openvpn::revoke on rocky-8-x86_64 with default parameters is expected to contain File[/etc/openvpn/server/test_server/easy-rsa/revoked/test_client] with ensure => "file" Failure/Error: is_expected.to contain_file("#{server_directory}/test_server/easy-rsa/revoked/test_client"). with_ensure('file') expected that the catalogue would contain File[/etc/openvpn/server/test_server/easy-rsa/revoked/test_client]

openvpn::revoke on almalinux-9-x86_64 with default parameters is expected to contain File[/etc/openvpn/server/test_server/easy-rsa/revoked/test_client] with ensure => "file" Failure/Error: is_expected.to contain_file("#{server_directory}/test_server/easy-rsa/revoked/test_client"). with_ensure('file') expected that the catalogue would contain File[/etc/openvpn/server/test_server/easy-rsa/revoked/test_client]

openvpn::revoke on almalinux-8-x86_64 with default parameters is expected to contain File[/etc/openvpn/server/test_server/easy-rsa/revoked/test_client] with ensure => "file" Failure/Error: is_expected.to contain_file("#{server_directory}/test_server/easy-rsa/revoked/test_client"). with_ensure('file') expected that the catalogue would contain File[/etc/openvpn/server/test_server/easy-rsa/revoked/test_client]

openvpn::revoke on centos-9-x86_64 with default parameters is expected to contain File[/etc/openvpn/server/test_server/easy-rsa/revoked/test_client] with ensure => "file" Failure/Error: is_expected.to contain_file("#{server_directory}/test_server/easy-rsa/revoked/test_client"). with_ensure('file') expected that the catalogue would contain File[/etc/openvpn/server/test_server/easy-rsa/revoked/test_client]

openvpn::revoke on redhat-9-x86_64 with default parameters is expected to contain File[/etc/openvpn/server/test_server/easy-rsa/revoked/test_client] with ensure => "file" Failure/Error: is_expected.to contain_file("#{server_directory}/test_server/easy-rsa/revoked/test_client"). with_ensure('file') expected that the catalogue would contain File[/etc/openvpn/server/test_server/easy-rsa/revoked/test_client]

openvpn::revoke on redhat-8-x86_64 with default parameters is expected to contain File[/etc/openvpn/server/test_server/easy-rsa/revoked/test_client] with ensure => "file" Failure/Error: is_expected.to contain_file("#{server_directory}/test_server/easy-rsa/revoked/test_client"). with_ensure('file') expected that the catalogue would contain File[/etc/openvpn/server/test_server/easy-rsa/revoked/test_client]

openvpn::revoke on debian-12-x86_64 with default parameters is expected to contain File[/etc/openvpn/server/test_server/easy-rsa/revoked/test_client] with ensure => "file" Failure/Error: is_expected.to contain_file("#{server_directory}/test_server/easy-rsa/revoked/test_client"). with_ensure('file') expected that the catalogue would contain File[/etc/openvpn/server/test_server/easy-rsa/revoked/test_client]

openvpn::revoke on debian-11-x86_64 with default parameters is expected to contain File[/etc/openvpn/server/test_server/easy-rsa/revoked/test_client] with ensure => "file" Failure/Error: is_expected.to contain_file("#{server_directory}/test_server/easy-rsa/revoked/test_client"). with_ensure('file') expected that the catalogue would contain File[/etc/openvpn/server/test_server/easy-rsa/revoked/test_client]

openvpn::revoke on ubuntu-24.04-x86_64 with default parameters is expected to contain File[/etc/openvpn/server/test_server/easy-rsa/revoked/test_client] with ensure => "file" Failure/Error: is_expected.to contain_file("#{server_directory}/test_server/easy-rsa/revoked/test_client"). with_ensure('file') expected that the catalogue would contain File[/etc/openvpn/server/test_server/easy-rsa/revoked/test_client]

openvpn::revoke on ubuntu-22.04-x86_64 with default parameters is expected to contain File[/etc/openvpn/server/test_server/easy-rsa/revoked/test_client] with ensure => "file" Failure/Error: is_expected.to contain_file("#{server_directory}/test_server/easy-rsa/revoked/test_client"). with_ensure('file') expected that the catalogue would contain File[/etc/openvpn/server/test_server/easy-rsa/revoked/test_client]

Process completed with exit code 1.

Process completed with exit code 1.

openvpn openvpn::revoke File "/etc/openvpn/server/test_openvpn_server/crl.pem" content is expected to match /vpnclientb/ Failure/Error: its(:content) { is_expected.to match(%r{vpnclientb}) } expected "-----BEGIN X509 CRL-----\nMIIC0jCCAboCAQEwDQYJKoZIhvcNAQENBQAwgYwxCzAJBgNVBAYTAkNPMQswCQYD\nVQQIDAJT...HEkG1tjbeg6AaUoJRq8svl6p6VBJJkSsuQZLG2dT3H9tOaNWY7cB3UCnbt+Yzin\n55Djfdkw\n-----END X509 CRL-----\n" to match /vpnclientb/ Diff: @@ -1 +1,18 @@ -/vpnclientb/ +-----BEGIN X509 CRL----- +MIIC0jCCAboCAQEwDQYJKoZIhvcNAQENBQAwgYwxCzAJBgNVBAYTAkNPMQswCQYD +VQQIDAJTVDEPMA0GA1UEBwwGQSBjaXR5MQwwCgYDVQQKDANGT08xHzAdBgNVBAsM +Fk15IE9yZ2FuaXphdGlvbmFsIFVuaXQxFDASBgNVBAMMC0Vhc3ktUlNBIENBMRow +GAYJKoZIhvcNAQkBFgtiYXJAZm9vLm9yZxcNMjUxMDAxMTY1MzAxWhcNMjUxMDMx +MTY1MzAxWjAkMCICEQDSEwPjX2YCG4l8WQRl5OPtFw0yNTEwMDExNjUzMDFaoIHS +MIHPMIHMBgNVHSMEgcQwgcGAFPU5oNvejTdtpkuwKWg0sOyC50nuoYGSpIGPMIGM +MQswCQYDVQQGEwJDTzELMAkGA1UECAwCU1QxDzANBgNVBAcMBkEgY2l0eTEMMAoG +A1UECgwDRk9PMR8wHQYDVQQLDBZNeSBPcmdhbml6YXRpb25hbCBVbml0MRQwEgYD +VQQDDAtFYXN5LVJTQSBDQTEaMBgGCSqGSIb3DQEJARYLYmFyQGZvby5vcmeCFE9y +N4uVq4dPd8jhy5cKqiBYivWUMA0GCSqGSIb3DQEBDQUAA4IBAQBoDTtQHElXxEkb +wGvyObeJKO5SbLKZlR9kgH9x+4f2JB4hhwqfpdSAbngA3DqHbHFMaAHaEQXjeq7p +W4Bv4WaemCXo6sbE+WQ17JsMLRokRTg2SgOaQ/nerCYAzMtWcFMFAaXMu4kcM9NL +Gqpw1JQINvBT5cZkKWcsjPryn6iyj9DsYlZrBLjXOADlFFAnHZaZ0zx2WxBvxjw+ +tiVIhM+7IZ0zraMxaH7g69P5WTQxqDNFeoZo5zNZ1tgNiKnE3IVeNAReHLIlgAGM +gHEkG1tjbeg6AaUoJRq8svl6p6VBJJkSsuQZLG2dT3H9tOaNWY7cB3UCnbt+Yzin +55Djfdkw +-----END X509 CRL-----

openvpn openvpn::revoke revokes a client certificate Failure/Error: apply_manifest_on(hosts_as('master'), pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165258971.wD1nuD.pp Last 10 lines of output were: journalctl log for openvpn: -- No entries -- �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[revoke certificate for vpnclientb in context of test_openvpn_server]/returns: executed successfully Info: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[revoke certificate for vpnclientb in context of test_openvpn_server]: Scheduling refresh of Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb]: Triggered 'refresh' from 1 event Info: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb]: Scheduling refresh of Exec[copy renewed crl.pem to test_openvpn_server keys directory because of revocation of vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[copy renewed crl.pem to test_openvpn_server keys directory because of revocation of vpnclientb]: Triggered 'refresh' from 1 event Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 0.50 seconds

openvpn openvpn::client behaves like an idempotent resource applies a second time without changes Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 4 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165255936.J08JSV.pp Last 10 lines of output were: Info: Applying configuration version '1759337577' Error: Systemd start for openvpn failed! journalctl log for openvpn: -- No entries -- Error: /Stage[main]/Openvpn::Service/Service[openvpn]/ensure: change from 'stopped' to 'running' failed: Systemd start for openvpn failed! journalctl log for openvpn: -- No entries -- �[mNotice: Applied catalog in 0.33 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:59

