Bug#949897: buster-pu: package golang-github-prometheus-common/0+git20181119.b36ad28-1+deb10u1
Package: release.debian.org
Severity: normal
Tags: buster
User: release.debian.org@packages.debian.org
Usertags: pu
* Backport upstream patch "config: extend validity of testdata certs":
As the previous test certificates were set to expire on 2019-07-13,
causing TestNewClientFromConfig to fail after that date.
See https://github.com/prometheus/common/pull/186
(Closes: #949189)
diff -Nru golang-github-prometheus-common-0+git20181119.b36ad28/debian/changelog golang-github-prometheus-common-0+git20181119.b36ad28/debian/changelog
--- golang-github-prometheus-common-0+git20181119.b36ad28/debian/changelog 2018-12-19 17:40:03.000000000 +0200
+++ golang-github-prometheus-common-0+git20181119.b36ad28/debian/changelog 2020-01-26 21:49:09.000000000 +0200
@@ -1,3 +1,14 @@
+golang-github-prometheus-common (0+git20181119.b36ad28-1+deb10u1) buster; urgency=medium
+
+ * Non-maintainer upload.
+ * Backport upstream patch "config: extend validity of testdata certs":
+ As the previous test certificates were set to expire on 2019-07-13,
+ causing TestNewClientFromConfig to fail after that date.
+ See https://github.com/prometheus/common/pull/186
+ (Closes: #949189)
+
+ -- Adrian Bunk <bunk@debian.org> Sun, 26 Jan 2020 21:49:09 +0200
+
golang-github-prometheus-common (0+git20181119.b36ad28-1) unstable; urgency=medium
* New upstream snapshot.
diff -Nru golang-github-prometheus-common-0+git20181119.b36ad28/debian/patches/02-config--extend-validity-of-testdata-certs.patch golang-github-prometheus-common-0+git20181119.b36ad28/debian/patches/02-config--extend-validity-of-testdata-certs.patch
--- golang-github-prometheus-common-0+git20181119.b36ad28/debian/patches/02-config--extend-validity-of-testdata-certs.patch 1970-01-01 02:00:00.000000000 +0200
+++ golang-github-prometheus-common-0+git20181119.b36ad28/debian/patches/02-config--extend-validity-of-testdata-certs.patch 2020-01-26 21:48:16.000000000 +0200
@@ -0,0 +1,924 @@
+Description: config: extend validity of testdata certs (#186)
+ Some test certificates had an end of validity date set to Jul 13 2019.
+ Simon Pasquier has regenerated them all to be valid for 40 years.
+Author: Simon Pasquier <spasquie@redhat.com>
+Origin: backport
+Bug: https://github.com/prometheus/common/pull/186
+Applied-Upstream: a82f4c12f983cc2649298185f296632953e50d3e
+Reviewed-by: Anthony Fok <foka@debian.org>
+Last-Update: 2019-08-27
+---
+This patch header follows DEP-3: http://dep.debian.net/deps/dep3/
+--- a/config/http_config_test.go
++++ b/config/http_config_test.go
+@@ -31,8 +31,8 @@
+ TLSCAChainPath = "testdata/tls-ca-chain.pem"
+ ServerCertificatePath = "testdata/server.crt"
+ ServerKeyPath = "testdata/server.key"
+- BarneyCertificatePath = "testdata/barney.crt"
+- BarneyKeyNoPassPath = "testdata/barney-no-pass.key"
++ ClientCertificatePath = "testdata/client.crt"
++ ClientKeyNoPassPath = "testdata/client-no-pass.key"
+ MissingCA = "missing/ca.crt"
+ MissingCert = "missing/cert.crt"
+ MissingKey = "missing/secret.key"
+@@ -101,8 +101,8 @@
+ clientConfig: HTTPClientConfig{
+ TLSConfig: TLSConfig{
+ CAFile: "",
+- CertFile: BarneyCertificatePath,
+- KeyFile: BarneyKeyNoPassPath,
++ CertFile: ClientCertificatePath,
++ KeyFile: ClientKeyNoPassPath,
+ ServerName: "",
+ InsecureSkipVerify: true},
+ },
+@@ -113,8 +113,8 @@
+ clientConfig: HTTPClientConfig{
+ TLSConfig: TLSConfig{
+ CAFile: TLSCAChainPath,
+- CertFile: BarneyCertificatePath,
+- KeyFile: BarneyKeyNoPassPath,
++ CertFile: ClientCertificatePath,
++ KeyFile: ClientKeyNoPassPath,
+ ServerName: "",
+ InsecureSkipVerify: false},
+ },
+@@ -126,8 +126,8 @@
+ BearerToken: BearerToken,
+ TLSConfig: TLSConfig{
+ CAFile: TLSCAChainPath,
+- CertFile: BarneyCertificatePath,
+- KeyFile: BarneyKeyNoPassPath,
++ CertFile: ClientCertificatePath,
++ KeyFile: ClientKeyNoPassPath,
+ ServerName: "",
+ InsecureSkipVerify: false},
+ },
+@@ -145,8 +145,8 @@
+ BearerTokenFile: BearerTokenFile,
+ TLSConfig: TLSConfig{
+ CAFile: TLSCAChainPath,
+- CertFile: BarneyCertificatePath,
+- KeyFile: BarneyKeyNoPassPath,
++ CertFile: ClientCertificatePath,
++ KeyFile: ClientKeyNoPassPath,
+ ServerName: "",
+ InsecureSkipVerify: false},
+ },
+@@ -167,8 +167,8 @@
+ },
+ TLSConfig: TLSConfig{
+ CAFile: TLSCAChainPath,
+- CertFile: BarneyCertificatePath,
+- KeyFile: BarneyKeyNoPassPath,
++ CertFile: ClientCertificatePath,
++ KeyFile: ClientKeyNoPassPath,
+ ServerName: "",
+ InsecureSkipVerify: false},
+ },
+@@ -257,8 +257,8 @@
+ BearerTokenFile: MissingBearerTokenFile,
+ TLSConfig: TLSConfig{
+ CAFile: TLSCAChainPath,
+- CertFile: BarneyCertificatePath,
+- KeyFile: BarneyKeyNoPassPath,
++ CertFile: ClientCertificatePath,
++ KeyFile: ClientKeyNoPassPath,
+ ServerName: "",
+ InsecureSkipVerify: false},
+ }
+@@ -348,8 +348,8 @@
+ func TestTLSConfig(t *testing.T) {
+ configTLSConfig := TLSConfig{
+ CAFile: TLSCAChainPath,
