Regenerate sample certificates to fix CI

smortex · smortex · commit 440484baf2d6 · 2025-06-29T10:58:51.000-10:00
Some certificates used by CI have expired and cause CI failure.

Follow instructions from the `SETUP.txt` file to re-generate them, and
update these instructions to make this easier the next time.
diff --git a/src/test/ruby/x509/SETUP.txt b/src/test/ruby/x509/SETUP.txt
@@ -1,15 +1,24 @@
-$ /usr/lib/ssl/misc/CA.sh -newca
+$ /usr/lib/ssl/misc/CA.sh -newca # Only does something if demoCA does not exist
 
-$ /usr/lib/ssl/misc/CA.sh -newreq
+$ /usr/lib/ssl/misc/CA.sh -newreq # Use any password for the private key, leave the password empty for the CSR
+Country Name (2 letter code) [AU]:AU
+State or Province Name (full name) [Some-State]:None
+Locality Name (eg, city) []:.
+Organization Name (eg, company) [Internet Widgits Pty Ltd]:JRuby Dev Team
+Organizational Unit Name (eg, section) []:JOSSL 
+Common Name (e.g. server FQDN or YOUR name) []:jruby.org
+Email Address []:.
 
-$ /usr/lib/ssl/misc/CA.sh -sign
+$ /usr/lib/ssl/misc/CA.sh -sign # CA key password in demoCA/private/cakey.pem.passwd
 Signed certificate is in newcert.pem
 
+$ rm -f javastore.ts
+
 $ keytool -importcert --file demoCA/cacert.pem -alias demoCA -keystore javastore.ts -storetype jks -storepass keystore
 Trust this certificate? [no]:  y
 Certificate was added to keystore
 
-$ keytool -list -keystore javastore.ts
+$ keytool -list -keystore javastore.ts -storepass keystore
 Enter keystore password:
 Keystore type: JKS
 Keystore provider: SUN
diff --git a/src/test/ruby/x509/demoCA/index.txt b/src/test/ruby/x509/demoCA/index.txt
@@ -1,2 +1,3 @@
 V	270420110921Z		7FE0E82756779BDA39DFF3AEE16916DE984FFD24	unknown	/C=AU/ST=Some-State/O=Internet Widgits Pty Ltd/CN=demo.ca
 V	250420111357Z		7FE0E82756779BDA39DFF3AEE16916DE984FFD25	unknown	/C=AU/ST=None/O=JRuby Dev Team/OU=JOSSL/CN=jruby.org
+V	260629205611Z		7FE0E82756779BDA39DFF3AEE16916DE984FFD26	unknown	/C=AU/ST=None/O=JRuby Dev Team/OU=JOSSL/CN=jruby.org
diff --git a/src/test/ruby/x509/demoCA/index.txt.attr b/src/test/ruby/x509/demoCA/index.txt.attr
@@ -1 +1 @@
-unique_subject = yes
+unique_subject = no
diff --git a/src/test/ruby/x509/demoCA/index.txt.attr.old b/src/test/ruby/x509/demoCA/index.txt.attr.old
@@ -1 +1 @@
-unique_subject = yes
+unique_subject = no
diff --git a/src/test/ruby/x509/demoCA/index.txt.old b/src/test/ruby/x509/demoCA/index.txt.old
@@ -1 +1,2 @@
 V	270420110921Z		7FE0E82756779BDA39DFF3AEE16916DE984FFD24	unknown	/C=AU/ST=Some-State/O=Internet Widgits Pty Ltd/CN=demo.ca
