rework cert creation and fix one filename

internal/certs/certs_test.go

@@ -20,7 +20,7 @@ func TestLoadCertificates(t *testing.T) {
 		passphrase     = "qwer"
 		missingCert    = "data/testclientcert_missing.crt"
 		missingTestkey = "data/testclientkey_missing.pem"
-		privateKey     = "data/privated.pem"
+		privateKey     = "data/private.pem"
 		privateCert    = "data/cert.crt"
 	)
 

internal/certs/createTestCerts.sh

@@ -0,0 +1,60 @@
+#!/bin/bash
+#
+# SPDX-License-Identifier: Apache-2.0
+# SPDX-FileCopyrightText: 2025 German Federal Office for Information Security (BSI) <https://www.bsi.bund.de>
+# Software-Engineering: 2025 Intevation GmbH <https://intevation.de>
+
+# cab be used to generated the certificates for the go tests
+# as the resulting files are in the repository, this script does not
+# need to be run  each time, its purpose is to document how the keys and
+# certs were created
+
+set -e
+
+certtool --generate-privkey --outfile testserver-key.pem
+
+
+echo '
+organization = "CSAF"
+unit = "CSAF Distribution"
+country = "DE"
+cn = "csaf.test"
+
+dns_name = "csaf.test"
+dns_name = "localhost"
+dns_name = "*.csaf.test"
+ip_address = "127.0.0.1"
+ip_address = "::1"
+
+tls_www_server
+tls_www_client
+ocsp_signing_key
+encryption_key
+signing_key
+expiration_days = 36500
+'  > gnutls-certtool.testserver.template
+
+certtool --generate-self-signed --load-privkey testserver-key.pem --outfile cert.crt --template gnutls-certtool.testserver.template --stdout | head -1
+
+# for testing legacy code path, we use openssl's traditional mode to
+# create a password protected variant after RFC 1423 that still can be read
+# by https://pkg.go.dev/crypto/x509#DecryptPEMBlock. Citation:
+#   Legacy PEM encryption as specified in RFC 1423 is insecure by design.
+#   Since it does not authenticate the ciphertext, it is vulnerable
+#   to padding oracle attacks that can let an attacker recover the plaintext.
+openssl rsa -in  testserver-key.pem -out private.pem -aes256 -passout pass:qwer -traditional
+
+echo '
+organization = "CSAF Tools Development (internal)"
+country = "DE"
+cn = "Tester"
+
+tls_www_client
+encryption_key
+signing_key
+
+expiration_days = 36500
+' > gnutls-certtool.testclientkey.template
+
+certtool --generate-privkey --bits 3072 --outfile testclientkey.pem
+certtool --generate-self-signed --load-privkey testclientkey.pem --template gnutls-certtool.testclientkey.template --outfile testclient.crt

