From 9523a1f572f19a4f2a44d4260dee65253fe30b28 Mon Sep 17 00:00:00 2001 From: Matthew Gumport Date: Wed, 12 Aug 2026 14:06:57 -0700 Subject: [PATCH 1/5] refresh expired tls test certificates Renew the committed CA and leaf certificates used by the TLS test suite after their August 2026 expiration. Deploy risk: test fixtures only; runtime certificates and package behavior are unchanged. --- boring/test/cert.pem | 37 ++++++++++++++++++++----------------- boring/test/root-ca.pem | 38 +++++++++++++++++++------------------- 2 files changed, 39 insertions(+), 36 deletions(-) diff --git a/boring/test/cert.pem b/boring/test/cert.pem index 032fe60e9..8c77539a4 100644 --- a/boring/test/cert.pem +++ b/boring/test/cert.pem @@ -1,19 +1,22 @@ -----BEGIN CERTIFICATE----- -MIIDGzCCAgMCCQCHcfe97pgvpTANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJB -VTETMBEGA1UECAwKU29tZS1TdGF0ZTEhMB8GA1UECgwYSW50ZXJuZXQgV2lkZ2l0 -cyBQdHkgTHRkMB4XDTE2MDgxNDE3MDAwM1oXDTI2MDgxMjE3MDAwM1owWjELMAkG -A1UEBhMCQVUxEzARBgNVBAgMClNvbWUtU3RhdGUxITAfBgNVBAoMGEludGVybmV0 -IFdpZGdpdHMgUHR5IEx0ZDETMBEGA1UEAwwKZm9vYmFyLmNvbTCCASIwDQYJKoZI -hvcNAQEBBQADggEPADCCAQoCggEBAKj0JYxEsxejUIX+I5GH0Hg2G0kX/y1H0+Ub -3mw2/Ja5BD/yN96/7zMSumXF8uS3SkmpyiJkbyD01TSRTqjlP7/VCBlyUIChlpLQ -mrGaijZiT/VCyPXqmcwFzXS5IOTpX1olJfW8rA41U1LCIcDUyFf6LtZ/v8rSeKr6 -TuE6SGV4WRaBm1SrjWBeHVV866CRrtSS1ieT2asFsAyOZqWhk2fakwwBDFWDhOGI -ubfO+5aq9cBJbNRlzsgB3UZs3gC0O6GzbnZ6oT0TiJMeTsXXjABLUlaq/rrqFF4Y -euZkkbHTFBMz288PUc3m3ZTcpN+E7+ZOUBRZXKD20K07NugqCzUCAwEAATANBgkq -hkiG9w0BAQsFAAOCAQEASvYHuIl5C0NHBELPpVHNuLbQsDQNKVj3a54+9q1JkiMM -6taEJYfw7K1Xjm4RoiFSHpQBh+PWZS3hToToL2Zx8JfMR5MuAirdPAy1Sia/J/qE -wQdJccqmvuLkLTSlsGbEJ/LUUgOAgrgHOZM5lUgIhCneA0/dWJ3PsN0zvn69/faY -oo1iiolWiIHWWBUSdr3jM2AJaVAsTmLh00cKaDNk37JB940xConBGSl98JPrNrf9 -dUAiT0iIBngDBdHnn/yTj+InVEFyZSKrNtiDSObFHxPcxGteHNrCPJdP1e+GqkHp -HJMRZVCQpSMzvHlofHSNgzWV1MX5h1CP4SGZdBDTfA== +MIIDsTCCApmgAwIBAgIUAeqMSCIvHjEezZUoIZmjhLY55vYwDQYJKoZIhvcNAQEL +BQAwRTELMAkGA1UEBhMCQVUxEzARBgNVBAgMClNvbWUtU3RhdGUxITAfBgNVBAoM +GEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZDAeFw0yNjA4MTIyMTA1MzhaFw0zNjA4 +MDkyMTA1MzhaMFoxCzAJBgNVBAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEw +HwYDVQQKDBhJbnRlcm5ldCBXaWRnaXRzIFB0eSBMdGQxEzARBgNVBAMMCmZvb2Jh +ci5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo9CWMRLMXo1CF +/iORh9B4NhtJF/8tR9PlG95sNvyWuQQ/8jfev+8zErplxfLkt0pJqcoiZG8g9NU0 +kU6o5T+/1QgZclCAoZaS0Jqxmoo2Yk/1Qsj16pnMBc10uSDk6V9aJSX1vKwONVNS +wiHA1MhX+i7Wf7/K0niq+k7hOkhleFkWgZtUq41gXh1VfOugka7UktYnk9mrBbAM +jmaloZNn2pMMAQxVg4ThiLm3zvuWqvXASWzUZc7IAd1GbN4AtDuhs252eqE9E4iT +Hk7F14wAS1JWqv666hReGHrmZJGx0xQTM9vPD1HN5t2U3KTfhO/mTlAUWVyg9tCt +OzboKgs1AgMBAAGjgYMwgYAwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwIwYD +VR0RBBwwGoINKi5leGFtcGxlLmNvbYIJaGVsbG8uY29tMB0GA1UdDgQWBBS2cy9h +pUuh70gsFbGf89w0L7ysMDAfBgNVHSMEGDAWgBRs06UDqw1fLMmNipyIp4h3uDf9 +mjANBgkqhkiG9w0BAQsFAAOCAQEAnvH835+HWzgIARrO9Uy2CdmnpZ3VkWAd85H5 +XRrJlxc+fd210/sTUZUJy0q/GWogdnHET58S41D3n9YE7jCT4szrM3ZZIbrqH5Ci +Y/gmYB+hw4bE0QOyezIKxIwLHWvFWAlIxCFlbcT5U8Lv5t0jjiKt8crhMd1+6G1T +133KZd2zuBXAQLdMMXKeDX28SvvkLQyuvFx6R0wa/EoVSnVqfAdXX4PT7YAEdYzT +lnRUNDUd7BgrTFyJmmP9c5lRU+odCaW9sgH9xe35yALvZnDISIEWqawI3kcTmxTA +UWRrgpFSD5NBO3i4mchrczU+/E8I5TFoLpLS1FPNZtzFP5chbA== -----END CERTIFICATE----- diff --git a/boring/test/root-ca.pem b/boring/test/root-ca.pem index 4ec2f5388..e31265e5d 100644 --- a/boring/test/root-ca.pem +++ b/boring/test/root-ca.pem @@ -1,21 +1,21 @@ -----BEGIN CERTIFICATE----- -MIIDXTCCAkWgAwIBAgIJAOIvDiVb18eVMA0GCSqGSIb3DQEBCwUAMEUxCzAJBgNV -BAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEwHwYDVQQKDBhJbnRlcm5ldCBX -aWRnaXRzIFB0eSBMdGQwHhcNMTYwODE0MTY1NjExWhcNMjYwODEyMTY1NjExWjBF -MQswCQYDVQQGEwJBVTETMBEGA1UECAwKU29tZS1TdGF0ZTEhMB8GA1UECgwYSW50 -ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB -CgKCAQEArVHWFn52Lbl1l59exduZntVSZyDYpzDND+S2LUcO6fRBWhV/1Kzox+2G -ZptbuMGmfI3iAnb0CFT4uC3kBkQQlXonGATSVyaFTFR+jq/lc0SP+9Bd7SBXieIV -eIXlY1TvlwIvj3Ntw9zX+scTA4SXxH6M0rKv9gTOub2vCMSHeF16X8DQr4XsZuQr -7Cp7j1I4aqOJyap5JTl5ijmG8cnu0n+8UcRlBzy99dLWJG0AfI3VRJdWpGTNVZ92 -aFff3RpK3F/WI2gp3qV1ynRAKuvmncGC3LDvYfcc2dgsc1N6Ffq8GIrkgRob6eBc -klDHp1d023Lwre+VaVDSo1//Y72UFwIDAQABo1AwTjAdBgNVHQ4EFgQUbNOlA6sN -XyzJjYqciKeId7g3/ZowHwYDVR0jBBgwFoAUbNOlA6sNXyzJjYqciKeId7g3/Zow -DAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAVVaR5QWLZIRR4Dw6TSBn -BQiLpBSXN6oAxdDw6n4PtwW6CzydaA+creiK6LfwEsiifUfQe9f+T+TBSpdIYtMv -Z2H2tjlFX8VrjUFvPrvn5c28CuLI0foBgY8XGSkR2YMYzWw2jPEq3Th/KM5Catn3 -AFm3bGKWMtGPR4v+90chEN0jzaAmJYRrVUh9vea27bOCn31Nse6XXQPmSI6Gyncy -OAPUsvPClF3IjeL1tmBotWqSGn1cYxLo+Lwjk22A9h6vjcNQRyZF2VLVvtwYrNU3 -mwJ6GCLsLHpwW/yjyvn8iEltnJvByM/eeRnfXV6WDObyiZsE/n6DxIRJodQzFqy9 -GA== +MIIDezCCAmOgAwIBAgIUVmt615GXDaXBjdHQU7/6RLuwzdkwDQYJKoZIhvcNAQEL +BQAwRTELMAkGA1UEBhMCQVUxEzARBgNVBAgMClNvbWUtU3RhdGUxITAfBgNVBAoM +GEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZDAeFw0yNjA4MTIyMTA1MzhaFw0zNjA4 +MDkyMTA1MzhaMEUxCzAJBgNVBAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEw +HwYDVQQKDBhJbnRlcm5ldCBXaWRnaXRzIFB0eSBMdGQwggEiMA0GCSqGSIb3DQEB +AQUAA4IBDwAwggEKAoIBAQCtUdYWfnYtuXWXn17F25me1VJnINinMM0P5LYtRw7p +9EFaFX/UrOjH7YZmm1u4waZ8jeICdvQIVPi4LeQGRBCVeicYBNJXJoVMVH6Or+Vz +RI/70F3tIFeJ4hV4heVjVO+XAi+Pc23D3Nf6xxMDhJfEfozSsq/2BM65va8IxId4 +XXpfwNCvhexm5CvsKnuPUjhqo4nJqnklOXmKOYbxye7Sf7xRxGUHPL310tYkbQB8 +jdVEl1akZM1Vn3ZoV9/dGkrcX9YjaCnepXXKdEAq6+adwYLcsO9h9xzZ2CxzU3oV ++rwYiuSBGhvp4FySUMenV3TbcvCt75VpUNKjX/9jvZQXAgMBAAGjYzBhMB8GA1Ud +IwQYMBaAFGzTpQOrDV8syY2KnIiniHe4N/2aMA8GA1UdEwEB/wQFMAMBAf8wDgYD +VR0PAQH/BAQDAgEGMB0GA1UdDgQWBBRs06UDqw1fLMmNipyIp4h3uDf9mjANBgkq +hkiG9w0BAQsFAAOCAQEAOSjLvzmaoT1lkYGAkkfy9zcVRTLv8m0xMZ4lgN8tW4HK +a9AXEvO5K2KH9/sSAd5gr3aLFffIiI6FC1cyAFb53OrXoI2SUKxVatTeYRUutNiF +4R/kAYZboPpR75FfbP8nTiJoVOkiRVrp1b81C04auqCTy8mkfz4ExEsJRhqVYNLd +Rk34seIzSvmj3XwexTed0z3EEiwOnLtr2GYN+zGwVbL6fnn3ZFPviUHwOI1afaIs +efhukJrB15v88OUQkKM4MlV2nftNalvX5Rg6jag6YHGpjSEnyGlMgTKb7DdhWmK3 +dlrX2NtWo0ufG3gV9JXYCMNLASrpP49s6+JXMkDukw== -----END CERTIFICATE----- From 9922b27c5889b14a94b6d25818d6a02b76b3f6de Mon Sep 17 00:00:00 2001 From: Matthew Gumport Date: Wed, 12 Aug 2026 14:40:39 -0700 Subject: [PATCH 2/5] update tests for renewed tls fixtures Keep certificate fingerprints, validity assertions, signatures, and bundled certificate expectations aligned with the renewed test fixtures. Deploy risk: test expectations only; runtime behavior is unchanged. --- boring/src/ssl/test/mod.rs | 2 +- boring/src/x509/tests/mod.rs | 28 ++++++++--------- boring/test/cert.pem | 39 ++++++++++++------------ boring/test/certs.pem | 58 +++++++++++++++++++----------------- boring/test/root-ca.pem | 38 +++++++++++------------ 5 files changed, 83 insertions(+), 82 deletions(-) diff --git a/boring/src/ssl/test/mod.rs b/boring/src/ssl/test/mod.rs index 9e851f701..32c1f3128 100644 --- a/boring/src/ssl/test/mod.rs +++ b/boring/src/ssl/test/mod.rs @@ -77,7 +77,7 @@ fn peer_certificate() { let fingerprint = cert.digest(MessageDigest::sha1()).unwrap(); assert_eq!