Insecure verify (#93)

* add option for InsecureSkipVerify at initiator CA cert

* fix order of flag checks

* add https check at operators load to initiator

* fix the tests

---------

Co-authored-by: Matus Kysel <[email protected]>

cli/utils/utils.go

@@ -7,6 +7,7 @@ import (
 	"encoding/json"
 	"errors"
 	"fmt"
+	"net/url"
 	"os"
 	"path/filepath"
 	"sort"
@@ -362,19 +363,19 @@ func BindOperatorFlags(cmd *cobra.Command) error {
 		return fmt.Errorf("😥 Wrong operator ID provided")
 	}
 	ServerTLSCertPath = viper.GetString("serverTLSCertPath")
-	if strings.Contains(ServerTLSCertPath, "../") {
-		return fmt.Errorf("😥 serverTLSCertPath flag should not contain traversal")
-	}
 	if ServerTLSCertPath == "" {
 		return fmt.Errorf("😥 Failed to get serverTLSCertPath flag value")
 	}
-	ServerTLSKeyPath = viper.GetString("serverTLSKeyPath")
-	if strings.Contains(ServerTLSKeyPath, "../") {
-		return fmt.Errorf("😥 serverTLSKeyPath flag should not contain traversal")
+	if strings.Contains(ServerTLSCertPath, "../") {
+		return fmt.Errorf("😥 serverTLSCertPath flag should not contain traversal")
 	}
+	ServerTLSKeyPath = viper.GetString("serverTLSKeyPath")
 	if ServerTLSKeyPath == "" {
 		return fmt.Errorf("😥 Failed to get serverTLSKeyPath flag value")
 	}
+	if strings.Contains(ServerTLSKeyPath, "../") {
+		return fmt.Errorf("😥 serverTLSKeyPath flag should not contain traversal")
+	}
 	return nil
 }
 
@@ -464,6 +465,10 @@ func LoadOperators(logger *zap.Logger) (wire.OperatorsCLI, error) {
 	if operators == nil {
 		return nil, fmt.Errorf("no information about operators is provided. Please use or raw JSON, or file")
 	}
+	// check that we use https
+	if err := checkIfOperatorHTTPS(operators); err != nil {
+		return nil, err
+	}
 	return operators, nil
 }
 
@@ -704,3 +709,16 @@ func Sync(logger *zap.Logger) error {
 	}
 	return nil
 }
+
+func checkIfOperatorHTTPS(ops []wire.OperatorCLI) error {
+	for _, op := range ops {
+		url, err := url.Parse(op.Addr)
+		if err != nil {
+			return fmt.Errorf("parsing IP address: %s, err: %w", op.Addr, err)
+		}
+		if url.Scheme != "https" {
+			return fmt.Errorf("only HTTPS scheme is allowed at operator address %s, got: %s", op.Addr, url.Scheme)
+		}
+	}
+	return nil
+}

entry-point.sh

@@ -15,7 +15,7 @@ if [ "$1" = "start-operator" ]; then
       echo "Certificate or key file not found. Generating new SSL certificate and key."
       openssl req -x509 -newkey rsa:4096 -sha256 -days 3650 -nodes \
         -keyout "$KEY_FILE" -out "$CERT_FILE" \
-        -subj "/CN=localhost"
+        -subj "/C=CN/ST=GD/L=SZ/O=localhost, Inc./CN=localhost"
     else
       echo "Existing SSL certificate and key found. Using them."
     fi

examples/generate_certs.sh

@@ -1,12 +1,12 @@
 #!/bin/bash
 
 openssl genrsa -out ./initiator/rootCA.key 4096
-openssl req -x509 -new -key ./initiator/rootCA.key -subj "/CN=localhost" -days 3650 -out ./initiator/rootCA.crt
+openssl req -x509 -new -key ./initiator/rootCA.key -subj "/C=CN/ST=GD/L=SZ/O=localhost, Inc./CN=localhost" -days 3650 -out ./initiator/rootCA.crt
 
