From b085e9dfe2912298483a05caa47dae1c3266744e Mon Sep 17 00:00:00 2001 From: Kawika Avilla Date: Fri, 9 Jul 2021 11:42:06 -0700 Subject: [PATCH] [PURIFY] Remove certs and PKCS12 files temporarily (#616) Removed the generated keys from Elastic. Since we did not own those and do not have the private key for the cert authority then it will be safer. This should not have any impact on runtime, might impact security related to x-pack with demo certs but none of the certs where for production. Otherwise, this is strictly for testing. To be clear, this can be emptied out because it is ONLY for demo and testing purposes. The demo security can be accomplished by using: https://github.com/opensearch-project/security/blob/main/tools/install_demo_configuration.sh Eventually we should take the certs from that file and copy those over but will just ignore the tests for now. Signed-off-by: Kawika Avilla --- packages/osd-dev-utils/certs/ca.crt | 18 ------------------ packages/osd-dev-utils/certs/opensearch.p12 | Bin 3501 -> 0 bytes .../certs/opensearch_dashboards.p12 | Bin 3463 -> 0 bytes .../certs/opensearch_emptypassword.p12 | Bin 3333 -> 0 bytes .../certs/opensearch_nopassword.p12 | Bin 3543 -> 0 bytes .../src/integration_tests/cluster.test.js | 3 ++- .../utils/crypto/__fixtures__/README.md | 5 +++++ src/core/server/utils/crypto/pkcs12.test.ts | 6 ++++-- 8 files changed, 11 insertions(+), 21 deletions(-) diff --git a/packages/osd-dev-utils/certs/ca.crt b/packages/osd-dev-utils/certs/ca.crt index 0fc61d440091..948293da120c 100644 --- a/packages/osd-dev-utils/certs/ca.crt +++ b/packages/osd-dev-utils/certs/ca.crt @@ -8,22 +8,4 @@ Bag Attributes subject=/CN=OpenSearch Certificate Tool Autogenerated CA issuer=/CN=OpenSearch Certificate Tool Autogenerated CA -----BEGIN CERTIFICATE----- -MIIDSzCCAjOgAwIBAgIUW0brhEtYK3tUBYlXnUa+AMmAX6kwDQYJKoZIhvcNAQEL -BQAwNDEyMDAGA1UEAxMpRWxhc3RpYyBDZXJ0aWZpY2F0ZSBUb29sIEF1dG9nZW5l -cmF0ZWQgQ0EwIBcNMTkxMjI3MTcwMjMyWhgPMjA2OTEyMTQxNzAyMzJaMDQxMjAw -BgNVBAMTKUVsYXN0aWMgQ2VydGlmaWNhdGUgVG9vbCBBdXRvZ2VuZXJhdGVkIENB -MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplO5m5Xy8xERyA0/G5SM -Nu2QXkfS+m7ZTFjSmtwqX7BI1I6ISI4Yw8QxzcIgSbEGlSqb7baeT+A/1JQj0gZN -KOnKbazl+ujVRJpsfpt5iUsnQyVPheGekcHkB+9WkZPgZ1oGRENr/4Eb1VImQf+Y -yo/FUj8X939tYW0fficAqYKv8/4NWpBUbeop8wsBtkz738QKlmPkMwC4FbuF2/bN -vNuzQuRbGMVmPeyivZJRfDAMKExoXjCCLmbShdg4dUHsUjVeWQZ6s4vbims+8qF9 -b4bseayScQNNU3hc5mkfhEhSM0KB0lDpSvoCxuXvXzb6bOk7xIdYo+O4vHUhvSkQ -mwIDAQABo1MwUTAdBgNVHQ4EFgQUGu0mDnvDRnBdNBG8DxwPdWArB0kwHwYDVR0j -BBgwFoAUGu0mDnvDRnBdNBG8DxwPdWArB0kwDwYDVR0TAQH/BAUwAwEB/zANBgkq -hkiG9w0BAQsFAAOCAQEASv/FYOwWGnQreH8ulcVupGeZj25dIjZiuKfJmslH8QN/ -pVCIzAxNZjGjCpKxbJoCu5U9USaBylbhigeBJEq4wmYTs/WPu4uYMgDj0MILuHin -RQqgEVG0uADGEgH2nnk8DeY8gQvGpJRQGlXNK8pb+pCsy6F8k/svGOeBND9osHfU -CVEo5nXjfq6JCFt6hPx7kl4h3/j3C4wNy/Dv/QINdpPsl6CnF17Q9R9d60WFv42/ -pkl7W1hszCG9foNJOJabuWfVoPkvKQjoCvPitZt/hCaFZAW49PmAVhK+DAohQ91l -TZhDmYqHoXNiRDQiUT68OS7RlfKgNpr/vMTZXDxpmw== -----END CERTIFICATE----- diff --git a/packages/osd-dev-utils/certs/opensearch.p12 b/packages/osd-dev-utils/certs/opensearch.p12 index 02a9183cd8a50e166b7b0500caf215a0a8dcd6b6..e69de29bb2d1d6434b8b29ae775ad8c2e48c5391 100644 GIT binary patch literal 0 HcmV?d00001 literal 3501 zcmY+EcQ_l27RG~!62V98nHaT7RMjlC1*K85HjPn)8qwH|5~B#Uw;FA2rDl!TyH&J; zQa+mw6t(KQ_qpS_f1Kw%=Y7vPfBq17$ZJXpDg++l1fms>){8!ZP|#2m;vx5dc!=?( zZGga22mW6~?FPhCKe)6VF3Sc4{`VC<9R+0}9(ant1CJ15AiDq9m(RI@&=~QvH!enf zti9vS%rUB&5;rrgb}6XGjmz zYBoqfUPu+pb#xFnUM;X)(Ndpy4=&WG!1Uad`sKQO0l2i$WaBNXj>m}jz?QG2w0~_^ zy+dR!Wub6U1Fo*OZ8T{tO*`#UuiQD7hL5k=1@X}CNH zqB=Ke(N*%)q9~ci7SOB09l=-PG-P6|oO)7|()!VFo&58>nMYu5H!o}Nw`|6JkgJlG z6vRCc@wC1f8t|(=Pqs2<-B~&L%PlVWP7+fmihX%kjm}O(FUp)v#;h!xM6P%ADREi% zMTNe^~@gk~RcbVaBvU38=s{A}R z!{JdtQuM{bP)N6RpM{B0l?*$t&c+ON*}^&B8?_Mh9pA*GUE*ka3*X*0~AhTB+rvDU+@h#K6cvLIRAt%47OGibTGTP*<*jPNYeK*de zJbPlrdT`B`^(gfaS7_K(8*YI8i9P{TGp|gn)Z^7PYl#)CV9s&rt=ri{KVIEF%pjPF zy}r#HKMK$=t9E@}FV_7WHswc&&97bh27Bg{$HG_1HQ!