Merge pull request #2744 from cesanta/certs

regenerate certs

.github/workflows/nightly.yml

@@ -101,7 +101,7 @@ jobs:
     - uses: actions/checkout@v4
       with: { fetch-depth: 2 }
     - run: brew install jq mbedtls openssl
-    - run: make -C test test ASAN_OPTIONS= MBEDTLS=`echo /usr/local/Cellar/mbedtls*/*` OPENSSL=`echo /usr/local/Cellar/openssl*/*`
+    - run: make -C test test ASAN_OPTIONS= MBEDTLS=$(echo $(brew --cellar)/mbedtls*/*) OPENSSL=$(echo $(brew --cellar)/openssl*/*)
   windows:
     runs-on: ubuntu-latest
     strategy:

test/Makefile

@@ -183,7 +183,7 @@ mongoose.h: $(HDRS) Makefile
 
 
 clean: clean_examples clean_refprojs clean_tutorials clean_examples_embedded
-	rm -rf $(PROG) *.exe *.o *.dSYM *_test* ut fuzzer *.gcov *.gcno *.gcda *.obj *.exe *.ilk *.pdb slow-unit* _CL_* infer-out data.txt crash-* packed_fs.c pack
+	rm -rf $(PROG) *.exe *.o *.dSYM *_test ut fuzzer *.gcov *.gcno *.gcda *.obj *.exe *.ilk *.pdb slow-unit* _CL_* infer-out data.txt crash-* packed_fs.c pack
 	#find examples -maxdepth 3 -name zephyr -prune -o -name Makefile -print | xargs dirname | xargs -n1 make clean -C
 
 

test/certs/ca.crt

@@ -1,8 +1,8 @@
 -----BEGIN CERTIFICATE-----
-MIIBFTCBvAIJAJiASLWtAz5MMAoGCCqGSM49BAMCMBMxETAPBgNVBAMMCE1vbmdv
+MIIBFTCBvAIJAMNTFtpfcq8NMAoGCCqGSM49BAMCMBMxETAPBgNVBAMMCE1vbmdv
-b3NlMB4XDTI0MDMyNTExNTU0NVoXDTM0MDMyMzExNTU0NVowEzERMA8GA1UEAwwI
+b3NlMB4XDTI0MDUwNzE0MzczNloXDTM0MDUwNTE0MzczNlowEzERMA8GA1UEAwwI
-TW9uZ29vc2UwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAARaohnchUT4QTRIYKBX
+TW9uZ29vc2UwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAASuP+86T/rOWnGpEVhl
-1k0n3/PDwpXwiPyJIb+Wwfsmx0Y74KU7xGZLHK2C1PmIADVnTf3z304E97AXM+WV
+fxYZ+pjMbCmDZ+vdnP0rjoxudwRMRQCv5slRlDK7Lxue761sdvqxWr0Ma6TFGTNg
-3gkOMAoGCCqGSM49BAMCA0gAMEUCIQDJ0GYwCwucIKl+K/zRgptW6HVxD5y6+hu4
+epsRMAoGCCqGSM49BAMCA0gAMEUCIQCwb2CxuAKm51s81S6BIoy1IcandXSohnqs
-YBP9j+vwCAIgWJswYluq0szGxmfKnSXyTDioA1XrDhCVjYGO61U60Gk=
+us64BAA7QgIgGGtUrpkgFSS0oPBlCUG6YPHFVw42vTfpTC0ySwAS0M4=
 -----END CERTIFICATE-----

test/certs/ca.key

@@ -1,5 +1,5 @@
 -----BEGIN EC PRIVATE KEY-----
-MHcCAQEEIHtFV1AGKDqJRVBg3hQEmkHQDlXxCDFpIJ4b7UUyUtHRoAoGCCqGSM49
+MHcCAQEEIJqrhcIKC5dk0omuRJRnzCXdfxevxnabQEnOWlL6P6x1oAoGCCqGSM49
-AwEHoUQDQgAEWqIZ3IVE+EE0SGCgV9ZNJ9/zw8KV8Ij8iSG/lsH7JsdGO+ClO8Rm
+AwEHoUQDQgAErj/vOk/6zlpxqRFYZX8WGfqYzGwpg2fr3Zz9K46MbncETEUAr+bJ
-SxytgtT5iAA1Z039899OBPewFzPlld4JDg==
+UZQyuy8bnu+tbHb6sVq9DGukxRkzYHqbEQ==
 -----END EC PRIVATE KEY-----

