From 8f00be111998fd8a2a776d3fdff2f2273ac4850c Mon Sep 17 00:00:00 2001 From: richardjcai Date: Wed, 22 Jul 2020 21:50:17 -0400 Subject: [PATCH] sql: Add ownership concept Added ownership when creating objects. Owners have ALL privilege on the object. Currently, ownership cannot be changed, we will need to implement the ALTER OWNER commands for all objects. The privileges CREATE/DROP currently exist to alleviate missing privileges from the lack of ownership, this PR does affect CREATE/DROP privileges. Also added testuser2 certs to allow using testuser2 in logictests to test inheritance between multiple roles. Objects created before 20.2 will have not have ownership explicitly set, however we have logic to check that ownerless objects before 20.2 have admin as their owner if not a system object and node as an owner if it is a system object. Release note (sql change): Added "ownership" concept objects. Objects must have an owner, all objects that do not have owners currently will have admin set as the default owner except system objects. System objects without owners will have node as their owner. By default, owners are the creator of the object. Owners have all privileges to the objects they own. Similarly, any roles that are members of the owner role also have all privileges on the object. Roles cannot be dropped if they own objects. This pr does not add support for changing the ownership of objects, it will be added in a future pr to support dropping roles. --- pkg/ccl/backupccl/restore_job.go | 4 +- pkg/ccl/backupccl/targets_test.go | 2 +- pkg/ccl/importccl/import_table_creation.go | 2 +- pkg/ccl/importccl/load_test.go | 4 +- pkg/ccl/importccl/read_import_mysql.go | 7 +- pkg/ccl/importccl/read_import_pgdump.go | 6 +- pkg/ccl/importccl/testutils_test.go | 2 +- pkg/kv/kvserver/client_rangefeed_test.go | 3 +- pkg/kv/kvserver/gossip_test.go | 4 +- .../reports/constraint_stats_report_test.go | 2 +- pkg/security/certificate_manager_test.go | 5 +- pkg/security/securitytest/.gitignore | 2 +- pkg/security/securitytest/embedded.go | 152 ++++++++----- .../securitytest/test_certs/README.md | 2 + .../test_certs/client.testuser2.crt | 19 ++ .../test_certs/client.testuser2.key | 27 +++ .../securitytest/test_certs/regenerate.sh | 1 + pkg/server/server_test.go | 2 +- pkg/server/status_test.go | 4 +- pkg/sql/authorization.go | 59 +++++ pkg/sql/create_schema.go | 13 +- pkg/sql/create_sequence.go | 3 +- pkg/sql/create_table.go | 24 +- pkg/sql/create_view.go | 4 +- pkg/sql/descriptor.go | 2 +- pkg/sql/drop_role.go | 48 +++- pkg/sql/logictest/testdata/logic_test/owner | 207 ++++++++++++++++++ pkg/sql/logictest/testdata/logic_test/role | 15 +- pkg/sql/rename_database.go | 21 +- pkg/sql/sqlbase/database_desc.go | 5 +- pkg/sql/sqlbase/database_test.go | 2 +- pkg/sql/sqlbase/privilege.go | 15 +- pkg/sql/sqlbase/privilege.pb.go | 64 +++++- pkg/sql/sqlbase/privilege.proto | 1 + pkg/sql/sqlbase/privilege_test.go | 49 +++-- pkg/sql/sqlbase/structured_test.go | 8 +- pkg/sql/sqlbase/system.go | 166 ++++++++------ pkg/sql/sqlbase/system_test.go | 2 +- pkg/sql/sqlbase/validate_test.go | 5 + pkg/sql/table_test.go | 9 +- pkg/sql/tests/system_table_test.go | 3 +- pkg/sql/virtual_schema.go | 7 +- 42 files changed, 765 insertions(+), 217 deletions(-) create mode 100644 pkg/security/securitytest/test_certs/client.testuser2.crt create mode 100644 pkg/security/securitytest/test_certs/client.testuser2.key create mode 100644 pkg/sql/logictest/testdata/logic_test/owner diff --git a/pkg/ccl/backupccl/restore_job.go b/pkg/ccl/backupccl/restore_job.go index 4e013187ae4a..2a523bd3c30d 100644 --- a/pkg/ccl/backupccl/restore_job.go +++ b/pkg/ccl/backupccl/restore_job.go @@ -449,7 +449,7 @@ func WriteDescriptors( // the users on the restoring cluster match the ones that were on the // cluster that was backed up. So we wipe the privileges on the database. if descCoverage != tree.AllDescriptors { - desc.Privileges = sqlbase.NewDefaultPrivilegeDescriptor() + desc.Privileges = sqlbase.NewDefaultPrivilegeDescriptor(sqlbase.AdminRole) } wroteDBs[desc.GetID()] = desc if err := catalogkv.WriteNewDescToBatch(ctx, false /* kvTrace */, settings, b, keys.SystemSQLCodec, desc.GetID(), desc); err != nil { @@ -972,7 +972,7 @@ func createImportingDescriptors( } if details.DescriptorCoverage == tree.AllDescriptors { databases = append(databases, sqlbase.NewInitialDatabaseDescriptor( - sqlbase.ID(tempSystemDBID), restoreTempSystemDB)) + sqlbase.ID(tempSystemDBID), restoreTempSystemDB, sqlbase.AdminRole)) } // We get the spans of the restoring tables _as they appear in the backup_, diff --git a/pkg/ccl/backupccl/targets_test.go b/pkg/ccl/backupccl/targets_test.go index 5837297b0466..08af826f6ddd 100644 --- a/pkg/ccl/backupccl/targets_test.go +++ b/pkg/ccl/backupccl/targets_test.go @@ -46,7 +46,7 @@ func TestDescriptorsMatchingTargets(t *testing.T) { return *desc.DescriptorProto() } mkDB := func(id sqlbase.ID, name string) sqlbase.Descriptor { - return *sqlbase.NewInitialDatabaseDescriptor(id, name).DescriptorProto() + return *sqlbase.NewInitialDatabaseDescriptor(id, name, sqlbase.AdminRole).DescriptorProto() } mkTyp := func(desc typDesc) sqlbase.Descriptor { return *sqlbase.NewImmutableTypeDescriptor(desc).DescriptorProto() diff --git a/pkg/ccl/importccl/import_table_creation.go b/pkg/ccl/importccl/import_table_creation.go index 39b0b2df5372..a1c343ee9122 100644 --- a/pkg/ccl/importccl/import_table_creation.go +++ b/pkg/ccl/importccl/import_table_creation.go @@ -162,7 +162,7 @@ func MakeSimpleTableDescriptor( keys.PublicSchemaID, tableID, hlc.Timestamp{WallTime: walltime}, - sqlbase.NewDefaultPrivilegeDescriptor(), + sqlbase.NewDefaultPrivilegeDescriptor(sqlbase.AdminRole), affected, semaCtx, &evalCtx, diff --git a/pkg/ccl/importccl/load_test.go b/pkg/ccl/importccl/load_test.go index 1dc268ac4517..2cb4af99ba9b 100644 --- a/pkg/ccl/importccl/load_test.go +++ b/pkg/ccl/importccl/load_test.go @@ -57,8 +57,8 @@ func TestGetDescriptorFromDB(t *testing.T) { s, sqlDB, kvDB := serverutils.StartServer(t, params) defer s.Stopper().Stop(ctx) - aliceDesc := sqlbase.NewInitialDatabaseDescriptor(10000, "alice") - bobDesc := sqlbase.NewInitialDatabaseDescriptor(9999, "bob") + aliceDesc := sqlbase.NewInitialDatabaseDescriptor(10000, "alice", sqlbase.AdminRole) + bobDesc := sqlbase.NewInitialDatabaseDescriptor(9999, "bob", sqlbase.AdminRole) err := kvDB.Txn(ctx, func(ctx context.Context, txn *kv.Txn) error { if err := txn.SetSystemConfigTrigger(true /* forSystemTenant */); err != nil { diff --git a/pkg/ccl/importccl/read_import_mysql.go b/pkg/ccl/importccl/read_import_mysql.go index ad68974ca38e..8c0623a55ff7 100644 --- a/pkg/ccl/importccl/read_import_mysql.go +++ b/pkg/ccl/importccl/read_import_mysql.go @@ -392,9 +392,9 @@ func mysqlTableToCockroach( } var seqDesc *sqlbase.TableDescriptor + owner := sqlbase.AdminRole // If we have an auto-increment seq, create it and increment the id. if seqName != "" { - priv := sqlbase.NewDefaultPrivilegeDescriptor() var opts tree.SequenceOptions if startingValue != 0 { opts = tree.SequenceOptions{{Name: tree.SeqOptStart, IntVal: &startingValue}} @@ -404,6 +404,10 @@ func mysqlTableToCockroach( var err error if p != nil { params := p.RunParams(ctx) + if params.SessionData() != nil { + owner = params.SessionData().User + } + priv := sqlbase.NewDefaultPrivilegeDescriptor(owner) desc, err = sql.MakeSequenceTableDesc( seqName, opts, @@ -416,6 +420,7 @@ func mysqlTableToCockroach( ¶ms, ) } else { + priv := sqlbase.NewDefaultPrivilegeDescriptor(owner) desc, err = sql.MakeSequenceTableDesc( seqName, opts, diff --git a/pkg/ccl/importccl/read_import_pgdump.go b/pkg/ccl/importccl/read_import_pgdump.go index 12fe406cd597..252c6977b29a 100644 --- a/pkg/ccl/importccl/read_import_pgdump.go +++ b/pkg/ccl/importccl/read_import_pgdump.go @@ -234,6 +234,10 @@ func readPostgresCreateTable( stmt, err := ps.Next() if err == io.EOF { ret := make([]*sqlbase.TableDescriptor, 0, len(createTbl)) + owner := sqlbase.AdminRole + if params.SessionData() != nil { + owner = params.SessionData().User + } for name, seq := range createSeq { id := sqlbase.ID(int(defaultCSVTableID) + len(ret)) desc, err := sql.MakeSequenceTableDesc( @@ -243,7 +247,7 @@ func readPostgresCreateTable( keys.PublicSchemaID, id, hlc.Timestamp{WallTime: walltime}, - sqlbase.NewDefaultPrivilegeDescriptor(), + sqlbase.NewDefaultPrivilegeDescriptor(owner), false, /* temporary */ ¶ms, ) diff --git a/pkg/ccl/importccl/testutils_test.go b/pkg/ccl/importccl/testutils_test.go index eda74e88bddf..c2841106d913 100644 --- a/pkg/ccl/importccl/testutils_test.go +++ b/pkg/ccl/importccl/testutils_test.go @@ -50,7 +50,7 @@ func descForTable( name := parsed[0].AST.(*tree.CreateSequence).Name.String() ts := hlc.Timestamp{WallTime: nanos} - priv := sqlbase.NewDefaultPrivilegeDescriptor() + priv := sqlbase.NewDefaultPrivilegeDescriptor(sqlbase.AdminRole) desc, err := sql.MakeSequenceTableDesc( name, tree.SequenceOptions{}, diff --git a/pkg/kv/kvserver/client_rangefeed_test.go b/pkg/kv/kvserver/client_rangefeed_test.go index 8ceabc28e91a..375447699952 100644 --- a/pkg/kv/kvserver/client_rangefeed_test.go +++ b/pkg/kv/kvserver/client_rangefeed_test.go @@ -65,7 +65,8 @@ func TestRangefeedWorksOnSystemRangesUnconditionally(t *testing.T) { const junkDescriptorID = 42 require.GreaterOrEqual(t, keys.MaxReservedDescID, junkDescriptorID) junkDescriptorKey := sqlbase.MakeDescMetadataKey(keys.SystemSQLCodec, junkDescriptorID) - junkDescriptor := sqlbase.NewInitialDatabaseDescriptor(junkDescriptorID, "junk") + junkDescriptor := sqlbase.NewInitialDatabaseDescriptor( + junkDescriptorID, "junk", sqlbase.AdminRole) require.NoError(t, db.Txn(ctx, func(ctx context.Context, txn *kv.Txn) error { if err := txn.SetSystemConfigTrigger(true /* forSystemTenant */); err != nil { return err diff --git a/pkg/kv/kvserver/gossip_test.go b/pkg/kv/kvserver/gossip_test.go index a99d401b24e0..6b52f8901ead 100644 --- a/pkg/kv/kvserver/gossip_test.go +++ b/pkg/kv/kvserver/gossip_test.go @@ -219,13 +219,13 @@ func TestGossipAfterAbortOfSystemConfigTransactionAfterFailureDueToIntents(t *te txB := db.NewTxn(ctx, "b") require.NoError(t, txA.SetSystemConfigTrigger(true /* forSystemTenant */)) - db1000 := sqlbase.NewInitialDatabaseDescriptor(1000, "1000") + db1000 := sqlbase.NewInitialDatabaseDescriptor(1000, "1000", sqlbase.AdminRole) require.NoError(t, txA.Put(ctx, keys.SystemSQLCodec.DescMetadataKey(1000), db1000.DescriptorProto())) require.NoError(t, txB.SetSystemConfigTrigger(true /* forSystemTenant */)) - db2000 := sqlbase.NewInitialDatabaseDescriptor(2000, "2000") + db2000 := sqlbase.NewInitialDatabaseDescriptor(2000, "2000", sqlbase.AdminRole) require.NoError(t, txB.Put(ctx, keys.SystemSQLCodec.DescMetadataKey(2000), db2000.DescriptorProto())) diff --git a/pkg/kv/kvserver/reports/constraint_stats_report_test.go b/pkg/kv/kvserver/reports/constraint_stats_report_test.go index c388b0aaec1a..f875ca7075ec 100644 --- a/pkg/kv/kvserver/reports/constraint_stats_report_test.go +++ b/pkg/kv/kvserver/reports/constraint_stats_report_test.go @@ -758,7 +758,7 @@ func compileTestCase(tc baseReportTestCase) (compiledTestCase, error) { } } sysCfgBuilder.addDBDesc(dbID, - sqlbase.NewInitialDatabaseDescriptor(sqlbase.ID(dbID), db.name)) + sqlbase.NewInitialDatabaseDescriptor(sqlbase.ID(dbID), db.name, sqlbase.AdminRole)) for _, table := range db.tables { tableID := objectCounter diff --git a/pkg/security/certificate_manager_test.go b/pkg/security/certificate_manager_test.go index 579b283c515c..18de9f457393 100644 --- a/pkg/security/certificate_manager_test.go +++ b/pkg/security/certificate_manager_test.go @@ -40,7 +40,7 @@ func TestManagerWithEmbedded(t *testing.T) { t.Error("expected non-nil NodeCert") } clientCerts := cm.ClientCerts() - if a, e := len(clientCerts), 2; a != e { + if a, e := len(clientCerts), 3; a != e { t.Errorf("expected %d client certs, found %d", e, a) } @@ -61,6 +61,9 @@ func TestManagerWithEmbedded(t *testing.T) { if _, err := cm.GetClientTLSConfig("testuser"); err != nil { t.Error(err) } + if _, err := cm.GetClientTLSConfig("testuser2"); err != nil { + t.Error(err) + } if _, err := cm.GetClientTLSConfig("my-random-user"); err == nil { t.Error("unexpected success") } diff --git a/pkg/security/securitytest/.gitignore b/pkg/security/securitytest/.gitignore index 8837e7fa35cf..d0e27b43d6c4 100644 --- a/pkg/security/securitytest/.gitignore +++ b/pkg/security/securitytest/.gitignore @@ -1,2 +1,2 @@ # Override root gitignore rule on *.test* -!client.testuser.* +!client.testuser*.* diff --git a/pkg/security/securitytest/embedded.go b/pkg/security/securitytest/embedded.go index 4cddd6907707..bb950e5ce93e 100644 --- a/pkg/security/securitytest/embedded.go +++ b/pkg/security/securitytest/embedded.go @@ -2,19 +2,21 @@ // sources: // test_certs/ca.crt (1.111kB) // test_certs/ca.key (1.675kB) -// test_certs/client.root.crt (1.099kB) -// test_certs/client.root.key (1.679kB) +// test_certs/client.root.crt (1.103kB) +// test_certs/client.root.key (1.675kB) // test_certs/client.testuser.crt (1.107kB) -// test_certs/client.testuser.key (1.675kB) +// test_certs/client.testuser.key (1.679kB) +// test_certs/client.testuser2.crt (1.107kB) +// test_certs/client.testuser2.key (1.679kB) // test_certs/node.crt (1.188kB) -// test_certs/node.key (1.675kB) +// test_certs/node.key (1.679kB) // test_certs/mt/ca-client-tenant.crt (1.111kB) -// test_certs/mt/ca-client-tenant.key (1.675kB) +// test_certs/mt/ca-client-tenant.key (1.679kB) // test_certs/mt/ca-server-tenant.crt (1.111kB) -// test_certs/mt/ca-server-tenant.key (1.679kB) +// test_certs/mt/ca-server-tenant.key (1.675kB) // test_certs/mt/client-tenant.123456789.crt (1.107kB) // test_certs/mt/client-tenant.123456789.key (1.679kB) -// test_certs/mt/server-tenant.crt (1.168kB) +// test_certs/mt/server-tenant.crt (1.155kB) // test_certs/mt/server-tenant.key (1.675kB) package securitytest @@ -84,7 +86,7 @@ func (fi bindataFileInfo) Sys() interface{} { return nil } -var _test_certsCaCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x94\x4b\xcf\xba\x4a\x1a\xc4\xf7\x7c\x8a\xd9\x93\x09\x37\x45\x58\xfc\x17\xdd\x74\x73\x11\x1a\x69\x6c\xe5\xb2\x03\x14\x14\x14\x44\xe4\xe6\xa7\x9f\xbc\xef\x24\x33\xc9\x39\xe7\x59\xfe\x16\x95\x27\x55\x95\xfa\xf7\xcf\x41\x6c\x39\xfe\xbf\x0c\x1c\x32\xc7\x74\x0c\xc0\xf0\x2f\xe5\x88\xe3\x20\x58\x1b\x06\xb8\xaa\x15\x98\x1d\x08\x2a\x87\x66\x6b\x1a\x1c\xd4\xb9\x80\x4e\x0a\x2c\x3b\x9e\x54\x4b\xca\x08\x03\x3e\xac\x9a\xfe\xd6\xdc\x2d\x7d\x16\x21\xa0\x83\x09\x10\x78\x73\x24\x74\x66\x0c\x12\x74\xa6\xd4\xc5\xf3\x03\xe5\xb2\xff\x2e\x9e\xfa\x2d\x91\xab\xc5\x64\x80\xc1\xca\x3f\x43\x40\x18\xc2\xfe\x94\xc8\x9f\x35\x97\xcd\x3a\x33\x20\xa2\x0c\x5c\xcd\x59\x5c\x39\x82\x80\x4c\x50\xb3\xf8\x35\x90\x09\x83\x99\x39\x8b\xdf\x5f\xc6\xaa\xff\x31\x62\x0c\x0b\xae\x01\xfd\xaf\x58\xc7\x8c\xd3\xff\xc5\xb8\x0c\xe1\x33\x81\xc4\x02\xd2\x09\x83\x85\x10\x2a\xeb\x75\xa6\xec\xa7\x24\xf2\x3b\x07\xfb\x90\x38\x0e\x74\xea\xbf\xbe\x8f\x4d\x00\x0e\x06\xa0\x1a\xf8\xf1\x00\x1a\x95\x6b\x00\x8a\xc1\xe2\xec\x3a\x6d\x6a\x6c\x58\x95\x45\xf7\x39\xf1\x30\x2e\x6d\x70\x5d\x4d\x90\x00\x38\x29\x2c\x58\xf5\xb2\xdd\x94\x82\xe8\x83\x00\x85\x48\xcd\xaf\xc5\x85\x71\xaf\xb3\x90\x6e\x36\x3d\xde\xd2\x50\xa0\xdd\xa7\x63\xe4\xbc\x73\xfd\xbb\x5d\x8c\xd2\xc7\xa7\xce\xc4\xfb\xa3\x31\xee\x6b\xd5\x0e\x8f\xba\x15\x66\xf1\xfb\x70\xe8\x36\xdf\xb4\xef\x4a\xf5\x52\x5a\xf6\xc0\x45\xcb\x98\x9d\xbe\x65\xb6\x97\x5d\x43\x88\x62\x76\x12\xbf\x26\x1e\xe6\xe3\x4e\x10\x70\x0a\x3c\xdf\x14\xd5\xc1\x36\x71\x15\x18\xbc\x55\xbf\x64\xe8\x48\xc2\x53\xc8\x6d\xe1\x38\x6f\x3a\x28\x1e\x43\x8e\xa0\x45\x4f\xa5\xb1\xb1\x42\x7f\xa1\xbe\x0c\x16\x9e\x09\x7b\x7c\xdc\x28\x9e\x87\x35\x37\x4c\xbb\x53\x7d\xe4\x35\xff\x85\x85\xc6\xc0\x32\x4a\xcc\xb2\x38\x4a\xc9\x95\x7a\xbe\x5d\xa9\x7c\x02\xb9\x90\x17\x6c\x25\x6e\xb7\x21\xdd\x0c\x84\xa4\xe1\x79\xef\x7a\x76\xf6\x8a\xbf\xc1\xc8\xf2\x17\xdd\x93\x8b\xe3\xaf\xa3\xdb\x00\x07\x9c\xfc\x60\xb8\x32\x69\x15\xe3\x8f\x98\x3f\x26\x73\x2b\x2c\x7d\xcd\xbd\x79\x69\xb7\x17\xd3\xca\x42\x5a\xab\xf4\xbb\x25\xd3\x46\x7c\xc1\x1b\x16\xa3\x7e\xb6\xd8\xc3\xd3\x67\x07\x01\x0a\x60\xb7\x26\xf3\x1e\x81\xc3\x4f\x94\x36\xd5\x20\x28\x35\x0c\x01\x31\x38\x30\xd2\x19\x57\x09\x3a\x87\x22\x03\xd4\x16\x20\xa8\x66\x58\x61\x28\xfc\xb4\xf2\x9f\xda\xf7\x1b\x1f\x06\xf7\x54\x6c\x6f\x7c\xe0\x72\xde\xc7\x7a\x11\x3d\x8b\xa2\xbb\xfa\xbd\x15\xfe\x0b\xf1\xbd\x71\x6e\xc9\xae\x97\xe0\xc3\x2e\xed\x08\xd2\xb5\x51\x2a\x45\x8b\x5f\x5d\x1e\x5c\x88\x54\xb3\xf9\xe9\x42\x6c\x5a\x97\x0a\x54\xfd\xdd\xe5\x34\x29\xc6\x53\xb6\xe8\x8d\x91\xaf\xdd\xd6\xa4\xf5\x6b\x12\xdb\xfc\xee\x1c\x3c\x68\x26\x4e\x61\x37\xe2\x90\xbd\xcb\x28\x4f\xce\x8a\xba\x5f\x9e\x7a\xb0\x68\xc1\x10\x86\xc8\x43\xb1\x3c\xc6\xae\xc7\x2d\xcb\xfb\x38\x8c\xe7\xfa\xfd\xd0\xc7\x1e\x55\x59\x90\x81\x47\x03\xee\xa7\x4a\xe9\x95\x56\x0e\xd4\xcb\x91\x36\x70\x7a\x9d\x3e\xab\xb4\xa9\xd3\xb7\xa5\xd2\xc2\x85\x6a\x63\x7d\x27\x62\xe4\xdb\x1d\xe2\xae\x37\xbd\xa2\xe2\x21\x0e\x8c\x75\x96\xdf\x53\x24\xf3\x8a\xac\x96\x0d\x2f\x47\x1f\x3e\x6d\x23\x95\xdf\x7d\x6e\x87\xc8\x7c\xf4\xdf\x5d\xe1\xcb\x4d\xd8\xbc\x71\xc4\x06\x32\x92\xb4\x6d\xbb\xfe\x61\x72\x6c\x7a\xdc\x9e\xda\x6e\x78\x50\x5f\xa2\x93\xb9\xfd\xa2\x5b\x2b\xb2\x5a\x30\xf2\x24\xb3\x95\x62\x8b\x25\x71\x91\xf0\xd3\x99\xbc\xd3\x23\x29\x5c\x72\xa8\xf6\xc3\xb8\x5e\x3c\x79\xfa\x9a\x8b\x25\x31\xce\x6c\x5f\x64\xd2\xc7\xd2\xfa\x3e\xcb\x75\xfe\xf3\x87\xfb\x9d\x09\xec\xa3\xbf\x4f\xc7\x7f\x02\x00\x00\xff\xff\x44\x8b\xd3\xb6\x57\x04\x00\x00") +var _test_certsCaCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x94\xb9\xb2\xb3\xb8\x16\x85\x73\x9e\xe2\xe6\xd4\x2d\x33\x79\x20\xe8\x40\x02\x19\x0b\x2c\x40\x20\x1b\x43\xc6\x64\x01\x36\xc6\x78\x40\xc6\x4f\xdf\x75\x4e\xf0\x07\xdd\xbd\xc3\x2f\x58\xb5\xab\xd6\xaa\xef\xff\x3f\x07\x91\x83\xfd\xff\x59\x28\x62\x78\x8b\x2d\xc0\xd0\x2f\x95\x08\xc6\x36\xfc\x5a\x16\xa8\x65\x0e\x04\x86\x80\xe3\x08\x04\xeb\x98\xe3\xea\x7b\x88\x36\x71\x18\x35\xc5\x6a\x38\x29\x89\xae\x08\x9b\xa6\xae\x37\x64\xb8\x99\x4a\x1f\x50\xb4\x87\x14\x08\xc9\xfb\xa2\x98\x40\xe0\x00\xf5\x80\xac\x86\xb8\x54\x33\xbb\x5c\x77\xa7\x34\xf1\x07\x12\x1d\x04\x12\xa9\x7d\xa4\xd4\x46\xe2\x63\x17\x9a\xff\x28\x7b\xb3\x49\x35\xce\xa9\x82\xc4\xae\x29\x7d\x89\x74\x40\xf8\x5f\x3c\x13\x96\x8a\xc0\x26\x9f\xa4\x29\x7d\xf2\xfd\x61\xe4\xf3\x87\x75\xe0\x41\x22\x2c\x10\xf8\x0d\xf3\x90\xb8\xfe\x09\x93\x52\x8d\x7f\xb6\x0c\x30\xc8\xfd\x23\x04\x84\xd9\xc8\x9f\x52\xed\x35\x17\xda\xb6\xcb\x2d\x68\x53\x66\x59\x20\xc6\xff\x7c\x1f\x42\x0a\x6c\xce\x51\x28\x01\xdb\xb2\x00\x1d\x2c\xce\x11\x04\xa4\xe5\x8a\x18\x33\x55\x29\xdf\xc1\xec\xd1\x7d\x0e\xbf\xea\x26\x5e\x5e\xb7\xea\x64\xb5\x1f\x57\x73\x9f\xeb\x3d\x71\x2f\xb9\xc9\x9e\x70\x1b\xb2\x11\xd6\x57\xe9\xbc\x9e\x4c\x4e\x74\x6d\x09\x4b\xb3\x2a\x66\xb9\x1c\x2e\x29\x7f\x9c\x7d\x0f\x78\x21\xec\x83\x50\x14\xd3\x2a\x56\x92\xa3\xa2\x18\x9f\x1d\xcd\x76\x21\x0e\x72\x5f\x31\x4e\xdf\x26\x6b\x37\x66\x9b\x4b\xba\x7a\x7a\x6b\xc7\x68\x91\x9d\x69\xd5\xad\xfa\xb6\xda\x9a\x6f\x23\xde\x1b\xa4\x3a\xc1\x4a\x76\x9d\x4d\x95\xd5\x5a\x5f\xa5\xf6\x12\x36\xf7\xe1\x91\x7c\x9e\x27\xd3\xa5\xaa\x4e\x6f\xb7\xb3\x52\xf5\xae\x74\x2d\xda\xe2\x35\xe6\x4c\x09\x7c\x2d\x9c\xef\xf4\xf0\x59\xc4\x9b\xee\xc2\x8b\xc8\x6e\xc3\x64\xa3\xa4\x08\x31\x52\x1a\xa1\xfc\x98\x91\xe3\xa5\xdb\x49\x7d\x05\x97\xc3\x5c\x65\x0c\xbb\x8f\x7b\xf3\x96\xf4\x78\xbf\x2f\xef\x23\xb8\xfb\x5a\x05\xd7\x85\x12\x3d\x77\x76\xb6\x1a\xab\x37\x10\x7a\x45\x8e\x64\x08\xa9\xf7\x1a\x1b\x18\x14\x66\x14\xb4\xfd\xfa\xb2\xc0\xd5\x83\x31\x9c\x73\xe5\x1d\xef\x06\x55\x72\x64\x1c\x5d\x5d\xc7\xf1\xb6\xab\xa2\xba\x9f\x02\xf8\x78\x5d\x66\x6d\x08\x74\x81\x4e\x4d\x58\xaa\xbe\x53\x5a\x40\x20\x00\x72\xd2\x13\x8b\x0a\x9b\xa7\xf6\x31\x52\x42\x40\x77\x0b\x08\xa8\x2d\x01\xbe\xbf\x10\x88\x7f\x86\x54\x21\x81\xe0\x42\x50\x4c\x40\x0a\xc1\x79\x63\x01\x8a\xfe\x6b\x7d\xf6\x6f\x63\xf6\x60\xd5\x54\x30\xc9\x05\xe9\x42\x56\xc7\x57\xb6\x84\x28\xf9\x30\xb5\x5c\x95\xfd\x52\x53\xf5\x7d\xb2\xf4\xcb\xf6\x90\xf1\x63\x52\xe6\x61\xdd\x6f\x57\x24\x57\x0f\x3a\x9d\x96\x11\x40\xaf\xd3\x3a\x6a\xd6\x5a\xc4\xaa\x58\xfa\x9e\x56\x4f\xcb\x16\xaa\x61\x0d\xe3\xf6\xa1\x4d\xc7\x36\x30\xe5\x0e\x3a\x75\x97\x5f\x41\x14\x0e\xcf\xc1\xda\x75\x5e\xa0\xfa\x72\x14\x18\x43\x5b\x78\xc0\xaa\x23\x54\x06\xcf\xf9\x5a\xc5\x9d\xe3\x4a\xbd\xba\xd3\x56\x95\x99\x70\x52\xbf\xaf\xf1\x38\xea\x76\x7b\x1b\xf7\x38\x78\x29\xe0\x12\x9e\x9d\xea\xee\x47\x16\xec\xe9\x58\xa9\xeb\x77\x9f\x74\x5c\x6b\xd5\x60\x3e\x3d\x96\x22\x1d\x30\xb8\x24\xb5\x64\x04\x1d\x2b\x0e\xee\x7e\x47\x7b\x97\x6d\xb5\x97\x2c\x64\xbf\x1e\xfc\x3a\x8b\xd3\xf5\xdd\xe8\xf7\x26\x9b\xee\xeb\x7a\xc7\x8c\xe2\x16\xd5\xdf\x29\x5c\xd4\x27\x33\xc2\x85\x32\x25\xce\x61\x2a\xef\xb3\x64\xde\x04\xaf\x0b\xf7\x72\x0e\xb4\xc5\x1b\xe5\x4f\x53\x2e\x97\xe7\x6b\xbf\x7e\x24\x7e\xa1\x59\xfa\xec\x08\x8f\xf5\xb3\xb9\xa9\x6b\xc0\x60\x99\x6d\x56\xcb\x2a\x4a\x8d\xe7\xe6\xec\xe0\xf6\x69\x70\x5b\xd2\xdb\x6f\x66\x58\xcb\x64\x78\x1d\xe5\xa3\xff\xfc\x4b\xfa\xd5\x04\xf2\xed\x7f\xab\xe3\xef\x00\x00\x00\xff\xff\xd8\x12\x8f\x74\x57\x04\x00\x00") func test_certsCaCrtBytes() ([]byte, error) { return bindataRead( @@ -100,11 +102,11 @@ func test_certsCaCrt() (*asset, error) { } info := bindataFileInfo{name: "test_certs/ca.crt", size: 1111, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x5c, 0xf1, 0xfd, 0xe6, 0xf9, 0xbb, 0xe8, 0xa3, 0xc6, 0x56, 0x7b, 0x72, 0x5e, 0x8d, 0x12, 0x8a, 0x8, 0xcc, 0x34, 0x5e, 0x6e, 0x55, 0x3, 0x21, 0x8a, 0x71, 0xe1, 0x7f, 0xbe, 0x7e, 0xb, 0x3a}} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xf2, 0xbf, 0x7e, 0x1d, 0x7b, 0x4b, 0x69, 0xed, 0x31, 0xb8, 0xda, 0x9a, 0x13, 0x9e, 0x58, 0xd3, 0x7f, 0x3a, 0xf1, 0xb3, 0xa2, 0x2f, 0x8d, 0x3d, 0xc0, 0xa2, 0x95, 0x27, 0x1a, 0x99, 0xc7, 0xa2}} return a, nil } -var _test_certsCaKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\xb7\x12\xab\xda\x01\x85\xe1\x9e\xa7\x38\x3d\xe3\x21\x0a\x44\xe1\x62\x13\x37\x22\x88\x9c\x3a\x72\x14\x41\x44\xf1\xf4\x1e\x9f\xdb\xde\xd5\xae\xe6\xef\xbe\xff\xfc\x7f\xbc\xa4\xa8\xe6\x1f\xc7\x05\x7f\x2c\x47\x0d\x80\x27\xfd\xd1\xa4\xf8\xef\x83\x18\xaa\x2a\x4d\xb5\xca\x03\xa0\x09\xc0\x96\xc0\xa5\xb2\xd3\xf3\xe8\x21\x5f\x57\xf9\xb4\xf9\x28\x1f\x55\x10\x94\x3f\x19\xc4\x80\x3f\x28\xcf\xfa\x71\xd5\x48\x57\x18\x6e\x02\x4b\x74\x44\x26\x43\xca\xbc\xf0\xe6\x00\x4b\x68\x7a\x91\x1e\xb6\x83\xd9\xd3\x36\x79\x46\xc0\x6a\x66\x0b\xf3\x9d\xd8\x4c\x5b\x3d\x50\x73\x17\xf6\x57\xc7\x40\xc7\xe5\x14\x27\x8d\xbe\xef\xf7\x44\xdf\xc9\x32\x55\x4c\x81\x54\x0a\x5c\xc3\x6b\x4f\xfd\xbb\x4a\x5f\xa4\x26\x60\x61\xe4\xf9\xf8\x2d\x4b\xeb\xe9\xb2\x18\x26\x25\x40\x37\x65\x9c\x59\xa1\x2c\xd5\x96\x80\x2a\xdd\x4c\xf2\x2a\x81\x7d\xb0\x0c\x62\xee\x49\x4f\x08\x8f\xbb\x8e\x21\x5e\x5c\x42\xec\xbd\xe2\x98\x97\x6d\x92\xe0\x42\x3d\xec\x25\xb9\x34\xa5\xeb\xd2\x53\x73\x92\xc9\xef\x5c\xf4\x69\xce\x12\xd6\x0b\x12\x29\xc6\x72\x95\xbb\x44\x5c\xda\xba\x09\x6b\x84\x41\x63\xde\x41\x31\x48\x45\xe3\xc3\xb1\xe9\xd5\x30\x12\x27\x78\x69\x3a\x4c\xe7\xe8\xb6\x76\x2f\x9b\xed\x97\x51\xa8\xe6\x6f\xd7\x7a\xa0\x02\xdf\xb4\xd6\xd2\x23\x7e\x78\xb4\xe1\xd9\x70\xc8\x0f\x04\xbb\x96\xee\x8b\x12\xec\x0b\x4f\x6a\x45\x7c\x8e\xd4\xc2\x5e\xe9\x73\x97\x0a\x89\xf6\x22\x71\x39\x15\x6f\xd0\xb9\x53\x15\x81\x0d\x78\x30\xa9\x3c\x10\xee\xdd\x6f\x2a\xd0\xdd\x05\xbe\xce\x94\x8b\xb8\xa7\xbd\x70\x6d\x54\xe4\x42\x0c\xa6\x32\x1c\x05\x07\x4f\xb7\xd7\x48\xdd\x41\x94\xb6\x43\x51\x7a\x8a\xea\x08\x94\xd8\x18\x7e\x6b\xf9\xea\xbb\xa8\x54\x12\xff\x0c\x23\xe3\x4c\x11\x79\x7a\xe5\x88\xb8\x90\x27\x3f\xea\x42\x94\x87\xc9\x8f\x6f\x7d\x61\x58\x83\x2f\xf8\x56\xf2\xea\x68\x09\x63\x0b\x04\x5e\xb8\x7c\x0c\x18\x12\x30\xbf\x33\x91\x0a\xdb\xda\x5b\xd7\xed\x4b\xe2\x2f\xe8\x67\xe3\xa1\x22\xaf\xb9\xd4\x80\x02\xfd\xce\x1e\x54\xb1\xdd\x3c\xaa\x18\x12\x36\x3b\xb7\xe8\x58\xf3\xe3\x06\x66\x97\xce\x58\xea\xe9\x3a\x4f\x31\x79\x6a\x42\x0f\xe7\x50\xd8\x33\xdc\xa9\x52\xf5\x22\x57\x8a\x8d\x94\xfe\x66\xae\xb2\xdf\x0f\x98\xff\xfc\xf4\xfa\xf3\x2c\x97\xe6\x95\x1a\xee\xf9\xd1\x5b\x8d\x5a\x3c\xb3\xf4\xd6\x2c\x8b\xda\x94\x18\x47\xb8\x0b\x4b\x36\x87\x39\xf6\x80\x93\x6f\x89\x62\x90\xb5\x3e\x72\xf5\x14\x56\x05\x83\xb6\x58\xf5\xc7\x64\xad\x8b\x19\x0b\xd1\x82\x3c\x83\xbf\xb8\x31\x12\x2d\xe2\xc7\xdb\xce\xf3\x37\xac\x66\xcb\x8e\xc4\xdb\x7f\x18\x97\xc6\x3d\x5d\xcb\xb5\x92\x1c\x85\xb5\xb9\x21\x92\x26\xf7\x24\x29\x09\x75\x2c\x01\x6e\xee\xf4\xb9\xca\x50\x1d\x78\x4f\x55\xbe\x78\x1a\x82\x88\x19\x5e\x60\xea\x7e\x2c\xad\x6a\xa0\xba\xc4\xdd\x8e\x1a\xd2\xa4\xf2\x40\xff\x0d\xb2\x9b\x76\x00\x71\xf1\xd1\xd1\xb9\x96\xc0\xdc\x2c\x64\xb5\x9f\x70\x6c\x31\x9d\xc7\xc3\x71\x87\x8c\x53\x72\xca\x63\xda\x4c\xbe\xb5\xe6\x87\xf8\xfe\x15\x2d\x5d\x05\x6e\x7f\xb3\xd4\x6f\xac\xed\x99\x0e\x38\x81\x5e\x10\x96\x75\x50\x9a\xed\xf6\x89\x49\xf8\xa5\xa2\x8b\xea\xd7\x34\x47\x1f\xa3\xed\x48\xf7\xf5\x26\xd4\x01\x76\x31\xf7\xe3\x65\xc0\x84\xef\xc2\xc0\x2c\x16\x69\x87\x4d\xf0\x4f\xf1\x0d\xc8\x11\x11\xae\x6b\xe2\xd9\x09\x10\x04\x5d\xf2\x24\xd9\x8b\x33\x66\x0d\x91\x20\xd3\x4a\x83\x56\xea\x4f\xb2\x1f\xa0\x12\x5e\x8b\x62\xcf\x67\xe4\xde\x7d\x3b\x3f\xb2\xa8\x3d\x2f\x82\x84\xb1\x1a\xc7\xb9\x8d\x14\x43\xa3\x46\xfb\xb7\x76\x64\xd9\xfc\x1c\x39\x99\x70\x49\x24\x17\x43\xb6\x36\x49\x67\xaa\x5b\x75\x86\x98\xcf\x1b\x56\xb3\xba\x79\x06\xd1\xd5\xa8\xba\xe7\x20\x48\xce\xcd\xc5\xa6\x12\xb5\x7e\x85\xf4\x28\xc7\x0e\x12\xbd\x18\xe0\xb1\x28\x09\x5d\x2e\x61\x16\x5d\xc9\xf5\xa9\x99\xb6\xaf\xfc\x8c\x6f\x20\xf0\xda\x35\x17\xea\x98\x4f\xd8\x3c\x23\x57\xb2\x19\x58\x6f\x23\xd4\x14\xc3\x9b\xf0\xba\x11\x97\x79\xa3\xcd\x8c\x9a\x85\x3a\x55\xb7\x2e\x86\x1b\xf5\x96\xf5\xe5\xb2\xa4\x05\xee\xfc\xd6\x3c\x46\x25\x9a\x35\x5b\x0f\x42\x5c\xd8\xb8\x73\x87\xce\x1b\xd0\x33\xfd\x4a\x3d\xcd\x79\x8d\x64\x7c\x20\xc5\x65\x8a\x96\xe5\x01\xab\x98\x94\x02\x66\xb1\x5e\xe8\xcf\x93\xbc\xf9\x68\x26\x16\xf4\x5a\x89\x84\x56\xde\xf8\x98\xf8\x07\x2a\xa6\x65\x4c\xda\x56\x4e\xc1\xbc\x61\xa4\xe5\xb2\xb6\xde\x44\x27\x64\x5b\x98\x96\xe2\xb7\x02\xd3\x23\x34\x0f\x5d\x2d\x21\x45\xfa\xb4\x35\xbe\x96\x6b\x23\xe6\x0d\xc3\xe5\xb6\x66\x81\xb2\x02\x15\x49\xd3\xc9\x2d\x17\x79\x74\x5a\xdd\x83\x12\x8e\x40\xf6\xdf\xd2\x0f\x29\x04\xe5\x6b\x73\xa3\xa4\xaf\x37\xb5\x51\xdb\x68\xc9\x2e\xbe\xe8\x7d\x33\x06\xf1\x29\x68\x1b\xed\x2c\xd3\x27\x0e\xfd\x87\x8b\xce\x45\x80\x92\x76\x0e\x89\x5d\x02\x6a\x90\x58\xa6\x11\x69\x2f\x09\x09\x0a\x59\xea\x0d\x93\x8a\x09\xea\x28\x58\x25\x84\x0c\xd9\x0f\x40\x74\x1a\x4a\x68\x9d\x4e\xa4\xcb\xf1\x7d\x49\xab\x7f\x9c\xd7\x62\x1f\xd7\xa5\xe3\xf7\xd0\x12\x03\xd1\x79\x1a\xcb\x71\xe0\x9e\x90\xe5\x11\xeb\x60\x52\x80\x7e\x17\x67\x89\xf6\x6f\x61\xe4\x41\x96\xea\xba\x1e\xd4\x2d\x2a\x57\x8f\xb9\x53\x64\x91\xa4\xce\x97\x75\xbc\xe1\x27\x4b\x7e\xfc\x51\x66\xcd\x43\x84\x81\x6c\x1b\x6a\x6c\x21\x11\xf8\xe6\xa0\x6b\x16\x41\xf3\xd6\x8f\xbb\x77\x17\x8a\xee\x3f\xe3\xbd\x74\xe2\x7a\xe9\x0f\xf5\x53\xcf\xa7\x32\x7d\x95\x67\x47\x3c\x2b\x6d\x13\xda\xe6\xd9\xe8\xf8\xe7\x39\x15\x6c\xe7\x2c\xa9\x45\x22\x70\x48\x76\x12\xd4\x54\xec\xe1\x67\x9e\xda\xb2\xa9\x5d\x3f\xb0\x25\x1d\xac\xc4\x34\xfd\x16\x15\x77\x44\x46\x1d\x58\x34\xc7\x13\x12\xbd\xe0\xe7\xe3\xf9\xfc\x2f\xf2\x97\x14\xc9\x14\xff\x9d\x9a\xff\x05\x00\x00\xff\xff\x4a\xf1\xd0\x42\x8b\x06\x00\x00") +var _test_certsCaKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x95\x37\x12\xa3\x50\x02\x05\x73\x4e\x31\xb9\x6a\x0b\x23\x6c\xf8\x81\x2f\x40\x78\x84\xcf\x00\xe1\x41\x78\x7b\xfa\xad\x99\x4d\xf7\xa5\x2f\xe9\xea\xa4\xff\xf3\x77\x3c\x94\x14\xe3\x8f\xf3\x01\x7f\x2c\x47\xf1\x81\x0b\xff\xa8\x30\xfa\xf7\x20\xba\xa2\xc0\xe1\x50\x78\x00\x54\x01\xd8\x10\x5c\xaa\xe8\x0a\xe3\x2f\x74\x2e\x92\x51\x46\xb0\x0e\xb2\x15\x9e\x5a\xef\x85\x01\xab\x6a\xf0\x17\xf5\xf7\xb2\x1c\xbd\x33\xe3\xe6\x01\x3d\xce\x1c\x90\x17\xed\xa3\x1b\x4a\x80\xbb\x48\xdb\xd7\x8d\xe3\xbb\x46\x5d\xb5\x53\x0b\x2b\x8b\x0d\x60\x60\xa5\x88\x44\xf9\x0d\x1d\x35\x27\x0e\x5d\xb7\x81\x5f\xbe\xcd\xd8\x92\x1a\x9e\x6e\x55\x98\xaf\x5e\xbb\x11\xe2\x3d\x17\x7e\xce\xc4\xbe\xcc\x75\x1c\x4f\x58\x53\xf2\xc6\x42\x82\xa9\x94\xbd\x3c\xf1\xec\xf5\x24\xdb\xf4\xc4\x3b\x26\x89\xf1\xd2\x6a\x25\xa9\xaf\xd7\x54\x3a\x0b\xac\x13\xc3\xaf\x90\x7f\x51\x07\x21\xa2\xde\xdf\xde\x1b\x31\x8e\x96\x4d\x3e\x23\x54\xed\x78\x57\xe6\xb4\xcb\xfc\xf0\x2b\x34\x15\x2e\xbd\x9d\xd2\x76\xf4\xf3\x2e\x51\x7a\x57\xec\x68\x2c\x03\x34\xc0\x68\xc7\x7d\xe3\x9d\x5e\xf6\x1b\xd2\x4b\xcc\x57\x59\xd6\xab\x1f\x84\xf6\x19\x63\xf2\xba\x3b\xd2\x91\x19\xbf\x69\x24\x48\x51\xfc\x62\xa7\x77\x95\x1c\x98\x88\x09\x42\x6a\xc7\x21\xad\xa6\x9b\xcb\x56\xc4\x6a\xe8\xd5\x24\x7e\x28\x05\xc9\x1b\x2f\x25\x2b\xc9\x6b\xa3\x68\x08\xc7\x95\xe8\x32\x52\xda\x08\x57\x4b\x4a\xa6\x00\x4e\x0e\xb9\xdb\xc3\xe2\x43\x11\x81\x0d\x78\x30\x28\x3c\x90\xea\xd9\x58\xd8\x4d\x88\xdb\x4b\xeb\x7e\x26\xf2\x94\x18\x36\x32\xde\x49\x4e\x58\x7b\x11\x80\x7b\x1b\xdd\xf1\x49\x78\x45\x68\x51\x5c\x43\x55\x83\xfe\x49\x39\xe1\x2b\xd3\x94\xb2\x58\x67\xd7\xe3\x0d\x3b\x8a\x5d\xfc\xc8\x17\x6b\x77\x9c\xf8\x35\x20\xea\x42\x96\xc5\x6a\xd4\xc6\xd0\xb0\x9a\x7c\x32\xab\x5d\xc0\x42\x4e\x0e\xf5\xe6\xb5\xdb\x91\x2f\x02\x68\x7d\x96\x58\x58\x86\xa3\x31\xc0\x1a\x31\x25\xb4\xf3\xf4\x34\x7b\x3c\x63\x29\x86\x2f\x14\x99\x8c\xf9\x1b\xf7\xa5\xf5\xeb\xed\xcf\xab\xf9\xe4\x5a\x68\x31\x33\xa6\xe0\xc4\x4f\x0e\x64\x59\x82\xf4\x6c\x70\xd8\x08\xb6\xd1\x37\x32\x45\xc8\xb7\x69\x4b\x79\x73\xa0\xa7\xe0\xa8\x1a\xd2\xf7\xdf\xc8\x20\x7c\x74\x31\x9b\x6b\x1c\x6c\x59\x3e\x59\x4e\x2a\xf8\x0a\xc6\x3d\xb4\x29\x0d\x2f\x6f\x85\x1c\xcb\x6a\x4f\x2a\x8f\x48\xdd\xa5\x76\xc6\xdb\x57\xd8\xd0\x22\xfe\x66\x4c\x3d\x63\xf7\x26\x73\x20\x12\xe2\x5f\x32\xd1\x6b\xa1\xa8\x71\x55\xc2\xe6\x77\x7e\x65\x2f\x73\x92\xcc\x74\xba\xc5\xbc\x6a\xab\xdd\x2d\xaa\x99\x14\xf9\xe0\xd2\x8b\x77\x51\x90\xa2\x4c\x1a\x22\xbe\xff\x66\xad\xb4\xf9\xa8\xdc\x90\xf5\xa3\x84\x84\x09\x85\x32\x82\x80\x85\xf2\x4d\xb9\x17\xf5\xde\xf5\x04\x1f\x1e\xed\xaa\xcc\xce\x95\x95\x4b\xee\xb7\x9b\x62\xc2\xcd\xf7\x15\x73\x19\x18\xfe\x2c\xeb\xaa\x78\x61\xcf\xaa\xcf\x4d\xa4\x5b\x07\xf5\x77\x6d\xc3\xa2\x77\x1c\xf3\xd2\x30\x27\xe2\xf4\xe2\x4c\xcf\x71\x72\x4e\x55\x8c\xa3\x72\x3d\x66\xf5\x10\xd3\xe1\xa5\xf6\x1f\x7b\xf7\x9d\x9d\xb1\xde\x18\xdb\xc5\xe2\x22\x67\xce\xed\x22\x56\xa5\xce\xda\xf2\x7d\xfc\x32\x55\x8c\x38\x62\x6c\x80\x3b\xff\x40\xf2\x74\x24\x89\x16\xd4\xcc\xf7\xc8\x31\xaa\x28\x5b\xed\x92\x88\x4c\x79\x69\xe3\x46\x26\x50\x99\xff\x11\xe3\x59\x54\x23\x86\x16\x5f\x09\x4b\x61\x34\x9a\x0e\x76\x14\x30\x75\x62\x07\x19\x94\x97\x2f\x31\xe0\x56\xb6\xb2\xcf\x98\x02\xca\x58\xe1\xb0\xd1\xc4\xf6\xb1\xe0\x02\x29\x15\x98\xd5\x0b\x53\x48\x04\x34\x71\x62\x88\xb9\x45\x77\x62\xf4\xa2\x49\xd8\x70\x33\x0e\x1a\x95\x89\x88\xdd\x14\x60\x4a\xce\x62\x4e\x75\xe7\x4a\x42\xb4\x97\xd0\x27\xdd\xa1\xf0\x09\x76\x61\x30\xf5\x18\x7e\x26\xad\x63\xe6\x36\xc2\x29\x45\xa8\x97\xfb\xd2\x41\xf8\xa8\x27\x17\x87\x52\x90\x60\x50\xaa\x15\x81\x25\xf6\xa5\xf5\xe6\x7c\x85\x8a\x26\xcb\x32\x95\xfd\x43\xee\x83\x58\x38\xef\x54\xd0\x2d\x80\xba\xc3\xb7\x4c\x9b\x10\x22\x8e\x1e\xe4\x16\x7b\xc1\x07\xfe\xd2\x4c\x90\x1c\x25\xdd\xa9\x31\x35\xbb\x8a\x52\x7b\xe2\xd5\xc8\x4d\x2e\x55\xf3\x90\x71\x53\xa6\xb2\x2b\xbb\xec\x1e\x3b\x6e\xc4\x27\x8e\x65\x08\x13\x77\x49\x20\x62\x98\x9d\xe4\x4f\xd3\xd9\x3c\x72\x3c\x15\x22\x02\x4c\xef\x7e\x0b\x29\x46\xf3\x0a\xd7\x78\xbf\x7a\x74\xcd\xe0\xcf\x0f\x92\xb9\xc9\x7f\x9d\x5c\x98\xcc\x67\xfb\xc1\xa7\xd5\x3b\x34\xb3\x89\x26\xcf\x23\x49\xdc\xcb\x5f\xb3\x65\x69\x23\x67\xe3\xc9\x72\xcf\xdf\x92\x12\xec\x5f\xcb\x3c\x07\x69\xbc\x7b\x0a\x4f\x36\xe6\x54\xd4\x73\x27\xca\x26\x99\xe6\x56\xd9\xc8\x09\x86\xfc\x90\x3f\xa5\xf7\xb2\x2b\x64\xd9\xe7\xaa\x3c\x1c\xaf\x18\xe0\xf5\xfe\x7e\xfb\xd2\x71\x54\x01\x68\x8b\xd9\x02\xd2\xd1\x1e\xca\x35\xcb\xc5\x52\x9e\xcf\xa6\x17\x48\xe6\x3d\x7e\xa6\x23\x7c\xa6\x6d\xd4\x6e\x6f\x2f\xaf\x9d\x32\x40\xde\xce\x14\x27\x6e\xb6\x8a\xe1\xd3\x05\x51\x75\x00\xf7\x98\x80\x46\xb2\x9f\xbe\x42\xfd\x7c\xa7\x43\x5a\xc3\x94\x9b\x20\xdd\x2b\x0c\xef\x6b\xf9\xf4\xaa\xa3\x47\x3f\x53\x6f\xb1\x2a\xd4\x6a\xef\x44\x42\x54\x4f\xce\x43\xe5\x4b\xde\x1c\x9b\xef\x67\x5a\x18\xc8\xac\x06\x6b\xab\x42\xa5\x1c\x5e\x55\x90\x5d\xd0\x95\xbb\x8a\xba\xb4\xd7\xe3\x80\xf2\x80\xf2\xfc\x9c\x44\xff\xf8\x50\xaf\xcb\x18\x09\x03\x09\xc1\xa0\xd9\x77\xef\x73\x67\x20\xdb\x7e\xb5\x31\x84\x7b\x61\xd3\x58\x0f\x6f\xa2\x08\x0e\xce\x0f\x35\x6f\xc1\xd6\x57\x7b\xe3\xcc\xa0\xc0\x4a\xd6\x5d\xcc\xb5\xa4\xba\x9b\x1b\x6b\xb9\x6d\x1c\x20\xd2\xa6\xa8\x9d\x6e\xec\x09\xc4\xe7\xe7\xfa\xfd\xa2\x27\x45\x65\x4d\x99\xf7\xb7\xb3\x54\x95\xd1\xa7\x3d\x35\x9f\x67\x2e\xce\x28\xa6\x93\xe5\x43\x27\x1c\x16\x20\xff\x92\x02\x0d\xf1\xff\xa7\xe6\xbf\x01\x00\x00\xff\xff\x98\x57\x00\xaa\x8b\x06\x00\x00") func test_certsCaKeyBytes() ([]byte, error) { return bindataRead( @@ -120,11 +122,11 @@ func test_certsCaKey() (*asset, error) { } info := bindataFileInfo{name: "test_certs/ca.key", size: 1675, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x3a, 0xdf, 0x4, 0x11, 0xab, 0xd2, 0xdd, 0x0, 0x8f, 0xf9, 0x1f, 0x0, 0x35, 0x2, 0x61, 0x95, 0x31, 0x81, 0x48, 0x51, 0x6, 0x8f, 0xfd, 0xdc, 0xc7, 0x83, 0xdb, 0x21, 0xe5, 0x13, 0xcf, 0xdc}} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x66, 0xe2, 0xff, 0x59, 0xc, 0xa6, 0x43, 0x8a, 0x9, 0x51, 0x69, 0x97, 0x78, 0x9d, 0x3a, 0x2e, 0xac, 0xc1, 0x35, 0x1a, 0xe5, 0x62, 0xd1, 0xcc, 0xe6, 0xef, 0x9c, 0x4d, 0x53, 0x5a, 0x3b, 0x19}} return a, nil } -var _test_certsClientRootCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x64\x94\x49\xcf\xb2\x48\x17\x40\xf7\xfc\x8a\x6f\x6f\xbe\x80\x38\x20\xcb\x9a\x40\x94\x02\x8a\x41\x86\x1d\x83\x4f\x21\xa0\x28\xc8\xf8\xeb\x3b\xcf\xdb\x49\xf7\xa2\xef\xea\xe6\xdc\xe4\x6c\x6e\x72\xfe\xff\x3b\x90\xe8\x86\xf5\x3f\x44\x5c\xdf\xd0\x0c\x04\x7c\xf2\x87\x0a\xd4\x30\x90\xb8\x22\x04\xee\x77\x0e\x26\x03\x02\x6e\xb0\x80\xe1\x48\x92\x4d\x79\x37\xf3\x4f\x43\x9e\x3c\xcf\x06\xd6\x63\x60\x41\x5e\x7f\xca\xfa\xa1\xab\x93\x04\x01\xeb\x35\x80\x41\x27\x50\xd7\x98\x08\x88\xf1\x8d\xb1\x2b\x99\x1a\x9c\xc9\x56\x97\x3f\xd5\x32\x96\xf9\xac\xf9\xc0\x87\xdc\xba\x41\x40\x7d\x4c\xac\x31\x96\xbf\x4b\x26\x6b\x55\x8a\x20\x66\x3e\xb8\x6b\x93\xb4\x08\x14\x03\x99\xe2\x7a\xb6\x2a\x20\x53\x5f\x4b\x7f\xa1\xe5\xff\xee\xec\x1f\x46\x11\x9d\x49\x05\xd8\xdf\xb2\xd6\x47\xc1\xbf\x32\x21\xc5\xc4\xa2\xa0\xd7\xc1\x36\x20\x60\xa6\x24\x7f\xaa\x63\x81\x11\x02\x9e\x31\x61\x16\x5f\xae\x6d\x62\x94\x63\x6e\x01\x46\x20\x64\x00\x73\x4e\x1c\xf0\x7b\x67\x2d\xe2\x9c\x40\x01\x98\x73\x88\x63\xf2\x65\x6a\x2e\x2e\x25\x7e\x95\x3b\xef\x7e\x07\x53\xee\xbf\xbc\x56\xec\x55\xed\xf1\x55\x5a\x73\x93\xde\xfc\x71\xa7\xac\xd0\xc8\xa2\x8e\x02\xbd\xa9\xf7\xfa\x69\x52\x76\xa8\xc5\xc2\x6d\x73\x3c\x57\x5a\x5b\xae\x52\x0b\x8e\x7b\x37\x4d\x59\x74\xa8\x15\x6a\xc8\x46\x98\x47\x52\xef\x54\x61\x02\x90\x18\x72\xe9\x96\x36\x5b\xcd\xae\xb6\xc7\x87\x71\x91\x27\x71\xa8\xb6\x8f\xcc\x74\x89\xb0\xe2\xeb\xcb\x6b\x74\xa9\xb5\x9d\x54\x9a\xc5\x37\x75\x43\xc3\xae\xfd\x54\xd4\x9f\x3f\x61\x2c\xcf\xb2\xaf\x6c\x4a\x05\x26\x11\x0c\x76\xaa\x19\x8f\xf3\xd1\x1d\x2b\xab\x6e\xb8\xe9\x82\x4b\x61\x97\xc2\x7c\xe5\xc4\x8c\xe8\x27\xea\xd8\xf9\x62\x9f\xf6\x5f\x57\x3a\x83\x62\x3b\xbd\x0f\x62\xa2\x8d\x0b\xaf\xbc\x4e\xaa\xcb\x6c\xb7\x5d\x83\x57\x2b\xce\x9b\x5b\x20\xf7\x9d\x12\x8c\x3f\xa1\xab\xaa\xc7\xcd\x5d\xf8\x4a\x07\xf4\x3e\x20\xe2\x14\xe9\xa4\x28\xca\x3e\x2b\xcb\xfd\x01\x3d\x67\x69\x97\xab\x12\x50\x2b\x23\xd3\x74\x50\xfc\x44\x9b\x7c\x5d\x99\x71\x97\x3d\x6f\x99\x9d\x4c\x52\xd5\xd8\x10\xe9\x3b\xee\x05\xb7\x51\x77\xd5\x72\xbd\xde\xeb\xf4\xf1\xe0\xd9\xe9\x78\x52\x7d\x5a\xf5\x08\x4c\x04\x80\x94\xbe\x28\x0a\x26\xcc\x63\x7c\x73\x25\x07\xb0\xb3\x08\x01\xc3\x80\x87\x9c\x42\xfa\xfb\xb9\x42\xb8\x30\x46\x29\x68\x75\x84\x7a\x1d\xb0\x40\x83\x13\x45\x14\x48\x3a\xf2\x3e\xba\x67\x64\x3b\xcc\x08\x44\x53\x00\xc0\xde\x80\x80\xc1\xf0\x19\x2b\x8e\x9a\x2b\xce\xd3\xde\xbe\xa4\xbd\x12\x08\x6a\x28\xc1\x17\xb7\xbe\xaf\xcb\xc9\x3e\xb5\x2e\xb0\xe7\x20\x92\x86\x68\x4a\xaf\x85\x79\xb1\xd4\x84\xfe\x1c\xea\x4d\x2f\xca\x99\x9c\xfb\xf9\x24\x55\xde\x1c\xf9\x62\xaf\xdd\xbf\xcb\x79\xf0\xd2\xfd\x59\x08\x09\xcd\xc2\xfd\x8b\x9a\xae\x5c\x3d\x72\xef\x33\x70\xb4\x51\x97\xe3\x1a\x9b\xf6\xe1\xbc\x6c\x5f\x29\xeb\xf1\x81\xd8\x83\x9d\xce\x73\x3d\x9d\xcd\xb1\xbf\xf2\x23\x42\xa3\xa3\x86\x63\x6f\x75\xa3\x70\x6a\x87\x46\xe1\xe3\xa6\x38\x60\xe6\x69\x3f\x2b\x1e\x80\xb2\x8b\x3c\x23\x28\xd6\xbc\xd4\xbf\xc9\xbd\xa9\x11\x74\x8b\x05\x7e\x57\x59\x9e\x8b\xf1\x2d\x76\xfb\x51\x0c\xaf\xb2\xbe\x05\x6e\xd9\xa5\xc2\xa0\xd4\xcd\xf8\xca\x93\x7c\x9b\x9c\xab\x68\x31\x33\x4b\x74\x10\x38\xdd\x22\x5d\xf3\x2b\xcd\x4f\x2d\xd5\x4d\xa2\xaa\x20\x5a\x44\xc3\x93\x64\xad\x5e\x96\xf2\xad\xcd\x9c\xfe\xb3\xeb\x26\x1d\x51\x61\xf1\x74\x76\x89\xab\x0f\xed\x55\xa9\x16\xbd\xe1\xd6\x23\x34\xce\xda\xb7\x76\x37\xee\x00\xd5\xc0\xee\xbc\xc6\x09\x67\xd9\x50\xba\x4f\x02\x93\xf2\x3d\xba\xb6\x5d\x9d\xda\xd0\x66\xe7\x84\x36\x1b\x21\x7a\x0c\x4c\xf8\x93\x06\x62\xe1\xff\xe6\xe2\xaf\x00\x00\x00\xff\xff\x8c\x6e\xf8\xa2\x4b\x04\x00\x00") +var _test_certsClientRootCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x64\x94\x3b\xb3\xb2\x3a\x14\x40\x7b\x7e\xc5\xed\x9d\x3b\x82\xa8\x60\xf1\x15\x09\x89\x18\x34\x40\xe4\x71\x84\x8e\x97\xe1\x8d\x8f\x83\x01\x7e\xfd\x9d\x73\x8a\xaf\xb9\xbb\x5c\x7b\x66\x35\x7b\xcf\xfa\xf7\x67\x20\x36\x89\xfd\x8f\x81\xaf\x3e\x39\x12\x03\xf8\xf8\x97\x4a\x94\x10\x04\x90\x61\x80\xa2\xe2\x40\x10\x08\x38\xb9\x82\x73\x7f\xb8\x0e\x9a\x1d\x97\xe6\x7c\x59\x7f\x96\x95\xe3\x99\xe3\xc0\x05\x62\x91\x75\x1e\x62\x52\x7e\x32\x1b\x30\x7c\x81\x0c\x08\xe9\xbc\x60\x8f\x42\x60\x02\x25\xc0\x46\x49\x2d\xb6\x39\xd4\x89\x6a\x7d\xa2\x2f\x7b\xa0\xd7\x40\x60\x11\xa1\x90\x31\x84\xc5\x84\xd2\x8d\xfd\xca\xba\x43\x19\x6d\x38\x67\x32\x16\xa7\x32\xb3\x25\x5a\x03\x61\x2f\x64\xa6\x7e\x24\x1c\x44\xa7\xaf\x32\xb3\x69\x1d\xfc\x30\xf5\x2f\xab\x41\x4d\xaf\x44\x60\xf0\x2b\x3b\x63\xd1\xfe\x95\x49\xd1\x86\x4f\xc8\x07\x17\xc8\xed\x10\x02\xea\xc3\x93\xf5\x49\x55\x26\x38\xc7\x15\x05\xb2\x69\x78\x4f\xd3\x23\xa9\x8a\x18\x86\x80\x05\x00\x6c\x09\x44\x02\xfc\xec\xcf\x60\x20\x50\x02\xcc\x28\x5f\xfd\x7c\x68\x02\xf6\xf1\x4e\xa5\xa0\xac\x58\xb2\x0d\x68\x26\x11\xc2\xf4\xfe\xb0\xd3\x6f\xad\x7b\xd9\xde\xbc\xc9\x27\xe8\x77\x72\x58\xcb\x59\xbc\x72\x3a\x2d\xb8\x00\x27\xb8\x27\x99\xf4\x3e\xc4\x91\x5a\x61\x43\xc9\x64\x3d\x2c\xb4\x83\xf2\x6e\x85\x4d\xf4\x37\x6b\xd2\xb3\x69\xdc\x47\x27\x69\x7a\x6e\xf9\xee\x75\x4f\x2e\xe4\x8d\x0b\x53\x29\x97\x55\x9a\x47\x69\x80\x2f\xcd\xd8\x10\x89\xb0\xe3\xfe\xa1\xed\xe7\x7d\x65\x45\xaa\x6e\x7f\xbc\xa3\xab\x4c\xc2\x0c\xdb\x5c\x8f\x92\xc9\x75\xfb\xd6\x1b\x95\x49\xde\xad\x9f\xcf\x85\x1b\x1d\x7a\xfb\x5e\x09\x81\x6a\x44\xc7\x38\x8d\x7d\x42\x25\x8d\x5e\x74\x93\xa8\x3b\x38\x16\xb0\xd3\xd1\xae\x4f\xbc\xad\xf9\x5c\xa6\xee\xb4\xa7\xbe\x47\xdd\x20\xdd\x3c\x8e\xb4\x00\xad\x5b\x46\xf7\x16\x39\xf2\xe0\x20\x99\xc6\x24\x63\xd6\xb8\x6e\x34\x2a\x39\xee\x5c\xdf\x1f\x69\xfa\xf8\x12\x7e\x07\xcc\xf8\xb2\xae\xbc\x52\x7b\x47\x9b\x8b\xc5\x4f\x8f\x60\x54\xdb\xef\x69\x5d\xf6\x55\x9b\xc9\x33\x75\xfc\xb3\xa1\xc8\xda\xe8\x92\x75\xcc\x9f\x72\x72\xd7\x1b\x49\x78\xdf\x8f\x7c\x1d\x19\x7e\x9f\xcb\xe5\x46\xaf\x9a\x67\x1f\xd5\x07\xfd\x0a\x38\x85\x00\x98\xb5\xb5\x80\x96\x82\xed\xcf\x9f\xe4\x48\x60\xb8\x16\x0c\x03\x41\x8e\x03\x02\xfe\xcf\xe5\xa4\x93\x17\x60\x84\xc0\x19\x72\xfe\x82\x1c\x1f\x21\xcb\x10\xa8\x81\x0d\x79\xf3\x2c\x9b\xca\x3c\x08\x19\x02\xf6\x3e\x02\xe0\x18\x80\x61\x70\x9c\x55\xc5\x8e\x07\xc5\x0c\x63\xb4\xc2\x6b\x5d\xda\xf5\xe7\x6d\xde\x39\x6d\xbe\x4a\x52\xcd\xd7\xbe\x10\x49\x8c\x62\x57\x7d\x78\x5a\x8e\x6e\x36\xc4\x86\x1e\x6c\xaf\xbd\xbe\xce\xb6\x03\xfb\x4c\xca\x9c\xf5\x43\x9d\x3e\x53\xd4\xd3\xba\x5a\xb5\xdb\x45\x0a\x5f\x7b\xbb\xe2\xca\x7d\x37\x8f\x72\x27\xdb\x43\xbd\x3b\xe7\xab\xcb\x58\x77\x49\x7f\x28\x7d\x7a\x7a\xef\x4e\xe4\xde\xb8\xb3\x1d\x0d\xc6\x4d\x0d\xf7\x6e\x75\x0b\xef\xe1\x6a\xd4\xd3\xf3\xfc\xe6\x8a\x23\x61\x39\x59\x67\xf9\xf1\x34\x38\xe5\x34\x70\xb3\x50\xbe\xa1\x0c\x59\xa1\x28\xa6\x26\x50\x3b\xae\xf0\x79\x4b\xa3\x69\xbb\x5a\x77\xbb\x55\xac\x3b\x4e\x6d\xb9\xfb\x9e\xb7\xed\x41\xfb\x32\xdf\xe2\x51\x48\x7d\xc2\x6f\x8b\x72\x5b\xc1\x43\xb1\xc3\x2c\x9a\xbb\x2b\x9c\xf3\xe0\x94\xa7\xa5\x6a\x4d\xf4\xf2\xa4\x6e\xef\xcd\x7e\xb8\xc1\xb7\x50\xcc\x97\xe1\xf3\x84\x46\xbd\x8f\x3c\x9b\xc5\x5b\xb5\x2b\x35\x59\x52\xc5\x71\x98\x39\xae\x16\xc5\xb6\xee\x37\xa8\xeb\x0b\x4a\x70\xef\xe0\xd7\x30\xef\x93\xda\x4e\x77\x96\x6b\x65\xc3\x4d\xfe\x1e\xcb\xd0\x18\xc3\x59\x89\xb6\x37\x7b\x47\x15\x77\x10\xe4\xaa\x15\xa3\x54\x3e\x8e\xb0\x62\x7f\xfe\x48\xbf\x79\xc0\x36\xfa\x7f\x32\xfe\x0b\x00\x00\xff\xff\x85\x0f\x1b\x5d\x4f\x04\x00\x00") func test_certsClientRootCrtBytes() ([]byte, error) { return bindataRead( @@ -139,12 +141,12 @@ func test_certsClientRootCrt() (*asset, error) { return nil, err } - info := bindataFileInfo{name: "test_certs/client.root.crt", size: 1099, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xf7, 0xcb, 0x2d, 0xd3, 0x3c, 0x3e, 0x4f, 0xa8, 0x14, 0x6f, 0x60, 0x8, 0xe4, 0xea, 0x4, 0x98, 0xc2, 0x45, 0x82, 0x5a, 0x53, 0x23, 0xe1, 0x2c, 0x13, 0x7d, 0x50, 0xf0, 0x1f, 0x2, 0x7, 0x61}} + info := bindataFileInfo{name: "test_certs/client.root.crt", size: 1103, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x2f, 0xa9, 0xaf, 0xc0, 0x1, 0x1d, 0x53, 0xd2, 0x11, 0x14, 0x4a, 0x35, 0x4, 0x43, 0x27, 0x6e, 0xd7, 0x7c, 0xea, 0xd9, 0x17, 0xca, 0x25, 0xe, 0x65, 0xbf, 0x42, 0x5d, 0xa0, 0xa2, 0xaa, 0x84}} return a, nil } -var _test_certsClientRootKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\xa7\x12\xa4\x50\x02\x85\x61\xcf\x53\x8c\xa7\xb6\x68\x9a\x2c\x46\x5c\x72\xce\xd9\xd1\xc4\x26\xe7\x06\x9e\x7e\x6b\x47\xef\xb1\xc7\xfc\xee\xfb\xcf\xff\xc6\x0a\x92\x62\xfe\x71\x3d\xf0\xc7\x76\x95\x10\xf8\xc2\x1f\x4d\x48\xfe\x3d\x90\xa1\x28\xc2\x0c\x14\x16\x00\x8d\x03\x8e\x00\x4e\x31\x31\x6b\x0f\xe5\xd1\x07\xd1\x04\xab\x94\x0b\x95\xc0\x79\xf6\xb2\x0a\xad\x85\x9f\x57\xa4\x61\x47\x7d\x12\x73\x68\x21\xd5\x69\x08\xcd\x5e\x42\xdb\x0f\x64\x91\x5f\x7f\x1e\xfe\xcc\xb5\xda\x8c\xa9\xa9\x34\xa2\xaf\x6c\x7b\x35\xbf\x36\xe2\x3c\xb3\xd5\xe0\x6f\xbf\x36\x69\xd2\xab\xf2\x7e\xb0\x99\x76\x40\x67\x32\xde\x0d\x97\x38\x08\x48\x3b\x86\x16\xa5\x1e\x3f\x3c\x4c\xda\x91\xba\xed\x82\x6f\x18\x4b\xa1\x05\x1f\xaf\xc6\x99\xd5\x97\xe1\xee\x12\x93\x9a\x74\xcd\x95\xce\x52\x26\x6d\x3f\x72\x6a\x9f\xa4\xbc\x89\x7d\x2e\xfa\xd5\x6b\xff\x22\x32\x34\x4b\xb0\xf1\xf6\x22\xb0\x0b\xa0\x7f\x91\xb2\xb0\x00\x67\xcf\xef\xb9\xdc\x41\xde\x51\xcf\x17\x95\x9d\x9c\xc5\x62\x6e\x1c\x99\x2e\x42\x34\xce\xd4\x4e\xcf\x13\xcf\x2a\x36\xbd\xb2\x45\x64\x22\x84\xfc\xec\x3e\x77\x8f\x61\x52\x19\xc3\x56\x82\xc4\xfc\x4e\x1b\x3b\xc5\x61\xd0\x95\x3f\xcf\xb3\x39\x24\xb9\xed\xb4\x8f\xec\x17\x0f\xe6\xf0\x6f\xa3\xd9\x82\x84\x45\x99\x8a\x78\x6c\x13\x34\x54\xaa\x42\xba\x2e\x30\xa7\x8f\xa1\x75\x4b\xdf\xfd\xf7\x92\x62\xac\xb4\x95\x69\x26\xdd\x45\xd3\xd8\xf3\x59\x1f\xd4\xb8\xad\x9f\xc2\x03\x07\xb0\x60\x52\x58\xe0\x70\x0d\xcc\x57\x2c\xe8\x33\xec\x8a\xe6\x04\x72\xde\x49\xc3\x3d\xa0\x24\x5b\x61\xa0\x9e\x4a\xd8\x6b\xa0\x45\x2c\x3f\xd3\xcf\xbc\x23\x24\x77\x66\x39\x81\xb6\x27\x9d\x22\xb4\x90\x04\xc5\xf2\x8a\x7f\x30\x1c\x95\x1c\x18\xd0\x3c\x70\x98\x59\x81\x9a\x9b\xb3\x6d\x2b\x6b\x0d\x31\x8d\x40\x55\x6a\x3a\x67\x77\x54\x79\x7e\x14\x2d\x98\xb4\x54\xe2\x55\xc7\x70\x0d\x22\xe7\x09\x5c\x4b\x1f\x80\x09\xdb\x81\x7b\x52\x2d\xbc\xd3\xf7\x0e\xdf\x15\x67\x40\xf2\x95\xba\xa5\xd0\xbe\xf2\xa9\xe9\xe7\x82\x79\xf5\x8b\xa8\xaa\x79\x87\xb3\x93\x2c\xa0\xa2\x8a\xc6\x7d\x2c\x56\x65\xfd\x7c\xef\xd8\xe6\x4c\xaf\x38\xac\x94\x0a\x1d\x59\x37\x0b\xbb\x7c\x0b\x1d\x07\x99\xc7\x98\x29\xcf\x76\xba\x3e\xdc\x50\x4c\x83\x18\xa5\xf6\x89\xe2\xad\x24\x89\x86\x16\xf1\xfc\xc4\xe3\x5e\x02\x9f\xfc\x57\xf2\x9f\x5e\xa4\xfa\x3d\x6f\xd5\xe4\x1c\xda\xbb\xcb\xfd\x29\x57\x3a\x1e\xca\x25\x5b\x8f\x40\x58\xbc\xfb\xce\xc4\x70\x92\x88\x9f\x92\x63\xee\x71\x09\xe5\x49\xe7\x4a\x78\x5d\x22\x39\xdd\xc8\x45\x16\x27\x06\x41\x58\x55\xd0\x1f\x39\x07\x01\x4f\xf8\x00\xec\xf0\x1c\x53\x50\x9d\xdc\x41\xcb\x69\x0d\x98\x24\x16\x58\x85\x63\x5c\x05\x73\x5d\x75\x9f\x3e\xed\xc2\x8b\xb4\xb6\x5e\x1e\x21\x62\x21\xe9\x0e\x04\x8f\x2e\x22\xcc\x04\xb5\x53\x77\x58\x6b\xf0\xaa\xa5\xf8\xb0\x0e\xa5\xd3\x25\xdc\x70\xec\x79\x06\x2c\x0c\x62\x1c\xba\x3d\x7d\x8d\xb6\x3f\xf8\xb8\x41\xce\x47\xd5\xb6\x14\xb3\x8c\x8c\xe5\xf1\x21\xf3\x64\x07\x76\x92\x93\xa0\x92\x2f\xac\xcf\xdd\x87\xb2\x96\x21\x85\xd2\x15\x26\x14\xe4\x6e\x3e\xfd\x0d\x90\xbd\x22\xd1\xed\x01\x45\x79\x64\x93\x0f\xc6\xe7\x7c\xc6\xc5\x4a\x5a\xce\x15\x44\x13\x51\xf9\xf7\xe2\x5b\xce\x6f\xb9\xef\xde\x6b\xff\x15\x9b\xec\x09\x2d\xf2\x87\x93\x30\x89\x18\x7e\x2a\xa9\x7c\xee\x15\xbe\x76\x3c\x71\xba\x83\x26\xbf\x3f\xbf\x3a\xc6\x37\x8d\x34\x2a\x19\x3f\x5c\x3c\xe5\x56\x38\xb5\x58\x90\x28\x69\x92\x01\x86\x0b\x02\xae\x33\x46\x68\xcd\x8f\x51\x0a\x22\x8b\x7a\x3c\xd6\xb1\xe1\xca\xf6\x75\x7d\x31\xa7\x33\xa4\x15\x69\xbb\x4a\xee\xa6\xfa\xad\x56\x42\x87\x2e\xd4\x97\x38\xcb\x42\x95\x8b\xdc\xab\x00\x5c\x30\x85\x89\xb0\x9a\x3d\x94\xd3\x20\x6b\xcf\x62\xb7\x68\xac\xd2\x4c\xd3\x62\xb2\x51\x21\x91\x11\x13\x0e\xc9\xf3\x8a\x1b\x26\x04\x54\x1a\xe0\xb7\x0a\x26\x09\x38\xbf\x73\x02\x2f\xa3\x40\x3b\xac\x51\x92\x29\xec\xe0\x8f\x03\xe1\xfa\x13\x4e\xb0\xe5\xfa\xf3\xfd\x98\xa9\xab\xcb\xe2\x65\x2c\x1a\x15\xa6\x31\x33\xc2\x54\x8e\xdb\xdf\xfa\xfb\xfb\x64\x6f\x9e\x65\x0f\x02\x55\x8e\x90\x14\xc3\x57\x98\x81\x4f\x1a\x1c\x1d\xcd\x5a\x10\xdb\x0e\xfb\x54\x49\x76\xbf\xd2\xf3\x80\x26\xbe\xbe\x9f\xbd\x2e\xad\x38\x3e\x48\xd5\x80\x0a\xe7\xf7\x5a\x17\xe2\xbd\xf9\x6e\xe3\x9b\x77\xe4\xc5\x73\x3b\x78\x8c\x7c\xa4\x8d\x83\x08\xef\xb7\x48\x42\x15\x3a\xd7\xc9\xa0\x05\x6f\x03\x21\x75\x56\xdf\x0d\xfa\x3b\xb2\x56\xc7\xd5\x09\x4b\xac\x61\x90\x3c\x9b\x95\xcd\x8d\x40\xa4\x67\x56\x62\x18\x55\x04\x12\x25\xca\x64\x94\x71\x5f\x39\x17\xac\xb2\x84\x60\x9b\x29\xed\xf3\x42\xfc\x8e\xec\xb6\x9e\xb6\x29\x47\x1f\x2b\xf0\xd3\x1c\x4f\xeb\x9a\x70\x37\xbb\xcc\x33\x25\x15\x93\x8b\xdd\xdf\x08\x35\x6b\xad\xc9\x63\x96\xaa\x47\x38\x03\x3f\xa7\xa8\xfb\x41\x16\xde\xb6\xde\x5c\x82\x3e\xaf\x11\x19\x94\x61\x21\x12\xab\x92\x20\xc7\x4d\x85\x36\xa7\x71\xfc\x31\xa2\xb6\x8e\x99\x02\x08\x7e\x0d\x76\x5c\x92\xf7\xca\x24\x8f\x28\x71\xe9\x00\x72\xf5\x66\x5b\xc8\x65\xa9\xa3\x73\x34\xb6\x76\x78\xcd\x60\x34\xd9\x40\xa2\x60\x77\xec\x35\x8f\x03\x9b\x6d\x3d\x64\x65\xd8\xf2\xd0\x6e\x12\x34\x3d\x80\xc9\xb9\x6d\x82\xd7\xf5\x20\xd8\xfb\xf5\x38\xc3\x8f\x54\x53\x68\x0a\x86\xde\x5e\xbb\xb6\x60\xa7\x28\x75\x5b\xb3\x15\x61\xfc\x20\x47\xa9\x1a\xc2\x2b\x25\xf1\xc5\x73\xbf\xb9\x7b\x0f\x72\x73\x6c\xf8\x53\x11\xdd\xc8\x1e\xf2\xd8\xcb\x60\x06\x37\x21\x25\x94\x07\x05\x5a\x25\xd8\x25\x62\x13\x1b\x49\xa6\x9f\xeb\x29\xa3\xb2\x9f\xb6\x4b\x44\x74\x9f\x50\xf6\x8a\x8a\x90\x72\x58\x89\xc4\x94\x98\x29\x13\x3d\x31\xbc\x73\x63\xae\xeb\xbf\x7f\xa1\x7f\xac\x08\x26\xff\xff\xb9\xf9\x6f\x00\x00\x00\xff\xff\x1e\x52\x11\x24\x8f\x06\x00\x00") +var _test_certsClientRootKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x95\x37\x12\xa3\x50\x02\x05\x73\x4e\x31\xb9\x6a\x0b\xef\x82\x0d\x30\x5f\xf0\xb1\xc2\x83\x32\x01\x02\x84\xf7\xee\xf4\x5b\x33\xf1\xbe\xf4\x25\x5d\x9d\xf4\x7f\xfe\x4e\x04\x0a\xb4\xfe\xb8\x9e\xf0\xe7\xe5\xc2\x50\xf0\xc1\x1f\x1d\x24\xff\x1e\xc4\x84\x10\x0c\x25\x14\x05\x41\x97\x04\x07\x08\xc3\x87\xe6\xf6\xf7\x13\x18\x58\x45\x65\x32\x50\x17\xd2\x2a\x35\x33\x7b\x3a\x11\xc9\xf8\x11\xfb\xa5\xa7\x3b\x58\xd6\x3e\x73\x02\x7a\x7d\x26\xbc\x8a\x28\x45\x3d\x6e\xb8\x74\xc8\xad\x4a\xf4\xc6\x2b\x8a\x2c\xaa\x12\xd6\xd8\x7a\x3d\xe3\x0d\xcd\x53\x2d\x93\xbd\x97\x01\x34\xe5\xaa\xca\x9e\xad\xbb\x51\xa3\xa4\xe0\xc6\xbe\x3f\xe9\x32\x44\xb5\x5a\x13\x24\x43\x3b\x32\x52\x70\x51\xa2\x8d\x51\x92\x80\xf8\x9d\xbe\x8f\x65\x1b\x7e\x91\x85\xca\x29\x56\xf9\x7c\x96\x89\xed\x3b\x2e\x14\x65\xf1\x6f\x9a\x0e\xe6\x35\xcb\xed\x82\x99\x16\x4a\x18\x4b\x16\x60\xc8\xe0\x38\xd6\xd1\x89\x51\x44\x04\x97\x6c\xdf\x12\x2a\xfe\xac\x87\x93\xf6\xe5\x7b\x17\x1e\x6f\xa2\xd9\xc4\x69\xe1\xde\xd5\xa3\x06\x58\x2d\xe3\x0a\x3f\xb9\xbe\x5a\x6a\x3e\x15\xa9\xb4\x73\xaf\xba\x8c\x94\xbc\xac\x78\x2a\x90\xd2\x9d\xb6\x6f\xb9\xe6\x06\x92\x89\x08\x26\x5c\x00\x5d\x8a\x9d\x87\x52\xcd\xf0\x65\x15\xeb\x77\x25\x22\x13\x1a\x2b\x9d\x66\x05\xf5\xa6\xc6\xd8\x32\x6b\xb9\xb9\xca\x35\x47\x6c\xb6\xbe\x5e\x44\xa2\xaf\x4a\x8f\x6a\x26\x98\x3f\x71\x41\x08\x0d\x4d\xe6\x30\xdf\xe1\xa8\x8f\x04\x44\x0b\xe0\x40\x59\x70\x04\x51\x18\xfe\xca\x86\xf2\x83\x2f\x73\x4d\xc5\x89\x8f\xa5\xe2\x88\x3d\xb8\x6f\x63\xbd\xba\x72\x78\xca\xfe\xfc\x93\xde\xad\x41\x12\xe3\x8c\x19\xad\xfd\x78\x52\x87\xee\xd4\xdf\x7e\x62\x47\x19\xd4\xac\x91\x9b\xbf\x30\x08\x7b\xc1\xb9\xb2\x88\xf6\xb1\x24\xf0\xf2\x0e\xe1\x4e\x75\x11\x73\xb9\x4b\x47\x9c\x8b\xde\x4b\x38\x6d\xdc\x02\x7f\xac\x1a\x5a\xbe\xb3\xba\x5d\xfa\x60\x5a\x3b\x9f\xec\xa9\x71\x20\x60\x73\xff\xa9\x6a\x52\x4a\x19\x1b\xe5\xc4\x7c\x06\x17\xdd\x47\x12\x4c\x72\x54\x6a\xdf\x70\x9c\x6a\x6b\xda\x9b\x04\x06\x3e\xa2\x26\x9e\x6f\xde\x20\x05\x74\x4a\xcd\x5f\x3f\xe7\x2d\xe7\x73\xd0\x5a\x1e\xfb\x87\x7b\xad\x30\x59\x25\x22\xe5\xf3\x7a\xd5\x6e\x42\x45\x8a\xf3\x0e\x7b\xe2\xe4\x23\xf7\x7b\xc8\xcf\x82\xbb\x4c\xc9\x78\xa9\x35\x27\xba\x46\x50\x5f\xf6\xba\x98\xaa\x8a\x4b\x43\x9d\xba\xaf\xc6\x17\xc3\x0f\x76\xc6\xdf\x09\x58\x21\x5a\xc1\x21\x27\x89\x00\xe1\x7c\x70\x2e\xd6\x24\xdd\x9e\xd7\xd4\x94\xcf\x8d\xde\xe9\x32\x9b\xef\x05\x3f\x0b\x77\x43\xee\x6c\x37\xb8\x72\x84\xb3\x8b\x39\x34\x8e\x85\xc1\x82\xed\xb1\x6c\xfc\x81\xb7\x52\xf4\x45\x27\xab\x46\xaa\xad\x0f\x3b\x26\x90\xca\x04\x08\xf7\x63\x24\xce\x8f\x1a\x96\x8f\x7d\x78\xf1\xc9\x15\x06\xa2\x48\x6c\xe2\x62\x1e\xf2\x43\x76\xd9\x50\x41\xb5\x8f\x38\xd9\xcf\x9b\xfb\x4c\x98\x97\xac\xe1\x76\x11\x08\x28\xf1\x62\x17\x96\xd5\x8b\x3b\x5f\xd8\x6e\x9b\x9b\x8a\xb9\x98\x9f\x77\x83\xd9\x19\x7f\x77\x12\x3c\x4a\xc2\x88\xda\xf3\x3d\xbc\x70\x06\x87\x11\xd6\x25\xe2\xee\x47\x55\x76\xd5\xca\xd4\x64\x26\x22\x9f\x6f\xdf\xa8\x43\x1c\xc3\x5e\xd5\xb1\xe6\x29\x20\x54\xef\xc0\x0d\x85\x5d\xc0\x4b\x2c\xba\xb2\x09\xba\x4a\x6c\xe5\x01\x98\xae\xfa\xb3\xcc\xda\x48\x0e\xac\xe1\xb2\x7f\xc4\xe7\xa9\xa3\x08\xea\x7f\x6f\x3f\x57\x39\x58\xa0\xc5\xaa\x7e\xf7\x7d\x77\x54\x48\xd4\x86\x47\x75\x95\x5f\xfa\xb1\x20\xe0\x38\x9c\x15\xae\x77\x4b\x9b\x2c\x0e\x85\xf9\x9d\x74\xe9\x7b\xf7\x3d\x4a\x17\x93\x0c\x00\x99\x97\x59\x9f\x3e\x98\x15\x59\x7a\xe4\x17\xc5\x8d\x01\x3c\xfe\x78\x3a\xbc\x31\x5a\xd7\xbe\x24\xed\xb4\x3e\xab\x4f\x6a\x48\xa3\x85\xcf\xdd\x0a\xc9\x46\xd8\xbe\xe6\x37\xba\xee\xea\x41\xce\xbc\x83\x80\x24\x1a\x2b\x8a\xb5\xbe\xe4\xc3\xc4\x2f\x06\xa6\x8d\x0a\xa7\x33\x85\x68\x51\x29\xcf\xfc\x39\x0f\x71\x23\xb8\xdd\x5f\x64\x81\xa7\xd7\x5f\x7b\x4f\x32\xfb\xfa\xb6\x2f\x42\x26\x31\xc0\x45\x2a\xd2\xbf\xba\x37\x9e\xf7\x56\x5f\x57\xcd\xf2\x59\x0c\x74\xb7\x05\xc1\xa6\xa6\x6a\x5b\xe1\x5d\x02\xd5\xd8\x9c\x91\x02\x83\x9c\xfe\x52\x9b\x92\xb4\xdc\xd0\x9e\x54\xbd\x5d\x1e\x60\x73\x47\xe0\xb3\x1b\x11\xb7\xf4\x93\x76\x9a\x49\x60\x18\x88\x56\xb7\xec\x1f\x14\xd6\x9f\x8b\xfe\x6e\x9e\xe8\x61\xe5\x5f\x77\xe0\xad\x68\xc2\x5d\xcc\x39\x6c\xa3\x47\x49\x23\x94\xf5\x73\xd0\x6a\xea\x4a\x2d\x46\x3b\x73\x64\x0c\xde\x32\x76\x19\xa0\xbb\x36\x57\x71\x36\x68\x08\x54\x1a\x38\xba\x58\xca\x68\xf4\x21\xa6\x43\x2f\xbe\x5e\xbb\xa2\x87\x9b\x7a\x62\xed\xc0\x58\x3e\x8d\xfb\x46\xf1\xd3\xf0\xe4\x7d\x57\xb4\x1d\x61\xdb\x72\xc4\xb7\x61\xac\xac\x99\x99\xd7\x9b\x0e\x2b\xfc\xa0\xdc\xb2\xe9\xe7\x19\x8f\xc9\xc5\x22\x2d\x9e\xcb\x0f\x93\x3b\xf5\xb7\xf9\x74\x56\xd4\xc9\xa4\x5c\xef\xa1\x03\x9c\x0c\x1e\x2e\x99\x21\xc1\xc0\x56\xee\xc2\x05\x41\xb9\x5e\xf3\x4f\xca\x95\xed\xfb\x65\x0f\xa5\x1e\x65\x4d\xe3\xb1\xa5\xd7\x3f\x54\x77\x3a\x94\x95\x38\xbe\x20\xe3\x82\xa9\x28\x11\xe0\x5e\xbc\x10\xf6\x0d\x35\x6e\xe6\x88\x08\x4d\xe4\x0a\x83\x22\x44\x76\x46\xd3\x4a\x13\xfd\xe2\x87\x7c\x47\xe8\x30\xb9\x5b\x18\x66\x16\x11\x2b\x21\xb7\x43\xad\xdb\xe6\xba\xc3\xf6\x38\xbf\xa8\x30\x61\x79\x8c\x0b\x36\x5d\x38\xb0\xa2\x43\x42\x05\x0f\x9d\xa7\xc9\xc4\x9a\x1d\x7c\xf2\x58\x62\x2c\x05\xb0\x4b\xd9\x2e\xfd\xa7\x68\xbb\x52\x8b\xe0\xb5\x31\xbc\xb8\x25\x40\x2b\x7b\x3c\x54\xe7\xf7\x38\x84\xc5\x21\x8f\x95\xa2\xb3\x52\x1f\x22\x6a\xa1\x2d\xdc\xe8\x8e\x01\xda\x06\x89\x6d\xff\xf2\x6c\xf0\xf0\x9c\xc9\x1a\x72\x02\xe1\x9a\x4b\x7e\x5a\x3c\x5f\x01\xe0\x2a\xc6\xe9\xb2\x74\xd3\x1c\x40\xfd\x17\xf9\x97\x14\x60\xc9\xff\x3f\x35\xff\x0b\x00\x00\xff\xff\x9f\x7f\x76\xd4\x8b\x06\x00\x00") func test_certsClientRootKeyBytes() ([]byte, error) { return bindataRead( @@ -159,12 +161,12 @@ func test_certsClientRootKey() (*asset, error) { return nil, err } - info := bindataFileInfo{name: "test_certs/client.root.key", size: 1679, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x8e, 0x87, 0x86, 0xc9, 0x19, 0xfb, 0xac, 0xaf, 0xa2, 0x39, 0x4, 0xc, 0xa2, 0x6e, 0x8a, 0x4d, 0x19, 0x82, 0x95, 0x4c, 0xb2, 0x53, 0xb4, 0x83, 0xd0, 0x4b, 0x54, 0x72, 0x3, 0xec, 0x77, 0xc9}} + info := bindataFileInfo{name: "test_certs/client.root.key", size: 1675, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xc9, 0x0, 0xb6, 0x10, 0xea, 0xfe, 0x4c, 0x5d, 0xac, 0x52, 0xa, 0x97, 0xf1, 0x3a, 0xf9, 0x27, 0xf8, 0x5f, 0x5b, 0x36, 0xde, 0x7c, 0xe2, 0xee, 0x99, 0x73, 0xf4, 0xa3, 0xb2, 0x6d, 0x94, 0x96}} return a, nil } -var _test_certsClientTestuserCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x94\xbb\xd2\xb2\x48\x10\x86\x73\xae\x62\x73\x6a\x0b\x04\x15\x08\x36\x98\x81\x01\x87\xe1\x2c\x82\x9a\x71\x72\x10\x10\x11\x94\x01\xaf\x7e\xeb\xfb\x82\x3f\xd9\xed\xa8\xeb\xed\xaa\x37\xe9\xa7\x9e\xbf\x7f\x06\x22\x0b\x7b\x7f\xe9\x28\x8a\xb1\x89\x75\x10\xa3\xdf\x94\x73\x31\x36\xa0\xa1\xeb\xa0\x5a\x29\x60\x18\x02\x8a\x23\x10\xa8\x60\xbb\xcb\x6f\xc1\x68\x6d\x1e\x49\xfb\x3a\x7f\x02\xda\x13\xcc\x8c\xf0\x62\x93\xe7\x15\xd7\x73\xe1\x81\x10\x39\x30\x04\x8c\x23\x5f\x74\x74\x21\xb0\xc0\xe6\x84\xf4\xda\xb5\x43\x49\x6b\x32\xd9\x9e\x2f\xa9\xf7\x74\xa3\x13\x43\xec\x62\x24\x61\x68\x20\xb6\x18\xb9\xe4\x8d\xc5\x43\xab\x2f\x12\xa5\xa1\x88\xd8\xa1\x2e\x3c\xce\x6d\x00\xf3\x1a\xb0\x73\xe3\x0b\xf3\x1a\xb4\xa4\x75\xe1\xb9\xcd\xe9\x67\x17\xff\x64\x0d\xe8\xdd\x08\x33\x04\x7e\xcb\x08\x62\xdd\x9f\x32\xee\x22\xd1\x05\xc5\x20\x80\xd4\x4b\x20\x70\x63\xfd\x10\x75\x85\x1c\x6d\x0a\x29\x59\x5d\x8c\x21\x6e\x80\x07\x69\xfb\xaa\xdb\xbb\xa5\x31\x11\x82\x10\x99\x00\xf8\x3a\x08\x55\xf0\x73\xe7\x74\x4a\x74\x10\x22\x30\xe0\x73\xfc\x96\xe4\x59\x8a\x76\xdd\x37\x52\x2e\xea\xce\xd3\x6a\x37\xed\xe8\x3d\xec\x02\x32\xb4\xe3\x20\xbb\xfd\x36\x28\xec\x38\xd6\x1d\xbc\xb6\x69\xa0\xca\x26\xc1\x1e\x37\x9a\xc9\x3c\xaf\x46\xc6\xbf\xd6\xe5\x74\xfe\x58\xde\x55\x9e\xd6\x55\xf1\x4b\x2a\x97\x76\xf2\x40\xfc\xae\xbc\x69\xf9\x62\x7c\x79\xad\xd2\x44\x43\x28\xab\x72\xd9\xb7\xce\x25\x24\xaa\x1c\x19\xbc\xca\xa5\x18\x14\x45\x37\xf2\xfc\x71\xba\x3b\x9d\x2d\x3e\xdc\xe3\x62\x13\xd1\x89\x55\xa7\x1e\x6d\x70\xd4\xaa\x5e\xe3\xdf\xce\x73\x14\xde\xd4\xa7\x77\xdb\x66\xad\x31\x23\x7e\x93\x6b\x45\xb9\x34\xd2\x96\x53\x72\x0b\xbc\xc7\x2d\x09\x8d\xe4\x9b\x0c\x71\xa4\x9f\x06\x2d\xce\xb0\x06\x49\xd6\xb9\x6a\xa9\x08\x8f\x6c\x7f\x57\xcc\x51\xb5\xea\x21\x1b\x74\x45\xbc\x7a\xa0\x0c\x5e\xc2\xd9\x5a\xcb\xe6\x05\x6c\x0e\xcc\x9f\x8f\x9b\xdc\x8d\x1a\x86\x01\x2c\xd7\x0d\x61\xf7\x11\x39\x41\xff\xd6\x66\xb3\xc9\x05\x37\x9f\xdf\x82\x4d\x8d\x82\xbd\x74\x5e\xe6\xd5\x93\xcc\xfa\x42\x73\x3e\x93\xaf\xab\x9f\x6d\x74\xcc\x38\x4b\x5c\x4f\x7c\xaf\x02\x43\x4a\xd5\xed\x79\x55\x76\xe7\xbd\x35\x8e\xe9\xd0\xe0\x30\x2f\x42\x6c\x80\x10\xc0\xe7\x5a\x30\x3b\x06\xfe\xcf\xa7\x0e\xa1\x0a\xc1\x4d\x45\x10\xb8\x3a\xcc\x00\xe3\x7e\x41\x89\xc4\x0e\x02\xc6\x74\x7a\xc1\x84\x5d\x20\x0c\x4f\x07\xc0\xfe\x97\x3c\x83\x52\x04\x81\xb9\x53\xc3\x83\xef\x4b\xb7\xfd\xc8\x15\xe2\x11\xad\x99\x7a\x4b\xcb\x77\xb2\x9f\x42\x83\x08\xc8\x37\xc4\x08\x68\xd7\x84\x57\x16\x62\xd8\x8b\xed\xb0\xa4\x42\x85\x34\x00\x6d\x9b\xf8\x26\xdd\x57\x8a\xea\x8e\xf1\x57\x3e\x6d\x96\x9c\x72\x8a\x54\x91\x89\x1d\xce\xf6\xee\x75\x8f\xc9\xa6\x78\xc9\xaf\xa7\x95\x55\xb3\xe9\x6c\x75\xb6\xa5\xe7\x61\x57\x94\x02\x70\xfa\x02\xe6\xb7\xf7\xe0\xfb\xfd\x86\xdf\x0f\x96\xd2\x7f\x53\xf1\x64\x4d\x0d\xcf\x39\x2e\xcd\xf4\xab\x50\x4b\x20\x58\x21\xd9\x39\xb6\xcc\x5b\xa3\x68\xbc\xea\x87\x20\x95\x9d\xb9\xb4\x1d\xbf\xdc\xe6\x9a\x5d\xa7\x5b\x52\xb9\xd7\xf4\xb3\x5d\x8e\xb7\x43\x3e\x85\xb4\xca\x09\x6e\x01\xd7\x1f\xb5\x69\xe8\x3a\x5b\x4c\xa2\xde\xdc\xf4\x96\x73\x5e\xb7\xa5\x81\xee\xaa\xb0\xe8\x5e\xfd\xc6\xd6\x14\x06\x7e\x4b\x04\xe7\x80\xbe\x3c\x7f\x5d\x35\xa9\xda\x45\x67\x77\x7e\x6f\xf2\xe0\x93\x5a\x2d\x07\xdd\xf7\x75\xba\xf4\x37\xe2\xa3\x34\x7e\xac\x99\x9c\x7e\x6b\xf6\x5c\x80\xd5\x3e\x0a\x92\x6a\xf2\xa3\xc7\x4f\x45\x2f\x4b\x75\x78\x4e\x11\x31\xe1\xb4\x4e\xe9\x7a\xfc\xde\x69\x2f\x6b\x01\x22\x1e\xe7\x78\x9e\xa5\x03\x7a\xaa\x70\xfb\x0f\xf7\xab\x08\xe4\x19\xff\xd5\xc6\xbf\x01\x00\x00\xff\xff\x7c\xaa\xa5\x79\x53\x04\x00\x00") +var _test_certsClientTestuserCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x94\xb9\xd2\xb2\x48\x18\x85\x73\xae\x62\x72\x6a\x4a\x16\x51\x09\x26\xe8\x66\x91\x06\x1b\x68\x16\x01\x33\x44\xed\x06\x59\xdc\xa0\x85\xab\x9f\xfa\xbe\xe0\x4f\x66\xde\xf0\x79\xab\x4e\x72\x4e\x3d\x7f\xff\x1c\xb4\xf6\xc8\xff\xcb\xb0\xa2\x04\xd9\xc8\x00\x89\xf5\x4b\x05\x8c\x90\x09\x4d\xc3\x00\xd7\x99\x02\x8e\x20\xa0\x28\x02\x81\xe9\x68\x8d\xdd\xa7\x9a\xa2\x5d\x82\xb3\xe2\x6e\x4e\xac\x0b\x25\x6e\x92\xc2\xf5\x86\x13\x62\x53\xe5\x03\x62\x1d\x20\x01\x5c\xf0\x16\x2b\xc6\x10\xec\x81\x9c\x5a\x06\xc3\x2e\x51\xf4\xa6\x54\xdd\xa9\xc8\xfc\x01\x47\x29\xb7\x78\x61\x1e\x09\x31\x2d\xfe\x35\xcf\x8a\xff\xaa\x3a\x9d\x15\x0a\xa5\x44\xb2\xb8\xc3\x2a\x5f\xc0\x0d\xe0\xfe\x82\x66\x9c\x14\x3c\x30\xf1\x9c\xb1\xca\xc7\x4d\xfa\xc3\xd4\x3f\xac\x01\x3d\x8e\x10\xb7\xc0\x6f\x98\x67\xf1\xf6\x4f\x98\x50\x28\xf4\x6b\x25\x20\x84\xd4\x3f\x42\x80\x13\xc3\x89\xda\x4a\x8d\xe4\x4a\x39\xce\x18\x21\x88\x1a\xe0\x43\x7a\x7f\xb2\x7b\xbd\xd7\xb9\x04\x01\xb1\x6c\x00\x02\x03\x90\x1d\xf8\xf9\x0b\x06\xf5\x0c\x40\x2c\x30\x79\x97\x8f\xbc\x1a\x7a\xe3\x1d\x59\x64\xd5\x9c\xc7\x33\x4a\x93\x6a\x1c\x4e\xe5\xcb\x1a\xa6\x25\x74\xa3\x6a\xc5\xb2\x6e\x98\xf3\x0f\xdd\xdb\xb9\x7f\x31\xd6\xef\x27\xa7\x5c\xd8\x91\xf5\xbe\x7f\x69\x75\xd3\x94\x09\x63\xef\xf6\xd4\xd2\x62\x94\x5f\x93\x06\xf2\x27\x75\xd2\xe2\xea\xdd\xe7\xde\x61\x79\xa6\x21\x50\xc7\xf4\x2e\x1e\x17\xcd\xe9\x70\x1d\x8c\xa3\xae\x4f\x51\x29\x28\xd0\x9b\xaa\xf7\x35\xfc\x76\xf3\x9a\xd6\xba\x91\x90\xb4\xa1\xce\x27\x6e\x65\x6d\x7b\xca\xbe\xda\xf6\x25\x6b\x2b\x13\x8f\xa6\xf8\x78\x7f\x2a\x7d\xd5\x68\x43\x7d\x9b\x90\xe4\xfa\xf2\xa8\x68\xf2\x47\x50\xfd\x84\x15\x7a\x8a\xab\xe7\x55\x3c\x88\xe5\x62\x3b\x6e\x8b\xa1\xbc\xd6\x83\xa3\x63\x37\x2c\xdb\x58\xef\xd8\x93\x2a\xae\xaa\xc5\x6e\xbe\x42\xa8\x26\x6b\xf5\x1c\x4a\xfc\x81\x3d\x8b\xde\x07\x2c\x94\xe1\xc5\xd0\x22\x1d\x74\xe1\x62\x68\xfd\xb4\x7b\x7d\x02\x20\xe7\x3d\x10\x0d\xf8\xac\xd1\x79\x5b\xab\xaf\x62\x63\x7f\x9b\x88\x35\x74\xf7\x3e\x78\xf6\x42\x5e\x4f\xb3\x39\xe1\xf5\x47\x1e\x65\x79\x11\x38\xe1\x3a\x96\x7b\x97\xdd\x7d\x44\xe3\x86\x6c\x7a\x8c\xd4\xcc\x2c\xbb\xeb\x5c\x48\x1c\x99\x80\x00\x38\xcc\x15\x77\x13\x10\xfc\x34\xe5\x90\x1d\x04\xb7\x9d\x05\x01\x36\x60\x09\xb8\xf0\x3b\x94\x48\x6a\x21\xe0\xdc\xa0\x05\xf2\x78\x01\x21\x49\x1d\xc0\xd1\xff\x2d\xcf\xa4\xd4\x82\xe0\x70\x47\x6c\x43\x3e\x83\x79\x79\x0a\xe9\xc3\x94\x0f\xc7\x9d\x93\xfa\x11\xed\xa4\x89\x72\xba\xdd\x9d\x27\x52\x9e\xc1\x96\x69\xda\xe9\xfe\xa8\xf5\xe1\xd1\xbe\xf3\xba\xdb\xde\x42\x96\xdd\xb4\xac\x29\x6e\xee\xc9\x5b\x56\x46\x96\x6a\x69\x22\x18\x8f\xce\xcd\xf5\x71\x0e\x6f\xb7\xa0\xdc\x98\xc3\x03\x2a\x65\x8f\x57\x99\x64\x75\x8b\x6f\xf4\x43\x1c\x33\x2a\xa6\x43\x28\xe7\xdd\x03\x3d\xc4\x62\xeb\x3a\x15\x56\x98\x4a\x7a\x37\x0c\x23\x12\x09\x52\xfc\xed\x03\x6f\x69\x4f\xf4\xaa\x7a\xdb\xde\x76\x92\x60\x5e\x90\x14\x0e\x6f\xf0\x65\xe5\xf9\x76\x5a\x9c\x75\xfc\x38\x6a\x76\x37\x7e\xd9\x14\x86\xd1\xf7\x35\xae\xf2\xf5\xcb\x3e\x88\x99\x98\xf7\x54\xd8\x85\xd1\x3a\x6a\xe7\xda\x84\x49\xab\xdc\x58\xfc\x9c\x55\xf2\x3d\x1c\x35\x7a\x84\x9a\x72\xd8\xd7\x4e\xe3\x1d\xd6\x87\xcc\x06\x59\x39\x46\x49\x6e\x47\x9d\xbe\x5a\x05\x8a\xb6\x1b\x3c\x19\xb7\x81\x27\xa8\x31\x7a\xa2\x29\xfc\xbc\x9d\xeb\x76\x7f\x59\x0c\x66\x5f\xb7\xe2\x25\xea\xd0\xad\x0e\xf2\x80\x1b\x67\x6d\x72\x12\x71\xb6\x2f\xdb\x58\x57\x44\xf8\x72\x9b\xa5\x83\x50\x31\x64\xa4\x58\xcf\x0e\xee\x85\xeb\x34\x0d\x67\x20\xc2\x6e\x29\xfe\x11\x7e\x15\x61\xf9\xe6\x7f\xb5\xf1\x6f\x00\x00\x00\xff\xff\x87\xed\x45\xb6\x53\x04\x00\x00") func