>!+*UsBb@#ZCmf^XuTY83U z-&uK3Tqa|?Fnw6*s&6Np*_~wyx!AACmA+f`)_0M-8CsDO%~4XtA?Al4n-46?u~P2vMmOzGA?n0 z7MoB_Hx#UQJD2AH)x*ixF$25_e-Wv7_5E~*;`b%p&*X(Z#n+^z9U7meuf=cbE$P}Z z$1FcISI`7UGx8d&SVaV6CS%Rtd@%HF9D|>OWZpQftyK=ZJ_kP#*EGN`g91klZ-rLiI^1D^Cr%jHDvm?f_ji_7;uUUsKlA?d`A@jd}bLq08ZQ98FS?Kg324f+}Qf>!~|; z&&k|%GvEhW%#+I8z#{%P=Tp^hUWO!F1}K79%-NjhULQ>y6ou~egqG&>pAAqux?66i zlu^#F7Uy0auP~$$MmttgeGCpu7WtVV?7WII;62;WR&y{W%WlXSD=sf9g55$wqyexw z`;?xTbd$svgSNAsWm%$DEUE;8)}B!^QI)d$5*gVx>}t-OovbSHyY<~FuWo`~MoFE9 zdt_tw>C}*SfmMV4ewO~LG5;bztBhC5H>x`P=2tqGhpq#qy=zqV)>Ww@6l$I+thyAg zOU7H;Yhd&F7)?{O6?K|Mo$|hR*!D{QIY>+u;|%=l`+a&+o5Yu@-{o*mKY_menU9Ro zCHVeBQCg@B4<8o*4e$gw0{j5}0C#}%rJ^q<-^K*1_4*BnTOI9~!Z^sxb#23N1zK*9?-x{npH!I08ia7{Sk`kCITqKhxO;Z~B{KtQ;-{|7dP@rTdmO3*cEeb4hOv9`(iPh5~ zZ3T>Jsm@UW@6;GX$9mLi6EXKq)sYlz&^fS=rd%Ot)H2RL*=bnpI@}3Q=KNiElV05# zG*CUC%KoGPYQM9;)pRo;-f$4U8{hh7FaBwXH6SvxrZwb2|r%oiabH)a_ znnptFm*=`c8vftYY)4d-+T$2e@go$?JDt~^n2?M_tVk1 zp~8cFFk>wqE-Mc>6g@i@__wp+pU!m2^b*DQ4!Dv@>0bkft_n7YdUukI)#HUeb86(R zjv53|y1bjmRpF9h8RbD0OZvCyymLH$ih39zVdg3CEeV95>))z`_WXJ_p^x3)uP_Jo z{kd+_foI=6)*DUZ689&rlfsw^GUsJhWl9h8PzwY~`vNt%y9%W{>*(?05n;#gg5H7I3a?+It0;z_?_(X7P zvs=?z`@hBeZktvZE(Dk|-KnI!aHoo9O}?-gL#XJ^?=F0C zs;aHIK__$?rJ49nyZ`p)AXS9lp-ghJd{x>Y5W!E$RT9L5@BUE!aN~GHHTh%P=^=~T`}mh zooD;u-&Kd^*bZ+BGW~FnonRBG^4c}>vDpmV6wYZ@+H-DT`$pSZ(3U+VO_OsJhlIL) z&2}dmhbt~&%7TnBoSV_J2ZzLjkw&>;v*ndQ$MyD;;+-53D1U+KEjCwE7RGS;jYZnB z3@w2{Y{FtFm_BmC7`L5S5z+I5#P-#)UBZ zp6%Fzn3u2?k&Pz&Dmj%GWcvMjY#=6Yt>|~(s~N{|?F{pyq*j?bSneRbt$6ao!Or(D z6t@^G(%;}*uL<70XVpA1h+lmXw-}cE20}9`b2}pbFjp?f0;LRPXgm5F1{jkPD)Lkq z3A2TB3Axa_yH)4f^?TX8JR!E@TVgL5v=Upyn$nM1Dvd;4mw7KsP1phOD%_sTFqRO@S5WI_^9WZNPA8J zgrz!EfLD%UUEiJzPfJb2_G=#6 z?L4y6yxdq#N5AsLO*^SaMw^E>TsS0u~R z;=osO)MnKYEdCveCk})5pQ=o?8d}dnjGUj~90Bg<&gJRfd~D(^P%#C#J|NT9XjPVJ7&w>y(I z=|2@0IqkxvzBwa1Oki^Ezc}g^r8*D@|qbsE2s=Om6*d6D*^)1Ap}hp^AVZ zXhGBx3{;d{)Bqqfa8u$U_gm^BdPj7DM3PEzdhqEN5Gv4)4o5 zRn^*Ct$O;t=Y5~&JRk0JpL6|w_x*f(%_ zHSW(gS$y9v$FP_tw6dM<)h@;J)i!A-ONk`pJT-qye~?v;P^O$##-)h z?