Regenerate test certificates to work with Python v3.13 (#699)

Python 3.13 enforces stricter SSL certificate requirements,
rejecting CAs without key usage extensions and proper constraints.

Regenerate the CA certificate with critical basicConstraints and
keyUsage (keyCertSign, cRLSign). Regenerate server and client certs
with correct basicConstraints, keyUsage, and subjectAltName on the
server certificate.

Add a script to automate certificate generation under tests/certs/.

- Ensure compatibility with Python 3.13+ SSL verification
- Prevent SSL verification errors in test suite

Signed-of-by: Casper Beyer <[email protected]>

Author: caspervonb

.github/workflows/test.yml

@@ -1,46 +1,46 @@
 name: test
 
 on:
-  push:
-    branches:
-      - main
-      - "release/**"
-      - "dev/**"
-  pull_request:
-    branches:
-      - "**"
+    push:
+        branches:
+            - main
+            - "release/**"
+            - "dev/**"
+    pull_request:
+        branches:
+            - "**"
 
 jobs:
-  test:
-    runs-on: ubuntu-latest
-    timeout-minutes: 20
-    env:
-      NATS_SERVER_VERSION: ${{ matrix.nats_version }}
-    strategy:
-      fail-fast: false
-      matrix:
-        python-version: ["3.8", "3.9", "3.10", "3.11", "3.12"]
-        nats_version: ["v2.10.26", "v2.11.0", "main"]
+    test:
+        runs-on: ubuntu-latest
+        timeout-minutes: 20
+        env:
+            NATS_SERVER_VERSION: ${{ matrix.nats_version }}
+        strategy:
+            fail-fast: false
+            matrix:
+                python-version: ["3.8", "3.9", "3.10", "3.11", "3.12", "3.13"]
+                nats_version: ["v2.10.26", "v2.11.0", "main"]
 
-    steps:
-      - name: Check out repository
-        uses: actions/checkout@v2
+        steps:
+            - name: Check out repository
+              uses: actions/checkout@v2
 
-      - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v2
-        with:
-          python-version: ${{ matrix.python-version }}
+            - name: Set up Python ${{ matrix.python-version }}
+              uses: actions/setup-python@v2
+              with:
+                  python-version: ${{ matrix.python-version }}
 
-      - name: Install dependencies
-        run: |
-          pip install pipenv
-          pip install certifi
-          pipenv install --dev
-          bash ./scripts/install_nats.sh
+            - name: Install dependencies
+              run: |
+                  pip install pipenv
+                  pip install certifi
+                  pipenv install --dev
+                  bash ./scripts/install_nats.sh
 
-      - name: Run tests
-        run: |
-          pipenv run flake8 --ignore="W391, W503, W504" ./nats/js/
-          pipenv run pytest -x -vv -s --continue-on-collection-errors
-        env:
-          PATH: $HOME/nats-server:$PATH
+            - name: Run tests
+              run: |
+                  pipenv run flake8 --ignore="W391, W503, W504" ./nats/js/
+                  pipenv run pytest -x -vv -s --continue-on-collection-errors
+              env:
+                  PATH: $HOME/nats-server:$PATH

scripts/generate_certs.sh

@@ -0,0 +1,48 @@
+#!/bin/bash
+set -euo pipefail
+
+# Output directory
+OUT_DIR="tests/certs"
+mkdir -p "$OUT_DIR"
+cd "$OUT_DIR"
+
+echo "Generating CA (with required extensions)..."
+openssl req -x509 -newkey rsa:2048 -days 3650 -nodes \
+  -keyout ca.key -out ca.pem \
+  -subj "/CN=Test CA" \
+  -addext "basicConstraints=critical,CA:TRUE" \
+  -addext "keyUsage=critical,keyCertSign,cRLSign"
+
+echo "Generating Server Certificate..."
+# Create server key and CSR
+openssl req -newkey rsa:2048 -nodes -keyout server-key.pem -out server.csr \
+  -subj "/CN=localhost"
+
+# Create server certificate signed by CA, with localhost and 127.0.0.1 SAN
+openssl x509 -req -in server.csr -CA ca.pem -CAkey ca.key -CAcreateserial \
+  -out server-cert.pem -days 365 \
+  -extfile <(cat <<EOF
+basicConstraints=CA:FALSE
+keyUsage=digitalSignature,keyEncipherment
+subjectAltName=DNS:localhost,IP:127.0.0.1
+EOF
+)
+
+echo "Generating Client Certificate..."
+# Create client key and CSR
+openssl req -newkey rsa:2048 -nodes -keyout client-key.pem -out client.csr \
+  -subj "/CN=Test Client"
+
+# Create client certificate signed by CA
+openssl x509 -req -in client.csr -CA ca.pem -CAkey ca.key -CAcreateserial \
+  -out client-cert.pem -days 365 \
+  -extfile <(cat <<EOF
+basicConstraints=CA:FALSE
+keyUsage=digitalSignature,keyEncipherment
+EOF
+)
+
+# Cleanup
+rm -f *.csr *.srl
+
+echo "Certificates generated in: $(pwd)"