test_certsClientTestuserCrtBytes() ([]byte, error) { return bindataRead( @@ -180,11 +182,11 @@ func test_certsClientTestuserCrt() (*asset, error) { } info := bindataFileInfo{name: "test_certs/client.testuser.crt", size: 1107, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x2d, 0x72, 0x17, 0xd9, 0x6e, 0x84, 0x80, 0x8, 0xf5, 0xfa, 0x8d, 0x69, 0x4d, 0xca, 0x64, 0xc0, 0xce, 0x5a, 0x80, 0x86, 0xeb, 0x19, 0x87, 0x64, 0x26, 0x6c, 0xf2, 0x5, 0x38, 0x44, 0xcb, 0xd6}} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x8a, 0x6f, 0xa4, 0xfc, 0x3, 0xfb, 0x3f, 0x42, 0x68, 0x9d, 0x88, 0x7b, 0xe7, 0x36, 0x56, 0xe, 0x78, 0xc6, 0x62, 0xb2, 0xa0, 0xce, 0xf, 0xa6, 0xf1, 0x38, 0x4a, 0xb0, 0x45, 0x46, 0xc4, 0x31}} return a, nil } -var _test_certsClientTestuserKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\xa7\x12\xac\x5a\x02\x85\x61\xcf\x53\x1c\xbf\x6b\x0a\x9a\x8c\x18\x41\x6e\x62\x93\x93\x23\x35\x4d\xce\xf1\xe9\xa7\xee\x19\x7b\x97\x5d\xe6\x77\xdf\x7f\xfe\x19\x27\xca\x8a\xf9\xc7\x71\xd9\x3f\x96\xa3\x04\xac\x27\xfe\xd1\xc4\xf8\xef\x03\x19\x8a\x22\x8e\x95\xc2\xb1\xac\xc6\xb3\xb6\xc8\x4e\x4a\xe4\x6d\x28\x76\xa0\x0e\xd1\x3d\x0e\x15\xd3\x84\xc9\xfc\x8c\xb0\xab\x6a\xbb\xb3\xb4\xa9\x5d\x26\xcc\x18\x70\x2b\x57\x3d\x8f\xd7\x95\xbb\x85\x42\x8b\xc6\x24\x4d\x31\x17\x29\x38\x8e\x5b\x48\xc1\x7c\x5f\x7e\xb4\xcb\x66\x82\xad\xf7\x4d\x7d\x8a\x0a\x2b\xd4\xa0\x17\x01\x51\x7c\x99\xec\x12\x1e\xc0\x94\x0c\x22\xc0\x45\x59\x5c\x64\xab\xc7\x90\xad\xd1\x98\x23\x00\x3a\x54\xd8\x3c\xef\x16\x00\xdc\xb5\xd6\x3b\x15\xe9\x0d\xf7\x52\x35\x44\xf7\x68\xfd\xb7\xa8\xac\xcb\x94\x03\x03\x36\x7d\x5c\xe0\xad\xfa\x54\xb5\xaa\x9e\xad\x70\x88\xe0\x05\x65\x4c\x5e\x5c\x0d\x8a\x53\x99\xcc\x6e\x0b\xae\xd9\x42\xf0\x04\x93\xe7\xf0\xfe\xc4\x78\xa9\xc2\x70\x5a\xda\x19\x74\x41\xc1\x7d\x4a\xd6\x94\xb4\xd0\xf2\x6f\x4a\x27\x9e\x42\x12\x93\x2d\xac\x19\x86\x22\xf9\x2e\x9a\x99\x55\xd9\x63\xdf\x8d\xa0\x16\x7e\x9c\x6d\x71\xc5\xfd\xd2\xce\x7a\x11\x75\x6b\xd8\x98\x43\x6a\x32\xd8\xc8\x8e\x0d\x56\x2b\x21\x3f\x67\x1e\x60\x80\xf6\xb1\x73\xc8\x19\x7d\x5f\xa1\x0f\x4f\xef\xb8\xe3\xa6\x32\x72\xfb\x60\xa0\x59\x01\x0d\x69\x3c\xba\x29\x22\x22\xe5\x65\x09\xa7\x46\xb1\xb3\xdc\x56\x04\xd6\x66\x39\x76\x54\x38\x96\x9b\x6a\x20\x3d\x16\x5c\x2d\x41\x23\x72\x22\xb4\xf9\xad\xd0\x53\x2b\xbf\x71\x56\x18\x34\xa4\xd5\xc7\x97\xc0\x18\xbc\xbf\xf5\x79\xf7\xa9\x36\x55\x42\x32\xed\x81\x77\x5c\xff\xe6\x38\xa2\x11\xd1\x45\xe6\xf7\x1a\xc8\xb0\x65\x9d\x68\x7e\x64\x18\x94\x31\xa5\xe3\x92\x7d\x8b\x7d\x62\x42\xaa\xac\xb6\xb6\x00\xf3\x8b\xc8\x36\xb9\x9c\x9b\x08\x36\x43\x44\x04\xa4\x77\x7b\x97\x7f\xd9\x73\x04\xc2\x2c\x56\x18\x8c\x1e\x7f\x44\x7c\x7e\xa7\x14\x3e\x7c\x08\x77\xc8\xcf\xc5\x8a\xb1\xde\xab\x76\xc5\x69\x66\x72\xa9\xf3\x97\xea\x0e\xfe\xac\x40\x6e\xbf\xb4\xae\x76\x3b\x2d\x9d\x75\x43\x54\x02\xa0\x20\x43\x25\x5c\xb1\x6f\xd5\x16\x58\x7c\x16\xbe\x75\x06\x1a\xbe\x66\x36\x01\xaa\x0a\xdb\x11\x0b\x90\x74\xc3\xab\xe5\xde\x7d\x3a\xc8\xaa\x4a\xd7\xee\x34\x3d\xf8\xf9\xb3\xf5\x9e\x7a\x59\x51\x78\x9a\xcd\xf2\x42\xb5\x57\x84\x8a\x11\xd5\xe3\x94\x4d\xa0\x08\x54\x3f\xeb\xf1\x26\xb5\x0c\x69\x79\x5c\x44\xeb\x75\x19\x77\x11\xbf\x96\x28\x73\x71\xc2\x32\x45\xf9\x0a\x99\x77\x24\x21\x8e\x59\x49\xe2\x6e\x79\x44\xe7\x52\xa9\xef\x7c\xaf\xe1\x0d\xb7\x1d\x8b\xf4\x10\xe9\x8e\x5f\x79\x15\xf9\x2a\x16\xd9\x27\xbd\x83\x74\x2c\x84\x3b\x03\x00\xe9\x28\x6c\xec\xe3\x2c\x41\x48\xc9\xcf\xbd\xfa\x7b\xe0\x49\xa2\xcd\x54\x86\x3d\x78\x11\x3a\x87\x56\x24\x9c\x23\x5c\x14\x44\x9c\x83\x9b\x19\x5f\x9b\x48\xa4\x0f\xf5\x4a\x2d\x4d\x0b\xfa\xbc\x36\x19\x00\xdf\xa1\xc3\x6e\xa7\xa2\x08\xc3\xbc\xa3\xd5\x47\x6c\x34\x5e\x5c\x3a\x22\x93\x86\x0f\x08\x93\x82\x8b\xc1\x7c\x51\x37\x24\xfc\x00\x2d\x47\x27\x39\xb8\xd9\x62\xc8\x6c\x29\xc1\x2c\x3a\x36\x28\xe9\xa1\x73\x95\xd9\xfe\x94\xdc\xdf\xa3\xe0\xab\xb6\x57\x88\xe4\x44\x69\x38\x91\x61\x67\xcf\xdb\xff\x17\x1b\xa5\x04\xdd\xf4\xfc\xf2\xeb\x37\xfc\x36\xa6\x68\x7d\x19\x31\x8f\xd6\xef\xfc\xee\x57\xb0\x27\xe0\x21\x08\xa2\xfd\xfa\xfa\x69\x06\x83\xe0\x4f\x32\x6c\xea\x57\xef\x61\x59\x7a\x90\x77\x83\x25\xdb\xea\xfe\x46\x68\xca\x22\xa4\xab\x68\xed\x47\x14\x4e\x72\x08\x33\x2c\x10\x76\x91\x28\x26\x38\x1d\xb6\x1b\x23\x3d\xa7\x18\x5f\x6d\xc8\x80\x7f\x40\x59\x69\x23\xbd\xc0\xb8\xe4\x4e\xc0\x87\xe1\x26\x5e\xac\x94\x84\xd6\xc1\xb3\xf3\x22\xbe\x22\xcc\xfe\xcd\xfd\x27\x75\xa6\xfa\x95\xcb\xae\x54\x49\xe8\x62\x7b\xb5\x54\xbf\x27\x6a\x96\xff\x49\xe6\xd4\x0f\xea\xaf\x16\x6f\x62\x04\x8a\x34\x99\xb6\x3a\xb7\x55\xf2\x10\x55\x9b\xab\x65\x07\xe2\x28\xe7\xb9\x05\xa6\xc6\xb1\xfd\xb0\xc1\x18\xce\x43\xca\x37\xf9\x7a\x85\xe3\xab\x1f\x23\x58\x72\xbf\x22\xfa\x7a\x94\x40\x3e\xf4\xa8\x2a\x79\x1e\x1f\x31\x87\x1b\xf9\x87\x80\x8a\xfc\x7e\xdb\xd6\xd2\x67\xf8\x85\xeb\xe1\x82\xd8\x4e\x87\x91\x48\x98\x45\xc7\xa5\xc7\x74\x52\xbe\x2f\xde\x9b\x86\x3c\xf7\xc9\x11\x89\x24\x8f\x3c\x4f\x82\xa5\xe5\xf2\x32\x7d\xda\xc2\x7b\xb9\x84\x7a\x71\xce\xca\x6e\xef\xf2\x46\xe9\xe8\x7b\x57\x0c\xc5\xe9\x4a\x5b\xe3\x2a\x59\x0f\xe7\x19\xe5\xc3\x54\x49\x89\xa9\xd8\x91\x31\x5c\x9c\x04\xd0\x1c\xef\x72\xb3\x7d\x9e\x2f\xd9\xe1\x6a\xff\x20\xa0\x7a\xd4\xf0\x6f\xe1\xe5\x81\x9d\xbb\x75\x3a\x30\xb6\x37\x7b\xc1\xfb\xd4\xde\x7e\x89\xdc\x3e\x7a\x07\xee\x16\x17\xf7\x9d\x3e\x2a\xf3\xf0\xd6\x2f\x44\x5f\x54\x43\xc1\xbb\x62\x97\x4e\x27\x10\x18\x80\xd2\x93\xd1\x7e\x71\x88\x47\x4f\x9d\xd2\x2d\x80\x77\x12\x8f\x81\xf8\xf6\xdd\x96\xbf\xba\x7c\x5d\xb7\x99\xa6\xec\xa3\xfb\xfe\x78\x4e\x6d\x37\xa4\x32\x61\x3d\x6a\x8b\xea\x89\xf2\xc0\x14\xe7\x34\x87\x18\x4a\xe3\xd8\x51\x66\x85\x3d\x56\xf1\xcf\x67\xca\x7e\xa6\xea\x4d\x68\xb0\x51\x8c\xec\x4d\xe5\x87\xcf\x98\x87\x2c\x52\x44\x9c\x38\x37\x79\x2b\x0c\x68\xa5\xac\x28\x8b\x9a\xbd\xc6\x37\xb9\x12\x0d\x74\x32\x38\xe2\x91\xf5\xa0\x03\x4d\xfb\xda\x1e\x67\x73\xe4\x58\x09\x89\xd1\xeb\x6b\x8e\x3e\xe2\x2e\x2c\x91\x20\xe2\xed\xfb\x5d\xc1\xb4\xaa\x38\x39\x9a\xba\x11\x4e\x8e\xdf\x0b\x20\x1d\x71\x98\x30\xb4\x37\x77\x39\xd0\x81\xec\x60\x1c\xbd\xb2\xaf\x09\xe8\xb6\xc1\xfe\x8c\xee\x73\x17\x66\x35\xe4\x56\xd4\x21\x8b\x96\x5e\xe1\x4f\x91\xe7\x56\x06\xc1\x7d\xad\xff\x85\xfe\x92\x22\x9a\xc2\xbf\x53\xf3\xbf\x00\x00\x00\xff\xff\x52\xb6\xc0\x85\x8b\x06\x00\x00") +var _test_certsClientTestuserKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\xb7\x0e\xab\xd8\x16\xc6\xf1\x9e\xa7\x38\x3d\xba\x82\x6d\x82\xa1\x98\x62\x93\xb3\x01\x93\x3b\x92\x89\x06\x4c\x86\xa7\xbf\x9a\x53\xcf\x6a\x57\xf3\x2b\x3e\xe9\xff\xbf\x7f\x8f\x13\x65\xd5\xfa\xe3\xbe\xe1\x1f\xdb\x55\x03\xe8\x89\x7f\x74\x31\xfe\xfb\x41\x4c\x55\x15\x27\xa8\x72\x10\xea\x3c\x74\x44\xb8\xeb\xc5\x0a\xb0\x71\xe0\x17\x57\x74\xb0\x36\xdb\x32\xd5\xf7\xf2\x6d\x4c\xd2\x59\x1c\xf7\xdb\xd6\xdc\x1c\xab\xc3\xef\x78\x45\x6b\x25\x4b\x91\x85\x14\x3c\xb9\xfc\x8e\xea\x60\x1c\x52\x1e\x66\xaa\x69\xdb\xd4\xab\xeb\xa5\x4f\xfa\x2a\xde\xc0\xbc\x53\x30\xfa\x55\x8a\x1f\x97\x7a\x77\x0d\x4a\x1d\x85\x94\x0a\x9b\x77\xd5\xa1\xc1\x4d\x29\x5f\xb3\x41\x5e\xdb\xc6\xb2\xbb\x9b\x3e\x38\x7d\xcf\x97\xd2\x3e\xbf\x17\x59\x35\x2c\xef\x39\x7e\x5b\x29\xeb\xbb\x07\xd4\x33\x09\x4f\xea\x39\x03\x0a\x13\xcc\x4d\x40\xa7\x65\xcd\x59\xac\xa5\xc6\xe6\xb3\xab\x38\xa2\x59\x60\x7b\x50\x60\x25\x2c\xaf\x8e\x59\xdf\xcc\x7f\x25\x6a\xa0\xe9\x2d\x29\x5a\x6f\x72\x80\x64\x5f\x81\x22\xb5\x75\x48\x8b\xcb\x5b\xc7\xf3\x83\x20\x62\xe6\x2a\x39\x8e\xf0\x48\x22\xb3\xf1\x03\x99\x4c\x5d\xac\xba\xd1\x4c\xed\x82\xa7\x5c\x16\x7e\xed\x9b\xa7\x86\x9d\x99\xd7\x17\x04\xd1\x00\x51\x9e\xfb\x35\x6a\xf6\x6c\x88\x39\xa6\xa5\xb3\x75\xeb\xb6\x62\x16\x43\x97\x6e\x67\xfe\x09\x6d\x82\x98\xe4\x0a\x36\x00\xee\xc3\x39\x58\x13\x0c\x5a\xdd\x59\x6a\xf5\x6e\x1d\x7a\x30\x55\x22\x14\xd2\x6f\x79\xc5\xf8\xa1\x0a\xd0\x81\x1c\x1c\x55\x0e\x72\xa2\x94\xb4\xfa\x33\x6a\xdd\xa9\xdc\x2c\x03\x91\x19\xa8\xc6\x0d\x1d\xae\x5f\xa2\x00\xc4\xc8\x69\xf8\x3a\xa6\x93\x22\x31\xcf\xb0\x11\x9c\x4b\xe2\x03\x89\x30\x1c\xda\x8a\x53\xff\xa5\xa1\x2d\x5c\x66\x19\x97\x5f\x52\x36\xd1\xf9\xe9\xa4\x0a\x8b\x80\x48\xf4\x43\x4a\x0c\x3e\xe4\xf5\xcc\x40\xea\x1c\x4e\xc7\x71\x1d\x48\x96\xcd\x75\x70\xde\x47\xb7\xd1\x18\x33\x9e\x72\xc8\x67\xd0\x8b\xad\xf4\x61\xaa\xcf\xa2\xf8\x61\x32\x63\x0d\x80\xfb\x8e\x21\x93\x92\x4b\x77\x37\x65\x91\x20\x60\x5a\x54\x2c\xc7\x1c\xff\x28\x82\x34\x28\x1a\xe0\x7c\xb9\x32\xbe\x92\xde\x21\xa6\x88\xd7\x36\x17\x5e\x6e\xf3\x93\x95\xcb\x47\xbb\x27\xe6\xa8\xd5\x5b\x4f\x10\xc8\xa3\xac\xe4\x46\x31\x45\xf1\x41\x79\x1e\x7c\xd2\xea\x1d\xbd\x8d\xe3\xad\xf4\xa2\x8f\xbe\xbf\x78\x56\xe0\x47\xfa\xb6\x73\x14\xd0\xfd\x04\xb1\x4d\xc0\xe6\xa6\xa3\x35\x4d\x2e\xb4\x88\x39\x61\x44\x20\xe7\xd9\xe6\x5a\x1d\x5c\xfd\xea\x92\xb4\x97\x15\x32\x8f\xee\x66\x93\x7c\x8e\xc5\x67\x63\xd3\x7c\x50\xc3\xa6\xbc\xc6\x0b\x25\x89\x67\xfb\x62\x44\x23\x0c\x5a\xbd\x8f\xf6\x45\x17\x6f\x34\xe7\xf7\x15\xe1\xb8\x61\x43\x61\xc7\x57\xb1\x08\x9f\x99\x39\xec\x1c\xb9\x3e\x69\x74\x98\x3f\xc4\x10\xd0\x2d\x87\xcd\x70\xdf\x81\x19\xb6\xde\x2f\x7f\x3c\xd5\x9c\xf9\xb2\xfd\x7d\x4e\x3d\x6a\x91\x5b\x40\x12\x11\x72\x47\x5d\x1b\x1d\x96\xb4\x0c\xe0\x65\x83\x1e\x94\xae\xd2\x38\x1c\xbf\x60\xa5\x6f\xe2\x1d\xdb\xb1\x28\xab\xa5\x26\xee\x13\x47\xb9\xb2\x4a\x44\x87\xb4\xd0\x4b\x2e\x3a\x3a\xb2\x9b\x95\x99\xb3\x23\x85\xa6\x61\x85\x4a\x53\xa3\x65\xb5\xbe\xe2\x10\x09\xef\x50\x8f\x51\xa8\xd4\xf9\x96\x03\x2b\xfd\x32\xe5\x23\x5e\x31\x77\xd3\xc6\x8a\x2c\x18\x49\x0c\x36\xa3\xbf\x32\xfc\xaf\xf8\xba\x1e\x15\xe2\x85\x52\xaf\x16\x44\xe9\xb8\x2f\x29\xbe\x71\xd4\x96\x04\x98\x0e\x45\xc6\x05\x73\x93\x9f\xac\x30\xb7\x93\xfb\x40\x01\x6c\xc4\x5c\x17\xc2\xbb\x3b\xa4\x59\xf7\xa7\x86\x9e\x7a\x66\x0d\x5e\x4a\x85\xb8\x34\x5e\x67\xfc\x24\x9d\x44\x60\x80\xc2\xce\x8c\x30\x5f\xbc\x5f\x9f\xf1\x1b\x49\xb6\xc5\xaa\xa2\x96\x48\xb5\x14\xf8\x7e\xe2\xd9\x34\x64\xe2\x33\xf5\x7a\x5f\x0d\xe0\x0d\x28\x89\xbe\x42\xc0\x21\xe9\xc4\x75\x61\x94\x57\x2e\x3f\xb3\xf9\x62\x2e\x82\x91\x4c\x83\xcc\x18\x79\x74\xa3\x98\x8a\x0b\xa4\xdd\xad\x59\xce\xfc\x25\x4f\x6e\xbd\xda\xf9\x9b\x49\xde\x42\x0e\x8e\xe0\x6b\x8b\x81\x87\xf8\xba\x74\x3c\x14\xeb\xe5\x53\x56\xef\x06\xa9\xb4\x8c\x52\xca\x36\x2d\x5c\x4c\x7f\x7c\x5a\xed\x29\x24\xcf\xf8\x8a\x34\x2b\x26\xd2\x37\x1b\x31\xa5\x40\x39\xb7\x0f\x47\x49\x08\xcb\xfc\x77\x4d\x0a\x02\x98\xce\x2f\x0c\xdc\xaf\x1d\x58\x97\xe4\xcd\x31\x55\xdd\x16\xca\x4b\x28\x2b\x82\x0e\x2e\xfd\x1b\x01\x75\x75\x86\x66\x76\x29\xec\x87\x42\xeb\x70\x92\x4c\x58\xb9\x3c\x90\x9a\x4d\xfa\xc6\xd2\x84\x7c\xac\x7e\x24\x44\xbb\x69\x0a\xc3\x8a\xd2\x2a\x22\x5a\x20\xca\x87\xff\x97\x7c\x76\x59\x9e\xbd\x8b\x86\xe8\x08\xfa\x0b\x58\xa9\x31\x72\xa2\xb1\x6f\xc0\x7f\x44\x32\xeb\xc1\xa0\x73\xdf\x10\x19\xb6\xb3\xc1\x7a\xa1\x7f\xba\x95\x5c\x81\x4d\xf2\x1d\x4d\x65\xa9\x81\xc9\xe4\xcf\x5a\xbd\x4f\x96\xdb\x43\xea\xc9\xb7\xe2\x06\x43\x83\x14\x4e\x21\x91\x4b\x5b\x4d\xdf\x8c\x2e\xfe\x12\xac\x8d\x24\x24\xd2\x8f\xb3\xe7\xfb\x8b\x20\xbb\x08\xbb\x5f\x3f\xbf\x57\x2c\xf9\x7a\xa6\x46\x78\x47\xe5\xa2\xc7\xa1\x30\xc5\x0c\x13\x73\xce\xe1\x73\x72\xac\x48\xec\xa9\x30\xeb\x4f\x88\x8a\xca\x4f\xaa\xcc\x33\x90\x87\x70\x7b\x9e\xf6\xef\x94\xb9\xda\xdb\x67\x3c\x6e\x7f\x6e\xd8\x26\xc3\x6d\xed\xbf\x94\xf2\x99\xe0\x7a\xdd\x78\x97\xed\xe1\x6d\xf4\x64\x82\x69\x12\x97\x44\xf6\x79\xb8\x3d\xd8\xd0\x6a\x96\x14\xc4\xb3\x67\x5f\x6e\x80\x4f\x3e\xae\x5a\x60\x03\x37\x5b\x44\x6d\x81\xf9\x1b\x0f\x1c\x8c\x22\x26\xbb\xbe\xca\x1a\x94\x2a\xe9\x94\xf3\x09\xf8\xe4\x96\x44\x49\x3b\xb6\xcf\x9e\x37\xc4\x7b\x03\x93\x82\x78\x9c\x3f\xa6\x96\x9e\x04\x49\x62\xb1\xc9\x87\x78\x6f\xc9\x2f\x2b\xb5\x1b\xe2\x09\x08\xbf\x87\xc5\xd4\xd0\xcf\x5b\xbd\xa3\xac\xb9\x14\x1e\x70\x58\x1b\xa3\x8b\xe1\x3f\xff\x20\x7f\xb3\x22\x5a\xc2\x7f\xe7\xe6\xff\x01\x00\x00\xff\xff\x11\x72\x9a\x9e\x8f\x06\x00\x00") func test_certsClientTestuserKeyBytes() ([]byte, error) { return bindataRead( @@ -199,12 +201,52 @@ func test_certsClientTestuserKey() (*asset, error) { return nil, err } - info := bindataFileInfo{name: "test_certs/client.testuser.key", size: 1675, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x9, 0x93, 0xd9, 0x76, 0x64, 0x60, 0x1b, 0x1b, 0x60, 0x81, 0x42, 0x5d, 0xee, 0xa1, 0x6b, 0xcc, 0x3f, 0x7c, 0x87, 0xe8, 0x57, 0xc1, 0xc9, 0xa1, 0xf9, 0x86, 0x39, 0x95, 0x54, 0xaf, 0xaa, 0xa1}} + info := bindataFileInfo{name: "test_certs/client.testuser.key", size: 1679, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x59, 0xad, 0x57, 0x1b, 0x7a, 0xa4, 0x59, 0x61, 0xb1, 0x12, 0xe8, 0xf7, 0xbd, 0xc6, 0x2c, 0xac, 0xdc, 0xe6, 0x7e, 0x3e, 0x9e, 0x62, 0x69, 0xfd, 0xb6, 0xdb, 0xbf, 0x4a, 0xe3, 0x8, 0x7f, 0x9a}} return a, nil } -var _test_certsNodeCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x94\xc9\xae\xb3\x46\x14\x84\xf7\x3c\x45\xf6\x56\xc4\x64\x3c\x2c\xb2\xe8\xa6\x1b\x68\xec\x06\x37\xa3\xf1\x8e\xb1\x0d\xbe\xc0\xbd\xc6\x4c\x7e\xfa\xc8\x7f\xa4\x44\x4a\x52\xab\xa3\x5a\x94\x74\x54\x9f\xea\xf7\x8f\x20\x36\x89\xf3\x9b\x8e\xbd\x80\x18\x44\x07\x01\xfe\xe5\x0a\x94\x10\xc4\x90\xae\x83\xba\xe6\x60\x26\x10\x70\xc2\xc0\x46\x56\xd1\xaa\xc5\x51\x09\xc7\xe7\x99\xbc\x5f\x9b\x5a\x4c\x1a\xe0\x40\xfe\xf8\xb9\x3f\x6a\xf3\x38\x4b\x10\xb0\xc1\x00\x08\x3c\x05\xea\x91\x19\x83\x04\x45\x8c\x9d\xf0\xfc\x85\x32\xc5\x79\xe6\xed\xf1\x9e\x28\x7c\x31\x02\x10\x40\xee\x44\x10\xd0\x00\x61\x67\x4a\x94\xd7\x9a\x29\x46\x93\xea\x10\xb1\x00\x94\xc6\x2c\xad\x02\x45\x40\xa1\xe8\xb1\x38\x0d\x50\x68\x00\xd3\x8f\xe9\x04\x9f\x9b\xfd\xed\x51\x9d\x2e\xb8\x01\xec\xaf\xb0\x3e\xd0\xc3\x7f\xc2\x84\x14\x61\x87\x82\xc1\x04\x72\x88\xc1\x42\x71\xd6\x1e\x1f\xb7\x40\xd7\x81\x4f\x66\xc4\x12\xfb\xd4\xdf\xc8\x7d\xca\x1d\xc0\x30\x84\x0c\x20\xce\xf1\x05\x7c\x5e\x66\xbd\xce\x39\x86\x02\x38\xbd\xe7\xda\x3a\xbc\xda\xb2\x96\x73\x9b\x18\xc6\xb9\xac\x68\x13\xbb\x45\x2c\xb2\x7a\xd4\xba\x4c\xda\x6e\xb2\xfc\xe9\xa9\xd6\x85\xf5\x28\x24\xae\xb2\x3b\x6c\x4e\xe6\xe1\xec\x92\xfd\xb0\x3b\x50\x61\x9f\xbb\x65\x4f\xb3\xf4\x16\x6c\x5a\x5c\x6d\x4a\xeb\x4a\xc7\xe3\xba\x57\x1e\x3b\xcb\x0a\xab\x51\x2c\xdb\xee\xe4\x1b\x6e\x67\xe8\xbe\xff\x52\x9a\xac\x57\xfb\x61\x42\x3f\xeb\xf1\xb2\x3c\xb5\xcd\xf7\xb7\xd0\x31\x37\x42\x27\xf4\x74\xe5\xca\x4f\x49\x0d\x9b\xfc\xfb\xfe\x53\xbb\x8e\xe7\x6e\xb9\xaa\xc9\x09\xab\xdf\xce\xd6\x6b\x77\x1b\x3d\xdb\xdb\xde\xe4\xe6\xdb\xab\xce\x17\x59\x1d\x71\xea\x3b\x76\x77\x11\xb4\xaf\xce\xbd\xb2\x8c\x2c\x38\x99\xcb\xa8\xf6\xbd\x7b\x6f\x6f\x4b\xd1\xb5\x36\xf3\xa4\xc6\xfa\xde\xb2\xeb\x88\x2d\xb5\xa6\x59\xd2\xc5\x5f\x44\xb5\xa9\xb5\x11\xb7\xcd\xe2\xc5\xab\x62\x3b\x00\x09\x56\x50\xe4\x6a\x75\xf1\x80\x0c\xaf\xdf\xcd\x81\x9b\xfb\x4b\x57\x77\x56\xca\xf2\x33\xa5\xbb\xf8\x2a\xda\x11\x12\xf3\x47\x7f\xe5\x43\xdf\x96\xbe\x8c\xe7\x78\x88\x76\xcf\x97\x56\xbd\x52\x8d\x7c\x79\x82\xac\xda\x1a\x79\x94\x45\x9a\xec\xbc\x45\xec\x4d\xf7\x98\x47\x62\x99\xeb\x60\xc6\x00\xa4\x4e\x4f\xcd\x64\x46\x3c\x41\x91\x27\x5d\x00\xb3\x44\x08\x18\x02\x3c\xe6\x14\x4a\x9f\xe6\x0a\xc1\x66\x2c\xa6\x90\x99\xba\x3e\x98\x80\x85\x06\x9c\x29\x84\x9c\x3f\x21\xc7\x06\x64\x39\x02\x0d\x90\x3f\xfd\x5b\x1e\xc6\xe7\x06\x0c\x9c\x7f\x0d\x99\xe2\xdc\x33\xf3\x3e\xe5\xaa\xaf\x0b\x70\xed\xc7\xcc\x3c\x36\x49\xbc\x5a\xd0\x3a\x00\x00\x4c\x0b\x83\xff\x13\xfe\x37\x17\xe7\x0f\x17\xc2\x07\x06\x00\x02\x33\x81\x6f\x05\x94\xd7\xcc\xd8\xfd\x28\x50\x19\xde\x52\xd1\xe0\xbc\x3a\xbb\xb9\xa9\x15\x6c\x6b\x32\x64\x4a\xdf\xd5\x7d\xaa\xec\xb4\xf2\xc9\xdc\x18\x7c\xf6\xe6\xb6\x3c\x44\x42\x23\x4e\xb5\x78\x1a\x99\x7c\x30\x23\xc5\x5c\xa5\x36\x40\xb7\xd3\x75\x7f\xd6\x2a\x9e\xbc\xb6\xf9\xf1\x5e\x44\x6c\x52\xd7\xde\x97\x82\x89\xb1\x59\x61\xd1\xde\x0c\x8d\x58\x34\xc3\x20\x73\xcb\x0d\x11\x9e\xed\xa9\xa1\x7c\x38\xbd\x7e\x6c\xdb\x0d\xde\xf0\x69\x8b\x65\x26\x1f\x86\xb1\x1d\x0b\x75\xef\x91\xdb\x63\xd8\x85\xe2\x76\xd3\xbe\xa1\x28\x27\xb2\xe2\x19\x85\x2d\xe7\xd6\x28\x1a\x92\xd3\x2a\x70\x10\x82\xe4\x84\xdf\x72\xec\x4c\xd0\x7a\xef\x25\x68\xe2\xdb\xcb\x99\xa2\xdb\xe6\xc6\xf8\x7a\x59\x9b\x92\x87\x8b\x5e\x9e\xd5\xf2\x2c\x76\x27\x1b\x5f\xdf\xcc\x34\xd6\xe5\xec\x69\x41\xbd\x42\x47\x17\x81\x10\xa6\x30\x2c\x8e\x62\xe0\xb6\x77\x97\xe4\xaf\xe2\xae\xc5\x43\x7a\x0b\x97\x88\x84\x6c\xec\xd7\xce\xe9\x93\x5d\x45\x9f\xfc\x2e\x75\xc5\x4f\x5f\x24\x7a\xbf\xcf\xb2\xee\x90\xb7\x56\x4e\x1d\x31\x7a\x0b\xd7\x33\xfd\x22\x53\xd5\xaf\xdf\x51\x47\xb5\x52\xf4\x4c\x72\xf0\xbf\xae\xca\x91\xf6\x7f\x08\xbf\x36\x07\x3b\xe8\xbf\x3b\xf4\x67\x00\x00\x00\xff\xff\xa2\xef\x29\x91\xa4\x04\x00\x00") +var _test_certsClientTestuser2Crt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x64\xd4\x49\xaf\xb2\x48\x14\x06\xe0\x3d\xbf\xa2\xf7\xa4\xa3\x70\x51\x71\xd1\x8b\x9a\xd0\x02\x0b\x2c\xe6\x62\x07\xc8\x20\x32\x88\x57\x45\xf8\xf5\x9d\xfb\x75\xd2\x9d\xf4\x77\x96\xcf\x49\xde\x9c\xe4\x24\xef\x9f\x3f\x03\xc9\x81\xda\x7f\x20\xe2\xfa\xd4\xa0\x08\xf8\xe4\x97\x4a\x8c\x52\x0c\x31\x42\xa0\x98\x2b\x30\x51\x08\x2a\xca\xd9\x75\x5f\x8b\xcf\xf7\xfb\x4e\xc7\x36\xcb\x52\x8c\x66\x63\xbd\x5d\x80\x0d\xab\xdb\x58\xdf\xae\x87\xfd\xb4\x86\x80\x7f\x1b\x00\x83\x87\xc4\x5c\x3a\x11\x20\x70\xc8\xb9\x45\xa6\x16\x67\xaa\xfd\xc8\xbb\x7d\x2d\xd4\xea\x63\xf8\xc0\x87\x95\x1d\x42\xc0\x7c\x4c\xec\xb7\x50\x9f\x73\xa6\x1a\x4d\x8a\x20\xe6\x3e\x28\x8c\x69\x3d\x4b\x0c\x83\x2f\xd6\xd0\x8f\xdd\x00\x8d\x2d\x66\xfa\x83\xb6\xff\x63\xf9\xbf\xc6\x50\xf5\x21\x0d\xe0\xff\x84\x0d\x3e\x0a\xfe\x0b\x93\x52\x4c\x3c\x06\xc1\x01\x28\x01\x01\x1f\x66\x5e\x0e\xe1\x72\x39\x86\x4b\x12\xd3\x99\x51\x0a\x69\xf3\xff\xd3\x89\x01\x80\x83\x00\xd7\xc1\xcf\x5e\x42\x95\x85\x00\x27\xe0\xe9\xbf\x2b\x99\x1d\xba\xd0\x89\x51\xc7\xbf\xf3\x70\xf5\xb9\x42\x6b\xf9\xb4\x2a\x02\xcc\x8d\x0d\x77\xed\x78\x7b\xab\x59\xcb\xdc\xc9\xaf\xf1\x7d\xeb\x34\x54\x86\x2f\xd5\x90\xdc\x3e\x57\xbb\x58\xf4\x4e\xcf\x36\x82\xd4\x05\x2b\xfa\xca\x54\x31\x5a\xde\xbb\x6d\x5d\x1e\xda\x8b\x7d\xee\x9d\x5d\xd0\x54\x7c\x27\xa2\x53\x71\x4a\xc6\x03\x6a\xc2\xe6\x1d\x56\x7a\xb6\x94\xb7\x41\x12\x0c\x17\xe3\xea\xbb\x94\x37\xcf\xe5\x51\xf0\x0e\x7a\x5f\xb1\x17\xfa\x0f\x14\x29\x91\x9d\x72\xd5\xf6\x4e\x47\xda\x1c\x33\x65\x4c\x4c\x30\xe7\xc2\xd2\xc6\xe0\x73\x91\x17\xf0\xca\x86\x36\x31\x4c\x09\x9c\x15\x25\x98\xf2\x48\xee\x22\xa8\x6c\xb2\xbc\x54\x45\xb0\x7a\x8c\xe2\x95\xad\xf6\x68\xdb\x9e\xf3\x60\x09\x15\xf9\x84\x62\x63\x17\x2c\x5a\x90\xad\x90\xa9\x6e\xd3\x61\xe2\xee\xa8\xbe\xad\xc8\x92\xce\xba\x9a\xd1\x94\x9d\x9a\x74\x5b\x85\x61\xbf\xe7\x6a\x36\xc4\x0f\x70\xef\x5a\xa7\x4b\x35\x7c\xd5\x76\xea\xed\x66\xaf\x36\xc7\xfd\x6b\x6d\x79\x83\x1b\xef\xbb\x15\x7a\x05\xf2\xed\x05\x5e\xe7\x0d\x1b\xa4\xcb\x57\x63\x6a\xbd\xaf\x2a\x07\x6d\x45\xfa\x4c\xf5\x1c\xf1\x38\x92\x12\xee\x7c\xe1\x43\x4e\x31\xe0\x00\x0e\x73\x3e\x99\x3e\x70\x7e\xde\x78\xe4\x3a\x04\xa5\x4e\x20\x60\x08\xa6\x60\x92\xc8\x24\x70\xe8\xae\x5b\x08\xa6\x09\x55\x82\x5a\x93\x80\x90\x07\x47\x30\xd1\x09\x73\x61\x5a\x43\x42\xeb\x77\x6e\x03\x4e\x4e\x90\x03\x5c\x55\x04\x02\x1c\xde\x19\x22\x07\xdf\xbc\xcd\x12\xaf\xd3\x10\x95\x72\xbd\x68\x4d\xaf\x65\xd7\x72\xbb\x73\x2e\xed\xc6\x24\xe3\x25\x5a\xb5\xb2\xe9\x5a\x7d\xb1\xbd\x4c\xca\x74\x6d\x34\x9a\x9c\xfb\x2c\xe1\xd7\xcc\x4e\x15\xcb\xcb\xd9\x62\x65\x6b\x4f\x2a\x52\x76\x44\x22\xd9\xcf\x45\xd1\x3b\xc5\x6e\x5e\x67\x59\x52\xdd\x03\xc7\x97\x3d\xab\xcb\x46\xd9\x03\xe7\x2c\x85\xed\x0a\x56\x45\x34\xe8\xd5\x52\x3f\xc3\xb2\xc1\x9a\xbe\xe4\xa6\xa6\x9c\xba\xad\x54\x3f\x1f\x96\x83\xb7\x16\xb9\x87\x5f\xd7\x26\x3c\x51\xa1\x47\xdf\x6a\xe2\x1d\x5e\x10\xdb\xef\xc6\x69\xc0\x59\xd0\x06\xf6\x9e\xe8\xa6\xc0\x82\x76\x19\xa7\x49\x06\xf9\xc6\x96\x2b\xd1\x19\xce\x28\x81\xf9\x45\xc1\xa2\xe3\xf5\x57\x44\x2f\xce\xde\x36\xa6\x93\xdb\xd7\xf7\x7b\xbb\xd6\xdf\x1f\x3d\x5d\xe7\x79\xaf\x91\x4c\x29\xce\x43\x1c\x94\xf1\x70\x54\xf7\xe0\x1e\x21\xf7\x2b\x56\xaa\x0b\x56\x2b\x22\xe5\xbd\x35\x0f\x39\xb7\xac\x2b\x78\xdd\xeb\xab\xb3\xc4\x69\xa2\x2d\xe2\xa8\xc3\x47\x14\x46\x8d\xb9\xe3\x79\x5d\x9a\x94\xdf\xdd\xc8\xb5\x1a\x96\x86\xda\x88\x43\xb4\x38\x91\x2f\x0c\x76\x7b\x3e\xa4\xf2\xd5\x1c\xc2\xfe\xb4\x5a\xb5\xd5\x5f\xd2\xaf\x8a\x20\x36\xfe\xbd\x36\xfe\x0e\x00\x00\xff\xff\x24\xe9\x31\x91\x53\x04\x00\x00") + +func test_certsClientTestuser2CrtBytes() ([]byte, error) { + return bindataRead( + _test_certsClientTestuser2Crt, + "test_certs/client.testuser2.crt", + ) +} + +func test_certsClientTestuser2Crt() (*asset, error) { + bytes, err := test_certsClientTestuser2CrtBytes() + if err != nil { + return nil, err + } + + info := bindataFileInfo{name: "test_certs/client.testuser2.crt", size: 1107, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x6, 0x5d, 0x52, 0x2c, 0x3e, 0x31, 0xd3, 0x52, 0xfd, 0x7f, 0x7e, 0x41, 0xf2, 0x8b, 0x23, 0x8b, 0xe9, 0x8d, 0xa0, 0xc7, 0x68, 0xa3, 0x4, 0xe, 0x1e, 0x15, 0xf9, 0xcb, 0xac, 0x71, 0x9b, 0x84}} + return a, nil +} + +var _test_certsClientTestuser2Key = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\xb7\x0e\xab\x6a\x16\x86\xe1\x9e\xab\xd8\x3d\x1a\x11\x0c\x18\x8a\x53\xfc\x04\x93\x73\xa6\x23\x99\x9c\x4d\xbc\xfa\xd1\xd9\xd3\xce\x6a\x57\xf3\x14\x9f\xf4\xfe\xe7\xdf\x63\x05\x51\x36\xfe\x38\x2e\xf8\x63\x39\x72\x00\x3c\xe1\x8f\x2a\xc4\x7f\x3f\x90\x2e\xcb\xc2\x0c\x64\x16\x00\x95\x03\xb6\x00\x7e\xde\x51\xc1\xba\x38\x04\x66\xc4\x0d\xf6\x96\x07\xc8\xd5\xb0\xea\x73\xf5\x38\x07\x74\x27\xfa\x38\xa8\xe9\x32\x6a\x8b\xc2\xb6\x99\x37\xd1\x4c\x41\x66\x2b\xc3\xec\x8e\x7f\x9c\x31\xc7\x87\x28\x1e\xcd\x51\x27\x63\xa1\x2e\xf5\x72\xac\x14\x9c\xe7\x9e\xe3\x4d\xd5\x5f\xb1\x2f\x0c\x6b\x34\xdf\x7e\x5b\xd9\xef\x38\xd4\x4a\x2d\x59\x44\xae\x0d\xda\x03\x0a\x2a\x3a\x7b\xbe\xdd\x14\xeb\x7c\xb9\x20\xdb\x17\x26\x7f\xcf\x5a\xda\x03\xeb\xbe\x22\x37\xf0\x56\x2e\xc4\x42\x23\xb5\x71\xc3\xd5\x24\xb9\x95\x32\x6c\x49\x14\x70\xe7\xb1\x4a\x2c\xfe\x55\xc0\x0f\x04\xf6\x6c\xea\x93\x8f\x02\x2c\x0c\xf3\xcf\x3c\x84\x87\x90\xc5\xc8\x2c\xff\xe2\xb1\x8f\xac\x4b\xbc\x67\x08\xc3\x51\xbd\x95\xfb\x4f\x80\xc1\x1a\x17\x7d\xde\xfe\x43\xf8\x19\xc2\x29\x38\x95\x4e\x27\x64\x3b\x0b\x7e\xa8\xa1\x6a\xd1\x78\x26\xa7\xba\xd6\xa6\x54\x15\x04\x23\x63\xe3\xd9\x14\xad\x60\x1e\x7a\x73\x48\x09\xbe\x21\xde\x78\xd7\x19\x08\x29\x31\x3b\xaa\xba\x93\x13\x31\x03\xc2\xed\x3e\x0c\x75\x3b\xd8\x2d\x52\x9f\x8a\x57\xab\x10\xa3\x87\x63\x22\x81\x08\x63\x86\xbb\x66\xbc\x4a\xc2\x97\x7d\x7b\xb1\xc7\xda\x32\x0f\x6c\xc0\x82\x49\x66\x81\xf8\xd3\xe4\xdf\xcc\xf9\x67\x38\xbf\xa5\x58\x87\x7a\x13\x0c\x32\x15\x94\x70\x76\xf1\x47\xc7\x3b\x20\xf3\x49\xc6\x33\x2e\x09\xa7\xe2\x9b\xe6\x68\x57\x4f\x9c\xa8\x0f\x8a\x69\xbf\xbe\x67\x78\x71\x48\xc9\xf6\x87\x4e\xa7\x8b\xf9\xe9\xe9\x57\x40\x43\xa3\x54\x1b\x6d\x19\x74\x85\xfb\xae\x04\x53\x71\x3c\x9a\xea\xb9\x4e\x6e\x5b\xf2\x89\x60\xfc\xe3\x70\x72\xbd\xe6\xf8\xee\x0e\xe1\x29\xc6\x27\x76\xca\x6f\xbb\x69\x4c\x6a\xb8\xda\x52\xf8\x5d\x9a\x06\xc1\x5d\xf4\xfd\x02\xcc\xba\x42\x2b\x79\xaa\x26\x29\xcb\xe3\x10\x80\xeb\x3f\xb1\x51\xb5\x69\x7c\x0b\x4f\x3e\x2f\x03\x83\x08\x88\xcd\x30\x66\xd5\x08\x2e\xed\x2d\x0f\xc7\xbf\x1c\xbc\x04\xd8\xe8\x43\xb7\x69\x6e\xbb\x11\x2d\x75\x94\xd4\x1d\x7d\x2b\xc3\x19\xcc\x41\x29\xe6\x1f\x44\x19\x95\x46\x45\xbe\xcd\x00\x97\x72\xa8\x35\x71\xe0\x4a\x77\xb4\xd7\x89\x5f\xf0\x0e\x8f\x33\xce\x20\x3a\xd9\x3d\x42\xf2\x0d\xee\x55\x35\x3c\x54\x55\x8b\x2a\xd5\x95\x43\xb1\xec\x9d\xca\x7b\x0d\x93\xb2\x1a\xf8\xe6\xf9\xdb\x40\xb8\x18\x83\xf4\xe1\xad\x9b\xac\x17\xf7\x50\xec\x59\xe3\x32\x38\x43\xd9\x11\x25\x2b\x88\xc5\x2a\x8a\x30\x05\xae\x8a\x05\xf0\x0a\x25\xa6\xd8\x2c\xd0\x8d\xbb\x3c\xf1\x54\x19\x52\x27\x27\xc9\x78\xc2\xa3\xec\xa7\x20\xa6\x1f\xbc\x72\x98\xb5\xf1\x9b\xda\xf2\x11\xfd\x12\x5c\x91\x81\x25\xc8\x9c\x0f\xda\xcf\x34\xb1\x2f\x01\xa6\x02\x6c\x4f\xf2\xe6\x44\xb7\xc4\xee\x0e\xc7\x45\x98\x5f\xae\x12\x5e\x51\x16\xab\x37\xb4\x5d\x32\xbf\xb4\x8a\xb2\x48\x90\xa8\x54\xb3\xda\xe1\xaa\x7b\x64\x09\xf1\x25\xba\x23\x8b\x69\xe9\x47\x42\x7d\xc4\x43\xc9\x44\x7e\xd5\xc1\x01\xb7\x88\x9d\xd9\xef\x7b\xf8\x49\xfc\x79\xd4\x4d\x19\x36\x9c\xbe\x34\xe3\xe8\x9d\x78\x28\x75\xe8\x5f\x31\x9a\xa8\x04\xc4\x61\x0d\xae\x32\xe0\x35\x93\x92\xea\x6e\x49\xd0\x69\xf0\x6f\xcd\x7f\x97\x1f\x47\x38\xcb\x3d\x4c\xaa\xc1\xeb\xf2\xee\xe5\x85\xb2\x3f\x8e\x64\xb8\x64\x24\xe9\xcd\xea\x73\x6e\x6d\xf2\x75\x75\xae\x10\x0e\xf2\xbe\xc8\x24\xe3\x57\x01\x0a\x97\xa9\xab\x6c\x03\xab\xfc\x1e\x77\x58\x52\x9c\x50\x8c\xf2\x63\x17\x02\xc3\x00\xde\xee\x39\x94\x12\xf0\x8c\xd9\x06\xe1\x78\xc9\x4c\x3f\xb7\xaf\xc6\x73\x30\xc8\x7f\x14\x2e\x98\x91\x30\xc0\xaa\xe4\xa9\x79\x6b\x5d\xd8\x49\x32\x56\x49\x76\xe6\x6f\x68\x0d\xaf\xd7\xc8\x47\x3e\xd9\xfd\x25\x1f\xc3\x75\x78\x0e\xaa\xcb\x88\x25\xb6\x29\x62\x49\xb7\xe1\x40\x63\x1a\x95\x73\x6f\xee\x99\xdb\xa4\x19\x77\x65\xe5\xa0\x5b\xa7\xbb\xaa\x41\x57\xcb\x16\x36\x70\xce\xc7\x3c\xf5\x3c\x56\xf4\x6b\xdc\x24\x74\x37\xbd\x3e\x0b\xe3\x36\xcb\x3c\xfa\x66\x55\xfe\xe7\x41\x8d\xfe\xa3\xeb\xb6\x96\x85\xe7\x72\x53\x7d\xf6\x50\x32\x42\x92\x64\xab\x97\x79\x4e\x96\xf5\xb5\x9f\xae\x35\x66\x52\x9b\xa1\x20\x49\x69\xe4\xe5\x01\x7e\x36\xba\x4d\x81\x73\xf3\xf6\x3f\xf7\xa1\x42\xa9\x6b\xe8\x9b\x95\xfb\xd2\x34\x4d\x8c\x1a\x96\xb3\x8f\x86\xc5\xeb\x7f\xbb\x58\xb8\x8c\xc0\x4c\xc9\xe1\xfc\x04\x21\xfc\xe3\x7c\xb3\xa4\x08\x87\x81\xdb\x86\x5f\x1c\xf9\xcc\x93\xb0\x8b\x03\xe4\x37\x38\xa1\xca\x2d\xf9\xfe\x12\x1d\x4e\x33\x7a\xc6\x3e\x0b\xe5\xb3\xad\x54\xdc\x69\x7c\x1f\x36\xf1\xbd\x13\xaa\xc0\x64\xd1\xae\x44\x0d\x3d\xcd\x7b\x2f\xb5\x24\x7c\x66\x84\xa0\xa4\xef\xbc\x8d\xd0\x32\xcf\x77\x0f\xcc\x55\xcc\x95\x17\x69\xdf\x55\x84\xfd\xd8\x07\x99\xaf\x93\x3b\x36\x3d\x56\x8d\x53\xfb\xa9\xcf\x99\x54\xad\xea\xbc\x51\x60\x14\x12\x53\x0b\x9b\x2b\x93\x06\x47\xe6\xc4\x4c\xbf\x21\x41\x29\xe7\x35\xff\x97\x0c\x82\xba\xda\x12\x94\xa2\x77\xbc\x34\x09\xb0\xf7\x3b\x91\x70\x64\x77\x85\x71\x90\x85\x95\xf1\xc6\x83\xbb\x7a\xb5\x61\xc8\xef\x46\x3a\xc0\x72\x9c\x0b\x49\x92\x05\x10\xcf\x16\x26\x3e\x89\x00\x36\x50\xec\x84\x59\x59\xf4\x2c\xaa\xe6\xc5\x75\xf2\x13\x2d\xfd\x1e\x06\xd0\x75\xa7\x40\xb5\x3e\xa3\xc1\x51\x53\x5d\x78\x9b\x42\x13\x2d\xb9\xad\x60\x7c\xe4\x55\x56\x0d\xcd\x8a\xff\x9d\x72\xe6\x7a\x87\x63\x99\x17\x33\x2d\xf1\x4a\x6a\x6e\x15\x9e\x8d\x71\x12\xc3\x79\x41\xd3\x8d\x39\x83\x43\xef\x35\xbe\xca\x5a\xdb\x66\x53\xf2\xc9\xce\x7f\xfe\x81\xfe\x66\x45\x30\xf8\xff\x9f\x9b\xff\x06\x00\x00\xff\xff\x3f\xfd\x30\xca\x8f\x06\x00\x00") + +func test_certsClientTestuser2KeyBytes() ([]byte, error) { + return bindataRead( + _test_certsClientTestuser2Key, + "test_certs/client.testuser2.key", + ) +} + +func test_certsClientTestuser2Key() (*asset, error) { + bytes, err := test_certsClientTestuser2KeyBytes() + if err != nil { + return nil, err + } + + info := bindataFileInfo{name: "test_certs/client.testuser2.key", size: 1679, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x90, 0xd7, 0x9, 0x37, 0x9b, 0x4b, 0x84, 0xd7, 0x9b, 0x46, 0xe4, 0x65, 0x80, 0xd2, 0xab, 0x8a, 0xf0, 0x8e, 0xc3, 0xa6, 0x9c, 0x9, 0xb3, 0x40, 0x7f, 0xe8, 0x61, 0x46, 0x65, 0xc0, 0xc, 0xbd}} + return a, nil +} + +var _test_certsNodeCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x94\xcb\xee\xba\x56\x14\x85\xe7\x3c\x45\xe7\xa4\x11\xe1\x87\xc8\xa0\x83\x7d\x2e\xdc\xf4\x00\x07\x41\x84\x19\x37\x8f\xe2\x05\x01\x15\xf5\xe9\x1b\xff\x4d\xda\xa4\xed\x1e\x7e\x83\x95\xec\xac\x2f\xeb\xf7\xef\x21\x6a\xbb\xfe\x6f\x98\x46\xb1\x6b\xb9\x18\x62\xfa\x8b\x4a\xcc\x75\x09\x27\x18\xc3\xf1\x28\x60\x72\x11\x08\x97\x7b\x81\x31\x0d\x5e\xaa\x1c\x8b\x28\xee\x6d\x91\x44\x84\x56\xcb\x0f\xf8\x48\x9c\xfa\xc3\xe9\x68\x9b\x93\x82\x80\x8f\x16\x10\x18\x24\x16\xb9\x13\x85\x8c\x6c\x39\x5f\xd1\xe9\x4c\x4a\xd5\x1f\xaa\x8b\x79\xc8\x54\xf1\xb2\x62\x88\x91\xf0\xb7\x08\x58\x4c\xa8\xff\xcc\xd4\xfb\xbb\x54\xad\xb6\xc0\x88\xf0\x18\x1a\x6b\x52\xde\x12\x23\xa0\xb1\xd6\x7d\xf9\x2d\xfc\xb0\x8f\x55\x7c\xa1\x1f\x7f\x59\xf5\x37\x63\x98\xbd\x68\x0b\xfc\xaf\xb0\x2e\xc6\xc9\x3f\x61\x52\x41\xa8\xcf\x60\xb4\x61\x9e\x50\x78\x31\x5a\x5e\xcc\x53\x1e\x63\x0c\x1b\x77\x22\x3c\xf3\x56\x5d\xee\x1e\x9e\x95\x0f\x9c\x22\xc4\x81\x08\x41\x43\xf8\xbe\xcc\x3b\x2c\x04\x45\x12\xb0\x40\x3d\xd5\xbb\xc5\x25\x06\xfd\xb1\x7d\xeb\x34\x42\xfa\x14\xda\xda\x7b\xc5\xeb\x3b\x86\x9f\xfa\x65\xc6\x93\xb7\xfa\x31\x76\xfb\x76\x6e\x36\xe8\x9d\x2d\xd9\xcf\xcd\x79\xed\xab\x66\x52\xc7\x26\x91\x76\xaa\x48\x1e\xce\xb5\x58\xb8\xae\x31\x7b\x2d\x7e\xa8\x1e\xa2\x48\xd7\xa3\x97\x5e\xc5\x67\xae\x1a\x2c\x97\x93\xb7\x90\x3d\xb9\x08\x15\x99\x5e\xc4\x15\x71\xb0\x82\x79\x78\x52\x1b\xe7\xe8\x76\x5c\x1a\xf2\x63\x9d\xd4\xc7\x03\x16\xfe\x62\x97\x68\x89\x7a\x08\xf6\x0b\x8c\x62\xd6\x10\x8c\xb3\xa6\x7b\xb2\xf9\x43\x28\xd1\x90\xa4\x77\x83\x95\x9b\xe3\x35\x74\xce\x41\x32\x28\xae\x3c\x87\x99\x5a\xde\x25\xf7\x18\xac\x8f\x8e\x19\x91\xa5\x55\x75\x95\xed\xeb\xac\x10\x2f\x8a\x34\x3a\x2b\xe6\x43\xbf\xee\x13\x1c\x22\x66\x1c\xb7\x25\x99\xdf\x66\xdd\xa5\x4d\x6f\x7d\xc5\xa6\x20\x50\xbd\x4c\x9e\x45\x63\x2f\xa1\xf3\xcb\x55\x56\x72\xb6\x8d\x93\xc7\x85\xcb\x7d\xf1\xe1\xcb\x29\x1a\x66\xde\xed\xcd\x15\x7f\xf8\xb4\xb6\xbf\x24\x9c\x3e\xb6\x03\x3c\x2f\x41\xa3\x23\x2f\xd7\x5c\x5f\xb1\x7b\xe5\xf3\x42\xef\x77\x25\x4d\x72\x3a\x78\xc3\x2c\x9d\x54\x73\x61\x9a\x96\xa3\x8e\xeb\xd3\x35\x5b\x62\x98\x28\x40\xe1\x77\xcc\xce\x26\x22\x32\xb2\x8d\x94\x10\xb8\x33\x43\xc0\x09\x88\x54\x30\xa4\x7c\x9b\xab\x25\x8f\xf3\x94\x21\x6e\x63\x3c\xda\xc0\x13\x0b\x4d\x0c\x21\x21\x06\x24\xa8\x85\x78\x45\xa0\x85\xf9\xb7\x7f\x27\xa2\x74\xdd\xc2\x28\xc4\x79\x2c\x55\xff\x50\xda\x87\x67\xa5\x6d\xb0\x84\xde\xdd\xa3\xb4\xcd\x36\x4b\xdf\x0e\x72\x96\x00\x60\x3b\x14\xfe\xef\xe8\xbf\xbd\x58\x7f\xbd\x90\xbe\x32\x80\x13\x79\x6c\x17\x28\xe5\x79\xb5\xbc\xad\x0c\x3f\x8d\x26\x35\xb0\x9a\xa7\xb5\xd6\x75\x8d\xe4\x71\xbb\x9e\xca\xf1\xcc\x59\xb8\x43\xb3\xc5\x32\x8b\x6e\xf1\x66\x96\xd3\x56\xeb\xa3\x54\x97\xba\xe1\x16\x54\xad\x16\x7c\x9e\xd7\x5e\x6f\x2c\x6a\x73\x77\x57\xa4\xcb\x1f\x6d\x33\x3c\xcf\x38\xbf\x16\xe7\x73\xe8\xe7\x53\x23\x4f\xa7\x5c\x44\x85\x10\x03\x40\xb4\x50\xe1\x3e\xbd\xe7\x24\xb4\x4d\x49\x57\x3e\xf5\xf9\x7a\x8a\xe2\xc0\x43\xbe\xf1\x3c\xcc\xf4\x3a\x1a\x9f\x7a\x5d\x94\x3b\x67\xdb\x5e\x9d\x61\x2c\xf6\x57\x47\x3b\x5d\xe7\x9a\x91\x3e\xfc\xcb\x7a\x9f\x6f\x37\x38\xee\xef\x7a\xbd\xe2\x49\x86\xa5\x80\xd4\xae\xf3\x94\x03\x71\xba\xc0\x86\xa6\xeb\x4c\x09\xa6\x66\x23\x76\x71\x75\xd7\x41\x96\xf7\xc1\xe8\xac\xef\x99\xf7\x59\x38\xcb\x79\x53\x71\x7f\xb7\xd5\x83\xeb\xde\x75\x51\x9b\xe5\x3f\xf2\x67\x92\x90\xaf\x0f\x74\xff\xf8\x8c\xc3\xe9\xdc\x2c\x66\xb8\xde\x28\x5d\x6f\x2c\xfc\x43\x2c\xc2\xbe\x8b\x76\x91\x61\x86\xdb\xc3\xfd\xbe\x7e\x9e\x60\xbc\xec\xd6\xa5\x6d\x68\xc5\xe2\xda\x7c\xba\xc1\xf0\xc8\xf6\x21\x8d\x43\x33\x52\x53\x34\x78\x53\x1d\x09\x13\x41\x7d\x68\x83\xbc\x33\x2b\xaf\x52\xfe\x90\x7e\x6d\x0e\xf5\xc9\x7f\x77\xe8\xcf\x00\x00\x00\xff\xff\x68\x37\xc3\x41\xa4\x04\x00\x00") func