spec/acceptance/apt_key_provider_spec.rb

   1 require 'spec_helper_acceptance'
   2
   3 PUPPETLABS_GPG_KEY_SHORT_ID    = 'EF8D349F'.freeze
   4 PUPPETLABS_GPG_KEY_LONG_ID     = '7F438280EF8D349F'.freeze
   5 PUPPETLABS_GPG_KEY_FINGERPRINT = '6F6B15509CF8E59E6E469F327F438280EF8D349F'.freeze
   6 PUPPETLABS_APT_URL             = 'apt.puppetlabs.com'.freeze
   7 PUPPETLABS_GPG_KEY_FILE        = 'DEB-GPG-KEY-puppet'.freeze
   8 CENTOS_GPG_KEY_SHORT_ID        = 'C105B9DE'.freeze
   9 CENTOS_GPG_KEY_LONG_ID         = '0946FCA2C105B9DE'.freeze
  10 CENTOS_GPG_KEY_FINGERPRINT     = 'C1DAC52D1664E8A4386DBA430946FCA2C105B9DE'.freeze
  11 CENTOS_REPO_URL                = 'ftp.cvut.cz/centos'.freeze
  12 CENTOS_GPG_KEY_FILE            = 'RPM-GPG-KEY-CentOS-6'.freeze
  13
  14 SHOULD_NEVER_EXIST_ID          = 'EF8D349F'.freeze
  15
  16 KEY_CHECK_COMMAND              = 'apt-key adv --list-keys --with-colons --fingerprint | grep '.freeze
  17 PUPPETLABS_KEY_CHECK_COMMAND   = "#{KEY_CHECK_COMMAND} #{PUPPETLABS_GPG_KEY_FINGERPRINT}".freeze
  18 CENTOS_KEY_CHECK_COMMAND       = "#{KEY_CHECK_COMMAND} #{CENTOS_GPG_KEY_FINGERPRINT}".freeze
  19
  20 MAX_TIMEOUT_RETRY              = 3
  21 TIMEOUT_RETRY_WAIT             = 5
  22 TIMEOUT_ERROR_MATCHER = %r{no valid OpenPGP data found}
  23
  24 def populate_default_options_pp(value)
  25   default_options_pp = <<-MANIFEST
  26           apt_key { 'puppetlabs':
  27             id     => '#{value}',
  28             ensure => 'present',
  29           }
  30   MANIFEST
  31   default_options_pp
  32 end
  33
  34 def install_key(key)
  35   retry_on_error_matching(MAX_TIMEOUT_RETRY, TIMEOUT_RETRY_WAIT, TIMEOUT_ERROR_MATCHER) do
  36     shell("apt-key adv --keyserver hkps.pool.sks-keyservers.net \
  37               --recv-keys #{key}")
  38   end
  39 end
  40
  41 def apply_manifest_twice(manifest_pp)
  42   apply_manifest(manifest_pp, catch_failures: true)
  43   apply_manifest(manifest_pp, catch_changes: true)
  44 end
  45
  46 invalid_key_length_pp = <<-MANIFEST
  47         apt_key { 'puppetlabs':
  48           id => '8280EF8D349F',
  49         }
  50   MANIFEST
  51
  52 ensure_absent_pp = <<-MANIFEST
  53         apt_key { 'centos':
  54           id     => '#{CENTOS_GPG_KEY_LONG_ID}',
  55           ensure => 'absent',
  56         }
  57   MANIFEST
  58
  59 ensure_absent_long_key_pp = <<-MANIFEST
  60         apt_key { 'puppetlabs':
  61           id     => '#{PUPPETLABS_GPG_KEY_LONG_ID}',
  62           ensure => 'absent',
  63         }
  64   MANIFEST
  65
  66 gpg_key_pp = <<-MANIFEST
  67           apt_key { 'puppetlabs':
  68             id      => '#{PUPPETLABS_GPG_KEY_FINGERPRINT}',
  69             ensure  => 'present',
  70             content => "-----BEGIN PGP PUBLIC KEY BLOCK-----
  71
  72   mQINBFe2Iz4BEADqbv/nWmR26bsivTDOLqrfBEvRu9kSfDMzYh9Bmik1A8Z036Eg
  73   h5+TZD8Rrd5TErLQ6eZFmQXk9yKFoa9/C4aBjmsL/u0yeMmVb7/66i+x3eAYGLzV
  74   FyunArjtefZyxq0B2mdRHE8kwl5XGl8015T5RGHCTEhpX14O9yigI7gtliRoZcl3
  75   hfXtedcvweOf9VrV+t5LF4PrZejom8VcB5CE2pdQ+23KZD48+Cx/sHSLHDtahOTQ
  76   5HgwOLK7rBll8djFgIqP/UvhOqnZGIsg4MzTvWd/vwanocfY8BPwwodpX6rPUrD2
  77   aXPsaPeM3Q0juDnJT03c4i0jwCoYPg865sqBBrpOQyefxWD6UzGKYkZbaKeobrTB
  78   xUKUlaz5agSK12j4N+cqVuZUBAWcokXLRrcftt55B8jz/Mwhx8kl6Qtrnzco9tBG
  79   T5JN5vXMkETDjN/TqfB0D0OsLTYOp3jj4hpMpG377Q+6D71YuwfAsikfnpUtEBxe
  80   NixXuKAIqrgG8trfODV+yYYWzfdM2vuuYiZW9pGAdm8ao+JalDZss3HL7oVYXSJp
  81   MIjjhi78beuNflkdL76ACy81t2TvpxoPoUIG098kW3xd720oqQkyWJTgM+wV96bD
  82   ycmRgNQpvqHYKWtZIyZCTzKzTTIdqg/sbE/D8cHGmoy0eHUDshcE0EtxsQARAQAB
  83   tEhQdXBwZXQsIEluYy4gUmVsZWFzZSBLZXkgKFB1cHBldCwgSW5jLiBSZWxlYXNl
  84   IEtleSkgPHJlbGVhc2VAcHVwcGV0LmNvbT6JAj4EEwECACgFAle2Iz4CGwMFCQlm
  85   AYAGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJEH9DgoDvjTSfIN0P/jcCRzK8
  86   WIdhcNz5dkj7xRZb8Oft2yDfenQmzb1SwGGa96IwJFcjF4Nq7ymcDUqunS2DEDb2
  87   gCucsqmW1ubkaggsYbc9voz/SQwhsQpBjfWbuyOX9DWmW6av/aB1F85wP79gyfqT
  88   uidTGxQE6EhDbLe7tuvxOHfM1bKsUtI+0n9TALLLHfXUEdtaXCwMlJuO1IIn1PWa
  89   H7HzyEjw6OW/cy73oM9nuErBIio1O60slPLOW2XNhdWZJCRWkcXyuumRjoepz7WN
  90   1JgsLOTcB7rcQaBP3pDN0O/Om5dlDQ6oYitoJs/F0gfEgwK68Uy8k8sUR+FLLJqM
  91   o0CwOg6CeWU4ShAEd1xZxVYW6VOOKlz9x9dvjIVDn2SlTBDmLS99ySlQS57rjGPf
  92   GwlRUnuZP4OeSuoFNNJNb9PO6XFSP66eNHFbEpIoBU7phBzwWpTXNsW+kAcY8Rno
  93   8GzKR/2FRsxe5Nhfh8xy88U7BA0tqxWdqpk/ym+wDcgHBfSRt0dPFnbaHAiMRlgX
  94   J/NPHBQtkoEdQTKA+ICxcNTUMvsPDQgZcU1/ViLMN+6kZaGNDVcPeMgDvqxu0e/T
  95   b3uYiId38HYbHmD6rDrOQL/2VPPXbdGbxDGQUgX1DfdOuFXw1hSTilwI1KdXxUXD
  96   sCsZbchgliqGcI1l2En62+6pI2x5XQqqiJ7+uQINBFe2Iz4BEADzbs8WhdBxBa0t
  97   JBl4Vz0brDgU3YDqNkqnra/T17kVPI7s27VEhoHERmZJ17pKqb2pElpr9mN/FzuN
  98   0N9wvUaumd9gxzsOCam7DPTmuSIvwysk391mjCJkboo01bhuVXe2FBkgOPFzAJEH
  99   YFPxmu7tWOmCxNYiuuYtxLywU7lC/Zp6CZuq57xJqUWK47I5wDK9/iigkwSb3nDs
 100   6A2LpkDmCr+rcOwLh5bxDSei7vYW+3TNOkPlC/h6fO9dPeC9AfyW6qPdVFQq1mpZ
 101   Zcj1ALz7zFiciIB4NrD3PTjDlRnaJCWKPafVSsMbyIWmQaJ01ifuE0Owianrau8c
 102   I264VXmI5pA9C8k9f2aVBuJiLsXaLEb03CzFWz9JpBLttA9ccaam3feU2EmnC3sb
