[auth system] Add PKI test data

tests/src/python/test_qgsauthsystem.py

@@ -0,0 +1,571 @@
+# -*- coding: utf-8 -*-
+"""QGIS Unit tests for bindings to core authentication system classes
+
+From build dir: ctest -R PyQgsAuthenticationSystem -V
+
+.. note:: This program is free software; you can redistribute it and/or modify
+it under the terms of the GNU General Public License as published by
+the Free Software Foundation; either version 2 of the License, or
+(at your option) any later version.
+"""
+__author__ = 'Larry Shaffer'
+__date__ = '2014/11/05'
+__copyright__ = 'Copyright 2014, Boundless Spatial, Inc.'
+# This will get replaced with a git SHA1 when you do a git archive
+__revision__ = '$Format:%H$'
+
+import os
+import tempfile
+import time
+
+from qgis.core import *
+from qgis.gui import *
+
+from PyQt4.QtCore import *
+from PyQt4.QtGui import *
+from PyQt4.QtNetwork import *
+from PyQt4.QtTest import *
+
+from utilities import (
+    TestCase,
+    getQgisTestApp,
+    unittest,
+    expectedFailure,
+    unitTestDataPath,
+)
+
+AUTHDBDIR = tempfile.mkdtemp()
+os.environ['QGIS_AUTH_DB_DIR_PATH'] = AUTHDBDIR
+QGISAPP, CANVAS, IFACE, PARENT = getQgisTestApp()
+
+TESTDATA = os.path.join(unitTestDataPath(), 'auth_system')
+PKIDATA = os.path.join(TESTDATA, 'certs_keys')
+
+
+class TestQgsAuthManager(TestCase):
+
+    @classmethod
+    def setUpClass(cls):
+        cls.authm = QgsAuthManager.instance()
+        assert not cls.authm.isDisabled(), cls.authm.disabledMessage()
+
+        cls.mpass = 'pass'  # master password
+
+        db1 = QFileInfo(cls.authm.authenticationDbPath()).canonicalFilePath()
+        db2 = QFileInfo(AUTHDBDIR + '/qgis-auth.db').canonicalFilePath()
+        msg = 'Auth db temp path does not match db path of manager'
+        assert db1 == db2, msg
+
+    def setUp(self):
+        testid = self.id().split('.')
+        testheader = '\n#####_____ {0}.{1} _____#####\n'. \
+            format(testid[1], testid[2])
+        qDebug(testheader)
+
+        if (not self.authm.masterPasswordIsSet()
+                or not self.authm.masterPasswordHashInDb()):
+            self.set_master_password()
+
+    def widget_dialog(self, widget):
+        dlg = QDialog()
+        widget.setParent(dlg)
+        layout = QVBoxLayout()
+        layout.addWidget(widget)
+        layout.setMargin(6)
+        button_box = QDialogButtonBox(QDialogButtonBox.Close)
+        button_box.rejected.connect(dlg.close)
+        layout.addWidget(button_box)
+        dlg.setLayout(layout)
+        return dlg
+
+    def show_editors_widget(self):
+        editors = QgsAuthEditorWidgets()
+        dlg = self.widget_dialog(editors)
+        dlg.exec_()
+
+    def set_master_password(self):
+        msg = 'Failed to store and verify master password in auth db'
+        assert self.authm.setMasterPassword(self.mpass, True), msg
+
+    def test_010_master_password(self):
+        msg = 'Master password is not set'
+        self.assertTrue(self.authm.masterPasswordIsSet(), msg)
+
+        msg = 'Master password hash is not in database'
+        self.assertTrue(self.authm.masterPasswordHashInDb(), msg)
+
+        msg = 'Master password not verified against hash in database'
+        self.assertTrue(self.authm.verifyMasterPassword(), msg)
+
+        msg = 'Master password comparison dissimilar'
+        self.assertTrue(self.authm.masterPasswordSame(self.mpass), msg)
+
+        msg = 'Master password not unset'
+        self.authm.clearMasterPassword()
+        self.assertFalse(self.authm.masterPasswordIsSet(), msg)
+
+        msg = 'Master password not reset and validated'
+        self.assertTrue(self.authm.setMasterPassword(self.mpass, True), msg)
+
+        # NOTE: reset of master password is in auth db test unit
+
+    def test_020_cert_utilities(self):
+        pass
+
+    def test_030_auth_settings(self):
+        pass
+
+    def test_040_authorities(self):
+
+        def rebuild_caches():
+            m = 'Authorities cache could not be rebuilt'
+            self.assertTrue(self.authm.rebuildCaCertsCache(), m)
+
+            m = 'Authorities trust policy cache could not be rebuilt'
+            self.assertTrue(self.authm.rebuildTrustedCaCertsCache(), m)
+
+        def trusted_ca_certs():
+            tr_certs = self.authm.getTrustedCaCerts()
+            m = 'Trusted authorities cache is empty'
+            self.assertIsNotNone(tr_certs, m)
+            return tr_certs
+
+        msg = 'No system root CAs'
+        self.assertIsNotNone(self.authm.getSystemRootCAs())
+
+        # TODO: add more tests
+        full_chain = 'chains_subissuer-issuer-root_issuer2-root2.pem'
+        full_chain_path = os.path.join(PKIDATA, full_chain)
+
+        # load CA file authorites for later comaprison
+        # noinspection PyTypeChecker
+        # ca_certs = QSslCertificate.fromPath(full_chain_path)
+        ca_certs = QgsAuthCertUtils.certsFromFile(full_chain_path)
+        msg = 'Authorities file could not be parsed'
+        self.assertIsNotNone(ca_certs, msg)
+
+        msg = 'Authorities file parsed count is incorrect'
+        self.assertEqual(len(ca_certs), 5, msg)
+
+        # first test CA file can be set and loaded
+        msg = 'Authority file path setting could not be stored'
+        self.assertTrue(
+            self.authm.storeAuthSetting('cafile', full_chain_path), msg)
+
+        msg = "Authority file 'allow invalids' setting could not be stored"
+        self.assertTrue(
+            self.authm.storeAuthSetting('cafileallowinvalid', False), msg)
+
+        rebuild_caches()
+        trusted_certs = trusted_ca_certs()
+
+        not_cached = any([ca not in trusted_certs for ca in ca_certs])