test_certsNodeCrtBytes() ([]byte, error) { return bindataRead( @@ -220,11 +262,11 @@ func test_certsNodeCrt() (*asset, error) { } info := bindataFileInfo{name: "test_certs/node.crt", size: 1188, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xae, 0x4d, 0xa, 0x95, 0xd7, 0x58, 0xa4, 0x59, 0x44, 0x2, 0x7b, 0xe0, 0xc8, 0xe7, 0x7e, 0x15, 0xf2, 0x10, 0x4e, 0xa4, 0xa7, 0x2b, 0xda, 0xd2, 0x40, 0xcf, 0x9c, 0x88, 0xf0, 0x7f, 0x3d, 0xa4}} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xf5, 0x83, 0x83, 0x2a, 0x1f, 0xe5, 0xbe, 0x4f, 0xcc, 0x75, 0x53, 0xfd, 0x1c, 0xfb, 0x70, 0x37, 0x18, 0xf0, 0x91, 0xa4, 0x71, 0xd4, 0x5e, 0x29, 0xcf, 0x5d, 0x32, 0x6b, 0x43, 0xed, 0x93, 0x6f}} return a, nil } -var _test_certsNodeKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\xb7\x12\xa3\x40\x02\x04\xd0\x9c\xaf\xd8\x9c\xba\x42\x12\x3e\xb8\x00\xcf\x60\x06\x2b\x61\x32\x31\x78\x23\x10\x56\xf0\xf5\x57\xbb\xf1\x75\xda\x49\x57\x27\xef\x3f\x7f\x23\x2a\x1a\x80\x7f\xfc\x40\xf8\xe3\xfa\xe0\x25\x84\xca\x1f\x53\x49\xfe\x35\x98\x0d\x80\x32\x56\x40\x14\x04\x53\x12\x3c\x45\x98\x5d\x09\x94\xe7\x23\x65\xac\xd7\xd1\x55\xcf\xe7\x4a\x73\x27\x4c\xe8\x7b\xc6\x4b\x26\x3b\xe4\x7b\xd8\xd2\xeb\xb9\xea\x08\xf1\x52\x05\xbd\x8a\xc5\xb2\xf9\xa2\xc6\xec\x58\xa8\x76\xbb\xe6\xe3\x5a\x0f\x9a\xa9\x7e\xeb\xd4\xbb\x4c\xe2\x13\x34\x95\xa3\x93\x25\xad\xfd\x1d\x8e\x28\xf7\x71\x96\x67\xde\x68\x02\x4f\x06\x3d\x0d\xc3\x24\xdf\x70\x6b\xb1\xa2\x39\x39\x67\xb6\x6e\x84\xb6\x7f\x98\x61\xc8\x05\xfa\x69\x8f\xce\xc2\xbe\x78\x63\x6c\x80\x06\xcf\x41\xfb\x02\xea\xae\xb0\x8d\x5c\x7e\x5e\xb5\x64\xd9\x64\xad\x65\x33\x65\xec\x4b\xaf\x71\xf4\x85\xd5\xc8\x94\xf5\xb8\xa0\xfc\x09\xdc\x06\x44\x0c\x11\xa2\x73\x71\x69\x15\xbf\x15\xe9\xc8\x30\x34\xad\xfa\xd4\x2c\x47\x95\xac\x44\xe4\x89\xb5\xa0\xc1\x78\xc9\x9a\xf5\xe9\x4a\x8f\xb7\x74\xa2\x70\x30\x6b\xa0\x82\xb7\xab\xaa\x99\x95\x74\x37\xc1\xce\xe1\xfd\xca\x39\x5e\x91\x9f\x6a\x31\xb8\xa7\x90\x2d\x78\x61\xa2\x7c\x12\x8f\xe5\xb8\xa6\xb4\xe4\xfa\xa7\xcb\x9f\x41\x5d\x48\x67\x93\xd2\xd6\x33\xc4\xc4\xf7\x2f\xfe\x6e\x64\x8f\xdf\xe7\xae\x79\xe9\x31\xfa\x74\x8d\x4f\xdf\xa7\x76\xd2\x75\xbc\x4a\xd8\xfb\x2f\xe6\xe9\x03\xc8\x82\x27\x88\xc2\xf8\xf7\xec\x82\x8f\x04\x46\x14\x77\xe8\xd9\xa4\xa9\x62\x55\x26\xbf\x95\x5a\x58\x1b\xf7\xf3\x53\xfb\xf7\x47\xd1\xd0\x2c\xd5\xe1\x7b\x4c\xaa\x34\x0e\x40\x93\x07\xf4\xa3\x35\x12\xf0\xde\x62\x5f\x91\xa5\x67\x3c\x6e\xd7\x6c\xf9\x69\xcb\x8b\xe7\x3b\xfc\xd8\x58\x6a\x2d\x32\x5b\x03\x87\x70\xa7\xbd\x6e\x58\x59\xab\x8c\x4e\x92\xbe\x85\x3b\x6d\xe0\x1d\x65\x5f\x3e\xbe\x89\x7e\x92\x6b\x84\xf7\x09\xf8\xcf\xf3\x0d\xb7\xe1\x02\xee\xdb\x59\x80\x70\x9b\x63\xeb\x81\x55\xaf\x0c\x8f\x4a\x77\x8f\xd3\xbc\x98\x6e\xd0\x41\x10\x67\xd0\x31\x80\x23\xf5\x9f\xbc\x94\xc1\x81\xf8\xf9\x63\xc8\x82\x70\xb5\xf5\xfb\x31\xe5\x7b\xeb\xef\x78\x1d\x34\x21\xa7\xd2\x34\x39\xb5\x98\xc5\xc6\x59\x6d\xac\x23\x1d\xd9\xaa\x98\x2f\x02\xfa\xf0\xea\x2a\x7d\x3e\x70\x51\xe2\xdb\x45\x72\xea\xb8\x2a\xc5\x06\x8a\x75\x89\x32\xef\x71\xd6\x21\xac\x87\x93\x55\xd5\x03\xbf\x23\x18\x77\x29\x26\x71\x0c\x99\x71\xee\x3b\x82\x30\x78\x1c\x29\x6d\x11\xa2\xad\x6c\x21\x5e\x24\x67\x8c\x52\x96\x7c\x7d\x55\x21\x5d\x90\x19\x52\xdd\xc7\xad\x4f\xe6\xcd\x33\xb3\x37\x1d\xa7\x7e\xe2\x23\xf4\xf3\x07\x16\xe1\x42\x59\x18\x9d\x54\x25\x8a\x70\x0c\x9c\xe1\x9a\xf8\x1e\x72\xfc\xea\x78\xa5\x1b\x96\x35\x53\x79\x2e\x6e\xa0\xa8\xb6\x8c\x4a\x93\x7b\xeb\xb5\x59\x5e\x0c\x88\x1f\x9d\x86\x36\x04\xea\x9e\x60\xed\xbc\xbf\xd3\xbb\xad\xce\x69\x4c\xcc\xfb\xbd\x03\x4c\x84\x23\xaf\x63\xd8\x75\xfc\x5d\x6a\x96\xf9\x50\x89\x89\x3b\x7f\xdb\x0e\xf6\x65\x0b\xb4\x0e\x39\xa3\xd5\xdd\xc0\xf2\x92\x3a\xa8\xf0\xd3\xc0\xc2\xc4\xe5\xc0\x3e\x72\x0f\x09\x3e\x07\x82\x1b\xc8\x81\xf8\x3c\xc9\xee\x2a\x60\x93\x49\x97\x04\x9c\x10\x5c\x61\x96\x7e\xcc\xa0\x75\x73\xfb\x55\xd2\x8d\x99\x3f\xdc\xdb\xbf\xc5\x14\x6b\x4f\xd8\x52\x74\x34\x84\x48\xfb\x5d\xbd\xb9\xc2\xdf\x2f\xf6\xef\xd3\xf2\x28\xb4\xc8\x55\xbd\x1b\x45\x48\xc5\x57\xde\x32\xcb\x48\x83\xe0\x26\xd1\x22\x93\x25\xa2\x70\x6f\x5a\x53\xb6\x3d\x54\x27\x5b\xb8\x60\xac\x50\x2a\x45\x47\x57\x17\x15\x34\x57\x89\xcc\x4e\x9b\xa3\x4b\x66\xd4\xd6\x3c\xb7\x60\x69\x53\xd3\x2f\xa0\x1e\x8c\x3a\xfe\xdb\x94\xce\xad\xf1\x40\x59\x7a\x6a\x02\xd0\xf3\x9a\x7e\x54\x16\x1c\x0b\x1a\x92\x23\x71\xf6\x12\x91\x34\xed\xdd\xf7\xf0\xbc\x94\xe1\xab\x55\x9c\xf6\xde\xbf\xef\xda\xd7\x78\xb2\x2b\x93\xd9\x52\x95\x08\xc1\x59\x00\x38\xca\x8d\xbc\xc0\xef\x01\x82\x24\x80\x68\xa0\xb0\x1d\x47\x9a\x1f\x39\xf8\xa9\x51\x6a\xd2\xeb\xce\xa9\x8b\x89\xe8\x84\x12\x64\x1f\x17\xce\x1d\x55\xbe\x9e\x97\xf2\x22\x25\x2d\x8e\xd0\xda\x47\x04\x27\xae\x40\x3d\x3a\x82\x4c\xf6\x2e\x11\x7f\x0e\xe6\xf8\x53\xdf\xd6\x19\x1a\x4d\xd5\xf5\x81\x7e\x85\xba\x24\xa2\xe5\x18\x4c\xc1\xa6\xfd\xbe\x63\x82\x17\x61\xc9\xf1\xbd\x5f\xe2\x5f\x30\x2c\xfe\x74\x2a\xa7\x1a\x92\x25\x4e\x82\x22\x22\xe4\x26\xc7\xd6\x5e\x19\x1f\xaa\xc8\xaf\x56\x5b\x26\x6b\x1e\x34\xd0\x0d\x64\xcf\x14\x2b\x3d\x1b\x92\xa4\x6f\xdb\xfc\xa3\xff\x36\xff\x15\x68\xeb\x5d\x7a\xbe\xba\x10\xb8\x02\x8c\x7a\xef\x9d\x19\xfb\xf9\x12\x32\x6c\x0a\xc2\x3a\xb5\x26\x37\xb5\xbb\xc8\xfc\x88\xa9\xff\xd9\xa7\xc5\x70\x2f\x74\x3d\x0a\xc6\x97\x88\x34\xdd\x0e\xb7\x50\x4b\xe5\x7e\xbe\xf0\x5c\x60\x1f\xe5\x24\x3e\x69\x5c\x5f\x35\x07\x9d\x59\x37\x61\x28\x68\xca\x4a\xcc\x6b\x2a\xd4\x4c\xe4\x66\x17\x5c\x38\x42\x71\x1a\xe6\x0c\x81\xf7\xd0\x05\x9d\xa4\xa7\x78\xef\xe1\x32\x67\x6f\x27\x43\x68\x38\x03\x33\xe7\x1a\x7f\xa1\xc0\x7d\xd6\xe4\x7d\xc7\xc0\x4b\xe6\x85\x51\x13\x1c\x07\xf0\xae\x35\x6d\x3f\x67\x55\x82\xc5\x1c\x53\xf0\x58\x1d\x97\x30\x7a\x2b\xa5\x49\x47\x51\x12\xa4\xce\x3b\x4e\x6b\x7d\xd9\x42\xb2\xbe\x4e\x25\xd0\xb8\xa7\x43\xc8\x98\x7c\x99\xdc\xee\xde\xb5\xdc\xcc\x67\xcb\x4d\xe7\x74\xa2\x36\xa4\x7a\xcb\x53\x99\x1c\x59\x50\x1e\x56\x5b\xf8\x2b\x58\xa2\xab\x01\x67\xb4\xdd\x5e\x32\x92\x5a\xca\x91\xbc\xc3\x64\x38\xd3\x1d\x12\x8c\xd7\xcb\x14\x3a\xf4\x9b\x30\xc6\xca\x7f\x70\x4c\xd4\xd4\xa9\xe4\xdd\xd2\xaf\x52\x6a\xaa\xfb\xb3\x7f\x74\x2c\xeb\x64\x3e\x0d\x94\xbe\x5a\x59\x71\xfe\xa0\xfd\x5f\xec\x1f\x29\x0a\x94\xff\x3f\x35\xff\x0b\x00\x00\xff\xff\xf9\x44\xaf\x4b\x8b\x06\x00\x00") +var _test_certsNodeKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x95\xb9\x12\x6c\xea\x02\x46\x73\x4f\xb1\x73\x75\xcb\xdc\x08\x4e\x80\x5f\xf3\xd3\xb4\x99\x96\xd1\xda\x3c\xcf\x3c\xfd\xad\xb3\xe3\xf3\xa5\x5f\xb2\x6a\x25\xeb\x7f\xff\x4e\x94\x15\x68\xfe\x71\x5c\xe1\x8f\xe5\xc0\x40\xf0\xe4\x3f\xba\xfc\xf9\xfb\x20\x06\x84\xf2\x28\x40\x51\x10\x74\x49\xb0\x65\xe1\x60\x13\x87\xc8\xa7\xd8\x00\x1d\x13\xbd\x1a\x47\x56\x7b\x81\x4b\x73\x38\x8a\x24\x0e\x41\x49\xa9\x84\x25\x34\x73\xbd\x66\xa8\x15\x11\xb4\xaa\x21\xf5\x71\x57\x4d\xfe\xe4\x4f\x16\x24\x27\xe3\xe4\x89\xe8\xd2\xbf\x6c\x1e\x8a\x7a\xc7\xd4\xb9\xf0\x1a\xee\xa9\xf6\xad\xaa\xb6\xe7\x3b\x00\xe9\x72\xf6\x8c\xa7\x03\xba\x67\x06\xcc\xa3\xdd\x44\xfa\x22\x4f\x41\xf0\x59\x1f\xf5\x62\xfa\x07\xab\x52\x5a\x3b\x8d\x70\x48\x5d\xd6\x05\x6a\xcc\xbc\xcc\x4b\x64\x06\x1b\xe0\xd3\x38\x69\x03\x6a\xe5\xa3\xe2\xee\xf0\x01\x1c\x65\x75\x12\x6a\x39\x57\x5d\xff\x22\xdc\xcf\x67\xdc\xdd\xae\x59\x1f\x60\xf1\x86\x57\x90\xde\x60\x4e\xc8\xd6\x11\x5c\xe5\xf1\xa1\x9a\x73\x02\xb2\xad\x7e\x3d\x7e\x0e\xb7\x61\x1b\x6d\xc8\xc9\xf7\xa6\x05\x8b\x15\xf6\x68\x95\x98\x09\xd2\x8d\xc7\x2d\xd0\xec\xa7\xad\x59\x5e\xb9\x06\x25\x92\x6b\x7b\x66\xca\xc0\x74\x1f\x31\x78\x8c\xb3\x09\x6e\x51\xd9\xb9\xae\xd7\x80\x4d\xee\x6f\xe3\x43\x1d\xa6\xe0\x32\xe1\x22\xa1\x1f\x86\x6d\x64\xa4\xed\xbf\x05\x65\x27\xb3\x67\xc9\xea\x4b\xbb\x01\x93\x2c\xdd\xce\xa7\x20\xa5\x66\x0a\xf7\xf3\xe4\xd8\xdc\xac\x3e\x20\x10\x6c\x41\x14\x06\x28\x0a\x62\xf3\xed\x57\x14\x25\x4c\xc3\x70\x6c\xe2\x44\xe6\x0f\xf6\xe9\xa9\xa1\xf9\xb0\xcd\xad\xf4\x8f\x94\x96\x7c\x40\xdb\xd7\x95\xb2\x54\x14\xf9\x21\x1c\x74\x3c\x35\x5c\x23\x39\x5a\xd5\x05\xbd\x18\xb9\xcf\x29\xce\x8a\x4f\x33\x44\x13\x97\x14\xfa\x86\x48\x5f\x5c\xe9\x96\x57\x33\x85\xe2\x00\xb3\xd7\x66\xee\xaf\xd7\x83\x09\x0c\x22\x3b\xe5\x3d\x9c\x57\x39\xed\x58\xcb\xb2\x27\x6d\x4e\x38\x0c\x7c\x25\x66\x35\x3d\x53\xd6\x84\x9c\x7e\x2e\xbb\xf5\xf1\x91\x7e\x9c\x0e\xd1\xc4\x20\x6b\x95\xd7\xed\x15\x2c\x15\x46\x49\xed\xad\xcf\xd7\x4f\x7c\xc6\x24\x99\x96\xf4\x99\xad\x1f\xd6\xad\x57\x97\x3b\x89\xed\xfd\x25\x5a\x57\xf3\x13\x25\x96\xc6\xcc\x56\x85\x0b\xd1\x46\xa1\xcd\xdc\x82\xc3\xe4\xfb\xb0\xad\xfb\xfe\x69\x93\xf1\x39\x5b\xd0\x86\xd3\xc0\x3d\x99\xe3\xaa\xd8\x4f\xf4\x36\x99\x47\xc2\xcb\x3f\x87\x30\x8e\x29\x48\x67\x5c\x3e\xf0\xad\xbf\xa9\x17\xa6\x20\x24\xa0\x1a\xd2\xd4\x9e\xe1\x56\x98\xe9\x06\xf9\x3d\xac\x0c\x3a\xd7\x47\x6e\xca\x51\xbf\xcb\xb9\xb1\x78\x17\x55\x7b\xef\x33\xd0\x59\x1c\x6f\xef\x24\x70\x67\x6e\x93\x13\x59\x6e\x58\x0b\x54\x2a\x82\x9b\x1f\x23\xd2\x64\xa9\xf8\xc8\xc2\x09\xd2\x51\x09\x02\xbc\x6c\xe5\xdd\x7c\x5c\xa4\xb8\xbd\x99\x24\x65\x68\xb3\x5a\x71\x1a\x7f\x6d\x70\x93\x86\xe2\x51\xe2\xf6\x70\xdd\x56\x9f\xdd\xad\x22\x67\x08\xf7\x6b\x2b\x2c\xce\x73\x3c\xf2\xab\x5b\x85\xe7\x6d\x82\xc2\xff\xe5\xa4\x47\xfe\x6a\xd3\x5d\x27\xc5\x67\x02\xed\x6d\x86\x17\x7a\xea\xd1\x72\xb8\xc9\x67\xec\x19\x6a\xc6\xdc\xf2\x59\x6f\xea\xf4\x46\x04\x8d\x0e\xa5\xb7\xa9\x61\x0e\x5c\x8f\x45\xba\xd1\x71\x0b\xbb\x43\xe2\x98\xf8\xb0\x35\x25\xe6\xab\x27\x9f\x6a\xf6\xcf\xe3\x97\x39\x83\x41\x7d\x8b\xe9\x08\x3f\xd7\xf7\x2f\x31\x46\x54\x26\xf2\x28\xd2\x67\x83\xa1\x7e\xbb\x74\xec\x69\xa6\x6b\x1e\xa6\xd7\xb4\x13\x92\xc2\x0e\x61\xaf\xdc\x17\x7b\x01\xbd\xc5\x2d\xfa\x2a\x03\x39\xb9\xde\x0b\x3f\x63\x4b\x47\xf8\xb8\x7e\x5a\xbe\xb8\x76\x35\x12\x2f\x3e\x8f\xda\x53\x90\x6b\xfa\xcc\x5f\x8a\x1a\xd9\x24\xc0\xe4\x77\x34\x29\xfc\xd1\xeb\xcb\x42\x02\xdf\x78\x06\x03\x64\xb2\xda\xbb\x3b\x60\x5e\x0f\x08\x06\x5c\x0b\x81\x70\x72\xb8\x85\x0a\x48\x0b\x32\xa9\x37\xfc\x5f\x17\xc2\x10\xe5\xb4\x47\x48\x44\x2b\xb5\x5c\x03\x6b\xb1\xd9\x54\xfc\x9c\xb7\x96\x44\x38\xd1\xfc\x45\x6e\x50\x32\x14\xc3\x4b\x38\xea\x94\x5e\x2e\x94\xd9\x24\x8a\x47\xf2\xde\x05\x8f\x65\x79\xe7\xec\x1e\x03\x52\xbc\x2a\x2a\xa7\x88\xa9\xc4\xc4\xe6\x54\xbc\x62\xe4\x1f\x05\x60\xab\x38\xbd\xf7\x2c\xa8\x48\x14\x42\x85\x31\xa6\x90\x8a\x22\x88\x9d\x66\xd6\xad\x0c\xb2\xdb\xce\xf4\x9b\x87\x77\x67\x07\x21\xaa\xac\x82\xdd\x99\x58\xae\x1c\x6d\x99\x82\xa2\x1e\x7f\x6f\x2e\xfa\xf0\x27\xdc\x72\x95\x0a\x5d\x55\x61\x37\x21\x0d\x9e\x5f\xf7\xa2\x2d\x87\xb7\x27\x00\x04\x84\xfc\x5c\x6e\x95\x9a\x0e\x1d\xc8\xca\x0b\x5b\x84\xd6\xb7\x4a\xc9\xfd\xd7\xb2\x20\xf4\x63\x56\xd6\x56\xd5\xef\x8d\x85\x89\x49\xf9\xe4\xf7\x4d\x29\x83\x73\x0e\xb9\xfc\x70\xf0\xd2\x38\xd6\x79\x40\x44\x86\x08\xcd\x11\x17\x1e\x50\x33\x30\x40\x2f\xaf\xd3\x97\x29\xca\x7f\x71\x69\xf0\x43\x37\x78\x76\xd3\xab\x23\x97\x84\x96\x93\xaf\xaa\x51\xc9\xdc\x8b\x18\x24\x7f\x7e\xe9\xa9\xfb\x94\x85\x56\x8a\x64\x1d\xc1\xc9\x5c\x1a\xed\x68\x3f\x0f\xb8\xc6\xd5\x3b\xee\x38\x81\xb7\xa9\x90\x6c\x50\xa9\xa3\x97\x36\x2c\xa4\x94\x69\xec\x15\x1d\xe3\xd9\xa9\xdd\xf6\xeb\xc7\xcd\x45\xf6\xfd\xb6\x1a\x6f\x52\x42\x1c\xdd\x04\x93\xad\x8b\x85\x2d\x09\xac\x53\xaa\x07\x7c\x10\xe3\xe0\x38\xf0\xe1\x90\x51\x4c\x4b\x4e\xdc\x90\x5e\x09\xbf\x67\xdc\x06\x1d\xeb\x97\xfa\x4f\xc2\x28\xd1\x3f\x6c\x0a\x8a\xf7\x60\x26\x08\x1e\x4a\x87\xbc\xf8\xf7\x2b\x24\xbc\x2c\xda\x75\xe7\x2a\x50\xc7\xe3\x7e\xdf\xa6\x48\x74\xd1\x27\xdd\x27\x3f\xbc\x22\x80\xd7\xed\xf6\xca\xcf\x53\x78\x90\xaf\xd6\x39\x24\xe9\x3b\xfa\xfd\x2d\x9e\x32\x32\xe7\x51\x1f\x92\xdb\x74\x0b\xd7\xd3\x20\xb4\x3a\x0a\x4b\x37\xbd\xbe\x1e\xcc\xa9\x2e\xe5\xbb\xc0\x6a\x16\xf8\xd8\x12\xf4\x89\xa2\x83\x13\xbf\x82\x95\x76\x18\xbe\xf8\xe7\x1f\xe4\x6f\x56\x64\x13\xfc\x77\x6e\xfe\x1f\x00\x00\xff\xff\x00\x39\x0e\x8a\x8f\x06\x00\x00") func test_certsNodeKeyBytes() ([]byte, error) { return bindataRead( @@ -239,12 +281,12 @@ func test_certsNodeKey() (*asset, error) { return nil, err } - info := bindataFileInfo{name: "test_certs/node.key", size: 1675, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x8b, 0x76, 0xe7, 0xdc, 0x50, 0xd5, 0x31, 0xab, 0xac, 0xd7, 0xa8, 0xde, 0xac, 0x83, 0x88, 0x28, 0x4a, 0x13, 0x9f, 0xfb, 0xf, 0x69, 0xb5, 0x16, 0xdb, 0x66, 0x45, 0x25, 0xea, 0x2e, 0xac, 0xdc}} + info := bindataFileInfo{name: "test_certs/node.key", size: 1679, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x6f, 0xa4, 0xd0, 0xe3, 0xff, 0xb8, 0xb6, 0x55, 0x1, 0xb8, 0xb1, 0x9b, 0xe9, 0x67, 0xdb, 0x77, 0xee, 0x91, 0x4d, 0x38, 0xe0, 0x28, 0xbc, 0xbe, 0x5d, 0xbb, 0x9a, 0xad, 0x9d, 0xcf, 0x3a, 0x8a}} return a, nil } -var _test_certsMtCaClientTenantCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x94\x4b\xaf\xb2\x48\x18\x84\xf7\xfc\x8a\xd9\x93\x89\xc8\x45\x71\xf1\x2d\xba\xe9\x06\x01\x1b\x68\x45\x04\x77\x20\x37\xb9\x1c\x40\x84\x06\x7f\xfd\xe4\x9c\x49\x66\x92\x99\xef\x5d\x3e\x8b\xca\x9b\xaa\x4a\xfd\xf9\x7d\x10\x1b\xa6\xf3\x87\x86\xcf\xbe\xa9\x9b\x1a\xf0\xf1\x0f\xe5\x88\x69\x22\x58\x69\x1a\xc8\x76\x05\x60\x26\x04\x85\x49\x69\x71\xd9\xb3\xe7\x70\xcf\xce\xc1\x2c\xdd\x3a\x6f\x8a\x19\xff\x40\xc0\x81\x45\x3d\x94\xf5\xd3\x38\x30\x01\x02\x3a\xea\x00\x81\x17\x47\xce\x26\xc3\x20\x42\x01\xa5\x36\x66\x0d\x4a\x44\xe7\xf5\x68\x0f\x65\x24\x16\x8b\xee\x03\x1f\x16\x4e\x00\x01\xf1\x11\x76\xe6\x48\x7c\xaf\x89\xa8\x57\xb1\x06\x11\xf5\x41\xa6\x33\x61\xe5\x08\x02\x22\x41\xf5\xe2\x54\x40\x24\xbe\x1e\xeb\x4c\xf8\xfc\x30\xbf\xf8\x87\x11\x6d\x5c\x70\x05\xe8\xdf\x62\x9d\xaf\x5d\xff\x15\xe3\x62\x84\x03\x02\x89\x01\xb6\x57\x0c\x16\x42\xa8\x78\xa8\x62\xc9\x9a\xa3\x9b\xd3\x99\xd8\x81\xc4\x34\xa1\x59\xfd\xf7\x7d\xac\x03\xe0\x6a\x80\xaa\xe0\xdb\x03\xa8\x15\xb6\x06\x28\x06\xcd\xd5\xa0\xda\xae\x7e\xdf\xf1\xae\xba\x3c\xe7\xaf\x36\xd7\x9b\xd4\x0b\xe7\x8f\x5d\x5e\x54\xe5\x70\x27\xce\x66\x14\xd1\xa2\xb7\xd1\xa3\xec\x1e\xa7\x53\x1b\x5b\x36\x27\x7c\x46\xfb\x30\x2d\xdb\x47\x7f\x67\x0a\x83\x7d\xdc\x76\x57\x6a\xe8\x3d\xbd\xcb\x67\x3a\x5c\x98\xb3\xcf\xe5\x58\xb2\x86\x08\xf7\x5f\xcf\x0d\x0f\x9c\xc5\x76\x65\x5c\xc8\x8a\x68\x7a\x5d\x32\x87\x9c\x94\xc7\x63\x07\xaa\xcb\xa8\x51\xf4\x45\xd1\xd0\x87\xef\x24\xcb\x84\xe3\x4e\x6f\xed\x60\x2f\x7e\x3c\x36\x3f\xea\x8e\x77\x06\x82\xcd\x50\x46\x16\x4f\x26\x2d\x8d\xea\x76\xb5\x12\x63\xdd\x4b\x88\x7b\x65\x77\xd8\x2f\xcc\x25\x52\x18\x9c\x9a\x49\x9c\xbc\xc4\x0b\x6a\xad\xd8\x52\xdd\xf7\x88\x08\x85\x62\xc8\xe9\x25\x5e\x0e\xa2\x52\xdf\xcb\x31\x5a\xde\x5a\x3b\x0b\x11\x7b\x37\x29\x13\xdd\x7b\xc2\x05\xca\xfc\x18\xd4\x51\xac\x8e\x7d\x12\xb6\xfa\x12\xb2\x59\x39\x77\x64\x14\xe8\x9a\xe7\xd7\xd9\x76\xeb\xf3\xe3\xb0\x31\x13\x30\xc9\xab\x9f\xbe\xa7\xf1\x41\x1a\xe6\xe2\x66\xc6\xc2\x8e\xb7\x86\x27\x97\xb5\x3b\x53\x2d\xba\xf8\x88\x89\x6e\x25\xcf\x5d\x69\x0c\x6f\x29\x1a\x9e\x67\x78\x51\x22\x98\x9f\x26\x6a\x22\x40\x01\xec\xd6\x88\x59\x08\xb8\xdf\x51\x1e\xa9\x0a\x41\xae\x62\x08\x88\xc6\x81\x89\x32\x5c\x44\x28\x38\x0b\x3e\xa0\xc7\x0d\x04\x05\x83\x05\x86\x9b\xef\x56\xfa\xbf\x69\xdf\x4f\x7c\x18\x40\x31\x0c\xdd\x7d\x18\x70\x2e\x2a\xcb\x07\x8d\xa8\x76\xba\x5d\xb3\xa5\x74\xd3\x38\xc8\xfd\x21\x8b\x5e\x62\xba\xeb\x4d\x7e\xfe\x30\xd5\xaf\xb7\x1a\x20\xfb\xb1\x75\x6e\x6b\x5e\xca\xa9\x77\x95\x50\xfa\x59\x64\x53\x89\x8e\x13\xb7\x4c\xfd\xe6\x39\x0c\xaf\x28\xcb\x24\x79\x0b\xa3\x60\xbf\x95\x72\x57\x86\x06\xb2\x9d\x66\xd9\x28\x04\xf4\x7a\x36\x0a\xe5\x34\x37\x4f\xdb\xd6\xe2\xb1\xef\xf6\xbd\x5f\x5e\xeb\x2a\x0b\xf9\x30\xdf\x73\xdd\x46\x96\x78\x24\xde\x1c\x7e\x14\x46\x7b\xf6\x06\x1c\xce\x4b\x5d\x4c\x6a\xfb\x39\x7a\x7d\xa0\xbe\xe6\xdc\x0c\x66\xec\xad\x6f\xc8\x6b\x86\xb8\x63\x06\x29\xdd\xbd\xc8\x9e\xa5\x11\x04\x8f\xd9\xe2\x5a\x31\x55\x6c\xfe\xab\x91\x02\x15\x5e\xd0\x70\x1f\xb6\x2b\xdb\x25\x01\xc2\x4d\xfa\x82\xf5\x72\x72\x36\xee\x79\xe7\xc8\xd7\xf6\xa2\x10\xf9\xfd\x02\x73\xb8\xd6\xe0\xda\x09\xce\x07\x2c\x7c\x41\x0a\xae\x79\xd7\x91\x52\xdd\x04\xc5\x18\xfd\x79\x52\xab\x75\x38\x58\x11\x0f\xe8\x6e\xd9\xdb\xf0\x4a\x52\x75\xcf\x9b\x56\xec\xa7\x60\xfd\xaa\xa0\xe7\xb1\xd2\x9b\x2e\x55\xae\x8a\x89\x68\xd5\x5b\x4d\xba\x71\xb7\xbc\xba\x41\xff\xfe\xc4\xc6\x74\x38\x83\x5f\xbf\xb8\x9f\x99\xc0\x0e\xfa\xff\x74\xfc\x15\x00\x00\xff\xff\x9e\x16\x6d\x2a\x57\x04\x00\x00") +var _test_certsMtCaClientTenantCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x94\xbb\xb2\xb2\x48\x1b\x85\x73\xae\xe2\xcf\xa9\xbf\x70\xe3\x06\x21\x98\xa0\x69\x1a\xe4\xd0\x40\x23\x07\x31\x03\xc4\x46\x10\x39\x88\x36\x70\xf5\x53\x7b\x07\x5f\x30\x33\x6f\xf8\x04\xab\xde\xaa\xb5\xea\xf9\xff\xcf\x69\xc8\xb4\xbc\xff\x41\x14\x46\x96\x61\x41\x10\xa1\x5f\xca\x61\xcb\xd2\xb5\x0d\x42\x50\xf1\x14\x30\x4b\x03\xd4\x0a\x81\x0f\x23\x8f\x57\x2a\xf1\xd8\xef\x94\x41\xe2\x1b\xf8\x95\xca\x62\xcb\x74\x92\xd9\x4e\x7f\xb1\xea\x4f\xe9\x01\x82\x5c\x8d\x00\xc6\x39\x1b\x3a\x61\x0d\x98\xe0\x2b\x46\xb0\xc6\x36\x11\xd5\x26\xdf\xdb\x9f\x2c\xf5\x7a\x1c\xc6\x0c\xb1\x4c\x4f\x08\xd1\x11\x5b\xf4\x42\xf4\xa6\xb2\x53\xeb\x4c\xa4\x94\xec\x10\x3b\xd6\xa5\xc7\xe1\x06\x30\x6f\xb3\x56\x1c\x65\xcc\xd7\xf1\x9a\xd6\xa5\x87\xb7\x1f\x86\x97\x3f\xac\x01\x13\x0e\x2d\x86\xc0\x6f\x98\x83\xd8\xe3\x4f\x18\x97\x89\x74\x31\x22\x10\x69\xd4\x4b\x34\x80\x23\x1d\x79\x9f\x4c\x9c\xd7\x42\x34\x9a\x1c\x6a\x3a\x89\x20\x04\x27\xeb\x9f\xef\x6b\x1a\x01\x3a\xa5\x28\xe0\x80\x0e\x21\x20\x3d\xa4\x14\x69\xc0\x1d\x37\xde\x4e\x13\x61\xe8\xf3\xa2\x1b\x65\xe1\xfa\x4d\x23\x93\x79\xd3\x45\x59\x4d\x85\x55\xef\x77\xd9\x2f\xfb\x3a\x7f\xb7\xa3\x5e\xa8\xd3\xc6\x68\x49\xb9\x5b\x14\x87\xf7\x78\x5a\xce\x82\x77\x43\xda\xe5\xe0\x1e\xcf\x70\x93\xfd\x17\xcf\x0f\xaa\x78\xa8\x50\x50\xac\xb2\x59\x9a\x87\xd1\x4c\xdb\x8e\x2a\xc3\x36\x2e\xdb\xfc\xca\x3d\x9f\xac\x3b\x23\xf2\x03\x6e\x89\x32\xf9\xa3\x4a\x8d\xd5\x77\x1b\x4f\xa6\x31\x58\x8c\xd3\x45\x7f\xaa\xc3\xbd\x10\xc8\x7c\xfa\x66\x80\x00\x41\xf2\xf3\x4e\x3a\xaa\xdd\x24\x90\xf9\x59\x88\xf8\xe0\x61\x82\xee\xc5\xa4\xdc\x65\xce\xf5\x02\xac\xcd\xc1\xe3\x5d\xb9\x15\x9f\x7f\x21\xec\xa3\xc3\x39\xff\x52\x66\xb8\xd5\x4a\xdc\xed\x77\x5b\x67\x27\xb4\x97\x84\xdb\xdc\xc5\x75\xe1\x1c\xea\x11\xbf\x3d\x06\x52\x77\x9f\x02\x53\x5a\xb9\xa1\x32\x49\x1d\x3d\x05\x44\x9a\xcf\xf1\x72\xb5\x8d\xb3\x7c\x4d\xe7\x5b\xed\xfa\xcf\xac\x22\x07\xc9\xc9\xa0\x4b\xd3\x54\x5c\xa2\x3a\x1c\x78\xe9\xd3\x56\xf3\x93\x67\xf2\x23\xf7\xae\x62\x6f\xf2\x37\xee\xae\x0a\xe5\xfe\xd2\xbb\xb2\xb6\x8d\xc7\x76\x57\x5f\x9c\x95\x48\xe2\x56\x91\x4d\x78\x81\x37\xca\x49\xf3\x82\x80\x21\x00\x72\xdc\x61\x48\x98\x4e\x33\x3d\x09\x77\x01\x20\x47\x41\x03\x44\xe7\x00\x75\x5b\xac\x59\x3f\x43\xba\x22\x86\x34\x81\x11\x0b\x83\x4c\x03\x37\x05\x02\x82\xfe\x6b\x7d\xfa\x6f\x63\xa6\x61\x0e\xa2\x64\x73\xa8\xce\x14\x19\x47\xce\xb9\xe5\x8f\x65\x30\x0d\x9f\x3a\x59\xb4\xf5\xcb\x2f\x5e\x25\x6d\xf3\xcb\x46\x57\x33\x99\x9d\xe4\xbb\x38\xd8\xf1\xf5\x30\x9e\x5f\x9d\xd5\x0b\x78\x96\x3c\x19\x42\x12\xb6\x12\x47\xcd\x22\x6b\xef\xcf\x76\x0a\xe5\x84\x18\x1f\x50\xdc\xe0\x93\xb1\x7b\xf5\x08\x4f\xf8\x93\xca\xe7\x0a\xb4\x71\xc1\x2c\x63\xe9\xf7\xea\x35\xb5\x31\x1c\x97\xa7\xd0\x45\xea\x2d\x6c\x72\xa6\xbe\x1c\xae\xc1\xbe\x20\xc2\xa1\x71\xd8\x91\x57\xfc\xe0\x20\xf6\xd0\x91\x4d\x76\x7d\xfb\x59\xb0\x77\xb6\xbe\x7e\xb2\x79\x2f\x3e\xa6\x9e\x9d\xad\x6e\xfa\xfe\x3e\x57\x8b\xa0\x3f\xd3\x4d\xc1\xfc\x51\xb5\x5b\x8f\xe3\x57\x51\x30\xdd\xd7\x4c\x6c\x54\x0a\xc1\x68\x21\xc3\x09\x83\x47\x5c\xfb\x96\x6d\x27\x2e\x2f\x6d\x6f\xa1\xe7\xe1\xbc\xd2\x4b\x23\xc7\x30\x3e\x0e\x79\x32\xc4\xf7\x52\xc3\x6a\x9b\x4a\x32\xc6\x1c\x3c\x0b\xf6\x90\x4c\xec\x29\x3f\xba\xaa\xd3\x8b\x62\xfb\xc4\x97\xe9\x34\x76\x28\x85\x4d\x1c\x1a\x48\x92\x9d\x86\x7e\xe0\x3e\x3d\x1d\x72\xc9\x0e\x6d\x76\xea\x76\x49\x44\xce\xa8\xbf\xb4\x99\xd1\x71\xd4\xa6\xad\x52\x17\x84\x7f\xbc\xac\x5b\xa2\xfc\xc5\xfd\x6a\x02\x79\xfa\xbf\xd5\xf1\x77\x00\x00\x00\xff\xff\x94\xf8\x8d\x02\x57\x04\x00\x00") func test_certsMtCaClientTenantCrtBytes() ([]byte, error) { return bindataRead( @@ -260,11 +302,11 @@ func test_certsMtCaClientTenantCrt() (*asset, error) { } info := bindataFileInfo{name: "test_certs/mt/ca-client-tenant.crt", size: 1111, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xcd, 0x42, 0xcb, 0x50, 0xb8, 0xea, 0xaa, 0xd8, 0x5e, 0xf7, 0x68, 0x25, 0xbd, 0x9f, 0xae, 0xb9, 0x1e, 0xc0, 0xcb, 0x13, 0x74, 0xaf, 0x8d, 0x33, 0xd5, 0xfe, 0x80, 0x5, 0x38, 0xff, 0x96, 0x7d}} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x65, 0xbf, 0x0, 0xde, 0xe5, 0x48, 0x76, 0x89, 0x6a, 0x8f, 0xde, 0x14, 0x6d, 0xe, 0x8, 0xd9, 0xac, 0x52, 0x9c, 0x41, 0xf2, 0x87, 0x2c, 0xc5, 0x54, 0xf5, 0xd1, 0x0, 0x7, 0xe1, 0xe0, 0xc7}} return a, nil } -var _test_certsMtCaClientTenantKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\xa7\x12\xa4\x50\x02\x85\x61\xcf\x53\x8c\xa7\xb6\xc8\xdd\x20\x56\x90\xa1\xc9\x39\xb8\x26\x36\x39\x5f\xc2\xd3\x6f\xcd\xe8\x3d\xf6\x98\xdf\x7d\xff\xf9\x3b\x4e\x94\x55\xf3\x8f\xeb\xb1\x7f\x6c\x57\x0d\x59\x5f\xfc\xa3\x89\xc9\xbf\x07\x32\x54\x55\x9c\x6a\x95\x63\x59\x8d\x67\x1d\x91\xed\x03\xd9\xe1\x5f\xdd\x9e\x8a\xaf\xd6\x6b\xc0\x38\x54\x52\x5f\xd8\x31\x78\xb4\x9f\x47\x53\x4c\x6a\x98\xc8\x86\x0b\x97\x34\x24\xf9\x6f\xca\x75\x1d\x1a\xbe\x1f\x0d\x7d\x36\x8d\x39\x2e\x2c\x9f\xd3\x93\x3a\xb9\xf9\x3b\x4c\x81\x23\x4b\xb3\x93\x92\xae\xb3\x78\xa7\xf9\xae\xc8\x2f\xf1\x59\x12\x71\x1e\x1b\x04\x66\xcd\x4b\xb3\x48\xb1\x26\x29\x5c\xb5\xa1\x29\x03\x31\x51\x7d\xb7\x89\x6d\xbd\x8d\x77\x84\xd1\x11\x96\x39\xde\xb3\xb2\x44\x95\x97\x34\x68\xe1\x1b\x7f\xec\x13\xe4\xdd\x04\x9b\x8b\x21\xaa\x31\x29\x7c\x60\xe3\xe0\x8b\xa4\x1b\xee\x4f\x26\x43\xf7\x9b\x10\xd6\x32\xe5\xe6\xeb\xb4\x0c\x22\x0e\xf5\xfe\xc0\x0f\x3b\xb3\xc3\x8e\xaf\x31\x47\xf2\x6d\x03\xe7\xd0\x7a\xa9\x1c\xef\x7b\x31\x38\xd5\xa5\xbf\x2d\xb9\x76\x7e\x00\x68\x72\xee\x7d\x71\x42\xb8\x95\x66\x21\x05\xf2\x85\xde\xf0\x56\x99\xb3\x78\x90\xae\xf8\x04\x94\x3b\x19\x1b\xea\xdc\x55\x15\x00\xcd\xea\xdc\x9c\x41\xd4\x8c\x3d\xc8\xdb\x2f\xf6\x63\xcb\x8d\xfe\xb4\xc4\x1e\x88\xe8\x0b\x82\x3f\x4b\x53\x0e\x2f\x95\xae\xa7\xaf\x22\x1a\xd2\x27\x6b\x5e\x3f\x79\xd9\x89\x64\x69\x5c\xce\xa3\x12\xae\xd2\x0f\x47\x15\x58\x87\xe5\xd8\x49\xe5\x58\x4e\x4c\xb4\xa7\xd7\x56\x67\xa2\x10\x22\xc2\x20\x37\x2d\xbe\xa2\xf2\x3d\x08\x51\x6d\x62\x8f\x30\x5f\x52\x7e\xaf\xfd\xb1\x1f\xa4\xfe\xc0\x9e\x53\x81\x30\xfe\x39\xb3\xd7\x5c\xaa\x47\xc4\x92\xc3\x7c\xd7\x67\xf1\xbd\x46\xa4\x73\x21\xa4\xd0\x09\x86\xa6\xbe\xb8\x96\x20\x48\xbe\xa0\xf7\x53\x0c\xf6\xa9\xea\xac\x1f\xff\xe6\xea\x14\x5e\xd2\x72\xd2\xfc\xdb\x11\xe9\x74\x4e\x72\xa1\xa5\xf9\x2c\x1c\xee\x69\x1b\xf0\xac\xb3\x9c\x42\xc9\xa4\x2a\x13\xa1\x61\x8e\x06\x76\x38\x0c\xa5\x45\x1b\x06\xf6\x64\x0e\x95\xc8\xb7\xd6\xa2\x52\x6d\x08\x08\xf9\xd3\xb9\x35\x89\x06\xeb\xe0\x63\x55\x53\x09\xf0\xc6\x62\x12\x2e\x65\x33\x4c\x6e\x93\x23\x8d\x88\xff\x40\xa3\x14\x15\x42\xeb\x77\x53\x84\xf9\x97\xa8\x44\x6b\xb9\x71\x2d\xf6\x92\x7e\xbc\x69\x7e\xfd\x3a\x7a\x3c\xf9\xa7\xd8\xc7\x86\x89\x4a\x9e\x50\x97\x51\xce\x73\x4c\xae\xd6\x85\xf4\xbc\xb8\x46\x82\x01\x75\x5f\x22\xc1\x46\xb8\xb5\x48\xdd\xdf\x09\xf1\xdd\x76\x7b\x30\x7d\xad\x79\x35\xe9\xbe\x8c\xe0\x27\x3b\x24\x04\x13\x66\x47\xf5\x53\xaa\x7f\xaa\x42\xdc\x37\x8b\x79\xc1\x38\xff\x19\x3d\x50\x0a\x32\xc4\x7e\xe8\x08\xff\x8a\x7c\x9d\x88\xec\xd9\xe5\xcf\xc9\x93\xc0\xc5\xb7\xe6\x0a\x78\x8b\x80\xed\x10\xe3\xf4\x31\x38\x8d\xb2\x6a\x1a\x9c\xb9\xbb\xf8\x2c\x5b\x90\xdb\xac\x85\x66\x4d\xcc\x3a\xac\x0b\x35\x74\x08\xac\xf6\xb1\xc1\x19\x48\x75\xbb\xfb\xae\x34\xf3\x67\x06\x94\x32\x69\xcd\x45\xc1\xf4\x1c\x6e\xe9\x90\x4a\x77\x36\xe2\x0e\x55\x97\x5f\xfc\x43\x39\xc5\x8a\x17\x17\x1e\xe4\x7d\x2b\x4b\x90\xda\xde\x2d\x8e\x48\x0f\x7a\x05\x0c\x47\x78\x8f\x2f\x84\x52\xb7\x39\x0e\x23\xb0\x20\xa0\x2c\x82\x61\x8b\xf8\x52\x8c\x5a\x2c\x3e\xf6\xd8\x1b\x04\xd9\xa7\x37\x90\xd0\x7f\xc5\x97\x76\x1f\xd0\x6e\xbf\x57\x8b\xa7\x30\xe4\xe2\x18\x6d\x0b\x3c\xfc\x72\x4d\x2c\x35\x65\xd7\xa6\x0c\x26\x15\x3d\x67\xf5\xf2\x77\x15\xd1\xed\xc3\xb5\x30\x6a\xb2\xe6\xe7\x9b\xb0\x19\x88\x14\xf7\x0c\xdb\x5c\x7a\x41\xad\xac\x97\x3e\x7a\x73\x09\x77\x57\x2f\x20\xf8\xe9\x12\x0e\x1e\x58\x92\x73\xa5\x68\x27\xde\xe7\x0f\x57\x84\x26\x9d\x59\x39\x78\x0e\xb5\xdf\x14\x07\xb5\xe6\xfe\xa1\xd8\xdd\xd5\xec\x0d\xc9\x03\x08\xd3\x49\xcb\x15\xb6\x44\xda\xc5\xed\x3a\xbc\x72\x9c\x3c\x97\x1b\x81\xb2\xdd\xe7\xc3\x13\xf1\x8d\xde\x24\x55\x9c\x7f\x93\xd9\xf5\xf4\x30\xb8\x3b\x7e\x02\x17\x27\x8a\xbb\xad\x03\x9a\x4b\x16\x74\xff\x8c\xca\x3c\xef\x4a\xf0\xaf\x91\xa8\xa4\x16\x5d\xe7\x6f\xeb\xa7\x1f\x33\x96\x0d\x92\xa3\xfd\x9a\x02\x6e\x54\x09\xf6\x5b\x1b\x12\xfa\xb2\xa4\x3b\xa2\xec\xfa\x65\xfc\x42\x2e\x61\x52\x61\x69\x20\x59\x7c\xd3\x37\x38\x2f\xfc\x26\xee\xf8\xf2\x40\x4d\x49\xfa\x6a\xb6\x9d\x44\x0c\xf5\x51\xa5\x0b\x47\x92\x08\xbd\xf7\xba\x66\x87\xc5\xa9\xea\x9c\x72\x51\x81\xf9\x72\x28\x7c\xe3\xcc\xd7\xf0\x7e\x43\xe3\x76\x30\xcd\xce\x0e\x06\x06\xeb\xaa\xa5\xef\xfa\xbe\x25\x89\xa3\x71\xb5\x52\xcf\x99\xc7\xcb\x39\x46\xf1\x88\xae\x47\xcc\xf3\x01\x19\xac\x1b\x21\x12\xbd\x92\x91\x79\x9d\xef\xdf\x95\xde\x30\x0d\x59\x48\xd7\xc6\x24\x49\x2e\x09\x86\x55\x02\xd2\x4b\x13\xe7\xac\x82\xdd\xe0\xb9\x5b\xb9\xcb\xf0\xd1\xc6\x2b\x5a\x2c\x81\x44\x84\x4a\xa2\x0a\x33\x17\x4d\x3e\x98\x83\xe5\x58\xbc\x09\xa5\xe2\x8d\x84\x9a\xae\x18\x00\x50\xd9\xc8\x9c\xf9\x3d\xe1\xf8\xa0\x48\x47\x35\x41\x58\x4e\x7e\x45\xf4\xa8\xd2\x93\xdc\x9a\xfd\x0f\xbd\xf7\x52\xc9\xd8\x59\xeb\xad\xdf\x84\x22\xa2\x98\x69\xb7\xc0\xe6\x73\x1b\x41\x06\x6f\xef\xec\x24\xb3\xda\xe2\xc3\xf1\x7e\x33\xf1\x24\xb3\xbe\x95\x63\xdc\x1c\x06\xbd\xd5\x2a\xd3\x1c\xee\x6f\xb2\x0a\xed\x20\xc8\xcb\x5c\x20\xfa\x96\xff\xf9\x20\x72\xed\xcf\x1b\xed\x6f\x1f\x83\xc0\x21\x58\x66\x0c\x6f\x5e\x7f\x21\x01\xc8\xd7\x76\x70\xbb\x29\x89\x15\x1b\xa0\x85\x29\x96\x66\xb9\x09\xea\xfb\x17\xe3\x38\xaa\x6a\x78\x91\x74\xd3\xd7\xde\xde\x3f\x5e\x2a\x5f\x98\xf6\xf1\x76\x06\x1a\x61\xd7\xe1\x92\x73\xad\xfd\xb1\xc4\x79\x66\xc4\x9f\x3e\xf1\xa5\x05\xb9\x2a\xd3\xb6\xe8\xcc\x5c\x09\x31\x6d\x02\x50\x5f\x87\x99\xd1\x7b\x80\x45\x6d\xf0\x5f\xe8\x1f\x29\xa2\x29\xfc\x7f\x6a\xfe\x17\x00\x00\xff\xff\xe3\xcd\x30\x23\x8b\x06\x00\x00") +var _test_certsMtCaClientTenantKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x95\xb7\x12\xa3\x40\x02\x05\x73\xbe\x62\x73\xea\x0a\x84\x13\x04\x17\x0c\x23\xcc\x00\x03\xc2\x48\x08\x32\x10\x4e\x78\x90\xb0\x5f\x7f\xb5\x1b\xdf\x4b\x5f\xd2\xd5\x49\xff\xe7\xef\x64\x45\x43\xf6\x1f\xcf\x07\x7f\xee\x1e\x7a\x82\x40\xf9\x63\x2a\xd1\xbf\x87\xc0\x08\x29\xa3\x8b\x64\x00\x4c\x08\x5c\x05\x2c\xf3\x9d\x6b\xe3\x17\xd9\x55\xe3\x92\xcc\xb3\xc4\x7e\x64\x9c\x02\xe6\xd7\x9f\x28\x3d\x65\x41\xe0\x8f\x5a\xcf\xd5\x49\xf0\x07\x7b\x65\xd6\x3b\x24\xe4\x43\x96\x6c\x4f\x33\xfc\x55\x2d\xc4\x8b\xe8\xaa\xfd\xf7\x9b\xbd\xad\xfb\x20\x9c\x57\xa1\x67\xd3\x1f\xe7\x4a\xab\x35\xc4\x5b\xba\x0c\x71\xe2\x27\xb7\xa3\x77\x66\xdd\x61\xf6\x81\xe6\x6f\x96\xfb\x24\x30\x47\xa9\x76\x3d\x51\x6c\x87\x3f\x9f\xf4\xce\xc3\x65\xa0\x94\xa7\xd1\x38\x05\xd3\x19\xab\x04\x2f\x56\x0d\x64\x70\xa3\x1a\x7e\x4a\x9b\x82\x49\x56\x09\x32\xd9\x1a\x9d\x5f\x7a\x07\xbe\xb1\xac\xc4\x61\x0d\x5f\x5a\xdc\x34\x9a\x0c\x79\xee\x77\xe5\xe7\x87\xbb\x71\xc1\x2f\x9b\x5f\x07\x6d\x39\xfa\xee\xa7\x45\xe0\x44\x6d\x08\xeb\x5e\x22\x99\xd8\x57\xbf\xf3\xa2\x0d\x07\xc7\x02\x39\x5a\xb3\x08\x10\x69\x6f\xb6\x5c\x0c\x55\xa7\x10\x3d\xe8\x88\x59\x4b\x37\xcf\x62\xbc\x24\x17\x52\xf9\x0a\x59\xc5\xdf\xd6\x66\x2c\xd1\x22\xc7\x69\xaa\x3a\xaa\xd6\x5f\x3b\xd2\x13\x98\xe2\x7a\x9b\x9e\xc3\x85\x4d\x4a\x22\xe5\x49\x8b\x95\xce\xac\x2b\xd7\x41\x77\x86\x3c\xf0\xd5\x66\x36\x6e\x7d\x6a\xf3\xb7\x3b\xb9\x41\xce\x1b\xa1\xb3\xa1\x1b\x70\x81\x0c\x06\x24\x03\x17\x1a\xae\x8d\xfb\x1a\xef\x8e\x2a\xf2\x90\x68\x5a\x9c\xbd\xa4\xef\xb2\x68\x0e\xd4\x81\x6a\xa4\xab\x7e\xdc\x00\xe3\x2a\xe5\x7c\x3f\x06\xc1\xa8\xbc\x5c\x3f\xae\x64\x69\xfe\x70\xd7\x80\x5e\x3c\x1f\xd7\x33\xa6\x56\x14\xce\xec\x46\xcf\x4e\x4d\x7c\x11\x94\x60\x4e\x36\x52\x2c\xea\x87\x26\x2b\xb4\xbd\xbd\x25\x7e\xab\xed\x00\xf9\xf2\x89\x40\x21\xa6\x47\x40\x96\x83\x8d\xc7\x6e\xbd\x7a\x59\x10\xec\x7b\x8c\xb5\xb0\xba\xf0\x92\x75\x89\x33\x22\xfe\x1d\xfa\xc4\x45\xed\xc4\x20\xf6\x9a\x0e\x79\x5e\xfb\x5b\x81\xb7\x50\xe8\x86\xb8\x7e\x0e\x82\xad\xda\x02\xaf\x3c\x9b\xfe\x63\xd0\x52\xd4\x2f\x91\xf8\x11\xf7\xf8\xfa\x79\xd7\xbb\x06\x02\x90\x13\xaf\x8c\x93\xc7\x70\xc5\x6c\xda\x15\x9e\xaa\x7b\x96\x99\x58\x2e\x7e\xe4\xac\x97\xe2\xb4\xf1\x12\x9c\x08\xb6\x55\x89\x2d\x20\x6d\x88\x7e\x51\x74\x9b\x76\x35\xcf\x35\xb6\x53\x8a\x68\x41\x53\x46\xf4\xf3\xba\xec\x5b\x84\xc7\xb7\xf0\x1e\x2e\x34\x52\xf1\xa2\x9a\x77\x99\x3a\xbf\x0f\x5e\x07\x7c\x33\x8b\x91\xab\xe3\xd7\x87\xdb\x68\xb5\x50\x68\xec\x05\x75\x79\xaf\xcf\xe8\x8c\xdf\xb4\xb0\x2c\x09\x21\x78\xe3\x15\x17\xfc\x0e\x06\x4d\x06\xd8\xcc\x55\xeb\xc5\x4c\xb0\xb2\x45\x3c\x0b\x3e\x0e\xd5\x78\x49\xb8\xae\x68\x9c\xe3\x45\x2d\x54\x67\x06\x29\xff\xc2\xaf\xeb\xce\x18\x5e\x3a\xf3\xec\xe3\x4d\xa4\x1b\xf3\x71\xb2\xcf\xbd\x9a\x91\xf3\x6b\x9e\x2a\xb4\x7c\xcb\x85\xc8\x7f\x1e\xe8\x18\xf1\xa4\xdb\xd6\xd9\x53\xfb\x43\x89\x95\x8c\x12\xbb\x14\xa6\xa5\xf1\x3c\x97\xed\xd9\x69\xae\xfa\x3a\xa0\x4f\x80\xc4\x92\xab\x47\x07\x6b\xf4\x50\xcf\x99\x8b\x42\x9a\xd7\xaa\xcb\x8d\x96\xfa\x82\x65\xd4\x93\x4a\xf7\x74\xdc\x4d\xfe\xc8\xda\xfb\x8f\x31\xa9\x8a\x12\xb8\x90\xea\xf5\xf1\x1f\xf1\x3d\x0c\x09\x66\xe8\x2e\x43\xcd\xec\xb7\x50\x92\x18\x6a\x72\xa9\xe8\x40\x10\x91\xec\xf1\x88\x47\x31\x68\xbc\x65\x6c\x42\x23\x37\xc6\x5f\xd7\x69\xcd\xc2\xca\x8d\x22\x7a\x88\x7d\x52\x3a\x68\x19\x65\x9a\x59\xe2\xfa\x3a\xf6\xc8\xcf\xc5\xb7\x6d\xc8\x93\xd2\x99\xad\xe3\xc4\x58\x2f\xc7\x77\xf7\x10\x3d\x6b\xfa\x18\x53\x1c\x40\xd6\xda\x83\x48\x9e\xa8\x95\xca\xa7\x0c\x15\x2d\xbb\x2e\x7e\xf1\xe2\x43\xa9\xa6\x08\xb3\x0b\xef\xf5\xb5\x62\xee\xc5\x93\xac\x84\x53\x66\x45\xaf\xd0\x77\x8d\x8b\x0c\xc7\x19\xe9\x61\x1b\x8d\x48\x71\xcf\xcf\xed\x1f\x32\x2a\x1f\xdb\xe6\xdb\xe6\x9d\xf9\x4d\x05\x77\x9e\xc9\xe7\x45\x44\xa4\x1a\x6a\xee\xd2\x79\xca\xc9\x07\x3f\xff\x3d\xde\x0f\x54\xde\xfc\x0e\x5d\x45\xe4\xcf\x23\xd5\x2b\x76\xea\x58\xed\x2f\x6f\x21\x9e\x56\x4f\x68\x73\xb8\xe1\xd4\xaa\xdc\x8a\x25\xd3\x90\x0d\x08\x7e\xb4\x9b\xc8\x96\x5c\x4f\x42\x89\x40\x5a\x65\xf6\x65\x62\x5b\x5b\x7e\x5d\xf1\x5a\x2c\x7e\xbe\xf4\x58\x39\xf0\x5b\xe3\x69\xd0\x51\x9f\xdf\x63\x11\xb1\xd2\xb2\x29\xaf\x30\xdb\x4b\x5a\x1b\x5c\x12\x3f\xb4\x50\x94\x40\x52\x32\x0b\x72\xdc\x9a\x55\xb4\x65\xe1\x32\xf5\x7f\x2d\x03\x9f\x5c\xcd\x85\x21\x57\x0b\x7e\x6b\x0e\xe6\x4d\x1a\x33\xb6\xac\x7f\xf8\xc0\xf6\x4b\xa4\x55\xec\xb5\x82\x1e\x01\x96\x31\xe6\xa4\x8f\x1f\x08\x0f\xa7\x5f\x3b\x6b\x3f\xc2\xca\x36\x18\x53\x78\xea\x29\xe4\x72\xb9\xbf\x08\x5d\xdd\x44\x2b\x1c\x6f\x46\x17\x9b\x32\x6b\x8e\xd3\xe5\x35\x27\x63\xdf\xac\x76\x85\x7d\x62\xbc\xca\xef\x2a\x2d\x53\x14\xae\xc7\xc3\x96\x4a\x46\xad\x4e\x46\x2e\xf3\x7b\x20\xdb\x8e\xe1\x1a\x11\xed\x1e\x5e\x01\xfa\xf3\x72\x83\xa1\xa9\x6b\x33\x3d\xa2\x19\x31\xac\x15\x26\x91\x6f\xe3\x81\x38\x9b\x3c\x55\x94\x06\x96\x91\x02\xbe\x8b\xc3\x43\xe1\x92\x84\x4d\x52\xe4\x6d\xbb\xce\xa2\x5d\x06\xfa\x77\x9c\x2a\xe7\xec\xde\x9f\x32\xb2\xdb\xa5\xb5\x0a\x15\x24\xee\xf4\x86\x28\x50\x5e\x9e\x46\xf0\xdc\xd9\xdf\xb4\xe3\x81\xec\xe3\x9d\xf5\x5f\xd2\x47\x15\x0c\xa0\xb8\x3a\x55\x39\xb7\x97\xde\xc0\x71\xd0\xd9\xd9\x2a\x5b\xb9\x47\xfb\xdf\xe2\xd9\xe2\x19\x15\xf2\x59\xfb\x5a\x31\xcc\xfd\xea\x12\xdd\xdc\x67\xac\x5a\x7f\xc6\xab\x9b\xf0\xa0\xe5\xe9\x26\xd3\x95\x52\x48\x66\xd1\xd6\xfc\x9a\xcd\x12\xc0\xf5\xeb\x37\xf3\xc2\x76\xbc\x19\x7c\xe3\xde\x3f\x8a\xfb\x78\x7e\xff\x4b\xfc\xcb\x8a\x62\xdf\xfe\x7f\x6e\xfe\x17\x00\x00\xff\xff\x95\x02\xbc\xa1\x8f\x06\x00\x00") func