openvpn openvpn::client behaves like an idempotent resource applies with no errors Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165252887.E3QcKu.pp Last 10 lines of output were: �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclienta]/Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.ovpn]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.ovpn]/ensure: defined content as '{sha256}b086eb74bb8d38c5b1278abed404cc8d794a522ba0d5c15579676ff9f0b7991a' Info: Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.ovpn]: Scheduling refresh of Exec[tar the thing test_openvpn_server with vpnclienta] �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclienta]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.tblk/vpnclienta.ovpn]/ensure: created �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclienta]/Exec[tar the thing test_openvpn_server with vpnclienta]: Triggered 'refresh' from 1 event �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]/ensure: defined content as '{sha256}a342f6dab0dfed9a98e54edbe4c8c7a126b433bcef6f7375f12746cb20e9eb2a' Info: Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]: Scheduling refresh of Exec[tar the thing test_openvpn_server with vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.tblk/vpnclientb.ovpn]/ensure: created �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/Exec[tar the thing test_openvpn_server with vpnclientb]: Triggered 'refresh' from 1 event Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 0.74 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:59

openvpn openvpn::server with minimal parameters behaves like an idempotent resource applies a second time without changes Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 4 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165249184.xdoguz.pp Last 10 lines of output were: Info: Applying configuration version '1759337571' Error: Systemd start for openvpn failed! journalctl log for openvpn: -- No entries -- Error: /Stage[main]/Openvpn::Service/Service[openvpn]/ensure: change from 'stopped' to 'running' failed: Systemd start for openvpn failed! journalctl log for openvpn: -- No entries -- �[mNotice: Applied catalog in 0.23 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:8

openvpn openvpn::server with minimal parameters behaves like an idempotent resource applies with no errors Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165238506.15HCD4.pp Last 10 lines of output were: �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/easy-rsa/keys/ca.crt]/mode: mode changed '0600' to '0640' �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/Exec[create crl.pem on test_openvpn_server]/returns: executed successfully �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/Exec[copy created crl.pem to test_openvpn_server keys directory]/returns: executed successfully �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/keys]/ensure: created �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/crl.pem]/group: group changed 'root' to 'nobody' �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/crl.pem]/mode: mode changed '0600' to '0640' �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Service[openvpn-server@test_openvpn_server]/ensure: ensure changed 'stopped' to 'running' Info: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Service[openvpn-server@test_openvpn_server]: Unscheduling refresh on Service[openvpn-server@test_openvpn_server] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 8.30 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:8

Process completed with exit code 1.

openvpn openvpn::revoke File "/etc/openvpn/server/test_openvpn_server/crl.pem" content is expected to match /vpnclientb/ Failure/Error: its(:content) { is_expected.to match(%r{vpnclientb}) } expected "-----BEGIN X509 CRL-----\nMIIC8DCCAdgCAQEwDQYJKoZIhvcNAQENBQAwgYkxCzAJBgNVBAYTAkNPMQswCQYD\nVQQIDAJT...Yt5e8hqvf9yCgEisMPgT5eE\nhLePA+DBss8efT1kuo9fys6AM8/czdF6sV2TpUUsGiyrp1G6\n-----END X509 CRL-----\n" to match /vpnclientb/ Diff: @@ -1 +1,18 @@ -/vpnclientb/ +-----BEGIN X509 CRL----- +MIIC8DCCAdgCAQEwDQYJKoZIhvcNAQENBQAwgYkxCzAJBgNVBAYTAkNPMQswCQYD +VQQIDAJTVDEPMA0GA1UEBwwGQSBjaXR5MQwwCgYDVQQKDANGT08xHzAdBgNVBAsM +Fk15IE9yZ2FuaXphdGlvbmFsIFVuaXQxETAPBgNVBAMMCENoYW5nZU1lMRowGAYJ +KoZIhvcNAQkBFgtiYXJAZm9vLm9yZxcNMjUxMDAxMTY1MzAzWhcNMjUxMDMxMTY1 +MzAzWjBIMCICEQCq47w+nc6+rMCJSx7GegDpFw0yNTEwMDExNjUzMDNaMCICEQCy +SJAiNlTENF6oZ9lyCWFWFw0yNTEwMDExNjUzMDBaoIHPMIHMMIHJBgNVHSMEgcEw +gb6AFAqgjZ0IOJoWbx1Apq2IKeesvPY4oYGPpIGMMIGJMQswCQYDVQQGEwJDTzEL +MAkGA1UECAwCU1QxDzANBgNVBAcMBkEgY2l0eTEMMAoGA1UECgwDRk9PMR8wHQYD +VQQLDBZNeSBPcmdhbml6YXRpb25hbCBVbml0MREwDwYDVQQDDAhDaGFuZ2VNZTEa +MBgGCSqGSIb3DQEJARYLYmFyQGZvby5vcmeCFAOdX52layWDwvvFQBpCsMJPHpOc +MA0GCSqGSIb3DQEBDQUAA4IBAQCE9EtOFHljxNxkeRXNA+KVTHw8Anhn2w4j6GIp +KQS9dtJczmAL+MGkDZwri0qeWW4od18pO1X3nobQIaeTzs8Itw84FNnWids1nZu4 +YrZoewT7D4Yj1PxmBDCvAj5eF358V9PBcyQ1z8pNR5ggSw6GiIZaTBAXCTb9fDHp +OVpuilnjCo7TEDGhHAM2CfmWCaS6S4uqBIJBA69kGA0WwA52XTtLq/F+9uMt8cMu +kQabl9qdbX300me711DqMfSFeYpUZxwtEYTFLRvJcYt5e8hqvf9yCgEisMPgT5eE +hLePA+DBss8efT1kuo9fys6AM8/czdF6sV2TpUUsGiyrp1G6 +-----END X509 CRL-----

openvpn openvpn::revoke revokes a client certificate Failure/Error: apply_manifest_on(hosts_as('master'), pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165300714.95IM1k.pp Last 10 lines of output were: Info: /Stage[main]/Main/Openvpn::Client[vpnclientb]/Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]: Filebucketed /etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn to puppet with sum 839ee27dffb6003bafd5c81a9dd796c38c910096fb21a7f8fee994ba8a1156e8 �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]/content: content changed '{sha256}839ee27dffb6003bafd5c81a9dd796c38c910096fb21a7f8fee994ba8a1156e8' to '{sha256}a15bdf1499bc88b2991b030280b842a3176de3b0ccfc9a080c4066ef12bd7d65' Info: Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]: Scheduling refresh of Exec[tar the thing test_openvpn_server with vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/Exec[tar the thing test_openvpn_server with vpnclientb]: Triggered 'refresh' from 1 event �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[revoke certificate for vpnclientb in context of test_openvpn_server]/returns: executed successfully Info: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[revoke certificate for vpnclientb in context of test_openvpn_server]: Scheduling refresh of Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb]: Triggered 'refresh' from 1 event Info: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb]: Scheduling refresh of Exec[copy renewed crl.pem to test_openvpn_server keys directory because of revocation of vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[copy renewed crl.pem to test_openvpn_server keys directory because of revocation of vpnclientb]: Triggered 'refresh' from 1 event �[mNotice: Applied catalog in 0.86 seconds

Process completed with exit code 1.

openvpn openvpn::revoke File "/etc/openvpn/server/test_openvpn_server/crl.pem" content is expected to match /vpnclientb/ Failure/Error: its(:content) { is_expected.to match(%r{vpnclientb}) } expected "-----BEGIN X509 CRL-----\nMIIC7zCCAdcCAQEwDQYJKoZIhvcNAQENBQAwgYkxCzAJBgNVBAYTAkNPMQswCQYD\nVQQIDAJT...HxSX8wwyxjioKXsfCFB2G2T\nUlVyel38K7AbCgwuL0GoEl6dVrgYrw3rQqaExjnBynzeDJM=\n-----END X509 CRL-----\n" to match /vpnclientb/ Diff: @@ -1 +1,18 @@ -/vpnclientb/ +-----BEGIN X509 CRL----- +MIIC7zCCAdcCAQEwDQYJKoZIhvcNAQENBQAwgYkxCzAJBgNVBAYTAkNPMQswCQYD +VQQIDAJTVDEPMA0GA1UEBwwGQSBjaXR5MQwwCgYDVQQKDANGT08xHzAdBgNVBAsM +Fk15IE9yZ2FuaXphdGlvbmFsIFVuaXQxETAPBgNVBAMMCENoYW5nZU1lMRowGAYJ +KoZIhvcNAQkBFgtiYXJAZm9vLm9yZxcNMjUxMDAxMTY1MzA1WhcNMjUxMDMxMTY1 +MzA1WjBHMCECEHItcCtaa/QP8MH4ktHubs0XDTI1MTAwMTE2NTMwMlowIgIRANKs +yzjQjFdkiFD6grvrGecXDTI1MTAwMTE2NTMwNVqggc8wgcwwgckGA1UdIwSBwTCB +voAUj0kutsnA2hadVqdeQZguU30XXzWhgY+kgYwwgYkxCzAJBgNVBAYTAkNPMQsw +CQYDVQQIDAJTVDEPMA0GA1UEBwwGQSBjaXR5MQwwCgYDVQQKDANGT08xHzAdBgNV +BAsMFk15IE9yZ2FuaXphdGlvbmFsIFVuaXQxETAPBgNVBAMMCENoYW5nZU1lMRow +GAYJKoZIhvcNAQkBFgtiYXJAZm9vLm9yZ4IUGkgAH4C9AomxguqLPa/Hyk4ikLAw +DQYJKoZIhvcNAQENBQADggEBADUPdYFUSTP99T9Lp+H9sxeKFHbzhzFbWNTtLyWO +V4GDgB/fx3mqSDmWE4PCJOMQp4DHTOn28/W6xgH8qaTYu5GFLqCABdR5uaR8u0jc +W3/2bGn8g0KXsLAyR3iMbo/xIuM+lBgfrcCq/46RMvZb9PSooGDXmS9cVBan0fAK +IIlQHBZkgMqBGecCE4rS4P3qPDD21SRNMs1L/VZl/jSN91js2rcCjKEZc6drbrbI +tppFHnAJMEFlcwgH1X1JlXoYX90GL/fu8t7/DnML1HxSX8wwyxjioKXsfCFB2G2T +UlVyel38K7AbCgwuL0GoEl6dVrgYrw3rQqaExjnBynzeDJM= +-----END X509 CRL-----