tests/certs/ca.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

tests/certs/ca.pem

@@ -1,22 +1,19 @@
 -----BEGIN CERTIFICATE-----
-MIIDqDCCApCgAwIBAgIBATANBgkqhkiG9w0BAQsFADBtMQswCQYDVQQGEwJVUzEL
-MAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xEDAOBgNVBAoMB1N5
-bmFkaWExEDAOBgNVBAsMB25hdHMuaW8xFTATBgNVBAMMDGxvY2FsaG9zdCBjYTAe
-Fw0yMTA3MDExNTU2NTlaFw0yOTEwMTQxMzU3MjZaMG0xCzAJBgNVBAYTAlVTMQsw
-CQYDVQQIDAJDQTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEQMA4GA1UECgwHU3lu
-YWRpYTEQMA4GA1UECwwHbmF0cy5pbzEVMBMGA1UEAwwMbG9jYWxob3N0IGNhMIIB
-IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy+fupDc9MZldhetmGqPJtuM
-sp5VV6W9amlzkTck15B9Vc3laC6ph7Ble7FrT2L0sjG3U94MwU9/AHTXOmZdmbjM
-FpkjkLIVdFkbcWiErXYWDBHdA6dzOu+dagn0OyxRDjfqo1QUVKYVNu8Jw6MyWHXJ
-gljFl2ymHaQEhta/87tSvPULZ7gcEZ5CPFLENHWOlJPtQrPhJHDKjS8XHlbE1uXp
-i8kHqPCkImlv/s7Jw/QRIknV/kiAXAWGJCMbqLDG9JEatp7ektytcwMCr9pz9VzF
-6O/4LvOC8UCbu50eW7OudppN8G18IF3cMgH9jWsJpgVmXfJR+VZNe92/6ePTgQID
-AQABo1MwUTAdBgNVHQ4EFgQU7upCnRG44j5THcgKd28H4ESXBFkwHwYDVR0jBBgw
-FoAU7upCnRG44j5THcgKd28H4ESXBFkwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG
-9w0BAQsFAAOCAQEAfBHCa8sm0e767+oIZj3JIRi9MWN24hB9i4lVjDrwdOMaapMC
-YLLj5urqIgjOULjdsxBMzdNgNgH1vPenRYUUvIQcq7tk1q8DpfvmHEg2DHajpTAC
-DroutE5fYtlmFPSQ5UGG1if237osd6pDarVhGAdxex4YhwM+y+OXgpLqk6oC85oI
-fatf+hcovwFOlNeOTUqNZW6fEC+iFdH5g4+dtlx2LAJLpW57+5z25iTH7z16nUwB
-Vi76fezpaGA3xwkP/NMujgD4MbpVpF22a0YdK5fjUjXFwRI4Vu1zAjyJFhVuOWCS
-yT9yNzidtD5pho+Iv3JMzu54VWSq7nSUoPmKHQ==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 -----END CERTIFICATE-----