test_certsMtCaClientTenantKeyBytes() ([]byte, error) { return bindataRead( @@ -279,12 +321,12 @@ func test_certsMtCaClientTenantKey() (*asset, error) { return nil, err } - info := bindataFileInfo{name: "test_certs/mt/ca-client-tenant.key", size: 1675, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x46, 0x86, 0xf6, 0xd9, 0xbc, 0x7a, 0x1b, 0x1d, 0x90, 0x27, 0x90, 0x9c, 0x28, 0x24, 0x9f, 0xb0, 0x50, 0x5a, 0x24, 0x57, 0x65, 0xc4, 0x7e, 0xc7, 0xf9, 0xa7, 0xce, 0x3e, 0xc7, 0x0, 0xff, 0xa6}} + info := bindataFileInfo{name: "test_certs/mt/ca-client-tenant.key", size: 1679, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xaa, 0x9e, 0xd, 0x12, 0x10, 0x60, 0xf5, 0x5a, 0xc, 0xa2, 0x70, 0xd, 0xdd, 0x43, 0xf7, 0x8b, 0x43, 0x16, 0xb6, 0xe3, 0x3b, 0x75, 0x9d, 0x6b, 0x85, 0xba, 0x69, 0x63, 0xde, 0x2b, 0xd3, 0x7c}} return a, nil } -var _test_certsMtCaServerTenantCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x94\xbb\xd2\xaa\x4c\x1a\x85\x73\xae\x62\x72\x6b\x0a\x45\x51\x09\x26\xe8\xa6\x1b\x6c\xa0\x81\x06\x01\x31\xe3\xd8\x88\x72\x90\x4f\x0e\x72\xf5\x53\xfb\x0b\x76\x30\xf3\xbf\xe1\x13\xac\x7a\xab\xd6\xaa\xe7\xdf\x7f\x0e\x62\x9d\xd8\xff\x52\xb1\x77\x25\x1a\x51\xc1\x15\xff\x52\x81\x12\x82\xe0\xaa\xaa\xa0\xd8\x70\x30\x13\x08\x38\xf1\x80\xd9\x69\xb9\x6e\x95\x40\xa2\xe8\x88\xd2\xd5\x39\xd5\x2e\x73\x9e\x33\x62\xb1\x61\x76\x77\x52\x4d\x99\x0d\x18\xb6\x20\x03\xb3\x60\xae\xd8\xa7\x10\xe8\x60\x17\x60\xb5\xa2\x06\x93\x94\x3a\xd9\x1b\x53\x1c\xd9\x1d\xf5\x82\x19\xcf\x31\x0a\x19\x43\x78\x5e\x50\x2a\xd9\x43\xd6\x28\x55\x2c\x71\xce\xb6\x78\xbe\x54\x99\x2d\xd0\x1a\xcc\x76\x0d\x64\x7a\x8d\x67\xbb\xc6\xdf\xa8\xca\x6c\xba\xfe\x61\xf8\xf0\x97\xd5\x60\xa0\x1e\x99\x31\xf8\x0d\x33\xf1\xfc\xfa\x1b\x26\xc4\x12\x5f\xb4\x2b\xb8\x42\x6e\x87\x10\xd0\x2b\xc2\xf6\x14\x4b\x9f\x6f\x2a\x69\x75\xa2\x42\xc4\xae\xaa\x0a\x7c\xf2\xbf\xef\x43\xc8\x00\xe2\x1c\xbb\x02\x40\xaa\x0a\x58\xa7\x72\x8e\x21\xa0\x9a\xe4\xe0\xb8\x44\x4a\xdf\x40\x79\xd6\x9b\x43\x49\x8f\x57\xab\x83\x51\x64\x44\x7d\xb0\x7a\xe9\x05\x80\xca\xb1\x0f\x96\x49\xe5\x4b\x7d\xbb\xde\x4b\x28\x9c\xe3\xdc\x4e\xfd\xcc\x71\xd7\xde\xbd\x65\xbb\xb3\x3a\xf6\xdb\x49\x7c\xd4\x56\xfc\x5c\x7f\x0e\xca\x5d\x91\x9d\xe5\x44\x02\x9e\x6c\xc2\xa8\x3b\x46\x1f\x25\xed\xe4\x6c\x7f\x7c\xfa\xe7\x2e\x28\x8e\x2e\x16\xf6\xf9\x37\x51\xf3\xcf\x14\xf8\x69\x52\xd6\xf2\x32\xe4\x27\x17\xc2\x83\x63\xc0\x87\xfd\xc5\x9b\xfb\x29\x6c\x72\x5d\xa3\xd1\x60\x95\xd5\x46\xfa\xbe\xd2\x8d\xb9\xd4\x5a\xac\x6d\x7e\x4c\x88\x1d\x2e\x09\xa3\x31\x32\x85\x5e\x74\x37\xda\x85\x21\x71\x2f\x92\x5b\xf1\xf5\xce\xa8\x69\x89\xda\x68\x1d\xb9\xbf\x4f\xfa\x23\x6f\xb2\xba\x75\x8a\xba\x2f\x7c\xef\x36\x1f\x29\xd9\x9c\x93\x50\x9a\xc8\xe5\x92\x0b\x7a\xff\x1c\x7f\x94\xf4\x09\x77\xa7\xc8\x33\x01\xf3\xfd\xcd\x3b\x63\x87\x97\xb9\x9d\xc7\x84\x7b\x90\xaf\x73\xe4\x46\xee\xb4\xfb\x9c\xad\xc0\x08\x64\xf1\x94\x8e\xbe\xfd\xda\xe2\x18\x83\xb1\xd9\x7b\x02\x82\xae\xb2\x18\x41\xab\xd1\x83\xd8\x5d\x2a\xcb\x4a\xad\xec\xee\x3b\x6e\x3d\xb6\xe7\x41\x8b\x16\x57\xa1\x2a\x98\x31\x00\x09\x6d\xa8\xca\x66\xc4\x63\x14\x7a\x5b\x17\xb0\x8b\x08\x01\x43\x02\xe0\xd6\x93\x42\xf2\x67\x48\x39\x9e\x31\x14\x67\x46\x28\x88\x21\x28\xcf\x2a\x60\xf8\x9f\xd6\x87\x7e\x1b\x43\x3f\x46\x82\x2c\x22\xf8\xd6\xc7\x2c\xa3\x6e\xa8\xcc\xc5\x7e\xbf\x2b\x79\x78\xc8\x0f\x9a\x29\xa2\xc5\xef\xa6\xff\x8e\x61\x55\x97\x97\xe1\xb2\xf4\x99\xaa\x3d\xb4\xf8\x42\x95\xdb\x29\x43\xf9\xf6\xa8\x4e\xc9\x18\x48\x72\x2c\xbc\x22\x56\x04\x12\xeb\x83\xf9\x90\x56\xe2\xca\xba\x62\x1f\x36\x12\x39\xdf\x8c\xa9\x6f\x8a\x07\x79\xe7\xf7\x2c\xc6\x0f\x5f\x8a\x77\x93\x71\x68\xf4\x3a\x95\x3e\xd9\xfe\xd0\xda\xc3\x6b\x79\x9e\xe5\x55\x68\x50\x71\xdc\xac\xf2\xcc\x92\x80\xbc\x72\x75\xe0\x26\x0c\x4e\xba\x83\x6e\xee\x06\x9f\x9e\xa3\x23\xc6\x41\xac\x47\x4e\xe4\xd7\x67\xf5\x58\x18\x56\x58\x04\xfc\xf5\xb6\x3c\xb7\x69\x6f\x2c\x19\x7c\x01\x8c\xf5\xe7\xd3\x1b\xf6\xda\xfa\x72\x4b\x96\xe3\x3e\xfc\x8a\x19\x57\xc2\x24\xff\xde\x8c\x77\x94\x2a\x83\x28\xb6\xef\x85\x46\xc6\xab\xd5\x82\x52\xfe\xce\xd3\xbd\x11\x6d\xef\xfd\xfa\x14\x7a\x7c\x45\x02\x11\xb7\x9e\xb6\x3f\xd4\xba\xb5\x15\x6d\x4b\x9e\x4e\x6d\x11\x11\xf4\x7d\x6e\x9e\x54\x04\x65\xbf\x26\x6f\xb3\xf9\x59\xcd\x6e\x35\x82\x86\x38\xaf\x5d\x82\x4f\xbb\x87\x6b\x53\x3b\x3f\x97\x7a\xab\xb5\x82\xd2\x3e\x95\x3c\x05\x25\xe1\x44\xdc\x87\xf4\x3f\xc2\xaf\x26\xb0\x8d\xfe\x5f\x1d\xff\x0d\x00\x00\xff\xff\xef\x60\xa4\x8a\x57\x04\x00\x00") +var _test_certsMtCaServerTenantCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x94\xcb\x0e\xa2\x48\x18\x85\xf7\x3c\xc5\xec\xc9\x04\x41\x11\x59\xcc\xa2\x28\x0a\x04\xac\x82\x52\x2e\x96\x3b\x41\x2e\x72\x11\x81\xd6\x02\x9e\x7e\xd2\x3d\x49\x2f\x66\xe6\x5f\x7e\x8b\x93\x3f\x39\x27\xdf\x9f\x3f\xcf\x40\xb6\x43\xfe\x80\xe8\x1c\x3a\x96\x03\x41\x88\x7e\x51\x01\x3b\x8e\x69\xac\x10\x82\x5c\x2c\x01\x77\x0c\x50\x3a\x67\x10\x9c\x0b\x25\x6e\x2a\xf6\xf1\xd5\x38\x39\x1e\x25\x7a\xdc\x23\xa3\xe1\x26\x65\xae\xd7\xdf\x9c\xea\x9b\x11\x40\xd1\xc9\xa0\x80\x0b\xde\x8a\x2e\xd8\x00\x36\x90\x23\x04\x2b\xec\x52\x45\xaf\xef\x5b\xf7\xcb\x12\xd2\xe3\x73\xc4\x11\x67\x66\x4c\xa9\x89\xf8\x6c\xa6\x0a\x19\xb3\x4e\xaf\x98\x52\x96\x74\x83\xf8\xb1\xca\x88\x80\x6b\xc0\xc9\xea\x2c\x38\x64\xdc\x37\xf1\x9a\x54\x19\xc1\xeb\x4f\x86\xe7\xdf\xac\x06\x23\x3e\x3b\x1c\x81\x5f\x61\x1e\xe2\xed\xef\x30\x81\x29\xe5\x6c\x85\x20\x34\x4a\x12\x1b\x00\x87\x26\x22\x5f\xa6\xfc\x58\x52\xc5\xaa\xef\xd0\x30\x69\x08\x21\xb8\x38\xff\x7e\xdf\x30\x28\x30\xcb\x12\x05\x02\x30\x21\x04\xb4\x87\x65\x89\x0c\x80\xdf\xe0\x7b\x60\x75\xa2\xe7\xd3\x2b\xbc\x46\xf7\x3d\x93\xc6\x63\x61\xac\xcd\x9c\x81\x7d\xf2\x02\xca\xd2\xb5\xe3\x9d\x85\x01\x7b\x28\x6a\xc5\xfa\x41\x25\x02\xed\x2e\x09\x8a\x4e\xba\x5e\xef\x5f\x7a\x34\xc4\xa9\x53\xcc\x19\xfd\x3e\x0b\x73\x60\xf3\xed\x60\x7b\xab\xb7\x00\x57\x17\x95\xb3\x8b\x69\x6f\x1f\xfa\xba\x3b\xcc\x87\xad\xa3\x05\x37\x53\x0b\xc5\x4e\x80\xad\x04\xee\xa9\x3b\xc8\xb6\x84\xa0\x42\xb4\x06\x76\xba\xdd\xec\xe3\x8b\x17\x04\x92\xf8\xe9\x64\xf1\xee\x17\xe3\xba\xfe\x88\x29\x38\x91\x2d\xd7\xd4\xea\x6a\xb7\x45\xb5\x7f\x72\x59\x7a\x9e\x52\xe1\xea\x69\x59\x77\x8a\x03\x37\x55\xc7\x7c\x7a\x5d\xcf\x93\xb6\x3c\x68\x12\x85\xd2\x74\x9a\xdb\x26\x04\xb9\xda\xde\x56\xf6\x91\xd8\x47\x53\x5d\x9a\xf5\x37\x1c\xa4\xaf\x7c\xca\xc6\xa7\x7e\x6b\x2c\x4d\x98\xbb\x8a\xc4\xda\x54\x58\x96\xf6\xf1\xdc\xea\x22\x02\xf9\xe6\xaf\x7d\xbf\xc0\x00\x64\xbd\x4a\x07\xe5\x72\x34\xbb\x8d\xf8\x5c\x0a\x85\x47\x65\x79\xdd\xf3\xf8\x6a\x14\xef\x75\x01\xc3\x3b\xa1\x8e\xa0\xd6\xd0\x7f\xa4\x45\xcd\xbe\xf2\xee\x2d\x19\xac\x4f\x2e\x07\xbc\x9b\x3f\xe2\x32\x15\xe4\xfd\xbe\x18\xdd\x01\x02\x8e\x00\xb8\xe3\x0e\x43\xca\xcd\x92\x99\xf1\x79\x13\x00\x7a\x94\x0c\x40\x4d\x01\x94\xa7\x06\x1b\xce\xcf\x21\x3d\x10\x47\x86\xc4\xa9\x83\x01\x33\x40\x71\x80\x80\xa2\xff\x5b\x9f\xf9\x4f\x63\x76\x58\x07\xdc\x14\x26\x1a\xa9\x39\xc3\xcc\x68\xac\xf4\x0e\xde\xcf\x9b\x3a\x92\x5b\xb6\x09\xdc\xeb\x82\x2a\x03\x57\x61\x2a\xda\x71\xb8\x1e\xc5\xfd\x5b\x7c\x07\xce\xb5\x76\x51\x34\x1c\xd5\xed\x29\x1b\x83\xd0\x3d\x58\x42\x93\xc8\xb8\x95\xe5\x42\x06\xab\xed\x9f\xad\x25\x9f\xad\xe5\x7e\x2f\x1e\x41\xc3\x8e\x9b\x24\x83\x25\x0f\xfb\x26\x7d\x76\x4a\x0e\xd7\xbe\xb2\x36\xc3\x49\xcc\xfd\xda\x6e\x9f\xfe\x50\x35\x5b\x7d\x2b\x78\x6c\x7e\x56\x99\xdc\x7b\xfe\xf7\xa8\x5f\x81\x3e\x6b\x15\x39\x5e\xbe\xd1\xae\x7b\x48\xa1\x06\x7e\x30\x69\xbf\xd9\x8e\x60\x0a\x93\x38\xd7\xbb\x4d\x57\x12\x5b\xdf\x4c\xd2\x46\xac\xd6\xfb\xc7\x0f\xb8\xe0\x9f\x71\xa4\xa7\xf3\xe0\x2b\x5b\x0f\x5c\xb8\xa7\xe5\x9a\xca\x71\x2a\x9f\x67\x67\xde\x8c\x2f\x4e\xea\x7e\xb8\x7e\x4b\x73\x71\x55\xcf\x80\xb8\xed\xe0\xe8\xdb\xbe\xc5\x49\xfc\x56\xe5\x85\x44\x02\x17\x79\xd2\xec\x74\x40\xdb\x5d\x45\x3c\x47\x35\x97\x36\x7e\x58\xbb\xe4\xa0\x24\x77\x78\x42\xb9\x1f\x13\xb3\x1a\x9b\xe1\xb6\x5d\x48\xf4\x60\xe9\x69\x3b\x7c\xda\xcb\xa0\x5c\xa2\x07\x32\x9d\x7d\x21\x4c\xd7\xfa\x40\xe2\xcf\xeb\xfc\x89\xa2\xab\x3f\xfd\x25\xfc\xd2\x04\x22\xe6\x7f\xd5\xf1\x77\x00\x00\x00\xff\xff\x9a\x2e\xfc\x8a\x57\x04\x00\x00") func test_certsMtCaServerTenantCrtBytes() ([]byte, error) { return bindataRead( @@ -300,11 +342,11 @@ func test_certsMtCaServerTenantCrt() (*asset, error) { } info := bindataFileInfo{name: "test_certs/mt/ca-server-tenant.crt", size: 1111, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xa5, 0xf4, 0x7c, 0xb0, 0x64, 0xfb, 0xf7, 0x48, 0xbe, 0xf6, 0x80, 0x6e, 0x7f, 0x7a, 0x7, 0x6, 0xc1, 0x45, 0xa9, 0xb3, 0x7b, 0xd0, 0x1e, 0x13, 0xa1, 0x94, 0x2c, 0xc7, 0xde, 0x7f, 0xaa, 0xec}} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xd, 0x66, 0xa8, 0x73, 0x78, 0x31, 0xf5, 0xd4, 0xe, 0x6b, 0x4e, 0x7, 0xcc, 0xff, 0xb0, 0x97, 0x6, 0x1b, 0x28, 0x45, 0xd, 0xca, 0xff, 0x9b, 0x7d, 0x25, 0xf6, 0xb8, 0xde, 0xfc, 0x0, 0xba}} return a, nil } -var _test_certsMtCaServerTenantKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\xa7\x12\xa4\x50\x02\x85\x61\xcf\x53\x8c\xa7\xb6\xc8\x49\x8c\xb8\x64\xba\xc9\xb1\xc1\x11\x9a\x9c\x73\xf3\xf4\x5b\x3b\x7a\x8f\x3d\xe6\x77\xdf\x7f\xfe\x37\x5e\x52\x34\xf3\x8f\xeb\x81\x3f\xb6\xab\x85\xc0\x97\xfe\xbc\xa5\xf8\xdf\x03\x19\x9a\x26\xcd\x40\xe3\x01\x78\x0b\xc0\x91\xc0\xf5\x89\x49\xb7\x66\x6d\x7c\x88\xd5\x11\xa4\x59\xcd\x3e\xb3\x71\x54\x72\x12\xf7\x69\xef\x9b\xf2\x96\x03\x41\x22\x89\x6a\x9b\x9e\xee\x6b\x16\x26\xd4\xb3\xea\x5d\xa3\xd8\xfe\xba\x48\xc4\xea\xb8\xe2\xf9\x5c\x6f\x7a\xf4\x10\xf8\x6d\xec\x8d\x6f\x3d\x2d\x36\x12\x1d\xa3\x6e\xb5\xc7\xaf\x54\x98\xb6\x73\x4a\x60\x47\xdb\x3f\xe5\xe2\xea\xbf\xda\x65\xa0\x89\xf5\x0b\xe2\x35\xbd\x70\x9c\x73\x5f\xfb\x0c\xdb\xa3\xb2\x13\x1b\x2b\xa9\x15\xd9\x29\x1a\xa1\xf9\xd4\xb8\x47\x09\x1a\x07\x77\xba\xed\xb0\xca\x64\xef\xf0\x24\x57\xc5\x08\xab\x0f\x7d\x4d\x92\x03\xd1\x62\x4a\x0e\x94\x88\x5e\x79\xcc\x65\x61\x18\x54\x6c\x19\xc3\x8a\x68\xf6\xe0\x9a\x4e\x36\x22\xcf\x85\xd7\x8b\x65\x5c\x84\xe4\x67\xe5\x14\x6d\xf5\xd4\x4b\x2e\xc5\xe9\x6a\x99\x7b\xfe\xa4\x6c\x05\xe5\x05\x9a\x0e\x1e\xfd\x60\x87\xa3\x7e\xf6\x44\x9a\x78\xfe\xa5\xd3\xf3\x2d\x36\xc1\xea\x0b\xd4\xc2\x4b\x8a\x68\xf3\x31\x17\xc3\x48\x44\x5c\xbb\xd3\xfb\x23\xb2\x1f\x94\x86\x7f\x1c\xb7\x72\x04\x1a\xca\x0a\xc9\x90\x10\x42\xea\xbd\x3c\x78\x5a\xb8\xfa\x4a\xdb\xbe\xed\x77\xaf\x91\xb0\x45\x97\xbf\x2d\xcc\x24\x04\xbd\x34\x11\x38\x80\x07\x93\xc6\x03\x47\x70\x12\xd4\xe2\x48\x22\xca\xf0\xa0\x89\xa1\x9b\x21\x7c\x36\x1b\x46\x8f\xf3\xd6\x98\x6c\x91\xce\xb5\xa3\x9a\x51\x64\xe9\xb2\xc5\x6a\x35\x6c\x19\x49\x0c\x66\x14\x2f\x87\xf0\x03\x49\xa8\xc3\x1b\x76\x94\xef\x8f\xf2\xd6\x83\x0e\xa4\xa9\xdd\xa0\x73\x14\x16\x36\x4f\xc1\x56\x02\x7b\x9f\x15\xef\x61\x53\x9a\xea\xee\xe6\x1a\xf7\x98\xa9\x71\xf6\x7d\x8c\x11\x55\xe3\x46\xd3\xc7\xa6\xb5\x9f\x8d\x32\xb6\x39\x87\x29\x0a\xc1\x1b\x60\x17\xe4\x1b\xf2\x46\x33\x7e\x61\xf9\x44\xaf\x30\x13\x86\x26\xbd\x7f\x31\xfd\xfc\xb4\xa8\x7b\xd2\xa7\x5d\x90\x16\x2c\x56\xe4\xc2\x6b\xa5\xa3\x1e\xe2\x81\xe0\x5b\x2c\x6c\x17\xfb\xfb\x56\x54\x16\x29\x03\x10\x45\x68\xbe\x1a\xf0\x23\x4a\xba\xcd\x1b\xc6\xe1\x53\xab\xd7\x72\x3b\x9b\xb2\x69\xda\xda\x2f\x4a\x0f\x98\x04\xab\x4c\x63\xb8\x20\x99\x49\xce\xdc\x0d\xf7\xae\x06\xde\xbd\x85\x07\x0d\xa3\x95\x1e\x12\x19\x42\x68\xad\x56\x32\x95\x6b\xe3\xc0\xf4\xb3\x1f\x2c\xce\xab\xcf\xf4\x2f\x21\xfd\xa2\x5f\xff\xe7\x50\x3f\x3c\x97\x3c\xfb\x2c\x70\x54\xd8\x35\x40\x7c\x4b\x45\x9a\x2a\x72\x3c\x56\xbc\xbd\xfb\xaf\xd9\x42\x84\x8d\xb1\xc3\xf9\xe2\xc1\xa4\xf0\xc0\x96\xae\x1f\x29\x1f\x13\x42\x7a\xdb\x57\x2f\x45\xe9\x80\x99\x9e\xc3\xa5\x91\x6e\xdf\x19\xb7\x7e\xac\x4e\xe0\x57\x07\x57\x66\xa9\xcc\xa7\x8e\xb3\xec\x8d\x81\x54\x07\x6b\xbc\x3e\x7e\xe3\x30\xfc\x6a\x6b\xc9\x98\x94\xae\xa1\xa2\x2b\x6f\xbd\xf1\xb3\x0b\x57\x21\x11\x65\xf3\x25\x10\xe6\x1e\xa3\xa2\x24\x4b\xe6\xf7\x9c\xa7\xef\x93\x40\x2f\xe0\xa3\x70\x82\x02\x72\xd8\x8a\x24\x16\xcf\x73\x09\xe9\xac\xac\xcd\x7f\x15\xf2\x4d\x75\x66\xff\x69\xd6\x6b\xef\x33\xf8\x4d\x33\x64\xb8\xdb\x56\xd7\xd3\x65\x38\x06\x6b\xcb\x34\xa0\x57\xa3\xfb\x5f\xb1\x81\x7d\x20\x43\xeb\xe2\x29\x8e\x6f\x44\x66\x61\xf1\xa5\x46\x19\xf2\x39\xb9\xb2\x76\xa2\x4a\x2f\xf4\x29\xa9\xa7\x4c\x08\x95\x81\x7e\x3f\xb3\x26\x05\x08\xe1\xd6\xb0\xd3\xda\xde\x98\x47\xce\x1e\x3a\x58\xf7\x40\xa8\x1d\xea\x5e\x6b\x7e\x96\x77\xde\x0f\xf3\xb7\x36\xd3\x5c\xd4\x1b\x26\x71\x36\xf8\x5e\x6a\x22\x6d\x1c\x39\x56\xfb\x7b\x7e\x0b\xcb\x84\x39\x3e\xf6\x1b\xc3\x99\xec\xb8\x22\xb0\x1f\xb6\xd0\xc5\x1d\x4a\xf6\x19\xf3\xc1\x9d\xce\xee\xb7\x7a\xf9\x46\xe4\x79\xb8\x6c\x3f\x9e\x92\x3f\x76\x8e\x22\x8b\x76\xc8\x06\x45\x67\xab\xf8\x2f\xf9\xdd\x1a\x3c\x29\xe6\x32\x12\xe2\x3f\xe4\x92\x8d\xe6\xd4\xa0\xab\xcd\x13\xe0\x7b\xfe\xa2\x68\x2f\x99\xdc\x7c\xa5\xd4\xf8\x9c\x78\xd5\x51\x81\x0d\xc5\xe7\x67\x49\x6a\x60\x17\xd7\xda\x2d\xcb\x39\x3e\x27\xb7\x4e\x26\x78\xb0\x92\xef\xaf\x13\x1f\xb7\x35\x45\x21\x7c\x41\x97\xa8\xaf\xfb\x6d\x41\x93\xf3\xe8\x85\xc2\x2b\x75\xa0\x4e\x32\x5a\x07\xd9\x10\xc6\x1b\x77\x05\x63\xcf\x4d\x7c\x56\xbe\x0e\x6c\x12\x8e\x1c\xce\x1f\xe5\x43\x98\x79\x7a\xa9\xeb\x19\xd8\x90\xe0\x71\xd4\xbb\xdc\x0e\xd3\x21\x08\x32\x05\x8c\x38\x34\xea\x2d\x33\x35\x98\x14\x60\x5d\x23\xd6\x93\xe1\x95\xd3\xc0\x1c\x8e\x96\xb7\x47\x09\x0d\xb2\x5c\xdc\xd7\x46\x1f\x8c\x00\x4b\xbb\xf2\x05\xb1\x6a\x02\x47\x55\x35\xd1\xd3\x8f\xe6\x63\x79\x52\x60\xd4\xc5\xbf\x89\x4f\x71\xb2\x0c\x4e\x55\x01\x8c\x48\x89\x49\xa5\x76\x2b\x97\x2a\xe3\x6f\x4b\x71\x38\x5b\xf4\x74\x22\x2b\x4f\x13\x91\x3d\x80\x92\x4b\x79\x03\x5f\x3d\x98\x18\xd5\xd3\xbe\xd9\x4d\xc5\x08\x9c\xc4\x9c\x78\x23\xe8\x23\x24\xc4\x55\xfe\xc8\x06\x3b\xa2\x11\x24\x23\x87\x9b\x3e\xec\x64\x77\x65\x98\x34\x02\x82\xd4\x17\x9d\x94\xa0\x21\x94\xad\xe4\x93\x0b\x55\x0c\xbe\x64\x66\xc9\x85\x4b\x08\x96\x22\xff\x10\x8e\x70\x7e\xec\x32\xba\x7b\x77\xb4\x5a\xf2\xa8\x72\x01\x8b\x4b\x79\x1f\x3c\x65\x10\x8f\x6b\x31\x5d\xc5\xce\x53\x4d\x43\xd5\xae\x85\xb4\x4e\xcb\x4b\xcc\xd3\x88\x5e\xcb\x82\x66\x4e\xcf\xdd\x46\x03\xeb\x67\xeb\x66\x65\x53\x75\x08\x1a\x46\xa9\xaf\x34\x30\x7b\x56\xdb\x8c\xec\xf6\x57\xaf\xe1\x30\x9e\x35\x8a\xcd\xaf\x21\xfc\x52\xf6\xcf\xcc\x66\x74\x78\xe0\x69\x9b\xbb\xd9\xab\x97\xb7\xe4\x79\x77\xfd\xcc\x1b\x8d\x3a\xb8\xfc\x65\x7f\x94\x9a\x18\xc6\x90\xd3\x6d\xb5\x73\xc3\x3c\x17\xc1\xdf\xbf\xd0\x3f\x56\x24\x53\xfc\xff\xdc\xfc\x37\x00\x00\xff\xff\xb0\xfb\xd5\xa5\x8f\x06\x00\x00") +var _test_certsMtCaServerTenantKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\xb7\x12\xa3\x40\x02\x04\xd0\x9c\xaf\xd8\x9c\xba\x82\x11\xc2\x05\x17\xcc\x60\x07\xef\x05\xca\x30\x12\xc2\x0a\x09\xaf\xaf\xbf\xda\x8d\xaf\xd3\x4e\xba\x3a\x79\xff\xf9\x1b\xa4\x68\xd8\xf9\x13\x84\xf0\x8f\x17\xe0\x04\x46\xca\x1f\x53\xc9\xfe\x35\x84\x8d\xb1\xf2\xae\x31\x82\xd0\x94\xa0\xaf\xc0\xb3\x93\xa8\xa3\x71\x0a\xc0\x9d\x95\x53\x05\xdf\xa9\x25\xe7\x4a\xd0\xdd\x48\xdd\xe5\x29\x2f\xe5\xc2\xcc\x6f\xcb\xf4\xb2\xc5\x17\x53\x0c\x6a\xd3\x10\xdf\x0e\x48\x77\x23\x0b\xfc\x8d\xb9\x78\x9f\x27\x08\xa7\x64\x7e\x51\xea\x21\x91\x86\xe0\x4e\xad\x3a\xee\xd9\xd7\xfe\x62\x38\x32\xfc\x5d\xe9\x0e\xa9\x2e\xce\xc6\x2d\x7e\xfa\xaf\x6c\x67\xb1\xf3\x16\xc2\xe3\x32\x33\x15\xd0\x34\x0f\xdf\xb8\x10\x7c\x2b\x63\x56\xdf\x2c\xe8\x3c\x9a\x12\xfc\x16\x28\x8a\xe3\x8a\x94\x7d\xb3\xe4\xe6\xb9\x20\x81\x70\x66\x9e\xf2\x36\xa8\x65\x9e\x90\xfa\xc7\x92\x53\x92\xc0\xcb\x52\x7e\x97\x33\x5b\x62\xa1\xdf\x86\x85\x3b\xab\x4a\xfb\x6d\x06\x40\xf7\xc0\x23\xf7\x4d\xbb\x05\x36\xe2\x87\x64\x74\x1a\x5e\x6c\xf8\xad\xeb\xd1\xf9\xea\x76\x71\xad\xb8\xe3\x5c\x2d\x30\x10\x7e\xba\x69\xb9\x02\xd2\xf5\x10\xe2\x74\xbd\xbe\x07\xd5\xba\xca\x49\xc7\xbb\x4d\x8b\xb1\x80\xce\xb6\x97\xbe\x77\x5c\xba\x45\xc4\x59\x06\x55\xa0\x50\x42\xcf\x2f\x4a\x4a\x95\x1c\x3d\x2c\x7d\x7a\xe2\x0e\xdb\xc1\xc6\x2c\x58\x48\xa7\xa1\xd2\x66\x14\xd4\xe6\x75\xb7\xf6\x5f\xab\xf1\xbc\x79\x08\x97\xa1\xc7\x5a\xb1\x63\x19\xfa\x10\xc1\x37\x46\x50\x5f\xf4\x4f\x0f\xfc\xb9\x59\x97\x10\x4f\x1a\xe1\x30\x2e\xf3\x7c\x31\x3d\x0e\x13\xc5\x71\xdb\x8e\x04\xec\x93\x36\xa8\x15\x5d\x1d\xe4\x57\xb5\xbc\xac\x40\x9c\x94\x01\x3d\x98\x2c\xb1\x5c\xf3\x66\xa2\x6f\x62\xf0\xfd\xdd\x5b\xc7\x7c\x34\x82\x8d\x90\x30\x5b\x49\xd1\x70\x29\x54\xd9\x02\x0f\xae\x8b\xcf\x21\x4d\x55\xde\x32\x5e\xd6\xcd\x89\xb0\x79\x30\xf6\xaf\xa2\xd5\x58\x57\xbb\x31\x5f\xbd\x20\xc3\xab\x80\x86\x33\x1f\xde\x60\x3a\x69\x7f\x20\x5e\x05\x1d\xc9\x9f\x86\x51\x4d\x17\x51\x69\x2a\xfa\xc9\xf6\xa1\x18\xf8\xb2\xb8\x89\x9c\xbd\xfa\x34\x1d\x4d\x22\x95\xa7\x1b\x89\x93\xe7\x3c\x95\x2d\xbc\x39\xa7\xa9\x8e\x16\xd8\xed\x93\x8e\xf8\x86\x78\x9a\xd1\x87\xd5\x45\x11\xdc\xdc\x57\xe5\xbf\x15\x85\xf4\x42\x98\xc4\x9a\xf2\xac\x0d\xfb\x73\x71\x1e\xa6\x33\x99\xdd\xc5\x7d\xdd\x6a\x18\xf0\xcb\x4f\x1c\x2c\x5a\xdc\xf2\xf4\x14\xbf\xed\xc2\xfa\x35\x41\x1d\xea\xfe\x72\x0e\x3a\x7b\x99\xc9\x1b\x1b\x55\x52\xaa\xa1\x75\xde\x12\x4c\x81\x97\x47\x8a\xbc\xe5\x2d\x1e\x55\xc4\x3b\xfd\x4e\x92\x0f\xce\x2d\x6e\x69\x9f\x1d\xee\xe2\xf4\x61\x54\x3f\xf2\x02\x88\xd9\x54\xdd\x84\x56\xa4\x3a\x53\x20\x28\xda\x47\xad\x5a\xa6\xae\xd5\x42\x21\xb7\x6a\xe0\x66\xfe\x31\xa3\xc1\x17\xe7\xf6\x02\xeb\xcf\xbe\x40\x70\xb7\x5d\x8e\xa7\x6b\xde\x01\xe6\xa4\xc0\x49\x22\x10\xc3\x08\x9b\x9e\xdb\x3b\xf8\xe9\x50\x6f\x0b\xe4\xf8\x4a\xc8\x0a\x76\xa0\x1a\xf3\xd3\xea\xd5\xbd\x94\xdd\x44\x3d\x6c\x1e\x7c\x50\xc4\x54\xab\x71\xd6\x66\x78\x87\xf3\x21\x64\x6a\xbd\x68\x3d\x11\x92\xe6\x63\xce\x5a\x3a\xa3\x87\x65\x9f\x7c\x74\xf1\xd5\x3e\x61\x85\x2b\xab\xce\x15\xb0\x3c\x3b\xa8\x1b\xc6\xa3\xe7\x73\xb8\xb0\xf3\xed\x98\xb1\x1a\xd6\x88\x7d\x0b\xff\x16\x0b\x9d\xed\x13\x60\xcc\x27\x51\x4e\x1a\x79\x2b\x8d\x84\xd1\x1d\xa6\x6a\xf9\xcd\xee\xc4\x11\x7e\xac\xb4\x10\xe2\x6e\xdc\x06\x3d\x6e\x5b\xf5\x2a\x74\xdb\x57\x08\x99\x27\x12\xc8\x56\xff\xa5\xad\x18\xda\x77\xc0\x10\xc5\xaf\x9e\xcf\x9e\xcd\x45\xb4\xe8\x49\x49\xff\xbc\xc6\x64\x41\x3b\x9c\x53\x58\xc2\x6f\x1f\xdf\x0d\x5d\x92\xe5\x6e\xac\x6f\x57\x27\x15\x28\xf7\xb3\xda\x12\x0c\x13\x20\x3a\x66\xec\x92\xf2\xc6\x13\xf7\x92\x9e\x9f\x54\xa8\x63\xee\xa0\x0d\xca\x96\xe9\x48\x74\xee\x45\x2a\x7f\x6e\x53\x11\xd0\x39\x3b\x55\xc5\x4a\x37\x7f\x4f\x86\x8d\xd8\xc3\xf1\x24\x9d\x5b\xa4\x5a\xa4\x1e\x55\xb5\xbd\xe7\x07\xd1\xda\xcc\x22\x94\xec\x10\x0a\x0f\x1e\x3a\xb9\xe5\xf6\x17\xd1\x0f\xcd\xcb\x11\xa6\x00\xce\x4d\x5c\x9e\xbc\x84\x2b\xae\xc0\x5b\xa2\xa3\x94\xd5\x8e\xf5\x80\xe2\x87\x37\xa5\x31\xd5\x98\xcc\xef\x08\x7a\xcf\x17\x20\x93\xd5\x22\x93\x0e\xbe\x2d\xdc\xa7\xef\xe6\xc7\xdd\x98\x0e\x12\x77\xdc\xad\x0d\x51\xb3\x06\xdb\xad\x50\x43\x7a\x31\xfb\x81\x31\x85\xb3\x41\x42\xad\x14\x5d\x8b\x4c\x4d\x77\x7b\x22\x8a\x2f\xf4\x95\xaa\xdc\x3b\xf5\xa3\xc0\x50\x32\xea\xdc\xd7\xbf\xdd\x44\xb5\x9e\x4a\xe2\x53\xcc\x8d\xa4\x9b\xa2\x47\xc6\xa5\x49\x59\x65\x55\x7a\xda\x76\xf0\x94\xba\x53\xf8\x5e\x76\xb1\x3e\x34\x95\x18\x3e\xca\x38\xd4\xbe\xbd\x90\x7c\x47\x1b\x99\xcc\xe4\x87\x20\xa6\x4a\x05\xcc\x84\x7f\xad\xd0\x2f\x6e\xa0\x1a\xfa\x02\x8f\x82\x38\x57\x5e\x2f\x05\xaf\x9b\x5a\xe8\xd3\x12\x23\x76\x95\x63\xf2\x24\x82\xd4\xa0\x26\xbb\x61\xdc\xe5\x87\x2e\xfa\x15\x46\xc1\x56\xb6\x3b\x0d\xf0\x9a\x83\x35\x1b\x9c\x83\x95\xd3\xdb\xf5\x12\xae\x25\xd5\x37\x72\x83\x7e\x8f\xb3\x86\x17\x75\xe2\xbe\x7c\x4f\x46\xac\x43\x28\x31\x7c\xc1\xb7\x06\x23\xa0\xaf\xae\x25\x85\xe5\x29\xa4\xbc\x97\xc7\xd5\x4f\x5c\x3a\x86\x31\xb2\xb8\xc7\xf9\x7b\xd8\x62\x31\xe3\xa8\x0c\x31\xbf\xb2\x02\x9d\xdb\xd3\xf3\xbd\xae\x16\x7e\xe7\x88\x54\x1f\x19\x58\x8b\x96\xb6\x16\xa4\xa0\x7b\x39\x4b\x2d\x0f\xfb\x59\xe3\x78\x07\x3f\xd1\x3e\x72\x1f\x5f\x7d\x71\x64\xea\x5e\xff\x6e\x99\xaa\xb4\x4e\x5b\x1b\x32\xba\x0f\xe2\x74\xe0\x56\x49\x53\x62\xd8\x01\xc7\x3f\x78\xc0\xd1\x56\xac\x89\x9e\x32\x64\xb6\x1a\x78\x33\xfd\xb9\x68\x26\xad\xb3\x8d\xf1\xf5\x8d\x55\xd1\x94\x07\x2c\x82\x10\xc1\xe3\xd9\x0b\xff\x25\xfe\x91\xa2\x38\xf2\xff\xa7\xe6\x7f\x01\x00\x00\xff\xff\xf8\xa5\xbe\x1e\x8b\x06\x00\x00") func test_certsMtCaServerTenantKeyBytes() ([]byte, error) { return bindataRead( @@ -319,12 +361,12 @@ func test_certsMtCaServerTenantKey() (*asset, error) { return nil, err } - info := bindataFileInfo{name: "test_certs/mt/ca-server-tenant.key", size: 1679, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xa6, 0xe4, 0x6c, 0x99, 0x5e, 0x9c, 0x81, 0x42, 0xcf, 0x94, 0xff, 0x53, 0xf0, 0x3a, 0x65, 0xbf, 0x33, 0x4d, 0xf4, 0xc7, 0x10, 0xd8, 0x9c, 0xfc, 0x85, 0x5c, 0xc3, 0x69, 0x46, 0xe2, 0x80, 0x87}} + info := bindataFileInfo{name: "test_certs/mt/ca-server-tenant.key", size: 1675, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x8f, 0xe0, 0x14, 0x78, 0x78, 0x4b, 0xcd, 0x3, 0x43, 0x8f, 0xeb, 0x22, 0xff, 0x4e, 0x42, 0x20, 0x7, 0xa1, 0x6f, 0xa9, 0xe, 0xa8, 0xe5, 0xfa, 0x66, 0xa8, 0xb3, 0xbf, 0x70, 0x6, 0xbe, 0x94}} return a, nil } -var _test_certsMtClientTenant123456789Crt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x64\x94\x3b\xd3\xb2\x3a\x17\x86\x7b\x7e\xc5\xd7\x3b\xdf\x20\x47\xb1\x0c\x21\x62\xd0\x80\x09\x20\x42\x07\xc8\x13\x44\xe4\x20\x28\x87\x5f\xbf\xe7\x79\x8b\xb7\xd8\x7b\x55\x6b\xee\xe2\x9a\xb5\x66\xee\xb9\xfe\xff\x3b\x26\xb2\xb1\xfb\x3f\x88\x58\x80\x0f\x18\x82\x00\xfd\x49\x05\x82\xb1\x65\x06\x10\x82\x42\xe6\x60\xc2\x26\xe0\x98\x01\xe7\xa6\x3a\x3e\x1a\x0d\xbb\xb1\xcc\xb0\xd9\x31\xab\xbe\xa5\x16\x9f\x2c\x1a\x3b\xa7\x36\xc1\xe5\x37\x77\x01\x45\x67\x93\x82\x49\x38\xad\xc8\x27\x26\xb0\x81\x14\x22\x58\x12\x87\xca\xfb\x2a\x55\x9c\x6f\x1c\xb9\x2d\x61\xe1\x84\xa6\xd8\xba\x52\x6a\xa1\x69\xb6\x32\xd9\x7d\xe7\xaf\x7d\x19\xcb\x9c\xd3\x2d\x9a\x8e\x65\xee\x0a\xa4\x02\x93\x5b\x01\x8d\x04\xf1\xe4\x56\x68\x89\xca\xdc\x25\x55\xf8\xbb\x6f\xff\x66\x15\x68\x09\xc3\x13\x02\x7f\x60\x27\x34\xd5\x7f\x61\x42\x2c\xf3\x19\x55\x80\x9a\xdc\xbd\x9a\x80\x04\x30\x40\x0b\x59\xa9\xe4\x56\xb9\xea\xfd\xbe\xe6\xe3\x7f\x9f\x6e\x9a\x14\x58\x9c\xa3\x0b\xb0\x20\x14\x00\x6d\x21\xe7\xc8\x04\x5e\x5a\xd4\x07\xa9\xda\x49\x5a\x27\x17\xb9\xbe\x98\x62\xcd\x6f\x89\x89\xce\xad\x5d\x9e\x8f\x2d\x87\xaf\x9d\x4f\x8d\x7d\xd8\xeb\x06\x5b\xdf\x6b\x1f\x96\xbb\xbc\xff\x72\x61\x0e\xfc\xbe\xba\x06\x8a\x87\xdc\x43\x70\xf5\x83\x99\xab\xe1\x98\xe9\x4f\x47\x09\xe3\xaa\xda\x6d\x13\x47\x09\x55\x6e\x2e\x33\xee\xe4\xfa\xdb\x5d\x23\xdb\x70\x92\x94\x79\x5e\x7f\x79\xbe\x00\xf8\x11\x9e\x9f\xb8\x06\x0f\xf9\x99\xed\xc4\x7b\x37\xba\x45\x4c\x1b\x33\x38\x4b\xc5\x58\x97\x49\x1e\xb9\xcd\x2d\x86\x89\xc8\x70\xc8\xc6\x56\x34\x7a\x77\x3e\xb9\xfd\x54\x19\xdb\xf9\xc1\xc0\x35\x1b\x25\x4f\x58\xd9\xb3\x4c\xea\x17\xd6\xdd\xc7\x91\xa9\x61\xd8\xc8\xd2\x17\x44\xcc\xf0\xeb\x47\x53\x9a\xe2\x39\x29\xcb\x33\x2d\xe7\x5b\xc6\xc6\x41\x1a\xb8\xdc\x5d\xf7\xf1\xc3\xd7\x5f\x5d\xbd\xb0\xd5\x68\xb0\xa0\x84\xaf\xa5\x38\xee\x07\x3a\x89\xeb\xeb\x39\xe7\xfe\xe7\xd4\xbd\xce\x9b\x4d\x7a\x7f\xfd\x64\x2a\x5e\x13\xdb\x77\x24\x45\xce\x72\x79\x3b\x7c\x64\x05\x44\x57\x47\xf2\x2b\xcb\x3d\x67\xf2\xbb\xd3\x76\xa2\x50\xb0\xac\x3c\x05\xd1\x7e\xd0\x2f\x0a\x4a\xcf\x27\xf9\x1e\x19\x5b\x88\xb5\xac\x4a\x25\x0b\x86\x10\x4c\x08\x80\x94\x34\x04\x86\x93\xc5\x63\xeb\xca\xb6\x17\x40\x8f\xa2\x09\xa8\x05\x78\xc4\x05\x62\x92\xdf\x12\xdd\x1d\x4a\x09\x01\xad\x0d\xe1\x60\x03\x1a\x1e\xcc\x89\x40\x02\xb6\x36\xf4\x7b\xdb\xc7\x99\x62\x51\x64\xc2\x29\x04\x40\xc5\x26\xa0\x26\xb1\x8c\x65\x73\x29\xf5\x4c\x68\xe7\x81\xbd\x1b\x55\xe3\x21\x2e\x54\x67\xb6\xe3\xcf\xa8\x1d\x2e\xd5\x39\x10\x57\xb6\x31\x0a\x9d\xc2\x40\x4c\xeb\x73\xcc\xb2\x01\x0f\x22\x53\xef\x46\x34\xef\x8d\xb1\x8b\x7d\x70\xf7\xe0\x9a\x09\xe5\xb8\xb4\xc4\x5d\x76\x69\x90\x19\xb9\xf6\x4e\x0a\xeb\x26\x0d\x91\xac\x26\x16\x68\xbc\x79\xee\x94\x2d\x32\x36\xa3\xa3\x25\xb6\xa3\xca\x1f\xa5\x7b\x6c\xd8\xde\x33\xb5\xd1\xe3\xb7\x7a\x21\x0a\x16\xd4\xc5\xf5\xac\x0d\x84\xed\x80\xe2\xe3\x49\x1f\x87\xb9\xf0\xd0\x9d\xd4\x47\x09\x62\x78\xd4\xd8\xbe\xb6\xd5\x77\x4d\xb4\x47\xf2\xed\xa5\x47\xfe\xd3\x46\x4f\x5f\x4a\x0f\xa5\x3a\xcc\x85\x9c\x3b\x92\x70\x73\x4d\x3f\xee\x9b\xcf\xdb\x49\x3f\x76\xf1\xbc\xd1\x97\x7d\xca\xe0\x66\x08\xc6\x49\xf3\x72\xa7\x3d\x45\x87\xe5\x49\x74\x9b\x4f\xd8\x97\xef\x79\x62\xec\x2f\xda\x75\x3b\x3b\x33\xd5\x15\x4f\x5c\x43\x61\x29\x9f\x52\xd9\x1f\x7d\xb5\x72\xba\xfb\xba\xd7\xfb\xc6\x8d\x0e\xde\xe7\x62\xbc\xf3\xa0\xec\x6f\x24\x8c\xe7\xc5\x1f\x1a\xb9\xd3\x21\xd6\xb8\x27\xb6\xfc\x95\x77\xba\xd6\xa8\x2c\xcd\xc4\x1f\x45\x13\xba\xe3\x0c\x26\xf1\xce\xc0\x25\x9a\x85\x3f\x8a\x40\xae\xf5\x5f\x6d\xfc\x13\x00\x00\xff\xff\x72\xd6\xd3\x85\x53\x04\x00\x00") +var _test_certsMtClientTenant123456789Crt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x64\x94\x3b\xd3\xb2\x3a\x17\x40\x7b\x7e\xc5\xd7\x3b\xdf\x88\xa0\x22\x65\x12\xc2\x3d\x81\x70\x15\x3b\x05\x0d\x72\x7d\x50\x34\xca\xaf\x3f\xf3\xbc\xc5\x5b\x9c\xb3\xcb\x55\xac\xd9\x7b\x66\xcf\xfa\xff\xef\x40\x6c\x39\xf4\x7f\x08\x47\x89\x63\x3a\x08\x24\xf8\x0f\x95\x88\xe3\x18\x30\x41\x08\x5c\x15\x0e\x84\x03\x01\x77\x22\x40\x45\x7b\x3d\x87\x93\xa9\x1f\x2f\x1d\xd3\x7e\xfc\x75\xde\xed\xcd\x54\x18\xac\x70\xbd\xf1\xe4\xd4\xef\x92\x02\x86\x7d\xc8\x80\x90\xbc\x05\xc7\x04\x02\x0b\x6c\x52\x8c\x6a\xe2\x32\x45\x6f\xce\xaa\xfb\x2e\x72\x3a\x92\x28\x15\x58\x14\x46\xc6\x98\x81\xc5\xc7\xb8\x28\xf4\x51\xf6\x7a\x5d\x28\x9c\x33\x19\x0b\xbb\x2e\xa9\x44\x1a\x20\xe8\xe2\x7c\x49\x52\x88\xc0\x20\x4b\x5e\x97\x94\x34\xe9\x2f\x53\xff\xb2\x06\x8c\x24\x72\x04\x06\x7f\x64\x1e\x16\xdd\x5f\x99\x54\x28\xfc\x83\x1b\xc0\x20\xa7\x19\x04\x24\x41\x09\xfe\x92\x85\x6d\x68\x53\x6e\x83\xdf\xd3\x62\xe7\xdf\xab\x43\xc8\x80\xc1\x39\x0e\x81\x81\x90\x04\xd8\x88\x38\xc7\x10\x10\x18\xdd\x79\x20\x1f\xab\xd2\x82\xdd\xda\xd0\x86\xcd\x03\x74\xc7\xc3\x57\xb6\xc4\xd9\xdf\x4d\xba\x97\x6c\xe4\xfd\x79\xd6\x7c\x62\x9d\x4d\xdf\x59\xb4\xc2\x57\x86\xde\x94\x26\xc3\xee\xf2\x95\xd9\x35\xfd\xc3\x7f\xf7\xc3\x83\x9b\x51\x10\x4e\x3b\x7b\x6e\xf7\x2e\x29\xe2\xdd\x35\xbe\x1a\xd6\x3a\xe1\x6f\x26\xf7\xab\xa0\x81\x3f\x63\x6c\xea\x4d\xf3\x73\xcb\xe6\x63\xb3\xca\x88\xb4\x3b\x1d\x9c\xdc\xf6\xa0\xd1\x5c\xbf\xab\x5d\x79\x44\x8d\xf5\xbd\x76\x15\xea\x3b\x53\xe3\x99\x7a\x8c\x91\x3c\xdc\xe9\x0b\x35\xd4\x1a\x9e\xc2\x9a\x14\xd3\x8a\xd4\x62\x0d\xe4\xad\xb1\xc0\xe7\x96\x4a\x3b\xe5\xba\x31\x43\xf7\xd1\xe4\x95\x71\xac\xcb\x1c\x38\xb7\x87\xda\x1e\x7c\x52\x98\x7a\x7d\x6c\x54\xcc\xa6\xf5\xe5\x1e\xf5\xc9\x2b\x5e\xe6\xf2\x41\x8b\xbe\x96\x4f\xf6\xa8\xf3\xfc\xee\x7e\x94\x68\x2f\xd1\xa8\x06\x37\x5a\x05\x19\xfc\x98\x6c\xba\x3d\x94\xd6\x8f\x59\xbb\x73\x75\x95\xcd\xb3\x73\x29\xf1\x87\xbe\x91\xce\x13\x14\x7f\xb7\x77\x77\x5e\x70\x52\xf4\xc7\x57\x38\x75\xde\x93\x9a\x6d\x75\x93\xda\xa1\xe4\xde\x30\xec\xc3\x00\x96\x8f\x97\x55\xc3\xea\x5d\xcf\x34\xa8\xa7\x05\x02\xa6\x13\x04\x04\x06\xe0\x4c\x06\x82\x52\x61\xf0\xc2\xc8\x22\x39\x04\xcc\x5e\x43\xc0\x0c\xc0\x73\x2e\x11\x48\x7e\x9f\xa8\x72\x19\x23\x04\x8c\x16\x42\x4f\x0b\xb0\xd4\x84\x82\x20\x02\x64\x0b\xc5\x93\x15\x3b\x17\xd5\x60\x18\x22\x91\x02\xb0\x75\x20\x60\xe0\x82\x8a\xb4\x5f\xf0\x67\x25\x5d\xd2\x2e\xd6\x43\xef\xeb\x81\x63\x63\x93\x72\x1d\xe4\xcb\xf5\xbd\x4e\x3f\xea\xf3\x13\x94\xdd\x3e\x2b\x8f\x66\x29\x20\x68\xb7\xbe\xe5\xdf\x34\x6e\xbf\x23\x9d\x24\x6d\x58\x54\xdb\x7b\x06\xef\x7a\x28\xb5\xae\xfa\x3c\xbd\x66\xd7\x8f\x37\x4e\xc3\xda\x29\xb4\xd7\xd7\x53\x3b\x1c\x0e\x23\x6e\xcf\xb7\x1b\xb7\x77\xf0\x05\xd2\x4a\xf8\x96\x35\x56\x71\x50\x7f\x1c\x7d\x64\x43\x9e\x6b\x69\xdc\xec\x93\x85\x4a\x4f\xe2\x98\x66\x38\x11\x2d\x36\xc1\x10\xc4\xc5\x2e\x2d\xf0\xd5\x5b\xca\xda\x54\x7a\xeb\x8b\xd4\x6d\xa3\x44\x9f\xfe\x25\x8b\x48\x4c\xda\x69\xd6\xa2\x59\xad\x3c\x19\x5b\x3d\xa0\xf3\xdd\xa8\x2a\x69\x42\xf4\xb4\x8a\x48\x43\xbc\x45\xfb\xdc\x36\x3f\x90\x06\xc1\xfa\xf9\x2c\x8d\xaa\xb9\x7f\x78\x68\xbf\x6f\x99\x50\xd4\x6d\x67\xdb\x64\xb8\x20\xe7\xbd\x62\xc0\x1e\x0d\xba\x0d\xe5\xec\x67\x7d\x6e\x3b\xc9\x76\x3d\xde\x3c\x14\xf9\x94\xdb\xb3\x0b\xb5\x87\x90\x15\x99\xbd\xee\xf6\xb8\xcc\xe5\x4a\xf4\xef\x43\x9b\x6a\xdb\xe9\x70\xc1\xd1\xf9\x7b\xd4\xaf\x07\x63\x02\xf7\x8c\x16\xd7\xc2\x3e\x13\x7a\x30\x85\x24\x6f\xdf\x70\x8c\xb2\xdd\xc1\x7b\x7e\xa5\x3f\x89\xc0\xd4\xf8\x6f\x36\xfe\x09\x00\x00\xff\xff\xc4\xdd\x52\xc6\x53\x04\x00\x00") func test_certsMtClientTenant123456789CrtBytes() ([]byte, error) { return bindataRead( @@ -340,11 +382,11 @@ func test_certsMtClientTenant123456789Crt() (*asset, error) { } info := bindataFileInfo{name: "test_certs/mt/client-tenant.123456789.crt", size: 1107, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x39, 0xb9, 0x8a, 0x42, 0x93, 0x18, 0xd9, 0x63, 0xcd, 0x28, 0x28, 0x77, 0xeb, 0x6b, 0x3c, 0xff, 0x69, 0x35, 0x41, 0x40, 0xb, 0x2f, 0x7a, 0xb1, 0xbc, 0xcb, 0x80, 0xf4, 0xbd, 0x16, 0xee, 0x37}} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xb6, 0xc3, 0x63, 0x77, 0x11, 0xd0, 0x4d, 0xca, 0xbd, 0xf8, 0x80, 0x1f, 0x26, 0xf5, 0x6a, 0x85, 0x46, 0x6d, 0x6a, 0x7d, 0x34, 0xda, 0x54, 0xfd, 0x67, 0xec, 0xe5, 0x25, 0x26, 0xd9, 0x4b, 0xfa}} return a, nil } -var _test_certsMtClientTenant123456789Key = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\xa7\x12\xac\x5a\x02\x85\x61\xcf\x53\x1c\x4f\x4d\x91\xa1\x11\x57\x6c\x72\x6e\x72\x72\x84\x86\x26\x67\x1a\x78\xfa\xa9\x39\x63\xef\xb2\xcb\xfc\xee\xfb\xcf\xff\xc6\x89\xb2\x6a\xfd\x71\x3d\xf0\xc7\x76\xd5\x10\xf8\xe2\x1f\x5d\x4c\xfe\x3e\x90\xa9\xaa\xe2\x0c\x54\x0e\x00\x9d\x07\x8e\x08\xa8\x99\x0e\xe2\xc8\x3e\xe3\x61\x4c\xa9\x67\x55\x15\x38\xe2\xca\x4e\x74\x8e\x3a\x13\xb7\x4f\x03\xf4\x7c\xd7\x84\x07\xf3\xd6\xf5\x52\xde\xe7\x7b\x86\x3c\x65\xbf\x17\x58\x90\x2c\x7d\xb1\x42\xbb\x20\x1d\x34\xb4\x42\xcd\x96\x85\xaf\x87\x9d\x8b\x33\x96\x6e\xf3\xb6\x4f\xb7\x1b\x4b\xbf\x01\x8a\x21\x36\x63\x16\xc1\x7d\x98\xe4\xbf\xbe\x9f\x45\x92\x86\x26\xd8\x4b\x00\x07\x7b\x54\x13\xf0\x46\xe6\x9e\x27\x8b\x0f\x28\x46\x7d\xf9\x42\x32\xcf\x90\xc6\x23\xa9\xbf\x12\xbc\x2c\x6b\x6d\x64\xc5\xaf\x2b\xe3\x2d\x72\x4f\x84\x38\xe1\x2b\x6f\x3f\xbe\xac\x41\x22\x17\x1e\x44\xc0\x58\xb2\x27\x0d\x51\xd2\x4e\xb8\x5a\x2a\x5f\xd7\xab\xf2\xe8\xc5\xa5\xca\xa5\x47\xfa\x47\x54\x5e\xfb\x20\x8b\x3b\xaf\x48\xe5\x2e\xe3\x4f\x74\x0b\x59\x1f\x63\x8d\x66\x2c\xd9\x00\xc5\x9a\x62\xdf\x45\x5b\x7a\xb9\x46\x56\xf8\x25\x08\xc8\x3b\xf3\xa5\x4b\x27\x97\x21\x39\x19\x6a\xc6\x53\xf6\xac\x5b\xab\x4b\xd5\x31\xae\xd2\xfd\xc9\xbd\x9b\xc9\x0b\x2e\x0d\xc6\x50\x37\x4d\x74\x87\xce\xec\x18\xc7\x93\xa5\xa4\x43\x9c\xad\x1c\x7f\x26\xa4\x70\xa7\x6d\x4d\xb1\xfc\x71\xd4\xb6\x3f\xac\x35\x30\x35\x47\x15\x80\x03\x38\x30\xa9\x1c\x70\xf8\x63\x60\x17\x37\xbb\x1e\xcb\xbb\xe1\x0e\xea\xef\x16\x1f\xe3\xc9\x20\x0f\x38\xd7\xc3\x4b\x9e\xb1\x8c\x77\x5a\x66\x39\x0f\xb6\x72\x83\x34\xd5\xf9\x0d\x59\xca\x5a\xdc\xb6\xa4\xb4\xbf\x9e\xc9\x09\xea\x57\xb1\xde\x3e\x5c\xd2\xf8\x6f\x62\x27\x68\x15\x3a\xe1\x20\xaa\xf8\x9e\xe6\xe7\xca\x99\xf1\x44\x30\x42\xd7\xd6\x4a\xdb\x8a\x5b\xdf\x0b\xd8\x7c\x3d\x7a\xd0\x45\xfe\xd6\x3b\x37\x26\xce\x18\x23\x52\x08\x39\x52\x17\xd8\x38\x8b\x9d\x04\x02\x42\x45\x35\x8e\x26\xf1\x09\xeb\x93\x0b\xf7\x98\x8a\xbb\x36\x62\xbe\x27\xca\x33\x21\x8e\x04\xf0\x2d\x37\xdc\xea\x8b\xd7\x90\x0a\xfa\x57\x37\x7f\xe4\x4f\x05\x9c\x86\x3e\x49\x8e\x78\x9b\x6a\x44\x0a\x34\xc0\x55\x6a\x13\x89\x14\x12\x27\xf9\x94\x32\x3b\x79\x68\xdd\x2f\x6a\x92\xb7\x6a\x8a\x54\xec\xa2\x0f\x91\x67\x3a\x1e\xd6\xf5\x3a\xfd\x5a\xcc\xd0\xbc\x5d\x36\x7e\x65\xa9\x35\x5e\x4a\x33\x33\x3d\xb4\x97\xd4\x9c\xc8\x9e\xa2\x64\x5a\xc1\xcf\xad\x36\x5c\xf2\x13\x3d\x7c\xd2\x4f\x2a\xaf\x87\xae\xea\xfb\xd7\xf9\xcd\x0e\xe0\x64\x41\xaf\x2d\xe6\xcb\x75\x2a\xc4\xd8\x85\xcf\x83\x04\xd2\x5a\xa3\x32\xf4\x49\x17\x05\x4f\x4c\x0e\x4c\x32\x07\x6c\x07\xa7\x33\x3d\x6c\xcd\x88\xb1\x0e\x7d\xb7\xce\xa6\xe7\xba\x1f\x72\x9c\x5d\xc4\x3a\xca\xd3\x5a\xd8\x29\x51\xb7\xd2\x0d\x05\x66\xcd\x61\x39\x4a\x09\x01\x01\x9a\xf0\x7c\xb2\xb1\xa6\xac\x0a\xa2\xed\x71\x13\x24\x15\xf0\xd1\x40\xce\x9c\xf9\x9e\x15\xfa\xe6\x49\x93\x9d\x4f\xd3\x18\x44\xc6\xe0\x4d\x84\xee\xf8\x89\x7c\x9c\xf5\xf9\xa2\xbd\x43\xf7\xf5\x06\x7d\x12\xf6\x1b\x8c\xa8\x89\x69\x06\xf1\x09\x84\xf7\x2e\xa1\xad\x73\xd7\x9f\x94\x88\x36\x1c\x0e\x86\x11\x86\x5b\x7b\x6f\x4b\x9d\xba\xf0\xbc\xd3\xee\x16\x08\x7a\x4a\xbe\xb0\xff\x17\xcb\x08\xb4\x97\x4a\x46\x11\x95\x8c\x8a\x9f\x4d\x45\x66\xce\xe4\x7c\x6e\x17\x44\x6c\xdb\x80\xd4\x79\xc5\x88\xbd\x76\xe5\x68\x0e\xe7\xe3\xa2\xcb\xdc\xd5\x74\x58\xed\xf0\x72\xa5\x2d\xf3\x7a\xdc\x3a\x6f\x25\xe8\xe1\xa5\x23\x52\xc3\xc3\xcc\x40\xb7\x05\x05\x6e\x7f\xd0\x92\xd8\xcc\x41\x69\x5a\xa2\xb9\xe0\xc1\x2f\x75\x4e\x9b\x7c\x6c\x6d\x9c\xfe\x95\x0a\x91\xae\xc0\xaa\x97\xd3\x53\xe3\x5a\xe4\x9d\x1e\x18\x44\x8f\x1b\x55\x7f\x8c\x75\x8b\x28\x8e\x30\x13\x96\xc6\xec\xcd\xa3\x72\xff\x7b\xb4\xfd\x76\x00\x0c\x3d\xf9\xde\x88\x8b\xeb\x6f\xb2\x56\xcc\x44\x5f\x2f\x54\x96\x28\x7c\xe3\xcc\x36\x75\x98\x10\x3e\x14\x85\x48\x8f\x71\x50\xf9\xae\x33\x68\x91\x4d\x88\x70\x92\xae\xe6\x83\x2f\x9a\xe5\x4e\x4e\x4f\x71\x4d\x44\x7b\xc1\x3e\xf6\xdf\xd7\x34\xbb\xf2\xc7\x27\xaa\x5b\x5d\xf7\x5d\x7e\x57\x85\x24\x40\x6d\x2f\x80\xf7\xea\xd1\x9f\x99\xca\xc1\xb2\xcf\xd8\x8f\x5e\xcb\x1a\xb1\xbd\x8a\x73\x6f\xea\xee\x3e\x87\x6a\xb8\xf9\xb8\x63\x1e\x93\xfb\xe0\x8e\xd3\x5a\x24\x37\x65\x93\xaf\xfd\xa3\x4b\xe5\xf2\x40\x03\x0b\x84\xb4\x0e\x97\x22\x56\xa9\x4b\x9e\x1c\xda\x73\x0a\xcd\x1d\x29\x30\xc9\x40\xf8\x59\x1f\x32\x28\x5f\xac\x82\xbd\xc3\x3a\xe8\xce\xbd\x9a\x9b\x89\xc3\xa4\x5e\x92\xd2\xd9\xba\x98\x4e\x0f\x21\xa3\xf5\x26\xcd\xfb\x62\xa7\x83\xe0\x08\xdd\xdb\x77\x76\x47\x1a\x8e\xb8\xe9\x22\x74\x26\xb1\xf7\x06\x92\x3a\xb1\xd3\x92\x04\xf2\x1a\x23\x74\xb5\xc4\x7c\x21\x74\x6b\x1f\x75\xae\x1e\xcb\x5c\x26\x21\x97\xfc\xce\xbf\xea\x17\xbf\xc6\x15\xfc\x5e\xf6\x0c\x10\xdd\x44\x3f\x5c\xda\x9d\x0a\x92\xa0\xea\x42\x33\xf5\xd4\xee\x41\x1d\xe4\x74\x1a\x87\x54\x25\xd8\xdd\xf5\x53\xc9\x21\x35\x5c\x5b\x4b\xfa\x1b\x32\x9a\xe3\xa1\x3c\x91\xaf\x13\x6e\x7a\xca\x93\x74\xc9\x8c\x24\xda\x69\x24\x02\x24\x6a\xe6\x58\xbe\x39\x5e\xf4\x7d\x4b\x6a\x86\xdc\x48\x5e\x7c\x20\x28\x9c\xdc\x73\xf6\xf6\xcc\x6d\x38\xa0\xe3\x09\x2d\x3d\xbe\xb9\x65\x76\xf5\xd9\xba\xe2\xa3\x11\xfe\x88\xd5\xce\xfd\xf2\x3a\x19\x52\xf1\xba\xe6\x22\x2b\x9f\xa6\xd6\x7e\x2b\x09\xbd\xad\xa8\xa5\xfd\x69\xac\xf4\xcb\x8d\x8b\x03\x5b\xad\x51\xd3\x09\xa1\x94\xed\x56\x1a\xe8\x15\x56\x0c\x0f\x46\x77\xda\x0e\xee\xe5\x9c\x46\xea\x56\x79\xa3\x5c\x4e\x15\xd7\x44\xe5\x70\x3b\xea\x68\x89\x65\xa8\xdd\x7c\x3d\xa9\x96\x7f\xff\xfc\x03\xfd\x65\x45\xb4\x84\x7f\xe7\xe6\xbf\x01\x00\x00\xff\xff\x28\x62\x70\x98\x8f\x06\x00\x00") +var _test_certsMtClientTenant123456789Key = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\xb7\x12\xa3\xd0\x01\x85\xe1\x9e\xa7\xd8\x9e\xf1\x90\x05\x14\x5b\x5c\x10\xe1\x92\x73\xea\xc8\x08\x24\x91\x45\x78\x7a\x8f\xb7\xf6\x69\x4f\xf3\x77\xdf\x7f\xfe\x37\x41\x52\xa0\xf5\xc7\xf3\xc1\x1f\xc7\x83\x11\x08\xa4\x3f\xba\x94\xfe\x7b\x10\x13\x42\x69\x02\x50\x00\x40\x17\x81\x2b\x81\x43\x56\x74\xc0\x7a\x15\x71\xa4\x4a\xc2\x39\x7b\x13\xaf\x62\xd4\xdc\x86\x5b\x08\xe3\xef\xb3\xe0\x93\x93\x04\xd3\x4c\xad\xeb\x91\x8d\xe1\xda\x3b\xc8\xd6\xfe\xf2\x3a\x8d\x47\xb3\x8e\x0a\x3a\x8e\xed\x7c\xdd\xd1\xbc\xde\x41\x24\xd1\xe8\x32\xd4\x64\x30\x0e\x67\x67\xbc\x19\x8d\x36\x0b\xde\x16\xf9\xa7\x5f\xd0\x0f\x53\xf9\x74\x30\x21\x6d\xfb\xcd\x23\x31\x51\x3b\x4c\x78\xbf\xbf\x47\x97\x96\xa3\x64\x5b\xac\xc1\xbe\xcf\x52\x37\x0b\xed\x11\xe1\x7a\x1e\x26\xbb\x90\x54\x15\x34\xfc\x1a\x92\xb4\x6e\xe2\x79\x7d\x83\x7c\x49\xc3\x4c\xad\x7a\xee\x19\x20\xad\x63\x2a\x77\x4b\x7d\x33\x36\x0c\xb9\xcf\x6e\x65\xb8\x55\xcb\x67\x0a\x3a\xf4\x57\x07\xc7\x7a\xb6\x09\x29\xd7\x4e\xe9\x89\x0b\xbf\x6b\x4a\x66\x33\x86\x4d\x5c\x2b\xf1\xca\x55\x6f\xa8\x7b\x52\x40\x72\xf8\x55\x33\x75\x24\x14\x49\xe0\x08\x9c\x09\x55\x29\x12\x27\xf4\x97\xbb\x9b\x26\x06\xc3\x97\xaa\x44\x12\xef\xb6\x23\x90\x48\xce\x20\x05\x53\x33\x8c\x17\xfc\x50\xa6\x67\xbd\xb2\x9a\x46\xe7\x10\x99\x0f\x3c\xf6\x08\xd4\xaf\x2e\x30\xd7\xcd\xc8\xd1\xf2\xb5\xd3\xb9\x24\x93\xa8\x82\xe3\x0f\x65\x31\x25\xe1\x89\x1f\xf0\x09\x5c\x20\x80\x11\x0a\xc0\x15\x2b\x25\x60\xee\xa6\xc7\x88\xd9\xe1\x65\x84\x0f\x3b\x1a\xf3\x9c\x36\x43\xd7\x77\xb8\xf9\x56\xc0\x5b\x75\x1d\xe2\x71\x2e\x14\xef\xfd\x30\x29\xcb\x14\x0f\xa1\xed\x95\xb1\x65\x6b\x91\xbc\xf8\x8d\x2a\x32\x54\x59\x47\xd5\xe6\xd6\x62\x1f\x49\x84\x8f\x51\xe7\x68\x3c\x98\xf5\x09\xbd\xf1\x5f\xb6\x12\xd3\xbc\xc6\x99\x8b\xe4\x63\xad\xab\x45\x2a\x5b\x0f\x92\x97\xc3\xd6\x27\x37\xd6\xd6\x0a\xec\xd3\xcf\x1d\x7f\x1f\xc5\xdb\x41\xd5\xfb\xd6\x77\x84\xc4\xe1\xc9\xd1\x62\x7d\x8e\x80\x56\xc6\x6c\x76\x0b\x54\xaa\xb8\x86\x75\x0b\x53\x93\x53\x6d\x13\x2a\xde\x1e\xaa\x9a\x92\xac\x1e\xfb\xaa\xbc\x6c\xb9\xef\x4a\xa7\xa4\x4d\x0c\x17\xf4\x1b\x7c\x2e\x64\x89\x6d\x9e\x38\xdd\xcc\x2c\xb6\xe3\xf0\x99\xb8\xf6\xd4\xa6\x32\x12\x72\xca\x3b\x36\x8f\x61\xc1\x92\xc0\x70\xc3\xc2\xcf\x8c\xb2\xb4\x27\x15\x67\xba\x73\x6a\x50\x4c\xfa\xed\xdb\x7c\xe2\x2e\x86\x2c\x67\x1a\x75\xb0\x0b\xed\x8b\xfc\xfa\xae\xfe\x98\x9e\x5c\xbc\x57\x07\x95\xe2\x9f\x70\xce\x4a\xb7\x8a\x6c\x92\x7b\xb5\x3b\xf5\xb4\x13\x2d\xa9\x1e\x6d\x98\x93\xd6\x1c\x97\x11\xf4\xe8\x17\x1e\x92\x48\xc3\x7d\x14\x02\x7b\x9c\x60\x54\x04\x60\x8f\xf7\x79\xe1\xf8\x81\x0a\xbc\x83\x13\x28\x46\x88\x79\xc0\xfa\xc1\x3d\xee\x60\x5d\xe8\x87\x27\x9a\x39\xf4\x6b\xc0\x7c\xc0\x66\x34\x36\x64\xcb\xf7\x8e\x00\xfa\xf9\x55\xcc\xe8\xee\x8a\xe1\xb3\xd8\xab\xf6\xb0\x8d\x85\x51\xdb\x5f\xb5\x9e\x89\xd6\xd9\xfe\xae\x1b\x98\x35\x9f\xcb\xa4\xc8\x96\x5f\xe8\xdd\xce\xe1\xad\x42\xd8\x36\xc9\xd0\x17\xad\xc2\x00\xe9\xcf\xac\xf6\xe8\x83\x99\xa8\xbe\x7d\xc4\xca\x6b\x19\x2a\xa1\x48\x08\x55\x7e\xfc\x14\xb9\xa8\x5e\x8c\x41\x61\x3a\xc1\x2f\x24\x11\x68\x1e\x2f\x7f\xe3\xe4\x67\x4c\x8a\xaa\xfd\x2b\xb6\x20\x85\xe0\x91\xbd\x53\x4e\xda\x67\x3e\xfb\xa8\xc2\x97\xbe\x0c\xb4\x2e\x37\x64\x3b\x38\x2a\x26\x76\x85\x79\x8f\x22\x19\x13\xd1\x91\x83\xec\x15\x1f\x68\xbe\x99\xe4\xd7\x73\x47\xfd\xf8\x81\x07\x41\x50\x17\x62\x7c\x3c\x1e\x42\xf6\xa3\xfd\xe0\x96\x4d\x0b\xbb\xb1\x62\x4c\xa1\x2b\x3d\x1e\xc3\x01\x8d\x5a\xef\xb8\xb2\x5e\xca\xe7\xda\xbe\x0a\x6e\x35\x79\x3a\x6d\x2c\x75\x3e\x74\xa3\x5c\xf6\xac\x67\xaf\x37\x92\x8d\x43\xd8\x1c\x68\xe4\x86\xaa\x64\xa4\xe6\x0a\xd2\xad\x89\x5f\xc4\xf9\x04\x94\x2c\xfb\x4b\x0e\x5a\xa7\xa1\xfd\x9c\xfd\x97\xac\x1d\xca\x69\xaa\xb8\xf1\x62\xd5\xb1\x27\xcf\x73\x3d\x1b\x44\x4a\x2f\xec\xc9\x6b\x71\xdd\x33\x86\xed\xee\xd5\xc8\x2d\xf9\x20\x82\x83\x0c\xc2\x9d\xbc\x9c\x86\x02\xfb\x92\x77\x42\x96\x9d\xee\xfd\xb6\x49\x5e\x21\xd8\xdc\x5d\xa7\x17\xab\x87\xf7\xd9\x85\x17\x02\x83\xaf\x2d\x9c\x4a\x94\x5a\xb7\xf2\x2c\x8e\xe9\x99\x2b\xd9\x7c\x2f\xf5\xac\x57\x85\xcb\xa6\xa5\xf2\x78\xd8\xce\xae\xa9\xe3\x8c\xb5\xce\x6f\xed\xf0\xdb\x62\x9b\xc1\x04\xdc\xc6\x8d\x1e\x41\x90\x48\x80\x36\xa9\x09\x81\xbb\x34\xc4\x96\x5c\x80\x27\xce\xf9\x1b\x3c\xd6\x09\x8c\x0a\xb0\xd5\x7d\xe4\xea\x83\x90\xf4\x4f\x0a\x22\x6f\xac\x1d\xcd\x77\x42\x9b\x6c\xf6\x53\x9f\xca\x35\x87\x35\x58\x90\x4b\xac\x29\xdf\x10\x47\x73\x29\x8e\x75\xb1\xdf\xd7\x0f\x14\x3b\xe7\x8a\xd5\xf6\x83\xbd\xe4\x1b\x96\x66\xec\x61\x56\x3e\xab\xda\xc7\x40\xb3\xeb\xe5\x54\xa9\xb1\x6b\x75\xc7\x29\x71\x79\xe0\xa1\xc8\xe8\x3e\x4b\xc7\xe4\x9c\x2a\x39\x65\x3a\xef\x79\x1a\x0e\xab\x6e\x26\x9d\xe9\xf6\xc3\x76\x6a\xb1\xc0\x84\x86\xbb\xed\xf5\xdc\xa5\x91\xa8\x3e\xde\x15\x93\xe9\x36\x13\x31\xa9\x9e\xc0\xed\x6e\x62\xa4\x31\x53\x19\x07\xab\xd8\xa6\xc2\x76\x36\x98\xdb\x3a\xf7\xca\xc8\xba\xae\x69\x85\x16\x75\x52\x35\x43\xae\x2b\xac\x8f\xad\x6f\x40\xa8\x7e\x4e\x98\xc6\x49\x86\xbe\xbf\xfa\x29\xe3\xcd\x39\x7e\x6e\x44\xcf\xd3\xa7\x1e\x14\xea\x47\x32\x5f\xcd\x46\x49\x03\x06\xa2\x06\x03\x4d\xc1\x71\x8f\xfc\xc4\x07\x7e\x5e\xef\xbb\xd3\x22\x3b\xbc\xaf\x15\x40\xc2\x69\xec\x6e\x32\x66\x21\x17\x98\xb9\x8c\xfd\x10\xa9\xdf\xc2\x9a\x13\x54\x9f\x73\xa1\x83\x8f\x4b\x80\x0e\xb8\x7e\xec\x90\xf5\x25\x27\xbd\x13\xa0\x8a\x1d\xd1\xfa\x01\xb8\xe0\x85\xb3\x4e\x47\x6b\x53\x33\x9f\x58\xfb\xf7\x2f\xf2\x8f\x15\xc9\x7a\xfe\x7f\x6e\xfe\x1b\x00\x00\xff\xff\xdc\xeb\x52\x05\x8f\x06\x00\x00") func test_certsMtClientTenant123456789KeyBytes() ([]byte, error) { return bindataRead( @@ -360,11 +402,11 @@ func test_certsMtClientTenant123456789Key() (*asset, error) { } info := bindataFileInfo{name: "test_certs/mt/client-tenant.123456789.key", size: 1679, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x50, 0xdb, 0x9a, 0x5d, 0x41, 0xb5, 0xee, 0xff, 0xca, 0x7d, 0x31, 0xc7, 0x5c, 0x4, 0x60, 0xe, 0x2e, 0x37, 0x25, 0xc7, 0x3c, 0x87, 0x6b, 0xe5, 0x2d, 0x39, 0x3b, 0xe8, 0x1, 0x3b, 0xf6, 0x38}} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x23, 0x2d, 0xf8, 0x7a, 0x4c, 0xd5, 0x3, 0x12, 0xaa, 0xe8, 0xde, 0xe4, 0xe7, 0x9b, 0xd7, 0x35, 0x67, 0x5c, 0xee, 0x66, 0xd, 0x77, 0xc4, 0x47, 0x93, 0xc2, 0x14, 0xa0, 0x52, 0xd9, 0x94, 0x4b}} return a, nil } -var _test_certsMtServerTenantCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x94\x49\xcf\xb2\x48\x1b\x85\xf7\xfc\x8a\x6f\x6f\xbe\xc8\x28\xb0\xac\x82\x02\x8b\xa1\xb4\x40\x54\xdc\x31\x28\x08\x2a\xa3\x14\xf0\xeb\x3b\xcf\xd3\xc9\xbb\xe8\xee\xb3\xba\x73\xee\xe4\xac\xae\x5c\xff\xff\x09\x44\x36\x26\xff\x33\x50\x70\xc2\x16\x36\xc0\x09\xfd\xb6\x9c\x8f\xb1\xe9\x57\x86\x01\xca\xae\x00\x0c\x43\x50\xe0\x00\xf8\x4b\xee\x38\xb9\x76\xbe\xc4\x6f\xc3\xab\xbb\x7c\x18\xa5\xad\x00\x98\x49\x63\xc7\x6d\x6e\xb8\x9c\x32\x02\x28\xf2\x20\x05\x8c\x73\x57\x14\xfa\x10\xd8\x40\x88\x90\x51\xfa\x0e\x15\xf5\x2a\x91\x9c\x29\xbe\x90\xc6\x0f\x22\x86\x58\x6c\x9e\x29\x35\x11\x9b\xcd\x54\x24\x7d\xf6\xd6\xcb\x58\x2c\x0a\xca\x23\xb6\x2f\x33\xc2\xf9\x15\x60\xa4\x02\x8a\x7f\x8a\x19\xa9\xd0\x72\x29\x33\xe2\x57\xd1\xcf\xcd\xff\xe9\x2a\x10\xf9\x01\x66\x08\xfc\x8e\xb9\x88\xbd\xfe\x8c\x71\xb1\x58\xb0\xa2\x40\x4f\x1f\xf0\xb6\x11\x76\x76\x88\x53\xc9\xa4\x08\x02\x1a\x01\x20\x63\x68\x32\xf0\xf3\x77\x41\x83\x21\xa0\x66\xe3\xdc\x2f\x41\xbe\x48\xe1\xca\xb2\x46\x92\xb5\x8a\xdb\xc9\xe8\x45\x8b\xfe\xa1\x16\x9b\x99\xf6\xeb\x3b\x37\x87\x0d\xae\xd4\x4b\x1d\x94\x07\x3d\x8f\x2f\x9e\x66\xf7\x91\x79\xcd\x17\x5e\x34\x97\xbe\x3e\x7c\xac\x49\x78\xf6\x3a\x7f\x1f\x23\x5d\x50\x1f\x37\x2e\x20\xe8\x1b\x53\xb4\x61\xce\x43\x6f\x7b\xa1\x29\xa5\x7c\x1a\xc8\x66\x8a\x57\xad\x4c\x82\x4f\xe4\xe9\xb5\x2f\x26\x3b\xcb\xfb\x88\x77\xc5\xeb\xbc\xb9\x69\xe1\xd1\x5f\xe9\xa1\x7e\x3e\x81\x06\x1d\x6e\xa3\x6c\xaf\x4a\xf6\xe5\x5b\x35\xc1\x39\xae\xe6\x87\xb8\xf0\x07\x72\x96\xf1\xe2\x7c\xa9\x34\xec\x2b\xab\x94\x48\x7e\x6b\xfc\xa0\x09\xe5\xb4\x0a\x5e\x43\xe8\xde\xd6\x77\xd7\x8b\xfb\xc7\xfc\x74\x33\x4e\x32\xa5\xef\x59\x67\x8e\xb2\xc2\xcd\x55\xab\xa5\x25\xf9\x74\xf1\x04\x90\xc1\xf7\x0f\xf1\xb0\xaf\xfa\x83\xd1\x09\x49\xb1\x8f\x28\xbd\x05\x0a\x7f\x10\x5a\x6a\x82\x90\xbf\xf2\xce\xde\xe9\xef\xc9\x9d\xa3\xea\xe6\x23\x6d\xda\x8d\xdd\xa9\xa7\xba\x7f\x07\xf9\x4b\x16\x96\x92\x6a\xe2\xba\x7a\xe7\x5c\x2b\x34\x7d\x7b\x7c\x66\xe7\x1a\xc4\xdb\xb0\x75\xeb\x80\x56\xe9\x29\xbf\xb8\x71\x1a\x6e\xb5\xcb\xa3\x61\xdc\x11\xb1\x2d\x28\x7c\x08\x80\x5d\x25\x26\x7c\xfb\x40\xfe\x61\x22\x37\x19\x82\x5b\x46\x11\x60\xd8\x6a\x4c\x90\xc3\x82\x9c\xf7\x61\x84\xac\x0a\x44\xb0\x28\x7a\x58\x20\x0b\xd2\xcc\xe4\x00\x8d\xb1\xcb\x62\x08\x69\xb4\x07\x0c\x33\x42\x63\xf3\x1c\xf0\x01\x34\x64\xe6\x61\xec\xa4\xb6\x5e\xc5\x97\xb9\x49\x25\xc2\x17\x45\xd6\x79\xef\x79\x8a\x45\x6b\x28\x59\xb0\x05\x00\x40\xae\x9c\xc1\x7f\x05\xfe\x93\x0b\x83\xfd\xcd\x05\xa0\x30\x3d\xf8\x54\x1d\x1e\xf4\x4e\xcc\xeb\x97\x6b\x85\x34\x91\x0d\xe9\xa0\x34\x46\x3f\x8f\x9d\x53\xdd\xac\x71\x12\xdd\x81\x3d\x83\xd3\xee\x35\xee\x1f\x21\x7a\xf5\x57\x7d\x98\x88\xf0\xbe\xe8\x7d\x29\x74\xd1\x02\x5f\xd1\xd5\x39\x66\xad\xf2\xd1\x00\xb7\x93\x83\x0c\x8f\xbd\x21\x7b\xae\xbc\x4f\x17\x75\x50\xed\x6b\x99\xa4\x6a\x77\x30\x73\x01\xb5\xf7\x79\xfe\x9e\x45\xd1\x23\x32\x6a\x05\x09\xb4\xbb\x9a\xaa\xdf\x24\x1a\x35\x5f\x43\xce\x26\x3a\x01\x2e\x9a\x14\xe7\xa9\xda\xef\xc2\xb3\xa5\x1b\x7a\x5d\xf1\x1a\x8a\x30\x86\xf6\x10\xcc\x9f\x75\xbb\xb4\xb3\x21\xd4\xb8\x2d\x4f\xa2\x34\x64\xab\xbb\xbb\x07\xda\xe7\x19\x1d\x2e\xf9\xba\xe6\xc5\x58\x27\x13\x17\x1a\x5a\x61\x19\xf2\x87\xc0\x38\xbe\x66\xbb\x61\x57\x87\x69\x64\x4e\x86\x33\x03\xf9\x70\x74\x59\x9a\xe7\xba\x1b\x8d\xd5\x71\xd5\x46\xe5\x06\x45\xdc\x79\x1f\xd2\x76\x56\xb7\xdb\x90\x7e\x0a\x15\xae\x5b\xc2\xae\x7d\x3c\x88\x60\x8c\xad\xa5\x44\x0a\x53\xbd\x69\xca\xda\x2e\x9e\xc2\xea\x95\xba\xe3\x82\xcf\xda\xdd\xea\xf5\x71\xe2\xbd\x4d\xdc\x1e\xd7\xef\x44\xec\x7e\x3e\x9a\xf6\x3d\xe8\x9f\xdb\x84\x0b\xd7\xf6\xa9\x56\xbe\xc4\xfd\xfa\x05\x11\xf3\xdf\xce\xf9\x2b\x00\x00\xff\xff\x17\x8c\x75\x4c\x90\x04\x00\x00") +var _test_certsMtServerTenantCrt = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\x94\x3d\xd3\xb2\xbc\x02\x84\x7b\x7e\xc5\xe9\x9d\x33\x20\x2a\x4a\x71\x8a\x84\x04\x08\x98\x68\x44\xf9\xea\x00\x31\x80\x28\x82\x1f\x11\x7e\xfd\x99\xfb\x2e\x9e\xa7\x78\xdf\xad\x76\xae\x9d\xd9\x6a\x67\xff\xfb\x23\x88\x1d\xc2\xfe\x63\xe1\xc3\x91\xd8\xc4\x02\x47\xfc\x4b\x15\x4a\x08\xf2\x91\x65\x81\xca\x12\x40\x12\x08\x04\x39\x00\x56\x8d\x39\xb1\xd6\xaa\xba\xd4\xbd\xe2\x71\x28\x9d\x55\x79\xc8\xb1\x44\x3c\xf1\xfc\x2e\x25\xd5\xa7\x60\x80\xe3\x2d\xe4\x40\x2a\xfe\x84\x03\x0a\x81\x03\xe6\x27\x6c\x55\xd4\xe3\xba\xd9\x64\x0b\xef\x93\x44\xac\xa3\x87\x93\xc4\x32\x41\x21\xe7\x08\xcb\x2f\xca\x75\x36\x14\x37\xb3\x4a\x74\x21\xb8\x86\xa5\x5b\x15\x4c\xa1\x0d\x90\x6c\x22\x23\x3d\x26\x72\x87\xe8\x14\x55\x05\xa3\xcd\xe9\x87\x2d\xfe\xb0\x06\x9c\xe8\x81\x48\x0c\x7e\xcb\x7c\x2c\xdb\x3f\x65\x4a\xa2\x0b\x29\x04\xae\x29\xd0\x1c\x2b\xe8\x9d\x80\xe4\x0b\xc4\x31\x04\xfc\x04\xc0\x92\x40\x24\xc1\x4f\xee\x83\x8e\x40\xc0\x2d\xd3\x4e\xc2\x9d\xea\x65\x8b\xdc\x70\x52\x21\xc4\x57\xe1\x2d\xd2\xbe\x93\x21\x56\xef\xa0\x9d\x91\x2c\xdf\xf3\xce\x89\xca\xef\x80\x32\xcf\xcb\xcf\x69\x5e\x3f\x9c\xa5\xc1\xc6\xd1\x41\xa4\xb6\x24\x6e\x67\x39\x50\xe7\xdd\x6b\x75\x78\x74\x9b\x66\xda\x5b\x8a\x0c\x53\x37\x2d\x19\xb9\x08\x4a\x37\x83\xb3\xce\xe7\xcf\x75\xb7\x34\xd6\xdc\x7c\xaa\x4f\xd5\x9b\x5f\x1e\xe9\xd3\x3e\x9f\xac\x86\x21\xf5\x81\x81\x1a\x00\x59\xaf\xfa\x30\xd1\xea\xac\x70\xcb\xcc\x52\x92\x43\x97\xc3\x79\x18\xeb\xd0\x80\xfa\xf5\x95\xea\xd7\x93\xe9\xa5\x81\x3d\x1b\x45\xbe\x6a\x2c\x19\xba\xc7\x6e\xc6\x2f\xd3\x74\x6f\xc7\xe5\x42\x17\xee\x7e\xa7\x79\xb7\xad\xb6\x3e\x7b\x9a\xad\x42\x5f\x59\xde\xe6\xfe\xf2\xc2\x34\x0a\xb4\xf8\xc8\xfc\xb7\xfb\x8c\x7b\xc8\x87\x76\x7f\xb9\x5c\xde\xeb\x09\xd0\x34\xb1\xf1\xa9\x65\x31\x86\xb9\x11\x49\x1e\xcd\x16\x2a\x98\xee\xbb\x82\x65\x49\x19\xc7\x48\xa9\x6f\xe9\x5e\x54\x22\x9a\x0e\xb5\xd7\xf9\xe7\xd5\xdd\xb6\xcd\x7e\xbb\xf2\x42\x5f\xeb\xf9\x48\xa3\x4d\x73\xb7\xc9\x6b\x53\xd7\xf7\xab\x33\xad\xb5\x59\x56\xa7\x65\x7b\xb4\xed\x56\xaf\x02\x75\xbe\x29\x94\xb2\x1d\x5f\x40\x50\x08\x80\xd3\xc4\x0d\x2c\x28\x58\xfe\x6c\xe2\x8c\x24\x86\xaa\xe4\x18\x48\x62\x77\x08\x1c\xa1\x60\xa1\x1b\x9c\x30\x42\xc0\x87\x42\x0c\x50\x60\x1b\xf2\x02\x29\xe0\x08\xe6\xbf\xe1\x01\xe3\x6d\x03\x9e\x42\xb4\xcf\x5c\x67\x55\xee\x54\x9f\x62\x11\x58\x70\xec\xde\xb9\x63\x36\x49\x34\xba\xd0\xdd\x00\x00\x1c\x17\x83\xbf\x52\xfe\xda\x7f\x9d\x2a\x12\x02\x43\x00\xc3\x74\x28\xc0\xe9\x9d\xa7\x8b\x5e\xd7\xc1\x60\xc4\x7d\xb1\xce\xe8\x5a\x3f\x0f\xca\x6b\xd0\x4d\xbb\x2f\x2c\x87\xba\x43\x10\x70\xeb\xad\xa7\x71\x84\x73\x3d\xc9\xd0\x2e\xe1\x54\x87\xc5\x67\xfe\xd9\x6b\x2f\x75\x08\xbb\xfe\xdb\xb4\x57\x6f\x68\xae\x06\xae\x19\xb3\x8d\xb5\x6d\x1a\xca\xc2\xaf\xd4\xc3\x14\xd2\xc8\xad\x2e\xc1\x53\x26\x34\x51\xb1\x45\xb7\xe3\xee\xc8\x81\xba\xd8\x3b\x59\x02\xc6\xc7\x94\x89\x2c\x34\xa3\x22\xe8\x72\x62\x8f\x71\x1a\x4c\xcc\x2a\xdc\xfe\xf5\x18\x37\xca\x7c\x70\xaa\xf7\xe3\xf3\x40\xbb\xdb\x47\xad\x8e\x4f\x7f\x76\x5a\xf8\xfe\x9d\x10\x68\x93\x73\xbc\xc8\x47\xe1\x58\x71\xb5\x1d\xf6\xea\x9b\x7e\xda\xf6\x39\x6c\x22\xe7\x15\x39\x31\xc9\xd7\x2b\x63\xbb\xbc\x2b\xb3\x24\xd5\x4c\x23\x1d\x4c\xff\x7c\x46\xa2\x7e\x17\x32\xaa\xeb\xab\x76\xab\x2d\x35\xe3\x30\xd8\xdf\xca\xcd\x3c\x39\x1c\x77\x8f\xec\x43\x76\x91\xc3\x6e\x6e\xc4\x58\xb1\xe6\x91\xa6\xc9\x7a\x9b\x6f\x14\x1c\x7c\x37\xb1\x31\x6a\xd8\x14\xb1\x83\x56\xfd\x79\xe6\x75\xda\x4d\x4d\xcf\x51\x3e\x7f\x35\x3d\x04\x65\xb6\xdf\x5f\xf7\xfe\xa0\xa9\xb7\x72\x48\x7a\xb5\xdb\x86\x62\x48\x4b\x33\xe0\xff\x53\x7e\x2f\x05\x33\xf4\xcf\x9b\xf9\x7f\x00\x00\x00\xff\xff\x56\x2a\xfc\xa5\x83\x04\x00\x00") func test_certsMtServerTenantCrtBytes() ([]byte, error) { return bindataRead( @@ -379,12 +421,12 @@ func test_certsMtServerTenantCrt() (*asset, error) { return nil, err } - info := bindataFileInfo{name: "test_certs/mt/server-tenant.crt", size: 1168, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x53, 0x9f, 0x19, 0xbc, 0x47, 0xaf, 0xdd, 0xc6, 0xa9, 0x52, 0xad, 0xb8, 0xe6, 0xad, 0x9a, 0x24, 0xa9, 0x52, 0xab, 0xb1, 0x8, 0x3c, 0x75, 0x67, 0x5a, 0x6e, 0xbd, 0xc4, 0x38, 0x4e, 0x1a, 0x27}} + info := bindataFileInfo{name: "test_certs/mt/server-tenant.crt", size: 1155, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0x67, 0xda, 0xc, 0xd1, 0xad, 0x15, 0xc9, 0x4b, 0x15, 0x92, 0xf0, 0x8, 0x51, 0x79, 0x8d, 0x5a, 0x92, 0x8, 0x3c, 0x88, 0x2c, 0x34, 0x20, 0xdb, 0x5, 0xd9, 0x59, 0x4f, 0x41, 0x57, 0x30, 0xb3}} return a, nil } -var _test_certsMtServerTenantKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\xa7\x12\xa4\x60\x02\x04\x60\xcf\x53\xac\xa7\xae\x18\xe2\x80\x38\xf1\x93\x73\xce\x8e\x0c\x43\x1e\xe2\xf0\xf4\x57\xbb\xfa\xda\xb6\xe9\x6a\xf3\xfd\xe7\x6f\x58\x41\x52\xcc\x3f\xae\x07\xfe\xd8\xae\x12\x02\x5f\xf8\xa3\x09\xc9\xbf\x06\x32\x14\x45\x98\x1b\x85\x05\x40\xe3\x80\x23\x00\x8a\x8b\x87\x3e\x2e\xf6\xd7\x46\xcb\x9a\x09\xdb\x0a\x7c\xb0\x6a\xa0\x68\x38\x4c\xd8\x5b\xa0\xd1\xe4\xe4\xbc\xed\x4e\x81\xd1\x45\x48\xfc\x33\x8e\x20\xb1\x43\xd8\x15\x05\x28\x5e\xec\x66\x43\xaf\x24\xbf\xdc\x39\x93\xac\x48\x29\x7f\x43\xbb\xac\x70\x2c\xf0\x5d\x7d\x14\x58\x7b\xe3\x62\x24\xcb\x98\x4c\x29\xf1\xfc\xcd\xd7\x5f\xcc\x40\x94\xa8\x4f\x21\x94\x43\x52\xde\x1c\x8f\xd6\x23\x99\xe9\xf0\xa8\x8e\xce\x34\xc7\x7f\x8c\x17\xbf\x28\x73\x63\x03\xaf\x3e\x6a\x14\x8e\xf5\x5d\xab\xb0\x4e\xf6\x14\x3a\x66\xb6\x9d\xff\x84\x15\x67\x74\x79\x6f\xbe\x21\x96\xb8\x93\xf2\x89\xa3\x8c\x17\x32\xe1\x90\x88\x57\x9a\x0b\xdd\x58\x90\xeb\xca\xb4\x38\x9d\x74\x93\x79\x31\xef\xa1\x2e\xb8\xaa\xb8\xea\x01\x51\x4d\x7a\x5c\xa8\x51\xbf\x58\xb0\x6b\x38\xf3\x69\x21\x82\x7a\x9a\x75\x8f\x66\x16\x15\x04\x29\xa8\x4a\x7e\xcf\x02\x70\x09\xbb\xc8\x70\xee\x2f\xc3\xc7\xa9\xb7\x90\x85\x41\xd6\xba\x5d\x8f\x17\xa9\x91\x7d\x9c\x56\x66\x31\x07\xb6\xb9\xd1\x3f\x34\xae\x21\xc5\xb6\xeb\x87\x98\xc4\x14\x48\xf6\x6b\xf5\x16\x21\x50\xb0\x17\x1e\x76\xa3\xf4\x3a\x11\x71\xa2\x0c\xfe\x36\xec\x4b\xe1\x81\x03\x58\x30\x2b\x2c\xe0\x72\xde\xf5\x9e\x9a\x52\x90\xf2\x4b\x87\x05\x94\x1e\xbb\xda\xaa\xe7\xc3\xb6\x67\xc0\x86\x8f\x80\x5e\xf6\x84\xcc\xed\x58\xc4\x51\x9f\x2f\xe3\xbc\x58\x12\xd9\x64\x44\xe2\x91\xa9\x62\xdf\x04\x5a\x49\x39\xa2\x7e\x61\xd8\xec\x60\x06\x3f\xcc\x1a\x5a\xf4\xeb\xbb\xca\x84\xc8\xce\xf4\x0f\xc3\x88\x59\x17\x55\x8d\x14\x61\x0d\x6e\xa9\x8b\xd5\x2b\xa7\x64\xb3\x56\x58\x71\x72\xba\xc5\xf3\x6d\x9e\x95\x89\xd9\x43\x09\x2f\xdd\x41\x3a\x4c\xf8\x1b\x0e\x28\xb4\x16\xb1\xd7\x41\x29\xd2\x92\xdc\x11\x97\x9c\x44\xea\xb2\xe1\x38\xe1\xe1\xde\x31\xd1\x6e\x39\xd7\xc8\x34\xc4\x33\xb0\xc9\x1c\x96\xae\x6e\x5b\x9d\x21\x9d\x5e\xaa\x5e\x21\xcb\x1d\x44\xfe\x00\x45\xaf\xeb\x76\x0e\x9e\xd9\xa2\x73\x62\x28\x90\x67\x7e\x5d\x5b\x4b\xf0\x06\x4f\x2f\x16\x41\x65\x0b\xf2\x3b\xbe\xd3\x69\x3a\x7e\xf0\xac\x26\xe4\x23\xa2\xa4\x41\x31\xc2\x76\xd4\x91\x1d\x30\x3d\x0a\x21\x69\x6d\x85\xf7\x04\x6e\xe3\x47\x30\x29\x69\x5c\x23\xbd\x7c\x83\x98\x64\xc5\x58\x3d\xf0\xcf\xb6\x72\xc6\xea\x20\x53\xd3\xe8\x2d\x6b\x6c\xd8\x4f\x99\xc7\x13\xfb\x85\xba\xdb\x2f\x28\x4b\x4b\x0b\x14\xf3\x3c\xbf\x14\x02\xd7\x24\x02\x60\x5c\x03\x49\xa4\x17\x79\xda\x04\x48\xa5\xac\x2d\x4f\xe5\xeb\xce\x33\x82\x6c\xd6\xc9\xd4\x58\x3f\x30\x65\xfe\x7b\xd7\xf5\x87\x31\x44\xb3\xca\x44\x14\xe6\x55\xe8\x76\x63\x8c\xcb\x9e\x20\x32\x55\x91\xd2\x80\xf2\x9e\x33\x69\xfb\x21\x9a\x27\xf2\xd9\x10\x9a\xc9\x55\x0e\x6e\x17\x8b\x39\xb2\xb5\x8a\x57\x13\x37\x37\x09\xbe\x59\xac\xdf\x4e\xd9\x23\x2b\x88\x2a\xc8\xb4\xdd\xb9\x12\x00\x35\x9d\xbe\x9b\xd3\x04\x38\x67\xd5\x48\xe6\xbb\x2a\x4a\x2b\x08\x3a\x56\xac\x96\x57\x1a\x9c\x65\x92\x2c\xd4\x17\xd5\xae\x5c\x21\xb5\x99\x73\xe9\x7f\x8b\xe9\x89\x6e\xa0\xfa\x10\x6d\x77\x4b\x9c\x8a\x0d\x08\x49\x07\x2c\xd2\x68\x67\x57\xca\x6a\x8b\x06\x34\xf6\xcb\x49\x37\xc5\x77\xc3\x61\x46\xb2\x31\x13\xf7\x4d\xef\xbf\x72\x9a\x2c\xee\x1e\x8c\x8f\xf5\xab\x62\x0f\x86\xd6\xa0\xe0\x65\x22\xea\x42\xbf\xef\xb4\xac\xd4\xfb\x96\x00\xcd\x15\xad\xb3\xd5\x3f\x01\xe3\x89\xad\x3f\x25\x14\x07\xdf\xd8\x9e\xa0\x0d\x25\x5d\x98\x1c\x39\x7c\xc8\xcf\xfa\x2f\x6b\x03\xbf\x6d\x20\xf3\x2c\xbc\xf7\x93\x70\x47\x18\xb6\xf8\xe6\x20\x9c\xc8\x34\xf9\x18\xdc\xea\xfe\x84\xe6\x22\x65\x48\x9a\x72\x87\xf5\xf7\x64\x20\x7c\x67\xf4\x49\x3b\x5d\xb1\x13\x99\xce\x9c\x51\x98\x79\xeb\x0d\x15\x01\x77\x1e\x41\x68\x7b\xf9\xeb\xb4\xa2\x99\x6f\xfb\xe3\xcd\x53\x1f\xf4\xb5\x46\xfe\xfb\x63\x6e\x83\xac\x7b\xa8\x4c\xae\x00\x59\x52\x0a\xf5\x41\x54\x8c\x0e\xbc\x79\x70\x6b\x3d\xb3\x18\x59\x0a\xb4\x29\x4a\xe7\x34\xd7\x07\xaf\xaa\xcf\xfc\x39\xc4\x91\xd8\xc7\x94\x7a\x64\xeb\x52\xb0\x6f\x25\xeb\x98\xc7\xa0\xa7\xe6\x76\xbc\x63\xf2\x0e\xd1\x10\x12\xfe\xea\x44\xd3\x5d\x04\x21\xba\x25\xc4\xc3\x21\xf4\x64\x09\x2a\xf8\x70\x70\xf2\x92\x9e\x5b\x1f\x96\xdb\x8a\x0e\x47\x63\x1b\x6e\xe9\x26\x70\xdf\xe1\xeb\x43\x7c\x28\xb5\x1c\xef\x9d\xe9\xb9\x23\x78\x96\x3a\xf5\x7a\x26\xf0\xdf\x13\x57\xfd\x06\x0c\x7a\x73\x22\x25\x7f\x8d\xb3\x96\x0f\x94\xa4\xcf\xc7\x09\xf1\x45\x57\xbf\xaf\x53\x58\x8c\x54\xd5\x9f\x77\xca\xbb\x14\xfd\x89\xa7\xb5\x91\x75\xa3\xf4\x52\x2f\x63\x07\x70\x77\xe2\x88\x95\x8b\xe5\xd7\x50\xb1\x88\x1a\x6e\xde\x3f\x6b\x51\xbd\x3c\x8f\x70\x64\xe3\x45\x71\x06\x48\x10\x3c\x08\xa2\xf6\x30\x21\x0e\x65\x26\xa5\xd4\xc7\x39\x59\x02\xa7\x02\xd5\xab\xa5\xb1\x3b\x90\x9b\xea\x76\x51\xed\x7b\x28\x8f\xe8\x16\xcc\x12\x90\xba\x98\xda\x83\xdc\xb6\x4e\x7f\xc4\x00\x53\x54\x1b\x7e\x35\xc7\xc4\x3c\xc5\x25\x39\x5f\xfe\x8b\xc0\x9d\x37\xb8\x14\xf9\xd1\xe1\x2f\x51\x1e\xde\xa9\x27\xd8\x3c\x96\x01\x64\xf2\x2e\x8a\x7d\x99\x7d\x60\x66\x89\x57\x7e\xac\xcc\x51\xb2\xef\x9c\xc7\x23\xe7\xae\xd7\x46\xce\x60\xa9\xcb\xa9\xe0\x2e\x2b\xf4\xe5\xb4\xc7\xb3\xbb\x52\xd4\x73\x7f\xdb\x58\x0a\xfc\xcf\xf9\x2a\x21\xaf\x66\x58\xc7\x99\xf6\x57\x32\x8a\xf3\x93\xda\xfa\xac\x54\x9c\xe1\xeb\x49\x3a\xda\x04\xc9\x9d\xac\xba\x5a\xbf\x10\xc1\xc7\x87\x58\x76\xbe\x8d\x8c\x0b\xfc\x17\xfa\x47\x8a\x60\xf2\xff\x9f\x9a\xff\x05\x00\x00\xff\xff\x81\x7d\x7f\x28\x8b\x06\x00\x00") +var _test_certsMtServerTenantKey = []byte("\x1f\x8b\x08\x00\x00\x00\x00\x00\x00\xff\x6c\xd5\xb5\xd6\xb3\x50\x02\x85\xe1\x9e\xab\xf8\x7b\xd6\x2c\x2c\x41\xca\x83\x1f\x20\xc1\x2d\x1d\x12\x9c\xe0\x7a\xf5\xb3\xe6\xab\x67\xb7\xbb\x79\xbb\xe7\x3f\xff\x1b\x2f\x29\xf0\xfd\xcf\x71\xc1\x3f\xcb\x81\x01\xf0\xa4\x7f\xba\x14\xff\x3d\xc8\x0b\x42\x69\x38\x20\x0f\x80\x2e\x00\x5b\x02\xbb\x13\xca\xde\x7e\x85\x2b\x89\x56\x7d\x0c\xe1\xcb\xd7\x6c\xee\x95\xa1\x83\x99\xb6\x63\x51\x2b\xfd\x8d\xeb\x7c\xf7\x5b\x92\x83\xac\xdd\x90\x0a\x91\xf0\x31\x39\x9b\xd9\x64\x4b\x55\x5e\xb0\x5c\x78\xad\xe8\x0f\x8b\x4b\x8c\xaf\x9f\x24\x16\x64\xef\x63\x91\x43\x87\x8c\x1a\x57\x7d\x88\xa2\xa5\x9f\x1b\xc9\xa5\x26\x6d\x9a\x1b\x6e\xa5\x16\x63\x5d\x48\x1e\xd1\x61\xca\x47\x01\x18\x6e\x1b\xa3\x1d\x60\xe1\xe5\x0b\x6e\x49\x17\xbe\x61\xff\xe3\xa9\xbe\xec\xa5\x44\x39\xf2\x20\xe0\xca\x6f\x99\x8f\x46\x98\x8f\xb2\xe5\x86\x7e\x55\x2c\x83\x82\xc6\x07\xb2\xc8\x0e\x4e\x5b\xad\xca\xb2\xcf\x67\xb6\xbd\xb9\x81\xbf\xef\x55\xf8\xd4\x9c\x49\xb9\x39\x5f\x1c\xee\xa6\xad\xee\xa6\xde\xb9\x08\xde\x32\x7e\xbb\x73\xc5\xc8\x74\xe9\xeb\x4f\x8f\xa2\x28\x66\x63\x91\x43\x54\x42\xde\x91\x35\x2f\x38\x41\x88\x76\x8b\x24\xef\x2b\x76\xbc\x9e\xf7\x4f\x0c\x7b\xb5\x23\x8e\xc7\xd8\x7b\x0f\x18\xcb\x0b\x1e\xd7\x89\xf0\xfb\x7e\x4e\xa7\x48\x6a\xd4\x0d\xdc\x55\x6f\x5f\x0d\x22\xef\xf0\x79\xba\x46\x01\x87\xf1\xc9\x2f\x28\x67\xf5\x43\x1f\x8d\xfe\xe9\x7c\xf2\xc1\xdf\xb9\x42\x55\xc7\x6c\xb6\xa1\x08\x6c\xc0\x83\x01\xf2\x40\x09\x8c\xec\x2a\xc3\xf4\x34\x25\xc3\xe9\x7c\x64\x7e\x37\xdf\xe3\xf8\x6d\x1c\x29\x9d\x19\x1c\xd7\x6c\xc8\x82\xf6\x1c\x65\x56\xa4\xe5\xaa\x3d\x68\x45\xbe\x4b\xbe\x36\xd0\xf7\xcb\xc3\x68\xc2\x34\xbe\x74\xcb\x67\x64\xb6\x0f\xd4\x67\x26\x03\x23\x41\x24\xb8\xb5\x52\xd4\x67\xd1\xcc\x29\xfa\x08\x71\xa3\xb8\xed\xa5\x1a\x07\xe1\x49\xbd\x0e\x22\x93\xf4\x99\x01\xe8\x31\x25\xf6\x63\x6f\x8c\x16\x0b\x6a\xbf\xcf\x93\x76\x91\x8c\xe5\x81\x15\x4b\x5f\x21\xe7\x71\x5a\xc7\x2c\xd3\x10\x97\x08\x25\x98\xdf\x16\xaf\x73\xdb\xfb\x10\xe4\xad\x74\xd9\x38\x25\xef\xa4\xd0\x53\x4e\x68\x37\xa9\x3b\xf1\x23\x73\x4c\xee\xa3\x35\x7a\x64\xec\xb8\x89\x8f\x14\xda\x22\xbe\x2c\x11\x0c\x61\x98\x43\x28\xc4\xc1\x4e\x13\x4f\xa2\x65\x8a\x12\x0b\xa8\xb1\xcc\xb3\x82\x7b\xce\xb9\x8f\x59\xe1\x38\x83\xce\x9b\xe6\xd4\xb9\x80\xb6\xd1\xd7\x06\x1f\xa7\x3f\xd2\x89\xf7\xdb\x90\x6f\x0b\x7a\x31\x60\xfa\x31\xc5\x73\xc8\xd2\x90\x95\x4e\x07\xe7\xb3\x40\xe4\x4e\x00\xe9\x6c\x34\x29\x03\x6f\xad\x0a\xa3\x24\xde\xbc\x04\xd3\x5f\x79\xbd\x66\x75\x96\x37\x1e\x98\x91\x3f\xae\x05\xc1\xfc\xa1\x2b\x42\x5c\x28\x63\x09\xdc\xa7\x4d\xa5\x80\xcb\x19\xb0\x30\x51\x35\x3a\x1e\x6d\x94\xe2\x27\xbc\x6b\xfe\xfd\x59\x1e\x62\x14\x11\x31\xd3\xb9\xe6\x60\x34\x92\x96\x36\x3a\x3f\x76\xd9\x82\x68\x2c\xf5\x1b\xd4\xec\xa1\x68\x7b\x6b\x32\xac\x68\xef\x39\xca\xf1\xd5\x33\xbd\x2c\x4e\x67\x9d\xe2\xde\x05\x9e\xc2\xe2\xec\x92\x8c\x97\xd1\x40\x9b\x0d\x8a\x64\x6a\x74\x36\xfe\xa1\xc1\x65\x95\x34\x62\xbb\x92\x4a\xb7\x0a\x49\xd4\x35\xf6\x0a\x5d\x12\xb7\x22\x35\x3f\x51\x7d\xba\x85\x31\xfd\x10\xd1\x63\x2f\xf2\x9c\x0c\xa9\xaf\x9d\x1f\x84\x53\xa0\x67\xa0\x5b\xc4\x90\xfd\x15\xd3\x99\x04\x90\xf3\x43\x52\xab\xb1\xba\xca\x49\x96\x7b\x9d\x3d\xc0\x5c\x93\x78\x7d\xd5\x59\xce\xed\x81\x83\xbd\x4d\x96\x1b\x2f\x8d\x65\xd4\x47\xef\x0b\xe9\xca\xb3\x92\x71\xde\x0e\x39\x41\xec\xa9\xa7\xb9\x17\x23\x97\x44\x3f\x9d\x53\x64\xbe\x63\xa8\x6f\x6e\x47\x64\x20\xd0\xb1\xe0\x23\xf8\x12\xde\xbf\x3f\xb8\xd5\x9a\x4e\xfc\x51\x37\xd8\xc9\x70\x4a\x28\xa2\x66\x01\x4f\x4d\xa8\x43\x0c\x6e\x81\x4f\xbe\x94\x21\xf3\x74\x0a\x84\x66\xbe\xda\x13\x07\xbe\x86\xa7\x1b\xd0\xcd\x37\x14\x9d\xfa\x6b\x6d\x75\x48\x51\x29\xb5\x76\xa2\xb0\xfc\x25\x0f\x81\xbe\xf5\xa3\xf0\xd5\xf7\x28\x50\xda\x49\x49\x0b\x5b\x46\xbe\x10\x8b\x8a\x68\x09\xd6\x59\x7d\xca\xc4\xd5\xcf\x5d\x07\x31\xf1\x1d\x75\x91\xda\xa4\xd7\x2b\xf1\xaf\xb2\x43\xb7\xbb\x23\x96\x38\x25\x05\x4c\xa1\x67\x4f\xb6\x07\xd7\xec\x8a\x4c\xec\x5e\x3e\x85\xfc\x06\xac\xf8\x95\xd3\x06\x3e\x21\x0c\x19\x4f\x8e\x1a\x54\xd4\x7f\x2e\x6b\xb4\x20\x02\xfa\xaf\x32\xc5\xfd\x8e\xc6\xe3\x76\x24\x3b\x31\x76\x81\x32\x99\x17\xf7\xf8\x60\x80\xc3\x6e\x1e\x7c\x1c\x01\x69\x9f\x5c\x87\xfa\x4f\x1f\xb7\xbd\x89\xad\x8a\x3d\xdb\x06\x8b\xd7\x25\xa1\x8c\x81\xea\x64\x0d\x15\xd9\x56\x60\xe8\xb3\xe9\x5e\xd3\xa1\x72\x03\x66\x93\x14\xbe\x96\xb7\x71\x0b\x8c\xd7\x0a\x17\x83\x7c\xa7\x10\x3e\xc9\x77\x5c\xbd\x2b\xd9\xf6\xf0\x07\x4b\x9e\xa0\x50\x53\x6d\xfe\xba\x38\xc3\x07\xdf\xa6\x3c\xa9\x49\x13\x92\xf4\xa5\xff\xb4\x1a\xda\x96\xfb\x9b\xd5\x9c\x59\xbc\x69\x58\xa6\xb5\x7b\x21\x30\xa5\x13\x37\xed\x1b\x85\xc9\x7d\x6d\x41\xe1\xbb\xdc\x44\x75\x0c\x15\xdf\x66\x96\xc1\x6d\x68\xb7\x35\x51\x9e\xf4\x57\x7b\xa0\x69\x96\xa8\xda\xb4\x29\x96\x54\x52\xe2\x99\xa6\x78\x73\xed\x6b\x84\xc1\xef\xba\x3a\x74\xbe\x14\x62\x1f\x35\xaa\x0e\x62\x9b\xc2\x99\x65\xf9\x0b\xbe\x09\x0a\x59\xfb\x24\x69\xd0\x36\xba\xb5\x96\x6b\x4a\xc5\xbf\xab\x7a\x1e\x56\xcb\x47\xae\xca\x0e\xa8\xf4\xf5\x00\xb2\x9a\xa3\x4d\x04\x38\xad\x29\x17\x6d\xe8\x75\xfd\xa5\x4b\x07\x2b\xa4\x8d\x66\x82\x54\x3b\xc7\x60\xf6\x39\x74\x2e\x1b\xc6\x3e\xd7\x95\x53\x45\xd0\x43\x87\xc5\x7f\x58\xed\x4b\xd5\x3c\x79\x9a\x87\xf4\x53\xc3\x0c\x28\x49\x5e\x75\x8d\x93\xfb\xaa\x1e\x1f\x83\x7a\xc3\xa6\x4a\x71\x87\x07\x0a\xd3\xd1\xfa\x2a\x28\x2d\xef\x53\xaf\x47\xc0\xe8\x35\x66\x9f\xdb\x13\xf9\x23\x45\x7a\x8b\xff\x9f\x9a\xff\x06\x00\x00\xff\xff\xc4\xc3\xec\x7e\x8b\x06\x00\x00") func test_certsMtServerTenantKeyBytes() ([]byte, error) { return bindataRead( @@ -400,7 +442,7 @@ func test_certsMtServerTenantKey() (*asset, error) { } info := bindataFileInfo{name: "test_certs/mt/server-tenant.key", size: 1675, mode: os.FileMode(0600), modTime: time.Unix(1400000000, 0)} - a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xb2, 0xfd, 0x1a, 0x91, 0x38, 0xd1, 0x6c, 