openvpn openvpn::revoke revokes a client certificate Failure/Error: apply_manifest_on(hosts_as('master'), pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165302288.dqy1QX.pp Last 10 lines of output were: Info: /Stage[main]/Main/Openvpn::Client[vpnclientb]/Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]: Filebucketed /etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn to puppet with sum 9b4200e36cde2964a1677d46e5c3cb4af7abdc627244e81c1acdfc903d5da527 �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]/content: content changed '{sha256}9b4200e36cde2964a1677d46e5c3cb4af7abdc627244e81c1acdfc903d5da527' to '{sha256}fdcec90ce23a3a94316d25d54485988f4b9781d76d9b2db6e9107087a34cb325' Info: Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]: Scheduling refresh of Exec[tar the thing test_openvpn_server with vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/Exec[tar the thing test_openvpn_server with vpnclientb]: Triggered 'refresh' from 1 event �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[revoke certificate for vpnclientb in context of test_openvpn_server]/returns: executed successfully Info: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[revoke certificate for vpnclientb in context of test_openvpn_server]: Scheduling refresh of Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb]: Triggered 'refresh' from 1 event Info: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb]: Scheduling refresh of Exec[copy renewed crl.pem to test_openvpn_server keys directory because of revocation of vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[copy renewed crl.pem to test_openvpn_server keys directory because of revocation of vpnclientb]: Triggered 'refresh' from 1 event �[mNotice: Applied catalog in 1.54 seconds

Process completed with exit code 1.

openvpn openvpn::revoke File "/etc/openvpn/server/test_openvpn_server/crl.pem" content is expected to match /vpnclientb/ Failure/Error: its(:content) { is_expected.to match(%r{vpnclientb}) } expected "-----BEGIN X509 CRL-----\nMIIC0jCCAboCAQEwDQYJKoZIhvcNAQENBQAwgYwxCzAJBgNVBAYTAkNPMQswCQYD\nVQQIDAJT...PiV9BITBwz6/P3xwr18xDBOyI3opc2E26HjlAvqphF1rWch/vkI86Bd8u6a/z5N\nsVNCSfBo\n-----END X509 CRL-----\n" to match /vpnclientb/ Diff: @@ -1 +1,18 @@ -/vpnclientb/ +-----BEGIN X509 CRL----- +MIIC0jCCAboCAQEwDQYJKoZIhvcNAQENBQAwgYwxCzAJBgNVBAYTAkNPMQswCQYD +VQQIDAJTVDEPMA0GA1UEBwwGQSBjaXR5MQwwCgYDVQQKDANGT08xHzAdBgNVBAsM +Fk15IE9yZ2FuaXphdGlvbmFsIFVuaXQxFDASBgNVBAMMC0Vhc3ktUlNBIENBMRow +GAYJKoZIhvcNAQkBFgtiYXJAZm9vLm9yZxcNMjUxMDAxMTY1MzExWhcNMjUxMDMx +MTY1MzExWjAkMCICEQDRypubOJu1wuG/4ZbibACqFw0yNTEwMDExNjUzMTFaoIHS +MIHPMIHMBgNVHSMEgcQwgcGAFCoCNxX889AhW7BcDPmeKnXcuzTqoYGSpIGPMIGM +MQswCQYDVQQGEwJDTzELMAkGA1UECAwCU1QxDzANBgNVBAcMBkEgY2l0eTEMMAoG +A1UECgwDRk9PMR8wHQYDVQQLDBZNeSBPcmdhbml6YXRpb25hbCBVbml0MRQwEgYD +VQQDDAtFYXN5LVJTQSBDQTEaMBgGCSqGSIb3DQEJARYLYmFyQGZvby5vcmeCFB/o +MbQeddY+GsoaHABr56SMHHlWMA0GCSqGSIb3DQEBDQUAA4IBAQA5JhwqFH1djUDq +0HLcYDHxyKOeZwQoS8nAIiMj+uGOz3ScI+A1E0urAgy1+Qyv6SQ+AB/47BWJRBnB +J6rLCmMuxsTD2OqygVpHt1zwmQ7J+ZFi3qXrjffqnYlPCOw7TX88z7zSsS9bD9Sm +q9N7YzMj15X38ithfF3SARuQ2HgHsqc1E3oWj9xZXozlEEoiN/964JnXYWLUKlGa +A/GchotG3Ve2Q0QdBpBEPFXf8ERgbiWAk5tDDVsaWTXnFpmHoM4HBk4TPdJCFxIy +7PiV9BITBwz6/P3xwr18xDBOyI3opc2E26HjlAvqphF1rWch/vkI86Bd8u6a/z5N +sVNCSfBo +-----END X509 CRL-----

openvpn openvpn::revoke revokes a client certificate Failure/Error: apply_manifest_on(hosts_as('master'), pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165309527.MDecGx.pp Last 10 lines of output were: journalctl log for openvpn: -- No entries -- �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[revoke certificate for vpnclientb in context of test_openvpn_server]/returns: executed successfully Info: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[revoke certificate for vpnclientb in context of test_openvpn_server]: Scheduling refresh of Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb]: Triggered 'refresh' from 1 event Info: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb]: Scheduling refresh of Exec[copy renewed crl.pem to test_openvpn_server keys directory because of revocation of vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[copy renewed crl.pem to test_openvpn_server keys directory because of revocation of vpnclientb]: Triggered 'refresh' from 1 event Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 0.43 seconds

openvpn openvpn::client behaves like an idempotent resource applies a second time without changes Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 4 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165306959.yX0Vi4.pp Last 10 lines of output were: Info: Applying configuration version '1759337588' Error: Systemd start for openvpn failed! journalctl log for openvpn: -- No entries -- Error: /Stage[main]/Openvpn::Service/Service[openvpn]/ensure: change from 'stopped' to 'running' failed: Systemd start for openvpn failed! journalctl log for openvpn: -- No entries -- �[mNotice: Applied catalog in 0.28 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:59

openvpn openvpn::client behaves like an idempotent resource applies with no errors Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165304251.vVdIuQ.pp Last 10 lines of output were: �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclienta]/Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.ovpn]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.ovpn]/ensure: defined content as '{sha256}b3543f4e6c463c16edf73c5f55d84f910a0cd3f81acdb2a30b1587fab8d0f71a' Info: Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.ovpn]: Scheduling refresh of Exec[tar the thing test_openvpn_server with vpnclienta] �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclienta]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.tblk/vpnclienta.ovpn]/ensure: created �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclienta]/Exec[tar the thing test_openvpn_server with vpnclienta]: Triggered 'refresh' from 1 event �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]/ensure: defined content as '{sha256}39476427c10f1778d39469dadb5d57ec527d3033bcd6a83eadb98dde51a4b4a7' Info: Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]: Scheduling refresh of Exec[tar the thing test_openvpn_server with vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.tblk/vpnclientb.ovpn]/ensure: created �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/Exec[tar the thing test_openvpn_server with vpnclientb]: Triggered 'refresh' from 1 event Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 0.73 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:59

openvpn openvpn::server with minimal parameters behaves like an idempotent resource applies a second time without changes Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 4 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165301114.keiBqb.pp Last 10 lines of output were: Info: Applying configuration version '1759337582' Error: Systemd start for openvpn failed! journalctl log for openvpn: -- No entries -- Error: /Stage[main]/Openvpn::Service/Service[openvpn]/ensure: change from 'stopped' to 'running' failed: Systemd start for openvpn failed! journalctl log for openvpn: -- No entries -- �[mNotice: Applied catalog in 0.24 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:8

openvpn openvpn::server with minimal parameters behaves like an idempotent resource applies with no errors Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165254376.fiEJL2.pp Last 10 lines of output were: �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/easy-rsa/keys/ca.crt]/mode: mode changed '0600' to '0640' �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/Exec[create crl.pem on test_openvpn_server]/returns: executed successfully �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/Exec[copy created crl.pem to test_openvpn_server keys directory]/returns: executed successfully �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/keys]/ensure: created �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/crl.pem]/group: group changed 'root' to 'nobody' �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/crl.pem]/mode: mode changed '0600' to '0640' �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Service[openvpn-server@test_openvpn_server]/ensure: ensure changed 'stopped' to 'running' Info: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Service[openvpn-server@test_openvpn_server]: Unscheduling refresh on Service[openvpn-server@test_openvpn_server] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 4.73 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:8

Process completed with exit code 1.

