tests: moved all certificates and keys in certs/

tests/Makefile.am

@@ -1,20 +1,23 @@
 include ../src/common.mk
 
-EXTRA_DIST = ca-key.pem ca.pem common.sh server-cert.pem server-key.pem test1.config \
+EXTRA_DIST = certs/ca-key.pem certs/ca.pem common.sh certs/server-cert.pem \
-	test1.passwd test-user-cert.config user-cert.pem user-key.pem test3.config test-iroute.config \
+	certs/server-key.pem test1.config \
+	test1.passwd test-user-cert.config certs/user-cert.pem certs/user-key.pem \
+	test3.config test-iroute.config \
 	user-config/test user-config-opt/test test-pass-script.config test-multi-cookie.config \
-	test-stress.config user-cert-wrong.pem connect-script test-group.passwd \
+	test-stress.config certs/user-cert-wrong.pem connect-script test-group.passwd \
-	test-group-pass.config user-group-cert.pem user-group-key.pem test-user-group-cert.config \
+	test-group-pass.config certs/user-group-cert.pem certs/user-group-key.pem \
+	test-user-group-cert.config \
 	test-user-group-cert-no-pass.config docker-common.sh test-cookie-timeout.config \
 	test-cookie-timeout-2.config user-config-explicit/test test-explicit-ip.config \
 	test-explicit-ip user-config-explicit/test2 user-config-explicit/test3 \
 	user-config-explicit/test4 test-pass-opt-cert.config test-gssapi.config \
 	test-ban.config test-sighup.config test-gssapi-local-map.config \
 	test-cookie-invalidation.config test-enc-key2.config test-enc-key.config \
-	server-key-ossl.pem server-key-p8.pem proxyproto-unix-test user-cn.pem \
+	certs/server-key-ossl.pem certs/server-key-p8.pem proxyproto-unix-test certs/user-cn.pem \
-	user-cert-testuser.pem test-stress test-user-config.config user-config/testuser \
+	certs/user-cert-testuser.pem test-stress test-user-config.config user-config/testuser \
 	test-sighup-key-change.config test-sighup-key-change.config user-config/testipnet \
-	user-cert-testipnet.pem user-cert-invalid.pem server-cert-ca.pem
+	certs/user-cert-testipnet.pem certs/user-cert-invalid.pem certs/server-cert-ca.pem
 
 SUBDIRS = docker-ocserv docker-kerberos
 

tests/ca-key.pem

@@ -1,55 +0,0 @@
-
------BEGIN RSA PRIVATE KEY-----
-MIIFfgIBAAKCATEAtGsnmCWvwf8eyrB+9Ni87UOGZ1Rd2rQewpBfgzwCEfwTcoWy
-iKRlQQt2XyO+ip/+eUtzOy7HSzy/FsmXVTUX86FySzDC4CeUEvNWAObOgksRXaQe
-m/r6uRsqTRi1uqXmDMeoqKFtqoiE3JYOsmwcNarnx5Q9+dXHwqINS7NuevcIX8UJ
-zRWTGveY3ypMZokk7R/QFmOBZaVYO6HNJWKbmYFUCBcY7HwvCKI7KFcynRdHCob7
-YrFBmeb73qjqIH7zG+666pohZCmS8q1z5RkFnTdT4hGfGF8iuuKLDQCMni+nhz1A
-vkqipZIIDC5hwFh8mpnh1qyDOSXPPhvt66NtncvFON7Bx26bNBS+MD6CkB65Spp2
-5O8zDEaiMXL2w2EL+KpnifSl5XY3oSmfgHmqdQIDAQABAoIBMQCAiid3esIx0PW7
-KuwIvbI8yHMlgzIq81FHBV1HPqWq8pFYcnC0cYvCP8xiFDFYyoyfFmZOsBFFRU5P
-iejLyDv8U/X+JAtzcD9LERshIU/X/Guu75LvRm0DHJuSuhwfkrrIOCetnPVpHkKq
-di6aZ/PhOJZR1wggy3K69IHMgVYhPYc11EgbWVepSuYbeSNdmjA40QWMLfCu3V65
-SwpX0+LnFVc1eJmFrE5wYNe0pomce4J3FWsn8Yu3G5EumWV50KOGKSLklSd+pTdu
-VSxwQMRQn9oKBx3zgyr16PlhJkR4+Q+PA4WIN/IYIUV9SxfsMaij7wgLpxXLxJdM
-3gvxi36pv/Pkax6IdNKRXss4dzd8LBUy3uUKu23TxTCkDrW04MPrN7rRqlh1jvBw
-6KihBoEBAoGZAO02FxxbPPTRVFxjFHgV6EFSSvhPeEkRagoV9o6fn1N3kWTS08fl
-xKO1NDtFYCoZSnbRdgomrMinsYIukrLUQu1TKMrhJ1RDyZfRtfZT429k9iptXq87
-5hVtirC+QoePF+SYwenwvKO7qapODb8COagg6ds1lySj5IuzqVYFV68yyZUP+Flp
-MHn0YFWJF42UV6sSvuGqfuYlAoGZAMK1e+7cRZFnp/zIbgeYG8Ss+vQKgpeuyDJv
-qclkD7HztouQgCw791vMgaXW9y+Rgdkced7eheqI8RGenHbKGifNVQD3Mbl8mkEN
-pu8eVqbOX758fHZz0Iaum3ZWrkSihNpuUcl4dZRz5NfOdxPmltrJCI+7uHOMztzH
-oMu6gQhh+F3lSDUpHdvhWvIshZQu9EbyxFfNyDoRAoGZAILZPoBW19YYDlf0E5t2
-QiqeMVqtw6VSpNKxcNMVu/Z300zxev8egIzpbMlxKG2wi8HlIx7QXKlGz4UHGcbp
-jY2KPMtEzcQOrIpBlQUvGxscbynSMNOqz+1sAoAiQ2KxjTV9CiJ4uCX9Y8bczXpa
-yOE0Xqub8Sa1/WEOls8rnUW4VzgRmiX//0yWf/lO6R4hAQcODRtASEW9AoGZAJ6/
-ixkXfJztr3gZDiSg7tru0fjQ7OKwvUbp5btuGqHS+51UpjvqdGXjGj1VQ9oDv6N9
-ZRvBv9uV5T6hXB457xNOhSSxZlg98CJj+BvzV2DO2B8drfiBup1klRnp2FHbU4gn
-9ATYcr0jtIwDKPEPyyT8TT+rJNsJDcvR8xbHq9Zi0jXz72hwaojQdu8GP66ujbme
-y1hvTfWRAoGZALNT3AbF9EDnJmZlS30MWtBggw83UhszC8XN2tY30AsvsDOS6a0F
-/aQ45EKyCvnqtsCOmB6giDsKRaVncp6lIHSH4kHKT7UvlKadWDW5CNWGR3puoHLk
-UVhyNvBTKo6lPqXqUsVxp16TKeeQKF+DuYuuNZN3pXXsHTiHkRMDCRVEqz7UnZEc
-/Bq/Kh2aOkelkX2S27QzTZGL
------END RSA PRIVATE KEY-----
------BEGIN CERTIFICATE-----
-MIIDtDCCAmygAwIBAgIETeC0yjANBgkqhkiG9w0BAQsFADAZMRcwFQYDVQQDEw5H
-bnVUTFMgVGVzdCBDQTAeFw0xMTA1MjgwODM5MzlaFw0zODEwMTIwODM5NDBaMC8x
-LTArBgNVBAMTJEdudVRMUyBUZXN0IFNlcnZlciAoUlNBIGNlcnRpZmljYXRlKTCC
-AVIwDQYJKoZIhvcNAQEBBQADggE/ADCCAToCggExALRrJ5glr8H/HsqwfvTYvO1D
-hmdUXdq0HsKQX4M8AhH8E3KFsoikZUELdl8jvoqf/nlLczsux0s8vxbJl1U1F/Oh
-ckswwuAnlBLzVgDmzoJLEV2kHpv6+rkbKk0Ytbql5gzHqKihbaqIhNyWDrJsHDWq
-58eUPfnVx8KiDUuzbnr3CF/FCc0Vkxr3mN8qTGaJJO0f0BZjgWWlWDuhzSVim5mB
-VAgXGOx8LwiiOyhXMp0XRwqG+2KxQZnm+96o6iB+8xvuuuqaIWQpkvKtc+UZBZ03
-U+IRnxhfIrriiw0AjJ4vp4c9QL5KoqWSCAwuYcBYfJqZ4dasgzklzz4b7eujbZ3L
-xTjewcdumzQUvjA+gpAeuUqaduTvMwxGojFy9sNhC/iqZ4n0peV2N6Epn4B5qnUC
-AwEAAaOBjTCBijAMBgNVHRMBAf8EAjAAMBQGA1UdEQQNMAuCCWxvY2FsaG9zdDAT
-BgNVHSUEDDAKBggrBgEFBQcDATAPBgNVHQ8BAf8EBQMDB6AAMB0GA1UdDgQWBBR2
-B1hM6rUp9S2ABoyDSoINCeyT3jAfBgNVHSMEGDAWgBRNVrdqAFjxZ5L0pnVVG45T
-AQPvzzANBgkqhkiG9w0BAQsFAAOCATEAdNWmTsh5uIfngyhOWwm7pK2+vgUMY8nH
-gMoMFHt0yuxuImcUMXu3LRS1dZSoCJACBpTFGi/Dg2U0qvOHQcEmc3OwNqHB90R3
-LG5jUSCtq/bYW7h/6Gd9KeWCgZczaHbQ9IPTjLH1dLswVPt+fXKB6Eh0ggSrGATE
-/wRZT/XgDCW8t4C+2+TmJ8ZEzvU87KAPQ9rUBS1+p3EUAR/FfMApApsEig1IZ+ZD
-5joaGBW7zh1H0B9mEKidRvD7yuRJyzAcvD25nT15NLW0QR3dEeXosLc720xxJl1h
-h8NJ7YOvn323mOjR9er4i4D6iJlXmJ8tvN9vakCankWvBzb7plFn2sfMQqICFpRc
-w075D8hdQxfpGffL2tEeKSgjyNHXS7x3dFhUpN3IQjUi2x4f2e/ZXg==
------END CERTIFICATE-----

tests/ca.pem

@@ -1,20 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDPzCCAfegAwIBAgIEUdguzDANBgkqhkiG9w0BAQsFADANMQswCQYDVQQDEwJD
-QTAiGA8yMDEzMDcwNjE0NTA1MloYDzIwMjMwNTE1MTQ1MDUyWjANMQswCQYDVQQD
-EwJDQTCCAVIwDQYJKoZIhvcNAQEBBQADggE/ADCCAToCggExALRrJ5glr8H/Hsqw
-fvTYvO1DhmdUXdq0HsKQX4M8AhH8E3KFsoikZUELdl8jvoqf/nlLczsux0s8vxbJ
-l1U1F/OhckswwuAnlBLzVgDmzoJLEV2kHpv6+rkbKk0Ytbql5gzHqKihbaqIhNyW
-DrJsHDWq58eUPfnVx8KiDUuzbnr3CF/FCc0Vkxr3mN8qTGaJJO0f0BZjgWWlWDuh
-zSVim5mBVAgXGOx8LwiiOyhXMp0XRwqG+2KxQZnm+96o6iB+8xvuuuqaIWQpkvKt
-c+UZBZ03U+IRnxhfIrriiw0AjJ4vp4c9QL5KoqWSCAwuYcBYfJqZ4dasgzklzz4b
-7eujbZ3LxTjewcdumzQUvjA+gpAeuUqaduTvMwxGojFy9sNhC/iqZ4n0peV2N6Ep
-n4B5qnUCAwEAAaNDMEEwDwYDVR0TAQH/BAUwAwEB/zAPBgNVHQ8BAf8EBQMDBwQA
-MB0GA1UdDgQWBBRIIzRTCokxOEpa6sq20qbezh0rGDANBgkqhkiG9w0BAQsFAAOC
-ATEAa1kdd8E1PkM06Isw0S/thEll0rAYsNHwSX17IDUWocTTQlmVXBXcvLqM04QT
-z7WNG4eushLhRpSn8LJQkf4RgvAxOMIjHM9troDbPVoec6k8fZrJ8jfXurOgoOVP
-g+hScT3VDvxgiOVwgXSe2XBryGDaviRuSOHlfy5GPVirLJLZwpcX6RpsHMX9rrZX
-ghvf8dwm4To9H5wT0Le2FnZRoLOTMmpr49bfKJqy/U7AUHaf4saSdkdEIaGOxkPk
-x+SFlr9TjavnJvL0TApkvfNZ1aOVHRHINgaFYHQJ4U0jQ/g7lPmD+UtZWnvSMNXH
-yct5cKOyP4j7Kla1sKPs+oamOQ7pR1Z/GwBxe48FvO7VDi7EkugLwlzoXC2G+4Jg
-fJbi9Ui2FmXEeKkX34f1ONNj9Q==
------END CERTIFICATE-----

tests/common.sh

@@ -52,6 +52,7 @@ update_config() {
 	sed -i 's|@USERNAME@|'${username}'|g' "$file.tmp"
 	sed -i 's|@GROUP@|'${group}'|g' "$file.tmp"
 	sed -i 's|@SRCDIR@|'${srcdir}'|g' "$file.tmp"
+	sed -i 's|@CRLNAME@|'${CRLNAME}'|g' "$file.tmp"
 	CONFIG="$file.tmp"
 }
 

tests/pam-noauth-test

@@ -57,7 +57,7 @@ fi
 echo ""
 echo "Trying with wrong username"
 echo -e "testuser123\n328482\n" >$TMP
-$OPENCONNECT $IP:$PORT_OCSERV -u test --passwd-on-stdin --sslkey ./user-key.pem -c ./user-cert-testuser.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 < $TMP
+$OPENCONNECT $IP:$PORT_OCSERV -u test --passwd-on-stdin --sslkey ./certs/user-key.pem -c ./certs/user-cert-testuser.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 < $TMP
 if test $? = 0;then
 	echo "Authentication with wrong username succeeded! WTF!"
 	stop
@@ -68,7 +68,7 @@ echo "Trying with wrong password"
 #oathtool -w 0 00
 echo -e "xxxxxxxx\n328482\n" >$TMP
 cat $TMP
-$OPENCONNECT $IP:$PORT_OCSERV -u testuser --passwd-on-stdin --sslkey ./user-key.pem -c ./user-cert.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 < $TMP &
+$OPENCONNECT $IP:$PORT_OCSERV -u testuser --passwd-on-stdin --sslkey ./certs/user-key.pem -c ./certs/user-cert.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 < $TMP &
 PID=$!
 
 

tests/proxyproto-unix-test

@@ -58,7 +58,7 @@ fi
 echo ""
 echo "Connecting with correct username"
 $ECHO_E "test" >pass-full$TMP
-$OPENCONNECT $IP:$PORT_OCSERV -b --sslkey ./user-key.pem -c ./user-cn.pem --pid-file $PIDFILE -u test --passwd-on-stdin -v --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 < pass-full$TMP
+$OPENCONNECT $IP:$PORT_OCSERV -b --sslkey ./certs/user-key.pem -c ./certs/user-cn.pem --pid-file $PIDFILE -u test --passwd-on-stdin -v --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 < pass-full$TMP
 if test $? != 0;then
 	echo "Cannot connect to server"
 	stop

tests/radius-test

@@ -168,7 +168,7 @@ fi
 echo "Trying with certificate"
 rm -f out$TMP.pid
 $DOCKER exec $IMAGE_NAME truncate --size=0 /var/log/radius/radacct/$DIR/$FILE
-$OPENCONNECT $IP:$PORT_OCSERV -b --sslkey ./user-key.pem -c ./user-cert.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --pid-file=out$TMP.pid
+$OPENCONNECT $IP:$PORT_OCSERV -b --sslkey ./certs/user-key.pem -c ./certs/user-cert.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --pid-file=out$TMP.pid
 
