Bug#29875763: SERVER WITH OPENSSL 1.1.1 CANNOT READ MYSQL-TEST/STD_DATA/CRL-SERVER-CERT.PEM

Description: Updated CRL pem files to use 2048 bit keys

RB: 22468

Author: harinvadodaria

mysql-test/std_data/crl-ca-cert.pem

@@ -2,62 +2,79 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number:
-            f9:e2:f3:98:0e:2b:05:7c
-        Signature Algorithm: sha1WithRSAEncryption
-        Issuer: C=BG, ST=Plovdiv, O=Oracle, OU=MySQL, CN=MySQL CRL test CA certificate
+            27:9a:6f:41:cc:a4:9a:73:13:55:a3:b6:f4:3f:71:d5:8a:a8:91:1d
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=IN, ST=KA, O=Oracle, OU=MySQL, CN=MySQL CRL test ca certificate
         Validity
-            Not Before: May 17 15:08:00 2012 GMT
-            Not After : May 10 15:08:00 2042 GMT
-        Subject: C=BG, ST=Plovdiv, O=Oracle, OU=MySQL, CN=MySQL CRL test CA certificate
+            Not Before: Jul  1 11:58:53 2019 GMT
+            Not After : Jun 30 11:58:53 2022 GMT
+        Subject: C=IN, ST=KA, O=Oracle, OU=MySQL, CN=MySQL CRL test ca certificate
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-            RSA Public Key: (1024 bit)
-                Modulus (1024 bit):
-                    00:ed:ec:45:e0:22:d7:d0:d5:91:87:74:5f:ee:17:
-                    b5:c7:07:c2:4b:b3:e7:13:93:46:95:1f:5d:09:54:
-                    14:98:40:3d:0e:e6:14:5c:5e:39:c5:75:87:4e:73:
-                    24:62:d9:85:4a:69:c4:35:7d:6b:76:6c:1c:8e:56:
-                    a8:fe:9e:fe:22:ae:c9:41:14:67:d4:11:37:8d:d3:
-                    18:02:9d:8a:36:64:b1:8b:2f:a0:ba:2d:d5:fd:c0:
-                    cd:6a:7d:a5:c0:6b:6b:60:64:2f:24:45:bb:a8:ad:
-                    1c:95:a0:d5:40:79:28:5f:b1:17:97:63:a1:d5:1e:
-                    42:d4:10:70:5d:8f:2e:34:45
+                RSA Public-Key: (2048 bit)
+                Modulus:
+                    00:c9:09:95:54:a0:91:fd:f9:26:2f:ca:c4:ce:4a:
+                    cc:25:72:44:34:f2:68:7a:4d:91:ab:1a:54:90:50:
+                    fc:14:8a:f2:5b:83:f3:68:c9:0e:bc:0f:dd:11:2f:
+                    25:43:9e:d4:5a:cf:e0:2a:4f:63:d8:1d:de:ef:7d:
+                    6b:14:4f:8f:2e:9a:44:b8:4f:41:b3:88:95:71:e2:
+                    cd:8b:22:96:7c:55:fb:39:1a:6b:18:05:18:2c:95:
+                    15:9f:b0:e3:92:76:c5:c6:e3:3f:56:44:2d:fe:a5:
+                    61:d7:47:db:84:be:08:19:d6:39:f3:4f:dd:6c:d9:
+                    ff:e1:c2:ba:78:2b:87:a8:32:02:e2:a9:e7:8a:14:
+                    bb:c5:7a:a8:33:ff:54:0b:5c:c6:20:cf:2e:e3:ee:
+                    f5:fe:4c:98:26:a5:fc:1a:4a:3f:62:8f:df:a6:31:
+                    d2:a0:f4:c8:04:dd:f5:b8:5e:6b:6c:c3:c4:c7:da:
+                    80:19:2f:40:e1:df:7d:39:a0:9d:c7:fe:59:db:75:
+                    f1:5e:2f:da:07:7f:5f:ac:0b:18:eb:0f:61:a5:17:
+                    b1:9e:cb:d5:56:9a:b4:54:89:93:45:2b:90:7e:ef:
+                    c3:a2:36:d5:7f:64:aa:a2:79:23:74:8c:02:93:5b:
+                    da:dd:10:03:01:9e:84:49:4d:8f:32:75:f1:63:57:
+                    88:19
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
             X509v3 Subject Key Identifier: 
-                85:AB:E6:A7:57:88:7D:8D:BE:EB:64:53:73:94:64:CD:4B:8D:29:12
+                A7:2E:CA:53:05:52:06:12:BD:ED:FF:CF:B8:BA:30:E7:7A:1F:96:46
             X509v3 Authority Key Identifier: 
-                keyid:85:AB:E6:A7:57:88:7D:8D:BE:EB:64:53:73:94:64:CD:4B:8D:29:12
-                DirName:/C=BG/ST=Plovdiv/O=Oracle/OU=MySQL/CN=MySQL CRL test CA certificate
-                serial:F9:E2:F3:98:0E:2B:05:7C
+                keyid:A7:2E:CA:53:05:52:06:12:BD:ED:FF:CF:B8:BA:30:E7:7A:1F:96:46
 
