From 1921e9ef26dbd10a014fac396139e5239cb31b37 Mon Sep 17 00:00:00 2001 From: Karol Kokoszka Date: Mon, 4 Nov 2024 12:06:19 +0100 Subject: [PATCH 1/2] testing: update IPv4 certificates for Minio --- testing/minio/certs_ipv4/CAs/rootCA.key | 30 ++++++++++++++ testing/minio/certs_ipv4/CAs/rootCA.pem | 53 +++++++++--------------- testing/minio/certs_ipv4/CAs/rootCA.srl | 1 + testing/minio/certs_ipv4/README.md | 7 ++++ testing/minio/certs_ipv4/new_request.csr | 17 ++++++++ testing/minio/certs_ipv4/public.crt | 45 +++++++++----------- 6 files changed, 95 insertions(+), 58 deletions(-) create mode 100644 testing/minio/certs_ipv4/CAs/rootCA.key create mode 100644 testing/minio/certs_ipv4/CAs/rootCA.srl create mode 100644 testing/minio/certs_ipv4/README.md create mode 100644 testing/minio/certs_ipv4/new_request.csr diff --git a/testing/minio/certs_ipv4/CAs/rootCA.key b/testing/minio/certs_ipv4/CAs/rootCA.key new file mode 100644 index 0000000000..d045b82593 --- /dev/null +++ b/testing/minio/certs_ipv4/CAs/rootCA.key @@ -0,0 +1,30 @@ +-----BEGIN ENCRYPTED PRIVATE KEY----- +MIIFLTBXBgkqhkiG9w0BBQ0wSjApBgkqhkiG9w0BBQwwHAQIRJi2Vo54Ya4CAggA +MAwGCCqGSIb3DQIJBQAwHQYJYIZIAWUDBAEqBBAG57YEFJm6Gl7WIQzJECMHBIIE +0OuoVw3JBnqjSTtShZceM4XOpk7URI0SKqNk4AgB7RjVhO0HTCXQrkQgnY5Foc6o +8+727sAwmaCRPomhB0DVHa8qAxppvtVRJg1MDv0k0VSPFnJaBWSUMTdS2oh1zmRG +L5Mu5YrJDV9VCnLNyRV8ulMI6wQYJ2ji+VvcD2GSXTnpBVKt1tvZkim27nH5maYm +dMQvbc8b0FUWGTR1/exUiVlm/DBOV7rgtRQx0xF5nXjyPgj0SETniK/7QOrJfhx1 +eUfoS2gtYKjsR2/WTKgPSsEiFiV73YABPW/AmrZatxlCE3ou5xgk/3GdqUTISisw +4FOSDYNLpphyZ80/c1o1m8/accH3Pz5GUkEuIVf058MV/TC73b+OnV0aLoPSqAS7 +ycKXPcRib0ksWcd1RZr9BYZ5T8I2Z1zybpWosxEM3lj8gkyJO5/GCWf3HNbRgB61 +PwRF2+WaRoJxB5vJcYiUnUNDN2OZm/TviwSwxkiy/cSLeAl/t/c1D6WQoyiUaLcT +8IWuV5TqqYnNqAy/fgQ44krzkWmJaM2glzzWEp9uEievDX8WjNtQyrH/XcDZrNRz +ER5GBbLHidmn90m6jJekxtOcpk379nPnEfH2AGlzhld2wian4uu2hkVpMYFChDdJ +7WNdUj59tD92PP4tEsjLNEWfyoj0ws/jRnJHM7Zdy0/WJA1Jb1A8PpD/ONDz5xFX +gtnwjAryB6DkRHOjl/AfhydvpHA/6rK50L5I2R9C2nL38LB40LyRnRA+YRIqe7nz +xXNXe+/8I6/qczNSspRPX7X65vzqGgogUyljt0O74y1CcfZwCli6eXqFcQqkPc/E +9QS05XP4Wsy0CEgkZqj4uU6ScwssYQ+8kq+d3zNHOxo7oOnDPfR9PoMwAXJxUlWM +z5hZ3PGIqjrpLZByWKjEuWr+zxj8245Ov+hS9LxdzTVsUx9AlFNwfSNTl3SBxIrF +IXI8DmoINZhHI1ljQdzU/c8cdog2GaLHrcM53CJ1qwRs2c5PV6KqMpXzd59IYTQx +zgZP4MDApluNY/0KO9mjbo/R2Fgi5ufOkSD3i42CuYU2cKIVBYypkEpczs2mA9Bj +BCGquBMl9U2SPPM2uWOsjP1anuYdd0A5v+6U6YWZM4EQaxTqvyCP4/9d+GWnEfJj +0kzbthk66dlqAcSqYMbQT1U5gOl/UP6f5lwp7woVOtDVAHrVikQuWiI8J0w2wp5O +RFZlciJIY+vJSo8ZZ9xIQM6bcmHNitSR3xWMmYP8EQrWw4g3v7t39f+5dZDXeNkJ +C+bJ1wwVuMGNVpesw6APsbzy9RIOjzAntZ6uuO8AhM7FIDB6w+UcNAzIiU2icI/N +/x5PmJWdKnr4fTOsxzoSDqtBKP3DoxynRMNMlmWpNNCjXVhiZZJQZpOjiBNO2aEp +ZYxUDVkWPvwEOl6XpM2jVfdi5kH/HCs9+gAFSsiDKOwd2MU20izquBljkQy/SImg ++63hlkn9j3KE+Lc1hxdAhQozugQ6/npxBvf2GsBhcWev8rtOLHmESAUcp2dqARM2 +/Fkqch0/CKcJgSlZJTRrs6IAjqJ8m3b7qrgXKzx5TnWK670W0xFhpuwz2fq6nQa4 +jGR3DQuqwS4Z3Dlu9jySyB3ccqu51MQ7/MHFNoN9qY2m +-----END ENCRYPTED PRIVATE KEY----- diff --git a/testing/minio/certs_ipv4/CAs/rootCA.pem b/testing/minio/certs_ipv4/CAs/rootCA.pem