Update test key length to 2048 to avoid new openssl rejections.

test/ssl/all-ca.crt

@@ -5,71 +5,98 @@ Certificate:
         Signature Algorithm: sha256WithRSAEncryption
         Issuer: C=GB, ST=Derbyshire, L=Derby, O=Mosquitto Project, OU=Testing, CN=Root CA
         Validity
-            Not Before: Sep 10 09:33:42 2019 GMT
-            Not After : Sep  8 09:33:42 2024 GMT
+            Not Before: Feb 25 14:54:18 2020 GMT
+            Not After : Feb 23 14:54:18 2025 GMT
         Subject: C=GB, ST=Derbyshire, O=Mosquitto Project, OU=Testing, CN=Signing CA
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:e3:39:bc:07:48:ed:c3:d2:3e:4f:a0:61:9a:2b:
-                    e9:46:7a:68:33:52:01:1b:7f:45:88:49:05:85:fd:
-                    30:8c:2e:60:17:77:b3:38:c3:06:7c:fc:87:a8:61:
-                    29:03:86:07:20:8f:f8:d2:f0:bb:66:93:33:91:37:
-                    ed:f6:64:b7:46:a5:f6:7d:f7:94:98:52:bc:78:90:
-                    6d:0b:db:61:c6:00:23:79:c2:a6:3b:2b:ee:c7:3d:
-                    96:97:9b:4e:eb:78:56:95:52:13:d4:5f:ea:18:85:
-                    18:0a:d6:d9:cd:4b:b0:15:ef:2f:f0:27:ef:b1:af:
-                    d2:4f:ca:b8:93:c1:2f:2e:4f
+                    00:c1:a1:1a:6e:76:1f:98:b7:1c:7e:d6:67:d5:dc:
+                    92:34:ef:48:22:62:94:56:cb:21:29:c1:88:7c:7a:
+                    62:eb:6d:b9:af:8b:80:75:f4:8e:32:e2:20:e2:fa:
+                    3a:49:c8:20:74:53:83:0f:c1:48:e2:13:3e:48:27:
+                    f2:e5:7d:55:c5:87:8c:41:9e:e2:90:58:8c:09:97:
+                    1e:bc:5a:ce:10:71:b2:66:02:02:9b:0c:d0:24:47:
+                    7a:3a:4d:3a:2e:c0:f0:65:6b:6a:cf:13:13:8a:f0:
+                    6d:a0:a5:80:5f:6b:58:77:ae:91:6e:ba:ab:c5:c0:
+                    24:f7:22:27:a4:bf:47:52:2d:a0:fc:56:b0:19:16:
+                    84:e9:53:ac:1d:7f:29:af:c2:86:44:f5:9b:04:e4:
+                    bf:8f:e1:b8:61:a0:63:55:0a:7a:93:2a:d8:4a:20:
+                    b8:6b:b6:e9:20:c6:2c:c2:93:c2:dc:7a:69:90:8e:
+                    ea:00:5b:0c:66:8a:90:74:b4:d9:01:98:9d:fe:5b:
+                    66:e0:39:19:22:50:0d:76:3d:1c:04:fb:93:4d:6e:
+                    45:da:e8:cc:27:35:2a:a6:35:a8:87:e1:99:32:42:
+                    e8:71:eb:7c:f9:69:70:c7:cf:c5:cc:61:c5:ae:47:
+                    dc:20:86:2b:2b:fe:1c:dd:2c:e9:b0:38:b6:72:8e:
+                    09:e9
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                EA:BE:42:EF:98:17:84:D5:FC:28:89:5A:4B:A5:B6:41:4F:7B:BB:28
+                AA:5A:5B:1C:91:32:9B:3F:9B:C3:42:6C:D2:68:F6:A7:E0:CF:BE:E0
             X509v3 Authority Key Identifier: 
-                keyid:CF:F3:9D:BB:BF:2B:14:D5:A2:E5:EC:41:CF:9C:16:D0:4D:AB:84:04
+                keyid:7A:89:5D:1E:C9:B1:72:2F:38:DB:DE:E7:D3:49:80:2C:01:FA:3B:74
 
             X509v3 Basic Constraints: 
                 CA:TRUE
     Signature Algorithm: sha256WithRSAEncryption
-         0f:7d:4c:71:ef:5e:5d:a2:0e:09:da:37:bd:21:77:73:77:b1:
-         02:7e:56:7d:82:c0:b9:53:77:c3:bb:9b:08:cf:00:b3:73:18:
-         2d:c5:9c:1a:57:8c:2b:46:21:bf:28:2e:f4:6d:12:6a:c3:7f:
-         8c:c6:a5:9b:bf:ed:47:cd:88:58:94:35:1f:5c:1e:a7:0d:17:
-         96:5f:1b:70:ad:da:05:26:0c:52:d1:87:52:3c:e3:e1:23:ac:
-         aa:fa:f3:80:48:52:30:da:59:e2:de:0c:61:95:3c:63:ef:1d:
-         ec:b3:6d:c7:89:e6:e3:65:6c:be:d4:e7:a7:90:8c:f4:ff:1d:
-         65:72
+         d3:8d:e3:33:87:f3:1e:4f:ff:da:1d:f8:61:3f:4a:ae:21:49:
+         cd:ee:b1:e0:62:ab:44:70:a8:29:92:83:8d:33:45:4c:ac:b0:
+         66:a0:e8:32:23:76:ef:aa:89:7d:bc:e1:04:17:a5:d7:39:59:
+         99:ab:d9:bf:0c:fd:c5:b6:ad:6f:45:39:c9:27:f1:3e:c0:af:
+         c3:8e:b1:1f:8f:fc:34:66:31:f4:f1:11:a0:27:99:a2:65:e2:
+         aa:20:a7:98:b6:0e:ff:71:5e:10:e7:ab:1e:33:e7:fb:c8:59:
+         d7:89:7a:3b:d9:a9:9f:48:2f:2e:ff:02:61:cd:86:47:60:61:
+         8e:81:71:68:f0:cd:63:72:b8:d2:7d:22:9d:6b:07:49:3a:0a:
+         f7:8b:94:b3:98:90:3c:9f:e5:78:1b:84:a9:2e:fb:85:64:59:
+         ce:6f:33:05:18:bc:21:df:f5:7c:10:79:d6:58:34:61:0e:1f:
+         d5:af:b6:a0:8f:86:ce:56:d1:67:4f:b8:7e:50:2d:ba:77:37:
+         50:0f:91:06:dc:a8:7f:3c:8b:2b:8b:47:df:e3:7e:2f:79:81:
+         22:70:eb:f9:14:f3:66:73:17:33:e4:26:7e:47:df:80:89:de:
+         a5:e8:5a:a9:c0:4b:3e:1b:9b:11:4b:3b:b4:8b:6a:9d:6c:ce:
+         39:f5:04:c9
 -----BEGIN CERTIFICATE-----
-MIICnTCCAgagAwIBAgIBATANBgkqhkiG9w0BAQsFADByMQswCQYDVQQGEwJHQjET
+MIIDojCCAoqgAwIBAgIBATANBgkqhkiG9w0BAQsFADByMQswCQYDVQQGEwJHQjET
 MBEGA1UECAwKRGVyYnlzaGlyZTEOMAwGA1UEBwwFRGVyYnkxGjAYBgNVBAoMEU1v
 c3F1aXR0byBQcm9qZWN0MRAwDgYDVQQLDAdUZXN0aW5nMRAwDgYDVQQDDAdSb290
-IENBMB4XDTE5MDkxMDA5MzM0MloXDTI0MDkwODA5MzM0MlowZTELMAkGA1UEBhMC
+IENBMB4XDTIwMDIyNTE0NTQxOFoXDTI1MDIyMzE0NTQxOFowZTELMAkGA1UEBhMC
 R0IxEzARBgNVBAgMCkRlcmJ5c2hpcmUxGjAYBgNVBAoMEU1vc3F1aXR0byBQcm9q
-ZWN0MRAwDgYDVQQLDAdUZXN0aW5nMRMwEQYDVQQDDApTaWduaW5nIENBMIGfMA0G
-CSqGSIb3DQEBAQUAA4GNADCBiQKBgQDjObwHSO3D0j5PoGGaK+lGemgzUgEbf0WI
-SQWF/TCMLmAXd7M4wwZ8/IeoYSkDhgcgj/jS8LtmkzORN+32ZLdGpfZ995SYUrx4
-kG0L22HGACN5wqY7K+7HPZaXm07reFaVUhPUX+oYhRgK1tnNS7AV7y/wJ++xr9JP
-yriTwS8uTwIDAQABo1AwTjAdBgNVHQ4EFgQU6r5C75gXhNX8KIlaS6W2QU97uygw
-HwYDVR0jBBgwFoAUz/Odu78rFNWi5exBz5wW0E2rhAQwDAYDVR0TBAUwAwEB/zAN
-BgkqhkiG9w0BAQsFAAOBgQAPfUxx715dog4J2je9IXdzd7ECflZ9gsC5U3fDu5sI
-zwCzcxgtxZwaV4wrRiG/KC70bRJqw3+MxqWbv+1HzYhYlDUfXB6nDReWXxtwrdoF
-JgxS0YdSPOPhI6yq+vOASFIw2lni3gxhlTxj7x3ss23HiebjZWy+1OenkIz0/x1l
-cg==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 -----END CERTIFICATE-----
 -----BEGIN CERTIFICATE-----
-MIICvTCCAiagAwIBAgIUCq9EuGevQyFmQpXhKjTK8l6q2VYwDQYJKoZIhvcNAQEL
+MIIDwjCCAqqgAwIBAgIURMxcSM9J+pY3g2SE3qoM34dHwPkwDQYJKoZIhvcNAQEL
 BQAwcjELMAkGA1UEBhMCR0IxEzARBgNVBAgMCkRlcmJ5c2hpcmUxDjAMBgNVBAcM
 BURlcmJ5MRowGAYDVQQKDBFNb3NxdWl0dG8gUHJvamVjdDEQMA4GA1UECwwHVGVz
-dGluZzEQMA4GA1UEAwwHUm9vdCBDQTAeFw0xOTA5MTAwOTMzNDJaFw0yOTA5MDcw
-OTMzNDJaMHIxCzAJBgNVBAYTAkdCMRMwEQYDVQQIDApEZXJieXNoaXJlMQ4wDAYD
+dGluZzEQMA4GA1UEAwwHUm9vdCBDQTAeFw0yMDAyMjUxNDU0MThaFw0zMDAyMjIx
+NDU0MThaMHIxCzAJBgNVBAYTAkdCMRMwEQYDVQQIDApEZXJieXNoaXJlMQ4wDAYD
 VQQHDAVEZXJieTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3QxEDAOBgNVBAsM
-B1Rlc3RpbmcxEDAOBgNVBAMMB1Jvb3QgQ0EwgZ8wDQYJKoZIhvcNAQEBBQADgY0A
-MIGJAoGBAOGwkYR+cUbrn3AGkbdFImPx4tnYIsqT+MwGDNmQ33Q4Ng9ZwEJhsT2C
-qGl0Txsj1HLo3goAFU/lZcvedtLT3sZKw1Jamwc7SS3H15Et9Ne9kQczaLekr74d
-NpRWvgJMy3+YkBHsB04vFA45ruc4F7UnpljaovJ4sVadx0FyWdxbAgMBAAGjUDBO
-MB0GA1UdDgQWBBTP8527vysU1aLl7EHPnBbQTauEBDAfBgNVHSMEGDAWgBTP8527
-vysU1aLl7EHPnBbQTauEBDAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUAA4GB
-ABRmECRQbiR9m27Qg8x8Auwus2xdxZTlKz2n8WV1HN8jE2b22g9kqAcamqcQXWYU
-JklO18dNdpI2rpJa/rSi/Wcakp2STUnV03kqw7IZWyzCaDNZLRWWDHqsJhH91jzv
-jFOhj81GLFVsAwsiTMV2FFk9XzYVpiV2syC7EgFvtjzH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 -----END CERTIFICATE-----

test/ssl/client-encrypted.crt

@@ -5,22 +5,31 @@ Certificate:
         Signature Algorithm: sha256WithRSAEncryption
         Issuer: C=GB, ST=Derbyshire, O=Mosquitto Project, OU=Testing, CN=Signing CA
         Validity
-            Not Before: Sep 10 09:33:43 2019 GMT
-            Not After : Sep  8 09:33:43 2024 GMT
+            Not Before: Feb 25 14:54:19 2020 GMT
+            Not After : Feb 23 14:54:19 2025 GMT
         Subject: C=GB, ST=Nottinghamshire, L=Nottingham, O=Server, OU=Production, CN=test client encrypted
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:b2:3b:8d:2d:d4:22:ee:5f:ea:f5:e5:eb:46:a5:
-                    10:0c:98:68:9f:d3:e1:bd:63:ca:e0:78:49:7c:54:
-                    96:49:a3:18:d6:a2:85:1e:7e:c1:65:3c:ba:14:93:
-                    ff:1c:6f:43:f9:43:30:32:04:23:92:2f:1a:9f:a5:
-                    f4:31:a1:d6:fd:b0:65:f6:e9:77:81:64:b6:2e:6e:
-                    00:71:da:0b:78:22:82:ba:e9:40:bb:a4:43:68:a1:
-                    28:b3:02:69:97:f9:21:55:c8:80:5c:8a:73:41:db:
-                    4f:a4:0e:8a:52:45:a4:a4:d7:9a:8c:9b:c0:7c:b6:
-                    ec:dd:78:eb:93:c3:d2:f1:b5
+                    00:b3:5c:d2:08:93:da:a7:4e:a7:39:74:b0:a2:cd:
+                    ce:f7:02:03:74:5d:f1:de:db:ff:51:68:d8:02:51:
+                    1e:80:ac:aa:7c:90:c1:32:c9:7a:e5:ac:c4:bb:c5:
+                    6a:c4:2b:96:3f:14:db:a2:b3:89:b6:24:ec:2f:80:
+                    8a:a3:3b:89:89:29:c1:6a:de:ec:70:b0:9b:cb:92:
+                    cf:a1:25:0f:d1:9e:cf:be:71:63:b6:82:85:42:83:
+                    e9:bf:38:56:8c:f1:75:a7:7f:76:14:50:4c:67:bb:
+                    53:a2:97:cf:5e:35:bd:fc:bb:c6:fd:aa:6e:fb:d7:
+                    fc:9e:64:74:61:6f:ea:48:c0:c1:01:2c:69:f9:20:
+                    0e:6a:d1:d3:a1:a3:3f:f7:0d:88:71:93:27:47:5f:
+                    94:d4:27:c5:9f:4b:be:86:0b:7f:73:dd:97:28:91:
+                    f0:aa:f0:09:de:a7:b6:1b:d7:ca:91:34:b0:b9:95:
+                    2c:0f:14:1a:ce:da:84:bd:60:5e:f4:f0:f0:87:71:
+                    93:44:70:88:3e:1c:2f:4e:16:a5:3c:9c:40:09:a0:
+                    22:bd:b4:96:61:cb:e7:58:40:98:6e:61:d3:7f:ae:
+                    bf:6d:9a:d1:6b:04:c3:55:bd:93:da:95:0d:06:65:
+                    65:19:3e:bc:d8:80:12:8f:d8:74:9a:20:5e:db:b6:
+                    b1:29
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: 
@@ -28,34 +37,46 @@ Certificate:
             Netscape Comment: 
                 OpenSSL Generated Certificate
             X509v3 Subject Key Identifier: 
-                12:37:21:26:74:8E:0E:22:74:95:FF:92:EC:7F:D7:3C:20:C9:B3:55
+                A4:B3:5E:21:A5:51:C7:37:ED:86:36:79:88:D7:36:88:FE:D0:3F:5D
             X509v3 Authority Key Identifier: 
-                keyid:EA:BE:42:EF:98:17:84:D5:FC:28:89:5A:4B:A5:B6:41:4F:7B:BB:28
+                keyid:AA:5A:5B:1C:91:32:9B:3F:9B:C3:42:6C:D2:68:F6:A7:E0:CF:BE:E0
 
