raktr 0.0.3 → 0.1.0

data/spec/raktr/connection/tls_spec.rb

@@ -77,14 +77,15 @@ describe Raktr::Connection::TLS do
 
     let(:client_valid_ssl_options) do
         {
-            ca:          pems_path + '/cacert.pem',
+            ca:          pems_path + '/ca-cert.pem',
             private_key: pems_path + '/client/key.pem',
+            public_key:  pems_path + '/client/pub.pem',
             certificate: pems_path + '/client/cert.pem'
         }
     end
     let(:client_invalid_ssl_options) do
         {
-            ca:          pems_path + '/cacert.pem',
+            ca:          pems_path + '/ca-cert.pem',
             private_key: pems_path + '/client/foo-key.pem',
             certificate: pems_path + '/client/foo-cert.pem'
         }
@@ -92,8 +93,9 @@ describe Raktr::Connection::TLS do
 
     let(:server_valid_ssl_options) do
         {
-            ca:          pems_path + '/cacert.pem',
+            ca:          pems_path + '/ca-cert.pem',
             private_key: pems_path + '/server/key.pem',
+            public_key:  pems_path + '/server/pub.pem',
             certificate: pems_path + '/server/cert.pem'
         }
     end
@@ -144,15 +146,15 @@ describe Raktr::Connection::TLS do
                     it "passes #{OpenSSL::SSL::SSLError} to #on_error" do
                         error = nil
 
-                        options = server_ssl_options.merge(
+                        options = {
                             on_error: proc do |e|
                                 error ||= e
                             end
-                        )
+                        }
 
                         raktr.run_in_thread
 
-                        raktr.listen( host, port, TLSHandler, options )
+                        raktr.listen( host, port, TLSHandler, options.merge( tls: server_ssl_options ) )
 
                         client_error = nil
                         begin
@@ -179,15 +181,15 @@ describe Raktr::Connection::TLS do
 
                         it 'connects successfully' do
                             received_data = nil
-                            options = server_ssl_options.merge(
+                            options = {
                                 on_read: proc do |received|
                                     received_data = received
                                 end
-                            )
+                            }
 
                             raktr.run_in_thread
 
-                            raktr.listen( host, port, TLSHandler, options )
+                            raktr.listen( host, port, TLSHandler, options.merge( tls: server_ssl_options ) )
 
                             client.write data
 
@@ -200,16 +202,19 @@ describe Raktr::Connection::TLS do
                         let(:client_ssl_options) { client_invalid_ssl_options }
 
                         it "passes #{OpenSSL::SSL::SSLError} to #on_error" do
-                            error = nil
+                            # error = nil
 
-                            options = server_ssl_options.merge(
-                                on_error: proc do |e|
-                                    error ||= e
-                                end
-                            )
+                            options = {}
 
                             raktr.run_in_thread
-                            raktr.listen( host, port, TLSHandler, options )
+
+                            err = nil
+                            begin
+                                raktr.listen( host, port, TLSHandler, options.merge( tls: server_ssl_options ) )
+                            rescue OpenSSL::X509::CertificateError => e
+                                err = e
+                            end
+                            err.should_not be_nil
 
                             client_error = nil
                             begin
@@ -218,11 +223,10 @@ describe Raktr::Connection::TLS do
                                 client_error = e
                             end
 
-                            [OpenSSL::SSL::SSLError, Errno::ECONNRESET].should include client_error.class
+                            [OpenSSL::SSL::SSLError, Errno::ECONNRESET, Errno::ECONNREFUSED].should include client_error.class
 
                             raktr.wait rescue Raktr::Error::NotRunning
-
-                            error.should be_kind_of OpenSSL::SSL::SSLError
+                            # error.should be_kind_of OpenSSL::SSL::SSLError
                         end
                     end
                 end
@@ -231,17 +235,16 @@ describe Raktr::Connection::TLS do
                     let(:client_ssl_options) { {} }
 
                     it "passes #{OpenSSL::SSL::SSLError} to #on_error" do
-                        error = nil
-
-                        options = server_ssl_options.merge(
-                            on_error: proc do |e|
-                                error ||= e
-                            end
-                        )
+                        options = {}
 
