Fix schema registry integration test (SslAuth) by regenerating secrets (#1884)

The certificate in the current schema registry uses an outdated hash (SHA1)
which is deprecated at most places and simply doesn't work at others.

This replaces those with new secrets (the certificate uses SHA256). Also
adds a script to regenerate secrets in case of expiry or deprecation of
SHA256.

Author: milindl

test/Confluent.SchemaRegistry.IntegrationTests/secrets/generate_secrets_linux.sh

@@ -0,0 +1,29 @@
+#!/usr/bin/env bash
+
+# Clone the script to generate the stores, and run the script with the correct params.
+git clone https://github.com/confluentinc/confluent-platform-security-tools.git --depth=1
+
+export COUNTRY="US"
+export STATE="CA"
+export ORGANIZATION_UNIT="Confluent Inc"
+export CITY="Mountain View"
+export PASSWORD="cnf123"
+
+bash confluent-platform-security-tools/kafka-generate-ssl-automatic.sh
+
+# Copy the files into the right place.
+cp keystore/kafka.keystore.jks schema-registry.keystore.jks
+cp truststore/kafka.truststore.jks schema-registry.truststore.jks
+cp cert-signed schema-registry-ca.cer
+
+# Duplicate to docker secrets.
+# Docker containers will need to be restarted after this step.
+cp schema-registry.keystore.jks  ../../docker/secrets/schema-registry.keystore.jks
+cp schema-registry.truststore.jks  ../../docker/secrets/schema-registry.truststore.jks
+cp schema-registry-ca.cer ../../docker/secrets/schema-registry-ca.cer
+
+# Cleanup the script, and the files which are not required.
+rm -rf confluent-platform-security-tools
+rm -rf truststore
+rm -rf keystore
+rm cert-file cert-signed

test/Confluent.SchemaRegistry.IntegrationTests/secrets/schema-registry-ca.cer

@@ -1,21 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIIDjDCCAnQCCQDXQgKZaZA7dDANBgkqhkiG9w0BAQUFADCBhzELMAkGA1UEBhMC
-VVMxCzAJBgNVBAgMAkNBMRYwFAYDVQQHDA1Nb3VudGFpbiBWaWV3MRgwFgYDVQQK
-DA9Db25mbHVlbnQsIEluYy4xHzAdBgNVBAsMFkluZm9ybWF0aW9uIFRlY2hub2xv
-Z3kxGDAWBgNVBAMMD2NhLmNvbmZsdWVudC5pbzAeFw0yMDA0MTExOTEyMTVaFw00
-MDA0MDYxOTEyMTVaMIGHMQswCQYDVQQIEwJDQTELMAkGA1UEBhMCVVMxFjAUBgNV
-BAcTDU1vdW50YWluIFZpZXcxGDAWBgNVBAoTD0NvbmZsdWVudCwgSW5jLjEfMB0G
-A1UECxMWSW5mb3JtYXRpb24gVGVjaG5vbG9neTEYMBYGA1UEAxMPc2NoZW1hLXJl
-Z2lzdHJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5p/X+7ZL3+9B
-CLulhqdmd0YFgOAvN9DQrLAArbtsOJCtXOjhGLpXdeKDpfC4VupmhsYaCiuT4AYw
-ddlrrFEqh/osRZg4QBTjT+vXdj/qEnXUUWkPtWdVKcuQ33y1meAVo6dTYGzbiyKO
-awn2rDSyGE+rWHfocJFNHho02vF0Z2ckP+u4Pmaqze3Ae14StgjqUNx48fB01I0Z
-fWAowxYutI9PyPjt7pRbUrbFLK9bynhUtuRgq04QEIgWKHJTfNAX3ZsSCAPvhZN4
-BoMzeC3J5f/wlva9NIxnWVJE7S4XVusFhVd6c1sc25dWuOtcnO/e45YGx6s2IV/j
-aMo8sTiGVwIDAQABMA0GCSqGSIb3DQEBBQUAA4IBAQBe/bFwt+JQuhB5NDHhlXa7
-vnG+GhHo+5uP+bBnvB/PGj5Dp7cAnfWl4+Se+1xk1lGahJg1/7vV2ddfMPR5UISc
-nQBthxcdo4g3iVRW8wGe5+DkUkn01MovUkoCetulmdCyOz1IQmSgu+QJH+JBDsIC
-NBXad4Xlg0tMYXbd9Tsg6hdmsJy+5BlDjO1xUohftxLx7xEFtTydRTMSCbue3weF
-DlN+P9tfqk+gnGhZAhhjeMneM1FpEtBkp/e5GV3rUc4JESQpoOafxaEwElofyT+K
-7F6gdZ+EpLUhhbJgxq+QCm/i7e9Jjnk+ec6oDXoW+wxID0/E0EVIvfS/UYZWD3yX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 -----END CERTIFICATE-----

