49278 - "POST /" 400 ---- PASS: TestInvalidRevocation (0.02s) -=== RUN TestRevocation -2026/12/12 12:13:03 [INFO] 127.0.0.1:40446 - "POST /" 200 ---- PASS: TestRevocation (0.03s) -=== RUN TestOCSPGeneration -2026/12/12 12:13:03 [INFO] 127.0.0.1:42644 - "POST /" 200 ---- PASS: TestOCSPGeneration (0.55s) -PASS -ok github.com/cloudflare/cfssl/api/revoke 0.617s -=== RUN TestBadRequest -2026/12/12 12:13:03 [WARNING] no host given -2026/12/12 12:13:03 [INFO] 127.0.0.1:57628 - "GET /" 400 ---- PASS: TestBadRequest (0.00s) -=== RUN TestScanRESTfulVerbs -2026/12/12 12:13:03 [INFO] 127.0.0.1:57632 - "GET /?host=cloudflare.com" 200 -2026/12/12 12:13:03 [INFO] 127.0.0.1:57644 - "POST /" 405 -2026/12/12 12:13:03 [INFO] 127.0.0.1:57652 - "DELETE /" 405 -2026/12/12 12:13:03 [INFO] 127.0.0.1:57664 - "PUT /" 405 -2026/12/12 12:13:03 [INFO] 127.0.0.1:57668 - "WHATEVER /" 405 ---- PASS: TestScanRESTfulVerbs (0.17s) -=== RUN TestNewInfoHandler ---- PASS: TestNewInfoHandler (0.00s) -PASS -ok github.com/cloudflare/cfssl/api/scan 0.182s -=== RUN TestNewHandler ---- PASS: TestNewHandler (0.00s) -=== RUN TestNewHandlerWithProfile ---- PASS: TestNewHandlerWithProfile (0.00s) -=== RUN TestNewHandlerWithAuthProfile ---- PASS: TestNewHandlerWithAuthProfile (0.00s) -=== RUN TestNewHandlerError -2026/12/12 12:13:03 [ERROR] setting up signer failed: {"code":2002,"message":"Failed to decode private key"} ---- PASS: TestNewHandlerError (0.00s) -=== RUN TestNewAuthHandlerWithNonAuthProfile ---- PASS: TestNewAuthHandlerWithNonAuthProfile (0.00s) -=== RUN TestNewHandlersWithMixedProfile ---- PASS: TestNewHandlersWithMixedProfile (0.00s) -=== RUN TestNewHandlersWithAnotherMixedProfile ---- PASS: TestNewHandlersWithAnotherMixedProfile (0.00s) -=== RUN TestSign -2026/12/12 12:13:03 [INFO] signature request received -2026/12/12 12:13:03 [INFO] signed certificate with serial number 111279490950278993645377511103843042347866845418 -2026/12/12 12:13:03 [INFO] wrote response -2026/12/12 12:13:03 [INFO] 127.0.0.1:42310 - "POST /" 200 -2026/12/12 12:13:03 [INFO] signature request received -2026/12/12 12:13:03 [INFO] signed certificate with serial number 414932853195938477967935384408068936853395371547 -2026/12/12 12:13:03 [INFO] wrote response -2026/12/12 12:13:03 [INFO] 127.0.0.1:39092 - "POST /" 200 -2026/12/12 12:13:03 [INFO] signature request received -2026/12/12 12:13:03 [INFO] signed certificate with serial number 619930294736840426141035208543090406360854807891 -2026/12/12 12:13:03 [INFO] wrote response -2026/12/12 12:13:03 [INFO] 127.0.0.1:50742 - "POST /" 200 -2026/12/12 12:13:03 [INFO] signature request received -2026/12/12 12:13:03 [INFO] signed certificate with serial number 613737289928325971235872575607214888867518885273 -2026/12/12 12:13:03 [INFO] wrote response -2026/12/12 12:13:03 [INFO] 127.0.0.1:37968 - "POST /" 200 -2026/12/12 12:13:03 [INFO] signature request received -2026/12/12 12:13:03 [INFO] signed certificate with serial number 353924407618830222594537705191581432290504351505 -2026/12/12 12:13:03 [INFO] wrote response -2026/12/12 12:13:03 [INFO] 127.0.0.1:47902 - "POST /" 200 -2026/12/12 12:13:03 [INFO] signature request received -2026/12/12 12:13:03 [INFO] signed certificate with serial number 340644188138743015595040365344063809834788762996 -2026/12/12 12:13:03 [INFO] wrote response -2026/12/12 12:13:03 [INFO] 127.0.0.1:51704 - "POST /" 200 -2026/12/12 12:13:03 [INFO] signature request received -2026/12/12 12:13:03 [INFO] 127.0.0.1:45012 - "POST /" 400 -2026/12/12 12:13:03 [INFO] signature request received -2026/12/12 12:13:03 [WARNING] failed to sign request: {"code":9002,"message":"CSR Decode failed"} -2026/12/12 12:13:03 [INFO] 127.0.0.1:41116 - "POST /" 9002 -2026/12/12 12:13:03 [INFO] signature request received -2026/12/12 12:13:03 [INFO] signed certificate with serial number 251439222410270352869486858625851187351433193748 -2026/12/12 12:13:03 [INFO] wrote response -2026/12/12 12:13:03 [INFO] 127.0.0.1:59294 - "POST /" 200 -2026/12/12 12:13:03 [INFO] signature request received -2026/12/12 12:13:03 [INFO] signed certificate with serial number 704697295854932243030762154241580156747122818006 -2026/12/12 12:13:03 [INFO] wrote response -2026/12/12 12:13:03 [INFO] 127.0.0.1:40576 - "POST /" 200 -2026/12/12 12:13:03 [INFO] signature request received -2026/12/12 12:13:03 [INFO] signed certificate with serial number 314213290534348783359118452901951147878553268768 -2026/12/12 12:13:03 [INFO] wrote response -2026/12/12 12:13:03 [INFO] 127.0.0.1:58070 - "POST /" 200 -2026/12/12 12:13:03 [INFO] signature request received -2026/12/12 12:13:03 [INFO] signed certificate with serial number 631203687981132593659031926237918647049819287720 -2026/12/12 12:13:03 [INFO] wrote response -2026/12/12 12:13:03 [INFO] 127.0.0.1:41284 - "POST /" 200 -2026/12/12 12:13:03 [INFO] signature request received -2026/12/12 12:13:03 [INFO] signed certificate with serial number 214264123126015077863498466048080602269523976422 -2026/12/12 12:13:03 [INFO] wrote response -2026/12/12 12:13:03 [INFO] 127.0.0.1:48922 - "POST /" 200 -2026/12/12 12:13:03 [INFO] signature request received -2026/12/12 12:13:03 [INFO] 127.0.0.1:46112 - "POST /" 400 -2026/12/12 12:13:03 [INFO] signature request received -2026/12/12 12:13:03 [WARNING] failed to sign request: {"code":9002,"message":"CSR Decode failed"} -2026/12/12 12:13:03 [INFO] 127.0.0.1:51744 - "POST /" 9002 ---- PASS: TestSign (0.08s) -=== RUN TestNewAuthHandler ---- PASS: TestNewAuthHandler (0.00s) -=== RUN TestNewAuthHandlerWithNoAuthConfig ---- PASS: TestNewAuthHandlerWithNoAuthConfig (0.00s) -=== RUN TestAuthSign -2026/12/12 12:13:03 [INFO] signature request received -2026/12/12 12:13:03 [INFO] signed certificate with serial number 149936088013743956119798399898365191954731220275 -2026/12/12 12:13:03 [INFO] wrote response -2026/12/12 12:13:03 [INFO] 127.0.0.1:53440 - "POST /" 200 -2026/12/12 12:13:03 [INFO] signature request received -2026/12/12 12:13:03 [INFO] signed certificate with serial number 33155405138175824579182197503894390030635158207 -2026/12/12 12:13:03 [INFO] wrote response -2026/12/12 12:13:03 [INFO] 127.0.0.1:56608 - "POST /" 200 -2026/12/12 12:13:03 [INFO] signature request received -2026/12/12 12:13:03 [INFO] signed certificate with serial number 89325600783994551996359300399770988384088715569 -2026/12/12 12:13:03 [INFO] wrote response -2026/12/12 12:13:03 [INFO] 127.0.0.1:59490 - "POST /" 200 -2026/12/12 12:13:03 [INFO] signature request received -2026/12/12 12:13:03 [INFO] signed certificate with serial number 705502018002361337556540668247054115632048545077 -2026/12/12 12:13:03 [INFO] wrote response -2026/12/12 12:13:03 [INFO] 127.0.0.1:57836 - "POST /" 200 -2026/12/12 12:13:03 [INFO] signature request received -2026/12/12 12:13:03 [INFO] signed certificate with serial number 108962415562445868499797068324561339627213044887 -2026/12/12 12:13:03 [INFO] wrote response -2026/12/12 12:13:03 [INFO] 127.0.0.1:46416 - "POST /" 200 -2026/12/12 12:13:03 [INFO] signature request received -2026/12/12 12:13:03 [INFO] signed certificate with serial number 256966219818732461999015779943774926429095934736 -2026/12/12 12:13:03 [INFO] wrote response -2026/12/12 12:13:03 [INFO] 127.0.0.1:33448 - "POST /" 200 -2026/12/12 12:13:03 [INFO] signature request received -2026/12/12 12:13:03 [INFO] 127.0.0.1:41794 - "POST /" 400 -2026/12/12 12:13:03 [INFO] signature request received -2026/12/12 12:13:03 [ERROR] signature failed: {"code":9002,"message":"CSR Decode failed"} -2026/12/12 12:13:03 [INFO] 127.0.0.1:32918 - "POST /" 9002 ---- PASS: TestAuthSign (0.04s) -PASS -ok github.com/cloudflare/cfssl/api/sign 0.149s -=== RUN TestSignerDBPersistence -2026/12/12 12:13:03 [INFO] signature request received -2026/12/12 12:13:03 [INFO] signed certificate with serial number 398951938664470557793072272602082409455362129037 -2026/12/12 12:13:03 [INFO] wrote response -2026/12/12 12:13:03 [INFO] 127.0.0.1:54472 - "POST /" 200 ---- PASS: TestSignerDBPersistence (0.37s) -PASS -ok github.com/cloudflare/cfssl/api/signhandler 0.389s -=== RUN TestNew ---- PASS: TestNew (0.00s) -=== RUN TestVerifyTrue ---- PASS: TestVerifyTrue (0.00s) -=== RUN TestVerifyAD ---- PASS: TestVerifyAD (0.00s) -=== RUN TestTokenLength ---- PASS: TestTokenLength (0.00s) -=== RUN TestBadRequest ---- PASS: TestBadRequest (0.00s) -=== RUN TestNullRequest ---- PASS: TestNullRequest (0.00s) -=== RUN TestPreGenerated ---- PASS: TestPreGenerated (0.00s) -=== RUN TestLoadBenchmarkRequest ---- PASS: TestLoadBenchmarkRequest (0.00s) -PASS -ok github.com/cloudflare/cfssl/auth 0.004s -panic: lookup badssl.com on [::1]:53: read udp [::1]:37676->[::1]:53: read: connection refused - -goroutine 1 [running]: -github.com/cloudflare/cfssl/bundler.resolveHostIP({0x9fd409, 0xa}) - /build/reproducible-path/golang-github-cloudflare-cfssl-1.6.5/obj-x86_64-linux-gnu/src/github.com/cloudflare/cfssl/bundler/bundle_from_remote_test.go:128 +0xa5 -github.com/cloudflare/cfssl/bundler.init() - /build/reproducible-path/golang-github-cloudflare-cfssl-1.6.5/obj-x86_64-linux-gnu/src/github.com/cloudflare/cfssl/bundler/bundle_from_remote_test.go:151 +0x1157 -FAIL github.com/cloudflare/cfssl/bundler 0.015s -? github.com/cloudflare/cfssl/certdb [no test files] -=== RUN TestLoadFile ---- PASS: TestLoadFile (0.00s) -=== RUN TestDBFromConfig ---- PASS: TestDBFromConfig (0.00s) -PASS -ok github.com/cloudflare/cfssl/certdb/dbconf 0.006s -=== RUN TestStapleSCTList - ocspstapling_test.go:24: broken relating to https://github.com/cloudflare/cfssl/issues/1230 ---- SKIP: TestStapleSCTList (0.00s) -PASS -ok github.com/cloudflare/cfssl/certdb/ocspstapling 0.007s -=== RUN TestNoDB ---- PASS: TestNoDB (0.00s) -=== RUN TestSQLite ---- PASS: TestSQLite (0.27s) -PASS -ok github.com/cloudflare/cfssl/certdb/sql 0.276s -? github.com/cloudflare/cfssl/certdb/testdb [no test files] -=== RUN TestParseSerialNumber -=== RUN TestParseSerialNumber/no_certificate_found_-_wrong_serial -=== RUN TestParseSerialNumber/no_certificate_found_-_wrong_AKI -=== RUN TestParseSerialNumber/certificate_found ---- PASS: TestParseSerialNumber (0.33s) - --- PASS: TestParseSerialNumber/no_certificate_found_-_wrong_serial (0.00s) - --- PASS: TestParseSerialNumber/no_certificate_found_-_wrong_AKI (0.00s) - --- PASS: TestParseSerialNumber/certificate_found (0.00s) -PASS -ok github.com/cloudflare/cfssl/certinfo 0.340s -=== RUN TestHelp -Usage of /tmp/go-build3171767249/b395/cli.test: -No command is given. ---- PASS: TestHelp (0.00s) -=== RUN TestUnknownFlag -flag provided but not defined: -badflag -Usage of cfssl: -No command is given. ---- PASS: TestUnknownFlag (0.00s) -=== RUN TestBadCommand -Command badcommand is not defined. ---- PASS: TestBadCommand (0.00s) -=== RUN TestCommandHelp ---- PASS: TestCommandHelp (0.00s) -=== RUN TestCommandBadFlag ---- PASS: TestCommandBadFlag (0.00s) -=== RUN TestReadStdin ---- PASS: TestReadStdin (0.00s) -=== RUN TestPopFirstArg ---- PASS: TestPopFirstArg (0.00s) -PASS -ok github.com/cloudflare/cfssl/cli 0.010s -testing: warning: no tests to run -PASS -ok github.com/cloudflare/cfssl/cli/bundle 0.010s [no tests to run] -? github.com/cloudflare/cfssl/cli/certinfo [no test files] -=== RUN TestRevokeMain ---- PASS: TestRevokeMain (0.03s) -=== RUN TestRevokeExpiry ---- PASS: TestRevokeExpiry (0.02s) -PASS -ok github.com/cloudflare/cfssl/cli/crl 0.068s -=== RUN TestGencertMain -2026/12/12 12:13:04 [INFO] generating a new CA key and certificate from CSR -2026/12/12 12:13:04 [INFO] generate received request -2026/12/12 12:13:04 [INFO] received CSR -2026/12/12 12:13:04 [INFO] generating key: rsa-2048 -2026/12/12 12:13:04 [INFO] encoded CSR -2026/12/12 12:13:04 [INFO] signed certificate with serial number 299304776456203172556459963764717219439759085404 -{"cert":"-----BEGIN CERTIFICATE-----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\nobTHWc7L8bRcCjrfiVU8QvRCotE06BzBXVHq4wM=\n-----END CERTIFICATE-----\n","csr":"-----BEGIN CERTIFICATE REQUEST-----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\n7H1FPQOWk/P8VyQJVHDKmhkYQCmMOQ==\n-----END CERTIFICATE REQUEST-----\n","key":"-----BEGIN RSA PRIVATE KEY-----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\nlgWN44/ikGQ0yFIvM269oWyzu34AegLHxECMLRLipHwhRjdAPvds\n-----END RSA PRIVATE KEY-----\n"} -2026/12/12 12:13:04 [INFO] re-generate a CA certificate from CSR and CA key -2026/12/12 12:13:04 [INFO] encoded CSR -2026/12/12 12:13:04 [INFO] signed certificate with serial number 115017886031156871882948909007046436099471580643 -{"cert":"-----BEGIN CERTIFICATE-----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\ngtzDvOcU8n/2kTaoH88HRt3dCJwdC4OE0Or3Mcw=\n-----END CERTIFICATE-----\n","csr":"-----BEGIN CERTIFICATE REQUEST-----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\nyyhgspiUhtFL4J8+NgltGGraHP1hxw==\n-----END CERTIFICATE REQUEST-----\n"} -2026/12/12 12:13:04 [INFO] generate received request -2026/12/12 12:13:04 [INFO] received CSR -2026/12/12 12:13:04 [INFO] generating key: rsa-2048 -2026/12/12 12:13:05 [INFO] encoded CSR -2026/12/12 12:13:05 [INFO] signed certificate with serial number 57098109855705987849742376178398420279107701633 -{"cert":"-----BEGIN CERTIFICATE-----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\nfzFaPlypPkIampwq87RP4/xhOU8di1GS6f6P/w==\n-----END CERTIFICATE-----\n","csr":"-----BEGIN CERTIFICATE REQUEST-----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\nAcpDqMsC8WqDoESWnS/98r1apUDsrg==\n-----END CERTIFICATE REQUEST-----\n","key":"-----BEGIN RSA PRIVATE KEY-----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\nPdNK5ExOFwlUX6iG4huAoRzwfkiD0ZuoYl4Yjysb0TOFmfN6Yue30DY=\n-----END RSA PRIVATE KEY-----\n"} -2026/12/12 12:13:05 [INFO] re-generate a CA certificate from CA cert and key -2026/12/12 12:13:05 [INFO] encoded CSR -2026/12/12 12:13:05 [INFO] signed certificate with serial number 604341741220000275081316015233848748430852398515 -{"cert":"-----BEGIN CERTIFICATE-----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\neqgndYGhxMbo7F/4TPN6VhjFCamoDrzqD8026lVfeSwu\n-----END CERTIFICATE-----\n"} ---- PASS: TestGencertMain (0.53s) -=== RUN TestGencertFile -2026/12/12 12:13:05 [INFO] re-generate a CA certificate from CSR and CA key -2026/12/12 12:13:05 [INFO] encoded CSR -2026/12/12 12:13:05 [INFO] signed certificate with serial number 476862788273644545186260271008368394717661393953 -{"cert":"-----BEGIN CERTIFICATE-----\nMIID2TCCAsGgAwIBAgIUU4dEWFUkPxVX9uwCySBjoXXWdCEwDQYJKoZIhvcNAQEL\nBQAwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExFjAUBgNVBAcT\nDVNhbiBGcmFuY2lzY28xEzARBgNVBAoTCkNsb3VkRmxhcmUxHDAaBgNVBAsTE1N5\nc3RlbXMgRW5naW5lZXJpbmcxDTALBgQqAwQFEwNhYmMwHhcNMjYxMjEzMDAwODAw\nWhcNMzExMjEyMDAwODAwWjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZv\ncm5pYTEWMBQGA1UEBxMNU2FuIEZyYW5jaXNjbzETMBEGA1UEChMKQ2xvdWRGbGFy\nZTEcMBoGA1UECxMTU3lzdGVtcyBFbmdpbmVlcmluZzENMAsGBCoDBAUTA2FiYzCC\nASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANCMRb2uIgmvO1dn8SWrOYe6\nAVzPJR51HIvSvC8ORksOifqlHscjVVgowoE2gFVAc7QkITDkSsxT4NVtUdHu0xo4\nIDNxYhE6oYCp3mjpbtVyTBgye3hsf/FaIWggOOXbI4TG9PoRPx4DqoUK/yxyGhSM\nLxCTPKw9hy7zeYWkWnhCfWThsmUPNCd2AZAf6tweQ5UydLXBK83xvdlSX+4C6r2I\nOv8ZAhTVGm/P8LJ6nTVwIPUPwCWj6ep8yFrNZ7ikbTsJ+ygwty9nfD+6MDXbZ2ji\n4IqNUkl082fyKjsRSiMiAFrUghUN5fGWuS7El/xNfvqSeUSDdy6HSr0k6i0eIu8C\nAwEAAaNTMFEwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0O\nBBYEFHuEaWWwGnbCXcbr7FLufYHVmScBMA8GCSsGAQQBgtpLLAQCBQAwDQYJKoZI\nhvcNAQELBQADggEBAMSKjhLG0iTj+9MV0yc6yGErHguUXxFfNyda+A2qyiOz4u1v\nRSTyoCY4yAXf00x23fGK2PyLLzhwhBidu+TVVrEV0aO88vNOznBe/dBGSlqn8HEI\nqtnZ4Mi2wC8OZl9BOdkd4S+7lUhFfvxYLxKGVH25cxF2KpT8rBNH+FZcbT4DfFG2\nDJkZ6nESFZOpypAIddLy+TVJ3m97kvK2qmRK0hcmvCKxaeLtG6khNJdYUOytnH0u\nLULYBk0ScxZYOc1w9luhqFcI7pwLA1AjgQV0wnNpymtjaCXsHbVsVVXheHTDq8Ge\nM66W2ovIKXWsi0JRXbbxU8N6gp8xH+upfnBT8Yo=\n-----END CERTIFICATE-----\n","csr":"-----BEGIN CERTIFICATE REQUEST-----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\nyyhgspiUhtFL4J8+NgltGGraHP1hxw==\n-----END CERTIFICATE REQUEST-----\n"} -2026/12/12 12:13:05 [INFO] generate received request -2026/12/12 12:13:05 [INFO] received CSR -2026/12/12 12:13:05 [INFO] generating key: rsa-2048 -2026/12/12 12:13:05 [INFO] encoded CSR -2026/12/12 12:13:05 [INFO] signed certificate with serial number 657753491803551566023467209403982958769303240645 -{"cert":"-----BEGIN CERTIFICATE-----\nMIIEODCCAyCgAwIBAgIUczavyJ8sbRU6nk9kugwTOz84v8UwDQYJKoZIhvcNAQEL\nBQAwbTELMAkGA1UEBhMCVVMxEzARBgNVBAoTCkNsb3VkRmxhcmUxHDAaBgNVBAsT\nE1N5c3RlbXMgRW5naW5lZXJpbmcxFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28xEzAR\nBgNVBAgTCkNhbGlmb3JuaWEwHhcNMjYxMjEzMDAwODAwWhcNMjcxMjEzMDAwODAw\nWjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEWMBQGA1UEBxMN\nU2FuIEZyYW5jaXNjbzETMBEGA1UEChMKQ2xvdWRGbGFyZTEcMBoGA1UECxMTU3lz\ndGVtcyBFbmdpbmVlcmluZzENMAsGBCoDBAUTA2FiYzCCASIwDQYJKoZIhvcNAQEB\nBQADggEPADCCAQoCggEBAKuk8YGFMbfIvM2OwyFQg/2sIJhHTc+zXIhghy7l8oEd\nF+QToKjgZQM9yvhKL3kDxxgy763brdCashtBIOlFvBmXKu87BZT7R/2JK4xFvH4O\n7dJpYh3AHnj7hPbr+iXzsGLrUfqCTZmJhGqFKPUaeYVTF6w1yVwOmWvDdBYJ94L4\nEQX8b6bNPzyDQa4AOxKN5r/Wey9seDv5al4N2ek3wi2jUXQ9v1j7fNZarzk4yjev\nwAUbw988n9xHF+j2iRSVb1bfBtVSrKxQjpHKZwn+LhRQZX87oJi9E3qroetCFGxm\nlfFvHcz8zXSYsYNWm3ofPgyCyomEOECNQFKkZvuXFGsCAwEAAaOBwDCBvTAOBgNV\nHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud\nEwEB/wQCMAAwHQYDVR0OBBYEFP+RGG0H2xMZ0jyafmo89xmlCHihMB8GA1UdIwQY\nMBaAFHuEaWWwGnbCXcbr7FLufYHVmScBMC0GA1UdEQQmMCSCDmNsb3VkZmxhcmUu\nY29tghJ3d3cuY2xvdWRmbGFyZS5jb20wDwYJKwYBBAGC2kssBAIFADANBgkqhkiG\n9w0BAQsFAAOCAQEAfJFm6f/lvlqg/lBcHLWqlL3HnBFEfZUBeGlu7XS1b47wPGDz\ndCPFUvy1HxUGi0nlBbnnC86dxwS7io6dW2Un+rP9YnG+XTNRO/ASv/09SzhkNwWm\nW4VUaZHSUjImwy1Z8K3APAT6tPbJSrZB/DIFRHxOOGzWMSabOwiqN325Gd0oLaZ2\n2YOcL4/+PuoZcunA2NiPQRj18sCblttotj0rGvJDULP2OhfP+SEn25hsVzZddYW4\nYY8O1PFabtNWvIoWYFIwo2zlWADWAbC2vPyCaoAQbEf7tHH1QGWzCJlnW4zbVd3l\nFWNTYtipsP7wFAX3AyeOuVt8lOxpJAaQz7ptnQ==\n-----END CERTIFICATE-----\n","csr":"-----BEGIN CERTIFICATE REQUEST-----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\ncXKaFSUVDG5ZTlYqN1Ty8I46i4etgA==\n-----END CERTIFICATE REQUEST-----\n","key":"-----BEGIN RSA PRIVATE KEY-----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\nIW6Z51FFHkqGJ+gM7If3kx0gU8IYZb7KYPNVMS3yIMERai86v1ug\n-----END