                         raktr.run_in_thread
 
-                        raktr.listen( host, port, TLSHandler, options )
+                        begin
+                            raktr.listen( host, port, TLSHandler, options.merge( tls: server_ssl_options ) )
+                        rescue OpenSSL::X509::CertificateError => e
+                            err = e
+                        end
+                        err.should_not be_nil
 
                         client_error = nil
                         begin
@@ -250,11 +253,9 @@ describe Raktr::Connection::TLS do
                             client_error = e
                         end
 
-                        [OpenSSL::SSL::SSLError, Errno::ECONNRESET].should include client_error.class
+                        [OpenSSL::SSL::SSLError, Errno::ECONNRESET, Errno::ECONNREFUSED].should include client_error.class
 
                         raktr.wait rescue Raktr::Error::NotRunning
-
-                        error.should be_kind_of OpenSSL::SSL::SSLError
                     end
                 end
             end
@@ -322,7 +323,7 @@ describe Raktr::Connection::TLS do
                             end
 
                             raktr.run do
-                                connection = raktr.connect( host, port, TLSHandler, client_valid_ssl_options )
+                                connection = raktr.connect( host, port, TLSHandler, tls: client_valid_ssl_options )
                                 connection.write data
                             end
 

data/spec/support/fixtures/handlers/echo_server_tls.rb

@@ -1,3 +1,5 @@
+require_relative 'echo_server'
+
 class EchoServerTLS < EchoServer
     include TLS
 