internal/certs/data/cert.crt

@@ -1,28 +1,28 @@
 -----BEGIN CERTIFICATE-----
-MIIE2DCCA0CgAwIBAgIUGpLuvgBTEfLqFL5GIOcVfBsQs0IwDQYJKoZIhvcNAQEL
+MIIE2DCCA0CgAwIBAgIUT/9u6/HtTciy3NB6UGXu+U+UzT8wDQYJKoZIhvcNAQEL
-BQAwTDESMBAGA1UEAwwJY3NhZi50ZXN0MQ0wCwYDVQQKDARDU0FGMRowGAYDVQQL
+BQAwTDELMAkGA1UEBhMCREUxDTALBgNVBAoTBENTQUYxGjAYBgNVBAsTEUNTQUYg
-DBFDU0FGIERpc3RyaWJ1dGlvbjELMAkGA1UEBhMCREUwIBcNMjUxMDE0MTIzNTM3
+RGlzdHJpYnV0aW9uMRIwEAYDVQQDEwljc2FmLnRlc3QwIBcNMjUxMDE3MTAyMjM1
-WhgPMjEyNTA5MjAxMjM1MzdaMEwxEjAQBgNVBAMMCWNzYWYudGVzdDENMAsGA1UE
+WhgPMjEyNTA5MjMxMDIyMzVaMEwxCzAJBgNVBAYTAkRFMQ0wCwYDVQQKEwRDU0FG
-CgwEQ1NBRjEaMBgGA1UECwwRQ1NBRiBEaXN0cmlidXRpb24xCzAJBgNVBAYTAkRF
+MRowGAYDVQQLExFDU0FGIERpc3RyaWJ1dGlvbjESMBAGA1UEAxMJY3NhZi50ZXN0
-MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAnjjqmhm4+3hrSVsG5J7M
+MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAwqJ45WlBG5CqW3Meewsf
-8bqKzt86wjqZQ/ubNgr6PWSjYQLMe+RkuE5UPPmkQ37qAG/nswMt3k6vE0QHS2KL
+Es1tqQRsHS/L6Hlz/aTZQHte/Co18qklnza0ZvK0mbPsQ8HLKXfU6Am5yw3u6vZj
-9Kf8bvMZLxxpe6yPUj3sQolNYR7Xyc4XnvZmXx4VJjuobepytdyXrOyL0hlhQoJ4
+XNfhWDW4QtsSk9f/y/fBADw17qYinoVyLpqZU5Z6kFRY5npY0C9bCtsAZd4qimx5
-WuTbcDqWcW/glQ+d40OTd2uBw8clrYYXkLvDk/3sXv5t4ByfWQ+q2DBizTSFOBZ1
+yu/MhM8LHI9K2oKPSkFgRCTRKAo9sZ97o4wZmTxJIasOr0SPpmfMLs2sHSEqcK4d
-MZYJIxdvGtiOdrmuWdPs6P2ppDoNgB3yE4gecgBL5Fo8VNl7lWaFB9LXRFlnKNc4
+/RxZ+OtYtd3pmE/WjxtSozCkdAccvrH+TSAuF3+/6oBiov8yX0KPNEBiiwuDXMUD
-IcS7DVEALKOIB9qLSBntbSrvvyg4oprtFzDd/TEbW60ERZTHiDF6pcVH2qPj3t9Y
+QWkjfcrxQZAswMWRo55JJYBbIjrinW8vldLooFo5trNEE2nukgRPhvLhiJdKKAeg
-xCSS1lqyiLj2LtHfVZzAOpMigUiyj25b0s95lv4yYJKicDc3v4Q5DurE4XHkdSPk
++A8jM/Bx7JgjRCPppIEmWdvXg+CS6L0hGj49pg3OcIiNNoufoXPRkFqmRh72n1Oj
-1WrJXH90pVrajBbCQPeeu5J5tE9HunmsQGTWfc2NhUaePGvIkEDZMxENd0ushaiB
+2RC13W8H3C3SDYz20mqJhkbci+05vO/LgKj9te8xEs/xa4xCtv7ycuB2Etzf1cWS
-L+W7W8dgSsmn1uaFXL3u2equyhpQXoQYAbdTiezoNBTfAgMBAAGjga8wgawwDAYD
+zfz5LGXwwLI0rjpx3OAsr5i8Fukxe5maYLS9AUCTetTnAgMBAAGjga8wgawwDAYD
-VR0TAQH/BAIwADAOBgNVHQ8BAf8EBAMCBLAwJwYDVR0lBCAwHgYIKwYBBQUHAwkG
+VR0TAQH/BAIwADAnBgNVHSUEIDAeBggrBgEFBQcDAgYIKwYBBQUHAwEGCCsGAQUF
-CCsGAQUFBwMCBggrBgEFBQcDATBEBgNVHREEPTA7ggljc2FmLnRlc3SCCWxvY2Fs
+BwMJMEQGA1UdEQQ9MDuCCWNzYWYudGVzdIIJbG9jYWxob3N0ggsqLmNzYWYudGVz
-aG9zdIILKi5jc2FmLnRlc3SHBH8AAAGHEAAAAAAAAAAAAAAAAAAAAAEwHQYDVR0O
+dIcEfwAAAYcQAAAAAAAAAAAAAAAAAAAAATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0O
-BBYEFGORLtW6lR7MeEkbZxDkgJya89l8MA0GCSqGSIb3DQEBCwUAA4IBgQA2XnZL
+BBYEFN2InaQvsu6hULCYeKc6pdE4VgVHMA0GCSqGSIb3DQEBCwUAA4IBgQBjPdXd
-0EBLVMJCOkxRMuPwpZKW88ZqlJGIklI16+LjfCJZisiupIYXm2JD/zl8MOqFBhQl
+2xHzce3mi4RlANT4nOSdpELhl54xeJDgI9Evt70N8B4uTmOI5+F6JVICE25cnDs1
-s38sOnXgKJyBfnxRyNL0LaQKVBu14uccnWQ1g9ePNIKGVTreJmemm6WT7LCVeTOT
+c9SoHpWzh1ZuzfiBYa/cdQNUtaTfgHLi5GYtV1DzmKXVRUciBiNBWWxYMbTGvTOO
-qlOP+cPnHH4n2RDo5M20shsNVAWFI7NZHrC4JZ/0wN7G6QZk8aLGHob+oihIyV8k
+i3r6DEgOYuukeL4qj//EGOcTJEarHVSxPMuXTD/PoP/VpIdqRS9drEpFUC6lecZc
-5VggZ/XdYUdeCDQ0wydmgy/f3/rVGftwJ7PHFjKUvlfs5H50ziJJeoJQjHHkF98f
+UJtUPAcyx0oD2vNmPmulDfYFMLLOPrIeNa0g7os4wgUl7+9wR1cPPRTXY0fW6Hoi
-KPYGNsV0R9WSPRRGELp3PsL6mGM7Tti8VvdOSZ8GaYO0tHkn2KrqDsSc/0yi/tcb
+j+a8Qn80Q3PrOuEO/SZ4aHHpOk90bRqofyIhFjPwS0YN5w/Sn23uq1u2Dx+Zy+5K
-4qdhzjsnQLDXa2bGyoDSZrXBTfiTxIQoWX6VBgK3ddxH7U758uLee3Maw5vBT7Te
+6Cs9p5dJWu5/zU4ZdbQlpYIHXQVbido1TY92Z84skEsac2wVh7L2LMB3p3Gu9WYn
-nHOoX4GwTvRoZO9x+3SMnz5cMESReJaSfjfJ2NkPGR5kzvt+fZtSi7VKOLqz8Jv2
+oKqFYCw5FICvRgyh1KG8QWhW59Em0Jxr8rTw6qyBQACdixKy6/1ok2ArMivTC8Gd
-0xB9TljK/bIgTYCgHCJxcdeR/mJ3ZB8VAAd1TsQJJ6kDv2EFXdPOUeU+ZOU=
+rEbefshgc6dnAZCAp1MjCU+tg9iYEymSSLdOtUKvHEIosUGO1p5ol0hReTQ=
 -----END CERTIFICATE-----