index 0e5ee1ec72..41e0aeb832 100644 --- a/testing/minio/certs_ipv4/CAs/rootCA.pem +++ b/testing/minio/certs_ipv4/CAs/rootCA.pem @@ -1,35 +1,22 @@ -----BEGIN CERTIFICATE----- -MIIGBzCCA++gAwIBAgIUbGiRwNzGyZSsigmuANk4KhQjC7YwDQYJKoZIhvcNAQEL -BQAwgZIxCzAJBgNVBAYTAlBMMRMwEQYDVQQIDApNYWxvcG9sc2thMQ8wDQYDVQQH -DAZLcmFrb3cxETAPBgNVBAoMCFNjeWxsYURCMQ4wDAYDVQQLDAVDbG91ZDEOMAwG -A1UEAwwFS2Fyb2wxKjAoBgkqhkiG9w0BCQEWG2thcm9sLmtva29zemthQHNjeWxs -YWRiLmNvbTAeFw0yMzEwMzExMDQxMDlaFw0yODEwMjkxMDQxMDlaMIGSMQswCQYD -VQQGEwJQTDETMBEGA1UECAwKTWFsb3BvbHNrYTEPMA0GA1UEBwwGS3Jha293MREw -DwYDVQQKDAhTY3lsbGFEQjEOMAwGA1UECwwFQ2xvdWQxDjAMBgNVBAMMBUthcm9s -MSowKAYJKoZIhvcNAQkBFhtrYXJvbC5rb2tvc3prYUBzY3lsbGFkYi5jb20wggIi -MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCoCIaFppqykGdVTcM5JV3+A63S -3nZyv8Vbz7OUlGrQuimErddma393MtkYNmEX2ME4UnUlmOu/CA/tMfEqbBugyK2d -N4uxM8hppkElZpufMxjTMj4B54hI7cCV0kzK5GS395DOtUH7mfGIHJxZ0EOtXZ5U -yf/l+m/10hr9eoLhlxOiNtp1OlmKlV813abuhsyPfPYWfpoSJu9XZigudzuMOqJZ -bk9SG5BpgOIwjOhqNHad8lNt9i2aGbkxrGtBSa8irEZmUUsfILw6+4/ip/6lejz1 -SBKHXbO4SVUUqN89lQU9GB4lH/nWfoYDj/ND/gUVJRDMEBSW1H8JuT1mipTYCS1q -Mydx8MyeuWHClCHnA9UcekdDkH1puq91h04jPLgtVJcC/I6Jp6HYrWW0kgoWEKI9 -lzbpvumuq9xD3OQZqvNS8ZzPOZR4j9UX4YFuUyR0dQzEQVpMvC9dZuf0lG2KxfsX -ievaJZMtgWEVa7uD80cMNGbouJYtVwnNOfQ3uDZqDL0afrjZgtGzhnUYHlShXdaD -Aw9C2iQO1/theA9ehE2QB2e9em1OIexv+fVnH9qD6IJX2mBCnRCFsKcvX1waVO4W -7qNGrHqKsDjbn1ocKiIp/tQvv8wvtjeO3bd8C7eAaS4V+mz6JCkZwMnO82xA51IM -mcLVP05pJj19+xj59wIDAQABo1MwUTAdBgNVHQ4EFgQU0Fh+oKUrOF1oNZ2dyu58 -jVqbYEswHwYDVR0jBBgwFoAU0Fh+oKUrOF1oNZ2dyu58jVqbYEswDwYDVR0TAQH/ -BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAgEAgPLPYm4xBe2GVMLUI4Id0gpi8ZPK -/HHEDnuX7irnu2UUEUmyohPm/k4F7QiyKkzeMv/yyXkHF4Y9YR0X5356kxJDgQH3 -1TpNVNXjZa44QyPmyk52o2S3C2aLYRvQm5V6iF11R9E0/s20FwliQh3teZHQjyS8 -3SR8z539iqCOVYilBqt24vS4aveJPu0Z7TTiD/KIwOtwn06GvRsMM/FC2QoegrlV -F0Oi5DRpvFs1rEV/x1YPX5O06Wo7QO85KFrc4dnWPoDMG9t4tsRQouwk5o/MAfZ4 -6T0Z3M+zyJmtq46+oEleX/Dv1hghY4G5/5Ss8rqi3tSIJ1sgQ7nBba3CyFx18pND -ERs5Uwr+IN8gBZVCa/Ht6bHAwMoOsJqDqbqn43A3EzI+1Ra1Eh8sDlc+mH8MyAXL -1yB5LhERk6cmNi/ayPyVYQccZuQTMF7KpSnh31GGTIb1CxQbF+SFee5NuWzNoHYH -haQtHRko1Dx2euQbLK5iylhheCh9sFLQLglRUSDyXk0XmE20vJ3ye0wRTy0F/O5I -SaPtPMtTxLdWCslwaKLHz22T90JCGePvx5a2naSa4W02KoyMrgO0/BRIbJLNTf1u -yfIF+xjI1JUc4iTR/qhT5G3PoK5qT+gQ8QgJZ3yBzm++9eXJx48QlP3s/5hd4Tiq -uT12FBJ3rhjZ6wE= +MIIDnzCCAoegAwIBAgIUIb7hO8tB8AUm4DZu4ydzOgVy0yAwDQYJKoZIhvcNAQEL +BQAwXzELMAkGA1UEBhMCUEwxEzARBgNVBAgMCk1hbG9wb2xza2ExDzANBgNVBAcM +BktyYWtvdzEZMBcGA1UECgwQWW91ck9yZ2FuaXphdGlvbjEPMA0GA1UEAwwGWW91 +ckNBMB4XDTI0MTEwNDEwNTcxOVoXDTM0MTEwMjEwNTcxOVowXzELMAkGA1UEBhMC +UEwxEzARBgNVBAgMCk1hbG9wb2xza2ExDzANBgNVBAcMBktyYWtvdzEZMBcGA1UE +CgwQWW91ck9yZ2FuaXphdGlvbjEPMA0GA1UEAwwGWW91ckNBMIIBIjANBgkqhkiG +9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJq6cX2xaQy4d4GBHGVkzXrf8w/xUW/dl+nz +Mrmeo9DB48R5GoLULEwENCMvKxRAOKesLGBdGnPiLq5Z4ejqSvNhGcOh9dJyH3ws +5VtvFBizss0Wk098UvUO8HXoLIoMSTx0C+JNuVVca6xbrNO42bJNczm+yxN2IVYA +I/x4NPlg+jKrwmtm0C22TNu5V0ALdwrjDJUIfClkhAy6dBiq54BZq14oJ+E5O/pw +D9/+QDM+7pRindkGmEP97PO/pSfbSvYQnPTugslzFSFB+mzC8qQbAFBPfTPvGamG +3qNAKtQFhYpT0/9/4w6sIJd1uyWSQWwCJgYvVjPdQz3eugIm5wIDAQABo1MwUTAd +BgNVHQ4EFgQUYin6rwL+6QKsh9MwFqk7RU2IcHgwHwYDVR0jBBgwFoAUYin6rwL+ +6QKsh9MwFqk7RU2IcHgwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOC +AQEAIoz6R1tqeUaVsvbAGvQKFVOPtEGWnAmYwzGJ0ElRpkuvZ6fSWWwu6svlcwXE +srmMqpiI/hR2kftt0nkrnRCZz5qrEdhUabQjqVTmYYZkApz7+dH2SnSy7cNvUk0J +laeB6gnbhbIM9GdxxChukyJkRi3RR3jSxADg51ZpHyYUN5TGYMrs+4dYCqkAx9Lc +te0GnTd8wirWI4hkRZdMbujU2lZcdFyIQobm0rwv2J9G1V44L5IfLrmYc2mHGIrq +OXPxGl5hXkAbma6VnEoUizWJWhe1PbYgURbXYc5K42ZHmCu2acYQOqhSU8Qu+2Vi +SasP2uh6wDpFt72d6ZQO/Fpmag== -----END CERTIFICATE----- diff --git a/testing/minio/certs_ipv4/CAs/rootCA.srl b/testing/minio/certs_ipv4/CAs/rootCA.srl new file mode 100644 index 0000000000..d87ca4925b --- /dev/null +++ b/testing/minio/certs_ipv4/CAs/rootCA.srl @@ -0,0 +1 @@ +541C3920CD65B9750D69D252F9400DD74350CA7D diff --git a/testing/minio/certs_ipv4/README.md b/testing/minio/certs_ipv4/README.md new file mode 100644 index 0000000000..c5cd3a530c --- /dev/null +++ b/testing/minio/certs_ipv4/README.md @@ -0,0 +1,7 @@ +This is just a testing certificate used to validate and show the possibility of setting custom CA certificate for +S3 compatible storage - Minio. + +Password for rootCA.pem: "Test" + +To regenerate the certificate: +➜ certs_ipv4 git:(master) ✗ openssl x509 -req -in new_request.csr -CA CAs/rootCA.pem -CAkey CAs/rootCA.key -CAcreateserial -out public.crt -days 3650 -extfile <(printf "subjectAltName=IP:192.168.200.99") diff --git a/testing/minio/certs_ipv4/new_request.csr b/testing/minio/certs_ipv4/new_request.csr new file mode 100644 index 0000000000..94d4716f03 --- /dev/null +++ b/testing/minio/certs_ipv4/new_request.csr @@ -0,0 +1,17 @@ +-----BEGIN CERTIFICATE REQUEST----- +MIICxDCCAawCAQAwXTELMAkGA1UEBhMCUEwxEzARBgNVBAgMCk1hbG9wb2xza2Ex +DzANBgNVBAcMBktyYWtvdzERMA8GA1UECgwIU2N5bGxhREIxFTATBgNVBAMMDHNj +eWxsYWRiLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALy3Gpqw +Mkeauu76M6DU9AnqohHHCQYIvgZTv9mnLDz3buFe+/GhLOzVeLQ0G5ezOSJYV/BO +X7P9eZ8mbrtt1ruqklb5cQ7qBWuOPpGAJVU7WcM5NkD2XA2UbChfUg4Dt/SIWEr5 +I/Zuh8XNkFkkXJhuB8aj3VptaYVQpR3QKzx1+jQxyIsJP+Zs5wfNumfqm0Pr6rIL ++jsyFGHGsAUA7L+oy35bvPkwaHuGcjbZYUEDqhS8sIOAOXmWTnhIBJmqEdT/z2KX +8bKiiB3R8zNqVFuuOdPDLPDcIYisbztW4ZKxR4cCbMkOvPVmOEBz4Y/0woLAybEw +Oi6VL1ofioadO90CAwEAAaAiMCAGCSqGSIb3DQEJDjETMBEwDwYDVR0RBAgwBocE +wKjIYzANBgkqhkiG9w0BAQsFAAOCAQEAbn8hd2LN5QJsenvoAXvW9J5k5dVFgplh +PC3uKmrGM7oxV+qqh96p+ExAfTDTDduuRO/5bg0HY/9F4PXCSzDZUn7AxUSmD4t3 +aNmXAE2UQfoFKX5koAwW4Ka0RjVXEt/lMVYqKRrtiYNfBh6HNB96jSzPO6+aUhNL +oQHTVGG4Zd2v2IpimSx22+tuD4xCTf1F3+eyVaBrikpeQjLcB1yRrKeOiOMoFMxL +FgDdtUjqasvWivXrfQEHoFFeV3pvowi8IKewpVSDwH4pV8YWvbp/eJ88cFfLYK6N +kCkXKIy7MD5wmGZWM22cYmPlmcy61OCPXUXUiVCz9SBa1EeQTEIIjw== +-----END CERTIFICATE REQUEST----- diff --git a/testing/minio/certs_ipv4/public.crt b/testing/minio/certs_ipv4/public.crt index 3c4c73d5c6..f030ef784f 100644 --- a/testing/minio/certs_ipv4/public.crt +++ b/testing/minio/certs_ipv4/public.crt @@ -1,27 +1,22 @@ -----BEGIN CERTIFICATE----- -MIIEjTCCAnWgAwIBAgIUEY31gtCpYYW0WeD8xZZA06E0EbAwDQYJKoZIhvcNAQEL -BQAwgZIxCzAJBgNVBAYTAlBMMRMwEQYDVQQIDApNYWxvcG9sc2thMQ8wDQYDVQQH -DAZLcmFrb3cxETAPBgNVBAoMCFNjeWxsYURCMQ4wDAYDVQQLDAVDbG91ZDEOMAwG -A1UEAwwFS2Fyb2wxKjAoBgkqhkiG9w0BCQEWG2thcm9sLmtva29zemthQHNjeWxs -YWRiLmNvbTAeFw0yMzEwMzExMDQyMDZaFw0yNDEwMzAxMDQyMDZaMBkxFzAVBgNV -BAMMDjE5Mi4xNjguMjAwLjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC -AQEAvLcamrAyR5q67vozoNT0CeqiEccJBgi+BlO/2acsPPdu4V778aEs7NV4tDQb -l7M5IlhX8E5fs/15nyZuu23Wu6qSVvlxDuoFa44+kYAlVTtZwzk2QPZcDZRsKF9S -DgO39IhYSvkj9m6Hxc2QWSRcmG4HxqPdWm1phVClHdArPHX6NDHIiwk/5mznB826 -Z+qbQ+vqsgv6OzIUYcawBQDsv6jLflu8+TBoe4ZyNtlhQQOqFLywg4A5eZZOeEgE -maoR1P/PYpfxsqKIHdHzM2pUW64508Ms8NwhiKxvO1bhkrFHhwJsyQ689WY4QHPh -j/TCgsDJsTA6LpUvWh+Khp073QIDAQABo1MwUTAPBgNVHREECDAGhwTAqMhjMB0G -A1UdDgQWBBRP9nEI7QgqzjH+yi92sgemBpPkCDAfBgNVHSMEGDAWgBTQWH6gpSs4 -XWg1nZ3K7nyNWptgSzANBgkqhkiG9w0BAQsFAAOCAgEAXsXdSu4oiMq/9LGcyvau -Q9q/LhZYtbonyxMKGho2yJSZaKF0Izs/xfAcaydugiZWLBWLyhpM0eXElxjk3mA9 -GL2OsbMve0i7JmmTZbio1fLcg5S5iVoAKTGtP+ki60js3ujjzEyLzCZdZC0uvErl -Tt0j9NF2xqSV2TXVHcgVh5tTq+BkE2wBftejZt6FwmMLTg3MSneoofSrY1Nuvo7H -pAmF+fpxGOsOCmsakffP0Y5x6MnhbEVY9KewOjBPnTCWzMW44HrjeqMb92zET+19 -lo5axO1b7en6cOb/DdJmtGgNSYwIp+drVgwr/uMy9UF9190hE5Gq0hoLXTuXiPZg -dqaRoExjVbKhCfnXPL7KzucPRhm7RZYnqwg3xeDNHWUTYM8NhtuJRNpPSby6dKb8 -2Jrk7eUL88Tj1tdkTC0PIxLbKNu0xt8oVrrSsWOlrHjNzZm79+kudDO4B4F1msCf -4cKuw34oK0SSY85BGWJRhJDaF7KOexQLGP8zCdN177FolvDW5GhP/ERIr1fzdFav -DTR48kVtUNNJkZwg8soPDPCjG2fHI+BKo/eA5ZYyjkJLBDpXam9gvquMnUqzM3/3 -Tr6UcR7K1VqO8A/PxWDlsShESRv4GJf5xbBzRc2kHUkcg+um9/EYQMd0+mEn5CqJ -1e5dUbml8lOTjzlQnXRstMU= +MIIDnTCCAoWgAwIBAgIUVBw5IM1luXUNadJS+UAN10NQyn0wDQYJKoZIhvcNAQEL +BQAwXzELMAkGA1UEBhMCUEwxEzARBgNVBAgMCk1hbG9wb2xza2ExDzANBgNVBAcM +BktyYWtvdzEZMBcGA1UECgwQWW91ck9yZ2FuaXphdGlvbjEPMA0GA1UEAwwGWW91 +ckNBMB4XDTI0MTEwNDEwNTkwNFoXDTM0MTEwMjEwNTkwNFowXTELMAkGA1UEBhMC +UEwxEzARBgNVBAgMCk1hbG9wb2xza2ExDzANBgNVBAcMBktyYWtvdzERMA8GA1UE +CgwIU2N5bGxhREIxFTATBgNVBAMMDHNjeWxsYWRiLmNvbTCCASIwDQYJKoZIhvcN +AQEBBQADggEPADCCAQoCggEBALy3GpqwMkeauu76M6DU9AnqohHHCQYIvgZTv9mn +LDz3buFe+/GhLOzVeLQ0G5ezOSJYV/BOX7P9eZ8mbrtt1ruqklb5cQ7qBWuOPpGA +JVU7WcM5NkD2XA2UbChfUg4Dt/SIWEr5I/Zuh8XNkFkkXJhuB8aj3VptaYVQpR3Q +Kzx1+jQxyIsJP+Zs5wfNumfqm0Pr6rIL+jsyFGHGsAUA7L+oy35bvPkwaHuGcjbZ +YUEDqhS8sIOAOXmWTnhIBJmqEdT/z2KX8bKiiB3R8zNqVFuuOdPDLPDcIYisbztW +4ZKxR4cCbMkOvPVmOEBz4Y/0woLAybEwOi6VL1ofioadO90CAwEAAaNTMFEwDwYD +VR0RBAgwBocEwKjIYzAdBgNVHQ4EFgQUT/ZxCO0IKs4x/sovdrIHpgaT5AgwHwYD +VR0jBBgwFoAUYin6rwL+6QKsh9MwFqk7RU2IcHgwDQYJKoZIhvcNAQELBQADggEB +ABDXO/V3dQ67IJTKVLoeTilFWlkAYRsct8ehV7gu9ecWCmx07246fHQuUezpliI4 +CTV9W78d1GDwJGIi5tVJITZ0ohIL8dyIYmBaGPiTvZ26D/zNcSLtsA6x/ABzvLRm +5iYri3h+hljbxppZLfPi+se/hNWHXdvNrai3wt1f8WXlfe7qTFO47RBCROvAU0YQ +seE7A0GvolUVIATifSZT3jO1DNYnClHwTlxOq2rL+37klYdhL5Feml9AxYJyO0ZT +gn6N2mSbZtxVHbG9Ijz2eIfqg4MdRTzDqRnCmfIt175GGMb3cNrQXqjfuG6lJb1N +dKrN9CPK8fcML6roVdbHDXg= -----END CERTIFICATE----- From