tests/certs/client-cert.pem

@@ -1,23 +1,19 @@
 -----BEGIN CERTIFICATE-----
-MIID0jCCArqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBtMQswCQYDVQQGEwJVUzEL
-MAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xEDAOBgNVBAoMB1N5
-bmFkaWExEDAOBgNVBAsMB25hdHMuaW8xFTATBgNVBAMMDGxvY2FsaG9zdCBjYTAe
-Fw0yMTA3MDExNTU2NTlaFw0yOTEwMTQxMzU3MjZaMHExCzAJBgNVBAYTAlVTMQsw
-CQYDVQQIDAJDQTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEQMA4GA1UECgwHU3lu
-YWRpYTEQMA4GA1UECwwHbmF0cy5pbzEZMBcGA1UEAwwQbG9jYWxob3N0IGNsaWVu
-dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMn1VyxBY4AkODPmOxK5
-VG3F2qQ+0jNFeikwcgJPHvFamqn3cA5AIJIUVmMtBiUfjnperHVKeuPfmW1bJw4E
-ne3V2eccDySoAR/BTX4kw0SPtIO3hnHyhOLX4bY4/Xw5OWgw2HMEwEwuoWxd+jpc
-GGzXY49J9gRKqxJFXR9tXD6T+1ABZPynqrTm3SYYCJoWq/C6feTSkf13HvnTnf8k
-fWcFum1Y5FegAObqbPqJwA0TGiuXSFkqw5oV0uAZzRQ7zqB6V8MB3W1U1pw86F1h
-09EN78PrW1yXX1LZrLKwlqPTVh53Y1HuT+mwJkdQjFbOGXwh3x7rmp8+A3QLD4pR
-5tsCAwEAAaN5MHcwCQYDVR0TBAIwADALBgNVHQ8EBAMCBeAwHQYDVR0lBBYwFAYI
-KwYBBQUHAwEGCCsGAQUFBwMCMD4GA1UdEQQ3MDWHBH8AAAGHEAAAAAAAAAAAAAAA
-AAAAAAGCCWxvY2FsaG9zdIIQY2xpZW50LmxvY2FsaG9zdDANBgkqhkiG9w0BAQsF
-AAOCAQEAWie6Pz2iJP6F9HfVH7anKVHeIXecwXJj4iLgEONaIcOyMcLPU4cthx1S
-OdvKAh+D9tT2PhVaIeDyYTUgFg/aaZUqI/W3odRH5HwQmE2YJDfXQusRtdFDTAUV
-XDqFkkNoJo4w3OQmlnQGm6QVReedyQ3jMTvqDRV+pa8gx6aH64jhP9fQRS4WkpYX
-d0HjWarV9/GzCP/+vGVZhwrhRG9p4F2ZCsflBzTx0YMGdo+vLDCSjwMbIT9t0T6/
-mt07Q70QSk8M3QAClrqarvLk+5z5XSZjtM06s/Z6opyqK2X8KYcOYX4WQyNFbOpy
-0YHy3iqmx/Ii0Zn5XZUXzAVGyJk5Yg==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 -----END CERTIFICATE-----