 103   9xD+Ibkxq5mKFN3lEzUAAIqbI1QYGZXPgLxMY7JSvoUxAqeHwpf/dO2LIUqYUpx0
 104   bF/GWRV9Uql8omNQbhwP0p2X/0Gfxj9Abg2IJM8LeOu3Xk0HACwwyVXgxcgk5FO+
 105   +KZpTN3iynjmbIzB9qcd9TeSzjVh/RDPSdn5K6Ao5ynubGYmaPwCk+DdVBRDlgWo
 106   7yNIF4N9rFuSMAEJxA1nS5TYFgIN9oDF3/GHngVGfFCv4EG3yS08Hk1tDV0biKdK
 107   ypcx402TAwVRWP5Pzmxc6/ZXU4ZhZQARAQABiQIlBBgBAgAPBQJXtiM+AhsMBQkJ
 108   ZgGAAAoJEH9DgoDvjTSfbWYQALwafIQK9avVNIuhMsyYPa/yHf6rUOLqrYO1GCmj
 109   vyG4cYmryzdxyfcXEmuE5QAIbEKSISrcO6Nvjt9PwLCjR/dUvco0f0YFTPv+kamn
 110   +Bwp2Zt6d3MenXC6mLXPHR4OqFjzCpUT8kFwycvGPsuqZQ/CO0qzLDmAGTY+4ly3
 111   9aQEsQyFhV3P+6SWnaC2TldWpfG/2pCSaSa8dbYbRe3SUNKXwT8kw3WoQYNofF6n
 112   or8oFVA+UIVlvHc5h7L3tfFylRy5CwtR5rBQtoBicRVxEQc7ARNmB1XWuPntMQl/
 113   N1Fcfc+KSILFblAR6eVv+6BhMvRqzxqe81AEAP+oKVVwJ7H+wTQun2UKAgZATDWP
 114   /LQsYinmLADpraDPqxT2WJe8kjszMDQZCK+jhsVrhZdkiw9EHAM0z7BKz6JERmLu
 115   TIEcickkTfzbJWXZgv40Bvl99yPMswnR1lQHD7TKxyHYrI7dzJQri4mbORg4lOnZ
 116   3Tyodv21Ocf4as2No1p6esZW+M46zjZeO8zzExmmENI2+P7/VUt+LWyQFiqRM0iW
 117   zGioYMWgVePywFGaTV51/0uF9ymHHC7BDIcLgUWHdg/1B67jR5YQfzPJUqLhnylt
 118   1sjDRQIlf+3U+ddvre2YxX/rYUI2gBT32QzQrv016KsiZO+N+Iya3B4D68s6xxQS
 119   3xJn
 120   =mMjt
 121   -----END PGP PUBLIC KEY BLOCK-----",
 122             }
 123   MANIFEST
 124
 125 multiple_keys_pp = <<-MANIFEST
 126           apt_key { 'puppetlabs':
 127             id      => '#{PUPPETLABS_GPG_KEY_FINGERPRINT}',
 128             ensure  => 'present',
 129             content => "-----BEGIN PGP PUBLIC KEY BLOCK-----
 130   Version: GnuPG v1
 131
 132   mQINBEw3u0ABEAC1+aJQpU59fwZ4mxFjqNCgfZgDhONDSYQFMRnYC1dzBpJHzI6b
 133   fUBQeaZ8rh6N4kZ+wq1eL86YDXkCt4sCvNTP0eF2XaOLbmxtV9bdpTIBep9bQiKg
 134   5iZaz+brUZlFk/MyJ0Yz//VQ68N1uvXccmD6uxQsVO+gx7rnarg/BGuCNaVtGwy+
 135   S98g8Begwxs9JmGa8pMCcSxtC7fAfAEZ02cYyrw5KfBvFI3cHDdBqrEJQKwKeLKY
 136   GHK3+H1TM4ZMxPsLuR/XKCbvTyl+OCPxU2OxPjufAxLlr8BWUzgJv6ztPe9imqpH
 137   Ppp3KuLFNorjPqWY5jSgKl94W/CO2x591e++a1PhwUn7iVUwVVe+mOEWnK5+Fd0v
 138   VMQebYCXS+3dNf6gxSvhz8etpw20T9Ytg4EdhLvCJRV/pYlqhcq+E9le1jFOHOc0
 139   Nc5FQweUtHGaNVyn8S1hvnvWJBMxpXq+Bezfk3X8PhPT/l9O2lLFOOO08jo0OYiI
 140   wrjhMQQOOSZOb3vBRvBZNnnxPrcdjUUm/9cVB8VcgI5KFhG7hmMCwH70tpUWcZCN
 141   NlI1wj/PJ7Tlxjy44f1o4CQ5FxuozkiITJvh9CTg+k3wEmiaGz65w9jRl9ny2gEl
 142   f4CR5+ba+w2dpuDeMwiHJIs5JsGyJjmA5/0xytB7QvgMs2q25vWhygsmUQARAQAB
 143   tEdQdXBwZXQgTGFicyBSZWxlYXNlIEtleSAoUHVwcGV0IExhYnMgUmVsZWFzZSBL
 144   ZXkpIDxpbmZvQHB1cHBldGxhYnMuY29tPokBHAQQAQIABgUCTDfARgAKCRAhWv5Q
 145   5BRwMq8TCACgG44+c+KgHBinygdU9Oj/r1wmfXbbmR+tpRgZ5sJytHC6gp3wjKFH
 146   XrmddgmYPzKsAUGTxJxRUqxD+lKeo2sEKuXNAPo1C+4hZUV6Ah2N1qytZfpLOP43
 147   U6WVvMgluQTl6jRaMIwQolUj8ZNjYCdNZQCbfo8tALkedIBPKSrDF5kOwn+zxFyR
 148   3v5A3mwFXK0bepvjlDuMsmktwk7opgfivP1mA3svPLIZu70PKk+u6UAMb06svt6V
 149   SewYMbgTUzw+SCT1e/0xEpqjUqNgsPnPE6hW116goRB2cz6VYwmKfVe+ioljsVMM
 150   mTqj5xWqoeR0ov6yCyxwVVCWOAIR3QSAiQEcBBABAgAGBQJUCeGFAAoJEBM5V+oR
 151   Ao3zE3AH/1GQTS4JX3kS3WXE2Pi8L+gGylfYsf1dDbaDBX8mPfxKO6usZZmX9fIu
 152   qQwQDIEksGrdcb6nrGecHufJDbLmFZiE77LjjoREFlG9tEyaIAVSCw/vyng9wVo8
 153   InDF7j1VHuUueh6eu+yvLjUrFuh3CVNHcx2rEIFzx+X5660TbbRfMgxLpTMkkb4w
 154   7DQjCUmFQD4yLzZzXAzjELc/TgsFGZc3lxo7UuzwX0ZEm15WjrdYwvtMU1TGjjI2
 155   6dgk24K3Kb2OeUnCybQ1mLx6qVx0aFd21beKRG9u3Stp8HHXpfLh/aznbCY5JavO
 156   ShOXgNgq3f0/UImLjyuFv27x0HQFxfeJARwEEAEKAAYFAlQHuw4ACgkQpHBvotfb
 157   FDW/pwf+J6JBPpUHi/EsuLLbqDTQjGbnMTsH35pZRApKheaISPRZH8oqgdmWE599
 158   6e5GwnXMoBJoUvU0VbcO7aEarWlKmO6dpTKsfvjP+PtiSBeXUa8ewNcTq5N0Z7O5
 159   IwF2CiHrSTEcySjjboMKJHS/vQCmsLg1j+MA7wq3quzX0vQsGBX3X1x+n2KOH4s8
 160   BGoXFJs6sM1SInnqkPwryCesj61zc9I72kTM6IsG17X586INWMHoMDzpF/hTWKKw
 161   2c0kFMDIJDpU+KBKr/e4mbKrp8ToP64GjB0MOx6MqjZI6I3k1PQu8zgWmOQ+yQhI
 162   e/UfB8u+eGbhDwUMqKBEHUzV3b5lj4kCHAQQAQIABgUCUeTczgAKCRBKMwua1kj6
 163   4/mED/9RNl8PfjS6SKnqM+UzPHBIP9BqnC07sPiCwZOxd7MOQ73sPbV3Wk1o1PRG
 164   tcAxqDCTUSUPGaf9gdQN8yi9lrZspqCNaZXfzGRaz4+uHU/ji9QMbfQIBTopn6ZM
 165   YtRuiV868N98JOb0yfWLaTEVonFtWFZHrNHbwplHbyzUgGyup5MKSxh90p2S7DX+
 166   PznSFbwwzeE8En/jxUvHlAQV+eVfC3V+n4vKAC+sjInDu8m2xr1CMIiRCTa1y/vu
 167   uGSJnoAO2GBUjHmPfINZKbicuoWnBtBMqs1GsJvldsv+ggx4cm4UgJvYdyQNLUq4
 168   pceaq8O4uhGvT/AURkymzldB6+iZRrsmQx5LmP0C5sIbiDXMoS089oYOx8MoGWMI
 169   cErBTKxCPmgZTnDxW+U4+dLrYMF+yBTbLmKmaYhNiSNI4votfA7rEbn+zEDxzKgl
 170   KZs3bzqKZxjoAeWhOKK7r83tSz4I2uHD9XscC6fnp61YGfdtlYJEYYA8XeomvjLa
 171   xQxjQTcdrs48Qcgp8FvgyImelee1ZPbydB8Xd2VMVO2EDPBydlyHHZ6zjKt8Neff
 172   djh6KyrFYJtOW4StdSiBQQofUqiFJq1gy3F6dy/ttSXMivbbNJQJjJV/1zKDnSQH
 173   L7Qnux4SmobkrlHzP2z/rcFPk6CGaLpsHazmIrl8G3dO7UhinIkCHAQQAQIABgUC
 174   VAesWAAKCRBGnps2mw8PHet2EACTyXdYh4kXGgSwQpY8hUJwd9FPrXPyYMTfeJFq
 175   kIBpG/q60Q72Kqvn0AqUSmnROoKzPnwYW/jE+89tx1JBAT+8EtRAJvJaNH9Hovw4
 176   S3GV5wqImdsmIqJUxl8lh9moB9zfpsqWz2Laa1Xn/TGwmLl/zFL0PWQ4rv8r6pZ/
 177   OhEE/pnqZDLh/+6PxYmQRsIvDfmeVd57XSYLnT6JNXkAYBnmMouw+L7b2B9LWMIs
 178   10lfjdOCplNE1FCTFS7K/j13x8Cyul6yF6eeq+rd5ftcw84XW+1qh3Jsw4bSNc0Z
 179   LvGh7zgRznEWhxZrcGzWwtxnEG1aW7wXiDJ/kqAvBNP1LOhIQQH2NVp3oRW+hB1o
 180   Cb/pbIht3xin7g5EJ0cpplTKNvfVdcitIflpgV9CT51oNkV7dVCtkXbFxwGdxP1L