     Signature Algorithm: sha256WithRSAEncryption
-         54:e6:ae:58:21:74:be:ac:e8:0a:3e:da:4e:87:56:05:c2:51:
-         a8:6a:0c:83:dc:89:30:b8:3f:38:83:18:ed:4a:ce:d7:1d:0e:
-         62:a7:eb:ec:97:4e:cc:db:c0:1d:12:c6:82:47:a7:a1:e7:1a:
-         b5:c0:2e:cf:a6:1b:d3:56:a9:f4:69:48:7d:f1:79:de:36:da:
-         31:93:06:85:27:be:e8:94:57:64:ee:c9:fd:8e:d3:b1:65:19:
-         c7:d9:c0:6f:0e:bc:e5:92:09:b4:1f:4a:c6:59:20:15:3f:d3:
-         8d:52:08:15:d0:e2:4f:71:c3:cc:b7:1e:20:1a:a3:ac:52:86:
-         17:a4
+         79:90:68:9b:1f:92:48:63:e4:bd:4d:1c:65:a5:b2:25:71:92:
+         b4:13:41:b9:9b:fc:50:0b:38:65:34:17:da:22:9c:9f:8e:2b:
+         a9:25:06:02:00:49:89:c4:cb:cc:6e:3d:b5:09:15:9f:f9:25:
+         e7:a1:61:51:20:9f:68:f3:42:e3:41:70:a8:4a:7a:11:31:3d:
+         55:f5:20:49:d2:12:f5:1d:f6:c5:11:48:e5:c2:e8:47:bc:e1:
+         d6:e1:a9:d9:f8:d7:78:18:b5:f5:9b:dd:cf:05:88:9e:06:59:
+         54:a5:b8:1e:db:3e:51:12:28:f4:c3:ff:cb:a3:77:19:b2:86:
+         05:6e:e0:82:77:7f:5f:cd:79:48:c1:bb:39:3b:67:a9:7d:0a:
+         65:24:de:ba:3e:01:a0:be:af:10:88:88:ec:24:b7:8f:ad:49:
+         b0:b6:cf:ee:65:bd:78:39:c7:53:0e:a1:32:58:62:af:4c:54:
+         7d:3d:4a:20:ea:c7:b7:15:08:1a:29:f7:40:ab:a2:46:10:b5:
+         e5:39:31:88:97:6d:54:fd:d5:9c:24:d1:88:e7:3f:97:b8:75:
+         54:f6:83:c3:de:13:c5:55:5a:df:da:af:d2:f8:d9:3a:c1:83:
+         75:a7:1c:c3:17:13:b8:94:54:73:65:11:87:11:e3:d8:5e:48:
+         df:32:95:95
 -----BEGIN CERTIFICATE-----
-MIIC2TCCAkKgAwIBAgIBBjANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJHQjET
+MIID3jCCAsagAwIBAgIBBjANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJHQjET
 MBEGA1UECAwKRGVyYnlzaGlyZTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3Qx
-EDAOBgNVBAsMB1Rlc3RpbmcxEzARBgNVBAMMClNpZ25pbmcgQ0EwHhcNMTkwOTEw
-MDkzMzQzWhcNMjQwOTA4MDkzMzQzWjCBgjELMAkGA1UEBhMCR0IxGDAWBgNVBAgM
+EDAOBgNVBAsMB1Rlc3RpbmcxEzARBgNVBAMMClNpZ25pbmcgQ0EwHhcNMjAwMjI1
+MTQ1NDE5WhcNMjUwMjIzMTQ1NDE5WjCBgjELMAkGA1UEBhMCR0IxGDAWBgNVBAgM
 D05vdHRpbmdoYW1zaGlyZTETMBEGA1UEBwwKTm90dGluZ2hhbTEPMA0GA1UECgwG
 U2VydmVyMRMwEQYDVQQLDApQcm9kdWN0aW9uMR4wHAYDVQQDDBV0ZXN0IGNsaWVu
-dCBlbmNyeXB0ZWQwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBALI7jS3UIu5f
-6vXl60alEAyYaJ/T4b1jyuB4SXxUlkmjGNaihR5+wWU8uhST/xxvQ/lDMDIEI5Iv
-Gp+l9DGh1v2wZfbpd4Fkti5uAHHaC3gigrrpQLukQ2ihKLMCaZf5IVXIgFyKc0Hb
-T6QOilJFpKTXmoybwHy27N1465PD0vG1AgMBAAGjezB5MAkGA1UdEwQCMAAwLAYJ
-YIZIAYb4QgENBB8WHU9wZW5TU0wgR2VuZXJhdGVkIENlcnRpZmljYXRlMB0GA1Ud
-DgQWBBQSNyEmdI4OInSV/5Lsf9c8IMmzVTAfBgNVHSMEGDAWgBTqvkLvmBeE1fwo
-iVpLpbZBT3u7KDANBgkqhkiG9w0BAQsFAAOBgQBU5q5YIXS+rOgKPtpOh1YFwlGo
-agyD3IkwuD84gxjtSs7XHQ5ip+vsl07M28AdEsaCR6eh5xq1wC7PphvTVqn0aUh9
-8XneNtoxkwaFJ77olFdk7sn9jtOxZRnH2cBvDrzlkgm0H0rGWSAVP9ONUggV0OJP
-ccPMtx4gGqOsUoYXpA==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 -----END CERTIFICATE-----

test/ssl/client-encrypted.key

@@ -1,18 +1,30 @@
 -----BEGIN RSA PRIVATE KEY-----
 Proc-Type: 4,ENCRYPTED
-DEK-Info: DES-EDE3-CBC,8AEA93E5EEF22B76
+DEK-Info: DES-EDE3-CBC,D72CFBC7CD65D7FB
 
-rNTuFZJw1I+Bvsu4dOcaXFSRvSHHW0f3Sw169Hm5vbAmx6kq6lL8bD1t85aU/1uE
-5ACZ/ZlpxID1EEWfKBHdbHnTL5rQ7BJ/dGD4WuNGk6Wo8KvYUFaSHec1Up3KG1PW
-EXLsJtcH8iu+OBnVVTEPn+tQYUICCLiAnvBWXFmb5uWHi8mk2S+2jEYcy9H1Ixmr
-cLhluK2h6F3uzS+V3uonkjIEty6Rw3oeSe0Nq8Wd74lOzgrPjalVypryJIcfJQ/u
-TqZhMhSRQTBbmyKA1AwrOwLFmWhHzQVy+zRwRqvR2qKILyIPTdIWaAOPZjDpynVH
-qRL3pXvhrJ4W/r6rx3Irbm9dWgRSmLb7eVkOPYau/qXlxTWm/QA0QXFexXg16iVe
-VonEjffgJA2zUF6u7a5mde8bue3c++3SLGPig5GBbbw/ZN5DmnzY6eQXb2U/tKrt
-Gl3MSCUFeG4jPF0rTJ4isdgYaQEvx66UaJ/bJ08eIGVryha8az6sEit1fpSb3xQC
-/wzthbkkqAB9N+ubVeZ2uogM2waukWc8usB8eIZ1jWzNBaJP8Dl87mHBM3dJCwRH
-yTctPZBeylLZP7f46IN3jo/MpNIxOrRrgOJB+RG/p/GnF2+k5/RZgmsrnnc4Dy5B
-s1UeEdx2W62+apf85gEy9BBFgPxbDoQC9Bkr7DysxEQzNujLQY+WJXhnotfAOPeE
-d0NNYYZERw0GzU5Di7eiHQjnwB2cIQCOhmMesek+ijyVr3gmM6Mh5It+F3zHXktB
-N1Br+IyuHDRdAOeJMx7FbU19/iu3vOVVPPd7R+D+prDStwRThzJGsw==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 -----END RSA PRIVATE KEY-----

test/ssl/client-expired.crt

@@ -10,17 +10,26 @@ Certificate:
         Subject: C=GB, ST=Nottinghamshire, L=Nottingham, O=Server, OU=Production, CN=test client expired
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:e3:03:9f:6f:4f:8b:c6:57:bd:04:88:10:bc:04:
-                    e2:c4:a8:cd:a5:3a:ad:46:1e:e7:46:53:d6:f2:3f:
-                    93:92:cb:2c:31:7f:17:77:44:2f:cf:61:50:9f:ff:
-                    e9:3d:b7:2a:82:84:7e:be:01:3a:17:e5:7b:78:b1:
-                    b5:ab:0f:15:05:3f:85:cf:a7:11:33:c7:8b:9d:a6:
-                    8b:8b:3f:6e:61:fb:68:9b:0b:00:fe:9b:2d:a2:6f:
-                    0c:ea:d4:79:c7:11:94:e6:0d:e2:b8:3c:4f:08:3e:
-                    0a:1d:7d:89:e7:69:2d:06:35:e5:9e:b5:df:16:f8:
-                    56:c5:77:f2:e2:62:cc:10:87
+                    00:d0:5a:fb:75:01:67:ef:ce:6a:66:1b:44:11:68:
+                    0d:49:d1:8e:68:39:f3:a8:71:38:c3:1f:7b:ff:77:
+                    b7:0f:2e:e8:87:db:be:48:5c:12:6f:ba:fd:3c:22:
+                    ec:7b:dd:2f:47:42:c5:db:9a:1b:8e:c3:9e:3e:c1:
+                    59:53:19:69:7d:37:f8:70:75:b4:eb:28:09:4e:88:
+                    dd:b1:0f:21:fc:4b:33:98:2a:9a:e6:ed:8d:2a:7b:
+                    b4:b7:c9:53:28:c8:76:69:35:f2:2e:3d:31:2c:4b:
+                    51:f9:2c:73:b9:ab:26:01:7e:8c:ef:7f:33:ee:99:
+                    ca:ad:61:9f:60:3d:ac:11:c8:09:7b:fd:31:dd:7e:
+                    7e:d8:68:69:49:a8:2e:29:f0:9f:61:24:b7:63:5d:
+                    98:93:73:96:7e:6f:a6:c2:3b:05:05:9c:82:eb:87:
+                    dd:f4:56:02:c2:ef:1e:34:02:0a:9c:9d:9a:7e:0c:
+                    67:9b:91:74:a0:6e:5e:f6:52:5b:f7:f3:b7:0e:fe:
+                    4e:0e:10:e4:fa:dc:4b:91:62:b4:49:42:6d:ea:84:
+                    87:4a:89:8e:0d:8a:42:f2:6c:82:a1:93:bd:4d:a2:
+                    f0:ad:0f:ba:f7:6f:60:b7:7a:1b:9a:b5:e6:41:92:
+                    d7:3b:37:c6:79:b1:70:9a:6b:35:6a:42:3a:f1:20:
+                    90:b7
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: 
@@ -28,34 +37,46 @@ Certificate:
             Netscape Comment: 
                 OpenSSL Generated Certificate
             X509v3 Subject Key Identifier: 
-                04:E8:D6:25:43:18:36:C9:BD:DA:3A:EE:34:CC:1A:49:CB:35:07:5F
+                74:67:BC:4D:15:27:BF:FF:E6:FF:20:B2:FE:9E:D5:B4:A2:57:D1:78
             X509v3 Authority Key Identifier: 
-                keyid:EA:BE:42:EF:98:17:84:D5:FC:28:89:5A:4B:A5:B6:41:4F:7B:BB:28
+                keyid:AA:5A:5B:1C:91:32:9B:3F:9B:C3:42:6C:D2:68:F6:A7:E0:CF:BE:E0
 
     Signature Algorithm: sha256WithRSAEncryption
-         45:3c:cf:52:b5:ce:52:a8:98:da:ed:f4:cc:81:42:d3:87:6e:
-         29:da:ee:0a:62:02:96:78:04:f9:e7:c6:e0:55:fc:50:b6:4e:
-         73:52:c9:44:2e:22:21:ec:70:e0:d6:b9:13:f5:1c:c0:86:b5:
-         26:d9:75:69:3c:a9:b0:71:13:aa:2a:f9:f1:86:1d:82:66:1a:
-         cc:56:4e:3a:7a:d9:20:88:80:e5:42:02:b8:3a:8c:26:8a:57:
-         f7:5c:5a:a3:15:4e:74:06:a0:3c:ea:1f:67:53:d1:60:a3:5e:
-         c2:75:17:32:b8:35:08:a7:d8:36:3c:13:1f:9c:97:18:b5:69:
-         9f:66
+         62:fd:1a:03:bc:1a:45:d0:ac:c1:4c:61:08:d0:df:d4:3f:8e:
+         85:f5:6c:ca:f0:ac:75:f9:56:54:f2:e2:17:95:e2:40:be:b3:
+         cf:6e:c9:ff:db:12:cb:cd:c9:21:9a:79:35:45:2b:98:e7:38:
+         4d:a8:f1:39:db:5f:e4:fd:7e:f3:da:24:77:86:3a:1c:ab:f1:
+         60:af:33:ed:5b:7a:e8:cb:18:0c:7c:d7:32:af:50:8b:9d:74:
+         53:38:2f:31:9b:16:fc:99:c5:36:b7:4a:bd:96:38:27:96:b2:
+         ba:9b:87:8e:48:2a:d7:3d:40:00:8f:54:8e:00:c7:8d:b8:97:
+         0c:3d:d5:67:5c:31:8d:ac:40:7a:27:86:a7:88:ac:90:ac:eb:
+         ae:e3:35:dd:b2:03:ae:8b:c0:9d:a3:32:ac:d7:39:f2:b7:d2:
+         f8:d2:f8:76:4d:77:cf:df:fd:e6:d6:7c:df:67:3d:21:01:e2:
+         45:d2:59:47:e6:f6:08:99:13:7b:ac:f9:ec:51:0d:8e:68:83:
+         7c:82:84:3d:03:24:dd:db:4c:8d:5a:44:8f:93:de:ea:14:b5:
+         8e:e4:65:02:a4:98:4a:20:eb:07:01:b0:80:9e:2c:52:00:c8:
+         f2:9e:60:8e:72:67:57:97:44:7f:65:f7:2b:19:95:e6:c3:38:
+         80:39:66:cd
 -----BEGIN CERTIFICATE-----
-MIIC1zCCAkCgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJHQjET
+MIID3DCCAsSgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJHQjET
 MBEGA1UECAwKRGVyYnlzaGlyZTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3Qx
 EDAOBgNVBAsMB1Rlc3RpbmcxEzARBgNVBAMMClNpZ25pbmcgQ0EwHhcNMTIwODIw
 MDAwMDAwWhcNMTIwODIxMDAwMDAwWjCBgDELMAkGA1UEBhMCR0IxGDAWBgNVBAgM
 D05vdHRpbmdoYW1zaGlyZTETMBEGA1UEBwwKTm90dGluZ2hhbTEPMA0GA1UECgwG
 U2VydmVyMRMwEQYDVQQLDApQcm9kdWN0aW9uMRwwGgYDVQQDDBN0ZXN0IGNsaWVu
-dCBleHBpcmVkMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDjA59vT4vGV70E
-iBC8BOLEqM2lOq1GHudGU9byP5OSyywxfxd3RC/PYVCf/+k9tyqChH6+AToX5Xt4
-sbWrDxUFP4XPpxEzx4udpouLP25h+2ibCwD+my2ibwzq1HnHEZTmDeK4PE8IPgod
-fYnnaS0GNeWetd8W+FbFd/LiYswQhwIDAQABo3sweTAJBgNVHRMEAjAAMCwGCWCG
-SAGG+EIBDQQfFh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4E
-FgQUBOjWJUMYNsm92jruNMwaScs1B18wHwYDVR0jBBgwFoAU6r5C75gXhNX8KIla
-S6W2QU97uygwDQYJKoZIhvcNAQELBQADgYEARTzPUrXOUqiY2u30zIFC04duKdru
-CmIClngE+efG4FX8ULZOc1LJRC4iIexw4Na5E/UcwIa1Jtl1aTypsHETqir58YYd
-gmYazFZOOnrZIIiA5UICuDqMJopX91xaoxVOdAagPOofZ1PRYKNewnUXMrg1CKfY
-NjwTH5yXGLVpn2Y=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 -----END CERTIFICATE-----

test/ssl/client-expired.key

@@ -1,15 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIICXQIBAAKBgQDjA59vT4vGV70EiBC8BOLEqM2lOq1GHudGU9byP5OSyywxfxd3
-RC/PYVCf/+k9tyqChH6+AToX5Xt4sbWrDxUFP4XPpxEzx4udpouLP25h+2ibCwD+
-my2ibwzq1HnHEZTmDeK4PE8IPgodfYnnaS0GNeWetd8W+FbFd/LiYswQhwIDAQAB
-AoGAbh8AxS8yH4nKIBuc+ofoNPupniAjk6NED0J2P1cF0CyMiIodKPbDtnZ/dM3g
-J9blYSDClorj0lm4lmimNo9/Yv0YEohdFBKAtpfwVufzpR3G9+JbuVpEueTnESpH
-iIkhZoCU5EBZoTkNvqvEZkxv6cBCM9riHuBp09Nxf6u9Y3kCQQD++HaG2Vmuo7Tg
-oFLL7G16oHVwAYaiguP9OPcwIfyBYLbYEETgAvZ8oSt6A89TjphtnWdK/zDHiXrW
-TNdGRYfLAkEA4+5DnSY0iAJei4vOfBp2baHPrHFoOHV/tbpLrZ0oZRMdiPIhgQSX
-BTqpSWM1r+WUfWKi2LAiFN6u5nB15RtqtQJBAMjpjKxx9ONSiKNAcj3SjepFKoUa
-DrdcIL9W9iFthoWEalATcdJ7QzOt5I5/Fg4nnSEzGUPVluCFCtB3OGNdQsUCQEAY
-+w6wdclh0TCxCkpALtm5zWsTIVnvQRDb6PhT3848x+uBHAbqQYYI7x5iNfDXQSDZ
-oi4JqivwS4MmUSEyypkCQQCjYN5UYQBqDlD9zf5MTS1mEGpKW5RsDNXjX/eEMYJT
-/Dsa3EMYRLCmZxL4FiLZ8GOAxljf9rSkScybxU8XBh0u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 -----END RSA PRIVATE KEY-----

test/ssl/client-revoked.crt

@@ -5,22 +5,31 @@ Certificate:
         Signature Algorithm: sha256WithRSAEncryption
         Issuer: C=GB, ST=Derbyshire, O=Mosquitto Project, OU=Testing, CN=Signing CA
         Validity
-            Not Before: Sep 10 09:33:42 2019 GMT
-            Not After : Sep  8 09:33:42 2024 GMT
+            Not Before: Feb 25 14:54:19 2020 GMT
+            Not After : Feb 23 14:54:19 2025 GMT
         Subject: C=GB, ST=Nottinghamshire, L=Nottingham, O=Server, OU=Production, CN=test client revoked
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:c8:e5:d4:6f:72:06:f8:fa:b1:7a:d0:05:db:ea:
-                    13:1a:18:b6:c1:95:b3:d5:af:50:de:59:e4:2b:5a:
-                    c3:b8:3f:d9:09:13:6e:42:64:89:8c:f1:42:29:c4:
-                    75:41:d4:a7:15:6e:76:0d:15:0a:73:7b:b6:54:24:
-                    8a:44:b1:19:ad:8d:15:5f:c9:d8:a0:ea:94:2d:9e:
-                    9d:ab:0a:d7:f1:5c:8f:ae:16:55:65:cf:d9:62:bb:
-                    93:5e:b5:94:1f:b2:d0:7d:3d:d1:45:ed:32:18:5b:
-                    73:d0:f7:f1:91:9d:18:d2:f9:62:fa:f7:2b:d4:05:
-                    72:30:83:a3:9a:96:01:1b:41
+                    00:d3:04:65:0d:da:e3:e6:66:d2:cc:40:05:24:fe:
+                    17:67:40:bb:6c:35:dd:18:2c:70:7e:20:d1:00:26:
+                    56:b7:1b:4e:e6:3e:8c:6c:0d:e4:d2:c0:dd:71:30:
+                    02:f7:a0:83:79:0f:15:94:cd:a3:aa:c7:d4:e3:15:
+                    af:0a:1a:b3:b8:54:b8:eb:f3:6b:72:3b:d3:f4:0b:
+                    c6:4c:a9:79:58:95:53:a3:4a:31:81:97:31:a1:67:
+                    f7:4d:9c:8b:02:b2:8d:79:b2:b1:87:3f:35:75:7e:
+                    d1:04:6b:fb:7f:44:d7:3c:c2:4b:73:99:ee:61:a0:
+                    54:2f:47:a4:62:e3:e6:0c:bb:1a:88:8c:a1:94:8f:
+                    b5:79:d5:bb:be:75:f8:a7:e1:56:8b:dc:0f:90:9b:
+                    94:45:50:fd:0b:7c:a9:bf:17:5a:0a:02:b4:15:3c:
+                    88:fa:93:5f:1b:20:8a:c3:aa:c8:18:d1:02:27:38:
+                    34:38:8c:ed:f7:58:50:20:53:9e:29:5e:3c:e9:f6:
+                    cc:98:37:1c:e4:24:7f:2f:44:39:42:31:7c:30:13:
+                    0f:42:2c:c8:e1:53:ac:05:4b:e3:bd:7b:05:7a:d3:
+                    c1:14:ee:c3:06:75:64:5d:11:a6:be:4d:53:8d:06:
+                    04:1f:1e:14:a7:8b:53:b9:aa:c3:97:c9:3c:8a:45:
+                    6b:05
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: 
@@ -28,34 +37,46 @@ Certificate:
             Netscape Comment: 
                 OpenSSL Generated Certificate
             X509v3 Subject Key Identifier: 
-                EB:4B:4C:32:62:0A:82:9B:7D:F3:9F:61:1F:2B:E8:2C:93:21:63:BF
+                4B:8F:CC:F4:64:26:0C:0A:37:2B:D1:18:76:9D:AF:B7:D6:19:47:92
             X509v3 Authority Key Identifier: 
-                keyid:EA:BE:42:EF:98:17:84:D5:FC:28:89:5A:4B:A5:B6:41:4F:7B:BB:28
+                keyid:AA:5A:5B:1C:91:32:9B:3F:9B:C3:42:6C:D2:68:F6:A7:E0:CF:BE:E0
 
