      it "should reject a wildcard subjectAltName" do
        @request.stubs(:subject_alt_names).returns ['DNS:foo', 'DNS:*.bar']
        expect { @ca.check_internal_signing_policies(@name, @request, true) }.to raise_error(
          Puppet::SSL::CertificateAuthority::CertificateSigningError,
          /subjectAltName contains a wildcard/
        )
      end
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.