Browse Source

Support SAN/dnsName for restricted trust (#91946)

This commit extends the TLS restricted trust model to allow reading from
alternative fields from the X509 certificate. Prior to this commit the only
supported (hard coded) value that could be used with restricted trust
is the SAN/otherName/CN value. This commit introduces support to read
from other fields from the X509 certificate. This commit also introduces
support to read from SAN/dnsName if configured. Any fields read from the
certificate will be used to match against the restricted trust file and if any
of the values match to the restricted trust file, then restricted trust is allowed.
Only if none of the values match then the restricted trust denied.

SAN/otherName/CN is the default, and SAN/dnsName can be used in addition
or in place of SAN/otherName/CN. The possible configuration values are:
 
     *.trust_restrictions.x509_fields: ["subjectAltName.otherName.commonName", "subjectAltName.dnsName"]

To help support testing, all of the existing certificates have been updated
to include a SAN/dnsName that matches the SAN/otherName/CN. This
allows the tests to randomize which field(s) are used to match for restricted trust.
This also has the side effect of making this commit larger than expected in
terms of lines of change. A readme has been included with copy-able commands
to recreate the certificates as needed.

Additionally, a CCS REST test has been introduced that uses the restricted trust.
To support this new CCS REST test the private keys for the test certificates are also
included in this commit as well as the gradle configuration needed to share those
certificates across projects.
Jake Landis 2 years ago
parent
commit
26d9bdd280
100 changed files with 2223 additions and 708 deletions
  1. 5 0
      docs/changelog/91946.yaml
  2. 4 0
      libs/ssl-config/src/main/java/org/elasticsearch/common/ssl/SslConfigurationLoader.java
  3. 7 0
      x-pack/plugin/core/build.gradle
  4. 8 2
      x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/ssl/RestrictedTrustConfig.java
  5. 54 20
      x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/ssl/RestrictedTrustManager.java
  6. 37 5
      x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/ssl/SSLConfigurationSettings.java
  7. 14 1
      x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/ssl/SslSettingsLoader.java
  8. 4 1
      x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/ssl/RestrictedTrustConfigTests.java
  9. 35 4
      x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/ssl/RestrictedTrustManagerTests.java
  10. 30 0
      x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/ssl/SSLConfigurationSettingsTests.java
  11. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c1.crt
  12. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c1.key
  13. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c2.crt
  14. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c2.key
  15. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c3.crt
  16. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c3.key
  17. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c4.crt
  18. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c4.key
  19. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c5.crt
  20. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c5.key
  21. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c6.crt
  22. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c6.key
  23. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c7.crt
  24. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c7.key
  25. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c8.crt
  26. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c8.key
  27. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c1.crt
  28. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c1.key
  29. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c2.crt
  30. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c2.key
  31. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c3.crt
  32. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c3.key
  33. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c4.crt
  34. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c4.key
  35. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c5.crt
  36. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c5.key
  37. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c6.crt
  38. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c6.key
  39. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c7.crt
  40. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c7.key
  41. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c8.crt
  42. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c8.key
  43. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c1.crt
  44. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c1.key
  45. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c2.crt
  46. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c2.key
  47. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c3.crt
  48. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c3.key
  49. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c4.crt
  50. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c4.key
  51. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c5.crt
  52. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c5.key
  53. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c6.crt
  54. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c6.key
  55. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c7.crt
  56. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c7.key
  57. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c8.crt
  58. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c8.key
  59. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c1.crt
  60. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c1.key
  61. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c2.crt
  62. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c2.key
  63. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c3.crt
  64. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c3.key
  65. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c4.crt
  66. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c4.key
  67. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c5.crt
  68. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c5.key
  69. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c6.crt
  70. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c6.key
  71. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c7.crt
  72. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c7.key
  73. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c8.crt
  74. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c8.key
  75. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c1.crt
  76. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c1.key
  77. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c2.crt
  78. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c2.key
  79. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c3.crt
  80. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c3.key
  81. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c4.crt
  82. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c4.key
  83. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c5.crt
  84. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c5.key
  85. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c6.crt
  86. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c6.key
  87. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c7.crt
  88. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c7.key
  89. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c8.crt
  90. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c8.key
  91. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n6.c1.crt
  92. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n6.c1.key
  93. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n6.c2.crt
  94. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n6.c2.key
  95. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n6.c3.crt
  96. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n6.c3.key
  97. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n6.c4.crt
  98. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n6.c4.key
  99. 18 15
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n6.c5.crt
  100. 27 0
      x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n6.c5.key

+ 5 - 0
docs/changelog/91946.yaml

@@ -0,0 +1,5 @@
+pr: 91946
+summary: Support SAN/dnsName for restricted trust
+area: TLS
+type: enhancement
+issues: []

+ 4 - 0
libs/ssl-config/src/main/java/org/elasticsearch/common/ssl/SslConfigurationLoader.java

@@ -355,6 +355,10 @@ public abstract class SslConfigurationLoader {
         return resolveSetting(settingKey, basePath::resolve, null);
     }
 
+    protected List<String> resolveList(String settingKey, List<String> defaultList) {
+        return resolveListSetting(settingKey, Function.identity(), defaultList);
+    }
+
     private String expandSettingKey(String key) {
         return settingPrefix + key;
     }

+ 7 - 0
x-pack/plugin/core/build.gradle

@@ -26,6 +26,11 @@ tasks.named("dependencyLicenses").configure {
   mapping from: /commons-.*/, to: 'commons' // pulled in by rest client
 }
 
+configurations {
+  signedCerts
+  rootCert
+}
+
 dependencies {
   compileOnly project(":server")
   api project(':libs:elasticsearch-grok')
@@ -59,6 +64,8 @@ dependencies {
 
   yamlRestTestImplementation project(':x-pack:plugin:core')
   javaRestTestImplementation(testArtifact(project(xpackModule('core'))))
+  signedCerts fileTree("src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed")
+  rootCert files("src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca.crt")
 }
 
 ext.expansions = [

+ 8 - 2
x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/ssl/RestrictedTrustConfig.java

@@ -17,6 +17,7 @@ import java.nio.file.Path;
 import java.util.Collection;
 import java.util.List;
 import java.util.Objects;
+import java.util.Set;
 
 import javax.net.ssl.X509ExtendedTrustManager;
 
@@ -28,10 +29,15 @@ import javax.net.ssl.X509ExtendedTrustManager;
 public final class RestrictedTrustConfig implements SslTrustConfig {
 
     private static final String RESTRICTIONS_KEY_SUBJECT_NAME = "trust.subject_name";
+    public static final String SAN_OTHER_COMMON = "subjectAltName.otherName.commonName";
+    public static final String SAN_DNS = "subjectAltName.dnsName";
+    static final Set<String> SUPPORTED_X_509_FIELDS = Set.of(SAN_OTHER_COMMON, SAN_DNS);
     private final Path groupConfigPath;
     private final SslTrustConfig delegate;
+    private final Set<String> configuredX509Fields;
 
-    RestrictedTrustConfig(Path groupConfigPath, SslTrustConfig delegate) {
+    RestrictedTrustConfig(Path groupConfigPath, Set<String> configuredX509Fields, SslTrustConfig delegate) {
+        this.configuredX509Fields = configuredX509Fields;
         this.groupConfigPath = Objects.requireNonNull(groupConfigPath);
         this.delegate = Objects.requireNonNull(delegate);
     }
@@ -41,7 +47,7 @@ public final class RestrictedTrustConfig implements SslTrustConfig {
         try {
             final X509ExtendedTrustManager delegateTrustManager = delegate.createTrustManager();
             final CertificateTrustRestrictions trustGroupConfig = readTrustGroup(groupConfigPath);
-            return new RestrictedTrustManager(delegateTrustManager, trustGroupConfig);
+            return new RestrictedTrustManager(delegateTrustManager, trustGroupConfig, configuredX509Fields);
         } catch (IOException e) {
             throw new ElasticsearchException("failed to initialize TrustManager for {}", e, toString());
         }

+ 54 - 20
x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/ssl/RestrictedTrustManager.java

@@ -17,7 +17,9 @@ import java.security.cert.CertificateParsingException;
 import java.security.cert.X509Certificate;
 import java.util.Collection;
 import java.util.Collections;
+import java.util.HashSet;
 import java.util.List;
+import java.util.Locale;
 import java.util.Objects;
 import java.util.Optional;
 import java.util.Set;
@@ -28,26 +30,39 @@ import javax.net.ssl.SSLEngine;
 import javax.net.ssl.X509ExtendedTrustManager;
 
 import static org.elasticsearch.core.Strings.format;
+import static org.elasticsearch.xpack.core.ssl.RestrictedTrustConfig.SAN_DNS;
+import static org.elasticsearch.xpack.core.ssl.RestrictedTrustConfig.SAN_OTHER_COMMON;
 