+-qsS#EbnscO8gk}U+t>h>JG!^^0{4%0vbd9{|#lp=jn0~Hq^8x0|t zd=JW=>PyaL%-Rqv-n4@+v?$A)Y#Vjoc*W@;dXNOlutI#tvfo+|bt>mvKHQ-;Dtk}2R8BKYa*}8RA1+8XVlVl zUE+cs{KG8W*SF{`h!F?;YzS~*#rWuTZp5#Db#j}YkrhnKiSMXia=*2cpRki~r#fU)T)>4~w%sMyaXmQg}v1!o3)_j;)H* z#m$!phwDxnGyR(=Op_)P# zU=3S2{phB47#u)&Cva2s-v_6{`I<@s!JomNa(NyHxcjOJpr2noILHH3d_|&r*Rl{+$`S@?^9_tXdA2bB7f+h zic2o-dcxZh;9E_8%tzJyN`DoXr>ns?soZS4Q-5yTRP(LBDiyy9Cw`KPu>tm_*TiUu zZb+pSeRW!gL2}h74J7=EtL^LKTEV_8Yq6!(dNSz_j3Y|cTJ?^Yf%qlJS3HxA-jN)I2!4Z6=EKl()7{T3 z#B9ZI6Q%)<)NlPshiSUu#ln28P9^pPeDEyq&d zsuUlo_whIW%8-Wq$*HvXE;Q6nSxWCg=o&q!KMH{_Uy_-tH;!)KLqAvME?0lf>W|4b zH9*}o>%F38QINM9pzAr=_D|FTJGivUowXXCS=Dc~x{~g>)5mH48YLgRZ5~fB0K#C4 zVoH$P|5haxSd5PA2EYS=1ULZf0nY&T5T5^p%wk}&nOCXB8a8S`-^qvF=_`9`t~pB;YLd3DV2?9TVQwO~xPCLq}FI3yn#vu<^6|!}5d& z4A(l}#Mjo}7;n$JN?qb%KU+#KOux=7U5nMyLZW_1w|FGnhGewK$nfsZz)&(rc3j>o*@CGwk16TDD$RibHu#MNjebR z;l4O+iHo=gC~o5xlMbQk2!bX0~DF(9J;Ni z&USAsLj4O8hT=`a!7S&PlYfsFSBpeelX_Vo+^9 zdA^O7hq3zFT}%owx73+gWktjSymSOKTiE$vY~Jh1m_lO&1$7G|AKna>d+u0+;Gu5U zOE7!ho<5vk%utN*m9f)2SWJb&CpmbkRPQ|Kj(J^jlQ_Gh3FBpNcMqk*pU2 zaK<)13DatC->{bnO^?VGBjyXzC9$Sifs0@AI+zcJ^%0<&vmR8DZiF0Gd-k$SBZ>At zv?^fw5pSJi_(Bz~%|G^*U*J2=>rBK8M+=XcTQSmdik0h-rMeY^0)@piC`JSEDbefT zF@6K}LvgHrQDK!m>dVshrk_Tc;dS=B=CwM{GKb`L2(*JIa`b0}yH&`}w*r7#XAyMh zG}%dub$&iI_rvnX2MNAM9+6-5O4nD`{%}k*hL$r8sK#yfsEt(a)>OR$S6|?2ZHYNk zS;`Yz{42WOZIVRTKIiL5 zem8hqe%D2~Ir(?%Ua?l&%qvuL`?!*nd{0l6yqpX(rV_R^D&|OASCTl3-!>dq(k0y+ zu3pSe&Ke4?J(0UhUIAqfm1BQ^NvjBTcxWPQI!bcv(D7lYw)$~*zZi%ciq>3@{^=% zU-D}ChfO9%2r?NqKu3MpNo*(~eR^w81p4Al1>{ozveYEvrSE{B+v?O@5^`}W`fT$8 z=9ppQr@{+OTF7b+NKei(=~f^$pRvCbm0#J<;)VK;V5?ji>w>w#VZgE(a5sYCyoJs+ zW)3vwtLKw@&zKYWb@%&Tr4)BY{q5gbT;|@|%x1r=8F$a-W-#v>JEC%qtfG7iU^kW_ z2+9F|-bkm8{m9AIo<`~z!=^vJ(*;yJmr=)jwF z-rVek!Y=W}Zai`q#6_(fYMv?Ksq#(nTT^nOi|OkaYAtTt3L(^fox2%H^jUq^i$kyC zqmVcSHNLy<3W?