diff --git a/docs/root/configuration/http/http_conn_man/headers.rst b/docs/root/configuration/http/http_conn_man/headers.rst index ed495b3fd9bd5..2976e093348a0 100644 --- a/docs/root/configuration/http/http_conn_man/headers.rst +++ b/docs/root/configuration/http/http_conn_man/headers.rst @@ -158,12 +158,12 @@ should be replaced by backslash-double-quote (\"). The following keys are supported: -1. ``By`` The Subject Alternative Name (URI type) of the current proxy's certificate. +1. ``By`` The Subject Alternative Name (URI type) of the current proxy's certificate. The current proxy's certificate may contain multiple URI type Subject Alternative Names, each will be a separate key-value pair. 2. ``Hash`` The SHA 256 digest of the current client certificate. 3. ``Cert`` The entire client certificate in URL encoded PEM format. 4. ``Chain`` The entire client certificate chain (including the leaf certificate) in URL encoded PEM format. 5. ``Subject`` The Subject field of the current client certificate. The value is always double-quoted. -6. ``URI`` The URI type Subject Alternative Name field of the current client certificate. +6. ``URI`` The URI type Subject Alternative Name field of the current client certificate. A client certificate may contain multiple URI type Subject Alternative Names, each will be a separate key-value pair. 7. ``DNS`` The DNS type Subject Alternative Name field of the current client certificate. A client certificate may contain multiple DNS type Subject Alternative Names, each will be a separate key-value pair. A client certificate may contain multiple Subject Alternative Name types. For details on different Subject Alternative Name types, please refer `RFC 2459`_. diff --git a/docs/root/version_history/current.rst b/docs/root/version_history/current.rst index f778293c87823..558cadf472c65 100644 --- a/docs/root/version_history/current.rst +++ b/docs/root/version_history/current.rst @@ -25,6 +25,7 @@ Minor Behavior Changes * file: changed disk based files to truncate files which are not being appended to. This behavioral change can be temporarily reverted by setting runtime guard ``envoy.reloadable_features.append_or_truncate`` to false. * grpc: flip runtime guard ``envoy.reloadable_features.enable_grpc_async_client_cache`` to be default enabled. async grpc client created through getOrCreateRawAsyncClient will be cached by default. * health_checker: exposing ``initial_metadata`` to GrpcHealthCheck in a way similar to ``request_headers_to_add`` of HttpHealthCheck. +* http: added the ability to have multiple URI type Subject Alternative Names of the client certificate in the :ref:`config_http_conn_man_headers_x-forwarded-client-cert` header. * http: avoiding delay-close for HTTP/1.0 responses framed by connection: close as well as HTTP/1.1 if the request is fully read. This means for responses to such requests, the FIN will be sent immediately after the response. This behavior can be temporarily reverted by setting ``envoy.reloadable_features.skip_delay_close`` to false. If clients are are seen to be receiving sporadic partial responses and flipping this flag fixes it, please notify the project immediately. * http: changed the http status code to 504 from 408 if the request timeouts after the request is completed. This behavior can be temporarily reverted by setting the runtime guard ``envoy.reloadable_features.override_request_timeout_by_gateway_timeout`` to false. * http: lazy disable downstream connection reading in the HTTP/1 codec to reduce unnecessary system calls. This behavioral change can be temporarily reverted by setting runtime guard ``envoy.reloadable_features.http1_lazy_read_disable`` to false. diff --git a/source/common/http/conn_manager_utility.cc b/source/common/http/conn_manager_utility.cc index c783760b84b4f..0d22da6080b5d 100644 --- a/source/common/http/conn_manager_utility.cc +++ b/source/common/http/conn_manager_utility.cc @@ -388,7 +388,9 @@ void ConnectionManagerUtility::mutateXfccRequestHeader(RequestHeaderMap& request config.forwardClientCert() == ForwardClientCertType::SanitizeSet) { const auto uri_sans_local_cert = connection.ssl()->uriSanLocalCertificate(); if (!uri_sans_local_cert.empty()) { - client_cert_details.push_back(absl::StrCat("By=", uri_sans_local_cert[0])); + for (const std::string& uri : uri_sans_local_cert) { + client_cert_details.push_back(absl::StrCat("By=", uri)); + } } const std::string cert_digest = connection.ssl()->sha256PeerCertificateDigest(); if (!cert_digest.empty()) { @@ -418,8 +420,13 @@ void ConnectionManagerUtility::mutateXfccRequestHeader(RequestHeaderMap& request case ClientCertDetailsType::URI: { // The "URI" key still exists even if the URI is empty. const auto sans = connection.ssl()->uriSanPeerCertificate(); - const auto& uri_san = sans.empty() ? "" : sans[0]; - client_cert_details.push_back(absl::StrCat("URI=", uri_san)); + if (!sans.empty()) { + for (const std::string& uri : sans) { + client_cert_details.push_back(absl::StrCat("URI=", uri)); + } + } else { + client_cert_details.push_back("URI="); + } break; } case ClientCertDetailsType::DNS: { diff --git a/test/common/http/conn_manager_utility_test.cc b/test/common/http/conn_manager_utility_test.cc index 4ccaddffb23ad..20601cc007ba1 100644 --- a/test/common/http/conn_manager_utility_test.cc +++ b/test/common/http/conn_manager_utility_test.cc @@ -1026,15 +1026,16 @@ TEST_F(ConnectionManagerUtilityTest, MtlsForwardOnlyClientCert) { headers.get_("x-forwarded-client-cert")); } -// The server (local) identity is foo.com/be. The client does not set XFCC. +// The server (local) identity is test://foo.com/be and http://backend.foo.com. The client does not +// set XFCC. TEST_F(ConnectionManagerUtilityTest, MtlsSetForwardClientCert) { auto ssl = std::make_shared>(); ON_CALL(*ssl, peerCertificatePresented()).WillByDefault(Return(true)); - const std::vector local_uri_sans{"test://foo.com/be"}; + const std::vector local_uri_sans{"test://foo.com/be", "http://backend.foo.com"}; EXPECT_CALL(*ssl, uriSanLocalCertificate()).WillOnce(Return(local_uri_sans)); std::string expected_sha("abcdefg"); EXPECT_CALL(*ssl, sha256PeerCertificateDigest()).WillOnce(ReturnRef(expected_sha)); - const std::vector peer_uri_sans{"test://foo.com/fe"}; + const std::vector peer_uri_sans{"test://foo.com/fe", "http://frontend.foo.com"}; EXPECT_CALL(*ssl, uriSanPeerCertificate()).WillRepeatedly(Return(peer_uri_sans)); std::string expected_pem("%3D%3Dabc%0Ade%3D"); EXPECT_CALL(*ssl, urlEncodedPemEncodedPeerCertificate()).WillOnce(ReturnRef(expected_pem)); @@ -1057,9 +1058,9 @@ TEST_F(ConnectionManagerUtilityTest, MtlsSetForwardClientCert) { EXPECT_EQ((MutateRequestRet{"10.0.0.3:50000", false, Tracing::Reason::NotTraceable}), callMutateRequestHeaders(headers, Protocol::Http2)); EXPECT_TRUE(headers.has("x-forwarded-client-cert")); - EXPECT_EQ("By=test://foo.com/be;" + EXPECT_EQ("By=test://foo.com/be;By=http://backend.foo.com;" "Hash=abcdefg;" - "URI=test://foo.com/fe;" + "URI=test://foo.com/fe;URI=http://frontend.foo.com;" "Cert=\"%3D%3Dabc%0Ade%3D\";" "Chain=\"%3D%3Dabc%0Ade%3D%3D%3Dlmn%0Aop%3D\";" "DNS=www.example.com", @@ -1067,17 +1068,17 @@ TEST_F(ConnectionManagerUtilityTest, MtlsSetForwardClientCert) { } // This test assumes the following scenario: -// The client identity is foo.com/fe, and the server (local) identity is foo.com/be. The client -// also sends the XFCC header with the authentication result of the previous hop, (bar.com/be -// calling foo.com/fe). +// The client identity is test://foo.com/fe and http://frontend.foo.com, +// and the server (local) identity is test://foo.com/be and http://backend.frontend.com. +// The client also sends the XFCC header with the authentication result of the previous hop. TEST_F(ConnectionManagerUtilityTest, MtlsAppendForwardClientCert) { auto ssl = std::make_shared>(); ON_CALL(*ssl, peerCertificatePresented()).WillByDefault(Return(true)); - const std::vector local_uri_sans{"test://foo.com/be"}; + const std::vector local_uri_sans{"test://foo.com/be", "http://backend.foo.com"}; EXPECT_CALL(*ssl, uriSanLocalCertificate()).WillOnce(Return(local_uri_sans)); std::string expected_sha("abcdefg"); EXPECT_CALL(*ssl, sha256PeerCertificateDigest()).WillOnce(ReturnRef(expected_sha)); - const std::vector peer_uri_sans{"test://foo.com/fe"}; + const std::vector peer_uri_sans{"test://foo.com/fe", "http://frontend.foo.com"}; EXPECT_CALL(*ssl, uriSanPeerCertificate()).WillRepeatedly(Return(peer_uri_sans)); std::string expected_pem("%3D%3Dabc%0Ade%3D"); EXPECT_CALL(*ssl, urlEncodedPemEncodedPeerCertificate()).WillOnce(ReturnRef(expected_pem)); @@ -1095,16 +1096,19 @@ TEST_F(ConnectionManagerUtilityTest, MtlsAppendForwardClientCert) { details.push_back(Http::ClientCertDetailsType::Chain); details.push_back(Http::ClientCertDetailsType::DNS); ON_CALL(config_, setCurrentClientCertDetails()).WillByDefault(ReturnRef(details)); - TestRequestHeaderMapImpl headers{{"x-forwarded-client-cert", "By=test://foo.com/fe;" - "URI=test://bar.com/be;" - "DNS=test.com;DNS=test.com"}}; + TestRequestHeaderMapImpl headers{{"x-forwarded-client-cert", + "By=test://foo.com/fe;By=http://frontend.foo.com;" + "URI=test://bar.com/be;" + "DNS=test.com;DNS=test.com"}}; EXPECT_EQ((MutateRequestRet{"10.0.0.3:50000", false, Tracing::Reason::NotTraceable}), callMutateRequestHeaders(headers, Protocol::Http2)); EXPECT_TRUE(headers.has("x-forwarded-client-cert")); EXPECT_EQ( - "By=test://foo.com/fe;URI=test://bar.com/be;DNS=test.com;DNS=test.com," - "By=test://foo.com/be;Hash=abcdefg;URI=test://foo.com/fe;" + "By=test://foo.com/fe;By=http://frontend.foo.com;URI=test://bar.com/" + "be;DNS=test.com;DNS=test.com," + "By=test://foo.com/be;By=http://backend.foo.com;Hash=abcdefg;URI=test://foo.com/fe;URI=http:/" + "/frontend.foo.com;" "Cert=\"%3D%3Dabc%0Ade%3D\";Chain=\"%3D%3Dabc%0Ade%3D%3D%3Dlmn%0Aop%3D\";DNS=www.example.com", headers.get_("x-forwarded-client-cert")); } @@ -1139,19 +1143,19 @@ TEST_F(ConnectionManagerUtilityTest, MtlsAppendForwardClientCertLocalSanEmpty) { } // This test assumes the following scenario: -// The client identity is foo.com/fe, and the server (local) identity is foo.com/be. The client -// also sends the XFCC header with the authentication result of the previous hop, (bar.com/be -// calling foo.com/fe). +// The client identity is test://foo.com/fe and http://frontend.foo.com, and the server +// (local) identity is test://foo.com/be and http://backend.foo.com. The client +// also sends the XFCC header with the authentication result of the previous hop. TEST_F(ConnectionManagerUtilityTest, MtlsSanitizeSetClientCert) { auto ssl = std::make_shared>(); ON_CALL(*ssl, peerCertificatePresented()).WillByDefault(Return(true)); - const std::vector local_uri_sans{"test://foo.com/be"}; + const std::vector local_uri_sans{"test://foo.com/be", "http://backend.foo.com"}; EXPECT_CALL(*ssl, uriSanLocalCertificate()).WillOnce(Return(local_uri_sans)); std::string expected_sha("abcdefg"); EXPECT_CALL(*ssl, sha256PeerCertificateDigest()).WillOnce(ReturnRef(expected_sha)); std::string peer_subject("/C=US/ST=CA/L=San Francisco/OU=Lyft/CN=test.lyft.com"); EXPECT_CALL(*ssl, subjectPeerCertificate()).WillOnce(ReturnRef(peer_subject)); - const std::vector peer_uri_sans{"test://foo.com/fe"}; + const std::vector peer_uri_sans{"test://foo.com/fe", "http://frontend.foo.com"}; EXPECT_CALL(*ssl, uriSanPeerCertificate()).WillRepeatedly(Return(peer_uri_sans)); std::string