 /**
  * An X509 trust manager that only trusts connections from a restricted set of predefined network entities (nodes, clients, etc).
- * The trusted entities are defined as a list of predicates on {@link CertificateTrustRestrictions} that are applied to the
- * common-names of the certificate.
- * The common-names are read as subject-alternative-names with type 'Other' and a 'cn' OID.
- * The underlying certificate validation is delegated to another TrustManager.
+ * The trusted entities are defined as a list of predicates on {@link CertificateTrustRestrictions} that built from the
+ * configured restricted trust file. The values in the restricted trust file are compared to value(s) read from the X509 certificate.
+ * If the value(s) read from the X509 certificate match values configured in restricted trust file then restricted trust is established.
+ * If there is no match, then restricted trust is not established and the connection should be terminated. Restricted trust should be used
+ * in conjunction with additional trust models and is intended to restrict, not provide trust.
+ * The values read from the X509 certificate are configurable and the following are supported:
+ * <ul>
+ *     <li>subjectAltName.otherName.commonName</li>
+ *     <li>subjectAltName.dnsName</li>
+ * </ul>
+ * see also: {@link RestrictedTrustConfig}
  */
 public final class RestrictedTrustManager extends X509ExtendedTrustManager {
     private static final Logger logger = LogManager.getLogger(RestrictedTrustManager.class);
     private static final String CN_OID = "2.5.4.3";
     private static final int SAN_CODE_OTHERNAME = 0;
+    private static final int SAN_CODE_DNS = 2;
 
     private final X509ExtendedTrustManager delegate;
     private final CertificateTrustRestrictions trustRestrictions;
+    private final Set<String> x509Fields;
 
-    public RestrictedTrustManager(X509ExtendedTrustManager delegate, CertificateTrustRestrictions restrictions) {
+    public RestrictedTrustManager(X509ExtendedTrustManager delegate, CertificateTrustRestrictions restrictions, Set<String> x509Fields) {
         this.delegate = delegate;
         this.trustRestrictions = restrictions;
+        this.x509Fields = x509Fields.stream().map(s -> s.toLowerCase(Locale.ROOT)).collect(Collectors.toSet());
         logger.debug("Configured with trust restrictions: [{}]", restrictions);
+        logger.debug("Configured with x509 fields: [{}]", x509Fields);
     }
 
     @Override
@@ -96,28 +111,32 @@ public final class RestrictedTrustManager extends X509ExtendedTrustManager {
             throw new CertificateException("No certificate presented");
         }
         final X509Certificate certificate = chain[0];
-        Set<String> names = readCommonNames(certificate);
-        if (verifyCertificateNames(names)) {
+        Set<String> values = readX509Certificate(certificate);
+        if (verifyCertificateNames(values)) {
             logger.debug(
                 () -> format(
-                    "Trusting certificate [%s] [%s] with common-names [%s]",
+                    "Trusting certificate [%s] [%s] with fields [%s] with values [%s]",
                     certificate.getSubjectX500Principal(),
                     certificate.getSerialNumber().toString(16),
-                    names
+                    x509Fields,
+                    values
                 )
             );
         } else {
             logger.info(
-                "Rejecting certificate [{}] [{}] with common-names [{}]",
+                "Rejecting certificate [{}] [{}] for fields [{}] with values [{}]",
                 certificate.getSubjectX500Principal(),
                 certificate.getSerialNumber().toString(16),
-                names
+                x509Fields,
+                values
             );
             throw new CertificateException(
                 "Certificate for "
                     + certificate.getSubjectX500Principal()
-                    + " with common-names "
-                    + names
+                    + " with fields "
+                    + x509Fields
+                    + " with values "
+                    + values
                     + " does not match the trusted names "
                     + trustRestrictions.getTrustedNames()
             );
@@ -135,13 +154,28 @@ public final class RestrictedTrustManager extends X509ExtendedTrustManager {
         return false;
     }
 
-    private static Set<String> readCommonNames(X509Certificate certificate) throws CertificateParsingException {
-        return getSubjectAlternativeNames(certificate).stream()
-            .filter(pair -> ((Integer) pair.get(0)).intValue() == SAN_CODE_OTHERNAME)
-            .map(pair -> pair.get(1))
-            .map(value -> decodeDerValue((byte[]) value, certificate))
-            .filter(Objects::nonNull)
-            .collect(Collectors.toSet());
+    private Set<String> readX509Certificate(X509Certificate certificate) throws CertificateParsingException {
+        Collection<List<?>> sans = getSubjectAlternativeNames(certificate);
+        Set<String> values = new HashSet<>();
+        if (x509Fields.contains(SAN_DNS.toLowerCase(Locale.ROOT))) {
+            Set<String> dnsNames = sans.stream()
+                .filter(pair -> ((Integer) pair.get(0)).intValue() == SAN_CODE_DNS)
+                .map(pair -> pair.get(1))
+                .map(Object::toString)
+                .filter(Objects::nonNull)
+                .collect(Collectors.toSet());
+            values.addAll(dnsNames);
+        }
+        if (x509Fields.contains(SAN_OTHER_COMMON.toLowerCase(Locale.ROOT))) {
+            Set<String> otherNames = getSubjectAlternativeNames(certificate).stream()
+                .filter(pair -> ((Integer) pair.get(0)).intValue() == SAN_CODE_OTHERNAME)
+                .map(pair -> pair.get(1))
+                .map(value -> decodeDerValue((byte[]) value, certificate))
+                .filter(Objects::nonNull)
+                .collect(Collectors.toSet());
+            values.addAll(otherNames);
+        }
+        return values;
     }
 
     /**

+ 37 - 5
x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/ssl/SSLConfigurationSettings.java

@@ -12,6 +12,7 @@ import org.elasticsearch.common.settings.Setting;
 import org.elasticsearch.common.settings.Setting.Property;
 import org.elasticsearch.common.settings.Settings;
 import org.elasticsearch.common.ssl.SslClientAuthenticationMode;
+import org.elasticsearch.common.ssl.SslConfigException;
 import org.elasticsearch.common.ssl.SslConfigurationKeys;
 import org.elasticsearch.common.ssl.SslVerificationMode;
 import org.elasticsearch.common.util.CollectionUtils;
@@ -43,6 +44,7 @@ public class SSLConfigurationSettings {
     final Setting<String> truststoreAlgorithm;
     final Setting<Optional<String>> truststoreType;
     final Setting<Optional<String>> trustRestrictionsPath;
+    final Setting<List<String>> trustRestrictionsX509Fields;
     final Setting<List<String>> caPaths;
     final Setting<Optional<SslClientAuthenticationMode>> clientAuth;
     final Setting<Optional<SslVerificationMode>> verificationMode;
@@ -143,16 +145,43 @@ public class SSLConfigurationSettings {
         TRUST_STORE_TYPE_TEMPLATE
     );
 
-    private static final Function<String, Setting<Optional<String>>> TRUST_RESTRICTIONS_TEMPLATE = key -> new Setting<>(
+    private static final Function<String, Setting<Optional<String>>> TRUST_RESTRICTIONS_PATH_TEMPLATE = key -> new Setting<>(
         key,
         s -> null,
         Optional::ofNullable,
         Property.NodeScope,
         Property.Filtered
     );
-    private static final SslSetting<Optional<String>> TRUST_RESTRICTIONS = SslSetting.setting(
+    private static final SslSetting<Optional<String>> TRUST_RESTRICTIONS_PATH = SslSetting.setting(
         "trust_restrictions.path",
-        TRUST_RESTRICTIONS_TEMPLATE
+        TRUST_RESTRICTIONS_PATH_TEMPLATE
+    );
+
+    public static final Function<String, Setting<List<String>>> TRUST_RESTRICTIONS_X509_FIELDS_TEMPLATE = key -> Setting.listSetting(
+        key,
+        List.of("subjectAltName.otherName.commonName"),
+        s -> {
+            RestrictedTrustConfig.SUPPORTED_X_509_FIELDS.stream()
+                .filter(v -> v.equalsIgnoreCase(s))
+                .findAny()
+                .ifPresentOrElse(v -> {}, () -> {
+                    throw new SslConfigException(
+                        s
+                            + " is not a supported x509 field for trust restrictions. "
+                            + "Recognised values are ["
+                            + String.join(",", RestrictedTrustConfig.SUPPORTED_X_509_FIELDS)
+                            + "]"
+                    );
+                });
+            return s;
+        },
+        Property.NodeScope,
+        Property.Filtered
+    );
+
+    public static final SslSetting<List<String>> TRUST_RESTRICTIONS_X509_FIELDS = SslSetting.setting(
+        "trust_restrictions.x509_fields",
+        TRUST_RESTRICTIONS_X509_FIELDS_TEMPLATE
     );
 
     private static final SslSetting<SecureString> LEGACY_KEY_PASSWORD = SslSetting.setting(
@@ -228,7 +257,8 @@ public class SSLConfigurationSettings {
         truststorePassword = TRUSTSTORE_PASSWORD.withPrefix(prefix);
         truststoreAlgorithm = TRUSTSTORE_ALGORITHM.withPrefix(prefix);
         truststoreType = TRUSTSTORE_TYPE.withPrefix(prefix);
-        trustRestrictionsPath = TRUST_RESTRICTIONS.withPrefix(prefix);
+        trustRestrictionsPath = TRUST_RESTRICTIONS_PATH.withPrefix(prefix);
+        trustRestrictionsX509Fields = TRUST_RESTRICTIONS_X509_FIELDS.withPrefix(prefix);
         caPaths = CERT_AUTH_PATH.withPrefix(prefix);
         clientAuth = CLIENT_AUTH_SETTING.withPrefix(prefix);
         verificationMode = VERIFICATION_MODE.withPrefix(prefix);
@@ -241,6 +271,7 @@ public class SSLConfigurationSettings {
             truststoreAlgorithm,
             truststoreType,
             trustRestrictionsPath,
+            trustRestrictionsX509Fields,
             caPaths,
             clientAuth,
             verificationMode
@@ -304,7 +335,8 @@ public class SSLConfigurationSettings {
             TRUSTSTORE_ALGORITHM,
             KEY_STORE_TYPE,
             TRUSTSTORE_TYPE,
-            TRUST_RESTRICTIONS,
+            TRUST_RESTRICTIONS_PATH,
+            TRUST_RESTRICTIONS_X509_FIELDS,
             KEY_PATH,
             LEGACY_KEY_PASSWORD,
             KEY_PASSWORD,

