From 7f50525984f196b4b4ddef355aac91d1c2153a60 Mon Sep 17 00:00:00 2001 From: Ry Biesemeyer Date: Tue, 19 Mar 2024 20:08:49 +0000 Subject: [PATCH 1/3] renew test certs backports script to renew cert fixtures from #1074 to 11.4.x series --- spec/fixtures/test_certs/ca.crt | 58 +++++++++++++++--------------- spec/fixtures/test_certs/renew.sh | 11 ++++++ spec/fixtures/test_certs/test.crt | 35 ++++++++---------- spec/fixtures/test_certs/test.p12 | Bin 4357 -> 4291 bytes 4 files changed, 54 insertions(+), 50 deletions(-) create mode 100755 spec/fixtures/test_certs/renew.sh diff --git a/spec/fixtures/test_certs/ca.crt b/spec/fixtures/test_certs/ca.crt index d3a1abb62..4ef76fa08 100644 --- a/spec/fixtures/test_certs/ca.crt +++ b/spec/fixtures/test_certs/ca.crt @@ -1,32 +1,30 @@ -----BEGIN CERTIFICATE----- -MIIFeTCCA2GgAwIBAgIUU+VHJ91JsLLA1GJYC+UchNfw3hEwDQYJKoZIhvcNAQEL -BQAwTDELMAkGA1UEBhMCUFQxCzAJBgNVBAgMAk5BMQ8wDQYDVQQHDAZMaXNib24x -DjAMBgNVBAoMBU15TGFiMQ8wDQYDVQQDDAZSb290Q0EwHhcNMTkwNzE1MTMxMTI5 -WhcNMjQwNzE0MTMxMTI5WjBMMQswCQYDVQQGEwJQVDELMAkGA1UECAwCTkExDzAN -BgNVBAcMBkxpc2JvbjEOMAwGA1UECgwFTXlMYWIxDzANBgNVBAMMBlJvb3RDQTCC -AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMtTMqAWuH17b9XqPa5L3HNq -gnZ958+gvcOt7Q/sOEvcDQJgkzZ+Gywh5er5JF2iomYOHiD5JncYr4YmRQKuYfD6 -B1WI5FuQthD/OlA1/RHqtbY27J33SaO66ro8gal7vjHrXKQkefVYRwdfO6DqqbhV -6L4sMiy8FzQ55TMpoM35cWuvoAMxvSQqGZ4pYYKnfNSGhzHvssfNS1xu/Lwb7Vju -4jPhp+43BkGwEimI5km7jNC1nwjiHtxDsY/s93AKa/vLktXKUK5nA3jjJOhAbRTV -nbOAgxFt0YbX98xW/aUqscgBUVs9J/MyTRMwVKJ7Vsmth1PdJQksUASuzESlSPl0 -9dMjTQ+MXzJDt0JvX8SIJPmbBng78MSaCUhpOZiii1l2mBfPWejx20I/SMCUNmzb -wm2w9JD50Jv2iX4l4ge4H1CIK1/orW1pdY9xPL0uKYm6ADsDC0B8sGgNMBXeB6aL -ojY1/ITwmmfpfk9c/yWPfC7stHgCYRAv5MfGAsmv0/ya5VrWQGBJkFiYy1pon6nx -UjCbgn0RABojRoGdhhY3QDipgwmSgFZxr064RFr1bt/Ml3MJmPf535mSwPdk/j/z -w4IZTvlmwKW3FyMDhwYL/zX7J0c6MzMPLEdi73Qjzmr3ENIrir4O86wNz81YRfYk -g9ZX8yKJK9LBAUrYCjJ3AgMBAAGjUzBRMB0GA1UdDgQWBBShWnSceOrqYn9Qa4WG -dIrvKNs/KzAfBgNVHSMEGDAWgBShWnSceOrqYn9Qa4WGdIrvKNs/KzAPBgNVHRMB -Af8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4ICAQBRQK0m3t5h2Y3CUCJYLMiCUge4 -UOzvpCoawSXH1FP2ycA+P1bP8H8htjwvV334ZADlQrDQRu0hqa1T+DxwhLxNOxgE -1XCthN3TTyd3O1mT4NmT6mcn2wYSn/JC6fPwFcloX8BcUvxl+xwmOgL/pzgf1ekK -MVS0n+r3bzdFTgGnvsmxmPHe2bUhyXXqzQIx3ObSGtuKYUu7aZEysEtJhaR+vGTd -jjTOV2S71edVlKTxRLZpHgoTZpBL/phwRQ63vdef4ftNGs0glGDc0yqXGMxMALOl -Up7+H4HI99rldZcul6oZ+ORltt047Hk7ctWb20SqxEH9tGLXKm6hDEL9HzyFXeyJ -DAue1GF+3H0KvsjSs5XH7LHMuJDCuSP64+h9gzkI+q06oBNX/9pQyQaHj0K4don8 -lWOMLI4gQibV7R1Opt2feA8MwWxouP/yni8IX6sPePVQ+fLEk1C+Kg+x6k1yQHEM -36BEP6iYOYvqG0OIjMas2U7Yhn2wWlVm9It3WMyaW8ZPI8kwc3dx715dZuNg/zjd -rJS678BNBVxInc7dzpY6el0Lr70CGwiJpX/N9P1yiTFZ7GZm3Kax8QnTtvqXzRIy -sBgt8BVZHUe1lWFYlG+jlakiXqz752nmHuwif7iBI4iWzRmW2vYPfTEmYPRLZES2 -nIg9fQPvVw+fIHACZQ== +MIIFNDCCAxygAwIBAgIBATANBgkqhkiG9w0BAQsFADBMMQswCQYDVQQGEwJQVDEL +MAkGA1UECAwCTkExDzANBgNVBAcMBkxpc2JvbjEOMAwGA1UECgwFTXlMYWIxDzAN +BgNVBAMMBlJvb3RDQTAeFw0yNDAzMTkyMDA5NThaFw0yNTAzMTkyMDA5NThaMEwx +CzAJBgNVBAYTAlBUMQswCQYDVQQIDAJOQTEPMA0GA1UEBwwGTGlzYm9uMQ4wDAYD +VQQKDAVNeUxhYjEPMA0GA1UEAwwGUm9vdENBMIICIjANBgkqhkiG9w0BAQEFAAOC +Ag8AMIICCgKCAgEAy1MyoBa4fXtv1eo9rkvcc2qCdn3nz6C9w63tD+w4S9wNAmCT +Nn4bLCHl6vkkXaKiZg4eIPkmdxivhiZFAq5h8PoHVYjkW5C2EP86UDX9Eeq1tjbs +nfdJo7rqujyBqXu+MetcpCR59VhHB187oOqpuFXoviwyLLwXNDnlMymgzflxa6+g +AzG9JCoZnilhgqd81IaHMe+yx81LXG78vBvtWO7iM+Gn7jcGQbASKYjmSbuM0LWf +COIe3EOxj+z3cApr+8uS1cpQrmcDeOMk6EBtFNWds4CDEW3Rhtf3zFb9pSqxyAFR +Wz0n8zJNEzBUontWya2HU90lCSxQBK7MRKVI+XT10yNND4xfMkO3Qm9fxIgk+ZsG +eDvwxJoJSGk5mKKLWXaYF89Z6PHbQj9IwJQ2bNvCbbD0kPnQm/aJfiXiB7gfUIgr +X+itbWl1j3E8vS4piboAOwMLQHywaA0wFd4HpouiNjX8hPCaZ+l+T1z/JY98Luy0 +eAJhEC/kx8YCya/T/JrlWtZAYEmQWJjLWmifqfFSMJuCfREAGiNGgZ2GFjdAOKmD +CZKAVnGvTrhEWvVu38yXcwmY9/nfmZLA92T+P/PDghlO+WbApbcXIwOHBgv/Nfsn +RzozMw8sR2LvdCPOavcQ0iuKvg7zrA3PzVhF9iSD1lfzIokr0sEBStgKMncCAwEA +AaMhMB8wHQYDVR0OBBYEFKFadJx46upif1BrhYZ0iu8o2z8rMA0GCSqGSIb3DQEB +CwUAA4ICAQA1vWQrSXkiOzFVXg1ozd9/60yLIamPlzx7Rfl2trHyvi3KKIj7NE/j ++7/OJ6L3zysJ910Hsisk0wudOnYla0aWTfiMqxLeXpYLrQNTEL95xUQkeQXHmrqU +shdYIucfSilGnFssWvTH6oBI4GPh0jZxj+k8iv6Tq9UHi61m8tvvAWO9hal0Oe8m +L06OE9Cg+g/M/CMJU7Fmenl3lfUse/fiIc9yAtcBzGqzg0R4us/i3ztzWnDOjgKi +MXN8ErVKluM03WIlhZtTD1D/xBWeKfScQ2ZS3zsXDsYUVc/4Zx9f/P6nf1POgdvi +MirVyR+AJfMe2QwdDJ/mQFvEfwofWNMRlNCRhklVSY9KzO2GsFGmOs8se8vhpaSz +vCnCEluheVJzVGClTFMhBW1zX7K5OK+3WMpZXPYgWQ3qPpyRV6biZ4BEn5dssU4l +r1eJYa5QSF9n/daXDAcZR8V0gcSChmPJX7xPPXje4klI0Nvx/7tXLsWmvJQd35bA +LLUZymTSxwRoSoCpuG5eh6dlekFZa8OWJ39+pK+MKs40xfrUoGpbdv3lipW5KCsb +l/jGuWpg6pdhxMdLxF3npLdgsa36w/BR0b3Db63gn0F0MEh7ovsd/vI08BedxFYl +nJXby70tETVBFeg51Sakt8MT6il+ospMZGaNTA9CAXf8k+HIY4t16g== -----END CERTIFICATE----- diff --git a/spec/fixtures/test_certs/renew.sh b/spec/fixtures/test_certs/renew.sh new file mode 100755 index 000000000..bbe6ab705 --- /dev/null +++ b/spec/fixtures/test_certs/renew.sh @@ -0,0 +1,11 @@ +#!/usr/bin/env bash + +set -e +cd "$(dirname "$0")" + +openssl x509 -x509toreq -in ca.crt -signkey ca.key -out ca.csr +openssl x509 -req -days 365 -in ca.csr -set_serial 0x01 -signkey ca.key -out ca.crt && rm ca.csr + +openssl x509 -x509toreq -in test.crt -signkey test.key -out test.csr +openssl x509 -req -days 365 -in test.csr -set_serial 0x01 -CA ca.crt -CAkey ca.key -out test.crt && rm test.csr +openssl pkcs12 -export -inkey test.key -in test.crt -passout "pass:1234567890" -out test.p12 diff --git a/spec/fixtures/test_certs/test.crt b/spec/fixtures/test_certs/test.crt index 11d4a2388..c6cf6787d 100644 --- a/spec/fixtures/test_certs/test.crt +++ b/spec/fixtures/test_certs/test.crt @@ -1,7 +1,7 @@ -----BEGIN CERTIFICATE----- -MIIGQjCCBCqgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBMMQswCQYDVQQGEwJQVDEL +MIIFXDCCA0SgAwIBAgIBATANBgkqhkiG9w0BAQsFADBMMQswCQYDVQQGEwJQVDEL MAkGA1UECAwCTkExDzANBgNVBAcMBkxpc2JvbjEOMAwGA1UECgwFTXlMYWIxDzAN -BgNVBAMMBlJvb3RDQTAeFw0xOTA3MTUxMzEzMDVaFw0yMjA0MTAxMzEzMDVaMFMx +BgNVBAMMBlJvb3RDQTAeFw0yNDAzMTkyMDA5NTlaFw0yNTAzMTkyMDA5NTlaMFMx CzAJBgNVBAYTAlBUMQswCQYDVQQIDAJOQTEPMA0GA1UEBwwGTGlzYm9uMQ4wDAYD VQQKDAVNeUxhYjEWMBQGA1UEAwwNZWxhc3RpY3NlYXJjaDCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAMYhP2zPOE3ke9naeK+cIPNV91htuoGGARs+mlY/ @@ -15,22 +15,17 @@ bFMKspGHnytQZF+a+mc5H33G9HiPP3jZE2JjrWlOay+j6ImylMgjcZmHAgaUe3ET tyczoQ5/L5BNiyA2h+1TU8jWicNDtl1+CtOsgEVBBHA6p/IHhsHbNZWPrYtIO9mh hiJw1R5yrITXnjZY0rObITwyt/e6Sc3YnoQfsSGaLJEG0aDc0RALAhgzj+RY8086 2RKOyfdw1sw1RmJKdCf+dOzhPyDpvauvCxrL8UZQTzcBs+qpxOWnZFRWeNsLwoDn -6JXXAgMBAAGjggEmMIIBIjAJBgNVHRMEAjAAMBEGCWCGSAGG+EIBAQQEAwIGQDAz -BglghkgBhvhCAQ0EJhYkT3BlblNTTCBHZW5lcmF0ZWQgU2VydmVyIENlcnRpZmlj -YXRlMB0GA1UdDgQWBBRvvz0yGw6Tz2UxbBLAGyzVMtcMUDCBiAYDVR0jBIGAMH6A -FKFadJx46upif1BrhYZ0iu8o2z8roVCkTjBMMQswCQYDVQQGEwJQVDELMAkGA1UE -CAwCTkExDzANBgNVBAcMBkxpc2JvbjEOMAwGA1UECgwFTXlMYWIxDzANBgNVBAMM -BlJvb3RDQYIUU+VHJ91JsLLA1GJYC+UchNfw3hEwDgYDVR0PAQH/BAQDAgWgMBMG -A1UdJQQMMAoGCCsGAQUFBwMBMA0GCSqGSIb3DQEBCwUAA4ICAQCaABHQxm6mtrM9 -f7kbgzuhEc47Q+bgrbjxeoIVOeO2Zshdw0SZlfkWvWe0622WSeWMsTBJ3hoaQwZe -9FUf1lnsWe6u6oOckiG9OjE0TyXJ7+eghdL1HPeXgJ+4ihwJsRtkNEljWf4HS7/n -y5LaFhcXdn2ZdbUKJ7z7zXqzh2Cp8VUBtsR+/IdiLjSN81dQou77/a2M/a/7BI2Z -HhUlUx1T7jHzNllJBRF3IaOk72yjoU4cL0qVy9874SXPwdpeFHtvS4TdQTLqnAGR -liHJcB1ZNz1sVOXndw3Wbvv6iB5y+IX/Y/kRSHS6zpZGdAb7ar/Vgl+Uvs3fKi44 -y9hq2b49bYlcSQMtmlimCBDiu82z0aYtVFLalZ2L/W7CMaeE3jpyzu/bbygRv/Bp -lKSaUtaFIVgiuRBPwIBDMyai3CJ5L+dJrJPU2JzzQvtJGFQCFCIHd9rqweubZB6V -re5cUn4dxlxA5SkZ0amFFV5DpP0YhThA/gq0t/NeWRmCEEBWNXZaqFmDhiYS5mnu -Z+NUtv8E332S46RdfneHe961SlMXEFC96I+1HOjXHdXlqKfOU8Qvy8VzsnpjuNE5 -VTrvnAM1L3LwqtYQYfUWUHYZFYdvh8layA2ImNE7yx/9wIIkw/L1j9m71Upi6WKR -FKbYFqzgpWksa+zZ2RYYplUAxq0wYw== +6JXXAgMBAAGjQjBAMB0GA1UdDgQWBBRvvz0yGw6Tz2UxbBLAGyzVMtcMUDAfBgNV +HSMEGDAWgBShWnSceOrqYn9Qa4WGdIrvKNs/KzANBgkqhkiG9w0BAQsFAAOCAgEA +q9VvMIXfu0EHj+nPLUGDidkzkDjLq9nmA5wOkcMlha7IfpLd7FnSfsb3QDsd3m2C +xGT01Oum2nkxHVWwQe4em9rhaiD/I2dMq5ztXyQGi4pM75VInztA1ZaQTrsLd3So +1kar55xqcreny7UJpqGhLgyGW3SnREQAqJpQUamPpERUBhYRMY4e8N+y+ry5SFz4 +HnC9pvqJFlL4Hu4wgYeJJTTTwSm1C5/Tgu0WYq3CkwkhFUgeU5AkFKDJ3WiyN6Dp +6D2A2QHk5lXyU8uLSpdR2tHwiMbD9MD7pgj6rcyGx182LDwqOcPzRC9mT2/ESWlE +2x/w45MpwGc5Zw4OzYt0iOCuyAluoI5nXJrPvWQ+jW0V4b/muctLR0oyCOUkcUWf +dwQUSIFbqcpbC+rpWOqD8/8U04JRArkymjfnSPjNfuv6Jbf4UblI3wBokbh60psS +53AVMXWXA04y/ij6A/6lOrh2KIqY3WZgQBPrcYe648OgRMIdrlw6athn3JgRfuvm +T3xFqJnz0rhVrKBGJRCBxHi0PCylM3E3ECRxSSdXJ/EcD2XmqTqirAXBTjwT6p0F ++Vc47AaNgsHKInpNeIgKNo7z5wmZnG92hvMvOWZS+ldaL/yf78oTagUavlD6xzmd +LVP3dRQC56AtArQVw6JIg9GCPVnezN9hhjA07yy7bmY= -----END CERTIFICATE----- diff --git a/spec/fixtures/test_certs/test.p12 b/spec/fixtures/test_certs/test.p12 index 777a235a9a1e1da2c19522273e84d26eb6910903..ccfb69ae412b16e27689c3aa6930d4410f6744a0 100644 GIT binary patch literal 4291 zcmai%XE+-S_r{Zm6~s!5(i*iXu@yCA)LyMkiCwE|6C+~p)lz$p+PgMI6}8o>QMIdx zStY!EuK)jf-jDBxbDitl_lI-7{q6%tQ*?uXcyKg@Cjl{cxJvj18ITZ|ho-OvqbaQZ z%I0u1f$D!Pf;=>VA3^M9l=~J;vhZFn8C!tBbs1**sQS;h zHU2XmJ*$2({n}H43=Se%AGpX>8%(VJ*x*cMsWSP|&BW?{+^*2Z04aS}BYBN?`33=R z+cD;`L0S4+#zi_VzEbmVla;S9V)a;3u0IoQm3u&_3+wk)<6(sh}_a9v% zXTSNxyAz9wE82-piD(z}!0tpqr+pWhlfw-qMjGpAR6=Le;p_Gx*FDdYlOR>fl3qMg509vM!wH0;i1Wd zqc)1xyNCN2jDBF0j@$LJ7|-r$nSvA{s76mW;Rv+$oNx6 zev8|LXXH;#gf8|d%e;l8@X zdTjP5u1=UEU3HIzGk8t9YRK-b#&x%GcPY2)aQMaokNPI{9($uJ%*Pcr`K3A_z%IhN z*L*G9(N1cyWiL|lt96QHtj^bsVSs*Nj>)WKC;r(NZA{0&IWtSOyX zE9+zjL@i1u!fU4F=tDp!>k2L2Bc)*qU+xREc6B!%d9cb?2TT1H1ry}&PtG$9)O@Q5 z6a{Uw+Lfo3fyRQ?V{ONG1?8D_5Bv?lzkiB9@+C~8u;{!z-1p?Qi&uY{I1|C9)`WH-$3!`BHS*9~)!VOADq7UvrgW_4L&xHMYx8DUzj!haD-;ZgzyIt_an0x%vsc zeAe4on`A7tWnT7|8tY0K7(xV5>UTM1se=>$1lFvwxfkc8dcN8wz=#lb8k;&4D`sZ( zNb0s!r*P}Mv%4d+Covmvm42$NW`dexgqV*3qL7g-^eFq!9G=dK)>l9IsUAwsUFql^ zrZVVnBjU8yXy|HN_&P4ic9b^t*jVgHrLTu1M3(ujVNk`iL`05El2_~!4eluez zldfUW;ro}#>4yot9n;lClV1v&jrmHVt;N<<5r5Y0{QA0+JWps4OO4x@;d6f@dU5I5 zKJ`lE*Z1eMqKZB{&1dCsG=%hDF8l);VjLJvd=Is`HNQ?qvu`0aiG<{$8MMFf^b-%Gd2N=x@JI zQ@2_O)sKtj+mhIKE5YsKQ~IYJ5#mdV;F||KZm1md1rg@Vev@TrI?Fv0oOh%mm+j{0 z!@}r-#i{(0t#>y8z}czzShs|ENHS}beI%1XP@2#9)#1}4l53FFb-IHr<1f9zFw zf8ncWudAYWGO%bx&$3EWGw|VAw!aC%@Pn6|*WDf}Pa|d}S)*4MzF?3pys0iZ_uAsQ z5AyPJ`JN@UHB~IKo1~6Z@FEAyg+}kY&NQRCnfclFoCWnECquO#6U&eS(-)4#Py<<~ zCnr$-4ckuIu)=x#Q*=S>^rdQS;tPhO@nDDahfwg&%Inew6i@M4R~N`UD^yO#>`ebo zlwZ>WLhWrDQe}n#02TVU=OK`Zd};a?P={ZzzH5*$Pv4L%FaC&NMeoY_=K!T=C+v}o zlwtE@{oW$G&hsiEDl-2lxo>3Vs_UU69yU@OAWHJnWf2$EZdaNt~X(ha{Za%{)72B;@OjYB`+oj3-_a;6B$_{=G2xc zbp7kbCvS4*nLM=41cIqxVUfF~i?CGB<$M{%C`${S#L)^T*jhp{S1l2j*(erAyW*p$ zH`lWwHyletF<>s+t-2u>$^$pE40RFlzpqf-OvE&z)VHA4!Q$~o8S<6nkQP6ROmH(Vy6F78+7hSKSMC;C!6Gvl`D zDb2w1MA1NSen3b{2u@*9W-i%y_FIU!%SNu^qG}UWBGgvg=m%hytgoDmC{JzIN~I2Q zYD&RZZBesplqBJ7Lg++q>>O~VBy6ZfrcMU6gC$C~m^`@o_HjV};LpU4SQtlPs3kia zf`0Ai+8&SRK17f`Dq}06lV^ZCSxzyJu8{>hX2EQf7gxZf{gf0sJ_ZFX)Q<4yX*Ddr zbVEDFWq;Bg^?q|=Em>ZOmz|NnE;Th|{A_ZZIm`0ISVpzN`_7@(`{;?>l2H6z-TH@k(n^i_~uW;KMYCLO4C^yS^$=p|6L z_rdc+*cRRoWsza&9S7LfP+DvI1&_%eKY6|Fp>YXaOqGb(V^dB7;m*{pZc^%m{E%of zYGB76Md0SK--hkfCM-FGp}!vm(YzUX%Z^njh+H2(sWmm_-*RML3Y|CFRW$)ez+7cH zt41_@wNbqt-Pj)1{lUGFwmPjHBLvm<+q85HI*ia;O{r%LBTbyN7f(*_`t?DT_*a*V zM$r3y_9*6%nZOjN)p&D3Zcf*p&skw`WAx>Ih;+2_bbHDj$6ELdb$kOS{HZN-xAaX} z-rW5RE9NN^=}qU;-r|W8??