test/certs/ca.srl

@@ -1 +1 @@
-96EAA481EB95FF30
+96EAA481EB95FF36

test/certs/client.crt

@@ -1,9 +1,9 @@
 -----BEGIN CERTIFICATE-----
-MIIBLTCB1KADAgECAgkAluqkgeuV/zAwCgYIKoZIzj0EAwIwEzERMA8GA1UEAwwI
+MIIBMjCB2aADAgECAgkAluqkgeuV/zYwCgYIKoZIzj0EAwIwEzERMA8GA1UEAwwI
-TW9uZ29vc2UwHhcNMjQwMzI1MTE1NTQ1WhcNMjQwNDI0MTE1NTQ1WjAMMQowCAYD
+TW9uZ29vc2UwHhcNMjQwNTA3MTQzNzM2WhcNMzQwNTA1MTQzNzM2WjARMQ8wDQYD
-VQQDDAFjMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEoyB/9kTJJnPLlLFrQmME
+VQQDDAZjbGllbnQwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAASXNWpzrToZJQVB
-6LMvCpjp05MuSTOvEmXqfWH+eC2e0bb6h7YIW+lcOrVQhDEt6xKFs1rqKUR0lgou
+dIJCeIw4j43kV38oehDKhYnaPJDTkqoKrEtSTvXWFY7BxnjUhSkSWBElcq/g6qiP
-/6MYMBYwFAYDVR0RBA0wC4IJbG9jYWxob3N0MAoGCCqGSM49BAMCA0gAMEUCIQDy
+TquJCvXLoxgwFjAUBgNVHREEDTALgglsb2NhbGhvc3QwCgYIKoZIzj0EAwIDSAAw
-11QWTyWuTq6avrsVi4lWfjMQSm14RxtyYUiStaahnwIgcXrf5MeOlupWLxPqEZTz
+RQIhAOsbCgeobKm0sOmQKzH9+KYmoxL/8AXMAzWozd2bEtivAiACyLVppRHjgA/e
-uOejUi45wZ6m3S1BLa31g3Y=
+rP1mRkL0RAUxPw6s/gK7TFcPXUqzGQ==
 -----END CERTIFICATE-----

test/certs/client.csr

@@ -1,7 +1,7 @@
 -----BEGIN CERTIFICATE REQUEST-----
-MIHGMG4CAQAwDDEKMAgGA1UEAwwBYzBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IA
+MIHKMHMCAQAwETEPMA0GA1UEAwwGY2xpZW50MFkwEwYHKoZIzj0CAQYIKoZIzj0D
-BKMgf/ZEySZzy5Sxa0JjBOizLwqY6dOTLkkzrxJl6n1h/ngtntG2+oe2CFvpXDq1
+AQcDQgAElzVqc606GSUFQXSCQniMOI+N5Fd/KHoQyoWJ2jyQ05KqCqxLUk711hWO
-UIQxLesShbNa6ilEdJYKLv+gADAKBggqhkjOPQQDAgNIADBFAiBDSG3wDIJaEn5c
+wcZ41IUpElgRJXKv4Oqoj06riQr1y6AAMAoGCCqGSM49BAMCA0cAMEQCIH0SLqrh
-PU+4WLGJ8+nzTewHGtpQELOXWURxLQIhAP5BocCQyrGW/5dEc/VWMgqH2eznZJcT
+1ieUh01dSUMJLVRDkrSsZu+Z/ZiYPaHNd1I0AiBKNu9sLEc4vtxwZJJvdwer3pbq
-ftb9Tk6I6Pjx
+Uw7jMwjwyuhZd2+eJA==
 -----END CERTIFICATE REQUEST-----

test/certs/client.key

@@ -1,5 +1,5 @@
 -----BEGIN EC PRIVATE KEY-----
-MHcCAQEEIPEthf+Qq9dXJBxSZuYr2WhgzuhrDfMaD1kQzeKHZFfDoAoGCCqGSM49
+MHcCAQEEIGzf9AgYx3RfhzMGwv5EWgzoQh/EDfFpieFgfpTisWbAoAoGCCqGSM49
-AwEHoUQDQgAEoyB/9kTJJnPLlLFrQmME6LMvCpjp05MuSTOvEmXqfWH+eC2e0bb6
+AwEHoUQDQgAElzVqc606GSUFQXSCQniMOI+N5Fd/KHoQyoWJ2jyQ05KqCqxLUk71
-h7YIW+lcOrVQhDEt6xKFs1rqKUR0lgou/w==
+1hWOwcZ41IUpElgRJXKv4Oqoj06riQr1yw==
 -----END EC PRIVATE KEY-----

test/certs/generate.sh

@@ -18,15 +18,15 @@ openssl req -x509 -new -key ca.key -days 3650 -subj /CN=Mongoose -out ca.crt
 
 # Generate server cert
 openssl ecparam -noout -name prime256v1 -genkey -out server.key
-openssl req -new -sha256 -key server.key -days 3650 -subj /CN=s -out server.csr
+openssl req -new -sha256 -key server.key -days 3650 -subj /CN=server -out server.csr
 openssl x509 -req -sha256 -in server.csr -extensions SAN -extfile cnf \
-  -CAkey ca.key -CA ca.crt -CAcreateserial -out server.crt
+  -CAkey ca.key -CA ca.crt -CAcreateserial -days 3650 -out server.crt
 
