Upload Kmake

test/fixtures/keys/.gitattributes

@@ -0,0 +1,4 @@
+* -text
+
+Makefile text
+*.cnf text

test/fixtures/keys/Makefile

@@ -0,0 +1,929 @@
+all: \
+  ca1-cert.pem \
+  ca2-cert.pem \
+  ca2-crl.pem \
+  ca3-cert.pem \
+  ca4-cert.pem \
+  ca5-cert.pem \
+  ca6-cert.pem \
+  agent1-cert.pem \
+  agent1.pfx \
+  agent2-cert.pem \
+  agent3-cert.pem \
+  agent4-cert.pem \
+  agent5-cert.pem \
+  agent6-cert.pem \
+  agent6.pfx \
+  agent7-cert.pem \
+  agent8-cert.pem \
+  agent9-cert.pem \
+  agent10-cert.pem \
+  agent10.pfx \
+  ec10-cert.pem \
+  ec10.pfx \
+  dh512.pem \
+  dh1024.pem \
+  dh2048.pem \
+  dh3072.pem \
+  dherror.pem \
+  dh_private.pem \
+  dh_public.pem \
+  dsa_params.pem \
+  dsa_private.pem \
+  dsa_private_encrypted.pem \
+  dsa_private_pkcs8.pem \
+  dsa_public.pem \
+  dsa1025.pem \
+  dsa_private_1025.pem \
+  dsa_private_encrypted_1025.pem \
+  dsa_public_1025.pem \
+  ec-cert.pem \
+  ec.pfx \
+  fake-cnnic-root-cert.pem \
+  intermediate-ca-cert.pem \
+  intermediate-ca-key.pem \
+  leaf-from-intermediate-cert.pem \
+  leaf-from-intermediate-key.pem \
+  non-trusted-intermediate-ca-cert.pem \
+  non-trusted-intermediate-ca-key.pem \
+  non-trusted-leaf-from-intermediate-cert.pem \
+  non-trusted-leaf-from-intermediate-key.pem \
+  rsa_private.pem \
+  rsa_private_encrypted.pem \
+  rsa_private_pkcs8.pem \
+  rsa_private_pkcs8_bad.pem \
+  rsa_public.pem \
+  rsa_ca.crt \
+  rsa_cert.crt \
+  rsa_cert.pfx \
+  rsa_public_sha1_signature_signedby_rsa_private.sha1 \
+  rsa_public_sha1_signature_signedby_rsa_private_pkcs8.sha1 \
+  rsa_private_b.pem \
+  I_AM_THE_WALRUS_sha256_signature_signedby_rsa_private_b.sha256 \
+  rsa_public_b.pem \
+  rsa_cert_foafssl_b.crt \
+  rsa_cert_foafssl_b.modulus \
+  rsa_cert_foafssl_b.exponent \
+  rsa_spkac.spkac \
+  rsa_spkac_invalid.spkac \
+  rsa_private_2048.pem \
+  rsa_private_4096.pem \
+  rsa_public_2048.pem \
+  rsa_public_4096.pem \
+  rsa_pss_private_2048.pem \
+  rsa_pss_private_2048_sha256_sha256_16.pem \
+  rsa_pss_private_2048_sha512_sha256_20.pem \
+  rsa_pss_private_2048_sha1_sha1_20.pem \
+  rsa_pss_public_2048.pem \
+  rsa_pss_public_2048_sha256_sha256_16.pem \
+  rsa_pss_public_2048_sha512_sha256_20.pem \
+  rsa_pss_public_2048_sha1_sha1_20.pem \
+  ed25519_private.pem \
+  ed25519_public.pem \
+  x25519_private.pem \
+  x25519_public.pem \
+  ed448_private.pem \
+  ed448_public.pem \
+  x448_private.pem \
+  x448_public.pem \
+  ec_p256_private.pem \
+  ec_p256_public.pem \
+  ec_p384_private.pem \
+  ec_p384_public.pem \
+  ec_p521_private.pem \
+  ec_p521_public.pem \
+  ec_secp256k1_private.pem \
+  ec_secp256k1_public.pem \
+  incorrect_san_correct_subject-cert.pem \
+  incorrect_san_correct_subject-key.pem \
+  irrelevant_san_correct_subject-cert.pem \
+  irrelevant_san_correct_subject-key.pem \
+
+#
+# Create Certificate Authority: ca1
+# ('password' is used for the CA password.)
+#
+ca1-cert.pem: ca1.cnf
+	openssl req -new -x509 -days 99999 -config ca1.cnf -keyout ca1-key.pem -out ca1-cert.pem
+
+#
+# Create Certificate Authority: ca2
+# ('password' is used for the CA password.)
+#
+ca2-cert.pem: ca2.cnf
+	openssl req -new -x509 -days 99999 -config ca2.cnf -keyout ca2-key.pem -out ca2-cert.pem
+	echo '01' > ca2-serial
+	touch ca2-database.txt
+
+#
+# Create Subordinate Certificate Authority: ca3 issued by ca1
+# ('password' is used for the CA password.)
+#
+ca3-key.pem:
+	openssl genrsa -out ca3-key.pem 2048
+
+ca3-csr.pem: ca3.cnf ca3-key.pem
+	openssl req -new \
+		-extensions v3_ca \
+		-config ca3.cnf \
+		-key ca3-key.pem \
+		-out ca3-csr.pem
+
+ca3-cert.pem: ca3-csr.pem ca3-key.pem ca3.cnf ca1-cert.pem ca1-key.pem
+	openssl x509 -req \
+		-extfile ca3.cnf \
+		-extensions v3_ca \
+		-days 99999 \
+		-passin "pass:password" \
+		-in ca3-csr.pem \
+		-CA ca1-cert.pem \
+		-CAkey ca1-key.pem \
+		-CAcreateserial \
+		-out ca3-cert.pem
+
+#
+# Create Subordinate Certificate Authority: ca4 issued by ca2
+# ('password' is used for the CA password.)
+#
+ca4-key.pem:
+	openssl genrsa -out ca4-key.pem 2048
+
+ca4-csr.pem: ca4.cnf ca4-key.pem
+	openssl req -new \
+		-extensions v3_ca \
+		-config ca4.cnf \
+		-key ca4-key.pem \
+		-out ca4-csr.pem
+
+ca4-cert.pem: ca4-csr.pem ca4-key.pem ca4.cnf ca2-cert.pem ca2-key.pem
+	openssl x509 -req \
+		-extfile ca4.cnf \
+		-extensions v3_ca \
+		-days 99999 \
+		-passin "pass:password" \
+		-in ca4-csr.pem \
+		-CA ca2-cert.pem \
+		-CAkey ca2-key.pem \
+		-CAcreateserial \
+		-out ca4-cert.pem
+
+#
+# Create Certificate Authority: ca5 with ECC
+# ('password' is used for the CA password.)
+#
+ca5-key.pem:
+	openssl ecparam -genkey -out ca5-key.pem -name prime256v1
+
+ca5-csr.pem: ca5.cnf ca5-key.pem
+	openssl req -new \
+		-config ca5.cnf \
+		-key ca5-key.pem \
+		-out ca5-csr.pem
+
+ca5-cert.pem: ca5.cnf ca5-key.pem ca5-csr.pem
+	openssl x509 -req \
+		-extfile ca5.cnf \
+		-extensions v3_ca \
+		-days 99999 \
+		-passin "pass:password" \
+		-in ca5-csr.pem \
+		-signkey ca5-key.pem \
+		-out ca5-cert.pem
+
+#
+# Create Subordinate Certificate Authority: ca6 issued by ca5 with ECC
+# ('password' is used for the CA password.)
+#
+ca6-key.pem:
+	openssl ecparam -genkey -out ca6-key.pem -name prime256v1
+
+ca6-csr.pem: ca6.cnf ca6-key.pem
+	openssl req -new \
+		-extensions v3_ca \
+		-config ca6.cnf \
+		-key ca6-key.pem \
+		-out ca6-csr.pem
+
+ca6-cert.pem: ca6-csr.pem ca6-key.pem ca6.cnf ca5-cert.pem ca5-key.pem
+	openssl x509 -req \
+		-extfile ca6.cnf \
+		-extensions v3_ca \
+		-days 99999 \
+		-passin "pass:password" \
+		-in ca6-csr.pem \
+		-CA ca5-cert.pem \
+		-CAkey ca5-key.pem \
+		-CAcreateserial \
+		-out ca6-cert.pem
+
+#
+# Create Fake CNNIC Root Certificate Authority: fake-cnnic-root
+#
+
+fake-cnnic-root-key.pem:
+	openssl genrsa -out fake-cnnic-root-key.pem 2048
+
+fake-cnnic-root-cert.pem: fake-cnnic-root.cnf fake-cnnic-root-key.pem
+	openssl req -x509 -new \
+	        -key fake-cnnic-root-key.pem \
+	        -days 99999 \
+	        -out fake-cnnic-root-cert.pem \
+	        -config fake-cnnic-root.cnf
+
+#
+# Create Fake StartCom Root Certificate Authority: fake-startcom-root
+#
+fake-startcom-root-key.pem:
+	openssl genrsa -out fake-startcom-root-key.pem 2048
+
+fake-startcom-root-cert.pem: fake-startcom-root.cnf \
+	fake-startcom-root-key.pem
+	openssl req -new -x509 -days 99999 -config \
+	fake-startcom-root.cnf -key fake-startcom-root-key.pem -out \
+	fake-startcom-root-cert.pem
+	echo '01' > fake-startcom-root-serial
+	touch fake-startcom-root-database.txt
+
+
+intermediate-ca-key.pem:
+	openssl genrsa -out intermediate.key 2048
+
+intermediate-ca-cert.pem: intermediate-ca-key.pem
+	openssl req -new \
+			-sha256 \
+			-nodes \
+			-key intermediate.key  \
+			-subj "/C=US/ST=CA/L=SF/O=NODEJS/CN=NodeJS-Test-Intermediate-CA" \
+			-out test-intermediate-ca.csr
+
+	openssl x509 -req \
+			-extensions v3_ca \
+			-extfile fake-startcom-root.cnf \
+			-in test-intermediate-ca.csr \
+			-CA fake-startcom-root-cert.pem \
+			-CAkey fake-startcom-root-key.pem \
+			-CAcreateserial \
+			-out intermediate-ca.pem \
+			-days 99999 \
+			-sha256
+	rm -f test-intermediate-ca.csr
+
+leaf-from-intermediate-key.pem:
+	openssl genrsa -out leaf-from-intermediate-key.pem 2048
+
+leaf-from-intermediate-cert.pem: leaf-from-intermediate-key.pem
+	openssl genrsa -out leaf-from-intermediate-key.pem 2048
+	openssl req -new \
+			-sha256 \
+			-nodes \
+			-key leaf-from-intermediate-key.pem \
+			-addext "subjectAltName = DNS:localhost" \
+			-subj "/C=US/ST=CA/L=SF/O=NODEJS/CN=localhost" \
+			-out leaf-from-intermediate-cert.csr
+	openssl x509 -req \
+			-in leaf-from-intermediate-cert.csr \
+			-CA intermediate-ca.pem \
+			-CAkey intermediate.key \
+			-CAcreateserial \
+			-out leaf-from-intermediate-cert.pem \
+			-days 99999 \
+			-copy_extensions copy \
+			-sha256
+
+	rm -f leaf-from-intermediate-cert.csr
+
+non-trusted-intermediate-ca-key.pem:
+	openssl genrsa -out non-trusted-intermediate.key 2048
+
+non-trusted-intermediate-ca-cert.pem: non-trusted-intermediate-ca-key.pem
+	openssl req -new \
+			-sha256 \
+			-nodes \
+			-key non-trusted-intermediate.key  \
+			-subj "/C=US/ST=CA/L=SF/O=NODEJS/CN=NodeJS-Non-Trusted-Test-Intermediate-CA" \
+			-out non-trusted-test-intermediate-ca.csr
+
+	openssl x509 -req \
+			-extensions v3_ca \
+			-extfile fake-startcom-root.cnf \
+			-in non-trusted-test-intermediate-ca.csr \
+			-passin "pass:password" \
+			-CA ca1-cert.pem \
+			-CAkey ca1-key.pem \
+			-CAcreateserial \
+			-out non-trusted-intermediate-ca.pem \
+			-days 99999 \
+			-sha256
+	rm -f non-trusted-test-intermediate-ca.csr
+
+non-trusted-leaf-from-intermediate-key.pem:
+	openssl genrsa -out non-trusted-leaf-from-intermediate-key.pem 2048
+
+non-trusted-leaf-from-intermediate-cert.pem: non-trusted-leaf-from-intermediate-key.pem
+	openssl genrsa -out non-trusted-leaf-from-intermediate-key.pem 2048
+	openssl req -new \
+			-sha256 \
+			-nodes \
+			-key non-trusted-leaf-from-intermediate-key.pem \
+			-addext "subjectAltName = DNS:localhost" \
+			-subj "/C=US/ST=CA/L=SF/O=NODEJS/CN=localhost" \
+			-out non-trusted-leaf-from-intermediate-cert.csr
+	openssl x509 -req \
+			-in non-trusted-leaf-from-intermediate-cert.csr \
+			-CA non-trusted-intermediate-ca.pem \
+			-CAkey non-trusted-intermediate.key \
+			-CAcreateserial \
+			-out non-trusted-leaf-from-intermediate-cert.pem \
+			-days 99999 \
+			-copy_extensions copy \
+			-sha256
+
+	rm -f non-trusted-leaf-from-intermediate-cert.csr
+
+#
+# agent1 is signed by ca1.
+#
+
