chore(test): зафиксировать тайм-ауты сертификатов с неверными сроками

2026-10-11 03:06:45 +07:00
1 parent 7867914cbc
commit b190412af1
@@ -221,7 +221,92 @@
    "initialPing3of3": false,
    "exactCauseUnproven": true,
    "cleanupCompletedBeforeRetry": true,
-    "retainedRemoteProtocol": "artifacts/wg-real-lifecycle/ipsec127-initial-ping-failure.json"
+    "retainedRemoteProtocol": "artifacts/wg-real-lifecycle/ipsec127-initial-ping-failure.json",
+    "fullProtocol": {
+      "date": "2026-10-11",
+      "block": "12.5.127",
+      "name": "mm-ipsec127-1791661875139",
+      "linux": [],
+      "cleanup": [
+        {
+          "serverId": 1,
+          "/certificate/crl": true,
+          "/system/logging": true,
+          "/ip/ipsec/identity": true,
+          "/ip/ipsec/peer": true,
+          "/ip/ipsec/policy": true,
+          "/ip/ipsec/policy/group": true,
+          "/ip/ipsec/mode-config": true,
+          "/ip/ipsec/proposal": true,
+          "/ip/ipsec/profile": true,
+          "/certificate": true,
+          "/file": true,
+          "/ip/address": true,
+          "/ip/route": true,
+          "/ip/firewall/nat": true,
+          "/ip/pool": true,
+          "/interface/bridge": true,
+          "/ipv6/address": true
+        },
+        {
+          "serverId": 2,
+          "/certificate/crl": true,
+          "/system/logging": true,
+          "/ip/ipsec/identity": true,
+          "/ip/ipsec/peer": true,
+          "/ip/ipsec/policy": true,
+          "/ip/ipsec/policy/group": true,
+          "/ip/ipsec/mode-config": true,
+          "/ip/ipsec/proposal": true,
+          "/ip/ipsec/profile": true,
+          "/certificate": true,
+          "/file": true,
+          "/ip/address": true,
+          "/ip/route": true,
+          "/ip/firewall/nat": true,
+          "/ip/pool": true,
+          "/interface/bridge": true,
+          "/ipv6/address": true
+        }
+      ],
+      "clientImage": "sha256:c9d01c801de88b2349f685c1cb631e67a8b1c697439a00148d4045c23a584054",
+      "settingsBefore": {
+        "builtin-trust-store": "default",
+        "crl-download": "false",
+        "crl-store": "ram",
+        "crl-use": "false",
+        "current-defaults": "fetch,mqtt,email,netwatch,container,lora,wiliot,dns,www,reverse-proxy"
+      },
+      "subject": {
+        "derHex": "302b3129302706035504030c206d6d2d69707365633132372d313739313636313837353133392d636c69656e74",
+        "attributes": [
+          {
+            "oidHex": "550403",
+            "stringTag": 12,
+            "value": "mm-ipsec127-1791661875139-client"
+          }
+        ],
+        "san": "X509v3 Subject Alternative Name: \n    DNS:mm-ipsec127-1791661875139.example"
+      },
+      "settingsEnabled": {
+        "builtin-trust-store": "default",
+        "crl-download": "true",
+        "crl-store": "ram",
+        "crl-use": "true",
+        "current-defaults": "fetch,mqtt,email,netwatch,container,lora,wiliot,dns,www,reverse-proxy"
+      },
+      "crlsBeforeControl": [],
+      "error": "The expression evaluated to a falsy value:\n\n  assert(result.ping3of3)\n",
+      "routerAuthLogs": [
+        "ipsec identity added by api:admin@:: (*A = /ip ipsec identity add auth-method=digital-signature certificate=mm-ipsec127-1791661875139-server comment=mm-ipsec127-1791661875139 generate-policy=port-strict match-by=certificate mode-config=mm-ipsec127-1791661875139 peer=mm-ipsec127-1791661875139 policy-template-group=mm-ipsec127-1791661875139 remote-certificate=mm-ipsec127-1791661875139-client)",
+        "item changed by api:admin@:: (/certificate settings set crl-download=yes crl-use=yes)",
+        "mm-ipsec127-1791661875139: => certificate (size 0x3a4)"
+      ],
+      "settingsRestored": true,
+      "dockerCleanup": true,
+      "ownedCaCascadeCleanup": true,
+      "credentialFilesRemoved": true
+    }
  },
  "bounds": [
    "CA children always block direct deletion, including force=true; no automatic revoke or foreign-chain cleanup",