 sleep 10
 

tests/server-cert-ca.pem

@@ -1,42 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDkTCCAkmgAwIBAgIEUdgu8DANBgkqhkiG9w0BAQsFADANMQswCQYDVQQDEwJD
-QTAiGA8yMDEzMDcwNjE0NTEyOVoYDzIwMjMwNTE1MTQ1MTI5WjAUMRIwEAYDVQQD
-Ewlsb2NhbGhvc3QwggFSMA0GCSqGSIb3DQEBAQUAA4IBPwAwggE6AoIBMQCnOivs
-PxSwLBn28W6QHb+OqfbpcIQJh/NQ81/DlFD6LGTWV4BY4Zb87tC9BBV+X3+lM/j8
-u5HvN3nDWtv4Ge0DryLW6Tcs6FPCt4srEfCkh5l54LrMmWbhFgkVlN5fTqoY0lnd
-YJx2X8WWldRjeL+8E7nFUcFStWrgi9AzgMFrjsL4pql97YAZRXcMoQXVjbRmzVLZ
-IVumQy7c+tl7Eqz8lx/xS/5Fx9tIRunqNS5jEUs8Nn5E6FvraAcy+eI0gXTGk759
-KNPYisSqAuFAmmt/XDTTvvOo6dpAseXqtR2/LjZJWOlXdiZ/yjHg5+RKQ5dt3dk5
-7lAIWER9egIOo/+GAkyek0ZJ5GWU6VxTsFcIl6oy3S7EtB0NCIM7hvhy32QrJ5ZU
-yNncTSf6qMVoedgdAgMBAAGjgY0wgYowDAYDVR0TAQH/BAIwADAUBgNVHREEDTAL
-gglsb2NhbGhvc3QwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDwYDVR0PAQH/BAUDAweg
-ADAdBgNVHQ4EFgQUqCVH9o9E1jUb72ys0de5boT536MwHwYDVR0jBBgwFoAUSCM0
-UwqJMThKWurKttKm3s4dKxgwDQYJKoZIhvcNAQELBQADggExAK7dBCSwM/OJw+6s
-9MJAb7Ygi9xhHSq30Hg3M7DaPC7J9rZB6+IAVb3poOZAtDDtyTqvXH7qY5UMjJC9
-GsFmHPI/OSk2xuJJpG+ZJaP54b7kzTtUD6UCHETsgBk2aNuqNhjXR2fYnR9QME0C
-zZWIDV+5DFEBI97ln30N6PcXvIxp7Rsac3qwzvwt3zL+23kTwgM+DoRPoPO0PHr/
-eQ9hvRU5wA2Vc47zhUXIFy1Jmx7Sf//pw0/wq46VUAjDZ5B09EoCpzBNvOD7P+cF
-FQQ7SId8h8OQ2uOWxT2baeJX0pVbVv+qwOOB1F0q3sjx0dZa/2rxOUZ3wnHG9j8j
-LZSUkZxGpPQffCSpSPma5RhYff8/BncdA8soT0dyEfXIX5V91IXnrlI8XZrADvJM
-zzJKdNg=
------END CERTIFICATE-----
------BEGIN CERTIFICATE-----
-MIIDPzCCAfegAwIBAgIEUdguzDANBgkqhkiG9w0BAQsFADANMQswCQYDVQQDEwJD
-QTAiGA8yMDEzMDcwNjE0NTA1MloYDzIwMjMwNTE1MTQ1MDUyWjANMQswCQYDVQQD
-EwJDQTCCAVIwDQYJKoZIhvcNAQEBBQADggE/ADCCAToCggExALRrJ5glr8H/Hsqw
-fvTYvO1DhmdUXdq0HsKQX4M8AhH8E3KFsoikZUELdl8jvoqf/nlLczsux0s8vxbJ
-l1U1F/OhckswwuAnlBLzVgDmzoJLEV2kHpv6+rkbKk0Ytbql5gzHqKihbaqIhNyW
-DrJsHDWq58eUPfnVx8KiDUuzbnr3CF/FCc0Vkxr3mN8qTGaJJO0f0BZjgWWlWDuh
-zSVim5mBVAgXGOx8LwiiOyhXMp0XRwqG+2KxQZnm+96o6iB+8xvuuuqaIWQpkvKt
-c+UZBZ03U+IRnxhfIrriiw0AjJ4vp4c9QL5KoqWSCAwuYcBYfJqZ4dasgzklzz4b
-7eujbZ3LxTjewcdumzQUvjA+gpAeuUqaduTvMwxGojFy9sNhC/iqZ4n0peV2N6Ep
-n4B5qnUCAwEAAaNDMEEwDwYDVR0TAQH/BAUwAwEB/zAPBgNVHQ8BAf8EBQMDBwQA
-MB0GA1UdDgQWBBRIIzRTCokxOEpa6sq20qbezh0rGDANBgkqhkiG9w0BAQsFAAOC
-ATEAa1kdd8E1PkM06Isw0S/thEll0rAYsNHwSX17IDUWocTTQlmVXBXcvLqM04QT
-z7WNG4eushLhRpSn8LJQkf4RgvAxOMIjHM9troDbPVoec6k8fZrJ8jfXurOgoOVP
-g+hScT3VDvxgiOVwgXSe2XBryGDaviRuSOHlfy5GPVirLJLZwpcX6RpsHMX9rrZX
-ghvf8dwm4To9H5wT0Le2FnZRoLOTMmpr49bfKJqy/U7AUHaf4saSdkdEIaGOxkPk
-x+SFlr9TjavnJvL0TApkvfNZ1aOVHRHINgaFYHQJ4U0jQ/g7lPmD+UtZWnvSMNXH
-yct5cKOyP4j7Kla1sKPs+oamOQ7pR1Z/GwBxe48FvO7VDi7EkugLwlzoXC2G+4Jg
-fJbi9Ui2FmXEeKkX34f1ONNj9Q==
------END CERTIFICATE-----

tests/server-cert.pem

@@ -1,22 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDkTCCAkmgAwIBAgIEUdgu8DANBgkqhkiG9w0BAQsFADANMQswCQYDVQQDEwJD
-QTAiGA8yMDEzMDcwNjE0NTEyOVoYDzIwMjMwNTE1MTQ1MTI5WjAUMRIwEAYDVQQD
-Ewlsb2NhbGhvc3QwggFSMA0GCSqGSIb3DQEBAQUAA4IBPwAwggE6AoIBMQCnOivs
-PxSwLBn28W6QHb+OqfbpcIQJh/NQ81/DlFD6LGTWV4BY4Zb87tC9BBV+X3+lM/j8
-u5HvN3nDWtv4Ge0DryLW6Tcs6FPCt4srEfCkh5l54LrMmWbhFgkVlN5fTqoY0lnd
-YJx2X8WWldRjeL+8E7nFUcFStWrgi9AzgMFrjsL4pql97YAZRXcMoQXVjbRmzVLZ
-IVumQy7c+tl7Eqz8lx/xS/5Fx9tIRunqNS5jEUs8Nn5E6FvraAcy+eI0gXTGk759
-KNPYisSqAuFAmmt/XDTTvvOo6dpAseXqtR2/LjZJWOlXdiZ/yjHg5+RKQ5dt3dk5
-7lAIWER9egIOo/+GAkyek0ZJ5GWU6VxTsFcIl6oy3S7EtB0NCIM7hvhy32QrJ5ZU
-yNncTSf6qMVoedgdAgMBAAGjgY0wgYowDAYDVR0TAQH/BAIwADAUBgNVHREEDTAL
-gglsb2NhbGhvc3QwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDwYDVR0PAQH/BAUDAweg
-ADAdBgNVHQ4EFgQUqCVH9o9E1jUb72ys0de5boT536MwHwYDVR0jBBgwFoAUSCM0
-UwqJMThKWurKttKm3s4dKxgwDQYJKoZIhvcNAQELBQADggExAK7dBCSwM/OJw+6s
-9MJAb7Ygi9xhHSq30Hg3M7DaPC7J9rZB6+IAVb3poOZAtDDtyTqvXH7qY5UMjJC9
-GsFmHPI/OSk2xuJJpG+ZJaP54b7kzTtUD6UCHETsgBk2aNuqNhjXR2fYnR9QME0C
-zZWIDV+5DFEBI97ln30N6PcXvIxp7Rsac3qwzvwt3zL+23kTwgM+DoRPoPO0PHr/
-eQ9hvRU5wA2Vc47zhUXIFy1Jmx7Sf//pw0/wq46VUAjDZ5B09EoCpzBNvOD7P+cF
-FQQ7SId8h8OQ2uOWxT2baeJX0pVbVv+qwOOB1F0q3sjx0dZa/2rxOUZ3wnHG9j8j
-LZSUkZxGpPQffCSpSPma5RhYff8/BncdA8soT0dyEfXIX5V91IXnrlI8XZrADvJM
-zzJKdNg=
------END CERTIFICATE-----

tests/server-key-ossl.pem

@@ -1,35 +0,0 @@
------BEGIN RSA PRIVATE KEY-----
-Proc-Type: 4,ENCRYPTED
-DEK-Info: DES-EDE3-CBC,B247C654353F6D91
-
-Rtgu0cfHpMtnqhRE71tdKd92S8t01+p8xWly9DWlfi5GIsUbjvzlFwMLAGIgkmA0
-fPkUotU0xIlajM+50eUnk1EUCAO8yks1dMjCKUWDa0ybGOLLpY4mvXqlPp5aUizs
-RZrxr1uBjDIPy5SGq0zbf3FQpbKiVvPLkAeXMk4fNXG1oZEpVW+S0TnTR9QPr0JO
-2DyLcXn2jNXjb9AoZgXATqeCbvx93A+3c2qrn7tFeYd2qgpGcrLKCNVTfSa2xjEg
-ag1GX4OzgcMc+QYiLPFDTQAS4rGGnbFvOGunARa6B/QK+D7wfZ3VItt10ueiaPIu
-oMIFutH9gr5wITSSyagUbP6BNIIvGl4gOs7tOHp6Jtx23FaoE8SYWk25IUO2migq
-qnXwgJqDJ3NwEn8ovECVmb4pKJqNqIMeAEUe5ylYUWgsdy5PVcKdVrb8zPZaSuEq
-jhORUmw6udiASO9HcOsypXEGPlbD1XFDPe54u+3XblW7KzXyWgBiv/iu3ChWSXPy
-Du6cbmpckaVURJy39XR+TWVBC/5qYvyrfyGzTlN9OX3HEhspAVDVg2kWdngS7vA8
-wHuKUFTewP9Id8uDfN4bWYVr+LiGDNj7ugMBtabWv0Xph1kh++M4e5T2/rRHqdHA
-N8mIzNxrUrUg9U8bGj+i4+VFizhL/jBTYH6jmxa6uP20qOI1dhFvTg7MdfgnRBOp
-KSXN9RXbEsCFO3tQgabNxznHxJuX7NjalmrmAPNERkDmQsNV1z66ScK/hyS6IcSJ
-1Ci5dK8adhRokj2TupYCrQuUFtlVmURpLv6P1/6HpU5sIfmbXoshz/jzJwg3MdJE
-awX2YyrjA2bUkaLmCu6z+0fAlXDz39839Z99LecYDftuMk+4yU+0X03MugD1LmpP
-ldOG/gl9tlejuKiKJiwNWIg0EfYvG0FuhR1BM5cl61X9LbMAvhQJkVlA+s/YvHx5
-ulWAspMFAlpGRnC9kIuVI//kb/kuUMJR0jHmiuXXOMnPoRmTXj0223os+KKi4BmH
-yota14iEfMZcTllzQzZN+WuAvPMnN9e/OhHUJPNwBGPopckrU0J9pUkeI2NxkVcT
-Sa/8S2DC0Qqlp0/JMVAEACs0N2tdwhAL8AWOt/mHCtQWo9fHEP2eEJmUCTXwyl41
-hDe7biGp9FsMkdCAL16PsbgACLzi5+eC62DzxeHXnUE4T1eWTAr91yxpW0QKnBtw
-quKR/H06nLd+3Rz5UTxIHw5RJk98q9phXHV+inP2A2+plEPMSoLNdVzeeT2HJuhH
-EgFdIuKAY9z5dkHu351itY4/80TfDsGHrfHGoBE134u/hsql1q/dD8Vhi98fsqc3
-dRorIQKfWRUT9gaxXCRnJSVJjsfu4NZnaearjzm9xR8UfcNVEUPQ/71WmGK89N0I
-CrIIFzq7vUJhy8d6vL17TU3zhFjdqfSQOPsaitm/Mht9Iw2GQmEzJkp0cA24uYT6
-Omoyqh37tu/JsttSAghpB9nY9hTBf6KjqeQlwPxlkANac3T0ODWWWSX39slssCxh
-PGLNfwK1tZCsLWzqKZi0i3BVdRWiTgBf9wyXXy/zw27okMrCZWrW4s63Cy88YIUJ
-+gLXAEtAR96bAXgmme3A3QjjpnTWVkDteZ6AbjdAp5PHuPfp3GjdsRHdLJMgvA6I
-PUPPGnY121z4+fVNR3GyzjXugecgX6+u+WdNJPSYI9U8xfGAde6uTPp/xJV6t8Fm
-8h63r2cBjYn5iF2l8ZdqzjFYIk+2NldHEloz+mla5elgsqtZrKjsGhQlh2niYYbU
-0EgLf3LdRIW4r8kEdbbt9+B5XcH56QV9IzP30GGxUlP/G7SoNUSdGFzJ44tluNGC
-dReVkjqxYLp1NKN2F4FbQg==
------END RSA PRIVATE KEY-----

tests/server-key-p8.pem

@@ -1,33 +0,0 @@
------BEGIN ENCRYPTED PRIVATE KEY-----
-MIIFwjAcBgoqhkiG9w0BDAEDMA4ECALw2WwU1fEfAgIBCASCBaBbjqP8l01wSs9q
-8qqHi4ZXARX4Ne5aTrhZEDY2yVHJPTanQVn1kYO23j1WMpT/a4ZlNW0Skc4gFT+h
-JJCqAZTro9Vcix0v3NE0x83cst9UJg+FuA8ROSMRR/09mbybIpH34iUJCFK1H2+F
-oYgPc0xIsLC+HgFRSdh4wibJfevaT435OvQi/Q1jvYxOkv0hGRgSsd1xMCpITY5M
-VLonFA8LSaD7U4vy/mGFw7MoMoggXDgz1uTM1SZiqiGfd4CqVYf+HluAtDkAsPD2
-WtITiA189OBqErzsCC2JmrdM4gqwA45e7tzBNxKarik591MXHFA44cqu/tBgGLpD
-tF+4hhYYbL39LNSQE39GuR6HhoOM0ar2h28SEZjFTCrQr0smuGMdmFZayOX25hT2
-o3zs/T36w+hsPqQCSSKxPXgQ7M9PFWzsiyTEDj84FLro+I0AEaol3O3J9BNfoeDe
-fvRJ76+1gHv78yDEptaDvH9I83hcf2onzjqBHisd5IzBHfuQ6o/76QvFi9MzSXie
-d3mj35xxF5ICBldRgBSlGEKh/RGRa9+FqjAnjFUOI4PlhSD+bLDvZhzm6dNg/6Rp
-h5Pk6WktLV3RYM/8kwDZNwVrlJlKV7o5/H0fKij7sVtEDqrkzFNuLU+Dw+YH3+92
-Um/csjWlOaRBjf1rQKKicDY+oDaKyp7KeyGdE9Cs8YAIVwL/O7QB8OI/t83BcIlh
-1wZ+FDBRADD+rF0ATkFsbbAJ3bFtpnLiJA1ERDbxbF4emBNQ+HIABSYhGsetxn8G
-zxVc4nEefMjfX+1arBuem4yomFFBWva8tlDImNxGFAkmge708DAEiFjTwUABpdqz
-A3RF+kXfiAXqGLGlDm3bYH5d7j11HWle6b2FDPgoU32p1wX1YL52FR4RrsFJIQzr
-fBeJO/MgxqOgEwocVSj9zaLZnMS3a8RRnCXYouAyvbMpnH1TnsCylcOrjO9v7sjX
-8XI6iS0MkWYJIahItCK9VViAXA+4NqLVYyFCDMlv+8lV2XMPNaRQh2dRTWLJIXgd
-FV3z2/6P4MO6cRnZZ2UvYWMOWPPGV4ycaTdMIWYfhifmGlkjaU42pbxgmxSS4xUy
-+Nx+l26s7awKpih7OL+lazejBDTXo45ICl3aDTUDpNpVwpCNRrit43kJnM+QljES
-/xSv9XcW/GbJGh/CoAafscODeGoRYu9sw+xFLzvwUs8tAWSu8leGIMksnOUNCF17
-u+0w+kANrKDLKZZnLQWCUpuJ8c4VSvvfiOCxFrNxS+lbZYxZaIhIpN3LcAZoB4z5
-CJ0rGbOJJ48NkHMugD7sjouj3BNrYvKbTqcGIejISJkXg+8XinByC1KGqq6GigHk
-oETndtfm7pA5mIrqUZ9N6JZ1TL3hM487Xs98AorB35W2hDK1a2VpJQb/TDldDHgP
-7DRdLWsUVOqBBhxaMxSEBkFGXgmXFweGJR+7p3B3tixMDjCRhswa4PPn9wXDZ8Pn
-3EJQ5b4HsmBSuf6BYpz5tbsr++iZzWkfNm3sxHVdej0djcMNMy3xlzUwryTQpIUm
-SPXv6pI1NgLzr6YMcgI5SlZQJxwmhCIhNS+ftrruf+GFeXX2l/hNnVjw5xWhmmX+
-L0P8dGp6os/YsR2rygKMZmMhhs5U55N7HKRsR5F6A0km8IFZ2tIFU4kwsjEj5Ed1
-LKZRCWSDxSeVR7/OpdUtGy2xq9mhsIxQF4zZj1xdFZXD/+0JlMA0tToBktQChosV
-2gKnJphNjFslbOOrZiw8ZJ+JTtsrHHuHLPKylFEMvxTq2siVL6QUu7xF4z2TAne5
-pCfOabcaBPdGw4LD29wdmo6idSlk2moaP9rHJbC1CQKetMeCcxfA3BcvgD1IcecJ
-a6IcMiTiTNKOh88/Y2YB6TF+2AWy/XgQMJ+dLD8ZFBNj14NLh9A=
------END ENCRYPTED PRIVATE KEY-----