+agent1-key.pem:
+	openssl genrsa -out agent1-key.pem 2048
+
+agent1-csr.pem: agent1.cnf agent1-key.pem
+	openssl req -new -config agent1.cnf -key agent1-key.pem -out agent1-csr.pem
+
+agent1-cert.pem: agent1-csr.pem ca1-cert.pem ca1-key.pem
+	openssl x509 -req \
+		-extfile agent1.cnf \
+		-extensions v3_ca \
+		-days 99999 \
+		-passin "pass:password" \
+		-in agent1-csr.pem \
+		-CA ca1-cert.pem \
+		-CAkey ca1-key.pem \
+		-CAcreateserial \
+		-out agent1-cert.pem
+
+agent1.pfx: agent1-cert.pem agent1-key.pem ca1-cert.pem
+	openssl pkcs12 -export \
+		-descert \
+		-in agent1-cert.pem \
+		-inkey agent1-key.pem \
+		-certfile ca1-cert.pem \
+		-out agent1.pfx \
+		-password pass:sample
+
+agent1-verify: agent1-cert.pem ca1-cert.pem
+	openssl verify -CAfile ca1-cert.pem agent1-cert.pem
+
+
+#
+# agent2 has a self signed cert
+#
+# Generate new private key
+agent2-key.pem:
+	openssl genrsa -out agent2-key.pem 2048
+
+# Create a Certificate Signing Request for the key
+agent2-csr.pem: agent2-key.pem agent2.cnf
+	openssl req -new -config agent2.cnf -key agent2-key.pem -out agent2-csr.pem
+
+# Create a Certificate for the agent.
+agent2-cert.pem: agent2-csr.pem agent2-key.pem
+	openssl x509 -req \
+		-days 99999 \
+		-in agent2-csr.pem \
+		-signkey agent2-key.pem \
+		-out agent2-cert.pem
+
+agent2-verify: agent2-cert.pem
+	openssl verify -CAfile agent2-cert.pem agent2-cert.pem
+
+#
+# agent3 is signed by ca2.
+#
+
+agent3-key.pem:
+	openssl genrsa -out agent3-key.pem 2048
+
+agent3-csr.pem: agent3.cnf agent3-key.pem
+	openssl req -new -config agent3.cnf -key agent3-key.pem -out agent3-csr.pem
+
+agent3-cert.pem: agent3-csr.pem ca2-cert.pem ca2-key.pem
+	openssl x509 -req \
+		-days 99999 \
+		-passin "pass:password" \
+		-in agent3-csr.pem \
+		-CA ca2-cert.pem \
+		-CAkey ca2-key.pem \
+		-CAcreateserial \
+		-out agent3-cert.pem
+
+agent3-verify: agent3-cert.pem ca2-cert.pem
+	openssl verify -CAfile ca2-cert.pem agent3-cert.pem
+
+
+#
+# agent4 is signed by ca2 (client cert)
+#
+
+agent4-key.pem:
+	openssl genrsa -out agent4-key.pem 2048
+
+agent4-csr.pem: agent4.cnf agent4-key.pem
+	openssl req -new -config agent4.cnf -key agent4-key.pem -out agent4-csr.pem
+
+agent4-cert.pem: agent4-csr.pem ca2-cert.pem ca2-key.pem
+	openssl x509 -req \
+		-days 99999 \
+		-passin "pass:password" \
+		-in agent4-csr.pem \
+		-CA ca2-cert.pem \
+		-CAkey ca2-key.pem \
+		-CAcreateserial \
+		-extfile agent4.cnf \
+		-extensions ext_key_usage \
+		-out agent4-cert.pem
+
+agent4-verify: agent4-cert.pem ca2-cert.pem
+	openssl verify -CAfile ca2-cert.pem agent4-cert.pem
+
+#
+# Make CRL with agent4 being rejected
+#
+ca2-crl.pem: ca2-key.pem ca2-cert.pem ca2.cnf agent4-cert.pem
+	openssl ca -revoke agent4-cert.pem \
+		-keyfile ca2-key.pem \
+		-cert ca2-cert.pem \
+		-config ca2.cnf \
+		-passin 'pass:password'
+	openssl ca \
+		-keyfile ca2-key.pem \
+		-cert ca2-cert.pem \
+		-config ca2.cnf \
+		-gencrl \
+		-out ca2-crl.pem \
+		-passin 'pass:password'
+
+#
+# agent5 is signed by ca2 (client cert)
+#
+
+agent5-key.pem:
+	openssl genrsa -out agent5-key.pem 2048
+
+agent5-csr.pem: agent5.cnf agent5-key.pem
+	openssl req -new -config agent5.cnf -key agent5-key.pem -out agent5-csr.pem
+
+agent5-cert.pem: agent5-csr.pem ca2-cert.pem ca2-key.pem
+	openssl x509 -req \
+		-days 99999 \
+		-passin "pass:password" \
+		-in agent5-csr.pem \
+		-CA ca2-cert.pem \
+		-CAkey ca2-key.pem \
+		-CAcreateserial \
+		-extfile agent5.cnf \
+		-extensions ext_key_usage \
+		-out agent5-cert.pem
+
+agent5-verify: agent5-cert.pem ca2-cert.pem
+	openssl verify -CAfile ca2-cert.pem agent5-cert.pem
+
+#
+# agent6 is a client RSA cert signed by ca3
+#
+
+agent6-key.pem:
+	openssl genrsa -out agent6-key.pem 2048
+
+agent6-csr.pem: agent6.cnf agent6-key.pem
+	openssl req -new -config agent6.cnf -key agent6-key.pem -out agent6-csr.pem
+
+agent6-cert.pem: agent6-csr.pem ca3-cert.pem ca3-key.pem
+	openssl x509 -req \
+		-days 99999 \
+		-passin "pass:password" \
+		-in agent6-csr.pem \
+		-CA ca3-cert.pem \
+		-CAkey ca3-key.pem \
+		-CAcreateserial \
+		-extfile agent6.cnf \
+		-out agent6-cert.pem
+	cat ca3-cert.pem >> agent6-cert.pem
+
+agent6-verify: agent6-cert.pem ca3-cert.pem ca1-cert.pem
+	openssl verify -trusted ca1-cert.pem -untrusted ca3-cert.pem agent6-cert.pem
+
+agent6.pfx: agent6-cert.pem agent6-key.pem ca1-cert.pem
+	openssl pkcs12 -export \
+		-descert \
+		-in agent6-cert.pem \
+		-inkey agent6-key.pem \
+		-certfile ca1-cert.pem \
+		-out agent6.pfx \
+		-password pass:sample
+
+#
+# agent7 is signed by fake-cnnic-root.
+#
+
+agent7-key.pem:
+	openssl genrsa -out agent7-key.pem 2048
+
+agent7-csr.pem: agent1.cnf agent7-key.pem
+	openssl req -new -config agent7.cnf -key agent7-key.pem -out agent7-csr.pem
+
+agent7-cert.pem: agent7-csr.pem fake-cnnic-root-cert.pem fake-cnnic-root-key.pem
+	openssl x509 -req \
+		-extfile agent7.cnf \
+		-days 99999 \
+		-passin "pass:password" \
+		-in agent7-csr.pem \
+		-CA fake-cnnic-root-cert.pem \
+		-CAkey fake-cnnic-root-key.pem \
+		-CAcreateserial \
+		-out agent7-cert.pem
+
+agent7-verify: agent7-cert.pem fake-cnnic-root-cert.pem
+	openssl verify -CAfile fake-cnnic-root-cert.pem agent7-cert.pem
+
+#
+# agent8 is signed by fake-startcom-root with notBefore
+# of Oct 20 23:59:59 2016 GMT
+#
+
+agent8-key.pem:
+	openssl genrsa -out agent8-key.pem 2048
+
+agent8-csr.pem: agent8.cnf agent8-key.pem
+	openssl req -new -config agent8.cnf -key agent8-key.pem \
+	-out agent8-csr.pem
+
+agent8-cert.pem: agent8-csr.pem fake-startcom-root-cert.pem fake-startcom-root-key.pem
+	openssl ca \
+		-config fake-startcom-root.cnf \
+		-keyfile fake-startcom-root-key.pem \
+		-cert fake-startcom-root-cert.pem \
+		-batch \
+		-days 99999 \
+		-passin "pass:password" \
+		-in agent8-csr.pem \
+		-startdate 161020235959Z \
+		-notext -out agent8-cert.pem
+
+
+agent8-verify: agent8-cert.pem fake-startcom-root-cert.pem
+	openssl verify -CAfile fake-startcom-root-cert.pem \
+	agent8-cert.pem
+
+
+#
+# agent9 is signed by fake-startcom-root with notBefore
+# of Oct 21 00:00:01 2016 GMT
+#
+agent9-key.pem:
+	openssl genrsa -out agent9-key.pem 2048
+
+agent9-csr.pem: agent9.cnf agent9-key.pem
+	openssl req -new -config agent9.cnf -key agent9-key.pem \
+	-out agent9-csr.pem
+
+
+agent9-cert.pem: agent9-csr.pem
+	openssl ca \
+		-config fake-startcom-root.cnf \
+		-keyfile fake-startcom-root-key.pem \
+		-cert fake-startcom-root-cert.pem \
+		-batch \
+		-days 99999 \
+		-passin "pass:password" \
+		-in agent9-csr.pem \
+		-startdate 20161021000001Z \
+		-notext -out agent9-cert.pem
+
+# agent10 is a server RSA cert signed by ca4 for agent10.example.com
+#
+
+agent10-key.pem:
+	openssl genrsa -out agent10-key.pem 2048
+
+agent10-csr.pem: agent10.cnf agent10-key.pem
+	openssl req -new -config agent10.cnf -key agent10-key.pem -out agent10-csr.pem
+
+agent10-cert.pem: agent10-csr.pem ca4-cert.pem ca4-key.pem
+	openssl x509 -req \
+		-days 99999 \
+		-passin "pass:password" \
+		-in agent10-csr.pem \
+		-CA ca4-cert.pem \
+		-CAkey ca4-key.pem \
+		-CAcreateserial \
+		-extfile agent10.cnf \
+		-out agent10-cert.pem
+	cat ca4-cert.pem >> agent10-cert.pem
+
+agent10-verify: agent10-cert.pem ca4-cert.pem ca2-cert.pem
+	openssl verify -trusted ca2-cert.pem -untrusted ca4-cert.pem agent10-cert.pem
+
+agent10.pfx: agent10-cert.pem agent10-key.pem ca1-cert.pem
+	openssl pkcs12 -export \
+		-descert \
+		-in agent10-cert.pem \
+		-inkey agent10-key.pem \
+		-certfile ca1-cert.pem \
+		-out agent10.pfx \
+		-password pass:sample
+
+#
+# ec10 is a server EC cert signed by ca6 for agent10.example.com
+#
+
+ec10-key.pem:
+	openssl ecparam -genkey -out ec10-key.pem -name prime256v1
+
+ec10-csr.pem: ec10-key.pem
+	openssl req -new -config agent10.cnf -key ec10-key.pem -out ec10-csr.pem
+
+ec10-cert.pem: ec10-csr.pem ca6-cert.pem ca6-key.pem
+	openssl x509 -req \
+		-days 99999 \
+		-passin "pass:password" \
+		-in ec10-csr.pem \
+		-CA ca6-cert.pem \
+		-CAkey ca6-key.pem \
+		-CAcreateserial \
+		-extfile agent10.cnf \
+		-out ec10-cert.pem
+	cat ca6-cert.pem >> ec10-cert.pem
+
+ec10-verify: ec10-cert.pem ca6-cert.pem ca5-cert.pem
+	openssl verify -trusted ca5-cert.pem -untrusted ca6-cert.pem ec10-cert.pem
+
+ec10.pfx: ec10-cert.pem ec10-key.pem ca6-cert.pem
+	openssl pkcs12 -export \
+		-descert \
+		-in ec10-cert.pem \
+		-inkey ec10-key.pem \
+		-certfile ca6-cert.pem \
+		-out ec10.pfx \
+		-password pass:sample
+
+
+#
+# ec is a self-signed EC cert for CN "agent2"
+#
+ec-key.pem:
+	openssl ecparam -genkey -out ec-key.pem -name prime256v1
+
+ec-csr.pem: ec-key.pem
+	openssl req -new -config ec.cnf -key ec-key.pem -out ec-csr.pem
+
+ec-cert.pem: ec-csr.pem ec-key.pem
+	openssl x509 -req \
+		-days 99999 \
+		-in ec-csr.pem \
+		-signkey ec-key.pem \
+		-out ec-cert.pem
+
+ec.pfx: ec-cert.pem ec-key.pem
+	openssl pkcs12 -export \
+		-descert \
+		-in ec-cert.pem \
+		-inkey ec-key.pem \
+		-out ec.pfx \
+		-password pass:
+
+dh512.pem:
+	openssl dhparam -out dh512.pem 512
+
+dh1024.pem:
+	openssl dhparam -out dh1024.pem 1024
+
+dh2048.pem:
+	openssl dhparam -out dh2048.pem 2048
+
+dh3072.pem:
+	openssl dhparam -out dh3072.pem 3072
+
+dherror.pem: dh1024.pem
+	sed 's/^[^-].*/AAAAAAAAAA/g' dh1024.pem > dherror.pem
+
+dh_private.pem:
+	openssl genpkey -algorithm dh -out dh_private.pem -pkeyopt dh_param:ffdhe2048
+
+dh_public.pem: dh_private.pem
+	openssl pkey -in dh_private.pem -pubout -out dh_public.pem
+
+dsa_params.pem:
+	openssl dsaparam -out dsa_params.pem 2048
+
+dsa_private.pem: dsa_params.pem
