From 6c11184eae0978a35a9429f19d414cb7e3dd24a7 Mon Sep 17 00:00:00 2001 From: Adel El-Beik <adel.el-beik@r3.com> Date: Wed, 30 Mar 2022 16:35:40 +0100 Subject: [PATCH] CORDA-4239: Regenerate test certificates with 10yr validity. --- .../internal/crypto/keystores/bridge_ec.jks | Bin 1163 -> 1162 bytes .../internal/crypto/keystores/bridge_rsa.jks | Bin 1804 -> 1804 bytes .../internal/crypto/keystores/float_ec.jks | Bin 1159 -> 1160 bytes .../internal/crypto/keystores/float_rsa.jks | Bin 1801 -> 1804 bytes .../internal/crypto/keystores/gencerts.sh | 40 ++++++++++++++++++ .../internal/crypto/keystores/trust.jks | Bin 501 -> 502 bytes 6 files changed, 40 insertions(+) create mode 100755 node-api/src/test/resources/net/corda/nodeapi/internal/crypto/keystores/gencerts.sh diff --git a/node-api/src/test/resources/net/corda/nodeapi/internal/crypto/keystores/bridge_ec.jks b/node-api/src/test/resources/net/corda/nodeapi/internal/crypto/keystores/bridge_ec.jks index 41bf8579a3b2698b972823800fa9d54737d2f4c6..f0a6921cff2767ab695f478ef30aa1e96519db64 100644 GIT binary patch delta 680 zcmeC??BbjtUtfPa<@ad@28McrS_3{dE^RhO7Dg>5K}JSa2A1qkjnP-mzm&GVDtX)F zUgq38t9A)=tTLXt#js|Q@vSq}%v;V(cei^nN%EGC*rYYn&SgGLIw9CywC3oSb8FA- z3vqlDrf_`yBGJYzg%Zz?v|IO|X)B+S%Ay{+*0rg0c}7~jSF)P6`7D=Gn;ij1q=9Z= zVqlHXGc~YeU|{@X(8Txyi03X~W@2PwV&SiwojLJjjI@!Ffw8fHp{b#%fl-t=uQ8Bo zWDem@c3{j%RbJt@>DKyN*^dJx_lOJh*`3_K!-C&>`{ARvEhWVsFhxtNT<n;0Ey82} z_uhSpi(2ZRTdZ5NLr~r2mW}gy?Z<mRFD^95H;`vz4wY4AkuVTz5NV2uJ3jsVLs`?y z84p<QP3Ha+9osjVm&r;*XRhes*BQH)3RS*Xk-7f!bq|pn`jZt{L=$2vlv&lqS<BDu z{Bl6})ug`@6|<f#c-g$BKgLn-nkDlWCIzjW-#_ybc@+(HUad4)aN@fBmmk9U$~V(y z<zBunfAeJ?A{cf8gJ3HVM?!;vGd*l0Fc@Uu!C+!)i5v_d?&Jqd-jk;?OF4YV6uhc1 z{q`jFS9)u1)x<Wo?~Rnwe=Tz6cJ;Eh`7OS$EU$^5`l6%H<=;6|DptEwB9?uXO3loN z##dSAO)>tpX2s<9%(C^^{BOX+#-Y{ban6>7nTeHw*@MBrl}VA|Rmy6n%lrPsvwh+J z{3f|ZW=&S2dq+_|n~3K+vq>ef-<T8}dVfh@v^%z}T2-)k?$I+PE(`r1YI+M9<QCoh f6>4;8iqxA0Me5JYt}Xk%xcR_`Iql~?G#I-9fPxjA delta 699 zcmeC;?B<*xU!T3{z`u9~28McrS_3{dE^RhO7Dg>5K}JSa2A1qIaa#HL6;rn+N1lCk zn2q6#@7ycLV^i}kpH9pb6T5$Q_l_$Dw-S$?