tests/server-key.pem

@@ -1,165 +0,0 @@
-Public Key Info:
-	Public Key Algorithm: RSA
-	Key Security Level: Normal (2432 bits)
-
-modulus:
-	00:a7:3a:2b:ec:3f:14:b0:2c:19:f6:f1:6e:90:1d:
-	bf:8e:a9:f6:e9:70:84:09:87:f3:50:f3:5f:c3:94:
-	50:fa:2c:64:d6:57:80:58:e1:96:fc:ee:d0:bd:04:
-	15:7e:5f:7f:a5:33:f8:fc:bb:91:ef:37:79:c3:5a:
-	db:f8:19:ed:03:af:22:d6:e9:37:2c:e8:53:c2:b7:
-	8b:2b:11:f0:a4:87:99:79:e0:ba:cc:99:66:e1:16:
-	09:15:94:de:5f:4e:aa:18:d2:59:dd:60:9c:76:5f:
-	c5:96:95:d4:63:78:bf:bc:13:b9:c5:51:c1:52:b5:
-	6a:e0:8b:d0:33:80:c1:6b:8e:c2:f8:a6:a9:7d:ed:
-	80:19:45:77:0c:a1:05:d5:8d:b4:66:cd:52:d9:21:
-	5b:a6:43:2e:dc:fa:d9:7b:12:ac:fc:97:1f:f1:4b:
-	fe:45:c7:db:48:46:e9:ea:35:2e:63:11:4b:3c:36:
-	7e:44:e8:5b:eb:68:07:32:f9:e2:34:81:74:c6:93:
-	be:7d:28:d3:d8:8a:c4:aa:02:e1:40:9a:6b:7f:5c:
-	34:d3:be:f3:a8:e9:da:40:b1:e5:ea:b5:1d:bf:2e:
-	36:49:58:e9:57:76:26:7f:ca:31:e0:e7:e4:4a:43:
-	97:6d:dd:d9:39:ee:50:08:58:44:7d:7a:02:0e:a3:
-	ff:86:02:4c:9e:93:46:49:e4:65:94:e9:5c:53:b0:
-	57:08:97:aa:32:dd:2e:c4:b4:1d:0d:08:83:3b:86:
-	f8:72:df:64:2b:27:96:54:c8:d9:dc:4d:27:fa:a8:
-	c5:68:79:d8:1d:
-
-public exponent:
-	01:00:01:
-
-private exponent:
-	79:2b:86:6d:fd:5b:41:38:03:6c:52:8e:59:70:a4:
-	bf:7b:da:44:55:d9:e6:8a:12:bd:22:4b:ce:8c:66:
-	8c:8f:a4:55:47:3b:e1:ab:3c:5b:73:b3:de:71:da:
-	1d:22:97:7c:1e:07:99:21:54:61:f0:61:93:32:ff:
-	d6:6a:fa:b9:43:aa:cb:ec:5a:a5:78:86:50:bd:eb:
-	e2:3e:72:8e:d5:0e:59:28:84:52:02:09:70:a9:25:
-	d5:f4:73:98:bd:88:34:ca:1e:81:71:22:8e:07:61:
-	45:76:b5:59:8a:41:eb:c6:a3:42:1d:b6:25:f6:fc:
-	45:4e:29:83:58:15:4e:99:38:1f:31:ab:f8:6a:21:
-	fa:ad:c1:d0:6d:d0:ab:67:ad:43:1c:1d:9e:e5:33:
-	e2:68:f9:e2:fa:d8:9a:e7:36:e0:20:8c:25:4d:e9:
-	17:95:4b:71:38:df:18:71:cd:e0:a0:7f:b2:58:fe:
-	8b:c0:1c:d2:96:4a:17:14:bf:1c:3b:e8:b5:54:2b:
-	8d:47:50:a7:77:56:61:a8:e3:79:dd:70:88:5f:89:
-	a1:f8:78:0d:47:ef:32:98:c1:47:88:d8:33:ed:95:
-	10:90:7f:f1:57:cb:2b:18:c9:58:a1:de:ef:1c:70:
-	5a:58:3c:86:3d:96:17:ad:9c:fd:0b:eb:d8:33:a4:
-	5f:7f:db:97:c0:78:b4:94:56:56:0a:83:b3:d3:02:
-	c6:6f:08:dc:0d:22:8f:2a:4b:25:7a:34:97:8e:63:
-	49:8a:39:d1:c1:1e:9b:93:41:c5:9c:b6:50:9e:ff:
-	7a:37:e4:c1:
-
-prime1:
-	00:cb:13:4a:a3:8f:ad:5c:63:89:30:f3:3b:eb:25:
-	85:d9:6c:ad:6d:50:f8:03:00:d3:1e:e3:ae:ad:54:
-	7a:9b:21:1a:72:18:a6:54:e4:32:58:8d:66:37:65:
-	8c:f7:8f:37:65:ec:f8:ef:2e:a9:c1:78:bb:04:90:
-	aa:fe:0a:f2:7c:80:82:32:c7:db:ef:bc:10:c6:ff:
-	e0:d4:2e:b9:3a:0e:cc:29:28:81:b8:41:78:37:80:
-	69:39:5e:97:44:36:d6:cd:39:af:14:c2:df:f3:67:
-	b7:d4:a7:49:da:f4:d3:ee:14:10:e4:5c:3f:4a:62:
-	52:81:34:d0:8e:f3:7e:d4:42:0a:34:e2:f9:a7:bc:
-	03:f9:c0:48:e8:9b:7f:da:08:ec:db:82:fd:a2:aa:
-	0f:5d:71:
-
-prime2:
-	00:d2:cf:2d:81:00:28:43:76:b3:76:10:3f:04:57:
-	63:94:fa:bb:08:6a:a2:7d:99:4b:0f:ad:76:11:da:
-	5c:2a:2b:33:0a:05:0d:f8:51:9a:4d:b3:40:4b:53:
-	63:c8:c1:96:45:c7:42:35:cf:05:cf:8a:e2:aa:bd:
-	dc:96:c0:fd:c8:c4:dc:4c:0b:1f:43:74:04:cf:13:
-	f5:fa:ea:b6:0d:82:92:8c:03:bd:e9:7b:b1:f2:d0:
-	df:fd:c5:1b:6e:66:b7:ce:f6:12:65:34:c8:15:01:
-	da:36:5e:f9:d8:ad:37:86:52:2b:ea:9f:f5:75:6b:
-	91:b3:01:6f:52:e9:e9:07:16:db:ba:65:e2:49:cc:
-	4f:70:11:39:5c:fa:d2:da:d4:0c:24:17:c4:68:6f:
-	d4:7f:6d:
-
-coefficient:
-	3b:96:f2:06:96:22:14:a2:fe:27:09:2f:43:b0:22:
-	a6:f4:ae:33:c2:f8:be:d5:03:96:7d:4a:d1:eb:7b:
-	9d:51:bd:77:1d:3f:79:ef:62:1d:c3:e9:c2:9a:53:
-	df:ec:33:9b:32:36:f6:e7:40:e8:6c:1b:16:3d:4e:
-	94:97:94:02:5d:cc:23:45:6b:53:8d:b8:7c:0e:24:
-	f9:5c:30:e4:e3:76:5b:f6:1f:74:3d:ca:e7:ef:a0:
-	1e:d3:c8:a2:54:d2:db:06:4b:0d:b0:b9:64:ca:dd:
-	68:44:51:d6:07:c5:ac:5b:e7:11:4b:76:b0:78:ba:
-	aa:b1:af:06:64:0d:27:1a:85:2d:a8:5a:c1:d7:c1:
-	2e:f6:ef:fe:f6:0d:d6:f1:18:fc:0b:14:b1:d7:76:
-	51:1b:
-
-exp1:
-	76:ce:d4:8e:18:92:ee:48:75:8d:23:e0:dc:53:d9:
-	99:38:d1:c5:f0:e7:08:aa:c4:d9:7f:8f:44:6c:f6:
-	46:27:f9:d6:e2:c0:fd:4d:7c:7e:fe:4a:dd:02:16:
-	95:07:3e:fb:ec:c6:3e:f8:e7:eb:fe:fc:3b:51:80:
-	18:9c:c2:fd:40:19:ec:27:ad:6e:f6:72:42:5a:95:
-	68:cd:e5:24:28:60:1d:7c:4b:58:47:45:54:03:56:
-	8c:6f:e0:c3:d1:e9:9d:ab:af:d8:cf:a2:42:3f:5d:
-	f7:95:df:c9:b0:0f:05:6c:cb:ed:2e:63:00:db:c1:
-	35:42:76:fa:0b:4f:1a:53:80:b1:2c:51:af:66:7a:
-	54:f5:c0:32:06:37:a8:92:2c:30:c8:d4:27:04:a3:
-	74:a1:
-
-exp2:
-	18:07:41:5a:88:d8:0e:08:83:a0:1b:6d:f3:62:ba:
-	99:0a:93:32:fc:64:95:08:5a:03:e9:73:a1:c9:4f:
-	e4:06:94:84:b9:da:c3:c9:19:5b:6d:e9:10:2c:eb:
-	1c:c0:e4:0e:04:0e:49:ef:d4:eb:b9:1a:e8:f7:47:
-	23:6f:cf:fd:88:62:cb:d0:20:ba:21:89:42:c9:35:
-	aa:6a:02:62:3b:d5:d4:5b:c0:d3:d2:23:90:57:ba:
-	90:44:5d:42:12:37:35:41:db:0a:ea:1f:3c:35:bf:
-	d7:9e:af:bf:c0:ce:a9:62:c8:5a:af:ec:dc:7b:6c:
-	5a:08:f9:d5:6b:90:02:1c:da:e2:be:26:32:df:34:
-	d6:c3:3f:d4:97:4a:5d:62:fa:17:4b:16:3a:09:35:
-	21:69:
-
-
-Public Key ID: A8:25:47:F6:8F:44:D6:35:1B:EF:6C:AC:D1:D7:B9:6E:84:F9:DF:A3
-Public key's random art:
-+--[ RSA 2432]----+
-|            +    |
-|         . . =   |
-|      o o . . .  |
-|     o =     =  o|
-|    . + S   . O.o|
-|     = . o   * o.|
-|    .   . . . o. |
-|              .+.|
-|             Eo.=|
-+-----------------+
-
------BEGIN RSA PRIVATE KEY-----
-MIIFegIBAAKCATEApzor7D8UsCwZ9vFukB2/jqn26XCECYfzUPNfw5RQ+ixk1leA
-WOGW/O7QvQQVfl9/pTP4/LuR7zd5w1rb+BntA68i1uk3LOhTwreLKxHwpIeZeeC6
-zJlm4RYJFZTeX06qGNJZ3WCcdl/FlpXUY3i/vBO5xVHBUrVq4IvQM4DBa47C+Kap
-fe2AGUV3DKEF1Y20Zs1S2SFbpkMu3PrZexKs/Jcf8Uv+RcfbSEbp6jUuYxFLPDZ+
-ROhb62gHMvniNIF0xpO+fSjT2IrEqgLhQJprf1w0077zqOnaQLHl6rUdvy42SVjp
-V3Ymf8ox4OfkSkOXbd3ZOe5QCFhEfXoCDqP/hgJMnpNGSeRllOlcU7BXCJeqMt0u
-xLQdDQiDO4b4ct9kKyeWVMjZ3E0n+qjFaHnYHQIDAQABAoIBMHkrhm39W0E4A2xS
-jllwpL972kRV2eaKEr0iS86MZoyPpFVHO+GrPFtzs95x2h0il3weB5khVGHwYZMy
-/9Zq+rlDqsvsWqV4hlC96+I+co7VDlkohFICCXCpJdX0c5i9iDTKHoFxIo4HYUV2
-tVmKQevGo0IdtiX2/EVOKYNYFU6ZOB8xq/hqIfqtwdBt0KtnrUMcHZ7lM+Jo+eL6
-2JrnNuAgjCVN6ReVS3E43xhxzeCgf7JY/ovAHNKWShcUvxw76LVUK41HUKd3VmGo
-43ndcIhfiaH4eA1H7zKYwUeI2DPtlRCQf/FXyysYyVih3u8ccFpYPIY9lhetnP0L
-69gzpF9/25fAeLSUVlYKg7PTAsZvCNwNIo8qSyV6NJeOY0mKOdHBHpuTQcWctlCe
-/3o35MECgZkAyxNKo4+tXGOJMPM76yWF2WytbVD4AwDTHuOurVR6myEachimVOQy
-WI1mN2WM9483Zez47y6pwXi7BJCq/gryfICCMsfb77wQxv/g1C65Og7MKSiBuEF4
-N4BpOV6XRDbWzTmvFMLf82e31KdJ2vTT7hQQ5Fw/SmJSgTTQjvN+1EIKNOL5p7wD
-+cBI6Jt/2gjs24L9oqoPXXECgZkA0s8tgQAoQ3azdhA/BFdjlPq7CGqifZlLD612
-EdpcKiszCgUN+FGaTbNAS1NjyMGWRcdCNc8Fz4riqr3clsD9yMTcTAsfQ3QEzxP1
-+uq2DYKSjAO96Xux8tDf/cUbbma3zvYSZTTIFQHaNl752K03hlIr6p/1dWuRswFv
-UunpBxbbumXiScxPcBE5XPrS2tQMJBfEaG/Uf20CgZh2ztSOGJLuSHWNI+DcU9mZ
-ONHF8OcIqsTZf49EbPZGJ/nW4sD9TXx+/krdAhaVBz777MY++Ofr/vw7UYAYnML9
-QBnsJ61u9nJCWpVozeUkKGAdfEtYR0VUA1aMb+DD0emdq6/Yz6JCP133ld/JsA8F
-bMvtLmMA28E1Qnb6C08aU4CxLFGvZnpU9cAyBjeokiwwyNQnBKN0oQKBmBgHQVqI
-2A4Ig6AbbfNiupkKkzL8ZJUIWgPpc6HJT+QGlIS52sPJGVtt6RAs6xzA5A4EDknv
-1Ou5Guj3RyNvz/2IYsvQILohiULJNapqAmI71dRbwNPSI5BXupBEXUISNzVB2wrq
-Hzw1v9eer7/AzqliyFqv7Nx7bFoI+dVrkAIc2uK+JjLfNNbDP9SXSl1i+hdLFjoJ
-NSFpAoGYO5byBpYiFKL+JwkvQ7AipvSuM8L4vtUDln1K0et7nVG9dx0/ee9iHcPp
-wppT3+wzmzI29udA6GwbFj1OlJeUAl3MI0VrU424fA4k+Vww5ON2W/YfdD3K5++g
-HtPIolTS2wZLDbC5ZMrdaERR1gfFrFvnEUt2sHi6qrGvBmQNJxqFLahawdfBLvbv
-/vYN1vEY/AsUsdd2URs=
------END RSA PRIVATE KEY-----

tests/test-append-routes

@@ -42,7 +42,7 @@ wait_server $PID
 
 echo "Checking if routes are appended... "
 
-timeout 15s $OPENCONNECT localhost:$PORT -v --sslkey ${srcdir}/user-key.pem -c ${srcdir}/user-cert-testuser.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 -s /bin/true </dev/null >${TMPFILE1} 2>&1
+timeout 15s $OPENCONNECT localhost:$PORT -v --sslkey ${srcdir}/certs/user-key.pem -c ${srcdir}/certs/user-cert-testuser.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 -s /bin/true </dev/null >${TMPFILE1} 2>&1
 
 echo "cat"
 cat ${TMPFILE1}

tests/test-ban.config

@@ -45,8 +45,8 @@ try-mtu-discovery = false
 #
 # There may be multiple certificate and key pairs and each key
 # should correspond to the preceding certificate.
-server-cert = ./server-cert.pem
+server-cert = ./certs/server-cert.pem
-server-key = ./server-key.pem
+server-key = ./certs/server-key.pem
 
 # Diffie-Hellman parameters. Only needed if you require support
 # for the DHE ciphersuites (by default this server supports ECDHE).

tests/test-cert

@@ -23,16 +23,19 @@ srcdir=${srcdir:-.}
 NO_NEED_ROOT=1
 PORT=4446
 
+CRLNAME=crl.pem.$$.tmp
+CRLTMPLNAME=crl.tmpl.$$.tmp
+
 . `dirname $0`/common.sh
 
 echo "Testing ocserv with certificates... "
 
-echo crl_next_update = 999 >crl.tmpl
+rm -f "${CRLNAME}" "${CRLTMPLNAME}"
-echo crl_number = 1 >>crl.tmpl
+echo crl_next_update = 999 >"${CRLTMPLNAME}"
+echo crl_number = 1 >>"${CRLTMPLNAME}"
 
-rm -f crl.pem
+certtool --generate-crl --load-ca-privkey "${srcdir}/certs/ca-key.pem" --load-ca-certificate "${srcdir}/certs/ca.pem" \
-certtool --generate-crl --load-ca-privkey ca-key.pem --load-ca-certificate ca.pem \
+	--outfile "${CRLNAME}" --template "${CRLTMPLNAME}" >/dev/null 2>&1
-	--outfile crl.pem --template crl.tmpl >/dev/null 2>&1
 if test $? != 0;then
 	kill $PID
 	exit 77
@@ -51,21 +54,21 @@ echo -n "Connecting to obtain cookie (without certificate)... "
 echo "ok (failed as expected)"
 
 echo -n "Connecting to obtain cookie (with invalid certificate)... "
-( LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT -q $ADDRESS:$PORT --sslkey ${srcdir}/user-key.pem -c ${srcdir}/user-cert-invalid.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly </dev/null >/dev/null 2>&1 ) &&
+( LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT -q $ADDRESS:$PORT --sslkey "${srcdir}/certs/user-key.pem" -c "${srcdir}/certs/user-cert-invalid.pem" --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly </dev/null >/dev/null 2>&1 ) &&
 	fail $PID "Connected with invalid certificate!"
 
 echo "ok (failed as expected)"
 
 echo -n "Connecting to obtain cookie (with certificate)... "
-( LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT -q $ADDRESS:$PORT --sslkey ${srcdir}/user-key.pem -c ${srcdir}/user-cert.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly </dev/null >/dev/null 2>&1 ) ||
+( LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT -q $ADDRESS:$PORT --sslkey "${srcdir}/certs/user-key.pem" -c "${srcdir}/certs/user-cert.pem" --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly </dev/null >/dev/null 2>&1 ) ||
 	fail $PID "Could not connect with certificate!"
 
 echo ok
 
 echo "Try a DER encoded CRL"
 
-certtool --generate-crl --load-ca-privkey ca-key.pem --load-ca-certificate ca.pem \
+certtool --generate-crl --load-ca-privkey "${srcdir}/certs/ca-key.pem" --load-ca-certificate "${srcdir}/certs/ca.pem" \
-	--outder --outfile crl.pem --template crl.tmpl >/dev/null 2>&1
+	--outder --outfile "${CRLNAME}" --template "${CRLTMPLNAME}" >/dev/null 2>&1
 if test $? != 0;then
 	kill $PID
 	exit 77
@@ -76,15 +79,15 @@ kill -HUP $PID
 sleep 5
 
 echo -n "Connecting to obtain cookie (with DER CRL)... "
-( LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT -q $ADDRESS:$PORT --sslkey ${srcdir}/user-key.pem -c ${srcdir}/user-cert.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly </dev/null >/dev/null 2>&1 ) ||
+( LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT -q $ADDRESS:$PORT --sslkey "${srcdir}/certs/user-key.pem" -c "${srcdir}/certs/user-cert.pem" --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly </dev/null >/dev/null 2>&1 ) ||
 	fail $PID "Could not connect with certificate!"
 
 echo ok
 
 
 #revoke the certificate
-certtool --generate-crl --load-ca-privkey ca-key.pem --load-ca-certificate ca.pem \
+certtool --generate-crl --load-ca-privkey "${srcdir}/certs/ca-key.pem" --load-ca-certificate "${srcdir}/certs/ca.pem" \
-	--outder --load-certificate ${srcdir}/user-cert.pem --outfile crl.pem --template crl.tmpl >/dev/null 2>&1
+	--outder --load-certificate "${srcdir}/certs/user-cert.pem" --outfile "${CRLNAME}" --template "${CRLTMPLNAME}" >/dev/null 2>&1
 if test $? != 0;then
 	cleanup
 	exit 77
@@ -95,7 +98,7 @@ kill -HUP $PID
 sleep 5
 
 echo -n "Connecting to obtain cookie (with revoked certificate)... "
-( LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT -q $ADDRESS:$PORT --sslkey ${srcdir}/user-key.pem -c ${srcdir}/user-cert.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly </dev/null >/dev/null 2>&1 ) &&
+( LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT -q $ADDRESS:$PORT --sslkey "${srcdir}/certs/user-key.pem" -c "${srcdir}/certs/user-cert.pem" --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly </dev/null >/dev/null 2>&1 ) &&
 	fail $PID "Connected with revoked certificate!"
 