+        msg = 'Authorities not in trusted authorities cache'
+        self.assertFalse(not_cached, msg)
+
+        # test CA file can be unset
+        msg = 'Authority file path setting could not be removed'
+        self.assertTrue(self.authm.removeAuthSetting('cafile'), msg)
+
+        msg = "Authority file 'allow invalids' setting could not be removed"
+        self.assertTrue(
+            self.authm.removeAuthSetting('cafileallowinvalid'), msg)
+
+        rebuild_caches()
+        trusted_certs = trusted_ca_certs()
+
+        still_cached = any([ca in trusted_certs for ca in ca_certs])
+        msg = 'Authorities still in trusted authorities cache'
+        self.assertFalse(still_cached, msg)
+
+        # test CAs can be stored in database
+        msg = "Authority certs could not be stored in database"
+        self.assertTrue(self.authm.storeCertAuthorities(ca_certs))
+
+        rebuild_caches()
+        trusted_certs = trusted_ca_certs()
+
+        not_cached = any([ca not in trusted_certs for ca in ca_certs])
+        msg = 'Stored authorities not in trusted authorities cache'
+        self.assertFalse(not_cached, msg)
+
+        # dlg = QgsAuthTrustedCAsDialog()
+        # dlg.exec_()
+
+    def test_050_trust_policy(self):
+        pass
+
+    def test_060_identities(self):
+        client_cert_path = os.path.join(PKIDATA, 'fra_cert.pem')
+        client_key_path = os.path.join(PKIDATA, 'fra_key_w-pass.pem')
+        client_key_pass = 'password'
+        client_p12_path = os.path.join(PKIDATA, 'gerardus_w-chain.p12')
+        client_p12_pass = 'password'
+
+        # store regular PEM cert/key and generate config
+        bundle1 = QgsPkiBundle.fromPemPaths(client_cert_path, client_key_path,
+                                            client_key_pass)
+        bundle1_cert = bundle1.clientCert()
+        bundle1_key = bundle1.clientKey()
+        bundle1_ca_chain = bundle1.caChain()
+        bundle1_cert_sha = bundle1.certId()
+
+        # with open(client_key_path, 'r') as f:
+        #     key_data = f.read()
+        #
+        # client_cert = QgsAuthCertUtils.certsFromFile(client_cert_path)[0]
+        msg = 'Identity PEM certificate is null'
+        self.assertFalse(bundle1_cert.isNull(), msg)
+
+        # cert_sha = QgsAuthCertUtils.shaHexForCert(client_cert)
+        #
+        # client_key = QSslKey(key_data, QSsl.Rsa, QSsl.Pem,
+        #                      QSsl.PrivateKey, client_key_pass)
+        msg = 'Identity PEM key is null'
+        self.assertFalse(bundle1_key.isNull(), msg)
+
+        msg = 'Identity PEM certificate chain is not empty'
+        self.assertEqual(len(bundle1_ca_chain), 0, msg)
+
+        msg = "Identity PEM could not be stored in database"
+        self.assertTrue(
+            self.authm.storeCertIdentity(bundle1_cert, bundle1_key), msg)
+
+        msg = "Identity PEM not found in database"
+        self.assertTrue(self.authm.existsCertIdentity(bundle1_cert_sha), msg)
+
+        config1 = QgsAuthConfigIdentityCert()
+        config1.setName('IdentityCert - PEM')
+        config1.setCertId(bundle1_cert_sha)
+
+        msg = 'Could not store PEM identity config'
+        self.assertTrue(self.authm.storeAuthenticationConfig(config1), msg)
+
+        configid1 = config1.id()
+        msg = 'Could not retrieve PEM identity config id from store op'
+        self.assertIsNotNone(configid1, msg)
+
+        config2 = QgsAuthConfigIdentityCert()
+        msg = 'Could not load PEM identity config'
+        self.assertTrue(
+            self.authm.loadAuthenticationConfig(configid1, config2, True),
+            msg)
+
+        # store PKCS#12 bundled cert/key and generate config
+        # bundle = QgsPkcsBundle(client_p12_path, client_p12_pass)
+        bundle = QgsPkiBundle.fromPkcs12Paths(client_p12_path, client_p12_pass)
+        bundle_cert = bundle.clientCert()
+        bundle_key = bundle.clientKey()
+        bundle_ca_chain = bundle.caChain()
+        bundle_cert_sha = QgsAuthCertUtils.shaHexForCert(bundle_cert)
+
+        msg = 'Identity bundle certificate is null'
+        self.assertFalse(bundle_cert.isNull(), msg)
+
+        msg = 'Identity bundle key is null'
+        self.assertFalse(bundle_key.isNull(), msg)
+
+        msg = 'Identity bundle CA chain is not correct depth'
+        self.assertEqual(len(bundle_ca_chain), 3, msg)
+
+        msg = "Identity bundle could not be stored in database"
+        self.assertTrue(
+            self.authm.storeCertIdentity(bundle_cert, bundle_key), msg)
+
+        msg = "Identity bundle not found in database"
+        self.assertTrue(self.authm.existsCertIdentity(bundle_cert_sha), msg)
+
+        bundle_config = QgsAuthConfigIdentityCert()
+        bundle_config.setName('IdentityCert - Bundle')
+        bundle_config.setCertId(bundle_cert_sha)
+
+        msg = 'Could not store bundle identity config'
+        self.assertTrue(
+            self.authm.storeAuthenticationConfig(bundle_config), msg)
+
+        bundle_configid = bundle_config.id()
+        msg = 'Could not retrieve bundle identity config id from store op'
+        self.assertIsNotNone(bundle_configid, msg)
+
+        bundle_config2 = QgsAuthConfigIdentityCert()
+        msg = 'Could not load bundle identity config'
+        self.assertTrue(
+            self.authm.loadAuthenticationConfig(bundle_configid,
+                                                bundle_config2,
+                                                True),
+            msg)
+
+        # TODO: add more tests
+        # self.show_editors_widget()
+
+        msg = 'Could not remove PEM identity config'
+        self.assertTrue(self.authm.removeAuthenticationConfig(configid1), msg)