openvpn openvpn::revoke File "/etc/openvpn/server/test_openvpn_server/crl.pem" content is expected to match /vpnclientb/ Failure/Error: its(:content) { is_expected.to match(%r{vpnclientb}) } expected "-----BEGIN X509 CRL-----\nMIIC0jCCAboCAQEwDQYJKoZIhvcNAQENBQAwgYwxCzAJBgNVBAYTAkNPMQswCQYD\nVQQIDAJT...VXAczsIoP/q9j7b+2eRiEXUykNZjRXexoNUqfvr6POLfromZp3ygFpOSKGftbkN\nXkaCmn+5\n-----END X509 CRL-----\n" to match /vpnclientb/ Diff: @@ -1 +1,18 @@ -/vpnclientb/ +-----BEGIN X509 CRL----- +MIIC0jCCAboCAQEwDQYJKoZIhvcNAQENBQAwgYwxCzAJBgNVBAYTAkNPMQswCQYD +VQQIDAJTVDEPMA0GA1UEBwwGQSBjaXR5MQwwCgYDVQQKDANGT08xHzAdBgNVBAsM +Fk15IE9yZ2FuaXphdGlvbmFsIFVuaXQxFDASBgNVBAMMC0Vhc3ktUlNBIENBMRow +GAYJKoZIhvcNAQkBFgtiYXJAZm9vLm9yZxcNMjUxMDAxMTY1MzE4WhcNMjUxMDMx +MTY1MzE4WjAkMCICEQDGp0fXAJJzVe3dPn4TZ6aGFw0yNTEwMDExNjUzMThaoIHS +MIHPMIHMBgNVHSMEgcQwgcGAFLUzesTsnvGlkqLSZ0XfLD8Eb3amoYGSpIGPMIGM +MQswCQYDVQQGEwJDTzELMAkGA1UECAwCU1QxDzANBgNVBAcMBkEgY2l0eTEMMAoG +A1UECgwDRk9PMR8wHQYDVQQLDBZNeSBPcmdhbml6YXRpb25hbCBVbml0MRQwEgYD +VQQDDAtFYXN5LVJTQSBDQTEaMBgGCSqGSIb3DQEJARYLYmFyQGZvby5vcmeCFCeg +QYzkHzZ8lhXS6hIT/RkcVsKMMA0GCSqGSIb3DQEBDQUAA4IBAQBt92LOYNcxdfmt +0a/Lf1tsfw9bMNeCSBLzTa7iX3ZnMqAjWtu0N7zF0qd6IAGndsGGUphT2z0cly84 +r+VFsbsUt1/86a2cj4LzkDPAt+jGSTflGAV5jP6gUoix1A/n4ZYc1wY0LbMenD7c +60QqHgWPwRl7/hFmF3jEIq9RHCdScdE2QMSoX6ow2iXhHpFMT0g4B01AoByf7gXs +6ItNMhix1xJ6qkFI47TexvmKMRX/qnHPi14zJT8al8bbHAT4X72ZPOWqzmDmJiOv +DVXAczsIoP/q9j7b+2eRiEXUykNZjRXexoNUqfvr6POLfromZp3ygFpOSKGftbkN +XkaCmn+5 +-----END X509 CRL-----

openvpn openvpn::revoke revokes a client certificate Failure/Error: apply_manifest_on(hosts_as('master'), pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165316090.MxGyZj.pp Last 10 lines of output were: journalctl log for openvpn: -- No entries -- �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[revoke certificate for vpnclientb in context of test_openvpn_server]/returns: executed successfully Info: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[revoke certificate for vpnclientb in context of test_openvpn_server]: Scheduling refresh of Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb]: Triggered 'refresh' from 1 event Info: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb]: Scheduling refresh of Exec[copy renewed crl.pem to test_openvpn_server keys directory because of revocation of vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[copy renewed crl.pem to test_openvpn_server keys directory because of revocation of vpnclientb]: Triggered 'refresh' from 1 event Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 0.50 seconds

openvpn openvpn::client behaves like an idempotent resource applies a second time without changes Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 4 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165313229.wNw3oA.pp Last 10 lines of output were: Info: Applying configuration version '1759337595' Error: Systemd start for openvpn failed! journalctl log for openvpn: -- No entries -- Error: /Stage[main]/Openvpn::Service/Service[openvpn]/ensure: change from 'stopped' to 'running' failed: Systemd start for openvpn failed! journalctl log for openvpn: -- No entries -- �[mNotice: Applied catalog in 0.35 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:59

openvpn openvpn::client behaves like an idempotent resource applies with no errors Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165310274.9MdAM7.pp Last 10 lines of output were: �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclienta]/Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.ovpn]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.ovpn]/ensure: defined content as '{sha256}81e4205f45962e87024b5b6b378d9edbf8ba39c2636db830984d272f9025bf8f' Info: Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.ovpn]: Scheduling refresh of Exec[tar the thing test_openvpn_server with vpnclienta] �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclienta]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.tblk/vpnclienta.ovpn]/ensure: created �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclienta]/Exec[tar the thing test_openvpn_server with vpnclienta]: Triggered 'refresh' from 1 event �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]/ensure: defined content as '{sha256}7313b34501beb7119efa6678623826cc7a810a9e0103a1b36a1bbc991b09bac0' Info: Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]: Scheduling refresh of Exec[tar the thing test_openvpn_server with vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.tblk/vpnclientb.ovpn]/ensure: created �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/Exec[tar the thing test_openvpn_server with vpnclientb]: Triggered 'refresh' from 1 event Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 0.76 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:59

openvpn openvpn::server with minimal parameters behaves like an idempotent resource applies a second time without changes Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 4 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165306799.Dr8hQw.pp Last 10 lines of output were: Info: Applying configuration version '1759337588' Error: Systemd start for openvpn failed! journalctl log for openvpn: -- No entries -- Error: /Stage[main]/Openvpn::Service/Service[openvpn]/ensure: change from 'stopped' to 'running' failed: Systemd start for openvpn failed! journalctl log for openvpn: -- No entries -- �[mNotice: Applied catalog in 0.27 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:8

openvpn openvpn::server with minimal parameters behaves like an idempotent resource applies with no errors Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165248573.7Y6l2q.pp Last 10 lines of output were: �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/easy-rsa/keys/ca.crt]/mode: mode changed '0600' to '0640' �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/Exec[create crl.pem on test_openvpn_server]/returns: executed successfully �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/Exec[copy created crl.pem to test_openvpn_server keys directory]/returns: executed successfully �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/keys]/ensure: created �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/crl.pem]/group: group changed 'root' to 'nobody' �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/crl.pem]/mode: mode changed '0600' to '0640' �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Service[openvpn-server@test_openvpn_server]/ensure: ensure changed 'stopped' to 'running' Info: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Service[openvpn-server@test_openvpn_server]: Unscheduling refresh on Service[openvpn-server@test_openvpn_server] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 16.03 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:8

Process completed with exit code 1.

openvpn openvpn::revoke File "/etc/openvpn/server/test_openvpn_server/crl.pem" content is expected to match /vpnclientb/ Failure/Error: its(:content) { is_expected.to match(%r{vpnclientb}) } expected "-----BEGIN X509 CRL-----\nMIIC9TCCAd0CAQEwDQYJKoZIhvcNAQENBQAwgYwxCzAJBgNVBAYTAkNPMQswCQYD\nVQQIDAJT...Pmj7NQVNGIUIrbC\nV73D3kCtGS+tmd+L47yQZdjfEBPlQhGtbxUYJAL8dqGr26zpbbVBex4=\n-----END X509 CRL-----\n" to match /vpnclientb/ Diff: @@ -1 +1,18 @@ -/vpnclientb/ +-----BEGIN X509 CRL----- +MIIC9TCCAd0CAQEwDQYJKoZIhvcNAQENBQAwgYwxCzAJBgNVBAYTAkNPMQswCQYD +VQQIDAJTVDEPMA0GA1UEBwwGQSBjaXR5MQwwCgYDVQQKDANGT08xHzAdBgNVBAsM +Fk15IE9yZ2FuaXphdGlvbmFsIFVuaXQxFDASBgNVBAMMC0Vhc3ktUlNBIENBMRow +GAYJKoZIhvcNAQkBFgtiYXJAZm9vLm9yZxcNMjUxMDAxMTY1MzIyWhcNMjUxMDMx +MTY1MzIyWjBHMCECEHS8H1xVoicL7nchSFGuKlMXDTI1MTAwMTE2NTMxOFowIgIR +ANn+nlGQYSDwW/eK+7ju1KoXDTI1MTAwMTE2NTMyMlqggdIwgc8wgcwGA1UdIwSB +xDCBwYAUv6+KUfbO4Bg3bxREtThuWbqC7umhgZKkgY8wgYwxCzAJBgNVBAYTAkNP +MQswCQYDVQQIDAJTVDEPMA0GA1UEBwwGQSBjaXR5MQwwCgYDVQQKDANGT08xHzAd +BgNVBAsMFk15IE9yZ2FuaXphdGlvbmFsIFVuaXQxFDASBgNVBAMMC0Vhc3ktUlNB +IENBMRowGAYJKoZIhvcNAQkBFgtiYXJAZm9vLm9yZ4IUEKRzAXNEYHSLHD2HAedc +ZBS6Br0wDQYJKoZIhvcNAQENBQADggEBAHqHjF6y45niIRUA/LOELHR4AG/J4Nv6 +2QXNJf/QnW1QI6i7lBYJP2csQvkPn8QHMwdB4DVHGZOQVCLbH8WQpcZzye7mfgXx +gYUUZhxaGBXk2MVoW2JD1f2a9Jq6GW3ZgrbIHj738h3YTYRmMXH6JOdAktHue47h +AI7x1bcyoaZestFwvMEo5UNG+cji2s3MqqGf6qqUsOJaUXGwbxML22a+bBwI29Zw +cFzSnaFBjbyLOcA+r2kh1Gg/cH6/h0wSEJQCrFm8HeAoaAC/kPmj7NQVNGIUIrbC +V73D3kCtGS+tmd+L47yQZdjfEBPlQhGtbxUYJAL8dqGr26zpbbVBex4= +-----END X509 CRL-----