+ 14 - 1
x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/ssl/SslSettingsLoader.java

@@ -25,9 +25,13 @@ import java.nio.file.Path;
 import java.security.KeyStore;
 import java.util.List;
 import java.util.Map;
+import java.util.Set;
 import java.util.function.Function;
 import java.util.stream.Collectors;
 
+import static org.elasticsearch.xpack.core.ssl.SSLConfigurationSettings.TRUST_RESTRICTIONS_X509_FIELDS;
+import static org.elasticsearch.xpack.core.ssl.SSLConfigurationSettings.TRUST_RESTRICTIONS_X509_FIELDS_TEMPLATE;
+
 /**
  * A configuration loader for SSL Settings
  */
@@ -117,7 +121,16 @@ public class SslSettingsLoader extends SslConfigurationLoader {
         if (trustRestrictions == null) {
             return trustConfig;
         }
-        return new RestrictedTrustConfig(trustRestrictions, trustConfig);
+        return new RestrictedTrustConfig(
+            trustRestrictions,
+            Set.copyOf(
+                super.resolveList(
+                    TRUST_RESTRICTIONS_X509_FIELDS.rawSetting().getKey(),
+                    TRUST_RESTRICTIONS_X509_FIELDS_TEMPLATE.apply("").getDefault(settings)
+                )
+            ),
+            trustConfig
+        );
     }
 
     public SslConfiguration load(Environment env) {

+ 4 - 1
x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/ssl/RestrictedTrustConfigTests.java

@@ -19,9 +19,12 @@ import java.nio.file.Path;
 import java.util.ArrayList;
 import java.util.Collection;
 import java.util.List;
+import java.util.Set;
 
 import javax.net.ssl.X509ExtendedTrustManager;
 
+import static org.elasticsearch.xpack.core.ssl.RestrictedTrustConfig.SAN_OTHER_COMMON;
+
 public class RestrictedTrustConfigTests extends ESTestCase {
 
     public void testDelegationOfFilesToMonitor() throws Exception {
@@ -68,7 +71,7 @@ public class RestrictedTrustConfigTests extends ESTestCase {
             }
         };
 
-        final RestrictedTrustConfig restrictedTrustConfig = new RestrictedTrustConfig(groupConfigPath, delegate);
+        final RestrictedTrustConfig restrictedTrustConfig = new RestrictedTrustConfig(groupConfigPath, Set.of(SAN_OTHER_COMMON), delegate);
         Collection<Path> filesToMonitor = restrictedTrustConfig.getDependentFiles();
         List<Path> expectedPathList = new ArrayList<>(otherFiles);
         expectedPathList.add(groupConfigPath);

+ 35 - 4
x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/ssl/RestrictedTrustManagerTests.java

@@ -28,17 +28,22 @@ import java.util.HashMap;
 import java.util.List;
 import java.util.Map;
 import java.util.Objects;
+import java.util.Set;
 import java.util.regex.Pattern;
 import java.util.stream.Collectors;
 
 import javax.net.ssl.X509ExtendedTrustManager;
 
+import static org.elasticsearch.xpack.core.ssl.RestrictedTrustConfig.SAN_DNS;
+import static org.elasticsearch.xpack.core.ssl.RestrictedTrustConfig.SAN_OTHER_COMMON;
+
 public class RestrictedTrustManagerTests extends ESTestCase {
 
     private X509ExtendedTrustManager baseTrustManager;
     private Map<String, X509Certificate[]> certificates;
     private int numberOfClusters;
     private int numberOfNodes;
+    private List<String> fields;
 
     @Before
     public void readCertificates() throws GeneralSecurityException, IOException {
@@ -92,6 +97,32 @@ public class RestrictedTrustManagerTests extends ESTestCase {
 
         numberOfClusters = scaledRandomIntBetween(2, 8);
         numberOfNodes = scaledRandomIntBetween(2, 8);
+        fields = randomNonEmptySubsetOf(Set.of(SAN_OTHER_COMMON, SAN_DNS));
+    }
+
+    public void testTrustsOnlyNameDns() throws Exception {
+        final Path cert = getDataPath("/org/elasticsearch/xpack/security/transport/ssl/certs/simple/testnode_updated.crt");
+        baseTrustManager = CertParsingUtils.getTrustManagerFromPEM(List.of(cert));
+        X509Certificate[] certs = CertParsingUtils.readX509Certificates(Collections.singletonList(cert));
+        assertTrue(certs[0].getSubjectAlternativeNames().stream().filter(pair -> (Integer) pair.get(0) == 0).findAny().isEmpty());
+        certificates.put("onlyDns", certs);
+        List<String> validDnsNames = randomNonEmptySubsetOf(
+            List.of("localhost", "localhost.localdomain", "localhost4", "localhost4.localdomain4", "localhost6", "localhost6.localdomain6")
+        );
+        final CertificateTrustRestrictions restrictions = new CertificateTrustRestrictions(validDnsNames);
+        final RestrictedTrustManager trustManager = new RestrictedTrustManager(baseTrustManager, restrictions, Set.of(SAN_DNS));
+        assertTrusted(trustManager, "onlyDns");
+    }
+
+    public void testTrustsOnlyNameOther() throws Exception {
+        final Path cert = getDataPath("/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/trusted.crt");
+        baseTrustManager = CertParsingUtils.getTrustManagerFromPEM(List.of(cert));
+        X509Certificate[] certs = CertParsingUtils.readX509Certificates(Collections.singletonList(cert));
+        assertTrue(certs[0].getSubjectAlternativeNames().stream().filter(pair -> (Integer) pair.get(0) == 2).findAny().isEmpty());
+        certificates.put("onlyOtherName", certs);
+        final CertificateTrustRestrictions restrictions = new CertificateTrustRestrictions(List.of("node.trusted"));
+        final RestrictedTrustManager trustManager = new RestrictedTrustManager(baseTrustManager, restrictions, Set.of(SAN_OTHER_COMMON));
+        assertTrusted(trustManager, "onlyOtherName");
     }
 
     public void testTrustsExplicitCertificateName() throws Exception {
@@ -101,7 +132,7 @@ public class RestrictedTrustManagerTests extends ESTestCase {
             trustedNames.add("node" + node + ".cluster" + trustedCluster + ".elasticsearch");
         }
         final CertificateTrustRestrictions restrictions = new CertificateTrustRestrictions(trustedNames);
-        final RestrictedTrustManager trustManager = new RestrictedTrustManager(baseTrustManager, restrictions);
+        final RestrictedTrustManager trustManager = new RestrictedTrustManager(baseTrustManager, restrictions, Set.copyOf(fields));
         assertSingleClusterIsTrusted(trustedCluster, trustManager, trustedNames);
     }
 
@@ -109,7 +140,7 @@ public class RestrictedTrustManagerTests extends ESTestCase {
         final int trustedCluster = randomIntBetween(1, numberOfClusters);
         final List<String> trustedNames = Collections.singletonList("*.cluster" + trustedCluster + ".elasticsearch");
         final CertificateTrustRestrictions restrictions = new CertificateTrustRestrictions(trustedNames);
-        final RestrictedTrustManager trustManager = new RestrictedTrustManager(baseTrustManager, restrictions);
+        final RestrictedTrustManager trustManager = new RestrictedTrustManager(baseTrustManager, restrictions, Set.copyOf(fields));
         assertSingleClusterIsTrusted(trustedCluster, trustManager, trustedNames);
     }
 
@@ -117,7 +148,7 @@ public class RestrictedTrustManagerTests extends ESTestCase {
         final int trustedNode = randomIntBetween(1, numberOfNodes);
         final List<String> trustedNames = Collections.singletonList("/node" + trustedNode + ".cluster[0-9].elasticsearch/");
         final CertificateTrustRestrictions restrictions = new CertificateTrustRestrictions(trustedNames);
-        final RestrictedTrustManager trustManager = new RestrictedTrustManager(baseTrustManager, restrictions);
+        final RestrictedTrustManager trustManager = new RestrictedTrustManager(baseTrustManager, restrictions, Set.copyOf(fields));
         for (int cluster = 1; cluster <= numberOfClusters; cluster++) {
             for (int node = 1; node <= numberOfNodes; node++) {
                 if (node == trustedNode) {
@@ -131,7 +162,7 @@ public class RestrictedTrustManagerTests extends ESTestCase {
 
     public void testThatDelegateTrustManagerIsRespected() throws Exception {
         final CertificateTrustRestrictions restrictions = new CertificateTrustRestrictions(Collections.singletonList("*.elasticsearch"));
-        final RestrictedTrustManager trustManager = new RestrictedTrustManager(baseTrustManager, restrictions);
+        final RestrictedTrustManager trustManager = new RestrictedTrustManager(baseTrustManager, restrictions, Set.copyOf(fields));
         for (String cert : certificates.keySet()) {
             if (cert.endsWith("/ca")) {
                 assertTrusted(trustManager, cert);