+
+        msg = 'Could not remove bundle identity config'
+        self.assertTrue(
+            self.authm.removeAuthenticationConfig(bundle_configid), msg)
+
+    def test_070_servers(self):
+        # return
+        ssl_cert_path = os.path.join(PKIDATA, 'localhost_ssl_cert.pem')
+
+        ssl_cert = QgsAuthCertUtils.certsFromFile(ssl_cert_path)[0]
+        msg = 'SSL server certificate is null'
+        self.assertFalse(ssl_cert.isNull(), msg)
+
+        cert_sha = QgsAuthCertUtils.shaHexForCert(ssl_cert)
+
+        hostport = 'localhost:8443'
+        config = QgsAuthConfigSslServer()
+        config.setSslCertificate(ssl_cert)
+        config.setSslHostPort(hostport)
+        config.setSslIgnoredErrorEnums([QSslError.SelfSignedCertificate])
+        config.setSslPeerVerifyMode(QSslSocket.VerifyNone)
+        config.setSslPeerVerifyDepth(3)
+        config.setSslProtocol(QSsl.TlsV1)
+
+        msg = 'SSL config is null'
+        self.assertFalse(config.isNull(), msg)
+
+        msg = 'Could not store SSL config'
+        self.assertTrue(self.authm.storeSslCertCustomConfig(config), msg)
+
+        msg = 'Could not verify storage of SSL config'
+        self.assertTrue(
+            self.authm.existsSslCertCustomConfig(cert_sha, hostport), msg)
+
+        msg = 'Could not verify SSL config in all configs'
+        self.assertIsNotNone(self.authm.getSslCertCustomConfigs(), msg)
+
+        msg = 'Could not retrieve SSL config'
+        config2 = self.authm.getSslCertCustomConfig(cert_sha, hostport)
+        """:type: QgsAuthConfigSslServer"""
+        self.assertFalse(config2.isNull(), msg)
+
+        msg = 'Certificate of retrieved SSL config does not match'
+        self.assertEqual(config.sslCertificate(), config2.sslCertificate(), msg)
+
+        msg = 'HostPort of retrieved SSL config does not match'
+        self.assertEqual(config.sslHostPort(), config2.sslHostPort(), msg)
+
+        msg = 'IgnoredErrorEnums of retrieved SSL config does not match'
+        enums = config2.sslIgnoredErrorEnums()
+        self.assertTrue(QSslError.SelfSignedCertificate in enums, msg)
+
+        msg = 'PeerVerifyMode of retrieved SSL config does not match'
+        self.assertEqual(config.sslPeerVerifyMode(),
+                         config2.sslPeerVerifyMode(), msg)
+
+        msg = 'PeerVerifyDepth of retrieved SSL config does not match'
+        self.assertEqual(config.sslPeerVerifyDepth(),
+                         config2.sslPeerVerifyDepth(), msg)
+
+        msg = 'Protocol of retrieved SSL config does not match'
+        self.assertEqual(config.sslProtocol(), config2.sslProtocol(), msg)
+
+        # dlg = QgsAuthSslConfigDialog(None, ssl_cert, hostport)
+        # dlg.exec_()
+
+        msg = 'Could not remove SSL config'
+        self.assertTrue(
+            self.authm.removeSslCertCustomConfig(cert_sha, hostport), msg)
+
+        msg = 'Could not verify removal of SSL config'
+        self.assertFalse(
+            self.authm.existsSslCertCustomConfig(cert_sha, hostport), msg)
+
+    def test_080_auth_configid(self):
+        msg = 'Could not generate a config id'
+        self.assertIsNotNone(self.authm.uniqueConfigId(), msg)
+
+        uids = []
+        for _ in xrange(50):
+            # time.sleep(0.01)  # or else the salt is not random enough
+            uids.append(self.authm.uniqueConfigId())
+        msg = 'Generated 50 config ids are not unique:\n{0}\n{1}'.format(
+            uids,
+            list(set(uids))
+        )
+        self.assertEqual(len(uids), len(list(set(uids))), msg)
+
+    def config_list(self):
+        return ['Basic', 'PKI-Paths', 'PKI-PKCS#12']
+
+    def config_obj(self, kind, base=True):
+        if kind == 'Basic':
+            config = QgsAuthConfigBasic()
+            if base:
+                return config
+            config.setName(kind)
+            config.setUri('http://example.com')
+            config.setUsername('username')
+            config.setPassword('password')
+            config.setRealm('Realm')
+            return config
+        elif kind == 'PKI-Paths':
+            config = QgsAuthConfigPkiPaths()
+            if base:
+                return config
+            config.setName(kind)
+            config.setUri('http://example.com')
+            config.setCertId(os.path.join(PKIDATA, 'gerardus_cert.pem'))
+            config.setKeyId(os.path.join(PKIDATA, 'gerardus_key_w-pass.pem'))
+            config.setKeyPassphrase('password')
+            return config
+        elif kind == 'PKI-PKCS#12':
+            config = QgsAuthConfigPkiPkcs12()
+            if base:
+                return config
+            config.setName(kind)
+            config.setUri('http://example.com')
+            config.setBundlePath(os.path.join(PKIDATA, 'gerardus.p12'))
+            config.setBundlePassphrase('password')
+            return config
+
+    def config_values_valid(self, kind, config):
+        if kind == 'Basic':
+            """:type config: QgsAuthConfigBasic"""
+            return (
+                config.name() == kind
+                and config.uri() == 'http://example.com'
+                and config.username() == 'username'
+                and config.password() == 'password'
+                and config.realm() == 'Realm'
+            )
+        elif kind == 'PKI-Paths':
+            """:type config: QgsAuthConfigPkiPaths"""
+            return (
+                config.name() == kind
+                and config.uri() == 'http://example.com'
+                and config.certId() == os.path.join(PKIDATA,
+                                                    'gerardus_cert.pem')
+                and config.keyId() == os.path.join(PKIDATA,