openvpn openvpn::revoke revokes a client certificate Failure/Error: apply_manifest_on(hosts_as('master'), pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165318480.wj9BFU.pp Last 10 lines of output were: Info: /Stage[main]/Main/Openvpn::Client[vpnclientb]/Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]: Filebucketed /etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn to puppet with sum 0f84ade5d9339b70628432e66152cb1bb516a393445982459b5fb77bc2a788fd �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]/content: content changed '{sha256}0f84ade5d9339b70628432e66152cb1bb516a393445982459b5fb77bc2a788fd' to '{sha256}ce81bffea30a0ce30eb40ffb364f682af06deac49e5010399f9761ed2c5b789d' Info: Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]: Scheduling refresh of Exec[tar the thing test_openvpn_server with vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/Exec[tar the thing test_openvpn_server with vpnclientb]: Triggered 'refresh' from 1 event �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[revoke certificate for vpnclientb in context of test_openvpn_server]/returns: executed successfully Info: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[revoke certificate for vpnclientb in context of test_openvpn_server]: Scheduling refresh of Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb]: Triggered 'refresh' from 1 event Info: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb]: Scheduling refresh of Exec[copy renewed crl.pem to test_openvpn_server keys directory because of revocation of vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[copy renewed crl.pem to test_openvpn_server keys directory because of revocation of vpnclientb]: Triggered 'refresh' from 1 event �[mNotice: Applied catalog in 1.59 seconds

Process completed with exit code 1.

openvpn openvpn::revoke File "/etc/openvpn/server/test_openvpn_server/crl.pem" content is expected to match /vpnclientb/ Failure/Error: its(:content) { is_expected.to match(%r{vpnclientb}) } expected "-----BEGIN X509 CRL-----\nMIIC0TCCAbkCAQEwDQYJKoZIhvcNAQENBQAwgYwxCzAJBgNVBAYTAkNPMQswCQYD\nVQQIDAJT...EZRtLOB2s/XkJZitsj+f75sPmRgzEQvuPwspkYrTngRGIwB1gGO9WIW1d3PQE0u\nv18X8fg=\n-----END X509 CRL-----\n" to match /vpnclientb/ Diff: @@ -1 +1,18 @@ -/vpnclientb/ +-----BEGIN X509 CRL----- +MIIC0TCCAbkCAQEwDQYJKoZIhvcNAQENBQAwgYwxCzAJBgNVBAYTAkNPMQswCQYD +VQQIDAJTVDEPMA0GA1UEBwwGQSBjaXR5MQwwCgYDVQQKDANGT08xHzAdBgNVBAsM +Fk15IE9yZ2FuaXphdGlvbmFsIFVuaXQxFDASBgNVBAMMC0Vhc3ktUlNBIENBMRow +GAYJKoZIhvcNAQkBFgtiYXJAZm9vLm9yZxcNMjUxMDAxMTY1MzQwWhcNMjUxMDMx +MTY1MzQwWjAjMCECEGIMB1+b8WPsfJnNl3LzhfgXDTI1MTAwMTE2NTM0MFqggdIw +gc8wgcwGA1UdIwSBxDCBwYAU8rG5nZsDZJRLHZOuFmTQalXWhXWhgZKkgY8wgYwx +CzAJBgNVBAYTAkNPMQswCQYDVQQIDAJTVDEPMA0GA1UEBwwGQSBjaXR5MQwwCgYD +VQQKDANGT08xHzAdBgNVBAsMFk15IE9yZ2FuaXphdGlvbmFsIFVuaXQxFDASBgNV +BAMMC0Vhc3ktUlNBIENBMRowGAYJKoZIhvcNAQkBFgtiYXJAZm9vLm9yZ4IUN4Bc +sOktbD0O6Ef6O33CKKFzxb0wDQYJKoZIhvcNAQENBQADggEBABmb0F8l4eOASk8j +6/JLJU7jRbBwuQwKLhVox2V2b2P/uu+5UMUcF8XdIdPDBu9LUgE6FnGZXPdEXDQ6 +vYwZNkXTQRXQ3deCX/Ew1apkNWZAOLJhQHfBol2wM3/EfjRcPrQ6/tC2dRWf8uXb +QUkWuBWnXxwnuu0kkwo12YDwfoywhGaX/kZ7cApYDTR3/cvwpQomR6TL9ldMkHAt +tVQR4Cjs8iT242NDV7MUsRPURQuIVudCt3a5W4zPkE9tV1T+aRJ9JM0u6u+2SjOx +WEZRtLOB2s/XkJZitsj+f75sPmRgzEQvuPwspkYrTngRGIwB1gGO9WIW1d3PQE0u +v18X8fg= +-----END X509 CRL-----

openvpn openvpn::revoke revokes a client certificate Failure/Error: apply_manifest_on(hosts_as('master'), pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165337814.yB2DgR.pp Last 10 lines of output were: -- Logs begin at Wed 2025-10-01 16:51:51 UTC, end at Wed 2025-10-01 16:53:40 UTC. -- -- No entries -- �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[revoke certificate for vpnclientb in context of test_openvpn_server]/returns: executed successfully Info: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[revoke certificate for vpnclientb in context of test_openvpn_server]: Scheduling refresh of Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb]: Triggered 'refresh' from 1 event Info: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb]: Scheduling refresh of Exec[copy renewed crl.pem to test_openvpn_server keys directory because of revocation of vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[copy renewed crl.pem to test_openvpn_server keys directory because of revocation of vpnclientb]: Triggered 'refresh' from 1 event Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 0.46 seconds

openvpn openvpn::client behaves like an idempotent resource applies a second time without changes Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 4 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165334975.KUa9Gw.pp Last 10 lines of output were: journalctl log for openvpn: -- Logs begin at Wed 2025-10-01 16:51:51 UTC, end at Wed 2025-10-01 16:53:37 UTC. -- -- No entries -- Error: /Stage[main]/Openvpn::Service/Service[openvpn]/ensure: change from 'stopped' to 'running' failed: Systemd start for openvpn failed! journalctl log for openvpn: -- Logs begin at Wed 2025-10-01 16:51:51 UTC, end at Wed 2025-10-01 16:53:37 UTC. -- -- No entries -- �[mNotice: Applied catalog in 0.30 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:59

openvpn openvpn::client behaves like an idempotent resource applies with no errors Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165332078.RRDsST.pp Last 10 lines of output were: �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclienta]/Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.ovpn]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.ovpn]/ensure: defined content as '{sha256}ad896525ed0e7debd6bb98b943e4ed35d1089ff3fd6fadf4ce0b0bda8d0b4eb7' Info: Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.ovpn]: Scheduling refresh of Exec[tar the thing test_openvpn_server with vpnclienta] �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclienta]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.tblk/vpnclienta.ovpn]/ensure: created �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclienta]/Exec[tar the thing test_openvpn_server with vpnclienta]: Triggered 'refresh' from 1 event �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]/ensure: defined content as '{sha256}96f828bcd589875cac62b2b9f76e0f1e61577b7417ef7c98be571f9b588710fa' Info: Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]: Scheduling refresh of Exec[tar the thing test_openvpn_server with vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.tblk/vpnclientb.ovpn]/ensure: created �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/Exec[tar the thing test_openvpn_server with vpnclientb]: Triggered 'refresh' from 1 event Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 0.67 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:59

openvpn openvpn::server with minimal parameters behaves like an idempotent resource applies a second time without changes Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 4 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165328554.XHYJmC.pp Last 10 lines of output were: journalctl log for openvpn: -- Logs begin at Wed 2025-10-01 16:51:51 UTC, end at Wed 2025-10-01 16:53:30 UTC. -- -- No entries -- Error: /Stage[main]/Openvpn::Service/Service[openvpn]/ensure: change from 'stopped' to 'running' failed: Systemd start for openvpn failed! journalctl log for openvpn: -- Logs begin at Wed 2025-10-01 16:51:51 UTC, end at Wed 2025-10-01 16:53:30 UTC. -- -- No entries -- �[mNotice: Applied catalog in 0.21 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:8

openvpn openvpn::server with minimal parameters behaves like an idempotent resource applies with no errors Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165238144.L0uwUN.pp Last 10 lines of output were: �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/easy-rsa/keys/ca.crt]/mode: mode changed '0600' to '0640' �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/Exec[create crl.pem on test_openvpn_server]/returns: executed successfully �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/Exec[copy created crl.pem to test_openvpn_server keys directory]/returns: executed successfully �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/keys]/ensure: created �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/crl.pem]/group: group changed 'root' to 'nobody' �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/crl.pem]/mode: mode changed '0600' to '0640' �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Service[openvpn-server@test_openvpn_server]/ensure: ensure changed 'stopped' to 'running' Info: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Service[openvpn-server@test_openvpn_server]: Unscheduling refresh on Service[openvpn-server@test_openvpn_server] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 48.17 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:8