 
 for i in $(seq 1 8);
 do
     openssl genrsa -out ./operator${i}/operator${i}.key 2048 && \
-    openssl req -newkey rsa:2048 -nodes -keyout ./operator${i}/operator${i}.key -subj "/C=CN/ST=GD/L=SZ/O=ssv, Inc./CN=*.ssv.com" -out ./operator${i}/operator${i}.csr && \
-    openssl x509 -req -extfile <(printf "subjectAltName=DNS:operator${i},DNS:operator${i}") -days 365 -in ./operator${i}/operator${i}.csr -CA ./initiator/rootCA.crt -CAkey ./initiator/rootCA.key -CAcreateserial -out ./operator${i}/operator${i}.crt
+    openssl req -newkey rsa:2048 -nodes -keyout ./operator${i}/operator${i}.key -subj "/C=CN/ST=GD/L=SZ/O=localhost, Inc./CN=localhost" -out ./operator${i}/operator${i}.csr && \
+    openssl x509 -req -extfile <(printf "subjectAltName=DNS:localhost,IP:127.0.0.1") -days 365 -in ./operator${i}/operator${i}.csr -CA ./initiator/rootCA.crt -CAkey ./initiator/rootCA.key -CAcreateserial -out ./operator${i}/operator${i}.crt
 done

examples/initiator/rootCA.crt

@@ -1,32 +1,32 @@
 -----BEGIN CERTIFICATE-----
-MIIFfzCCA2egAwIBAgIUfb0YC7DcAaB9eayaYahgUUgOY3cwDQYJKoZIhvcNAQEL
-BQAwTzELMAkGA1UEBhMCQ04xCzAJBgNVBAgMAkdEMQswCQYDVQQHDAJTWjESMBAG
-A1UECgwJc3N2LCBJbmMuMRIwEAYDVQQDDAkqLnNzdi5jb20wHhcNMjQwMzI4MDg1
-NDM0WhcNMzQwMzI2MDg1NDM0WjBPMQswCQYDVQQGEwJDTjELMAkGA1UECAwCR0Qx
-CzAJBgNVBAcMAlNaMRIwEAYDVQQKDAlzc3YsIEluYy4xEjAQBgNVBAMMCSouc3N2
-LmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKFleEtfa/IlhUgS
-Lj0yh57YpvBL4COgA8jP8s07OUHbPOyyj4AIc9vO1Sb6uak7pd/Y1/HLckWZh3KA
-tSW5Jjd2q5Jp0YLeFxT0I/rzrnK/TpNdUr/EnGmtys+/cuF4GldN7z8EttWS7U3g
-nQDwiNJuQfYq8eSTpzCzM6k1yc9H7oHp8/Gfbeje0FMfNQDZFgowU/1AiPyPVTuf
-LiPsdhDcb0/+Jw20ywk00xAh0wOuKVmZHjcM7VeD7cNBUX1qhydywqYBG3GT6QWj
-lmcMEVpRqDYxvG/9xTtKh0bP8nV2ISot1QiMfeYPYe4blhdRHszxIguBJAt/uWvm
-ehV37Q87kBsosPTAwZ0V6Elb3gonk0ZZTrqt86TO/OxGOpqYk/g8MuCunBbc2c0r
-TrVUmhdJPrJRJURkwul/u1XHHR0xV3UizuoMzfFFmGWu6JoSUzVpo0hAIYFmJNEq
-2Z0H8VADUgBbbKKooFhuQuJ9tYi1xo6HM/9moALS/lagICZHqQnrfafmNf9b4A8m
-CCh340nk4NhiVjmI8gBRe2AirXuWQdpXExii2rq5hN0Q078YlsYyw47DMQ5nQtbr
-FpnrxcjVexxIIZsFSwuJXYL0FnEvWlAP8fhdhEE+MeTcbcCcI/FCVvv6LtByvrQR
-lvV2tFKPnZf0Y7l6ig3J3ESdZfaHAgMBAAGjUzBRMB0GA1UdDgQWBBSi2urEOGn+
-jFBYsTxs2khhdWGBhTAfBgNVHSMEGDAWgBSi2urEOGn+jFBYsTxs2khhdWGBhTAP
-BgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4ICAQA89q3avxPEEPYpev/r
-XKGMQReUK0nT3EUnljx+KSiqjZ4YZCSsCcUW72n36IErTrsS3RjDg24XjM/InBPp
-yD/Mv4dV5/Lj37lg6A9CU69q/c4dyV5vaoLCKAXfDuGJXWkZUttiPXnC0fVKctcb
-xEESlsN8+eUQUQniXUDA9QCXvspMOOdCe3QF6olYI2xsqYu1hDuGEUScLC1zQxgd
-9o14kiJZx48a6dEBcgqLiIB7IlMkqGmE14JQjfnNNwczCdL6SXqq2dk81nUGalCY
-cjj9rXxOMUnvdztEvZlmo6PDgxNy3ECAUy7mFn2ASpm+uMOyGVGgl1WowhH6bgJ5
-fG9j8wMrI6t2KgmtwGgNF/5dPmiPzUSSZpzejAAS4NkerLP1bwIt4vEcTIMHdzh1
-JFNKccRiMnsIpJmsd97OP57e1TqUS21nBZuHij4O+EFtojjzSCV87xabj5bFalcn
-/JYTLTRcRB5VbrDq2DNZucuXCQ8zL+s7XUl19MrFs+2SWaaLxFYs2RoVKX/potgS
-+zliCl7SBqoXr3Aw0ZneJ0L8z+qYjHaTaAp4VOffFBLSSyPV7zfI5VRbcH+EhbIO
-Z11R8Q776ySJXeFfr9IBXf37pNKgsTyY1NY8srE2F8GupCEdr7pngtEPuOqCuEs1
-OYQ5WGdqoHmdW+esZipCCL9lIw==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 -----END CERTIFICATE-----

