mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-07 11:22:31 +00:00
The cert lookup handed an alias or redirect source the live directory of its app's canonical domain or of its target, so social.cymais.cloud got the infinito.nexus lineage and failed with 'Hostname mismatch'. With the san and dedicated flavors a domain term now resolves to its own live/<domain>, which cert_link_domains points at the lineage that covers it; application terms keep the canonical path. resolve_term follows redirect chains and fails on a cycle. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Certificate & TLS Unit Tests 🔐
Unit tests for the top-level certificate and TLS helper modules in utils/: cert_utils.py (wildcard/exact match logic, newest-certificate selection) and tls_common.py (flavor handling, SAN overrides, domain normalisation).
Tests in this directory MUST only cover the pure-function behaviour of utils.cert_utils and utils.tls_common. Lookup-plugin integration that depends on these modules MUST live under tests/unit/python/plugins/lookup/.
For framework and make test-unit usage see unit.md.