Process completed with exit code 1.

openvpn openvpn::revoke File "/etc/openvpn/server/test_openvpn_server/crl.pem" content is expected to match /vpnclientb/ Failure/Error: its(:content) { is_expected.to match(%r{vpnclientb}) } expected "-----BEGIN X509 CRL-----\nMIIC0jCCAboCAQEwDQYJKoZIhvcNAQENBQAwgYwxCzAJBgNVBAYTAkNPMQswCQYD\nVQQIDAJT...bGWWC6KGInlovBNEJFvbKFVjO7JgqVg4MVbShMpwI4xyIYQ+bB+J2dY5S00SKlQ\ngcj4qL6n\n-----END X509 CRL-----\n" to match /vpnclientb/ Diff: @@ -1 +1,18 @@ -/vpnclientb/ +-----BEGIN X509 CRL----- +MIIC0jCCAboCAQEwDQYJKoZIhvcNAQENBQAwgYwxCzAJBgNVBAYTAkNPMQswCQYD +VQQIDAJTVDEPMA0GA1UEBwwGQSBjaXR5MQwwCgYDVQQKDANGT08xHzAdBgNVBAsM +Fk15IE9yZ2FuaXphdGlvbmFsIFVuaXQxFDASBgNVBAMMC0Vhc3ktUlNBIENBMRow +GAYJKoZIhvcNAQkBFgtiYXJAZm9vLm9yZxcNMjUxMDAxMTY1MzQxWhcNMjUxMDMx +MTY1MzQxWjAkMCICEQCQbDBP3doii6ogWoNZlcWhFw0yNTEwMDExNjUzNDFaoIHS +MIHPMIHMBgNVHSMEgcQwgcGAFPG0tMfpM8v4AR/8ZPJ69AiU825ZoYGSpIGPMIGM +MQswCQYDVQQGEwJDTzELMAkGA1UECAwCU1QxDzANBgNVBAcMBkEgY2l0eTEMMAoG +A1UECgwDRk9PMR8wHQYDVQQLDBZNeSBPcmdhbml6YXRpb25hbCBVbml0MRQwEgYD +VQQDDAtFYXN5LVJTQSBDQTEaMBgGCSqGSIb3DQEJARYLYmFyQGZvby5vcmeCFERe +1EVBizZatYGyDv/wSJ/YHoSPMA0GCSqGSIb3DQEBDQUAA4IBAQApYAdMqFMJoPWT +nK405YzLUecSrxqy9pge1tRE2GtqWLGI2sfCF5H4+p9dlhY4UVQeEpKGt0Y2SgTN +GAxhJGx5jSF0gtO2czMyYmjlk7rIqsElsFj8BDfBm9UXpDZlRqbeRKbYpui7YO+1 +qaQfnF5bwW5amfn3/8C1PKCgJnzEi9lxTgyfrMhgS173ortUKH7sNHCNE8Qgs8Lv +LXwElbN+t5XLult2O2qP8EX4dcpeuJ/00NTc4EM1buGyLVtDnWgJ5kuCz691uJK/ +DbGWWC6KGInlovBNEJFvbKFVjO7JgqVg4MVbShMpwI4xyIYQ+bB+J2dY5S00SKlQ +gcj4qL6n +-----END X509 CRL-----

openvpn openvpn::revoke revokes a client certificate Failure/Error: apply_manifest_on(hosts_as('master'), pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165339214.RaIbZ4.pp Last 10 lines of output were: -- Logs begin at Wed 2025-10-01 16:51:58 UTC, end at Wed 2025-10-01 16:53:41 UTC. -- -- No entries -- �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[revoke certificate for vpnclientb in context of test_openvpn_server]/returns: executed successfully Info: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[revoke certificate for vpnclientb in context of test_openvpn_server]: Scheduling refresh of Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb]: Triggered 'refresh' from 1 event Info: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb]: Scheduling refresh of Exec[copy renewed crl.pem to test_openvpn_server keys directory because of revocation of vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[copy renewed crl.pem to test_openvpn_server keys directory because of revocation of vpnclientb]: Triggered 'refresh' from 1 event Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 0.46 seconds

openvpn openvpn::client behaves like an idempotent resource applies a second time without changes Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 4 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165336324.3hS985.pp Last 10 lines of output were: journalctl log for openvpn: -- Logs begin at Wed 2025-10-01 16:51:58 UTC, end at Wed 2025-10-01 16:53:38 UTC. -- -- No entries -- Error: /Stage[main]/Openvpn::Service/Service[openvpn]/ensure: change from 'stopped' to 'running' failed: Systemd start for openvpn failed! journalctl log for openvpn: -- Logs begin at Wed 2025-10-01 16:51:58 UTC, end at Wed 2025-10-01 16:53:38 UTC. -- -- No entries -- �[mNotice: Applied catalog in 0.31 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:59

openvpn openvpn::client behaves like an idempotent resource applies with no errors Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165333405.SL3Skj.pp Last 10 lines of output were: �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclienta]/Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.ovpn]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.ovpn]/ensure: defined content as '{sha256}48ba624a42cb39c3f23580ed6dd8afb4ab6d54178a00153f3e5c67cd6f29a145' Info: Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.ovpn]: Scheduling refresh of Exec[tar the thing test_openvpn_server with vpnclienta] �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclienta]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.tblk/vpnclienta.ovpn]/ensure: created �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclienta]/Exec[tar the thing test_openvpn_server with vpnclienta]: Triggered 'refresh' from 1 event �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]/ensure: defined content as '{sha256}ac83d463a869fd22e6e1a05fb4ed84b09e435b31f0852d95ffdf4bf519347e21' Info: Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]: Scheduling refresh of Exec[tar the thing test_openvpn_server with vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.tblk/vpnclientb.ovpn]/ensure: created �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/Exec[tar the thing test_openvpn_server with vpnclientb]: Triggered 'refresh' from 1 event Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 0.68 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:59

openvpn openvpn::server with minimal parameters behaves like an idempotent resource applies a second time without changes Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 4 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165329984.6Dd3uF.pp Last 10 lines of output were: journalctl log for openvpn: -- Logs begin at Wed 2025-10-01 16:51:58 UTC, end at Wed 2025-10-01 16:53:32 UTC. -- -- No entries -- Error: /Stage[main]/Openvpn::Service/Service[openvpn]/ensure: change from 'stopped' to 'running' failed: Systemd start for openvpn failed! journalctl log for openvpn: -- Logs begin at Wed 2025-10-01 16:51:58 UTC, end at Wed 2025-10-01 16:53:32 UTC. -- -- No entries -- �[mNotice: Applied catalog in 0.21 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:8

openvpn openvpn::server with minimal parameters behaves like an idempotent resource applies with no errors Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165245783.VcLwVf.pp Last 10 lines of output were: �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/easy-rsa/keys/ca.crt]/mode: mode changed '0600' to '0640' �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/Exec[create crl.pem on test_openvpn_server]/returns: executed successfully �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/Exec[copy created crl.pem to test_openvpn_server keys directory]/returns: executed successfully �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/keys]/ensure: created �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/crl.pem]/group: group changed 'root' to 'nobody' �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/crl.pem]/mode: mode changed '0600' to '0640' �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Service[openvpn-server@test_openvpn_server]/ensure: ensure changed 'stopped' to 'running' Info: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Service[openvpn-server@test_openvpn_server]: Unscheduling refresh on Service[openvpn-server@test_openvpn_server] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 41.86 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:8

Process completed with exit code 1.

