修改deploy.yml对groups-by-IPMB-addr的支持

增加根据远程主机的IPMB信息分组
删除dogroup
2020-01-20 16:28:07 +08:00 · 2020-01-20 16:25:02 +08:00 · 2020-01-20 16:21:59 +08:00 · 2020-01-20 14:49:17 +08:00 · 2020-01-20 14:32:00 +08:00 · 2020-01-20 14:27:09 +08:00
218 changed files with 22200 additions and 194 deletions
--- a/adc_inline_device_access/group_vars/all.yml
+++ b/adc_inline_device_access/group_vars/all.yml
@@ -60,7 +60,6 @@ kni:
              enabled: 1
 tfe:
    nr_threads: 16
-    kni_ip: 192.168.100.1
    mc_cache_eth: ens1.100
    keykeeper:
        mode: "normal"
--- a/adc_tera_access/group_vars/all.yml
+++ b/adc_tera_access/group_vars/all.yml
@@ -60,6 +60,7 @@ kni:
              enabled: 1
 tfe:
    nr_threads: 16
+    mc_cache_eth: ens1.100
    keykeeper:
        mode: "normal"
        no_cache: 0
--- a/deploy.yml
+++ b/deploy.yml
@@ -1,3 +1,7 @@
+- hosts: all
+  roles:
+   - groups-by-IPMB-addr
+
 - hosts: Functional_Host
  roles:
    - framework
@@ -7,7 +11,9 @@
  roles:
    - tsg-env-mcn0
    - mrzcpd
+    - sapp
    - kni
+    - firewall
    - certstore

 - hosts: blade-01
@@ -36,6 +42,8 @@
  roles:
    - mrzcpd
    - framework
+    - sapp
    - kni
+    - firewall
    - certstore
    - tfe
--- a/pc_double_arm_access/group_vars/all.yml
+++ b/pc_double_arm_access/group_vars/all.yml
@@ -54,6 +54,7 @@ kni:
        enabled: 1
 tfe:
  nr_threads: 32
+  mc_cache_eth: ens1.100
  keykeeper:
    mode: "normal"
    no_cache: 0
--- a/roles/firewall/files/dns-debug-1.0.0.-1.el7.x86_64.rpm
+++ b/roles/firewall/files/dns-debug-1.0.0.-1.el7.x86_64.rpm
--- a/roles/firewall/files/ftp-debug-1.0.0.-1.el7.x86_64.rpm
+++ b/roles/firewall/files/ftp-debug-1.0.0.-1.el7.x86_64.rpm
--- a/roles/firewall/files/fw_dns_plug-debug-1.0.2.1c9d36d-1.el7.centos.x86_64.rpm
+++ b/roles/firewall/files/fw_dns_plug-debug-1.0.2.1c9d36d-1.el7.centos.x86_64.rpm
--- a/roles/firewall/files/fw_ftp_plug-debug-1.0.0.bd656e4-1.el7.centos.x86_64.rpm
+++ b/roles/firewall/files/fw_ftp_plug-debug-1.0.0.bd656e4-1.el7.centos.x86_64.rpm
--- a/roles/firewall/files/fw_http_plug-debug-1.0.3.3c95e78-1.el7.centos.x86_64.rpm
+++ b/roles/firewall/files/fw_http_plug-debug-1.0.3.3c95e78-1.el7.centos.x86_64.rpm
--- a/roles/firewall/files/fw_mail_plug-debug-1.0.1.8792ed8-1.el7.centos.x86_64.rpm
+++ b/roles/firewall/files/fw_mail_plug-debug-1.0.1.8792ed8-1.el7.centos.x86_64.rpm
--- a/roles/firewall/files/http-debug-1.0.0.-1.el7.x86_64.rpm
+++ b/roles/firewall/files/http-debug-1.0.0.-1.el7.x86_64.rpm
--- a/roles/firewall/files/mail-debug-1.0.0.-1.el7.x86_64.rpm
+++ b/roles/firewall/files/mail-debug-1.0.0.-1.el7.x86_64.rpm
--- a/roles/firewall/files/ssl-debug-1.0.0.-1.el7.x86_64.rpm
+++ b/roles/firewall/files/ssl-debug-1.0.0.-1.el7.x86_64.rpm
--- a/roles/firewall/files/tsg_master-debug-1.0.1.f624b67-1.el7.centos.x86_64.rpm
+++ b/roles/firewall/files/tsg_master-debug-1.0.1.f624b67-1.el7.centos.x86_64.rpm
--- a/roles/firewall/tasks/main.yml
+++ b/roles/firewall/tasks/main.yml
@@ -0,0 +1,75 @@
+---
+- name: "copy firewall rpms to destination server"
+  copy:
+    src: "{{ role_path }}/files/"
+    dest: /tmp/ansible_deploy/
+
+- name: "install dns-debug rpms from localhost"
+  yum:
+    name:
+      - /tmp/ansible_deploy/dns-debug-1.0.0.-1.el7.x86_64.rpm
+    state: present
+  when: install_dns_debug == "yes"
+
+- name: "install ftp-debug rpms from localhost"
+  yum:
+    name:
+      - /tmp/ansible_deploy/ftp-debug-1.0.0.-1.el7.x86_64.rpm
+    state: present
+  when: install_ftp_debug == "yes"
+
+- name: "install http-debug rpms from localhost"
+  yum:
+    name:
+      - /tmp/ansible_deploy/http-debug-1.0.0.-1.el7.x86_64.rpm
+    state: present
+  when: install_http_debug == "yes"
+ 
+- name: "install mail-debug rpms from localhost"
+  yum:
+    name:
+      - /tmp/ansible_deploy/mail-debug-1.0.0.-1.el7.x86_64.rpm
+    state: present
+  when: install_mail_debug == "yes"
+
+- name: "install ssl-debug rpms from localhost"
+  yum:
+    name:   
+      - /tmp/ansible_deploy/ssl-debug-1.0.0.-1.el7.x86_64.rpm
+    state: present
+  when: install_ssl_debug == "yes"
+
+- name: "install fw_dns_plug-debug rpms from localhost"
+  yum:
+    name:
+      - /tmp/ansible_deploy/fw_dns_plug-debug-1.0.2.1c9d36d-1.el7.centos.x86_64.rpm
+    state: present
+  when: install_fw_dns_plug_debug == "yes" 
+ 
+- name: "install fw_ftp_plug-debug rpms from localhost"
+  yum:
+    name:
+      - /tmp/ansible_deploy/fw_ftp_plug-debug-1.0.0.bd656e4-1.el7.centos.x86_64.rpm
+    state: present
+  when: install_fw_ftp_plug_debug == "yes"
+  
+- name: "install fw_http_plug-debug rpms from localhost"
+  yum:
+    name:
+      - /tmp/ansible_deploy/fw_http_plug-debug-1.0.3.3c95e78-1.el7.centos.x86_64.rpm
+    state: present
+  when: install_fw_http_plug_debug == "yes" 
+ 
+- name: "install fw_mail_plug-debug rpms from localhost"
+  yum:
+    name:
+      - /tmp/ansible_deploy/fw_mail_plug-debug-1.0.1.8792ed8-1.el7.centos.x86_64.rpm
+    state: present
+  when: install_fw_mail_plug_debug == "yes"
+
+- name: "install tsg-master rpms from localhost"
+  yum:
+    name:
+      - /tmp/ansible_deploy/tsg_master-debug-1.0.1.f624b67-1.el7.centos.x86_64.rpm
+    state: present
+  when: install_tsg_master == "yes" 
--- a/roles/groups-by-IPMB-addr/files/groups_by_IPMB_addr.fact
+++ b/roles/groups-by-IPMB-addr/files/groups_by_IPMB_addr.fact
@@ -0,0 +1,38 @@
+#!/usr/bin/python
+import json
+import os
+import re
+
+class GroupsByIPMB(object):
+
+    def __init__(self,IPMB_cmd_str):
+        self.IPMB_cmd_str = IPMB_cmd_str
+        self.IPMB_num_str = None 
+        self.IPMB_cmd_ret_str = None
+
+    def groups_exec_IPMB_command(self):
+        opt_handler = os.popen(self.IPMB_cmd_str)
+        self.IPMB_cmd_ret_str = opt_handler.read()
+        opt_handler.close()
+
+    def groups_split_IPMB_ret_str(self):
+        info_list = re.split(' |\n',self.IPMB_cmd_ret_str)
+        if info_list [5] == '90':
+            self.IPMB_num_str = 'IPMB_num_blade_00'
+        if info_list [5] == '80':
+            self.IPMB_num_str = 'IPMB_num_blade_01'
+        if info_list [5] == '88':
+            self.IPMB_num_str = 'IPMB_num_blade_02'
+        if info_list [5] == '98':
+            self.IPMB_num_str = 'IPMB_num_blade_03' 
+
+    def groups_print_IPMB_num_str(self):
+            print (json.dumps(self.IPMB_num_str))
+
+
+if __name__ == '__main__':
+    IPMB_cmd_str = 'ipmitool raw 0x2e 0x32 0x13 0x5f 0x00'        
+    groups_by_IPMB = GroupsByIPMB(IPMB_cmd_str)
+    groups_by_IPMB.groups_exec_IPMB_command()
+    groups_by_IPMB.groups_split_IPMB_ret_str()
+    groups_by_IPMB.groups_print_IPMB_num_str()
--- a/roles/groups-by-IPMB-addr/tasks/main.yml
+++ b/roles/groups-by-IPMB-addr/tasks/main.yml
@@ -0,0 +1,25 @@
+--- 
+
+- name: 'copy groups-by-IPMB-addr.fact to host'
+  copy:
+    src: "{{ role_path }}/files/groups_by_IPMB_addr.fact"
+    dest: "/etc/ansible/facts.d/groups_by_IPMB_addr.fact"
+    mode: "0755"  
+
+- name: 'Gathers facts from remote hosts'
+  setup:
+    filter: 'ansible_local'
+    fact_path: /etc/ansible/facts.d
+ 
+- name: "debug"
+  debug: var=ansible_local 
+ 
+- name: 'group by gathers facts'
+  group_by:
+    key: '{{item.key}}'
+  when: ansible_local.groups_by_IPMB_addr == item.value
+  with_items:
+   - { key: 'blade-00', value: 'IPMB_num_blade_00' }
+   - { key: 'blade-01', value: 'IPMB_num_blade_01' }
+   - { key: 'blade-02', value: 'IPMB_num_blade_02' }
+   - { key: 'blade-03', value: 'IPMB_num_blade_03' }
--- a/roles/kni/files/kni-3.0.0.b87af9b-1.el7.x86_64.rpm
+++ b/roles/kni/files/kni-3.0.0.b87af9b-1.el7.x86_64.rpm
--- a/roles/kni/files/kni-3.0.2.57bfa41-1.el7.x86_64.rpm
+++ b/roles/kni/files/kni-3.0.2.57bfa41-1.el7.x86_64.rpm
--- a/roles/kni/files/kni-debuginfo-3.0.0.b87af9b-1.el7.x86_64.rpm
+++ b/roles/kni/files/kni-debuginfo-3.0.0.b87af9b-1.el7.x86_64.rpm