&E~u_VWm;2{|}bPQ^mfOS*bt&KTfN) zSrX))`+8M{#jf={^}<X43$b#~>d7yfv(h+d8At65zJDD-%$K$2uL<G$pu>1&AJ7d< z46G4)rUsS_42=H_nizip@!SQ>OpHuSEEWsj)=s{_6eDeDX<%+(WN2h+YG4*6&TC|3 zU~FUo;ZAm7%t*c7v9xe|p0VhS<+-13@~jcscI(;Eh8fasm#>}B_*3#AM{8%yjI53- zO@s8K79r{Xq{0rLyL5i0<>}2~+>=-NKkQyyXpnCp&&C`otIQ%{Al4v~A0MlDvMHp| zN4#n~+w&7sq64Pyn9R#$RbQBO+J%GdpxDaxH<EL`Hk-2TeU@gx!^WZ2=5fxJg_((! zf!UM6z>P_f;cbMxFPF&VzuQ-;>9BdnoBe!Y%NqB2e{G)X)R_S`-|hpIEcVpd<DjDJ zBb~7DRcop07FUbutFxmnoo@_`y4d>R{0T(J>;Q(!79i${ga%E{-9k=K(8$1o#>B+H z0x4*~+{yQtyeCg)mU8%fH-^RK#;h&kHzeX)pNR2t{&#$~XdzSRmrr-9{}=PI)gAIx zob=sWEdO2o0T#bC=N1G#w=B-zx2x`H`JdnW3v(yGWtOeS7A9z3cV{qgVNwV?&{bUH z(Prl~QPX^Sx1ZgA`E&m}PF|Wg-?RIHgUT9DCI#u;{ij6FuFKwR$?7GWbIqjPu0Oo~ lUh?_hbEPlqR2S$?e0?r|_Q$K!;%Baq+*9ef;>ra!9ROSD79Rir diff --git a/node-api/src/test/resources/net/corda/nodeapi/internal/crypto/keystores/bridge_rsa.jks b/node-api/src/test/resources/net/corda/nodeapi/internal/crypto/keystores/bridge_rsa.jks index d6828b23900ea0c1071d5179796952c38ace0a5e..87224d4727e13e635b4eb1d20c0a85eaa3d0e890 100644 GIT binary patch delta 1348 zcmeC->*1RqUtfPa<zFEK1Jf>pCZ=r$d~96WY>X_7T1<kBjI0bSO-zeQFC@=4G2&Z) z-rS#)!Shv!_-^q#%x72r`}XLjsG^E*lAdqlk;1Rv?~2T_H}N?V`zd=t$$!^Bo>ptx zjAT;EjtTbuui9+#<H{_(_)msrajaWvGVbT3?79`h<HervCbiyvrP*D7yX?@Zi-H5b zEY_c0u{VXUQ2Jn|T4p$l@Ov%J?)1uK0*o)CrFYf*QViC1Puu_ZSfgA0vP{v%tH11T zVw|k)lf2b)%i<}Xb!F<_n-0Fxi1xWz#qpxtsnD;vhGW6oso$it=D++>XS|8`>hIUB zTTd-n{+*-H;bVfOqG}{-{azo9e`1eA`%ho4$^IL@>G-L&X>6>#1>BG1o^$i@iQ1L8 z?f(+FpzK0n*3KIrcVxSqc$U|2d)cK0)3@@b9Ld)T`PJs2t^1zyZnskBfvek86H>#4 z!`uBLH_AFTx>`K@`|9B5HO1u~Hb!^n8P-=_s@kO`xOLU~yE{0;&-wZ5?}@6f^qSUf z?IgHr<-$Fz?-f^M-VHJMxoX<BlfjE!MPp(Os#q^}DJ=^9?y&hy;e(ck_P^}bH=T4` zdg(-C&~~dsO<QJUcAS4#b18g9^pc`SR&5+FniX%eak`z^r@EyyRi)tg?(K}sAJxvb zE_Vr*cX>ShaN>R!3#pmCs(bnu8tHE~K3#uGPj=BGrw<Az>y!82ymhC%_tvrn0dhIt z7?K5ZOMNW%*ZCgu`C&3e>HS^D_PR;VN3Q%6DE=$Y#*#F<-Qq>Wa@EEy-;c2H?Ws6u zR(sB9!O5B7zZ+k-I5(K8UEch@ZKZ=!h1(P!(~WE!XD!-uNZnx8yxLdO5Ak-&z4h-u zBC)SAsotZ{+)umsOz(a^Cx%_0y(QnU{QcMZz|*XP!RAh~RPhV(^r?P{P7@bBS!Nkw zAzg8P{$+E4SdHVC6dtW?mR-vB;(^k=I}VlI-3-7q%)lC<XKG*xWH|#<v%NtR<C6u< zOpHuSENovD+zfcwIJDY4&e^gsGqExlco=dUaI#I7Vs@7{GBPkWHZU|bG&L}e66ZAr za*fO(+{rb}S@knD&UuJ@E9%%OSULU67P-^jAsa)#+NR1UzrL@rs#fP+^ou#_{I~dL ze!0cxG=KU{!O8D`-CJ=|UHs|akO|xFoxbJupm@$D69ZF+!!br(Q+BoO-lW8#tlYNK z<iiK8CqYvcCSMa`smx5Sj$jGp&{J?cf3)B=Zym#%Ef@N|mIu7k*LG)OW@KPoTxgJQ zAkW4eDyz&QVIbBZ(i9VSeERu^vZj|a9<bb-%>5@iwr}zT7AukO4$21~E4t>lzUa+g zuD0#W=C)6IlNYjyCZwM%`)g#EADbAzUU%v0Z9zM}Wm@iBrpvc)$MeUtY!