denozord/MikrotikManager
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 104 Wiki Activity
Files
61e66716850f9e8e34de021cb38c58c29fcd97ca
MikrotikManager/docs/ux-ui/acceptance/ipsec-certificate-binding-2026-10-10.json
T

450 lines
14 KiB
JSON
Raw Blame History

{
"date": "2026-10-10",
"block": "12.5.116",
"deployment": {
"date": "2026-10-10",
"baseCommit": "d52c48e",
"backendBaseContext": "build-refs114",
"frontendBaseContext": "build-keepcert115-front",
"backendContext": "build-bound116",
"frontendContext": "build-bound116-front",
"sourceHashes": {
"backend/src/routes/ipsec.ts": "83eef38ef796b08f9b9e2d5827fcbbdcb8799bad2f18ba52aeb6a33d94226290",
"app/(main)/ipsec/page.tsx": "2d454336d6f0090c754e2f61c68a8d67c95b9fa5ec807996230861e0beb60092"
},
"compiledHashes": {
"backend/dist/routes/ipsec.js": "3318fde98abc367bda3cd1d444c82d8c813b32aa05144a59ccca00f7887d1f53"
},
"containers": {
"backend": {
"imageTag": "mmapp-test/backend:ux-bound116",
"imageId": "sha256:98a8f1c55c4dffc0eddd5b75a2ac7e420ec612d13b269e2631654409cfcf9f98",
"state": "running",
"health": "healthy"
},
"frontend": {
"imageTag": "mmapp-test/frontend:ux-bound116",
"imageId": "sha256:d641b518fa35291e2c25dcabdef13b730c307a424d3b96bc9847df79022ead28",
"state": "running",
"health": null
},
"postgres": {
"imageTag": "postgres:18-alpine",
"imageId": "sha256:77f585114c32fbca283dc835b0596f4e52b51b4c6662d7810b2f4084f60a1873",
"state": "running",
"health": "healthy"
}
}
},
"sourceByteHashesMatch": true,
"compiledBackendRouteHashMatches": true,
"before": {
"date": "2026-10-10",
"block": "12.5.116",
"name": "mm-ipsec116-1791641648556",
"cn": "mm-ipsec116-1791641648556",
"observations": [
{
"serverId": 1,
"active": [
{
".id": "*1",
"id": "CN=mm-ipsec116-1791641648556",
"state": "established",
"dynamic-address": "198.18.116.250",
"remote-address": "104.165.244.7",
"uptime": "1s"
}
],
"catalog": [
{
"name": "CN=mm-ipsec116-1791641648556",
"commonName": "CN=mm-ipsec116-1791641648556",
"certName": "ipsec-user-mm-ipsec116-1791641648556-decoy",
"online": false
},
{
"name": "mm-ipsec116-1791641648556",
"commonName": "mm-ipsec116-1791641648556",
"certName": "ipsec-user-mm-ipsec116-1791641648556",
"online": true,
"activeAddress": "198.18.116.250"
}
]
},
{
"serverId": 2,
"active": [
{
".id": "*1",
"id": "194.226.121.150",
"state": "established",
"remote-address": "194.226.121.150",
"uptime": "0s"
}
],
"catalog": []
}
],
"cleanup": [
{
"serverId": 1,
"/system/logging": true,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true
},
{
"serverId": 2,
"/system/logging": true,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true
}
],
"databaseWrites": "One successful API DELETE invokes history recording with deduplication",
"certificate": {
"name": "ipsec-user-mm-ipsec116-1791641648556",
"common-name": "mm-ipsec116-1791641648556",
"ca": "mm-ipsec116-1791641648556-ca",
"key-usage": "digital-signature,key-encipherment,tls-client"
},
"certificates": [
[
{
"name": "mm-ipsec116-1791641648556-ca",
"trusted": "true",
"trust-store": "all",
"invalid-before": "2026-10-10 17:14:10",
"invalid-after": "2026-10-12 17:14:10",
"common-name": "mm-ipsec116-1791641648556-CA"
},
{
"name": "mm-ipsec116-1791641648556-server",
"trusted": "false",
"trust-store": "all",
"ca": "mm-ipsec116-1791641648556-ca",
"invalid-before": "2026-10-10 17:14:11",
"invalid-after": "2026-10-12 17:14:11",
"common-name": "194.226.121.150"
},
{
"name": "ipsec-user-mm-ipsec116-1791641648556",
"trusted": "false",
"trust-store": "all",
"ca": "mm-ipsec116-1791641648556-ca",