 181   CnYmfJ8IBumX6a3ue741E1tHHp2dZOHXWiMUI6TjYISQjx4KiiFTXJRpMsm5AQDi
 182   ps+TSnF5TsNJ4776aAhP0hTN6Wy864NRoWEPs9OHltmZFCHzzTixQZrNxaUvLALP
 183   vCmQ++U8f4mxD1+/eLXSzcfWolUoqyneTH/DEWpYXaoE5NalLfmoH7WxCR32LXWR
 184   tJ748SZXI5SFjOzIzLsFr/qq36hGqDb7fqsc4LSz8uvJYo7vAdvkSUL2mkHeX4lD
 185   QzwR/4kCHAQQAQgABgUCTPlA6QAKCRBcE9bbkwUuAxdYD/40FxAeNCYByxkr/XRT
 186   0gFT+NCjPuqPWCM5tf2NIhSapXtb2+32WbAfDzVfqWjC0G0RnQBve+vcjpY4/rJu
 187   4VKIDGIT8CtnKOIyEcXTNFOehi65xO4ypaeiBPSb3ip3P0of1iZZDQrNHMW5VcyL
 188   1c+PWT/6exXSGsePtO/89tc6mupqZtC05f5ZXG4jswMF0U6Q5s3S0tG7Y+oQhKNF
 189   JS4sH4rHe1o5CxKwNRSzqccA0hptKy3MHUZ2+zeHzuRdRWGjb2rUiVxnIvPPBGxF
 190   2JHhB4ERhGgbTxRZ6wZbdW06BOE8r7pGrUpUfCw/WRT3gGXJHpGPOzFAvr3Xl7Vc
 191   DUKTVmIajnpd3SoyD1t2XsvJlSQBOWbViucHdvE4SIKQ77vBLRlZIoXXVb6Wu7Vq
 192   +eQs1ybjwGOhnnKjz8llXcMnLzzN86STpjN4qGTXQy/E9+dyUP1sXn3RRwb+ZkdI
 193   77m1YY95QRNgG/hqh77IuWWg1MtTSgQnP+F27mfo0/522hObhdAe73VO3ttEPiri
 194   Wy7tw3bS9daP2TAVbYyFqkvptkBb1OXRUSzqUuWjBmZ35UlXjKQsGeUHlOiEh84a
 195   ondF90A7gx0X/ktNIPRrfCGkHJcDu+HVnR7xKk+F0qb9+/pGLiT3rqeQTr8fYsb4
 196   xLHT7uEg1gVFB1g0kd+RQHzV74kCPgQTAQIAKAIbAwYLCQgHAwIGFQgCCQoLBBYC
 197   AwECHgECF4AFAk/x5PoFCQtIMjoACgkQEFS3okvW7DAIKQ/9HvZyf+LHVSkCk92K
 198   b6gckniin3+5ooz67hSr8miGBfK4eocqQ0H7bdtWjAILzR/IBY0xj6OHKhYP2k8T
 199   Lc7QhQjt0dRpNkX+Iton2AZryV7vUADreYz44B0bPmhiE+LL46ET5IThLKu/Kfih
 200   zkEEBa9/t178+dO9zCM2xsXaiDhMOxVE32gXvSZKP3hmvnK/FdylUY3nWtPedr+l
 201   HpBLoHGaPH7cjI+MEEugU3oAJ0jpq3V8n4w0jIq2V77wfmbD9byIV7dXcxApzciK
 202   +ekwpQNQMSaceuxLlTZKcdSqo0/qmS2A863YZQ0ZBe+Xyf5OI33+y+Mry+vl6Lre
 203   2VfPm3udgR10E4tWXJ9Q2CmG+zNPWt73U1FD7xBI7PPvOlyzCX4QJhy2Fn/fvzaN
 204   jHp4/FSiCw0HvX01epcersyun3xxPkRIjwwRM9m5MJ0o4hhPfa97zibXSh8XXBno
 205   sBQxeg6nEnb26eorVQbqGx0ruu/W2m5/JpUfREsFmNOBUbi8xlKNS5CZypH3Zh88
 206   EZiTFolOMEh+hT6s0l6znBAGGZ4m/Unacm5yDHmg7unCk4JyVopQ2KHMoqG886el
 207   u+rm0ASkhyqBAk9sWKptMl3NHiYTRE/m9VAkugVIB2pi+8u84f+an4Hml4xlyijg
 208   Yu05pqNvnLRyJDLd61hviLC8GYWJAj4EEwECACgFAkw3u0ACGwMFCQPCZwAGCwkI
 209   BwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJEBBUt6JL1uwwGWsP/2i5hP3qG6V6SFFc
 210   glFkMRLz7TP4f0gCbBtyqBzfbttensLPlB7C/+xfdXHlV0EHQ9nvArWFhXizTNEU
 211   jPYvyjOtIOAryEJZjanaoYtR7IBqiJ2e9v1ywF7p9IGm3wt+qy8MNpHpfmjKUX+f
 212   Eq0rrJGN9tTZzBCZeDrB1doXzbQCIMNnv85vUYaDKRisaB2QrxYZz+7tjNsDKu4j
 213   Qw1m+nVbC6c3ZVX9uNswm7mzwscUFzqQOeq85FD7ifOZnVcOItfaDyBSGVS+aMIr
 214   dUsQjsQYOG/KGjEt+oRJd6rWRvN+K7S33KgJqo4cemibiSzgGDfOEIwxFNzSOSHz
 215   UTL5biHk3A+A7eRQmGoTdOObVtUXOrORgEfEVuORmMEA8xvpJJHnhscBIaglu5zh
 216   7sGSKFSbnzYXdvFBZ/NyhiRwkLeDQQa9yuU3GOmw0BCK6UqZVkgwW3d6dSGqGWNV
 217   kg3T/Tk1Tkm7M9CYoJVplFhlgnXfwjElvw+/91VDiTmEQ8Kbb7UmHIyXPNVFftcw
 218   fq7eS2vzlnuFDjkQ/o1NQE4o0BGhWMQW6gQZBW6ABF6vW7UUMnoKpPnlaR4c2nD+
 219   TWBUzE4bx7k2qTcrXArKOWrv3DMsKgoGNQ33DCco6HLuGwrawHesOJBijTFHcDQ2
 220   ELpR2QyPlIySJ4a2psp4Hc2S43XhiQI+BBMBAgAoAhsDBgsJCAcDAgYVCAIJCgsE
 221   FgIDAQIeAQIXgAUCVwb4BQUJDDXSzQAKCRAQVLeiS9bsMLwBEACtdY+PvfNw8SFu
 222   RpIM2rvdjGsEfJPKpUK5Dx90m1NSVyhMwQeYLdBb0GGgeGjjX8E5kCqhsD53VPWH
 223   AD13nPc3zCeiDJiwpjYXeuGIH7AOG+gZZDLdy14myEN0JQIXQslOK8SiaTn/yI4s
 224   2Lrje0Ubf6wbJ3uX9MwsqIkugkJrYn9e1BC1uPgESbE1SjiIbB4iL8lrxE6fdyxc
 225   QnUEzneOFQ9kScfPc/M5U9COMuQOuoefiAEh+FRrjxf9ag3NzecTlwk/EdpgmfSj
 226   a+ClS+BJv83zYForrHRfUU1SDiueuWXAH1OTaUpAsZIiXpigTB4X3hLJXB1iKoA1
 227   TEM/9bZGPdJsS1mwUUy3ukDW1rhOodxojhN1XhT3f7X9Cl8lKxKw1tloRijfL3n4
 228   njwk6hEyKaURTo4iOs12HDlBZV3zhWONNZTvqrFMkz4OB+q8RGpfO8G4Mbba+fNQ
 229   2At+cAWmGCoZeX3KfyRtqYe6vtKJf5ptQZgjl3EFPl6OxKjopzomB7o9lXbxARgO
 230   6Pf9NSyYwlv0sNfy88N5iSsa7Sw7yi9t9tO5KFGoGYLmXXgyjvNZrE8KMh6/hJOW
 231   HsW19noVdogd73q+gjRAl+eZ4J1nKpbSPkbufNoD8uB/j3rr5/sRJrtvVnMTJXwC
 232   iTItalyg7XRJSQ9kAqzvRlxdGobo95kCDQRXtiM+ARAA6m7/51pkdum7Ir0wzi6q
 233   3wRL0bvZEnwzM2IfQZopNQPGdN+hIIefk2Q/Ea3eUxKy0OnmRZkF5PcihaGvfwuG
 234   gY5rC/7tMnjJlW+/+uovsd3gGBi81RcrpwK47Xn2csatAdpnURxPJMJeVxpfNNeU
 235   +URhwkxIaV9eDvcooCO4LZYkaGXJd4X17XnXL8Hjn/Va1freSxeD62Xo6JvFXAeQ
 236   hNqXUPttymQ+PPgsf7B0ixw7WoTk0OR4MDiyu6wZZfHYxYCKj/1L4Tqp2RiLIODM
 237   071nf78Gp6HH2PAT8MKHaV+qz1Kw9mlz7Gj3jN0NI7g5yU9N3OItI8AqGD4POubK
 238   gQa6TkMnn8Vg+lMximJGW2inqG60wcVClJWs+WoEitdo+DfnKlbmVAQFnKJFy0a3
 239   H7beeQfI8/zMIcfJJekLa583KPbQRk+STeb1zJBEw4zf06nwdA9DrC02Dqd44+Ia
 240   TKRt++0Pug+9WLsHwLIpH56VLRAcXjYsV7igCKq4BvLa3zg1fsmGFs33TNr7rmIm
 241   VvaRgHZvGqPiWpQ2bLNxy+6FWF0iaTCI44Yu/G3rjX5ZHS++gAsvNbdk76caD6FC
 242   BtPfJFt8Xe9tKKkJMliU4DPsFfemw8nJkYDUKb6h2ClrWSMmQk8ys00yHaoP7GxP
 243   w/HBxpqMtHh1A7IXBNBLcbEAEQEAAbRIUHVwcGV0LCBJbmMuIFJlbGVhc2UgS2V5
 244   IChQdXBwZXQsIEluYy4gUmVsZWFzZSBLZXkpIDxyZWxlYXNlQHB1cHBldC5jb20+
 245   iQI+BBMBAgAoBQJXtiM+AhsDBQkJZgGABgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIX
 246   gAAKCRB/Q4KA7400nyDdD/43AkcyvFiHYXDc+XZI+8UWW/Dn7dsg33p0Js29UsBh
 247   mveiMCRXIxeDau8pnA1Krp0tgxA29oArnLKpltbm5GoILGG3Pb6M/0kMIbEKQY31
 248   m7sjl/Q1plumr/2gdRfOcD+/YMn6k7onUxsUBOhIQ2y3u7br8Th3zNWyrFLSPtJ/
 249   UwCyyx311BHbWlwsDJSbjtSCJ9T1mh+x88hI8Ojlv3Mu96DPZ7hKwSIqNTutLJTy
 250   zltlzYXVmSQkVpHF8rrpkY6Hqc+1jdSYLCzk3Ae63EGgT96QzdDvzpuXZQ0OqGIr