examples/initiator/rootCA.key

@@ -1,52 +1,52 @@
 -----BEGIN PRIVATE KEY-----
-MIIJQwIBADANBgkqhkiG9w0BAQEFAASCCS0wggkpAgEAAoICAQChZXhLX2vyJYVI
-Ei49Moee2KbwS+AjoAPIz/LNOzlB2zzsso+ACHPbztUm+rmpO6Xf2Nfxy3JFmYdy
-gLUluSY3dquSadGC3hcU9CP6865yv06TXVK/xJxprcrPv3LheBpXTe8/BLbVku1N
-4J0A8IjSbkH2KvHkk6cwszOpNcnPR+6B6fPxn23o3tBTHzUA2RYKMFP9QIj8j1U7
-ny4j7HYQ3G9P/icNtMsJNNMQIdMDrilZmR43DO1Xg+3DQVF9aocncsKmARtxk+kF
-o5ZnDBFaUag2Mbxv/cU7SodGz/J1diEqLdUIjH3mD2HuG5YXUR7M8SILgSQLf7lr
-5noVd+0PO5AbKLD0wMGdFehJW94KJ5NGWU66rfOkzvzsRjqamJP4PDLgrpwW3NnN
-K061VJoXST6yUSVEZMLpf7tVxx0dMVd1Is7qDM3xRZhlruiaElM1aaNIQCGBZiTR
-KtmdB/FQA1IAW2yiqKBYbkLifbWItcaOhzP/ZqAC0v5WoCAmR6kJ632n5jX/W+AP
-Jggod+NJ5ODYYlY5iPIAUXtgIq17lkHaVxMYotq6uYTdENO/GJbGMsOOwzEOZ0LW
-6xaZ68XI1XscSCGbBUsLiV2C9BZxL1pQD/H4XYRBPjHk3G3AnCPxQlb7+i7Qcr60
-EZb1drRSj52X9GO5eooNydxEnWX2hwIDAQABAoICAAtPojOeF2GcEZAwff8Z+HlA
-c8qpdqbogvti34BUozmjVMy94uK1NPF1uGiH79UVchWTC+dNO8/255A1xvxC0pPW
-hEW5ls5WJEX6qj7fLx2pnKclRjRcYh3h6THQGAwHL8lok9jVyr6DEpB/qmEzelNN
-GOBYuCUt1+zI0lkMhP067FM8gzUu2DQW0YDR0hQiIrJKGsjH6hHRNcb86+3ml4us
-9zwi8re6MPSPOC+MP06luQ4ndf+jr0qP22zwufZRLfGs0El0EGlQVWdoxJSqOtka
-mfBaYftzTIxQN9TVpAdpZP+gwKpdtkEWWOWoF0fBDqiMSbeGsHEB3YvbVjkE858e
-DDyPzgd68Hk1zK7N7iLiOIOVofppp4ojtGTDOKzkUUOhfXHhXxAdsjrnLV9aqLbs
-8oegyOD4hliMNZVFgJZ1OSWPc6KSa3NuF7rS0h2LjxTIJKoo4UjBwaj6DX5BGrBP
-DqapyJ9ItkN53QmfYN4JvoCFiM/aov0pGvegRgPYCX73404pSnAekFo7He/bQGhJ
-BQg1ixym4Xu9iqsH4ftqbyDa8z8ei8dTzspQIRBsBG0nsUIoQDnF8jDkEZh/T6mr
-UltiYzYnyDL+ZVPHjZBKLfjnZoo6yRsAYVoqFA8i6lBPsrNYkeYyn1uiYbl8UQV4
-O2S/hts4BjOc1A7Jw5VpAoIBAQDgBXMsc6YtYMHdr2dZfxcoJFw96eN1b+HkD0iO
-ynrv1XpOQ8UJapokQbd04zEv+2ZGpKjVkitwAADhjvFZmsRaNut+jJ3b7KZ9W3Ws
-uXL/dYQ6U8Oubn/x2WQ6qGDTTadxemG0QB2nnh36GVMPbIOusxNtz9VOz7YR5WgO