{0&DOjGV zWK<8YQ!olp6iuDPv~%$)x4oP@h0N0xFGSwW>0A#FV#b}o;N1$uk<cLKOb^>QnUy(4 z1|FIwrk2Q|3F1ypWc8jb#wO+PAye?G!t~pd)L-eXxm6R}*uFPXO8>RUncLON+UB?T zzOuX~e(H;kK9_&zOsQDyPKj9dRVp<z9~xg}oj1k!*P0cR3)p1qu>}BXEHisB7`QSi zGQ3Jz&2)L+pLn(}{GZ<>*T}5NN_6ii%4ZYtTxT|^B=#GVf<x~w>5F#9mQ||?7SBC; tro?5T|3gi0A%onao4-PhE=~EmbaMBW?|Em7uU}tv<N3zV>IprJI{_6(OI-i} delta 1363 zcmeC->*1RqU!T3{;L}b92BzHxO-$Pj_}I9#*%(<EwU`7M8Ce-vnwS>vTWa`u-;9*D z6Gyl0_7Lq|am?nkgno~_U)lNmlNrY&S}t)3`={LX)MT+?UA*qOz<%);TPJgVz4>~N z{^g8-NuLj}=We@rLD%+5nDN{j@ABGY`wq`|YhFJkBQa;%!bH=0ledqZ7Sw#&Vtmp< zErjV<R?6i=GgcjP?BMx(xxqu*X=CX5SzNLKMzfE_&;BsIQJ9%IbkB^h6-!PQw&`Er z^q0-;VEMxH>2EGu2N#<k(*Hd@DC5**#vMEDCR{(DDZF8_?m?!@{yZP04hG&TSna~3 z8@=YC#fpZ@La~~U>T>d&n;zF|?dDZ;&q_|OU$wU=(%ehv`M2L4r{A&c{^!onmG>dM zUoCz1y@bZ5v!YRUN#g$lzkimQkT3FXcNu@0W9O0ghdAUH<tY6>#S>EfY>%@0qt~z9 z8S1vqwikV_`su3!<HM94mpe8amRnq8O5p#;C;88RVeA^y7finmKX!!hu}ul{u3sm6 zR!`#%yY1W)8Qf0{er)`Dbj8;V=REG4S?+nT^+>n>S4IEBCg;vRQZC&1k4Y#rnnSof zR;_2^HPN$O2fl{~2_}3}U-IEq6^o%>(B~_gooBvhyZ@_JL?MUoy<owT^%glTid@27 z7k9MOuBck@=e4}20ZYu5iqHCQFa6l8wd}V={f6Qz)3f^$H?FpkJ+pvm<Ez;Fdllt= z3dFoAXJppqmJFG)chCLEFTcHl3*QyCDVJ{UT=QyIVwc>9*zf;pvRhiZRwwMe^?FNC z+?@1l0ZU!0{8y~lp1DP7Q-@HGN^yJTp7>hT;^S}je>Ih1varkw3p?E>HSd1N7xx>- z-|p&+eymfUAENf?V0L$A#i!Z7&cD~4vul6zyEiFE*D<9h{;xVPNn~00oVMWItQ%qt zwAUU@x@~8_rI_bL$ga2Bw0hH?9^I(W_-j&q!aXmQs|>(I%)lC<XKG*xWH|$qv%NtR z<C6u<OpHuSEF$w}dl>MracH%9oU>(NW@2S9@G#^y;G8VM>>+JvX<%+(WN2h+W?&vA z&TC|3U~FUo;ZCk*&Z_Ud&{?$o;E|1640)4|<d&VwKCwyoAM3-{u7y)Oq_;ZD?+@&& zUe3=htFidju}yW7^^*l3Kib&gGdDQeUFFZ*Q(W3}R9N<%n=fwb<?u!&{j!l*k*JiX z(Zj^DopLd8y~gRR*RCYylq(p2%Bm2Yn^ow0<dR_aoy-&4wmTIp{dKTJdnOYzBLm~& zLW6t*c{b)yS!EUp1F;5?{P<YKlT9IwKH^o|*`A-65*;vo$K-w%tNJ(L{g-za6lmRe za_eV1@5H_ZuO~c2^*pmXgMkZ^f|H0!`7JMDv9AaIEc6zvls?}g5p%C_=G#8c?2Xn+ zn;tMJg!rm!IXmXxQP39tnHqc3K5)So|C9V{PntxTU2#4pA^{I^#vQ=W-U7st3%DRb zo^!X5b21Baj0`MzO-u|dkb)P?ot(hxJz11Z%Hi|f7#5csv$lxekce-6BF4-4-|^X^ zg-oGeKHaJQU(Cl=cgR<9(sysM{CD*SSp3$UTM+czvN(U=uDYk?e}3;T%$=OiCR>j! zM6h~1>_As>jYpfE(?m`4>D_*I|K-p9?>KpB;(X8U2M#K0Jed@vclVzXJ-aS@vn8vS tY|b^4cDw%Y`g_Uef6tY^tW#Z}S2LlrJFjo%B?