"invalid-before": "2026-10-10 17:14:11",
"invalid-after": "2026-10-12 17:14:11",
"common-name": "mm-ipsec116-1791641648556"
},
{
"name": "ipsec-user-mm-ipsec116-1791641648556-decoy",
"trusted": "false",
"trust-store": "all",
"ca": "mm-ipsec116-1791641648556-ca",
"invalid-before": "2026-10-10 17:14:13",
"invalid-after": "2026-10-12 17:14:13",
"common-name": "CN=mm-ipsec116-1791641648556"
}
],
[
{
"name": "mm-ipsec116-1791641648556-client-imported",
"trusted": "true",
"trust-store": "ipsec",
"invalid-before": "2026-10-10 16:14:11",
"invalid-after": "2026-10-12 16:14:11",
"common-name": "mm-ipsec116-1791641648556"
},
{
"name": "mm-ipsec116-1791641648556-ca-imported",
"trusted": "true",
"trust-store": "ipsec",
"invalid-before": "2026-10-10 16:14:10",
"invalid-after": "2026-10-12 16:14:10",
"common-name": "mm-ipsec116-1791641648556-CA"
}
]
],
"catalogCorrect": true,
"dnPhase": {
"active": [
{
".id": "*1",
"id": "CN=mm-ipsec116-1791641648556",
"state": "established",
"dynamic-address": "198.18.116.250",
"remote-address": "104.165.244.7",
"uptime": "1s"
}
],
"clients": [
{
"name": "CN=mm-ipsec116-1791641648556",
"commonName": "CN=mm-ipsec116-1791641648556",
"certName": "ipsec-user-mm-ipsec116-1791641648556-decoy",
"online": false
},
{
"name": "mm-ipsec116-1791641648556",
"commonName": "mm-ipsec116-1791641648556",
"certName": "ipsec-user-mm-ipsec116-1791641648556",
"online": true,
"activeAddress": "198.18.116.250"
}
],
"decoyOnline": false
},
"fqdnPhase": {
"configuredRemoteId": "fqdn:mm-ipsec116-1791641648556.example",
"nativeId": "mm-ipsec116-1791641648556.example",
"assignedAddress": "198.18.116.250",
"originalOnline": true,
"decoyOnline": false
},
"deletionReply": {
"ok": true
},
"nameCollision": {
"pskUserName": "mm-ipsec116-1791641648556-decoy",
"unboundCertificateName": "ipsec-user-mm-ipsec116-1791641648556-decoy",
"unboundCertificateNativeId": "*9D",
"pskRemoved": true,
"certificatePreserved": false
},
"originalSessionUnchanged": true
},
"native": {
"date": "2026-10-10",
"block": "12.5.116",
"name": "mm-ipsec116-1791642066101",
"cn": "mm-ipsec116-1791642066101",
"observations": [
{
"serverId": 1,
"active": [
{
".id": "*1",
"id": "CN=mm-ipsec116-1791642066101",
"state": "established",
"dynamic-address": "198.18.116.250",
"remote-address": "104.165.244.7",
"uptime": "1s"
}
],
"catalog": [
{
"name": "CN=mm-ipsec116-1791642066101",
"commonName": "CN=mm-ipsec116-1791642066101",
"certName": "ipsec-user-mm-ipsec116-1791642066101-decoy",
"online": false
},
{
"name": "mm-ipsec116-1791642066101",
"commonName": "mm-ipsec116-1791642066101",
"certName": "ipsec-user-mm-ipsec116-1791642066101",
"online": true,
"activeAddress": "198.18.116.250"
}
]
},
{
"serverId": 2,
"active": [
{
".id": "*1",
"id": "194.226.121.150",
"state": "established",
"remote-address": "194.226.121.150",
"uptime": "1s"
}
],
"catalog": []
}
],
"cleanup": [
{
"serverId": 1,
"/system/logging": true,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true
},
{
"serverId": 2,
"/system/logging": true,
"/ip/ipsec/identity": true,
"/ip/ipsec/peer": true,
"/ip/ipsec/policy": true,
"/ip/ipsec/policy/group": true,
"/ip/ipsec/mode-config": true,
"/ip/ipsec/proposal": true,
"/ip/ipsec/profile": true,
"/certificate": true,
"/file": true,
"/ip/address": true,
"/ip/route": true,
"/ip/firewall/nat": true
}
],
"databaseWrites": "One successful API DELETE invokes history recording with deduplication",
"certificate": {
"name": "ipsec-user-mm-ipsec116-1791642066101",
"common-name": "mm-ipsec116-1791642066101",
"ca": "mm-ipsec116-1791642066101-ca",
