Regenerate testdata/pki and include script for regenerating

The existing certificates in testdata/pki expire on September 16 2024.

This commit includes a 'generate_certs.sh' script for regenerating
private keys and certificates as needed.

As I couldn't find the original steps used to generate these, it's
possible these certificates are generated differently, but they are
done in a nominal way.

One slight derivation with the original certificates is that I have
opted to use PKCS12 format instead of the propertiary java JKS format
for the .truststore and .keystore file.  The cassandra and gocql
certificates also embed a spiffe in the SAN so they can eventually
be used for mTLS authentication testing.

patch by Andy Tolbert; reviewed by <> for CASSANDRA-19862

integration.sh

@@ -39,6 +39,7 @@ function run_tests() {
 		"client_encryption_options.require_client_auth: true"
 		"client_encryption_options.truststore: $keypath/.truststore"
 		"client_encryption_options.truststore_password: cassandra"
+		"client_encryption_options.store_type: PKCS12"
 		"concurrent_reads: 2"
 		"concurrent_writes: 2"
 		"rpc_server_type: sync"

testdata/pki/ca.cnf

@@ -0,0 +1,12 @@
+[req]
+default_bits = 2048
+prompt = no
+default_md = sha256
+distinguished_name = dn
+
+[req_ext]
+basicConstraints = CA:TRUE
+keyUsage = digitalSignature, keyCertSign
+
+[dn]
+CN = ca

testdata/pki/ca.crt

@@ -1,20 +1,29 @@
 -----BEGIN CERTIFICATE-----
-MIIDLzCCAhegAwIBAgIJAIKbAXgemwsjMA0GCSqGSIb3DQEBCwUAMBQxEjAQBgNV
-BAMTCWNhc3NhbmRyYTAeFw0xNDA5MTkyMTE4MTNaFw0yNDA5MTYyMTE4MTNaMBQx
-EjAQBgNVBAMTCWNhc3NhbmRyYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
-ggEBAL5fX0l1WDNa+mO1krxw7k8lfUQn+Ec4L3Mqv6IstGoNdCPq4YRA+SXRD5YC
-k/UXrFBWh9Hbs849GiuTYMPdj9HDLYz40RaQjM9GbieS23iy3UStQ0tKhxaaG6FN
-6XBypXFKCTsanu0TkEoDGhAkSzAMcCAC3gkFBzMrZ5qt4HEzjY9rasZ2gthN+xop
-nq3t4dDkE8HGaiFJcFvqTor7xmrnAaPjrPzUpvOF/ObIC09omwg/KXdPRx4DKPon
-gCMKEE3ckebKnJvbsRX3WO8H5nTHBYZ6v1JxLZz5pqmV+P0NGxldCARM0gCQUBz5
-wjMJkD/3e1ETC+q6uwfnAG0hlD8CAwEAAaOBgzCBgDAdBgNVHQ4EFgQUjHzn0nYF
-iXEaI1vUWbRR4lwKXOgwRAYDVR0jBD0wO4AUjHzn0nYFiXEaI1vUWbRR4lwKXOih
-GKQWMBQxEjAQBgNVBAMTCWNhc3NhbmRyYYIJAIKbAXgemwsjMAwGA1UdEwQFMAMB
-Af8wCwYDVR0PBAQDAgEGMA0GCSqGSIb3DQEBCwUAA4IBAQBCYDdIhtf/Y12Et947
-am1B8TzSX+/iQ1V1J3JtvgD5F4fvNjfArat/I3D277WREUTAc76o16BCp2OBGqzO
-zf9MvZPkjkAUoyU0TtPUEHyqxq4gZxbWKugIZGYkmQ1hCvSIgA5UnjRL3dylMmZb
-Y33JJA2QY63FZwnhmWsM8FYZwh+8MzVCQx3mgXC/k/jS6OuYyIT/KjxQHHjyr5ZS
-zAAQln1IcZycLfh1w5MtCFahCIethFcVDnWUWYPcPGDGgMJW7WBpNZdHbLxYY8cI
-eCc3Hcrbdc/CG5CaLJeqUidBayjnlUIO/NNgglkJ1KhQzkM6bd+37e0AX1hLIqx7
-gIZR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 -----END CERTIFICATE-----