+ 30 - 0
x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/ssl/SSLConfigurationSettingsTests.java

@@ -12,10 +12,13 @@ import org.elasticsearch.common.ssl.SslClientAuthenticationMode;
 import org.elasticsearch.test.ESTestCase;
 
 import java.util.Arrays;
+import java.util.List;
 
 import javax.net.ssl.KeyManagerFactory;
 import javax.net.ssl.TrustManagerFactory;
 
+import static org.elasticsearch.test.TestMatchers.throwableWithMessage;
+import static org.hamcrest.Matchers.containsString;
 import static org.hamcrest.Matchers.instanceOf;
 import static org.hamcrest.Matchers.is;
 import static org.hamcrest.Matchers.startsWith;
@@ -73,6 +76,32 @@ public class SSLConfigurationSettingsTests extends ESTestCase {
         assertThat(ssl.supportedProtocols.get(settings), is(Arrays.asList("SSLv3", "SSLv2Hello", "SSLv2")));
     }
 
+    public void testParseTrustRestrictionsListWithPrefix() {
+        final SSLConfigurationSettings ssl = SSLConfigurationSettings.withPrefix("ssl.", true);
+        assertThat(ssl.trustRestrictionsX509Fields.match("ssl.trust_restrictions.x509_fields"), is(true));
+
+        // explicit configuration
+        Settings settings = Settings.builder()
+            .putList("ssl.trust_restrictions.x509_fields", "subjectAltName.otherName.commonName", "subjectAltName.dnsName")
+            .build();
+        assertThat(
+            ssl.trustRestrictionsX509Fields.get(settings),
+            is(Arrays.asList("subjectAltName.otherName.commonName", "subjectAltName.dnsName"))
+        );
+
+        // implicit configuration
+        settings = Settings.builder().build();
+        assertThat(ssl.trustRestrictionsX509Fields.get(settings), is(Arrays.asList("subjectAltName.otherName.commonName")));
+
+        // invalid configuration
+        final Settings invalid = Settings.builder().putList("ssl.trust_restrictions.x509_fields", "foo.bar").build();
+        IllegalArgumentException e = expectThrows(IllegalArgumentException.class, () -> ssl.trustRestrictionsX509Fields.get(invalid));
+        assertThat(e.getCause(), throwableWithMessage(containsString("foo.bar is not a supported x509 field for trust restrictions.")));
+        assertThat(e.getCause(), throwableWithMessage(containsString("Recognised values are")));
+        assertThat(e.getCause(), throwableWithMessage(containsString("subjectAltName.otherName.commonName")));
+        assertThat(e.getCause(), throwableWithMessage(containsString("subjectAltName.dnsName")));
+    }
+
     public void testEmptySettingsParsesToDefaults() {
         final SSLConfigurationSettings ssl = SSLConfigurationSettings.withoutPrefix(true);
         final Settings settings = Settings.EMPTY;
@@ -93,6 +122,7 @@ public class SSLConfigurationSettingsTests extends ESTestCase {
         assertThat(ssl.truststorePassword.exists(settings), is(false));
         assertThat(ssl.truststorePath.get(settings).isPresent(), is(false));
         assertThat(ssl.trustRestrictionsPath.get(settings).isPresent(), is(false));
+        assertThat(ssl.trustRestrictionsX509Fields.get(settings), is(List.of("subjectAltName.otherName.commonName")));
         assertThat(ssl.verificationMode.get(settings).isPresent(), is(false));
     }
 

