Update testing certificates

Keys are now 2048 bits long so systems with hardened crypto policies
will not have problem with them.

Add readme describing process how to generate certificates.

1 files changed, 63 insertions, 59 deletions

diff --git a/t/client_crt.pem b/t/client_crt.pem
index f9031ee..cff63ad 100644
--- a/t/client_crt.pem
+++ b/t/client_crt.pem
@@ -1,68 +1,72 @@
 Certificate:
     Data:
-        Version: 3 (0x2)
-        Serial Number: 2 (0x2)
-    Signature Algorithm: sha1WithRSAEncryption
-        Issuer: CN=Test Root Certificate Authority, ST=CA, C=US/emailAddress=root@test.com, O=Test, OU=Test Department
+        Version: 1 (0x0)
+        Serial Number:
+            71:a5:f7:f3:8f:7e:0a:d7:79:ce:b6:eb:01:60:ac:00:c3:76:5a:9f
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN = Test Root Certificate Authority, ST = CA, C = US, emailAddress = root@test.com, O = Test, OU = Test Department
         Validity
-            Not Before: Jan  7 19:26:14 2019 GMT
-            Not After : Jan  6 19:26:14 2024 GMT
-        Subject: CN=client.test.com, ST=CA, C=US/emailAddress=root@client.test.com, O=Test Client, OU=Subunit of Test Organization
+            Not Before: Apr 27 06:57:23 2020 GMT
+            Not After : Apr 26 06:57:23 2025 GMT
+        Subject: C = US, ST = CA, O = Test Client, OU = Subunit of Test Organization, CN = client.test.com, emailAddress = root@client.test.com
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:a6:a4:24:19:14:9e:96:0a:3e:b8:14:7b:e9:04:
-                    ca:a0:ef:61:1a:e6:63:84:51:34:10:58:9e:f2:6f:
-                    9d:27:64:e5:a9:32:02:e2:fb:f0:c5:47:d0:b2:8f:
-                    f4:19:71:2a:de:f8:de:ae:cb:0b:41:cf:cc:76:63:
-                    9b:4a:9b:12:50:5f:b9:b4:fc:e3:fd:05:85:7f:a7:
-                    1c:ad:ec:d1:40:70:fa:4c:51:88:a3:d4:e5:49:b2:
-                    72:7c:2e:4d:c5:00:ae:40:96:15:84:34:5f:99:75:
-                    7b:6a:00:d3:ec:a0:7d:82:d3:71:a3:79:cc:d4:4c:
-                    3b:50:49:d0:9b:27:e4:0b:cb
+                    00:9e:9a:94:cc:21:a4:01:ec:9d:c4:37:41:8c:62:
+                    f6:05:f2:f0:b2:89:a5:8c:62:40:78:7d:91:6e:15:
+                    76:97:c0:0e:e0:d1:12:77:cf:51:42:f9:6e:1a:eb:
+                    9a:24:c6:5c:5d:0b:8c:04:5f:4f:9c:f2:be:03:9f:
+                    e2:b9:07:21:eb:7f:7d:0e:31:b2:c4:3c:86:d7:83:
+                    bc:75:b6:02:d6:6b:37:da:70:ed:14:83:59:dd:18:
+                    8f:06:55:20:26:d3:fc:3c:9a:0c:a2:66:14:a5:5f:
+                    b8:cc:9f:76:cb:f1:47:61:6b:0e:9e:58:ba:f7:58:
+                    89:64:39:08:23:cb:77:86:29:a9:55:79:52:4f:b7:
+                    92:36:8e:3e:c2:c6:2f:ea:25:86:8b:88:91:16:90:
+                    c8:ca:36:15:97:56:2f:7c:a9:a7:32:04:9b:af:71:
+                    a8:34:6d:5b:b7:3e:a5:6d:90:c3:71:c7:b3:c1:7e:
+                    88:3c:fe:1a:58:22:be:a5:1b:92:69:d1:d9:42:21:
+                    62:33:11:05:d0:92:d8:af:53:c3:f3:3a:17:49:dc:
+                    b8:5b:22:5a:4d:37:0c:fe:bf:c2:ca:ae:db:50:ab:
+                    3c:c5:b4:43:64:18:ef:3e:cf:7b:b2:b7:f0:0c:80:
+                    6f:bd:25:34:31:e4:77:e4:8c:73:6f:72:3f:2c:32:
+                    10:27
                 Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Basic Constraints:
-                CA:FALSE
-            X509v3 Key Usage:
-                Digital Signature, Non Repudiation, Key Encipherment
-            X509v3 Subject Alternative Name:
-                DNS:client.test.com, DNS:alt.client.test.com
-    Signature Algorithm: sha1WithRSAEncryption
-         4f:11:ff:ed:05:e2:80:75:bd:e0:b3:f3:21:34:65:50:67:ff:
-         3c:45:88:58:58:77:9a:6e:f6:1e:74:f9:cb:02:e1:31:e0:52:
-         d9:f9:63:e5:fb:01:d2:83:df:20:c1:77:a7:15:da:18:3a:e0:
-         ea:e0:66:ab:41:21:9e:36:9c:36:28:1c:cb:20:43:94:94:e8:
-         9b:0d:3d:2a:ac:20:48:5b:b8:c0:45:0d:5c:30:91:be:ba:67:
-         b9:f6:bd:64:08:ab:af:35:a1:db:dd:54:e8:32:c9:3a:95:34:
-         26:8f:a1:1b:a1:a2:32:47:a0:e0:a4:11:06:dc:d2:67:87:1a:
-         51:50:bc:09:26:e3:1c:e7:83:a5:69:48:92:6c:87:94:46:f6:
-         b2:45:55:6f:5e:f2:6b:c8:9d:65:61:31:83:09:71:60:71:d5:
-         9c:44:65:27:f6:3f:fd:fb:40:30:47:02:b1:6f:5a:ff:7a:c5:
-         83:e0:80:52:53:a7:2c:24:71:51:81:df:3f:2f:1d:42:df:bc:
-         86:b4:0c:18:64:8d:33:a7:c0:e8:f2:9e:f5:0b:92:c4:4d:f7:
-         4b:2f:13:8d:81:25:f3:47:f5:72:71:c2:62:3d:36:09:3c:ec:
-         d1:15:6d:15:77:28:c6:de:f9:73:5d:5b:a0:a4:0f:f2:50:a0:
-         00:20:87:fa
+    Signature Algorithm: sha256WithRSAEncryption
+         aa:c0:5a:6b:d6:2f:24:b1:fe:01:3a:78:a7:6d:19:82:d3:1a:
+         40:8e:6b:c3:9e:8e:8d:e0:8a:25:28:8e:92:b4:8e:05:ac:a1:
+         65:7c:a0:7e:89:82:e3:17:41:16:ec:95:76:83:5b:a9:36:eb:
+         fb:6e:d6:37:73:ab:46:23:9d:c9:99:72:1c:0c:25:e8:e7:22:
+         4c:20:b0:05:3a:95:57:ce:1f:93:82:3f:2b:e6:72:b7:67:d3:
+         83:ce:73:8d:fb:69:64:d5:a6:52:3a:6e:a2:0d:15:05:79:c1:
+         60:d8:03:4a:f6:d6:63:f7:f4:43:92:4f:eb:2f:53:44:9b:c8:
+         33:7b:9a:a2:10:54:71:cd:4c:6a:a0:51:4c:4a:d6:26:cb:21:
+         14:f0:54:2a:e8:b5:b9:cc:b2:6f:17:75:de:04:cd:70:52:00:
+         c6:93:66:b4:c3:f3:8e:73:c9:4f:0a:b0:3b:11:36:88:77:d4:
+         b6:5b:a2:ea:db:df:90:b1:d9:a5:86:a7:74:82:60:10:b2:c1:
+         32:3b:a7:b9:87:61:66:96:37:e3:62:ff:7a:56:e4:ec:7c:73:
+         16:c8:16:a2:81:49:19:39:7b:3f:f2:a1:e2:58:8f:ef:c8:2d:
+         b5:a3:c6:22:d1:22:91:d9:6e:9a:2c:87:56:52:d0:e9:a6:fe:
+         e6:44:4f:8e
 -----BEGIN CERTIFICATE-----
-MIIDZTCCAk2gAwIBAgIBAjANBgkqhkiG9w0BAQUFADCBizEoMCYGA1UEAwwfVGVz
-dCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eTELMAkGA1UECAwCQ0ExCzAJBgNV
-BAYTAlVTMRwwGgYJKoZIhvcNAQkBFg1yb290QHRlc3QuY29tMQ0wCwYDVQQKDARU
-ZXN0MRgwFgYDVQQLDA9UZXN0IERlcGFydG1lbnQwHhcNMTkwMTA3MTkyNjE0WhcN
-MjQwMTA2MTkyNjE0WjCBljEYMBYGA1UEAwwPY2xpZW50LnRlc3QuY29tMQswCQYD
-VQQIDAJDQTELMAkGA1UEBhMCVVMxIzAhBgkqhkiG9w0BCQEWFHJvb3RAY2xpZW50
-LnRlc3QuY29tMRQwEgYDVQQKDAtUZXN0IENsaWVudDElMCMGA1UECwwcU3VidW5p
-dCBvZiBUZXN0IE9yZ2FuaXphdGlvbjCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkC
-gYEApqQkGRSelgo+uBR76QTKoO9hGuZjhFE0EFie8m+dJ2TlqTIC4vvwxUfQso/0
-GXEq3vjerssLQc/MdmObSpsSUF+5tPzj/QWFf6ccrezRQHD6TFGIo9TlSbJyfC5N
-xQCuQJYVhDRfmXV7agDT7KB9gtNxo3nM1Ew7UEnQmyfkC8sCAwEAAaNLMEkwCQYD
-VR0TBAIwADALBgNVHQ8EBAMCBeAwLwYDVR0RBCgwJoIPY2xpZW50LnRlc3QuY29t
-ghNhbHQuY2xpZW50LnRlc3QuY29tMA0GCSqGSIb3DQEBBQUAA4IBAQBPEf/tBeKA
-db3gs/MhNGVQZ/88RYhYWHeabvYedPnLAuEx4FLZ+WPl+wHSg98gwXenFdoYOuDq
-4GarQSGeNpw2KBzLIEOUlOibDT0qrCBIW7jARQ1cMJG+ume59r1kCKuvNaHb3VTo
-Msk6lTQmj6EboaIyR6DgpBEG3NJnhxpRULwJJuMc54OlaUiSbIeURvayRVVvXvJr
-yJ1lYTGDCXFgcdWcRGUn9j/9+0AwRwKxb1r/esWD4IBSU6csJHFRgd8/Lx1C37yG
-tAwYZI0zp8Do8p71C5LETfdLLxONgSXzR/VyccJiPTYJPOzRFW0VdyjG3vlzXVug
-pA/yUKAAIIf6
+MIIDqjCCApICFHGl9/OPfgrXec626wFgrADDdlqfMA0GCSqGSIb3DQEBCwUAMIGL
+MSgwJgYDVQQDDB9UZXN0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5MQswCQYD
+VQQIDAJDQTELMAkGA1UEBhMCVVMxHDAaBgkqhkiG9w0BCQEWDXJvb3RAdGVzdC5j
+b20xDTALBgNVBAoMBFRlc3QxGDAWBgNVBAsMD1Rlc3QgRGVwYXJ0bWVudDAeFw0y
+MDA0MjcwNjU3MjNaFw0yNTA0MjYwNjU3MjNaMIGWMQswCQYDVQQGEwJVUzELMAkG
+A1UECAwCQ0ExFDASBgNVBAoMC1Rlc3QgQ2xpZW50MSUwIwYDVQQLDBxTdWJ1bml0
+IG9mIFRlc3QgT3JnYW5pemF0aW9uMRgwFgYDVQQDDA9jbGllbnQudGVzdC5jb20x
+IzAhBgkqhkiG9w0BCQEWFHJvb3RAY2xpZW50LnRlc3QuY29tMIIBIjANBgkqhkiG
+9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpqUzCGkAeydxDdBjGL2BfLwsomljGJAeH2R
+bhV2l8AO4NESd89RQvluGuuaJMZcXQuMBF9PnPK+A5/iuQch6399DjGyxDyG14O8
+dbYC1ms32nDtFINZ3RiPBlUgJtP8PJoMomYUpV+4zJ92y/FHYWsOnli691iJZDkI
+I8t3himpVXlST7eSNo4+wsYv6iWGi4iRFpDIyjYVl1YvfKmnMgSbr3GoNG1btz6l
+bZDDccezwX6IPP4aWCK+pRuSadHZQiFiMxEF0JLYr1PD8zoXSdy4WyJaTTcM/r/C
+yq7bUKs8xbRDZBjvPs97srfwDIBvvSU0MeR35Ixzb3I/LDIQJwIDAQABMA0GCSqG
+SIb3DQEBCwUAA4IBAQCqwFpr1i8ksf4BOninbRmC0xpAjmvDno6N4IolKI6StI4F
+rKFlfKB+iYLjF0EW7JV2g1upNuv7btY3c6tGI53JmXIcDCXo5yJMILAFOpVXzh+T
+gj8r5nK3Z9ODznON+2lk1aZSOm6iDRUFecFg2ANK9tZj9/RDkk/rL1NEm8gze5qi
+EFRxzUxqoFFMStYmyyEU8FQq6LW5zLJvF3XeBM1wUgDGk2a0w/OOc8lPCrA7ETaI
+d9S2W6Lq29+Qsdmlhqd0gmAQssEyO6e5h2FmljfjYv96VuTsfHMWyBaigUkZOXs/
+8qHiWI/vyC21o8Yi0SKR2W6aLIdWUtDppv7mRE+O
 -----END CERTIFICATE-----