     Signature Algorithm: sha256WithRSAEncryption
-         9c:01:dd:df:a4:8f:13:51:55:fd:91:63:d3:50:64:03:d6:7d:
-         de:ea:63:8a:80:72:6f:86:18:4b:60:ba:a5:9d:53:6b:6f:ac:
-         a7:e2:09:b5:93:3b:47:53:9a:76:37:f8:35:4a:8e:a0:89:93:
-         ef:ad:a9:2b:46:61:0d:67:14:5e:9b:b5:5c:dc:c3:2a:4c:97:
-         f0:79:06:33:a5:9c:ec:a3:1d:d1:03:44:ec:f4:06:bc:45:9d:
-         47:a0:d4:db:6f:c8:59:d2:2c:5d:38:cc:84:98:0c:61:2d:67:
-         fe:9e:d5:d4:c7:75:a1:ee:f0:aa:bf:c1:23:09:db:45:ee:76:
-         14:22
+         13:0e:0b:71:b7:f3:53:f9:4e:7b:19:20:89:4e:a2:bf:e3:a2:
+         5d:66:35:ba:02:ca:b5:b7:39:3f:4f:5b:47:b9:7a:14:c6:83:
+         28:02:2a:fe:68:56:d1:08:8d:e1:a0:c0:8b:8a:38:92:41:ba:
+         79:11:d4:df:8b:f5:1a:bd:ae:59:97:41:8c:4c:de:28:87:ce:
+         fb:9e:ad:fb:22:48:d4:3d:9c:60:96:e5:35:71:b9:bc:24:ec:
+         11:e5:c8:96:1c:b1:ec:96:26:32:91:ef:a9:d9:d9:b8:3f:92:
+         9e:61:54:d7:b5:2d:f5:ac:89:4a:49:3e:8f:a9:b7:e2:39:7d:
+         98:5f:21:25:0c:71:16:e7:12:d5:e5:9c:01:6b:a8:50:65:ab:
+         48:db:a8:04:c1:ec:3e:ea:2f:54:30:f8:38:0c:90:fc:71:68:
+         56:98:a9:d4:b7:0e:bb:66:a9:fc:24:50:0b:b9:46:cf:45:56:
+         86:0c:7d:b9:e2:9b:ec:36:e4:c9:fd:96:a6:b0:f7:f3:c9:d4:
+         74:8e:6a:68:5a:2e:6d:6f:78:26:af:93:7d:9c:53:73:92:b5:
+         1d:c1:77:52:ea:2d:21:06:b6:3a:71:be:59:c9:51:a8:fe:89:
+         fc:6c:e3:7e:5e:46:93:4c:eb:4f:14:1d:e8:05:99:95:7c:49:
+         40:c9:db:81
 -----BEGIN CERTIFICATE-----
-MIIC1zCCAkCgAwIBAgIBBTANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJHQjET
+MIID3DCCAsSgAwIBAgIBBTANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJHQjET
 MBEGA1UECAwKRGVyYnlzaGlyZTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3Qx
-EDAOBgNVBAsMB1Rlc3RpbmcxEzARBgNVBAMMClNpZ25pbmcgQ0EwHhcNMTkwOTEw
-MDkzMzQyWhcNMjQwOTA4MDkzMzQyWjCBgDELMAkGA1UEBhMCR0IxGDAWBgNVBAgM
+EDAOBgNVBAsMB1Rlc3RpbmcxEzARBgNVBAMMClNpZ25pbmcgQ0EwHhcNMjAwMjI1
+MTQ1NDE5WhcNMjUwMjIzMTQ1NDE5WjCBgDELMAkGA1UEBhMCR0IxGDAWBgNVBAgM
 D05vdHRpbmdoYW1zaGlyZTETMBEGA1UEBwwKTm90dGluZ2hhbTEPMA0GA1UECgwG
 U2VydmVyMRMwEQYDVQQLDApQcm9kdWN0aW9uMRwwGgYDVQQDDBN0ZXN0IGNsaWVu
-dCByZXZva2VkMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDI5dRvcgb4+rF6
-0AXb6hMaGLbBlbPVr1DeWeQrWsO4P9kJE25CZImM8UIpxHVB1KcVbnYNFQpze7ZU
-JIpEsRmtjRVfydig6pQtnp2rCtfxXI+uFlVlz9liu5NetZQfstB9PdFF7TIYW3PQ
-9/GRnRjS+WL69yvUBXIwg6OalgEbQQIDAQABo3sweTAJBgNVHRMEAjAAMCwGCWCG
-SAGG+EIBDQQfFh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4E
-FgQU60tMMmIKgpt9859hHyvoLJMhY78wHwYDVR0jBBgwFoAU6r5C75gXhNX8KIla
-S6W2QU97uygwDQYJKoZIhvcNAQELBQADgYEAnAHd36SPE1FV/ZFj01BkA9Z93upj
-ioByb4YYS2C6pZ1Ta2+sp+IJtZM7R1Oadjf4NUqOoImT762pK0ZhDWcUXpu1XNzD
-KkyX8HkGM6Wc7KMd0QNE7PQGvEWdR6DU22/IWdIsXTjMhJgMYS1n/p7V1Md1oe7w
-qr/BIwnbRe52FCI=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 -----END CERTIFICATE-----

test/ssl/client-revoked.key

@@ -1,15 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIICWwIBAAKBgQDI5dRvcgb4+rF60AXb6hMaGLbBlbPVr1DeWeQrWsO4P9kJE25C
-ZImM8UIpxHVB1KcVbnYNFQpze7ZUJIpEsRmtjRVfydig6pQtnp2rCtfxXI+uFlVl
-z9liu5NetZQfstB9PdFF7TIYW3PQ9/GRnRjS+WL69yvUBXIwg6OalgEbQQIDAQAB
-AoGAdlDNBPmN27KhNegvmy3HJDZr46TL7cw7f0hHlbT10ZxgsPStmhJl5AjuY3Td
-bfDUmk2c3uWGay7v2axPdlcq/DwU3xWXyQlS8jXldhDMJrrhKe+U0IdY2F1BImts
-XS1Xum2opS0B8XebIRIoi5h4q5w2zRqaaLVeVjrxQqprNMECQQD3lWnme2uUSSZK
-KMrsgk7WhZV2HpSneSiwyieBk9ikfq68NI5pDnpiVBZAuDwfgXmZ6CIiLoP2h/qJ
-DWqHflypAkEAz7oiYHaS8w4+Wvcgo5v9iwjWU+F3rPrSfG7XaS0oGnU5+qF+U0F7
-D9mcecFUy0cNyBLpUx53nDP9BcQbq4oQ2QJAHm0YRKDqSaDrubVlqscg1TA5e/iq
-ICK9o2xUipIWz7BZ3PtAfRywYaEf0vhROzX4MbfbagP5Z7SyT2F8tAYNcQJAO4m+
-EKfrtn5+oNP0JvCu2wrNY31cL9g0PDYIx7yJogu3cn6XFoXOH9zfXIZtJ1ZWPOIu
-vgQdhEfiXaS3yZLpAQJAacVbsZN0PGe7SEVbbGarTkXu6evyKUc3H436kP+3M2I4
-5YHtJdURVtWdL5rv9QdQz2HknV5Zz383UoOd6HnD5A==
+MIIEowIBAAKCAQEA0wRlDdrj5mbSzEAFJP4XZ0C7bDXdGCxwfiDRACZWtxtO5j6M
+bA3k0sDdcTAC96CDeQ8VlM2jqsfU4xWvChqzuFS46/NrcjvT9AvGTKl5WJVTo0ox
+gZcxoWf3TZyLArKNebKxhz81dX7RBGv7f0TXPMJLc5nuYaBUL0ekYuPmDLsaiIyh
+lI+1edW7vnX4p+FWi9wPkJuURVD9C3ypvxdaCgK0FTyI+pNfGyCKw6rIGNECJzg0
+OIzt91hQIFOeKV486fbMmDcc5CR/L0Q5QjF8MBMPQizI4VOsBUvjvXsFetPBFO7D
+BnVkXRGmvk1TjQYEHx4Up4tTuarDl8k8ikVrBQIDAQABAoIBAC8u5mGothjImQ3u
+qrfQ0O7XfJD/okZLeYPaVqFP8UfUJVo6Vi+7E5VEZr9uWtt/2qXxB4RUTupa8HEu
+YgtCWTk4SHkJ3taWJhiFoXt20ZlLGn6CkntFkWVj19pUzIh34EZ7/FIfghaZmqcA
+diXJAM+nKjPZEYJm1SwVOt6Z0tC5hRW9R3eCf8dxC6YlPJv9sebi6C9AqKVe6IsG
+98CNFJG7hdgdsMFCzjDfasHreXGZ9w/pG9O+szAloqyM6k8R/3gT1Cx8Qwh6KIMt
+xL1KZyBw3dm7rCBxtozZC8nRzGFNoHWYS44wFxYaN11Y96h+ACLJYD7q6oOL4Oz9
+Kh8hn+kCgYEA/6X8WDbjEv9akZurMa3AOOAsAHb+K/kSyc3pV3C3RMxR2y4z6W4x
+4ZiJePpwsFZR0Ss/wXPnVBo1CEAJxHrBIb5zrzQwYIPFrNL7lPO4oalN0+Xpvo5r
+GIP354Yh1Eb98eLotBpcppI2MiE6z++lvUJ8HGcIuOMNeFEmIRl1E18CgYEA006x
+vMGrzv36ZPPsTkaAU8gLVinqseEggNd90fuOAi9UQ/9k/MjeTYtL/c/3VcIWgHA1
+4Emvt5UUI0Gr3/it+O2cr5snIglrsnAFADaWrzjSMHLpLdHzUfMHCbAJLYO9vYec
+l2vpIcASvR7C1cQzFuBhNZC13uRWtV8O4BvPoBsCgYA/+Tl8mb+ZMW1oopvkgqZn
+lTFtrFlOh7W76ltKFlrGTJrvTlCPSZQR8Cn2rDUm63Lt9PSvZGGvGh/LQLsw/8b0
+usQYQ+cXP+JnrSRn0dWSHtvq+s3TcbA7IksXFOnCRUGnFjFFYJNu24fUY5xkDIRd
+KBYGxYHZQnhMc4InJke14QKBgQCXSb6DkH48IydFZEcJ+/whABbtx/EbDj5BQQf6
+cYrJEa3ZSV+6hO50wojT3jQNmHqX1r8cKGXAoOHcJEa0gs28bhNCv2kTO396MC3E
+a1ETfzEuMve0MJ9vSvr8+qZ3id0td4yr9TzjRyujcAS7HFAfzuKKgWNVhFJ4ZOi3
+l/HdhQKBgE7V2j71No6xkjj9jOguI3TpCFXqQoSa9KhWOVXJrbpfE0K2QxvfQ6WO
+usWDGw9102OdFqfaFf2LE1cbIQe9M35QRrT9AjsZxtoc60XpZEwYS+FFh7po/t2t
+Apb8jiyBBAI9aYNRlWVo/1emnG6QUR45gX0Bu7glr+P4A+aopBi2
 -----END RSA PRIVATE KEY-----

test/ssl/client.crt

@@ -5,22 +5,31 @@ Certificate:
         Signature Algorithm: sha256WithRSAEncryption
         Issuer: C=GB, ST=Derbyshire, O=Mosquitto Project, OU=Testing, CN=Signing CA
         Validity
-            Not Before: Sep 10 09:33:42 2019 GMT
-            Not After : Sep  8 09:33:42 2024 GMT
+            Not Before: Feb 25 14:54:19 2020 GMT
+            Not After : Feb 23 14:54:19 2025 GMT
         Subject: C=GB, ST=Nottinghamshire, L=Nottingham, O=Server, OU=Production, CN=test client
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:ca:37:db:79:24:74:5c:ee:f6:63:a0:50:e9:cc:
-                    7b:52:f4:24:fb:86:5f:ac:9d:c4:7b:d3:df:5b:94:
-                    ca:7e:fd:40:a8:8d:0a:50:7e:49:63:ce:08:84:2e:
-                    e3:ff:a6:a5:79:80:cc:ae:a8:64:33:c5:16:1f:5d:
-                    c8:3f:8c:e2:8c:ce:92:d4:1e:b8:9f:86:42:f3:c8:
-                    7c:b3:85:38:25:2c:e7:11:32:ae:f0:be:17:a3:99:
-                    5e:f2:66:2f:12:18:8d:4c:6b:4b:33:4c:0e:e6:35:
-                    c4:ae:2a:fc:db:b6:b4:3e:80:cd:74:a0:fc:5c:ec:
-                    ec:18:3f:7d:ac:dc:c0:45:7d
+                    00:bf:6a:a5:cd:66:6a:1d:20:48:3a:f1:ff:61:9d:
+                    fd:1f:18:26:a0:43:4c:b0:4c:b9:8d:4e:7d:d0:81:
+                    e0:43:81:9e:70:75:cb:c4:57:49:3c:84:34:51:45:
+                    a2:9f:00:50:20:d6:5f:34:3c:02:bb:69:2f:64:4a:
+                    28:21:e3:95:41:e8:50:04:f3:bf:f2:5a:9e:27:64:
+                    5b:b3:bc:49:96:36:10:56:06:47:1a:ca:db:ad:6f:
+                    e3:f7:83:dc:42:37:28:07:58:a7:6f:26:45:b7:69:
+                    6f:af:28:62:f8:7e:98:98:21:0a:a6:da:ae:d5:4b:
+                    fe:db:09:1a:b4:75:d5:09:3b:13:9e:33:9e:b4:d6:
+                    5e:21:e6:fb:37:09:bb:1a:56:e1:5d:64:bc:5a:77:
+                    99:ac:81:cc:2b:b7:9b:49:b6:e8:ba:2e:32:d9:9e:
+                    8e:4d:2e:fc:17:d0:37:44:0f:35:a9:af:f1:44:bb:
+                    cb:2c:2a:75:f0:7e:ba:b6:1a:73:32:d6:1f:4c:3b:
+                    9b:38:f0:e9:22:06:3c:94:6b:5f:69:e4:be:2f:fa:
+                    9c:c4:9e:7c:c0:dd:c2:3c:53:b8:28:ca:77:a0:96:
+                    6b:9c:cb:3f:44:b1:c5:51:75:89:a0:16:ba:82:63:
+                    f7:c4:24:7f:06:89:58:45:10:69:e4:97:f5:35:fe:
+                    7e:97
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: 
@@ -28,34 +37,46 @@ Certificate:
             Netscape Comment: 
                 OpenSSL Generated Certificate
             X509v3 Subject Key Identifier: 
-                0F:4E:AD:C9:5F:1E:BF:A9:00:B8:0A:0B:D1:48:04:1A:EB:86:25:37
+                36:51:2B:BB:3E:B7:6B:2B:7F:D4:86:AE:67:75:C2:01:54:5B:72:3C
             X509v3 Authority Key Identifier: 
-                keyid:EA:BE:42:EF:98:17:84:D5:FC:28:89:5A:4B:A5:B6:41:4F:7B:BB:28
+                keyid:AA:5A:5B:1C:91:32:9B:3F:9B:C3:42:6C:D2:68:F6:A7:E0:CF:BE:E0
 