`vCkHl(e*6A|h2zmIt<1u?Vw z=OaYJc$!bM+c>U3tJhBOKij+1I@rni=_rm?1n&=(!M$J2iY)~>ps4lEnZx3{gX*Uh zv9?txk3}sK%v2^jN3sw?Jni6Ag?7&=SpzGnUc?N(^K-n+E!nHQljQhSwff4|b0zh4 zO~}4aY2odm7g-KehtDLHAPNv32o(kSeL7MSc5(n2*c{k{Wi60YUdFAugOqUBl8qf^ fWZ=D@aj^JOH=bCIA0R!GqL*UGoIw&&AU5w`sJxH- diff --git a/packages/osd-dev-utils/certs/opensearch_emptypassword.p12 b/packages/osd-dev-utils/certs/opensearch_emptypassword.p12 index 3162982ac635ad31f99dd2592062cbc40b9a51ea..e69de29bb2d1d6434b8b29ae775ad8c2e48c5391 100644 GIT binary patch literal 0 HcmV?d00001 literal 3333 zcmV+g4f^shf(-!z0Ru3C495luDuzgg_YDCD0ic2mxCDX>v@n7UurPuLX9fu>hDe6@ z4FLxRpn?ZjFoFkE0s#Opf(K0o2`Yw2hW8Bt2LUh~1_~;MNQU_5KVn6q7B0j3`cbZ~3fF zawMSt!`9eU;q^Rl6&7)7#S6ny@Q|;miI`(n1M21ma*8U3+bev}c~Ks*vjB+De3Af5 za?W?1hV%J z)m1pQOi}vXULCJTX*Ak2+h${AT?Ezu+Fa*sMu{Sy05@@h9lI{d?S?K~IOGB5K%7+) z>?_!dAwsYTgh9q8cbLHMgviABEF>tf+q`Zgp2bEL9VwwW&$j{6{P6zR%Onwr4l`FD+R1|Dj*C_Jqs z%2G3XA_uMj-*wWR%40>M1n`7a-XL(k<|$!X?ZsNJj58Pqrt$vp#KBHl^n`dDDADa` zQ?u5Mg%Hwpt4tfUnn}jkpz8Mct3XlX&ZT_|y{|-Klxlh!;g$JD>iE+k>~-8;vkd22 zuACCTMOYb@x^0DRZ3F1=j~qC>3-irctLz@Qa&ZJ`OT@`UB}va-ZR6&RjoLvy7i)1W z#qT(%MbPjX?_yhRJh;VLBN6vJuCwZX{(zDIsy+q5K^BKX+c3Z)i|tJT`(}CrPh2i9 zavz%@lLL35-572f(a#a;xxaW%UfVU%oL!6YdS9|6g`Y)8Nc?!~GK<7TSI-MwgXn7c z-47)3zLm8ODI9|PYJ-2=TzT{wb!(lno7_M=uFXd8z3Fw7|D7j|9gQJ%zDZOS4`2|j zeHq(CeMTcVX^90}X`z4ey=G{8%x7X=r}GECC3=&C=tt^!;`-C&A@Q7QP_q*P&+Z^> z@Kzjj(@Tl$7SY`Yqs!_CruM5>ex9iYiPD&`O6!{BzuH3|wUjqMCXw9W*6fhdt_-|6 zr~F;A0?-Oc9@QwUj#IOlQ^vAOQ1( zVOgwpLS7Dw8O9vFO@)&<@&4w)sDtS7L67C%>|(+qR_X?h{#|QjybR6{F@EI}d!R_c zcuP@2uC}Npqg>BeA2^cj^K$axj%?~-w|tanbKa=n#kMW*M#0*|o?p9-cT84{x9$u-Upo&pugGlS>fA zo}w(=QjyFW)gf3`d+Sy+z8YHI2o5OMMbmEb;aCpCCdyP^9IALbV4W&!kYUCkTwcY? zE9tFPIT+L{vWc#@L4(#00wNcn-A?anJwBpa`k70>D)SU$cIUHU)f70nh>B|}-uYUn z3sh6-6OIVweNbcuX&KXq40V;jID#s-FTu+%hQ-?T_}n=)eTdW}Kr)T9L-|8wh`N74 z{pyI3M3no#rqjplnIqpp;ze~l!(0ekK@={23#i-#FFb_1u4H5qSM)6>DA<3-S|T>y zCM{$2V2FJxO$-N2`B|7q4G+QAT%o1G6~k;}O5_xbx;u}bx-@DVRF;uz-5y%`CxIJ(Z2yVGk1y>g2?7DA3Tm{}! z1Y~}skk6QDSYtK9t*3p0wDvufwd@xJAsYxPhYWDcW9qR`@ZR2&LNQUI#Ik{4_mp;QgWJ_7+yLyjPo)eI;c`S^e0FS(_NP6*m`KZMKNz1*K%}# zB^*(~MG|;Y=hA6?I)kQxa);qm*S>Tb%5RgNyF$*wGKo34LBia#Swdf}ZX{^dDA7U= zgm*6cl4dqKYAq|>)^FApv>vEG7vYuD5QN|gwQqGNIUtrPLkg=iNg(zKO3*l2UB+JH zeo^YPh#GHdh;KOYBa_tdu$ETWZKCNt>cybj9x{!