"key-usage": "digital-signature,key-encipherment,tls-client"
},
"certificates": [
[
{
"name": "mm-ipsec116-1791642066101-ca",
"trusted": "true",
"trust-store": "all",
"invalid-before": "2026-10-10 17:21:07",
"invalid-after": "2026-10-12 17:21:07",
"common-name": "mm-ipsec116-1791642066101-CA"
},
{
"name": "mm-ipsec116-1791642066101-server",
"trusted": "false",
"trust-store": "all",
"ca": "mm-ipsec116-1791642066101-ca",
"invalid-before": "2026-10-10 17:21:08",
"invalid-after": "2026-10-12 17:21:08",
"common-name": "194.226.121.150"
},
{
"name": "ipsec-user-mm-ipsec116-1791642066101",
"trusted": "false",
"trust-store": "all",
"ca": "mm-ipsec116-1791642066101-ca",
"invalid-before": "2026-10-10 17:21:09",
"invalid-after": "2026-10-12 17:21:09",
"common-name": "mm-ipsec116-1791642066101"
},
{
"name": "ipsec-user-mm-ipsec116-1791642066101-decoy",
"trusted": "false",
"trust-store": "all",
"ca": "mm-ipsec116-1791642066101-ca",
"invalid-before": "2026-10-10 17:21:09",
"invalid-after": "2026-10-12 17:21:09",
"common-name": "CN=mm-ipsec116-1791642066101"
}
],
[
{
"name": "mm-ipsec116-1791642066101-client-imported",
"trusted": "true",
"trust-store": "ipsec",
"invalid-before": "2026-10-10 16:21:09",
"invalid-after": "2026-10-12 16:21:09",
"common-name": "mm-ipsec116-1791642066101"
},
{
"name": "mm-ipsec116-1791642066101-ca-imported",
"trusted": "true",
"trust-store": "ipsec",
"invalid-before": "2026-10-10 16:21:07",
"invalid-after": "2026-10-12 16:21:07",
"common-name": "mm-ipsec116-1791642066101-CA"
}
]
],
"catalogCorrect": true,
"dnPhase": {
"active": [
{
".id": "*1",
"id": "CN=mm-ipsec116-1791642066101",
"state": "established",
"dynamic-address": "198.18.116.250",
"remote-address": "104.165.244.7",
"uptime": "1s"
}
],
"clients": [
{
"name": "CN=mm-ipsec116-1791642066101",
"commonName": "CN=mm-ipsec116-1791642066101",
"certName": "ipsec-user-mm-ipsec116-1791642066101-decoy",
"online": false
},
{
"name": "mm-ipsec116-1791642066101",
"commonName": "mm-ipsec116-1791642066101",
"certName": "ipsec-user-mm-ipsec116-1791642066101",
"online": true,
"activeAddress": "198.18.116.250"
}
],
"decoyOnline": false
},
"fqdnPhase": {
"configuredRemoteId": "fqdn:mm-ipsec116-1791642066101.example",
"nativeId": "mm-ipsec116-1791642066101.example",
"assignedAddress": "198.18.116.250",
"originalOnline": true,
"decoyOnline": false
},
"pskUserName": "mm-ipsec116-1791642066101-decoy",
"deletionReply": {
"triggeredBy": "live UI"
},
"nameCollision": {
"pskUserName": "mm-ipsec116-1791642066101-decoy",
"unboundCertificateName": "ipsec-user-mm-ipsec116-1791642066101-decoy",
"unboundCertificateNativeId": "*A1",
"pskRemoved": true,
"certificatePreserved": true
},
"originalSessionUnchanged": true
},
"browserEvidence": "browser-ipsec-bound-2026-10-10.json",
"local": {
"profileScripts": 8,
"stateChecks": 114,
"backendBuildPassed": true,
"frontendProductionBuildPassed": true,
"sourceTypeScriptPassed": true,
"eslintPassed": true,
"e2eUnique": 28,
"e2eSeconds": 39.6
},
"bounds": [
"No certificate inference from managed user display name in DELETE; explicit remote-certificate/cert target only",
"Before reproduction intentionally removed only own unbound decoy certificate",
"After is one real mobile PSK UI DELETE; four confirmation dialogs",
"Signed certificate IKE connection remained established; no new PSK connection/data-plane test",
"History recording invoked with deduplication; inserted revision count not claimed",
"Full UI regression running separately in117"
]
}
Reference in new issue View Git Blame Copy Permalink