diff --git a/pkg/acceptance/localcluster/cluster.go b/pkg/acceptance/localcluster/cluster.go index 4d6153b5442a..2cc8f1c0cf6c 100644 --- a/pkg/acceptance/localcluster/cluster.go +++ b/pkg/acceptance/localcluster/cluster.go @@ -272,6 +272,7 @@ func (c *Cluster) makeNode(ctx context.Context, nodeIdx int, cfg NodeConfig) (*N Insecure: true, } rpcCtx := rpc.NewContext(rpc.ContextOptions{ + TenantID: roachpb.SystemTenantID, AmbientCtx: log.AmbientContext{Tracer: tracing.NewTracer()}, Config: baseCtx, Clock: hlc.NewClock(hlc.UnixNano, 0), diff --git a/pkg/base/test_server_args.go b/pkg/base/test_server_args.go index 7564e120a8f3..4ca768dfc617 100644 --- a/pkg/base/test_server_args.go +++ b/pkg/base/test_server_args.go @@ -48,8 +48,10 @@ type TestServerArgs struct { Addr string // SQLAddr (if nonempty) is the SQL address to use for the test server. SQLAddr string - // TenantAddr (if nonempty) is the tenant KV address to use for the test server. - TenantAddr string + // TenantAddr is the tenant KV address to use for the test server. If this + // is nil, the tenant server will be set up using a random port. If this + // is the empty string, no tenant server will be set up. + TenantAddr *string // HTTPAddr (if nonempty) is the HTTP address to use for the test server. HTTPAddr string // DisableTLSForHTTP if set, disables TLS for the HTTP interface. diff --git a/pkg/ccl/backupccl/backup_test.go b/pkg/ccl/backupccl/backup_test.go index cf2bf13ab5f6..5f3e01dedd0c 100644 --- a/pkg/ccl/backupccl/backup_test.go +++ b/pkg/ccl/backupccl/backup_test.go @@ -4613,6 +4613,9 @@ func TestBackupRestoreTenant(t *testing.T) { defer cleanupFn() srv := tc.Server(0) + // NB: tenant certs for 10, 11, 20 are embedded. See: + _ = security.EmbeddedTenantIDs() + // Setup a few tenants, each with a different table. conn10 := serverutils.StartTenant(t, srv, base.TestTenantArgs{TenantID: roachpb.MakeTenantID(10), TenantInfo: []byte("ten")}) defer conn10.Close() diff --git a/pkg/ccl/serverccl/server_sql_test.go b/pkg/ccl/serverccl/server_sql_test.go index 0048e31ffd00..4e07fc073016 100644 --- a/pkg/ccl/serverccl/server_sql_test.go +++ b/pkg/ccl/serverccl/server_sql_test.go @@ -15,6 +15,7 @@ import ( "github.com/cockroachdb/cockroach/pkg/base" "github.com/cockroachdb/cockroach/pkg/roachpb" + "github.com/cockroachdb/cockroach/pkg/security" "github.com/cockroachdb/cockroach/pkg/sql/pgwire/pgcode" "github.com/cockroachdb/cockroach/pkg/testutils/serverutils" "github.com/cockroachdb/cockroach/pkg/testutils/sqlutils" @@ -42,7 +43,11 @@ func TestSQLServer(t *testing.T) { tc := serverutils.StartTestCluster(t, 3, base.TestClusterArgs{}) defer tc.Stopper().Stop(ctx) - db := serverutils.StartTenant(t, tc.Server(0), base.TestTenantArgs{TenantID: roachpb.MakeTenantID(10)}) + db := serverutils.StartTenant( + t, + tc.Server(0), + base.TestTenantArgs{TenantID: roachpb.MakeTenantID(security.EmbeddedTenantIDs()[0])}, + ) defer db.Close() r := sqlutils.MakeSQLRunner(db) r.QueryStr(t, `SELECT 1`) diff --git a/pkg/cli/cli_test.go b/pkg/cli/cli_test.go index 2a9b94be3d1e..230763eddbc7 100644 --- a/pkg/cli/cli_test.go +++ b/pkg/cli/cli_test.go @@ -99,6 +99,11 @@ func createTestCerts(certsDir string) (cleanup func() error) { filepath.Join(security.EmbeddedCertsDir, security.EmbeddedNodeKey), filepath.Join(security.EmbeddedCertsDir, security.EmbeddedRootCert), filepath.Join(security.EmbeddedCertsDir, security.EmbeddedRootKey), + + filepath.Join(security.EmbeddedCertsDir, security.EmbeddedTenantServerCACert), + filepath.Join(security.EmbeddedCertsDir, security.EmbeddedTenantServerCert), + filepath.Join(security.EmbeddedCertsDir, security.EmbeddedTenantServerKey), + filepath.Join(security.EmbeddedCertsDir, security.EmbeddedTenantClientCACert), } for _, a := range assets { diff --git a/pkg/cli/client_url.go b/pkg/cli/client_url.go index 47ad4fe8afe9..62da78ac3ce9 100644 --- a/pkg/cli/client_url.go +++ b/pkg/cli/client_url.go @@ -19,6 +19,7 @@ import ( "strings" "github.com/cockroachdb/cockroach/pkg/cli/cliflags" + "github.com/cockroachdb/cockroach/pkg/roachpb" "github.com/cockroachdb/cockroach/pkg/rpc" "github.com/cockroachdb/cockroach/pkg/security" "github.com/cockroachdb/errors" @@ -351,7 +352,7 @@ func (cliCtx *cliContext) makeClientConnURL() (url.URL, error) { if userName == "" { userName = security.RootUser } - sCtx := rpc.MakeSecurityContext(cliCtx.Config) + sCtx := rpc.MakeSecurityContext(cliCtx.Config, roachpb.SystemTenantID) if err := sCtx.LoadSecurityOptions( opts, userName, ); err != nil { diff --git a/pkg/cli/demo_cluster.go b/pkg/cli/demo_cluster.go index 0e2511002999..4df88b6f0398 100644 --- a/pkg/cli/demo_cluster.go +++ b/pkg/cli/demo_cluster.go @@ -312,6 +312,9 @@ func testServerArgsForTransientCluster( SQLMemoryPoolSize: demoCtx.sqlPoolMemorySize, CacheSize: demoCtx.cacheSize, NoAutoInitializeCluster: true, + // This disables the tenant server. We could enable it but would have to + // generate the suitable certs at the caller who wishes to do so. + TenantAddr: new(string), } if demoCtx.localities != nil { diff --git a/pkg/cli/demo_test.go b/pkg/cli/demo_test.go index faa1379773d2..00ddb2799941 100644 --- a/pkg/cli/demo_test.go +++ b/pkg/cli/demo_test.go @@ -45,6 +45,7 @@ func TestTestServerArgsForTransientCluster(t *testing.T) { SQLMemoryPoolSize: 2 << 10, CacheSize: 1 << 10, NoAutoInitializeCluster: true, + TenantAddr: new(string), }, }, { @@ -59,6 +60,7 @@ func TestTestServerArgsForTransientCluster(t *testing.T) { SQLMemoryPoolSize: 4 << 10, CacheSize: 4 << 10, NoAutoInitializeCluster: true, + TenantAddr: new(string), }, }, } diff --git a/pkg/cli/start.go b/pkg/cli/start.go index cf7c62593f10..6e8b7ee97ec2 100644 --- a/pkg/cli/start.go +++ b/pkg/cli/start.go @@ -31,6 +31,7 @@ import ( "github.com/cockroachdb/cockroach/pkg/build" "github.com/cockroachdb/cockroach/pkg/cli/cliflags" "github.com/cockroachdb/cockroach/pkg/geo/geos" + "github.com/cockroachdb/cockroach/pkg/roachpb" "github.com/cockroachdb/cockroach/pkg/rpc" "github.com/cockroachdb/cockroach/pkg/security" "github.com/cockroachdb/cockroach/pkg/server" @@ -655,7 +656,7 @@ func runStart(cmd *cobra.Command, args []string, disableReplication bool) error // (Re-)compute the client connection URL. We cannot do this // earlier (e.g. above, in the runStart function) because // at this time the address and port have not been resolved yet. - sCtx := rpc.MakeSecurityContext(serverCfg.Config) + sCtx := rpc.MakeSecurityContext(serverCfg.Config, roachpb.SystemTenantID) pgURL, err := sCtx.PGURL(url.User(security.RootUser)) if err != nil { log.Errorf(ctx, "failed computing the URL: %v", err) @@ -828,7 +829,7 @@ If problems persist, please see %s.` // (Re-)compute the client connection URL. We cannot do this // earlier (e.g. above, in the runStart function) because // at this time the address and port have not been resolved yet. - sCtx := rpc.MakeSecurityContext(serverCfg.Config) + sCtx := rpc.MakeSecurityContext(serverCfg.Config, roachpb.SystemTenantID) pgURL, err := sCtx.PGURL(url.User(security.RootUser)) if err != nil { log.Errorf(ctx, "failed computing the URL: %v", err) @@ -1366,6 +1367,7 @@ func getClientGRPCConn( clock := hlc.NewClock(hlc.UnixNano, 0) stopper := stop.NewStopper() rpcContext := rpc.NewContext(rpc.ContextOptions{ + TenantID: roachpb.SystemTenantID, AmbientCtx: log.AmbientContext{Tracer: cfg.Settings.Tracer}, Config: cfg.Config, Clock: clock, diff --git a/pkg/gossip/simulation/network.go b/pkg/gossip/simulation/network.go index 01ebfbc0857d..6ac8e891ea1e 100644 --- a/pkg/gossip/simulation/network.go +++ b/pkg/gossip/simulation/network.go @@ -72,6 +72,7 @@ func NewNetwork( Stopper: stopper, } n.RPCContext = rpc.NewContext(rpc.ContextOptions{ + TenantID: roachpb.SystemTenantID, AmbientCtx: log.AmbientContext{Tracer: tracing.NewTracer()}, Config: &base.Config{Insecure: true}, Clock: hlc.NewClock(hlc.UnixNano, time.Nanosecond), diff --git a/pkg/kv/kvserver/allocator_test.go b/pkg/kv/kvserver/allocator_test.go index 8a21b41c551d..7b5b40aa316a 100644 --- a/pkg/kv/kvserver/allocator_test.go +++ b/pkg/kv/kvserver/allocator_test.go @@ -5611,6 +5611,7 @@ func TestAllocatorFullDisks(t *testing.T) { // Model a set of stores in a cluster doing rebalancing, with ranges being // randomly added occasionally. rpcContext := rpc.NewContext(rpc.ContextOptions{ + TenantID: roachpb.SystemTenantID, AmbientCtx: log.AmbientContext{Tracer: st.Tracer}, Config: &base.Config{Insecure: true}, Clock: clock, @@ -5753,6 +5754,7 @@ func Example_rebalancing() { // Model a set of stores in a cluster, // adding / rebalancing ranges of random sizes. rpcContext := rpc.NewContext(rpc.ContextOptions{ + TenantID: roachpb.SystemTenantID, AmbientCtx: log.AmbientContext{Tracer: st.Tracer}, Config: &base.Config{Insecure: true}, Clock: clock, diff --git a/pkg/kv/kvserver/client_test.go b/pkg/kv/kvserver/client_test.go index 9a37dabbcc12..089df35cd692 100644 --- a/pkg/kv/kvserver/client_test.go +++ b/pkg/kv/kvserver/client_test.go @@ -129,6 +129,7 @@ func createTestStoreWithOpts( storeCfg.AmbientCtx = ac rpcContext := rpc.NewContext(rpc.ContextOptions{ + TenantID: roachpb.SystemTenantID, AmbientCtx: ac, Config: &base.Config{Insecure: true}, Clock: storeCfg.Clock, @@ -373,6 +374,7 @@ func (m *multiTestContext) Start(t testing.TB, numStores int) { st := cluster.MakeTestingClusterSettings() if m.rpcContext == nil { m.rpcContext = rpc.NewContext(rpc.ContextOptions{ + TenantID: roachpb.SystemTenantID, AmbientCtx: log.AmbientContext{Tracer: st.Tracer}, Config: &base.Config{Insecure: true}, Clock: m.clock(), diff --git a/pkg/kv/kvserver/queue_test.go b/pkg/kv/kvserver/queue_test.go index 326260267bd2..51c7dc9966ce 100644 --- a/pkg/kv/kvserver/queue_test.go +++ b/pkg/kv/kvserver/queue_test.go @@ -579,6 +579,7 @@ func TestNeedsSystemConfig(t *testing.T) { // Use a gossip instance that won't have the system config available in it. // bqNeedsSysCfg will not add the replica or process it without a system config. rpcContext := rpc.NewContext(rpc.ContextOptions{ + TenantID: roachpb.SystemTenantID, AmbientCtx: tc.store.cfg.AmbientCtx, Config: &base.Config{Insecure: true}, Clock: tc.store.cfg.Clock, diff --git a/pkg/kv/kvserver/raft_transport_test.go b/pkg/kv/kvserver/raft_transport_test.go index 0cefb07785cd..c790e3cc8fef 100644 --- a/pkg/kv/kvserver/raft_transport_test.go +++ b/pkg/kv/kvserver/raft_transport_test.go @@ -111,6 +111,7 @@ func newRaftTransportTestContext(t testing.TB) *raftTransportTestContext { transports: map[roachpb.NodeID]*kvserver.RaftTransport{}, } rttc.nodeRPCContext = rpc.NewContext(rpc.ContextOptions{ + TenantID: roachpb.SystemTenantID, AmbientCtx: log.AmbientContext{Tracer: tracing.NewTracer()}, Config: testutils.NewNodeTestBaseContext(), Clock: hlc.NewClock(hlc.UnixNano, time.Nanosecond), diff --git a/pkg/kv/kvserver/raft_transport_unit_test.go b/pkg/kv/kvserver/raft_transport_unit_test.go index 66f4443eb05b..7895ed198f34 100644 --- a/pkg/kv/kvserver/raft_transport_unit_test.go +++ b/pkg/kv/kvserver/raft_transport_unit_test.go @@ -44,6 +44,7 @@ func TestRaftTransportStartNewQueue(t *testing.T) { st := cluster.MakeTestingClusterSettings() rpcC := rpc.NewContext(rpc.ContextOptions{ + TenantID: roachpb.SystemTenantID, Config: &base.Config{Insecure: true}, Clock: hlc.NewClock(hlc.UnixNano, 500*time.Millisecond), Stopper: stopper, diff --git a/pkg/kv/kvserver/replica_test.go b/pkg/kv/kvserver/replica_test.go index 7c1cb59e771c..d4582205e695 100644 --- a/pkg/kv/kvserver/replica_test.go +++ b/pkg/kv/kvserver/replica_test.go @@ -217,6 +217,7 @@ func (tc *testContext) StartWithStoreConfigAndVersion( config.TestingSetupZoneConfigHook(stopper) if tc.gossip == nil { rpcContext := rpc.NewContext(rpc.ContextOptions{ + TenantID: roachpb.SystemTenantID, AmbientCtx: cfg.AmbientCtx, Config: &base.Config{Insecure: true}, Clock: cfg.Clock, diff --git a/pkg/kv/kvserver/store_pool_test.go b/pkg/kv/kvserver/store_pool_test.go index 5bbbe381efac..adaf281e18c0 100644 --- a/pkg/kv/kvserver/store_pool_test.go +++ b/pkg/kv/kvserver/store_pool_test.go @@ -101,6 +101,7 @@ func createTestStorePool( clock := hlc.NewClock(mc.UnixNano, time.Nanosecond) st := cluster.MakeTestingClusterSettings() rpcContext := rpc.NewContext(rpc.ContextOptions{ + TenantID: roachpb.SystemTenantID, AmbientCtx: log.AmbientContext{Tracer: st.Tracer}, Config: &base.Config{Insecure: true}, Clock: clock, diff --git a/pkg/kv/kvserver/store_test.go b/pkg/kv/kvserver/store_test.go index 7cf910ab73f5..34bad3371796 100644 --- a/pkg/kv/kvserver/store_test.go +++ b/pkg/kv/kvserver/store_test.go @@ -207,6 +207,7 @@ func createTestStoreWithoutStart( config.TestingSetupZoneConfigHook(stopper) rpcContext := rpc.NewContext(rpc.ContextOptions{ + TenantID: roachpb.SystemTenantID, AmbientCtx: cfg.AmbientCtx, Config: &base.Config{Insecure: true}, Clock: cfg.Clock, diff --git a/pkg/rpc/context.go b/pkg/rpc/context.go index 024ef8ccf1c8..8e0879053ceb 100644 --- a/pkg/rpc/context.go +++ b/pkg/rpc/context.go @@ -13,6 +13,7 @@ package rpc import ( "bytes" "context" + "crypto/tls" "encoding/binary" "fmt" "io" @@ -141,19 +142,46 @@ func requireSuperUser(ctx context.Context) error { return nil } -// NewServer is a thin wrapper around grpc.NewServer that registers a heartbeat -// service. -func NewServer(ctx *Context) *grpc.Server { - return NewServerWithInterceptor(ctx, nil) +type serverOpts struct { + interceptor func(fullMethod string) error + tenant bool } -// NewServerWithInterceptor is like NewServer, but accepts an additional -// interceptor which is called before streaming and unary RPCs and may inject an -// error. -func NewServerWithInterceptor( - ctx *Context, interceptor func(fullMethod string) error, -) *grpc.Server { - opts := []grpc.ServerOption{ +// ServerOption is a configuration option passed to NewServer. +type ServerOption func(*serverOpts) + +// ForTenant is an option to NewServer that results in the server being set +// up to validate incoming tenants. Without this option, the created server will +// use the KV-internal node certificates. With it, it uses tenant server +// certificates. +func ForTenant(opts *serverOpts) { + opts.tenant = true +} + +var _ ServerOption = ForTenant + +// WithInterceptor adds an additional interceptor. The interceptor is called before +// streaming and unary RPCs and may inject an error. +// +// This option can only be used once (i.e. interceptors can not be chained). +func WithInterceptor(f func(fullMethod string) error) ServerOption { + return func(opts *serverOpts) { + if opts.interceptor != nil { + panic("interceptor can only be set once") + } + opts.interceptor = f + } +} + +// NewServer sets up an RPC server. Depending on the ServerOptions, the Server +// either expects incoming connections from KV nodes, or from tenant SQL +// servers. +func NewServer(ctx *Context, opts ...ServerOption) *grpc.Server { + var o serverOpts + for _, f := range opts { + f(&o) + } + grpcOpts := []grpc.ServerOption{ // The limiting factor for lowering the max message size is the fact // that a single large kv can be sent over the network in one message. // Our maximum kv size is unlimited, so we need this to be very large. @@ -177,11 +205,17 @@ func NewServerWithInterceptor( grpc.StatsHandler(&ctx.stats), } if !ctx.Config.Insecure { - tlsConfig, err := ctx.GetServerTLSConfig() + var tlsConfig *tls.Config + var err error + if !o.tenant { + tlsConfig, err = ctx.GetServerTLSConfig() + } else { + tlsConfig, err = ctx.GetTenantServerTLSConfig() + } if err != nil { panic(err) } - opts = append(opts, grpc.Creds(credentials.NewTLS(tlsConfig))) + grpcOpts = append(grpcOpts, grpc.Creds(credentials.NewTLS(tlsConfig))) } // These interceptors will be called in the order in which they appear, i.e. @@ -190,10 +224,22 @@ func NewServerWithInterceptor( var streamInterceptor []grpc.StreamServerInterceptor if !ctx.Config.Insecure { + var authHook func(ctx context.Context) error + if !o.tenant { + authHook = requireSuperUser + } else { + authHook = func(ctx context.Context) error { + // TODO(tbg): pull the tenant ID from the incoming + // certificate and validate that the request is + // admissible. + return nil + } + } + unaryInterceptor = append(unaryInterceptor, func( ctx context.Context, req interface{}, info *grpc.UnaryServerInfo, handler grpc.UnaryHandler, ) (interface{}, error) { - if err := requireSuperUser(ctx); err != nil { + if err := authHook(ctx); err != nil { return nil, err } return handler(ctx, req) @@ -201,18 +247,18 @@ func NewServerWithInterceptor( streamInterceptor = append(streamInterceptor, func( srv interface{}, stream grpc.ServerStream, info *grpc.StreamServerInfo, handler grpc.StreamHandler, ) error { - if err := requireSuperUser(stream.Context()); err != nil { + if err := authHook(stream.Context()); err != nil { return err } return handler(srv, stream) }) } - if interceptor != nil { + if o.interceptor != nil { unaryInterceptor = append(unaryInterceptor, func( ctx context.Context, req interface{}, info *grpc.UnaryServerInfo, handler grpc.UnaryHandler, ) (interface{}, error) { - if err := interceptor(info.FullMethod); err != nil { + if err := o.interceptor(info.FullMethod); err != nil { return nil, err } return handler(ctx, req) @@ -221,7 +267,7 @@ func NewServerWithInterceptor( streamInterceptor = append(streamInterceptor, func( srv interface{}, stream grpc.ServerStream, info *grpc.StreamServerInfo, handler grpc.StreamHandler, ) error { - if err := interceptor(info.FullMethod); err != nil { + if err := o.interceptor(info.FullMethod); err != nil { return err } return handler(srv, stream) @@ -250,10 +296,10 @@ func NewServerWithInterceptor( // https://github.com/grpc-ecosystem/go-grpc-middleware/tree/master/tracing/opentracing } - opts = append(opts, grpc.ChainUnaryInterceptor(unaryInterceptor...)) - opts = append(opts, grpc.ChainStreamInterceptor(streamInterceptor...)) + grpcOpts = append(grpcOpts, grpc.ChainUnaryInterceptor(unaryInterceptor...)) + grpcOpts = append(grpcOpts, grpc.ChainStreamInterceptor(streamInterceptor...)) - s := grpc.NewServer(opts...) + s := grpc.NewServer(grpcOpts...) RegisterHeartbeatServer(s, &HeartbeatService{ clock: ctx.Clock, remoteClockMonitor: ctx.RemoteClocks, @@ -398,8 +444,9 @@ type connKey struct { } // ContextOptions are passed to NewContext to set up a new *Context. -// All pointer fields are required. +// All pointer fields and TenantID are required. type ContextOptions struct { + TenantID roachpb.TenantID AmbientCtx log.AmbientContext Config *base.Config Clock *hlc.Clock @@ -409,6 +456,9 @@ type ContextOptions struct { } func (c ContextOptions) validate() error { + if c.TenantID == (roachpb.TenantID{}) { + return errors.New("must specify TenantID") + } if c.Config == nil { return errors.New("Config must be set") } @@ -434,7 +484,7 @@ func NewContext(opts ContextOptions) *Context { ctx := &Context{ ContextOptions: opts, - SecurityContext: MakeSecurityContext(opts.Config), + SecurityContext: MakeSecurityContext(opts.Config, opts.TenantID), breakerClock: breakerClock{ clock: opts.Clock, }, @@ -712,7 +762,14 @@ func (ctx *Context) grpcDialOptions( if ctx.Config.Insecure { dialOpts = append(dialOpts, grpc.WithInsecure()) } else { - tlsConfig, err := ctx.GetClientTLSConfig() + var err error + var tlsConfig *tls.Config + if ctx.tenID == roachpb.SystemTenantID { + tlsConfig, err = ctx.GetClientTLSConfig() + } else { + tlsConfig, err = ctx.GetTenantClientTLSConfig() + } + if err != nil { return nil, err } diff --git a/pkg/rpc/context_test.go b/pkg/rpc/context_test.go index 562b04f20141..f90d68cb81da 100644 --- a/pkg/rpc/context_test.go +++ b/pkg/rpc/context_test.go @@ -94,6 +94,7 @@ func newTestContextWithKnobs( clock *hlc.Clock, stopper *stop.Stopper, knobs ContextTestingKnobs, ) *Context { return NewContext(ContextOptions{ + TenantID: roachpb.SystemTenantID, AmbientCtx: log.AmbientContext{Tracer: tracing.NewTracer()}, Config: testutils.NewNodeTestBaseContext(), Clock: clock, diff --git a/pkg/rpc/context_testutils.go b/pkg/rpc/context_testutils.go index 590fb53d916f..fdc063cb5bd1 100644 --- a/pkg/rpc/context_testutils.go +++ b/pkg/rpc/context_testutils.go @@ -12,6 +12,7 @@ package rpc import ( "github.com/cockroachdb/cockroach/pkg/base" + "github.com/cockroachdb/cockroach/pkg/roachpb" "github.com/cockroachdb/cockroach/pkg/settings/cluster" "github.com/cockroachdb/cockroach/pkg/util/hlc" "github.com/cockroachdb/cockroach/pkg/util/log" @@ -71,6 +72,7 @@ func NewInsecureTestingContextWithKnobs( clock *hlc.Clock, stopper *stop.Stopper, knobs ContextTestingKnobs, ) *Context { return NewContext(ContextOptions{ + TenantID: roachpb.SystemTenantID, AmbientCtx: log.AmbientContext{Tracer: tracing.NewTracer()}, Config: &base.Config{Insecure: true}, Clock: clock, diff --git a/pkg/rpc/nodedialer/nodedialer_test.go b/pkg/rpc/nodedialer/nodedialer_test.go index a4305f3cfc5d..8b1c5e4bc6fe 100644 --- a/pkg/rpc/nodedialer/nodedialer_test.go +++ b/pkg/rpc/nodedialer/nodedialer_test.go @@ -286,6 +286,7 @@ func newTestContext(clock *hlc.Clock, stopper *stop.Stopper) *rpc.Context { cfg.Insecure = true cfg.RPCHeartbeatInterval = 10 * time.Millisecond rctx := rpc.NewContext(rpc.ContextOptions{ + TenantID: roachpb.SystemTenantID, AmbientCtx: log.AmbientContext{Tracer: tracing.NewTracer()}, Config: cfg, Clock: clock, diff --git a/pkg/rpc/tls.go b/pkg/rpc/tls.go index 53862988b6b4..6b1fd03e405d 100644 --- a/pkg/rpc/tls.go +++ b/pkg/rpc/tls.go @@ -23,6 +23,7 @@ import ( "time" "github.com/cockroachdb/cockroach/pkg/base" + "github.com/cockroachdb/cockroach/pkg/roachpb" "github.com/cockroachdb/cockroach/pkg/security" "github.com/cockroachdb/cockroach/pkg/util/log" "github.com/cockroachdb/errors" @@ -55,6 +56,7 @@ func wrapError(err error) error { type SecurityContext struct { security.CertsLocator config *base.Config + tenID roachpb.TenantID lazy struct { // The certificate manager. Must be accessed through GetCertificateManager. certificateManager lazyCertificateManager @@ -66,10 +68,11 @@ type SecurityContext struct { // MakeSecurityContext makes a SecurityContext. // // TODO(tbg): don't take a whole Config. This can be trimmed down significantly. -func MakeSecurityContext(cfg *base.Config) SecurityContext { +func MakeSecurityContext(cfg *base.Config, tenID roachpb.TenantID) SecurityContext { return SecurityContext{ CertsLocator: security.MakeCertsLocator(cfg.SSLCertsDir), config: cfg, + tenID: tenID, } } @@ -78,8 +81,13 @@ func MakeSecurityContext(cfg *base.Config) SecurityContext { // fails eagerly. func (ctx *SecurityContext) GetCertificateManager() (*security.CertificateManager, error) { ctx.lazy.certificateManager.Do(func() { + var opts []security.Option + if ctx.tenID != roachpb.SystemTenantID { + opts = append(opts, security.ForTenant(ctx.tenID.String())) + } ctx.lazy.certificateManager.cm, ctx.lazy.certificateManager.err = - security.NewCertificateManager(ctx.config.SSLCertsDir) + security.NewCertificateManager(ctx.config.SSLCertsDir, opts...) + if ctx.lazy.certificateManager.err == nil && !ctx.config.Insecure { infos, err := ctx.lazy.certificateManager.cm.ListCertificates() if err != nil { @@ -116,6 +124,27 @@ func (ctx *SecurityContext) GetServerTLSConfig() (*tls.Config, error) { return tlsCfg, nil } +// GetTenantServerTLSConfig returns the tenant server TLS config, initializing +// it if needed. If Insecure is true, return a nil config, otherwise asks the +// certificate manager for the tenant server TLS config. +func (ctx *SecurityContext) GetTenantServerTLSConfig() (*tls.Config, error) { + // Early out. + if ctx.config.Insecure { + return nil, nil + } + + cm, err := ctx.GetCertificateManager() + if err != nil { + return nil, wrapError(err) + } + + tlsCfg, err := cm.GetTenantServerTLSConfig() + if err != nil { + return nil, wrapError(err) + } + return tlsCfg, nil +} + // GetClientTLSConfig returns the client TLS config, initializing it if needed. // If Insecure is true, return a nil config, otherwise ask the certificate // manager for a TLS config using certs for the config.User. @@ -138,6 +167,30 @@ func (ctx *SecurityContext) GetClientTLSConfig() (*tls.Config, error) { return tlsCfg, nil } +// GetTenantClientTLSConfig returns the client TLS config for the tenant, provided +// the SecurityContext operates on behalf of a secondary tenant (i.e. not the +// system tenant). +// +// If Insecure is true, return a nil config, otherwise retrieves the client +// certificate for the configured tenant from the cert manager. +func (ctx *SecurityContext) GetTenantClientTLSConfig() (*tls.Config, error) { + // Early out. + if ctx.config.Insecure { + return nil, nil + } + + cm, err := ctx.GetCertificateManager() + if err != nil { + return nil, wrapError(err) + } + + tlsCfg, err := cm.GetTenantClientTLSConfig() + if err != nil { + return nil, wrapError(err) + } + return tlsCfg, nil +} + // getUIClientTLSConfig returns the client TLS config for Admin UI clients, initializing it if needed. // If Insecure is true, return a nil config, otherwise ask the certificate // manager for a TLS config configured to talk to the Admin UI. diff --git a/pkg/rpc/tls_test.go b/pkg/rpc/tls_test.go index fe25ec086dd9..dc816692d734 100644 --- a/pkg/rpc/tls_test.go +++ b/pkg/rpc/tls_test.go @@ -15,6 +15,7 @@ import ( "testing" "github.com/cockroachdb/cockroach/pkg/base" + "github.com/cockroachdb/cockroach/pkg/roachpb" "github.com/cockroachdb/cockroach/pkg/security" "github.com/cockroachdb/cockroach/pkg/settings/cluster" "github.com/cockroachdb/cockroach/pkg/testutils" @@ -61,6 +62,7 @@ func TestClientSSLSettings(t *testing.T) { stopper := stop.NewStopper() defer stopper.Stop(context.Background()) rpcContext := NewContext(ContextOptions{ + TenantID: roachpb.SystemTenantID, Clock: hlc.NewClock(hlc.UnixNano, 1), Stopper: stopper, Settings: cluster.MakeTestingClusterSettings(), @@ -117,6 +119,7 @@ func TestServerSSLSettings(t *testing.T) { stopper := stop.NewStopper() defer stopper.Stop(context.Background()) rpcContext := NewContext(ContextOptions{ + TenantID: roachpb.SystemTenantID, Clock: hlc.NewClock(hlc.UnixNano, 1), Stopper: stopper, Settings: cluster.MakeTestingClusterSettings(), diff --git a/pkg/security/certificate_loader_test.go b/pkg/security/certificate_loader_test.go index f2026330a06a..779357397ac6 100644 --- a/pkg/security/certificate_loader_test.go +++ b/pkg/security/certificate_loader_test.go @@ -108,7 +108,7 @@ func TestLoadEmbeddedCerts(t *testing.T) { // Check that all non-CA pairs include a key. for _, c := range certs { - if c.FileUsage == security.CAPem { + if c.FileUsage == security.CAPem || c.FileUsage == security.TenantServerCAPem || c.FileUsage == security.TenantClientCAPem { if len(c.KeyFilename) != 0 { t.Errorf("CA key was loaded for CertInfo %+v", c) } diff --git a/pkg/security/certificate_manager.go b/pkg/security/certificate_manager.go index c890a2881ca0..292b4dc5762f 100644 --- a/pkg/security/certificate_manager.go +++ b/pkg/security/certificate_manager.go @@ -165,7 +165,7 @@ type CertificateMetrics struct { TenantClientExpiration *metric.Gauge } -func makeCertificateManager(certsDir string, opts ...func(*cmOptions)) *CertificateManager { +func makeCertificateManager(certsDir string, opts ...Option) *CertificateManager { var o cmOptions for _, fn := range opts { fn(&o) @@ -195,17 +195,20 @@ type cmOptions struct { tenantIdentifier string } +// Option is an option to NewCertificateManager. +type Option func(*cmOptions) + // ForTenant is an option to NewCertificateManager which ties the manager to // the provided tenant. Without this option, tenant client certs are not // available. -func ForTenant(tenantIdentifier string) func(*cmOptions) { +func ForTenant(tenantIdentifier string) Option { return func(opts *cmOptions) { opts.tenantIdentifier = tenantIdentifier } } // NewCertificateManager creates a new certificate manager. -func NewCertificateManager(certsDir string, opts ...func(*cmOptions)) (*CertificateManager, error) { +func NewCertificateManager(certsDir string, opts ...Option) (*CertificateManager, error) { cm := makeCertificateManager(certsDir, opts...) return cm, cm.LoadCertificates() } @@ -214,9 +217,7 @@ func NewCertificateManager(certsDir string, opts ...func(*cmOptions)) (*Certific // The certsDir is created if it does not exist. // This should only be called when generating certificates, the server has // no business creating the certs directory. -func NewCertificateManagerFirstRun( - certsDir string, opts ...func(*cmOptions), -) (*CertificateManager, error) { +func NewCertificateManagerFirstRun(certsDir string, opts ...Option) (*CertificateManager, error) { cm := makeCertificateManager(certsDir, opts...) if err := NewCertificateLoader(cm.certsDir).MaybeCreateCertsDir(); err != nil { return nil, err diff --git a/pkg/security/certs_rotation_test.go b/pkg/security/certs_rotation_test.go index 133735af29cd..93e51065fba6 100644 --- a/pkg/security/certs_rotation_test.go +++ b/pkg/security/certs_rotation_test.go @@ -22,6 +22,7 @@ import ( "testing" "github.com/cockroachdb/cockroach/pkg/base" + "github.com/cockroachdb/cockroach/pkg/roachpb" "github.com/cockroachdb/cockroach/pkg/rpc" "github.com/cockroachdb/cockroach/pkg/security" "github.com/cockroachdb/cockroach/pkg/testutils" @@ -99,7 +100,7 @@ func TestRotateCerts(t *testing.T) { // Test client with the same certs. clientContext := testutils.NewNodeTestBaseContext() clientContext.SSLCertsDir = certsDir - firstSCtx := rpc.MakeSecurityContext(clientContext) + firstSCtx := rpc.MakeSecurityContext(clientContext, roachpb.SystemTenantID) firstClient, err := firstSCtx.GetHTTPClient() if err != nil { t.Fatalf("could not create http client: %v", err) @@ -131,7 +132,7 @@ func TestRotateCerts(t *testing.T) { clientContext = testutils.NewNodeTestBaseContext() clientContext.SSLCertsDir = certsDir - secondSCtx := rpc.MakeSecurityContext(clientContext) + secondSCtx := rpc.MakeSecurityContext(clientContext, roachpb.SystemTenantID) secondClient, err := secondSCtx.GetHTTPClient() if err != nil { t.Fatalf("could not create http client: %v", err) @@ -200,7 +201,7 @@ func TestRotateCerts(t *testing.T) { // This is HTTP and succeeds because we do not ask for or verify client certificates. clientContext = testutils.NewNodeTestBaseContext() clientContext.SSLCertsDir = certsDir - thirdSCtx := rpc.MakeSecurityContext(clientContext) + thirdSCtx := rpc.MakeSecurityContext(clientContext, roachpb.SystemTenantID) thirdClient, err := thirdSCtx.GetHTTPClient() if err != nil { t.Fatalf("could not create http client: %v", err) diff --git a/pkg/security/certs_tenant_test.go b/pkg/security/certs_tenant_test.go index 5430476d2837..3a3c13ff1f39 100644 --- a/pkg/security/certs_tenant_test.go +++ b/pkg/security/certs_tenant_test.go @@ -91,8 +91,8 @@ func testTenantCertificatesInner(t *testing.T, embedded bool) { certsDir, cleanup = makeTenantCerts(t, tenant) defer cleanup() } else { - certsDir = security.EmbeddedTenantCertsDir - tenant = fmt.Sprint(security.EmbeddedTenantID) + certsDir = security.EmbeddedCertsDir + tenant = fmt.Sprint(security.EmbeddedTenantIDs()[0]) } // Now set up the config a server would use. The client will trust it based on @@ -113,6 +113,7 @@ func testTenantCertificatesInner(t *testing.T, embedded bool) { // server (which will validate them using the tenant CA). clientTLSConfig, err := cm.GetTenantClientTLSConfig() require.NoError(t, err) + require.NotNil(t, clientTLSConfig) // Set up a HTTPS server using server TLS config, set up a http client using the // client TLS config, make a request. diff --git a/pkg/security/certs_test.go b/pkg/security/certs_test.go index b81a83a16f50..0eac4da8f6b8 100644 --- a/pkg/security/certs_test.go +++ b/pkg/security/certs_test.go @@ -22,6 +22,7 @@ import ( "time" "github.com/cockroachdb/cockroach/pkg/base" + "github.com/cockroachdb/cockroach/pkg/roachpb" "github.com/cockroachdb/cockroach/pkg/rpc" "github.com/cockroachdb/cockroach/pkg/security" "github.com/cockroachdb/cockroach/pkg/testutils" @@ -246,25 +247,64 @@ func TestGenerateNodeCerts(t *testing.T) { // node.crt: dual-purpose node certificate // client.root.crt: client certificate for the root user. func generateBaseCerts(certsDir string) error { - if err := security.CreateCAPair( - certsDir, filepath.Join(certsDir, security.EmbeddedCAKey), - testKeySize, time.Hour*96, true, true, - ); err != nil { - return errors.Errorf("could not generate CA pair: %v", err) + { + caKey := filepath.Join(certsDir, security.EmbeddedCAKey) + + if err := security.CreateCAPair( + certsDir, caKey, + testKeySize, time.Hour*96, true, true, + ); err != nil { + return err + } + + if err := security.CreateNodePair( + certsDir, caKey, + testKeySize, time.Hour*48, true, []string{"127.0.0.1"}, + ); err != nil { + return err + } + + if err := security.CreateClientPair( + certsDir, caKey, + testKeySize, time.Hour*48, true, security.RootUser, false, + ); err != nil { + return err + } } - if err := security.CreateNodePair( - certsDir, filepath.Join(certsDir, security.EmbeddedCAKey), - testKeySize, time.Hour*48, true, []string{"127.0.0.1"}, - ); err != nil { - return errors.Errorf("could not generate Node pair: %v", err) + { + caKey := filepath.Join(certsDir, security.EmbeddedTenantServerCAKey) + if err := security.CreateTenantServerCAPair( + certsDir, caKey, + testKeySize, time.Hour*96, true, true, + ); err != nil { + return err + } + + if err := security.CreateTenantServerPair(certsDir, caKey, + testKeySize, time.Hour*48, true, []string{"127.0.0.1"}, + ); err != nil { + return err + } } - if err := security.CreateClientPair( - certsDir, filepath.Join(certsDir, security.EmbeddedCAKey), - testKeySize, time.Hour*48, true, security.RootUser, false, - ); err != nil { - return errors.Errorf("could not generate Client pair: %v", err) + { + caKey := filepath.Join(certsDir, security.EmbeddedTenantClientCAKey) + if err := security.CreateTenantClientCAPair( + certsDir, caKey, + testKeySize, time.Hour*96, true, true, + ); err != nil { + return err + } + + tcp, err := security.CreateTenantClientPair(certsDir, caKey, + testKeySize, time.Hour*48, "10") + if err != nil { + return err + } + if err := security.WriteTenantClientPair(certsDir, tcp, true); err != nil { + return err + } } return nil @@ -277,19 +317,11 @@ func generateBaseCerts(certsDir string) error { // client.node.crt: node client cert: signed by ca-client.crt // client.root.crt: root client cert: signed by ca-client.crt func generateSplitCACerts(certsDir string) error { - if err := security.CreateCAPair( - certsDir, filepath.Join(certsDir, security.EmbeddedCAKey), - testKeySize, time.Hour*96, true, true, - ); err != nil { - return errors.Errorf("could not generate CA pair: %v", err) + if err := generateBaseCerts(certsDir); err != nil { + return err } - if err := security.CreateNodePair( - certsDir, filepath.Join(certsDir, security.EmbeddedCAKey), - testKeySize, time.Hour*48, true, []string{"127.0.0.1"}, - ); err != nil { - return errors.Errorf("could not generate Node pair: %v", err) - } + // Overwrite those certs that we want to split. if err := security.CreateClientCAPair( certsDir, filepath.Join(certsDir, security.EmbeddedClientCAKey), @@ -382,7 +414,7 @@ func TestUseCerts(t *testing.T) { // Insecure mode. clientContext := testutils.NewNodeTestBaseContext() clientContext.Insecure = true - sCtx := rpc.MakeSecurityContext(clientContext) + sCtx := rpc.MakeSecurityContext(clientContext, roachpb.SystemTenantID) httpClient, err := sCtx.GetHTTPClient() if err != nil { t.Fatal(err) @@ -402,7 +434,7 @@ func TestUseCerts(t *testing.T) { clientContext = testutils.NewNodeTestBaseContext() clientContext.SSLCertsDir = certsDir { - secondSCtx := rpc.MakeSecurityContext(clientContext) + secondSCtx := rpc.MakeSecurityContext(clientContext, roachpb.SystemTenantID) httpClient, err = secondSCtx.GetHTTPClient() } if err != nil { @@ -472,7 +504,7 @@ func TestUseSplitCACerts(t *testing.T) { // Insecure mode. clientContext := testutils.NewNodeTestBaseContext() clientContext.Insecure = true - sCtx := rpc.MakeSecurityContext(clientContext) + sCtx := rpc.MakeSecurityContext(clientContext, roachpb.SystemTenantID) httpClient, err := sCtx.GetHTTPClient() if err != nil { t.Fatal(err) @@ -492,7 +524,7 @@ func TestUseSplitCACerts(t *testing.T) { clientContext = testutils.NewNodeTestBaseContext() clientContext.SSLCertsDir = certsDir { - secondSCtx := rpc.MakeSecurityContext(clientContext) + secondSCtx := rpc.MakeSecurityContext(clientContext, roachpb.SystemTenantID) httpClient, err = secondSCtx.GetHTTPClient() } if err != nil { @@ -596,7 +628,7 @@ func TestUseWrongSplitCACerts(t *testing.T) { // Insecure mode. clientContext := testutils.NewNodeTestBaseContext() clientContext.Insecure = true - sCtx := rpc.MakeSecurityContext(clientContext) + sCtx := rpc.MakeSecurityContext(clientContext, roachpb.SystemTenantID) httpClient, err := sCtx.GetHTTPClient() if err != nil { t.Fatal(err) @@ -616,7 +648,7 @@ func TestUseWrongSplitCACerts(t *testing.T) { clientContext = testutils.NewNodeTestBaseContext() clientContext.SSLCertsDir = certsDir { - secondCtx := rpc.MakeSecurityContext(clientContext) + secondCtx := rpc.MakeSecurityContext(clientContext, roachpb.SystemTenantID) httpClient, err = secondCtx.GetHTTPClient() } if err != nil { diff --git a/pkg/security/securitytest/embedded.go b/pkg/security/securitytest/embedded.go index 4cddd6907707..74f989931c48 100644 --- a/pkg/security/securitytest/embedded.go +++ b/pkg/security/securitytest/embedded.go @@ -1,21 +1,25 @@ // Code generated by go-bindata. DO NOT EDIT. // sources: +// test_certs/ca-client-tenant.crt (1.111kB) +// test_certs/ca-client-tenant.key (1.675kB) +// test_certs/ca-server-tenant.crt (1.111kB) +// test_certs/ca-server-tenant.key (1.675kB) // test_certs/ca.crt (1.111kB) -// test_certs/ca.key (1.675kB) +// test_certs/ca.key (1.679kB) +// test_certs/client-tenant.10.crt (1.099kB) +// test_certs/client-tenant.10.key (1.679kB) +// test_certs/client-tenant.11.crt (1.099kB) +// test_certs/client-tenant.11.key (1.675kB) +// test_certs/client-tenant.20.crt (1.099kB) +// test_certs/client-tenant.20.key (1.679kB) // test_certs/client.root.crt (1.099kB) // test_certs/client.root.key (1.679kB) // test_certs/client.testuser.crt (1.107kB) -// test_certs/client.testuser.key (1.675kB) +// test_certs/client.testuser.key (1.679kB) // test_certs/node.crt (1.188kB) -// test_certs/node.key (1.675kB) -// test_certs/mt/ca-client-tenant.crt (1.111kB) -// test_certs/mt/ca-client-tenant.key (1.675kB) -// test_certs/mt/ca-server-tenant.crt (1.111kB) -// test_certs/mt/ca-server-tenant.key (1.679kB) -// test_certs/mt/client-tenant.123456789.crt (1.107kB) -// test_certs/mt/client-tenant.123456789.key (1.679kB) -// test_certs/mt/server-tenant.crt (1.168kB) -// test_certs/mt/server-tenant.key (1.675kB) +// test_certs/node.key (1.679kB) +// test_certs/server-tenant.crt (1.155kB) +// test_certs/server-tenant.key (1.675kB) package securitytest @@ -84,7 +88,87 @@ func (fi bindataFileInfo) Sys() interface{} { return nil } -var _test_certsCaCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x94\x4b\xcf\xba\x4a\x1a\xc4\xf7\x7c\x8a\xd9\x93\x09\x37\x45\x58\xfc\x17\xdd\x74\x73\x11\x1a\x69\x6c\xe5\xb2\x03\x14\x14\x14\x44\xe4\xe6\xa7\x9f\xbc\xef\x24\x33\xc9\x39\xe7\x59\xfe\x16\x95\x27\x55\x95\xfa\xf7\xcf\x41\x6c\x39\xfe\xbf\x0c\x1c\x32\xc7\x74\x0c\xc0\xf0\x2f\xe5\x88\xe3\x20\x58\x1b\x06\xb8\xaa\x15\x98\x1d\x08\x2a\x87\x66\x6b\x1a\x1c\xd4\xb9\x80\x4e\x0a\x2c\x3b\x9e\x54\x4b\xca\x08\x03\x3e\xac\x9a\xfe\xd6\xdc\x2d\x7d\x16\x21\xa0\x83\x09\x10\x78\x73\x24\x74\x66\x0c\x12\x74\xa6\xd4\xc5\xf3\x03\xe5\xb2\xff\x2e\x9e\xfa\x2d\x91\xab\xc5\x64\x80\xc1\xca\x3f\x43\x40\x18\xc2\xfe\x94\xc8\x9f\x35\x97\xcd\x3a\x33\x20\xa2\x0c\x5c\xcd\x59\x5c\x39\x82\x80\x4c\x50\xb3\xf8\x35\x90\x09\x83\x99\x39\x8b\xdf\x5f\xc6\xaa\xff\x31\x62\x0c\x0b\xae\x01\xfd\xaf\x58\xc7\x8c\xd3\xff\xc5\xb8\x0c\xe1\x33\x81\xc4\x02\xd2\x09\x83\x85\x10\x2a\xeb\x75\xa6\xec\xa7\x24\xf2\x3b\x07\xfb\x90\x38\x0e\x74\xea\xbf\xbe\x8f\x4d\x00\x0e\x06\xa0\x1a\xf8\xf1\x00\x1a\x95\x6b\x00\x8a\xc1\xe2\xec\x3a\x6d\x6a\x6c\x58\x95\x45\xf7\x39\xf1\x30\x2e\x6d\x70\x5d\x4d\x90\x00\x38\x29\x2c\x58\xf5\xb2\xdd\x94\x82\xe8\x83\x00\x85\x48\xcd\xaf\xc5\x85\x71\xaf\xb3\x90\x6e\x36\x3d\xde\xd2\x50\xa0\xdd\xa7\x63\xe4\xbc\x73\xfd\xbb\x5d\x8c\xd2\xc7\xa7\xce\xc4\xfb\xa3\x31\xee\x6b\xd5\x0e\x8f\xba\x15\x66\xf1\xfb\x70\xe8\x36\xdf\xb4\xef\x4a\xf5\x52\x5a\xf6\xc0\x45\xcb\x98\x9d\xbe\x65\xb6\x97\x5d\x43\x88\x62\x76\x12\xbf\x26\x1e\xe6\xe3\x4e\x10\x70\x0a\x3c\xdf\x14\xd5\xc1\x36\x71\x15\x18\xbc\x55\xbf\x64\xe8\x48\xc2\x53\xc8\x6d\xe1\x38\x6f\x3a\x28\x1e\x43\x8e\xa0\x45\x4f\xa5\xb1\xb1\x42\x7f\xa1\xbe\x0c\x16\x9e\x09\x7b\x7c\xdc\x28\x9e\x87\x35\x37\x4c\xbb\x53\x7d\xe4\x35\xff\x85\x85\xc6\xc0\x32\x4a\xcc\xb2\x38\x4a\xc9\x95\x7a\xbe\x5d\xa9\x7c\x02\xb9\x90\x17\x6c\x25\x6e\xb7\x21\xdd\x0c\x84\xa4\xe1\x79\xef\x7a\x76\xf6\x8a\xbf\xc1\xc8\xf2\x17\xdd\x93\x8b\xe3\xaf\xa3\xdb\x00\x07\x9c\xfc\x60\xb8\x32\x69\x15\xe3\x8f\x98\x3f\x26\x73\x2b\x2c\x7d\xcd\xbd\x79\x69\xb7\x17\xd3\xca\x42\x5a\xab\xf4\xbb\x25\xd3\x46\x7c\xc1\x1b\x16\xa3\x7e\xb6\xd8\xc3\xd3\x67\x07\x01\x0a\x60\xb7\x26\xf3\x1e\x81\xc3\x4f\x94\x36\xd5\x20\x28\x35\x0c\x01\x31\x38\x30\xd2\x19\x57\x09\x3a\x87\x22\x03\xd4\x16\x20\xa8\x66\x58\x61\x28\xfc\xb4\xf2\x9f\xda\xf7\x1b\x1f\x06\xf7\x54\x6c\x6f\x7c\xe0\x72\xde\xc7\x7a\x11\x3d\x8b\xa2\xbb\xfa\xbd\x15\xfe\x0b\xf1\xbd\x71\x6e\xc9\xae\x97\xe0\xc3\x2e\xed\x08\xd2\xb5\x51\x2a\x45\x8b\x5f\x5d\x1e\x5c\x88\x54\xb3\xf9\xe9\x42\x6c\x5a\x97\x0a\x54\xfd\xdd\xe5\x34\x29\xc6\x53\xb6\xe8\x8d\x91\xaf\xdd\xd6\xa4\xf5\x6b\x12\xdb\xfc\xee\x1c\x3c\x68\x26\x4e\x61\x37\xe2\x90\xbd\xcb\x28\x4f\xce\x8a\xba\x5f\x9e\x7a\xb0\x68\xc1\x10\x86\xc8\x43\xb1\x3c\xc6\xae\xc7\x2d\xcb\xfb\x38\x8c\xe7\xfa\xfd\xd0\xc7\x1e\x55\x59\x90\x81\x47\x03\xee\xa7\x4a\xe9\x95\x56\x0e\xd4\xcb\x91\x36\x70\x7a\x9d\x3e\xab\xb4\xa9\xd3\xb7\xa5\xd2\xc2\x85\x6a\x63\x7d\x27\x62\xe4\xdb\x1d\xe2\xae\x37\xbd\xa2\xe2\x21\x0e\x8c\x75\x96\xdf\x53\x24\xf3\x8a\xac\x96\x0d\x2f\x47\x1f\x3e\x6d\x23\x95\xdf\x7d\x6e\x87\xc8\x7c\xf4\xdf\x5d\xe1\xcb\x4d\xd8\xbc\x71\xc4\x06\x32\x92\xb4\x6d\xbb\xfe\x61\x72\x6c\x7a\xdc\x9e\xda\x6e\x78\x50\x5f\xa2\x93\xb9\xfd\xa2\x5b\x2b\xb2\x5a\x30\xf2\x24\xb3\x95\x62\x8b\x25\x71\x91\xf0\xd3\x99\xbc\xd3\x23\x29\x5c\x72\xa8\xf6\xc3\xb8\x5e\x3c\x79\xfa\x9a\x8b\x25\x31\xce\x6c\x5f\x64\xd2\xc7\xd2\xfa\x3e\xcb\x75\xfe\xf3\x87\xfb\x9d\x09\xec\xa3\xbf\x4f\xc7\x7f\x02\x00\x00\xff\xff\x44\x8b\xd3\xb6\x57\x04\x00\x00") +var _test_certsCaClientTenantCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x94\xbb\xd2\xb2\xc8\x1a\x85\x73\xae\x62\xe7\xd6\x2e\x39\x2a\x04\x13\x34\x4d\x23\x8d\x34\xda\xc8\x41\xc8\x00\xb5\x11\x04\x14\x91\x46\xae\x7e\xea\xfb\x82\x3f\x98\x99\x37\x7c\x82\x55\x6f\xd5\x5a\xf5\xfc\xff\xe7\x4c\xb4\xc3\xfe\xff\x20\x0a\x42\x6c\x63\x08\x42\xf4\x4b\x05\x82\xb1\x65\x2e\x10\x82\xeb\x8a\x01\x8e\x4d\xc0\x70\x00\x7c\x8f\x0f\xb7\x31\x9b\xb5\x28\x3b\xe8\x79\xc2\x96\x35\xfd\xa2\x92\x5b\x34\x75\xf7\x7d\x86\xab\xa9\xf4\x01\x45\x9e\x49\x01\x17\xf6\x0b\x3a\x11\x13\xec\x80\x14\x21\x58\x11\x97\xca\x46\x9d\x2b\xee\x94\x26\x7e\x4f\x82\x88\x23\x9e\x5a\x31\xa5\x16\xe2\xb3\x55\xc8\xfe\x50\xb6\x46\x95\xca\x8c\x51\x11\x71\xa7\x2a\x7d\x81\xd4\x80\xfb\x0b\x92\x48\x88\x44\xbf\xc6\x4a\x52\x95\x3e\x59\x7e\x18\x16\xff\xb0\x1a\x0c\x24\xc0\x1c\x81\xdf\xb0\x3d\xe2\x8f\x3f\x61\x42\x2a\xb3\xd9\x0e\x41\x68\x32\x3f\x36\x01\x09\x2d\xe4\x4f\xa9\x3c\x7e\x0b\xd9\xae\x73\x68\x5a\x34\x84\x10\x9c\xf0\x3f\xdf\x37\x4d\x0a\x2c\xc6\xd0\x51\x00\x16\x84\x80\xf6\x90\x31\x64\x82\xc3\x45\xd4\x88\xdd\xd7\x88\xe4\xe5\xa7\x2b\x72\x56\xee\x34\x14\x46\xe9\x03\x3e\xaf\x2f\xc4\xcd\xbe\x2b\xfa\x0c\x32\x60\x8b\xa0\x1e\xb3\xd6\x7e\xa6\x44\x78\x4e\xb7\x55\x68\x64\xc4\x53\xc5\x66\x77\xbd\xbc\x4f\x43\x56\x76\x70\xa3\xc6\x9f\x3c\x53\x3f\xee\x6d\xd9\x74\xa6\x33\xf8\x77\x5b\xa4\x51\x35\x27\x4b\xa7\xb6\x48\xad\xdd\x8d\xb4\x4e\xdb\x25\xd8\xf5\x42\xdf\xe8\xb8\x5c\x78\x1f\x2b\xc5\x2e\x52\x95\xcd\xe9\xe1\x2d\xd5\x6a\xd2\x51\x30\x93\x96\x0e\x6e\xb5\xec\x53\x63\xe7\x35\x05\x8f\x95\x87\xd7\xe0\xed\x98\x8f\x99\x91\x68\xf3\xd5\xac\x4c\x71\x99\x05\x11\x3f\x9d\x07\x14\xd1\xc9\xda\x38\x92\x5e\xee\x8d\xe1\x01\xe1\x7c\x6e\xc7\x83\xdb\x4a\x61\xd6\x4d\x13\xf9\x36\xfc\xb2\x7d\xf2\x70\x21\xd1\xb1\x7c\x12\x19\xe6\x51\x6b\x1c\x55\xed\xd5\x9b\xeb\x46\x30\xeb\x5a\x43\xd7\x8b\x65\x83\xbc\x19\xb7\xab\x82\xdf\x6d\x4f\xd9\x4a\x6a\x6c\xb5\xb7\xb3\x33\xbd\xb7\xf3\xfd\xac\xb1\xc0\xb8\x89\xef\xf1\x16\x27\xcb\x51\xfb\x3e\x3a\xbd\x51\xb9\x32\x21\x8e\xb2\x41\xd8\x76\x9b\xda\x8f\x99\xa6\x5c\xf5\xaf\x4a\x53\x06\x96\xb9\xdc\x47\xd5\x03\xde\x3f\x1a\xdc\x7b\xd5\xcb\xd0\x21\xe0\x08\x80\x9c\xb4\x04\x52\x6e\xb1\xd4\x8a\x03\xf1\x08\xa8\xb3\x36\x01\xb5\x04\xc0\xbc\x86\x98\xf8\x67\x48\x17\xc4\x91\xb9\xe6\x14\x13\x90\x9a\xe0\xa6\x43\x40\xd1\x7f\xad\xcf\xfa\x6d\x8c\x9c\x4f\x3a\x9f\x47\xa1\x89\xaf\x9b\x3b\x89\xdf\xc5\xb7\x90\xdd\xa4\x3c\x34\xca\x12\xe6\x78\xdf\xf2\xa0\x96\x2f\x56\xd9\xf4\xe5\x8b\xbe\xe5\x79\x6e\x5f\xbd\xb7\xaa\x26\x59\x64\x66\x13\x1d\xd7\xc5\xfc\x9e\xb3\xf1\xf0\x44\x82\xd6\xb9\x77\xda\xef\x5e\xc8\x98\x5f\x38\x46\x16\xf8\x88\xc7\x4e\xdd\xf5\x76\xfb\x72\x0e\xe3\x18\xcd\xee\x59\x71\xef\xe7\xf3\xf5\xb0\x03\xb5\xd2\x25\x70\x0e\xd3\x82\x18\xd4\x1b\x75\x17\x7a\xf5\x49\xf0\xd7\x7b\xa9\xe7\x05\x06\x2e\x77\x25\x35\xc7\x99\xbc\xae\x56\x99\xe2\xbc\x4f\xc9\xd3\x18\x36\x70\x2a\xa5\x28\xc1\x5a\x7c\xf6\x67\x5c\x52\xa8\x5e\xa5\xa9\x2a\xf0\x1d\x4e\x9d\xec\x48\x1a\x91\x04\xa7\xb3\x56\x1f\xef\xb2\x75\xe2\x35\x78\xb4\x41\x40\x07\xab\x05\x43\x51\xb1\x43\x02\xf4\x95\x7d\x3c\x67\x77\xfd\x73\xb8\xe6\x41\x9a\xe9\x97\xa9\x9f\x2b\x79\x3c\xb6\xe1\x0e\x06\x54\x42\xb7\x49\x05\xc2\x3d\x77\xbc\xfc\x60\xc9\x44\x4f\xe8\xf9\x6c\x80\xeb\xea\xe1\xa0\x7a\xf0\xa4\x36\x5a\xf7\xda\x3b\x52\xfd\x47\x31\xe9\xf9\xf4\x2d\xc6\xdb\xc6\xd8\xf2\x23\xd3\xf6\xb3\x7d\xf3\x98\x7a\xe7\x93\xbb\x55\x84\x18\xb2\x77\x76\x49\xbf\xea\xf4\x86\x41\x45\xff\x12\x7e\x35\x81\x7c\xeb\xdf\xea\xf8\x3b\x00\x00\xff\xff\x0e\x3c\xe8\x66\x57\x04\x00\x00") + +func test_certsCaClientTenantCrtBytes() ([]byte, error) { + return bindataRead( + _test_certsCaClientTenantCrt, + "test_certs/ca-client-tenant.crt", + ) +} + +func test_certsCaClientTenantCrt() (*asset, error) { + bytes, err := test_certsCaClientTenantCrtBytes() + if err != nil { + return nil, err + } + + info := bindataFileInfo{name: "test_certs/ca-client-tenant.crt", size: 1111, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x81, 0x5d, 0xb4, 0x56, 0xf7, 0xbc, 0xb, 0x72, 0x8c, 0xb6, 0x84, 0xec, 0x5e, 0x0, 0x40, 0xbe, 0xe2, 0x97, 0xf3, 0xf8, 0x95, 0xdd, 0x41, 0xfd, 0xa8, 0x62, 0x6e, 0x75, 0x18, 0x9, 0x8c, 0x1f}} + return a, nil +} + +var _test_certsCaClientTenantKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\x37\x12\xa3\x5a\x02\x85\xe1\x9c\x55\x74\x4e\x4d\x09\x2b\x20\xbc\x78\x2f\x2e\x46\x98\x4c\x78\xef\x84\x11\xac\x7e\xaa\x3b\x7e\x27\x3d\xc9\x9f\x7d\xff\xfb\x3b\x5e\x52\x34\xfb\x8f\xeb\x81\x3f\x8e\xab\xbd\x81\x2f\xfd\x31\xa4\xf8\xdf\x83\x58\x9a\x26\x4d\xa7\xc6\x03\x60\x08\x00\x4a\x80\x26\xfd\xee\x0c\x1b\x0b\xfe\xe6\xeb\x99\x6f\x0b\x7f\xa6\x9d\x6b\xbb\x4d\x60\xf4\xcf\xc9\x07\x4a\x93\xef\x75\x67\x00\x10\x41\xe1\x85\x0f\x71\x88\xf4\xd5\x35\x70\x0f\xda\xc1\xbb\xf3\x68\x3d\x98\xd0\xc4\xcf\xd8\xfa\x2b\x33\xd7\x3a\xa4\xe7\xb1\xa1\xfa\x87\xb3\x64\x52\xf1\x25\xb4\xc8\xe5\x3d\x55\x4e\x5f\x65\x13\xfb\x8d\x35\xae\x11\xd7\xa4\x36\x22\x7d\x9a\xc6\x3f\xeb\xdb\x11\xea\x28\xff\x26\x7e\x5b\xce\x46\x70\xbc\xd4\xe7\xe3\x74\x55\xe9\x4a\x84\xef\xa0\x5a\x73\x8b\xc5\xbb\x7b\xf0\x51\x11\xec\xb0\xdd\xf1\x05\x1f\xf1\x74\x94\x29\x45\x52\x11\xdf\x51\x61\xd3\x15\x81\x09\x5d\xcd\x99\xca\xe8\x77\xae\xc4\x1e\x68\xa6\x5c\x7c\x30\x6a\x48\xdf\xf6\x50\xa0\xec\x6d\xf8\x3c\xb9\x8f\xbc\x63\xfd\x20\x77\x75\x77\xac\xcf\x5e\x8a\x3d\xda\x61\xa9\x10\x15\x85\xca\xcb\xe9\x5c\x1a\xb3\x02\x7e\xf1\xc8\x83\x3e\x04\x2d\x38\xca\x23\xaa\x83\x57\xc2\x65\x05\x7a\x1f\x8a\x5e\x0e\xbc\x8a\x3f\xbc\x0b\xe7\xde\xa9\xf5\x18\x8d\xb0\xbc\xfc\x56\x2c\x58\x1f\x20\xee\x70\xec\xe5\x62\xe1\xa1\x38\xe6\xcc\x6d\xd6\x7c\x03\x44\x47\x3e\x67\x4f\x09\x0c\x83\xe9\xb4\x69\x57\x56\xf2\xd4\x44\x00\x01\x0f\x26\x8d\x07\x4a\xe7\xc6\xfe\x53\x60\xdc\xce\x15\xe6\x60\x41\x8c\xab\xaf\xb3\x58\xed\x1d\x12\x1a\x21\xf6\xb1\x4a\x6d\xcb\xc4\x86\x78\xe1\xf2\xd6\x56\xa4\x23\x09\x40\xa0\xe3\x64\xc2\xd9\xe4\x04\x6a\x42\x16\x15\x79\xc0\x64\x57\xb9\x56\x16\x5c\x29\x55\x01\xb2\xc6\x0e\x3f\x4f\x98\x77\xd2\x26\xba\xb5\x98\x99\xaa\xcc\x58\x04\x09\xc7\x56\x4d\xe7\x5e\x22\x8c\xa5\xb5\x26\xc4\x13\x83\xec\x66\x9b\x76\x16\xcb\xfa\x58\x9d\x73\xc3\x43\xd5\x4d\x9a\xd9\xec\x10\x65\xc6\x20\xba\xba\xa4\x3b\x75\x6f\x3c\xac\x1c\x66\xc2\xb5\x7a\xb3\x6a\x41\x45\x71\xba\xc8\x85\x87\x2e\x3b\x62\x3c\x5e\xd6\xd7\x7c\x4c\xac\x3a\x7c\xb8\x24\x7d\x6a\x61\x7f\x09\xf1\x13\xa4\xfd\x13\x49\xb4\x2e\xaa\x3d\x5b\xf3\xbe\xbf\x81\x78\x28\x52\x55\x17\x46\x99\x7d\x2e\x9a\xe0\xe2\x5f\x9a\xca\x1b\xa0\xba\x09\x53\x28\x99\xe2\xad\xa7\x50\x3e\xd9\x25\x57\x6c\xd2\x0e\xf3\xa9\xfe\x61\x8a\xe9\x20\xd0\xa9\x78\x1c\xea\xe5\x78\x94\xe8\x24\xe7\x84\x2d\x89\xed\x8c\xf1\x2d\x3b\x19\x45\xb2\xb7\xe6\x3d\x06\x5e\x74\x8a\xd5\x93\x7e\x43\xbc\xb3\xcb\xc1\x2b\x64\xb2\x59\x46\xa7\xba\xc9\xd7\x7d\x17\x08\x0d\x6d\x39\x24\x24\xa1\x8a\x25\xf0\x54\xd0\x32\x0e\xbe\x83\x1e\x25\xd1\x6d\x94\xd9\xef\x23\x67\x41\x40\x81\xe5\xe0\x58\x45\xf6\xb5\x24\xb9\xb1\x47\x93\x90\xf9\x59\x47\xf8\x55\x8f\x56\xb4\x0e\xc8\x50\x05\xb7\x26\xb2\x9b\x39\x0d\xe9\x2b\x9f\xa1\x75\xe7\x18\xaa\x6a\x61\xda\x1f\x2b\x15\x73\xf7\x5c\xa2\x45\xd8\x2f\x85\x55\x4b\xbf\x22\x55\xa4\x2c\xdd\xa9\x4d\x74\x74\x60\x30\x5f\xdd\x0c\x55\xe4\xfd\x7b\x2a\xfb\x03\x1b\x55\xa5\x5f\x8c\x66\xa6\x9d\xa7\x11\xdd\x96\x80\x2a\xce\x1b\x14\xaf\xa2\x27\x6f\xac\x18\x29\x94\x42\x75\xb9\x88\x12\x82\xd6\xa4\x92\xb4\xfd\xec\x5f\xf1\x63\x3f\x3e\x88\xd3\x3e\x4f\xc3\x0a\x61\x5a\xd0\xdf\x6b\x7e\xd0\x6e\xb3\x79\xa1\xb5\x70\xb1\xcb\x55\xe9\x00\x99\x7a\x30\x65\x13\x0f\xeb\x3c\x10\x6a\x73\x5b\xbe\xeb\xc2\x3e\xb3\xeb\x4d\xfa\x45\x46\x2a\xaa\x05\x90\xe9\xee\x57\x6d\xf6\xce\x8f\xd5\xb5\xf9\x87\xa2\x02\xba\x92\x21\xcd\x66\x68\x13\x7a\x42\x8c\x32\x85\x95\x44\x6f\xd5\x3c\x09\xc2\x29\x33\xac\x04\x71\x20\x81\x0f\x63\x67\xad\xd5\xc8\x3f\x37\x25\x90\x9d\x28\x5a\xaf\x2c\x53\x96\xa4\x5d\x18\x35\xa8\x76\x89\xe7\xda\x57\xdf\xe7\xa2\xd1\xcb\xf0\xc8\x65\x26\x17\xa5\xb9\x13\xaa\x18\xc0\x03\x9b\x96\x7a\x54\x4a\x33\x54\x2e\xe5\xa6\x16\xee\xe2\x6a\x64\x96\xd8\x0e\x1c\x35\x0b\xa4\x47\x2c\x8d\x92\x55\x6f\x01\x38\xf4\x6c\x9c\x49\x34\x62\x7e\x81\x90\x3e\x64\x5a\xc6\x21\x25\x09\x54\x0d\x8e\x23\x7e\xdb\x57\xf8\xad\x95\x63\x2d\x8e\x10\x5d\x25\x0d\x29\xb6\x1f\x0b\x6a\x8e\x24\x40\x6f\xb4\xa1\xea\x0c\xa0\x65\xa9\x3d\x79\x2d\xd2\x11\x65\x81\x3f\x6b\xa0\xfc\x99\xb4\x6e\xe2\xac\x07\x0b\xdf\x24\x5d\x8b\x74\xac\xd7\xc9\x97\xf2\x2c\x10\x1c\x89\x23\xdf\x14\xdd\x14\xf2\x18\x22\x68\xf1\x3d\x1b\x4e\x0c\x9b\xa0\x22\x34\xf8\x0a\x0a\xfc\x59\x90\x1f\xfe\x16\x65\x4a\xd0\x0f\x38\x0b\x0e\x7d\x43\x2b\x9c\xd7\x80\x8e\xa3\xd0\x71\xe5\xf9\xa0\xf0\x19\x11\xef\xc2\x5e\xa8\x01\xc5\x25\x95\x74\xa7\xb1\xcf\x1d\xda\xaa\x25\xa3\x56\x73\x8b\xe8\x99\x2f\x15\x76\x8c\x1c\x28\xd5\xe8\xf4\xe6\x3b\x76\x1c\x96\x82\x0a\xc6\x39\x51\x06\x86\x01\xad\x5a\xcd\x44\x1e\x8e\x02\x29\xee\x6e\x49\x2a\x5f\x38\xba\x2c\x0c\x2f\xcb\x96\xdb\xdb\x08\xbd\x24\x7e\xb1\x97\x5e\xf9\x94\x2b\x09\x0c\xd8\xd6\xb5\xd4\xb6\xb9\xbc\x8d\x8d\x18\xf2\x7c\xd7\xab\xe3\xce\x7a\x30\x20\x5f\x71\xfd\x3e\xff\x26\x8b\xf2\x0a\x1f\xfe\x0f\xca\x4a\xea\xd2\xcc\x8b\x42\x17\x39\xb6\x96\x6c\xa3\xba\x21\xda\x33\x02\xf7\x52\xb6\xa0\xa4\xbe\x3f\x39\xae\x3a\xe6\x43\xf3\x76\x3d\x27\xb9\x1a\x19\x4a\xdc\x0c\x5b\x06\xa0\x4c\x95\x5e\xfc\x1a\xdf\x6f\x39\xf1\xb2\xdf\x67\x4b\xa4\x7a\xe3\xbe\x11\x13\x43\x8a\x2e\x2e\xb3\xe4\x5b\x1d\xd6\xf6\x68\xc4\x26\x74\xb7\x4f\x7a\xc3\x0a\xfa\x6c\x57\x21\xd9\x07\x9b\xe5\xbd\xd3\xbb\xd8\xd5\x8f\xf1\x03\x58\x48\xa0\x9d\x9f\xdd\x23\x63\x67\xe2\x35\x15\xc9\xc7\x40\x2b\x7f\x21\xd2\x4b\x7c\xab\xb1\x8b\x8f\x4e\x6c\x20\xff\x48\x91\x6c\xf1\xbf\xa9\xf9\x7f\x00\x00\x00\xff\xff\x7e\x18\xa1\x88\x8b\x06\x00\x00") + +func test_certsCaClientTenantKeyBytes() ([]byte, error) { + return bindataRead( + _test_certsCaClientTenantKey, + "test_certs/ca-client-tenant.key", + ) +} + +func test_certsCaClientTenantKey() (*asset, error) { + bytes, err := test_certsCaClientTenantKeyBytes() + if err != nil { + return nil, err + } + + info := bindataFileInfo{name: "test_certs/ca-client-tenant.key", size: 1675, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xe, 0xce, 0xc1, 0x5b, 0xc0, 0xe9, 0xe5, 0x28, 0x17, 0x7d, 0x7d, 0x6f, 0x5d, 0xff, 0x1c, 0x14, 0x11, 0xf5, 0x68, 0x98, 0x3, 0xbe, 0x8b, 0x1a, 0xd2, 0xe8, 0x7d, 0x56, 0xa6, 0x5a, 0x97, 0x78}} + return a, nil +} + +var _test_certsCaServerTenantCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x94\x3b\xb3\xaa\x48\x14\x85\x73\x7e\xc5\xe4\xd6\x94\x88\x8a\x18\xdc\x60\x37\x34\xda\x60\x23\x0d\xc8\x2b\x43\x90\x96\x87\xf2\x3c\x22\xfe\xfa\xa9\x73\xa6\x6a\x26\xb8\x77\x87\x5f\xb0\x6a\xd7\x5a\xab\xd6\xdf\xdf\x87\xf0\x81\x58\x7f\xa9\xd8\xf1\x88\x4e\x54\xf0\xf0\x0f\x15\x28\x21\x1a\x2a\x55\x15\x6e\x32\x87\x89\x20\xe0\x84\x65\x69\xa4\x29\xc6\x76\x5c\x34\x5f\x6f\x13\xc1\xc7\x77\x43\x37\x28\xc1\x42\xbc\xea\xee\x55\x71\xd8\x4f\x22\x02\x36\xe8\xa0\x41\x2f\x50\x87\x4c\x18\x22\xcd\x67\xcc\xc4\x53\xad\x5d\x25\xab\x4f\x1f\xfb\x7b\x24\xf1\xb7\xee\x81\x87\xb8\xe5\x23\xa0\x9e\x86\xad\x57\x24\x8d\xf3\x55\xd2\xcb\x44\x45\x1a\xf3\xe0\xa6\x4f\xe2\x2c\x50\x0d\xd6\xd4\xbb\xbc\xa9\xc7\x24\x5a\xde\x13\x7d\x12\x3f\x3f\xac\x64\xff\x31\xaa\x0e\x6f\x5c\x02\xfb\x57\xac\xf1\xd4\xcb\xff\x62\x42\xa2\x61\x9f\x22\x7a\x80\xd5\x05\xc3\x9b\x52\x26\xed\xcb\x64\x6d\xbc\xa2\xc0\x6a\x08\xb6\x10\x25\x04\x91\xdf\xde\xc7\x3a\xc0\x59\x05\xa6\xc0\xb7\x07\x48\xe5\xa6\x0a\x0c\x83\x88\x4a\x6e\x10\x8a\xb3\x97\x7e\x32\x2f\x4d\xb1\x69\xaf\x7d\xe7\x64\x68\x09\x31\x4f\xe2\xf0\x4b\x51\xf2\xae\xc3\xed\x72\x35\x4c\xd1\x1c\x9e\xd2\x35\x75\x41\x30\x2e\xd6\x7a\xe1\x1a\x1a\x8f\xa6\xd4\xea\x57\xc5\xa1\xd3\x17\xe1\x66\x2b\x47\x8b\xd5\x9c\xec\x65\xaa\xf8\xf4\x44\x46\x74\xad\x58\xa4\xa1\xf2\x2e\x89\x43\x45\x7a\xe0\x83\xb8\x09\x72\xe7\xba\x57\x85\xdc\x29\x7d\xe3\x90\x99\xf3\x0c\x92\xb6\x2e\xf6\xfd\xb3\xae\x15\xf7\x28\x0e\x7d\x27\x67\x97\xf7\xe0\xf8\xf3\xc0\xef\x38\x3d\xc2\x0a\x05\xed\xe6\xe9\x79\xe1\x18\x6f\x36\x79\x61\x40\x0f\xa8\x68\x85\xb6\x9b\xa4\xe4\x78\xf4\xc5\xa6\xb3\x09\x3e\xd6\xbe\xf1\xd4\x8d\xdc\x99\x83\x5c\xdb\x45\xca\xfa\x91\x2b\xb5\xb1\x8a\x4e\xc9\x76\x08\x58\x7e\xcd\x4d\xd6\x78\x45\x71\x6e\xae\xe0\xf5\xbe\x31\x8e\x54\x90\x61\xb5\x54\xf7\x9b\x77\xbd\x2b\x9e\x93\xbd\x24\xe0\xcc\xf6\xc4\xfd\x2a\x8f\x4b\x79\x6d\xd3\x53\xa1\x9c\x50\x56\xea\xd3\x23\xd0\xed\x15\x99\xea\x5b\xed\x57\x8f\xb9\xa4\xc1\x65\x37\xd7\x5e\xf0\x16\xdc\xee\x36\x7b\xbe\xad\x2a\x6a\xc0\x10\x79\x02\x38\x2d\x19\x69\xb4\xca\xa0\xd4\x66\xbd\x60\x0e\x23\x1a\x30\x40\xcd\x1c\x4d\x86\x06\xe7\xef\x28\x8f\x4c\x41\x90\x2b\x18\x01\x55\x05\xf8\x62\x13\xe6\x91\xe6\x3b\xa2\x07\xec\xb8\x44\xc0\x27\xc4\x31\x5a\x7e\xb7\xd2\xfb\x43\xfb\x7e\xe2\xc3\x40\x8a\xaf\x35\x8f\x82\x93\x30\x1e\x77\xf2\x43\x3f\x3c\x42\x52\xd9\x8d\xfb\xae\x92\x28\x97\x60\x38\x75\x8c\xf3\xc1\x7e\x7d\xe4\x3e\xec\xa2\x4c\xe9\x17\x21\x5a\xc7\x61\x7d\xe9\xd7\xf5\x69\xd8\x8a\x5b\x63\x3c\x47\x87\xdd\xf9\x5a\x09\xbb\xb8\xbb\xd7\x9e\xe3\xa4\xe6\xcd\x63\x71\x60\x9f\x5f\xa9\xad\x2e\x1b\x24\xa6\xec\x78\xf9\x32\x70\x81\x94\x26\x4e\x6c\x27\x3b\xca\x33\xec\x3f\x6d\x76\x90\x2f\x7b\xb7\xb2\xef\xc5\x43\x59\xc8\xf6\x47\xb8\x27\x4a\xa4\x2e\xda\xf7\x66\xba\x31\xfe\x74\x97\xd7\xf2\x8a\xb2\xda\xf5\x9c\xb4\xab\xeb\x87\x64\x36\x71\x38\x6f\xb7\x8f\x4f\x67\xb2\xfd\xd2\x05\x7b\x4c\x63\x39\xd5\x53\xac\xb4\xbd\xed\x3f\x4e\x77\x21\x24\x4f\x87\x33\xbd\x53\x83\x27\x37\xbf\x5a\xdb\x12\x57\x89\xd9\x4b\xc1\x6b\xe1\x5c\x70\x55\xa8\x15\x96\x33\x91\xd9\xa8\x4d\x77\xa5\xec\xdf\xca\x31\x0f\x0f\xe7\x7c\x3e\xbb\xaa\x4b\x46\x5b\x6c\x05\x36\xd0\x9b\xbc\x0c\xcb\x44\xb3\x48\xea\x14\xe9\xea\x75\xff\x24\x2f\xef\x6e\x65\x93\x64\x72\xf2\x4a\xb1\x9e\x78\x2d\x9b\xdc\x57\x61\xb6\x0d\xd7\x0f\x96\x16\xe9\x88\xe6\xd4\x8f\x4f\xb7\x74\x59\x09\x58\x8c\xac\x5d\x13\x63\xe3\x5a\x6e\x14\xfe\xeb\x97\xf0\x33\x13\xd8\xd2\x7e\x9f\x8e\x7f\x02\x00\x00\xff\xff\xdf\xf4\x10\x82\x57\x04\x00\x00") + +func test_certsCaServerTenantCrtBytes() ([]byte, error) { + return bindataRead( + _test_certsCaServerTenantCrt, + "test_certs/ca-server-tenant.crt", + ) +} + +func test_certsCaServerTenantCrt() (*asset, error) { + bytes, err := test_certsCaServerTenantCrtBytes() + if err != nil { + return nil, err + } + + info := bindataFileInfo{name: "test_certs/ca-server-tenant.crt", size: 1111, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x8e, 0xfb, 0x5b, 0x6f, 0xe3, 0x88, 0xbc, 0x29, 0xb7, 0xfa, 0xd5, 0x15, 0xd7, 0x34, 0xfe, 0x52, 0xe0, 0x81, 0x6b, 0x39, 0x4c, 0x98, 0x55, 0x6a, 0x72, 0x8a, 0x7f, 0x75, 0x59, 0xc0, 0x60, 0xd7}} + return a, nil +} + +var _test_certsCaServerTenantKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\xa7\x12\xa4\x50\x02\x85\x61\xcf\x53\x8c\xa7\xb6\x88\x4d\x83\x18\x71\x09\x4d\x8e\x4d\x76\x40\x93\x73\x0e\x4f\xbf\xb5\xa3\xf7\xd8\x63\x7e\xf7\xfd\xe7\x7f\x63\x05\x51\x36\xfe\x38\x5f\xf0\xc7\x72\x64\x1f\xb8\xc2\x1f\x55\x88\xfe\x3d\x90\x2e\xcb\xc2\x68\xcb\x2c\x00\x2a\x07\x6c\x01\xa0\x6c\x53\x2a\xb2\x2e\xfc\x8e\x8f\xa6\x7a\x63\x4d\x4e\xe9\x32\x3b\x3f\x16\x01\x71\x99\xc4\xe1\x4e\xd3\xc5\x3c\x0b\x13\x82\xad\x67\x74\x87\x5a\x06\x11\xfa\x17\x28\x9e\x41\xc0\x5f\x85\x2f\xa3\x33\x33\x16\xac\x16\xe7\x0f\x1c\x92\x2f\x2a\x82\xb1\x3b\x61\x28\x9d\xf6\x75\x4d\xde\xd8\xb4\xb5\x23\x9e\x6d\x2a\x1c\x5d\x5b\x79\x01\xe5\x8a\x92\x41\x01\x39\x29\xc3\x15\x4e\xe3\x2b\xe2\x4f\xbd\x6f\x80\xf3\x44\xcd\x2c\x43\xd7\xd1\x5f\x09\x5d\x97\x99\xfa\x79\xd7\xea\xf8\xf7\x5a\x56\x42\x26\x01\x8c\x0d\x26\x72\x70\xdd\x70\x8b\x49\xb2\xa8\x15\xb0\x40\x80\xad\xa7\x69\x3e\xf1\x44\x92\x7c\x74\x9c\x2d\x59\x90\x3a\x5f\x19\x3e\x4a\xe1\xdc\x41\xc1\xbf\x23\x9a\xe8\x0b\xba\x53\xb0\x48\x4b\x5e\x6b\x60\x17\x69\xa1\xda\xa3\x5b\xd7\xe6\x98\x02\x77\xf1\x21\x65\xdb\x74\x0a\x60\x08\xc7\x90\x57\xf7\xae\x87\xd3\x42\x64\xe0\xdc\xd6\x59\xfa\x6d\x11\x37\x14\x61\xe9\x5a\x4d\x6b\xec\xaf\xf9\x9c\x7d\xf0\xb1\x30\xf9\xec\xf2\xce\x6f\xfb\xbb\xd1\x03\xef\x7d\x43\x9d\x1b\x5c\xdf\x39\xbf\x5d\xdf\xe2\x68\x2e\xb0\x59\x79\x00\xc0\x99\xe4\x4d\x8f\xb0\x1f\x68\xf8\xfb\x53\xdb\x8e\x2d\xf3\xc0\x06\x2c\x18\x65\x16\xb0\xe2\x66\xa2\x2e\xbc\xb3\x4c\x9e\xfc\x74\x03\x12\x58\xd8\xf0\xc4\x4f\xb5\xe0\x32\xa9\x49\xca\x32\xda\x7b\x6f\xe9\x62\x4b\xf5\xa8\xdf\x3e\xdd\x55\x60\x4c\xf7\x4b\x5b\x74\xb0\x3a\x7f\x5b\x1d\x29\x8a\xe5\xf1\xa9\xe1\xef\xbb\x2d\xaf\xf5\x0e\x2d\x88\x5c\x36\x1f\x78\xe1\xdd\xed\xb7\xab\x88\xf6\xd7\x4d\x3a\x7c\x10\x3b\x3f\xf8\x90\xf4\x44\x8e\xad\xa5\xbc\x1c\x91\x09\xb9\xda\x63\x5f\x51\x3a\xfa\x3f\x5c\x6e\x04\x59\x12\x46\x6e\xc5\xab\x46\x44\xa1\xdc\xac\x78\x52\x55\xc3\xed\x6d\x8e\x47\xdf\x4b\xfd\x52\x07\x84\x2a\x69\x71\x3e\x92\x78\x0d\xeb\x8c\xf7\xb6\x69\xe4\xf4\xde\x24\x91\x59\xcc\x8d\x07\x88\x42\x1e\xe8\x87\x34\xa2\xb3\xe1\x84\x32\x83\x1c\xef\x2d\xbe\x5c\x23\x1b\xc4\x7d\x0a\xe0\x70\xd6\x10\x41\xa4\x70\x52\xc6\x4f\x5f\x0d\xec\xf1\x99\x27\x1e\x64\xc4\x92\xe9\x96\xbf\xda\x08\xe2\x34\x59\x13\x48\xe2\x67\x33\xca\x82\xba\x59\x74\x85\x60\x5f\x0f\x7e\xdc\x84\xb9\xb8\xe7\x7c\x69\xe9\xa3\xc2\xfb\x50\xbc\x18\x21\x44\x05\x94\x74\x10\xb8\x90\x87\xd6\xc3\xa3\x83\xf5\x27\x35\xa7\xe6\x99\x92\x25\x74\x39\x72\x5d\xf8\xe0\x96\x40\x27\x0c\xd4\x67\x7e\x07\x4f\x1e\x57\x46\x02\xa0\x8a\x76\x6a\x87\x53\x7d\x62\xaf\xb2\x8e\x87\x33\x29\x8a\xbe\x42\x37\x4e\xf1\x40\xa4\x91\xc0\x73\x10\xf8\x4e\x37\x26\xfa\xce\x45\x72\xe9\xdf\xc8\x8f\xcd\x06\x6a\x88\x41\x5b\xdd\xc3\xb0\x8e\xad\x68\x9c\x3a\x02\x8f\x97\xe3\x65\xdd\x2d\xcf\x89\x38\xac\xb9\x3c\x74\x5c\x1e\xe9\x13\x38\x85\xc5\x5c\x4f\xc5\x6b\xfd\x3b\x36\x52\xd2\xf8\x5d\x8e\xa1\xbe\xdc\x16\xca\x2a\x64\x9c\x1a\xe7\x54\x6c\x6c\xf3\xa9\x62\x15\x73\x96\x70\xf6\x2c\x31\xf3\x03\xd6\x70\x7e\x21\x93\xae\x62\x92\xd0\x8a\x93\x66\x3c\x28\xd3\x17\x02\x25\xcd\xa9\xec\x5f\x31\xf9\x06\x01\xc4\xa8\x2f\x76\x4d\xd3\x11\xdb\x4c\x37\xf2\x64\xb6\x0e\xe0\x28\xa2\x5f\xfc\x31\xdb\x11\x37\x49\x0f\xa2\xc3\x7b\x97\xc7\xca\xc2\x21\x05\xfa\xb2\xe1\x3c\xcd\xc1\x37\x5a\x30\x23\x5f\x3c\xe1\xc7\x9d\x10\xbd\xca\xc7\x65\xfa\xbd\x30\x75\x67\x9f\xb7\xdd\x6f\xdd\xcc\xe9\xb7\x2e\xd7\xeb\x4e\x66\x5a\x0e\xd0\xee\x80\xb5\xb7\xff\xec\xe6\x50\xc7\xe2\xd9\x7a\xa0\x7a\xfc\x81\x3a\x59\x4b\x88\xe7\x2a\x3e\x20\x50\x19\xda\x76\x86\x59\x31\x66\xed\x97\x9f\x55\xcb\x45\xbf\xa5\xd6\x32\x1a\x62\x90\x0c\x79\x1a\x0c\x6f\x5b\x51\xa3\x73\x65\x04\x92\xb9\x41\xc2\xe9\xf0\x4b\x73\x2e\x80\x77\xd8\x29\x7d\xa3\x3d\x14\xd2\x87\xce\xa1\x6d\x28\x4c\x4f\xdb\xbf\x67\x43\x6f\x50\xfb\x70\x54\x7d\x11\xe8\x56\x4d\x58\x27\xd2\xf4\x54\xdb\x54\x2f\x42\xf2\xfc\x41\xf2\xb7\xf4\xeb\x09\x27\xce\x84\x68\xba\x0a\xd3\x50\x6f\x88\x6a\x8f\x59\x67\x1c\xfe\x9c\x8f\xb2\x8c\x2c\xb8\x49\x7b\xa5\x26\xd8\x26\xd9\x8a\x76\x56\x95\x36\x43\x6b\x3e\x53\x9d\xb7\x23\x63\x54\x6f\x99\x73\x8e\x32\xf4\xca\x15\x23\x0b\x14\x9e\x2b\x77\x02\x82\x6f\xad\xa1\x1c\x95\x7a\xb5\xd1\x18\xd8\x8c\x26\x99\xb9\xaa\x9d\x0a\xe2\x06\x9c\x9a\x2a\x8f\xb6\x4d\xdd\x5d\x91\x4c\x51\xcd\xc4\x80\xd1\xa8\x87\x18\x51\xa6\x51\xb8\x57\x94\x7a\xfa\xa2\xa9\x15\xaa\xda\x2f\x7d\xe9\x39\xf8\x06\x59\x88\x09\x81\xec\x11\x61\x47\xe0\xcf\x3e\x39\x8c\x04\x9e\xe6\x0d\xf6\xf7\x7d\xfa\x4c\xf3\x32\xa7\x00\xb5\x2b\x71\xad\x52\xe5\x2e\xaf\xbd\x44\xd8\x0b\xb5\xb7\x1b\xf2\x57\xc7\x6d\x48\x6b\x4d\x79\xc7\x93\x37\x8a\xf6\xa8\x9a\x52\x2d\x4b\xbc\xec\x34\x59\xb7\x21\x25\xfd\x2c\xeb\x60\xc3\xcf\xdc\xf8\xb9\x3e\x07\xfd\xce\x64\x91\xf3\x02\x14\xeb\x0f\xce\x6b\xb6\x1c\x42\x4e\x95\x2d\x6d\xce\xd3\x89\x0a\xe7\x88\x37\x8f\xe9\x6d\x43\xf4\xf0\xde\x45\x02\xc7\xe5\xa8\xc8\x64\x57\x5c\xe2\x63\x24\x70\xdf\xa8\xb7\x39\x99\x90\xdd\xc8\x49\x2d\x8a\x1b\xa8\xc1\x45\x9b\x10\xca\x6d\x0b\x26\x5e\xd1\xee\x1b\x64\x57\x25\x9f\xfb\x3c\x4d\x24\xe5\x19\x17\xf1\xae\x54\x16\xd3\x71\x49\x03\xef\x9b\x25\x62\xcb\xd4\x2e\xcc\xd3\xa5\xab\x35\xc1\xce\xaa\x5e\x8f\x51\xb0\x2e\xb5\x11\x34\x17\xe7\x4c\x45\x12\xc7\x06\x5d\xe3\x64\x9d\x3a\x1e\x1f\xf6\xd6\x09\x94\x40\x63\x32\x2c\x66\xe1\x9b\xfe\x26\x4d\xdb\x0d\xd4\xd8\x95\xa1\x9d\x6d\xdf\xfe\xfb\x17\xfa\x47\x8a\x60\xf0\xff\x9f\x9a\xff\x06\x00\x00\xff\xff\x1a\x40\xe8\x58\x8b\x06\x00\x00") + +func test_certsCaServerTenantKeyBytes() ([]byte, error) { + return bindataRead( + _test_certsCaServerTenantKey, + "test_certs/ca-server-tenant.key", + ) +} + +func test_certsCaServerTenantKey() (*asset, error) { + bytes, err := test_certsCaServerTenantKeyBytes() + if err != nil { + return nil, err + } + + info := bindataFileInfo{name: "test_certs/ca-server-tenant.key", size: 1675, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x98, 0x57, 0x68, 0x0, 0xed, 0x26, 0x61, 0xbc, 0x51, 0x3a, 0xf1, 0x18, 0x8d, 0x81, 0xae, 0xd3, 0x7d, 0x4d, 0x51, 0xce, 0x7c, 0x94, 0x3e, 0xb8, 0x33, 0x5e, 0x45, 0xf2, 0xa6, 0x6b, 0x4e, 0x42}} + return a, nil +} + +var _test_certsCaCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x94\x3b\xd3\xb2\x3a\x1b\x85\x7b\x7e\xc5\xd7\x3b\xdf\xc8\x41\x51\x8a\x5d\x84\x24\x60\xc4\x00\xe1\x68\xe8\x10\x14\x44\x11\x91\x43\xd4\x5f\xbf\xe7\x79\x8a\xb7\xd8\x7b\xdf\xe5\x55\xac\xb9\x67\xd6\x9a\xeb\xff\x3f\x67\x62\x9b\xb8\xff\x83\x38\x88\x88\x45\x20\x88\xf0\x2f\x95\x28\x21\xc8\xfc\x42\x08\xce\x8b\x0a\x08\x62\x82\x8a\x04\xc0\xe9\x1f\x5b\x79\xf5\xbe\x40\x5b\x83\xfd\xfa\x28\x78\x17\x84\x57\x2e\x10\xe3\x7b\xa7\xcb\x48\x3d\x17\x2e\x60\xf8\x60\x32\x20\x24\xe7\x8b\x43\x6a\x02\x1b\x28\x31\x86\x35\xdd\x33\xd5\x68\x72\x6d\x3f\xf3\xd4\xed\x68\x10\x0b\x2c\x38\x4a\x18\x43\x58\xbc\xd1\x49\x75\x5f\x45\x6b\xd4\x5c\xad\x2a\x26\x63\xb1\xab\x0b\x57\xa2\x0d\x10\xee\x17\x2b\x34\xc2\xb2\xdb\x10\x35\xad\x0b\x97\x7e\x7f\x18\x91\xff\xb0\x06\xbc\x68\x40\x04\x06\xbf\x61\x0e\x16\xf7\x3f\x61\x12\x57\xab\xb7\x15\x81\xc8\xac\xdc\xc4\x04\x34\x42\xd8\x9d\xb9\x3a\x7e\x4e\xaa\xd5\xe4\xd0\x44\x2c\x82\x10\x84\xe4\x9f\xef\x9b\x26\x03\xa8\xaa\xb0\x2f\x01\x04\x21\x60\x1d\xac\x2a\x6c\x82\x43\x64\xda\xeb\xf2\x33\x3b\xe1\xbd\xd4\x12\x7e\x51\xa7\xe3\x59\xb1\xf8\x3d\x2b\x13\x9d\xe7\x14\x6b\x4a\xf3\x29\x84\x92\x19\x23\x93\x91\xbd\x37\x60\x40\xa5\x8a\x74\x1e\x4f\x97\xfb\xde\x58\x2d\x05\x81\xed\x12\xf6\x77\x73\xab\xc9\xa4\x3a\x3c\xfc\x5b\x9e\x84\xd5\x62\xbb\xd6\xe2\x3b\x53\x7c\xed\x0c\x4c\xfb\x99\xd6\xf1\x4c\x56\xde\x63\x72\x12\xd5\xa3\x5f\x49\x4e\x9e\x6b\xdd\x2b\x0d\x2b\x01\x0e\xb0\xd8\x66\xab\xc7\xe4\x66\x7a\xf6\x07\x1c\x67\xc5\x2d\x71\x53\xe3\xed\x5b\xbe\x7e\xab\x9b\x9c\xa7\x9f\x43\xf6\x8a\x66\xeb\xf6\x24\x27\x72\xd7\x95\xae\x42\x48\x52\xc3\x40\x9f\x4b\x79\x32\x9c\x66\xf8\x5c\xe6\xf5\x79\xda\x14\x79\x28\xdb\xdb\xfd\x71\xb7\xe7\xee\x66\x1b\xcc\x59\xe6\xac\x16\xe7\x31\x58\xf4\x9d\x57\x95\x3e\x7e\x65\xcd\x86\x6c\x86\xf1\x80\x4e\x46\x24\x15\xaf\xa6\x58\x25\xcd\x1a\x19\x27\xfb\x29\x5f\xae\x7b\xcd\x1b\xa8\xa9\xcd\x4a\xeb\x1d\x66\xc0\x3c\x35\xe9\x09\x75\x08\x15\xbb\x2f\x0e\x0e\xaa\xc6\x0a\x75\xb4\x2f\xf1\x3e\x6f\xd5\xfe\xb9\x19\x62\x29\xdb\x3f\x88\x23\x9f\x2e\x07\x74\xac\xfd\xb0\xcc\x45\xc5\x7d\xe1\x3c\x19\x7d\x3f\x4d\xa5\x5b\xf3\x23\xa1\x10\x08\x0c\x40\x4e\x5b\x0a\x99\x40\x15\x47\x49\x20\xfb\x80\xed\x96\x26\x60\x48\x02\xd5\xe1\x46\x4d\xf2\x33\xa4\x12\x0b\x6c\x2e\x05\x23\x14\x70\x13\x5c\xb6\x10\x30\xfc\x5f\xeb\x43\xbf\x8d\xc1\xfa\xe1\x04\x17\x55\xca\xd7\xc9\xb9\x4b\x9b\xf8\x1d\x16\x3e\xbc\x83\x5d\x39\xd1\xdc\x30\x5e\xc6\x71\x86\xd3\xfa\x6a\x04\x41\x84\x2f\x78\x41\x6c\x6f\x1b\x4f\x83\x08\xf3\xe6\xa4\x4d\xd1\x73\x72\x57\x63\x38\xa8\xb2\x61\x4a\xd9\x2b\xfd\x0e\xb7\x9c\x28\x85\x95\xa5\xb5\x4b\x87\xfb\xf0\x65\x53\x37\xc6\x56\x51\x7d\x9f\xbd\xf5\x82\xd6\x1a\xd3\x6b\xe7\x3e\xc3\x24\x1f\x47\x90\xa4\x84\x0f\x57\xbe\x75\xfc\x98\x4e\x31\xf7\x24\x23\xb8\x79\x5e\xd9\x9f\xa9\xe6\xbf\x5a\x3e\x24\x81\x76\xbb\x16\xe5\x21\xf2\x68\x72\x5a\xb6\x29\x7d\xe3\xf4\x45\xc5\x09\x1a\xba\xee\x8f\xe5\xf1\x64\x5a\xc8\x1d\x2c\x6f\x77\x14\x74\x34\x57\xfa\x55\xda\xab\xbc\xde\xa4\xf6\xae\x81\x9e\xf0\xfa\xd6\xf5\xee\xd9\x32\x60\xb7\xf0\xdb\xf3\x4e\x57\x76\x7b\x05\xdd\x0b\x79\xf2\x36\x83\xfe\xd0\xb6\x71\xb9\xf0\xb5\x72\xed\x18\xde\xa3\xaf\xe5\xb0\x4d\xaf\x0f\xe9\x73\x7d\x66\x87\x5d\x66\x90\xb8\x81\xe7\xf6\xfa\x4a\x3e\x63\x07\x8d\x4e\xf7\x8b\xb7\x3d\x5d\x6a\x5d\x7f\x60\xac\xf5\xf6\xf2\xb0\xbe\xb1\x39\xba\x7c\xf8\xe0\xa7\x8b\x6a\xa9\x9c\xb8\xb3\x41\xad\x52\x4b\x9d\xa7\x74\xe3\xee\x83\x32\xd1\xa6\x8b\x0f\xfe\x4b\xfa\xd5\x04\x76\xd1\xbf\xd5\xf1\x77\x00\x00\x00\xff\xff\xc7\x8d\x17\x64\x57\x04\x00\x00") func test_certsCaCrtBytes() ([]byte, error) { return bindataRead( @@ -100,11 +184,11 @@ func test_certsCaCrt() (*asset, error) { } info := bindataFileInfo{name: "test_certs/ca.crt", size: 1111, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x5c, 0xf1, 0xfd, 0xe6, 0xf9, 0xbb, 0xe8, 0xa3, 0xc6, 0x56, 0x7b, 0x72, 0x5e, 0x8d, 0x12, 0x8a, 0x8, 0xcc, 0x34, 0x5e, 0x6e, 0x55, 0x3, 0x21, 0x8a, 0x71, 0xe1, 0x7f, 0xbe, 0x7e, 0xb, 0x3a}} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x2f, 0xf8, 0x38, 0x56, 0xdd, 0x66, 0x3c, 0xfc, 0x1, 0x66, 0x5b, 0x2e, 0xb0, 0xca, 0x73, 0x47, 0x73, 0xd0, 0x63, 0x6, 0x18, 0x58, 0xa7, 0x9, 0x4a, 0xe1, 0x17, 0xb1, 0x54, 0xe, 0x3d, 0x82}} return a, nil } -var _test_certsCaKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\xb7\x12\xab\xda\x01\x85\xe1\x9e\xa7\x38\x3d\xe3\x21\x0a\x44\xe1\x62\x13\x37\x22\x88\x9c\x3a\x72\x14\x41\x44\xf1\xf4\x1e\x9f\xdb\xde\xd5\xae\xe6\xef\xbe\xff\xfc\x7f\xbc\xa4\xa8\xe6\x1f\xc7\x05\x7f\x2c\x47\x0d\x80\x27\xfd\xd1\xa4\xf8\xef\x83\x18\xaa\x2a\x4d\xb5\xca\x03\xa0\x09\xc0\x96\xc0\xa5\xb2\xd3\xf3\xe8\x21\x5f\x57\xf9\xb4\xf9\x28\x1f\x55\x10\x94\x3f\x19\xc4\x80\x3f\x28\xcf\xfa\x71\xd5\x48\x57\x18\x6e\x02\x4b\x74\x44\x26\x43\xca\xbc\xf0\xe6\x00\x4b\x68\x7a\x91\x1e\xb6\x83\xd9\xd3\x36\x79\x46\xc0\x6a\x66\x0b\xf3\x9d\xd8\x4c\x5b\x3d\x50\x73\x17\xf6\x57\xc7\x40\xc7\xe5\x14\x27\x8d\xbe\xef\xf7\x44\xdf\xc9\x32\x55\x4c\x81\x54\x0a\x5c\xc3\x6b\x4f\xfd\xbb\x4a\x5f\xa4\x26\x60\x61\xe4\xf9\xf8\x2d\x4b\xeb\xe9\xb2\x18\x26\x25\x40\x37\x65\x9c\x59\xa1\x2c\xd5\x96\x80\x2a\xdd\x4c\xf2\x2a\x81\x7d\xb0\x0c\x62\xee\x49\x4f\x08\x8f\xbb\x8e\x21\x5e\x5c\x42\xec\xbd\xe2\x98\x97\x6d\x92\xe0\x42\x3d\xec\x25\xb9\x34\xa5\xeb\xd2\x53\x73\x92\xc9\xef\x5c\xf4\x69\xce\x12\xd6\x0b\x12\x29\xc6\x72\x95\xbb\x44\x5c\xda\xba\x09\x6b\x84\x41\x63\xde\x41\x31\x48\x45\xe3\xc3\xb1\xe9\xd5\x30\x12\x27\x78\x69\x3a\x4c\xe7\xe8\xb6\x76\x2f\x9b\xed\x97\x51\xa8\xe6\x6f\xd7\x7a\xa0\x02\xdf\xb4\xd6\xd2\x23\x7e\x78\xb4\xe1\xd9\x70\xc8\x0f\x04\xbb\x96\xee\x8b\x12\xec\x0b\x4f\x6a\x45\x7c\x8e\xd4\xc2\x5e\xe9\x73\x97\x0a\x89\xf6\x22\x71\x39\x15\x6f\xd0\xb9\x53\x15\x81\x0d\x78\x30\xa9\x3c\x10\xee\xdd\x6f\x2a\xd0\xdd\x05\xbe\xce\x94\x8b\xb8\xa7\xbd\x70\x6d\x54\xe4\x42\x0c\xa6\x32\x1c\x05\x07\x4f\xb7\xd7\x48\xdd\x41\x94\xb6\x43\x51\x7a\x8a\xea\x08\x94\xd8\x18\x7e\x6b\xf9\xea\xbb\xa8\x54\x12\xff\x0c\x23\xe3\x4c\x11\x79\x7a\xe5\x88\xb8\x90\x27\x3f\xea\x42\x94\x87\xc9\x8f\x6f\x7d\x61\x58\x83\x2f\xf8\x56\xf2\xea\x68\x09\x63\x0b\x04\x5e\xb8\x7c\x0c\x18\x12\x30\xbf\x33\x91\x0a\xdb\xda\x5b\xd7\xed\x4b\xe2\x2f\xe8\x67\xe3\xa1\x22\xaf\xb9\xd4\x80\x02\xfd\xce\x1e\x54\xb1\xdd\x3c\xaa\x18\x12\x36\x3b\xb7\xe8\x58\xf3\xe3\x06\x66\x97\xce\x58\xea\xe9\x3a\x4f\x31\x79\x6a\x42\x0f\xe7\x50\xd8\x33\xdc\xa9\x52\xf5\x22\x57\x8a\x8d\x94\xfe\x66\xae\xb2\xdf\x0f\x98\xff\xfc\xf4\xfa\xf3\x2c\x97\xe6\x95\x1a\xee\xf9\xd1\x5b\x8d\x5a\x3c\xb3\xf4\xd6\x2c\x8b\xda\x94\x18\x47\xb8\x0b\x4b\x36\x87\x39\xf6\x80\x93\x6f\x89\x62\x90\xb5\x3e\x72\xf5\x14\x56\x05\x83\xb6\x58\xf5\xc7\x64\xad\x8b\x19\x0b\xd1\x82\x3c\x83\xbf\xb8\x31\x12\x2d\xe2\xc7\xdb\xce\xf3\x37\xac\x66\xcb\x8e\xc4\xdb\x7f\x18\x97\xc6\x3d\x5d\xcb\xb5\x92\x1c\x85\xb5\xb9\x21\x92\x26\xf7\x24\x29\x09\x75\x2c\x01\x6e\xee\xf4\xb9\xca\x50\x1d\x78\x4f\x55\xbe\x78\x1a\x82\x88\x19\x5e\x60\xea\x7e\x2c\xad\x6a\xa0\xba\xc4\xdd\x8e\x1a\xd2\xa4\xf2\x40\xff\x0d\xb2\x9b\x76\x00\x71\xf1\xd1\xd1\xb9\x96\xc0\xdc\x2c\x64\xb5\x9f\x70\x6c\x31\x9d\xc7\xc3\x71\x87\x8c\x53\x72\xca\x63\xda\x4c\xbe\xb5\xe6\x87\xf8\xfe\x15\x2d\x5d\x05\x6e\x7f\xb3\xd4\x6f\xac\xed\x99\x0e\x38\x81\x5e\x10\x96\x75\x50\x9a\xed\xf6\x89\x49\xf8\xa5\xa2\x8b\xea\xd7\x34\x47\x1f\xa3\xed\x48\xf7\xf5\x26\xd4\x01\x76\x31\xf7\xe3\x65\xc0\x84\xef\xc2\xc0\x2c\x16\x69\x87\x4d\xf0\x4f\xf1\x0d\xc8\x11\x11\xae\x6b\xe2\xd9\x09\x10\x04\x5d\xf2\x24\xd9\x8b\x33\x66\x0d\x91\x20\xd3\x4a\x83\x56\xea\x4f\xb2\x1f\xa0\x12\x5e\x8b\x62\xcf\x67\xe4\xde\x7d\x3b\x3f\xb2\xa8\x3d\x2f\x82\x84\xb1\x1a\xc7\xb9\x8d\x14\x43\xa3\x46\xfb\xb7\x76\x64\xd9\xfc\x1c\x39\x99\x70\x49\x24\x17\x43\xb6\x36\x49\x67\xaa\x5b\x75\x86\x98\xcf\x1b\x56\xb3\xba\x79\x06\xd1\xd5\xa8\xba\xe7\x20\x48\xce\xcd\xc5\xa6\x12\xb5\x7e\x85\xf4\x28\xc7\x0e\x12\xbd\x18\xe0\xb1\x28\x09\x5d\x2e\x61\x16\x5d\xc9\xf5\xa9\x99\xb6\xaf\xfc\x8c\x6f\x20\xf0\xda\x35\x17\xea\x98\x4f\xd8\x3c\x23\x57\xb2\x19\x58\x6f\x23\xd4\x14\xc3\x9b\xf0\xba\x11\x97\x79\xa3\xcd\x8c\x9a\x85\x3a\x55\xb7\x2e\x86\x1b\xf5\x96\xf5\xe5\xb2\xa4\x05\xee\xfc\xd6\x3c\x46\x25\x9a\x35\x5b\x0f\x42\x5c\xd8\xb8\x73\x87\xce\x1b\xd0\x33\xfd\x4a\x3d\xcd\x79\x8d\x64\x7c\x20\xc5\x65\x8a\x96\xe5\x01\xab\x98\x94\x02\x66\xb1\x5e\xe8\xcf\x93\xbc\xf9\x68\x26\x16\xf4\x5a\x89\x84\x56\xde\xf8\x98\xf8\x07\x2a\xa6\x65\x4c\xda\x56\x4e\xc1\xbc\x61\xa4\xe5\xb2\xb6\xde\x44\x27\x64\x5b\x98\x96\xe2\xb7\x02\xd3\x23\x34\x0f\x5d\x2d\x21\x45\xfa\xb4\x35\xbe\x96\x6b\x23\xe6\x0d\xc3\xe5\xb6\x66\x81\xb2\x02\x15\x49\xd3\xc9\x2d\x17\x79\x74\x5a\xdd\x83\x12\x8e\x40\xf6\xdf\xd2\x0f\x29\x04\xe5\x6b\x73\xa3\xa4\xaf\x37\xb5\x51\xdb\x68\xc9\x2e\xbe\xe8\x7d\x33\x06\xf1\x29\x68\x1b\xed\x2c\xd3\x27\x0e\xfd\x87\x8b\xce\x45\x80\x92\x76\x0e\x89\x5d\x02\x6a\x90\x58\xa6\x11\x69\x2f\x09\x09\x0a\x59\xea\x0d\x93\x8a\x09\xea\x28\x58\x25\x84\x0c\xd9\x0f\x40\x74\x1a\x4a\x68\x9d\x4e\xa4\xcb\xf1\x7d\x49\xab\x7f\x9c\xd7\x62\x1f\xd7\xa5\xe3\xf7\xd0\x12\x03\xd1\x79\x1a\xcb\x71\xe0\x9e\x90\xe5\x11\xeb\x60\x52\x80\x7e\x17\x67\x89\xf6\x6f\x61\xe4\x41\x96\xea\xba\x1e\xd4\x2d\x2a\x57\x8f\xb9\x53\x64\x91\xa4\xce\x97\x75\xbc\xe1\x27\x4b\x7e\xfc\x51\x66\xcd\x43\x84\x81\x6c\x1b\x6a\x6c\x21\x11\xf8\xe6\xa0\x6b\x16\x41\xf3\xd6\x8f\xbb\x77\x17\x8a\xee\x3f\xe3\xbd\x74\xe2\x7a\xe9\x0f\xf5\x53\xcf\xa7\x32\x7d\x95\x67\x47\x3c\x2b\x6d\x13\xda\xe6\xd9\xe8\xf8\xe7\x39\x15\x6c\xe7\x2c\xa9\x45\x22\x70\x48\x76\x12\xd4\x54\xec\xe1\x67\x9e\xda\xb2\xa9\x5d\x3f\xb0\x25\x1d\xac\xc4\x34\xfd\x16\x15\x77\x44\x46\x1d\x58\x34\xc7\x13\x12\xbd\xe0\xe7\xe3\xf9\xfc\x2f\xf2\x97\x14\xc9\x14\xff\x9d\x9a\xff\x05\x00\x00\xff\xff\x4a\xf1\xd0\x42\x8b\x06\x00\x00") +var _test_certsCaKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x95\xb7\x12\xab\x4a\x02\x44\x73\xbe\xe2\xe6\xaa\x2d\x06\x0f\xc1\x0b\x06\x2b\x84\xf7\x82\x4c\x20\x40\x38\x61\xc5\x00\x5f\xbf\xf5\xee\xa6\xdb\x69\x27\x5d\x1d\x9c\xf3\x9f\x7f\x23\x2a\x9a\x6e\xff\xf1\x03\xf8\xc7\xf5\xf5\x18\x86\xca\x1f\x43\x49\xff\x36\x98\xa5\xeb\xca\x04\x75\x11\x42\x43\x82\x9e\x02\x37\x4b\xc9\x7b\xca\xe0\x27\x23\xa6\xde\xf1\x07\x7f\x31\x6f\x2e\x8a\x9b\xb8\x27\x9e\xd3\x67\x44\x61\x95\xb8\x8f\x4b\x8e\xbf\x24\x21\x7b\x56\xfa\x05\xd8\x43\x39\x61\x53\x33\x9f\x9c\x1f\x16\xaa\xc5\x61\x6d\xe4\xbc\x31\x47\xf7\xab\xf2\x1a\xf8\x2b\x6e\xfe\x14\x1b\x32\x77\x7d\xdf\x41\x2c\x47\xf8\x9b\x86\xca\xab\x7f\xa9\x01\xdf\xd6\x6c\x49\x4f\xcf\x14\xa3\x2f\xd7\x4f\xbe\xdf\x91\xa1\x40\x1c\xc1\x11\xc6\xf2\x7e\x4d\x5e\xe3\x29\x74\xae\x8b\x25\x1e\x11\x20\x70\x94\xf0\xba\x07\xa6\x23\x85\xfe\x94\xeb\xdb\xb0\x39\x7c\x12\x74\x9f\xb5\x79\x2e\x49\x83\x41\xcb\xcd\x1e\xf7\x59\xa0\x02\x0e\xcc\xce\xf5\xb8\xe1\x3d\xcb\x6d\xc7\x64\x7a\x39\xea\x8b\xa2\xaf\xa9\xfd\xd0\x84\xbe\x5b\x5a\x86\x25\xee\xec\x5c\xb3\x22\xe0\x83\x6d\x70\xd7\xf6\x77\x82\xd5\xc6\x76\xc2\x3e\x7f\xf6\xf5\x49\xdc\xce\x25\xd6\xd7\xd7\xbf\xe9\xdf\x82\x45\xe8\x5e\xe2\x49\x4a\xff\x78\x11\x72\x59\x32\xd6\x68\xac\x2f\x58\x59\xbe\xb2\xe7\x6f\xf1\x7a\x81\x4c\xf0\xfa\x39\x7f\xcd\x5f\xec\x77\xf8\xdd\x50\xd4\x8b\xbf\xf1\xab\x5d\x2a\xc2\x83\x58\x24\xb1\xc6\xe1\xdc\xc3\x4b\xeb\xee\x49\xdb\x7f\x8a\x1a\xe9\x32\xf4\xa0\x08\x47\x5d\x84\x9e\x54\x48\x2b\xa9\xcb\xe2\x01\xd1\x85\x24\xac\xb1\x5b\xb7\xd1\x34\x25\x02\xe9\x28\x3c\x5a\xf6\x4d\xb5\x5f\x32\x9f\xf1\x24\x28\x95\xde\x9f\xc8\xf2\x6d\x86\x6f\x62\xb7\xa2\xb3\x4a\x7f\x8b\xb8\x91\xf7\x21\x89\x0f\x1d\xfe\x66\xed\x6b\x95\x75\x89\xfd\xe8\xf0\x37\xcb\x6d\x31\x81\xbc\x47\xf9\x2c\x8b\x4f\xc7\xf0\x9e\xa6\xe7\x71\xdc\x73\x54\x93\x27\x63\xe4\x5b\x9c\x6b\x99\xb3\x0b\x0e\x7a\x78\xcd\x50\xdc\x68\x56\x3d\x27\x99\x14\x5f\xd2\xe1\x8d\x18\xb8\x55\x19\x3a\xd1\xe0\x91\x96\xfc\xb8\x80\x4e\x78\xe1\x99\x8b\x0b\x6b\x08\xca\x87\x4e\x7a\x89\x72\x27\x4f\xcd\x54\x52\x2a\x63\x7a\x90\x97\x27\x41\xb5\x14\x1e\xa9\xaa\xab\x3d\x28\x27\x68\x66\xcc\x4f\x47\x3f\x6a\x5e\x65\x8d\xc8\x45\xdd\xa9\x58\x2a\x51\x2a\x5b\xcc\xf6\x5e\x5f\x74\x37\xf7\x86\x2c\x12\xfb\x6d\x5e\x01\xac\x59\xa5\x03\xea\x93\x94\x42\x55\xd7\x11\x3d\x46\x09\xff\x7d\xdf\x67\xec\x19\x05\x7b\xb6\x8e\xc5\x86\x8f\xe3\x00\x6d\xc0\x8c\x43\x8f\xa4\xd4\xf9\xc1\x3e\x48\xaa\x16\x78\x85\xee\xd4\xe3\xaf\xbd\x23\x7d\x83\x64\xe4\x3b\xe3\x2d\xc8\xac\x47\xaa\xed\x9f\x4d\x97\x4d\x1e\x53\x59\x31\x43\xde\xc4\xc0\x51\x13\xa1\xcd\x32\x85\x9c\x83\xcc\xbc\xb1\xc8\xa1\x3d\xd5\xe5\x7b\xc5\x11\x1b\x72\x72\x3d\x36\x91\xcd\x68\x09\x0a\x3a\x03\x44\x65\x2a\x79\xf3\x61\xdc\xf2\xb7\x01\x6c\xfe\xf5\x9c\xd9\xe6\xd7\x50\x1c\x16\xef\xb8\x1c\xe7\x0e\x5e\x7a\xd5\x9d\xda\x80\xd2\xe4\x43\x67\x88\x9f\xa7\xbe\x3a\x6b\x72\x72\x59\x53\xa5\xd3\x6a\x4e\x9f\xf2\xd8\x8f\x32\xbb\x26\xff\x2a\x5b\x2c\x35\x4b\xc0\x32\xcb\x06\x4c\x27\xd7\x5b\x3c\x2f\x9a\x0c\x04\xf9\xd0\xa7\xa4\x7f\xf1\x72\x16\x2b\x52\x25\x84\x45\xca\x1b\xb3\x52\x5d\x08\xb4\xa2\x79\xde\xa4\x41\x23\xfe\x2e\xb6\x70\x09\xcb\x05\x46\x08\x65\xe5\x88\x64\x92\x03\x49\x2d\x13\x7d\x12\x84\xcd\x72\xda\x9b\xec\x7f\x5d\xce\xd3\xf3\xe2\xc3\xbd\xf5\xd7\x32\xc6\x88\x34\x3b\x1f\xff\x94\xde\xd1\x11\x9a\x51\x29\xe1\x29\x9c\x08\x1b\x81\xc8\xbb\x31\xf5\x33\xc9\x4e\x3a\xf7\x92\x4a\xba\xfd\x11\x08\xf7\xa3\xb4\x3a\xb7\xda\xfd\x14\x70\x2e\x7e\x43\x71\x18\xac\xec\xa2\x55\xb1\xb9\x04\x20\x2a\x17\xfc\xc1\xdc\x71\x98\xa3\xb3\xc3\xbe\xc2\xd0\xb2\xb6\x85\x88\xe8\x65\x01\xbc\xff\x00\x87\x96\x98\x24\xd0\xb2\x3b\xda\xc2\x52\xf2\x7d\x50\x26\x4c\xfa\x79\xfe\xef\xe4\x74\x12\x09\x0e\xfa\x97\x97\x0a\x6d\x70\xa5\x10\xcc\x58\x5e\x5d\x1d\xef\x8e\x79\x31\x5d\x87\xef\x37\x7a\x9f\x04\xa5\xb9\x86\xac\x7c\xd6\x48\x99\xdb\xca\xf0\xce\x60\x9b\xc4\x5b\xd4\xdd\x3e\x89\x74\x78\xb9\x25\x3e\x85\x03\xaf\x9a\xeb\xfd\x16\x55\x1c\x62\x8b\xc1\xd0\x68\xc9\x13\x97\xb4\x6b\x03\xf6\x7c\x81\x5c\x50\x57\x91\xdb\x52\xc3\x09\x3e\x9d\x75\x21\x9a\x74\xa4\xa9\x33\x65\xee\xd9\xdf\x26\xd1\x64\x22\x2b\x1a\xf6\x8f\xeb\xd3\x44\x1a\x8a\x36\xe6\xd9\xad\x24\xd0\x0b\x27\x66\x6c\x83\x34\xa4\xc7\x81\x6c\x6e\x0c\x15\xc3\x51\x83\x4f\xd5\xb9\xb3\x84\xc3\xb9\xaa\x72\x90\x14\xe1\xee\x25\x99\x7c\xbb\x0f\xeb\xaa\x8e\x1b\x3d\xa2\xc4\x62\x72\x09\x9b\x1c\xc7\x54\x94\x32\x34\xf7\xbb\x79\x7f\x3b\xaa\x46\xee\x89\x20\xd6\x3f\x9d\xa8\xd7\x4b\xd5\x9b\x5b\xaf\x70\x8c\x9c\x4e\x0a\x45\x3a\x6e\x20\xbc\xe4\x70\x0f\x93\x32\x64\x42\x45\x64\xa7\xc9\x69\x30\xda\xc9\x57\x7a\xba\x08\x33\x9d\x43\x76\x7a\x18\xd7\xa5\xdd\xe6\x9f\xff\x68\x10\x22\xc2\x24\x32\x6d\xad\xd5\xc8\xc5\xee\x08\xd8\x67\x49\xfd\x94\x54\x60\xcf\x76\x96\x86\xf3\x6b\x1b\x33\xb5\x5c\xb0\x24\x55\xfc\x58\xe8\xa4\x3a\x15\xbf\x55\xba\x7b\xe0\x25\xe3\x85\xc0\xf4\xd9\xf4\x03\x65\xcf\xee\xdd\x2e\x7b\x17\xa4\xa3\x74\x34\x70\xf6\x4b\xfc\x14\x98\xf3\xd3\x6e\x36\xcd\x76\x5f\x7c\x32\x29\x30\xb1\xc9\xf9\x0e\x87\xb8\x7b\x1f\xce\x4b\xa3\xdd\x54\xf7\x48\xa7\x1a\x96\x26\x2d\xb3\xb2\xcc\xac\x17\xf9\x14\x52\x3c\x3e\x6c\x15\x0d\xf3\x49\x4f\xab\x3b\x8c\x6c\xa3\x6f\xd9\x66\x65\x04\x1b\xbb\x98\x7e\x93\x35\xc1\xaa\x32\xfe\xa8\x69\x62\x54\x1c\x83\x5e\x19\x90\x0c\x71\xaa\x94\x13\x8b\x03\x2a\x27\x73\x7e\xbd\xda\x52\x86\xc7\xe6\x11\xfd\xb3\xf9\x17\x65\xe8\x9f\x7f\xb0\xbf\x5a\x51\x6c\xf9\xff\xeb\xe6\xbf\x01\x00\x00\xff\xff\xfa\xa5\xff\x68\x8f\x06\x00\x00") func test_certsCaKeyBytes() ([]byte, error) { return bindataRead( @@ -119,288 +203,288 @@ func test_certsCaKey() (*asset, error) { return nil, err } - info := bindataFileInfo{name: "test_certs/ca.key", size: 1675, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x3a, 0xdf, 0x4, 0x11, 0xab, 0xd2, 0xdd, 0x0, 0x8f, 0xf9, 0x1f, 0x0, 0x35, 0x2, 0x61, 0x95, 0x31, 0x81, 0x48, 0x51, 0x6, 0x8f, 0xfd, 0xdc, 0xc7, 0x83, 0xdb, 0x21, 0xe5, 0x13, 0xcf, 0xdc}} + info := bindataFileInfo{name: "test_certs/ca.key", size: 1679, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x52, 0xc2, 0xd, 0x68, 0x49, 0x30, 0xa8, 0xa3, 0x3c, 0xf1, 0x29, 0xdf, 0x8d, 0x86, 0x0, 0x7b, 0xe1, 0xc0, 0xf, 0x25, 0x28, 0x4f, 0xfc, 0xed, 0x5b, 0x18, 0x36, 0x60, 0x8e, 0x2a, 0x79, 0x79}} return a, nil } -var _test_certsClientRootCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x64\x94\x49\xcf\xb2\x48\x17\x40\xf7\xfc\x8a\x6f\x6f\xbe\x80\x38\x20\xcb\x9a\x40\x94\x02\x8a\x41\x86\x1d\x83\x4f\x21\xa0\x28\xc8\xf8\xeb\x3b\xcf\xdb\x49\xf7\xa2\xef\xea\xe6\xdc\xe4\x6c\x6e\x72\xfe\xff\x3b\x90\xe8\x86\xf5\x3f\x44\x5c\xdf\xd0\x0c\x04\x7c\xf2\x87\x0a\xd4\x30\x90\xb8\x22\x04\xee\x77\x0e\x26\x03\x02\x6e\xb0\x80\xe1\x48\x92\x4d\x79\x37\xf3\x4f\x43\x9e\x3c\xcf\x06\xd6\x63\x60\x41\x5e\x7f\xca\xfa\xa1\xab\x93\x04\x01\xeb\x35\x80\x41\x27\x50\xd7\x98\x08\x88\xf1\x8d\xb1\x2b\x99\x1a\x9c\xc9\x56\x97\x3f\xd5\x32\x96\xf9\xac\xf9\xc0\x87\xdc\xba\x41\x40\x7d\x4c\xac\x31\x96\xbf\x4b\x26\x6b\x55\x8a\x20\x66\x3e\xb8\x6b\x93\xb4\x08\x14\x03\x99\xe2\x7a\xb6\x2a\x20\x53\x5f\x4b\x7f\xa1\xe5\xff\xee\xec\x1f\x46\x11\x9d\x49\x05\xd8\xdf\xb2\xd6\x47\xc1\xbf\x32\x21\xc5\xc4\xa2\xa0\xd7\xc1\x36\x20\x60\xa6\x24\x7f\xaa\x63\x81\x11\x02\x9e\x31\x61\x16\x5f\xae\x6d\x62\x94\x63\x6e\x01\x46\x20\x64\x00\x73\x4e\x1c\xf0\x7b\x67\x2d\xe2\x9c\x40\x01\x98\x73\x88\x63\xf2\x65\x6a\x2e\x2e\x25\x7e\x95\x3b\xef\x7e\x07\x53\xee\xbf\xbc\x56\xec\x55\xed\xf1\x55\x5a\x73\x93\xde\xfc\x71\xa7\xac\xd0\xc8\xa2\x8e\x02\xbd\xa9\xf7\xfa\x69\x52\x76\xa8\xc5\xc2\x6d\x73\x3c\x57\x5a\x5b\xae\x52\x0b\x8e\x7b\x37\x4d\x59\x74\xa8\x15\x6a\xc8\x46\x98\x47\x52\xef\x54\x61\x02\x90\x18\x72\xe9\x96\x36\x5b\xcd\xae\xb6\xc7\x87\x71\x91\x27\x71\xa8\xb6\x8f\xcc\x74\x89\xb0\xe2\xeb\xcb\x6b\x74\xa9\xb5\x9d\x54\x9a\xc5\x37\x75\x43\xc3\xae\xfd\x54\xd4\x9f\x3f\x61\x2c\xcf\xb2\xaf\x6c\x4a\x05\x26\x11\x0c\x76\xaa\x19\x8f\xf3\xd1\x1d\x2b\xab\x6e\xb8\xe9\x82\x4b\x61\x97\xc2\x7c\xe5\xc4\x8c\xe8\x27\xea\xd8\xf9\x62\x9f\xf6\x5f\x57\x3a\x83\x62\x3b\xbd\x0f\x62\xa2\x8d\x0b\xaf\xbc\x4e\xaa\xcb\x6c\xb7\x5d\x83\x57\x2b\xce\x9b\x5b\x20\xf7\x9d\x12\x8c\x3f\xa1\xab\xaa\xc7\xcd\x5d\xf8\x4a\x07\xf4\x3e\x20\xe2\x14\xe9\xa4\x28\xca\x3e\x2b\xcb\xfd\x01\x3d\x67\x69\x97\xab\x12\x50\x2b\x23\xd3\x74\x50\xfc\x44\x9b\x7c\x5d\x99\x71\x97\x3d\x6f\x99\x9d\x4c\x52\xd5\xd8\x10\xe9\x3b\xee\x05\xb7\x51\x77\xd5\x72\xbd\xde\xeb\xf4\xf1\xe0\xd9\xe9\x78\x52\x7d\x5a\xf5\x08\x4c\x04\x80\x94\xbe\x28\x0a\x26\xcc\x63\x7c\x73\x25\x07\xb0\xb3\x08\x01\xc3\x80\x87\x9c\x42\xfa\xfb\xb9\x42\xb8\x30\x46\x29\x68\x75\x84\x7a\x1d\xb0\x40\x83\x13\x45\x14\x48\x3a\xf2\x3e\xba\x67\x64\x3b\xcc\x08\x44\x53\x00\xc0\xde\x80\x80\xc1\xf0\x19\x2b\x8e\x9a\x2b\xce\xd3\xde\xbe\xa4\xbd\x12\x08\x6a\x28\xc1\x17\xb7\xbe\xaf\xcb\xc9\x3e\xb5\x2e\xb0\xe7\x20\x92\x86\x68\x4a\xaf\x85\x79\xb1\xd4\x84\xfe\x1c\xea\x4d\x2f\xca\x99\x9c\xfb\xf9\x24\x55\xde\x1c\xf9\x62\xaf\xdd\xbf\xcb\x79\xf0\xd2\xfd\x59\x08\x09\xcd\xc2\xfd\x8b\x9a\xae\x5c\x3d\x72\xef\x33\x70\xb4\x51\x97\xe3\x1a\x9b\xf6\xe1\xbc\x6c\x5f\x29\xeb\xf1\x81\xd8\x83\x9d\xce\x73\x3d\x9d\xcd\xb1\xbf\xf2\x23\x42\xa3\xa3\x86\x63\x6f\x75\xa3\x70\x6a\x87\x46\xe1\xe3\xa6\x38\x60\xe6\x69\x3f\x2b\x1e\x80\xb2\x8b\x3c\x23\x28\xd6\xbc\xd4\xbf\xc9\xbd\xa9\x11\x74\x8b\x05\x7e\x57\x59\x9e\x8b\xf1\x2d\x76\xfb\x51\x0c\xaf\xb2\xbe\x05\x6e\xd9\xa5\xc2\xa0\xd4\xcd\xf8\xca\x93\x7c\x9b\x9c\xab\x68\x31\x33\x4b\x74\x10\x38\xdd\x22\x5d\xf3\x2b\xcd\x4f\x2d\xd5\x4d\xa2\xaa\x20\x5a\x44\xc3\x93\x64\xad\x5e\x96\xf2\xad\xcd\x9c\xfe\xb3\xeb\x26\x1d\x51\x61\xf1\x74\x76\x89\xab\x0f\xed\x55\xa9\x16\xbd\xe1\xd6\x23\x34\xce\xda\xb7\x76\x37\xee\x00\xd5\xc0\xee\xbc\xc6\x09\x67\xd9\x50\xba\x4f\x02\x93\xf2\x3d\xba\xb6\x5d\x9d\xda\xd0\x66\xe7\x84\x36\x1b\x21\x7a\x0c\x4c\xf8\x93\x06\x62\xe1\xff\xe6\xe2\xaf\x00\x00\x00\xff\xff\x8c\x6e\xf8\xa2\x4b\x04\x00\x00") +var _test_certsClientTenant10Crt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x94\x3b\xd3\xaa\x48\x17\x85\x73\x7e\xc5\x97\x5b\x5f\x71\xf3\x1a\x9c\x60\x37\xdd\x20\x42\x37\xb6\x34\xa2\x66\x88\x08\x82\x28\xa0\x5c\x7f\xfd\xd4\x79\x4f\xd5\x4c\x30\xb3\xc3\x67\x57\xad\x64\xad\x7a\xfe\xff\xfb\x10\xb1\x6c\xf6\x3f\x83\x1c\x84\x6d\xda\x06\x08\xf2\x43\x25\x6a\xdb\x86\x2c\x0c\x03\x92\x30\x85\xde\x46\x90\xda\x9c\x55\xde\x71\xa0\xf2\x5d\xce\xe6\x55\x97\x04\x8b\x7c\xb0\x1f\xa9\x00\x86\xd2\xa2\xce\x8a\x87\xb5\xe9\x15\x04\xfc\x63\x02\x86\x46\xa2\x07\xbb\x27\x70\xc6\x47\xce\x1d\xd2\x3f\xf1\x55\x63\x4d\x5c\x6e\xb2\xb3\x96\x0e\xa6\x00\x81\x52\x76\x44\x40\x05\x26\xac\x3b\x6b\xdf\xf1\xaa\x99\x79\x64\x20\xcc\x05\x24\x66\xaf\x8c\x12\xc5\xa0\x53\x11\x0c\x54\x70\x8d\xe6\xb7\xe8\x37\x64\x02\x74\x9a\xc3\xdf\x8c\x1a\x64\x20\x39\xf0\x3f\x61\x6f\x61\x04\xff\x84\x49\x11\x26\x2e\x85\xc2\x02\x35\x20\x30\x50\x83\x0a\xe8\xd3\x94\x3c\x28\x28\x96\xe1\xd7\x96\x6f\x5f\x75\xcc\x09\x02\x1e\x00\xcc\x6d\x84\xfb\x9f\xbf\x03\x6f\x1b\x01\xc7\x7b\xe9\xbb\x1b\xca\x21\xf4\xba\x6e\x2a\x23\x4d\xa3\xa2\x8c\x33\xf3\xe8\x16\x6e\xad\xb0\xc5\x43\x3e\xf4\x74\xc5\x92\x90\x2f\xbe\xf2\xb4\x64\x8e\xa2\x06\xd8\x16\xea\x7a\xfd\xdc\x6b\xaf\x94\x86\x81\xde\x4b\xe1\xbd\x73\x4c\xfa\x70\x5f\x32\xdc\xcc\xe3\xa6\xf8\x10\xe5\xa4\x6f\x6c\x7f\x17\x5f\xf0\xa5\x34\x52\xe6\x91\x17\xbe\x85\xba\xb6\xba\x4c\xe1\x69\x7e\xb9\xac\x83\xdb\xb4\xc4\x7d\xec\xe6\xcd\xd4\x5a\x77\x69\x79\x22\x2d\x5b\xa3\xcc\x2d\x3a\x03\xe5\x45\x64\x45\x51\x3a\xc7\x4d\xbf\x1c\xcd\xd3\x90\x6c\x26\xda\x56\xd7\xe8\xba\x1f\x94\x43\x7f\x7f\xf9\x88\x60\xa1\x29\xcf\x2b\xe3\x33\xe7\xe3\x06\xed\x7d\x27\xa9\x61\x11\x3c\x2f\x75\x25\xbb\x75\x72\xaf\xd3\x6d\x7d\x3b\x56\xa7\x0e\xca\x58\xd9\x58\x8f\xfc\x3d\xf6\x9e\xd0\xda\xcd\xb8\xab\x57\xa3\xea\xb3\x85\x77\x38\x34\xef\x34\xbe\xe8\x96\xa9\xca\xe1\x74\xaa\xa5\x04\x76\xb9\xb6\x72\x9f\xfa\x60\x31\xea\x34\xe7\xb7\x5a\xaa\xb5\xfb\x3c\x36\xde\xe6\xf2\x38\xbd\x7d\xcb\x9b\x92\xb8\xd2\xf7\x87\x7d\xeb\xf8\x91\x55\x21\xb3\x74\x1f\xe7\xbd\x67\x59\xf4\x75\xb2\xdc\x44\x7a\x55\x82\x2d\xd3\x51\xfe\x1a\xfb\xb9\xc1\x95\x2e\x4b\xda\x3d\xa4\x14\x01\x58\xf9\x6e\x82\x27\x85\xf9\xef\x86\x6e\xb8\x27\x48\xee\x39\x81\xde\x36\xdf\xf8\xcf\x3e\xb6\x7e\x40\x24\x8c\xc1\x41\x69\xda\xa0\x94\x98\x88\xc7\x18\xf2\xff\x58\x1c\x78\x06\x70\x02\x47\xb5\xfb\x34\x7a\x31\x57\xe3\x6e\x3d\x1f\x63\x8f\x7f\x4f\xad\x64\x26\xfd\x31\x94\x7d\x52\x32\x56\xb5\xc6\xfa\x51\x97\x1b\x6d\x5c\xbb\x33\xee\xe6\x6f\x43\x89\x2a\xab\x9c\x66\x8f\xb3\x8e\x93\xb7\xca\x75\x7d\xab\x86\xd7\xb4\x27\x16\x3e\x5e\xba\xa4\xba\xb1\x10\x4b\xd4\x2e\x86\x73\x3b\xd7\xec\xd3\xfd\x9a\x0c\xd3\x2d\x1a\xb7\x10\x5f\x4b\xc7\x8c\x67\xb3\x4c\xa8\xab\xfb\x81\x24\xd5\x61\x65\x6c\xe3\x3e\x18\x84\x63\x64\x1a\x97\x03\x7e\x28\x67\xd5\x2d\xcb\xad\xb5\x2f\xc9\x2c\x53\x9b\x28\xc0\x47\xf4\x5d\x1a\x7b\xd9\xc9\xb5\xad\x76\xda\x19\x26\x19\x9d\x14\x7d\x14\x1f\x16\x8e\xb8\x34\xe9\xab\x6a\x09\xd1\x94\xa5\xbd\x6a\xa0\xcc\x7b\x0d\x9c\xe5\xb0\x23\xcf\x39\x96\x2e\xc8\x7e\x08\xe4\x88\xbc\x1a\x67\x53\x54\xa7\xcc\x3f\x7a\xc1\xe6\x59\x28\xdf\xb9\x19\x2c\x5e\x34\xb6\xdc\x9b\x77\x77\xec\x9b\xd3\xc5\x43\x8b\x42\x4d\xdb\xb5\x43\xc8\x07\xfe\xda\x14\x41\x5b\x0e\x52\xad\x9b\x8e\x08\xf5\xe2\x29\x40\xde\x0e\x27\x3b\xca\xc8\x1d\xf4\x61\xb7\x4b\x7c\xf4\x75\x53\xf3\xb3\x60\x03\xf4\x1f\xcc\x92\xdd\x50\x9f\x35\x27\x9b\x3b\x75\x7f\xd1\x60\xc1\x1d\xc7\x5b\xad\xb6\x92\xdf\xff\xfa\x25\xfd\xa8\x81\x30\xfc\x6f\x5d\xfc\x15\x00\x00\xff\xff\x08\x5e\x50\x2f\x4b\x04\x00\x00") -func test_certsClientRootCrtBytes() ([]byte, error) { +func test_certsClientTenant10CrtBytes() ([]byte, error) { return bindataRead( - _test_certsClientRootCrt, - "test_certs/client.root.crt", + _test_certsClientTenant10Crt, + "test_certs/client-tenant.10.crt", ) } -func test_certsClientRootCrt() (*asset, error) { - bytes, err := test_certsClientRootCrtBytes() +func test_certsClientTenant10Crt() (*asset, error) { + bytes, err := test_certsClientTenant10CrtBytes() if err != nil { return nil, err } - info := bindataFileInfo{name: "test_certs/client.root.crt", size: 1099, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xf7, 0xcb, 0x2d, 0xd3, 0x3c, 0x3e, 0x4f, 0xa8, 0x14, 0x6f, 0x60, 0x8, 0xe4, 0xea, 0x4, 0x98, 0xc2, 0x45, 0x82, 0x5a, 0x53, 0x23, 0xe1, 0x2c, 0x13, 0x7d, 0x50, 0xf0, 0x1f, 0x2, 0x7, 0x61}} + info := bindataFileInfo{name: "test_certs/client-tenant.10.crt", size: 1099, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xec, 0x74, 0x11, 0xb3, 0xc6, 0xf4, 0x85, 0x1b, 0xe0, 0x4a, 0x4d, 0xe4, 0xab, 0xd0, 0x47, 0xa2, 0x27, 0xe5, 0x79, 0xb1, 0x14, 0x80, 0x3f, 0xe5, 0x3c, 0xe, 0x38, 0x90, 0x5f, 0xa7, 0x3f, 0x36}} return a, nil } -var _test_certsClientRootKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\xa7\x12\xa4\x50\x02\x85\x61\xcf\x53\x8c\xa7\xb6\x68\x9a\x2c\x46\x5c\x72\xce\xd9\xd1\xc4\x26\xe7\x06\x9e\x7e\x6b\x47\xef\xb1\xc7\xfc\xee\xfb\xcf\xff\xc6\x0a\x92\x62\xfe\x71\x3d\xf0\xc7\x76\x95\x10\xf8\xc2\x1f\x4d\x48\xfe\x3d\x90\xa1\x28\xc2\x0c\x14\x16\x00\x8d\x03\x8e\x00\x4e\x31\x31\x6b\x0f\xe5\xd1\x07\xd1\x04\xab\x94\x0b\x95\xc0\x79\xf6\xb2\x0a\xad\x85\x9f\x57\xa4\x61\x47\x7d\x12\x73\x68\x21\xd5\x69\x08\xcd\x5e\x42\xdb\x0f\x64\x91\x5f\x7f\x1e\xfe\xcc\xb5\xda\x8c\xa9\xa9\x34\xa2\xaf\x6c\x7b\x35\xbf\x36\xe2\x3c\xb3\xd5\xe0\x6f\xbf\x36\x69\xd2\xab\xf2\x7e\xb0\x99\x76\x40\x67\x32\xde\x0d\x97\x38\x08\x48\x3b\x86\x16\xa5\x1e\x3f\x3c\x4c\xda\x91\xba\xed\x82\x6f\x18\x4b\xa1\x05\x1f\xaf\xc6\x99\xd5\x97\xe1\xee\x12\x93\x9a\x74\xcd\x95\xce\x52\x26\x6d\x3f\x72\x6a\x9f\xa4\xbc\x89\x7d\x2e\xfa\xd5\x6b\xff\x22\x32\x34\x4b\xb0\xf1\xf6\x22\xb0\x0b\xa0\x7f\x91\xb2\xb0\x00\x67\xcf\xef\xb9\xdc\x41\xde\x51\xcf\x17\x95\x9d\x9c\xc5\x62\x6e\x1c\x99\x2e\x42\x34\xce\xd4\x4e\xcf\x13\xcf\x2a\x36\xbd\xb2\x45\x64\x22\x84\xfc\xec\x3e\x77\x8f\x61\x52\x19\xc3\x56\x82\xc4\xfc\x4e\x1b\x3b\xc5\x61\xd0\x95\x3f\xcf\xb3\x39\x24\xb9\xed\xb4\x8f\xec\x17\x0f\xe6\xf0\x6f\xa3\xd9\x82\x84\x45\x99\x8a\x78\x6c\x13\x34\x54\xaa\x42\xba\x2e\x30\xa7\x8f\xa1\x75\x4b\xdf\xfd\xf7\x92\x62\xac\xb4\x95\x69\x26\xdd\x45\xd3\xd8\xf3\x59\x1f\xd4\xb8\xad\x9f\xc2\x03\x07\xb0\x60\x52\x58\xe0\x70\x0d\xcc\x57\x2c\xe8\x33\xec\x8a\xe6\x04\x72\xde\x49\xc3\x3d\xa0\x24\x5b\x61\xa0\x9e\x4a\xd8\x6b\xa0\x45\x2c\x3f\xd3\xcf\xbc\x23\x24\x77\x66\x39\x81\xb6\x27\x9d\x22\xb4\x90\x04\xc5\xf2\x8a\x7f\x30\x1c\x95\x1c\x18\xd0\x3c\x70\x98\x59\x81\x9a\x9b\xb3\x6d\x2b\x6b\x0d\x31\x8d\x40\x55\x6a\x3a\x67\x77\x54\x79\x7e\x14\x2d\x98\xb4\x54\xe2\x55\xc7\x70\x0d\x22\xe7\x09\x5c\x4b\x1f\x80\x09\xdb\x81\x7b\x52\x2d\xbc\xd3\xf7\x0e\xdf\x15\x67\x40\xf2\x95\xba\xa5\xd0\xbe\xf2\xa9\xe9\xe7\x82\x79\xf5\x8b\xa8\xaa\x79\x87\xb3\x93\x2c\xa0\xa2\x8a\xc6\x7d\x2c\x56\x65\xfd\x7c\xef\xd8\xe6\x4c\xaf\x38\xac\x94\x0a\x1d\x59\x37\x0b\xbb\x7c\x0b\x1d\x07\x99\xc7\x98\x29\xcf\x76\xba\x3e\xdc\x50\x4c\x83\x18\xa5\xf6\x89\xe2\xad\x24\x89\x86\x16\xf1\xfc\xc4\xe3\x5e\x02\x9f\xfc\x57\xf2\x9f\x5e\xa4\xfa\x3d\x6f\xd5\xe4\x1c\xda\xbb\xcb\xfd\x29\x57\x3a\x1e\xca\x25\x5b\x8f\x40\x58\xbc\xfb\xce\xc4\x70\x92\x88\x9f\x92\x63\xee\x71\x09\xe5\x49\xe7\x4a\x78\x5d\x22\x39\xdd\xc8\x45\x16\x27\x06\x41\x58\x55\xd0\x1f\x39\x07\x01\x4f\xf8\x00\xec\xf0\x1c\x53\x50\x9d\xdc\x41\xcb\x69\x0d\x98\x24\x16\x58\x85\x63\x5c\x05\x73\x5d\x75\x9f\x3e\xed\xc2\x8b\xb4\xb6\x5e\x1e\x21\x62\x21\xe9\x0e\x04\x8f\x2e\x22\xcc\x04\xb5\x53\x77\x58\x6b\xf0\xaa\xa5\xf8\xb0\x0e\xa5\xd3\x25\xdc\x70\xec\x79\x06\x2c\x0c\x62\x1c\xba\x3d\x7d\x8d\xb6\x3f\xf8\xb8\x41\xce\x47\xd5\xb6\x14\xb3\x8c\x8c\xe5\xf1\x21\xf3\x64\x07\x76\x92\x93\xa0\x92\x2f\xac\xcf\xdd\x87\xb2\x96\x21\x85\xd2\x15\x26\x14\xe4\x6e\x3e\xfd\x0d\x90\xbd\x22\xd1\xed\x01\x45\x79\x64\x93\x0f\xc6\xe7\x7c\xc6\xc5\x4a\x5a\xce\x15\x44\x13\x51\xf9\xf7\xe2\x5b\xce\x6f\xb9\xef\xde\x6b\xff\x15\x9b\xec\x09\x2d\xf2\x87\x93\x30\x89\x18\x7e\x2a\xa9\x7c\xee\x15\xbe\x76\x3c\x71\xba\x83\x26\xbf\x3f\xbf\x3a\xc6\x37\x8d\x34\x2a\x19\x3f\x5c\x3c\xe5\x56\x38\xb5\x58\x90\x28\x69\x92\x01\x86\x0b\x02\xae\x33\x46\x68\xcd\x8f\x51\x0a\x22\x8b\x7a\x3c\xd6\xb1\xe1\xca\xf6\x75\x7d\x31\xa7\x33\xa4\x15\x69\xbb\x4a\xee\xa6\xfa\xad\x56\x42\x87\x2e\xd4\x97\x38\xcb\x42\x95\x8b\xdc\xab\x00\x5c\x30\x85\x89\xb0\x9a\x3d\x94\xd3\x20\x6b\xcf\x62\xb7\x68\xac\xd2\x4c\xd3\x62\xb2\x51\x21\x91\x11\x13\x0e\xc9\xf3\x8a\x1b\x26\x04\x54\x1a\xe0\xb7\x0a\x26\x09\x38\xbf\x73\x02\x2f\xa3\x40\x3b\xac\x51\x92\x29\xec\xe0\x8f\x03\xe1\xfa\x13\x4e\xb0\xe5\xfa\xf3\xfd\x98\xa9\xab\xcb\xe2\x65\x2c\x1a\x15\xa6\x31\x33\xc2\x54\x8e\xdb\xdf\xfa\xfb\xfb\x64\x6f\x9e\x65\x0f\x02\x55\x8e\x90\x14\xc3\x57\x98\x81\x4f\x1a\x1c\x1d\xcd\x5a\x10\xdb\x0e\xfb\x54\x49\x76\xbf\xd2\xf3\x80\x26\xbe\xbe\x9f\xbd\x2e\xad\x38\x3e\x48\xd5\x80\x0a\xe7\xf7\x5a\x17\xe2\xbd\xf9\x6e\xe3\x9b\x77\xe4\xc5\x73\x3b\x78\x8c\x7c\xa4\x8d\x83\x08\xef\xb7\x48\x42\x15\x3a\xd7\xc9\xa0\x05\x6f\x03\x21\x75\x56\xdf\x0d\xfa\x3b\xb2\x56\xc7\xd5\x09\x4b\xac\x61\x90\x3c\x9b\x95\xcd\x8d\x40\xa4\x67\x56\x62\x18\x55\x04\x12\x25\xca\x64\x94\x71\x5f\x39\x17\xac\xb2\x84\x60\x9b\x29\xed\xf3\x42\xfc\x8e\xec\xb6\x9e\xb6\x29\x47\x1f\x2b\xf0\xd3\x1c\x4f\xeb\x9a\x70\x37\xbb\xcc\x33\x25\x15\x93\x8b\xdd\xdf\x08\x35\x6b\xad\xc9\x63\x96\xaa\x47\x38\x03\x3f\xa7\xa8\xfb\x41\x16\xde\xb6\xde\x5c\x82\x3e\xaf\x11\x19\x94\x61\x21\x12\xab\x92\x20\xc7\x4d\x85\x36\xa7\x71\xfc\x31\xa2\xb6\x8e\x99\x02\x08\x7e\x0d\x76\x5c\x92\xf7\xca\x24\x8f\x28\x71\xe9\x00\x72\xf5\x66\x5b\xc8\x65\xa9\xa3\x73\x34\xb6\x76\x78\xcd\x60\x34\xd9\x40\xa2\x60\x77\xec\x35\x8f\x03\x9b\x6d\x3d\x64\x65\xd8\xf2\xd0\x6e\x12\x34\x3d\x80\xc9\xb9\x6d\x82\xd7\xf5\x20\xd8\xfb\xf5\x38\xc3\x8f\x54\x53\x68\x0a\x86\xde\x5e\xbb\xb6\x60\xa7\x28\x75\x5b\xb3\x15\x61\xfc\x20\x47\xa9\x1a\xc2\x2b\x25\xf1\xc5\x73\xbf\xb9\x7b\x0f\x72\x73\x6c\xf8\x53\x11\xdd\xc8\x1e\xf2\xd8\xcb\x60\x06\x37\x21\x25\x94\x07\x05\x5a\x25\xd8\x25\x62\x13\x1b\x49\xa6\x9f\xeb\x29\xa3\xb2\x9f\xb6\x4b\x44\x74\x9f\x50\xf6\x8a\x8a\x90\x72\x58\x89\xc4\x94\x98\x29\x13\x3d\x31\xbc\x73\x63\xae\xeb\xbf\x7f\xa1\x7f\xac\x08\x26\xff\xff\xb9\xf9\x6f\x00\x00\x00\xff\xff\x1e\x52\x11\x24\x8f\x06\x00\x00") +var _test_certsClientTenant10Key = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x95\x37\x12\xab\x5a\x02\x05\x73\x56\xf1\x72\x6a\x4a\x08\x4f\xf0\x83\x8b\x77\xc2\xfb\x0c\xef\x84\x47\xb8\xd5\x4f\xfd\x37\xe9\x9c\xf4\x24\x5d\x9d\xf4\x7f\xfe\x1d\x2b\x48\x8a\xf1\xc7\x71\xc1\x1f\xcb\x51\x02\xe0\x09\x7f\x34\x21\xfe\xfb\x40\x1f\x45\x11\x66\xa0\xb0\x00\x68\x1c\xb0\x05\xf0\x50\x6e\x9e\x6c\x41\xb7\x52\x34\x31\xec\x7b\x27\x10\xa3\xe2\x04\x2e\xc1\x91\x3b\x5f\xc6\x07\x92\xf3\xe6\x13\x7d\x7b\x33\xab\x68\xb8\x73\x77\x03\x0a\xc0\x2d\x30\x95\xa5\x7a\xcc\x8c\xf3\xe2\xd7\xa0\xc5\x91\xba\x1b\x4f\x69\x89\xd7\x29\x3b\x41\x95\xe8\xac\x21\x32\x2f\x57\x68\x23\xc9\x46\x93\x7a\xe2\xbd\x46\x3d\xb1\x60\x67\x7e\x68\xfe\xfe\xc2\x90\x14\x56\xa2\x9c\xc3\x35\x2d\x73\x38\x49\x53\xcd\x08\x7f\x2f\xbd\xab\x40\xec\x12\xfa\x59\xc7\x84\xd4\x0c\xc3\x64\x02\x92\x36\xb7\x26\xa0\xa3\x23\x7f\xf4\x25\x44\x87\x87\x2e\x84\x5c\x26\x90\x1a\x72\x00\xc2\xec\x6a\xf8\xf8\x56\xbb\x72\x6f\x7d\xbc\x8b\x60\x16\xd5\x30\x5d\xaa\x9b\x1c\x47\x72\x62\xc9\x31\x48\x03\xea\x54\x47\xc3\x72\xa6\x89\xfc\x6c\x7c\xcf\xac\x47\xde\xa6\x3f\x7a\xf7\xbb\x12\xf2\x7a\x3f\x25\x15\x59\x2a\xae\xa6\xa8\xde\xdb\x9b\x1c\x6b\x2e\x66\x7e\x37\x51\xd0\x4e\xe7\x71\x0b\xaa\x19\xc9\x9e\xb6\x44\x90\x3e\x47\x18\x7f\x49\xa1\xe9\x36\x6c\xd4\x8a\x07\xf1\xa8\xb6\x1f\x1a\x68\xb1\x9d\xa4\xc5\x07\xfe\x69\x9a\x4e\x7d\x5f\x2d\x36\x93\xfe\x53\x4e\x9f\x83\xb2\x3b\x18\xf4\x86\x8e\x47\x6b\x77\x2a\x3c\xb0\x01\x0b\x26\x85\x05\x42\xe0\x03\xfd\xaa\x61\xc9\x5e\x78\x03\x81\xa1\xf6\x71\xf0\xc5\xd9\x3d\xed\x7e\x7c\x6a\x92\xe8\x5e\xd8\x5f\x4e\xdf\xd6\xcb\xbd\x07\xaf\xa6\x22\xb7\x3b\xba\x4e\xc6\xac\x87\x75\x8e\xd6\xa5\x89\xdb\x25\x91\x3e\x1b\x60\xa9\x72\x11\x48\x1b\xcd\x21\x89\x9c\x76\x69\x26\x90\x94\xc9\x70\x74\x37\xc3\x3c\x3a\x27\xee\xbb\x39\x37\xbb\x8b\x39\x90\xdd\xa6\x83\xcd\x71\x92\x3d\xe4\x27\x9a\xdd\xba\x9a\x04\x58\x2c\xaf\xd4\xdb\xf8\xfc\x7e\x5e\x69\x82\x42\x3d\xb2\x30\xf4\xb5\x3b\xa3\xb5\x66\xbe\x91\x99\x1e\x81\xb2\x5c\x4b\x86\xf0\x62\xf7\x88\x32\x22\x16\x75\xbd\x56\x45\x11\xa4\xd4\x3e\x51\xdb\x6e\xe5\xc6\xd0\x99\x9f\x2b\xf0\x7e\x50\x8a\xb5\xd7\x43\xf1\x1a\x37\xa0\x9b\xd7\xaa\xb7\xce\x9b\xff\xa0\x7c\x8e\xb0\x54\x26\x89\x72\x1e\xf1\x11\xb8\x0b\x3f\x2f\xf1\x69\x73\x49\xda\xb7\xdd\x1d\x27\xd9\x90\x5c\x3c\xd3\xa0\xfd\xeb\xd3\x2a\xa1\x12\x97\x10\x67\xcf\x59\x51\xbf\x89\x1a\x34\xec\xa1\xe6\xbe\x1c\x11\xc6\xf4\xbb\x3f\x7c\x76\x13\xc4\x6d\x12\xe2\x22\x8b\x07\x76\x72\x3c\xb7\x63\x7d\x2e\x0d\x32\xfd\x55\x48\xc2\x39\xf5\x77\xd6\x8a\xbd\xb9\x43\x08\xa1\xab\xcd\x26\x70\x75\x2c\x00\xa4\xef\x1a\x7c\x13\x62\xfe\x19\x24\xa1\x25\x25\x19\x76\x68\xad\x71\xa5\x42\xf3\xc7\xaa\xd7\x6d\x31\xe6\x8b\xe3\x55\xa5\x11\x93\x39\xc5\x9e\x46\xfb\x56\xa4\x50\xc9\x9f\x98\x19\x78\xa3\x3d\xd7\x74\x1f\x94\xa5\x77\x4f\x40\xd1\x99\x15\x99\x9e\x67\xad\x61\xb6\xf6\xb4\x9f\x89\x94\xcd\xcd\xbb\x5d\x5e\x98\xee\x7e\xec\xee\x06\xb0\xe1\xc5\x06\xbd\xd5\xa9\x0c\x74\x4c\x78\x50\x74\x56\x50\xc9\xeb\x9b\xf9\x38\x84\x4b\xfd\xae\x9b\x3a\xdb\x7c\xdc\x13\xa1\x25\xe0\x7a\xc6\x94\x68\x7d\xed\x74\x00\x33\x1e\x2e\x1f\x95\x5a\xc7\x78\xf9\x3f\xe2\x97\x71\x1e\x10\xbc\xaf\x5d\x9c\xc6\xcf\x33\x47\x22\x8c\x47\xbe\x6f\x3e\x6d\x4d\x08\x64\x73\x8c\x45\x8f\xc9\x61\xba\x44\xa5\x12\xa6\xf2\xe8\x6f\x1f\x85\xb7\x65\x05\xa0\x7d\xfe\xd4\x31\xd5\x33\x98\xe8\xbe\xdf\x90\x31\xf1\x68\x6d\xf5\x65\x75\x78\x1c\xc7\xe4\x96\xa8\x85\x5d\xc6\xae\x48\x2e\xf0\x5f\x77\x96\x03\xe9\x29\x10\xa4\x58\x09\x67\xb8\x3c\xe1\xe4\xfc\x97\xe3\xa1\xeb\x80\xee\x71\x61\xea\xd8\x19\xb1\x50\x06\xce\xcf\xef\xcd\xda\x33\xe1\x61\x02\x3c\x9f\x36\x60\x0c\x1f\x60\x25\xda\x25\xf3\xeb\xd8\x44\xd1\x72\x9d\x10\xa5\xff\x22\xef\x9c\xfe\x65\xeb\xa2\x98\x4a\x7f\x92\xb2\x7e\x05\xa3\xaf\x43\x95\x70\x93\x44\xc4\xe0\xcc\xb0\xad\x2b\x03\xc4\xb9\x8c\xab\x62\x3a\x5b\x3b\xae\xed\xc7\x44\xb1\x2c\x98\x01\x90\xaa\x8a\x21\x0b\x9d\x46\x24\xbc\x99\x71\x4c\x66\x12\x12\x6e\xe4\xdf\xed\x5b\x01\xa4\x93\xbe\x3c\x37\xc9\x1b\xc5\x9a\x5e\xbf\xfd\x0f\x50\x71\x65\x1f\x95\x36\xa8\x30\xf5\x33\x6b\x88\x7e\x4b\x3b\xf3\xf3\x7e\x3e\x1d\x18\xe3\x25\x78\xf7\x23\x19\x11\x9f\xe5\x6f\x94\xce\x31\x6f\xaf\x21\x78\xf8\xaa\x85\xdd\x53\xd6\x6e\xb0\x24\xf5\x19\xec\xa8\x09\x7a\xe9\x5f\xcb\x40\x26\x8c\x57\xfb\x3d\x28\xd3\x21\x81\x96\xd9\x69\xe4\xa6\xac\x61\x8d\x15\x85\xe1\x99\x6b\xc2\x24\x4d\xa7\x6b\x01\xbd\xa2\xdf\x88\x20\x43\xde\xc7\x02\x91\x72\xc9\x74\xd3\x36\xdd\xa9\x98\x36\xed\x0e\x4a\x6c\xf3\xf8\x7a\xb4\x9b\x64\xed\x64\x9e\x48\xe0\x71\x2c\x9c\x4c\xc1\xfc\x55\xa3\x04\x20\xe8\xd7\x12\x1d\x05\x42\x9f\x2b\x4f\x8d\x72\x4d\xdd\x39\xbc\xf0\xaa\x32\x36\xc2\xdf\xa9\x23\x82\x01\xf7\xc2\x28\x50\xeb\x61\x5d\x87\xe6\x4f\x5f\xe9\xa7\x24\x84\x47\x41\x1e\x11\xdf\xc5\x78\x38\x8a\xfa\xeb\x52\xde\x00\x91\xaa\x49\xa8\xb6\xc6\xd6\x36\xe7\x25\xe7\xbc\x54\xed\xe4\x49\x62\x63\xd1\xd5\x97\x6d\xed\x8f\x90\xc5\xf4\x47\xbf\x69\xb2\x7c\x33\x69\x7a\xde\x38\xd7\x79\x8a\x90\x04\xb7\xc1\xba\x30\x66\x17\x14\x74\x14\x6e\x75\xf5\x38\xec\x3d\xb9\x29\xe5\x5f\x10\x71\x70\x68\x97\x6f\x72\xb9\x14\x66\x94\x3d\x39\x54\xa8\x61\x54\x1e\x2c\xc9\x51\x25\xe9\x24\xed\x46\x3d\x6d\xe1\x4e\x35\x6c\x5e\xd7\x55\x4d\x03\x74\xa4\x5d\xe1\x68\x97\x52\xe2\x15\x31\x19\xbd\xaa\x5b\x4d\xf1\xd1\x3e\x30\x73\x0b\xa1\xee\xdf\x26\x35\x1a\x23\xad\xb5\x59\x46\xc4\x5b\x59\xa2\x47\xe3\x2c\xf1\x0f\xfc\xf3\x0f\xf4\x37\x2b\x82\xc1\xff\xff\xdc\xfc\x37\x00\x00\xff\xff\xaf\xbf\x82\x6f\x8f\x06\x00\x00") -func test_certsClientRootKeyBytes() ([]byte, error) { +func test_certsClientTenant10KeyBytes() ([]byte, error) { return bindataRead( - _test_certsClientRootKey, - "test_certs/client.root.key", + _test_certsClientTenant10Key, + "test_certs/client-tenant.10.key", ) } -func test_certsClientRootKey() (*asset, error) { - bytes, err := test_certsClientRootKeyBytes() +func test_certsClientTenant10Key() (*asset, error) { + bytes, err := test_certsClientTenant10KeyBytes() if err != nil { return nil, err } - info := bindataFileInfo{name: "test_certs/client.root.key", size: 1679, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x8e, 0x87, 0x86, 0xc9, 0x19, 0xfb, 0xac, 0xaf, 0xa2, 0x39, 0x4, 0xc, 0xa2, 0x6e, 0x8a, 0x4d, 0x19, 0x82, 0x95, 0x4c, 0xb2, 0x53, 0xb4, 0x83, 0xd0, 0x4b, 0x54, 0x72, 0x3, 0xec, 0x77, 0xc9}} + info := bindataFileInfo{name: "test_certs/client-tenant.10.key", size: 1679, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x1d, 0x51, 0x8, 0x9b, 0x10, 0x4f, 0xee, 0xda, 0x9d, 0xf4, 0xba, 0x55, 0x7f, 0xbe, 0x2c, 0x8c, 0xe0, 0xab, 0x9f, 0xf2, 0xde, 0x59, 0xa6, 0x49, 0xbb, 0xf9, 0x8c, 0x68, 0xc3, 0x96, 0xb1, 0xf4}} return a, nil } -var _test_certsClientTestuserCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x94\xbb\xd2\xb2\x48\x10\x86\x73\xae\x62\x73\x6a\x0b\x04\x15\x08\x36\x98\x81\x01\x87\xe1\x2c\x82\x9a\x71\x72\x10\x10\x11\x94\x01\xaf\x7e\xeb\xfb\x82\x3f\xd9\xed\xa8\xeb\xed\xaa\x37\xe9\xa7\x9e\xbf\x7f\x06\x22\x0b\x7b\x7f\xe9\x28\x8a\xb1\x89\x75\x10\xa3\xdf\x94\x73\x31\x36\xa0\xa1\xeb\xa0\x5a\x29\x60\x18\x02\x8a\x23\x10\xa8\x60\xbb\xcb\x6f\xc1\x68\x6d\x1e\x49\xfb\x3a\x7f\x02\xda\x13\xcc\x8c\xf0\x62\x93\xe7\x15\xd7\x73\xe1\x81\x10\x39\x30\x04\x8c\x23\x5f\x74\x74\x21\xb0\xc0\xe6\x84\xf4\xda\xb5\x43\x49\x6b\x32\xd9\x9e\x2f\xa9\xf7\x74\xa3\x13\x43\xec\x62\x24\x61\x68\x20\xb6\x18\xb9\xe4\x8d\xc5\x43\xab\x2f\x12\xa5\xa1\x88\xd8\xa1\x2e\x3c\xce\x6d\x00\xf3\x1a\xb0\x73\xe3\x0b\xf3\x1a\xb4\xa4\x75\xe1\xb9\xcd\xe9\x67\x17\xff\x64\x0d\xe8\xdd\x08\x33\x04\x7e\xcb\x08\x62\xdd\x9f\x32\xee\x22\xd1\x05\xc5\x20\x80\xd4\x4b\x20\x70\x63\xfd\x10\x75\x85\x1c\x6d\x0a\x29\x59\x5d\x8c\x21\x6e\x80\x07\x69\xfb\xaa\xdb\xbb\xa5\x31\x11\x82\x10\x99\x00\xf8\x3a\x08\x55\xf0\x73\xe7\x74\x4a\x74\x10\x22\x30\xe0\x73\xfc\x96\xe4\x59\x8a\x76\xdd\x37\x52\x2e\xea\xce\xd3\x6a\x37\xed\xe8\x3d\xec\x02\x32\xb4\xe3\x20\xbb\xfd\x36\x28\xec\x38\xd6\x1d\xbc\xb6\x69\xa0\xca\x26\xc1\x1e\x37\x9a\xc9\x3c\xaf\x46\xc6\xbf\xd6\xe5\x74\xfe\x58\xde\x55\x9e\xd6\x55\xf1\x4b\x2a\x97\x76\xf2\x40\xfc\xae\xbc\x69\xf9\x62\x7c\x79\xad\xd2\x44\x43\x28\xab\x72\xd9\xb7\xce\x25\x24\xaa\x1c\x19\xbc\xca\xa5\x18\x14\x45\x37\xf2\xfc\x71\xba\x3b\x9d\x2d\x3e\xdc\xe3\x62\x13\xd1\x89\x55\xa7\x1e\x6d\x70\xd4\xaa\x5e\xe3\xdf\xce\x73\x14\xde\xd4\xa7\x77\xdb\x66\xad\x31\x23\x7e\x93\x6b\x45\xb9\x34\xd2\x96\x53\x72\x0b\xbc\xc7\x2d\x09\x8d\xe4\x9b\x0c\x71\xa4\x9f\x06\x2d\xce\xb0\x06\x49\xd6\xb9\x6a\xa9\x08\x8f\x6c\x7f\x57\xcc\x51\xb5\xea\x21\x1b\x74\x45\xbc\x7a\xa0\x0c\x5e\xc2\xd9\x5a\xcb\xe6\x05\x6c\x0e\xcc\x9f\x8f\x9b\xdc\x8d\x1a\x86\x01\x2c\xd7\x0d\x61\xf7\x11\x39\x41\xff\xd6\x66\xb3\xc9\x05\x37\x9f\xdf\x82\x4d\x8d\x82\xbd\x74\x5e\xe6\xd5\x93\xcc\xfa\x42\x73\x3e\x93\xaf\xab\x9f\x6d\x74\xcc\x38\x4b\x5c\x4f\x7c\xaf\x02\x43\x4a\xd5\xed\x79\x55\x76\xe7\xbd\x35\x8e\xe9\xd0\xe0\x30\x2f\x42\x6c\x80\x10\xc0\xe7\x5a\x30\x3b\x06\xfe\xcf\xa7\x0e\xa1\x0a\xc1\x4d\x45\x10\xb8\x3a\xcc\x00\xe3\x7e\x41\x89\xc4\x0e\x02\xc6\x74\x7a\xc1\x84\x5d\x20\x0c\x4f\x07\xc0\xfe\x97\x3c\x83\x52\x04\x81\xb9\x53\xc3\x83\xef\x4b\xb7\xfd\xc8\x15\xe2\x11\xad\x99\x7a\x4b\xcb\x77\xb2\x9f\x42\x83\x08\xc8\x37\xc4\x08\x68\xd7\x84\x57\x16\x62\xd8\x8b\xed\xb0\xa4\x42\x85\x34\x00\x6d\x9b\xf8\x26\xdd\x57\x8a\xea\x8e\xf1\x57\x3e\x6d\x96\x9c\x72\x8a\x54\x91\x89\x1d\xce\xf6\xee\x75\x8f\xc9\xa6\x78\xc9\xaf\xa7\x95\x55\xb3\xe9\x6c\x75\xb6\xa5\xe7\x61\x57\x94\x02\x70\xfa\x02\xe6\xb7\xf7\xe0\xfb\xfd\x86\xdf\x0f\x96\xd2\x7f\x53\xf1\x64\x4d\x0d\xcf\x39\x2e\xcd\xf4\xab\x50\x4b\x20\x58\x21\xd9\x39\xb6\xcc\x5b\xa3\x68\xbc\xea\x87\x20\x95\x9d\xb9\xb4\x1d\xbf\xdc\xe6\x9a\x5d\xa7\x5b\x52\xb9\xd7\xf4\xb3\x5d\x8e\xb7\x43\x3e\x85\xb4\xca\x09\x6e\x01\xd7\x1f\xb5\x69\xe8\x3a\x5b\x4c\xa2\xde\xdc\xf4\x96\x73\x5e\xb7\xa5\x81\xee\xaa\xb0\xe8\x5e\xfd\xc6\xd6\x14\x06\x7e\x4b\x04\xe7\x80\xbe\x3c\x7f\x5d\x35\xa9\xda\x45\x67\x77\x7e\x6f\xf2\xe0\x93\x5a\x2d\x07\xdd\xf7\x75\xba\xf4\x37\xe2\xa3\x34\x7e\xac\x99\x9c\x7e\x6b\xf6\x5c\x80\xd5\x3e\x0a\x92\x6a\xf2\xa3\xc7\x4f\x45\x2f\x4b\x75\x78\x4e\x11\x31\xe1\xb4\x4e\xe9\x7a\xfc\xde\x69\x2f\x6b\x01\x22\x1e\xe7\x78\x9e\xa5\x03\x7a\xaa\x70\xfb\x0f\xf7\xab\x08\xe4\x19\xff\xd5\xc6\xbf\x01\x00\x00\xff\xff\x7c\xaa\xa5\x79\x53\x04\x00\x00") +var _test_certsClientTenant11Crt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x94\x3b\xd3\xaa\x48\x17\x85\x73\x7e\xc5\x97\x53\x5f\x89\x80\x02\xc1\x09\x76\x43\x03\x8d\x34\xd8\xdc\x14\x33\xb9\x08\x82\x82\x17\x04\xe4\xd7\x4f\xbd\xe7\x54\xcd\x04\x33\x3b\x7c\x76\xd5\x4a\xd6\xaa\xe7\xff\x3f\x87\xb0\x45\xbc\xff\xe9\x38\x88\x88\x49\x74\x88\xf0\x6f\xca\x51\x42\xf4\x55\xa4\xeb\x50\x1e\x2a\x98\x08\x82\x8a\xb0\x8c\x3c\x2c\x50\xd5\x9d\x76\x2e\x7c\x79\x70\x47\x2a\x15\x42\xd4\x80\x87\xaa\xf6\x59\xb7\x57\x4b\x9b\x04\x04\xec\x6d\x82\x01\x2f\x8e\x06\x64\xc2\x90\x1a\x09\x63\x3b\x3c\xdd\x8c\x4c\xf4\x5e\xf9\x5d\xab\x53\xb1\x9a\xcd\x08\x22\x54\x79\x09\x02\x1a\x19\xd8\x1b\x53\x71\xf8\x66\xa2\xd9\x9c\x75\x64\xb0\x08\x4a\x73\x12\xbe\x1c\x35\x40\xa2\x51\x3c\xd3\x88\x89\xb4\xa9\xcf\x3f\xd0\x8b\x40\xa2\x0d\xfc\xcd\xa8\x8e\x67\xdc\x00\xfb\x13\xd6\x47\x7a\xfc\x4f\x18\x77\x36\xb0\x4b\xa1\xb5\x60\x1d\x63\x98\xa9\x4e\x23\x3c\x55\x15\xbe\x52\x10\x2c\x3d\x7c\x5a\x21\xc9\x24\x83\x61\x04\x2c\x06\x90\x09\x32\x26\xf8\xf9\xef\xa0\x27\x08\x98\xd1\x71\x56\xe4\x2d\xaa\xf0\x79\xb6\x7a\x08\xdb\xf7\x6e\x5b\x97\xa3\x3f\xfa\xb9\x33\x8c\xf7\x57\xe7\x1e\x27\x3c\xf8\xfb\xee\x71\xd1\x5e\xea\xda\x68\xb6\xf5\xe3\x9e\x58\x2c\x4f\x2e\x81\x76\x39\xa9\xfb\xf7\xd7\xe3\xa6\x57\xa7\xe8\xbd\x5d\x97\x7b\x55\x43\xa5\x24\x8d\xd3\x7e\xde\xb7\x8b\x05\x3c\x2e\x90\xea\xec\xa4\x3c\x29\xb3\xd5\x4a\xd2\x67\xb6\xb5\xc7\x0a\xa7\x7e\xcd\x6f\xc5\x7b\xfe\xd1\xc4\xa8\xb9\x0e\x33\x77\xf3\xb2\xb7\xa2\x24\x7d\xef\x7e\xe7\x62\x45\x60\xab\x8e\x2c\x80\xbc\x7f\x64\xf9\x79\xae\x71\xf5\x3d\xdc\x34\x34\x6f\xe7\xda\xeb\xfd\xd6\xce\xa9\x3e\xe2\x65\x5d\x31\xd7\xf7\x93\xf2\xfd\xa5\x32\xa7\xc6\x7c\x63\xda\x6b\xcb\x2a\x8f\xb1\x10\xc8\xc5\x70\xa8\x54\xc5\xcf\x0c\xc7\xd1\x15\x3d\x94\xe5\xf6\x64\xbf\x7c\xd2\x0b\xd3\xd0\x83\xd4\xa4\xdb\x0c\x6a\xe9\x5a\x5f\x1a\xa5\x90\xb7\x9b\xb4\xae\xb9\x5b\x6e\x11\xc7\x89\x4a\x88\x03\x2c\x48\xfc\xd0\x69\xa9\x3d\x52\xfb\xa2\x76\x2d\x69\x33\x7c\xd8\xb0\x71\xad\xea\xb1\xe4\x88\xe1\x47\xe5\xb3\x52\x83\xcf\xb3\xb1\x16\x4f\x5a\x4f\xe4\xe1\x1c\x4c\xce\xed\xdc\xca\x55\xa3\x7a\x50\x98\x38\x3c\x87\xe9\x14\x04\x7b\xa8\x28\x02\xb0\x1a\x67\x81\x1b\x05\xf9\xa7\xa1\xc2\x98\x30\x5a\x4d\x0c\xc3\x44\xcc\xde\xf8\xb3\x0f\x3b\x8c\x31\x67\x18\xb0\x43\x55\xf5\x42\x15\x36\x11\xcb\x0d\xf8\xaf\xc5\x81\xaf\x03\xc3\x70\x5a\x54\xad\x0c\xf8\xec\xf6\x4c\x58\xd8\x9d\x11\x5b\xe7\x15\x57\x78\xc8\xf5\x44\xd9\xf2\x5b\xd4\x4b\x1f\x2c\x57\x9f\xe3\x09\xab\x10\xcc\x7c\x77\xf4\x68\x1f\x0a\xeb\x8d\x92\x6e\x48\x66\x8b\xce\xe6\x4c\x41\xec\x6e\x48\x7a\x5f\xad\x78\x15\x57\xa1\xed\x7e\x7d\x4e\x5a\x2d\xd5\xea\x74\x15\x85\x96\xb7\xea\xfd\x21\x2d\x28\xbf\x7b\xf9\x6a\x96\xcd\x8a\xfc\x48\x1e\xb0\x3c\x6d\xe4\xc2\x02\xba\xc2\xbb\x83\x10\xae\x6d\x76\x3d\xc1\x17\x66\xec\x20\xcb\x97\xca\x90\x3b\x8d\xc8\x1e\x3e\x8d\x35\xe7\xa5\x65\xb4\xe9\xe9\x62\x2d\x5e\x31\x59\x7b\x9b\xe4\x9b\x17\x32\x8c\x33\x7f\xb7\x17\xcd\xb6\x57\x02\xe2\x87\x58\x2c\xee\xb7\xa5\xe2\x3f\xda\x60\x1f\x9d\x5d\xcf\x97\x0f\xee\x95\x1e\x4c\xbe\x2c\x8e\xc3\x4e\x57\x93\xb3\x31\x34\xc2\x22\x67\x97\x86\x26\x49\x17\x2b\xc7\xe7\x49\x9b\xd0\xe5\xc2\xd2\x94\xf5\xd9\x3e\x3c\x47\xab\xfb\x23\xb5\x83\x79\xba\xef\x67\x2d\xdc\x92\x61\xe6\x5c\xd0\x87\x53\x71\x03\x46\x5a\x45\x53\xa4\xcc\xbf\x98\xae\x1e\xed\xc8\x10\x90\x43\x34\x4f\x87\x83\x60\xe5\x05\x20\xf5\xc3\x96\xc0\x7c\x01\x22\xe5\xe0\x9e\x97\xc7\x3e\x7e\x7b\xdd\x5a\x0b\x7d\xee\x00\xbf\x7e\x71\xbf\xd5\x80\x3d\xe3\xdf\xba\xf8\x2b\x00\x00\xff\xff\xb0\x47\xb6\xf9\x4b\x04\x00\x00") -func test_certsClientTestuserCrtBytes() ([]byte, error) { +func test_certsClientTenant11CrtBytes() ([]byte, error) { return bindataRead( - _test_certsClientTestuserCrt, - "test_certs/client.testuser.crt", + _test_certsClientTenant11Crt, + "test_certs/client-tenant.11.crt", ) } -func test_certsClientTestuserCrt() (*asset, error) { - bytes, err := test_certsClientTestuserCrtBytes() +func test_certsClientTenant11Crt() (*asset, error) { + bytes, err := test_certsClientTenant11CrtBytes() if err != nil { return nil, err } - info := bindataFileInfo{name: "test_certs/client.testuser.crt", size: 1107, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x2d, 0x72, 0x17, 0xd9, 0x6e, 0x84, 0x80, 0x8, 0xf5, 0xfa, 0x8d, 0x69, 0x4d, 0xca, 0x64, 0xc0, 0xce, 0x5a, 0x80, 0x86, 0xeb, 0x19, 0x87, 0x64, 0x26, 0x6c, 0xf2, 0x5, 0x38, 0x44, 0xcb, 0xd6}} + info := bindataFileInfo{name: "test_certs/client-tenant.11.crt", size: 1099, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x6, 0x84, 0xc7, 0x2c, 0x14, 0xd3, 0x12, 0x42, 0xfa, 0x2b, 0xee, 0xb, 0x62, 0x1b, 0x10, 0x4f, 0x55, 0x11, 0x73, 0x3f, 0xf1, 0x4a, 0xba, 0x18, 0xc5, 0x68, 0x57, 0xf3, 0x47, 0xd2, 0x20, 0xe4}} return a, nil } -var _test_certsClientTestuserKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\xa7\x12\xac\x5a\x02\x85\x61\xcf\x53\x1c\xbf\x6b\x0a\x9a\x8c\x18\x41\x6e\x62\x93\x93\x23\x35\x4d\xce\xf1\xe9\xa7\xee\x19\x7b\x97\x5d\xe6\x77\xdf\x7f\xfe\x19\x27\xca\x8a\xf9\xc7\x71\xd9\x3f\x96\xa3\x04\xac\x27\xfe\xd1\xc4\xf8\xef\x03\x19\x8a\x22\x8e\x95\xc2\xb1\xac\xc6\xb3\xb6\xc8\x4e\x4a\xe4\x6d\x28\x76\xa0\x0e\xd1\x3d\x0e\x15\xd3\x84\xc9\xfc\x8c\xb0\xab\x6a\xbb\xb3\xb4\xa9\x5d\x26\xcc\x18\x70\x2b\x57\x3d\x8f\xd7\x95\xbb\x85\x42\x8b\xc6\x24\x4d\x31\x17\x29\x38\x8e\x5b\x48\xc1\x7c\x5f\x7e\xb4\xcb\x66\x82\xad\xf7\x4d\x7d\x8a\x0a\x2b\xd4\xa0\x17\x01\x51\x7c\x99\xec\x12\x1e\xc0\x94\x0c\x22\xc0\x45\x59\x5c\x64\xab\xc7\x90\xad\xd1\x98\x23\x00\x3a\x54\xd8\x3c\xef\x16\x00\xdc\xb5\xd6\x3b\x15\xe9\x0d\xf7\x52\x35\x44\xf7\x68\xfd\xb7\xa8\xac\xcb\x94\x03\x03\x36\x7d\x5c\xe0\xad\xfa\x54\xb5\xaa\x9e\xad\x70\x88\xe0\x05\x65\x4c\x5e\x5c\x0d\x8a\x53\x99\xcc\x6e\x0b\xae\xd9\x42\xf0\x04\x93\xe7\xf0\xfe\xc4\x78\xa9\xc2\x70\x5a\xda\x19\x74\x41\xc1\x7d\x4a\xd6\x94\xb4\xd0\xf2\x6f\x4a\x27\x9e\x42\x12\x93\x2d\xac\x19\x86\x22\xf9\x2e\x9a\x99\x55\xd9\x63\xdf\x8d\xa0\x16\x7e\x9c\x6d\x71\xc5\xfd\xd2\xce\x7a\x11\x75\x6b\xd8\x98\x43\x6a\x32\xd8\xc8\x8e\x0d\x56\x2b\x21\x3f\x67\x1e\x60\x80\xf6\xb1\x73\xc8\x19\x7d\x5f\xa1\x0f\x4f\xef\xb8\xe3\xa6\x32\x72\xfb\x60\xa0\x59\x01\x0d\x69\x3c\xba\x29\x22\x22\xe5\x65\x09\xa7\x46\xb1\xb3\xdc\x56\x04\xd6\x66\x39\x76\x54\x38\x96\x9b\x6a\x20\x3d\x16\x5c\x2d\x41\x23\x72\x22\xb4\xf9\xad\xd0\x53\x2b\xbf\x71\x56\x18\x34\xa4\xd5\xc7\x97\xc0\x18\xbc\xbf\xf5\x79\xf7\xa9\x36\x55\x42\x32\xed\x81\x77\x5c\xff\xe6\x38\xa2\x11\xd1\x45\xe6\xf7\x1a\xc8\xb0\x65\x9d\x68\x7e\x64\x18\x94\x31\xa5\xe3\x92\x7d\x8b\x7d\x62\x42\xaa\xac\xb6\xb6\x00\xf3\x8b\xc8\x36\xb9\x9c\x9b\x08\x36\x43\x44\x04\xa4\x77\x7b\x97\x7f\xd9\x73\x04\xc2\x2c\x56\x18\x8c\x1e\x7f\x44\x7c\x7e\xa7\x14\x3e\x7c\x08\x77\xc8\xcf\xc5\x8a\xb1\xde\xab\x76\xc5\x69\x66\x72\xa9\xf3\x97\xea\x0e\xfe\xac\x40\x6e\xbf\xb4\xae\x76\x3b\x2d\x9d\x75\x43\x54\x02\xa0\x20\x43\x25\x5c\xb1\x6f\xd5\x16\x58\x7c\x16\xbe\x75\x06\x1a\xbe\x66\x36\x01\xaa\x0a\xdb\x11\x0b\x90\x74\xc3\xab\xe5\xde\x7d\x3a\xc8\xaa\x4a\xd7\xee\x34\x3d\xf8\xf9\xb3\xf5\x9e\x7a\x59\x51\x78\x9a\xcd\xf2\x42\xb5\x57\x84\x8a\x11\xd5\xe3\x94\x4d\xa0\x08\x54\x3f\xeb\xf1\x26\xb5\x0c\x69\x79\x5c\x44\xeb\x75\x19\x77\x11\xbf\x96\x28\x73\x71\xc2\x32\x45\xf9\x0a\x99\x77\x24\x21\x8e\x59\x49\xe2\x6e\x79\x44\xe7\x52\xa9\xef\x7c\xaf\xe1\x0d\xb7\x1d\x8b\xf4\x10\xe9\x8e\x5f\x79\x15\xf9\x2a\x16\xd9\x27\xbd\x83\x74\x2c\x84\x3b\x03\x00\xe9\x28\x6c\xec\xe3\x2c\x41\x48\xc9\xcf\xbd\xfa\x7b\xe0\x49\xa2\xcd\x54\x86\x3d\x78\x11\x3a\x87\x56\x24\x9c\x23\x5c\x14\x44\x9c\x83\x9b\x19\x5f\x9b\x48\xa4\x0f\xf5\x4a\x2d\x4d\x0b\xfa\xbc\x36\x19\x00\xdf\xa1\xc3\x6e\xa7\xa2\x08\xc3\xbc\xa3\xd5\x47\x6c\x34\x5e\x5c\x3a\x22\x93\x86\x0f\x08\x93\x82\x8b\xc1\x7c\x51\x37\x24\xfc\x00\x2d\x47\x27\x39\xb8\xd9\x62\xc8\x6c\x29\xc1\x2c\x3a\x36\x28\xe9\xa1\x73\x95\xd9\xfe\x94\xdc\xdf\xa3\xe0\xab\xb6\x57\x88\xe4\x44\x69\x38\x91\x61\x67\xcf\xdb\xff\x17\x1b\xa5\x04\xdd\xf4\xfc\xf2\xeb\x37\xfc\x36\xa6\x68\x7d\x19\x31\x8f\xd6\xef\xfc\xee\x57\xb0\x27\xe0\x21\x08\xa2\xfd\xfa\xfa\x69\x06\x83\xe0\x4f\x32\x6c\xea\x57\xef\x61\x59\x7a\x90\x77\x83\x25\xdb\xea\xfe\x46\x68\xca\x22\xa4\xab\x68\xed\x47\x14\x4e\x72\x08\x33\x2c\x10\x76\x91\x28\x26\x38\x1d\xb6\x1b\x23\x3d\xa7\x18\x5f\x6d\xc8\x80\x7f\x40\x59\x69\x23\xbd\xc0\xb8\xe4\x4e\xc0\x87\xe1\x26\x5e\xac\x94\x84\xd6\xc1\xb3\xf3\x22\xbe\x22\xcc\xfe\xcd\xfd\x27\x75\xa6\xfa\x95\xcb\xae\x54\x49\xe8\x62\x7b\xb5\x54\xbf\x27\x6a\x96\xff\x49\xe6\xd4\x0f\xea\xaf\x16\x6f\x62\x04\x8a\x34\x99\xb6\x3a\xb7\x55\xf2\x10\x55\x9b\xab\x65\x07\xe2\x28\xe7\xb9\x05\xa6\xc6\xb1\xfd\xb0\xc1\x18\xce\x43\xca\x37\xf9\x7a\x85\xe3\xab\x1f\x23\x58\x72\xbf\x22\xfa\x7a\x94\x40\x3e\xf4\xa8\x2a\x79\x1e\x1f\x31\x87\x1b\xf9\x87\x80\x8a\xfc\x7e\xdb\xd6\xd2\x67\xf8\x85\xeb\xe1\x82\xd8\x4e\x87\x91\x48\x98\x45\xc7\xa5\xc7\x74\x52\xbe\x2f\xde\x9b\x86\x3c\xf7\xc9\x11\x89\x24\x8f\x3c\x4f\x82\xa5\xe5\xf2\x32\x7d\xda\xc2\x7b\xb9\x84\x7a\x71\xce\xca\x6e\xef\xf2\x46\xe9\xe8\x7b\x57\x0c\xc5\xe9\x4a\x5b\xe3\x2a\x59\x0f\xe7\x19\xe5\xc3\x54\x49\x89\xa9\xd8\x91\x31\x5c\x9c\x04\xd0\x1c\xef\x72\xb3\x7d\x9e\x2f\xd9\xe1\x6a\xff\x20\xa0\x7a\xd4\xf0\x6f\xe1\xe5\x81\x9d\xbb\x75\x3a\x30\xb6\x37\x7b\xc1\xfb\xd4\xde\x7e\x89\xdc\x3e\x7a\x07\xee\x16\x17\xf7\x9d\x3e\x2a\xf3\xf0\xd6\x2f\x44\x5f\x54\x43\xc1\xbb\x62\x97\x4e\x27\x10\x18\x80\xd2\x93\xd1\x7e\x71\x88\x47\x4f\x9d\xd2\x2d\x80\x77\x12\x8f\x81\xf8\xf6\xdd\x96\xbf\xba\x7c\x5d\xb7\x99\xa6\xec\xa3\xfb\xfe\x78\x4e\x6d\x37\xa4\x32\x61\x3d\x6a\x8b\xea\x89\xf2\xc0\x14\xe7\x34\x87\x18\x4a\xe3\xd8\x51\x66\x85\x3d\x56\xf1\xcf\x67\xca\x7e\xa6\xea\x4d\x68\xb0\x51\x8c\xec\x4d\xe5\x87\xcf\x98\x87\x2c\x52\x44\x9c\x38\x37\x79\x2b\x0c\x68\xa5\xac\x28\x8b\x9a\xbd\xc6\x37\xb9\x12\x0d\x74\x32\x38\xe2\x91\xf5\xa0\x03\x4d\xfb\xda\x1e\x67\x73\xe4\x58\x09\x89\xd1\xeb\x6b\x8e\x3e\xe2\x2e\x2c\x91\x20\xe2\xed\xfb\x5d\xc1\xb4\xaa\x38\x39\x9a\xba\x11\x4e\x8e\xdf\x0b\x20\x1d\x71\x98\x30\xb4\x37\x77\x39\xd0\x81\xec\x60\x1c\xbd\xb2\xaf\x09\xe8\xb6\xc1\xfe\x8c\xee\x73\x17\x66\x35\xe4\x56\xd4\x21\x8b\x96\x5e\xe1\x4f\x91\xe7\x56\x06\xc1\x7d\xad\xff\x85\xfe\x92\x22\x9a\xc2\xbf\x53\xf3\xbf\x00\x00\x00\xff\xff\x52\xb6\xc0\x85\x8b\x06\x00\x00") +var _test_certsClientTenant11Key = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\xb7\x12\xab\xe8\x02\x03\xe0\x9e\xa7\x38\x3d\x73\x07\x30\xb9\x24\x83\xc9\x3f\x99\x8e\x60\xa2\xc9\x26\x3e\xfd\x9d\x3d\xdb\xae\x5a\x35\x1a\x35\xdf\xff\xfe\x09\x2f\x29\x9a\xf5\x07\x78\xdc\x1f\x07\x68\x21\xe7\x4b\x7f\x74\x29\xf9\xdb\x40\xa6\xa6\x49\xd3\xa9\xf1\x1c\xa7\x0b\x9c\x2b\x71\xe4\xd5\x3f\x05\x62\x19\xcb\xcc\xf5\xb5\xbd\x0a\xfb\x14\xaf\xcf\xfa\x8c\x42\x9e\x93\x0b\x79\x63\x0c\x6f\xf8\x1d\x49\xc5\x48\x86\x58\x2e\x01\x4f\x50\x96\x7e\x41\xaf\xca\x31\x5a\xc5\xaf\x4a\xa4\xcd\xae\xd0\x49\xf8\x5c\x78\x22\xee\x10\xc7\x8d\x7f\x2c\xcd\x88\x8c\x4f\x9a\x57\xed\x34\xaa\x5b\x09\xde\x0f\x97\xe3\x01\x41\xd8\x73\x0b\xec\x86\x26\x20\x5e\x11\xa7\x6a\xff\xcd\xa3\x71\x94\x3d\x41\xac\x45\xea\x47\xb4\x0d\x63\x99\x2e\x30\x5b\x5c\xdd\x9c\x7d\x18\xa8\xe4\xaa\xba\x1e\xe1\xca\x96\x00\xcd\xfc\xce\x95\x5b\x7c\xb6\xc4\xcf\xc4\x99\xc7\x21\x91\x5b\x2f\x93\x4d\x24\xe1\xe9\xbe\xf1\x6a\x76\xb6\x23\x3b\xd3\x05\x58\xd0\x8c\x5f\xcc\x92\x3e\x6a\x1e\x4e\x8e\xfd\x0c\xe7\xed\xb9\xfb\xd9\xef\xf6\x5b\x01\xd4\xd3\xea\x96\x69\x64\x9c\x45\xbc\x20\x7b\x38\xb5\x92\x98\x62\x02\xc6\x3f\xf6\x1e\x69\x49\x1a\xf3\xad\xe0\x05\x78\x2d\x4b\xc0\xb2\x90\x35\x45\x22\x9e\x7e\x78\x1c\x79\x93\xc2\x5b\xb9\xe4\x3d\x30\xd8\x8a\xfb\x5a\x77\xd9\xaf\x87\x33\x40\xf8\xe1\x1a\xcb\x74\x6d\x4f\xc9\x16\x82\xee\x85\x8d\x47\xde\x84\x80\x48\x44\xfe\x41\xad\x35\x5b\x0b\x25\x08\xfc\x53\x13\x39\x97\xe3\xb9\x49\xe3\x39\x01\xe6\xe3\xf5\x1d\x9b\x20\x83\xef\x4d\xc3\xa0\x9a\xd7\xe2\x5f\xa2\x2c\x12\x06\x0c\xca\xcc\x61\x1f\xae\x67\x76\xb6\x8e\x74\x62\xaa\x9f\xfa\xb6\xd9\x0c\x46\x4a\xdd\x2f\x66\x56\x6c\xe2\x7d\x5c\xab\x5d\xfa\x82\x6f\x8c\x6e\x07\xa9\xd4\xbe\xbc\x40\xef\x45\x1c\x39\xb4\x41\xdf\x8d\x6b\x7f\xf8\xba\x9a\x44\x49\x9c\x33\xba\x97\xaf\x09\x74\x4e\xfe\x9d\x7f\x09\xf2\x4d\x76\x7e\x00\x2e\x22\xb4\xd8\x42\x4b\x96\xc9\x46\x32\x92\x7a\x1b\x83\x13\x68\x0e\xed\xa7\x8d\x95\x80\xa3\x28\x1a\x77\x82\xc3\xb3\xb9\xb5\xcc\x56\xc4\xeb\xa6\x7a\xcf\x2b\x5a\xf5\x0e\xcf\x3a\x05\xd7\x39\xb2\x2d\xa2\x05\x32\xff\x3a\x31\x39\x1c\x0e\x9d\x23\x4c\x48\xaa\x99\x66\x42\x3b\xed\x15\xed\x72\x23\x6f\x8f\xdf\x19\x76\x8e\x5e\xcc\x7e\xf2\x9e\xca\x63\x5f\x84\x6a\x5e\x3e\xed\x7e\xc5\x6e\xdf\xd2\x75\x93\x3b\xb4\x08\x3e\xe5\x45\xa0\xde\x54\x1f\xf1\x9a\xa4\x8c\x7b\xd8\x31\xe4\x00\x98\x7f\x2d\x35\xba\xa3\x62\x9e\x38\x8f\xe9\x56\x71\x2e\xcd\xd7\xed\x57\xda\x79\x75\xf2\xa3\xad\x5d\x2c\x32\x3f\x8d\xc6\x11\xa5\x56\xd1\x88\x05\xca\xb8\xc8\xb7\x2b\x13\xb5\xeb\xc9\xb6\x0c\xbd\xa3\x27\xdb\x39\x49\xa8\x13\x89\x83\x35\x21\x30\x6d\x39\x63\x97\x44\x39\x13\xee\xe6\x78\x49\xae\xc8\x11\x65\xb4\x04\xce\x71\xa3\x69\x26\xf3\x25\x5a\x58\x07\xe3\xea\xee\x8e\x7c\x9e\x85\x1e\x0e\xdd\xc9\x35\x5d\x30\x9f\xb1\x77\xc9\x9e\xa0\x9e\xad\xe9\x75\x8e\xbf\xcf\xe7\xc1\x94\xb9\xce\x50\xbe\xe9\xc3\xbc\xdf\x2c\xa1\x6f\xdb\x79\x58\x9d\x30\xff\x81\x40\x3f\x8e\x77\x39\x68\x72\x8e\x14\x35\xb4\x5e\xee\x36\xb5\x35\x1c\xc0\xdc\xaf\xca\x11\xa7\x6d\x7b\x58\xbe\xab\x0d\x65\x03\x34\xf8\x2a\x57\x83\x62\x21\xd5\x8e\x13\x8b\xd6\x17\x52\xcf\x44\xca\x0e\xd5\x09\x33\x7f\x17\xd3\x8d\x76\x43\x0a\x33\x72\x97\x3e\x6e\xd7\x6a\x4f\xc1\xfb\x63\x98\x27\xad\x0f\x66\x22\xae\xc4\x9e\x59\xcb\x6f\xcc\x15\xe4\x6b\xe2\x01\x38\xd7\x13\x1b\x7d\x21\xeb\x4c\xd5\x0f\xb7\x82\xf9\xc6\x66\x86\x20\x37\x09\xa9\x65\xcf\xef\x3d\xe9\xa6\x7d\xd9\xb0\x63\xb7\x8b\xcb\xf5\x2c\x99\x54\xeb\x2e\xe6\x63\xd9\x27\xe3\x1b\x60\x26\xd7\xcc\x95\x0a\x69\xb8\x1a\xca\x1c\x7a\x9a\xa6\x2a\x7e\x95\x2c\x0e\xfb\x59\x5d\x41\xbb\xdd\x4d\xee\xde\x38\x79\xf7\xf2\x94\x86\x47\x6e\xe3\x28\x3c\xd6\x40\x88\xe1\xaa\xfd\x75\x56\xa8\x80\x5f\xb1\xec\xdf\x93\x9f\x9c\x3f\x60\xe7\x75\x14\x98\xcf\xa6\xb3\x94\xa3\x25\x29\x41\xac\xf5\x09\x62\x63\x6e\x42\xf2\x4d\x36\xb5\x45\x66\xb4\x50\x8c\x78\x72\x82\x45\x93\x67\xf8\xb0\x56\x95\x6b\xa5\x95\x5d\x1f\xce\xb1\xd5\x10\x68\x91\x11\x3e\x7a\x5b\x8a\x65\xbf\xe5\x37\xe0\x5d\x68\x32\xfa\x4d\x02\x02\x65\x13\x77\x72\xf5\xf3\x69\x66\x73\xfb\xd1\x87\x6d\xf8\x64\xe6\x9c\x52\x6d\xe4\xb6\x3e\xe1\x3d\x54\xd4\xe6\xca\x69\x60\x60\xae\x01\x69\x0d\x21\xb2\xb0\x6c\xf5\xc4\x3f\x16\x72\xb4\xc2\xbd\x04\x6e\x6a\x8f\xa4\x51\xee\x43\xfc\xd4\xda\x6d\x96\x81\x50\x27\x7c\xbf\xe2\x56\x7e\x3d\xf4\xb6\x16\x81\x40\xc8\x99\xcd\x5f\x83\xce\xc6\x21\x32\xf8\xa5\x8f\x7d\xd4\xf4\x78\xb4\x10\xca\xc3\xef\x4f\xfb\xf9\xb3\x82\x4c\xcc\x9d\xe9\x62\xfa\xa8\x48\xa2\xaa\x0d\x7d\x84\x74\x20\xa8\x43\xb4\xaa\x65\x3c\xd8\x53\x5e\x27\x5d\x2c\xc1\x8b\x70\x6e\xf4\x16\xa7\x56\x33\xbc\x8f\xc8\x3a\x6c\xc8\x56\x42\x8a\x93\x58\xc9\x58\x42\x1d\x5f\x45\x0f\x88\x40\xf3\x6c\x58\xfd\xbd\xc8\x01\xc7\x7d\x5f\xe9\xa3\xa9\x1b\x14\xd0\x02\xea\x76\x83\x29\xc5\x7a\x85\x51\xe8\xcf\xeb\xaa\x7b\xa0\xad\x0f\x03\x5d\x27\x13\x68\xae\xce\xd7\x0a\x1b\x4d\xf2\xb4\xa5\x63\x66\x01\xb5\x3c\x5c\xb4\xa4\x8e\xe8\xc8\x66\x47\x25\xc4\x60\x0d\x89\x67\x59\x7d\x6c\xec\xc2\x17\xd8\x58\x31\x2a\x7b\x06\xef\xaa\xe6\x27\x43\x1b\xe8\x05\x59\x00\x6e\x23\xac\xa5\x1d\x5c\x81\x7a\x2e\x34\x7e\x6b\xcf\x37\xc6\x27\x8a\x90\xb8\x57\x5a\x70\xc9\x0e\x50\xd1\x7b\xac\x5b\x1e\xd3\x92\x1f\x91\x8e\x4a\x9c\xe1\x8a\xbd\xb2\xde\x37\xc8\xe3\x0e\x57\x44\x74\xc7\xa2\x48\xdf\x20\x08\x7f\xb1\x30\x11\x4f\x83\x97\xfb\x03\xd3\xd5\x06\x79\xa4\x2f\x6c\xe3\x26\x0a\xe0\x36\x49\x9f\x2b\xba\xa0\xa4\x0d\xfa\x4b\x8a\x64\x89\xff\x4d\xcd\xff\x03\x00\x00\xff\xff\x84\x59\xec\x0d\x8b\x06\x00\x00") -func test_certsClientTestuserKeyBytes() ([]byte, error) { +func test_certsClientTenant11KeyBytes() ([]byte, error) { return bindataRead( - _test_certsClientTestuserKey, - "test_certs/client.testuser.key", + _test_certsClientTenant11Key, + "test_certs/client-tenant.11.key", ) } -func test_certsClientTestuserKey() (*asset, error) { - bytes, err := test_certsClientTestuserKeyBytes() +func test_certsClientTenant11Key() (*asset, error) { + bytes, err := test_certsClientTenant11KeyBytes() if err != nil { return nil, err } - info := bindataFileInfo{name: "test_certs/client.testuser.key", size: 1675, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x9, 0x93, 0xd9, 0x76, 0x64, 0x60, 0x1b, 0x1b, 0x60, 0x81, 0x42, 0x5d, 0xee, 0xa1, 0x6b, 0xcc, 0x3f, 0x7c, 0x87, 0xe8, 0x57, 0xc1, 0xc9, 0xa1, 0xf9, 0x86, 0x39, 0x95, 0x54, 0xaf, 0xaa, 0xa1}} + info := bindataFileInfo{name: "test_certs/client-tenant.11.key", size: 