testdata/pki/ca.key

@@ -1,30 +1,52 @@
------BEGIN RSA PRIVATE KEY-----
-Proc-Type: 4,ENCRYPTED
-DEK-Info: DES-EDE3-CBC,54C8072C0FF3B3A3
-
-27eijmHdgB+s3beNPmU0+iz+muxMD0BVvWkDzyec/uawMv/Cn4c3mYXOcsFxS3BL
-+qLT9MEttOmjqhHSaVrDYOPKoJIMpn+bVeKiR08V89icO36shEPy1feGqanagKtw
-ecgzFDBTA8ZbqjAhftXlhTwxADebvNms/2aDh5Aw04vIcbo8nQ/8z1Wz8O7Firsn
-kaseSTMTC6lxc+pa2V1X6mN0/2UpDi55bZbx1Z/mQ3+1CsdHOx0p7m/KY2m3ysov
-XluaC0sqmzHkcwNgDhUs3Jh+apE33vXzLGU+W4BDOwrYJiL6KpspZW/mJj3OEx8B
-8xdAZU3a/ei8NUA/lDStGmcYX+dOysExwJ6GMrCBm9iufZiefDQCQ8yRqWnr6Zop
-lsFd+CqHNWYxfWDI1pSUBw3bsgIjevI0f0B7PxkFEF0DmIhCgB324/uqToRzGsOF
-4MSVg6cSK7Sjo/u3r8r75A3aUAcY8NbR3peiZfAPMsTiUcfp4DoU+MJTqkX5PyQq
-FNxHOJoARZqjjQ2IhZiUQWfIINHvZ8F9G2K7VaES8A0EATyUghqaRyeLbyI3IYdW
-pGZBzrpGtdFlk9AVetHDDlY+gQiurtYhxOsxvlxJJuTj8FV+A5NWSElfPele0OiR
-iprE3xkFSk3whHu5L1vnzamvdSlnBWOAE7pQD7kQA6NmcEw/tqnXK0dVdAw8RIFh
-4BKgv0sNrXzBgnzE8+bKLUf1a2Byc/YKuBrI7EpSZ9/VHYvOcgmOxNxMmRS6NYd1
-Ly+agQn0AyvsDmSlBZBp8GCzVp6JYBMDKSXyPVN8+wjK9OQM0PZdEdXouMwPCOVN
-oNSjhmMtfjOsnG2SZ9tRas3p0qFdfh/N/E6Q7QHG3WD3cUIEweFV9ji1FTSRUrIa
-shuKug8MUfNjvDJNMsdGyf6Hi/7Iik++42Rq3ZdTy0ZVkj5snv5yBN77pr2M/J4b
-M+dsXjyXPO4SDW3kP/e3RnLRlWmUv1PNdOmNDdjBBUTKgVZ3ur+4HmSY1iDvhlUF
-/hz2tz3/XUKQwYuv3KJVlBhLrniXeES36GK+JQadIszrjwb5N4q4p6xrIdIR7XgR
-TJCSL1NGPLeQyjK6byWLNPRcCGrvnxWs0k0ev6trMRJL1EjsIFDCJam9szhcXkZP
-iYl1d7ZMKPS3cAqCjdaFRSe65cZ+qI/cqxiv122orq/jkDY7ZSA9rWywY4YnYQ7A
-BqvcPzC/6K0bteXqmMQkIy/84aSnEts6ecb/4s5e5xXLhHe0dchG0HkasC/Gb+v/
-m9NOqACTerWvSD+Ecv9OvnBjP+GTlA1g7xTiRANLXsTJuiJomtxewXcV6kGZEMmZ
-QWerGtPJGGUx36WRWrMiPeBfWZoIbjYGPmOO5mYNXMTjABGGWcFnKAqWUKsFihi9
-pC0OpZ7A0dtc9uSm0ZmsHUc3XENMHTeeEN+qgWxVKcMzRKEcnapu/0OcHrOUHDZf
-qPoG4EkNnG9kPMq3HzvFPx3qbQ017yl87vAkWy/Edo+ojfHoNghRBVGCw1zt/BMN
-eJbFFHop+rQ87omz8WIL4K+zVf91rJ0REVAJssQVDo16O5wrMo+f+c8v2GANQks5
------END RSA PRIVATE KEY-----
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

