You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@pulsar.apache.org by mm...@apache.org on 2023/08/16 04:59:45 UTC
[pulsar] branch branch-2.10 updated: [fix][io] Update test certs for Elasticsearch (#21001)
This is an automated email from the ASF dual-hosted git repository.
mmarshall pushed a commit to branch branch-2.10
in repository https://gitbox.apache.org/repos/asf/pulsar.git
The following commit(s) were added to refs/heads/branch-2.10 by this push:
new fa0c70c7edb [fix][io] Update test certs for Elasticsearch (#21001)
fa0c70c7edb is described below
commit fa0c70c7edb150763b853a430400bc53c0a4f154
Author: Michael Marshall <mm...@apache.org>
AuthorDate: Tue Aug 15 23:43:09 2023 -0500
[fix][io] Update test certs for Elasticsearch (#21001)
Fixes: #20997
Update the expired certs to get tests passing.
* Update all certs. See `README.md` in files for detailed steps.
This change is covered by tests.
- [x] `doc-not-needed`
(cherry picked from commit d6734b76b14aedd800116218b02ae607b93df9d1)
---
.../src/test/resources/ssl/README.md | 43 +++++++
.../src/test/resources/ssl/cacert.crt | Bin 943 -> 1292 bytes
.../src/test/resources/ssl/cacert.pem | 47 ++++----
.../src/test/resources/ssl/elasticsearch.crt | 128 ++++++++++++++++++---
.../src/test/resources/ssl/elasticsearch.jks | Bin 4182 -> 0 bytes
.../src/test/resources/ssl/elasticsearch.key | 50 ++++----
.../src/test/resources/ssl/keystore.jks | Bin 4128 -> 2958 bytes
.../src/test/resources/ssl/truststore.jks | Bin 1002 -> 1670 bytes
8 files changed, 204 insertions(+), 64 deletions(-)
diff --git a/pulsar-io/elastic-search/src/test/resources/ssl/README.md b/pulsar-io/elastic-search/src/test/resources/ssl/README.md
new file mode 100644
index 00000000000..0a1e91a9e47
--- /dev/null
+++ b/pulsar-io/elastic-search/src/test/resources/ssl/README.md
@@ -0,0 +1,43 @@
+# SSL Cert Provenance
+
+The files were generated with the following steps. They are not in a script because a script likely won't
+work the next time these files need to be updated. These files were copied out of convenience.
+
+One important assumption is that all certs and keystores share the `cacert.pem` as a root CA.
+
+[cacert.pem](./cacert.pem) was copied from the tests/certificate-authority/certs/ca.cert.pem file.
+```shell
+cp ../../../../../../tests/certificate-authority/certs/ca.cert.pem cacert.pem
+```
+
+[cacert.crt](./cacert.crt) was generated using the following command:
+```shell
+openssl x509 -in cacert.pem -inform pem -out cacert.crt -outform der
+```
+
+The [truststore.jks](./truststore.jks) file was generated using the following command:
+```shell
+keytool -importcert -alias rootca -keystore truststore.jks -storepass changeit -file cacert.crt -noprompt
+```
+
+The [keystore.jks](./keystore.jks) file was generated using the following commands:
+```shell
+cat ../../../../../../tests/certificate-authority/client-keys/admin.cert.pem > client.pem
+cat ../../../../../../tests/certificate-authority/client-keys/admin.key.pem >> client.pem
+openssl pkcs12 -export -in client.pem -out client.p12
+```
+
+Manually enter `123456` password.
+
+```shell
+keytool -importkeystore -srckeystore client.p12 -srcstoretype pkcs12 -srcstorepass 123456 -destkeystore keystore.jks -deststorepass changeit -noprompt
+rm client.pem client.p12
+```
+
+The [elasticsearch.crt](./elasticsearch.crt), [elasticsearch.key](./elasticsearch.key), [elasticsearch.pem](./elasticsearch.pem) files were all copied from broker certs.