data/spec/support/fixtures/pems/ca-cert.pem

@@ -0,0 +1,33 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

data/spec/support/fixtures/pems/ca-key.pem

@@ -0,0 +1,52 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

data/spec/support/fixtures/pems/client/cert.pem

@@ -1,37 +1,33 @@
 -----BEGIN CERTIFICATE-----
-MIIGazCCBFOgAwIBAgIBAjANBgkqhkiG9w0BAQUFADBTMQswCQYDVQQGEwJHUjEY
-MBYGA1UEAxMPQXJhY2huaS10ZXN0LUNBMSowKAYJKoZIhvcNAQkBFhthcmFjaG5p
-QGFyYWNobmktc2Nhbm5lci5jb20wHhcNMTIxMTAyMTAyNDA4WhcNMjIxMDMwMTAy
-NDA4WjBKMQswCQYDVQQGEwJHUjEPMA0GA1UEAxMGQ2xpZW50MSowKAYJKoZIhvcN
-AQkBFhthcmFjaG5pQGFyYWNobmktc2Nhbm5lci5jb20wggIiMA0GCSqGSIb3DQEB
-AQUAA4ICDwAwggIKAoICAQDEl91flpFH2Y1b2voSsjYDEiC70ArJWrmgm/UFdtXT
-pCng9ACjJWuf/evBOa8SKmNFgM1NKMF7GaZghDid3npq4Pdz/C74Ci8Q3ORMPC25
-Cq5T8oLYr7OGRQG7cmAqq7fP7MbPikEoaV3sg9CYdCqeK5WqT4+2eWvJGZ6t3z/g
-A1WYoHMbhXS1MedPlJIboSUcUlvf2BEld4EzwjCAlF7IICAT37ijtlDqVZpByfii
-xj47wP/fx7AtHe7tog9h1MgM0ciJgvH9TT3Kc/iSHYwrhS6jcnlwju7P1YkaRjjO
-ODIt7HCf6ScMmK+XIJZRuI7I4zWSSUKI5vgj5BKtlyj71xHRcKX+wfUwhz92BwwE
-9kakl+0L4C11aWKHsYpT8J3NFH8soFpyUPmVQTDiNDcmbxQYHuZbSdWG5+XLYrLZ
-MJ8am9HB7Z9uQugyZxki/AgQyT21eCJBrg83A0zd+SYezsDA/SVEZXCCrrO5/u/f
-6+RGYZcWXaIk+18uai5ax0HwksN9AnIIYyH19Fkq516a231Hy37/RKn2W/vH7A/J
-YdleDe1wqeIApDC/jJncuO380BdzvvwbhTkp3KKjNcx0B9d917q+pguzotiVR19n
-/MyIZ2/EU6r+AGyt1jxFZQhbgL6ayVlMgflyCTcsfgN7kC6dW+7L5gfBt3MwoXgK
-lwIDAQABo4IBUTCCAU0wCQYDVR0TBAIwADARBglghkgBhvhCAQEEBAMCBLAwKwYJ
-YIZIAYb4QgENBB4WHFRpbnlDQSBHZW5lcmF0ZWQgQ2VydGlmaWNhdGUwHQYDVR0O
-BBYEFNDF0OQgaYJqWYB9onMoDJrI6sEHMIGDBgNVHSMEfDB6gBTxU601RtmudtfS
-BFYh2znJpP64LKFXpFUwUzELMAkGA1UEBhMCR1IxGDAWBgNVBAMTD0FyYWNobmkt
-dGVzdC1DQTEqMCgGCSqGSIb3DQEJARYbYXJhY2huaUBhcmFjaG5pLXNjYW5uZXIu
-Y29tggkA8FjCoCiD1/UwJgYDVR0SBB8wHYEbYXJhY2huaUBhcmFjaG5pLXNjYW5u
-ZXIuY29tMCYGA1UdEQQfMB2BG2FyYWNobmlAYXJhY2huaS1zY2FubmVyLmNvbTAL
-BgNVHQ8EBAMCBaAwDQYJKoZIhvcNAQEFBQADggIBAKOrRHhird4fhaVMHyNdTqQx
-tMuqYWrPb+L4vir7Gu9bfNXlS/b5QBBeFbg5YwVeMx2KTdJR9u3XK9PaQQCC0+ak
-tDy3beasiFvoThWmzaVLnPR2OpdRbbK9oFZuK7Y7Sdj6hFapbPcS3hG1M7uWtmiF
-Cwd3hmXzvyOH7DToQ5wRAtS3kE2I5J9kH8OVP/pIZ/OTnfDTHOilznOMmlJ+LuFh
-ECgxIFv9GRAb+J+AxFWBFNgm6yv6cGjAnT2rZR2B2WyKpmHs+mIxqmNSYldublKi
-OBVl13M2ETH9NKRkvNjYbD4nsZGWO85zGiv0AVaZxwEfIHuXQdWfSIhxno3UQpxJ
-UlCZTpGJ0wvHHrHC7GQZCCdr83Zq8MgcMgCuE78qNbYIE+rf6+MOhnxgg0sJ12Yr
-+++VrQx5HDOoChr39rFISRpi2vFxz5QsJONoNLvH0uJoxQ5UDlOXqeq6TlJBBNUk
-77IkxGfqU7XmF9uT8nmcU4hx8yhKFJOZ5ORHX+U8+yaQN8RsxQadF7OzS1MMQXkl
-UwIeFEQNNv0JOIkjZILIDHz++PL5Fa+5/lgAV24X68ZIQ5FkgoLoOIWgbcARlsj0
-62BJLPhrIbCUI7XDos+hTmMPWkzfGoIahL1mEMshlrKK/XGIFh9l1iKnI/4ze1bH
-9nvAl0/txVluZtYXlf2E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 -----END CERTIFICATE-----

