From ee889cc1d3cc267d924f99ea95cff8c217a568f6 Mon Sep 17 00:00:00 2001 From: Chris Bono Date: Fri, 3 May 2024 00:16:25 -0500 Subject: [PATCH] Update SSL certs used by integration-tests (#670) --- integration-tests/README.adoc | 53 +++++++++++++++++ .../src/intTest/resources/ssl/jks/test-ca.p12 | Bin 4173 -> 4339 bytes .../intTest/resources/ssl/jks/test-client.p12 | Bin 2653 -> 2883 bytes .../intTest/resources/ssl/jks/test-server.p12 | Bin 2653 -> 2867 bytes .../src/intTest/resources/ssl/pem/test-ca.crt | 56 +++++++++--------- .../intTest/resources/ssl/pem/test-client.crt | 42 ++++++------- .../intTest/resources/ssl/pem/test-client.key | 55 ++++++++--------- .../intTest/resources/ssl/pem/test-server.crt | 42 ++++++------- .../intTest/resources/ssl/pem/test-server.key | 55 ++++++++--------- 9 files changed, 181 insertions(+), 122 deletions(-) create mode 100644 integration-tests/README.adoc diff --git a/integration-tests/README.adoc b/integration-tests/README.adoc new file mode 100644 index 00000000..32ac1cc1 --- /dev/null +++ b/integration-tests/README.adoc @@ -0,0 +1,53 @@ += Integration Tests + + +== Troubleshooting + +=== SamplePulsarApplicationSslTests suddenly start failing + +==== Symptom +The `SamplePulsarApplicationSslTests` start failing (seemingly out of nowhere) w/ exceptions similar to the following: + +[source,shell] +---- +2024-05-01T10:17:11.7454406Z SamplePulsarApplicationSslTests > JksBasedSslTests > initializationError FAILED +2024-05-01T10:17:11.7455000Z org.testcontainers.containers.ContainerLaunchException: Container startup failed for image apachepulsar/pulsar:latest +2024-05-01T10:17:11.7455420Z at app//org.testcontainers.containers.GenericContainer.doStart(GenericContainer.java:359) +2024-05-01T10:17:11.7455977Z at app//org.testcontainers.containers.GenericContainer.start(GenericContainer.java:330) +2024-05-01T10:17:11.7456911Z at app//org.testcontainers.junit.jupiter.TestcontainersExtension$StoreAdapter.start(TestcontainersExtension.java:280) +2024-05-01T10:17:11.7458124Z at app//org.testcontainers.junit.jupiter.TestcontainersExtension$StoreAdapter.access$200(TestcontainersExtension.java:267) +2024-05-01T10:17:11.7459241Z at app//org.testcontainers.junit.jupiter.TestcontainersExtension.lambda$null$4(TestcontainersExtension.java:82) +2024-05-01T10:17:11.7459952Z at app//org.testcontainers.junit.jupiter.TestcontainersExtension.lambda$startContainers$5(TestcontainersExtension.java:82) +2024-05-01T10:17:11.7460260Z at java.base@17.0.10/java.util.ArrayList.forEach(ArrayList.java:1511) +2024-05-01T10:17:11.7460931Z at app//org.testcontainers.junit.jupiter.TestcontainersExtension.startContainers(TestcontainersExtension.java:82) +2024-05-01T10:17:11.7461820Z