+- CertFile: BarneyCertificatePath,
+- KeyFile: BarneyKeyNoPassPath,
++ CertFile: ClientCertificatePath,
++ KeyFile: ClientKeyNoPassPath,
+ ServerName: "localhost",
+ InsecureSkipVerify: false}
+
+@@ -361,15 +361,15 @@
+ rootCAs := x509.NewCertPool()
+ rootCAs.AppendCertsFromPEM(tlsCAChain)
+
+- barneyCertificate, err := tls.LoadX509KeyPair(BarneyCertificatePath, BarneyKeyNoPassPath)
++ clientCertificate, err := tls.LoadX509KeyPair(ClientCertificatePath, ClientKeyNoPassPath)
+ if err != nil {
+ t.Fatalf("Can't load the client key pair ('%s' and '%s'). Reason: %s",
+- BarneyCertificatePath, BarneyKeyNoPassPath, err)
++ ClientCertificatePath, ClientKeyNoPassPath, err)
+ }
+
+ expectedTLSConfig := &tls.Config{
+ RootCAs: rootCAs,
+- Certificates: []tls.Certificate{barneyCertificate},
++ Certificates: []tls.Certificate{clientCertificate},
+ ServerName: configTLSConfig.ServerName,
+ InsecureSkipVerify: configTLSConfig.InsecureSkipVerify}
+ expectedTLSConfig.BuildNameToCertificate()
+@@ -423,18 +423,18 @@
+ configTLSConfig: TLSConfig{
+ CAFile: "",
+ CertFile: MissingCert,
+- KeyFile: BarneyKeyNoPassPath,
++ KeyFile: ClientKeyNoPassPath,
+ ServerName: "",
+ InsecureSkipVerify: false},
+- errorMessage: fmt.Sprintf("unable to use specified client cert (%s) & key (%s):", MissingCert, BarneyKeyNoPassPath),
++ errorMessage: fmt.Sprintf("unable to use specified client cert (%s) & key (%s):", MissingCert, ClientKeyNoPassPath),
+ }, {
+ configTLSConfig: TLSConfig{
+ CAFile: "",
+- CertFile: BarneyCertificatePath,
++ CertFile: ClientCertificatePath,
+ KeyFile: MissingKey,
+ ServerName: "",
+ InsecureSkipVerify: false},
+- errorMessage: fmt.Sprintf("unable to use specified client cert (%s) & key (%s):", BarneyCertificatePath, MissingKey),
++ errorMessage: fmt.Sprintf("unable to use specified client cert (%s) & key (%s):", ClientCertificatePath, MissingKey),
+ },
+ }
+
+--- a/config/testdata/barney-no-pass.key
++++ /dev/null
+@@ -1,27 +0,0 @@
+------BEGIN RSA PRIVATE KEY-----
+-MIIEpQIBAAKCAQEAxmYjfBZhZbAup9uSULehoqPCv/U+77ETxUNyS2nviWEHDAb/
+-pFS8Btx4oCQ1ECVSyxcUmXSlrvDjMY4sisOHvndNRlGi274M5a8Q5yD1BUqvxq3u
+-XB/+SYNVShBzaswrSjpzMe89AlOPxPjnE14OXh00j2hHunOG4jhlWgJnY0YyvUQQ
+-YWO6KrmKMiZ4MgmY0SWh/ZhlkDJPtkp3aUVM2sheCru/70E9viLGfdlhc2pIMshy
+-wNp4/5IkHBZwbqXFFGX4sRtSXI/auZNvcHOBse+3e3BonWvBWS2lIYbzpX3vLB7B
+-E9BGIxWn1fgNQr14yFPaccSszBvgtmEUONolnwIDAQABAoIBAQC7nBhQHgXKGBl2
+-Z97rb0pstrjRtsLl/Cg68LWi9LEr0tHMIM4bgnkvb8qtfK+k7fZl0BSNrE2EqYvd
+-75jVO2MgzEYJieccLpKZm7u7JGIut9qSYSU2fpaCw6uiVv4dbqY9EhqejKG/km8w
+-j0JMATRK8Qkj1zOE7/wL7dKBlCZaK3u+OT17spuA/21PG/cLiPaSGSA3CU/eqbkU
+-BD6JeBxp33XNTytwWoOvarsigpL0dGqQ7+qhGq6t69qFfWoe9rimV7Ya+tB9zF/U
+-HzOIEspOYvzxe+C7VJjlVFr4haMYmsrO9qRUJ2ofp49OLVdfEANsdVISSvS63BEp
+-gBZN8Ko5AoGBAO1z8y8YCsI+2vBG6nxZ1eMba0KHi3bS8db1TaenJBV22w6WQATh
+-hEaU6VLMFcMvrOUjXN/7HJfnEMyvFT6gb9obPDVEMZw88s9lVN6njgGLZR/jodyN
+-7N7utLopN043Ra0WfEILAXPSz8esT1yn05OZV6AFHxJEWMrX3/4+spCLAoGBANXl
+-RomieVY4u3FF/uzhbzKNNb9ETxrQuexfbangKp5eLniwnr2SQWIbyPzeurwp15J8
+-HvxB2vpNvs1khSwNx9dQfMdiUVPGLWj7MimAHTHsnQ9LVV9W28ghuSWbjQDGTUt1
+-WCCu1MkKIOzupbi+zgsNlI33yilRQKAb9SRxdy29AoGBAOKpvyZiPcrkMxwPpb/k
+-BU7QGpgcSR25CQ+Xg3QZEVHH7h1DgYLnPtwdQ4g8tj1mohTsp7hKvSWndRrdulrY
+-zUyWmOeD3BN2/pTI9rW/nceNp49EPHsLo2O+2xelRlzMWB98ikqEtPM59gt1SSB6
+-N3X6d3GR0fIe+d9PKEtK0Cs3AoGAZ9r8ReXSvm+ra5ON9Nx8znHMEAON2TpRnBi1
+-uY7zgpO+QrGXUfqKrqVJEKbgym4SkribnuYm+fP32eid1McYKk6VV4ZAcMm/0MJv
+-F8Fx64S0ufFdEX6uFl1xdXYyn5apfyMJ2EyrWrYFSKWTZ8GVb753S/tteGRQWa1Z
+-eQly0Y0CgYEAnI6G9KFvXI+MLu5y2LPYAwsesDFzaWwyDl96ioQTA9hNSrjR33Vw
+-xwpiEe0T/WKF8NQ0QWnrQDbTvuCvZUK37TVxscYWuItL6vnBrYqr4Ck0j1BcGwV5
+-jT581A/Vw8JJiR/vfcxgmrFYqoUmkMKDmCN1oImfz09GtQ4jQ1rlxz8=
+------END RSA PRIVATE KEY-----
+--- a/config/testdata/barney.crt
++++ /dev/null
+@@ -1,96 +0,0 @@
+-Certificate:
+- Data:
+- Version: 3 (0x2)
+- Serial Number: 2 (0x2)
+- Signature Algorithm: sha1WithRSAEncryption
+- Issuer: C=NO, O=Green AS, OU=Green Certificate Authority, CN=Green TLS CA
+- Validity
+- Not Before: Jul 13 04:02:47 2017 GMT
+- Not After : Jul 13 04:02:47 2019 GMT
+- Subject: C=NO, O=Telenor AS, OU=Support, CN=Barney Rubble
+- Subject Public Key Info:
+- Public Key Algorithm: rsaEncryption
+- Public-Key: (2048 bit)
+- Modulus:
+- 00:c6:66:23:7c:16:61:65:b0:2e:a7:db:92:50:b7:
+- a1:a2:a3:c2:bf:f5:3e:ef:b1:13:c5:43:72:4b:69:
+- ef:89:61:07:0c:06:ff:a4:54:bc:06:dc:78:a0:24:
+- 35:10:25:52:cb:17:14:99:74:a5:ae:f0:e3:31:8e:
+- 2c:8a:c3:87:be:77:4d:46:51:a2:db:be:0c:e5:af:
+- 10:e7:20:f5:05:4a:af:c6:ad:ee:5c:1f:fe:49:83:
+- 55:4a:10:73:6a:cc:2b:4a:3a:73:31:ef:3d:02:53:
+- 8f:c4:f8:e7:13:5e:0e:5e:1d:34:8f:68:47:ba:73:
+- 86:e2:38:65:5a:02:67:63:46:32:bd:44:10:61:63:
+- ba:2a:b9:8a:32:26:78:32:09:98:d1:25:a1:fd:98:
+- 65:90:32:4f:b6:4a:77:69:45:4c:da:c8:5e:0a:bb:
+- bf:ef:41:3d:be:22:c6:7d:d9:61:73:6a:48:32:c8:
+- 72:c0:da:78:ff:92:24:1c:16:70:6e:a5:c5:14:65:
+- f8:b1:1b:52:5c:8f:da:b9:93:6f:70:73:81:b1:ef:
+- b7:7b:70:68:9d:6b:c1:59:2d:a5:21:86:f3:a5:7d:
+- ef:2c:1e:c1:13:d0:46:23:15:a7:d5:f8:0d:42:bd:
+- 78:c8:53:da:71:c4:ac:cc:1b:e0:b6:61:14:38:da:
+- 25:9f
+- Exponent: 65537 (0x10001)
+- X509v3 extensions:
+- X509v3 Key Usage: critical
+- Digital Signature
+- X509v3 Basic Constraints:
+- CA:FALSE
+- X509v3 Extended Key Usage:
+- TLS Web Client Authentication
+- X509v3 Subject Key Identifier:
+- F4:17:02:DD:1B:01:AB:C5:BC:17:A4:5C:4B:75:8E:EC:B1:E0:C8:F1
+- X509v3 Authority Key Identifier:
+- keyid:AE:42:88:75:DD:05:A6:8E:48:7F:50:69:F9:B7:34:23:49:B8:B4:71
+-
+- Authority Information Access:
+- CA Issuers - URI:http://green.no/ca/tls-ca.cer
+-
+- X509v3 CRL Distribution Points:
+-
+- Full Name:
+- URI:http://green.no/ca/tls-ca.crl
+-
+- X509v3 Subject Alternative Name:
+- email:barney@telenor.no
+- Signature Algorithm: sha1WithRSAEncryption
+- 96:9a:c5:41:8a:2f:4a:c4:80:d9:2b:1a:cf:07:85:e9:b6:18:
+- 01:20:41:b9:c3:d4:ca:d3:2d:66:c3:1d:52:7f:25:d7:92:0c:
+- e9:a9:ae:e6:2e:fa:9d:0a:cf:84:b9:03:f2:63:e3:d3:c9:70:
+- 6a:ac:04:5e:a9:2d:a2:43:7a:34:60:f7:a9:32:e1:48:ec:c6:
+- 03:ac:b3:06:2e:48:6e:d0:35:11:31:3d:0c:04:66:41:e6:b2:
+- ec:8c:68:f8:e4:bc:47:85:39:60:69:a9:8a:ee:2f:56:88:8a:
+- 19:45:d0:84:8e:c2:27:2c:82:9c:07:6c:34:ae:41:61:63:f9:
+- 32:cb:8b:33:ea:2c:15:5f:f9:35:b0:3c:51:4d:5f:30:de:0b:
+- 88:28:94:79:f3:bd:69:37:ad:12:20:e1:6b:1d:b6:77:d9:83:
+- db:81:a4:53:6c:0f:6a:17:5e:2b:c1:94:c6:42:e3:73:cd:9e:
+- 79:1b:8c:89:cd:da:ce:b0:f4:21:c5:32:25:04:6e:68:9f:a7:
+- ca:f4:c5:86:e5:4e:d9:fd:69:73:e6:15:50:6e:76:0f:73:5e:
+- 7a:a3:f4:dc:15:4a:ab:bb:3c:9a:fa:9f:01:7a:5c:47:a9:a3:
+- 68:1c:49:e0:37:37:77:af:87:07:16:e4:e1:d7:98:39:15:a6:
+- 51:5d:4c:db
+------BEGIN CERTIFICATE-----
+-MIIEITCCAwmgAwIBAgIBAjANBgkqhkiG9w0BAQUFADBdMQswCQYDVQQGEwJOTzER
+-MA8GA1UECgwIR3JlZW4gQVMxJDAiBgNVBAsMG0dyZWVuIENlcnRpZmljYXRlIEF1
+-dGhvcml0eTEVMBMGA1UEAwwMR3JlZW4gVExTIENBMB4XDTE3MDcxMzA0MDI0N1oX
+-DTE5MDcxMzA0MDI0N1owTDELMAkGA1UEBhMCTk8xEzARBgNVBAoMClRlbGVub3Ig
+-QVMxEDAOBgNVBAsMB1N1cHBvcnQxFjAUBgNVBAMMDUJhcm5leSBSdWJibGUwggEi
+-MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGZiN8FmFlsC6n25JQt6Gio8K/
+-9T7vsRPFQ3JLae+JYQcMBv+kVLwG3HigJDUQJVLLFxSZdKWu8OMxjiyKw4e+d01G
+-UaLbvgzlrxDnIPUFSq/Gre5cH/5Jg1VKEHNqzCtKOnMx7z0CU4/E+OcTXg5eHTSP
+-aEe6c4biOGVaAmdjRjK9RBBhY7oquYoyJngyCZjRJaH9mGWQMk+2SndpRUzayF4K
+-u7/vQT2+IsZ92WFzakgyyHLA2nj/kiQcFnBupcUUZfixG1Jcj9q5k29wc4Gx77d7
+-cGida8FZLaUhhvOlfe8sHsET0EYjFafV+A1CvXjIU9pxxKzMG+C2YRQ42iWfAgMB
+-AAGjgfwwgfkwDgYDVR0PAQH/BAQDAgeAMAkGA1UdEwQCMAAwEwYDVR0lBAwwCgYI
+-KwYBBQUHAwIwHQYDVR0OBBYEFPQXAt0bAavFvBekXEt1juyx4MjxMB8GA1UdIwQY
+-MBaAFK5CiHXdBaaOSH9Qafm3NCNJuLRxMDkGCCsGAQUFBwEBBC0wKzApBggrBgEF
+-BQcwAoYdaHR0cDovL2dyZWVuLm5vL2NhL3Rscy1jYS5jZXIwLgYDVR0fBCcwJTAj
+-oCGgH4YdaHR0cDovL2dyZWVuLm5vL2NhL3Rscy1jYS5jcmwwHAYDVR0RBBUwE4ER
+-YmFybmV5QHRlbGVub3Iubm8wDQYJKoZIhvcNAQEFBQADggEBAJaaxUGKL0rEgNkr
+-Gs8Hhem2GAEgQbnD1MrTLWbDHVJ/JdeSDOmpruYu+p0Kz4S5A/Jj49PJcGqsBF6p
+-LaJDejRg96ky4UjsxgOsswYuSG7QNRExPQwEZkHmsuyMaPjkvEeFOWBpqYruL1aI
+-ihlF0ISOwicsgpwHbDSuQWFj+TLLizPqLBVf+TWwPFFNXzDeC4golHnzvWk3rRIg
+-4WsdtnfZg9uBpFNsD2oXXivBlMZC43PNnnkbjInN2s6w9CHFMiUEbmifp8r0xYbl
+-Ttn9aXPmFVBudg9zXnqj9NwVSqu7PJr6nwF6XEepo2gcSeA3N3evhwcW5OHXmDkV
+-plFdTNs=
+------END CERTIFICATE-----
+--- /dev/null
++++ b/config/testdata/client-no-pass.key
+@@ -0,0 +1,28 @@
++-----BEGIN PRIVATE KEY-----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++-----END PRIVATE KEY-----
+--- /dev/null
++++ b/config/testdata/client.crt
+@@ -0,0 +1,96 @@
++Certificate:
++ Data:
++ Version: 3 (0x2)
++ Serial Number: 3 (0x3)
++ Signature Algorithm: sha1WithRSAEncryption
++ Issuer: C=US, O=Prometheus, OU=Prometheus Certificate Authority, CN=Prometheus TLS CA
++ Validity
++ Not Before: Apr 5 08:10:12 2019 GMT
++ Not After : Mar 26 08:10:12 2059 GMT
++ Subject: C=US, O=Prometheus, CN=Client
++ Subject Public Key Info:
++ Public Key Algorithm: rsaEncryption
++ RSA Public-Key: (2048 bit)
++ Modulus:
++ 00:b7:d3:b6:fc:22:5f:73:6a:32:b0:9a:43:a2:87:
++ cb:1f:60:8f:8e:f6:04:93:be:fc:90:37:b0:61:f8:
++ 1b:ba:94:b3:7e:5e:1b:51:c6:df:99:a8:e1:df:aa:
++ 8d:f4:12:e3:e6:75:27:0c:ae:aa:de:82:ab:a9:54:
++ f1:8a:81:f9:17:54:fd:e1:17:9a:d8:75:6a:99:c7:
++ 85:ce:29:dc:b1:6d:a6:ab:66:ea:64:02:fd:a0:b5:
++ 53:44:05:29:95:4a:3f:2e:ae:de:56:64:e2:55:9c:
++ 5e:d0:1a:68:42:00:7a:71:df:82:f9:08:23:d8:0d:
++ 72:41:77:91:31:2f:01:88:07:22:b1:40:db:a0:a2:
++ be:dd:27:1f:1e:86:65:64:18:ab:68:d3:51:96:8e:
++ 06:3e:b0:f6:29:95:5f:4a:c6:f0:f8:f7:28:17:61:
++ 0e:95:02:a8:2d:fd:5d:84:1b:f3:cc:99:3d:3f:8d:
++ 4b:66:33:6b:58:0c:5c:ed:3e:44:88:48:98:34:bc:
++ 1f:df:f7:31:e5:60:87:43:1a:39:01:8e:78:1e:90:
++ 08:a3:ef:b4:fd:df:11:2e:a2:ea:31:db:95:2d:5e:
++ 68:3a:02:9a:af:0d:51:22:07:16:66:37:90:ed:ef:
++ 41:c1:b1:0f:88:7e:d1:0d:11:4a:18:f2:38:6b:22:
++ 6c:01
++ Exponent: 65537 (0x10001)
++ X509v3 extensions:
++ X509v3 Key Usage: critical
++ Digital Signature
++ X509v3 Basic Constraints:
++ CA:FALSE
++ X509v3 Extended Key Usage:
++ TLS Web Client Authentication
++ X509v3 Subject Key Identifier:
++ 3A:46:D1:C5:8C:42:60:AC:EF:0C:DD:4B:55:1E:F0:D7:5C:76:C3:33
++ X509v3 Authority Key Identifier:
++ keyid:4D:02:BF:71:95:6A:AA:58:C5:9C:B8:83:67:5E:64:16:99:E1:2A:9E
++
++ Authority Information Access:
++ CA Issuers - URI:http://example.com/ca/tls-ca.cer
++
++ X509v3 CRL Distribution Points:
++
++ Full Name:
++ URI:http://example.com/ca/tls-ca.crl
++
++ X509v3 Subject Alternative Name:
++ email:client@prometheus.example.com
++ Signature Algorithm: sha1WithRSAEncryption
++ 73:fc:87:f2:cf:e3:b1:df:2f:f7:bf:f9:74:dc:0b:f0:7f:95:
++ ef:77:ba:6a:7d:c6:c5:f3:d9:d6:c7:eb:f8:a8:30:d3:90:d5:
++ a5:0c:32:33:95:85:a2:05:6e:78:a7:07:a5:e0:cf:f4:65:ef:
++ d2:6d:86:66:2a:7f:13:78:2f:90:dd:9d:a4:34:d4:8f:df:41:
++ 1b:0f:17:99:99:06:2d:26:86:e2:58:3e:84:ca:13:9e:00:ca:
++ 82:07:63:e7:6c:df:e9:47:d6:b3:f7:51:1a:31:f4:3d:79:95:
++ e7:ea:bf:40:84:48:09:23:ba:31:b1:67:cd:05:50:ec:e6:0a:
++ d8:2b:7d:7d:73:7a:8a:5f:f7:72:28:57:9f:15:2d:b1:4e:a1:
++ 3c:06:53:60:6e:b2:f9:04:08:81:3a:f2:ba:5d:7e:ac:93:f7:
++ 3b:1a:de:07:6e:14:a2:0b:e2:28:6a:50:2d:d8:9b:3c:25:e2:
++ 82:6b:90:7e:45:7b:dd:3a:7a:8e:71:99:a7:e8:88:5f:06:71:
++ 5b:3f:18:85:70:f9:eb:c7:26:43:2b:49:8f:17:90:aa:ba:86:
++ 8a:52:63:83:9f:9d:5d:79:53:af:6d:1a:7e:47:0d:ea:3f:33:
++ 18:c0:5f:90:d0:c5:04:8b:e3:4a:45:3d:a6:8c:c3:d1:47:1c:
++ 45:70:a4:75
++-----BEGIN CERTIFICATE-----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++-----END CERTIFICATE-----
+--- a/config/testdata/server.crt
++++ b/config/testdata/server.crt
+@@ -1,35 +1,35 @@
+ Certificate:
+ Data:
+ Version: 3 (0x2)
+- Serial Number: 4 (0x4)
+- Signature Algorithm: sha1WithRSAEncryption
+- Issuer: C=NO, O=Green AS, OU=Green Certificate Authority, CN=Green TLS CA
++ Serial Number: 1 (0x1)
++ Signature Algorithm: sha1WithRSAEncryption
++ Issuer: C=US, O=Prometheus, OU=Prometheus Certificate Authority, CN=Prometheus TLS CA
+ Validity
+- Not Before: Jul 26 12:47:08 2017 GMT
+- Not After : Jul 26 12:47:08 2019 GMT
+- Subject: C=NO, O=Green AS, OU=Green Certificate Authority, CN=Green TLS CA
++ Not Before: Apr 5 08:06:57 2019 GMT
++ Not After : Mar 26 08:06:57 2059 GMT
++ Subject: C=US, O=Prometheus, CN=prometheus.example.com
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+- Public-Key: (2048 bit)
++ RSA Public-Key: (2048 bit)
+ Modulus:
+- 00:97:43:c5:f6:24:b8:ce:30:12:70:ea:17:9c:c0:
+- ce:f2:ef:58:8b:12:7d:46:5e:01:f1:1a:93:b2:3e:
+- d8:cf:99:bc:10:32:f1:12:b0:ef:00:6c:d6:c4:45:
+- 85:a8:33:7b:cd:ec:8f:4a:92:d0:5a:4a:41:69:7f:
+- e3:dd:7e:71:d2:21:9c:df:43:b5:6c:60:bb:2a:12:
+- a8:08:cf:c5:ee:08:7d:48:ea:4b:54:e4:82:d9:88:
+- b0:b8:5e:02:12:cb:0e:09:99:b7:5f:42:b6:d7:26:
+- 34:0f:4a:e7:fc:ac:9c:59:cd:a1:50:4c:88:5f:f1:
+- d2:7e:5b:21:41:f0:37:50:80:48:71:50:26:61:26:
+- 79:64:4b:7e:91:8d:0e:f4:27:fe:19:80:bf:39:55:
+- b7:f3:d0:cd:61:6c:d8:c1:c7:d3:26:77:92:1a:14:
+- 42:56:cb:bc:fd:1a:4a:eb:17:d8:8d:af:d1:c0:46:
+- 9f:f0:40:5e:0e:34:2f:e7:db:be:66:fd:89:0b:6b:
+- 8c:71:c1:0b:0a:c5:c4:c4:eb:7f:44:c1:75:36:23:
+- fd:ed:b6:ee:87:d9:88:47:e1:4b:7c:60:53:e7:85:
+- 1c:2f:82:4b:2b:5e:63:1a:49:17:36:2c:fc:39:23:
+- 49:22:4d:43:b5:51:22:12:24:9e:31:44:d8:16:4e:
+- a8:eb
++ 00:bd:6c:b6:7f:d1:2f:be:e4:41:eb:5d:ff:50:78:
++ 03:2b:76:03:da:01:48:20:13:90:66:c9:ce:6e:06:
++ e5:fa:2d:0d:c0:b0:46:28:44:10:a0:61:79:87:a2:
++ 98:4c:29:fa:f9:bb:0f:44:c7:90:5c:5c:55:60:cd:
++ 45:da:b8:e4:dd:28:72:c8:8b:a1:3e:4b:00:09:82:
++ b0:2c:dc:d6:17:c9:02:f4:cd:26:c7:11:28:f3:77:
++ b5:97:c2:76:c2:e0:07:d7:34:5b:e0:ed:1a:59:a5:
++ b4:b7:16:09:3d:35:bd:d9:03:07:9d:7c:3b:f0:63:
++ bd:5e:02:99:cf:32:e1:ac:4c:7a:3e:4c:b2:8e:98:
++ 68:07:4f:59:dc:0d:bf:cc:83:04:5c:d8:90:f0:73:
++ da:2b:08:17:c4:36:a7:d8:94:3d:b6:c0:af:29:0a:
++ d3:19:5f:eb:7d:cc:4d:05:56:11:0a:ee:b1:f3:d7:
++ c9:5a:3c:8c:57:16:91:51:14:f8:20:4e:0f:29:9e:
++ 04:21:e6:f1:e4:e8:44:af:d7:25:92:08:64:fc:2c:
++ 1c:2e:4f:71:53:91:53:1d:e5:f9:7b:52:0f:21:da:
++ 5c:dd:19:68:96:ca:70:6a:f1:c4:0d:07:af:f8:65:
++ 13:92:e9:ef:65:b3:89:86:fd:c0:74:5c:a4:6b:49:
++ 62:c5
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Key Usage: critical
+@@ -39,58 +39,58 @@
+ X509v3 Extended Key Usage:
+ TLS Web Server Authentication, TLS Web Client Authentication
+ X509v3 Subject Key Identifier:
+- 70:A9:FB:44:66:3C:63:96:E6:05:B2:74:47:C8:18:7E:43:6D:EE:8B
++ 00:61:01:AD:25:44:8A:EF:E1:2C:EC:83:5A:3A:3B:EA:A0:BD:E1:45
+ X509v3 Authority Key Identifier:
+- keyid:AE:42:88:75:DD:05:A6:8E:48:7F:50:69:F9:B7:34:23:49:B8:B4:71
++ keyid:4D:02:BF:71:95:6A:AA:58:C5:9C:B8:83:67:5E:64:16:99:E1:2A:9E
+
+ Authority Information Access:
+- CA Issuers - URI:http://green.no/ca/tls-ca.cer
++ CA Issuers - URI:http://example.com/ca/tls-ca.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+- URI:http://green.no/ca/tls-ca.crl
++ URI:http://example.com/ca/tls-ca.crl
+
+ X509v3 Subject Alternative Name:
+ IP Address:127.0.0.1, IP Address:127.0.0.0, DNS:localhost
+ Signature Algorithm: sha1WithRSAEncryption