tests/certs/client-key.pem

@@ -1,27 +1,28 @@
------BEGIN RSA PRIVATE KEY-----
-MIIEpAIBAAKCAQEAyfVXLEFjgCQ4M+Y7ErlUbcXapD7SM0V6KTByAk8e8Vqaqfdw
-DkAgkhRWYy0GJR+Oel6sdUp649+ZbVsnDgSd7dXZ5xwPJKgBH8FNfiTDRI+0g7eG
-cfKE4tfhtjj9fDk5aDDYcwTATC6hbF36OlwYbNdjj0n2BEqrEkVdH21cPpP7UAFk
-/KeqtObdJhgImhar8Lp95NKR/Xce+dOd/yR9ZwW6bVjkV6AA5ups+onADRMaK5dI
-WSrDmhXS4BnNFDvOoHpXwwHdbVTWnDzoXWHT0Q3vw+tbXJdfUtmssrCWo9NWHndj
-Ue5P6bAmR1CMVs4ZfCHfHuuanz4DdAsPilHm2wIDAQABAoIBAHu5DodxI5i8F6ZL
-1EK7QOri+/gE+FcqqBUVtbKOcCFh5UBc8sv4Izv6s5WcXphdhbaXy0UrtK9nKyIg
-ZoOi9nFewlhgCzLkrZObo3K06N9Wvjq3MukZrqkdogw1S61PjUi0K9YCwh+prYCq
-7gHUq636IecFY27ro3PVBKCdKZa3jwNIg4Oy5H0dsLgA1ma+tJaZMxDQZGyXvPqD
-wGXdkjdIefo7WQHi3yyujSs3Bu76ChmkGQfma48clWiu4HNlWI3Uc8aLBwDWVmjF
-S4T8s9HNw+nDWNHvnD45dkgKyTNAGA4rmD01OtuiC44GfZkRtupXcI0xA7d0lzd+
-yvMBlfkCgYEA/9zpUgL2Uw24H28pDXiV6Lc0PmCmHVLPQxQpDzsudX/ukaUl0tMC
-tOL9575sluXOXDSkuoMX5nDX/8C6fPNSbi4AzrqDxQ7Dc05W41MvlJ9DdIzlozEm
-LFJ4RfXccxcVCXRrgNDNHpkMKQkk3Z+zmlZeNbbhWKs2CgZGrvyFnW8CgYEAyhEJ
-Z1aRC6XrP+GbMCiN7w2X6ZcDNm89o8jXR/94hTDGvyyQ4XIs0245XjHNYVP/ghzi
-iFpIRlph4QpKZebWiqgkwlsNsPKQmiBn5uqobo3VsUt+rFIhaX50GyM5cxSbSRkl
-/i9Z7ZZdj/dcsviURthKZiBn2uw+aROLCgKm71UCgYEA102h2K09cm4c/fagaQGL
-xCRGBid2IT7Jwfx5AKQgWCerLUv3JA0EPgq09gm7fs8qc1SpOXmO5w8V89TOGM74
-ElcLvuocb/oYZjMJ0ojxhPLv5Geb5VM6eBl9tAFL3F0UCry4qdEKijDnlrBnIUd9
-7uW2qSSXQ/Huq0jUufMszGkCgYEAnayLnPJkviUbG77svLh4gHgn+SNYY2qMO7il
-nE3R+oRkIZsh9nmEVvtkkobkDzVfZGUrs2BXk2ZFiDfic/+bm5i3Dl3EojW09j+h
-NAQZqCLPA8i4MLjpz4rYCLEEzDLhNToFdoH2dzllCsjnsdPcyCdQbr6Mq7y6un2A
-ejA1mP0CgYABUHeLemQTvsciXVAy7ZggDYmFIVPvxwYejAXWAeUdq2FEFWIqmywy
-gTISeMrWpaCpwRr97Rez5bLgYe1Crqujd03uzYzoMtuiE0027XE6CaqeDGEk7jWQ
-bnbanxoy7Ax6yjcEbqyaaG4ZbVXu5EbsCMPFE3mws3AqyF1/54YmbQ==
------END RSA PRIVATE KEY-----
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