+
+```shell
+cp ../../../../../../tests/certificate-authority/server-keys/broker.cert.pem elasticsearch.crt
+cp ../../../../../../tests/certificate-authority/server-keys/broker.key.pem elasticsearch.key
+cp ../../../../../../tests/certificate-authority/server-keys/broker.key-pk8.pem elasticsearch.pem
+```
\ No newline at end of file
diff --git a/pulsar-io/elastic-search/src/test/resources/ssl/cacert.crt b/pulsar-io/elastic-search/src/test/resources/ssl/cacert.crt
index 070eaa67e21..87d462dcb4a 100644
Binary files a/pulsar-io/elastic-search/src/test/resources/ssl/cacert.crt and b/pulsar-io/elastic-search/src/test/resources/ssl/cacert.crt differ
diff --git a/pulsar-io/elastic-search/src/test/resources/ssl/cacert.pem b/pulsar-io/elastic-search/src/test/resources/ssl/cacert.pem
index ed6f0fffdad..0446700135d 100644
--- a/pulsar-io/elastic-search/src/test/resources/ssl/cacert.pem
+++ b/pulsar-io/elastic-search/src/test/resources/ssl/cacert.pem
@@ -1,22 +1,29 @@
-----BEGIN CERTIFICATE-----
-MIIDqzCCApOgAwIBAgIJAIM4kKJTNpVtMA0GCSqGSIb3DQEBCwUAMEAxCzAJBgNV
-BAYTAkZSMREwDwYDVQQKDAhEYXRhc3RheDENMAsGA1UECwwEVGVzdDEPMA0GA1UE
-AwwGcm9vdGNhMCAXDTIxMDUxMTE3MjUwMVoYDzIxMjEwNDE3MTcyNTAxWjBAMQsw
-CQYDVQQGEwJGUjERMA8GA1UECgwIRGF0YXN0YXgxDTALBgNVBAsMBFRlc3QxDzAN
-BgNVBAMMBnJvb3RjYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANST
-1q4mSWgVpUFqmtkgF/SgPUEDpFwzv9oOBFvw/71gy1+THmcw7VAM729O3ZrsJywJ
-3iMEo1IwzUIV+tnLFPPFonT8HBuySTQ0rTmGC7+rdOmM26TclBZmOm0pYNwVg3td
-rGGceN/eOLG4oIlaJM6SjlNLY8NbjVtB45V5G7I7IxZN44+PiYaH8b1OJld4Z9dE
-3bXheLodPRyDIZwOnoTOtOZmPjICk80N1OiEZQa2OIfyhGECqggu8vN+HYoVqhS2
-DFmbeXqQH8piJHsf/gwy9o1EwUnUTcg3XKRu/qAywYwqo43j/+fon+qxRsEzhbLU
-9UCBqQakpuyEu6RLTd8CAwEAAaOBpTCBojAPBgNVHRMBAf8EBTADAQH/MB0GA1Ud
-DgQWBBTweKQ5biriOHaVWywXTyKv451lDDBwBgNVHSMEaTBngBTweKQ5biriOHaV
-WywXTyKv451lDKFEpEIwQDELMAkGA1UEBhMCRlIxETAPBgNVBAoMCERhdGFzdGF4
-MQ0wCwYDVQQLDARUZXN0MQ8wDQYDVQQDDAZyb290Y2GCCQCDOJCiUzaVbTANBgkq
-hkiG9w0BAQsFAAOCAQEAaW4cDHLmhgLJUOctuengm47YPpledOmXzvquFb5iyULU
-xRyYaYm5D4OcZEgs8E84upB9mo66uc1gg48m3PkOLTY8+0gpS23wJ4128MCDkYG1
-s8N3OOXPfZxySPY37Ii162cDjknQ19E4j00zk7jRUdOI4cNDDP7AZ65G96bA18Vs
-HLpuJY2y2bJ+W9LwT0oZvxCrJztCXUS2rNqwECdustSf9zolvJKmgt+iKCUrQtho
-xI0Qsc4KvGT1CvKmEkwlB6z0JNO0HXEdxIvF7NLNNR/URt4+zLx0ieCajCKKKr7x
-6Bkyax1iPBTlcSX80e3RKORs/mKgT+DCvESh6kKkBA==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=
-----END CERTIFICATE-----
diff --git a/pulsar-io/elastic-search/src/test/resources/ssl/elasticsearch.crt b/pulsar-io/elastic-search/src/test/resources/ssl/elasticsearch.crt
index c8dab8a8163..4237719f20e 100644
--- a/pulsar-io/elastic-search/src/test/resources/ssl/elasticsearch.crt
+++ b/pulsar-io/elastic-search/src/test/resources/ssl/elasticsearch.crt
@@ -1,21 +1,111 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 4103 (0x1007)
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN=foobar
+ Validity
+ Not Before: May 10 15:50:18 2023 GMT
+ Not After : Feb 22 15:50:18 2297 GMT
+ Subject: CN=broker-localhost-SAN
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (2048 bit)
+ Modulus:
+ 00:de:d1:da:bb:91:b3:16:c4:b2:e8:89:30:9e:c1:
+ 5e:0b:cf:db:c4:c3:d9:b1:af:40:a5:0b:38:36:1b:
+ 14:fe:0f:22:9c:e6:59:6a:15:5b:db:f6:f7:f3:a5:
+ 02:29:94:7a:d2:0c:67:ad:aa:63:62:7e:fc:58:11:
+ 29:48:b8:3c:91:b2:73:7e:12:6b:f2:ea:36:77:0f:
+ 15:9b:46:95:ce:73:15:8d:c8:d9:97:57:03:90:33:
+ 2d:7d:f3:ee:e5:01:6d:d8:c6:da:ab:07:b9:dd:1c:
+ e0:4b:ce:6a:de:a8:d2:e3:c1:52:6d:83:3a:0a:f0:
+ ed:cf:f7:56:6a:87:0e:73:e3:12:82:2b:65:ab:d8:
+ a9:44:5b:4a:2f:a5:92:94:32:f1:a1:e4:af:18:0f:
+ 0f:18:60:cd:f7:d0:9d:03:9f:d7:e9:a8:60:54:bb:
+ 3b:9a:05:db:fd:38:04:3c:b4:23:41:16:6c:7c:3b:
+ d9:b6:e0:2f:bd:cb:62:55:1b:e8:d0:8f:43:76:ef:
+ 55:86:cf:25:c3:bc:ae:e3:46:50:89:f7:71:ad:06:
+ 5e:28:e6:f6:f0:76:27:ea:7e:1b:67:53:39:26:20:
+ 19:18:82:b1:11:5f:ea:91:c2:e3:d3:f6:5a:c7:fd:
+ 61:a2:92:de:7d:7c:da:6d:e8:bf:39:52:10:31:60:
+ 4b:e1
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints:
+ CA:FALSE
+ Netscape Cert Type:
+ SSL Server
+ Netscape Comment:
+ OpenSSL Generated Server Certificate
+ X509v3 Subject Key Identifier:
+ 17:07:3B:AA:85:83:B5:04:83:EC:B2:6C:1E:3A:F0:F5:59:AA:61:28
+ X509v3 Subject Alternative Name:
+ DNS:localhost, DNS:unresolvable-broker-address, IP Address:127.0.0.1