+V	250420111357Z		7FE0E82756779BDA39DFF3AEE16916DE984FFD25	unknown	/C=AU/ST=None/O=JRuby Dev Team/OU=JOSSL/CN=jruby.org
diff --git a/src/test/ruby/x509/demoCA/newcerts/7FE0E82756779BDA39DFF3AEE16916DE984FFD26.pem b/src/test/ruby/x509/demoCA/newcerts/7FE0E82756779BDA39DFF3AEE16916DE984FFD26.pem
@@ -0,0 +1,79 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            7f:e0:e8:27:56:77:9b:da:39:df:f3:ae:e1:69:16:de:98:4f:fd:26
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=AU, ST=Some-State, O=Internet Widgits Pty Ltd, CN=demo.ca
+        Validity
+            Not Before: Jun 29 20:56:11 2025 GMT
+            Not After : Jun 29 20:56:11 2026 GMT
+        Subject: C=AU, ST=None, O=JRuby Dev Team, OU=JOSSL, CN=jruby.org
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:cb:e0:da:d2:8b:cb:a3:4c:e4:c9:00:23:ab:cd:
+                    cd:e3:e0:d7:60:66:25:9a:83:6b:d6:22:4f:83:32:
+                    5f:59:1f:62:37:d3:78:a7:84:17:a1:1e:5e:76:df:
+                    7e:a9:a8:23:8e:d3:fb:2d:f5:4a:9d:5e:4b:ad:08:
+                    1a:95:02:e1:a1:b5:44:94:21:0a:54:1c:a1:12:17:
+                    f6:3a:11:de:ac:c8:3e:7e:88:d4:b6:cb:f1:8c:8a:
+                    07:db:52:8b:2e:a8:a4:df:18:ce:f5:d9:db:c5:1f:
+                    55:e5:a3:96:0c:c3:82:2f:a3:df:45:f1:e7:27:f7:
+                    02:67:c9:66:32:30:de:98:0a:bf:6b:8a:d0:e5:86:
+                    7a:57:52:7f:97:a1:be:59:54:92:10:e5:1b:c3:ca:
+                    ae:d0:7e:cf:e7:93:92:40:af:63:d5:35:e5:e2:5a:
+                    fa:8f:4a:33:c0:08:08:cb:e2:f9:88:58:b5:1f:50:
+                    c2:75:fe:bc:65:10:69:8f:ee:07:dd:9a:d5:27:5a:
+                    1e:ed:aa:7a:b4:5a:22:0e:dd:9a:84:6d:9f:e3:40:
+                    fd:60:c5:4d:10:a1:78:46:3c:84:04:ad:83:e1:d4:
+                    d0:b8:fe:be:4c:ab:de:44:91:8f:da:35:f3:76:e8:
+                    b8:fb:8a:64:4d:85:32:ce:e2:37:14:00:04:d3:66:
+                    0c:33
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            X509v3 Subject Key Identifier: 
+                E2:1B:CB:68:88:88:73:C1:5C:76:8D:00:43:86:60:F4:C5:AF:EB:BA
+            X509v3 Authority Key Identifier: 
+                8F:B4:94:C8:7F:CB:EF:00:89:B2:F6:C1:BE:44:4B:1C:12:54:3B:28
+    Signature Algorithm: sha256WithRSAEncryption
+    Signature Value:
+        04:02:1e:7a:25:33:4a:44:81:98:88:ec:50:42:8d:74:29:44:
+        57:c9:b8:3b:85:c2:b9:0b:13:53:51:53:3f:c7:a6:b9:ed:81:
+        56:e2:39:08:0c:8a:d1:9a:63:ba:8f:c5:b6:8f:96:20:9e:4c:
+        98:b2:16:f2:37:55:33:4a:bc:f3:d3:36:40:bc:56:32:96:95:
+        de:1e:9c:ed:5e:e9:59:be:e7:27:34:73:2c:36:bd:a9:cd:3e:
+        85:b2:ac:8a:e1:02:6b:0c:4b:92:94:4f:fc:8c:15:84:cd:59:
+        2b:6a:9e:e0:dc:04:e8:7a:81:0c:d8:8b:72:6a:28:cc:78:9c:
+        bc:36:68:58:2d:42:af:7a:fd:63:d8:3b:6b:48:3e:05:07:ec:
+        58:9f:08:89:2b:75:9e:4e:43:9b:11:ec:5e:50:9d:65:10:bd:
+        0b:8a:f5:5f:f8:5f:10:a0:c7:8f:f6:b5:58:fb:19:46:68:a7:
+        1d:6b:00:8f:99:d9:a1:b2:f2:ba:37:47:7f:08:9b:f1:00:e9:
+        a1:a3:cb:02:e0:94:56:80:38:b7:a1:4c:e4:29:3f:ec:ac:6a:
+        db:98:de:2f:80:63:51:53:5c:4f:a5:d2:fa:b6:d5:9b:35:12:
+        bf:88:66:b1:2d:c2:be:c3:f7:4f:97:d3:f2:1b:76:ef:13:52:
+        47:bb:7b:3b
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
diff --git a/src/test/ruby/x509/demoCA/serial b/src/test/ruby/x509/demoCA/serial
@@ -1 +1 @@
-7FE0E82756779BDA39DFF3AEE16916DE984FFD26
+7FE0E82756779BDA39DFF3AEE16916DE984FFD27
diff --git a/src/test/ruby/x509/demoCA/serial.old b/src/test/ruby/x509/demoCA/serial.old
@@ -1 +1 @@
-7FE0E82756779BDA39DFF3AEE16916DE984FFD25
+7FE0E82756779BDA39DFF3AEE16916DE984FFD26
diff --git a/src/test/ruby/x509/javastore.ts b/src/test/ruby/x509/javastore.ts
diff --git a/src/test/ruby/x509/newcert.pem b/src/test/ruby/x509/newcert.pem
@@ -2,78 +2,78 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number:
-            7f:e0:e8:27:56:77:9b:da:39:df:f3:ae:e1:69:16:de:98:4f:fd:25
+            7f:e0:e8:27:56:77:9b:da:39:df:f3:ae:e1:69:16:de:98:4f:fd:26
         Signature Algorithm: sha256WithRSAEncryption
         Issuer: C=AU, ST=Some-State, O=Internet Widgits Pty Ltd, CN=demo.ca
         Validity
-            Not Before: Apr 20 11:13:57 2024 GMT
-            Not After : Apr 20 11:13:57 2025 GMT
+            Not Before: Jun 29 20:56:11 2025 GMT
+            Not After : Jun 29 20:56:11 2026 GMT
         Subject: C=AU, ST=None, O=JRuby Dev Team, OU=JOSSL, CN=jruby.org
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
-                    00:b3:83:9b:f8:e7:5d:25:cd:ac:dc:19:aa:46:ce:
-                    ff:66:30:b0:9d:da:1f:24:32:b1:9a:82:fc:bb:d0:
-                    4a:38:96:fe:b3:64:51:92:a0:11:5c:51:4f:f3:dc:
-                    d9:29:5e:25:ed:8b:17:35:6b:b2:01:0a:10:ce:ea:
-                    4d:67:7f:b3:a1:12:6d:dd:6e:31:11:12:a7:56:98:
-                    4a:89:87:e7:e8:4d:23:aa:6a:28:6e:4f:b4:73:9b:
-                    0f:6d:e7:32:5b:50:46:0e:06:5d:96:e4:5b:23:b1:
-                    b3:f3:a4:9b:12:ff:a1:7c:1a:ef:76:6a:b0:52:bf:
-                    03:1a:b8:7c:07:8d:f8:53:15:80:e5:37:38:05:01:
-                    01:ef:25:d7:86:ea:1d:79:0f:fc:00:35:0d:7d:4d:
-                    9c:9f:d8:d6:2e:42:df:72:13:8a:49:3a:59:ae:a7:
-                    d9:a1:a7:92:74:ca:c1:ab:c5:47:04:ad:b1:3f:69:
-                    02:a4:09:e0:94:bb:80:54:81:e6:8a:bc:1c:db:db:
-                    60:87:66:77:8d:f9:2b:bf:74:ba:dc:3d:5a:20:fa:
-                    5a:fd:50:4b:a7:43:f3:e2:11:04:31:0a:42:69:1f:
-                    4c:6d:db:71:a0:5b:1a:e8:70:2c:69:3e:e9:ce:ce:
-                    4e:c1:83:3c:39:cb:2b:8d:45:72:0a:3d:b8:74:c8:
-                    f7:a9
+                    00:cb:e0:da:d2:8b:cb:a3:4c:e4:c9:00:23:ab:cd:
+                    cd:e3:e0:d7:60:66:25:9a:83:6b:d6:22:4f:83:32:
+                    5f:59:1f:62:37:d3:78:a7:84:17:a1:1e:5e:76:df:
+                    7e:a9:a8:23:8e:d3:fb:2d:f5:4a:9d:5e:4b:ad:08:
+                    1a:95:02:e1:a1:b5:44:94:21:0a:54:1c:a1:12:17:
+                    f6:3a:11:de:ac:c8:3e:7e:88:d4:b6:cb:f1:8c:8a:
+                    07:db:52:8b:2e:a8:a4:df:18:ce:f5:d9:db:c5:1f:
+                    55:e5:a3:96:0c:c3:82:2f:a3:df:45:f1:e7:27:f7:
+                    02:67:c9:66:32:30:de:98:0a:bf:6b:8a:d0:e5:86:
+                    7a:57:52:7f:97:a1:be:59:54:92:10:e5:1b:c3:ca:
+                    ae:d0:7e:cf:e7:93:92:40:af:63:d5:35:e5:e2:5a:
+                    fa:8f:4a:33:c0:08:08:cb:e2:f9:88:58:b5:1f:50:
+                    c2:75:fe:bc:65:10:69:8f:ee:07:dd:9a:d5:27:5a:
+                    1e:ed:aa:7a:b4:5a:22:0e:dd:9a:84:6d:9f:e3:40:
+                    fd:60:c5:4d:10:a1:78:46:3c:84:04:ad:83:e1:d4:
+                    d0:b8:fe:be:4c:ab:de:44:91:8f:da:35:f3:76:e8:
+                    b8:fb:8a:64:4d:85:32:ce:e2:37:14:00:04:d3:66:
+                    0c:33
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Basic Constraints: 
                 CA:FALSE
             X509v3 Subject Key Identifier: 
-                A4:5D:C3:4D:EA:92:65:AE:F2:66:60:9B:E2:4C:EC:78:FD:CA:E9:A2
+                E2:1B:CB:68:88:88:73:C1:5C:76:8D:00:43:86:60:F4:C5:AF:EB:BA
             X509v3 Authority Key Identifier: 
                 8F:B4:94:C8:7F:CB:EF:00:89:B2:F6:C1:BE:44:4B:1C:12:54:3B:28
     Signature Algorithm: sha256WithRSAEncryption
     Signature Value:
-        3a:cf:7b:5c:f4:46:9b:dc:77:38:68:1d:a9:48:f0:01:68:9a:
-        9f:f7:34:4a:63:8a:d1:50:d6:18:a7:b3:ad:13:9f:46:01:e6:
-        89:7d:81:de:5f:49:1f:76:18:ec:23:07:fb:a2:3d:e0:eb:29:
-        67:12:2a:c0:ea:a6:51:69:37:81:49:c0:6e:6e:73:db:7d:09:
-        92:db:fe:5b:9f:3f:a0:3e:96:1c:2a:40:bc:9b:73:3b:38:59:
-        a4:e4:6b:07:a6:d3:3c:fd:48:07:fc:d8:3d:d4:e9:91:20:fd:
-        d5:a7:98:4f:ea:8b:ab:39:fa:f3:95:e0:cd:af:85:0b:85:ed:
-        72:ad:e0:74:83:88:b1:1f:1e:a7:13:56:4a:b5:6a:c5:6d:81:
-        cd:e7:69:f2:b9:49:f0:50:ae:21:ff:12:af:2f:c4:2a:23:43:
-        c3:73:64:f6:1a:b7:0f:9a:7b:3a:1f:93:6d:e3:30:23:00:dc:
-        b1:f1:83:22:a2:e6:6a:b0:e5:89:6a:71:f6:76:c3:4d:1f:c7:
-        4a:75:75:8a:85:6e:b6:11:89:9d:59:3a:ac:6a:bc:df:4e:ad:
-        1e:db:4c:81:66:64:b8:8a:86:be:0e:f2:10:3e:94:63:e3:e5:
-        97:9a:b1:24:6f:ea:ff:09:06:9c:e8:f7:38:e1:7e:32:5e:55:
-        ae:39:5b:fa
+        04:02:1e:7a:25:33:4a:44:81:98:88:ec:50:42:8d:74:29:44:
+        57:c9:b8:3b:85:c2:b9:0b:13:53:51:53:3f:c7:a6:b9:ed:81:
+        56:e2:39:08:0c:8a:d1:9a:63:ba:8f:c5:b6:8f:96:20:9e:4c:
+        98:b2:16:f2:37:55:33:4a:bc:f3:d3:36:40:bc:56:32:96:95:
+        de:1e:9c:ed:5e:e9:59:be:e7:27:34:73:2c:36:bd:a9:cd:3e:
+        85:b2:ac:8a:e1:02:6b:0c:4b:92:94:4f:fc:8c:15:84:cd:59:
+        2b:6a:9e:e0:dc:04:e8:7a:81:0c:d8:8b:72:6a:28:cc:78:9c:
+        bc:36:68:58:2d:42:af:7a:fd:63:d8:3b:6b:48:3e:05:07:ec:
+        58:9f:08:89:2b:75:9e:4e:43:9b:11:ec:5e:50:9d:65:10:bd:
+        0b:8a:f5:5f:f8:5f:10:a0:c7:8f:f6:b5:58:fb:19:46:68:a7:
+        1d:6b:00:8f:99:d9:a1:b2:f2:ba:37:47:7f:08:9b:f1:00:e9:
+        a1:a3:cb:02:e0:94:56:80:38:b7:a1:4c:e4:29:3f:ec:ac:6a:
+        db:98:de:2f:80:63:51:53:5c:4f:a5:d2:fa:b6:d5:9b:35:12:
+        bf:88:66:b1:2d:c2:be:c3:f7:4f:97:d3:f2:1b:76:ef:13:52:
+        47:bb:7b:3b
 -----BEGIN CERTIFICATE-----
-MIIDizCCAnOgAwIBAgIUf+DoJ1Z3m9o53/Ou4WkW3phP/SUwDQYJKoZIhvcNAQEL
+MIIDizCCAnOgAwIBAgIUf+DoJ1Z3m9o53/Ou4WkW3phP/SYwDQYJKoZIhvcNAQEL
 BQAwVzELMAkGA1UEBhMCQVUxEzARBgNVBAgMClNvbWUtU3RhdGUxITAfBgNVBAoM
 GEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZDEQMA4GA1UEAwwHZGVtby5jYTAeFw0y
-NDA0MjAxMTEzNTdaFw0yNTA0MjAxMTEzNTdaMFkxCzAJBgNVBAYTAkFVMQ0wCwYD
+NTA2MjkyMDU2MTFaFw0yNjA2MjkyMDU2MTFaMFkxCzAJBgNVBAYTAkFVMQ0wCwYD
 VQQIDAROb25lMRcwFQYDVQQKDA5KUnVieSBEZXYgVGVhbTEOMAwGA1UECwwFSk9T
 U0wxEjAQBgNVBAMMCWpydWJ5Lm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
-AQoCggEBALODm/jnXSXNrNwZqkbO/2YwsJ3aHyQysZqC/LvQSjiW/rNkUZKgEVxR
-T/Pc2SleJe2LFzVrsgEKEM7qTWd/s6ESbd1uMRESp1aYSomH5+hNI6pqKG5PtHOb
-D23nMltQRg4GXZbkWyOxs/OkmxL/oXwa73ZqsFK/Axq4fAeN+FMVgOU3OAUBAe8l
-14bqHXkP/AA1DX1NnJ/Y1i5C33ITikk6Wa6n2aGnknTKwavFRwStsT9pAqQJ4JS7