+                                                   'gerardus_key_w-pass.pem')
+                and config.keyPassphrase() == 'password'
+            )
+        elif kind == 'PKI-PKCS#12':
+            """:type config: QgsAuthConfigPkiPkcs12"""
+            return (
+                config.name() == kind
+                and config.uri() == 'http://example.com'
+                and config.bundlePath() == os.path.join(PKIDATA, 'gerardus.p12')
+                and config.bundlePassphrase() == 'password'
+            )
+
+    def test_090_auth_configs(self):
+        # these list items need to match the QgsAuthType provider type strings
+        for kind in self.config_list():
+            config = self.config_obj(kind, base=False)
+            msg = 'Could not validate {0} config'.format(kind)
+            self.assertTrue(config.isValid(), msg)
+
+            msg = 'Could not store {0} config'.format(kind)
+            self.assertTrue(self.authm.storeAuthenticationConfig(config), msg)
+
+            configid = config.id()
+            msg = 'Could not retrieve {0} config id from store op'.format(kind)
+            self.assertIsNotNone(configid, msg)
+
+            msg = 'Config id {0} not in db'.format(configid)
+            self.assertFalse(self.authm.configIdUnique(configid), msg)
+
+            msg = 'Could not retrieve {0} config id from db'.format(kind)
+            self.assertTrue(configid in self.authm.configIds(), msg)
+
+            msg = 'Could not retrieve provider type for {0} config'.format(kind)
+            self.assertTrue(QgsAuthType.typeToString(
+                self.authm.configProviderType(configid)) == kind, msg)
+
+            msg = 'Could not retrieve provider ptr for {0} config'.format(kind)
+            self.assertTrue(
+                isinstance(self.authm.configProvider(configid),
+                           QgsAuthProvider), msg)
+
+            config2 = self.config_obj(kind, base=True)
+            msg = 'Could not load {0} config'.format(kind)
+            self.assertTrue(
+                self.authm.loadAuthenticationConfig(configid, config2, True),
+                msg)
+
+            msg = 'Could not validate loaded {0} config values'.format(kind)
+            self.assertTrue(self.config_values_valid(kind, config2), msg)
+
+            # values haven't been changed, but the db update still takes place
+            msg = 'Could not update {0} config values'.format(kind)
+            self.assertTrue(self.authm.updateAuthenticationConfig(config2), msg)
+
+            config3 = self.config_obj(kind, base=True)
+            msg = 'Could not load updated {0} config'.format(kind)
+            self.assertTrue(
+                self.authm.loadAuthenticationConfig(configid, config3, True),
+                msg)
+
+            msg = 'Could not validate updated {0} config values'.format(kind)
+            self.assertTrue(self.config_values_valid(kind, config3), msg)
+
+            msg = 'Could not remove {0} config (by id) from db'.format(kind)
+            self.assertTrue(
+                self.authm.removeAuthenticationConfig(configid), msg)
+
+            msg = 'Did not remove {0} config id from db'.format(kind)
+            self.assertFalse(configid in self.authm.configIds(), msg)
+
+    def test_100_auth_db(self):
+
+        for kind in self.config_list():
+            config = self.config_obj(kind, base=False)
+            msg = 'Could not store {0} config'.format(kind)
+            self.assertTrue(self.authm.storeAuthenticationConfig(config), msg)
+
+        msg = 'Could not store a sample of all configs in auth db'
+        self.assertTrue(
+            (len(self.authm.configIds()) == len(self.config_list())), msg)
+
+        msg = 'Could not retrieve available configs from auth db'
+        self.assertTrue(len(self.authm.availableConfigs()) > 0, msg)
+
+        backup = None
+        resetpass, backup = self.authm.resetMasterPassword(
+            'newpass', self.mpass, True, backup)
+        msg = 'Could not reset master password and/or re-encrypt configs'
+        self.assertTrue(resetpass, msg)
+
+        # qDebug('Backup db path: {0}'.format(backup))
+        msg = 'Could not retrieve backup path for reset master password op'
+        self.assertIsNotNone(backup)
+        self.assertTrue(backup != self.authm.authenticationDbPath(), msg)
+
+        msg = 'Could not verify reset master password'
+        self.assertTrue(self.authm.setMasterPassword('newpass', True), msg)
+
+        msg = 'Could not remove all configs from auth db'
+        self.assertTrue(self.authm.removeAllAuthenticationConfigs(), msg)
+
+        msg = 'Configs were not removed from auth db'
+        self.assertTrue(len(self.authm.configIds()) == 0, msg)
+
+        msg = 'Auth db does not exist'
+        self.assertTrue(os.path.exists(self.authm.authenticationDbPath()), msg)
+
+        QTest.qSleep(1000)  # necessary for new backup to have different name
+
+        msg = 'Could not erase auth db'
+        backup = None
+        reserase, backup = \
+            self.authm.eraseAuthenticationDatabase(True, backup)
+        self.assertTrue(reserase, msg)
+
+        # qDebug('Erase db backup db path: {0}'.format(backup))
+        msg = 'Could not retrieve backup path for erase db op'
+        self.assertIsNotNone(backup)
+        self.assertTrue(backup != self.authm.authenticationDbPath(), msg)
+
+        msg = 'Master password not erased from auth db'
+        self.assertTrue(not self.authm.masterPasswordIsSet()
+                        and not self.authm.masterPasswordHashInDb(), msg)
+
+        self.set_master_password()
+
+
+if __name__ == '__main__':
+    unittest.main()