+	openssl gendsa -out dsa_private.pem dsa_params.pem
+
+dsa_private_encrypted.pem: dsa_private.pem
+	openssl dsa -aes256 -in dsa_private.pem -passout 'pass:password' -out dsa_private_encrypted.pem
+
+dsa_private_pkcs8.pem: dsa_private.pem
+	openssl pkcs8 -topk8 -inform PEM -outform PEM -in dsa_private.pem -out dsa_private_pkcs8.pem -nocrypt
+
+dsa_public.pem: dsa_private.pem
+	openssl dsa -in dsa_private.pem -pubout -out dsa_public.pem
+
+dsa1025.pem:
+	openssl dsaparam -out dsa1025.pem 1025
+
+dsa_private_1025.pem:
+	openssl gendsa -out dsa_private_1025.pem dsa1025.pem
+
+dsa_private_encrypted_1025.pem:
+	openssl pkcs8 -in dsa_private_1025.pem -topk8 -passout 'pass:secret' -out dsa_private_encrypted_1025.pem
+
+dsa_public_1025.pem:
+	openssl dsa -in dsa_private_1025.pem -pubout -out dsa_public_1025.pem
+
+rsa_private.pem:
+	openssl genrsa -out rsa_private.pem 2048
+
+rsa_private_encrypted.pem: rsa_private.pem
+	openssl rsa -aes256 -in rsa_private.pem -passout 'pass:password' -out rsa_private_encrypted.pem
+
+rsa_private_pkcs8.pem: rsa_private.pem
+	openssl pkcs8 -topk8 -inform PEM -outform PEM -in rsa_private.pem -out rsa_private_pkcs8.pem -nocrypt
+
+rsa_private_pkcs8_bad.pem: rsa_private_pkcs8.pem
+	sed 's/PRIVATE/RSA PRIVATE/g' rsa_private_pkcs8.pem > rsa_private_pkcs8_bad.pem
+
+rsa_public.pem: rsa_private.pem
+	openssl rsa -in rsa_private.pem -pubout -out rsa_public.pem
+
+rsa_cert.crt: rsa_private.pem
+	openssl req -new -x509 -days 99999 -key rsa_private.pem -config rsa_cert.cnf -out rsa_cert.crt
+
+rsa_cert.pfx: rsa_cert.crt
+	openssl pkcs12 -export -descert -passout 'pass:sample' -inkey rsa_private.pem -in rsa_cert.crt -out rsa_cert.pfx
+
+rsa_ca.crt: rsa_cert.crt
+	cp rsa_cert.crt rsa_ca.crt
+
+rsa_public_sha1_signature_signedby_rsa_private.sha1: rsa_public.pem rsa_private.pem
+	openssl dgst -sha1 -sign rsa_private.pem -out rsa_public_sha1_signature_signedby_rsa_private.sha1 rsa_public.pem
+
+rsa_public_sha1_signature_signedby_rsa_private_pkcs8.sha1: rsa_public.pem rsa_private_pkcs8.pem
+	openssl dgst -sha1 -sign rsa_private_pkcs8.pem -out rsa_public_sha1_signature_signedby_rsa_private_pkcs8.sha1 rsa_public.pem
+
+rsa_private_b.pem:
+	openssl genrsa -out rsa_private_b.pem 2048
+
+I_AM_THE_WALRUS_sha256_signature_signedby_rsa_private_b.sha256: rsa_private_b.pem
+	echo -n "I AM THE WALRUS" | openssl dgst -sha256 -sign rsa_private_b.pem -out I_AM_THE_WALRUS_sha256_signature_signedby_rsa_private_b.sha256
+
+rsa_public_b.pem: rsa_private_b.pem
+	openssl rsa -in rsa_private_b.pem -pubout -out rsa_public_b.pem
+
+# The following 'foafssl' cert is used in test/parallel/test-https-foafssl.js.
+# It requires a SAN like 'http://example.com/#me'. More info here:
+# https://www.w3.org/wiki/Foaf+ssl
+rsa_cert_foafssl_b.crt: rsa_private_b.pem
+	openssl req -new -x509 -days 99999 -config rsa_cert_foafssl_b.cnf -key rsa_private_b.pem -out rsa_cert_foafssl_b.crt
+
+# The 'modulus=' in the output must be stripped out
+rsa_cert_foafssl_b.modulus: rsa_cert_foafssl_b.crt
+	openssl x509 -modulus -in rsa_cert_foafssl_b.crt -noout | cut -c 9- > rsa_cert_foafssl_b.modulus
+
+# Have to parse out the hex exponent
+rsa_cert_foafssl_b.exponent: rsa_cert_foafssl_b.crt
+	openssl x509 -in  rsa_cert_foafssl_b.crt -text | grep -o 'Exponent:.*' | sed 's/\(.*(\|).*\)//g' > rsa_cert_foafssl_b.exponent
+
+# openssl outputs `SPKAC=[SPKAC]`. That prefix needs to be removed to work with node
+rsa_spkac.spkac: rsa_private.pem
+	openssl spkac -key rsa_private.pem -challenge this-is-a-challenge | cut -c 7- > rsa_spkac.spkac
+
+# cutting characters from the start to invalidate the spkac
+rsa_spkac_invalid.spkac: rsa_spkac.spkac
+	cat rsa_spkac.spkac | cut -c 5- > rsa_spkac_invalid.spkac
+
+rsa_private_2048.pem:
+	openssl genrsa -out rsa_private_2048.pem 2048
+
+rsa_private_4096.pem:
+	openssl genrsa -out rsa_private_4096.pem 4096
+
+rsa_public_2048.pem: rsa_private_2048.pem
+	openssl rsa -in rsa_private_2048.pem -pubout -out rsa_public_2048.pem
+
+rsa_public_4096.pem: rsa_private_4096.pem
+	openssl rsa -in rsa_private_4096.pem -pubout -out rsa_public_4096.pem
+
+rsa_pss_private_2048.pem:
+	openssl genpkey -algorithm RSA-PSS -pkeyopt rsa_keygen_bits:2048 -pkeyopt rsa_keygen_pubexp:65537 -out rsa_pss_private_2048.pem
+
+rsa_pss_private_2048_sha256_sha256_16.pem:
+	openssl genpkey -algorithm RSA-PSS -pkeyopt rsa_keygen_bits:2048 -pkeyopt rsa_keygen_pubexp:65537 -pkeyopt rsa_pss_keygen_md:sha256 -pkeyopt rsa_pss_keygen_mgf1_md:sha256 -pkeyopt rsa_pss_keygen_saltlen:16 -out rsa_pss_private_2048_sha256_sha256_16.pem
+
+rsa_pss_private_2048_sha512_sha256_20.pem:
+	openssl genpkey -algorithm RSA-PSS -pkeyopt rsa_keygen_bits:2048 -pkeyopt rsa_keygen_pubexp:65537 -pkeyopt rsa_pss_keygen_md:sha512 -pkeyopt rsa_pss_keygen_mgf1_md:sha256 -pkeyopt rsa_pss_keygen_saltlen:20 -out rsa_pss_private_2048_sha512_sha256_20.pem
+
+rsa_pss_private_2048_sha1_sha1_20.pem:
+	openssl genpkey -algorithm RSA-PSS -pkeyopt rsa_keygen_bits:2048 -pkeyopt rsa_keygen_pubexp:65537 -pkeyopt rsa_pss_keygen_md:sha1 -pkeyopt rsa_pss_keygen_mgf1_md:sha1 -pkeyopt rsa_pss_keygen_saltlen:20 -out rsa_pss_private_2048_sha1_sha1_20.pem
+
+rsa_pss_public_2048.pem: rsa_pss_private_2048.pem
+	openssl pkey -in rsa_pss_private_2048.pem -pubout -out rsa_pss_public_2048.pem
+
+rsa_pss_public_2048_sha256_sha256_16.pem: rsa_pss_private_2048_sha256_sha256_16.pem
+	openssl pkey -in rsa_pss_private_2048_sha256_sha256_16.pem -pubout -out rsa_pss_public_2048_sha256_sha256_16.pem
+
+rsa_pss_public_2048_sha512_sha256_20.pem: rsa_pss_private_2048_sha512_sha256_20.pem
+	openssl pkey -in rsa_pss_private_2048_sha512_sha256_20.pem -pubout -out rsa_pss_public_2048_sha512_sha256_20.pem
+
+rsa_pss_public_2048_sha1_sha1_20.pem: rsa_pss_private_2048_sha1_sha1_20.pem
+	openssl pkey -in rsa_pss_private_2048_sha1_sha1_20.pem -pubout -out rsa_pss_public_2048_sha1_sha1_20.pem
+
+ed25519_private.pem:
+	openssl genpkey -algorithm ED25519 -out ed25519_private.pem
+
+ed25519_public.pem: ed25519_private.pem
+	openssl pkey -in ed25519_private.pem -pubout -out ed25519_public.pem
+
+x25519_private.pem:
+	openssl genpkey -algorithm x25519 -out x25519_private.pem
+
+x25519_public.pem: x25519_private.pem
+	openssl pkey -in x25519_private.pem -pubout -out x25519_public.pem
+
+ed448_private.pem:
+	openssl genpkey -algorithm ed448 -out ed448_private.pem
+
+ed448_public.pem: ed448_private.pem
+	openssl pkey -in ed448_private.pem -pubout -out ed448_public.pem
+
+x448_private.pem:
+	openssl genpkey -algorithm x448 -out x448_private.pem
+
+x448_public.pem: x448_private.pem
+	openssl pkey -in x448_private.pem -pubout -out x448_public.pem
+
+ec_p256_private.pem:
+	openssl ecparam -name prime256v1 -genkey -noout -out sec1_ec_p256_private.pem
+	openssl pkcs8 -topk8 -nocrypt -in sec1_ec_p256_private.pem -out ec_p256_private.pem
+	rm sec1_ec_p256_private.pem
+
+ec_p256_public.pem: ec_p256_private.pem
+	openssl ec -in ec_p256_private.pem -pubout -out ec_p256_public.pem
+
+ec_p384_private.pem:
+	openssl ecparam -name secp384r1 -genkey -noout -out sec1_ec_p384_private.pem
+	openssl pkcs8 -topk8 -nocrypt -in sec1_ec_p384_private.pem -out ec_p384_private.pem
+	rm sec1_ec_p384_private.pem
+
+ec_p384_public.pem: ec_p384_private.pem
+	openssl ec -in ec_p384_private.pem -pubout -out ec_p384_public.pem
+
+ec_p521_private.pem:
+	openssl ecparam -name secp521r1 -genkey -noout -out sec1_ec_p521_private.pem
+	openssl pkcs8 -topk8 -nocrypt -in sec1_ec_p521_private.pem -out ec_p521_private.pem
+	rm sec1_ec_p521_private.pem
+
+ec_p521_public.pem: ec_p521_private.pem
+	openssl ec -in ec_p521_private.pem -pubout -out ec_p521_public.pem
+
+ec_secp256k1_private.pem:
+	openssl ecparam -name secp256k1 -genkey -noout -out sec1_ec_secp256k1_private.pem
+	openssl pkcs8 -topk8 -nocrypt -in sec1_ec_secp256k1_private.pem -out ec_secp256k1_private.pem
+	rm sec1_ec_secp256k1_private.pem
+
+ec_secp256k1_public.pem: ec_secp256k1_private.pem
+	openssl ec -in ec_secp256k1_private.pem -pubout -out ec_secp256k1_public.pem
+
+incorrect_san_correct_subject-cert.pem: incorrect_san_correct_subject-key.pem
+	openssl req -x509 \
+	            -key incorrect_san_correct_subject-key.pem \
+	            -out incorrect_san_correct_subject-cert.pem \
+	            -sha256 \
+	            -days 3650 \
+	            -subj "/CN=good.example.com" \
+	            -addext "subjectAltName = DNS:evil.example.com"
+
+incorrect_san_correct_subject-key.pem:
+	openssl ecparam -name prime256v1 -genkey -noout -out incorrect_san_correct_subject-key.pem
+
+irrelevant_san_correct_subject-cert.pem: irrelevant_san_correct_subject-key.pem
+	openssl req -x509 \
+	            -key irrelevant_san_correct_subject-key.pem \
+	            -out irrelevant_san_correct_subject-cert.pem \
+	            -sha256 \
+	            -days 3650 \
+	            -subj "/CN=good.example.com" \
+	            -addext "subjectAltName = IP:1.2.3.4"
+
+irrelevant_san_correct_subject-key.pem:
+	openssl ecparam -name prime256v1 -genkey -noout -out irrelevant_san_correct_subject-key.pem
+
+clean:
+	rm -f *.pfx *.pem *.srl ca2-database.txt ca2-serial fake-startcom-root-serial *.print *.old fake-startcom-root-issued-certs/*.pem
+	@> fake-startcom-root-database.txt
+
+test: agent1-verify agent2-verify agent3-verify agent4-verify agent5-verify agent6-verify agent7-verify agent8-verify agent10-verify ec10-verify
+
+%-cert.pem.print: %-cert.pem
+	openssl x509 -in $< -text -noout > $@
+
+.PHONY: all clean test agent1-verify agent2-verify agent3-verify agent4-verify agent5-verify agent6-verify agent7-verify agent8-verify agent10-verify ec10-verify

