From c667666a3efba0095e45c10f1afb903777e245c5 Mon Sep 17 00:00:00 2001 From: Jake Smith Date: Wed, 30 Dec 2020 09:15:33 +0000 Subject: [PATCH] Parse byte array of otherName SANs to string of ASN1 object and OID Signed-off-by: Jake Smith --- .../security/ssl/DefaultSecurityKeyStore.java | 77 +++++++++- .../ssl/ExternalSecurityKeyStore.java | 6 + .../security/ssl/SecurityKeyStore.java | 1 + .../ssl/rest/SecuritySSLCertsInfoAction.java | 7 +- .../SecuritySSLReloadCertsActionTests.java | 12 +- .../resources/ssl/reload/kirk-keystore.jks | Bin 5355 -> 5579 bytes .../resources/ssl/reload/node-new.crt.pem | 128 +++++++---------- .../resources/ssl/reload/node-new.key.pem | 58 ++++---- .../resources/ssl/reload/node-wrong.crt.pem | 128 +++++++---------- .../resources/ssl/reload/node-wrong.key.pem | 58 ++++---- src/test/resources/ssl/reload/node.crt.pem | 136 +++++++++--------- src/test/resources/ssl/reload/node.key.pem | 58 ++++---- src/test/resources/ssl/reload/root-ca.pem | 32 ++--- .../resources/ssl/reload/spock-keystore.jks | Bin 5357 -> 5581 bytes src/test/resources/ssl/reload/truststore.jks | Bin 1338 -> 1338 bytes 15 files changed, 342 insertions(+), 359 deletions(-) diff --git a/src/main/java/org/opensearch/security/ssl/DefaultSecurityKeyStore.java b/src/main/java/org/opensearch/security/ssl/DefaultSecurityKeyStore.java index 2916ae00e0..0b2456d4f9 100644 --- a/src/main/java/org/opensearch/security/ssl/DefaultSecurityKeyStore.java +++ b/src/main/java/org/opensearch/security/ssl/DefaultSecurityKeyStore.java @@ -25,6 +25,8 @@ import io.netty.handler.ssl.SslContextBuilder; import io.netty.handler.ssl.SslProvider; +import java.io.ByteArrayInputStream; +import java.io.IOException; import java.io.File; import java.nio.file.Files; import java.nio.file.LinkOption; @@ -39,6 +41,7 @@ import java.security.cert.X509Certificate; import java.util.ArrayList; import java.util.Arrays; +import java.util.Collection; import java.util.Collections; import java.util.Date; import java.util.HashSet; @@ -66,6 +69,13 @@ import org.apache.logging.log4j.LogManager; import org.apache.logging.log4j.Logger; +import org.bouncycastle.asn1.ASN1InputStream; +import org.bouncycastle.asn1.ASN1ObjectIdentifier; +import org.bouncycastle.asn1.ASN1Primitive; +import org.bouncycastle.asn1.ASN1Sequence; +import org.bouncycastle.asn1.ASN1String; +import org.bouncycastle.asn1.ASN1TaggedObject; + import org.opensearch.OpenSearchException; import org.opensearch.OpenSearchSecurityException; import org.opensearch.SpecialPermission; @@ -572,12 +582,7 @@ private boolean hasValidDNs(final X509Certificate[] currentX509Certs, final X509 final Function formatDNString = cert -> { final String issuerDn = cert !=null && cert.getIssuerX500Principal() != null ? cert.getIssuerX500Principal().getName() : ""; final String subjectDn = cert !=null && cert.getSubjectX500Principal() != null ? cert.getSubjectX500Principal().getName() : ""; - String san = ""; - try { - san = cert !=null && cert.getSubjectAlternativeNames() != null ? cert.getSubjectAlternativeNames().toString() : ""; - } catch (CertificateParsingException e) { - log.error("Issue parsing SubjectAlternativeName:", e); - } + final String san = getSubjectAlternativeNames(cert); return String.format("%s/%s/%s", issuerDn, subjectDn, san); }; @@ -949,4 +954,64 @@ private static void checkPath(String keystoreFilePath, String fileNameLogOnly) { + fileNameLogOnly); } } + + @Override + public String getSubjectAlternativeNames(X509Certificate cert) { + String san = ""; + try { + Collection> altNames = cert !=null && cert.getSubjectAlternativeNames() != null ? cert.getSubjectAlternativeNames() : null; + if (altNames != null) { + Collection> sans = new ArrayList<>(); + for (List altName : altNames) { + Integer type = (Integer) altName.get(0); + // otherName requires parsing to string + if (type == 0) { + List otherName = getOtherName(altName); + if (otherName != null) { + sans.add(Arrays.asList(type, otherName)); + } + } else { + sans.add(altName); + } + } + san = sans.toString(); + } + } catch (CertificateParsingException e) { + log.error("Issue parsing SubjectAlternativeName:", e); + } + + return san; + } + + private List getOtherName(List altName) { + ASN1Primitive oct = null; + try { + byte[] altNameBytes = (byte[]) altName.get(1); + oct = (new ASN1InputStream(new ByteArrayInputStream(altNameBytes)).readObject()); + } catch (IOException e) { + throw new RuntimeException("Could not read ASN1InputStream", e); + } + if (oct instanceof ASN1TaggedObject) { + oct = ((ASN1TaggedObject) oct).getObject(); + } + ASN1Sequence seq = ASN1Sequence.getInstance(oct); + + // Get object identifier from first in sequence + ASN1ObjectIdentifier asnOID = (ASN1ObjectIdentifier) seq.getObjectAt(0); + String oid = asnOID.getId(); + + // Get value of object from second element + final ASN1TaggedObject obj = (ASN1TaggedObject) seq.getObjectAt(1); + // Could be tagged twice due to bug in java cert.getSubjectAltName + ASN1Primitive prim = obj.getObject(); + if (prim instanceof ASN1TaggedObject) { + prim = ASN1TaggedObject.getInstance(((ASN1TaggedObject) prim)).getObject(); + } + + if (prim instanceof ASN1String) { + return Collections.unmodifiableList(Arrays.asList(oid, ((ASN1String) prim).getString())); + } + + return null; + } } diff --git a/src/main/java/org/opensearch/security/ssl/ExternalSecurityKeyStore.java b/src/main/java/org/opensearch/security/ssl/ExternalSecurityKeyStore.java index e3be6c263e..a8fa29c4cd 100644 --- a/src/main/java/org/opensearch/security/ssl/ExternalSecurityKeyStore.java +++ b/src/main/java/org/opensearch/security/ssl/ExternalSecurityKeyStore.java @@ -127,6 +127,12 @@ public X509Certificate[] getHttpCerts() { return null; } + @Override + public String getSubjectAlternativeNames(X509Certificate cert) { + // NO-OP: since this class uses externalSslContext there is no cert + return null; + } + public static void registerExternalSslContext(String id, SSLContext externalSsslContext) { contextMap.put(Objects.requireNonNull(id), Objects.requireNonNull(externalSsslContext)); } diff --git a/src/main/java/org/opensearch/security/ssl/SecurityKeyStore.java b/src/main/java/org/opensearch/security/ssl/SecurityKeyStore.java index ff80589436..1171520462 100644 --- a/src/main/java/org/opensearch/security/ssl/SecurityKeyStore.java +++ b/src/main/java/org/opensearch/security/ssl/SecurityKeyStore.java @@ -32,6 +32,7 @@ public interface SecurityKeyStore { public String getHTTPProviderName(); public String getTransportServerProviderName(); public String getTransportClientProviderName(); + public String getSubjectAlternativeNames(X509Certificate cert); public void initHttpSSLConfig(); public void initTransportSSLConfig(); diff --git a/src/main/java/org/opensearch/security/ssl/rest/SecuritySSLCertsInfoAction.java b/src/main/java/org/opensearch/security/ssl/rest/SecuritySSLCertsInfoAction.java index cfead7297d..932bd7e4f8 100644 --- a/src/main/java/org/opensearch/security/ssl/rest/SecuritySSLCertsInfoAction.java +++ b/src/main/java/org/opensearch/security/ssl/rest/SecuritySSLCertsInfoAction.java @@ -168,12 +168,7 @@ private List> generateCertDetailList(final X509Certificate[] final String issuerDn = cert != null && cert.getIssuerX500Principal() != null ? cert.getIssuerX500Principal().getName(): ""; final String subjectDn = cert != null && cert.getSubjectX500Principal() != null ? cert.getSubjectX500Principal().getName(): ""; - String san = ""; - try { - san = cert !