--- a/roles/kni/files/kni-debuginfo-3.0.2.57bfa41-1.el7.x86_64.rpm
+++ b/roles/kni/files/kni-debuginfo-3.0.2.57bfa41-1.el7.x86_64.rpm
--- a/roles/kni/tasks/main.yml
+++ b/roles/kni/tasks/main.yml
@@ -7,7 +7,7 @@
 - name: "install kni rpms from localhost"
  yum:
    name:
-      - /tmp/ansible_deploy/kni-debug-3.0.1.f81dd69-1.el7.x86_64.rpm
+      - /tmp/ansible_deploy/kni-3.0.2.57bfa41-1.el7.x86_64.rpm
    state: present

 - name: Template the kni.conf
@@ -15,76 +15,6 @@
    src: "{{ role_path }}/templates/kni.conf.j2"
    dest: /home/mesasoft/sapp_run/etc/kni/kni.conf
  tags: template
-
- name: "install dns-debug rpms from localhost"
-  yum:
-    name:
-      - /tmp/ansible_deploy/dns-debug-1.0.0.-1.el7.x86_64.rpm
-    state: present
-  when: install_dns_debug == "yes"
-
- name: "install ftp-debug rpms from localhost"
-  yum:
-    name:
-      - /tmp/ansible_deploy/ftp-debug-1.0.0.-1.el7.x86_64.rpm
-    state: present
-  when: install_ftp_debug == "yes"
-
- name: "install http-debug rpms from localhost"
-  yum:
-    name:
-      - /tmp/ansible_deploy/http-debug-1.0.0.-1.el7.x86_64.rpm
-    state: present
-  when: install_http_debug == "yes"
- 
- name: "install mail-debug rpms from localhost"
-  yum:
-    name:
-      - /tmp/ansible_deploy/mail-debug-1.0.0.-1.el7.x86_64.rpm
-    state: present
-  when: install_mail_debug == "yes"
-
- name: "install ssl-debug rpms from localhost"
-  yum:
-    name:   
-      - /tmp/ansible_deploy/ssl-debug-1.0.0.-1.el7.x86_64.rpm
-    state: present
-  when: install_ssl_debug == "yes"
-
- name: "install fw_dns_plug-debug rpms from localhost"
-  yum:
-    name:
-      - /tmp/ansible_deploy/fw_dns_plug-debug-1.0.2.1c9d36d-1.el7.centos.x86_64.rpm
-    state: present
-  when: install_fw_dns_plug_debug == "yes" 
- 
- name: "install fw_ftp_plug-debug rpms from localhost"
-  yum:
-    name:
-      - /tmp/ansible_deploy/fw_ftp_plug-debug-1.0.0.bd656e4-1.el7.centos.x86_64.rpm
-    state: present
-  when: install_fw_ftp_plug_debug == "yes"
-  
- name: "install fw_http_plug-debug rpms from localhost"
-  yum:
-    name:
-      - /tmp/ansible_deploy/fw_http_plug-debug-1.0.3.3c95e78-1.el7.centos.x86_64.rpm
-    state: present
-  when: install_fw_http_plug_debug == "yes" 
- 
- name: "install fw_mail_plug-debug rpms from localhost"
-  yum:
-    name:
-      - /tmp/ansible_deploy/fw_mail_plug-debug-1.0.1.8792ed8-1.el7.centos.x86_64.rpm
-    state: present
-  when: install_fw_mail_plug_debug == "yes"
-
- name: "install tsg-master rpms from localhost"
-  yum:
-    name:
-      - /tmp/ansible_deploy/tsg_master-debug-1.0.1.f624b67-1.el7.centos.x86_64.rpm
-    state: present
-  when: install_tsg_master == "yes" 
 
 - name: "enable sapp"
  systemd:
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/PyNaCl-1.3.0-cp27-cp27mu-manylinux1_x86_64.whl
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/PyNaCl-1.3.0-cp27-cp27mu-manylinux1_x86_64.whl
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/PyYAML-3.13.tar.gz
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/PyYAML-3.13.tar.gz
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/attrs-19.3.0-py2.py3-none-any.whl
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/attrs-19.3.0-py2.py3-none-any.whl
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/backports.shutil_get_terminal_size-1.0.0-py2.py3-none-any.whl
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/backports.shutil_get_terminal_size-1.0.0-py2.py3-none-any.whl
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/backports.ssl_match_hostname-3.7.0.1.tar.gz
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/backports.ssl_match_hostname-3.7.0.1.tar.gz
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/bcrypt-3.1.7-cp27-cp27mu-manylinux1_x86_64.whl
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/bcrypt-3.1.7-cp27-cp27mu-manylinux1_x86_64.whl
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/cached_property-1.5.1-py2.py3-none-any.whl
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/cached_property-1.5.1-py2.py3-none-any.whl
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/certifi-2019.11.28-py2.py3-none-any.whl
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/certifi-2019.11.28-py2.py3-none-any.whl
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/cffi-1.13.2-cp27-cp27mu-manylinux1_x86_64.whl
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/cffi-1.13.2-cp27-cp27mu-manylinux1_x86_64.whl
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/chardet-3.0.4-py2.py3-none-any.whl
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/chardet-3.0.4-py2.py3-none-any.whl
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/configparser-4.0.2-py2.py3-none-any.whl
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/configparser-4.0.2-py2.py3-none-any.whl
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/contextlib2-0.6.0.post1-py2.py3-none-any.whl
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/contextlib2-0.6.0.post1-py2.py3-none-any.whl
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/cryptography-2.8-cp27-cp27mu-manylinux1_x86_64.whl
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/cryptography-2.8-cp27-cp27mu-manylinux1_x86_64.whl
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/docker-4.1.0-py2.py3-none-any.whl
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/docker-4.1.0-py2.py3-none-any.whl
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/docker_compose-1.25.0-py2.py3-none-any.whl
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/docker_compose-1.25.0-py2.py3-none-any.whl
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/dockerpty-0.4.1.tar.gz
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/dockerpty-0.4.1.tar.gz
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/docopt-0.6.2.tar.gz
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/docopt-0.6.2.tar.gz
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/enum34-1.1.6-py2-none-any.whl
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/enum34-1.1.6-py2-none-any.whl
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/functools32-3.2.3-2.tar.gz
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/functools32-3.2.3-2.tar.gz
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/idna-2.8-py2.py3-none-any.whl
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/idna-2.8-py2.py3-none-any.whl
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/importlib_metadata-1.3.0-py2.py3-none-any.whl
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/importlib_metadata-1.3.0-py2.py3-none-any.whl
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/ipaddress-1.0.23-py2.py3-none-any.whl
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/ipaddress-1.0.23-py2.py3-none-any.whl
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/jsonschema-3.2.0-py2.py3-none-any.whl
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/jsonschema-3.2.0-py2.py3-none-any.whl
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/more_itertools-5.0.0-py2-none-any.whl
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/more_itertools-5.0.0-py2-none-any.whl
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/paramiko-2.7.1-py2.py3-none-any.whl
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/paramiko-2.7.1-py2.py3-none-any.whl
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/pathlib2-2.3.5-py2.py3-none-any.whl
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/pathlib2-2.3.5-py2.py3-none-any.whl
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/pycparser-2.19.tar.gz
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/pycparser-2.19.tar.gz
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/pyrsistent-0.15.6.tar.gz
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/pyrsistent-0.15.6.tar.gz