test/fixtures/keys/agent1-cert.pem

@@ -0,0 +1,23 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----

test/fixtures/keys/agent1-csr.pem

@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

test/fixtures/keys/agent1-key.pem

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEpAIBAAKCAQEA1FYyCvsg04Jwk9wsQoTtBN+6vVbh3a5Snii3kM1CVtsnM0nz
+c1/9M3x6Y2Psylont/c9xwialsbYhtsMYjiPHN1qljr81ZnVgA5YehH5CJYPhO1Q
+uiWigwPs2m5oT757rtyc6IATJ7FpevJQl87j8XXkAJhMDbao64e+A7TPlHdLpW//
+yMY8aNat62CrvmmnsUq2prnnuqibWtq46weJfAf21Po9Zg3/V0EH0o6PY0Z6eIYk
+xXQZdpPpWc6hNi/64buhDIwNiIQKv+8QNjGy6PXDm1VIp+pX6KOfiSkYE/RadsRI
+AzorfthAP0uqFHzzXi0lVKplzklpV5cJW/TcawIDAQABAoIBAAvbtHfAhpjJVBgt
+15rvaX04MWmZjIugzKRgib/gdq/7FTlcC+iJl85kSUF7tyGl30n62MxgwqFhAX6m
+hQ6HMhbelrFFIhGbwbyhEHfgwROlrcAysKt0pprCgVvBhrnNXYLqdyjU3jz9P3LK
+TY3s0/YMK2uNFdI+PTjKH+Z9Foqn9NZUnUonEDepGyuRO7fLeccWJPv2L4CR4a/5
+ku4VbDgVpvVSVRG3PSVzbmxobnpdpl52og+T7tPx1cLnIknPtVljXPWtZdfekh2E
+eAp2KxCCHOKzzG3ItBKsVu0woeqEpy8JcoO6LbgmEoVnZpgmtQClbBgef8+i+oGE
+BgW9nmECgYEA8gA63QQuZOUC56N1QXURexN2PogF4wChPaCTFbQSJXvSBkQmbqfL
+qRSD8P0t7GOioPrQK6pDwFf4BJB01AvkDf8Z6DxxOJ7cqIC7LOwDupXocWX7Q0Qk
+O6cwclBVsrDZK00v60uRRpl/a39GW2dx7IiQDkKQndLh3/0TbMIWHNcCgYEA4J6r
+yinZbLpKw2+ezhi4B4GT1bMLoKboJwpZVyNZZCzYR6ZHv+lS7HR/02rcYMZGoYbf
+n7OHwF4SrnUS7vPhG4g2ZsOhKQnMvFSQqpGmK1ZTuoKGAevyvtouhK/DgtLWzGvX
+9fSahiq/UvfXs/z4M11q9Rv9ztPCmG1cwSEHlo0CgYEAogQNZJK8DMhVnYcNpXke
+7uskqtCeQE/Xo06xqkIYNAgloBRYNpUYAGa/vsOBz1UVN/kzDUi8ezVp0oRz8tLT
+J5u2WIi+tE2HJTiqF3UbOfvK1sCT64DfUSCpip7GAQ/tFNRkVH8PD9kMOYfILsGe
+v+DdsO5Xq5HXrwHb02BNNZkCgYBsl8lt33WiPx5OBfS8pu6xkk+qjPkeHhM2bKZs
+nkZlS9j0KsudWGwirN/vkkYg8zrKdK5AQ0dqFRDrDuasZ3N5IA1M+V88u+QjWK7o
+B6pSYVXxYZDv9OZSpqC+vUrEQLJf+fNakXrzSk9dCT1bYv2Lt6ox/epix7XYg2bI
+Z/OHMQKBgQC2FUGhlndGeugTJaoJ8nhT/0VfRUX/h6sCgSerk5qFr/hNCBV4T022
+x0NDR2yLG6MXyqApJpG6rh3QIDElQoQCNlI3/KJ6JfEfmqrLLN2OigTvA5sE4fGU
+Dp/ha8OQAx95EwXuaG7LgARduvOIK3x8qi8KsZoUGJcg2ywurUbkWA==
+-----END RSA PRIVATE KEY-----

test/fixtures/keys/agent1.cnf

@@ -0,0 +1,26 @@
+[ req ]
+default_bits           = 2048
+days                   = 9999
+distinguished_name     = req_distinguished_name
+attributes             = req_attributes
+prompt                 = no
+x509_extensions        = v3_ca
+
+[ req_distinguished_name ]
+C                      = US
+ST                     = CA
+L                      = SF
+O                      = Joyent
+OU                     = Node.js
+CN                     = agent1
+emailAddress           = ry@tinyclouds.org
+
+[ req_attributes ]
+challengePassword              = A challenge password
+
+[ v3_ca ]
+authorityInfoAccess = @issuer_info
+
+[ issuer_info ]
+OCSP;URI.0 = http://ocsp.nodejs.org/
+caIssuers;URI.0 = http://ca.nodejs.org/ca.cert

test/fixtures/keys/agent10-cert.pem

@@ -0,0 +1,47 @@
+-----BEGIN CERTIFICATE-----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==
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

test/fixtures/keys/agent10-csr.pem

@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

test/fixtures/keys/agent10-key.pem

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEogIBAAKCAQEAz+PcozBEudbH2BuGnNOo0ew50oszA4FvtFeghT4Lr+qdQ9PG
+gQOtJoWPPrY7G4p9w2EYkwdhzewvbL2dnAH3yivVv+NBuvo3ybgeiPIPi7XWfYVY
+sNkQtJODxS86Rt1bCUaTOFn6LP7m2agbjRizfiuvLABVNI21K2uHbSUFzIu0pRZS
+SFMdoNdDhd9driXERHxVYDQMOBCGdh+25hraRNKd1HwYq+B08uZ8+K7mAm28zVg7
+l+0SBmUl7amkHOz/UD77i87KZX3iPEtqEUy0SIAxGrVyRZSFsxrtZBe1437Tq5xR
+8EViAiuo6Kks3S4UktNqn6iERSRVWfEDatdW4QIDAQABAoIBAGlLdjNJfWXLPYld
+176TDgzVYywayQnbg2KKh4k1NeIyKNlz6DTsUcUTHMycrC904+ITyciekpEkMZkY
+KT4dWQ4TSb5ZMq+rkJohIYYnZGxU+4C0C4n3R5jOpo03MIM4FqYKEwMVv7sOmIph
+tSKwAinDooPc30sxAzQs0HkdqWRB6+Zfv1M/MTLYECoc0kdRSDD3+fHFTqRZ759w
+1ZeXwAHGMXb3c4ggx3P8J+9jTC04RI9RG4RBTbbWH9V+ZWgJybJesz+66yIVhTAh
+I/MlmoSZIXrscp64d+diU1xR63x67jCdZNkBycuiLZ+O9r77Z0wDAjdKyrVyanNk
+3BxsleECgYEA/HXudTGvLzuUxAoTnGrcFqtTk9u1EJllhMsyK3YXsk7b+Xd02fiP
+MpUa4RGeyJ4AdkKC466HmY2hVtBlnHdcUJtC9LvJaXTUINRbKQGvlvxdiNPRG/25
+NyqFSamOdeY/WiItp6KqZBTaWIBIX9NLPT0WeAXSh5D5RNPapyTEjnUCgYEA0s34
+BOwUirjpkW+yDgOSm9uy97SoMaORinjfOQll+9m4PZDVAOnLVO563Mv/uNIbW52H
+yGBf2zfYMe0roweQJQbiqAKsdyDQMurb4Leup5d4ofu6of2Mb8Y/82wEA8zD/yWr
+hNl0SSQm3yXZDDus1oGqJLpnlCekgJGRh1gpMT0CgYAYF3DwAhPDoB3sL0H71T63
+cxYAsCCxOtIzP+jDuPs96sSXI80k19FidFQiUjoizuEgZ+xxqcAK6TcSP8TSj5lh
+n89d52WrCJkNoPYqDZ0h/Wc3nW8BCs9X8ljR1Lphid1VzpkovB8iedL0Sxmc+17c
+sy2nunaCtVT0OntNI/cV2QKBgCmlHRFD3k8FdscPjNpt5EG8Jl//JZcg3DjB5j9r
+VuVpPpeTDDFw/oVZ05XZCzzk7RitR0zTlTxGjQRX+V3suZJHCPHuDUo/hkH42dVM
+FEnxh5hglZ846syOGsYpGaXyhunZ9Ed7ehiU9sTwwi9DfsKlvQoidSH0ru/jUh+t
+z/11AoGAeS85yQriTWvXTILt3ZdEJD//PU55Ofby8bInYBRx4T7iXI/FozKcwE67
+/dByelz4KUdGu1ZUZYzaFKs87Si4IB+NThX27BOcpXjd1IjJk3cHnkx6t+FrFFsH
+7SSOwAuzpxVSGn0yij06OiYy6Qyay3tSLYPLFcXWB6oK7GWjFYc=
+-----END RSA PRIVATE KEY-----

test/fixtures/keys/agent10.cnf

@@ -0,0 +1,17 @@
+[ req ]
+default_bits           = 2048
+days                   = 9999
+distinguished_name     = req_distinguished_name
+attributes             = req_attributes
+prompt                 = no
+
+[ req_distinguished_name ]
+C                      = US
+ST                     = CA
+L                      = SF
+O                      = The Node.js Foundation
+OU                     = Node.js
+CN                     = agent10.example.com
+
+[ req_attributes ]
+challengePassword              = A challenge password

test/fixtures/keys/agent11-cert.pem

@@ -0,0 +1,8 @@
+-----BEGIN CERTIFICATE-----
+MIIBFjCBwaADAgECAgEBMA0GCSqGSIb3DQEBBQUAMBQxEjAQBgNVBAMTCWxvY2Fs
+aG9zdDAeFw0yMzEwMTUxNzQ5MTBaFw0yNDEwMTUxNzQ5MTBaMBQxEjAQBgNVBAMT
+CWxvY2FsaG9zdDBcMA0GCSqGSIb3DQEBAQUAA0sAMEgCQQDW9vH7W98zSi1IfoTG
+pTjbvXRzmmSG6y5z1S3gvC6+keC5QQkEdIG5vWas1efX5qEPybptRyM34T6aWv+U
+uzUJAgMBAAEwDQYJKoZIhvcNAQEFBQADQQAEIwD5mLIALrim6uD39DO/umYDtDIb
+TAQmgWdkQrCdCtX0Yp49gJyaq2HtFgsk/cxMoYMYkDtT5a7nwEQu+Xqt
+-----END CERTIFICATE-----

test/fixtures/keys/agent11-key.pem

@@ -0,0 +1,9 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIBOwIBAAJBANb28ftb3zNKLUh+hMalONu9dHOaZIbrLnPVLeC8Lr6R4LlBCQR0
+gbm9ZqzV59fmoQ/Jum1HIzfhPppa/5S7NQkCAwEAAQJAaetb6GKoY/lUvre4bLjU
+f1Gmo5+bkO8pAGI2LNoMnlETjLjlnvShkqu0kxY96G5Il6VSX4Yjz0D40f4IrlJW
+AQIhAPChOjGBlOFcGA/pPmzMcW8jRCLvVubiO9TpiYVhWz45AiEA5LIKsSR8HT9y
+eyVNNNkRbNvTrddbvXMBBjj+KwxQrVECIQDjalzHQQJl4lXTY8rdpHJoaNoSckSd
+PJ7zYCvaZOKI8QIhALoGbRYMxHySCJBNFlE/pKH06mnE/RXMf2/NWkov+UwRAiAz
+ucgBN8xY5KvG3eI78WHdE2B5X0B4EabFXmUlzIrhTA==
+-----END RSA PRIVATE KEY-----