%!lzuS{sTIH3Rod8~#RLB4T diff --git a/node-api/src/test/resources/net/corda/nodeapi/internal/crypto/keystores/float_ec.jks b/node-api/src/test/resources/net/corda/nodeapi/internal/crypto/keystores/float_ec.jks index 7deeda8119daedc088bd444f31d0f83acc5a7eb5..bd7f2632260038e51f81b52a96be20eb1b8d9505 100644 GIT binary patch delta 673 zcmZqY?BJXrS6_cSmC=`hfuY`@)_{+VOPh_6g;9%1kdcv<fhAj&b!+{xqxMq2cKu|$ zx!A7ntbg$>t|Gp*^HR&0UBm5jWFo3%H22v%T|V4%`P!wkr&2T@?UxVTf0KFD@AoO~ zwH4cZr{}t8EQ{Lu=jz_1|3$ktC>k+sik9E*pk!gW=Z)|_OFmA^y}j4Z)E_e6G;x_6 zi?OEOx5?+2Vx*0X42+Ep3{4G94UD72d5wWwBXbCMvOQyZ>VYuPx}N-7vLf&8Hs<l> zb4aC3{}lEu(9nxdv8!Gz`h)6j@6|#4pY-|pd6l9KI&0K@G`+N?ZLbwJmlR2T?RHpP zXpnCp&&C`otIQ%{Al4w#6ccxR`uT^lrk67wu-u!>{U<uMZ!$NNRsF()6Msxs;gFVy zIityJ{^P}FwT&AMc-T0!+C0wLvM@8TGBCR{7`QMg6rc9p6X>z=W7YJu)s`1u?egZ> zToUYdOmMPMm%}Z|xBr+FD!i_7@AtM^#<j2W<K8!CQp-vf>?>-n`^IR!sZ>gNS}y}@ zgr2E^B?ANFPJ<@Ktw0>PfQy-lk%@_gGd*l0C}3pZ0b^oni5xH>?&Ld6-jgRXOF4YV z6uhc1{q`jFS9)u1)x<Wo?~Rnwe=Tz6cJ;Eh`7OS$EU$^5`l6%H<=;6|DptEwB9?uX zO3loN##dSAO)>tpX2s;!%(C^^LIlm@9t;MqOo|MzQdTov-uEY-?F;|sH_0_JYqApE zJBsqzL_F7-O)81~#-!lT`%C(w-LYlWs)EIHkDe)US?K>z(_6?Ox9H}tP@_vzBrG2J XUf(4B#mpw}<eRH&N(^=@FeU;35iABQ delta 671 zcmeC+Z0DRHSD(G<kmE%L28McrS_3{dE^RhO7Dg>5K}JSa2A1qr?)O?7j;5V{y7G$O zh6Mtzy?rA8J57JS;@<Ko{|N8j)?ZmR<lEf*KKIrpj_~Dke|)O>>=ao2r}WfOmxtEN za(EYgFgE&kKf+XVhQX70Z<7BnY37gE!50{3zcbc(#n+x={lQx~w;p~Z^7DWDl#>&e z$+4ups&$`yjwwdk(9*!%z{t?Z)Xc~{N}Sio$iUdh0>Yha&zPS2qg!R6oOb?l_9P|O zS4Lk$-WxII`1o%xNQ_c(^6lGmHS**;Z>hcU_hN%i2<l!=<?;+ynx}Z!P5jF8O3iES z=5rSp8sr<uvoVLtDziu!h&71h$Hyw3Yzk@g5wF_L_WZ<@=z!@vCUY}c)z7=xwn6Ee z@|5LQ=A^!f^4TW3dg>$t9ySiGHji_*EX+)-49xBf1};nrX1zI1F5jAVH@Mz^m?9Wo zeel-H6t!o^!bDPh7^9UU{FoH9p8Y<swf|dBmH&(FF8_DjNYKB})RMGLhTBGVV|wr= zM+VjiJyQcq1_s6*22G4xfH-mi7c&zh6BA3$-9k=Kz{tP?#>B+H0x4j?+{t&CyeCg& zmU8%fH-^RK#;h&kHzeX)pNR2t{&#$~XdzSRmrr-9{}=PI)gAIxob=sWEdO2o0T#bC z=N1G#w=B-zx2x`H`JdnW3v(yGW|pnT79v<Z9(JIsxW=Q+&S|2i`Sfl-yZ`d%{&$?b zG;zLX_X7u&HJ(fg(!2XliJo1Tz1fo0OE%}4NxNNtc>TTP^S|dxU)HHE&^x&Dd#>Pg Tfe3}Ft9;vd@5blO{vZtiM6MEz diff --git a/node-api/src/test/resources/net/corda/nodeapi/internal/crypto/keystores/float_rsa.jks b/node-api/src/test/resources/net/corda/nodeapi/internal/crypto/keystores/float_rsa.jks