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/requests-2.22.0-py2.py3-none-any.whl
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/requests-2.22.0-py2.py3-none-any.whl
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/scandir-1.10.0.tar.gz
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/scandir-1.10.0.tar.gz
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/setuptools-42.0.2-py2.py3-none-any.whl
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/setuptools-42.0.2-py2.py3-none-any.whl
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/six-1.13.0-py2.py3-none-any.whl
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/six-1.13.0-py2.py3-none-any.whl
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/subprocess32-3.5.4.tar.gz
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/subprocess32-3.5.4.tar.gz
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/texttable-1.6.2.tar.gz
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/texttable-1.6.2.tar.gz
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/urllib3-1.25.7-py2.py3-none-any.whl
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/urllib3-1.25.7-py2.py3-none-any.whl
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/websocket_client-0.57.0-py2.py3-none-any.whl
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/websocket_client-0.57.0-py2.py3-none-any.whl
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose/zipp-0.6.0-py2.py3-none-any.whl
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose/zipp-0.6.0-py2.py3-none-any.whl
--- a/roles/ssl-self-check/files/env_install/pip/docker_compose_req.txt
+++ b/roles/ssl-self-check/files/env_install/pip/docker_compose_req.txt
@@ -0,0 +1,37 @@
+attrs==19.3.0
+backports.shutil-get-terminal-size==1.0.0
+backports.ssl-match-hostname==3.5.0.1
+bcrypt==3.1.7
+cached-property==1.5.1
+certifi==2019.11.28
+cffi==1.13.2
+chardet==3.0.4
+configparser==4.0.2
+contextlib2==0.6.0.post1
+cryptography==2.8
+docker==4.1.0
+docker-compose==1.25.0
+dockerpty==0.4.1
+docopt==0.6.2
+enum34==1.1.6
+functools32==3.2.3.post2
+idna==2.8
+importlib-metadata==1.3.0
+ipaddress==1.0.23
+jsonschema==3.2.0
+more-itertools==5.0.0
+paramiko==2.7.1
+pathlib2==2.3.5
+pycparser==2.19
+PyNaCl==1.3.0
+pyrsistent==0.15.6
+PyYAML==3.13
+requests==2.22.0
+scandir==1.10.0
+setuptools==42.0.2
+six==1.13.0
+subprocess32==3.5.4
+texttable==1.6.2
+urllib3==1.25.7
+websocket-client==0.57.0
+zipp==0.6.0
--- a/roles/ssl-self-check/files/env_install/rpm/docker/docker-ce-17.03.2.ce-1.el7.centos.x86_64.rpm
+++ b/roles/ssl-self-check/files/env_install/rpm/docker/docker-ce-17.03.2.ce-1.el7.centos.x86_64.rpm
--- a/roles/ssl-self-check/files/env_install/rpm/docker/docker-ce-selinux-17.03.2.ce-1.el7.centos.noarch.rpm
+++ b/roles/ssl-self-check/files/env_install/rpm/docker/docker-ce-selinux-17.03.2.ce-1.el7.centos.noarch.rpm
--- a/roles/ssl-self-check/files/env_install/rpm/pip/python-backports-1.0-8.el7.x86_64.rpm
+++ b/roles/ssl-self-check/files/env_install/rpm/pip/python-backports-1.0-8.el7.x86_64.rpm
--- a/roles/ssl-self-check/files/env_install/rpm/pip/python-backports-ssl_match_hostname-3.5.0.1-1.el7.noarch.rpm
+++ b/roles/ssl-self-check/files/env_install/rpm/pip/python-backports-ssl_match_hostname-3.5.0.1-1.el7.noarch.rpm
--- a/roles/ssl-self-check/files/env_install/rpm/pip/python-ipaddress-1.0.16-2.el7.noarch.rpm
+++ b/roles/ssl-self-check/files/env_install/rpm/pip/python-ipaddress-1.0.16-2.el7.noarch.rpm
--- a/roles/ssl-self-check/files/env_install/rpm/pip/python-setuptools-0.9.8-7.el7.noarch.rpm
+++ b/roles/ssl-self-check/files/env_install/rpm/pip/python-setuptools-0.9.8-7.el7.noarch.rpm
--- a/roles/ssl-self-check/files/env_install/rpm/pip/python2-pip-8.1.2-10.el7.noarch.rpm
+++ b/roles/ssl-self-check/files/env_install/rpm/pip/python2-pip-8.1.2-10.el7.noarch.rpm
--- a/roles/ssl-self-check/files/env_install/rpm/python_devel/python-devel-2.7.5-86.el7.x86_64.rpm
+++ b/roles/ssl-self-check/files/env_install/rpm/python_devel/python-devel-2.7.5-86.el7.x86_64.rpm
--- a/roles/ssl-self-check/files/env_install/rpm/python_devel/python-rpm-macros-3-32.el7.noarch.rpm
+++ b/roles/ssl-self-check/files/env_install/rpm/python_devel/python-rpm-macros-3-32.el7.noarch.rpm
--- a/roles/ssl-self-check/files/env_install/rpm/python_devel/python-srpm-macros-3-32.el7.noarch.rpm
+++ b/roles/ssl-self-check/files/env_install/rpm/python_devel/python-srpm-macros-3-32.el7.noarch.rpm
--- a/roles/ssl-self-check/files/env_install/rpm/python_devel/python2-rpm-macros-3-32.el7.noarch.rpm
+++ b/roles/ssl-self-check/files/env_install/rpm/python_devel/python2-rpm-macros-3-32.el7.noarch.rpm
--- a/roles/ssl-self-check/files/ssl_self_check/certs/Makefile
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/Makefile
@@ -0,0 +1,132 @@
+################ Definitions ################
+
+export TEST_DOMAIN = badssl.test
+export TEST_DOMAIN_SELF_TEST =  badssl.self-test.geedge.net 
+export PROD_DOMAIN = badssl.com
+
+################ Main ################
+
+# This should bring up a full test server in docker from a bare repo.
+# Certs are generated outside the docker container, for persistence.
+.PHONY: test
+test: certs-test docker-build
+
+# Convenience alias.
+.PHONY: serve
+serve: test
+
+# This should properly deploy from any state of the repo.
+.PHONY: deploy
+deploy: certs-prod jekyll-prod upload nginx
+
+################ Jekyll ################
+
+.PHONY: jekyll-test
+jekyll-test:
+	DOMAIN=${TEST_DOMAIN_SELF_TEST} jekyll build
+
+.PHONY: jekyll-prod
+jekyll-prod:
+	DOMAIN=${PROD_DOMAIN} jekyll build
+
+################ Certs ################
+
+.PHONY: certs-test
+certs-test:
+	cd certs && make test O=sets/test D=badssl.self-test.geedge.net
+	cd certs/sets && rm -rf current && cp -R test current
+
+	rm -rf common/certs/*.crt
+	cp certs/sets/current/gen/crt/ca-root.crt common/certs
+	cp certs/sets/current/gen/crt/ca-untrusted-root.crt common/certs
+	cp certs/sets/current/gen/crt/client.p12 common/certs/${TEST_DOMAIN}-client.p12
+	cp certs/sets/current/gen/crt/client.pem common/certs/${TEST_DOMAIN}-client.pem
+
+.PHONY: certs-prod
+certs-prod:
+	cd certs && make prod O=sets/prod D=badssl.com
+	cd certs/sets && rm -rf current && cp -R prod current
+
+	rm -rf common/certs/*.crt
+	cp certs/sets/current/gen/crt/ca-untrusted-root.crt common/certs
+	cp certs/sets/current/gen/crt/client.p12 common/certs/${PROD_DOMAIN}-client.p12
+	cp certs/sets/current/gen/crt/client.pem common/certs/${PROD_DOMAIN}-client.pem
+
+.PHONY: clean-certs
+clean-certs:
+	rm -rf certs/sets/current
+	rm -rf certs/sets/*/gen
+	rm -rf common/certs/*.crt
+
+################ Installation ################
+
+.PHONY: install-keys
+install-keys:
+	mkdir -p /etc/keys
+	cp ./certs/sets/current/gen/key/*.key /etc/keys
+	chmod 640 /etc/keys/*.key
+	chmod 750 /etc/keys
+
+.PHONY: link
+link:
+	if [ ! -d /var/www ]; then mkdir -p /var/www; fi
+	if [ ! -d /var/www/badssl ]; then ln -sf "`pwd`" /var/www/badssl; fi
+	# Add the badssl.conf include to /etc/nginx/nginx.conf only if it is not already in the config.
+	# If /etc/nginx/nginx.conf does not exist, instead warn the user that it must be manually added.
+	if [ -f /etc/nginx/nginx.conf ]; then \
+		if ! grep -q "include /var/www/badssl/_site/nginx.conf" /etc/nginx/nginx.conf; then \
+			sed -i '/# Virtual Host Configs/a\\tinclude /var/www/badssl/_site/nginx.conf;' /etc/nginx/nginx.conf; \
+		fi \
+	else \
+		@echo "Please add `pwd`/_site/nginx.conf to your nginx.conf configuration."; \
+	fi
+
+.PHONY: install
+install: install-keys link
+
+.PHONY: clean
+clean: clean-certs
+	rm -rf _site
+	rm -f /etc/keys/*.key
+
+################ Docker ################
+
+.PHONY: inside-docker
+inside-docker: jekyll-test install
+
+.PHONY: docker-build
+docker-build:
+	docker build -t badssl:ssl-self-test .