     Signature Algorithm: sha256WithRSAEncryption
-         25:2d:ca:89:aa:45:42:3c:61:f8:37:56:fa:22:f0:b6:ab:83:
-         d3:a2:15:d6:cb:64:82:20:79:b1:50:ab:c8:70:02:74:1c:3e:
-         c1:35:5d:e8:bb:1a:db:d1:c2:7d:06:69:e3:ab:03:a1:63:29:
-         11:e6:c1:3e:ef:23:65:32:69:e0:d5:63:07:01:4c:bb:9a:41:
-         5d:8e:a9:58:4e:d8:8f:58:10:2f:37:aa:9d:23:68:e5:ab:82:
-         3c:be:70:1f:e1:33:11:bb:88:62:cd:59:22:80:87:9d:e6:92:
-         38:e8:96:84:89:73:60:c5:d8:20:70:1e:55:97:d4:76:b7:2d:
-         ac:0c
+         32:70:51:f0:c2:35:6f:83:e3:bc:f3:f2:6f:e9:79:e6:a9:51:
+         d0:69:fa:fb:a8:a8:d4:59:c4:c4:ee:9b:59:9a:ce:a8:2e:7e:
+         71:a5:23:4c:27:76:e5:b6:e1:6d:bd:a4:24:f1:38:01:7d:d8:
+         d6:f2:c4:d8:58:b5:59:0d:b9:05:45:62:59:34:54:56:49:c4:
+         2c:f4:bd:17:a0:f2:72:e3:63:c3:69:40:55:e8:a4:57:23:38:
+         e5:5e:f2:b0:3a:ee:27:b4:0e:ca:5e:a9:55:60:db:4d:30:ad:
+         c5:13:d3:a4:ed:49:ff:c3:4a:e5:82:9d:5d:c6:ad:62:d9:49:
+         90:d1:0f:5e:89:1b:d7:f3:c1:3c:45:dc:84:09:b2:77:c2:fe:
+         47:9d:90:d4:f1:6c:54:20:a9:0d:9e:f8:a4:b9:55:c9:22:ef:
+         30:d1:d2:59:ba:ae:c1:d2:60:44:83:7f:0a:eb:36:ed:e2:0e:
+         7c:67:b3:c2:0d:25:bd:75:36:d8:af:ad:62:f8:f4:80:8f:ae:
+         ec:e7:1c:a6:1f:f5:ff:8e:8b:c8:28:03:d3:de:08:4e:26:e1:
+         61:ce:3d:24:93:9b:da:d7:f7:8e:15:5d:32:55:5e:c9:7f:6b:
+         0d:a8:f7:b2:73:85:2a:63:25:93:37:14:ce:64:cc:f6:07:a1:
+         dc:29:f6:53
 -----BEGIN CERTIFICATE-----
-MIICzjCCAjegAwIBAgIBAzANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJHQjET
+MIID0zCCArugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJHQjET
 MBEGA1UECAwKRGVyYnlzaGlyZTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3Qx
-EDAOBgNVBAsMB1Rlc3RpbmcxEzARBgNVBAMMClNpZ25pbmcgQ0EwHhcNMTkwOTEw
-MDkzMzQyWhcNMjQwOTA4MDkzMzQyWjB4MQswCQYDVQQGEwJHQjEYMBYGA1UECAwP
+EDAOBgNVBAsMB1Rlc3RpbmcxEzARBgNVBAMMClNpZ25pbmcgQ0EwHhcNMjAwMjI1
+MTQ1NDE5WhcNMjUwMjIzMTQ1NDE5WjB4MQswCQYDVQQGEwJHQjEYMBYGA1UECAwP
 Tm90dGluZ2hhbXNoaXJlMRMwEQYDVQQHDApOb3R0aW5naGFtMQ8wDQYDVQQKDAZT
 ZXJ2ZXIxEzARBgNVBAsMClByb2R1Y3Rpb24xFDASBgNVBAMMC3Rlc3QgY2xpZW50
-MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDKN9t5JHRc7vZjoFDpzHtS9CT7
-hl+sncR7099blMp+/UCojQpQfkljzgiELuP/pqV5gMyuqGQzxRYfXcg/jOKMzpLU
-HrifhkLzyHyzhTglLOcRMq7wvhejmV7yZi8SGI1Ma0szTA7mNcSuKvzbtrQ+gM10
-oPxc7OwYP32s3MBFfQIDAQABo3sweTAJBgNVHRMEAjAAMCwGCWCGSAGG+EIBDQQf
-Fh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQUD06tyV8e
-v6kAuAoL0UgEGuuGJTcwHwYDVR0jBBgwFoAU6r5C75gXhNX8KIlaS6W2QU97uygw
-DQYJKoZIhvcNAQELBQADgYEAJS3KiapFQjxh+DdW+iLwtquD06IV1stkgiB5sVCr
-yHACdBw+wTVd6Lsa29HCfQZp46sDoWMpEebBPu8jZTJp4NVjBwFMu5pBXY6pWE7Y
-j1gQLzeqnSNo5auCPL5wH+EzEbuIYs1ZIoCHneaSOOiWhIlzYMXYIHAeVZfUdrct
-rAw=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 -----END CERTIFICATE-----

test/ssl/client.key

@@ -1,15 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIICXAIBAAKBgQDKN9t5JHRc7vZjoFDpzHtS9CT7hl+sncR7099blMp+/UCojQpQ
-fkljzgiELuP/pqV5gMyuqGQzxRYfXcg/jOKMzpLUHrifhkLzyHyzhTglLOcRMq7w
-vhejmV7yZi8SGI1Ma0szTA7mNcSuKvzbtrQ+gM10oPxc7OwYP32s3MBFfQIDAQAB
-AoGBAKGiRCtwmBIwb4Dyg7pdV7XWsDjcD11KPeM8Vyw8oh8fDq+rDLOKPd8osGX3
-lQajjWCxMunoby9yOVyY+ZbSZcH6tIp1gqsn2D/deIeJvwF0Y0+qAThb3rL2dF5r
-s/ZtzY7V7M1VsFQz0RagBdJiwudrBy+M7wh/6gWPn0xP9IwBAkEA7srVGiOuP5m2
-wvjyU9T5unPnDOCgnHhqLOHy39ILm9OiMSR2nyrY9s4jZ+0ELD8haaHqsJk2PCTN
-icGd8V3XeQJBANjKURH3df6NNUCqM1eDVHsvHjKL/qtwjKxByHo7ZHcTchGDTNlQ
-sKWGXSuzLEJCtVcPQoeeAMXMvQ6xca3r6SUCQEL1e2YWBUFuT/JCLmlVeiVPZMWW
-o1Lc7SDixuD+HCU45e0TxXOCZ05lpUX6D0Z8+ViOf6m/fJbG1x++vBQ3dTkCQGts
-nY2UnTCdEmVPsY9M8aD08TbE7lZPuDVnh4siQR9MUHrjIEKTXGU5VpPf/i97VNam
-JiaDoghh8tEEFrvDKc0CQHYPQtEElSAtLfW2G3jWvsUfk+cO4kDnzzXn1HJyLKKt
-Qy+zJgnebGJtZSdqH0cpjAJmglx72+ATD2hM5H2Q8c8=
+MIIEpQIBAAKCAQEAv2qlzWZqHSBIOvH/YZ39HxgmoENMsEy5jU590IHgQ4GecHXL
+xFdJPIQ0UUWinwBQINZfNDwCu2kvZEooIeOVQehQBPO/8lqeJ2Rbs7xJljYQVgZH
+GsrbrW/j94PcQjcoB1inbyZFt2lvryhi+H6YmCEKptqu1Uv+2wkatHXVCTsTnjOe
+tNZeIeb7Nwm7GlbhXWS8WneZrIHMK7ebSbboui4y2Z6OTS78F9A3RA81qa/xRLvL
+LCp18H66thpzMtYfTDubOPDpIgY8lGtfaeS+L/qcxJ58wN3CPFO4KMp3oJZrnMs/
+RLHFUXWJoBa6gmP3xCR/BolYRRBp5Jf1Nf5+lwIDAQABAoIBAQCxu6DAG3wkFzl6
+IgFy7nN9T7tty4+Fk3gm0N7Zn/5QMCahXX8ai8Ggw1CgtfvNj0jXdLVplt8ijQRI
+JuMktGB+lerW7k0oByQah4DuXsIlC4YXmjSjmABqBh6yUGlPwk8Uoyi0d+D78JaX
+GPTsrv+ZIfT2AM+dlbbKQqXdMhvhOLHn+p8+j5iX4UMt5UY3wbVH9gu4nTSG2Sce
++OKRbOynCleYtlhpkVx2J2f3szxz/FBGjywX/9EMmJvOg3uvJ74lxYEB3e5RQdnZ
+FAxRlh+S54u1AjqFjUjLtWFgYjrQfmwtEA+GYGDwQK8CZJKEN8ARkNl4SzNu+qj0
+mDfWIzjBAoGBAOhhBCY/k6rwa6RjwArEX4KpTkAISo3esBC8IF7rIDWrvK0c+hqY
+QO8Zdt2vnJNO2e94c7WXLZ90FGan2vD7E9ICEU4fC2Rk3xdMUSpTFToKRvWvD7Z1
+RhOYkOLz904t391UdQrhT3DnIZ+05XbheR9GJWS2SImbCqjlzI3aFTOfAoGBANLf
+tIwf6k676mOigJ0ueNI3/Hz3UbnJFWeqwclgQbpCQpzLeexyKrkTZqslxnge29hb
+JrQrem97WSVC8EqXU3PI/0chRYUUL2UdGX6nKlBL+MDLbGoUkRNqrBxhUajBT2Yq
+3tONIlHsFFd843dAr90DZxoj8WYA4NnaW4xR0ZIJAoGAeBWiek2CduSVC7eMh0Ph
+g3kQeeCO/m9kltFQ/RwOYg3ki6Uczd9+NtD27yqQBEPMNYcObHm6Vts6q630Y3Gs
+VWtCHBfI4FGMQ9LpYrDamEq1TsLvoL9LvlaqEM44L4tfU1YQwdWbIuIeKxTlO6Da
+4cFzE29rXsjjIlLWeTuIl0sCgYEA0Mak5VqvyzXnUK/RsE0TV+YQN9VQ96SraZC4
+/dwsFvGFK+GUm9FIlSYtLuNehQzgUmukfRrSxE8WKnsEloUOHYNxooXBY4lhhzVx
+SWDN1uPwq0h71Ob534RsVEjR5UdGifuF02NXCE64sQm31xiXRTUaPdo6JOhXtbin
+jNxwpakCgYEAoGkfZxUd6yZtNLmEKUwFT4/1edMg9XdyZggbfkaM2acn6cCk/XdJ
+zZSDcvnNyui30Amuiiin40QWX0OizeTnUS73knPTitQIb0+YEXp6NTKKsc1Frn6w
+pGjTOoVH4PDwBGs7vSO8uip6gdeGI1bCAK5zKeWR5gHE/UCrP/WQXy8=
 -----END RSA PRIVATE KEY-----

test/ssl/crl-empty.pem

@@ -1,9 +1,12 @@
 -----BEGIN X509 CRL-----
-MIIBPzCBqQIBATANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJHQjETMBEGA1UE
+MIIBwDCBqQIBATANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJHQjETMBEGA1UE
 CAwKRGVyYnlzaGlyZTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3QxEDAOBgNV
-BAsMB1Rlc3RpbmcxEzARBgNVBAMMClNpZ25pbmcgQ0EXDTE5MDkxMDA5MzM0MloY
-DzIxMDExMDMwMDkzMzQyWqAOMAwwCgYDVR0UBAMCAQEwDQYJKoZIhvcNAQELBQAD
-gYEAXKXAfdg47KKCs+qvU2BLR7+yGpvBekrkG9BRjKCXHDYO5e8HtLJJCik6DB9m
-DZNMX4djcdGfuype4FXmRF4mJChLNfJmXXZ3zuyDjESOlhiC/aX5Xv1961ZwdQOh
-+3RtJnFZVu5yOvq5oS+HuoXtMbLl8UwBdWeEH9BrzA22TpU=
+BAsMB1Rlc3RpbmcxEzARBgNVBAMMClNpZ25pbmcgQ0EXDTIwMDIyNTE0NTQxOVoY
+DzIxMDIwNDE2MTQ1NDE5WqAOMAwwCgYDVR0UBAMCAQEwDQYJKoZIhvcNAQELBQAD
+ggEBADXrRSpMfj+Iuz/Uy/ti4k0Qx+H/e93pown8Cgx/w9FwtsTsaTKOff0r3uKb
+KpKJJ4BSkysUOaZ72cLoooNYoEcYgpcqx3PlhmjuBGcOH1YG5ca+nzIayZgQe3Nl
+hGBvYfpX+YMpG7gHy5WPxi0T+uUF7XfTEfpmw8asVSZvZNy0nMB3cZCCA4yiICay
+vaOIrrHshSlDPw6iafhcBNLAdq5Xz+KF4Pv78Wfs+zwnm0BzRGtVB7cWCaGvUi3v
+dAqzzBsdP0naFYVaZ1BJcE06Dn5O6LSA6snOswCTGOYI50zMZzRXkUo3pZ/xqVPc
+Cdo6QspVlxGedSxXD13KbGPAoak=
 -----END X509 CRL-----

test/ssl/crl.pem

@@ -1,10 +1,12 @@
 -----BEGIN X509 CRL-----
-MIIBVTCBvwIBATANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJHQjETMBEGA1UE
+MIIB1jCBvwIBATANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJHQjETMBEGA1UE
 CAwKRGVyYnlzaGlyZTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3QxEDAOBgNV
-BAsMB1Rlc3RpbmcxEzARBgNVBAMMClNpZ25pbmcgQ0EXDTE5MDkxMDA5MzM0MloY
-DzIxMDExMDMwMDkzMzQyWjAUMBICAQUXDTE5MDkxMDA5MzM0MlqgDjAMMAoGA1Ud
-FAQDAgECMA0GCSqGSIb3DQEBCwUAA4GBANir3QTTixD5aAkLwrpMozAbjafitQL8
-XBnbg6Yudy94x6Dlh2sb0RbyLkIP0VhzHZq8fM4mn+FQ7THTlzPlNWv/Sn2iF/y2
-/yCFrYU3dBU3JoQ+Xq5TI/kI3h6naE/083ogRfJD+WkwqVQLQ7dPyPTzJumHjb9I
-5RZG6P56JIcs
+BAsMB1Rlc3RpbmcxEzARBgNVBAMMClNpZ25pbmcgQ0EXDTIwMDIyNTE0NTQxOVoY
+DzIxMDIwNDE2MTQ1NDE5WjAUMBICAQUXDTIwMDIyNTE0NTQxOVqgDjAMMAoGA1Ud
+FAQDAgECMA0GCSqGSIb3DQEBCwUAA4IBAQCMM5PyBAY5BuNVk0k2Bqn5FvlIrSnS
+LMZaoUVG/OtgjMD6g47dSXVHgIXmuFu3Bp44mRM85ZVd1URjmjR4ZwfVfcprkqo7
+L655K+nyPUoq5IZh7y4MKVYwbEfetu0HjWuOqFI9T7zalOF9MfeoOx6u93CTgUvy
+1s5EVnG0d0qon3CEHTJwpzYQDgXVesUX0ZqNwvKnMGQhB8YQ/NOX807xQR5Ckl7s
+6CYkAySe84lMascnwe1nFp3nGIxbOTxXqohWkvscM6933+veisgh6F4p63oF4rKs
+Xr93Bf9FsvwfitI/PfMWkKzFEEaZTjAM26ioLgBBcBxxIJleLysyudd2
 -----END X509 CRL-----

test/ssl/gen.sh

@@ -17,49 +17,49 @@ SBASESUBJ="/C=GB/ST=Nottinghamshire/L=Nottingham/O=Server/OU=Production"
 BBASESUBJ="/C=GB/ST=Nottinghamshire/L=Nottingham/O=Server/OU=Bridge"
 
 # The root CA
-openssl genrsa -out test-root-ca.key 1024
+openssl genrsa -out test-root-ca.key 2048
 openssl req -new -x509 -days 3650 -key test-root-ca.key -out test-root-ca.crt -config openssl.cnf -subj "${BASESUBJ}/CN=Root CA/"
 
 # Another root CA that doesn't sign anything
-openssl genrsa -out test-bad-root-ca.key 1024
+openssl genrsa -out test-bad-root-ca.key 2048
 openssl req -new -x509 -days 3650 -key test-bad-root-ca.key -out test-bad-root-ca.crt -config openssl.cnf -subj "${BASESUBJ}/CN=Bad Root CA/"
 
 # This is a root CA that has the exact same details as the real root CA, but is a different key and certificate. Effectively a "fake" CA.
-openssl genrsa -out test-fake-root-ca.key 1024
+openssl genrsa -out test-fake-root-ca.key 2048
 openssl req -new -x509 -days 3650 -key test-fake-root-ca.key -out test-fake-root-ca.crt -config openssl.cnf -subj "${BASESUBJ}/CN=Root CA/"
 
 # An intermediate CA, signed by the root CA, used to sign server/client csrs.
-openssl genrsa -out test-signing-ca.key 1024
+openssl genrsa -out test-signing-ca.key 2048
 openssl req -out test-signing-ca.csr -key test-signing-ca.key -new -config openssl.cnf -subj "${BASESUBJ}/CN=Signing CA/"
 openssl ca -batch -config openssl.cnf -name CA_root -extensions v3_ca -out test-signing-ca.crt -infiles test-signing-ca.csr
 rm -f test-signing-ca.csr
 
 # An alternative intermediate CA, signed by the root CA, not used to sign anything.
-openssl genrsa -out test-alt-ca.key 1024
+openssl genrsa -out test-alt-ca.key 2048
 openssl req -out test-alt-ca.csr -key test-alt-ca.key -new -config openssl.cnf -subj "${BASESUBJ}/CN=Alternative Signing CA/"
 openssl ca -batch -config openssl.cnf -name CA_root -extensions v3_ca -out test-alt-ca.crt -infiles test-alt-ca.csr
 rm -f test-alt-ca.csr
 