expected_pem("abcde="); EXPECT_CALL(*ssl, urlEncodedPemEncodedPeerCertificate()).WillOnce(ReturnRef(expected_pem)); @@ -1173,10 +1177,11 @@ TEST_F(ConnectionManagerUtilityTest, MtlsSanitizeSetClientCert) { EXPECT_EQ((MutateRequestRet{"10.0.0.3:50000", false, Tracing::Reason::NotTraceable}), callMutateRequestHeaders(headers, Protocol::Http2)); EXPECT_TRUE(headers.has("x-forwarded-client-cert")); - EXPECT_EQ("By=test://foo.com/be;Hash=abcdefg;Subject=\"/C=US/ST=CA/L=San " - "Francisco/OU=Lyft/CN=test.lyft.com\";URI=test://foo.com/" - "fe;Cert=\"abcde=\";Chain=\"abcde=lmnop=\"", - headers.get_("x-forwarded-client-cert")); + EXPECT_EQ( + "By=test://foo.com/be;By=http://backend.foo.com;Hash=abcdefg;Subject=\"/C=US/ST=CA/L=San " + "Francisco/OU=Lyft/CN=test.lyft.com\";URI=test://foo.com/fe;URI=http://frontend.foo.com;" + "Cert=\"abcde=\";Chain=\"abcde=lmnop=\"", + headers.get_("x-forwarded-client-cert")); } // This test assumes the following scenario: diff --git a/test/config/integration/certs/cacert.pem b/test/config/integration/certs/cacert.pem index c54bd51a30743..47c66c6b07b60 100644 --- a/test/config/integration/certs/cacert.pem +++ b/test/config/integration/certs/cacert.pem @@ -1,23 +1,23 @@ -----BEGIN CERTIFICATE----- -MIID3TCCAsWgAwIBAgIUdCu/mLip3X/We37vh3BA9u/nxakwDQYJKoZIhvcNAQEL +MIID3TCCAsWgAwIBAgIUGQwcn3z/kJYn5qdm0nR+3wNySAEwDQYJKoZIhvcNAQEL BQAwdjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcM DVNhbiBGcmFuY2lzY28xDTALBgNVBAoMBEx5ZnQxGTAXBgNVBAsMEEx5ZnQgRW5n -aW5lZXJpbmcxEDAOBgNVBAMMB1Rlc3QgQ0EwHhcNMjAwODA1MTkxNjAwWhcNMjIw -ODA1MTkxNjAwWjB2MQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEW +aW5lZXJpbmcxEDAOBgNVBAMMB1Rlc3QgQ0EwHhcNMjIwNDA3MTY0NjM0WhcNMjQw +NDA2MTY0NjM0WjB2MQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEW MBQGA1UEBwwNU2FuIEZyYW5jaXNjbzENMAsGA1UECgwETHlmdDEZMBcGA1UECwwQ THlmdCBFbmdpbmVlcmluZzEQMA4GA1UEAwwHVGVzdCBDQTCCASIwDQYJKoZIhvcN -AQEBBQADggEPADCCAQoCggEBALu2Ihi4DmaQG7zySZlWyM9SjxOXCI5840V7Hn0C -XoiI8sQQmKSC2YCzsaphQoJ0lXCi6Y47o5FkooYyLeNDQTGS0nh+IWm5RCyochtO -fnaKPv/hYxhpyFQEwkJkbF1Zt1s6j2rq5MzmbWZx090uXZEE82DNZ9QJaMPu6VWt -iwGoGoS5HF5HNlUVxLNUsklNH0ZfDafR7/LC2ty1vO1c6EJ6yCGiyJZZ7Ilbz27Q -HPAUd8CcDNKCHZDoMWkLSLN3Nj1MvPVZ5HDsHiNHXthP+zV8FQtloAuZ8Srsmlyg -rJREkc7gF3f6HrH5ShNhsRFFc53NUjDbYZuha1u4hiOE8lcCAwEAAaNjMGEwDwYD -VR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFJZL2ixTtL6V -xpNz4qekny4NchiHMB8GA1UdIwQYMBaAFJZL2ixTtL6VxpNz4qekny4NchiHMA0G -CSqGSIb3DQEBCwUAA4IBAQAcgG+AaCdrUFEVJDn9UsO7zqzQ3c1VOp+WAtAU8OQK -Oc4vJYVVKpDs8OZFxmukCeqm1gz2zDeH7TfgCs5UnLtkplx1YO1bd9qvserJVHiD -LAK+Yl24ZEbrHPaq0zI1RLchqYUOGWmi51pcXi1gsfc8DQ3GqIXoai6kYJeV3jFJ -jxpQSR32nx6oNN/6kVKlgmBjlWrOy7JyDXGim6Z97TzmS6Clctewmw/5gZ9g+M8e -g0ZdFbFkNUjzSNm44hiDX8nR6yJRn+gLaARaJvp1dnT+MlvofZuER17WYKH4OyMs -ie3qKR3an4KC20CtFbpZfv540BVuTTOCtQ5xqZ/LTE78 +AQEBBQADggEPADCCAQoCggEBAM0kM+nbWI8YCCis++FH9CeAqUTLwjodgLeLYK1B +LYH4nbi7lye82EXLj37ufFe/Rn7CZqimJZU1uu+2sgroZjfIe1FewegmosHFzwq1 +ci24dvfReR/Nsqv5PRWhRvWmUvJl8D8ova0RphEnnfLOPKy1y5BbHXkITTHhtnPA +yej9WdhOSHN1mjvjspCJi2Zi5uKdiRo+viZ/eKcSkUB45uzAmpMPw5xwZ5/rIuPn +fD2bh69hG95I2sdzyElSn32xGs9tD2JL3WgXwvfngDSEWg3uUE8XTtG0IWEPiFDo +u345nTGn3e0SrF3LyndrmFZN7MMOXAyb4dtgUBQwQ/QJL1sCAwEAAaNjMGEwDwYD +VR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFB0NOZh07PtO +rAymg6WLcOaPvzKCMB8GA1UdIwQYMBaAFB0NOZh07PtOrAymg6WLcOaPvzKCMA0G +CSqGSIb3DQEBCwUAA4IBAQC1YNkHjCwx8XFWRAd4hJ0jLKzrmFRwmrTFS1nM68uq +qs1OP1Q1j8LXvejTLQqd+6BaG+MmHqKTQuvMqoOdQof8XXwaCTkQVcYh84EmCCO4 +gS2tmoU2geIv7Nt9apmqLPyfRgnNs1mcQ5g6RNM7Q88eho7MnU+4RfZv3ooA0eMl +QrETNW0ZOeA7gJmHP3xj1YUOV5ogOuNItu+QTTrUCcxzpe8DYU4Fos7IGG3x3pqq +gBdElEBj+dhVUEsjV3uU6IJGd8hzKcJ4fmi2uS9w43IjXa7WjO5MVoxOBxz55SyD +bB1dvCZ4Jx5uBkqE3135ngOD/4h8ZLwv69hzivUmgFER -----END CERTIFICATE----- diff --git a/test/config/integration/certs/cacert_info.h b/test/config/integration/certs/cacert_info.h new file mode 100644 index 0000000000000..66a9281c8942d --- /dev/null +++ b/test/config/integration/certs/cacert_info.h @@ -0,0 +1,6 @@ +// NOLINT(namespace-envoy) +constexpr char TEST_CA_CERT_256_HASH[] = + "c3e7f584b399f0f11e65268a24b2ab536ba6a9f7d722150d0e10afa70a470ad4"; +constexpr char TEST_CA_CERT_1_HASH[] = "5df2ca889db6287a61ebc9464d6f474fa50d37aa"; +constexpr char TEST_CA_CERT_SPKI[] = "VYTUpj60bicmU8PDzK7BzeGY5Zx2x+0bs0V5tFpRk+Y="; +constexpr char TEST_CA_CERT_SERIAL[] = "190c1c9f7cff909627e6a766d2747edf03724801"; diff --git a/test/config/integration/certs/cakey.pem b/test/config/integration/certs/cakey.pem index c545e1d17866e..b204c0cdc2902 100644 --- a/test/config/integration/certs/cakey.pem +++ b/test/config/integration/certs/cakey.pem @@ -1,27 +1,27 @@ -----BEGIN RSA PRIVATE KEY----- -MIIEpgIBAAKCAQEAu7YiGLgOZpAbvPJJmVbIz1KPE5cIjnzjRXsefQJeiIjyxBCY -pILZgLOxqmFCgnSVcKLpjjujkWSihjIt40NBMZLSeH4hablELKhyG05+doo+/+Fj -GGnIVATCQmRsXVm3WzqPaurkzOZtZnHT3S5dkQTzYM1n1Alow+7pVa2LAagahLkc -Xkc2VRXEs1SySU0fRl8Np9Hv8sLa3LW87VzoQnrIIaLIllnsiVvPbtAc8BR3wJwM -0oIdkOgxaQtIs3c2PUy89VnkcOweI0de2E/7NXwVC2WgC5nxKuyaXKCslESRzuAX -d/oesflKE2GxEUVznc1SMNthm6FrW7iGI4TyVwIDAQABAoIBAQCasKW4qTV04B17 -wE9WxmYGNIskIbszcUf54lRlwKYW7oThfqvMJukHXw5y0mP1Dg55HEhMpmlNUBl/ -barTNoFrUQuRsJ/oeHzuMIKYbj9ZgOQaCquXWtV0J9fOzuNeqqinzcKS4bBcCyjs -27E0/Riugd3vUFbYLkjf7urraHC9k1mqMrTgTcQct3LO3oUG0cd2ANX6fMrE7Hfw -ZNPf9U+G0/QQIvRCn7xAzWNo+kwwrd/Yz4/S1YKDXeAkRHGlqjoXnrucwRYbBfsV -zg66mGvtlTrYjKgz8GfKZD8Azz9LVVXbN/2P6WAL/vTeNfMCV4VDGVk7BNs7UU7X -C1vetPJBAoGBAN8zNzdw/1tE6gmHzN3Hytk76t7uLA5XKlH81f7akRe/JqZ1urqi -OgJz1coLsJeRbIczSuF6qpsBVufwGUV8pQbF5JQPhS74MESlFffJ8knDr+6AHFbn -ow/8ZmDPyBBZIRsYdZZpqjqlqWjqnpYKMwcXmf5Yiq1G7FUdBEtrcObDAoGBANdL -1ihVvRWZsN8gYC9Wb+PxKNqaKTZZ/1BGPHmuMB28r4F6C8EtLQCReiuBPiLWs7FE -7hSeFTgLEncBK9nVRYpG3W6UKowBV16mr7tGJpoYVoUNUT7SxiwZWHx+VLkTfWex -iNYv/Ycxl6iYdkXzuHqUinxccEziKqEu6zMzd5TdAoGBAKEjRo/eIlzwCc7LndnX -rdjbaxt6849+2mzKjmwpu2pbdDnk8ORgzmSK4CO4AMvMD4AkRcE3YAf8FZPpQTVr -YXDcWcOS2OIqCB7m2E9GGoeqoU8callLbevSms7180fqMP5w0CPBMUaZ5w55o/hK -cMCEB4cawTOL6n8gLcONU7slAoGBALCT826be3yW1Bj8ncbVdumV5nL8U2bPg3Zc -VMdb1Pzev3dLGQ70NV+s8W1zD/pU64YtybLBQRf5BMjz/fooUGOr4XsLLKYth3IK -9kB7tbdW1MdFd+g1yPFsTEW2+1fcI1ODqX46WA6k3wUZHpAa56gp4jdDPZvhNyOB -rsgMozxFAoGBAJuaqAWXFA2wy+zDw8P6rhRDF52DmNMYeVBvFGtBOBy0BYavsesj -qRMzdDdhrQMzYqLCnvurEytaLscM+Jltzt1ImWtNwXoTg1O+Cl01wzBWK/NGrMBg -tiHVT2ojF3hIyFjr9Z7IgcosyvaNTHnBxIKUy2tiAprruYOwhH9kXdHX +MIIEpQIBAAKCAQEAzSQz6dtYjxgIKKz74Uf0J4CpRMvCOh2At4tgrUEtgfiduLuX +J7zYRcuPfu58V79GfsJmqKYllTW677ayCuhmN8h7UV7B6CaiwcXPCrVyLbh299F5 +H82yq/k9FaFG9aZS8mXwPyi9rRGmESed8s48rLXLkFsdeQhNMeG2c8DJ6P1Z2E5I +c3WaO+OykImLZmLm4p2JGj6+Jn94pxKRQHjm7MCakw/DnHBnn+si4+d8PZuHr2Eb +3kjax3PISVKffbEaz20PYkvdaBfC9+eANIRaDe5QTxdO0bQhYQ+IUOi7fjmdMafd +7RKsXcvKd2uYVk3sww5cDJvh22BQFDBD9AkvWwIDAQABAoIBAGmDvoQBw4pOdRve +5euZI/cRkX8GQw+7TxKZSQ+0X6DjbNSxAG17D87Ohi9moWRMyQi4Gy+RzfDyYwWb +dfZwVOtKXkubLqem/74lbXn3nBPyNpb/EosONWGJYCb4/lOpyi5NyoXiAbW8Ryu5 +sd9KvyCinWLRytYPNA19KGhfeDsy8TPaObbBbLWKdejbYF4mLX+J3ZHL9ANbuhUz +VWLGesCa8yP2w6sNzIbIPvZDCmAxc28xxi7jhNiKTE9wQbMSk2kJ6NryC/sUsK8E +FhoTEahYi4GV+6UDpNpk7ilAVykUt+N/fZgb68mKoG2XyjziL+JpxDEBQMfE2sfp +Usz9Y2ECgYEA6Vjot062w7PaJ3OWDOH8BonQgWdTHLXxg5G1qL/Z/Thzesl9t0VC +pazkKp8kynbEpGUGmbP37wFWzcHcR3LjG9NwNb6H1dr5IB7Bg7ah6xnEfGM2KX3w +uvrZfLgXqiEBxaQRgAJWwkTUdY/OuKm5gK+eoT9LpzBeWRUsJmGmPMsCgYEA4Q5T +8ZHmHN7/5SR1uLGpEHeb0UW3Z8H72Fq2QINi2jAy4Tud0oSgs8QiKtX++0vjIBI6 +sU5uBlilcZioyPIg2uA2ZsKZjAMSKvrz7j5PdffE6hansy7nySwAaMtO36uzH0+f +JyQ4RhHmcxNewLLywQ2F5pnILUtIa+3YJWRFlbECgYEAqNoEM7jKuZxoTMnwF0xj +cVvCPBFHa+wgYmNKv1xsYja6IWyyAq8khfwwcsML/VGqA4dzGj/HNfSTGnqgajcx +Lc53UPyZEF/Oi7aVszixvAy+SIAGDkoqqzKftAcGYL5XqOuLGkUXAKaL0rIIFUoD +iKIMOIQzuzxd2Tpf4zof77cCgYEAwkl9PGGo1ynIngfAvSZafoXTdXGLKL61bQy6 +o60JLLVJZ1nxIGkw1qAuou5FBqp3tBsooiLEJyRmB1Az/e3RYUMIk+PRbKbGC2bE +KNuP+5ZfX3sZYT3QCcK7w7woJj3zD8fL7J1/GzaezJ9fQFn76Z+EBhSiVD/WkJ4u +5/DNhbECgYEAyNrSvJ7RHUQCfwY97L7AQgVxuKRD/qqTS9IdCt8tb+CIeFzJSwhD +w+jIePgKxiJNaxWxRluDffn7mlDzum6D+ZpYbWfMPqF4UaVqfjmbq9Tzx7kIBRBr +KCXqQ25R2TynWgUzFQJ/kY4s9EcjqCb12XYxnjjKvKw5J8gs/497ggc= -----END RSA PRIVATE KEY----- diff --git a/test/config/integration/certs/client2cert.pem b/test/config/integration/certs/client2cert.pem index d0e9742d6cb1f..68420ec75d3f0 100644 --- a/test/config/integration/certs/client2cert.pem +++ b/test/config/integration/certs/client2cert.pem @@ -1,27 +1,27 @@ -----BEGIN CERTIFICATE----- -MIIEgTCCA2mgAwIBAgIUIIGgL7g+FhxuvwJJ45qJeYjh/jcwDQYJKoZIhvcNAQEL +MIIEgTCCA2mgAwIBAgIUWail13vk5FsoudZgo+XjboJmFLUwDQYJKoZIhvcNAQEL BQAwgYUxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRYwFAYDVQQH DA1TYW4gRnJhbmNpc2NvMQ0wCwYDVQQKDARMeWZ0MRkwFwYDVQQLDBBMeWZ0IEVu Z2luZWVyaW5nMR8wHQYDVQQDDBZUZXN0IEludGVybWVkaWF0ZSBDQSAyMB4XDTIy -MDMyNTE5NTA1MFoXDTI0MDMyNDE5NTA1MFowgaoxCzAJBgNVBAYTAlVTMRMwEQYD +MDQwNzE2NDYzNVoXDTI0MDQwNjE2NDYzNVowgaoxCzAJBgNVBAYTAlVTMRMwEQYD VQQIDApDYWxpZm9ybmlhMRYwFAYDVQQHDA1TYW4gRnJhbmNpc2NvMQ0wCwYDVQQK DARMeWZ0MRkwFwYDVQQLDBBMeWZ0IEVuZ2luZWVyaW5nMR0wGwYDVQQDDBRUZXN0 IEZyb250ZW5kIFRlYW0gMjElMCMGCSqGSIb3DQEJARYWZnJvbnRlbmQtdGVhbUBs -eWZ0LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPVVhEQGps9F -qFq7UXqRqI8yXvrvVs1ymeGwAy/9jy+NABavzSYA60uU5lNXG6RQ1IYiq83ZYOp7 -TzW1kk0R8t3JDmZRPEytuPXxZf+da9vBo2J9av7eieHDkCeUQBohJduQX+9cBlpX -It8ZNEFnFB2za0qFF6hjzx9mV5G+oTh4B4XFiwN/048irPl+Rj+k5Fh6kzKgGIF8 -LjUIIDJUhxL1CWq+ki5HHuPYOZZqfkUE+wonLFG6bmxGGmDDh8EVyTHdaOXaWf7N -H4pHqSsyqUkxQHw1T6htukY0Ee60Emngk4OV72zRh+3KnTPGUmiFj232XIJNbTV4 -DU1bIR36UssCAwEAAaOBwTCBvjAMBgNVHRMBAf8EAjAAMAsGA1UdDwQEAwIF4DAd +eWZ0LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANFyOAesZNT0 +t14namQJHdu6Nw2RK6YeSYTTNG9S1cK6O4krd3qp9Onq/1/79XMGo7sgGG8SANnp +g07I2CSu70f0Kv7gUeg1eVJg21GIADed6LY2vhDvRHb4GGQ173ERZTGMqXJPA8he +6rG88tMk4VM6zjHqLyHC6sXoCYjh96K2ZVR5co4dxeeNrp5P+zj/Cu92X+pQF3Xz +KlOtxrhBQfPOqbmjM5ArUXWzJfi6x5PV5PHhihsOqycAqgu0TqemISDmIyhlGtOB +holf8/TBsLD42prGVomLYe4IHRdZg7mY6UCDJ0tjJa9X93y3RmY0zfqIOLoG0HqO +ocMqlsJts7UCAwEAAaOBwTCBvjAMBgNVHRMBAf8EAjAAMAsGA1UdDwQEAwIF4DAd BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwQgYDVR0RBDswOYYfc3BpZmZl Oi8vbHlmdC5jb20vZnJvbnRlbmQtdGVhbYIIbHlmdC5jb22CDHd3dy5seWZ0LmNv -bTAdBgNVHQ4EFgQUW1w5BR+PRm0y9JplvkyAJ6DmRRswHwYDVR0jBBgwFoAUDj3H -is2n//bT+fCrR3LhNA3yncswDQYJKoZIhvcNAQELBQADggEBAJUV/LNbgWKPafK/ -aC6mtkf49875SSlBowEDEIoapuG99k01ZsiXKzrTa0Y8At1SM2Gfylc8Owy6/+AD -+V5W9RfLCAiou37xPmu31TMzu8jE7MXsZsd/ZTBq4Qen3r1fOtCQI1pGtKOBY0/U -3fLNHZ7KvVLmIORjhXFUuLL0C+AH/PMCdRVX/ZEIuLSbnN9+a3/jcJqVZIub9nlg -kc1J7X1DdrUqX/V5Cuil8lgZAMQjOXVptJXaf/A+Ksrr0eaO85qKUfxBwP8fi94Y -jDJCQJG1igJ7111wn4Wflwnl78BtuSWAlR+c5l+SpNdxzweRxLwtrPL+bOqCHsxK -GdMqWiU= +bTAdBgNVHQ4EFgQUR5hJ+QnnPifNgmWWD9qx34I7/34wHwYDVR0jBBgwFoAU4H2N +TPaOHW5zelyDUBDh4RTRDZMwDQYJKoZIhvcNAQELBQADggEBAHSW5yNOtfH2MxLT +xqMqN7pO55Wlel1fTFueTq0YmkLmIV0ASDKKjogKcOW+MggX732FuxB6Ik+S7ahm +UlqZ8jWKDvSPsRTMlg3dPMY1py0LQUioDJCtCYlL0lJlFVptV4dVINwyGvFE49b/ +VAatlvAl/GDjGy/+DrMdk7kFNLg0qfv3CHorDYqbJYZ+YH6OheTPeRNRuS9robEW +RqgFsP2ZuiX6jtM4h9/mChvcPODKdLVkBKidsiDP6EdJnVxroB8t6Yo8jDa7q7Up +5nRmaCuzeLUTCgxdfLArsmdMTyjgvcusR+rKQt/zUZjk2fxRJ7JT3gXNv9bGhEzM +gOjlaFA= -----END CERTIFICATE----- diff --git a/test/config/integration/certs/client2cert_hash.h b/test/config/integration/certs/client2cert_hash.h index f01333e9e8642..0ad3f14b0a23d 100644 --- a/test/config/integration/certs/client2cert_hash.h +++ b/test/config/integration/certs/client2cert_hash.h @@ -1,3 +1,3 @@ // NOLINT(namespace-envoy) -constexpr char TEST_CLIENT2_CERT_HASH[] = "39:C3:43:45:42:EA:07:E6:78:66:9B:F9:09:AE:C2:A4:BE:90:" - "E5:62:76:55:BF:EE:CF:85:CC:C1:DA:01:D1:43"; +constexpr char TEST_CLIENT2_CERT_HASH[] = "64:4A:7F:03:17:7F:E3:78:58:0C:89:B3:B3:8A:CB:B3:95:6E:" + "56:ED:BF:17:CD:2D:B4:4D:CB:E6:36:BA:C9:91"; diff --git a/test/config/integration/certs/client2key.pem b/test/config/integration/certs/client2key.pem index 4e840bdb25882..5746fa0c0975b 100644 --- a/test/config/integration/certs/client2key.pem +++ b/test/config/integration/certs/client2key.pem @@ -1,27 +1,27 @@ -----BEGIN RSA PRIVATE KEY----- -MIIEowIBAAKCAQEA9VWERAamz0WoWrtRepGojzJe+u9WzXKZ4bADL/2PL40AFq/N -JgDrS5TmU1cbpFDUhiKrzdlg6ntPNbWSTRHy3ckOZlE8TK249fFl/51r28GjYn1q -/t6J4cOQJ5RAGiEl25Bf71wGWlci3xk0QWcUHbNrSoUXqGPPH2ZXkb6hOHgHhcWL -A3/TjyKs+X5GP6TkWHqTMqAYgXwuNQggMlSHEvUJar6SLkce49g5lmp+RQT7Cics -UbpubEYaYMOHwRXJMd1o5dpZ/s0fikepKzKpSTFAfDVPqG26RjQR7rQSaeCTg5Xv -bNGH7cqdM8ZSaIWPbfZcgk1tNXgNTVshHfpSywIDAQABAoIBAE8TlWJn0nSUu0Mj -hYvAT1h4n+y6IHxwJ/F6zkw1qmVlSVYGrFVHjo/6GpNaTGqWMypZGo9rNbXesRVa -xSFaW7HpEF8iaBE/HZMIkBvoHc/jhkpEqqwkBsViR6C6RD8n2BABZSq9ur57v52x -fgpmszEvl7GZXJrGMQip8CfmDgko5ZS1By5h7CyQE2WRaHnnFHZ9Ipljd/eFMJ+5 -Y8jpY3Y33s+ObzGixsTwoHpCKMALj1hfDowzfICSnb96c2EUx3Qdp79l5AcV88fq -b3pMqC6h+JMs1GonMiLT1fmaewDa4TQalyxYjfIZQq8qfIAOlP1xZptD5CayzUn4 -2oqLrYECgYEA+/UhuDohjXD2CrO+8S70W237W7CsPWuM9yUGMATgwT0N313KfUzS -92aZ4hPoHIWPxcf8HduAdnpsefyGFL5OK8ZYrhGtKYU2yaDf7HFz5Obz442jv908 -HY39CEPzmyBo0TUv1p38a+3VB5s4+wTheQjgHJ7pNvd83OyE3ecnVfsCgYEA+UUu -IDWZ3jRTH8GLY9vO2hf/CLKxq4sWCtd15d9wz65OdBRzu69B7bWtMEINna+BbmmA -VppEhxe4ZH+sw2Oh2Iypkq2eVql1C+pMpYuYP1OfV4mHPckEYYGbhKHgEJM5lpfw -W7edrIWqMfkmYhJPVt4BNeTpk1Ud5dA1RMXM7XECgYA1MktdR0DASUJZfhvpdj13 -dGAmusWS7jtEDxggWVdO1WIxb+8Jx4efXpVM62ENbJGvc4riju6vlSeEFfIFPSzq -ByXAEtFZu9uWdJXyqP2MLcr+l3AkWUSRBOKQtTAg55XZ3f3stUyPSRa6VWaRcTVd -xabzxAV/an99cZ6X728ZswKBgQC0jl7F5+2HXaFkXD5KW9pucXlDZKR7XGjf+4ej -tYCyflDHllTqex0nQTSswvu333vCbVsP3/iJXi4rZavPb+i4wdLGs0oA/ggRVGqm -cwIZxMmjj7PNlkC9HDN5FAQIHYxWP8JTvSHR6JQKVK1v1lFv26lGz4Q9OydH4tPi -99/jkQKBgEb4U7q27OoGh49AAu9oADEp/fD+jDLSg9UJEZSWAL9oxABdKdYQEpa0 -ZOqZVe2yIYstvT1g90xISjRI81/0FB2BjQ6ZR1A7bjs2aeRqAORHySLHar/LT+W8 -3ZrKGdkE7Kh46HTMhuDs+zIsmDU2GIqIucnGfzpLvCbRJhjioY8w +MIIEpAIBAAKCAQEA0XI4B6xk1PS3XidqZAkd27o3DZErph5JhNM0b1LVwro7iSt3 +eqn06er/X/v1cwajuyAYbxIA2emDTsjYJK7vR/Qq/uBR6DV5UmDbUYgAN53otja+ +EO9EdvgYZDXvcRFlMYypck8DyF7qsbzy0yThUzrOMeovIcLqxegJiOH3orZlVHly +jh3F542unk/7OP8K73Zf6lAXdfMqU63GuEFB886puaMzkCtRdbMl+LrHk9Xk8eGK +Gw6rJwCqC7ROp6YhIOYjKGUa04GGiV/z9MGwsPjamsZWiYth7ggdF1mDuZjpQIMn +S2Mlr1f3fLdGZjTN+og4ugbQeo6hwyqWwm2ztQIDAQABAoIBAEqrwwgRUT2PJZS+ +zrJtgaSlxhzjJcGqyKE/P1F1Idqz1Kf5xDYKQ9PlwTgyNvbUZik/rxZiP8Vw+Cxt +dInXiF2J0o5d4TW9YsyY1XhC2Xj6pk3YRHj7JNiZaPDJPd18yywYLw0e2IVmOZw2 +dggK/P5UV9D54eXSfSsjp8qSbVwnr2PXTm3hYwBGPFsG65W75CLubWHU0tB/gY28 +GN2jw/UWO/rocNV4WkkePijCqKJZDfA3vHf+FS7tp2xbWRnpKP4e6kp8Mes0rtr3 +FZDl8wj9JM9FZpixi+aurFiprUe9hVJENxJZEoMASloTKpCS7bE50NO7u9L4dFYU +qWRIjP0CgYEA+s0aD0DACnK2Q8Qa0dBYwG5+n8NASdAJPhGr0tYRdSkCHvLp4X01 +vRAETem74WyyGDZYtsLH1wOAgliGXrB6LQDotNmZ46vWCgOSIiWiUn4ZrbqH9TuN +VjIQHqTMB/9X1soAnTm12q4IA4A0vZdJmEFvhmVpYuc9tOcjNJlJPEMCgYEA1cmp +whA90/sci99gSoBats+yB9Pa+YO/aS6QRZQadgSSIccrI+HWyJEyV3CC1WZ2EcRQ +clEHQbys0jStcd0Xm7w+EfCKSE78gm6e3WmJ42uR7D0ZI+RhalHZIQXO/kJp3NrV +T/tu/A0lxwRC7375bbWYg+bNW1uhv5eSgTC2zKcCgYEAsat4qZOKOByZiBo1katS +JEhihZVRRrkMwx7LpVmnFmONsBUPoIEN/7iIBBXv1jslU0e0wwvrfCNr92r1DcFh +W95H/E4m2YWS5Jcw/+W/P0c7s7nvtMeSUZy3lK3UKFo4hN2nX7pRXPBqluhM9H5n +UWgRtJjE9p6wNSaE5y8sFXcCgYEAxJ6OBC9PzdAbNwEf3CUkSRHH2K8dq3Fh72il +w3gsxfH6PBqjMIMaOKhhNk4B5iYv3LNCkYC4Pds6zrEn+5qthcuhAnrJkyshzQvU +DCpuaLycHjsrDfmTJmdUXKys7OdD2Z1hpgfG0QV+gwUGUqHi4OWs+VKh963UmxLZ +6PtWg+0CgYBoVQ6PqR6MWIgcm6Z4auyAq7QepnzK1uB3htmOJrmrAduY/wQBiItU +jEhp/FKWsJ6wLOoEpTPIN2DB6t8vXECrMFtRax4Wh00fCIyB8sGFEmoTv0Dnr+yo +Aqq4nBE5AMwttXYBaCDKMogexc8qUuqza1PIBmJE59UaOFycifSxcQ== -----END RSA PRIVATE KEY----- diff --git a/test/config/integration/certs/client_ecdsacert.pem b/test/config/integration/certs/client_ecdsacert.pem index f982784dea6ab..75f14a3972a8f 100644 --- a/test/config/integration/certs/client_ecdsacert.pem +++ b/test/config/integration/certs/client_ecdsacert.pem @@ -1,22 +1,23 @@ -----BEGIN CERTIFICATE----- -MIIDpDCCAoygAwIBAgIUJuVBh0FKfFgIcO++ljWm7D47eYgwDQYJKoZIhvcNAQEL +MIIDvjCCAqagAwIBAgIUT9Wze0Fvw/pMvqAmPJjlD7HNjZEwDQYJKoZIhvcNAQEL BQAwdjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcM DVNhbiBGcmFuY2lzY28xDTALBgNVBAoMBEx5ZnQxGTAXBgNVBAsMEEx5ZnQgRW5n -aW5lZXJpbmcxEDAOBgNVBAMMB1Rlc3QgQ0EwHhcNMjAwODA1MTkxNjAyWhcNMjIw -ODA1MTkxNjAyWjCBqDELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWEx +aW5lZXJpbmcxEDAOBgNVBAMMB1Rlc3QgQ0EwHhcNMjIwNDA3MTY0NjM1WhcNMjQw +NDA2MTY0NjM1WjCBqDELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWEx FjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDTALBgNVBAoMBEx5ZnQxGTAXBgNVBAsM EEx5ZnQgRW5naW5lZXJpbmcxGzAZBgNVBAMMElRlc3QgRnJvbnRlbmQgVGVhbTEl MCMGCSqGSIb3DQEJARYWZnJvbnRlbmQtdGVhbUBseWZ0LmNvbTBZMBMGByqGSM49 -AgEGCCqGSM49AwEHA0IABFWdfntWW5wivQyk9j45hLFf7QjInjo4H8up56yUkCcm -n7ewQ9BEPoJ74r5ro/6nPBiRiTx1aolAjDPhgOfUZiWjgcEwgb4wDAYDVR0TAQH/ +AgEGCCqGSM49AwEHA0IABL6CuUXn9awlELiqXIsllF7TbpC9q8FIvP0ldxhe26by +/VNcfFtrnDJLmLiLrdUPL17vRpvHAywN4piffCnGHZajgdswgdgwDAYDVR0TAQH/ BAIwADALBgNVHQ8EBAMCBeAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMB -MEIGA1UdEQQ7MDmGH3NwaWZmZTovL2x5ZnQuY29tL2Zyb250ZW5kLXRlYW2CCGx5 -ZnQuY29tggx3d3cubHlmdC5jb20wHQYDVR0OBBYEFAB5r3dICa3pCN0DVINNnm3K -DhmKMB8GA1UdIwQYMBaAFJZL2ixTtL6VxpNz4qekny4NchiHMA0GCSqGSIb3DQEB -CwUAA4IBAQBel+R+1BpxpPhUGwkSbZBTY4zqU8w8Zx9eCCbpeAi96Qylg++nl88H -ZInHLsC77wfzSf8vKWpsA9KDMB4R4njN1WLsQOKYWJmOE3K+AUuPmqP6mYyAju5k -gGSg6BIhb5+HtkmvvF56qyuc4GWH8Ab/BhPMRli7h4cBMuSBoZeFoxNbIJfJDJ/P -ZEkHqe1NsI9VG6pmGZ1adBMf04yE+muv+s43Wl/Ry/7W3Ae28XkxmS/c0wCq5h2u -DMn6nnjDIzJ7tUqfWfacr8QZCQDYQKdBrE+OPw6bgK2p++jXfQDD277FcnMG6je/ -ZbqoW4tPXfdl/INMbS1j2h59RTrXGZaR +MFwGA1UdEQRVMFOGH3NwaWZmZTovL2x5ZnQuY29tL2Zyb250ZW5kLXRlYW2GGGh0 +dHA6Ly9mcm9udGVuZC5seWZ0LmNvbYIIbHlmdC5jb22CDHd3dy5seWZ0LmNvbTAd +BgNVHQ4EFgQUYC7EHuPp4iyNqKbzS/5BoIWR18UwHwYDVR0jBBgwFoAUHQ05mHTs ++06sDKaDpYtw5o+/MoIwDQYJKoZIhvcNAQELBQADggEBAJK3wbWO5fNtRDgl5LQW +r6y4f86ltQ5kwZ9zYwC/aMUsM5nqbG91rfmzM3gMFCi+GM0lhRY4Cl5ZUdcwaO+A +MrCIeDLr7corCaXXj+DFT72XgeNbuNmrZCFJMzi6aoA+1XUeh16JBcGFJSANr5Es +0XPQvVb2bYij17HmLaOJJ4+2nHKaVvLC2DcaG8OwO/0YIKoEfmg9phAAtXenWwTF +BO3eJ3ZtciVKrmF4VPza5NLuWWkGi0FH0iVVEeQaF1N4QDZ3rvhGtq6MNgHnq16s +SSqksCee6MoxmGeLK96REn8uaVvVu5/70qi4nHj8bDjdMm/6JEwf2qzgcIBNGTlM +D2c= -----END CERTIFICATE----- diff --git a/test/config/integration/certs/client_ecdsacert_hash.h b/test/config/integration/certs/client_ecdsacert_hash.h index f765514c363da..33f3ffda48e2b 100644 --- a/test/config/integration/certs/client_ecdsacert_hash.h +++ b/test/config/integration/certs/client_ecdsacert_hash.h @@ -1,3 +1,3 @@ // NOLINT(namespace-envoy) -constexpr char TEST_CLIENT_ECDSA_CERT_HASH[] = "9F:F2:B4:5A:72:E4:79:82:F4:5C:B1:49:8A:EF:12:53:9C:" - "A7:AB:0A:61:DF:79:2F:D8:8D:4E:29:89:28:03:07"; +constexpr char TEST_CLIENT_ECDSA_CERT_HASH[] = "99:AD:96:C7:72:15:C6:70:F8:D2:A5:5F:72:82:36:C6:9B:" + "E9:49:AA:8E:ED:90:A0:8D:F4:65:E3:3C:CF:6F:8C"; diff --git a/test/config/integration/certs/client_ecdsakey.pem b/test/config/integration/certs/client_ecdsakey.pem index c41cf1b757cc3..e648c287d1749 100644 --- a/test/config/integration/certs/client_ecdsakey.pem +++ b/test/config/integration/certs/client_ecdsakey.pem @@ -2,7 +2,7 @@ BggqhkjOPQMBBw== -----END EC PARAMETERS----- -----BEGIN EC PRIVATE KEY----- -MHcCAQEEIJjBCnRPxmRg21Jdlt8MAQGqtD6ilFK2bsxx5twZklmzoAoGCCqGSM49 -AwEHoUQDQgAEVZ1+e1ZbnCK9DKT2PjmEsV/tCMieOjgfy6nnrJSQJyaft7BD0EQ+ -gnvivmuj/qc8GJGJPHVqiUCMM+GA59RmJQ== +MHcCAQEEINWmBoJfwX+mkEjkMMm6BkLH73TtuMwptVDbsWycoKYRoAoGCCqGSM49 +AwEHoUQDQgAEvoK5Ref1rCUQuKpciyWUXtNukL2rwUi8/SV3GF7bpvL9U1x8W2uc +MkuYuIut1Q8vXu9Gm8cDLA3imJ98KcYdlg== -----END EC PRIVATE KEY----- diff --git a/test/config/integration/certs/clientcert.cfg b/test/config/integration/certs/clientcert.cfg index 59da6cb1ee655..dc63b5c89ca6b 100644 --- a/test/config/integration/certs/clientcert.cfg +++ b/test/config/integration/certs/clientcert.cfg @@ -36,5 +36,6 @@ authorityKeyIdentifier = keyid:always [alt_names] URI.1 = spiffe://lyft.com/frontend-team +URI.2 = http://frontend.lyft.com DNS.1 = lyft.com DNS.2 = www.lyft.com diff --git a/test/config/integration/certs/clientcert.pem b/test/config/integration/certs/clientcert.pem index e56b5aa5fa1bd..57a7a59a70871 100644 --- a/test/config/integration/certs/clientcert.pem +++ b/test/config/integration/certs/clientcert.pem @@ -1,26 +1,27 @@ -----BEGIN CERTIFICATE----- -MIIEbzCCA1egAwIBAgIUJuVBh0FKfFgIcO++ljWm7D47eYcwDQYJKoZIhvcNAQEL +MIIEiTCCA3GgAwIBAgIUT9Wze0Fvw/pMvqAmPJjlD7HNjZAwDQYJKoZIhvcNAQEL BQAwdjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcM DVNhbiBGcmFuY2lzY28xDTALBgNVBAoMBEx5ZnQxGTAXBgNVBAsMEEx5ZnQgRW5n -aW5lZXJpbmcxEDAOBgNVBAMMB1Rlc3QgQ0EwHhcNMjAwODA1MTkxNjAxWhcNMjIw -ODA1MTkxNjAxWjCBqDELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWEx +aW5lZXJpbmcxEDAOBgNVBAMMB1Rlc3QgQ0EwHhcNMjIwNDA3MTY0NjM1WhcNMjQw +NDA2MTY0NjM1WjCBqDELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWEx FjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDTALBgNVBAoMBEx5ZnQxGTAXBgNVBAsM EEx5ZnQgRW5naW5lZXJpbmcxGzAZBgNVBAMMElRlc3QgRnJvbnRlbmQgVGVhbTEl MCMGCSqGSIb3DQEJARYWZnJvbnRlbmQtdGVhbUBseWZ0LmNvbTCCASIwDQYJKoZI -hvcNAQEBBQADggEPADCCAQoCggEBANarN0opNpHy8zDYi2ih9rLXqgpjVEHSsUDo -eX506Uil9U5I2hCq5XDDsKYhFrRh54G7s9AXCh8orbCBwALPznLwBqSeVy1rnUUR -dWlAGdoCGDbVPC1+Eg7Q8AM8KkGN49x6PcIepHClkX+nnwRogrSXnPHydik9Mhgc -+009IcNf4pPl5U1WcL+JEN+x6iXg+nERoKbVHSp0mkS8CQYdPtx2p+QsnEKRyG3W -eJ7msZPW77th27yxzRYDK4TARQAmHchN3FeF2qs1ak2e2s2chTnYb9qfBb++aanA -fewjnfd/enuvT7Uihswv0dniNTE5I5tDCigXYg1Pp3AKxs7Cja0CAwEAAaOBwTCB -vjAMBgNVHRMBAf8EAjAAMAsGA1UdDwQEAwIF4DAdBgNVHSUEFjAUBggrBgEFBQcD -AgYIKwYBBQUHAwEwQgYDVR0RBDswOYYfc3BpZmZlOi8vbHlmdC5jb20vZnJvbnRl -bmQtdGVhbYIIbHlmdC5jb22CDHd3dy5seWZ0LmNvbTAdBgNVHQ4EFgQUxEyk+snc -pQdwv9y8NLXJeJQRP/QwHwYDVR0jBBgwFoAUlkvaLFO0vpXGk3Pip6SfLg1yGIcw -DQYJKoZIhvcNAQELBQADggEBABT1893YgY90gOrkbFz7u81VXa/pxGGIvqoNlFEd -PLP+QSdJVOHL7Ud7qecrUkeJ5Xn57BI4x4lfLVbs74phW8EDspxQ5FRtRQzrQZE9 -R/0VdeAVJIAm+108cfmX83rFriktQC9ffRFnsamCuDjpKWLg/3tMaNSAz7yfxYsJ -sUCRKnLRb7kRyD4tiztHZjY9F1sEYoVbNuQiyFeDZzwLhe9S1WN9rUYA4n+wmyDh -MAjmaJYWwyTZx6SwSevYaXAZSdlxqxVyBrTeNELhbXn0vRxK2J5c9gqXNf2vRKrW -jDsrvfG9XRMBXv1USqplMVduvml5OdTlnALD4Gd1WDJfVt8= +hvcNAQEBBQADggEPADCCAQoCggEBAOwOQ96U2nYcA+lV5eFmHqwkUVH/b5wn/FXg +ALBfT2qSn2pzMmqj3RHebqN4I7uiRGPmk7eVHxktW/ytFDdk+AwbGEOP8vWl9zR7 +3pveKchHVSdSNJ4RkXpgDLZYDDDj/JQxNzDwPD43eIUw9SKj+Mw9nTRv0hm39hhh +hjBmvOfbdWjQPMsuSDqEAPGE06PpirTdwZNSsuBjfvo6zdnJxTgzd/Cf1KINda4P +xklw9M9CuKQMeLwVfwMDNeI2uJ7kn1dpsOhSDBU7LEleSWGGAlcycDzLuy/5/rKc +dON9MKUK+82rJ+cME6I+DYqS1Nz+wY9t8farXLuGK41n0G4qr1MCAwEAAaOB2zCB +2DAMBgNVHRMBAf8EAjAAMAsGA1UdDwQEAwIF4DAdBgNVHSUEFjAUBggrBgEFBQcD +AgYIKwYBBQUHAwEwXAYDVR0RBFUwU4Yfc3BpZmZlOi8vbHlmdC5jb20vZnJvbnRl +bmQtdGVhbYYYaHR0cDovL2Zyb250ZW5kLmx5ZnQuY29tgghseWZ0LmNvbYIMd3d3 +Lmx5ZnQuY29tMB0GA1UdDgQWBBROWpBWXFbgQUweTJcDDdEtGxJ6wzAfBgNVHSME +GDAWgBQdDTmYdOz7TqwMpoOli3Dmj78ygjANBgkqhkiG9w0BAQsFAAOCAQEALyDC +CJ2V30VRqf/vHnv4hocaNvkbg2XqSczsNsXQB9Oh15y2nrTu8nIlktJeMCwgYKB3 +tyuIYADw2c0HKmFshOiNM3P1taM+Gljx/OeyhMq/dgKTF0rX7w3vOoWrvW7o0cDJ +gBzDAmPJegrIlAqfb97MOcLtBlk9vjh7ukh8BSRI+5Hdj5Gb8Y6tQvmiqzm5yx5L +Swz7im1BIGwk4Hq82JO20egDYCn9zhmuDIEJGtRbl0ymcfdaC4oKqiqU/CrynaAo +SkNXfca8Sqk1tvbfDzNkOAnLN572vkbhUnLfcqcfouRXlUl2DYmG+dCoYuWw4/co +ahwsslCKM3xGY4ax9Q== -----END CERTIFICATE----- diff --git a/test/config/integration/certs/clientcert_hash.h b/test/config/integration/certs/clientcert_hash.h index c40b3818f6cc8..8e89302b1a88c 100644 --- a/test/config/integration/certs/clientcert_hash.h +++ b/test/config/integration/certs/clientcert_hash.h @@ -1,3 +1,3 @@ // NOLINT(namespace-envoy) -constexpr char TEST_CLIENT_CERT_HASH[] = "0E:80:B9:1F:11:3F:FB:43:9B:CB:5A:70:2D:04:C5:00:D6:81:68:" - "8C:CA:F8:91:92:21:CA:0F:91:61:A5:FB:01"; +constexpr char TEST_CLIENT_CERT_HASH[] = "4A:FD:3A:AE:4B:36:08:A6:CB:41:4F:20:8A:86:1F:3B:43:6F:2F:" + "12:49:82:8D:9F:F6:FA:53:4D:23:26:FB:43"; diff --git a/test/config/integration/certs/clientkey.pem b/test/config/integration/certs/clientkey.pem index aee2284618eec..20c2f5a325ca1 100644 --- a/test/config/integration/certs/clientkey.pem +++ b/test/config/integration/certs/clientkey.pem @@ -1,27 +1,27 @@ -----BEGIN RSA PRIVATE KEY----- -MIIEowIBAAKCAQEA1qs3Sik2kfLzMNiLaKH2steqCmNUQdKxQOh5fnTpSKX1Tkja -EKrlcMOwpiEWtGHngbuz0BcKHyitsIHAAs/OcvAGpJ5XLWudRRF1aUAZ2gIYNtU8 -LX4SDtDwAzwqQY3j3Ho9wh6kcKWRf6efBGiCtJec8fJ2KT0yGBz7TT0hw1/ik+Xl -TVZwv4kQ37HqJeD6cRGgptUdKnSaRLwJBh0+3Han5CycQpHIbdZ4nuaxk9bvu2Hb -vLHNFgMrhMBFACYdyE3cV4XaqzVqTZ7azZyFOdhv2p8Fv75pqcB97COd9396e69P -tSKGzC/R2eI1MTkjm0MKKBdiDU+ncArGzsKNrQIDAQABAoIBABd8T+Y7MA8zp0uW -xVnDLnxOf/n2+AbjiCTzyib9n3AlR/symTjtmYCGyFLEl/lQJMXaxUdk3eSezLHc -4CbumUWV4QQtlpgPh/tAd7n2G13wkLmfBqBrhIo+baPM90qIvX8nmI4eUBtK4eo3 -anxO+s3LMI5/2lGUsmBU+2Ft6L25En1JpUg3THo0/Ek8VdySQ9V1PTFpTjKsd6Na -DxKYpM85GE1mOKowQqAdbvFByqXoCZcd71ZE9t5XoohDLgPPHq7MA4Z0mKOK5qVG -IR0pBThm4Ij7IFLjzV1b9IGWiBKj9uWPD5VNSad0lrMFoXBcGsp6YblrfpOkZv41 -PALL8rkCgYEA8a9aYsIvOYnE82MCut2xuTWE7lHFpxDV3rJqN51RZipgpWgz76PM -kuKcqp3Fi813hz5abUOizQAaa2d57AmJ+VI0i6CbbCMcwu5javYuwOC7b47WeGIy -fclCgUhbns/vZVatb1pJ+kd5sagT80GehlGoHevd0erzSIbcgZ0KMH8CgYEA42I4 -J9wJ14pC/aGCTQbpne5RjAi07dpmTwlwpsFIHmUuqaJe25eq+R5lnKLqTyGbxDUQ -6aU/8i+G4631gMYng7kyuashBTLsFoyMixLWApDO/U1Lil2dDOXM+DqPKuLdyq6v -SYbfuh87J5BEfmtfFwS5sVSIHNcPp7nUJQ8o69MCgYBv9tV/tQgdtsZoHrFQEo5Y -CAQ6R+WyPOlnju4IL7hbBTzaxAhzd0W5soPzwr2Ww6whGnDX96J/KBIVOc3Q3KZv -u3aeTNxT33xejgO+tKf6MOKEjv6qrItJnKhTrkrLqvbz0pDsaj6lVOF6vSvo4Lho -74Fbwz5zFk54hgm3fiIPTwKBgQCNrrHXBGCNkXVUnMKYRGplIg5l9zblzmRZc0Ri -Y6UQa3O795Srt8GtIKeoBkuBqytoArjbHUDPI5YlYEvNRatxhIB6+IrGtogtNL6O -GdqIFrsjUnpzaQlm8/nX4oU678nLdTV71zKowrUVXeuP6k+CBEvAly+I6Oi0VjI+ -NUgGSQKBgG0qfjZ+k6KaLEvw/Ry6j1TZEzR9PNryIFb3zmcalZakZ92C9xP6+Wyw -KaZsJt1b7kOZ/VdKrlUzfCEe8+CFy8eBWKuffb5v6QTa5af3+igGpjwygbjLW3Aw -Jq/Ykllf3iQP/XSq6fQxvhJ4zYYjnNvLAY9yV+MLJkkqaQTnoKSq +MIIEpAIBAAKCAQEA7A5D3pTadhwD6VXl4WYerCRRUf9vnCf8VeAAsF9PapKfanMy +aqPdEd5uo3gju6JEY+aTt5UfGS1b/K0UN2T4DBsYQ4/y9aX3NHvem94pyEdVJ1I0 +nhGRemAMtlgMMOP8lDE3MPA8Pjd4hTD1IqP4zD2dNG/SGbf2GGGGMGa859t1aNA8 +yy5IOoQA8YTTo+mKtN3Bk1Ky4GN++jrN2cnFODN38J/Uog11rg/GSXD0z0K4pAx4 +vBV/AwM14ja4nuSfV2mw6FIMFTssSV5JYYYCVzJwPMu7L/n+spx0430wpQr7zasn +5wwToj4NipLU3P7Bj23x9qtcu4YrjWfQbiqvUwIDAQABAoIBAQDKY5ixODLuXSrF +Xo6QaLwXn7PReA67dlUVU8+DaNRwbXIdFNO/NuuOLIXzxkfs0j2M4d744fQd5BQg +Wk0hCYLa7kgpdTw8faWr7CB6x0pPm0lZQ1Q1yp5OrBd6J5ecO30NmfzWCsO8HFdK +6yTiJHBmvNUSZmVfA6kOUl95FD0XFB7J/4MPmE0UqEg5IhoWxpH9cEV8yll/bZZL +FHzA1cfwjtcHp5kHm/7IYlWqpShpdsquMmZt8vHFaoGvT5pms/AtAFjjDcW5dFpZ +GipS5D/3oPMXWbhrzMoIe8ERVBmlKPVoUmxUNIomgRSTP6/+mgcgojRRqcLW3l0W +KXi4i1dhAoGBAPmgVd+2K5vox09EbYaD1KAZpwuW61PQ6RI3wU5YCf84FoNAzK+e +KHSI+5Vo7JkwwiP7MSIJhiODG9VRnfou06NPEY4jllcMXp73PVGhOzsnHTqsbgps +Yg9tXsX5jQDx60yIOHf7halAz3vpEldQ6YecLscYV0Oz5i84gl/jee5JAoGBAPIV +Ofuf88WjErvuAxqIJWx85afr4B8YfChKHIVEx1eI6o89xuB16FjFzKAhHe9SJdfk +YVOwYD/9MRZ5+ZZAsRrKTHbD3VX20c0ECX9++/Sz2LGMewgvqiscpfGzDTsTJIVA +Ep31IAXmAUsmBAQAbuXxtbpKgU8Wi3mSp4nFzKC7AoGAUlpgGkbqSixYnMERdSBG +5G6yGnO2vVcdnWIBhwwqeCWT38df/8wowpFylo8gB0X7to0nX3hO5aZaZ1zexmvu +bGEohIEfFybAjKc6dpS/irtTvEiooQ2yqC5H5v52U0p8eyoxnvu+0+DK0rFI2L+b +255eHFbeazqNhSSadnIAhukCgYEAtfKAPv/sb0nupbLxQDq9rfl9fqVJMPXtMzbo +kr2r+b2dVgW/eSsFc9tOvbfGUP50FPzAre7tmIqLH3KTxXtf4VvU9pqlu5uj+iwj +m2Dsq/GUV3XXbsKsanTAwJWrxw/PLhuHIpN++w/xPvMWp49PyqHNzXN8Ft5B/CDe +rS0ubEsCgYA5kvmEDFYLF4TU7xg3QJ08+6+tJ+HZdvCBzE7RGJD8l5ZfpJuE6s9E +aW09E+65hSMaE85MpiM/s08quiMQeR6i7UWeN4GwoQznH1f9zUAuyP1J1Iv2knj7 +lZ+oGk0EgnjkiIxo3ppAoKGz2/9Oi09lsEbdIBHvC56DAu44uOP50A== -----END RSA PRIVATE KEY----- diff --git a/test/config/integration/certs/intermediate_ca_2cert.pem b/test/config/integration/certs/intermediate_ca_2cert.pem new file mode 100644 index 0000000000000..b61231e54afcf --- /dev/null +++ b/test/config/integration/certs/intermediate_ca_2cert.pem @@ -0,0 +1,24 @@ +-----BEGIN CERTIFICATE----- +MIID/jCCAuagAwIBAgIUbI7BctBVn/QXVXzhRvWt3d5nWrUwDQYJKoZIhvcNAQEL +BQAwgYMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRYwFAYDVQQH +DA1TYW4gRnJhbmNpc2NvMQ0wCwYDVQQKDARMeWZ0MRkwFwYDVQQLDBBMeWZ0IEVu +Z2luZWVyaW5nMR0wGwYDVQQDDBRUZXN0IEludGVybWVkaWF0ZSBDQTAeFw0yMjA0 +MDcxNjQ2MzVaFw0yNDA0MDYxNjQ2MzVaMIGFMQswCQYDVQQGEwJVUzETMBEGA1UE +CAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzENMAsGA1UECgwE +THlmdDEZMBcGA1UECwwQTHlmdCBFbmdpbmVlcmluZzEfMB0GA1UEAwwWVGVzdCBJ +bnRlcm1lZGlhdGUgQ0EgMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB +ALpCaNcCAp49u7f6/fM53zNowzzahxB8AV4pP47Cv7wtEy4vUs/N0dzay3e6jKyp +nssCgs+G21Ew+mic/eLx3UsIkoaTxkMXjH65PZT+cvZkaU1DXBZGSexuwRjWWcvu +EbJm38ef7ghbNuyxxVPViG7j9m8tcb7kDfLQrdn8JkibCGW2K4LtYeo3/wJtR6nf +YfpaMxxu7wToERLnDXCKw6iN1ERbSb0yKmfiUag34W1p2SZskdNpRv0NCkln8vAx +KiuMPC8DGAvdiZqaBu+hCUye0k20c255JDRYPf9Zhj63S9SCrLxjJ4IUt4ir3PXS +slHjol3RAwa6DyTdahssC98CAwEAAaNmMGQwEgYDVR0TAQH/BAgwBgEB/wIBADAO +BgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFOB9jUz2jh1uc3pcg1AQ4eEU0Q2TMB8G +A1UdIwQYMBaAFOxD6htXw6w8lfWdJ5N+W6/j4Jc3MA0GCSqGSIb3DQEBCwUAA4IB +AQCA+BwXMAwTDRIWWDR7YDRI1c5qMiMB966zk4O5PnACwiMCPx3g4e9wpN1WBNyE +izBCWMEbSb53AezwW43kgKHk8QPO+/oE/ndo8scMEUicckkhRHvKjDSfKrM5RYyN +cjdn+H5e+KywPIDAF9ODRYzQ8xi2ZvXvqZyBGk5/r//tVySANUCDX9uBOuxleOqM +1Ky/00sUd3kvcpUHXo1/PSC5Mki02sL7o3LzddrH1vM2ilx6bAWf2bzSj2YTaGkv +Zbuu3O9GgB7LD87xBjvG0LvdW3C1GYHLhjtbzYL3xqdXdv0nzsGGkl4jP21zQQg4 +ToV5Did5D6lmll7061vGz9Hc +-----END CERTIFICATE----- diff --git a/test/config/integration/certs/intermediate_ca_2cert_info.h b/test/config/integration/certs/intermediate_ca_2cert_info.h new file mode 100644 index 0000000000000..80829e98a0079 --- /dev/null +++ b/test/config/integration/certs/intermediate_ca_2cert_info.h @@ -0,0 +1,6 @@ +// NOLINT(namespace-envoy) +constexpr char TEST_INTERMEDIATE_CA_2_CERT_256_HASH[] = + "d15c1d4a85e57f881b9f68ef7a6189a433ffca1b9d64cf064e7ba45a684ee139"; +constexpr char TEST_INTERMEDIATE_CA_2_CERT_1_HASH[] = "295ccb91f8633d09abc63bc9de4db641f88b1084"; +constexpr char TEST_INTERMEDIATE_CA_2_CERT_SPKI[] = "iXmuluVl84V4VpEg+y8QewsM6TQmWzZEora3pnDFLhs="; +constexpr char TEST_INTERMEDIATE_CA_2_CERT_SERIAL[] = "6c8ec172d0559ff417557ce146f5adddde675ab5"; diff --git a/test/config/integration/certs/intermediate_ca_2key.pem b/test/config/integration/certs/intermediate_ca_2key.pem new file mode 100644 index 0000000000000..8458bf3341e78 --- /dev/null +++ b/test/config/integration/certs/intermediate_ca_2key.pem @@ -0,0 +1,27 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIEogIBAAKCAQEAukJo1wICnj27t/r98znfM2jDPNqHEHwBXik/jsK/vC0TLi9S +z83R3NrLd7qMrKmeywKCz4bbUTD6aJz94vHdSwiShpPGQxeMfrk9lP5y9mRpTUNc +FkZJ7G7BGNZZy+4Rsmbfx5/uCFs27LHFU9WIbuP2by1xvuQN8tCt2fwmSJsIZbYr +gu1h6jf/Am1Hqd9h+lozHG7vBOgREucNcIrDqI3URFtJvTIqZ+JRqDfhbWnZJmyR +02lG/Q0KSWfy8DEqK4w8LwMYC92JmpoG76EJTJ7STbRzbnkkNFg9/1mGPrdL1IKs +vGMnghS3iKvc9dKyUeOiXdEDBroPJN1qGywL3wIDAQABAoIBAAjA5jx0k7rsG85h +tV2g8qRv3/0UKBTWPxo1xg7niCtH0wbwomuxuJMwlS9jTQkwT44q6Arow5XlP197 +QVNRGp1UIc7BUygEC05JVmOSMcTyoyBGciV52C+MZPbN3BqBbcN8oje3hHBQGRy2 +nhd6iZbsj8BZ2mamQSGQPRtphkMTMZuGa2jLOi7yW0nZdAsw+Py0XZ9sSNQI6NRz +XcmXGo3uKk4fsaB3pXEPAiU2Ryykkl4aXsK4MQwLZ48Teuk8KRAwJzQJlbcm/x2Y +zKfDxKVbSVfUPvrvaP40Fg3W+LebNrbLPVhUNxz9B27GwPA0MpTRUU2BrJVvQxIL +K4gKwQECgYEA5rX7t2EE0QPFn0JHhEv0y66lrh4keATPPrajPYOtMrgI2B6InRBH +dLHew6OupwofrQkWY6ftp+vjkkKDb9/LFZVuVNPVS1wlV8QM8Q1YBCoIq4HPeNwf +CycEaVr0Pp4luyxxVaY+0JpzNRcjUc6eVS561h1rFNwLTLA6OjuuxXECgYEAzq0Q ++9g2x+i6qonkxk40tmfaOjSoMyaEzUKmCVzVPhG01zhGZNlclmaESS26EZWDcGFu +YPJitKhlra40I5YgvHQaoTCOvABzL3YkgOQ+re9kY7Ym6AWE/fzyZXAc6/wAv7M1 +kU3d5xh95ohKunM+xXLgpHQEAtqSIBpaPuZH/k8CgYAktbhDyZA2od8EJEu05VEi +R7vdJLaw0jMXy3/V/enFNDtUCCe8tiZojxTfFGBp+9Zmdhe167aJDaO8VhEL8BQk +bw6LONmrkBHxESTuBi2HHBkdER6uIHhgEelFyk8q14cxbTTrZ/R+xNSoEfJwxeuz +qh2pjCzJuOmjXjclpPF+QQKBgBlJ3eEi9JkDZgvF8aM+IH8NOAuVM9uGZAuFkzFk +FYeRvRH0hdCDNCwHATq/CJxsMfgHQ+1C20cFr+NPhHuyO/EzN6rveReR6oYtK4xF +4VGBEESPHjWXr00wrSwySqepXyIVuIE+CN/lBEq39ITZ4x1f0BLvSypaOjUJZG97 +1+VLAoGAX96J5zDdG6n0G2oJFEZGXzvXKtxNSf9MUGO/RFOugk0UOasB+O6uQEA+ +CkKzSoMHhpFrCMY/+vy66zXoTQxPbddn+hYZWamK46AHxOu9lxTEMRPi7EHEdU9H +KEOALW5SIXd7pdRPxP606pfdnPu6yezXKy60rQ/46hdAFR83FZI= +-----END RSA PRIVATE KEY----- diff --git a/test/config/integration/certs/intermediate_ca_cert_chain.pem b/test/config/integration/certs/intermediate_ca_cert_chain.pem index 9fd558cec206b..bdec050fcdd50 100644 --- a/test/config/integration/certs/intermediate_ca_cert_chain.pem +++ b/test/config/integration/certs/intermediate_ca_cert_chain.pem @@ -1,71 +1,71 @@ -----BEGIN CERTIFICATE----- -MIID3TCCAsWgAwIBAgIUdCu/mLip3X/We37vh3BA9u/nxakwDQYJKoZIhvcNAQEL +MIID3TCCAsWgAwIBAgIUGQwcn3z/kJYn5qdm0nR+3wNySAEwDQYJKoZIhvcNAQEL BQAwdjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcM DVNhbiBGcmFuY2lzY28xDTALBgNVBAoMBEx5ZnQxGTAXBgNVBAsMEEx5ZnQgRW5n -aW5lZXJpbmcxEDAOBgNVBAMMB1Rlc3QgQ0EwHhcNMjAwODA1MTkxNjAwWhcNMjIw -ODA1MTkxNjAwWjB2MQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEW +aW5lZXJpbmcxEDAOBgNVBAMMB1Rlc3QgQ0EwHhcNMjIwNDA3MTY0NjM0WhcNMjQw +NDA2MTY0NjM0WjB2MQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEW MBQGA1UEBwwNU2FuIEZyYW5jaXNjbzENMAsGA1UECgwETHlmdDEZMBcGA1UECwwQ THlmdCBFbmdpbmVlcmluZzEQMA4GA1UEAwwHVGVzdCBDQTCCASIwDQYJKoZIhvcN -AQEBBQADggEPADCCAQoCggEBALu2Ihi4DmaQG7zySZlWyM9SjxOXCI5840V7Hn0C -XoiI8sQQmKSC2YCzsaphQoJ0lXCi6Y47o5FkooYyLeNDQTGS0nh+IWm5RCyochtO -fnaKPv/hYxhpyFQEwkJkbF1Zt1s6j2rq5MzmbWZx090uXZEE82DNZ9QJaMPu6VWt -iwGoGoS5HF5HNlUVxLNUsklNH0ZfDafR7/LC2ty1vO1c6EJ6yCGiyJZZ7Ilbz27Q -HPAUd8CcDNKCHZDoMWkLSLN3Nj1MvPVZ5HDsHiNHXthP+zV8FQtloAuZ8Srsmlyg -rJREkc7gF3f6HrH5ShNhsRFFc53NUjDbYZuha1u4hiOE8lcCAwEAAaNjMGEwDwYD -VR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFJZL2ixTtL6V -xpNz4qekny4NchiHMB8GA1UdIwQYMBaAFJZL2ixTtL6VxpNz4qekny4NchiHMA0G -CSqGSIb3DQEBCwUAA4IBAQAcgG+AaCdrUFEVJDn9UsO7zqzQ3c1VOp+WAtAU8OQK -Oc4vJYVVKpDs8OZFxmukCeqm1gz2zDeH7TfgCs5UnLtkplx1YO1bd9qvserJVHiD -LAK+Yl24ZEbrHPaq0zI1RLchqYUOGWmi51pcXi1gsfc8DQ3GqIXoai6kYJeV3jFJ -jxpQSR32nx6oNN/6kVKlgmBjlWrOy7JyDXGim6Z97TzmS6Clctewmw/5gZ9g+M8e -g0ZdFbFkNUjzSNm44hiDX8nR6yJRn+gLaARaJvp1dnT+MlvofZuER17WYKH4OyMs -ie3qKR3an4KC20CtFbpZfv540BVuTTOCtQ5xqZ/LTE78 +AQEBBQADggEPADCCAQoCggEBAM0kM+nbWI8YCCis++FH9CeAqUTLwjodgLeLYK1B +LYH4nbi7lye82EXLj37ufFe/Rn7CZqimJZU1uu+2sgroZjfIe1FewegmosHFzwq1 +ci24dvfReR/Nsqv5PRWhRvWmUvJl8D8ova0RphEnnfLOPKy1y5BbHXkITTHhtnPA +yej9WdhOSHN1mjvjspCJi2Zi5uKdiRo+viZ/eKcSkUB45uzAmpMPw5xwZ5/rIuPn +fD2bh69hG95I2sdzyElSn32xGs9tD2JL3WgXwvfngDSEWg3uUE8XTtG0IWEPiFDo +u345nTGn3e0SrF3LyndrmFZN7MMOXAyb4dtgUBQwQ/QJL1sCAwEAAaNjMGEwDwYD +VR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFB0NOZh07PtO +rAymg6WLcOaPvzKCMB8GA1UdIwQYMBaAFB0NOZh07PtOrAymg6WLcOaPvzKCMA0G +CSqGSIb3DQEBCwUAA4IBAQC1YNkHjCwx8XFWRAd4hJ0jLKzrmFRwmrTFS1nM68uq +qs1OP1Q1j8LXvejTLQqd+6BaG+MmHqKTQuvMqoOdQof8XXwaCTkQVcYh84EmCCO4 +gS2tmoU2geIv7Nt9apmqLPyfRgnNs1mcQ5g6RNM7Q88eho7MnU+4RfZv3ooA0eMl +QrETNW0ZOeA7gJmHP3xj1YUOV5ogOuNItu+QTTrUCcxzpe8DYU4Fos7IGG3x3pqq +gBdElEBj+dhVUEsjV3uU6IJGd8hzKcJ4fmi2uS9w43IjXa7WjO5MVoxOBxz55SyD +bB1dvCZ4Jx5uBkqE3135ngOD/4h8ZLwv69hzivUmgFER -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- -MIID7jCCAtagAwIBAgIUWVt1U0vqjc3LAtbItPL1QzSzHP0wDQYJKoZIhvcNAQEL +MIID7jCCAtagAwIBAgIUT9Wze0Fvw/pMvqAmPJjlD7HNjY0wDQYJKoZIhvcNAQEL BQAwdjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcM DVNhbiBGcmFuY2lzY28xDTALBgNVBAoMBEx5ZnQxGTAXBgNVBAsMEEx5ZnQgRW5n -aW5lZXJpbmcxEDAOBgNVBAMMB1Rlc3QgQ0EwHhcNMjIwMzI1MTk1MDUwWhcNMjQw -MzI0MTk1MDUwWjCBgzELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWEx +aW5lZXJpbmcxEDAOBgNVBAMMB1Rlc3QgQ0EwHhcNMjIwNDA3MTY0NjM0WhcNMjQw +NDA2MTY0NjM0WjCBgzELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWEx FjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDTALBgNVBAoMBEx5ZnQxGTAXBgNVBAsM EEx5ZnQgRW5naW5lZXJpbmcxHTAbBgNVBAMMFFRlc3QgSW50ZXJtZWRpYXRlIENB -MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+JBxxs4GoZI5tT55hlf -5dcoXumBh0N9VHZyG/QgWW8Zg0P24Rtw9UbWvNx8FHCCYQk29bN504Xa2uRVAPpF -9pRVCM3BfXw2tPjtOIoeFzW/UmATbWkKKok/vIUm0xjHd5t9Wm9uNOLlTg2pSpdi -i+fcKQcnth8fQRwZF6ui3DEVOh3+qXBAIBXP2bBqt4HL/SspKgRdUZ5RrLYtK+kR -LrBKlxczQ0p3MsifOASI8wy9zPpR7u2KNc+5L/Hm4v17d04r1dKuju8GPDvrM/7b -oy+L6TdWShfBfqfO1+R76RXe8hwA6iEb62bMjCOltyhL6UzzEq02GZOjphr0fxvt -/QIDAQABo2YwZDASBgNVHRMBAf8ECDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBBjAd -BgNVHQ4EFgQU36h3YC1zAWhp/pegKNNxTrdIg50wHwYDVR0jBBgwFoAUlkvaLFO0 -vpXGk3Pip6SfLg1yGIcwDQYJKoZIhvcNAQELBQADggEBAJPDr0qA8RKPWPovj3OG -eLsw1Zdswn+FF7yqYXkKA5qgHG3Y2vHAHxK+HUUhjgpAj5mQIF5T/skgUNbtuWpV -d1K3p8PNGg++wLVUWqZ4dGieO0Q737xAnQ5jJu0wNyd2938CwwT0LKCIy0fAnh3J -XKRMKBqxVjB4JR8sX4kVpvG8WtWOl4z9lUJKYeu3wyLGqGLXZwhOpabGZjGNprqL -cs0E4aJKQrT3t0RwzM9UG/zayeqNmQl9lurJjhPRpMAA1/PjFiuHA5OfC10w3CKd -35A75wl31+D+gPx9erh7EkQbtus3DZGF6TQWnDW4CKCUZOwUdkRkuRfsV0tZd12Z -Ua8= +MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNUKlCmZdC2HPff0Q86N +BPQVTyAuYAtM26gDAapAbyZkWbPB3zpUugwfSZf0hiYL7wTsnyabJBZqbbcMg8dh +g5cEss8VvB4V4dwBz9UJNSAKn17Q6DhQ4rkDfSgd9rBFjqhteGbRaC0M3ty1xb9B +0/fROGMxzsft8Yqz8GDAgQAsO2+ar7OXtRPPCWAUFg+l5sKqu4B9ZsgOv+HCcnRE +3WhSF/M6WLlW8xcMlNz5dfS56PWxU6S/6Njn/JYAJ74Dt0rjKTvKaSG9O0QLRKoT +ahFBsh7zrmZ4N76wPVre88OcwlL8HqcmUC+ppd+j5ybBCJVcdN1T6tBFghHxFjES +UwIDAQABo2YwZDASBgNVHRMBAf8ECDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBBjAd +BgNVHQ4EFgQU7EPqG1fDrDyV9Z0nk35br+PglzcwHwYDVR0jBBgwFoAUHQ05mHTs ++06sDKaDpYtw5o+/MoIwDQYJKoZIhvcNAQELBQADggEBAEnsyheUbZqgr1I5DjkQ +JrjrQ1aCC/gI6V/R8Gf2lBNHNs4mA4nBSuu/FgvyJEcy2UyKnidjUPQbQBe/z9At +Pb+xOWHlTZufpnASEWl9Bhkn3EvYNUWa8zlFrRwFThTY7952hCpwsUWJTgY4Owit +WG4fNpLTSFLVwGxM2LyJXDsepi3nDfzadTB1LSbG01iaiwDEKs6ajzL/DTqOIGKk +e2H/T6t1378viTLDqaPccMKOu9tUxoRe/ZkWSAoaflMGiY18DjwtaFkk5lFHq6Uw +cUdLlD+6epq8InCcvo45SHDBrpp/3Q3dz9MZ4W8HYEcP5/zKBKvnsBRHMyImSEo6 +wAA= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- -MIID/jCCAuagAwIBAgIUTyFV8qjJAguZh6HwxTrVOBLwzX0wDQYJKoZIhvcNAQEL +MIID/jCCAuagAwIBAgIUbI7BctBVn/QXVXzhRvWt3d5nWrUwDQYJKoZIhvcNAQEL BQAwgYMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRYwFAYDVQQH DA1TYW4gRnJhbmNpc2NvMQ0wCwYDVQQKDARMeWZ0MRkwFwYDVQQLDBBMeWZ0IEVu -Z2luZWVyaW5nMR0wGwYDVQQDDBRUZXN0IEludGVybWVkaWF0ZSBDQTAeFw0yMjAz -MjUxOTUwNTBaFw0yNDAzMjQxOTUwNTBaMIGFMQswCQYDVQQGEwJVUzETMBEGA1UE +Z2luZWVyaW5nMR0wGwYDVQQDDBRUZXN0IEludGVybWVkaWF0ZSBDQTAeFw0yMjA0 +MDcxNjQ2MzVaFw0yNDA0MDYxNjQ2MzVaMIGFMQswCQYDVQQGEwJVUzETMBEGA1UE CAwKQ2FsaWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzENMAsGA1UECgwE THlmdDEZMBcGA1UECwwQTHlmdCBFbmdpbmVlcmluZzEfMB0GA1UEAwwWVGVzdCBJ bnRlcm1lZGlhdGUgQ0EgMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB -AMAeVBUN67u1odSFMjNjrC+jt9bGfiXirlaX45+nKcm0p7AbtLWW7HU1dMBE4SFS -x9CZKNvahGGWoCbbyfOCB0VCjngliGq01Z3b6SNyi4mHafSKNwEUKUDdwbvhoKaU -x3TAE7Q70c9Gqha29dfMxFs9hTzYrz+UFYh6TGz8UK1UIYOkQdLKFC0FZLhE/sr+ -pOiVMMe7r5kmhb1PTFHS3p1q74QK56OlRUBD/lvh2JvM9XFilC9NtXpirtoYSz7X -kHjJQeUJM0hc7KK5hYszqNjZwW/gltm+nPKRmoaOtaF5mglLu2IsnvA1Htr48bxm -eBq3sXvugujjUSDQrIjwLncCAwEAAaNmMGQwEgYDVR0TAQH/BAgwBgEB/wIBADAO -BgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFA49x4rNp//20/nwq0dy4TQN8p3LMB8G -A1UdIwQYMBaAFN+od2AtcwFoaf6XoCjTcU63SIOdMA0GCSqGSIb3DQEBCwUAA4IB -AQBZzu8oRyzxP4QW+PDDJwMc/Jaej21GfYPDGe57fDVhLLDR6ho2xYYRrthvhIsk -lSzdoi8bk02RVFaxhFcaGIFQDqKVKZF0G4xsHUZWZnM4nbG3IDWXj+zHWYEJoHNF -TPEs3bv2oYBljH2Crh62TenPX4wT+vZ9X5zoW3r9rnBdoOhY3kDk6Qj/cmjAzjAU -V612TmerJw4eRUzwYgtMjZ79nYQAvTCq0Ub1myeAhC47DmmdigK6OBKjSYKZ8eUK -KtyzKek3c8zQFIYrKAWJL+BO1m7UC9PhOGsrLdj7WMzACKSHG7Gp8Nm8eiyqpWSU -qg7efWG58A+TU9ZcAWrSA2fv +ALpCaNcCAp49u7f6/fM53zNowzzahxB8AV4pP47Cv7wtEy4vUs/N0dzay3e6jKyp +nssCgs+G21Ew+mic/eLx3UsIkoaTxkMXjH65PZT+cvZkaU1DXBZGSexuwRjWWcvu +EbJm38ef7ghbNuyxxVPViG7j9m8tcb7kDfLQrdn8JkibCGW2K4LtYeo3/wJtR6nf +YfpaMxxu7wToERLnDXCKw6iN1ERbSb0yKmfiUag34W1p2SZskdNpRv0NCkln8vAx +KiuMPC8DGAvdiZqaBu+hCUye0k20c255JDRYPf9Zhj63S9SCrLxjJ4IUt4ir3PXS +slHjol3RAwa6DyTdahssC98CAwEAAaNmMGQwEgYDVR0TAQH/BAgwBgEB/wIBADAO +BgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFOB9jUz2jh1uc3pcg1AQ4eEU0Q2TMB8G +A1UdIwQYMBaAFOxD6htXw6w8lfWdJ5N+W6/j4Jc3MA0GCSqGSIb3DQEBCwUAA4IB +AQCA+BwXMAwTDRIWWDR7YDRI1c5qMiMB966zk4O5PnACwiMCPx3g4e9wpN1WBNyE +izBCWMEbSb53AezwW43kgKHk8QPO+/oE/ndo8scMEUicckkhRHvKjDSfKrM5RYyN +cjdn+H5e+KywPIDAF9ODRYzQ8xi2ZvXvqZyBGk5/r//tVySANUCDX9uBOuxleOqM +1Ky/00sUd3kvcpUHXo1/PSC5Mki02sL7o3LzddrH1vM2ilx6bAWf2bzSj2YTaGkv +Zbuu3O9GgB7LD87xBjvG0LvdW3C1GYHLhjtbzYL3xqdXdv0nzsGGkl4jP21zQQg4 +ToV5Did5D6lmll7061vGz9Hc -----END CERTIFICATE----- diff --git a/test/config/integration/certs/intermediate_cacert.pem b/test/config/integration/certs/intermediate_cacert.pem new file mode 100644 index 0000000000000..146fd7588119e --- /dev/null +++ b/test/config/integration/certs/intermediate_cacert.pem @@ -0,0 +1,24 @@ +-----BEGIN CERTIFICATE----- +MIID7jCCAtagAwIBAgIUT9Wze0Fvw/pMvqAmPJjlD7HNjY0wDQYJKoZIhvcNAQEL +BQAwdjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcM +DVNhbiBGcmFuY2lzY28xDTALBgNVBAoMBEx5ZnQxGTAXBgNVBAsMEEx5ZnQgRW5n +aW5lZXJpbmcxEDAOBgNVBAMMB1Rlc3QgQ0EwHhcNMjIwNDA3MTY0NjM0WhcNMjQw +NDA2MTY0NjM0WjCBgzELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWEx +FjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDTALBgNVBAoMBEx5ZnQxGTAXBgNVBAsM +EEx5ZnQgRW5naW5lZXJpbmcxHTAbBgNVBAMMFFRlc3QgSW50ZXJtZWRpYXRlIENB +MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNUKlCmZdC2HPff0Q86N +BPQVTyAuYAtM26gDAapAbyZkWbPB3zpUugwfSZf0hiYL7wTsnyabJBZqbbcMg8dh +g5cEss8VvB4V4dwBz9UJNSAKn17Q6DhQ4rkDfSgd9rBFjqhteGbRaC0M3ty1xb9B +0/fROGMxzsft8Yqz8GDAgQAsO2+ar7OXtRPPCWAUFg+l5sKqu4B9ZsgOv+HCcnRE +3WhSF/M6WLlW8xcMlNz5dfS56PWxU6S/6Njn/JYAJ74Dt0rjKTvKaSG9O0QLRKoT +ahFBsh7zrmZ4N76wPVre88OcwlL8HqcmUC+ppd+j5ybBCJVcdN1T6tBFghHxFjES +UwIDAQABo2YwZDASBgNVHRMBAf8ECDAGAQH/AgEAMA4GA1UdDwEB/wQEAwIBBjAd +BgNVHQ4EFgQU7EPqG1fDrDyV9Z0nk35br+PglzcwHwYDVR0jBBgwFoAUHQ05mHTs ++06sDKaDpYtw5o+/MoIwDQYJKoZIhvcNAQELBQADggEBAEnsyheUbZqgr1I5DjkQ +JrjrQ1aCC/gI6V/R8Gf2lBNHNs4mA4nBSuu/FgvyJEcy2UyKnidjUPQbQBe/z9At +Pb+xOWHlTZufpnASEWl9Bhkn3EvYNUWa8zlFrRwFThTY7952hCpwsUWJTgY4Owit +WG4fNpLTSFLVwGxM2LyJXDsepi3nDfzadTB1LSbG01iaiwDEKs6ajzL/DTqOIGKk +e2H/T6t1378viTLDqaPccMKOu9tUxoRe/ZkWSAoaflMGiY18DjwtaFkk5lFHq6Uw +cUdLlD+6epq8InCcvo45SHDBrpp/3Q3dz9MZ4W8HYEcP5/zKBKvnsBRHMyImSEo6 +wAA= +-----END CERTIFICATE----- diff --git a/test/config/integration/certs/intermediate_cacert_info.h b/test/config/integration/certs/intermediate_cacert_info.h new file mode 100644 index 0000000000000..d855091d3abf8 --- /dev/null +++ b/test/config/integration/certs/intermediate_cacert_info.h @@ -0,0 +1,6 @@ +// NOLINT(namespace-envoy) +constexpr char TEST_INTERMEDIATE_CA_CERT_256_HASH[] = + "8e6bfb49b2499e97a2f0b79e02de134da7b6212f693692d9973f7643795422c2"; +constexpr char TEST_INTERMEDIATE_CA_CERT_1_HASH[] = "67107c9de3e0a2e78c2bd3aaa6a0f6d5e17aea2e"; +constexpr char TEST_INTERMEDIATE_CA_CERT_SPKI[] = "cfN/hOIgG54zBBnkT/7O1yml8M00ZeuVhivEQA8qEb4="; +constexpr char TEST_INTERMEDIATE_CA_CERT_SERIAL[] = "4fd5b37b416fc3fa4cbea0263c98e50fb1cd8d8d"; diff --git a/test/config/integration/certs/intermediate_cakey.pem b/test/config/integration/certs/intermediate_cakey.pem new file mode 100644 index 0000000000000..1a5b6a6de6b18 --- /dev/null +++ b/test/config/integration/certs/intermediate_cakey.pem @@ -0,0 +1,27 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIEpAIBAAKCAQEAnNUKlCmZdC2HPff0Q86NBPQVTyAuYAtM26gDAapAbyZkWbPB +3zpUugwfSZf0hiYL7wTsnyabJBZqbbcMg8dhg5cEss8VvB4V4dwBz9UJNSAKn17Q +6DhQ4rkDfSgd9rBFjqhteGbRaC0M3ty1xb9B0/fROGMxzsft8Yqz8GDAgQAsO2+a +r7OXtRPPCWAUFg+l5sKqu4B9ZsgOv+HCcnRE3WhSF/M6WLlW8xcMlNz5dfS56PWx +U6S/6Njn/JYAJ74Dt0rjKTvKaSG9O0QLRKoTahFBsh7zrmZ4N76wPVre88OcwlL8 +HqcmUC+ppd+j5ybBCJVcdN1T6tBFghHxFjESUwIDAQABAoIBAHXQVLIYzf5IdWBH +9Gc7sxQViCx4sF3WH1ajUB7gFqdo39nC/9EBsMRSdu6CCF7+FdjoihjEl6b0b98b +s3sLPGXt/MmWZ2157FZPP80w7EnMWC6Au862/4xSEBzlFh1LLfWM8S+RjZ4EubZx +dtumYX0qnTEO00vTRRw+Zg4doH9GxNY3gg5H650MlWVAKriS0BACqIveubGkVRfu +BoWPAVuv11RbGlwPwdSc6rGKZPCTs9+uKOnS2m7aOXzUDqDQg0oGpCvyCnpcc47y +3m34hbVa2FthGkV4mg7zTFKzjQMymdcaQd9pfWQE7MOcrHbvAJzBeK/oMADAuPh6 +NT8KgwECgYEAzKekGhXognQa+cvONz1sp6IGXJmmx3s35vO79xlB8vrzNLQaa7CP +Cs6L4AMVC+6yI+XUzPQCey1pPZGoUbJtiMZBvCYd3ubJhhPGTVUc/5ouwkY/e37W +FyoIWeQOuWWR0TCdEF3LV4yL7whJfOCnacx1BZt6dp/QGQVV8wkwxAsCgYEAxC3l +gBJLkoYmaafzdDiTo9FTbmuxP1x5ExnBTJ6ODRuGZ39fbZxht9yAMhGL6JAIvYN+ +B3ELU0hutQfE8CjG2XuXg25+OtDDooDlQPfVsKay66EnUrZpscyqTFV4k2zAPtS/ +MUGsUXspgdSIAiZiw788Q/TA9jSzKka47QfCz9kCgYEArPsdp7bQ2kMM8gqj+OkA +SAiZW/e7kmzB6YImZEuDBL+8hdWdZ1zK6xV+ARBZ38YX6GPBJKMy3a6af6H4JWWt +U6hPs5p8MQXdXGimeoLwidNmpmr+CYJBrz6l5GTxVR9WyvxOJaFB2HRBav8ULmss +1i4s01qBfnbCTAPIjC4+e9UCgYBS6Vrff9v0t0Gw0cywx+COEcADIPyuXLTG/9GU +Qkai/4kUYN7CAp/CBy0e/A93YLhw8AvptTsmHay8UeZH4dP4wqVMZPxwex7TpUo+ +5P+pQyrHLzrhWDrfbDJlRJJLLGErrNqJRMpBPZ5TQrGgxvxi4oXj6qNK6wb1zSIG ++4q4MQKBgQCuhcatZX2yPFYhr7fuFyNJ5ZUCAXIb5NPBK17qIf7Udou+aEcHowif +CJuocPFjbWa6/JqMi2RhNHR9d3x8okkMdUWF4YsODIDb8E/XzasbtStST7xfcnnk +HHlQdgX3Fe81V2vqQxehG2qhnZ4XzBw4ofeWdZLMenQx5fECLr/l1w== +-----END RSA PRIVATE KEY----- diff --git a/test/config/integration/certs/server_ecdsa_ocsp_resp.der b/test/config/integration/certs/server_ecdsa_ocsp_resp.der index c07eb7a0e3176..45cf00d3cc6af 100644 Binary files a/test/config/integration/certs/server_ecdsa_ocsp_resp.der and b/test/config/integration/certs/server_ecdsa_ocsp_resp.der differ diff --git a/test/config/integration/certs/server_ecdsacert.pem b/test/config/integration/certs/server_ecdsacert.pem index 6a0c863d41d90..4dc901c6c31c3 100644 --- a/test/config/integration/certs/server_ecdsacert.pem +++ b/test/config/integration/certs/server_ecdsacert.pem @@ -1,22 +1,22 @@ -----BEGIN CERTIFICATE----- -MIIDoTCCAomgAwIBAgIUJuVBh0FKfFgIcO++ljWm7D47eYYwDQYJKoZIhvcNAQEL +MIIDujCCAqKgAwIBAgIUT9Wze0Fvw/pMvqAmPJjlD7HNjY8wDQYJKoZIhvcNAQEL BQAwdjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcM DVNhbiBGcmFuY2lzY28xDTALBgNVBAoMBEx5ZnQxGTAXBgNVBAsMEEx5ZnQgRW5n -aW5lZXJpbmcxEDAOBgNVBAMMB1Rlc3QgQ0EwHhcNMjAwODA1MTkxNjAxWhcNMjIw -ODA1MTkxNjAxWjCBpjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWEx +aW5lZXJpbmcxEDAOBgNVBAMMB1Rlc3QgQ0EwHhcNMjIwNDA3MTY0NjM1WhcNMjQw +NDA2MTY0NjM1WjCBpjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWEx FjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDTALBgNVBAoMBEx5ZnQxGTAXBgNVBAsM EEx5ZnQgRW5naW5lZXJpbmcxGjAYBgNVBAMMEVRlc3QgQmFja2VuZCBUZWFtMSQw IgYJKoZIhvcNAQkBFhViYWNrZW5kLXRlYW1AbHlmdC5jb20wWTATBgcqhkjOPQIB -BggqhkjOPQMBBwNCAARbRc4+r8sbKLs89/fS0Y8CSTVNKn8opkCFx/UyLPvELLn6 -lQ86GjcQIqJRqoEqEwP7iyCaDhFigsOKsNQSzE9/o4HAMIG9MAwGA1UdEwEB/wQC -MAAwCwYDVR0PBAQDAgXgMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATBB -BgNVHREEOjA4hh5zcGlmZmU6Ly9seWZ0LmNvbS9iYWNrZW5kLXRlYW2CCGx5ZnQu -Y29tggx3d3cubHlmdC5jb20wHQYDVR0OBBYEFM6Jqpu+mo5ATAcIizKPrFH1qDLK -MB8GA1UdIwQYMBaAFJZL2ixTtL6VxpNz4qekny4NchiHMA0GCSqGSIb3DQEBCwUA -A4IBAQAYGH/EjPHxtE5fQ7kDsRGcafMLqcx6OYhZlqDfMqepbFEWlkL/kuNVrjez -NoG67cc3DSagyVocjr7yCz/kkDm4HowRapGK6eSK3dWhjrQzp2F6ImAAfht7YkhF -JKkuRYULKpsRRj+YVpBpYkUjRVaqLNJJpXOItpvZMsyXDZn/ihy1QerDXaetWXgP -yFRL+g9f+e8OydXgd/lrKByLBCszNPeg4nhGsgZZ1WHj5sl2EY27eAIWRXqFIQbr -VwbLfpFm2R2nrJT8zJF54OUpG/3hKOEkgZ3gSK9+tnQeSM01lXHd1ZzrmzCdItDQ -MNl4mwlDTJLwL/vwMld9UFz0qAYi +BggqhkjOPQMBBwNCAAQ7OaEYEMXytT5RPjFgI36jQzk2qdlV6IRcGBUJdVGUPy7Q +mu4WNvzWm8J2Ycmp/77O4AQbqg6SNADb+YHxBsuLo4HZMIHWMAwGA1UdEwEB/wQC +MAAwCwYDVR0PBAQDAgXgMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATBa +BgNVHREEUzBRhh5zcGlmZmU6Ly9seWZ0LmNvbS9iYWNrZW5kLXRlYW2GF2h0dHA6 +Ly9iYWNrZW5kLmx5ZnQuY29tgghseWZ0LmNvbYIMd3d3Lmx5ZnQuY29tMB0GA1Ud +DgQWBBTlXIIea5yCtNCpi0zsh59Q+TLX+jAfBgNVHSMEGDAWgBQdDTmYdOz7TqwM +poOli3Dmj78ygjANBgkqhkiG9w0BAQsFAAOCAQEAfVBMAPEG22Vj9VIVII7804np +XVgQ1yO2xtczJYQu/rJNJ4++uWErl9JpMuwYfSZwOoUidb8AS2jRvvPjn3hmyMBv +FhPBVGZMBE/vJOfz/3co479s0wQbX9y0bp4aVLXd/MqP1BGQTYpw2HZC2nUpNsc3 +b5Ng8gbJ7hnbAyRzkRrs/VYbg4r/Lxt3BNCnXeXERXeLRN/uiwB9cKvRhJAJErdv +h24lYaKI/AJJIv9bs+gcjwZxBpjdwKTNkI/Yd8f1ZEGUstQrS0xjIn3TtLA+sxQb +c8ycCSoz1de3YFemS7yHjn26YDWIeiF29M4kA0JrBWQLQybwxNGkFtGdX4Z4OA== -----END CERTIFICATE----- diff --git a/test/config/integration/certs/server_ecdsacert_hash.h b/test/config/integration/certs/server_ecdsacert_hash.h index 2b828070d615c..17f16e1b1cab6 100644 --- a/test/config/integration/certs/server_ecdsacert_hash.h +++ b/test/config/integration/certs/server_ecdsacert_hash.h @@ -1,3 +1,3 @@ // NOLINT(namespace-envoy) -constexpr char TEST_SERVER_ECDSA_CERT_HASH[] = "B1:A4:B5:39:F8:91:77:00:3E:3E:23:1D:F2:AD:78:34:85:" - "D3:F0:D4:EF:D2:88:EA:B5:92:F7:71:E1:B8:0D:F5"; +constexpr char TEST_SERVER_ECDSA_CERT_HASH[] = "6E:A4:8D:E4:AE:AC:B8:EC:93:D7:14:9A:21:E4:D7:44:A4:" + "1A:1F:7F:4B:57:FA:C4:4C:E4:DD:8F:AB:C5:65:67"; diff --git a/test/config/integration/certs/server_ecdsakey.pem b/test/config/integration/certs/server_ecdsakey.pem index df1f17d826d18..dd1fc1cc709cc 100644 --- a/test/config/integration/certs/server_ecdsakey.pem +++ b/test/config/integration/certs/server_ecdsakey.pem @@ -2,7 +2,7 @@ BggqhkjOPQMBBw== -----END EC PARAMETERS----- -----BEGIN EC PRIVATE KEY----- -MHcCAQEEIGY3X0at4PZN6X+MHnEC/vwjaKTq/ffwp0KfMcAKCwgToAoGCCqGSM49 -AwEHoUQDQgAEW0XOPq/LGyi7PPf30tGPAkk1TSp/KKZAhcf1Miz7xCy5+pUPOho3 -ECKiUaqBKhMD+4sgmg4RYoLDirDUEsxPfw== +MHcCAQEEIEtsx4zUlf5jLeZcEvvloE/LaTaLi6jtr2YdRV7ucubDoAoGCCqGSM49 +AwEHoUQDQgAEOzmhGBDF8rU+UT4xYCN+o0M5NqnZVeiEXBgVCXVRlD8u0JruFjb8 +1pvCdmHJqf++zuAEG6oOkjQA2/mB8QbLiw== -----END EC PRIVATE KEY----- diff --git a/test/config/integration/certs/server_ocsp_resp.der b/test/config/integration/certs/server_ocsp_resp.der index c53d80a4650c3..c208a61ce2535 100644 Binary files a/test/config/integration/certs/server_ocsp_resp.der and b/test/config/integration/certs/server_ocsp_resp.der differ diff --git a/test/config/integration/certs/servercert.cfg b/test/config/integration/certs/servercert.cfg index 35e8b2b609bc1..ecbabe7105eec 100644 --- a/test/config/integration/certs/servercert.cfg +++ b/test/config/integration/certs/servercert.cfg @@ -36,5 +36,6 @@ authorityKeyIdentifier = keyid:always [alt_names] URI.1 = spiffe://lyft.com/backend-team +URI.2 = http://backend.lyft.com DNS.1 = lyft.com DNS.2 = www.lyft.com diff --git a/test/config/integration/certs/servercert.pem b/test/config/integration/certs/servercert.pem index c654495573e4d..5316da1a47f27 100644 --- a/test/config/integration/certs/servercert.pem +++ b/test/config/integration/certs/servercert.pem @@ -1,26 +1,27 @@ -----BEGIN CERTIFICATE----- -MIIEbDCCA1SgAwIBAgIUJuVBh0FKfFgIcO++ljWm7D47eYUwDQYJKoZIhvcNAQEL +MIIEhTCCA22gAwIBAgIUT9Wze0Fvw/pMvqAmPJjlD7HNjY4wDQYJKoZIhvcNAQEL BQAwdjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcM DVNhbiBGcmFuY2lzY28xDTALBgNVBAoMBEx5ZnQxGTAXBgNVBAsMEEx5ZnQgRW5n -aW5lZXJpbmcxEDAOBgNVBAMMB1Rlc3QgQ0EwHhcNMjAwODA1MTkxNjAxWhcNMjIw -ODA1MTkxNjAxWjCBpjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWEx +aW5lZXJpbmcxEDAOBgNVBAMMB1Rlc3QgQ0EwHhcNMjIwNDA3MTY0NjM1WhcNMjQw +NDA2MTY0NjM1WjCBpjELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWEx FjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDTALBgNVBAoMBEx5ZnQxGTAXBgNVBAsM EEx5ZnQgRW5naW5lZXJpbmcxGjAYBgNVBAMMEVRlc3QgQmFja2VuZCBUZWFtMSQw IgYJKoZIhvcNAQkBFhViYWNrZW5kLXRlYW1AbHlmdC5jb20wggEiMA0GCSqGSIb3 -DQEBAQUAA4IBDwAwggEKAoIBAQC9JgaI7hxjPM0tsUna/QmivBdKbCrLnLW9Teak -RH/Ebg68ovyvrRIlybDT6XhKi+iVpzVY9kqxhGHgrFDgGLBakVMiYJ5EjIgHfoo4 -UUAHwIYbunJluYCgANzpprBsvTC/yFYDVMqUrjvwHsoYYVm36io994k9+t813b70 -o0l7/PraBsKkz8NcY2V2mrd/yHn/0HAhv3hl6iiJme9yURuDYQrae2ACSrQtsbel -KwdZ/Re71Z1awz0OQmAjMa2HuCop+Q/1QLnqBekT5+DH1qKUzJ3Jkq6NRkERXOpi -87j04rtCBteCogrO67qnuBZ2lH3jYEMb+lQdLkyNMLltBSdLAgMBAAGjgcAwgb0w +DQEBAQUAA4IBDwAwggEKAoIBAQDL/SIbkiu2pqqOBHpOkNMVX9X3DVd6um1ZbByB +3Ulls8L4+S9IdHl8egst5VEaV+493HsZqItv9gSu4pXQs3Ybgjus+xkc7hzWst5+ ++wkD8T4GH6mKTbfB+U//d535xtRxFK0FMQ5bykTpkic3vzQLjNG2x0SK9BkzsAxR +fF8mmjd56lxqnB13bs7MBX2MY6aUliOMSd59RsCz7No6L2I280wyl6I/DwTfo8NF +XO1CIF1NLfnke3HvsKQ1tuvpzCcZVIef7ZOQw4sj4Jo/YD/ocHy5dSmYkCxKyfGL +cCAEwRuy8qVHdZsGriO3Ql+O3ryLU/ElN6lxV7L4Ol+5n5xvAgMBAAGjgdkwgdYw DAYDVR0TAQH/BAIwADALBgNVHQ8EBAMCBeAwHQYDVR0lBBYwFAYIKwYBBQUHAwIG -CCsGAQUFBwMBMEEGA1UdEQQ6MDiGHnNwaWZmZTovL2x5ZnQuY29tL2JhY2tlbmQt -dGVhbYIIbHlmdC5jb22CDHd3dy5seWZ0LmNvbTAdBgNVHQ4EFgQU2XcTZbc0xKZf -gNVKSvAbMZJCBoYwHwYDVR0jBBgwFoAUlkvaLFO0vpXGk3Pip6SfLg1yGIcwDQYJ -KoZIhvcNAQELBQADggEBAFW05aca3hSiEz/g593GAV3XP4lI5kYUjGjbPSy/HmLr -rdv/u3bGfacywAPo7yld+arMzd35tIYEqnhoq0+/OxPeyhwZXVVUatg5Oknut5Zv -2+8l+mVW+8oFCXRqr2gwc8Xt4ByYN+HaNUYfoucnjDplOPukkfSuRhbxqnkhA14v -Lri2EbISX14sXf2VQ9I0dkm1hXUxiO0LlA1Z7tvJac9zPSoa6Oljke4D1iH2jzwF -Yn7S/gGvVQgkTmWrs3S3TGyBDi4GTDhCF1R+ESvXz8z4UW1MrCSdYUXbRtsT7sbE -CjlFYuUyxCi1oe3IHCeXVDo/bmzwGQPDuF3WaDNSYWU= +CCsGAQUFBwMBMFoGA1UdEQRTMFGGHnNwaWZmZTovL2x5ZnQuY29tL2JhY2tlbmQt +dGVhbYYXaHR0cDovL2JhY2tlbmQubHlmdC5jb22CCGx5ZnQuY29tggx3d3cubHlm +dC5jb20wHQYDVR0OBBYEFHG3ovGrSDcuiv5/7ZnrNSbR+53PMB8GA1UdIwQYMBaA +FB0NOZh07PtOrAymg6WLcOaPvzKCMA0GCSqGSIb3DQEBCwUAA4IBAQCTCoPBYbgP +HN9ih7CN1zf+tjWR4Ex2QZV8QQvGCrxsLAYhDlR1OOe6KHJtngyNtxcEEATJL92Q +fuOSJqmzOMTA6iFBHUjr8IXrpC+7YPCg9meGbmdgcFL0VfI23RVJkLwxMI06TKOM +/RjBPl8um2Dy6X8te2d61qVkwKt7LHnUpfz7AzpRFEEHdmYZe7Kvg90+VVMi+jWA +1Cm+PQAczqBFRuw2IVPN0R50S+0SDRSIMJLx+ehSN787GN9p/mMPiXoF/yiD5XDA +t5/UwUUbIOwrhnzWzSV1veA1efIOXGTXmt+mT7ueWNMIkWUx1ebk7Xn9q3i3Qey0 +xYYobPcy1znA -----END CERTIFICATE----- diff --git a/test/config/integration/certs/servercert_hash.h b/test/config/integration/certs/servercert_hash.h index b75188ddab54b..35c14e7d542af 100644 --- a/test/config/integration/certs/servercert_hash.h +++ b/test/config/integration/certs/servercert_hash.h @@ -1,3 +1,3 @@ // NOLINT(namespace-envoy) -constexpr char TEST_SERVER_CERT_HASH[] = "E6:D4:55:6E:BC:91:E2:2F:1E:42:48:05:3C:3E:B7:97:ED:3E:51:" - "E3:A9:C4:87:1B:FF:61:76:25:6B:F3:95:7C"; +constexpr char TEST_SERVER_CERT_HASH[] = "DC:E2:2B:65:90:43:9A:36:1C:8E:6D:CA:42:8A:8C:37:C7:A1:77:" + "00:5B:C1:3E:33:8A:B9:2D:04:2C:B1:3F:0A"; diff --git a/test/config/integration/certs/serverkey.pem b/test/config/integration/certs/serverkey.pem index 27ea60a966ea6..f71631600a3e8 100644 --- a/test/config/integration/certs/serverkey.pem +++ b/test/config/integration/certs/serverkey.pem @@ -1,27 +1,27 @@ -----BEGIN RSA PRIVATE KEY----- -MIIEpAIBAAKCAQEAvSYGiO4cYzzNLbFJ2v0JorwXSmwqy5y1vU3mpER/xG4OvKL8 -r60SJcmw0+l4Sovolac1WPZKsYRh4KxQ4BiwWpFTImCeRIyIB36KOFFAB8CGG7py -ZbmAoADc6aawbL0wv8hWA1TKlK478B7KGGFZt+oqPfeJPfrfNd2+9KNJe/z62gbC -pM/DXGNldpq3f8h5/9BwIb94ZeooiZnvclEbg2EK2ntgAkq0LbG3pSsHWf0Xu9Wd -WsM9DkJgIzGth7gqKfkP9UC56gXpE+fgx9ailMydyZKujUZBEVzqYvO49OK7QgbX -gqIKzuu6p7gWdpR942BDG/pUHS5MjTC5bQUnSwIDAQABAoIBADEMwlcSAFSPuNln -hzJ9udj0k8md4T8p5Usw/2WLyeJDdBjg30wjQniAJBXgDmyueWMNmFz4iYgdP1CG -/vYOEPV7iCZ7Da/TDZd77hYKo+MevuhD4lSU1VEoyCDjNA8OxKyHJB77BwmlYS+0 -nE3UOPLji47EOVfUTbvnRBSmn3DCSHkQiRIUP1xMivoiZgKJn+D+FxSMwwiq2pQR -5tdo7nh2A8RxlYUbaD6i4poUB26HVm8vthXahNEkLpXQOz8MWRzs6xOdDHRzi9kT -ItRLa4A/3LIATqviQ2EpwcALHXcULcNUMTHORC1EHPvheWR5nLuRllYzN4ReoeHC -3+A5KEkCgYEA52rlh/22/rLckCWugjyJic17vkg46feSOGhjuP2LelrIxNlg491y -o28n8lQPSVnEp3/sT7Y3quVvdboq4DC9LTzq52f6/mCYh9UQRpljuSmFqC2MPG46 -Zl5KLEVLzhjC8aTWkhVINSpz9vauXderOpFYlPW32lnRTjJWE276kj8CgYEA0T2t -ULnn7TBvRSpmeWzEBA5FFo2QYkYvwrcVe0pfUltV6pf05xUmMXYFjpezSTEmPhh6 -+dZdhwxDk+6j8Oo61rTWucDsIqMj5ZT1hPNph8yQtb5LRlRbLGVrirU9Tp7xTgMq -3uRA2Eka1d98dDBsEbMIVFSZ2MX3iezSGRL6j/UCgYEAxZQ82HjEDn2DVwb1EXjC -LQdliTZ8cTXQf5yQ19aRiSuNkpPN536ga+1xe7JNQuEDx8auafg3Ww98tFT4WmUC -f2ctX9klMJ4kXISK2twHioVq+gW5X7b04YXLajTX3eTCPDHyiNLmzY2raMWAZdrG -9MA3kyafjCt3Sn4rg3gTM10CgYEAtJ8WRpJEd8aQttcUIItYZdvfnclUMtE9l0su -GwCnalN3xguol/X0w0uLHn0rgeoQhhfhyFtY3yQiDcg58tRvODphBXZZIMlNSnic -vEjW9ygKXyjGmA5nqdpezB0JsB2aVep8Dm5g35Ozu52xNCc8ksbGUO265Jp3xbMN -5iEw9CUCgYBmfoPnJwzA5S1zMIqESUdVH6p3UwHU/+XTY6JHAnEVsE+BuLe3ioi7 -6dU4rFd845MCkunBlASLV8MmMbod9xU0vTVHPtmANaUCPxwUIxXQket09t19Dzg7 -A23sE+5myXtcfz6YrPhbLkijV4Nd7fmecodwDckvpBaWTMrv52/Www== +MIIEowIBAAKCAQEAy/0iG5IrtqaqjgR6TpDTFV/V9w1XerptWWwcgd1JZbPC+Pkv +SHR5fHoLLeVRGlfuPdx7GaiLb/YEruKV0LN2G4I7rPsZHO4c1rLefvsJA/E+Bh+p +ik23wflP/3ed+cbUcRStBTEOW8pE6ZInN780C4zRtsdEivQZM7AMUXxfJpo3eepc +apwdd27OzAV9jGOmlJYjjEnefUbAs+zaOi9iNvNMMpeiPw8E36PDRVztQiBdTS35 +5Htx77CkNbbr6cwnGVSHn+2TkMOLI+CaP2A/6HB8uXUpmJAsSsnxi3AgBMEbsvKl +R3WbBq4jt0Jfjt68i1PxJTepcVey+DpfuZ+cbwIDAQABAoIBAQCke+e9zZ6b+EY8 +n9WzdkoOySkxvbtVRfAYk/lkqfeeH1ZPBjcfOHQhcBOFnYxJLq/3h8pnRSWyUPEz +x5dAIwVQZzIRaKO2VTZB1Rdd0rRRTnxR2cQOtl4+9faQq3ZhyvbQe/iL4COQ1ke9 +A1HGPNINoi4UMRfO58dOi11Tc3MSHwVvSavEOP5G2a57KpHdMfzgDpPgidSiIl4g +ke4MAHUIrqdKBws3NhEFRe2ICoQgfdjIprIk8yEgW8S5/naHOs+cUvbiYB2ojCdk +KrBGQ5GcCH4zOFshlI5UGd1vBNVYCC9MhiOFnPbn35XubHaWrlKjviBBkhx/hhES +PpwrlBxZAoGBAOxxV3ZslpsHpPzi3/IsigE/hfhHqUGXhRu9dZMYbI8WkHCrk6sY +FRcHDW1KT5KdvnTPAQer87MHWOoELYFjYb+IZSBk7Ayw4V75vfdQWVZAk5/xfM+O +7vlA9jnmi1GR53MYuKUJ9y24Zo5AUH9BFl5fIQGk6cMUJmdvOLhJt48LAoGBANzc +lOsR1grG6NJ+J2oJZMe91HF6DWgW3lYT2zp9CnGJSZC2dGRfMtHw30wzN6d3/mYf +vgGuTg8Ln+hmbm90CNXMf6NaJnv5864pTTsSKLZgEuA41gmVNi2kuDLmTkpgqrNe +Nmp37JNPf35WbrSbZ3vpbirhQyZf0MI5qYw4exatAoGARSOvi7WdJKBLopdFHS/g ++xR0PHHYEJIaHk58fxL5S64xdoD1oWZdZGpvhrHgKuNtugJ+LpwdmxBe869dDyTc +hIGB8MMSM3PVs0wcPKGGPi6L/I1FDfyh7MkON0gvHR8pKwLjm38ahIgTlS1BXLTP +sbDnme97W8wcnsprL5h+0JkCgYAhJcoD7c1eGLRgwyZPN9G0WL1FurfAY45DBP/m +K1Yh7CTqXzfgyJjsAWbCHP3BWLUJxsHRpsN4Zpo9WwJAH/4jeGm/rowQF1eHUBOT +RgpuNMUgeedF0Osstogeu4oMh62W9hDcsdsD0O6lm3tKB/jkFAjAzsYxQDgorlbQ +ALoYkQKBgBoK84QH5Zmm7LRWK6r6ncIrgCYqwQDGIKP5IjPH4yrc9UZqKAytSjad +W/uPVfoy4v9WmvOEIobVQpMWItdJKQTu+Umju5UdxLqRi1S0paILnHf3ehcObkAq +aTmTWC9U/7xjUuHQwPLdny+6MsZkbigtbF8983DwjePPIJfJ0tQ4 -----END RSA PRIVATE KEY----- diff --git a/test/config/integration/certs/upstreamcacert.pem b/test/config/integration/certs/upstreamcacert.pem index f3f76898c3471..1f18cee72a911 100644 --- a/test/config/integration/certs/upstreamcacert.pem +++ b/test/config/integration/certs/upstreamcacert.pem @@ -1,24 +1,24 @@ -----BEGIN CERTIFICATE----- -MIID7zCCAtegAwIBAgIUTQZdxxw6y4+Te1kv8hDza/KXTHUwDQYJKoZIhvcNAQEL +MIID7zCCAtegAwIBAgIUAM3GAjabuMnzR08aU9j8mRwnOGQwDQYJKoZIhvcNAQEL BQAwfzELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcM DVNhbiBGcmFuY2lzY28xDTALBgNVBAoMBEx5ZnQxGTAXBgNVBAsMEEx5ZnQgRW5n -aW5lZXJpbmcxGTAXBgNVBAMMEFRlc3QgVXBzdHJlYW0gQ0EwHhcNMjAwODA1MTkx -NjAyWhcNMjIwODA1MTkxNjAyWjB/MQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2Fs +aW5lZXJpbmcxGTAXBgNVBAMMEFRlc3QgVXBzdHJlYW0gQ0EwHhcNMjIwNDA3MTY0 +NjM2WhcNMjQwNDA2MTY0NjM2WjB/MQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2Fs aWZvcm5pYTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzENMAsGA1UECgwETHlmdDEZ MBcGA1UECwwQTHlmdCBFbmdpbmVlcmluZzEZMBcGA1UEAwwQVGVzdCBVcHN0cmVh -bSBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOFT8hbqRn+9AKU2 -IFtZKFFYpt7v2x1e8gtzgPm3TT7RJcV2GLeT1cOwubL81ArQmwfyVlwJkt1wK7Uw -+Z4FvtcCjQc4dR3yxkIdhzZOiq7PbQgAjyRNNGmneYTAvpXwC+l8ZV2M66ihUKgj -7iGiqQCvYhuYIb7BEnOj20nFuvHlxaDWOst4SQgZmRIkQyA8rrAIRfu7aQiCEla5 -86AXcXV4gmOW3dsKNoXO8Fr+9mtAmJKocLtlUkCeDW+WYqv6RLjMVa915khNQLde -bL+5hYxBcKYB10wOVzSTCfM6fbqtpqJZEdlGjkKtQ2Szy3mpoAJKPmZYzodVhL6N -LhoLjZ8CAwEAAaNjMGEwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYw -HQYDVR0OBBYEFDtmHVOikybtJjVEI4Q7wvUbwgBkMB8GA1UdIwQYMBaAFDtmHVOi -kybtJjVEI4Q7wvUbwgBkMA0GCSqGSIb3DQEBCwUAA4IBAQAT3kBm2uCpB4cAmdgu -u6sqxUvYFzYlHFnWrQ3ZFwMrLRSzUdrcp2nSQz+e8VeXI2SkLPCD5Xg+8GGLWA5X -lH6tvVx41cRqSr611ebxPVWkEeP+ALkHo4xUbcR5WUJD52VxzqYbhavYFjB2FzqA -OfefKyXIhcKtezKBwaJbVn9FseH49q6UNjYODOY88rW+2mvDoZWBUuti8CxNhIiu -RHnGimY7H565NpbPliVlo2GhiKhJvyPwK7+cjfj68HaoixlXHmrg506bczO/Gt1a -USQmjtB05h8bki0LQDiCQu1fdOPEflJnv3VdFz2SSKNRab2asP+KbRPURUW8f9zN -GNxR +bSBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMSzKRJ0BRNcbgDJ +vDKGiC+dDTjWCELZmmhuXxGXn4nb9zkPrENul7D64Y/mPEFrAnzvkdbCStRRppqv +lih9aPBJGnLt/BFnE+1gwSVWHcIuGiscn43FfJQk1x9WzOFuNYRa8qFqiSy2yuBl +DLsE3GAJwlA3R+H42RroKSgc9QIu0YWOEuFxxwbZ4YludeVn4eZ2UIJc+9IalqQd +/USNWpDbF15rzTIdHQDkDWiJ7i0P1nQYOg9Ox8Fz4DHvFsZ8pec5ayt90fxQCDBZ +ltqg/XQN6gJTo6Sjt/+hlN8HYa6nPaTomky5p25nW83+1+VY6PXlWxJY5mNtnw2g +IzH+WQ8CAwEAAaNjMGEwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYw +HQYDVR0OBBYEFHHiOkwR36EVUcLG8EXuMUbnJlgVMB8GA1UdIwQYMBaAFHHiOkwR +36EVUcLG8EXuMUbnJlgVMA0GCSqGSIb3DQEBCwUAA4IBAQAFPwnsXdW9k2c0bnhU +Q2L5mC9sMINg5+jlF1vaQC0bedAjkA7b+sNyTyiFFFRZtww+/bRLBDZA71psLp5Y +UxRIyq0xdoeYx+uauFYnVdHIyuyepXAc2nQaqniVejgD12GMkOrQJfRU0g9PCpwN +Su9VKJuIsXikGaiCFMMFMEqPrJ89TRXurIQFw2br6fAck0XkAIhRk636SocEinI2 +6KH27rApltg6hY9vP4sSrz+fY46o95v+2P3ef0y9ZG0h+4JkqmcjM3+Od1BehAZQ +4TC+xARjTmS2jqErZwAdw4ogElvO1w/0mMm7xZZJgqOf6rcdTyeJH0wMZAD1n0Bd +BxbX -----END CERTIFICATE----- diff --git a/test/config/integration/certs/upstreamcacert_info.h b/test/config/integration/certs/upstreamcacert_info.h new file mode 100644 index 0000000000000..a63b99f7b5701 --- /dev/null +++ b/test/config/integration/certs/upstreamcacert_info.h @@ -0,0 +1,6 @@ +// NOLINT(namespace-envoy) +constexpr char TEST_UPSTREAMCA_CERT_256_HASH[] = + "e68c68216b8cf85a36de259752425ddc372e031e360156914a39e909e27e1861"; +constexpr char TEST_UPSTREAMCA_CERT_1_HASH[] = "5d889c63937cdf6a3872f6a035aad7c8eacf2afd"; +constexpr char TEST_UPSTREAMCA_CERT_SPKI[] = "uEREslFrQdgEjTk6o9Bacq3xgndYt6rjgeXb2iINBsg="; +constexpr char TEST_UPSTREAMCA_CERT_SERIAL[] = "cdc602369bb8c9f3474f1a53d8fc991c273864"; diff --git a/test/config/integration/certs/upstreamcakey.pem b/test/config/integration/certs/upstreamcakey.pem index 08b5a9bfcffa1..bed4d27c2255c 100644 --- a/test/config/integration/certs/upstreamcakey.pem +++ b/test/config/integration/certs/upstreamcakey.pem @@ -1,27 +1,27 @@ -----BEGIN RSA PRIVATE KEY----- -MIIEpAIBAAKCAQEA4VPyFupGf70ApTYgW1koUVim3u/bHV7yC3OA+bdNPtElxXYY -t5PVw7C5svzUCtCbB/JWXAmS3XArtTD5ngW+1wKNBzh1HfLGQh2HNk6Krs9tCACP -JE00aad5hMC+lfAL6XxlXYzrqKFQqCPuIaKpAK9iG5ghvsESc6PbScW68eXFoNY6 -y3hJCBmZEiRDIDyusAhF+7tpCIISVrnzoBdxdXiCY5bd2wo2hc7wWv72a0CYkqhw -u2VSQJ4Nb5Ziq/pEuMxVr3XmSE1At15sv7mFjEFwpgHXTA5XNJMJ8zp9uq2molkR -2UaOQq1DZLPLeamgAko+ZljOh1WEvo0uGguNnwIDAQABAoIBAFiIeThTuHt8MYK4 -b6I0t8iugnJZ38f8hDHHokd7pBgoaSTar/+BUJ5hE7Wl7VKKgD9xEkl7YX8sEaBR -q+JQ85jbYboSjsHDn+5eV8AYwBjLW1WnkpZ61zskGHT2nmufM677t4A4XGeXam+G -HoyMssaYIn4hGjEu/yb8nK6xyDA+kHuuDthhM9qnrOKpZGRscXY3yolJhscif2jW -Ox2VLomYtlaKcZ1mrBapaLpY12WoRU/3YXvPpvWKpajkWVcqHZfQ56KATLmlLuCJ -aW4+A8gXRPepva2Enc6fXKKpiFiqGlBZ9kKVORGVGndpZLSMxP20SMTovtAz3wxQ -c3kCk0ECgYEA/6Cv7NtfqXLz2ovNIarObFYVuLyN49ubW/JntuRcQA9p5KyQcf8Y -+4LmR3F+te/Cz+QfC7zDgObpxMqvCs3fKLUg1ZLFRtSXtGRiulzhVRrxDk1FU6KO -m2+s2FGKyxB+czxg1jglASOXMRjKJ/K+/eiditcjaYeVzFfC7z9nyRECgYEA4af2 -AJEcvKdYc6PibIpmRGSNhCY5MPE88Rg19qA/0I7s1aytimHBYEKAUTpzcw+gbmNz -IWYYMkpbq8SZD0IGnzTRJTXsOKy8ZxrjlBZMbYsm77qYjTarObLps2Qa/8VharCW -9PAsT8rwA5PfVoTQaVQFHlyXC4266nx3z4gfa68CgYEAsXIkzQFXPXQLbHjBM46y -7icvuuZAhJxsEv6JGj8Y/mr0sgVL26Yd/HFYUt2o/Lhrfg43stkcyT0Bp1ae/Zv9 -Pe/F1BunD80BZfqNQhq5XG9wR+JBrpXX8nQqAptQAjf33xxZiDq/DTRcfntb0TFD -fVPdEITZEydIR+nf6l4UOFECgYEA1AnNwS6aQDNHjDI8+xz5h96sk7aPGwwz5aCI -ZJykGkeTCB1gXJ4K5XbXuHwiK8ZNTC0q7AFRT0BL75Wm9Y1nR4aL2FlZBNBboM7F -dkuVuYF+Ltm5q0fpkSgrLaQtMpW4OlaBItvj536cFeCHhnb6l16aCLOcQwEE2H3o -3xvb2oUCgYBTIevNPEIVrzncUyP56gu61z5YG/kDQ4+UpUgn6Ab2A1auFCa7mtNp -qa+LW6MpC6C5In6SSqotd5WbqxbLA6I7vH72psCeAgpkP12Sd31K/ikiwqj3EaEt -11ucC4/nb+WZQEn1sqPOzichZoyJyaGAjmCk40sdHk2ZQJZcvA78Gg== +MIIEowIBAAKCAQEAxLMpEnQFE1xuAMm8MoaIL50NONYIQtmaaG5fEZefidv3OQ+s +Q26XsPrhj+Y8QWsCfO+R1sJK1FGmmq+WKH1o8Ekacu38EWcT7WDBJVYdwi4aKxyf +jcV8lCTXH1bM4W41hFryoWqJLLbK4GUMuwTcYAnCUDdH4fjZGugpKBz1Ai7RhY4S +4XHHBtnhiW515Wfh5nZQglz70hqWpB39RI1akNsXXmvNMh0dAOQNaInuLQ/WdBg6 +D07HwXPgMe8Wxnyl5zlrK33R/FAIMFmW2qD9dA3qAlOjpKO3/6GU3wdhrqc9pOia +TLmnbmdbzf7X5Vjo9eVbEljmY22fDaAjMf5ZDwIDAQABAoIBAA8K9JUoskqswuzk +gLQMfdXGWQCDvdX+9kQOTM73nYfZfqqqfC4cAxXR2fY7UVhfaq1LVQfri/V42Rjz +XLR0AtZ9gLxRXvmlvGxm/d5xG42CIRYy9jDNbZ2Ww6zt4nVLDGS2399gWmVFBXbr +w3F6CbB+jpG76I9rjI72Ok+LB2HHOGKQm+2H9Ds524Tz10te6SePQ/phW7DizQgW +Nlz6CkZaMIxemJ+Oh/hR1Fm6eNZrGZ9aE9M0BUgSSrPt2SdGisU+/geDK19pFc+Z +o7VYVls8Y4jE/nJ5Px8oDHQ3+Q2q9vGCbMlGFjICadvT30MeN61KF+Bpy91nk06g +mU8CMGECgYEA9OeNjs9WJnRJ2GSC6dyy7N7dW4RrxM6leWuLg81+OrjJgQrfRBmb +TF2jUyffpz9MuqrEfewKwyvtKAoDjHUAk5Q5YSevtthlQSnLqKvGEA0+6XNyjEEK +hoZBtopMRWKDhPAbkxmeGaNXfOYueYGssv39WyLTO03kNESpCZ+frSsCgYEAzZyF +ZOgGspf46SDd2HxwE/VkeRijeK/Efh7eJfGf0Fj24PkVX05874wS7Y6ROGCWXNYC +djLNFb3MCv4CKdOlPNTZ3scQW/qfh3NGdRRK53+YGw8oo8bolpY5emjvjZsAjI0Y +TRbEIu8xlqt0RYPgx6qWN2E8ty3g00dwDfI3ea0CgYB7LOMTytBnsuFZRuRZPzl2 +zXjECMwzRkQP17lp5zbvzfT7RD6a/84OEKKOtmVUtw+eazk8pDWdiEBVfQPf5xEN +KOXbKZzE9/2lUqIuCYcql57mx7v7MtNaabgvWUuXMj8345Pa3m2YM4FTPmptjn0P +4ZNF/TQEhd6bM1VZk8E51QKBgFvVN8MM2sjzlYnSUyN42LohVQG9Hm4t2w4VjVTX +KXDt+z4aIhCSRrzbDC0sCvJqOV43e5v9LpoyTirurlquG9QioTieIlFii9P8iZCL +QrVIyM/1Ikqb8ZAogn2I1s2hWEpuTldH/sw3lydbZrARqdij+Tm85VhPVmYnNwYT +k/F1AoGBAIjAnkI8XdV7f65aGfijIxZmaOxhLWnqM/KGmI93F8Gvw83rb3rLBrtA +HSs9KzGTV4PFUJr9f+aoPpyOTJqMbV1qTPyy3NBvzfakft/GpDYwW9iVUh/6aIc/ +TcyzM/E+r5lsrFFuLqfiSYCOm2od2PxiNKWofQe1penQTqaZKSHF -----END RSA PRIVATE KEY----- diff --git a/test/config/integration/certs/upstreamcert.pem b/test/config/integration/certs/upstreamcert.pem index 211fa9d9dff65..1c2e53d0d44e9 100644 --- a/test/config/integration/certs/upstreamcert.pem +++ b/test/config/integration/certs/upstreamcert.pem @@ -1,25 +1,25 @@ -----BEGIN CERTIFICATE----- -MIIEPjCCAyagAwIBAgIUEuy1WgSCzX6mojPirk7Th6uhNHowDQYJKoZIhvcNAQEL +MIIEPjCCAyagAwIBAgIUFeQNMCYWuuMCb2Dmr7DaaMHVEU4wDQYJKoZIhvcNAQEL BQAwfzELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcM DVNhbiBGcmFuY2lzY28xDTALBgNVBAoMBEx5ZnQxGTAXBgNVBAsMEEx5ZnQgRW5n -aW5lZXJpbmcxGTAXBgNVBAMMEFRlc3QgVXBzdHJlYW0gQ0EwHhcNMjAwODA1MTkx -NjAyWhcNMjIwODA1MTkxNjAyWjCBgzELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNh +aW5lZXJpbmcxGTAXBgNVBAMMEFRlc3QgVXBzdHJlYW0gQ0EwHhcNMjIwNDA3MTY0 +NjM2WhcNMjQwNDA2MTY0NjM2WjCBgzELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNh bGlmb3JuaWExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDTALBgNVBAoMBEx5ZnQx GTAXBgNVBAsMEEx5ZnQgRW5naW5lZXJpbmcxHTAbBgNVBAMMFFRlc3QgVXBzdHJl -YW0gU2VydmVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpiYA4/I -NuflkPe4L/GTslmngNQUCo8TzPXG0gt7uoxr4FeuVy7AaD28S2/hwhbl+bDtHTQY -mvBUwNMsYzpND2eQ3sSIumdeLzBEKP2mnnZ9gE/Zd2TIuZl686RpDq0B6ZdZSpCu -bqQmmPFLiRNH8JViJZMN5yqMt7T5oq+DnCYQZllqmpAwd6NnhKALrYmZ87oqc0zh -kf+5amP7zMYKkwQuRwcx4QPZkEp3+qhszolpAJ52dFGJ+pLuUVDg0Gf0cnxLjFKc -6vcTlj4tsymR4ci58MHRt4EdGdhShw0oaj67gRRfU4Vj61I2ZAVH07kL0mjO2TZT -EKrOEJJ7/dtxdwIDAQABo4GsMIGpMAwGA1UdEwEB/wQCMAAwCwYDVR0PBAQDAgXg +YW0gU2VydmVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XUSBRpk +I9pRYmXyNceRKtaWyiYGZcHCg1w+biqyhiFfXQvIK/hwgoyNG5MsYESkulJTICcZ +YVrlweJyfWE24RMTjZRXiGadNvOhqoMrY8lFtc4oBBZB/aruVe4UGD2D/eMqJDnU +p13HGvhtFH0avG6c1lFBHrV6HCs6DtPKpMvy4IUToRB5XpELlyE0SUAyVU1U+7+s +RfBBT0ZHUNZX5PKwBtZh/aMpIneDVQWaAAlaUL9joLoBDdwo/nV2JjBhTwPllcmh +OPI5B1isnlf7aZBrwSl+t+lpsH/DsSJMEzUbsvG7/FPRRYQk/S14tLAjnoisfoXg +i3ywrypRMenefwIDAQABo4GsMIGpMAwGA1UdEwEB/wQCMAAwCwYDVR0PBAQDAgXg MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAtBgNVHREEJjAkggoqLmx5 -ZnQuY29thwR/AAABhxAAAAAAAAAAAAAAAAAAAAABMB0GA1UdDgQWBBQeoC5wxwX5 -k3ggIN/844/6jKx9czAfBgNVHSMEGDAWgBQ7Zh1TopMm7SY1RCOEO8L1G8IAZDAN -BgkqhkiG9w0BAQsFAAOCAQEA18wEg8LnPm99cIouFUFMAO+BpiY2KVa9Bu6x07m9 -quNFv7/4mLt87sk/umD3LH/tDjqW0D84vhG9a+0yDq7ZrD/P5eK3R+yBINwhe4/x -obJlThEsbcZF1FkMnq1rt53izukyQLLQwoVxidQl3HCg3hosWmpH1VBPgwoize6V -aAhKLW0n+JSfIE1d80nvZdYlHuCnS6UhLmAbTBCnwT0aGTfzT0Dd4KlYiY8vGZRu -tXOw4MzKtJcOL3t7Zpz2mhqN25dyiuyvKEhLXdx48aemwa2t6ISfFKsd0/glnNe/ -PFZMakzKv1G0xLGURjsInCZ0kePAmerfZN6CBZDo4laYEg== +ZnQuY29thwR/AAABhxAAAAAAAAAAAAAAAAAAAAABMB0GA1UdDgQWBBTo4VLTgqJW +psv5r76J/839q8DvSTAfBgNVHSMEGDAWgBRx4jpMEd+hFVHCxvBF7jFG5yZYFTAN +BgkqhkiG9w0BAQsFAAOCAQEAIuRuwGucU51tSO1pTlALDU4eJmFml/jlwquU5dEU +Utmd9KGEzyih+hcVNcD6Y+9e3vDUoxR1xe4nGiMRNH9I+Vts7FuBtH/ZC0A4oong +4t+6MAfyxmbjTjKCTxq3AvWhLVfBhdPYvQcpP6AHecQOJfJE+9EBybrq4e8m/jS/ +cJ/NDWy4Itvmwd2XT1niGgv2fWzl+EmyjBEVaDj4m93cd/FTjSrfIbI5H8OTLG+j +ppt+dMcTQZfNZKvItLIjNaDKR7vHB7/bsgtWAw2JRf5fRnAc+xJMD8LIDG+cJSdY +BoEHd18cVLIEkNktMajLTxEFlrbsgkNpvbA7LiiQG3PaMw== -----END CERTIFICATE----- diff --git a/test/config/integration/certs/upstreamcert_hash.h b/test/config/integration/certs/upstreamcert_hash.h index ec9a111a31553..b4b0766ab905e 100644 --- a/test/config/integration/certs/upstreamcert_hash.h +++ b/test/config/integration/certs/upstreamcert_hash.h @@ -1,3 +1,3 @@ // NOLINT(namespace-envoy) -constexpr char TEST_UPSTREAM_CERT_HASH[] = "9E:4B:E7:83:5B:DE:82:A6:E5:CE:24:8D:DB:91:C1:0C:20:0F:" - "25:3A:D4:4C:5E:13:AB:CD:53:00:93:85:F3:BE"; +constexpr char TEST_UPSTREAM_CERT_HASH[] = "05:F6:81:1E:68:37:4D:3B:0E:40:66:AB:E1:48:69:A4:FE:AF:" + "1C:A8:2D:4C:BF:DA:94:0D:86:5E:04:7B:5A:21"; diff --git a/test/config/integration/certs/upstreamkey.pem b/test/config/integration/certs/upstreamkey.pem index c1fc3c90cc7e2..8e6ac3570415d 100644 --- a/test/config/integration/certs/upstreamkey.pem +++ b/test/config/integration/certs/upstreamkey.pem @@ -1,27 +1,27 @@ -----BEGIN RSA PRIVATE KEY----- -MIIEpAIBAAKCAQEAtpiYA4/INuflkPe4L/GTslmngNQUCo8TzPXG0gt7uoxr4Feu -Vy7AaD28S2/hwhbl+bDtHTQYmvBUwNMsYzpND2eQ3sSIumdeLzBEKP2mnnZ9gE/Z -d2TIuZl686RpDq0B6ZdZSpCubqQmmPFLiRNH8JViJZMN5yqMt7T5oq+DnCYQZllq -mpAwd6NnhKALrYmZ87oqc0zhkf+5amP7zMYKkwQuRwcx4QPZkEp3+qhszolpAJ52 -dFGJ+pLuUVDg0Gf0cnxLjFKc6vcTlj4tsymR4ci58MHRt4EdGdhShw0oaj67gRRf -U4Vj61I2ZAVH07kL0mjO2TZTEKrOEJJ7/dtxdwIDAQABAoIBACz6E1+1N/0GTA7U -ZgMxP09MNC1QkAs1yQvQcoPknjqKQjxFfMUu1+gVZN80FOjpGQbTJOTvoyvvDQFe -Qu3CO58SxKWKxZ8cvR9khTWPnU4lI67KfGejZKoK+zUuh049IV53kGAEmWLZfkRo -E1IVdL/3G/DjcyZA3d6WbnM7RnDcqORPnig4lq5HxN76eBdssbxtrAi3Sjy3ChMy -BLInnryF4UtaT5xqR26YjgtFmYkunrgXTe1i/ewQgBBkSPXcNr7or69hCCv0SG9e -vRsv1r+Uug3/iRZDjEhKBmXWNAZJ/IsDF37ywiyeBdUY+klDX+mWz+0BB0us8b4u -LxoZQTECgYEA2Gu9EVC0RMrQ9FF5AgKKJWmZKkOn346RkPrtbl5lbuUgnVdBXJjr -wfMZVTD/8E/tMN4EMSGmC9bxCpRRzhrphrm7SHGD6b9O30DH9q0TV0r0A8IG/bMO -xJLYjrYVxtEE+KckzvyvfIefbDG7wYkI3u+ObmjBg9t6jcErKlI/PdkCgYEA1/1E -T+cpR16iOPz1mz+f/GU4YmPkdSDj/PrjMv0c1OTDvdPiZPpLkhLUKiICnKSKbYjX -Ko8fdZc3cmakgD1dXtAfR7Tf/hXQIR5+iHD48I5e9DVlkqMNDObfj82ohTFKVe/P -ZSwgDiAPTMFxWr26u/GzY5D3adCQYJyKE2wTh88CgYEAu7vpzGVnmu0ciXNLNvUh -BQcvODxsGT9BArTI1Z7I+oOD4TjZmAuHJz1L0lypB7stk+BjXoND2K1hdr3moJUz -0gy3a0YdGd07++nkDBVi26xHNCNRkS2MN/TyKgnFpiuW1mOXSH5lc+7p2h7iMiY/ -LbQ8p4Xzp//xtZnFafbiqTECgYEAwDN5KZ1r5z24H/xCVv+cT46HSU7ZCr3VA9cC -fOouUOitouu9J9xviTJGKKQRLPFi2awOxKmN9ic1SRE7y35P60JKw5WaSdGBXydy -s9nMPMyEhM5Lb9y2jUeZo68ACl5dZvG63a4RbGBtHQF67KOvWvXvi2eCM2BMShyi -5jujeZMCgYAjewq1hVqL1FOD8sIFpmndsH3+Dfc7BJ/erqGOX9bQYGvJO4nCe+7K -4o8qFQf4jwdxu0iNxYJIMdn+l4/pz2e7GUFHjgMduUclf27Qj1p+8EyYqp6cmkzM -8mcwRkYo3aM70EmUu0Xxi3d5O5F1bIJ5MkgXaX/zSF2N02B3jXroxQ== +MIIEpAIBAAKCAQEA8XUSBRpkI9pRYmXyNceRKtaWyiYGZcHCg1w+biqyhiFfXQvI +K/hwgoyNG5MsYESkulJTICcZYVrlweJyfWE24RMTjZRXiGadNvOhqoMrY8lFtc4o +BBZB/aruVe4UGD2D/eMqJDnUp13HGvhtFH0avG6c1lFBHrV6HCs6DtPKpMvy4IUT +oRB5XpELlyE0SUAyVU1U+7+sRfBBT0ZHUNZX5PKwBtZh/aMpIneDVQWaAAlaUL9j +oLoBDdwo/nV2JjBhTwPllcmhOPI5B1isnlf7aZBrwSl+t+lpsH/DsSJMEzUbsvG7 +/FPRRYQk/S14tLAjnoisfoXgi3ywrypRMenefwIDAQABAoIBACzFgGnh0t+zA5Qz +Qw4lyw0ebSdelaEYpHCnEgxrbl7goUYngR5mGraaSS/rwja3g7Pov/EeTt52dFPX +IVOOSxbA6sc90l1AabZexoNPfyQplft4FoNrfSEEKN1WH/O+tFLHZHEDKCNAiEK/ +/bnm2KZH/FzhBColjFbczQ8ixlh3/IGVQc2tGAurZrdsMvFoD+LTiy+wlVbCVPzB +MYfuo+iqwVF6FnsfiNBvJTBYQ+6qb8NAGvpwi7i0F1vE2QVlgY4SwXWou/b8y/r4 +0xRMELuKi5vGN1lcODEIlysVRz747nWF+26M89MEbMLO9kNf3LXE041aZxUjy3gw +5XM+YsECgYEA/TFHy0HfvJKtsJBbnJeQrSLgmLut3FrT8q6/Zc4t0z08nIHQTIIB +waxUSWWJXDtZEY2bk3AUm9E3UEu32l+AV87z+8endVmj83V0EmUweS6CLcNPD5WO +A0Qgg6Ouo9efhc4g7rgLUy2rxJdnVD7/VNfw+zdew/Fh6QSqiY46gUMCgYEA9CJ6 +Y3GVZieqV22D0LVUfF9Zu60y6DNq7sBq8NK1E8DZw2C3t6td6I6+fonqCLQJzss7 +ce1T3V+z2DIP63HHUQ0IVtYtQqFFG8diiW5CiVE7mFwxVK8BijXAUgIRBFSF91Z7 +Kt//owCVIxFt+kcL+1FuNK/arF6NXmsKBpVHbBUCgYAy/Q+mQTfbc/aCji/E00kR +dOqiF3ml3Ky+PK7Sw7i6x6RDKGlYXv4XkKrQtR/6cQE45bmk8XdVAccP5o+57G2e +QVElLUnt+gVobAjaA4LFhLY2nRR44PdedQPPPtFWsX+wpJhBOtMdBx+GUa8/aghl +f69KCBaPgzbihEwLs5bYnQKBgQDi7aGCCjRq7nfiKIQcXlEYArGwSABH4nOFVgqR +q+pxYBOLDr321i3GW9kqWhvW1zM+q56n+Yi4/5p2XaJ6oho5drnHrfIIO0u31I/9 +WyYx6fZRW3DnXH078VbBY/ZZZg/YpuR6KBjBdWsrW6o0uBGlHD4qb0P+cS1LFIgP +MndfOQKBgQClOsmJ7zrjn6qNlpNi8QsyCD+LxuzB+O/BWkEGA2egjoPJEEoOVZdk +hNSMpM1v1uQMlB9gOtkFeJdqE3llQPDyup6YnY1Xaay/waJw5vTctJ0YfpVNHvgI +V2ftTAFZFYEICKJ+nngk9y1FmFxw+tMP1TinqmAbXCFgM/PpdROTew== -----END RSA PRIVATE KEY----- diff --git a/test/config/integration/certs/upstreamlocalhostcert.pem b/test/config/integration/certs/upstreamlocalhostcert.pem index 33b597dfc8e4f..00f8bfedcfc08 100644 --- a/test/config/integration/certs/upstreamlocalhostcert.pem +++ b/test/config/integration/certs/upstreamlocalhostcert.pem @@ -1,25 +1,25 @@ -----BEGIN CERTIFICATE----- -MIIEPTCCAyWgAwIBAgIUEuy1WgSCzX6mojPirk7Th6uhNHswDQYJKoZIhvcNAQEL +MIIEPTCCAyWgAwIBAgIUFeQNMCYWuuMCb2Dmr7DaaMHVEU8wDQYJKoZIhvcNAQEL BQAwfzELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcM DVNhbiBGcmFuY2lzY28xDTALBgNVBAoMBEx5ZnQxGTAXBgNVBAsMEEx5ZnQgRW5n -aW5lZXJpbmcxGTAXBgNVBAMMEFRlc3QgVXBzdHJlYW0gQ0EwHhcNMjAwODA1MTkx -NjAzWhcNMjIwODA1MTkxNjAzWjCBgzELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNh +aW5lZXJpbmcxGTAXBgNVBAMMEFRlc3QgVXBzdHJlYW0gQ0EwHhcNMjIwNDA3MTY0 +NjM2WhcNMjQwNDA2MTY0NjM2WjCBgzELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNh bGlmb3JuaWExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xDTALBgNVBAoMBEx5ZnQx GTAXBgNVBAsMEEx5ZnQgRW5naW5lZXJpbmcxHTAbBgNVBAMMFFRlc3QgVXBzdHJl -YW0gU2VydmVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut0zAnO+ -0q/IyxWG/LVbjh5gI2C9ZqNpFD+PK/bwPahg5JdtLnOWPwL+3BqjRcJ7/viocncL -eF3bhJ2hgF7gZGqd07juA3O9Qo+UUUgFvSsEGg2Y5c5gmD3rxdatxv/TnCmWn2pf -5366GmMQXCz99QGFuwUvIAGdApTjh65V32BZlgIwI9ArRy2v4YyW4hEaqiMeMaqB -Q994UCqlbhL/d3eBz3pEG0UIMkUPndTN42cWK8dGhSSHlJQkdAOk6x+24xY/qvjc -OZOtoO0GQu+SBwV+S0Wt75CI2k/IKYzMX5G7QFEcE6RgkL8Ag2DSG4bl/6Zf3C3z -ufWZwMlhjzZoHwIDAQABo4GrMIGoMAwGA1UdEwEB/wQCMAAwCwYDVR0PBAQDAgXg +YW0gU2VydmVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6ls3XDO +brAMh4hUJqEaglnageKoOrJF464bh2ZQ+ZPiHRvVkkzsRyQz+SVh15ip7Qm9vpiq +w1nPLylwr0ZOcvmVi5BsozOPa0dlctmaFkH3yEkYmRYIG9b/GppH8ftGJygMie2l +cLmJToXlqvytoxMaFweDlvYCbEBMm8yLhA9l+ceQPhiY/+FW2McjZGKARkFp67Qx +dVKHj9qADZrUCA4ZhuJpR4YlKiD+30gf/rLUK2OnPTWY2z/5MpzfC7C3g19KGhCu +32H6UkAt1JG41aiFIWGWooXc+C2TmPnLRS+1AjJ2/VH7k+np4FdZHfi46g3Tqz6r +BktaTTkVoz/I7QIDAQABo4GrMIGoMAwGA1UdEwEB/wQCMAAwCwYDVR0PBAQDAgXg MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAsBgNVHREEJTAjgglsb2Nh -bGhvc3SHBH8AAAGHEAAAAAAAAAAAAAAAAAAAAAEwHQYDVR0OBBYEFKsGHS0dB1v/ -Q0YBMcKXV0BC95TFMB8GA1UdIwQYMBaAFDtmHVOikybtJjVEI4Q7wvUbwgBkMA0G -CSqGSIb3DQEBCwUAA4IBAQAet+A9/JpMOcTstI8AVxVtJ+DuaPSl9L+kUSTPRwee -F1YeHz3i7ibhdheZcWKWJUaVYmU2VTzYTT3iPxB36KvpHEcsxRAaCyND9a48JeIn -awV+2KUD6QhFPWrtcM/TIzDcrl9qT69nnraVv1haXh/t5xRA30+h5aA4t9PnHxWA -mDv6Hslqi/NLCN1KBIZxmUspLkZFJT3uS7mdcI3d0m5tQx7W7UZr/40sbdxRjK3Y -XnCJVa51ZAkoJMEiDY7/zPraZbW1QiIaGBRTGVJ/rzJDvwnMo117GIqiRKKw9fo3 -GntHAThLZeCkdfAcDnzKLkOU6Sp9QHXd2pAC7H1z3EjP +bGhvc3SHBH8AAAGHEAAAAAAAAAAAAAAAAAAAAAEwHQYDVR0OBBYEFEVKvYm5gK4C +OUtyLPtuWKcwt/jnMB8GA1UdIwQYMBaAFHHiOkwR36EVUcLG8EXuMUbnJlgVMA0G +CSqGSIb3DQEBCwUAA4IBAQB8cnS58z16fSCp63VLh4e6LBHpzFa4V83oSVg9IuLA +h6bS/PoY6PlID7gz2ZxMfll6akF2imB3VcyNRSjaUS5Wguc/q+uyLFZOMG3017xr ++rdZcOKhfeyd9Ji/wHTrNqMQZI9z4Piurjal4dUNwnJRumgqJrqnJBfQkoDrokug +W5Hcg+MlmjsXiVYonQpsolDrXzNnVASGgZXvlU3kAV7DQPhQwEh9h6hFmSHeDdAh +yfYFg+JKNVzkpp2k+Zdx/AqOZdusvTjLij8XsohqpZ7vNx47CNhoEH6qHJnWqed2 +f3IC8COVrzQeXDyCyUnhJieQMnycvPwuHDZeaTcuvbI6 -----END CERTIFICATE----- diff --git a/test/config/integration/certs/upstreamlocalhostcert_hash.h b/test/config/integration/certs/upstreamlocalhostcert_hash.h index 545ee399138d3..150e58a8d93e2 100644 --- a/test/config/integration/certs/upstreamlocalhostcert_hash.h +++ b/test/config/integration/certs/upstreamlocalhostcert_hash.h @@ -1,4 +1,4 @@ // NOLINT(namespace-envoy) constexpr char TEST_UPSTREAMLOCALHOST_CERT_HASH[] = - "8C:49:C0:6C:4C:02:39:29:EB:5B:37:C6:62:02:7A:81:77:22:35:DD:99:1D:62:78:4C:95:5B:38:36:6C:1F:" - "1E"; + "55:9D:BF:B2:76:73:B2:5C:40:12:C2:E1:D0:BF:51:F0:62:4D:9A:2C:B9:9E:05:FE:E4:C7:80:F1:02:BF:7D:" + "60"; diff --git a/test/config/integration/certs/upstreamlocalhostkey.pem b/test/config/integration/certs/upstreamlocalhostkey.pem index 30b9c0c462632..0064f75068a02 100644 --- a/test/config/integration/certs/upstreamlocalhostkey.pem +++ b/test/config/integration/certs/upstreamlocalhostkey.pem @@ -1,27 +1,27 @@ -----BEGIN RSA PRIVATE KEY----- -MIIEowIBAAKCAQEAut0zAnO+0q/IyxWG/LVbjh5gI2C9ZqNpFD+PK/bwPahg5Jdt -LnOWPwL+3BqjRcJ7/viocncLeF3bhJ2hgF7gZGqd07juA3O9Qo+UUUgFvSsEGg2Y -5c5gmD3rxdatxv/TnCmWn2pf5366GmMQXCz99QGFuwUvIAGdApTjh65V32BZlgIw -I9ArRy2v4YyW4hEaqiMeMaqBQ994UCqlbhL/d3eBz3pEG0UIMkUPndTN42cWK8dG -hSSHlJQkdAOk6x+24xY/qvjcOZOtoO0GQu+SBwV+S0Wt75CI2k/IKYzMX5G7QFEc -E6RgkL8Ag2DSG4bl/6Zf3C3zufWZwMlhjzZoHwIDAQABAoIBAFhHQd7psX+1PeX7 -YI8oWn10ijSMck336x9+u3OosGxgjI3Rn+nu/077ak2vY+0D6TJWZLXW2Ztes+Md -2PtdVyL5X2BzoDYPSp0UWZxgqx1oIgLw44fFjMq/jhAj0GsP1veSii77wR0LOH5Y -yJTTSJKjynrFAzNar8NVdXxW9wiUnE9pXzXFEKhWY9zntYOxxzpSXdbUtQBWMnCU -3gVkkKoJHSNqiDjLDHeNkmScPirJw+if8B+N5pgzhcoBzGdMGIEHxwvd7PtjyaxJ -kw+XPJj/JIsipRBqXwhcjnbuy0gnHMiYgYS2i70iO853VWJvDdHYXNsF/wT2VLB0 -3jfcidkCgYEA4z7Q98cv6JcjMdtCBl4NAecxNgV+TLgy7eekWQUlVq2CXT8Ky72H -qcNF1PDNEKzruNMtITomEBoOJbhMzMr0HOccP/DEU/nhMludR3a7MCL2TQw56Dhv -iI9Pzd0v8HwTggd1T8WP+ABwHRLHpJrMHnaKxWdYppm180azmRhaMAsCgYEA0oJO -gpyJ+1G2w54pZ4zk17I0ZHANYb2dJ6bM1w2qGONHCEPfRWeo3oPy7zdjtgs2rDc9 -eYtnuRrGCuzEJRI72+Qk/oxEDaqLUlEARjFEgzo17PijcGz1CLRHBZbG2+F9JBDF -SlTG0lpl4i99xN4JHv3ysYWvgXlWpdVuNW/I0L0CgYA66ITJRpRvygYwnXMPLYBX -tvP12hS0lKd3Lq5W+VOFlbMOsxH8YORzKJDIs6elI/5zSiMP0wAc+nQiaRVXnWEM -wQh8ttBeKI+tOzyZUvkRcG7C6GF2hnK7RtNcPXN49uEjuwU5KbC5jHuDveONEyfI -2df9dl3vyjb1mqViEYMHowKBgH7jrQ9t7H5hMxmXLL4OX6Lk+E/Sez5/XUuZb7/x -rKZz2U1SHDNp2JDIWJd5e9Ev0TTd12B8d3lMejP7o//0jcBuNR56zkqukmx8Bv5I -lFPFstu0xE/wXYNxp53m1NeVhClJMqMrlu0VMHS2y8jvTfAwgyoeuzwAOAqeLGBp -kVLBAoGBAIU50ngoEEkuBa9jZiwRTUEnkcs6w5rxIiU9CHDKPkoki3m6Ke5ACE6X -+iwv75MpIeMwNCVOsQNascRMgLfSFMJwnHm9rruCqi3iCGEhvvANrSbl80jPVaFq -wuElkQJ67t/Kqj2Nxq84dtP8SCdYtu582xS0NyIFBBJ9EPausuIx +MIIEpAIBAAKCAQEAy6ls3XDObrAMh4hUJqEaglnageKoOrJF464bh2ZQ+ZPiHRvV +kkzsRyQz+SVh15ip7Qm9vpiqw1nPLylwr0ZOcvmVi5BsozOPa0dlctmaFkH3yEkY +mRYIG9b/GppH8ftGJygMie2lcLmJToXlqvytoxMaFweDlvYCbEBMm8yLhA9l+ceQ +PhiY/+FW2McjZGKARkFp67QxdVKHj9qADZrUCA4ZhuJpR4YlKiD+30gf/rLUK2On +PTWY2z/5MpzfC7C3g19KGhCu32H6UkAt1JG41aiFIWGWooXc+C2TmPnLRS+1AjJ2 +/VH7k+np4FdZHfi46g3Tqz6rBktaTTkVoz/I7QIDAQABAoIBAQC57HjzC0mZaOR3 +UnCoN0jRGSBOlNHJi/gbq1V8XV6tCWFR+5gUkF7fb2B3IbZZsQfn2o27EvpJjpKC +1o0FpeR2N/1axMU4lBho8mvd1mNB0IVY9cob7y4F5FdNPO1TLnZTxs7zl90BtI9x +/PC3ESefCRA3V+e8h+ecVXLahHgVXKq6h1TXwZZpHczrMOowxwP8eALEIh+/aQSx +L97zdYUI8z4lhwTtdymfFQWCPlmXOJ8ae5NXmPikkfctsH8+w69Etiy6KaWpDu0x +lhCXo59ph1h60lXEyKEkZqxVafoz2v+G7G8KdB9v9m+kPqoyWVW9JCskeMMM47Q1 +hwpBVT3NAoGBAPnydy+LyOfNl6wVbs+W6L7mqMzU3/ew5jbXx7bi3xPY7pU/pVpx +S837UMP6YWtA7v+XslwOTb3C/zA1UPcZWsKO2sriB4X2OH07XFI+IebOr7YrTjFy +zclSEDU9zxzuUEuA76j/ymD2nMi6FXOfxJkLhTodLFfgmUrjXdsilkRvAoGBANCY +BCk6saJ0/6NoYaUkDZ75PLuN1mMRn5JEGvMEXftMfw4B2ybA6zT46gMO4tAeh880 +3aUTu8udo8KyW6B5xl3fApa+HL/LEytETx+v3pMB7IPmlkqqXvPh6riIYmgBDyzo +dFUmySkudTp4BVcSLnV6i6mK1lDYwiX3ZVAGDs5jAoGAbDW5vd7hwuFyWbEJwVvP +Nd68k7lRoXV3paSztQzxkTEo0Xq1hrtoGyxDoiUDCiEZl5RARrR2mcITIvbiL6hN +b8/TD2Td5vRbLnSFmqGFodw3nEGRX70ZNKCPnc09noPaRWXz3BGpt2LtK8XMRbuU +rMGdEzTQHteA5jgbSSTnM4cCgYBUwK9QISzzmR4VQuAJvTBbm2D1w5eMASkYwNtC +Sk/1PwuQoWhtwozOpSRPwcieTwlXQ1+bJv1yqcZT4Swhc9kJYwcmQHBl7RkIx2Ru +t4JzsKBsp1ABXl/eL7iy6ZcyMtv7nydFQdESDnJLI2DoE9cUnIoKhQK3LpsT2gUs +EooJiQKBgQD0AMahwqTHRDpSQRXDrmor4C3GnhYIh72y+ikQdrC8X+2weIgX6xVf +HnE26yWVIqdWya10b2HwlPVqLoWyseiGolEa7L5Zsc79Vl9ibr5tltKMEc1ifHPl +fHpPwquPy4NISrCh7jDdxLNN09mZGFDqRwg9Ni/2cq8v8c2TNBU+XA== -----END RSA PRIVATE KEY----- diff --git a/test/integration/xfcc_integration_test.cc b/test/integration/xfcc_integration_test.cc index 044cb5ba9c9b1..ec340a416d859 100644 --- a/test/integration/xfcc_integration_test.cc +++ b/test/integration/xfcc_integration_test.cc @@ -50,6 +50,9 @@ Network::TransportSocketFactoryPtr XfccIntegrationTest::createClientSslContext(b - san_type: URI matcher: exact: "spiffe://lyft.com/backend-team" + - san_type: URI + matcher: + exact: "http://backend.lyft.com" - san_type: DNS matcher: exact: "lyft.com" @@ -67,6 +70,9 @@ Network::TransportSocketFactoryPtr XfccIntegrationTest::createClientSslContext(b - san_type: URI matcher: exact: "spiffe://lyft.com/backend-team" + - san_type: URI + matcher: + exact: "http://backend.lyft.com" - san_type: DNS matcher: exact: "lyft.com" diff --git a/test/integration/xfcc_integration_test.h b/test/integration/xfcc_integration_test.h index 1057051b5685f..1564565dbae72 100644 --- a/test/integration/xfcc_integration_test.h +++ b/test/integration/xfcc_integration_test.h @@ -25,16 +25,18 @@ class XfccIntegrationTest : public testing::TestWithParam