-pzQ6+xLgyRzHPZwDqMIXri3Kfk/B9USkT6ttVjq1CTVTq7R7vGvuTO4EFSTKL9Kj
-VHLEBSGSKjZA3UEKYzGje1UPO1rWgGaqBfGNuNINa1yNTdUax0JG4sGx8+uaC4ut
-eG3nOcFgBuv2zQioDFBF4w8OlpryZ6lQH16WKXBtOq7iY/xbAoIBAQC4b3pyJWE/
-1MfrXeoOlKJh17X8GBadO+2K+acVDT1sUQcAGZ1bArJafaHQCyxMvydNiuZ2XOEH
-hu5+uv8X2WkSAeT2Eeql7Swm+2U/nBkaE66qBMH2AEcDA4opEtdmXB/49TtOM6Zt
-cT72HMT4iplPR/hk1y8Vl8s3XTmFZcPzvwUteEn8qJsGlzxdUkn7BXg+06c32Ukp
-XjQi3F65jCfzh94aEVoQXpc9acSmRbDuWxEkAPgch79rQXkfHUWXXLn3ZcvtOKuy
-aOFUsG0jbykb+QxCfE+70gEsLx/cn08V0Ps2QIJtGfLKqnX7AOFVFN3ycK4aSMW/
-HyTbVvl0M3ZFAoIBABfuXRxdil4EnREqgLbdzcJ7B+ORTbwo5I+xVkXyuWlPe85K
-jQzxd1/yKT/yWTnP+GAJjQOrprpDNdTiqUOyNdGRVlzhdqecwzhXAd4evXsuuZ5l
-flzu7voOCBgADr/j5sRHl5Ji2wgh6v/hnq7iH7sU5Dlx306Y/9EvmYsfL4QxeBXN
-Ria+nSEC8SEIeVnNXoXQxrFq1VxLvt/CCRFUIWaqfTkqvK5w98oli7Ho/o2UIr7z
-hXIucJlEeXQGY9LJu214r/7vvZsvKDlIw81QiDhhGuJprNluvjdpjlVMrSjrUY4J
-j0GBK7CQCC8/D0e2rPzCOCMYBsmxyZHRmAcVOUsCggEBAKGlWtz2NAC83idEXWJA
-FP3KEH8NIazXHD+kxTKnMwFfFtKYoJhmiajT2WE8mav+EVVd+tUcXEG7mgXKoM7n
-RrZ4oJKma1DXyM21oiyZBEsdmwT6PID+Bz71+D49fDoDXiZV0I+epyveiD8uQdhP
-qUSaIHNJQcQcEQjKFSL8aTyVW9VZSwc9QvoIzOhBugNe7N+rozBIqV2vaeRv3jmj
-RFSl7RxNvvD/5m/15luQUxzlBeXXT525wCQh8yU5A4hAxeC2AIA+HgW09GDEbDMV
-NyOEKKGQ0FUeHtb5ymQT4D2Ptsz6xxUWG/xSYCsIv3VRX6Ef7wesZlw20JfI58NX
-Yz0CggEBAMwdg/sZnEJxJ5h7SPslXCtZ1T+55nQ6QXkSkONFWUtPCFfcVjV1NSBn
-UVPzcsYtqNj+7Nj6mtQYuSOK16/6zDQGJujS/kB/Ii9BwlaqzSyqzdKfAkJPCXdv
-H8fSvG5/+HdDMzIKcJKbOV+QC3VXofnXDSY8dSwgN0N4fgYFnawRuZfyy+Pp9wxd
-AFa/LUsdzdXXTWRdpazw+V+f4FUXPja1jU5mXZXOhjuso5CkBDr9niMxKLyyXNuj
-WY08iwWo2LTfkoW+ovZWG3cmM/tg83ij4bsKpTRMvuD7PQyohlVv3WBszPjob5XF
-4D5YoZxxbKvZpAygoNUvpjINgvpI9Ys=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 -----END PRIVATE KEY-----