 # Valid server key and certificate.
-openssl genrsa -out server.key 1024
+openssl genrsa -out server.key 2048
 openssl req -new -key server.key -out server.csr -config openssl.cnf -subj "${SBASESUBJ}/CN=localhost/"
 openssl ca -batch -config openssl.cnf -name CA_signing -out server.crt -infiles server.csr 
 rm -f server.csr
 
 # Expired server certificate
-openssl genrsa -out server-expired.key 1024
+openssl genrsa -out server-expired.key 2048
 openssl req -new -key server-expired.key -out server-expired.csr -config openssl.cnf -subj "${SBASESUBJ}-expired/CN=localhost/"
 openssl ca -batch -config openssl.cnf -name CA_signing -days 1 -startdate 120820000000Z -enddate 120821000000Z -out server-expired.crt -infiles server-expired.csr 
 rm -f server-expired.csr
 
 # Valid client key and certificate.
-openssl genrsa -out client.key 1024
+openssl genrsa -out client.key 2048
 openssl req -new -key client.key -out client.csr -config openssl.cnf -subj "${SBASESUBJ}/CN=test client/"
 openssl ca -batch -config openssl.cnf -name CA_signing -out client.crt -infiles client.csr 
 rm -f client.csr
 
 # Expired client certificate
-openssl genrsa -out client-expired.key 1024
+openssl genrsa -out client-expired.key 2048
 openssl req -new -key client-expired.key -out client-expired.csr -config openssl.cnf -subj "${SBASESUBJ}/CN=test client expired/"
 openssl ca -batch -config openssl.cnf -name CA_signing -days 1 -startdate 120820000000Z -enddate 120821000000Z -out client-expired.crt -infiles client-expired.csr 
 rm -f client-expired.csr
@@ -68,7 +68,7 @@ rm -f client-expired.csr
 openssl ca -batch -config openssl.cnf -name CA_signing -gencrl -out crl-empty.pem
 
 # Revoked client certificate
-openssl genrsa -out client-revoked.key 1024
+openssl genrsa -out client-revoked.key 2048
 openssl req -new -key client-revoked.key -out client-revoked.csr -config openssl.cnf -subj "${SBASESUBJ}/CN=test client revoked/"
 openssl ca -batch -config openssl.cnf -name CA_signing -out client-revoked.crt -infiles client-revoked.csr 
 openssl ca -batch -config openssl.cnf -name CA_signing -revoke client-revoked.crt
@@ -76,7 +76,7 @@ openssl ca -batch -config openssl.cnf -name CA_signing -gencrl -out crl.pem
 rm -f client-revoked.csr
 
 # Valid client key and certificate, encrypted (use "password" as password)
-openssl genrsa -des3 -out client-encrypted.key -passout pass:password 1024
+openssl genrsa -des3 -out client-encrypted.key -passout pass:password 2048
 openssl req -new -key client-encrypted.key -out client-encrypted.csr -config openssl.cnf -subj "${SBASESUBJ}/CN=test client encrypted/" -passin pass:password
 openssl ca -batch -config openssl.cnf -name CA_signing -out client-encrypted.crt -infiles client-encrypted.csr
 rm -f client-encrypted.csr

test/ssl/server-expired.crt

@@ -10,17 +10,26 @@ Certificate:
         Subject: C=GB, ST=Nottinghamshire, L=Nottingham, O=Server, OU=Production-expired, CN=localhost
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:9e:17:15:22:13:1e:22:b2:b5:e2:8c:d3:ac:f5:
-                    4c:bc:ef:55:92:46:8e:96:6d:b7:c1:af:50:4d:5f:
-                    88:49:92:74:b1:91:b1:70:50:74:f3:d4:6f:83:e1:
-                    21:58:44:7d:d4:c0:9f:51:fe:95:55:14:fe:30:e8:
-                    50:cf:18:a0:99:94:99:1e:ae:87:e2:63:10:7a:1b:
-                    17:da:f1:72:2b:63:59:bf:e4:9c:79:bb:63:c7:40:
-                    31:47:7b:8a:b7:82:44:69:d6:a9:24:38:5e:fb:e2:
-                    c0:0b:d0:42:70:dc:4e:a0:7b:44:23:45:8b:92:db:
-                    3c:7b:7f:ea:60:8d:5a:a9:0b
+                    00:95:0d:f4:ee:f2:c8:f8:84:23:78:af:73:53:78:
+                    78:95:fd:cd:a6:fd:fd:0f:c7:ee:1c:39:e7:3c:d5:
+                    2b:ac:1d:ab:92:e9:8d:df:c1:15:37:40:3d:d1:b6:
+                    96:78:ec:4e:63:54:53:14:d4:9d:bc:42:6d:d9:5d:
+                    3b:ce:d4:d0:a5:f1:ef:32:5a:c7:63:1b:2c:01:a7:
+                    f4:9e:9a:39:95:c4:70:02:fa:8f:d2:d1:fc:0c:51:
+                    4e:e1:91:54:88:ee:0d:c1:f0:6a:17:7d:05:9e:f2:
+                    2e:b8:ed:49:b3:41:70:21:94:b4:02:22:bf:ff:79:
+                    0d:fb:38:bb:a1:3d:c0:a9:60:5e:39:18:8e:07:48:
+                    15:10:7b:b0:01:2b:2b:35:8c:67:be:85:70:cf:ba:
+                    99:bc:a8:1d:50:3f:ac:d9:32:91:ea:59:c4:4a:7a:
+                    72:5d:28:1e:43:5b:0b:b5:c0:d0:9d:ac:c5:68:c9:
+                    e5:ef:3e:cf:58:04:e6:99:4e:21:7c:c0:80:9d:88:
+                    f4:89:ca:d3:17:e1:77:fa:31:8c:7d:14:3e:af:e0:
+                    16:f8:67:28:4b:18:bb:fd:c3:4a:64:1f:c7:26:3b:
+                    0c:db:04:e7:11:35:13:99:ca:9c:25:87:48:e6:60:
+                    f2:a1:ef:7c:c2:5f:c3:02:ee:4c:27:32:da:20:76:
+                    70:79
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: 
@@ -28,34 +37,46 @@ Certificate:
             Netscape Comment: 
                 OpenSSL Generated Certificate
             X509v3 Subject Key Identifier: 
-                6C:37:48:ED:A0:0E:E7:67:BF:20:1D:76:48:75:82:1D:16:BA:ED:54
+                75:36:7F:77:C7:7D:8D:B8:2B:7C:7D:8B:D8:0C:AD:59:3C:B0:85:E6
             X509v3 Authority Key Identifier: 
-                keyid:EA:BE:42:EF:98:17:84:D5:FC:28:89:5A:4B:A5:B6:41:4F:7B:BB:28
+                keyid:AA:5A:5B:1C:91:32:9B:3F:9B:C3:42:6C:D2:68:F6:A7:E0:CF:BE:E0
 
     Signature Algorithm: sha256WithRSAEncryption
-         02:bb:c3:b6:e5:50:25:ef:32:c7:54:54:0c:3a:fd:2b:21:c8:
-         e0:1b:df:29:c8:0e:b1:ce:44:6d:9f:51:42:f2:d0:8a:42:a0:
-         96:10:45:b9:d5:e8:7e:5d:5c:f0:ef:3c:8d:89:58:11:16:84:
-         71:da:1e:98:84:9b:b2:d1:a3:a5:3f:fd:d9:8b:df:90:ab:22:
-         7e:12:16:ef:1f:02:fd:86:07:ad:85:83:e6:59:d7:ff:ee:b1:
-         44:b1:2c:29:8d:90:c0:73:53:e2:13:20:21:2b:8e:89:e2:4b:
-         20:16:13:ea:20:ae:d8:fc:6e:61:31:11:33:2f:dc:40:a0:6b:
-         a1:a1
+         74:c7:1f:42:e3:00:94:1a:16:ec:c9:17:02:1f:4f:e6:b0:4a:
+         4b:b1:2d:d2:3f:04:54:54:23:d1:b6:da:fa:fc:ac:3e:32:35:
+         a9:68:6b:b7:bc:06:ee:58:d5:95:a5:48:56:cb:ea:9d:d3:5e:
+         68:ce:8f:65:60:40:42:a6:8d:c5:e4:33:d3:ef:ed:e4:fd:23:
+         fe:28:34:ca:eb:2f:69:45:8e:61:dc:e2:0c:50:96:35:94:90:
+         25:61:55:d5:9c:d8:00:63:e0:6e:a1:67:f2:3f:34:a5:9d:33:
+         2a:7d:de:c0:89:8c:46:b1:fc:d4:19:7e:be:83:e0:f1:34:ff:
+         41:d3:cd:fb:e5:71:9d:05:00:67:af:f3:03:be:f6:e9:db:76:
+         58:89:72:68:7f:32:84:ff:c0:38:95:89:60:1b:99:fc:5e:37:
+         81:fa:ce:e7:78:7f:6c:3e:b9:70:74:62:62:d3:c2:8e:8e:2c:
+         11:fc:e6:fa:9a:cd:1e:79:67:51:01:54:1e:7d:db:32:09:13:
+         14:91:a3:56:2d:8e:fa:f8:3d:49:67:fe:b2:c8:11:8a:09:0e:
+         05:b0:0e:6b:39:4e:c5:7e:13:ea:40:41:26:d1:c0:c3:a2:cb:
+         cc:3d:cf:fe:59:0a:e1:b8:0d:50:47:0a:86:b4:72:21:89:b7:
+         5b:e2:37:2d
 -----BEGIN CERTIFICATE-----
-MIIC1DCCAj2gAwIBAgIBAjANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJHQjET
+MIID2TCCAsGgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJHQjET
 MBEGA1UECAwKRGVyYnlzaGlyZTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3Qx
 EDAOBgNVBAsMB1Rlc3RpbmcxEzARBgNVBAMMClNpZ25pbmcgQ0EwHhcNMTIwODIw
 MDAwMDAwWhcNMTIwODIxMDAwMDAwWjB+MQswCQYDVQQGEwJHQjEYMBYGA1UECAwP
 Tm90dGluZ2hhbXNoaXJlMRMwEQYDVQQHDApOb3R0aW5naGFtMQ8wDQYDVQQKDAZT
 ZXJ2ZXIxGzAZBgNVBAsMElByb2R1Y3Rpb24tZXhwaXJlZDESMBAGA1UEAwwJbG9j
-YWxob3N0MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCeFxUiEx4isrXijNOs
-9Uy871WSRo6WbbfBr1BNX4hJknSxkbFwUHTz1G+D4SFYRH3UwJ9R/pVVFP4w6FDP
-GKCZlJkerofiYxB6Gxfa8XIrY1m/5Jx5u2PHQDFHe4q3gkRp1qkkOF774sAL0EJw
-3E6ge0QjRYuS2zx7f+pgjVqpCwIDAQABo3sweTAJBgNVHRMEAjAAMCwGCWCGSAGG
-+EIBDQQfFh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQU
-bDdI7aAO52e/IB12SHWCHRa67VQwHwYDVR0jBBgwFoAU6r5C75gXhNX8KIlaS6W2
-QU97uygwDQYJKoZIhvcNAQELBQADgYEAArvDtuVQJe8yx1RUDDr9KyHI4BvfKcgO
-sc5EbZ9RQvLQikKglhBFudXofl1c8O88jYlYERaEcdoemISbstGjpT/92YvfkKsi
-fhIW7x8C/YYHrYWD5lnX/+6xRLEsKY2QwHNT4hMgISuOieJLIBYT6iCu2PxuYTER
-My/cQKBroaE=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 -----END CERTIFICATE-----

test/ssl/server-expired.key

@@ -1,15 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIICXAIBAAKBgQCeFxUiEx4isrXijNOs9Uy871WSRo6WbbfBr1BNX4hJknSxkbFw
-UHTz1G+D4SFYRH3UwJ9R/pVVFP4w6FDPGKCZlJkerofiYxB6Gxfa8XIrY1m/5Jx5
-u2PHQDFHe4q3gkRp1qkkOF774sAL0EJw3E6ge0QjRYuS2zx7f+pgjVqpCwIDAQAB
-AoGAdHSCf9BfcaX98D5XK+CjP8Z6Xb+WB+AY7heL6wNFrRSy2598e0T5cih6YUa1
-PoVtwAyJEGiebseBHFv2MyhsHK4Ae7oZaL+xmQ//klWJa+1jEBpdgX8D1NWklqYx
-ZnRKaPQB1xbuAqYIEYb1ioM2x+P8mp78iDy5uzSP/fMreekCQQDK/id7GsuAifPi
-vHs6JUpR5a+BvRZWhx4VWvMLk5swvhx8OxNfxadfR7JlikT9TLtRY8uu3gIE+ELi
-sEznet5tAkEAx188sgXYk8R43AGpFt9sStxdvCK1CZLdDVNFcUDqeXMZhE6E81x+
-frx8hq+H3T1zGQWJnz24J8ZjPx+fvsoaVwJAe1Jym+iIb5vfzgTh/E5BW4Xl3TUK
-CCFoVmL9uy++nZsx5Qti1tFWwJznNacOCLEAMA8n5CG+KlTFFcEzx4Gu9QJAb8SQ
-PizQ0WYfaxbzOANgrkcDtWivnQJcMhAwqeD+kb9Y2rc6CUQdFeeM1+Sngfvk/m4A
-TOlIx+OL1+NeppKeWQJBAKru6FO8OwA4ttqyMRF9YhSvlF/sNB4rSHQHs0IVtAgI
-86p4/oC6F+cTS48QgEFREeh8IRYVnBHYA103dcqdFm4=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 -----END RSA PRIVATE KEY-----

test/ssl/server.crt

@@ -5,22 +5,31 @@ Certificate:
         Signature Algorithm: sha256WithRSAEncryption
         Issuer: C=GB, ST=Derbyshire, O=Mosquitto Project, OU=Testing, CN=Signing CA
         Validity
-            Not Before: Sep 10 09:33:42 2019 GMT
-            Not After : Sep  8 09:33:42 2024 GMT
+            Not Before: Feb 25 14:54:18 2020 GMT
+            Not After : Feb 23 14:54:18 2025 GMT
         Subject: C=GB, ST=Nottinghamshire, L=Nottingham, O=Server, OU=Production, CN=localhost
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:e6:df:91:e3:42:94:b4:4d:ca:4b:74:9f:bb:f3:
-                    b2:7f:04:f1:77:69:f0:9d:0a:10:d3:e4:c5:cf:be:
-                    70:65:83:37:cb:28:92:fb:45:fb:93:62:47:da:2d:
-                    d6:0d:b3:4e:11:5b:bc:c1:a5:10:f8:be:81:65:51:
-                    3b:69:7c:99:30:a6:46:89:5f:ad:b9:03:cf:4c:87:
-                    51:27:ca:46:64:ad:7b:5b:fc:94:85:48:4d:b7:42:
-                    2e:98:84:af:36:fa:f7:ba:55:da:ea:7b:c8:52:9f:
-                    68:1a:0c:4d:38:cd:c1:3e:58:6b:9d:11:1b:4b:0e:
-                    4e:28:a9:58:3c:e6:c2:34:1b
+                    00:f0:01:ba:97:f8:35:4c:d0:d4:1e:22:9a:d8:af:
+                    f6:a8:1d:75:05:a8:8d:aa:04:a9:3b:b8:fc:c6:bd:
+                    2d:23:23:b1:fe:73:c4:24:75:aa:b2:55:9c:c8:27:
+                    37:66:15:8d:10:4b:46:52:dd:f7:0c:e3:07:90:35:
+                    35:64:f4:c1:34:89:14:9e:7f:5a:da:ba:6a:80:29:
+                    19:9e:38:55:85:f1:bb:b0:1e:61:7d:99:03:28:2f:
+                    75:4b:eb:06:aa:bc:da:d0:c2:97:cb:63:f8:83:94:
+                    c0:e6:22:da:37:18:99:68:b0:cf:b7:5e:03:bd:8b:
+                    3e:f2:b7:47:cb:fe:c8:e8:45:73:e3:23:6e:93:14:
+                    6a:b0:af:86:e1:b4:83:30:b5:da:df:a0:08:ac:d6:
+                    9f:d1:4e:bd:bb:f7:7e:b4:28:c0:16:35:cb:c4:18:
+                    7a:5b:92:cd:0e:d9:0d:d6:57:ca:6c:59:ef:ad:2e:
+                    99:8d:41:07:87:70:0b:27:a9:1b:65:a4:f9:75:15:
+                    81:cc:c8:d8:d2:b5:49:c9:77:01:21:ad:a7:44:3d:
+                    4a:88:c9:5f:dd:70:6a:f6:14:0a:4c:d2:b4:d2:8c:
+                    f6:5f:cf:bd:03:0a:dd:ac:08:c2:54:5d:77:e5:96:
+                    f1:a3:06:31:5f:4f:d8:b7:f9:ce:8f:18:20:74:0e:
+                    66:43
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: 
@@ -28,33 +37,46 @@ Certificate:
             Netscape Comment: 
                 OpenSSL Generated Certificate
             X509v3 Subject Key Identifier: 
-                D9:14:AF:ED:6A:06:A9:D2:17:2D:16:9E:59:2B:09:7E:2E:4F:59:9E
+                21:93:75:73:22:5F:FA:88:1E:8C:4E:00:A8:B1:AD:67:B2:A7:7C:E3
             X509v3 Authority Key Identifier: 
-                keyid:EA:BE:42:EF:98:17:84:D5:FC:28:89:5A:4B:A5:B6:41:4F:7B:BB:28
+                keyid:AA:5A:5B:1C:91:32:9B:3F:9B:C3:42:6C:D2:68:F6:A7:E0:CF:BE:E0
 