tests/testdata/auth_system/certs_keys/chain_issuer2-root2.pem

@@ -0,0 +1,48 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

tests/testdata/auth_system/certs_keys/chain_subissuer-issuer-root.pem

@@ -0,0 +1,72 @@
+-----BEGIN CERTIFICATE-----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==
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIEEzCCA3ygAwIBAgIBATANBgkqhkiG9w0BAQsFADCBpzELMAkGA1UEBhMCVVMx
+DzANBgNVBAgTBkFsYXNrYTESMBAGA1UEBxMJQW5jaG9yYWdlMRUwEwYDVQQKEwxR
+R0lTIFRlc3QgQ0ExHjAcBgNVBAsTFUNlcnRpZmljYXRlIEF1dGhvcml0eTEaMBgG
+A1UEAxMRUUdJUyBUZXN0IFJvb3QgQ0ExIDAeBgkqhkiG9w0BCQEWEXRlc3RjZXJ0
+QHFnaXMub3JnMB4XDTE1MDYyMzAwMDAwMFoXDTI1MDYyMjIzNTk1OVowgacxCzAJ
+BgNVBAYTAlVTMQ8wDQYDVQQIEwZBbGFza2ExEjAQBgNVBAcTCUFuY2hvcmFnZTEV
+MBMGA1UEChMMUUdJUyBUZXN0IENBMR4wHAYDVQQLExVDZXJ0aWZpY2F0ZSBBdXRo
+b3JpdHkxGjAYBgNVBAMTEVFHSVMgVGVzdCBSb290IENBMSAwHgYJKoZIhvcNAQkB
+FhF0ZXN0Y2VydEBxZ2lzLm9yZzCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA
+x+pGQDALrOlI4ekKGowqBoL0XN10YEtI2VPdkHoH4+fr3DYoVkZn7jR7vJKi03+s
+5UXl0g8RTw1YvATw5aCDcFgWu42XdZgMqH+z7jifs/rT7PUdZwOOCpRPt5LwQcKY
+8Di8zIds6eEZH3BdjO3CTDK87U9hOT+GAo9frn7YrFkCAwEAAaOCAUswggFHMA8G
+A1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFAHLLCHGg5M9vf+qVbFwxGQu8i92MIHU
+BgNVHSMEgcwwgcmAFAHLLCHGg5M9vf+qVbFwxGQu8i92oYGtpIGqMIGnMQswCQYD
+VQQGEwJVUzEPMA0GA1UECBMGQWxhc2thMRIwEAYDVQQHEwlBbmNob3JhZ2UxFTAT
+BgNVBAoTDFFHSVMgVGVzdCBDQTEeMBwGA1UECxMVQ2VydGlmaWNhdGUgQXV0aG9y
+aXR5MRowGAYDVQQDExFRR0lTIFRlc3QgUm9vdCBDQTEgMB4GCSqGSIb3DQEJARYR
+dGVzdGNlcnRAcWdpcy5vcmeCAQEwCwYDVR0PBAQDAgEGMBEGCWCGSAGG+EIBAQQE
+AwIABzAeBglghkgBhvhCAQ0EERYPeGNhIGNlcnRpZmljYXRlMA0GCSqGSIb3DQEB
+CwUAA4GBAGk9qY01w5g2zuWWrwzrTzr6SFpykoMPG3sdvDLuXg3IWoQ2FX+ezwxh
+erwIb2wMbRnGDr6fHD5dEnLP6OeOTQ114l1FOGJtaxllwK5opGoR4c88rKpQ+1pn
+PMLPNyGv0Ju5vbsXHO+4ZmJdxx0DMeRIuRQnRDN/t24JuPV89hnY
+-----END CERTIFICATE-----

tests/testdata/auth_system/certs_keys/chains_subissuer-issuer-root_issuer2-root2.pem

@@ -0,0 +1,120 @@
+-----BEGIN CERTIFICATE-----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==
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIEFjCCA3+gAwIBAgIBATANBgkqhkiG9w0BAQsFADCBqDELMAkGA1UEBhMCVVMx
+DzANBgNVBAgTBkFsYXNrYTESMBAGA1UEBxMJQW5jaG9yYWdlMRUwEwYDVQQKEwxR
+R0lTIFRlc3QgQ0ExHjAcBgNVBAsTFUNlcnRpZmljYXRlIEF1dGhvcml0eTEbMBkG
+A1UEAxMSUUdJUyBUZXN0IFJvb3QyIENBMSAwHgYJKoZIhvcNAQkBFhF0ZXN0Y2Vy
+dEBxZ2lzLm9yZzAeFw0xNTA2MjMwMDAwMDBaFw0yNTA2MjIyMzU5NTlaMIGoMQsw
+CQYDVQQGEwJVUzEPMA0GA1UECBMGQWxhc2thMRIwEAYDVQQHEwlBbmNob3JhZ2Ux
+FTATBgNVBAoTDFFHSVMgVGVzdCBDQTEeMBwGA1UECxMVQ2VydGlmaWNhdGUgQXV0
+aG9yaXR5MRswGQYDVQQDExJRR0lTIFRlc3QgUm9vdDIgQ0ExIDAeBgkqhkiG9w0B
+CQEWEXRlc3RjZXJ0QHFnaXMub3JnMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKB
+gQCTGYrjANI8eSNEk+1ddRsJy/OFaDqJPyRydl37usVYWqyf52SItFIMJvDGvM4u
+8W/kFIvp2otHTeXWdmGCfc+j5H0Im3noqawT319GaTR929Uqp89GZYWYrIjTnZmS
+3i0ER4evmvPh+/zHT5slCCF0/vUCjJlEJP5AFXX+rc50PQIDAQABo4IBTDCCAUgw
+DwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUXRMROIVteCLnpp9s1yIw3d3HFh8w
+gdUGA1UdIwSBzTCByoAUXRMROIVteCLnpp9s1yIw3d3HFh+hga6kgaswgagxCzAJ
+BgNVBAYTAlVTMQ8wDQYDVQQIEwZBbGFza2ExEjAQBgNVBAcTCUFuY2hvcmFnZTEV
+MBMGA1UEChMMUUdJUyBUZXN0IENBMR4wHAYDVQQLExVDZXJ0aWZpY2F0ZSBBdXRo
+b3JpdHkxGzAZBgNVBAMTElFHSVMgVGVzdCBSb290MiBDQTEgMB4GCSqGSIb3DQEJ
+ARYRdGVzdGNlcnRAcWdpcy5vcmeCAQEwCwYDVR0PBAQDAgEGMBEGCWCGSAGG+EIB
+AQQEAwIABzAeBglghkgBhvhCAQ0EERYPeGNhIGNlcnRpZmljYXRlMA0GCSqGSIb3
+DQEBCwUAA4GBAEQK4s64LRrucB050zdfJh122CyLnhYBCTO2CO8g4lBE9j7hnEa5
+1PuuDf+fjoSmXeWAtoxvUbNl9r4fIjw7ES6RfmMO+fusl+hvwk03i+QbNDZ2d7dh
+p9EaQQLeJqSy5UkQFPKoMzdIwf+2PuF9CF1POgWoFKtMVnG7DPoRH3W4
+-----END CERTIFICATE-----