=null && cert.getSubjectAlternativeNames() != null ? cert.getSubjectAlternativeNames().toString() : ""; - } catch (CertificateParsingException e) { - log.error("Issue parsing SubjectAlternativeName:", e); - } + final String san = odsks.getSubjectAlternativeNames(cert); final String notBefore = cert != null && cert.getNotBefore() != null ? cert.getNotBefore().toInstant().toString(): ""; final String notAfter = cert != null && cert.getNotAfter() != null ? cert.getNotAfter().toInstant().toString(): ""; diff --git a/src/test/java/org/opensearch/security/ssl/SecuritySSLReloadCertsActionTests.java b/src/test/java/org/opensearch/security/ssl/SecuritySSLReloadCertsActionTests.java index f3be16a166..26631c4e29 100644 --- a/src/test/java/org/opensearch/security/ssl/SecuritySSLReloadCertsActionTests.java +++ b/src/test/java/org/opensearch/security/ssl/SecuritySSLReloadCertsActionTests.java @@ -48,18 +48,18 @@ public class SecuritySSLReloadCertsActionTests extends SingleClusterTest { ImmutableMap.of( "issuer_dn", "CN=Example Com Inc. Signing CA,OU=Example Com Inc. Signing CA,O=Example Com Inc.,DC=example,DC=com", "subject_dn", "CN=node-1.example.com,OU=SSL,O=Test,L=Test,C=DE", - "san", "[[2, node-1.example.com], [2, localhost], [7, 127.0.0.1], [8, 1.2.3.4.5.5]]", - "not_before", "2020-02-17T16:19:25Z", - "not_after", "2022-02-16T16:19:25Z" + "san", "[[8, 1.2.3.4.5.5], [0, [2.5.4.3, node-1.example.com]], [2, node-1.example.com], [2, localhost], [7, 127.0.0.1]]", + "not_before", "2021-04-12T00:07:08Z", + "not_after", "2023-04-12T00:07:08Z" )); private final List> NEW_NODE_CERT_DETAILS = ImmutableList.of( ImmutableMap.of( "issuer_dn", "CN=Example Com Inc. Signing CA,OU=Example Com Inc. Signing CA,O=Example Com Inc.,DC=example,DC=com", "subject_dn", "CN=node-1.example.com,OU=SSL,O=Test,L=Test,C=DE", - "san", "[[2, node-1.example.com], [2, localhost], [7, 127.0.0.1], [8, 1.2.3.4.5.5]]", - "not_before", "2020-02-18T14:11:28Z", - "not_after", "2022-02-17T14:11:28Z" + "san", "[[8, 1.2.3.4.5.5], [0, [2.5.4.3, node-1.example.com]], [2, node-1.example.com], [2, localhost], [7, 127.0.0.1]]", + "not_before", "2021-04-12T00:09:00Z", + "not_after", "2023-04-12T00:09:00Z" ) ); diff --git a/src/test/resources/ssl/reload/kirk-keystore.jks b/src/test/resources/ssl/reload/kirk-keystore.jks index 628c66bf5038bf01a7bb9bcbbc610c02273eaaa5..6a7daa435e8d2a066237ecd9d12b455b05ccaa91 100644 GIT binary patch delta 5507 zcmV-}6@2RJDa$J&FoG4w0s#Xsf)#)U2`Yw2hW8Bt2LYgh6>$WD6>Ttr6={(oMt^;Y zg{0J088hwTj8OVCLBfDt*V+OD0K-rOf&|F+g$dS_ht%+#ctub4_+S8jF7f0Jlx@w# zBb`*H3T_8Az5_joc&LK@dj+VyBhz?&{W0;gh+-!C zHSR_jAv`TXSxQjn7^AdKVVa6;U!$LAJcB|tPN86a@!2RIrlBA40UpGYe19VqHc(C* zd>S1VxzlkLo31NCZJa7u!l+&tU5-v*YurBjF)3K=R4ebl=bMKX=R;!63h#)Yknu&* zvHCN&ynb=xhP7gwl*3&-A9a7mfDCwxq@H+3GfO_0M_y0#zc=kOWE!k{dxq=*^>XEM z)EJ%7fVRjJ(CL}(P2ti+-+zX64gi}h$;UEXC0YMFC`1Pd0JE)U_P6mR)b6}2qCUyX z<8M&%&@0!FnGR_KE5kdxYz)Kc1wmQ>qn|ZO*wV<}*1fp6$aUGV;0+8uA;y6pp^;km z!k|H3pQgO@zUV?Sq6UOFb84G$XTfoO{5xXGrw1hC`Bw)ko3v%Dntys1`VxM18Z%A& z!G#;t%hz97-VteR1PyEf<500uwEgNBB&qpZAPl zP2BXG4mopb;U$D`p{iP6ID+My6x6)#V!}ww%<( z6zm73bT?%i?BeMNf7#7=KJs0Iw=i4AO(47|~zp7>+ zuEmCjw{#aGZ>)1$Mw@i>RNJU?m#1F6x*Y9^O6zPSz^)xcyMMukcPV)gDPfTlB6zTp zY_Tv-iZ6Jq-wia4?bM456Rkvq7VWeg^u0o;VcQmiLS2ZzIlFJd2QFW>DKL_?lUe=$ z_I@(kvB{u_+m$uO1$zT8P>8dgW2)U`(~=-ieB7bHJRz>jXxi)`9V zyE5B%T!c4699V+@HMjvVJW23BMauXyoeIeguQ+Ed%6|ye{@_JWnCvAuS_vWSJ-YeY zQ?$|pVffU~HnBkrmIGptcEKrKNN=1m045RCSVGPqx!OAzCjck-!`%{1*ZZ3_u6KsP zyz&tfBvyveJBs+eslgg1%>h{1^>B$KjkUneu+@t7Ct~zu01Lo`JReP+>r|;6L6Fc6K%!5cnuUB4YCYDC}-n9vQU5w+leoQMp?<;nSIv> z)M8Gij1^7R#gDV&TWt)7qskM*!&LNQUh=&FoF-_lc@zAf3|lp9N>c5h&idt`zJ4C!mzqAI06Fz z!%%>N52$fhRG~PIiX?p*szVAnbE=vxTlOEK8avh^zKK#KUi3bJ;cQEiWhLyD7?1t`|Rc%)KNh zt^_}BEd)mHvvPPj-HV{$m=>nb3IEp7HE4O1{YZIb-m^UP@9zSHxJq zxC9hcP7yO@;_-1YlgP2mEM8(@e4_U#eUDlrX}6a#mqm}fg2+sCsnTieaP6~} zL`RA`bZqSWDl3_U=#JG`bF4Ev(nLrV`$tDvUaggcvbYi(N(4KDM=Y;1=vf7y`s z`&?dBdYMqd8PkzI!S_9F;PlbNvCwOA^a({AmYL-fT7d||!fWEbD5;=d;j;Uq><^tC zw#EkgoeCUvP?N|=L{N&0E+8e>EY9eLYL^YF^|F9wZ*Oj~b-mfIA0A5xYgpggCB8F2 zoT@F?r|>qsZ&P;q<*KK?H5hu1e-GiGwV&V0&z&-jY1B(w-yG3{5>+dTXz5oN`nvP#UXU#U^`2mhSmlCGGM+1BF^${- z<*u7YOJC`Hvc)gUn}18lg0^cXPAnN-IB0Mwq&KGe3DTDZYvDgJoE4#!*reVxZHU{J&SL_-s)iKp1c6A5#@e;6R<6o&1Y1Gu8ralu1eIOR(rKW$GC(o{tm!$4hl4TZ7*pcg{Sy5hp{28 z)S>PPpu8 z`-7riw;Gu)Hw-Ou9xpm96;#e*gff%2j-XqbCTq7L7l%&ScPaYZsC ze6rYYZ7hoRXo1LdEU^s1RDgn-Q|H6YVSIQjEyFxdH@1IGZXQ-$4#rJe2vtoT1|;be*=eG7e>;;yUo2>Imi)@`NL*qaR}&3-E}iFEO*O zhDM+-1+b*YEz#`v^tYp<)eTs~p-X{>Zdqb-A0e(S^Y4}!ds)&pbpM}&D*h5uAitJRDV|W%(@7g%{savV3;p(fvJp7^AqR8t^e>BMVlaYDcL+r4=cnHE1?Vd zG#)|A*%W^410+4rx{5AD7r?HVE+OS!QAwEA@Thnv*nG9Pw*bbSRZzvB(bh`Vf57X^ z;cMe=$Qpa=YPzSeD0h1{tCVPM zd6AS!CH-2gaI7S^6}?d;BJRiXeeK;w4gsq}!K(coRkny0mE(OdfAVl|27ia_M0DrC zMjEzYkYQPU{OA1hj*OBt>IxUcf1K&k$n}H>6edpM?c#s_ZlwZ{{fvJxVDR0{#=ch{ z=g``=QL)I&f7QMwFcK_9S`p?w;NGJCZYC&W5FT?k%rhn`T*a=qaLxCh4qBc5^#YgC+UAz z2!+~axV$$4swMIh%zlU?1&=v8LO#XBaj=^8YN$lL%wK0@ft%%FW&zNC(FbvTsMVte z)|92A2g*+IEVk^<8-bfdtsoXp!7I5Kko!G7 zE@Kb!G7U(UDZkyLe>ftCSqGCrLPGqBN(;h>E^cI-e0|9>z=0S|?oeRg!ex(7^~H)z z|JwpzE$|2%MQJ+VN<^sUAf4^8&&7@aY%9g{+YXNT% zar=bt!0=vpe`bDB;ovCOVLV^2SML@=U_ucv@yN`_#QJ;mN<)mY3K?zfT5PwT85ti7 zYDuSnt65S8+R7d(s593V4mP=-GrMIknswF+aWBW1PrzC!! zWS*3h-y*Z%p@PnTxvgve4+@x2c`=IP!8i^y#0)-<)*@&s(N|}@F91}nK=^9Jc=wD= zVp{sDNHsDnawZY96CXDqe7Qzlk$q zl1=IKTOxC2DUiOIjcs8^ubt5J!%_uxh|t3N1Wnt&G9FJLwdc5xx@k;R(3jD)st|QJ z*-3-*mETu5>HH4gu)7Adw8_W{IgtBQ*J_!^3>NN(2(x_CwD+uuI8-P!lePOFXQiP^?E2I@zH~##M~3qG8|jQu{o_}ry?THa5O33eT7EL&P_ zG@F0`|4(i=a+HQ!A`y(*lb{HI3{}+3e|%{B>K8d#j3P7SHX$-$K99_{owYiMk1Miy zSL+Iy+VH+5aEg0TXKg<7$Ldmgdr!@Go^p{o-{&ZXFh7KdOv(K0lh1>=rR-w5g+whP zU*3Ju!}FI3UYFik&!6vXTdq}Q;fKdze4WVcoc0UZD_)~V$bYcfXy+vjz|3U&f6gMv zH%VybDp-dg72azak!FH10}PYOX!y8*hxfv_B3ytn9K+<1;&n>L#}>-GL4a+wkP3;Tc-lU`dZ*VmPTK#+cy}<59I8ew@VQ-{T#E z*G`Djk%#TWCG*wS#if#4C<;L{o;~2$0yopUp3ufISUK0!4J(hD5SF|>Crog+gEY?-l0YJHsY+g>itn$Wb$AkT zC`ZcnT}n92J6>NKMNR#|6APq9-+x~U+Z*oizSG75rm}~&!tq=#DJh5_!z)m-UQMiL zzZ`@s$)l~ZF{6gk@|#6f80Y_j$IuCp+Rf}Y1mJ1%$TPX-AiW4VA6piT12_#pD;tp{ z@sI~K;@KP?%i$6kHb2|$p%d<${IUC*oYkj}{alTNaN{(-S5R-85B$tq=x7q-R_>eBKq|zp;5I6$&k%(CxUf1NfJ)KVGjB`&Av^81!=` z$?NkwAjm8)9ud~Vgbl%rME*au=}s42La$4>|E zd0E~qJ6ZE9*(w|+4YxDg#($7wUM`!o4=*!OiP#Q*HYO=e&AR^Mfcyq*x!$JFD z8CkLwEKbV-7H7fF##|3!!6!^L>sIPmKSSDRp=mcbsz88L+?SzOONUwT^s-4_3%}f; zI(AJ65*ms$<@>r)Mj}P{68)B#_8BWqNuXNQ4Byn$YZe<1{X&LG?T2jpTc?{`7A87XSR6@6Z!I;>wtoJzd_l(sGY%(b+-G$!;~W&%`iqmTDt zHO$;nsv^)RsZK=`DSwy_9gWhmay^_0$K~A(2qNh_VzO}7?E@+^-RN2UM{4E^ z9xjB~Q`B=nqs6{b(JJ$nPbQ*;gZWe1!ZBYUSzSsk;+2p!Xi=kL*S+k64Z>KdNd&6O zF=Y|5x%{V(uUEOM`Hd~3&6Gsny z(+u4OQKzbChPsd5LjoYvIk^6uL6_;p_cVxD|5IZ@+)s#GXa70vVGdB2CvW;5XFpfZ{)X-v_}=lKBL~=Xkbti7EqBKK_3gYHSTKo>5wKC< z9v(Iw3zN~8ED^fUrkvePw}pUB0s3%AP4c9(V|D5cN{e@okq_JZp?wqRPw#JF{Lfd_ zA)fFxQ@S%rx&u>s6x@ZsX@8lMhU9%F0SQD#cR(SbNJ;E* zbA+WKg1u{blu)_&xg4AhIn%w0@x0$UWrT2&|K18hIFSx=seM&GdVRv>Z_r+2So`3k zM@G&|rJg`WQ58>Hoqbu(9i6pF=?tsIjeHjQ!#7X6_gmW!kHxcD@MoThY~UFy)XInm z7eYNAynnzmBa);>?p!)53j#1vNw9g``$c*Fr_+lei3f)QL^Z~&BGKfMGpuMCa; z&LNQU{x)Fh&vO-K5IDO`=4{kNY61fQ z!%%>N4#-at{srj?zWQ1Y&3-Kk+*~C9`2^||%$ipLnH^ng#P6>JKDw+NM}K?N;5Iu* zwyZ6$WQaQtFoB4tK%VWXQOnUAWqcN$+`yBxDfgbCWWd~{&ZHXGZ)_N)Th~o9EnGF93!m8ne#PHcj5YA z0)4Q@mo4uj6@o`;0K9wyz+^HRIP=ZNfBfF5)jBhHI0Nm*4QcMTcKr9{VjzcDV=k{NZhU%zfjvN;f3HFB zi1~0_uN>MMZgIhV40)Yt0^X~^+`;|*80&S12iLhN?|yDXY3ydqIH7<{v=9<|+P;}* z<6=VPELOU40-KFWvqg9jtX$?FlsukuCP+~(x| zQIzd}iBgd?hBl6I3USNp(_&(yMf7%maocFx? z)-8B+UwOmw!~+`H7f8?a6EqjZuzS5&O5Hs6RBO`0kjw&5v|m=-xGRJ?+i?;M(=#OA~ zxe2xw*5bP`0M+2|@+WX<-IBzHWxxq>z-tOCRVutBq1W!;W=~1ndA#bhfj5Ntwwdvo z=`4g23cGlU2V38k$tyDXji@C_>igeMllVDOx(|$s@0|P+8e4STe?nF}dBzd!gt83) zH22>Jp3mzf%X`ikAe8-PC~r`SDsl1|g}CtWjV4)I?0yfseiGiX3) z0Kjo7^MyYtQ$sW3rTd|Ml(%)M#J0m4i5}r~JF*zFp)_(C6P#!9A|oBctD~T?+O;H9 z5&^2lv+wWru*2}Re*uRVR}pS)BQIA6-Z`${0gSRzS&AEO@z2hIO%$m*%X!