CDRIVER-4746 update x509 certificates and re-enable x509 client auth test on macOS (#1478)

Author: rcsanchez97

.evergreen/scripts/run-auth-tests.sh

@@ -101,10 +101,9 @@ fi
 
 if [[ "${ssl}" != "OFF" ]]; then
   # FIXME: CDRIVER-2008 for the cygwin check
-  # FIXME: BUILD-18145/CDRIVER-4746 for the darwin check
-  if [[ "${OSTYPE}" != "cygwin" && ! ( "${OSTYPE}" =~ "darwin" ) ]]; then
+  if [[ "${OSTYPE}" != "cygwin" ]]; then
     echo "Authenticating using X.509"
-    LD_LIBRARY_PATH="${openssl_lib_prefix}" "${ping}" "mongodb://CN=client,OU=kerneluser,O=10Gen,L=New York City,ST=New York,C=US@${auth_host}/?ssl=true&authMechanism=MONGODB-X509&sslClientCertificateKeyFile=src/libmongoc/tests/x509gen/legacy-x509.pem&sslCertificateAuthorityFile=src/libmongoc/tests/x509gen/legacy-ca.crt&sslAllowInvalidHostnames=true&${c_timeout}"
+    LD_LIBRARY_PATH="${openssl_lib_prefix}" "${ping}" "mongodb://CN=client,OU=kerneluser,O=10Gen,L=New York City,ST=New York,C=US@${auth_host}/?ssl=true&authMechanism=MONGODB-X509&sslClientCertificateKeyFile=src/libmongoc/tests/x509gen/ldaptest-client-key-and-cert.pem&sslCertificateAuthorityFile=src/libmongoc/tests/x509gen/ldaptest-ca-cert.crt&sslAllowInvalidHostnames=true&${c_timeout}"
   fi
 
   echo "Connecting to Atlas Free Tier"

src/libmongoc/tests/test-mongoc-uri.c

@@ -1623,8 +1623,8 @@ test_mongoc_uri_tls_ssl (const char *tls,
                   "mongodb://CN=client,OU=kerneluser,O=10Gen,L=New York City,"
                   "ST=New York,[email protected]/?"
                   "%s=true&authMechanism=MONGODB-X509&"
-                  "%s=tests/x509gen/legacy-x509.pem&"
-                  "%s=tests/x509gen/legacy-ca.crt&"
+                  "%s=tests/x509gen/ldaptest-client-key-and-cert.pem&"
+                  "%s=tests/x509gen/ldaptest-ca-cert.crt&"
                   "%s=true",
                   tls,
                   tlsCertificateKeyFile,
@@ -1642,13 +1642,13 @@ test_mongoc_uri_tls_ssl (const char *tls,
 
    ASSERT_CMPSTR (mongoc_uri_get_option_as_utf8 (
                      uri, MONGOC_URI_TLSCERTIFICATEKEYFILE, "none"),
-                  "tests/x509gen/legacy-x509.pem");
+                  "tests/x509gen/ldaptest-client-key-and-cert.pem");
    ASSERT_CMPSTR (mongoc_uri_get_option_as_utf8 (
                      uri, MONGOC_URI_TLSCERTIFICATEKEYFILEPASSWORD, "none"),