 251   aCbPxdIHxIMCuvFMvJPLFEfhSyyajKNAsDoOgnllOEoQBHdcWcVWFulTjipc/cfX
 252   b4yFQ59kpUwQ5i0vfckpUEue64xj3xsJUVJ7mT+DnkrqBTTSTW/TzulxUj+unjRx
 253   WxKSKAVO6YQc8FqU1zbFvpAHGPEZ6PBsykf9hUbMXuTYX4fMcvPFOwQNLasVnaqZ
 254   P8pvsA3IBwX0kbdHTxZ22hwIjEZYFyfzTxwULZKBHUEygPiAsXDU1DL7Dw0IGXFN
 255   f1YizDfupGWhjQ1XD3jIA76sbtHv0297mIiHd/B2Gx5g+qw6zkC/9lTz123Rm8Qx
 256   kFIF9Q33TrhV8NYUk4pcCNSnV8VFw7ArGW3IYJYqhnCNZdhJ+tvuqSNseV0Kqoie
 257   /okBHAQQAQoABgUCV7d12AAKCRATOVfqEQKN8xl+B/0cdW8EhjyBXFWi4B0RzVXR
 258   TIi5vUEe2mL+/cwt/qD70VJbe6Vy2X1VwGX5QrpMtjSnouGAa7aMU+oYXlzz+RPW
 259   MtJTWMMVgOidRnAWw61wFAabZLFyJfVUg/QxI/sUQYkA3VC1XxSHLK+bjfglULRC
 260   Q+JKpuK2D1jz0SrJhQtX6IGkVmT0t1tlwMUWhW3EIuHpc8TwvgxP0wjg8KLd01vK
 261   KJTRLNb6Z3pFlT8rEF0Cw5LFReJM8i4+w1DqIy18xMkuDh09WBJhhCUH8LIHgGlz
 262   D5p3fRmbtkW6T/wpjP2XR+eiGABJ0nr4WTDAwWn9SxnjXapp/QvKd+lOPRYUqRB5
 263   iQEcBBABAgAGBQJXt3igAAoJEF5FJ36WgCWsN2wH/RBYyRHcIXW3F3oYS884JNj+
 264   KA4Fl04kmuF9oQ3OnF8JYaYyZ1uuRErGH1UB8BVxTudKcowGCYi8AV4iQHSLx5dr
 265   qY0w2MVlcxC2+8vUYEHYXU2i9EoGa6vwIJU+oSB/evnCJGe5DmzR6EbgQPADlkX3
 266   IW8GzrnPionDJhP7POwOY4HNOOBRm6AfAE3JMjH++TUuEgAuB0urjCNPmZ2/t9ic
 267   uSS5hDp5HepoaQ2rfEI1Df+/wd8vXAD5Zdi1wZhmDWX8pq/spdAgV4/kMlcKzdRS
 268   FINyA4wajLVLfsYPavBCW18aHV6pEBc9mdhQ3xsqardcnyX+rd9kMgXKsG69WAGJ
 269   ARwEEAEKAAYFAle3ca8ACgkQpHBvotfbFDWkRQf8CZtvvGM1sHJk7l07KDmG2zSM
 270   rWb/GPsySK+DZRZDBJz3m7FWazWnfb2cuqRSMnoDDvnjg5EVSFqdZ3GaTsjKFBNe
 271   NnLp/dC+sjSfKoi+a1iCP5wuhiXOwwWz4O45ekYUKrIwCXh3C32mtnqc6460YQwp
 272   a1pdGqEeGq4aqcZPHUYAb294GuelA1TUkxibCIIDo5f223UNwGV3m9LPTyf0uOwO
 273   1cht4ZdvccWBFXuDvzMQ9AGh6jHq8SX1uopQkEOY8AY53Lul6ubHzoHIvrld/GaQ
 274   9osF1dm2/llGtHbQDqnVYVXg+lLNqW0u6JhNSE/EHDi9S2zWmK8J60m4akJRRokB
 275   HAQQAQgABgUCV7eBzwAKCRDfnAdsUd5/xDeuB/0aVR8KKFpEjV+mYspTMJMUi0ku
 276   0iqXYqVmvMCfrwP2fzKu2MbLqWjgutG9RiwtrMmqaRPx+AYGJMU6k/TVd9bxWP8+
 277   vxvZzsEz9lPIoH6xCEAgA6AQ6TIYswwU0G6duR/iRUtn57oTixfoFazUFXriY3yk
 278   gAeSphPmG2ZBVU/VEvht6qjkKrxIT46sjNEl5+5R3R9EekrW19D9S0TjtjPOGjfo
 279   +6ZMxKWlGW5gCREliuSTQY1/56MTQdrA6bFdiim0TPftC+aK+6l2kzTyVbygBPPo
 280   8/p30iOYHOX179HZNwGyGnP9fNxaURLsx7Zymaf2esA4mGVApDDE6QrZbeGHiQEc
 281   BBABCAAGBQJXu01KAAoJEOe7Y9N+knoevtAH/2VjCnLU1xc25iuIDnDKtPdgdclY
 282   tV5w4kLpDxo1WTieCPOjSK5Xbsfe9eSSSqjgsHm1EkejunzuDcmm57LXfcdf3MA3
 283   1u6qIkS/fdctj9hkEMonEeWN2NnyYLAkcjWf6+I4u/qhM8BdoT/UmB80rgdq07yr
 284   14zxMhetoZaqcLMCtZuaVpQMmoa/SbaADQSISiYRN3xWeZUmeWBjU10avK7YeRMN
 285   tyYTCAsRCvrwcKTN9XKdzHgm5kMZfo9UDuqnD2TsUxDwRcwYfe1+ZiHWV6sWZtGv
 286   zPqJ4t7fUO8tlo3LnCCdZRXp3U5i9G8f4xZCkH0fY2kEMHMxOn4T5NS1WxmJARwE
 287   EAEKAAYFAle3euIACgkQutXwo5LphXJtOAf/QvpHm4MsGYMFe0GamNcfCqgPQBfr
 288   +/7SIreIG9BJDpsB+JkNZX3+tcZR5m7tfXl7Zt8+t+ENJVs62FPPzOA8EuXQAMGW
 289   NkyQlV9Y4lFerccUX3gK3rP4BMxTQ372quGXfOIeYwUmTEPaA0me6M0ODla3jT+g
 290   dl9HSwCCLTfv4/2djK/Oi/+m1r3grfeFLbOjoznR4xZoPbWFBWCn7iweWE3B6r1X
 291   n+99DEaLmuEG4Mk8ohlKzIgReZ1wTkHcIt27GG60to8TUhbgqtGcOtE3Qc9hxZXh
 292   wRbYaNFM8gkIAmo4eJuuWd+VWjnMeFH9JKtcrSEgMhI/qyt97c8g5497sYkBHAQQ
 293   AQoABgUCV7d67gAKCRCCRVGYVPwajc8QB/93fnBi8sKAaaWIjFA5ZrZkjZEsVE2a
 294   y8G4hCKUPFk8qwacVSC78I/yFqZPhy1DE2zsXEQEdu9VBNxVvEHuRBrs79XU7L92
 295   8xtdzEZF06my+xqYhhgBTqK1VguU4ayD9jKNgE1jGjPnHPFcjLaadyEtDDk9MMwC
 296   fzvtFPGepRi1LYRMYxR4CNxAvAlgb0uVnZ+9dEfo9nfBfRL7ACLtnQbkazJZXyfP
 297   zKeRmxlA9RTRlGm+ufHN5TgzsKFiTBbkQOF51ItAVJcKZVEARuyuMqWXIlZyURXq
 298   kG9x1jAx0oZDW2iVRb6Ft21pAJd5P1ovGacX6EhTubAeAmlkqvmuPh3viQEcBBAB
 299   CgAGBQJXt3sHAAoJEDy4a/JFI238WrgIAJS1gtpqw/tzyeAgopnKUyl+/ocCWoye
 300   0wkS4/9QLzttQ718oDeb1EIcGnQEkazES1NAPoHAnc6TbvPfu71sfPqiTVMRE4VI
 301   6AwXdjNT8ZWi0ip8fog1YVzFBxxMpYThDAPqkKPQG3kj3TAUMpmTlM/h63ndOOOU
 302   5clUmuqT2agX7Xo/lP4qApcvcXe/EhwtWttYkFW9pPtjXUoHA7R4iEw/HZZRGvgi
 303   RRuVkVnta63SBMasyypO8Km35dg/UAE4RRsPV1QLwl+uqgvD6zGt3A8+GNEXoAki
 304   agKt8GJ43DlsD8aDkFzsp0E2iQ+idkqkqy7FXJMe4eG/LL4WG72fNL6JAhwEEAEC
 305   AAYFAle3e60ACgkQyXOBc2z4R/lCtQ//SCePwH2R35N2h9EMYsCH9iypJmFWMcwN
 306   HlEXOKmJrQ3viD0X3iXEa2SNRKKK7Evn3ggN9zbKwLLBIvZimut8LBLiF6TFnK/u
 307   +8kZxGHLW0dhR/IokUY5zadx/E1F0C0IAkY7hNh791K6e7rwjw49pxSUnAQ00YMc
 308   hNFeuq+IRtty+Jnw8uYz9m5CRAzBqPeAQ3mtXeYgkNPWEMQSTW5FDHnINlZItup9
 309   BSwIQxYJymKFkG3YxcJsx18dQNuVdzhg81b4XS35C2mOjlOhUsD+5Pp+8L0SQ3GC
 310   u3qj/xXazdB9U0yJIs0u3JYb1Rl73v/fQji6UYyU/4TbEAhjl4n8JRgje1bJ4W1g
 311   ugjalCM9YVaLrgjf5CIf0t8rn3G4Hl26ddNm/VroTCMLKXvg4kdFKF1oc6xImqoo
 312   WJblVa4B4la9LxuRsgN9PamGlBUg1cDUftjpSstW1PYQPiGhc0jJh8vXNmIg5fzq
 313   5dcLLWXOlrQOkg4ce30YzDculzn6ntBl30sCzVi/hxQrX3c0cpAqgRT3azAkO7JT
 314   4J8fXO8CyAwuXjpDv6g4N9xfIdgTrbtqgnZb3MzOzpd11s7Q6ypCcEZVxt+FKVS1
 315   LgzJoWMQNVJ31sBwI1KenfB2/YfF6uILtpdFM+soKt86IvQub726rw56JWrIiP8w
 316   +ojBTcDZGM6JAhwEEAEIAAYFAle3gC8ACgkQEFS3okvW7DCFfQ//SduNnxVJqud1
 317   +c1B+N1G/M3jfkMvSb6Sujb5/4qu5yL2Yo/PoTHesvqkFh5zILGuepCLI4ravZd7
 318   zyxy31o+egTC+adR4s6118k9swe9XDuZ+SNxBhK9A18pnaPcwa6b0j2q5KZI4klF
 319   DKCg3u+D6qJQ3jqMPKbfPymVn1LE4qzkj/SXll0Nxkw7jIapn30UNONdY+q2nXpZ
 320   Ej4xI01X66v9Zh/IRj8H0jwtJsTKfAoCkRmE9aJW4ywDUMJ0iHAqxYuGX2y617F6