RSA PRIVATE KEY-----\n"} -2026/12/12 12:13:05 [INFO] re-generate a CA certificate from CA cert and key -2026/12/12 12:13:05 [INFO] encoded CSR -2026/12/12 12:13:05 [INFO] signed certificate with serial number 366142369582754847899371699661677980384995363022 -{"cert":"-----BEGIN CERTIFICATE-----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\nDv3l/SlmrXnYh2MEbGVwsfbEAd7sldoRyWfF1IgW8R7z\n-----END CERTIFICATE-----\n"} ---- PASS: TestGencertFile (0.41s) -=== RUN TestGencertEnv -2026/12/12 12:13:05 [INFO] re-generate a CA certificate from CSR and CA key -2026/12/12 12:13:05 [INFO] encoded CSR -2026/12/12 12:13:05 [INFO] signed certificate with serial number 483734397840031409507088675766614166726876127528 -{"cert":"-----BEGIN CERTIFICATE-----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\nGNv9biZtKcro600wGnZJCq5PTpmGHCOSNfzf7AA=\n-----END CERTIFICATE-----\n","csr":"-----BEGIN CERTIFICATE REQUEST-----\nMIIDEjCCAfoCAQAwfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWEx\nFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28xEzARBgNVBAoTCkNsb3VkRmxhcmUxHDAa\nBgNVBAsTE1N5c3RlbXMgRW5naW5lZXJpbmcxDTALBgQqAwQFEwNhYmMwggEiMA0G\nCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQjEW9riIJrztXZ/ElqzmHugFczyUe\ndRyL0rwvDkZLDon6pR7HI1VYKMKBNoBVQHO0JCEw5ErMU+DVbVHR7tMaOCAzcWIR\nOqGAqd5o6W7VckwYMnt4bH/xWiFoIDjl2yOExvT6ET8eA6qFCv8schoUjC8Qkzys\nPYcu83mFpFp4Qn1k4bJlDzQndgGQH+rcHkOVMnS1wSvN8b3ZUl/uAuq9iDr/GQIU\n1Rpvz/Cyep01cCD1D8Alo+nqfMhazWe4pG07CfsoMLcvZ3w/ujA122do4uCKjVJJ\ndPNn8io7EUojIgBa1IIVDeXxlrkuxJf8TX76knlEg3cuh0q9JOotHiLvAgMBAAGg\nUTBPBgkqhkiG9w0BCQ4xQjBAMC0GA1UdEQQmMCSCDmNsb3VkZmxhcmUuY29tghJ3\nd3cuY2xvdWRmbGFyZS5jb20wDwYJKwYBBAGC2kssBAIFADANBgkqhkiG9w0BAQsF\nAAOCAQEAdARADSrOVexgH0EVxZxuPHSmY1OVBInbfN1XiLamUiQjUreX/KOX1fu0\npVsE6sW0oyMC4+4YaJLzD/qTRidO/rD9qxZAt5p3OEJDV0u9ICimk4V0+fqCnGDr\noU6wPGeknvJ2QhsaJZToAcRqRnVPlKO7H2ZvR1MIykKev5v5JCBsEbN/buQso+aT\nFfS6brEKMVmfIezl+KBxohECh9oLycmm1xCqYX9lB6AuQ4wQyG8QxIspqPWH2Q4y\nBh4nEZa7pz3Qek8jmYIxKlmZ/P2YOJJwiWUpfpvTu5b56bsy7N5dA10PojK91Obx\nyyhgspiUhtFL4J8+NgltGGraHP1hxw==\n-----END CERTIFICATE REQUEST-----\n"} -2026/12/12 12:13:05 [INFO] generate received request -2026/12/12 12:13:05 [INFO] received CSR -2026/12/12 12:13:05 [INFO] generating key: rsa-2048 -2026/12/12 12:13:05 [INFO] encoded CSR -2026/12/12 12:13:05 [INFO] signed certificate with serial number 236590636285514667162575048178375607512320258917 -{"cert":"-----BEGIN CERTIFICATE-----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\n0oM/O3DtR4kxmmNyXc9LvI5Fqnlr+qfkf6fUHQ==\n-----END CERTIFICATE-----\n","csr":"-----BEGIN CERTIFICATE REQUEST-----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\nA0R2dJjxv6sAL7Hcp1QvPCzo8YnfLg==\n-----END CERTIFICATE REQUEST-----\n","key":"-----BEGIN RSA PRIVATE KEY-----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\no9leL93J3vhw/mwvbJ2l+N0UIHC5NgSjVy9LBJ0A3nwXP8k2VBSI\n-----END RSA PRIVATE KEY-----\n"} -2026/12/12 12:13:05 [INFO] re-generate a CA certificate from CA cert and key -2026/12/12 12:13:05 [INFO] encoded CSR -2026/12/12 12:13:05 [INFO] signed certificate with serial number 188810764253839876003625669289071981072195339064 -{"cert":"-----BEGIN CERTIFICATE-----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\nyN2nWmQTmQ+jSZvjNsbsJ1JJ2Or1R+9BsawSiRZnT44r\n-----END CERTIFICATE-----\n"} ---- PASS: TestGencertEnv (0.32s) -=== RUN TestBadGencertEnv -2026/12/12 12:13:05 [INFO] re-generate a CA certificate from CA cert and key -2026/12/12 12:13:05 [ERROR] open ca: no such file or directory -2026/12/12 12:13:05 [INFO] re-generate a CA certificate from CA cert and key -2026/12/12 12:13:05 [ERROR] open ca_key: no such file or directory -2026/12/12 12:13:05 [INFO] re-generate a CA certificate from CA cert and key -2026/12/12 12:13:05 [ERROR] unknown prefix: en -2026/12/12 12:13:05 [INFO] re-generate a CA certificate from CA cert and key -2026/12/12 12:13:05 [ERROR] {"code":2002,"message":"Failed to decode private key"} ---- PASS: TestBadGencertEnv (0.00s) -=== RUN TestBadGencertMain -2026/12/12 12:13:05 [ERROR] need a CA certificate (provide one with -ca) -2026/12/12 12:13:05 [ERROR] need a CA key (provide one with -ca-key) -2026/12/12 12:13:05 [INFO] re-generate a CA certificate from CA cert and key -2026/12/12 12:13:05 [ERROR] open : no such file or directory -2026/12/12 12:13:05 [INFO] re-generate a CA certificate from CSR and CA key -2026/12/12 12:13:05 [ERROR] {"code":2003,"message":"Failed to parse private key"} -2026/12/12 12:13:05 [INFO] generate received request -2026/12/12 12:13:05 [INFO] received CSR -2026/12/12 12:13:05 [INFO] generating key: rsa-2048 -2026/12/12 12:13:05 [INFO] encoded CSR -2026/12/12 12:13:05 [ERROR] bad url: parse "123::::123": first path segment in URL cannot contain colon ---- PASS: TestBadGencertMain (0.11s) -=== RUN TestOidMain -2026/12/12 12:13:05 [INFO] generate received request -2026/12/12 12:13:05 [INFO] received CSR -2026/12/12 12:13:05 [INFO] generating key: rsa-2048 -2026/12/12 12:13:06 [ERROR] failed to generate a CSR: invalid OID part abc ---- PASS: TestOidMain (0.26s) -PASS -ok github.com/cloudflare/cfssl/cli/gencert 1.637s -=== RUN TestGencrl -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 ---- PASS: TestGencrl (0.00s) -=== RUN TestGencrlTime -MIICPjCCASYCAQEwDQYJKoZIhvcNAQELBQAwfTELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28xFTATBgNVBAoTDFRlc3QgQ29tcGFueTEUMBIGA1UECxMLSVQgU2VydmljZXMxFDASBgNVBAMTC3Rlc3RMb2NhbENBFw0yNjEyMTMwMDEzMDRaFw0yNjEyMTMwMDE1MDdaMFAwEgIBARcNMjYxMjEzMDAxMzA0WjASAgECFw0yNjEyMTMwMDEzMDRaMBICAQMXDTI2MTIxMzAwMTMwNFowEgIBBBcNMjYxMjEzMDAxMzA0WqAjMCEwHwYDVR0jBBgwFoAU6jzK7+HcNGKm+TONgxyrYy/02qEwDQYJKoZIhvcNAQELBQADggEBADtY662jbofC0O9PABUhscOijNzX5DQtcEn10DCYmWPnwLwGj3hritGM9wwVPrfzd3tlhtg5cyUELMEaNSFcjTpjrmeeXG/TEJdte9tHlplndJvjziqm3o1SNipPceJcFIVf2VOIkOmVNnQ0tuiM6kSuvLktCGv2HTeMES9zT1w6LZqDwk6aN6+g6puWi32kYmvYCnBRIWIwhKX/uOO04WH2/1PP1zoEc/xNetK3OkGUrD+sxZVm3MCKj1XlVRffImRg+MuGogiYbDI5HxRHMEiWYVDGRbQ5Fn/o7FkaFTzZSR8/c+fNVSr7HHw2O1521u/ltGyt+lcr6f8zxGRip0A= ---- PASS: TestGencrlTime (0.00s) -PASS -ok github.com/cloudflare/cfssl/cli/gencrl 0.022s -=== RUN TestGencsr -2026/12/12 12:13:04 [INFO] encoded CSR ---- PASS: TestGencsr (0.00s) -=== RUN TestGencsrFromCert -2026/12/12 12:13:04 [INFO] encoded CSR ---- PASS: TestGencsrFromCert (0.00s) -=== RUN TestGencsrError ---- PASS: TestGencsrError (0.00s) -PASS -ok github.com/cloudflare/cfssl/cli/gencsr 0.019s -=== RUN TestGenkey -2026/12/12 12:13:04 [INFO] generate received request -2026/12/12 12:13:04 [INFO] received CSR -2026/12/12 12:13:04 [INFO] generating key: rsa-2048 -2026/12/12 12:13:05 [INFO] encoded CSR -2026/12/12 12:13:05 [INFO] generate received request -2026/12/12 12:13:05 [INFO] received CSR -2026/12/12 12:13:05 [INFO] generating key: rsa-2048 -2026/12/12 12:13:05 [INFO] encoded CSR -2026/12/12 12:13:05 [INFO] signed certificate with serial number 655988116379671735827926821735803751479274698721 ---- PASS: TestGenkey (0.94s) -PASS -ok github.com/cloudflare/cfssl/cli/genkey 0.951s -? github.com/cloudflare/cfssl/cli/info [no test files] -? github.com/cloudflare/cfssl/cli/ocspdump [no test files] -=== RUN TestOCSPRefreshMain ---- PASS: TestOCSPRefreshMain (0.05s) -PASS -ok github.com/cloudflare/cfssl/cli/ocsprefresh 0.063s -? github.com/cloudflare/cfssl/cli/ocspserve [no test files] -? github.com/cloudflare/cfssl/cli/ocspsign [no test files] -? github.com/cloudflare/cfssl/cli/printdefault [no test files] -=== RUN TestRevokeMain -2026/12/12 12:13:05 [ERROR] Invalid reason code: strconv.Atoi: parsing "invalid_reason": invalid syntax -2026/12/12 12:13:05 [ERROR] Invalid reason code: {"code":8200,"message":"Invalid revocation status"} ---- PASS: TestRevokeMain (0.05s) -PASS -ok github.com/cloudflare/cfssl/cli/revoke 0.058s -=== RUN TestScanMain -2026/12/12 12:13:05 [WARNING] Only scanning max-hosts=0 out of 2 args given -{ - "Broad": { - "description": "Large scale scans of TLS hosts", - "scanners": { - "IntermediateCAs": { - "description": "Scans a CIDR IP range for unknown Intermediate CAs" - } - } - }, - "Connectivity": { - "description": "Scans for basic connectivity with the host through DNS and TCP/TLS dials", - "scanners": { - "CloudFlareStatus": { - "description": "Host is on CloudFlare" - }, - "DNSLookup": { - "description": "Host can be resolved through DNS" - }, - "TCPDial": { - "description": "Host accepts TCP connection" - }, - "TLSDial": { - "description": "Host can perform TLS handshake" - } - } - }, - "PKI": { - "description": "Scans for the Public Key Infrastructure", - "scanners": { - "ChainExpiration": { - "description": "Host's chain hasn't expired and won't expire in the next 30 days" - }, - "ChainValidation": { - "description": "All certificates in host's chain are valid" - }, - "MultipleCerts": { - "description": "Host serves same certificate chain across all IPs" - } - } - }, - "TLSHandshake": { - "description": "Scans for host's SSL/TLS version and cipher suite negotiation", - "scanners": { - "CertsByCiphers": { - "description": "Determines host's certificate signature algorithm matching client's accepted ciphers" - }, - "CertsBySigAlgs": { - "description": "Determines host's certificate signature algorithm matching client's accepted signature and hash algorithms" - }, - "CipherSuite": { - "description": "Determines host's cipher suites accepted and preferred order" - }, - "ECCurves": { - "description": "Determines the host's ec curve support for TLS 1.2" - }, - "SigAlgs": { - "description": "Determines host's accepted signature and hash algorithms" - } - } - }, - "TLSSession": { - "description": "Scans host's implementation of TLS session resumption using session tickets/session IDs", - "scanners": { - "SessionResume": { - "description": "Host is able to resume sessions across all addresses" - } - } - } -} - ---- PASS: TestScanMain (0.00s) -PASS -ok github.com/cloudflare/cfssl/cli/scan 0.009s -=== RUN TestSelfSignMain -2026/12/12 12:13:05 [INFO] generate received request -2026/12/12 12:13:05 [INFO] received CSR -2026/12/12 12:13:05 [INFO] generating key: rsa-2048 -2026/12/12 12:13:05 [INFO] encoded CSR -*** WARNING *** - -Self-signed certificates are dangerous. Use this self-signed -certificate at your own risk. - -It is strongly recommended that these certificates NOT be used -in production. - -*** WARNING *** - -{"cert":"-----BEGIN CERTIFICATE-----\nMIID6zCCAtOgAwIBAgIIc6DsfuI2MKkwDQYJKoZIhvcNAQELBQAwbTELMAkGA1UE\nBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExFjAUBgNVBAcTDVNhbiBGcmFuY2lz\nY28xEzARBgNVBAoTCkNsb3VkRmxhcmUxHDAaBgNVBAsTE1N5c3RlbXMgRW5naW5l\nZXJpbmcwHhcNMjYxMjEzMDAwODA1WhcNMjcwMzE0MDYxMzA1WjBtMQswCQYDVQQG\nEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEWMBQGA1UEBxMNU2FuIEZyYW5jaXNj\nbzETMBEGA1UEChMKQ2xvdWRGbGFyZTEcMBoGA1UECxMTU3lzdGVtcyBFbmdpbmVl\ncmluZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALRpcmAAEQ0Hn3zf\nhtnh02f9NRAZuNFk72KPhmx0Hw4G4gw7IdhSycX8LOpcqwxkX+T/bl1u4kmQwo74\ndwBAc6oyaiCEwpHTrSxgEZLpnPjxw2iKy0C5A9zCFPYvdd9qt3DbSth6du1+ikqh\nS+Mr36nkFgMtv+KNLRx1cgMWj9QWEI0wlWYnnJtC7tgp6GuRo8R2Gtt92xpWATsK\nVjNVW3l31JP0klgdMefGLagaYSR5CILYFslVNqpdbYU96217EQt8xr8uFdtHokDl\nnUhItT5DPuABt6up1oO8SRkS6cwuPLsi2Bf+g9zF7vBfGQWPVIDqPxvn5LQd/s1q\nMc4PgzsCAwEAAaOBjjCBizAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB\nBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJLXCBQic8rN\n7oCyqBTzqxaEZe81MC0GA1UdEQQmMCSCDmNsb3VkZmxhcmUuY29tghJ3d3cuY2xv\ndWRmbGFyZS5jb20wDQYJKoZIhvcNAQELBQADggEBAIShzs8P7chCw9sRe98LogpD\nfK7+yo/4yX0Qh9rwDFUy+UjqZxgseKLpDIKO0062900KFZ+6idf3xJAKMhe7JyU1\nwgTGH5SZnDhIUrbJuouQTIfijt5QC4cjFAr2I/Oii3X3XWHnCQrzMCFobf6ZkDlf\nKgcN4Posk7J6/pwlQfHWE8yG8yNFNJGaPivdnaKNsumqDzqOazYF9an/wuBVDMZM\nIUJ0cQ4/s7aZvMnjxgwf6Ovd/6gesuHYlYXcFN5pv2xyalzu8kMp2qsjpe9KyH/N\nrBYEV0pza+6Un7Mp+tWtZkrCpWVdmeDKQsYsIixRYZG7JIiEpKHQg/SFfMnkRP4=\n-----END CERTIFICATE-----\n","csr":"-----BEGIN CERTIFICATE REQUEST-----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\ncB4guLh6R69w5GhaS/I6prcLqRrxJfKmutWxU3pslOGHzxiHjYg=\n-----END CERTIFICATE REQUEST-----\n","key":"-----BEGIN RSA PRIVATE KEY-----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\nysuvujOSE+AkLkiTkkSUIZgOWO7xSNegjq1W3uhVRP9hJ7qoPy27\n-----END RSA PRIVATE KEY-----\n"} ---- PASS: TestSelfSignMain (0.13s) -=== RUN TestBadSelfSignMain ---- PASS: TestBadSelfSignMain (0.00s) -PASS -ok github.com/cloudflare/cfssl/cli/selfsign 0.140s -=== RUN TestServe -2026/12/12 12:13:05 [WARNING] endpoint 'authsign' is disabled: signer not initialized -2026/12/12 12:13:05 [INFO] bundler API ready -2026/12/12 12:13:05 [INFO] endpoint '/api/v1/cfssl/bundle' is enabled -2026/12/12 12:13:05 [INFO] endpoint '/api/v1/cfssl/health' is enabled -2026/12/12 12:13:05 [WARNING] endpoint 'sign' is disabled: signer not initialized -2026/12/12 12:13:05 [WARNING] endpoint 'info' is disabled: signer not initialized -2026/12/12 12:13:05 [WARNING] endpoint 'gencrl' is disabled: signer not initialized -2026/12/12 12:13:05 [INFO] setting up key / CSR generator -2026/12/12 12:13:05 [INFO] endpoint '/api/v1/cfssl/newkey' is enabled -2026/12/12 12:13:05 [WARNING] endpoint 'ocspsign' is disabled: signer not initialized -2026/12/12 12:13:05 [INFO] endpoint '/' is enabled -2026/12/12 12:13:05 [WARNING] endpoint 'crl' is disabled: signer not initialized -2026/12/12 12:13:05 [INFO] endpoint '/api/v1/cfssl/init_ca' is enabled -2026/12/12 12:13:05 [INFO] endpoint '/api/v1/cfssl/scan' is enabled -2026/12/12 12:13:05 [INFO] endpoint '/api/v1/cfssl/scaninfo' is enabled -2026/12/12 12:13:05 [INFO] endpoint '/api/v1/cfssl/certadd' is enabled -2026/12/12 12:13:05 [WARNING] endpoint 'newcert' is disabled: signer not initialized -2026/12/12 12:13:05 [INFO] endpoint '/api/v1/cfssl/certinfo' is enabled -2026/12/12 12:13:05 [WARNING] endpoint 'revoke' is disabled: cert db not configured (missing -db-config) -2026/12/12 12:13:05 [INFO] Handler set up complete. -2026/12/12 12:13:05 [WARNING] no host given -2026/12/12 12:13:05 [INFO] 127.0.0.1:39222 - "GET /api/v1/cfssl/scan" 400 -2026/12/12 12:13:05 [INFO] 127.0.0.1:39232 - "GET /api/v1/cfssl/certadd" 405 -2026/12/12 12:13:05 [INFO] setting up scaninfo handler -2026/12/12 12:13:05 [INFO] 127.0.0.1:39278 - "GET /api/v1/cfssl/scaninfo" 200 -2026/12/12 12:13:05 [INFO] 127.0.0.1:39282 - "GET /api/v1/cfssl/certinfo" 405 -2026/12/12 12:13:05 [INFO] 127.0.0.1:39292 - "GET /api/v1/cfssl/bundle" 405 -2026/12/12 12:13:05 [INFO] 127.0.0.1:39342 - "GET /api/v1/cfssl/newkey" 405 -2026/12/12 12:13:05 [INFO] 127.0.0.1:39348 - "GET /api/v1/cfssl/init_ca" 405 -2026/12/12 12:13:05 [INFO] 127.0.0.1:39368 - "GET /api/v1/cfssl/health" 200 ---- PASS: TestServe (0.02s) -PASS -ok github.com/cloudflare/cfssl/cli/serve 0.034s -=== RUN TestSignFromConfig ---- PASS: TestSignFromConfig (0.00s) -=== RUN TestSignerMain -2026/12/12 12:13:05 [INFO] signed certificate with serial number 102143078451856583045209386641212359401806752544 -{"cert":"-----BEGIN CERTIFICATE-----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\nj1QI6GoYoqL1h7tDx4QQRoX3YCCGa83kbgzGiBI/qIFm8c3j\n-----END CERTIFICATE-----\n","csr":"-----BEGIN CERTIFICATE REQUEST-----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\nBUo2gGkLUAs=\n-----END CERTIFICATE REQUEST-----\n"} ---- PASS: TestSignerMain (0.00s) -=== RUN TestBadSigner -2026/12/12 12:13:05 [ERROR] need CA certificate (provide one with -ca) -2026/12/12 12:13:05 [ERROR] need CA key (provide one with -ca-key) ---- PASS: TestBadSigner (0.00s) -=== RUN TestSignerWithDB -2026/12/12 12:13:05 [INFO] signed certificate with serial number 91044153006284353154651330728272025766531569724 -{"cert":"-----BEGIN CERTIFICATE-----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\n189PDYvuBlZ78GVwuu3tzeYb6phZpaOyki3495rSdGmgCIGF\n-----END CERTIFICATE-----\n","csr":"-----BEGIN CERTIFICATE REQUEST-----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\nBUo2gGkLUAs=\n-----END CERTIFICATE REQUEST-----\n"} ---- PASS: TestSignerWithDB (0.03s) -PASS -ok github.com/cloudflare/cfssl/cli/sign 0.045s -=== RUN TestVersionMain -Version: dev -Runtime: go1.24.9 ---- PASS: TestVersionMain (0.00s) -PASS -ok github.com/cloudflare/cfssl/cli/version 0.012s -testing: warning: no tests to run -PASS -ok github.com/cloudflare/cfssl/cmd/cfssl 0.012s [no tests to run] -? github.com/cloudflare/cfssl/cmd/cfssl-bundle [no test files] -? github.com/cloudflare/cfssl/cmd/cfssl-certinfo [no test files] -? github.com/cloudflare/cfssl/cmd/cfssl-newkey [no test files] -? github.com/cloudflare/cfssl/cmd/cfssl-scan [no test files] -=== RUN TestReadFile ---- PASS: TestReadFile (0.00s) -PASS -ok github.com/cloudflare/cfssl/cmd/cfssljson 0.013s -testing: warning: no tests to run -PASS -ok github.com/cloudflare/cfssl/cmd/mkbundle 0.005s [no tests to run] -? github.com/cloudflare/cfssl/cmd/multirootca [no test files] -=== RUN TestInvalidProfile ---- PASS: TestInvalidProfile (0.00s) -=== RUN TestRemoteProfiles ---- PASS: TestRemoteProfiles (0.00s) -=== RUN TestInvalidDefault ---- PASS: TestInvalidDefault (0.00s) -=== RUN TestValidConfig -{"signing":{"profiles":{"valid":{"usages":["digital signature"],"issuer_urls":null,"ocsp_url":"","crl_url":"","ca_constraint":{"is_ca":false,"max_path_len":0,"max_path_len_zero":false},"ocsp_no_check":false,"expiry":"","backdate":"","auth_key":"","copy_extensions":false,"prev_auth_key":"","remote":"","not_before":"0001-01-01T00:00:00Z","not_after":"0001-01-01T00:00:00Z","name_whitelist":"","auth_remote":{"remote":"","auth_key":""},"ct_log_servers":null,"allowed_extensions":null,"cert_store":"","lint_error_level":"reserved","ignored_lints":null,"ignored_lint_sources":null,"Policies":null,"Expiry":60000000000,"Backdate":0,"Provider":null,"PrevProvider":null,"RemoteProvider":null,"RemoteServer":"","RemoteCAs":null,"ClientCert":null,"CSRWhitelist":null,"NameWhitelist":null,"ExtensionWhitelist":null,"ClientProvidesSerialNumbers":false,"LintRegistry":null},"valid-lint":{"usages":["digital