                   "none");
    ASSERT_CMPSTR (
       mongoc_uri_get_option_as_utf8 (uri, MONGOC_URI_TLSCAFILE, "none"),
-      "tests/x509gen/legacy-ca.crt");
+      "tests/x509gen/ldaptest-ca-cert.crt");
    ASSERT (!mongoc_uri_get_option_as_bool (
       uri, MONGOC_URI_TLSALLOWINVALIDCERTIFICATES, false));
    ASSERT (mongoc_uri_get_option_as_bool (

src/libmongoc/tests/x509gen/ldaptest-ca-cert.crt

@@ -0,0 +1,123 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            98:49:52:9a:3f:8d:7a:07
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C = US, ST = New York, L = New York City, O = 10Gen, OU = Kernel, CN = My Cert Authority, emailAddress = root@lazarus
+        Validity
+            Not Before: Nov 13 16:28:12 2023 GMT
+            Not After : Nov  8 16:28:12 2043 GMT
+        Subject: C = US, ST = New York, L = New York City, O = 10Gen, OU = Kernel, CN = My Cert Authority, emailAddress = root@lazarus
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (4096 bit)
+                Modulus:
+                    00:e4:3b:67:2c:1f:8d:3b:39:f8:aa:06:f6:07:e5:
+                    76:0f:6c:0e:a9:ae:49:f8:aa:c5:d6:ea:b9:b4:92:
+                    79:5b:d4:98:e4:76:1a:6f:6a:f4:bb:e8:72:5b:b9:
+                    83:91:32:37:ae:fd:70:43:b9:7e:8f:e4:c3:bc:5a:
+                    1a:4a:6b:a2:e7:29:41:58:22:52:d0:67:18:54:32:
+                    75:4e:2d:54:87:13:b9:ac:6e:57:1a:d9:4c:aa:d0:
+                    b2:a2:35:43:b9:d5:f9:2f:d2:7c:f4:7c:70:46:2e:
+                    45:86:89:c7:c5:e2:7b:dd:f0:2d:74:92:c7:a1:87:
+                    66:cc:3f:2f:f5:d6:18:73:ce:cb:80:e2:33:3f:ca:
+                    30:77:b7:fb:49:f9:33:42:cc:e2:fe:21:fd:3a:17:
+                    1f:f9:0c:47:b6:ff:1b:0b:c3:d2:15:2a:8c:86:27:
+                    55:e3:e6:0d:fd:2b:c3:ad:da:0a:d6:69:13:37:3f:
+                    1b:f6:d1:c1:2d:13:c1:ee:de:07:0a:a5:80:ee:c5:
+                    7a:7d:ec:dc:e3:a2:a2:14:41:60:ed:be:4c:2e:2e:
+                    8a:bf:70:36:c7:b3:d0:49:e9:04:ab:45:cb:7d:78:
+                    ac:4f:0b:32:45:c0:60:e3:1d:72:69:1c:a3:a1:fd:
+                    d7:37:49:47:dd:cd:e8:9b:75:2c:0c:8e:45:9d:8f:
+                    b2:cd:15:d2:40:55:94:ff:12:a7:af:70:6a:a3:80:
+                    ca:9c:6f:a1:32:31:78:0c:c5:a6:88:80:44:d3:d4:
+                    39:99:31:b6:72:b5:9d:95:bc:b8:b2:f3:b4:3a:b7:
+                    0d:0b:fb:d8:8d:49:05:64:7b:69:2b:dc:a6:57:cc:
+                    7c:30:b9:44:8c:ed:af:a5:90:9e:f1:d6:d7:75:3d:
+                    a6:dc:6b:02:71:d6:c4:d9:9a:db:94:18:55:6a:8b:
+                    4f:43:d0:14:58:63:6b:df:e3:0d:ff:94:f0:98:59:
+                    d0:24:5a:da:e8:54:9d:16:04:26:26:f9:9a:77:75:
+                    6d:99:4a:a1:06:4e:7b:78:2e:b7:44:f0:b2:c1:31:
+                    df:89:65:5a:cd:b1:7e:c1:c6:ec:88:92:0f:1e:31:
+                    9f:a3:52:4d:6f:95:6f:5f:cc:58:04:b0:9d:8b:a5:
+                    48:7c:39:65:99:27:57:74:75:3d:9f:a6:1e:8b:67:
+                    0e:a7:1b:bf:3b:27:c5:89:21:9a:c4:8f:f8:99:3b:
+                    59:e5:8d:8a:f6:de:ea:57:8e:68:77:a9:67:8c:e1:
+                    44:b9:e6:a7:c5:c8:1d:a3:d5:d9:50:71:9b:96:88:
+                    ac:37:01:4d:33:93:6b:ab:4c:50:57:53:a3:77:21:
+                    e9:71:0d:10:60:2b:0f:3d:5a:90:b3:97:bb:cb:97:
+                    47:a8:95
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                98:CB:19:A3:5A:20:67:94:72:76:5D:B9:9E:18:38:84:46:DD:C2:68
+            X509v3 Authority Key Identifier: 
+                98:CB:19:A3:5A:20:67:94:72:76:5D:B9:9E:18:38:84:46:DD:C2:68
+            X509v3 Basic Constraints: 
+                CA:TRUE
+    Signature Algorithm: sha256WithRSAEncryption
+    Signature Value:
+        00:ac:9f:a6:a7:4c:bd:6c:3b:5c:df:5a:22:bc:f6:18:eb:d6:
+        7f:b5:1b:3f:f5:ee:11:42:e4:56:c2:f9:b7:56:fe:2b:82:c0:
+        7f:3e:fd:e3:ff:62:a4:ec:6c:97:7b:06:0e:ed:78:54:06:06:
+        30:f1:c5:06:2e:21:e8:69:bc:09:0a:b2:31:2a:d7:15:c2:de:
+        9f:c3:ea:03:c9:8d:e7:52:87:86:a3:79:a9:95:bc:0e:32:31:
+        14:49:7d:23:f8:4c:9e:1e:01:f1:37:74:ec:18:bc:44:91:74:
+        17:45:db:1a:64:fc:4f:ad:b2:93:b4:0e:8e:92:a1:fe:e3:84:
+        76:32:79:1b:a5:b4:cf:b9:3e:59:8a:6d:7b:83:c0:20:5b:11:
+        b6:4d:7e:c6:33:4f:7c:92:ce:04:a2:7d:3e:d4:39:ce:8d:9d:
+        ce:e6:c8:9e:30:a5:92:4a:e0:9c:66:98:ae:9c:b2:75:8e:d5:
+        63:cc:b3:d6:57:3c:c8:64:59:ce:95:35:6d:27:a2:43:75:b2:
+        dd:f0:63:56:2c:2d:7b:42:43:b9:df:46:f9:61:37:20:f2:5b:
+        07:e6:fd:a8:dc:9a:bf:f5:35:fa:25:55:7a:72:8f:af:5e:9f:
+        fa:b7:8d:5e:1e:46:85:88:1c:bd:f7:c8:2c:97:89:13:32:22:
+        15:b0:78:96:bb:ab:ef:df:63:bd:af:c2:ff:da:7e:3d:79:b9:
+        89:91:f1:94:e5:a2:b8:7a:14:74:c0:16:ff:f6:d9:c7:80:d3:
+        97:fd:a5:d3:1f:c7:00:b3:71:34:e5:14:0b:a0:bc:09:0f:b8:
+        72:48:b5:fa:8d:99:6d:c5:11:5e:30:7d:07:23:32:86:33:f4:
+        40:79:91:cb:6f:06:63:a4:e7:af:70:cf:3f:5f:e8:17:94:e9:
+        b4:22:93:2f:aa:f6:06:f2:05:cf:eb:b2:3c:91:9d:ac:dc:49:
+        43:f0:05:1e:04:de:ad:c1:43:e7:97:bd:b3:c2:ad:19:fc:cf:
+        b1:7a:7a:da:29:70:ff:e0:3f:73:ea:fe:15:e2:87:e4:e8:c4:
+        13:1d:d6:35:e6:ac:c3:d0:ac:41:a5:3b:33:63:ce:dd:05:12:
+        f9:8b:4b:06:e4:1d:a9:e1:82:1f:1e:fb:72:05:4c:31:11:a2:
+        11:02:f3:56:0a:7d:19:68:27:77:84:5b:8a:47:d1:f9:18:5c:
+        f5:6f:b6:f6:3c:e1:79:29:8f:3b:f3:83:69:46:ee:a4:00:95:
+        8c:8e:69:b0:51:12:e8:4d:ef:e2:d5:ac:02:f1:84:8f:f0:ac:
+        0e:f0:56:ad:fd:61:4f:d1:bd:83:9a:ea:92:36:45:fd:e5:4d:
+        a9:59:41:e6:ac:4e:7e:44
+-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

src/libmongoc/tests/x509gen/ldaptest-client-key-and-cert.pem

@@ -0,0 +1,166 @@
+Certificate:
+    Data:
+        Version: 1 (0x0)
+        Serial Number:
+            c7:5f:88:65:ae:bd:c0:d9
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: C = US, ST = New York, L = New York City, O = 10Gen, OU = Kernel, CN = My Cert Authority, emailAddress = root@lazarus
+        Validity
+            Not Before: Nov 13 22:13:47 2023 GMT
+            Not After : Feb 10 22:13:47 2026 GMT
+        Subject: C = US, ST = New York, L = New York City, O = 10Gen, OU = kerneluser, CN = client
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (4096 bit)
+                Modulus:
+                    00:c0:77:d9:7a:d5:c9:18:bc:d1:ee:9d:b7:21:16:
+                    7d:f8:06:ca:2d:f2:33:6c:ec:5f:be:6b:07:2b:f8:
+                    9e:25:22:57:67:66:3c:8d:87:ad:41:65:d6:79:f4:
+                    cd:32:0d:51:88:9a:4f:e6:97:7c:ba:02:af:37:d0:
+                    d1:35:ba:05:6d:d2:28:ae:42:6b:50:37:93:17:5b:
+                    03:c0:e5:c4:55:e9:57:a9:2e:ce:67:91:01:09:92:
+                    f5:c7:e4:18:33:a2:c2:a9:8a:0c:b7:06:9e:2c:c2:
+                    aa:07:1e:1a:48:f9:5e:cb:b0:fb:4d:f1:d0:d8:06:
+                    34:4b:fe:97:60:6f:89:ca:b7:9b:0a:10:12:d4:33:
+                    e8:90:00:5f:98:2a:03:cc:76:81:19:17:fb:1c:dd:
+                    9a:c4:7f:a7:9e:c6:48:2e:89:2a:ba:88:bc:23:d6:
+                    49:fa:0c:24:96:90:f7:68:2f:02:79:fb:bf:7a:d7:
+                    6d:13:65:a0:1a:48:86:46:39:2b:4f:ce:74:8e:ab:
+                    e5:11:a3:47:15:92:2a:6a:b6:fd:9f:fc:0e:f2:01:
+                    a9:97:02:fc:a3:54:09:68:33:77:59:b6:ba:8e:ed:
+                    52:f2:2d:63:5a:cd:bc:e2:fe:f8:68:26:f0:e3:71:
+                    33:66:8a:ff:3b:1a:4a:3c:48:16:0f:28:1d:27:28:
+                    9a:3f:5c:de:26:15:dc:d1:72:63:b1:10:ca:5f:70:
+                    d1:36:40:d9:d3:d1:c1:a4:a8:66:69:b1:67:54:ee:
+                    ba:e4:69:3e:c2:e1:ad:dd:91:4e:88:7e:f7:61:6b:
+                    3a:8d:ca:dd:4c:38:e7:9c:32:5c:e7:70:fa:9f:ce:
+                    91:da:d2:ec:e6:f8:d5:c3:c4:b9:d6:37:ac:47:56:
+                    ec:cf:1e:d4:f0:a2:93:de:a6:7b:6b:79:d5:2e:f7:
+                    c9:62:dd:35:1e:63:dd:f8:5c:06:c2:22:1a:b1:65:
+                    2d:52:13:c2:13:43:5b:4b:25:16:30:ac:e0:3e:6a:
+                    f9:e3:9f:d8:5b:7d:f9:c6:29:cd:bd:45:6d:60:75:
+                    95:30:d0:e8:72:08:d6:d4:8b:0d:ec:cb:40:4f:55:
+                    ab:0f:6d:4f:d0:0d:52:3d:24:aa:3d:19:a7:74:5b:
+                    c6:e3:62:5e:45:f9:a1:0f:a4:47:38:b9:40:6b:d3:
+                    5b:2d:64:87:ea:c1:cd:25:5c:08:32:32:97:41:ea:
+                    14:8f:4b:08:0c:88:ef:03:4c:b7:2c:41:62:05:ca:
+                    e9:32:9d:dc:96:20:4e:85:0e:c4:6e:9e:22:fe:b2:
+                    55:19:22:cd:27:50:33:20:75:37:58:68:f3:46:90:
+                    c7:47:d0:51:4e:d8:fb:55:ba:37:ac:02:c0:94:fd:
+                    77:49:07
+                Exponent: 65537 (0x10001)
+    Signature Algorithm: sha256WithRSAEncryption
+    Signature Value:
+        52:36:c6:7e:34:df:3b:63:34:93:fe:31:e4:02:73:48:a4:fc:
+        04:5c:ea:2b:79:b1:3e:ba:3a:c6:8d:38:4c:42:ab:89:ad:66:
+        ce:93:a9:a2:ee:38:e8:fc:46:79:28:d1:eb:9d:7c:36:24:aa:
+        55:cd:62:0b:5e:5c:a6:d3:b5:64:1a:8f:b4:74:87:a0:2b:07:
+        90:11:fb:b8:97:58:ff:b2:e2:02:01:9d:cf:b8:5a:78:7e:cf:
+        c6:5a:64:ab:29:01:34:55:c7:bf:00:ff:f9:ec:27:ba:11:85:
+        d2:80:93:c9:b1:89:09:13:44:13:bd:df:01:f7:fa:f0:1b:4c:
+        b0:b1:ac:bc:e5:48:d1:7a:48:c5:f7:a8:36:d2:a8:c9:66:c6:
+        52:ae:0b:8c:bb:29:30:7d:dc:8b:02:78:3a:3e:78:ce:cd:cc:
+        f5:f4:17:2d:d0:17:95:14:3a:d4:45:08:18:1a:a9:f1:af:f6:
+        6c:81:5d:d5:a9:f7:53:9b:98:0e:f7:64:09:7c:32:7d:36:52:
+        44:ba:20:bc:5b:9b:18:50:20:0c:21:d2:83:51:36:85:41:ef:
+        66:a4:18:12:3a:95:06:92:3c:e9:f7:e8:74:62:18:78:0b:33:
+        f3:db:55:94:bf:fd:87:2c:46:c0:f5:47:e0:5b:02:aa:38:1b:
+        75:17:01:fb:12:e0:26:f2:fd:c5:16:9f:c9:ad:d1:24:d8:3b:
+        c0:89:7f:46:2f:a6:a4:40:e0:62:aa:44:88:a8:bc:2f:70:44:
+        3e:52:b3:6b:58:42:7c:fe:4f:1f:16:77:68:c2:11:e3:6e:ac:
+        19:42:25:fe:f3:c2:9d:04:ca:d7:49:30:72:29:14:80:a8:f5:
+        64:9b:41:74:dc:e7:6f:d6:ae:d7:c4:02:c8:93:fe:0b:cf:d0:
+        a6:e1:db:98:97:6b:ac:e3:d3:f7:51:da:9b:8e:23:95:29:59:
+        45:df:72:e4:1b:1e:19:ac:4f:59:37:ea:f2:62:28:89:d9:c4:
+        a0:a3:f8:8f:b0:26:03:2d:e6:c9:ba:e2:ae:88:49:da:1f:6c:
+        a6:55:fd:a0:35:79:01:de:a7:be:01:2b:bb:89:65:b6:f1:1f:
+        ae:24:34:11:ea:9c:43:0d:90:c4:39:4a:6f:58:a4:37:5e:82:
+        da:86:24:ce:31:50:b1:9e:fd:d1:6e:91:55:10:2c:e0:99:3b:
+        61:3d:f3:4a:8a:52:57:e7:52:4b:ee:c5:60:08:58:29:fe:37:
+        49:3f:5a:a1:62:8b:8a:83:0d:d9:d7:9d:82:61:9a:3c:dd:41:
+        83:ca:75:9b:4c:2d:52:cb:ca:23:b2:4c:eb:77:12:55:6c:db:
+        a7:29:d3:8a:6d:97:a9:7d
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN PRIVATE KEY-----
+MIIJQgIBADANBgkqhkiG9w0BAQEFAASCCSwwggkoAgEAAoICAQDAd9l61ckYvNHu
+nbchFn34Bsot8jNs7F++awcr+J4lIldnZjyNh61BZdZ59M0yDVGImk/ml3y6Aq83
+0NE1ugVt0iiuQmtQN5MXWwPA5cRV6VepLs5nkQEJkvXH5BgzosKpigy3Bp4swqoH
+HhpI+V7LsPtN8dDYBjRL/pdgb4nKt5sKEBLUM+iQAF+YKgPMdoEZF/sc3ZrEf6ee
+xkguiSq6iLwj1kn6DCSWkPdoLwJ5+796120TZaAaSIZGOStPznSOq+URo0cVkipq
+tv2f/A7yAamXAvyjVAloM3dZtrqO7VLyLWNazbzi/vhoJvDjcTNmiv87Gko8SBYP
+KB0nKJo/XN4mFdzRcmOxEMpfcNE2QNnT0cGkqGZpsWdU7rrkaT7C4a3dkU6Ifvdh
+azqNyt1MOOecMlzncPqfzpHa0uzm+NXDxLnWN6xHVuzPHtTwopPepntredUu98li
+3TUeY934XAbCIhqxZS1SE8ITQ1tLJRYwrOA+avnjn9hbffnGKc29RW1gdZUw0Ohy
+CNbUiw3sy0BPVasPbU/QDVI9JKo9Gad0W8bjYl5F+aEPpEc4uUBr01stZIfqwc0l
+XAgyMpdB6hSPSwgMiO8DTLcsQWIFyukyndyWIE6FDsRuniL+slUZIs0nUDMgdTdY
+aPNGkMdH0FFO2PtVujesAsCU/XdJBwIDAQABAoICABSpyVOCuEBLpU406IBI5eVG
+9VXRduvuxKiw3Og/nNrnwPJ862tWcadfw5L8UTtaarJ7vrBG+0ENILqhVJSsEAEm
+Wu+6ecL29HfBcbm38Ug38Q1c1RQRYUch2/lF58NDahrBk3Pi5gBwNcjl1nSXMTI1
+IgXQPFe08tBl2OKllumIpMCD0UGvAPzUzW6MtDOzVVDYXkFPGVqXSeul5gH4//le
+zLQcQXzy6MqxbZ5lzaJDAN+zWSaH9pRbzO6lHJ1I0QKwObuXB/6s3pjuZHRUn1Yk
+D40C6RSv5QKm491h3M2TdSBC9zO8etb0AL9NzvbcJGSR76zsuaOXKace62JU3ZpX
+1DSwqpwhqTHtr6Evf11TxXFukw1F3ixtPGvSkj71xLtU63IPB+Ye8GCPS+gfX6HV
+cdbrAPBKUSJeVvD26+jocArNtGh5rt8LbUbhwmW/BgNOR6Pz4XVydWb+ZRQZxpAU
+KoIMqSpOj0NV0x3CWUcs2UjLZlMPgA0PXcXy/KbSppU1HpbfwWoHKnsJx8wGNU7p
+gFHrt8BG9l9Co6gueJqkPchYPomOrjl5342rDqN8YBMojR4ZJA7D3grxru7zDl7A
+Ng4vtnlOL5Y46C6Hc7V072ABxxV9jow8XQrGaUjEsZuZDI2B9a73rJUg3wWFS1bR
+F/wPzvwZ0L/SlWvrf6DhAoIBAQD8UW59R/jjXsYyE8fimeS5YngeijMdWvwbhbDU
+pWMBSwGwaQRD5EzUNlv1+QdMMPh2Cin656uAetaRcCkDB7D/Sth2SvgyOBjyqOCu
+ZrvkgYxqzEcx+S1mnEivgJTWP8xuynibMNYEAOzOfOMbmAsLfxcAsu7TJfLmBsiw
+iLSIwM/OwXzljcUH5IYygZ36O304aoJ9EHU8fSrVSrJpwpuSLvI854JOOtQrDIaL
+PKWXkwmXbjpk0lasHUykWUyRusm4p3tVVipCDenUCWIdkpWm0J/Xqs+RcEUF5vhL
+vB5zkthjSMXAYyh5K9hQiAnlXKs5OBuqSDELjUG17qQ/TlDrAoIBAQDDRtclV2Zy
+l1fFxQqPzAcLqKbL8LfN3cqa8cHUAV2adv09P1sIEWnYN1yATMC8Y85DrWfaUb+t
+gA1ejrove0QUSXR8A9Ft0+sR4SxT29BFI44vD407ADJTOBw5MzWescBrwj8UHPpj
+lyamZmK/vRUWzu1CQgiBKApcklzH0Q6+Zdsi/rMor+NlTcYiMzzAN/rlYfk7zKrU
+Ki2M6sS41rVKnuimjdAUSrvhwPDqmpBm+A+xErFHhrgI/uqg6TwBTew85OnVzFWp
+9Ss1f6zBMz5YBcPHPwvPfD0EmRdOUxzcuc0YShK8Fcr20muq0usC/6NE6du42WxB
+6x6lHayZEIFVAoIBAGvJ6daRUYzoZujrtF9keOaNX11EkrN+s+aaBUHCaXoa7dzL
+8CuEsyGRG1YIDYsJ/IqIqwhpwcVANLuq24pU1dMpyTE3s7HYbyfy5xD6CFiE01So
+cd2yYifMqex3lJ22YYIO8tjxUuwg7QkFJwwZttYxc8Uzq3z+YDbOPRvVOrKVE/Fy
+jQWPu9U0VfPrlW5ZzZO1RIti5YJywkKeB3vQzB71+Tv1dqAu14aQckW3IdKP2PAd
+AcsiZC5g0eX/1AsJbbV5ruF0ztarFPIlFAooHdBGnZJHgSbTfFkaI4ZPFf8vg0te
+wkP+2EJzbZRxmTCnlun5wy/KaVFTBfhPu1DkBwMCggEBAIIBNJTgpgzeIwpAjzKC
+o6IoartVjBjbctpK3z70lcuTMi9HcaRia3QOD2A/OQVy8MxvsrdPO2wX106/eMbJ
+qt5StOEnbZNPxa0GmwtNSU/uRuef0+eWzupGbcvLAwSe1Dspe/M5A52v8IRRn6aF
+DHg91QkKizzpWlSdAHXrAYTSrNyUctRAnQRBjgoQ0H4sBrYVzub38DcFyYOKfOON
+1e5S8xKHUSNhScoXOI0Hz+EtfszlY+75iqY6iBwOiutXZFJ6GA9FVTasSVL5qBqL
+shLJ67hHieZdkQXxoel8PbfZXuivz982JwTBu/pjJyC87oafpq9e2Mrd7G4C3nic
+220CggEAVWGiqv7uszFgIigB828FPqDC1bwMKDWXk6TBOK0gC+8azx1uAC4l0XAe
+13mTW6CT6zwqYwIxqchMgQOQa1B6havpjxd4BdXr4Z69akjpCQOUUGM+buK2OStN
+l/whybmGZiePHr+TtLqbBtmmFgssBSjyYOZATsug9+lCKTOPH28gVjZILTsqkloD
+3cK9q7hTJPjiMoCekws4daSt9EXBKN5pFNw9rc7x4uL9l9RXtR+K1dmzKXwwQ6o2
+Jj5Q4X6RwoYVpDU9nJVFf/NZCGs4g/ntsJy/ko0j6lTmPFDNZ1C5Nd/JrbyJiCXz
+TPIbwOq4Rz45eHdV/YplUdifaDeNlg==
+-----END PRIVATE KEY-----