-            X509v3 Basic Constraints: 
+            X509v3 Basic Constraints: critical
                 CA:TRUE
-    Signature Algorithm: sha1WithRSAEncryption
-        90:f7:9b:56:14:df:c4:db:46:a4:67:f5:83:68:e9:70:45:4c:
-        5d:97:07:06:fd:2c:68:0b:9a:ed:6d:7a:d1:18:be:b8:dd:08:
-        bc:ff:10:5b:d9:b2:50:1f:98:b0:5d:be:6d:0b:88:bb:30:93:
-        fa:04:34:f1:3b:f6:56:d5:86:bb:1c:31:f3:7f:7b:38:0b:d1:
-        f9:fd:87:b5:c4:63:a0:b8:46:59:95:a8:b5:ec:4f:d0:ad:df:
-        42:ed:74:4f:2f:fd:7c:65:aa:d7:60:d1:70:55:41:8b:0b:c2:
-        3b:f1:f3:2f:6b:a5:d9:48:b1:2d:84:e9:07:63:92:f0:36:04:
-        cf:5d
+    Signature Algorithm: sha256WithRSAEncryption
+         53:ce:08:79:96:94:22:9b:1f:8e:2f:3c:ad:7b:1f:0e:45:7e:
+         65:c1:c2:7f:46:f1:73:be:9c:e4:1b:2c:13:bd:bf:05:95:2b:
+         3c:6e:70:62:b2:14:1e:a6:60:e3:a7:b7:40:22:97:db:74:d1:
+         fc:47:27:ba:de:89:50:7e:e1:3b:f5:3e:95:aa:01:e8:8a:e6:
+         f9:49:48:97:d2:91:a0:1f:9d:82:b5:35:16:58:01:d1:82:1d:
+         b4:dc:68:b9:1b:84:fb:e3:ec:06:a6:55:69:e9:84:69:7d:34:
+         ba:dd:dd:57:15:1a:9e:d8:f4:c7:44:98:07:35:66:ec:a6:1e:
+         91:b8:a4:b2:9b:85:52:e8:98:e6:e8:28:8c:d4:1e:8e:45:50:
+         58:c9:68:fd:b4:4b:4f:b7:58:9f:45:7b:b1:12:ae:7d:70:0d:
+         4b:42:7e:46:d0:5a:d5:21:9f:f1:99:b6:21:75:34:7b:2a:d8:
+         45:2e:f9:4d:fa:b4:72:a8:9e:22:e6:66:4b:81:1d:8e:b2:54:
+         f3:0f:02:17:68:7f:79:ca:df:a7:5d:17:70:50:bf:47:df:5a:
+         6a:e1:7f:af:ab:ca:54:86:ad:d8:35:c5:b8:f7:9d:72:0e:db:
+         dc:0c:c3:08:2d:d1:9a:18:5c:c3:c1:64:7a:f3:9a:5a:6d:69:
+         12:e1:fd:c2
 -----BEGIN CERTIFICATE-----
-MIIDHDCCAoWgAwIBAgIJAPni85gOKwV8MA0GCSqGSIb3DQEBBQUAMGgxCzAJBgNV
-BAYTAkJHMRAwDgYDVQQIEwdQbG92ZGl2MQ8wDQYDVQQKEwZPcmFjbGUxDjAMBgNV
-BAsTBU15U1FMMSYwJAYDVQQDEx1NeVNRTCBDUkwgdGVzdCBDQSBjZXJ0aWZpY2F0
-ZTAeFw0xMjA1MTcxNTA4MDBaFw00MjA1MTAxNTA4MDBaMGgxCzAJBgNVBAYTAkJH
-MRAwDgYDVQQIEwdQbG92ZGl2MQ8wDQYDVQQKEwZPcmFjbGUxDjAMBgNVBAsTBU15
-U1FMMSYwJAYDVQQDEx1NeVNRTCBDUkwgdGVzdCBDQSBjZXJ0aWZpY2F0ZTCBnzAN
-BgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA7exF4CLX0NWRh3Rf7he1xwfCS7PnE5NG
-lR9dCVQUmEA9DuYUXF45xXWHTnMkYtmFSmnENX1rdmwcjlao/p7+Iq7JQRRn1BE3
-jdMYAp2KNmSxiy+gui3V/cDNan2lwGtrYGQvJEW7qK0claDVQHkoX7EXl2Oh1R5C
-1BBwXY8uNEUCAwEAAaOBzTCByjAdBgNVHQ4EFgQUhavmp1eIfY2+62RTc5RkzUuN
-KRIwgZoGA1UdIwSBkjCBj4AUhavmp1eIfY2+62RTc5RkzUuNKRKhbKRqMGgxCzAJ
-BgNVBAYTAkJHMRAwDgYDVQQIEwdQbG92ZGl2MQ8wDQYDVQQKEwZPcmFjbGUxDjAM
-BgNVBAsTBU15U1FMMSYwJAYDVQQDEx1NeVNRTCBDUkwgdGVzdCBDQSBjZXJ0aWZp
-Y2F0ZYIJAPni85gOKwV8MAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADgYEA
-kPebVhTfxNtGpGf1g2jpcEVMXZcHBv0saAua7W160Ri+uN0IvP8QW9myUB+YsF2+
-bQuIuzCT+gQ08Tv2VtWGuxwx8397OAvR+f2HtcRjoLhGWZWotexP0K3fQu10Ty/9
-fGWq12DRcFVBiwvCO/HzL2ul2UixLYTpB2OS8DYEz10=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 -----END CERTIFICATE-----