index 6eddf4d4b1fbed139e7f448c80d41fb5f518de2e..737826a534623079e5a01d88267505c85d564754 100644 GIT binary patch delta 1309 zcmZwDeLT|%0LSs|w+D}z$2^Zq>5N!IPBJ3dPEv<rY}QGURF|h*t{)RZTkMBz&eLA8 zytL|eT_lsV5Q%1SX{8kEY-;k9k-K`m?sc#Gqd&fXeE$5t3-r$G6=OkA9*3BL!GKmg z18BzUp|u^+a3mZD7{K8u7?J^83_hI|U)^M@Ht<s`q;<6e5oHG<-ISH95!;^CGa4?2 zmC_2ew);lZsamcU<gVL3ddzABbp;ZMowA%_rE;22nJ5v5nP|+${M3p#W&g)7_a-Kz zX49&icAmiOxUv`Itj3QD_j1?)M?;qFVlvHW+6IwC#U8T;huV(lo!K82WlwO|6i>X$ zHb4hJj1#e4R<y*7lrDGYb%up^ttw^j*5~Hf$)fmAyj|Afnx(!G+%|KO_^;PTYbZUt z{L<+SwP2_}sV1X@r18{W+heUijZ&ER7XRWfy~w1=9K`x97MH1^EasuJ6O{!gti5Nd zlH4gKb{}l^O|e(VmwwnvP^qNvIg4u^(Q`t+i=uFaTRs&EI~QEwk36aeS~Z)QZ%o+W z;&rb^ai8Xmq~BpJ3l9)*%aYf26Z8w|<q@-Ua`ODK2j<pk)8Px20RjDj$ljm3>t5Mk zJhD!%3#N)SCX<@OHr+&ak2ex68bWK*SuQlxO}aXcXOV4`@ksYjfLWYosRiaCv0l=y z&|fJE<b-{czs;zOO6(@y=?X%Ov1;vlvrWlq_<D~MR-cA!9d^SrcI_VvS9X>^4=t~6 zNpN(tvr%6kRv2p==a69bG@LWB^2LVj)zQ9SbS0Ko*lwf}4z>BQR>w!A;>j^nM_h z9n>B-S|WA=el7Lo>QodZc4$hKx!`jpn&-%8avjf1a*r=}UP_fL_*0TlcV1kXehi}9 zH-`i=TIY1%3G$hk1P$ac|16UYq*sg&-|8#ppyn_2bzMki^{PI76rG<O3XgkA?n`~& zgB3XAtcPwHle|=y^HuHq1RZPMu9yX8&U}xFxWi<(!?#PD*tzoq<aT1ybQ3il6FX<b zDrxK20E5MPDQ%r~!G@uI&`SV|jNtjCL3>cqSONj>>Wbg&zS$k`MloIE`Z)<6|0bRc z(NS*DZwLZd_1e3}QZN{;<rN>OEUpln4z7EZb~1U+F!}Cs%eFHt*}(>*X=dfK-p4=k zlnUH#!eM*dT62a-GcoWkH(cAM_gTNbv?m0ZuvGTk`7?`0jVZF#OPpUy2;P7DsF8$K zPjOCpGecvi8ltJm$l?yHtM`<vq&%N^E%EZ-@Q2U=q^U6@n%2!37_)Yl#lJ+3LOLr^ zR2Fm|xfOhweJ=mh;2~J!(qIRkp51w>$I20}i`K;Dk@~%n2ml2`kYM-#;2YSu&trg9 z`n*O?E8i5k%|Trl|A9w$a(GLPBJ3<X?xO|R>MQP_(R~$aMJA2zkA{tuNZ1vm0qA>h zb<4e3#El(l7%IZq9q$Q)!CUYQ_>Iqt)Tu=PZ~#DR9o{GUVruoDshhj!|4qLnq>l)K zjL;Uossw`}TaKK)amrcvG?SX0-xg`%qA>20pBCiRoDH7x95(Hpb8^uRDd1U99Sh8; z8jb5Sd1J0asOnNzwXgw7LR*7hBl-ICse_jR+3l4W^c-eZ8JlS(JaQoL+{xo;WAfE4 z>=fz(VC&0NTS|#tg3}uelB+uVQg-k|#vFnS@ku8~)Zv7|QVJmer}kVU*f=ARVDoiF JmV9S8@gMxzP&fbp delta 1348 zcmeC->*SjtSD(G<u;vB^2Bw_`O-x%2_}I9#*%(<EwU`7M8Ce-vnwS<=?e8^FF72`r z%j`}Uov^t&SM~EM7t`r7R|KRN8kiewo~9@kvE-z*T)T31+0IwxSuNJHk{nwmYZj-@ z<*yL;muza%yUlFAt-^ZVk<yP=C!HoO-Jt8ptMt?Ig%hWMPyK@E{}+#nE<SNX_U=2^ ztqXpB^v-Tku4vBNvG(}=O&6!<{1!UAtfAZ7w!3IT*lcTNqos1{S6zKvR&CA8IQ*Qi zyz}tW37J#9cltj2xLEtO)x~|AE@f=aHdl!H@^BjO2A5a%M}yZt>|hkOcANaTM*4z} zljR~t7U`8gGw%z>h(5pky*^ri_e|c!