testdata/pki/cassandra.cnf

@@ -0,0 +1,16 @@
+[req]
+default_bits = 2048
+prompt = no
+default_md = sha256
+distinguished_name = dn
+
+[dn]
+CN = cassandra
+
+[req_ext]
+basicConstraints = CA:FALSE
+keyUsage = digitalSignature, keyEncipherment
+subjectAltName = @alt_names
+
+[alt_names]
+URI = spiffe://test.cassandra.apache.org/cassandra-gocql-driver/integrationTest/cassandra

testdata/pki/cassandra.crt

@@ -1,83 +1,31 @@
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number: 2 (0x2)
-        Signature Algorithm: sha256WithRSAEncryption
-        Issuer: CN=cassandra
-        Validity
-            Not Before: Sep 19 21:18:48 2014 GMT
-            Not After : Sep 16 21:18:48 2024 GMT
-        Subject: CN=cassandra
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-            RSA Public Key: (2048 bit)
-                Modulus (2048 bit):
-                    00:e5:9c:20:9e:de:98:73:44:41:0d:37:4c:62:c3:
-                    9f:87:5f:9b:4f:aa:cf:f6:90:6e:a5:e0:89:88:7a:
-                    00:c6:bb:d7:80:87:69:2e:fa:f0:35:59:80:6e:82:
-                    25:c8:b3:6c:f6:a4:97:97:93:93:ea:f0:70:70:a4:
-                    e1:b7:aa:da:c1:99:66:9b:93:04:3a:ce:0b:83:07:
-                    06:22:3d:a6:db:7f:68:0f:49:80:bd:86:a8:bb:54:
-                    6d:38:5f:0f:b0:fa:1b:97:24:ae:cc:9d:37:98:7e:
-                    76:cc:e3:1b:45:1b:21:25:17:02:c0:1a:c5:fb:76:
-                    c3:8b:93:d7:c5:85:14:0a:5c:a4:12:e7:18:69:98:
-                    f5:76:cd:78:cd:99:5a:29:65:f1:68:20:97:d3:be:
-                    09:b3:68:1b:f2:a3:a2:9a:73:58:53:7e:ed:86:32:
-                    a3:5a:d5:46:03:f9:b3:b4:ec:63:71:ba:bb:fb:6f:
-                    f9:82:63:e4:55:47:7a:7a:e4:7b:17:6b:d7:e6:cf:
-                    3b:c9:ab:0c:30:15:c9:ed:c7:d6:fc:b6:72:b2:14:
-                    7d:c7:f3:7f:8a:f4:63:70:64:8e:0f:db:e8:3a:45:
-                    47:cd:b9:7b:ae:c8:31:c1:52:d1:3e:34:12:b7:73:
-                    e7:ba:89:86:9a:36:ed:a0:5a:69:d0:d4:e3:b6:16:
-                    85:af
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Basic Constraints: 
-                CA:FALSE
-            X509v3 Subject Key Identifier: 
-                4A:D3:EC:63:07:E0:8F:1A:4E:F5:09:43:90:9F:7A:C5:31:D1:8F:D8
-            X509v3 Authority Key Identifier: 
-                keyid:8C:7C:E7:D2:76:05:89:71:1A:23:5B:D4:59:B4:51:E2:5C:0A:5C:E8
-                DirName:/CN=cassandra
-                serial:82:9B:01:78:1E:9B:0B:23