 echo "ok (failed as expected)"
@@ -104,7 +107,7 @@ echo "ok (failed as expected)"
 #( echo "test" | LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT -q $ADDRESS:$PORT -u test --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --script=/bin/true ) ||
 #	fail $PID "Could not connect to server"
 
-rm -f crl.pem crl.tmpl
+rm -f "${CRLNAME}" "${CRLTMPLNAME}"
 
 cleanup
 if test $? != 0;then

tests/test-cookie-invalidation.config

@@ -45,8 +45,8 @@ try-mtu-discovery = false
 #
 # There may be multiple certificate and key pairs and each key
 # should correspond to the preceding certificate.
-server-cert = ./server-cert.pem
+server-cert = ./certs/server-cert.pem
-server-key = ./server-key.pem
+server-key = ./certs/server-key.pem
 
 # Diffie-Hellman parameters. Only needed if you require support
 # for the DHE ciphersuites (by default this server supports ECDHE).

tests/test-cookie-timeout-2.config

@@ -45,8 +45,8 @@ try-mtu-discovery = false
 #
 # There may be multiple certificate and key pairs and each key
 # should correspond to the preceding certificate.
-server-cert = ./server-cert.pem
+server-cert = ./certs/server-cert.pem
-server-key = ./server-key.pem
+server-key = ./certs/server-key.pem
 
 # Diffie-Hellman parameters. Only needed if you require support
 # for the DHE ciphersuites (by default this server supports ECDHE).

tests/test-cookie-timeout.config

@@ -45,8 +45,8 @@ try-mtu-discovery = false
 #
 # There may be multiple certificate and key pairs and each key
 # should correspond to the preceding certificate.
-server-cert = ./server-cert.pem
+server-cert = ./certs/server-cert.pem
-server-key = ./server-key.pem
+server-key = ./certs/server-key.pem
 
 # Diffie-Hellman parameters. Only needed if you require support
 # for the DHE ciphersuites (by default this server supports ECDHE).

tests/test-enc-key.config

@@ -45,8 +45,8 @@ try-mtu-discovery = false
 #
 # There may be multiple certificate and key pairs and each key
 # should correspond to the preceding certificate.
-server-cert = @SRCDIR@/server-cert.pem
+server-cert = @SRCDIR@/certs/server-cert.pem
-server-key = @SRCDIR@/server-key-p8.pem
+server-key = @SRCDIR@/certs/server-key-p8.pem
 
 key-pin = 1234
 

tests/test-enc-key2.config

@@ -45,8 +45,8 @@ try-mtu-discovery = false
 #
 # There may be multiple certificate and key pairs and each key
 # should correspond to the preceding certificate.
-server-cert = @SRCDIR@/server-cert.pem
+server-cert = @SRCDIR@/certs/server-cert.pem
-server-key = @SRCDIR@/server-key-ossl.pem
+server-key = @SRCDIR@/certs/server-key-ossl.pem
 
 key-pin = 1234
 

tests/test-explicit-ip.config

@@ -45,8 +45,8 @@ try-mtu-discovery = false
 #
 # There may be multiple certificate and key pairs and each key
 # should correspond to the preceding certificate.
-server-cert = ./server-cert.pem
+server-cert = ./certs/server-cert.pem
-server-key = ./server-key.pem
+server-key = ./certs/server-key.pem
 
 # Diffie-Hellman parameters. Only needed if you require support
 # for the DHE ciphersuites (by default this server supports ECDHE).
@@ -72,7 +72,7 @@ server-key = ./server-key.pem
 # The Certificate Authority that will be used
 # to verify clients if certificate authentication
 # is set.
-ca-cert = ./ca.pem
+ca-cert = ./certs/ca.pem
 
 # The object identifier that will be used to read the user ID in the client certificate.
 # The object identifier should be part of the certificate's DN

tests/test-get-cert

@@ -40,7 +40,7 @@ echo -n "Connecting to GET PEM certificate... "
 ( LD_PRELOAD=libsocket_wrapper.so curl https://$ADDRESS:$PORT/cert.pem --insecure > $TMPFILE 2>/dev/null ) ||
 	fail $PID "Could not get certificate!"
 
-cmp $TMPFILE "${srcdir}/server-cert.pem"
+cmp $TMPFILE "${srcdir}/certs/server-cert.pem"
 if test $? != 0;then
 	fail $PID "failed, certs not match"
 fi
@@ -52,7 +52,7 @@ echo -n "Connecting to GET DER certificate... "
 	fail $PID "Could not get DER certificate!"
 
 certtool --inder -i <"$TMPFILE" >$TMPFILE2
-certtool -i <"${srcdir}/server-cert.pem" >$TMPFILE
+certtool -i <"${srcdir}/certs/server-cert.pem" >$TMPFILE
 cmp "$TMPFILE" "$TMPFILE2"
 if test $? != 0;then
 	fail $PID "failed, certs not match"
@@ -64,7 +64,7 @@ echo -n "Connecting to GET CA PEM certificate... "
 ( LD_PRELOAD=libsocket_wrapper.so curl https://$ADDRESS:$PORT/ca.pem --insecure > $TMPFILE 2>/dev/null ) ||
 	fail $PID "Could not get certificate!"
 
-cmp $TMPFILE "${srcdir}/ca.pem"
+cmp $TMPFILE "${srcdir}/certs/ca.pem"
 if test $? != 0;then
 	fail $PID "failed, certs not match"
 fi
@@ -76,7 +76,7 @@ echo -n "Connecting to GET CA DER certificate... "
 	fail $PID "Could not get DER certificate!"
 
 certtool --inder -i <"$TMPFILE" >$TMPFILE2
-certtool -i <"${srcdir}/ca.pem" >$TMPFILE
+certtool -i <"${srcdir}/certs/ca.pem" >$TMPFILE
 cmp "$TMPFILE" "$TMPFILE2"
 if test $? != 0;then
 	fail $PID "failed, certs not match"

tests/test-group-cert.config

@@ -52,8 +52,8 @@ try-mtu-discovery = false
 #
 # There may be multiple certificate and key pairs and each key
 # should correspond to the preceding certificate.
-server-cert = ./server-cert.pem
+server-cert = ./certs/server-cert.pem
-server-key = ./server-key.pem
+server-key = ./certs/server-key.pem
 
 # Diffie-Hellman parameters. Only needed if you require support
 # for the DHE ciphersuites (by default this server supports ECDHE).
@@ -79,7 +79,7 @@ server-key = ./server-key.pem
 # The Certificate Authority that will be used
 # to verify clients if certificate authentication
 # is set.
-ca-cert = ./ca.pem
+ca-cert = ./certs/ca.pem
 
 # The object identifier that will be used to read the user ID in the client certificate.
 # The object identifier should be part of the certificate's DN

tests/test-group-pass.config

@@ -45,8 +45,8 @@ try-mtu-discovery = false
 #
 # There may be multiple certificate and key pairs and each key
 # should correspond to the preceding certificate.
-server-cert = @SRCDIR@/server-cert.pem
+server-cert = @SRCDIR@/certs/server-cert.pem
-server-key = @SRCDIR@/server-key.pem
+server-key = @SRCDIR@/certs/server-key.pem
 
 # Diffie-Hellman parameters. Only needed if you require support
 # for the DHE ciphersuites (by default this server supports ECDHE).

tests/test-gssapi

@@ -44,12 +44,12 @@ launch_server -d 1 -f -c test-gssapi.config & PID=$!
 wait_server $PID
 
 echo "Connecting with curl... "
-curl https://test:testpass@localhost:4449 --cacert ca.pem --negotiate -f -v ||
+curl https://test:testpass@localhost:4449 --cacert ${srcdir}/certs/ca.pem --negotiate -f -v ||
 	fail $PID "Could not connect to server"
 
 export NTLM_USER_FILE=$srcdir/ntlm.pass.wrong
 echo "Connecting with curl and wrong password... "
-curl https://test:wrongpass@localhost:4449 --cacert ca.pem --negotiate -f -v &&
+curl https://test:wrongpass@localhost:4449 --cacert ${srcdir}/certs/ca.pem --negotiate -f -v &&
 	fail $PID "Connected to server with wrong password"
 
 kill $PID
@@ -64,7 +64,7 @@ launch_server -d 1 -f -c test-gssapi-local-map.config & PID=$!
 wait_server $PID
 
 echo "Connecting with curl... "
-curl https://test:testpass@localhost:4449 --cacert ca.pem --negotiate -f -v &&
+curl https://test:testpass@localhost:4449 --cacert ${srcdir}/certs/ca.pem --negotiate -f -v &&
 	fail $PID "Connected to server even when local map was required"
 
 rm -f $srcdir/ntlm.pass

tests/test-gssapi-local-map.config

@@ -45,8 +45,8 @@ try-mtu-discovery = false
 #
 # There may be multiple certificate and key pairs and each key
 # should correspond to the preceding certificate.
-server-cert = ./server-cert.pem
+server-cert = ./certs/server-cert.pem
-server-key = ./server-key.pem
+server-key = ./certs/server-key.pem
 
 # Diffie-Hellman parameters. Only needed if you require support
 # for the DHE ciphersuites (by default this server supports ECDHE).

tests/test-gssapi.config

@@ -45,8 +45,8 @@ try-mtu-discovery = false
 #
 # There may be multiple certificate and key pairs and each key
 # should correspond to the preceding certificate.
-server-cert = ./server-cert.pem
+server-cert = ./certs/server-cert.pem
-server-key = ./server-key.pem
+server-key = ./certs/server-key.pem
 
 # Diffie-Hellman parameters. Only needed if you require support
 # for the DHE ciphersuites (by default this server supports ECDHE).

tests/test-iroute

@@ -32,13 +32,13 @@ launch_server -d 1 -f -c ${srcdir}/test-iroute.config & PID=$!
 wait_server $PID
 
 echo -n "Connecting to obtain cookie (with certificate)... "
-( $OPENCONNECT -q localhost:$PORT --sslkey ${srcdir}/user-key.pem -c ${srcdir}/user-cert.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly </dev/null ) ||
+( $OPENCONNECT -q localhost:$PORT --sslkey ${srcdir}/certs/user-key.pem -c ${srcdir}/certs/user-cert.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly </dev/null ) ||
 	fail $PID "Could not connect with certificate!"
 
 echo ok
 
 echo -n "Re-connecting to force script run... "
-$OPENCONNECT -q localhost:$PORT --sslkey ${srcdir}/user-key.pem -c ${srcdir}/user-cert.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 -s /bin/true </dev/null &
+$OPENCONNECT -q localhost:$PORT --sslkey ${srcdir}/certs/user-key.pem -c ${srcdir}/certs/user-cert.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 -s /bin/true </dev/null &
 kpid=$!
 echo ok
 

tests/test-iroute.config

@@ -45,8 +45,8 @@ try-mtu-discovery = false
 #
 # There may be multiple certificate and key pairs and each key
 # should correspond to the preceding certificate.
-server-cert = ./server-cert.pem
+server-cert = ./certs/server-cert.pem
-server-key = ./server-key.pem
+server-key = ./certs/server-key.pem
 
 # Diffie-Hellman parameters. Only needed if you require support
 # for the DHE ciphersuites (by default this server supports ECDHE).
@@ -72,7 +72,7 @@ server-key = ./server-key.pem
 # The Certificate Authority that will be used
 # to verify clients if certificate authentication
 # is set.
-ca-cert = ./ca.pem
+ca-cert = ./certs/ca.pem
 
 # The object identifier that will be used to read the user ID in the client certificate.
 # The object identifier should be part of the certificate's DN

tests/test-multi-cookie.config

@@ -45,8 +45,8 @@ try-mtu-discovery = false
 #
 # There may be multiple certificate and key pairs and each key
 # should correspond to the preceding certificate.
-server-cert = ./server-cert.pem
+server-cert = ./certs/server-cert.pem
-server-key = ./server-key.pem
+server-key = ./certs/server-key.pem
 
 # Diffie-Hellman parameters. Only needed if you require support
 # for the DHE ciphersuites (by default this server supports ECDHE).

tests/test-pass-cert

@@ -38,13 +38,13 @@ echo -n "Connecting to obtain cookie (without certificate)... "
 echo ok
 
 echo -n "Connecting to obtain cookie (with certificate)... "
-( echo "test" | LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT -q $ADDRESS:$PORT --sslkey ${srcdir}/user-key.pem -c ${srcdir}/user-cert.pem -u test --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly >/dev/null 2>&1 ) ||
+( echo "test" | LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT -q $ADDRESS:$PORT --sslkey ${srcdir}/certs/user-key.pem -c ${srcdir}/certs/user-cert.pem -u test --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly >/dev/null 2>&1 ) ||
 	fail $PID "Could not connect with certificate!"
 
 echo ok
 
 echo -n "Connecting to obtain cookie (with incorrect certificate)... "
-( echo "test" | LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT -q $ADDRESS:$PORT --sslkey ${srcdir}/user-key.pem -c ${srcdir}/user-cert-wrong.pem -u test --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly >/dev/null 2>&1 ) &&
+( echo "test" | LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT -q $ADDRESS:$PORT --sslkey ${srcdir}/certs/user-key.pem -c ${srcdir}/certs/user-cert-wrong.pem -u test --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly >/dev/null 2>&1 ) &&
 	fail $PID "Should not have connected with wrong certificate!"
 
 echo ok

tests/test-pass-group-cert

@@ -38,31 +38,31 @@ echo -n "Connecting to obtain cookie (without certificate)... "
 echo ok
 
 echo -n "Connecting to obtain cookie - group1 (with certificate)... "
-( echo "test" | LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT --authgroup group1 -q $ADDRESS:$PORT --sslkey ${srcdir}/user-group-key.pem -c ${srcdir}/user-group-cert.pem -u test --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly >/dev/null 2>&1 ) ||
+( echo "test" | LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT --authgroup group1 -q $ADDRESS:$PORT --sslkey ${srcdir}/certs/user-group-key.pem -c ${srcdir}/certs/user-group-cert.pem -u test --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly >/dev/null 2>&1 ) ||
 	fail $PID "Could not connect with certificate!"
 
 echo ok
 
 echo -n "Connecting to obtain cookie - DEFAULT (with certificate)... "
-( echo "test" | LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT --authgroup DEFAULT -q $ADDRESS:$PORT --sslkey ${srcdir}/user-group-key.pem -c ${srcdir}/user-group-cert.pem -u test --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly >/dev/null 2>&1 ) ||
+( echo "test" | LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT --authgroup DEFAULT -q $ADDRESS:$PORT --sslkey ${srcdir}/certs/user-group-key.pem -c ${srcdir}/certs/user-group-cert.pem -u test --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly >/dev/null 2>&1 ) ||
 	fail $PID "Could not connect with certificate!"
 
 echo ok
 
 echo -n "Connecting to obtain cookie - group2 (with certificate)... "
-( echo "test" | LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT --authgroup group2 -q $ADDRESS:$PORT --sslkey ${srcdir}/user-group-key.pem -c ${srcdir}/user-group-cert.pem -u test --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly >/dev/null 2>&1 ) ||
+( echo "test" | LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT --authgroup group2 -q $ADDRESS:$PORT --sslkey ${srcdir}/certs/user-group-key.pem -c ${srcdir}/certs/user-group-cert.pem -u test --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly >/dev/null 2>&1 ) ||
 	fail $PID "Could not connect with certificate!"
 
 echo ok
 
 echo -n "Connecting to obtain cookie - group3 (hidden) (with certificate)... "
-( echo "test" | LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT --authgroup group3 -q $ADDRESS:$PORT --sslkey ${srcdir}/user-group-key.pem -c ${srcdir}/user-group-cert.pem -u test --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly >/dev/null 2>&1 ) ||
+( echo "test" | LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT --authgroup group3 -q $ADDRESS:$PORT --sslkey ${srcdir}/certs/user-group-key.pem -c ${srcdir}/certs/user-group-cert.pem -u test --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly >/dev/null 2>&1 ) ||
 	fail $PID "Could not connect with certificate!"
 
 echo ok
 
 echo -n "Connecting to obtain cookie - group4 (with certificate)... "
-( echo "test" | LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT --authgroup group4 -q $ADDRESS:$PORT --sslkey ${srcdir}/user-group-key.pem -c ${srcdir}/user-group-cert.pem -u test --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly >/dev/null 2>&1 ) &&
+( echo "test" | LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT --authgroup group4 -q $ADDRESS:$PORT --sslkey ${srcdir}/certs/user-group-key.pem -c ${srcdir}/certs/user-group-cert.pem -u test --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly >/dev/null 2>&1 ) &&
 	fail $PID "Got cookie when it shouldn't!"
 
 echo ok

tests/test-pass-group-cert-no-pass

@@ -38,19 +38,19 @@ LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT --authgroup group1 -q $ADDRESS:$POR
 echo ok
 
 echo -n "Connecting to obtain cookie - group1 (with certificate)... "
-LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT --authgroup group1 -q $ADDRESS:$PORT --sslkey ${srcdir}/user-group-key.pem -c ${srcdir}/user-group-cert.pem -u test --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly >/dev/null 2>&1 ||
+LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT --authgroup group1 -q $ADDRESS:$PORT --sslkey ${srcdir}/certs/user-group-key.pem -c ${srcdir}/certs/user-group-cert.pem -u test --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly >/dev/null 2>&1 ||
 	fail $PID "Could not connect with certificate!"
 
 echo ok
 
 echo -n "Connecting to obtain cookie - group2 (with certificate)... "
-LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT --authgroup group2 -q $ADDRESS:$PORT --sslkey ${srcdir}/user-group-key.pem -c ${srcdir}/user-group-cert.pem -u test --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly >/dev/null 2>&1 ||
+LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT --authgroup group2 -q $ADDRESS:$PORT --sslkey ${srcdir}/certs/user-group-key.pem -c ${srcdir}/certs/user-group-cert.pem -u test --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly >/dev/null 2>&1 ||
 	fail $PID "Could not connect with certificate!"
 