signature"],"issuer_urls":null,"ocsp_url":"","crl_url":"","ca_constraint":{"is_ca":false,"max_path_len":0,"max_path_len_zero":false},"ocsp_no_check":false,"expiry":"","backdate":"","auth_key":"","copy_extensions":false,"prev_auth_key":"","remote":"","not_before":"0001-01-01T00:00:00Z","not_after":"0001-01-01T00:00:00Z","name_whitelist":"","auth_remote":{"remote":"","auth_key":""},"ct_log_servers":null,"allowed_extensions":null,"cert_store":"","lint_error_level":"warn","ignored_lints":["n_subject_common_name_included"],"ignored_lint_sources":["ETSI-ESI"],"Policies":null,"Expiry":60000000000,"Backdate":0,"Provider":null,"PrevProvider":null,"RemoteProvider":null,"RemoteServer":"","RemoteCAs":null,"ClientCert":null,"CSRWhitelist":null,"NameWhitelist":null,"ExtensionWhitelist":null,"ClientProvidesSerialNumbers":false,"LintRegistry":null}},"default":{"usages":["digital signature"],"issuer_urls":null,"ocsp_url":"","crl_url":"","ca_constraint":{"is_ca":false,"max_path_len":0,"max_path_len_zero":false},"ocsp_no_check":false,"expiry":"","backdate":"","auth_key":"","copy_extensions":false,"prev_auth_key":"","remote":"","not_before":"0001-01-01T00:00:00Z","not_after":"0001-01-01T00:00:00Z","name_whitelist":"","auth_remote":{"remote":"","auth_key":""},"ct_log_servers":null,"allowed_extensions":null,"cert_store":"","lint_error_level":"reserved","ignored_lints":null,"ignored_lint_sources":null,"Policies":null,"Expiry":60000000000,"Backdate":0,"Provider":null,"PrevProvider":null,"RemoteProvider":null,"RemoteServer":"","RemoteCAs":null,"ClientCert":null,"CSRWhitelist":null,"NameWhitelist":null,"ExtensionWhitelist":null,"ClientProvidesSerialNumbers":false,"LintRegistry":null}},"ocsp":null}--- PASS: TestValidConfig (0.00s) -=== RUN TestDefaultConfig ---- PASS: TestDefaultConfig (0.00s) -=== RUN TestParse ---- PASS: TestParse (0.00s) -=== RUN TestPopulateLintRegistry ---- PASS: TestPopulateLintRegistry (0.00s) -=== RUN TestLoadFile -2026/12/12 12:13:05 [WARNING] Profiles[CA] points to a remote signer: The configuration value by "usages", "issuer_urls", "ocsp_url", "crl_url", "ca_constraint", "expiry", "backdate", "not_before", "not_after", "cert_store" and "ct_log_servers" are skipped ---- PASS: TestLoadFile (0.00s) -=== RUN TestLoadInvalidConfigFile ---- PASS: TestLoadInvalidConfigFile (0.00s) -=== RUN TestNeedLocalSigner ---- PASS: TestNeedLocalSigner (0.00s) -=== RUN TestOverrideRemotes ---- PASS: TestOverrideRemotes (0.00s) -=== RUN TestAuthRemoteConfig ---- PASS: TestAuthRemoteConfig (0.00s) -=== RUN TestDuplicateRemoteConfig -2026/12/12 12:13:05 [ERROR] profile has both a remote and an auth remote specified ---- PASS: TestDuplicateRemoteConfig (0.00s) -=== RUN TestBadAuthRemoteConfig ---- PASS: TestBadAuthRemoteConfig (0.00s) -=== RUN TestValidCAConstraint ---- PASS: TestValidCAConstraint (0.00s) -=== RUN TestWantCopyExtension ---- PASS: TestWantCopyExtension (0.00s) -=== RUN TestDontWantCopyExtension ---- PASS: TestDontWantCopyExtension (0.00s) -PASS -ok github.com/cloudflare/cfssl/config 0.017s -=== RUN TestNewCRLFromFile ---- PASS: TestNewCRLFromFile (0.00s) -=== RUN TestNewCRLFromFileWithoutRevocations ---- PASS: TestNewCRLFromFileWithoutRevocations (0.00s) -PASS -ok github.com/cloudflare/cfssl/crl 0.013s -? github.com/cloudflare/cfssl/crypto [no test files] -? github.com/cloudflare/cfssl/crypto/pkcs7 [no test files] -=== RUN TestNew ---- PASS: TestNew (0.00s) -=== RUN TestKeyRequest ---- PASS: TestKeyRequest (0.00s) -=== RUN TestPKIXName ---- PASS: TestPKIXName (0.00s) -=== RUN TestParseRequest -2026/12/12 12:13:05 [INFO] received CSR -2026/12/12 12:13:05 [INFO] generating key: ecdsa-256 -2026/12/12 12:13:05 [INFO] encoded CSR ---- PASS: TestParseRequest (0.00s) -=== RUN TestParseRequestCA -2026/12/12 12:13:05 [INFO] received CSR -2026/12/12 12:13:05 [INFO] generating key: ecdsa-256 -2026/12/12 12:13:05 [INFO] encoded CSR ---- PASS: TestParseRequestCA (0.00s) -=== RUN TestParseRequestCANoPathlen -2026/12/12 12:13:05 [INFO] received CSR -2026/12/12 12:13:05 [INFO] generating key: ecdsa-256 -2026/12/12 12:13:05 [INFO] encoded CSR ---- PASS: TestParseRequestCANoPathlen (0.00s) -=== RUN TestECGeneration ---- PASS: TestECGeneration (0.02s) -=== RUN TestED25519Generation ---- PASS: TestED25519Generation (0.00s) -=== RUN TestRSAKeyGeneration ---- PASS: TestRSAKeyGeneration (6.52s) -=== RUN TestBadKeyRequest ---- PASS: TestBadKeyRequest (0.00s) -=== RUN TestDefaultKeyRequest -2026/12/12 12:13:12 [INFO] received CSR -2026/12/12 12:13:12 [INFO] generating key: ecdsa-256 -2026/12/12 12:13:12 [INFO] encoded CSR ---- PASS: TestDefaultKeyRequest (0.00s) -=== RUN TestRSACertRequest -2026/12/12 12:13:12 [INFO] received CSR -2026/12/12 12:13:12 [INFO] generating key: rsa-2048 -2026/12/12 12:13:12 [INFO] encoded CSR ---- PASS: TestRSACertRequest (0.18s) -=== RUN TestED25519CertRequest -2026/12/12 12:13:12 [INFO] received CSR -2026/12/12 12:13:12 [INFO] generating key: ed25519-0 -2026/12/12 12:13:12 [INFO] encoded CSR ---- PASS: TestED25519CertRequest (0.00s) -=== RUN TestBadCertRequest -2026/12/12 12:13:12 [INFO] received CSR -2026/12/12 12:13:12 [INFO] generating key: yolo-crypto-2048 ---- PASS: TestBadCertRequest (0.00s) -=== RUN TestGenerator -2026/12/12 12:13:12 [INFO] generate received request -2026/12/12 12:13:12 [INFO] received CSR -2026/12/12 12:13:12 [INFO] generating key: rsa-2048 -2026/12/12 12:13:12 [INFO] encoded CSR ---- PASS: TestGenerator (0.24s) -=== RUN TestBadGenerator -2026/12/12 12:13:12 [INFO] generate received request -2026/12/12 12:13:12 [WARNING] invalid request: Missing parameter "CN" ---- PASS: TestBadGenerator (0.00s) -=== RUN TestWeakCSR -2026/12/12 12:13:12 [INFO] generate received request -2026/12/12 12:13:12 [INFO] received CSR -2026/12/12 12:13:12 [INFO] generating key: rsa-1024 ---- PASS: TestWeakCSR (0.00s) -=== RUN TestIsNameEmpty ---- PASS: TestIsNameEmpty (0.00s) -=== RUN TestGenerate -2026/12/12 12:13:12 [INFO] encoded CSR ---- PASS: TestGenerate (0.00s) -=== RUN TestGenerateASN1 ---- PASS: TestGenerateASN1 (0.00s) -=== RUN TestReGenerate -2026/12/12 12:13:12 [INFO] received CSR -2026/12/12 12:13:12 [INFO] generating key: ecdsa-256 -2026/12/12 12:13:12 [INFO] encoded CSR -2026/12/12 12:13:12 [INFO] encoded CSR ---- PASS: TestReGenerate (0.00s) -=== RUN TestBadReGenerate -2026/12/12 12:13:12 [INFO] received CSR -2026/12/12 12:13:12 [INFO] generating key: ecdsa-256 -2026/12/12 12:13:12 [INFO] encoded CSR -2026/12/12 12:13:12 [INFO] encoded CSR ---- PASS: TestBadReGenerate (0.00s) -=== RUN TestExtractCertificateRequest ---- PASS: TestExtractCertificateRequest (0.00s) -=== RUN TestDelegationCSR -2026/12/12 12:13:12 [INFO] received CSR -2026/12/12 12:13:12 [INFO] generating key: ecdsa-256 -2026/12/12 12:13:12 [INFO] encoded CSR ---- PASS: TestDelegationCSR (0.00s) -PASS -ok github.com/cloudflare/cfssl/csr 6.972s -=== RUN TestNew ---- PASS: TestNew (0.00s) -=== RUN TestWrap ---- PASS: TestWrap (0.00s) -=== RUN TestMarshal ---- PASS: TestMarshal (0.00s) -=== RUN TestErrorString ---- PASS: TestErrorString (0.00s) -=== RUN TestHTTP ---- PASS: TestHTTP (0.00s) -=== RUN TestHTTPErrorString ---- PASS: TestHTTPErrorString (0.00s) -PASS -ok github.com/cloudflare/cfssl/errors 0.005s -=== RUN TestParseCertificatesDER ---- PASS: TestParseCertificatesDER (0.02s) -=== RUN TestKeyLength ---- PASS: TestKeyLength (0.01s) -=== RUN TestExpiryTime ---- PASS: TestExpiryTime (0.00s) -=== RUN TestMonthsValid ---- PASS: TestMonthsValid (0.00s) -=== RUN TestHasValidExpiry ---- PASS: TestHasValidExpiry (0.00s) -=== RUN TestHashAlgoString ---- PASS: TestHashAlgoString (0.00s) -=== RUN TestSignatureString ---- PASS: TestSignatureString (0.00s) -=== RUN TestParseCertificatePEM ---- PASS: TestParseCertificatePEM (0.00s) -=== RUN TestParseCertificatesPEM ---- PASS: TestParseCertificatesPEM (0.00s) -=== RUN TestSelfSignedCertificatePEM ---- PASS: TestSelfSignedCertificatePEM (0.00s) -=== RUN TestParsePrivateKeyPEM ---- PASS: TestParsePrivateKeyPEM (0.01s) -=== RUN TestParseCSRPEM ---- PASS: TestParseCSRPEM (0.00s) -=== RUN TestParseCSRPEMMore ---- PASS: TestParseCSRPEMMore (0.00s) -=== RUN TestParseOldCSR ---- PASS: TestParseOldCSR (0.00s) -=== RUN TestClientCertParams -2026/12/12 12:13:05 [CRITICAL] Unable to read client certificate from file: testdata/cert.pem or key from file: testdata/priv_rsa_key.pem ---- PASS: TestClientCertParams (0.00s) -=== RUN TestLoadPEMCertPool ---- PASS: TestLoadPEMCertPool (0.00s) -=== RUN TestDeserializeSCTList ---- PASS: TestDeserializeSCTList (0.00s) -=== RUN TestSCTListFromOCSPResponse ---- PASS: TestSCTListFromOCSPResponse (0.00s) -PASS -ok github.com/cloudflare/cfssl/helpers 0.042s -=== RUN TestParseMarshalEd25519PublicKey ---- PASS: TestParseMarshalEd25519PublicKey (0.00s) -=== RUN TestParseMarshalEd25519PrivateKey ---- PASS: TestParseMarshalEd25519PrivateKey (0.00s) -=== RUN TestKeyPair ---- PASS: TestKeyPair (0.00s) -PASS -ok github.com/cloudflare/cfssl/helpers/derhelpers 0.009s -=== RUN TestStartCFSSLServer - testing_helpers_test.go:75: exec: "cfssl": executable file not found in $PATH - CLI output: ---- FAIL: TestStartCFSSLServer (0.00s) -=== RUN TestCreateCertificateChain - testing_helpers_test.go:149: exec: "cfssl": executable file not found in $PATH - CLI output: ---- FAIL: TestCreateCertificateChain (0.00s) -=== RUN TestCreateSelfSignedCert - testing_helpers_test.go:285: exec: "cfssl": executable file not found in $PATH - CLI output: ---- FAIL: TestCreateSelfSignedCert (0.00s) -FAIL -FAIL github.com/cloudflare/cfssl/helpers/testsuite 0.008s -? github.com/cloudflare/cfssl/info [no test files] -=== RUN TestInitCA -2026/12/12 12:13:06 [INFO] generate received request -2026/12/12 12:13:06 [INFO] received CSR -2026/12/12 12:13:06 [INFO] generating key: rsa-2048 -2026/12/12 12:13:06 [INFO] encoded CSR -2026/12/12 12:13:06 [INFO] signed certificate with serial number 727227312709393828521631934486358742750834830701 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 248754086200838486762366349902493169635151677970 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 716621317909967016860379010426991375936574518566 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 500379304660501453338229705427828775240004102425 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 419860996087157134107544884506862673315046433471 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 176357202658627962088501671795383964187374466349 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 694997454247579763725884116765967914827502962098 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 386909931140251719832305556307489642371841034960 -2026/12/12 12:13:06 [INFO] generate received request -2026/12/12 12:13:06 [INFO] received CSR -2026/12/12 12:13:06 [INFO] generating key: rsa-2048 -2026/12/12 12:13:06 [INFO] encoded CSR -2026/12/12 12:13:06 [INFO] signed certificate with serial number 310185563502498829413780970377008470582444734698 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 299627444147215200955101297934960902717451090882 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 246405105077297122430955658133913027423862139720 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 711589018534406714203049558811546037668179404185 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 577818683409571192282612584079907608761018357420 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 363885998131950140731721202797895497459401327923 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 550794279243965899499526939955201442800283285163 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 651605294124260347338945420565153882381270413511 -2026/12/12 12:13:06 [INFO] generate received request -2026/12/12 12:13:06 [INFO] received CSR -2026/12/12 12:13:06 [INFO] generating key: rsa-2048 -2026/12/12 12:13:10 [INFO] encoded CSR -2026/12/12 12:13:10 [INFO] signed certificate with serial number 644870278157414632557839407779680916863768878627 -2026/12/12 12:13:10 [INFO] signed certificate with serial number 76415868977290568843322490973128658685947375832 -2026/12/12 12:13:10 [INFO] signed certificate with serial number 543496710580100029466699809782571673527590755992 -2026/12/12 12:13:10 [INFO] signed certificate with serial number 140941180730017409804609371652988219628764475326 -2026/12/12 12:13:10 [INFO] signed certificate with serial number 383031861013188521660870340947058323475305149924 -2026/12/12 12:13:10 [INFO] signed certificate with serial number 61999680718424178817544216394548531001640913595 -2026/12/12 12:13:10 [INFO] signed certificate with serial number 174831623474640655945282563948445980268432153932 -2026/12/12 12:13:10 [INFO] signed certificate with serial number 679804162612033608590638783342484333515397853851 -2026/12/12 12:13:10 [INFO] generate received request -2026/12/12 12:13:10 [INFO] received CSR -2026/12/12 12:13:10 [INFO] generating key: rsa-2048 -2026/12/12 12:13:10 [INFO] encoded CSR -2026/12/12 12:13:10 [INFO] signed certificate with serial number 678924369213572070684096995859108049463479376330 -2026/12/12 12:13:10 [INFO] signed certificate with serial number 284842722306701744585569099207839665920830867522 -2026/12/12 12:13:10 [INFO] signed certificate with serial number 4170926713565995902033035277488371924866048264 -2026/12/12 12:13:10 [INFO] signed certificate with serial number 529403555965118047747486691233867720827048177857 -2026/12/12 12:13:10 [INFO] signed certificate with serial number 45756498963188820679627140710498070498328686921 -2026/12/12 12:13:10 [INFO] signed certificate with serial number 264028111970802922480773937873214861920936678559 -2026/12/12 12:13:10 [INFO] signed certificate with serial number 489907433842507605273456265522853561177587195588 -2026/12/12 12:13:10 [INFO] signed certificate with serial number 42339039110731942755766356821289026242210734317 -2026/12/12 12:13:10 [INFO] ignore invalid 'pathlenzero' value -2026/12/12 12:13:10 [INFO] generate received request -2026/12/12 12:13:10 [INFO] received CSR -2026/12/12 12:13:10 [INFO] generating key: rsa-2048 -2026/12/12 12:13:11 [INFO] encoded CSR -2026/12/12 12:13:11 [INFO] signed certificate with serial number 406569848243841149068707699127951798605170544021 -2026/12/12 12:13:11 [INFO] signed certificate with serial number 318989976126957757405716444811028960782484844931 -2026/12/12 12:13:11 [INFO] signed certificate with serial number 203923559569156858168527354810363569782378338176 -2026/12/12 12:13:11 [INFO] signed certificate with serial number 94140033932382782051517312536908925437573644430 -2026/12/12 12:13:11 [INFO] signed certificate with serial number 142777805285054805302034253682957033012614915704 -2026/12/12 12:13:11 [INFO] signed certificate with serial number 286242210369260707253953945954163826686612811276 -2026/12/12 12:13:11 [INFO] signed certificate with serial number 424940885285381416084620329723287660822257589188 -2026/12/12 12:13:11 [INFO] signed certificate with serial number 50280185620265869018346293363497674683446219575 -2026/12/12 12:13:11 [INFO] generate received request -2026/12/12 12:13:11 [INFO] received CSR -2026/12/12 12:13:11 [INFO] generating key: rsa-3072 -2026/12/12 12:13:12 [INFO] encoded CSR -2026/12/12 12:13:12 [INFO] signed certificate with serial number 214367665685134378508590322195027993852321939452 -2026/12/12 12:13:12 [INFO] signed certificate with serial number 345781342388121821362582856521477542174016192092 -2026/12/12 12:13:12 [INFO] signed certificate with serial number 173586467254202002173832699259692325561141153587 -2026/12/12 12:13:12 [INFO] signed certificate with serial number 106410706791215652663876637757417905969097579567 -2026/12/12 12:13:12 [INFO] signed certificate with serial number 481745054265954228378897886463403627064699805294 -2026/12/12 12:13:12 [INFO] signed certificate with serial number 683158018559810063448323370888636642109762607375 -2026/12/12 12:13:12 [INFO] signed certificate with serial number 552463104684814595929898053317016322819961078537 -2026/12/12 12:13:12 [INFO] signed certificate with serial number 98538049609909951179601281387461305082984499066 -2026/12/12 12:13:12 [INFO] generate received request -2026/12/12 12:13:12 [INFO] received CSR -2026/12/12 12:13:12 [INFO] generating key: rsa-3072 -2026/12/12 12:13:14 [INFO] encoded CSR -2026/12/12 12:13:14 [INFO] signed certificate with serial number 667420643295107041414288182829636765343844020219 -2026/12/12 12:13:14 [INFO] signed certificate with serial number 532294273640956538581739601760990073786418662219 -2026/12/12 12:13:14 [INFO] signed certificate with serial number 410445252031919365841908739211014376628898553767 -2026/12/12 12:13:14 [INFO] signed certificate with serial number 314399557405988092210126981255185592997946592535 -2026/12/12 12:13:14 [INFO] signed certificate with serial number 389116863988256656444104049479927754239817534410 -2026/12/12 12:13:14 [INFO] signed certificate with serial number 710379273832270421541229858676471463110752076303 -2026/12/12 12:13:14 [INFO] signed certificate with serial number 452576778884642668880963087009044211273143545475 -2026/12/12 12:13:14 [INFO] signed certificate with serial number 258636425865541182422906904392121966314635317668 -2026/12/12 12:13:14 [INFO] generate received request -2026/12/12 12:13:14 [INFO] received CSR -2026/12/12 12:13:14 [INFO] generating key: rsa-3072 -2026/12/12 12:13:15 [INFO] encoded CSR -2026/12/12 12:13:15 [INFO] signed certificate with serial number 384416467648540975303108486381620399658596173496 -2026/12/12 12:13:15 [INFO] signed certificate with serial number 403599095080205459276003576162432288257024983537 -2026/12/12 12:13:15 [INFO] signed certificate with serial number 696929203002231349469534533785664675996825887132 -2026/12/12 12:13:15 [INFO] signed certificate with serial number 136410812683411034235670411477623599838260704204 -2026/12/12 12:13:15 [INFO] signed certificate with serial number 627604872993168441716716860175952772248096377349 -2026/12/12 12:13:15 [INFO] signed certificate with serial number 334567827319275315276526134257550381480259978834 -2026/12/12 12:13:15 [INFO] signed certificate with serial number 352245929250372813835419908297892622968184557926 -2026/12/12 12:13:15 [INFO] signed certificate with serial number 404675971552871471264038630847589370589911262628 -2026/12/12 12:13:15 [INFO] generate received request -2026/12/12 12:13:15 [INFO] received CSR -2026/12/12 