test/fixtures/keys/agent2-cert.pem

@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

test/fixtures/keys/agent2-csr.pem

@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

test/fixtures/keys/agent2-key.pem

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

test/fixtures/keys/agent2.cnf

@@ -0,0 +1,19 @@
+[ req ]
+default_bits           = 2048
+days                   = 9999
+distinguished_name     = req_distinguished_name
+attributes             = req_attributes
+prompt                 = no
+
+[ req_distinguished_name ]
+C                      = US
+ST                     = CA
+L                      = SF
+O                      = Joyent
+OU                     = Node.js
+CN                     = agent2
+emailAddress           = ry@tinyclouds.org
+
+[ req_attributes ]
+challengePassword              = A challenge password
+

test/fixtures/keys/agent3-cert.pem

@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

test/fixtures/keys/agent3-csr.pem

@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIIC5zCCAc8CAQAwfTELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAkNBMQswCQYDVQQH
+DAJTRjEPMA0GA1UECgwGSm95ZW50MRAwDgYDVQQLDAdOb2RlLmpzMQ8wDQYDVQQD
+DAZhZ2VudDMxIDAeBgkqhkiG9w0BCQEWEXJ5QHRpbnljbG91ZHMub3JnMIIBIjAN
+BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB0VfVEOH9YbUzJ6AGDY+pyYxJ3f
+AqY7pDFJikR2/aiuEEnyil+x28wO+TrpR+oGAwivImEdZ/WLOeYALZpPiENjIq6o
+W43sQPMc5Yfu1rkTn45dH9S+Bi+yrmm00oBRRtncyg6dCW4Rs2clLTCopJBa7Vqm
+eKHx9SKqtNCMj92Wec30DVpDAPYkw/L8ZgPpuPHemwVwGOs+JKb9a5nGlwWD+v1w
+1bebKUQwzDZNR7ZbBrP3YZ9foBsX8Q0BL0NlLDPtTNXBofPC/r1NdOWyR28C8YDi
+PoUK+lu5MU1zTdhgZR+eE7tamJpL2WmmPtQwBQ4jQosAihhlg4Jhqtl43QIDAQAB
+oCUwIwYJKoZIhvcNAQkHMRYMFEEgY2hhbGxlbmdlIHBhc3N3b3JkMA0GCSqGSIb3
+DQEBCwUAA4IBAQBBYLg+yfXXYhJcWP2VcUrKZVrs6YA+tzY0fUNCj7+6BpsLJRod
+4oG8ZD+lWFD3zsZtwnu2cJf9dKQfW7yGPWzXARRdJFTdp2EifaQCf7Mgykq21zEG
+xQ755WvJvSM7dK/tCZXl0fQWk6Gbj8JStgz5MkLuTuZkCxfllNQ0Zd102fAyI+Os
+gf9AI3tgvt8wV8QMvS0YmBBNZdilxLvm0WhuNWfeSM5RxeUqbZ4YPfxELNPyb2wl
+QVnSSu2Hw6qCsUrLFwVkohgaP8c160NhZ0djqDw2wSQcFdx+ypt1ZwHG2T4zMBYF
+0zr/VjWtevRXULFRF7BPE+nSY1Fz6S9LMTS3
+-----END CERTIFICATE REQUEST-----

test/fixtures/keys/agent3-key.pem

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEogIBAAKCAQEAzB0VfVEOH9YbUzJ6AGDY+pyYxJ3fAqY7pDFJikR2/aiuEEny
+il+x28wO+TrpR+oGAwivImEdZ/WLOeYALZpPiENjIq6oW43sQPMc5Yfu1rkTn45d
+H9S+Bi+yrmm00oBRRtncyg6dCW4Rs2clLTCopJBa7VqmeKHx9SKqtNCMj92Wec30
+DVpDAPYkw/L8ZgPpuPHemwVwGOs+JKb9a5nGlwWD+v1w1bebKUQwzDZNR7ZbBrP3
+YZ9foBsX8Q0BL0NlLDPtTNXBofPC/r1NdOWyR28C8YDiPoUK+lu5MU1zTdhgZR+e
+E7tamJpL2WmmPtQwBQ4jQosAihhlg4Jhqtl43QIDAQABAoIBAF+KLYje69GTEm86
+7UhIDMghjJBbpQtEbB5Kw7VonpnU3sTZGCIU8NeFCG04WgFDVVUON4vMEUub73NG
+aUbvN9L8V+bgAgX4xGESarA1lGIFd13z8Tr5BYk3wldJO05cqa6UQ3iAppjHYJms
+6gXhBM8ikq0PBWTpyKuJcoX4KBMeO1IQ7DIVqNnttwDG0thiPdEwCH31L9m/wKm7
+upt9vF0hKmmK+QfMyXwyl0XuilB60+VMsomqFy/yvWyLt5MqLYnsDR9zRfPJPgzm
+OcH6VZ/ce70r1eCxcrGp2/JasUDAFhR8VN+w1nyPzT6dZjJsbO1xCpjOCM+Mkfxh
+copO7TECgYEA52TA3Tl0Z+UN6SxfL6wYn6zCV/1eK7VCN59dtssGUa4he2sY2QVb
+im6Kfu49V9/+loiR+8k2ZfLY5B0K2Jq5/jfpkOHHVPDmLeE64XUW0asxpXwRA+L5
+Eh5rjJDk9TiKdFVoqVQwUK6fGhL3vjMjIGD9QCdBk/3JzalkBHgNt9cCgYEA4dGv
+mmQfUFBLTNzcgcrNBw5wq/xxG5s+QJ/0WfYhBv6+HcUXRwqx2BtUa7qbUov10eku
+Xlm3C/PghIy67BHNMYKdSamCWHhyAtI7kJ3d+A8WLc9ejTyswevSr3INmVOuvLje
+xLZqcMhyjOKyW9AeJ/XMyg4pqkGwSXcU3APzLmsCgYB9dgWUbWiORIWMXgCmSnt3
+aCZfqwL6U+c5XXFkgSRF+VIyJtlsIhmGL3VsaSRdlxfk6tusV2blVA0BcjXFR+98
+xTgg1CpOBefoDGzufZwHxvi+L0zSfKhriI7rwkxCIYwAk6aR2RHxTRz6+DnXqMZs
+8emedSp7YWmf1y5hte5KNQKBgEPRV22EmCrkkli5E7gfEcgGvCvKmqVx0BZUc2v5
+ER4qryn9oOoC+jouqwHXfwIhamfqIbTQOLrsOQdVxGVVS0yNL3OJ5s1vDr5uKNlb
+r+fpj/2eA4VjLXbnvdRW6mKb0SR4WN628eyBJnXNN0d/jy7tEN21tymcpLbLfoY8
+4XGVAoGAQ1rJDHnB7L3k59QwvANJkcTmLRPeHs3Gyb2Nlt4JJURg9R0+wvsK6P21
+mIpv4h5EJ7D4zWFrDqu/1tR0v6jridSRgLkD4yqVsGeODG5ARdwMlLeYgO/eyDMW
+TrqYyBhz+eiC8oB27m9VnSimyWjpK+qfC6OaoODussiSyVXeyHs=
+-----END RSA PRIVATE KEY-----

test/fixtures/keys/agent3.cnf

@@ -0,0 +1,19 @@
+[ req ]
+default_bits           = 2048
+days                   = 9999
+distinguished_name     = req_distinguished_name
+attributes             = req_attributes
+prompt                 = no
+
+[ req_distinguished_name ]
+C                      = US
+ST                     = CA
+L                      = SF
+O                      = Joyent
+OU                     = Node.js
+CN                     = agent3
+emailAddress           = ry@tinyclouds.org
+
+[ req_attributes ]
+challengePassword              = A challenge password
+

test/fixtures/keys/agent4-cert.pem

@@ -0,0 +1,26 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

test/fixtures/keys/agent4-csr.pem

@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIIC5zCCAc8CAQAwfTELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAkNBMQswCQYDVQQH
+DAJTRjEPMA0GA1UECgwGSm95ZW50MRAwDgYDVQQLDAdOb2RlLmpzMQ8wDQYDVQQD
+DAZhZ2VudDQxIDAeBgkqhkiG9w0BCQEWEXJ5QHRpbnljbG91ZHMub3JnMIIBIjAN
+BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9loX+bQq2o1Sh+p2vfnNvDs/lvCe
+xuKKWCst/LZZyPhd6ywuUos0lxs0AN7B4cY54Aq0OUEfoX7oPBxS3rIuTdUwWcsw
+z9Jg2PnUEAvekJtFS78v77ORAqnegEyeQzpJ1i+MYZ/Ebnrp6m2Pt11UrvQpkSVo
+fzerrZbxSBBIRm2pianctaPuonL3tyV11kZb3i5YD9s0J+g3A51PfUCOB2umPnzD
+geAAl97Fw/E+0bQu0C57Ej86AxEfSEnbj9l+ZKkDMuXQTZKVloY+Ec/6wj2m0/AB
+EsWN9h6qQ0pb4oB15zFBpgCeRzWuRfL2tr96nGwYjQiM3dAzEkvSmDF3TwIDAQAB
+oCUwIwYJKoZIhvcNAQkHMRYMFEEgY2hhbGxlbmdlIHBhc3N3b3JkMA0GCSqGSIb3
+DQEBCwUAA4IBAQDwjbBNgtbNyejw3c3dGbIq1GenEUEEbf/HuxwZ4RRFhdMoLiN5
+k9FwNiicLgejE9wCpdKLI6ctVnarHNVwnZBxg8Ej+cmOm7kkoOLEWDJyjDkpxbfk
+Bn0wdHU3lZQs0mzedwY15OV2s7cifysWHMSbWw9QIsqkEtYbC2yIZW7jx4NpQ8V/
+H/43M/aJgQ3NWx4F/GOW8SQhQ3QYNwf6YDoIG2PsS1aLI2KA2syUoMe/dw039YxL
+wS4y0YsKeC3gG6Gr6GAbVG3+byIvv0t6OIFJtAqKD+L7pPYZ5cFJvJ8uq4cg7N4C
+m01T5ZP+HXr2KpI+6SZWEfBvJMAjWOHm3JR/
+-----END CERTIFICATE REQUEST-----

test/fixtures/keys/agent4-key.pem

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

test/fixtures/keys/agent4.cnf

@@ -0,0 +1,21 @@
+[ req ]
+default_bits           = 2048
+days                   = 9999
+distinguished_name     = req_distinguished_name
+attributes             = req_attributes
+prompt                 = no
+
+[ req_distinguished_name ]
+C                      = US
+ST                     = CA
+L                      = SF
+O                      = Joyent
+OU                     = Node.js
+CN                     = agent4
+emailAddress           = ry@tinyclouds.org
+
+[ req_attributes ]
+challengePassword              = A challenge password
+
+[ ext_key_usage ]
+extendedKeyUsage       = clientAuth

test/fixtures/keys/agent5-cert.pem

@@ -0,0 +1,26 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

test/fixtures/keys/agent5-csr.pem

@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

test/fixtures/keys/agent5-key.pem

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

test/fixtures/keys/agent5.cnf

@@ -0,0 +1,21 @@
+[ req ]
+string_mask            = utf8only
+utf8                   = yes
+default_bits           = 2048
+days                   = 9999
+distinguished_name     = req_distinguished_name
+attributes             = req_attributes
+prompt                 = no
+
+[ req_distinguished_name ]
+C                      = HU
+L                      = Budapest
+O                      = Tresorit
+CN                     = Ádám Lippai
+emailAddress           = adam.lippai@tresorit.com
+
+[ req_attributes ]
+challengePassword              = A challenge password
+
+[ ext_key_usage ]
+extendedKeyUsage       = clientAuth

test/fixtures/keys/agent6-cert.pem

@@ -0,0 +1,43 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

test/fixtures/keys/agent6-csr.pem

@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

test/fixtures/keys/agent6-key.pem

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

test/fixtures/keys/agent6.cnf

@@ -0,0 +1,18 @@
+[ req ]
+string_mask            = utf8only
+utf8                   = yes
+default_bits           = 2048
+days                   = 9999
+distinguished_name     = req_distinguished_name
+attributes             = req_attributes
+prompt                 = no
+
+[ req_distinguished_name ]
+C                      = HU
+L                      = Budapest
+O                      = Tresorit
+CN                     = Ádám Lippai
+emailAddress           = adam.lippai@tresorit.com
+
+[ req_attributes ]
+challengePassword              = A challenge password