>$h%xK(2*MiJYLPzvi=&J2J|Zo zg9Sb{m9&1*^80tpH|`_D+VXB1ZPNIW6nFU%8ZW@>FQnR^&q42bk?*mAr2HO~guRlb zWgXf>sD4+!@yiy2be&vR0G$AuI?DV%G?O|4M;@KF0cYGFJC$)FHYHz;VN--E2tYuhopmo8iOIu0tbx zxZ+2?b0R-^10#EozlqDRn$knS_Pvp|KJUQeldHja<0({cPM#-6IFAH<_C)fFQ&Zu# zMyrz}SP$u-5b0Onp0XU&)(Juxx4T!IFM?$l((|l0x}UqDLj9`|fkDT=a!W_=j`eo< ztnvjISlxJBNi)wBi=s)B5a%4bg|&Rxh-OB5UZ9t#>TwAS=vyyxuoHYx*G&9tr+mSO zyQK`=!LC{x*U|^<3NMcvm%DjR{ELG9^+*9%VfB9? znY;sRJc3J;B;&FD{8aCaaU;2HtI(U-!`ko)Xz-8!AawUpwMB90OLJovl!1sg}4};htxmm zb24BH3+6fX*ro6Mwkb=H0$DOl22I{+$db6ttjHye@f)Kwe{RCAOS!N=-DopZ+Ljq3Q-$1H;WxM>Y-?YPzXERIA&TKm7VeKyemt zBCw}aS0DsS1A3V_q?sNQ!xl%PSdH>gS&Uw%IaDVyT&-Hw~uOAFWJq-j9!%)-(q~s!TdU0pe05U)ciaHsDqK^Lu z$G}iv=6@^F5)>Hx4*~%JL@*TD^}h`O#zso<-yf&|q%ax~m_|_f5&BEjGawL56on%D z5+I~{+V^J*z*}-wT)(U4n(9H3S%S903nq`Atcp|-H=eBe=y$$9ODG-!PK84D(aJ{Y z!)enV)=C|d`CXM+14B%)j+*$Msrc=C{1o>-E9aeRoNkan1j?ZmHrrmLSq}$0NLh2@ z@$-VuXTGxz%a3(lK*`PQswYyQ+WIf?7>cALiY-_7*D~4Lt{t4uO=~b$^Zop%hxL9t2hLcG7kPsG5 zvenh3Sk_fmvzc>l@&|q$w7BUUWF&5%wt1Ax+<+G!U1Zq?nm5E|KCE zmC@RK43lxEFlzn405Z%~rcgU0yYp4^BS?q&p%b5!5JoEP?Q@~lFPKg17rv6kEPGE2 z>1bl5c?kkG^fdzf*x$R2)A`{CLgHVyq77je0UwoiWJq&4W(sH6F-E1ALd7U3wXKwF z-PKv(fP}wYH^gf<`Kqlsy$#*{GDl{lrn)63;&=LTw(Je{jnR=FPydJk9qZi8_LakY z=U#56miiL4!JHZ0s*E`m{0q!Og1EEj7RP)ai87GN;7$YtH@9p^_Iv#uxy53 z44WadOx$n2YM2>Kz{Le%);2+k@`xg?4524lM0jx%ego@PrcG*pcvXYPzW7xdTIDtUi;EJzo`;n5-GL;E&jzzT z=EQQn_Pi~#QJ*es+kr>#jeobGyr0B*ZzuusGmFtD#Xd$o6gscZcANlvss&yQ zqbr(xi1bwBq3ypUxPXqSPF@>?ew<*X;f&%cIHYZg54NPn->qRYljQz@y=dauuT-RZ z*l4chwbSe(k86y!R0x5Rn>>%4D9|Nx?|mR#uaNBq6V2EQ7h_(!-Wj)K;iso@GL?rc zfvxjDvB*bUHcW|(1INI-rm7zFOO zamZA5$u?r?R$~y%Htv-U&+Yp)w!_aPB>}U{sL4$$V-D8Wwz$0BP<6go5xLPlKD3e~ zaEubC$n`!yZBEPw<;Sx#94g@~#Z>oHr;GK$+S}R8Dny{(&t#qVToSa0U6Dom3Jmj~ zxu%RK>a0(i+pF1Mw@vWW#cq#(6iY%B%7wYijjm_RmY8y*oJRC|vPu(6fAceR;}Fer z4jv%bo+e3fL+UwSigiM3t$>l}q29}ri@nnnavsyoz`4PS7%8SzXoG=^x7RuTQjZ2? zUGSZj<&T)xfRLkheE8=~Zbu{}mU@OSd?)bR?jKJnrV7{OVt;WvGs%ZxXSl~R@Zrnv+=%wVMD`Ebq@=) zsrkG?