internal/certs/data/generate_cert.sh

@@ -1,92 +0,0 @@
-#!/bin/sh
-#
-# This file is Free Software under the Apache-2.0 License
-# without warranty, see README.md and LICENSES/Apache-2.0.txt for details.
-#
-# SPDX-License-Identifier: Apache-2.0
-#
-# SPDX-FileCopyrightText: 2025 German Federal Office for Information Security (BSI) <https://www.bsi.bund.de>
-# Software-Engineering: 2025 Intevation GmbH <https://intevation.de>
-
-# Script to generate the certificates used for testing.
-
-set -e
-
-cd "$(dirname "$0")"
-
-## -- Generate password protected cert
-
-# Create configuration file
-cat > cert.conf << 'EOF'
-[req]
-default_bits = 3072
-prompt = no
-distinguished_name = dn
-req_extensions = v3_req
-
-[dn]
-CN = csaf.test
-O = CSAF
-OU = CSAF Distribution
-C = DE
-
-[v3_req]
-basicConstraints = critical,CA:FALSE
-keyUsage = critical, digitalSignature, keyEncipherment, dataEncipherment
-extendedKeyUsage = OCSPSigning, clientAuth, serverAuth
-
-subjectAltName = @alt_names
-
-[alt_names]
-DNS.1 = csaf.test
-DNS.2 = localhost
-DNS.3 = *.csaf.test
-IP.1 = 127.0.0.1
-IP.2 = ::1
-EOF
-
-# Generate private key
-openssl genrsa -out temp_private.key 3072
-
-# Create certificate signing request
-openssl req -new -key temp_private.key -out temp_cert.csr -config cert.conf
-
-# Generate certificate
-openssl x509 -req -in temp_cert.csr -signkey temp_private.key -out cert.crt -days 36500 -extensions v3_req -extfile cert.conf
-
-# Create encrypted private key with passphrase "qwer"
-openssl rsa -in temp_private.key -out privated.pem -aes256 -passout pass:qwer -traditional
-
-## -- Generate NOT password protected client cert
-
-# Create configuration file
-cat > cert.conf << 'EOF'
-[req]
-default_bits = 3072
-prompt = no
-distinguished_name = dn
-req_extensions = v3_req
-
-[dn]
-CN = Tester
-O = CSAF Tools Development (internal)
-C = DE
-
-[v3_req]
-basicConstraints = critical,CA:FALSE
-keyUsage = critical, digitalSignature, keyEncipherment
-extendedKeyUsage = clientAuth
-EOF
-
-# Generate private key
-openssl genrsa -out testclientkey.pem 3072
-
-# Create certificate signing request
-openssl req -new -key testclientkey.pem -out temp_cert.csr -config cert.conf
-
-# Generate certificate
-openssl x509 -req -in temp_cert.csr -signkey testclientkey.pem -out testclient.crt -days 36500 -extensions v3_req -extfile cert.conf
-
-
-## -- Clean up
-rm temp_private.key temp_cert.csr cert.conf

internal/certs/data/private.pem

@@ -0,0 +1,42 @@
+-----BEGIN RSA PRIVATE KEY-----
+Proc-Type: 4,ENCRYPTED
+DEK-Info: AES-256-CBC,3ACC7169D177F0159193ACAF3B3997A3
+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-----END RSA PRIVATE KEY-----