test/fixtures/keys/agent7-cert.pem

@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

test/fixtures/keys/agent7-csr.pem

@@ -0,0 +1,17 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

test/fixtures/keys/agent7-key.pem

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

test/fixtures/keys/agent7.cnf

@@ -0,0 +1,17 @@
+[ req ]
+default_bits           = 2048
+days                   = 9999
+distinguished_name     = req_distinguished_name
+attributes             = req_attributes
+prompt                 = no
+
+[ req_distinguished_name ]
+C                      = US
+ST                     = CA
+L                      = SF
+O                      = IOJS
+OU                     = iojs.org
+CN                     = localhost
+
+[ req_attributes ]
+challengePassword              = A challenge password

test/fixtures/keys/agent8-cert.pem

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

test/fixtures/keys/agent8-csr.pem

@@ -0,0 +1,17 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

test/fixtures/keys/agent8-key.pem

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

test/fixtures/keys/agent8.cnf

@@ -0,0 +1,17 @@
+[ req ]
+default_bits           = 2048
+days                   = 9999
+distinguished_name     = req_distinguished_name
+attributes             = req_attributes
+prompt                 = no
+
+[ req_distinguished_name ]
+C                      = US
+ST                     = CA
+L                      = SF
+O                      = NODEJS
+OU                     = agent8
+CN                     = localhost
+
+[ req_attributes ]
+challengePassword              = A challenge password

test/fixtures/keys/agent9-cert.pem

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

test/fixtures/keys/agent9-csr.pem

@@ -0,0 +1,17 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

test/fixtures/keys/agent9-key.pem

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

test/fixtures/keys/agent9.cnf

@@ -0,0 +1,17 @@
+[ req ]
+default_bits           = 2048
+days                   = 9999
+distinguished_name     = req_distinguished_name
+attributes             = req_attributes
+prompt                 = no
+
+[ req_distinguished_name ]
+C                      = US
+ST                     = CA
+L                      = SF
+O                      = NODEJS
+OU                     = agent9
+CN                     = localhost
+
+[ req_attributes ]
+challengePassword              = A challenge password

test/fixtures/keys/ca1-cert.pem

@@ -0,0 +1,22 @@
+-----BEGIN CERTIFICATE-----
+MIIDlDCCAnygAwIBAgIUSrFsjf1qfQ0t/KvfnEsOksatAikwDQYJKoZIhvcNAQEL
+BQAwejELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAkNBMQswCQYDVQQHDAJTRjEPMA0G
+A1UECgwGSm95ZW50MRAwDgYDVQQLDAdOb2RlLmpzMQwwCgYDVQQDDANjYTExIDAe
+BgkqhkiG9w0BCQEWEXJ5QHRpbnljbG91ZHMub3JnMCAXDTIyMDkwMzIxNDAzN1oY
+DzIyOTYwNjE3MjE0MDM3WjB6MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExCzAJ
+BgNVBAcMAlNGMQ8wDQYDVQQKDAZKb3llbnQxEDAOBgNVBAsMB05vZGUuanMxDDAK
+BgNVBAMMA2NhMTEgMB4GCSqGSIb3DQEJARYRcnlAdGlueWNsb3Vkcy5vcmcwggEi
+MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNvf4OGGep+ak+4DNjbuNgy0S/
+AZPxahEFp4gpbcvsi9YLOPZ31qpilQeQf7d27scIZ02Qx1YBAzljxELB8H/ZxuYS
+cQK0s+DNP22xhmgwMWznO7TezkHP5ujN2UkbfbUpfUxGFgncXeZf9wR7yFWppeHi
+RWNBOgsvY7sTrS12kXjWGjqntF7xcEDHc7h+KyF6ZjVJZJCnP6pJEQ+rUjd51eCZ
+Xt4WjowLnQiCS1VKzXiP83a++Ma1BKKkUitTR112/Uwd5eGoiByhmLzb/BhxnHJN
+07GXjhlMItZRm/jfbZsx1mwnNOO3tx4r08l+DaqkinIadvazs+1ugCaKQn8xAgMB
+AAGjEDAOMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAFqG0RXURDam
+56x5accdg9sY5zEGP5VQhkK3ZDc2NyNNa25rwvrjCpO+e0OSwKAmm4aX6iIf2woY
+wF2f9swWYzxn9CG4fDlUA8itwlnHxupeL4fGMTYb72vf31plUXyBySRsTwHwBloc
+F7KvAZpYYKN9EMH1S/267By6H2I33BT/Ethv//n8dSfmuCurR1kYRaiOC4PVeyFk
+B3sj8TtolrN0y/nToWUhmKiaVFnDx3odQ00yhmxR3t21iB7yDkko6D8Vf2dVC4j/
+YYBVprXGlTP/hiYRLDoP20xKOYznx5cvHPJ9p+lVcOZUJsJj/Iy750+2n5UiBmXt
+lz88C25ucKA=
+-----END CERTIFICATE-----

test/fixtures/keys/ca1-cert.srl

@@ -0,0 +1 @@
+147D36C1C2F74206DE9FAB5F2226D78ADB00A428

test/fixtures/keys/ca1-key.pem

@@ -0,0 +1,30 @@
+-----BEGIN ENCRYPTED PRIVATE KEY-----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+-----END ENCRYPTED PRIVATE KEY-----

test/fixtures/keys/ca1.cnf

@@ -0,0 +1,23 @@
+[ req ]
+default_bits           = 2048
+days                   = 9999
+distinguished_name     = req_distinguished_name
+attributes             = req_attributes
+prompt                 = no
+output_password        = password
+x509_extensions        = v3_ca
+
+[ req_distinguished_name ]
+C                      = US
+ST                     = CA
+L                      = SF
+O                      = Joyent
+OU                     = Node.js
+CN                     = ca1
+emailAddress           = ry@tinyclouds.org
+
+[ req_attributes ]
+challengePassword              = A challenge password
+
+[ v3_ca ]
+basicConstraints = CA:TRUE

test/fixtures/keys/ca2-cert.pem

@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

test/fixtures/keys/ca2-cert.srl

@@ -0,0 +1 @@
+91F006636069F2A1

test/fixtures/keys/ca2-crl.pem

@@ -0,0 +1,14 @@
+-----BEGIN X509 CRL-----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+-----END X509 CRL-----

test/fixtures/keys/ca2-database.txt

@@ -0,0 +1,3 @@
+R	22920830184220Z	181116184220Z	91F006636069F29A	unknown	/C=US/ST=CA/L=SF/O=Joyent/OU=Node.js/CN=agent4/emailAddress=ry@tinyclouds.org
+R	22960617144651Z	220903144651Z	91F006636069F29E	unknown	/C=US/ST=CA/L=SF/O=Joyent/OU=Node.js/CN=agent4/emailAddress=ry@tinyclouds.org
+R	22980611225844Z	240827225844Z	783006FA8D75BD4E95045EE3EC02EE0609D042C2	unknown	/C=US/ST=CA/L=SF/O=Joyent/OU=Node.js/CN=agent4/emailAddress=ry@tinyclouds.org

test/fixtures/keys/ca2-database.txt.attr

@@ -0,0 +1 @@
+unique_subject = no

test/fixtures/keys/ca2-database.txt.attr.old

@@ -0,0 +1 @@
+unique_subject = no

test/fixtures/keys/ca2-database.txt.old

@@ -0,0 +1,2 @@
+R	22920830184220Z	181116184220Z	91F006636069F29A	unknown	/C=US/ST=CA/L=SF/O=Joyent/OU=Node.js/CN=agent4/emailAddress=ry@tinyclouds.org
+R	22960617144651Z	220903144651Z	91F006636069F29E	unknown	/C=US/ST=CA/L=SF/O=Joyent/OU=Node.js/CN=agent4/emailAddress=ry@tinyclouds.org

test/fixtures/keys/ca2-key.pem

@@ -0,0 +1,30 @@
+-----BEGIN ENCRYPTED PRIVATE KEY-----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+-----END ENCRYPTED PRIVATE KEY-----

test/fixtures/keys/ca2-serial

@@ -0,0 +1 @@
+01

test/fixtures/keys/ca2.cnf

@@ -0,0 +1,33 @@
+[ ca ]
+default_ca      = CA_default
+
+[ CA_default ]
+serial = ca2-serial
+crl = ca2-crl.pem
+database = ca2-database.txt
+name_opt = CA_default
+cert_opt = CA_default
+default_crl_days = 9999
+default_md = sha512
+
+
+[ req ]
+default_bits           = 2048
+days                   = 9999
+distinguished_name     = req_distinguished_name
+attributes             = req_attributes
+prompt                 = no
+output_password        = password
+
+[ req_distinguished_name ]
+C                      = US
+ST                     = CA
+L                      = SF
+O                      = Joyent
+OU                     = Node.js
+CN                     = ca2
+emailAddress           = ry@tinyclouds.org
+
+[ req_attributes ]
+challengePassword              = A challenge password
+

test/fixtures/keys/ca3-cert.pem

@@ -0,0 +1,22 @@
+-----BEGIN CERTIFICATE-----
+MIIDlDCCAnygAwIBAgIUFH02wcL3Qgben6tfIibXitsApCUwDQYJKoZIhvcNAQEL
+BQAwejELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAkNBMQswCQYDVQQHDAJTRjEPMA0G
+A1UECgwGSm95ZW50MRAwDgYDVQQLDAdOb2RlLmpzMQwwCgYDVQQDDANjYTExIDAe
+BgkqhkiG9w0BCQEWEXJ5QHRpbnljbG91ZHMub3JnMCAXDTIyMDkwMzIxNDAzN1oY
+DzIyOTYwNjE3MjE0MDM3WjB6MQswCQYDVQQGEwJVUzELMAkGA1UECAwCQ0ExCzAJ
+BgNVBAcMAlNGMQ8wDQYDVQQKDAZKb3llbnQxEDAOBgNVBAsMB05vZGUuanMxDDAK
+BgNVBAMMA2NhMzEgMB4GCSqGSIb3DQEJARYRcnlAdGlueWNsb3Vkcy5vcmcwggEi
+MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC76GtbMvRM7E1diL6l/Y4qQuDK
+ubmGWYOpz7kkUcApfJTa8gIhQvfvNdU/itpLIf1Nhmp9cDRk3BV6gU3P4SetVP+V
+x3PSiZ6MJDbQXETn7cLJIewtMexGf8wJldTJ3wcv6/1dZDU3RM3ME7XCgNGBXPOj
+c/TOz2StEGf4iwXKE7MHV0D2/hquOwuctqLjV969w8jea6BNqQjcKbq5Y17V4sxH
+AO+epbpC88byAaMgmRcqlM660zpKdcsfjQZ/4Vzoce9OOSd/+aHdwLZM3BVL6vAI
+09UqkaB+3M4n2pK6dPCQtimbaDyo7QZYgWpmp3/YDN1Hhh6IBoMoQqSu+/DFAgMB
+AAGjEDAOMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAJwGWU3qa5eT
+EEP/IXeZUJuZhqND+kBvBPPUYTeCXSbVRI2c6WaU7NZUqYkDz+lVrAMMG+eGPCW1
+8h8DehudZLNDvrz8uEPsYbgvZD+grFRmWh5kUdc2yz6gVVzTTGwy7ARgSoebUqK0
+O4uI8BW/UlF+OpGSpimMBnHqAq13k1Eb9kjckyZw2qIhW02mCsv9PnVQ8waDUq+C
+3No8ZoNqgQVVOFSuJz9wxGFPdt0KhizYMh0n+BP7U5srTn0LwWBEXoPsHBWhudTC
+NWYtx++OIWK/3QEufal83p2W3ICxAW3yqY7Qy03Z2LW07BDDdAmoFN9NTYuZKGd4
+DQYB7oHNx8E=
+-----END CERTIFICATE-----