tests/certs/server-cert.pem

@@ -1,23 +1,19 @@
 -----BEGIN CERTIFICATE-----
-MIID0jCCArqgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBtMQswCQYDVQQGEwJVUzEL
-MAkGA1UECAwCQ0ExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xEDAOBgNVBAoMB1N5
-bmFkaWExEDAOBgNVBAsMB25hdHMuaW8xFTATBgNVBAMMDGxvY2FsaG9zdCBjYTAe
-Fw0yMTA3MDExNTU2NTlaFw0yOTEwMTQxMzU3MjZaMHExCzAJBgNVBAYTAlVTMQsw
-CQYDVQQIDAJDQTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzEQMA4GA1UECgwHU3lu
-YWRpYTEQMA4GA1UECwwHbmF0cy5pbzEZMBcGA1UEAwwQbG9jYWxob3N0IHNlcnZl
-cjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN/v4lwsEQqEr8gqG6Xu
-UjNfvUBN/enc/26FqtsAF6ms0r4oHcyR3RZQGQj+Z0RF3Wu0Kq9692gk7FD/QulE
-hYJTjq6lEwvETuUHbkNmIAppNJW1JvgLsTOfm38VorBVU5PUMbrcfsVsFijXVACj
-9VMZ23So4dxtlvnqrd5/fVx0Pql5EjY87bJEKH5Zngy1v+AR5kybZaorOX9T4/Nl
-e0P184GwGs15hKAokoQMPm9uIhG527JMyhQh5J/2wooY2DBZ9jDt5FVXNpb0C+nr
-M+AULk5QHQsobTtmC3RSNHiNw5B5w+gmauhGziurq8gcx0DctqAslKFBkCLkL9fc
-F30CAwEAAaN5MHcwCQYDVR0TBAIwADALBgNVHQ8EBAMCBeAwHQYDVR0lBBYwFAYI
-KwYBBQUHAwEGCCsGAQUFBwMCMD4GA1UdEQQ3MDWHBH8AAAGHEAAAAAAAAAAAAAAA
-AAAAAAGCCWxvY2FsaG9zdIIQc2VydmVyLmxvY2FsaG9zdDANBgkqhkiG9w0BAQsF
-AAOCAQEATM/K671w3aHt665HBMawzMIZZPq/ZoBfEUkSUW9KdnQHgTxatHcZonsL
-aFn4XZBYQ0Pqkz7H1w39mHdvpURQ5ZMnsmn4jH3LECsOtQ4ztrLk2fhLSoMQBVdb
-UjdYhrM8AuILKRCzOBNsDm/ZB/vPSlmYhnaEBUjO0t+I/A0X1z5eDcYPLl578kfJ
-WjlvRluWr7Uku1DaZUy7TByYvUuOjP4c33DAnbZ5Sldx18repZ20REASxsCpa/CW
-tptxVfUvLcGRHIY0FxOn+5Pfm1QDo2uh6yVYHgsOCh1qW8FHfJvgnrMlvvXniKXu
-5H6A5GeyCkIVvAENDfl1cN9LaV5eQg==
+MIIDKjCCAhKgAwIBAgIUZ9n2dKgknLAUIZQ5Zy1NgDa/PFswDQYJKoZIhvcNAQEL
+BQAwEjEQMA4GA1UEAwwHVGVzdCBDQTAeFw0yNTA2MDMwOTI2MTJaFw0yNjA2MDMw
+OTI2MTJaMBQxEjAQBgNVBAMMCWxvY2FsaG9zdDCCASIwDQYJKoZIhvcNAQEBBQAD
+ggEPADCCAQoCggEBAJiBzZqtpHHUaSa62mVVpNKioByn2/OhtxO3kGPpBbqruQAQ
+brogbBnRzJX7iIdp6Gz5nNX/qSkphZYu2WGt+8D43iYCG7PV/5G+F9YwUra9j4Rr
+uXK2cMgDhU0qC0WLpwki/dZXE89YcWDZ8bZdXAa8t3bgRV3p8j3izp7XY8x/3G+L
+XTc4uh32cGfN/Oa3GbUaGumgTLJtOkkYGy5ForzLe408lrhOv1RgOczGbVOtMRbR
+TTAlIBNwNsqQwCHUx7R3uL9l8Kf7ADsu0GpsBCMszU6TsmfBYKqpP+bDGW7dFh55
+qV3U5kqzPq038rq0R4MGa+RepT3tYkI7zHyRQj8CAwEAAaN2MHQwCQYDVR0TBAIw
+ADALBgNVHQ8EBAMCBaAwGgYDVR0RBBMwEYIJbG9jYWxob3N0hwR/AAABMB0GA1Ud
+DgQWBBQBaDI7Zz5VlgDY3fgWDxedS+4cvDAfBgNVHSMEGDAWgBSac7uqIzSclMy/
+x7b8j3n7/tRa5DANBgkqhkiG9w0BAQsFAAOCAQEAEB5c4Gnd5Na+mD213eqObslG
+o4mgcOkGM8oAjoOG0OjrqtDhG2GvbIqMFufdAbGGe4T1ohZZuUh7mJdg0p6Vfyb6
+lUTiLBlfl1CrqQkeCMt+Pz1j5PqPXHa/8gi2rXO03WaStDyjfc6akOhosu99zv2H
+8GlwPBBwd/F/fWOHb/71mp/EXKxe+9ywM91GG4zImQoNgSYhv0tXQmjc3ZJEJBsl
+NbuJNNqrWc/mf5aaf40pzgbhEwLXNWslLXOI07CfxHK8yAQ2O1stPQtAFViJcMyg
+8bX8h/VNHQIGIL7YUB0ufHebsay4l8PWtVWXY8tyzOo/fdtNPcWseZfgHeKqQA==
 -----END CERTIFICATE-----

