mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-10 20:56:39 +00:00
The design inject renders a role's style.css once per vhost but copied every render to one shared CDN path, so the last render won. xwiki's stylesheet embeds its own origin; on a multi-network node the onion render landed last and every clearnet page loaded onion URLs, failing network-leak.spec.js whenever the pass picked clearnet. The first network keeps style.css, every further network gets <label>-style.css (onion-style.css), keyed by the same rule the tls lookup uses for the render (serving_network), and each vhost links its own file. Single-network roles keep the exact old path. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Certificate & TLS Unit Tests 🔐
Unit tests for the top-level certificate and TLS helper modules in utils/: cert_utils.py (wildcard/exact match logic, newest-certificate selection) and tls_common.py (flavor handling, SAN overrides, domain normalisation).
Tests in this directory MUST only cover the pure-function behaviour of utils.cert_utils and utils.tls_common. Lookup-plugin integration that depends on these modules MUST live under tests/unit/python/plugins/lookup/.
For framework and make test-unit usage see unit.md.