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c1.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrTCCAZWgAwIBAgIVAOycKYSPiBuHXuHsqaE5KyTLYTqlMA0GCSqGSIb3DQEB
-CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTE4MDQxOTEzMjIxM1oXDTQ1MDkw
-NDEzMjIxM1owEDEOMAwGA1UEAxMFbjEuYzEwgZ8wDQYJKoZIhvcNAQEBBQADgY0A
-MIGJAoGBAM/q6yVK17PHtdsO5pM6DNU6pnOY/FQO+c1JpD2cpOk6B8yokEtFR+a0
-QsdsqQewAGBG77u9jQVerJr6fkPW+AeJT7eEBl5rqYDx82XgeJS6dAJRvclrxsOL
-BDDWsImDIMes0AZaE54P6LDGBooH3XhidTyFj2Gp9fozVY8PWFl5AgMBAAGjfzB9
-MB0GA1UdDgQWBBRLyFFKNa/ll8mohWv8TJyzCzyOmjAfBgNVHSMEGDAWgBSrRunq
-ZcqAopdSp1f7svo6+5eoXzAwBgNVHREEKTAnoCUGA1UEA6AeDBxub2RlMS5jbHVz
-dGVyMS5lbGFzdGljc2VhcmNoMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEB
-AFmuRJmgPi2dwMwhfzGdDB6d+FLxQOcWSqj10e7Iq+bEydUjYZubp1K0/9dbUB5o
-9iUvvFbZirwhRhcYjB5s/sEJavXEOXQshU8zek+jBuO+uKdndmiA5oGbDcKAEcbH
-aPbq4eJcLAT7RJWlW66nCZNvJNnSh+DmV2w9XUZBG2ryOlq5OYCmLJ57TBKgvK3C
-6gOECdImj2mvZ86xBmjZXZ6JVK0ZbnClIFt+3b+R6l/IUkMf6t0VVN/cs4AB7bTX
-c1E4L4WHUmO7enzMZi1LyOWs7BfdJjjx/YnsVyh6PqcJTt7896ohbnfORmtuMZNb
-eO5el0aBOXZaJb/MiUC6E5I=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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c1.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c2.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrDCCAZSgAwIBAgIUV4XHn9tdtxmUFg8gitI7WNN145EwDQYJKoZIhvcNAQEL
-BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMTgwNDE5MTMyMjE0WhcNNDUwOTA0
-MTMyMjE0WjAQMQ4wDAYDVQQDEwVuMS5jMjCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
-gYkCgYEAlC1TOrM0KvZxZ40BCef2HCQOGsFI/IUmFCVno62Rq/DZnQbpqs9eyBjD
-dJ9lMET4arkqJ1Vvg0rodZWCg8TOU3+Wr1xV1u2v4oBTdwyfoMrZxKW3NtMGQRdr
-suTkfQm32ouq4eJ8Xcf6ziCwApuoIKDPRZipu+9Jqmywqw45a1kCAwEAAaN/MH0w
-HQYDVR0OBBYEFG4GgmhNwmrhBpwtZAMtv3bsH2PrMB8GA1UdIwQYMBaAFKtG6epl
-yoCil1KnV/uy+jr7l6hfMDAGA1UdEQQpMCegJQYDVQQDoB4MHG5vZGUxLmNsdXN0
-ZXIyLmVsYXN0aWNzZWFyY2gwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA
-ZNWqkJ8Fl5DwSRgQfUAjOjEY7+PCAvX2qKY8I9Z3DiB5D8xFeIP0qrz78oN8K8JY
-iJXFPaKFpYihejHywSK7/A+myvZlOUDbPx5rULtsYVeK0e7n2x8htTVD5E6M0nRP
-Jdb9WittiGe4muO3e17wdwSLEOrRfp+YmBnRy+7Q9BOix4v5y6HWpYwGdX5Wnj8N
-devs0ceL9Ymtdd6lSEmDQRxBGQ3xXfBU4+Wl0Ec786OjxfsE30hBRFH9S/eQwfE/
-vGxB9Bo49I1Jar9DRMxnWjdPuoJptvrFHeByejovBeGfjOmXDpl/+eNk6JcnXjH2
-9UTKG8M6OF9J2SVOWCzU4g==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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c2.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c3.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrDCCAZSgAwIBAgIUGqZyGvYnT/TnwhpRix5jqfGzMHEwDQYJKoZIhvcNAQEL
-BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMTgwNDE5MTMyMjE0WhcNNDUwOTA0
-MTMyMjE0WjAQMQ4wDAYDVQQDEwVuMS5jMzCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
-gYkCgYEAhXKEuM1xYezN98jNJftpBGSAQ4jM0W4nrP86NhflKhCCNnp6PSh651t4
-4+v8tPo2ZwhaBAkchrfDtHKBuT//6PIteyEbtsj/ej2OztQ9XO6h4+3bL6ccVgfM
-vm6YD1y6TjTM9fCvpbtqrBMouEOYkPPLA6lx23JyW5mJ3Lwwno0CAwEAAaN/MH0w
-HQYDVR0OBBYEFKEfz2T5jwYqWOgbnZOJL2mLkqtAMB8GA1UdIwQYMBaAFKtG6epl
-yoCil1KnV/uy+jr7l6hfMDAGA1UdEQQpMCegJQYDVQQDoB4MHG5vZGUxLmNsdXN0
-ZXIzLmVsYXN0aWNzZWFyY2gwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA
-Bd8aXS7DvR5mNVz7aSR1qoTBHKVLqIrUju5gKFsIrkfm0mEgvhx8T9m60k5h+sgD
-TMaoHatMIVssOaNoxYwvKtnnuHKMvrkJLb/qyaiDfn0zO2g0jvWMtmaZnShrE+jj
-la1hFKCkxblUgo1d0IQaONaDpgS2PXPu1Iah7h4MPB4BZdFNT5afnKro3zAfiKA7
-lMhGmTwPKTDwkOETNJQ4ETFjZzY2UxFjLsRzbrXDeto+UrU/qJa8jzCWI8cI9jFc
-vffGGldbRWoUq0ALZSbz6W2psf/xAo6tSkaf0MDSMYRZ9mFVmWBSREITn+12gp7g
-5A8wNJujWbyAR0j5GXXZAg==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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c3.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c4.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrTCCAZWgAwIBAgIVANq892kwQ089Hnpd0M4dSCmHpvARMA0GCSqGSIb3DQEB
-CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTE4MDQxOTEzMjIxNFoXDTQ1MDkw
-NDEzMjIxNFowEDEOMAwGA1UEAxMFbjEuYzQwgZ8wDQYJKoZIhvcNAQEBBQADgY0A
-MIGJAoGBAJVhOQxK4DAxYsFDcm42dl0DdpRCqxYFecP9QmC2cniv+sMUSRLsti8B
-eOKawlWL+NQK7CJhAQPuYnLEBiyhUIFz9dAVozHyOqBKFbf2L3A2nIPuom22UiJN
-79k2YXZgagSCdCdRX8WTvTRbbN8WYRfE/wLO4SBxwW2f501ET6pTAgMBAAGjfzB9
-MB0GA1UdDgQWBBQIGCed24kXamJPxK4inO7BWteawjAfBgNVHSMEGDAWgBSrRunq
-ZcqAopdSp1f7svo6+5eoXzAwBgNVHREEKTAnoCUGA1UEA6AeDBxub2RlMS5jbHVz
-dGVyNC5lbGFzdGljc2VhcmNoMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEB
-AE2ckMOf2Nrh+TfHQwvZWIWhENeIih4A4ivgimfcGWumpCho4tusNu/RIh2DxVqy
-4kJSqQ6NggGADDDPmh2p2UTa5NR2RF2FQGmfNtkFwp48tE/YXWurts0IneidoGYC
-RXM+mVXTNGlPE0BrgwS8tSKRRXh+lsvS9HH1wkLUSa8tk4PWqln1RpttiHYnImqU
-t4d38vpk0AfRMalEV5atb8eoNkKVOfrDiJ8/iA/zJ7qh3PUaU24taJtP1MNR2mo3
-aXZH1GCA+WUqWAUDN8TXHv9TABh8IggmpK39weV17BAKFHsVslq2auyDaFcmoJk1
-tLXpMUUJweWmFTRqQguKu8k=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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c4.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c5.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrTCCAZWgAwIBAgIVAJ+D63xrhVvDF8SCF0IN6olyWI9hMA0GCSqGSIb3DQEB
-CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTE4MDQxOTEzMjIxNFoXDTQ1MDkw
-NDEzMjIxNFowEDEOMAwGA1UEAxMFbjEuYzUwgZ8wDQYJKoZIhvcNAQEBBQADgY0A
-MIGJAoGBALGUvDdOnTe62apHl5sXV6Ys8GYqKDJ0e1cCQCKgxu3MyCueXC1xdhYJ
-ceA3PTmnTRg7KqYhJLZi1sujBOfuy7vsg5r/7L6EhWDCM/d2QfF9ZUft5ljsEGYN
-OmGakQnU+mFOuDe18hlp72tavC2tdPYHaTmd0t2f4J9ovxQznO+jAgMBAAGjfzB9
-MB0GA1UdDgQWBBTgPsBAr0vFIhwmOhBkC1XvlAGtvjAfBgNVHSMEGDAWgBSrRunq
-ZcqAopdSp1f7svo6+5eoXzAwBgNVHREEKTAnoCUGA1UEA6AeDBxub2RlMS5jbHVz
-dGVyNS5lbGFzdGljc2VhcmNoMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEB
-AB6nwwv8Pvzmj+/qxqyUu+doqR/DNu7J2ZoVJ4Y/kbp8Sya6GBVocN/Yaj+5aTv3
-phegvSvXTuw38gUuadGHSJ0R+GgaZNQ99HgMGCaePsFSf1Qya3vnK0308n7MSr8F
-4pDnJCmOeOZQkY0PrMHx5KW+BdNWU3bvGALQubVo+nJEuZYTBPt52AkweMbtubiS
-kS3v/SKi/mD0aKWS8amgAlCAFct419gE7frWAsEDXmQU0KDaSE37yx+0CbvqzlCe
-EZRRpgg6R1px1F0WPU1SkCfQyhTE8MMz8Wj1dL4PkCJn7ku5CRF65VgA48t6Ecpt
-4UfKfyiO1rcbZKA+UKovHjI=
+MIIDUDCCAjigAwIBAgIUcfjfdI64Fb8CJevbBBisnOZsuGIwDQYJKoZIhvcNAQEL
+BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMjIxMTI2MjEyMzE1WhcNNDIxMTIx
+MjEyMzE1WjAQMQ4wDAYDVQQDEwVuMS5jNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+ADCCAQoCggEBAKIYqHbLrUjbQ8smJzK7O9f6qeLxNvirAiFR9WUIyT77SPqeCiWz
+ezUmBCb8jyLprtG76HiXMPvCnDbtpsbN1RKcZG0j+T7c3TtkygJk3ycfuWffRN01
+KPDqqUB8G89CQ/2W1sQxzkl/FBLjQj/DPCHy+HyYuyfVk1aFH2zH0O8y6ghwD3q8
+ZLa50Psf8fAmVLbUxTiZcD+n6bliYrGPPIqEfgX39U8tUXWrJ2a+/ESJZUdU6Nyd
+tNiM0q8GBc+2Rz7aOwnxP+uy2sdrVdBbocFF0LDwZFnJFlt3vkSrtaNp7cpkduc/
+P1sM/5tv5zL8hOdcw76gBLY8Qw+UaNU2n3kCAwEAAaOBnjCBmzAdBgNVHQ4EFgQU
+RSkxevULQPv85eNElA6ZZ615LiwwHwYDVR0jBBgwFoAUq0bp6mXKgKKXUqdX+7L6
+OvuXqF8wTgYDVR0RBEcwRYIcbm9kZTEuY2x1c3RlcjUuZWxhc3RpY3NlYXJjaKAl
+BgNVBAOgHgwcbm9kZTEuY2x1c3RlcjUuZWxhc3RpY3NlYXJjaDAJBgNVHRMEAjAA
+MA0GCSqGSIb3DQEBCwUAA4IBAQBMj1+uT/fYnNzJgDV0Fa8QhJiF8ekc9LiRPi1x
+XXC3TtvEMAVYfOMWOWsMqIe16rW+2vxplfrEMSkp3EcejB57fX6XFQ3M87QnFIvI
+OcGBWrGm5u/0mGHo+erkWXH6niw9QU74rBSgEiuh2gkguKe1+3Kkrr4uZnMB80zC
+R8fXskMgfP4em8VI7s5UY2pEpFanoSyGysyYPo9A9BlSmbx5R9VBySMsd1x1GweC
+WsgGYghTKf6yvmuRtak49boOR+a1dxz9XttD0xgZ2KFjV2QE5aLkc4S5gjx1iDHe
+JZgHKM80i63atwvdp1UI01uYSE2Fi6zbU7iwj75w3HeyjX9E
 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c5.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c6.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrTCCAZWgAwIBAgIVAJHJ9P/gVQNv5i8q8tW/UzufE1cdMA0GCSqGSIb3DQEB
-CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTE4MDQxOTEzMjIxNFoXDTQ1MDkw
-NDEzMjIxNFowEDEOMAwGA1UEAxMFbjEuYzYwgZ8wDQYJKoZIhvcNAQEBBQADgY0A
-MIGJAoGBAJGKOOMmMfmt+9VRZfYsorzOWLxWRtqD9VjRimbBVWBoIFYf+EVyEC0E
-/sg8G9eWAcSEUJ2oDp5dnMuXzEZrA3aaYeDZjtOYuHF+i+PFQQFlpY9A+NapdhJe
-9CU6cvL4ImRyatPxw4A6QLLetWHbDDIYA+6iYtmkKTkMlY6bboSzAgMBAAGjfzB9
-MB0GA1UdDgQWBBRs7k4fmkFw8RmVU1f+p9SY5qNwnDAfBgNVHSMEGDAWgBSrRunq
-ZcqAopdSp1f7svo6+5eoXzAwBgNVHREEKTAnoCUGA1UEA6AeDBxub2RlMS5jbHVz
-dGVyNi5lbGFzdGljc2VhcmNoMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEB
-AKvKMX7eiwShOetFoe8CQ0jls5aJ2119gp917eq75XZE8HGJhiWlBA5qcCCxCrtR
-Cy1BbuHiMqPni/7KaWosw41dxyysJOrsPGw7QYnhda+ji3mtFVxT0Zert2DPKkxR
-Fgt2VWbkF/keMKDGc2vrpyq7YVc0RwDjTzEURSLxI4p+t/HbWQXLAIGRjVXneoUt
-bc+I/2/C5chV2qTQd1xC6OfnixJ1234enIL+0enypLx/8Ca6i8+Gl13FpyFpO/ik
-yY3Xe7S4rRAsvWpHRDWIxqA/M+fzhOb76nLC4H4TGkuAJ6EavsnaHHHOngbL8Ag0
-zFhXT0Vj0GucUzjx2pjFhfY=
+MIIDUTCCAjmgAwIBAgIVAPWiIWzwBeBTxx67S5Q4inI1C6ASMA0GCSqGSIb3DQEB
+CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTIyMTEyNjIxMjMxNVoXDTQyMTEy
+MTIxMjMxNVowEDEOMAwGA1UEAxMFbjEuYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
+DwAwggEKAoIBAQCnyRePFOVECgYCEEbWK/hBjwYt1s/Y1uAXwlR9GRFW9k0//xBA
+qS+0BDp/htkEfchZNaXdYb3DvARY+j03F17haagXhQz18GHDntspbYUjo6KZ/HLb
+iT086jiPfueMwszObgEI7OQHk19IdCkF3oodBQBerJk8owCfEumQhY9uH7MvNSHe
+WNaUJhVtqV5lOF5szFUJStWOkY+E66GduL+/dSVKjQnB60SYoQrz72XwwDetmCpN
+ZiBwrZhIGJZ4D9AQ2EaHgJCZ6rMeabdQxcciu2WsruJxKGxxsaJ+XdUH3mlNYJiX
+4V39g7hrT9YIvTL8I0AnZ/zaMzIkJ8mRQjstAgMBAAGjgZ4wgZswHQYDVR0OBBYE
+FMHhSPHivE+Usi8rs6yyBPRQudd4MB8GA1UdIwQYMBaAFKtG6eplyoCil1KnV/uy
++jr7l6hfME4GA1UdEQRHMEWCHG5vZGUxLmNsdXN0ZXI2LmVsYXN0aWNzZWFyY2ig
+JQYDVQQDoB4MHG5vZGUxLmNsdXN0ZXI2LmVsYXN0aWNzZWFyY2gwCQYDVR0TBAIw
+ADANBgkqhkiG9w0BAQsFAAOCAQEAGSQSbldCPH7pMwHn/GP8tG9eM7W5uss9zU8h
+c+hXxPA3eBB2564xnnzw+pH7DJ/2KSTiAlkjDq3CBO7ClKm1MUt/t9V5dGwAU/C8
+y5sZQ3QHsKkmwVo8EH/rfWjGUi8J2c99nlPeqAZdaPjVZZKiZzRSIDoKbxTEjuzh
+jjfpqePNOgwpg1vA0fkRprCDgj1VLOvEXmw01ASvIzAF5bb5xJOkYdlhRdn2AwVw
+7tvZ7WRfjPX2Riup2NJKk7YBVAGBu27JbjCuTTfYFlMMDFRzftioGjCPSEWOkNSE
+VEFuDfhl6eOvxlfjaqOg1MR9iAcShFj5Zv8ve89uNJrxpAhBcg==
 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c6.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c7.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrTCCAZWgAwIBAgIVAKo0NbCgIbl24/edkcXtukrKEYx6MA0GCSqGSIb3DQEB
-CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTE4MDQxOTEzMjIxNFoXDTQ1MDkw
-NDEzMjIxNFowEDEOMAwGA1UEAxMFbjEuYzcwgZ8wDQYJKoZIhvcNAQEBBQADgY0A
-MIGJAoGBANHSoRZvMsCdrQREwlLHR8xFRPrlW/qC1VcbMDkwSdvFOrPh/ykpPn+I
-kKrTQ/kOBCOruPSh7x9/5KB4EbkMJnIo+XQlLgLbAUeMGSS11IKpQTS7S6noyxde
-7xU0Z4u/MYk0PS+QgYqDU2ExoY8UN7VGxQg9zSzy3dublTUfVXPbAgMBAAGjfzB9
-MB0GA1UdDgQWBBTxpLGy+DAZqPn1o0uRboFaeT0D8jAfBgNVHSMEGDAWgBSrRunq
-ZcqAopdSp1f7svo6+5eoXzAwBgNVHREEKTAnoCUGA1UEA6AeDBxub2RlMS5jbHVz
-dGVyNy5lbGFzdGljc2VhcmNoMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEB
-AGPN3G8zC9wT+FPDUJzR5aiXWkBN6Bn8pYaDZyWuWFQr4l0m57sX91vOSBBvXtYv
-0gcz/Nggkz2TpMokfXBOoioeHywYIycy+9F9obbgKy/f5ejCGv8F26FS4UH4WVqs
-dIHaWy77od7SUuBqjlOYBAK13GNZt/4rkWSNsry3p+YoVxmEoUW0Y9BtXDXY2M/U
-ewTEbC1oZHXeyNzgI6Njw5d/hELKMNFwq2RON6tU/XHXABXCdzFkIjHvrM+N8a4N
-ju2xbQALjSgPWjYprjCiYHW5z+aB+lAKbCCUcsrMQnE85Bx1DpUs1oAWYo77h7Xd
-uAX6yQ0JODD/TpNGoWktcUQ=
+MIIDUTCCAjmgAwIBAgIVAJUhyR6QNxUckaeIj/pRCKLuAQxsMA0GCSqGSIb3DQEB
+CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTIyMTEyNjIxMjMxNVoXDTQyMTEy
+MTIxMjMxNVowEDEOMAwGA1UEAxMFbjEuYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
+DwAwggEKAoIBAQCtAxYfnr4JQm+PhChak9VoPngeIoiYy8g4dfzj1SmtTd+SMANU
+KEFnfGTRj1Efzwu0UgQdf0XkWau+lduN+MhDHVlxnFQv7zPFJa+wkf+brdfBw5vP
+7hmscniIi+em8grcj6zAgyQR4IWrNl1TQucpY0mMVDsawuPk6fexWbYuTa3eMKYr
+5SCs7jso0SDr/KEBoBbcVvlJnflRM2nPx0Otm6ck3IYUZ0rTlQcrVyqty83U+j2p
+zf9Gu9PCZgQSUpnxEPtLjJmHRmsGCEmDAkQWv+3pkHvu81FE40CMlgmwWwtRaep1
+EQqritU1fIigH0jjxsrcf5dLkU4/LEKAqGrFAgMBAAGjgZ4wgZswHQYDVR0OBBYE
+FP/Ec5xkXZ5pOoPxxsqKHzofGSzdMB8GA1UdIwQYMBaAFKtG6eplyoCil1KnV/uy
++jr7l6hfME4GA1UdEQRHMEWgJQYDVQQDoB4MHG5vZGUxLmNsdXN0ZXI3LmVsYXN0
+aWNzZWFyY2iCHG5vZGUxLmNsdXN0ZXI3LmVsYXN0aWNzZWFyY2gwCQYDVR0TBAIw
+ADANBgkqhkiG9w0BAQsFAAOCAQEAYyUAgy4qhWOIFHHH761LTxnQDeCnFEf8b74H
+ns4Y6Ba7poxnkTUUOCi07jJP4ZuSMHyCGFBwaICPJGYi+vaz9fB7tEh0jW0FPtBu
+VPSKhMxk6AXhWO/2CvHZMNDi0wD/ywnq70BxkFLIKCe7MPiNCGN0RO6AQO6bzKlu
+naH3xUqU4k5wxOOAwBLP/a6RhFVEZdzlOrnMyorBSDcW/1GoIHQ4YI8Hm0Nuhjc9
+UACItH9HIVLljoewwBM8mfsn5Xt+0gczdbgnZvEkLYYQDIShr4R6gygWWwATSOL9
+O8tDNQSr/xiYUP/tXd3FTfOzSk9fJAydDWlAOq7itRsp312fwA==
 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c7.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c8.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrDCCAZSgAwIBAgIUYMQ3IxuiB6pn0PD2FbQpl52431IwDQYJKoZIhvcNAQEL
-BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMTgwNDE5MTMyMjE1WhcNNDUwOTA0
-MTMyMjE1WjAQMQ4wDAYDVQQDEwVuMS5jODCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
-gYkCgYEA0ExMUocWZ0c7F0gpF9RXw1Uogl79PxBKIc2Jd7YcDVNDWqnyMWNcueeh
-5bBoM1SrPt0q2PDld/rpBeOoBqZqRMfNu1t2J+ij7bvq/eh/7111hiOObqfeWe8r
-vOKcuMuP2XySO4SnStOCpRTbpWJwlWzvp2UewDQ7FKF1tt0BYnsCAwEAAaN/MH0w
-HQYDVR0OBBYEFMZDNcpbk5GD5ynwpCQOY6VDM4gSMB8GA1UdIwQYMBaAFKtG6epl
-yoCil1KnV/uy+jr7l6hfMDAGA1UdEQQpMCegJQYDVQQDoB4MHG5vZGUxLmNsdXN0
-ZXI4LmVsYXN0aWNzZWFyY2gwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA
-PbfEs/JWjdw5FUuj6+vb6hdpnkv+qCxX9ayZygmgzAd0mgYRpm51DQFyIbeBUYdA
-vqHDiKMT56ODM4n4ij6gWwyzmSxLRbtCTcOC2oVyhyGlwmkYXw/9/JOUMj3oz7SN
-8iRtsICqJwcbTGenvHN8Nfr1qMvl74K0foNE/hczXMcYNQq+LbYgen5dejFbOSmH
-V2oE0e86w7pthriazNSmivWQEeDAJwTR51oOkfm2KMVA1adbqBB7BP8eA0uOO43L
-SNAArh9Bzlm9/5raX/YTL6In7G3/wSFvIuJUYwV3JW57itzaBufZ4G5CCVBulGN1
-ltKJJgSsxo6InUTglO9VDA==
+MIIDUDCCAjigAwIBAgIUbdKoOzTyTVynOAVFoXMXK7VeHdAwDQYJKoZIhvcNAQEL
+BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMjIxMTI2MjEyMzE1WhcNNDIxMTIx
+MjEyMzE1WjAQMQ4wDAYDVQQDEwVuMS5jODCCASIwDQYJKoZIhvcNAQEBBQADggEP
+ADCCAQoCggEBANXbcH3OeBdsH37mxPgUxSfPKXNuMo7FdXlqCiHlRtGTv9S8VcOQ
+sh4wBuTmXPry/cgdpESkNIF1lJG/JCWRJ8Qfx9CBiGTjSdUAnX5v0u/ubSh0BApC
+PBt6e4U5gXqtXPHg1MBZj8AbhRsISKq6sVRtwRdNsBS58LXmgx92SThEUF3TNuHl
+sYNGAPhhOhCPA2M1PLeYmkjh/dyfHg32LAOfRE8jdb9xvATAhgb7Qk8ts5/IRfiq
+gYngjm1qLCFsUryEnSrOoPfVp5OtB5kbrsAQ3FDTBNVWOV6+qUBMMrZbhKcPJvhQ
+JUd8B2rud9ehTIeyj6YhCIjHxxm47N6iSIcCAwEAAaOBnjCBmzAdBgNVHQ4EFgQU
+fTBsfcn65Kl89gCzyClsha6qPpIwHwYDVR0jBBgwFoAUq0bp6mXKgKKXUqdX+7L6
+OvuXqF8wTgYDVR0RBEcwRaAlBgNVBAOgHgwcbm9kZTEuY2x1c3RlcjguZWxhc3Rp
+Y3NlYXJjaIIcbm9kZTEuY2x1c3RlcjguZWxhc3RpY3NlYXJjaDAJBgNVHRMEAjAA
+MA0GCSqGSIb3DQEBCwUAA4IBAQA8m89wtFp3D0gfSKa6yGoMyvPtUj+CcASi3KVd
+4w7b7DR0e5mV2FLz9GKRxXKNQss00H9hpLSL4/uiyuHSYYfTjL+HzXR0sfyV5TDu
+3zsTLE+xLZ7oQv4oDIbXXSJPoNZA90v92XYOMMyz/9sorwOI6rtVX2eFeVQNVTyw
+zdrmL5l7PIZhk3DSU0t+ndS/QizabFJJ+qWKn4fp51xw0eT13Gda/WVF3gX+vYG2
+VBnRMpvxly0ZCFWVtNYMg2yDeT5oaZeFsTPPvOgW72cvQ9goq/Cqp/aMOrXJ3wTT
+XxQcMO1IHVH7hYE3IQUlV8G3oFMCAUs08g7V9wRzGSlNHNhF
 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n1.c8.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEowIBAAKCAQEA1dtwfc54F2wffubE+BTFJ88pc24yjsV1eWoKIeVG0ZO/1LxV
+w5CyHjAG5OZc+vL9yB2kRKQ0gXWUkb8kJZEnxB/H0IGIZONJ1QCdfm/S7+5tKHQE
+CkI8G3p7hTmBeq1c8eDUwFmPwBuFGwhIqrqxVG3BF02wFLnwteaDH3ZJOERQXdM2
+4eWxg0YA+GE6EI8DYzU8t5iaSOH93J8eDfYsA59ETyN1v3G8BMCGBvtCTy2zn8hF
++KqBieCObWosIWxSvISdKs6g99Wnk60HmRuuwBDcUNME1VY5Xr6pQEwytluEpw8m
++FAlR3wHau5316FMh7KPpiEIiMfHGbjs3qJIhwIDAQABAoIBACwFGWisAUhA91K1
+ycGO9O421D9wZXPB7WZqj19exG8LTKdLhRPWSvOvyxt+15DIR7jTcSa37h7fxw8h
+Gx2ofVj/ea/PmfW6W04+7CxEdFTy7QEwsEw0Sg8V7SsFJUPNP56COwjE5rQSdhmU
+YPDTsQDB/sb/NMlvZL7sjf0B6hxsgxJmaacrV13kDWLtsq0qn9Wo3DQ5ZYlO9dNR
+VSWBD7h4Jo9gd5d9nPGdoapWtoksjT1JJeY+3cW8SRSnhHULVPZD2fUbCgKG8OCh
+Ac/eOcVo/6r6OMSq2VMMYkHeZyuhD/ea3OHeh3Y4jjWsZRSIrhIpefAaLct6AG+j
+ukNiAMECgYEA6G1z6Jj76v1b5fCYqpHehIPZDbTKZSoJWlQvJKR/zSNBfaH3CTbU
+tzIHimLeCDo+bSy0RCAZfdJQoV5JGYeJsn4eu/tuQ9f1Rj1QVwHYimtpaNnf5W6r
+x18BhlhkX8wmZhD0SyPG9dfDy156YtxQKSc6E6nJYYbeibpLbqh4oBcCgYEA64vX
+gVdHZd5leE2FuyAowMFc+7bnreB6dAwT9wFGTCyK4kcr6YRgqeZfMoXu+3WyY5nv
+jIDqgoKTyCZiN/mltahP8B7sZJwU/u5BnsYYysQcSoM/t/9S/9XOHW+Kb+4cwrmT
+gV8xcsCs4M2DoPn+PC7MIhSheZVApkjXidem8RECgYEAhaO5S3n7DyhSGKn3/csV
+eHge6ySSYwyCiC9zU8xJt3eYBlaEJgYi1Jqtf0JNi8mBb2CO3cTfI1s0BTSjL0yh
+PcIKheeRhOy9GH/Um9Jx4VTVLPZpKBA0MNRNmiNkwzgss+73p+SQV3aSG3LdR86J
+QMBPQlMTeUIE3ogBK0Uu5k0CgYAbUKw9I5H0DkZWHSdU+/W95K6TwjI7x7xrmLr3
++f3c941jkD1XZzKOgVio0z9TieKWClPtR0XqvJnGrCzXsOu2lT4v6mYfhLoqlham
+AvL9EKD3QyEwhTtqz7CHWVgEguhy7HJenltto0ppB2wsTtFcyVCC40GWh+hnYCse
+oROLAQKBgHMrkYEyEis3sdi1qU1jFDfHlaznGboySgeIWKPaDPzaWBpCRKjh7W4b
+gvSvraHjPQ3JR+aPI2+hzZcBFYY9rGIgB7rhwmD8oqdgCENLGvX04YHTmygRIm+x
+GUYI685djyaznlsSJoBzXe64xWR0AikVHxSLwh9eKKZmdqQHo+uk
+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c1.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrDCCAZSgAwIBAgIUNzsUuUWlDaQigjdV2GBNk6NJfAIwDQYJKoZIhvcNAQEL
-BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMTgwNDE5MTMyMjEzWhcNNDUwOTA0
-MTMyMjEzWjAQMQ4wDAYDVQQDEwVuMi5jMTCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
-gYkCgYEAm8aLIeL8o3DodD9VWa0KvotRwSUtWX+qzAFgM5SqHHymlDnwRJq6gutq
-nCDCos6TGihA6bnlVw4eRnjq8usw7cyJW2iIIFPr4d36DN2Ui/NGdICP4RMClrgf
-5sC+GE1jln0W7Jj3f76jB6HE3BbU6PCHdlAtgVcQ4j59y9dchI8CAwEAAaN/MH0w
-HQYDVR0OBBYEFOMdmsBGJx8YHfiziaJxU93Fc6C5MB8GA1UdIwQYMBaAFKtG6epl
-yoCil1KnV/uy+jr7l6hfMDAGA1UdEQQpMCegJQYDVQQDoB4MHG5vZGUyLmNsdXN0