tests/certs/server-key.pem

@@ -1,27 +1,28 @@
------BEGIN RSA PRIVATE KEY-----
-MIIEpAIBAAKCAQEA3+/iXCwRCoSvyCobpe5SM1+9QE396dz/boWq2wAXqazSvigd
-zJHdFlAZCP5nREXda7Qqr3r3aCTsUP9C6USFglOOrqUTC8RO5QduQ2YgCmk0lbUm
-+AuxM5+bfxWisFVTk9Qxutx+xWwWKNdUAKP1UxnbdKjh3G2W+eqt3n99XHQ+qXkS
-NjztskQoflmeDLW/4BHmTJtlqis5f1Pj82V7Q/XzgbAazXmEoCiShAw+b24iEbnb
-skzKFCHkn/bCihjYMFn2MO3kVVc2lvQL6esz4BQuTlAdCyhtO2YLdFI0eI3DkHnD
-6CZq6EbOK6uryBzHQNy2oCyUoUGQIuQv19wXfQIDAQABAoIBAC5rWl/C3rFwecOj
-PuHxeeaeVOuMfzLIFcbCPH1zEnSgl3rFdA/guJSUe+wKWDulw9U8npCLi9dxt+6+
-Sw9xnb87NNts6nrI8ZW2KZwdAk1GK5lQ2MgYHF5YGnKIeJXWyiFdngVfCYRA+IL0
-x7vuQL8+H+iZzV/U87PQesQhZ0oPh03n/4OtSo1bnPOoiPLAC+GVVpSSKoh13beb
-GpIRXhGNXonGPWnj1t/oBHQwLDfDndnljkRaWTzxeCZGcQ1wYucf6jne5dI1E21q
-vrdyK8GL4SqzHC2SHnJO24aKam/Xr7YqOM2T+XsVywKxE4I1icT2YhQAgRuN8Nlg
-7CELdAECgYEA+CEhY7JYfmRb/+PIvogRr67uaYtxYygvDcYfse5O/V/HOzotIXIT
-t99deD8XOFpWhJHdDzDD/TStb/rmwu5kavMQzmQafyesu7okk1NtB+fZtMLQfF9/
-0+bW9uJQFyc1EVHKgyya3UidXTcmKcExKQZT+jdgFz614zndcOKl0H0CgYEA5wpO
-WIjjxVqke5ucrVSRsm37l0BZYeea2vxLAzUV4txVw3hcOgJo+FhEGFy6EjNSV2OR
-y589gZDEPZ/LNeaj7nbNUqf2xZV7MAXBgUCtj7fJqMbVhbXZB0w0hIknDL+td2WZ
-bocuVExTwRwXyuSCgUFo0Bz++L0cR3JK6kNBEwECgYEAyOfKaTbWgEAyXZbJy7vQ
-1jcFw1+sh2TZ9IUe1KroOi962XHZaOM9I/wvalVrL621r9GK8+nARxyH8cttXRg5
-Jn94dCSJb7toGPg29TLvbR9FHx8+P/XzQlf+ZhgIUTbluQhIuL09Bz7sa7VjqRtL
-+rOs+0QrAac9DqajretV5uECgYEAgaXe4P+wEQcUVei0uu9B8waUsAOEJNR6qXf6
-AArCBVPvLIlV95dyoCmnzKP8Jkp2YmOVZNYvBY3fEVWiCtUqGJ7CCSgH6kg/oGsa
-cxWAT62qk/M/zpCFAPtaXSU5rIXDKcTxnHxvGw7Z0PuavlgMg8vYrTAYRCyaud0A
-/QRQeAECgYBuRDM+mk5EDbsi6MOD24x6krRDHr5/Ch5xCQXK2FhU8zcQ8P24UixU
-Re71LBsYLBHkhB/slofGdBvgeiVHwJyVWA9c3+kb+IwSilNRLV7IwxrfLg3xSVBu
-0KEwWLSXlJmPnGWObpBmz62HrfquyMME4srQrNfW1q+Qm8OlZIeInw==
------END RSA PRIVATE KEY-----
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----