>6t?TTVkwrk-i`FE$`v9A|K2*M&)E?Tj6q>MH{qB{Yu zXJ9z1h-~o`ppZ*TBXfE`OTpd6s3%vo5p8QK7Sg0vmMmydDOmw$ZHt}VLs>un_-p4} z!9Jh^`{VJ7>mYTT^!g3#rf}m-^myoXh-Hq6qtvnsk0Ccue#v=Xz)%PIoRzPI z$=dlKp68fI_wDDZVaWZQ4hYMm-jM_5;p|(MG(Q@xQ)a_(uD(i_DYXL-t%t$abvN`l zf2#w!5zm8czkoF+KbLikc^_YEY}M~>cH%X>Yrn$glI*HvPv9Vo1*j>$|EZl~r>Q>r z`hEQSE@pEgf|zer@~_pWoUy;oOk9G$;CPcPqsKG``M%B8)uasV7!?jaZ!O8Y`|wq- zKUeAcm3X@EfPAEmggRtoo(J-M+f$1-kseJ02p%+lK`gZPDTPFc>WD1*z9X*>UZ;NwWMzj1q=VX*&>oZl z!nSr0Y!1%VR+-?I-BRP1PWjF{SOH`zFA3aaeiKnFPMk`OvUq4i8=mmpVqf{ANahz2 z-0XHd#52HT@@!D!JB_90I4A-D5%{~hlnG7LFyXOd~vU<+%V>3vISi1dJ1 z;!8?3_Tbuuv`iF_lHkaioNPm5JilBZ{}<}zCgMf z8O}dWXj;nU~`zXmJ`?n(8uDCgWNRTo9O4#|}tj*rag)L69w7W&YE+ATE#Zzvs%{W+R@H{T^bT zo2l#EP#BY-~o(yoVBdu8C^=m3oZ~dfib)P@(cJnG(mFKcK?}mxBwy$^L!&K|p)}mT2(5ItMjN7;L*Y_`F7Di@y%jGt-bG+O%k01Hc*u-r+2jT7Nlm)G#Gyz9S za}mWgmk%wSp&zDLrwnDi&sFrNoUiGwKI3hcUzHSLKwg`&5$$xum+ack3!S9Z%Do66 z+?@aFb4E)VI(?{?V#ZOy6K=q(t}CU4BvWpO(dkRU?5Ofi4KedUGJ*#-SAI8`E0JKl2*!U?k*~E0F<_F99ti(%usxN z6<6=>G+2gy)S32*TM~QPFRe1GRRSV*E?vEz{yuYq zL5~ey|H3f&Fz+4`NhROG(p;IWFy%zM1DFT+G*={M7WdXmgp(C@R@W_J z!0dY6yCZ4L=4}Zbi0A_MsS4M4RBoDFk!$SLPmi8wUNSW`3TK@?P5@RsfhX!Ck)sBl zwGycxnO<4TZwPcMFp8_P`snzeWncV)y7KT1F11|xN9{j2y{ai$hd70=+5TfR2;xfA zy1NlBIUR1*qO?FO6|=l@X?z!}1EqJl3s&plEsR6Wdi^A)A*$iqf>)>xnru3TmK{?L zmKiuHG+iiPfda_HW-Qt5X`<0Dv@%N5b0^Kb+RiNYcrKbo_-j!bqHe)|s*_3@gy1A9 z4iQnFnPy+*LJpG}2)+fFVMI(;$yNA8L^@P+IiT45@?|`Bo*Kpp&!@~za+hj1ok%dY zq%ECy&acFj;eJ^hXG@uQzl?Igom~K&2a-s!KNGpeRu)xb7^}ATA7wP*uKts)G+F}FFPZSw3+G$azHQSM$>rn zpLL_((=F|$;^;d6?to78clo7H1Jv~Gx;orE$2d=LzGrzj4Er^7+Sy|6F!dytC0x2i zyciDW_!3o}<=F}*9q`hL$swnIRG}B(#pUldhS34wt{1lMArJ;HwQ*(3tdf1(>W|EE zCI+}Cy>wgBA?cqeN7U6W7bumi;}olC&f{hY_d51?)WZ@1CV|{Y^BUwE=^sLt`(anw zxQ12zW`Y4TiMyC>)F@)nhBQ6>TV&yDrrCqL_sm+v~@1WXJAR?z86@U^bH zmF%tj8Hu26x|K8C{1t!QK*%qiESmJ8Y$#b`Q)zN)oL`gE91}W`ogzR@jl6aaBL!Mp zhR=nJX110sj!lxX&T7Cq&>OLeO(av%C=(k!@#L0l2z&ie)xFtwPPI*v?`PxfXB3_K zBYIrSg9g4{IgptdTim-C8@?-`V|k5bq_PjytvpyTUGx!-dSO;#DsaEifSVKE50 z+T%!&?cwWFNNDKsu4o^rU`rPB;;Rj--wa%Dj|Yw|#m%uER-0_Jyl~G-ZelQ#-9%3* zRO;Smx{@I7$OX6LD6|l5cxIG=AI-ierh>*=az%GN@V;FSpX^QVLp}Bo2;V!hg&lw! zO@3eTpt$NV(LYy>fVmij!gnOqFA#Cu?gLL$zR(|GDoClF^sy~y*iv2zNNw^>g}%-C zDtnd?Q_3la>h49l!Xr#IO7dWMLQ~l%P;;><q`Q#?3g5yDZ1R5tjd3GD(uHnP2Qg zOD~(SHP&LIRrm0w$G7i^Nc`D2Y4U-CqNX1H9_gF=3I4j=WbB8M-UbFJ8T;UIgg5mE z)^@NLwmRYOwIkh?B+{1_nx)FQ`!Ow?ox1JHf11qdMACsx3b9z# zV71yd6!+sT_Tjps?EFC$Uh4tAPUW_7xBY3=QNOHi>Je;#!e44JW3^e6>XU|5!G@RA zMCT(0$>FGf zkoKHTU2}fFTWvCMGsokG%N3vhdEQz0RmESS5%m8bp%udjny_I6AO7N+zf*xr^gntd z#K8O;LjOY7|7Sg{f34@#b5@yNx;p=__5Pl#A-nJ6v`HY?J(V^wOjtjk=XB~ga?M6h z(dTu)=G^Ec9BViLXC>uhL4BB`lx}^ty0D)&qefgGIlWp7Ex3u6kHw1ZA)z3l8r>z6K(ZRxqwtoQtJ zOR0z^Cjzh#ARt5QE< zO{dZl+5Dp+1M+q+LPi0Px3phNuG%P@$tY>>tmG@pAWnCh4#f6GHE*>%`Tc!`FI2>>&mFK9v zgy*SdyDox7G%`#GD0}fg;Z!eDjMv&`CwC_4{sagG1EsHd4d3>Wj3Xj7ZqzDnj*41r zIPp|U$)ZSLE|Arwg9&O}g61L7%?w6z9KG$uvxP*f(fKPrBe-9s5k04jelz~gxY`CM z%N3_GR}HnIVin0`+$FhprlBgXihX*`zN}31QpS5C9~L>;BgJ9AGIQEg65&~1(=!2B zpCj_B?eYrZC)Yh0kT^@u3Giw#ZerP_w_$K7i9N0;X09v`^-JV5ibUCO=U#A()7}@h z(MvaCmETcr_P4!hL%3{S6wL$14HtjEGs_J)b%j@qBy=T%<7apbx7n}iIH&srzD5FH z%y4&%I4?_0-w`ag$}l)LV(nVt9J;oew#?q{$t2{?#qwp|-)suq>vdnV$Mu`Eg-U(; zbEtm4eNid7PQwbuaHvC-z&oXLK#&bQSy1GY=LZY{P8@AR6m8~+0}CQ(VU(0-L2is8T8X;m zr!{DX@*9x7?l~vryD6Oy4rB-XjCmD;-}oKn6O!eAWt8wYs^ng)#=-kHx*<;cCtbu$ z&2&hl|GtDc+A^78wrp?&@$2_ejWZ$Gy?l-BU?Erwny%1Ozc}RHjo)pBU(&=O+hTt~Lz^>!K$k>J1 z<;8|hifl*ccCQMIYc1leU-7s-d^Pz>SXE?($dM9c)XT@0Sk6G-iZ>T2_~SFE{MHhi zzF_%%inpR8x77G_;1;>#X<*-fNEt|{4rCB_yvC!