1675, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x93, 0x7f, 0x8c, 0x76, 0x4e, 0x6, 0x31, 0x1f, 0xdf, 0xc5, 0x1, 0x59, 0x4e, 0x2c, 0x9, 0xf5, 0x2b, 0x14, 0xa1, 0x77, 0x9e, 0x5, 0xa7, 0xa1, 0x85, 0x40, 0xe3, 0xbe, 0xc, 0xea, 0x64, 0xc2}} return a, nil } -var _test_certsNodeCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x94\xc9\xae\xb3\x46\x14\x84\xf7\x3c\x45\xf6\x56\xc4\x64\x3c\x2c\xb2\xe8\xa6\x1b\x68\xec\x06\x37\xa3\xf1\x8e\xb1\x0d\xbe\xc0\xbd\xc6\x4c\x7e\xfa\xc8\x7f\xa4\x44\x4a\x52\xab\xa3\x5a\x94\x74\x54\x9f\xea\xf7\x8f\x20\x36\x89\xf3\x9b\x8e\xbd\x80\x18\x44\x07\x01\xfe\xe5\x0a\x94\x10\xc4\x90\xae\x83\xba\xe6\x60\x26\x10\x70\xc2\xc0\x46\x56\xd1\xaa\xc5\x51\x09\xc7\xe7\x99\xbc\x5f\x9b\x5a\x4c\x1a\xe0\x40\xfe\xf8\xb9\x3f\x6a\xf3\x38\x4b\x10\xb0\xc1\x00\x08\x3c\x05\xea\x91\x19\x83\x04\x45\x8c\x9d\xf0\xfc\x85\x32\xc5\x79\xe6\xed\xf1\x9e\x28\x7c\x31\x02\x10\x40\xee\x44\x10\xd0\x00\x61\x67\x4a\x94\xd7\x9a\x29\x46\x93\xea\x10\xb1\x00\x94\xc6\x2c\xad\x02\x45\x40\xa1\xe8\xb1\x38\x0d\x50\x68\x00\xd3\x8f\xe9\x04\x9f\x9b\xfd\xed\x51\x9d\x2e\xb8\x01\xec\xaf\xb0\x3e\xd0\xc3\x7f\xc2\x84\x14\x61\x87\x82\xc1\x04\x72\x88\xc1\x42\x71\xd6\x1e\x1f\xb7\x40\xd7\x81\x4f\x66\xc4\x12\xfb\xd4\xdf\xc8\x7d\xca\x1d\xc0\x30\x84\x0c\x20\xce\xf1\x05\x7c\x5e\x66\xbd\xce\x39\x86\x02\x38\xbd\xe7\xda\x3a\xbc\xda\xb2\x96\x73\x9b\x18\xc6\xb9\xac\x68\x13\xbb\x45\x2c\xb2\x7a\xd4\xba\x4c\xda\x6e\xb2\xfc\xe9\xa9\xd6\x85\xf5\x28\x24\xae\xb2\x3b\x6c\x4e\xe6\xe1\xec\x92\xfd\xb0\x3b\x50\x61\x9f\xbb\x65\x4f\xb3\xf4\x16\x6c\x5a\x5c\x6d\x4a\xeb\x4a\xc7\xe3\xba\x57\x1e\x3b\xcb\x0a\xab\x51\x2c\xdb\xee\xe4\x1b\x6e\x67\xe8\xbe\xff\x52\x9a\xac\x57\xfb\x61\x42\x3f\xeb\xf1\xb2\x3c\xb5\xcd\xf7\xb7\xd0\x31\x37\x42\x27\xf4\x74\xe5\xca\x4f\x49\x0d\x9b\xfc\xfb\xfe\x53\xbb\x8e\xe7\x6e\xb9\xaa\xc9\x09\xab\xdf\xce\xd6\x6b\x77\x1b\x3d\xdb\xdb\xde\xe4\xe6\xdb\xab\xce\x17\x59\x1d\x71\xea\x3b\x76\x77\x11\xb4\xaf\xce\xbd\xb2\x8c\x2c\x38\x99\xcb\xa8\xf6\xbd\x7b\x6f\x6f\x4b\xd1\xb5\x36\xf3\xa4\xc6\xfa\xde\xb2\xeb\x88\x2d\xb5\xa6\x59\xd2\xc5\x5f\x44\xb5\xa9\xb5\x11\xb7\xcd\xe2\xc5\xab\x62\x3b\x00\x09\x56\x50\xe4\x6a\x75\xf1\x80\x0c\xaf\xdf\xcd\x81\x9b\xfb\x4b\x57\x77\x56\xca\xf2\x33\xa5\xbb\xf8\x2a\xda\x11\x12\xf3\x47\x7f\xe5\x43\xdf\x96\xbe\x8c\xe7\x78\x88\x76\xcf\x97\x56\xbd\x52\x8d\x7c\x79\x82\xac\xda\x1a\x79\x94\x45\x9a\xec\xbc\x45\xec\x4d\xf7\x98\x47\x62\x99\xeb\x60\xc6\x00\xa4\x4e\x4f\xcd\x64\x46\x3c\x41\x91\x27\x5d\x00\xb3\x44\x08\x18\x02\x3c\xe6\x14\x4a\x9f\xe6\x0a\xc1\x66\x2c\xa6\x90\x99\xba\x3e\x98\x80\x85\x06\x9c\x29\x84\x9c\x3f\x21\xc7\x06\x64\x39\x02\x0d\x90\x3f\xfd\x5b\x1e\xc6\xe7\x06\x0c\x9c\x7f\x0d\x99\xe2\xdc\x33\xf3\x3e\xe5\xaa\xaf\x0b\x70\xed\xc7\xcc\x3c\x36\x49\xbc\x5a\xd0\x3a\x00\x00\x4c\x0b\x83\xff\x13\xfe\x37\x17\xe7\x0f\x17\xc2\x07\x06\x00\x02\x33\x81\x6f\x05\x94\xd7\xcc\xd8\xfd\x28\x50\x19\xde\x52\xd1\xe0\xbc\x3a\xbb\xb9\xa9\x15\x6c\x6b\x32\x64\x4a\xdf\xd5\x7d\xaa\xec\xb4\xf2\xc9\xdc\x18\x7c\xf6\xe6\xb6\x3c\x44\x42\x23\x4e\xb5\x78\x1a\x99\x7c\x30\x23\xc5\x5c\xa5\x36\x40\xb7\xd3\x75\x7f\xd6\x2a\x9e\xbc\xb6\xf9\xf1\x5e\x44\x6c\x52\xd7\xde\x97\x82\x89\xb1\x59\x61\xd1\xde\x0c\x8d\x58\x34\xc3\x20\x73\xcb\x0d\x11\x9e\xed\xa9\xa1\x7c\x38\xbd\x7e\x6c\xdb\x0d\xde\xf0\x69\x8b\x65\x26\x1f\x86\xb1\x1d\x0b\x75\xef\x91\xdb\x63\xd8\x85\xe2\x76\xd3\xbe\xa1\x28\x27\xb2\xe2\x19\x85\x2d\xe7\xd6\x28\x1a\x92\xd3\x2a\x70\x10\x82\xe4\x84\xdf\x72\xec\x4c\xd0\x7a\xef\x25\x68\xe2\xdb\xcb\x99\xa2\xdb\xe6\xc6\xf8\x7a\x59\x9b\x92\x87\x8b\x5e\x9e\xd5\xf2\x2c\x76\x27\x1b\x5f\xdf\xcc\x34\xd6\xe5\xec\x69\x41\xbd\x42\x47\x17\x81\x10\xa6\x30\x2c\x8e\x62\xe0\xb6\x77\x97\xe4\xaf\xe2\xae\xc5\x43\x7a\x0b\x97\x88\x84\x6c\xec\xd7\xce\xe9\x93\x5d\x45\x9f\xfc\x2e\x75\xc5\x4f\x5f\x24\x7a\xbf\xcf\xb2\xee\x90\xb7\x56\x4e\x1d\x31\x7a\x0b\xd7\x33\xfd\x22\x53\xd5\xaf\xdf\x51\x47\xb5\x52\xf4\x4c\x72\xf0\xbf\xae\xca\x91\xf6\x7f\x08\xbf\x36\x07\x3b\xe8\xbf\x3b\xf4\x67\x00\x00\x00\xff\xff\xa2\xef\x29\x91\xa4\x04\x00\x00") +var _test_certsClientTenant20Crt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x94\xb9\x8e\xb3\x48\x1b\x85\x73\xae\xe2\xcf\xad\x5f\x6d\x16\xb3\x04\x13\x54\x41\x61\x8a\xcd\x2e\xc0\x18\xc8\xd8\xcc\x6a\x36\x63\xca\xcd\xd5\x8f\xba\x47\xfa\x92\x99\x37\x3c\xaf\x74\x92\xf3\xe8\xf9\xff\xcf\x41\x74\xc6\xee\xff\x54\xe4\x05\x58\xc7\x2a\x08\xd0\x6f\xca\x38\x18\xab\x5f\xad\xaa\x82\x32\xad\x00\xc5\x10\x54\xd8\x03\x97\xf2\xbb\x52\xe1\x54\x9a\x25\xae\xa3\xd0\x5c\xec\x5d\x72\x42\x4a\x35\x12\x9b\xd6\x98\xe0\x7a\xcb\x5d\x40\x90\x0d\x09\xa0\x8c\xb5\x23\xdf\x81\xe0\x0c\xd8\x1b\x52\x6b\xc7\x24\x9c\xd2\xa6\xbc\xb9\xc5\x77\x77\x74\xbc\x1b\x45\x34\xd6\x42\x42\x34\x44\x3f\x5a\xc6\xb9\x4b\xfe\x54\xea\x98\xab\x2a\x72\x44\xd4\xa8\x73\x97\x71\x5a\x40\xdd\x1d\xb1\x4e\x80\x8e\x6e\x8b\x85\x7b\x9d\xbb\x4e\x7b\xa3\xee\x8e\xe9\x9f\xac\x05\xb5\xe3\x61\x8a\xc0\x6f\x99\x85\x68\xff\xa7\x8c\x89\xb9\xea\xa3\xee\xc0\x84\x95\x1b\x42\xe0\x04\xa0\xc5\xd4\xc1\x18\xe2\x16\xb8\xb0\xea\xe6\xba\x6b\xce\x0a\x3d\x42\x40\x90\x0e\xc0\x45\x05\x44\x06\x3f\x7f\xb5\xb2\x54\x40\x10\x60\xbe\x0f\xc5\x0c\xcf\x21\xdd\xe6\x68\x12\x9b\xaf\xc6\x6b\x94\x34\xbf\x42\xe9\x2d\xad\x8f\x8d\x85\x84\xae\xde\xf5\xd5\xe6\x8b\x3f\x66\xd7\x3a\xce\x3e\xf7\x09\xb6\x05\xfe\x7e\xf5\xb9\x6e\xc7\xe1\x83\x63\x0a\xa9\x2f\x42\xef\x5b\xa6\x77\x1e\xea\xc5\x33\x10\xc5\x52\x8f\xad\xd8\x54\x53\x6f\x37\x95\x3e\x3c\xbb\x15\x26\x82\x38\x97\xea\x85\xbe\x97\x0b\x95\x93\xe1\x3d\xe4\xb7\x44\x72\x7b\x12\xbc\x2d\x9e\x39\xf6\xb6\xec\xae\xc2\xb2\x27\x51\xf9\xc6\xcd\x25\xd7\xb6\x02\x3f\x9c\x67\xb9\xc2\xe2\x6a\x60\x5c\xe2\x8c\x3b\xed\xbc\xac\x1b\x96\x11\x8d\xb6\xe1\xa4\x52\x55\xd5\x5d\x9e\x9d\x0a\x65\x31\x6b\x9b\x01\x2f\x7f\x62\x4f\x41\x13\xc4\x42\xee\xea\xd6\x45\xc6\x62\x4f\xaf\x2c\x36\xf6\xc7\x0b\x99\x7b\x37\x87\xe2\x5d\x1a\x6f\x6b\xd0\xbd\x4e\x92\x3d\x17\x9b\x95\x99\x9f\x4d\xbc\x1b\xda\xd4\x27\xec\xfc\x62\x6c\xc9\xc8\xf3\xd3\xa8\x64\x87\xa6\x31\x85\x64\xb0\x5f\x9b\xe1\x77\x33\x1e\x9e\xb5\xfc\x1c\xf8\x15\x3e\x3c\xf9\xd8\xcd\xdc\xe7\x0b\x2c\xb5\x0c\xf5\x3d\x5e\x22\x2b\xeb\x0c\x92\x5a\xb3\xb9\xbb\x11\x23\x71\xc2\x10\xaa\xbb\xa3\x23\x83\x3a\xc6\x80\xaf\xfe\x51\x75\x09\xd6\x00\x01\x70\xfc\xce\xa9\x19\x80\xcb\xcf\x42\x06\x91\x21\x78\xc8\x08\x02\x47\x85\x29\xf8\x87\x0f\xef\xd8\x33\x10\x50\xaa\x56\x31\xb6\x68\x0c\x21\xb9\x19\x80\xe2\xff\x22\x4e\xab\x2a\x04\x81\xce\x77\x47\x4f\xea\xae\xe9\xa9\x28\xb5\xa6\x68\xc8\xd6\x33\x95\x29\xa7\xed\xc3\x3c\x9b\x89\xbf\x3b\x39\x6f\x67\x1f\x45\xc3\x6c\xa2\xbf\x66\xc3\x54\x1c\xb0\x3b\x35\x66\x7b\x31\xb4\x68\x31\xc9\x8a\x23\x71\x3f\x80\x9f\xb3\x75\x6e\xf8\xb0\xf1\x8b\xdd\x62\x94\x6d\xb6\xae\x16\x95\x05\x69\xa9\xd7\x6e\x14\x40\x90\x3c\x51\x79\x45\xbc\xa7\x57\xb7\x67\x70\x4e\x6d\x3a\x69\x23\xdc\xd8\xc3\x65\x63\x53\x8f\xde\xca\xc3\xa1\x47\x5a\x54\x9c\x96\x29\x9a\xfc\x0f\x13\xe0\x8a\x4f\x15\x67\x5e\xb3\x4d\x1c\x3d\x6f\x59\x95\xf6\x64\xc6\x96\x7e\x8c\xd4\x46\x9e\x5e\x2b\x77\x80\xfa\xee\x3d\x9b\x9b\xd8\x0c\x64\x78\x5b\x4d\x1e\x1a\x7e\x8a\x03\x4d\x22\xd1\xca\x96\x17\x26\xe4\xab\xe9\x10\x35\x26\x65\xbb\x24\xae\x2e\x2c\xc2\x37\x7e\x0c\x94\xe1\xc4\xbd\x93\xaf\xab\x61\xef\xa2\x9d\x37\xe5\xdc\x6f\x77\x08\xd4\xcc\x27\xec\x9c\x76\x5e\x1e\xbd\x60\x52\xed\xf9\x50\x69\x8c\xfb\x34\xc7\xe1\xa1\x35\xb6\xd7\xbd\x85\x5d\x8f\xbd\x11\x2c\xdb\x2c\x68\xdf\xc3\x70\x76\x85\x99\x7b\x7f\xf9\xc1\xf5\x6e\x7f\x75\xe5\xe1\x80\x09\x59\x68\xba\x89\xb7\xd9\x92\xfd\x8a\x9e\x72\x6b\xb2\x99\x37\x2f\xfc\xc5\xfc\xaa\x01\xb9\xda\xbf\x75\xf1\x77\x00\x00\x00\xff\xff\xda\x43\x4a\x1d\x4b\x04\x00\x00") -func test_certsNodeCrtBytes() ([]byte, error) { +func test_certsClientTenant20CrtBytes() ([]byte, error) { return bindataRead( - _test_certsNodeCrt, - "test_certs/node.crt", + _test_certsClientTenant20Crt, + "test_certs/client-tenant.20.crt", ) } -func test_certsNodeCrt() (*asset, error) { - bytes, err := test_certsNodeCrtBytes() +func test_certsClientTenant20Crt() (*asset, error) { + bytes, err := test_certsClientTenant20CrtBytes() if err != nil { return nil, err } - info := bindataFileInfo{name: "test_certs/node.crt", size: 1188, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xae, 0x4d, 0xa, 0x95, 0xd7, 0x58, 0xa4, 0x59, 0x44, 0x2, 0x7b, 0xe0, 0xc8, 0xe7, 0x7e, 0x15, 0xf2, 0x10, 0x4e, 0xa4, 0xa7, 0x2b, 0xda, 0xd2, 0x40, 0xcf, 0x9c, 0x88, 0xf0, 0x7f, 0x3d, 0xa4}} + info := bindataFileInfo{name: "test_certs/client-tenant.20.crt", size: 1099, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x55, 0x98, 0xec, 0x91, 0x25, 0xfc, 0x1f, 0xd3, 0xe1, 0x11, 0xf6, 0x9e, 0xcc, 0xa4, 0x7a, 0xb9, 0xc6, 0x34, 0x51, 0xde, 0x29, 0x6a, 0xaa, 0xe9, 0x34, 0x2e, 0x3e, 0x7f, 0xfc, 0x59, 0xb5, 0x7d}} return a, nil } -var _test_certsNodeKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\xb7\x12\xa3\x40\x02\x04\xd0\x9c\xaf\xd8\x9c\xba\x42\x12\x3e\xb8\x00\xcf\x60\x06\x2b\x61\x32\x31\x78\x23\x10\x56\xf0\xf5\x57\xbb\xf1\x75\xda\x49\x57\x27\xef\x3f\x7f\x23\x2a\x1a\x80\x7f\xfc\x40\xf8\xe3\xfa\xe0\x25\x84\xca\x1f\x53\x49\xfe\x35\x98\x0d\x80\x32\x56\x40\x14\x04\x53\x12\x3c\x45\x98\x5d\x09\x94\xe7\x23\x65\xac\xd7\xd1\x55\xcf\xe7\x4a\x73\x27\x4c\xe8\x7b\xc6\x4b\x26\x3b\xe4\x7b\xd8\xd2\xeb\xb9\xea\x08\xf1\x52\x05\xbd\x8a\xc5\xb2\xf9\xa2\xc6\xec\x58\xa8\x76\xbb\xe6\xe3\x5a\x0f\x9a\xa9\x7e\xeb\xd4\xbb\x4c\xe2\x13\x34\x95\xa3\x93\x25\xad\xfd\x1d\x8e\x28\xf7\x71\x96\x67\xde\x68\x02\x4f\x06\x3d\x0d\xc3\x24\xdf\x70\x6b\xb1\xa2\x39\x39\x67\xb6\x6e\x84\xb6\x7f\x98\x61\xc8\x05\xfa\x69\x8f\xce\xc2\xbe\x78\x63\x6c\x80\x06\xcf\x41\xfb\x02\xea\xae\xb0\x8d\x5c\x7e\x5e\xb5\x64\xd9\x64\xad\x65\x33\x65\xec\x4b\xaf\x71\xf4\x85\xd5\xc8\x94\xf5\xb8\xa0\xfc\x09\xdc\x06\x44\x0c\x11\xa2\x73\x71\x69\x15\xbf\x15\xe9\xc8\x30\x34\xad\xfa\xd4\x2c\x47\x95\xac\x44\xe4\x89\xb5\xa0\xc1\x78\xc9\x9a\xf5\xe9\x4a\x8f\xb7\x74\xa2\x70\x30\x6b\xa0\x82\xb7\xab\xaa\x99\x95\x74\x37\xc1\xce\xe1\xfd\xca\x39\x5e\x91\x9f\x6a\x31\xb8\xa7\x90\x2d\x78\x61\xa2\x7c\x12\x8f\xe5\xb8\xa6\xb4\xe4\xfa\xa7\xcb\x9f\x41\x5d\x48\x67\x93\xd2\xd6\x33\xc4\xc4\xf7\x2f\xfe\x6e\x64\x8f\xdf\xe7\xae\x79\xe9\x31\xfa\x74\x8d\x4f\xdf\xa7\x76\xd2\x75\xbc\x4a\xd8\xfb\x2f\xe6\xe9\x03\xc8\x82\x27\x88\xc2\xf8\xf7\xec\x82\x8f\x04\x46\x14\x77\xe8\xd9\xa4\xa9\x62\x55\x26\xbf\x95\x5a\x58\x1b\xf7\xf3\x53\xfb\xf7\x47\xd1\xd0\x2c\xd5\xe1\x7b\x4c\xaa\x34\x0e\x40\x93\x07\xf4\xa3\x35\x12\xf0\xde\x62\x5f\x91\xa5\x67\x3c\x6e\xd7\x6c\xf9\x69\xcb\x8b\xe7\x3b\xfc\xd8\x58\x6a\x2d\x32\x5b\x03\x87\x70\xa7\xbd\x6e\x58\x59\xab\x8c\x4e\x92\xbe\x85\x3b\x6d\xe0\x1d\x65\x5f\x3e\xbe\x89\x7e\x92\x6b\x84\xf7\x09\xf8\xcf\xf3\x0d\xb7\xe1\x02\xee\xdb\x59\x80\x70\x9b\x63\xeb\x81\x55\xaf\x0c\x8f\x4a\x77\x8f\xd3\xbc\x98\x6e\xd0\x41\x10\x67\xd0\x31\x80\x23\xf5\x9f\xbc\x94\xc1\x81\xf8\xf9\x63\xc8\x82\x70\xb5\xf5\xfb\x31\xe5\x7b\xeb\xef\x78\x1d\x34\x21\xa7\xd2\x34\x39\xb5\x98\xc5\xc6\x59\x6d\xac\x23\x1d\xd9\xaa\x98\x2f\x02\xfa\xf0\xea\x2a\x7d\x3e\x70\x51\xe2\xdb\x45\x72\xea\xb8\x2a\xc5\x06\x8a\x75\x89\x32\xef\x71\xd6\x21\xac\x87\x93\x55\xd5\x03\xbf\x23\x18\x77\x29\x26\x71\x0c\x99\x71\xee\x3b\x82\x30\x78\x1c\x29\x6d\x11\xa2\xad\x6c\x21\x5e\x24\x67\x8c\x52\x96\x7c\x7d\x55\x21\x5d\x90\x19\x52\xdd\xc7\xad\x4f\xe6\xcd\x33\xb3\x37\x1d\xa7\x7e\xe2\x23\xf4\xf3\x07\x16\xe1\x42\x59\x18\x9d\x54\x25\x8a\x70\x0c\x9c\xe1\x9a\xf8\x1e\x72\xfc\xea\x78\xa5\x1b\x96\x35\x53\x79\x2e\x6e\xa0\xa8\xb6\x8c\x4a\x93\x7b\xeb\xb5\x59\x5e\x0c\x88\x1f\x9d\x86\x36\x04\xea\x9e\x60\xed\xbc\xbf\xd3\xbb\xad\xce\x69\x4c\xcc\xfb\xbd\x03\x4c\x84\x23\xaf\x63\xd8\x75\xfc\x5d\x6a\x96\xf9\x50\x89\x89\x3b\x7f\xdb\x0e\xf6\x65\x0b\xb4\x0e\x39\xa3\xd5\xdd\xc0\xf2\x92\x3a\xa8\xf0\xd3\xc0\xc2\xc4\xe5\xc0\x3e\x72\x0f\x09\x3e\x07\x82\x1b\xc8\x81\xf8\x3c\xc9\xee\x2a\x60\x93\x49\x97\x04\x9c\x10\x5c\x61\x96\x7e\xcc\xa0\x75\x73\xfb\x55\xd2\x8d\x99\x3f\xdc\xdb\xbf\xc5\x14\x6b\x4f\xd8\x52\x74\x34\x84\x48\xfb\x5d\xbd\xb9\xc2\xdf\x2f\xf6\xef\xd3\xf2\x28\xb4\xc8\x55\xbd\x1b\x45\x48\xc5\x57\xde\x32\xcb\x48\x83\xe0\x26\xd1\x22\x93\x25\xa2\x70\x6f\x5a\x53\xb6\x3d\x54\x27\x5b\xb8\x60\xac\x50\x2a\x45\x47\x57\x17\x15\x34\x57\x89\xcc\x4e\x9b\xa3\x4b\x66\xd4\xd6\x3c\xb7\x60\x69\x53\xd3\x2f\xa0\x1e\x8c\x3a\xfe\xdb\x94\xce\xad\xf1\x40\x59\x7a\x6a\x02\xd0\xf3\x9a\x7e\x54\x16\x1c\x0b\x1a\x92\x23\x71\xf6\x12\x91\x34\xed\xdd\xf7\xf0\xbc\x94\xe1\xab\x55\x9c\xf6\xde\xbf\xef\xda\xd7\x78\xb2\x2b\x93\xd9\x52\x95\x08\xc1\x59\x00\x38\xca\x8d\xbc\xc0\xef\x01\x82\x24\x80\x68\xa0\xb0\x1d\x47\x9a\x1f\x39\xf8\xa9\x51\x6a\xd2\xeb\xce\xa9\x8b\x89\xe8\x84\x12\x64\x1f\x17\xce\x1d\x55\xbe\x9e\x97\xf2\x22\x25\x2d\x8e\xd0\xda\x47\x04\x27\xae\x40\x3d\x3a\x82\x4c\xf6\x2e\x11\x7f\x0e\xe6\xf8\x53\xdf\xd6\x19\x1a\x4d\xd5\xf5\x81\x7e\x85\xba\x24\xa2\xe5\x18\x4c\xc1\xa6\xfd\xbe\x63\x82\x17\x61\xc9\xf1\xbd\x5f\xe2\x5f\x30\x2c\xfe\x74\x2a\xa7\x1a\x92\x25\x4e\x82\x22\x22\xe4\x26\xc7\xd6\x5e\x19\x1f\xaa\xc8\xaf\x56\x5b\x26\x6b\x1e\x34\xd0\x0d\x64\xcf\x14\x2b\x3d\x1b\x92\xa4\x6f\xdb\xfc\xa3\xff\x36\xff\x15\x68\xeb\x5d\x7a\xbe\xba\x10\xb8\x02\x8c\x7a\xef\x9d\x19\xfb\xf9\x12\x32\x6c\x0a\xc2\x3a\xb5\x26\x37\xb5\xbb\xc8\xfc\x88\xa9\xff\xd9\xa7\xc5\x70\x2f\x74\x3d\x0a\xc6\x97\x88\x34\xdd\x0e\xb7\x50\x4b\xe5\x7e\xbe\xf0\x5c\x60\x1f\xe5\x24\x3e\x69\x5c\x5f\x35\x07\x9d\x59\x37\x61\x28\x68\xca\x4a\xcc\x6b\x2a\xd4\x4c\xe4\x66\x17\x5c\x38\x42\x71\x1a\xe6\x0c\x81\xf7\xd0\x05\x9d\xa4\xa7\x78\xef\xe1\x32\x67\x6f\x27\x43\x68\x38\x03\x33\xe7\x1a\x7f\xa1\xc0\x7d\xd6\xe4\x7d\xc7\xc0\x4b\xe6\x85\x51\x13\x1c\x07\xf0\xae\x35\x6d\x3f\x67\x55\x82\xc5\x1c\x53\xf0\x58\x1d\x97\x30\x7a\x2b\xa5\x49\x47\x51\x12\xa4\xce\x3b\x4e\x6b\x7d\xd9\x42\xb2\xbe\x4e\x25\xd0\xb8\xa7\x43\xc8\x98\x7c\x99\xdc\xee\xde\xb5\xdc\xcc\x67\xcb\x4d\xe7\x74\xa2\x36\xa4\x7a\xcb\x53\x99\x1c\x59\x50\x1e\x56\x5b\xf8\x2b\x58\xa2\xab\x01\x67\xb4\xdd\x5e\x32\x92\x5a\xca\x91\xbc\xc3\x64\x38\xd3\x1d\x12\x8c\xd7\xcb\x14\x3a\xf4\x9b\x30\xc6\xca\x7f\x70\x4c\xd4\xd4\xa9\xe4\xdd\xd2\xaf\x52\x6a\xaa\xfb\xb3\x7f\x74\x2c\xeb\x64\x3e\x0d\x94\xbe\x5a\x59\x71\xfe\xa0\xfd\x5f\xec\x1f\x29\x0a\x94\xff\x3f\x35\xff\x0b\x00\x00\xff\xff\xf9\x44\xaf\x4b\x8b\x06\x00\x00") +var _test_certsClientTenant20Key = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\x37\x12\xab\x5a\x16\x85\xe1\x9c\x51\xdc\x5c\xd5\x25\x04\x48\x40\xd0\x01\x9e\x03\x12\xde\x67\x1c\xbc\xf7\x76\xf4\x5d\xef\x76\xfa\x76\xba\x93\xaf\x56\xf2\xff\xe7\x9f\x63\x05\x09\x68\x7f\x2c\x9b\xf9\x63\x58\xc0\x63\x1c\xe1\x8f\x2a\x84\x7f\x3f\xc8\x0f\x00\x61\x34\x01\xcb\x30\x2a\xc7\x98\x02\x73\x3d\xd2\x89\x95\xbc\x63\x9f\x82\xf1\x53\x3d\x2b\xab\xa2\xe3\xc4\x60\xc9\x8d\x5c\xf3\xfd\xc5\x9a\xc7\x6a\x19\x4b\x9d\xcc\xf6\x00\x8d\x32\x84\x27\xe2\x8f\x6c\x9d\x82\x6b\x69\x13\xf1\x1b\x7a\x39\x96\x92\x6d\xea\x59\x17\x75\xf8\x38\x2b\xa6\x9d\xf3\xf9\x64\x62\xa8\x86\x0a\x17\x5b\xb7\x42\xb7\x9e\xa4\x15\xc0\x24\x3e\x53\xc6\xe9\xc7\x36\xeb\x07\x42\x45\xfd\xd6\x27\x6e\x44\x6a\xad\xe9\x6c\x2a\x8e\xb6\x5f\x4a\x5b\x89\xf9\x8e\x82\x6c\x03\x95\x9e\xf0\x7b\x0a\xf2\x5f\x97\xad\x6c\x6a\xc8\x00\x64\x00\x62\xef\x1b\xa7\x44\x59\x95\x83\xe1\x2b\x23\xbf\x98\x2c\x8a\xb2\x49\xe0\x3b\xa5\x67\xa5\xfc\x32\x8b\x3d\xbe\xde\x4e\xe5\x84\x44\xa2\x89\xaa\x4e\x81\x4f\x7b\x18\x2f\x20\xdf\xf9\x22\x28\x77\x33\x79\x1f\x9f\x1c\xdc\xd5\x69\x96\x37\xf9\x9d\x52\x64\x57\xa1\x72\xee\x1f\x5f\xe6\xc7\x36\x7a\x4d\xcb\x97\x94\x93\xe4\x3d\xd0\xf0\x51\x55\x0a\x11\xf5\xdf\x65\x97\xed\x66\x02\x7d\x57\x52\x5d\x8f\xaf\x6c\x6e\x51\x68\x33\x61\xe7\x93\x99\x4b\x8a\x15\x91\x3b\x9c\x03\x15\x36\xb2\x19\xab\x93\x72\x6b\x01\x89\x11\xbd\xc7\xdd\x3f\x51\x90\x8f\x9f\xdc\x03\xc3\x46\x39\xcd\x04\x3c\x63\x32\x2c\x33\x00\x96\x31\x39\x42\xe6\x6a\x9d\xf6\xdd\xcf\x4d\xc4\x0a\x02\xbd\xe6\x9b\x4a\x6c\xe6\xd0\xc1\x3b\x86\xba\x5c\xb2\x71\xc8\xaa\x03\x6d\x43\x61\x53\x56\xa9\xb1\xe5\xc4\x60\x8b\x18\xb7\xf7\x3e\x4b\x5a\x54\xa0\x6d\x32\x88\xe2\xc6\xf0\xe9\x28\x48\xed\x96\x46\x1e\xdc\xd4\x33\x5d\x9d\xca\xd3\xdb\x8d\xc2\xcc\x7c\x28\xf7\x72\xfe\xb6\x08\x4a\x68\x49\xbd\x9e\x2f\x56\x15\x44\x2f\xa6\x37\x16\xf7\x1a\x2d\x29\x93\xa1\xde\xa5\xba\xf2\xe7\xcb\xee\x7c\xd6\xc8\x01\x92\x85\x37\x84\x02\xa0\x04\x31\xbb\xbd\x23\x06\x9b\xa2\x7c\xb3\xb4\x2f\xa0\x50\x92\x8d\xf8\x2a\x95\xc7\x35\xf1\xe6\xf3\x28\x97\x55\xc9\x9e\x62\x90\x61\x5a\x25\x15\xc0\x78\xbb\xcb\x4c\x27\xa9\x86\xdc\x47\x61\x11\x7d\x9f\xa2\x11\x84\x61\x34\x2e\x3a\x7d\x2e\x8f\x78\x1e\x52\xe2\x62\x0a\xea\xa5\x1b\x45\x4a\x93\x6f\x1d\x0e\x19\x11\x8a\xab\xe6\x69\x8e\x27\x49\x78\x56\x59\x1c\x9b\xeb\x5c\x35\x23\x9a\x74\x62\xce\xfa\x7d\x37\xe6\xd7\x5d\xba\xb8\xdc\x0d\xe6\xcd\x36\x92\x20\x13\xba\x8b\xd5\xdc\x1c\x51\xac\x75\x16\xba\x10\xa0\x8a\x25\x65\xb5\xdb\x0a\x93\xfe\xf8\xca\x18\x48\xd5\xad\xa6\xca\x0c\x61\xf9\x8a\x29\xf7\xa2\x64\x06\x89\x65\x74\xce\x28\x14\x0a\xdb\xcb\xa8\x95\x84\x15\x66\x62\xec\x0a\xfc\xea\xc4\x05\x2e\xdf\xc5\xdc\x9e\x4d\x13\x19\xa5\x90\x32\x92\xb4\x70\xd1\xde\x41\xe0\x39\x48\x10\x24\x0c\xc9\xe6\x9c\x1c\x73\x8f\x67\x80\x8a\x25\x1b\x6c\xb4\xf2\x10\xf0\x68\x0f\xe9\x87\xa5\x9b\x2b\x37\x9e\xd7\x28\x30\xf1\x93\xb7\x4a\x06\xda\xc5\x66\x3d\xc1\x15\x49\x56\x1b\x58\xba\xef\x21\xcf\x24\x19\x4a\xe7\x80\xb5\x7e\x8e\x24\x95\x68\xb1\xe1\xf9\x85\xc1\xe7\x63\xe5\xb7\xbc\x83\x42\x26\x5f\x09\xee\x19\x1a\xe6\xf2\xe0\xbd\x61\x67\xbd\xbe\x85\x79\x54\xac\xff\x17\x97\x37\x52\xf7\x68\x80\x46\x9f\x1c\x95\x70\xf4\x6d\xb2\xa1\x7e\xde\x4e\xe8\x5b\x5b\x47\x43\xcf\xc1\xde\xc1\x69\xf7\x6e\xf9\xb4\xc5\x9b\x9b\x8f\x54\xae\x5f\xe2\x94\xb7\x9b\xf1\x8d\xa7\xa2\xdb\x7e\x85\x57\x21\xc0\x2f\xee\x5c\x74\xa3\x78\x5d\x99\x15\xfb\x2e\x16\x6d\x3c\x87\xb6\x22\xe5\x30\x04\xf1\x98\x1c\xa3\xfe\x0e\x19\x8f\xbf\xc9\xb8\xdf\x08\xbe\x8f\x93\x69\x46\x93\xe0\x3a\x06\x0d\xa7\xc4\xe8\x18\x11\x7f\x38\xac\xd2\xa4\x28\x31\xc0\xa5\x12\x97\x6e\x57\x9b\x0b\x71\x5c\x2e\xd9\xc4\xea\xb3\x57\x39\xae\xab\x16\xcc\xa4\xc6\xbf\x64\x40\x80\xb5\x0a\x1e\x7c\xe1\x09\x1a\xef\x7b\x97\xbf\x45\x48\x71\xce\x3c\x47\x7b\x75\x89\x69\xa2\xda\x48\x31\x03\x8d\xb7\xcb\xb0\xb8\xc1\x5d\x73\x5a\xb0\x9b\x57\xeb\xb3\x18\x77\xac\x5b\x9a\xbe\xee\x27\xbe\x5b\x0a\x34\xdc\xac\x6e\x0b\x6c\x6f\x7a\x79\x07\xe2\xcf\x23\x11\x0b\xb7\x0c\xf7\x6e\xc0\xfd\x3d\x6e\x57\xf2\xea\xf0\xb8\x82\x68\x57\xd3\xb6\x71\xbe\xb6\x77\xaa\x2c\xe5\x9b\x06\x57\xc3\x6a\x02\x26\x57\xf5\x1e\x67\xf0\xb8\xe7\x01\x9c\xf8\x37\x46\xf0\x66\x48\x38\xd6\x7e\xf8\x6d\xf6\xa8\x97\x5f\x36\xf5\x74\xfe\xd9\x6d\xeb\x2f\x59\x11\x51\x05\x96\x86\x2c\xfc\xba\x07\x69\x57\x51\x8b\xb5\x18\x47\x53\x49\x9a\xe3\xc5\x38\xf9\xaf\x4c\xf1\x10\x91\x94\x55\x45\xbb\xd0\x06\x28\xd1\xb3\xcf\x5b\xdc\x3e\x87\xaa\xca\x9a\x67\xbf\xc5\x46\xc1\x5d\xfe\x33\x19\x55\x09\x3a\x67\xaa\x62\x2d\x3a\xfa\x6e\x92\xaf\x4d\x90\x63\x69\x83\xbf\x7a\xc1\x53\x10\xa1\x5c\xb1\x92\xb7\xdc\x7d\x0b\x6e\x52\x6f\xba\xc5\x33\x63\xf5\xfd\x22\x47\x0d\xaf\xbf\xda\xc7\xc0\x73\xc0\xa2\x00\x2c\x74\x22\xf3\x51\xa6\xfb\x54\x63\x39\xf3\x2c\x35\x9e\xb5\x33\xb8\xf2\x38\x90\x06\x3a\xa1\xff\x88\xff\x59\x99\xe1\xdb\x4f\xdb\x91\x50\x81\xb9\x94\x70\x9b\xb3\x9b\x5d\xa2\xb1\xf2\x6e\xfb\xe4\x6b\x22\x32\xcb\x5f\x38\xf9\x23\x9b\x90\xcb\x08\x86\xa0\x1c\x5a\x92\x66\x3b\x40\xf2\x7a\x3b\x96\x84\x02\x0b\xf7\x13\x4c\xcf\xec\x36\x31\x89\x76\x01\x0e\xe4\x35\xef\xd0\xb8\x67\xb7\x14\x3f\x17\x8b\x5f\xee\x38\x08\xdb\x86\x0e\xc4\xa5\x1e\xa5\xc9\xa2\xf4\x43\x99\x9e\x7e\x3f\x22\xc0\x62\xc6\xa1\x7b\xda\x01\x5d\x76\x86\x6d\x82\x4f\x40\xcd\xe0\xec\x25\x61\x50\x0d\x53\xef\xd7\x7a\x2f\xb4\x55\x99\xb9\xd7\x6f\xdf\xbf\xa7\xb1\xcf\xb1\xda\x40\x48\xfd\x17\xf9\x9b\x15\x41\xe3\xff\x3d\x37\xff\x0b\x00\x00\xff\xff\x93\x6c\xcb\x15\x8f\x06\x00\x00") -func test_certsNodeKeyBytes() ([]byte, error) { +func test_certsClientTenant20KeyBytes() ([]byte, error) { return bindataRead( - _test_certsNodeKey, - "test_certs/node.key", + _test_certsClientTenant20Key, + "test_certs/client-tenant.20.key", ) } -func test_certsNodeKey() (*asset, error) { - bytes, err := test_certsNodeKeyBytes() +func test_certsClientTenant20Key() (*asset, error) { + bytes, err := test_certsClientTenant20KeyBytes() if err != nil { return nil, err } - info := bindataFileInfo{name: "test_certs/node.key", size: 1675, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x8b, 0x76, 0xe7, 0xdc, 0x50, 0xd5, 0x31, 0xab, 0xac, 0xd7, 0xa8, 0xde, 0xac, 0x83, 0x88, 0x28, 0x4a, 0x13, 0x9f, 0xfb, 0xf, 0x69, 0xb5, 0x16, 0xdb, 0x66, 0x45, 0x25, 0xea, 0x2e, 0xac, 0xdc}} + info := bindataFileInfo{name: "test_certs/client-tenant.20.key", size: 1679, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xa0, 0xde, 0x89, 0x71, 0x2f, 0x2f, 0xf4, 0xaf, 0xb6, 0xa8, 0xdc, 0x4e, 0x9, 0x18, 0x21, 0xa, 0x56, 0x45, 0xb, 0x12, 0x91, 0xf7, 0xf4, 0x42, 0xce, 0xe7, 0x9, 0xa, 0x28, 0x47, 0x9d, 0x71}} return a, nil } -var _test_certsMtCaClientTenantCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x94\x4b\xaf\xb2\x48\x18\x84\xf7\xfc\x8a\xd9\x93\x89\xc8\x45\x71\xf1\x2d\xba\xe9\x06\x01\x1b\x68\x45\x04\x77\x20\x37\xb9\x1c\x40\x84\x06\x7f\xfd\xe4\x9c\x49\x66\x92\x99\xef\x5d\x3e\x8b\xca\x9b\xaa\x4a\xfd\xf9\x7d\x10\x1b\xa6\xf3\x87\x86\xcf\xbe\xa9\x9b\x1a\xf0\xf1\x0f\xe5\x88\x69\x22\x58\x69\x1a\xc8\x76\x05\x60\x26\x04\x85\x49\x69\x71\xd9\xb3\xe7\x70\xcf\xce\xc1\x2c\xdd\x3a\x6f\x8a\x19\xff\x40\xc0\x81\x45\x3d\x94\xf5\xd3\x38\x30\x01\x02\x3a\xea\x00\x81\x17\x47\xce\x26\xc3\x20\x42\x01\xa5\x36\x66\x0d\x4a\x44\xe7\xf5\x68\x0f\x65\x24\x16\x8b\xee\x03\x1f\x16\x4e\x00\x01\xf1\x11\x76\xe6\x48\x7c\xaf\x89\xa8\x57\xb1\x06\x11\xf5\x41\xa6\x33\x61\xe5\x08\x02\x22\x41\xf5\xe2\x54\x40\x24\xbe\x1e\xeb\x4c\xf8\xfc\x30\xbf\xf8\x87\x11\x6d\x5c\x70\x05\xe8\xdf\x62\x9d\xaf\x5d\xff\x15\xe3\x62\x84\x03\x02\x89\x01\xb6\x57\x0c\x16\x42\xa8\x78\xa8\x62\xc9\x9a\xa3\x9b\xd3\x99\xd8\x81\xc4\x34\xa1\x59\xfd\xf7\x7d\xac\x03\xe0\x6a\x80\xaa\xe0\xdb\x03\xa8\x15\xb6\x06\x28\x06\xcd\xd5\xa0\xda\xae\x7e\xdf\xf1\xae\xba\x3c\xe7\xaf\x36\xd7\x9b\xd4\x0b\xe7\x8f\x5d\x5e\x54\xe5\x70\x27\xce\x66\x14\xd1\xa2\xb7\xd1\xa3\xec\x1e\xa7\x53\x1b\x5b\x36\x27\x7c\x46\xfb\x30\x2d\xdb\x47\x7f\x67\x0a\x83\x7d\xdc\x76\x57\x6a\xe8\x3d\xbd\xcb\x67\x3a\x5c\x98\xb3\xcf\xe5\x58\xb2\x86\x08\xf7\x5f\xcf\x0d\x0f\x9c\xc5\x76\x65\x5c\xc8\x8a\x68\x7a\x5d\x32\x87\x9c\x94\xc7\x63\x07\xaa\xcb\xa8\x51\xf4\x45\xd1\xd0\x87\xef\x24\xcb\x84\xe3\x4e\x6f\xed\x60\x2f\x7e\x3c\x36\x3f\xea\x8e\x77\x06\x82\xcd\x50\x46\x16\x4f\x26\x2d\x8d\xea\x76\xb5\x12\x63\xdd\x4b\x88\x7b\x65\x77\xd8\x2f\xcc\x25\x52\x18\x9c\x9a\x49\x9c\xbc\xc4\x0b\x6a\xad\xd8\x52\xdd\xf7\x88\x08\x85\x62\xc8\xe9\x25\x5e\x0e\xa2\x52\xdf\xcb\x31\x5a\xde\x5a\x3b\x0b\x11\x7b\x37\x29\x13\xdd\x7b\xc2\x05\xca\xfc\x18\xd4\x51\xac\x8e\x7d\x12\xb6\xfa\x12\xb2\x59\x39\x77\x64\x14\xe8\x9a\xe7\xd7\xd9\x76\xeb\xf3\xe3\xb0\x31\x13\x30\xc9\xab\x9f\xbe\xa7\xf1\x41\x1a\xe6\xe2\x66\xc6\xc2\x8e\xb7\x86\x27\x97\xb5\x3b\x53\x2d\xba\xf8\x88\x89\x6e\x25\xcf\x5d\x69\x0c\x6f\x29\x1a\x9e\x67\x78\x51\x22\x98\x9f\x26\x6a\x22\x40\x01\xec\xd6\x88\x59\x08\xb8\xdf\x51\x1e\xa9\x0a\x41\xae\x62\x08\x88\xc6\x81\x89\x32\x5c\x44\x28\x38\x0b\x3e\xa0\xc7\x0d\x04\x05\x83\x05\x86\x9b\xef\x56\xfa\xbf\x69\xdf\x4f\x7c\x18\x40\x31\x0c\xdd\x7d\x18\x70\x2e\x2a\xcb\x07\x8d\xa8\x76\xba\x5d\xb3\xa5\x74\xd3\x38\xc8\xfd\x21\x8b\x5e\x62\xba\xeb\x4d\x7e\xfe\x30\xd5\xaf\xb7\x1a\x20\xfb\xb1\x75\x6e\x6b\x5e\xca\xa9\x77\x95\x50\xfa\x59\x64\x53\x89\x8e\x13\xb7\x4c\xfd\xe6\x39\x0c\xaf\x28\xcb\x24\x79\x0b\xa3\x60\xbf\x95\x72\x57\x86\x06\xb2\x9d\x66\xd9\x28\x04\xf4\x7a\x36\x0a\xe5\x34\x37\x4f\xdb\xd6\xe2\xb1\xef\xf6\xbd\x5f\x5e\xeb\x2a\x0b\xf9\x30\xdf\x73\xdd\x46\x96\x78\x24\xde\x1c\x7e\x14\x46\x7b\xf6\x06\x1c\xce\x4b\x5d\x4c\x6a\xfb\x39\x7a\x7d\xa0\xbe\xe6\xdc\x0c\x66\xec\xad\x6f\xc8\x6b\x86\xb8\x63\x06\x29\xdd\xbd\xc8\x9e\xa5\x11\x04\x8f\xd9\xe2\x5a\x31\x55\x6c\xfe\xab\x91\x02\x15\x5e\xd0\x70\x1f\xb6\x2b\xdb\x25\x01\xc2\x4d\xfa\x82\xf5\x72\x72\x36\xee\x79\xe7\xc8\xd7\xf6\xa2\x10\xf9\xfd\x02\x73\xb8\xd6\xe0\xda\x09\xce\x07\x2c\x7c\x41\x0a\xae\x79\xd7\x91\x52\xdd\x04\xc5\x18\xfd\x79\x52\xab\x75\x38\x58\x11\x0f\xe8\x6e\xd9\xdb\xf0\x4a\x52\x75\xcf\x9b\x56\xec\xa7\x60\xfd\xaa\xa0\xe7\xb1\xd2\x9b\x2e\x55\xae\x8a\x89\x68\xd5\x5b\x4d\xba\x71\xb7\xbc\xba\x41\xff\xfe\xc4\xc6\x74\x38\x83\x5f\xbf\xb8\x9f\x99\xc0\x0e\xfa\xff\x74\xfc\x15\x00\x00\xff\xff\x9e\x16\x6d\x2a\x57\x04\x00\x00") +var _test_certsClientRootCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x64\x94\xcb\xae\xba\xc8\x1a\x47\xe7\x3c\xc5\x99\x9b\x13\xb9\x23\xc3\xba\x81\x80\x05\x14\x1b\x41\x9d\x01\x6a\x21\xca\x45\x51\x4a\x78\xfa\xce\xfe\x77\xd2\x3d\xe8\x6f\xb8\xbe\x64\x4d\x7e\xc9\xfa\xff\xef\x41\xe2\x7a\xe1\xff\x10\x49\x52\xcf\xf1\x10\x48\xc9\x1f\x2a\x51\xcf\x43\xeb\x05\x21\x70\xb9\x70\x20\x3c\x08\xb8\xc7\x0a\x4b\x27\xbe\x2a\xce\xa7\x26\xc4\x38\x3e\x8c\xc1\xc9\x89\xdc\x14\x84\x90\xdf\x9f\xf5\xfd\xe6\xda\x42\x86\x80\x8d\x0e\xc0\xe0\x25\xd1\xc4\x13\x04\x1c\x71\xc6\x58\x40\xc4\x03\x97\x6a\xf8\xaa\x5a\xbb\x3e\xaa\xfc\xeb\xa4\x20\x85\x3c\xcc\x20\xa0\x29\x26\xe1\x74\x54\xdf\x73\xa9\x3a\x4d\x81\x20\x66\x29\xb8\x38\x42\x9e\x25\x8a\x81\x46\xd3\xfd\x97\xa6\x4c\xa5\xcd\xb9\xf8\x85\x61\x0a\x34\xda\x80\x7f\x18\x45\xf4\x4b\x1a\xc0\xfe\x96\xf5\x29\xda\xff\x2b\x93\x0a\x4c\x42\x0a\x46\x17\x28\x7b\x02\xbe\x94\x54\xad\x3d\x9d\x31\x42\xe0\xc7\x13\x98\x1d\xfd\xa0\x3f\x79\xf5\x54\x85\x80\x11\x08\x19\xc0\x9c\x93\x18\xfc\xfe\x59\x8f\x38\x27\x50\x02\xd1\x4e\x80\xe8\xfd\x9c\x4c\x40\xcd\xe4\xf9\xea\x8e\x9f\xde\x5b\xed\xd9\x4e\xf7\x6b\x23\x5c\xaa\xe4\x74\xaf\x23\x2b\xfa\x7c\xf2\x15\x3c\x7f\xac\x28\x68\xf7\x78\xf6\x73\xf7\x79\xad\x78\x1f\x99\x8a\x74\x17\x03\x7e\x26\x71\xba\xe0\xa0\xde\x44\xd6\x19\x50\x34\x58\x50\x3d\xb4\x0a\x6c\x0f\xa1\x78\x0d\xa3\xe2\xdc\x1a\x5a\xf3\xc2\xfb\x9e\x59\x06\x49\x9c\x2a\x07\x33\x36\xd6\x8f\x1b\x6a\xee\xdf\x5a\x32\x22\x5f\x49\x5a\xfa\xf0\x17\x38\xed\xaa\x61\x18\xde\xb5\x26\x7f\x62\xa7\x52\xb3\xcd\xe8\x99\xe6\x16\x09\xd9\xd2\x5b\xbb\xd5\x5d\xd7\xad\xad\xee\x15\x95\x96\x6a\x4c\xe2\x91\xdd\x8f\x46\xb0\x00\xa9\x79\x6f\x1c\x5e\x5e\xde\x79\xcd\x6f\xb5\xfa\xe5\x53\x18\x5c\x33\xcf\x70\x9a\xae\xe7\xc3\xc9\x9a\xf6\x26\x3a\xe3\xb4\xb4\xd7\x4d\xd7\xf2\xfb\x35\x05\xdd\x6d\x80\x56\xb3\x9c\x37\x6c\x33\xae\xaf\x89\x94\x5f\x8d\x6d\x6b\x3e\xb4\xc4\x7c\x84\xd7\xfd\xe5\x9e\xe3\xac\x1b\xd7\x77\x98\x07\xae\x18\xa0\xf0\x62\x9f\xd8\xef\xa1\x24\x90\xcc\xa7\x75\xfb\xf5\xc6\x6e\x25\x1e\x58\x5f\x08\x31\x37\xdd\xb7\xea\xa4\xe7\xa2\x9f\xdf\x1f\x6c\x67\xd8\x7b\x79\x57\x1a\x45\xfc\xfa\xa3\xd0\x0a\x01\x41\x00\x28\x68\x47\xd1\x5e\x60\x7e\xc4\x59\x22\xc7\x80\x6d\xd7\x10\x30\x0c\x78\xce\x29\xa4\xbf\xcb\x9d\x25\x9f\x31\x4a\x41\xef\x22\x34\xba\x80\xed\x1d\x28\x28\xa2\x40\x76\xd1\xcf\xd3\xfd\xf1\x4a\x0d\x33\x02\x91\xd8\x03\xa0\x7b\x10\x30\x60\xea\x68\x35\x1e\x40\x9b\xbf\xfa\x4d\xb8\x33\xc7\x5a\x1a\x6c\x79\xdc\x1d\xd6\xbe\xb5\xda\x8d\x56\xf1\x95\xf1\xe5\x67\x0a\x86\x21\x24\x95\x89\x3d\x83\x5c\x27\xeb\x20\x9f\x9e\x65\xc1\xe3\xb5\x02\xe1\xab\xb3\x9d\xb7\x68\x52\xac\xba\xe2\x40\x9e\xab\xb5\x21\xe9\x7a\x54\xc6\x9f\xf6\x96\x8b\xbd\xf1\x2e\x9e\x3a\x3c\x79\xa4\x9b\xf2\x83\xb2\xf9\x1e\x0f\x19\xdc\xcc\x83\x19\x74\x21\x5b\xe2\xb2\xf7\x93\x13\x3a\xdb\xce\xb9\xd3\x95\xf0\x13\x26\xda\xa6\x9f\x83\x45\x2a\xb7\x47\xe7\x6b\x94\xc9\x0c\x14\x37\xb6\x14\x74\xc5\xcd\xb1\xbd\x3f\x8f\xc2\xf2\x5f\x95\xf5\x73\x7b\x90\xc6\xdf\x76\x87\x26\xb0\xda\x9f\x6a\xe6\x9f\x4a\xb3\x35\xce\x19\x5a\x8b\xc4\xb8\xe8\x7a\x25\x69\x2e\x59\x8e\xe4\x3e\xe6\x6e\x5f\xac\x7d\x39\xdb\x96\x18\x6b\xd3\xac\x9e\xcc\x9b\xbf\xeb\x1b\xb5\xbd\x55\x97\x22\xbe\x68\x1f\x99\xda\xab\x46\x53\x43\x65\x29\x47\x56\x6c\x8b\x54\x11\xdd\x27\xef\x24\xd5\x7f\x60\x2e\x5f\x65\xa5\xda\xf6\x38\x7e\xd2\xc6\x6b\x23\x43\x29\xe6\xfb\x27\x4a\x87\x7c\x95\xcd\x64\x46\x4e\x50\x67\x51\x74\xab\xe6\xce\xc0\xfe\x30\x2e\x9d\xde\x0e\x95\x35\xdd\xfa\x64\xd7\x48\x37\x5b\x7b\x48\x7f\xd2\x40\x42\xfc\xdf\x5c\xfc\x15\x00\x00\xff\xff\x8b\x90\xea\x5c\x4b\x04\x00\x00") -func test_certsMtCaClientTenantCrtBytes() ([]byte, error) { +func test_certsClientRootCrtBytes() ([]byte, error) { return bindataRead( - _test_certsMtCaClientTenantCrt, - "test_certs/mt/ca-client-tenant.crt", + _test_certsClientRootCrt, + "test_certs/client.root.crt", ) } -func test_certsMtCaClientTenantCrt() (*asset, error) { - bytes, err := test_certsMtCaClientTenantCrtBytes() +func test_certsClientRootCrt() (*asset, error) { + bytes, err := test_certsClientRootCrtBytes() if err != nil { return nil, err } - info := bindataFileInfo{name: "test_certs/mt/ca-client-tenant.crt", size: 1111, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xcd, 0x42, 0xcb, 0x50, 0xb8, 0xea, 0xaa, 0xd8, 0x5e, 0xf7, 0x68, 0x25, 0xbd, 0x9f, 0xae, 0xb9, 0x1e, 0xc0, 0xcb, 0x13, 0x74, 0xaf, 0x8d, 0x33, 0xd5, 0xfe, 0x80, 0x5, 0x38, 0xff, 0x96, 0x7d}} + info := bindataFileInfo{name: "test_certs/client.root.crt", size: 1099, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x2f, 0x50, 0x65, 0xc9, 0xf3, 0x7d, 0x96, 0xb4, 0xe0, 0x64, 0x6f, 0xb0, 0xc, 0x78, 0x4c, 0x41, 0xb3, 0xe2, 0x24, 0xc1, 0xa7, 0x20, 0x86, 0xa4, 0xce, 0x74, 0x54, 0x81, 0x7b, 0x38, 0xf2, 0xfd}} return a, nil } -var _test_certsMtCaClientTenantKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\xa7\x12\xa4\x50\x02\x85\x61\xcf\x53\x8c\xa7\xb6\xc8\xdd\x20\x56\x90\xa1\xc9\x39\xb8\x26\x36\x39\x5f\xc2\xd3\x6f\xcd\xe8\x3d\xf6\x98\xdf\x7d\xff\xf9\x3b\x4e\x94\x55\xf3\x8f\xeb\xb1\x7f\x6c\x57\x0d\x59\x5f\xfc\xa3\x89\xc9\xbf\x07\x32\x54\x55\x9c\x6a\x95\x63\x59\x8d\x67\x1d\x91\xed\x03\xd9\xe1\x5f\xdd\x9e\x8a\xaf\xd6\x6b\xc0\x38\x54\x52\x5f\xd8\x31\x78\xb4\x9f\x47\x53\x4c\x6a\x98\xc8\x86\x0b\x97\x34\x24\xf9\x6f\xca\x75\x1d\x1a\xbe\x1f\x0d\x7d\x36\x8d\x39\x2e\x2c\x9f\xd3\x93\x3a\xb9\xf9\x3b\x4c\x81\x23\x4b\xb3\x93\x92\xae\xb3\x78\xa7\xf9\xae\xc8\x2f\xf1\x59\x12\x71\x1e\x1b\x04\x66\xcd\x4b\xb3\x48\xb1\x26\x29\x5c\xb5\xa1\x29\x03\x31\x51\x7d\xb7\x89\x6d\xbd\x8d\x77\x84\xd1\x11\x96\x39\xde\xb3\xb2\x44\x95\x97\x34\x68\xe1\x1b\x7f\xec\x13\xe4\xdd\x04\x9b\x8b\x21\xaa\x31\x29\x7c\x60\xe3\xe0\x8b\xa4\x1b\xee\x4f\x26\x43\xf7\x9b\x10\xd6\x32\xe5\xe6\xeb\xb4\x0c\x22\x0e\xf5\xfe\xc0\x0f\x3b\xb3\xc3\x8e\xaf\x31\x47\xf2\x6d\x03\xe7\xd0\x7a\xa9\x1c\xef\x7b\x31\x38\xd5\xa5\xbf\x2d\xb9\x76\x7e\x00\x68\x72\xee\x7d\x71\x42\xb8\x95\x66\x21\x05\xf2\x85\xde\xf0\x56\x99\xb3\x78\x90\xae\xf8\x04\x94\x3b\x19\x1b\xea\xdc\x55\x15\x00\xcd\xea\xdc\x9c\x41\xd4\x8c\x3d\xc8\xdb\x2f\xf6\x63\xcb\x8d\xfe\xb4\xc4\x1e\x88\xe8\x0b\x82\x3f\x4b\x53\x0e\x2f\x95\xae\xa7\xaf\x22\x1a\xd2\x27\x6b\x5e\x3f\x79\xd9\x89\x64\x69\x5c\xce\xa3\x12\xae\xd2\x0f\x47\x15\x58\x87\xe5\xd8\x49\xe5\x58\x4e\x4c\xb4\xa7\xd7\x56\x67\xa2\x10\x22\xc2\x20\x37\x2d\xbe\xa2\xf2\x3d\x08\x51\x6d\x62\x8f\x30\x5f\x52\x7e\xaf\xfd\xb1\x1f\xa4\xfe\xc0\x9e\x53\x81\x30\xfe\x39\xb3\xd7\x5c\xaa\x47\xc4\x92\xc3\x7c\xd7\x67\xf1\xbd\x46\xa4\x73\x21\xa4\xd0\x09\x86\xa6\xbe\xb8\x96\x20\x48\xbe\xa0\xf7\x53\x0c\xf6\xa9\xea\xac\x1f\xff\xe6\xea\x14\x5e\xd2\x72\xd2\xfc\xdb\x11\xe9\x74\x4e\x72\xa1\xa5\xf9\x2c\x1c\xee\x69\x1b\xf0\xac\xb3\x9c\x42\xc9\xa4\x2a\x13\xa1\x61\x8e\x06\x76\x38\x0c\xa5\x45\x1b\x06\xf6\x64\x0e\x95\xc8\xb7\xd6\xa2\x52\x6d\x08\x08\xf9\xd3\xb9\x35\x89\x06\xeb\xe0\x63\x55\x53\x09\xf0\xc6\x62\x12\x2e\x65\x33\x4c\x6e\x93\x23\x8d\x88\xff\x40\xa3\x14\x15\x42\xeb\x77\x53\x84\xf9\x97\xa8\x44\x6b\xb9\x71\x2d\xf6\x92\x7e\xbc\x69\x7e\xfd\x3a\x7a\x3c\xf9\xa7\xd8\xc7\x86\x89\x4a\x9e\x50\x97\x51\xce\x73\x4c\xae\xd6\x85\xf4\xbc\xb8\x46\x82\x01\x75\x5f\x22\xc1\x46\xb8\xb5\x48\xdd\xdf\x09\xf1\xdd\x76\x7b\x30\x7d\xad\x79\x35\xe9\xbe\x8c\xe0\x27\x3b\x24\x04\x13\x66\x47\xf5\x53\xaa\x7f\xaa\x42\xdc\x37\x8b\x79\xc1\x38\xff\x19\x3d\x50\x0a\x32\xc4\x7e\xe8\x08\xff\x8a\x7c\x9d\x88\xec\xd9\xe5\xcf\xc9\x93\xc0\xc5\xb7\xe6\x0a\x78\x8b\x80\xed\x10\xe3\xf4\x31\x38\x8d\xb2\x6a\x1a\x9c\xb9\xbb\xf8\x2c\x5b\x90\xdb\xac\x85\x66\x4d\xcc\x3a\xac\x0b\x35\x74\x08\xac\xf6\xb1\xc1\x19\x48\x75\xbb\xfb\xae\x34\xf3\x67\x06\x94\x32\x69\xcd\x45\xc1\xf4\x1c\x6e\xe9\x90\x4a\x77\x36\xe2\x0e\x55\x97\x5f\xfc\x43\x39\xc5\x8a\x17\x17\x1e\xe4\x7d\x2b\x4b\x90\xda\xde\x2d\x8e\x48\x0f\x7a\x05\x0c\x47\x78\x8f\x2f\x84\x52\xb7\x39\x0e\x23\xb0\x20\xa0\x2c\x82\x61\x8b\xf8\x52\x8c\x5a\x2c\x3e\xf6\xd8\x1b\x04\xd9\xa7\x37\x90\xd0\x7f\xc5\x97\x76\x1f\xd0\x6e\xbf\x57\x8b\xa7\x30\xe4\xe2\x18\x6d\x0b\x3c\xfc\x72\x4d\x2c\x35\x65\xd7\xa6\x0c\x26\x15\x3d\x67\xf5\xf2\x77\x15\xd1\xed\xc3\xb5\x30\x6a\xb2\xe6\xe7\x9b\xb0\x19\x88\x14\xf7\x0c\xdb\x5c\x7a\x41\xad\xac\x97\x3e\x7a\x73\x09\x77\x57\x2f\x20\xf8\xe9\x12\x0e\x1e\x58\x92\x73\xa5\x68\x27\xde\xe7\x0f\x57\x84\x26\x9d\x59\x39\x78\x0e\xb5\xdf\x14\x07\xb5\xe6\xfe\xa1\xd8\xdd\xd5\xec\x0d\xc9\x03\x08\xd3\x49\xcb\x15\xb6\x44\xda\xc5\xed\x3a\xbc\x72\x9c\x3c\x97\x1b\x81\xb2\xdd\xe7\xc3\x13\xf1\x8d\xde\x24\x55\x9c\x7f\x93\xd9\xf5\xf4\x30\xb8\x3b\x7e\x02\x17\x27\x8a\xbb\xad\x03\x9a\x4b\x16\x74\xff\x8c\xca\x3c\xef\x4a\xf0\xaf\x91\xa8\xa4\x16\x5d\xe7\x6f\xeb\xa7\x1f\x33\x96\x0d\x92\xa3\xfd\x9a\x02\x6e\x54\x09\xf6\x5b\x1b\x12\xfa\xb2\xa4\x3b\xa2\xec\xfa\x65\xfc\x42\x2e\x61\x52\x61\x69\x20\x59\x7c\xd3\x37\x38\x2f\xfc\x26\xee\xf8\xf2\x40\x4d\x49\xfa\x6a\xb6\x9d\x44\x0c\xf5\x51\xa5\x0b\x47\x92\x08\xbd\xf7\xba\x66\x87\xc5\xa9\xea\x9c\x72\x51\x81\xf9\x72\x28\x7c\xe3\xcc\xd7\xf0\x7e\x43\xe3\x76\x30\xcd\xce\x0e\x06\x06\xeb\xaa\xa5\xef\xfa\xbe\x25\x89\xa3\x71\xb5\x52\xcf\x99\xc7\xcb\x39\x46\xf1\x88\xae\x47\xcc\xf3\x01\x19\xac\x1b\x21\x12\xbd\x92\x91\x79\x9d\xef\xdf\x95\xde\x30\x0d\x59\x48\xd7\xc6\x24\x49\x2e\x09\x86\x55\x02\xd2\x4b\x13\xe7\xac\x82\xdd\xe0\xb9\x5b\xb9\xcb\xf0\xd1\xc6\x2b\x5a\x2c\x81\x44\x84\x4a\xa2\x0a\x33\x17\x4d\x3e\x98\x83\xe5\x58\xbc\x09\xa5\xe2\x8d\x84\x9a\xae\x18\x00\x50\xd9\xc8\x9c\xf9\x3d\xe1\xf8\xa0\x48\x47\x35\x41\x58\x4e\x7e\x45\xf4\xa8\xd2\x93\xdc\x9a\xfd\x0f\xbd\xf7\x52\xc9\xd8\x59\xeb\xad\xdf\x84\x22\xa2\x98\x69\xb7\xc0\xe6\x73\x1b\x41\x06\x6f\xef\xec\x24\xb3\xda\xe2\xc3\xf1\x7e\x33\xf1\x24\xb3\xbe\x95\x63\xdc\x1c\x06\xbd\xd5\x2a\xd3\x1c\xee\x6f\xb2\x0a\xed\x20\xc8\xcb\x5c\x20\xfa\x96\xff\xf9\x20\x72\xed\xcf\x1b\xed\x6f\x1f\x83\xc0\x21\x58\x66\x0c\x6f\x5e\x7f\x21\x01\xc8\xd7\x76\x70\xbb\x29\x89\x15\x1b\xa0\x85\x29\x96\x66\xb9\x09\xea\xfb\x17\xe3\x38\xaa\x6a\x78\x91\x74\xd3\xd7\xde\xde\x3f\x5e\x2a\x5f\x98\xf6\xf1\x76\x06\x1a\x61\xd7\xe1\x92\x73\xad\xfd\xb1\xc4\x79\x66\xc4\x9f\x3e\xf1\xa5\x05\xb9\x2a\xd3\xb6\xe8\xcc\x5c\x09\x31\x6d\x02\x50\x5f\x87\x99\xd1\x7b\x80\x45\x6d\xf0\x5f\xe8\x1f\x29\xa2\x29\xfc\x7f\x6a\xfe\x17\x00\x00\xff\xff\xe3\xcd\x30\x23\x8b\x06\x00\x00") +var _test_certsClientRootKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x95\x37\x12\xab\x5a\x02\x05\x73\x56\xf1\x72\x6a\x4a\x80\xb0\xc1\x0f\x30\x17\x8f\x84\x77\x19\x08\xb8\x08\xef\x84\x5b\xfd\xd4\x7f\x93\xce\x49\x4f\xd2\xd5\x49\xff\xe7\xdf\x09\x40\xd1\x5e\x7f\x5c\x8f\xff\x63\xbb\x5a\xc8\xfb\xe0\x8f\x01\x92\xbf\x0f\x62\x69\x1a\x98\x78\x4d\xe0\x79\x43\xe4\x1d\xc0\x93\x3b\xcf\xd3\xc4\xfc\x18\xf9\x7b\x52\xe6\x5f\xf1\xa5\x61\x43\xb9\xfc\x0e\x7b\xb5\x7d\xbe\x4e\xb9\xf7\x00\xb3\xd2\x34\x95\x93\x32\xc1\xac\xe4\x8c\xa4\x8e\xad\x75\x49\x36\x71\x97\x08\x99\x25\xf2\xc5\xf6\x3d\x01\xce\xb6\xac\x59\x3d\x98\x0d\xe3\x0f\x63\x58\xd5\xb4\xcc\x03\x25\xfd\x3c\xc5\x5f\x7f\x07\x91\x61\x5d\x8a\x30\x36\x32\x2e\x04\xc0\x41\x38\x3b\xac\xc6\xc7\x80\x46\x9a\xf1\xf6\x15\xb5\x25\x87\x50\x49\xae\x60\xb0\x14\x76\xbb\xfa\xbe\x27\xd4\xca\x23\xd9\xf0\x4e\xe3\xeb\x68\x96\xf1\x63\x4a\xfe\xfe\xcd\x89\x1c\x26\x49\xa6\xfe\xca\x15\xa1\xf6\x3d\xef\x1f\x62\x18\xb9\x4d\xbb\x58\xe2\xfb\x79\x44\xc2\x46\xe3\x99\x22\x1a\x6a\xae\x88\x2c\x36\x71\x41\xd3\x46\xef\xf2\x2b\x76\xc3\x8f\xf3\x47\x1d\x7b\xbd\xf6\x27\xfa\x2e\x33\xd1\xe5\x2c\x11\x29\x8d\x56\xfd\xd9\xaf\xe7\x29\x5d\x37\xc7\xc9\xe9\xa3\x2d\xf3\x39\x2e\xd4\x39\xc0\x39\x97\x76\x93\x57\x54\xde\xa8\x23\x27\x63\x2e\xb6\x2a\x0f\xd9\xd6\x27\x88\x6e\x75\x80\xaf\x0f\x68\x0e\xbe\x17\x52\x31\x62\x60\x37\x96\xe3\x2f\x57\x25\x5f\xe5\x62\xd7\x04\x41\xda\x78\x60\x7d\xd7\x9a\x3d\x48\x5a\xe0\xcc\xe0\x3c\x34\x89\x77\x78\x81\x1f\x35\x81\x07\x09\x4e\x6e\xe6\xc5\x70\x14\x1c\xc5\x27\x86\x58\x63\xdc\xff\x70\xe7\x61\xe5\xef\xe3\x51\x28\x83\xa0\xcb\xd5\xb5\xde\xda\x50\x52\xf8\x4c\x8e\xbf\x6e\xfd\x9c\xb4\xda\xd0\xc5\xeb\x15\x7c\xec\x78\x6a\xf0\x9a\x1a\x06\x35\x66\x7d\x30\x01\x37\x0a\x91\x71\x1c\x28\x51\x81\x76\x42\x0f\xa4\x13\xcf\xd6\xb6\xce\x52\x1c\xe8\x6c\x81\x9b\x33\xd9\x10\x02\xf5\x00\xf5\xd7\xef\xd0\xf7\x9a\x3d\xaa\x8c\x61\xc5\xb1\x0e\x67\x29\x60\xd3\xa8\x14\xf7\xc6\x91\x11\x88\x62\x9b\xe0\x93\x19\xa7\xdf\xaf\xf2\xd0\xb7\xac\x56\x6f\x7b\x69\xe6\x53\x8f\xf5\xba\xc3\xb8\xf2\x1e\x43\xe6\x72\xd9\xf1\x02\x1f\xdf\x92\x59\xb4\x2f\xc3\x71\xf9\x66\xc2\xd7\xc5\x30\x02\x1a\x48\x97\x43\xc0\xfa\x11\x29\x4a\xdb\x30\x88\xcd\x69\x32\x78\x32\x6e\x22\xf9\xdc\x21\x03\x51\xba\x2a\x17\xfd\x95\x94\xc2\x6b\x18\xe8\x7d\xdd\x2c\x34\xeb\x68\xe1\x20\x45\xb0\x62\x00\xa2\xde\x89\x21\xae\x62\x3c\x4c\x62\x58\x96\xf3\x43\x9b\xab\x40\xb9\xfd\xd0\x0d\x89\x2e\xb4\xa2\x41\x56\x8a\x55\x97\xa3\xa6\xcf\x96\xce\x7c\x09\x5f\x22\x8c\x3b\xdd\x4a\xaa\x19\xf9\x14\x8d\xef\xcf\x1b\xd6\xed\x03\xc1\xad\x53\x64\x46\x20\xc2\x04\xf0\xcc\x59\xe3\x31\xc1\xc2\x38\x19\x3c\xaf\xf7\x86\x87\xb1\x48\x14\xdc\xb0\x86\xa8\x20\x69\xc4\xd8\x93\x7e\x96\x55\x94\xf2\x0a\x53\x57\x7d\xdb\x67\x89\xb5\xc7\x08\x95\x51\x40\x79\xc8\x0a\x1d\x3b\x85\xde\x4e\x25\xba\x9f\x07\xab\x50\x58\xa2\x5b\xf3\xcb\x93\x8f\x22\x48\x4c\x7c\x71\x70\xfb\x95\xb6\xba\xb6\x43\xbc\xd6\x78\x07\x4b\x95\x39\xe6\x2a\x05\x65\x20\xa2\x99\x5e\x4c\xe8\x7a\xb5\x4d\xf6\xa6\x28\xee\x16\x79\xde\x38\xc8\xe5\xf2\x7c\xac\x58\x7d\x19\xe3\xfb\xfd\xe4\x0f\x29\x70\x45\x78\xd1\xd2\xd1\x61\x9c\xdf\x5a\xaa\xfa\xf9\x4b\xcc\xee\x1b\x87\x38\x09\xf8\x8e\xab\x02\xe6\x2d\xb3\xe8\xd8\x6a\x0b\x87\x40\xcf\x46\xe1\x3e\xe6\x34\xe9\xed\xca\x86\xe0\x24\x9b\xf3\x8a\x6c\xf0\x7e\x6e\xa4\xe1\xf5\xce\x16\x97\x85\x24\x88\x26\xb6\xe4\x57\x41\x23\x4b\xa1\x56\x52\x10\xf4\x6e\xd8\xa0\x60\xe9\x64\x8a\xec\xa4\xb6\xc7\xd2\x04\x7d\x55\xa9\xd5\x42\x74\xea\x59\xee\x34\xba\x08\x5d\x31\xd5\x9f\xa2\xfc\xca\x1b\x39\xe5\xba\xfd\x7d\x1f\x26\x24\x0c\xc4\x0d\x6f\x93\x79\xe6\x44\xdd\x4c\xad\x20\x26\xd3\x2c\x3d\x18\xbe\x0a\x2a\x77\x51\xe6\x1f\xd7\x4e\xa6\xff\x65\xcd\xe6\x5f\xc9\x02\x1b\xeb\xee\x11\xde\x7e\xf4\xe9\xe5\x58\xd3\xed\x8a\x95\x0d\x80\xdc\x91\x68\x86\x9b\x47\x09\x7a\x5b\x3f\xaf\xf8\x7b\x70\x1e\xe8\xa6\xa1\xa9\x86\x00\x67\x39\xe0\xd8\xdd\x59\xde\xf2\x17\x15\x1c\x0e\x24\xf8\xec\x93\x9f\x91\x3d\xcd\xfc\x9e\xf4\x5a\xed\xfb\xc0\x42\x94\x79\xe1\x7e\x5f\x32\xda\xd7\x5b\xc5\xd3\x21\xd8\x77\x88\x09\x85\xb2\xb8\x0f\x4c\x4b\x7a\xae\x6e\x49\x42\x5d\xe5\x65\x2c\xd4\x26\xb2\xaf\x54\xb0\x19\xe8\x13\x65\xd2\x06\x1d\x46\x4a\xef\x5c\x44\xb8\xac\x08\x82\x36\xf6\x06\xf9\x30\xea\xe6\xfb\x2c\xa4\x9b\xff\x38\x86\x00\x1d\xb1\xe4\xc0\xb7\x9a\x26\x9b\xe6\x6e\xde\xe4\xe6\xae\x7c\x9f\x31\x05\x43\xf9\xd4\x0d\xe6\x4a\x6d\xe1\xbd\x17\xec\x8a\x8c\x23\x39\x5c\x9e\xc1\x98\x28\x31\x0f\x0d\x4a\x93\x8e\x62\xde\x4d\xac\xff\x16\x16\x78\x58\xda\x29\xd9\x2f\xcb\x3e\x1f\xb6\xd1\x6b\x61\x8b\x5d\x62\xd4\xdc\x80\x75\x8e\x43\x0d\xfb\xb0\x02\x5a\x8c\xdc\x73\x00\x89\x97\x14\xf9\x70\xf9\xcc\xbc\xfe\x8a\xa6\x71\xc2\xe1\x50\x79\x3b\x0e\xdb\xbb\x55\x92\xe0\x07\x7c\x2c\x62\x6f\xf6\xd0\xcc\xcd\x52\x87\x7b\xfb\x2c\xcf\xd2\xcf\x97\x7b\x81\x1a\xe4\x91\xbc\xd7\xda\xf5\x7f\xc8\x07\x6b\x75\xae\x97\x49\xcf\xa9\x39\xf0\xc5\x8d\x42\xec\xf5\xeb\x09\x31\x0d\x49\x1c\x1b\xc2\xfb\x53\x86\xe8\x7b\x39\xe0\x6e\x73\x77\xe7\x88\xd9\x80\x52\xed\x91\x20\x16\x79\xd7\xa9\xa5\xf8\x69\x7b\x95\x11\x8f\x7f\x6b\xde\x4f\x14\xa7\x10\xa3\xe1\x60\x4f\x77\x8b\xa1\x7a\x2d\xbf\x0e\x94\x7c\x22\x03\x51\xa2\x98\xbc\xfd\x74\xae\x77\xb5\x8e\xaf\x30\xaa\xcc\x33\x08\xf9\xeb\x7f\xd8\xbd\xa6\x94\x33\xb7\x12\x7d\x2b\xdb\x55\x6c\xc6\x4d\xf1\x9e\x9a\xc8\x01\x0c\x42\x97\x2f\x69\x03\x90\x97\xe7\x2d\x31\xde\xc6\xb6\x3c\xa3\x6f\xc8\xff\xf3\x0f\xf2\x37\x2b\xe0\x25\xfd\xff\xdc\xfc\x37\x00\x00\xff\xff\xa2\x6b\x10\xd7\x8f\x06\x00\x00") -func test_certsMtCaClientTenantKeyBytes() ([]byte, error) { +func test_certsClientRootKeyBytes() ([]byte, error) { return bindataRead( - _test_certsMtCaClientTenantKey, - "test_certs/mt/ca-client-tenant.key", + _test_certsClientRootKey, + "test_certs/client.root.key", ) } -func