0xa5, 0xcc, 0xab, 0x47, 0x20, 0x36, 0x35, 0xf2, 0x86, 0xca, 0x57, 0x37, 0x53, 0x77, 0xd2, 0xaa, 0x7b, 0xe6, 0xc, 0x4f, 0x0, 0x67, 0x74, 0xb3, 0x8f}} + a := &asset{bytes: bytes, info: info, digest: [32]uint8{0xed, 0x6c, 0xc1, 0x10, 0xc7, 0xf7, 0xde, 0x4c, 0x52, 0xfd, 0xab, 0x9, 0x5f, 0xd, 0xff, 0x23, 0x3d, 0x13, 0x36, 0xa3, 0xa, 0x37, 0xeb, 0x19, 0xfa, 0x4c, 0xe2, 0xdc, 0x6f, 0x1a, 0x64, 0x18}} return a, nil } @@ -507,6 +549,10 @@ var _bindata = map[string]func() (*asset, error){ "test_certs/client.testuser.key": test_certsClientTestuserKey, + "test_certs/client.testuser2.crt": test_certsClientTestuser2Crt, + + "test_certs/client.testuser2.key": test_certsClientTestuser2Key, + "test_certs/node.crt": test_certsNodeCrt, "test_certs/node.key": test_certsNodeKey, @@ -570,12 +616,14 @@ type bintree struct { var _bintree = &bintree{nil, map[string]*bintree{ "test_certs": {nil, map[string]*bintree{ - "ca.crt": {test_certsCaCrt, map[string]*bintree{}}, - "ca.key": {test_certsCaKey, map[string]*bintree{}}, - "client.root.crt": {test_certsClientRootCrt, map[string]*bintree{}}, - "client.root.key": {test_certsClientRootKey, map[string]*bintree{}}, - "client.testuser.crt": {test_certsClientTestuserCrt, map[string]*bintree{}}, - "client.testuser.key": {test_certsClientTestuserKey, map[string]*bintree{}}, + "ca.crt": {test_certsCaCrt, map[string]*bintree{}}, + "ca.key": {test_certsCaKey, map[string]*bintree{}}, + "client.root.crt": {test_certsClientRootCrt, map[string]*bintree{}}, + "client.root.key": {test_certsClientRootKey, map[string]*bintree{}}, + "client.testuser.crt": {test_certsClientTestuserCrt, map[string]*bintree{}}, + "client.testuser.key": {test_certsClientTestuserKey, map[string]*bintree{}}, + "client.testuser2.crt": {test_certsClientTestuser2Crt, map[string]*bintree{}}, + "client.testuser2.key": {test_certsClientTestuser2Key, map[string]*bintree{}}, "mt": {nil, map[string]*bintree{ "ca-client-tenant.crt": {test_certsMtCaClientTenantCrt, map[string]*bintree{}}, "ca-client-tenant.key": {test_certsMtCaClientTenantKey, map[string]*bintree{}}, diff --git a/pkg/security/securitytest/test_certs/README.md b/pkg/security/securitytest/test_certs/README.md index 383fe8b7942d..7e9c85296d0f 100644 --- a/pkg/security/securitytest/test_certs/README.md +++ b/pkg/security/securitytest/test_certs/README.md @@ -10,6 +10,8 @@ Contains the following files: * client.root.key: admin client private key * client.testuser.crt: testing user certificate * client.testuser.key: testing user private key +* client.testuser2.crt: testing user 2 certificate +* client.testuser2.key: testing user 2 private key * For a human-readable version of the certificate, run: diff --git a/pkg/security/securitytest/test_certs/client.testuser2.crt b/pkg/security/securitytest/test_certs/client.testuser2.crt new file mode 100644 index 000000000000..71a95c61bcc6 --- /dev/null +++ b/pkg/security/securitytest/test_certs/client.testuser2.crt @@ -0,0 +1,19 @@ +-----BEGIN CERTIFICATE----- +MIIDBDCCAeygAwIBAgIQMi9hYxsvpIqlbbaDCyF06zANBgkqhkiG9w0BAQsFADAr +MRIwEAYDVQQKEwlDb2Nrcm9hY2gxFTATBgNVBAMTDENvY2tyb2FjaCBDQTAeFw0y +MDA3MjIxNjA4MzJaFw0yNTA3MjcxNjA4MzJaMCgxEjAQBgNVBAoTCUNvY2tyb2Fj +aDESMBAGA1UEAxMJdGVzdHVzZXIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB +CgKCAQEAtTvg+MGmVOXCmQscV/xiBKzxl2CAMRXFR0OS9Kj0+QOciXp6OjI+Bu2F +Rnc2mXYnOnM5YEheMengJ2DCzv76hfGldNPnO7UjgQ7YWLeLZqGCjVjvVg8bzfko +YMDeq/sf+5tzreQmBS3XSVTrCW1WNaQ2NSLHIjHb1qZJAycYK4qUxd+zAubolZFJ +AP11UwcW+mWB15bcf2YU/rqYub/9C6lPcUzV1+LCXF7Uz4Ub/CJ26aowQRq2vKWK +P82bIaMLja6gVVn9Q2boXrApmlOma4Di472kkN/5H9u0KSoRX9m/CuU+kuAuP5Mo +d3jJ4nT21G4/Enb2SOYrHEfB7TYTBQIDAQABoycwJTAOBgNVHQ8BAf8EBAMCBaAw +EwYDVR0lBAwwCgYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADggEBADVpMCEGTJky +QhaVCf+hz4jn4bif67Odl5JEqdW/l+JRKne6dw1wij4IZPnbZQibNa1KScMzKb0S +eaMHCYZ9yeenOe7y0bbZgpUOT+SKmbq+SAPbaBl/BgeWo8gzhtVfjD48zcJ41Lm6 +htrKOD6KEpV3ijVLIY8Ws2ZSGuBDNvjOjAPYIjBnSYmwUKBNfXaZbBQ5N+gYmFOq +AyuIAz8D03WIdO9NFwLRnhppl08vx8a0ccn4Eb1ePoXUfXoH29ApWCR3X1gdD2gE +cnKyocQKKiAuphiOzXaZ4zYH8BrWVWjJ7QchfJIQpRWRKjMaV4qDVCzOWTYFMktr +fujGVnL//lg= +-----END CERTIFICATE----- diff --git a/pkg/security/securitytest/test_certs/client.testuser2.key b/pkg/security/securitytest/test_certs/client.testuser2.key new file mode 100644 index 000000000000..d0b34c6d1424 --- /dev/null +++ b/pkg/security/securitytest/test_certs/client.testuser2.key @@ -0,0 +1,27 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIEpAIBAAKCAQEAtTvg+MGmVOXCmQscV/xiBKzxl2CAMRXFR0OS9Kj0+QOciXp6 +OjI+Bu2FRnc2mXYnOnM5YEheMengJ2DCzv76hfGldNPnO7UjgQ7YWLeLZqGCjVjv +Vg8bzfkoYMDeq/sf+5tzreQmBS3XSVTrCW1WNaQ2NSLHIjHb1qZJAycYK4qUxd+z +AubolZFJAP11UwcW+mWB15bcf2YU/rqYub/9C6lPcUzV1+LCXF7Uz4Ub/CJ26aow +QRq2vKWKP82bIaMLja6gVVn9Q2boXrApmlOma4Di472kkN/5H9u0KSoRX9m/CuU+ +kuAuP5Mod3jJ4nT21G4/Enb2SOYrHEfB7TYTBQIDAQABAoIBAGtLItpCUwWp7HYM +lOAmI6Ve+bxDvkDRAbU59TNxH26Yy8C8SMZRXlVdouxfwWxC/eBlvM8aqOFl83V8 +nHhNjeVkdS7gEOJRT86lCkIjj5zX+2FRCIhrc2uSmWwGYw1wI7QiiO6mxjeEtxLL ++kXffA1PxWPZzgiZeevvEASUzYNgjaYyEzcpqm9/E/Q99OgiES8TqzCD3R2eA1nU +yOOsuNXqhXZhk8yJmwVpVeGcF/JnJiK/fim+eIWLiYVSHyXuhZUdDRD29RmGRbyn +IyAyrKNT0KKdgaMJvJPQu6clL1HbhAUOwtsAWqNmHFDPy5hqSvJQpLCb+b0Bn05g +B1g64OECgYEA3WH9dsPAknuIoD6eW6wCHI2ZD0BFd4ot+rC1PsDsKjDX83ESG9+H +Opv8UbLGleA1KA1uZciw0sZQkvRS/9tcK4TdedrTmjkZp3Lg6P5AZK6irQWrMT5e +De0u/qOPMvZ6FGvJbGDrMAv+j/QbQ7ymtHDwvhieWiCMqinnTw2WHk0CgYEA0ZK4 +C1i2K9A3p5HKSsZVkL+trctxUYX2BCz9aL+rq7lIq6QFRHNS5XHMirUCShODhgwr +2AcldbHNtgA62I6xejVPefvyWe6CEdnIzQdE99ADQlC06E2b9smEv3I9lpj3iTR1 +UzJCVp/WV1gZzhDPrqBoHNrHIRpfWPm33nDXU5kCgYEAvmxvTR0MI/PGja/PHyNR +naXeplOubSiabCxbemMPwSrKVkhIP1mCRFOwMcYJMxnsH0uOTlbWYjbbT8yBKDtT +iMt8hjhIEzxSaMpT05X/ZZshqppZqr3uwSPnbHjb0AZa8/3TADpNksJ+cOyUFyvK +aSNMsPcUHooo9KWepU0Wd3ECgYEAqCb41OHRCUZ/4Uvw7B5G+WVSjWf2/FpoEuGm +Ui24KIj57f4k289MbBzq6UBjHdyaYyvQ4fyZ6d1IGQgGL0wOyueLZWzp/46Hfpsn +qppylAOrGcJ35QygX1tBz/pxwCvsMYKNwLtKzwZgjKR70ANdH9hEsSI5NC5c4p87 +EJeprcECgYAVhgsZ068u2eO4Aulu4ZC5kxWYVbWgN72Vyg3jWWDuNam+IYcEZZbV +DBdO2oGA+N01w+BIGTP6hDGroUZLafvNAMMRd0Llb8Avh6kWyOEiXqcQJ1DXTgPh +pJUfoc9x7Wnecdp8HDJaOsg2bnYZY+cd88iOpAvMlLDgbjQQBa5zbw== +-----END RSA PRIVATE KEY----- diff --git a/pkg/security/securitytest/test_certs/regenerate.sh b/pkg/security/securitytest/test_certs/regenerate.sh index 86c2db5f7d51..ba61229273f5 100755 --- a/pkg/security/securitytest/test_certs/regenerate.sh +++ b/pkg/security/securitytest/test_certs/regenerate.sh @@ -7,6 +7,7 @@ rm -f "${dir_n}"/*.{crt,key} ./cockroach cert --certs-dir="${dir_n}" --ca-key="${dir_n}/ca.key" create-node 127.0.0.1 ::1 localhost *.local ./cockroach cert --certs-dir="${dir_n}" --ca-key="${dir_n}/ca.key" create-client root ./cockroach cert --certs-dir="${dir_n}" --ca-key="${dir_n}/ca.key" create-client testuser +./cockroach cert --certs-dir="${dir_n}" --ca-key="${dir_n}/ca.key" create-client testuser2 # Tenant certs dir_mt="${dir_n}/mt" diff --git a/pkg/server/server_test.go b/pkg/server/server_test.go index 20ecb8d98fb1..3f632ae4ba6f 100644 --- a/pkg/server/server_test.go +++ b/pkg/server/server_test.go @@ -563,7 +563,7 @@ func TestSystemConfigGossip(t *testing.T) { key := sqlbase.MakeDescMetadataKey(keys.SystemSQLCodec, keys.MaxReservedDescID) valAt := func(i int) *sqlbase.Descriptor { return sqlbase.NewInitialDatabaseDescriptor( - sqlbase.ID(i), "foo", + sqlbase.ID(i), "foo", sqlbase.AdminRole, ).DescriptorProto() } diff --git a/pkg/server/status_test.go b/pkg/server/status_test.go index 33a391fbc6d2..0b9441b75479 100644 --- a/pkg/server/status_test.go +++ b/pkg/server/status_test.go @@ -1270,8 +1270,8 @@ func TestCertificatesResponse(t *testing.T) { t.Fatal(err) } - // We expect 4 certificates: CA, node, and client certs for root, testuser. - if a, e := len(response.Certificates), 4; a != e { + // We expect 5 certificates: CA, node, and client certs for root, testuser, testuser2. + if a, e := len(response.Certificates), 5; a != e { t.Errorf("expected %d certificates, found %d", e, a) } diff --git a/pkg/sql/authorization.go b/pkg/sql/authorization.go index 9f8a5618df83..30c83959ecf8 100644 --- a/pkg/sql/authorization.go +++ b/pkg/sql/authorization.go @@ -14,6 +14,7 @@ import ( "context" "fmt" + "github.com/cockroachdb/cockroach/pkg/keys" "github.com/cockroachdb/cockroach/pkg/security" "github.com/cockroachdb/cockroach/pkg/sql/pgwire/pgcode" "github.com/cockroachdb/cockroach/pkg/sql/pgwire/pgerror" @@ -86,6 +87,12 @@ func (p *planner) CheckPrivilege( p.maybeAudit(descriptor, privilege) user := p.SessionData().User + + // If the user is the owner of the object being checked, they have all + // privileges. + if isOwner(descriptor, user) { + return nil + } privs := descriptor.GetPrivileges() // Check if 'user' itself has privileges. @@ -106,6 +113,9 @@ func (p *planner) CheckPrivilege( // Iterate over the roles that 'user' is a member of. We don't care about the admin option. for role := range memberOf { + if isOwner(descriptor, role) { + return nil + } if privs.CheckPrivilege(role, privilege) { return nil } @@ -116,6 +126,55 @@ func (p *planner) CheckPrivilege( user, privilege, descriptor.TypeName(), descriptor.GetName()) } +// TODO(richardjcai): Add checks for if the user owns the parent of the object. +// Ie, being the owner of a database gives access to all tables in the db. +// Issue #51931. +// isOwner returns if the role has ownership privilege of the descriptor. +func isOwner(desc sqlbase.DescriptorInterface, role string) bool { + // Descriptors created prior to 20.2 do not have owners set. + owner := desc.GetPrivileges().Owner + + if owner == "" { + // If the descriptor is ownerless and the descriptor is part of the system db, + // node is the owner. + if desc.GetID() == keys.SystemDatabaseID || desc.GetParentID() == keys.SystemDatabaseID { + owner = security.NodeUser + } else { + // This check is redundant in this case since admin already has privilege + // on all non-system objects. + owner = sqlbase.AdminRole + } + } + + return role == owner +} + +// HasOwnership returns if the role or any role the role is a member of +// has ownership privilege of the desc. +func (p *planner) HasOwnership( + ctx context.Context, descriptor sqlbase.DescriptorInterface, +) (bool, error) { + user := p.SessionData().User + + if isOwner(descriptor, user) { + return true, nil + } + + // Expand role memberships. + memberOf, err := p.MemberOfWithAdminOption(ctx, user) + if err != nil { + return false, err + } + + for role := range memberOf { + if isOwner(descriptor, role) { + return true, nil + } + } + + return false, nil +} + // CheckAnyPrivilege implements the AuthorizationAccessor interface. // Requires a valid transaction to be open. func (p *planner) CheckAnyPrivilege( diff --git a/pkg/sql/create_schema.go b/pkg/sql/create_schema.go index 26f1555278ba..c1c5b09171fa 100644 --- a/pkg/sql/create_schema.go +++ b/pkg/sql/create_schema.go @@ -109,13 +109,16 @@ func (p *planner) createUserDefinedSchema(params runParams, n *tree.CreateSchema return err } + // Inherit the parent privileges. + privs := db.GetPrivileges() + privs.SetOwner(params.SessionData().User) + // Create the SchemaDescriptor. desc := sqlbase.NewMutableCreatedSchemaDescriptor(sqlbase.SchemaDescriptor{ - ParentID: db.ID, - Name: n.Schema, - ID: id, - // Inherit the parent privileges. - Privileges: db.GetPrivileges(), + ParentID: db.ID, + Name: n.Schema, + ID: id, + Privileges: privs, }) // Finally create the schema on disk. diff --git a/pkg/sql/create_sequence.go b/pkg/sql/create_sequence.go index c5e4773d79d7..e0d90d391730 100644 --- a/pkg/sql/create_sequence.go +++ b/pkg/sql/create_sequence.go @@ -88,8 +88,7 @@ func doCreateSequence( return err } - // Inherit permissions from the database descriptor. - privs := dbDesc.GetPrivileges() + privs := createInheritedPrivilegesFromDBDesc(dbDesc, params.SessionData().User) if isTemporary { telemetry.Inc(sqltelemetry.CreateTempSequenceCounter) diff --git a/pkg/sql/create_table.go b/pkg/sql/create_table.go index 791b893f09f5..bc7e457acb9b 100644 --- a/pkg/sql/create_table.go +++ b/pkg/sql/create_table.go @@ -22,6 +22,7 @@ import ( "github.com/cockroachdb/cockroach/pkg/geo/geoindex" "github.com/cockroachdb/cockroach/pkg/keys" "github.com/cockroachdb/cockroach/pkg/kv" + "github.com/cockroachdb/cockroach/pkg/security" "github.com/cockroachdb/cockroach/pkg/server/telemetry" "github.com/cockroachdb/cockroach/pkg/settings/cluster" "github.com/cockroachdb/cockroach/pkg/sql/catalog/catalogkv" @@ -267,12 +268,7 @@ func (n *createTableNode) startExec(params runParams) error { return err } - // If a new system table is being created (which should only be doable by - // an internal user account), make sure it gets the correct privileges. - privs := n.dbDesc.GetPrivileges() - if n.dbDesc.GetID() == keys.SystemDatabaseID { - privs = sqlbase.NewDefaultPrivilegeDescriptor() - } + privs := createInheritedPrivilegesFromDBDesc(n.dbDesc, params.SessionData().User) var asCols sqlbase.ResultColumns var desc sqlbase.MutableTableDescriptor @@ -1849,6 +1845,7 @@ func makeTableDesc( temporary, ) }) + return ret, err } @@ -2102,3 +2099,18 @@ func incTelemetryForNewColumn(d *tree.ColumnTableDef) { telemetry.Inc(sqltelemetry.SchemaNewColumnTypeQualificationCounter("unique")) } } + +func createInheritedPrivilegesFromDBDesc( + dbDesc *sqlbase.ImmutableDatabaseDescriptor, user string, +) *sqlbase.PrivilegeDescriptor { + // If a new system table is being created (which should only be doable by + // an internal user account), make sure it gets the correct privileges. + if dbDesc.GetID() == keys.SystemDatabaseID { + return sqlbase.NewDefaultPrivilegeDescriptor(security.NodeUser) + } + + privs := dbDesc.GetPrivileges() + privs.SetOwner(user) + + return privs +} diff --git a/pkg/sql/create_view.go b/pkg/sql/create_view.go index 7978d61b4339..34ff918fbb56 100644 --- a/pkg/sql/create_view.go +++ b/pkg/sql/create_view.go @@ -114,8 +114,7 @@ func (n *createViewNode) startExec(params runParams) error { schemaName = tree.Name(params.p.TemporarySchemaName()) } - // Inherit permissions from the database descriptor. - privs := n.dbDesc.GetPrivileges() + privs := createInheritedPrivilegesFromDBDesc(n.dbDesc, params.SessionData().User) var newDesc *sqlbase.MutableTableDescriptor @@ -267,6 +266,7 @@ func makeViewTableDesc( if err := addResultColumns(ctx, semaCtx, evalCtx, &desc, resultColumns); err != nil { return sqlbase.MutableTableDescriptor{}, err } + return desc, nil } diff --git a/pkg/sql/descriptor.go b/pkg/sql/descriptor.go index 3f181e469795..9f5cd4b446f8 100644 --- a/pkg/sql/descriptor.go +++ b/pkg/sql/descriptor.go @@ -81,7 +81,7 @@ func (p *planner) createDatabase( // MutableDatabaseDescriptor and where/how this will interact with the // descs.Collection (now it happens well above this call, which is probably // fine). - desc := sqlbase.NewInitialDatabaseDescriptor(id, string(database.Name)) + desc := sqlbase.NewInitialDatabaseDescriptor(id, string(database.Name), p.SessionData().User) if err := p.createDescriptorWithID(ctx, dKey.Key(p.ExecCfg().Codec), id, desc, nil, jobDesc); err != nil { return nil, true, err } diff --git a/pkg/sql/drop_role.go b/pkg/sql/drop_role.go index bb8f3f350038..d89713f05245 100644 --- a/pkg/sql/drop_role.go +++ b/pkg/sql/drop_role.go @@ -86,11 +86,25 @@ func (n *DropRoleNode) startExec(params runParams) error { f := tree.NewFmtCtx(tree.FmtSimple) defer f.Close() - // Now check whether the user still has permission on any object in the database. + // Now check whether the user still has permission or ownership on any + // object in the database. + type objectAndType struct { + ObjectType string + ObjectName string + } + + // ownedObjects is a list of objects that are owned by the user being dropped. + var ownedObjects []objectAndType // First check all the databases. if err := forEachDatabaseDesc(params.ctx, params.p, nil /*nil prefix = all databases*/, true, /* requiresPrivileges */ func(db *sqlbase.ImmutableDatabaseDescriptor) error { + if _, ok := userNames[db.GetPrivileges().Owner]; ok { + ownedObjects = append(ownedObjects, objectAndType{ + ObjectType: "database", + ObjectName: db.GetName(), + }) + } for _, u := range db.GetPrivileges().Users { if _, ok := userNames[u.User]; ok { if f.Len() > 0 { @@ -115,12 +129,22 @@ func (n *DropRoleNode) startExec(params runParams) error { if err != nil { return err } + lCtx := newInternalLookupCtx(descs, nil /*prefix - we want all descriptors */) + // TODO(richardjcai): Also need to add privilege checking for types and + // user defined schemas when they are added. + // privileges are added. for _, tbID := range lCtx.tbIDs { table := lCtx.tbDescs[tbID] if !tableIsVisible(table.TableDesc(), true /*allowAdding*/) { continue } + if _, ok := userNames[table.GetPrivileges().Owner]; ok { + ownedObjects = append(ownedObjects, objectAndType{ + ObjectType: "table", + ObjectName: table.GetName(), + }) + } for _, u := range table.GetPrivileges().Users { if _, ok := userNames[u.User]; ok { if f.Len() > 0 { @@ -144,13 +168,33 @@ func (n *DropRoleNode) startExec(params runParams) error { } fnl.FormatName(name) } - return pgerror.Newf(pgcode.Grouping, + return pgerror.Newf(pgcode.DependentObjectsStillExist, "cannot drop role%s/user%s %s: grants still exist on %s", util.Pluralize(int64(len(names))), util.Pluralize(int64(len(names))), fnl.String(), f.String(), ) } + // Did the user own any objects? + if len(ownedObjects) > 0 { + fnl := tree.NewFmtCtx(tree.FmtSimple) + defer fnl.Close() + for i, name := range names { + if i > 0 { + fnl.WriteString(", ") + } + fnl.FormatName(name) + } + objectsMsg := tree.NewFmtCtx(tree.FmtSimple) + defer objectsMsg.Close() + for _, obj := range ownedObjects { + objectsMsg.WriteString(fmt.Sprintf("\nowner of %s %s", obj.ObjectType, obj.ObjectName)) + } + return pgerror.Newf(pgcode.DependentObjectsStillExist, + "role%s %s cannot be dropped because some objects depend on it%s", + util.Pluralize(int64(len(names))), fnl.String(), objectsMsg.String()) + } + // All safe - do the work. var numRoleMembershipsDeleted int for normalizedUsername := range userNames { diff --git a/pkg/sql/logictest/testdata/logic_test/owner b/pkg/sql/logictest/testdata/logic_test/owner new file mode 100644 index 000000000000..a93207e9ad55 --- /dev/null +++ b/pkg/sql/logictest/testdata/logic_test/owner @@ -0,0 +1,207 @@ +# LogicTest: !3node-tenant(50049) + +statement ok +GRANT CREATE ON DATABASE test TO testuser + +statement ok +CREATE ROLE new_role + +user testuser + +statement ok +CREATE TABLE t() + +# Even without any privileges, the owner of the table should be able perform +# any operation on the table. +statement ok +REVOKE ALL ON t FROM testuser + +statement ok +ALTER TABLE t RENAME to t2 + +statement ok +ALTER TABLE t2 RENAME to t + +statement ok +DROP TABLE t + +user testuser + +statement ok +CREATE TABLE t() + +statement ok +REVOKE ALL ON t FROM testuser + +# Owner should able to grant all privileges to other roles. + +statement ok +GRANT ALL ON t TO new_role + +# Test ownership of views. + +statement ok +CREATE TABLE for_view(x INT); +CREATE VIEW v as SELECT x FROM for_view; + +# Even without any privileges, the owner of the table should be able perform +# any operation on the table. +statement ok +REVOKE ALL ON v FROM testuser + +statement ok +ALTER VIEW v RENAME to v2 + +statement ok +ALTER TABLE v2 RENAME to v + +statement ok +GRANT ALL ON v TO new_role + +statement ok +DROP VIEW v + +statement ok +DROP TABLE for_view + +# Test ownership of sequences. + +statement ok +CREATE SEQUENCE s; + +# Even without any privileges, the owner of the table should be able perform +# any operation on the table. +statement ok +REVOKE ALL ON s FROM testuser + +statement ok +ALTER SEQUENCE s RENAME to s2 + +statement ok +ALTER SEQUENCE s2 RENAME to s + +statement ok +GRANT ALL ON s TO new_role + +statement ok +DROP SEQUENCE s + +# Test ownership of databases. + +user root + +statement ok +GRANT admin TO testuser + +user testuser + +statement ok +CREATE DATABASE d + +user root + +statement ok +REVOKE admin FROM testuser + +user testuser + +# The user doesn't have admin privilege or CREATE privilege on the db +# but should be able to create a table due to being the db owner. + +statement ok +CREATE TABLE d.t() + +statement ok +ALTER TABLE d.t RENAME TO d.t2 + +statement ok +ALTER TABLE d.t2 RENAME TO d.t + +statement ok +GRANT ALL ON DATABASE d TO new_role + +statement ok +DROP TABLE d.t + +statement ok +ALTER DATABASE d RENAME TO d2 + +statement ok +DROP DATABASE d2 + +# Test inheritance of ownership. + +user root + +statement ok +CREATE USER testuser2 + +statement ok +GRANT admin TO testuser + +user testuser + +statement ok +CREATE DATABASE d + +user root + +statement ok +REVOKE admin FROM testuser + +statement ok +GRANT testuser TO testuser2 + +user testuser2 + +# testuser2 has no privileges and is a member of testuser with no privileges +# except ownership of database d. +# Through this ownership, testuser2 is expected to have all privileges on d +# through ownership inheritance. + +statement ok +CREATE TABLE d.t() + +statement ok +ALTER TABLE d.t RENAME TO d.t2 + +statement ok +ALTER TABLE d.t2 RENAME TO d.t + +statement ok +GRANT ALL ON DATABASE d TO new_role + +statement ok +DROP TABLE d.t + +statement ok +ALTER DATABASE d RENAME TO d2 + +statement ok +DROP DATABASE d2 + +# Ensure role cannot be dropped if it is the owner of an object. + +user root + +statement ok +GRANT admin TO testuser + +user testuser + +statement ok +CREATE DATABASE d + +statement ok +CREATE TABLE d.t() + +user root + +# Revoke privileges from testuser so the only dependency left on objects is +# ownership. + +statement ok +REVOKE ALL ON DATABASE test FROM testuser + +statement error pq: role testuser cannot be dropped because some objects depend on it.*\n.*owner of database d.*\n.*owner of table t +DROP ROLE testuser diff --git a/pkg/sql/logictest/testdata/logic_test/role b/pkg/sql/logictest/testdata/logic_test/role index b6e1ee2e2176..537959f9685c 100644 --- a/pkg/sql/logictest/testdata/logic_test/role +++ b/pkg/sql/logictest/testdata/logic_test/role @@ -627,9 +627,12 @@ admin newgroup false admin root true newgroup testuser false + +user root statement ok CREATE DATABASE db2 +user testuser statement ok DROP DATABASE db1 @@ -737,6 +740,13 @@ DROP USER user1 user root +# Remove owned table to prepare testuser for dropping. +statement ok +REVOKE ALL ON db2.foo FROM newgroup + +statement ok +DROP TABLE db2.foo + # The user does not have direct privileges on anything, so we can drop it. statement ok DROP USER testuser @@ -747,12 +757,9 @@ SELECT * FROM system.role_members role member isAdmin admin root true -statement error cannot drop role/user newgroup: grants still exist on db2, db2.public.foo +statement error cannot drop role/user newgroup: grants still exist on db2 DROP ROLE newgroup -statement ok -REVOKE ALL ON db2.* FROM newgroup - statement ok REVOKE ALL ON DATABASE db2 FROM newgroup diff --git a/pkg/sql/rename_database.go b/pkg/sql/rename_database.go index 1078e7ca0eaf..56a73e1d6ad9 100644 --- a/pkg/sql/rename_database.go +++ b/pkg/sql/rename_database.go @@ -31,8 +31,10 @@ type renameDatabaseNode struct { } // RenameDatabase renames the database. -// Privileges: superuser, DROP on source database. +// Privileges: Ownership or superuser + DROP on source database. // Notes: postgres requires superuser, db owner, or "CREATEDB". +// Postgres requires non-superuser owners to have +// CREATEDB privilege to rename a DB. // mysql >= 5.1.23 does not allow database renames. func (p *planner) RenameDatabase(ctx context.Context, n *tree.RenameDatabase) (planNode, error) { if n.Name == "" || n.NewName == "" { @@ -43,17 +45,26 @@ func (p *planner) RenameDatabase(ctx context.Context, n *tree.RenameDatabase) (p return nil, pgerror.DangerousStatementf("RENAME DATABASE on current database") } - if err := p.RequireAdminRole(ctx, "ALTER DATABASE ... RENAME"); err != nil { + dbDesc, err := p.ResolveUncachedDatabaseByName(ctx, string(n.Name), true /*required*/) + if err != nil { return nil, err } - dbDesc, err := p.ResolveUncachedDatabaseByName(ctx, string(n.Name), true /*required*/) + hasOwnership, err := p.HasOwnership(ctx, dbDesc) if err != nil { return nil, err } - if err := p.CheckPrivilege(ctx, dbDesc, privilege.DROP); err != nil { - return nil, err + // If the user is not the db owner, they must have admin privilege and have + // drop privilege on the db. + if !hasOwnership { + if err := p.RequireAdminRole(ctx, "ALTER DATABASE ... RENAME"); err != nil { + return nil, err + } + + if err := p.CheckPrivilege(ctx, dbDesc, privilege.DROP); err != nil { + return nil, err + } } if n.Name == n.NewName { diff --git a/pkg/sql/sqlbase/database_desc.go b/pkg/sql/sqlbase/database_desc.go index 9d455a017fcb..f726bb7cc8ec 100644 --- a/pkg/sql/sqlbase/database_desc.go +++ b/pkg/sql/sqlbase/database_desc.go @@ -43,9 +43,8 @@ type MutableDatabaseDescriptor struct { // NewInitialDatabaseDescriptor constructs a new DatabaseDescriptor for an // initial version from an id and name. -func NewInitialDatabaseDescriptor(id ID, name string) *ImmutableDatabaseDescriptor { - return NewInitialDatabaseDescriptorWithPrivileges(id, name, - NewDefaultPrivilegeDescriptor()) +func NewInitialDatabaseDescriptor(id ID, name string, owner string) *ImmutableDatabaseDescriptor { + return NewInitialDatabaseDescriptorWithPrivileges(id, name, NewDefaultPrivilegeDescriptor(owner)) } // NewInitialDatabaseDescriptorWithPrivileges constructs a new DatabaseDescriptor for an diff --git a/pkg/sql/sqlbase/database_test.go b/pkg/sql/sqlbase/database_test.go index a0bbf8b88fcd..bbe5d326c666 100644 --- a/pkg/sql/sqlbase/database_test.go +++ b/pkg/sql/sqlbase/database_test.go @@ -26,7 +26,7 @@ func TestMakeDatabaseDesc(t *testing.T) { t.Fatal(err) } const id = 17 - desc := NewInitialDatabaseDescriptor(id, string(stmt.AST.(*tree.CreateDatabase).Name)) + desc := NewInitialDatabaseDescriptor(id, string(stmt.AST.