Fix more tests broken by expiring CRL.

There are still a few tests that rely on physical certificate files. These are slightly more complicated to replace with pytest fixtures. Updated the script for generating a CRL chain so that the CRL is good for roughly ten years and regenerated the certs and CRL.
2019-08-21 05:47:54 -04:00
parent 9578670ade
commit caa633c3db
4 changed files with 188 additions and 52 deletions
--- a/tests/fixtures/chain/client.crt
+++ b/tests/fixtures/chain/client.crt
@@ -5,62 +5,62 @@ Certificate:
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Interm.
        Validity
-            Not Before: Aug 20 16:23:27 2018 GMT
-            Not After : Aug 20 16:23:27 2019 GMT
+            Not Before: Aug 21 09:44:16 2019 GMT
+            Not After : Aug 20 09:44:16 2020 GMT
        Subject: CN=client.example.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (2048 bit)
                Modulus (2048 bit):
-                    00:ed:f8:8b:b6:aa:55:fb:92:09:cd:b5:5e:6f:6f:
-                    1d:32:2b:8e:33:30:77:2e:95:14:e9:88:c3:8d:c6:
-                    ef:02:a4:9a:b5:6d:3a:4e:cf:53:d8:b6:34:d1:27:
-                    33:64:3a:47:99:73:65:85:af:21:1d:25:ba:9e:e1:
-                    d8:dd:aa:06:5f:72:bd:e0:4b:18:68:4d:82:99:ab:
-                    80:cd:da:37:96:df:e6:be:a6:e1:68:cf:83:db:73:
-                    28:34:3f:2a:9d:6f:75:9a:b4:26:25:5a:9d:d1:82:
-                    81:f6:b2:17:50:af:44:94:d5:17:09:3e:2d:dc:10:
-                    aa:2f:6d:07:5d:19:6f:7a:de:2a:ef:d5:29:3d:c4:
-                    31:d2:d8:da:b3:db:d3:b4:9b:69:e3:97:d3:5b:43:
-                    75:93:37:2e:e7:89:f8:7a:6d:bc:49:05:32:ce:1a:
-                    3e:eb:b0:3b:b2:0f:7d:49:df:94:3b:bf:52:52:17:
-                    0f:1f:1b:6b:82:f8:c8:b0:d8:18:f3:54:12:3f:b9:
-                    08:41:6b:89:59:76:0a:ed:ed:1b:a6:8c:3d:54:8f:
-                    6d:47:f1:fb:62:33:8b:51:fa:ae:48:b1:a0:f7:1f:
-                    14:e4:e4:e5:e3:22:7f:c6:97:76:6a:4b:ca:a6:84:
-                    90:02:92:28:fa:ae:f2:c4:c2:67:2c:9d:23:1c:73:
-                    3e:dd
+                    00:bb:57:e5:05:02:70:95:97:39:f9:c8:ac:a6:fd:
+                    39:7a:6d:a6:c7:cc:5a:e6:04:5b:76:34:04:90:a6:
+                    6f:4b:e6:be:bc:46:70:2b:74:af:09:97:45:c6:82:
+                    da:0c:0f:a2:af:14:26:66:68:7f:4d:78:02:6f:6b:
+                    11:66:34:f5:1f:5c:34:55:59:32:7b:27:80:86:a6:
+                    0a:e6:43:d7:8d:44:95:98:fb:84:fc:42:4b:ee:d7:
+                    05:4d:e4:02:fb:71:67:22:db:f4:a1:25:6f:56:01:
+                    a4:61:2a:8c:e7:f1:58:54:a1:f1:1e:38:30:ff:f9:
+                    8e:85:10:01:c4:d2:85:68:f9:31:88:05:56:b3:16:
+                    55:3b:28:a5:54:f0:55:f7:ea:5c:08:2e:c7:60:23:
+                    b0:49:e9:59:27:3a:92:28:1d:0a:cc:81:d2:ea:4a:
+                    42:fa:68:bc:06:7b:86:d4:a0:5a:e3:18:4b:85:c6:
+                    17:e8:d2:bd:3f:65:5f:37:7a:ff:87:91:1e:29:8f:
+                    dc:ae:ef:ac:42:f4:7b:7b:ec:0e:16:0e:ed:67:fc:
+                    6a:6c:30:19:b7:4c:5d:78:6b:aa:11:ba:21:ab:7e:
+                    b1:e7:8b:a9:2c:35:04:55:c8:dc:2e:9b:31:68:be:
+                    56:6f:18:34:d3:1e:3b:8a:3c:0c:ef:d5:74:84:ca:
+                    81:2d
                Exponent: 65537 (0x10001)
    Signature Algorithm: sha256WithRSAEncryption
-        0e:28:5c:3b:29:99:9d:aa:c4:19:71:cb:94:36:10:8f:f9:7c:
-        12:01:83:3e:5f:71:83:c5:76:0f:10:76:15:06:2c:ff:c4:d2:
-        f7:f7:a3:82:84:f9:6f:e3:dd:14:33:fd:90:8e:30:6d:7c:28:
-        dd:e7:7a:38:51:09:37:32:41:dd:ed:b7:95:01:76:6a:c3:7d:
-        f3:c2:23:f3:85:67:8e:82:42:e8:55:48:92:3f:a8:b3:25:b1:
-        ae:73:5f:07:b8:d6:09:a1:66:1e:57:2b:0d:59:63:47:79:c4:
-        0b:eb:d3:f9:04:f6:30:0f:fe:ed:b8:c4:8f:0f:a3:d8:e1:ec:
-        fb:8b:cb:d3:84:b5:46:23:a5:a9:f8:f0:06:48:85:6e:ac:27:
-        30:6a:f5:da:e7:82:53:11:60:0f:64:78:a9:35:75:9d:3f:3f:
-        f5:85:fe:9b:e5:68:73:6b:18:6c:95:83:d1:cd:c5:8b:f6:9e:
-        38:2c:70:e6:06:d5:8c:4b:95:ed:5a:a4:04:26:fa:de:f4:bb:
-        d7:44:73:a1:cb:fe:f9:ce:9b:c5:9e:1b:12:d3:e1:40:4a:2a:
-        64:fc:5d:2c:07:d6:ca:45:42:db:f3:2f:bc:9c:63:b1:37:ef:
-        1c:7c:2a:32:4b:88:97:7d:77:f5:66:0b:25:d4:09:c6:39:94:
-        b4:ee:3e:2c
+        a2:b9:c8:22:76:08:0d:5f:31:3d:e1:b4:5c:75:c5:23:b1:28:
+        8d:7d:e5:88:db:f2:55:df:d6:b6:9d:8d:bd:d3:6f:0f:96:48:
+        c6:3c:9e:5f:fa:3f:55:1e:12:3c:f1:e6:b0:fb:31:9f:1b:5b:
+        69:4d:3f:5d:50:8c:ed:06:7e:14:41:f5:92:ec:a5:25:d3:fb:
+        bd:05:1c:4e:6e:26:69:42:38:73:91:9b:ae:a3:72:1d:d3:4b:
+        53:13:56:be:e7:cd:a3:71:03:30:0a:ab:e9:e5:56:64:15:96:
+        81:38:d2:4c:9d:82:5f:1e:e5:b0:00:b4:bd:b7:9b:fb:4c:dd:
+        98:0a:2d:96:cd:82:3b:bb:22:f0:73:3f:ed:83:d3:18:db:7a:
+        42:78:d7:83:b7:b4:07:fe:da:50:26:0c:b9:03:db:89:7d:69:
+        5c:c7:86:cb:20:7a:cf:75:43:c2:d6:d0:6c:a3:3f:30:ac:55:
+        d7:f2:bc:10:5f:b9:8c:13:bc:c6:4f:ef:c8:cc:db:71:bb:67:
+        52:37:e8:e8:9a:25:cb:a3:f4:3b:43:5b:47:d5:8d:2d:2c:50:
+        cf:50:63:60:9c:71:9a:65:26:33:6d:47:29:ac:5e:f1:01:d3:
+        46:26:36:b7:2f:a4:8c:68:8a:92:33:7b:8d:c5:b1:4f:cf:1d:
+        dd:c3:5d:10
 -----BEGIN CERTIFICATE-----
 MIICpDCCAYwCAhABMA0GCSqGSIb3DQEBCwUAMBIxEDAOBgNVBAMMB0ludGVybS4w
-HhcNMTgwODIwMTYyMzI3WhcNMTkwODIwMTYyMzI3WjAdMRswGQYDVQQDExJjbGll
-bnQuZXhhbXBsZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt
-+Iu2qlX7kgnNtV5vbx0yK44zMHculRTpiMONxu8CpJq1bTpOz1PYtjTRJzNkOkeZ
-c2WFryEdJbqe4djdqgZfcr3gSxhoTYKZq4DN2jeW3+a+puFoz4Pbcyg0Pyqdb3Wa
-tCYlWp3RgoH2shdQr0SU1RcJPi3cEKovbQddGW963irv1Sk9xDHS2Nqz29O0m2nj
-l9NbQ3WTNy7nifh6bbxJBTLOGj7rsDuyD31J35Q7v1JSFw8fG2uC+Miw2BjzVBI/
-uQhBa4lZdgrt7RumjD1Uj21H8ftiM4tR+q5IsaD3HxTk5OXjIn/Gl3ZqS8qmhJAC
-kij6rvLEwmcsnSMccz7dAgMBAAEwDQYJKoZIhvcNAQELBQADggEBAA4oXDspmZ2q
-xBlxy5Q2EI/5fBIBgz5fcYPFdg8QdhUGLP/E0vf3o4KE+W/j3RQz/ZCOMG18KN3n
-ejhRCTcyQd3tt5UBdmrDffPCI/OFZ46CQuhVSJI/qLMlsa5zXwe41gmhZh5XKw1Z
-Y0d5xAvr0/kE9jAP/u24xI8Po9jh7PuLy9OEtUYjpan48AZIhW6sJzBq9drnglMR
-YA9keKk1dZ0/P/WF/pvlaHNrGGyVg9HNxYv2njgscOYG1YxLle1apAQm+t70u9dE
-c6HL/vnOm8WeGxLT4UBKKmT8XSwH1spFQtvzL7ycY7E37xx8KjJLiJd9d/VmCyXU
-CcY5lLTuPiw=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 -----END CERTIFICATE-----