     Signature Algorithm: sha256WithRSAEncryption
-         29:f6:76:33:b1:13:25:7f:b0:3a:d7:a0:7b:f0:e3:df:88:ef:
-         f0:57:dc:a6:c2:40:ee:9d:34:b9:a3:35:70:e6:30:72:b8:dd:
-         cf:b5:81:32:6d:d4:e3:61:45:43:eb:1c:74:32:42:3c:21:fa:
-         c0:32:de:f8:26:f9:3b:13:37:3c:1a:61:02:4b:b0:29:a6:47:
-         4c:91:ec:ed:43:d9:01:a6:eb:85:5b:34:a4:78:cc:cb:cb:87:
-         e8:4b:74:38:42:c1:30:d3:f7:b8:59:43:93:8d:e8:f6:1f:95:
-         df:7d:e3:25:78:3c:bf:40:28:9c:a4:e2:e1:12:20:65:9a:50:
-         f3:54
+         5e:71:9a:51:b5:47:5b:a5:1a:fd:05:26:b6:98:50:47:d1:f3:
+         c7:b9:1e:23:09:68:2c:23:74:48:55:2f:69:f7:e0:06:31:c0:
+         0c:14:4a:9a:e4:43:b4:1d:ec:80:3b:14:e7:2e:63:db:d5:99:
+         0a:64:5f:4e:0b:1e:e8:2d:db:7f:71:ad:b7:a6:51:a0:c9:e1:
+         f4:52:19:30:c1:8d:ab:36:3c:77:85:da:f7:c0:5f:0b:54:d8:
+         48:c8:2b:98:ae:e0:f6:34:85:a1:17:5e:a5:cb:65:ea:cc:cc:
+         67:40:64:bf:0d:fd:21:de:1f:13:01:13:51:88:de:33:f9:94:
+         d9:a3:13:9f:ba:6f:b4:bd:8b:61:1f:b7:43:24:97:30:f6:ab:
+         67:0e:ee:8d:6a:11:ba:4b:b1:1f:61:bd:d9:a0:c7:38:b1:5a:
+         4c:e6:51:36:03:5a:d6:56:85:b3:2f:32:0f:8d:96:da:5a:42:
+         85:10:ba:bb:cf:75:c9:ff:73:95:bc:34:c1:99:76:ca:b1:b5:
+         63:88:2c:98:51:b4:b5:61:ea:0e:20:6a:22:cf:09:65:26:b8:
+         dc:72:d3:a1:fa:78:5c:b5:09:d9:b6:e6:d7:05:1b:35:72:e0:
+         d8:ee:a3:39:95:5e:24:55:8c:1e:7e:87:17:40:b3:4f:4c:90:
+         c9:2b:f2:43
 -----BEGIN CERTIFICATE-----
-MIICzDCCAjWgAwIBAgIBATANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJHQjET
+MIID0TCCArmgAwIBAgIBATANBgkqhkiG9w0BAQsFADBlMQswCQYDVQQGEwJHQjET
 MBEGA1UECAwKRGVyYnlzaGlyZTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3Qx
-EDAOBgNVBAsMB1Rlc3RpbmcxEzARBgNVBAMMClNpZ25pbmcgQ0EwHhcNMTkwOTEw
-MDkzMzQyWhcNMjQwOTA4MDkzMzQyWjB2MQswCQYDVQQGEwJHQjEYMBYGA1UECAwP
+EDAOBgNVBAsMB1Rlc3RpbmcxEzARBgNVBAMMClNpZ25pbmcgQ0EwHhcNMjAwMjI1
+MTQ1NDE4WhcNMjUwMjIzMTQ1NDE4WjB2MQswCQYDVQQGEwJHQjEYMBYGA1UECAwP
 Tm90dGluZ2hhbXNoaXJlMRMwEQYDVQQHDApOb3R0aW5naGFtMQ8wDQYDVQQKDAZT
-ZXJ2ZXIxEzARBgNVBAsMClByb2R1Y3Rpb24xEjAQBgNVBAMMCWxvY2FsaG9zdDCB
-nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA5t+R40KUtE3KS3Sfu/OyfwTxd2nw
-nQoQ0+TFz75wZYM3yyiS+0X7k2JH2i3WDbNOEVu8waUQ+L6BZVE7aXyZMKZGiV+t
-uQPPTIdRJ8pGZK17W/yUhUhNt0IumISvNvr3ulXa6nvIUp9oGgxNOM3BPlhrnREb
-Sw5OKKlYPObCNBsCAwEAAaN7MHkwCQYDVR0TBAIwADAsBglghkgBhvhCAQ0EHxYd
-T3BlblNTTCBHZW5lcmF0ZWQgQ2VydGlmaWNhdGUwHQYDVR0OBBYEFNkUr+1qBqnS
-Fy0WnlkrCX4uT1meMB8GA1UdIwQYMBaAFOq+Qu+YF4TV/CiJWkultkFPe7soMA0G
-CSqGSIb3DQEBCwUAA4GBACn2djOxEyV/sDrXoHvw49+I7/BX3KbCQO6dNLmjNXDm
-MHK43c+1gTJt1ONhRUPrHHQyQjwh+sAy3vgm+TsTNzwaYQJLsCmmR0yR7O1D2QGm
-64VbNKR4zMvLh+hLdDhCwTDT97hZQ5ON6PYfld994yV4PL9AKJyk4uESIGWaUPNU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 -----END CERTIFICATE-----

test/ssl/server.key

@@ -1,15 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIICXQIBAAKBgQDm35HjQpS0TcpLdJ+787J/BPF3afCdChDT5MXPvnBlgzfLKJL7
-RfuTYkfaLdYNs04RW7zBpRD4voFlUTtpfJkwpkaJX625A89Mh1EnykZkrXtb/JSF
-SE23Qi6YhK82+ve6Vdrqe8hSn2gaDE04zcE+WGudERtLDk4oqVg85sI0GwIDAQAB
-AoGANWbrQMzqxpXjv/ZW6EujMvw6uitYC4sDf2/ATaA4MVLbufNFpDd4zIuEITRO
-+dZKrXsxuvzqYw71sTDL9Edsy0KBft/gOD/eEEGLMCTSxAVzIlnk3iIjGJ+vcHp7
-K0TPy7yfk8CiHKUcxTfTWykr7x+gGu+XRmYlJv9izcA8nSkCQQD1np5HahyGzRgE
-N5xeL6B0We+WwvXxsuBe96EAF1WdN35weKx4Y1330qRE0aia5A9lJw2TTXNH+5vF
-8Bj6X+PVAkEA8KFpALzuGtot5hZ1nryOJS8BJMwjdbmUOAGu/J6sY9RSLj+qty7C
-LHLrUvteikGKsQN/8WnVls7kSivqqBngLwJBALyu2jZQLJPdb+qlccjk22UmRahS
-Iq9G05gAsLyqMEmy/L2X5h4hb2lWdnyrdtNuCOmSw5n58GpGvhajZ/zGtvUCQQC6
-y+JSY1fHWpWE5ux5xE/oR5vwr9PbIKwR6iSoEJksifcd1ei1eUPc830Alwgl9Ykv
-rtLUWl8nSgZoGb14r1WbAkAQANc9yjhDyk9mQwBzDrvQiQnBJWROrgtNCgq2g9m6
-zawZwPtI6lbvvsR2t5kEDR4piXDiwiadXDdd3pq8m/LS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 -----END RSA PRIVATE KEY-----

test/ssl/test-alt-ca.crt

@@ -5,54 +5,75 @@ Certificate:
         Signature Algorithm: sha256WithRSAEncryption
         Issuer: C=GB, ST=Derbyshire, L=Derby, O=Mosquitto Project, OU=Testing, CN=Root CA
         Validity
-            Not Before: Sep 10 09:33:42 2019 GMT
-            Not After : Sep  8 09:33:42 2024 GMT
+            Not Before: Feb 25 14:54:18 2020 GMT
+            Not After : Feb 23 14:54:18 2025 GMT
         Subject: C=GB, ST=Derbyshire, O=Mosquitto Project, OU=Testing, CN=Alternative Signing CA
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:b3:5e:a7:16:47:3f:40:b1:a6:2b:30:72:23:83:
-                    a6:bd:06:f8:ad:a9:01:91:cb:90:5e:7d:ca:f9:0a:
-                    fb:bf:76:bc:0e:97:4b:4a:68:26:71:2b:23:78:b4:
-                    55:2a:91:63:19:a7:a1:9c:67:47:39:dd:b9:c0:76:
-                    6a:93:59:ae:a0:c5:67:89:82:1c:da:e4:3a:a4:d6:
-                    c1:b8:ae:78:0e:8c:07:a7:a4:94:b8:0b:78:48:a8:
-                    f7:a4:78:af:93:a0:77:d4:0a:19:f3:ef:37:2c:b9:
-                    14:fb:da:14:41:06:64:f9:70:90:c2:b2:93:6f:ad:
-                    1e:77:5f:0f:32:00:c7:d8:f5
+                    00:ce:93:cf:ac:4e:f4:14:e1:4b:aa:b9:e8:dd:c0:
+                    7f:eb:ab:55:16:da:8f:01:1b:55:6e:7e:b3:e0:4e:
+                    03:68:5f:48:b4:8c:d3:d2:44:ac:3b:3a:78:88:ac:
+                    90:f9:22:d3:b9:8a:24:35:e4:c9:2e:a0:25:b1:a6:
+                    ca:d8:86:97:8b:63:34:73:12:8c:f6:bb:38:ea:40:
+                    db:d6:ce:06:33:bb:ea:9b:3b:60:c2:af:22:07:08:
+                    41:e4:8c:d4:ef:9d:57:b3:73:8c:28:3a:22:15:1b:
+                    63:67:a5:cc:00:ca:a3:7c:c8:ef:d9:64:72:c2:ef:
+                    31:a1:a6:b4:d9:ad:15:66:42:32:5c:8f:6e:dd:bc:
+                    97:7a:5a:07:a4:a1:e2:cd:27:c3:95:5b:1d:7b:d5:
+                    27:65:b4:34:da:6c:59:40:3a:c0:78:41:8c:48:64:
+                    e9:dd:8d:f6:a6:ff:b3:3b:63:f7:9e:f8:f9:d1:a0:
+                    0d:0a:34:3c:2f:51:73:05:58:76:cd:ca:62:61:cb:
+                    bc:9d:76:d6:e6:ca:1b:3b:95:a2:2f:24:6c:20:84:
+                    d2:fa:28:4f:b1:d5:85:eb:f6:47:49:d5:77:a3:03:
+                    05:cb:fa:c9:c6:b0:bf:38:ca:8e:9f:44:98:28:ee:
+                    a5:fe:d5:bc:85:7a:40:6e:e1:6b:f3:43:a2:22:0f:
+                    28:7b
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                D6:68:84:29:27:27:1B:55:39:A5:42:93:95:08:B4:4B:55:FB:98:AA
+                75:A1:3D:93:BD:A7:31:3D:0F:D2:0B:8D:04:43:49:BF:BC:B7:BD:87
             X509v3 Authority Key Identifier: 
-                keyid:CF:F3:9D:BB:BF:2B:14:D5:A2:E5:EC:41:CF:9C:16:D0:4D:AB:84:04
+                keyid:7A:89:5D:1E:C9:B1:72:2F:38:DB:DE:E7:D3:49:80:2C:01:FA:3B:74
 
             X509v3 Basic Constraints: 
                 CA:TRUE
     Signature Algorithm: sha256WithRSAEncryption
-         a1:9a:e1:2a:68:5d:54:f9:a1:fb:a4:7c:c0:ad:05:db:1c:4b:
-         01:af:5f:96:f3:bd:33:e3:eb:24:f1:7e:16:0f:58:64:fe:ef:
-         33:a4:30:4e:64:31:3b:52:b5:ca:7e:2f:cd:6e:7d:ed:ff:81:
-         85:c9:bd:a4:51:e5:ba:d6:ca:3b:93:94:26:3c:61:8b:e1:e2:
-         fc:3e:23:57:27:22:47:fa:aa:e3:f6:90:c6:2c:e9:33:22:65:
-         82:19:c8:9e:35:f4:b2:98:94:19:03:c0:c8:62:5b:42:6a:71:
-         7b:d9:9d:8f:79:c1:7c:e7:ae:59:63:39:bf:e8:36:68:3e:be:
-         49:c7
+         b1:d6:97:e3:46:14:82:1e:c6:8c:50:b8:e8:13:4b:62:70:62:
+         0c:f9:3d:07:19:cf:d0:78:2c:53:1f:10:87:0f:f9:2a:95:2e:
+         6f:c6:d3:87:d7:69:8d:7e:42:ee:c3:50:e6:13:56:65:6d:0f:
+         7c:cb:9c:35:d6:12:ff:e1:57:63:98:e0:80:53:9d:2b:8e:45:
+         c4:34:e4:c0:60:79:d6:53:85:bc:5d:26:e4:ce:1b:6b:c4:ef:
+         47:e5:87:a9:9c:ea:a8:dc:35:cd:f0:b2:95:60:e2:67:89:56:
+         e0:1e:95:71:2b:6a:77:91:15:ad:a1:50:27:5d:03:1c:13:0f:
+         2f:7d:ea:41:3d:1b:9f:e4:b4:b5:92:99:ca:32:dc:17:d9:54:
+         52:f9:b9:e0:9b:ed:23:b7:78:d3:07:36:34:2f:25:19:5f:49:
+         e6:35:c6:d9:99:07:e9:52:dd:01:09:a9:d7:bf:e7:f4:74:6f:
+         e2:0b:ce:da:7f:fa:38:95:43:d0:6c:f3:c4:1b:14:1c:47:50:
+         14:a9:48:4d:0c:d0:c6:be:a3:bc:17:9c:e3:92:24:e6:b3:51:
+         91:64:f4:55:1d:d1:5f:1b:69:90:ac:7e:69:e5:92:f7:d6:d2:
+         8a:f5:b2:5d:9b:79:8b:19:1c:6f:5a:9b:17:e5:c1:44:89:13:
+         0f:69:17:7c
 -----BEGIN CERTIFICATE-----
-MIICqTCCAhKgAwIBAgIBAjANBgkqhkiG9w0BAQsFADByMQswCQYDVQQGEwJHQjET
+MIIDrjCCApagAwIBAgIBAjANBgkqhkiG9w0BAQsFADByMQswCQYDVQQGEwJHQjET
 MBEGA1UECAwKRGVyYnlzaGlyZTEOMAwGA1UEBwwFRGVyYnkxGjAYBgNVBAoMEU1v
 c3F1aXR0byBQcm9qZWN0MRAwDgYDVQQLDAdUZXN0aW5nMRAwDgYDVQQDDAdSb290
-IENBMB4XDTE5MDkxMDA5MzM0MloXDTI0MDkwODA5MzM0MlowcTELMAkGA1UEBhMC
+IENBMB4XDTIwMDIyNTE0NTQxOFoXDTI1MDIyMzE0NTQxOFowcTELMAkGA1UEBhMC
 R0IxEzARBgNVBAgMCkRlcmJ5c2hpcmUxGjAYBgNVBAoMEU1vc3F1aXR0byBQcm9q
 ZWN0MRAwDgYDVQQLDAdUZXN0aW5nMR8wHQYDVQQDDBZBbHRlcm5hdGl2ZSBTaWdu
-aW5nIENBMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCzXqcWRz9AsaYrMHIj
-g6a9BvitqQGRy5Befcr5Cvu/drwOl0tKaCZxKyN4tFUqkWMZp6GcZ0c53bnAdmqT
-Wa6gxWeJghza5Dqk1sG4rngOjAenpJS4C3hIqPekeK+ToHfUChnz7zcsuRT72hRB
-BmT5cJDCspNvrR53Xw8yAMfY9QIDAQABo1AwTjAdBgNVHQ4EFgQU1miEKScnG1U5
-pUKTlQi0S1X7mKowHwYDVR0jBBgwFoAUz/Odu78rFNWi5exBz5wW0E2rhAQwDAYD
-VR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOBgQChmuEqaF1U+aH7pHzArQXbHEsB
-r1+W870z4+sk8X4WD1hk/u8zpDBOZDE7UrXKfi/Nbn3t/4GFyb2kUeW61so7k5Qm
-PGGL4eL8PiNXJyJH+qrj9pDGLOkzImWCGcieNfSymJQZA8DIYltCanF72Z2PecF8
-565ZYzm/6DZoPr5Jxw==
+aW5nIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpPPrE70FOFL
+qrno3cB/66tVFtqPARtVbn6z4E4DaF9ItIzT0kSsOzp4iKyQ+SLTuYokNeTJLqAl
+sabK2IaXi2M0cxKM9rs46kDb1s4GM7vqmztgwq8iBwhB5IzU751Xs3OMKDoiFRtj
+Z6XMAMqjfMjv2WRywu8xoaa02a0VZkIyXI9u3byXeloHpKHizSfDlVsde9UnZbQ0
+2mxZQDrAeEGMSGTp3Y32pv+zO2P3nvj50aANCjQ8L1FzBVh2zcpiYcu8nXbW5sob
+O5WiLyRsIITS+ihPsdWF6/ZHSdV3owMFy/rJxrC/OMqOn0SYKO6l/tW8hXpAbuFr
+80OiIg8oewIDAQABo1AwTjAdBgNVHQ4EFgQUdaE9k72nMT0P0guNBENJv7y3vYcw
+HwYDVR0jBBgwFoAUeoldHsmxci84297n00mALAH6O3QwDAYDVR0TBAUwAwEB/zAN
+BgkqhkiG9w0BAQsFAAOCAQEAsdaX40YUgh7GjFC46BNLYnBiDPk9BxnP0HgsUx8Q
+hw/5KpUub8bTh9dpjX5C7sNQ5hNWZW0PfMucNdYS/+FXY5jggFOdK45FxDTkwGB5
+1lOFvF0m5M4ba8TvR+WHqZzqqNw1zfCylWDiZ4lW4B6VcStqd5EVraFQJ10DHBMP
+L33qQT0bn+S0tZKZyjLcF9lUUvm54JvtI7d40wc2NC8lGV9J5jXG2ZkH6VLdAQmp
+17/n9HRv4gvO2n/6OJVD0GzzxBsUHEdQFKlITQzQxr6jvBec45Ik5rNRkWT0VR3R
+XxtpkKx+aeWS99bSivWyXZt5ixkcb1qbF+XBRIkTD2kXfA==
 -----END CERTIFICATE-----