examples/initiator/rootCA.srl

@@ -1 +1 @@
-1473DA1BC7FB715E11374201409A7150189C5879
+1473DA1BC7FB715E11374201409A7150189C5889

examples/operator1/operator1.crt

@@ -1,27 +1,27 @@
 -----BEGIN CERTIFICATE-----
-MIIEjzCCAnegAwIBAgIUFHPaG8f7cV4RN0IBQJpxUBicWHIwDQYJKoZIhvcNAQEL
-BQAwTzELMAkGA1UEBhMCQ04xCzAJBgNVBAgMAkdEMQswCQYDVQQHDAJTWjESMBAG
-A1UECgwJc3N2LCBJbmMuMRIwEAYDVQQDDAkqLnNzdi5jb20wHhcNMjQwMzI4MDg1
-NDM0WhcNMjUwMzI4MDg1NDM0WjBPMQswCQYDVQQGEwJDTjELMAkGA1UECAwCR0Qx
-CzAJBgNVBAcMAlNaMRIwEAYDVQQKDAlzc3YsIEluYy4xEjAQBgNVBAMMCSouc3N2
-LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJYH6fIIvVbl8EQF
-xQKvBKQw8nJI3tpyCdaQslxVh/eZcT3cR1YkYFELZKS3oyw0kBdOYdVifVvh5QoH
-YESSwl1fFswcKA15vs9HrQtj0nrhJjPQNjtWybFYBn+jjpuv1Hqmc95vNXjwSy6v
-fxX1vs7jXBnzm0jT0FmpFZ/HUGxLB5ECqzBh3x2hiF7mJrZ4peZK9dtk+c/6ZCjw
-Apfn12H5ZLvAn//thyS9fGv3fVK/ROPYRnnTS496WIQG54EE0lg2YsHCO58cRoD7
-mHPvkFxNF0KVejABC3q4GOLkN6HTPEttup7g8EofferKUbXffGpjt+F9j0u62o+5
-khn381ECAwEAAaNjMGEwHwYDVR0RBBgwFoIJb3BlcmF0b3IxgglvcGVyYXRvcjEw
-HQYDVR0OBBYEFKVLp0BCKKOFSZSTZSmNYIhSEu+DMB8GA1UdIwQYMBaAFKLa6sQ4
-af6MUFixPGzaSGF1YYGFMA0GCSqGSIb3DQEBCwUAA4ICAQALqHW5q2YOVVCxwUAH
-GOnsfy/uCHMhvCekvkYKeb8oTBrxrX03pPVW5bVnGDEgzZsdqsDfbsJtC/eCUrgR
-YpuXZ7yzfmME908pjcJ0PRkyNcwDSECxObzOL0UrlYvL9urMEDUiGrw1SxkQm7BQ
-y1jCiRdrq3vK5zRIfBoEWi194Y/DA8j4QQRifpMyqP1v4Zxnca93D3xFMl7XXTLi
-ZWX3y/xdtCe9Ks64y9EwgDHPfPVXM1quMTYVNXNdCqKH7ik5Rqf9JtqrF6qZA0HR
-Vmf4oNlSwUWc0xdnVpXYpPDSx3tVM91QIskwuxVk1teRZemar95YbxgwVCJ1al5G
-+qIlDW+xD0LJj1+skim4eJmZe7OBnRDqRDbmwHqJN3EH3oKCRp//fQI7A7UIf6MA
-/E7v1NbOZCCIV/Oh7yourcb1OFpAJv7jxdDR6gHf/Yga/hXkzEzwDzeosL4fbntQ
-xjV2Cr2YUrPfl1G4g35Xo2acGcrfZMqiCb/ewLY373u66hZu3+dDBLMuk1VOs1i6
-kINJCThsm0WuYDmo17xdaTh+t8IfkoT31vYzNVFUwoCfGXhMVy0EeMVl3dAmCQgz
-bAwVG+Z8GswYPRkC19bELWgFCwoaVk9jRFMiZc2bgEgoMm2vLA0uBzuRQGop7zO8
-k/JGDCgkkkscQsYovbjsy5HOfw==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 -----END CERTIFICATE-----