 echo ok
 
 echo -n "Connecting to obtain cookie - group3 (hidden) (with certificate)... "
-LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT --authgroup group3 -q $ADDRESS:$PORT --sslkey ${srcdir}/user-group-key.pem -c ${srcdir}/user-group-cert.pem -u test --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly >/dev/null 2>&1 ||
+LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT --authgroup group3 -q $ADDRESS:$PORT --sslkey ${srcdir}/certs/user-group-key.pem -c ${srcdir}/certs/user-group-cert.pem -u test --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly >/dev/null 2>&1 ||
 	fail $PID "Could not connect with certificate!"
 
 echo ok

tests/test-pass-opt-cert

@@ -71,14 +71,14 @@ fi
 echo ok
 
 echo -n "Connecting to obtain cookie (with certificate)... "
-connect "-u test --sslkey ./user-key.pem -c ./user-cert.pem"
+connect "-u test --sslkey ./certs/user-key.pem -c ./certs/user-cert.pem"
 if test $? != 0;then
 	fail $PID "Failed to connect with certificate!"
 fi
 echo ok
 
 echo -n "Connecting to obtain cookie (with incorrect certificate)... "
-connect "-u test --sslkey ./user-key.pem -c ./user-cert-wrong.pem" ""
+connect "-u test --sslkey ./certs/user-key.pem -c ./certs/user-cert-wrong.pem" ""
 if test $? = 0;then
 	fail $PID "Should not have connected with wrong certificate!"
 fi

tests/test-pass-opt-cert.config

@@ -45,8 +45,8 @@ try-mtu-discovery = false
 #
 # There may be multiple certificate and key pairs and each key
 # should correspond to the preceding certificate.
-server-cert = ./server-cert.pem
+server-cert = ./certs/server-cert.pem
-server-key = ./server-key.pem
+server-key = ./certs/server-key.pem
 
 # Diffie-Hellman parameters. Only needed if you require support
 # for the DHE ciphersuites (by default this server supports ECDHE).
@@ -72,7 +72,7 @@ server-key = ./server-key.pem
 # The Certificate Authority that will be used
 # to verify clients if certificate authentication
 # is set.
-ca-cert = ./ca.pem
+ca-cert = ./certs/ca.pem
 
 # The object identifier that will be used to read the user ID in the client certificate.
 # The object identifier should be part of the certificate's DN

tests/test-pass-script.config

@@ -45,8 +45,8 @@ try-mtu-discovery = false
 #
 # There may be multiple certificate and key pairs and each key
 # should correspond to the preceding certificate.
-server-cert = ./server-cert.pem
+server-cert = ./certs/server-cert.pem
-server-key = ./server-key.pem
+server-key = ./certs/server-key.pem
 
 # Diffie-Hellman parameters. Only needed if you require support
 # for the DHE ciphersuites (by default this server supports ECDHE).

tests/test-sighup

@@ -34,7 +34,7 @@ PID=$!
 wait_server $PID
 
 echo -n "Connecting to obtain cookie (with certificate)... "
-( LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT -q $ADDRESS:$PORT --sslkey ${srcdir}/user-key.pem -c ${srcdir}/user-cert.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly </dev/null >/dev/null 2>&1 ) ||
+( LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT -q $ADDRESS:$PORT --sslkey ${srcdir}/certs/user-key.pem -c ${srcdir}/certs/user-cert.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly </dev/null >/dev/null 2>&1 ) ||
 	fail $PID "Could not connect with certificate!"
 
 echo ok
@@ -44,7 +44,7 @@ kill -HUP $PID
 sleep 5
 
 echo -n "Connecting to obtain cookie (with certificate)... "
-( LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT -q $ADDRESS:$PORT --sslkey ${srcdir}/user-key.pem -c ${srcdir}/user-cert.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly </dev/null >/dev/null 2>&1 ) ||
+( LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT -q $ADDRESS:$PORT --sslkey ${srcdir}/certs/user-key.pem -c ${srcdir}/certs/user-cert.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly </dev/null >/dev/null 2>&1 ) ||
 	fail $PID "Could not connect with certificate!"
 
 echo ok
@@ -57,7 +57,7 @@ kill -HUP $PID
 sleep 5
 
 echo -n "Connecting to obtain cookie (with certificate)... "
-( LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT -q $ADDRESS:$PORT --sslkey ${srcdir}/user-key.pem -c ${srcdir}/user-cert.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly </dev/null >/dev/null 2>&1 ) ||
+( LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT -q $ADDRESS:$PORT --sslkey ${srcdir}/certs/user-key.pem -c ${srcdir}/certs/user-cert.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly </dev/null >/dev/null 2>&1 ) ||
 	fail $PID "Could not connect with certificate!"
 
 echo ok

tests/test-sighup-key-change

@@ -44,8 +44,8 @@ update_config test-sighup-key-change.config
 # changing server cert
 sed -i 's/server-cert.pem/'"${SERVER_CERT}"'/' "${CONFIG}"
 sed -i 's/server-key.pem/'"${SERVER_KEY}"'/' "${CONFIG}"
-cp "${srcdir}/server-cert.pem" "${SERVER_CERT}"
+cp "${srcdir}/certs/server-cert.pem" "${SERVER_CERT}"
-cp "${srcdir}/server-key.pem" "${SERVER_KEY}"
+cp "${srcdir}/certs/server-key.pem" "${SERVER_KEY}"
 
 launch_simple_sr_server -d 1 -f -c "${CONFIG}"
 PID=$!
@@ -53,7 +53,7 @@ PID=$!
 wait_server $PID
 
 echo -n "Connecting to obtain cookie (with certificate)... "
-( LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT -q $ADDRESS:$PORT --sslkey "${srcdir}/user-key.pem" -c "${srcdir}/user-cert.pem" --servercert="sha1:a82547f68f44d6351bef6cacd1d7b96e84f9dfa3" --cookieonly </dev/null >/dev/null 2>&1 ) ||
+( LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT -q $ADDRESS:$PORT --sslkey "${srcdir}/certs/user-key.pem" -c "${srcdir}/certs/user-cert.pem" --servercert="sha1:a82547f68f44d6351bef6cacd1d7b96e84f9dfa3" --cookieonly </dev/null >/dev/null 2>&1 ) ||
 	fail $PID "Could not connect with certificate!"
 
 echo ok
@@ -67,7 +67,7 @@ kill -HUP $PID
 sleep 5
 
 echo -n "Connecting to obtain cookie (with certificate)... "
-( LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT -q $ADDRESS:$PORT --sslkey "${srcdir}/user-key.pem" -c "${srcdir}/user-cert.pem" --servercert="sha1:a82547f68f44d6351bef6cacd1d7b96e84f9dfa3" --cookieonly </dev/null >/dev/null 2>&1 ) ||
+( LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT -q $ADDRESS:$PORT --sslkey "${srcdir}/certs/user-key.pem" -c "${srcdir}/certs/user-cert.pem" --servercert="sha1:a82547f68f44d6351bef6cacd1d7b96e84f9dfa3" --cookieonly </dev/null >/dev/null 2>&1 ) ||
 	fail $PID "Could not connect with certificate!"
 
 echo ok
@@ -82,7 +82,7 @@ kill -HUP $PID
 sleep 5
 
 echo -n "Connecting to obtain cookie (with certificate)... "
-( LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT -q $ADDRESS:$PORT --sslkey "${srcdir}/user-key.pem" -c "${srcdir}/user-cert.pem" --no-cert-check --cookieonly </dev/null >/dev/null 2>&1 ) ||
+( LD_PRELOAD=libsocket_wrapper.so $OPENCONNECT -q $ADDRESS:$PORT --sslkey "${srcdir}/certs/user-key.pem" -c "${srcdir}/certs/user-cert.pem" --no-cert-check --cookieonly </dev/null >/dev/null 2>&1 ) ||
 	fail $PID "Could not connect with certificate!"
 
 echo ok

tests/test-sighup-key-change.config

@@ -72,7 +72,7 @@ server-key = server-key.pem
 # The Certificate Authority that will be used
 # to verify clients if certificate authentication
 # is set.
-ca-cert = @SRCDIR@/ca.pem
+ca-cert = @SRCDIR@/certs/ca.pem
 
 # The object identifier that will be used to read the user ID in the client certificate.
 # The object identifier should be part of the certificate's DN

tests/test-sighup.config

@@ -45,8 +45,8 @@ try-mtu-discovery = false
 #
 # There may be multiple certificate and key pairs and each key
 # should correspond to the preceding certificate.
-server-cert = @SRCDIR@/server-cert.pem
+server-cert = @SRCDIR@/certs/server-cert.pem
-server-key = @SRCDIR@/server-key.pem
+server-key = @SRCDIR@/certs/server-key.pem
 
 # Diffie-Hellman parameters. Only needed if you require support
 # for the DHE ciphersuites (by default this server supports ECDHE).
@@ -72,7 +72,7 @@ server-key = @SRCDIR@/server-key.pem
 # The Certificate Authority that will be used
 # to verify clients if certificate authentication
 # is set.
-ca-cert = @SRCDIR@/ca.pem
+ca-cert = @SRCDIR@/certs/ca.pem
 
 # The object identifier that will be used to read the user ID in the client certificate.
 # The object identifier should be part of the certificate's DN

tests/test-stress.config

@@ -45,8 +45,8 @@ try-mtu-discovery = false
 #
 # There may be multiple certificate and key pairs and each key
 # should correspond to the preceding certificate.
-server-cert = ./server-cert.pem
+server-cert = ./certs/server-cert.pem
-server-key = ./server-key.pem
+server-key = ./certs/server-key.pem
 
 # Diffie-Hellman parameters. Only needed if you require support
 # for the DHE ciphersuites (by default this server supports ECDHE).

tests/test-user-cert.config

@@ -45,8 +45,8 @@ try-mtu-discovery = false
 #
 # There may be multiple certificate and key pairs and each key
 # should correspond to the preceding certificate.
-server-cert = @SRCDIR@/server-cert-ca.pem
+server-cert = @SRCDIR@/certs/server-cert-ca.pem
-server-key = @SRCDIR@/server-key.pem
+server-key = @SRCDIR@/certs/server-key.pem
 
 # Diffie-Hellman parameters. Only needed if you require support
 # for the DHE ciphersuites (by default this server supports ECDHE).
@@ -72,7 +72,7 @@ server-key = @SRCDIR@/server-key.pem
 # The Certificate Authority that will be used
 # to verify clients if certificate authentication
 # is set.
-ca-cert = @SRCDIR@/ca.pem
+ca-cert = @SRCDIR@/certs/ca.pem
 
 # The object identifier that will be used to read the user ID in the client certificate.
 # The object identifier should be part of the certificate's DN

tests/test-user-config

@@ -40,20 +40,20 @@ PID=$!
 wait_server $PID
 
 echo -n "Connecting to obtain cookie (with certificate)... "
-( $OPENCONNECT -q localhost:$PORT --sslkey ${srcdir}/user-key.pem -c ${srcdir}/user-cert.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly </dev/null >/dev/null ) ||
+( $OPENCONNECT -q localhost:$PORT --sslkey ${srcdir}/certs/user-key.pem -c ${srcdir}/certs/user-cert.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 --cookieonly </dev/null >/dev/null ) ||
 	fail $PID "Could not connect with certificate!"
 
 echo ok
 
 echo -n "Re-connecting to force script run... "
-$OPENCONNECT -q localhost:$PORT --sslkey ${srcdir}/user-key.pem -c ${srcdir}/user-cert.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 -s /bin/true </dev/null >/dev/null &
+$OPENCONNECT -q localhost:$PORT --sslkey ${srcdir}/certs/user-key.pem -c ${srcdir}/certs/user-cert.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 -s /bin/true </dev/null >/dev/null &
 kpid1=$!
 echo ok
 
 sleep 2
 
 echo -n "Re-connecting to check the iroutes... "
-$OPENCONNECT -v localhost:$PORT --sslkey ${srcdir}/user-key.pem -c ${srcdir}/user-cert-testuser.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 -s /bin/true </dev/null >${TMPFILE1} 2>&1 &
+$OPENCONNECT -v localhost:$PORT --sslkey ${srcdir}/certs/user-key.pem -c ${srcdir}/certs/user-cert-testuser.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 -s /bin/true </dev/null >${TMPFILE1} 2>&1 &
 kpid2=$!
 
 echo ok
@@ -61,7 +61,7 @@ sleep 3
 
 echo -n "Checking if max-same-clients is considered... "
 
-timeout 15s $OPENCONNECT localhost:$PORT --sslkey ${srcdir}/user-key.pem -c ${srcdir}/user-cert-testuser.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 -s /bin/true </dev/null >${TMPFILE2} 2>&1
+timeout 15s $OPENCONNECT localhost:$PORT --sslkey ${srcdir}/certs/user-key.pem -c ${srcdir}/certs/user-cert-testuser.pem --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 -s /bin/true </dev/null >${TMPFILE2} 2>&1
 if test $? = 124;then
 	fail $PID "Max-same-clients directive was ignored"
 fi
@@ -123,7 +123,7 @@ rm -f ${TMPFILE1}
 rm -f ${TMPFILE2}
 
 echo -n "Re-connecting to check the ipv4-network... "
-$OPENCONNECT -v localhost:$PORT --sslkey "${srcdir}/user-key.pem" -c "${srcdir}/user-cert-testipnet.pem" --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 -s /bin/true </dev/null >${TMPFILE1} 2>&1 & kpid3=$!
+$OPENCONNECT -v localhost:$PORT --sslkey "${srcdir}/certs/user-key.pem" -c "${srcdir}/certs/user-cert-testipnet.pem" --servercert=d66b507ae074d03b02eafca40d35f87dd81049d3 -s /bin/true </dev/null >${TMPFILE1} 2>&1 & kpid3=$!
 
 echo ok
 sleep 3

tests/test-user-config.config

@@ -45,8 +45,8 @@ try-mtu-discovery = false
 #
 # There may be multiple certificate and key pairs and each key
 # should correspond to the preceding certificate.
-server-cert = ./server-cert.pem
+server-cert = ./certs/server-cert.pem
-server-key = ./server-key.pem
+server-key = ./certs/server-key.pem
 
 # Diffie-Hellman parameters. Only needed if you require support
 # for the DHE ciphersuites (by default this server supports ECDHE).
@@ -72,7 +72,7 @@ server-key = ./server-key.pem
 # The Certificate Authority that will be used
 # to verify clients if certificate authentication
 # is set.
-ca-cert = ./ca.pem
+ca-cert = ./certs/ca.pem
 
 # The object identifier that will be used to read the user ID in the client certificate.
 # The object identifier should be part of the certificate's DN

tests/test-user-group-cert-no-pass.config

@@ -52,8 +52,8 @@ try-mtu-discovery = false
 #
 # There may be multiple certificate and key pairs and each key
 # should correspond to the preceding certificate.
-server-cert = @SRCDIR@/server-cert.pem
+server-cert = @SRCDIR@/certs/server-cert.pem
-server-key = @SRCDIR@/server-key.pem
+server-key = @SRCDIR@/certs/server-key.pem
 
 # Diffie-Hellman parameters. Only needed if you require support
 # for the DHE ciphersuites (by default this server supports ECDHE).
@@ -79,7 +79,7 @@ server-key = @SRCDIR@/server-key.pem
 # The Certificate Authority that will be used
 # to verify clients if certificate authentication
 # is set.
-ca-cert = @SRCDIR@/ca.pem
+ca-cert = @SRCDIR@/certs/ca.pem
 
 # The object identifier that will be used to read the user ID in the client certificate.
 # The object identifier should be part of the certificate's DN

tests/test-user-group-cert.config

@@ -52,8 +52,8 @@ try-mtu-discovery = false
 #
 # There may be multiple certificate and key pairs and each key
 # should correspond to the preceding certificate.
-server-cert = @SRCDIR@/server-cert.pem
+server-cert = @SRCDIR@/certs/server-cert.pem
-server-key = @SRCDIR@/server-key.pem
+server-key = @SRCDIR@/certs/server-key.pem
 
 # Diffie-Hellman parameters. Only needed if you require support
 # for the DHE ciphersuites (by default this server supports ECDHE).
@@ -79,7 +79,7 @@ server-key = @SRCDIR@/server-key.pem
 # The Certificate Authority that will be used
 # to verify clients if certificate authentication
 # is set.
-ca-cert = @SRCDIR@/ca.pem
+ca-cert = @SRCDIR@/certs/ca.pem
 
 # The object identifier that will be used to read the user ID in the client certificate.
 # The object identifier should be part of the certificate's DN

tests/test1.config

@@ -45,8 +45,8 @@ try-mtu-discovery = false
 #
 # There may be multiple certificate and key pairs and each key
 # should correspond to the preceding certificate.
-server-cert = @SRCDIR@/server-cert.pem
+server-cert = @SRCDIR@/certs/server-cert.pem
-server-key = @SRCDIR@/server-key.pem
+server-key = @SRCDIR@/certs/server-key.pem
 
 # Diffie-Hellman parameters. Only needed if you require support
 # for the DHE ciphersuites (by default this server supports ECDHE).

tests/test3.config

@@ -45,8 +45,8 @@ try-mtu-discovery = false
 #
 # There may be multiple certificate and key pairs and each key
 # should correspond to the preceding certificate.
-server-cert = @SRCDIR@/server-cert.pem
+server-cert = @SRCDIR@/certs/server-cert.pem
-server-key = @SRCDIR@/server-key.pem
+server-key = @SRCDIR@/certs/server-key.pem
 
 # Diffie-Hellman parameters. Only needed if you require support
 # for the DHE ciphersuites (by default this server supports ECDHE).
@@ -72,7 +72,7 @@ server-key = @SRCDIR@/server-key.pem
 # The Certificate Authority that will be used
 # to verify clients if certificate authentication
 # is set.
-ca-cert = @SRCDIR@/ca.pem
+ca-cert = @SRCDIR@/certs/ca.pem
 
 # The object identifier that will be used to read the user ID in the client certificate.
 # The object identifier should be part of the certificate's DN
@@ -87,7 +87,7 @@ cert-user-oid = 0.9.2342.19200300.100.1.1
 #cert-group-oid = 2.5.4.11
 