-gFSB5oq8HNvbYIdmd435K790utw9WiD6Wv1QS6dD8+IRBDEKQmkfTG3bcaBbGuhw
-LGk+6c7OTsGDPDnLK41Fcgo9uHTI96kCAwEAAaNNMEswCQYDVR0TBAIwADAdBgNV
-HQ4EFgQUpF3DTeqSZa7yZmCb4kzseP3K6aIwHwYDVR0jBBgwFoAUj7SUyH/L7wCJ
-svbBvkRLHBJUOygwDQYJKoZIhvcNAQELBQADggEBADrPe1z0RpvcdzhoHalI8AFo
-mp/3NEpjitFQ1hins60Tn0YB5ol9gd5fSR92GOwjB/uiPeDrKWcSKsDqplFpN4FJ
-wG5uc9t9CZLb/lufP6A+lhwqQLybczs4WaTkawem0zz9SAf82D3U6ZEg/dWnmE/q
-i6s5+vOV4M2vhQuF7XKt4HSDiLEfHqcTVkq1asVtgc3nafK5SfBQriH/Eq8vxCoj
-Q8NzZPYatw+aezofk23jMCMA3LHxgyKi5mqw5YlqcfZ2w00fx0p1dYqFbrYRiZ1Z
-OqxqvN9OrR7bTIFmZLiKhr4O8hA+lGPj5ZeasSRv6v8JBpzo9zjhfjJeVa45W/o=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=
 -----END CERTIFICATE-----
diff --git a/src/test/ruby/x509/newkey.pem b/src/test/ruby/x509/newkey.pem
@@ -1,30 +1,30 @@
 -----BEGIN ENCRYPTED PRIVATE KEY-----
-MIIFHDBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIptI6IvNIXLQCAggA
-MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECGgu1pMy79jcBIIEyEOSty89/eCt
-JNyk3QHvg254W31IfjwiUwHE8WfzXXrQJxAxaFKwsMLZQ1B5E85C1Hvaol1Ufr7E
-okC8Erm0UDBF9GsBhKBHclgh97clvqsA1oxdnIwJmn/0W7fZbhI3o3/34iTZvEmy
-C5gQ9h4mgpi1RXBKofu2HYp9YFSu+8xz/A75U8k33oCTIcBh8l3XUpf1iczB9KUN
-Np1e+HKfSkbyT60GrnOiRGtJXn7X67OHLNIMjB902zccW0ByA0ZTB4tv/Fbvohcw
-L3bytY+CixS/DBlvGVX+JT7NxOpRTVBeXpLiv5GG2zi+uL8EFHfzqblM8OW+l5j7
-SiJeQ0pCvIeKT3cIgzVIWpO3FNzQ0ucP4AjvFvKOXkyey/aLpmi9cJ9m8uPvJSuN
-wNtzfxVXdQ1bgbos2GmFQmriSWSinagKWWm1zsqElNlQue9jOdRK44HosllgGd1Y
-GuneH+LFAGEBCefxA3zO00uACPlqhY5HO545YrYkaHGJ6eMtjojb+P8rsNvJ9c4e
-8/IDIzVPo7zDSTuFiZFFGCU3GQSKjOrDfLb+cNdHfqMAjiyEjmeYkdrkxanKFyBv
-Tc1Cpi5EicpXHK/Lfu77r64Hg06cItIkgJh8P+m5/X0JU/c2Ynqq8paXs4eqqt7t
-q6t1okvy7kOpDEQ/UyLcMqKtPmnJa68bpJDkbTuWXCexFrQhnYyIxuHJtRVKp/oz
-mBsUexZpHp8PtCCB4dbyU+AuADZO1GMS8BJWBGh3I4/kDGnZ2C8UpSQ+UfbaOtu/
-hMoNT21jvadogd4by1DeFkYBjIQxwPoSaZfTRkcwu2NozJJlZT0f3MtMlntLJrR9
-wMQMviv/uEJGcQUJ4oNMHjkkK2N5pqZ2f8GOLuRm7xuHSAHBKjN9XHshoxjTiOPn
-DmplHX+vaRr+J9GAfmkg/jr2u4fGeFp+Y08HPbAfpvlxHuR6HWcDBm0vhK4qt0rx
-vBxsZs2hQr6m43eCPgJG92PDD/o831/6IMLsW/kowrDiSBfIVo9LFvPteFilA+Bd
-QVUh1CMnxqeWsfswzK38EwcHXxz1dLdL/aH6z7OkdAUzHaFaY8VZnEfECQfdHgJB
-Yk2NEuatOsQynTcCenXz0H86gYQT3mftneVWgM2AXDpTEBQ5XeU4iWUbVt0/s3ho
-tEYfcNUEacYVaQ9d5M4sylMIPm6Hx/MGx1zddgAw637w8dPWipsQbR860qW1uaZJ
-oQrIRIPq/n/W7kkM5XBZmAoLLPjvCzjtF6FGXiW8yrkN0HF1hs/nK50McorbqRYy
-MGV+jEHpzTE2CWPyTFjXn2idSJz4nX0D6IgjIbM9zB67cXHwsUMnGpVOMgaqB4en
-weaUWRUzau6mPa2o3eM5UHcSbbwXVDtHKIne6pZqpA6XATBPmRQujWA5GqWQ9PyO
-6r2DTrVRh1aYKsXl0EyX0OBPkB6C1ULoY+X4gT8riEX8mZSCn4aM6TYheCdhAHwo