^m+F^R8THA z+6&739@PZ%ZskawMYlKdbD~FQBWDU#%u2Cj$29u6zbbckvNI!nz72m(NRGo3t0SDX z-Eew4g4m)T&OSH!F{*WZL^u{yQJ|r^pTgsQudD@CeJ<3&H>$_%G8W8%T3T^PG^o=%t^$UA*a|RWPmihPrN9-QHDIEvF7Dgj3*#Wk+ zRpuoI=A~i=6ncwZDtt9FgeaQ&nh2}&`Lk_zjwIdl1+6B@Q2`2C`P4(l)`LWIs|Q5_ z&azZo!95SQ(Cjj9rhW2bp1uNgb=;kKu$N)ni{x*Q*yx1*1E=xQ$pom z*AoV9=Ih8-#lU$xqN3g(9sNbjm874~$0oNQIAi>s=+3&PCdaW7e6-n?ZYb!Y! z%o6Tz>1~P6&^(uL4=S6dr2qU#O#qdhd_RU0c&hP+81-7R9xygfXy3A-Q_erXhcJ+w z0HTs7d84DESuw1lSk^5J9zd@x>eZ#Y*nj8Jun8CoIID@u0`C>-`wtey=7%%vjc^GI zeR^{UC`cnd^!F3EVE9*&K$YxKGl%NA!g~5(YzZr$@0Z4P?Q52YWq;E9lQ}cNj;e2T zTd0nh0O048XpjZ_!?X0&%LV( z>cb$+%sr)21w#maQ#o>i^jM>maps)eQIWn)PdS%+Z-(Nhn~;pB*L&yRXp=SN-xih! z+$0XJ;`|^Sgan2gvqV*UZAd)V$PRH!bFa^G;rRp}KQE^f$1bhz3Y4M9jG%Dyn~+Bv zOW54*Dl1o`+NEe-UYgFWc($bh*FQ20KqRIwCOh5IKGHe*$VV>3vOwgoS@z@QgSp;f z^n Date: Tue, 19 Mar 2024 20:37:45 +0000 Subject: [PATCH 2/3] preemptive backport #1172 --- .ci/docker-run.sh | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.ci/docker-run.sh b/.ci/docker-run.sh index 02f0c42c4..72baaba9a 100755 --- a/.ci/docker-run.sh +++ b/.ci/docker-run.sh @@ -6,7 +6,8 @@ set -ex cd .ci if [ "$INTEGRATION" == "true" ]; then - docker-compose up --exit-code-from logstash + # remove the `--attach logstash` if you want to see all logs including elasticsearch container logs + docker-compose up --exit-code-from logstash --attach logstash else docker-compose up --exit-code-from logstash logstash fi From bf2d6bc2d8c37a0fe864783e755bfea07591d9bd Mon Sep 17 00:00:00 2001 From: Ry Biesemeyer Date: Tue, 19 Mar 2024 22:38:46 +0000 Subject: [PATCH 3/3] renew certs from 7f505259~1, including extensions --- spec/fixtures/test_certs/ca.crt | 29 +++++++++++++------------- spec/fixtures/test_certs/renew.sh | 8 ++++---- spec/fixtures/test_certs/test.crt | 33 ++++++++++++++++-------------- spec/fixtures/test_certs/test.p12 | Bin 4291 -> 4419 bytes 4 files changed, 37 insertions(+), 33 deletions(-) diff --git a/spec/fixtures/test_certs/ca.crt b/spec/fixtures/test_certs/ca.crt index 4ef76fa08..6626206b8 100644 --- a/spec/fixtures/test_certs/ca.crt +++ b/spec/fixtures/test_certs/ca.crt @@ -1,7 +1,7 @@ -----BEGIN CERTIFICATE----- -MIIFNDCCAxygAwIBAgIBATANBgkqhkiG9w0BAQsFADBMMQswCQYDVQQGEwJQVDEL +MIIFRTCCAy2gAwIBAgIBATANBgkqhkiG9w0BAQsFADBMMQswCQYDVQQGEwJQVDEL MAkGA1UECAwCTkExDzANBgNVBAcMBkxpc2JvbjEOMAwGA1UECgwFTXlMYWIxDzAN -BgNVBAMMBlJvb3RDQTAeFw0yNDAzMTkyMDA5NThaFw0yNTAzMTkyMDA5NThaMEwx +BgNVBAMMBlJvb3RDQTAeFw0yNDAzMTkyMjM3MTdaFw0yNTAzMTkyMjM3MTdaMEwx CzAJBgNVBAYTAlBUMQswCQYDVQQIDAJOQTEPMA0GA1UEBwwGTGlzYm9uMQ4wDAYD VQQKDAVNeUxhYjEPMA0GA1UEAwwGUm9vdENBMIICIjANBgkqhkiG9w0BAQEFAAOC Ag8AMIICCgKCAgEAy1MyoBa4fXtv1eo9rkvcc2qCdn3nz6C9w63tD+w4S9wNAmCT @@ -15,16 +15,17 @@ X+itbWl1j3E8vS4piboAOwMLQHywaA0wFd4HpouiNjX8hPCaZ+l+T1z/JY98Luy0 eAJhEC/kx8YCya/T/JrlWtZAYEmQWJjLWmifqfFSMJuCfREAGiNGgZ2GFjdAOKmD CZKAVnGvTrhEWvVu38yXcwmY9/nfmZLA92T+P/PDghlO+WbApbcXIwOHBgv/Nfsn RzozMw8sR2LvdCPOavcQ0iuKvg7zrA3PzVhF9iSD1lfzIokr0sEBStgKMncCAwEA -AaMhMB8wHQYDVR0OBBYEFKFadJx46upif1BrhYZ0iu8o2z8rMA0GCSqGSIb3DQEB -CwUAA4ICAQA1vWQrSXkiOzFVXg1ozd9/60yLIamPlzx7Rfl2trHyvi3KKIj7NE/j -+7/OJ6L3zysJ910Hsisk0wudOnYla0aWTfiMqxLeXpYLrQNTEL95xUQkeQXHmrqU -shdYIucfSilGnFssWvTH6oBI4GPh0jZxj+k8iv6Tq9UHi61m8tvvAWO9hal0Oe8m -L06OE9Cg+g/M/CMJU7Fmenl3lfUse/fiIc9yAtcBzGqzg0R4us/i3ztzWnDOjgKi -MXN8ErVKluM03WIlhZtTD1D/xBWeKfScQ2ZS3zsXDsYUVc/4Zx9f/P6nf1POgdvi -MirVyR+AJfMe2QwdDJ/mQFvEfwofWNMRlNCRhklVSY9KzO2GsFGmOs8se8vhpaSz -vCnCEluheVJzVGClTFMhBW1zX7K5OK+3WMpZXPYgWQ3qPpyRV6biZ4BEn5dssU4l -r1eJYa5QSF9n/daXDAcZR8V0gcSChmPJX7xPPXje4klI0Nvx/7tXLsWmvJQd35bA -LLUZymTSxwRoSoCpuG5eh6dlekFZa8OWJ39+pK+MKs40xfrUoGpbdv3lipW5KCsb -l/jGuWpg6pdhxMdLxF3npLdgsa36w/BR0b3Db63gn0F0MEh7ovsd/vI08BedxFYl -nJXby70tETVBFeg51Sakt8MT6il+ospMZGaNTA9CAXf8k+HIY4t16g== +AaMyMDAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUoVp0nHjq6mJ/UGuFhnSK +7yjbPyswDQYJKoZIhvcNAQELBQADggIBADeI0gRfzF5zyhCCmtlA44L1fo3BEYtm +0Deq2W6bsW9zakYT7fivCUbt0VtS0jzhAlbaLfksJk+Emg+kpsy/CdFr8nk9jlpN +XJMKwjQIVGYDDlJsP9VDw2m+HhUugEpx09QCREaCWCDtobE9bd42VloPd0u3VWZx +u5rSrZCy5wjFeq3dPEFPyDTfV6p1kXkwy9pdG3ww0rw0dqj5OqcGhLyG8b7q7LLP +aFVuwjnutrBJtDNOsvbD/dyybQVj3hF1IpVZLwoFQ3ji43/X3NJ5jdo/WrwwdwbH +NE6YxNlsIrql4sJFeHzNukTxcC5wHcOLtc6E6dhe7uK+5rRD75+odz85rPLsBTPt +zje8OWyxO1cGol7inpKUsO9ITFQdDC9iyRjvDRouwneT+XeVwW6BmAKg4DvXdLtQ +oQNLlMbbZWskvWoI4amXwSpzWmn4mRK3e4IPWFju64QRvkEExFynvC69jeih5Llh +JU3OjLobG4wKOQHB7w1UjiPJNsxGB0P1zug6ztTBLjsvJoxdJuIGkCsI7g12cKNR +PbXp8453klofFpMNGlCP8dns92Qu20pPvYJcWiC9k42nYu3FHDMbAfSrFU90RNS6 +hRWkpXZOMIY1GdudgsxanDtJgFRbkPzwNkMcBQ1538f9U4MrJ9vPsuKx4bYbZ//8 +pIe/z3b1V9zV -----END CERTIFICATE----- diff --git a/spec/fixtures/test_certs/renew.sh b/spec/fixtures/test_certs/renew.sh index bbe6ab705..577832634 100755 --- a/spec/fixtures/test_certs/renew.sh +++ b/spec/fixtures/test_certs/renew.sh @@ -3,9 +3,9 @@ set -e cd "$(dirname "$0")" -openssl x509 -x509toreq -in ca.crt -signkey ca.key -out ca.csr -openssl x509 -req -days 365 -in ca.csr -set_serial 0x01 -signkey ca.key -out ca.crt && rm ca.csr +openssl x509 -x509toreq -copy_extensions copyall -in ca.crt -signkey ca.key -out ca.csr +openssl x509 -req -copy_extensions copyall -days 365 -in ca.csr -set_serial 0x01 -signkey ca.key -out ca.crt && rm ca.csr -openssl x509 -x509toreq -in test.crt -signkey test.key -out test.csr -openssl x509 -req -days 365 -in test.csr -set_serial 0x01 -CA ca.crt -CAkey ca.key -out test.crt && rm test.csr +openssl x509 -x509toreq -copy_extensions copyall -in test.crt -signkey test.key -out test.csr +openssl x509 -req -copy_extensions copyall -days 365 -in test.csr -set_serial 0x01 -CA ca.crt -CAkey ca.key -out test.crt && rm test.csr openssl pkcs12 -export -inkey test.key -in test.crt -passout "pass:1234567890" -out test.p12 diff --git a/spec/fixtures/test_certs/test.crt b/spec/fixtures/test_certs/test.crt index c6cf6787d..6aa035aaa 100644 --- a/spec/fixtures/test_certs/test.crt +++ b/spec/fixtures/test_certs/test.crt @@ -1,7 +1,7 @@ -----BEGIN CERTIFICATE----- -MIIFXDCCA0SgAwIBAgIBATANBgkqhkiG9w0BAQsFADBMMQswCQYDVQQGEwJQVDEL +MIIF1jCCA76gAwIBAgIBATANBgkqhkiG9w0BAQsFADBMMQswCQYDVQQGEwJQVDEL MAkGA1UECAwCTkExDzANBgNVBAcMBkxpc2JvbjEOMAwGA1UECgwFTXlMYWIxDzAN -BgNVBAMMBlJvb3RDQTAeFw0yNDAzMTkyMDA5NTlaFw0yNTAzMTkyMDA5NTlaMFMx +BgNVBAMMBlJvb3RDQTAeFw0yNDAzMTkyMjM3MTdaFw0yNTAzMTkyMjM3MTdaMFMx CzAJBgNVBAYTAlBUMQswCQYDVQQIDAJOQTEPMA0GA1UEBwwGTGlzYm9uMQ4wDAYD VQQKDAVNeUxhYjEWMBQGA1UEAwwNZWxhc3RpY3NlYXJjaDCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAMYhP2zPOE3ke9naeK+cIPNV91htuoGGARs+mlY/ @@ -15,17 +15,20 @@ bFMKspGHnytQZF+a+mc5H33G9HiPP3jZE2JjrWlOay+j6ImylMgjcZmHAgaUe3ET tyczoQ5/L5BNiyA2h+1TU8jWicNDtl1+CtOsgEVBBHA6p/IHhsHbNZWPrYtIO9mh hiJw1R5yrITXnjZY0rObITwyt/e6Sc3YnoQfsSGaLJEG0aDc0RALAhgzj+RY8086 2RKOyfdw1sw1RmJKdCf+dOzhPyDpvauvCxrL8UZQTzcBs+qpxOWnZFRWeNsLwoDn -6JXXAgMBAAGjQjBAMB0GA1UdDgQWBBRvvz0yGw6Tz2UxbBLAGyzVMtcMUDAfBgNV -HSMEGDAWgBShWnSceOrqYn9Qa4WGdIrvKNs/KzANBgkqhkiG9w0BAQsFAAOCAgEA -q9VvMIXfu0EHj+nPLUGDidkzkDjLq9nmA5wOkcMlha7IfpLd7FnSfsb3QDsd3m2C -xGT01Oum2nkxHVWwQe4em9rhaiD/I2dMq5ztXyQGi4pM75VInztA1ZaQTrsLd3So -1kar55xqcreny7UJpqGhLgyGW3SnREQAqJpQUamPpERUBhYRMY4e8N+y+ry5SFz4 -HnC9pvqJFlL4Hu4wgYeJJTTTwSm1C5/Tgu0WYq3CkwkhFUgeU5AkFKDJ3WiyN6Dp -6D2A2QHk5lXyU8uLSpdR2tHwiMbD9MD7pgj6rcyGx182LDwqOcPzRC9mT2/ESWlE -2x/w45MpwGc5Zw4OzYt0iOCuyAluoI5nXJrPvWQ+jW0V4b/muctLR0oyCOUkcUWf -dwQUSIFbqcpbC+rpWOqD8/8U04JRArkymjfnSPjNfuv6Jbf4UblI3wBokbh60psS -53AVMXWXA04y/ij6A/6lOrh2KIqY3WZgQBPrcYe648OgRMIdrlw6athn3JgRfuvm -T3xFqJnz0rhVrKBGJRCBxHi0PCylM3E3ECRxSSdXJ/EcD2XmqTqirAXBTjwT6p0F -+Vc47AaNgsHKInpNeIgKNo7z5wmZnG92hvMvOWZS+ldaL/yf78oTagUavlD6xzmd -LVP3dRQC56AtArQVw6JIg9GCPVnezN9hhjA07yy7bmY= +6JXXAgMBAAGjgbswgbgwCQYDVR0TBAIwADARBglghkgBhvhCAQEEBAMCBkAwMwYJ +YIZIAYb4QgENBCYWJE9wZW5TU0wgR2VuZXJhdGVkIFNlcnZlciBDZXJ0aWZpY2F0 +ZTAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwHQYDVR0OBBYE +FG+/PTIbDpPPZTFsEsAbLNUy1wxQMB8GA1UdIwQYMBaAFKFadJx46upif1BrhYZ0 +iu8o2z8rMA0GCSqGSIb3DQEBCwUAA4ICAQB6Fptgev/wPHn36lamR9RCBpqvh/Xg +4nSnUfT1EVkEI7vUKkC/+/XeRTfnc14Yclo3uiYBY7QM953FhXOmlH0Rx1wwZSME +ZzyO+1TWNVR2QI7/MhpXdKpqHhNLNTYKFa602ZTA5NXa9XDJ8T3kjbuAKiNwcuu7 +RzRK0o3KOWe0uohuI6bgcpgpKqcxrbtUkrPOWAn+XK7JQVSEV1kst4uDr1S+041c +T+NHFQarDXw5g/Y0pHnU42dPyDvT/RrcBbzbe7qylFTbjKro/uFqPAayHlLMnGZp +ZthGAPJJ0pDzBBxGtUmwOnat/HKWe2UN/A3Xqmy0Za7adhrYGj0IaZ0SNblNYDKy +OjWtfOwLQrD9NEIhBXBE3KS5uyXP8kZESnHtIN0b7SMyP7lUxTQ/Rh8U7S6QD9AI +gc+AfBx8UO+fdW3Z4VK+DU0NGRP+127w0yiEz1OtfS87dWBQq+kk2Hlc9TfFeG0b +rckM4v54X8uTlnNfPo+RYRkMAXB/fnx2vVIyxTxFPo4bAnTFA6vnIz8rrRO+Vmh3 +oOclhE+ZemZ3BEC+Tgpvb4XD8pvDLnNOYr8tuDjN9jNNDofxplbsjI44wnb1v3HX +M8Xe3P1WfqpWZniRmtVi/CWjkPy2JeC6zW4dn7JdkfEFHGsHQZrEZyrVrtVFPRFo +hbgPGNWCxOhWzg== -----END CERTIFICATE----- diff --git a/spec/fixtures/test_certs/test.p12 b/spec/fixtures/test_certs/test.p12 index ccfb69ae412b16e27689c3aa6930d4410f6744a0..2843560c2430e6243836249e837ddcdaa7d89c6b 100644 GIT binary patch delta 4263 zcmV;Y5LoZSA;Tg-FoF?30s#Xsf)Mov2`Yw2hW8Bt2LYgh5atAe5aKX`5Z*9?2FeBr zDuzgg_YDCD2B3llyD)+Vw*mnGFoFiKkw7aD-~2ip>fHe5Mt{Vz!w;A4k$WM3ecf1; z%z3ypJ(65cel38*fPw}w=kfOVX!wnGYLycL09Z}Q) znxeN)f@tJvdne&@dS`?{P8D1+LJmoxM6c{{6p>a>^{R|C(FK@+a9B+J3VeEW4FJdV z*fc+iw=3IM_>GvYG)l2f6!Hvz8~oL14JBq>A{dAgl6)gP&BrG!Sq;(*A$TRA{Y~XU zelU=>UG?VQb6&t?6CU46rgT3Z=M9|-U%5168WArTKRw9Wz|k)%bc})4GcIlyAhc`D zN%D+RiRYmQpiM_DW~G+pptbR#Q-Hs_wp&SX7n9mcLxrg&Z zh}FmAKc)Lp-;T(BOl7~(@zGHOH!(tWi^Mm&og&>sp0{YV157Qp&5Dc=qY10>X5ZJl z;I9h@JcSsie}4&~y$vpZ-rP+nq8530Ba9EFjt0QX#)LXH zR8aXyf_X{O4Il#wk>~%ybd!DDRr|1CGZjKiQI6ko)iu_>3tuLG3=)}V40Vej>0hY( zD2KdhbZK@N%fk+Hvz0Mmj`NTRb85Pct{#{<-}Rp@VdoKV@cp}BvlsXkp0#V_A3PlL zPH@MEtI;teoH5Trx#`3P4~RL+Y3=8$|84|PswF(L;13kp6ly=Myg?FC#>g=u33*OJ zWwTo$Y{uuvm+Y^9+rcbq(6n+>D7S$@En)`2(4whBmqpK`*U;Ga=KY3X#aPVQ6rI$P zec+Kr>5eyg>av~lQaxZ(IEiEm_AcQ@yH8nsWZckci6WR{0|lr&Dbv*I>$OcE%q&Dn zAm9;@{ZM3iU`Mqq^IIshPT04VXt9#?ACm1EZCIsUgLs91Dz#wbiZ5mh0`_U&LOOA` z7p%Z_9@IKg{gP3hDpaTurO#le;<($56?`@NgotFE(!4;UU%AO8fpGodyO3O;!Y@b1 zbW8M7{UeP=hlgz_NlVdayxr?naWZi>nGq-!;CY!8^(M|2fjCnDLRxzT)4}eWek?1N zqHL<=$iS+9!rSd^);sl3hf)6N{RTa(c2b=;{f`qzc$=MvwDy+g@01GvSWe&RHkP#0sN@74eoBFmq@9@!D}4>ecw zRY*`eErMkox75h>Arif!%(Ipz22$lv;SKs?-uY9JtR+a+r@_{;If zJyNr>ZGBzB_(zODPE~TT?KRx%g|GfGUBeE44>q_#O4=clIZro?3<4~~z`Z)oO9C~E zD1M4WN?gZrOoVB!vxSTQ8w#d?$d0A_b#9} z-=Z&PV=_$rS@r}zQ^z)}F+87uGmFXKV`y9X7Kw4GAPC~^z~pjX&<`Z%LFs{+p=c<7 zht#v#NcRMnc-q(0T+EWw+7$K89r!bqaFJ{U~spW>qAIfJ3m9-IE~{R^9NEJqRL9a=>m zt*xd-&qtDZY;v|W(1xe@HD~lP9kPhk+hz z9jmHD-~@sRP&1i3_M{)&Un^ACQ?qd#7YV3k*@Qi}`}jpAnr^8hkCmnY?}6n*l{h1} zKgS(oLA=#BO6$~xX|-S1I6qjr3_RUk$VAKVO|rpCYw;3(8^&X!+gV%&bSryYCvTJD z1}IorgY5|}zgZ9yeM@3i1B zTJtEO%b#{fks)@O83tlaz5C@1hrE|wjZ2kQ*#--Dk>w2q`tRNgVD}@EKc^;7$#re=bX$D#deqRzFE|b*#^D zY1Wg00iaU1r-(<+oXJvO|JM_QFWzoY6M4~++Gxsl1|-SvYJ`o7KB~LY-W>_N1U0!+h&Ji<);T>7$Gh*J9pTg{Hb9;t^fM_T1nh zh?BR(`-}wme^4Q0-4pZ&g0&In;$@UHI1wZat@KkJ5s)}`555Fcm(VfqiTHzWllnAT ze1dKg!90xUb~GIm&fq}BxXPJ#ZX=%`=1rO&1jsE9hB;aJ(W3l{CN%6d4YRpEMKkw< zyQr58W4#QkS|sE=NW!rEX5O{`zSJM=B-y{!taq)yf1Szg!uV^}#Wi5;uRR`jX0xyL z5NoAP2s8-^7Y}0x}_qq3NlehEN5 za)R+@j0DX(y8vgr9@Kv5?Da~+m#0uLQbRexqb{~jaUmFbU##)dasy3BlHN0r5Me7+ zq|@G)fAF9_EjgzP?3H&HEPfgttN7o5m91T8Qu0HfHBY#8no=w~t6gaTK0Agpi4rxD z(?80Nq)2=ca7(_%!!_DzDgM`oU(B3V>JHg2Kb;9ObJGp^yhUJwv#o#v)&8@{X%xVH zy`_?