test/fixtures/keys/ca3-cert.srl

@@ -0,0 +1 @@
+5B75D77EDC7FB5B7FA9F1424DA4C64FB815DCBDE

test/fixtures/keys/ca3-csr.pem

@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

test/fixtures/keys/ca3-key.pem

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEowIBAAKCAQEAu+hrWzL0TOxNXYi+pf2OKkLgyrm5hlmDqc+5JFHAKXyU2vIC
+IUL37zXVP4raSyH9TYZqfXA0ZNwVeoFNz+EnrVT/lcdz0omejCQ20FxE5+3CySHs
+LTHsRn/MCZXUyd8HL+v9XWQ1N0TNzBO1woDRgVzzo3P0zs9krRBn+IsFyhOzB1dA
+9v4arjsLnLai41fevcPI3mugTakI3Cm6uWNe1eLMRwDvnqW6QvPG8gGjIJkXKpTO
+utM6SnXLH40Gf+Fc6HHvTjknf/mh3cC2TNwVS+rwCNPVKpGgftzOJ9qSunTwkLYp
+m2g8qO0GWIFqZqd/2AzdR4YeiAaDKEKkrvvwxQIDAQABAoIBACNbvLfQgr/mxzgO
+fzFk4Nd69imvgQWS2n+dosz+xRYJZ0k7uMLhgx30F0h5rFHu92cbH/ayomlIMJJ4
+ulefmoO3NtDMUzMOylK8jcPvWNf7mWeXhoWKm1c4vQAgvYWu/f86fNaSAKGBxOfd
+3ZnX+5RIFWBwdWRlCiC2sZnHLzOy5miFvcuw2Og/Pt4VKWFetsXLXfZi6Af7YZdQ
+gwGnQoMEiL5O/4bj3rwsVbgWmC5/zuW47Lg3wZiopVhgC6Ho9aU2xD9FJOs8D975
++HUr7UwJoPBHETeOmpdIoP1D57mscrL6AxBrWUep8BfQgnAm0eK7A8a4pA1ZFCpR
+3Ro7OwECgYEA7v0ZNm8W2pZsH4w/v6dk5q49hpNI31yoey5IqAgn15/bG2zq4vpY
+qiBC9vUTn9v2rPyU5qosm7NyskrA5Es8WTDkP6lfHoRrHeSnmzcyCvX3gM+00hAX
+qv/8au8e78uKnKma3J/2bHfV77EkKShKuTf8KgcL8ZIEoD/Gu2J+LzUCgYEAyUiE
+KI9nnJKIRuDNFxRBhKFKj6WLPu4brG37GR/KGPmZgctk5T5YZ7zTJmtxs8eqW3NW
+oOEk9m7xM+E5U2fIUGWr4YGdlLlwjt7nS8LzzuH4z8EiTXL/GqgUHQRRlDP/aUFE
+3AC1c8sOICqhtnoKB5w6FUgGXalsuOeHTJueHVECgYBwPyXhYCnOvsnHw3qJjJii
+lAHHvFOEvSNQv7tWWIZGCwnBBtYHh2evd/mbvh3afliMhRF2iUTsWEstnFieoQuW
+JJV/pRBM6ArbfnKOP01cwovdzzBxXSeQpCytGORh4iqXTD21E9iMt3ge3QdL4WW/
+OqFQKAEfE+LiVTIE/syfZQKBgQCGXBy0An30WzASuA7PIBtYEF54ItYfbMwWPtgF
+fl3ma/7XUFEKYaKbpMUB+WjNzDNglk42V/PXeFkT+3zLuxRQ7n1cq6vn0h1bkVmu
+DfW3nMn8zHw8XM4DGj1K3U4jcs5EkWgIv4RgRiQovqxx5Wb6i4OOHyT4spa7mvmK
+3rod8QKBgDqFpYYH6SLWcbp5dQeSlSp7cqYv44nBrgkTRrzKkuAXNepJRYwnmKBc
+TL/RB13T24Zm1lkILCGUX3l8kjYBTKjXFR04rP7i0ly9G5ADqZNsGxqM039ag2b1
+iBgNpSvFxxYsdIVsjhEDfCWovrrWfb7Q68YRFpo30wVuMWZmL+5d
+-----END RSA PRIVATE KEY-----

test/fixtures/keys/ca3.cnf

@@ -0,0 +1,23 @@
+[ req ]
+default_bits           = 2048
+days                   = 9999
+distinguished_name     = req_distinguished_name
+attributes             = req_attributes
+prompt                 = no
+output_password        = password
+x509_extensions        = v3_ca
+
+[ req_distinguished_name ]
+C                      = US
+ST                     = CA
+L                      = SF
+O                      = Joyent
+OU                     = Node.js
+CN                     = ca3
+emailAddress           = ry@tinyclouds.org
+
+[ req_attributes ]
+challengePassword              = A challenge password
+
+[ v3_ca ]
+basicConstraints = CA:TRUE

test/fixtures/keys/ca4-cert.pem

@@ -0,0 +1,26 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

test/fixtures/keys/ca4-cert.srl

@@ -0,0 +1 @@
+315699D1E5F92A9F0D238BDA285548E7DDB04E

test/fixtures/keys/ca4-csr.pem

@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIIC8zCCAdsCAQAwgYgxCzAJBgNVBAYTAlVTMQswCQYDVQQIDAJDQTELMAkGA1UE
+BwwCU0YxHzAdBgNVBAoMFlRoZSBOb2RlLmpzIEZvdW5kYXRpb24xEDAOBgNVBAsM
+B05vZGUuanMxDDAKBgNVBAMMA2NhNDEeMBwGCSqGSIb3DQEJARYPY2E0QGV4YW1w
+bGUub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HnUahyfA25t
+8kaziu0ivVMkTWntm0pJ8oemeO7yCGaY4QHEwN+QUzrzO7y7ngl2Dt76eEvj0mrg
+aW8Ao7NsePfp3663g8RrBsb4cR1da2Tc8kpXCqgwbcTlm8HI/7OAdHGA2YDLNv7i
+yVk9meHMgYfO9dVgrZ7RxfnGwNMJdNjYJrd02xeU6euoKl9j/ZWCG5xHAM2xAXOK
+HGm8toIm+Ss6iZXY8kypy7Fjwyv7jMT8V+pzIWu24xd3Y3s07r59nkFmQ29nHMTa
+LP7Tf3TYMBI5mp8fet732aBoywpQ/w05LR9gdM1jpUvIlmhj4qGskv17AMEmRecw
+ic3opq/byQIDAQABoCUwIwYJKoZIhvcNAQkHMRYMFEEgY2hhbGxlbmdlIHBhc3N3
+b3JkMA0GCSqGSIb3DQEBCwUAA4IBAQDDl1qv7srX1Jagdr2S6Mm9hqcinCRyMvWN
+KOPmgiDo4KeCey7imUaLSygf/PFC4GpYbxbYho+xaQHqnT/FqRUA+CxaVZ+OoZlG
+RT1iSCvVXeKwMmsYxAqjarFhfSYjPLI0UzLqVGTcdihFt3WSQGBsirkhBUm2vNhf
+Deh9bGmyO4yhisPudmTTKtztEiYFjVPFT+JoeZViqiO+9FTUYVcrkcH/E4PsJ9qs
+xkVQ3GzMjsQGWErufQE81OYuHilCUn53GlS1Hv2TAqkongoNfqIlWPh4eS191Hp8
+hFRDSBOOT6OfoTmcFupNZ0YQ5UM8ThmF7i4iwpTYfj1TojjzUf5R
+-----END CERTIFICATE REQUEST-----

test/fixtures/keys/ca4-key.pem

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

test/fixtures/keys/ca4.cnf

@@ -0,0 +1,23 @@
+[ req ]
+default_bits           = 2048
+days                   = 9999
+distinguished_name     = req_distinguished_name
+attributes             = req_attributes
+prompt                 = no
+output_password        = password
+x509_extensions        = v3_ca
+
+[ req_distinguished_name ]
+C                      = US
+ST                     = CA
+L                      = SF
+O                      = The Node.js Foundation
+OU                     = Node.js
+CN                     = ca4
+emailAddress           = ca4@example.org
+
+[ req_attributes ]
+challengePassword              = A challenge password
+
+[ v3_ca ]
+basicConstraints = CA:TRUE

test/fixtures/keys/ca5-cert.pem

@@ -0,0 +1,14 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

test/fixtures/keys/ca5-cert.srl

@@ -0,0 +1 @@
+C4C2054438388E3E

test/fixtures/keys/ca5-csr.pem

@@ -0,0 +1,10 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIIBaTCCARACAQAwgYgxCzAJBgNVBAYTAlVTMQswCQYDVQQIDAJDQTELMAkGA1UE
+BwwCU0YxHzAdBgNVBAoMFlRoZSBOb2RlLmpzIEZvdW5kYXRpb24xEDAOBgNVBAsM
+B05vZGUuanMxDDAKBgNVBAMMA2NhNTEeMBwGCSqGSIb3DQEJARYPY2E1QGV4YW1w
+bGUub3JnMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE6qDnQ6qm6hN+zbym76EK
++spOKstEmqj9WzdA/tRBHhzZijXq1l90yQmRfmgclAKZw843qzMfj8VjRMRXdZyy
+YKAlMCMGCSqGSIb3DQEJBzEWDBRBIGNoYWxsZW5nZSBwYXNzd29yZDAKBggqhkjO
+PQQDAgNHADBEAiABtQaxoQqAdrK8rjMh4wPB14/+uxMtJ7mY+QwJ411XywIgERcz
+HrcyJDqk2CS8B9mHwzD+ERUZ1CgThc15bnBleN0=
+-----END CERTIFICATE REQUEST-----

test/fixtures/keys/ca5-key.pem

@@ -0,0 +1,8 @@
+-----BEGIN EC PARAMETERS-----
+BggqhkjOPQMBBw==
+-----END EC PARAMETERS-----
+-----BEGIN EC PRIVATE KEY-----
+MHcCAQEEINQRYMZO9+WwFZsKDa03DHkQfraKyJ3EcAfYkgtyYtX3oAoGCCqGSM49
+AwEHoUQDQgAE6qDnQ6qm6hN+zbym76EK+spOKstEmqj9WzdA/tRBHhzZijXq1l90
+yQmRfmgclAKZw843qzMfj8VjRMRXdZyyYA==
+-----END EC PRIVATE KEY-----

test/fixtures/keys/ca5.cnf

@@ -0,0 +1,35 @@
+[ ca ]
+default_ca      = CA_default
+
+[ CA_default ]
+serial = ca5-serial
+crl = ca5-crl.pem
+database = ca5-database.txt
+name_opt = CA_default
+cert_opt = CA_default
+default_crl_days = 999
+default_md = sha512
+x509_extensions        = v3_ca
+
+
+[ req ]
+days                   = 9999
+distinguished_name     = req_distinguished_name
+attributes             = req_attributes
+prompt                 = no
+output_password        = password
+
+[ req_distinguished_name ]
+C                      = US
+ST                     = CA
+L                      = SF
+O                      = The Node.js Foundation
+OU                     = Node.js
+CN                     = ca5
+emailAddress           = ca5@example.org
+
+[ req_attributes ]
+challengePassword              = A challenge password
+
+[ v3_ca ]
+basicConstraints = CA:TRUE

test/fixtures/keys/ca6-cert.pem

@@ -0,0 +1,14 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

test/fixtures/keys/ca6-cert.srl

@@ -0,0 +1 @@
+A97535039C5E962C

test/fixtures/keys/ca6-csr.pem

@@ -0,0 +1,10 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIIBaTCCARACAQAwgYgxCzAJBgNVBAYTAlVTMQswCQYDVQQIDAJDQTELMAkGA1UE
+BwwCU0YxHzAdBgNVBAoMFlRoZSBOb2RlLmpzIEZvdW5kYXRpb24xEDAOBgNVBAsM
+B05vZGUuanMxDDAKBgNVBAMMA2NhNjEeMBwGCSqGSIb3DQEJARYPY2E2QGV4YW1w
+bGUub3JnMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEa7HfEgyVTPWYku9cWGRS
+ym5OdB7zqFihL8+k93EfWViJph72fJH3sOZypUgDXS/sEyUaLhbxtLYzsMbECzED
+waAlMCMGCSqGSIb3DQEJBzEWDBRBIGNoYWxsZW5nZSBwYXNzd29yZDAKBggqhkjO
+PQQDAgNHADBEAiAH69eeaDguTPAqGhWJbhFPEw7zXyZl6TgxoMIeZOouRgIge+Ft
+kXO05md30kbq6s559B45rYoH4iHxFOJZqHso7Yc=
+-----END CERTIFICATE REQUEST-----

test/fixtures/keys/ca6-key.pem

@@ -0,0 +1,8 @@
+-----BEGIN EC PARAMETERS-----
+BggqhkjOPQMBBw==
+-----END EC PARAMETERS-----
+-----BEGIN EC PRIVATE KEY-----
+MHcCAQEEIFbxtF4Zc09n/2w7z5SMQLFNTdxg4QPSm1WgyffHtJFIoAoGCCqGSM49
+AwEHoUQDQgAEa7HfEgyVTPWYku9cWGRSym5OdB7zqFihL8+k93EfWViJph72fJH3
+sOZypUgDXS/sEyUaLhbxtLYzsMbECzEDwQ==
+-----END EC PRIVATE KEY-----

test/fixtures/keys/ca6.cnf

@@ -0,0 +1,22 @@
+[ req ]
+days                   = 9999
+distinguished_name     = req_distinguished_name
+attributes             = req_attributes
+prompt                 = no
+output_password        = password
+x509_extensions        = v3_ca
+
+[ req_distinguished_name ]
+C                      = US
+ST                     = CA
+L                      = SF
+O                      = The Node.js Foundation
+OU                     = Node.js
+CN                     = ca6
+emailAddress           = ca6@example.org
+
+[ req_attributes ]
+challengePassword              = A challenge password
+
+[ v3_ca ]
+basicConstraints = CA:TRUE