openvpn openvpn::revoke File "/etc/openvpn/server/test_openvpn_server/crl.pem" content is expected to match /vpnclientb/ Failure/Error: its(:content) { is_expected.to match(%r{vpnclientb}) } expected "-----BEGIN X509 CRL-----\nMIIC9TCCAd0CAQEwDQYJKoZIhvcNAQENBQAwgYwxCzAJBgNVBAYTAkNPMQswCQYD\nVQQIDAJT...dmxTHHwnFrVn64T\n4c8l4Fvmq2hp+eaLliIWCrg8xacGRH2C2suFZ+BcFSLauR4Llz0Pg88=\n-----END X509 CRL-----\n" to match /vpnclientb/ Diff: @@ -1 +1,18 @@ -/vpnclientb/ +-----BEGIN X509 CRL----- +MIIC9TCCAd0CAQEwDQYJKoZIhvcNAQENBQAwgYwxCzAJBgNVBAYTAkNPMQswCQYD +VQQIDAJTVDEPMA0GA1UEBwwGQSBjaXR5MQwwCgYDVQQKDANGT08xHzAdBgNVBAsM +Fk15IE9yZ2FuaXphdGlvbmFsIFVuaXQxFDASBgNVBAMMC0Vhc3ktUlNBIENBMRow +GAYJKoZIhvcNAQkBFgtiYXJAZm9vLm9yZxcNMjUxMDAxMTY1MzU3WhcNMjUxMDMx +MTY1MzU3WjBHMCECED4jrf/7lP0lLAFrmK7z8YcXDTI1MTAwMTE2NTM1N1owIgIR +AIMYYS+epNUzsljPiz/Q5CYXDTI1MTAwMTE2NTM1M1qggdIwgc8wgcwGA1UdIwSB +xDCBwYAUrLfES+Px+Ifz08aI1U6G+31VbuShgZKkgY8wgYwxCzAJBgNVBAYTAkNP +MQswCQYDVQQIDAJTVDEPMA0GA1UEBwwGQSBjaXR5MQwwCgYDVQQKDANGT08xHzAd +BgNVBAsMFk15IE9yZ2FuaXphdGlvbmFsIFVuaXQxFDASBgNVBAMMC0Vhc3ktUlNB +IENBMRowGAYJKoZIhvcNAQkBFgtiYXJAZm9vLm9yZ4IUXffxtvgozYzFIaj5lPga +axyJIeQwDQYJKoZIhvcNAQENBQADggEBABUqOHASvkQHluam4m5sLSRKraWY3S3l +GCCM7BNlDXb9Vgtn3MFm8ctDMXtVCscSV8OvNphqRf7xit2YE8NDOhXUGSGxmREo +PQSzQGSNkbavCs46rB0FdwC+M6sV3DMmRSVQKCCceaoI/103rRW27oVy+nDlxq0G +3mer/SiiSvJvJ5FkWJbZXSsqXKw10Txgm3Mj6q+FbPy7k7gRzZH4OlqAiqXI85ME +un5tl1qGlpROlJp8Cv+BfKyEtFC3TT80YzQMw9ri8jZcefY/OdmxTHHwnFrVn64T +4c8l4Fvmq2hp+eaLliIWCrg8xacGRH2C2suFZ+BcFSLauR4Llz0Pg88= +-----END X509 CRL-----

openvpn openvpn::revoke revokes a client certificate Failure/Error: apply_manifest_on(hosts_as('master'), pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165353715.XmrJr3.pp Last 10 lines of output were: Info: /Stage[main]/Main/Openvpn::Client[vpnclientb]/Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]: Filebucketed /etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn to puppet with sum 671cb6d8ca7981533bd0a6a61f9fb62121b2150585a40edad40569b7a574b01e �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]/content: content changed '{sha256}671cb6d8ca7981533bd0a6a61f9fb62121b2150585a40edad40569b7a574b01e' to '{sha256}fff024efa9443413db9abf7a64061b35b4132581c450a40ea2a790f6b75e50eb' Info: Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]: Scheduling refresh of Exec[tar the thing test_openvpn_server with vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/Exec[tar the thing test_openvpn_server with vpnclientb]: Triggered 'refresh' from 1 event �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[revoke certificate for vpnclientb in context of test_openvpn_server]/returns: executed successfully Info: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[revoke certificate for vpnclientb in context of test_openvpn_server]: Scheduling refresh of Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb]: Triggered 'refresh' from 1 event Info: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb]: Scheduling refresh of Exec[copy renewed crl.pem to test_openvpn_server keys directory because of revocation of vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[copy renewed crl.pem to test_openvpn_server keys directory because of revocation of vpnclientb]: Triggered 'refresh' from 1 event �[mNotice: Applied catalog in 1.42 seconds

Process completed with exit code 1.

openvpn openvpn::revoke File "/etc/openvpn/server/test_openvpn_server/crl.pem" content is expected to match /vpnclientb/ Failure/Error: its(:content) { is_expected.to match(%r{vpnclientb}) } expected "-----BEGIN X509 CRL-----\nMIIC0jCCAboCAQEwDQYJKoZIhvcNAQENBQAwgYwxCzAJBgNVBAYTAkNPMQswCQYD\nVQQIDAJT...H0WynlZr7woAWAc+lb1udEVWzSVoug1KgDXAD4PsLvzKvza+Ye5vT7QWXyX6T6j\nzsBYoH00\n-----END X509 CRL-----\n" to match /vpnclientb/ Diff: @@ -1 +1,18 @@ -/vpnclientb/ +-----BEGIN X509 CRL----- +MIIC0jCCAboCAQEwDQYJKoZIhvcNAQENBQAwgYwxCzAJBgNVBAYTAkNPMQswCQYD +VQQIDAJTVDEPMA0GA1UEBwwGQSBjaXR5MQwwCgYDVQQKDANGT08xHzAdBgNVBAsM +Fk15IE9yZ2FuaXphdGlvbmFsIFVuaXQxFDASBgNVBAMMC0Vhc3ktUlNBIENBMRow +GAYJKoZIhvcNAQkBFgtiYXJAZm9vLm9yZxcNMjUxMDAxMTY1NDIxWhcNMjUxMDMx +MTY1NDIxWjAkMCICEQDVP6a0EeKpq15hx69y49HvFw0yNTEwMDExNjU0MjFaoIHS +MIHPMIHMBgNVHSMEgcQwgcGAFLm4IZ1Jey1SsfmcWizIQUiMhbuhoYGSpIGPMIGM +MQswCQYDVQQGEwJDTzELMAkGA1UECAwCU1QxDzANBgNVBAcMBkEgY2l0eTEMMAoG +A1UECgwDRk9PMR8wHQYDVQQLDBZNeSBPcmdhbml6YXRpb25hbCBVbml0MRQwEgYD +VQQDDAtFYXN5LVJTQSBDQTEaMBgGCSqGSIb3DQEJARYLYmFyQGZvby5vcmeCFHH0 +E7au74GlapIIGmc563C5gPsiMA0GCSqGSIb3DQEBDQUAA4IBAQBvnirl85YTG1cf +EKXQUy9SsNDOIQVU2A7XjaelEvbSaMd10OA1OJEdfS6yLgj+6vtBAvfLvZcABIwP +7xhXgq0FAVb7bgMduZw/36QkDwOEi7rhrrFdfcpuTzHlX1AlB4lTZGPCHj/1GVkI +CWfuugcqoZDmI8xUilZt+Pki5ArYPNxmq8gk3Gxr/siPjwkXmV0bWRwERg7XNeNq +0ZEEquZ0AmbQdedEDXBCVEw9aPzR4/C/cjYB5V2ctrib6YuFfS/k43c26rhorNQw +WH0WynlZr7woAWAc+lb1udEVWzSVoug1KgDXAD4PsLvzKvza+Ye5vT7QWXyX6T6j +zsBYoH00 +-----END X509 CRL-----

openvpn openvpn::revoke revokes a client certificate Failure/Error: apply_manifest_on(hosts_as('master'), pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165418703.pD0v43.pp Last 10 lines of output were: -- Logs begin at Wed 2025-10-01 16:52:23 UTC, end at Wed 2025-10-01 16:54:21 UTC. -- -- No entries -- �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[revoke certificate for vpnclientb in context of test_openvpn_server]/returns: executed successfully Info: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[revoke certificate for vpnclientb in context of test_openvpn_server]: Scheduling refresh of Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb]: Triggered 'refresh' from 1 event Info: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb]: Scheduling refresh of Exec[copy renewed crl.pem to test_openvpn_server keys directory because of revocation of vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[copy renewed crl.pem to test_openvpn_server keys directory because of revocation of vpnclientb]: Triggered 'refresh' from 1 event Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 0.48 seconds

openvpn openvpn::client behaves like an idempotent resource applies a second time without changes Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 4 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165415682.xWSFnf.pp Last 10 lines of output were: journalctl log for openvpn: -- Logs begin at Wed 2025-10-01 16:52:23 UTC, end at Wed 2025-10-01 16:54:18 UTC. -- -- No entries -- Error: /Stage[main]/Openvpn::Service/Service[openvpn]/ensure: change from 'stopped' to 'running' failed: Systemd start for openvpn failed! journalctl log for openvpn: -- Logs begin at Wed 2025-10-01 16:52:23 UTC, end at Wed 2025-10-01 16:54:18 UTC. -- -- No entries -- �[mNotice: Applied catalog in 0.32 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:59

openvpn openvpn::client behaves like an idempotent resource applies with no errors Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165412695.U4W7Rp.pp Last 10 lines of output were: �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclienta]/Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.ovpn]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.ovpn]/ensure: defined content as '{sha256}fe7d9baac166df24820b60b9ed6bdcfa530694de3e19144eb8ef3becafb40ce7' Info: Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.ovpn]: Scheduling refresh of Exec[tar the thing test_openvpn_server with vpnclienta] �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclienta]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.tblk/vpnclienta.ovpn]/ensure: created �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclienta]/Exec[tar the thing test_openvpn_server with vpnclienta]: Triggered 'refresh' from 1 event �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]/ensure: defined content as '{sha256}ed91a3968e49385a3b38f710e0a89a97d15fe15722e8771ebdb2115eb9449500' Info: Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]: Scheduling refresh of Exec[tar the thing test_openvpn_server with vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.tblk/vpnclientb.ovpn]/ensure: created �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/Exec[tar the thing test_openvpn_server with vpnclientb]: Triggered 'refresh' from 1 event Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 0.64 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:59