tests/testdata/auth_system/certs_keys/fra_cert.pem

@@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

tests/testdata/auth_system/certs_keys/fra_key.pem

@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIICXQIBAAKBgQDjgP8iwI9Ezi+mdzhmPticWkpkrcJeb3kI6flaADqMQ1Y0Azsb
+gTYoWdYBlFT3NnEJvB0vpzIs8PUogpdGYj9t0KpC/V4HdfrHBNR4cX/HL06dhJN0
+CmypX6Jd8BmYBhJcJK1Xne+/pez411cS3dlG52RBfE1EZ7TsjCnmMIud7wIDAQAB
+AoGAPf7SB+NXZ1WUkJVebiZkGr9UFHlxRRC1d+Niis8TJVPYMtZKjiU43+gTNFz6
+hl90kEWN4oV6W9rRw9dKZ+iwBbYjkcpnzyfn7N04j1J/lLe05HnSpE8buSE+QuTb
+tBZZXE6PZqYucrX7ug/oJKwfH1/32efoxnXr63fVllPr+cECQQD/AHq604hSwiUa
+HD/4yHcIPoJhHXD2IOXJnjVaQFLgDQkmuUGCEPcQdxEVFaODgwhBkBXWA2Wjz7xq
+ecCAqPVPAkEA5GT2mo+FHoEGaf1ZH+30AZkc1YXHMXsFfx5RKiUdYkMnYzd0n01N
+3CNEJmS/NOXpkjdH9rIE+JVeLXS2ybnlYQJBAJNgvo39tbtG89SMYTiy+4CrSAVC
+08ecqdIF+wXnST6uqgxUY5T9ox1EA35xHCjk8T+bO9ON8Q9k/5t2NJjnjacCQGhQ
+yOWNOaLWEYTlZwiTWUhFk4rewD0UUE1gHngeXY5c16eUU5rS5wXtwZm7mC1j+UuE
+HkVJx8V2C369eSMn2eECQQDMRlsHrcqEdN4MjsEmoD+d4XFecBlrtU4SpZs6y5er
+pSWG/95cG2HjQmiOWcxmkosnFgv/CvcyERIsM9bv4rqZ
+-----END RSA PRIVATE KEY-----

tests/testdata/auth_system/certs_keys/fra_key_w-pass.pem

@@ -0,0 +1,18 @@
+-----BEGIN RSA PRIVATE KEY-----
+Proc-Type: 4,ENCRYPTED
+DEK-Info: DES-EDE3-CBC,3835CE0E645598AB
+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+-----END RSA PRIVATE KEY-----

tests/testdata/auth_system/certs_keys/gerardus_cert.pem

@@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

tests/testdata/auth_system/certs_keys/gerardus_key.pem

@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

tests/testdata/auth_system/certs_keys/gerardus_key_w-pass.pem

@@ -0,0 +1,18 @@
+-----BEGIN RSA PRIVATE KEY-----
+Proc-Type: 4,ENCRYPTED
+DEK-Info: DES-EDE3-CBC,5AF74A3F052C0B06
+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+-----END RSA PRIVATE KEY-----