data/spec/support/fixtures/pems/client/key.pem

@@ -1,51 +1,52 @@
------BEGIN RSA PRIVATE KEY-----
-MIIJKAIBAAKCAgEAxJfdX5aRR9mNW9r6ErI2AxIgu9AKyVq5oJv1BXbV06Qp4PQA
-oyVrn/3rwTmvEipjRYDNTSjBexmmYIQ4nd56auD3c/wu+AovENzkTDwtuQquU/KC
-2K+zhkUBu3JgKqu3z+zGz4pBKGld7IPQmHQqniuVqk+PtnlryRmerd8/4ANVmKBz
-G4V0tTHnT5SSG6ElHFJb39gRJXeBM8IwgJReyCAgE9+4o7ZQ6lWaQcn4osY+O8D/
-38ewLR3u7aIPYdTIDNHIiYLx/U09ynP4kh2MK4Uuo3J5cI7uz9WJGkY4zjgyLexw
-n+knDJivlyCWUbiOyOM1kklCiOb4I+QSrZco+9cR0XCl/sH1MIc/dgcMBPZGpJft
-C+AtdWlih7GKU/CdzRR/LKBaclD5lUEw4jQ3Jm8UGB7mW0nVhufly2Ky2TCfGpvR
-we2fbkLoMmcZIvwIEMk9tXgiQa4PNwNM3fkmHs7AwP0lRGVwgq6zuf7v3+vkRmGX
-Fl2iJPtfLmouWsdB8JLDfQJyCGMh9fRZKudemtt9R8t+/0Sp9lv7x+wPyWHZXg3t
-cKniAKQwv4yZ3Ljt/NAXc778G4U5KdyiozXMdAfXfde6vqYLs6LYlUdfZ/zMiGdv
-xFOq/gBsrdY8RWUIW4C+mslZTIH5cgk3LH4De5AunVvuy+YHwbdzMKF4CpcCAwEA
-AQKCAgBskz8VAtA78WAL4hWI69m+um1PrOe4Kx4oINoi6W3Q1HK4paoQcKNPGmrx
-LY2OJ9Dp2ugH/EFXXmQwG/Y04mGT06l26kl6fg1eb9C6deX+s3JyNJalW+x3dHcv
-ckzAZFRBRpDKoJ251u+jp202Nbov3vxqskQ50DeCOl8Twh/B9bV5dOv9wCgjxmrs
-3a4QCmC3kpjhOLDHk4fM8SveZ5MtTejJcR7Fc/SeZyapvQVPyNMoJ0Bp9BxN3qFN
-ptp9+ol94wKxR5ukfNtqi8A12pHGm2iVpqyBSL+GE3YEB9JpukmkaVgOSTNi1pTr
-j3jVq2tYcXvtzf4sI/vZvqW+L6TW8hGwCSORF9H7etCB+56jdUxPzWP2DJtFuD+N
-cCuw4LaxmBJBOuwuyXpwoxvmJDeSYdUKayA3jgxSyuJ6DY5ENVa4k9yM7IfYFsgC
-nT0mZJmnXzd3MMMTV7APlYjusdnEL2g7GhL2Jy3+RYgItgSPejraC+lPKJOxb93j
-hcww9sRlCdp+jiNXUbmJcBiU0CLVoJmjmigAje5NmKDG5oM+puhW5G2oHVHtmL5D
-4myOr7KxGaId+UKqhEYjMYU0YOSlhpMgIdamZsQrz5Oy/NnjOCZf5c10LR+xBiEY
-x1YaGvFdaiX+SOHf1OYLm/LLivyg2e16JY/AGlUizrlBvAnlwQKCAQEA5/NhJYtu
-y4PU7XwfcOwz7hr1PHp/tFLEfQ/JpOogLNe9+xeUnznrrnprRtm36CDTp/KgSgIv
-bwiwsKADcrmaepiytCHW7yFY3soQI+u+xdCvJjkD7dVlY4e1PxxPfghpvuz0ES60