-
-            X509v3 Extended Key Usage: 
-                TLS Web Server Authentication
-            X509v3 Key Usage: 
-                Digital Signature, Key Encipherment
-    Signature Algorithm: sha256WithRSAEncryption
-        ac:bc:80:82:2d:6d:f1:a0:46:eb:00:05:d2:25:9a:83:66:57:
-        40:51:6e:ff:db:e3:28:04:7b:16:63:74:ec:55:a0:c0:5b:47:
-        13:e1:5a:a5:6d:22:d0:e5:fe:c1:51:e8:f6:c6:9c:f9:be:b7:
-        be:82:14:e4:a0:b2:0b:9f:ee:68:bc:ac:17:0d:13:50:c6:9e:
-        52:91:8c:a0:98:db:4e:2d:f6:3d:6e:85:0a:bb:b9:dd:01:bf:
-        ad:52:dd:6e:e4:41:01:a5:93:58:dd:3f:cf:bf:15:e6:25:aa:
-        a0:4f:98:0d:75:8a:3f:5b:ba:67:37:f6:b1:0b:3f:21:34:97:
-        50:9a:85:97:2b:b6:05:41:9a:f3:cf:c4:92:23:06:ab:3e:87:
-        98:30:eb:cb:d3:83:ab:04:7d:5c:b9:f0:12:d1:43:b3:c5:7d:
-        33:9a:2e:2b:80:3a:66:be:f1:8c:08:37:7a:93:9c:9b:60:60:
-        53:71:16:70:86:df:ca:5f:a9:0b:e2:8b:3d:af:02:62:3b:61:
-        30:da:53:89:e3:d8:0b:88:04:9a:93:6a:f6:28:f8:dd:0d:8f:
-        0c:82:5b:c0:e5:f8:0d:ad:06:76:a7:3b:4b:ae:54:37:25:15:
-        f5:0c:67:0f:77:c5:c4:97:68:09:c3:02:a7:a0:46:10:1c:d1:
-        95:3a:4c:94
 -----BEGIN CERTIFICATE-----
-MIIDOTCCAiGgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAUMRIwEAYDVQQDEwljYXNz
-YW5kcmEwHhcNMTQwOTE5MjExODQ4WhcNMjQwOTE2MjExODQ4WjAUMRIwEAYDVQQD
-EwljYXNzYW5kcmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlnCCe
-3phzREENN0xiw5+HX5tPqs/2kG6l4ImIegDGu9eAh2ku+vA1WYBugiXIs2z2pJeX
-k5Pq8HBwpOG3qtrBmWabkwQ6zguDBwYiPabbf2gPSYC9hqi7VG04Xw+w+huXJK7M
-nTeYfnbM4xtFGyElFwLAGsX7dsOLk9fFhRQKXKQS5xhpmPV2zXjNmVopZfFoIJfT
-vgmzaBvyo6Kac1hTfu2GMqNa1UYD+bO07GNxurv7b/mCY+RVR3p65HsXa9fmzzvJ
-qwwwFcntx9b8tnKyFH3H83+K9GNwZI4P2+g6RUfNuXuuyDHBUtE+NBK3c+e6iYaa
-Nu2gWmnQ1OO2FoWvAgMBAAGjgZUwgZIwCQYDVR0TBAIwADAdBgNVHQ4EFgQUStPs
-YwfgjxpO9QlDkJ96xTHRj9gwRAYDVR0jBD0wO4AUjHzn0nYFiXEaI1vUWbRR4lwK
-XOihGKQWMBQxEjAQBgNVBAMTCWNhc3NhbmRyYYIJAIKbAXgemwsjMBMGA1UdJQQM
-MAoGCCsGAQUFBwMBMAsGA1UdDwQEAwIFoDANBgkqhkiG9w0BAQsFAAOCAQEArLyA
-gi1t8aBG6wAF0iWag2ZXQFFu/9vjKAR7FmN07FWgwFtHE+FapW0i0OX+wVHo9sac
-+b63voIU5KCyC5/uaLysFw0TUMaeUpGMoJjbTi32PW6FCru53QG/rVLdbuRBAaWT
-WN0/z78V5iWqoE+YDXWKP1u6Zzf2sQs/ITSXUJqFlyu2BUGa88/EkiMGqz6HmDDr
-y9ODqwR9XLnwEtFDs8V9M5ouK4A6Zr7xjAg3epOcm2BgU3EWcIbfyl+pC+KLPa8C
-YjthMNpTiePYC4gEmpNq9ij43Q2PDIJbwOX4Da0Gdqc7S65UNyUV9QxnD3fFxJdo
-CcMCp6BGEBzRlTpMlA==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=
 -----END CERTIFICATE-----