tests/testdata/auth_system/certs_keys/issuer2_ca_cert.pem

@@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----

tests/testdata/auth_system/certs_keys/issuer2_ca_key.pem

@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

tests/testdata/auth_system/certs_keys/issuer_ca_cert.pem

@@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----
+MIIEFTCCA36gAwIBAgIBAjANBgkqhkiG9w0BAQsFADCBpzELMAkGA1UEBhMCVVMx
+DzANBgNVBAgTBkFsYXNrYTESMBAGA1UEBxMJQW5jaG9yYWdlMRUwEwYDVQQKEwxR
+R0lTIFRlc3QgQ0ExHjAcBgNVBAsTFUNlcnRpZmljYXRlIEF1dGhvcml0eTEaMBgG
+A1UEAxMRUUdJUyBUZXN0IFJvb3QgQ0ExIDAeBgkqhkiG9w0BCQEWEXRlc3RjZXJ0
+QHFnaXMub3JnMB4XDTE1MDYyMzAwMDAwMFoXDTI1MDYyMjIzNTk1OVowgakxCzAJ
+BgNVBAYTAlVTMQ8wDQYDVQQIEwZBbGFza2ExEjAQBgNVBAcTCUFuY2hvcmFnZTEV
+MBMGA1UEChMMUUdJUyBUZXN0IENBMR4wHAYDVQQLExVDZXJ0aWZpY2F0ZSBBdXRo
+b3JpdHkxHDAaBgNVBAMTE1FHSVMgVGVzdCBJc3N1ZXIgQ0ExIDAeBgkqhkiG9w0B
+CQEWEXRlc3RjZXJ0QHFnaXMub3JnMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKB
+gQDtww6peeGANmz0ltmvhnv5e0sNAeLYrySpTBzYcLCA3nptlKyPThpBkcy+whLD
+z/kKv876l9h4I5R2JCSKEDGNDN4XF+Sc6qXumXQ4ZUwkyZh4k1LkGy8jHmWZHWYj
+0qnaqraupTKvGmLdeWoUgN4ofm6kAZJM/y6Ox14eUE9RDQIDAQABo4IBSzCCAUcw
+DwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUuVKjlsjIdCX/Vlw2CjVFBvyB+Uow
+gdQGA1UdIwSBzDCByYAUAcssIcaDkz29/6pVsXDEZC7yL3ahga2kgaowgacxCzAJ
+BgNVBAYTAlVTMQ8wDQYDVQQIEwZBbGFza2ExEjAQBgNVBAcTCUFuY2hvcmFnZTEV
+MBMGA1UEChMMUUdJUyBUZXN0IENBMR4wHAYDVQQLExVDZXJ0aWZpY2F0ZSBBdXRo
+b3JpdHkxGjAYBgNVBAMTEVFHSVMgVGVzdCBSb290IENBMSAwHgYJKoZIhvcNAQkB
+FhF0ZXN0Y2VydEBxZ2lzLm9yZ4IBATALBgNVHQ8EBAMCAQYwEQYJYIZIAYb4QgEB
+BAQDAgAHMB4GCWCGSAGG+EIBDQQRFg94Y2EgY2VydGlmaWNhdGUwDQYJKoZIhvcN
+AQELBQADgYEAmRQFTK+52IVItHrd6xpPrB0uPvZ5iSp2iAbxYj8M0qLu1f8iVyCv
+ZbbzByCEWheSdsXRGT+Xdc+RZ9eRzkt1Rm+CgPow865SpXYKnwZSZP6O5qL/uPyJ
+DBtk3Txn3J/ZxKxIC1F9dHsWh32AtfmB2b4YVP1I411RgIDDP5bpClY=
+-----END CERTIFICATE-----

tests/testdata/auth_system/certs_keys/issuer_ca_key.pem

@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

tests/testdata/auth_system/certs_keys/localhost_ssl_cert.pem

@@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

tests/testdata/auth_system/certs_keys/localhost_ssl_key.pem

@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

tests/testdata/auth_system/certs_keys/localhost_ssl_key_w-pass.pem

@@ -0,0 +1,18 @@
+-----BEGIN RSA PRIVATE KEY-----
+Proc-Type: 4,ENCRYPTED
+DEK-Info: DES-EDE3-CBC,DD489CA7829FD578
+
+AuHABslfJhipXXFRnDu0fzroePp30mrALURUPoouSThH9AI+FXnjeGvcYNfe++FF
+tAoxY7OWRHOWZGRxa3UqrTg9uieZPYOeQj4uDHrEf3pSOt4dRD61Xh8RJO/tRyRY
+7WupXUgvvpJ+m6yJNwmNcmTPAQY6eqvdMREnVR0eG39W71lmF0b3Me7RpQzBvdjP
+dBILbrEsWxhncPr3D1FCYaAh3m5wDrIjS/h4+1TkcgW3Qm0mYRX/iGGZxNhw7SCJ
+kHfblEELWgmlXMaHEENF0B1uPmyMzW2ivJeOFr2AFb4f+wxk8iV7Rn0717p/JASr
+XhbosjQLhvZRYsKyUM+uRaMt2lxghAJPaPmg9Lvz7nn8btQauaMtI39hHK/+mAIj
+Nmkv4pvnWSHp3LiYTj0XlTRs8YhNRfiWdq0a7gkOEM1icmm8PqWSGbj7xpRvcWZF
+Ow2xo8h4Sj1HJk23gnY570iIOQmF0HTLGN7JvcSwT0uN3wFzNI94ZGIfhTGt3rlO
+SjCw3l7MbxtAQ3469bDLPbyg2BZ4chWNvbNUqwhGo4jPANXiIc2kXrYQI+KCRfua
+NcYd2LAlJHXmvhGiMt2/mO3qCW4Prtrmbgwifw3VJ0WPhHY2GFlOvt9TPPJLcN7v
+z5eHfqHQLmzn577lxLisrMxbugKtGM3noLiIFG9a8cIX9BTD1e+FMWsHRzAyuIwI
+eJQKna8SeZwBrAwq8MoeiGBTli87dwOh3xRGCjsHXrYx92gqbxipjNk6hBKe2dfv
+8uRTxRfKluzRftL8xvhZLT9KLgawvLXHVD4iwnJc/G3qEFahEoMd3w==
+-----END RSA PRIVATE KEY-----

tests/testdata/auth_system/certs_keys/nicholas_cert.pem

@@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

tests/testdata/auth_system/certs_keys/nicholas_key.pem

@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

tests/testdata/auth_system/certs_keys/nicholas_key_w-pass.pem

@@ -0,0 +1,18 @@
+-----BEGIN RSA PRIVATE KEY-----
+Proc-Type: 4,ENCRYPTED
+DEK-Info: DES-EDE3-CBC,93E7458E253194F8
+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+-----END RSA PRIVATE KEY-----