#&Z>og_Wj_g$)0$5QZ zcr&ZtTKN%f6gK|KZ)kZknzbCpQjSfa66b$RKmAgWAH)BDZfg^0}&n7-VLILlv)bM zl1@ZNT#_Us6J+^S9xWfB%&D zh3=57%$2LV@!RiV6FI5lMETI{F~-IxC`Jpgc7R!Wx+{&^yW3rW}svf#WWtRUcLJSX+4^31Mp2_V`N@DwTPRZOG`o5xPA6>}Jd^r6LTMIQjSaKSG%O$T1=`iPzr&+- zy`-jUP&Zg&7}Bgj4PY4nbTux<3@Evyw)ZNK(hQEK{IR`vgC|3RPb6mZd#1j^0!;;s zf9}=h!yYU+#h&y}8%j9Z=xg#&{y175hGEBA>-aGNi#xMw+6!&x8qD*3##Gn0*9a5{ zKMyPixtX{DA_898xBR*{1{g ziLbN8y2*$8UA$LWLzjpZ9xM9uwK66twAq{!mIbvaG&+?T6jwrYtriCq3_GQZd@Zm2%2(71~OKTt_I z&arklI~(@CDeIuZKKJ?Qklv_Ye??ET?7G>=@~lF`(Qu33k+lRBtNk+NjmwNH?1|lQ zJ{}Wuv>k+C8`dXRZD}6!Y*WSZv`CT_)B0OF^a|CTNt-;Bt#q($FmYiLAKe}LLzx<`+< z1y)@u27|V)I0fda=>wFoOY7-XBmn>(5<+zaem|t;8PvhIJ27ei9!d-0BcJ_KJY4q2 zvc<;rYI?b%!a!rFAXIvRkzt#7eL?_+CY*asrs7K%I~U~jP`C{FRU47FKY@fl<+;G( zsVQ)~aqhN!fmA;8cK)ljf6|VjvB^-8`oLZkLUD8R`{6>eJP0u;X>M>!m|D``MWjz$ zcSzXnGZ!e(NK%SmB2zrP28|z`=rKM`7=6@A@`KSfSvSU0vHYeOEXY7`bz3YktL;ZRwAa*A$V407q*3f%8_$VJ(Fi_xt2z+ld5g77U5$SnM$m5Olf4>u5F0&(Wj%xxP?W?$0PD_my>2@v={DGOpYpULNPv7C)e&tAjn%% za2uA{j2^fL&$TB-e-g*a-k`6C))jeOk+1r4t|_MmL<;2In2>uHjYgHT$s`n7O)t{7*-ar%Y^QA%YVL* zt2#dE-A*~S68e3`r$7-JKi(O2|0>EQwU`0?vK(QlUW*ME{UK}c%(<{O6`n8w_)#z} zvisqG@fmzZZ*#&vip;hNI!E;XlBL-gSSf)Gnhi=wL0;Q0jU{e1<#21ATmPm3ST>UY zdFVpLTxcJAe>{uPbYk{SlDYY1?ym}rgE0^(Lo@zbA(YJzkJjFhW{poB<7N^AdS`S) z{O#mtHbA&avQ3PNR%k=z$G;gHzxFLPoz**1xZ8=2Q!cIr@aagexLrBNaK(vUH00C6e-A2l?90mcmFK|+kVjH1(g^(Z-CN@* z_<%JkO$MKEb#-EP!ySEWZIk>%vdd`uD#jp^p;vFxBG=X5NOaWKM8p^C<-gbQn@I^S z+5O9oW9cqI3~y=)04WGa`Q(GL0vFP|nC++VF*H+GZ$qWF5~-7^{6^L9OqmW{D|F(F ze=ezyt%n~j9AvbIud}Rf4(CkD^?Ou&E5(8U0Y@oka{7DCjow}bUOQcpi$g|nq7!?X zz59i?DuBdJowQVI#2*kwNc|P_UX!Zo+U5kGTxZAn!6lY`#!TYB3At-$|G;0b9}AqA zk~+S`bXv>8cBQbRf_!gsI*C8V2q3@Me_eG2l-nIeUD8`|V6KlQq5;mx6FxB{7m^W& zflNasOWb;$xUNbCqy^)|^zLi}1Wf35IieqOh@k)8W*{<{j>il$RY+Zjf^kp6J~H1X zh1^W^%((62`pn* -----BEGIN PRIVATE KEY----- -MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQCZGnlh8nN6yPRd -Zz+YwycHlHl45boFNRIBIX3VKqLqTWiNyrKej0rMD4RPoivv5hDEW2jN2Decm3hS -L3pg6kYtqZgu/zphG30prEm3pdEKzbiKprBp2JqE8hDPYk1Lyi8FdnPp/+fzpzGT -i3QeTYgTM3SvZjWeP5Zk467ZH7pFAAaA8rQKyZqQ0OJXIO/sOPU1zcTSy3QCG01u -lLyUXXRSLz5RpPppkf4rwH7TBxO17fTdnjy/futKhCIXFqtam4U7WdQs7+ZtortR -GtDHh7TOAfd8AlxBwHy9u8MSazXqcF8IN1w9qMGxhFA4ydiEM02sTidnIZ4lJsgL -AtP8oft9AgMBAAECggEALtNWBIrunsMPWfHWFZa6PSs/66X3Oth8ZTQlFCkyIo8C -RzuTXcNdkQO9580luv2Waze52hsjBxbVue0jdLiyNg0EqnsNE94gbbpv4WcphDBf -HKjWk8jXmYmfco4SLffsYbNUyGCoRHECTKn+HbaAw76dFXghNgEksj6gn2+AvNFH -Sbi89/PxmpmYfR+hBBK9HNeAQSvPGnacLzTdj2YaTzDMBLbZAJh6/LrgFA+9RSmH -R8oxH0xCWdwVmZoo54HU9lTuDgRQHaPJSGPcBLXE3Y8tJ4G9mEiggftD9bJ5I4Mg -qQTHM5A6PASNf+HaAFYCe6HETj++xYy9MvP65S7dgQKBgQDdzc669nczlqud5lDB -+cDBLf9BULhmM7Nf+orMqHoJCeq3o8d/dpbBEzkxVP5ABienFWlGwZz0C6aSxXQp -Hkf7U+6ueKznEf0hpPrwZus39GhAHBuFgdKmRFb6uCPL9lx7MKubYWJb3/TUikiv -qPDRWnRMbTkyDcZW8bCgh6XK9QKBgQCwtS8GTWAF07zoMVxjPD5BN2maB3aew42y -1SSYWpl5NnMTtnZdEevq7nWqyrgkfuYtRgRQWL/4szZBPEiC7flc8d4J0uJQABlg -6WpBO3Kgd3XrmlwsS60mmOrp9LyfrBeD2LPatNe4EQbbAW2RqQpa/VlR21tbN0L6 -7+zR0E6paQKBgH1nB9PC10AulpbuiYgyKZ3O4LtP5QG7h1XjdCgjtON5XOA40+kn -5jIBKVvP3vPZxv97ZosfmhqMn7/prTQ2L6JUIOU5yx/VltU3zryuo5x+LZbZjWHd -NXjVuIuGIo8FmeH4cX2nAJJLO8QS7ueJz6W9y3UOZ8D58sJjYWZRaxYlAoGAbpo5 -QLyVaZBKIRskNIi0fqVsV5hsSpsjyddW/HVYsmG+TYxbMY3SGE4BIFGaSF2VPKki -chfasJObVeGhkTHabq6Ex6lTNbeaKupuMz4+VOnwyPLo1mDXk90KzDz/AwH4BfJR -QIcIrpEZtWKDbjRb4u/IRFAEMme4aNBbbkfvtGECgYAS21WDzs+o8rEj0nl+Q8B9 -jTAo6WRhMilo7U0+anAHtgd272fMWzSpCMYLx2PJVieXSdVpSuDMQ2xMAaqlISCz -UurJ1288vAm43Ky0u7AEHixs53ScoAgSevm2yTh5PznALJA0eVejS+Lo8Qm/v1dr -bKP6XMy7uJxk4QLczo9A7Q== ------END PRIVATE KEY----- +MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQC+PKQOneEPtQIt +4G8yeqrAhFGXUkFDID5bnAb7mk5ALX5B8bWYQa7hER6xQpP+a7CdPLDm+PLTGkGP +T0S7HpcOYli3qtED0zkk8yaCL8ztk3oyLuV97u8x4A+rOXoO2nmrG9ck8/XZN0kt +u8Q87l0EaSMsCwuRJ+A/vFeKIEijzfjhBPjn7smYUpN0LprrM+o//OHPsQEXsRHO +pjIM7KC8a+luRxAlrxotHO0lWEA05pNHya5fqkhdYQ1MgR0cb8zTxBB+DAfmHCgz +w4rf4kSd11LJbk5CITeSd98xV28TanaDli8BHfDbk3TMiASv3LJyq5UX/1yD1CG4 +1UH6vpoRAgMBAAECggEAAacCsMrPxeRnWrEonhphKc9sawFQpk3dJMwP5ncSZ23N +uzJnhqVJaNSOfPEsWmkijVcV3Ue7yjgf6igA25Q6MSqLBTtjWeJnjGndQ4O5RrYB +eXadUTD2XGtLD4xuAjuFE4aoIX7J+6NGjDJlk7bpUWy9XLhS1yWuxbbz1rQNlXik +a82FOoQiOxjMCBhgRO+zU1x3Cqz5Keb1UWekMUodXgVBx47P4ziYLV3+E0mkyz/D +2uJWawnmn0nL3RdyQd6WBEvRT7o1FzZy45zCaMFn0C9NgzUqmSpvKpp4iQU54ptq +nTQl7+O56QSrt95zEKS+7sjH3sX3rix/GagWj5Z57QKBgQD6SinskXjpd+VdrGAs +TLxu3P2t524XeOsQV9t9kBlW9jQU0tRgEu81z9UGXFPqiERpFRlyoYlvxOJNgAIJ +IOZzA5Vu66cQJZWZOapMmrzHdxO0SCgk3fUyyhe6W/3C7DPHJTFfoVJFY/ZhhZ5w +ZclIupKTszeZj7t786MDCuteLQKBgQDCk7vkLywfqFcdxOy8gQYmBo/xLH+yP7dn +RgQcvXIxF3K4eI3OwFj0Aly6Bmq4b1VUSqlaCqlDF80LLSh2qlIzFA0UOpRFBsaY +19p/lZ3BsTlbCwf2picltRaqZw19AhbErRab3WrYqoHfp4aPMDCcL6AwBvmzX/K/ +j17lBvf99QKBgQCf8TTJUE0MJOoV6kmrBX6E+gPCVdosdcEBOKOyoZsPz1WI2RGO +M4tZv+5Jmkal4V6WKD2S21eQbSiQjfS/EJ8zcF7V+xFPaDUpLYh+W4O3k4ir9FBy +/sPqKOrw1Ehdf8O2xzW9/sEsRqzztQeCnAj8yP1SFXy6TPdqRk8tapTuIQKBgFYp +j3FrRjG6nOEs29xZkjxyeXlFyEJJntCXm6iSZ6e/h2iS0dD1Mi7TgPZLcyS7AGE0 +MqwRvoRcXMsPMzThFUdTILuNeSzb5EO4iiQnP9WOwiRDzUH2r60t9Jx+x+VMcIKl +VzasJO1PC/XbPGXZ5By1pky+OgKpgVg8h7wJivWlAoGBAJ4aOb2iXoNDSchKjXEA +u4odkRpCu7+QLMR053ixLFr25zOOy92SU6F/A+PsYvl/YmjCXqv3CQ3HMUtEWN8N +fQegX9wPz8zoaz20nk6blXHaa93xNHQhTVmgfGYDMLt3xXXy1Obkpd+DoSByJfXz +soIMoVWCKJKYXtyXCDL736ld +-----END PRIVATE KEY----- \ No newline at end of file diff --git a/src/test/resources/ssl/reload/node-wrong.crt.pem b/src/test/resources/ssl/reload/node-wrong.crt.pem index 44e66e8a27..5885c5ac97 100644 --- a/src/test/resources/ssl/reload/node-wrong.crt.pem +++ b/src/test/resources/ssl/reload/node-wrong.crt.pem @@ -1,88 +1,56 @@ -Bag Attributes - friendlyName: node-2 - localKeyID: 54 69 6D 65 20 31 35 38 32 30 33 35 31 30 30 33 32 31 -subject=/C=DE/L=Test/O=Test/OU=SSL/CN=node-2.example.com -issuer=/DC=com/DC=example/O=Example Com Inc./OU=Example Com Inc. Signing CA/CN=Example Com Inc. Signing CA -----BEGIN CERTIFICATE----- -MIIEgjCCA2qgAwIBAgIBDjANBgkqhkiG9w0BAQsFADCBlTETMBEGCgmSJomT8ixk -ARkWA2NvbTEXMBUGCgmSJomT8ixkARkWB2V4YW1wbGUxGTAXBgNVBAoMEEV4YW1w -bGUgQ29tIEluYy4xJDAiBgNVBAsMG0V4YW1wbGUgQ29tIEluYy4gU2lnbmluZyBD -QTEkMCIGA1UEAwwbRXhhbXBsZSBDb20gSW5jLiBTaWduaW5nIENBMB4XDTIwMDIx -ODE0MTEzNVoXDTIyMDIxNzE0MTEzNVowVjELMAkGA1UEBhMCREUxDTALBgNVBAcT -BFRlc3QxDTALBgNVBAoTBFRlc3QxDDAKBgNVBAsTA1NTTDEbMBkGA1UEAxMSbm9k -ZS0yLmV4YW1wbGUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA -l8MWBl4aZeIvj77NCuk2p+78bO0smjYMnI0bqenDBkGFxtrihMhLfx8U+uvvmXCb -rVt6A+4lYzUm3Am2r8eWTFzdH1y8rtO4lO3ZNKaEG2quyVZKH7kJ1xtf1JMJufny -vgSmJshbNO0ttZShpLoRXahwPsubXH3vMQZai7L8GbDniof5XstFuuYyxTk9LUo+ -K7hvNEigdeCTlewyG+5bgK8KrKURSuM2pMqMu48KrDhds6bm3WVzU3ffZTKpqJS3 -Uf+J5p+OANlmr56A/qvL3BNEAmQQONLSybSDw8whRftkLVxWU7NO9GvJXW16KS7D -ATI7W/ZFpy3glhF3/8R44QIDAQABo4IBGTCCARUwDgYDVR0PAQH/BAQDAgWgMAkG -A1UdEwQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQW -BBT78rBqCUlOxWW9JNpxXZB/1ymaWDAfBgNVHSMEGDAWgBSZLwYV91hrMtmbl+N4 -EBcBgyBlsTBiBgNVHR8EWzBZMFegVaBThlFodHRwczovL3Jhdy5naXRodWJ1c2Vy -Y29udGVudC5jb20vZmxvcmFndW5uY29tL3VuaXR0ZXN0LWFzc2V0cy9tYXN0ZXIv -cmV2b2tlZC5jcmwwNQYDVR0RBC4wLIISbm9kZS0yLmV4YW1wbGUuY29tgglsb2Nh -bGhvc3SHBH8AAAGIBSoDBAUFMA0GCSqGSIb3DQEBCwUAA4IBAQCa5HufqaetkA5I -xqgYiYjgnlmXw1Xs15frpjZJalZtRd0k3UXgXLhvH5gJEraanI3kWDTA+cbhTson -W27kqpAo8X2EXn+Kxi+duNIqLWusG8m7t6OmlRB9Xs5ABEVXsdNTbrk6ocbrD2xj -A4eRioAk86N1FR0rg/1cdk8GSuK76701xEFDRjsuJKto331O35CP4G5O3bc59ru0 -3LXxxDgdvvsvjMEG+Bm7VnB8/sKGpKDaBny+iVQkVmv5HI2mWnnW8nk+fHLvT5rQ -p/SAbi21I7HBc/BX42A5GrZniRWq+AkQUF80N4nwIVSm1PUWgDLX7tcFDX8ez6my -hyR1zDxh +MIIE5DCCA8ygAwIBAgIGAXjDaPfLMA0GCSqGSIb3DQEBCwUAMIGVMRMwEQYKCZIm +iZPyLGQBGRYDY29tMRcwFQYKCZImiZPyLGQBGRYHZXhhbXBsZTEZMBcGA1UECgwQ +RXhhbXBsZSBDb20gSW5jLjEkMCIGA1UECwwbRXhhbXBsZSBDb20gSW5jLiBTaWdu +aW5nIENBMSQwIgYDVQQDDBtFeGFtcGxlIENvbSBJbmMuIFNpZ25pbmcgQ0EwHhcN +MjEwNDEyMDAwOTAyWhcNMjMwNDEyMDAwOTAyWjBWMQswCQYDVQQGEwJERTENMAsG +A1UEBwwEVGVzdDENMAsGA1UECgwEVGVzdDEMMAoGA1UECwwDU1NMMRswGQYDVQQD +DBJub2RlLTIuZXhhbXBsZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK +AoIBAQCdtnQNK63dqK46DDuiww+wjXISHGDM143iE4UgrpnC5DtqmljwQPCKq4Em +QyLQdjNA37LDobINOtcDr9CQwthMMJeopbSFf1Qk97E4Z8DM9PF5AuNAQBoAkFsk +eq2JSLNuCE4lw8RSFjdO+5aCv2kIvcTtP8xiG2k6M98kLYRPES9nBzfiCa1TrDyV +HVIrcdF3bGLyXxUL/Bbbk2lwl5MDQ5FsM5CDAWJUMhKc9ijbyVUqACeebCBWPweF +iLCHVksXT6B1HNl/mLPNIc0HbpCkJ+gASWZTQ7vbOidxR3eJJZs5zmNBbDuwSjYO +pn1D/rAmzwb/YiLIvwFa602ZUgVlAgMBAAGjggF2MIIBcjCBvAYDVR0jBIG0MIGx +gBTS02Hh6adcYFVpsHSBAGZYMvoGRKGBlaSBkjCBjzETMBEGCgmSJomT8ixkARkW +A2NvbTEXMBUGCgmSJomT8ixkARkWB2V4YW1wbGUxGTAXBgNVBAoMEEV4YW1wbGUg +Q29tIEluYy4xITAfBgNVBAsMGEV4YW1wbGUgQ29tIEluYy4gUm9vdCBDQTEhMB8G +A1UEAwwYRXhhbXBsZSBDb20gSW5jLiBSb290IENBggECMB0GA1UdDgQWBBT4Fkad +SpmiN20n0xcPgz0apTcDQjAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwIF4DAg +BgNVHSUBAf8EFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwUgYDVR0RBEswSYgFKgME +BQWgGwYDVQQDoBQMEm5vZGUtMi5leGFtcGxlLmNvbYISbm9kZS0yLmV4YW1wbGUu +Y29tgglsb2NhbGhvc3SHBH8AAAEwDQYJKoZIhvcNAQELBQADggEBABkamc5q63pY +oRKgB4HjUttPSC7iWnLSa6bticyyfF34QO5fLpuRKv99u7GGTUDXtcoQ1ZYUHkhM +6G3E2OWgwAPs9Ag/HjFmR63I1JA0fsPOjMEP9ySHdO4eyCDwjAQLCnJ3XceOVSLW +pqhIKM1696Gc4CtrvZ/5RMe+7VozQ0rm7rkviDhYvsy7LbSmXwKcvFMHohOxvnJE +IWHq/uSzE4CVnS8Go7OOciQq4QY69GNVY5U5XiM9SbscPy+Lx/ayUst/xWPwIgPV +/4gC2UpKn/KhG3Llr8C+4LzehPRC4MSbq52aC3QsGCpm+oJU5ULscl+Apwj3ByhL +YjHbo/j+hxE= -----END CERTIFICATE----- -Bag Attributes - friendlyName: CN=Example Com Inc. Signing CA,OU=Example Com Inc. Signing CA,O=Example Com Inc.,DC=example,DC=com -subject=/DC=com/DC=example/O=Example Com Inc./OU=Example Com Inc. Signing CA/CN=Example Com Inc. Signing CA -issuer=/DC=com/DC=example/O=Example Com Inc./OU=Example Com Inc. Root CA/CN=Example Com Inc. Root CA -----BEGIN CERTIFICATE----- -MIIEBzCCAu+gAwIBAgIBAjANBgkqhkiG9w0BAQsFADCBjzETMBEGCgmSJomT8ixk +MIIEqTCCA5GgAwIBAgIBAjANBgkqhkiG9w0BAQsFADCBjzETMBEGCgmSJomT8ixk ARkWA2NvbTEXMBUGCgmSJomT8ixkARkWB2V4YW1wbGUxGTAXBgNVBAoMEEV4YW1w bGUgQ29tIEluYy4xITAfBgNVBAsMGEV4YW1wbGUgQ29tIEluYy4gUm9vdCBDQTEh -MB8GA1UEAwwYRXhhbXBsZSBDb20gSW5jLiBSb290IENBMB4XDTIwMDIxNzE2MTkx -NloXDTMwMDIxNjE2MTkxNlowgZUxEzARBgoJkiaJk/IsZAEZFgNjb20xFzAVBgoJ +MB8GA1UEAwwYRXhhbXBsZSBDb20gSW5jLiBSb290IENBMB4XDTIxMDQxMjAwMDUx +M1oXDTMxMDQxMDAwMDUxM1owgZUxEzARBgoJkiaJk/IsZAEZFgNjb20xFzAVBgoJ kiaJk/IsZAEZFgdleGFtcGxlMRkwFwYDVQQKDBBFeGFtcGxlIENvbSBJbmMuMSQw IgYDVQQLDBtFeGFtcGxlIENvbSBJbmMuIFNpZ25pbmcgQ0ExJDAiBgNVBAMMG0V4 YW1wbGUgQ29tIEluYy4gU2lnbmluZyBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP -ADCCAQoCggEBAKysgDiVedG/2qsMMGtbOV3mkfA1JuunLiO/bNMF41ukjIQoIl11 -3MKAhkSpuOcDAFXsFc94Ih80MWVn9xUN4Hviv42j2zOJNmbSfhH73GfUD7npC/9J -QdBaWKQmIWBYbbbJb/B/brmleymeEhckKB/xrqeefG6nMWsiY4CBiyMv5UfbKBi8 -5hcWSxy+e6gSQnKeIimYufaWZJuiJ3BfANhpidjHDBlkXog8eb/79Yg7UAWcqJV4 -cpgQK48SV/DEPbnFAfGBTQSsLMdgkESrbfQz2jXPws4b9AvnNp3B+sseKW09iMFm -848W64ywKxdsQMTC4NgmO28flb+mFwvcRCkCAwEAAaNmMGQwDgYDVR0PAQH/BAQD -AgEGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFJkvBhX3WGsy2ZuX43gQ -FwGDIGWxMB8GA1UdIwQYMBaAFHFUgwb+I9oQZhURLekxk/ZxEdwhMA0GCSqGSIb3 -DQEBCwUAA4IBAQCHZNLLExdn7pWFCg6TRPUmEj8i7vkWKoojRZsiA4QtM5flaaxT -ysj1+Kv53+YsWugBJyAiPQzI91TQpa11SPSV1rQM2ovhnML9ErjrlKF5avKTkFFp -G/lbTuHzS43dcXemrvKPUWTFqqFubyhDP0dOcfzX2cHu1g/6U03TgoyTGX2M5Gtm -nj1FVu/yEdKUJpDStJ8jnbTMx2gH8BnQwB51dYAjwhazjBDTC1Vl4ixKicKvfVym -w2+Ja004DRjPoiq5pk5HGKfGR7j6igmX/AH/10RxvMhdx7LNFIrRbi/jrFr5xvxE -f2YF9cpqI0hhws6Gz1/Lb9eCk9Lve5kqsf4D ------END CERTIFICATE----- -Bag Attributes - friendlyName: CN=Example Com Inc. Root CA,OU=Example Com Inc. Root CA,O=Example Com Inc.,DC=example,DC=com -subject=/DC=com/DC=example/O=Example Com Inc./OU=Example Com Inc. Root CA/CN=Example Com Inc. Root CA -issuer=/DC=com/DC=example/O=Example Com Inc./OU=Example Com Inc. Root CA/CN=Example Com Inc. Root CA ------BEGIN CERTIFICATE----- -MIID/jCCAuagAwIBAgIBATANBgkqhkiG9w0BAQsFADCBjzETMBEGCgmSJomT8ixk -ARkWA2NvbTEXMBUGCgmSJomT8ixkARkWB2V4YW1wbGUxGTAXBgNVBAoMEEV4YW1w -bGUgQ29tIEluYy4xITAfBgNVBAsMGEV4YW1wbGUgQ29tIEluYy4gUm9vdCBDQTEh -MB8GA1UEAwwYRXhhbXBsZSBDb20gSW5jLiBSb290IENBMB4XDTIwMDIxNzE2MTkx -NloXDTMwMDIxNjE2MTkxNlowgY8xEzARBgoJkiaJk/IsZAEZFgNjb20xFzAVBgoJ -kiaJk/IsZAEZFgdleGFtcGxlMRkwFwYDVQQKDBBFeGFtcGxlIENvbSBJbmMuMSEw -HwYDVQQLDBhFeGFtcGxlIENvbSBJbmMuIFJvb3QgQ0ExITAfBgNVBAMMGEV4YW1w -bGUgQ29tIEluYy4gUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC -ggEBAPum2jjujLRNoeqh4hQTUCUhdG3maOUJNjNJOzd284Cv1A6dJICotspw4Ddr -ls7GjrWaMmsWmFq0y0qz9YCQlcUxxgSEDZDdj2n5JKMI8LAERq5dwBoNaRcJ3zm+ -Kosv3qhGwspZqviJq2gBHi71+p5VT6esbLBnBcOTUGoJPzVZ/cEleBtJ/scuw7nl -bq1v2LQELD5h7wRh6HvWpWa98F3A5dHMPj/8E8LlWbSM6ojWVf/nsusK4yORUaTJ -bY3aTe6mxq5S0pnGtWh3dRkm+NUdzdaEYdnYcvgAvqF9T7/Ns4OLsRpjnuTA/Xoc -Ni5tcM9ylPIxJqbkvWgLUtdZiCsCAwEAAaNjMGEwDgYDVR0PAQH/BAQDAgEGMA8G -A1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFHFUgwb+I9oQZhURLekxk/ZxEdwhMB8G -A1UdIwQYMBaAFHFUgwb+I9oQZhURLekxk/ZxEdwhMA0GCSqGSIb3DQEBCwUAA4IB -AQAWWt992NJ10ddp2M1J3geb3xYCJF2t2VQzqBO58hHeJxLiqEmuM0VUFssvQJ9n -9i+3PIrMq0mcH068WaIINzkoiqaoBtzllCHkPpkrQPbpxD0UQyUcMFh2iydVbI6Z -eRZUmCeqALAmKcmQbAZyx8W56P1ukhAGhHXf2yTL69Dd1tzqSaA/j+lPuumHWHwH -5Q8Tnp8y/adn1tqv/2pEjpG0L3lXz13C3QB0OId/OUgLeh0Op6QNda9RX3cG3Cl4 -AtVft1pnOzhalB8v4iSeN6qmoqCf+YJd1R24AitIiG8+e147FEkbzPq0kJj0j3PN -SEPDSy6hmI2NJhwedsdbSJtg ------END CERTIFICATE----- +ADCCAQoCggEBAJjVJ9Ipq0uCE7EE0RRBadkrIm7J8OGa2xeFCEpsw+hqQbmftrm0 +V5XFpRKznv7r9JxFQn4uUM/Tqxt/mZ9Qql6IGWiNeK4e0Hfh+Lc/VD+w+mDqxo52 +zv0afYyyM/1NiOyKV7hO0Akwj25zAfnqs2FbsZzVXtRpgOnfOdfKpUL6fKAxwjex ++0nOOaS5D+unS64sh0mTMVD32iag+tg6aiiW914Jmrkd4yDV3uoXh/FKafRRWHSq +pwO7Xilb+fLRMiQ1N09mTE8Um12G7mVdBaZpbluwtv2tiS52n8zzpKYbohS2m1ir +lJMASh6qEKzHUlzmERhq4Ib7V+p0E+gPadMCAwEAAaOCAQYwggECMBIGA1UdEwEB +/wQIMAYBAf8CAQAwgbwGA1UdIwSBtDCBsYAUrs3v6ngKiRF/4eiBW+3eCSjTVo+h +gZWkgZIwgY8xEzARBgoJkiaJk/IsZAEZFgNjb20xFzAVBgoJkiaJk/IsZAEZFgdl +eGFtcGxlMRkwFwYDVQQKDBBFeGFtcGxlIENvbSBJbmMuMSEwHwYDVQQLDBhFeGFt +cGxlIENvbSBJbmMuIFJvb3QgQ0ExITAfBgNVBAMMGEV4YW1wbGUgQ29tIEluYy4g +Um9vdCBDQYIBATAdBgNVHQ4EFgQU0tNh4emnXGBVabB0gQBmWDL6BkQwDgYDVR0P +AQH/BAQDAgGGMA0GCSqGSIb3DQEBCwUAA4IBAQAmRbuLhYdGYjdndROJilIQ4DUD +HYYijortmkq6ZNQiB7I2teBZjra2xcKp0qaOkG9nJCzhHvGTw/URjWAxFZ5n5hhx +iBTJZTGY6bk2SWfJxdd3Zld6ybsoaQTO/ZnfuTE0SgxWx1e5q/mRBKvRwF02bJu3 +YNlJMJVuIDxurrUK2CXrgG/BOCYMyiHNmn1Spsh+x+6B9u28CE0M52+HtNJwyQw6 +qPMSNiovXRkqk7E40e7ZY3MS85Pr4L0Us048SswPEpf/+IjV/zTcDP22pQfcjMOX +DZpdAOGgvqhL9t7M1lcxJrI0cIcBNWOPVa3zsCDU7CXF+riL0Va6TvoChVtT +-----END CERTIFICATE----- \ No newline at end of file diff --git a/src/test/resources/ssl/reload/node-wrong.key.pem b/src/test/resources/ssl/reload/node-wrong.key.pem index 380e67c841..ed89b07d6b 100644 --- a/src/test/resources/ssl/reload/node-wrong.key.pem +++ b/src/test/resources/ssl/reload/node-wrong.key.pem @@ -1,32 +1,28 @@ -Bag Attributes - friendlyName: node-2 - localKeyID: 54 69 6D 65 20 31 35 38 32 30 33 35 31 30 30 33 32 31 -Key Attributes: -----BEGIN PRIVATE KEY----- -MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQCXwxYGXhpl4i+P -vs0K6Tan7vxs7SyaNgycjRup6cMGQYXG2uKEyEt/HxT66++ZcJutW3oD7iVjNSbc -Cbavx5ZMXN0fXLyu07iU7dk0poQbaq7JVkofuQnXG1/Ukwm5+fK+BKYmyFs07S21 -lKGkuhFdqHA+y5tcfe8xBlqLsvwZsOeKh/ley0W65jLFOT0tSj4ruG80SKB14JOV -7DIb7luArwqspRFK4zakyoy7jwqsOF2zpubdZXNTd99lMqmolLdR/4nmn44A2Wav -noD+q8vcE0QCZBA40tLJtIPDzCFF+2QtXFZTs070a8ldbXopLsMBMjtb9kWnLeCW -EXf/xHjhAgMBAAECggEAScLS+KNSN0S5EyeMZwo0u2iHnbWk4Qr2FDztPidU17yO -9bi7Mghb0VxdCRwVZ0F5GMgGRNTBrTdPPNEnzsW2AkV8X9rmBh73bsMvt8xbFyxB -6a+b9VEtPDSc3ifdKVwXpE2EKANneRDyD3g/HF4nRJsyewLg7xJyaCSLa6zBpQY2 -oJK0asHqIkJene2eacAWyMyVesqBTJvZNCxEPvTyfFECaHkN2EsqyLYCJtVzwXXI -aEHKj4He1PLTiQWnZyS+Vb1RdgNlULC9QqslA+L+t7mQYSZzsQfJsaW/xaxci9ds -YUfv0wUsMBxaeB3gusB6LzwJT+dBWC8PoMWRUwZUhQKBgQD4zeO+BXzbo+SLJiEQ -H3bHxea43WkYPka315OrPn8z+4iDwmzE18OROcriygs5tQ5YehSTKy+L2ipyRCk+ -nVCHMEQYEpNnneNhf/bBN2Q2f87HuVgRM8eg05A2Cy3y9cWYn+jT7jQvva/+PzrO -UR4V3aJui4btcipitUjEM2P82wKBgQCcJrXK5o1w2PcmyYkXi1OXPtpuGbp5H3kV -154+ZO9jTf04Lm7+z21zcgQ++SlEgUQoVG/6hiw9uC+hKUoIFDnx9EtT9+73GswN -Rqt06g4noGb6pvGMRdFEazZJbyCR9BM8DkOwWAjlrNsZwWSQ0Z4swmz83g+dZLWh -rQRBUNHv8wKBgQD37lui8N8CFGjbTMynv2LjIk+PKnvev7hC3Nz3SVkC2QWpnuY6 -pXPp1PhbVNEo2UaJXmYAXYmMyIOByHB9R9CGVs+UWXZwS8LZVuXylpsTP/szxXt/ -8OReXFSZtjw8nzMfq0IdZoK0jEbDigi0rdrYGTsTA5EaLqkUIeh4M2nQ/wKBgQCW -XvS74s+cN2OyN2vMf4BM6tsgIaigEX3iWdRqk3qwL59E5fo/aXMmNEsAdaKW9MC0 -8bMwFtstyFwdn4xKQWgXp0CPKPg3f9e2hTKBkQ92e5IPmIqNoYJHl9McXmaIBvoq -4DWw8OYIfzAzGjiE+UeQJN8dl56D3ELI4btyRqkUnwKBgQC4BGJWl47oe3R4CV1E -4ZAQrnm3fY8OnsEVBso4myGQSom0c33QUjd6HO4wSHkO24f9b2X0aA15IgPrWlO3 -QH+d6LJBEzyVXXkLeUTUtysr1BrNpcvcJDKVXZKB1A/9DDwrXC4JLANq9WUwmOyI -Ia4gRPZ4WUugHsYiBXoDbT1JIg== ------END PRIVATE KEY----- +MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCdtnQNK63dqK46 +DDuiww+wjXISHGDM143iE4UgrpnC5DtqmljwQPCKq4EmQyLQdjNA37LDobINOtcD +r9CQwthMMJeopbSFf1Qk97E4Z8DM9PF5AuNAQBoAkFskeq2JSLNuCE4lw8RSFjdO ++5aCv2kIvcTtP8xiG2k6M98kLYRPES9nBzfiCa1TrDyVHVIrcdF3bGLyXxUL/Bbb +k2lwl5MDQ5FsM5CDAWJUMhKc9ijbyVUqACeebCBWPweFiLCHVksXT6B1HNl/mLPN +Ic0HbpCkJ+gASWZTQ7vbOidxR3eJJZs5zmNBbDuwSjYOpn1D/rAmzwb/YiLIvwFa +602ZUgVlAgMBAAECggEAJ4yR9J2P96ZtrnPT3qCAxjrqMJ16LtQdKeTQPR5bw7I9 +LiHvjKwURgn1FJXAXLtPZgTSzNk3D7dCJRQJPswFtrF2zp1jNBj2jmCoyebGw/7m +sPxm5X1Np/eLS44SB3u6Ny0Q/8pkaFtW2lEf8MC0Q7Nm90HI7I9IJ4bLfcSGSdc2 +H4i4m0bM5XEiRvhiaD7V/wE9MFwCCt+Lwv8gN0ii2fI7b8EY1YfVpmbj9fp+8fOP +yHMuWeiHxbrjGDwFCZwDBD4IyJzuKfX8eHnIjZei6lAiE9kz45lqUbOnYPdidt5O +VfkkHjTMBU4mgthUnyHm2anyi2Ud9WeE2sksVSGn3wKBgQDJS77gC241MSpduscj +ZVBLomhuabu+UORZAFuW6DtW4VdJ3r8Cf8Mh6MWqZAFFsBgdNGfjtgdPP92PPCrV +cXBinVYT13afaE8iyUTXlLscFq5aBieOBoT4saZxcEPkIvVZgPxxyWdkQNIRe5LV +k5G2Lq8qxy86OnC0o7NA7FgECwKBgQDIkprQM6RuXz3Tqr8WfMZuvd9Gs2jNT//k +ItfBfCxxTaNzfNeHj9KmmdmcmiZebqRdKjDoQlpOqEG6CQAv6HOSMQrk03Tp5QCk +1GFo0ilfek58ZhOMoT7eZ5zedJ1OX6RXTqvLNNI0e6Pa0Usx/3CJOtIKyhUmnz8F +vAIouaASTwKBgQCxqGFpOY1l8uOSX9N7wOIyLr9+m2DwolI23uL2+DXPAwjYEHiC +iyI8XkV+kc6xo65UsDj0t2YSIqq3zQF86ianUndzAZoXLKeTaxGQNxtAuh/dIkts +xQI8wAXHXq78vYHPIdEr1/ahe7grZ+X7C8fxg5hj5/IdsRBhzYzaQv2XawKBgGvx +Kkv+XvHfY+C0NZ6ejBQxLyZXi4FjGm3mqoLAlxJrHBodB8k3B8ENb2WuOBP+K4rQ +F/4HJ57JQoYiLe2ahggZSKmZe4Qc8FnEyp+k6wstQWwFa2P1q2X6ERxPWhFBu6oY +9q+nv7DrEWXD2VoRBLl15HBWDUf5z+sAIZFVROZVAoGAXC4p6KMwzCgrlk5Egnl0 +Bd7lcENmjf7LLGhMMCb0LkEgD69tS+mSg1rnlRUgI5N633TriDPcSClpfly+rFnB +ZH/nklLLSfz7lPrbvmSdljrUJrbCtpEs9r6ios9CqkFm7OFnQA+evmSXkitNuUrn +aRMW20eKmflRMwbpysV27ds= +-----END PRIVATE KEY----- \ No newline at end of file diff --git a/src/test/resources/ssl/reload/node.crt.pem b/src/test/resources/ssl/reload/node.crt.pem index a68efa15e8..532a9a3a8d 100644 --- a/src/test/resources/ssl/reload/node.crt.pem +++ b/src/test/resources/ssl/reload/node.crt.pem @@ -1,88 +1,80 @@ -Bag Attributes - friendlyName: node-1 - localKeyID: 54 69 6D 65 20 31 35 38 31 39 35 36 33 36 38 30 30 35 -subject=/C=DE/L=Test/O=Test/OU=SSL/CN=node-1.example.com -issuer=/DC=com/DC=example/O=Example Com Inc./OU=Example Com Inc. Signing CA/CN=Example Com Inc. Signing CA -----BEGIN CERTIFICATE----- -MIIEgjCCA2qgAwIBAgIBAjANBgkqhkiG9w0BAQsFADCBlTETMBEGCgmSJomT8ixk -ARkWA2NvbTEXMBUGCgmSJomT8ixkARkWB2V4YW1wbGUxGTAXBgNVBAoMEEV4YW1w -bGUgQ29tIEluYy4xJDAiBgNVBAsMG0V4YW1wbGUgQ29tIEluYy4gU2lnbmluZyBD -QTEkMCIGA1UEAwwbRXhhbXBsZSBDb20gSW5jLiBTaWduaW5nIENBMB4XDTIwMDIx -NzE2MTkyNVoXDTIyMDIxNjE2MTkyNVowVjELMAkGA1UEBhMCREUxDTALBgNVBAcT -BFRlc3QxDTALBgNVBAoTBFRlc3QxDDAKBgNVBAsTA1NTTDEbMBkGA1UEAxMSbm9k -ZS0xLmV4YW1wbGUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA -jU1/f0KhgHrSzDUh+klSb2GgoXZ4gwrdmfalnknap+W2D1YXXrCIKL70fva5uY7h -2RnBoC9yrunrnUXb5vBKawo3jRPS/BFPdHkN7xwFzVUmlGfd3zDMDUg4UIi8kh4L -T3MS2kSoeNOTX2bNokf+gJaoInPWbi97RU0aU+SRN5U+b6r2Twt7pQtK8O4DzE76 -zv05wnCGtku16Bw0XE6kA1OOa+GNIJqu3qiX2YOc+z8/x6qKtpDJt964Jrsuuxth -87LPr3aToojNjPXbTc5750SyOiSuLaoECZIFQwpmHEmzyy/To+lmhRlq0mg6uZXx -8kRo7wXwO3wim2ETD41f1QIDAQABo4IBGTCCARUwDgYDVR0PAQH/BAQDAgWgMAkG -A1UdEwQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQW -BBRCc6fi/AR4V/glw12g9aHlvcWt5jAfBgNVHSMEGDAWgBSZLwYV91hrMtmbl+N4 -EBcBgyBlsTBiBgNVHR8EWzBZMFegVaBThlFodHRwczovL3Jhdy5naXRodWJ1c2Vy -Y29udGVudC5jb20vZmxvcmFndW5uY29tL3VuaXR0ZXN0LWFzc2V0cy9tYXN0ZXIv -cmV2b2tlZC5jcmwwNQYDVR0RBC4wLIISbm9kZS0xLmV4YW1wbGUuY29tgglsb2Nh -bGhvc3SHBH8AAAGIBSoDBAUFMA0GCSqGSIb3DQEBCwUAA4IBAQAGREqnivnreSVy -w4BtR16EjeZwKjv0NuzpinsLhi0Et0k4Xnz6e2qg3MecuK8hftTtTykllsbQ3lm0 -Kn+Tw0tZntkZTP+5azHWIkS2m36vTcARotsMY6P7QTPSp/lnxXGVoah3tbg0oEk3 -lD3IuLyuiIpnjcPM8IIEmp4Mdx4lMhinK7UUAFF8yj4cwYY/frW6NW7Oqj/X3BBH -L0Brhr2x3KN9Rtbl4gED68SE8AE6+mzEPV+TcG4omRHFSi2pgJfYJUEBRZlUkq6i -/gZ3d5ubfQVsOsAgy86V+K1tPs2m/2VtHY+7+7SY2aqKx0jpMsNJrfAMHTfqNBqa -dlpXYNV3 +MIIE5DCCA8ygAwIBAgIGAXjDZzwdMA0GCSqGSIb3DQEBCwUAMIGVMRMwEQYKCZIm +iZPyLGQBGRYDY29tMRcwFQYKCZImiZPyLGQBGRYHZXhhbXBsZTEZMBcGA1UECgwQ +RXhhbXBsZSBDb20gSW5jLjEkMCIGA1UECwwbRXhhbXBsZSBDb20gSW5jLiBTaWdu +aW5nIENBMSQwIgYDVQQDDBtFeGFtcGxlIENvbSBJbmMuIFNpZ25pbmcgQ0EwHhcN +MjEwNDEyMDAwNzA4WhcNMjMwNDEyMDAwNzA4WjBWMQswCQYDVQQGEwJERTENMAsG +A1UEBwwEVGVzdDENMAsGA1UECgwEVGVzdDEMMAoGA1UECwwDU1NMMRswGQYDVQQD +DBJub2RlLTEuZXhhbXBsZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK +AoIBAQCtbAX3oYQvfgvwQ587eEvnvVC1z8Dd63DRQiJ4d0jWgePj3a5NXo01Ok+a +5CqEZBAXqO3L7sd5xWHjO6Dg29RD8zvMmcHHQgtW+mOS1mPdeM1/yWg2MvxxmHqK +UI5BOxJRK4KVc4jyYvnp/Bns9AEvGKb/Ko79YZOOjs0sx2iNxKIPkvOTtRE8/ta3 +H1G3+e8NdDN5suuaXV36BHA857sqg8kxBxXPwMF36Dh0L6tCUB8oxLSPqAgY6eQN +hC6cprZl8rQlechTrOswOAVTpS0thav5ZFrX6I1MD57O6EosAaE6C3D4pY/FsXyO +hxOuAvo+H8K4O5ddAyQ8MeEvnsMFAgMBAAGjggF2MIIBcjCBvAYDVR0jBIG0MIGx +gBTS02Hh6adcYFVpsHSBAGZYMvoGRKGBlaSBkjCBjzETMBEGCgmSJomT8ixkARkW +A2NvbTEXMBUGCgmSJomT8ixkARkWB2V4YW1wbGUxGTAXBgNVBAoMEEV4YW1wbGUg +Q29tIEluYy4xITAfBgNVBAsMGEV4YW1wbGUgQ29tIEluYy4gUm9vdCBDQTEhMB8G +A1UEAwwYRXhhbXBsZSBDb20gSW5jLiBSb290IENBggECMB0GA1UdDgQWBBQlLRJJ +7EdLiEJVwbNM15af7SW3FzAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwIF4DAg +BgNVHSUBAf8EFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwUgYDVR0RBEswSYgFKgME +BQWgGwYDVQQDoBQMEm5vZGUtMS5leGFtcGxlLmNvbYISbm9kZS0xLmV4YW1wbGUu +Y29tgglsb2NhbGhvc3SHBH8AAAEwDQYJKoZIhvcNAQELBQADggEBABGqJNfowZpb +r9CifL/GJ5jwZZPAmacg29dz14TOwcv1NY6lD/TDMkN7OXoJQ2iktFJUMCzWlKef +5aYxom2DV5hsSAsPnoTCzXStMbyJAx+DJihhU8HJaQBemZvXBdp9CECJ8PSBm3Uh +k1RYFvJo0VP37sLO9G1mEjhdDo1uWD0XzUkRTlrJ9oW0+T19UdAOCGDgwlJAma8l +yjuHGHTT3XMjQJxUfqSLzeb/E7dmE0zyLp3B5OHu1tm2HJDi72eNNl3CDWN/Kr2o +8soT6flpSIpRKVl3c+wV1aGxCCPsBV4RWe7hrN0/P6/UNdAlbZbZk7XeNvha2b9I +gYHPuTdfjHI= -----END CERTIFICATE----- -Bag Attributes - friendlyName: CN=Example Com Inc. Signing CA,OU=Example Com Inc. Signing CA,O=Example Com Inc.,DC=example,DC=com -subject=/DC=com/DC=example/O=Example Com Inc./OU=Example Com Inc. Signing CA/CN=Example Com Inc. Signing CA -issuer=/DC=com/DC=example/O=Example Com Inc./OU=Example Com Inc. Root CA/CN=Example Com Inc. Root CA -----BEGIN CERTIFICATE----- -MIIEBzCCAu+gAwIBAgIBAjANBgkqhkiG9w0BAQsFADCBjzETMBEGCgmSJomT8ixk +MIIEqTCCA5GgAwIBAgIBAjANBgkqhkiG9w0BAQsFADCBjzETMBEGCgmSJomT8ixk ARkWA2NvbTEXMBUGCgmSJomT8ixkARkWB2V4YW1wbGUxGTAXBgNVBAoMEEV4YW1w bGUgQ29tIEluYy4xITAfBgNVBAsMGEV4YW1wbGUgQ29tIEluYy4gUm9vdCBDQTEh -MB8GA1UEAwwYRXhhbXBsZSBDb20gSW5jLiBSb290IENBMB4XDTIwMDIxNzE2MTkx -NloXDTMwMDIxNjE2MTkxNlowgZUxEzARBgoJkiaJk/IsZAEZFgNjb20xFzAVBgoJ +MB8GA1UEAwwYRXhhbXBsZSBDb20gSW5jLiBSb290IENBMB4XDTIxMDQxMjAwMDUx +M1oXDTMxMDQxMDAwMDUxM1owgZUxEzARBgoJkiaJk/IsZAEZFgNjb20xFzAVBgoJ kiaJk/IsZAEZFgdleGFtcGxlMRkwFwYDVQQKDBBFeGFtcGxlIENvbSBJbmMuMSQw IgYDVQQLDBtFeGFtcGxlIENvbSBJbmMuIFNpZ25pbmcgQ0ExJDAiBgNVBAMMG0V4 YW1wbGUgQ29tIEluYy4gU2lnbmluZyBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP -ADCCAQoCggEBAKysgDiVedG/2qsMMGtbOV3mkfA1JuunLiO/bNMF41ukjIQoIl11 -3MKAhkSpuOcDAFXsFc94Ih80MWVn9xUN4Hviv42j2zOJNmbSfhH73GfUD7npC/9J -QdBaWKQmIWBYbbbJb/B/brmleymeEhckKB/xrqeefG6nMWsiY4CBiyMv5UfbKBi8 -5hcWSxy+e6gSQnKeIimYufaWZJuiJ3BfANhpidjHDBlkXog8eb/79Yg7UAWcqJV4 -cpgQK48SV/DEPbnFAfGBTQSsLMdgkESrbfQz2jXPws4b9AvnNp3B+sseKW09iMFm -848W64ywKxdsQMTC4NgmO28flb+mFwvcRCkCAwEAAaNmMGQwDgYDVR0PAQH/BAQD -AgEGMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFJkvBhX3WGsy2ZuX43gQ -FwGDIGWxMB8GA1UdIwQYMBaAFHFUgwb+I9oQZhURLekxk/ZxEdwhMA0GCSqGSIb3 -DQEBCwUAA4IBAQCHZNLLExdn7pWFCg6TRPUmEj8i7vkWKoojRZsiA4QtM5flaaxT -ysj1+Kv53+YsWugBJyAiPQzI91TQpa11SPSV1rQM2ovhnML9ErjrlKF5avKTkFFp -G/lbTuHzS43dcXemrvKPUWTFqqFubyhDP0dOcfzX2cHu1g/6U03TgoyTGX2M5Gtm -nj1FVu/yEdKUJpDStJ8jnbTMx2gH8BnQwB51dYAjwhazjBDTC1Vl4ixKicKvfVym -w2+Ja004DRjPoiq5pk5HGKfGR7j6igmX/AH/10RxvMhdx7LNFIrRbi/jrFr5xvxE -f2YF9cpqI0hhws6Gz1/Lb9eCk9Lve5kqsf4D +ADCCAQoCggEBAJjVJ9Ipq0uCE7EE0RRBadkrIm7J8OGa2xeFCEpsw+hqQbmftrm0 +V5XFpRKznv7r9JxFQn4uUM/Tqxt/mZ9Qql6IGWiNeK4e0Hfh+Lc/VD+w+mDqxo52 +zv0afYyyM/1NiOyKV7hO0Akwj25zAfnqs2FbsZzVXtRpgOnfOdfKpUL6fKAxwjex ++0nOOaS5D+unS64sh0mTMVD32iag+tg6aiiW914Jmrkd4yDV3uoXh/FKafRRWHSq +pwO7Xilb+fLRMiQ1N09mTE8Um12G7mVdBaZpbluwtv2tiS52n8zzpKYbohS2m1ir +lJMASh6qEKzHUlzmERhq4Ib7V+p0E+gPadMCAwEAAaOCAQYwggECMBIGA1UdEwEB +/wQIMAYBAf8CAQAwgbwGA1UdIwSBtDCBsYAUrs3v6ngKiRF/4eiBW+3eCSjTVo+h +gZWkgZIwgY8xEzARBgoJkiaJk/IsZAEZFgNjb20xFzAVBgoJkiaJk/IsZAEZFgdl +eGFtcGxlMRkwFwYDVQQKDBBFeGFtcGxlIENvbSBJbmMuMSEwHwYDVQQLDBhFeGFt +cGxlIENvbSBJbmMuIFJvb3QgQ0ExITAfBgNVBAMMGEV4YW1wbGUgQ29tIEluYy4g +Um9vdCBDQYIBATAdBgNVHQ4EFgQU0tNh4emnXGBVabB0gQBmWDL6BkQwDgYDVR0P +AQH/BAQDAgGGMA0GCSqGSIb3DQEBCwUAA4IBAQAmRbuLhYdGYjdndROJilIQ4DUD +HYYijortmkq6ZNQiB7I2teBZjra2xcKp0qaOkG9nJCzhHvGTw/URjWAxFZ5n5hhx +iBTJZTGY6bk2SWfJxdd3Zld6ybsoaQTO/ZnfuTE0SgxWx1e5q/mRBKvRwF02bJu3 +YNlJMJVuIDxurrUK2CXrgG/BOCYMyiHNmn1Spsh+x+6B9u28CE0M52+HtNJwyQw6 +qPMSNiovXRkqk7E40e7ZY3MS85Pr4L0Us048SswPEpf/+IjV/zTcDP22pQfcjMOX +DZpdAOGgvqhL9t7M1lcxJrI0cIcBNWOPVa3zsCDU7CXF+riL0Va6TvoChVtT -----END CERTIFICATE----- -Bag Attributes - friendlyName: CN=Example Com Inc. Root CA,OU=Example Com Inc. Root CA,O=Example Com Inc.,DC=example,DC=com -subject=/DC=com/DC=example/O=Example Com Inc./OU=Example Com Inc. Root CA/CN=Example Com Inc. Root CA -issuer=/DC=com/DC=example/O=Example Com Inc./OU=Example Com Inc. Root CA/CN=Example Com Inc. Root CA -----BEGIN CERTIFICATE----- MIID/jCCAuagAwIBAgIBATANBgkqhkiG9w0BAQsFADCBjzETMBEGCgmSJomT8ixk ARkWA2NvbTEXMBUGCgmSJomT8ixkARkWB2V4YW1wbGUxGTAXBgNVBAoMEEV4YW1w bGUgQ29tIEluYy4xITAfBgNVBAsMGEV4YW1wbGUgQ29tIEluYy4gUm9vdCBDQTEh -MB8GA1UEAwwYRXhhbXBsZSBDb20gSW5jLiBSb290IENBMB4XDTIwMDIxNzE2MTkx -NloXDTMwMDIxNjE2MTkxNlowgY8xEzARBgoJkiaJk/IsZAEZFgNjb20xFzAVBgoJ +MB8GA1UEAwwYRXhhbXBsZSBDb20gSW5jLiBSb290IENBMB4XDTIxMDQxMjAwMDUx +MloXDTMxMDQxMDAwMDUxMlowgY8xEzARBgoJkiaJk/IsZAEZFgNjb20xFzAVBgoJ kiaJk/IsZAEZFgdleGFtcGxlMRkwFwYDVQQKDBBFeGFtcGxlIENvbSBJbmMuMSEw HwYDVQQLDBhFeGFtcGxlIENvbSBJbmMuIFJvb3QgQ0ExITAfBgNVBAMMGEV4YW1w bGUgQ29tIEluYy4gUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC -ggEBAPum2jjujLRNoeqh4hQTUCUhdG3maOUJNjNJOzd284Cv1A6dJICotspw4Ddr -ls7GjrWaMmsWmFq0y0qz9YCQlcUxxgSEDZDdj2n5JKMI8LAERq5dwBoNaRcJ3zm+ -Kosv3qhGwspZqviJq2gBHi71+p5VT6esbLBnBcOTUGoJPzVZ/cEleBtJ/scuw7nl -bq1v2LQELD5h7wRh6HvWpWa98F3A5dHMPj/8E8LlWbSM6ojWVf/nsusK4yORUaTJ -bY3aTe6mxq5S0pnGtWh3dRkm+NUdzdaEYdnYcvgAvqF9T7/Ns4OLsRpjnuTA/Xoc -Ni5tcM9ylPIxJqbkvWgLUtdZiCsCAwEAAaNjMGEwDgYDVR0PAQH/BAQDAgEGMA8G -A1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFHFUgwb+I9oQZhURLekxk/ZxEdwhMB8G -A1UdIwQYMBaAFHFUgwb+I9oQZhURLekxk/ZxEdwhMA0GCSqGSIb3DQEBCwUAA4IB -AQAWWt992NJ10ddp2M1J3geb3xYCJF2t2VQzqBO58hHeJxLiqEmuM0VUFssvQJ9n -9i+3PIrMq0mcH068WaIINzkoiqaoBtzllCHkPpkrQPbpxD0UQyUcMFh2iydVbI6Z -eRZUmCeqALAmKcmQbAZyx8W56P1ukhAGhHXf2yTL69Dd1tzqSaA/j+lPuumHWHwH -5Q8Tnp8y/adn1tqv/2pEjpG0L3lXz13C3QB0OId/OUgLeh0Op6QNda9RX3cG3Cl4 -AtVft1pnOzhalB8v4iSeN6qmoqCf+YJd1R24AitIiG8+e147FEkbzPq0kJj0j3PN -SEPDSy6hmI2NJhwedsdbSJtg ------END CERTIFICATE----- +ggEBALebO2NTc/jFQwmnye/uWHP4YKkgnC1wL1ZxSsQlL6MPaFRJPKjbQyA4llOW +xnemfkyTDW8BjYOVVrnqXHR5yMAg1A2+bTmgzmSePhA549nA575UI+5XsgZAKl3E +EmEhHZ36g3fZRtXEyQ2Y7d4ZhxBrkH51SY5tor0QkPf44R1JYUCLjTcnFeaJhosp +XaMxnLBYGWzQlNx1VL4serRax/sbFC6Ue//bcp97t/RYpaS3L06pv7z4RmTqFeYD +RenZWqp8YNJ4NH1ff9ogLXtVr2voyAcw0Hrb7war/dPPWsG6etL975yKOvy3poAu +Gntp+bkE4yU4ThZDtyV5+PBbmmcCAwEAAaNjMGEwDwYDVR0TAQH/BAUwAwEB/zAf +BgNVHSMEGDAWgBSuze/qeAqJEX/h6IFb7d4JKNNWjzAdBgNVHQ4EFgQUrs3v6ngK +iRF/4eiBW+3eCSjTVo8wDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEBCwUAA4IB +AQB8bZ91ofGDXW/6JuhWtLa+U3c2THrn6qa3cU5iXZo6Lco6rDLUs3jkhqpaHenA +joIBNtvI6IrZx12ARw3F48XG+TvsU7hroG6fPRBdhMpAvLN3JxshgI0ZoUQHrrOb +Jrk6JAacfrVc8KCPryISFx7jh32rkwbBo2CqLV0cRBnl146CSjq8H3tzMfFmku8b +uU+mFLt9hpqlU3yUTk3kS83NY7HimKSdtodMJRtBlh44KRr7Vt1zWTJ78l37epzs +1ZDRpPmNfZRFgQo/2b7DCLGkqHKB7RRNRt/MvTyE5bpr1atZvyFV1O8pM+Xknf6g +KgaBJN+uGgJhlZKPdLi1ROue +-----END CERTIFICATE----- \ No newline at end of file diff --git a/src/test/resources/ssl/reload/node.key.pem b/src/test/resources/ssl/reload/node.key.pem index 05441cbdd0..103e3ab790 100644 --- a/src/test/resources/ssl/reload/node.key.pem +++ b/src/test/resources/ssl/reload/node.key.pem @@ -1,32 +1,28 @@ -Bag Attributes - friendlyName: node-1 - localKeyID: 54 69 6D 65 20 31 35 38 31 39 35 36 33 36 38 30 30 35 -Key Attributes: -----BEGIN PRIVATE KEY----- -MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQCNTX9/QqGAetLM -NSH6SVJvYaChdniDCt2Z9qWeSdqn5bYPVhdesIgovvR+9rm5juHZGcGgL3Ku6eud -Rdvm8EprCjeNE9L8EU90eQ3vHAXNVSaUZ93fMMwNSDhQiLySHgtPcxLaRKh405Nf -Zs2iR/6Alqgic9ZuL3tFTRpT5JE3lT5vqvZPC3ulC0rw7gPMTvrO/TnCcIa2S7Xo -HDRcTqQDU45r4Y0gmq7eqJfZg5z7Pz/Hqoq2kMm33rgmuy67G2Hzss+vdpOiiM2M -9dtNznvnRLI6JK4tqgQJkgVDCmYcSbPLL9Oj6WaFGWrSaDq5lfHyRGjvBfA7fCKb -YRMPjV/VAgMBAAECggEAb6gcpqg1THxB1KHrvoZwAJmpv80I/6v3XnFbgBAmG2RW -kBncj7N5dJEoTKeULT/t0YsbyQOVYQhxaa7JTNz2QU0qhm1y3EKlgYki7J49K3ss -6DqHRZWeuKQn8+OI9wGMuHRbImT8p7Wwj8OBnMm9H0lthQP6HsmgZCvAMSi9Y6h7 -C2PIjSSxSpHhZd9GIiVFJxlmV0skjPRTuvrX1q/Ofbgy7/m4PKqousJWZxmTo6oc -MBJ2+dFQoHC6u5fF5Wm0xtELyHYlI9KugGONR/oOHvAjFzPSY5vU542obT9SsutO -C9hG8sOFms/OMnyCP9WuYF7Do3LVee81CUBWYWOaQQKBgQDLp47x38buNNl4u6Mf -5gXJYYZ3aHqAHtN67RGWE3vXroP3NTw0zNdyBboifPlbCSs3OMBxpUnemQqTNQ/v -b4HhuaAuEpHtFePx1HcuKQUlg+qOyFaGvW+AXBb30qsKW7rffvaq0qVmO325YAFn -aYzN4+4y//5NSwdif8hNocULMQKBgQCxnzMHXw/2l2TzOdJ+2di0y23I7XPg7tVp -5Cp2zzRdG9r93uI+6WH+3av61ECv99BSC3pjbvisXHXW8la2xko71VasV6HxP4Yn -V+Rgg7x4MMpd26/S5oQtYU+mcz7s7ndxTU3kjMdKAXVT9Q9mKtFYMCS6Wr4YUddU -ksiPZk7t5QKBgEr7vLPt0s7uAoxjeeJKzSKil+HrQ/9cWj1OgEUjk1uMU+Z3YV2H -dmPzG9+K6DzOmWzRpnmxhAtDihM9XEqqYcX8lK+iAryqbK0jr2X9kHmJoplDxigC -I8W9Im/Iz1UXBS05EBVBTcjgaqAQazPqNv+vxopcmwNWdrebmOKMh4JhAoGAbqNR -b8gA84K9+NsNiMI9P/BvA/cUdQmPmZPr93F9lnmhYP0SREmvJsgBNg479OARvOk1 -ZPZco1A8fpUY+mRtHPP4NwWm89SzxZHzyUKFhQAvLWOIE4BO2M2ChZXHnmGzuLmE -SVZ/VFOwN4mv+92z5JCocAPR4Ogpjp6XmusJQxkCgYAVhj/gCfQFHVy0H0MWCisp -J1wXs4v4xn8QOvdIfUmI0IjNXdRy5UW0HaaF+9GDukBcwtK2LHUKYQz/kguTedVB -KLF/8j+/ed9ArU34VNX5i7MvnbYvy4JfShYcTZZbx9+RuTU/GSUyaFCEwLh005TK -c59dKeKV+rJLViEhKBc37Q== ------END PRIVATE