+
+.PHONY: docker-run
+docker-run:
+	docker run -it -p 80:80 -p 443:443 -p 1000-1024:1000-1024 badssl
+
+################ Deployment ################
+
+.PHONY: upload
+upload:
+	rsync -avz \
+		--exclude .DS_Store \
+		--exclude .git \
+		--exclude _site/domains-local-only \
+		--delete  --delete-excluded \
+		./ \
+		badssl.com:~/badssl/
+	echo "\nDone deploying.\n"
+
+.PHONY: nginx
+nginx:
+	ssh badssl.com "sudo nginx -t ; sudo service nginx reload"
+
+##
+
+.PHONY: list-hosts
+list-hosts:
+	@echo "#### start of badssl.self-test.geedge.net hosts ####"
+	@grep -r "server_name.*{{ site.domain }}" . \
+		| sed "s/.*server_name \([^\{]*\).*/127.0.0.1 \1badssl.self-test.geedge.net/g" \
+		| sort \
+		| uniq \
+		| grep -v "\*"
+	@echo "#### end of badssl.self-test.geedge.net hosts ####"
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/.gitignore
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/.gitignore
@@ -0,0 +1,6 @@
+/src/crt/*.srl
+*.key
+sets/current
+sets/*/gen
+sets/*/pregen/crt
+sets/*/pregen/key
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/Makefile
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/Makefile
@@ -0,0 +1,474 @@
+# chain     :: pem <= []crt
+# dhparam   :: pem <= int (#bits)
+# gen-ca    :: crt <= conf, key
+# gen-csr   :: csr <= conf, key
+# gen-key    :: key <= int (#bits)
+# gen-ecckey :: key <= string (ECC Prime)
+# self-sign :: crt <= days, hash, extensions, conf, csr, key (self)
+# sign      :: crt <= days, hash, extensions, conf, csr, key (CA), crt (CA)
+
+# TODO:
+# Generate the expired cert in the past.
+
+# Note: Files and paths must not contain spaces.
+
+D = badssl.com
+MAIN_CERT_TYPE = rsa2048
+DAYS_DEFAULT = 730
+HASH_DEFAULT = sha256
+
+SIGN_CA_DEFAULTS = 3650 $(HASH_DEFAULT) req_v3_ca
+SIGN_LEAF_DEFAULTS = $(DAYS_DEFAULT) $(HASH_DEFAULT) req_v3_usr
+
+# These variables will keep track of all chain targets.
+CHAINS_PROD =
+# These are chains that we can't get public versions of (usually due to Baseline Requirements).
+CHAINS_LOCAL_ONLY =
+
+O = sets/test
+
+.PHONY: all
+all: test
+
+.PHONY: test
+test: prod chains-local
+
+.PHONY: prod
+prod: chains-prod dhparams
+
+.PHONY: clean
+clean:
+	rm -rf $(O)/gen
+
+################################
+$(O)/gen/key/ca-root.key:
+	./tool gen-key $@ $(D) 4096
+$(O)/gen/crt/ca-root.crt: src/conf/ca-root.conf $(O)/gen/key/ca-root.key
+	./tool gen-ca $@ $(D) $^
+
+################################
+$(O)/gen/key/client-ca-root.key:
+	./tool gen-key $@ $(D) 4096
+$(O)/gen/crt/client-ca-root.crt: src/conf/client-ca-root.conf $(O)/gen/key/client-ca-root.key
+	./tool gen-ca $@ $(D) $^
+$(O)/gen/chain/client-ca-root.pem: $(O)/gen/crt/client-ca-root.crt
+	./tool chain $@ $(D) $^
+CHAINS_PROD += $(O)/gen/chain/client-ca-root.pem
+
+$(O)/gen/key/client-ca-untrusted-root.key:
+	./tool gen-key $@ $(D) 4096
+$(O)/gen/crt/client-ca-untrusted-root.crt: src/conf/client-ca-untrusted-root.conf $(O)/gen/key/client-ca-untrusted-root.key
+	./tool gen-ca $@ $(D) $^
+$(O)/gen/chain/client-ca-untrusted-root.pem: $(O)/gen/crt/client-ca-untrusted-root.crt
+	./tool chain $@ $(D) $^
+CHAINS_PROD += $(O)/gen/chain/client-ca-untrusted-root.pem
+
+$(O)/gen/key/client.key:
+	./tool gen-key $@ $(D) 2048
+$(O)/gen/csr/client.csr: src/conf/client.conf $(O)/gen/key/client.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/client.crt: src/conf/client.conf $(O)/gen/csr/client.csr $(O)/gen/key/client-ca-root.key $(O)/gen/crt/client-ca-root.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+$(O)/gen/crt/client.p12: $(O)/gen/crt/client.crt $(O)/gen/key/client.key
+	./tool gen-pkcs12-p12 $@ $(D) $^
+$(O)/gen/crt/client.pem: $(O)/gen/crt/client.p12
+	./tool pkcs12-convert-p12-pem $@ $(D) $^
+CHAINS_PROD += $(O)/gen/crt/client.pem
+
+################################
+$(O)/gen/key/ca-untrusted-root.key:
+	./tool gen-key $@ $(D) 4096
+$(O)/gen/crt/ca-untrusted-root.crt: src/conf/ca-untrusted-root.conf $(O)/gen/key/ca-untrusted-root.key
+	./tool gen-ca $@ $(D) $^
+
+################################
+$(O)/gen/key/ca-intermediate.key:
+	./tool gen-key $@ $(D) 4096
+$(O)/gen/csr/ca-intermediate.csr: src/conf/ca-intermediate.conf $(O)/gen/key/ca-intermediate.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/ca-intermediate.crt: src/conf/ca-intermediate.conf $(O)/gen/csr/ca-intermediate.csr $(O)/gen/key/ca-root.key $(O)/gen/crt/ca-root.crt
+	./tool sign $@ $(D) $(SIGN_CA_DEFAULTS) $^
+
+################################
+$(O)/gen/key/ca-sha1-intermediate.key:
+	./tool gen-key $@ $(D) 4096
+$(O)/gen/csr/ca-sha1-intermediate.csr: src/conf/ca-intermediate.conf $(O)/gen/key/ca-sha1-intermediate.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/ca-sha1-intermediate.crt: src/conf/ca-intermediate.conf $(O)/gen/csr/ca-sha1-intermediate.csr $(O)/gen/key/ca-root.key $(O)/gen/crt/ca-root.crt
+	./tool sign $@ $(D) 3650 sha1 req_v3_ca $^
+
+################################
+$(O)/gen/key/leaf-main.key: $(O)/gen/key/leaf-$(MAIN_CERT_TYPE).key
+	cp $< $@
+$(O)/gen/csr/wildcard-main.csr: $(O)/gen/csr/wildcard-$(MAIN_CERT_TYPE).csr
+	cp $< $@
+$(O)/gen/crt/wildcard-main.crt: $(O)/gen/crt/wildcard-$(MAIN_CERT_TYPE).crt
+	cp $< $@
+
+################################
+$(O)/gen/csr/fallback.csr: src/conf/fallback.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/fallback.crt: src/conf/fallback.conf $(O)/gen/csr/fallback.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/fallback.pem
+$(O)/gen/chain/fallback.pem: $(O)/gen/crt/fallback.crt
+	./tool chain $@ $(D) $^
+
+################################
+CHAINS_PROD += $(O)/gen/chain/wildcard-incomplete-chain.pem
+$(O)/gen/chain/wildcard-incomplete-chain.pem: $(O)/gen/crt/wildcard-main.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/crt/wildcard-sha1-2016.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-main.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	# TODO: date calculations
+	./tool sign $@ $(D) 10 sha1 req_v3_usr $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-sha1-2016.pem
+$(O)/gen/chain/wildcard-sha1-2016.pem: $(O)/gen/crt/wildcard-sha1-2016.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/crt/wildcard-sha1-2017.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-main.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	# TODO: date calculations
+	./tool sign $@ $(D) 200 sha1 req_v3_usr $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-sha1-2017.pem
+$(O)/gen/chain/wildcard-sha1-2017.pem: $(O)/gen/crt/wildcard-sha1-2017.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/crt/wildcard-sha1-intermediate.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-main.csr $(O)/gen/key/ca-sha1-intermediate.key $(O)/gen/crt/ca-sha1-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-sha1-intermediate.pem
+$(O)/gen/chain/wildcard-sha1-intermediate.pem: $(O)/gen/crt/wildcard-sha1-intermediate.crt $(O)/gen/crt/ca-sha1-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/crt/wildcard-md5.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-main.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(DAYS_DEFAULT) md5 req_v3_usr $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-md5.pem
+$(O)/gen/chain/wildcard-md5.pem: $(O)/gen/crt/wildcard-md5.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/crt/wildcard-sha384.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-main.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(DAYS_DEFAULT) sha384 req_v3_usr $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-sha384.pem
+$(O)/gen/chain/wildcard-sha384.pem: $(O)/gen/crt/wildcard-sha384.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/crt/wildcard-sha512.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-main.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(DAYS_DEFAULT) sha512 req_v3_usr $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-sha512.pem