(*tree.CreateDatabase).Name), AdminRole) if desc.GetName() != "test" { t.Fatalf("expected Name == test, got %s", desc.GetName()) } diff --git a/pkg/sql/sqlbase/privilege.go b/pkg/sql/sqlbase/privilege.go index a493da1cc25e..1dcf9467b607 100644 --- a/pkg/sql/sqlbase/privilege.go +++ b/pkg/sql/sqlbase/privilege.go @@ -76,8 +76,9 @@ func (p *PrivilegeDescriptor) removeUser(user string) { // NewCustomSuperuserPrivilegeDescriptor returns a privilege descriptor for the root user // and the admin role with specified privileges. -func NewCustomSuperuserPrivilegeDescriptor(priv privilege.List) *PrivilegeDescriptor { +func NewCustomSuperuserPrivilegeDescriptor(priv privilege.List, owner string) *PrivilegeDescriptor { return &PrivilegeDescriptor{ + Owner: owner, Users: []UserPrivileges{ { User: AdminRole, @@ -93,8 +94,9 @@ func NewCustomSuperuserPrivilegeDescriptor(priv privilege.List) *PrivilegeDescri // NewPrivilegeDescriptor returns a privilege descriptor for the given // user with the specified list of privileges. -func NewPrivilegeDescriptor(user string, priv privilege.List) *PrivilegeDescriptor { +func NewPrivilegeDescriptor(user string, priv privilege.List, owner string) *PrivilegeDescriptor { return &PrivilegeDescriptor{ + Owner: owner, Users: []UserPrivileges{ { User: user, @@ -110,8 +112,8 @@ var DefaultSuperuserPrivileges = privilege.List{privilege.ALL} // NewDefaultPrivilegeDescriptor returns a privilege descriptor // with ALL privileges for the root user and admin role. -func NewDefaultPrivilegeDescriptor() *PrivilegeDescriptor { - return NewCustomSuperuserPrivilegeDescriptor(DefaultSuperuserPrivileges) +func NewDefaultPrivilegeDescriptor(owner string) *PrivilegeDescriptor { + return NewCustomSuperuserPrivilegeDescriptor(DefaultSuperuserPrivileges, owner) } // Grant adds new privileges to this descriptor for a given list of users. @@ -335,3 +337,8 @@ func (p PrivilegeDescriptor) AnyPrivilege(user string) bool { } return userPriv.Privileges != 0 } + +// SetOwner sets the owner of the privilege descriptor to the provided string. +func (p *PrivilegeDescriptor) SetOwner(owner string) { + p.Owner = owner +} diff --git a/pkg/sql/sqlbase/privilege.pb.go b/pkg/sql/sqlbase/privilege.pb.go index c599be5b3a85..4d55af25aebf 100644 --- a/pkg/sql/sqlbase/privilege.pb.go +++ b/pkg/sql/sqlbase/privilege.pb.go @@ -31,7 +31,7 @@ func (m *UserPrivileges) Reset() { *m = UserPrivileges{} } func (m *UserPrivileges) String() string { return proto.CompactTextString(m) } func (*UserPrivileges) ProtoMessage() {} func (*UserPrivileges) Descriptor() ([]byte, []int) { - return fileDescriptor_privilege_75243489d6de4ea3, []int{0} + return fileDescriptor_privilege_c0c71ba7e21a08b9, []int{0} } func (m *UserPrivileges) XXX_Unmarshal(b []byte) error { return m.Unmarshal(b) @@ -60,13 +60,14 @@ var xxx_messageInfo_UserPrivileges proto.InternalMessageInfo // privileges. The list should be sorted by user for fast access. type PrivilegeDescriptor struct { Users []UserPrivileges `protobuf:"bytes,1,rep,name=users" json:"users"` + Owner string `protobuf:"bytes,41,opt,name=owner" json:"owner"` } func (m *PrivilegeDescriptor) Reset() { *m = PrivilegeDescriptor{} } func (m *PrivilegeDescriptor) String() string { return proto.CompactTextString(m) } func (*PrivilegeDescriptor) ProtoMessage() {} func (*PrivilegeDescriptor) Descriptor() ([]byte, []int) { - return fileDescriptor_privilege_75243489d6de4ea3, []int{1} + return fileDescriptor_privilege_c0c71ba7e21a08b9, []int{1} } func (m *PrivilegeDescriptor) XXX_Unmarshal(b []byte) error { return m.Unmarshal(b) @@ -149,6 +150,9 @@ func (this *PrivilegeDescriptor) Equal(that interface{}) bool { return false } } + if this.Owner != that1.Owner { + return false + } return true } func (m *UserPrivileges) Marshal() (dAtA []byte, err error) { @@ -203,6 +207,12 @@ func (m *PrivilegeDescriptor) MarshalTo(dAtA []byte) (int, error) { i += n } } + dAtA[i] = 0xca + i++ + dAtA[i] = 0x2 + i++ + i = encodeVarintPrivilege(dAtA, i, uint64(len(m.Owner))) + i += copy(dAtA[i:], m.Owner) return i, nil } @@ -239,6 +249,8 @@ func (m *PrivilegeDescriptor) Size() (n int) { n += 1 + l + sovPrivilege(uint64(l)) } } + l = len(m.Owner) + n += 2 + l + sovPrivilege(uint64(l)) return n } @@ -413,6 +425,35 @@ func (m *PrivilegeDescriptor) Unmarshal(dAtA []byte) error { return err } iNdEx = postIndex + case 41: + if wireType != 2 { + return fmt.Errorf("proto: wrong wireType = %d for field Owner", wireType) + } + var stringLen uint64 + for shift := uint(0); ; shift += 7 { + if shift >= 64 { + return ErrIntOverflowPrivilege + } + if iNdEx >= l { + return io.ErrUnexpectedEOF + } + b := dAtA[iNdEx] + iNdEx++ + stringLen |= (uint64(b) & 0x7F) << shift + if b < 0x80 { + break + } + } + intStringLen := int(stringLen) + if intStringLen < 0 { + return ErrInvalidLengthPrivilege + } + postIndex := iNdEx + intStringLen + if postIndex > l { + return io.ErrUnexpectedEOF + } + m.Owner = string(dAtA[iNdEx:postIndex]) + iNdEx = postIndex default: iNdEx = preIndex skippy, err := skipPrivilege(dAtA[iNdEx:]) @@ -540,11 +581,11 @@ var ( ) func init() { - proto.RegisterFile("sql/sqlbase/privilege.proto", fileDescriptor_privilege_75243489d6de4ea3) + proto.RegisterFile("sql/sqlbase/privilege.proto", fileDescriptor_privilege_c0c71ba7e21a08b9) } -var fileDescriptor_privilege_75243489d6de4ea3 = []byte{ - // 227 bytes of a gzipped FileDescriptorProto +var fileDescriptor_privilege_c0c71ba7e21a08b9 = []byte{ + // 242 bytes of a gzipped FileDescriptorProto 0x1f, 0x8b, 0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0xff, 0xe2, 0x92, 0x2e, 0x2e, 0xcc, 0xd1, 0x2f, 0x2e, 0xcc, 0x49, 0x4a, 0x2c, 0x4e, 0xd5, 0x2f, 0x28, 0xca, 0x2c, 0xcb, 0xcc, 0x49, 0x4d, 0x4f, 0xd5, 0x2b, 0x28, 0xca, 0x2f, 0xc9, 0x17, 0x12, 0x4d, 0xce, 0x4f, 0xce, 0x2e, 0xca, 0x4f, @@ -553,11 +594,12 @@ var fileDescriptor_privilege_75243489d6de4ea3 = []byte{ 0x66, 0x14, 0x0b, 0x49, 0x70, 0xb1, 0x94, 0x16, 0xa7, 0x16, 0x49, 0x30, 0x2a, 0x30, 0x6a, 0x70, 0x3a, 0xb1, 0x9c, 0xb8, 0x27, 0xcf, 0x10, 0x04, 0x16, 0x11, 0x52, 0xe1, 0xe2, 0x82, 0xdb, 0x55, 0x2c, 0xc1, 0xa4, 0xc0, 0xa8, 0xc1, 0x0b, 0x95, 0x47, 0x12, 0xb7, 0x62, 0x79, 0xb1, 0x40, 0x9e, - 0x51, 0x29, 0x8e, 0x4b, 0x18, 0x6e, 0xa6, 0x4b, 0x6a, 0x71, 0x72, 0x51, 0x66, 0x41, 0x49, 0x7e, + 0x51, 0xa9, 0x8a, 0x4b, 0x18, 0x6e, 0xa6, 0x4b, 0x6a, 0x71, 0x72, 0x51, 0x66, 0x41, 0x49, 0x7e, 0x91, 0x90, 0x23, 0x17, 0x2b, 0xc8, 0xa8, 0x62, 0x09, 0x46, 0x05, 0x66, 0x0d, 0x6e, 0x23, 0x55, - 0x3d, 0xac, 0x6e, 0xd5, 0x43, 0x75, 0x12, 0xd4, 0x12, 0x88, 0x4e, 0x88, 0xf9, 0x4e, 0x9a, 0x27, - 0x1e, 0xca, 0x31, 0x9c, 0x78, 0x24, 0xc7, 0x78, 0xe1, 0x91, 0x1c, 0xe3, 0x8d, 0x47, 0x72, 0x8c, - 0x0f, 0x1e, 0xc9, 0x31, 0x4e, 0x78, 0x2c, 0xc7, 0x70, 0xe1, 0xb1, 0x1c, 0xc3, 0x8d, 0xc7, 0x72, - 0x0c, 0x51, 0xec, 0x50, 0xc3, 0x00, 0x01, 0x00, 0x00, 0xff, 0xff, 0x7f, 0xbf, 0x60, 0xab, 0x2d, - 0x01, 0x00, 0x00, + 0x3d, 0xac, 0x6e, 0xd5, 0x43, 0x75, 0x12, 0xd4, 0x12, 0x88, 0x4e, 0x21, 0x29, 0x2e, 0xd6, 0xfc, + 0xf2, 0xbc, 0xd4, 0x22, 0x09, 0x4d, 0x24, 0x07, 0x42, 0x84, 0x20, 0x76, 0x3b, 0x69, 0x9e, 0x78, + 0x28, 0xc7, 0x70, 0xe2, 0x91, 0x1c, 0xe3, 0x85, 0x47, 0x72, 0x8c, 0x37, 0x1e, 0xc9, 0x31, 0x3e, + 0x78, 0x24, 0xc7, 0x38, 0xe1, 0xb1, 0x1c, 0xc3, 0x85, 0xc7, 0x72, 0x0c, 0x37, 0x1e, 0xcb, 0x31, + 0x44, 0xb1, 0x43, 0x2d, 0x02, 0x04, 0x00, 0x00, 0xff, 0xff, 0x5a, 0x6f, 0x19, 0xb4, 0x49, 0x01, + 0x00, 0x00, } diff --git a/pkg/sql/sqlbase/privilege.proto b/pkg/sql/sqlbase/privilege.proto index 0ea96a4409c4..90a20cd485d5 100644 --- a/pkg/sql/sqlbase/privilege.proto +++ b/pkg/sql/sqlbase/privilege.proto @@ -27,4 +27,5 @@ message UserPrivileges { message PrivilegeDescriptor { option (gogoproto.equal) = true; repeated UserPrivileges users = 1 [(gogoproto.nullable) = false]; + optional string owner = 41 [(gogoproto.nullable) = false]; } diff --git a/pkg/sql/sqlbase/privilege_test.go b/pkg/sql/sqlbase/privilege_test.go index 3750b0532379..9f6906c79cb5 100644 --- a/pkg/sql/sqlbase/privilege_test.go +++ b/pkg/sql/sqlbase/privilege_test.go @@ -22,7 +22,7 @@ import ( func TestPrivilege(t *testing.T) { defer leaktest.AfterTest(t)() - descriptor := NewDefaultPrivilegeDescriptor() + descriptor := NewDefaultPrivilegeDescriptor(AdminRole) testCases := []struct { grantee string // User to grant/revoke privileges on. @@ -121,29 +121,32 @@ func TestCheckPrivilege(t *testing.T) { priv privilege.Kind exp bool }{ - {NewPrivilegeDescriptor("foo", privilege.List{privilege.CREATE}), + {NewPrivilegeDescriptor("foo", privilege.List{privilege.CREATE}, AdminRole), "foo", privilege.CREATE, true}, - {NewPrivilegeDescriptor("foo", privilege.List{privilege.CREATE}), + {NewPrivilegeDescriptor("foo", privilege.List{privilege.CREATE}, AdminRole), "bar", privilege.CREATE, false}, - {NewPrivilegeDescriptor("foo", privilege.List{privilege.CREATE}), + {NewPrivilegeDescriptor("foo", privilege.List{privilege.CREATE}, AdminRole), "bar", privilege.DROP, false}, - {NewPrivilegeDescriptor("foo", privilege.List{privilege.CREATE}), + {NewPrivilegeDescriptor("foo", privilege.List{privilege.CREATE}, AdminRole), "foo", privilege.DROP, false}, - {NewPrivilegeDescriptor("foo", privilege.List{privilege.ALL}), + {NewPrivilegeDescriptor("foo", privilege.List{privilege.ALL}, AdminRole), "foo", privilege.CREATE, true}, - {NewPrivilegeDescriptor("foo", privilege.List{privilege.CREATE}), + {NewPrivilegeDescriptor("foo", privilege.List{privilege.CREATE}, AdminRole), "foo", privilege.ALL, false}, - {NewPrivilegeDescriptor("foo", privilege.List{privilege.ALL}), + {NewPrivilegeDescriptor("foo", privilege.List{privilege.ALL}, AdminRole), "foo", privilege.ALL, true}, - {NewPrivilegeDescriptor("foo", privilege.List{}), + {NewPrivilegeDescriptor("foo", privilege.List{}, AdminRole), "foo", privilege.ALL, false}, - {NewPrivilegeDescriptor("foo", privilege.List{}), + {NewPrivilegeDescriptor("foo", privilege.List{}, AdminRole), "foo", privilege.CREATE, false}, - {NewPrivilegeDescriptor("foo", privilege.List{privilege.CREATE, privilege.DROP}), + {NewPrivilegeDescriptor("foo", privilege.List{privilege.CREATE, privilege.DROP}, + AdminRole), "foo", privilege.UPDATE, false}, - {NewPrivilegeDescriptor("foo", privilege.List{privilege.CREATE, privilege.DROP}), + {NewPrivilegeDescriptor("foo", privilege.List{privilege.CREATE, privilege.DROP}, + AdminRole), "foo", privilege.DROP, true}, - {NewPrivilegeDescriptor("foo", privilege.List{privilege.CREATE, privilege.ALL}), + {NewPrivilegeDescriptor("foo", privilege.List{privilege.CREATE, privilege.ALL}, + AdminRole), "foo", privilege.DROP, true}, } @@ -163,17 +166,19 @@ func TestAnyPrivilege(t *testing.T) { user string exp bool }{ - {NewPrivilegeDescriptor("foo", privilege.List{privilege.CREATE}), + {NewPrivilegeDescriptor("foo", privilege.List{privilege.CREATE}, AdminRole), "foo", true}, - {NewPrivilegeDescriptor("foo", privilege.List{privilege.CREATE}), + {NewPrivilegeDescriptor("foo", privilege.List{privilege.CREATE}, AdminRole), "bar", false}, - {NewPrivilegeDescriptor("foo", privilege.List{privilege.ALL}), + {NewPrivilegeDescriptor("foo", privilege.List{privilege.ALL}, AdminRole), "foo", true}, - {NewPrivilegeDescriptor("foo", privilege.List{}), + {NewPrivilegeDescriptor("foo", privilege.List{}, AdminRole), "foo", false}, - {NewPrivilegeDescriptor("foo", privilege.List{privilege.CREATE, privilege.DROP}), + {NewPrivilegeDescriptor("foo", privilege.List{privilege.CREATE, privilege.DROP}, + AdminRole), "foo", true}, - {NewPrivilegeDescriptor("foo", privilege.List{privilege.CREATE, privilege.DROP}), + {NewPrivilegeDescriptor("foo", privilege.List{privilege.CREATE, privilege.DROP}, + AdminRole), "bar", false}, } @@ -189,7 +194,7 @@ func TestAnyPrivilege(t *testing.T) { func TestPrivilegeValidate(t *testing.T) { defer leaktest.AfterTest(t)() id := ID(keys.MinUserDescID) - descriptor := NewDefaultPrivilegeDescriptor() + descriptor := NewDefaultPrivilegeDescriptor(AdminRole) if err := descriptor.Validate(id); err != nil { t.Fatal(err) } @@ -242,6 +247,7 @@ func TestSystemPrivilegeValidate(t *testing.T) { // Valid: root user has one of the allowable privilege sets. descriptor := NewCustomSuperuserPrivilegeDescriptor( privilege.List{privilege.SELECT, privilege.GRANT}, + AdminRole, ) if err := descriptor.Validate(id); err != nil { t.Fatal(err) @@ -264,6 +270,7 @@ func TestSystemPrivilegeValidate(t *testing.T) { // Valid: root has exactly the allowed privileges. descriptor := NewCustomSuperuserPrivilegeDescriptor( privilege.List{privilege.SELECT, privilege.GRANT}, + AdminRole, ) // Valid: foo has a subset of the allowed privileges. @@ -287,7 +294,7 @@ func TestSystemPrivilegeValidate(t *testing.T) { { // Invalid: root has a non-allowable privilege set. - descriptor := NewCustomSuperuserPrivilegeDescriptor(privilege.List{privilege.UPDATE}) + descriptor := NewCustomSuperuserPrivilegeDescriptor(privilege.List{privilege.UPDATE}, AdminRole) if err := descriptor.Validate(id); !testutils.IsError(err, rootWrongPrivilegesErr) { t.Fatalf("expected err=%s, got err=%v", rootWrongPrivilegesErr, err) } diff --git a/pkg/sql/sqlbase/structured_test.go b/pkg/sql/sqlbase/structured_test.go index 9ac9ac3cf7eb..e9fb6a584a47 100644 --- a/pkg/sql/sqlbase/structured_test.go +++ b/pkg/sql/sqlbase/structured_test.go @@ -67,7 +67,7 @@ func TestAllocateIDs(t *testing.T) { return idx }(), }, - Privileges: NewDefaultPrivilegeDescriptor(), + Privileges: NewDefaultPrivilegeDescriptor(AdminRole), FormatVersion: FamilyFormatVersion, }) if err := desc.AllocateIDs(); err != nil { @@ -108,7 +108,7 @@ func TestAllocateIDs(t *testing.T) { ColumnDirections: []IndexDescriptor_Direction{IndexDescriptor_ASC}, EncodingType: PrimaryIndexEncoding}, }, - Privileges: NewDefaultPrivilegeDescriptor(), + Privileges: NewDefaultPrivilegeDescriptor(AdminRole), NextColumnID: 4, NextFamilyID: 1, NextIndexID: 5, @@ -926,7 +926,7 @@ func TestValidateCrossTableReferences(t *testing.T) { for i, test := range tests { for _, otherDesc := range test.otherDescs { - otherDesc.Privileges = NewDefaultPrivilegeDescriptor() + otherDesc.Privileges = NewDefaultPrivilegeDescriptor(AdminRole) var v roachpb.Value desc := &Descriptor{Union: &Descriptor_Table{Table: &otherDesc}} if err := v.SetProto(desc); err != nil { @@ -1324,7 +1324,7 @@ func TestUnvalidateConstraints(t *testing.T) { {Name: "c", Type: types.Int}}, FormatVersion: FamilyFormatVersion, Indexes: []IndexDescriptor{makeIndexDescriptor("d", []string{"b", "a"})}, - Privileges: NewDefaultPrivilegeDescriptor(), + Privileges: NewDefaultPrivilegeDescriptor(AdminRole), OutboundFKs: []ForeignKeyConstraint{ { Name: "fk", diff --git a/pkg/sql/sqlbase/system.go b/pkg/sql/sqlbase/system.go index c1c5b8a2e328..fb3cd9348c22 100644 --- a/pkg/sql/sqlbase/system.go +++ b/pkg/sql/sqlbase/system.go @@ -404,7 +404,8 @@ func MakeSystemDatabaseDesc() *ImmutableDatabaseDescriptor { keys.SystemDatabaseID, SystemDatabaseName, // Assign max privileges to root user. - NewCustomSuperuserPrivilegeDescriptor(SystemAllowedPrivileges[keys.SystemDatabaseID]), + NewCustomSuperuserPrivilegeDescriptor( + SystemAllowedPrivileges[keys.SystemDatabaseID], security.NodeUser), ) } @@ -448,8 +449,10 @@ var ( ColumnIDs: []ColumnID{1, 2}, Version: SecondaryIndexFamilyFormatVersion, }, - NextIndexID: 2, - Privileges: NewCustomSuperuserPrivilegeDescriptor(SystemAllowedPrivileges[keys.DeprecatedNamespaceTableID]), + NextIndexID: 2, + Privileges: NewCustomSuperuserPrivilegeDescriptor( + SystemAllowedPrivileges[keys.DeprecatedNamespaceTableID], + security.NodeUser), FormatVersion: InterleavedFormatVersion, NextMutationID: 1, }) @@ -493,17 +496,19 @@ var ( ColumnIDs: []ColumnID{1, 2, 3}, Version: SecondaryIndexFamilyFormatVersion, }, - NextIndexID: 2, - Privileges: NewCustomSuperuserPrivilegeDescriptor(SystemAllowedPrivileges[keys.DeprecatedNamespaceTableID]), + NextIndexID: 2, + Privileges: NewCustomSuperuserPrivilegeDescriptor( + SystemAllowedPrivileges[keys.DeprecatedNamespaceTableID], security.NodeUser), FormatVersion: InterleavedFormatVersion, NextMutationID: 1, }) // DescriptorTable is the descriptor for the descriptor table. DescriptorTable = NewImmutableTableDescriptor(TableDescriptor{ - Name: "descriptor", - ID: keys.DescriptorTableID, - Privileges: NewCustomSuperuserPrivilegeDescriptor(SystemAllowedPrivileges[keys.DescriptorTableID]), + Name: "descriptor", + ID: keys.DescriptorTableID, + Privileges: NewCustomSuperuserPrivilegeDescriptor( + SystemAllowedPrivileges[keys.DescriptorTableID], security.NodeUser), ParentID: keys.SystemDatabaseID, UnexposedParentSchemaID: keys.PublicSchemaID, Version: 1, @@ -547,10 +552,11 @@ var ( {Name: "fam_2_hashedPassword", ID: 2, ColumnNames: []string{"hashedPassword"}, ColumnIDs: []ColumnID{2}, DefaultColumnID: 2}, {Name: "fam_3_isRole", ID: 3, ColumnNames: []string{"isRole"}, ColumnIDs: []ColumnID{3}, DefaultColumnID: 3}, }, - PrimaryIndex: pk("username"), - NextFamilyID: 4, - NextIndexID: 2, - Privileges: NewCustomSuperuserPrivilegeDescriptor(SystemAllowedPrivileges[keys.UsersTableID]), + PrimaryIndex: pk("username"), + NextFamilyID: 4, + NextIndexID: 2, + Privileges: NewCustomSuperuserPrivilegeDescriptor( + SystemAllowedPrivileges[keys.UsersTableID], security.NodeUser), FormatVersion: InterleavedFormatVersion, NextMutationID: 1, }) @@ -581,9 +587,10 @@ var ( ColumnIDs: []ColumnID{keys.ZonesTablePrimaryIndexID}, Version: SecondaryIndexFamilyFormatVersion, }, - NextFamilyID: 3, - NextIndexID: 2, - Privileges: NewCustomSuperuserPrivilegeDescriptor(SystemAllowedPrivileges[keys.ZonesTableID]), + NextFamilyID: 3, + NextIndexID: 2, + Privileges: NewCustomSuperuserPrivilegeDescriptor( + SystemAllowedPrivileges[keys.ZonesTableID], security.NodeUser), FormatVersion: InterleavedFormatVersion, NextMutationID: 1, }) @@ -611,10 +618,11 @@ var ( ColumnIDs: []ColumnID{1, 2, 3, 4}, }, }, - NextFamilyID: 1, - PrimaryIndex: pk("name"), - NextIndexID: 2, - Privileges: NewCustomSuperuserPrivilegeDescriptor(SystemAllowedPrivileges[keys.SettingsTableID]), + NextFamilyID: 1, + PrimaryIndex: pk("name"), + NextIndexID: 2, + Privileges: NewCustomSuperuserPrivilegeDescriptor( + SystemAllowedPrivileges[keys.SettingsTableID], security.NodeUser), FormatVersion: InterleavedFormatVersion, NextMutationID: 1, }) @@ -649,7 +657,8 @@ var ( MaxValue: math.MaxInt64, Start: 1, }, - Privileges: NewCustomSuperuserPrivilegeDescriptor(SystemAllowedPrivileges[keys.DescIDSequenceID]), + Privileges: NewCustomSuperuserPrivilegeDescriptor( + SystemAllowedPrivileges[keys.DescIDSequenceID], security.NodeUser), FormatVersion: InterleavedFormatVersion, }) @@ -676,10 +685,11 @@ var ( ColumnNames: []string{"id", "active", "info"}, ColumnIDs: []ColumnID{1, 2, 3}, }}, - NextFamilyID: 1, - PrimaryIndex: pk("id"), - NextIndexID: 2, - Privileges: NewCustomSuperuserPrivilegeDescriptor(SystemAllowedPrivileges[keys.TenantsTableID]), + NextFamilyID: 1, + PrimaryIndex: pk("id"), + NextIndexID: 2, + Privileges: NewCustomSuperuserPrivilegeDescriptor( + SystemAllowedPrivileges[keys.TenantsTableID], security.NodeUser), FormatVersion: InterleavedFormatVersion, NextMutationID: 1, }) @@ -717,9 +727,10 @@ var ( ColumnIDs: []ColumnID{1, 2, 4, 3}, Version: SecondaryIndexFamilyFormatVersion, }, - NextFamilyID: 1, - NextIndexID: 2, - Privileges: NewCustomSuperuserPrivilegeDescriptor(SystemAllowedPrivileges[keys.LeaseTableID]), + NextFamilyID: 1, + NextIndexID: 2, + Privileges: NewCustomSuperuserPrivilegeDescriptor( + SystemAllowedPrivileges[keys.LeaseTableID], security.NodeUser), FormatVersion: InterleavedFormatVersion, NextMutationID: 1, }) @@ -758,9 +769,10 @@ var ( ColumnIDs: []ColumnID{1, 6}, Version: SecondaryIndexFamilyFormatVersion, }, - NextFamilyID: 6, - NextIndexID: 2, - Privileges: NewCustomSuperuserPrivilegeDescriptor(SystemAllowedPrivileges[keys.EventLogTableID]), + NextFamilyID: 6, + NextIndexID: 2, + Privileges: NewCustomSuperuserPrivilegeDescriptor( + SystemAllowedPrivileges[keys.EventLogTableID], security.NodeUser), FormatVersion: InterleavedFormatVersion, NextMutationID: 1, }) @@ -801,9 +813,10 @@ var ( ColumnIDs: []ColumnID{1, 7}, Version: SecondaryIndexFamilyFormatVersion, }, - NextFamilyID: 7, - NextIndexID: 2, - Privileges: NewCustomSuperuserPrivilegeDescriptor(SystemAllowedPrivileges[keys.RangeEventTableID]), + NextFamilyID: 7, + NextIndexID: 2, + Privileges: NewCustomSuperuserPrivilegeDescriptor( + SystemAllowedPrivileges[keys.RangeEventTableID], security.NodeUser), FormatVersion: InterleavedFormatVersion, NextMutationID: 1, }) @@ -826,10 +839,11 @@ var ( {Name: "fam_2_value", ID: 2, ColumnNames: []string{"value"}, ColumnIDs: []ColumnID{2}, DefaultColumnID: 2}, {Name: "fam_3_lastUpdated", ID: 3, ColumnNames: []string{"lastUpdated"}, ColumnIDs: []ColumnID{3}, DefaultColumnID: 3}, }, - NextFamilyID: 4, - PrimaryIndex: pk("key"), - NextIndexID: 2, - Privileges: NewCustomSuperuserPrivilegeDescriptor(SystemAllowedPrivileges[keys.UITableID]), + NextFamilyID: 4, + PrimaryIndex: pk("key"), + NextIndexID: 2, + Privileges: NewCustomSuperuserPrivilegeDescriptor( + SystemAllowedPrivileges[keys.UITableID], security.NodeUser), FormatVersion: InterleavedFormatVersion, NextMutationID: 1, }) @@ -898,8 +912,9 @@ var ( Version: SecondaryIndexFamilyFormatVersion, }, }, - NextIndexID: 4, - Privileges: NewCustomSuperuserPrivilegeDescriptor(SystemAllowedPrivileges[keys.JobsTableID]), + NextIndexID: 4, + Privileges: NewCustomSuperuserPrivilegeDescriptor( + SystemAllowedPrivileges[keys.JobsTableID], security.NodeUser), FormatVersion: InterleavedFormatVersion, NextMutationID: 1, }) @@ -963,8 +978,9 @@ var ( Version: SecondaryIndexFamilyFormatVersion, }, }, - NextIndexID: 4, - Privileges: NewCustomSuperuserPrivilegeDescriptor(SystemAllowedPrivileges[keys.WebSessionsTableID]), + NextIndexID: 4, + Privileges: NewCustomSuperuserPrivilegeDescriptor( + SystemAllowedPrivileges[keys.WebSessionsTableID], security.NodeUser), NextMutationID: 1, FormatVersion: 3, }) @@ -1016,8 +1032,9 @@ var ( ColumnIDs: []ColumnID{1, 2}, Version: SecondaryIndexFamilyFormatVersion, }, - NextIndexID: 2, - Privileges: NewCustomSuperuserPrivilegeDescriptor(SystemAllowedPrivileges[keys.TableStatisticsTableID]), + NextIndexID: 2, + Privileges: NewCustomSuperuserPrivilegeDescriptor( + SystemAllowedPrivileges[keys.TableStatisticsTableID], security.NodeUser), FormatVersion: InterleavedFormatVersion, NextMutationID: 1, }) @@ -1056,8 +1073,9 @@ var ( ColumnIDs: []ColumnID{1, 2}, Version: SecondaryIndexFamilyFormatVersion, }, - NextIndexID: 2, - Privileges: NewCustomSuperuserPrivilegeDescriptor(SystemAllowedPrivileges[keys.LocationsTableID]), + NextIndexID: 2, + Privileges: NewCustomSuperuserPrivilegeDescriptor( + SystemAllowedPrivileges[keys.LocationsTableID], security.NodeUser), FormatVersion: InterleavedFormatVersion, NextMutationID: 1, }) @@ -1122,8 +1140,9 @@ var ( Version: SecondaryIndexFamilyFormatVersion, }, }, - NextIndexID: 4, - Privileges: NewCustomSuperuserPrivilegeDescriptor(SystemAllowedPrivileges[keys.RoleMembersTableID]), + NextIndexID: 4, + Privileges: NewCustomSuperuserPrivilegeDescriptor( + SystemAllowedPrivileges[keys.RoleMembersTableID], security.NodeUser), FormatVersion: InterleavedFormatVersion, NextMutationID: 1, }) @@ -1193,8 +1212,9 @@ var ( ColumnIDs: []ColumnID{1}, Version: SecondaryIndexFamilyFormatVersion, }, - NextIndexID: 2, - Privileges: NewCustomSuperuserPrivilegeDescriptor(SystemAllowedPrivileges[keys.ReportsMetaTableID]), + NextIndexID: 2, + Privileges: NewCustomSuperuserPrivilegeDescriptor( + SystemAllowedPrivileges[keys.ReportsMetaTableID], security.NodeUser), FormatVersion: InterleavedFormatVersion, NextMutationID: 1, }) @@ -1247,8 +1267,9 @@ var ( ColumnIDs: []ColumnID{1, 2, 3, 4}, Version: SecondaryIndexFamilyFormatVersion, }, - NextIndexID: 2, - Privileges: NewCustomSuperuserPrivilegeDescriptor(SystemAllowedPrivileges[keys.ReplicationConstraintStatsTableID]), + NextIndexID: 2, + Privileges: NewCustomSuperuserPrivilegeDescriptor( + SystemAllowedPrivileges[keys.ReplicationConstraintStatsTableID], security.NodeUser), FormatVersion: InterleavedFormatVersion, NextMutationID: 1, }) @@ -1296,8 +1317,9 @@ var ( ColumnIDs: []ColumnID{1, 2, 3}, Version: SecondaryIndexFamilyFormatVersion, }, - NextIndexID: 2, - Privileges: NewCustomSuperuserPrivilegeDescriptor(SystemAllowedPrivileges[keys.ReplicationCriticalLocalitiesTableID]), + NextIndexID: 2, + Privileges: NewCustomSuperuserPrivilegeDescriptor( + SystemAllowedPrivileges[keys.ReplicationCriticalLocalitiesTableID], security.NodeUser), FormatVersion: InterleavedFormatVersion, NextMutationID: 1, }) @@ -1348,8 +1370,9 @@ var ( ColumnIDs: []ColumnID{1, 2}, Version: SecondaryIndexFamilyFormatVersion, }, - NextIndexID: 2, - Privileges: NewCustomSuperuserPrivilegeDescriptor(SystemAllowedPrivileges[keys.ReplicationStatsTableID]), + NextIndexID: 2, + Privileges: NewCustomSuperuserPrivilegeDescriptor( + SystemAllowedPrivileges[keys.ReplicationStatsTableID], security.NodeUser), FormatVersion: InterleavedFormatVersion, NextMutationID: 1, }) @@ -1399,8 +1422,9 @@ var ( IndexDescriptor_ASC, }, }, - NextIndexID: 2, - Privileges: NewCustomSuperuserPrivilegeDescriptor(SystemAllowedPrivileges[keys.ReplicationStatsTableID]), + NextIndexID: 2, + Privileges: NewCustomSuperuserPrivilegeDescriptor( + SystemAllowedPrivileges[keys.ReplicationStatsTableID], security.NodeUser), FormatVersion: InterleavedFormatVersion, NextMutationID: 1, }) @@ -1440,8 +1464,9 @@ var ( IndexDescriptor_ASC, }, }, - NextIndexID: 2, - Privileges: NewCustomSuperuserPrivilegeDescriptor(SystemAllowedPrivileges[keys.ProtectedTimestampsRecordsTableID]), + NextIndexID: 2, + Privileges: NewCustomSuperuserPrivilegeDescriptor( + SystemAllowedPrivileges[keys.ProtectedTimestampsRecordsTableID], security.NodeUser), FormatVersion: InterleavedFormatVersion, NextMutationID: 1, }) @@ -1477,8 +1502,9 @@ var ( ColumnIDs: []ColumnID{1, 2}, Version: SecondaryIndexFamilyFormatVersion, }, - NextIndexID: 2, - Privileges: NewCustomSuperuserPrivilegeDescriptor(SystemAllowedPrivileges[keys.RoleOptionsTableID]), + NextIndexID: 2, + Privileges: NewCustomSuperuserPrivilegeDescriptor( + SystemAllowedPrivileges[keys.RoleOptionsTableID], security.NodeUser), FormatVersion: InterleavedFormatVersion, NextMutationID: 1, }) @@ -1502,10 +1528,11 @@ var ( ColumnIDs: []ColumnID{1, 2, 3}, }, }, - NextFamilyID: 1, - PrimaryIndex: pk("id"), - NextIndexID: 2, - Privileges: NewCustomSuperuserPrivilegeDescriptor(SystemAllowedPrivileges[keys.StatementBundleChunksTableID]), + NextFamilyID: 1, + PrimaryIndex: pk("id"), + NextIndexID: 2, + Privileges: NewCustomSuperuserPrivilegeDescriptor( + SystemAllowedPrivileges[keys.StatementBundleChunksTableID], security.NodeUser), FormatVersion: InterleavedFormatVersion, NextMutationID: 1, }) @@ -1551,7 +1578,7 @@ var ( }, NextIndexID: 3, Privileges: NewCustomSuperuserPrivilegeDescriptor( - SystemAllowedPrivileges[keys.StatementDiagnosticsRequestsTableID]), + SystemAllowedPrivileges[keys.StatementDiagnosticsRequestsTableID], security.NodeUser), FormatVersion: InterleavedFormatVersion, NextMutationID: 1, }) @@ -1584,7 +1611,7 @@ var ( PrimaryIndex: pk("id"), NextIndexID: 2, Privileges: NewCustomSuperuserPrivilegeDescriptor( - SystemAllowedPrivileges[keys.StatementDiagnosticsTableID]), + SystemAllowedPrivileges[keys.StatementDiagnosticsTableID], security.NodeUser), FormatVersion: InterleavedFormatVersion, NextMutationID: 1, }) @@ -1639,8 +1666,9 @@ var ( Version: SecondaryIndexFamilyFormatVersion, }, }, - NextIndexID: 3, - Privileges: NewCustomSuperuserPrivilegeDescriptor(SystemAllowedPrivileges[keys.ScheduledJobsTableID]), + NextIndexID: 3, + Privileges: NewCustomSuperuserPrivilegeDescriptor( + SystemAllowedPrivileges[keys.ScheduledJobsTableID], security.NodeUser), FormatVersion: InterleavedFormatVersion, NextMutationID: 1, }) diff --git a/pkg/sql/sqlbase/system_test.go b/pkg/sql/sqlbase/system_test.go index 2ddbf20b8bd1..abc4b4aafe05 100644 --- a/pkg/sql/sqlbase/system_test.go +++ b/pkg/sql/sqlbase/system_test.go @@ -21,7 +21,7 @@ func TestShouldSplitAtDesc(t *testing.T) { for inner, should := range map[DescriptorInterface]bool{ NewImmutableTableDescriptor(TableDescriptor{}): true, NewImmutableTableDescriptor(TableDescriptor{ViewQuery: "SELECT"}): false, - NewInitialDatabaseDescriptor(42, "db"): false, + NewInitialDatabaseDescriptor(42, "db", AdminRole): false, NewMutableCreatedTypeDescriptor(TypeDescriptor{}): false, NewImmutableSchemaDescriptor(SchemaDescriptor{}): false, } { diff --git a/pkg/sql/sqlbase/validate_test.go b/pkg/sql/sqlbase/validate_test.go index a77dfe89b729..86f568845913 100644 --- a/pkg/sql/sqlbase/validate_test.go +++ b/pkg/sql/sqlbase/validate_test.go @@ -108,6 +108,11 @@ var validationMap = []struct { "OutboundFKs": {status: iSolemnlySwearThisFieldIsValidated}, "InboundFKs": {status: iSolemnlySwearThisFieldIsValidated}, "Temporary": {status: thisFieldReferencesNoObjects}, + "Owner": {status: todoIAmKnowinglyAddingTechDebt, + reason: "Need a format version field on the descriptor in order to " + + "perform validation. Need to know which version the descriptor is " + + "in order to determine if an empty field is valid or not. " + + "TODO(richardjcai): Add this field after implementing #51930."}, }, }, { diff --git a/pkg/sql/table_test.go b/pkg/sql/table_test.go index db88a6192b8e..73dcdf6f839d 100644 --- a/pkg/sql/table_test.go +++ b/pkg/sql/table_test.go @@ -175,7 +175,8 @@ func TestMakeTableDescColumns(t *testing.T) { } for i, d := range testData { s := "CREATE TABLE foo.test (a " + d.sqlType + " PRIMARY KEY, b " + d.sqlType + ")" - schema, err := CreateTestTableDescriptor(context.Background(), 1, 100, s, sqlbase.NewDefaultPrivilegeDescriptor()) + schema, err := CreateTestTableDescriptor(context.Background(), 1, 100, s, + sqlbase.NewDefaultPrivilegeDescriptor(sqlbase.AdminRole)) if err != nil { t.Fatalf("%d: %v", i, err) } @@ -290,7 +291,8 @@ func TestMakeTableDescIndexes(t *testing.T) { } for i, d := range testData { s := "CREATE TABLE foo.test (" + d.sql + ")" - schema, err := CreateTestTableDescriptor(context.Background(), 1, 100, s, sqlbase.NewDefaultPrivilegeDescriptor()) + schema, err := CreateTestTableDescriptor(context.Background(), 1, 100, s, + sqlbase.NewDefaultPrivilegeDescriptor(sqlbase.AdminRole)) if err != nil { t.Fatalf("%d (%s): %v", i, d.sql, err) } @@ -308,7 +310,8 @@ func TestPrimaryKeyUnspecified(t *testing.T) { defer leaktest.AfterTest(t)() defer log.Scope(t).Close(t) s := "CREATE TABLE foo.test (a INT, b INT, CONSTRAINT c UNIQUE (b))" - desc, err := CreateTestTableDescriptor(context.Background(), 1, 100, s, sqlbase.NewDefaultPrivilegeDescriptor()) + desc, err := CreateTestTableDescriptor(context.Background(), 1, 100, s, + sqlbase.NewDefaultPrivilegeDescriptor(sqlbase.AdminRole)) if err != nil { t.Fatal(err) } diff --git a/pkg/sql/tests/system_table_test.go b/pkg/sql/tests/system_table_test.go index c5c7cf849342..2acc4057d78a 100644 --- a/pkg/sql/tests/system_table_test.go +++ b/pkg/sql/tests/system_table_test.go @@ -20,6 +20,7 @@ import ( "github.com/cockroachdb/cockroach/pkg/config/zonepb" "github.com/cockroachdb/cockroach/pkg/keys" "github.com/cockroachdb/cockroach/pkg/roachpb" + "github.com/cockroachdb/cockroach/pkg/security" "github.com/cockroachdb/cockroach/pkg/sql" "github.com/cockroachdb/cockroach/pkg/sql/privilege" "github.com/cockroachdb/cockroach/pkg/sql/sqlbase" @@ -62,7 +63,7 @@ func TestInitialKeys(t *testing.T) { keys.SystemDatabaseID, keys.MaxReservedDescID, "CREATE TABLE system.x (val INTEGER PRIMARY KEY)", - sqlbase.NewDefaultPrivilegeDescriptor(), + sqlbase.NewDefaultPrivilegeDescriptor(security.NodeUser), ) if err != nil { t.Fatal(err) diff --git a/pkg/sql/virtual_schema.go b/pkg/sql/virtual_schema.go index cff5253da5e3..c4fd9ba1a85c 100644 --- a/pkg/sql/virtual_schema.go +++ b/pkg/sql/virtual_schema.go @@ -16,6 +16,7 @@ import ( "sort" "time" + "github.com/cockroachdb/cockroach/pkg/security" "github.com/cockroachdb/cockroach/pkg/settings/cluster" "github.com/cockroachdb/cockroach/pkg/sql/catalog" "github.com/cockroachdb/cockroach/pkg/sql/opt/constraint" @@ -657,10 +658,12 @@ func NewVirtualSchemaHolder( // all users. However, virtual schemas have more fine-grained access control. // For instance, information_schema will only expose rows to a given user which that // user has access to. -var publicSelectPrivileges = sqlbase.NewPrivilegeDescriptor(sqlbase.PublicRole, privilege.List{privilege.SELECT}) +var publicSelectPrivileges = sqlbase.NewPrivilegeDescriptor( + sqlbase.PublicRole, privilege.List{privilege.SELECT}, security.NodeUser) func initVirtualDatabaseDesc(id sqlbase.ID, name string) *sqlbase.ImmutableDatabaseDescriptor { - return sqlbase.NewInitialDatabaseDescriptorWithPrivileges(id, name, publicSelectPrivileges) + return sqlbase.NewInitialDatabaseDescriptorWithPrivileges( + id, name, publicSelectPrivileges) } // getEntries is part of the VirtualTabler interface.