 321   b1IY1JoWvBlNDTlCwj0v8xF6CK02JQecKhHl9hvAoAuJDhGIqSGkKH3ENAOFN6I0
 322   7orX6UrHDafphfqLYmEYCHJhz/QXC6Y4hxWS4cpcGbNqzfoerFkQimi0FT2lLPtn
 323   DH1OOvBvibKAVKkifkAUjYCGN4EJYI39x9VX1I++sqoXWZoAgRTGd7Ppm7PQFdvM
 324   pHQYDMLIzdFex5xvcQGrga1r7kOjUgpSP3rqBTgNfZtDNRucQE1iLOCu6Iias8HW
 325   B66ya5eN7tpAN3vXvtMs1qpOU7748HbUKTOPvccj6abxJ5OKFluK286eLMXW1hHP
 326   rB8I1WuIyYuqgtyuvdiRqhq0d+LyWuM2ZVos0usa03OtAuvnlaaTLE4qsW0cc73l
 327   TAUI89WEAZ4yrD+IIVbR8WNv+F0O0GaJAhwEEAEIAAYFAle3ge4ACgkQhyhST+Id
 328   P8Y9VBAAij8tXwW0Kl/cpJo0AEh1zPObs2ChFucwdj3DIbMOziV4d3cD/agGTL2H
 329   rjNQnfGqr+oxvBOPGTXFJGllhmXYFISWdWQFGNM0G8XF0/zlnMP6c7XEpmUmr0O1
 330   OQuTVi31lY3kBmFLuZiTmN4YENIo3vCG1z7P8hHb3jpDUR4112KZdqWnvTGznDsA
 331   lFTiNdlX9bU7eoQtFC0bueYv+rvHQ3PdzT4O8NBPuRhrfqVaaCUOERlUGuqjJzlK
 332   TfxRq949Ts7piTqlnwIgw+mWfuvyVtKcRnrIkTSMmDcojKnYmi8FjRQoEyZp5DOZ
 333   NLoJ5OMLCb3gyjQDLtGaPeDuLBiAPfb+dB+FtTplwbeevpOks/Cnbr8eCY2DflMd
 334   3cgOA7xT5NyoZrUY9nhlRGStqIjJ/QrB1orFt8hqisshGJLgGp+64wvbFORgXvcY
 335   3M2qoSeCRz03IFjeIf58TxcmaTC+aYffWTFKuGmvUKNCbGod20MyRtl5/xzQ3K5S
 336   bt9u6MXeLw50psnu/GzQEgN52dU36fsh3XNWQrlV3YdTihJHTSeFAs1LA/eg/qJL
 337   4WPGXmg/sBHFXuv4NC7aqI+0sUjlZfDk3aJCZHmnBTQ8izuvlUhhYy3+8N5D9i5E
 338   KjaIAsEoHGIljwcenI5lLZNSNqlREW3ZED7vJZrbblOWq7ezlhKJAhwEEAEKAAYF
 339   Ale3e7cACgkQAl2/Z5bsLy5UhA/+JZ/I5Zscici5SnbVKTIefcJWwlylWCale/IV
 340   0m+YXl1GTLOxNFMgeSHlISVDWeo1g22jtT/ln4mfYfKJFN+Hy2lHuknxqZOCwti/
 341   T6DDSCqk8SZBIJliESPp1yOC6a1I1LhZWGzq1fUc3JtPng/CuiFKgxVQvrKooFTT
 342   eFFzC3+S5Bjfcgz/vw/Hfuf8C2kMW6FFg3SQJIo1Iz8Z4C/f++J9kMKgkU7lfauK
 343   9B3teN5F7gavOMv1C3SeM7xv0smaayM+coSA29/8LOKbfc5oSucNldXMI9CZTWQa
 344   Kq7gfN5Lq7MPYDScS9UbEXAGQQIWsMIkeLadkdVpOqTjMfvnUX3d+rFdOCI4xFEA
 345   5mm9o2qsmKTdZtGBeoY1M1Quq4qITtZifqthe6cZ83YulyKCEZniqiQzfCjWYZoS
 346   tcW8rc+DIC/pakwRN7K7nZRNpoYb50+C+vlHfk7tuQuR3B95QFiOdfob9lSrnNtM
 347   pli+diK5g1xmBbhSCUvbSK22ELCEtek6CZxKvkQclscteEhvVDIiq6rl5fMZsQCz
 348   85L4fMX1HhVQ4fSPIIAfMi1sup36DEtTM9ensT8jKSB0gp9ZHsUAX+NA8PeUsjB1
 349   p6i7ywHuA0kS4NC8a7uACXgWyQq6rVZPn9w9ogu1k2KdtcHLcQSAgq8jB0Xw3056
 350   K7S6EVK5Ag0EV7YjPgEQAPNuzxaF0HEFrS0kGXhXPRusOBTdgOo2Sqetr9PXuRU8
 351   juzbtUSGgcRGZknXukqpvakSWmv2Y38XO43Q33C9Rq6Z32DHOw4JqbsM9Oa5Ii/D
 352   KyTf3WaMImRuijTVuG5Vd7YUGSA48XMAkQdgU/Ga7u1Y6YLE1iK65i3EvLBTuUL9
 353   mnoJm6rnvEmpRYrjsjnAMr3+KKCTBJvecOzoDYumQOYKv6tw7AuHlvENJ6Lu9hb7
 354   dM06Q+UL+Hp871094L0B/Jbqo91UVCrWalllyPUAvPvMWJyIgHg2sPc9OMOVGdok
 355   JYo9p9VKwxvIhaZBonTWJ+4TQ7CJqetq7xwjbrhVeYjmkD0LyT1/ZpUG4mIuxdos
 356   RvTcLMVbP0mkEu20D1xxpqbd95TYSacLexv3EP4huTGrmYoU3eUTNQAAipsjVBgZ
 357   lc+AvExjslK+hTECp4fCl/907YshSphSnHRsX8ZZFX1SqXyiY1BuHA/SnZf/QZ/G
 358   P0BuDYgkzwt467deTQcALDDJVeDFyCTkU774pmlM3eLKeOZsjMH2px31N5LONWH9
 359   EM9J2fkroCjnKe5sZiZo/AKT4N1UFEOWBajvI0gXg32sW5IwAQnEDWdLlNgWAg32
 360   gMXf8YeeBUZ8UK/gQbfJLTweTW0NXRuIp0rKlzHjTZMDBVFY/k/ObFzr9ldThmFl
 361   ABEBAAGJAiUEGAECAA8FAle2Iz4CGwwFCQlmAYAACgkQf0OCgO+NNJ9tZhAAvBp8
 362   hAr1q9U0i6EyzJg9r/Id/qtQ4uqtg7UYKaO/IbhxiavLN3HJ9xcSa4TlAAhsQpIh
 363   Ktw7o2+O30/AsKNH91S9yjR/RgVM+/6Rqaf4HCnZm3p3cx6dcLqYtc8dHg6oWPMK
 364   lRPyQXDJy8Y+y6plD8I7SrMsOYAZNj7iXLf1pASxDIWFXc/7pJadoLZOV1al8b/a
 365   kJJpJrx1thtF7dJQ0pfBPyTDdahBg2h8XqeivygVUD5QhWW8dzmHsve18XKVHLkL
 366   C1HmsFC2gGJxFXERBzsBE2YHVda4+e0xCX83UVx9z4pIgsVuUBHp5W/7oGEy9GrP
 367   Gp7zUAQA/6gpVXAnsf7BNC6fZQoCBkBMNY/8tCxiKeYsAOmtoM+rFPZYl7ySOzMw
 368   NBkIr6OGxWuFl2SLD0QcAzTPsErPokRGYu5MgRyJySRN/NslZdmC/jQG+X33I8yz
 369   CdHWVAcPtMrHIdisjt3MlCuLiZs5GDiU6dndPKh2/bU5x/hqzY2jWnp6xlb4zjrO
 370   Nl47zPMTGaYQ0jb4/v9VS34tbJAWKpEzSJbMaKhgxaBV4/LAUZpNXnX/S4X3KYcc
 371   LsEMhwuBRYd2D/UHruNHlhB/M8lSouGfKW3WyMNFAiV/7dT512+t7ZjFf+thQjaA
 372   FPfZDNCu/TXoqyJk7434jJrcHgPryzrHFBLfEmc=
 373   =TREp
 374   -----END PGP PUBLIC KEY BLOCK----- ",
 375             }
 376   MANIFEST
 377
 378 bogus_key_pp = <<-MANIFEST
 379         apt_key { 'puppetlabs':
 380           id      => '#{PUPPETLABS_GPG_KEY_LONG_ID}',
 381           ensure  => 'present',
 382           content => 'For posterity: such content, much bogus, wow',
 383         }
 384   MANIFEST
 385
 386 hkps_pool_pp = <<-MANIFEST
 387         apt_key { 'puppetlabs':
 388           id     => '#{PUPPETLABS_GPG_KEY_LONG_ID}',
 389           ensure => 'present',
 390           server => 'hkps.pool.sks-keyservers.net',
 391         }
 392   MANIFEST
 393
 394 hkp_pool_pp = <<-MANIFEST
 395         apt_key { 'puppetlabs':
 396           id     => '#{PUPPETLABS_GPG_KEY_FINGERPRINT}',
 397           ensure => 'present',
 398           server => 'hkp://hkps.pool.sks-keyservers.net:80',
 399         }
 400   MANIFEST
 401
 402 nonexistant_key_server_pp = <<-MANIFEST
 403         apt_key { 'puppetlabs':
 404           id     => '#{PUPPETLABS_GPG_KEY_LONG_ID}',
 405           ensure => 'present',
 406           server => 'nonexistant.key.server',
 407         }
 408   MANIFEST
 409
 410 dot_server_pp = <<-MANIFEST
 411         apt_key { 'puppetlabs':
 412           id     => '#{PUPPETLABS_GPG_KEY_LONG_ID}',
 413           ensure => 'present',