b0fb355878e6965fad2150b0613f40c9ba1901dd Mon Sep 17 00:00:00 2001 From: Karol Kokoszka Date: Mon, 4 Nov 2024 12:19:01 +0100 Subject: [PATCH 2/2] testing: update IPv6 certificates for Minio --- testing/minio/certs_ipv6/CAs/rootCA.key | 30 ++++++++++++++ testing/minio/certs_ipv6/CAs/rootCA.pem | 53 +++++++++--------------- testing/minio/certs_ipv6/CAs/rootCA.srl | 1 + testing/minio/certs_ipv6/README.md | 7 ++++ testing/minio/certs_ipv6/new_request.csr | 18 ++++++++ testing/minio/certs_ipv6/public.crt | 45 +++++++++----------- 6 files changed, 96 insertions(+), 58 deletions(-) create mode 100644 testing/minio/certs_ipv6/CAs/rootCA.key create mode 100644 testing/minio/certs_ipv6/CAs/rootCA.srl create mode 100644 testing/minio/certs_ipv6/README.md create mode 100644 testing/minio/certs_ipv6/new_request.csr diff --git a/testing/minio/certs_ipv6/CAs/rootCA.key b/testing/minio/certs_ipv6/CAs/rootCA.key new file mode 100644 index 0000000000..40ce8967df --- /dev/null +++ b/testing/minio/certs_ipv6/CAs/rootCA.key @@ -0,0 +1,30 @@ +-----BEGIN ENCRYPTED PRIVATE KEY----- +MIIFLTBXBgkqhkiG9w0BBQ0wSjApBgkqhkiG9w0BBQwwHAQIa5sXnb+pkWACAggA +MAwGCCqGSIb3DQIJBQAwHQYJYIZIAWUDBAEqBBCMsdvGUAcUcnJrJyFkOdC4BIIE +0LPJuQMhdIKZ9YCJtapl9aG/XnCsdW/vrcdXJSizCgyV48Uk0BmgJnId7fxOPP2F +ZQeuVSajlSicSH8g6d2kAZC0GrpUsAHBAF2OGbVEsAID7VM18tl7cbwBkpNeoo4q +geyFkjUC5G93oEOg8zo3MR6/ZwrN+FJ5rjvpZhl56XBB4Gy3QNVOeZVK8G3NuD5S +fUJ9InyHYogMhOQvZteUuc/qDCsiC4wGqByNHz0WsSQW559Crtwy9YULPLpRowfO +G0V8Dmzzc03ICn69tfGXkUFLtTEqi0dId8SYCVPtr+AnAsmkxHKumT55PrdeKHHA +md6joT1PRr9TnUVgBplywufwW1xWqScn9JF+Z5doh3JqqIf6nqHcRPglHt0kFOPD +buy9MS1eisNayP5+8He0hIqP44vaEYK1Ch4mjC+tA+qsIf7Hafk9WkbrN2Y3Jij3 +gyAUdR+cLPsGrSkn22SC6xaOfFIE99GBhjR2SuficnYkPQPFzCxQdI+XW4xLcq9e +5W2J16PUi2J4OrnjHe4Vp781xMFUdV0sK1PTygs0jAcqa0/xgbUC07VVEUTzGmL6 +rRQO1KUhpv7ceK9GpY/Lw27dTQH/4OeRKx5n0c5P6lGhfWG29jCfZKYfgtqqCpgB +gMZXFlkzWflkkKAYYvR2IMGwj8+FMWHDP5qV2M0+dkP9gGtvTurqqNafRJ6F7FSO +ul6+FDvTPzhM0i93h7QlduX7nyNp4UhR06AGH5CaCppG2xvSLpMlUub/m6MAKXyF +9cROaYO8pfhr2fDIePC8sjbJId2zwc4rlA2yUys/j7o77DxotiApPcm3iUcB0ff7 +EykKiJ3GPtO4JR/Rk4wUdv7EpH8W9g1aINEKAWckULCbYiCE9CwuiMawoImakdrb +jqKznsJAhFsf5aCcf8hpqz2LWsJ4ryOg2Pt4trvcipsXY6Lz8L70Mb4wu+JBMyHv +sX6jkb0REDLuWaJHY4+xuDtq/lsL0yigsG1tv5imfVW5i5MubBSDaFTs37iMJJlo +kmLX8OBF5d7bIV9vE8vEqx1aXn2iHrpRaA8iGkr1dS13bZMmA/hhlHqCrS+cFCv6 +U6ItpD+v6MrzG3i9iAhnhfspfAHdxePeh6v4vEGTQkV0Dzvlm8UcdCaFB4yQhUc5 +3PCD9YVQ9OKeQG6gFMILRxPh6FC26KcOQynXzQgVLxIXsvX51I4tMNxXHcKSAFDU +J3NQ7ySt1J+xO6wEHIm4N+9uD/cc6+aiK7fU4KQBc5C6FrwxXt4fx8qMQKQm1eum +OH7C1Cwf9ehtB4uYIjxCoIeCR69Wk5idlV8s9KPkAQ65+iCD+Sbov0vtfc6qAQUi +X8ZnOVjeRbYS0rnWqjl2FAoAvEN3tOGtwb3LmMY/4ecQVp0EKeKbdVCZroKu80CN +l6TIREfqmfQ5WT2WXIoGybfY3Fa/ZrdwRYGXdOgGmW91SmeMUtUinNr5I6az+vqn +z3MyPDlhfFVIvfY3hnQgGH2eqCqgyFcoSZ93qUBY937pDfeFd95eybZDECw7OQbI +RFcMmZhlECLDYz9YJeeb44j21SpQRzQuwSRvbGrMc90rEu47/IRAoj/bggMUrcsb +tIHDpRL+oc2XdUdeiICxAKFt0VyI5zosyb9kBQVG6EAV +-----END ENCRYPTED PRIVATE KEY----- diff --git a/testing/minio/certs_ipv6/CAs/rootCA.pem b/testing/minio/certs_ipv6/CAs/rootCA.pem