+- 56:1e:b8:52:ba:f5:72:42:ad:15:71:c1:5e:00:63:c9:4d:56:
+- f2:8d:a3:a9:91:db:d0:b5:1b:88:80:93:80:28:48:b2:d0:a9:
+- d0:ea:de:40:78:cc:57:8c:00:b8:65:99:68:95:98:9b:fb:a2:
+- 43:21:ea:00:37:01:77:c7:3b:1a:ec:58:2d:25:9c:ad:23:41:
+- 5e:ae:fd:ac:2f:26:81:b8:a7:49:9b:5a:10:fe:ad:c3:86:ab:
+- 59:67:b0:c7:81:72:95:60:b5:cb:fc:9f:ad:27:16:50:85:76:
+- 33:16:20:2c:1f:c6:14:09:0c:48:9f:c0:19:16:c9:fa:b0:d8:
+- bf:b7:8d:a7:aa:eb:fe:f8:6f:dd:2b:83:ee:c7:8a:df:c8:59:
+- e6:2e:13:1f:57:cc:6f:31:db:f7:b7:5c:3f:78:ad:22:2c:48:
+- bb:6d:c4:ab:dc:c1:76:34:29:d9:1e:67:e0:ac:37:2b:90:f9:
+- 71:bd:cf:a1:01:b9:eb:0b:0b:79:2e:8b:52:3d:8e:13:97:c8:
+- 05:a3:ef:68:82:49:12:2a:25:1a:48:49:b8:7c:3c:66:0d:74:
+- f9:00:8c:5b:57:d7:76:b1:26:95:86:b2:2e:a3:b2:9c:e0:eb:
+- 2d:fc:77:03:8f:cd:56:46:3a:c9:6a:fa:72:e3:19:d8:ef:de:
+- 4b:36:95:79
++ 77:97:e4:ef:db:10:8e:62:50:96:4a:6e:f5:a4:f9:1f:19:3b:
++ c8:a4:dd:b3:f6:11:41:1a:fb:e3:f8:dd:0e:64:e5:2b:00:b9:
++ e6:25:9f:2e:e1:d2:9a:cd:b6:f2:41:4d:27:dd:2c:9a:af:97:
++ 79:e8:cf:61:fb:cf:be:25:c6:e1:19:a0:c8:90:44:a0:76:8a:
++ 45:d4:37:22:e5:d4:80:b4:b3:0f:a8:33:08:24:ad:21:0b:b7:
++ 98:46:93:90:8a:ae:77:0c:cb:b8:59:d3:3b:9b:fb:16:5a:22:
++ ca:c2:97:9d:78:1b:fc:23:fc:a0:42:54:40:de:88:4b:07:2b:
++ 19:4e:0e:79:bf:c9:9f:01:a6:46:c5:55:fa:9f:c0:0d:8a:a6:
++ e1:47:16:a6:0e:be:23:c9:e9:58:d6:31:71:8c:80:9c:16:64:
++ f0:14:08:22:a1:23:7c:98:b9:62:d1:4a:ce:e3:5c:59:fb:41:
++ 87:a5:3b:36:dd:3d:45:48:b0:b0:77:6f:de:58:2a:27:4d:56:
++ 20:54:08:20:c8:6d:79:b5:b9:e6:3a:03:24:0f:6d:67:39:20:
++ 78:10:2f:47:85:83:c1:4d:17:33:79:84:75:27:fa:47:67:59:
++ 56:cc:33:7b:a5:77:aa:59:9a:98:30:10:1a:78:43:34:8f:ed:
++ c2:a1:a3:ea
+ -----BEGIN CERTIFICATE-----
+-MIIEQjCCAyqgAwIBAgIBBDANBgkqhkiG9w0BAQUFADBdMQswCQYDVQQGEwJOTzER
+-MA8GA1UECgwIR3JlZW4gQVMxJDAiBgNVBAsMG0dyZWVuIENlcnRpZmljYXRlIEF1
+-dGhvcml0eTEVMBMGA1UEAwwMR3JlZW4gVExTIENBMB4XDTE3MDcyNjEyNDcwOFoX
+-DTE5MDcyNjEyNDcwOFowXTELMAkGA1UEBhMCTk8xETAPBgNVBAoMCEdyZWVuIEFT
+-MSQwIgYDVQQLDBtHcmVlbiBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkxFTATBgNVBAMM
+-DEdyZWVuIFRMUyBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJdD
+-xfYkuM4wEnDqF5zAzvLvWIsSfUZeAfEak7I+2M+ZvBAy8RKw7wBs1sRFhagze83s
+-j0qS0FpKQWl/491+cdIhnN9DtWxguyoSqAjPxe4IfUjqS1TkgtmIsLheAhLLDgmZ
+-t19CttcmNA9K5/ysnFnNoVBMiF/x0n5bIUHwN1CASHFQJmEmeWRLfpGNDvQn/hmA
+-vzlVt/PQzWFs2MHH0yZ3khoUQlbLvP0aSusX2I2v0cBGn/BAXg40L+fbvmb9iQtr
+-jHHBCwrFxMTrf0TBdTYj/e227ofZiEfhS3xgU+eFHC+CSyteYxpJFzYs/DkjSSJN
+-Q7VRIhIknjFE2BZOqOsCAwEAAaOCAQswggEHMA4GA1UdDwEB/wQEAwIFoDAJBgNV
+-HRMEAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQU
+-cKn7RGY8Y5bmBbJ0R8gYfkNt7oswHwYDVR0jBBgwFoAUrkKIdd0Fpo5If1Bp+bc0
+-I0m4tHEwOQYIKwYBBQUHAQEELTArMCkGCCsGAQUFBzAChh1odHRwOi8vZ3JlZW4u
+-bm8vY2EvdGxzLWNhLmNlcjAuBgNVHR8EJzAlMCOgIaAfhh1odHRwOi8vZ3JlZW4u
+-bm8vY2EvdGxzLWNhLmNybDAgBgNVHREEGTAXhwR/AAABhwR/AAAAgglsb2NhbGhv
+-c3QwDQYJKoZIhvcNAQEFBQADggEBAFYeuFK69XJCrRVxwV4AY8lNVvKNo6mR29C1
+-G4iAk4AoSLLQqdDq3kB4zFeMALhlmWiVmJv7okMh6gA3AXfHOxrsWC0lnK0jQV6u
+-/awvJoG4p0mbWhD+rcOGq1lnsMeBcpVgtcv8n60nFlCFdjMWICwfxhQJDEifwBkW
+-yfqw2L+3jaeq6/74b90rg+7Hit/IWeYuEx9XzG8x2/e3XD94rSIsSLttxKvcwXY0
+-KdkeZ+CsNyuQ+XG9z6EBuesLC3kui1I9jhOXyAWj72iCSRIqJRpISbh8PGYNdPkA
+-jFtX13axJpWGsi6jspzg6y38dwOPzVZGOslq+nLjGdjv3ks2lXk=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+ -----END CERTIFICATE-----
+--- a/config/testdata/server.key
++++ b/config/testdata/server.key
+@@ -1,28 +1,28 @@
+ -----BEGIN PRIVATE KEY-----
+-MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQCXQ8X2JLjOMBJw
+-6hecwM7y71iLEn1GXgHxGpOyPtjPmbwQMvESsO8AbNbERYWoM3vN7I9KktBaSkFp
+-f+PdfnHSIZzfQ7VsYLsqEqgIz8XuCH1I6ktU5ILZiLC4XgISyw4JmbdfQrbXJjQP
+-Suf8rJxZzaFQTIhf8dJ+WyFB8DdQgEhxUCZhJnlkS36RjQ70J/4ZgL85Vbfz0M1h
+-bNjBx9Mmd5IaFEJWy7z9GkrrF9iNr9HARp/wQF4ONC/n275m/YkLa4xxwQsKxcTE
+-639EwXU2I/3ttu6H2YhH4Ut8YFPnhRwvgksrXmMaSRc2LPw5I0kiTUO1USISJJ4x
+-RNgWTqjrAgMBAAECggEAVurwo4FyV7gzwIIi00XPJLT3ceJL7dUy1HHrEG8gchnq
+-gHxlHdJhYyMnPVydcosyxp75r2YxJtCoSZDdRHbVvGLoGzpy0zW6FnDl8TpCh4aF
+-RxKp+rvbnFf5A9ew5U+cX1PelHRnT7V6EJeAOiaNKOUJnnR7oHX59/UxZQw9HJnX
+-3H4xUdRDmSS3BGKXEswbd7beQjqJtEIkbConfaw32yEod0w2MC0LI4miZ87/6Hsk
+-pyvfpeYxXp4z3BTvFBbf/GEBFuozu63VWHayB9PDmEN/TlphoQpJQihdR2r1lz/H
+-I5QwVlFTDvUSFitNLu+FoaHOfgLprQndbojBXb+tcQKBgQDHCPyM4V7k97RvJgmB
+-ELgZiDYufDrjRLXvFzrrZ7ySU3N+nx3Gz/EhtgbHicDjnRVagHBIwi/QAfBJksCd
+-xcioY5k2OW+8PSTsfFZTAA6XwJp/LGfJik/JjvAVv5CnxBu9lYG4WiSBJFp59ojC
+-zTmfEuB4GPwrjQvzjlqaSpij9QKBgQDCjriwAB2UJIdlgK+DkryLqgim5I4cteB3
+-+juVKz+S8ufFmVvmIXkyDcpyy/26VLC6esy8dV0JoWc4EeitoJvQD1JVZ5+CBTY+
+-r9umx18oe2A/ZgcEf/A3Zd94jM1MwriF6YC+eIOhwhpi7T1xTLf3hc9B0OJ5B1mA
+-vob9rGDtXwKBgD4rkW+UCictNIAvenKFPWxEPuBgT6ij0sx/DhlwCtgOFxprK0rp
+-syFbkVyMq+KtM3lUez5O4c5wfJUOsPnXSOlISxhD8qHy23C/GdvNPcGrGNc2kKjE
+-ek20R0wTzWSJ/jxG0gE6rwJjz5sfJfLrVd9ZbyI0c7hK03vdcHGXcXxtAoGAeGHl
+-BwnbQ3niyTx53VijD2wTVGjhQgSLstEDowYSnTNtk8eTpG6b1gvQc32jLnMOsyQe
+-oJGiEr5q5re2GBDjuDZyxGOMv9/Hs7wOlkCQsbS9Vh0kRHWBRlXjk2zT7yYhFMLp