-8TqiVAY3bmrie4oIPhU7T2fmaawTwmrDjHZQOBtHOGIYR5LSJNrS1t18PtK02CzD
-HlYIzF0vpck7LzUnZhNoUvVlfuC3HCKY6WshC+kBJpeSqtBMUPDxbqmgSKmve1rI
-MsGfEeo1Fqq/VY5gMDkwcrV24BTuHhXGInxmamhCf/0bAXyXR5LJ1nB/TjzFzPsO
-VjurhFuzhb1+dwKCAQEA2Pn/s+Pd41aw9OVqmf7rnngiWVH5ZH2wRM1Q9A3Q7TO8
-FmK5vYskszjotpm5vzaUAecYMSiWuQrjOKgtoUBHXSYSRxAfqih4UixeW7UbYLsI
-4ZJCgoLeH+mwiNowYPxhRrWWxSzpyWiK8Ho+oUJGnZSrTx2ZJutyPTLWDSeWcePW
-hBCGIcBmqyUjgH1+8+W7WWbvdtJPr22R+c7SDNfr6x1CQbdxV65EV/ZA47iaRhWA
-EK+2gXGrm/zPmbzmAoMT8e3Bw7IjziZLgmoGiBOubncZkRBFgg6kbiK5iq4hCvju
-u3S7zw5flTKfNBdg6L3iECZdNnx7NhAa1x+pX/g84QKCAQAJ17UOn80Sy8RUU4kO
-BKfrea9gYp5aq4x09h+LZPf6jykbp5OB8jZDECTPO9vm+MWigdQ1b8RNhOPiite6
-nY+llic3J5x0R0j7Iz3uGEnfIQzdpVu6UuzbfV2+kNf6tCawmGN++ylodyF+SUk+
-4UA9F81jvQjoRLNtVoT8IgWsRzT+PIIYLWl0WBGcyMBbp8hm7hAIgFXDSslSyr2D
-3ncpeKr0VOx/YLRu3uBGTF2KwiYD2F5ZIeNyZiZm5OKJ3J7VloXAyUhnhvnWC8c2
-8AXwfnsscLDSnUqvFZRJKIlg20CJUWVJAxeLR5svyVXRSLLOQhvup9Si6iNMGYwT
-p8ffAoIBACB933K6zsF6e+lQaZRB/lqutsYVZnlL8Rd8f4DsiLrcom/fvNzLd2V3
-QjIF9zDRJXzbdF34LAntvXUAikS5cXZbeyU1HujGQq5bgo3NIxprJ7tPwbH1kvnI
-bu0vb0s2wAJssvU38pJ8m0HDrJlNaXGzj6u7TPHtFCBh+nfh07+eVMNWDiADxdwf
-JZ/aKyau4k1TAs0SVWh5ygBUnlPaCbQdn4xjwg9VQ1rAv5raTA/urEzTY0sjEIW9
-aAEnrnH12wjBh+CcToxSY8BVzECYYeic4TE99IqzUqBDhvFjfgM8n9NmebFZ/6pB
-+GE+lv6DYNT2ScMdBP5ljv9j+GMss0ECggEBANSEzoqtnYKN+Ar4Klfa4VGa8Yy5
-v0EpIr5IqZ2dEMZWoXgxZthb1R68RD50tKI2X05Xrsw8gMlPGl5L0HkfCPdaGGhi
-+Hrn4ckeUId+NlKfxxdc5bISARP9vV/jdlJ37QOtm7LlLdhHw97Y8tN24E+N6gN0
-CjXGOEkAW/qT6wg7cFJvl8Ov6FTZrOCSxmzpwNaH04CM6G7lEWB/p/GiXSIULwZz
-UEuwDbRl+UnDihtR2R5E2BKbXSExFumCm+/34cGIFsd0+vc2x/r74R1FXxoF8Iwc
-OD6LesfpcEtvc1OckXup1WgQWdef3ESwkh+HRW+JhHCgsy7doLuJ4BfP5VA=
------END RSA PRIVATE KEY-----
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