+$(O)/gen/chain/wildcard-sha512.pem: $(O)/gen/crt/wildcard-sha512.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/crt/wildcard-expired.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-main.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	# Too lazy to setup the loathsome mess that is openssl ca when I could just wait a day
+	./tool sign $@ $(D) 1 sha256 req_v3_usr $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-expired.pem
+$(O)/gen/chain/wildcard-expired.pem: $(O)/gen/crt/wildcard-expired.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/crt/wildcard-untrusted-root.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-main.csr $(O)/gen/key/ca-untrusted-root.key $(O)/gen/crt/ca-untrusted-root.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-untrusted-root.pem
+$(O)/gen/chain/wildcard-untrusted-root.pem: $(O)/gen/crt/wildcard-untrusted-root.crt $(O)/gen/crt/ca-untrusted-root.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/crt/wildcard-self-signed.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-main.csr $(O)/gen/key/leaf-main.key
+	./tool self-sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-self-signed.pem
+$(O)/gen/chain/wildcard-self-signed.pem: $(O)/gen/crt/wildcard-self-signed.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/key/leaf-rsa512.key:
+	./tool gen-key $@ $(D) 512
+$(O)/gen/csr/wildcard-rsa512.csr: src/conf/wildcard.conf $(O)/gen/key/leaf-rsa512.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/wildcard-rsa512.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-rsa512.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_LOCAL_ONLY += $(O)/gen/chain/wildcard-rsa512.pem
+$(O)/gen/chain/wildcard-rsa512.pem: $(O)/gen/crt/wildcard-rsa512.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/key/leaf-rsa1024.key:
+	./tool gen-key $@ $(D) 1024
+$(O)/gen/csr/wildcard-rsa1024.csr: src/conf/wildcard.conf $(O)/gen/key/leaf-rsa1024.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/wildcard-rsa1024.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-rsa1024.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_LOCAL_ONLY += $(O)/gen/chain/wildcard-rsa1024.pem
+$(O)/gen/chain/wildcard-rsa1024.pem: $(O)/gen/crt/wildcard-rsa1024.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/key/leaf-rsa2048.key:
+	./tool gen-key $@ $(D) 2048
+$(O)/gen/csr/wildcard-rsa2048.csr: src/conf/wildcard.conf $(O)/gen/key/leaf-rsa2048.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/wildcard-rsa2048.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-rsa2048.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-rsa2048.pem
+$(O)/gen/chain/wildcard-rsa2048.pem: $(O)/gen/crt/wildcard-rsa2048.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/key/leaf-rsa3072.key:
+	./tool gen-key $@ $(D) 3072
+$(O)/gen/csr/wildcard-rsa3072.csr: src/conf/wildcard.conf $(O)/gen/key/leaf-rsa3072.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/wildcard-rsa3072.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-rsa3072.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_LOCAL_ONLY += $(O)/gen/chain/wildcard-rsa3072.pem
+$(O)/gen/chain/wildcard-rsa3072.pem: $(O)/gen/crt/wildcard-rsa3072.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/key/leaf-rsa8192.key:
+	./tool gen-key $@ $(D) 8192
+$(O)/gen/csr/wildcard-rsa8192.csr: src/conf/wildcard.conf $(O)/gen/key/leaf-rsa8192.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/wildcard-rsa8192.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-rsa8192.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-rsa8192.pem
+$(O)/gen/chain/wildcard-rsa8192.pem: $(O)/gen/crt/wildcard-rsa8192.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/key/leaf-rsa4096.key:
+	./tool gen-key $@ $(D) 4096
+$(O)/gen/csr/wildcard-rsa4096.csr: src/conf/wildcard.conf $(O)/gen/key/leaf-rsa4096.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/wildcard-rsa4096.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-rsa4096.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-rsa4096.pem
+$(O)/gen/chain/wildcard-rsa4096.pem: $(O)/gen/crt/wildcard-rsa4096.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/key/leaf-ecc256.key:
+	./tool gen-ecckey $@ $(D) prime256v1
+$(O)/gen/csr/wildcard-ecc256.csr: src/conf/wildcard.conf $(O)/gen/key/leaf-ecc256.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/wildcard-ecc256.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-ecc256.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-ecc256.pem
+$(O)/gen/chain/wildcard-ecc256.pem: $(O)/gen/crt/wildcard-ecc256.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/key/leaf-ecc384.key:
+	./tool gen-ecckey $@ $(D) secp384r1
+$(O)/gen/csr/wildcard-ecc384.csr: src/conf/wildcard.conf $(O)/gen/key/leaf-ecc384.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/wildcard-ecc384.crt: src/conf/wildcard.conf $(O)/gen/csr/wildcard-ecc384.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/wildcard-ecc384.pem
+$(O)/gen/chain/wildcard-ecc384.pem: $(O)/gen/crt/wildcard-ecc384.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/csr/subdomain-no-common-name.csr: src/conf/subdomain-no-common-name.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-no-common-name.crt: src/conf/subdomain-no-common-name.conf $(O)/gen/csr/subdomain-no-common-name.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-no-common-name.pem
+$(O)/gen/chain/subdomain-no-common-name.pem: $(O)/gen/crt/subdomain-no-common-name.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/csr/subdomain-no-san.csr: src/conf/subdomain-no-san.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-no-san.crt: src/conf/subdomain-no-san.conf $(O)/gen/csr/subdomain-no-san.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_LOCAL_ONLY += $(O)/gen/chain/subdomain-no-san.pem
+$(O)/gen/chain/subdomain-no-san.pem: $(O)/gen/crt/subdomain-no-san.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/csr/subdomain-no-subject.csr: src/conf/subdomain-no-subject.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr-no-subject $@ $(D) $^
+$(O)/gen/crt/subdomain-no-subject.crt: src/conf/subdomain-no-subject.conf $(O)/gen/csr/subdomain-no-subject.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-no-subject.pem
+$(O)/gen/chain/subdomain-no-subject.pem: $(O)/gen/crt/subdomain-no-subject.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/csr/subdomain-1000-sans.csr: src/conf/subdomain-1000-sans.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-1000-sans.crt: src/conf/subdomain-1000-sans.conf $(O)/gen/csr/subdomain-1000-sans.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-1000-sans.pem
+$(O)/gen/chain/subdomain-1000-sans.pem: $(O)/gen/crt/subdomain-1000-sans.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/csr/subdomain-10000-sans.csr: src/conf/subdomain-10000-sans.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-10000-sans.crt: src/conf/subdomain-10000-sans.conf $(O)/gen/csr/subdomain-10000-sans.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-10000-sans.pem
+$(O)/gen/chain/subdomain-10000-sans.pem: $(O)/gen/crt/subdomain-10000-sans.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/csr/subdomain-xn--n1aae7f7o.csr: src/conf/subdomain-xn--n1aae7f7o.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-xn--n1aae7f7o.crt: src/conf/subdomain-xn--n1aae7f7o.conf $(O)/gen/csr/subdomain-xn--n1aae7f7o.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-xn--n1aae7f7o.pem
+$(O)/gen/chain/subdomain-xn--n1aae7f7o.pem: $(O)/gen/crt/subdomain-xn--n1aae7f7o.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/csr/subdomain-extended-validation.csr: src/conf/subdomain-extended-validation.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-extended-validation.crt: src/conf/subdomain-extended-validation.conf $(O)/gen/csr/subdomain-extended-validation.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-extended-validation.pem
+$(O)/gen/chain/subdomain-extended-validation.pem: $(O)/gen/crt/subdomain-extended-validation.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+# Note: this is just a regular cert in `test`.
+# Getting a real-world cert without SCTs may be extra work in the future.