internal/certs/data/privated.pem

@@ -1,42 +0,0 @@
------BEGIN RSA PRIVATE KEY-----
-Proc-Type: 4,ENCRYPTED
-DEK-Info: AES-256-CBC,7BB7A980482CAE4FEF05C8DE69DE6196
-
-dlT3jC0LbF0g1wLqYAtf2R3zsipploB9FLJez6zb0kETLbQI3/531NcpH4YREOWm
-jVCPrZ9lSmdX5X+blfRwzA49ffUPTNg+zjRsCYWGp+cqvNGWzBeRUtGizYVvtpUQ
-5FJdOylF0TOUtxyijEmc+kCi4bjBebnXt0bKk+uyiHtyP7We0EbyKKaFlxgeckeH
-LYx/dUnAJ989Kf1NqUgjIKylmfeVlbHFDTsEBq2lPkBWoOv95sE0Cf9DTVD9MKx5
-+i5qHudQKuj0XyOSF205xAfJBxCLhIZqyliGgpWqv8qMlvu03On0qCWgm3fEs78j
-OsB51BzSTgXznswR35KcKApboM/CPDGRGKk+/mL6F+uie8GECC83WVo83ZU/pWzS
-LL0U+6IvdETn/0Hc/NXaaZTmKQIoCoW/YCs9AHMlWDxEFfkpsdAJJUKfZktBDZDZ
-yq4/JEOp83PRS1pmGbujTsvbWchU7vHmY+9dl0/UCRifBxRy/fnyqgGolkDDouf1
-pSqFzNs1RZBbrgK+VMIZkfcsEvEPzAWPgCxo0UTFqIQ2PgyPXFuqQOjHKbE9ZHMs
-PZFp0M5lzlVxd7M2Bx0GeBe++9e4oFbX77TehtmV1/IKS3Nn3mj7zVV1ufV18oho
-J+XCHsAhR8oDjR6TxBFN9TWWfh+BJuSrXJqYlJvbNCTIUvIhCAODYKRJbxjdZBba
-/YKag0R2V8wkZc4i8VoGx1tjmVjd7yA5blhl++IcxjAbZv8i5vS2N0zv460HgPfo
-Kwg87gfCDh3z76fWXJ/CGzS2hmO37D4j140gJFcH1OQXiBeq1tCDKiyy67CIuuYb
-lubwN8Q1Hxki3zxKtm3g6/JvZMt8lk+msNrwy5to6dvY8KpjDhUB3O1v2rx3nSVc
-IQ6/rGllGhEEn+u55JtIUJDUZfn3Mbx8lj+OjNA3bYhsGYLjray9tPkFCpZKlGvd
-ZFEljRiFFxOOQXGmCuM/3A56VUuh71RGgMG2hPvqWBb8Mu6KB5hXNjIbreqS3dcN
-QAfnK2oj3xj7TWsM77SpVYWHZT0fKXvfg5EN8CbPRTxgjK6gkp9ENNHAw42Ju3sM
-ocMCkt4kfZVa/ODUcIkbA1bHEh4HowwmOG6Ze0yUJpJnFJR86mtAWXPX6Z9Z9QGb
-6rSLBg7GOTctUwj4iDFqA8sNMMlrhcplCMFKY74NOXu+rrj6v410cSIZ7sLh1iKW
-3wP6Ndm5o0Oawi1JfVUEmGn5CG1hK7JR9018fg8t9W+zcDBgczrd+PMZfGeX04IA
-jj2Yu8dEbSSBWvY/P4VXhdhCK/ztaIM16BwtwgFvILdVWt9189liWrmmje/fhik2
-UNHHpumasNpMkpEn8UW3atBS+FCcbjLjnheaW8+aC08H03pDcdo6MXAkloLhueb2
-Aya7IPqsqKJMHdmMaPkoeET8VMNj9caXLPPGE++Eh/VF50e0WWD1fgxUcbgKQ3UE
-70DXEZHVr1ojR/lW2kNu6LueEFuL6J2mltaPJPJxjgXaG5bg8X42zBGzXM8MD6yC
-lIEg3LieIczJdUyCC/h6Dysnq97EVYMdQjJhpp+2IINZHUMF2vTC0TJqso1cgqrF
-TI+ZM3/QJfEk8RgJENEDBacJbn4HzahdSEXCPZq9ma6wfrqRoM+ifITRVtAaWaOs
-WSSHEZjeX1zQtqrpllA9AW0g9I0Fi4LvbJ6N+c5QPruGz8j+EbB3rlO8IvwH7ViT
-W/LouUShIKrHuytm4q4r3FeIpinObB9egW6PTGFQbuP6ysg208qucuS95ocUVrJ1
-mgQ1t2+mQanvsowdqE4t/ks5uPtcjCxU09fiMmAe6wjbLUxlIl02or2qtYd9+X9V
-3X35IXGemlzjutgdOPdWX1twf1mJIQQiiYamo83+tnRFwkXho4sebsEuCw/fjW1K
-dAvDHN+yzdE7Ogjf6Ambq0rlbiVccUmaE+HncrTfinUSQPRTmKCl0GBwnGXjlVWZ
-kqtgaytOATvsT//Pibc4kbsHHdL4dDJgV8bCI/+fSfkNPGr7rfF8S0JEYghbArrV
-5diW/P2StFnT5GmqDcyh/czyn1+TN1+ZjjKHfOOhtejrm3W5GvOnDHU8+i9hcm9s
-eUI0aqlmEQOlll/LSSeAzbZkmPA2pBsqfYzM/45MA56Sll33V4NR62iBYKSnb5d2
-iaOa224GYfzOw+1sxUsIT3hgCPPzo4KU5F3PQsD6BsNwTX2NnTlC5+qZAqtAWxl+
-SDJgqah53t9PWDoiKiaUk+AfSO7dJoGmRAPD2wCvMEiCgJ57h833dk69gZqM9npu
-ApYzL1PIfn5i4y+9VT3+MaQ53ux8eZnu3dsnz6YG1PrFUyEATYFv+DWfJPDjQnRc
------END RSA PRIVATE KEY-----