+-pXFeSW2X9BRFS2CkCCUkm93K9AZHLDE3x6ishNMCgYEAsDsUCzGhI49Aqe+CMP2l
+-WPZl7SEMYS5AtdC5sLtbLYBl8+rMXVGL2opKXqVFYBYkqMJiHGdX3Ub6XSVKLYkN
+-vm4PWmlQS24ZT+jlUl4jk6JU6SAlM/o6ixZl5KNR7yQm6zN2O/RHDeYm0urUQ9tF
+-9dux7LbIFeOoJmoDTWG2+fI=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+ -----END PRIVATE KEY-----
+--- a/config/testdata/tls-ca-chain.pem
++++ b/config/testdata/tls-ca-chain.pem
+@@ -2,34 +2,34 @@
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 2 (0x2)
+- Signature Algorithm: sha1WithRSAEncryption
+- Issuer: C=NO, O=Green AS, OU=Green Certificate Authority, CN=Green Root CA
++ Signature Algorithm: sha1WithRSAEncryption
++ Issuer: C=US, O=Prometheus, OU=Prometheus Certificate Authority, CN=Prometheus Root CA
+ Validity
+- Not Before: Jul 13 03:47:20 2017 GMT
+- Not After : Jul 13 03:47:20 2027 GMT
+- Subject: C=NO, O=Green AS, OU=Green Certificate Authority, CN=Green TLS CA
++ Not Before: Apr 5 08:00:37 2019 GMT
++ Not After : Mar 26 08:00:37 2059 GMT
++ Subject: C=US, O=Prometheus, OU=Prometheus Certificate Authority, CN=Prometheus TLS CA
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+- Public-Key: (2048 bit)
++ RSA Public-Key: (2048 bit)
+ Modulus:
+- 00:b5:5a:b3:7a:7f:6a:5b:e9:ee:62:ee:4f:61:42:
+- 79:93:06:bf:81:fc:9a:1f:b5:80:83:7c:b3:a6:94:
+- 54:58:8a:b1:74:cb:c3:b8:3c:23:a8:69:1f:ca:2b:
+- af:be:97:ba:31:73:b5:b8:ce:d9:bf:bf:9a:7a:cf:
+- 3a:64:51:83:c9:36:d2:f7:3b:3a:0e:4c:c7:66:2e:
+- bf:1a:df:ce:10:aa:3d:0f:19:74:03:7e:b5:10:bb:
+- e8:37:bd:62:f0:42:2d:df:3d:ca:70:50:10:17:ce:
+- a9:ec:55:8e:87:6f:ce:9a:04:36:14:96:cb:d1:a5:
+- 48:d5:d2:87:02:62:93:4e:21:4a:ff:be:44:f1:d2:
+- 7e:ed:74:da:c2:51:26:8e:03:a0:c2:bd:bd:5f:b0:
+- 50:11:78:fd:ab:1d:04:86:6c:c1:8d:20:bd:05:5f:
+- 51:67:c6:d3:07:95:92:2d:92:90:00:c6:9f:2d:dd:
+- 36:5c:dc:78:10:7c:f6:68:39:1d:2c:e0:e1:26:64:
+- 4f:36:34:66:a7:84:6a:90:15:3a:94:b7:79:b1:47:
+- f5:d2:51:95:54:bf:92:76:9a:b9:88:ee:63:f9:6c:
+- 0d:38:c6:b6:1c:06:43:ed:24:1d:bb:6c:72:48:cc:
+- 8c:f4:35:bc:43:fe:a6:96:4c:31:5f:82:0d:0d:20:
+- 2a:3d
++ 00:aa:d2:34:6b:ed:f1:f4:01:08:e5:00:9f:75:c8:
++ ba:fc:4b:72:c6:04:93:af:f1:f6:b5:ce:01:0d:c6:
++ bd:d3:16:98:9d:e5:51:56:12:58:16:ee:18:6e:f0:
++ 68:a9:42:16:65:cf:e3:31:f5:90:79:9d:13:32:87:
++ 3b:1f:65:fd:84:88:a4:56:3d:26:54:69:05:27:5a:
++ ea:89:02:e7:31:9b:7d:7f:76:93:54:70:bc:17:92:
++ 06:9f:9f:90:4a:8a:cf:82:a7:7b:7c:71:c4:fa:34:
++ 56:00:32:1a:85:c5:f8:e4:4a:63:43:37:9d:60:84:
++ 4d:78:6e:87:12:c4:2b:1f:93:a5:fe:cc:5e:f1:df:
++ c1:97:ff:b7:3e:20:38:1d:71:15:11:ec:6c:7a:cc:
++ 0e:87:52:31:b1:b9:74:c3:07:1c:42:4b:1e:c1:17:
++ bc:e4:13:b7:b0:20:2e:c4:07:93:bd:a8:11:f9:da:
++ a7:d0:df:4a:48:be:9b:6d:65:c3:ae:58:56:c0:9f:
++ 17:c5:d8:32:b1:04:22:fb:5b:18:f6:20:10:50:ec:
++ 2d:10:4f:cc:48:8f:f2:75:dd:33:a4:0e:f5:55:da:
++ 2c:89:a1:3a:52:bb:11:11:0b:97:27:17:73:35:da:
++ 10:71:b3:9f:a8:42:91:e6:3a:66:00:f9:e5:11:8f:
++ 5b:57
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Key Usage: critical
+@@ -37,90 +37,91 @@
+ X509v3 Basic Constraints: critical
+ CA:TRUE, pathlen:0
+ X509v3 Subject Key Identifier:
+- AE:42:88:75:DD:05:A6:8E:48:7F:50:69:F9:B7:34:23:49:B8:B4:71
++ 4D:02:BF:71:95:6A:AA:58:C5:9C:B8:83:67:5E:64:16:99:E1:2A:9E
+ X509v3 Authority Key Identifier:
+- keyid:60:93:53:2F:C7:CF:2A:D7:F3:09:28:F6:3C:AE:9C:50:EC:93:63:E5
++ keyid:3C:1E:A8:C6:4C:05:4D:20:EC:88:DB:29:D4:7B:F9:12:5D:CE:EA:1A
+
+ Authority Information Access:
+- CA Issuers - URI:http://green.no/ca/root-ca.cer
++ CA Issuers - URI:https://example.com/ca/root-ca.cer
+
+ X509v3 CRL Distribution Points:
+
+ Full Name:
+- URI:http://green.no/ca/root-ca.crl
++ URI:https://example.com/ca/root-ca.crl
+
+ Signature Algorithm: sha1WithRSAEncryption
+- 15:a7:ac:d7:25:9e:2a:d4:d1:14:b4:99:38:3d:2f:73:61:2a:
+- d9:b6:8b:13:ea:fe:db:78:d9:0a:6c:df:26:6e:c1:d5:4a:97:
+- 42:19:dd:97:05:03:e4:2b:fc:1e:1f:38:3c:4e:b0:3b:8c:38:
+- ad:2b:65:fa:35:2d:81:8e:e0:f6:0a:89:4c:38:97:01:4b:9c:
+- ac:4e:e1:55:17:ef:0a:ad:a7:eb:1e:4b:86:23:12:f1:52:69:
+- cb:a3:8a:ce:fb:14:8b:86:d7:bb:81:5e:bd:2a:c7:a7:79:58:
+- 00:10:c0:db:ff:d4:a5:b9:19:74:b3:23:19:4a:1f:78:4b:a8:
+- b6:f6:20:26:c1:69:f9:89:7f:b8:1c:3b:a2:f9:37:31:80:2c:
+- b0:b6:2b:d2:84:44:d7:42:e4:e6:44:51:04:35:d9:1c:a4:48:
+- c6:b7:35:de:f2:ae:da:4b:ba:c8:09:42:8d:ed:7a:81:dc:ed:
+- 9d:f0:de:6e:21:b9:01:1c:ad:64:3d:25:4c:91:94:f1:13:18:
+- bb:89:e9:48:ac:05:73:07:c8:db:bd:69:8e:6f:02:9d:b0:18:
+- c0:b9:e1:a8:b1:17:50:3d:ac:05:6e:6f:63:4f:b1:73:33:60:
+- 9a:77:d2:81:8a:01:38:43:e9:4c:3c:90:63:a4:99:4b:d2:1b:
+- f9:1b:ec:ee
++ 63:fc:ba:30:a5:05:d6:76:14:f1:77:38:b1:41:6f:81:d9:b4:
++ 02:fd:bc:e5:f6:d9:e6:73:e0:71:cf:4c:fb:13:b5:6b:bd:b9:
++ c6:f6:28:18:36:e1:8c:d9:93:b3:78:4a:3d:39:1b:f4:fb:69:
++ 75:24:ae:e1:a0:2f:94:05:bf:10:3c:3e:d2:2b:a8:f3:31:25:
++ 2e:ed:13:ad:60:5d:22:9a:26:15:20:86:98:73:4c:f6:4b:48:
++ b8:1f:67:ba:4e:c9:47:ed:85:dc:38:dc:02:0c:fb:54:d5:2e:
++ 6c:b4:95:18:51:d1:ae:ea:e8:fb:b4:19:50:04:bc:31:7e:51:
++ 9e:85:29:4d:c8:f7:26:d6:d6:8d:35:2d:9e:e2:06:16:38:e2:
++ 56:80:ec:f3:a3:34:e3:28:c4:e8:10:d0:8a:a6:6f:20:9a:b9:
++ dc:b9:90:6b:ba:8a:27:2c:29:72:28:55:e7:59:a6:a7:90:ec:
++ 32:e8:d0:26:4a:c1:44:dd:20:bf:dc:4d:1e:7e:cc:e5:a2:5b:
++ e8:df:3d:4b:01:aa:48:56:17:e9:29:d8:71:83:05:36:8c:11:
++ 4f:77:b8:95:20:b7:c7:21:06:c2:87:97:b4:6b:d3:f7:23:ba:
++ 4d:5f:15:d1:0c:4d:6e:f1:6a:9d:57:5c:02:6a:d7:31:18:ef:
++ 5c:fc:f8:04
+ -----BEGIN CERTIFICATE-----
+-MIIECzCCAvOgAwIBAgIBAjANBgkqhkiG9w0BAQUFADBeMQswCQYDVQQGEwJOTzER
+-MA8GA1UECgwIR3JlZW4gQVMxJDAiBgNVBAsMG0dyZWVuIENlcnRpZmljYXRlIEF1
+-dGhvcml0eTEWMBQGA1UEAwwNR3JlZW4gUm9vdCBDQTAeFw0xNzA3MTMwMzQ3MjBa
+-Fw0yNzA3MTMwMzQ3MjBaMF0xCzAJBgNVBAYTAk5PMREwDwYDVQQKDAhHcmVlbiBB
+-UzEkMCIGA1UECwwbR3JlZW4gQ2VydGlmaWNhdGUgQXV0aG9yaXR5MRUwEwYDVQQD
+-DAxHcmVlbiBUTFMgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1
+-WrN6f2pb6e5i7k9hQnmTBr+B/JoftYCDfLOmlFRYirF0y8O4PCOoaR/KK6++l7ox
+-c7W4ztm/v5p6zzpkUYPJNtL3OzoOTMdmLr8a384Qqj0PGXQDfrUQu+g3vWLwQi3f
+-PcpwUBAXzqnsVY6Hb86aBDYUlsvRpUjV0ocCYpNOIUr/vkTx0n7tdNrCUSaOA6DC
+-vb1fsFAReP2rHQSGbMGNIL0FX1FnxtMHlZItkpAAxp8t3TZc3HgQfPZoOR0s4OEm
+-ZE82NGanhGqQFTqUt3mxR/XSUZVUv5J2mrmI7mP5bA04xrYcBkPtJB27bHJIzIz0
+-NbxD/qaWTDFfgg0NICo9AgMBAAGjgdQwgdEwDgYDVR0PAQH/BAQDAgEGMBIGA1Ud
+-EwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFK5CiHXdBaaOSH9Qafm3NCNJuLRxMB8G
+-A1UdIwQYMBaAFGCTUy/HzyrX8wko9jyunFDsk2PlMDoGCCsGAQUFBwEBBC4wLDAq
+-BggrBgEFBQcwAoYeaHR0cDovL2dyZWVuLm5vL2NhL3Jvb3QtY2EuY2VyMC8GA1Ud
+-HwQoMCYwJKAioCCGHmh0dHA6Ly9ncmVlbi5uby9jYS9yb290LWNhLmNybDANBgkq
+-hkiG9w0BAQUFAAOCAQEAFaes1yWeKtTRFLSZOD0vc2Eq2baLE+r+23jZCmzfJm7B
+-1UqXQhndlwUD5Cv8Hh84PE6wO4w4rStl+jUtgY7g9gqJTDiXAUucrE7hVRfvCq2n
+-6x5LhiMS8VJpy6OKzvsUi4bXu4FevSrHp3lYABDA2//UpbkZdLMjGUofeEuotvYg
+-JsFp+Yl/uBw7ovk3MYAssLYr0oRE10Lk5kRRBDXZHKRIxrc13vKu2ku6yAlCje16
+-gdztnfDebiG5ARytZD0lTJGU8RMYu4npSKwFcwfI271pjm8CnbAYwLnhqLEXUD2s
+-BW5vY0+xczNgmnfSgYoBOEPpTDyQY6SZS9Ib+Rvs7g==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+ -----END CERTIFICATE-----
+ Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 1 (0x1)
+- Signature Algorithm: sha1WithRSAEncryption
+- Issuer: C=NO, O=Green AS, OU=Green Certificate Authority, CN=Green Root CA
++ Signature Algorithm: sha1WithRSAEncryption
++ Issuer: C=US, O=Prometheus, OU=Prometheus Certificate Authority, CN=Prometheus Root CA
+ Validity
+- Not Before: Jul 13 03:44:39 2017 GMT
+- Not After : Dec 31 23:59:59 2030 GMT
+- Subject: C=NO, O=Green AS, OU=Green Certificate Authority, CN=Green Root CA
++ Not Before: Apr 5 07:55:00 2019 GMT
++ Not After : Mar 26 07:55:00 2059 GMT
++ Subject: C=US, O=Prometheus, OU=Prometheus Certificate Authority, CN=Prometheus Root CA
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+- Public-Key: (2048 bit)
++ RSA Public-Key: (2048 bit)
+ Modulus:
+- 00:a7:e8:ed:de:d4:54:08:41:07:40:d5:c0:43:d6:
+- ab:d3:9e:21:87:c6:13:bf:a7:cf:3d:08:4f:c1:fe:
+- 8f:e5:6c:c5:89:97:e5:27:75:26:c3:2a:73:2d:34:
+- 7c:6f:35:8d:40:66:61:05:c0:eb:e9:b3:38:47:f8:
+- 8b:26:35:2c:df:dc:24:31:fe:72:e3:87:10:d1:f7:
+- a0:57:b7:f3:b1:1a:fe:c7:4b:f8:7b:14:6d:73:08:
+- 54:eb:63:3c:0c:ce:22:95:5f:3f:f2:6f:89:ae:63:
+- da:80:74:36:21:13:e8:91:01:58:77:cc:c2:f2:42:
+- bf:eb:b3:60:a7:21:ed:88:24:7f:eb:ff:07:41:9b:
+- 93:c8:5f:6a:8e:a6:1a:15:3c:bc:e7:0d:fd:05:fd:
+- 3c:c1:1c:1d:1f:57:2b:40:27:62:a1:7c:48:63:c1:
+- 45:e7:2f:20:ed:92:1c:42:94:e4:58:70:7a:b6:d2:
+- 85:c5:61:d8:cd:c6:37:6b:72:3b:7f:af:55:81:d6:
+- 9d:dc:10:c9:d8:0e:81:e4:5e:40:13:2f:20:e8:6b:
+- 46:81:ce:88:47:dd:38:71:3d:ef:21:cc:c0:67:cf:
+- 0a:f4:e9:3f:a8:9d:26:25:2e:23:1e:a3:11:18:cb:
+- d1:70:1c:9e:7d:09:b1:a4:20:dc:95:15:1d:49:cf:
+- 1b:ad
++ 00:bf:b9:e2:ab:5f:61:22:e1:4e:cd:ee:da:b0:26:
++ 2e:bb:b0:7e:1c:ce:10:be:16:29:35:0c:0c:1d:93:
++ 01:29:2a:f6:f9:c2:6e:5c:10:44:ca:f8:dc:ad:7a:
++ 06:64:0f:8a:18:ad:b2:a2:94:49:c9:ba:8c:45:94:
++ 7c:d9:e0:11:45:d8:16:79:a2:20:9f:8c:63:60:72:
++ 2a:5b:f9:66:80:ac:85:67:01:5a:eb:91:c1:d2:88:
++ 87:9e:4c:18:c9:f2:f0:7a:18:c0:e6:ab:2c:78:de:
++ 5f:b2:22:4e:94:9c:f5:cd:e6:e2:33:30:e9:20:10:
++ a6:a1:75:eb:59:ab:45:a9:f7:3e:54:40:ae:05:25:
++ be:74:c5:3a:fd:af:73:16:60:45:7c:4a:e0:0e:0d:
++ a1:15:7f:9a:1f:c2:a7:04:ad:ef:b3:e4:f6:00:2c:
++ 4e:0b:04:90:49:ee:d3:db:a6:12:c4:91:0b:32:4f:
++ 11:84:c7:c4:8a:ef:51:66:7a:b0:20:2f:cb:95:8d:
++ 96:57:60:66:5e:f9:4f:5a:94:9c:71:ad:eb:ca:70:
++ 3e:62:06:c2:3a:29:f8:9e:86:af:da:07:78:f8:31:
++ af:42:48:49:9e:4a:df:1b:27:1f:44:35:81:6d:fa:
++ 7a:c5:6a:0a:35:23:c7:c4:d5:fe:c9:9e:61:c9:30:
++ cd:1f
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Key Usage: critical
+@@ -128,45 +129,45 @@
+ X509v3 Basic Constraints: critical
+ CA:TRUE
+ X509v3 Subject Key Identifier:
+- 60:93:53:2F:C7:CF:2A:D7:F3:09:28:F6:3C:AE:9C:50:EC:93:63:E5
++ 3C:1E:A8:C6:4C:05:4D:20:EC:88:DB:29:D4:7B:F9:12:5D:CE:EA:1A
+ X509v3 Authority Key Identifier:
+- keyid:60:93:53:2F:C7:CF:2A:D7:F3:09:28:F6:3C:AE:9C:50:EC:93:63:E5
++ keyid:3C:1E:A8:C6:4C:05:4D:20:EC:88:DB:29:D4:7B:F9:12:5D:CE:EA:1A