at app//org.testcontainers.junit.jupiter.TestcontainersExtension.beforeAll(TestcontainersExtension.java:56) +2024-05-01T10:17:11.7462321Z at java.base@17.0.10/java.util.ArrayList.forEach(ArrayList.java:1511) +2024-05-01T10:17:11.7462807Z at java.base@17.0.10/java.util.ArrayList.forEach(ArrayList.java:1511) +---- + +If you look on the server-side (logs on the Pulsar docker container) you will see a cause similar to the following: + +[source,shell] +---- +Caused by: java.security.cert.CertPathValidatorException: validity check failed +at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:135) ~[?:?] +at sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:224) ~[?:?] +at sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:144) ~[?:?] +at sun.security.provider.certpath.PKIXCertPathValidator.engineValidate( +~[io.netty-netty-handler-4.1.105.Final.jar:4.1.105.Final] +at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1338) ~[io.netty-netty-handler-4.1.105.Final.jar:4.1.105.Final] +... 20 more +Caused by: java.security.cert.CertificateExpiredException: NotAfter: Tue Apr 30 20:49:10 UTC 2024 +---- + +==== Cause +The SSL certs have expired. + +==== Solution +Update the SSL certs. + +* Replace the JKS `.p12` files (`./src/intTest/resources/ssl/jks`) with the https://github.com/spring-projects/spring-boot/tree/main/spring-boot-tests/spring-boot-smoke-tests/spring-boot-smoke-test-kafka/src/test/resources/ssl[latest JKS p12 files from Spring Boot]. + +* Replace the PEM `.crt` + `.key` files (`./src/intTest/resources/ssl/pem`) with the https://github.com/spring-projects/spring-boot/tree/main/spring-boot-tests/spring-boot-smoke-tests/spring-boot-smoke-test-data-redis/src/test/resources/ssl[latest PEM .crt + .key files from Spring Boot]. + +Run the `SamplePulsarApplicationSslTests` test locally to ensure all is good. diff --git a/integration-tests/src/intTest/resources/ssl/jks/test-ca.p12 b/integration-tests/src/intTest/resources/ssl/jks/test-ca.p12 index fd0a5d99b0c0d0bccaafb69c0e7d179a2fe8c5d5..069c89b86bab814bee03a329cfe6ee4a4e9b718a 100644 GIT binary patch literal 4339 zcmai&XEYlQ_s59{F>2RdMU4sxjZv%iD79*R|+N$e@hA|FOb^rp+D?^`=N=^ zN9$6PY!6ldfRq4A0V4gssQ@rB0hApCwu#grd`1K$6arEoi{xw0{l0+LSD2SMl=Etb zB8YKqYZ`1ek&k?*8=GGV90ho>@$G7PL|@f<8EiE-doxxL3#iWu?TXojyZP%>k0glJ z6CGr1f8!~OdvX4rrxr!fRu)ZQ6Z|ODT>J5{NS6d|=aKl562fo0P*M|(RhhwWli>^Y1E5kHp>k{59_hc=4#q2`IXr@;~f1hfkonn+(* ztn96rSpu`J{C2C!Kad+b$DQW^>KtSd8HdN7#iYb{tMU|XS$niO+USkgIJ&7^_yPQf zu6$QLQ-xJ%o5f|7E^l`Sm7Y(_HU7zEfN4dIE7Ephr<6UK&rWSMhZ!blMxBL>Pq zz7L>aZJOfclRWpLsMz8ZcS~luw`puZNgZRe%n(rg4IhdM8KhF+JFyGEF9Qdrg=ko< zS>PT0wkZBByO3QUgK_9jwawe%B9ER7EY^I;^PI#Zo|JG4pOLGtZRj(zd`&Ul)$^J% zpCmMe6rQ=g&hQC+-U^-R&p50h>$@*SV`204WQc+a~cs=I2%3(o?00({dT6Z>X|v~X~m0`FHBCsP!j2IPNK>3GKxsz{g*^%)>8OecPB!f&bC8In_D$j zG#Z)cC0=ATQTI7oIb*o%hReW@YbyMB!i2DXeMHj+bIWVc=Zg?qNY^5ZZ z&?D@A%sqG0mUlSWSy`&LXybleh+3vAf4n$U2)R$YjXDRtTH^KWYCLJLBy-}Z~l z*UU+G1Cx;KPVi+Bt|@H!3?2b)$rQBE)NZNeg;Ml$JdKO&$fUB3FTq||eRzDTlD~0` zS)VEk^q`J21z?g{e#eH~R&3cD()|b~3j^!XkQkL$bNJ+R{;)n;DFSve*b-8n_*L@Um`3>=fE%Y*xVgH?j!xe*7%-9~veI1! z1YiVAguKY2;{=MvLN3k@aXc~ltP0Ts`IUo}XId|n*x^xtnKi}agp{1Wkj#WNX2gA8?M|nbGZ#e0< zx=7ZvA9`8A%*2nTi_+ZdZ8l=L$xpH6y_(Mc>_6^I5;Oe_pQ6~D4f`SV`OZ_vXkZDW zjj=GvHnCym!g~<@Il-nUnr%cR^G{aY*Khe2GnchD((|j`7?so{ceC;-7{3}SxxJjf zfRw~G2@qdg_Ia4M>uJ_kHOeQw7Igh7D9j?;CDCTe=O*DarV#0A=j-UvV+#ZIzI9o< z?U7?+AdN<~dD!o2oN@n3vEMzT6%EIQBVSADDq3Gw2XW7z_eM&epPEm^S!p5oxSw-9 zevKN1O>Q^c2aI(1&JMPyW$MV;X7uifX$kGP0x9ZDS>p!Y9Mih7?KcP(P=!bys-A1+ zVp1bT(HCxp3HediZBPUm#XlVRFPOmBKm_trKAJ?; z+@ESedOp6;S0E9BTKBqUBr^3(;a8I8ZpS{@E$DSGDZx?nQsQoZA^LrltN)n$)!e>% zjUMx#0iEoO)g_6$#X&8K*bI&;5GT+uE^Py{ZF<`-mn(vVBaP=M!dG8$SfIFNYa+-B z!M^0ME*=@yyi%mRI}C|U(xy`UUWkW|JrrHm;Vp48|gYY^~|#xG+%BA~6CIlWY$ z{v7(mW5x3q!v=k|5T3b{zJ|+T;X2n>`dq#IM04SNU4xo;c0Su@iRqX5)a5cwIuu$F z-q5CK`*^A8kMg|6_Pi#(hr4>IJdou6as_Q(LFx8#j}jj@`mnpAvSjv5GG`-A+T~bg z`MPIq@7Kr0;T->Lw3$3%I{u}N4z$#l*~=m7dhVDE2z1l$a+^z5i;)S~Je==r(2w$5 zvHT9ri2uq##0L9XYNKZGo`IGcjJ(x|sEb>XdqcODJt&#S{ zJ07)uEUY;wvsdRTMvYF;t8KiY0&oAid2i0K+h1F!Ebin<9P}sqNn$3yDaPiRS}Ra} zN5EHnO*Iw53NQ^^Oiyz#s$m%VF}>#);*b1b$zva=F;X?d#P^Kg=Xl8kNW`J3J;tFc zTklBR0`}Rd3&VqZe24yP8Cg^=MGrnfcSh^c{RX#m-2M9C4^5j*;Y3dNW8tXqQ=T}F zobxN9HD)BG5uFW_dxFf%d%_`6ZX~Uk=uwi{1r_|0_6JW2{z#Ap%7$@H`BW}*vil{@ z)J{F~+$qbW^bIgLXDTZ%3Lg4ql66W~g?m z!h6+_U1{;_9w?cduKm}uMdjxMQiPf7VUlYu4_NqRIu3D_u1SX$^K*|g9^I_pWA4K8 z64SoiQ#jFRmA_P4dFs*Mw-~bQf3iQ!{i1M_(QMIoQ8;tk2N%#hgNorFV*6rwVA$!o zTG}o=>UZ}EzB-?vE_ee@KP?2Q@d^!h3(RrIlv0H>v8dg5C7R{)hJCJkDdb(ZP3Uhz zcSh3F>L+ACyR)41@cLn$Qw8un|zcgUA zqZ`yMyi|;T5NzVP^rwxtZ6C(9kP{MJ7IRB5wo{nD)`C~HK$?xNm3;^#bGQqKguhV$ z4UXd4Rv*1FIYK6hPtLHCM7-*^ss6+-1FPoaYN~ck`%E_IH^SmL=#=7--o2HLHBZT3 zsa4Patoi=aK$3&MB70)?+lI)nfQ_pi3G^Rq-$UmDKu$t-oUD1CT$21yB#F;SqGys^ zjzSw1GdT59WzTk*wBbbfWOVg}ltn{%^{t(3@{bPQgtw77uhmMc{NG2v>1`;N$g+&% zZ~GdB)0n{Vq?eIsbD<7Btqb+4VSByZW-o--kTcgDVED@=LE{X>EzSogjf(b$ zAcoT*25uM9v$oFnXml@R-Y(biwSGrm$##(|wUY&mMQi z-DlrVZah$!Q|@OhvP(CV?qv=POSpsGolyz$_+>ThCvjd}ckdRHT%hcm;y0#&s?=M7 zVvmrMwsfkSf+a@MP(846|jjsmI0MqF>A-eXpIDgf+%mnM8g@THt_Eo zJL(!3b4OB81l)Jr+A>Z0#WaukqkHPypR!`gphc+dSVS6-`W2g-P@~r#MA;V)eWpOx zP%?K7#XrV=>r)?W=Cf_c&bQ({`%pdzT8xjDyi8VnHW+S+4sZ2fsq<-XU|FOzv_x{B z^3zL_`|Zhyw@-z(M%ZXFjNdPy=Kf~Co17N^0xqdNGTOKUXjc`{PrwLHU$iN0Eil__ z|LJB(M-$S+JLz&0VpUS4y~H4i#-H3p#TE5wL>G;aL%|hG0uB`b@PkB+8^W;E z!z;7=iuBS=drl#^wHuFH;m$7#Ga9<24c23KC^gso2#YQUCHbkdQFM=$LqsuYgsD8} z9W3RppqVJWCP|{i8~P`noyXtNg*U zX3b2kQAPk5X$jTP!%Az#>S`M2jH~m5Jl(<{{;Bs4#c!~X;Qnget{}{j$Hc=8hsBYY zosGN+X*S~14C;#CsiSjKuC?!mTX04kOcJI9>in8x<0lOHucv4{wO67R^KqBohpZTB z_$BlFvlw^--cHip;WD#=(du#sjvL)j@28?W^f1x}VGK*hN1i2@^+M8XJOH%SzEn)% z^g2?FuQ>6nel^*A39JB@%V!ZgM-Yh;GziyrqU?tYm0}_9Eki~SdwA;kbKFtpQLm&> zJxI95$YY0^$#XdFDvf%Kr2;*DHK)Ji|MHYYIg-VX?%N1FKzWZ#L7v8p7Kv$X(yx*! z64eO}i$z(%b%fp=jsYS3>Y2QDYp!Dzq6WUX^}k;PMTJ1>553uqVkFpQja_8b6Rg@2JB zvX&TPD&gm&PDMpk>c9E1zL3lNmQC%>Cxb*y_Hsf$bh%=&@`=MA{B!7m8DO`8^iOF_KaE9=^vDK2 z{Q_1tFr%|djA2R=pZNn literal 4173 zcmY+GWl$81w})9e7X;}}X_gWtB&4N7z?YKFMOc;+VOhGA?rxS?B$srhBqXFk5Re5C zq&pU_@65gTfA5DgXXg3MIbWY22u`Ji3%~=xsVE6a1fw*gE+_y*fFd{*4nCan76hlf z1i=Z#{u2=v!3jD3A{JZ#&fi7*p9BD6Ate3p599zs5D=f(xw6Fnxnn2*7nc|Z1}E4K zfbu!2wr{*2Dx4bw**|C;C-<4wyB9W8bn~tsW&s1g&q$RbkfH`QCV)C&XGodPc*~oX zI6S0`XQeO!T}JMC8imk{f0n>+ud(VN1x zyLw+}OkEhpCsz7S53g6H7!+(?1xnlyzxXD>t)R$1^m$5TlJ3_h-o=8j1C#Qug>r+S za5Zd@aOcQ;?jA_X&ZIW_{^Dl_p%Bv2^m8wZuHC9@(t7aJgf-#7zUNEQ{*TTB+Cz## zhY9JFO+CCf&Lr$Cw4gjv8krz2wNpGYE@58<`nsv+x}cP1iEniBGqeKBrI9B=0W$kW zyx?5<1!fFiNATpCkGEhu)L^tKQZB#-u}6YUo*cN>wqExT@2*HV$<=sO_RVR}GIPDYYuo0s;LbTA94nQ(Zm| ztSE2}jFg4I2y=D(rG^JvDsAdYW&-;fTVF-$pQh@Y{m|EkRgtkwb$IDn5_oAX-rDV` zl5~JOmS?|dW)!1+0w>1@D<5#WE9J<_hfA!!n|AKRu$f-Mt^|4Q0vw^n^H;uW)yko* zkeXorbH1-_F=1I(ML=#->8E*f+{m$yh4ETiduAWZq~<*udmR2$b>+$Kg%{mcY6r*g zNQ-rMh4N>-wmYOk7vS(2hR^H;*QALeLcA>(NGaOq)jqB;)0~#HtA5^KqTC>d#xmye zk_U1n4cSi)tMiXUX%=<~6&vWJqqYQ!AqCzGl%9ICktwbfl0DrswR*HP&&^+a&GA`0 zT@4{MHWX>`V9Mv%s#{zxN%DZ5>qPB8%<12(8O$nt{i%+9s_KiT((9!#_EUNzu$?;U zGSE|a&Cq0t_*reNUgU>=-W|Wp(w#-I<^%-9=yN%I+Y;>OCkGz#U#UN^*d_>#Zd0Gy zI*7&34Ym0EhnnutX@5O#D&$BTnJ8Q*$?OiS9u$&aPpU0J#CAR3w|V~P+}giW>f+8n zRy7ymlQVvnX|VtJ*^8wb70&FutR~(OAK2r8d;j^%i4VBtQp{l`89lN%yY}SzMb|Lc z({L6!i_!g|Ex454LRf5G!jtZZv%FC=o1Tep#t%dut53zmx>C=!;M^m$j;A?K1?nS5 z)4Td1u*O8L@=m1thU9?udEa~g0_F4OxssaAtEzd9x$_ff-(HG?*aMVdTD88tYvh)1 zwo{>kWm51_``pqh7bm5Ft96l`4e3NzdDqvVuUBBp!IT87f+=_SmU;2I7bA_a>Fd%H zbB0_4FuTxi30SN)nkI&0ID|^Dh3WGdWiOD)>L|RPH7Vga8HW~{F6#*xMuaqub*@bq z?W%O3J`-JOi#>eLQ&A=+M$cos+}=I)ET}3T^Xtow5PY7=F9i`($WmGnoD=xd!;2w7 zJ799BuJ}7H&9C3h`?s(LBS-;Dimq6t^&`@bK{|HyKQaoran*-+nb`@mumxwe4Qc{& zr|(*t^oH>BrM}i4M~|hkPX@9fe{2q4czV)$G(~j}W0#cZ&4QKTh_l!|`v8eNzrqnK z5(G(C?R|bJg%@shXSB`W`*#HACx$Pb{P9Ws;xIEmY91=jssNf&$r->#8dm63XfWK3 zey~P!D=ftVkI<>rTVNtA(u74}n$X2$LrcVcKW)V-hf=-SQ{Y&v%-NvtkOFZ3hTy-@?f=;W?_YZ)h%TxROH7*o zYmdL@n(b3C+i%zyNc$Mr*COYvqb$<^!)m6}Zrb(R|CP6mbXr@@?+G@_MN?z8{0bS0 z9^bV9B4I1riL3H=(TbVWN;@8I=}H}5A!TX&tQrwXXqrS%$>p?N$vGg5Sxt#lqn>vi z71JkW&3TR# zmR~kP*C~zO+@feqH6)I_n3C%8^Td|Kfb>g2gd_%;)JYvUZmNMvrYRCni z5YR^ffjO(?O?3;pqo~v6U$w~e-|alHGC7qC!79|l)RVHN!J&<}`)o399@&0Kj6T>! zO2VV$_vkVBT+gc8ZPA(HJL^rBp^ypp@Ot*;64`kG$u@+{& z?rTV>x|_H+-3NSj(kqZ}zeaXv=oJ!saWs${KEC&$X{g(#1)3oX82VfoJp&@~VtzP!