 # A revocation list of ca-cert is set
-crl = crl.pem
+crl = @CRLNAME@
 
 # GnuTLS priority string
 tls-priorities = "PERFORMANCE:%SERVER_PRECEDENCE:%COMPAT"

tests/user-cert-invalid.pem

@@ -1,107 +0,0 @@
-X.509 Certificate Information:
-	Version: 3
-	Serial Number (hex): 51d82f14
-	Issuer: CN=CA
-	Validity:
-		Not Before: Sat Jul 06 14:52:05 UTC 2013
-		Not After: Mon May 15 14:52:05 UTC 2023
-	Subject: CN=A user,UID=test
-	Subject Public Key Algorithm: RSA
-	Algorithm Security Level: Medium (2432 bits)
-		Modulus (bits 2432):
-			00:ab:54:98:fc:a9:c6:15:95:9d:a6:c1:94:84:94:91
-			79:1e:78:db:2d:48:51:99:65:01:02:c0:40:52:49:5d
-			eb:70:bc:26:ef:68:39:1e:04:91:e2:db:cb:6f:93:40
-			45:1e:22:8e:71:5a:58:89:28:79:5e:1a:32:25:3e:8b
-			9d:3b:34:7f:19:f8:d0:2f:37:b7:62:32:b7:53:a5:43
-			2c:c5:5d:ec:ac:f9:35:fa:14:2b:34:66:f1:d6:a7:a1
-			d0:83:9a:56:f4:19:83:bc:bf:11:74:30:2d:a8:28:5b
-			a2:ab:7a:c6:cd:9c:5c:f8:51:e9:a9:0c:48:db:71:bb
-			b1:34:77:f7:ee:de:5d:78:c0:48:0a:37:0d:65:1e:3b
-			2b:14:03:89:72:f2:52:ed:5f:00:c5:06:60:ea:80:20
-			d0:43:ec:66:bc:d2:26:db:f0:29:3e:6a:f9:62:20:be
-			58:26:44:ba:d7:8c:6f:76:a6:05:20:e4:98:b7:c4:72
-			7a:5d:df:4f:0d:23:ec:2e:9c:71:ec:30:f9:14:5f:c8
-			75:0b:ab:67:f6:7d:fb:4d:76:64:4a:a5:d5:fa:b4:08
-			50:9d:13:c7:8f:c2:79:b0:b4:3e:2f:89:d3:33:27:4d
-			9f:8b:d3:60:24:07:ab:b2:72:3d:29:a5:c4:4a:ec:3c
-			04:d2:49:3e:26:1b:ec:7a:10:3d:ca:45:5a:80:8b:4d
-			2a:96:63:4f:2d:63:28:0f:3b:47:47:ca:7c:2c:15:41
-			32:d5:e0:c9:be:a5:55:2c:b3:6b:46:2a:56:b1:1b:ed
-			29
-		Exponent (bits 24):
-			01:00:01
-	Extensions:
-		Basic Constraints (critical):
-			Certificate Authority (CA): FALSE
-		Key Purpose (not critical):
-			TLS WWW Client.
-		Key Usage (critical):
-			Digital signature.
-			Key encipherment.
-		Subject Key Identifier (not critical):
-			8b01094b3b91ece321b91dec8d6b4c5d9e40805e
-		Authority Key Identifier (not critical):
-			482334530a8931384a5aeacab6d2a6dece1d2b18
-	Signature Algorithm: RSA-SHA256
-	Signature:
-		6b:bd:e2:90:d7:11:cf:6c:0d:e3:bd:f4:61:cd:57:83
-		41:be:2a:92:46:dd:fa:44:6c:60:1c:ef:3e:1e:2f:e1
-		e2:5b:45:88:6a:1e:50:2d:8d:96:c4:c7:80:75:59:7b
-		54:6b:fb:86:b0:f1:6d:45:09:db:48:de:20:0a:87:60
-		30:5e:35:f0:52:c4:55:44:c1:ff:e1:7c:3d:d6:6d:58
-		ca:1c:fd:bf:04:9a:9b:10:35:05:fc:d1:01:3c:af:bb
-		64:31:5e:59:8f:ef:6f:0d:35:e5:c0:07:77:0e:31:20
-		8e:e3:2e:f1:a6:4d:f1:be:85:5b:df:04:48:9d:8c:c9
-		c9:c1:b8:e3:e2:d2:4b:55:83:e9:d8:7b:71:2f:8e:89
-		fc:4d:a7:f1:b0:bf:47:9b:97:c4:85:dd:c3:3d:38:15
-		36:08:73:10:87:08:f6:e6:1c:4e:29:a8:a5:f5:24:b8
-		0d:e9:d9:b8:19:27:1d:73:35:fe:7b:81:1f:4a:81:6a
-		93:cd:a2:71:d7:60:0e:08:ee:ea:c8:2b:44:1b:e4:45
-		6c:fe:44:68:d6:86:ad:89:4f:7e:9f:f9:1a:2a:97:0f
-		6b:eb:5d:6e:38:b3:5b:13:b9:e3:4a:10:32:5b:dc:a9
-		b4:a1:4e:b3:f9:4f:91:de:bc:cc:36:91:44:ba:e0:34
-		74:f7:68:b4:7b:0e:db:4e:ec:28:03:01:cf:0a:63:c4
-		23:75:0b:4b:41:9d:e0:68:b3:cb:bf:b5:5c:3d:52:93
-		20:ba:ea:b8:f0:8c:f7:a6:ec:cd:a3:aa:4f:2a:ff:20
-Other Information:
-	SHA1 fingerprint:
-		5509a76b8738216938cdb3ec25048812737170de
-	SHA256 fingerprint:
-		c93e38ef35f1a9c485a27b161e708f2d45bf8768eb53a23fec841a8f35d6e478
-	Public Key ID:
-		8b01094b3b91ece321b91dec8d6b4c5d9e40805e
-	Public key's random art:
-		+--[ RSA 2432]----+
-		| o=o             |
-		|..oE..           |
-		|.+=.o            |
-		|o.*....          |
-		| * B +..S        |
-		|. * o oo .       |
-		| o .  . .        |
-		|  +              |
-		| .               |
-		+-----------------+
-
------BEGIN CERTIFICATE-----
-MIIDjDCCAkSgAwIBAgIEUdgvFDANBgkqhkiG9w0BAQsFADANMQswCQYDVQQDEwJD
-QTAiGA8yMDEzMDcwNjE0NTIwNVoYDzIwMjMwNTE1MTQ1MjA1WjAnMQ8wDQYDVQQD
-EwZBIHVzZXIxFDASBgoJkiaJk/IsZAEBEwR0ZXN0MIIBUjANBgkqhkiG9w0BAQEF
-AAOCAT8AMIIBOgKCATEAq1SY/KnGFZWdpsGUhJSReR542y1IUZllAQLAQFJJXetw
-vCbvaDkeBJHi28tvk0BFHiKOcVpYiSh5XhoyJT6LnTs0fxn40C83t2Iyt1OlQyzF
-Xeys+TX6FCs0ZvHWp6HQg5pW9BmDvL8RdDAtqChboqt6xs2cXPhR6akMSNtxu7E0
-d/fu3l14wEgKNw1lHjsrFAOJcvJS7V8AxQZg6oAg0EPsZrzSJtvwKT5q+WIgvlgm
-RLrXjG92pgUg5Ji3xHJ6Xd9PDSPsLpxx7DD5FF/IdQurZ/Z9+012ZEql1fq0CFCd
-E8ePwnmwtD4vidMzJ02fi9NgJAersnI9KaXESuw8BNJJPiYb7HoQPcpFWoCLTSqW
-Y08tYygPO0dHynwsFUEy1eDJvqVVLLNrRipWsRvtKQIDAQABo3YwdDAMBgNVHRMB
-Af8EAjAAMBMGA1UdJQQMMAoGCCsGAQUFBwMCMA8GA1UdDwEB/wQFAwMHoAAwHQYD
-VR0OBBYEFIsBCUs7kezjIbkd7I1rTF2eQIBeMB8GA1UdIwQYMBaAFEgjNFMKiTE4
-SlrqyrbSpt7OHSsYMA0GCSqGSIb3DQEBCwUAA4IBMQBrveKQ1xHPbA3jvfRhzVeD
-Qb4qkkbd+kRsYBzvPh4v4eJbRYhqHlAtjZbEx4B1WXtUa/uGsPFtRQnbSN4gCodg
-MF418FLEVUTB/+F8PdZtWMoc/b8EmpsQNQX80QE8r7tkMV5Zj+9vDTXlwAd3DjEg
-juMu8aZN8b6FW98ESJ2MycnBuOPi0ktVg+nYe3Evjon8TafxsL9Hm5fEhd3DPTgV
-NghzEIcI9uYcTimopfUkuA3p2bgZJx1zNf57gR9KgWqTzaJx12AOCO7qyCtEG+RF
-bP5EaNaGrYlPfp/5GiqXD2vrXW44s1sTueNKEDJb3Km0oU6z+U+R3rzMNpFEuuA0
-dPdotHsO207sKAMBzwpjxCN1C0tBneBos8u/tVw9UpMguuq48Iz3puzNo6pPKv8g
------END CERTIFICATE-----

tests/user-cert-testipnet.pem

@@ -1,22 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDkzCCAkugAwIBAgIIVsxd2gE9XhIwDQYJKoZIhvcNAQELBQAwDTELMAkGA1UE
-AxMCQ0EwIBcNMTYwMjIzMTMyNTQ3WhgPOTk5OTEyMzEyMzU5NTlaMCwxDzANBgNV
-BAMTBkEgdXNlcjEZMBcGCgmSJomT8ixkAQETCXRlc3RpcG5ldDCCAVIwDQYJKoZI
-hvcNAQEBBQADggE/ADCCAToCggExAKtUmPypxhWVnabBlISUkXkeeNstSFGZZQEC
-wEBSSV3rcLwm72g5HgSR4tvLb5NARR4ijnFaWIkoeV4aMiU+i507NH8Z+NAvN7di
-MrdTpUMsxV3srPk1+hQrNGbx1qeh0IOaVvQZg7y/EXQwLagoW6KresbNnFz4Uemp
-DEjbcbuxNHf37t5deMBICjcNZR47KxQDiXLyUu1fAMUGYOqAINBD7Ga80ibb8Ck+
-avliIL5YJkS614xvdqYFIOSYt8Ryel3fTw0j7C6cceww+RRfyHULq2f2fftNdmRK
-pdX6tAhQnRPHj8J5sLQ+L4nTMydNn4vTYCQHq7JyPSmlxErsPATSST4mG+x6ED3K
-RVqAi00qlmNPLWMoDztHR8p8LBVBMtXgyb6lVSyza0YqVrEb7SkCAwEAAaN2MHQw
-DAYDVR0TAQH/BAIwADATBgNVHSUEDDAKBggrBgEFBQcDAjAPBgNVHQ8BAf8EBQMD
-B6AAMB0GA1UdDgQWBBSLAQlLO5Hs4yG5HeyNa0xdnkCAXjAfBgNVHSMEGDAWgBRI
-IzRTCokxOEpa6sq20qbezh0rGDANBgkqhkiG9w0BAQsFAAOCATEAnbDm/LzM3BLz
-K+UfFTFGuGAjsWUn5Es0H0ajl5Yax4WlR22OmMFcWRNmZoshFBskk4mxQKll1LBM
-m6bqb23iT7GucAk8NdGeIxUDO53GcsCfQAua/xsaDT+qSiu9mSdKk6hooNljMFv8
-f2zlp2LPlGaqz8DjvdGD/dySPgvjF5owoS0Ihy2ZUNK6hQFxWXDj1Scu4itszOgG
-2P93fHfIs+ySeD+7efOna8JjfUMeFLN9nJg23DLjUjM/7M/1q2H9LefszTzZ4u2B
-ixaQeU1xXTYBMTSrS4Sd26o8+lR7AdXHEmdN2HdWM5TkMC5A2fYg+yVCVmhz27tn
-qU0u5P/1i+b0LtTEPcurSNApykB8K+t9/1TYGTV7COWUevLyGEwdRaQ2xl3Q41WE
-b+7GJgmybA==
------END CERTIFICATE-----

tests/user-cert-testuser.pem

@@ -1,21 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDgzCCAjugAwIBAgIIVfrJORMX1B0wDQYJKoZIhvcNAQELBQAwDTELMAkGA1UE
-AxMCQ0EwIhgPMjAxNTA5MTcxNDA3NTRaGA85OTk5MTIzMTIzNTk1OVowGjEYMBYG
-CgmSJomT8ixkAQETCHRlc3R1c2VyMIIBUjANBgkqhkiG9w0BAQEFAAOCAT8AMIIB
-OgKCATEAq1SY/KnGFZWdpsGUhJSReR542y1IUZllAQLAQFJJXetwvCbvaDkeBJHi
-28tvk0BFHiKOcVpYiSh5XhoyJT6LnTs0fxn40C83t2Iyt1OlQyzFXeys+TX6FCs0
-ZvHWp6HQg5pW9BmDvL8RdDAtqChboqt6xs2cXPhR6akMSNtxu7E0d/fu3l14wEgK
-Nw1lHjsrFAOJcvJS7V8AxQZg6oAg0EPsZrzSJtvwKT5q+WIgvlgmRLrXjG92pgUg
-5Ji3xHJ6Xd9PDSPsLpxx7DD5FF/IdQurZ/Z9+012ZEql1fq0CFCdE8ePwnmwtD4v
-idMzJ02fi9NgJAersnI9KaXESuw8BNJJPiYb7HoQPcpFWoCLTSqWY08tYygPO0dH
-ynwsFUEy1eDJvqVVLLNrRipWsRvtKQIDAQABo3YwdDAMBgNVHRMBAf8EAjAAMBMG
-A1UdJQQMMAoGCCsGAQUFBwMCMA8GA1UdDwEB/wQFAwMHoAAwHQYDVR0OBBYEFIsB
-CUs7kezjIbkd7I1rTF2eQIBeMB8GA1UdIwQYMBaAFEgjNFMKiTE4SlrqyrbSpt7O
-HSsYMA0GCSqGSIb3DQEBCwUAA4IBMQCd9Wkh4yDgDYMf7LQAf0SFQCY+cp9Twz6T
-Oj6s4+YEznkB508e1Ont3cSnaRElRr+8PGoGI/0CiPy7q8G9w9p8aZvGzvdfADAz
-1DEfOz9gN6kjJ0kZre+CVRAu+REVFkYiWTTsW4wUGyHFivnF6nJuwHxQXK+ff7+x
-Gh+CDn6p9VWkrDeREXyrWuq4xitv8smT/zint4NdQOdfIKev+sLwfqj+/7TaDyxM
-8SJvI8MNBy1ud3gOdCi4RbDHQWOTETRRUcqH0tkJDUOUSMl+FWUMJbdcl3OeXw/l
-Ub8VnkJ9lIooMnyM6BfyxKvgpBRQLBOHYHwOX7XVL9bAGNM7VFn0haJSt4AsZivN
-XLswXA9aXnNaY+9rM0QjRwfxrzREwWO6E2eJzuFJ/CqxH+7sOrkL
------END CERTIFICATE-----

tests/user-cert-wrong.pem

@@ -1,21 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDhTCCAj2gAwIBAgIEUzqMojANBgkqhkiG9w0BAQsFADAnMQ8wDQYDVQQDEwZB
-IHVzZXIxFDASBgoJkiaJk/IsZAEBEwR0ZXN0MCIYDzIwMTQwNDAxMDk1MzM5WhgP
-OTk5OTEyMzEyMzU5NTlaMCcxDzANBgNVBAMTBkEgdXNlcjEUMBIGCgmSJomT8ixk
-AQETBHRlc3QwggFSMA0GCSqGSIb3DQEBAQUAA4IBPwAwggE6AoIBMQCrVJj8qcYV
-lZ2mwZSElJF5HnjbLUhRmWUBAsBAUkld63C8Ju9oOR4EkeLby2+TQEUeIo5xWliJ
-KHleGjIlPoudOzR/GfjQLze3YjK3U6VDLMVd7Kz5NfoUKzRm8danodCDmlb0GYO8
-vxF0MC2oKFuiq3rGzZxc+FHpqQxI23G7sTR39+7eXXjASAo3DWUeOysUA4ly8lLt
-XwDFBmDqgCDQQ+xmvNIm2/ApPmr5YiC+WCZEuteMb3amBSDkmLfEcnpd308NI+wu
-nHHsMPkUX8h1C6tn9n37TXZkSqXV+rQIUJ0Tx4/CebC0Pi+J0zMnTZ+L02AkB6uy
-cj0ppcRK7DwE0kk+JhvsehA9ykVagItNKpZjTy1jKA87R0fKfCwVQTLV4Mm+pVUs
-s2tGKlaxG+0pAgMBAAGjVTBTMAwGA1UdEwEB/wQCMAAwEwYDVR0lBAwwCgYIKwYB
-BQUHAwIwDwYDVR0PAQH/BAUDAweAADAdBgNVHQ4EFgQUiwEJSzuR7OMhuR3sjWtM
-XZ5AgF4wDQYJKoZIhvcNAQELBQADggExAKQPYC2zh0Hjf9KypFNJkkdLJGbpb3cX
-vgaCuDo+PHJJqvdlq3Zg1N4u5oVaEd5IzDXWiAMZobr7V/x8adABumfrMf8Y4vvt
-PMjAqhGykwrn5vvf+AUMnnIVLPwwy99Nn7JE6Gxw6LHKi1nJ0KXeuZrVSM4DqWe8
-0cwjwfwcajwuNJ76J0B8lDlQ0Q6yWi3QyE2Gg8VLaauVownAp0BUELAxDq7VKEXW
-owE1eXpL6Yjyim+6UI/i7ruI8KhqSWTz+QAuCZmwhFvNwPFJCSp/aJnDJJyikPhu
-KoV0PFu7o6X5TTwldajlzD5IdH6CyTwMAct1HFT66vedEQ4cf/G90epg/lD6IHZU
-U9Gio9QQTX5Cdz0VpeYB3cYZ4qP4bHx2nRnWuBrtZYaEw34xeAvGLK4=
------END CERTIFICATE-----