test_certsMtCaClientTenantKey() (*asset, error) { - bytes, err := test_certsMtCaClientTenantKeyBytes() +func test_certsClientRootKey() (*asset, error) { + bytes, err := test_certsClientRootKeyBytes() if err != nil { return nil, err } - info := bindataFileInfo{name: "test_certs/mt/ca-client-tenant.key", size: 1675, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x46, 0x86, 0xf6, 0xd9, 0xbc, 0x7a, 0x1b, 0x1d, 0x90, 0x27, 0x90, 0x9c, 0x28, 0x24, 0x9f, 0xb0, 0x50, 0x5a, 0x24, 0x57, 0x65, 0xc4, 0x7e, 0xc7, 0xf9, 0xa7, 0xce, 0x3e, 0xc7, 0x0, 0xff, 0xa6}} + info := bindataFileInfo{name: "test_certs/client.root.key", size: 1679, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x4e, 0x2f, 0x2d, 0x62, 0xd5, 0xd3, 0x2e, 0xf2, 0x7a, 0x72, 0x39, 0x8, 0x25, 0x9b, 0xbf, 0x37, 0xad, 0x66, 0x3c, 0x98, 0x8e, 0x9, 0xa7, 0x2c, 0x23, 0x28, 0x2, 0x93, 0x1a, 0x38, 0x59, 0xbe}} return a, nil } -var _test_certsMtCaServerTenantCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x94\xbb\xd2\xaa\x4c\x1a\x85\x73\xae\x62\x72\x6b\x0a\x45\x51\x09\x26\xe8\xa6\x1b\x6c\xa0\x81\x06\x01\x31\xe3\xd8\x88\x72\x90\x4f\x0e\x72\xf5\x53\xfb\x0b\x76\x30\xf3\xbf\xe1\x13\xac\x7a\xab\xd6\xaa\xe7\xdf\x7f\x0e\x62\x9d\xd8\xff\x52\xb1\x77\x25\x1a\x51\xc1\x15\xff\x52\x81\x12\x82\xe0\xaa\xaa\xa0\xd8\x70\x30\x13\x08\x38\xf1\x80\xd9\x69\xb9\x6e\x95\x40\xa2\xe8\x88\xd2\xd5\x39\xd5\x2e\x73\x9e\x33\x62\xb1\x61\x76\x77\x52\x4d\x99\x0d\x18\xb6\x20\x03\xb3\x60\xae\xd8\xa7\x10\xe8\x60\x17\x60\xb5\xa2\x06\x93\x94\x3a\xd9\x1b\x53\x1c\xd9\x1d\xf5\x82\x19\xcf\x31\x0a\x19\x43\x78\x5e\x50\x2a\xd9\x43\xd6\x28\x55\x2c\x71\xce\xb6\x78\xbe\x54\x99\x2d\xd0\x1a\xcc\x76\x0d\x64\x7a\x8d\x67\xbb\xc6\xdf\xa8\xca\x6c\xba\xfe\x61\xf8\xf0\x97\xd5\x60\xa0\x1e\x99\x31\xf8\x0d\x33\xf1\xfc\xfa\x1b\x26\xc4\x12\x5f\xb4\x2b\xb8\x42\x6e\x87\x10\xd0\x2b\xc2\xf6\x14\x4b\x9f\x6f\x2a\x69\x75\xa2\x42\xc4\xae\xaa\x0a\x7c\xf2\xbf\xef\x43\xc8\x00\xe2\x1c\xbb\x02\x40\xaa\x0a\x58\xa7\x72\x8e\x21\xa0\x9a\xe4\xe0\xb8\x44\x4a\xdf\x40\x79\xd6\x9b\x43\x49\x8f\x57\xab\x83\x51\x64\x44\x7d\xb0\x7a\xe9\x05\x80\xca\xb1\x0f\x96\x49\xe5\x4b\x7d\xbb\xde\x4b\x28\x9c\xe3\xdc\x4e\xfd\xcc\x71\xd7\xde\xbd\x65\xbb\xb3\x3a\xf6\xdb\x49\x7c\xd4\x56\xfc\x5c\x7f\x0e\xca\x5d\x91\x9d\xe5\x44\x02\x9e\x6c\xc2\xa8\x3b\x46\x1f\x25\xed\xe4\x6c\x7f\x7c\xfa\xe7\x2e\x28\x8e\x2e\x16\xf6\xf9\x37\x51\xf3\xcf\x14\xf8\x69\x52\xd6\xf2\x32\xe4\x27\x17\xc2\x83\x63\xc0\x87\xfd\xc5\x9b\xfb\x29\x6c\x72\x5d\xa3\xd1\x60\x95\xd5\x46\xfa\xbe\xd2\x8d\xb9\xd4\x5a\xac\x6d\x7e\x4c\x88\x1d\x2e\x09\xa3\x31\x32\x85\x5e\x74\x37\xda\x85\x21\x71\x2f\x92\x5b\xf1\xf5\xce\xa8\x69\x89\xda\x68\x1d\xb9\xbf\x4f\xfa\x23\x6f\xb2\xba\x75\x8a\xba\x2f\x7c\xef\x36\x1f\x29\xd9\x9c\x93\x50\x9a\xc8\xe5\x92\x0b\x7a\xff\x1c\x7f\x94\xf4\x09\x77\xa7\xc8\x33\x01\xf3\xfd\xcd\x3b\x63\x87\x97\xb9\x9d\xc7\x84\x7b\x90\xaf\x73\xe4\x46\xee\xb4\xfb\x9c\xad\xc0\x08\x64\xf1\x94\x8e\xbe\xfd\xda\xe2\x18\x83\xb1\xd9\x7b\x02\x82\xae\xb2\x18\x41\xab\xd1\x83\xd8\x5d\x2a\xcb\x4a\xad\xec\xee\x3b\x6e\x3d\xb6\xe7\x41\x8b\x16\x57\xa1\x2a\x98\x31\x00\x09\x6d\xa8\xca\x66\xc4\x63\x14\x7a\x5b\x17\xb0\x8b\x08\x01\x43\x02\xe0\xd6\x93\x42\xf2\x67\x48\x39\x9e\x31\x14\x67\x46\x28\x88\x21\x28\xcf\x2a\x60\xf8\x9f\xd6\x87\x7e\x1b\x43\x3f\x46\x82\x2c\x22\xf8\xd6\xc7\x2c\xa3\x6e\xa8\xcc\xc5\x7e\xbf\x2b\x79\x78\xc8\x0f\x9a\x29\xa2\xc5\xef\xa6\xff\x8e\x61\x55\x97\x97\xe1\xb2\xf4\x99\xaa\x3d\xb4\xf8\x42\x95\xdb\x29\x43\xf9\xf6\xa8\x4e\xc9\x18\x48\x72\x2c\xbc\x22\x56\x04\x12\xeb\x83\xf9\x90\x56\xe2\xca\xba\x62\x1f\x36\x12\x39\xdf\x8c\xa9\x6f\x8a\x07\x79\xe7\xf7\x2c\xc6\x0f\x5f\x8a\x77\x93\x71\x68\xf4\x3a\x95\x3e\xd9\xfe\xd0\xda\xc3\x6b\x79\x9e\xe5\x55\x68\x50\x71\xdc\xac\xf2\xcc\x92\x80\xbc\x72\x75\xe0\x26\x0c\x4e\xba\x83\x6e\xee\x06\x9f\x9e\xa3\x23\xc6\x41\xac\x47\x4e\xe4\xd7\x67\xf5\x58\x18\x56\x58\x04\xfc\xf5\xb6\x3c\xb7\x69\x6f\x2c\x19\x7c\x01\x8c\xf5\xe7\xd3\x1b\xf6\xda\xfa\x72\x4b\x96\xe3\x3e\xfc\x8a\x19\x57\xc2\x24\xff\xde\x8c\x77\x94\x2a\x83\x28\xb6\xef\x85\x46\xc6\xab\xd5\x82\x52\xfe\xce\xd3\xbd\x11\x6d\xef\xfd\xfa\x14\x7a\x7c\x45\x02\x11\xb7\x9e\xb6\x3f\xd4\xba\xb5\x15\x6d\x4b\x9e\x4e\x6d\x11\x11\xf4\x7d\x6e\x9e\x54\x04\x65\xbf\x26\x6f\xb3\xf9\x59\xcd\x6e\x35\x82\x86\x38\xaf\x5d\x82\x4f\xbb\x87\x6b\x53\x3b\x3f\x97\x7a\xab\xb5\x82\xd2\x3e\x95\x3c\x05\x25\xe1\x44\xdc\x87\xf4\x3f\xc2\xaf\x26\xb0\x8d\xfe\x5f\x1d\xff\x0d\x00\x00\xff\xff\xef\x60\xa4\x8a\x57\x04\x00\x00") +var _test_certsClientTestuserCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x94\xbb\xae\xab\x46\x18\x85\x7b\x9e\x22\x3d\x8a\xc0\x80\x01\x17\xa7\x98\x61\x06\x18\x73\x31\x98\xe1\x62\x3a\x73\x35\x78\x63\xb6\xb1\x61\x30\x4f\x1f\xed\x13\x29\x29\x92\xbf\xfc\x7e\x69\x35\x6b\xe9\xfb\xf3\xe7\x20\xb6\x88\xff\x87\x81\xcf\x94\x98\xc4\x00\x14\xff\xa6\x9c\x47\x08\x02\x9b\x61\x80\x7a\x6e\x01\x23\x10\xb4\x24\x4c\x4d\x31\x55\xe8\x79\xe0\x63\x71\x09\xaf\xe9\xcb\x3a\xeb\xe5\x84\x80\x0f\xdb\xfb\xf3\x76\xef\xac\x03\x13\x21\x08\x5f\x26\x40\x60\xe2\xbc\x33\x61\x18\x5c\x50\x12\x86\x0e\x66\x5f\xa8\x90\xfc\xa9\x1c\x0e\xb7\x8b\xd4\xae\x26\x05\x14\xb6\x7e\x02\x81\x47\x11\xf6\x97\x8b\xf4\xfe\x14\x92\xd9\x5f\x0d\x88\x42\x0a\x6a\x93\x89\x1f\xce\x43\x40\xf6\x68\xbc\x7a\x34\x94\xbc\xbe\xba\xfe\x40\x9f\x02\xd9\xeb\xc1\x3f\xcc\x33\xca\x15\xf7\x20\xfc\x3b\x6c\xa4\x46\xfc\x6f\x18\x77\x45\xf8\xec\x01\xdd\x02\xbb\x18\x83\xd5\x23\x95\x95\x6c\x95\x9d\x6c\x79\x46\x58\xdb\xe2\xce\x03\xa2\x65\x44\x4f\x2b\x22\x85\x8c\x42\x0c\x41\x18\x03\xa0\x10\x88\x18\xf8\xf9\x3b\x1c\x18\x09\x04\x21\xa2\xa7\xa6\xf5\xaa\x47\xd0\xdf\x55\x5e\xce\x82\x5e\x79\xe4\xa4\x8a\xef\x0e\x0c\x93\x79\xba\x6f\x2f\x45\x6f\x78\xa9\x88\xd5\x93\xab\xf2\x64\xd5\x75\x3f\x0a\xb4\x16\x55\x4c\xe7\x02\x51\x3b\x6d\x5a\xb9\x35\xd7\xc5\x1b\x8d\x0b\x32\x1d\x74\xf4\x6f\x42\x2f\x6c\xf3\x75\xa8\x93\xfb\xe1\x76\x54\xa1\xea\x63\xef\xdd\x67\x6f\x89\x57\x49\xd0\x3c\x34\xcc\xf2\x0f\x75\xc4\xcd\x18\x33\xce\xad\xe7\x58\x80\x03\xe5\x35\xb4\x66\x6b\x5c\xcd\xe1\x7e\x37\x3f\xc5\xd4\x5d\x23\x94\x67\x93\xa3\xf0\xf8\xf0\x58\x5e\xfa\xf8\x98\xec\xd5\xd9\x0d\x41\x29\x6b\xd5\xd6\xa6\x32\xd0\x9e\x7d\x7c\x42\x1c\x96\x79\x25\x31\xd9\x5b\xfd\x24\xbb\xea\x68\xe2\xca\xf8\xe4\xcb\x78\x99\x48\xde\x0d\xd1\x94\xe9\xb1\xbd\x6d\x9f\xdd\x72\xe2\x07\xa9\x5e\x0c\x82\x79\x26\xd6\xa2\xe1\x6b\x53\x99\x88\x42\x75\x4c\xb8\xec\x29\xb0\x6c\x40\xea\xc9\xce\xce\xf2\x55\x18\xc5\x48\x51\xf8\x67\x0a\xa3\x61\x45\xee\xf1\x03\x2e\x8f\x80\x92\xae\x4d\xdc\xd0\xae\x0a\x3d\xfe\x7a\x7b\x66\xb9\x64\x0e\xd1\x8b\x9b\xad\x05\xd8\xe6\x26\x6d\x73\xc4\xd3\xeb\xaa\x40\xea\x96\x9d\x35\xe3\x91\x45\xaa\x4e\x53\x61\x3d\xed\x41\xeb\x41\x00\xac\xfe\xb8\x81\x2f\x0f\x28\x3f\x4d\x55\x88\x61\x28\xb0\x10\x03\x46\xcc\x11\x01\xca\xfd\x74\x6b\x47\x31\x46\x08\x38\xb0\x6d\x27\xd8\x62\x13\x86\x25\x02\xfd\xff\x2c\x0f\x9c\x0c\x10\x62\xe0\x25\xd1\x6d\x09\xb6\x75\xa6\x8f\x8a\x7b\x07\xf5\x7d\x90\xcb\x50\x9c\x7d\xdb\x2d\xd4\x2a\x86\xcc\x50\xe8\x4b\x4c\x50\xaa\x8a\x4b\x49\xca\xa9\x6e\xd2\x2e\x78\x25\x87\xec\x68\xb4\xfb\x41\x71\x77\xc0\x8e\x27\x19\xc5\xec\x8a\xed\xb3\xc6\xdd\x0e\xec\xbb\x70\xbc\xf0\x9a\xd2\x0f\xb6\x95\xbb\x2a\x3d\xdc\xc3\xf2\x12\xe3\x76\x69\xb2\x69\xcc\xa5\x7c\x57\x76\x0f\x8d\xb7\xab\xf1\xf8\xf5\x96\xcf\xce\x19\x36\x4b\xcb\x04\xe7\xb2\xd7\xd4\xfd\x98\x72\x7b\x81\x84\xf3\x26\xe6\xb4\x16\x2b\xde\x1e\x17\x29\x75\x37\x1c\xa4\x59\x90\xb1\x2d\x08\x3e\x03\x9f\x46\xb4\x5a\x8b\x78\xdd\xca\x4b\xd4\x1b\xb6\x53\x40\xdf\x1e\x0d\xcb\x58\xba\xc9\xe9\xbe\x2b\xee\xfb\xd1\x0c\x13\xb3\xcc\x16\x0b\xeb\xdb\x95\x17\x09\xdf\xf9\x3b\xe9\xf2\xb4\xb9\x8d\xb9\x55\xbc\x88\x89\x5b\x01\x6d\xbc\xb0\xd6\xc7\xf2\xde\x3e\x2f\x1f\x64\x0d\x69\x8e\x32\x37\x18\xba\xd2\xdb\x73\x5a\x1d\x1b\xd6\x4b\x08\x67\xf5\xeb\x33\xed\x9e\x5b\x35\x07\x45\x2c\x8d\x1d\xfd\xb2\xd9\xdb\x78\x4b\x28\x72\xaa\xf5\x7b\x18\x6b\x19\x1c\xf6\x53\xd4\x34\x8b\xe2\x6b\xe4\xd9\xe8\x5d\x4c\x70\x63\xaf\xdc\x96\x7b\x6a\xd5\xec\x9f\x03\xfb\xf5\x8b\xfb\xad\x08\xec\xa3\xff\x6a\xe3\xaf\x00\x00\x00\xff\xff\x2e\x58\x15\x82\x53\x04\x00\x00") -func test_certsMtCaServerTenantCrtBytes() ([]byte, error) { +func test_certsClientTestuserCrtBytes() ([]byte, error) { return bindataRead( - _test_certsMtCaServerTenantCrt, - "test_certs/mt/ca-server-tenant.crt", + _test_certsClientTestuserCrt, + "test_certs/client.testuser.crt", ) } -func test_certsMtCaServerTenantCrt() (*asset, error) { - bytes, err := test_certsMtCaServerTenantCrtBytes() +func test_certsClientTestuserCrt() (*asset, error) { + bytes, err := test_certsClientTestuserCrtBytes() if err != nil { return nil, err } - info := bindataFileInfo{name: "test_certs/mt/ca-server-tenant.crt", size: 1111, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xa5, 0xf4, 0x7c, 0xb0, 0x64, 0xfb, 0xf7, 0x48, 0xbe, 0xf6, 0x80, 0x6e, 0x7f, 0x7a, 0x7, 0x6, 0xc1, 0x45, 0xa9, 0xb3, 0x7b, 0xd0, 0x1e, 0x13, 0xa1, 0x94, 0x2c, 0xc7, 0xde, 0x7f, 0xaa, 0xec}} + info := bindataFileInfo{name: "test_certs/client.testuser.crt", size: 1107, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x63, 0xf0, 0xcc, 0x2b, 0xdd, 0x9e, 0x5b, 0xac, 0x6c, 0x1c, 0x39, 0xab, 0x85, 0x82, 0x48, 0xbd, 0x17, 0x48, 0xf7, 0xd7, 0xc1, 0x3c, 0x45, 0xa1, 0xdb, 0xf0, 0xff, 0xe7, 0xaa, 0x73, 0x1e, 0xcf}} return a, nil } -var _test_certsMtCaServerTenantKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\xa7\x12\xa4\x50\x02\x85\x61\xcf\x53\x8c\xa7\xb6\xc8\x49\x8c\xb8\x64\xba\xc9\xb1\xc1\x11\x9a\x9c\x73\xf3\xf4\x5b\x3b\x7a\x8f\x3d\xe6\x77\xdf\x7f\xfe\x37\x5e\x52\x34\xf3\x8f\xeb\x81\x3f\xb6\xab\x85\xc0\x97\xfe\xbc\xa5\xf8\xdf\x03\x19\x9a\x26\xcd\x40\xe3\x01\x78\x0b\xc0\x91\xc0\xf5\x89\x49\xb7\x66\x6d\x7c\x88\xd5\x11\xa4\x59\xcd\x3e\xb3\x71\x54\x72\x12\xf7\x69\xef\x9b\xf2\x96\x03\x41\x22\x89\x6a\x9b\x9e\xee\x6b\x16\x26\xd4\xb3\xea\x5d\xa3\xd8\xfe\xba\x48\xc4\xea\xb8\xe2\xf9\x5c\x6f\x7a\xf4\x10\xf8\x6d\xec\x8d\x6f\x3d\x2d\x36\x12\x1d\xa3\x6e\xb5\xc7\xaf\x54\x98\xb6\x73\x4a\x60\x47\xdb\x3f\xe5\xe2\xea\xbf\xda\x65\xa0\x89\xf5\x0b\xe2\x35\xbd\x70\x9c\x73\x5f\xfb\x0c\xdb\xa3\xb2\x13\x1b\x2b\xa9\x15\xd9\x29\x1a\xa1\xf9\xd4\xb8\x47\x09\x1a\x07\x77\xba\xed\xb0\xca\x64\xef\xf0\x24\x57\xc5\x08\xab\x0f\x7d\x4d\x92\x03\xd1\x62\x4a\x0e\x94\x88\x5e\x79\xcc\x65\x61\x18\x54\x6c\x19\xc3\x8a\x68\xf6\xe0\x9a\x4e\x36\x22\xcf\x85\xd7\x8b\x65\x5c\x84\xe4\x67\xe5\x14\x6d\xf5\xd4\x4b\x2e\xc5\xe9\x6a\x99\x7b\xfe\xa4\x6c\x05\xe5\x05\x9a\x0e\x1e\xfd\x60\x87\xa3\x7e\xf6\x44\x9a\x78\xfe\xa5\xd3\xf3\x2d\x36\xc1\xea\x0b\xd4\xc2\x4b\x8a\x68\xf3\x31\x17\xc3\x48\x44\x5c\xbb\xd3\xfb\x23\xb2\x1f\x94\x86\x7f\x1c\xb7\x72\x04\x1a\xca\x0a\xc9\x90\x10\x42\xea\xbd\x3c\x78\x5a\xb8\xfa\x4a\xdb\xbe\xed\x77\xaf\x91\xb0\x45\x97\xbf\x2d\xcc\x24\x04\xbd\x34\x11\x38\x80\x07\x93\xc6\x03\x47\x70\x12\xd4\xe2\x48\x22\xca\xf0\xa0\x89\xa1\x9b\x21\x7c\x36\x1b\x46\x8f\xf3\xd6\x98\x6c\x91\xce\xb5\xa3\x9a\x51\x64\xe9\xb2\xc5\x6a\x35\x6c\x19\x49\x0c\x66\x14\x2f\x87\xf0\x03\x49\xa8\xc3\x1b\x76\x94\xef\x8f\xf2\xd6\x83\x0e\xa4\xa9\xdd\xa0\x73\x14\x16\x36\x4f\xc1\x56\x02\x7b\x9f\x15\xef\x61\x53\x9a\xea\xee\xe6\x1a\xf7\x98\xa9\x71\xf6\x7d\x8c\x11\x55\xe3\x46\xd3\xc7\xa6\xb5\x9f\x8d\x32\xb6\x39\x87\x29\x0a\xc1\x1b\x60\x17\xe4\x1b\xf2\x46\x33\x7e\x61\xf9\x44\xaf\x30\x13\x86\x26\xbd\x7f\x31\xfd\xfc\xb4\xa8\x7b\xd2\xa7\x5d\x90\x16\x2c\x56\xe4\xc2\x6b\xa5\xa3\x1e\xe2\x81\xe0\x5b\x2c\x6c\x17\xfb\xfb\x56\x54\x16\x29\x03\x10\x45\x68\xbe\x1a\xf0\x23\x4a\xba\xcd\x1b\xc6\xe1\x53\xab\xd7\x72\x3b\x9b\xb2\x69\xda\xda\x2f\x4a\x0f\x98\x04\xab\x4c\x63\xb8\x20\x99\x49\xce\xdc\x0d\xf7\xae\x06\xde\xbd\x85\x07\x0d\xa3\x95\x1e\x12\x19\x42\x68\xad\x56\x32\x95\x6b\xe3\xc0\xf4\xb3\x1f\x2c\xce\xab\xcf\xf4\x2f\x21\xfd\xa2\x5f\xff\xe7\x50\x3f\x3c\x97\x3c\xfb\x2c\x70\x54\xd8\x35\x40\x7c\x4b\x45\x9a\x2a\x72\x3c\x56\xbc\xbd\xfb\xaf\xd9\x42\x84\x8d\xb1\xc3\xf9\xe2\xc1\xa4\xf0\xc0\x96\xae\x1f\x29\x1f\x13\x42\x7a\xdb\x57\x2f\x45\xe9\x80\x99\x9e\xc3\xa5\x91\x6e\xdf\x19\xb7\x7e\xac\x4e\xe0\x57\x07\x57\x66\xa9\xcc\xa7\x8e\xb3\xec\x8d\x81\x54\x07\x6b\xbc\x3e\x7e\xe3\x30\xfc\x6a\x6b\xc9\x98\x94\xae\xa1\xa2\x2b\x6f\xbd\xf1\xb3\x0b\x57\x21\x11\x65\xf3\x25\x10\xe6\x1e\xa3\xa2\x24\x4b\xe6\xf7\x9c\xa7\xef\x93\x40\x2f\xe0\xa3\x70\x82\x02\x72\xd8\x8a\x24\x16\xcf\x73\x09\xe9\xac\xac\xcd\x7f\x15\xf2\x4d\x75\x66\xff\x69\xd6\x6b\xef\x33\xf8\x4d\x33\x64\xb8\xdb\x56\xd7\xd3\x65\x38\x06\x6b\xcb\x34\xa0\x57\xa3\xfb\x5f\xb1\x81\x7d\x20\x43\xeb\xe2\x29\x8e\x6f\x44\x66\x61\xf1\xa5\x46\x19\xf2\x39\xb9\xb2\x76\xa2\x4a\x2f\xf4\x29\xa9\xa7\x4c\x08\x95\x81\x7e\x3f\xb3\x26\x05\x08\xe1\xd6\xb0\xd3\xda\xde\x98\x47\xce\x1e\x3a\x58\xf7\x40\xa8\x1d\xea\x5e\x6b\x7e\x96\x77\xde\x0f\xf3\xb7\x36\xd3\x5c\xd4\x1b\x26\x71\x36\xf8\x5e\x6a\x22\x6d\x1c\x39\x56\xfb\x7b\x7e\x0b\xcb\x84\x39\x3e\xf6\x1b\xc3\x99\xec\xb8\x22\xb0\x1f\xb6\xd0\xc5\x1d\x4a\xf6\x19\xf3\xc1\x9d\xce\xee\xb7\x7a\xf9\x46\xe4\x79\xb8\x6c\x3f\x9e\x92\x3f\x76\x8e\x22\x8b\x76\xc8\x06\x45\x67\xab\xf8\x2f\xf9\xdd\x1a\x3c\x29\xe6\x32\x12\xe2\x3f\xe4\x92\x8d\xe6\xd4\xa0\xab\xcd\x13\xe0\x7b\xfe\xa2\x68\x2f\x99\xdc\x7c\xa5\xd4\xf8\x9c\x78\xd5\x51\x81\x0d\xc5\xe7\x67\x49\x6a\x60\x17\xd7\xda\x2d\xcb\x39\x3e\x27\xb7\x4e\x26\x78\xb0\x92\xef\xaf\x13\x1f\xb7\x35\x45\x21\x7c\x41\x97\xa8\xaf\xfb\x6d\x41\x93\xf3\xe8\x85\xc2\x2b\x75\xa0\x4e\x32\x5a\x07\xd9\x10\xc6\x1b\x77\x05\x63\xcf\x4d\x7c\x56\xbe\x0e\x6c\x12\x8e\x1c\xce\x1f\xe5\x43\x98\x79\x7a\xa9\xeb\x19\xd8\x90\xe0\x71\xd4\xbb\xdc\x0e\xd3\x21\x08\x32\x05\x8c\x38\x34\xea\x2d\x33\x35\x98\x14\x60\x5d\x23\xd6\x93\xe1\x95\xd3\xc0\x1c\x8e\x96\xb7\x47\x09\x0d\xb2\x5c\xdc\xd7\x46\x1f\x8c\x00\x4b\xbb\xf2\x05\xb1\x6a\x02\x47\x55\x35\xd1\xd3\x8f\xe6\x63\x79\x52\x60\xd4\xc5\xbf\x89\x4f\x71\xb2\x0c\x4e\x55\x01\x8c\x48\x89\x49\xa5\x76\x2b\x97\x2a\xe3\x6f\x4b\x71\x38\x5b\xf4\x74\x22\x2b\x4f\x13\x91\x3d\x80\x92\x4b\x79\x03\x5f\x3d\x98\x18\xd5\xd3\xbe\xd9\x4d\xc5\x08\x9c\xc4\x9c\x78\x23\xe8\x23\x24\xc4\x55\xfe\xc8\x06\x3b\xa2\x11\x24\x23\x87\x9b\x3e\xec\x64\x77\x65\x98\x34\x02\x82\xd4\x17\x9d\x94\xa0\x21\x94\xad\xe4\x93\x0b\x55\x0c\xbe\x64\x66\xc9\x85\x4b\x08\x96\x22\xff\x10\x8e\x70\x7e\xec\x32\xba\x7b\x77\xb4\x5a\xf2\xa8\x72\x01\x8b\x4b\x79\x1f\x3c\x65\x10\x8f\x6b\x31\x5d\xc5\xce\x53\x4d\x43\xd5\xae\x85\xb4\x4e\xcb\x4b\xcc\xd3\x88\x5e\xcb\x82\x66\x4e\xcf\xdd\x46\x03\xeb\x67\xeb\x66\x65\x53\x75\x08\x1a\x46\xa9\xaf\x34\x30\x7b\x56\xdb\x8c\xec\xf6\x57\xaf\xe1\x30\x9e\x35\x8a\xcd\xaf\x21\xfc\x52\xf6\xcf\xcc\x66\x74\x78\xe0\x69\x9b\xbb\xd9\xab\x97\xb7\xe4\x79\x77\xfd\xcc\x1b\x8d\x3a\xb8\xfc\x65\x7f\x94\x9a\x18\xc6\x90\xd3\x6d\xb5\x73\xc3\x3c\x17\xc1\xdf\xbf\xd0\x3f\x56\x24\x53\xfc\xff\xdc\xfc\x37\x00\x00\xff\xff\xb0\xfb\xd5\xa5\x8f\x06\x00\x00") +var _test_certsClientTestuserKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\xa7\x12\xac\x5a\x02\x85\x61\xcf\x53\x1c\x4f\x4d\xd1\x64\x10\x57\xb0\xc9\xa9\xc9\xd1\x35\x34\x39\x34\x39\x3d\xfd\xd4\x3d\x63\x67\xd9\x65\x3e\xf7\xff\xe7\xdf\x01\x51\x56\xdf\x7f\x5c\x8f\xfb\x63\xbb\x6a\xc8\xf9\xe2\x1f\x5d\x4c\xfe\x3e\x90\xa9\xaa\xe2\xc4\xa9\x80\xe3\x74\x9e\x73\x44\xee\xf5\x8c\x84\xa0\xa4\x0f\x41\x5a\xc7\x86\x3e\x04\xac\x61\x9e\x12\x6a\x7c\x15\x48\xd9\x4c\x9a\xb4\x65\x2b\xc8\x36\xa0\x56\xdb\xc0\x47\x63\x96\x36\x24\x04\x2d\x4c\x70\x78\x6e\x0b\xac\xf5\xac\x30\x6e\xe2\xd8\xf2\xe8\xdc\xc0\x5d\x5e\x75\xfb\x49\x49\x20\x0c\x3d\x4c\x63\x9f\xda\x89\x57\x54\x45\xeb\x0a\x46\x82\xd2\xdf\x63\x6f\x04\x9c\x84\x2f\x13\x92\xf3\xee\xde\xcc\x73\x96\x6e\x7c\xe9\xed\x33\xed\x90\xfd\x64\x42\x26\x54\xb2\xce\xfa\x66\xf3\x26\x35\x4c\x50\x61\x21\x75\xef\x76\x6d\xa7\x34\x6d\xeb\x1a\x75\x31\xde\x96\xb6\xf8\x1b\xc6\x73\x02\x92\xb6\xd3\xa2\x7e\xa8\x50\x5d\x6f\x64\x97\xdc\xdc\x28\xd6\xfe\x1b\x7b\xae\xab\x38\xeb\x90\x51\xb2\x7e\xcb\xc9\xd4\xcd\x28\x22\x01\x86\x61\xb6\xec\x39\xa6\x6d\x5c\xce\x06\xd8\xeb\x5b\xd9\xb8\x16\x2a\x28\x5c\xfa\xda\xb8\x17\x86\xd4\xc1\x48\x64\x05\xb7\x35\xfa\xfa\x62\x07\xf5\x16\x77\xcb\x9e\xfb\x2a\x98\x56\xe7\xbe\xf3\x4a\xd6\x9e\xd7\xad\xfe\x24\xef\x05\xf0\x08\x91\xb4\xcc\x07\xb1\x81\xde\x50\x63\xcb\x84\x0b\x3f\x17\xa0\x60\xe6\xde\x84\x45\xde\xb9\xe0\xc6\xd5\x7a\xa9\x75\x53\xdc\x0f\x11\x3d\x18\x7f\x77\x54\x81\x73\x38\xc0\xfd\x54\xc0\x49\x89\x5c\xee\x13\xf3\x25\x6b\x87\x5d\x1a\x11\xe2\xcb\xa4\x54\xc6\x9f\x3a\x26\x6f\x13\xaf\x0e\x7f\x66\x6c\x2c\x7f\xc9\x21\x69\xb1\xdb\xd4\x3f\xd9\x40\x3c\x54\xaf\xaf\xfd\x50\x5a\x42\xe3\xaa\x59\xae\x93\x2b\x16\xa8\x70\x74\x3d\x89\xb8\xc1\x08\x74\xf5\xcc\x85\xbc\xa5\x45\xaf\x9e\x36\x3c\x03\x0f\x04\xd2\x6c\x23\x67\x83\x74\x46\x8e\x29\x13\x78\x13\xe2\x0a\x5f\x1e\x6b\xe4\x1b\x47\xc7\x35\xc7\x00\xbc\xc4\x2d\x99\xa3\x8e\x68\x47\x48\xf8\x0b\x81\x1f\xab\xc5\x28\x59\xd9\x97\xe4\x0c\xac\x5b\x12\xdd\xcd\x75\xf0\x07\xf3\x04\xaf\xa6\xa8\xb4\x11\x68\x3f\xd1\x0e\x37\x80\x6b\x85\x0b\xba\x1f\x56\xc9\xe1\xdd\xdd\x74\x46\xa6\x42\xd5\x7c\x8c\x1b\x6a\xbf\xa9\xbf\x82\xe4\xf4\xb4\xd8\x34\xfd\x71\xfd\xa2\xba\xcb\xed\x34\x5d\xa7\x1a\x1e\xeb\x4b\x80\xe5\x6e\x52\xc0\xec\x86\x20\x6a\x5b\x6f\x56\x3f\xc8\x4b\x44\xc2\x4a\xae\xc4\x33\x3b\xcd\x9a\x00\x69\x07\x17\x62\xfa\xe2\xfa\x2e\x4a\x9d\xe5\xa3\xf2\xa1\x45\x6c\xdf\x2c\xca\xab\x36\x4c\x87\x29\xff\x2c\x8a\xed\x9d\xa6\xb1\x7e\x0d\xc9\xc2\x9d\x1f\x97\xb0\xf7\xf4\x3d\x63\xb3\x42\xab\x72\xcd\x30\x88\x33\xb8\xd7\x64\x88\x7c\x95\x88\x1c\x7e\x57\x15\x98\x52\x91\x3e\x89\x34\x36\xf8\x48\x9d\x8e\x0f\x62\x84\x6e\xf7\xb9\x1e\x79\x7e\xb1\x4c\xe5\x50\xf9\xf1\x98\xa8\x9d\xe7\x5d\x58\xac\xe2\x5a\xa5\x50\x20\xda\x31\x9f\x26\xf3\x80\x27\x20\x2f\x96\x33\xd8\x3e\xdd\x87\x6f\xf2\x72\xa6\x2c\x4b\x9a\x0e\x50\x73\x5b\x1f\x03\xe3\x53\xf5\xf3\x38\xf1\x9f\xab\x9c\x47\x01\xc4\xfc\xe6\xd4\x39\x12\x2d\x2e\xe4\x06\xc8\x1e\x34\x66\xe0\x86\x47\xdd\xe5\x44\xad\x0e\x46\x29\x23\xe2\x11\x3f\x7c\x6c\x47\x33\x97\x2b\xae\xb6\x23\x4c\x36\xbc\xfc\xd7\x9b\x6d\x3b\x2d\x2a\x1b\xbd\x0c\xfe\x8a\x99\x1e\x24\xd0\xd0\xd6\xc7\x13\xc9\xd5\xa1\xbb\x4c\xc5\xe5\x95\xe3\x2f\x24\x3b\x0d\x7c\xc0\x28\xc3\x45\x7a\x4e\xbd\x3a\x93\xfc\x65\x13\x41\xff\x19\x21\xa0\x74\x01\xe4\x42\xa3\x52\xf1\x50\x04\x7c\x48\x07\x2a\x84\x4f\x32\xd3\xa9\xbb\x8f\xa5\xdc\x0b\x74\x28\x2f\xa0\x9a\x96\xcc\x6e\x13\x08\x38\x92\x93\xb0\x97\xd8\x41\x3d\xa5\xc5\x4a\x99\x29\x2b\x56\xb7\x83\x31\xbc\x28\xb7\x04\x8d\xb4\xcc\x1b\xee\xee\x08\x02\x0c\xc0\x3a\x60\xa3\xe3\xab\x2e\x74\xf0\x33\x92\x1d\xf1\xd8\xe2\x47\x7a\x35\xa2\xf8\x3d\xd3\x32\x47\xab\x86\xc2\xff\xc8\xeb\xa6\x1f\xe3\x53\x4c\x2b\xbd\xb6\x63\xce\x1d\xc8\x33\xda\xd0\xec\x3b\x76\x30\x28\xfe\x76\x1f\x45\x61\x19\x5d\x4d\xe9\x32\x9d\x62\x34\x9c\x57\xcc\x32\x5f\x62\xad\x4f\xbf\xb0\xef\xcd\x22\xec\x59\xdc\xe6\x99\x6f\x1f\x76\x21\x93\xd3\x9f\xb7\xb7\x7b\x0e\x90\x21\x38\x45\xb2\x37\x96\x5a\x96\x2a\xf7\x16\x8d\xd2\x72\xf4\xa2\xbb\xf4\xf3\x29\x12\xa9\xd5\x8f\x03\xe1\x4d\x81\x9d\x84\xc9\x13\xef\x8f\x7c\x6e\x61\x55\x96\xfa\xc8\xd9\xd5\xf2\xda\xb3\xc4\x7a\x94\x1d\x12\x74\xd6\xd7\x77\xa0\xcb\xd5\x60\x95\x63\xca\xf7\xfa\x2a\x7c\xc5\x7f\xc9\x20\x78\x05\xc6\x1d\xe9\xd9\x44\x78\x24\x1c\x7d\x82\x79\x47\x6d\x9f\x8b\xf0\x70\x64\x08\x6a\x7f\x9a\xdf\x4d\x1e\x34\x14\x48\x1f\x7e\x85\x73\x5e\x63\xdf\x63\x30\xf6\x0a\x56\xa7\x43\x33\x98\x56\x89\x66\x45\xaf\xda\x9e\xab\x74\xc9\x42\x18\x92\x65\xf3\x0c\x83\x24\xf1\xb8\xfd\x34\xdd\xef\xce\x3e\x30\xc1\x50\x60\x32\x04\xaf\x79\xe2\x11\x2b\x7c\x90\xfb\x41\x7c\x88\x06\xc9\x1c\x84\xc2\x84\xbc\x2b\x31\xac\xc1\x81\xba\xf4\xa3\x8b\x58\xb3\xab\xce\xc5\x3d\xe7\xeb\xdc\x8c\xc8\xd5\x4a\x79\x1a\x5e\xa4\xd3\xab\x7e\x07\x61\x54\xdd\xae\x8e\x0e\x2a\x47\x08\x4d\xa6\xbe\xaa\x0b\x1b\x93\xa0\x8a\xae\x3e\xe6\x8b\xc8\x0c\xc0\xab\xc5\x96\x85\xed\x97\xf8\x66\x8b\x6f\x1f\x3e\x46\x3f\xba\x5f\x39\x44\x0c\xf4\xf9\x09\x13\x0d\xc1\xb8\x55\xa0\x25\xfd\xc6\x3e\xf3\x62\x30\xd6\x9b\x40\x4e\x6b\x47\xb5\x89\xf2\xc1\xac\xfa\xcf\xc3\xdf\x59\x1e\x12\x9e\xf0\x2e\x3e\xeb\x92\x94\xdd\x1b\x88\x52\x84\x96\x23\x7c\xbe\x08\x64\x88\x3d\x68\x51\xea\xe5\x26\xa8\xfc\x77\xca\x9b\xbb\x78\x4b\xff\xab\x3a\x60\xa8\x28\xcf\xac\x5a\x44\xb7\x17\xd5\x04\x96\x01\x58\x33\x3c\x26\x7d\xf8\xd6\x77\x97\x49\x9c\x7a\xfe\xf3\x0f\xf4\x37\x2b\xe2\x5b\xf8\xff\xb9\xf9\x6f\x00\x00\x00\xff\xff\x92\x4c\x21\xfe\x8f\x06\x00\x00") -func test_certsMtCaServerTenantKeyBytes() ([]byte, error) { +func test_certsClientTestuserKeyBytes() ([]byte, error) { return bindataRead( - _test_certsMtCaServerTenantKey, - "test_certs/mt/ca-server-tenant.key", + _test_certsClientTestuserKey, + "test_certs/client.testuser.key", ) } -func test_certsMtCaServerTenantKey() (*asset, error) { - bytes, err := test_certsMtCaServerTenantKeyBytes() +func test_certsClientTestuserKey() (*asset, error) { + bytes, err := test_certsClientTestuserKeyBytes() if err != nil { return nil, err } - info := bindataFileInfo{name: "test_certs/mt/ca-server-tenant.key", size: 1679, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xa6, 0xe4, 0x6c, 0x99, 0x5e, 0x9c, 0x81, 0x42, 0xcf, 0x94, 0xff, 0x53, 0xf0, 0x3a, 0x65, 0xbf, 0x33, 0x4d, 0xf4, 0xc7, 0x10, 0xd8, 0x9c, 0xfc, 0x85, 0x5c, 0xc3, 0x69, 0x46, 0xe2, 0x80, 0x87}} + info := bindataFileInfo{name: "test_certs/client.testuser.key", size: 1679, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x65, 0x7f, 0xef, 0xdb, 0xc7, 0x5e, 0x5c, 0xeb, 0x9a, 0x3a, 0xc8, 0x94, 0x4f, 0xb3, 0xf1, 0x64, 0xcb, 0x89, 0x3, 0x52, 0x22, 0x6, 0xf2, 0xc6, 0x8b, 0x38, 0xed, 0x31, 0x20, 0xb8, 0xdc, 0xc0}} return a, nil } -var _test_certsMtClientTenant123456789Crt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x64\x94\x3b\xd3\xb2\x3a\x17\x86\x7b\x7e\xc5\xd7\x3b\xdf\x20\x47\xb1\x0c\x21\x62\xd0\x80\x09\x20\x42\x07\xc8\x13\x44\xe4\x20\x28\x87\x5f\xbf\xe7\x79\x8b\xb7\xd8\x7b\x55\x6b\xee\xe2\x9a\xb5\x66\xee\xb9\xfe\xff\x3b\x26\xb2\xb1\xfb\x3f\x88\x58\x80\x0f\x18\x82\x00\xfd\x49\x05\x82\xb1\x65\x06\x10\x82\x42\xe6\x60\xc2\x26\xe0\x98\x01\xe7\xa6\x3a\x3e\x1a\x0d\xbb\xb1\xcc\xb0\xd9\x31\xab\xbe\xa5\x16\x9f\x2c\x1a\x3b\xa7\x36\xc1\xe5\x37\x77\x01\x45\x67\x93\x82\x49\x38\xad\xc8\x27\x26\xb0\x81\x14\x22\x58\x12\x87\xca\xfb\x2a\x55\x9c\x6f\x1c\xb9\x2d\x61\xe1\x84\xa6\xd8\xba\x52\x6a\xa1\x69\xb6\x32\xd9\x7d\xe7\xaf\x7d\x19\xcb\x9c\xd3\x2d\x9a\x8e\x65\xee\x0a\xa4\x02\x93\x5b\x01\x8d\x04\xf1\xe4\x56\x68\x89\xca\xdc\x25\x55\xf8\xbb\x6f\xff\x66\x15\x68\x09\xc3\x13\x02\x7f\x60\x27\x34\xd5\x7f\x61\x42\x2c\xf3\x19\x55\x80\x9a\xdc\xbd\x9a\x80\x04\x30\x40\x0b\x59\xa9\xe4\x56\xb9\xea\xfd\xbe\xe6\xe3\x7f\x9f\x6e\x9a\x14\x58\x9c\xa3\x0b\xb0\x20\x14\x00\x6d\x21\xe7\xc8\x04\x5e\x5a\xd4\x07\xa9\xda\x49\x5a\x27\x17\xb9\xbe\x98\x62\xcd\x6f\x89\x89\xce\xad\x5d\x9e\x8f\x2d\x87\xaf\x9d\x4f\x8d\x7d\xd8\xeb\x06\x5b\xdf\x6b\x1f\x96\xbb\xbc\xff\x72\x61\x0e\xfc\xbe\xba\x06\x8a\x87\xdc\x43\x70\xf5\x83\x99\xab\xe1\x98\xe9\x4f\x47\x09\xe3\xaa\xda\x6d\x13\x47\x09\x55\x6e\x2e\x33\xee\xe4\xfa\xdb\x5d\x23\xdb\x70\x92\x94\x79\x5e\x7f\x79\xbe\x00\xf8\x11\x9e\x9f\xb8\x06\x0f\xf9\x99\xed\xc4\x7b\x37\xba\x45\x4c\x1b\x33\x38\x4b\xc5\x58\x97\x49\x1e\xb9\xcd\x2d\x86\x89\xc8\x70\xc8\xc6\x56\x34\x7a\x77\x3e\xb9\xfd\x54\x19\xdb\xf9\xc1\xc0\x35\x1b\x25\x4f\x58\xd9\xb3\x4c\xea\x17\xd6\xdd\xc7\x91\xa9\x61\xd8\xc8\xd2\x17\x44\xcc\xf0\xeb\x47\x53\x9a\xe2\x39\x29\xcb\x33\x2d\xe7\x5b\xc6\xc6\x41\x1a\xb8\xdc\x5d\xf7\xf1\xc3\xd7\x5f\x5d\xbd\xb0\xd5\x68\xb0\xa0\x84\xaf\xa5\x38\xee\x07\x3a\x89\xeb\xeb\x39\xe7\xfe\xe7\xd4\xbd\xce\x9b\x4d\x7a\x7f\xfd\x64\x2a\x5e\x13\xdb\x77\x24\x45\xce\x72\x79\x3b\x7c\x64\x05\x44\x57\x47\xf2\x2b\xcb\x3d\x67\xf2\xbb\xd3\x76\xa2\x50\xb0\xac\x3c\x05\xd1\x7e\xd0\x2f\x0a\x4a\xcf\x27\xf9\x1e\x19\x5b\x88\xb5\xac\x4a\x25\x0b\x86\x10\x4c\x08\x80\x94\x34\x04\x86\x93\xc5\x63\xeb\xca\xb6\x17\x40\x8f\xa2\x09\xa8\x05\x78\xc4\x05\x62\x92\xdf\x12\xdd\x1d\x4a\x09\x01\xad\x0d\xe1\x60\x03\x1a\x1e\xcc\x89\x40\x02\xb6\x36\xf4\x7b\xdb\xc7\x99\x62\x51\x64\xc2\x29\x04\x40\xc5\x26\xa0\x26\xb1\x8c\x65\x73\x29\xf5\x4c\x68\xe7\x81\xbd\x1b\x55\xe3\x21\x2e\x54\x67\xb6\xe3\xcf\xa8\x1d\x2e\xd5\x39\x10\x57\xb6\x31\x0a\x9d\xc2\x40\x4c\xeb\x73\xcc\xb2\x01\x0f\x22\x53\xef\x46\x34\xef\x8d\xb1\x8b\x7d\x70\xf7\xe0\x9a\x09\xe5\xb8\xb4\xc4\x5d\x76\x69\x90\x19\xb9\xf6\x4e\x0a\xeb\x26\x0d\x91\xac\x26\x16\x68\xbc\x79\xee\x94\x2d\x32\x36\xa3\xa3\x25\xb6\xa3\xca\x1f\xa5\x7b\x6c\xd8\xde\x33\xb5\xd1\xe3\xb7\x7a\x21\x0a\x16\xd4\xc5\xf5\xac\x0d\x84\xed\x80\xe2\xe3\x49\x1f\x87\xb9\xf0\xd0\x9d\xd4\x47\x09\x62\x78\xd4\xd8\xbe\xb6\xd5\x77\x4d\xb4\x47\xf2\xed\xa5\x47\xfe\xd3\x46\x4f\x5f\x4a\x0f\xa5\x3a\xcc\x85\x9c\x3b\x92\x70\x73\x4d\x3f\xee\x9b\xcf\xdb\x49\x3f\x76\xf1\xbc\xd1\x97\x7d\xca\xe0\x66\x08\xc6\x49\xf3\x72\xa7\x3d\x45\x87\xe5\x49\x74\x9b\x4f\xd8\x97\xef\x79\x62\xec\x2f\xda\x75\x3b\x3b\x33\xd5\x15\x4f\x5c\x43\x61\x29\x9f\x52\xd9\x1f\x7d\xb5\x72\xba\xfb\xba\xd7\xfb\xc6\x8d\x0e\xde\xe7\x62\xbc\xf3\xa0\xec\x6f\x24\x8c\xe7\xc5\x1f\x1a\xb9\xd3\x21\xd6\xb8\x27\xb6\xfc\x95\x77\xba\xd6\xa8\x2c\xcd\xc4\x1f\x45\x13\xba\xe3\x0c\x26\xf1\xce\xc0\x25\x9a\x85\x3f\x8a\x40\xae\xf5\x5f\x6d\xfc\x13\x00\x00\xff\xff\x72\xd6\xd3\x85\x53\x04\x00\x00") +var _test_certsNodeCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x94\x39\xd3\xb2\x48\x14\x85\x73\x7e\xc5\xe4\xd6\x94\x08\xca\x12\xde\x86\x06\x1a\x05\xd9\x11\x32\x16\xd9\x14\x45\x41\x1a\xfc\xf5\x53\xef\x1b\x7c\xc1\xcc\x9c\xf0\xdc\xaa\x93\xdc\xa7\x9e\xbf\x7f\x82\xb0\x4e\xec\xbf\x14\xec\x05\x44\x23\x0a\x04\xf8\xb7\x65\x2c\x42\x54\x37\x50\x14\x68\xfb\x1a\x28\x41\x50\x13\x0f\x2c\x73\x73\x76\x96\x9b\x19\x0b\x6e\x50\x3d\xd6\x60\xd4\xef\xaa\xf3\xa4\xaa\x9b\x98\xc7\x67\x4a\x9a\xb9\xb0\xc1\xc5\x27\xe4\x02\x65\x8e\x5f\xec\x5b\x08\x74\xd8\x85\x58\x69\x2c\xd3\xe5\xe4\x2e\xe3\xcd\x39\x89\xed\xa7\xe5\x85\x14\xd3\x44\x8d\x5c\x57\xc5\x74\x51\x73\xce\x7e\x17\xbd\xdc\x24\x5c\x5d\xbb\x2c\xa6\x46\x53\xd8\x8c\xd5\x01\xb5\xbf\x78\x67\x05\x98\xb5\x3b\xc2\xc5\x4d\x61\x5b\x5d\x48\xed\x2f\xa1\x7f\xba\x0e\x3a\xcb\x23\x14\xc3\xef\xd8\x11\xd3\xfb\x9f\x31\x26\xe1\xea\x45\x0d\xe0\x84\x6a\x3b\x42\x60\x05\x48\x3f\xcc\xa9\x1e\xd2\xba\xc6\xad\x05\xac\xae\xf8\x2f\xdd\x27\x39\xaf\xba\x18\x81\x1b\x02\xec\x09\x52\x29\xfc\xdc\x8f\xf0\x24\x88\x01\x57\xcd\x23\x12\x05\x9b\x78\xb3\x7d\x27\x9d\xa7\xbf\xc9\xf0\xfd\x3a\xe5\x86\xa4\x69\x13\x5e\x8f\xbb\xc5\x7c\xfa\x0d\x5a\x4d\xb0\x6f\x0f\x99\x0d\x23\x76\x9f\xb2\x8e\x11\xd7\xe3\x00\x5e\x11\x13\xe6\xaa\x3d\x8d\xe6\x1b\x76\x57\x09\xfb\x5d\x3e\x19\xad\xc0\xa9\xb9\x18\x5e\xbb\x60\x6b\x5d\xd6\xab\x68\xeb\xae\xb3\xe9\x11\x05\x51\x15\x25\x28\x77\xa7\x5e\x9e\xc3\xc9\xe6\x85\xf0\x0c\x13\xd9\xb7\x8c\x65\x86\xb3\x82\x8d\x6a\x10\x22\x32\x7f\x36\x93\xb3\x54\x72\x9a\xbc\xbf\x1a\x12\xfb\x4f\x56\xe6\x43\xbd\x96\xfc\x83\x7e\x02\xdd\x12\x16\xf6\x7a\x49\x5d\xfe\x2d\x35\x6b\x10\xdf\x50\x9a\x48\x51\xcb\x74\x2b\x17\xcb\xa7\x86\x38\x5c\x8a\xaa\x47\x60\xc9\xf4\x2c\xac\x2f\x77\x71\x4e\xd2\xba\x68\xfc\xdc\xd8\x3b\x32\x3b\x67\x36\x2a\xc8\xa3\xcc\x6e\x07\x6e\x58\x3b\x4e\x58\x83\xaf\x93\xb5\xf2\x39\x3b\x30\x3e\xd7\x95\x08\x76\x59\x53\x77\x7b\xe3\x56\xbd\xde\x2c\xc9\xa4\xa0\xea\xfb\xcb\x23\xaa\xca\xd3\x90\xd3\xf3\x04\x5a\xba\xb5\x3e\x92\x90\x8c\x9b\x62\x4b\xb8\xcc\xdc\x64\x83\x2f\x54\xa4\x34\xeb\x0f\xd3\x82\x70\x6d\x33\x51\xbc\xd2\xa8\x3c\xa7\x75\x4b\x84\x49\xdc\xbd\x93\x1d\xd4\x16\x02\xd0\xbb\x4c\x45\xbd\x05\xfb\x1f\x4e\x4a\x95\x62\xb4\xa5\x2e\x06\x4a\xb4\xa7\x0a\xe5\xcf\xe7\x18\xc3\x0f\xb1\xd6\x41\x88\xea\xfa\x8d\x6a\xac\x21\xb7\x50\xc1\x4d\xc8\x91\x26\x08\xb9\xa1\x01\x94\x50\xdb\x4d\xd4\xc8\x63\x3d\xa4\xec\xe9\x89\x10\x33\xd7\xe5\x2e\x89\x97\x67\xce\xdb\x2c\x53\xd7\xc5\xeb\xd4\x2f\x73\xc2\x69\x63\x43\xbd\x2d\x00\xa0\x66\x81\xff\x0b\xfa\x37\x17\x0a\x0d\x81\xf9\x01\x03\x5c\x58\x37\xd9\xf6\x96\x9f\xbb\x0c\x1f\xca\xa9\x21\xf0\x49\xd2\x73\x38\x7e\x96\x5d\x31\x43\xba\x2c\x61\x9f\x7b\xdb\xef\x6a\xd8\x4a\x26\x1f\xb5\xd3\x71\xf7\x72\xae\x6c\xf3\x40\x66\xc6\x18\xa5\xe2\xeb\xc5\xc7\x9c\xec\x48\x93\x39\x36\xf6\x86\x3d\x4f\xe7\x68\x6a\x95\xbc\x12\x8d\x94\xaf\x34\xd3\xe0\x83\xe1\xde\xa5\x6f\xf6\xb9\xfd\x56\xa3\xb7\xbd\xc7\x19\x97\x45\xfe\x3e\x74\x3f\xd1\x8b\x91\x0f\x5e\x38\x7c\xd9\xd3\xcb\xd8\x7c\xe8\xd1\xb6\x6a\xbe\xf8\x86\x08\x49\xcf\xb6\xba\x29\x1c\xf8\xf1\x6c\xe0\xb2\x98\xeb\xb1\x19\xce\xfe\x9e\x55\x1a\x3c\x0a\x7c\x18\x2f\x10\x8b\x49\x8b\xef\x7b\x66\xc5\x52\x12\xbf\xc2\xf1\xee\x8a\xbc\xb6\x9f\x6e\x2f\x7a\x3b\xb7\xe5\xb0\xd7\x95\x65\xff\x42\x07\x63\x44\xa8\x4c\x55\x4e\xf2\xe7\xcf\xf1\x76\x3d\xae\xb8\x99\xd3\xb1\xbb\x5d\xba\x97\x70\x37\x05\x3e\x62\x7a\xd9\x6c\x25\xb9\x97\xb5\x44\x92\xf5\xde\xb4\x35\x56\x4c\x8b\xc3\x55\x5c\x61\x9a\xf9\xbc\xbf\xc8\x47\x27\x1a\xa6\x55\x51\x90\xa0\x89\x9b\xd6\x6f\xb7\x8d\x94\x89\xf2\xf9\x19\xbf\xbd\xf5\x7d\x69\x98\xd1\x37\x5e\xa1\x83\x23\xb6\x55\x61\x77\x1d\x9d\xea\x42\x11\x9f\x4d\x06\x5f\xf0\x1d\xf3\xeb\x1c\x6c\xab\xff\xf5\xd0\x3f\x01\x00\x00\xff\xff\xe4\xb9\xb8\xac\xa4\x04\x00\x00") -func test_certsMtClientTenant123456789CrtBytes() ([]byte, error) { +func test_certsNodeCrtBytes() ([]byte, error) { return bindataRead( - _test_certsMtClientTenant123456789Crt, - "test_certs/mt/client-tenant.123456789.crt", + _test_certsNodeCrt, + "test_certs/node.crt", ) } -func test_certsMtClientTenant123456789Crt() (*asset, error) { - bytes, err := test_certsMtClientTenant123456789CrtBytes() +func test_certsNodeCrt() (*asset, error) { + bytes, err := test_certsNodeCrtBytes() if err != nil { return nil, err } - info := bindataFileInfo{name: "test_certs/mt/client-tenant.123456789.crt", size: 1107, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x39, 0xb9, 0x8a, 0x42, 0x93, 0x18, 0xd9, 0x63, 0xcd, 0x28, 0x28, 0x77, 0xeb, 0x6b, 0x3c, 0xff, 0x69, 0x35, 0x41, 0x40, 0xb, 0x2f, 0x7a, 0xb1, 0xbc, 0xcb, 0x80, 0xf4, 0xbd, 0x16, 0xee, 0x37}} + info := bindataFileInfo{name: "test_certs/node.crt", size: 1188, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x3c, 0x2b, 0xe, 0x1e, 0xf, 0xc8, 0x11, 0x9, 0x8b, 0xe8, 0x3a, 0xdf, 0xf6, 0x7e, 0xea, 0xc0, 0x56, 0x2e, 0xca, 0x5f, 0xac, 0xc2, 0x8b, 0x97, 0xb8, 0x1f, 0xbb, 0xf1, 0x6c, 0x6d, 0x11, 0x90}} return a, nil } -var _test_certsMtClientTenant123456789Key = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\xa7\x12\xac\x5a\x02\x85\x61\xcf\x53\x1c\x4f\x4d\x91\xa1\x11\x57\x6c\x72\x6e\x72\x72\x84\x86\x26\x67\x1a\x78\xfa\xa9\x39\x63\xef\xb2\xcb\xfc\xee\xfb\xcf\xff\xc6\x89\xb2\x6a\xfd\x71\x3d\xf0\xc7\x76\xd5\x10\xf8\xe2\x1f\x5d\x4c\xfe\x3e\x90\xa9\xaa\xe2\x0c\x54\x0e\x00\x9d\x07\x8e\x08\xa8\x99\x0e\xe2\xc8\x3e\xe3\x61\x4c\xa9\x67\x55\x15\x38\xe2\xca\x4e\x74\x8e\x3a\x13\xb7\x4f\x03\xf4\x7c\xd7\x84\x07\xf3\xd6\xf5\x52\xde\xe7\x7b\x86\x3c\x65\xbf\x17\x58\x90\x2c\x7d\xb1\x42\xbb\x20\x1d\x34\xb4\x42\xcd\x96\x85\xaf\x87\x9d\x8b\x33\x96\x6e\xf3\xb6\x4f\xb7\x1b\x4b\xbf\x01\x8a\x21\x36\x63\x16\xc1\x7d\x98\xe4\xbf\xbe\x9f\x45\x92\x86\x26\xd8\x4b\x00\x07\x7b\x54\x13\xf0\x46\xe6\x9e\x27\x8b\x0f\x28\x46\x7d\xf9\x42\x32\xcf\x90\xc6\x23\xa9\xbf\x12\xbc\x2c\x6b\x6d\x64\xc5\xaf\x2b\xe3\x2d\x72\x4f\x84\x38\xe1\x2b\x6f\x3f\xbe\xac\x41\x22\x17\x1e\x44\xc0\x58\xb2\x27\x0d\x51\xd2\x4e\xb8\x5a\x2a\x5f\xd7\xab\xf2\xe8\xc5\xa5\xca\xa5\x47\xfa\x47\x54\x5e\xfb\x20\x8b\x3b\xaf\x48\xe5\x2e\xe3\x4f\x74\x0b\x59\x1f\x63\x8d\x66\x2c\xd9\x00\xc5\x9a\x62\xdf\x45\x5b\x7a\xb9\x46\x56\xf8\x25\x08\xc8\x3b\xf3\xa5\x4b\x27\x97\x21\x39\x19\x6a\xc6\x53\xf6\xac\x5b\xab\x4b\xd5\x31\xae\xd2\xfd\xc9\xbd\x9b\xc9\x0b\x2e\x0d\xc6\x50\x37\x4d\x74\x87\xce\xec\x18\xc7\x93\xa5\xa4\x43\x9c\xad\x1c\x7f\x26\xa4\x70\xa7\x6d\x4d\xb1\xfc\x71\xd4\xb6\x3f\xac\x35\x30\x35\x47\x15\x80\x03\x38\x30\xa9\x1c\x70\xf8\x63\x60\x17\x37\xbb\x1e\xcb\xbb\xe1\x0e\xea\xef\x16\x1f\xe3\xc9\x20\x0f\x38\xd7\xc3\x4b\x9e\xb1\x8c\x77\x5a\x66\x39\x0f\xb6\x72\x83\x34\xd5\xf9\x0d\x59\xca\x5a\xdc\xb6\xa4\xb4\xbf\x9e\xc9\x09\xea\x57\xb1\xde\x3e\x5c\xd2\xf8\x6f\x62\x27\x68\x15\x3a\xe1\x20\xaa\xf8\x9e\xe6\xe7\xca\x99\xf1\x44\x30\x42\xd7\xd6\x4a\xdb\x8a\x5b\xdf\x0b\xd8\x7c\x3d\x7a\xd0\x45\xfe\xd6\x3b\x37\x26\xce\x18\x23\x52\x08\x39\x52\x17\xd8\x38\x8b\x9d\x04\x02\x42\x45\x35\x8e\x26\xf1\x09\xeb\x93\x0b\xf7\x98\x8a\xbb\x36\x62\xbe\x27\xca\x33\x21\x8e\x04\xf0\x2d\x37\xdc\xea\x8b\xd7\x90\x0a\xfa\x57\x37\x7f\xe4\x4f\x05\x9c\x86\x3e\x49\x8e\x78\x9b\x6a\x44\x0a\x34\xc0\x55\x6a\x13\x89\x14\x12\x27\xf9\x94\x32\x3b\x79\x68\xdd\x2f\x6a\x92\xb7\x6a\x8a\x54\xec\xa2\x0f\x91\x67\x3a\x1e\xd6\xf5\x3a\xfd\x5a\xcc\xd0\xbc\x5d\x36\x7e\x65\xa9\x35\x5e\x4a\x33\x33\x3d\xb4\x97\xd4\x9c\xc8\x9e\xa2\x64\x5a\xc1\xcf\xad\x36\x5c\xf2\x13\x3d\x7c\xd2\x4f\x2a\xaf\x87\xae\xea\xfb\xd7\xf9\xcd\x0e\xe0\x64\x41\xaf\x2d\xe6\xcb\x75\x2a\xc4\xd8\x85\xcf\x83\x04\xd2\x5a\xa3\x32\xf4\x49\x17\x05\x4f\x4c\x0e\x4c\x32\x07\x6c\x07\xa7\x33\x3d\x6c\xcd\x88\xb1\x0e\x7d\xb7\xce\xa6\xe7\xba\x1f\x72\x9c\x5d\xc4\x3a\xca\xd3\x5a\xd8\x29\x51\xb7\xd2\x0d\x05\x66\xcd\x61\x39\x4a\x09\x01\x01\x9a\xf0\x7c\xb2\xb1\xa6\xac\x0a\xa2\xed\x71\x13\x24\x15\xf0\xd1\x40\xce\x9c\xf9\x9e\x15\xfa\xe6\x49\x93\x9d\x4f\xd3\x18\x44\xc6\xe0\x4d\x84\xee\xf8\x89\x7c\x9c\xf5\xf9\xa2\xbd\x43\xf7\xf5\x06\x7d\x12\xf6\x1b\x8c\xa8\x89\x69\x06\xf1\x09\x84\xf7\x2e\xa1\xad\x73\xd7\x9f\x94\x88\x36\x1c\x0e\x86\x11\x86\x5b\x7b\x6f\x4b\x9d\xba\xf0\xbc\xd3\xee\x16\x08\x7a\x4a\xbe\xb0\xff\x17\xcb\x08\xb4\x97\x4a\x46\x11\x95\x8c\x8a\x9f\x4d\x45\x66\xce\xe4\x7c\x6e\x17\x44\x6c\xdb\x80\xd4\x79\xc5\x88\xbd\x76\xe5\x68\x0e\xe7\xe3\xa2\xcb\xdc\xd5\x74\x58\xed\xf0\x72\xa5\x2d\xf3\x7a\xdc\x3a\x6f\x25\xe8\xe1\xa5\x23\x52\xc3\xc3\xcc\x40\xb7\x05\x05\x6e\x7f\xd0\x92\xd8\xcc\x41\x69\x5a\xa2\xb9\xe0\xc1\x2f\x75\x4e\x9b\x7c\x6c\x6d\x9c\xfe\x95\x0a\x91\xae\xc0\xaa\x97\xd3\x53\xe3\x5a\xe4\x9d\x1e\x18\x44\x8f\x1b\x55\x7f\x8c\x75\x8b\x28\x8e\x30\x13\x96\xc6\xec\xcd\xa3\x72\xff\x7b\xb4\xfd\x76\x00\x0c\x3d\xf9\xde\x88\x8b\xeb\x6f\xb2\x56\xcc\x44\x5f\x2f\x54\x96\x28\x7c\xe3\xcc\x36\x75\x98\x10\x3e\x14\x85\x48\x8f\x71\x50\xf9\xae\x33\x68\x91\x4d\x88\x70\x92\xae\xe6\x83\x2f\x9a\xe5\x4e\x4e\x4f\x71\x4d\x44\x7b\xc1\x3e\xf6\xdf\xd7\x34\xbb\xf2\xc7\x27\xaa\x5b\x5d\xf7\x5d\x7e\x57\x85\x24\x40\x6d\x2f\x80\xf7\xea\xd1\x9f\x99\xca\xc1\xb2\xcf\xd8\x8f\x5e\xcb\x1a\xb1\xbd\x8a\x73\x6f\xea\xee\x3e\x87\x6a\xb8\xf9\xb8\x63\x1e\x93\xfb\xe0\x8e\xd3\x5a\x24\x37\x65\x93\xaf\xfd\xa3\x4b\xe5\xf2\x40\x03\x0b\x84\xb4\x0e\x97\x22\x56\xa9\x4b\x9e\x1c\xda\x73\x0a\xcd\x1d\x29\x30\xc9\x40\xf8\x59\x1f\x32\x28\x5f\xac\x82\xbd\xc3\x3a\xe8\xce\xbd\x9a\x9b\x89\xc3\xa4\x5e\x92\xd2\xd9\xba\x98\x4e\x0f\x21\xa3\xf5\x26\xcd\xfb\x62\xa7\x83\xe0\x08\xdd\xdb\x77\x76\x47\x1a\x8e\xb8\xe9\x22\x74\x26\xb1\xf7\x06\x92\x3a\xb1\xd3\x92\x04\xf2\x1a\x23\x74\xb5\xc4\x7c\x21\x74\x6b\x1f\x75\xae\x1e\xcb\x5c\x26\x21\x97\xfc\xce\xbf\xea\x17\xbf\xc6\x15\xfc\x5e\xf6\x0c\x10\xdd\x44\x3f\x5c\xda\x9d\x0a\x92\xa0\xea\x42\x33\xf5\xd4\xee\x41\x1d\xe4\x74\x1a\x87\x54\x25\xd8\xdd\xf5\x53\xc9\x21\x35\x5c\x5b\x4b\xfa\x1b\x32\x9a\xe3\xa1\x3c\x91\xaf\x13\x6e\x7a\xca\x93\x74\xc9\x8c\x24\xda\x69\x24\x02\x24\x6a\xe6\x58\xbe\x39\x5e\xf4\x7d\x4b\x6a\x86\xdc\x48\x5e\x7c\x20\x28\x9c\xdc\x73\xf6\xf6\xcc\x6d\x38\xa0\xe3\x09\x2d\x3d\xbe\xb9\x65\x76\xf5\xd9\xba\xe2\xa3\x11\xfe\x88\xd5\xce\xfd\xf2\x3a\x19\x52\xf1\xba\xe6\x22\x2b\x9f\xa6\xd6\x7e\x2b\x09\xbd\xad\xa8\xa5\xfd\x69\xac\xf4\xcb\x8d\x8b\x03\x5b\xad\x51\xd3\x09\xa1\x94\xed\x56\x1a\xe8\x15\x56\x0c\x0f\x46\x77\xda\x0e\xee\xe5\x9c\x46\xea\x56\x79\xa3\x5c\x4e\x15\xd7\x44\xe5\x70\x3b\xea\x68\x89\x65\xa8\xdd\x7c\x3d\xa9\x96\x7f\xff\xfc\x03\xfd\x65\x45\xb4\x84\x7f\xe7\xe6\xbf\x01\x00\x00\xff\xff\x28\x62\x70\x98\x8f\x06\x00\x00") +var _test_certsNodeKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\xb7\x12\xa3\xd0\x01\x85\xe1\x9e\xa7\xd8\x9e\xf1\x90\x44\x2a\xb6\xb8\xe4\x0b\x88\x1c\xd5\x89\x28\xb2\xc8\x88\xa7\xf7\x78\x6b\x9f\xf6\x34\x7f\xf7\xfd\xe7\x7f\x13\x64\x15\x5a\x7f\x3c\x1f\xfc\x71\x3c\x18\x81\x40\xfe\x63\xc8\xe9\xbf\x07\x79\x42\x28\x7f\x01\x14\x00\x30\x44\xe0\xca\x80\x24\x7c\x25\xc4\xfa\xe3\x60\x48\x88\x7b\xf3\xcf\xc8\xb9\x9b\xaa\x1a\x35\x4e\x23\xad\xd9\x72\xff\x2d\x4f\x6e\xde\xb8\xd2\x4b\xc7\x0a\x45\x29\x6c\x44\x2d\xa4\x8b\x98\x4c\xc3\x95\x13\xa5\xd1\x3e\x6f\xe1\x91\x13\x90\x3a\x04\x79\x22\x59\xef\xb1\x6f\x35\x89\x12\xda\x84\x63\xb7\xc2\x8d\xfb\xed\x75\x12\xf6\xad\x73\x60\x9f\x28\x06\xb4\xc2\xa7\x0f\x24\x23\xcc\xa0\x40\x7b\xa9\x36\x7d\x1b\xb6\x62\x64\x9e\x1f\x81\x62\xca\xde\x37\xd9\x63\x09\xb8\x04\x8b\x63\x83\xbb\xdc\x92\x5e\x86\x31\x66\xd2\xe7\x58\xd0\x9c\xd9\x5d\xad\xbd\x16\x5a\x4f\x86\x16\xc2\x60\x30\xef\x88\x2f\x88\x63\x47\x49\x27\x6e\xeb\x0f\xff\xe1\x4b\xfc\xe0\x26\x34\x7e\x3b\xb9\xb4\xaf\x73\xf7\x0c\x7e\xd8\x73\xf5\x0a\xf6\x11\x14\xbe\x79\xdf\x9b\x92\x88\x3a\x15\x7f\xed\x62\xce\x91\x89\xdf\xd7\x8e\xbb\xc9\xe9\x08\x86\x3d\xdc\x26\xca\x75\xad\x78\x4a\x21\x2a\xd0\x1a\x33\xf3\xa2\x7a\xc8\x14\xfd\xed\x69\x22\xa1\x7c\x26\xe6\xa4\xc5\x15\xe2\xea\x36\x0f\x7b\x30\x9d\xd1\xf9\x59\xc8\xd0\x54\xc3\x1c\xee\xe3\x4f\xf3\x53\x73\xaa\xed\x71\x1a\x76\x94\x5a\x95\x24\x18\x52\xd8\xd8\x4b\xc9\xbf\x49\xcb\x85\x12\x70\x81\x00\x26\x28\x00\x57\x1c\x73\x5c\x0e\x86\x39\xf6\xda\xa5\x29\x10\xc1\x28\x0f\xbb\x24\xf2\x9c\x69\xd4\x47\x1b\xb1\x0b\x9b\xfc\x30\x42\xb2\x00\x5a\x62\x9e\x34\xfe\x7a\x53\xfe\x48\x33\x90\xdf\xce\x67\x20\x68\x8a\x92\x6b\xdb\x37\x72\xdc\x52\xfd\xd2\xd9\xb2\x3d\x47\x68\xfb\x54\x74\x01\x07\x9f\x48\xd4\x84\xa7\xc9\x2f\xe7\xd3\x57\x79\xd3\xc7\x3b\x66\x50\xfb\x6b\x74\xe8\x0d\x75\xe8\x55\xdf\x27\x9d\x26\x0b\x54\x15\xac\xe2\xc4\xb0\xb1\x41\xbb\x9a\x4d\x6d\x93\x40\x8e\xfd\x2e\xa9\x8e\x89\x3d\x9b\xb7\xd7\x5c\x3e\x1c\xad\xa2\x72\xf2\x8c\x26\xfb\xa5\xe4\xa9\x29\x01\x1e\x13\xe7\x2f\x98\xda\x63\x9f\xde\xf0\x57\x49\x34\x65\x45\x06\x80\xa6\x51\x87\xbe\x90\x69\x08\x7b\xad\x59\x3c\x6a\xf2\xb5\x3d\xd5\xd1\x55\xdd\xfe\x33\xfc\x68\x66\xca\xe4\x29\x4a\x28\x27\xa2\xaa\xf6\x77\xa0\xc3\xfb\x21\x79\x58\x01\x47\xba\x90\xd4\xd4\x34\xf6\xf4\x99\x8a\x31\xe9\x94\xa3\x88\xbc\x33\xcf\xa7\xcf\x62\xdb\x7b\x58\xc1\x1d\xf4\x61\xb8\xde\x7e\x6b\xc1\x18\x27\xc2\x58\xf1\xcf\x38\x6a\x29\x33\x60\xa6\xcb\x1b\x52\xc7\xd2\xe6\xb7\xba\xcf\xb8\xc0\xfe\x1e\xe9\x97\xdd\x9c\xa0\x44\x12\x5e\x16\xae\xd2\xec\xc1\xa4\x0a\xc0\x3a\xa4\xc4\x52\x98\xb2\x57\xed\x7d\xa0\xb4\xc8\x8c\x27\x93\x23\xcf\x6d\x28\x2f\xab\x1d\xb3\xd4\x30\x72\xfe\xf5\x55\x92\x8c\x12\xa8\xcd\x7f\x70\xda\x93\x47\x14\x5d\xdd\x74\xc6\xa7\x0d\xe5\xb6\x0f\xdf\x25\xac\x6a\x7e\xb6\xba\x99\x44\x4f\x5d\x1d\xa0\xeb\x8a\x23\x21\xcb\x84\x66\x46\x18\xef\x25\xa9\x85\xca\x4b\x04\xcf\xda\x59\x12\xba\x6e\x2f\x20\x6c\x88\x8a\x13\x3f\x2b\x64\xe2\x77\x10\xce\x43\xc0\xe6\x24\x0f\x6c\xc7\x3b\x9b\x17\xef\x5f\xfa\x9d\x71\x9f\x9e\xdc\xa3\x13\x3b\xd5\xbe\x3b\x6b\x4c\x0f\x2e\xc8\x19\x5e\xcc\x05\xff\x8a\x1d\x1e\x45\x1e\xef\xd6\x0f\x2b\xc5\xe7\xeb\xcf\x23\x1c\x17\x4a\x02\x81\xac\x26\x42\x61\xba\xfe\x53\x07\xac\x90\x3d\xdb\x43\xa2\xc0\x8b\xc3\xbb\x7a\xb4\x5e\x3b\x41\x13\x83\xb2\x15\x00\x7f\x91\xd6\x76\x89\x6f\x44\x7d\x3f\x1e\x5d\x6d\xf3\xa2\x76\x2f\xdf\xce\x76\xa9\x25\xb1\x1d\x37\x77\xfa\xb2\x9b\xb0\xee\x2c\xca\xa0\x9c\xa3\x8a\xa6\x47\x3a\x9d\x6a\xbb\x2a\x8e\x7c\xb8\x21\x0b\x9f\x2e\x74\x57\x85\x2f\x1a\x24\xf5\x37\xce\xe3\xb4\x22\x61\x1f\xe6\xc4\xed\x1e\x7e\xd3\xbf\x2c\x52\x16\x71\x59\x0e\x63\xd5\x7f\x16\xd1\x93\x78\xf8\x4e\xfe\x25\xeb\xbc\x76\xbc\xf5\x21\x3b\xfa\xfe\x8a\x55\x69\x65\x93\x01\x31\x75\x34\xef\xac\xba\x64\x9d\xd9\x78\x76\xee\xac\xfc\x1a\x22\xaa\x6a\x9b\xc6\x98\x0d\x93\x5a\x9d\xd3\xe6\x28\xcc\xf5\x01\xba\xb9\x04\xcd\x8d\xfe\xbc\xa1\xcd\xab\xae\xfe\xa9\x3a\xda\x7f\x0d\x36\x62\xad\xa7\x49\xff\x02\xa5\x71\xd3\xf4\x75\x2c\x92\x98\xb9\x37\xe0\x8e\x25\xb7\x35\x68\x0c\x5b\x38\x7b\x32\x87\x67\x8f\x8a\x6d\x3a\x75\x3d\x6d\x88\x0a\x4d\x82\x46\x8b\x4a\x7b\x46\xe2\x32\xd2\x8c\xb0\x5d\x8d\x71\x00\x5e\xb6\x58\x76\x4b\x4b\xa6\x78\x08\xcd\x94\xc5\x5e\x60\x52\x81\x4f\x37\xc0\xec\xf5\x6e\x18\x35\xd0\xc8\xab\xfe\x85\x2f\x26\xb4\x8d\xf3\x21\x45\x42\xc5\x8c\x77\x11\xa6\x14\xc2\x58\xc0\x94\x7b\x79\x09\xf3\xc0\xac\xcf\xe5\x87\x9f\x8d\x8c\xd3\x89\x64\x72\xe3\xa7\xa3\x25\x9c\x6d\x99\xfa\x88\x3f\xbb\x96\x82\x5a\x58\xaa\x60\x7c\xf5\xb7\xfe\x7b\xef\xaf\x64\xf0\x47\x2d\x70\x11\x11\xe5\xdb\x58\x79\x0e\x06\xda\x30\x32\x29\x7d\xe6\x9c\xb7\x83\x04\xaf\xdb\x6c\x61\xf4\xbd\x2f\x78\x8b\xed\x1f\x2a\x5a\x5e\x14\xb1\x9a\xc3\xb5\xba\xd4\xf2\x62\x68\x70\xe4\xaf\x34\x4d\xf3\x74\x44\x66\x65\x1c\x06\x74\x15\xeb\x14\x64\x72\xfe\x01\xf0\x86\xf1\x92\x1b\x9a\x20\x68\xe4\x9d\x13\xf7\x14\x1d\xcd\xdd\x85\x24\x2e\x86\x35\xaa\xf7\x02\x28\xb2\xef\x9a\x4a\x68\xf8\xa6\x72\xd0\xc6\x0b\x32\xfb\xe4\x51\x57\x1c\x9f\xa6\x3e\x80\xcc\x1e\xc7\x80\x91\x1b\x83\x30\xb2\x94\xb2\xb8\x44\x18\x84\xb8\xc8\x3e\x7e\x45\x76\x35\x75\xac\xd3\x32\x36\x63\x29\x7c\x23\xf3\xda\x9e\xd7\x21\xe4\xa5\x8f\xd8\x2c\x7a\x7d\x03\xda\xee\x92\x8a\xed\x9e\x19\xc6\x66\xf5\xed\xb0\xe8\xb5\x1b\xb1\x47\xf7\x31\x6b\x9d\x5f\x61\xfa\xa9\xa5\x2b\xd2\x8b\x50\xed\xf6\x00\xfc\x52\xaa\xff\xfe\x45\xfe\xb1\x22\x5b\xd2\xff\xe7\xe6\xbf\x01\x00\x00\xff\xff\xb3\x98\xbb\x7a\x8f\x06\x00\x00") -func