test/ssl/test-alt-ca.key

@@ -1,15 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIICXQIBAAKBgQCzXqcWRz9AsaYrMHIjg6a9BvitqQGRy5Befcr5Cvu/drwOl0tK
-aCZxKyN4tFUqkWMZp6GcZ0c53bnAdmqTWa6gxWeJghza5Dqk1sG4rngOjAenpJS4
-C3hIqPekeK+ToHfUChnz7zcsuRT72hRBBmT5cJDCspNvrR53Xw8yAMfY9QIDAQAB
-AoGAE83rnOYY8cerlTEwKQOsMUrHwkTay4IyWnyBIKY5zZYKhYHm6jw9olkk/XrL
-vHt4+agsi9xLXPRCQiHQ+pv4T9CiuwmjhYyZmurSSIBEtHrMKuVXvwhNDRyqiGb1
-XyW23x1hoQ/G3CBQh+7n8Z+x+sNgdyipV1ia4tryuxsvgQECQQDd4CbsGARJ/E0z
-fSo3Y4ZhTHvOrwYYPmjBFBOFPt/acwl6IH7XhtJKL7MlveapGyLk65ksptjREIMu
-ED51Q3IlAkEAzvTt0seXV1ZGf9i/DlES3m6NSSNh2eRZjDMzf55WQ8D59frteMVN
-BLyE3jrhYdS37iqpjdTQh1mKsrVuvIfKkQJBAJmkDI/UmbO5+KO8+qzcSEO8OMeI
-v4muPc/l3RaZ0V1t55QgSHVqsNgaa82o0L8tQV6QHsOizeUHsC8HpJiDGdkCQAJv
-STj4liQ15KBuaVj+xS0OueTJYMZSdGc81vdCYptrcsVdDVwlXhGXMiz3Hl2rRfqs
-T9BWV5mwCPyvO71GD7ECQQDRjmnHPm7kehGeHW11LVbRA9TauZClJnsvI4XgYgsN
-Gbd96uWaQHzWt9qovtuxQsk618ZlajGlOrmCO2BDC0Vm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 -----END RSA PRIVATE KEY-----

test/ssl/test-bad-root-ca.crt

@@ -1,17 +1,23 @@
 -----BEGIN CERTIFICATE-----
-MIICxTCCAi6gAwIBAgIUA0+BIjY/izJBfY9rCIK0rFj1LTkwDQYJKoZIhvcNAQEL
+MIIDyjCCArKgAwIBAgIUdyk9NtFrh5WnXWwmIarH9aqo+2cwDQYJKoZIhvcNAQEL
 BQAwdjELMAkGA1UEBhMCR0IxEzARBgNVBAgMCkRlcmJ5c2hpcmUxDjAMBgNVBAcM
 BURlcmJ5MRowGAYDVQQKDBFNb3NxdWl0dG8gUHJvamVjdDEQMA4GA1UECwwHVGVz
-dGluZzEUMBIGA1UEAwwLQmFkIFJvb3QgQ0EwHhcNMTkwOTEwMDkzMzQyWhcNMjkw
-OTA3MDkzMzQyWjB2MQswCQYDVQQGEwJHQjETMBEGA1UECAwKRGVyYnlzaGlyZTEO
+dGluZzEUMBIGA1UEAwwLQmFkIFJvb3QgQ0EwHhcNMjAwMjI1MTQ1NDE4WhcNMzAw
+MjIyMTQ1NDE4WjB2MQswCQYDVQQGEwJHQjETMBEGA1UECAwKRGVyYnlzaGlyZTEO
 MAwGA1UEBwwFRGVyYnkxGjAYBgNVBAoMEU1vc3F1aXR0byBQcm9qZWN0MRAwDgYD
-VQQLDAdUZXN0aW5nMRQwEgYDVQQDDAtCYWQgUm9vdCBDQTCBnzANBgkqhkiG9w0B
-AQEFAAOBjQAwgYkCgYEA3I5ZR4RbtdVfj/xvLffj0WMQ/fEuAboyd7Dfx9af713N
-X3xmYC4m8sBEpYf/XKCmDlGYHOtS91SGj7Ylf+ipLIm3LWbovxq3jxIY/vCJMqLf
-2t59xslBSAPdF4msU4AZxVrinDgkExrZ1iOev8v1xuQzHiJfGPZWdAYKZ7GTUfsC
-AwEAAaNQME4wHQYDVR0OBBYEFF3Bl5CiFVGSsPDEjaacOTBH7a2HMB8GA1UdIwQY
-MBaAFF3Bl5CiFVGSsPDEjaacOTBH7a2HMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcN
-AQELBQADgYEAFpuMcEex7qxkVU1z7bkB5DEpzTI4FhM5iDxmXvNSa1yPLsJPxuih
-29G+W5luDEnsdb9dV4KM/VHZ/HuSCwX69EBiXlBXqSHWDKGas9q2e7eRzdGCQGvL
-KiUaEsCbEigrP6DasDHx7MYj2EcNYwcqSCQjWKf0lhWPVnbLQIy+Pjo=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 -----END CERTIFICATE-----

test/ssl/test-bad-root-ca.key

@@ -1,15 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIICXAIBAAKBgQDcjllHhFu11V+P/G8t9+PRYxD98S4BujJ3sN/H1p/vXc1ffGZg
-LibywESlh/9coKYOUZgc61L3VIaPtiV/6KksibctZui/GrePEhj+8Ikyot/a3n3G
-yUFIA90XiaxTgBnFWuKcOCQTGtnWI56/y/XG5DMeIl8Y9lZ0BgpnsZNR+wIDAQAB
-AoGBALjqtFns1AORIS0UhZax5pUwjReMNXmHRjbp2cWv4aoMKFttblwndcpDf4qV
-inl7y53ntTRR7N6nRKaLHcevJt48/YrK6TrFcOMVrOpqN5CcPz91miWH+PSbHtNo
-aF8b5ZJe85gjJ2UewOXI41je64nVTYw8BC/kYOH9CixNOTBJAkEA9LFY6IyLyNO5
-eBVxrZjXBmXovqOPsESJlVf6IFu8Ecrvh59PIQGzY10YWt5QxA3BWmOguMigWjlF
-uRLvUh8vTwJBAOa/eGanpn4l0o+xsS/KVOTO+98v1Dt50VB+weu7Rr/G/sQzTTVA
-oN41W5YyJd05FwnUZxVvL8NfP7nOPtdcZ5UCQAYyp8ncJX5EvqHoCSUYhfnHgwmx
-IuaYFdQOkmtXZ4Ab381Tn7F6VYziwscqcmlE3+zmMR/9FPK0GKwDasRtvckCQBen
-PPJY8SoxOlpcfqtFdFpYFV2Vi43lON2lgL9nXSM/hNIb6CgzTco5cf/9eAArX/8z
-9LUvxpeiZefoCm0NHdkCQBA+vqQPkmqKV40II55+5zXW1vmi76lk0NDJPRQ/gGlA
-PF9wokWex61Dl3iixIG5lOASoMBo5b8g1szhbZHeqFE=
+MIIEpAIBAAKCAQEAywyE4ixJEoCiliNX/SUbbnYDhd3WpRCVzA4+rdnUli4GxrZZ
+7X3FPjbu1JNegNHbN1Qf2cHXvT3B6zuhMzyrVZYezNX/wMsEei1lnN9o0XL2KnCq
+NolcwbmFY7Wn7CDarYGymg6lFxaE07hmtHl09PVyb834DxPG1h3ha049bFdCPziu
+ml4RQmPITVAhFMa5AyJDHOyLKJO/LMqO4IQsVw+M3CmqMR/EpqgcIP/kZYfULyva
+k5UilGc/2oNVfiNC9LIB19Z649PSHaodanvnV7nD+KdeRq/Opioj3ES8iZSBbn+t
+VjwOs5/yG4Vel8zAwFi7PGNuc5s+EPznFFxznwIDAQABAoIBAAduwuKAmoAp40m5
+q3vhwtpNSZ253CSYsdMRZmv4wFZrAuZ9QFd4NiMr4Zw4dMokZHDnDG9tMBeGTjXt
+Ld5xRxhP8XqwDreg9t3+EW0npG+eVLKDA0gRySpyPxbCTI5ROZAGYmJPTO3GbkBN
+zLyogYaCAZlkIcNzhuDJoTnLWGZBzrsvwCGqwHdjGras31FSf+HYC8KcjQysQmUV
+F/puNldvV5rXo8rDOIdtrCC9oYvGMJDSk9X0qsHLWWqVnrruy7SmHMJ2kn6wUFfj
+qjm9OTdaHJOrswNmW/xLyQzj5gQOh45y7/e1W2X08HpUBzuraOnDJM2ty0dTetEW
+sb2+eUECgYEA8iGLJcHOWmK3cws/mAfI4GCvI1FcwYKXJzVCs+lozlzd7kioM4dW
+h4Mg30LbBDDsytxMNcaq5Aglwdg5CLg657vreQeZk6HUuFcwf//sJoBRAbwScE6r
+pI5fSSce9K+xzQzjpKiWy+Q3eC3Sax5yeeEKBSolUSKgVmDQ/lgv+D8CgYEA1q3m
+YK2RukYOEdcT2BpZmJI8vmeKRl6rswj6q4eSzRnruCrLxgNsDIQUkhX6zQ+a5Lhy
+g8USSqnpAZdBTXYIFo8fztx5abzXZpXrrUXpZTjNLncHrYE0/ztaBhEjVhoRRZ4P
+4LMNnPKWNX+E5g+IhvzA8D9spSWTD1L1SorZrKECgYEAkkaBcYXry97nRLD+8jGB
+wUungoacqqrh9eXPLjFMB59C07lBJCAWvjcRnM8e0SFdbBA6WiJzCt+BL+IYUpQ5
+wdVdI/jbZrzVbaf+vNU3LOtIBOxBl2dvejIojmD76oZZu66Vt9vBfduZRxknjV8P
+eWHiU8xqTuHES2qh14YfNLECgYB8GYkMqCmO0cJ+Y6OQECNtBFRjCT2w0jdVRsKJ
+d9TQBcTy8KJddEr4rT2q+VPDSNsUjt979udNDA2rIsHYQnwIdnI/xcnV6xllrxLP
+VpPGNOC/lIV2sjNtu+SdjzirJGSJpwassTUUXlOg13d++snEpsXt2+w1R5RMjntH
+vR56IQKBgQCF+kqRYtwBIXXyQDpxFV7ISKhfIdI2wnmEKHekXsg6APm2Hzqt8xGq
+nIqJIMUJvNp4mgBjw7drVuyuLu/xAsHg9zd2e85wnM5nyxTSlrD4EyN7oSSzEl4n
+qMI+y868gX0ZHjejFTRHiEPjERO9TndYlsXpbl8sUxs6TYzZNjB7FQ==
 -----END RSA PRIVATE KEY-----

test/ssl/test-fake-root-ca.crt

@@ -1,17 +1,23 @@
 -----BEGIN CERTIFICATE-----
-MIICvTCCAiagAwIBAgIUEV/NxsOd+AgPP9s5/+r8yDhZeGEwDQYJKoZIhvcNAQEL
+MIIDwjCCAqqgAwIBAgIUJtJNmR2IUunoKAPzp6GCdwpeRGkwDQYJKoZIhvcNAQEL
 BQAwcjELMAkGA1UEBhMCR0IxEzARBgNVBAgMCkRlcmJ5c2hpcmUxDjAMBgNVBAcM
 BURlcmJ5MRowGAYDVQQKDBFNb3NxdWl0dG8gUHJvamVjdDEQMA4GA1UECwwHVGVz
-dGluZzEQMA4GA1UEAwwHUm9vdCBDQTAeFw0xOTA5MTAwOTMzNDJaFw0yOTA5MDcw
-OTMzNDJaMHIxCzAJBgNVBAYTAkdCMRMwEQYDVQQIDApEZXJieXNoaXJlMQ4wDAYD
+dGluZzEQMA4GA1UEAwwHUm9vdCBDQTAeFw0yMDAyMjUxNDU0MThaFw0zMDAyMjIx
+NDU0MThaMHIxCzAJBgNVBAYTAkdCMRMwEQYDVQQIDApEZXJieXNoaXJlMQ4wDAYD
 VQQHDAVEZXJieTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3QxEDAOBgNVBAsM
-B1Rlc3RpbmcxEDAOBgNVBAMMB1Jvb3QgQ0EwgZ8wDQYJKoZIhvcNAQEBBQADgY0A
-MIGJAoGBAL/ovHlwesKZg8IwhZv9IC48HvbVSwd2FZydjOp677hDnlbZPuLBoEvO
-XJFh+LlS7RWBul0IGg3S0LnW4w1Zib9ECy98R2vapSCsZFlOi0+NO4/StLqkVKjm
-Pce1+g5rN3UgqZRpsPVIEuct2ikZxECydzzTwveofUUOIqujQ3oHAgMBAAGjUDBO
-MB0GA1UdDgQWBBQHDEMQ7QUiy/OT0knUpuwYWcf4MTAfBgNVHSMEGDAWgBQHDEMQ
-7QUiy/OT0knUpuwYWcf4MTAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUAA4GB
-AGFKPpRPPIgzpAVIlW8tATyzkNeD6W9/kCky0TPWul7k+CII3agJYRz/Ms2F/ASR
-E5Ejr7iE97hHfxCSB3xLts5ouSHclwaymz9/gcw0I6SRqP/x+Bb0BYZ4bIeH1aye
-3NO9TKRyyzVf1E+3aBWbVJroFNPX0FO9JG54qRcxc6aS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 -----END CERTIFICATE-----

test/ssl/test-fake-root-ca.key

@@ -1,15 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIICXAIBAAKBgQC/6Lx5cHrCmYPCMIWb/SAuPB721UsHdhWcnYzqeu+4Q55W2T7i
-waBLzlyRYfi5Uu0VgbpdCBoN0tC51uMNWYm/RAsvfEdr2qUgrGRZTotPjTuP0rS6
-pFSo5j3HtfoOazd1IKmUabD1SBLnLdopGcRAsnc808L3qH1FDiKro0N6BwIDAQAB
-AoGAVoDs+/x0iWUzXAQNJbwallypRG/uawWSRk9KJqOVjMSGCfXQ/9txitoRJcM4
-nyi/D3Ozcp3lSJffV/WB0RGsIc/lrvqu0NkR4nn5uPARE03yujRTpiRt/37s77Ge
-X86an1H0Z/fo7R+m6iJhBdRTMmXEch3pEJXSkeLIzCA8wKkCQQDnJB9jEO3ZviQ9
-bSBBJ14EMrd/idzvGhrGtPot7FZahLJrVCz4iWncrTfKMiRlU7F1WvENXiV2mGW3
-WiLJ/0D1AkEA1Ix2NLPz6/WF0v6meo4OgVj8c9+4QwTyy71mTo36yMscy1SA5B4U
-xPWMyKFaPAbG6uX2L+880A3vIA+PrVlBiwJAEklwVkUjnEOH2HhGwgDcVlaw391H
-Zn9ZOPlehb2aA2VWPFmXiT5N6tClhlC7Qm0BsDg2tAkLy7s46O2vrO2N9QJBALmZ
-CaMNvCI/26KZwK9lml7yYEeihFjpWkX0VgCkU+fADJ20ZXRMnCA8trl+w7eEx2/Y
-bHgA9N5MPJGHZROey+8CQCoK0Z3bPgqv9GP81wa2Sy84p9vAqTMyjalRVy1WssaD
-0d9Q9s0P/JWWtg9IonzYcT6CCrVy8RhMcZ6Tq1yE3fc=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 -----END RSA PRIVATE KEY-----

test/ssl/test-root-ca.crt

@@ -1,17 +1,23 @@
 -----BEGIN CERTIFICATE-----
-MIICvTCCAiagAwIBAgIUCq9EuGevQyFmQpXhKjTK8l6q2VYwDQYJKoZIhvcNAQEL
+MIIDwjCCAqqgAwIBAgIURMxcSM9J+pY3g2SE3qoM34dHwPkwDQYJKoZIhvcNAQEL
 BQAwcjELMAkGA1UEBhMCR0IxEzARBgNVBAgMCkRlcmJ5c2hpcmUxDjAMBgNVBAcM
 BURlcmJ5MRowGAYDVQQKDBFNb3NxdWl0dG8gUHJvamVjdDEQMA4GA1UECwwHVGVz
-dGluZzEQMA4GA1UEAwwHUm9vdCBDQTAeFw0xOTA5MTAwOTMzNDJaFw0yOTA5MDcw
-OTMzNDJaMHIxCzAJBgNVBAYTAkdCMRMwEQYDVQQIDApEZXJieXNoaXJlMQ4wDAYD
+dGluZzEQMA4GA1UEAwwHUm9vdCBDQTAeFw0yMDAyMjUxNDU0MThaFw0zMDAyMjIx
+NDU0MThaMHIxCzAJBgNVBAYTAkdCMRMwEQYDVQQIDApEZXJieXNoaXJlMQ4wDAYD
 VQQHDAVEZXJieTEaMBgGA1UECgwRTW9zcXVpdHRvIFByb2plY3QxEDAOBgNVBAsM
-B1Rlc3RpbmcxEDAOBgNVBAMMB1Jvb3QgQ0EwgZ8wDQYJKoZIhvcNAQEBBQADgY0A
-MIGJAoGBAOGwkYR+cUbrn3AGkbdFImPx4tnYIsqT+MwGDNmQ33Q4Ng9ZwEJhsT2C
-qGl0Txsj1HLo3goAFU/lZcvedtLT3sZKw1Jamwc7SS3H15Et9Ne9kQczaLekr74d
-NpRWvgJMy3+YkBHsB04vFA45ruc4F7UnpljaovJ4sVadx0FyWdxbAgMBAAGjUDBO
-MB0GA1UdDgQWBBTP8527vysU1aLl7EHPnBbQTauEBDAfBgNVHSMEGDAWgBTP8527
-vysU1aLl7EHPnBbQTauEBDAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUAA4GB
-ABRmECRQbiR9m27Qg8x8Auwus2xdxZTlKz2n8WV1HN8jE2b22g9kqAcamqcQXWYU
-JklO18dNdpI2rpJa/rSi/Wcakp2STUnV03kqw7IZWyzCaDNZLRWWDHqsJhH91jzv
-jFOhj81GLFVsAwsiTMV2FFk9XzYVpiV2syC7EgFvtjzH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 -----END CERTIFICATE-----