tests/testdata/auth_system/certs_keys/ptolemy_cert.pem

@@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

tests/testdata/auth_system/certs_keys/ptolemy_key.pem

@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIICXAIBAAKBgQCuyiO7qMUYFkOACHQKrBmqPzNTINAvKaDELr+JNjkaZYqDy5Z2
+uX05YQRWQYgfX/OkC6KJ8EtIhMIbN+VXSbZbxKK47nex5kHrFOklpO2zQUE3VmyT
+yYDOPIryI2Uo1bwY98xAyS+bvePLieu8z9YEOaqjq1wwleSqVxjpEQw7mwIDAQAB
+AoGAIDUHGJEkoCeaEIF+QGkt4Xz7zBmDwuz8vqmOiY4AP6juORLOitnrBSOnVO2G
+U6Gul0+9h4VLmfU8fx9xlv/yJfDCYVhJosuoQfsl98hIKvgrlAoMZ2XegYV+h9zu
+HUQRcR2kxFI0CaWVqyEtLwM23YCbjLw2zQ2LmIBf2QDMBmECQQDW8Qyc62EMSHpW
+psIhDvbjxrzqB0aKS6CGhWT53kp6aZCMi6AqopAI0LqnqlRDhV5WBX0fMFU/Wqv0
+V6msNANNAkEA0C2ZxsIYmqbQZ/AS/ukYyTNUZnNY5o4kjZKfqMOe97bSYXYB5wtP
+goznMELuQ29p8w5E/pJDi5uWgszrmf12hwJBAIAFDlggMatZN9SIejOqcA52fmp9
+btxL8w5sQRo59e43Fes/9mOuc09s0t+uKYYV13wwxLdg2EVlwelElUCFsjkCQHRJ
+BJ0BzryUcdWdRP8fNbkt8vdHd2FSBRkPzh93JlU4ykumn2lv5/oEux86Q91nXsdm
+MSQCj7hsMKbf0Lsz2gECQBj/J4+YPaGMcw/sdNfH8Un/wbE411Nkukq2yIOQ+Aeb
+OZGBVzry1EuK34xlsbLMh3bWbhX+01TJkqeW00u2AH0=
+-----END RSA PRIVATE KEY-----

tests/testdata/auth_system/certs_keys/ptolemy_key_w-pass.pem

@@ -0,0 +1,18 @@
+-----BEGIN RSA PRIVATE KEY-----
+Proc-Type: 4,ENCRYPTED
+DEK-Info: DES-EDE3-CBC,F1410C56E1DF21AC
+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+-----END RSA PRIVATE KEY-----

tests/testdata/auth_system/certs_keys/root2_ca_cert.pem

@@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

tests/testdata/auth_system/certs_keys/root2_ca_key.pem

@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

tests/testdata/auth_system/certs_keys/root_ca_cert.pem

@@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

tests/testdata/auth_system/certs_keys/root_ca_key.pem

@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

tests/testdata/auth_system/certs_keys/subissuer_ca_cert.pem

@@ -0,0 +1,24 @@
+-----BEGIN CERTIFICATE-----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==
+-----END CERTIFICATE-----

tests/testdata/auth_system/certs_keys/subissuer_ca_key.pem

@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

tests/testdata/auth_system/xca/requests/fra.csr

@@ -0,0 +1,14 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

tests/testdata/auth_system/xca/requests/gerardus.csr

@@ -0,0 +1,14 @@
+-----BEGIN CERTIFICATE REQUEST-----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=
+-----END CERTIFICATE REQUEST-----

tests/testdata/auth_system/xca/requests/issuer2_ca.csr

@@ -0,0 +1,15 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

tests/testdata/auth_system/xca/requests/issuer_ca.csr

@@ -0,0 +1,15 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

tests/testdata/auth_system/xca/requests/localhost_ssl.csr

@@ -0,0 +1,15 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

tests/testdata/auth_system/xca/requests/nicholas.csr

@@ -0,0 +1,14 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIICOzCCAaQCAQAwgZsxCzAJBgNVBAYTAlVTMQ8wDQYDVQQIEwZBbGFza2ExEjAQ
+BgNVBAcTCUFuY2hvcmFnZTEVMBMGA1UEChMMUUdJUyBUZXN0IENBMRswGQYDVQQL
+ExJDbGllbnQgQ2VydGlmaWNhdGUxETAPBgNVBAMTCE5pY2hvbGFzMSAwHgYJKoZI
+hvcNAQkBFhF0ZXN0Y2VydEBxZ2lzLm9yZzCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
+gYkCgYEAy5l3wYOJa+kxTtYskFJ4Mv9tfN1ueYvflGYX6AM5A5LnNkUXPo2fY8Pr
+E8nE9NLMbjoEuN5d29lWw02fHwm8tnhd16FcZ2570LyIdN41Ll2L8T2vAFhFocr0
+Pw1Q3njFAuztIvi/lj//Hf/WnalFbOEywmbijjGLYDSmLipCa2ECAwEAAaBfMF0G
+CSqGSIb3DQEJDjFQME4wDAYDVR0TAQH/BAIwADALBgNVHQ8EBAMCBLAwEQYJYIZI
+AYb4QgEBBAQDAgWgMB4GCWCGSAGG+EIBDQQRFg94Y2EgY2VydGlmaWNhdGUwDQYJ
+KoZIhvcNAQEFBQADgYEALv1U6feAsCRZ++Qm2NgTIxc2Vi5HYcGMrx63fo50hqHH
+EdtlzhIOVxJTaHm0EjxPgRdgiIYF+rhKoVFYPo01v5kT9f4BjxNHeP/QEb3RYrei
+2KUqNtIXvWmKyj8rXtyUXLeXvxPxnLTQO89/1GxVCBhccEZw33VEZLQEPqLDbos=
+-----END CERTIFICATE REQUEST-----

tests/testdata/auth_system/xca/requests/ptolemy.csr

@@ -0,0 +1,14 @@
+-----BEGIN CERTIFICATE REQUEST-----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==
+-----END CERTIFICATE REQUEST-----

tests/testdata/auth_system/xca/requests/root2_ca.csr

@@ -0,0 +1,15 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

tests/testdata/auth_system/xca/requests/root_ca.csr

@@ -0,0 +1,15 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

tests/testdata/auth_system/xca/requests/subissuer_ca.csr

@@ -0,0 +1,15 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----