mysql-test/std_data/crl-certificate-readme.txt

@@ -5,27 +5,27 @@ using openSSL.
 2. Create a new certification authority : CA.pl -newca
 3. Copy demoCA/cacert.pem to crl-ca-cert.pem
 4. Create one server certificate request : CA.pl -newreq
-5. Sign the server certificate request : CA.pl -signreq
+5. Sign the server certificate request : CA.pl -signCA
 6. Copy demoCA/newcert.pem to crl-server-cert.pem
 7. Remove the key from server's certificate key while copying it :
      openssl rsa -in newkey.pem -out crl-server-key.pem
 8. Create one client certificate request : CA.pl -newreq
-9. Sign the client certificate request : CA.pl -signreq
+9. Sign the client certificate request : CA.pl -signCA
 10. Copy demoCA/newcert.pem to crl-client-cert.pem
 11. Remove the key from client's certificate key while copying it :
      openssl rsa -in newkey.pem -out crl-client-key.pem
 12. Create one to-be-revoked client certificate request : CA.pl -newreq
-13. Sign the to-be-revoked client certificate request : CA.pl -signreq
-14. Copy demoCA/newcert.pem to crl-client-invalid-cert.pem
+13. Sign the to-be-revoked client certificate request : CA.pl -signCA
+14. Copy demoCA/newcert.pem to crl-client-cert-revoked.pem
 15. Remove the key from the to-be-revoked client's certificate
   key while copying it :
-     openssl rsa -in newkey.pem -out crl-client-invalid-key.pem
+     openssl rsa -in newkey.pem -out crl-client-key-revoked.pem
 16. Revoke the crl-client-invalid-cert.pem :
-     openssl ca -revoke crl-client-invalid-key.pem
+     openssl ca -revoke crl-client-key-revoked.pem
 17. Generate a CRL file :
      openssl ca -gencrl -crldays=3650 -out crl-client-revoked.crl
 18. Clean up all the files in the crldir directory
 19. Copy the CA certificate into it :
-     cp crl-ca-cert.pem `openssl -in crl-ca-cert.pem -noout -hash`.0
+     cp crl-ca-cert.pem `openssl x509 -in crl-ca-cert.pem -noout -hash`.0
 20. Copy the CRL file into it :
-     cp crl-client-revoked.crl `openssl -in crl-ca-cert.pem -noout -hash`.r0
+     cp crl-client-revoked.crl `openssl crl -in crl-ca-cert.pem -noout -hash`.r0