-Zya5au7bxE+oimNrMuVDPRuGAizvox/ZCi9NgFbFxUFm8xC62g1mru0FU1y3thmO
-sAigENLt0iA15L0miimBnEjUbksIx7Ug0zr2VwpVe3knDo4o4FWBOOUPet6hg+lU
-oCkOpwuVQReqT6UE7feIvw==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 -----END ENCRYPTED PRIVATE KEY-----
diff --git a/src/test/ruby/x509/newreq.pem b/src/test/ruby/x509/newreq.pem
@@ -1,17 +1,17 @@
 -----BEGIN CERTIFICATE REQUEST-----
-MIICtDCCAZwCAQAwWTELMAkGA1UEBhMCQVUxDTALBgNVBAgMBE5vbmUxFzAVBgNV
+MIICnjCCAYYCAQAwWTELMAkGA1UEBhMCQVUxDTALBgNVBAgMBE5vbmUxFzAVBgNV
 BAoMDkpSdWJ5IERldiBUZWFtMQ4wDAYDVQQLDAVKT1NTTDESMBAGA1UEAwwJanJ1
-Ynkub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4Ob+OddJc2s
-3BmqRs7/ZjCwndofJDKxmoL8u9BKOJb+s2RRkqARXFFP89zZKV4l7YsXNWuyAQoQ
-zupNZ3+zoRJt3W4xERKnVphKiYfn6E0jqmoobk+0c5sPbecyW1BGDgZdluRbI7Gz
-86SbEv+hfBrvdmqwUr8DGrh8B434UxWA5Tc4BQEB7yXXhuodeQ/8ADUNfU2cn9jW
-LkLfchOKSTpZrqfZoaeSdMrBq8VHBK2xP2kCpAnglLuAVIHmirwc29tgh2Z3jfkr
-v3S63D1aIPpa/VBLp0Pz4hEEMQpCaR9MbdtxoFsa6HAsaT7pzs5OwYM8OcsrjUVy
-Cj24dMj3qQIDAQABoBYwFAYJKoZIhvcNAQkCMQcMBUpSdWJ5MA0GCSqGSIb3DQEB
-CwUAA4IBAQCc5UgGQGiJPKbYoBQ/ro0hejCX6rvyTmjpJwJTBX07JtcQmLDpQZkt
-kfwPOw/nCQS1q+QcO7gvjyULYCFuAJ+Ff+kyCYEMv4uQ7Xkc6U9sQSzdCSaXp6ob
-yR6boc26ioI9FZrwyGxEeu6XGlQ2ihRKjfx0sbdIoHKiSsWk9AZZXT3SgxtcnKDh
-zbMx1NAvQ8dO7mn1bWIYi5zfWjTIMGTrxD2GT3GuybWP/VXEJi5Nz9idfeN2dpPq
-yJH1mKTJZv/7ZRAF9kQwuDO5gtVuRzR3qSENpjOSmpKEn1hm8o1966APLV6SJZC4
-fsyzgvHK5Tsu+I5bj1CLmLjNppvQkaTu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 -----END CERTIFICATE REQUEST-----

Original file line number	Diff line number	Diff line change
`@@ -1,2 +1,3 @@`
`1`	`1`	`V 270420110921Z 7FE0E82756779BDA39DFF3AEE16916DE984FFD24 unknown /C=AU/ST=Some-State/O=Internet Widgits Pty Ltd/CN=demo.ca`
`2`	`2`	`V 250420111357Z 7FE0E82756779BDA39DFF3AEE16916DE984FFD25 unknown /C=AU/ST=None/O=JRuby Dev Team/OU=JOSSL/CN=jruby.org`
	`3`	`+V 260629205611Z 7FE0E82756779BDA39DFF3AEE16916DE984FFD26 unknown /C=AU/ST=None/O=JRuby Dev Team/OU=JOSSL/CN=jruby.org`
Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-unique_subject = yes`
	`1`	`+unique_subject = no`
Original file line number	Diff line number	Diff line change
`@@ -1 +1,2 @@`
`1`	`1`	`V 270420110921Z 7FE0E82756779BDA39DFF3AEE16916DE984FFD24 unknown /C=AU/ST=Some-State/O=Internet Widgits Pty Ltd/CN=demo.ca`
	`2`	`+V 250420111357Z 7FE0E82756779BDA39DFF3AEE16916DE984FFD25 unknown /C=AU/ST=None/O=JRuby Dev Team/OU=JOSSL/CN=jruby.org`
Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-7FE0E82756779BDA39DFF3AEE16916DE984FFD26`
	`1`	`+7FE0E82756779BDA39DFF3AEE16916DE984FFD27`