 414           server => '.pgp.key.server',
 415         }
 416   MANIFEST
 417
 418 http_works_pp = <<-MANIFEST
 419         apt_key { 'puppetlabs':
 420           id     => '#{PUPPETLABS_GPG_KEY_LONG_ID}',
 421           ensure => 'present',
 422           source => 'http://#{PUPPETLABS_APT_URL}/#{PUPPETLABS_GPG_KEY_FILE}',
 423         }
 424   MANIFEST
 425
 426 http_works_userinfo_pp = <<-MANIFEST
 427         apt_key { 'puppetlabs':
 428           id     => '#{PUPPETLABS_GPG_KEY_LONG_ID}',
 429           ensure => 'present',
 430           source => 'http://dummyuser:dummypassword@#{PUPPETLABS_APT_URL}/#{PUPPETLABS_GPG_KEY_FILE}',
 431         }
 432   MANIFEST
 433
 434 four_oh_four_pp = <<-MANIFEST
 435         apt_key { 'puppetlabs':
 436           id     => '#{PUPPETLABS_GPG_KEY_LONG_ID}',
 437           ensure => 'present',
 438           source => 'http://#{PUPPETLABS_APT_URL}/herpderp.gpg',
 439         }
 440   MANIFEST
 441
 442 socket_error_pp = <<-MANIFEST
 443         apt_key { 'puppetlabs':
 444           id     => '#{PUPPETLABS_GPG_KEY_LONG_ID}',
 445           ensure => 'present',
 446           source => 'http://apt.puppetlabss.com/herpderp.gpg',
 447         }
 448   MANIFEST
 449
 450 ftp_works_pp = <<-MANIFEST
 451         apt_key { 'CentOS 6':
 452           id     => '#{CENTOS_GPG_KEY_LONG_ID}',
 453           ensure => 'present',
 454           source => 'ftp://#{CENTOS_REPO_URL}/#{CENTOS_GPG_KEY_FILE}',
 455         }
 456   MANIFEST
 457
 458 ftp_550_pp = <<-MANIFEST
 459         apt_key { 'CentOS 6':
 460           id     => '#{SHOULD_NEVER_EXIST_ID}',
 461           ensure => 'present',
 462           source => 'ftp://#{CENTOS_REPO_URL}/herpderp.gpg',
 463         }
 464   MANIFEST
 465
 466 ftp_socket_error_pp = <<-MANIFEST
 467         apt_key { 'puppetlabs':
 468           id     => '#{PUPPETLABS_GPG_KEY_LONG_ID}',
 469           ensure => 'present',
 470           source => 'ftp://apt.puppetlabss.com/herpderp.gpg',
 471         }
 472   MANIFEST
 473
 474 https_works_pp = <<-MANIFEST
 475         apt_key { 'puppetlabs':
 476           id     => '#{PUPPETLABS_GPG_KEY_LONG_ID}',
 477           ensure => 'present',
 478           source => 'https://#{PUPPETLABS_APT_URL}/#{PUPPETLABS_GPG_KEY_FILE}',
 479         }
 480   MANIFEST
 481
 482 https_userinfo_pp = <<-MANIFEST
 483         apt_key { 'puppetlabs':
 484           id     => '#{PUPPETLABS_GPG_KEY_LONG_ID}',
 485           ensure => 'present',
 486           source => 'https://dummyuser:dummypassword@#{PUPPETLABS_APT_URL}/#{PUPPETLABS_GPG_KEY_FILE}',
 487         }
 488   MANIFEST
 489
 490 https_404_pp = <<-MANIFEST
 491         apt_key { 'puppetlabs':
 492           id     => '#{SHOULD_NEVER_EXIST_ID}',
 493           ensure => 'present',
 494           source => 'https://#{PUPPETLABS_APT_URL}/herpderp.gpg',
 495         }
 496   MANIFEST
 497
 498 https_socket_error_pp = <<-MANIFEST
 499         apt_key { 'puppetlabs':
 500           id     => '#{SHOULD_NEVER_EXIST_ID}',
 501           ensure => 'present',
 502           source => 'https://apt.puppetlabss.com/herpderp.gpg',
 503         }
 504   MANIFEST
 505
 506 path_exists_pp = <<-MANIFEST
 507         apt_key { 'puppetlabs':
 508           id     => 'EF8D349F',
 509           ensure => 'present',
 510           source => '/tmp/puppetlabs-pubkey.gpg',
 511         }
 512   MANIFEST
 513
 514 path_does_not_exist_pp = <<-MANIFEST
 515         apt_key { 'puppetlabs':
 516           id     => '#{PUPPETLABS_GPG_KEY_LONG_ID}',
 517           ensure => 'present',
 518           source => '/tmp/totally_bogus.file',
 519         }
 520   MANIFEST
 521
 522 path_bogus_content_pp = <<-MANIFEST
 523         apt_key { 'puppetlabs':
 524           id     => '#{PUPPETLABS_GPG_KEY_LONG_ID}',
 525           ensure => 'present',
 526           source => '/tmp/fake-key.gpg',
 527         }
 528   MANIFEST
 529
 530 debug_works_pp = <<-MANIFEST
 531         apt_key { 'puppetlabs':
 532           id      => '#{PUPPETLABS_GPG_KEY_LONG_ID}',
 533           ensure  => 'present',
 534           options => 'debug',
 535         }
 536   MANIFEST
 537
 538 fingerprint_match_pp = <<-MANIFEST
 539         apt_key { 'puppetlabs':
 540           id      => '#{PUPPETLABS_GPG_KEY_FINGERPRINT}',
 541           ensure  => 'present',
 542           source  => 'https://#{PUPPETLABS_APT_URL}/#{PUPPETLABS_GPG_KEY_FILE}',
 543         }
 544   MANIFEST
 545
 546 fingerprint_does_not_match_pp = <<-MANIFEST
 547         apt_key { 'puppetlabs':
 548           id      => '6F6B15509CF8E59E6E469F327F438280EF8D9999',
 549           ensure  => 'present',
 550           source  => 'https://#{PUPPETLABS_APT_URL}/#{PUPPETLABS_GPG_KEY_FILE}',
 551         }
 552   MANIFEST
 553
 554 describe 'apt_key' do
 555   before(:each) do
 556     # Delete twice to make sure everything is cleaned
 557     # up after the short key collision
 558     shell("apt-key del #{PUPPETLABS_GPG_KEY_SHORT_ID}",
 559           acceptable_exit_codes: [0, 1, 2])