testdata/pki/cassandra.key

@@ -1,27 +1,52 @@
------BEGIN RSA PRIVATE KEY-----
-MIIEpQIBAAKCAQEA5Zwgnt6Yc0RBDTdMYsOfh1+bT6rP9pBupeCJiHoAxrvXgIdp
-LvrwNVmAboIlyLNs9qSXl5OT6vBwcKTht6rawZlmm5MEOs4LgwcGIj2m239oD0mA
-vYaou1RtOF8PsPoblySuzJ03mH52zOMbRRshJRcCwBrF+3bDi5PXxYUUClykEucY
-aZj1ds14zZlaKWXxaCCX074Js2gb8qOimnNYU37thjKjWtVGA/mztOxjcbq7+2/5
-gmPkVUd6euR7F2vX5s87yasMMBXJ7cfW/LZyshR9x/N/ivRjcGSOD9voOkVHzbl7
-rsgxwVLRPjQSt3PnuomGmjbtoFpp0NTjthaFrwIDAQABAoIBAQChjdjl73kUoVGk
-GuSEGWCFv59nzqfEtJsl23bpr+4b5s8agCxiAe5Bm1fiaXBsZtKkN+rxm8TX6ZUz
-rM+ki3KgBW9Mx4SSW6d96dNHBFoC1wJAv1b2A2l1ZVHz9+7ydwgysHzNO1GC2nh8
-cM8fMJeBoU8uG6hx5n5wFvYa5CfVoUQh8+Oq0b+mVxEFKHmRPnWp9/jPzL5eBIdr
-ulbDt9S3dKJtouHgHBUNdkq/7Ex3QeHrUOahX6Y4eX1rzLnfLYY+0J4EA2PCKvgQ
-bfKCxVnnzL6ywviH8eS3ql6OvTfnbK9kCRw7WxX9CC50qKj3EmwC/51MPhWohWlq
-jw3qf38BAoGBAPPNyb3vUiyUqoErZxxIPFc2ob3vCjj06cvi7uKpOgrkdgC3iBhz
-aCFQ28r7LrxLAHaKvNvwp71Lc7WYo8WWkLI1DVn0dx+GiQYW3DbNcwZOS40ZQz5L
-zsjEcG4+cnZmuqGZBMNvQ+xUjkuucxvxPWKpEKM18GfDjgEkKbmDr+uNAoGBAPEY
-kVSfSZGtP0MoXIfRkrxBlhvCj9m+p60P37pyHrJBrlrwvxB7x3Oz8S70D6kV8s2g
-vVHgOS3VPj17VaQG8a3jBLKjzp5JLe34G8D1Ny8GqDc2wzOBtZySpJbifXuSUSPk
-cqF7yiu1cD/wRPlwyWxBX9ZbaxvxnIUwLLd3ygkrAoGBAKQaw42uVkCdvPr/DQOT
-d9I4erxO9zGJYQmU8bjtsZz9VJR89QWIQPIT7C3/zuB9F42zKxZcMXwQGo2EddAc
-3b6mSRtgmwJEW10W7BmTRrZa4y3RcFqxSjoHR6pdLEyYL01woy0taqnb7H/yp5aK
-VghfxkwllXEyxxXrko5FnpdNAoGBANeJLBunz2BxrnW+doJhZDnytFya4nk6TbKU
-12FaNoEL4PCh+12kGtogSwS74eg6m/citT2mI9gKpHrYcOaT4qmeo4uEj+nH6Eyv
-Gzi0wCHFZMr/pSC92/teyc+uKZo4Y1ugFq6w+Tt8GB7BERiisR+bji8XSTkRFemn
-+MIIUFFDAoGAM8Va2Q5aTUkfg2mYlNLqT2tUAXVEhbmzjPA6laSo25PQEYWmX7vj
-hiU0DPCDJQ/PlPI23xYtDDLNk83Zbx+Oj29GO5pawJY9NvFI8n60EFXfLbP1nEdG
-j077QZNZOKfcgJirWi3+RrHSAK4tFftCe7rkV8ZmlMRBY3SDxzKOGcc=
------END RSA PRIVATE KEY-----
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----