+$(O)/gen/csr/subdomain-preloaded-expect-ct.csr: src/conf/subdomain-preloaded-expect-ct.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-preloaded-expect-ct.crt: src/conf/subdomain-preloaded-expect-ct.conf $(O)/gen/csr/subdomain-preloaded-expect-ct.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-preloaded-expect-ct.pem
+$(O)/gen/chain/subdomain-preloaded-expect-ct.pem: $(O)/gen/crt/subdomain-preloaded-expect-ct.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+# Note: this is just a regular cert in `test`
+$(O)/gen/csr/subdomain-invalid-expected-sct.csr: src/conf/subdomain-invalid-expected-sct.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-invalid-expected-sct.crt: src/conf/subdomain-invalid-expected-sct.conf $(O)/gen/csr/subdomain-invalid-expected-sct.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-invalid-expected-sct.pem
+$(O)/gen/chain/subdomain-invalid-expected-sct.pem: $(O)/gen/crt/subdomain-invalid-expected-sct.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+# Note: this is just a regular cert in `test`
+$(O)/gen/csr/subdomain-no-sct.csr: src/conf/subdomain-no-sct.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-no-sct.crt: src/conf/subdomain-no-sct.conf $(O)/gen/csr/subdomain-no-sct.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-no-sct.pem
+$(O)/gen/chain/subdomain-no-sct.pem: $(O)/gen/crt/subdomain-no-sct.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/csr/subdomain-superfish.csr: src/conf/subdomain-superfish.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-superfish.crt: src/conf/subdomain-superfish.conf $(O)/gen/csr/subdomain-superfish.csr src/key/ca-superfish.key src/crt/ca-superfish.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-superfish.pem
+$(O)/gen/chain/subdomain-superfish.pem: $(O)/gen/crt/subdomain-superfish.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/csr/subdomain-mitm-software.csr: src/conf/subdomain-mitm-software.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-mitm-software.crt: src/conf/subdomain-mitm-software.conf $(O)/gen/csr/subdomain-mitm-software.csr src/key/ca-mitm-software.key src/crt/ca-mitm-software.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-mitm-software.pem
+$(O)/gen/chain/subdomain-mitm-software.pem: $(O)/gen/crt/subdomain-mitm-software.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/csr/subdomain-edellroot.csr: src/conf/subdomain-edellroot.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-edellroot.crt: src/conf/subdomain-edellroot.conf $(O)/gen/csr/subdomain-edellroot.csr src/key/ca-edellroot.key src/crt/ca-edellroot.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-edellroot.pem
+$(O)/gen/chain/subdomain-edellroot.pem: $(O)/gen/crt/subdomain-edellroot.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/csr/subdomain-dsdtestprovider.csr: src/conf/subdomain-dsdtestprovider.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-dsdtestprovider.crt: src/conf/subdomain-dsdtestprovider.conf $(O)/gen/csr/subdomain-dsdtestprovider.csr src/key/ca-dsdtestprovider.key src/crt/ca-dsdtestprovider.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-dsdtestprovider.pem
+$(O)/gen/chain/subdomain-dsdtestprovider.pem: $(O)/gen/crt/subdomain-dsdtestprovider.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/csr/subdomain-preact-cli.csr: src/conf/subdomain-preact-cli.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-preact-cli.crt: src/conf/subdomain-preact-cli.conf $(O)/gen/csr/subdomain-preact-cli.csr src/key/ca-preact-cli.key src/crt/ca-preact-cli.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-preact-cli.pem
+$(O)/gen/chain/subdomain-preact-cli.pem: $(O)/gen/crt/subdomain-preact-cli.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/csr/subdomain-webpack-dev-server.csr: src/conf/subdomain-webpack-dev-server.conf $(O)/gen/key/leaf-main.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-webpack-dev-server.crt: src/conf/subdomain-webpack-dev-server.conf $(O)/gen/csr/subdomain-webpack-dev-server.csr src/key/ca-webpack-dev-server.key src/crt/ca-webpack-dev-server.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-webpack-dev-server.pem
+$(O)/gen/chain/subdomain-webpack-dev-server.pem: $(O)/gen/crt/subdomain-webpack-dev-server.crt
+	./tool chain $@ $(D) $^
+
+################################
+$(O)/gen/key/leaf-revoked.key:
+	./tool gen-key $@ $(D) 2048
+
+################################
+$(O)/gen/csr/subdomain-revoked.csr: src/conf/subdomain-revoked.conf $(O)/gen/key/leaf-revoked.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-revoked.crt: src/conf/subdomain-revoked.conf $(O)/gen/csr/subdomain-revoked.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-revoked.pem
+$(O)/gen/chain/subdomain-revoked.pem: $(O)/gen/crt/subdomain-revoked.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+
+################################
+$(O)/gen/key/leaf-captive-portal.key:
+	./tool gen-key $@ $(D) 2048
+
+################################
+$(O)/gen/csr/subdomain-captive-portal.csr: src/conf/subdomain-captive-portal.conf $(O)/gen/key/leaf-captive-portal.key
+	./tool gen-csr $@ $(D) $^
+$(O)/gen/crt/subdomain-captive-portal.crt: src/conf/subdomain-captive-portal.conf $(O)/gen/csr/subdomain-captive-portal.csr $(O)/gen/key/ca-intermediate.key $(O)/gen/crt/ca-intermediate.crt
+	./tool sign $@ $(D) $(SIGN_LEAF_DEFAULTS) $^
+CHAINS_PROD += $(O)/gen/chain/subdomain-captive-portal.pem
+$(O)/gen/chain/subdomain-captive-portal.pem: $(O)/gen/crt/subdomain-captive-portal.crt $(O)/gen/crt/ca-intermediate.crt
+	./tool chain $@ $(D) $^
+
+
+################################
+$(O)/gen/dhparam/dh480.pem:
+	./tool dhparam $@ $(D) 480
+$(O)/gen/dhparam/dh512.pem:
+	./tool dhparam $@ $(D) 512
+$(O)/gen/dhparam/dh1024.pem:
+	./tool dhparam $@ $(D) 1024
+$(O)/gen/dhparam/dh2048.pem:
+	./tool dhparam $@ $(D) 2048
+$(O)/gen/dhparam/dh-composite.pem: src/dhparam/dh-composite.pem
+	cp $^ $@
+$(O)/gen/dhparam/dh-small-subgroup.pem: src/dhparam/dh-small-subgroup.pem
+	cp $^ $@
+
+################################
+.PHONY: chains-prod
+chains-prod: $(CHAINS_PROD)
+
+.PHONY: chains-local
+chains-local: chains-prod $(CHAINS_LOCAL_ONLY)
+
+.PHONY: dhparams
+dhparams: $(O)/gen/dhparam/dh480.pem $(O)/gen/dhparam/dh512.pem $(O)/gen/dhparam/dh1024.pem $(O)/gen/dhparam/dh2048.pem $(O)/gen/dhparam/dh-composite.pem $(O)/gen/dhparam/dh-small-subgroup.pem
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/backup/wildcard-sha256-rsa2048-embeded-sct.crt
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/backup/wildcard-sha256-rsa2048-embeded-sct.crt
@@ -0,0 +1,67 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/fallback.pem
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/fallback.pem
@@ -0,0 +1,29 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/old/subdomain-sha384.pem
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/old/subdomain-sha384.pem
@@ -0,0 +1,67 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/old/subdomain-sha512.pem
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/old/subdomain-sha512.pem
@@ -0,0 +1,67 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/old/wildcard-incomplete-chain.pem
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/old/wildcard-incomplete-chain.pem
@@ -0,0 +1,31 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/old/wildcard-main-old.pem
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/old/wildcard-main-old.pem
@@ -0,0 +1,98 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIGCDCCA/CgAwIBAgIQKy5u6tl1NmwUim7bo3yMBzANBgkqhkiG9w0BAQwFADCB
+hTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
+A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxKzApBgNV
+BAMTIkNPTU9ETyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTQwMjEy
+MDAwMDAwWhcNMjkwMjExMjM1OTU5WjCBkDELMAkGA1UEBhMCR0IxGzAZBgNVBAgT
+EkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMR
+Q09NT0RPIENBIExpbWl0ZWQxNjA0BgNVBAMTLUNPTU9ETyBSU0EgRG9tYWluIFZh
+bGlkYXRpb24gU2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+ADCCAQoCggEBAI7CAhnhoFmk6zg1jSz9AdDTScBkxwtiBUUWOqigwAwCfx3M28Sh
+bXcDow+G+eMGnD4LgYqbSRutA776S9uMIO3Vzl5ljj4Nr0zCsLdFXlIvNN5IJGS0
+Qa4Al/e+Z96e0HqnU4A7fK31llVvl0cKfIWLIpeNs4TgllfQcBhglo/uLQeTnaG6
+ytHNe+nEKpooIZFNb5JPJaXyejXdJtxGpdCsWTWM/06RQ1A/WZMebFEh7lgUq/51
+UHg+TLAchhP6a5i84DuUHoVS3AOTJBhuyydRReZw3iVDpA3hSqXttn7IzW3uLh0n
+c13cRTCAquOyQQuvvUSH2rnlG51/ruWFgqUCAwEAAaOCAWUwggFhMB8GA1UdIwQY
+MBaAFLuvfgI9+qbxPISOre44mOzZMjLUMB0GA1UdDgQWBBSQr2o6lFoL2JDqElZz
+30O0Oija5zAOBgNVHQ8BAf8EBAMCAYYwEgYDVR0TAQH/BAgwBgEB/wIBADAdBgNV
+HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwGwYDVR0gBBQwEjAGBgRVHSAAMAgG