+ X509v3 Authority Key Identifier:
+ keyid:57:0B:E9:CB:23:E8:BF:47:3E:50:7A:3F:45:7E:A1:18:43:9D:15:27
+ DirName:/CN=foobar
+ serial:D7:E2:87:4F:A0:79:E2:0C
+
+ X509v3 Key Usage: critical
+ Digital Signature, Key Encipherment
+ X509v3 Extended Key Usage:
+ TLS Web Server Authentication
+ Signature Algorithm: sha256WithRSAEncryption
+ e4:27:61:e2:0f:b6:a0:ca:9f:ce:e3:53:0b:44:ab:86:a1:e2:
+ 4d:88:e1:7d:2e:b0:aa:32:96:2b:3d:da:60:70:6a:c3:62:c5:
+ 76:f2:8f:0d:16:31:f2:ad:e5:2f:43:f3:cb:e4:fa:95:6c:20:
+ 81:33:1a:c7:5a:55:57:c9:ab:ca:66:45:30:58:00:db:e8:51:
+ c9:2c:a9:72:c1:18:f5:01:87:9f:73:20:85:6c:e5:6c:3f:c9:
+ 67:b4:f0:20:e5:ed:e2:4a:08:0b:af:68:43:e5:a9:c7:e1:39:
+ e8:b5:49:cb:47:4a:6d:e5:16:ae:88:92:13:85:8e:42:1e:0a:
+ eb:59:ed:a7:c1:9b:bc:4b:7b:99:f8:1d:f0:d7:1d:90:c9:cf:
+ 86:6a:d3:10:d0:36:e4:f5:b9:33:79:c7:a2:68:31:f7:bb:8d:
+ 1e:d6:33:79:bd:e7:0e:4f:4d:e9:2e:15:04:4f:6b:4b:2e:93:
+ 28:72:d1:0e:aa:ee:e6:ef:68:be:58:2b:cc:56:01:27:16:f9:
+ 34:8e:66:86:27:0a:b0:fb:32:56:a9:8a:d9:6f:b1:86:bd:ba:
+ fd:50:6c:d5:b2:54:e7:4e:c6:2d:19:88:a9:89:2c:ef:be:08:
+ 0d:2b:49:91:0b:09:42:64:06:a3:9d:d7:94:ed:e8:74:74:48:
+ 43:57:41:6f:e5:06:98:46:1d:c5:60:9c:69:f8:fb:fe:a6:01:
+ 4a:35:be:21:36:c2:a3:44:c8:c4:2c:21:09:f4:28:9a:ad:a0:
+ 97:1e:00:29:cc:0f:26:fa:59:21:25:c0:9e:fa:22:53:67:6d:
+ ab:a6:56:08:fd:37:1d:69:fe:ef:6f:29:89:1a:66:7b:c7:ff:
+ b1:34:f1:d6:be:21:81:e3:bc:4f:13:02:a7:4b:9d:13:05:46:
+ 40:88:4a:aa:db:fb:64:f8:6b:fb:5d:a0:b1:0c:1a:b8:4c:ab:
+ 6f:69:fe:0b:55:4e:b3:38:1f:91:0b:71:77:1e:11:39:54:9a:
+ 62:51:ea:6d:a8:5e:0d:4a:91:fb:d8:be:5d:93:e8:43:f3:4a:
+ 11:fb:31:cf:14:1a:1c:8d:31:1b:99:31:e0:2b:81:01:91:6f:
+ da:ba:cb:1f:51:21:55:29:3f:4c:71:e3:d0:29:41:de:a0:00:
+ da:07:ed:5e:c9:af:32:61:6d:55:f8:f5:2d:46:03:34:33:fb:
+ 2e:1e:aa:7c:fe:d2:30:4d:40:cc:ed:76:ec:f6:bd:ed:35:c8:
+ d8:b3:46:56:aa:2c:53:84:56:45:b0:a3:f6:35:66:93:da:8c:
+ 17:39:c1:29:7c:99:c5:0b:73:c1:f9:16:d0:57:fc:57:59:06:
+ af:39:9f:a9:51:35:0b:c7
-----BEGIN CERTIFICATE-----
-MIIDgzCCAmugAwIBAgIIJDCWmNVVXt8wDQYJKoZIhvcNAQELBQAwQDELMAkGA1UE
-BhMCRlIxETAPBgNVBAoMCERhdGFzdGF4MQ0wCwYDVQQLDARUZXN0MQ8wDQYDVQQD