^G73$x0J@*l~`M{t=$vIA(91#KgU{qV*gxc zW}r)wcAjhgs!*dBwaQ48(Ow~lp!Th(0MkjCyB=6pO`!4C?Nlic_=Cu(Kbi^NZ#Db8 z`CupWztJY=@TX$KeC|?8jPglTTFdMOm9`koh$XznGym+;)HsIR;EPp-AJKw_B;=!Y zamHpY5#RR?Gk%GCHtVRrD1|my`eI{aINM`>m1SPoXjje*#ms#J z0tD3*>~K*ryT-61atr(UQFwxowTw$^pPlf5RKjHZ`dnx!i{2()g5)M6&FmcK)3WOq zn$Fq-E>d8N;|bgR#Z+RA;45>d*|h_^*ae!sap_5wDm!clk^Dp?$;OvoFoPp#$Gmx; z1gGm}Mu(gEU_%3r>T9FoDIK;{9^Y8gi0v2JyCjoDDF1o$ZZE5a$t{EW(%k3yta-LS zU7CpZa~Si&vdr?^a2B%iA3Q-h6d?(+yFh_AFGlW??9fX5jSWY{btoptV;h<2B0eOq z*Wf}+9EQ!2!&YB=m`U)=cED>5zY?`YhyQuGe}0)<9#wEH_+Z9ll+HTmZAxN@$!LW@ z5q+(QbARXCI!cE3#NJ{=?`X^?b~v&qpQf7!P}Fu(c(93*^*1SX#V6j8(Pgb9#lKN` z9h12e@~l-%sZ^bs7Nk1sQ+a%{FZQf-cLN(?EZ!0FG{+ri96cKQWo|d-m3Y87$uNoy zL&8WfotssO*{|ssOyx_F2;FRfLW6f}rFmN7+cr0we@(pH^LX|1D`UvY%4n1iuT4&-u1x|Hht_ZodVBYIGn1iHGXSC6r9!Kgvp>SAh7O zho}ssoPT#TBxvMO$K#|K)E7g)@<{8z#Jl$SFULDWP&=3LM*8TMx1ff}lm5y@ReX&p z3qf^*w}XC9u6H+*mxfy_x&y}vJj?1kJLF^LR(R--e9R~sYeO@JrO(w}z(r77R@@5; z{#yt-P*9ufl@gY1J9y7FoLq)~L~Ao>;gdx(Zm5v!PP?d_a!<9Ph+WW^+6NOA|8UQD zZ+EWNO(1%tkKZ%3cxkh#c7(L>5gcI6WSZcZ91|&m1z5p zvU-mg<*V#%MK^&sn_EtZy~(S5dY<#9BoSUY-x7^GnF}!8=^<<;Lk~Pn<0!T9LvyYW zH7>(!8P1CH>G8L`DIQA8%0)WZK9XhJPAx%Wq6Dw>x0j~uFM8ZAFAy#5gB z^lr$axQ3eQK3dHri;OUkj@<)tXxRlqTi!Lje~ed0i&%iObN7D;ug+C$)60L+$S5-~ z&TM%5b@LjCMVu<7R}s0RsHon%{opNFsyBAbLJAc%Obe*5LRc^9<5IM;mhU5*#@ZS& zozC``7tv-kM^1FcOvErLxvs)OS|4`v*LJ$fvv@%a^7VHO%t)RMk{}S|zu(EB>OP!Y$6NTlbm?B+*%2CEskzT6~ z$*-;)wGN3}-H*`28Ko(9rKk5*TBq9&b3U>!i!KG&RR!6Xw66qzs`IUyA&+Nin8D*q zGgO>}Pji~ZB==e$fFhPU+LuyZD!SAdJ_2kTJ3Wy^SJSfy)I#w<2W5ltSmo)NwWe4# z;(%AxE=~@pZ{G8Ena3+x)^3Ml#xoDGPh3USdT5?Rt1P6fWY`;aXqz(iSGgoF1Rk~6 zNT+;aSo*{zF~+>uphrBTE{Z;7U6+2KnTx$1;B3F-=lFSzhU~UoC$;rrNp-whjS!*E zFRLjh$=-kx6zIjcZZneR=6>=7a125%k3D_YpHMC9yo0D;UjiT!4GZImw%yGxoq)`@ zy@@d;>Lkjz=Y<*^y2|4Zo%J#)@3y{2V4TIwZKxgx^OrTIu0`n=EUn-C$xQ(#dyV}T zun*!9jqg{KD<`dzZ@r~9p|($3U%vj;v?~6ScCI3rM{kF5*6*MX%VW@83s!G)LRk>? zUaT{$2%)%6_x42fxyo>hgx-1Xyt>fLSIfUw6BZWjKgt`fJ*~AfUewC`;Cmk0yDj!> z#PP5+MNs0$M0;GZZcmG4aGixAojKT01f9!=n3q$Vr^PI9Z@|j?Ca+_0C9k^cRB%FS zO0yNqO5Zs7IE1?D9|T=kJw<4rkT;ItahOw8&4KTuKZk22L$_}r)4$Jme41Fz#^aMZ z`(~CkxogM*7@ZWISa=d~xuwGy^CHIC0j|^jA34eOMd8_P#kk_UAnyNdXC$=ZbodX0 zn2~?dLwzF(fZHKJoUpaz$W1YjIEWKOLP#J4#KUDGz`=i*pDtV0d%e?v8e`u!VM=0c VSiLX9CssRFv)7Vih5p;p{tLI(450u3 diff --git a/integration-tests/src/intTest/resources/ssl/jks/test-client.p12 b/integration-tests/src/intTest/resources/ssl/jks/test-client.p12 index d2fd1d0f3228b3634eee258a820bec23114652cc..20b5ed01e17738504a2f56402ef3b071ea548939 100644 GIT binary patch literal 2883 zcmai$X*3iJ8-|$%Ge!s_TNpb{3?fXnOhVboYqAVk4kAlTWSwl;vQ49rh>`V0)*{>3 zWnV|Ou|(OjWEY?JeBbH)`Tcm#bMEW@@%+2agTO)50kjtoIL2LiuvDZ@ROg=&Hu%0j(KJQa7b zRBR{?