mysql-test/std_data/crl-client-cert.pem

@@ -2,61 +2,80 @@ Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number:
-            f9:e2:f3:98:0e:2b:05:7e
-        Signature Algorithm: sha1WithRSAEncryption
-        Issuer: C=BG, ST=Plovdiv, O=Oracle, OU=MySQL, CN=MySQL CRL test CA certificate
+            27:9a:6f:41:cc:a4:9a:73:13:55:a3:b6:f4:3f:71:d5:8a:a8:91:1f
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C=IN, ST=KA, O=Oracle, OU=MySQL, CN=MySQL CRL test ca certificate
         Validity
-            Not Before: May 17 15:18:14 2012 GMT
-            Not After : May 15 15:18:14 2022 GMT
-        Subject: C=BG, ST=Plovdiv, O=Oracle, OU=MySQL, CN=MySQL CRL test client certificate
+            Not Before: Jul  1 12:14:10 2019 GMT
+            Not After : Jun 30 12:14:10 2020 GMT
+        Subject: C=IN, ST=KA, L=Bangalore, O=Oracle, OU=MySQL, CN=MySQL CRL test client certificate
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
-            RSA Public Key: (1024 bit)
-                Modulus (1024 bit):
-                    00:d8:03:97:99:2f:54:86:ec:b5:79:4f:8f:ff:bb:
-                    b8:23:e0:9b:d3:d4:ba:40:2e:34:dd:ad:8c:2c:43:
-                    f9:7b:d5:4f:5c:ef:47:bd:e3:b2:ac:76:ea:b2:d5:
-                    97:dc:99:4e:fa:d8:13:48:a2:cb:ee:3f:40:7a:fe:
-                    af:f1:d8:cd:c8:5b:1f:f7:7c:a4:7f:cf:fe:02:91:
-                    e6:d8:39:ef:e8:4f:a8:ff:b6:78:29:78:72:24:a4:
-                    f0:e4:67:8a:41:50:5e:9d:6b:a8:4f:06:f2:b4:8e:
-                    22:f9:05:e6:31:03:f9:1b:a8:29:16:6d:7c:5d:bd:
-                    60:81:ac:6e:9c:63:5b:a4:41
+                RSA Public-Key: (2048 bit)
+                Modulus:
+                    00:d6:97:3a:d7:2b:cc:68:4a:7f:72:18:ab:74:7d:
+                    51:84:48:44:11:9f:d1:f2:ee:e0:40:6d:a0:23:fc:
+                    36:a2:44:ca:2c:13:60:62:f9:ce:45:54:ef:3d:ec:
+                    a8:6b:e0:02:66:10:89:1f:e7:bf:d2:2d:9c:79:e9:
+                    3f:37:ae:fc:da:b3:0d:5f:6a:84:86:6a:04:13:26:
+                    99:dd:c6:46:a3:e0:c1:1d:89:0b:4a:42:08:8e:d4:
+                    56:3b:12:5e:de:04:e1:b7:da:b5:73:ee:9c:7f:a8:
+                    04:f3:18:04:a7:5e:9d:a6:fd:b4:04:17:bb:3d:07:
+                    8b:2b:cd:29:cb:ca:6a:d1:70:5d:4f:e5:10:09:44:
+                    20:73:ef:65:87:0b:42:67:2c:1c:64:59:bd:56:ea:
+                    88:d4:f1:b1:31:d8:ee:8a:bb:3d:22:09:6a:68:ec:
+                    b4:c5:07:15:81:9e:ae:ee:72:d7:2d:67:df:bd:fd:
+                    c5:10:5e:e6:88:18:ad:2a:2d:e4:33:be:ac:f7:fe:
+                    f9:b9:40:54:69:f9:78:fe:57:81:93:89:49:a7:8b:
+                    64:8b:72:ea:ab:53:55:43:1e:ea:3a:cd:b0:cb:97:
+                    43:9b:70:cc:12:ef:22:08:55:d1:1c:ab:8b:1e:c1:
+                    d5:4f:15:3f:2b:f7:01:39:a0:74:33:ae:ea:45:25:
+                    af:2f
                 Exponent: 65537 (0x10001)
         X509v3 extensions:
-            X509v3 Basic Constraints: 
-                CA:FALSE
-            Netscape Comment: 
-                OpenSSL Generated Certificate
             X509v3 Subject Key Identifier: 
-                7A:9B:4D:5A:CD:9A:CB:14:B2:A5:D3:B0:89:24:6E:BC:8E:1E:99:1D
+                BF:48:07:97:37:D7:64:E6:86:B7:3F:0A:1B:C7:08:9A:35:B0:5B:48
             X509v3 Authority Key Identifier: 
-                keyid:85:AB:E6:A7:57:88:7D:8D:BE:EB:64:53:73:94:64:CD:4B:8D:29:12
+                keyid:A7:2E:CA:53:05:52:06:12:BD:ED:FF:CF:B8:BA:30:E7:7A:1F:96:46
 