( hex::encode(fingerprint), - "59172d9313e84459bcff27f967e79e6e9217e584" + "585e3a58acfd3b4e5e2825659407244ddd93539c" ); } diff --git a/boring/src/x509/tests/mod.rs b/boring/src/x509/tests/mod.rs index 90e4bf299..fd42b3c86 100644 --- a/boring/src/x509/tests/mod.rs +++ b/boring/src/x509/tests/mod.rs @@ -27,7 +27,7 @@ fn test_cert_loading() { let cert = X509::from_pem(cert).unwrap(); let fingerprint = cert.digest(MessageDigest::sha1()).unwrap(); - let hash_str = "59172d9313e84459bcff27f967e79e6e9217e584"; + let hash_str = "585e3a58acfd3b4e5e2825659407244ddd93539c"; let hash_vec = Vec::from_hex(hash_str).unwrap(); assert_eq!(hash_vec, &*fingerprint); @@ -43,8 +43,8 @@ fn test_debug() { assert!(debugged.contains(r#"signature_algorithm: sha256WithRSAEncryption"#)); assert!(debugged.contains(r#"countryName = "AU""#)); assert!(debugged.contains(r#"stateOrProvinceName = "Some-State""#)); - assert!(debugged.contains(r#"not_before: Aug 14 17:00:03 2016 GMT"#)); - assert!(debugged.contains(r#"not_after: Aug 12 17:00:03 2026 GMT"#)); + assert!(debugged.contains(r#"not_before: Aug 12 21:37:58 2026 GMT"#)); + assert!(debugged.contains(r#"not_after: Aug 9 21:37:58 2036 GMT"#)); } #[test] @@ -54,8 +54,8 @@ fn test_cert_issue_validity() { let not_before = cert.not_before().to_string(); let not_after = cert.not_after().to_string(); - assert_eq!(not_before, "Aug 14 17:00:03 2016 GMT"); - assert_eq!(not_after, "Aug 12 17:00:03 2026 GMT"); + assert_eq!(not_before, "Aug 12 21:37:58 2026 GMT"); + assert_eq!(not_after, "Aug 9 21:37:58 2036 GMT"); } #[test] @@ -395,11 +395,11 @@ fn test_stack_from_pem() { assert_eq!(certs.len(), 2); assert_eq!( hex::encode(certs[0].digest(MessageDigest::sha1()).unwrap()), - "59172d9313e84459bcff27f967e79e6e9217e584" + "585e3a58acfd3b4e5e2825659407244ddd93539c" ); assert_eq!( hex::encode(certs[1].digest(MessageDigest::sha1()).unwrap()), - "c0cbdf7cdd03c9773e5468e1f6d2da7d5cbb1875" + "1b1ad6250902865aea72bc1e843d45b769e6c553" ); } @@ -421,13 +421,13 @@ fn signature() { let signature = cert.signature(); assert_eq!( hex::encode(signature.as_slice()), - "4af607b889790b43470442cfa551cdb8b6d0b0340d2958f76b9e3ef6ad4992230cead6842587f0ecad5\ - 78e6e11a221521e940187e3d6652de14e84e82f6671f097cc47932e022add3c0cb54a26bf27fa84c107\ - 4971caa6bee2e42d34a5b066c427f2d452038082b8073993399548088429de034fdd589dcfb0dd33be7\ - ebdfdf698a28d628a89568881d658151276bde333600969502c4e62e1d3470a683364dfb241f78d310a\ - 89c119297df093eb36b7fd7540224f488806780305d1e79ffc938fe2275441726522ab36d88348e6c51\ - f13dcc46b5e1cdac23c974fd5ef86aa41e91c9311655090a52333bc79687c748d833595d4c5f987508f\ - e121997410d37c" + "73a2bbd9e91b011f11d18a75e247b09b3288dcc837900ee38ce36f4b8fcef2dbc201db032f5d0206e990f64\ + e22a5445d559d91dc52797a6a9115cb2325eb79ca4a2c036ac8bb4aae54b2f0c285efc80d404b1c703e\ + bca56ce85e3a64173853b45d243cb023e8b4fe2ae02ebf59f415938295ce41970a583f147a2f83592cd\ + 0ae639c2da9cd4f04a521b1eada862a2142774aedcc9bb7f4e5019443ba01b50174abc2373566a6e91aa\ + 8ba1e4ddffbec5d308575fa9bd160555965a718dee775568dde57808f0b45794562ab9095fe6242af85f\ + 4c2da698c8b219a3f2054b1c505a526f176ebcee4b16f0ad76b341ba0ddaad7bea1ac97076ed37041fa\ + 45d58b0c" ); let algorithm = cert.signature_algorithm(); assert_eq!(algorithm.object().nid(), Nid::SHA256WITHRSAENCRYPTION); diff --git a/boring/test/cert.pem b/boring/test/cert.pem index 8c77539a4..f572f2cbf 100644 --- a/boring/test/cert.pem +++ b/boring/test/cert.pem @@ -1,22 +1,21 @@ -----BEGIN CERTIFICATE----- -MIIDsTCCApmgAwIBAgIUAeqMSCIvHjEezZUoIZmjhLY55vYwDQYJKoZIhvcNAQEL -BQAwRTELMAkGA1UEBhMCQVUxEzARBgNVBAgMClNvbWUtU3RhdGUxITAfBgNVBAoM -GEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZDAeFw0yNjA4MTIyMTA1MzhaFw0zNjA4 -MDkyMTA1MzhaMFoxCzAJBgNVBAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEw -HwYDVQQKDBhJbnRlcm5ldCBXaWRnaXRzIFB0eSBMdGQxEzARBgNVBAMMCmZvb2Jh -ci5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo9CWMRLMXo1CF -/iORh9B4NhtJF/8tR9PlG95sNvyWuQQ/8jfev+8zErplxfLkt0pJqcoiZG8g9NU0 -kU6o5T+/1QgZclCAoZaS0Jqxmoo2Yk/1Qsj16pnMBc10uSDk6V9aJSX1vKwONVNS -wiHA1MhX+i7Wf7/K0niq+k7hOkhleFkWgZtUq41gXh1VfOugka7UktYnk9mrBbAM -jmaloZNn2pMMAQxVg4ThiLm3zvuWqvXASWzUZc7IAd1GbN4AtDuhs252eqE9E4iT -Hk7F14wAS1JWqv666hReGHrmZJGx0xQTM9vPD1HN5t2U3KTfhO/mTlAUWVyg9tCt -OzboKgs1AgMBAAGjgYMwgYAwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwIwYD -VR0RBBwwGoINKi5leGFtcGxlLmNvbYIJaGVsbG8uY29tMB0GA1UdDgQWBBS2cy9h -pUuh70gsFbGf89w0L7ysMDAfBgNVHSMEGDAWgBRs06UDqw1fLMmNipyIp4h3uDf9 -mjANBgkqhkiG9w0BAQsFAAOCAQEAnvH835+HWzgIARrO9Uy2CdmnpZ3VkWAd85H5 -XRrJlxc+fd210/sTUZUJy0q/GWogdnHET58S41D3n9YE7jCT4szrM3ZZIbrqH5Ci -Y/gmYB+hw4bE0QOyezIKxIwLHWvFWAlIxCFlbcT5U8Lv5t0jjiKt8crhMd1+6G1T -133KZd2zuBXAQLdMMXKeDX28SvvkLQyuvFx6R0wa/EoVSnVqfAdXX4PT7YAEdYzT -lnRUNDUd7BgrTFyJmmP9c5lRU+odCaW9sgH9xe35yALvZnDISIEWqawI3kcTmxTA -UWRrgpFSD5NBO3i4mchrczU+/E8I5TFoLpLS1FPNZtzFP5chbA== +MIIDfzCCAmegAwIBAgIJAIdx973umC+lMA0GCSqGSIb3DQEBCwUAMEUxCzAJBgNV +BAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEwHwYDVQQKDBhJbnRlcm5ldCBX +aWRnaXRzIFB0eSBMdGQwHhcNMjYwODEyMjEzNzU4WhcNMzYwODA5MjEzNzU4WjBa +MQswCQYDVQQGEwJBVTETMBEGA1UECAwKU29tZS1TdGF0ZTEhMB8GA1UECgwYSW50 +ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMRMwEQYDVQQDDApmb29iYXIuY29tMIIBIjAN +BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPQljESzF6NQhf4jkYfQeDYbSRf/ +LUfT5RvebDb8lrkEP/I33r/vMxK6ZcXy5LdKSanKImRvIPTVNJFOqOU/v9UIGXJQ +gKGWktCasZqKNmJP9ULI9eqZzAXNdLkg5OlfWiUl9bysDjVTUsIhwNTIV/ou1n+/ +ytJ4qvpO4TpIZXhZFoGbVKuNYF4dVXzroJGu1JLWJ5PZqwWwDI5mpaGTZ9qTDAEM +VYOE4Yi5t877lqr1wEls1GXOyAHdRmzeALQ7obNudnqhPROIkx5OxdeMAEtSVqr+ +uuoUXhh65mSRsdMUEzPbzw9RzebdlNyk34Tv5k5QFFlcoPbQrTs26CoLNQIDAQAB +o10wWzAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDAdBgNVHQ4EFgQUtnMvYaVL +oe9ILBWxn/PcNC+8rDAwHwYDVR0jBBgwFoAUbNOlA6sNXyzJjYqciKeId7g3/Zow +DQYJKoZIhvcNAQELBQADggEBAHOiu9npGwEfEdGKdeJHsJsyiNzIN5AO44zjb0uP +zvLbwgHbAy9dAgbpkPZOIqVEXVWdkdxSeXpqkRXLIyXrecpKLANqyLtKrlSy8MKF +78gNQEsccD68pWzoXjpkFzhTtF0kPLAj6LT+KuAuv1n0FZOClc5BlwpYPxR6L4NZ +LNCuY5wtqc1PBKUhserahiohQndK7cybt/TlAZRDugG1AXSrwjc1ZqbpGqi6Hk3f +++xdMIV1+pvRYFVZZacY3ud1Vo3eV4CPC0V5RWKrkJX+YkKvhfTC2mmMiyGaPyBU +scUFpSbxduvO5LFvCtdrNBug3arXvqGslwdu03BB+kXViww= -----END CERTIFICATE----- diff --git a/boring/test/certs.pem b/boring/test/certs.pem index 9d3516620..76741d8c0 100644 --- a/boring/test/certs.pem +++ b/boring/test/certs.pem @@ -1,26 +1,28 @@ -----BEGIN CERTIFICATE----- -MIIDGzCCAgMCCQCHcfe97pgvpTANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJB -VTETMBEGA1UECAwKU29tZS1TdGF0ZTEhMB8GA1UECgwYSW50ZXJuZXQgV2lkZ2l0 -cyBQdHkgTHRkMB4XDTE2MDgxNDE3MDAwM1oXDTI2MDgxMjE3MDAwM1owWjELMAkG -A1UEBhMCQVUxEzARBgNVBAgMClNvbWUtU3RhdGUxITAfBgNVBAoMGEludGVybmV0 -IFdpZGdpdHMgUHR5IEx0ZDETMBEGA1UEAwwKZm9vYmFyLmNvbTCCASIwDQYJKoZI -hvcNAQEBBQADggEPADCCAQoCggEBAKj0JYxEsxejUIX+I5GH0Hg2G0kX/y1H0+Ub -3mw2/Ja5BD/yN96/7zMSumXF8uS3SkmpyiJkbyD01TSRTqjlP7/VCBlyUIChlpLQ -mrGaijZiT/VCyPXqmcwFzXS5IOTpX1olJfW8rA41U1LCIcDUyFf6LtZ/v8rSeKr6 -TuE6SGV4WRaBm1SrjWBeHVV866CRrtSS1ieT2asFsAyOZqWhk2fakwwBDFWDhOGI -ubfO+5aq9cBJbNRlzsgB3UZs3gC0O6GzbnZ6oT0TiJMeTsXXjABLUlaq/rrqFF4Y -euZkkbHTFBMz288PUc3m3ZTcpN+E7+ZOUBRZXKD20K07NugqCzUCAwEAATANBgkq -hkiG9w0BAQsFAAOCAQEASvYHuIl5C0NHBELPpVHNuLbQsDQNKVj3a54+9q1JkiMM -6taEJYfw7K1Xjm4RoiFSHpQBh+PWZS3hToToL2Zx8JfMR5MuAirdPAy1Sia/J/qE -wQdJccqmvuLkLTSlsGbEJ/LUUgOAgrgHOZM5lUgIhCneA0/dWJ3PsN0zvn69/faY -oo1iiolWiIHWWBUSdr3jM2AJaVAsTmLh00cKaDNk37JB940xConBGSl98JPrNrf9 -dUAiT0iIBngDBdHnn/yTj+InVEFyZSKrNtiDSObFHxPcxGteHNrCPJdP1e+GqkHp -HJMRZVCQpSMzvHlofHSNgzWV1MX5h1CP4SGZdBDTfA== +MIIDfzCCAmegAwIBAgIJAIdx973umC+lMA0GCSqGSIb3DQEBCwUAMEUxCzAJBgNV +BAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEwHwYDVQQKDBhJbnRlcm5ldCBX +aWRnaXRzIFB0eSBMdGQwHhcNMjYwODEyMjEzNzU4WhcNMzYwODA5MjEzNzU4WjBa +MQswCQYDVQQGEwJBVTETMBEGA1UECAwKU29tZS1TdGF0ZTEhMB8GA1UECgwYSW50 +ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMRMwEQYDVQQDDApmb29iYXIuY29tMIIBIjAN +BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPQljESzF6NQhf4jkYfQeDYbSRf/ +LUfT5RvebDb8lrkEP/I33r/vMxK6ZcXy5LdKSanKImRvIPTVNJFOqOU/v9UIGXJQ +gKGWktCasZqKNmJP9ULI9eqZzAXNdLkg5OlfWiUl9bysDjVTUsIhwNTIV/ou1n+/ +ytJ4qvpO4TpIZXhZFoGbVKuNYF4dVXzroJGu1JLWJ5PZqwWwDI5mpaGTZ9qTDAEM +VYOE4Yi5t877lqr1wEls1GXOyAHdRmzeALQ7obNudnqhPROIkx5OxdeMAEtSVqr+ +uuoUXhh65mSRsdMUEzPbzw9RzebdlNyk34Tv5k5QFFlcoPbQrTs26CoLNQIDAQAB +o10wWzAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDAdBgNVHQ4EFgQUtnMvYaVL +oe9ILBWxn/PcNC+8rDAwHwYDVR0jBBgwFoAUbNOlA6sNXyzJjYqciKeId7g3/Zow +DQYJKoZIhvcNAQELBQADggEBAHOiu9npGwEfEdGKdeJHsJsyiNzIN5AO44zjb0uP +zvLbwgHbAy9dAgbpkPZOIqVEXVWdkdxSeXpqkRXLIyXrecpKLANqyLtKrlSy8MKF +78gNQEsccD68pWzoXjpkFzhTtF0kPLAj6LT+KuAuv1n0FZOClc5BlwpYPxR6L4NZ +LNCuY5wtqc1PBKUhserahiohQndK7cybt/TlAZRDugG1AXSrwjc1ZqbpGqi6Hk3f +++xdMIV1+pvRYFVZZacY3ud1Vo3eV4CPC0V5RWKrkJX+YkKvhfTC2mmMiyGaPyBU +scUFpSbxduvO5LFvCtdrNBug3arXvqGslwdu03BB+kXViww= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- -MIIDXTCCAkWgAwIBAgIJAOIvDiVb18eVMA0GCSqGSIb3DQEBCwUAMEUxCzAJBgNV +MIIDcDCCAligAwIBAgIJAOIvDiVb18eVMA0GCSqGSIb3DQEBCwUAMEUxCzAJBgNV BAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEwHwYDVQQKDBhJbnRlcm5ldCBX -aWRnaXRzIFB0eSBMdGQwHhcNMTYwODE0MTY1NjExWhcNMjYwODEyMTY1NjExWjBF +aWRnaXRzIFB0eSBMdGQwHhcNMjYwODEyMjEzNzU4WhcNMzYwODA5MjEzNzU4WjBF MQswCQYDVQQGEwJBVTETMBEGA1UECAwKU29tZS1TdGF0ZTEhMB8GA1UECgwYSW50 ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEArVHWFn52Lbl1l59exduZntVSZyDYpzDND+S2LUcO6fRBWhV/1Kzox+2G @@ -28,13 +30,13 @@ ZptbuMGmfI3iAnb0CFT4uC3kBkQQlXonGATSVyaFTFR+jq/lc0SP+9Bd7SBXieIV eIXlY1TvlwIvj3Ntw9zX+scTA4SXxH6M0rKv9gTOub2vCMSHeF16X8DQr4XsZuQr 7Cp7j1I4aqOJyap5JTl5ijmG8cnu0n+8UcRlBzy99dLWJG0AfI3VRJdWpGTNVZ92 aFff3RpK3F/WI2gp3qV1ynRAKuvmncGC3LDvYfcc2dgsc1N6Ffq8GIrkgRob6eBc -klDHp1d023Lwre+VaVDSo1//Y72UFwIDAQABo1AwTjAdBgNVHQ4EFgQUbNOlA6sN -XyzJjYqciKeId7g3/ZowHwYDVR0jBBgwFoAUbNOlA6sNXyzJjYqciKeId7g3/Zow -DAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAVVaR5QWLZIRR4Dw6TSBn -BQiLpBSXN6oAxdDw6n4PtwW6CzydaA+creiK6LfwEsiifUfQe9f+T+TBSpdIYtMv -Z2H2tjlFX8VrjUFvPrvn5c28CuLI0foBgY8XGSkR2YMYzWw2jPEq3Th/KM5Catn3 -AFm3bGKWMtGPR4v+90chEN0jzaAmJYRrVUh9vea27bOCn31Nse6XXQPmSI6Gyncy -OAPUsvPClF3IjeL1tmBotWqSGn1cYxLo+Lwjk22A9h6vjcNQRyZF2VLVvtwYrNU3 -mwJ6GCLsLHpwW/yjyvn8iEltnJvByM/eeRnfXV6WDObyiZsE/n6DxIRJodQzFqy9 -GA== +klDHp1d023Lwre+VaVDSo1//Y72UFwIDAQABo2MwYTAfBgNVHSMEGDAWgBRs06UD +qw1fLMmNipyIp4h3uDf9mjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIB +BjAdBgNVHQ4EFgQUbNOlA6sNXyzJjYqciKeId7g3/ZowDQYJKoZIhvcNAQELBQAD +ggEBAHthH2/t6QzVwYElXQSs5ZgvAjOFwV3fLnLRXSRhS183fctR3ZjxLQjj61YO +1f3Grn4DuYEfgwrPIlgrLWihcnnsx9wRJiQTGzmx5YJX68U7aBk81TMAG05/s8Jj +V8bFVYJotYptnVXxPtAt8jvfAMEDq6wZHvY9ndSQpAyCLfaJrxpa7jXdJYQQkeAV +SiSYrnc5+MEtoNvQGZriJTF2mUoLDBkuHK9bR/1kdZDI56TuluDhkKde5bk/6Uxh +5KMJ6yVgQueguowWY2hby6F/88HwQBCKtttF8ySCzp6xBxwC/6gQxvDPax6hCgi7 +ecKN/YA2rUJnVs2KhwLz+tC5Lhk= -----END CERTIFICATE----- diff --git a/boring/test/root-ca.pem b/boring/test/root-ca.pem index e31265e5d..c50c22c36 100644 --- a/boring/test/root-ca.pem +++ b/boring/test/root-ca.pem @@ -1,21 +1,21 @@ -----BEGIN CERTIFICATE----- -MIIDezCCAmOgAwIBAgIUVmt615GXDaXBjdHQU7/6RLuwzdkwDQYJKoZIhvcNAQEL -BQAwRTELMAkGA1UEBhMCQVUxEzARBgNVBAgMClNvbWUtU3RhdGUxITAfBgNVBAoM -GEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZDAeFw0yNjA4MTIyMTA1MzhaFw0zNjA4 -MDkyMTA1MzhaMEUxCzAJBgNVBAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEw -HwYDVQQKDBhJbnRlcm5ldCBXaWRnaXRzIFB0eSBMdGQwggEiMA0GCSqGSIb3DQEB -AQUAA4IBDwAwggEKAoIBAQCtUdYWfnYtuXWXn17F25me1VJnINinMM0P5LYtRw7p -9EFaFX/UrOjH7YZmm1u4waZ8jeICdvQIVPi4LeQGRBCVeicYBNJXJoVMVH6Or+Vz -RI/70F3tIFeJ4hV4heVjVO+XAi+Pc23D3Nf6xxMDhJfEfozSsq/2BM65va8IxId4 -XXpfwNCvhexm5CvsKnuPUjhqo4nJqnklOXmKOYbxye7Sf7xRxGUHPL310tYkbQB8 -jdVEl1akZM1Vn3ZoV9/dGkrcX9YjaCnepXXKdEAq6+adwYLcsO9h9xzZ2CxzU3oV -+rwYiuSBGhvp4FySUMenV3TbcvCt75VpUNKjX/9jvZQXAgMBAAGjYzBhMB8GA1Ud -IwQYMBaAFGzTpQOrDV8syY2KnIiniHe4N/2aMA8GA1UdEwEB/wQFMAMBAf8wDgYD -VR0PAQH/BAQDAgEGMB0GA1UdDgQWBBRs06UDqw1fLMmNipyIp4h3uDf9mjANBgkq -hkiG9w0BAQsFAAOCAQEAOSjLvzmaoT1lkYGAkkfy9zcVRTLv8m0xMZ4lgN8tW4HK -a9AXEvO5K2KH9/sSAd5gr3aLFffIiI6FC1cyAFb53OrXoI2SUKxVatTeYRUutNiF -4R/kAYZboPpR75FfbP8nTiJoVOkiRVrp1b81C04auqCTy8mkfz4ExEsJRhqVYNLd -Rk34seIzSvmj3XwexTed0z3EEiwOnLtr2GYN+zGwVbL6fnn3ZFPviUHwOI1afaIs -efhukJrB15v88OUQkKM4MlV2nftNalvX5Rg6jag6YHGpjSEnyGlMgTKb7DdhWmK3 -dlrX2NtWo0ufG3gV9JXYCMNLASrpP49s6+JXMkDukw== +MIIDcDCCAligAwIBAgIJAOIvDiVb18eVMA0GCSqGSIb3DQEBCwUAMEUxCzAJBgNV +BAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEwHwYDVQQKDBhJbnRlcm5ldCBX +aWRnaXRzIFB0eSBMdGQwHhcNMjYwODEyMjEzNzU4WhcNMzYwODA5MjEzNzU4WjBF +MQswCQYDVQQGEwJBVTETMBEGA1UECAwKU29tZS1TdGF0ZTEhMB8GA1UECgwYSW50 +ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB +CgKCAQEArVHWFn52Lbl1l59exduZntVSZyDYpzDND+S2LUcO6fRBWhV/1Kzox+2G +ZptbuMGmfI3iAnb0CFT4uC3kBkQQlXonGATSVyaFTFR+jq/lc0SP+9Bd7SBXieIV +eIXlY1TvlwIvj3Ntw9zX+scTA4SXxH6M0rKv9gTOub2vCMSHeF16X8DQr4XsZuQr +7Cp7j1I4aqOJyap5JTl5ijmG8cnu0n+8UcRlBzy99dLWJG0AfI3VRJdWpGTNVZ92 +aFff3RpK3F/WI2gp3qV1ynRAKuvmncGC3LDvYfcc2dgsc1N6Ffq8GIrkgRob6eBc +klDHp1d023Lwre+VaVDSo1//Y72UFwIDAQABo2MwYTAfBgNVHSMEGDAWgBRs06UD +qw1fLMmNipyIp4h3uDf9mjAPBgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIB +BjAdBgNVHQ4EFgQUbNOlA6sNXyzJjYqciKeId7g3/ZowDQYJKoZIhvcNAQELBQAD +ggEBAHthH2/t6QzVwYElXQSs5ZgvAjOFwV3fLnLRXSRhS183fctR3ZjxLQjj61YO +1f3Grn4DuYEfgwrPIlgrLWihcnnsx9wRJiQTGzmx5YJX68U7aBk81TMAG05/s8Jj +V8bFVYJotYptnVXxPtAt8jvfAMEDq6wZHvY9ndSQpAyCLfaJrxpa7jXdJYQQkeAV +SiSYrnc5+MEtoNvQGZriJTF2mUoLDBkuHK9bR/1kdZDI56TuluDhkKde5bk/6Uxh +5KMJ6yVgQueguowWY2hby6F/88HwQBCKtttF8ySCzp6xBxwC/6gQxvDPax6hCgi7 +ecKN/YA2rUJnVs2KhwLz+tC5Lhk= -----END CERTIFICATE----- From 78e2f6b82a418850dab4a4cdcffe47be0aabbfcb Mon Sep 17 00:00:00 2001 From: Kornel Date: Sat, 15 Aug 2026 01:45:49 +0100 Subject: [PATCH 3/5] Update test cert digests --- boring/src/ssl/test/cert_verify.rs | 8 ++++---- boring/src/ssl/test/custom_verify.rs | 6 +++--- boring/src/ssl/test/mod.rs | 3 ++- boring/src/ssl/test/verify.rs | 4 ++-- boring/src/x509/tests/mod.rs | 4 ++-- 5 files changed, 13 insertions(+), 12 deletions(-) diff --git a/boring/src/ssl/test/cert_verify.rs b/boring/src/ssl/test/cert_verify.rs index b55cb26a1..c1bc0922e 100644 --- a/boring/src/ssl/test/cert_verify.rs +++ b/boring/src/ssl/test/cert_verify.rs @@ -61,8 +61,8 @@ fn callback_receives_correct_certificate() { // but client doesn't load the root as trusted. // So we expect an error. let mut client = server.client(); - let leaf_sha1 = "59172d9313e84459bcff27f967e79e6e9217e584"; - let root_sha1 = "c0cbdf7cdd03c9773e5468e1f6d2da7d5cbb1875"; + let leaf_sha1 = "585e3a58acfd3b4e5e2825659407244ddd93539c"; + let root_sha1 = "1b1ad6250902865aea72bc1e843d45b769e6c553"; client.ctx().set_verify(SslVerifyMode::PEER); client.ctx().set_cert_verify_callback(move |x509| { assert!(!x509.verify_cert().unwrap()); @@ -110,8 +110,8 @@ fn callback_receives_correct_certificate() { fn callback_receives_correct_chain() { let server = Server::builder().build(); let mut client = server.client_with_root_ca(); - let leaf_sha1 = "59172d9313e84459bcff27f967e79e6e9217e584"; - let root_sha1 = "c0cbdf7cdd03c9773e5468e1f6d2da7d5cbb1875"; + let leaf_sha1 = "585e3a58acfd3b4e5e2825659407244ddd93539c"; + let root_sha1 = "1b1ad6250902865aea72bc1e843d45b769e6c553"; client.ctx().set_verify(SslVerifyMode::PEER); client.ctx().set_cert_verify_callback(move |x509| { assert!(x509.verify_cert().unwrap()); diff --git a/boring/src/ssl/test/custom_verify.rs b/boring/src/ssl/test/custom_verify.rs index 64e8f89b5..6e5cbc555 100644 --- a/boring/src/ssl/test/custom_verify.rs +++ b/boring/src/ssl/test/custom_verify.rs @@ -151,7 +151,7 @@ fn callback() { static CALLED_BACK: AtomicBool = AtomicBool::new(false); let server = Server::builder().build(); let mut client = server.client(); - let expected = "59172d9313e84459bcff27f967e79e6e9217e584"; + let expected = super::TEST_CERT_DIGEST; client .ctx() @@ -181,7 +181,7 @@ fn ssl_callback() { static CALLED_BACK: AtomicBool = AtomicBool::new(false); let server = Server::builder().build(); let mut client = server.client().build().builder(); - let expected = "59172d9313e84459bcff27f967e79e6e9217e584"; + let expected = super::TEST_CERT_DIGEST; client .ssl() @@ -219,7 +219,7 @@ fn both_callback() { }); let mut client = client.build().builder(); - let expected = "59172d9313e84459bcff27f967e79e6e9217e584"; + let expected = super::TEST_CERT_DIGEST; client .ssl() diff --git a/boring/src/ssl/test/mod.rs b/boring/src/ssl/test/mod.rs index 32c1f3128..b713a37ac 100644 --- a/boring/src/ssl/test/mod.rs +++ b/boring/src/ssl/test/mod.rs @@ -37,6 +37,7 @@ mod verify; static ROOT_CERT: &[u8] = include_bytes!("../../../test/root-ca.pem"); static CERT: &[u8] = include_bytes!("../../../test/cert.pem"); static KEY: &[u8] = include_bytes!("../../../test/key.pem"); +const TEST_CERT_DIGEST: &str = "585e3a58acfd3b4e5e2825659407244ddd93539c"; #[test] fn get_ctx_options() { @@ -77,7 +78,7 @@ fn peer_certificate() { let fingerprint = cert.digest(MessageDigest::sha1()).unwrap(); assert_eq!( hex::encode(fingerprint), - "585e3a58acfd3b4e5e2825659407244ddd93539c" + TEST_CERT_DIGEST ); } diff --git a/boring/src/ssl/test/verify.rs b/boring/src/ssl/test/verify.rs index b7a823913..4fa7ebdb0 100644 --- a/boring/src/ssl/test/verify.rs +++ b/boring/src/ssl/test/verify.rs @@ -112,7 +112,7 @@ fn callback() { let server = Server::builder().build(); let mut client = server.client(); - let expected = "59172d9313e84459bcff27f967e79e6e9217e584"; + let expected = super::TEST_CERT_DIGEST; client .ctx() .set_verify_callback(SslVerifyMode::PEER, move |_, x509| { @@ -134,7 +134,7 @@ fn ssl_callback() { let server = Server::builder().build(); let mut client = server.client().build().builder(); - let expected = "59172d9313e84459bcff27f967e79e6e9217e584"; + let expected = super::TEST_CERT_DIGEST; client .ssl() .set_verify_callback(SslVerifyMode::PEER, move |_, x509| { diff --git a/boring/src/x509/tests/mod.rs b/boring/src/x509/tests/mod.rs index fd42b3c86..18cc31c8f 100644 --- a/boring/src/x509/tests/mod.rs +++ b/boring/src/x509/tests/mod.rs @@ -13,6 +13,7 @@ use crate::x509::extension::{ }; use crate::x509::store::X509StoreBuilder; use crate::x509::{X509Extension, X509Name, X509Req, X509StoreContext, X509}; +const TEST_CERT_DIGEST: &str = "585e3a58acfd3b4e5e2825659407244ddd93539c"; mod trusted_first; @@ -27,8 +28,7 @@ fn test_cert_loading() { let cert = X509::from_pem(cert).unwrap(); let fingerprint = cert.digest(MessageDigest::sha1()).unwrap(); - let hash_str = "585e3a58acfd3b4e5e2825659407244ddd93539c"; - let hash_vec = Vec::from_hex(hash_str).unwrap(); + let hash_vec = Vec::from_hex(TEST_CERT_DIGEST).unwrap(); assert_eq!