index 512e201615..81b4ea0c95 100644 --- a/testing/minio/certs_ipv6/CAs/rootCA.pem +++ b/testing/minio/certs_ipv6/CAs/rootCA.pem @@ -1,35 +1,22 @@ -----BEGIN CERTIFICATE----- -MIIGAzCCA+ugAwIBAgIUDSZw/Dz4VK2ywzQFR3GBdRMQ5lwwDQYJKoZIhvcNAQEL -BQAwgZAxCzAJBgNVBAYTAlBMMRMwEQYDVQQIDApNYWxvcG9sc2thMQ8wDQYDVQQH -DAZLcmFrb3cxETAPBgNVBAoMCFNjeWxsYURCMQ4wDAYDVQQLDAVDbG91ZDEWMBQG -A1UEAwwNU2N5bGxhTWFuYWdlcjEgMB4GCSqGSIb3DQEJARYRdGVtcEBzY3lsbGFk -Yi5jb20wHhcNMjMxMTA4MTQyNzE0WhcNMjgxMTA2MTQyNzE0WjCBkDELMAkGA1UE -BhMCUEwxEzARBgNVBAgMCk1hbG9wb2xza2ExDzANBgNVBAcMBktyYWtvdzERMA8G -A1UECgwIU2N5bGxhREIxDjAMBgNVBAsMBUNsb3VkMRYwFAYDVQQDDA1TY3lsbGFN -YW5hZ2VyMSAwHgYJKoZIhvcNAQkBFhF0ZW1wQHNjeWxsYWRiLmNvbTCCAiIwDQYJ -KoZIhvcNAQEBBQADggIPADCCAgoCggIBAOxVoJABN2lgHf5612fFW8DXVFxF9EKa -tFn/7nevzoSRs10M/Z/J+IwMGwD1enK+XZqtLvKF0Nj1GmakXlJvyfhm+E7pIJI5 -bTIqczTaZiQeSOYHTD/kFLDBZIVEFIQWUKVtvNZXHYlEU/01J07x0DUR8sEvgDIO -QD+A+JHRZTWkqXqdt1s5A1GEnarIzpsG9bqVoHlXudY5lSavRoSD791GKtz6TH/L -F+SWNtq+2LHrIXCScHUn/UCNVE4d3PLqYZ9JvmjdIGB5M5JF2NaiuG+sUDoTguA2 -8oUYkQyKKHPet2jVXLQsWfrx9lKLivPwzzB1gs7WhC07ytmY0/kta8PRIrVWqScS -wEogMlzPP7I9hg4QK5fqzvmR+XLQ3+iWAJVZbu7BWmr6U+jy0S39rwubHY61fHRJ -PdhFg1W/pZB+sL3WcScvXI+yhx3Fh1Ryoh7BijNn2tls4347N2aP+l8CFF33ls8s -LlCXZDutZoYWwTVQEt5McIhkgBl40IX0xBxJdKlV4mByoIAaXJv41HPRdoL4Prpb -E69QS6RwbylNgm5t8+C4bf4/0Wfwh3O/OYAXKKNtNR6xlxQwwP4vmbx1D9t6ZQY5 -k5X/njZCvyouNkF7n5Oj7BPq91NPLdUQeYmSTEDVXwWq8IewMEKqbOyyG2zPz7eu -3AXm0FmnvAtvAgMBAAGjUzBRMB0GA1UdDgQWBBTUR4bbkel7h2xOSJfnfNNMX15i -7TAfBgNVHSMEGDAWgBTUR4bbkel7h2xOSJfnfNNMX15i7TAPBgNVHRMBAf8EBTAD -AQH/MA0GCSqGSIb3DQEBCwUAA4ICAQDXJdqZSs+Wa69x/O/6d3Av8PQyL76sduDs -EKU/e8YDbCT2zEy7AKLjFP1czPc/JNDM9C29jRTzCRfW80wSzWpO/gOGn9sLByYl -ZIxXiMdXeZXTj7ofenVZXgFxQMmNiftJE2V609adF0CLuZz5oS7BxRDWWkklm/Oy -BQbzs4G1tiad8QYf2HtWAbyclJBF2DwOcHskbm2QJDlXUE0hyIrQtrs26ksUZlZx -DiNr3wl0g4SCHaItLu+J81wIfCOL25YnD/Os7OOo7FxJgks3tPxDI/VpzU75xQ7l -1N7Wutu98EFWjhdmIM4Bw0v7pkezdb5jJbcA1YgEQKY229istuVqd6two8XAc0Qr -vA0aPlo3wZG9TicNqPRB5zeSqw77Smf0gBBwt7cSvFPkrxgsYlP20yXgeM1yxeA5 -SaiDrNL8n48TE33N8e596oISZqYGjUnylqPoGWaD/W8b+FGEnCciL08e5y+WbIaS -xN74n3KnAdLule6/WAyp+TnC3hUBF2ICoI7yGgvUVGPuxxIijSbwQNzLhWXdMnGa -1QCKeNm/WvsUAzvb3HkdYkk5PYPSPAFm+MdAVgAYn20dcS5dl/iw0oVAUSK8WQrV -Hp8EVbdLIOyIHmfzwAqH4xXxUgBm3b70imS9WnxE26I4uHj2xaoEcGyvOTqKN/cY -i6zRDvpY9A== +MIIDnzCCAoegAwIBAgIUDEwbaiJAZLbM97CbTptXChpCE+MwDQYJKoZIhvcNAQEL +BQAwXzELMAkGA1UEBhMCUEwxEzARBgNVBAgMCk1hbG9wb2xza2ExDzANBgNVBAcM +BktyYWtvdzEZMBcGA1UECgwQWW91ck9yZ2FuaXphdGlvbjEPMA0GA1UEAwwGWW91 +ckNBMB4XDTI0MTEwNDExMTE1OFoXDTM0MTEwMjExMTE1OFowXzELMAkGA1UEBhMC +UEwxEzARBgNVBAgMCk1hbG9wb2xza2ExDzANBgNVBAcMBktyYWtvdzEZMBcGA1UE +CgwQWW91ck9yZ2FuaXphdGlvbjEPMA0GA1UEAwwGWW91ckNBMIIBIjANBgkqhkiG +9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp19D/w9SwUsdA+UQZ6186Y2v9sG+0N1NoA3 +MZwaoQAbEDC8oahPtP4/w3gdtiGRE9Us/yup2Dw8sCmITmbUNZZNypqQE36fAjCg +pTIzTxVEAV+1oIJhv57htbjpEi7tHyuT5jir/JUKZvJIbEgOl/bCWikmXP7Umu6L +dEU1T+wyiKrfy0vZEnk2vv9wVK1DQaC2p8tePFVGXMQdyzve2XIv9YUpQor8P5bJ +yZf2+47wgvIf/0fxNeCNw+aRq/0EMMRtETsfSVKe7CUbXSGogufnTe0krrDijyTL +eLf4j1h3TvsZYxNiJZ54DskAsl98bJK2gGrMz7QOnpwL6mK05wIDAQABo1MwUTAd +BgNVHQ4EFgQUfFZBBjFALmH52efvMv10tyuvjZkwHwYDVR0jBBgwFoAUfFZBBjFA +LmH52efvMv10tyuvjZkwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOC +AQEAmxRBDNXhh8mVBWz4p9r5lt01ym86mGStF40FFfSp4lpVWenNBLB7D3HeW46u +GMcAqxUCGP+iI06v2biCwmcRUimf7VMjyH9YYeM1Z9pl6P4B2aMfza9WjaW/Ixk0 +JYkqOCDAj/wXGjfBkr4oXGawAXAIsYLLKZPNJXRJD8RBPfwz2KzS/sCltlciFu9J +2OiURJz/eqSz7WNjUrR9RNPX/4FC+8y9TWrgmsxs9UqsZFb7Xrpr95ZmFxxMWxnJ +eLo490HFezTX5RmdoCt4Ze5swoMj7VOA5DRL8VvE6jkBKeyuldxPk1XI0QbtB2Nw +LuyNoNH5HxkUMqQUWDzLCv/yKA== -----END CERTIFICATE----- diff --git a/testing/minio/certs_ipv6/CAs/rootCA.srl b/testing/minio/certs_ipv6/CAs/rootCA.srl new file mode 100644 index 0000000000..742678988c --- /dev/null +++ b/testing/minio/certs_ipv6/CAs/rootCA.srl @@ -0,0 +1 @@ +63C26007B19FDC333050768E0AE715850575E5EB diff --git a/testing/minio/certs_ipv6/README.md b/testing/minio/certs_ipv6/README.md new file mode 100644 index 0000000000..02f84993cc --- /dev/null +++ b/testing/minio/certs_ipv6/README.md @@ -0,0 +1,7 @@ +This is just a testing certificate used to validate and show the possibility of setting custom CA certificate for +S3 compatible storage - Minio. + +Password for rootCA.pem: "Test" + +To regenerate the certificate: +➜ certs_ipv4 git:(master) ✗ openssl x509 -req -in new_request.csr -CA CAs/rootCA.pem -CAkey CAs/rootCA.key -CAcreateserial -out public.crt -days 3650 -extfile <(printf "subjectAltName=IP:2001:0DB9:200::99") diff --git a/testing/minio/certs_ipv6/new_request.csr b/testing/minio/certs_ipv6/new_request.csr new file mode 100644 index 0000000000..f321524e38 --- /dev/null +++ b/testing/minio/certs_ipv6/new_request.csr @@ -0,0 +1,18 @@ +-----BEGIN CERTIFICATE REQUEST----- +MIIC0DCCAbgCAQAwXTELMAkGA1UEBhMCUEwxEzARBgNVBAgMCk1hbG9wb2xza2Ex +DzANBgNVBAcMBktyYWtvdzERMA8GA1UECgwIU2N5bGxhREIxFTATBgNVBAMMDHNj +eWxsYWRiLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMpN67X/ +ASqH56FK2xbJX9w9VSU2uwHUCcbjv69+fLQO9Tb0yg1lzGefKmjpq1dXogFcd4tX +2jNgXlPwfNVB9doRFxQeq6HwhGMUC5Oj3FWM8WjMoCsCiPx6NWFN+zggBGxYuAyG +T9nyjyzzHuvvhaUmEuzUjn5dNC/JVtu1xo9Ptcysl3ao6bHnbnQY+wxnC1GaFhus +CMEUdyP/yqzXUMA1CRVX54jCoFIv3OFvvpTL+ZNkURiBOleOpXTwcF0jmrNjfCH0 +Gtn2UodSoH0v9b7OnwPU47BQahB3xVVYDO+di9ugC205q1BmWK5w5LBJxtb25yk4 +BACQjeTXvvOIYlECAwEAAaAuMCwGCSqGSIb3DQEJDjEfMB0wGwYDVR0RBBQwEocQ +IAENuQIAAAAAAAAAAAAAmTANBgkqhkiG9w0BAQsFAAOCAQEAOIpi0fgn3I0ST8aA +bJHpitVAUqBMYiqipCuM71u3bZ36y/2pBKoSdKvGhCzkJJOa8mXm9An3f1j5tlS8 +Zfqv2+RTvToi6uVzgVPOKyW5eoW69GeJ/M67WzAtPFOJ2SzMECYe7WYuVcEQIgVJ +LcdsmWTlgADmOPuuou9IgS5BPjP1f2RmuTy+zrBgF9DeDcOoETzCM1rU/SwV4ClF +WzxXOMABHZ/mAvvD3bHsHJhemHltKLr7tIuAkMgpUt8ukyT3b4OH7uV3bJMlwSQD +S61xc/6vHNSlhBdSWWbdHDhI12iKcyFw3TN/FK6jXF7Ww2c/sRgQvKFNTsGy2qKe +OoS2OA== +-----END CERTIFICATE REQUEST----- diff --git a/testing/minio/certs_ipv6/public.crt b/testing/minio/certs_ipv6/public.crt index b992d05958..d3c1348d22 100644 --- a/testing/minio/certs_ipv6/public.crt +++ b/testing/minio/certs_ipv6/public.crt @@ -1,27 +1,22 @@ -----BEGIN CERTIFICATE----- -MIIEmjCCAoKgAwIBAgIUenDSJjYoI3TCvcLf8mZ/2A9s7hgwDQYJKoZIhvcNAQEL -BQAwgZAxCzAJBgNVBAYTAlBMMRMwEQYDVQQIDApNYWxvcG9sc2thMQ8wDQYDVQQH -DAZLcmFrb3cxETAPBgNVBAoMCFNjeWxsYURCMQ4wDAYDVQQLDAVDbG91ZDEWMBQG -A1UEAwwNU2N5bGxhTWFuYWdlcjEgMB4GCSqGSIb3DQEJARYRdGVtcEBzY3lsbGFk -Yi5jb20wHhcNMjMxMTA4MTQzNTE2WhcNMjQxMTA3MTQzNTE2WjAcMRowGAYDVQQD -DBEyMDAxOjBEQjk6MjAwOjo5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC -ggEBAMpN67X/ASqH56FK2xbJX9w9VSU2uwHUCcbjv69+fLQO9Tb0yg1lzGefKmjp -q1dXogFcd4tX2jNgXlPwfNVB9doRFxQeq6HwhGMUC5Oj3FWM8WjMoCsCiPx6NWFN -+zggBGxYuAyGT9nyjyzzHuvvhaUmEuzUjn5dNC/JVtu1xo9Ptcysl3ao6bHnbnQY -+wxnC1GaFhusCMEUdyP/yqzXUMA1CRVX54jCoFIv3OFvvpTL+ZNkURiBOleOpXTw -cF0jmrNjfCH0Gtn2UodSoH0v9b7OnwPU47BQahB3xVVYDO+di9ugC205q1BmWK5w -5LBJxtb25yk4BACQjeTXvvOIYlECAwEAAaNfMF0wGwYDVR0RBBQwEocQIAENuQIA -AAAAAAAAAAAAmTAdBgNVHQ4EFgQUoNaM0QGFt/Zs+purTvSMvp3Q+pwwHwYDVR0j -BBgwFoAU1EeG25Hpe4dsTkiX53zTTF9eYu0wDQYJKoZIhvcNAQELBQADggIBALLD -NOryc+SZl7QfqkGawR6Poew/hlS0e4WUEGe5exKQZrgzQ5UB1U3XcSevdzHpr/VH -mpb3gDPWCVS34K0SNSFNi2t/C2gET7zwBj6b4jBgnMrwwKUsFLGhrxxnWqtIVRmT -ibw12SAqdy1oF2QL3Jy77xBvdpqGXnqBGCzrHRAnQEMonpKsIw/HO7Jx/OtP2znx -VK3gMYHDEZOgssvdnx+GUW7Jj09PCYi8a6YYB1gl7BExUepoM6C65PIcVdk5SAek -lH1SlmZPHwV/mZJoO4n8EFsuWSmj+f3u4fKnCObjbbchorxN8Xu2n28MTPFFomLE -D5PoGEG2VkvmOObOzzbzd8/8ogQUK3VgKtj6PfsdmgSsi8yuFU00IIS9MjTlDlT8 -C3SHvFJEPKYCUXstqLw3SVELGkaAdBwEz+DY8t7tdZde7PukVJdCMf47/Ko0mmQn -dBvM/bf7Ls6D3SybW2XK71ahEH4iH9fRsFxan8qadSXO+uHee/piTRvyaDbhbr3S -M7UPYINi9XTNbmXxIbzAumE/Jng9xJmr4fN0Msh62nACwlWJor2wGod5cbVa+PCa -R8HBWISALqnWSXuR5FSPrCjOopAq07MTZy7/6CcjFxWheqp6rvkXk5KQaGnJ+0Ig -+LULt8CoUpoqiuGfuG4krjPhq6JbADaO1lULzJnp +MIIDqTCCApGgAwIBAgIUY8JgB7Gf3DMwUHaOCucVhQV15eswDQYJKoZIhvcNAQEL +BQAwXzELMAkGA1UEBhMCUEwxEzARBgNVBAgMCk1hbG9wb2xza2ExDzANBgNVBAcM +BktyYWtvdzEZMBcGA1UECgwQWW91ck9yZ2FuaXphdGlvbjEPMA0GA1UEAwwGWW91 +ckNBMB4XDTI0MTEwNDExMTczM1oXDTI1MTEwNDExMTczM1owXTELMAkGA1UEBhMC +UEwxEzARBgNVBAgMCk1hbG9wb2xza2ExDzANBgNVBAcMBktyYWtvdzERMA8GA1UE +CgwIU2N5bGxhREIxFTATBgNVBAMMDHNjeWxsYWRiLmNvbTCCASIwDQYJKoZIhvcN +AQEBBQADggEPADCCAQoCggEBAMpN67X/ASqH56FK2xbJX9w9VSU2uwHUCcbjv69+ +fLQO9Tb0yg1lzGefKmjpq1dXogFcd4tX2jNgXlPwfNVB9doRFxQeq6HwhGMUC5Oj +3FWM8WjMoCsCiPx6NWFN+zggBGxYuAyGT9nyjyzzHuvvhaUmEuzUjn5dNC/JVtu1 +xo9Ptcysl3ao6bHnbnQY+wxnC1GaFhusCMEUdyP/yqzXUMA1CRVX54jCoFIv3OFv +vpTL+ZNkURiBOleOpXTwcF0jmrNjfCH0Gtn2UodSoH0v9b7OnwPU47BQahB3xVVY +DO+di9ugC205q1BmWK5w5LBJxtb25yk4BACQjeTXvvOIYlECAwEAAaNfMF0wGwYD +VR0RBBQwEocQIAENuQIAAAAAAAAAAAAAmTAdBgNVHQ4EFgQUoNaM0QGFt/Zs+pur +TvSMvp3Q+pwwHwYDVR0jBBgwFoAUfFZBBjFALmH52efvMv10tyuvjZkwDQYJKoZI +hvcNAQELBQADggEBADOoEJDyjNofamuQ+29CSBKl/BdXHkIrqk6M/1L93SbzZ2rI +fIu9VJGzwGozJ2B47IvBUX0hhY3jx+Vklx/uSUzDKlRT6YnMdxeZUentKgXWKSgX +iLM+HxpPbN6WIlHqg3cUZh2oF3YMo8g+SwOIxf53WvHqdWoh5hV7dJziP3xmYsHy +GjIpnGAFAmLrH378RCZd7AfIHbtxzFuG0PAaZiRAT4+7yQqM9BVzf6k/mAYo4GhG +fKrs9PYzz+04/JyS4v0IYIgtCWA5kJIVMdLGebXZz1Bq8t9b7ow9msepnhAt64hX +MmTYx3e/1Q0T/rGkiMo3fypJ1g7jRiO9VGiqmcQ= -----END CERTIFICATE-----