internal/certs/data/testclient.crt

@@ -1,26 +1,26 @@
 -----BEGIN CERTIFICATE-----
-MIIEeDCCAuCgAwIBAgIUcQFuRddqNeKF46PBa0xuf34XqHAwDQYJKoZIhvcNAQEL
+MIIEeDCCAuCgAwIBAgIUTqTcNqmr8Ou/MpL1AUnM/3gcoUkwDQYJKoZIhvcNAQEL
-BQAwSjEPMA0GA1UEAwwGVGVzdGVyMSowKAYDVQQKDCFDU0FGIFRvb2xzIERldmVs
+BQAwSjELMAkGA1UEBhMCREUxKjAoBgNVBAoTIUNTQUYgVG9vbHMgRGV2ZWxvcG1l
-b3BtZW50IChpbnRlcm5hbCkxCzAJBgNVBAYTAkRFMCAXDTI1MTAxNDEyMzUzOFoY
+bnQgKGludGVybmFsKTEPMA0GA1UEAxMGVGVzdGVyMCAXDTI1MTAxNzEwMjIzNloY
-DzIxMjUwOTIwMTIzNTM4WjBKMQ8wDQYDVQQDDAZUZXN0ZXIxKjAoBgNVBAoMIUNT
+DzIxMjUwOTIzMTAyMjM2WjBKMQswCQYDVQQGEwJERTEqMCgGA1UEChMhQ1NBRiBU
-QUYgVG9vbHMgRGV2ZWxvcG1lbnQgKGludGVybmFsKTELMAkGA1UEBhMCREUwggGi
+b29scyBEZXZlbG9wbWVudCAoaW50ZXJuYWwpMQ8wDQYDVQQDEwZUZXN0ZXIwggGi
-MA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQDHdXbuV8EGuZ/bNhyFkmXHJLWJ
+MA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQDBN4fIBbwuGJXjXoa6F7e4Zzin
-GnPiBxtF2PLc6DrfMWBLcj6QWd585xcM5OaOnucgRb1D4RIf/QR52j56ydSfTVNm
+Yd9EB4nt5TkNoMkRgQe0JIJ+t1/lS/xlI7ATxNjUdybnYwCrEfDvy8XGwN6te+Xh
-n74I/0dsDZ2eLlO/RVJvBe/Rk7OZjX+CLbJj+GqtQFXBtc6oEDXpzvWKMpXFI/qS
+dz6HKDWPijW+ritQW9kouxJJSpna95L8SqU4tjdfyL/2X9E/7j3VYw1//zcmhLJg
-fXBPPbWp+plyXyjE+cd3XLW1KMhWlYf8kPWgMuNJMFoXGUlQ6Gn7N5Q/W8xbqm2p
+1Os0+JHPcPuj1vmwLa1v7eGTCNlt0K8DbrlhPlteJB3hWolNIoVDjRemZFmqwUeV
-VOfZzkpS6FvK3R88crzuJFY5sjuE9TNvCns713GCUnkG1vaZ12gxp9Xy+dGU5Upl
+GZ/XJos7OTB07p08yCOFhLl9jXCgEDDkKmcnAil3YhjudlEGSjdzFLskVD4xrtQ5
-sc1IHpnRO0Z192jZ7z9Z9+5eEcnEzguvZPj9iB0kpuKFTlxgqp7HREkYX+pDLJYb
+GsbdJHyHhcUdgh+vqX2bFSklwdwVil1qIUEHnxpcRMaluZQ4u1tCgNhKNQHrJzVQ
-yQKC536jki/b4Zm5GzrIRLmbhIjEnrrj4NGnxuSRMQLhrkvinha/IumVLydTkxK+
+n1aRVAYdX1PxfoIb5wt0+25MiVw8y8EcrMH97Ss26eNAtLeHZNrY9alqx/Cs8gOi
-qI66K30WHx8LtTuXolufpPwC7AHUvzo0JvZe1nkrU3Z+5Ngg8jECQt7Bo3ESzJMq
+I8wA2Nga138tZuCJRXsDOnom9RrtdPLajhSb7n33Iq8ZDhYVGEIm2pc5MJxaI53V
-MD8jUwd4rnzVYVCO3WqZkZ5sE1h3iqk3SefIJU8CAwEAAaNUMFIwDAYDVR0TAQH/
+e2WhmemFPfYwUAtzdGgwrBoY9MechdtNLGZqHxECAwEAAaNUMFIwDAYDVR0TAQH/
-BAIwADAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwHQYDVR0O
+BAIwADATBgNVHSUEDDAKBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0O
-BBYEFEzINd5TWRmFLFJ/QTyWrgDgmGytMA0GCSqGSIb3DQEBCwUAA4IBgQAtgVJ4
+BBYEFBVaa/ovyPpbk/8nlmuISWB2/t8xMA0GCSqGSIb3DQEBCwUAA4IBgQC8EeDx
-YsGqAYY8Sf1VXKiwDrbuEP/dPaAGxiI1cJW9PiQUYYKPFjHPQuVECvab7g2Wewga
+qipM7bAFxkAOmvhNAjodKXRCWKhatD8HryeINOPgWajzLlHj/PCnULulhaFO1viA
-rcPUT4mG/9VwtirgNPyr1xPpikbG5Mu5O6yYENQONMUWpdpv2bwNiRt5K8YXyy87
++iBBKbHb+7LImb/owlNVu8iYDh/xBXmLrOHyd12K8dyN471iTBrskQwSCnYd6e/p
-s5FDIBW2FalzNDDeKgDVwhF3vQHsG7uqkjegUo2G6b5aoTGVbREHSw3hzdDHYv2t
+4i0hhNj5JidOgA6swjt9j4X7/IgsvXexLIAhqgQDSsKQpPK17E9IB+d5p3UHU71w
-tbt92vMLp93dqLK76RP3xwqvoA08Lv+IcnsEJW2IjrowGP/GvCF8gEBYq740gi46
+Ob1mGIZ2j/GJnC6YmGFPqIZZ+cy3aVOypWf8RVZYPTFCz43ZuC70cP3kl2io75Rp
-zeXZSc1zt6pmhxn8d432vB5ixWjqAswEoAsfkfx7EL8Ji4eSkcxyEhXQ/D87B4y5
+rWUNKXU+yUdBphHN6KJXUmlH4T9yqXKqnxK+9CnVC/CTlucF9VpktN7wfVxVPsrY
-Hz7I0wpMdQ9QRm1LwFKyx9bcfLcunULApTvKYdDgzVMXpM/qPYt++UJ9Hl4ZvYvN
+L79iys+FLPKrDkqcjpIJ2l/n/ugcUcXvN477qFCGbRY/3tB3Dmf4AvMPpTsStkXw
-ZJvpP/2wmDh/k68VB7ZjqFc4as/7zNh6ydgUX03aanMqRlirZvZn3VzpU5yD2nrv
+Ld+xAHog8upjVGsmXODX4sKjRMIFLIHbM01Iw0ECdKoKIMwjFGenwGmpBZA/Pfxe
-/pmowCkcwsS8SgZC9trBS1w0wp77AOj1uvTnN3CKfGVtLVhafngj+Z5H+Jc=
+AXBejd9KD0stCfHuKqx7Iu5N7Fg8BCLzmcSyoOmwJEo+Z3Z42IfSjOX8rQQ=
 -----END CERTIFICATE-----