-DAZyb290Y2EwHhcNMjEwNTExMTcyNjU1WhcNMjMwODE0MTcyNjU1WjAYMRYwFAYD
-VQQDDA1lbGFzdGljc2VhcmNoMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
-AQEAhlMnjkAdRlD9rZ7yMjTZK+GOfXjNiMZORrtIRSmILuOHw9GxEtSaWXFvDPD4
-a+JloIYK/N3CV5LvE/3zcB5jv6/X/TOAaz+eeQOMj9QIDjtX1ia4YLOe3FqVf3vB
-2m9paIM6ug7sgDWIxYmpL3HYTfL4B7sSInsQzpErDDIH1IquvCo2pHRggKPbAgJ9
-8pOaCLgvY2JRLe4oj2EMB0fYpEzRRg7mQgkal3w0CySmatHvGqDw2dghHjkNdNFl
-1hnikuE2HRvcx+MmA5ADSBfQU6IZKAetouQOMo3Fom2eSgoGLiT7+dlSoBAaxUnh
-oDxHI6WkNdaTSjqC3AlF7xIGzQIDAQABo4GoMIGlMAkGA1UdEwQCMAAwDgYDVR0P
-AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAdBgNVHQ4E
-FgQUCxGbyzMIwC84X57K+LX16fgFrvEwHwYDVR0jBBgwFoAU8HikOW4q4jh2lVss
-F08ir+OdZQwwKQYDVR0RBCIwIIINZWxhc3RpY3NlYXJjaIIJbG9jYWxob3N0hwR/
-AAABMA0GCSqGSIb3DQEBCwUAA4IBAQDHJiJHs9qg9UavG+dJxAtqleLObNem7cpH
-06LaH0+Z2BExmw/GJdAsRIKIIL4xQLmbNaY5vpmTi5JSPNC/ZxvS1RLla0RbJv3s
-dfTEhPfar37XJCiKB917wck47LdPu3FUdwbNKZY/tpUBaasRQ7nJdnJgJwb6zkr/
-ifN9NVDa8LpKK31qgA4bE7iJw0HY/4LkPdglQebjJtEHFCzi4AbPrHMX6xdxnCAM
-G1DGldOjEbv7kTVACr1WCRZXu3vynJs+umLKX+twebvTsv6fpUnGj85AUt/p961v
-6BblUYD3tJxCKkID9Lrs82C1sMxGqBkSDqwtNensaj1ba0v9HiYe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-----END CERTIFICATE-----
diff --git a/pulsar-io/elastic-search/src/test/resources/ssl/elasticsearch.jks b/pulsar-io/elastic-search/src/test/resources/ssl/elasticsearch.jks
deleted file mode 100644
index 0001e656925..00000000000
Binary files a/pulsar-io/elastic-search/src/test/resources/ssl/elasticsearch.jks and /dev/null differ
diff --git a/pulsar-io/elastic-search/src/test/resources/ssl/elasticsearch.key b/pulsar-io/elastic-search/src/test/resources/ssl/elasticsearch.key
index da60f25cb4f..5c20238c7b9 100644
--- a/pulsar-io/elastic-search/src/test/resources/ssl/elasticsearch.key
+++ b/pulsar-io/elastic-search/src/test/resources/ssl/elasticsearch.key
@@ -1,27 +1,27 @@
-----BEGIN RSA PRIVATE KEY-----
-MIIEpQIBAAKCAQEAhlMnjkAdRlD9rZ7yMjTZK+GOfXjNiMZORrtIRSmILuOHw9Gx
-EtSaWXFvDPD4a+JloIYK/N3CV5LvE/3zcB5jv6/X/TOAaz+eeQOMj9QIDjtX1ia4
-YLOe3FqVf3vB2m9paIM6ug7sgDWIxYmpL3HYTfL4B7sSInsQzpErDDIH1IquvCo2
-pHRggKPbAgJ98pOaCLgvY2JRLe4oj2EMB0fYpEzRRg7mQgkal3w0CySmatHvGqDw