+w08l+)(F!EVb;^>?F^l|5p{dHYs(#eAOcR z-RI$sU7@`kSGFa0Z9U4p_0;}$(WmYFtK^(FyGSo_*S#F{H`R0MqV{D@S2)Y-#aFmA z&rMmLb7ty{7LM%Cb)UHpKGxr-qb@v;{a1`+&+;$4+n&ZKY)$#1u=dF7{@IKB>t9Mm z%zfK-A#~2ox)UEx3wd=_&weXu+}%H4=Pip~n!nvwN4~ks3U)*uPszFOzgKp0=H!jf zJ=XB`%%0sC%5u`@YRonD9&L_H!_5tkpGop;t!KWrKPl0U+vVR2@8*g-*A^wdYw%j8 zsq-P!$8whH2IHpx?l(+p0=k@R-P=;Q{+iW$G3-85dg9kZ>zZAAj&`Nk&5GV_DWlhR z;n0@yHhH@{*G;}2Z!A~#FzP;Xe(kxb>mPW>RV2ty{IggxSHs(hi~VWwf6=hn%XS6t zc<vcc@ZqTajRTjOG_I+fm~X0UnNV`(dE4IKGVhgN27O+k8hD1=>CpDNm93mvj{nNb zdf8pX%IdR?>@RAU=8DR3{0NPht6e0zYJbY?u(GQK#RmTMJ321kz3^_*o_xiR%YM(B zcskeWgQny2*kiS9n>+r!HWxiG=a1jRU`4sFn;C#fn1MAy&(y#Y$Z`fIW_yDs#>Weo znHZUvSmeI5<Qwp?acH%9oU>(NW@2S9@G#^y;ACT-EXC|5ZD<Kh$VP@nrshV*QR2Kt zMh3=477*^_YUa%Pcc1RhscX^fu`FA6cr#<S8ABJZ;_FYTe@{hJF7*Gxc;s4%q2jt7 z?-Qq$8a-7!R5^b`_GGTYtEX#Xa{kXvIoy3${9Al??wief-uOqd7FADso4U6_rBF(* z;oGj4|KBNG_^{)*)FU2WDVEh&S3Q<^vyPYT)4M0r>}{&5|9XBg|8r71nu(c_fpKx6 zLB4@J8*`|vGK++PSc6D@e5~ThrjSM-@v7}?&reK=4w$}UavzJ8NTJ)=J3s&4ZI)?L z?*7_3^+$Ng*8a&0*hG>Pa@*N_|0)Mw>*#h&I>9sB&_i1A)QcCznUhs?msfu3JH@2P z@Ixi;`_u29ZPRBli_G*tAv|eAR&c`lH46?r4Rh~xezg`J%8WaJA-n~MBcY+3bGMLl zG7EEz3@kiNObjfL!V}D$oWSZmS(Hu6;q%=X7MB~dwus-5h;Mx&#>@HN@!6t<Orc*s z-KqXx%*R%D$X9XFcW<%$cl8HY{MMXX5cJ%#IDg-+x~JuTe(x{Lot)1mTaPUWP$Qbz zox#9`Ng?b&S8<I;o1N1{P4ns9es=%m&;9Q>d1>N&&+Z2fDr-EM6r^|epAtR0E_<^j wtCwufHIsI`{_y&H$>)F1mA<S~U7#nwWbMQQb8krM^Ij><og=gRtkW?e0As6F)c^nh diff --git a/node-api/src/test/resources/net/corda/nodeapi/internal/crypto/keystores/gencerts.sh b/node-api/src/test/resources/net/corda/nodeapi/internal/crypto/keystores/gencerts.sh new file mode 100755 index 0000000000..f676de80d9 --- /dev/null +++ b/node-api/src/test/resources/net/corda/nodeapi/internal/crypto/keystores/gencerts.sh @@ -0,0 +1,40 @@ +#!/bin/bash + +# These jks files have been produced with KeyTool using commands from V3 Float/Bridge setup here: +# https://docs.corda.r3.com/bridge-configuration-file.html#complete-example + +# More specifically the following script can be run on mac to generate the files needed. +# Trust Root with EC algo +keytool -genkeypair -keyalg EC -keysize 256 -alias floatroot -validity 3650 -dname "CN=Float Root,O=Local Only,L=London,C=GB" -ext