openvpn openvpn::server with minimal parameters behaves like an idempotent resource applies a second time without changes Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 4 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165409243.TOpPCa.pp Last 10 lines of output were: journalctl log for openvpn: -- Logs begin at Wed 2025-10-01 16:52:23 UTC, end at Wed 2025-10-01 16:54:11 UTC. -- -- No entries -- Error: /Stage[main]/Openvpn::Service/Service[openvpn]/ensure: change from 'stopped' to 'running' failed: Systemd start for openvpn failed! journalctl log for openvpn: -- Logs begin at Wed 2025-10-01 16:52:23 UTC, end at Wed 2025-10-01 16:54:11 UTC. -- -- No entries -- �[mNotice: Applied catalog in 0.24 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:8

openvpn openvpn::server with minimal parameters behaves like an idempotent resource applies with no errors Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165347860.7YpkQB.pp Last 10 lines of output were: �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/easy-rsa/keys/ca.crt]/mode: mode changed '0600' to '0640' �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/Exec[create crl.pem on test_openvpn_server]/returns: executed successfully �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/Exec[copy created crl.pem to test_openvpn_server keys directory]/returns: executed successfully �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/keys]/ensure: created �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/crl.pem]/group: group changed 'root' to 'nobody' �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/crl.pem]/mode: mode changed '0600' to '0640' �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Service[openvpn-server@test_openvpn_server]/ensure: ensure changed 'stopped' to 'running' Info: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Service[openvpn-server@test_openvpn_server]: Unscheduling refresh on Service[openvpn-server@test_openvpn_server] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 19.04 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:8

Process completed with exit code 1.

openvpn openvpn::revoke File "/etc/openvpn/server/test_openvpn_server/crl.pem" content is expected to match /vpnclientb/ Failure/Error: its(:content) { is_expected.to match(%r{vpnclientb}) } expected "-----BEGIN X509 CRL-----\nMIIC0jCCAboCAQEwDQYJKoZIhvcNAQENBQAwgYwxCzAJBgNVBAYTAkNPMQswCQYD\nVQQIDAJT...gRvB9ii+gExIZSwiwJDScC0L5xHuKmqp/EP0kKKkppZK5ac8fTd39IfN7wvBJkc\nATnQH+28\n-----END X509 CRL-----\n" to match /vpnclientb/ Diff: @@ -1 +1,18 @@ -/vpnclientb/ +-----BEGIN X509 CRL----- +MIIC0jCCAboCAQEwDQYJKoZIhvcNAQENBQAwgYwxCzAJBgNVBAYTAkNPMQswCQYD +VQQIDAJTVDEPMA0GA1UEBwwGQSBjaXR5MQwwCgYDVQQKDANGT08xHzAdBgNVBAsM +Fk15IE9yZ2FuaXphdGlvbmFsIFVuaXQxFDASBgNVBAMMC0Vhc3ktUlNBIENBMRow +GAYJKoZIhvcNAQkBFgtiYXJAZm9vLm9yZxcNMjUxMDAxMTY1NDMxWhcNMjUxMDMx +MTY1NDMxWjAkMCICEQDARYgBJgDW9X76If2PY4AsFw0yNTEwMDExNjU0MzFaoIHS +MIHPMIHMBgNVHSMEgcQwgcGAFPP1p8urUi9Ps8FOSxLWWVT56QYkoYGSpIGPMIGM +MQswCQYDVQQGEwJDTzELMAkGA1UECAwCU1QxDzANBgNVBAcMBkEgY2l0eTEMMAoG +A1UECgwDRk9PMR8wHQYDVQQLDBZNeSBPcmdhbml6YXRpb25hbCBVbml0MRQwEgYD +VQQDDAtFYXN5LVJTQSBDQTEaMBgGCSqGSIb3DQEJARYLYmFyQGZvby5vcmeCFEnw +Vk2Ytyru5DcisKJOGBl09uw4MA0GCSqGSIb3DQEBDQUAA4IBAQAAH5ZSOb9dgjJM +0TztKoA8FRZbNFhoZPu0AE+xpw3xcszIPYjqpE6q+nqzUGZIVDj4b1Apf6+K0g4t +wGk4xxJRM8yWA2AMF0SwWhuQ4LqcQcshB0bwmB7NxjMwUrcCCtgjB0fwUM37Yu4H +pVUGX405JknRNiXuHLfMC7voa8nsfSn19sLED5aAxlAXrsk2BocrAGgd9abYG0O3 +QTyKZ48i9D0heHuDONlQ7GtL+neFuS7oiUq3bSCL5Pj1yOMBQN2N9PbtiEB+bRhb +jgRvB9ii+gExIZSwiwJDScC0L5xHuKmqp/EP0kKKkppZK5ac8fTd39IfN7wvBJkc +ATnQH+28 +-----END X509 CRL-----

openvpn openvpn::revoke revokes a client certificate Failure/Error: apply_manifest_on(hosts_as('master'), pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165428829.kCk3t3.pp Last 10 lines of output were: journalctl log for openvpn: -- No entries -- �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[revoke certificate for vpnclientb in context of test_openvpn_server]/returns: executed successfully Info: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[revoke certificate for vpnclientb in context of test_openvpn_server]: Scheduling refresh of Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb]: Triggered 'refresh' from 1 event Info: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[renew crl.pem on test_openvpn_server because of revocation of vpnclientb]: Scheduling refresh of Exec[copy renewed crl.pem to test_openvpn_server keys directory because of revocation of vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Revoke[vpnclientb]/Exec[copy renewed crl.pem to test_openvpn_server keys directory because of revocation of vpnclientb]: Triggered 'refresh' from 1 event Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 0.54 seconds

openvpn openvpn::client behaves like an idempotent resource applies a second time without changes Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 4 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165425695.nuxYcn.pp Last 10 lines of output were: Info: Applying configuration version '1759337667' Error: Systemd start for openvpn failed! journalctl log for openvpn: -- No entries -- Error: /Stage[main]/Openvpn::Service/Service[openvpn]/ensure: change from 'stopped' to 'running' failed: Systemd start for openvpn failed! journalctl log for openvpn: -- No entries -- �[mNotice: Applied catalog in 0.35 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:59

openvpn openvpn::client behaves like an idempotent resource applies with no errors Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165422537.d2jPgx.pp Last 10 lines of output were: �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclienta]/Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.ovpn]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.ovpn]/ensure: defined content as '{sha256}a406b143bb584ca3cd5a86540a20740161b3534285eb77b09f2fe96ff94383f4' Info: Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.ovpn]: Scheduling refresh of Exec[tar the thing test_openvpn_server with vpnclienta] �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclienta]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclienta.tblk/vpnclienta.ovpn]/ensure: created �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclienta]/Exec[tar the thing test_openvpn_server with vpnclienta]: Triggered 'refresh' from 1 event �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]/ensure: defined content as '{sha256}6d898cbf711c5897521fb7f79108251735cd6454b644915f306813c2789fbc3b' Info: Concat[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.ovpn]: Scheduling refresh of Exec[tar the thing test_openvpn_server with vpnclientb] �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/File[/etc/openvpn/server/test_openvpn_server/download-configs/vpnclientb.tblk/vpnclientb.ovpn]/ensure: created �[mNotice: /Stage[main]/Main/Openvpn::Client[vpnclientb]/Exec[tar the thing test_openvpn_server with vpnclientb]: Triggered 'refresh' from 1 event Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 0.77 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:59

openvpn openvpn::server with minimal parameters behaves like an idempotent resource applies a second time without changes Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 4 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165418848.2AgMfF.pp Last 10 lines of output were: Info: Applying configuration version '1759337660' Error: Systemd start for openvpn failed! journalctl log for openvpn: -- No entries -- Error: /Stage[main]/Openvpn::Service/Service[openvpn]/ensure: change from 'stopped' to 'running' failed: Systemd start for openvpn failed! journalctl log for openvpn: -- No entries -- �[mNotice: Applied catalog in 0.24 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:8

openvpn openvpn::server with minimal parameters behaves like an idempotent resource applies with no errors Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'vpnserver-openvox8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_165243771.ls0HEL.pp Last 10 lines of output were: �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/easy-rsa/keys/ca.crt]/mode: mode changed '0600' to '0640' �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/Exec[create crl.pem on test_openvpn_server]/returns: executed successfully �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/Exec[copy created crl.pem to test_openvpn_server keys directory]/returns: executed successfully �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/keys]/ensure: created �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/crl.pem]/group: group changed 'root' to 'nobody' �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Openvpn::Ca[test_openvpn_server]/File[/etc/openvpn/server/test_openvpn_server/crl.pem]/mode: mode changed '0600' to '0640' �[mNotice: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Service[openvpn-server@test_openvpn_server]/ensure: ensure changed 'stopped' to 'running' Info: /Stage[main]/Main/Openvpn::Server[test_openvpn_server]/Service[openvpn-server@test_openvpn_server]: Unscheduling refresh on Service[openvpn-server@test_openvpn_server] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 92.85 seconds Shared Example Group: "an idempotent resource" called from ./spec/acceptance/openvpn_spec.rb:8