data/spec/support/fixtures/pems/client/pub.pem

@@ -0,0 +1,14 @@
+-----BEGIN PUBLIC KEY-----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+-----END PUBLIC KEY-----

data/spec/support/fixtures/pems/generate-tls-certs.sh

@@ -0,0 +1,82 @@
+#!/bin/bash
+
+# tls-cert-generator.sh
+# Generates CA, server cert, client cert with private/public keys
+
+set -e  # Exit on any error
+
+# Configuration
+CA_KEY="ca-key.pem"
+CA_CERT="ca-cert.pem"
+SERVER_KEY="server-key.pem"
+SERVER_CSR="server.csr"
+SERVER_CERT="server-cert.pem"
+CLIENT_KEY="client-key.pem"
+CLIENT_CSR="client.csr"
+CLIENT_CERT="client-cert.pem"
+
+CA_SUBJECT="/C=US/ST=State/L=City/O=MyOrganization/OU=IT/CN=MyRootCA"
+SERVER_SUBJECT="/C=US/ST=State/L=City/O=MyOrganization/OU=Server/CN=localhost"
+CLIENT_SUBJECT="/C=US/ST=State/L=City/O=MyOrganization/OU=Client/CN=client.example.com"
+
+echo "Generating TLS Certificate Authority and Client/Server Certificates..."
+
+# 1. Generate CA private key and self-signed certificate
+echo "1. Creating CA key and certificate..."
+openssl genrsa -out "$CA_KEY" 4096
+chmod 600 "$CA_KEY"
+openssl req -x509 -new -nodes -key "$CA_KEY" -sha256 -days 3650 -out "$CA_CERT" -subj "$CA_SUBJECT"
+
+# 2. Generate Server key and certificate
+echo "2. Creating server key and certificate..."
+openssl genrsa -out "$SERVER_KEY" 4096
+chmod 600 "$SERVER_KEY"
+openssl req -new -key "$SERVER_KEY" -out "$SERVER_CSR" -subj "$SERVER_SUBJECT"
+
+# Server extensions (for TLS server)
+cat > server-ext.cnf << EOF
+extendedKeyUsage = serverAuth
+subjectAltName = DNS:localhost, IP:127.0.0.1
+EOF
+
+openssl x509 -req -in "$SERVER_CSR" -CA "$CA_CERT" -CAkey "$CA_KEY" -CAcreateserial \
+    -out "$SERVER_CERT" -days 365 -sha256 -extfile server-ext.cnf
+
+# 3. Generate Client key and certificate
+echo "3. Creating client key and certificate..."
+openssl genrsa -out "$CLIENT_KEY" 4096
+chmod 600 "$CLIENT_KEY"
+openssl req -new -key "$CLIENT_KEY" -out "$CLIENT_CSR" -subj "$CLIENT_SUBJECT"
+
+# Client extensions (for TLS client)
+cat > client-ext.cnf << EOF
+extendedKeyUsage = clientAuth
+EOF
+
+openssl x509 -req -in "$CLIENT_CSR" -CA "$CA_CERT" -CAkey "$CA_KEY" -CAcreateserial \
+    -out "$CLIENT_CERT" -days 365 -sha256 -extfile client-ext.cnf
+
+# 4. Extract public keys
+echo "4. Extracting public keys..."
+openssl rsa -in "$SERVER_KEY" -pubout -out server-pubkey.pem
+openssl rsa -in "$CLIENT_KEY" -pubout -out client-pubkey.pem
+
+# 5. Cleanup temporary files
+rm -f "$SERVER_CSR" "$CLIENT_CSR" server-ext.cnf client-ext.cnf ca.srl
+
+# 6. Set proper permissions
+chmod 644 *.pem
+chmod 600 *key.pem
+
+echo ""
+echo "Generation complete!"
+echo ""
+echo "Files created:"
+echo "   CA:           $CA_CERT, $CA_KEY"
+echo "   Server:       $SERVER_CERT, $SERVER_KEY, server-pubkey.pem"
+echo "   Client:       $CLIENT_CERT, $CLIENT_KEY, client-pubkey.pem"
+echo ""
+echo "Usage:"
+echo "   - For server: use $SERVER_CERT and $SERVER_KEY"
+echo "   - For client: use $CLIENT_CERT and $CLIENT_KEY"
+echo "   - Trust CA:   distribute $CA_CERT to clients"