%v!&w=#&{=^|1vIA}bvK$qW=ed#KheJz25{Xe1obXvUKoFK-BvLbdndlJ44`;tF=toegge!5iexYUE`7livhTF(fqe zWU+28c_~(J0)HN>N4Vco7EFY|0S?gCeoAd2b5Fb0TT2>`sGMZsnI}((a;;7z9A3Sv zl@&-88;VUs${)LPe)cb#9saq(&}HPm$287T@9vA#>)@AR1HE;WTh1i|4?cR~qjt{3 zuszrIzTt zJT1C1raN5cF%{(7`)uzP4`P1na}KFxl1e#?Ih6T2_UO_2RlfuB z$VVl)W~uA@-Qy|VDBu3J$Grp`i~`mP#|0>OOJ0N^p7|uA_?nSioPYfX$5__|?q%#DJ`$(+>13zJ}jVEbb!2&}tx>UWSAoR+}Wq z3;S4Nen;)f&E(W&t}UmCv_bZ8hks?vHgU4Lr6N{pQE|(l$cH?l3r%klkRMyv?Mclm zBJQJGv+k!rc>bw~~k+f74Jpu4$uoW8L;=>)rZP+NqpM4!>SBk`1%e{JM+BF{|Rq zum)^-DI73Ah2dF|MN0W>$>HEqZ_P;Cj=hnOgghyhp96mm7>JR4kOCgGQ1l~w7MsK8IHYaYZ(snOs^ecmK<+m zByzwjPx0N#7fvHNDzu4jGV<~`u7k8NB!p;t@3D%Mvbb5Zt%89K=9d+Ob8QiTGPM$q zK$^F~OEYS+rOI~OQG2^Kb9mYWY$sN<*XFsXIN6}GFqe)}!-FE>H-p=M84ZRB6q`#c z%yHIsdk3pfrLREOK5Eo(K8;@QOZ;YA@;o{kYVkL@uJnH)a_r-C9FxKk2_e<{u zsT@oq=5>PTM?bvsUDNtuo?4l4B`S1t^;YgIm38?+5EelPlqa~k#YnHM@?Wt>IAU=k zc?pllD~ClaY0F_#wh1*S31?6E=EcDTW@EWy8S6ut)xWzT>RltnJZD z;9;f{|4t?y1`EnwhKfVorQFh^x52jGmj}a&R>BiEeq=+nytXTG+JOoU~*SOQo9~sbyIG=xn{rgJ%{MViUt<$^GXO3Y30Md?CRD z1Eh};bx%Y4u)NriOt9g`nA56hV$rN4cYg5)4*>=uVwE+Jh|7rZQN>`MRvVpMPyx?=EV zrIa3w`+wJwoKcFA;|`H5kqnU>kp>ZrNSf#YkvtI*jQ8IYCMgJr5n)0_9>*Tu6E)Q) z@?4nL?1EJJ6$}RBhLMw!h|&-Pp(I2gMi(7fhFY>;BUpvS_qVAZUe+0w2ZO+`tKy1| L$;zsL0Kk6%be@sh diff --git a/packages/osd-opensearch/src/integration_tests/cluster.test.js b/packages/osd-opensearch/src/integration_tests/cluster.test.js index b93ac0177d91..9bbcd0b27704 100644 --- a/packages/osd-opensearch/src/integration_tests/cluster.test.js +++ b/packages/osd-opensearch/src/integration_tests/cluster.test.js @@ -265,7 +265,8 @@ describe('#start(installPath)', () => { await expect(cluster.start()).rejects.toThrowError('OpenSearch has already been started'); }); - it('sets up SSL when enabled', async () => { + // TODO: [RENAMEME] REPLACE PKCS12 FILES, CERTS, AND KEYS. Temporarily removed until we