examples/operator1/operator1.csr

@@ -1,16 +1,16 @@
 -----BEGIN CERTIFICATE REQUEST-----
-MIIClDCCAXwCAQAwTzELMAkGA1UEBhMCQ04xCzAJBgNVBAgMAkdEMQswCQYDVQQH
-DAJTWjESMBAGA1UECgwJc3N2LCBJbmMuMRIwEAYDVQQDDAkqLnNzdi5jb20wggEi
-MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWB+nyCL1W5fBEBcUCrwSkMPJy
-SN7acgnWkLJcVYf3mXE93EdWJGBRC2Skt6MsNJAXTmHVYn1b4eUKB2BEksJdXxbM
-HCgNeb7PR60LY9J64SYz0DY7VsmxWAZ/o46br9R6pnPebzV48Esur38V9b7O41wZ
-85tI09BZqRWfx1BsSweRAqswYd8doYhe5ia2eKXmSvXbZPnP+mQo8AKX59dh+WS7
-wJ//7YckvXxr931Sv0Tj2EZ500uPeliEBueBBNJYNmLBwjufHEaA+5hz75BcTRdC
-lXowAQt6uBji5Deh0zxLbbqe4PBKH33qylG133xqY7fhfY9LutqPuZIZ9/NRAgMB
-AAGgADANBgkqhkiG9w0BAQsFAAOCAQEAH62PZFhlUHNSmbiVO5dZW3GLCx4zMSRt
-PmSEIV8rwq/sKSjpjfadfiWAgTtQNYHWYz7wFjcL8+aeW/IOl7+9NZmEJEfX2S9A
-8njrO3fuzosrnPJiolpzJgl3SjZYEY2LeyUGDHH6uP81usM/tEORwd40IiafuYZ5
-AMIXggXsudBV5on7sshKZIaCxtMIaz7yOm0sw4MUTdILdQ96kUmlqhZZz1ARdriM
-NqbkHyCFt1/eBryhw227sxwgoGrUtmT1uQZNnr0NbMCC4hVPLyqradPAI3aWrxpK
-zv9rMeC8/gIM46loJUNRpJKRwFGMxAqLe/Tf6icAhIwTwASbd9Hs7Q==
+MIICmjCCAYICAQAwVTELMAkGA1UEBhMCQ04xCzAJBgNVBAgMAkdEMQswCQYDVQQH
+DAJTWjEYMBYGA1UECgwPbG9jYWxob3N0LCBJbmMuMRIwEAYDVQQDDAlsb2NhbGhv
+c3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz43rYD6IQSTYRW5KQ
+ZF4C3ZMlC5l1O8LCNJdQjBs0bNIFJIv2BBPddBsv7aIu5wXM2YPGBRPLLsHxVrul
+9SM4pfjcXBJrkbb0qZKetP1wRbc5nbmCffU2l3DJ1zdNesTx7S7qPymOI5sNvouc
+BCwb+zC8yGfIdh7MDPWCro7XZjUMWaAdMtifOJDAlNmTBcW7gBbdIXBZvz7lV5pf
+2re++lYuE2SrltaBUAfZ7rBncnl4QBXbUtewgOxBPtau8lJdrAvBfzAPzEJy8qfl
+xyi+IbrfyDdjHiufdvj2eq/BlEjPs0/WdjLLixfGa4jLtu1278WW4JGmEHRWT7dJ
+sLeXAgMBAAGgADANBgkqhkiG9w0BAQsFAAOCAQEAQR723JajtIuksh18ZVC97N0V
+mGlLQiEEmmUaTs5OCYiNisd4xWhF7Ktk44pskmoi5zSae/Fn/NjdPJLKMGbBHjR3
+p11O3hiCIE2YOOouYmgCyEKT60zhB9njoIa1n4NP8d8L0RmmZNto0wirGHeouJE6
+yLfZoopIFecKHc2vfMFQtmDh/D+JwJ6dE5UbOIbC1vZepf2I3C1PWad3D2aVo6jR
+yaaJBCf9uPG+odR/DzyYy79+GnVruPMpfi//47J4R8pP0++jkzeQR1Abpb1j4GX+
+ht8gxyKiGQkcgTh0cZ9KVG9iBkDZjsW9nDRV9Til0UkFhcYnNNrY5Ky82hteRA==
 -----END CERTIFICATE REQUEST-----