1 files changed, 119 insertions, 68 deletions
diff --git a/test/keys/CA.pem b/test/keys/CA.pem
index a747b9aca..2d1cc26f1 100644
--- a/test/keys/CA.pem
+++ b/test/keys/CA.pem
@@ -1,82 +1,133 @@
 Certificate:
     Data:
         Version: 3 (0x2)
-        Serial Number: 16582080088954381212 (0xe61f61fc3b34239c)
-    Signature Algorithm: sha1WithRSAEncryption
-        Issuer: C=US, ST=Maryland, L=Forest Hill, O=The Apache Software Foundation, OU=Apache Thrift, CN=localhost/emailAddress=dev@thrift.apache.org
+        Serial Number:
+            0c:6f:84:20:71:35:10:57:ae:8f:47:5d:5a:dc:46:40:03:da:b6:df
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN = localhost, emailAddress = dev@thrift.apache.org, OU = Apache Thrift, O = The Apache Software Foundation, L = Forest Hill, ST = Maryland, C = US
         Validity
-            Not Before: Apr  7 18:58:00 2014 GMT
-            Not After : Jun 24 18:58:00 2022 GMT
-        Subject: C=US, ST=Maryland, L=Forest Hill, O=The Apache Software Foundation, OU=Apache Thrift, CN=localhost/emailAddress=dev@thrift.apache.org
+            Not Before: Jun 30 22:37:28 2022 GMT
+            Not After : Sep 16 22:37:28 2030 GMT
+        Subject: CN = localhost, emailAddress = dev@thrift.apache.org, OU = Apache Thrift, O = The Apache Software Foundation, L = Forest Hill, ST = Maryland, C = US
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                Public-Key: (2048 bit)
+                RSA Public-Key: (4096 bit)
                 Modulus:
-                    00:aa:13:d4:c4:f7:01:17:a7:92:d1:b4:b4:15:0d:
-                    21:90:19:5e:fc:fb:b6:6d:3f:f2:3f:65:a2:7a:43:
-                    a6:46:95:fc:43:16:f6:63:14:5e:f7:b1:e3:61:02:
-                    f9:4a:95:89:bf:8d:f9:48:1d:82:e7:34:e0:b2:48:
-                    df:08:d9:7c:3a:2f:d3:1b:0b:e8:ef:c2:41:0a:7d:
-                    0a:38:78:3a:31:66:73:99:8c:d1:79:27:5f:e5:66:
-                    d0:5e:3a:8c:0c:92:18:73:04:c1:f5:45:db:37:e7:
-                    5f:c7:8c:a3:60:e9:92:a0:d8:29:5d:77:48:fb:1d:
-                    b0:ed:12:2c:4e:2e:02:db:3d:1a:41:71:a6:2b:2e:
-                    b3:4c:6a:c7:f7:1d:a9:7e:c7:cf:db:f2:e7:b6:f3:
-                    1f:77:1d:24:01:1a:66:66:30:85:30:02:29:c4:bb:
-                    f7:cd:3f:89:4b:1a:5f:f4:91:96:fb:e9:39:f2:46:
-                    96:12:3d:8a:23:b5:2e:82:9e:41:fe:40:b6:27:b1:
-                    14:44:5c:96:30:0f:55:e4:bb:ad:8b:8a:99:17:c0:
-                    29:11:4e:76:79:9d:4b:03:31:7e:85:3c:a8:23:40:
-                    54:02:58:35:c6:fc:dd:3d:eb:e3:d1:51:00:02:86:
-                    1a:d7:b0:9f:a0:17:73:6a:5a:d0:e6:b6:b8:55:40:
-                    5e:27
+                    00:cf:ee:6a:6d:c1:5e:32:34:c7:a8:5f:76:a7:6b:
+                    e0:04:db:88:30:3b:9e:20:fc:31:28:69:ca:a0:66:
+                    76:93:16:bb:b9:e0:f7:58:2b:64:f0:83:97:b4:ff:
+                    eb:10:ab:75:3f:76:34:8e:e6:0a:99:c0:e6:10:4a:
+                    ff:45:bc:fb:96:3c:36:72:a3:93:06:72:9b:d1:f9:
+                    90:ed:7c:15:0f:a1:1f:59:89:ab:76:f1:e7:b9:b1:
+                    b1:90:04:d4:8c:1b:af:6d:56:fc:ac:61:e8:9c:76:
+                    ef:d6:b2:cb:05:40:53:a9:7d:70:7f:da:4b:9b:77:
+                    a6:5d:2a:65:4c:ac:06:2d:e6:7b:62:7c:f3:3e:a8:
+                    60:0d:c5:35:16:b1:5f:79:0e:e0:8f:22:26:36:2e:
+                    bc:87:e9:5a:65:df:f0:1c:bf:4c:e2:f3:36:44:75:
+                    a4:92:d7:7b:ce:3d:b4:01:ab:4e:d9:be:82:82:f0:
+                    e7:d4:4c:84:88:31:95:2d:39:0c:7d:e7:18:d2:9a:
+                    99:64:38:82:bd:87:e5:da:3e:da:91:73:2a:8a:26:
+                    e2:f0:ab:c8:a8:1c:fc:d5:f2:11:03:5c:ff:51:51:
+                    26:c8:b7:fd:72:bf:36:57:b3:a0:fc:3e:c5:5d:f7:
+                    01:e0:e8:a6:69:8a:56:c4:38:44:93:8d:c9:59:60:
+                    92:c0:83:d9:0d:a8:76:b0:91:fe:bc:aa:8a:b0:39:
+                    05:31:fc:a5:01:5f:bc:24:1f:af:81:ba:ce:44:b3:
+                    48:30:53:0b:d6:48:d8:82:31:24:5b:3c:ee:65:69:
+                    72:ef:b4:9f:eb:b8:f3:6b:dd:c2:c5:00:78:1c:84:
+                    de:8a:40:f7:d3:18:ae:5a:d9:0e:32:d8:97:8d:18:
+                    d2:4c:d6:1c:ae:36:22:cd:e2:07:3d:37:07:85:45:
+                    29:4a:ec:51:76:b9:6d:ca:ae:60:f9:2b:d6:85:72:
+                    71:a9:87:d5:04:f0:5e:d8:24:53:a0:ec:a4:08:ee:
+                    47:7b:54:41:3e:22:ee:c4:84:9e:85:7c:a4:69:74:
+                    80:b5:a9:18:00:71:84:67:5e:d1:9d:15:ff:1d:78:
+                    04:d1:49:f9:91:b6:ba:25:29:2e:f3:09:b2:1a:81:
+                    95:ed:64:22:3f:82:ab:24:90:31:cd:e6:16:99:1d:
+                    05:35:19:9f:25:55:b9:54:5c:eb:ea:06:19:f0:6e:
+                    8c:eb:ea:14:ab:92:f6:b3:a1:a4:24:81:05:5c:1b:
+                    ab:9f:e5:3d:28:2d:bf:2d:ae:06:28:93:c2:51:4b:
+                    32:03:ef:57:ae:97:c5:01:9b:6e:04:f1:3a:32:1d:
+                    ac:bd:62:ea:c9:83:ff:a4:57:91:b2:0c:28:e1:5b:
+                    fe:8e:0d
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                28:F2:FD:30:CD:03:F1:DC:41:1E:C4:93:C6:97:13:CA:D4:FA:60:2A
+                A8:04:E1:24:70:5A:ED:9C:C4:38:63:CD:E7:F8:79:49:94:9D:1D:DA
             X509v3 Authority Key Identifier: 