internal/certs/data/testclientkey.pem

@@ -1,40 +1,182 @@
------BEGIN PRIVATE KEY-----
+Public Key Info:
-MIIG/gIBADANBgkqhkiG9w0BAQEFAASCBugwggbkAgEAAoIBgQDHdXbuV8EGuZ/b
+	Public Key Algorithm: RSA
-NhyFkmXHJLWJGnPiBxtF2PLc6DrfMWBLcj6QWd585xcM5OaOnucgRb1D4RIf/QR5
+	Key Security Level: High (3072 bits)
-2j56ydSfTVNmn74I/0dsDZ2eLlO/RVJvBe/Rk7OZjX+CLbJj+GqtQFXBtc6oEDXp
+
-zvWKMpXFI/qSfXBPPbWp+plyXyjE+cd3XLW1KMhWlYf8kPWgMuNJMFoXGUlQ6Gn7
+modulus:
-N5Q/W8xbqm2pVOfZzkpS6FvK3R88crzuJFY5sjuE9TNvCns713GCUnkG1vaZ12gx
+	00:c1:37:87:c8:05:bc:2e:18:95:e3:5e:86:ba:17:b7
-p9Xy+dGU5Uplsc1IHpnRO0Z192jZ7z9Z9+5eEcnEzguvZPj9iB0kpuKFTlxgqp7H
+	b8:67:38:a7:61:df:44:07:89:ed:e5:39:0d:a0:c9:11
-REkYX+pDLJYbyQKC536jki/b4Zm5GzrIRLmbhIjEnrrj4NGnxuSRMQLhrkvinha/
+	81:07:b4:24:82:7e:b7:5f:e5:4b:fc:65:23:b0:13:c4
-IumVLydTkxK+qI66K30WHx8LtTuXolufpPwC7AHUvzo0JvZe1nkrU3Z+5Ngg8jEC
+	d8:d4:77:26:e7:63:00:ab:11:f0:ef:cb:c5:c6:c0:de
-Qt7Bo3ESzJMqMD8jUwd4rnzVYVCO3WqZkZ5sE1h3iqk3SefIJU8CAwEAAQKCAYAC
+	ad:7b:e5:e1:77:3e:87:28:35:8f:8a:35:be:ae:2b:50
-yzxtPkFv7K22jl176X8PeQ4p63rwEZVqNw2/1mjss25b4C/MKdYZ/cqu3Y31NXib
+	5b:d9:28:bb:12:49:4a:99:da:f7:92:fc:4a:a5:38:b6
-VR6/kqmEVTD42/vAEI+v449lgptQ2PKRKueoTZHSvg/Xike/scf0QK0mj6lOCS7F
+	37:5f:c8:bf:f6:5f:d1:3f:ee:3d:d5:63:0d:7f:ff:37
-Wn9ZBUjtxbxbmBCMbQT4C/b4klU+ZujihqYbmgWiLLWEkIHjFb0oqVOMUCOAqPXS
+	26:84:b2:60:d4:eb:34:f8:91:cf:70:fb:a3:d6:f9:b0
-EqFQbYQ/Y+IIKNEkyg5kwlBi7NOKk38rBiIzB0HmwNywoUWr7Tk0NZMQ3R64yd3A
+	2d:ad:6f:ed:e1:93:08:d9:6d:d0:af:03:6e:b9:61:3e
-zE2seABCPKo6YtDisOEeyvL0LSDQP8AEwTl4PFaugGSvt34bglJ6PbEPJjkdWjnU
+	5b:5e:24:1d:e1:5a:89:4d:22:85:43:8d:17:a6:64:59
-VjWctqHXB3BCC/RHnvtb8ThmdvWoLe9BqVjzVy1U6myyWJyeCbvKW7Zo2voInAfD
+	aa:c1:47:95:19:9f:d7:26:8b:3b:39:30:74:ee:9d:3c
-AWdU8V1Me/SE1w5iHMseWa0Fwve+3A3hmdzcHIp5ynmZ1Itp1zBTpC6cuXXMu0mt
+	c8:23:85:84:b9:7d:8d:70:a0:10:30:e4:2a:67:27:02
-wFoaFnReV1dIwPC9MAPGlDRXXsO6tMCBuiTMdbeZvIaYNcp2lrTes0BFOr5MSPEC
+	29:77:62:18:ee:76:51:06:4a:37:73:14:bb:24:54:3e
-gcEA/WlLtBsdrf2ICtlPejO2YOdIXZ1dRJzYN09JcziENAHW0EGuodml6e2yweWK
+	31:ae:d4:39:1a:c6:dd:24:7c:87:85:c5:1d:82:1f:af
-JEuPDmLdjKX/loirlPIpJoq6xRrkqA4A7OUCthKQa6kGK+WP0AvwqmVpj6hLlfwq
+	a9:7d:9b:15:29:25:c1:dc:15:8a:5d:6a:21:41:07:9f
-hEJ7UXxeS6zUpQ+DgIS+hfNbz+YZfb5DLo2HE7r+0N0732llils7T7LAwB7g3Vb3
+	1a:5c:44:c6:a5:b9:94:38:bb:5b:42:80:d8:4a:35:01
-9Y9DUR1YpHPPotJZdIyQEXirw6EDK48XjS641KMcD/47/NcywuwVuGFSYDQT6tXe
+	eb:27:35:50:9f:56:91:54:06:1d:5f:53:f1:7e:82:1b
-2QHTAoHBAMl/E3O7FjSoG4k8C1mbNp+dlzDFhWGbVmAg6RU0UbrSTksyHW8h1Z16
+	e7:0b:74:fb:6e:4c:89:5c:3c:cb:c1:1c:ac:c1:fd:ed
-eihCkP0djNCJwBzXnZTKlaQKFgYd+bE4FNEM9Y5QuWQgoyaQgssvpA/W6aq/zBQx
+	2b:36:e9:e3:40:b4:b7:87:64:da:d8:f5:a9:6a:c7:f0
-5fF6/kK7hfZRRaytvP/bQ0RQTVApC+R/+NpLenF1mPbABgYGr1A4A/D+q2YWoMeE
+	ac:f2:03:a2:23:cc:00:d8:d8:1a:d7:7f:2d:66:e0:89
-ZD2xut826/ER56FlwFKzvvyjfGL9U12tQgfNd313oQ1GWejwK5cCOL+sCf2MP7QH