12:13:15 [INFO] generating key: rsa-3072 -2026/12/12 12:13:16 [INFO] encoded CSR -2026/12/12 12:13:16 [INFO] signed certificate with serial number 463056563688259726718932958882171874660759966642 -2026/12/12 12:13:16 [INFO] signed certificate with serial number 95977986127744673370190341870114588037118619677 -2026/12/12 12:13:16 [INFO] signed certificate with serial number 9027256804447357940273104197118534894913018788 -2026/12/12 12:13:16 [INFO] signed certificate with serial number 635229967950986874732946249867793690981851357471 -2026/12/12 12:13:16 [INFO] signed certificate with serial number 387645873967121474695579952079455421134854422231 -2026/12/12 12:13:16 [INFO] signed certificate with serial number 376885811208815627333038710734406750710665908643 -2026/12/12 12:13:16 [INFO] signed certificate with serial number 699721469874028215852164721900195374176513987711 -2026/12/12 12:13:16 [INFO] signed certificate with serial number 206797727204479914766856410220482897152120789763 -2026/12/12 12:13:16 [INFO] ignore invalid 'pathlenzero' value -2026/12/12 12:13:16 [INFO] generate received request -2026/12/12 12:13:16 [INFO] received CSR -2026/12/12 12:13:16 [INFO] generating key: rsa-3072 -2026/12/12 12:13:17 [INFO] encoded CSR -2026/12/12 12:13:17 [INFO] signed certificate with serial number 271011288738639043647692771981571449852054390182 -2026/12/12 12:13:17 [INFO] signed certificate with serial number 17641188908512941415890461475706495637590648550 -2026/12/12 12:13:17 [INFO] signed certificate with serial number 128641984529493652960325224620118888731472907120 -2026/12/12 12:13:17 [INFO] signed certificate with serial number 307430158864743498292409055291636444155017734240 -2026/12/12 12:13:17 [INFO] signed certificate with serial number 36551442089199900535939086393418498783964382291 -2026/12/12 12:13:17 [INFO] signed certificate with serial number 262304914933692313550748709469318822496989190417 -2026/12/12 12:13:17 [INFO] signed certificate with serial number 718776868146937290953225350298948408371282542995 -2026/12/12 12:13:17 [INFO] signed certificate with serial number 613253100801778709776367072588765193556621912510 -2026/12/12 12:13:17 [INFO] generate received request -2026/12/12 12:13:17 [INFO] received CSR -2026/12/12 12:13:17 [INFO] generating key: rsa-4096 -2026/12/12 12:13:19 [INFO] encoded CSR -2026/12/12 12:13:19 [INFO] signed certificate with serial number 425306819274933601928456923767542212483463500417 -2026/12/12 12:13:19 [INFO] signed certificate with serial number 661035480028501252977240141279388630639857599448 -2026/12/12 12:13:19 [INFO] signed certificate with serial number 290353237333282629607320589957300969042885327261 -2026/12/12 12:13:19 [INFO] signed certificate with serial number 461981416362470225796048323091414163014209063881 -2026/12/12 12:13:19 [INFO] signed certificate with serial number 437328428922683255781587207433126533238316278473 -2026/12/12 12:13:19 [INFO] signed certificate with serial number 634942508212645311657920435681234504542716189167 -2026/12/12 12:13:19 [INFO] signed certificate with serial number 375351116766048324380621246235552954387950979055 -2026/12/12 12:13:19 [INFO] signed certificate with serial number 176304638103354756758878208815031606257727526380 -2026/12/12 12:13:19 [INFO] generate received request -2026/12/12 12:13:19 [INFO] received CSR -2026/12/12 12:13:19 [INFO] generating key: rsa-4096 -2026/12/12 12:13:28 [INFO] encoded CSR -2026/12/12 12:13:28 [INFO] signed certificate with serial number 217391902244039237706269464551295512358765450204 -2026/12/12 12:13:28 [INFO] signed certificate with serial number 318093537147945059752703244761099903067155263841 -2026/12/12 12:13:28 [INFO] signed certificate with serial number 151205130677521982250317482866805877755528335011 -2026/12/12 12:13:28 [INFO] signed certificate with serial number 300808259470361131879707422407852539380166448650 -2026/12/12 12:13:28 [INFO] signed certificate with serial number 723447190529930348558848807782929314232198027474 -2026/12/12 12:13:29 [INFO] signed certificate with serial number 337459360330738744373352604897173726809993009231 -2026/12/12 12:13:29 [INFO] signed certificate with serial number 261405547004506462841364531334555756379000616231 -2026/12/12 12:13:29 [INFO] signed certificate with serial number 382372379417559977689326954820844335315922384076 -2026/12/12 12:13:29 [INFO] generate received request -2026/12/12 12:13:29 [INFO] received CSR -2026/12/12 12:13:29 [INFO] generating key: rsa-4096 -2026/12/12 12:13:32 [INFO] encoded CSR -2026/12/12 12:13:32 [INFO] signed certificate with serial number 726466152772123220942508366974379307992761672645 -2026/12/12 12:13:32 [INFO] signed certificate with serial number 54630762030491004830367528229512872661679255176 -2026/12/12 12:13:32 [INFO] signed certificate with serial number 256428332923791380979967014398434939959486697000 -2026/12/12 12:13:32 [INFO] signed certificate with serial number 129457010738905217527151909274453763662318343474 -2026/12/12 12:13:32 [INFO] signed certificate with serial number 401508218483803903704096612194235452659585919081 -2026/12/12 12:13:32 [INFO] signed certificate with serial number 177278430810676178968508084403330477044092919222 -2026/12/12 12:13:32 [INFO] signed certificate with serial number 161769851153562857136233883492021345724234721996 -2026/12/12 12:13:32 [INFO] signed certificate with serial number 346922328519490500116899856207179759375408452834 -2026/12/12 12:13:32 [INFO] generate received request -2026/12/12 12:13:32 [INFO] received CSR -2026/12/12 12:13:32 [INFO] generating key: rsa-4096 -2026/12/12 12:13:38 [INFO] encoded CSR -2026/12/12 12:13:38 [INFO] signed certificate with serial number 300311000734178486617880463992851049186656477202 -2026/12/12 12:13:38 [INFO] signed certificate with serial number 83091081152407089870953168582428217678992320804 -2026/12/12 12:13:38 [INFO] signed certificate with serial number 416154528364322977621644568842771032259544366800 -2026/12/12 12:13:38 [INFO] signed certificate with serial number 78715613359748707394609384996630382733746750793 -2026/12/12 12:13:38 [INFO] signed certificate with serial number 219470809261382593202789431968773019844406109756 -2026/12/12 12:13:38 [INFO] signed certificate with serial number 463732697062574754713053865736046531592761967853 -2026/12/12 12:13:38 [INFO] signed certificate with serial number 526046809283897113396479328925971329967311256197 -2026/12/12 12:13:38 [INFO] signed certificate with serial number 117189849354333622533072329608206669112515296464 -2026/12/12 12:13:38 [INFO] ignore invalid 'pathlenzero' value -2026/12/12 12:13:38 [INFO] generate received request -2026/12/12 12:13:38 [INFO] received CSR -2026/12/12 12:13:38 [INFO] generating key: rsa-4096 -2026/12/12 12:13:39 [INFO] encoded CSR -2026/12/12 12:13:39 [INFO] signed certificate with serial number 556587387531712798520830654347598907673383585684 -2026/12/12 12:13:39 [INFO] signed certificate with serial number 536828184391609933745877174549956972239097162245 -2026/12/12 12:13:39 [INFO] signed certificate with serial number 592721071972706800141104777875525747564554774735 -2026/12/12 12:13:39 [INFO] signed certificate with serial number 353670793731594941110724746209318924356453806921 -2026/12/12 12:13:39 [INFO] signed certificate with serial number 31894828839070276959927189555616858385124032026 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 246313969108981385413644174666971572265083906702 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 185430729962589283737226336280469950567756720831 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 127763118624376005784350551188858239417028004615 -2026/12/12 12:13:40 [INFO] generate received request -2026/12/12 12:13:40 [INFO] received CSR -2026/12/12 12:13:40 [INFO] generating key: ecdsa-256 -2026/12/12 12:13:40 [INFO] encoded CSR -2026/12/12 12:13:40 [INFO] signed certificate with serial number 644498091044109674487667158962249912041853209505 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 592637093835338314355464010787052442490811145056 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 445425006615420537384660472210442181902536581160 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 720477251645791553750492126439414909103320636226 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 572322582766347417014037209150564550143898069725 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 570399783037168832203111995027757261706268028566 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 384347305531061912599250447197269643333468219186 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 487284870871967585407077639358652552555678707235 -2026/12/12 12:13:40 [INFO] generate received request -2026/12/12 12:13:40 [INFO] received CSR -2026/12/12 12:13:40 [INFO] generating key: ecdsa-256 -2026/12/12 12:13:40 [INFO] encoded CSR -2026/12/12 12:13:40 [INFO] signed certificate with serial number 489037164856170441780301657635078478836834153552 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 115216723171032937564227891397774718672342686949 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 84155514202932828706062011921737453408520490551 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 397076754165559966229191289247624115597838445165 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 99561204787887746531598855588908591200034220566 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 688002438607393708486951976008467733777361665502 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 95281638709293786437001563856479311611040024660 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 213120672651131676746389870625746900603662244883 -2026/12/12 12:13:40 [INFO] generate received request -2026/12/12 12:13:40 [INFO] received CSR -2026/12/12 12:13:40 [INFO] generating key: ecdsa-256 -2026/12/12 12:13:40 [INFO] encoded CSR -2026/12/12 12:13:40 [INFO] signed certificate with serial number 521131402765185835830822913395818419682435529757 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 229130901394202561537156638667465996457200948882 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 206890846649869229595323098300271725180761744714 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 227468601651281532825257710647998514017478662546 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 714367237476005072180040345143270360774406959132 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 593583967631025963204559184694329499605829014386 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 609422287589726639097342504924684116583708790411 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 728545079018901852993908488433959489967893755717 -2026/12/12 12:13:40 [INFO] generate received request -2026/12/12 12:13:40 [INFO] received CSR -2026/12/12 12:13:40 [INFO] generating key: ecdsa-256 -2026/12/12 12:13:40 [INFO] encoded CSR -2026/12/12 12:13:40 [INFO] signed certificate with serial number 697345652060674194161058915122822008068866336616 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 324291554783776754196457511390446012011549367050 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 192000689482631429031187522822576080318049162849 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 588878440563682087489466333486795135743993603048 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 181466830178307663859285988217284084791489625217 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 565855050923886814513499497382595714639319719175 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 999934185611623421808265767609675383763381418 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 178268240223715860343687794156535501332268008011 -2026/12/12 12:13:40 [INFO] ignore invalid 'pathlenzero' value -2026/12/12 12:13:40 [INFO] generate received request -2026/12/12 12:13:40 [INFO] received CSR -2026/12/12 12:13:40 [INFO] generating key: ecdsa-256 -2026/12/12 12:13:40 [INFO] encoded CSR -2026/12/12 12:13:40 [INFO] signed certificate with serial number 117182350915205688263773285231787795248644325632 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 643360389620478688979393713365412134332091608556 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 269082741056650602678922685127152991253708259704 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 391626683772216758824916830262644162695199692390 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 453131658584205917486511180728594299140798479578 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 403217978023668810207418707479022524089408902221 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 673213169649298163321047957923864514556412811062 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 671718027463059871211075224540657881771872977450 -2026/12/12 12:13:40 [INFO] generate received request -2026/12/12 12:13:40 [INFO] received CSR -2026/12/12 12:13:40 [INFO] generating key: ecdsa-384 -2026/12/12 12:13:40 [INFO] encoded CSR -2026/12/12 12:13:40 [INFO] signed certificate with serial number 645053093894544927458556440811363759043308852750 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 354218480805878947703076764476017251708404867059 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 151359700423221914163826419824716714510870619466 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 341826013745298669042222451769933160152155461372 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 486721654186395946362515168010936775192890897891 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 30753169962897935076430939082461367095867490351 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 463873438556945534184744413781179596484361706010 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 616069390988512181564860542386127111053532363496 -2026/12/12 12:13:40 [INFO] generate received request -2026/12/12 12:13:40 [INFO] received CSR -2026/12/12 12:13:40 [INFO] generating key: ecdsa-384 -2026/12/12 12:13:40 [INFO] encoded CSR -2026/12/12 12:13:40 [INFO] signed certificate with serial number 69312418465365364043665528527508403162029632112 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 53534514141556136730607497207648089844146170244 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 260819035506590329739812886188111794825878539201 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 366937205738759183338227592451398706264202962170 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 429178567803555529791342308325844931909989235641 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 212720301005380518259162478498386958183288110756 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 606703095389987011691251358582406618162990443915 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 411056956065701073312818623520293873955897454580 -2026/12/12 12:13:40 [INFO] generate received request -2026/12/12 12:13:40 [INFO] received CSR -2026/12/12 12:13:40 [INFO] generating key: ecdsa-384 -2026/12/12 12:13:40 [INFO] encoded CSR -2026/12/12 12:13:40 [INFO] signed certificate with serial number 524691227940474638044552586816650470044936000439 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 411995303566722894778184687495767288435465956857 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 379515343696700607809674378992010062295935043052 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 614358894019919050541614067678386860605262180664 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 468150103837511435460441388668006489427945463568 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 539420231625197262039346901954497552846024682975 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 566517815036729054447112671692584297466742866573 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 234018674421103670281847267002940784261183674255 -2026/12/12 12:13:40 [INFO] generate received request -2026/12/12 12:13:40 [INFO] received CSR -2026/12/12 12:13:40 [INFO] generating key: ecdsa-384 -2026/12/12 12:13:40 [INFO] encoded CSR -2026/12/12 12:13:40 [INFO] signed certificate with serial number 74223948908033406066859981215093701217786796989 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 309037192288849693223745645886423006797185152395 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 713528991569009336989133212325752076367620005790 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 66299526704745772858682722250184957109332144058 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 37933480086558663449876140531818921131233263952 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 28121087898835907234724016348022276007400366124 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 608371768963494382478248880166835848318680800117 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 556641208365603479830535006837655352983440585734 -2026/12/12 12:13:40 [INFO] ignore invalid 'pathlenzero' value -2026/12/12 12:13:40 [INFO] generate received request -2026/12/12 12:13:40 [INFO] received CSR -2026/12/12 12:13:40 [INFO] generating key: ecdsa-384 -2026/12/12 12:13:40 [INFO] encoded CSR -2026/12/12 12:13:40 [INFO] signed certificate with serial number 532104586789337964383669535360457341484480972066 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 58308601126038046650696778215286385956446004505 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 261237856544999038479192482938043440302739640270 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 445582652444355624222699638758226000669133857606 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 689634286105452632677011668103114531460910632856 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 28777156128454868215498514345911963809380637853 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 487472223781515854359341185052779660867758580064 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 565120606323096824867067706927055230360821780088 -2026/12/12 12:13:40 [INFO] generate received request -2026/12/12 12:13:40 [INFO] received CSR -2026/12/12 12:13:40 [INFO] generating key: ecdsa-521 -2026/12/12 12:13:40 [INFO] encoded CSR -2026/12/12 12:13:40 [INFO] signed certificate with serial number 101649652967232400973287926853576324474704191577 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 573991534385810185414751720380406676197462686257 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 65146998853486109776946010625622210502765399420 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 671392265792796179974205803597920561953071886987 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 687718559798509352161509638618898929672050102792 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 163151227770815758291013292378103132631454603147 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 688654118958098937136053218844896293022365981716 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 164321241550371977981937976773729088425294619508 -2026/12/12 12:13:40 [INFO] generate received request -2026/12/12 12:13:40 [INFO] received CSR -2026/12/12 12:13:40 [INFO] generating key: ecdsa-521 -2026/12/12 12:13:40 [INFO] encoded CSR -2026/12/12 12:13:40 [INFO] signed certificate with serial number 230088061727985405152188033577834886223617014303 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 246316304074675955812796714681362608073171460989 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 489747268910314086233591953337428411740344359416 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 471756818948120195679047372226254803505561319671 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 93462980498867935592023245642088424360352914287 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 211274115139585172083174190102567806257326244219 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 474876256925590677866795918386517226127956679907 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 19003949169386438532055643792173806539565964086 -2026/12/12 12:13:40 [INFO] generate received request -2026/12/12 12:13:40 [INFO] received CSR -2026/12/12 12:13:40 [INFO] generating key: ecdsa-521 -2026/12/12 12:13:40 [INFO] encoded CSR -2026/12/12 12:13:40 [INFO] signed certificate with serial number 639431861775281065491851585685711712243950085293 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 564412907738455776994622574566041473763224504114 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 561459012782543118174992697988492034320957872216 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 310947200515795404182686334922870077073009232713 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 75444659926150254393123471376829499355857742835 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 203158203642504998618425182057108435539561949869 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 119648124583485005007593519614693951034394481078 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 99147102898448453586176281723523827992928181073 -2026/12/12 12:13:40 [INFO] generate received request -2026/12/12 12:13:40 [INFO] received CSR -2026/12/12 12:13:40 [INFO] generating key: ecdsa-521 -2026/12/12 12:13:40 [INFO] encoded CSR -2026/12/12 12:13:40 [INFO] signed certificate with serial number 108149209741732640627037372615432335421010947414 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 168290206341742272380069298662148791194096596076 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 172779688257963772539296277576320145739165764858 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 717555206751039748468735609650856766849430022725 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 74562001989551836303227513861570855480616990385 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 162160101886963810303667718372629145390309408698 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 269938647995438396184317419140620849680688538345 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 589946758209693501844587847233152383132227962827 -2026/12/12 12:13:40 [INFO] ignore invalid 'pathlenzero' value -2026/12/12 12:13:40 [INFO] generate received request -2026/12/12 12:13:40 [INFO] received CSR -2026/12/12 12:13:40 [INFO] generating key: ecdsa-521 -2026/12/12 12:13:40 [INFO] encoded CSR -2026/12/12 12:13:40 [INFO] signed certificate with serial number 181035400927451378233772840693462832532690293854 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 277310662068106462797720148459883907396060956179 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 383755494482853117371288579405820724684654034320 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 564280416377958658880486739505471251709418403805 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 447993677734156907722055148813779327402625170754 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 218916000277833801484585337038479122839889026019 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 565250033005915125268686075036545042331838635888 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 43266342117629157497478585372168767498845964567 -2026/12/12 12:13:40 [INFO] generate received request -2026/12/12 12:13:40 [INFO] received CSR -2026/12/12 12:13:40 [INFO] generating key: ed25519-0 -2026/12/12 12:13:40 [INFO] encoded CSR -2026/12/12 12:13:40 [INFO] signed certificate with serial number 139020072642093934275982945707182511608347280289 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 541185724567588290921659995415450399196655821946 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 361919967653656605920433871482662872624961003680 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 583402851958877557243712644072954830782804146269 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 621625123481651658477009127311396492704243910066 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 399767835370318741918091277148292259804525694663 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 71650810308850992172311821338372544752226958773 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 708777380735766312812594649841468393107843757246 -2026/12/12 12:13:40 [INFO] generate received request -2026/12/12 12:13:40 [INFO] received CSR -2026/12/12 12:13:40 [INFO] generating key: ed25519-0 -2026/12/12 12:13:40 [INFO] encoded CSR -2026/12/12 12:13:40 [INFO] signed certificate with serial number 720546457026622108796350176186469605618593447362 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 233093126421293752392611296061249957563034653262 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 106547527353218856038911911062682720778438319720 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 517123094210279207126503524244004716218022233881 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 625106383563911264605849968615582755400633719675 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 690994002337477484168972253483438798393331474414 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 678370869773060448589812521933680250524542848913 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 260229414494753321126538874071864732192766038230 -2026/12/12 12:13:40 [INFO] generate received request -2026/12/12 12:13:40 [INFO] received CSR -2026/12/12 12:13:40 [INFO] generating key: ed25519-0 -2026/12/12 12:13:40 [INFO] encoded CSR -2026/12/12 12:13:40 [INFO] signed certificate with serial number 216410914316584715957858194232071959199013328094 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 485826377392505284763908919377649477965674797365 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 30598663589883995753532261973095319994138972870 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 156092443590662940163005119088367342006387912721 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 694183117586361123285693234541840980527291084200 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 217644093565826731782783964572841728221335207165 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 683671164953705749148636646341379953112258203938 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 390074489353832453637404210891308861406973946542 -2026/12/12 12:13:40 [INFO] generate received request -2026/12/12 12:13:40 [INFO] received CSR -2026/12/12 12:13:40 [INFO] generating key: ed25519-0 -2026/12/12 12:13:40 [INFO] encoded CSR -2026/12/12 12:13:40 [INFO] signed certificate with serial number 663233806215209158235342740786043428674306185849 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 543136343936547460543392960614184142373503824508 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 374424180290733017347375462592929574689249370325 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 19591323418899981761982417856383056009893842087 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 606793015842904107756404137461881383428448295463 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 390666158541314588709083901236466850917405128282 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 152543195669599004005428533817413134006725169716 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 308392143239854522397413279993863579363425683931 -2026/12/12 12:13:40 [INFO] ignore invalid 'pathlenzero' value -2026/12/12 12:13:40 [INFO] generate received request -2026/12/12 12:13:40 [INFO] received CSR -2026/12/12 12:13:40 [INFO] generating key: ed25519-0 -2026/12/12 12:13:40 [INFO] encoded CSR -2026/12/12 12:13:40 [INFO] signed certificate with serial number 301943997020772331308883204620177949181224708697 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 182599708123563310177244494176183625590063834645 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 521148257576633413947250975364593768652574773335 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 293490173127534248216143897324776510989644004008 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 433432414055857786887680309664134173139406214635 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 480868312428544964131454153473259995690034161914 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 98691735743059364258306314014906073298009746494 -2026/12/12 12:13:40 [INFO] signed certificate with serial number 196369621605862410133891695706020490674318880260 ---- PASS: TestInitCA (34.22s) -=== RUN TestInvalidCAConfig ---- PASS: TestInvalidCAConfig (0.00s) -=== RUN TestInvalidCryptoParams -2026/12/12 12:13:40 [INFO] generate received request -2026/12/12 12:13:40 [INFO] received CSR -2026/12/12 12:13:40 [INFO] generating key: rsa-1024 -2026/12/12 12:13:40 [ERROR] failed to process request: {"code":2400,"message":"RSA key is too weak"} -2026/12/12 12:13:40 [INFO] generate received request -2026/12/12 12:13:40 [INFO] received CSR -2026/12/12 12:13:40 [INFO] generating key: rsaCrypto-2048 -2026/12/12 12:13:40 [ERROR] failed to process request: {"code":2400,"message":"invalid algorithm"} -2026/12/12 12:13:40 [INFO] generate received request -2026/12/12 12:13:40 [INFO] received CSR -2026/12/12 12:13:40 [INFO] generating key: ecdsa-2000 -2026/12/12 12:13:40 [ERROR] failed to process request: {"code":2400,"message":"invalid curve"} ---- PASS: TestInvalidCryptoParams (0.00s) -=== RUN TestValidations ---- PASS: TestValidations (0.00s) -=== RUN TestRenewRSA -2026/12/12 12:13:40 [INFO] encoded CSR -2026/12/12 12:13:40 [INFO] signed certificate with serial number 299456952896485151680533663285832510814740838419 ---- PASS: TestRenewRSA (0.00s) -=== RUN TestRenewED25519 -2026/12/12 12:13:40 [INFO] encoded CSR -2026/12/12 12:13:40 [INFO] signed certificate with serial number 202583749916965817595693543628816626281636794305 ---- PASS: TestRenewED25519 (0.00s) -=== RUN TestRenewECDSA -2026/12/12 12:13:40 [INFO] encoded CSR -2026/12/12 12:13:40 [INFO] signed certificate with serial number 700703995790956230362496689097708082668202934170 ---- PASS: TestRenewECDSA (0.00s) -=== RUN TestRenewMismatch ---- PASS: TestRenewMismatch (0.00s) -=== RUN TestRenew ---- PASS: TestRenew (0.00s) -PASS -ok github.com/cloudflare/cfssl/initca 34.245s -=== RUN TestOutputf ---- PASS: TestOutputf (0.00s) -=== RUN TestOutput ---- PASS: TestOutput (0.00s) -=== RUN TestCriticalf ---- PASS: TestCriticalf (0.00s) -=== RUN TestCritical ---- PASS: TestCritical (0.00s) -=== RUN TestWarningf ---- PASS: TestWarningf (0.00s) -=== RUN TestWarning ---- PASS: TestWarning (0.00s) -=== RUN TestInfof ---- PASS: TestInfof (0.00s) -=== RUN TestInfo ---- PASS: TestInfo (0.00s) -=== RUN TestDebugf ---- PASS: TestDebugf (0.00s) -=== RUN TestDebug ---- PASS: TestDebug (0.00s) -=== RUN TestSetLogger ---- PASS: TestSetLogger (0.00s) -PASS -ok github.com/cloudflare/cfssl/log 0.004s -=== RUN TestGoodConfig ---- PASS: TestGoodConfig (0.00s) -=== RUN TestGoodConfig2 ---- PASS: TestGoodConfig2 (0.00s) -=== RUN TestBadConfig ---- PASS: TestBadConfig (0.00s) -=== RUN TestQuotedValue ---- PASS: TestQuotedValue (0.00s) -=== RUN TestENoEnt ---- PASS: TestENoEnt (0.00s) -=== RUN TestLoadRoots ---- PASS: TestLoadRoots (0.00s) -=== RUN TestLoadDERRoots ---- PASS: TestLoadDERRoots (0.00s) -=== RUN TestLoadKSMRoot ---- PASS: TestLoadKSMRoot (0.00s) -=== RUN TestLoadBadRootConfs ---- PASS: TestLoadBadRootConfs (0.01s) -=== RUN TestLoadWhitelist ---- PASS: TestLoadWhitelist (0.00s) -=== RUN TestLoadIPv6Whitelist ---- PASS: TestLoadIPv6Whitelist (0.00s) -=== RUN TestLoadDBConfig ---- PASS: TestLoadDBConfig (0.00s) -PASS -ok github.com/cloudflare/cfssl/multiroot/config 0.028s -=== RUN TestNewSignerFromFile ---- PASS: TestNewSignerFromFile (0.00s) -=== RUN TestSignNoResponder ---- PASS: TestSignNoResponder (0.01s) -=== RUN TestSign ---- PASS: TestSign (0.01s) -=== RUN TestSignCustomInterval ---- PASS: TestSignCustomInterval (0.01s) -=== RUN TestOCSP -2026/12/12 12:13:06 [ERROR] Error parsing response for serial fa5a1d0c6952aef60277072f4323fff1b1de: asn1: structure error: tags don't match (16 vs {class:1 tag:8 length:105 isCompound:true}) {optional:false explicit:false application:false private:false defaultValue: tag: stringType:0 timeType:0 set:false omitEmpty:false} responseASN1 @2 -2026/12/12 12:13:06 [ERROR] Error parsing response for serial fa5a1d0c6952aef60277072f4323fff1b1de: asn1: structure error: tags don't match (16 vs {class:1 tag:8 length:105 isCompound:true}) {optional:false explicit:false application:false private:false defaultValue: tag: stringType:0 timeType:0 set:false omitEmpty:false} responseASN1 @2 ---- PASS: TestOCSP (0.00s) -=== RUN TestOverrideHeaders ---- PASS: TestOverrideHeaders (0.00s) -=== RUN TestCacheHeaders -2026/12/12 12:13:06 [INFO] Read 1 OCSP responses ---- PASS: TestCacheHeaders (0.00s) -=== RUN TestNewSourceFromFile -2026/12/12 12:13:06 [INFO] Read 1 OCSP responses -2026/12/12 12:13:06 [ERROR] Base64 decode error illegal base64 data at input byte 1 on: 0 -2026/12/12 12:13:06 [ERROR] Base64 decode error illegal base64 data at input byte 0 on: 0 -2026/12/12 12:13:06 [ERROR] Base64 decode error illegal base64 data at input byte 0 on:  -2026/12/12 12:13:06 [ERROR] Base64 decode error illegal base64 data at input byte 1 on: +000_0]1 0 -2026/12/12 12:13:06 [ERROR] Base64 decode error illegal base64 data at input byte 0 on: UUS10U -2026/12/12 12:13:06 [ERROR] Base64 decode error illegal base64 data at input byte 0 on: Example10 -2026/12/12 12:13:06 [ERROR] Base64 decode error illegal base64 data at input byte 0 on: U Things10U -2026/12/12 12:13:06 [ERROR] Base64 decode error illegal base64 data at input byte 0 on: San -2026/12/12 12:13:06 [ERROR] Base64 decode error illegal base64 data at input byte 10 on: Francisco10U -2026/12/12 12:13:06 [ERROR] Base64 decode error illegal base64 data at input byte 10 on: California150422192500-04000h0f0;0 -2026/12/12 12:13:06 [ERROR] Base64 decode error illegal base64 data at input byte 0 on: +(ogR)-Fذ3O.ʞʞu:u00010101000000Z00010101000000Z0 -2026/12/12 12:13:06 [ERROR] Base64 decode error illegal base64 data at input byte 0 on:  -2026/12/12 12:13:06 [ERROR] Base64 decode error illegal base64 data at input byte 0 on: *H -2026/12/12 12:13:06 [ERROR] Base64 decode error illegal base64 data at input byte 0 on:  W(uk3ni,i -2026/12/12 12:13:06 [ERROR] Base64 decode error illegal base64 data at input byte 3 on: OkKnY;ɈCo8l[ -2026/12/12 12:13:06 [ERROR] Base64 decode error illegal base64 data at input byte 0 on: .Y;ɈCo8l[ -2026/12/12 12:13:06 [ERROR] Base64 decode error illegal base64 data at input byte 0 on: .