-    Signature Algorithm: sha1WithRSAEncryption
-        ba:04:f4:20:39:e3:94:2b:5b:a4:18:2b:8a:0b:12:bd:58:7d:
-        0b:0c:cd:ab:b2:7c:7a:57:2f:8b:31:06:ce:6d:26:7c:50:5c:
-        74:fd:3c:21:8c:20:04:ef:55:e9:2a:fe:f5:35:2d:86:d0:1c:
-        9f:05:96:91:9e:2f:74:a7:50:db:55:dd:ba:ff:8a:9b:ce:50:
-        03:5d:e1:10:5b:a3:4b:d5:46:73:6f:52:e8:e5:0c:b6:23:7a:
-        22:1e:30:86:9f:34:d2:3e:66:2c:dc:b6:96:0d:ee:21:59:5c:
-        17:50:23:a5:9a:2d:37:d8:ef:85:23:c0:e8:84:14:df:95:35:
-        1a:18
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+         30:e8:b1:28:8d:f3:09:c8:58:a5:2a:2b:6e:19:ec:f4:3f:fe:
+         a0:b2:82:ee:08:5b:aa:94:2c:23:3a:b3:e5:14:43:21:f7:18:
+         23:00:c4:88:b7:b3:b2:c8:b0:31:a2:b3:60:b5:9e:3f:95:b1:
+         72:64:58:da:d7:8d:21:ef:85:93:6d:8d:46:a0:21:5b:c9:bd:
+         c6:ea:c6:ff:36:c7:82:d6:4f:71:cf:81:f5:72:af:b1:b9:03:
+         ea:a3:7c:2e:b8:67:ce:4b:32:d9:75:c9:5c:4e:2c:1c:c2:25:
+         95:6b:6d:d4:49:5a:c1:01:54:98:78:73:40:3f:05:e5:91:73:
+         fc:dd:88:4c:d3:c4:f9:9e:da:fe:cb:e0:a1:2f:6d:15:b5:d8:
+         c5:92:07:4a:bf:1e:0b:ac:f4:6e:a3:86:85:31:df:be:a0:90:
+         54:74:12:7c:d9:47:a9:f3:ed:c2:8e:69:0d:2e:51:eb:7b:9d:
+         b8:7d:cb:32:ac:65:bd:8f:52:97:41:8f:7b:ca:38:3f:49:77:
+         3c:4b:ac:b1:19:34:03:20:40:a3:9f:ad:79:c9:90:8f:08:8c:
+         6f:9b:a9:de:d5:31:35:e2:27:bb:14:36:06:28:19:30:49:a7:
+         ce:42:a7:19:61:2d:7a:94:1b:c6:15:86:4f:20:c1:49:a3:11:
+         86:b6:61:87
 -----BEGIN CERTIFICATE-----
-MIICzTCCAjagAwIBAgIJAPni85gOKwV+MA0GCSqGSIb3DQEBBQUAMGgxCzAJBgNV
-BAYTAkJHMRAwDgYDVQQIEwdQbG92ZGl2MQ8wDQYDVQQKEwZPcmFjbGUxDjAMBgNV
-BAsTBU15U1FMMSYwJAYDVQQDEx1NeVNRTCBDUkwgdGVzdCBDQSBjZXJ0aWZpY2F0
-ZTAeFw0xMjA1MTcxNTE4MTRaFw0yMjA1MTUxNTE4MTRaMGwxCzAJBgNVBAYTAkJH
-MRAwDgYDVQQIEwdQbG92ZGl2MQ8wDQYDVQQKEwZPcmFjbGUxDjAMBgNVBAsTBU15
-U1FMMSowKAYDVQQDEyFNeVNRTCBDUkwgdGVzdCBjbGllbnQgY2VydGlmaWNhdGUw
-gZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANgDl5kvVIbstXlPj/+7uCPgm9PU
-ukAuNN2tjCxD+XvVT1zvR73jsqx26rLVl9yZTvrYE0iiy+4/QHr+r/HYzchbH/d8
-pH/P/gKR5tg57+hPqP+2eCl4ciSk8ORnikFQXp1rqE8G8rSOIvkF5jED+RuoKRZt
-fF29YIGsbpxjW6RBAgMBAAGjezB5MAkGA1UdEwQCMAAwLAYJYIZIAYb4QgENBB8W
-HU9wZW5TU0wgR2VuZXJhdGVkIENlcnRpZmljYXRlMB0GA1UdDgQWBBR6m01azZrL
-FLKl07CJJG68jh6ZHTAfBgNVHSMEGDAWgBSFq+anV4h9jb7rZFNzlGTNS40pEjAN
-BgkqhkiG9w0BAQUFAAOBgQC6BPQgOeOUK1ukGCuKCxK9WH0LDM2rsnx6Vy+LMQbO
-bSZ8UFx0/TwhjCAE71XpKv71NS2G0ByfBZaRni90p1DbVd26/4qbzlADXeEQW6NL
-1UZzb1Lo5Qy2I3oiHjCGnzTSPmYs3LaWDe4hWVwXUCOlmi032O+FI8DohBTflTUa
-GA==
+MIIDvzCCAqegAwIBAgIUJ5pvQcykmnMTVaO29D9x1YqokR8wDQYJKoZIhvcNAQEL
+BQAwYzELMAkGA1UEBhMCSU4xCzAJBgNVBAgMAktBMQ8wDQYDVQQKDAZPcmFjbGUx
+DjAMBgNVBAsMBU15U1FMMSYwJAYDVQQDDB1NeVNRTCBDUkwgdGVzdCBjYSBjZXJ0
+aWZpY2F0ZTAeFw0xOTA3MDExMjE0MTBaFw0yMDA2MzAxMjE0MTBaMHsxCzAJBgNV
+BAYTAklOMQswCQYDVQQIDAJLQTESMBAGA1UEBwwJQmFuZ2Fsb3JlMQ8wDQYDVQQK
+DAZPcmFjbGUxDjAMBgNVBAsMBU15U1FMMSowKAYDVQQDDCFNeVNRTCBDUkwgdGVz
+dCBjbGllbnQgY2VydGlmaWNhdGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
+AoIBAQDWlzrXK8xoSn9yGKt0fVGESEQRn9Hy7uBAbaAj/DaiRMosE2Bi+c5FVO89
+7Khr4AJmEIkf57/SLZx56T83rvzasw1faoSGagQTJpndxkaj4MEdiQtKQgiO1FY7
+El7eBOG32rVz7px/qATzGASnXp2m/bQEF7s9B4srzSnLymrRcF1P5RAJRCBz72WH
+C0JnLBxkWb1W6ojU8bEx2O6Kuz0iCWpo7LTFBxWBnq7uctctZ9+9/cUQXuaIGK0q
+LeQzvqz3/vm5QFRp+Xj+V4GTiUmni2SLcuqrU1VDHuo6zbDLl0ObcMwS7yIIVdEc
+q4sewdVPFT8r9wE5oHQzrupFJa8vAgMBAAGjUzBRMB0GA1UdDgQWBBS/SAeXN9dk
+5oa3PwobxwiaNbBbSDAfBgNVHSMEGDAWgBSnLspTBVIGEr3t/8+4ujDneh+WRjAP
+BgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAw6LEojfMJyFilKitu
+Gez0P/6gsoLuCFuqlCwjOrPlFEMh9xgjAMSIt7OyyLAxorNgtZ4/lbFyZFja140h
+74WTbY1GoCFbyb3G6sb/NseC1k9xz4H1cq+xuQPqo3wuuGfOSzLZdclcTiwcwiWV
+a23USVrBAVSYeHNAPwXlkXP83YhM08T5ntr+y+ChL20VtdjFkgdKvx4LrPRuo4aF
+Md++oJBUdBJ82Uep8+3CjmkNLlHre524fcsyrGW9j1KXQY97yjg/SXc8S6yxGTQD
+IECjn615yZCPCIxvm6ne1TE14ie7FDYGKBkwSafOQqcZYS16lBvGFYZPIMFJoxGG
+tmGH
 -----END CERTIFICATE-----