+	45:7b:03:3a:7a:26:f5:1a:ed:74:f2:da:8e:14:9b:ee
-HUB1SDqlFQKBwFEkezojiKBi00HuDZXqoxZqWHCpZ+kFc/JZ8AH18dcZU6iBr6Jh
+	7d:f7:22:af:19:0e:16:15:18:42:26:da:97:39:30:9c
-p8+87gVKM66lhxwrKhfUO3//KTnbRLPzrhRZJShuu3sfZXvZe+cNS02ZBzCt8hUN
+	5a:23:9d:d5:7b:65:a1:99:e9:85:3d:f6:30:50:0b:73
-vfxi/jj7cr3A7+3KrgL7R2fHDOuFFeCcaSSr4DO0TZzFcqAtu1Qz0u0ZuYrQ5bAC
+	74:68:30:ac:1a:18:f4:c7:9c:85:db:4d:2c:66:6a:1f
-Y9fgy030gBdgFUUO6YhXEQBo7H32WFdP1Wgh0XsMKZVqhYKI6/5vANRYMAfcQqQ0
+	11:
-fYUSh+IlM2M3QwKBwQCdzELzk0RkoHJQGxHYbtFsVwIcU9ONCRWv2pYu4PZQlHp0
+
-MR8T9S9RUKVx+g+J6iZo+jfVXpYt/CkMekmdKMRuoTjMLpXvihBl9ZlPjkSf0wNs
+public exponent:
-1CXSbrnn5tvpLSUKJclXiXZDMRyeUpxvV2P0rvB9VisQ6aNOT4YnV2JgPcP10qhj
+	01:00:01:
-h027eWUYWvoVxqZOQLit5hO8Ne9T1Shwuaej7jfnWNQpQCOfwpwBxWKMJeo9LKQ8
+
-lwKL6dXJqvihjjeulbECgcEA03twwnm8UggQQ9s39XKJ1gQ9TtoxHIND2TSQmZUj
+private exponent:
-LcKGvhueHb+3VapGUyujlSylbBTE5btBm+hJfW4lwYUEjugoI6MG7YtqDv+bxZ8w
+	70:0e:fd:af:d3:2b:ad:6c:52:d9:f8:43:99:00:12:6c
-L7RW42qrv9vcYha/lw1zZDYYgnUDTIcojVZrtMTUGiZEJK1x3Q2y/17xKhss8CCi
+	5f:69:2b:22:87:33:54:4f:f9:69:fc:e9:db:7b:61:ac
-Q5lZUsoegG0+Cb7JGvIGvYGuSjEUu53xxy/ICtcHPv5FUMEzaSWHWkXN62pSAMoW
+	7c:c4:4c:7c:66:73:81:a9:61:a5:73:1e:fc:8a:aa:9a
-xryBXJ8zBvwyInAXE8/KHYI6
+	ba:b6:94:18:94:81:99:b5:a1:0f:e2:15:c5:4c:ac:98
------END PRIVATE KEY-----
+	df:07:96:f8:ea:89:c6:97:31:b5:8d:b0:16:21:46:cc
+	ce:28:62:3e:9b:c5:29:70:26:2f:d8:24:8e:a8:52:7d
+	d1:0e:83:ce:a7:09:9b:d3:57:87:3f:98:5f:c8:ab:ba
+	aa:31:2e:19:ae:84:1d:39:ab:9e:b2:42:f6:75:ff:68
+	ae:73:00:fa:d7:a4:c5:3d:7c:4f:54:65:4e:1c:88:e6
+	c2:b5:9d:a2:ca:38:61:45:09:17:01:68:5a:f7:4e:4d
+	cb:24:f1:e3:57:a1:97:58:1e:b3:ef:57:91:e0:1d:95
+	51:8c:a9:4a:4e:f7:cd:fe:f7:04:f3:ff:67:ad:e7:01
+	14:dc:7e:e4:00:c0:38:51:2f:04:db:39:6c:f1:1b:a4
+	a5:f1:b4:5a:c3:17:d2:41:1a:5a:b5:f3:69:3b:b8:ba
+	7b:59:96:d7:b2:c2:2c:9a:dd:e9:42:ce:fb:c8:22:fc
+	c5:33:97:6d:68:89:cd:e5:bc:2e:cc:9d:23:65:18:04
+	0c:83:b6:35:7e:16:09:96:d1:48:61:31:b1:ce:f8:50
+	f0:14:ba:57:2f:02:1b:61:9c:bc:81:c1:ef:b3:bf:2f
+	fb:36:af:18:8c:90:40:55:5a:fd:a7:d4:ed:3b:94:a6
+	df:ab:eb:6c:d2:bc:e3:80:7e:d5:06:21:28:9b:04:65
+	b5:cc:04:b2:44:e9:2d:3b:7d:de:24:90:8d:fb:90:2d
+	40:17:51:cf:a7:fa:ee:54:89:8f:c0:f4:e4:c2:bd:44
+	94:1d:8d:fc:b7:d7:05:4d:46:dc:63:1f:7f:d8:b4:8b
+	11:db:37:be:4d:e9:2b:33:b9:6b:8c:a7:f0:43:56:c5
+	
+
+prime1:
+	00:f0:57:25:fd:aa:7e:98:13:08:28:99:16:eb:af:2e
+	22:f6:e6:d7:bd:df:49:57:17:71:bf:21:ba:bf:75:54
+	5a:38:92:64:8c:4a:10:d4:4f:77:18:44:c2:79:f0:9d
+	72:26:2e:9a:27:5d:e7:41:0b:c6:65:cb:fa:89:6d:9b
+	fb:87:78:e2:87:22:d4:92:21:f5:3a:57:fa:b0:bf:bb
+	66:a2:bf:43:af:e8:58:b4:e2:a1:ed:97:62:09:0d:49
+	ca:4c:99:a2:f4:f3:31:df:80:8e:56:be:64:9d:72:59
+	ef:e9:db:4d:a3:e2:cf:79:1e:99:89:b2:f1:e3:2d:bc
+	8f:a0:2a:2f:a6:f0:21:18:2d:f1:57:20:55:c1:c9:18
+	c1:64:c6:9c:00:df:b2:54:55:8d:fe:d3:46:a0:5c:2e