(hash_vec, &*fingerprint); } From 65e27fe86cff11feb3efedce57b369fc08df62a1 Mon Sep 17 00:00:00 2001 From: Kornel Date: Sat, 15 Aug 2026 01:53:57 +0100 Subject: [PATCH 4/5] Refresh test certs --- boring/test/cert-wildcard.pem | 37 +++++++++++++------------ boring/test/cert-with-intermediate.pem | 37 +++++++++++++------------ boring/test/intermediate-ca.pem | 22 +++++++-------- boring/test/root-ca-cross.pem | 24 ++++++++-------- hyper-boring/tests/test/cert.pem | 36 ++++++++++++------------ hyper-boring/tests/test/root-ca.pem | 38 +++++++++++++------------- 6 files changed, 99 insertions(+), 95 deletions(-) diff --git a/boring/test/cert-wildcard.pem b/boring/test/cert-wildcard.pem index 825e411f2..a64e77c53 100644 --- a/boring/test/cert-wildcard.pem +++ b/boring/test/cert-wildcard.pem @@ -1,20 +1,21 @@ -notAfter=Aug 12 11:30:03 2026 GMT -----BEGIN CERTIFICATE----- -MIIDKDCCAhACFGwwuilXOHjBjQ584FD9drp9Uh/LMA0GCSqGSIb3DQEBCwUAMEUx -CzAJBgNVBAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEwHwYDVQQKDBhJbnRl -cm5ldCBXaWRnaXRzIFB0eSBMdGQwHhcNMjMxMjE4MTEzMDAzWhcNMjYwODEyMTEz -MDAzWjBcMQswCQYDVQQGEwJBVTETMBEGA1UECAwKU29tZS1TdGF0ZTEhMB8GA1UE -BwwYSW50ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMRUwEwYDVQQDDAwqLmZvb2Jhci5j -b20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo9CWMRLMXo1CF/iOR -h9B4NhtJF/8tR9PlG95sNvyWuQQ/8jfev+8zErplxfLkt0pJqcoiZG8g9NU0kU6o -5T+/1QgZclCAoZaS0Jqxmoo2Yk/1Qsj16pnMBc10uSDk6V9aJSX1vKwONVNSwiHA -1MhX+i7Wf7/K0niq+k7hOkhleFkWgZtUq41gXh1VfOugka7UktYnk9mrBbAMjmal -oZNn2pMMAQxVg4ThiLm3zvuWqvXASWzUZc7IAd1GbN4AtDuhs252eqE9E4iTHk7F -14wAS1JWqv666hReGHrmZJGx0xQTM9vPD1HN5t2U3KTfhO/mTlAUWVyg9tCtOzbo -Kgs1AgMBAAEwDQYJKoZIhvcNAQELBQADggEBAHG83qKMl5bPoL2s7TaJZ909NaQO -4C69ueXlD4HJEFe7L9mkeQoDaF7RwWSBwN2RZT5hzQhghRotqLA06XwKbQHji/R7 -sYYVUHunobFUHsr51tFN1BIDoAWJa0N2rm/OxbcK471eWNKjMiS2vvvPdaMxxHAx -IsjAJBJec4IxNIUNNKqCS/xNYcdiyrmmU3oFWGqb0As/eDOBw0Amd0aayasFJrRV -3KZI5OcFg/J3XvdaxMJD+RPyUysKRXg6K8jzYc/PB8LhWVXpLxjEzeO2IHCaZprh -dUTP8+Ob+ioxujvlslxc4nrrUD5EWwnpEIr7e4af27JHQVaNyHbRw6wI2uk= +MIIDcTCCAlmgAwIBAgIUOnAA1OrZgAfgoRWETbXRP37rllIwDQYJKoZIhvcNAQEL +BQAwRTELMAkGA1UEBhMCQVUxEzARBgNVBAgMClNvbWUtU3RhdGUxITAfBgNVBAoM +GEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZDAeFw0yNjA4MTUwMDUxMjlaFw0zNjA4 +MTIwMDUxMjlaMFwxCzAJBgNVBAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEw +HwYDVQQHDBhJbnRlcm5ldCBXaWRnaXRzIFB0eSBMdGQxFTATBgNVBAMMDCouZm9v +YmFyLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKj0JYxEsxej +UIX+I5GH0Hg2G0kX/y1H0+Ub3mw2/Ja5BD/yN96/7zMSumXF8uS3SkmpyiJkbyD0 +1TSRTqjlP7/VCBlyUIChlpLQmrGaijZiT/VCyPXqmcwFzXS5IOTpX1olJfW8rA41 +U1LCIcDUyFf6LtZ/v8rSeKr6TuE6SGV4WRaBm1SrjWBeHVV866CRrtSS1ieT2asF +sAyOZqWhk2fakwwBDFWDhOGIubfO+5aq9cBJbNRlzsgB3UZs3gC0O6GzbnZ6oT0T +iJMeTsXXjABLUlaq/rrqFF4YeuZkkbHTFBMz288PUc3m3ZTcpN+E7+ZOUBRZXKD2 +0K07NugqCzUCAwEAAaNCMEAwHQYDVR0OBBYEFLZzL2GlS6HvSCwVsZ/z3DQvvKww +MB8GA1UdIwQYMBaAFGzTpQOrDV8syY2KnIiniHe4N/2aMA0GCSqGSIb3DQEBCwUA +A4IBAQAD+jcbGkk+ICa4bRQoTlhlu2OXLF1dN/n0Npr+9LUWJ3mUggJhn6n3oz9a +IliUlwdX5ZaABHXjg3IdD1jMnPscWO4wKqjtFUqCvyI+b7Smd9RZiHrrNqLXmwhZ +OLO8i2SdtXHz+ydyyp2dt6HBGsHQhMoNAGUKgCgNO6+eHRyPoKNZiVInNWNeyTtC +NBbscX8EH/TY48+sfy5V/KxRrfhmk+Bn/I8ehUqkVWSHxQGzK3hxTA3lDPmJPS+n +N0YXfXhAcb7/pFSlRsCjfhrhZ69Wa4tJx7HCHHeyoYfxuvTDVVdttWgoNmhtbPZW +d2mdHGYLmhvcLXD87Vh8hbi9cVLH -----END CERTIFICATE----- diff --git a/boring/test/cert-with-intermediate.pem b/boring/test/cert-with-intermediate.pem index 77c24317f..2a3533363 100644 --- a/boring/test/cert-with-intermediate.pem +++ b/boring/test/cert-with-intermediate.pem @@ -1,20 +1,21 @@ -----BEGIN CERTIFICATE----- -MIIDMzCCAhsCFBEiNxpuknaO7Pw1Yi88UW4aiGo0MA0GCSqGSIb3DQEBCwUAMFIx -CzAJBgNVBAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMS4wLAYDVQQKDCVJbnRl -cm5ldCBXaWRnaXRzIFB0eSBMdGQgSW50ZXJtZWRpYXRlMB4XDTI0MDEwMzE0MjIz -MFoXDTI2MDgxMjE0MjIzMFowWjELMAkGA1UEBhMCQVUxEzARBgNVBAgMClNvbWUt -U3RhdGUxITAfBgNVBAoMGEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZDETMBEGA1UE -AwwKZm9vYmFyLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKj0 -JYxEsxejUIX+I5GH0Hg2G0kX/y1H0+Ub3mw2/Ja5BD/yN96/7zMSumXF8uS3Skmp -yiJkbyD01TSRTqjlP7/VCBlyUIChlpLQmrGaijZiT/VCyPXqmcwFzXS5IOTpX1ol -JfW8rA41U1LCIcDUyFf6LtZ/v8rSeKr6TuE6SGV4WRaBm1SrjWBeHVV866CRrtSS -1ieT2asFsAyOZqWhk2fakwwBDFWDhOGIubfO+5aq9cBJbNRlzsgB3UZs3gC0O6Gz -bnZ6oT0TiJMeTsXXjABLUlaq/rrqFF4YeuZkkbHTFBMz288PUc3m3ZTcpN+E7+ZO -UBRZXKD20K07NugqCzUCAwEAATANBgkqhkiG9w0BAQsFAAOCAQEANWlOvyLEHdPV -8rMdfqLTZZyA79L1N3bP1FWS97fF36Y9EnTKChenwkBob1abY4jQ2/LICKND+ux8 -xDlmMlYRH4aM5bXAjOcdpmq9R9SuzsK/2m79xONF//AX4zb0s5b+QEwdYkfJ5jiO -xMrnatwHQhFvQIQvuTo2o0WZEnkubNYDxVh7UOv9cOQjwm0+58CIEG5SHR9grG5u -TTswu7DswgpfSCKKPaFCF4pWxLfryYwadO0/4Ot/ZbElbAdJYC8CI1QC14knk2cD -0ZG9jaVPP9wCAt/ZIu8NbsZN7DNbISaXVfMju+xSdey8B3FLRkLq9TKmnLum5LR2 -TyM6hDIh8A== +MIIDfDCCAmSgAwIBAgIULWuiVQ9uUjgJcRz+avEtMAPJsPIwDQYJKoZIhvcNAQEL +BQAwUjELMAkGA1UEBhMCQVUxEzARBgNVBAgMClNvbWUtU3RhdGUxLjAsBgNVBAoM +JUludGVybmV0IFdpZGdpdHMgUHR5IEx0ZCBJbnRlcm1lZGlhdGUwHhcNMjYwODE1 +MDA1MDM2WhcNMzYwODEyMDA1MDM2WjBaMQswCQYDVQQGEwJBVTETMBEGA1UECAwK +U29tZS1TdGF0ZTEhMB8GA1UECgwYSW50ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMRMw +EQYDVQQDDApmb29iYXIuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC +AQEAorYpslwjrt82JgVrmxwtWgqFAgy8Pko5vDO7uZW5lvrRTwutWNznryNFX6pn +fZ210RI8Rkc4je+qrqoIWtLPvXmYZ02t7ZO2VH4YBHrgrrsX/cWcPtD6dypF5SY0 +GFWZTEIdThKDoSCmcfj7cl5kpwVVdbOf+cDGd+Jms4AUy2XdcZ/wyH7BdSkTSoJ7 +JWMjaIK+ZmKizWr+K9VdrqqGe6K4hMpr8RskGwm4uR1CJr7Na4VRwVte9HU2cHnJ +R7C72uF6du0QqM58Terv5xfL03StXPepr//HvGNCwU33w96+8dugiAwmr9YSsRCe +rN2eXe9OZ4kHNCXvRCZtqwHZfwIDAQABo0IwQDAdBgNVHQ4EFgQUI4Th2j0Du1Ba +v96FV6vUcIFe0i4wHwYDVR0jBBgwFoAUZ3ELefSmoenETTa39CQwVzdoLZcwDQYJ +KoZIhvcNAQELBQADggEBAJioN838S8gRDRItygY3oin3F2dSxGUVzTdfJYysiVyw +XEXgpiDGdcLyLLcjcDPp8xSfqeJYXhS1kM2wtQu+iLOHkXshlC39KiRtHlTdcFD5 +9Bt+KG4OwXKA+MhCuIZG8IzvOfsvWS4m6O+58zGAl902PpxRou5BKvBHrtNS0El9 +vct5HeqlNOjw0rXqR+rvywylky0REzjK67GWEs1Fde++lDVmY/KU3WBA1qvZPwPl +PZY1UZ0QFzgA/IoBAlkiA7F34/WFhewaG1sXPrNr0lol5rRO1bYeAiVL6fX8/5tV +E4zpGFwcQ7cMT0dnAhvEZY4aD9M9gXdSgYQIIq1u124= -----END CERTIFICATE----- diff --git a/boring/test/intermediate-ca.pem b/boring/test/intermediate-ca.pem index cdbf77ce9..de781d59f 100644 --- a/boring/test/intermediate-ca.pem +++ b/boring/test/intermediate-ca.pem @@ -1,8 +1,8 @@ -----BEGIN CERTIFICATE----- -MIIDdTCCAl2gAwIBAgIUE+pcEHU5e4wkMpp2qoyHy+wH8aMwDQYJKoZIhvcNAQEL +MIIDdTCCAl2gAwIBAgIUQeD4g4nelXHXwl8LakilGvgxEwUwDQYJKoZIhvcNAQEL BQAwRTELMAkGA1UEBhMCQVUxEzARBgNVBAgMClNvbWUtU3RhdGUxITAfBgNVBAoM -GEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZDAeFw0yNDAxMDMxMDM0MDdaFw0yNjA4 -MTIxMDM0MDdaMFIxCzAJBgNVBAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMS4w +GEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZDAeFw0yNjA4MTUwMDUwMzZaFw0zNjA4 +MTIwMDUwMzZaMFIxCzAJBgNVBAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMS4w LAYDVQQKDCVJbnRlcm5ldCBXaWRnaXRzIFB0eSBMdGQgSW50ZXJtZWRpYXRlMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyZi0joAIH8M7GaitH27lQs1 XZaXwv5PI9bIeSkIX4BafIcUI7hdPLreJoP6EsuoswXyhgZU8FQvNRjMAGPzvVvi @@ -10,12 +10,12 @@ G+vY/l6jFI+JqW7Pphr35QJOjqxwW/K/wYei0FS6C3SF+CJ2yIgG4YlJM9Hoq/Ep fIxmyuZ2yHD/JiQ5kxNP7vKT77f7k5zpCVG1kiQZKQT4iysQDz2e1ozi3W7NCDqn vM9+EX1DREiCqRUwuzIuTlkAZ+8HpET5wS2Pm5uJQXDCid0slYMcuOL6JoHekbs6 9wkt4powcPPhXWoTCyUjpqsxw0KPiBzViJUsd8JUq8ge+jVqP2pzvkQk4BWTMwID -AQABo1AwTjAdBgNVHQ4EFgQUZ3ELefSmoenETTa39CQwVzdoLZcwHwYDVR0jBBgw -FoAUbNOlA6sNXyzJjYqciKeId7g3/ZowDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0B -AQsFAAOCAQEAHCXvCU1XQM5a7hhgrMcKQRto9GEVIljnPv5H7x+wPvCfR1By/kzI -fsl+hA1q02ymLtOW16aq4si4exsQl4SktC+5hyhu0yOCevRYXCcrh5NrNbwTFnK/ -LIP4dRz4XBxC9pYg0rqvo+v64at6EBTXxYfBHo9Cj0QuZIJoYmGEOojdE0PudZdc -b1iuXk9FZlUueFq8uSkHD7EpxonPS9iWQA5dbw1Q+0hWqvA/npAvFXBHkF/Jyaht -fpqoUrr4LYUr/ShC1IVHG7TAEElnOGz0dY6uxkr1B6YxBvCJ6gesk2cJBC1i3g9I -9xvt4zxQNQynX0IHcar8xfgZqD4ZdWQY0w== +AQABo1AwTjAMBgNVHRMEBTADAQH/MB0GA1UdDgQWBBRncQt59Kah6cRNNrf0JDBX +N2gtlzAfBgNVHSMEGDAWgBRs06UDqw1fLMmNipyIp4h3uDf9mjANBgkqhkiG9w0B +AQsFAAOCAQEAXgblFYXAmlOQ+T8G7Ju2EsAjjWyNL3oLLJB24P0noJlDIoZ4Hf24 +IGYetuXaWam8stIJZ1lBFyHNB9Df2yoR5rgXk11CpIzclZaTf1LXrc7/cMwQt8UN +hVz3v5NNVXAHK8K29PacZnENzB9mOD3mfVCOGupSS1pAKIEtCmGoMAgeQ8uVHxRI +tGmSaQHidD9GjI5+398/GhrPLF/A7GtSZjoLA1f56UBIvf0D6k+42f+nDKijotPE +tLqEO36nKnWtlLXOclkUOBluRvg/95pWJogKrX9A6P8NcYaReTIC6atF7aLgPNae +78pJM2bqkEBL9OciJSY1DjE9+Se+LgA+jg== -----END CERTIFICATE----- diff --git a/boring/test/root-ca-cross.pem b/boring/test/root-ca-cross.pem index 244ea4b9d..7a62d4883 100644 --- a/boring/test/root-ca-cross.pem +++ b/boring/test/root-ca-cross.pem @@ -1,21 +1,21 @@ -----BEGIN CERTIFICATE----- -MIIDajCCAlKgAwIBAgIUSYINSQdbr8yzV186s/zQj+2zol8wDQYJKoZIhvcNAQEL +MIIDajCCAlKgAwIBAgIUF+tVmwopEUE7qXIupQV/0Eg+00swDQYJKoZIhvcNAQEL BQAwRzELMAkGA1UEBhMCQVUxEzARBgNVBAgMClNvbWUtU3RhdGUxIzAhBgNVBAoM -GkludGVybmV0IFdpZGdpdHMgUHR5IEx0ZCAyMB4XDTI0MDEwMzEwMzUyM1oXDTI2 -MDgxMjEwMzUyM1owRTELMAkGA1UEBhMCQVUxEzARBgNVBAgMClNvbWUtU3RhdGUx +GkludGVybmV0IFdpZGdpdHMgUHR5IEx0ZCAyMB4XDTI2MDgxNTAwNTAzNloXDTM2 +MDgxMjAwNTAzNlowRTELMAkGA1UEBhMCQVUxEzARBgNVBAgMClNvbWUtU3RhdGUx ITAfBgNVBAoMGEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZDCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAK1R1hZ+di25dZefXsXbmZ7VUmcg2KcwzQ/kti1H Dun0QVoVf9Ss6MfthmabW7jBpnyN4gJ29AhU+Lgt5AZEEJV6JxgE0lcmhUxUfo6v 5XNEj/vQXe0gV4niFXiF5WNU75cCL49zbcPc1/rHEwOEl8R+jNKyr/YEzrm9rwjE h3hdel/A0K+F7GbkK+wqe49SOGqjicmqeSU5eYo5hvHJ7tJ/vFHEZQc8vfXS1iRt AHyN1USXVqRkzVWfdmhX390aStxf1iNoKd6ldcp0QCrr5p3Bgtyw72H3HNnYLHNT -ehX6vBiK5IEaG+ngXJJQx6dXdNty8K3vlWlQ0qNf/2O9lBcCAwEAAaNQME4wHQYD -VR0OBBYEFGzTpQOrDV8syY2KnIiniHe4N/2aMB8GA1UdIwQYMBaAFNa0LbQtmNk9 -B2QI80ZGnMhS1Qa/MAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBALw+ -mUsLEoqk6eI4jGv5TPP56RPMRdI+wwmQ8+sQ4DIOzDErkIIQMtoP3aqU6kstHrfY -RZ2tJSWfKb9GcE2SL5VtHQCjSJLsE7f+fTpCFn41q0QMsXF22IOxT2eDvK4Kb496 -NVulV6DhsHmbSjo6kla9U3Zqv4WiqLTNj757j+YgmplZQNx8vT5HkPIUi20IxEKV -m6CtPa0M2c2Hl/Y9v006AHmaXnabGvwnLsK92NV0oQb6KnB0mxOrL8od765SF9T0 -OXiNK/2ilN2UB1ft16GI/tU+2N+sTmW9/+S5lExfG/S3qXJwc1l4OC9tH9CxOtYt -6Q+cAmgl6qxF3ltltCM= +ehX6vBiK5IEaG+ngXJJQx6dXdNty8K3vlWlQ0qNf/2O9lBcCAwEAAaNQME4wDAYD +VR0TBAUwAwEB/zAdBgNVHQ4EFgQUbNOlA6sNXyzJjYqciKeId7g3/ZowHwYDVR0j +BBgwFoAU1rQttC2Y2T0HZAjzRkacyFLVBr8wDQYJKoZIhvcNAQELBQADggEBAGcr +zCvFMgq61f9S3k4Ggrf1xQN1/fAYknb7nBh4bA587RD31fMBeIsr2aDMRw9mtsFd +xiTAAKfR42gR2NnwMD6WEdp2WLINggSBMrl0cDK9AO0+Tjw8eV+kh/Ha8Z0ralpm +iD67cdxFdQuOefpnygyNyvD+IPWhKAHcZ0b2Zjw7APqdZaktUM/xXw6/mzXprvEG +5YA3VfJ9vatNr/C9Xtq4L9q4yitJxSRF4l0xj2fHG6pUHt3aD24zGTz4HeyhZVY4 +11B45gBZ8fWb5/GhdeJKBonjkm7+I4ai4725wyM3nLmIojTbo/gcgPmMEqpcSBMq +ilaDJt6UepiX3VxKnnY= -----END CERTIFICATE----- diff --git a/hyper-boring/tests/test/cert.pem b/hyper-boring/tests/test/cert.pem index 032fe60e9..2d42df400 100644 --- a/hyper-boring/tests/test/cert.pem +++ b/hyper-boring/tests/test/cert.pem @@ -1,19 +1,21 @@ -----BEGIN CERTIFICATE----- -MIIDGzCCAgMCCQCHcfe97pgvpTANBgkqhkiG9w0BAQsFADBFMQswCQYDVQQGEwJB -VTETMBEGA1UECAwKU29tZS1TdGF0ZTEhMB8GA1UECgwYSW50ZXJuZXQgV2lkZ2l0 -cyBQdHkgTHRkMB4XDTE2MDgxNDE3MDAwM1oXDTI2MDgxMjE3MDAwM1owWjELMAkG -A1UEBhMCQVUxEzARBgNVBAgMClNvbWUtU3RhdGUxITAfBgNVBAoMGEludGVybmV0 -IFdpZGdpdHMgUHR5IEx0ZDETMBEGA1UEAwwKZm9vYmFyLmNvbTCCASIwDQYJKoZI -hvcNAQEBBQADggEPADCCAQoCggEBAKj0JYxEsxejUIX+I5GH0Hg2G0kX/y1H0+Ub -3mw2/Ja5BD/yN96/7zMSumXF8uS3SkmpyiJkbyD01TSRTqjlP7/VCBlyUIChlpLQ -mrGaijZiT/VCyPXqmcwFzXS5IOTpX1olJfW8rA41U1LCIcDUyFf6LtZ/v8rSeKr6 -TuE6SGV4WRaBm1SrjWBeHVV866CRrtSS1ieT2asFsAyOZqWhk2fakwwBDFWDhOGI -ubfO+5aq9cBJbNRlzsgB3UZs3gC0O6GzbnZ6oT0TiJMeTsXXjABLUlaq/rrqFF4Y -euZkkbHTFBMz288PUc3m3ZTcpN+E7+ZOUBRZXKD20K07NugqCzUCAwEAATANBgkq -hkiG9w0BAQsFAAOCAQEASvYHuIl5C0NHBELPpVHNuLbQsDQNKVj3a54+9q1JkiMM -6taEJYfw7K1Xjm4RoiFSHpQBh+PWZS3hToToL2Zx8JfMR5MuAirdPAy1Sia/J/qE -wQdJccqmvuLkLTSlsGbEJ/LUUgOAgrgHOZM5lUgIhCneA0/dWJ3PsN0zvn69/faY -oo1iiolWiIHWWBUSdr3jM2AJaVAsTmLh00cKaDNk37JB940xConBGSl98JPrNrf9 -dUAiT0iIBngDBdHnn/yTj+InVEFyZSKrNtiDSObFHxPcxGteHNrCPJdP1e+GqkHp -HJMRZVCQpSMzvHlofHSNgzWV1MX5h1CP4SGZdBDTfA== +MIIDbzCCAlegAwIBAgIUDNUXWxAU+VLRW9sz9T4wWts/cgowDQYJKoZIhvcNAQEL +BQAwRTELMAkGA1UEBhMCQVUxEzARBgNVBAgMClNvbWUtU3RhdGUxITAfBgNVBAoM +GEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZDAeFw0yNjA4MTUwMDU0MDFaFw0zNjA4 +MTIwMDU0MDFaMFoxCzAJBgNVBAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEw +HwYDVQQKDBhJbnRlcm5ldCBXaWRnaXRzIFB0eSBMdGQxEzARBgNVBAMMCmZvb2Jh +ci5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo9CWMRLMXo1CF +/iORh9B4NhtJF/8tR9PlG95sNvyWuQQ/8jfev+8zErplxfLkt0pJqcoiZG8g9NU0 +kU6o5T+/1QgZclCAoZaS0Jqxmoo2Yk/1Qsj16pnMBc10uSDk6V9aJSX1vKwONVNS +wiHA1MhX+i7Wf7/K0niq+k7hOkhleFkWgZtUq41gXh1VfOugka7UktYnk9mrBbAM +jmaloZNn2pMMAQxVg4ThiLm3zvuWqvXASWzUZc7IAd1GbN4AtDuhs252eqE9E4iT +Hk7F14wAS1JWqv666hReGHrmZJGx0xQTM9vPD1HN5t2U3KTfhO/mTlAUWVyg9tCt +OzboKgs1AgMBAAGjQjBAMB0GA1UdDgQWBBS2cy9hpUuh70gsFbGf89w0L7ysMDAf +BgNVHSMEGDAWgBRs06UDqw1fLMmNipyIp4h3uDf9mjANBgkqhkiG9w0BAQsFAAOC +AQEAZF0wQYy8PDsHiSH+cr3oX2++UiX7KTt/izoDkp8L41TSkzCVGQbOT0nsWbVI +CoqjONnECKA5AHWSMO7zJlLMUq+qxzsTQRMhzbt6a7dZGyVXWGzNasVcOCojQ7uS +MMVlZ+DVJJtM9Eywbdpjot68xiqHysTVtwyj25T8DKPugfPyp2Io5HruMi7+0hiw +IycTyx8+Ar/UDGbs/gAYGRbJexuHCSzr9JmWUa7CxKF1Whymvm1FelSl3oExgnnI +OVGhDubxhX6GJI6TxxTNHzk1uS3aJZ0rDLmk/wY0qaiu8bfVmvvjZrUAut4Ra4QH +rMZwwHvxC6PMBe8WZ1rPNJ1EZg== -----END CERTIFICATE----- diff --git a/hyper-boring/tests/test/root-ca.pem b/hyper-boring/tests/test/root-ca.pem index 4ec2f5388..de346fd9b 100644 --- a/hyper-boring/tests/test/root-ca.pem +++ b/hyper-boring/tests/test/root-ca.pem @@ -1,21 +1,21 @@ -----BEGIN CERTIFICATE----- -MIIDXTCCAkWgAwIBAgIJAOIvDiVb18eVMA0GCSqGSIb3DQEBCwUAMEUxCzAJBgNV -BAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEwHwYDVQQKDBhJbnRlcm5ldCBX -aWRnaXRzIFB0eSBMdGQwHhcNMTYwODE0MTY1NjExWhcNMjYwODEyMTY1NjExWjBF -MQswCQYDVQQGEwJBVTETMBEGA1UECAwKU29tZS1TdGF0ZTEhMB8GA1UECgwYSW50 -ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB -CgKCAQEArVHWFn52Lbl1l59exduZntVSZyDYpzDND+S2LUcO6fRBWhV/1Kzox+2G -ZptbuMGmfI3iAnb0CFT4uC3kBkQQlXonGATSVyaFTFR+jq/lc0SP+9Bd7SBXieIV -eIXlY1TvlwIvj3Ntw9zX+scTA4SXxH6M0rKv9gTOub2vCMSHeF16X8DQr4XsZuQr -7Cp7j1I4aqOJyap5JTl5ijmG8cnu0n+8UcRlBzy99dLWJG0AfI3VRJdWpGTNVZ92 -aFff3RpK3F/WI2gp3qV1ynRAKuvmncGC3LDvYfcc2dgsc1N6Ffq8GIrkgRob6eBc -klDHp1d023Lwre+VaVDSo1//Y72UFwIDAQABo1AwTjAdBgNVHQ4EFgQUbNOlA6sN -XyzJjYqciKeId7g3/ZowHwYDVR0jBBgwFoAUbNOlA6sNXyzJjYqciKeId7g3/Zow -DAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAVVaR5QWLZIRR4Dw6TSBn -BQiLpBSXN6oAxdDw6n4PtwW6CzydaA+creiK6LfwEsiifUfQe9f+T+TBSpdIYtMv -Z2H2tjlFX8VrjUFvPrvn5c28CuLI0foBgY8XGSkR2YMYzWw2jPEq3Th/KM5Catn3 -AFm3bGKWMtGPR4v+90chEN0jzaAmJYRrVUh9vea27bOCn31Nse6XXQPmSI6Gyncy -OAPUsvPClF3IjeL1tmBotWqSGn1cYxLo+Lwjk22A9h6vjcNQRyZF2VLVvtwYrNU3 -mwJ6GCLsLHpwW/yjyvn8iEltnJvByM/eeRnfXV6WDObyiZsE/n6DxIRJodQzFqy9 -GA== +MIIDazCCAlOgAwIBAgIUNU3LSTZQNWd/O1VhgtuZbpOIarcwDQYJKoZIhvcNAQEL +BQAwRTELMAkGA1UEBhMCQVUxEzARBgNVBAgMClNvbWUtU3RhdGUxITAfBgNVBAoM +GEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZDAeFw0yNjA4MTUwMDU0MDFaFw0zNjA4 +MTIwMDU0MDFaMEUxCzAJBgNVBAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEw +HwYDVQQKDBhJbnRlcm5ldCBXaWRnaXRzIFB0eSBMdGQwggEiMA0GCSqGSIb3DQEB +AQUAA4IBDwAwggEKAoIBAQCtUdYWfnYtuXWXn17F25me1VJnINinMM0P5LYtRw7p +9EFaFX/UrOjH7YZmm1u4waZ8jeICdvQIVPi4LeQGRBCVeicYBNJXJoVMVH6Or+Vz +RI/70F3tIFeJ4hV4heVjVO+XAi+Pc23D3Nf6xxMDhJfEfozSsq/2BM65va8IxId4 +XXpfwNCvhexm5CvsKnuPUjhqo4nJqnklOXmKOYbxye7Sf7xRxGUHPL310tYkbQB8 +jdVEl1akZM1Vn3ZoV9/dGkrcX9YjaCnepXXKdEAq6+adwYLcsO9h9xzZ2CxzU3oV ++rwYiuSBGhvp4FySUMenV3TbcvCt75VpUNKjX/9jvZQXAgMBAAGjUzBRMB0GA1Ud +DgQWBBRs06UDqw1fLMmNipyIp4h3uDf9mjAfBgNVHSMEGDAWgBRs06UDqw1fLMmN +ipyIp4h3uDf9mjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQA0 +OLtYJRbQOchTqnftKqdb+6C+Q+i0K08woQZvcjzYxG0KNhKlmEEynEUUqDAnQ6z7 +V3/HcEPZ/qBcsQ0yDFKslkNXSZU4r50/ASCe33v8X+17cO9/90gc28vGStKGlGez +Isx61CKN52jMaf4PlwxsNYPcnoAKBLgiK2iZSMEUSFREmCHt7kyPeB4/pvc/UwYs +cUQDSniZ1VTqtfofCSMkw2aJbCFJdE5ckPjPkV3bHQ3ZluNWYCF7qebn/2MU+56/ +lhsXPRaeJq7DmyRPSCRzS4rM/ovA4P7MeI8+xLB+mIQiYE8CmHYTFzcxxseBdumD +xv05owFiWyalbrgXNz16 -----END CERTIFICATE----- From 4b65691274ed1cd591ab84cec8ed372bd59bac2d Mon Sep 17 00:00:00 2001 From: Kornel Date: Sat, 15 Aug 2026 01:49:29 +0100 Subject: [PATCH 5/5] Clippy --- boring-sys/build/main.rs | 10 +++++----- boring-sys/src/lib.rs | 3 ++- boring/src/hash.rs | 1 - boring/src/rsa.rs | 24 ++++++++++++------------ boring/src/ssl/error.rs | 2 +- boring/src/ssl/test/mod.rs | 5 +---- boring/src/stack.rs | 11 +++++------ boring/src/x509/mod.rs | 6 +++--- hyper-boring/src/v1.rs | 2 +- 9 files changed, 30 insertions(+), 34 deletions(-) diff --git a/boring-sys/build/main.rs b/boring-sys/build/main.rs index 624225540..a6bb4bd47 100644 --- a/boring-sys/build/main.rs +++ b/boring-sys/build/main.rs @@ -394,7 +394,7 @@ fn get_boringssl_cmake_config(config: &Config) -> cmake::Config { } fn pick_best_android_ndk_toolchain(toolchains_dir: &Path) -> io::Result { - let toolchains = std::fs::read_dir(toolchains_dir)?.collect::, _>>()?; + let toolchains = fs::read_dir(toolchains_dir)?.collect::, _>>()?; // First look for one of the toolchains that Google has documented. // https://developer.android.com/ndk/guides/other_build_systems for known_toolchain in ["linux-x86_64", "darwin-x86_64", "windows-x86_64"] { @@ -414,8 +414,8 @@ fn pick_best_android_ndk_toolchain(toolchains_dir: &Path) -> io::Result io::Result { ) })?; - std::io::stderr().write_all(&out.stderr)?; - std::io::stdout().write_all(&out.stdout)?; + io::stderr().write_all(&out.stderr)?; + io::stdout().write_all(&out.stdout)?; if !out.status.success() { let err = match out.status.code() { diff --git a/boring-sys/src/lib.rs b/boring-sys/src/lib.rs index 9788ed04c..8572fbb4c 100644 --- a/boring-sys/src/lib.rs +++ b/boring-sys/src/lib.rs @@ -19,7 +19,8 @@ use std::os::raw::{c_char, c_int, c_uint, c_ulong}; clippy::useless_transmute, clippy::derive_partial_eq_without_eq, clippy::ptr_offset_with_cast, - dead_code + dead_code, + unnecessary_transmutes )] mod generated { include!(concat!(env!