test/fixtures/keys/dh1024.pem

@@ -0,0 +1,5 @@
+-----BEGIN DH PARAMETERS-----
+MIGHAoGBAOJ2igPYPdXULPSXaeR40pdGRdQmiWchzxDbzExdaJ4Q/landa7K9jfj
+KNV2heMpFoXa6+GkCxXSli+99j0W/ARK1nnZ9YaB42sp3g2oTmMevWyk9hfZTTUC
+Pc3AyioJGTQV/5wqYPdSNAu5KdHFZkP26EhbGgnDZ2hg5vFQT6EjAgEC
+-----END DH PARAMETERS-----

test/fixtures/keys/dh2048.pem

@@ -0,0 +1,8 @@
+-----BEGIN DH PARAMETERS-----
+MIIBCAKCAQEA+/OlXG2eqOsd9oA6Rg9KDbU22adIXuuwSaVLiUFNIc4WYnzPuyd0
+WcLajZzhXoUpN6GCLqXE+jBphHTh+xx6Y0ztlMldx0mnrLzacd236LCrTX5smojO
+CQ3BFmbDn7naG2famOZXF3gLRkcAmUtHrn2hYRbEk+1+GD3yXUm/JgFcnAX2HUQa
+b4sDL5NHMJ61+qE65qIIht9jOVovl4b7yOoyDu+JrheV0XBrc8WU03AGKcJnjW6i
+YqKXQlpamVvL/QqWfhg3SztBxYADAURePTUmS1H1FTnxSdRoUK9ZwKoTeZFL6krT
+3HK76Y0HXhwtjk3aXKTJyEDDLdYaltOCOwIBAg==
+-----END DH PARAMETERS-----

test/fixtures/keys/dh3072.pem

@@ -0,0 +1,11 @@
+-----BEGIN DH PARAMETERS-----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+-----END DH PARAMETERS-----

test/fixtures/keys/dh512.pem

@@ -0,0 +1,4 @@
+-----BEGIN DH PARAMETERS-----
+MEYCQQDItkdipTrinQp7aKt0GtwY7QE6tMKpg+r1zeucMrq9uNp8uLhHkF1OtqnL
+StFTzxQIkjN2s8exIvoWZWiy/9DTAgEC
+-----END DH PARAMETERS-----

test/fixtures/keys/dh_private.pem

@@ -0,0 +1,9 @@
+-----BEGIN PRIVATE KEY-----
+MIIBPgIBADCCARcGCSqGSIb3DQEDATCCAQgCggEBAP//////////rfhUWKK7Spqv
+3FYgJz088di5xYPOLTaVqeE2QRRkM/vMk53OJJs++X0v42NjDHXY9oGyAq7EYXrT
+3x7V1f1lYSQz9R9fBm7QhWNlVT3tGvO1VxNef1fJNZhPDHDg5ot34qaJ2vPv6HId
+8VihNq3nNTCsyk9IOnl6vAqxgrMk+2HRCKlLssjj+7lq2rdg1/RoHU9Co945TfSu
+Vu3nY3K7GQsHp8juCm1wngL84c334uzANATNKDQvYZFy/pzphYP/jk8SMu7ygYPD
+/jsbTG+tczu1/LwuwiAFxY7xg30Wg7LG80omwbLv+ohrQjhhKFyX//////////8C
+AQIEHgIcKNGyhQRxIhVXoyktdymwbN6MgXv85vPax+8eqQ==
+-----END PRIVATE KEY-----

test/fixtures/keys/dh_public.pem

@@ -0,0 +1,14 @@
+-----BEGIN PUBLIC KEY-----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+-----END PUBLIC KEY-----

test/fixtures/keys/dherror.pem

@@ -0,0 +1,5 @@
+-----BEGIN DH PARAMETERS-----
+AAAAAAAAAA
+AAAAAAAAAA
+AAAAAAAAAA
+-----END DH PARAMETERS-----

test/fixtures/keys/dsa1025.pem

@@ -0,0 +1,9 @@
+-----BEGIN DSA PARAMETERS-----
+MIIBLgKBiQDp3xGIsNcKZWSpur2Ab2f5rirhu5AsYGLI/XZvzueoO4kLPp3szKHX
+abBObdxU07kRFkfpV9lftdXT3a6E/Wxb+w2d7g0F7pWTdwpmmofcRtwgbynmJKvq
+Wt/OwfVFsdUvvpVci9AxY/5rdM/K54Srp6iSpfteBYKGqCpPnswikND0GxKM1Mbz
+AhUAqAPKCZ4hxromirUu33tn3Nhsq20CgYgf0tH2nwzWlPLoN4OJvC5dVLPvMRyJ
+TQekW8tR0oY6PeshmZOaoI0L3e/M4KeZ/4qiY7IRNksP2YGJxjfS6W+h+MNjPO5r
+0aYYFYCPQ8JbhBO7l0hdXmkTY3FcdyRHeh2gwe3bBX6Auev2MGgL616Cgd/KH8PA
+X9EHmrNPcQOWHem4KcfJXqou
+-----END DSA PARAMETERS-----

test/fixtures/keys/dsa_params.pem

@@ -0,0 +1,14 @@
+-----BEGIN DSA PARAMETERS-----
+MIICLQKCAQEAoSw3Ghf02sMSmd5k2rvSqf6eJPFO7fHDRyvDDbifjO6/BKSIkXM4
+3qyCqddC04arKg7wc1QDEQ8gb13pCmnC0RBiljE6ke4yK46Q5JjiEKH9U1eCbtTr
+hcGrLDgwbqvRM06EN6IfAL3OBF6YzS9wn3/EfSwW2Z8gAIkjZrTjEUTV+/gEAdfE
+gd/WAZxcc9zYKOwPy0/LjjldQw5fsPlIEkS1yJFlWMokSsZVYlJLR06h1S4kQoE3
+BqELirH/FQfJ36RMRFsaKZ6nQYS66Qc8rybQw2VlOJsqiRoTSDwREPz6j9oLYh1E
+e86j5Xt9jbiBrK33UbkTr/jBtO0J2PR0+wIhAIXIexS5LQJPSoi96k6OU4yrLLmA
+IY8gS9mdYTdbpwcdAoIBAQCCN3gTjFiPgBQ/bj/Edp9w90SA+dQ/VnnYDTMcz+Mi
+/8sgtlQ3O9CCFb0327YnOLwvxsmSadT9XrIq1/5jGD2VtjFDVlridjYASrjezR2k
+dr781G+bxtVNQuIOKZl9xqruCmHUSSRL/vuCR6pKsA81ZPfpdcLh3RYYxDIoTK6t
+VX4GrX5bcxGDIUCQiTaqKv9Nzpm1liBLRm6LHczBsFk2OVrRyMsT3gh0J6DSUw+d
+w/Vru1J6glkrr0CxBWoJ65btcqtFyQV/76btor9Qgc/z9suYBoJZ3Ua0yAfv3J2E
+rOs1CAbh4LWNULA9eJObY2R4sAV7Q8wOMT5jmjKo4unp
+-----END DSA PARAMETERS-----

test/fixtures/keys/dsa_private.pem

@@ -0,0 +1,20 @@
+-----BEGIN DSA PRIVATE KEY-----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+-----END DSA PRIVATE KEY-----

test/fixtures/keys/dsa_private_1025.pem

@@ -0,0 +1,12 @@
+-----BEGIN DSA PRIVATE KEY-----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+-----END DSA PRIVATE KEY-----

test/fixtures/keys/dsa_private_encrypted.pem

@@ -0,0 +1,23 @@
+-----BEGIN DSA PRIVATE KEY-----
+Proc-Type: 4,ENCRYPTED
+DEK-Info: AES-256-CBC,FABA263DD471F214EF3E02699B837C20
+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-----END DSA PRIVATE KEY-----

test/fixtures/keys/dsa_private_encrypted_1025.pem

@@ -0,0 +1,12 @@
+-----BEGIN ENCRYPTED PRIVATE KEY-----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+-----END ENCRYPTED PRIVATE KEY-----

test/fixtures/keys/dsa_private_pkcs8.pem

@@ -0,0 +1,15 @@
+-----BEGIN PRIVATE KEY-----
+MIICZQIBADCCAjoGByqGSM44BAEwggItAoIBAQChLDcaF/TawxKZ3mTau9Kp/p4k
+8U7t8cNHK8MNuJ+M7r8EpIiRczjerIKp10LThqsqDvBzVAMRDyBvXekKacLREGKW
+MTqR7jIrjpDkmOIQof1TV4Ju1OuFwassODBuq9EzToQ3oh8Avc4EXpjNL3Cff8R9
+LBbZnyAAiSNmtOMRRNX7+AQB18SB39YBnFxz3Ngo7A/LT8uOOV1DDl+w+UgSRLXI
+kWVYyiRKxlViUktHTqHVLiRCgTcGoQuKsf8VB8nfpExEWxopnqdBhLrpBzyvJtDD
+ZWU4myqJGhNIPBEQ/PqP2gtiHUR7zqPle32NuIGsrfdRuROv+MG07QnY9HT7AiEA
+hch7FLktAk9KiL3qTo5TjKssuYAhjyBL2Z1hN1unBx0CggEBAII3eBOMWI+AFD9u
+P8R2n3D3RID51D9WedgNMxzP4yL/yyC2VDc70IIVvTfbtic4vC/GyZJp1P1esirX
+/mMYPZW2MUNWWuJ2NgBKuN7NHaR2vvzUb5vG1U1C4g4pmX3Gqu4KYdRJJEv++4JH
+qkqwDzVk9+l1wuHdFhjEMihMrq1VfgatfltzEYMhQJCJNqoq/03OmbWWIEtGbosd
+zMGwWTY5WtHIyxPeCHQnoNJTD53D9Wu7UnqCWSuvQLEFagnrlu1yq0XJBX/vpu2i
+v1CBz/P2y5gGglndRrTIB+/cnYSs6zUIBuHgtY1QsD14k5tjZHiwBXtDzA4xPmOa
+Mqji6ekEIgIgNBV+HuDLNzl1J5rbEwC5OWDIjBd41KeKUQ4RxSgYLGE=
+-----END PRIVATE KEY-----

test/fixtures/keys/dsa_public.pem

@@ -0,0 +1,20 @@
+-----BEGIN PUBLIC KEY-----
+MIIDSDCCAjoGByqGSM44BAEwggItAoIBAQChLDcaF/TawxKZ3mTau9Kp/p4k8U7t
+8cNHK8MNuJ+M7r8EpIiRczjerIKp10LThqsqDvBzVAMRDyBvXekKacLREGKWMTqR
+7jIrjpDkmOIQof1TV4Ju1OuFwassODBuq9EzToQ3oh8Avc4EXpjNL3Cff8R9LBbZ
+nyAAiSNmtOMRRNX7+AQB18SB39YBnFxz3Ngo7A/LT8uOOV1DDl+w+UgSRLXIkWVY
+yiRKxlViUktHTqHVLiRCgTcGoQuKsf8VB8nfpExEWxopnqdBhLrpBzyvJtDDZWU4
+myqJGhNIPBEQ/PqP2gtiHUR7zqPle32NuIGsrfdRuROv+MG07QnY9HT7AiEAhch7
+FLktAk9KiL3qTo5TjKssuYAhjyBL2Z1hN1unBx0CggEBAII3eBOMWI+AFD9uP8R2
+n3D3RID51D9WedgNMxzP4yL/yyC2VDc70IIVvTfbtic4vC/GyZJp1P1esirX/mMY
+PZW2MUNWWuJ2NgBKuN7NHaR2vvzUb5vG1U1C4g4pmX3Gqu4KYdRJJEv++4JHqkqw
+DzVk9+l1wuHdFhjEMihMrq1VfgatfltzEYMhQJCJNqoq/03OmbWWIEtGbosdzMGw
+WTY5WtHIyxPeCHQnoNJTD53D9Wu7UnqCWSuvQLEFagnrlu1yq0XJBX/vpu2iv1CB
+z/P2y5gGglndRrTIB+/cnYSs6zUIBuHgtY1QsD14k5tjZHiwBXtDzA4xPmOaMqji
+6ekDggEGAAKCAQEAhNZvg1G/S0+fLul1fy9aeivU9pnOowJsw+dXz4lMLEaL/bAx
+iZkp0I0Oabd4VafIp1XzZIajiNa6XSpseVtNHz7ulQoj7sYprh0jR8yaQgFVKyB/
+GGrEvgLqwjsBjHbzgyxence8kTHcW4rM6wa8vCdE3b6hJR2dWJkA8KBx+0eKVHd9
+Y7JOIJxOqZKi4FsFQMtC11xrINiX5w73UGPHyB5Lnsy3YTsjvaUZV0mL+Hy3TGko
+x8hHMK9oZ5ubZuUbAcDPrtLA3MgalI8KDfDU7iy2rHyc85o3h1g3ERhW8yrf8ZVJ
+EO6X/sXXpZyzrLbjwxoJQdVPOURIceK0BioO5w==
+-----END PUBLIC KEY-----

test/fixtures/keys/dsa_public_1025.pem

@@ -0,0 +1,12 @@
+-----BEGIN PUBLIC KEY-----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+-----END PUBLIC KEY-----