KEY----- +MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQCtbAX3oYQvfgvw +Q587eEvnvVC1z8Dd63DRQiJ4d0jWgePj3a5NXo01Ok+a5CqEZBAXqO3L7sd5xWHj +O6Dg29RD8zvMmcHHQgtW+mOS1mPdeM1/yWg2MvxxmHqKUI5BOxJRK4KVc4jyYvnp +/Bns9AEvGKb/Ko79YZOOjs0sx2iNxKIPkvOTtRE8/ta3H1G3+e8NdDN5suuaXV36 +BHA857sqg8kxBxXPwMF36Dh0L6tCUB8oxLSPqAgY6eQNhC6cprZl8rQlechTrOsw +OAVTpS0thav5ZFrX6I1MD57O6EosAaE6C3D4pY/FsXyOhxOuAvo+H8K4O5ddAyQ8 +MeEvnsMFAgMBAAECggEADvlYk47t7bbdu4dvOJCUx0P0s9omLlM9uMfT16B/GMx6 +26pAulv7Z9jq1jY0yJ0mOZDDxZvOvAAzyU3VAI1iqOJX67zr+zND7OTuU5ew5Ebh +wZKnraRd4UYX8Jjvi4jY9krCOfrRnJI4v4Ad0fSopIMlqjsnwQ+bkM/aPe9S4wiu +j2bXKPPcpGfQ3z6I2nQjP/Go8G1TziG2OwRvcQfNrt1gzzg9OwR0hRv5hSwaC28u +39raDRe7/p9PbuqAI2z2/gbNRP+eKmoz7KZzThJCv4/RS3osXMt9DFeDZikdJ0Pp +RCGi4Op02wm1PI3A8piG9uUHrJ2Dl9lpLlDOEk3SMQKBgQDsf+oG93E2RQg7UHjs +EIYsfPQpNMT1/b8JDtld6kkfGLoBGZti/Vv6wcgMZaex18c6OyMykD55qkyVdkZ4 +wr4jRqYDG6sq+AqTX/Q+3tSDUZQBbDuBGxYJJpiYVcYGw3iUFfsrb3H59D9GeAfw +Y/l4lEsTdQTAnaQ7iRX1ZDS69QKBgQC7uKbIrUYxNLjah7xYYHXSDisyyewPZndA +OPBlx7kCNorsrLWccHD9PrRZSi95xVIJ2nkUP69bdBYD5rI75lJ2PLQP51QHxYA9 +VRUxEuy+LgdGT0AiM6DiUgXy+nNrnt2DK1Q1uOoJLfg+d86/kK4V8KGSbVABW7I9 +NVrPL9b90QKBgFE+uDTgeIH+QQ+vW3stSgqqem5VdHxVSXVhJoc+3xPRuMR7+YeO +JjUEsSahHXTY/dYhTrwmFXBScrC9ywPdUthngsx6itjeETQDuLKIdlUOh1vdxKtb +lLxcB/v9K2RTbm7hBkIrrOoDYGFjBscscR1dRFVQ0+sfvLW/KE3+uKapAoGBAI0A +M3aEgDaxjS/HyLbxLU5sChKKDN+8bVI18ovgqpx473y6dWdeJeByWvC+gk6K4gY4 +rb2B4GtnFKo1fCb153acPfu8HCgCN0LaR6KmvmBTHm+3U0rdULjuNz281Tk/CM9f +mk8H5/KhLtdtEkRdngUoy5O6u99pSsYi72S0YF4hAoGBAJDegbpbtJEe1MDVAlhF +zFf8/kj3Hd7qd5gDqG6kV2eCSXBeoq3jQajlOeSfykHm9jkGYPnmzfKKTNtOwiQ7 +lTY68VEEhSreUKeys6sfVR0S0xM8w0ty6G3HQdFSBqTHDdUSj74SwKJLUvqM9iUe +oTej+xnI8sKAJDPUv4EiAO7k +-----END PRIVATE KEY----- \ No newline at end of file diff --git a/src/test/resources/ssl/reload/root-ca.pem b/src/test/resources/ssl/reload/root-ca.pem index 43832129af..063b12f65d 100644 --- a/src/test/resources/ssl/reload/root-ca.pem +++ b/src/test/resources/ssl/reload/root-ca.pem @@ -2,23 +2,23 @@ MIID/jCCAuagAwIBAgIBATANBgkqhkiG9w0BAQsFADCBjzETMBEGCgmSJomT8ixk ARkWA2NvbTEXMBUGCgmSJomT8ixkARkWB2V4YW1wbGUxGTAXBgNVBAoMEEV4YW1w bGUgQ29tIEluYy4xITAfBgNVBAsMGEV4YW1wbGUgQ29tIEluYy4gUm9vdCBDQTEh -MB8GA1UEAwwYRXhhbXBsZSBDb20gSW5jLiBSb290IENBMB4XDTIwMDIxNzE2MTkx -NloXDTMwMDIxNjE2MTkxNlowgY8xEzARBgoJkiaJk/IsZAEZFgNjb20xFzAVBgoJ +MB8GA1UEAwwYRXhhbXBsZSBDb20gSW5jLiBSb290IENBMB4XDTIxMDQxMjAwMDUx +MloXDTMxMDQxMDAwMDUxMlowgY8xEzARBgoJkiaJk/IsZAEZFgNjb20xFzAVBgoJ kiaJk/IsZAEZFgdleGFtcGxlMRkwFwYDVQQKDBBFeGFtcGxlIENvbSBJbmMuMSEw HwYDVQQLDBhFeGFtcGxlIENvbSBJbmMuIFJvb3QgQ0ExITAfBgNVBAMMGEV4YW1w bGUgQ29tIEluYy4gUm9vdCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC -ggEBAPum2jjujLRNoeqh4hQTUCUhdG3maOUJNjNJOzd284Cv1A6dJICotspw4Ddr -ls7GjrWaMmsWmFq0y0qz9YCQlcUxxgSEDZDdj2n5JKMI8LAERq5dwBoNaRcJ3zm+ -Kosv3qhGwspZqviJq2gBHi71+p5VT6esbLBnBcOTUGoJPzVZ/cEleBtJ/scuw7nl -bq1v2LQELD5h7wRh6HvWpWa98F3A5dHMPj/8E8LlWbSM6ojWVf/nsusK4yORUaTJ -bY3aTe6mxq5S0pnGtWh3dRkm+NUdzdaEYdnYcvgAvqF9T7/Ns4OLsRpjnuTA/Xoc -Ni5tcM9ylPIxJqbkvWgLUtdZiCsCAwEAAaNjMGEwDgYDVR0PAQH/BAQDAgEGMA8G -A1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFHFUgwb+I9oQZhURLekxk/ZxEdwhMB8G -A1UdIwQYMBaAFHFUgwb+I9oQZhURLekxk/ZxEdwhMA0GCSqGSIb3DQEBCwUAA4IB -AQAWWt992NJ10ddp2M1J3geb3xYCJF2t2VQzqBO58hHeJxLiqEmuM0VUFssvQJ9n -9i+3PIrMq0mcH068WaIINzkoiqaoBtzllCHkPpkrQPbpxD0UQyUcMFh2iydVbI6Z -eRZUmCeqALAmKcmQbAZyx8W56P1ukhAGhHXf2yTL69Dd1tzqSaA/j+lPuumHWHwH -5Q8Tnp8y/adn1tqv/2pEjpG0L3lXz13C3QB0OId/OUgLeh0Op6QNda9RX3cG3Cl4 -AtVft1pnOzhalB8v4iSeN6qmoqCf+YJd1R24AitIiG8+e147FEkbzPq0kJj0j3PN -SEPDSy6hmI2NJhwedsdbSJtg +ggEBALebO2NTc/jFQwmnye/uWHP4YKkgnC1wL1ZxSsQlL6MPaFRJPKjbQyA4llOW +xnemfkyTDW8BjYOVVrnqXHR5yMAg1A2+bTmgzmSePhA549nA575UI+5XsgZAKl3E +EmEhHZ36g3fZRtXEyQ2Y7d4ZhxBrkH51SY5tor0QkPf44R1JYUCLjTcnFeaJhosp +XaMxnLBYGWzQlNx1VL4serRax/sbFC6Ue//bcp97t/RYpaS3L06pv7z4RmTqFeYD +RenZWqp8YNJ4NH1ff9ogLXtVr2voyAcw0Hrb7war/dPPWsG6etL975yKOvy3poAu +Gntp+bkE4yU4ThZDtyV5+PBbmmcCAwEAAaNjMGEwDwYDVR0TAQH/BAUwAwEB/zAf +BgNVHSMEGDAWgBSuze/qeAqJEX/h6IFb7d4JKNNWjzAdBgNVHQ4EFgQUrs3v6ngK +iRF/4eiBW+3eCSjTVo8wDgYDVR0PAQH/BAQDAgGGMA0GCSqGSIb3DQEBCwUAA4IB +AQB8bZ91ofGDXW/6JuhWtLa+U3c2THrn6qa3cU5iXZo6Lco6rDLUs3jkhqpaHenA +joIBNtvI6IrZx12ARw3F48XG+TvsU7hroG6fPRBdhMpAvLN3JxshgI0ZoUQHrrOb +Jrk6JAacfrVc8KCPryISFx7jh32rkwbBo2CqLV0cRBnl146CSjq8H3tzMfFmku8b +uU+mFLt9hpqlU3yUTk3kS83NY7HimKSdtodMJRtBlh44KRr7Vt1zWTJ78l37epzs +1ZDRpPmNfZRFgQo/2b7DCLGkqHKB7RRNRt/MvTyE5bpr1atZvyFV1O8pM+Xknf6g +KgaBJN+uGgJhlZKPdLi1ROue -----END CERTIFICATE----- diff --git a/src/test/resources/ssl/reload/spock-keystore.jks b/src/test/resources/ssl/reload/spock-keystore.jks index f8e1b8707c7a0ed9d1ec7f8b293aa0ae6af2faa7..e0a0855ce8a239a55bc7871d1c66b065baf29c41 100644 GIT binary patch delta 5507 zcmV-}6@2RLDa|V)FoG4y0s#Xsf)#=W2`Yw2hW8Bt2LYgh6>|iF6>l(t6>E_qMt@Qb z?G4KD2~P7ikWrp1(>Agu37-N30K-rOf&|E{Hy?}idxK2fHx79F%g=S8RYc@+Eds}* zcR!N&9goHKnD=<-nG!o(%|W|poNTwCZWPP+y*1X1QYEZDs%1nDnYRa<*=PU@)1q;wMTz_nr2;fanje%rcY$tA_TlB$z3eSY?7uJ0Eb?qR= zH2TA7y}B}$a5v|A0OrA5FV@f?eBF&#Sq@}v>+7dlO?u=f1CA__0@@wSvIRyN*1~Xt z3F1v`J^E;&om*Lb7pp8)E9ynpEUSN9vBND)=pCI@1MaYI+Xzqo`FU}kCa~T)iyu?e%Uw}=YX8?O%fgh> zsw0sUEHVwym(n4|6kKtr;&FuEmw8z?f)+(^8u6S#v!|E~M>Zv1&Kuh1^O^1rbZAn) zW!)6WkGXQyrdli{4f*m-aDU5lU^5L)>y~Cg#m|^;@i1Bs*@H>lhrkte@o!NmBzChG z@qKh0RbKjp>Xt$Bd6t<6e+RZ|4KURrAFADM z%bf@;GO$Rd4dyG};(x}1;^=ba8QxNQE+T9jDW@C%*lt}zq4dbTG#5$Gsif<)Fddm- z5-ovwCj*_VY4}%1Po3p?H2kVMn^j`H_ejqpg{hv2+Ly+GX;bKPkgAJNo7YMQsK7+M zLmcd5qE+^pjT?xn+ob$N9LhguuimNiw&gyw+5ypskfP!0n}3G2?57j3d{@dZdiY6^ z;5t9nGg@LpgEZ?dWI+v1(6T@1?3kYV{eEHfCHUwaeWdwsed8IdQ)3+c65K7DXWu5; zq*w}^;{bxt>aky)y~|F+X(BlbQ-hrB9DW(@yY(&n;k^{p~)p)cG z%K>kj{%<~VXU$iXROuN$3be=Ii)kD>E{?bE)D;tdH2Lu-RI?kgs>K)) z?j7`4(0?EINEFQU?fFLB9Iwv3Mmy%z$)Le-{*3V$V&@*3ogSxKj86{74hK&{3}RA5>K99xB?8doS!z@) zJzDd_F@Swy40*#pF+MOE1_>&LNQUh=&FoF-_ldAu>!%lXW*Uf)+SQ1_A>B z!%%>N52&6y$!+xl<(W_$!Rl4ffg02(04&00jBZ%k(UC_%oy%D%{{Tb*TsqZ~@wHA8 zixFXdISFT?qg2b#b`!xe_FmJsR~SN<%?CcsgX@a5Az9jRtP_7a1^tYTtQJq(^;4WY zex4%G@5kq~t(`XVUDsI!+nP@Pb;JfulCo7JWt?uBxq+PRnYC zjQD2M$^aU)D+91^3L5no^a|!vMz_|U0jdFWjZ$f-#7;zs@qVIQ(B>w>Uu;y$!(A9G zE>%W0fas_3u=fKi$^Cvd9CUR0;Y_lCf2hzj*9y%2V(%v+>0#ndWSkzt?Zu1)0fqLC zf=!@Lvk9aq5FR%_7WdRy&&%H~uA_c{+;-3F{iaf%gQqV=3d#&flQH&Cpp?&x8nTso zn=x9AWn>~~psSC&k{Wg^q~x?e#C2WxX92Y&J~mT}b0Re|&x47YB^y(j{_411f5t@c z{y5pm-%{0~-+%zt%p*}JCh=g1%(nZ>grr5Y%Y@BKUbRaXC8)DFI#+i;8LB5Br`Lm{ zurZL_i!*om;(rYlNt#quBKuhg=XGKKj^tON-FOy2O%u)Ui)V|H4g#DC9}pB)(GOgV~>Bv6w6+tcPtFud(Na zQ~@kd4*U#efOl+*zK?Am)ZsTr;@QkLz#0#Dx_SHJ0HiT)1lnR!!5`zle*`IWi_FR3 zk76(dWielh|I-$mlWwmge)DfUP#ICKTMJHm-7Wa=hBJH9^1Qq1R`fS;JDexzJ9=_! z8Dov10FUcS3zN`^Y|8MJpwVBsP3L-pz3AW%8=4^j@@_fS=V-knd8r6T?5z@ZW`}Xn z2HeEEjqXf^IqY-PzlcGvf0Qm!J5sM7tY+u#`tk?4T$Kvvg#s>vQ?whqTZu*Y&?VDy zCx9?uuObz=$w({08IrbV^%=MWkjLSSw_vR2nRC|q`U$l8BArjzc*S1xJ+%>&GYC38 za)T5IE}s_bHH(IY$o*?)BtpkFcSCMXSxj1bZJqYlNr-f47vEDqf3EF#H5h3pPwgwz z)JrR^etA|zvXLTu+gZ9ABql3xPnbU^%&sR}J6v3Pl!Lz9s@05t1IEs+U%4i@U%_6O zM&-(T6`IqfA`^}4N-3oJc;~xfZL&vlKs)b|HzS%Mp9wX2^SSs7z(F}RyE}o#fU88u z46d1*m1FdluuZgPe?E7XEK7I7+6wrQi5I0X;0S{gxVpubwnrI(RxxoE_n!}3?}i5K;w@mJ#dp* zcqft*MAw`QyPiyu39PKtdJ9a8F63w1YoRN^k>JGYRxJz>f5HfIdCAnz#uz3L7oxbt z)S&1!LZUrc;13i2W_R8mW&3g3jtjJE`$|v7fdibr3U2f(`}z(`dep=63WYqOXj(N@m)4X?=Jc;KPw>=2aIFaiJjg5d#}OEey*o~-5hyFlh=7H$&) zPARn*%2p8Te>W`DC9~yZ)@&$)H47UK*#d&G-6La$dDyky^#y`IkE#>7y)kxt*YhoC zTyJi#?`OErKc&4l1I};Yq*SX>dDcmrtX5s z5~!aT!?5!L?+{t}AWzV7jEnxlKpNS%KC0Pzd(0ZdJxsnF?6oMBZK{^PpFiype`cUo zIWH;Nf9)$?p`cWKyX^x0?GpWBx03>JPHnHFoijOk(k6GJZZ62qKo|UT;#TQ%ts=1&LxZ;F%W3W02R~AA z>5HYpjj>~(B3%nDur{)VP!!9Z10uCYA~?tI_eTcFvS^1oMaS$7Hq>QjsvOa={Re7R zKa^`5EUcy>c?