("OUT_DIR"), "/bindings.rs")); diff --git a/boring/src/hash.rs b/boring/src/hash.rs index 543e401fd..4a16941f1 100644 --- a/boring/src/hash.rs +++ b/boring/src/hash.rs @@ -387,7 +387,6 @@ pub(crate) fn hmac( #[cfg(test)] mod tests { use hex::{self, FromHex}; - use std::io::prelude::*; use super::*; diff --git a/boring/src/rsa.rs b/boring/src/rsa.rs index 49f955bda..bccc919e8 100644 --- a/boring/src/rsa.rs +++ b/boring/src/rsa.rs @@ -673,9 +673,9 @@ mod test { #[test] fn test_private_encrypt() { - let k0 = super::Rsa::generate(512).unwrap(); + let k0 = Rsa::generate(512).unwrap(); let k0pkey = k0.public_key_to_pem().unwrap(); - let k1 = super::Rsa::public_key_from_pem(&k0pkey).unwrap(); + let k1 = Rsa::public_key_from_pem(&k0pkey).unwrap(); let msg = vec![0xdeu8, 0xadu8, 0xd0u8, 0x0du8]; @@ -691,9 +691,9 @@ mod test { #[test] fn test_public_encrypt() { - let k0 = super::Rsa::generate(512).unwrap(); + let k0 = Rsa::generate(512).unwrap(); let k0pkey = k0.private_key_to_pem().unwrap(); - let k1 = super::Rsa::private_key_from_pem(&k0pkey).unwrap(); + let k1 = Rsa::private_key_from_pem(&k0pkey).unwrap(); let msg = vec![0xdeu8, 0xadu8, 0xd0u8, 0x0du8]; @@ -721,24 +721,24 @@ mod test { #[test] fn test_public_key_to_pem_pkcs1() { - let keypair = super::Rsa::generate(512).unwrap(); + let keypair = Rsa::generate(512).unwrap(); let pubkey_pem = keypair.public_key_to_pem_pkcs1().unwrap(); - super::Rsa::public_key_from_pem_pkcs1(&pubkey_pem).unwrap(); + Rsa::public_key_from_pem_pkcs1(&pubkey_pem).unwrap(); } #[test] #[should_panic] fn test_public_key_from_pem_pkcs1_generate_panic() { - let keypair = super::Rsa::generate(512).unwrap(); + let keypair = Rsa::generate(512).unwrap(); let pubkey_pem = keypair.public_key_to_pem().unwrap(); - super::Rsa::public_key_from_pem_pkcs1(&pubkey_pem).unwrap(); + Rsa::public_key_from_pem_pkcs1(&pubkey_pem).unwrap(); } #[test] fn test_pem_pkcs1_encrypt() { - let keypair = super::Rsa::generate(2048).unwrap(); + let keypair = Rsa::generate(2048).unwrap(); let pubkey_pem = keypair.public_key_to_pem_pkcs1().unwrap(); - let pubkey = super::Rsa::public_key_from_pem_pkcs1(&pubkey_pem).unwrap(); + let pubkey = Rsa::public_key_from_pem_pkcs1(&pubkey_pem).unwrap(); let msg = b"Hello, world!"; let mut encrypted = vec![0; pubkey.size() as usize]; @@ -756,9 +756,9 @@ mod test { #[test] fn test_pem_pkcs1_padding() { - let keypair = super::Rsa::generate(2048).unwrap(); + let keypair = Rsa::generate(2048).unwrap(); let pubkey_pem = keypair.public_key_to_pem_pkcs1().unwrap(); - let pubkey = super::Rsa::public_key_from_pem_pkcs1(&pubkey_pem).unwrap(); + let pubkey = Rsa::public_key_from_pem_pkcs1(&pubkey_pem).unwrap(); let msg = b"foo"; let mut encrypted1 = vec![0; pubkey.size() as usize]; diff --git a/boring/src/ssl/error.rs b/boring/src/ssl/error.rs index 1766724cb..f523f66f7 100644 --- a/boring/src/ssl/error.rs +++ b/boring/src/ssl/error.rs @@ -251,7 +251,7 @@ fn fmt_mid_handshake_error( prefix: &str, ) -> fmt::Result { if !s.ssl().ssl_context().has_x509_support() { - write!(f, "{}", prefix)?; + write!(f, "{prefix}")?; return write!(f, " {}", s.error()); } diff --git a/boring/src/ssl/test/mod.rs b/boring/src/ssl/test/mod.rs index b713a37ac..f0af8a688 100644 --- a/boring/src/ssl/test/mod.rs +++ b/boring/src/ssl/test/mod.rs @@ -76,10 +76,7 @@ fn peer_certificate() { let s = server.client().connect(); let cert = s.ssl().peer_certificate().unwrap(); let fingerprint = cert.digest(MessageDigest::sha1()).unwrap(); - assert_eq!( - hex::encode(fingerprint), - TEST_CERT_DIGEST - ); + assert_eq!(hex::encode(fingerprint), TEST_CERT_DIGEST); } #[test] diff --git a/boring/src/stack.rs b/boring/src/stack.rs index 63294e5fc..a0ceb1f11 100644 --- a/boring/src/stack.rs +++ b/boring/src/stack.rs @@ -4,7 +4,6 @@ use libc::size_t; use std::borrow::Borrow; use std::convert::AsRef; use std::fmt; -use std::iter; use std::marker::PhantomData; use std::mem; use std::ops::{Deref, DerefMut, Index, IndexMut, Range}; @@ -63,7 +62,7 @@ impl Stack { } } -impl iter::IntoIterator for Stack { +impl IntoIterator for Stack { type IntoIter = IntoIter; type Item = T; @@ -271,7 +270,7 @@ impl IndexMut for StackRef { } } -impl<'a, T: Stackable> iter::IntoIterator for &'a StackRef { +impl<'a, T: Stackable> IntoIterator for &'a StackRef { type Item = &'a T::Ref; type IntoIter = Iter<'a, T>; @@ -280,7 +279,7 @@ impl<'a, T: Stackable> iter::IntoIterator for &'a StackRef { } } -impl<'a, T: Stackable> iter::IntoIterator for &'a mut StackRef { +impl<'a, T: Stackable> IntoIterator for &'a mut StackRef { type Item = &'a mut T::Ref; type IntoIter = IterMut<'a, T>; @@ -289,7 +288,7 @@ impl<'a, T: Stackable> iter::IntoIterator for &'a mut StackRef { } } -impl<'a, T: Stackable> iter::IntoIterator for &'a Stack { +impl<'a, T: Stackable> IntoIterator for &'a Stack { type Item = &'a T::Ref; type IntoIter = Iter<'a, T>; @@ -298,7 +297,7 @@ impl<'a, T: Stackable> iter::IntoIterator for &'a Stack { } } -impl<'a, T: Stackable> iter::IntoIterator for &'a mut Stack { +impl<'a, T: Stackable> IntoIterator for &'a mut Stack { type Item = &'a mut T::Ref; type IntoIter = IterMut<'a, T>; diff --git a/boring/src/x509/mod.rs b/boring/src/x509/mod.rs index 3134f703f..1ccb1349b 100644 --- a/boring/src/x509/mod.rs +++ b/boring/src/x509/mod.rs @@ -723,7 +723,7 @@ impl X509Ref { host.as_ptr().cast(), host.len(), 0, - std::ptr::null_mut(), + ptr::null_mut(), )) .map(|n| n == 1) } @@ -832,9 +832,9 @@ impl fmt::Debug for X509 { let serial = match &self.serial_number().to_bn() { Ok(bn) => match bn.to_hex_str() { Ok(hex) => hex.to_string(), - Err(_) => "".to_string(), + Err(_) => String::new(), }, - Err(_) => "".to_string(), + Err(_) => String::new(), }; let mut debug_struct = formatter.debug_struct("X509"); debug_struct.field("serial_number", &serial); diff --git a/hyper-boring/src/v1.rs b/hyper-boring/src/v1.rs index 38b454229..5b87c010e 100644 --- a/hyper-boring/src/v1.rs +++ b/hyper-boring/src/v1.rs @@ -300,7 +300,7 @@ where mut self: Pin<&mut Self>, cx: &mut Context<'_>, buf: ReadBufCursor<'_>, - ) -> Poll> { + ) -> Poll> { match &mut *self { MaybeHttpsStream::Http(inner) => Pin::new(&mut TokioIo::new(inner)).poll_read(cx, buf), MaybeHttpsStream::Https(inner) => Pin::new(&mut TokioIo::new(inner)).poll_read(cx, buf),