+BmeBDAECATBMBgNVHR8ERTBDMEGgP6A9hjtodHRwOi8vY3JsLmNvbW9kb2NhLmNv
+bS9DT01PRE9SU0FDZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNybDBxBggrBgEFBQcB
+AQRlMGMwOwYIKwYBBQUHMAKGL2h0dHA6Ly9jcnQuY29tb2RvY2EuY29tL0NPTU9E
+T1JTQUFkZFRydXN0Q0EuY3J0MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5jb21v
+ZG9jYS5jb20wDQYJKoZIhvcNAQEMBQADggIBAE4rdk+SHGI2ibp3wScF9BzWRJ2p
+mj6q1WZmAT7qSeaiNbz69t2Vjpk1mA42GHWx3d1Qcnyu3HeIzg/3kCDKo2cuH1Z/
+e+FE6kKVxF0NAVBGFfKBiVlsit2M8RKhjTpCipj4SzR7JzsItG8kO3KdY3RYPBps
+P0/HEZrIqPW1N+8QRcZs2eBelSaz662jue5/DJpmNXMyYE7l3YphLG5SEXdoltMY
+dVEVABt0iN3hxzgEQyjpFv3ZBdRdRydg1vs4O2xyopT4Qhrf7W8GjEXCBgCq5Ojc
+2bXhc3js9iPc0d1sjhqPpepUfJa3w/5Vjo1JXvxku88+vZbrac2/4EjxYoIQ5QxG
+V/Iz2tDIY+3GH5QFlkoakdH368+PUq4NCNk+qKBR6cGHdNXJ93SrLlP7u3r7l+L4
+HyaPs9Kg4DdbKDsx5Q5XLVq4rXmsXiBmGqW5prU5wfWYQ//u+aen/e7KJD2AFsQX
+j4rBYKEMrltDR5FL1ZoXX/nUh8HCjLfn4g8wGTeGrODcQgPmlKidrv0PJFGUzpII
+0fxQ8ANAe4hZ7Q7drNJ3gjTcBpUC2JD5Leo31Rpg0Gcg19hCC0Wvgmje3WYkN5Ap
+lBlGGSW4gNfL1IYoakRwJiNiqZ+Gb7+6kHDSVneFeO/qJakXzlByjAA6quPbYzSf
+AZxAeKCINT+b72x
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-1000-sans.pem
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-1000-sans.pem
@@ -0,0 +1,625 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-10000-sans.pem
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-10000-sans.pem
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-captive-portal.pem
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-captive-portal.pem
@@ -0,0 +1,68 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
+MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
+QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
+MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
+U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
+ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
+nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
+KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
+/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
+kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
+/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
+AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
+aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
+Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
+oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
+QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
+d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
+xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
+CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
+5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
+8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
+2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
+c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
+j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
+-----END CERTIFICATE-----
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-dsdtestprovider.pem
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-dsdtestprovider.pem
@@ -0,0 +1,26 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-edellroot.pem
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-edellroot.pem
@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-extended-validation.pem
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-extended-validation.pem
@@ -0,0 +1,70 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-invalid-expected-sct.pem
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-invalid-expected-sct.pem
@@ -0,0 +1,52 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIETTCCAzWgAwIBAgIDAjpxMA0GCSqGSIb3DQEBCwUAMEIxCzAJBgNVBAYTAlVTMRYwFAYDVQQK
+Ew1HZW9UcnVzdCBJbmMuMRswGQYDVQQDExJHZW9UcnVzdCBHbG9iYWwgQ0EwHhcNMTMxMjExMjM0
+NTUxWhcNMjIwNTIwMjM0NTUxWjBCMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5j
+LjEbMBkGA1UEAxMSUmFwaWRTU0wgU0hBMjU2IENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
+CgKCAQEAu1jBEgEul9h9GKrIwuWF4hdsYC7JjTEFORoGmFbdVNcRjFlbPbFUrkshhTIWX1SG5tmx
+2GCJa1i+ctqgAEJ2sSdZTM3jutRc2aZ/uyt11UZEvexAXFm33Vmf8Wr3BvzWLxmKlRK6msrVMNI4
+/Bk7WxU7NtBDTdFlodSLwWBBs9ZwF8w5wJwMoD23ESJOztmpetIqYpygC04q18NhWoXdXBC5VD0t
+A/hJ8LySt7ecMcfpuKqCCwW5Mc0IW7siC/acjopVHHZDdvDibvDfqCl158ikh4tq8bsIyTYYZe5Q
+Q7hdctUoOeFTPiUs2itP3YqeUFDgb5rE1RkmiQF1cwmbOwIDAQABo4IBSjCCAUYwHwYDVR0jBBgw
+FoAUwHqYaI2J+6sFZAwRfap9ZbjKzE4wHQYDVR0OBBYEFJfCJ1CewsnsDIgyyHyt4qYBT9pvMBIG
+A1UdEwEB/wQIMAYBAf8CAQAwDgYDVR0PAQH/BAQDAgEGMDYGA1UdHwQvMC0wK6ApoCeGJWh0dHA6
+Ly9nMS5zeW1jYi5jb20vY3Jscy9ndGdsb2JhbC5jcmwwLwYIKwYBBQUHAQEEIzAhMB8GCCsGAQUF
+BzABhhNodHRwOi8vZzIuc3ltY2IuY29tMEwGA1UdIARFMEMwQQYKYIZIAYb4RQEHNjAzMDEGCCsG
+AQUFBwIBFiVodHRwOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvY3BzMCkGA1UdEQQiMCCk
+HjAcMRowGAYDVQQDExFTeW1hbnRlY1BLSS0xLTU2OTANBgkqhkiG9w0BAQsFAAOCAQEANevhiyBW
+lLp6vXmp9uP+bji0MsGj21hWID59xzqxZ2nVeRQb9vrsYPJ5zQoMYIp0TKOTKqDwUX/N6fmS/Zar
+RfViPT9gRlATPSATGC6URq7VIf5Dockj/lPEvxrYrDrK3maXI67T30pNcx9vMaJRBBZqAOv5jUOB
+8FChH6bKOvMoPF9RrNcKRXdLDlJiG9g4UaCSLT+Qbsh+QJ8gRhVd4FB84XavXu0R0y8TubglpK9Y
+Ca81tGJUheNI3rzSkHp6pIQNo0LyUcDUrVNlXWz4Px8G8k/Ll6BKWcZ40egDuYVtLLrhX7atKz4l
+ecWLVtXjCYDqwSfC2Q7sRwrp0Mr82A==
+-----END CERTIFICATE-----
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-no-common-name.pem
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-no-common-name.pem
@@ -0,0 +1,100 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-no-sct.pem
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-no-sct.pem
@@ -0,0 +1,57 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-no-subject.pem
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-no-subject.pem
@@ -0,0 +1,103 @@
+-----BEGIN CERTIFICATE-----
+MIIGdTCCBV2gAwIBAgIQI+ZPIMN8DYcQH3GS78XTcjANBgkqhkiG9w0BAQsFADCB
+gDELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
+A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxJjAkBgNV
+BAMMHVViaXF1aVRMU+KEoiBEViBSU0EgU2VydmVyIENBMB4XDTE3MDMxNzAwMDAw
+MFoXDTIwMDYxNjIzNTk1OVowADCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
+ggEBAMIE7PiM7gTCs9hQ1XBYzJMY61yoaEmwIrX5lZ6xKyx2PmzAS2BMTOqytMAP
+gLaw+XLJhgL5XEFdEyt/ccRLvOmULlA3pmccYYz2QULFRtMWhyefdOsKnRFSJiFz
+bIRMeVXk0WvoBj1IFVKtsyjbqv9u/2CVSndrOfEk0TG23U3AxPxTuW1CrbV8/q71
+FdIzSOciccfCFHpsKOo3St/qbLVytH5aohbcabFXRNsKEqveww9HdFxBIuGa+RuT
+5q0iBikusbpJHAwnnqP7i/dAcgCskgjZjFeEU4EFy+b+a1SYQCeFxxC7c3DvaRhB
+B0VVfPlkPz0sw6l865MaTIbRyoUCAwEAAaOCA2gwggNkMB8GA1UdIwQYMBaAFDgS
+xnkCZjgC4zck5YsP/0WVaeYxMB0GA1UdDgQWBBSd7sF7gQs6R2lxGH0RN5O8pRs/
+zAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEF
+BQcDAQYIKwYBBQUHAwIwUAYDVR0gBEkwRzA7BgwrBgEEAbIxAQIBAwQwKzApBggr
+BgEFBQcCARYdaHR0cHM6Ly9zZWN1cmUuY29tb2RvLm5ldC9DUFMwCAYGZ4EMAQIB
+MHQGCCsGAQUFBwEBBGgwZjA+BggrBgEFBQcwAoYyaHR0cDovL2NydC5jb21vZG9j
+YS5jb20vVWJpcXVpVExTRFZSU0FTZXJ2ZXJDQS5jcnQwJAYIKwYBBQUHMAGGGGh0
+dHA6Ly9vY3NwLmNvbW9kb2NhLmNvbTAjBgNVHREBAf8EGTAXghVuby1zdWJqZWN0
+LmJhZHNzbC5jb20wggH2BgorBgEEAdZ5AgQCBIIB5gSCAeIB4AB2AKS5CZC0GFgU
+h7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABWt5t4gUAAAQDAEcwRQIhAIQE7oHj
+PQvtURUCoh6+dM8GdC6OEfAANupRYHYMo6a8AiBgL5fwtsOp+XR8vQ8XkMKMXYRs
+0awe+B3ZNuIaXGmEWQB3AFYUBpov18Ls0/XhvUSyPsdGdrm8mRFcwO+UmFXWidDd
+AAABWt5t4CwAAAQDAEgwRgIhAIlY3Jz655VWCZm6WMoEcU2nExX1pyK8SL7oj+fp
+3HmPAiEAmHu87c0EInS/wDJrnbiSWzyc47UM2xr3kYhY/lP8OVwAdQDuS723dc5g
+uuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAVrebeHfAAAEAwBGMEQCIFMOvF7H
+hM3jdnhdM2BwMohT35uuzrGL3DNJhmKtqTg8AiBL8Mjn00eDbR4a1HKipKgmvt87
+MfXLexBSoRb/lgXT5QB2ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGF
+AAABWt56EsgAAAQDAEcwRQIhAN7MnjhZoLr3ci0nNfSZ9Ftu/+FT+N3gIfC75fyw
+XQR+AiAiExEXXf+G09W8F93gJDPZwC7bM2VoWb1bZlkVcvtRdTANBgkqhkiG9w0B
+AQsFAAOCAQEAHv5koaT/MZ+zhKQs+6fHJDgTQ2+66u8k6PKQLV3OcfFusJBt/TrD
+P/nNgidru2vObn5NUu2MydVrCfoKwK8hf+7j+fjyLSKZYOvrqhRnN0svqlrX4wWC
+01rrEttc5H8UNf/oaylbOG4vePw8bF5n2aiU4vmGkuTPIkvqxtZ6IJjxqSQqaRhA
+ZRc7d/YAS+MyFF5JXAo9aSyi+AIvhFeTFi+0nmzPwp6wpxz97ylm6DymFMY3IqmP
+RYq4/yqbWE2yz4tRfnedeWBzGSAO4kWDQIN6NDjYwVjGsTk9rSpq/sEtPhUrXWB0
+yd8BGrY2DQplAarq7e1IBIK+tBSRIYF3Ag==
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-preloaded-expect-ct.pem
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-preloaded-expect-ct.pem
@@ -0,0 +1,67 @@
+-----BEGIN CERTIFICATE-----
+MIIHGDCCBgCgAwIBAgIQAfICAx39qY79/w9yvlEGDTANBgkqhkiG9w0BAQsFADBN
+MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
+aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTcwMzE4MDAwMDAwWhcN
+MjAwMzI1MTIwMDAwWjBnMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5p
+YTEVMBMGA1UEBxMMV2FsbnV0IENyZWVrMRUwEwYDVQQKEwxMdWNhcyBHYXJyb24x
+FTATBgNVBAMMDCouYmFkc3NsLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
+AQoCggEBAMIE7PiM7gTCs9hQ1XBYzJMY61yoaEmwIrX5lZ6xKyx2PmzAS2BMTOqy