tests/user-cert.pem

@@ -1,21 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDjDCCAkSgAwIBAgIEUdgvFDANBgkqhkiG9w0BAQsFADANMQswCQYDVQQDEwJD
-QTAiGA8yMDEzMDcwNjE0NTIwNVoYDzIwMjMwNTE1MTQ1MjA1WjAnMQ8wDQYDVQQD
-EwZBIHVzZXIxFDASBgoJkiaJk/IsZAEBEwR0ZXN0MIIBUjANBgkqhkiG9w0BAQEF
-AAOCAT8AMIIBOgKCATEAq1SY/KnGFZWdpsGUhJSReR542y1IUZllAQLAQFJJXetw
-vCbvaDkeBJHi28tvk0BFHiKOcVpYiSh5XhoyJT6LnTs0fxn40C83t2Iyt1OlQyzF
-Xeys+TX6FCs0ZvHWp6HQg5pW9BmDvL8RdDAtqChboqt6xs2cXPhR6akMSNtxu7E0
-d/fu3l14wEgKNw1lHjsrFAOJcvJS7V8AxQZg6oAg0EPsZrzSJtvwKT5q+WIgvlgm
-RLrXjG92pgUg5Ji3xHJ6Xd9PDSPsLpxx7DD5FF/IdQurZ/Z9+012ZEql1fq0CFCd
-E8ePwnmwtD4vidMzJ02fi9NgJAersnI9KaXESuw8BNJJPiYb7HoQPcpFWoCLTSqW
-Y08tYygPO0dHynwsFUEy1eDJvqVVLLNrRipWsRvtKQIDAQABo3YwdDAMBgNVHRMB
-Af8EAjAAMBMGA1UdJQQMMAoGCCsGAQUFBwMCMA8GA1UdDwEB/wQFAwMHoAAwHQYD
-VR0OBBYEFIsBCUs7kezjIbkd7I1rTF2eQIBeMB8GA1UdIwQYMBaAFEgjNFMKiTE4
-SlrqyrbSpt7OHSsYMA0GCSqGSIb3DQEBCwUAA4IBMQBrveOQ1xHPbA3jvfRhzVeD
-Qb4qkkbd+kRsYBzvPh4v4eJbRYhqHlAtjZbEx4B1WXtUa/uGsPFtRQnbSN4gCodg
-MF418FLEVUTB/+F8PdZtWMoc/b8EmpsQNQX80QE8r7tkMV5Zj+9vDTXlwAd3DjEg
-juMu8aZN8b6FW98ESJ2MycnBuOPi0ktVg+nYe3Evjon8TafxsL9Hm5fEhd3DPTgV
-NghzEIcI9uYcTimopfUkuA3p2bgZJx1zNf57gR9KgWqTzaJx12AOCO7qyCtEG+RF
-bP5EaNaGrYlPfp/5GiqXD2vrXW44s1sTueNKEDJb3Km0oU6z+U+R3rzMNpFEuuA0
-dPdotHsO207sKAMBzwpjxCN1C0tBneBos8u/tVw9UpMguuq48Iz3puzNo6pPKv8g
------END CERTIFICATE-----

tests/user-cn.pem

@@ -1,21 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDeDCCAjCgAwIBAgIIVadfcQ/QjmIwDQYJKoZIhvcNAQELBQAwDTELMAkGA1UE
-AxMCQ0EwIhgPMjAxNTA3MTYwNzM4MjZaGA85OTk5MTIzMTIzNTk1OVowDzENMAsG
-A1UEAxMEdGVzdDCCAVIwDQYJKoZIhvcNAQEBBQADggE/ADCCAToCggExAKtUmPyp
-xhWVnabBlISUkXkeeNstSFGZZQECwEBSSV3rcLwm72g5HgSR4tvLb5NARR4ijnFa
-WIkoeV4aMiU+i507NH8Z+NAvN7diMrdTpUMsxV3srPk1+hQrNGbx1qeh0IOaVvQZ
-g7y/EXQwLagoW6KresbNnFz4UempDEjbcbuxNHf37t5deMBICjcNZR47KxQDiXLy
-Uu1fAMUGYOqAINBD7Ga80ibb8Ck+avliIL5YJkS614xvdqYFIOSYt8Ryel3fTw0j
-7C6cceww+RRfyHULq2f2fftNdmRKpdX6tAhQnRPHj8J5sLQ+L4nTMydNn4vTYCQH
-q7JyPSmlxErsPATSST4mG+x6ED3KRVqAi00qlmNPLWMoDztHR8p8LBVBMtXgyb6l
-VSyza0YqVrEb7SkCAwEAAaN2MHQwDAYDVR0TAQH/BAIwADATBgNVHSUEDDAKBggr
-BgEFBQcDAjAPBgNVHQ8BAf8EBQMDB4AAMB0GA1UdDgQWBBSLAQlLO5Hs4yG5HeyN
-a0xdnkCAXjAfBgNVHSMEGDAWgBRIIzRTCokxOEpa6sq20qbezh0rGDANBgkqhkiG
-9w0BAQsFAAOCATEAHViC9znM3VK34SrjSR3nWruTzw6pVpo+aUGkd+FRyaTuLykb
-SN5F8z3gh34I1pnNcCr7v2nWHnVhgUGD4J2w5Wqm499vAVhHEW14egO5mMmVWdrr
-NfLq4HNUYmbML3yThpYHvMHxqF0FrLh33ip9Ndak+fF0doE0EJ/YmQF3qxiopBiN
-MJk1Uy76DWM0YxUG8IRI4+NHzfePgZuutKR/s/VNrU7RsQOr6Iw4GV1xC+yv1Kw3
-E08dA1JpWmti0ij1WuPsdmLx6D4LQrgX/Cjk24l6Q3tcWkk51+JaC5XKR3K2vaCV
-e/neQn2puN0LQn5ka7/c2XXc8JwuR1TNVQiOONiU29aMz6kFiormChzrQYqX06Av
-qqgUmQJ7FJcITolzZyMu+x7IHMbuilgWpWa89A==
------END CERTIFICATE-----

tests/user-group-cert.pem

@@ -1,23 +0,0 @@
------BEGIN CERTIFICATE-----
-MIID3DCCApSgAwIBAgIMU3tU9RhMf+MbW2mxMA0GCSqGSIb3DQEBCwUAMA0xCzAJ
-BgNVBAMTAkNBMCIYDzIwMTQwNTIwMTMxMzI1WhgPOTk5OTEyMzEyMzU5NTlaMIGe
-MRQwEgYKCZImiZPyLGQBARMEdGVzdDEPMA0GA1UECxMGZ3JvdXAxMQ8wDQYDVQQL
-EwZncm91cDIxDzANBgNVBAsTBmdyb3VwMzEPMA0GA1UECxMGZ3JvdXA0MQ8wDQYD
-VQQKEwZncm91cDExDzANBgNVBAoTBmdyb3VwMjEPMA0GA1UEChMGZ3JvdXAzMQ8w
-DQYDVQQKEwZncm91cDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe
-qsNOIRSzgtjESfw/Pgo+S97fPvLw5T5EcMjXQBbmhxj5aMSvgIhRlzP7B+e/P0o6
-IB9Rc33Clh9kV5bD2O1h+bGcusInzieL8SjHDysw10bj6fzX7Xt716Z7qExMKhxV
-8I3YBW/0bIKUTyhckAAntEZgenBF5BZPZuZ81ml+dynH6GKvXX6EI0C6HTH+AoUt
-CIORFjPvXrpCAApjepQMsZGdE+5ao/shBuAG/IVb61Nr9wNKJA538U2Eo2dhTjga
-EZK7XUBqLA0nHziyhBsLR3zz9LX+XqXXQjIqsvayKoIVO08owUYs2mub9YW7Bxhv
-zv6+G4QMDFt/O6tMsr/DAgMBAAGjdjB0MAwGA1UdEwEB/wQCMAAwEwYDVR0lBAww
-CgYIKwYBBQUHAwIwDwYDVR0PAQH/BAUDAweAADAdBgNVHQ4EFgQU1O0/KEuSG0y1
-V8HL6oo44ui9WCowHwYDVR0jBBgwFoAUSCM0UwqJMThKWurKttKm3s4dKxgwDQYJ
-KoZIhvcNAQELBQADggExADYzV03MSZgmg2EfTb/kv+AUtqM/+ue2JnBwiDaxqNxG
-+tfJgf6pxKS2t4U9PT8PvfIq/QGlBtC+Kc7iTxCRy4LE53+VSe4tU3LOmeCRXQKr
-jULyVU73+ls6xDUXGYGFs3IrzdCvu7wUO7T2sflKMfsKlDqd6iBM9fccbyh+WiFr
-/EVfEVw37CYcH7cDXMpW8RRR+Tfxnn1dYymSDSSgH4aNgAHX91kGXYF2ow0pq3zq
-GwDhvjCoqIVoFpFjF6hPSQOVNE6mW6SX7R+G+aWrmqDFdOiYH4I+gf8itCxRKShD
-yBrEYJAUlAmoBCRGcim0vB/RdUxud1EHQdYCJoTyMB5HbIdNlr7PktKfvd1RWW+Y
-8y26fO+DTJ4y5VZNT2cLWNcrrXeEASq/TYfxCuKoUnk=
------END CERTIFICATE-----

tests/user-group-key.pem

@@ -1,144 +0,0 @@
-Public Key Info:
-	Public Key Algorithm: RSA
-	Key Security Level: Legacy (2048 bits)
-
-modulus:
-	00:de:aa:c3:4e:21:14:b3:82:d8:c4:49:fc:3f:3e:
-	0a:3e:4b:de:df:3e:f2:f0:e5:3e:44:70:c8:d7:40:
-	16:e6:87:18:f9:68:c4:af:80:88:51:97:33:fb:07:
-	e7:bf:3f:4a:3a:20:1f:51:73:7d:c2:96:1f:64:57:
-	96:c3:d8:ed:61:f9:b1:9c:ba:c2:27:ce:27:8b:f1:
-	28:c7:0f:2b:30:d7:46:e3:e9:fc:d7:ed:7b:7b:d7:
-	a6:7b:a8:4c:4c:2a:1c:55:f0:8d:d8:05:6f:f4:6c:
-	82:94:4f:28:5c:90:00:27:b4:46:60:7a:70:45:e4:
-	16:4f:66:e6:7c:d6:69:7e:77:29:c7:e8:62:af:5d:
-	7e:84:23:40:ba:1d:31:fe:02:85:2d:08:83:91:16:
-	33:ef:5e:ba:42:00:0a:63:7a:94:0c:b1:91:9d:13:
-	ee:5a:a3:fb:21:06:e0:06:fc:85:5b:eb:53:6b:f7:
-	03:4a:24:0e:77:f1:4d:84:a3:67:61:4e:38:1a:11:
-	92:bb:5d:40:6a:2c:0d:27:1f:38:b2:84:1b:0b:47:
-	7c:f3:f4:b5:fe:5e:a5:d7:42:32:2a:b2:f6:b2:2a:
-	82:15:3b:4f:28:c1:46:2c:da:6b:9b:f5:85:bb:07:
-	18:6f:ce:fe:be:1b:84:0c:0c:5b:7f:3b:ab:4c:b2:
-	bf:c3:
-
-public exponent:
-	01:00:01:
-
-private exponent:
-	00:83:a8:d6:e8:b8:98:c3:f8:07:72:31:09:0c:e0:
-	03:30:88:ae:14:b4:e4:f3:59:a9:72:d0:79:81:05:
-	2d:45:4b:f6:91:6a:c8:79:b9:77:61:3f:15:86:46:
-	4b:5a:82:f2:c1:e1:c2:82:e7:d6:21:9b:a0:9e:35:
-	48:39:2f:68:55:79:4d:f3:0d:5e:c6:28:98:ab:9f:
-	81:ec:09:e5:10:f1:09:c2:b3:d5:44:5b:f0:9a:ee:
-	8d:4b:2a:dd:4a:5f:cf:f7:64:d0:8a:3d:d4:cf:e2:
-	e5:67:0a:53:24:40:25:47:54:ca:14:3b:f1:6c:f2:
-	0b:db:11:4e:11:dc:b9:ee:03:2f:04:5b:2f:b6:a2:
-	27:72:83:1a:d5:a7:a8:4f:1b:b8:73:fe:73:ce:a5:
-	cc:a9:15:5f:b7:ab:2f:50:86:89:5d:1e:a4:be:ed:
-	00:89:fb:fa:9b:f3:d4:ce:5f:37:b3:91:56:70:16:
-	cf:2e:75:20:23:c2:ad:9d:22:69:bf:fc:c0:08:08:
-	a5:57:d7:31:07:7d:47:81:3e:0a:af:91:8d:2e:f7:
-	5b:8b:58:2b:eb:50:d8:b0:ba:a3:cb:2d:76:0d:99:
-	c6:0a:e8:98:83:e3:7c:a6:c6:6b:12:ff:ba:b8:b1:
-	15:5e:33:f4:78:bd:d5:6f:d8:c4:b2:ae:8e:49:51:
-	db:59:
-
-prime1:
-	00:e1:18:84:de:1d:2a:70:dc:23:eb:d4:6a:54:79:
-	5a:8f:4e:56:c7:76:55:ee:60:d9:fb:23:72:6d:9b:
-	bd:d8:76:0d:e0:18:d4:25:6f:0c:11:99:77:6b:d7:
-	d8:27:1d:d2:9d:15:c4:ee:df:37:dd:fd:c8:fc:e5:
-	16:f5:2e:b9:1e:27:2a:4d:f6:fe:8b:c0:e2:20:ad:
-	20:79:8c:8b:bd:c7:f1:eb:5d:e3:d9:2b:5c:b8:27:
-	cc:0c:3c:74:ef:9e:07:d0:6c:fc:8b:34:83:8e:70:
-	de:5a:6e:60:4d:8d:da:79:7d:34:9e:5a:61:d8:68:
-	03:92:a8:d7:c2:ca:71:15:8d:
-
-prime2:
-	00:fd:3c:e1:77:55:52:cb:c6:25:12:2e:98:83:59:
-	c1:34:b7:a3:79:1f:6c:9e:f5:d5:7d:66:58:22:7a:
-	e4:da:7b:4f:27:5b:0d:d6:9a:1b:ad:5c:27:78:fa:
-	9d:88:90:56:7e:81:13:4a:ee:51:cb:ef:db:2f:23:
-	21:e1:84:73:65:5f:ca:4d:df:b9:17:fd:23:e7:95:
-	9e:74:38:f2:cd:af:6f:94:b3:20:f7:8b:1e:99:84:
-	7f:aa:13:c8:bb:4a:7e:3f:05:40:33:eb:b4:ac:67:
-	1e:b1:0d:cd:26:6a:7e:be:40:c0:d2:14:3c:8a:2b:
-	39:51:38:9e:0c:e2:42:0e:8f:
-
-coefficient:
-	00:bb:09:3f:e0:20:32:d6:ec:d0:c0:3c:7f:f7:d8:
-	14:74:ec:8d:a0:95:05:bd:98:a8:4a:f2:fd:01:d2:
-	2a:80:0b:bb:3e:cd:18:ad:f5:5a:af:d6:14:24:72:
-	01:99:05:38:1e:c1:c2:37:ae:61:c6:72:dc:4b:f7:
-	d6:65:e3:0d:47:ac:51:89:6b:2a:14:d5:88:82:6f:
-	83:1e:1b:50:be:33:cc:43:d0:dd:e0:9c:a4:4c:30:
-	e7:02:f3:36:39:1a:51:a5:dc:db:33:4e:5b:9e:e9:
-	34:51:c0:70:76:f0:16:9f:d9:7f:42:9a:61:d1:68:
-	9b:7c:b9:09:d0:ad:ac:d2:5c:
-
-exp1:
-	00:c9:39:9d:15:de:e6:e0:eb:bb:65:08:88:61:a9:
-	f6:ce:23:8f:2a:52:dc:70:f4:be:09:67:5f:d5:22:
-	a4:2d:8d:23:cc:51:05:dd:cd:0e:f1:f0:ca:b4:6a:
-	c9:bd:f6:48:20:cb:a4:38:92:ee:23:92:cb:89:60:
-	d7:0c:2a:4f:ac:e8:00:46:a0:66:5f:d2:f7:93:94:
-	91:72:77:b5:38:dc:34:a5:5f:52:e0:02:86:a9:ce:
-	51:f8:22:57:bb:1a:00:0c:50:51:d7:b4:03:63:63:
-	fd:32:c4:77:6c:fd:41:f0:d7:80:21:8b:d4:ea:9b:
-	d9:8d:d3:48:c6:c7:29:1e:c5:
-
-exp2:
-	73:c8:3e:1d:dd:78:f9:8a:22:b0:e9:74:f9:b9:33:
-	c8:f2:9d:5f:67:aa:b6:13:18:05:39:a1:da:41:ee:
-	18:a6:80:4e:32:27:65:93:18:4c:6e:f1:ed:32:48:
-	8c:83:d1:c8:0d:23:d1:02:9d:8b:6c:a2:fe:2e:45:
-	f3:62:27:90:95:f7:5d:1b:88:f9:1a:d8:2b:ae:10:
-	c0:7a:b9:28:a9:a9:8e:87:47:ef:66:40:1b:58:a5:
-	36:11:cd:99:34:39:fc:7e:5e:18:5f:10:40:32:f5:
-	a9:65:f2:02:3a:76:b0:6d:d2:bb:3a:5d:63:9e:d7:
-	99:f7:14:ec:37:16:94:a9:
-
-
-Public Key ID: D4:ED:3F:28:4B:92:1B:4C:B5:57:C1:CB:EA:8A:38:E2:E8:BD:58:2A
-Public key's random art:
-+--[ RSA 2048]----+
-|             ..  |
-|         . .  .. |
-|        . o .... |
-|       . . o .o  |
-|        S . o.   |
-|       o . ..o   |
-|    .   = o.. o  |
-|E  *. .. * o.  . |
-| o=.+o..o o.     |
-+-----------------+
-
------BEGIN RSA PRIVATE KEY-----
-MIIEpQIBAAKCAQEA3qrDTiEUs4LYxEn8Pz4KPkve3z7y8OU+RHDI10AW5ocY+WjE
-r4CIUZcz+wfnvz9KOiAfUXN9wpYfZFeWw9jtYfmxnLrCJ84ni/Eoxw8rMNdG4+n8
-1+17e9eme6hMTCocVfCN2AVv9GyClE8oXJAAJ7RGYHpwReQWT2bmfNZpfncpx+hi
-r11+hCNAuh0x/gKFLQiDkRYz7166QgAKY3qUDLGRnRPuWqP7IQbgBvyFW+tTa/cD
-SiQOd/FNhKNnYU44GhGSu11AaiwNJx84soQbC0d88/S1/l6l10IyKrL2siqCFTtP
-KMFGLNprm/WFuwcYb87+vhuEDAxbfzurTLK/wwIDAQABAoIBAQCDqNbouJjD+Ady
-MQkM4AMwiK4UtOTzWaly0HmBBS1FS/aRash5uXdhPxWGRktagvLB4cKC59Yhm6Ce
-NUg5L2hVeU3zDV7GKJirn4HsCeUQ8QnCs9VEW/Ca7o1LKt1KX8/3ZNCKPdTP4uVn
-ClMkQCVHVMoUO/Fs8gvbEU4R3LnuAy8EWy+2oidygxrVp6hPG7hz/nPOpcypFV+3
-qy9QholdHqS+7QCJ+/qb89TOXzezkVZwFs8udSAjwq2dImm//MAICKVX1zEHfUeB
-PgqvkY0u91uLWCvrUNiwuqPLLXYNmcYK6JiD43ymxmsS/7q4sRVeM/R4vdVv2MSy
-ro5JUdtZAoGBAOEYhN4dKnDcI+vUalR5Wo9OVsd2Ve5g2fsjcm2bvdh2DeAY1CVv
-DBGZd2vX2Ccd0p0VxO7fN939yPzlFvUuuR4nKk32/ovA4iCtIHmMi73H8etd49kr
-XLgnzAw8dO+eB9Bs/Is0g45w3lpuYE2N2nl9NJ5aYdhoA5Ko18LKcRWNAoGBAP08
-4XdVUsvGJRIumINZwTS3o3kfbJ711X1mWCJ65Np7TydbDdaaG61cJ3j6nYiQVn6B
-E0ruUcvv2y8jIeGEc2Vfyk3fuRf9I+eVnnQ48s2vb5SzIPeLHpmEf6oTyLtKfj8F
-QDPrtKxnHrENzSZqfr5AwNIUPIorOVE4ngziQg6PAoGBAMk5nRXe5uDru2UIiGGp
-9s4jjypS3HD0vglnX9UipC2NI8xRBd3NDvHwyrRqyb32SCDLpDiS7iOSy4lg1wwq
-T6zoAEagZl/S95OUkXJ3tTjcNKVfUuAChqnOUfgiV7saAAxQUde0A2Nj/TLEd2z9
-QfDXgCGL1Oqb2Y3TSMbHKR7FAoGAc8g+Hd14+YoisOl0+bkzyPKdX2eqthMYBTmh
-2kHuGKaATjInZZMYTG7x7TJIjIPRyA0j0QKdi2yi/i5F82InkJX3XRuI+RrYK64Q
-wHq5KKmpjodH72ZAG1ilNhHNmTQ5/H5eGF8QQDL1qWXyAjp2sG3SuzpdY57XmfcU
-7DcWlKkCgYEAuwk/4CAy1uzQwDx/99gUdOyNoJUFvZioSvL9AdIqgAu7Ps0YrfVa
-r9YUJHIBmQU4HsHCN65hxnLcS/fWZeMNR6xRiWsqFNWIgm+DHhtQvjPMQ9Dd4Jyk
-TDDnAvM2ORpRpdzbM05bnuk0UcBwdvAWn9l/Qpph0WibfLkJ0K2s0lw=
------END RSA PRIVATE KEY-----

