Puppet::Type::X509_cert accepts a valid req_ext parameter Failure/Error: expect(resource[:req_ext]).to eq(:true) expected: :true got: true (compared using ==) Diff: @@ -1 +1 @@ -:true +true

Puppet::Type::X509_cert does not accept a bad req_ext parameter Failure/Error: expect do resource[:req_ext] = :foo end.to raise_error(Puppet::Error, %r{Invalid value :foo}) expected Puppet::Error with message matching /Invalid value :foo/ but nothing was raised

The openssl provider for the x509_cert type when using a CA for signing creates a certificate with the proper options Failure/Error: openssl options #<Puppet::Type::X509_cert::ProviderOpenssl (class)> received :openssl with unexpected arguments expected: (["x509", "-req", "-days", 3650, "-in", "/tmp/foo.csr", "-out", "/tmp/foo.crt", "-extfile", "/tmp/foo....reateserial"], ["-CA", "/tmp/foo-ca.crt"], ["-CAkey", "/tmp/foo-ca.key"], ["-extensions", "v3_req"]]) got: (["x509", "-req", "-days", 3650, "-in", "/tmp/foo.csr", "-signkey", "/tmp/foo.key", "-out", "/tmp/foo....reateserial"], ["-CA", "/tmp/foo-ca.crt"], ["-CAkey", "/tmp/foo-ca.key"], ["-extensions", "v3_req"]])