[::1]:53: read: connection refused -2026/12/12 12:13:06 [WARNING] error checking revocation via CRL -Warning: soft fail checking revocation--- PASS: TestGood (0.00s) -=== RUN TestLdap -2026/12/12 12:13:06 [WARNING] failed to fetch CRL: Get "http://crl.comodoca.com/COMODORSACertificationAuthority.crl": dial tcp: lookup crl.comodoca.com on [::1]:53: read udp [::1]:45546->[::1]:53: read: connection refused -2026/12/12 12:13:06 [WARNING] error checking revocation via CRL - revoke_test.go:161: ldap certificate should have been recognized ---- FAIL: TestLdap (0.00s) -=== RUN TestLdapURLErr -2026/12/12 12:13:06 [WARNING] error parsing url :: parse ":": missing protocol scheme ---- PASS: TestLdapURLErr (0.00s) -=== RUN TestCertNotYetValid -2026/12/12 12:13:06 [INFO] Certificate isn't valid until 3000-01-01 01:01:01.000000001 -1200 -12 ---- PASS: TestCertNotYetValid (0.00s) -=== RUN TestCRLFetchError -2026/12/12 12:13:06 [WARNING] failed to fetch CRL: Get "": unsupported protocol scheme "" -2026/12/12 12:13:06 [WARNING] error checking revocation via CRL -2026/12/12 12:13:06 [WARNING] failed to fetch CRL: Get "": unsupported protocol scheme "" -2026/12/12 12:13:06 [WARNING] error checking revocation via CRL ---- PASS: TestCRLFetchError (0.00s) -=== RUN TestBadCRLSet -2026/12/12 12:13:06 [WARNING] failed to fetch CRL: Get "": unsupported protocol scheme "" ---- PASS: TestBadCRLSet (0.00s) -=== RUN TestCachedCRLSet -2026/12/12 12:13:06 [WARNING] failed to fetch CRL: Get "http://crl.comodoca.com/COMODORSACertificationAuthority.crl": dial tcp: lookup crl.comodoca.com on [::1]:53: read udp [::1]:54834->[::1]:53: read: connection refused -2026/12/12 12:13:06 [WARNING] error checking revocation via CRL -2026/12/12 12:13:06 [WARNING] failed to fetch CRL: Get "http://crl.comodoca.com/COMODORSACertificationAuthority.crl": dial tcp: lookup crl.comodoca.com on [::1]:53: read udp [::1]:51754->[::1]:53: read: connection refused -2026/12/12 12:13:06 [WARNING] error checking revocation via CRL - revoke_test.go:208: Previously fetched CRL's should be read smoothly and unrevoked ---- FAIL: TestCachedCRLSet (0.00s) -=== RUN TestRemoteFetchError ---- PASS: TestRemoteFetchError (0.00s) -=== RUN TestNoOCSPServers ---- PASS: TestNoOCSPServers (0.00s) -FAIL -FAIL github.com/cloudflare/cfssl/revoke 0.018s -=== RUN TestCommon ---- PASS: TestCommon (0.00s) -PASS -ok github.com/cloudflare/cfssl/scan 0.017s -? github.com/cloudflare/cfssl/scan/crypto [no test files] -=== RUN TestGolden ---- PASS: TestGolden (0.00s) -=== RUN TestLarge ---- PASS: TestLarge (0.00s) -=== RUN TestBlockGeneric ---- PASS: TestBlockGeneric (0.00s) -=== RUN ExampleNew ---- PASS: ExampleNew (0.00s) -=== RUN ExampleSum ---- PASS: ExampleSum (0.00s) -PASS -ok github.com/cloudflare/cfssl/scan/crypto/md5 0.005s -=== RUN TestDecryptPKCS1v15 ---- PASS: TestDecryptPKCS1v15 (0.00s) -=== RUN TestEncryptPKCS1v15 ---- PASS: TestEncryptPKCS1v15 (0.04s) -=== RUN TestEncryptPKCS1v15SessionKey ---- PASS: TestEncryptPKCS1v15SessionKey (0.00s) -=== RUN TestEncryptPKCS1v15DecrypterSessionKey ---- PASS: TestEncryptPKCS1v15DecrypterSessionKey (0.00s) -=== RUN TestNonZeroRandomBytes ---- PASS: TestNonZeroRandomBytes (0.00s) -=== RUN TestSignPKCS1v15 ---- PASS: TestSignPKCS1v15 (0.00s) -=== RUN TestVerifyPKCS1v15 ---- PASS: TestVerifyPKCS1v15 (0.00s) -=== RUN TestOverlongMessagePKCS1v15 ---- PASS: TestOverlongMessagePKCS1v15 (0.00s) -=== RUN TestUnpaddedSignature ---- PASS: TestUnpaddedSignature (0.00s) -=== RUN TestShortSessionKey ---- PASS: TestShortSessionKey (0.00s) -=== RUN TestEMSAPSS ---- PASS: TestEMSAPSS (0.00s) -=== RUN TestPSSGolden ---- PASS: TestPSSGolden (0.01s) -=== RUN TestPSSOpenSSL ---- PASS: TestPSSOpenSSL (0.00s) -=== RUN TestPSSNilOpts ---- PASS: TestPSSNilOpts (0.00s) -=== RUN TestPSSSigning ---- PASS: TestPSSSigning (0.00s) -=== RUN TestKeyGeneration ---- PASS: TestKeyGeneration (0.07s) -=== RUN Test3PrimeKeyGeneration ---- PASS: Test3PrimeKeyGeneration (0.01s) -=== RUN Test4PrimeKeyGeneration ---- PASS: Test4PrimeKeyGeneration (0.02s) -=== RUN TestNPrimeKeyGeneration ---- PASS: TestNPrimeKeyGeneration (0.38s) -=== RUN TestGnuTLSKey ---- PASS: TestGnuTLSKey (0.00s) -=== RUN TestEncryptOAEP ---- PASS: TestEncryptOAEP (0.00s) -=== RUN TestDecryptOAEP ---- PASS: TestDecryptOAEP (0.03s) -PASS -ok github.com/cloudflare/cfssl/scan/crypto/rsa 0.570s -=== RUN TestGolden ---- PASS: TestGolden (0.00s) -=== RUN TestSize ---- PASS: TestSize (0.00s) -=== RUN TestBlockSize ---- PASS: TestBlockSize (0.00s) -=== RUN TestBlockGeneric ---- PASS: TestBlockGeneric (0.00s) -=== RUN ExampleNew ---- PASS: ExampleNew (0.00s) -=== RUN ExampleSum ---- PASS: ExampleSum (0.00s) -PASS -ok github.com/cloudflare/cfssl/scan/crypto/sha1 0.009s -=== RUN TestGolden ---- PASS: TestGolden (0.00s) -=== RUN TestSize ---- PASS: TestSize (0.00s) -=== RUN TestBlockSize ---- PASS: TestBlockSize (0.00s) -PASS -ok github.com/cloudflare/cfssl/scan/crypto/sha256 0.005s -=== RUN TestGolden ---- PASS: TestGolden (0.00s) -=== RUN TestSize ---- PASS: TestSize (0.00s) -=== RUN TestBlockSize ---- PASS: TestBlockSize (0.00s) -PASS -ok github.com/cloudflare/cfssl/scan/crypto/sha512 0.008s -=== RUN TestRoundUp ---- PASS: TestRoundUp (0.00s) -=== RUN TestRemovePadding ---- PASS: TestRemovePadding (0.00s) -=== RUN TestCertificateSelection - conn_test.go:107: bar.example.com returned certificate 0, not 1 - conn_test.go:110: foo.example.com returned certificate 0, not 2 - conn_test.go:113: foo.bar.example.com returned certificate 0, not 3 ---- FAIL: TestCertificateSelection (0.00s) -=== RUN TestHandshakeClientRSARC4 ---- PASS: TestHandshakeClientRSARC4 (0.00s) -=== RUN TestHandshakeClientRSAAES128GCM ---- PASS: TestHandshakeClientRSAAES128GCM (0.00s) -=== RUN TestHandshakeClientRSAAES256GCM ---- PASS: TestHandshakeClientRSAAES256GCM (0.00s) -=== RUN TestHandshakeClientECDHERSAAES ---- PASS: TestHandshakeClientECDHERSAAES (0.00s) -=== RUN TestHandshakeClientECDHEECDSAAES ---- PASS: TestHandshakeClientECDHEECDSAAES (0.03s) -=== RUN TestHandshakeClientECDHEECDSAAESGCM ---- PASS: TestHandshakeClientECDHEECDSAAESGCM (0.01s) -=== RUN TestHandshakeClientAES256GCMSHA384 ---- PASS: TestHandshakeClientAES256GCMSHA384 (0.01s) -=== RUN TestHandshakeClientCertRSA -panic: test timed out after 10m0s - running tests: - TestHandshakeClientCertRSA (10m0s) - -goroutine 19 [running]: -testing.(*M).startAlarm.func1() - /usr/lib/go-1.24/src/testing/testing.go:2484 +0x394 -created by time.goFunc - /usr/lib/go-1.24/src/time/sleep.go:215 +0x2d - -goroutine 1 [chan receive]: -testing.(*T).Run(0xc0001a2380, {0x70525b?, 0xc0000bdb30?}, 0x719470) - /usr/lib/go-1.24/src/testing/testing.go:1859 +0x431 -testing.runTests.func1(0xc0001a2380) - /usr/lib/go-1.24/src/testing/testing.go:2279 +0x37 -testing.tRunner(0xc0001a2380, 0xc0000bdc70) - /usr/lib/go-1.24/src/testing/testing.go:1792 +0xf4 -testing.runTests(0xc000010390, {0x917140, 0x40, 0x40}, {0x949bc0?, 0x7?, 0x948640?}) - /usr/lib/go-1.24/src/testing/testing.go:2277 +0x4b4 -testing.(*M).Run(0xc0000ec960) - /usr/lib/go-1.24/src/testing/testing.go:2142 +0x64a -main.main() - _testmain.go:173 +0x9b - -goroutine 51 [select]: -net.(*pipe).read(0xc00015d800, {0xc0001ca446, 0x27f, 0xc0000af808?}) - /usr/lib/go-1.24/src/net/pipe.go:159 +0x14d -net.(*pipe).Read(0x41455f?, {0xc0001ca446?, 0x6e42c0?, 0x478301?}) - /usr/lib/go-1.24/src/net/pipe.go:142 +0x1c -io.ReadAtLeast({0x7f7ea1f5f918, 0xc00015d800}, {0xc0001ca380, 0x345, 0x345}, 0x345) - /usr/lib/go-1.24/src/io/io.go:335 +0x91 -io.ReadFull(...) - /usr/lib/go-1.24/src/io/io.go:354 -github.com/cloudflare/cfssl/scan/crypto/tls.(*clientTest).run(0xc00015d700, 0xc000103a40, 0x0) - /build/reproducible-path/golang-github-cloudflare-cfssl-1.6.5/obj-x86_64-linux-gnu/src/github.com/cloudflare/cfssl/scan/crypto/tls/handshake_client_test.go:235 +0x7a6 -github.com/cloudflare/cfssl/scan/crypto/tls.runClientTestForVersion(0xc000103a40, 0xc000039e80, {0x6fe391, 0x7}, {0x6fdde4, 0x5}) - /build/reproducible-path/golang-github-cloudflare-cfssl-1.6.5/obj-x86_64-linux-gnu/src/github.com/cloudflare/cfssl/scan/crypto/tls/handshake_client_test.go:276 +0x272 -github.com/cloudflare/cfssl/scan/crypto/tls.runClientTestTLS10(...) - /build/reproducible-path/golang-github-cloudflare-cfssl-1.6.5/obj-x86_64-linux-gnu/src/github.com/cloudflare/cfssl/scan/crypto/tls/handshake_client_test.go:280 -github.com/cloudflare/cfssl/scan/crypto/tls.TestHandshakeClientCertRSA(0xc000103a40) - /build/reproducible-path/golang-github-cloudflare-cfssl-1.6.5/obj-x86_64-linux-gnu/src/github.com/cloudflare/cfssl/scan/crypto/tls/handshake_client_test.go:370 +0x34e -testing.tRunner(0xc000103a40, 0x719470) - /usr/lib/go-1.24/src/testing/testing.go:1792 +0xf4 -created by testing.(*T).Run in goroutine 1 - /usr/lib/go-1.24/src/testing/testing.go:1851 +0x413 - -goroutine 52 [select]: -net.(*pipe).read(0xc00015d780, {0xc0003a0000, 0x400, 0x29?}) - /usr/lib/go-1.24/src/net/pipe.go:159 +0x14d -net.(*pipe).Read(0x41455f?, {0xc0003a0000?, 0x6e42c0?, 0xc000012801?}) - /usr/lib/go-1.24/src/net/pipe.go:142 +0x1c -github.com/cloudflare/cfssl/scan/crypto/tls.(*block).readFromUntil(0xc000376840, {0x7f7ea1f5f918, 0xc00015d780}, 0x5) - /build/reproducible-path/golang-github-cloudflare-cfssl-1.6.5/obj-x86_64-linux-gnu/src/github.com/cloudflare/cfssl/scan/crypto/tls/conn.go:460 +0x95 -github.com/cloudflare/cfssl/scan/crypto/tls.(*Conn).readRecord(0xc000390008, 0x14) - /build/reproducible-path/golang-github-cloudflare-cfssl-1.6.5/obj-x86_64-linux-gnu/src/github.com/cloudflare/cfssl/scan/crypto/tls/conn.go:562 +0x255 -github.com/cloudflare/cfssl/scan/crypto/tls.(*clientHandshakeState).readFinished(0xc000145c00, {0x0, 0x0, 0x60?}) - /build/reproducible-path/golang-github-cloudflare-cfssl-1.6.5/obj-x86_64-linux-gnu/src/github.com/cloudflare/cfssl/scan/crypto/tls/handshake_client.go:566 +0x4a -github.com/cloudflare/cfssl/scan/crypto/tls.(*Conn).clientHandshake(0xc000390008) - /build/reproducible-path/golang-github-cloudflare-cfssl-1.6.5/obj-x86_64-linux-gnu/src/github.com/cloudflare/cfssl/scan/crypto/tls/handshake_client.go:225 +0xe65 -github.com/cloudflare/cfssl/scan/crypto/tls.(*Conn).Handshake(0xc000390008) - /build/reproducible-path/golang-github-cloudflare-cfssl-1.6.5/obj-x86_64-linux-gnu/src/github.com/cloudflare/cfssl/scan/crypto/tls/conn.go:1033 +0x96 -github.com/cloudflare/cfssl/scan/crypto/tls.(*Conn).Write(0x27?, {0x6fe027, 0x6, 0x6}) - /build/reproducible-path/golang-github-cloudflare-cfssl-1.6.5/obj-x86_64-linux-gnu/src/github.com/cloudflare/cfssl/scan/crypto/tls/conn.go:880 +0xc9 -github.com/cloudflare/cfssl/scan/crypto/tls.(*clientTest).run.func1() - /build/reproducible-path/golang-github-cloudflare-cfssl-1.6.5/obj-x86_64-linux-gnu/src/github.com/cloudflare/cfssl/scan/crypto/tls/handshake_client_test.go:211 +0x79 -created by github.com/cloudflare/cfssl/scan/crypto/tls.(*clientTest).run in goroutine 51 - /build/reproducible-path/golang-github-cloudflare-cfssl-1.6.5/obj-x86_64-linux-gnu/src/github.com/cloudflare/cfssl/scan/crypto/tls/handshake_client_test.go:210 +0x267 -FAIL github.com/cloudflare/cfssl/scan/crypto/tls 600.108s -=== RUN TestDefaultSign ---- PASS: TestDefaultSign (0.01s) -=== RUN TestSANs - selfsign_test.go:52: broken relating to https://github.com/cloudflare/cfssl/issues/1230 ---- SKIP: TestSANs (0.00s) -=== RUN TestExtensions ---- PASS: TestExtensions (0.01s) -PASS -ok github.com/cloudflare/cfssl/selfsign 0.041s -=== RUN TestAppendIf ---- PASS: TestAppendIf (0.00s) -=== RUN TestSplitHosts ---- PASS: TestSplitHosts (0.00s) -=== RUN TestAddPolicies ---- PASS: TestAddPolicies (0.00s) -=== RUN TestAddPoliciesWithQualifiers ---- PASS: TestAddPoliciesWithQualifiers (0.00s) -=== RUN TestName ---- PASS: TestName (0.00s) -PASS -ok github.com/cloudflare/cfssl/signer 0.017s -=== RUN TestNewSignerFromFilePolicy ---- PASS: TestNewSignerFromFilePolicy (0.00s) -=== RUN TestNewSignerFromFileInvalidPolicy ---- PASS: TestNewSignerFromFileInvalidPolicy (0.00s) -=== RUN TestNewSignerFromFileNoUsageInPolicy ---- PASS: TestNewSignerFromFileNoUsageInPolicy (0.00s) -=== RUN TestNewSignerFromFileEdgeCases ---- PASS: TestNewSignerFromFileEdgeCases (0.00s) -=== RUN TestNewSignerFromFilePolicyLinting ---- PASS: TestNewSignerFromFilePolicyLinting (0.00s) -=== RUN TestSign -2026/12/12 12:13:06 [INFO] signed certificate with serial number 282764557951337320791033236260458682017104217121 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 182609619262048860747171543659019097554722195686 ---- PASS: TestSign (0.01s) -=== RUN TestCertificate ---- PASS: TestCertificate (0.00s) -=== RUN TestPolicy ---- PASS: TestPolicy (0.00s) -=== RUN TestNewSignerFromFile ---- PASS: TestNewSignerFromFile (0.00s) -=== RUN TestSignCSRs -2026/12/12 12:13:06 [INFO] signed certificate with serial number 268530879848254562058301340078095564689273238963 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 137176378668181911004309724471236603383677115427 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 384086523816463407146243822315753517960755016876 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 132465150857203524032916975316865499525882064322 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 498573899387412615450601178894296295622249139866 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 117031478211572742521015034958005447572915284005 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 564686926286510232677359534940310868447324881600 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 675362942591231549405737087416933720470445969944 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 545071074902803881723420257224575887251125494298 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 663155162790115782291196118013188445246437497556 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 454507552102011076252560678845762721353018708609 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 229040312571734240216036700958381589475672999486 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 590435544967337898815616967795845844049253613972 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 408280130538235645659482807984052562354372936803 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 82726260966759925297849020373895605680117507002 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 464610951478140602516957345955548648159209841802 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 121919821696047301905265948268456699946138624205 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 304292554023797254528352502081597465748053991179 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 516134088026773888423122697942521884287369090539 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 207096534425517644805345027758281501801750832521 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 293403672450405368433122888603619936036411879471 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 568047380265976882694488664195084235213430921712 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 430079460565893316689891872117876144341003914092 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 395605898353152723515489045837055320149253120585 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 376580996170021273619281301608324972520738750648 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 251101680405060936880826885437219092809374622878 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 652880860552219836360934692677897037718160878857 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 572377524543052724700045760653134854656647650437 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 684993200433724395900297508137608727908841486126 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 271772075743152974108432625475115393420331730623 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 689196520623272713122732983350006084093376399808 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 660423038821191848958531257459259002090885605792 ---- PASS: TestSignCSRs (0.14s) -=== RUN TestECDSASigner -2026/12/12 12:13:06 [INFO] signed certificate with serial number 273876406157365921001380968966294036097715096766 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 681579330177903535773198444056670371303142215481 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 97495736441134285789088617463427590560037325744 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 575317754567709466513336320096589084961045325615 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 149694744468449486218940117469209223104017881105 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 47609013738818055151302955992210307294661160771 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 454767928973564792185583217096949143043256551488 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 509251470599341270027517127229894933486117717836 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 700149524149406813561620807719223293978507661841 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 170156890331726247465386435690100073216460144169 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 394419025649823775635763350538562007762104109360 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 298008013020765441112061413501205024295732813543 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 229866920096186003846785987689833996003940632384 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 463173974538496825021713085177271941323077113224 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 622813781592119609324424090893119988402904314098 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 597234342344276408571244290114680288829824189281 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 432540842620579917457878666990962121817226946541 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 727289775999993931321247209906239319446058826369 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 62516607417420423179759263124080690795401789578 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 665419125861508995162935916678493147653997366029 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 453965108395946446891758402333196427815815559744 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 373040156809772515641966108485602087438565571109 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 350824502517301719567328569572787381843454878365 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 338698657456143044510367680213644606109835432018 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 166765081500260035670558094935198633683417099729 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 306734383089777724653138216905552964230144314802 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 103661900721739485815535630909133357566551674841 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 201555855158023255789640120522935394996626044009 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 614578878054419583175848786869795254981764514452 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 400321235633533059652315209291038253899552458767 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 68295587514171094485071912709339131300867503234 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 248640083663600172123975290307247730712898149959 ---- PASS: TestECDSASigner (0.04s) -=== RUN TestCAIssuing -2026/12/12 12:13:06 [INFO] signed certificate with serial number 489142849918344639578773333344774690082178922516 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 34200175858680768495965066412462551019114601849 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 254767816106090187820348722398301172410008558010 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 700058750842971982742871966834693476632741552147 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 417437527424875492719797963511485166979235875838 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 554570467222521244713154649648052410629726854957 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 606649195063989983153316843779464877043717159995 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 98901824172874666198140492912990324743104479421 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 324614233132278097548991481523163628785374008296 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 547713354422663068088360657602900536349521373284 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 46525227773481780641643585550676548384735047948 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 97269676966773712571845558480134665561506332119 ---- PASS: TestCAIssuing (0.02s) -=== RUN TestPopulateSubjectFromCSR ---- PASS: TestPopulateSubjectFromCSR (0.00s) -=== RUN TestOverrideSubject -2026/12/12 12:13:06 [INFO] signed certificate with serial number 352514022164414404867983491607614996913974428549 -2026/12/12 12:13:06 [INFO] Overrode subject info ---- PASS: TestOverrideSubject (0.00s) -=== RUN TestOverwriteHosts -2026/12/12 12:13:06 [INFO] signed certificate with serial number 26309774837920820275042327224549544992121672354 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 180553011986659365440205199756604510606185350694 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 356398537618630723156653128979930090460345313888 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 618676923118709933151818862560722172460722533795 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 333688856451859007760411495115132579401935853061 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 367784332180753313812355674933552737435405508679 ---- PASS: TestOverwriteHosts (0.00s) -=== RUN TestOverrideValidity -2026/12/12 12:13:06 [INFO] signed certificate with serial number 545838825200607113659145770807787784094477477288 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 150854468863670687462517145604931655372873999562 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 395013333767552285746623134395625146343844528348 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 647964419429498054144983856804729209720414503998 ---- PASS: TestOverrideValidity (0.00s) -=== RUN TestCASignPathlen -2026/12/12 12:13:06 [INFO] signed certificate with serial number 254551113250645116341017748044510083273537188546 -2026/12/12 12:13:06 [ERROR] local signer certificate disallows CA MaxPathLen extending -2026/12/12 12:13:06 [ERROR] local signer certificate disallows issuing CA certificate -2026/12/12 12:13:06 [ERROR] local signer certificate disallows issuing CA certificate -2026/12/12 12:13:06 [ERROR] local signer certificate disallows issuing CA certificate -2026/12/12 12:13:06 [INFO] signed certificate with serial number 338608824184366251437838458920854580788846144201 -2026/12/12 12:13:06 [ERROR] local signer policy disallows issuing CA certificate -2026/12/12 12:13:06 [ERROR] local signer policy disallows issuing CA certificate -2026/12/12 12:13:06 [ERROR] local signer policy disallows issuing CA certificate ---- PASS: TestCASignPathlen (0.00s) -=== RUN TestNoWhitelistSign -2026/12/12 12:13:06 [INFO] signed certificate with serial number 467194000704652304853357946371436146142253451929 ---- PASS: TestNoWhitelistSign (0.00s) -=== RUN TestWhitelistSign -2026/12/12 12:13:06 [INFO] signed certificate with serial number 119430218149173751094270711584678280041548844376 ---- PASS: TestWhitelistSign (0.00s) -=== RUN TestNameWhitelistSign -2026/12/12 12:13:06 [INFO] signed certificate with serial number 661630566996887975250059465337354151447830996159 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 661252407197296382749538188909160804446734684006 ---- PASS: TestNameWhitelistSign (0.00s) -=== RUN TestExtensionSign -2026/12/12 12:13:06 [INFO] signed certificate with serial number 538774636146611652791668127674122009276477259721 ---- PASS: TestExtensionSign (0.00s) -=== RUN TestCTFailure -2026/12/12 12:13:06 [INFO] signed certificate with serial number 58857809038156850652955589034851635621206350520 -2026/12/12 12:13:06 [INFO] submitting poisoned precertificate to http://127.0.0.1:37851 ---- PASS: TestCTFailure (0.00s) -=== RUN TestCTSuccess -2026/12/12 12:13:06 [INFO] signed certificate with serial number 191075360845044023225880914918037643236268836194 -2026/12/12 12:13:06 [INFO] submitting poisoned precertificate to http://127.0.0.1:34373 -2026/12/12 12:13:06 http: superfluous response.WriteHeader call from github.com/cloudflare/cfssl/signer/local.TestCTSuccess.func1 (local_test.go:1298) -2026/12/12 12:13:06 [INFO] signed certificate with serial number 191075360845044023225880914918037643236268836194 ---- PASS: TestCTSuccess (0.01s) -=== RUN TestReturnPrecert -2026/12/12 12:13:06 [INFO] signed certificate with serial number 353449182433914583684751383551623971085521559755 ---- PASS: TestReturnPrecert (0.00s) -=== RUN TestSignFromPrecert -2026/12/12 12:13:06 [INFO] signed certificate with serial number 10 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 10 ---- PASS: TestSignFromPrecert (0.03s) -=== RUN TestLint -=== RUN TestLint/linting_disabled -=== RUN TestLint/signer_without_lint_key -=== RUN TestLint/lint_results_above_err_level - local_test.go:1624: expected: pre-issuance linting found 3 error results, got: pre-issuance linting found 6 error results -=== RUN TestLint/lint_results_below_err_level - local_test.go:1632: expected: map[e_dnsname_not_valid_tld:{error { 0001-01-01 00:00:00 +0000 UTC 0001-01-01 00:00:00 +0000 UTC}} e_ecdsa_allowed_ku:{error Certificate contains invalid key usage(s): KeyUsageKeyEncipherment { 0001-01-01 00:00:00 +0000 UTC 0001-01-01 00:00:00 +0000 UTC}} e_sub_cert_aia_does_not_contain_ocsp_url:{error { 0001-01-01 00:00:00 +0000 UTC 0001-01-01 00:00:00 +0000 UTC}}], got: map[e_dnsname_not_valid_tld:{error {e_dnsname_not_valid_tld DNSNames must have a valid TLD. BRs: 3.2.2.4 CABF_BR 2012-07-01 00:00:00 +0000 UTC 0001-01-01 00:00:00 +0000 UTC}} e_ecdsa_allowed_ku:{error Certificate contains invalid key usage(s): KeyUsageKeyEncipherment {e_ecdsa_allowed_ku Key usage values keyEncipherment or dataEncipherment MUST NOT be present in certificates with ECDSA public keys RFC 8813 Section 3 RFC8813 2020-08-01 00:00:00 +0000 UTC 0001-01-01 00:00:00 +0000 UTC}} e_sub_cert_aia_does_not_contain_ocsp_url:{error {e_sub_cert_aia_does_not_contain_ocsp_url Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. BRs: 7.1.2.3 CABF_BR 2012-07-01 00:00:00 +0000 UTC 0001-01-01 00:00:00 +0000 UTC}}] -=== RUN TestLint/ignored_lint_names,_lint_results_above_err_level - local_test.go:1624: expected: pre-issuance linting found 2 error results, got: pre-issuance linting found 5 error results -=== RUN TestLint/ignored_lint_sources,_lint_results_above_err_level ---- FAIL: TestLint (0.00s) - --- PASS: TestLint/linting_disabled (0.00s) - --- PASS: TestLint/signer_without_lint_key (0.00s) - --- FAIL: TestLint/lint_results_above_err_level (0.00s) - --- FAIL: TestLint/lint_results_below_err_level (0.00s) - --- FAIL: TestLint/ignored_lint_names,_lint_results_above_err_level (0.00s) - --- PASS: TestLint/ignored_lint_sources,_lint_results_above_err_level (0.00s) -FAIL -FAIL github.com/cloudflare/cfssl/signer/local 0.284s -=== RUN TestNewSigner ---- PASS: TestNewSigner (0.00s) -=== RUN TestNewAuthSigner ---- PASS: TestNewAuthSigner (0.00s) -=== RUN TestRemoteInfo - remote_test.go:314: http://127.0.0.1:37219 -2026/12/12 12:13:06 [INFO] 127.0.0.1:55586 - "POST /api/v1/cfssl/info" 200 - remote_test.go:319: Finalizing test server. ---- PASS: TestRemoteInfo (0.00s) -=== RUN TestRemoteTLSInfo - remote_test.go:102: expired cert https://github.com/cloudflare/cfssl/issues/1237 ---- SKIP: TestRemoteTLSInfo (0.00s) -=== RUN TestRemoteMutualTLSInfo - remote_test.go:102: expired cert https://github.com/cloudflare/cfssl/issues/1237 ---- SKIP: TestRemoteMutualTLSInfo (0.00s) -=== RUN TestRemoteSign - remote_test.go:308: http://127.0.0.1:33025 -2026/12/12 12:13:06 [INFO] signature request received -2026/12/12 12:13:06 [INFO] signed certificate with serial number 458879 -2026/12/12 12:13:06 [INFO] wrote response -2026/12/12 12:13:06 [INFO] 127.0.0.1:43166 - "POST /api/v1/cfssl/sign" 200 -2026/12/12 12:13:06 [INFO] signature request received -2026/12/12 12:13:06 [INFO] signed certificate with serial number 458879 -2026/12/12 12:13:06 [INFO] wrote response -2026/12/12 12:13:06 [INFO] 127.0.0.1:43168 - "POST /api/v1/cfssl/sign" 200 -2026/12/12 12:13:06 [INFO] signature request received -2026/12/12 12:13:06 [INFO] signed certificate with serial number 458879 -2026/12/12 12:13:06 [INFO] wrote response -2026/12/12 12:13:06 [INFO] 127.0.0.1:43178 - "POST /api/v1/cfssl/sign" 200 -2026/12/12 12:13:06 [INFO] signature request received -2026/12/12 12:13:06 [INFO] signed certificate with serial number 458879 -2026/12/12 12:13:06 [INFO] wrote response -2026/12/12 12:13:06 [INFO] 127.0.0.1:43186 - "POST /api/v1/cfssl/sign" 200 -2026/12/12 12:13:06 [INFO] signature request received -2026/12/12 12:13:06 [INFO] signed certificate with serial number 458879 -2026/12/12 12:13:06 [INFO] wrote response -2026/12/12 12:13:06 [INFO] 127.0.0.1:43200 - "POST /api/v1/cfssl/sign" 200 -2026/12/12 12:13:06 [INFO] signature request received -2026/12/12 12:13:06 [INFO] signed certificate with serial number 458879 -2026/12/12 12:13:06 [INFO] wrote response -2026/12/12 12:13:06 [INFO] 127.0.0.1:43202 - "POST /api/v1/cfssl/sign" 200 - remote_test.go:319: Finalizing test server. ---- PASS: TestRemoteSign (0.04s) -=== RUN TestRemoteTLSSign - remote_test.go:163: expired cert https://github.com/cloudflare/cfssl/issues/1237 ---- SKIP: TestRemoteTLSSign (0.00s) -=== RUN TestRemoteMutualTLSSign - remote_test.go:163: expired cert https://github.com/cloudflare/cfssl/issues/1237 ---- SKIP: TestRemoteMutualTLSSign (0.00s) -=== RUN TestRemoteSignBadServerAndOverride - remote_test.go:308: http://127.0.0.1:37045 -2026/12/12 12:13:06 [INFO] signature request received -2026/12/12 12:13:06 [INFO] signed certificate with serial number 1 -2026/12/12 12:13:06 [INFO] wrote response -2026/12/12 12:13:06 [INFO] 127.0.0.1:41530 - "POST /api/v1/cfssl/sign" 200 - remote_test.go:319: Finalizing test server. ---- PASS: TestRemoteSignBadServerAndOverride (0.00s) -PASS -ok github.com/cloudflare/cfssl/signer/remote 0.064s -=== RUN TestNewSigner ---- PASS: TestNewSigner (0.00s) -=== RUN TestUniversalRemoteAndLocalInfo - universal_test.go:465: http://127.0.0.1:42109 -2026/12/12 12:13:06 [WARNING] Profiles[CA] points to a remote signer: The configuration value by "usages", "issuer_urls", "ocsp_url", "crl_url", "ca_constraint", "expiry", "backdate", "not_before", "not_after", "cert_store" and "ct_log_servers" are skipped -2026/12/12 12:13:06 [WARNING] Profiles[CA] points to a remote signer: The configuration value by "usages", "issuer_urls", "ocsp_url", "crl_url", "ca_constraint", "expiry", "backdate", "not_before", "not_after", "cert_store" and "ct_log_servers" are skipped -2026/12/12 12:13:06 [WARNING] Profiles[CA] points to a remote signer: The configuration value by "usages", "issuer_urls", "ocsp_url", "crl_url", "ca_constraint", "expiry", "backdate", "not_before", "not_after", "cert_store" and "ct_log_servers" are skipped -2026/12/12 12:13:06 [WARNING] Profiles[CA] points to a remote signer: The configuration value by "usages", "issuer_urls", "ocsp_url", "crl_url", "ca_constraint", "expiry", "backdate", "not_before", "not_after", "cert_store" and "ct_log_servers" are skipped -2026/12/12 12:13:06 [WARNING] Profiles[CA] points to a remote signer: The configuration value by "usages", "issuer_urls", "ocsp_url", "crl_url", "ca_constraint", "expiry", "backdate", "not_before", "not_after", "cert_store" and "ct_log_servers" are skipped -2026/12/12 12:13:06 [INFO] 127.0.0.1:56026 - "POST /api/v1/cfssl/info" 200 - universal_test.go:470: Finalizing test server. ---- PASS: TestUniversalRemoteAndLocalInfo (0.00s) -=== RUN TestUniversalMultipleRemoteAndLocalInfo - universal_test.go:465: http://127.0.0.1:44159 -2026/12/12 12:13:06 [WARNING] Profiles[CA] points to a remote signer: The configuration value by "usages", "issuer_urls", "ocsp_url", "crl_url", "ca_constraint", "expiry", "backdate", "not_before", "not_after", "cert_store" and "ct_log_servers" are skipped -2026/12/12 12:13:06 [WARNING] Profiles[ipsec] points to a remote signer: The configuration value by "usages", "issuer_urls", "ocsp_url", "crl_url", "ca_constraint", "expiry", "backdate", "not_before", "not_after", "cert_store" and "ct_log_servers" are skipped -2026/12/12 12:13:06 [WARNING] Profiles[CA] points to a remote signer: The configuration value by "usages", "issuer_urls", "ocsp_url", "crl_url", "ca_constraint", "expiry", "backdate", "not_before", "not_after", "cert_store" and "ct_log_servers" are skipped -2026/12/12 12:13:06 [WARNING] Profiles[ipsec] points to a remote signer: The configuration value by "usages", "issuer_urls", "ocsp_url", "crl_url", "ca_constraint", "expiry", "backdate", "not_before", "not_after", "cert_store" and "ct_log_servers" are skipped -2026/12/12 12:13:06 [WARNING] Profiles[CA] points to a remote signer: The configuration value by "usages", "issuer_urls", "ocsp_url", "crl_url", "ca_constraint", "expiry", "backdate", "not_before", "not_after", "cert_store" and "ct_log_servers" are skipped -2026/12/12 12:13:06 [WARNING] Profiles[ipsec] points to a remote signer: The configuration value by "usages", "issuer_urls", "ocsp_url", "crl_url", "ca_constraint", "expiry", "backdate", "not_before", "not_after", "cert_store" and "ct_log_servers" are skipped -2026/12/12 12:13:06 [WARNING] Profiles[CA] points to a remote signer: The configuration value by "usages", "issuer_urls", "ocsp_url", "crl_url", "ca_constraint", "expiry", "backdate", "not_before", "not_after", "cert_store" and "ct_log_servers" are skipped -2026/12/12 12:13:06 [WARNING] Profiles[ipsec] points to a remote signer: The configuration value by "usages", "issuer_urls", "ocsp_url", "crl_url", "ca_constraint", "expiry", "backdate", "not_before", "not_after", "cert_store" and "ct_log_servers" are skipped -2026/12/12 12:13:06 [WARNING] Profiles[CA] points to a remote signer: The configuration value by "usages", "issuer_urls", "ocsp_url", "crl_url", "ca_constraint", "expiry", "backdate", "not_before", "not_after", "cert_store" and "ct_log_servers" are skipped -2026/12/12 12:13:06 [WARNING] Profiles[ipsec] points to a remote signer: The configuration value by "usages", "issuer_urls", "ocsp_url", "crl_url", "ca_constraint", "expiry", "backdate", "not_before", "not_after", "cert_store" and "ct_log_servers" are skipped -2026/12/12 12:13:06 [INFO] 127.0.0.1:39510 - "POST /api/v1/cfssl/info" 200 -2026/12/12 12:13:06 [INFO] 127.0.0.1:39526 - "POST /api/v1/cfssl/info" 200 - universal_test.go:470: Finalizing test server. ---- PASS: TestUniversalMultipleRemoteAndLocalInfo (0.01s) -=== RUN TestUniversalRemoteAndLocalSign - universal_test.go:456: http://127.0.0.1:44027 -2026/12/12 12:13:06 [WARNING] Profiles[CA] points to a remote signer: The configuration value by "usages", "issuer_urls", "ocsp_url", "crl_url", "ca_constraint", "expiry", "backdate", "not_before", "not_after", "cert_store" and "ct_log_servers" are skipped -2026/12/12 12:13:06 [WARNING] Profiles[ipsec] points to a remote signer: The configuration value by "usages", "issuer_urls", "ocsp_url", "crl_url", "ca_constraint", "expiry", "backdate", "not_before", "not_after", "cert_store" and "ct_log_servers" are skipped -2026/12/12 12:13:06 [WARNING] Profiles[CA] points to a remote signer: The configuration value by "usages", "issuer_urls", "ocsp_url", "crl_url", "ca_constraint", "expiry", "backdate", "not_before", "not_after", "cert_store" and "ct_log_servers" are skipped -2026/12/12 12:13:06 [WARNING] Profiles[ipsec] points to a remote signer: The configuration value by "usages", "issuer_urls", "ocsp_url", "crl_url", "ca_constraint", "expiry", "backdate", "not_before", "not_after", "cert_store" and "ct_log_servers" are skipped -2026/12/12 12:13:06 [WARNING] Profiles[CA] points to a remote signer: The configuration value by "usages", "issuer_urls", "ocsp_url", "crl_url", "ca_constraint", "expiry", "backdate", "not_before", "not_after", "cert_store" and "ct_log_servers" are skipped -2026/12/12 12:13:06 [WARNING] Profiles[ipsec] points to a remote signer: The configuration value by "usages", "issuer_urls", "ocsp_url", "crl_url", "ca_constraint", "expiry", "backdate", "not_before", "not_after", "cert_store" and "ct_log_servers" are skipped -2026/12/12 12:13:06 [WARNING] Profiles[CA] points to a remote signer: The configuration value by "usages", "issuer_urls", "ocsp_url", "crl_url", "ca_constraint", "expiry", "backdate", "not_before", "not_after", "cert_store" and "ct_log_servers" are skipped -2026/12/12 12:13:06 [WARNING] Profiles[ipsec] points to a remote signer: The configuration value by "usages", "issuer_urls", "ocsp_url", "crl_url", "ca_constraint", "expiry", "backdate", "not_before", "not_after", "cert_store" and "ct_log_servers" are skipped -2026/12/12 12:13:06 [WARNING] Profiles[CA] points to a remote signer: The configuration value by "usages", "issuer_urls", "ocsp_url", "crl_url", "ca_constraint", "expiry", "backdate", "not_before", "not_after", "cert_store" and "ct_log_servers" are skipped -2026/12/12 12:13:06 [WARNING] Profiles[ipsec] points to a remote signer: The configuration value by "usages", "issuer_urls", "ocsp_url", "crl_url", "ca_constraint", "expiry", "backdate", "not_before", "not_after", "cert_store" and "ct_log_servers" are skipped -2026/12/12 12:13:06 [INFO] signature request received -2026/12/12 12:13:06 [INFO] signed certificate with serial number 244816518823416276518312534373104397206265340220 -2026/12/12 12:13:06 [INFO] wrote response -2026/12/12 12:13:06 [INFO] 127.0.0.1:49998 - "POST /api/v1/cfssl/sign" 200 -2026/12/12 12:13:06 [INFO] signature request received -2026/12/12 12:13:06 [INFO] signed certificate with serial number 576055564157306754892370715493463731584331412366 -2026/12/12 12:13:06 [INFO] wrote response -2026/12/12 12:13:06 [INFO] 127.0.0.1:50002 - "POST /api/v1/cfssl/sign" 