+	f8:f7:10:b6:27:3a:4a:79:a1:14:b1:0c:c3:72:5b:2b
+	66:d6:85:2c:7e:58:72:eb:33:62:73:34:e5:38:87:2e
+	17:
+
+prime2:
+	00:cd:ce:5d:fb:04:16:34:f4:de:02:7d:00:07:3e:b0
+	94:8c:f4:3a:62:05:37:1a:4f:d8:40:2e:31:11:07:77
+	09:8b:bd:76:6e:85:b9:43:df:3f:86:cb:db:6d:fe:c6
+	4c:ca:e1:16:ce:5c:0e:e1:b1:10:0d:8d:48:99:d7:43
+	7f:6c:b6:20:b2:cd:0c:56:26:02:18:81:e1:67:e5:cd
+	b3:66:1e:77:dc:49:6a:5d:8c:9c:0e:24:14:3e:a1:4a
+	7e:cf:72:e6:e4:03:e6:38:41:fa:2b:91:71:6c:33:b0
+	ec:07:3a:be:5b:f8:74:f5:e4:1f:9c:c4:d0:d4:75:a8
+	35:09:05:0f:7f:54:4e:2a:bc:cc:92:de:1e:f4:74:8a
+	56:36:e0:b1:37:cf:b3:9c:57:05:76:59:69:c3:03:de
+	c2:33:0c:c4:a1:4f:2a:b8:3c:20:63:c9:58:96:1a:e2
+	62:ce:bf:fb:a9:51:b0:66:99:35:d6:d2:60:59:72:bd
+	17:
+
+coefficient:
+	33:6a:05:3e:1e:46:46:58:e2:61:38:6a:c2:8f:77:a2
+	27:b7:19:38:75:40:d6:8c:87:bc:65:a6:24:c3:97:e5
+	ef:70:1b:2c:4e:9c:08:ca:1d:eb:97:11:74:14:bb:99
+	de:22:a1:6e:bc:6c:c6:25:98:8a:8e:17:f4:f9:4d:a3
+	1d:01:5e:26:0e:b4:e8:1c:aa:06:7c:66:b1:89:5a:b4
+	82:65:d1:bf:20:cb:b2:57:a8:af:7f:00:07:00:7c:5e
+	d4:09:60:0c:0a:6e:a8:e1:16:1b:04:95:b1:bc:2b:35
+	ad:80:78:0a:0a:1d:5f:c9:cc:24:3a:5e:20:03:50:44
+	b8:b0:f3:f1:17:ff:41:b8:5d:56:9b:1c:f1:e6:2b:c6
+	ba:a2:8c:18:25:8c:d5:90:f1:28:66:29:bb:40:3d:b2
+	f9:65:99:2e:b7:1b:e3:d0:d2:1a:d7:96:70:cc:f6:74
+	c5:2e:bf:f5:c9:60:c0:ff:38:f8:a8:db:1a:7d:6a:4e
+	
+
+exp1:
+	5c:1b:49:f7:f9:0b:23:04:c8:2f:a6:db:dd:de:f8:f3
+	75:63:ea:72:5d:cc:21:90:5e:8b:3d:45:f0:71:ea:ad
+	d8:d8:61:a8:52:0a:39:13:6b:34:e5:c5:12:2e:60:68
+	8a:b1:79:6a:74:d6:57:5b:47:e1:63:56:d4:ac:29:07
+	30:57:e7:98:9a:84:94:ac:66:ea:c1:24:d5:ef:e4:c5
+	e4:c1:20:13:9e:1b:c0:d6:c9:ef:e0:00:36:2f:dd:83
+	a5:ef:8b:40:0c:a3:a4:60:04:2c:c2:32:95:14:69:db
+	43:e8:43:cc:f6:f3:44:1b:b2:03:cf:8c:5b:df:ff:4f
+	9b:b6:0f:25:0f:09:df:d6:5b:93:64:54:f9:3b:34:3d
+	89:7d:83:f3:e1:c6:da:03:1f:b3:f5:0c:30:10:a3:ff
+	cd:cf:9d:bf:52:db:8f:d9:67:b0:a2:8f:94:97:d3:fe
+	49:60:28:39:13:74:97:26:ce:28:10:b1:78:04:76:69
+	
+
+exp2:
+	6e:6d:c5:d5:b3:8a:aa:dd:9c:e6:5e:e6:0d:fd:20:48
+	85:1d:62:da:47:8c:1a:8d:2f:2e:b8:da:51:15:dd:54
+	7c:eb:ab:49:80:6d:39:32:e7:e6:4f:2a:2d:6a:20:43
+	02:35:26:c4:91:76:d6:b8:e8:31:2d:57:00:5d:15:f5
+	a0:82:55:27:3b:88:dc:0c:c6:e1:19:87:b5:f5:03:9b
+	b8:36:ae:ff:bf:50:d8:63:63:34:df:3d:11:a1:ff:d3
+	ed:41:ed:0b:f9:df:a4:de:19:fb:18:ae:70:6d:88:08
+	0d:95:02:a1:5c:be:7d:55:eb:74:75:d2:cb:bd:5a:05
+	23:12:d9:0e:ec:50:88:f4:07:1c:e3:1c:5e:f4:cd:69
+	97:46:97:30:a8:3c:ea:ad:72:db:de:fc:35:cc:b4:d1
+	25:0d:3b:d0:86:27:18:f6:02:37:28:c9:64:b9:86:31
+	98:58:41:13:c8:26:4b:d6:f7:a1:8d:fe:6e:e0:76:ff
+	
+
+
+Public Key PIN:
+	pin-sha256:Zv2mSFRUYM7ofg5obMJJxhZpnuvO7gkCOlqfDK1gzks=
+Public Key ID:
+	sha256:66fda648545460cee87e0e686cc249c616699eebceee09023a5a9f0cad60ce4b
+	sha1:155a6bfa2fc8fa5b93ff27966b88496076fedf31
+
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----