-2dghHjkNdNFl1hnikuE2HRvcx+MmA5ADSBfQU6IZKAetouQOMo3Fom2eSgoGLiT7
-+dlSoBAaxUnhoDxHI6WkNdaTSjqC3AlF7xIGzQIDAQABAoIBABkgzTGLRO62j/4+
-0cgaotXWqDVIuApyLoqE1ow5rMQ4xFkZjSqcoxNAaSnemlp0S9avvLZ5NbX0Qs1W
-oIfE55wgZSN00v09NYQl6dGuNKOU7mWdcLiGYZ2PRJBIsocOeIWYpw/PYubJHQD3
-M7MwdOqAHW40zLuukgJSnd72LQjRczPjUKJf5dGo6i7Md3JHaLIbFiY1NCxPj2q2
-Sf4TbU73tsdM/s0DvrhWDXpuSGLQWRkwovNWvu3aVWlpurGUYoXNmUw/gWCLeVQu
-TXOxi3C5EVxigWhXFKw9W0ffQnwclletNI09M20Iw6C2vxEStFRByVPwyB+DS2Tc
-CTufhYECgYEAx8oeKKkHvYdIjfgXe3uG+4xtB+gBpibGErd4108HBZre1On3Rd9f
-8IPZhtgnSEsRYa58a3RcGl+Glan14DowyaX6Sazj0lODCYLn4EEEIqDZQ4JQlILD
-+ynTG1dd0FhxHKYxkZd1zrTdsjReBcld+jo5xXYJDaXuMuXJBB4MSfkCgYEArB3t
-jr2FsI5ORkeAzd8PZZMEPMDh/xrKS0BGqA7rz2UzZjRsW/ADYB1kPxrbOzAw5MGN
-FvqJ7Wy76+VE18+MIiadRkVwIoIjmeD3ngQsq5AckLXBKsXo2BShc3ndjrq93Km0
-LvKuVq+OmtEElhnRPdDSPK1iMVw6tjEQRVTj+HUCgYEAnvU6H6G1Dd/II2Sj0lSL
-JjMpQKQgQ8EP0S53D9/Jt3TsHDz2x3odTDCrbvUl9Af+EVkRlzEiYr1kSEnM3hWO
-YbIUPHA5Z0uYs4Wa1bsE/kQ5+NODJ1YPdhNl6pgNhUoI3QGB6NO4ILmYtkOiFzqK
-8h9HfcsXEuvVZFudHxCFOIkCgYEAm2n2vOIjGpaU1V7xTnPxKi3DMLyWFMzzB1oF
-svCuOzpNXCdQBQBHe/1uLJEqjlpoe9bNeIdIDgwV7964+AnfpmKptu8yXuaWEPeT
-f6qTT2M0d/K2dtH3+009r9DFn4C9uce+/HmDtKCXKvI7qvGq/59UhxekR5/ZH/RT
-ldcedpUCgYEAmuwIZQJakt90HQ9GY4NlBRXJAailPzJq5c5jXscifJWbPrQFoKYn
-uBfGuCWIKqUrLcKbuNl0H05MjCv/2qN/eVQW294ax8FUIzW7tU6af2YuIUeXUM6f
-R08agqN+uEZMCEil8hVJsEWkp4pCpg2SbO+fkBnRkgkqYCpWqU9BfEc=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-----END RSA PRIVATE KEY-----
diff --git a/pulsar-io/elastic-search/src/test/resources/ssl/keystore.jks b/pulsar-io/elastic-search/src/test/resources/ssl/keystore.jks
index 37a3d3b0c90..f1e4176d0cf 100644
Binary files a/pulsar-io/elastic-search/src/test/resources/ssl/keystore.jks and b/pulsar-io/elastic-search/src/test/resources/ssl/keystore.jks differ
diff --git a/pulsar-io/elastic-search/src/test/resources/ssl/truststore.jks b/pulsar-io/elastic-search/src/test/resources/ssl/truststore.jks
index 165ba17fa80..0099d0ab956 100644
Binary files a/pulsar-io/elastic-search/src/test/resources/ssl/truststore.jks and b/pulsar-io/elastic-search/src/test/resources/ssl/truststore.jks differ