^h!CnFh&6%`_YRN)FZzYy=n0RwV8x}?QNtjH+W{?C>*R9bhQ+V9 ze}u*J=PpV=Fo!jUr4An~H%#$tF;x8Y7a9}#!Uo6)B$Y77Y(mU+=USH?0c_Gk8ZXc# zD)VSE9Zmi<9tl#ovPbh~1rZVq$WBj<-ATRHh~tLg{XZK3#&UaxTlzK}4pzgseajSM z+FkM(=u7k~C0R(@o*PjBdrbJ+IRyi--kG-5u*lqvLjY}#H)l?s54K`y197%Xqzf>`>+pPFPZR3E zdAeYSdGmcgomXD#Vy1B0Thz9|)BU$;g4xi*Tjrl&zYaOrFaZ1u;V^LGj#WG#N_NWY zF$o@&ZXp5pUcK7M~=RQz>@`7v};gz)NNvE2tOJ)$TV>bEt*hl4#(_2^a zWKZ%d?l^DJISGz~vQpITaM{rzwiaWmDz8niClC`EOhw(7g}k&RjW*uld@LNwSIUte_2~{=^JW3q}-KhyP8}kQ3UMPnyoZh9~6@HPLP?(ZH z2$6%Si=&n5e~s%Qr}{3>&`$K8=?MDJVk|%`&=5H%j6)a-j240A{OMsmQ#C<_b?LBr z{#guIv425Mc5j)=G?qMu@|R zQ_ce3uSfyU?4_e4W?Jc`b!iVCdYF4|yb8uk9m@z^f5Z}l2>sC-9nrBxe?Nj9``!f$ z4!&)%+QiKj*m?3DebOyzC3zVm>(!&kEa@dir|`DMN0gm?*G2D0pyE*#ki_xUXqMFq zY8P^7H>Um>7c=4D(LQ{}6?=VOyf(UYbD61M4bD%V9mhsZ_;{~9B;GFQ5ZLMOaqF)` zH&~foe~Hs9rxU4ia8o)qAp1cukgB2g>@|alQtK3cX5sK1Ss^I|a^R&U+wpjQ!b0=5 zVbq7sQP`uBv4P1k@t;WB{{EBCURk}9&50O-erQa2Rp_14(7#g2@Iv?PW&yG7fp)d^ ziaexc=(oq+Ja-UG%JhW9XYVXAB`_lf2`Yw29)|Y~0SOf`76cUE2mwZRF!mAD=iF>U zT5S}}S0kyDfDjcfO3+Mna!c3buqE-1ZNA_i>2L&xwlj*Nf4u;j=3FKF1PB=V${H>X JkM{xs2mp+5G}!4N3kIeq=(O9Hs|eX_~_uY1&Vz~6d{#8A>Q9BDOAxhW4yvs+^NW&K=05}PlAwh2sn zDsK+7d^}WdSwc;kp;vsDyM$hUjDMU|=31mtZh1V|my$>Ogg3JB3@Q51aD=LReIHAO zhO_-2CkvxwuwRHTC!|IKPmjrK-CK^avQ)Qv`Ad0c`AUKlAT@KJt$NCEl6!MBwUX`wB8$C*O!8=e5|~na?ER!A#XG#IO8B za(Y)twFlWj+F0bFcyTny(U0)D5R#+M$<`?Wr5EE^Gz-ikn0C_h}1g(N& zycm%Z4;2D}djLD2wk1k0h>r9hFJJ$URS!M$GxzEdsCQQWg95*hI0i-^V~0-Xau#Do zC_S=>aEo~3RI4urXrRd6D*ONObmhd5-_TxTZ&LC!nJinruMHaCjla4ozDK)JCwYtk z@WRnkId_7pUe7~+t+ z1mp&yS@HCXs44D@Qd7CDnZl=!XMH#nXmRX-h2=qxQ=YikFzD8MqHZ$8SGcS(LbV?O zE~)?Ud-n_+?q;MIQ|bcS!nJY~RBtPNbG$ME=hj&gdq#$TubN?jx1udP3G7O*D))j= zuD=5hfJoM9VN|z6TVwdgZPc?9F5g6b5E!;g`*mVhP1#R5P->c@shhDLdshVb>o_fW z2bBOt#K=6B*<+3=btCtmOEQs*;daFzdP4I^sm%wzHimS%=U%eOU%iDi4pxRYw$$<+gnpE zW+f_#4EMln1PG^1x$}Kk6Yiow)Lr#@CH;644*gB zy&))pqI=%vud!EXk$WM3oF;Y+uAuN|8ksXZ0NyAm1cC`rSIEUk3@*QP#(QY&7qQ=? z4pfbbF6KJyaHjq21rd9d@COAuH3eRPYUD`rE`JA})!aZFwe_FyGT3So4?w>s!toRt zfH)F+l4R+NNJ)p)J0yzV+0BGwZY-2;o*KH2D(;}6 zpDtCAy0xm>CR>!tsw`v0UNg)cZ`8JZzacLr>TNPq3iHUY!;q+BG1K>Ir4Cm>Y(4W1 zRODv87=@$Q1@wY{qKwn|N{ozQ)nAy!0HJ)uT+APOQXEy(jfKrL zbF@8{p4cFCPxUc?5)_4q>8IKhly%*qKShaQUr~_Es%#YCkEJQF2q|66@%hWII+5(u!_iydnp7u||FWm|e(0?C)0pxDc4sLS$_E0(H+ zMD$z`F0Nm%=~fH(E$U{Y&~0@UZpQa8lN6|Y(gf!2PmVm`3yYOHTK7AE z;U^p_{eO?(eEom{dV|L_Gk0Cx167n@Y)Ze{{=i0qo<5&6|6aDJfA@q)c~*_?j3Rb_ z$Uzg65?ich5ZwIGA)?nIj*MZuO;AT8mE3j<4&Iv|LSxS|*=IU;Rl|Op`SKNPQ?mT7 z{e*=p5vu$)fbSHs2@o_BezfI-!TLa+Y=&x&I&n|hPYh@0?zz(f5Hy&a;Z#ZiL&Cr! zbdq%}0ewe*&zx$B&00A;r?|_)Mr7-MAEqTn`tw>G_&k%iI#UCRQ(GWU+x`mE?2P61 z{sXem^h8d+OC=`Nk_izj3wir7#I0^tQf26yX3-2bx2_N_X5Elcl>7O4CX3JU?|-tL zn^$E*u0SjvR__$%1LH?E%0B366z0g4xV!f&Tl#uJQ|HLfI#PtKH8(k2CW&W^ zZ`K~IIM!~Nv;wQdCW#?|)P9qH4r0%?qMx3=>Ui~|fV7JF?14UtN7K8L6>6|B)Dw=g zC@@K8A-_KUsG!#!nPMT*TR!D&^ueXjrgtr!4(F<+TqXQ8i9(w6hKzIB%Lavr-uJli zXAB=@L-#<2pdh23QG<*y|DVj+zV>y97! zMwEZYs1GcSC6W$=mCDLNW+bsbG#YSP7(Ae;<|rVu<2p9-$a8^Vo?B`>-EJ#bDgi>< zZR{~vQDaslF1H|LZSIbLEAj|Zm&vWl3LT!j3L-7R%kCk{o&O@0dKXXhAy|ef!mMu6 zOYQ;~bXV5maDvY-xM_m419T1Sq9lu;+HG-+C6Eko+*d?5bt?4g03*G46#T z0ZusV$GZ^dwX%x*tB$L_Azlaui`=b3b4=20@$L0nZh+1GERkVtY}TLnK4*Kx0Xc|W0r0}&9LB^IL3(jEqSbh`=RpD` z-OTYp12@|8WQtAjhi0(G1YQK6P)N`!K;}y?K9k`j#;O4zsiuDAA(n@wI0=*!eP1JG z7>1AGU+hQ2HJi;f{nh7=3U!-q3VF+j<#);E9?YcUCdep%56E!#n0x4Vkqv|oEWMFj zt;V+`v0NQtJ_6WV3>0Q~?+rWybZTA1o+ zqNoB64!~(KG-m>Xo#BMuT?$?7X*2vFW{DfQrmk%Ra)yM|bPpyol^YbFIxyiQNl2x3 zv6DokA9|L5*JixU3cj=)_QTLlVL_n<-Y&FYE%_O{rt!r+x~aS<=|3y`z`CFPPt)Di z0LX#Y%YnLxIPrO>C^I1ja2Ii@8PKf*?ZH?LRFT7Zg+#uEY+lpbctq@~*DukdGs*)^ zkr_g!SCu#gHQP=9i0IKP`J~xTC|6-zQXs67{kKB3VbG)qv zs!(y3`BHYQ2{Pa=FQUwhA`_IUSv2xC;Q??ffH34Jfs~0yI)i5kbSyD%tO7A5Fe3&D zDuzfNhW8Bt2^BFG1QetHK9|(G>7LIk*>9|qjVz(XQ7MuU6)p}YDQLmNOxF|7*(Yo- jf)|atn1|5dX8ReM>a2p26WRm_5`P7bRJ%&M0s;sCor~C`