200 -2026/12/12 12:13:06 [INFO] signature request received -2026/12/12 12:13:06 [INFO] signed certificate with serial number 202675529008149015312046561034580932612225383482 -2026/12/12 12:13:06 [INFO] wrote response -2026/12/12 12:13:06 [INFO] 127.0.0.1:50006 - "POST /api/v1/cfssl/sign" 200 -2026/12/12 12:13:06 [INFO] signature request received -2026/12/12 12:13:06 [INFO] signed certificate with serial number 77977833236328838259395694898623480613669965972 -2026/12/12 12:13:06 [INFO] wrote response -2026/12/12 12:13:06 [INFO] 127.0.0.1:50008 - "POST /api/v1/cfssl/sign" 200 -2026/12/12 12:13:06 [INFO] signature request received -2026/12/12 12:13:06 [INFO] signed certificate with serial number 349613607131367349176595579974363061861561068506 -2026/12/12 12:13:06 [INFO] wrote response -2026/12/12 12:13:06 [INFO] 127.0.0.1:50014 - "POST /api/v1/cfssl/sign" 200 -2026/12/12 12:13:06 [INFO] signature request received -2026/12/12 12:13:06 [INFO] signed certificate with serial number 621141696398594890854053320370017800869409363352 -2026/12/12 12:13:06 [INFO] wrote response -2026/12/12 12:13:06 [INFO] 127.0.0.1:50026 - "POST /api/v1/cfssl/sign" 200 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 107547180897169873987807835145313663862366606811 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 164789378105839236641862370125632744748521745570 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 396362499998565447314661891523294650370439344057 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 606864294386273316500258056011118653745821732726 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 397259799753545985565936446167490348846363333073 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 254415827748446977361358956718823591138348667753 -2026/12/12 12:13:06 [INFO] signature request received -2026/12/12 12:13:06 [INFO] signed certificate with serial number 108594143984642912900967699889662994491862421772 -2026/12/12 12:13:06 [INFO] wrote response -2026/12/12 12:13:06 [INFO] 127.0.0.1:50036 - "POST /api/v1/cfssl/sign" 200 -2026/12/12 12:13:06 [INFO] signature request received -2026/12/12 12:13:06 [INFO] signed certificate with serial number 505553909374061297703983254125695863901669713255 -2026/12/12 12:13:06 [INFO] wrote response -2026/12/12 12:13:06 [INFO] 127.0.0.1:50038 - "POST /api/v1/cfssl/sign" 200 -2026/12/12 12:13:06 [INFO] signature request received -2026/12/12 12:13:06 [INFO] signed certificate with serial number 14974724787630632590618749014181672533903284564 -2026/12/12 12:13:06 [INFO] wrote response -2026/12/12 12:13:06 [INFO] 127.0.0.1:50050 - "POST /api/v1/cfssl/sign" 200 -2026/12/12 12:13:06 [INFO] signature request received -2026/12/12 12:13:06 [INFO] signed certificate with serial number 286482417894243880107770351044510400553477865515 -2026/12/12 12:13:06 [INFO] wrote response -2026/12/12 12:13:06 [INFO] 127.0.0.1:50056 - "POST /api/v1/cfssl/sign" 200 -2026/12/12 12:13:06 [INFO] signature request received -2026/12/12 12:13:06 [INFO] signed certificate with serial number 701488653744276202123301948118408657172928100372 -2026/12/12 12:13:06 [INFO] wrote response -2026/12/12 12:13:06 [INFO] 127.0.0.1:50058 - "POST /api/v1/cfssl/sign" 200 -2026/12/12 12:13:06 [INFO] signature request received -2026/12/12 12:13:06 [INFO] signed certificate with serial number 13129384030267852339066520315904911415043001607 -2026/12/12 12:13:06 [INFO] wrote response -2026/12/12 12:13:06 [INFO] 127.0.0.1:50068 - "POST /api/v1/cfssl/sign" 200 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 445356889997845692074272087155880839688598282441 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 723143822436881270665997456043976272938131620397 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 595404935317007572016969258914323436500302776139 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 385800953644108804217637661008309027039335022110 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 452530535502447416791091490395087444755246224030 -2026/12/12 12:13:06 [INFO] signed certificate with serial number 544168396332890782899947138173815884318793784721 - universal_test.go:470: Finalizing test server. ---- PASS: TestUniversalRemoteAndLocalSign (0.14s) -PASS -ok github.com/cloudflare/cfssl/signer/universal 0.162s -ok github.com/cloudflare/cfssl/transport 0.009s -? github.com/cloudflare/cfssl/transport/ca [no test files] -=== RUN TestEncodePEM - signer_test.go:20: PEM: - -----BEGIN CERTIFICATE REQUEST----- - wq9cXyjjg4QpXy/Crw== - -----END CERTIFICATE REQUEST----- - - ---- PASS: TestEncodePEM (0.00s) -=== RUN TestLoadSigner -2026/12/12 12:13:06 [INFO] generate received request -2026/12/12 12:13:06 [INFO] received CSR -2026/12/12 12:13:06 [INFO] generating key: ecdsa-256 -2026/12/12 12:13:06 [INFO] encoded CSR -2026/12/12 12:13:06 [INFO] signed certificate with serial number 242639733837665940764587307613168308521092575046 ---- PASS: TestLoadSigner (0.00s) -=== RUN TestNewSigner -2026/12/12 12:13:06 [INFO] generate received request -2026/12/12 12:13:06 [INFO] received CSR -2026/12/12 12:13:06 [INFO] generating key: ecdsa-256 -2026/12/12 12:13:06 [INFO] encoded CSR -2026/12/12 12:13:06 [INFO] signed certificate with serial number 633148408797252104399125432790967370051738865840 -2026/12/12 12:13:06 [INFO] received CSR -2026/12/12 12:13:06 [INFO] generating key: ecdsa-256 -2026/12/12 12:13:06 [INFO] encoded CSR -2026/12/12 12:13:06 [INFO] signed certificate with serial number 431644984529742798846504194478092999136485042983 - signer_test.go:127: error: asn1: structure error: length too large ---- PASS: TestNewSigner (0.00s) -PASS -ok github.com/cloudflare/cfssl/transport/ca/localca 0.013s -? github.com/cloudflare/cfssl/transport/core [no test files] -? github.com/cloudflare/cfssl/transport/example/exlib [no test files] -? github.com/cloudflare/cfssl/transport/example/maclient [no test files] -? github.com/cloudflare/cfssl/transport/example/maserver [no test files] -=== RUN TestNewStandardProvider ---- PASS: TestNewStandardProvider (0.00s) -=== RUN TestGenerate ---- PASS: TestGenerate (3.30s) -PASS -ok github.com/cloudflare/cfssl/transport/kp 3.308s -? github.com/cloudflare/cfssl/transport/roots [no test files] -? github.com/cloudflare/cfssl/transport/roots/system [no test files] -=== RUN TestCertHashPriority ---- PASS: TestCertHashPriority (0.00s) -=== RUN TestCertKeyAlgoPriority ---- PASS: TestCertKeyAlgoPriority (0.00s) -=== RUN TestChainHashPriority ---- PASS: TestChainHashPriority (0.00s) -=== RUN TestChainKeyAlgoPriority ---- PASS: TestChainKeyAlgoPriority (0.00s) -=== RUN TestCertHashUbiquity ---- PASS: TestCertHashUbiquity (0.00s) -=== RUN TestCertKeyAlgoUbiquity ---- PASS: TestCertKeyAlgoUbiquity (0.00s) -=== RUN TestChainHashUbiquity ---- PASS: TestChainHashUbiquity (0.00s) -=== RUN TestChainKeyAlgoUbiquity ---- PASS: TestChainKeyAlgoUbiquity (0.00s) -=== RUN TestChainExpiryUbiquity ---- PASS: TestChainExpiryUbiquity (0.00s) -=== RUN TestCompareChainExpiry ---- PASS: TestCompareChainExpiry (0.00s) -=== RUN TestCompareChainLength ---- PASS: TestCompareChainLength (0.00s) -=== RUN TestPlatformKeyStoreUbiquity ---- PASS: TestPlatformKeyStoreUbiquity (0.00s) -=== RUN TestEmptyPlatformList ---- PASS: TestEmptyPlatformList (0.00s) -=== RUN TestLoadPlatforms -2026/12/12 12:13:06 [INFO] Platform metadata is loaded: Browser Everywhere 0 -2026/12/12 12:13:06 [INFO] Platform metadata is loaded: Pineapple 1 ---- PASS: TestLoadPlatforms (0.00s) -=== RUN TestPlatformCryptoUbiquity ---- PASS: TestPlatformCryptoUbiquity (0.00s) -=== RUN TestSHA2Homogeneity ---- PASS: TestSHA2Homogeneity (0.00s) -=== RUN TestCompareSHA2Homogeneity ---- PASS: TestCompareSHA2Homogeneity (0.00s) -=== RUN TestFilterTrivial ---- PASS: TestFilterTrivial (0.00s) -=== RUN TestFilterChainHashPriority ---- PASS: TestFilterChainHashPriority (0.00s) -=== RUN TestFilterChainKeyAlgoPriority ---- PASS: TestFilterChainKeyAlgoPriority (0.00s) -=== RUN TestFilterChainCipherSuite ---- PASS: TestFilterChainCipherSuite (0.00s) -=== RUN TestFilterChainHashUbiquity ---- PASS: TestFilterChainHashUbiquity (0.00s) -=== RUN TestFilterChainKeyAlgoUbiquity ---- PASS: TestFilterChainKeyAlgoUbiquity (0.00s) -=== RUN TestFlagBySHA1DeprecationPolicy ---- PASS: TestFlagBySHA1DeprecationPolicy (0.00s) -=== RUN TestSHA1DeprecationMessages ---- PASS: TestSHA1DeprecationMessages (0.00s) -PASS -ok github.com/cloudflare/cfssl/ubiquity 0.010s -=== RUN TestHostStubHTTP -2026/12/12 12:13:06 WARNING: whitelisting is being stubbed -2026/12/12 12:13:06 WARNING: whitelist check for 127.0.0.1 but whitelisting is stubbed -2026/12/12 12:13:06 WARNING: IP 127.0.0.1 added to whitelist but whitelisting is stubbed -2026/12/12 12:13:06 WARNING: whitelist check for 127.0.0.1 but whitelisting is stubbed -2026/12/12 12:13:06 WARNING: IP 127.0.0.1 removed from whitelist but whitelisting is stubbed -2026/12/12 12:13:06 WARNING: whitelist check for 127.0.0.1 but whitelisting is stubbed ---- PASS: TestHostStubHTTP (0.00s) -=== RUN TestNetStubHTTP -2026/12/12 12:13:06 WARNING: whitelisting is being stubbed -2026/12/12 12:13:06 WARNING: whitelist check for 127.0.0.1 but whitelisting is stubbed -2026/12/12 12:13:06 WARNING: IP network 127.0.0.1/32 added to whitelist but whitelisting is stubbed -2026/12/12 12:13:06 WARNING: whitelist check for 127.0.0.1 but whitelisting is stubbed -2026/12/12 12:13:06 WARNING: IP network 127.0.0.1/32 removed from whitelist but whitelisting is stubbed -2026/12/12 12:13:06 WARNING: whitelist check for 127.0.0.1 but whitelisting is stubbed ---- PASS: TestNetStubHTTP (0.00s) -=== RUN TestBasicHTTP ---- PASS: TestBasicHTTP (0.00s) -=== RUN TestBasicHTTPDefaultDeny ---- PASS: TestBasicHTTPDefaultDeny (0.00s) -=== RUN TestBasicHTTPWorkers ---- PASS: TestBasicHTTPWorkers (0.21s) -=== RUN TestFailHTTP -2026/12/12 12:13:06 failed to lookup request address: missing port in address ---- PASS: TestFailHTTP (0.00s) -=== RUN TestSetupHandlerFuncFails ---- PASS: TestSetupHandlerFuncFails (0.00s) -=== RUN TestSetupHandlerFunc ---- PASS: TestSetupHandlerFunc (0.00s) -=== RUN TestFailHTTPFunc -2026/12/12 12:13:06 failed to lookup request address: missing port in address ---- PASS: TestFailHTTPFunc (0.00s) -=== RUN TestBasicNetHTTP ---- PASS: TestBasicNetHTTP (0.00s) -=== RUN TestBasicNetHTTPDefaultDeny ---- PASS: TestBasicNetHTTPDefaultDeny (0.00s) -=== RUN TestBasicNetHTTPWorkers ---- PASS: TestBasicNetHTTPWorkers (2.95s) -=== RUN TestNetFailHTTP -2026/12/12 12:13:09 failed to lookup request address: missing port in address ---- PASS: TestNetFailHTTP (0.00s) -=== RUN TestSetupNetHandlerFuncFails ---- PASS: TestSetupNetHandlerFuncFails (0.00s) -=== RUN TestSetupNetHandlerFunc ---- PASS: TestSetupNetHandlerFunc (0.00s) -=== RUN TestNetFailHTTPFunc -2026/12/12 12:13:09 failed to lookup request address: missing port in address ---- PASS: TestNetFailHTTPFunc (0.00s) -=== RUN TestHandlerFunc ---- PASS: TestHandlerFunc (0.00s) -=== RUN TestMarshalNet ---- PASS: TestMarshalNet (0.00s) -=== RUN TestMarshalNetFail ---- PASS: TestMarshalNetFail (0.00s) -=== RUN TestAdd ---- PASS: TestAdd (0.00s) -=== RUN TestRemove ---- PASS: TestRemove (0.00s) -=== RUN TestFailPermitted ---- PASS: TestFailPermitted (0.00s) -=== RUN TestBasicWhitelist ---- PASS: TestBasicWhitelist (0.00s) -=== RUN TestStubWhitelist -2026/12/12 12:13:09 WARNING: whitelisting is being stubbed -2026/12/12 12:13:09 WARNING: whitelist check for 127.0.0.1 but whitelisting is stubbed -2026/12/12 12:13:09 WARNING: IP 127.0.0.1 added to whitelist but whitelisting is stubbed -2026/12/12 12:13:09 WARNING: whitelist check for 127.0.0.1 but whitelisting is stubbed -2026/12/12 12:13:09 WARNING: IP 127.0.0.1 removed from whitelist but whitelisting is stubbed -2026/12/12 12:13:09 WARNING: whitelist check for 127.0.0.1 but whitelisting is stubbed ---- PASS: TestStubWhitelist (0.00s) -=== RUN TestMarshalHost ---- PASS: TestMarshalHost (0.00s) -=== RUN TestMarshalHostFail ---- PASS: TestMarshalHostFail (0.00s) -=== RUN TestNetConn ---- PASS: TestNetConn (0.00s) -=== RUN TestBasicDumpLoad ---- PASS: TestBasicDumpLoad (0.00s) -=== RUN TestBasicFailedLoad ---- PASS: TestBasicFailedLoad (0.00s) -=== RUN TestNetConnChecks ---- PASS: TestNetConnChecks (0.00s) -=== RUN TestHTTPRequestLookup ---- PASS: TestHTTPRequestLookup (0.00s) -=== RUN TestStubConn ---- PASS: TestStubConn (0.00s) -=== RUN TestValidIP ---- PASS: TestValidIP (0.00s) -PASS -ok github.com/cloudflare/cfssl/whitelist 3.210s -FAIL -dh_auto_test: error: cd obj-x86_64-linux-gnu && go test -vet=off -v -p 42 github.com/cloudflare/cfssl/api github.com/cloudflare/cfssl/api/bundle github.com/cloudflare/cfssl/api/certadd github.com/cloudflare/cfssl/api/certinfo github.com/cloudflare/cfssl/api/client github.com/cloudflare/cfssl/api/crl github.com/cloudflare/cfssl/api/gencrl github.com/cloudflare/cfssl/api/generator github.com/cloudflare/cfssl/api/health github.com/cloudflare/cfssl/api/info github.com/cloudflare/cfssl/api/initca github.com/cloudflare/cfssl/api/ocsp github.com/cloudflare/cfssl/api/revoke github.com/cloudflare/cfssl/api/scan github.com/cloudflare/cfssl/api/sign github.com/cloudflare/cfssl/api/signhandler github.com/cloudflare/cfssl/auth github.com/cloudflare/cfssl/bundler github.com/cloudflare/cfssl/certdb github.com/cloudflare/cfssl/certdb/dbconf github.com/cloudflare/cfssl/certdb/ocspstapling github.com/cloudflare/cfssl/certdb/sql github.com/cloudflare/cfssl/certdb/testdb github.com/cloudflare/cfssl/certinfo github.com/cloudflare/cfssl/cli github.com/cloudflare/cfssl/cli/bundle github.com/cloudflare/cfssl/cli/certinfo github.com/cloudflare/cfssl/cli/crl github.com/cloudflare/cfssl/cli/gencert github.com/cloudflare/cfssl/cli/gencrl github.com/cloudflare/cfssl/cli/gencsr github.com/cloudflare/cfssl/cli/genkey github.com/cloudflare/cfssl/cli/info github.com/cloudflare/cfssl/cli/ocspdump github.com/cloudflare/cfssl/cli/ocsprefresh github.com/cloudflare/cfssl/cli/ocspserve github.com/cloudflare/cfssl/cli/ocspsign github.com/cloudflare/cfssl/cli/printdefault github.com/cloudflare/cfssl/cli/revoke github.com/cloudflare/cfssl/cli/scan github.com/cloudflare/cfssl/cli/selfsign github.com/cloudflare/cfssl/cli/serve github.com/cloudflare/cfssl/cli/sign github.com/cloudflare/cfssl/cli/version github.com/cloudflare/cfssl/cmd/cfssl github.com/cloudflare/cfssl/cmd/cfssl-bundle github.com/cloudflare/cfssl/cmd/cfssl-certinfo github.com/cloudflare/cfssl/cmd/cfssl-newkey github.com/cloudflare/cfssl/cmd/cfssl-scan github.com/cloudflare/cfssl/cmd/cfssljson github.com/cloudflare/cfssl/cmd/mkbundle github.com/cloudflare/cfssl/cmd/multirootca github.com/cloudflare/cfssl/config github.com/cloudflare/cfssl/crl github.com/cloudflare/cfssl/crypto github.com/cloudflare/cfssl/crypto/pkcs7 github.com/cloudflare/cfssl/csr github.com/cloudflare/cfssl/errors github.com/cloudflare/cfssl/helpers github.com/cloudflare/cfssl/helpers/derhelpers github.com/cloudflare/cfssl/helpers/testsuite github.com/cloudflare/cfssl/info github.com/cloudflare/cfssl/initca github.com/cloudflare/cfssl/log github.com/cloudflare/cfssl/multiroot/config github.com/cloudflare/cfssl/ocsp github.com/cloudflare/cfssl/ocsp/config github.com/cloudflare/cfssl/ocsp/universal github.com/cloudflare/cfssl/revoke github.com/cloudflare/cfssl/scan github.com/cloudflare/cfssl/scan/crypto github.com/cloudflare/cfssl/scan/crypto/md5 github.com/cloudflare/cfssl/scan/crypto/rsa github.com/cloudflare/cfssl/scan/crypto/sha1 github.com/cloudflare/cfssl/scan/crypto/sha256 github.com/cloudflare/cfssl/scan/crypto/sha512 github.com/cloudflare/cfssl/scan/crypto/tls github.com/cloudflare/cfssl/selfsign github.com/cloudflare/cfssl/signer github.com/cloudflare/cfssl/signer/local github.com/cloudflare/cfssl/signer/remote github.com/cloudflare/cfssl/signer/universal github.com/cloudflare/cfssl/transport github.com/cloudflare/cfssl/transport/ca github.com/cloudflare/cfssl/transport/ca/localca github.com/cloudflare/cfssl/transport/core github.com/cloudflare/cfssl/transport/example/exlib github.com/cloudflare/cfssl/transport/example/maclient github.com/cloudflare/cfssl/transport/example/maserver github.com/cloudflare/cfssl/transport/kp github.com/cloudflare/cfssl/transport/roots github.com/cloudflare/cfssl/transport/roots/system github.com/cloudflare/cfssl/ubiquity github.com/cloudflare/cfssl/whitelist returned exit code 1 -make[1]: [debian/rules:11: override_dh_auto_test] Error 25 (ignored) make[1]: Leaving directory '/build/reproducible-path/golang-github-cloudflare-cfssl-1.6.5' create-stamp debian/debhelper-build-stamp dh_testroot -O--buildsystem=golang @@ -3798,8 +1527,8 @@ dh_md5sums -O--buildsystem=golang dh_builddeb -O--buildsystem=golang dpkg-deb: building package 'golang-github-cloudflare-cfssl-dev' in '../golang-github-cloudflare-cfssl-dev_1.6.5-2_all.deb'. -dpkg-deb: building package 'golang-cfssl' in '../golang-cfssl_1.6.5-2_amd64.deb'. dpkg-deb: building package 'golang-cfssl-dbgsym' in '../golang-cfssl-dbgsym_1.6.5-2_amd64.deb'. +dpkg-deb: building package 'golang-cfssl' in '../golang-cfssl_1.6.5-2_amd64.deb'. dpkg-genbuildinfo --build=binary -O../golang-github-cloudflare-cfssl_1.6.5-2_amd64.buildinfo dpkg-genchanges --build=binary -O../golang-github-cloudflare-cfssl_1.6.5-2_amd64.changes dpkg-genchanges: info: binary-only upload (no source code included) @@ -3807,12 +1536,14 @@ dpkg-buildpackage: info: binary-only upload (no source included) dpkg-genchanges: info: not including original source code in upload I: copying local configuration +I: user script /srv/workspace/pbuilder/3678060/tmp/hooks/B01_cleanup starting +I: user script /srv/workspace/pbuilder/3678060/tmp/hooks/B01_cleanup finished I: unmounting dev/ptmx filesystem I: unmounting dev/pts filesystem I: unmounting dev/shm filesystem I: unmounting proc filesystem I: unmounting sys filesystem I: cleaning the build env -I: removing directory /srv/workspace/pbuilder/722924 and its subdirectories -I: Current time: Sat Dec 12 12:23:31 -12 2026 -I: pbuilder-time-stamp: 1797121411 +I: removing directory /srv/workspace/pbuilder/3678060 and its subdirectories +I: Current time: Mon Nov 10 08:08:39 +14 2025 +I: pbuilder-time-stamp: 1762711719