Adding openssl config for test certs. Replacing certs. Removing test …

…skip.

Makefile

@@ -29,9 +29,7 @@ build:
 test:
 	go test -race -count=1 -parallel=1 -v ./test/...
 	go test -race -count=1 -parallel=1 -v ./collector/...
-
-	# TODO: Fix certs use "insecure algorithm SHA1-RSA", then remove GODEBUG
-	GODEBUG=x509sha1=1 go test -race -count=1 -parallel=1 -v ./exporter/...
+	go test -race -count=1 -parallel=1 -v ./exporter/...
 
 .PHONY: test-cover
 test-cover:

exporter/exporter_test.go

@@ -30,10 +30,10 @@ import (
 )
 
 const (
-	clientCert = "../test/certs/client-cert.pem"
-	clientKey  = "../test/certs/client-key.pem"
-	serverCert = "../test/certs/server-cert.pem"
-	serverKey  = "../test/certs/server-key.pem"
+	clientCert = "../test/certs/client.pem"
+	clientKey  = "../test/certs/client.key"
+	serverCert = "../test/certs/server.pem"
+	serverKey  = "../test/certs/server.key"
 	caCertFile = "../test/certs/ca.pem"
 )
 
@@ -163,7 +163,6 @@ func TestExporter(t *testing.T) {
 }
 
 func TestExporterHTTPS(t *testing.T) {
-	t.SkipNow()
 	opts := getDefaultExporterTestOptions()
 	opts.ListenAddress = "localhost"
 	opts.ListenPort = 0

test/certs/ca.pem

@@ -1,20 +1,25 @@
 -----BEGIN CERTIFICATE-----
-MIIDXDCCAkQCCQDI2Vsry8+BDDANBgkqhkiG9w0BAQsFADBwMQswCQYDVQQGEwJV
-UzELMAkGA1UECAwCQ0ExEDAOBgNVBAoMB1N5bmFkaWExEDAOBgNVBAsMB25hdHMu
-aW8xEjAQBgNVBAMMCWxvY2FsaG9zdDEcMBoGCSqGSIb3DQEJARYNZGVyZWtAbmF0
-cy5pbzAeFw0xOTEwMTcxMzAzNThaFw0yOTEwMTQxMzAzNThaMHAxCzAJBgNVBAYT
-AlVTMQswCQYDVQQIDAJDQTEQMA4GA1UECgwHU3luYWRpYTEQMA4GA1UECwwHbmF0
-cy5pbzESMBAGA1UEAwwJbG9jYWxob3N0MRwwGgYJKoZIhvcNAQkBFg1kZXJla0Bu
-YXRzLmlvMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohX2dXdHIDM5
-yZDWk96b0mwRTHhBIOKtMPTTs/zKmlAgjjDxW7kSg0JimTNds9YbJ33FhcEJKXtV
-KH3Cn0uyZPS1VcTzPr7XP2QI+9SqqLuahkHAhgqoRwK62fTFJgzdZO0f9w9WwzMi
-gGk/v7KkKFa/9xKLCa9DTEJ9FA34HuYoBxXMZvypDm8d+0kxOCdThpzhKeucE4ya
-jFlvOP9/l7GyjlczzAD/nt/QhPfSeIx1MF0ICj5qzwPD/jB1ekoL9OShoHvoEyXo
-UO13GMdVmZqwJcS7Vk5XNEZoH0cxSw/SrZGCE9SFjR1t8TAe3QZiZ9E8EAg4IzJQ
-jfR2II5LiQIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBIwib+0xLth/1+URtgQFn8
-dvQNqnJjlqC27U48qiTCTC5vJWbQDqUg9o6gtwZyYEHQ7dMmn68ozDzcGTCxaikV
-n01Bj2ijODK96Jrm/P5aVkP5Cn06FfudluZI2Q/A1cqTsa8V4rj02PpwCcLEaDqX
-yhztlhbKypWrlGuWpVlDBWstyRar98vvRK1XEyBu2NHp2fy49cwJCub4Cmz920fh
-oiIwzXIKtfnf1GEjUnsuFPMgCxvhjirYNPWWjqaBldrM/dBJqwTyZf/p6g40vufN
-JJDc65c4tyRwBSBdFn+Q4zD44M0AR/8THAeIfsT42lyl8fMV5A4fe1nAVJDC4Z/H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 -----END CERTIFICATE-----

test/certs/client.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

test/certs/client.pem

@@ -0,0 +1,26 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

test/certs/generate-certs.sh

@@ -0,0 +1,17 @@
+#!/bin/bash
+
+# Generate CA
+openssl req -nodes -new -x509 -days 3650 -extensions v3_ca -keyout ca.key -out ca.pem -config openssl.cnf
+
+# Generate CSRs
+openssl req -nodes -new -keyout server.key -out server.csr -config openssl.cnf
+openssl req -nodes -new -keyout client.key -out client.csr -config openssl.cnf
+
+# Sign CSRs
+openssl x509 -req -extensions v3_req -extfile openssl.cnf -in server.csr -CA ca.pem -CAkey ca.key -CAcreateserial -out server.pem
+openssl x509 -req -extensions v3_req -extfile openssl.cnf -in client.csr -CA ca.pem -CAkey ca.key -CAcreateserial -out client.pem
+
+# These are test certs, cleanup extaneous files
+rm ca.key
+rm *.csr
+rm *.srl

test/certs/openssl.cnf

@@ -0,0 +1,48 @@
+[ ca ]
+default_ca      = CA_default
+
+[ CA_default ]
+private_key     = ca.key
+certificate     = ca.pem
+new_certs_dir   = .
+default_days    = 365
+default_md      = sha256
+policy          = policy_match
+
+[ policy_match ]
+countryName             = match
+stateOrProvinceName     = match
+organizationName        = match
+organizationalUnitName  = optional
+commonName              = supplied
+emailAddress            = optional
+
+[ req ]
+default_bits            = 2048
+distinguished_name      = req_distinguished_name
+x509_extensions         = v3_req
+prompt                  = no
+
+[ req_distinguished_name ]
+countryName             = US
+stateOrProvinceName     = CA
+organizationName        = Synadia
+organizationalUnitName  = NATS.io
+emailAddress            = info@synadia.com
+commonName              = localhost
+
+[ v3_ca ]
+subjectKeyIdentifier    = hash
+authorityKeyIdentifier  = keyid:always,issuer:always
+basicConstraints        = CA:TRUE
+
+[ v3_req ]
+subjectKeyIdentifier    = hash
+authorityKeyIdentifier  = keyid:always,issuer:always
+basicConstraints        = CA:FALSE
+keyUsage                = digitalSignature, keyEncipherment
+subjectAltName          = @alt_names
+
+[alt_names]
+DNS.1 = localhost
+IP.1 = 127.0.0.1

test/certs/server.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

test/certs/server.pem

@@ -0,0 +1,26 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----