test/Confluent.SchemaRegistry.IntegrationTests/secrets/schema-registry.keystore.jks

@@ -1,21 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIIDjDCCAnQCCQDXQgKZaZA7dDANBgkqhkiG9w0BAQUFADCBhzELMAkGA1UEBhMC
-VVMxCzAJBgNVBAgMAkNBMRYwFAYDVQQHDA1Nb3VudGFpbiBWaWV3MRgwFgYDVQQK
-DA9Db25mbHVlbnQsIEluYy4xHzAdBgNVBAsMFkluZm9ybWF0aW9uIFRlY2hub2xv
-Z3kxGDAWBgNVBAMMD2NhLmNvbmZsdWVudC5pbzAeFw0yMDA0MTExOTEyMTVaFw00
-MDA0MDYxOTEyMTVaMIGHMQswCQYDVQQIEwJDQTELMAkGA1UEBhMCVVMxFjAUBgNV
-BAcTDU1vdW50YWluIFZpZXcxGDAWBgNVBAoTD0NvbmZsdWVudCwgSW5jLjEfMB0G
-A1UECxMWSW5mb3JtYXRpb24gVGVjaG5vbG9neTEYMBYGA1UEAxMPc2NoZW1hLXJl
-Z2lzdHJ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5p/X+7ZL3+9B
-CLulhqdmd0YFgOAvN9DQrLAArbtsOJCtXOjhGLpXdeKDpfC4VupmhsYaCiuT4AYw
-ddlrrFEqh/osRZg4QBTjT+vXdj/qEnXUUWkPtWdVKcuQ33y1meAVo6dTYGzbiyKO
-awn2rDSyGE+rWHfocJFNHho02vF0Z2ckP+u4Pmaqze3Ae14StgjqUNx48fB01I0Z
-fWAowxYutI9PyPjt7pRbUrbFLK9bynhUtuRgq04QEIgWKHJTfNAX3ZsSCAPvhZN4
-BoMzeC3J5f/wlva9NIxnWVJE7S4XVusFhVd6c1sc25dWuOtcnO/e45YGx6s2IV/j
-aMo8sTiGVwIDAQABMA0GCSqGSIb3DQEBBQUAA4IBAQBe/bFwt+JQuhB5NDHhlXa7
-vnG+GhHo+5uP+bBnvB/PGj5Dp7cAnfWl4+Se+1xk1lGahJg1/7vV2ddfMPR5UISc
-nQBthxcdo4g3iVRW8wGe5+DkUkn01MovUkoCetulmdCyOz1IQmSgu+QJH+JBDsIC
-NBXad4Xlg0tMYXbd9Tsg6hdmsJy+5BlDjO1xUohftxLx7xEFtTydRTMSCbue3weF
-DlN+P9tfqk+gnGhZAhhjeMneM1FpEtBkp/e5GV3rUc4JESQpoOafxaEwElofyT+K
-7F6gdZ+EpLUhhbJgxq+QCm/i7e9Jjnk+ec6oDXoW+wxID0/E0EVIvfS/UYZWD3yX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 -----END CERTIFICATE-----