+tMAPgLaw+XLJhgL5XEFdEyt/ccRLvOmULlA3pmccYYz2QULFRtMWhyefdOsKnRFS
+JiFzbIRMeVXk0WvoBj1IFVKtsyjbqv9u/2CVSndrOfEk0TG23U3AxPxTuW1CrbV8
+/q71FdIzSOciccfCFHpsKOo3St/qbLVytH5aohbcabFXRNsKEqveww9HdFxBIuGa
+RuT5q0iBikusbpJHAwnnqP7i/dAcgCskgjZjFeEU4EFy+b+a1SYQCeFxxC7c3Dv
+aRhBB0VVfPlkPz0sw6l865MaTIbRyoUCAwEAAaOCA9gwggPUMB8GA1UdIwQYMBaA
+FA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBSd7sF7gQs6R2lxGH0RN5O8
+pRs/+zAjBgNVHREEHDAaggwqLmJhZHNzbC5jb22CCmJhZHNzbC5jb20wDgYDVR0P
+AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8E
+ZDBiMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc1
+LmNybDAvoC2gK4YpaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1n
+NS5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0
+cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgMwfAYIKwYBBQUHAQEE
+cDBuMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wRgYIKwYB
+BQUHMAKGOmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJT
+ZWN1cmVTZXJ2ZXJDQS5jcnQwDAYDVR0TAQH/BAIwADCCAfUGCisGAQQB1nkCBAIE
+ggHlBIIB4QHfAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFa
+36pBXQAABAMARzBFAiEAzR4KqC0zoD8FzR8Jk0wH3CMLf/j0s/sMFySg5gsIP3oC
+IHaSYDQXuInRJq1WHUHIwcdt7AscZAFWgEaCzh+8+QvCAHYAVhQGmi/XwuzT9eG9
+RLI+x0Z2ubyZEVzA75SYVdaJ0N0AAAFa36pCiAAABAMARzBFAiBPti1ehDk+YdyW
+s4qjScmz9kuzTWor6jQYk8/GZDwRHwIhAPvbr23VquHaId4nvBHit7YGdJXpu7En
+UZRQrU1P0lLVAHUA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFa
+36pEWQAABAMARjBEAiBUQkeTNpBWju4/OXnxjOOlowEXos1XsItqfLkajzv6cQIg
+QLzLDhSKvxVRNq/4Z1rfbh8iEYM6Hj52NpO9+L0565oAdgC72d+8H4pxtZOUI5eq
+kntHOFeVCqtS6BqQlmQ2jh7RhQAAAVrfqkIWAAAEAwBHMEUCIHhqWRiCNNf8h3i2
+ADwso5l22FFp8H6jBBp+6B2PaBSUAiEAmk8vYlhgaLLc0Gkc+MkUIZ9sEoLR+tOF
+BLatSTQk1EowDQYJKoZIhvcNAQELBQADggEBAGl6hl3sDaxY762cJc5fxNG9Kc/Q
+Wvf5YzTLNxIuxEfTsj/Zgm+Q2hFl9enYRj4M1Weo/sw/8Jw9DGSuypOiYXCz9Ikx
+0Fc2j/Oq939JU5+ok1AikAeXna4DFTtw8ByIchrU6tbZa/JocSM0WZl7WIrgOtvw
+T+qCyI9JgYCnWRbPRfhZrlKxqQpwoP++aFV0HOBR9nj/Rzisq8ZGn7f6HKVxlqHS
+lBdhbmcHA/nHgbpwU2bmonivndvnpQHI8Fxd4BzbcRYM+ZIkATWA5/aOvH/EEIb6
+kwipaXsqHLfaJq1SY5G097HgWHWCkCUD/pxX6psTTavqftLenSd7piK3+fw=
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-revoked.pem
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-revoked.pem
@@ -0,0 +1,66 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
+MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
+QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
+MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
+U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
+ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
+nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
+KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
+/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
+kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
+/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
+AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
+aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
+Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
+oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
+QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
+d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
+xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
+CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
+5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
+8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
+2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
+c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
+j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
+-----END CERTIFICATE-----
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-superfish.pem
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-superfish.pem
@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-xn--n1aae7f7o.pem
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/subdomain-xn--n1aae7f7o.pem
@@ -0,0 +1,98 @@
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/wildcard-ecc256.pem
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/wildcard-ecc256.pem
@@ -0,0 +1,55 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/wildcard-ecc384.pem
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/wildcard-ecc384.pem
@@ -0,0 +1,55 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/wildcard-expired.pem
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/wildcard-expired.pem
@@ -0,0 +1,98 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/wildcard-incomplete-chain.pem
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/wildcard-incomplete-chain.pem
@@ -0,0 +1,40 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/wildcard-preloaded-expect-ct.pem
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/wildcard-preloaded-expect-ct.pem
@@ -0,0 +1,67 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
+MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
+QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
+MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
+U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
+ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
+nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
+KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
+/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
+kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
+/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
+AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
+aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
+Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
+oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
+QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
+d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
+xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
+CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
+5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
+8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
+2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
+c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
+j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
+-----END CERTIFICATE-----
--- a/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/wildcard-rsa2048.pem
+++ b/roles/ssl-self-check/files/ssl_self_check/certs/certs/sets/prod/pregen/chain/wildcard-rsa2048.pem
@@ -0,0 +1,67 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
fumingwei	aebaecf808	修改deploy.yml对groups-by-IPMB-addr的支持	2020-01-20 16:28:07 +08:00
fumingwei	1c789375bd	增加根据远程主机的IPMB信息分组	2020-01-20 16:25:02 +08:00
fumingwei	a7598c85a6	删除dogroup	2020-01-20 16:21:59 +08:00
fumingwei	63a1c1d43e	增加从远程主机fact获取计算板信息，让主机自动分组功能	2020-01-20 14:49:17 +08:00
fumingwei	672aca1e06	删除tsg-env-mcn0,1,2,3	2020-01-20 14:32:00 +08:00
fumingwei	b1a79074b8	Merge branch 'scripts-https-self-check' of https://git.mesalab.cn/tsg/tsg-scripts into scripts-https-self-check	2020-01-20 14:27:09 +08:00
fumingwei	9bc8f99138	将tsg-env-mcn0,1,2,3 合并到tsg-env-mcn中去	2020-01-20 14:13:37 +08:00
fumingwei	67c9de56df	删除ssl_self—_check目录	2020-01-19 14:29:02 +08:00
fumingwei	93f2ad9e9a	ssl self check 自动化部署脚本	2020-01-19 14:27:54 +08:00
付明卫	96bc1f54b1	Add new file	2020-01-19 14:26:51 +08:00
付明卫	31d66a982b	添加自检模块自动化部署代码及相关文件目录	2020-01-19 14:26:51 +08:00
fumingwei	d5a9f79981	新增ssl_self_check目录用于ssl自检部署	2020-01-19 14:26:50 +08:00
fumingwei	c84e2d8fc7	删除ssl_self—_check目录	2020-01-19 14:25:53 +08:00
fumingwei	7ff839bf12	ssl self check 自动化部署脚本	2020-01-19 14:24:59 +08:00
付明卫	00cb1854e9	Add new file	2020-01-19 14:24:03 +08:00
付明卫	f22e3ea728	添加自检模块自动化部署代码及相关文件目录	2020-01-19 14:24:03 +08:00
zhangzhihan	9e24d4bcdf	delete .Ds_Store	2020-01-17 01:29:30 +08:00
zhangzhihan	15c49fce50	delete .Ds_Store	2020-01-17 01:27:51 +08:00
zhangzh	ab27775a69	update deploy.yml	2020-01-17 01:18:04 +08:00
崔一鸣	19317a1e47	增加firewall文件	2020-01-16 18:32:06 +08:00
崔一鸣	58eef639f2	增加firewall	2020-01-16 18:29:43 +08:00
崔一鸣	293adcf35a	删除kni下重复rpm包	2020-01-16 18:27:50 +08:00
zhangzhihan	fdebea639b	新增fw业务层rpm包，新增解析成rpm包，修改roles/kni/tasks/main.yml，修改roles/kni/templates/conflist.inf.j2	2020-01-16 18:27:01 +08:00
崔一鸣	0ab69f5e22	删除kni下重复rpm包	2020-01-16 10:41:43 +08:00
zhangzhihan	188c794aca	更新tfe+cert至FW版本	2020-01-16 10:40:19 +08:00
zhangzhihan	96da9f88e9	新增fw业务层rpm包，新增解析成rpm包，修改roles/kni/tasks/main.yml，修改roles/kni/templates/conflist.inf.j2	2020-01-16 10:37:58 +08:00
fumingwei	620a663530	新增ssl_self_check目录用于ssl自检部署	2020-01-06 15:08:46 +08:00
fumingwei	0fe660864f	删除ssl_self—_check目录	2020-01-06 15:03:42 +08:00
fumingwei	432abdae87	ssl self check 自动化部署脚本	2019-12-31 11:54:10 +08:00
付明卫	005d55453d	Add new file	2019-12-31 09:57:12 +08:00
付明卫	8a66707f6f	添加自检模块自动化部署代码及相关文件目录	2019-12-31 09:55:30 +08:00