regenerate them ourselves. + it.skip('sets up SSL when enabled', async () => { mockOpenSearchBin({ start: true, ssl: true }); const cluster = new Cluster({ log, ssl: true }); diff --git a/src/core/server/utils/crypto/__fixtures__/README.md b/src/core/server/utils/crypto/__fixtures__/README.md index 629d83a2fc96..d6343e47d942 100644 --- a/src/core/server/utils/crypto/__fixtures__/README.md +++ b/src/core/server/utils/crypto/__fixtures__/README.md @@ -1,5 +1,10 @@ # PKCS12 Test Fixtures +```shell +TODO: REPLACE PKCS12 FILES, CERTS, AND KEYS. +Temporarily removed until we regenerate them ourselves. +``` + These PKCS12 files are used to test different scenarios. Each has an empty password. Including `-noiter` uses a single encryption iteration, and `-nomaciter` uses a single MAC verification iteration. diff --git a/src/core/server/utils/crypto/pkcs12.test.ts b/src/core/server/utils/crypto/pkcs12.test.ts index e019e06d82b0..3bcd021f5d74 100644 --- a/src/core/server/utils/crypto/pkcs12.test.ts +++ b/src/core/server/utils/crypto/pkcs12.test.ts @@ -66,7 +66,8 @@ beforeAll(() => { pemKey = readPem(OPENSEARCH_KEY_PATH); }); -describe('#readPkcs12Keystore', () => { +// TODO: [RENAMEME] REPLACE PKCS12 FILES, CERTS, AND KEYS. Temporarily removed until we regenerate them ourselves. +describe.skip('#readPkcs12Keystore', () => { const expectKey = (pkcs12ReadResult: Pkcs12ReadResult) => { const result = reformatPem(pkcs12ReadResult.key!); expect(result).toEqual(pemKey); @@ -209,7 +210,8 @@ describe('#readPkcs12Keystore', () => { }); }); -describe('#readPkcs12Truststore', () => { +// TODO: [RENAMEME] REPLACE PKCS12 FILES, CERTS, AND KEYS. Temporarily removed until we regenerate them ourselves. +describe.skip('#readPkcs12Truststore', () => { it('reads all certificates into one CA array and discards any certificates that have keys', () => { const ca = readPkcs12Truststore(OPENSEARCH_P12_PATH, OPENSEARCH_P12_PASSWORD); const result = ca?.map((x) => reformatPem(x));