 # Generate client cert
 openssl ecparam -noout -name prime256v1 -genkey -out client.key
-openssl req -new -sha256 -key client.key -days 3650 -subj /CN=c -out client.csr
+openssl req -new -sha256 -key client.key -days 3650 -subj /CN=client -out client.csr
 openssl x509 -req -sha256 -in client.csr -extensions SAN -extfile cnf \
-  -CAkey ca.key -CA ca.crt -CAcreateserial -out client.crt
+  -CAkey ca.key -CA ca.crt -CAcreateserial -days 3650 -out client.crt
 
 # Verify
 openssl verify -verbose -CAfile ca.crt server.crt

test/certs/server.crt

@@ -1,9 +1,9 @@
 -----BEGIN CERTIFICATE-----
-MIIBLTCB1KADAgECAgkAluqkgeuV/y8wCgYIKoZIzj0EAwIwEzERMA8GA1UEAwwI
+MIIBMTCB2aADAgECAgkAluqkgeuV/zUwCgYIKoZIzj0EAwIwEzERMA8GA1UEAwwI
-TW9uZ29vc2UwHhcNMjQwMzI1MTE1NTQ1WhcNMjQwNDI0MTE1NTQ1WjAMMQowCAYD
+TW9uZ29vc2UwHhcNMjQwNTA3MTQzNzM2WhcNMzQwNTA1MTQzNzM2WjARMQ8wDQYD
-VQQDDAFzMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEMExDcDCj1g8MeQrY+Ccy
+VQQDDAZzZXJ2ZXIwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAASo3oEiG+BuTt5y
-voozGUcp7pi9M09q5GKYJ++WOEuEHDqnu4vEr/PQdgGhmeA5JmWEsztz1f0XgNuK
+ZRyfwNr0C+SP+4M0RG2pYkb2v+ivbpfi72NHkmXiF/kbHXtgmSrn/PeTqiA8M+mg
-MaMYMBYwFAYDVR0RBA0wC4IJbG9jYWxob3N0MAoGCCqGSM49BAMCA0gAMEUCIQCn
+BhYjDX+zoxgwFjAUBgNVHREEDTALgglsb2NhbGhvc3QwCgYIKoZIzj0EAwIDRwAw
-K8fWr7ULIpU3Dq5IDm6NpNLd/fv4A5it0H0Un9noEAIgPdeWcFVsL7YrGfs0QkWV
+RAIgTXW9MITQSwzqbNTxUUdt9DcB+8pPUTbWZpiXcA26GMYCIBiYw+DSFMLHmkHF
-y4ES/uFAj0jdQy8Vm+jzfD8=
++5U3NXW3gVCLN9ntD5DAx8LTG8sB
 -----END CERTIFICATE-----

test/certs/server.csr

@@ -1,7 +1,7 @@
 -----BEGIN CERTIFICATE REQUEST-----
-MIHFMG4CAQAwDDEKMAgGA1UEAwwBczBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IA
+MIHMMHMCAQAwETEPMA0GA1UEAwwGc2VydmVyMFkwEwYHKoZIzj0CAQYIKoZIzj0D
-BDBMQ3Awo9YPDHkK2PgnMr6KMxlHKe6YvTNPauRimCfvljhLhBw6p7uLxK/z0HYB
+AQcDQgAEqN6BIhvgbk7ecmUcn8Da9Avkj/uDNERtqWJG9r/or26X4u9jR5Jl4hf5
-oZngOSZlhLM7c9X9F4DbijGgADAKBggqhkjOPQQDAgNHADBEAiB4+PwVzRQn4dSE
+Gx17YJkq5/z3k6ogPDPpoAYWIw1/s6AAMAoGCCqGSM49BAMCA0kAMEYCIQCOydOU
-I958FyxOJjKlKQ9DjBZCOStqrp2IugIgbAJG26EqDew7MvZWLtCR6ug6qBU2/hjG
++7sELXySq1CB66e2fVTpRUO/vET0SjcRc6jLigIhAMPTkWiALWIOvyVHA3dMQctr
-0QDyaZrCHeQ=
+72yTgPuMgEHTe7keZ32E
 -----END CERTIFICATE REQUEST-----

test/certs/server.key

@@ -1,5 +1,5 @@
 -----BEGIN EC PRIVATE KEY-----
-MHcCAQEEIFw94mvaH1YQyHWQRMNLU62csD8nu9GHJH5mKkiuJpPDoAoGCCqGSM49
+MHcCAQEEIAVdo8UAScxG7jiuNY2UZESNX/KPH8qJ0u0gOMMsAzYWoAoGCCqGSM49
-AwEHoUQDQgAEMExDcDCj1g8MeQrY+CcyvoozGUcp7pi9M09q5GKYJ++WOEuEHDqn
+AwEHoUQDQgAEqN6BIhvgbk7ecmUcn8Da9Avkj/uDNERtqWJG9r/or26X4u9jR5Jl
-u4vEr/PQdgGhmeA5JmWEsztz1f0XgNuKMQ==
+4hf5Gx17YJkq5/z3k6ogPDPpoAYWIw1/sw==
 -----END EC PRIVATE KEY-----