*wnCBp)RbcO6iGd-MJQ|Q_yRLD{X&-Z#_!;5N+U@icW_Umzx>6A-1}pvz2cG z;ujP%*H}`VO5oqrS>2PI_ExXV>L2qW?8I5VUd^P=%>~q`PQtl+RsXJ^3GF{k-Dqfe zQekws(W5nvrpJhLyenJ=_JTl5P_wwQcXo%6r-X$T*@9r!3+o&%_@PSnwqE$rqkKn) zric1{bqiTTN-fj6D1BBx?SoG@4xGQQJOS?Q;$@()S^)0=6#Ht$8+<9-RL2+$MXk?4f1!*gAX86KYWeTG%IVg z-ApK8W4l6p|EYipBhY#BL9bD?og^1Gavz0HL@r1cYirQNN3w6mAb_iB_r zP%X!{5))7+Q&YuGQI#e-%{4rTKSVPS1TY2(uF9P)N+-bpaJ>a5o=G{%0LG{XRaU>0 zQ^Gq(S$dxh+7i?XH*r9eS+{cixPL>MDctQ_-UP@a?AV6a2d zh@lE8ZL=@$yNOC6&pj8Tt{R?(;tiE1f7^E`9cbTIyH-O9wa8UJ?AG7e)CQ%c@<7tQ z*D>GnEsH3wOrcM5{;^rieWU$o?C+}F?dFCOs7P?s8hyIA+ozOTb$RA23+^Zp`xnoG zrrri$+N@48FEUDdf@3lJYZrAv@V0p^^M`JaIqw=(GezTgjuJiBUthOt)f=0dMnR|< zgF%J156+n&9>+7POPc0@AgpE0sQNa(JVL2g?wjUd8aODIC-+$CAT*WyBAs&G|Xq88~t!GR25*EI6pw>>)$>yLPgDP8kH;Y9M7OM z-PVbOmt|LOeY@f+W6}j4B-|^lWRS_0A^Pi)Q3krbKa!JZ7ZSRh$6rY4uEXZGtRD)#ZaXL+U2+MWZN7ET!y3-}V?v}h zQWqy++Cj}(&o)j=98&}CW zW_8^Y-X}0_4^u82>w7tWu%y#3iyg*zqSD=Osy*mg%~FQK+}+8jj8W_seaa-fNu!D? zkgn=vx`35xJHDVKE(1um3Dn{>?Z{71BOK|max|2g(OA1`{y{~XN3NDDYG zmCvEV{}b!Ls9nj)qAd5Zy}uVgu`%=iinZdjS?bkPF&bGWd1xpsJr2YH2R7X|Bap*l z96h4r%y3O*ZlQKQbOv@y+$)xlE~-~o;QO@!J$t1vgAN=X?S{4#Z8C!^)6nX@(M~E( zF*4Umtab_1YOS50eAV{^AY$WNDnfU&_yH{5P|==&*XJ|88WVK{!vb*fH+S_}I6Byq zIH^34&bFE<-dUGmatxUqHY|9n*G`!y7YAP>@ELD|*%d4x4aA?RF?CPa)C)~cWAlR- zf{xD5RH$n(DH8yGBU?Urp#i?dk zoIMR$3=M!9lTvOTRgBTWCGS{;yUfutDhZ97r_ZN9W3WD8Th;+=b@i)dY>4S~u1(h7 zjt@ym#24{`0=!Yz1;V-xB?deze0i?T)IxM?OwI@!;8>oVI}2 zh6L7dY8nEY&J4+{ms#A$D2dJqPa7Nc*;|0F79;zDHlANN9_GN@@!HqFLP&OhYrSZ;h)l3f!%4hUmwIZCly`p2>-YoY*|i$!;#>YgY+@{3#i4WCk$W+#78$Es z^+5@3?T~`Z`aqQPp~OTg+U^HB%|+)=e;psBPa+<${a|nz0upHNp&csri zSWl?Hcs$u9VA=1x<8#y0Ia1%`}mkRFf>RJ1H(qbWkGNy&%mL0fvBkAEQWqUnJ~S>zzs*TW;gM zk=>1o_nS7P-%0~6{lG?i8>_e)m!Z&U5hC4MoO&y{jNlP$k-{c{wgY!d@Gk^zz2%5<^h0 zn;3Aa9W<3#UB4Hc32Q`C2bamqJhCM2vM(8kspjY9`ZAVfiZCWKrQhN;X3dL)D>(}B z-zD}mMATdXA8P+3kO2VDVkBJ_T1p(81sQI*oX zVyNSTM`$8s5f}fwod8-o8lYgcnl0qg>D(oBTiT9io#Vc{@7;m?-4Ht%OMXu53#G2>(ZWdwa)u zh01Fc_=(RYUle1OEp_alB~v59BOl9(J2~6s6TH%J5X0XsRqb-YX`_}VKrfG|s2ro- zDSIK*q@t7gs4d^m&lkbuRF@HXUfF2Zik6GuQF|<#qyJ4aVpg&w8=mUI?k>O&IyoB zG;r=OELLm6aGj5Mb_+bLg6k-xH>!HdjnqtW9E9s*P59wA{fggxHEY|Zx;@pM@)+`3 ziFqq|;=}OZfCeqxSA*W$!2umZcTg+BB^lXm1f(>lX}Wj zcesk)b?x6(ksMIy)cSq*)Y36p{0WR*VHBb1;zsm4lgde>o*lm99~Rw1hbHI5-)a)2 zu|_I!%gpv@o`67jlVJ@F3UYYGkn7pJDLsS^&G<^NdCpS-8f-y_3a;j_U6Z>~Fqun< zcg@iLsV-r!wJ0)5H>qnjPCSXVR+*y$Ob*GqTG5-E`*d)f5_%j=*9Viu;a@P|4fK)f zc84C_KP`9O3uGOdr}eoj@U=M9yGx8&z-wJ^jb98q?g^Nm^;4zHg_LppxKl1`w}L~~ z+QXUy4izmw^(up1e`pA&pH|*aPrk3JErv@Ta#(Lkb0_IkrS#DwPR*KBdab!d3MhA+ z#j-AZ@_j@{N92(zBUB`1`>@0N0uDB6>-{U*lMfGMY;j?5aZRR2RK2d#oTn76ZT$OSLBVted_*p=LW^PPUyG~m-hhvF zk$%+Mz6^SmvgcwQwBu3yn#`b4=H9~n&y5~8oPS^$)SMqJ^ZGqv(t4S|RGM-M- zpPePoLRK`=V`<(mW{>I_mQ}@FsmsFT39WH7A%eAb1+ocvP7Z+!Eo!L0+W^ju6~5DY z;oLCRZ|&2?2O7!iL~FA%Gdh~dJ}*@NT4|Hc%L?BHQIAgau~{25M}=0aCww{=l*^s! zU^fj+>^FTdIv9yLrlip;kitE! ziJ3kd)w-%?