test/ssl/test-root-ca.key

@@ -1,15 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIICXQIBAAKBgQDhsJGEfnFG659wBpG3RSJj8eLZ2CLKk/jMBgzZkN90ODYPWcBC
-YbE9gqhpdE8bI9Ry6N4KABVP5WXL3nbS097GSsNSWpsHO0ktx9eRLfTXvZEHM2i3
-pK++HTaUVr4CTMt/mJAR7AdOLxQOOa7nOBe1J6ZY2qLyeLFWncdBclncWwIDAQAB
-AoGAU6B1iz6/AqR0Y7JLdDlt0NLkWAw6eA30dsUXJdcEta/OeEmtb+t7HWu4s7qh
-RVE1e47GF7aILx61ZaF9LgnL1cObEShIOHyr7WJHo5YXQhnHUMT/ltp0434vWTcp
-40nOpkkb+QX92wRYsKBeB6byAsmSHgbVzwXY0ahy45IB/UECQQD+WVCh45eVWxb6
-xdCoxMPG8upMjkSoxQYulbgvKYNHGRZD7VRGnsULMUROsRUDB7QBmB3uvGEKV44Y
-EN9OPXlTAkEA4yegcpPBEIaLtXHVHz0QSKk34sJfeyO1aW7QMdYVT6N7rRRnA1Pc
-53ZzIC3Zk4ryeozSYLT1lTsh8lSjcwhH2QJBALBnJ4ov+/jFRUnFmnMCjLnVzfQs
-k6fthd0XT7e99eOAnbWcy19zTDv3/mUJYgZI+GpGozPpiPAQS2ebhBSShCsCQQC0
-g/w0sYieyl1iLvkP3yX+qENaN99K62CyTbaztA6xgBi7vdfzRATsCCyLKQScBLKX
-gyt4YLY9BoX+nxZZRv5ZAkBquUNGjXcKande80tMRKkU0LOfetMOQ/LllIe+TpNc
-zBv71H8p0X9X32XV7cCmLUGG7mvc9R8jNfloBabamJfI
+MIIEpAIBAAKCAQEA3aX7bLO3zeJcw4aac8I9ln0XoUfeVmJolp16BLCshH7odYSD
+bL7yN7c9RVhG/7rDka+lxmYYGMIyKUjkTKAcbjmYfEQzT5jvSqS2FzdYuIPgn5Bg
+CkKAVK+xRhpSg2iuH0YOscfASkNS8aq8fogDqSE+7VPWGD2K8ImG3YWmMHzEyl8g
+pVficqUUSloM1JLmuGEW9k5xB99zWl0tE8PgNLUcUjdur8EYXgq1X6PuglAdJBGj
+jfrMrohz9Zhqx492zIfzE3dx+btpbvtRlv0Xtx3RhS7h4RKuhJBdH5zwmj0voiSs
+FNS4EGcBnPlB4JU5pqlEusYaZvvv/edH2KGohwIDAQABAoIBAQDQTYhPrUqlJAJY
+Ay0uczLcNi259cffWVa/jbm5pKxNTNN8dg/paD5M3FmpzP/UoBnh1bgvD42/3umz
+YPylgqeVc216A8JRIQJqHQfAI9Sue8njS5Tmr37Zl9A7eMtpEjzpyTZQH9D4OfM+
+iV3icEM4dLUl529Ckrv7uNPVZiA8WZUNa3NQ4lsuLHms12FOAi17wBMJOu0xTse/
+vK7wucJ+p4wgXT8QZbOvqHmm3THMxKhhFYOoJK5S32jjy3kB4I56YzV6DRArLPNr
+RTjdXHtzNYUT4dYkDubekIDaebMKQi7nUofP6ZduJ7SAC9D118iKqChDTYP35Vmk
+kqqO2kgpAoGBAP47G+KhqT4tMLGs96r65Ve5KeRyLPLEgKfGXiEgrK1+lO9CFoTv
+7hmZ3cF61IccilP/Tw1MG5uRrnXJWVi/u1jvdZEg74dGO2PivYhmdEgw/ZfJCAcn
+r8W+KKfrUQCcL/h++IrcLUVcRF4xjbhyvaCBc0zSpvxA5pn724caTm5NAoGBAN8w
+1IUGpajJg8xHXca5y8UQeZwozjEn5oHdjivYL+lT2sKSKE49xzLmMPqhRtuIeiEe
+wBTo85PJ6SCjJPGc6wvbqPAq6CNC3BjZdh4i/+O87+fUloFAuXJn2TPAbulwFkvq
+5GjeTbrJL+pd+x8VYalWSYusyxTdnlJyPE3KXOQjAoGBAJnrM4DMm2i3d2m67N+p
+szyfMEvNDIWWjsYFBWxNGf6YSpdojbXChYcebvH66b07fExKoJPOZlCTrOpHEz72
+Jfk8UROiuyJNVRuuZU21qeUjNAW3gpLCZlr0PC0d/Ra/eROb2+JGV2pM6F+W5NSt
+Mz1/4ky6pLrImFTV9R0gwidpAoGAL7ZGmDF1lIGPtUnEWEk7sGL3PFTUz1lSQ4zT
+abgLdfvBFjscdq1qOg1PhySW+zNPuGjUcyPhfkR5m8qEiUocTSqmEMF7Yp5WYtGK
+GKMuxMaNGqgtjHADtNtSaWfHzgtyGMScE3cCct2zaoywtFJj0Elr63oC5/EAeWuG
+TLLn7LUCgYBB/Vy6WRhI8Eg+aI4vScgssdtx8FxGTYl/ZRQvgvK3iUnQdjcibY71
+oPy7L1yzbOokoGZJWfcsvefTbO62DEi3k9uYlCd6T32RMbR/s1UQFZDWKcpNKzbo
+5N21GE7lQp55F01nDE81RU4mcNhg1mf7792DobM7H+vM4wXW54sG9w==
 -----END RSA PRIVATE KEY-----

test/ssl/test-signing-ca.crt

@@ -5,54 +5,75 @@ Certificate:
         Signature Algorithm: sha256WithRSAEncryption
         Issuer: C=GB, ST=Derbyshire, L=Derby, O=Mosquitto Project, OU=Testing, CN=Root CA
         Validity
-            Not Before: Sep 10 09:33:42 2019 GMT
-            Not After : Sep  8 09:33:42 2024 GMT
+            Not Before: Feb 25 14:54:18 2020 GMT
+            Not After : Feb 23 14:54:18 2025 GMT
         Subject: C=GB, ST=Derbyshire, O=Mosquitto Project, OU=Testing, CN=Signing CA
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-                RSA Public-Key: (1024 bit)
+                RSA Public-Key: (2048 bit)
                 Modulus:
-                    00:e3:39:bc:07:48:ed:c3:d2:3e:4f:a0:61:9a:2b:
-                    e9:46:7a:68:33:52:01:1b:7f:45:88:49:05:85:fd:
-                    30:8c:2e:60:17:77:b3:38:c3:06:7c:fc:87:a8:61:
-                    29:03:86:07:20:8f:f8:d2:f0:bb:66:93:33:91:37:
-                    ed:f6:64:b7:46:a5:f6:7d:f7:94:98:52:bc:78:90:
-                    6d:0b:db:61:c6:00:23:79:c2:a6:3b:2b:ee:c7:3d:
-                    96:97:9b:4e:eb:78:56:95:52:13:d4:5f:ea:18:85:
-                    18:0a:d6:d9:cd:4b:b0:15:ef:2f:f0:27:ef:b1:af:
-                    d2:4f:ca:b8:93:c1:2f:2e:4f
+                    00:c1:a1:1a:6e:76:1f:98:b7:1c:7e:d6:67:d5:dc:
+                    92:34:ef:48:22:62:94:56:cb:21:29:c1:88:7c:7a:
+                    62:eb:6d:b9:af:8b:80:75:f4:8e:32:e2:20:e2:fa:
+                    3a:49:c8:20:74:53:83:0f:c1:48:e2:13:3e:48:27:
+                    f2:e5:7d:55:c5:87:8c:41:9e:e2:90:58:8c:09:97:
+                    1e:bc:5a:ce:10:71:b2:66:02:02:9b:0c:d0:24:47:
+                    7a:3a:4d:3a:2e:c0:f0:65:6b:6a:cf:13:13:8a:f0:
+                    6d:a0:a5:80:5f:6b:58:77:ae:91:6e:ba:ab:c5:c0:
+                    24:f7:22:27:a4:bf:47:52:2d:a0:fc:56:b0:19:16:
+                    84:e9:53:ac:1d:7f:29:af:c2:86:44:f5:9b:04:e4:
+                    bf:8f:e1:b8:61:a0:63:55:0a:7a:93:2a:d8:4a:20:
+                    b8:6b:b6:e9:20:c6:2c:c2:93:c2:dc:7a:69:90:8e:
+                    ea:00:5b:0c:66:8a:90:74:b4:d9:01:98:9d:fe:5b:
+                    66:e0:39:19:22:50:0d:76:3d:1c:04:fb:93:4d:6e:
+                    45:da:e8:cc:27:35:2a:a6:35:a8:87:e1:99:32:42:
+                    e8:71:eb:7c:f9:69:70:c7:cf:c5:cc:61:c5:ae:47:
+                    dc:20:86:2b:2b:fe:1c:dd:2c:e9:b0:38:b6:72:8e:
+                    09:e9
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                EA:BE:42:EF:98:17:84:D5:FC:28:89:5A:4B:A5:B6:41:4F:7B:BB:28
+                AA:5A:5B:1C:91:32:9B:3F:9B:C3:42:6C:D2:68:F6:A7:E0:CF:BE:E0
             X509v3 Authority Key Identifier: 
-                keyid:CF:F3:9D:BB:BF:2B:14:D5:A2:E5:EC:41:CF:9C:16:D0:4D:AB:84:04
+                keyid:7A:89:5D:1E:C9:B1:72:2F:38:DB:DE:E7:D3:49:80:2C:01:FA:3B:74
 
             X509v3 Basic Constraints: 
                 CA:TRUE
     Signature Algorithm: sha256WithRSAEncryption
-         0f:7d:4c:71:ef:5e:5d:a2:0e:09:da:37:bd:21:77:73:77:b1:
-         02:7e:56:7d:82:c0:b9:53:77:c3:bb:9b:08:cf:00:b3:73:18:
-         2d:c5:9c:1a:57:8c:2b:46:21:bf:28:2e:f4:6d:12:6a:c3:7f:
-         8c:c6:a5:9b:bf:ed:47:cd:88:58:94:35:1f:5c:1e:a7:0d:17:
-         96:5f:1b:70:ad:da:05:26:0c:52:d1:87:52:3c:e3:e1:23:ac:
-         aa:fa:f3:80:48:52:30:da:59:e2:de:0c:61:95:3c:63:ef:1d:
-         ec:b3:6d:c7:89:e6:e3:65:6c:be:d4:e7:a7:90:8c:f4:ff:1d:
-         65:72
+         d3:8d:e3:33:87:f3:1e:4f:ff:da:1d:f8:61:3f:4a:ae:21:49:
+         cd:ee:b1:e0:62:ab:44:70:a8:29:92:83:8d:33:45:4c:ac:b0:
+         66:a0:e8:32:23:76:ef:aa:89:7d:bc:e1:04:17:a5:d7:39:59:
+         99:ab:d9:bf:0c:fd:c5:b6:ad:6f:45:39:c9:27:f1:3e:c0:af:
+         c3:8e:b1:1f:8f:fc:34:66:31:f4:f1:11:a0:27:99:a2:65:e2:
+         aa:20:a7:98:b6:0e:ff:71:5e:10:e7:ab:1e:33:e7:fb:c8:59:
+         d7:89:7a:3b:d9:a9:9f:48:2f:2e:ff:02:61:cd:86:47:60:61:
+         8e:81:71:68:f0:cd:63:72:b8:d2:7d:22:9d:6b:07:49:3a:0a:
+         f7:8b:94:b3:98:90:3c:9f:e5:78:1b:84:a9:2e:fb:85:64:59:
+         ce:6f:33:05:18:bc:21:df:f5:7c:10:79:d6:58:34:61:0e:1f:
+         d5:af:b6:a0:8f:86:ce:56:d1:67:4f:b8:7e:50:2d:ba:77:37:
+         50:0f:91:06:dc:a8:7f:3c:8b:2b:8b:47:df:e3:7e:2f:79:81:
+         22:70:eb:f9:14:f3:66:73:17:33:e4:26:7e:47:df:80:89:de:
+         a5:e8:5a:a9:c0:4b:3e:1b:9b:11:4b:3b:b4:8b:6a:9d:6c:ce:
+         39:f5:04:c9
 -----BEGIN CERTIFICATE-----
-MIICnTCCAgagAwIBAgIBATANBgkqhkiG9w0BAQsFADByMQswCQYDVQQGEwJHQjET
+MIIDojCCAoqgAwIBAgIBATANBgkqhkiG9w0BAQsFADByMQswCQYDVQQGEwJHQjET
 MBEGA1UECAwKRGVyYnlzaGlyZTEOMAwGA1UEBwwFRGVyYnkxGjAYBgNVBAoMEU1v
 c3F1aXR0byBQcm9qZWN0MRAwDgYDVQQLDAdUZXN0aW5nMRAwDgYDVQQDDAdSb290
-IENBMB4XDTE5MDkxMDA5MzM0MloXDTI0MDkwODA5MzM0MlowZTELMAkGA1UEBhMC
+IENBMB4XDTIwMDIyNTE0NTQxOFoXDTI1MDIyMzE0NTQxOFowZTELMAkGA1UEBhMC
 R0IxEzARBgNVBAgMCkRlcmJ5c2hpcmUxGjAYBgNVBAoMEU1vc3F1aXR0byBQcm9q
-ZWN0MRAwDgYDVQQLDAdUZXN0aW5nMRMwEQYDVQQDDApTaWduaW5nIENBMIGfMA0G
-CSqGSIb3DQEBAQUAA4GNADCBiQKBgQDjObwHSO3D0j5PoGGaK+lGemgzUgEbf0WI
-SQWF/TCMLmAXd7M4wwZ8/IeoYSkDhgcgj/jS8LtmkzORN+32ZLdGpfZ995SYUrx4
-kG0L22HGACN5wqY7K+7HPZaXm07reFaVUhPUX+oYhRgK1tnNS7AV7y/wJ++xr9JP
-yriTwS8uTwIDAQABo1AwTjAdBgNVHQ4EFgQU6r5C75gXhNX8KIlaS6W2QU97uygw
-HwYDVR0jBBgwFoAUz/Odu78rFNWi5exBz5wW0E2rhAQwDAYDVR0TBAUwAwEB/zAN
-BgkqhkiG9w0BAQsFAAOBgQAPfUxx715dog4J2je9IXdzd7ECflZ9gsC5U3fDu5sI
-zwCzcxgtxZwaV4wrRiG/KC70bRJqw3+MxqWbv+1HzYhYlDUfXB6nDReWXxtwrdoF
-JgxS0YdSPOPhI6yq+vOASFIw2lni3gxhlTxj7x3ss23HiebjZWy+1OenkIz0/x1l
-cg==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 -----END CERTIFICATE-----

test/ssl/test-signing-ca.key

@@ -1,15 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIICWwIBAAKBgQDjObwHSO3D0j5PoGGaK+lGemgzUgEbf0WISQWF/TCMLmAXd7M4
-wwZ8/IeoYSkDhgcgj/jS8LtmkzORN+32ZLdGpfZ995SYUrx4kG0L22HGACN5wqY7
-K+7HPZaXm07reFaVUhPUX+oYhRgK1tnNS7AV7y/wJ++xr9JPyriTwS8uTwIDAQAB
-AoGAXKqD8xib1ptcTA7lHwG/bb2n1x4fU35w9eaJuR4LeW/EQm3PiluGvtwh2tpc
-5pH3QCFW4XfJhUiM5DFB+5URZJpklcFZ77WNTm6T4ib1769MQWeh+Cyjm65VJZb7
-Bx4vlmxXs/pS47QNUG/xCMRZAxkHVlwIUFTolcJ51/2nbUECQQD/0L29S7F7yUX8
-1yWZYmnKPhNesien7ruD7NaVslDZanzCo3X0JTyVOnVYsTPt27yOcinyGnvEF0mN
-bjwIRiLvAkEA42O2MLCzlNIw2AxlQiPskDN+s4lCs8T2rqZQ7O6aZgBFinKKQEtR
-x5uQv8QALTi5yv/GWbTyhBgGBzIfyigqoQI/C/285yKlLyhAH5n2KTpzuwct4UJ4
-mWaXY5e2d03kfEyBjJ4c6VTVgik7Vuz3gi7Kp+KyFKcpJgfxaq/AIKMpAkAxHqAD
-opgYZNNSSFMzV2lJuSX8iIEVLk4PajP/Cofl0tcy0g1VWC/hS5SYKDHVkvRnipsB
-U9ozeLEMquI9HDIhAkEAgC/ceGB0UR7PjlTw3U4Fe2Shnv+0pdnFfSTKh6dS034y
-JmHrZRqBMjHX4Hsph3Xjf6sy6SFKg67xeaeNmFoXZg==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 -----END RSA PRIVATE KEY-----