-                keyid:28:F2:FD:30:CD:03:F1:DC:41:1E:C4:93:C6:97:13:CA:D4:FA:60:2A
+                keyid:A8:04:E1:24:70:5A:ED:9C:C4:38:63:CD:E7:F8:79:49:94:9D:1D:DA
 
-            X509v3 Basic Constraints: 
-                CA:TRUE
-    Signature Algorithm: sha1WithRSAEncryption
-         46:15:18:89:b2:57:17:d1:a2:64:c1:9a:73:4f:04:94:76:07:
-         1f:29:ba:6f:34:46:c2:36:d5:68:85:f4:15:4c:8e:1a:fe:83:
-         79:53:ec:aa:0d:92:60:de:f3:9a:3a:e8:80:66:ac:87:70:89:
-         59:f2:ac:9e:b0:28:11:37:7d:78:4e:5e:3f:25:0f:be:09:6f:
-         26:2a:3d:66:79:38:28:e5:81:71:71:96:26:4f:db:ec:23:70:
-         be:37:39:fc:e0:32:0d:80:8f:66:c7:ac:a4:b4:8b:77:40:e2:
-         99:44:3a:73:c8:f9:14:cf:1b:32:27:c2:78:db:b0:da:8a:60:
-         eb:8d:34:7e:7d:3c:03:d4:38:74:f7:17:9e:32:74:9a:e7:37:
-         95:d4:71:03:c8:94:ea:09:7b:ad:2d:eb:70:43:f2:32:7e:63:
-         01:84:8c:7e:9e:f0:79:7f:ae:e9:cf:f9:be:0e:fe:95:d2:bd:
-         c8:a7:81:c2:71:d9:c3:50:31:89:6d:fa:ad:a2:ab:00:01:34:
-         10:58:ef:96:5a:eb:30:07:a9:8e:84:36:ef:3d:3c:61:46:96:
-         6a:e8:09:20:5a:ab:f8:4b:eb:b7:33:61:8e:af:9a:7d:16:b0:
-         60:6a:f0:30:e5:b2:8e:e7:80:b4:a1:02:a9:37:fe:5f:b5:ae:
-         65:e9:6b:34
+            X509v3 Basic Constraints: critical
+                CA:TRUE, pathlen:0
+            X509v3 Key Usage: critical
+                Digital Signature, Non Repudiation, Key Encipherment, Certificate Sign, CRL Sign
+            X509v3 Extended Key Usage: 
+                TLS Web Server Authentication, TLS Web Client Authentication
+            X509v3 Subject Alternative Name: 
+                IP Address:127.0.0.1, IP Address:0:0:0:0:0:0:0:1, IP Address:0:0:0:0:0:FFFF:7F00:1, DNS:localhost
+    Signature Algorithm: sha256WithRSAEncryption
+         8b:25:e2:34:d2:d9:d6:eb:b7:b0:92:b6:fc:08:9d:ff:08:9e:
+         36:86:a8:ea:e3:e1:cd:07:0d:85:58:06:2d:f7:26:41:f1:59:
+         ab:02:25:b8:ec:f9:85:ac:41:87:0a:df:fa:c4:f6:26:32:64:
+         0f:dc:c0:81:3c:f7:1d:9e:73:52:57:e3:64:ab:6b:23:cb:21:
+         d5:05:e5:54:a8:f8:33:f7:92:74:c7:4a:2e:f3:b7:78:a0:9b:
+         38:b2:29:3b:0b:a2:58:88:4b:03:8a:c0:5e:66:75:cf:aa:78:
+         e1:3c:0a:e1:31:8b:bc:48:57:8c:65:27:17:cc:f9:75:ba:69:
+         e1:dd:b2:4a:1f:29:24:dd:e2:aa:b3:c8:ef:b0:31:ec:ca:6f:
+         cb:bd:fd:bd:2b:30:63:42:bd:a3:35:7a:d7:16:36:5a:df:3f:
+         64:97:6b:22:c0:7c:59:0a:ca:94:9b:11:1d:6e:21:4c:e0:66:
+         78:52:1b:27:d8:79:ee:83:ac:80:13:8a:13:f2:3a:87:e3:6d:
+         46:ea:7c:5e:cc:26:d0:d3:a9:32:e1:aa:19:27:74:5f:93:ec:
+         84:76:2d:c4:78:5d:db:64:c6:d7:53:17:55:b0:29:c3:36:15:
+         7f:dc:8e:97:6d:19:7e:fa:53:a8:4f:0f:ab:96:5c:32:12:93:
+         c2:22:4b:c1:d7:d7:4c:74:c1:a9:a5:56:f2:b7:cf:3f:54:b1:
+         6c:10:a7:90:c3:12:31:bf:5e:d3:14:e7:da:00:ca:28:86:21:
+         b6:65:95:45:8a:38:e6:9b:09:c2:1d:f1:db:d8:67:0e:33:a0:
+         e6:c2:ad:88:98:6f:6a:af:3d:c2:4f:c9:43:b3:70:23:e7:c2:
+         c3:92:db:69:60:4e:a1:1f:a0:dc:e5:ae:68:77:f5:82:3c:a6:
+         f3:43:87:eb:74:4a:42:bc:36:19:65:9b:8a:3f:84:84:24:23:
+         16:25:aa:ca:78:22:40:a7:cb:1a:4e:76:04:4c:b7:61:fe:f7:
+         c1:42:34:b1:ac:dc:42:24:99:a7:8a:0f:8d:8e:ca:09:6f:77:
+         33:34:21:81:d3:d9:50:d1:7e:1c:29:8c:fb:d2:13:0f:e5:27:
+         26:08:8b:74:74:04:45:8d:18:0f:49:c7:e0:4a:65:1c:66:c8:
+         e7:ab:52:a0:8c:98:89:b0:32:82:ed:2a:e7:44:1e:95:b3:e5:
+         b5:dc:52:49:aa:b2:61:97:68:76:9b:55:6e:d9:de:77:cd:67:
+         07:52:2c:d1:e0:1c:b3:58:04:67:ba:02:4d:7d:f0:21:47:1a:
+         63:ff:f5:76:d5:e3:57:06:35:77:2d:7d:ef:76:6d:a0:ef:e4:
+         83:20:58:e8:b7:e5:7e:70
 -----BEGIN CERTIFICATE-----
-MIIENzCCAx+gAwIBAgIJAOYfYfw7NCOcMA0GCSqGSIb3DQEBBQUAMIGxMQswCQYD
-VQQGEwJVUzERMA8GA1UECAwITWFyeWxhbmQxFDASBgNVBAcMC0ZvcmVzdCBIaWxs
-MScwJQYDVQQKDB5UaGUgQXBhY2hlIFNvZnR3YXJlIEZvdW5kYXRpb24xFjAUBgNV
-BAsMDUFwYWNoZSBUaHJpZnQxEjAQBgNVBAMMCWxvY2FsaG9zdDEkMCIGCSqGSIb3
-DQEJARYVZGV2QHRocmlmdC5hcGFjaGUub3JnMB4XDTE0MDQwNzE4NTgwMFoXDTIy
-MDYyNDE4NTgwMFowgbExCzAJBgNVBAYTAlVTMREwDwYDVQQIDAhNYXJ5bGFuZDEU
-MBIGA1UEBwwLRm9yZXN0IEhpbGwxJzAlBgNVBAoMHlRoZSBBcGFjaGUgU29mdHdh
-cmUgRm91bmRhdGlvbjEWMBQGA1UECwwNQXBhY2hlIFRocmlmdDESMBAGA1UEAwwJ
-bG9jYWxob3N0MSQwIgYJKoZIhvcNAQkBFhVkZXZAdGhyaWZ0LmFwYWNoZS5vcmcw
-ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqE9TE9wEXp5LRtLQVDSGQ
-GV78+7ZtP/I/ZaJ6Q6ZGlfxDFvZjFF73seNhAvlKlYm/jflIHYLnNOCySN8I2Xw6
-L9MbC+jvwkEKfQo4eDoxZnOZjNF5J1/lZtBeOowMkhhzBMH1Rds351/HjKNg6ZKg
-2Cldd0j7HbDtEixOLgLbPRpBcaYrLrNMasf3Hal+x8/b8ue28x93HSQBGmZmMIUw
-AinEu/fNP4lLGl/0kZb76TnyRpYSPYojtS6CnkH+QLYnsRREXJYwD1Xku62LipkX
-wCkRTnZ5nUsDMX6FPKgjQFQCWDXG/N096+PRUQAChhrXsJ+gF3NqWtDmtrhVQF4n
-AgMBAAGjUDBOMB0GA1UdDgQWBBQo8v0wzQPx3EEexJPGlxPK1PpgKjAfBgNVHSME
-GDAWgBQo8v0wzQPx3EEexJPGlxPK1PpgKjAMBgNVHRMEBTADAQH/MA0GCSqGSIb3
-DQEBBQUAA4IBAQBGFRiJslcX0aJkwZpzTwSUdgcfKbpvNEbCNtVohfQVTI4a/oN5
-U+yqDZJg3vOaOuiAZqyHcIlZ8qyesCgRN314Tl4/JQ++CW8mKj1meTgo5YFxcZYm
-T9vsI3C+Nzn84DINgI9mx6yktIt3QOKZRDpzyPkUzxsyJ8J427DaimDrjTR+fTwD
-1Dh09xeeMnSa5zeV1HEDyJTqCXutLetwQ/IyfmMBhIx+nvB5f67pz/m+Dv6V0r3I
-p4HCcdnDUDGJbfqtoqsAATQQWO+WWuswB6mOhDbvPTxhRpZq6AkgWqv4S+u3M2GO
-r5p9FrBgavAw5bKO54C0oQKpN/5fta5l6Ws0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 -----END CERTIFICATE-----