tests/user-key.pem

@@ -1,165 +0,0 @@
-Public Key Info:
-	Public Key Algorithm: RSA
-	Key Security Level: Normal (2432 bits)
-
-modulus:
-	00:ab:54:98:fc:a9:c6:15:95:9d:a6:c1:94:84:94:
-	91:79:1e:78:db:2d:48:51:99:65:01:02:c0:40:52:
-	49:5d:eb:70:bc:26:ef:68:39:1e:04:91:e2:db:cb:
-	6f:93:40:45:1e:22:8e:71:5a:58:89:28:79:5e:1a:
-	32:25:3e:8b:9d:3b:34:7f:19:f8:d0:2f:37:b7:62:
-	32:b7:53:a5:43:2c:c5:5d:ec:ac:f9:35:fa:14:2b:
-	34:66:f1:d6:a7:a1:d0:83:9a:56:f4:19:83:bc:bf:
-	11:74:30:2d:a8:28:5b:a2:ab:7a:c6:cd:9c:5c:f8:
-	51:e9:a9:0c:48:db:71:bb:b1:34:77:f7:ee:de:5d:
-	78:c0:48:0a:37:0d:65:1e:3b:2b:14:03:89:72:f2:
-	52:ed:5f:00:c5:06:60:ea:80:20:d0:43:ec:66:bc:
-	d2:26:db:f0:29:3e:6a:f9:62:20:be:58:26:44:ba:
-	d7:8c:6f:76:a6:05:20:e4:98:b7:c4:72:7a:5d:df:
-	4f:0d:23:ec:2e:9c:71:ec:30:f9:14:5f:c8:75:0b:
-	ab:67:f6:7d:fb:4d:76:64:4a:a5:d5:fa:b4:08:50:
-	9d:13:c7:8f:c2:79:b0:b4:3e:2f:89:d3:33:27:4d:
-	9f:8b:d3:60:24:07:ab:b2:72:3d:29:a5:c4:4a:ec:
-	3c:04:d2:49:3e:26:1b:ec:7a:10:3d:ca:45:5a:80:
-	8b:4d:2a:96:63:4f:2d:63:28:0f:3b:47:47:ca:7c:
-	2c:15:41:32:d5:e0:c9:be:a5:55:2c:b3:6b:46:2a:
-	56:b1:1b:ed:29:
-
-public exponent:
-	01:00:01:
-
-private exponent:
-	5d:97:20:db:24:82:a8:57:ca:7e:c5:50:33:fc:54:
-	5b:2d:62:27:98:5c:e0:f6:42:4e:83:0a:32:18:c1:
-	2b:24:e9:b8:5e:2c:79:6a:7a:13:54:fd:ef:c2:f9:
-	78:1e:ab:a3:02:8d:7d:2e:35:1e:f7:95:14:ea:8a:
-	69:fd:f8:96:33:39:42:15:15:ed:e3:5d:34:37:d8:
-	2c:7c:ec:d1:fd:2a:f3:5b:ce:41:74:52:df:a1:9a:
-	46:81:e5:18:3d:34:82:2f:55:40:92:8f:7c:13:83:
-	9d:4c:94:24:3f:a7:8e:fc:cd:5c:bc:04:a6:64:9f:
-	9a:5c:55:f1:96:ae:52:31:42:d0:26:07:be:40:a1:
-	2d:a8:2c:ac:56:0c:de:ae:c3:a1:73:2d:2a:35:65:
-	47:74:b0:9b:70:b9:d8:ad:12:74:50:b3:00:fb:86:
-	72:d5:00:e8:02:b2:d1:e3:d5:87:3f:cc:b6:f3:26:
-	fe:25:c1:b5:59:bd:e0:c9:fa:d9:ba:47:f8:43:ea:
-	af:cf:4d:92:ae:db:9d:11:49:ec:50:33:2a:b6:44:
-	40:ac:06:c7:f6:64:2e:42:25:81:20:d5:f6:76:79:
-	b9:fb:bd:d2:c5:5d:f7:28:16:9d:cc:13:cd:d9:55:
-	e3:ca:c7:d2:38:f1:92:32:d6:ba:db:73:b6:dc:b6:
-	5f:66:89:e3:4c:9e:d6:b8:d2:01:ee:a8:d2:69:64:
-	dd:5c:1a:7e:4c:e4:1d:5b:37:94:29:3c:93:3d:43:
-	bb:33:8f:10:23:14:12:b0:33:24:58:c3:ae:97:4c:
-	3d:c5:c1:81:
-
-prime1:
-	00:c1:9c:0d:4e:aa:1b:2e:c4:14:e6:78:ed:0b:76:
-	90:af:da:3d:5e:15:6f:7d:9c:97:4d:71:a3:1d:6a:
-	47:94:25:20:9d:98:f4:d0:3b:d6:be:be:12:39:e7:
-	d7:82:3d:54:3d:f7:76:06:e2:ac:5d:e6:1f:34:fd:
-	bc:9d:9c:8b:f5:4f:83:89:8f:79:ea:9e:5e:a5:5c:
-	e9:b4:71:ae:59:43:ff:ec:03:f6:57:3c:d6:33:0b:
-	ba:4d:39:3f:90:62:b2:4f:af:e0:21:7a:5a:0f:93:
-	f4:fc:5f:ba:29:b9:af:67:18:3f:0e:23:3d:de:d9:
-	bc:47:ad:de:56:11:d1:e3:c0:7e:29:bb:67:ac:1b:
-	6a:af:5a:30:19:0c:14:49:af:db:1a:82:10:60:e1:
-	d1:98:dd:
-
-prime2:
-	00:e2:8a:9d:80:b5:29:33:06:44:d2:e3:77:bd:34:
-	3e:c0:df:98:cc:ab:f3:ba:73:3c:19:5c:d8:ed:c8:
-	22:bc:b9:8f:4f:1a:d8:0d:08:e2:e2:ca:e8:3c:13:
-	aa:23:1b:3d:75:d4:7c:e2:4e:cd:ca:d0:fc:b7:77:
-	70:57:54:e1:1c:22:a2:3e:0f:a7:59:c0:5a:4f:b1:
-	e8:62:55:85:07:7d:03:a4:8f:82:eb:2d:21:fc:cb:
-	d5:b7:3c:77:a5:9d:67:a6:ab:95:5d:1e:d3:a3:49:
-	78:9b:75:2c:07:e9:bd:ba:0f:66:69:7e:2e:50:2f:
-	76:5f:e9:28:f8:e1:c9:ce:77:4a:48:ee:92:d1:d5:
-	dc:29:2f:3f:29:7a:12:b0:d6:f9:8d:68:e4:82:45:
-	ec:3a:bd:
-
-coefficient:
-	00:82:d2:e4:3b:e3:aa:9e:99:75:0d:73:e4:e9:38:
-	f5:5e:73:e4:c2:3a:24:55:4e:ea:58:f7:2a:f2:0f:
-	ff:42:d7:e2:ef:49:d2:25:8d:86:02:a7:2b:c9:45:
-	1e:ee:a0:1c:60:58:3e:4c:bb:40:99:42:20:ff:c7:
-	3f:4e:68:8c:8b:f4:e8:41:fe:f4:79:00:a4:7e:64:
-	67:95:8e:bf:c3:45:28:dc:da:57:b9:aa:20:ac:66:
-	b0:c8:11:b2:9a:c2:60:ac:24:32:7f:17:e4:6c:dc:
-	24:43:56:22:50:86:29:a7:38:fb:4e:8c:e1:9a:c8:
-	42:a4:59:ab:49:32:bd:0b:65:30:37:06:95:29:63:
-	88:09:11:0b:0a:f3:34:82:f6:54:68:cc:71:e9:ea:
-	9f:48:0f:
-
-exp1:
-	78:8e:dc:b6:74:34:32:fd:c4:69:f3:38:e0:1f:77:
-	5f:19:4d:87:4d:5f:bc:5f:0a:d4:1d:83:cd:a8:45:
-	64:19:6e:62:d4:40:f5:7d:9d:6d:ee:db:58:95:66:
-	5b:e2:26:97:e3:84:ea:2a:b1:dc:52:94:72:21:e2:
-	16:5e:c9:c3:fa:3c:55:27:33:6a:86:2d:37:59:50:
-	e9:9c:b4:4d:3f:8b:98:02:ab:9d:8c:f3:70:9b:c7:
-	e9:98:51:5d:6e:27:cc:79:1e:de:99:da:84:c2:c4:
-	15:76:e2:6c:63:04:b6:f4:a1:27:03:88:de:40:c4:
-	fd:f9:65:6e:40:f0:6a:9a:8d:b5:1c:ce:24:9c:79:
-	e5:31:0a:ac:3e:1a:4f:fc:22:3a:32:6d:52:76:ab:
-	56:3d:
-
-exp2:
-	00:9b:74:5b:58:72:f8:6e:97:22:ab:44:84:6a:45:
-	6b:ba:96:b5:17:dd:f7:46:3e:c5:42:f2:3f:ba:0b:
-	d8:2a:81:7b:21:e1:5d:d8:b3:fc:5d:7c:b7:98:62:
-	36:22:19:13:37:c4:34:5e:67:8d:38:5b:e8:cf:4d:
-	1a:be:12:f4:d6:85:bd:a7:b0:be:3a:0c:90:ec:97:
-	3c:cc:1d:bb:47:c4:35:b7:ba:f3:2f:c6:ac:c7:f8:
-	68:13:71:5e:f9:3a:e6:61:ac:e4:b6:1d:ed:44:e3:
-	a9:eb:a3:a0:2f:5d:ea:5f:bf:29:9b:c2:86:ad:67:
-	a4:67:74:6c:35:3d:5b:6a:5e:d9:8e:ea:87:bd:8e:
-	6f:a1:a3:56:48:74:08:57:69:6d:9d:e8:18:c6:7c:
-	8c:fa:51:
-
-
-Public Key ID: 8B:01:09:4B:3B:91:EC:E3:21:B9:1D:EC:8D:6B:4C:5D:9E:40:80:5E
-Public key's random art:
-+--[ RSA 2432]----+
-| o=o             |
-|..oE..           |
-|.+=.o            |
-|o.*....          |
-| * B +..S        |
-|. * o oo .       |
-| o .  . .        |
-|  +              |
-| .               |
-+-----------------+
-
------BEGIN RSA PRIVATE KEY-----
-MIIFfAIBAAKCATEAq1SY/KnGFZWdpsGUhJSReR542y1IUZllAQLAQFJJXetwvCbv
-aDkeBJHi28tvk0BFHiKOcVpYiSh5XhoyJT6LnTs0fxn40C83t2Iyt1OlQyzFXeys
-+TX6FCs0ZvHWp6HQg5pW9BmDvL8RdDAtqChboqt6xs2cXPhR6akMSNtxu7E0d/fu
-3l14wEgKNw1lHjsrFAOJcvJS7V8AxQZg6oAg0EPsZrzSJtvwKT5q+WIgvlgmRLrX
-jG92pgUg5Ji3xHJ6Xd9PDSPsLpxx7DD5FF/IdQurZ/Z9+012ZEql1fq0CFCdE8eP
-wnmwtD4vidMzJ02fi9NgJAersnI9KaXESuw8BNJJPiYb7HoQPcpFWoCLTSqWY08t
-YygPO0dHynwsFUEy1eDJvqVVLLNrRipWsRvtKQIDAQABAoIBMF2XINskgqhXyn7F
-UDP8VFstYieYXOD2Qk6DCjIYwSsk6bheLHlqehNU/e/C+Xgeq6MCjX0uNR73lRTq
-imn9+JYzOUIVFe3jXTQ32Cx87NH9KvNbzkF0Ut+hmkaB5Rg9NIIvVUCSj3wTg51M
-lCQ/p478zVy8BKZkn5pcVfGWrlIxQtAmB75AoS2oLKxWDN6uw6FzLSo1ZUd0sJtw
-uditEnRQswD7hnLVAOgCstHj1Yc/zLbzJv4lwbVZveDJ+tm6R/hD6q/PTZKu250R
-SexQMyq2RECsBsf2ZC5CJYEg1fZ2ebn7vdLFXfcoFp3ME83ZVePKx9I48ZIy1rrb
-c7bctl9mieNMnta40gHuqNJpZN1cGn5M5B1bN5QpPJM9Q7szjxAjFBKwMyRYw66X
-TD3FwYECgZkAwZwNTqobLsQU5njtC3aQr9o9XhVvfZyXTXGjHWpHlCUgnZj00DvW
-vr4SOefXgj1UPfd2BuKsXeYfNP28nZyL9U+DiY956p5epVzptHGuWUP/7AP2VzzW
-Mwu6TTk/kGKyT6/gIXpaD5P0/F+6KbmvZxg/DiM93tm8R63eVhHR48B+KbtnrBtq
-r1owGQwUSa/bGoIQYOHRmN0CgZkA4oqdgLUpMwZE0uN3vTQ+wN+YzKvzunM8GVzY
-7cgivLmPTxrYDQji4sroPBOqIxs9ddR84k7NytD8t3dwV1ThHCKiPg+nWcBaT7Ho
-YlWFB30DpI+C6y0h/MvVtzx3pZ1npquVXR7To0l4m3UsB+m9ug9maX4uUC92X+ko
-+OHJzndKSO6S0dXcKS8/KXoSsNb5jWjkgkXsOr0CgZh4jty2dDQy/cRp8zjgH3df
-GU2HTV+8XwrUHYPNqEVkGW5i1ED1fZ1t7ttYlWZb4iaX44TqKrHcUpRyIeIWXsnD
-+jxVJzNqhi03WVDpnLRNP4uYAqudjPNwm8fpmFFdbifMeR7emdqEwsQVduJsYwS2
-9KEnA4jeQMT9+WVuQPBqmo21HM4knHnlMQqsPhpP/CI6Mm1SdqtWPQKBmQCbdFtY
-cvhulyKrRIRqRWu6lrUX3fdGPsVC8j+6C9gqgXsh4V3Ys/xdfLeYYjYiGRM3xDRe
-Z404W+jPTRq+EvTWhb2nsL46DJDslzzMHbtHxDW3uvMvxqzH+GgTcV75OuZhrOS2
-He1E46nro6AvXepfvymbwoatZ6RndGw1PVtqXtmO6oe9jm+ho1ZIdAhXaW2d6BjG
-fIz6UQKBmQCC0uQ746qemXUNc+TpOPVec+TCOiRVTupY9yryD/9C1+LvSdIljYYC
-pyvJRR7uoBxgWD5Mu0CZQiD/xz9OaIyL9OhB/vR5AKR+ZGeVjr/DRSjc2le5qiCs
-ZrDIEbKawmCsJDJ/F+Rs3CRDViJQhimnOPtOjOGayEKkWatJMr0LZTA3BpUpY4gJ
-EQsK8zSC9lRozHHp6p9IDw==
------END RSA PRIVATE KEY-----