-fFI*;$qn8ig-d`fW~jnYAajK4?lPmcWi_bFTF#;6#i6lIQ6w?&lRQ8 zAVIw^@RoPbeFON1X$i~{U^1xkROQHMh8#xPPE1Ooqnq8R@5uE3Rkt8Du=Gk?e4hgM zGNSZWh;VSogbonjGNJu8XK#;3sZ4T`-6FO|!H90ez(v zXUM$*pOFhH`bN~SnkmGpvy#>GUwe4|rXD@sBt;3!%g{(xBv%>0hx`caIF*~divccboCpYuNcH* z5LQdC$)T)s15b{;I_qwklUNN8WW~y_AA_}#km>UaFF64&B4FajmZTqU`=^F-4^kAW zc-+wO_SeF1Qde?G&yqBx)guIH2YnWN%IjS*firJ2iyhkdG241PNk&t5 z;)COMx_r08A1%k~zUNo9f(XIn3x@Q56v1mVH0?5!yc`EDH?rdCKN2Y1ysoXp4tnRO z51HSJH!kG%T9YhTjZ9SUSMQR!edQ2YFU|fD+EJ7Q{i<5v$J^(E#)C-XwzqDVr6Bh9 zW~QmNFD}gcicliDco3=ICIq%cn0I;2mU|<;DP-{$ySE@>N8(UBPCovz%Gq9HqfvEE zrRa3zWYH!^FTuU&`>K{W%OIR@^Q*g_qiB^ySebe^kKH;cd2cQu#1F6ow{xix;-QqlYPT)%_Em%~KEhRNiuobz|?+MQwG+%VlQ^PTo(oML(#{i>75AFBYsbp9pXP_nklPr}6K+nOii-Y!0Gi^G`u!F;s0 z?$e%OeW2us#62|%FPvmIp&4S_CftwjC;N3&Q3w93qoAaY6iA{ZX}|EA2+17!u8T4d z_tkY(b~Xd0gF>JL!2*Xw`GIf&K9Iy(*;@iu>yyIjI2f||oba`7vwRQ)J;l0uFMB8E I=-*2I3xO8h1poj5 diff --git a/integration-tests/src/intTest/resources/ssl/jks/test-server.p12 b/integration-tests/src/intTest/resources/ssl/jks/test-server.p12 index 5f1bd89eccfcc136a696775401e5bb754ba015e7..42986f1e2a9bca815e1b8f863793ea9b7f78c948 100644 GIT binary patch literal 2867 zcmajhX*3k-9|v%=*oDZR?2Vag8G8oVDND9=ZIhiOYh`k2F!o)@P8i!rBw4aFVTdec zFtQgJ4P%My;kxJlKi!x2#dDtX`+i?M=XvuvKRAY276<^rF-%KzjIfw%F?;6#^nhXv z6A6rABA&&=a15={zZG3EhF0w?QUL;J&Mx@B4FK-=d!RiBw}i|6JF>vV!R*T(uYG>b zR;QO`uL)gMluic%8ED`vbPWG{705_S0~e%Ybc(qKa0h__FfcpK81Tfb#qiDTq77C5 z@4J+64EWsyBoXs$CO}JtvYeSoHk5IuQ8o#tQokXUp#C`b!iH&3lRp$rKKhOF5h-h4SYEK{4X0YG?MkAHmv9w zj@4B(Op>oXfLbP9?V2NB=3U$hZF`yxnsC)H*)?ToQ}sg&ioMPpXuI_eRMzfV$I|2B za&E1j``k8oq;){Ae>d&nq}zr)PagAwg~6USLMfpOsn_`MfZ73D=rZfq>w%kvyyO) z`3?EI10i9@1>TQF*X4I2B-2xLu(g9;ADi-vA(=nxOSVt*n}FP$IG?BKN^>sI90=;g zFVLLEfS6;^_>N?sSfR)IL+;qv$*k6p52@`JW-@*a2NRmDm0jemK77GMuQTaXqfd)z=I zb`1A%){Xg}4tI$>5t_+w8v24Be*!GdX|WX=)jaGhkZ4Sy55EZ4358vs);yM%^;h2q zw@!yUOf=HVwm*UeCH#q(4R$t|T+vRG_L|la;qr~2HzNNPO<^`+lD)l(SOOP{QVX3? z{?V)o9Mg5#dgH7kM7J$Wa3U(tI*v3zHp@D-RBme+z-6~U4ysbMycF!ojz+1&N`$vM z+SGQ54_d#vO!RSbi@b`ngaG4lUB$ix@p=$0uB`+&*0Vq0WaY*%mJM*t4J^#tpVSJx zr=W8V-&59Qg?j{=my9y*ln>Bfd(sV(|{~bTYYNJH5d$D&(2+7d4_@sKD-hGjFR|B zU2%v6^zabOOnrHyXeZ>;51}Y_vaxo#ik($l&*u-5&TJJPA;}h{952JaK1mzC=lXlyzpf2shYANzC4{VStVw%^M{K8>-IwL-i|b;K&y$=`phH^o zH9jm;$}pH)$rC#qGtf0++V;{`QDo{P1l`}lNz0O6fvZF&$k zuONDZ&>(BkO_~Q)?8%lOunR>8d}n5c{&w*nXlZ@G7+SBh*!}D{(=q?wU=}6-@T`QM zg%bY>>r3h>^Uh4)YIXm(EqwzynRUAwo%;@a2J7NvqMzm1tC&&6 z>cxELp>QIl?_xH$J}gxR&m}qiLekM~no~f2L+P+BLbtSG#rLtNyQcHe#L-|}lxAp% zA^3qvAr~z1R5 z%2O=cWYyLvDOyz{4FNcUk5CYpo)Szg8a`du-U0sgh`D(5rLdlqCt9M%R>QKMZTH=3 z5NkAPN~PE%a*eLO(W6q^W|@h5$(XnbB3}kbIWG5cG;T;p)`~cygAkpIK0Vb=cHiw3 z*YurNeUA}R89Hj5McBP+n6dt@K*m);&>+-=Cn7>fzt-B~A)94uh%RQjY6=u_q5DC{ zkDOiN)!T7;t#^dMupI9Cavh>0|C^1M@)IW=5<^|~7K(?qL?