mysql-test/std_data/crl-client-key.pem

@@ -1,15 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIICXQIBAAKBgQDYA5eZL1SG7LV5T4//u7gj4JvT1LpALjTdrYwsQ/l71U9c70e9
-47Ksduqy1ZfcmU762BNIosvuP0B6/q/x2M3IWx/3fKR/z/4CkebYOe/oT6j/tngp
-eHIkpPDkZ4pBUF6da6hPBvK0jiL5BeYxA/kbqCkWbXxdvWCBrG6cY1ukQQIDAQAB
-AoGBAL2RAXQcFhjGGEfaa6toaKOLlBSk5cI3CovTpmSeTo2+14PeNN5OuVkijrrc
-OQYNwELgZqPiwgZVmdeWNH+P3J2vo+QqfxskondSDM2ZDedvO8tc4W74oSQzsASr
-37ptEJlAdumzQ1XPxGwZi6E2KPzmTBQ4Q0j50UB2vagbR2cxAkEA7C3dVMyNYLew
-ycujuU7F4SQcYFY5/BMj6yanovBF80FRT2X+mxj3lSZux/tjZFvxeb9Q5vmJJRp6
-PUP/ROQVVQJBAOokfqS6jrvvNvqYZnMb54iDTP7Jx+EJyBJxYtJM53WC3NXarCQq
-EWyVD1KxJxxW1gfcmJbhVQYeUsictO24Uz0CQGEtxgJcYFfJfW6q4eUfqoAm8Z4a
-HKXB4mehchyzLLUYzTIUT5zVuxmdxLt4jr7+re9gbxN63ZlsuZt33RMlnjkCQGbF
-igkIEeqPv1QTXLSdxOz4pO0Y6HDweC8QMc4ZD2dW/1Om3fQpuugsLUOgmogn3V4q
-B5gCY+2BldiUYB4P0AkCQQDDkyhWJQvtXSLGFkfUBZ6PCzVfO+Pkb7tISQuDGT4J
-HY+UpnQBbe6WP2hGXzwaGw9rVYaA9IcvX8pOpWsCDk80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 -----END RSA PRIVATE KEY-----