data/spec/support/fixtures/pems/server/cert.pem

@@ -1,37 +1,34 @@
 -----BEGIN CERTIFICATE-----
-MIIGYTCCBEmgAwIBAgIBBTANBgkqhkiG9w0BAQUFADBTMQswCQYDVQQGEwJHUjEY
-MBYGA1UEAxMPQXJhY2huaS10ZXN0LUNBMSowKAYJKoZIhvcNAQkBFhthcmFjaG5p
-QGFyYWNobmktc2Nhbm5lci5jb20wHhcNMTIxMTAyMTAzMzQxWhcNMjIxMDMwMTAz
-MzQxWjBNMQswCQYDVQQGEwJHUjESMBAGA1UEAxMJbG9jYWxob3N0MSowKAYJKoZI
-hvcNAQkBFhthcmFjaG5pQGFyYWNobmktc2Nhbm5lci5jb20wggIiMA0GCSqGSIb3
-DQEBAQUAA4ICDwAwggIKAoICAQCz+OAzIMwVNujjweU3Zhvk0ZGYqTdJ73Jz5v7F
-O5JE35hTzy1kf6EgMEqmZqKeBe95fviv+7UXcqtYoyxFPB/ssSLeUMyO0fUZZMMi
-8EfqtZZveB1j7f0EfzSEG7eL5tCjb/Q8tXQvM33+0QfjnwcrSOr2fPPwbEiWU1d1
-cP1ZdRtgvAuo3a4Sga9xtJSFRe3iSpynJsQo482rSPpIcVfm5tArq8RVlztJPvXY
-A76iIgNddhdOM/3fBg+a6iXqkC7X0WPRoNt7XiVniwBIP1t5/2S7JyhRsN50Crfu
-9N6lZd/fij0xwr5hLzl5lXKdUI5iYZZfTpNiIXnUICswFOUHwV/2W8XADu1HHLeX
-a4knqnmX0h7c+bJm3UrXMiwU61tVENogjNc/vJP9fjy/Klfvgn5BXmpyTze7Xzlj
-JcTt0VNNKUdieLjJsVKVF42j6RH9farshcHcCzd4701WkMEsbHZYncMUYNCBqUg7
-5SuIFHIZfZ4wq06i8BLRXJRHK+P+kDp/cyJyr/UqtlJwFJIgtWYOO0SMhynBK8gC
-w/SE8Tlx0r/yIAyutyU6F4nE4wYfR3d8SyObzf5HD0rAtHBYUdPR5qFNePpEQlHR
-Kepgl/pMpPZ2X6e4HYqIBrrahMI0mAns285Z/iBKpv6MyJR1npEMNa8I0eugeAGO
-y0IcFQIDAQABo4IBRDCCAUAwCQYDVR0TBAIwADARBglghkgBhvhCAQEEBAMCBkAw
-KwYJYIZIAYb4QgENBB4WHFRpbnlDQSBHZW5lcmF0ZWQgQ2VydGlmaWNhdGUwHQYD
-VR0OBBYEFFQOlI4fxXxPl9UYd9MdoBsXt9ZWMIGDBgNVHSMEfDB6gBTxU601Rtmu
-dtfSBFYh2znJpP64LKFXpFUwUzELMAkGA1UEBhMCR1IxGDAWBgNVBAMTD0FyYWNo
-bmktdGVzdC1DQTEqMCgGCSqGSIb3DQEJARYbYXJhY2huaUBhcmFjaG5pLXNjYW5u
-ZXIuY29tggkA8FjCoCiD1/UwJgYDVR0SBB8wHYEbYXJhY2huaUBhcmFjaG5pLXNj
-YW5uZXIuY29tMCYGA1UdEQQfMB2BG2FyYWNobmlAYXJhY2huaS1zY2FubmVyLmNv
-bTANBgkqhkiG9w0BAQUFAAOCAgEAeKLkpVjOdO9r5FcZPhemKsL9AFmnbqWmSeFA
-Cmu7wyHwbDbgCS0tWnrq45qDbnAJxAqXQKzKS7QINxR80XMpgoaglx7qd1V5MEXK
-LXn4G6BJ5tAgEbLY7HnsUHQnLMK/KWCzMODweM2gtPTauChF9kIKWrBJuizfldAo
-ww8YOeZfPc77pEhC/vjttQOzfqcLjGvzpJJQVmd+i6JtH635hou9i0QXR//Nrf+l
-ymrCuh7sil/Z1bJdmrQ1yPb2fNgqwHnWHqwPSFb8heEGExKC6vNCS2A+e08HGQTR
-wNAQQYQRihtDC4lqNFcVdgZExXRypzbPE2l49RnDXCL/JOCisAErGd0kzBBj6SGD
-Z7AKH87esH1mNThWFCZJTYXFTthVpNbOpPQ78UbXz9tFbfVdbWAcOn9enNbVeZa5
-vbqIHQs7azy4I5NwQ2zK/+MO1egUbbCEhcUzoUgEx8NB3JeW2ziZDEzzyKqTcv0V
-EH+suZefvhHxI3tGg2UmFD1+SBEVNw/1jv1HsduTclI7ckGHLcFjt7hG1CFLfLZ3
-wEhN91GCsOrbckp8wBMsT1yiimasrVL2PKfa0ywUW0D6zRvBs5bgtGaWUPy1VX5W
-3LLbhwMZyaHnjT9GGw2cW1hea8TRWapj+/On4w2tRy6KtnkLBHgM3E+0E9DFwwVZ
-jppXDh8=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 -----END CERTIFICATE-----