bc:ca:true,pathlen:1 -keystore floatca.jks -storepass capass -keypass cakeypass + +# Bridge and Float with EC +keytool -genkeypair -keyalg EC -keysize 256 -alias bridgecert -validity 3650 -dname "CN=Bridge Local,O=Local Only,L=London,C=GB" -ext bc:ca:false -keystore bridge_ec.jks -storepass bridgepass -keypass bridgepass +keytool -genkeypair -keyalg EC -keysize 256 -alias floatcert -validity 3650 -dname "CN=Float Local,O=Local Only,L=London,C=GB" -ext bc:ca:false -keystore float_ec.jks -storepass floatpass -keypass floatpass + +# Bridge and Float with RSA +keytool -genkeypair -keyalg RSA -keysize 1024 -alias bridgecert -validity 3650 -dname "CN=Bridge Local,O=Local Only,L=London,C=GB" -ext bc:ca:false -keystore bridge_rsa.jks -storepass bridgepass -keypass bridgepass +keytool -genkeypair -keyalg RSA -keysize 1024 -alias floatcert -validity 3650 -dname "CN=Float Local,O=Local Only,L=London,C=GB" -ext bc:ca:false -keystore float_rsa.jks -storepass floatpass -keypass floatpass + +# Export Trust root for subsequent chaining +keytool -exportcert -rfc -alias floatroot -keystore floatca.jks -storepass capass -keypass cakeypass > root.pem +keytool -importcert -noprompt -file root.pem -alias root -keystore trust.jks -storepass trustpass + +# Create a chain for EC Bridge +keytool -certreq -alias bridgecert -keystore bridge_ec.jks -storepass bridgepass -keypass bridgepass |keytool -gencert -validity 3650 -ext ku:c=dig,keyEncipherment -ext: eku:true=serverAuth,clientAuth -rfc -keystore floatca.jks -alias floatroot -storepass capass -keypass cakeypass > bridge_ec.pem +cat root.pem bridge_ec.pem >> bridgechain_ec.pem +keytool -importcert -noprompt -file bridgechain_ec.pem -alias bridgecert -keystore bridge_ec.jks -storepass bridgepass -keypass bridgepass + +# Create a chain for RSA Bridge +keytool -certreq -alias bridgecert -keystore bridge_rsa.jks -storepass bridgepass -keypass bridgepass |keytool -gencert -validity 3650 -ext ku:c=dig,keyEncipherment -ext: eku:true=serverAuth,clientAuth -rfc -keystore floatca.jks -alias floatroot -storepass capass -keypass cakeypass > bridge_rsa.pem +cat root.pem bridge_rsa.pem >> bridgechain_rsa.pem +keytool -importcert -noprompt -file