%)edAt_h!AiBkcQvRucIH@)r+)YRXtdB9BJ+viSTg+63mTX779uk% ze<$NvWV8j_Mn>ldYXWho;UPRmKli&vUXK8#X+rjSa@foG0P;0#E7A1DLDXpeU0z7O zWxgT~a<2)YP0<`y!cn&mw@BRQzpY_t7{CE$Gg_4ywpPbLfHTQH-2$n7q8_=9t+^8t zmNSDd@|;{!OogCFqlteuhMd#g@x4iLe>bbn2TeGYN#hSW9`Q?kcqMu%xi5dGJ(H{uy8HTh>t?s)eH|i%Q0^f#8tvyAF8HH66>%7UQNaj^{U{ zEwA4pC*MBnGnzW^Shu@9PaBtOy7qsSwNn zW|vN4Yc!?h04L4{>v3@aJbo1EruKXzM7NSm_ut5 z^}Zi1cxw%|GZ_UQRV_O&B@q~P$u~oGPA|@GvNW$8KQA5_13XpjbrL3ufBwv6jUZ~u z)HB}iCX1yV7z|LYj(0N2lcYP1f5TMU+|rM5JTmR%&BJP@YxT!uH}`xdpD&u&c#KmOWeZHi!1Z!H%0u~%Oap{zYo;Ab;HbF1sywm6)M*+dcSzCP&DVu|*I ztL{X65Q?4Ai+_}o6Ujm~f@+I{|4CCa*z~-PoghDA*`ozG9_w!Hh<~$-O!(SRT&n*& z!N{kf`m&Z72}W~Nf0U0rPAX)Our>@0UXCWY98+xEKLjMLCv%71=#J~0*dGe0Uu@HT z*i;-3m?^kzg}=k)>Bn7J+zjlUZVsJyE~P&_VmZ%nLUP%_xz53E<)CyYzK-YPtQ^uJ z+8RtkRjYPo{Rjnz5@9zzTiL9c28N|yCP^KYm}2PiiL&;eqkZ+ z)LfVv>5V=u#J8KlOlg0Q26jDgf!Vg&%?b(6;*yILnn}Ck4TRAcUMPxKK?}C~rfAZAFqK#%Yh?548@nyjxNK)e1?IZsZKM_x4L0RdZq-WleI^u=@nD+Oz z1TzejFa&oH|K!H0v)6wrC}?<$w+wI+AQClD7IH--tV{mAJDZ+{V|L)^Jp)B%Or5S{ zn+d=XMBMQs#}tYK)!qesAW5E15pQXS;9BNI9o48le_#{zu4)kDBZA&Gio0hOR3u17 zWn5fMNMrJJV=qCG8XyZk4~L+1So-dj)V%XQN$OYuN4 zL$*xU?rdNA;JDY0qBlI}Su|9! zPW<(9=UwHeQDd12>n1{XuDscI?G^la377ym0?n6c-!&_$;^wE~=gxT?HvQv&?`8cm zoATK7LDO0~IGH@RvjhoTD;ILv>@R2Dl#_5Bf3-lP@Ko16pX7*(=3RlUH0C_c70$Y+lNJ8nS_VK1Ec3<@kvm4hU_q>T;HEE$!5k*3F!-z8vTl-+bP#kF_s zzcC*uvD$4WPQ?^RDmX%d_{$Z!%4E*cY)hCpeL*^^_!5krxC=|n0I2rz#)3wz&Xf2TF{KTk)X=CS1o9T@6GMw1!t53i#7uT!bW zY%H8lg{R-#bG(+IV7&yiA_E^;D>Yc{meXezpVVuQTTU@Hd!4Of{TULpE6|3O4)jQx z#V$FJ)#%v+yGVu*l3X!AWbvV24R(%>sVsfeXr1aydcoRCBtI%U9}-P{hf+Dge|!TB zkh&XY@(p1q+Ncd)zFq|6DREaK#mkCOQV;Jt@jwTW(Ucas9hy{+RS8GKJH8!v*(8OF zL;IxNYskJ&!KJ5bOj#l4s2-GZ3gGbsL>>;-4~a?0VlVpur>woiK;^Uf+NT%Jr*dyYH^&FP{xZ}U z2SC&G;_a_k1n0e0Q1I!MA|eh#ml|!^(gizp&fBIYY4oO~v;$f3qV5Hce`kIvf|^Nk zYV!Wk{-*mB)H?Ny6?lLyT3_7&j@qD4sI;JkDj+t+x^OF(YhO@^{6uh6mr+2A7Mu%^-3C`VqP9ig9U*3@&W?^ FhM@8OX{rDK delta 5281 zcmV;S6khAiEA1&FFoG260s#Xsf)t_#2`Yw2hW8Bt2LYgh6q5vk6pt{16pN7}Mt=xO zL?zK_izbjg%n|YNns!!nXY&FB0K-rOf&|E5MJ&Re=D$)fmJz`NY+f#M1=}|yjm09_ zZeO5#1lN&c@>DT;MsW1EPe&YqrTtX^2G*uLIjy{p@(6aWLHa9*jE@)ZY}+?>Zg)Ro zJTe>(c_YYbdyucr%NZ`;re43WeSSq;EG9)%kPPH*`Mlaev@Z$zTbX zzG*4lzD4{Yu2-oiQ=HAZ-E){S_|nYTjk#t2TQ>VPhtsOHZE=3k1sUOxK^;J`vsewf zC`!`IEibym)@IHse^ie(QVX92R`Gd?qz%a?ZF56EdP(BQQi%`?D>3_eCgiD%k-B>q zu(T-x{G}B~{=oi(}Yk&5;IK0$$&;Ef9O=XYE5mQjpmwg1`Z5t?@Wq1q>!pGE_O1Q#q z-Rd;GEu)=ZcsK&!!1*kb!edznbsUATg0?!*#)UB!8Ry$V5pFT5#0A^)cCw zicw%J76;VDLz@r`_yGA6KTF*_t!wr z9*!PDO^(%N2ec&E0H`hjfRFQ;I<`~j=84#~gK}wa1}B_vNvocNzM529NgdMP!tH)c zVr%F!Xdai~qys$FjpqN~zpsH&{C4 z`qXVVf?#+!XuHuHa*TfWJyI4Lg^FhhrpCr1ZFx>rlh`;=p}turFPQ)kqh6Gr5kmv^ z$r>I;39s-Tx|G)^x!2dNUG+V>o7#(nzPfdK&ErH_27vh_CkaBt-9Xx{yb3KAb~V25 z%ae*KfPV(RSc6d<>x9q1wd+ytssKX`ewc24QC>;@OxS4{uwWE*FtHdqE<)}C7>JbE zsWcJdpeBwk>(J}rS73jDq^L0E7pn%qq}G6684UX>d6Zz+ol&LNQUN4#Gc$HG?@)mUtP- zpAzG}3YeL%ti#W(lMn&&75E}Cchsu9`x?V}2OzRies*f{GmtJjNmjEgbW9yr7e`cZawQUW;8J z(&c*)7Mp3;B?G$>30+RBfM~H4e>^;(m0^VNT=041owU8V4!%Ik z{fsWChf0<-zV|N7(gO{6Gmy!AE%uxH(!Am=N6gGV|HW@+v0C}IhIbf1ex^e_q=Y_4 zHU?G;auK#IEOMju5-bgD$c~wm3ScKOwm35+{$c$jiuwha<4s1G?WC8}f1c~whH3`yGuD2-ABC4)Iw0zEnz!R?ruz;IyOD;J1@G~ z15e0=3Jc7juRAOAOwv=W=$asIiD9Rqa111D2XlJyx=B z<2AEZovPJ)jkvvyA!qg*-c9|C&00dC2TMbGMt}btzoP_7^d*u~uKgMJ$908q3bhH` z6G5&V!y(kn*Em4jUy-nC8MJcQVZ_4`7Fo!8qC(DJqcuio;DzYsM zV1p7di$6zrcD__L{3A2 zdRdX$kPB3En*Fx}ja=om%}i@rXju{c*aSgK$ZEr#Z@rn)JYk^$SFXs4eU!;P*tJEU zdpJ-`BfAmCdf!|;%IBj~DJ+6U@gn8oyH1D{&N`gM%BHs{f6LnM^g5llCBWQ9Rkoxn z9S8!y&%a&NUu`lhpMeN&(Z4#f!XsYh%}DCj{^&ryVl?2QJX7?s{pje)pDyZSXgJJrLm77!JGfmS?EDXapbMFEjvRHd#&tD@(+d_#0n z@wlCQ_v2Y$Q!R$Fm^?@CCipEqI4_N@EG#oW-lBHZf7cPb(pn=jF%f<44sb}@&>rKLm9;)pDNweV4wq;6#Xed6JWa6Hf96|4+ zYz#QxKt+ehnR2XaM9nxmFMr&Fy(Q+^iUmuETMITo@x@%lz1y&cJ5OMg3lAC@xPo?~ zPh|*te+-Cl7i)(=+!!sNL_8cZ&Ky@j0q7uv0TiR{u|1{-mP3T{mmrLodPPX)ZBKe+ z1NGFJtXQYE393J!{^@KqSG0ej2d$Lw)KL51iAXZ)!j`anXt`o}8gQ)E?@!gK>PT~{ zto_VCPxQJMro?!Y`XWGuR%ex^xiES12XXNfIvy6WoeEkjoza#71&l-#zKb$DYRm0s z=cTB+57#Q09;cU{l-?>#TGK!qdzT_e<3^cxMG(JdPh15+WsSy>i%X1aJeLl0L4F<0 z<1vmwd~UmVC@j{fsldVvC~bT<%$~gUf5Twn5CR)k9dmqPSkeeVD8v~uiA>T=cr4!H zVhko(-N~W${TOBB26vXtD)N~PrXs@O_NX-@d$L9N(e39jwFzdta z1J1T175}GM!(R?l6kKBpEH3e3#&z=+B_6}L;H(tjmsf)9D8LuQ{_Jn5bx9pf)?>P)TOxLqlDBFl z?HAK3*vg3?7Uj$|`8CBa&WvcxvrCiP_#Wv=h20Ir;V%XOx^)nzLN=e(ZZ=eW6$A4) zvjLEpJFmk50M1)pk~4pa9&{_%f7ol+meN{RA^D+>TBBAa*&&f}jhVMl8Rt&D>$o^Y zg(T{;`v1j99glG7dhv5CSNdcE(JKB#h5xdCOX`W%C93>1KT*Z_oT}C!m6J+RSz3&l-yqp7izR%aS*y(An8MS2vr$#DM#}vC!4;F-Rdsxoz5`8?ackc+ zD66)*BaX5V?06Sn;O$~de=8Nw6EjotDTR>2uIA;)z!~t`SzCr4?_YFoactrOqxdt_ z2}IJC)Dj4ZxL20*gj`J~t1_ie{iVlRJSFA|vJoEi=CZ$zIQR0LM@JrO3uUo7`IqrJiWSf4?6JmjT1F%UjIg3@ct zh?OR}`@=TylPq=-e;CI+d5dsNZMC?jFSB}y6pn6`yL?<^(szFla?7KhwK(Za<&@p9fmEyzGx}|*m!7hCHJ<@q?{#4GtRgs{ z?W0wQ+XAueZPrtL3-q&Ph2B(nF$jLPl&hx<#{w(4CBuyVF+4RgDMMaa+!eM>*SqBA zdQHp>G*1MVf1PI)nI)o>DNx{2Hh~{3>JxG)sBu#J)#vHtOBYndeX%VrpzUGY{0pYkZk!R=Jl$eOJ;pP{(jZ-PKK)8tR9K z4M#xDX}YeIc356wQ>@!BD0+^Asv@6=-mX3eE|BC$fBfjid>L8!Jl8$rTfJxE^H=Lq zd#r*te0~dyCeOU!jGoWt`MYWBe#IE@OqQu$heIh>n(MBTN#Auv9k{qu1Cq$=OMZ0P z>Pqm3?6LW3n{TC8@CpprpOx_cxvw_TXK`N#Ad9pmt6NztM87hkQ^QhwQ%!Tui5_k7 zhMME!e_}-Q6Z>&R-jI%pEY^4OYlfaL64bS*(1?kL%oZnebeUp&YF_$ms*n8PQUR3D zGIx#ghG&$tyf&mw%^u?*1$9Vp{us;QfgmE{!}P?M%pLoGSXVAQCL7g}rZNy%^Sre2DZ#jikjxB! zwy~q2@ZnND-{K~=PVSFtMhJ$nSnLyUO)?6oIiB_NRI~p*aeSv4I{h4q+%q3hQhpnc z57x|Av~S}G))9=G6j6~hwNrADzw4~2e}(+4HF|&OptV+l24cAh^h}T^BVLkcbOxF* zHS8{8aspKVG<+<7yk)WuExm6lMh2}|v**<-F6&g8h6kexg;}K{h=p@CWaeuNsV>Sk z&t;>|UX5ganSMURiaJHpefBI$i8hRbDu1h!lFX5RewR1Pt?#JA#+c4t9Q%#ye?$f= z8$-IYbo;I!rU!!t^emTQC$*yv*pHpIh{W?A_WYjVqvAv{uOOFVf|df}<2p}TIiS}z zZp;;W->52kQd*#Ly-C6ppF?$4q_g&D>|icEjMH{8CT8*P37PZTnu9&yrW+;|xZvMp z9>hy+f57H@M(Kvi)vQ~8mz4(~Lu`1pFg`FLFbM_)D-Ht!8U+9Z6gizRtyUg%#%!j= n2O_pp%*&W5JOmU!h;!fFSm><>>K8zs3}wq06>@L_0|ADh7G4VM diff --git a/src/test/resources/ssl/reload/truststore.jks b/src/test/resources/ssl/reload/truststore.jks index d20b49d5e5c61aa369cbbbd0f3f0da07ce3e4237..2928417daadc2604e54f1c43d834242d3438bc75 100644 GIT binary patch delta 1261 zcmV`>3P}2XuKf?`o@B>2k$a@y zK!+epE7FLrsxUR77V@#r-wgK)yEgAc@tqO?IA1*qY6eMx@qdkOinLpI#^}R0s(?hW zZsBUjt;-qo%jF566l-5$3;Y0vjM*IW=5|M>l`WPXXUer*@o)xZlG=(IH--pEx?@I; zAM$M&Y3M2O$#BV}jkc7~aBc-B{awRe25vqtv<(!0m7urDQF$6RFv8i`!M)0FCuHXeMVM>6*(r6gVPpI}W05*4 zh?*t`tTS8~y=miIbSPm%x5MC7K2__~5b9>bGG32!zJW7N*@C5pyeP(I3oR{H zcqJ^SSvFg6%4Vj2Jx~Bc{Svl&6;_w;GS`}&a~ZDEuUhrzJJb_loLAggc~*a;!|QSb z48nh7IjJXC@(#ONe-8-N%<<&T?gFSc@kfL)%zuKZ=JAf(1EtOG$g!QwO`E$*7|9$n zT5w#G{Bk#>^4_HBDq16`C<9L_PavYZOfUKF2Gp-(gKJI?%S03tg6HOQSx;G0%3DJlGsv6(MV%$#O`?0#%6fM=-j9%UZ`|0T-q{i9;te zq``1Od!Nf`$9J_a!o1cJ28^Z)qG=aRrdFb7)mE1CJ2*L!i3G{WE^l3c^(bGKHv!Q~H++^oAW1cs+2GS(LH>lSOt z$-g3hrkC%_9Fq~6?WDu)%e>!YNIQn}Yfy!bel~uS+FQ~&?-)0j#)cgQ6(RS@@_$W{ zQjWDYxLI|md{4fDPm6xLMZaNrYF}VI{Z-7(-^fu-O*HIvE+mTlOnqrjZvg)z{6Y+) z&7%IPTv!*FtlNOm|B!7S!8j|XNBP4^OcR4;*Z8Ep)%huE5^Wuwj#K#BOVf>pN;O9d zJQa&42HyVgWN+_6oG?tGj`Bn^m1ddfw+hS;oX5cvh(#)H+96_=e1q_+*7o# zs)2JFawEX?Fg`FLFbM_)D-Ht!8U+9Z6g>#YNW96t&QP_@SgLkLay?7Y5CjzEPga+j X@+x?LdBA%FDY9{UuxvyE0|ADhed}F) delta 1261 zcmV-|)x!Ucc-*q%HBFL3TTCi0CWeUF z1;}yqMd9RCFOni+RH*5z9CNB>iUi$`W(jvzY3CjFPTXQWDl=#Yq`=>+su5Z`w{k zCFUR391_GjHzz)WXH2E%7QULza|abx%fIg89=ux~jDPOy#J^6-wP6eDyQo0=CPQ!i zdgm@d?TkHDcsfM}s^`C7_m_()-7JOHN=Y8sY2DUA-WeWp3SDVKJJMa?)A}}wG0^-iNsHal}b)u8kq{nuH@0 zHt5F0LVu2Q?`}Phwe~7Mc84{%_yY#iRZfm84llleq5Z#E#i^e+dm;B%u7AJ(%Uo+f z8J%d!AN-yL;S7+kwWiktY50?d>{^RxoO;BzujZ9qO3Gz4RKr6a?KjMX*E9g>glCvW z-zLi5@amqG=;hVvU10*t(&TG&4S@b^ zC%SJ!kZM`GId)H8OJR^Ea7Dj+%p-~&nx4KIQ0-5+ug0c=`(JHlI55;ILLB##zbE^N zAb;+{zcH2c#0N(L$Y3>^-nQ=J@PtCWS@x)@3i2ERcLJq1`amU8MW2Ur+fy8DqxzQw zf)ZzP@bG|&VRZs zMx)Dy9vEi<)i}Dyq3M~)m=cY~RYU(0t7e@58#;C8SL=EzYS3pyS!XjFprkF+p_T#dY&bu1 zO$@=muz@O=Fg`FLFbM_)D-Ht!8U+9Z6!p*g6qw#h_IJ|k`9(hk&(hD9GXxa;7EDWd Xe0#(=X5d{k9S^SGQ@!Z|0|ADhXfA7`