+
+ Signature Algorithm: sha1WithRSAEncryption
+- a7:77:71:8b:1a:e5:5a:5b:87:54:08:bf:07:3e:cb:99:2f:dc:
+- 0e:8d:63:94:95:83:19:c9:92:82:d5:cb:5b:8f:1f:86:55:bc:
+- 70:01:1d:33:46:ec:99:de:6b:1f:c3:c2:7a:dd:ef:69:ab:96:
+- 58:ec:6c:6f:6c:70:82:71:8a:7f:f0:3b:80:90:d5:64:fa:80:
+- 27:b8:7b:50:69:98:4b:37:99:ad:bf:a2:5b:93:22:5e:96:44:
+- 3c:5a:cf:0c:f4:62:63:4a:6f:72:a7:f6:89:1d:09:26:3d:8f:
+- a8:86:d4:b4:bc:dd:b3:38:ca:c0:59:16:8c:20:1f:89:35:12:
+- b4:2d:c0:e9:de:93:e0:39:76:32:fc:80:db:da:44:26:fd:01:
+- 32:74:97:f8:44:ae:fe:05:b1:34:96:13:34:56:73:b4:93:a5:
+- 55:56:d1:01:51:9d:9c:55:e7:38:53:28:12:4e:38:72:0c:8f:
+- bd:91:4c:45:48:3b:e1:0d:03:5f:58:40:c9:d3:a0:ac:b3:89:
+- ce:af:27:8a:0f:ab:ec:72:4d:40:77:30:6b:36:fd:32:46:9f:
+- ee:f9:c4:f5:17:06:0f:4b:d3:88:f5:a4:2f:3d:87:9e:f5:26:
+- 74:f0:c9:dc:cb:ad:d9:a7:8a:d3:71:15:00:d3:5d:9f:4c:59:
+- 3e:24:63:f5
++ 56:2f:79:e5:12:91:f5:19:a7:d1:32:28:fd:e3:9d:8f:e1:3c:
++ bb:a3:a5:f2:55:8a:03:ad:2c:1d:18:82:e1:7f:19:75:d9:47:
++ 5b:e7:7c:e4:a5:e0:eb:dc:7e:24:a3:7d:99:1a:cf:39:ba:a5:
++ b4:b8:45:68:83:cf:70:ad:56:f2:34:73:65:fc:6c:b0:53:9a:
++ 79:04:f7:3e:7e:4b:22:1b:e7:76:23:20:bc:9c:05:a2:5d:01:
++ d2:f0:09:49:17:b2:61:74:1a:5b:f4:e0:fd:ce:11:ba:13:4a:
++ e6:07:11:7d:30:e2:11:87:ee:33:1a:68:de:67:f4:ac:b5:58:
++ 1a:ac:cf:7a:2d:fd:c3:44:5b:4b:cd:6c:ff:f6:49:b4:55:4a:
++ 09:a0:92:2d:57:3b:69:85:54:3e:e9:ec:ef:b2:a5:7a:29:75:
++ 2b:f8:eb:4b:d4:cf:68:ee:3e:c8:63:7e:12:eb:e4:2f:63:a3:
++ a7:c8:0f:e9:39:ff:5c:29:65:7f:25:f0:42:bf:07:ba:06:b8:
++ 5e:d6:56:ba:f8:67:56:1b:42:aa:b3:04:d8:6e:88:10:a5:70:
++ b5:81:04:a4:90:a3:f0:83:4d:0c:6b:12:5d:a4:4c:83:5a:ff:
++ a8:7a:86:61:ff:0f:4c:e5:0f:17:d1:64:3c:bd:d9:22:7e:b7:
++ fa:9b:83:ba
+ -----BEGIN CERTIFICATE-----
+-MIIDnDCCAoSgAwIBAgIBATANBgkqhkiG9w0BAQUFADBeMQswCQYDVQQGEwJOTzER
+-MA8GA1UECgwIR3JlZW4gQVMxJDAiBgNVBAsMG0dyZWVuIENlcnRpZmljYXRlIEF1
+-dGhvcml0eTEWMBQGA1UEAwwNR3JlZW4gUm9vdCBDQTAgFw0xNzA3MTMwMzQ0Mzla
+-GA8yMDMwMTIzMTIzNTk1OVowXjELMAkGA1UEBhMCTk8xETAPBgNVBAoMCEdyZWVu
+-IEFTMSQwIgYDVQQLDBtHcmVlbiBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkxFjAUBgNV
+-BAMMDUdyZWVuIFJvb3QgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
+-AQCn6O3e1FQIQQdA1cBD1qvTniGHxhO/p889CE/B/o/lbMWJl+UndSbDKnMtNHxv
+-NY1AZmEFwOvpszhH+IsmNSzf3CQx/nLjhxDR96BXt/OxGv7HS/h7FG1zCFTrYzwM
+-ziKVXz/yb4muY9qAdDYhE+iRAVh3zMLyQr/rs2CnIe2IJH/r/wdBm5PIX2qOphoV
+-PLznDf0F/TzBHB0fVytAJ2KhfEhjwUXnLyDtkhxClORYcHq20oXFYdjNxjdrcjt/
+-r1WB1p3cEMnYDoHkXkATLyDoa0aBzohH3ThxPe8hzMBnzwr06T+onSYlLiMeoxEY
+-y9FwHJ59CbGkINyVFR1JzxutAgMBAAGjYzBhMA4GA1UdDwEB/wQEAwIBBjAPBgNV
+-HRMBAf8EBTADAQH/MB0GA1UdDgQWBBRgk1Mvx88q1/MJKPY8rpxQ7JNj5TAfBgNV
+-HSMEGDAWgBRgk1Mvx88q1/MJKPY8rpxQ7JNj5TANBgkqhkiG9w0BAQUFAAOCAQEA
+-p3dxixrlWluHVAi/Bz7LmS/cDo1jlJWDGcmSgtXLW48fhlW8cAEdM0bsmd5rH8PC
+-et3vaauWWOxsb2xwgnGKf/A7gJDVZPqAJ7h7UGmYSzeZrb+iW5MiXpZEPFrPDPRi
+-Y0pvcqf2iR0JJj2PqIbUtLzdszjKwFkWjCAfiTUStC3A6d6T4Dl2MvyA29pEJv0B
+-MnSX+ESu/gWxNJYTNFZztJOlVVbRAVGdnFXnOFMoEk44cgyPvZFMRUg74Q0DX1hA
+-ydOgrLOJzq8nig+r7HJNQHcwazb9Mkaf7vnE9RcGD0vTiPWkLz2HnvUmdPDJ3Mut
+-2aeK03EVANNdn0xZPiRj9Q==
++MIIDtDCCApygAwIBAgIBATANBgkqhkiG9w0BAQUFADBqMQswCQYDVQQGEwJVUzET
++MBEGA1UECgwKUHJvbWV0aGV1czEpMCcGA1UECwwgUHJvbWV0aGV1cyBDZXJ0aWZp
++Y2F0ZSBBdXRob3JpdHkxGzAZBgNVBAMMElByb21ldGhldXMgUm9vdCBDQTAgFw0x
++OTA0MDUwNzU1MDBaGA8yMDU5MDMyNjA3NTUwMFowajELMAkGA1UEBhMCVVMxEzAR
++BgNVBAoMClByb21ldGhldXMxKTAnBgNVBAsMIFByb21ldGhldXMgQ2VydGlmaWNh
++dGUgQXV0aG9yaXR5MRswGQYDVQQDDBJQcm9tZXRoZXVzIFJvb3QgQ0EwggEiMA0G
++CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ueKrX2Ei4U7N7tqwJi67sH4czhC+
++Fik1DAwdkwEpKvb5wm5cEETK+NytegZkD4oYrbKilEnJuoxFlHzZ4BFF2BZ5oiCf
++jGNgcipb+WaArIVnAVrrkcHSiIeeTBjJ8vB6GMDmqyx43l+yIk6UnPXN5uIzMOkg
++EKahdetZq0Wp9z5UQK4FJb50xTr9r3MWYEV8SuAODaEVf5ofwqcEre+z5PYALE4L
++BJBJ7tPbphLEkQsyTxGEx8SK71FmerAgL8uVjZZXYGZe+U9alJxxrevKcD5iBsI6
++Kfiehq/aB3j4Ma9CSEmeSt8bJx9ENYFt+nrFago1I8fE1f7JnmHJMM0fAgMBAAGj
++YzBhMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ8
++HqjGTAVNIOyI2ynUe/kSXc7qGjAfBgNVHSMEGDAWgBQ8HqjGTAVNIOyI2ynUe/kS
++Xc7qGjANBgkqhkiG9w0BAQUFAAOCAQEAVi955RKR9Rmn0TIo/eOdj+E8u6Ol8lWK
++A60sHRiC4X8ZddlHW+d85KXg69x+JKN9mRrPObqltLhFaIPPcK1W8jRzZfxssFOa
++eQT3Pn5LIhvndiMgvJwFol0B0vAJSReyYXQaW/Tg/c4RuhNK5gcRfTDiEYfuMxpo
++3mf0rLVYGqzPei39w0RbS81s//ZJtFVKCaCSLVc7aYVUPuns77Kleil1K/jrS9TP
++aO4+yGN+EuvkL2Ojp8gP6Tn/XCllfyXwQr8Huga4XtZWuvhnVhtCqrME2G6IEKVw
++tYEEpJCj8INNDGsSXaRMg1r/qHqGYf8PTOUPF9FkPL3ZIn63+puDug==
+ -----END CERTIFICATE-----
diff -Nru golang-github-prometheus-common-0+git20181119.b36ad28/debian/patches/series golang-github-prometheus-common-0+git20181119.b36ad28/debian/patches/series
--- golang-github-prometheus-common-0+git20181119.b36ad28/debian/patches/series 2018-12-19 17:40:03.000000000 +0200
+++ golang-github-prometheus-common-0+git20181119.b36ad28/debian/patches/series 2020-01-26 21:48:32.000000000 +0200
@@ -1 +1,2 @@
01-Fix_log_test.patch
+02-config--extend-validity-of-testdata-certs.patch
Reply to: