snapshot of https://github.com/grpc/grpc-go.git (master, 2026-09-15; blobs > 131072B omitted)

security/advancedtls/testdata/crl/0b35a562.r0

@@ -0,0 +1 @@
+5.crl

security/advancedtls/testdata/crl/0b35a562.r1

@@ -0,0 +1 @@
+1.crl

security/advancedtls/testdata/crl/1.crl

@@ -0,0 +1,10 @@
+-----BEGIN X509 CRL-----
+MIIBYDCCAQYCAQEwCgYIKoZIzj0EAwIwgaUxCzAJBgNVBAYTAlVTMRMwEQYDVQQI
+EwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1Nb3VudGFpbiBWaWV3MRMwEQYDVQQKEwpH
+b29nbGUgTExDMSYwEQYDVQQLEwpQcm9kdWN0aW9uMBEGA1UECxMKY2FtcHVzLXNs
+bjEsMCoGA1UEAxMjUm9vdCBDQSAoMjAyMS0wMi0wMlQwNzozMDozNi0wODowMCkX
+DTIxMDIwMjE1MzAzNloXDTIxMDIwOTE1MzAzNlqgLzAtMB8GA1UdIwQYMBaAFPQN
+tnCIBcG4ReQgoVi0kPgTROseMAoGA1UdFAQDAgEAMAoGCCqGSM49BAMCA0gAMEUC
+IQDB9WEPBPHEo5xjCv8CT9okockJJnkLDOus6FypVLqj5QIgYw9/PYLwb41/Uc+4
+LLTAsfdDWh7xBJmqvVQglMoJOEc=
+-----END X509 CRL-----

security/advancedtls/testdata/crl/1ab871c8.r0

@@ -0,0 +1 @@
+2.crl

security/advancedtls/testdata/crl/2.crl

@@ -0,0 +1,10 @@
+-----BEGIN X509 CRL-----
+MIIBYDCCAQYCAQEwCgYIKoZIzj0EAwIwgaUxCzAJBgNVBAYTAlVTMRMwEQYDVQQI
+EwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1Nb3VudGFpbiBWaWV3MRMwEQYDVQQKEwpH
+b29nbGUgTExDMSYwEQYDVQQLEwpQcm9kdWN0aW9uMBEGA1UECxMKY2FtcHVzLXNs
+bjEsMCoGA1UEAxMjbm9kZSBDQSAoMjAyMS0wMi0wMlQwNzozMDozNi0wODowMCkX
+DTIxMDIwMjE1MzAzNloXDTIxMDIwOTE1MzAzNlqgLzAtMB8GA1UdIwQYMBaAFBjo
+V5Jnk/gp1k7fmWwkvTk/cF/IMAoGA1UdFAQDAgEAMAoGCCqGSM49BAMCA0gAMEUC
+IQDgjA1Vj/pNFtNRL0vFEdapmFoArHM2+rn4IiP8jYLsCAIgAj2KEHbbtJ3zl5XP
+WVW6ZyW7r3wIX+Bt3vLJWPrQtf8=
+-----END X509 CRL-----

security/advancedtls/testdata/crl/2f11f022.r0

@@ -0,0 +1,7 @@
+-----BEGIN X509 CRL-----
+MIHnMFICAQEwDQYJKoZIhvcNAQEMBQAwDDEKMAgGAioDDAI6KRcNMDkxMTEwMjMw
+MDAwWhcNMDkxMTExMDAwMDAwWqASMBAwDgYDVR0jBAcwBYADAQIDMA0GCSqGSIb3
+DQEBDAUAA4GBAMl2sjOjtOQ+OCsRyjM0IvqTn7lmdGJMvpYAym367JBamJPCbYrL
+MifCjCA1ra7gG0MweZbpm4SG2YLakwi1/B+XhApQ5VVv5SwDn6Yy5zr9ePLEF7Iy
+sP86e9s5XfOusLTW+Spre8q1vi7pJrRvUxhJGuUuLoM6Uhvh65ViilDJ
+-----END X509 CRL-----

security/advancedtls/testdata/crl/3.crl

@@ -0,0 +1,11 @@
+-----BEGIN X509 CRL-----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+-----END X509 CRL-----

security/advancedtls/testdata/crl/4.crl

@@ -0,0 +1,10 @@
+-----BEGIN X509 CRL-----
+MIIBYDCCAQYCAQEwCgYIKoZIzj0EAwIwgaUxCzAJBgNVBAYTAlVTMRMwEQYDVQQI
+EwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1Nb3VudGFpbiBWaWV3MRMwEQYDVQQKEwpH
+b29nbGUgTExDMSYwEQYDVQQLEwpQcm9kdWN0aW9uMBEGA1UECxMKY2FtcHVzLXNs
+bjEsMCoGA1UEAxMjbm9kZSBDQSAoMjAyMS0wMi0wMlQwNzozMTo1NC0wODowMCkX
+DTIxMDIwMjE1MzE1NFoXDTIxMDIwOTE1MzE1NFqgLzAtMB8GA1UdIwQYMBaAFIVn
+8tIFgZpIdhomgYJ2c5ULLzpSMAoGA1UdFAQDAgEAMAoGCCqGSM49BAMCA0gAMEUC
+ICupTvOqgAyRa1nn7+Pe/1vvlJPAQ8gUfTQsQ6XX3v6oAiEA08B2PsK6aTEwzjry
+pXqhlUNZFzgaXrVVQuEJbyJ1qoU=
+-----END X509 CRL-----

security/advancedtls/testdata/crl/5.crl

@@ -0,0 +1,10 @@
+-----BEGIN X509 CRL-----
+MIIBXzCCAQYCAQEwCgYIKoZIzj0EAwIwgaUxCzAJBgNVBAYTAlVTMRMwEQYDVQQI
+EwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1Nb3VudGFpbiBWaWV3MRMwEQYDVQQKEwpH
+b29nbGUgTExDMSYwEQYDVQQLEwpQcm9kdWN0aW9uMBEGA1UECxMKY2FtcHVzLXNs
+bjEsMCoGA1UEAxMjUm9vdCBDQSAoMjAyMS0wMi0wMlQwNzozMjo1Ny0wODowMCkX
+DTIxMDIwMjE1MzI1N1oXDTIxMDIwOTE1MzI1N1qgLzAtMB8GA1UdIwQYMBaAFN+g
+xTAtSTlb5Qqvrbp4rZtsaNzqMAoGA1UdFAQDAgEAMAoGCCqGSM49BAMCA0cAMEQC
+IHrRKjieY7w7gxvpkJAdszPZBlaSSp/c9wILutBTy7SyAiAwhaHfgas89iRfaBs2
+EhGIeK39A+kSzqu6qEQBHpK36g==
+-----END X509 CRL-----

security/advancedtls/testdata/crl/6.crl

@@ -0,0 +1,11 @@
+-----BEGIN X509 CRL-----
+MIIBiDCCAS8CAQEwCgYIKoZIzj0EAwIwgaUxCzAJBgNVBAYTAlVTMRMwEQYDVQQI
+EwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1Nb3VudGFpbiBWaWV3MRMwEQYDVQQKEwpH
+b29nbGUgTExDMSYwEQYDVQQLEwpQcm9kdWN0aW9uMBEGA1UECxMKY2FtcHVzLXNs
+bjEsMCoGA1UEAxMjbm9kZSBDQSAoMjAyMS0wMi0wMlQwNzozMjo1Ny0wODowMCkX
+DTIxMDIwMjE1MzI1N1oXDTIxMDIwOTE1MzI1N1owJzAlAhQAxSe/pGmyvzN7mxm5
+6ZJTYUXYuhcNMjEwMjAyMTUzMjU3WqAvMC0wHwYDVR0jBBgwFoAUpZ30UJXB4lI9
+j2SzodCtRFckrRcwCgYDVR0UBAMCAQEwCgYIKoZIzj0EAwIDRwAwRAIgRg3u7t3b
+oyV5FhMuGGzWnfIwnKclpT8imnp8tEN253sCIFUY7DjiDohwu4Zup3bWs1OaZ3q3
+cm+j0H/oe8zzCAgp
+-----END X509 CRL-----

security/advancedtls/testdata/crl/71eac5a2.r0

@@ -0,0 +1 @@
+4.crl

security/advancedtls/testdata/crl/7a1799af.r0

@@ -0,0 +1 @@
+3.crl

security/advancedtls/testdata/crl/8828a7e6.r0

@@ -0,0 +1 @@
+6.crl

security/advancedtls/testdata/crl/README.md

@@ -0,0 +1,92 @@
+# CRL Test Data
+
+This directory contains cert chains and CRL files for revocation testing.
+
+To print the chain, use a command like,
+
+```shell
+openssl crl2pkcs7 -nocrl -certfile security/crl/x509/client/testdata/revokedLeaf.pem | openssl pkcs7 -print_certs -text -noout
+```
+
+The crl file symlinks are generated with `openssl rehash`
+
+## unrevoked.pem
+
+A certificate chain with CRL files and unrevoked certs
+
+*   Subject: C=US, ST=California, L=Mountain View, O=Google LLC, OU=Production,
+    OU=campus-sln, CN=Root CA (2021-02-02T07:30:36-08:00)
+    *   1.crl
+
+NOTE: 1.crl file is symlinked with 5.crl to simulate two issuers that hash to
+the same value to test that loading multiple files works.
+
+*   Subject: C=US, ST=California, L=Mountain View, O=Google LLC, OU=Production,
+    OU=campus-sln, CN=node CA (2021-02-02T07:30:36-08:00)
+    *   2.crl
+
+## revokedInt.pem
+
+Certificate chain where the intermediate is revoked
+
+*   Subject: C=US, ST=California, L=Mountain View, O=Google LLC, OU=Production,
+    OU=campus-sln, CN=Root CA (2021-02-02T07:31:54-08:00)
+    *   3.crl
+*   Subject: C=US, ST=California, L=Mountain View, O=Google LLC, OU=Production,
+    OU=campus-sln, CN=node CA (2021-02-02T07:31:54-08:00)
+    *   4.crl
+
+## revokedLeaf.pem
+
+Certificate chain where the leaf is revoked
+
+*   Subject: C=US, ST=California, L=Mountain View, O=Google LLC, OU=Production,
+    OU=campus-sln, CN=Root CA (2021-02-02T07:32:57-08:00)
+    *   5.crl
+*   Subject: C=US, ST=California, L=Mountain View, O=Google LLC, OU=Production,
+    OU=campus-sln, CN=node CA (2021-02-02T07:32:57-08:00)
+    *   6.crl
+
+## Test Data for testing CRL providers functionality
+
+To generate test data please run provider_create.sh script. All the files have
+`provider_` prefix.
+
+We need to generate the following artifacts for testing CRL provider:
+* server self signed CA cert
+* client self signed CA cert
+* server cert signed by client CA
+* client cert signed by server CA
+* empty crl file
+* crl file containing information about revoked server cert
+* crl file by 'malicious' CA which contains the same issuer with original CA
+
+
+All the commands are provided in provider_create.sh script. Please find the
+description below.
+
+1. The first two commands generate self signed CAs for client and server:
+   - provider_server_trust_key.pem
+   - provider_server_trust_cert.pem
+   - provider_client_trust_key.pem
+   - provider_client_trust_cert.pem
+
+2. Generate client and server certs signed by the CAs above:
+   - provider_server_cert.pem
+   - provider_client_cert.pem
+
+3. The next 2 commands create 2 files needed for CRL issuing:
+   - provider_crlnumber.txt
+   - provider_index.txt
+
+4. The next 3 commands generate an empty CRL file and a CRL file containing
+revoked server cert:
+   - provider_crl_empty.pem
+   - provider_crl_server_revoked.pem
+
+5. The final section contains commands to generate CRL file by 'malicious' CA.
+Note that we use Subject Key Identifier from previously created
+provider_client_trust_cert.pem to generate malicious certs / CRL.
+   - provider_malicious_client_trust_key.pem
+   - provider_malicious_client_trust_cert.pem
+   - provider_malicious_crl_empty.pem

security/advancedtls/testdata/crl/deee447d.r0

@@ -0,0 +1 @@
+5.crl

security/advancedtls/testdata/crl/provider_ca.cnf

@@ -0,0 +1,14 @@
+[req]
+distinguished_name = req_distinguished_name
+prompt = no
+x509_extensions = extensions
+
+[req_distinguished_name]
+C = US
+ST = CA
+L = SVL
+O = Internet Widgits Pty Ltd
+
+[extensions]
+basicConstraints = CA:true
+subjectKeyIdentifier = hash

security/advancedtls/testdata/crl/provider_client_cert.key

@@ -0,0 +1,52 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

security/advancedtls/testdata/crl/provider_client_cert.pem

@@ -0,0 +1,32 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

security/advancedtls/testdata/crl/provider_client_trust_cert.pem

@@ -0,0 +1,32 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

security/advancedtls/testdata/crl/provider_client_trust_key.pem

@@ -0,0 +1,52 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

security/advancedtls/testdata/crl/provider_create.sh

@@ -0,0 +1,116 @@
+#!/bin/bash
+
+# The script contains a sequence of commands described in README.md
+# Generate client/server self signed CAs and certs.
+openssl req -x509 -newkey rsa:4096 \
+  -keyout provider_server_trust_key.pem \
+  -out provider_server_trust_cert.pem \
+  -days 3650 \
+  -config provider_ca.cnf \
+  -nodes
+
+openssl req -x509 -newkey rsa:4096 \
+  -keyout provider_client_trust_key.pem \
+  -out provider_client_trust_cert.pem \
+  -days 3650 \
+  -config provider_ca.cnf \
+  -nodes
+
+openssl req -newkey rsa:4096                                                \
+  -keyout provider_server_cert.key                                          \
+  -out provider_new_cert.csr                                                \
+  -nodes                                                                    \
+  -subj "/C=US/ST=CA/L=DUMMYCITY/O=Internet Widgits Pty Ltd/CN=foo.bar.com" \
+  -sha256
+
+openssl x509 -req                      \
+  -in provider_new_cert.csr            \
+  -out provider_server_cert.pem        \
+  -CA provider_client_trust_cert.pem   \
+  -CAkey provider_client_trust_key.pem \
+  -CAcreateserial                      \
+  -days 3650                           \
+  -sha256                              \
+  -extfile provider_extensions.conf
+
+openssl req -newkey rsa:4096                                        \
+  -keyout provider_client_cert.key                                  \
+  -out provider_new_cert.csr                                        \
+  -nodes                                                            \
+  -subj "/C=US/ST=CA/O=Internet Widgits Pty Ltd/CN=foo.bar.hoo.com" \
+  -sha256
+
+openssl x509 -req                      \
+  -in provider_new_cert.csr            \
+  -out provider_client_cert.pem        \
+  -CA provider_server_trust_cert.pem   \
+  -CAkey provider_server_trust_key.pem \
+  -CAcreateserial                      \
+  -days 3650                           \
+  -sha256                              \
+  -extfile provider_extensions.conf
+
+# Generate files need for CRL issuing.
+
+echo "1000" > provider_crlnumber.txt
+
+touch provider_index.txt
+
+# Generate two CRLs.
+
+openssl ca -gencrl                       \
+  -keyfile provider_client_trust_key.pem \
+  -cert provider_client_trust_cert.pem   \
+  -out provider_crl_empty.pem            \
+  -config provider_crl.cnf
+
+openssl ca -revoke provider_server_cert.pem \
+  -keyfile provider_client_trust_key.pem    \
+  -cert provider_client_trust_cert.pem      \
+  -config provider_crl.cnf
+
+openssl ca -gencrl                       \
+  -keyfile provider_client_trust_key.pem \
+  -cert provider_client_trust_cert.pem   \
+  -out provider_crl_server_revoked.pem   \
+  -config provider_crl.cnf
+
+# Generate malicious CRLs.
+
+openssl genrsa                                      \
+  -out provider_malicious_client_trust_key.pem 4096
+
+SubjectKeyIdentifier=$(openssl x509 -in provider_client_trust_cert.pem \
+  -noout                                              \
+  -text                                               \
+  | awk '/Subject Key Identifier/ {getline; print $1;}')
+
+
+sed "s/subjectKeyIdentifier = hash/subjectKeyIdentifier = $SubjectKeyIdentifier/g" \
+  provider_extensions.conf > provider_extensions.conf.tmp &&
+  mv provider_extensions.conf.tmp provider_extensions.conf
+
+openssl req -new                                       \
+  -key provider_malicious_client_trust_key.pem         \
+  -out cert_malicious_request.csr                      \
+  -subj "/C=US/ST=CA/L=SVL/O=Internet Widgits Pty Ltd"
+
+openssl x509 -req                                  \
+  -in cert_malicious_request.csr                   \
+  -signkey provider_malicious_client_trust_key.pem \
+  -out provider_malicious_client_trust_cert.pem    \
+  -days 3650                                       \
+  -extfile provider_extensions.conf                \
+  -extensions extensions
+
+openssl ca -gencrl                                 \
+  -keyfile provider_malicious_client_trust_key.pem \
+  -cert provider_malicious_client_trust_cert.pem   \
+  -out provider_malicious_crl_empty.pem            \
+  -config provider_crl.cnf
+
+sed "s/subjectKeyIdentifier = .*/subjectKeyIdentifier = hash/g" \
+  provider_extensions.conf > provider_extensions.conf.tmp &&
+  mv provider_extensions.conf.tmp provider_extensions.conf
+
+rm -f *.csr provider_{index.txt*,crlnumber.txt*,ca_client.cnf,ca_server.cnf} *.srl

security/advancedtls/testdata/crl/provider_crl.cnf

@@ -0,0 +1,14 @@
+[ ca ]
+default_ca = my_ca
+
+[ my_ca ]
+default_md = sha256
+database = provider_index.txt
+crlnumber = provider_crlnumber.txt
+default_crl_days = 30
+default_crl_hours = 1
+crl_extensions = crl_ext
+
+[crl_ext]
+# Authority Key Identifier extension
+authorityKeyIdentifier=keyid:always,issuer:always

security/advancedtls/testdata/crl/provider_crl_empty.pem

@@ -0,0 +1,20 @@
+-----BEGIN X509 CRL-----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+-----END X509 CRL-----

security/advancedtls/testdata/crl/provider_crl_server_revoked.pem

@@ -0,0 +1,20 @@
+-----BEGIN X509 CRL-----
+MIIDWjCCAUICAQEwDQYJKoZIhvcNAQELBQAwSzELMAkGA1UEBhMCVVMxCzAJBgNV
+BAgMAkNBMQwwCgYDVQQHDANTVkwxITAfBgNVBAoMGEludGVybmV0IFdpZGdpdHMg
+UHR5IEx0ZBcNMjYwMjEyMDc1NDE5WhcNMjYwMzE0MDg1NDE5WjAnMCUCFBvcyvmo
+ckWEbX+0FnMz8yaiiqgFFw0yNjAyMTIwNzU0MTlaoIGZMIGWMIGGBgNVHSMEfzB9
+gBRtzIeqIVWKfu2ZlV/a5xsDVu3tQ6FPpE0wSzELMAkGA1UEBhMCVVMxCzAJBgNV
+BAgMAkNBMQwwCgYDVQQHDANTVkwxITAfBgNVBAoMGEludGVybmV0IFdpZGdpdHMg
+UHR5IEx0ZIIUBsTfmfdYI6inXskJAgjSkYhI1P8wCwYDVR0UBAQCAhABMA0GCSqG
+SIb3DQEBCwUAA4ICAQAH7QS5Gbd30cyWj/ATmYuDG2pWOLkTh/kTVHG9aAAv0UsQ
+s5M4tTxNX50FcPE3aobVOL0pEAdjq3Cnss1BWQkJqDtewHrV99XmcTBMAvxo0SFi
++fRSgwDR9NaXsDPFJZIn4uHAKKxvA2qBCqKCPJySfIUdzVZ4nsPHAh0LPBGNuf7+
+UVakIhdp8jUQavWqlO1Y3VF5IFpiIQEWFQR9KAbZsuH6FsAeC2S+HUzGaVgmALCw
+t6OldN4bMSOJakGDwY+3Ih3oNqcYxqAlq+N72X30eonPDloPfvImfqRgJVhD1y5X
+vxnln0e47d6I6QUMdNmgbAP1Gs49ntJFk+t99E1XTDsxc7PHNeQ+lHJEh2WsdXrB
+m0Ds8YbfN9dsWFiqhILyydm3ei1+JvNGMaQnaVAdUw9wsJDwbVdEDMq13VPDY3H9
+jyL7UNOjOSlNJQYpATORtzznzEdq8iZgCyo3cbyBFgXiQ9qdck0FDRXZYp0SPQB7
+X+1EjYzFgrPmRMZdItMw147Fe87uj1XGvjo5XID6EOCw/xxVIZCLXijCqDtW44X8
+U1W305YxjugQw/wgCUdGFvtThEPUkTKC4O5olBSP6msd10eBY224Lgw9Cn2x0Z5/
+QrgyPv7ef9tglfT+mP6BIqkfUWLiGiaxGQvSgY+vH7CoZEqZ5uZ9m7NArbHMag==
+-----END X509 CRL-----

security/advancedtls/testdata/crl/provider_extensions.conf

@@ -0,0 +1,5 @@
+[extensions]
+subjectKeyIdentifier = hash
+authorityKeyIdentifier = keyid,issuer
+basicConstraints = CA:FALSE
+keyUsage = digitalSignature, keyEncipherment

security/advancedtls/testdata/crl/provider_malicious_client_trust_cert.pem

@@ -0,0 +1,31 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

security/advancedtls/testdata/crl/provider_malicious_client_trust_key.pem

@@ -0,0 +1,52 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

security/advancedtls/testdata/crl/provider_malicious_crl_empty.pem

@@ -0,0 +1,20 @@
+-----BEGIN X509 CRL-----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==
+-----END X509 CRL-----

security/advancedtls/testdata/crl/provider_server_cert.key

@@ -0,0 +1,52 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

security/advancedtls/testdata/crl/provider_server_cert.pem

@@ -0,0 +1,32 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

security/advancedtls/testdata/crl/provider_server_trust_cert.pem

@@ -0,0 +1,32 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

security/advancedtls/testdata/crl/provider_server_trust_key.pem

@@ -0,0 +1,52 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

security/advancedtls/testdata/crl/revokedInt.pem

@@ -0,0 +1,58 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIDizCCAzKgAwIBAgIUAK6BGFvOeQUak65aL+XAQhr5LrcwCgYIKoZIzj0EAwIw
+gaUxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1N
+b3VudGFpbiBWaWV3MRMwEQYDVQQKEwpHb29nbGUgTExDMSYwEQYDVQQLEwpQcm9k
+dWN0aW9uMBEGA1UECxMKY2FtcHVzLXNsbjEsMCoGA1UEAxMjUm9vdCBDQSAoMjAy
+MS0wMi0wMlQwNzozMTo1NC0wODowMCkwIBcNMjEwMjAyMTUzMTU0WhgPOTk5OTEy
+MzEyMzU5NTlaMIGlMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEW
+MBQGA1UEBxMNTW91bnRhaW4gVmlldzETMBEGA1UEChMKR29vZ2xlIExMQzEmMBEG
+A1UECxMKUHJvZHVjdGlvbjARBgNVBAsTCmNhbXB1cy1zbG4xLDAqBgNVBAMTI25v
+ZGUgQ0EgKDIwMjEtMDItMDJUMDc6MzE6NTQtMDg6MDApMFkwEwYHKoZIzj0CAQYI
+KoZIzj0DAQcDQgAEye6UOlBos8Q3FFBiLahD9BaLTA18bO4MTPyv35T3lppvxD5X
+U/AnEllOnx5OMtMjMBbIQjSkMbiQ9xNXoSqB6aOCATowggE2MA4GA1UdDwEB/wQE
+AwIBBjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDwYDVR0TAQH/BAUw
+AwEB/zAdBgNVHQ4EFgQUhWfy0gWBmkh2GiaBgnZzlQsvOlIwHwYDVR0jBBgwFoAU
+eq/TQ959KbWk/um08jSTXogXpWUwMwYDVR0RBCwwKoYoc3BpZmZlOi8vbm9kZS5j
+YW1wdXMtc2xuLnByb2QuZ29vZ2xlLmNvbTA7BgNVHR4BAf8EMTAvoC0wK4YpY3Nj
+cy10ZWFtLm5vZGUuY2FtcHVzLXNsbi5wcm9kLmdvb2dsZS5jb20wQgYDVR0fBDsw
+OTA3oDWgM4YxaHR0cDovL3N0YXRpYy5jb3JwLmdvb2dsZS5jb20vY3JsL2NhbXB1
+cy1zbG4vbm9kZTAKBggqhkjOPQQDAgNHADBEAiA79rPu6ZO1/0qB6RxL7jVz1200
+UTo8ioB4itbTzMnJqAIgJqp/Rc8OhpsfzQX8XnIIkl+SewT+tOxJT1MHVNMlVhc=
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

security/advancedtls/testdata/crl/revokedLeaf.pem

@@ -0,0 +1,59 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

security/advancedtls/testdata/crl/unrevoked.pem

@@ -0,0 +1,58 @@
+-----BEGIN CERTIFICATE-----
+MIIDBDCCAqqgAwIBAgIUALy864QhnkTdceLH52k2XVOe8IQwCgYIKoZIzj0EAwIw
+gaUxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1N
+b3VudGFpbiBWaWV3MRMwEQYDVQQKEwpHb29nbGUgTExDMSYwEQYDVQQLEwpQcm9k
+dWN0aW9uMBEGA1UECxMKY2FtcHVzLXNsbjEsMCoGA1UEAxMjUm9vdCBDQSAoMjAy
+MS0wMi0wMlQwNzozMDozNi0wODowMCkwIBcNMjEwMjAyMTUzMDM2WhgPOTk5OTEy
+MzEyMzU5NTlaMIGlMQswCQYDVQQGEwJVUzETMBEGA1UECBMKQ2FsaWZvcm5pYTEW
+MBQGA1UEBxMNTW91bnRhaW4gVmlldzETMBEGA1UEChMKR29vZ2xlIExMQzEmMBEG
+A1UECxMKUHJvZHVjdGlvbjARBgNVBAsTCmNhbXB1cy1zbG4xLDAqBgNVBAMTI1Jv
+b3QgQ0EgKDIwMjEtMDItMDJUMDc6MzA6MzYtMDg6MDApMFkwEwYHKoZIzj0CAQYI
+KoZIzj0DAQcDQgAEYv/JS5hQ5kIgdKqYZWTKCO/6gloHAmIb1G8lmY0oXLXYNHQ4
+qHN7/pPtlcHQp0WK/hM8IGvgOUDoynA8mj0H9KOBszCBsDAOBgNVHQ8BAf8EBAMC
+AQYwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA8GA1UdEwEB/wQFMAMB
+Af8wHQYDVR0OBBYEFPQNtnCIBcG4ReQgoVi0kPgTROseMB8GA1UdIwQYMBaAFPQN
+tnCIBcG4ReQgoVi0kPgTROseMC4GA1UdEQQnMCWGI3NwaWZmZTovL2NhbXB1cy1z
+bG4ucHJvZC5nb29nbGUuY29tMAoGCCqGSM49BAMCA0gAMEUCIQDwBn20DB4X/7Uk
+Q5BR8JxQYUPxOfvuedjfeA8bPvQ2FwIgOEWa0cXJs1JxarILJeCXtdXvBgu6LEGQ
+3Pk/bgz8Gek=
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----