test_certsMtClientTenant123456789KeyBytes() ([]byte, error) { +func test_certsNodeKeyBytes() ([]byte, error) { return bindataRead( - _test_certsMtClientTenant123456789Key, - "test_certs/mt/client-tenant.123456789.key", + _test_certsNodeKey, + "test_certs/node.key", ) } -func test_certsMtClientTenant123456789Key() (*asset, error) { - bytes, err := test_certsMtClientTenant123456789KeyBytes() +func test_certsNodeKey() (*asset, error) { + bytes, err := test_certsNodeKeyBytes() if err != nil { return nil, err } - info := bindataFileInfo{name: "test_certs/mt/client-tenant.123456789.key", size: 1679, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x50, 0xdb, 0x9a, 0x5d, 0x41, 0xb5, 0xee, 0xff, 0xca, 0x7d, 0x31, 0xc7, 0x5c, 0x4, 0x60, 0xe, 0x2e, 0x37, 0x25, 0xc7, 0x3c, 0x87, 0x6b, 0xe5, 0x2d, 0x39, 0x3b, 0xe8, 0x1, 0x3b, 0xf6, 0x38}} + info := bindataFileInfo{name: "test_certs/node.key", size: 1679, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x83, 0x19, 0xb3, 0x1a, 0x6a, 0x5b, 0xd3, 0xab, 0xfd, 0x79, 0x7e, 0x50, 0xc1, 0xf5, 0xe8, 0xd4, 0x5f, 0xe0, 0xbb, 0xb7, 0x88, 0x7c, 0x6c, 0x86, 0x3c, 0xec, 0x62, 0x11, 0x7f, 0x1d, 0x9d, 0xfd}} return a, nil } -var _test_certsMtServerTenantCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x94\x49\xcf\xb2\x48\x1b\x85\xf7\xfc\x8a\x6f\x6f\xbe\xc8\x28\xb0\xac\x82\x02\x8b\xa1\xb4\x40\x54\xdc\x31\x28\x08\x2a\xa3\x14\xf0\xeb\x3b\xcf\xd3\xc9\xbb\xe8\xee\xb3\xba\x73\xee\xe4\xac\xae\x5c\xff\xff\x09\x44\x36\x26\xff\x33\x50\x70\xc2\x16\x36\xc0\x09\xfd\xb6\x9c\x8f\xb1\xe9\x57\x86\x01\xca\xae\x00\x0c\x43\x50\xe0\x00\xf8\x4b\xee\x38\xb9\x76\xbe\xc4\x6f\xc3\xab\xbb\x7c\x18\xa5\xad\x00\x98\x49\x63\xc7\x6d\x6e\xb8\x9c\x32\x02\x28\xf2\x20\x05\x8c\x73\x57\x14\xfa\x10\xd8\x40\x88\x90\x51\xfa\x0e\x15\xf5\x2a\x91\x9c\x29\xbe\x90\xc6\x0f\x22\x86\x58\x6c\x9e\x29\x35\x11\x9b\xcd\x54\x24\x7d\xf6\xd6\xcb\x58\x2c\x0a\xca\x23\xb6\x2f\x33\xc2\xf9\x15\x60\xa4\x02\x8a\x7f\x8a\x19\xa9\xd0\x72\x29\x33\xe2\x57\xd1\xcf\xcd\xff\xe9\x2a\x10\xf9\x01\x66\x08\xfc\x8e\xb9\x88\xbd\xfe\x8c\x71\xb1\x58\xb0\xa2\x40\x4f\x1f\xf0\xb6\x11\x76\x76\x88\x53\xc9\xa4\x08\x02\x1a\x01\x20\x63\x68\x32\xf0\xf3\x77\x41\x83\x21\xa0\x66\xe3\xdc\x2f\x41\xbe\x48\xe1\xca\xb2\x46\x92\xb5\x8a\xdb\xc9\xe8\x45\x8b\xfe\xa1\x16\x9b\x99\xf6\xeb\x3b\x37\x87\x0d\xae\xd4\x4b\x1d\x94\x07\x3d\x8f\x2f\x9e\x66\xf7\x91\x79\xcd\x17\x5e\x34\x97\xbe\x3e\x7c\xac\x49\x78\xf6\x3a\x7f\x1f\x23\x5d\x50\x1f\x37\x2e\x20\xe8\x1b\x53\xb4\x61\xce\x43\x6f\x7b\xa1\x29\xa5\x7c\x1a\xc8\x66\x8a\x57\xad\x4c\x82\x4f\xe4\xe9\xb5\x2f\x26\x3b\xcb\xfb\x88\x77\xc5\xeb\xbc\xb9\x69\xe1\xd1\x5f\xe9\xa1\x7e\x3e\x81\x06\x1d\x6e\xa3\x6c\xaf\x4a\xf6\xe5\x5b\x35\xc1\x39\xae\xe6\x87\xb8\xf0\x07\x72\x96\xf1\xe2\x7c\xa9\x34\xec\x2b\xab\x94\x48\x7e\x6b\xfc\xa0\x09\xe5\xb4\x0a\x5e\x43\xe8\xde\xd6\x77\xd7\x8b\xfb\xc7\xfc\x74\x33\x4e\x32\xa5\xef\x59\x67\x8e\xb2\xc2\xcd\x55\xab\xa5\x25\xf9\x74\xf1\x04\x90\xc1\xf7\x0f\xf1\xb0\xaf\xfa\x83\xd1\x09\x49\xb1\x8f\x28\xbd\x05\x0a\x7f\x10\x5a\x6a\x82\x90\xbf\xf2\xce\xde\xe9\xef\xc9\x9d\xa3\xea\xe6\x23\x6d\xda\x8d\xdd\xa9\xa7\xba\x7f\x07\xf9\x4b\x16\x96\x92\x6a\xe2\xba\x7a\xe7\x5c\x2b\x34\x7d\x7b\x7c\x66\xe7\x1a\xc4\xdb\xb0\x75\xeb\x80\x56\xe9\x29\xbf\xb8\x71\x1a\x6e\xb5\xcb\xa3\x61\xdc\x11\xb1\x2d\x28\x7c\x08\x80\x5d\x25\x26\x7c\xfb\x40\xfe\x61\x22\x37\x19\x82\x5b\x46\x11\x60\xd8\x6a\x4c\x90\xc3\x82\x9c\xf7\x61\x84\xac\x0a\x44\xb0\x28\x7a\x58\x20\x0b\xd2\xcc\xe4\x00\x8d\xb1\xcb\x62\x08\x69\xb4\x07\x0c\x33\x42\x63\xf3\x1c\xf0\x01\x34\x64\xe6\x61\xec\xa4\xb6\x5e\xc5\x97\xb9\x49\x25\xc2\x17\x45\xd6\x79\xef\x79\x8a\x45\x6b\x28\x59\xb0\x05\x00\x40\xae\x9c\xc1\x7f\x05\xfe\x93\x0b\x83\xfd\xcd\x05\xa0\x30\x3d\xf8\x54\x1d\x1e\xf4\x4e\xcc\xeb\x97\x6b\x85\x34\x91\x0d\xe9\xa0\x34\x46\x3f\x8f\x9d\x53\xdd\xac\x71\x12\xdd\x81\x3d\x83\xd3\xee\x35\xee\x1f\x21\x7a\xf5\x57\x7d\x98\x88\xf0\xbe\xe8\x7d\x29\x74\xd1\x02\x5f\xd1\xd5\x39\x66\xad\xf2\xd1\x00\xb7\x93\x83\x0c\x8f\xbd\x21\x7b\xae\xbc\x4f\x17\x75\x50\xed\x6b\x99\xa4\x6a\x77\x30\x73\x01\xb5\xf7\x79\xfe\x9e\x45\xd1\x23\x32\x6a\x05\x09\xb4\xbb\x9a\xaa\xdf\x24\x1a\x35\x5f\x43\xce\x26\x3a\x01\x2e\x9a\x14\xe7\xa9\xda\xef\xc2\xb3\xa5\x1b\x7a\x5d\xf1\x1a\x8a\x30\x86\xf6\x10\xcc\x9f\x75\xbb\xb4\xb3\x21\xd4\xb8\x2d\x4f\xa2\x34\x64\xab\xbb\xbb\x07\xda\xe7\x19\x1d\x2e\xf9\xba\xe6\xc5\x58\x27\x13\x17\x1a\x5a\x61\x19\xf2\x87\xc0\x38\xbe\x66\xbb\x61\x57\x87\x69\x64\x4e\x86\x33\x03\xf9\x70\x74\x59\x9a\xe7\xba\x1b\x8d\xd5\x71\xd5\x46\xe5\x06\x45\xdc\x79\x1f\xd2\x76\x56\xb7\xdb\x90\x7e\x0a\x15\xae\x5b\xc2\xae\x7d\x3c\x88\x60\x8c\xad\xa5\x44\x0a\x53\xbd\x69\xca\xda\x2e\x9e\xc2\xea\x95\xba\xe3\x82\xcf\xda\xdd\xea\xf5\x71\xe2\xbd\x4d\xdc\x1e\xd7\xef\x44\xec\x7e\x3e\x9a\xf6\x3d\xe8\x9f\xdb\x84\x0b\xd7\xf6\xa9\x56\xbe\xc4\xfd\xfa\x05\x11\xf3\xdf\xce\xf9\x2b\x00\x00\xff\xff\x17\x8c\x75\x4c\x90\x04\x00\x00") +var _test_certsServerTenantCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x94\x3b\xb3\xaa\x48\x00\x84\x73\x7e\xc5\xe6\xd6\x16\x88\xa8\xc7\x60\x83\x19\x66\x84\x61\x00\x1d\xde\x98\xf1\xd0\x41\x50\x5e\x82\x73\xf0\xd7\x6f\xdd\x13\xdc\x1b\xec\x76\xd4\xd5\x5d\xd5\x51\xd7\xf7\xf7\x2f\x41\x6c\x10\xf7\x2f\x1d\x7b\x01\x39\x12\x1d\x04\xf8\x27\x95\x1c\x42\x10\x45\xba\x0e\x2a\x9d\x03\x41\x20\xe0\xc4\x03\x8e\xca\x90\x59\x6a\x25\x9d\xa9\x86\xed\xa5\x5a\xf8\xd2\xee\x53\x81\x58\x6a\xd1\xee\x42\xaa\x77\xe1\x02\x86\x6d\xc8\x80\x90\xe8\x07\xfb\x0e\x04\x06\x58\x87\x58\xaf\x1c\x8b\xa9\x87\x3a\xdb\x58\xef\x34\x76\x3b\xc7\x0b\x05\x16\x29\x8a\x18\x43\x58\x7c\xa3\x5c\x75\xc7\xe2\x79\xa8\x52\x95\x73\xa6\x60\x61\x56\x85\x2b\x39\x35\x10\xee\x07\xaf\x9d\x00\x2b\x6e\x4d\xb4\xb8\x2a\x5c\xa7\x0e\x85\xfb\x21\xe2\x77\x56\x83\xd0\xf1\x88\xc0\xe0\x67\x8c\x62\xf1\xf8\x3d\x26\xa5\x2a\x17\x9c\xe3\xbb\x03\x14\x43\xf7\x07\xc3\x27\xf9\x06\x31\x0c\x01\x0b\x01\xd0\x08\x44\x02\xfc\xea\x29\xe8\x08\x04\x0c\xed\x0a\xf9\x7b\xbe\x76\x2d\xc7\xf9\x10\x97\x59\xda\x49\xb3\x95\xa5\x4f\x4f\xbd\xd9\x6a\xa9\xd7\xa7\x68\x5b\x4e\x62\x95\xe2\xfe\xfa\xae\x52\x70\x5e\xcf\xb4\x49\xb5\x71\xdb\xe6\xe5\x70\xd0\x2b\x9b\x23\xdd\x9a\xe5\x68\x0b\x9d\xb2\x7c\xe7\x34\x3b\xad\x4e\xd2\xe3\x35\xed\x2b\x1a\xa9\x32\x3a\x9f\xe4\xf6\xb8\x30\x4d\xde\x96\xfe\xba\xa7\xf8\xa0\xa6\x59\xba\xfa\x72\x48\x7a\x9e\xf5\xc9\xae\xe4\x0f\x7a\x23\x73\x36\x2c\xad\xf7\x3d\x45\x46\x3b\x50\xfb\xd4\x90\x32\xd2\xba\x83\xb2\x42\x8b\xfc\x36\xaa\xcd\xad\xb8\x2b\xea\x84\xc6\x67\x10\xea\x7c\xd7\x2e\x8c\x5c\x60\xa3\xd0\xe4\x92\x5c\x07\x71\xb1\xb7\x6b\xb1\x6a\x12\xdf\xa1\xcd\x71\x7c\x3d\xce\x55\x09\x4c\xe9\x34\xba\x72\x7b\xa3\x72\xd3\x84\x7e\x75\xef\x43\x46\xe5\x73\x6c\xab\xe5\xca\xec\xfb\xa7\xde\xf6\xbd\x9a\xed\xd2\xde\xde\x1d\x4f\x91\xf3\xae\x2f\x1b\xb0\xf5\x56\xe0\x9d\xa9\x3b\x8f\xaf\xac\x80\x4d\x12\x4e\x04\xb5\x40\x33\x36\xcb\xbc\xd5\xfd\xd3\x71\xfd\xf5\x0c\xc2\xbc\x49\xf7\x4d\xb4\xdb\x27\x37\x30\xac\xb3\x29\x7e\x9a\x95\x1d\xe0\x6a\xea\xe1\x85\x3a\xdd\xd2\x76\xcf\xd3\x13\x3d\x23\x32\x6d\x03\x29\x9c\x76\x2e\xe0\x0e\x04\xc0\xa8\x93\x1a\x16\x0e\xd0\x7e\x7d\xa2\x44\x02\x43\x59\x30\x0c\x04\x39\x76\x08\x04\x90\xbb\x91\xe9\x87\x18\x21\x40\x21\xe7\x23\xe4\xf8\x08\x59\x81\x24\x10\x80\xf5\x4f\xe9\x61\x6c\xd7\xe0\xc5\xf9\xe3\x95\xab\x6e\x95\x1b\xd5\xbb\xd8\xf8\x3a\x5c\xba\x39\x37\x0e\x75\x1a\x2f\x26\x34\xbf\x00\x00\x86\x89\xc1\x1f\x49\x7f\x2c\xfe\xbf\xab\x22\xce\x31\x04\x34\x4c\xee\xe1\x04\x1f\xdd\xa4\x3c\x68\x55\xe5\x07\x6f\xbc\xb3\x7b\xdc\x1e\xcc\x4c\xb2\xf2\x8c\x05\xaf\x5b\x30\x64\xe5\xb1\x39\x64\x25\xe6\xd4\xfe\x96\x57\xf3\x6e\xf2\x94\xdd\x2d\x5d\x1a\x75\x03\x8c\xa3\xcf\xdd\x71\x58\x1d\x0b\x23\x6b\xf3\xfb\x71\xa5\xab\x45\x0e\xc7\x3a\x9c\x1b\x4b\xd2\x02\xe5\x70\x54\x23\x7e\x58\xfb\x7b\x46\xd8\x99\x87\x22\x11\x41\xa4\xa4\xce\x49\x8e\x67\xfb\xa5\xf3\xcd\xb5\xb6\xb1\xe3\xde\xbe\x3e\x1f\x6c\x5f\x7a\xb7\x37\x33\xe5\x6b\xff\x44\x83\x67\x88\xc8\x93\x0e\x17\xda\x6a\xad\xda\x07\x1e\x7e\xc2\xcf\xe6\x0e\x5a\xa8\x6b\xab\xc1\xbf\xba\x59\xf2\x6e\xe5\xdb\x66\x7f\xbd\xab\x4b\x1b\x1a\x0e\xcd\xbf\x5d\xdb\xee\xc6\xd8\x5d\x82\x71\x3b\x25\xf7\xf1\xb4\xfe\xb6\xa4\x86\xdc\x2b\x13\x45\x91\x1e\x4c\xd7\x25\x4e\x92\x0d\x08\xd8\xc3\xb6\xcd\xfe\xa3\xe5\x4e\xf5\xd8\xb2\xd8\xc8\x3c\x86\xb3\xeb\xe5\xcc\xc7\x0c\x7b\xa2\xb3\xce\xd3\x9a\xd3\xc1\xde\x53\xeb\x3a\x98\xd2\x96\x04\x17\xf3\x86\x3a\x35\x36\x82\xaf\x0d\x3e\x65\x53\x9a\x74\xb1\xc7\xfd\xda\x4e\x61\x46\xce\xca\x72\x6a\x55\x73\x26\x6e\x6c\x1b\x7e\xb7\x9b\x79\x64\x16\xa3\xd6\x91\x4d\x0b\xfe\x91\x7e\x90\x82\x5d\xf4\x5f\xcc\xfc\x1b\x00\x00\xff\xff\x3f\x87\x2a\xce\x83\x04\x00\x00") -func test_certsMtServerTenantCrtBytes() ([]byte, error) { +func test_certsServerTenantCrtBytes() ([]byte, error) { return bindataRead( - _test_certsMtServerTenantCrt, - "test_certs/mt/server-tenant.crt", + _test_certsServerTenantCrt, + "test_certs/server-tenant.crt", ) } -func test_certsMtServerTenantCrt() (*asset, error) { - bytes, err := test_certsMtServerTenantCrtBytes() +func test_certsServerTenantCrt() (*asset, error) { + bytes, err := test_certsServerTenantCrtBytes() if err != nil { return nil, err } - info := bindataFileInfo{name: "test_certs/mt/server-tenant.crt", size: 1168, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x53, 0x9f, 0x19, 0xbc, 0x47, 0xaf, 0xdd, 0xc6, 0xa9, 0x52, 0xad, 0xb8, 0xe6, 0xad, 0x9a, 0x24, 0xa9, 0x52, 0xab, 0xb1, 0x8, 0x3c, 0x75, 0x67, 0x5a, 0x6e, 0xbd, 0xc4, 0x38, 0x4e, 0x1a, 0x27}} + info := bindataFileInfo{name: "test_certs/server-tenant.crt", size: 1155, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x11, 0x14, 0x17, 0xc1, 0xbf, 0x22, 0xa2, 0x14, 0x93, 0xbe, 0xac, 0x3a, 0x3e, 0x87, 0xeb, 0x14, 0x87, 0x74, 0xed, 0xd7, 0x18, 0x39, 0x9a, 0x1c, 0x30, 0xb1, 0x97, 0x9f, 0x98, 0x11, 0x4a, 0x62}} return a, nil } -var _test_certsMtServerTenantKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\xa7\x12\xa4\x60\x02\x04\x60\xcf\x53\xac\xa7\xae\x18\xe2\x80\x38\xf1\x93\x73\xce\x8e\x0c\x43\x1e\xe2\xf0\xf4\x57\xbb\xfa\xda\xb6\xe9\x6a\xf3\xfd\xe7\x6f\x58\x41\x52\xcc\x3f\xae\x07\xfe\xd8\xae\x12\x02\x5f\xf8\xa3\x09\xc9\xbf\x06\x32\x14\x45\x98\x1b\x85\x05\x40\xe3\x80\x23\x00\x8a\x8b\x87\x3e\x2e\xf6\xd7\x46\xcb\x9a\x09\xdb\x0a\x7c\xb0\x6a\xa0\x68\x38\x4c\xd8\x5b\xa0\xd1\xe4\xe4\xbc\xed\x4e\x81\xd1\x45\x48\xfc\x33\x8e\x20\xb1\x43\xd8\x15\x05\x28\x5e\xec\x66\x43\xaf\x24\xbf\xdc\x39\x93\xac\x48\x29\x7f\x43\xbb\xac\x70\x2c\xf0\x5d\x7d\x14\x58\x7b\xe3\x62\x24\xcb\x98\x4c\x29\xf1\xfc\xcd\xd7\x5f\xcc\x40\x94\xa8\x4f\x21\x94\x43\x52\xde\x1c\x8f\xd6\x23\x99\xe9\xf0\xa8\x8e\xce\x34\xc7\x7f\x8c\x17\xbf\x28\x73\x63\x03\xaf\x3e\x6a\x14\x8e\xf5\x5d\xab\xb0\x4e\xf6\x14\x3a\x66\xb6\x9d\xff\x84\x15\x67\x74\x79\x6f\xbe\x21\x96\xb8\x93\xf2\x89\xa3\x8c\x17\x32\xe1\x90\x88\x57\x9a\x0b\xdd\x58\x90\xeb\xca\xb4\x38\x9d\x74\x93\x79\x31\xef\xa1\x2e\xb8\xaa\xb8\xea\x01\x51\x4d\x7a\x5c\xa8\x51\xbf\x58\xb0\x6b\x38\xf3\x69\x21\x82\x7a\x9a\x75\x8f\x66\x16\x15\x04\x29\xa8\x4a\x7e\xcf\x02\x70\x09\xbb\xc8\x70\xee\x2f\xc3\xc7\xa9\xb7\x90\x85\x41\xd6\xba\x5d\x8f\x17\xa9\x91\x7d\x9c\x56\x66\x31\x07\xb6\xb9\xd1\x3f\x34\xae\x21\xc5\xb6\xeb\x87\x98\xc4\x14\x48\xf6\x6b\xf5\x16\x21\x50\xb0\x17\x1e\x76\xa3\xf4\x3a\x11\x71\xa2\x0c\xfe\x36\xec\x4b\xe1\x81\x03\x58\x30\x2b\x2c\xe0\x72\xde\xf5\x9e\x9a\x52\x90\xf2\x4b\x87\x05\x94\x1e\xbb\xda\xaa\xe7\xc3\xb6\x67\xc0\x86\x8f\x80\x5e\xf6\x84\xcc\xed\x58\xc4\x51\x9f\x2f\xe3\xbc\x58\x12\xd9\x64\x44\xe2\x91\xa9\x62\xdf\x04\x5a\x49\x39\xa2\x7e\x61\xd8\xec\x60\x06\x3f\xcc\x1a\x5a\xf4\xeb\xbb\xca\x84\xc8\xce\xf4\x0f\xc3\x88\x59\x17\x55\x8d\x14\x61\x0d\x6e\xa9\x8b\xd5\x2b\xa7\x64\xb3\x56\x58\x71\x72\xba\xc5\xf3\x6d\x9e\x95\x89\xd9\x43\x09\x2f\xdd\x41\x3a\x4c\xf8\x1b\x0e\x28\xb4\x16\xb1\xd7\x41\x29\xd2\x92\xdc\x11\x97\x9c\x44\xea\xb2\xe1\x38\xe1\xe1\xde\x31\xd1\x6e\x39\xd7\xc8\x34\xc4\x33\xb0\xc9\x1c\x96\xae\x6e\x5b\x9d\x21\x9d\x5e\xaa\x5e\x21\xcb\x1d\x44\xfe\x00\x45\xaf\xeb\x76\x0e\x9e\xd9\xa2\x73\x62\x28\x90\x67\x7e\x5d\x5b\x4b\xf0\x06\x4f\x2f\x16\x41\x65\x0b\xf2\x3b\xbe\xd3\x69\x3a\x7e\xf0\xac\x26\xe4\x23\xa2\xa4\x41\x31\xc2\x76\xd4\x91\x1d\x30\x3d\x0a\x21\x69\x6d\x85\xf7\x04\x6e\xe3\x47\x30\x29\x69\x5c\x23\xbd\x7c\x83\x98\x64\xc5\x58\x3d\xf0\xcf\xb6\x72\xc6\xea\x20\x53\xd3\xe8\x2d\x6b\x6c\xd8\x4f\x99\xc7\x13\xfb\x85\xba\xdb\x2f\x28\x4b\x4b\x0b\x14\xf3\x3c\xbf\x14\x02\xd7\x24\x02\x60\x5c\x03\x49\xa4\x17\x79\xda\x04\x48\xa5\xac\x2d\x4f\xe5\xeb\xce\x33\x82\x6c\xd6\xc9\xd4\x58\x3f\x30\x65\xfe\x7b\xd7\xf5\x87\x31\x44\xb3\xca\x44\x14\xe6\x55\xe8\x76\x63\x8c\xcb\x9e\x20\x32\x55\x91\xd2\x80\xf2\x9e\x33\x69\xfb\x21\x9a\x27\xf2\xd9\x10\x9a\xc9\x55\x0e\x6e\x17\x8b\x39\xb2\xb5\x8a\x57\x13\x37\x37\x09\xbe\x59\xac\xdf\x4e\xd9\x23\x2b\x88\x2a\xc8\xb4\xdd\xb9\x12\x00\x35\x9d\xbe\x9b\xd3\x04\x38\x67\xd5\x48\xe6\xbb\x2a\x4a\x2b\x08\x3a\x56\xac\x96\x57\x1a\x9c\x65\x92\x2c\xd4\x17\xd5\xae\x5c\x21\xb5\x99\x73\xe9\x7f\x8b\xe9\x89\x6e\xa0\xfa\x10\x6d\x77\x4b\x9c\x8a\x0d\x08\x49\x07\x2c\xd2\x68\x67\x57\xca\x6a\x8b\x06\x34\xf6\xcb\x49\x37\xc5\x77\xc3\x61\x46\xb2\x31\x13\xf7\x4d\xef\xbf\x72\x9a\x2c\xee\x1e\x8c\x8f\xf5\xab\x62\x0f\x86\xd6\xa0\xe0\x65\x22\xea\x42\xbf\xef\xb4\xac\xd4\xfb\x96\x00\xcd\x15\xad\xb3\xd5\x3f\x01\xe3\x89\xad\x3f\x25\x14\x07\xdf\xd8\x9e\xa0\x0d\x25\x5d\x98\x1c\x39\x7c\xc8\xcf\xfa\x2f\x6b\x03\xbf\x6d\x20\xf3\x2c\xbc\xf7\x93\x70\x47\x18\xb6\xf8\xe6\x20\x9c\xc8\x34\xf9\x18\xdc\xea\xfe\x84\xe6\x22\x65\x48\x9a\x72\x87\xf5\xf7\x64\x20\x7c\x67\xf4\x49\x3b\x5d\xb1\x13\x99\xce\x9c\x51\x98\x79\xeb\x0d\x15\x01\x77\x1e\x41\x68\x7b\xf9\xeb\xb4\xa2\x99\x6f\xfb\xe3\xcd\x53\x1f\xf4\xb5\x46\xfe\xfb\x63\x6e\x83\xac\x7b\xa8\x4c\xae\x00\x59\x52\x0a\xf5\x41\x54\x8c\x0e\xbc\x79\x70\x6b\x3d\xb3\x18\x59\x0a\xb4\x29\x4a\xe7\x34\xd7\x07\xaf\xaa\xcf\xfc\x39\xc4\x91\xd8\xc7\x94\x7a\x64\xeb\x52\xb0\x6f\x25\xeb\x98\xc7\xa0\xa7\xe6\x76\xbc\x63\xf2\x0e\xd1\x10\x12\xfe\xea\x44\xd3\x5d\x04\x21\xba\x25\xc4\xc3\x21\xf4\x64\x09\x2a\xf8\x70\x70\xf2\x92\x9e\x5b\x1f\x96\xdb\x8a\x0e\x47\x63\x1b\x6e\xe9\x26\x70\xdf\xe1\xeb\x43\x7c\x28\xb5\x1c\xef\x9d\xe9\xb9\x23\x78\x96\x3a\xf5\x7a\x26\xf0\xdf\x13\x57\xfd\x06\x0c\x7a\x73\x22\x25\x7f\x8d\xb3\x96\x0f\x94\xa4\xcf\xc7\x09\xf1\x45\x57\xbf\xaf\x53\x58\x8c\x54\xd5\x9f\x77\xca\xbb\x14\xfd\x89\xa7\xb5\x91\x75\xa3\xf4\x52\x2f\x63\x07\x70\x77\xe2\x88\x95\x8b\xe5\xd7\x50\xb1\x88\x1a\x6e\xde\x3f\x6b\x51\xbd\x3c\x8f\x70\x64\xe3\x45\x71\x06\x48\x10\x3c\x08\xa2\xf6\x30\x21\x0e\x65\x26\xa5\xd4\xc7\x39\x59\x02\xa7\x02\xd5\xab\xa5\xb1\x3b\x90\x9b\xea\x76\x51\xed\x7b\x28\x8f\xe8\x16\xcc\x12\x90\xba\x98\xda\x83\xdc\xb6\x4e\x7f\xc4\x00\x53\x54\x1b\x7e\x35\xc7\xc4\x3c\xc5\x25\x39\x5f\xfe\x8b\xc0\x9d\x37\xb8\x14\xf9\xd1\xe1\x2f\x51\x1e\xde\xa9\x27\xd8\x3c\x96\x01\x64\xf2\x2e\x8a\x7d\x99\x7d\x60\x66\x89\x57\x7e\xac\xcc\x51\xb2\xef\x9c\xc7\x23\xe7\xae\xd7\x46\xce\x60\xa9\xcb\xa9\xe0\x2e\x2b\xf4\xe5\xb4\xc7\xb3\xbb\x52\xd4\x73\x7f\xdb\x58\x0a\xfc\xcf\xf9\x2a\x21\xaf\x66\x58\xc7\x99\xf6\x57\x32\x8a\xf3\x93\xda\xfa\xac\x54\x9c\xe1\xeb\x49\x3a\xda\x04\xc9\x9d\xac\xba\x5a\xbf\x10\xc1\xc7\x87\x58\x76\xbe\x8d\x8c\x0b\xfc\x17\xfa\x47\x8a\x60\xf2\xff\x9f\x9a\xff\x05\x00\x00\xff\xff\x81\x7d\x7f\x28\x8b\x06\x00\x00") +var _test_certsServerTenantKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\x37\x12\xab\x58\x02\x85\xe1\x9c\x55\xbc\x9c\x9a\x12\x1e\x14\x5e\xac\xb8\x08\xe1\x41\x90\xe1\x84\xf7\x9e\xd5\x4f\xf5\xeb\xb4\x4f\x7a\x92\x3f\xfb\xfe\xf7\xcf\x78\x49\x51\x3f\x7f\x6c\x07\xfc\x31\x6d\xd5\x07\xae\xf4\x47\x93\xc2\xbf\x0f\xa2\xab\xaa\x34\x1c\x2a\x0f\x80\x26\x00\x4b\x02\x68\x6f\x72\x49\x3f\x41\x8a\x57\x98\xb6\x0f\x3a\xed\x5d\x05\x1d\x6c\xb2\xfe\x7a\xf6\xd6\x70\xb7\xf9\x37\x49\xcd\x8e\xd7\xbe\x33\x15\x00\xf1\x99\x20\xd5\xa8\x18\x1a\x1a\x11\x64\xbc\x5b\x83\x43\x81\xa3\x4a\x76\x3c\xb7\xdc\xd7\x37\x21\xae\xae\xde\xeb\x31\x79\xe7\x94\xd3\x66\xfb\x71\xdf\x3b\x7d\xa6\x8d\x61\xa2\x5f\x6f\x8d\x9d\xd2\xcc\x3a\xa5\x43\xcc\x5d\x14\x14\x91\x2d\x66\x87\xfa\x71\x07\x7b\x9c\x6c\x59\xe5\x9a\xd7\x64\xe6\x81\x16\x2a\x56\x95\x5d\x05\xef\x78\x35\x0b\x6e\x67\xcf\x21\x23\x49\x75\xfd\xcc\x16\x43\x37\x38\x18\x8c\x91\x6b\x10\x41\xb1\xa2\x8f\xd0\x12\x3e\x39\x2d\x8a\x83\x66\xa9\x39\xca\x58\x2d\x8c\x7c\xcc\x42\x97\xfa\x5a\xfc\x3d\xdd\x3f\x9a\xbc\x76\x1a\xca\xd2\x10\x4e\xbe\x24\xec\x37\x5e\x3d\xfb\x5f\xc9\xc4\x51\x31\x22\x4c\x9c\x75\x5b\xa7\x39\x68\xe9\xb6\xee\x9b\x22\xb2\xc3\xf0\x7e\xc5\x9b\x58\xb7\x26\x34\x2b\x0f\x7b\xdb\x32\x27\x54\x16\xd4\x68\x7d\xde\xac\xa6\x2e\xb3\x1f\x6c\x70\x85\x56\x0c\x5a\xce\x37\x9c\x44\x0e\x6d\x0d\x66\x7f\x2c\x29\x07\x3b\xd5\x24\xb6\x02\xa7\xd6\xf4\x91\x81\xf5\x58\xd0\xad\xf3\xce\x3d\xfc\x9d\xd7\x96\x2a\x02\x0b\xf0\x60\x50\x79\xc0\x17\xaf\xc9\x10\x8e\xc3\xe9\x8d\x2a\xae\x14\x04\xb8\xab\x82\x4e\x07\x2c\x3f\x94\xfd\x6a\x52\xec\x1b\x81\x88\x26\x7e\xde\xea\x51\xfc\xbd\x4f\x5f\x25\x96\xcb\x67\xa6\x16\xf9\x94\x4e\xd0\x1a\x6d\x96\x11\x4e\x83\x55\x18\x20\x6f\xe2\x77\x18\x57\x04\x1e\x2c\xe9\x18\x2c\x40\x71\xee\xa1\x93\x6d\x88\x29\x1d\xa1\xa7\xc3\x5a\x3c\xc8\x8a\x13\xef\xa4\x88\x7f\x83\x97\xa4\x25\xe6\xdd\x7a\x2a\xd8\x36\x3a\x15\x1b\xaa\x1b\x4c\x0b\xdd\x86\x5c\xc7\x00\x59\xa4\xd6\x7f\x75\xc6\xfa\x15\x0c\xfa\x35\x72\xd9\x21\xc3\xf0\xc2\x96\x5f\x32\xb0\xe2\x10\xca\xcc\x83\x67\xb2\x20\xaa\x19\xe3\xf7\x0b\xab\xea\xfd\xa3\xae\xfc\x63\x3e\x13\x4e\xfe\x7d\xbc\xcf\x2a\xb1\x48\x33\x27\x8a\x99\x5e\x3b\x1b\x30\x8b\xab\xd7\x30\xc2\xb7\x78\x73\xe5\x82\x2f\xdc\x36\x95\x8f\x28\x7e\x97\xfa\x81\x8f\xb8\x73\xc9\x8a\x7c\x19\x8a\x15\xfd\x68\x9b\x0d\x65\x2d\x6f\x61\x7f\x33\x0f\xc4\xe2\x79\xc7\xee\xfb\xe7\xd2\xb2\x59\xaa\xb0\xc2\x8c\xcb\x40\x75\x57\xfc\x6e\xc9\xb3\x71\x7e\x80\xd1\xb6\x65\xec\x2d\xae\xca\xdd\xaf\x95\xed\xcc\x5b\x7f\xfe\xa4\x21\x3d\xad\x1a\xab\x6b\x27\x69\x11\x3a\x71\x3f\x13\x27\x09\x45\x28\x81\xc7\xd7\x63\x14\x89\x59\x62\x55\xca\xc9\x9f\x07\x26\x5a\x61\xb2\xe1\x16\x9c\xbb\x57\x29\x78\x5e\x76\x2e\x29\xdf\x24\x71\x7c\x4d\x51\xed\x51\xb7\x75\xc7\x82\x08\xe9\x5f\xcb\x9d\x15\xd1\xcf\xa6\x42\xe0\x8e\x53\xfc\xfe\xec\xe1\xb8\x2c\x5e\x96\x18\xdf\xb3\xa4\xe5\xb2\x34\x74\x8c\xac\xc2\x01\x14\xae\x27\xea\xa8\x28\x62\x78\xe5\x2d\xfc\x96\x37\x65\xb2\x25\x08\x33\xf7\x20\x7e\x9d\x06\xaf\xa9\x34\xfd\xbd\x55\x35\xe4\xf0\xdb\xf6\xf8\xb9\x60\x73\x15\x93\xdb\xc8\x54\xf9\xed\xc1\x39\x0c\x54\xbe\x2d\x73\x71\xa8\x6d\xa4\x78\xa0\xff\x5b\x6c\xa6\x6f\xc4\xe2\x9b\x20\xcb\xc4\xa8\x5f\x79\x02\xe0\x10\x5a\x18\xd0\x67\x4a\x77\x8d\x34\x53\xca\x4c\x14\x05\x30\x7e\xe9\x1a\x57\xa5\xac\x2d\x03\x9e\x0b\x66\x67\x8b\x89\x86\x35\x6b\xce\x4b\x75\x61\xa0\x90\x21\x07\xc2\x79\x3f\x37\x91\x5f\x87\xf5\x1d\xf7\x6c\x53\xcb\xfc\x74\xc8\x86\xed\x4a\x55\x08\xb5\xae\x77\x94\x5a\xb3\xcd\x34\x5d\xb7\x20\xa7\x6d\xa7\xee\xf4\x92\x35\x48\x19\x7f\x97\x01\x6b\x63\x88\x4a\x7d\x97\x49\xb8\xd0\x28\xaa\x0f\x9f\x2f\x1f\x6b\xd7\xaf\xc0\x58\xfc\x47\x6d\x55\xfb\x27\x0b\xa2\x5e\xf2\x32\x8c\x13\x8a\x10\xcc\x98\x0f\x6b\x3c\x08\x7d\x70\x10\xbe\x98\x02\x9a\xb1\x08\x1c\x89\xac\x13\xa2\x56\x7b\x07\x78\x95\xab\xfc\x9b\x9d\x61\x97\x6a\x8f\xba\x75\x46\xc3\x73\xbd\x6a\x77\x5b\x1e\xf6\xf9\xc9\xc0\xdd\x60\xd3\xf1\xd1\xdd\x39\x13\x6d\x24\xd9\x00\x41\x8c\xe2\x27\x7a\x23\x50\xb8\xac\xbb\x38\x76\xf3\x5e\x83\x2f\x9b\x9b\xd7\x27\x99\xe5\x89\x32\x09\xaa\xa8\xc9\xd1\x7f\x3f\x1d\x0f\xc4\x18\x06\x7b\x30\x4c\xfe\x4b\xe5\x98\x23\x03\xf2\xbd\x65\xaf\x4c\x6c\x0b\x82\x55\x10\x71\xad\x4a\x26\xc6\x22\x0d\x85\xb3\x2d\xa3\x0f\xf8\x4c\x12\xdb\xd2\xf8\x42\x9e\x71\x3b\x96\xfd\x11\xbc\xbf\xfc\xde\x44\x20\x0f\x57\x1c\xb7\x74\x65\x31\x32\xcb\xfc\x70\x9d\x39\x38\x38\x4d\xde\x48\x51\x75\x57\xed\x0b\xf2\xda\x3f\x3a\x98\x59\xdc\x30\x09\xdb\x89\xb6\xab\x91\xc4\x22\xfd\x58\x9a\xbd\x5e\xc0\xbc\xd8\xfc\xb2\x18\x96\x58\x82\x44\x57\x3c\xe2\x20\x42\xf1\x39\xad\xbb\xba\x53\x03\xb2\x95\x57\x27\x8b\x6c\x34\x0a\x1f\x55\x3a\x2a\x26\x9e\x21\x77\x12\x8f\xae\x92\xf6\xfc\x53\x94\x37\xdd\x05\x86\xe1\x98\x18\x7a\xe1\x27\x9d\xa8\xcd\xd0\x55\xec\xeb\x3c\xa3\x4a\x2f\x42\x3d\xb7\x78\x84\x3b\x13\x12\x0c\x0a\x0f\x3e\x0b\x04\x33\x37\xc3\x56\x81\xcb\x9e\xc2\xab\x57\x7e\x91\x64\xfb\xbb\x43\x44\xe2\x9b\xb9\xb8\x72\x7e\xc5\x34\xbd\x18\x5a\xa9\xa1\x85\xf5\x39\xe5\xdf\xfa\x64\x29\x02\x61\x2d\x95\x59\xfa\x60\x24\xd4\x94\x36\xb9\xd6\xd8\x23\x4f\xf5\xcb\x70\xc7\x5f\xe3\xee\xbc\xd0\x87\x67\xe7\xdb\x33\x1b\x8f\x73\xac\xf5\xe6\x39\x43\x89\x8c\xd8\x2b\x7e\x5e\xcc\xb6\x9b\xd6\xf9\xea\x91\xd5\x36\x0f\xfb\x95\xc0\x57\x34\xe3\xa2\x79\x44\x4b\xf0\xae\x7c\x79\x50\xa5\x23\x79\x11\x33\x6e\xfa\xed\xa4\x59\x26\x2a\x81\x02\x2c\x1f\x58\x78\xe4\xec\xaa\xc8\x5f\x52\xa4\x8f\xf8\xdf\xd4\xfc\x3f\x00\x00\xff\xff\xbb\x7c\x9f\xb4\x8b\x06\x00\x00") -func test_certsMtServerTenantKeyBytes() ([]byte, error) { +func test_certsServerTenantKeyBytes() ([]byte, error) { return bindataRead( - _test_certsMtServerTenantKey, - "test_certs/mt/server-tenant.key", + _test_certsServerTenantKey, + "test_certs/server-tenant.key", ) } -func test_certsMtServerTenantKey() (*asset, error) { - bytes, err := test_certsMtServerTenantKeyBytes() +func test_certsServerTenantKey() (*asset, error) { + bytes, err := test_certsServerTenantKeyBytes() if err != nil { return nil, err } - info := bindataFileInfo{name: "test_certs/mt/server-tenant.key", size: 1675, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xb2, 0xfd, 0x1a, 0x91, 0x38, 0xd1, 0x6c, 0xa5, 0xcc, 0xab, 0x47, 0x20, 0x36, 0x35, 0xf2, 0x86, 0xca, 0x57, 0x37, 0x53, 0x77, 0xd2, 0xaa, 0x7b, 0xe6, 0xc, 0x4f, 0x0, 0x67, 0x74, 0xb3, 0x8f}} + info := bindataFileInfo{name: "test_certs/server-tenant.key", size: 1675, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xd5, 0xa, 0x9d, 0x11, 0xa4, 0xd0, 0xe0, 0x44, 0x7c, 0xd3, 0xf, 0x97, 0x6f, 0x16, 0xb0, 0xe1, 0x65, 0x5d, 0xfc, 0x4d, 0x11, 0xe8, 0xce, 0xf2, 0xbf, 0x69, 0xb6, 0xa0, 0x6c, 0x81, 0x9c, 0x97}} return a, nil } @@ -495,37 +579,45 @@ func AssetNames() []string { // _bindata is a table, holding each asset generator, mapped to its name. var _bindata = map[string]func() (*asset, error){ + "test_certs/ca-client-tenant.crt": test_certsCaClientTenantCrt, + + "test_certs/ca-client-tenant.key": test_certsCaClientTenantKey, + + "test_certs/ca-server-tenant.crt": test_certsCaServerTenantCrt, + + "test_certs/ca-server-tenant.key": test_certsCaServerTenantKey, + "test_certs/ca.crt": test_certsCaCrt, "test_certs/ca.key": test_certsCaKey, - "test_certs/client.root.crt": test_certsClientRootCrt, + "test_certs/client-tenant.10.crt": test_certsClientTenant10Crt, - "test_certs/client.root.key": test_certsClientRootKey, + "test_certs/client-tenant.10.key": test_certsClientTenant10Key, - "test_certs/client.testuser.crt": test_certsClientTestuserCrt, + "test_certs/client-tenant.11.crt": test_certsClientTenant11Crt, - "test_certs/client.testuser.key": test_certsClientTestuserKey, + "test_certs/client-tenant.11.key": test_certsClientTenant11Key, - "test_certs/node.crt": test_certsNodeCrt, + "test_certs/client-tenant.20.crt": test_certsClientTenant20Crt, - "test_certs/node.key": test_certsNodeKey, + "test_certs/client-tenant.20.key": test_certsClientTenant20Key, - "test_certs/mt/ca-client-tenant.crt": test_certsMtCaClientTenantCrt, + "test_certs/client.root.crt": test_certsClientRootCrt, - "test_certs/mt/ca-client-tenant.key": test_certsMtCaClientTenantKey, + "test_certs/client.root.key": test_certsClientRootKey, - "test_certs/mt/ca-server-tenant.crt": test_certsMtCaServerTenantCrt, + "test_certs/client.testuser.crt": test_certsClientTestuserCrt, - "test_certs/mt/ca-server-tenant.key": test_certsMtCaServerTenantKey, + "test_certs/client.testuser.key": test_certsClientTestuserKey, - "test_certs/mt/client-tenant.123456789.crt": test_certsMtClientTenant123456789Crt, + "test_certs/node.crt": test_certsNodeCrt, - "test_certs/mt/client-tenant.123456789.key": test_certsMtClientTenant123456789Key, + "test_certs/node.key": test_certsNodeKey, - "test_certs/mt/server-tenant.crt": test_certsMtServerTenantCrt, + "test_certs/server-tenant.crt": test_certsServerTenantCrt, - "test_certs/mt/server-tenant.key": test_certsMtServerTenantKey, + "test_certs/server-tenant.key": test_certsServerTenantKey, } // AssetDir returns the file names below a certain @@ -570,24 +662,26 @@ type bintree struct { var _bintree = &bintree{nil, map[string]*bintree{ "test_certs": {nil, map[string]*bintree{ - "ca.crt": {test_certsCaCrt, map[string]*bintree{}}, - "ca.key": {test_certsCaKey, map[string]*bintree{}}, - "client.root.crt": {test_certsClientRootCrt, map[string]*bintree{}}, - "client.root.key": {test_certsClientRootKey, map[string]*bintree{}}, - "client.testuser.crt": {test_certsClientTestuserCrt, map[string]*bintree{}}, - "client.testuser.key": {test_certsClientTestuserKey, map[string]*bintree{}}, - "mt": {nil, map[string]*bintree{ - "ca-client-tenant.crt": {test_certsMtCaClientTenantCrt, map[string]*bintree{}}, - "ca-client-tenant.key": {test_certsMtCaClientTenantKey, map[string]*bintree{}}, - "ca-server-tenant.crt": {test_certsMtCaServerTenantCrt, map[string]*bintree{}}, - "ca-server-tenant.key": {test_certsMtCaServerTenantKey, map[string]*bintree{}}, - "client-tenant.123456789.crt": {test_certsMtClientTenant123456789Crt, map[string]*bintree{}}, - "client-tenant.123456789.key": {test_certsMtClientTenant123456789Key, map[string]*bintree{}}, - "server-tenant.crt": {test_certsMtServerTenantCrt, map[string]*bintree{}}, - "server-tenant.key": {test_certsMtServerTenantKey, map[string]*bintree{}}, - }}, - "node.crt": {test_certsNodeCrt, map[string]*bintree{}}, - "node.key": {test_certsNodeKey, map[string]*bintree{}}, + "ca-client-tenant.crt": {test_certsCaClientTenantCrt, map[string]*bintree{}}, + "ca-client-tenant.key": {test_certsCaClientTenantKey, map[string]*bintree{}}, + "ca-server-tenant.crt": {test_certsCaServerTenantCrt, map[string]*bintree{}}, + "ca-server-tenant.key": {test_certsCaServerTenantKey, map[string]*bintree{}}, + "ca.crt": {test_certsCaCrt, map[string]*bintree{}}, + "ca.key": {test_certsCaKey, map[string]*bintree{}}, + "client-tenant.10.crt": {test_certsClientTenant10Crt, map[string]*bintree{}}, + "client-tenant.10.key": {test_certsClientTenant10Key, map[string]*bintree{}}, + "client-tenant.11.crt": {test_certsClientTenant11Crt, map[string]*bintree{}}, + "client-tenant.11.key": {test_certsClientTenant11Key, map[string]*bintree{}}, + "client-tenant.20.crt": {test_certsClientTenant20Crt, map[string]*bintree{}}, + "client-tenant.20.key": {test_certsClientTenant20Key, map[string]*bintree{}}, + "client.root.crt": {test_certsClientRootCrt, map[string]*bintree{}}, + "client.root.key": {test_certsClientRootKey, map[string]*bintree{}}, + "client.testuser.crt": {test_certsClientTestuserCrt, map[string]*bintree{}}, + "client.testuser.key": {test_certsClientTestuserKey, map[string]*bintree{}}, + "node.crt": {test_certsNodeCrt, map[string]*bintree{}}, + "node.key": {test_certsNodeKey, map[string]*bintree{}}, + "server-tenant.crt": {test_certsServerTenantCrt, map[string]*bintree{}}, + "server-tenant.key": {test_certsServerTenantKey, map[string]*bintree{}}, }}, }} diff --git a/pkg/security/securitytest/securitytest.go b/pkg/security/securitytest/securitytest.go index 19ccbe7ccabf..d773312c5253 100644 --- a/pkg/security/securitytest/securitytest.go +++ b/pkg/security/securitytest/securitytest.go @@ -22,7 +22,7 @@ import ( "github.com/cockroachdb/errors" ) -//go:generate go-bindata -mode 0600 -modtime 1400000000 -pkg securitytest -o embedded.go -ignore README.md -ignore regenerate.sh test_certs test_certs/mt +//go:generate go-bindata -mode 0600 -modtime 1400000000 -pkg securitytest -o embedded.go -ignore README.md -ignore regenerate.sh test_certs //go:generate gofmt -s -w embedded.go //go:generate goimports -w embedded.go diff --git a/pkg/security/securitytest/test_certs/ca-client-tenant.crt b/pkg/security/securitytest/test_certs/ca-client-tenant.crt new file mode 100644 index 000000000000..ae1fd32d4ec8 --- /dev/null +++ b/pkg/security/securitytest/test_certs/ca-client-tenant.crt @@ -0,0 +1,19 @@ +-----BEGIN CERTIFICATE----- +MIIDBzCCAe+gAwIBAgIRANLwrftZx5UZO8aWgz/QyEcwDQYJKoZIhvcNAQELBQAw +KzESMBAGA1UEChMJQ29ja3JvYWNoMRUwEwYDVQQDEwxDb2Nrcm9hY2ggQ0EwHhcN +MjAwNzE1MTE0NjI3WhcNMzAwNzI0MTE0NjI3WjArMRIwEAYDVQQKEwlDb2Nrcm9h +Y2gxFTATBgNVBAMTDENvY2tyb2FjaCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP +ADCCAQoCggEBAOd05MFojEMacunbagcG5ETUYlCpeqEwBonboZCgAF0AjtZmFpYM +pvf+T9ZML40kGedsSrZcnC64VuaZ4uJfz6nBHrNiF0QUhxWzn4mE4jJ61/YmzRGo +ok8IczwoV3bGU436SlLzh+v8ERxMmQrJhzKY9GLkbwV3lLkI7tatZ9W5xeBhB0zx +0IpHlC0ESD6H18cK9rlCCxXmtOJm1TZnvvMykwd7pwTzMUPcpM2CaUm9P45qoB/k +Bjj5EedDFAakt7+bwiFL3714VDmfXHvs7xiX5gR9f0stfVWzP5yln8k4w3vEwEZr +7n6jNVg53e8y4QYgAzxcKUhlCiu5CKLhq98CAwEAAaMmMCQwDgYDVR0PAQH/BAQD +AgLkMBIGA1UdEwEB/wQIMAYBAf8CAQEwDQYJKoZIhvcNAQELBQADggEBAMXS8wxt +kVe6iMVsbyb2JWcOk3zTaIKmwRj2dDckocqQs2xxmqoL+hv20gBkUP/bxsxZtOpE +5nJiQoGqE9xqIVEDAu0Pn4GoFmqHOttUxJX3JiXXeOGAj3nWCxTYbM9QLt8JCLjS +N/K1owbIAJwJ14aIZ2/h+Z3HsSWp9r6Cvc1UWI5VXNxIcQC4e1vhbIiCvn2H15M1 +HnD+uLd7HV/AlmRRQrDmArbhgOWA8+FPXZi8uOeaRYZ8dvoxh2tPmTGCRQ1Efv4A +iaHLaOD2M8WQXX9Ae+lHEjrL1mU/o5sU4Nlbv8avybtf697wPg5KxFfLg4iwvJ73 +VCgsZdYy4vsCRhQ= +-----END CERTIFICATE----- diff --git a/pkg/security/securitytest/test_certs/ca-client-tenant.key b/pkg/security/securitytest/test_certs/ca-client-tenant.key new file mode 100644 index 000000000000..9021c529612f --- /dev/null +++ b/pkg/security/securitytest/test_certs/ca-client-tenant.key @@ -0,0 +1,27 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIEowIBAAKCAQEA53TkwWiMQxpy6dtqBwbkRNRiUKl6oTAGiduhkKAAXQCO1mYW +lgym9/5P1kwvjSQZ52xKtlycLrhW5pni4l/PqcEes2IXRBSHFbOfiYTiMnrX9ibN +EaiiTwhzPChXdsZTjfpKUvOH6/wRHEyZCsmHMpj0YuRvBXeUuQju1q1n1bnF4GEH +TPHQikeULQRIPofXxwr2uUILFea04mbVNme+8zKTB3unBPMxQ9ykzYJpSb0/jmqg +H+QGOPkR50MUBqS3v5vCIUvfvXhUOZ9ce+zvGJfmBH1/Sy19VbM/nKWfyTjDe8TA +RmvufqM1WDnd7zLhBiADPFwpSGUKK7kIouGr3wIDAQABAoIBAGkRYT6C7RkRCpUq +KylhcYHlP3QKW0aMfItcDi2O1Ftjg3PECAC5YZo18ZwAHZ3eg3vQZuH9jFCREbHA +rYPBpo0Sw5L+tj0LbH7neUZ98gikRyDQYErh2Dw0Q8tNLNcYFJngwpiBQHRZipLk +Gp0Q+rR3RokV1WgP7o1IhtMhCH+15edC/JFPDYnyMsL/o8Hma9Zb6IWlyCY6Abl6 +ZIkXhSNISsxm2/GEgheKfcay529YxbbFtA4ko0G4F4BM6Cf68qdGN3NWdohx0GLP +QPgB1QJfnvf+oFd2NEDjp0Bj8oKeZujLznUSXwDg65VQ1kNfmSeF3iqnPgz3Ozze +5QNFW2ECgYEA6G+fYUsmJXZXzKfcxaFcUU4Aqv98GFTIZZz0/iZ3dwhX1yhnMXrm +mgUzID8tLombOdpQMzd0+HIWblvr4Y9zpf+eWlqeMhExebGEcbu4tDPJAK7sJLWH +Vx6Gu/0nHGlqKip5P6KXzMC+GPVAeOel3z0en4+4+JFeXZ25IEf3NTcCgYEA/uva +Pj6wKMWQbe5syp/5RitSWMq9YR9gbmQ7hmLFL1WhdUChLtqsrq86cyV3Tec3GHMA +ozlrIpSwaMkjda44U5gFQ58c+iWSCY+7eMZXVHLw22Pfc0fAYUEAa7NcjMiFxRb2 +u2ejSffb835RQXi+IyDwrlgs6qI5qm/dF7dDEpkCgYAQv0oqhnGfLWGyGz4q9y9h +pE8kAvh8AE/YEnEMhtUAvJcnp3+X7xUCb/F5F1Q4EC4hAvvYVNyWshGvrevW+rEI +etx8Ah932AlKjWHPmAj84uZOqEvXcUTpIAfxL5JL18SQeTL3RM3PMOwBfFpC2931 +sb+tG3vmXQMBl8Wo78Z+DQKBgQCBwe3aBzDF4CJvQpCP5zQMWprU5YXWPRFpv41p +DzeNq4m+1EH3RonldP5MhEKhHdM2l7s4Wk7FUGgnPlLVYPP84QG09PXcAmm+gjIL +/PGQ49zj34dq95feKSccqzSt2Jf2xYSbydodGZQU8jRMHjiySt8X73wVhrPRpJUm +sDrs6QKBgDFrQ/TxQFGbR57O4+qFYMqct4kmXuc21Sb8e4Ellw99gvpvISuJd39h +mf1LWj7A+7gbyBrYzVFZScxatZEht9sX7YQ45eyLfBjJQhNnKYLQRtabzQgQT8kg +ca0pFukJkYRJvnaA8Q2+kTczn7NcDyoeZaK+gTq2byDVHYR1nPYK +-----END RSA PRIVATE KEY----- diff --git a/pkg/security/securitytest/test_certs/ca-server-tenant.crt b/pkg/security/securitytest/test_certs/ca-server-tenant.crt new file mode 100644 index 000000000000..8d3269b67a12 --- /dev/null +++ b/pkg/security/securitytest/test_certs/ca-server-tenant.crt @@ -0,0 +1,19 @@ +-----BEGIN CERTIFICATE----- +MIIDBjCCAe6gAwIBAgIQdcYD8J5t+ouxKBAzVSXSWjANBgkqhkiG9w0BAQsFADAr +MRIwEAYDVQQKEwlDb2Nrcm9hY2gxFTATBgNVBAMTDENvY2tyb2FjaCBDQTAeFw0y +MDA3MTUxMTQ2MjhaFw0zMDA3MjQxMTQ2MjhaMCsxEjAQBgNVBAoTCUNvY2tyb2Fj +aDEVMBMGA1UEAxMMQ29ja3JvYWNoIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A +MIIBCgKCAQEA0BjgJIMEdvFLKUoi4pbrqRdB/AZgaZXu88fqqEp/1swYyXLc3MSA +JUN3+SJDgYwcNr1iGqF+X456Y+1ya96M8VMLItBbkQYDBjh20skIrAgs04WfRb9C +fRjVJGdKyyA2D3i9rnll8SH0srq6dUxsRVysghEcHA1BWp4nTTXtZ44fiJArABip +pqw2aHHV0oqPIEHlVJnFJfRyWfD7Y83mf8lJ1YLa5sWQfbfKQoTiiOobATrVJttM +6A1/C94xl7inwP/IARyPwgVkfZj63PMLi8LBdjFwmWFP1IwlelVkmyjMWU7ylTWx +SqeyTVPC8CWQBInAARpItMY1dAjDyFiQRQIDAQABoyYwJDAOBgNVHQ8BAf8EBAMC +AuQwEgYDVR0TAQH/BAgwBgEB/wIBATANBgkqhkiG9w0BAQsFAAOCAQEAIiu3gYWL +tH76mFGmXIkPoSxkaYf2AsLqQggsPvz6rXqYd8r+XB3ZXlUr3lLs505JtOYG7Obk +7ZqhlTRRcKeTQZWPOvcPC/oB0cQHUuJEiB8oZaPRdH6yA9zpdG6U9SkPhim8+6Pz +ha8YC+px4weQgnS/bjbBdlSTRcqllm2KoZXy55mzqKQ9/SAPtcZ6cFcE8prPVmLh +XInRgQFqCWngKupPN01aKr2Wv+RUEkiCkE6d0QPBpc7j6VejtfXGOfyOSCSItP0p +QsMe6/XjaDNIcRic1vhzavThNdw2KgIvcEFaTpQwSviKpogFGNDYFBMfMVZLec/k +E0YN7oZEJbj48g== +-----END CERTIFICATE----- diff --git a/pkg/security/securitytest/test_certs/ca-server-tenant.key b/pkg/security/securitytest/test_certs/ca-server-tenant.key new file mode 100644 index 000000000000..4f6a0f030e5b --- /dev/null +++ b/pkg/security/securitytest/test_certs/ca-server-tenant.key @@ -0,0 +1,27 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIEoQIBAAKCAQEA0BjgJIMEdvFLKUoi4pbrqRdB/AZgaZXu88fqqEp/1swYyXLc +3MSAJUN3+SJDgYwcNr1iGqF+X456Y+1ya96M8VMLItBbkQYDBjh20skIrAgs04Wf +Rb9CfRjVJGdKyyA2D3i9rnll8SH0srq6dUxsRVysghEcHA1BWp4nTTXtZ44fiJAr +ABippqw2aHHV0oqPIEHlVJnFJfRyWfD7Y83mf8lJ1YLa5sWQfbfKQoTiiOobATrV +JttM6A1/C94xl7inwP/IARyPwgVkfZj63PMLi8LBdjFwmWFP1IwlelVkmyjMWU7y +lTWxSqeyTVPC8CWQBInAARpItMY1dAjDyFiQRQIDAQABAoIBABGtO0T+uB9eadMN +EB+NUGFhr2I4LHJroQumPMGk6m0Vkzlxf19ldbk0nPlVtsRHYZIozi+S7kgxsyXP +4rtVAUXyluyTJGQSTal2nGlVWF48p4okPJ5RG9XCiUB5YboVd2IjEIHEoCs2hjG0 +eOhD4KKXt7OovmmHmriW3KHLZeo42i+M9U7Q8/wU743cP9y2W/J4v0F4NYwjCEgc +RU7G5TNcnGupW+XqL/EG624I2wVKWQozqpDAc3rcMPVsQ//RjcjWHGFtNgf6yB0s ++VMWdCp1T2URS8HFK+unf59EX0E04R/+fInkU2YvBVpKe6qq6IH0rveMEF2PE8a9 +mcVl+pUCgYEA6fkpknwKzZUhPvzCO668xXTZb2WG8/WUR/+ybt9YSqfaxMSYVZOj +j3nLsTvNPvtfjRiYAzUe2gilrzw/RBOrz8ZgvbzWRfP9xzhDLm7ZNb4NdxRNK5Tk +ch/opjRwJQ1tV6fsGeB3RucaOev+L2Dr4alh9aXPZajov6OVEWJbe6cCgYEA47AW +9K5Bsbbo1tOTYUIBiW+YY85DvqQYCpHz/M+uleZJrC/f05Q+ebeASYr1NerUEdCw +8sIvxOVmEplwmekldstOpdsrx5yaq8IW0lv+L7VzuOniZGwkUAhzVn6wBPEZqhZv +AhNLtwXcfockSDqKPT0SgLk9L/N494wN9DQPYjMCgYAaqj/XpvVgOqfAUvQb8y0m +X8vMC0kXEpzkm7qNMj0QvRKMrE8kKaBRYLMbLtKUY/eez/e7Hdm3RZcEYpxfONKy +6kvqM9RDwqvggYP+jbmJi3BjatfkqKJkc0iDcKR7RI16mPOqe098sCfoBAJDCgu3 ++yLj6RK65kYoWQ9LHOeKLwJ/TWCKbJzLtplyh49fhq3n180U/NYcL62UfgMb586s +hkS8xMeASWcX1EWIU3Xl32zupR9HAzj7Au7ywV9j5OpW0QhGshbJygxug/Bx0Qty +VsRTj4PsbDRUIt68U6i6KPPGxQbastnb4Vccl+NVcTZzxFv87cIGCUW01mvCUjte +/wKBgQCUM3h2C37D1Mkj3m+ulYECCe0G9cxZg2oYECSYmQCI3ITYRbP6Cn6nT0jX +eQP+35YuVN4lhaFywwO/bD9T/UxbIGborbWUScaGk9iT+D8gTLjWuBKUm16+MHkY +qfwq6YHCBWljRclKovFByM3030Z4XfqESbdpLLuN0NuJnkqQVQ== +-----END RSA PRIVATE KEY----- diff --git a/pkg/security/securitytest/test_certs/ca.crt b/pkg/security/securitytest/test_certs/ca.crt index b35cc0a05bca..b1ccec7e8eef 100644 --- a/pkg/security/securitytest/test_certs/ca.crt +++ b/pkg/security/securitytest/test_certs/ca.crt @@ -1,19 +1,19 @@ -----BEGIN CERTIFICATE----- -MIIDBjCCAe6gAwIBAgIQayZPO6wcBIZAGHXv6G1aMTANBgkqhkiG9w0BAQsFADAr -MRIwEAYDVQQKEwlDb2Nrcm9hY2gxFTATBgNVBAMTDENvY2tyb2FjaCBDQTAeFw0y -MDA2MDkxNjA2MTBaFw0zMDA2MTgxNjA2MTBaMCsxEjAQBgNVBAoTCUNvY2tyb2Fj -aDEVMBMGA1UEAxMMQ29ja3JvYWNoIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A -MIIBCgKCAQEAxI7o8vkHBgfcotU+BXfHAeyFAYABv3TPy9fn4f/0NAPDRD6becdT -pV/Z44qE5QR/QotoTMV7KNiHcu1tNQIv+NuCuJj6HRS9GRaXrOOo4zZqof6dfGHs -WxuaUzfaJ2KC/WXTU0zFEswS7//EZALNF06sHFEgPC+Gjp2BI1/m/bH/Sw4oB0SR -MDx9Z1ukGRNxQN2Ax+T/JES43LLE8KRZoUjS+8NpE/kCE2DYFfcS1YeQLNHg6+YB -R+/H3Xn5RQ4sMMZRVJKLHapXzPuTbpQJMdINyuKkAIAUNPseT1y0Xt0blvF5/xqj -r+17J0ZgGD8n3q7xa8uEdE4TXDqwGTlL9wIDAQABoyYwJDAOBgNVHQ8BAf8EBAMC -AuQwEgYDVR0TAQH/BAgwBgEB/wIBATANBgkqhkiG9w0BAQsFAAOCAQEAiZ0nh+PK -LtGpM9aWWi6zhcNpD+qCVnM7q1BlHfHWBQyk3g38XpobPdM1jTwmKBEFGdgAgqiK -81XEvax9kCbyo5FQjpv0nbiIOLBFYIcHk0sarfWbYV36Jxm9Px8PsRRDLDX2uXKL -xxrSsuVjrl9uqDgaPaAlkAiUg3q3n2P6dSQkBvpUty14jZrG6QcKB6kGzvMCb57D -eh9gQ0OXPCyw2rvW2+326fk+2Wt+ZnW6+7thOWFlqz7cN2kRkrEWTsMuMZnnoqlF -Tvlhm87slQN1QvF5zDhn0Tj/CbYaH3c5E10x1EmIvLUlYcKMOgJsuydL2vzFxG1T -FnpMv9ufGzmfyw== +MIIDBzCCAe+gAwIBAgIRAKqn804xfCG3Cq5XwYoRSiYwDQYJKoZIhvcNAQELBQAw +KzESMBAGA1UEChMJQ29ja3JvYWNoMRUwEwYDVQQDEwxDb2Nrcm9hY2ggQ0EwHhcN +MjAwNzE1MTE0NjI2WhcNMzAwNzI0MTE0NjI2WjArMRIwEAYDVQQKEwlDb2Nrcm9h +Y2gxFTATBgNVBAMTDENvY2tyb2FjaCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP +ADCCAQoCggEBALTBG5dyvKSld3VYf2uXe1FYlZdV6YaME31jycw1Z9tQ0DGJ9CRM +gIoOYW/Jq94/wICm/CqlB830IgLnPkaVSg+853UlQ1P3eABGpWhUvI4OnuKV2OMz +0Vp56Od9FVAKAFQ786UIkBOGyAXv1NdEjhE8x0izgk0aWyLZrTvFkpIbIl61ogDD +2SR6vd0u9Kjsyfv5eu7caS0G8JXHJYN78RvZZK4+etR+qoOgdPErZj7I7stLDb9T +crjc4Vj5D9bGp0fiJ3OsMB3v1mOLvAQO2VqIMKIMwHzERL23Qc2tGfUJam2qp7sU +ZJnIK0bfLDXhPSdawgYPwKpQMxpB1o5YXIMCAwEAAaMmMCQwDgYDVR0PAQH/BAQD +AgLkMBIGA1UdEwEB/wQIMAYBAf8CAQEwDQYJKoZIhvcNAQELBQADggEBAChnKRf2 +a5VeoWjUxScPClAHduMa99r9XvCu5i9RRTEfE+IGO8UuswSajb3uTpuN4tSs209B +ZrWzskaI1cFZWhNMslszQuotUFcgzpqFrCF5EMioNpSVattAVWIYsiY8KPUMuUYO +9RkOOdqeM3PrmYsVR3kicdLTOMVb/mWMxEWrMwbC966PtdXbBFDNsFOHXwMtB46i +J2Yh7WGHjCOwOqmNOlZ/RQkSzqYo61HJ1Dlc0uO7s6n38Ud+P3d5K9Onqh0SmWin +yipZLHZ9IUjCemirVytoC9o6PcxGufh66nEE3qG/L5kQvTfyYsPW+g/1bYK7Dm1h +oO1otHyDZwmW+yE= -----END CERTIFICATE----- diff --git a/pkg/security/securitytest/test_certs/ca.key b/pkg/security/securitytest/test_certs/ca.key index de6e21f95c5d..894f5fc52199 100644 --- a/pkg/security/securitytest/test_certs/ca.key +++ b/pkg/security/securitytest/test_certs/ca.key @@ -1,27 +1,27 @@ -----BEGIN RSA PRIVATE KEY----- -MIIEogIBAAKCAQEAxI7o8vkHBgfcotU+BXfHAeyFAYABv3TPy9fn4f/0NAPDRD6b -ecdTpV/Z44qE5QR/QotoTMV7KNiHcu1tNQIv+NuCuJj6HRS9GRaXrOOo4zZqof6d -fGHsWxuaUzfaJ2KC/WXTU0zFEswS7//EZALNF06sHFEgPC+Gjp2BI1/m/bH/Sw4o -B0SRMDx9Z1ukGRNxQN2Ax+T/JES43LLE8KRZoUjS+8NpE/kCE2DYFfcS1YeQLNHg -6+YBR+/H3Xn5RQ4sMMZRVJKLHapXzPuTbpQJMdINyuKkAIAUNPseT1y0Xt0blvF5 -/xqjr+17J0ZgGD8n3q7xa8uEdE4TXDqwGTlL9wIDAQABAoIBACzuUhfAjzd0sp3S -SwQq9iXdcCYAoeWnCR0atJn3zVXaildeTGIRC3DhMUiPUIOdfI20mln6RoX2wTen -SHB2mIq1evNBnOLq67MBdBiETgXqWYPAVTWqmMHW1HczbD3WigTsstr20JHUbnvI -JpeKAGHUjQlIDitT3dlZ7bwtXvscvzANjap/aTLLB36caNHT09+Hk69wI3gqFfGQ -eUtNsFUkl/U8mkL8weqhJaMSwmLiK3qTNeTsbbXia1nnHuCqbpWc/5HoUPDDVbiU -xk3/fVlKqPgmN7Px6ndDPHB60J9nXDP1yBQR8ylsNi7n1OU5MxK98SPSPZc+HgNt -EKFk22ECgYEA9pjLpfb+LAT8IFxB4HAX6lJAojy74IKAfxDuQXh2N3cVLylFSajA -S0nRL9i1/SbW7KyCvtY4cYlvzW6Re9G5otNBiPp5DOydi4fVSkz73yngQp4V9C4q -77R+47juo6ZBqf4dfyhhvkY+in4kgtCgV/x6z5JMHZBjWVNdqEuHhVECgYEAzA2n -CxxoB7oA114eB22kDp/PlXCF4Gh+fIyEQ5AfCJqGQpwXSzkip5bXiwx12HYIYYcQ -dlhIXurgRFFNmvc2Z9ZXFdlbshZjNItfwW/UBMPhsScbH+sMfj8lCERz9YNGXiUf -k+97lE4qMA5qGZ4eqWbXxZxmg6ikfUbBhHATiscCgYBZ7cb2s2hl7Tt1Ia/0hWxz -S6O+hp+NdIofzLDWt3OFLqxPEqHuBth5nGXpKQLVW0Ct9wuHROA4p4JaTKRJn2Yv -dxNDPPTAPdoGdHbYLdL8w2zBXp1q+xs1Z4GO0nZUv+DaeY2QPc3Hch6EqxPtkN+o -tq6i3Btd/LX+cWSKZ2D4wQKBgFgMYBMMS9thqHFGHGEKL2tcDB+osSv3CvVFUOEy -dCGrQ9nELsz3t3tnPFS0qLkhnVYwCKt4RqomYWU5S+pdV+2QcH1uEAIVZPNMXKJE -VdFEkMN3Y13vd7GWH62klADRh3CiRjD4enOxEsUvwxqQvxxL0zli1l1jTK799Azo -q5YLAoGALzdwe+kOCnBAbaLLLVgi+Ff5pjGFD23wJPvOHmbZyBvebh5DHVFQMIYP -XArcAjhqCKTsmSujx++uyMOqjDsxL5ImgpwGorG8j18fKtCih8hL0m8od7jRqaP2 -HlZu2Ag3YT0wcaQFNKxyAtZjHfDaardf9vXMgVP49B1E4q0w588= +MIIEpAIBAAKCAQEAtMEbl3K8pKV3dVh/a5d7UViVl1XphowTfWPJzDVn21DQMYn0 +JEyAig5hb8mr3j/AgKb8KqUHzfQiAuc+RpVKD7zndSVDU/d4AEalaFS8jg6e4pXY +4zPRWnno530VUAoAVDvzpQiQE4bIBe/U10SOETzHSLOCTRpbItmtO8WSkhsiXrWi +AMPZJHq93S70qOzJ+/l67txpLQbwlcclg3vxG9lkrj561H6qg6B08StmPsjuy0sN +v1NyuNzhWPkP1sanR+Inc6wwHe/WY4u8BA7ZWogwogzAfMREvbdBza0Z9Qlqbaqn +uxRkmcgrRt8sNeE9J1rCBg/AqlAzGkHWjlhcgwIDAQABAoIBAQCcCs2IDBxAwzwC +iNjPiGGEU0Yo9Jj6d3jn2bq/WSeElRp2edLTd1vMUyfYurBt2HmWVxIAuqGnMege +u4TuqDjcp0blwbqDBXOKQXLQQ77XoFWX5KbtVbGZOv9OwJQimc+46FypD2BaCxQo +0+fZwywmQ2MDJz0I1QTybBr6K9Eh4WlC3PpQFZF2CeV4mDrX13j3/UFFPGJ3OSiq +RYoRUiaegw2rFv3VCewYDM5tdsa4kqlKDB1v+qs0Ag6Ek0FX2CTFIIw4oUW8ndHq +XUSvZsoct/oomAN05omlwCYOuAlSWfj0QcIOgoujHwItA2UROo+SZMJYGvhtIDL8 +F6BZwQp5AoGBAN65cDb0ZL+6wO4QFP8lEOBi2pPQ6WDLUrSc4Z01fLEbih5Peut0 +qul7LjbzmcxM8OP77PmQYzgkFi0eL8TOmVXyIsOsWy7ZifYpsLphexvxeZzpRzej +YLe065rt0LObIj/bciZ0SbmlY2Rz8DZVECf9TcY8KqEfzw0jBLy+CmG1AoGBAM/C +b959TDExUD270WgD1lWSTiryNtDRnP7QIbch7dIaroVw2LkR/heQxk1GKfETy9yw +o0B8PV3uL2kCyve3WkvJS9HxeMkPfvRY07P/+wVTSs6rGfVLrS0Uer/J5H/Abwyk +n9mj6NMw1UaM0/lh0O4C5WSGZHwtTeCRR0eW5YhXAoGBANYpB17ARzQY9jSzYA0q +bfzk8PobcpzxRRiIlWSeLsT6DygwEqjfKQyStpB+Uk+hWCxQbMBX9x/fizddBF/A +rK54wrbWP2NgKAl8cwP0gfUPj3my0hkMzw42OCpkLD7Xl+pBL5UMUmvhPR41YTBN +QNjC94r7BZ6iwGwIVSDLt53VAoGAXFOH61O7PFEx231Pve2Wnkh6PFOPUJUWM5bC +pOOLEEeTLvHLHdOFG2vW9BguI1gszFIi+lE75DYpE32OPS9aDTvTWeT5TEB6ppOi +4Obs4pz1LYqT6pJKzzG+quRJiww1TWULNGjG2rNk1AlZWgXCF0NqNZYTqatoZFer +WYERV9kCgYBnfYvQ0aD/c95lZpu0el6vkvDQzA4UYoK/6n1uEAb8pvLiitHrR2Wc +Bib8k/A/PHmyzG4PYIQ2OfmriYeZeeZMa2X9Y/VxNFwmqy4psPmo6iItZtMZ16VP +I+DG9MfZ8xg41oEOK4s50WmVYEep6/03b2b8szjeDAxtQ1lXiBxAww== -----END RSA PRIVATE KEY----- diff --git a/pkg/security/securitytest/test_certs/client-tenant.10.crt b/pkg/security/securitytest/test_certs/client-tenant.10.crt new file mode 100644 index 000000000000..d422c3f65298 --- /dev/null +++ b/pkg/security/securitytest/test_certs/client-tenant.10.crt @@ -0,0 +1,19 @@ +-----BEGIN CERTIFICATE----- +MIIC/TCCAeWgAwIBAgIQNpOVxM/f/h4pveU5jxIigTANBgkqhkiG9w0BAQsFADAr +MRIwEAYDVQQKEwlDb2Nrcm9hY2gxFTATBgNVBAMTDENvY2tyb2FjaCBDQTAeFw0y +MDA3MTUxMTQ2MjdaFw0yNTA3MjAxMTQ2MjdaMCExEjAQBgNVBAoTCUNvY2tyb2Fj +aDELMAkGA1UEAxMCMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP +tJxmxWOvvzma22MTmchFVLkLq0N5i/RwM7NeWQ5t/z6NK01UDIT188lP2ngMWU3w +WfvKFMiLn/AdFV9ksE0X39ISJcZDZmCgNOEnDdW327ZzWX4ZZ8Udz6DwcLjrzuGf +6XEuN8BhLkvCBjkaGaag4Drw6yFXxe9zMupbabPx0RwfnSBEDT20lbNQ+KsLUufJ +1WkUlZqp/LqefqgHqdVpXvAmc09GijoywOT2u9yJq7y1SN5ORRrogcZ3GF1/WzXq +eAJj27Ll3xGNMKrYo1m1qLlVrO9ZiXoSGOzecp3PRPuKSaGpBFmLiYPOGGMnXGLe +npTN6gy/tCP4CQ0vheuPAgMBAAGjJzAlMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUE +DDAKBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAV1vsr3k41cv84ycOQtXu +FewVW/SEmNNpuC8iqm92y8L+QLjoC0apGmz+iY3Deo1Q33H1WbgwEGDVZvepdNWD +MIkxYu42IXfbexzdayHAcbmKFc++hT17fREepR7CHcwUxTKCh2Q/UQRm+pdhjG8S +/Nh1raUDVBt6CP/Kj2H2XJCFEyKgBs0SA5KTZrgnpuEE206I7rAmjw2AK6xJEl4D +ZBIiTBKTjpy+zaqgNSVOU9lk0t4FU5nMcGLdOfKIdKvcxuBW22JuxWQxQn9kUumx +q3FKTW3klTA/HxXIahEfA3xJJeSBtLgFs5NxAwsDNeJxqY2Kh4KqwZ2A5QKKO77H +Sw== +-----END CERTIFICATE----- diff --git a/pkg/security/securitytest/test_certs/client-tenant.10.key b/pkg/security/securitytest/test_certs/client-tenant.10.key new file mode 100644 index 000000000000..f4ce99a9ff93 --- /dev/null +++ b/pkg/security/securitytest/test_certs/client-tenant.10.key @@ -0,0 +1,27 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIEpAIBAAKCAQEAz7ScZsVjr785mttjE5nIRVS5C6tDeYv0cDOzXlkObf8+jStN +VAyE9fPJT9p4DFlN8Fn7yhTIi5/wHRVfZLBNF9/SEiXGQ2ZgoDThJw3Vt9u2c1l+ +GWfFHc+g8HC4687hn+lxLjfAYS5LwgY5GhmmoOA68OshV8XvczLqW2mz8dEcH50g +RA09tJWzUPirC1LnydVpFJWaqfy6nn6oB6nVaV7wJnNPRoo6MsDk9rvciau8tUje +TkUa6IHGdxhdf1s16ngCY9uy5d8RjTCq2KNZtai5VazvWYl6Ehjs3nKdz0T7ikmh +qQRZi4mDzhhjJ1xi3p6UzeoMv7Qj+AkNL4XrjwIDAQABAoIBAEVUALxg+GQqDN0+ +izR4qRtTKyzU7oG8kEt/RkigqytV/hf6syXxw9OgmrpXrqhYiqZGMsAB7eqE6Q2c +G6otGp50a9b42tOWcXwoClsRyBtFcAHShj+OnoHT0uFOjrrO5AqPTeLiYwlM/aZ2 +k0q98xtRnPrbUNbOT52BCi6W+qQk0In0P7x/rIIEGaQw2QQiHhNL9uSEDUVeFgTk +YrYhAjprfkPwyDM2Dc0B7bGFHcXDXAydUce4osS68UQSt46BW6qTON8UxMiIWIYe +CQpbdg15gAhBvJcUHX5NouyMDby55yO5FqHFv3wCDCt3kcGmH8lI65RwL1biFkOt +05LJhsECgYEA0kjh4sEYDzmGEi6GH+R8KhSGdKUnfkLQFYDdv/faX9bRdtaXtsda +eDw3OVTnQpg8kVeeTyoAIL9r0ozzrg+BgTKuO0ehyDSjcdOStvtSsA3m/BVkPjJ9 +vo4VdjPVfHr19MR5S7uxy7wicntZEi5+gp3IXr/t8V+9T4HvfJgY4eECgYEA/Nwv ++trjYaYzzpXF+4XUUOzig5E6hvndk3HWaqXeIWaHnUsMIDQHIA2kczgY7k93FS11 +NoD2gPkefvTCC9cPFKWjbBr0cEDlSpHVGzd00dr5RmxTEwCU/RT2rm2tYdOL3wXB +bAwMu1BQp5T3E+pwQA9NUA3e2jZp/vsFFPSRW28CgYEAtCLlBgddoeUoGbkrAnUL +fEy65X949msrr9AFpeYfdowiQYgQzO23bVpAAGff96dL80G4hp43H9Z6+hHuyUPV +L6UHphZ123hkLyUMAJ4ItnIiVf3JMpK0LyGt9uTuU8VNnxETyzGNXDbc128c3Ttg ++mlJdQk7PtNB67MmQXhVkGECgYAH5N/ilv7OR6AKbQaXSaBNPnf734bSO+688ard +/Xun00mckYE5aCZoy8Q8jJ3KotR25spn/zKy6BQZpo6ATCB+ZoVplJXZA02lPFRI +2zxcaNeraSpWx4ffNs5Ut7vX+AC/37AgLWggWOuLr8ze5EzI0zF4tFYmvdglS7Tm +6JO5JQKBgQCTZwpqfioTGFhP8flBiQMEbY8MLy86e19aawy4CjTIEZVyNBS+3Qd7 +vdSfxk4+TzcOGclAXC+WQe16qxI9nHTHWI7mnIz3Zc2IZjGKy2TKqCwJWh/xxfom +vajdRKxIe4f5oNkJLPhdMKM+9yEWLUyO7nNn8Kibb5Ysee2vhRqYuA== +-----END RSA PRIVATE KEY----- diff --git a/pkg/security/securitytest/test_certs/client-tenant.11.crt b/pkg/security/securitytest/test_certs/client-tenant.11.crt new file mode 100644 index 000000000000..bc208179cde4 --- /dev/null +++ b/pkg/security/securitytest/test_certs/client-tenant.11.crt @@ -0,0 +1,19 @@ +-----BEGIN CERTIFICATE----- +MIIC/TCCAeWgAwIBAgIQbIpGA88K9adO4tLvM3d0TjANBgkqhkiG9w0BAQsFADAr +MRIwEAYDVQQKEwlDb2Nrcm9hY2gxFTATBgNVBAMTDENvY2tyb2FjaCBDQTAeFw0y +MDA3MTUxMTQ2MjhaFw0yNTA3MjAxMTQ2MjhaMCExEjAQBgNVBAoTCUNvY2tyb2Fj +aDELMAkGA1UEAxMCMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn +GTNz80uqkCSA6sK6hevOvOcJtvmrnLXwEtOPnpf9r81Dj6hpmVGQcVfR9fZ8PsyN +wrn7CoHheP89Be33vwPxPkzGA+EdB8JK3cVeb//3CxQ6HvgEYOh+62mcu92Tjitx +lNbs77VooLyxd/IA68vQRAcopbcaxhEgyWl9Bx6xhNoOkHcMCvEz1gQLOOVesyM4 +8U+jFH1GGeXU0R4dtWg87ObDJJC7CS44kZHrOIo0wtoA3jY6bAh3ihfj7d465Yhh +lcGIJJTeAURE03+tn9YHvMHf8nkIkbEW5Qv18CU3J2Su8+be9AuqjGzN31wIpJWF +LnLgL8Tht7Q2tqtwZRRPAgMBAAGjJzAlMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUE +DDAKBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAZz89eR+blqVQSnaBQ1cg +dNBLN24GOkBo3uE4guXZE8ARx+nXNMoS0157Y5IbH2J5aMA2nlB3siGU/UgSHLyO +3/zg/Zi20k+GhPWYdM+KrO8bbx74pVpAzqHBLAzAC7+Lt0S1HQiZAyAxEJBGO3eS +ZvBHtujGxceGDkYZfGzNdwGPHIc5rBDDa+mHz9HH/0B+tU2dmlzg+u9tHXJKo+ep +rYWF+edXtKC8VaDtj0z4bfjMVVnU7XqZ9wBffQYYQobPSaT/mpYHRxwmPx9S6Itx +LACtZdlAQIk7973bOfFLCTKItRIWTxwWW0GcdAB8uQzRFrABIetLazpPUsNn19SO +WA== +-----END CERTIFICATE----- diff --git a/pkg/security/securitytest/test_certs/client-tenant.11.key b/pkg/security/securitytest/test_certs/client-tenant.11.key new file mode 100644 index 000000000000..8897b3141b78 --- /dev/null +++ b/pkg/security/securitytest/test_certs/client-tenant.11.key @@ -0,0 +1,27 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIEowIBAAKCAQEA5xkzc/NLqpAkgOrCuoXrzrznCbb5q5y18BLTj56X/a/NQ4+o +aZlRkHFX0fX2fD7MjcK5+wqB4Xj/PQXt978D8T5MxgPhHQfCSt3FXm//9wsUOh74 +BGDofutpnLvdk44rcZTW7O+1aKC8sXfyAOvL0EQHKKW3GsYRIMlpfQcesYTaDpB3 +DArxM9YECzjlXrMjOPFPoxR9Rhnl1NEeHbVoPOzmwySQuwkuOJGR6ziKNMLaAN42 +OmwId4oX4+3eOuWIYZXBiCSU3gFERNN/rZ/WB7zB3/J5CJGxFuUL9fAlNydkrvPm +3vQLqoxszd9cCKSVhS5y4C/E4be0NrarcGUUTwIDAQABAoIBAC+BXrJXMRa+ysI1 +gBIXtYGqE1RL6Mb+T+gp9pNvZo8ftHJO9a+/dKTcp9DhXunrfuElRlX0sv5GgTFq +JqDnA0h0JhQOeBgfoDEDpa7kFxoRjPblptY/lYuBmRQ/Ci1q7ENM9WF/ZSs8340b +uwO1dRA6673PUvSOArdar/Sjogubf7HSvSNwCQPvasW7C5blPX5mvP7b/8V5HaIM +u7Sciqy/JSBu89pW28uwBSHB1l/6h2T7QlDjusZrsFj0cUedx40SogvXrYZ8QvOX +PR+B2qg0u0DbYPzMQfXbEpxyTfIwxjFzIrjXD8tI73/GgH0W9RGnqFyQF4gQSFOF +JWzauAECgYEA+ICUMOFa9qYGwYAyABEFf5n08IY+b3LhhoM2DN1j+3HuQnBbaVS3 +yYxox+Ba9yd9wRgpNo2wnteez1Gpga0BhkVbksNCkiipmrPVbtRUKvvJdmIFb/cg +rxQsoig+U+Atfb/Piik+Fyfs09U0UlGxh01V6ino90gx/gp4Z9mfw+8CgYEA7hIy +G8nAxKnsxrOoUJeLMw7KmMYDr4uaNqtnbG/lM3URwrw1nTCajMHTVsc8lXMa//y5 +HdkBuk5QZkdh9njuDqxzqaEgKQ1T1aeaBhRMYxpAdG5LQI08vKZZZH3xd93+Tagf +uOjoQuhPbj2SGhB/yLvcS9L/4mxgTrpG6UBr1aECgYEAzbBv+P2vc1T9ZpEb0d5E +9NeUXLphV5J5hgN5a7Ccn3YwRqIFp+vNrHAiEr9rzAPOHVRIWLVzKidDdksbyRBQ +oLksERC6O4yYxkpwMapieKmsmeaMpZ6iWQiT4Sz6WibGwL1RpgR5NmV/q99fzXt9 +PIcQxCAoivYhGyvDegIyMdUCgYBkr3Nbxz7srcUC4FaOBxmK9XV/mTdT1eHZvzIV +bVltItTpG/o8yaKDZzH/YHHh7vV7UCHmWrHdXmOobgYjXE+qCws7sXZNhmJvWNvO +OGV6AE9ELqVK3rDSRDRISO+Ht25m33TTGkWojmGRiR6yQUoZ1kG8G7e2xgkRIrz8 +xw8UIQKBgG9WoFosZnaNRHdvQ0d6vWvapPH4DUrV4zqrT1njV2Rs9DWdk83jfhtF +sRkCFCRQhCrdOUxUHwq73yIzlX3o64EA2ZcAYuR0DSzNyFnZdBn/j6YPmxXSdgus +SAvQD/KPN65TL44TqN1D3ZU2QtRoxiUbWKq9hQYGRAsEKpf7c6Es +-----END RSA PRIVATE KEY----- diff --git a/pkg/security/securitytest/test_certs/client-tenant.20.crt b/pkg/security/securitytest/test_certs/client-tenant.20.crt new file mode 100644 index 000000000000..66cd752a0cbe --- /dev/null +++ b/pkg/security/securitytest/test_certs/client-tenant.20.crt @@ -0,0 +1,19 @@ +-----BEGIN CERTIFICATE----- +MIIC/jCCAeagAwIBAgIRAOeygCBpeJeIhXVJrLz7MVwwDQYJKoZIhvcNAQELBQAw +KzESMBAGA1UEChMJQ29ja3JvYWNoMRUwEwYDVQQDEwxDb2Nrcm9hY2ggQ0EwHhcN +MjAwNzE1MTE0NjI4WhcNMjUwNzIwMTE0NjI4WjAhMRIwEAYDVQQKEwlDb2Nrcm9h +Y2gxCzAJBgNVBAMTAjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA +y+dqBGVwvqXp6i/iRi9acPB7u7tfv1BQwtRPsjcrSobPhYbxWpBjdIyslcFLYVf2 +d7ldVRy8wW3BFdmT66eFYKYJCaRzJ9lVGNgIQ46qeCOwurOw8ZnuncUZ7NlQTuK3 +0lL8Nt4rzZXeuIiOcDvdIfMmetBdPHIIeIb25z38FHKHXoLHMa7gghkcb5d9rJhL +AsSp15TiTY4cNFKO8I6lwP1IHzfsEJzkqV6W7oUtTks57LqdvKbJxv6WHDplZ1qs +L7Hcc5o9b+iiJ4ZnLsvHSkqInmh8mn3tBfR80kq2x/Arh8BFzYrXKbkHQaKqJzNX +724nVCzMFEHwMHnIPS0CNQIDAQABoycwJTAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0l +BAwwCgYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAF3k0R7kPa5deDidiQvl +gJ8ajfJGJZSzMc3Lbx9DI1ZFsqHJ9MAzMhI1l6VKwdp89M72BpeJGbtqi3ViSdzK +9vqKPKw847rhtko4ATZmEePE3RFgUmTGaLwpDoBv1+Ov1aRwUe++lEDXd5rpXpSx +TIg3a9Mqtbv6oRRrt9j5JYKF0XCi8pst2+BFzRmiU6inQnuKicVHSaITD7QXt1eO +V3gp+XiJw1kZYgO1EIU3oT9n52uZ/PHLz6LcieqlvWBACbSQ1qakRcXsBZgzcngD +NmJonfDiLRku4zFYRoArvq4DynnGN4q2u/STPWL/ke++IQQrwav6UqK8Sgw5cKpL +u34= +-----END CERTIFICATE----- diff --git a/pkg/security/securitytest/test_certs/client-tenant.20.key b/pkg/security/securitytest/test_certs/client-tenant.20.key new file mode 100644 index 000000000000..7fc8e2d015ad --- /dev/null +++ b/pkg/security/securitytest/test_certs/client-tenant.20.key @@ -0,0 +1,27 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIEpQIBAAKCAQEAy+dqBGVwvqXp6i/iRi9acPB7u7tfv1BQwtRPsjcrSobPhYbx +WpBjdIyslcFLYVf2d7ldVRy8wW3BFdmT66eFYKYJCaRzJ9lVGNgIQ46qeCOwurOw +8ZnuncUZ7NlQTuK30lL8Nt4rzZXeuIiOcDvdIfMmetBdPHIIeIb25z38FHKHXoLH +Ma7gghkcb5d9rJhLAsSp15TiTY4cNFKO8I6lwP1IHzfsEJzkqV6W7oUtTks57Lqd +vKbJxv6WHDplZ1qsL7Hcc5o9b+iiJ4ZnLsvHSkqInmh8mn3tBfR80kq2x/Arh8BF +zYrXKbkHQaKqJzNX724nVCzMFEHwMHnIPS0CNQIDAQABAoIBAQC4HCjO9WU6z4aJ +bVkLdGBeT9X5abOHhBaYBKo9SbEuJtGkSHcPBga3Svnecl0E9S7XZakPW9ZXdSl9 ++CqnAmjdHq5UZYeQ+JzsxMuZbG0h81/1BKEFVa9uB3VkNchcojvGjiWrySmWBPfI +eYzbbEI8EFezVwaIuJJLedngbEh7kF1hJ+yqDQ/whstJe/FXe2NiGgIP5Usr9cdN +zwgR4nnd0ZbbYZpsO9xs+arod4yAg81OPgd975Oboe4YFtNVNTVGG3eiRCBfOCir +NGx2TtL5kQLUsmahvPA5BkGEH4OU2jCrZ8BRxgOEX0JRGejUlEqO+LH2IdKuj8he +BDiAhvghAoGBAOCPgJ82vhZlGEtbeFaUEDtTag3HzgrlxkkZPhEdAGGsCZvmbIVT +XXcA7BfCHaC+/X0FhBXu9J+E3ZvY9+ROQtCpxypEAa/DRhAbSguR/IyZGRlXROWV +/ccohTwbjOxp78cNaPVWgPDfpiWlDT0bAft4C/YPQs+DVovBVnlbfZgtAoGBAOhz +jn0X0Z6f0G305QBYOxzTYWRum9bVT25XxSnUh/SFzCrwdHj1FqfluPLaqgmuMgVi +IWgzfFUZattAt2LsR9P/oli7HYYIapcwpO5YAVDz7anu4Dnacqr0cXywoN38FZwp +WowRhQ88FX3Gh3GzUNrgFpsyHQ2jxnKCCmis2Q8pAoGBAI4ItiX+DgVENDWVyWuZ +gxrDC9Vjh2NFKkGaAbP5UAB3PCyrdgBuVjOrFamBUhQWOWcWUhE9buRmuXSVq1Vw +Wrp4aEzHbvmo3Wvalt7ym3aib0mj9SPx1u5dJsh59IykBNE2HijvaebwzroIx3La +3kocCBS+Wle+jsMeqn9f6vSRAoGBAJF0JbhPHEMm+7SiZl2l2C98cdf3gpqW1eJV +F7HKJNy0kIJZ/nfl3Sxoiiek/nuaPgCyW/cpKGbTxdK2l0pWUcftkXf2dk31nEVJ +Eht2hDRUvuXz7OkmsVQaK517pN3jLN6P3fIB0IIs9cHDZeOW8kRTrrGkVRvA3J+w +kbTYW+apAoGADl6lm7bJbfGcCuTvQmcNBHvSW71q4eRWsCH6HQbCe4A48T9GGrSX +fjuwsc8IsCMEQVQmuFcZvEbo7yrvbPzrUhF6yB3yUpoEuu0o4yKwhQB09+Jq/Wnp +IRApom/SX9hmPSQI6X8rIxnGEoKPQOntjvgNtJrC1MvvLxPvraKkbb8= +-----END RSA PRIVATE KEY----- diff --git a/pkg/security/securitytest/test_certs/client.root.crt b/pkg/security/securitytest/test_certs/client.root.crt index 25f1e8bba838..ad01f4ddd326 100644 --- a/pkg/security/securitytest/test_certs/client.root.crt +++ b/pkg/security/securitytest/test_certs/client.root.crt @@ -1,19 +1,19 @@ -----BEGIN CERTIFICATE----- -MIIC/zCCAeegAwIBAgIQUQDX02L23xgqlEmgcbuQsDANBgkqhkiG9w0BAQsFADAr +MIIC/zCCAeegAwIBAgIQa74EJ2wdZjNDDPXsKZFOGTANBgkqhkiG9w0BAQsFADAr MRIwEAYDVQQKEwlDb2Nrcm9hY2gxFTATBgNVBAMTDENvY2tyb2FjaCBDQTAeFw0y -MDA2MDkxNjA2MTFaFw0yNTA2MTQxNjA2MTFaMCMxEjAQBgNVBAoTCUNvY2tyb2Fj +MDA3MTUxMTQ2MjdaFw0yNTA3MjAxMTQ2MjdaMCMxEjAQBgNVBAoTCUNvY2tyb2Fj aDENMAsGA1UEAxMEcm9vdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB -ALxWDYEtQ9c/yhDnh3SeeAwcTnSo/s9Fit7oL+aVTv37zBIbXrMAGlk4G8w73CoD -V+6HjFohz0oA64RaaQX5k7MI2IWcX0sPjWZAC/Wg0Val1FOj16iIJ2w/uj1ibLRE -zDKnSlG0oOPa0x/pMRWIOkTa/GmfWY2x2T7+h7BZXBU39LYvx6RvjNklgLRAJdOh -xKgELXMqXrQHJO84tR0HAd1wp5/ZFvygjSr0khb31zUno/x+VU2sr7UvfWR996+e -t05Cp5CEPdaw7774bhh45Cmx03c90A9jIbFGAdfX+czzQIe2SSyxPb099YI/MpYs -Rl93jyKKekaiigb8689TMjsCAwEAAaMnMCUwDgYDVR0PAQH/BAQDAgWgMBMGA1Ud -JQQMMAoGCCsGAQUFBwMCMA0GCSqGSIb3DQEBCwUAA4IBAQBWmY7P9c7PmO1n047U -9W0BngNtnJ8O8oRAOxUX0uXwaKdLJN9ZMf5k+s/2b2cTcw0jSxXT/sFetyHuSa4H -WEMbW4nMLR2jicSqugC+9y6zYLO5Hy1naQsD5EOuOaxxkwHLvsKg6CCvP9WvsNrv -8oul7gv+d5DQSFfzDuA73XSIUdzchGtZelkCBRdyBtz22xdvp/r4v/WK2G1ARhra -u7klvncZc1ZHjXyLbN/PCA8VXGFTjFTaN9RZXjdEFXMW80NzSbag1OQPsq3rwGCM -ySGQJYjqMs90k/SuVsCCvxFtkR+RuB9UOrSlPWx2I7rqZBZhpvROOj8oWOQHZMl+ -XiuQ +AOLwAOtqv6AM6RqrnYuoI+UQL4Jh5NzcRZkhO7OuuW+Bdu7OKmUDyJWGqfcgoO61 +kwpDqRPTzDKh8O7dAMCp7B2Xm1BmXNwrps1FijMhgaIxdQVBEPT1X6P5/liCjkxh +5OJ1RmMlJzBvLcpppth30uPFc2V8sI66HCw074m9m4GGGh7nrOb725vwlVkY5KzA +jt8FgbetWhgih2xgvNKfVI5FjnogpZ7vU6CdDTb9/jnmgkfTAnipB7jzd8Q8s/fR +Wf5Hm6l3R6lNfUekWDVns/kBWKGwpBwIPJE9tpbEBEyZ/mxIsn+wlD4zEE68nxcn +qz4dtuD9VDIrIfMOOgfS1McCAwEAAaMnMCUwDgYDVR0PAQH/BAQDAgWgMBMGA1Ud +JQQMMAoGCCsGAQUFBwMCMA0GCSqGSIb3DQEBCwUAA4IBAQA64C+sXAmWro8NL6sh +p90sLX/J7+Ls7ax0DeSvKppNEc6DI5Efv7X0ZqbagP/1BBrn9FtwjTD2GwXEq+/5 +44ObPumiWwU5taq4BZIEnvWX18xYXVB8yp6KnNQzPboJRZCd9Fdn41NuNR38oyKz +bHYFx5bRyA1GP71CfDjYmkqYw7Jrc7SilEjJHnXjK7mScyguc393ggQC/wR5e44c +3GEzYEksWGoa/J0VHbDD3vy2Z6iJLoj2miceaPe3u0M9+j32N1zbsQaHaT1wnuWn +2JlDg0f01cHoDPqMjImO51aykuOTpW+VyEyCFKhVOOicyn5DJpszn4mpc7vioRLj +i93l -----END CERTIFICATE----- diff --git a/pkg/security/securitytest/test_certs/client.root.key b/pkg/security/securitytest/test_certs/client.root.key index 9358ffda8a01..8b92e00c1068 100644 --- a/pkg/security/securitytest/test_certs/client.root.key +++ b/pkg/security/securitytest/test_certs/client.root.key @@ -1,27 +1,27 @@ -----BEGIN RSA PRIVATE KEY----- -MIIEpAIBAAKCAQEAvFYNgS1D1z/KEOeHdJ54DBxOdKj+z0WK3ugv5pVO/fvMEhte -swAaWTgbzDvcKgNX7oeMWiHPSgDrhFppBfmTswjYhZxfSw+NZkAL9aDRVqXUU6PX -qIgnbD+6PWJstETMMqdKUbSg49rTH+kxFYg6RNr8aZ9ZjbHZPv6HsFlcFTf0ti/H -pG+M2SWAtEAl06HEqAQtcypetAck7zi1HQcB3XCnn9kW/KCNKvSSFvfXNSej/H5V -TayvtS99ZH33r563TkKnkIQ91rDvvvhuGHjkKbHTdz3QD2MhsUYB19f5zPNAh7ZJ -LLE9vT31gj8ylixGX3ePIop6RqKKBvzrz1MyOwIDAQABAoIBAQCh+DfBAla3xWpY -Q2YhCzAe6jEm7zfEtgAKWBDp8zpt/6Cvac51jv8Z/8EYUdq0Xw++WeCAm1cUQ9pI -hyCPPOajMFZWAfeKLCPk7evbIKUoKZGDJQMRM5cD54KZzA3Esu4SGgE2Z2t+yfCM -HxZReEj0cohlpd90lqFJJck4BoHE1FJ1XlXFfegziyXPCNSduOZ7VQHLNdPe2EkC -NunaIzsvRT+h79h/MeKbWXse65h8F4cv4XlGAbcweDblF7ltcjJYvmjykcTocIkD -cGPLWAVd2lkN3465XzeC9ynqVHoLCe+rqWHZs6qHFo9//BJELzHcAUD5TAAt+pX7 -gYyUjCKhAoGBAOdQMxd9xxglZzjqDF8KrxS5F3V6Rm5D1qF+9UgQgk3jMDJOIT+L -ZoxEy+XSSM+EmFXVRl8xnPTmT4M6pufjj79qn9OSDV9zau3v6oEJ603lcRz7OqmZ -Zr+5I/yhblyA/tf61szAdeuaoTAnzvznqOYjCREFN/JD2qTOQwqyylSjAoGBANBv -qHbCG3G5mwJ6Ibyr+xt4YQku86iwTfun28/hJ6XzCXocOVoj3UYIZYaA9CUUCkMn -rcunGUWO7zSBQP+fPTLLqNovV8IGsxeCy7lsgIVQ8dJ0FpHEfcFC0dACUoVYErNl -c8AajvdtO83fKNNO9anI6/n3EuGSSdy+5E1Gm+2JAoGAQwvoA0Md1k3hIYoVk+bQ -4LzVo+ORTpyzNZRLHFxMqK7VZX9n+7c4Pigiwba2DBBu51IuV6FV0VaAbZUuk8BO -BjmtofGPlr8pm1YTLtvlLGr44mGfm1Evixrq52sTRhTNyWSXpjmS9HuZhQ/E22F6 -f1pgYmKU2M/6LBLtM8inBOkCgYB5rVUYzsOaphE5Zvae337dUG7FH6WaCiHcEOee -+P9ePvx/Tk6ksl8P7QLnfAwKQSKkhVtNkaSNGJ3HdtTs5JajOoS9qfl/CM4voWkw -O4jjSpeAlcg/HAeVdF5rIY/uy7VPCKCDun1PL3NEAUwh3uxGS0aGS5e4GuAHf2Bj -RB7ukQKBgQDKM9KHM/WUtQPrcXUPBjS/r9BeuKy6AhlA+6pjhU0xz/320zQmw6JZ -oUmlPrkjdBoWZRjNjF+4u6nGfmVxZ64qSRicRymHhus4zf5knBuHnlHApAy5GY7S -UKfEPe/P5s66ZbxzeWelosxF/LT5Itf7W/emr5YNG9oaFSFVycMpgg== +MIIEpAIBAAKCAQEA4vAA62q/oAzpGqudi6gj5RAvgmHk3NxFmSE7s665b4F27s4q +ZQPIlYap9yCg7rWTCkOpE9PMMqHw7t0AwKnsHZebUGZc3CumzUWKMyGBojF1BUEQ +9PVfo/n+WIKOTGHk4nVGYyUnMG8tymmm2HfS48VzZXywjrocLDTvib2bgYYaHues +5vvbm/CVWRjkrMCO3wWBt61aGCKHbGC80p9UjkWOeiClnu9ToJ0NNv3+OeaCR9MC +eKkHuPN3xDyz99FZ/kebqXdHqU19R6RYNWez+QFYobCkHAg8kT22lsQETJn+bEiy +f7CUPjMQTryfFyerPh224P1UMish8w46B9LUxwIDAQABAoIBAEY14tLy795goC30 +MoXmu1Q/MbOw/dGnBJFfyszIne51q4oulscx6Hj6dNNUcPXpj1h5nnHX8TEpERWV +oon5CGgPY6n4QXqMtsqDXUJ8d1Lq4j2B5/EhiTl+Osa/fa78CohVqDU8ZWeCvjQF +g+0tBT4a9JzNewJtahHzPrjqxJXJhl09ezoV7yR8oyEcTMF8+meVoriaBiR002gK +lbgE8TW4CDtnnCjxL71YotC43vg7g+6ferJNYeBNnn6vstM+al6Bw4CEs0Eg+Sx0 +RGK/L2nrrxc6LsB5RmnlnYJBkCK4fGMheoIJqMJ7i2TD2KzZte5joAZ+XzcOghk/ +1MxC7oECgYEA7xh1X28gXYnSSmSn/KrD5gt0j2fg4KX0363efWZAG7hfmkmaYMvX +5a5EG/FG6XQdJkpe+vxw8G50YJMqNSFwdUYL1rQ1PNZkJIvg1hIAQ0ZGqX9fG+7g +ILSX2JJftpPtGGRtWSSonFer3/s0hyKoOO3AwDURCgy6Dwl09TkMHHcCgYEA8vt9 +QYEiosGEqtaM6XMkdQ2+xjG9cLppJks8VEx4jxyWPEO3t4KSmQtXedDBCL0rbyd6 +rdHfDUUmRVj+ErlF54lDkm0ZY+NfZMkg+pm89xKlW+s0HTpWbybjFZ9lvOzwLg2K +RVzL73b2hjpkBCYpqD/7AfUfRrGqu9kpLTi8LjECgYB8XJRwVzTWcmFXIJPf8FKE +zWCLVtS5BJkh3yXiw9SElpnjfnU189EQPlxezFi+BQ9EY1qT4co8xLbzpJhHmmUM +Gqr9ui4WvszH1ZnUvvg0BdGrR/0IYm9hk42HsFrodHjWPyZBP7gT2eYkUl04DObC +9adUUkXSnFwKhji3dDzAcQKBgQCe9EifppP69zAL9qleOxX5gVFxJK7yZPBOvd8s +oo4nySK7L+2qnj+64QGLzjXJur8ES0ZlGauaacc8jJhBtXR2oIRU8QwwHVmVfEIX +zqUg2NDWTgrcqAJNWpop1gnfSv1gkzkGYUuET0W8z8wILtMHnztcr3eTbrzrgIgA +bmIksQKBgQCw8MlRSaD3pjw1rRWV0Num2CZV410nVzceV+OrwgvP9zlQCan+5kwY +M4zhZMGTZkyeWA1ihATYGQdCWnw8xRtXgHyrulEeAYFECD57bkclRSykQTG7HFA7 +4umu0zsZ5QqkD6zGtydtKz5ASHYFUgUVRAe6KE4ySSrX1kXPFq+OgA== -----END RSA PRIVATE KEY----- diff --git a/pkg/security/securitytest/test_certs/client.testuser.crt b/pkg/security/securitytest/test_certs/client.testuser.crt index 0e5f61c7f19c..3e55c11ee9f5 100644 --- a/pkg/security/securitytest/test_certs/client.testuser.crt +++ b/pkg/security/securitytest/test_certs/client.testuser.crt @@ -1,19 +1,19 @@ -----BEGIN CERTIFICATE----- -MIIDBDCCAeygAwIBAgIRAP8A45bfPrG1mVkqXuPgnKIwDQYJKoZIhvcNAQELBQAw -KzESMBAGA1UEChMJQ29ja3JvYWNoMRUwEwYDVQQDEwxDb2Nrcm9hY2ggQ0EwHhcN -MjAwNjA5MTYwNjExWhcNMjUwNjE0MTYwNjExWjAnMRIwEAYDVQQKEwlDb2Nrcm9h -Y2gxETAPBgNVBAMTCHRlc3R1c2VyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB -CgKCAQEApIXTt23v2R5lzR7Y85N9hMWlgiQlPKpkrp3Mn4PcJTTCLIykWP83FKIN -rFVvvyDa+qyxUXuGNZ3syy7Odg3dJVmE+5df9bxDz+9e90D/dedx6kLYQK83RD+8 -WIAcclr++SsiLlJ0mMSxJK0LT8LhrJAS9en9+tLor/tgOgiJJwkDvE+1b9cdxj24 -7bGAtr4KQDVzVpTRCUp9TaI9BKalM8d7/ma6i7Fr8GhpapC70ZNAdPq/XGydjqAJ -AvuuMViDhBQPBdy1KwirELPnt9vFjb/Mbvt/JgDcwqC+3+8U3wnc9LusOC8u4RSa -G0yU+n8AD2W84Xy75X6GrrWpjIQbcQIDAQABoycwJTAOBgNVHQ8BAf8EBAMCBaAw -EwYDVR0lBAwwCgYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBAF58QHOO2f6r -c0SEya8fWdtV6sQDK/EOD0RA9ZV+7xKDJxJLwVeEc2pA94VOFg6e78MrTz3U1xbg -72eKswHXJ5qiTK1cq3qoGaevFL4Cw4gXp5cd/ALncBbftpOOn1+6pG7nzW0UGsj+ -LMgaCZ/h2APyBK5LJ3+Gr0Dqhm/2dlFxkl+xfvhwZsfVeMZWu4xSfHbsQgebKIkA -nS9spllJ0VRnF1nGLXy4dDEi8/xCNhtIGsQPOkK/LHEz++Zy92e5RXMvt1bPuWGk -BMtZsYnfKOEWTmya3WzhwoxAGkmcKW93mnIo7Cdd8posRKFBsysWySzign39PEKN -LNNGCAgUeIk= +MIIDAzCCAeugAwIBAgIQWF0W4TRm+U0vQaWsGR8crDANBgkqhkiG9w0BAQsFADAr +MRIwEAYDVQQKEwlDb2Nrcm9hY2gxFTATBgNVBAMTDENvY2tyb2FjaCBDQTAeFw0y +MDA3MTUxMTQ2MjdaFw0yNTA3MjAxMTQ2MjdaMCcxEjAQBgNVBAoTCUNvY2tyb2Fj +aDERMA8GA1UEAxMIdGVzdHVzZXIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK +AoIBAQDTOfgMdnPjk6+3XPj4nZIdUkKBQVurkzs48f+2bU6OL6+Ix88NSP7gDdw8 +P07Oz7czfavMoCYDFKDJNh/j/zuameVk9hJ6B6NEMtjXt2+6IPfn7EwZyTK0zCoX +LeuU/BmT+7DxXxUduQ51uq0WLxSDZXrK4+E9nvs8onrHxK1mPc37dzgW3A7qjUOD +E3+4VFwt6yV1dJFEdCyZvoYrIZimSrX8UHzzy1vO+m2evCIE+w0e0CN7rcV0/dJV +Xq/wXmD6OHXR3a/o0S44+qWBSmxDLJyAYnPTIigVLQHdb8UltMFcvXKI8bhH7PEH +r7zK0Osa4BTLciGuEowS68TW/xO5AgMBAAGjJzAlMA4GA1UdDwEB/wQEAwIFoDAT +BgNVHSUEDDAKBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAQEAMVShvPzxuTnd +tPekm3cQ0uNHLb6dUBwC4Ts0VDW60vcIcrefWiPsV9XJCg5m4L1AHUr3DUwaEHR7 +h9wpbKMQaWTyEH4k62nL9vs0UgvfXroZ2Z1cin7+HdoJlt3RKRBfvgw/KY5765oW +5/IQuz0ZTe0d+Hov2WLzEPWXPXwzPPym+WSTdxbUxzcYSjCHKbBNHoCGCvirKipd +pnfmrwGFgE/xtL3v2Ek+kIiZWfhoZGbsIFEg/Dz+/xeJckgqYyDGmWZDXLPmicM5 +7eUCGs/Qu6lyr1qzduPbU2oiTlHwtCt2DSKdxpmoe3A95rSffv4N7Iqf8iUIEfHx +zZM6df5qmw== -----END CERTIFICATE----- diff --git a/pkg/security/securitytest/test_certs/client.testuser.key b/pkg/security/securitytest/test_certs/client.testuser.key index cabfa8b3b366..907883d57ed9 100644 --- a/pkg/security/securitytest/test_certs/client.testuser.key +++ b/pkg/security/securitytest/test_certs/client.testuser.key @@ -1,27 +1,27 @@ -----BEGIN RSA PRIVATE KEY----- -MIIEogIBAAKCAQEApIXTt23v2R5lzR7Y85N9hMWlgiQlPKpkrp3Mn4PcJTTCLIyk -WP83FKINrFVvvyDa+qyxUXuGNZ3syy7Odg3dJVmE+5df9bxDz+9e90D/dedx6kLY -QK83RD+8WIAcclr++SsiLlJ0mMSxJK0LT8LhrJAS9en9+tLor/tgOgiJJwkDvE+1 -b9cdxj247bGAtr4KQDVzVpTRCUp9TaI9BKalM8d7/ma6i7Fr8GhpapC70ZNAdPq/ -XGydjqAJAvuuMViDhBQPBdy1KwirELPnt9vFjb/Mbvt/JgDcwqC+3+8U3wnc9Lus -OC8u4RSaG0yU+n8AD2W84Xy75X6GrrWpjIQbcQIDAQABAoIBABpi+FzP/grVjEBE -tUkDm7sCtBPWVj6PmYxD9MCUtmclOgtJF0bKz/u4Lfc40K5Xx6cysVG/PPw2cvb3 -b9eRS6mk3OY5FgPkiP+9hX6kZxRy5VtME0D0mSmSC1QqX+WbYI938oh5Ywfpa/vU -4R6OxAEYLmJQgBKNZxJqf7lvCwg+cQ1KliSlKaqLMEIV+I0ngDxYUPiP+rUA/yL9 -nfNbp+7gWko3V0at4gryuU8VbggLKyaavCqOtmTJxPXWwNjr12K1X2EX7m47Q520 -izsvH6Kb0kC4E2isrouE4xrXbS45PNEGxW9HXF0RNgFEuPT5lS7aURfxnH/klA0m -6SofGsECgYEAzayVaodDyb++0l73omYbZ06FUcTifv4ZZKq7b3z4dWRvKdZBRDx7 -5wnSbMfQ5ZFO71aPKKVmciN9+/yWRAtwIIDnqu2gOEjKCErl5bFnO+WZdBY+qx7y -Dh+8GXw6nSbrMGAeF/A2oj26T2qgbQUpZyfvdCgkmI5Zw28/ZG/RuckCgYEAzMeF -y8q1UiH/HMpXs1MYC2iHcyms+uZ+z555kfULwNVnDUpG/NLxmT3bav6yj3ZtsSho -pbX0lg8Kh5dRZvDq/D5QdZIN+wRAloXLc79UJj6VCz+egKo8r/4FSp+U//jYrPa6 -snTQcdYxX3QhqmOaRpi1cGSFgF2rQTiFiHp7qGkCgYBJO2UsPCN3520jbKsRyPeC -7iNsPQVEoGccP+pjRQUWj39BT0eH611Wo1moX/FSfE21zIVGvLXgeCC4o3RBoCz5 -dcyHQPrmb4x4LWr0QRl360WbXvxLY8ZeHxCTpnccU6o0XFT6ww5A8GexNU8P4mGe -mEqbelulcjIl8yuIMIRleQKBgGLWqq2CWaIa5pdu0oWrRZ+8BCSBqQww1GRBiUv5 -ioK4fdTcVQcSian9QTqTVHwKHUe0yU2yVStYdyyazJ9zCPhW217j7/uIQeRlD53+ -aw9KhYW4Xzia8k+/u64Y+EHUSkCxlcsstq87QvlfhCBJkt0gN/LXkdgzXcVNEqac -97KBAoGADuYJ4OOpbhNJTp2Vt79GTpeOCb9z6da0EpBSZHI9+kFbdediAxoH6s5j -w940T6inL+KKfQTBQB6ogDZMmLsc2zEuDrXDE4kHHg/8JIRc2aSX46ofx+0l5vN/ -ujyen8VGR3B8sA1p+LQMAhMlOydNgncPXl0rKaxWhIGqkG+Vyxs= +MIIEpAIBAAKCAQEA0zn4DHZz45Ovt1z4+J2SHVJCgUFbq5M7OPH/tm1Oji+viMfP +DUj+4A3cPD9Ozs+3M32rzKAmAxSgyTYf4/87mpnlZPYSegejRDLY17dvuiD35+xM +GckytMwqFy3rlPwZk/uw8V8VHbkOdbqtFi8Ug2V6yuPhPZ77PKJ6x8StZj3N+3c4 +FtwO6o1DgxN/uFRcLesldXSRRHQsmb6GKyGYpkq1/FB888tbzvptnrwiBPsNHtAj +e63FdP3SVV6v8F5g+jh10d2v6NEuOPqlgUpsQyycgGJz0yIoFS0B3W/FJbTBXL1y +iPG4R+zxB6+8ytDrGuAUy3IhrhKMEuvE1v8TuQIDAQABAoIBAFYGfup8d5hQ9riE +CfYfHnoInYNM3gvTq8P2c0GV5O9tplzbm4z6lKslmfODiRIbcK5s2UI+WxzYEt+/ +xl8x/NFrKgzjVwUSBUFqP/wi/kLc2HpBN4Es+xS9LctA7XhA8B3f3OGA6vWu/5+d +Bo9JX15gPxFQm9Rf4kyAk+a2SDSh66ZiD7TYJvRU+hHAUko2gGVyky7b5ZDgiaLy +jdZTsBYwSJXMMTnsd1KRAu77hZJ3XKrU2cRYe+9t//IjhtOlmGrW5+HcHXq9pqJD +JvAV2KrRTR16wfzICVO4tdbWcgjVZmpcarHPSwMLsdLFO3QoAY9ypdwXMg1gfsb2 +ALA0pLECgYEA3yggBpZE7w4ZXLCWIpva/LVRkaxzGq098gQ6cvzM1PcckVesEsgZ +UEPXCZYqm3YBcerwUtakaCicfq6OOFpvBhAtlXBLaglqnpCaxfqnDBXCtQhc/WrR +RU/uUiMURVvhkc4hImLfG/EvXzCXPWqAcHRJu/8bm0T0N9jkJWfiKfUCgYEA8lBY +mjhvzWGgvKR8gAcgQTr59pmCU8Hmx5SQhsQpGd9YDKoLVB6KDBcDiI6XmeUCV7UI +3pG8kIuT2ZA0Bk1CD1JJYqRiUD3/c5+SYPUhpZes6MZ9EgyQ28CEGj47/j8N+kyW +B8B2kBP1n0heKBoLYu/S9eo5Sh/HTl8j8vjIVDUCgYEAstKvnzeps7sjncAv/znP +qTQPUmHTtyveeOLkh6KG7Z27+cg8rqxEhKpoVllMeVl93PC8dlVkV8c7aNSuSQBG ++Z/bN2ZOOIGlO717GW07kZaaeYFjKvv/CMD9pDpSEyaGwtVgffKnAPgr0ubYOzHu +DK9TKuBKGgmOfnZClKsDdEUCgYBU0ULyWKbp4S5+WaUqu1PTAW3Vn846uzioy5v7 +UFaCs+cCJ9NnUnlH2hZmimMOf1belIPSRHkYr4LFOPC88/YXntoJKTkwlUMBme2G ++scYS4s+v5uv4a4i/bQ/62Dckf22i3BIrlnR/OqRIqeyqcsqin/xjFcZVx5QlITk +26hjsQKBgQDVM8hxgx2nYUgWxlXCeWMUB0j2rr9lrXy9edlVzLlnRdGV/L1zoDp7 ++3Oe1f7N2aqrL8ON4/wOu1Jp6TBqITzzCybcV4SDNeasrYfkNBEFW1fn+w04/mXS +rHhry46cowGtRrSrlogkBLI1C8sJW7jx6iUOLB9MVvpKmdhykbFAIw== -----END RSA PRIVATE KEY----- diff --git a/pkg/security/securitytest/test_certs/mt/ca-client-tenant.crt b/pkg/security/securitytest/test_certs/mt/ca-client-tenant.crt deleted file mode 100644 index 2e7c31f40b7f..000000000000 --- a/pkg/security/securitytest/test_certs/mt/ca-client-tenant.crt +++ /dev/null @@ -1,19 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDBjCCAe6gAwIBAgIQQgS7wiqZeRVv3WoPuaw+cDANBgkqhkiG9w0BAQsFADAr -MRIwEAYDVQQKEwlDb2Nrcm9hY2gxFTATBgNVBAMTDENvY2tyb2FjaCBDQTAeFw0y -MDA2MDkxNjA2MTFaFw0zMDA2MTgxNjA2MTFaMCsxEjAQBgNVBAoTCUNvY2tyb2Fj -aDEVMBMGA1UEAxMMQ29ja3JvYWNoIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A -MIIBCgKCAQEAlUGQC6ktZE6jSivnmfFldPXvzKhS859ZMN/s2DxFmYchocLLmaJK -0zsK9ux1cpZw5wBpamoUQGFpQZ4RQqSwN7f4a3JqYEpni/+ANxKO4Eg452IPobvX -3fasoAjSsCQDnQDqpXtbee0H6FmKV72zPwvcko+NqMEIX4DJ+MuCdYkmyJbGy73D -reZBpxwOM3XVLlu2uPbPVkCg1QFTPM2B0gqfQSax925kZhsYxtCmv0Ywtldw2OZb -V5vcq8s2jHpbXmFxXwv5RoMs0QyffUvKOkRc9/IbAu4yTdtuscMlwOElvE06+Jqi -em6I8goaHEMFJbi6hGqt3YqiRBS5YBfLuQIDAQABoyYwJDAOBgNVHQ8BAf8EBAMC -AuQwEgYDVR0TAQH/BAgwBgEB/wIBATANBgkqhkiG9w0BAQsFAAOCAQEAB2XXO7XV -ODhhcQYQCLWUexhOdaVfTqeYr2d6pI+vzw8Tk1CAM7smNWyfh4dPU3Ddzx4I5YHu -xup/iqqrYee341BYV713fO4BGDKNlx/5MApFes0huvliKKCaspo7pThUkjeX+Xf7 -o/43+D2WN+s0sKvPqEXvxkgu8mzHPpV8rvfIVvEPytB+CG26wGMhO72wihGVVcvJ -m2d5K+nl3V8BSDqZq1yw6bVDEldrBkxLN/OR6N4UmS5M4trAvXykAUo0NzAx+gMg -ltkY5jW05GsTvu8jyq9JY+AQ6x7KBUMd87+IJaTdAynjBPPwhPuSjf82b2Jk1C3W -WfjWBTZiEGu9RA== ------END CERTIFICATE----- diff --git a/pkg/security/securitytest/test_certs/mt/ca-client-tenant.key b/pkg/security/securitytest/test_certs/mt/ca-client-tenant.key deleted file mode 100644 index 8e665edb664e..000000000000 --- a/pkg/security/securitytest/test_certs/mt/ca-client-tenant.key +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEogIBAAKCAQEAlUGQC6ktZE6jSivnmfFldPXvzKhS859ZMN/s2DxFmYchocLL -maJK0zsK9ux1cpZw5wBpamoUQGFpQZ4RQqSwN7f4a3JqYEpni/+ANxKO4Eg452IP -obvX3fasoAjSsCQDnQDqpXtbee0H6FmKV72zPwvcko+NqMEIX4DJ+MuCdYkmyJbG -y73DreZBpxwOM3XVLlu2uPbPVkCg1QFTPM2B0gqfQSax925kZhsYxtCmv0Ywtldw -2OZbV5vcq8s2jHpbXmFxXwv5RoMs0QyffUvKOkRc9/IbAu4yTdtuscMlwOElvE06 -+Jqiem6I8goaHEMFJbi6hGqt3YqiRBS5YBfLuQIDAQABAoIBABEYKzlKrQo5/3W1 -RZdaEHau3EIiXS3N6Fcyrlutu4Lz+SQfvVXhQpSixIS3XFQ9arzqTSiE8cDV50o+ -oldxqUUYavlTZ1+T5fwgzTyBgZ+qZeoKTyQE8ZpYcDj8CbVmyosm2bkOQdHbFfbE -mpWmAmuMHj0i9+SGB0F47Kj0FgMD/4hLBrYWmOuCXIKI3v71X4+eGNVYyNB4MWCJ -nFWdDjTkoW1TxEHWresBj16FhCNNaTgWzSGhHPus1EHcY5xMeppX4rOx/lCErWDM -ka3Y1n+jO4LTt3E7jktUoaOprN8leW+zbuF/1DpQITZ5lzfdEtsO96+2CJnSveDG -AJ8W2aECgYEAwkczwC4vR2sixUCO3+PV1BLnUwMefii29ykXwejvcPAO0biXAQAR -i8VvOjzPvwUFgjtTRFpCwbvHeYjNqH1Lc+j8V5ZtAWBuILG6Cz5Qdr2dx2UcljGF -Ijyj2/Fz0xU9B3SzTDVFksQQ9DAvU5O39AdXxHMgEdJPnlM34lZyvF0CgYEAxKyu -tP7rOC51/xB9KsUS2xRN1ZNGRP5M9ZESQrSc7fW8jzBj+0NANJaYAbvWHRwVjcF6 -jGLeT0yBYByf6vDTZqVmSvqYwr58QXtpJBdVN8bOcvzuIlsHQ0Oplz5AtRKPs/cU -1L4ORDsYFtEsxuSenoSRBnvHsywzC3Xy0y45dw0CgYArwS1+kuhDBXYHRsrm0cFO -yhMfNwyfDTxn3fFj0rpajTZJNXGM4B8Tg5vRWfDP7KmY8xOFyW5Pg6MhVBY9ZDqi -GE78yvwx2y3yXxSvg5FLrNjkF3mgufZqB44/8tlLKPVdwILBHx5UN6Q52sBN6m77 -nsu9itAmM1+LIOLtLtsYYQKBgHgpbSCGc15C/LLW9zJvb+LMV/W6Yn96w7hxZy+8 -O/kjX444qY11fD/lFoBQrDPi2cRfRqmJKnxWqOD4/DfF5dNcENCUpUquqSo05Xs4 -ikdmvvIAWNpCtYBCUdZnIY/ABG6W8nI8oGjNlh0yteHbApKlOho0/EEbKyDAcpjW -MCPtAoGAKqT+Xty9XoGATOc1BpVUlOjHopVt74fVPUUcecD3ljChTvWRPJ70lyT1 -vuDONX+sSlx/UvcrjmRkoYXHPv0dNEeNesDI7hX220IK2dYkoaPs7hCFe61KJSt9 -n+RQBYwrgTne2C9n2zlYTFq/xfNPO8bNr3EZiUvgxuNb8tU1WjU= ------END RSA PRIVATE KEY----- diff --git a/pkg/security/securitytest/test_certs/mt/ca-server-tenant.crt b/pkg/security/securitytest/test_certs/mt/ca-server-tenant.crt deleted file mode 100644 index 31e10972aa9f..000000000000 --- a/pkg/security/securitytest/test_certs/mt/ca-server-tenant.crt +++ /dev/null @@ -1,19 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDBzCCAe+gAwIBAgIRAKoFdGLfA2MD6DbzO7jPQOkwDQYJKoZIhvcNAQELBQAw -KzESMBAGA1UEChMJQ29ja3JvYWNoMRUwEwYDVQQDEwxDb2Nrcm9hY2ggQ0EwHhcN -MjAwNjA5MTYwNjEyWhcNMzAwNjE4MTYwNjEyWjArMRIwEAYDVQQKEwlDb2Nrcm9h -Y2gxFTATBgNVBAMTDENvY2tyb2FjaCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP -ADCCAQoCggEBAMF2OEYfD9pmB5wGm4fM6TLoBWWJWpUzRbHAAhON4LKM5HjXTZfB -8YdNbScOPzpPXc18Cup0v/ijLYkzs49Z95Ox7IUga+VWo6Wt9bo5c36kS8oUe6PE -3dyaCdtvUSbafj5xrd7PBB4OJBiNyE+Z7VmdGFMWrLfh+2ylb+KxjFYF+sKBEOg2 -uJuQ9MHGPW1VVIPH2PhgzZQMKL/FuL6gS3ap6gmcjnOejpeSRXw6MI+8aV2vIHHd -Gpkus9bkB17WRKAQSS+qcQ4lK0wuagRBgzwWPWPv1t8LUJU5/7buSNl0EYEAum3R -DBP9xJUnFM4/oHhLLbLcZSOPjun8rFWxP9MCAwEAAaMmMCQwDgYDVR0PAQH/BAQD -AgLkMBIGA1UdEwEB/wQIMAYBAf8CAQEwDQYJKoZIhvcNAQELBQADggEBADsJaDLI -SLtKfWorhKxNqqh5ri5iMc9/LgZKSqYBhjfHrHxpcCFiFYHM9X7cDd06CvauU25Y -lWQeU2QpUw4bh/zQoe3Vm2I8XJvpmeiIqdZcYEiS2Y1vJ4mGjb2tc34nNrlxk85z -mDe6+z5wQaUIldCrgKBU7GODXP+E7kuO/YUYGWOWSj8C6eJLVeUglqLRPmnXQarS -AujttpJNznS5nIx63Vy/cg9VadyXJqWb9r//nqxMWJlnFUf5ywvZm/NRqlteGYTD -I/0RF34jGL0/NL5v7neWIDyk+kM/AfpzaqKmszKozJUmIOl1aE71iPNMNd8fGnFn -9nk9dbAfIgI/3VM= ------END CERTIFICATE----- diff --git a/pkg/security/securitytest/test_certs/mt/ca-server-tenant.key b/pkg/security/securitytest/test_certs/mt/ca-server-tenant.key deleted file mode 100644 index 8faee1f0932a..000000000000 --- a/pkg/security/securitytest/test_certs/mt/ca-server-tenant.key +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEpAIBAAKCAQEAwXY4Rh8P2mYHnAabh8zpMugFZYlalTNFscACE43gsozkeNdN -l8Hxh01tJw4/Ok9dzXwK6nS/+KMtiTOzj1n3k7HshSBr5Vajpa31ujlzfqRLyhR7 -o8Td3JoJ229RJtp+PnGt3s8EHg4kGI3IT5ntWZ0YUxast+H7bKVv4rGMVgX6woEQ -6Da4m5D0wcY9bVVUg8fY+GDNlAwov8W4vqBLdqnqCZyOc56Ol5JFfDowj7xpXa8g -cd0amS6z1uQHXtZEoBBJL6pxDiUrTC5qBEGDPBY9Y+/W3wtQlTn/tu5I2XQRgQC6 -bdEME/3ElScUzj+geEststxlI4+O6fysVbE/0wIDAQABAoIBAQCQZ0O943Wb2UiY -x73T8bmnS9SrY4j/kRPWh7GFEwPDgrMPF/ZM7nDwQ3TUEChVx+QGey5Sru6UEojs -vnCq8caAsfAPtpGSz8a65kxiwntY7h28KunW5h2MilYNOtviGnjc91GG3BMAtCFx -SnNYJ1co6r+7VVN6te1LvXj0Rv6vPd4O+Dg4qBIfQHuDu/2sYCsw8yeg5bWGmADD -pwiAy3f6jci7QBaOlIcPboboosje06m1E+H7iMRAZp49NtMRxgmBRxCz0VWr6mZF -/6IhGbH9jYUNTby+DprT7lJCae0eTyQ5y2cESPvd20CtIA3efGEog4nur2jxleNj -3P18mvJBAoGBAPEwy4Fuo/4SseLfDEu+7l92En6jKb9rXOkCBrQ2GpEfcok9OPs7 -HQ1iSlYK2++JjhEMoGki5WwcjSnXtCwdE3fie3/7xnWdf4f7yzvvTT4ALd+udQUd -Q8g43qSSR3EvgOsTJdFx5kNlXirwtlb+K674VtPOkl6fVnUrj7iAlHWxAoGBAM1X -MIkYoYYx/F8+DJHWb/Xv9fhQWgLdLoZhobCVGm6KzpIEU/3Rh+QjPSncWQtVQ1kz -0PVLSjNXqKclmpehNacDLi7ZQs+xqh3aiQFYHlxpKCqo1QT1ynVp4k9dUPz8dLDt -Ztp1TAxapRegJTMWSS2FPzSGczPc0/qIuFM56brDAoGBAKjMB4DcF/V2y/wFMivI -wjcZATSTqGIJF4sTGfIBc3JhWd1mdXyOEHUPdwrkqqvnzv9roNAz1fBlwv2nsra0 -2q0qWlhlsq0ZvulCdSfLAHoF0hUbmVYs9wUnl9oBbfJu1oCuc+czGX3NcawHrvUP -CS95KfsuNQ334aA7DmiHxF7hAoGAOwn1l4Vwc6ANmujBPnE0UbcDtriLmMU1akfJ -8HZ+Wggo6oy6BYFoG+0R2eZT59FFAvHGA7D5DZgHkr9aGnysa2+bqLao4gSID/tU -ZwGKATHu7Y0LalitNGMUQZNoBMUlW/V2HBubmPW6//b4mx6uPZtRF+4MU34LqL4E -mVFOZXcCgYAe4bOFdR3COGFy/93Qy8qnRtkujIZzHFd+DqfxuB5M3zRO7kg8poh6 -gtIV6L6FqYB6/LhFCINozxjWm8TbrsOboguCI15HJaUNl8IsMbxTrSi91B8MdsTh -2wGtXp8b6Vu2ajcRbJlFsZzKklpBMiHmRBwPXGh3mnV9LPHkRVccDA== ------END RSA PRIVATE KEY----- diff --git a/pkg/security/securitytest/test_certs/mt/client-tenant.123456789.crt b/pkg/security/securitytest/test_certs/mt/client-tenant.123456789.crt deleted file mode 100644 index 2984bf5dcecb..000000000000 --- a/pkg/security/securitytest/test_certs/mt/client-tenant.123456789.crt +++ /dev/null @@ -1,19 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDBTCCAe2gAwIBAgIRAJX4JSEt8GnDBUn7RDlXaDgwDQYJKoZIhvcNAQELBQAw -KzESMBAGA1UEChMJQ29ja3JvYWNoMRUwEwYDVQQDEwxDb2Nrcm9hY2ggQ0EwHhcN -MjAwNjA5MTYwNjEyWhcNMjUwNjE0MTYwNjEyWjAoMRIwEAYDVQQKEwlDb2Nrcm9h -Y2gxEjAQBgNVBAMTCTEyMzQ1Njc4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC -AQoCggEBAOaelF1j715p2ec6yB/lgXZBELoGhLHogCm7SQ89Uq68RzrzqUh7cqvg -xTSqjVT3OENFTVSTxg4Utb6kJ3UYjj70ZJ3U4gByxIp2lvpVWG8JZaROOqPkmAAf -kuYlAi2kb7/dptNeYQnBTL1etlhZcWNnXYCZ/RIURto/8qNxKNqwj80xiRAVbt1O -zRkhZlmI6NiHR4UUn21vAWR8SlinhB/LZhhLQhxXbRts1sg2pV9YiS6mplyRz8nI -3UmyeH9sQw/zmkxcSuKpmL++admfb4IzZGSJ132bc20su23AWVJ1SjDNLb2rp57/ -eRbhKTW9s6P3EaLK2dW80CI5bja1DCUCAwEAAaMnMCUwDgYDVR0PAQH/BAQDAgWg -MBMGA1UdJQQMMAoGCCsGAQUFBwMCMA0GCSqGSIb3DQEBCwUAA4IBAQBMD8y+Ph6b -oxsRrn45gUIe4JxGYut5FPjLT/zR+8e6QCT/alLYRbsIs/R4d8Wx98tpYSAdOCzb -htyoMNy7aTb8c5rZeDX1sW24ZDAnOxxp30E8+tJ5ZGJ42u3pi+R9OB5tOgXlyM3I -4yNOD+CCosEYHK6tsxeOEdMlH1CICH5R9lG4rlM5iZvq1icfoWkS1aFh4sxe2cJ1 -XNBSYqnurJauGekXQmGKbC+sTtw5OcJoKWFykM6GgwIS2dcZ89P5V0xJxQ63O/zU -yhk1hqHS4jJpdz96qnNWFOuP8rcThqXMUYxySsn2p6CI5gO/ogmcp65n4Rab/f35 -pHxAw/dRAPWx ------END CERTIFICATE----- diff --git a/pkg/security/securitytest/test_certs/mt/client-tenant.123456789.key b/pkg/security/securitytest/test_certs/mt/client-tenant.123456789.key deleted file mode 100644 index 1b25aff07193..000000000000 --- a/pkg/security/securitytest/test_certs/mt/client-tenant.123456789.key +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEpAIBAAKCAQEA5p6UXWPvXmnZ5zrIH+WBdkEQugaEseiAKbtJDz1SrrxHOvOp -SHtyq+DFNKqNVPc4Q0VNVJPGDhS1vqQndRiOPvRkndTiAHLEinaW+lVYbwllpE46 -o+SYAB+S5iUCLaRvv92m015hCcFMvV62WFlxY2ddgJn9EhRG2j/yo3Eo2rCPzTGJ -EBVu3U7NGSFmWYjo2IdHhRSfbW8BZHxKWKeEH8tmGEtCHFdtG2zWyDalX1iJLqam -XJHPycjdSbJ4f2xDD/OaTFxK4qmYv75p2Z9vgjNkZInXfZtzbSy7bcBZUnVKMM0t -vaunnv95FuEpNb2zo/cRosrZ1bzQIjluNrUMJQIDAQABAoIBAQCum9qRaxzNSy+k -lyj2nXoL4u+bKVxGp1aCQj7qvu9fRUZZKCs/qdgEssYdPhSMBDIhHNOT+d62wo9o -rDkDu3fXyopzxb7nv/13KJrfJscyKtc+M8zKUkWTslQy1Ep17E5/4n5xAsBN9oD3 -0EIXWoEzVgvBVtX5XkjW7hv0C7V2/U+yGiBrTExmZDKhKMw4wIABJ0zYb/SsILWH -m+fZP3YFV3v4zdG9oS0glqIYbjIZ/f9qKmWSMQS1klK68qMVMyR9X8aZNnxHip7l -td5pYGSHHaJcCpjJmxGzWzCYloICKVRITTxvhauAQaUlJqM8RQf/LtDez/UFrg0G -eZqH2YMBAoGBAPQ26aKVjMW7NuKtNvilBkw/uvkW9QHzjN1vF5yHkmc1NpVdnFY3 -A63ST4iNoafUWszRY/ZD2nL/vb7hvf0OC4M9pvMLmE7LCM/6kCo4zQrzh0lQ6lgs -eY9hUn0M1JL3eUDOtF0jQygeZ3Ws2+Umn++jPtjdK5x2bkJyjADKZ481AoGBAPG/ -tdHa53fG0EesI/pBMBTBtDE1ssAFkScn18tHuiuQeR0qpkg6Vft+qxZj78zRgbjF -zCFuWIVuMaAksUc2Pe0d3sMmHij3ix+mTdKBJoT1riQl8ZDWKH+ISb6oiRN4yZu1 -6ns5geLrsW5B3MY961PsS5bThujlsuA10vClLXcxAoGBAJcp3lgq5aYHCiQpP5uM -2mccE6nXUfTRQmJWP3E+YZrMz2qJNRoQl5BiW6SUtnlh8opRGeT3fyIrttGOfcFD -jlDAOrS6ep5bAqtp1w6rdg/PSfBRy5ykeuILRbnt1S7bTAyXZgE4sHsGxteKFdqz -m9ADZgVqcXI5xGoQ6SQcJRn5AoGADwNe4Ud89H1OVgUkvtfpioB1FlFFZpNx7kKV -LjSoJSh1vQ/2/6lPyayWJ2/RZqDkM3tlL/ZQXQj43/8nW0rNEbq3KNtnKBgndbG4 -R4hpwfwX8nrAw8PpA/KM0eBZkvH/Y0Iq67gojtUgUb6ZXV5fDPkxwI4mZLRPJYly -Liuz5SECgYBozdv4R4a43jon3U/WipXGyBCETTNFimbLY8CUDHBGlBPszpjVm0nv -ql2sRdaxlarr2nLVw3rPbTdxv74HSkix4fT65rlsd3Kjf5qjwJ9FwbLxBAsgJ5ov -05PRfJAlH9EVu7KQjk+lGb6/gjHO0Bb5cxo5b+jnK0d1a0PihSFgGw== ------END RSA PRIVATE KEY----- diff --git a/pkg/security/securitytest/test_certs/mt/server-tenant.crt b/pkg/security/securitytest/test_certs/mt/server-tenant.crt deleted file mode 100644 index 7af3a08d5255..000000000000 --- a/pkg/security/securitytest/test_certs/mt/server-tenant.crt +++ /dev/null @@ -1,20 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIDMjCCAhqgAwIBAgIRAMydJJd8VWYmCLkqdst3/1AwDQYJKoZIhvcNAQELBQAw -KzESMBAGA1UEChMJQ29ja3JvYWNoMRUwEwYDVQQDEwxDb2Nrcm9hY2ggQ0EwHhcN -MjAwNjA5MTYwNjEyWhcNMjUwNjE0MTYwNjEyWjAUMRIwEAYDVQQKEwlDb2Nrcm9h -Y2gwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoJeWRdy3Szwco348j -64ElQgrf7g+xQrzmdDs+Ij7WkRhO9dYWL8GrUDXdy02DyrkOnFv1ir90etU917fZ -RNEuYQE+wJf9pr1oh3dvsN+vYz8haRnUL9kM2a6FLn2e5LqLxopBPMzQOkiiA8BJ -+5/X5cu0p7aIdIjxf2y0ONV4IyJuQ3sHjFh3NdZoMRoS4bjRlsSKZzmqr2HfxiKc -3D3uV9wJ5zB+X8k3yanqYvAEC0rf2OHjrOCq1agHUQQZR50O1pQDAS0X0JHJreae -Q7+n3+p+Gq7TkrmRdl41yhQ82zzLVd8g89/PicVkAY/SpKkRQjbTdWKYbS/8Wfow -PEw/AgMBAAGjaDBmMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD -AQYIKwYBBQUHAwIwNQYDVR0RBC4wLIIJbG9jYWxob3N0ggcqLmxvY2FshwR/AAAB -hxAAAAAAAAAAAAAAAAAAAAABMA0GCSqGSIb3DQEBCwUAA4IBAQBbOMQ7sfQeNDXu -p1ba4C3O5oCrxtqJjZFtv2KswiRT6ltHfSElrX9svN1mW9rh1qUyBlUXJPcp5n8A -64RcItrC4LK4Hby7s7GXhab7qODd1EpexxuV22LN4Ep13Ap6kQ7uaUt8M8EJ+UTA -Uv5Ji7GmgLG3ZElXIzS2BYBGsRxnz/ypxC1kIphT23sczK6eR8niUOWdzzdgtkav -SC8gFC4nNBYYXc6s6kSbUDvCJxA4OPKwbdd9KUtjPz8t5ZB2IqLnNpqFq6+NrvS5 -qySqpffN1CtpF5U5w7LvvcpqYvSjlbKtyIV8eFr9tv0L+YpPzuvNGrxPDGeRri/a -Szpi7jM3 ------END CERTIFICATE----- diff --git a/pkg/security/securitytest/test_certs/mt/server-tenant.key b/pkg/security/securitytest/test_certs/mt/server-tenant.key deleted file mode 100644 index ea65d9f2c5ad..000000000000 --- a/pkg/security/securitytest/test_certs/mt/server-tenant.key +++ /dev/null @@ -1,27 +0,0 @@ ------BEGIN RSA PRIVATE KEY----- -MIIEogIBAAKCAQEA6CXlkXct0s8HKN+PI+uBJUIK3+4PsUK85nQ7PiI+1pEYTvXW -Fi/Bq1A13ctNg8q5Dpxb9Yq/dHrVPde32UTRLmEBPsCX/aa9aId3b7Dfr2M/IWkZ -1C/ZDNmuhS59nuS6i8aKQTzM0DpIogPASfuf1+XLtKe2iHSI8X9stDjVeCMibkN7 -B4xYdzXWaDEaEuG40ZbEimc5qq9h38YinNw97lfcCecwfl/JN8mp6mLwBAtK39jh -46zgqtWoB1EEGUedDtaUAwEtF9CRya3mnkO/p9/qfhqu05K5kXZeNcoUPNs8y1Xf -IPPfz4nFZAGP0qSpEUI203VimG0v/Fn6MDxMPwIDAQABAoIBACbDRSzf6I/dr8Vc -ZutJhJvzBhvUBVzE1wPn/ohmcXWkbpmopOG5ga4YS5ZIPx41eGb/Jr++Ni+93uNf -pLwrqH4FBo8y224oLFJK5F+K+h6wBLeQdBahEq35nxFv7NveN2Pld+piu5Q9Vylu -VOpFkLAdF8GHi4wHYWJps334S3Sun8Rdof/nlXoAP5b+GwisqQlZn0JLe/pxUWTl -W0wxQuD9sWvn96AbaTffOpU7AzkFcUePEH7XxZnnuy+oJY5zF15M69EsufWPU9k1 -/ZfOVxnAxMy49Z5Mwm8prUX5BFXJu3jsqCMqQ/nggLhBMs2yIomv2yVLRkp1B8Gp -XDDDpcECgYEA9RM/YG05vP4AZGahdvIrRoo//sOv9f2kl9dby7ffj9MFNeaF1+DJ -xRX2CazUWNJF6KAI7oaGsy/KSFDalVNYwdlRiXFb/shISf4xCnETNcqriItWOUWe -NPRoeEA6nvTRb84AvoJMYoxecdOUUiBFep0ZUvdYYp6r1KwbI5KoCR8CgYEA8n8g -fuFPRsYQeBU4GLAB/gKvidHJh1U82yb5RZ3tMQ9m5gNYR78tydnnOCxlMjOyeXS+ -qUcDH4WiVTkiKadLkh4AgwWqoOkzU9SFhTnY6C+x2tY1g6Gw2HWQDVDoLyahUThg -NvcS7zYCuVVh3sQ/CF9gbmUxJtzVNpGa/ZZCuOECgYAEro1zZiLIPYH8aQmEoDO7 -cUCvuUVPSb0vOWoDhku7D6j10qWT7jNslHLS1H5qA/pZ61TAWcmQ+sS+hOzoFWOI -sIIiQgwj3eejojuFm4tmZ6zHOwI2reHL2S91vKRiDQNDQ4g4G30iFNRpEEWxG/S3 -1vB46UjC+Y0GzxLlpxOWuQKBgCpinAxxV0j4j6Jdmxt9kCuUzpfZSk9UT7nCeyl2 -7CF6HrMvfHu158vzQV3pLJr0vEpMZJLz7ZDR68jXnqgHLMdSZSaBlAxiFm2dpOTf -cpFK3NxyOpJSbbW3/sDFFoA/UUz//Jk+4FldaGZ6jQvB436UJSfGmiu/x6itFJkk -bW8hAoGAGiX6tUbPOvTm2A9ces3wgun9zcwGQrDr/+iSlR65jL+r4duSvLY2omdU -NDR12r9tl9oGDIyBHC6HTQvuzHbRShWQlOJpvI3RBEkdntXoRq66zxrhXGUTjv0d -Sf9BQQnt0YmFozZPLoIeCMTLYZmP45CvBJqOyV/3mz4ptDhWMwA= ------END RSA PRIVATE KEY----- diff --git a/pkg/security/securitytest/test_certs/node.crt b/pkg/security/securitytest/test_certs/node.crt index f834442ad46e..9afbe20200fc 100644 --- a/pkg/security/securitytest/test_certs/node.crt +++ b/pkg/security/securitytest/test_certs/node.crt @@ -1,20 +1,20 @@ -----BEGIN CERTIFICATE----- -MIIDQDCCAiigAwIBAgIQA+13Dy5WVeBurLIzt+i/YjANBgkqhkiG9w0BAQsFADAr -MRIwEAYDVQQKEwlDb2Nrcm9hY2gxFTATBgNVBAMTDENvY2tyb2FjaCBDQTAeFw0y -MDA2MDkxNjA2MTBaFw0yNTA2MTQxNjA2MTBaMCMxEjAQBgNVBAoTCUNvY2tyb2Fj -aDENMAsGA1UEAxMEbm9kZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB -AKzwiH8tmei1cJIFFLefMjWOdW/Qiu5nb04+bcrR3HPQoDUIO268+KG8LOI7s68M -7cOeoMbaZT+mEf+eHXMu9y72k6HHUfu/emnKSFOnFCSSt2jbo3osvDqy9Pxr5+pp -nQOVDKDrO1fSaIiBjcphqiONRO4g351YQizN4Rm6+Cb7JRvOc4XCgx13uEaSNJnP -5lnOXQbIxEYweViSRhoJ4e/OH+wv3WC7HJiVQxi55H0PSx/3ji5uEmjxRWy2JNAD -HTdc3fPRA1BXpj8gG7PninHaQcLMM6WX/JVD/ckoXgsomeS1EwWsV6rt5fta5IlR -13J5IkedaY6Rx/oGO9cV/ecCAwEAAaNoMGYwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud -JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA1BgNVHREELjAsgglsb2NhbGhvc3SC -ByoubG9jYWyHBH8AAAGHEAAAAAAAAAAAAAAAAAAAAAEwDQYJKoZIhvcNAQELBQAD -ggEBAATGYBz2AeXbF6q2B2sz0djEcfLOcG5dQ4GQDG0pfhvfJafSIwjFgwRwme8V -j/vi/KuQ18GV2Gy0mTDZKX7L5fgYt4c9hdVQv3yoS0TvQQw2QV7GUFW/GUTbOe+I -rmKjMgsKtqJJOTzBrJ/eb18sumud37RIZks6U/4+mzB/1Y12RFdJ1cHu/F0Nm2Bs -TYKEz1WNvBHz70BGEZtNvVZ+ZQgyPyjegUxCeL3eL/nKJEXzQGFyxLR5TiyBNC/A -UaBUd9/TOmhOIctdh5WsaZUxVIUQuoynNoY6fMrgh0ndqodYCo7bbn8cmHcMN/Vz -XLMlIvfoypVnM5e/RGI8SlX29Mo= +MIIDQTCCAimgAwIBAgIRAMJ+OPxkJW6QTfnyTsGlDPowDQYJKoZIhvcNAQELBQAw +KzESMBAGA1UEChMJQ29ja3JvYWNoMRUwEwYDVQQDEwxDb2Nrcm9hY2ggQ0EwHhcN +MjAwNzE1MTE0NjI2WhcNMjUwNzIwMTE0NjI2WjAjMRIwEAYDVQQKEwlDb2Nrcm9h +Y2gxDTALBgNVBAMTBG5vZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB +AQDbVIVT+W+/rYjRGrIpzzPd+IZZhUeK1xJoShByJANkn90UV04Z0PHWgspARcWI +eFoHhzUje8ESjbtHi62Db7UejT/MXye7NGQP+mBwA7D78Ad1Lm9vUtN36UOAtI4i +MJUvCEHfp6VIvu+tPxf9ZYrzFB7muadbpgyd3nwuTGM6x0eXZQ3r8hyTWkBZY8Vi +jy2W9LhIP2ZBfnTM9wO6yqQxPL8yxF3vhN1IvPO0VcIndak52pyj26yTzPai9Oa5 +S2jdBA1ahgj4Hkfqr0Ia8TfmmXnVfdLpbwOtAFZ/Mu86Ys+c/I2aJ+apS6fIdJgu +iA6eia77ewVdOZgiI6t71rY1AgMBAAGjaDBmMA4GA1UdDwEB/wQEAwIFoDAdBgNV +HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwNQYDVR0RBC4wLIIJbG9jYWxob3N0 +ggcqLmxvY2FshwR/AAABhxAAAAAAAAAAAAAAAAAAAAABMA0GCSqGSIb3DQEBCwUA +A4IBAQAy+a/kbOjaE5dthIAuYZOUsux1cvAZxxUmbR/zyHNCa9KFLK1qPe0hnBJa +HdCSGcuJtNVF920WRp43wvVtiCbf7HZ3fFJH3TpljZr0o/zfsR/lWa2aVS4UQuVq +95RUpz0LqH+uwKNMg3czUBB8oifkC2ASWvHEdcvgshpOS40ChEs63UWxAW7YiEl4 +yE8YWqUslQ73F4tkqwkOidp4GCx4qB5HsBBdZD28SvuKkeKyEhvZsjkXjq6lJ63V +m9Ji89m9FY89GmJNF07Zc5e7yAtv3bmX9KPVptyCCB6F7+iSi/h8a79OoWrRyrXh +sSHqUPEV0iDA1esPfXwB3atH3c3j -----END CERTIFICATE----- diff --git a/pkg/security/securitytest/test_certs/node.key b/pkg/security/securitytest/test_certs/node.key index 2352091a204e..dc7b4f99db74 100644 --- a/pkg/security/securitytest/test_certs/node.key +++ b/pkg/security/securitytest/test_certs/node.key @@ -1,27 +1,27 @@ -----BEGIN RSA PRIVATE KEY----- -MIIEogIBAAKCAQEArPCIfy2Z6LVwkgUUt58yNY51b9CK7mdvTj5tytHcc9CgNQg7 -brz4obws4juzrwztw56gxtplP6YR/54dcy73LvaTocdR+796acpIU6cUJJK3aNuj -eiy8OrL0/Gvn6mmdA5UMoOs7V9JoiIGNymGqI41E7iDfnVhCLM3hGbr4JvslG85z -hcKDHXe4RpI0mc/mWc5dBsjERjB5WJJGGgnh784f7C/dYLscmJVDGLnkfQ9LH/eO -Lm4SaPFFbLYk0AMdN1zd89EDUFemPyAbs+eKcdpBwswzpZf8lUP9ySheCyiZ5LUT -BaxXqu3l+1rkiVHXcnkiR51pjpHH+gY71xX95wIDAQABAoIBAAe9WA6BBvNQM3KF -gbDaEhAtiPnxFlanEGcrChTaoYgZXSIidS52jJYIauXREDCUXouzrLRZj9ByaTnM -ZLsD7hIO/Ppvhi7DGgJkCCqePpuIaWbq9X0BRYdG/QnS9nUaNumzIPaOsIA0rXL2 -gVb+WfPvXZdep0NOcN+6cwmIwZRU9CbNm/xRoT7ITtMH1wpdvjRv+hSiT8F553pj -L7XbhJto5WMFBdsAcn9FtCnnNsEX0z38FotEeuIetsWbQ2yhTNhmy7FFw+1cNXkZ -C863b8PaWNNS2wZ5L/BMEuT+eYyXcZ73VqFAZscKT4knPhy6a96rQpwyHy+oNRd2 -W+AfeJkCgYEAwm8JPK+vT89tOQfPTfh6gQP+JcWhLJgGDlLVuLQXI/x5ZTMNIFvY -jrvaZ1MFrZX/rv1kI6W+cQk67toxzFbbRNEX/190uw7VMA5HN8JjHPSLQYhSg+yJ -TYP8Ivo82CNUm/8m3m/nU3kzeNibCzCIOTIzTbZnKSjPdMVf5iKd2P0CgYEA47Mp -sek5NNcGxzlKtNxxXR1ps2eGWPFQ04/CeqDubLJZSS0C5B6bYBA1ijKDMQchYuTs -7AfEek5gz4SizfcKkGrWzD6FjKyuSsjZKReNHSoH+xuEkPh+SEsl4pINQQiloEs+ -Si383+7zBcCpvkqwQQZ69gtBpvlR1vGqJU7t6bMCgYASyeINoDiDsNqwISYSNcm4 -v+cGRWO+yG4FYlHOyHBYBOTCN72z+8wgdtyzEV3CGXWctlW/8BtIFwk/3YvkYBxO -ORpljhbcoKFPRIHzTHCBcswmKAM5Rlk6SV/LDX1lsXxSmsRpyEyFT3f+3IeW/Did -tlEo2FB9tLjfYtdSiNPSDQKBgHbmYYljjdnHxuRVSGt1CUVkTIPANWlQabJvyVAb -pSThZLpPZMkWKnBZRnvpsJPzcz2e6RC/ZZuwPeFfE1yV+dA72fpBU5+HtGOcybkp -cSifgBdh4TGKcPbzNs8/EOi6yTIQ2HAH35pXvlNsrbaObccmySKd8iRs4I1rGDvv -IVD9AoGAOOI9PLpuxOtESsKoZI2tOP/JlLZ53OEEYcFrv+5GlfjN3hzyESG8UO/D -DzK8vP1GdKdrLPZrZp4ucFQsUEpODAE2LjeRtIsWziIyWu0VDcCj4OCQwK68KPmY -9HfZNO5a/JogR286WihZCQ0ZqEfGFPxMx5XDH3dpm4HtLbeyxNM= +MIIEpAIBAAKCAQEA21SFU/lvv62I0RqyKc8z3fiGWYVHitcSaEoQciQDZJ/dFFdO +GdDx1oLKQEXFiHhaB4c1I3vBEo27R4utg2+1Ho0/zF8nuzRkD/pgcAOw+/AHdS5v +b1LTd+lDgLSOIjCVLwhB36elSL7vrT8X/WWK8xQe5rmnW6YMnd58LkxjOsdHl2UN +6/Ick1pAWWPFYo8tlvS4SD9mQX50zPcDusqkMTy/MsRd74TdSLzztFXCJ3WpOdqc +o9usk8z2ovTmuUto3QQNWoYI+B5H6q9CGvE35pl51X3S6W8DrQBWfzLvOmLPnPyN +mifmqUunyHSYLogOnomu+3sFXTmYIiOre9a2NQIDAQABAoIBAQCnc0ETmqWRjrid +BKevOe1cc6iG4jV7r7Xy/1DNA+e/RDnylLEhDqAEaPhm1533EgOSKc0NGSePtbuc +5OwFJB0AhVCHBML9rwMSG9LS0k6mGlxnP5t+P5sJuoJ52d+GBNdw//ni+kg7YOL1 +vuze3k6WRO9OscEvPHf3c2wVoOZFcYLDA9/CqpAojvuoaIyfD53NVKAILKgUSBbH +7xsbWnHExtMGnQGQlhmy56obEoVX3PV3fjyv+ma4DR/dIn5dDGYLKuYMYCW2PenC +abRS5wdtulIfIuAlUUszSjNIW01UWFSwWVj3LT6oxRmYPNHqaGuq0B7y4Yp7tPTe +X9EBxeLlAoGBANvDXNF6elGOum3HVLWoL82wtmexNjnbYKKc9ZpFXb3B3tS48HM9 +FJGtJ6S5KFzOvSQ1NfqMjJLXVMJGmIQQCn1EE1HLV/9RXYN+ErVIwgPrX5gjxABt +G01yNU6WaTUqmT7c29AOPRwiZ9SxJzb8hl2uVw/wGlkwg/JTxI8KRW8TAoGBAP9+ +4ajSUfFS9gh4Unr3DATEGXBdLQSMJA7BbMjvD3AZ80kgnNZu151mFtdA0Z2NtxCa +Ga44kgO9CHzrpkOQ3rXOPQcPleko/kwdeTeqVf55n5YogOfdvcmzI7IMQIQsF9di +YSt8R8HdX74Lo8uR0z5ybVFrCrrvKsJyN1l20UaXAoGBAJ9HvaJmbvllxWGDs7Xm +LJ+ckNge7PqKMkQqFyi1VfgO5/6t/DjJ8HqVUcJmIQcDILt5haIO9GQJhfk5SZmO +NswL5yTFiQYYZvrDCbQzA8vrcOHIKmtUqRE80b4f7ikGswOI+BiX+VrG5RKXQ6Dq +7kg/8AIxOCekrj2Y0UILY7/ZAoGAS5iALlJkmnHAiEsJpIZ6UOKw4DVBf6nzdUY3 +6NALElErUcTLgwry0wiE05XDL8nhk5D07j6gvWhuHYAgBrfTnZlzJyauZXmSnHTQ +C+9jWFMmK+i6E2Dhqc9OTX0gjbr6Juld9N7l4G+ex31sLmxsQ3rZ65AvcZYYYcYn +qFnmm+sCgYAbEchAIzIWrcKHBBH2zc1zoVvizkU20CUg+JlBAdbpsYD+Ua3cAjWr +qS2vgf89YYSAI6uWWA6EiK1KbY3N8XBmBWdbhSf2kg3vsornineBpVLxtMxvBceS +O7+xpT5OkXf7kMb/7bgzP7+xuKWR5lW7NwpBoyGeQC5rBfuOmASeDg== -----END RSA PRIVATE KEY----- diff --git a/pkg/security/securitytest/test_certs/regenerate.sh b/pkg/security/securitytest/test_certs/regenerate.sh index 86c2db5f7d51..c09c44a453bb 100755 --- a/pkg/security/securitytest/test_certs/regenerate.sh +++ b/pkg/security/securitytest/test_certs/regenerate.sh @@ -9,12 +9,21 @@ rm -f "${dir_n}"/*.