 560     shell("apt-key del #{PUPPETLABS_GPG_KEY_SHORT_ID}",
 561           acceptable_exit_codes: [0, 1, 2])
 562   end
 563
 564   describe 'default options' do
 565     key_versions = {
 566       '32bit key id'                        => PUPPETLABS_GPG_KEY_SHORT_ID.to_s,
 567       '64bit key id'                        => PUPPETLABS_GPG_KEY_LONG_ID.to_s,
 568       '160bit key fingerprint'              => PUPPETLABS_GPG_KEY_FINGERPRINT.to_s,
 569       '32bit lowercase key id'              => PUPPETLABS_GPG_KEY_SHORT_ID.downcase.to_s,
 570       '64bit lowercase key id'              => PUPPETLABS_GPG_KEY_LONG_ID.downcase.to_s,
 571       '160bit lowercase key fingerprint'    => PUPPETLABS_GPG_KEY_FINGERPRINT.downcase.to_s,
 572       '0x formatted 32bit key id'           => "0x#{PUPPETLABS_GPG_KEY_SHORT_ID}",
 573       '0x formatted 64bit key id'           => "0x#{PUPPETLABS_GPG_KEY_LONG_ID}",
 574       '0x formatted 160bit key fingerprint' => "0x#{PUPPETLABS_GPG_KEY_FINGERPRINT}",
 575       '0x formatted 32bit lowercase key id' => "0x#{PUPPETLABS_GPG_KEY_SHORT_ID.downcase}",
 576       '0x formatted 64bit lowercase key id' => "0x#{PUPPETLABS_GPG_KEY_LONG_ID.downcase}",
 577       '0x formatted 160bit lowercase key fingerprint' => "0x#{PUPPETLABS_GPG_KEY_FINGERPRINT.downcase}",
 578     }
 579
 580     key_versions.each do |key, value| # rubocop:disable Lint/UnusedBlockArgument
 581       context 'when key.to_s' do
 582         it 'works' do
 583           apply_manifest_twice(populate_default_options_pp(value))
 584           shell(PUPPETLABS_KEY_CHECK_COMMAND)
 585         end
 586       end
 587     end
 588
 589     context 'with invalid length key id' do
 590       it 'fails' do
 591         apply_manifest(invalid_key_length_pp, expect_failures: true) do |r|
 592           expect(r.stderr).to match(%r{Valid values match})
 593         end
 594       end
 595     end
 596   end
 597
 598   describe 'ensure =>' do
 599     context 'when absent' do
 600       it 'is removed' do
 601         # Install the key first (retry because key pool may timeout)
 602         install_key(CENTOS_GPG_KEY_FINGERPRINT)
 603         shell(CENTOS_KEY_CHECK_COMMAND)
 604
 605         # Time to remove it using Puppet
 606         apply_manifest_twice(ensure_absent_pp)
 607
 608         shell(CENTOS_KEY_CHECK_COMMAND, acceptable_exit_codes: [1])
 609
 610         # Re-Install the key (retry because key pool may timeout)
 611         install_key(CENTOS_GPG_KEY_FINGERPRINT)
 612       end
 613     end
 614
 615     context 'when absent, added with long key', unless: (fact('operatingsystem') == 'Debian' && fact('operatingsystemmajrelease') == '6') do
 616       it 'is removed' do
 617         # Install the key first (retry because key pool may timeout)
 618         install_key(PUPPETLABS_GPG_KEY_LONG_ID)
 619         shell(PUPPETLABS_KEY_CHECK_COMMAND)
 620
 621         # Time to remove it using Puppet
 622         apply_manifest_twice(ensure_absent_long_key_pp)
 623
 624         shell(PUPPETLABS_KEY_CHECK_COMMAND, acceptable_exit_codes: [1])
 625       end
 626     end
 627   end
 628
 629   describe 'content =>' do
 630     context 'with puppetlabs gpg key' do
 631       it 'works' do
 632         # Apply the manifest (Retry if timeout error is received from key pool)
 633         retry_on_error_matching(MAX_TIMEOUT_RETRY, TIMEOUT_RETRY_WAIT, TIMEOUT_ERROR_MATCHER) do
 634           apply_manifest(gpg_key_pp, catch_failures: true)
 635         end
 636
 637         apply_manifest(gpg_key_pp, catch_changes: true)
 638         shell(PUPPETLABS_KEY_CHECK_COMMAND)
 639       end
 640     end
 641
 642     context 'with multiple keys' do
 643       it 'runs without errors' do
 644         apply_manifest_twice(multiple_keys_pp)
 645         shell(PUPPETLABS_KEY_CHECK_COMMAND)
 646       end
 647     end
 648
 649     context 'with bogus key' do
 650       it 'fails' do
 651         apply_manifest(bogus_key_pp, expect_failures: true) do |r|
 652           expect(r.stderr).to match(%r{no valid OpenPGP data found})
 653         end
 654       end
 655     end
 656   end
 657
 658   describe 'server =>' do
 659     context 'with hkps.pool.sks-keyservers.net' do
 660       it 'works' do
 661         # Apply the manifest (Retry if timeout error is received from key pool)
 662         retry_on_error_matching(MAX_TIMEOUT_RETRY, TIMEOUT_RETRY_WAIT, TIMEOUT_ERROR_MATCHER) do
 663           apply_manifest(hkps_pool_pp, catch_failures: true)
 664         end
 665
 666         apply_manifest(hkps_pool_pp, catch_changes: true)
 667         shell(PUPPETLABS_KEY_CHECK_COMMAND)
 668       end
 669     end
 670
 671     context 'with hkp://hkps.pool.sks-keyservers.net:80' do
 672       it 'works' do
 673         retry_on_error_matching(MAX_TIMEOUT_RETRY, TIMEOUT_RETRY_WAIT, TIMEOUT_ERROR_MATCHER) do
 674           apply_manifest(hkp_pool_pp, catch_failures: true)
 675         end
 676
 677         apply_manifest(hkp_pool_pp, catch_changes: true)
 678         shell(PUPPETLABS_KEY_CHECK_COMMAND)
 679       end
 680     end
 681
 682     context 'with nonexistant.key.server' do
 683       it 'fails' do
 684         apply_manifest(nonexistant_key_server_pp, expect_failures: true) do |r|
 685           expect(r.stderr).to match(%r{(Host not found|Couldn't resolve host)})
 686         end
 687       end
 688     end
 689
 690     context 'with key server start with dot' do
 691       it 'fails' do
 692         apply_manifest(dot_server_pp, expect_failures: true) do |r|
 693           expect(r.stderr).to match(%r{Invalid value ".pgp.key.server"})
 694         end
 695       end
 696     end
 697   end
 698
 699   describe 'source =>' do
 700     context 'with http://' do
 701       it 'works' do
 702         apply_manifest_twice(http_works_pp)
 703         shell(PUPPETLABS_KEY_CHECK_COMMAND)
 704       end
 705
 706       it 'works with userinfo' do
 707         apply_manifest_twice(http_works_userinfo_pp)
 708         shell(PUPPETLABS_KEY_CHECK_COMMAND)
 709       end
 710
 711       it 'fails with a 404' do
 712         apply_manifest(four_oh_four_pp, expect_failures: true) do |r|
 713           expect(r.stderr).to match(%r{404 Not Found})
 714         end
 715       end
 716
 717       it 'fails with a socket error' do
 718         apply_manifest(socket_error_pp, expect_failures: true) do |r|
 719           expect(r.stderr).to match(%r{could not resolve})
 720         end
 721       end
 722     end
 723
 724     context 'with ftp://' do
 725       before(:each) do
 726         shell("apt-key del #{CENTOS_GPG_KEY_LONG_ID}",
 727               acceptable_exit_codes: [0, 1, 2])
 728       end
 729
 730       it 'works' do
 731         apply_manifest_twice(ftp_works_pp)
 732         shell(CENTOS_KEY_CHECK_COMMAND)
 733       end
 734
 735       it 'fails with a 550' do
 736         apply_manifest(ftp_550_pp, expect_failures: true) do |r|
 737           expect(r.stderr).to match(%r{550 Failed to open})
 738         end
 739       end
 740
 741       it 'fails with a socket error' do
 742         apply_manifest(ftp_socket_error_pp, expect_failures: true) do |r|
 743           expect(r.stderr).to match(%r{could not resolve})
 744         end
 745       end
 746     end
 747
 748     context 'with https://' do
 749       it 'works' do
 750         apply_manifest_twice(https_works_pp)
 751         shell(PUPPETLABS_KEY_CHECK_COMMAND)
 752       end
 753
 754       it 'works with userinfo' do
 755         apply_manifest_twice(https_userinfo_pp)
 756         shell(PUPPETLABS_KEY_CHECK_COMMAND)
 757       end
 758
 759       it 'fails with a 404' do
 760         apply_manifest(https_404_pp, expect_failures: true) do |r|
 761           expect(r.stderr).to match(%r{404 Not Found})
 762         end
 763       end
 764
 765       it 'fails with a socket error' do
 766         apply_manifest(https_socket_error_pp, expect_failures: true) do |r|
 767           expect(r.stderr).to match(%r{could not resolve})
 768         end
 769       end
 770     end
 771
 772     context 'with /path/that/exists' do
 773       before(:each) do
 774         shell("curl -o /tmp/puppetlabs-pubkey.gpg \
 775               http://#{PUPPETLABS_APT_URL}/#{PUPPETLABS_GPG_KEY_FILE}")
 776       end
 777
 778       after(:each) do
 779         shell('rm /tmp/puppetlabs-pubkey.gpg')
 780       end
 781
 782       it 'works' do
 783         apply_manifest_twice(path_exists_pp)
 784         shell(PUPPETLABS_KEY_CHECK_COMMAND)
 785       end
 786     end
 787
 788     context 'with /path/that/does/not/exist' do
 789       it 'fails' do
 790         apply_manifest(path_does_not_exist_pp, expect_failures: true) do |r|
 791           expect(r.stderr).to match(%r{does not exist})
 792         end
 793       end
 794     end
 795
 796     context 'with /path/that/exists/with/bogus/content' do
 797       before(:each) do
 798         shell('echo "here be dragons" > /tmp/fake-key.gpg')
 799       end
 800
 801       after(:each) do
 802         shell('rm /tmp/fake-key.gpg')
 803       end
 804       it 'fails' do
 805         apply_manifest(path_bogus_content_pp, expect_failures: true) do |r|
 806           expect(r.stderr).to match(%r{no valid OpenPGP data found})
 807         end
 808       end
 809     end
 810   end
 811
 812   describe 'options =>' do
 813     context 'with debug' do
 814       it 'works' do
 815         apply_manifest_twice(debug_works_pp)
 816         shell(PUPPETLABS_KEY_CHECK_COMMAND)
 817       end
 818     end
 819   end
 820
 821   describe 'fingerprint validation against source/content' do
 822     context 'with fingerprint in id matches fingerprint from remote key' do
 823       it 'works' do
 824         apply_manifest_twice(fingerprint_match_pp)
 825       end
 826     end
 827
 828     context 'with fingerprint in id does NOT match fingerprint from remote key' do
 829       it 'works' do
 830         apply_manifest(fingerprint_does_not_match_pp, expect_failures: true) do |r|
 831           expect(r.stderr).to match(%r{don't match})
 832         end
 833       end
 834     end
 835   end
 836 end