bridgechain_rsa.pem -alias bridgecert -keystore bridge_rsa.jks -storepass bridgepass -keypass bridgepass + +# Create a chain for EC Float +keytool -certreq -alias floatcert -keystore float_ec.jks -storepass floatpass -keypass floatpass |keytool -gencert -validity 3650 -ext ku:c=dig,keyEncipherment -ext: eku::true=serverAuth,clientAuth -rfc -keystore floatca.jks -alias floatroot -storepass capass -keypass cakeypass > float_ec.pem +cat root.pem float_ec.pem >> floatchain_ec.pem +keytool -importcert -noprompt -file floatchain_ec.pem -alias floatcert -keystore float_ec.jks -storepass floatpass -keypass floatpass + +# Create a chain for RSA Float +keytool -certreq -alias floatcert -keystore float_rsa.jks -storepass floatpass -keypass floatpass |keytool -gencert -validity 3650 -ext ku:c=dig,keyEncipherment -ext: eku::true=serverAuth,clientAuth -rfc -keystore floatca.jks -alias floatroot -storepass capass -keypass cakeypass > float_rsa.pem +cat root.pem float_rsa.pem >> floatchain_rsa.pem +keytool -importcert -noprompt -file floatchain_rsa.pem -alias floatcert -keystore float_rsa.jks -storepass floatpass -keypass floatpass diff --git a/node-api/src/test/resources/net/corda/nodeapi/internal/crypto/keystores/trust.jks b/node-api/src/test/resources/net/corda/nodeapi/internal/crypto/keystores/trust.jks index ea5b53b445c8f8ac4e2faba5a546b24e3a9ed69c..1252f7002a7c6a130c76ac3be08322e7eecdcb05 100644 GIT binary patch delta 279 zcmV+y0qFkq1NH-u86$t&Wccd<1z0XMFgXAK0l6@O0ktrK0a>5}0s#U71PNzWv5`Dn z95OO6GczzTH8C_bIa(JDGcqtUGB+_bF*G$fT9Haik^dS%@M#g%AeY;cC+aS&+I(Gs zhrL-EFY6S{+k2*lpM*{7Io21-^eit5Pl=ftT`P$gT?eWpe3{`h)dilEGy1HklUV^B ze}Y_I$CuCH9W~Qv-~`^23;bJMjxY=c2r7n1&OHPJ0tEmANB}TJ0wDnEWUB(xzWiSX z^bhmwV|*N}YGFr+a&HC{Nv<}MbY1oWAV7`!8__<-rh6q3bDhP^bVQ*~;VDZJFl}<# d`c*R0lo}cPH<?a*TFEHH<9`|-|D(es0srY?ZbJY7 delta 277 zcmV+w0qXwt1N8%t86#`5z<~__1z0XMFgXAK0k|-N0kklJ0a>5}0s#U71Z>@L36VTp z95FdCH!w0WGBh+WI9eACGBPkTGB`0ZG&C?cT9Haik^dS%^W9toMA(|N7uXnIh2$0u z3I9RnqM-s+^zz($|8ouoe!@*5lJ`p%Z|;A<1Wv5Zpi<{Kb8o)7e&u)k`@eB*lUV^B ze{Wx1A<2SNflL>Aw+83Plv_}jxG)R`2r7n1&OHPJ0tEmAM*uKH0w7kvigSEOhCV`( zDL0pkPCox1&i{zX(vhD@i{L;ctVseO8@rFn70s?|vpEGy9c<P#hdz&2f8Jxy`<)xp bEPHS+5H{-aAd_Yfdh?2ePN)&eMCC))Bz|t4