{crt,key} ./cockroach cert --certs-dir="${dir_n}" --ca-key="${dir_n}/ca.key" create-client testuser # Tenant certs -dir_mt="${dir_n}/mt" -rm -f "${dir_mt}"/*.{crt,key} -./cockroach mt cert --certs-dir="${dir_mt}" --ca-key="${dir_mt}/ca-client-tenant.key" create-tenant-client-ca -./cockroach mt cert --certs-dir="${dir_mt}" --ca-key="${dir_mt}/ca-client-tenant.key" create-tenant-client 123456789 +./cockroach mt cert --certs-dir="${dir_n}" --ca-key="${dir_n}/ca-client-tenant.key" create-tenant-client-ca +for id in 10 11 20; do +./cockroach mt cert --certs-dir="${dir_n}" --ca-key="${dir_n}/ca-client-tenant.key" create-tenant-client "${id}" +done -./cockroach mt cert --certs-dir="${dir_mt}" --ca-key="${dir_mt}/ca-server-tenant.key" create-tenant-server-ca -./cockroach mt cert --certs-dir="${dir_mt}" --ca-key="${dir_mt}/ca-server-tenant.key" create-tenant-server 127.0.0.1 ::1 localhost *.local +./cockroach mt cert --certs-dir="${dir_n}" --ca-key="${dir_n}/ca-server-tenant.key" create-tenant-server-ca +./cockroach mt cert --certs-dir="${dir_n}" --ca-key="${dir_n}/ca-server-tenant.key" create-tenant-server 127.0.0.1 ::1 localhost *.local + +# HACK(tbg): at the time of writing, the KV layer does not accept tenant client +# certs yet, but tenants do use them. We overwrite the embedded tenant client +# certs with those the internal node user would use to bridge this gap. +# This can be used during local development. +# +# cat "${dir_n}/node.crt" > "${dir_n}/client-tenant.123456789.crt" +# cat "${dir_n}/node.key" > "${dir_n}/client-tenant.123456789.key" +# cat "${dir_n}/ca.crt" > "${dir_n}/ca-server-tenant.crt" make generate PKG=./pkg/security/securitytest diff --git a/pkg/security/securitytest/test_certs/server-tenant.crt b/pkg/security/securitytest/test_certs/server-tenant.crt new file mode 100644 index 000000000000..1a5f14fa9a68 --- /dev/null +++ b/pkg/security/securitytest/test_certs/server-tenant.crt @@ -0,0 +1,19 @@ +-----BEGIN CERTIFICATE----- +MIIDKDCCAhCgAwIBAgIRAM2QDHd4dKuK4ELyhygyn7YwDQYJKoZIhvcNAQELBQAw +KzESMBAGA1UEChMJQ29ja3JvYWNoMRUwEwYDVQQDEwxDb2Nrcm9hY2ggQ0EwHhcN +MjAwNzE1MTE0NjI4WhcNMjUwNzIwMTE0NjI4WjAUMRIwEAYDVQQKEwlDb2Nrcm9h +Y2gwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6c/xueongEbqWdaYo +uJaYmR2fL2dCjOV5dtw+YEpevhYAP1uKkY4r5nbdq9ChLgDCJu/V5BMddvbKaO+O +lst7hKV2/DPO/nFyQ4/5dS1pKE92YaY+8MIYPuCtLh/zDvDHuGJ4pSR0/D6AjSKG +aInNq0+Dy/vGh3fci02tDrmTUCg6nyQIZBk0KXZXeqwZL51w+kXSMKkFrslPhdAH +OrN/nfK/kkUShipUQK/PWL2d+HppmCnpp2a6YpL6FOVMvjZ3A5R+Ava26Rg+JTQt +EXwKJAkrkyu5CSOF18mTUbkY7kV67XfAq1atWmHhLTEhtpBZKMoynomOmDmVIt5T +Ut6NAgMBAAGjXjBcMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcD +ATA1BgNVHREELjAsgglsb2NhbGhvc3SCByoubG9jYWyHBH8AAAGHEAAAAAAAAAAA +AAAAAAAAAAEwDQYJKoZIhvcNAQELBQADggEBAKUXiUtBlot0lKhhb9RriQiWn9Ha +JbaQTsfTqadFk9adEgKLx/+u6tR06fYyk23AGFSgNrq+FcGanbiF+C2cbBrjUukJ +4T09F2Vg91S7QIQPgUwXwTV0YMO/WuLsCg3ejLEMNf8zzELZpNpHa087mDqRGwVR +9ZKn4n2pTREmBz3iAnBC4+qSeNaXvn/f37ei2ynUGMKbxNLLorWNyTr5tXirO1xJ +kIihHDVVCTteyWXX3ATQlLLHpz4bMhl5QWGaRQEaeZPgraERwoJPt1gKqL7KJeqH +5ITZHfDo2WGT83EOatYXoWRgSjLYBaIP0yOn2HuINWLGSo6ugVHcr4oI3nA= +-----END CERTIFICATE----- diff --git a/pkg/security/securitytest/test_certs/server-tenant.key b/pkg/security/securitytest/test_certs/server-tenant.key new file mode 100644 index 000000000000..a06904548ab5 --- /dev/null +++ b/pkg/security/securitytest/test_certs/server-tenant.key @@ -0,0 +1,27 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIEowIBAAKCAQEA+nP8bnqJ4BG6lnWmKLiWmJkdny9nQozleXbcPmBKXr4WAD9b +ipGOK+Z23avQoS4Awibv1eQTHXb2ymjvjpbLe4Sldvwzzv5xckOP+XUtaShPdmGm +PvDCGD7grS4f8w7wx7hieKUkdPw+gI0ihmiJzatPg8v7xod33ItNrQ65k1AoOp8k +CGQZNCl2V3qsGS+dcPpF0jCpBa7JT4XQBzqzf53yv5JFEoYqVECvz1i9nfh6aZgp +6admumKS+hTlTL42dwOUfgL2tukYPiU0LRF8CiQJK5MruQkjhdfJk1G5GO5Feu13 +wKtWrVph4S0xIbaQWSjKMp6Jjpg5lSLeU1LejQIDAQABAoIBABgHqOCwwSnOiaiG +ATtG+qwJhN4RHkc0XZAZ52fUtU4BzvqXGaFh9dIgeqcqJQpR76CxO7G6AFuDXopt +Jw73SO7A+18/M3lY0Gm2Mcotg/3i8DzbgafoUbch0UzMcCRR+qgu+MO6lJTk3tpW +sElVHmOtXCO5Hp8dwFJYy0sfbo7DoYF6/B6dWZj6OffYiiLf4yeNP9b8FfNUNtE7 +krbGPcyv7W6sTMjJZ1uauTFgBgTlcFwZaLhMw1p1SyFGFyOGQZf5R7YFKelJnz6/ +QBBSRnn9sl7dcG7Cr1FAITt1zl3xkSfA6KuspnQ8ieTXQdv6LM9fEocxQj0jjSbl +5bTNq8ECgYEA/XU6GE6saIEe3fUAq5G6dozCSznI4JxyReEGXbbSVKGIRpMRMSQJ +3VyszdgZfR4YATpqaLNvYpssUdbOXxh5FhhOM03iYoAgTUDM+DD01iUsBuekhbub +6rnAaHxOBKI55XzIIY81zRUBrg7eI0FlZPIBu/8S6JGXl6y8+ROc1WMCgYEA/PcL +QBkWddDZntB2A1JJQ0AMr4MTOcdGhdDDCApX5j1IEdlhWB8WrSua2k7Pj8UcMCo4 +oeACxz9uDBtotLan7kjFBqwFORTEiYJKmnSGjKRPcctuWe5RSjmMh7O3F1LhW7R0 +I4XsqCy+ZZjwVBh/tmntAOsV/jQivNdWZnEUd08CgYAr0VJj1WYVAw2VDcA56Q21 +ZQxJ+QlzW1ieIBL7rJmcK/jlSpOUTUivTlBJnex6JvO7cp/mze6Zu33kACDZa9+z +JCyQzgwvPztWX7ePyNbrFq4P24gj3pVL9SUAa00JnAoqVHI86wdAFzudHdDlg27G +Dtih6a0ZK+JrRF+/J9bbRQKBgFr1RaFVpALXBvkZAeYt11QMGsOdQPN8mPoS153z +gimyjVCFtn/mJdQ8oqCux+ltObaD5/skvjsArsRBssOQDhAbMGU2w2YD9qtvIv4o +uhymFD7ZpCNIEwi6arJ8x2/miEveNghz5mWOOSP0+y1x5bIkomi7HxxZiMgYMeQB +8xb3AoGBANsJAr8rJlGJsvcJynGfZERVvS2ZDL6y8hrHa55sOKhK+gQNxFft9742 +7QI6snWp2Ic5P8lOvZUIVhYv1HpvSH+/UReu9dpwxpjMk9rJE3Z7ya9y6uvPQxHn +tRPwRHbJHZr1DPwZsWLiVFoIEwbH2r1PVlqKQP+EAgAsNJgU3rTI +-----END RSA PRIVATE KEY----- diff --git a/pkg/security/tls.go b/pkg/security/tls.go index 2dc6694c2d31..052d3bb58556 100644 --- a/pkg/security/tls.go +++ b/pkg/security/tls.go @@ -33,13 +33,20 @@ const ( EmbeddedRootKey = "client.root.key" EmbeddedTestUserCert = "client.testuser.crt" EmbeddedTestUserKey = "client.testuser.key" +) + +// EmbeddedTenantIDs lists the tenants we embed certs for. +// See 'securitytest/test_certs/regenerate.sh'. +var EmbeddedTenantIDs = func() []uint64 { return []uint64{10, 11, 20} } - EmbeddedTenantID = 123456789 - EmbeddedTenantCertsDir = "test_certs/mt" +// Embedded certificates specific to multi-tenancy testing. +const ( EmbeddedTenantServerCACert = "ca-server-tenant.crt" // CA for tenant server (KV server) + EmbeddedTenantServerCAKey = "ca-server-tenant.key" // CA for tenant server (KV server) EmbeddedTenantServerCert = "server-tenant.crt" // tenant server (KV server) cert EmbeddedTenantServerKey = "server-tenant.key" // tenant server (KV server) key EmbeddedTenantClientCACert = "ca-client-tenant.crt" // CA for client connections (auth broker) + EmbeddedTenantClientCAKey = "ca-client-tenant.key" // CA for client connections (auth broker) EmbeddedTenantClientCert = "client-tenant.123456789.crt" // tenant client cert (SQL server) EmbeddedTenantClientKey = "client-tenant.123456789.key" // tenant client key (SQL server) ) diff --git a/pkg/server/authentication_test.go b/pkg/server/authentication_test.go index af0cae1ee1fc..3026e37bac4b 100644 --- a/pkg/server/authentication_test.go +++ b/pkg/server/authentication_test.go @@ -91,6 +91,7 @@ func TestSSLEnforcement(t *testing.T) { newRPCContext := func(cfg *base.Config) *rpc.Context { return rpc.NewContext(rpc.ContextOptions{ + TenantID: roachpb.SystemTenantID, Config: cfg, Clock: hlc.NewClock(hlc.UnixNano, 1), Stopper: s.Stopper(), diff --git a/pkg/server/drain_test.go b/pkg/server/drain_test.go index 1e616940de03..143c7db998c4 100644 --- a/pkg/server/drain_test.go +++ b/pkg/server/drain_test.go @@ -17,6 +17,7 @@ import ( "testing" "github.com/cockroachdb/cockroach/pkg/base" + "github.com/cockroachdb/cockroach/pkg/roachpb" "github.com/cockroachdb/cockroach/pkg/rpc" "github.com/cockroachdb/cockroach/pkg/server" "github.com/cockroachdb/cockroach/pkg/server/serverpb" @@ -236,6 +237,7 @@ func getAdminClientForServer( cfg := tc.Server(0).RPCContext().Config execCfg := tc.Server(0).ExecutorConfig().(sql.ExecutorConfig) rpcContext := rpc.NewContext(rpc.ContextOptions{ + TenantID: roachpb.SystemTenantID, AmbientCtx: log.AmbientContext{Tracer: execCfg.Settings.Tracer}, Config: cfg, Clock: execCfg.Clock, diff --git a/pkg/server/grpc_server.go b/pkg/server/grpc_server.go index 22c9c39e650b..08627cbdc694 100644 --- a/pkg/server/grpc_server.go +++ b/pkg/server/grpc_server.go @@ -29,12 +29,13 @@ type grpcServer struct { mode serveMode } -func newGRPCServer(rpcCtx *rpc.Context) *grpcServer { +func newGRPCServer(rpcCtx *rpc.Context, opts ...rpc.ServerOption) *grpcServer { s := &grpcServer{} s.mode.set(modeInitializing) - s.Server = rpc.NewServerWithInterceptor(rpcCtx, func(path string) error { + opts = append(opts, rpc.WithInterceptor(func(path string) error { return s.intercept(path) - }) + })) + s.Server = rpc.NewServer(rpcCtx, opts...) return s } diff --git a/pkg/server/server.go b/pkg/server/server.go index fec77a35d590..3fd7b214b273 100644 --- a/pkg/server/server.go +++ b/pkg/server/server.go @@ -278,26 +278,20 @@ func NewServer(cfg Config, stopper *stop.Stopper) (*Server, error) { ctx := cfg.AmbientCtx.AnnotateCtx(context.Background()) - var rpcContext *rpc.Context + rpcCtxOpts := rpc.ContextOptions{ + TenantID: roachpb.SystemTenantID, + AmbientCtx: cfg.AmbientCtx, + Config: cfg.Config, + Clock: clock, + Stopper: stopper, + Settings: cfg.Settings, + } if knobs := cfg.TestingKnobs.Server; knobs != nil { serverKnobs := knobs.(*TestingKnobs) - rpcContext = rpc.NewContext(rpc.ContextOptions{ - AmbientCtx: cfg.AmbientCtx, - Config: cfg.Config, - Clock: clock, - Stopper: stopper, - Settings: cfg.Settings, - Knobs: serverKnobs.ContextTestingKnobs, - }) - } else { - rpcContext = rpc.NewContext(rpc.ContextOptions{ - AmbientCtx: cfg.AmbientCtx, - Config: cfg.Config, - Clock: clock, - Stopper: stopper, - Settings: cfg.Settings, - }) + rpcCtxOpts.Knobs = serverKnobs.ContextTestingKnobs } + rpcContext := rpc.NewContext(rpcCtxOpts) + rpcContext.HeartbeatCB = func() { if err := rpcContext.RemoteClocks.VerifyClockOffset(ctx); err != nil { log.Fatalf(ctx, "%v", err) @@ -335,10 +329,9 @@ func NewServer(cfg Config, stopper *stop.Stopper) (*Server, error) { grpc := newGRPCServer(rpcContext) - // TODO(tbg): pass a different rpcContext here. var tenantGRPC *grpcServer if cfg.SplitListenTenant { - tenantGRPC = newGRPCServer(rpcContext) + tenantGRPC = newGRPCServer(rpcContext, rpc.ForTenant) } g := gossip.New( diff --git a/pkg/server/status_test.go b/pkg/server/status_test.go index 2864bd23aef8..2954f3891d4a 100644 --- a/pkg/server/status_test.go +++ b/pkg/server/status_test.go @@ -354,6 +354,7 @@ func startServer(t *testing.T) *TestServer { func newRPCTestContext(ts *TestServer, cfg *base.Config) *rpc.Context { rpcContext := rpc.NewContext(rpc.ContextOptions{ + TenantID: roachpb.SystemTenantID, AmbientCtx: log.AmbientContext{Tracer: ts.ClusterSettings().Tracer}, Config: cfg, Clock: ts.Clock(), diff --git a/pkg/server/testserver.go b/pkg/server/testserver.go index 6fef3926fae4..047bd77a9881 100644 --- a/pkg/server/testserver.go +++ b/pkg/server/testserver.go @@ -217,9 +217,16 @@ func makeTestConfigFromParams(params base.TestServerArgs) Config { cfg.SQLAddr = params.SQLAddr cfg.SQLAdvertiseAddr = params.SQLAddr } - if params.TenantAddr != "" { - cfg.TenantAddr = params.TenantAddr - cfg.TenantAdvertiseAddr = params.TenantAddr + if params.TenantAddr != nil { + addr := *params.TenantAddr + if addr == "" { + // Empty address disables the tenant server. + cfg.SplitListenTenant = false + cfg.TenantAddr = "" + } else { + cfg.TenantAddr = addr + cfg.TenantAdvertiseAddr = addr + } } if params.HTTPAddr != "" { cfg.HTTPAddr = params.HTTPAddr @@ -462,6 +469,7 @@ func makeSQLServerArgs( rpcTestingKnobs = p.ContextTestingKnobs } rpcContext := rpc.NewContext(rpc.ContextOptions{ + TenantID: sqlCfg.TenantID, AmbientCtx: baseCfg.AmbientCtx, Config: baseCfg.Config, Clock: clock, @@ -612,7 +620,7 @@ func (ts *TestServer) StartTenant(params base.TestTenantArgs) (pgAddr string, _ ClusterSettingsUpdater: st.MakeUpdater(), } } - sqlCfg.TenantKVAddrs = []string{ts.RPCAddr()} + sqlCfg.TenantKVAddrs = []string{ts.ServingTenantAddr()} return StartTenant( ctx, ts.Stopper(), diff --git a/pkg/sql/distsql_physical_planner.go b/pkg/sql/distsql_physical_planner.go index 05eb3540078b..3e455cc1ec99 100644 --- a/pkg/sql/distsql_physical_planner.go +++ b/pkg/sql/distsql_physical_planner.go @@ -443,6 +443,11 @@ func checkSupportForPlanNode(node planNode) (distRecommendation, error) { } return shouldDistribute, nil + case *ordinalityNode: + // WITH ORDINALITY never gets distributed so that the gateway node can + // always number each row in order. + return cannotDistribute, nil + case *projectSetNode: return checkSupportForPlanNode(n.source) diff --git a/pkg/sql/distsql_spec_exec_factory.go b/pkg/sql/distsql_spec_exec_factory.go index d05d8c6d6e6a..c17f5d55755d 100644 --- a/pkg/sql/distsql_spec_exec_factory.go +++ b/pkg/sql/distsql_spec_exec_factory.go @@ -349,12 +349,6 @@ func (e *distSQLSpecExecFactory) ConstructInvertedFilter( func (e *distSQLSpecExecFactory) ConstructSimpleProject( n exec.Node, cols []exec.NodeColumnOrdinal, colNames []string, reqOrdering exec.OutputOrdering, ) (exec.Node, error) { - // distSQLSpecExecFactory still constructs some of the planNodes (for - // example, some variants of EXPLAIN), and we need to be able to add a - // simple projection on top of them. - if p, ok := n.(planNode); ok { - return constructSimpleProjectForPlanNode(p, cols, colNames, reqOrdering) - } physPlan, plan := getPhysPlan(n) projection := make([]uint32, len(cols)) for i := range cols { @@ -711,18 +705,7 @@ func (e *distSQLSpecExecFactory) ConstructWindow( func (e *distSQLSpecExecFactory) ConstructRenameColumns( input exec.Node, colNames []string, ) (exec.Node, error) { - var inputCols sqlbase.ResultColumns - // distSQLSpecExecFactory still constructs some of the planNodes (for - // example, some variants of EXPLAIN), and we need to be able to rename - // the columns on them. - switch plan := input.(type) { - case planMaybePhysical: - inputCols = plan.physPlan.ResultColumns - case planNode: - inputCols = planMutableColumns(plan) - default: - panic("unexpected node") - } + inputCols := input.(planMaybePhysical).physPlan.ResultColumns for i := range inputCols { inputCols[i].Name = colNames[i] } @@ -748,7 +731,31 @@ func (e *distSQLSpecExecFactory) ConstructExplain( // variants of EXPLAIN when subqueries are present as we do in the old path. // TODO(yuzefovich): make sure that local plan nodes that create // distributed jobs are shown as "distributed". See distSQLExplainable. - return constructExplainPlanNode(options, stmtType, plan.(*planTop), e.planner) + p := plan.(*planTop) + explain, err := constructExplainPlanNode(options, stmtType, p, e.planner) + if err != nil { + return nil, err + } + explainNode := explain.(planNode) + if _, isExplainPlan := explainNode.(*explainPlanNode); isExplainPlan { + return nil, unimplemented.NewWithIssue(47473, "experimental opt-driven distsql planning: explain (plan)") + } + physPlan, err := e.dsp.wrapPlan(e.getPlanCtx(cannotDistribute), explainNode) + if err != nil { + return nil, err + } + physPlan.ResultColumns = planColumns(explainNode) + // Plan distribution of an explain node is considered to be the same as of + // the query being explained. + // TODO(yuzefovich): we might also need to look at the distribution of + // subqueries and postqueries. + physPlan.Distribution = p.main.physPlan.Distribution + return planMaybePhysical{ + physPlan: &physicalPlanTop{ + PhysicalPlan: physPlan, + planNodesToClose: []planNode{explainNode}, + }, + }, nil } func (e *distSQLSpecExecFactory) ConstructShowTrace( diff --git a/pkg/sql/exec_factory_util.go b/pkg/sql/exec_factory_util.go index 7a271dfbfd26..e02eea4ab7fa 100644 --- a/pkg/sql/exec_factory_util.go +++ b/pkg/sql/exec_factory_util.go @@ -21,7 +21,6 @@ import ( "github.com/cockroachdb/cockroach/pkg/sql/sem/tree" "github.com/cockroachdb/cockroach/pkg/sql/sqlbase" "github.com/cockroachdb/cockroach/pkg/sql/types" - "github.com/cockroachdb/cockroach/pkg/util" "github.com/cockroachdb/errors" ) @@ -128,9 +127,8 @@ func constructExplainPlanNode( case tree.ExplainVec: return &explainVecNode{ - options: options, - plan: p.main, - subqueryPlans: p.subqueryPlans, + options: options, + plan: p.planComponents, }, nil case tree.ExplainPlan: @@ -140,7 +138,7 @@ func constructExplainPlanNode( return planner.makeExplainPlanNodeWithPlan( context.TODO(), options, - &p.planComponents, + p.planComponents, ) default: @@ -235,64 +233,6 @@ func convertOrdinalsToInts(ordinals []exec.NodeColumnOrdinal) []int { return ints } -func constructSimpleProjectForPlanNode( - n planNode, cols []exec.NodeColumnOrdinal, colNames []string, reqOrdering exec.OutputOrdering, -) (exec.Node, error) { - // If the top node is already a renderNode, just rearrange the columns. But - // we don't want to duplicate a rendering expression (in case it is expensive - // to compute or has side-effects); so if we have duplicates we avoid this - // optimization (and add a new renderNode). - if r, ok := n.(*renderNode); ok && !hasDuplicates(cols) { - oldCols, oldRenders := r.columns, r.render - r.columns = make(sqlbase.ResultColumns, len(cols)) - r.render = make([]tree.TypedExpr, len(cols)) - for i, ord := range cols { - r.columns[i] = oldCols[ord] - if colNames != nil { - r.columns[i].Name = colNames[i] - } - r.render[i] = oldRenders[ord] - } - r.reqOrdering = ReqOrdering(reqOrdering) - return r, nil - } - var inputCols sqlbase.ResultColumns - if colNames == nil { - // We will need the names of the input columns. - inputCols = planColumns(n.(planNode)) - } - - var rb renderBuilder - rb.init(n, reqOrdering) - - exprs := make(tree.TypedExprs, len(cols)) - for i, col := range cols { - exprs[i] = rb.r.ivarHelper.IndexedVar(int(col)) - } - var resultTypes []*types.T - if colNames != nil { - // We will need updated result types. - resultTypes = make([]*types.T, len(cols)) - for i := range exprs { - resultTypes[i] = exprs[i].ResolvedType() - } - } - resultCols := getResultColumnsForSimpleProject(cols, colNames, resultTypes, inputCols) - rb.setOutput(exprs, resultCols) - return rb.res, nil -} - -func hasDuplicates(cols []exec.NodeColumnOrdinal) bool { - var set util.FastIntSet - for _, c := range cols { - if set.Contains(int(c)) { - return true - } - set.Add(int(c)) - } - return false -} - func constructVirtualScan( ef exec.Factory, p *planner, diff --git a/pkg/sql/execinfrapb/testutils.go b/pkg/sql/execinfrapb/testutils.go index ef4d1a50d85f..ec2504119bc1 100644 --- a/pkg/sql/execinfrapb/testutils.go +++ b/pkg/sql/execinfrapb/testutils.go @@ -43,6 +43,7 @@ func (s CallbackMetadataSource) DrainMeta(ctx context.Context) []ProducerMetadat func newInsecureRPCContext(stopper *stop.Stopper) *rpc.Context { return rpc.NewContext(rpc.ContextOptions{ + TenantID: roachpb.SystemTenantID, AmbientCtx: log.AmbientContext{Tracer: tracing.NewTracer()}, Config: &base.Config{Insecure: true}, Clock: hlc.NewClock(hlc.UnixNano, time.Nanosecond), diff --git a/pkg/sql/explain_distsql.go b/pkg/sql/explain_distsql.go index 67a1ea3c5bf4..83c099b41da7 100644 --- a/pkg/sql/explain_distsql.go +++ b/pkg/sql/explain_distsql.go @@ -79,20 +79,6 @@ func getPlanDistributionForExplainPurposes( if plan.isPhysicalPlan() { return plan.physPlan.Distribution } - switch p := plan.planNode.(type) { - case *explainDistSQLNode: - if p.plan.main.isPhysicalPlan() { - return p.plan.main.physPlan.Distribution - } - case *explainVecNode: - if p.plan.isPhysicalPlan() { - return p.plan.physPlan.Distribution - } - case *explainPlanNode: - if p.plan.main.isPhysicalPlan() { - return p.plan.main.physPlan.Distribution - } - } if _, ok := plan.planNode.(distSQLExplainable); ok { // This is a special case for plans that will be actually distributed // but are represented using local plan nodes (for example, "create diff --git a/pkg/sql/explain_plan.go b/pkg/sql/explain_plan.go index 2c1527128827..215f2fdcca6a 100644 --- a/pkg/sql/explain_plan.go +++ b/pkg/sql/explain_plan.go @@ -47,7 +47,7 @@ type explainPlanNode struct { // makeExplainPlanNodeWithPlan instantiates a planNode that EXPLAINs an // underlying plan. func (p *planner) makeExplainPlanNodeWithPlan( - ctx context.Context, opts *tree.ExplainOptions, plan *planComponents, + ctx context.Context, opts *tree.ExplainOptions, plan planComponents, ) (planNode, error) { flags := explain.MakeFlags(opts) @@ -59,7 +59,7 @@ func (p *planner) makeExplainPlanNodeWithPlan( columns = append(sqlbase.ResultColumns(nil), columns...) node := &explainPlanNode{ - plan: *plan, + plan: plan, run: explainPlanRun{ results: p.newContainerValuesNode(columns, 0), }, diff --git a/pkg/sql/explain_vec.go b/pkg/sql/explain_vec.go index 2b6f7af9191d..95736c7ab956 100644 --- a/pkg/sql/explain_vec.go +++ b/pkg/sql/explain_vec.go @@ -36,14 +36,13 @@ type explainVecNode struct { optColumnsSlot options *tree.ExplainOptions - plan planMaybePhysical + plan planComponents run struct { lines []string // The current row returned by the node. values tree.Datums } - subqueryPlans []subquery } type flowWithNode struct { @@ -56,17 +55,17 @@ func (n *explainVecNode) startExec(params runParams) error { distSQLPlanner := params.extendedEvalCtx.DistSQLPlanner distribution := getPlanDistributionForExplainPurposes( params.ctx, params.p, params.extendedEvalCtx.ExecCfg.NodeID, - params.extendedEvalCtx.SessionData.DistSQLMode, n.plan, + params.extendedEvalCtx.SessionData.DistSQLMode, n.plan.main, ) willDistribute := distribution.WillDistribute() outerSubqueries := params.p.curPlan.subqueryPlans - planCtx := newPlanningCtxForExplainPurposes(distSQLPlanner, params, n.subqueryPlans, distribution) + planCtx := newPlanningCtxForExplainPurposes(distSQLPlanner, params, n.plan.subqueryPlans, distribution) defer func() { planCtx.planner.curPlan.subqueryPlans = outerSubqueries }() - physPlan, err := newPhysPlanForExplainPurposes(planCtx, distSQLPlanner, n.plan) + physPlan, err := newPhysPlanForExplainPurposes(planCtx, distSQLPlanner, n.plan.main) if err != nil { - if len(n.subqueryPlans) > 0 { + if len(n.plan.subqueryPlans) > 0 { return errors.New("running EXPLAIN (VEC) on this query is " + "unsupported because of the presence of subqueries") } @@ -206,5 +205,5 @@ func (n *explainVecNode) Next(runParams) (bool, error) { func (n *explainVecNode) Values() tree.Datums { return n.run.values } func (n *explainVecNode) Close(ctx context.Context) { - n.plan.Close(ctx) + n.plan.close(ctx) } diff --git a/pkg/sql/logictest/testdata/logic_test/experimental_distsql_planning_5node b/pkg/sql/logictest/testdata/logic_test/experimental_distsql_planning_5node index 0b35842f76af..1ac754b374aa 100644 --- a/pkg/sql/logictest/testdata/logic_test/experimental_distsql_planning_5node +++ b/pkg/sql/logictest/testdata/logic_test/experimental_distsql_planning_5node @@ -44,17 +44,10 @@ NULL /1 {5} 5 statement ok SET experimental_distsql_planning = always -query TTT -EXPLAIN SELECT * FROM kv ----- -· distribution full -· vectorized true - - -query BT -EXPLAIN (DISTSQL) SELECT * FROM kv +query T +SELECT url FROM [EXPLAIN (DISTSQL) SELECT * FROM kv] ---- -true https://cockroachdb.github.io/distsqlplan/decode.html#eJyk0s1K80AYBeD9dxXhrD5lQv5dZKVohUBta9OFIFnEzEsJTTNxJilKyb1LJ4vaUnW0y_k588wLZwv1WiHG6Gk2vkkm1v-7JF2kj-MLKx2NR7cL69K6n08frNUGDLXgNMnXpBA_wwODD4YADCEYImQMjRQFKSXk7spWBxL-hthlKOuma3fbGUMhJCHeoi3bihBjkb9UNKeck3RcMHBq87LSzGpz3chynct3MKRNXqvYsh0fWc8gunb_pmrzJSH2evaFu-e6WkhOkvgBlfUnfjYRtmic6Ojiado_oD3zkb2fR3Z82wkMh_bNZd9ADmwnNJQDczkwkEPbiQzl0FwODeTI_kPBTrhzUo2oFRn1x90VkPiShrYq0cmCZlIUmhmWU53TG5xUO5x6wyKp9ZH-4Oew92346iDsHof9c-TgnHB4Tjj6VTjr_30EAAD__2R3o50= +https://cockroachdb.github.io/distsqlplan/decode.html#eJyk0s9q4zAQBvD7PoX5TruLjP_vwactbQqGNEnjHArBB9cagoljuZIdWoLfvUQupAlpqzZHSfPpNwOzg3qqECMdjUfXC6uTlXU7n95Zy9HDbHyVTKzfN0m6SO_Hf6y3kr9DwXqbgaEWnCb5hhTiJTww-GAIwBCCIULG0EhRkFJC7kt2OpDwZ8QuQ1k3Xbu_zhgKIQnxDm3ZVoQYi_yxojnlnKTjgoFTm5eVZtbb_40sN7l8AUPa5LWKLdvxkfUMomsPf6o2XxFir2cfuAeuq4XkJIkfUVl_prOJsEXjRCeF52n_iPbMR_a-HtnxbScwHNo3l30DObCd0FAOzOXAQA5tJzKUQ3M5NJAj-wcLdsadk2pErchof9z9AhJf0bCtSnSyoJkUhWaG41Tn9AUn1Q6v3nBIav2kG3wf9j4N_zsKu6dh_xI5uCQcXhKOvhXO-l-vAQAA__-hwaj8 # Note that we want to test DistSQL physical planning and the obvious choice # would be to use EXPLAIN (DISTSQL). However, this explain variant doesn't have @@ -136,12 +129,6 @@ EXPLAIN (VEC) SELECT k::REGCLASS FROM kv └ *colrpc.Outbox └ *colfetcher.ColBatchScan -query TTT -EXPLAIN SELECT k::REGCLASS FROM kv ----- -· distribution partial -· vectorized true - # Check that hash join is supported by the new factory. query II rowsort SELECT kv.k, v FROM kv, kw WHERE v = w diff --git a/pkg/sql/logictest/testdata/logic_test/explain_analyze_plans b/pkg/sql/logictest/testdata/logic_test/explain_analyze_plans index 07bf8cbb43d9..8e98f13121e4 100644 --- a/pkg/sql/logictest/testdata/logic_test/explain_analyze_plans +++ b/pkg/sql/logictest/testdata/logic_test/explain_analyze_plans @@ -82,10 +82,10 @@ statement ok EXPLAIN ANALYZE (DISTSQL) EXPLAIN SELECT 1 # This query verifies support for zeroNode in DistSQL. -query B -SELECT automatic FROM [EXPLAIN (DISTSQL) SELECT sum(k) FROM kv WHERE FALSE] +query T +SELECT url FROM [EXPLAIN (DISTSQL) SELECT sum(k) FROM kv WHERE FALSE] ---- -true +https://cockroachdb.github.io/distsqlplan/decode.html#eJyUkF9LwzAUxd_9FOE-dRBY42OenFqxsH-u8w-MPIT2WseyZuYmIpR-d2kj6ISJPt5zzzm_5LZArwYkFNk0u1qz4Ay7WS1mbJM9LaeTfM6S67xYF3fTEfu0UNgnu1F07d7Y4222ytizNoQKODS2wrneI4HcgADF4eBsiUTW9VI7GPLqHWTKYdscgu9lxaG0DkG24LfeIEh40CYgjVPgUKHXWzM0puySJSkrX0KzoxGojoMN_quFvK4RZNrxv5Mmde2w1t66sTimFfez5EKcxoj_YFZIB9sQHiFOf0BxwKrGeDSywZW4dLYcMHFcDLlBqJB83Io45E1c9Q_8Hha_hs9_hFV39hEAAP__TsavHw== # This query verifies stat collection for the tableReader and windower. query T diff --git a/pkg/sql/opt_exec_factory.go b/pkg/sql/opt_exec_factory.go index 874c613a06e4..7a91d0cf43b5 100644 --- a/pkg/sql/opt_exec_factory.go +++ b/pkg/sql/opt_exec_factory.go @@ -30,6 +30,7 @@ import ( "github.com/cockroachdb/cockroach/pkg/sql/span" "github.com/cockroachdb/cockroach/pkg/sql/sqlbase" "github.com/cockroachdb/cockroach/pkg/sql/types" + "github.com/cockroachdb/cockroach/pkg/util" "github.com/cockroachdb/cockroach/pkg/util/encoding" "github.com/cockroachdb/errors" ) @@ -194,7 +195,59 @@ func (ef *execFactory) ConstructInvertedFilter( func (ef *execFactory) ConstructSimpleProject( n exec.Node, cols []exec.NodeColumnOrdinal, colNames []string, reqOrdering exec.OutputOrdering, ) (exec.Node, error) { - return constructSimpleProjectForPlanNode(n.(planNode), cols, colNames, reqOrdering) + // If the top node is already a renderNode, just rearrange the columns. But + // we don't want to duplicate a rendering expression (in case it is expensive + // to compute or has side-effects); so if we have duplicates we avoid this + // optimization (and add a new renderNode). + if r, ok := n.(*renderNode); ok && !hasDuplicates(cols) { + oldCols, oldRenders := r.columns, r.render + r.columns = make(sqlbase.ResultColumns, len(cols)) + r.render = make([]tree.TypedExpr, len(cols)) + for i, ord := range cols { + r.columns[i] = oldCols[ord] + if colNames != nil { + r.columns[i].Name = colNames[i] + } + r.render[i] = oldRenders[ord] + } + r.reqOrdering = ReqOrdering(reqOrdering) + return r, nil + } + var inputCols sqlbase.ResultColumns + if colNames == nil { + // We will need the names of the input columns. + inputCols = planColumns(n.(planNode)) + } + + var rb renderBuilder + rb.init(n, reqOrdering) + + exprs := make(tree.TypedExprs, len(cols)) + for i, col := range cols { + exprs[i] = rb.r.ivarHelper.IndexedVar(int(col)) + } + var resultTypes []*types.T + if colNames != nil { + // We will need updated result types. + resultTypes = make([]*types.T, len(cols)) + for i := range exprs { + resultTypes[i] = exprs[i].ResolvedType() + } + } + resultCols := getResultColumnsForSimpleProject(cols, colNames, resultTypes, inputCols) + rb.setOutput(exprs, resultCols) + return rb.res, nil +} + +func hasDuplicates(cols []exec.NodeColumnOrdinal) bool { + var set util.FastIntSet + for _, c := range cols { + if set.Contains(int(c)) { + return true + } + set.Add(int(c)) + } + return false } // ConstructRender is part of the exec.Factory interface. @@ -491,10 +544,6 @@ func (ef *execFactory) ConstructOrdinality(input exec.Node, colName string) (exe return &ordinalityNode{ source: plan, columns: cols, - run: ordinalityRun{ - row: make(tree.Datums, len(cols)), - curCnt: 1, - }, }, nil } diff --git a/pkg/sql/ordinality.go b/pkg/sql/ordinality.go index 41969d0335af..d2d015034734 100644 --- a/pkg/sql/ordinality.go +++ b/pkg/sql/ordinality.go @@ -36,14 +36,6 @@ type ordinalityNode struct { source planNode columns sqlbase.ResultColumns reqOrdering ReqOrdering - - run ordinalityRun -} - -// ordinalityRun contains the run-time state of ordinalityNode during local execution. -type ordinalityRun struct { - row tree.Datums - curCnt int64 } func (o *ordinalityNode) startExec(runParams) error { diff --git a/pkg/sql/plan.go b/pkg/sql/plan.go index 1e0fd667938e..332f15380347 100644 --- a/pkg/sql/plan.go +++ b/pkg/sql/plan.go @@ -18,7 +18,6 @@ import ( "github.com/cockroachdb/cockroach/pkg/sql/execinfrapb" "github.com/cockroachdb/cockroach/pkg/sql/opt/exec" "github.com/cockroachdb/cockroach/pkg/sql/opt/memo" - "github.com/cockroachdb/cockroach/pkg/sql/physicalplan" "github.com/cockroachdb/cockroach/pkg/sql/sem/tree" "github.com/cockroachdb/cockroach/pkg/sql/sessiondata" "github.com/cockroachdb/cockroach/pkg/sql/sqlbase" @@ -328,37 +327,6 @@ func (p *planMaybePhysical) isPhysicalPlan() bool { return p.physPlan != nil } -func (p *planMaybePhysical) isPartiallyDistributed() bool { - // By default, we assume that the plan is "local" (it doesn't matter - // whether the plan is actually "distributed" or not, only that is not - // "partially distributed"). - distribution := physicalplan.LocalPlan - // Next we check all possible scenarios in which we might have partially - // distributed plans. - if p.isPhysicalPlan() { - distribution = p.physPlan.Distribution - } else { - // Even when the whole plan is not physical, we might have EXPLAIN - // planNodes that themselves contain a physical plan, so we need to - // peek inside of those. - switch n := p.planNode.(type) { - case *explainPlanNode: - if n.plan.main.isPhysicalPlan() { - distribution = n.plan.main.physPlan.Distribution - } - case *explainDistSQLNode: - if n.plan.main.isPhysicalPlan() { - distribution = n.plan.main.physPlan.Distribution - } - case *explainVecNode: - if n.plan.isPhysicalPlan() { - distribution = n.plan.physPlan.Distribution - } - } - } - return distribution == physicalplan.PartiallyDistributedPlan -} - func (p *planMaybePhysical) planColumns() sqlbase.ResultColumns { if p.isPhysicalPlan() { return p.physPlan.ResultColumns diff --git a/pkg/sql/plan_opt.go b/pkg/sql/plan_opt.go index a61204c27053..6c9604740962 100644 --- a/pkg/sql/plan_opt.go +++ b/pkg/sql/plan_opt.go @@ -24,6 +24,7 @@ import ( "github.com/cockroachdb/cockroach/pkg/sql/opt/xform" "github.com/cockroachdb/cockroach/pkg/sql/pgwire/pgcode" "github.com/cockroachdb/cockroach/pkg/sql/pgwire/pgerror" + "github.com/cockroachdb/cockroach/pkg/sql/physicalplan" "github.com/cockroachdb/cockroach/pkg/sql/querycache" "github.com/cockroachdb/cockroach/pkg/sql/sem/tree" "github.com/cockroachdb/cockroach/pkg/sql/sessiondata" @@ -221,8 +222,12 @@ func (p *planner) makeOptimizerPlan(ctx context.Context) error { // We will fallback to the old path. } if err == nil { + // TODO(yuzefovich): think through whether subqueries or + // postqueries can be distributed. If that's the case, we might + // need to also look at the plan distribution of those. m := plan.(*planTop).main - if m.isPartiallyDistributed() && p.SessionData().PartiallyDistributedPlansDisabled { + isPartiallyDistributed := m.physPlan.Distribution == physicalplan.PartiallyDistributedPlan + if isPartiallyDistributed && p.SessionData().PartiallyDistributedPlansDisabled { // The planning has succeeded, but we've created a partially // distributed plan yet the session variable prohibits such // plan distribution - we need to replan with a new factory diff --git a/pkg/sql/walk.go b/pkg/sql/walk.go index c9c1a6f10926..8c00333e3fb6 100644 --- a/pkg/sql/walk.go +++ b/pkg/sql/walk.go @@ -718,10 +718,10 @@ func (v *planVisitor) visitInternal(plan planNode, name string) { // represented physically. We don't yet have a walker over such // representation, so we simply short-circuit. // TODO(yuzefovich): implement that walker and use it here. - if n.plan.planNode == nil { + if n.plan.main.planNode == nil { return } - n.plan.planNode = v.visit(n.plan.planNode) + n.plan.main.planNode = v.visit(n.plan.main.planNode) case *ordinalityNode: n.source = v.visit(n.source) diff --git a/pkg/testutils/localtestcluster/local_test_cluster.go b/pkg/testutils/localtestcluster/local_test_cluster.go index 727bc6e508e5..59c54ecb6227 100644 --- a/pkg/testutils/localtestcluster/local_test_cluster.go +++ b/pkg/testutils/localtestcluster/local_test_cluster.go @@ -120,6 +120,7 @@ func (ltc *LocalTestCluster) Start(t testing.TB, baseCtx *base.Config, initFacto ltc.tester = t cfg.RPCContext = rpc.NewContext(rpc.ContextOptions{ + TenantID: roachpb.SystemTenantID, AmbientCtx: ambient, Config: baseCtx, Clock: ltc.Clock, diff --git a/pkg/testutils/testcluster/testcluster_test.go b/pkg/testutils/testcluster/testcluster_test.go index bef27c6231a8..8069a828da67 100644 --- a/pkg/testutils/testcluster/testcluster_test.go +++ b/pkg/testutils/testcluster/testcluster_test.go @@ -203,6 +203,7 @@ func TestStopServer(t *testing.T) { } rpcContext := rpc.NewContext(rpc.ContextOptions{ + TenantID: roachpb.SystemTenantID, AmbientCtx: log.AmbientContext{Tracer: tc.Server(0).ClusterSettings().Tracer}, Config: tc.Server(1).RPCContext().Config, Clock: tc.Server(1).Clock(),