+))Z@*!; zET?~UvQ?UCz5LdrdGp(be%MWYo}4@%vB}H zAQFH&6Vp|cgxdarYo;djx(ued;uzhIuccqSu4?jeG78%$^hX|!v>%hAog@9ZIXr z&X=@3n3|W*Ohzc909i!+uRp#fJ<+rt+J0O@_2u=Po8+Z%nRFoAN2%&-Ud#n$!#%aEakxm0!FNj_zZe z!jx~!3It1E@2Cl(#%xK|!7v$2;$qJ6>JS(oaXIjo5oPtIU1L(P(Z;JHS`v zQ54XGWigGmdkoi32hc?jzfHq6I~m&v=!MhXUVW==^30MLp!G$YXa#Rf2lbGCG3ZF(CY)U8)G@Rz0vH6 z)AH)&CXBMle9iq0b?p;XHti5t5^%BKurhMVaf2`5z1YsS66r8zbrBnj4u_u$_!w@uHe3#V?)RDr1kloe yg%|UZNq)X@-{?0)rQTSC$Y0NHmmy!%-s<3^0NU2rz;KzXk~^hDe6@ z4FLxRpn?RjFoFcE0s#Opf&`@o2`Yw2hW8Bt2LUh~1_~;MNQUKI#dRVHjOx(sGe3 zZg!JE*R<;|FgnQD$f#NNoj|Dcgj5S>zLR2-ZVt@K_ z4Qsr)aPW^ZDb^wZz52cB2AoIRme?v*{Vo8h9*?jAorfLPvjRc}0KYGKjoqQnFn*eb zxGDJz(Xs{ew{z0)WzaL>#iak^Zzk_+8ks_e<~oDg)+}{5wYpPW*=)ACj@;28kn-|P zPA|n%+RVp$VHr!NDFWDMFNP)^L2+bnR9cfF2M^I7gP^NW)ygHb<;&(|E`uePi)9=xy6=|{gi z^Rq+d94jpnXfj{z^@M!dGU9TBf2yBa?@S$;`6wpN4;`g!mT2K~9RTj6x}s?(=>b9+ z+Q4)UA!r5NOGnmkg?&_V{JH74ok5PGo9f^Q_6w-7tJookf<^c@RCmMO|JtE;n;f`V z0CgWH1m-Y%!pv4>*-s(Go|6Jy&qs>lL3ku~5)N6;9if-FeK5K=Lo?mP3Dr~EFCj3# zx~?lNEvr8;-4%3)gfp?0?f>HGB2|5)f$cqf{9Q}yZ}8Kx@jOdFzxKK)=TiN72L~>M z<4;28<`2ra=@$2y+YQi6@Nxe~GmccXG)M?s%8xcTil%_qzIFYZuYq!B$k`wH#Xpfl zWira+p8EY@`C*GS76`@HWBrtCj=yfUS%h$@V)%bx8c7pZ-5G5eQ8$it5s&R(;D>og znloC6quqsC=_Chi@NJ0(YaLm$? z0NQ9!w?^N6`L^`;oyRodU_}QkxlA6t7`zxXw@2g~VMB(oa{$mJXt0J< zHMVDTy1H3RXnn?K#Wzi+oIeTUKA-a-(TxTmzIP0ml=|6VE5TzdrVqLKXag{oq9Miq zLXfPbmlqSoN-=0*3!c*ZcI5iRgL3ob{sMMBM7sLVxRKlI0W1GV)guesu-%_Y-N#^v z4=J^1tOhM5+#IAaQi~oRro?@Cvf%OxcHsM2;HEsas{RzFKqgOIZH4wgXHj$ z8G5Pk%brUQ+(r0OE4yHQ^?5a7!b&n(w|v!&0RiFRYU?gLkhLe{Q7}6WzWs@@48D#5 zx+#T>!wswZ>}*8IFoFd^1_>&LNQUlyMg0EK>b+XmBP-GB_uRlw**qE7O0wfWWVa zM28*XO)V->1DPs+vLg9X@G~01n)Nsh$E-2U^)`gV{*;Sn@KYoPDj_7?olJ9NDHpAR zRjG-udZ@$tK&>rzg9nbDhDspxlom{Sk@J;8(Jjb0RHvDSW`lj|AoX`MBQ`v1wO04353H&SY z815%-cGdsIhz7nB);>Bpf3@PYJ6)v<)+A?JIh%`6hZ_eaJ;!>QSA ze(UbVsk22qK_^UXm7gv9Yeqt73u4?|0q)Wa2ly3U+p1SIO-k6mKLGkf$=~U;hPz}Z zEBU0t0;Qjq{$6&~9GkUJb3D~%^32|}Iwhh+3D-4RElK9}7E!p%?FM`~jx?d83@SxJ z1Ps?_blA3w1p{?fDCQCq#D&IADD281czN#gRs`Y_o#7_x5w zB%K*E6=RsTgP#}6R3W!k)yV+KoSX3Xk=wN@JQT_zqjE1kf+x7sz#k-ir>Yn9mbEUj zC1e(gvC?79FY7pO;~nYIp5(M9KaxQr-8$u3O3wg-$Uo!ge`T~RkR=6BShS2T-BfNn ztAaWyS4ORm!VmSZ@P;n*24ZY~_2)vPvbW`)}lUfcrq-Va1{^lEk7g=4pVP&ZIx%MxX zbD?3uGXulo=GW-ECZPY~tnCl<+N=7d#08bDil#8K*TzQQsP*{z`Mu`CfZKd8V<*t0 zl+FTAifi*I@rayU5X1-B+5lo&4j6Y12s}U<7Ht2aU)lNB>8%rx_@*XVGr(Li9wUf! zGcg|EwrL39vWZFpwLUiZ9YgE_)IQU95dM~^Ea{d-rkvw|z(q(B`!LS=!n#GW-n7llYVt{)b-p=08)sOKQf zt$#5skg?cgP2`5mY#3>5F+EcbG)%r|$=MQ0q0AE5z67&%G~+${U!D150y3GJc9`ZL zE@Y|1C5$M!znazov_DhIgW49|mD@kD(x!B!fPtPOsPh@%dmZ?Q{&u*yEGS_Rs)EIU zngz~sL#ANIMDx-(nNr8NiMRjmDAU$8Bk?u?!a&QSxo@##Eav;mmh@UU!f*$V9KJeW zQJjwTuMU<%amwrWM-kLTr0)?QJ#