-ZXIxLmVsYXN0aWNzZWFyY2gwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA
-g/ZYdzwpQQQ70gIZ1jUSRkUUXAU8LNTLRx7fGuz7t0RNZ5MoUIlX/9GiJd3BPZOK
-C3fxU6clHn2PA2p6ZyPfR+C7jW8akyHzqAsrawzXg0fqtlOwm1U0njNwt7xLS3Tn
-/naLQoWYuj94rVzoV3wYjehcl2zJovudA2IrDeOGU/vAj2zwTnhagQ5eDQVf6A8H
-kSItIg5kM+7XRYxp1VFgS61B1MGT8JWMATqQ6UyRXlI30HXWOxfL1rmWKmyNB73y
-uMEZLibNAJkAl1vOuiM6W/OHKLPQ0htJnny70vX8nGNocWsAaQyDd7NfXpghS16P
-fgttR3nz3R5lcceu3hKehw==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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c1.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEowIBAAKCAQEAqSJGrVXaNf8UweWfv68BZoHlx7Wf3Skpmds8J6JPLXr1lpvu
+6/P4wf40gmcutPcr0yVbDhJwa5NQGwjVNfVNHVg9q94ng+ib9pOT9zz8CD9Ec291
+GxxcjaxHV30+ZUZFhmHpdvkGAgsWzMPX/jwp3GxxeDBbpuszhrDuYkDRfTKEN7ne
+ewRaoD4d3hYGuj/PEArqDyNQAmIWneBvo3zH8p1KvRl541eRM58fWMcyl/hBaeGl
+hXudHHQFjkZ4EfqNgpoJqY2ICEUlKrCf1xqnyZYIHLCQCsNccrhkyoiFqhgpTAjB
+8LwoAM+bV2Rv9W9zqkpZ9nkA2lJptR27uScTUwIDAQABAoIBABegbSUboB744ipv
+7E/3n4d1T+cFDS706BXRFWcn+k2NJq+CWu7lJvPakfVBernW6W1Wg5DErKWqb39H
+TZl7Cem2gO74WqbHoLniRcI856wzQlmp0T8XSCqWTWUAXu4A0geCt/1hriAs8mNq
+XErslqBvGa7Deponswv2vWZGTb1iTYk57NuLptB4xndraaf5swpEc5kixSz/nVtu
+CCW19TIW5AKbds6VIubBv9AueNmdn+O4iRqIUTxDZnlUa/Z+wGl367cmzfswM/eO
+qSphWJModroIVG9KiCe3FgHfSFihugS+HmIplnqjK+DNSO2AMgrg7wQ+60sggU5z
+lSS+nxECgYEA7Tm8QF4UIvQTKOmQMkt6M1X0Nm2d+7dx8lhCQPvTsyiEpZWVxUTp
+2iUUE1HMvqc5zf7CqCqUMAnL0RArpXkcYyzCgjiAma8nt/qxmoVc7bVVHXHM3R4t
+CPRwV2OPlGs9AbMJGDnoX4RLfb14nzvbSRol/WI3QhMiD6UZeQ87mysCgYEAtoT7
+hKAuiWBmYTGnKNBTC0WNvkvcOqhBiBkePGt7QLCXe10pdTKiIcQdo+xn17zGkuxF
+BilXkEozlE0IajbPYChdcCWCHqPh6s2pRDTlqLphPrXD8rCp6mbl05qq63zR2lK5
+Y4T/jhf4raqqleWlEY/rQ6/p9GjZCiVa/AxiNHkCgYBlRNVZQRAlj74yI+rbnZ7w
+FUxog8kCcOBizUyTQy2veKePrFjAWtfduSBl0vCtnuOtTYk5ktup2jS47cdEH3x/
+1da/EnHLqZsyDgINbcsq6tMH+9GxvzUIcpkWpTjg6hqkBBLo1aeeRvKXHfBFQZ8u
+CMyY63mdal+LADbsmBUg+wKBgQCnYhFfsZ678aIyZFzOOy7NWX4CFIPlb0SZ0Z8+
+/brMuqZRRkCs8EBsAvTDzhv1Z3QcbX1nhyZ8dvASgwrCjX1ky9/U5zELdHPM58rh
+eDldoX9pCTyoJofNJYyDoIY66/9v3wmRUPkkkKtIaQmD6lSVZIz3SC6gLD9O5K8q
+ExlE0QKBgDHiBZZRz5AQcyd1hiyWloaeUbNXlKR3XzP9hkvZX3+iZOQb76A9hIlO
+Ddfz3dgFtspXEiS/nyC1RhwqLkW5yGq0SGsPU0rsCKZCeKqa9uFkkr8ZukXRacd6
+XbYOlhlZYgq2ShRq5q3zJ5ixuWdFhJo9tCprvjAAjMsDDFUB+bta
+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c2.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrDCCAZSgAwIBAgIUBC0p+NZGKecWH4gpX0rdVorODmIwDQYJKoZIhvcNAQEL
-BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMTgwNDE5MTMyMjE0WhcNNDUwOTA0
-MTMyMjE0WjAQMQ4wDAYDVQQDEwVuMi5jMjCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
-gYkCgYEAwD1plbaw0HGBzX3FhRKZIbz+RncMdhwHTZFLrfLbRm83AEhvMyhrBDAP
-1nyB+p/3Mnsk+eaTK+Fo/KBjdakbMLfS/Ewb9cbr+k9ZbTLGXIvULrRqefWvgFN1
-Fu+azjNrDqHS/qh4833+hnqyCM0TEEGxkRX1TIvrdbQsRw8j71MCAwEAAaN/MH0w
-HQYDVR0OBBYEFLwdJ8K91/Xq8cEGOZvM9/4G1gvPMB8GA1UdIwQYMBaAFKtG6epl
-yoCil1KnV/uy+jr7l6hfMDAGA1UdEQQpMCegJQYDVQQDoB4MHG5vZGUyLmNsdXN0
-ZXIyLmVsYXN0aWNzZWFyY2gwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA
-FdgI/IHCkZKV72pjgI+0Pz9nOvplX9SdBHYOQHl6gKdaa7RsBlqbY6VIFXG4ZNh5
-H/DWTixiEhgquNQJbum7LNan8ugMdsQXXo+WBWOgz3mYYHcPWvU7w4pyPUraXkC1
-QbsoCqY8senXl1C2RBq4psw0jpobVZWqQJxR4RRSV4mb8E6wMa46xwXTDqoTgYLN
-qCh7ywhYYFkWIhfC/aS5D/kigcdU6IpV2hrNvFrFsNwCiNoyHmRy/AUDhGOE0BRp
-8WjHLE2gTsR1hIF1jNIN7vebkdqq2igxs3wkEp9tN7af3mjwwIasi3ZCjKoQHVUC
-EIwmFsFPsgQINx86HRWoeQ==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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c2.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEogIBAAKCAQEAq2ztOT8D3pRhziidKEi4QLagf9SklD66b05+jNReI8YSve0j
+UXhJN7Kp+h6t8Fcs8SSyjHNzXVW+nR9W/UrBBWg7cIRbe9wWVaOtfKvAp/D9YwaY
+SQytHyg5a+9HDgSTZqhZm76hF65DLAjGKRBarE9do2aCJE5Zp/w2nqUUVnoMSvfE
+W4KeSYqnZRQvyQsxK3p09jj8Yok6z67KtDuyigbzQIBdWAP/ZN9mER3XDJVfDtlQ
+FVfdXJ36YDGHba+qr/xEcT2Jlkkcfoo7rQ8+7xHOXIKTwg8qjjA/do1j3EGVHbUC
+lXI2Dm1f8zHZCotA2CRI0ZmFdIPL0NcX5mRHNwIDAQABAoIBACgtCbXqcl42eWun
+MhnwXRpxktESxZWm0+vlQhyAYyXQNLFFhAsCfWpr2ZFwokRbMgG8H4pyPl3oDBnn
+7+vCGtXJFXEr3AL91FAy4aR/3lGd1czhDUzFh0dvlnGY7Ra4dNFQ8FtjhH63zS9j
+SQnztsR+f0wd6K9Ym4OWxThOKSOQ6RglGdZE2PWyUi11WWcl0jebXfBPwmCLJu1z
+6od1OMcMIy8t15iQJ7TFG03olH1aK8dU924rlmRupInjtBY8Y1fyEjXQT3y9B2l/
+3SF3DN6tNCygkfq0wfxzrrvzIpcAkP28Cf+hEiHBD3PSXKFYsCNcPyy6FJ2crvgq
+DS+UWu0CgYEA7cTgYsS8E2PO57SN4AiY0DleW4b68zXE4ef7vrxGrWkU/L+nHcit
+ijNOBH4/1bGw7LyK/kssJFTtqKBUPz+RhcO98g1HHsXWFAGDA+oUv2R9SnAJUE/M
+o1lbCPkEHXMZVJo7DjkOeudYdHJCi0pLiG59afd/7AIQ1AT7JI8R2QUCgYEAuJHO
+HMn1HYKAH7rMrsvrHkLtevwX9vxj0dLtI/8YRo0kS0R4odkYInV3Ayudo2LufqWY
+oltTQaA1tR5r+GdPy2XOodyVM2L6lcaeHt0Z8ZMYie0+oF6nwNRrKANAR8RQ4OFl
+RmTjgYDytyMig7dG0iNCgiH5G/s/obAO1GeSZAsCgYB3zs9+FUHrx0wXpvwiWlKe
+AXpRRlenO33Ekz9f4cD/WkbQAMZ1lIwVajqyuubxh8Lt1yd2cWyBtiW25WruH9r0
++yf4Esa2c9umYwigbVAdDMaxPnkC9eLYoIrln4x6RmgKIFkHlqp8NZx1uKldRIeA
+7KPXRHY59uSB4SynREwq/QKBgGj8z1CC9MH/fKAP4uQ/LJP/IBUIFx2wPZuaLrh+
+H7HqEU4bOb9evSLEzJjqE3ZgDSfPTH52EmrPFh3bmzEmmzYoyBw8XEZps/7Ehycp
+P9uxf5DdefVBQo0mh3mwN71bB2KT88bSFrOQxP+1palk9I0N74QUjR4EkhKIEjdy
+Xsw3AoGAdWS4ZGXZo/bePtTMaakba5ju8rCe9gYBldL7venkwpYEAbP9WKSqkS3f
+xiaW8zMwXdjqVwAbdMNDz5Ci52g/mRkIyMl2Mi/eW0FslKM6rNVA9EBLT2YXPWms
++U/dnBqbaJ3qRMbqRNm9g+SfJAv2S41WjMUzln1dQlxTaHID1S4=
+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c3.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrDCCAZSgAwIBAgIUJOYUNCOnak39xRysYs4KSzQALNMwDQYJKoZIhvcNAQEL
-BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMTgwNDE5MTMyMjE0WhcNNDUwOTA0
-MTMyMjE0WjAQMQ4wDAYDVQQDEwVuMi5jMzCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
-gYkCgYEAqWUXhz1gV5BnMS4T9gqVyod8OJL62oQ0nR0WPdyv0yODkm7cmMcvuWVk
-2sPtyGHv1gyKcFteLsBH/1TPV1zJGk/ecrCJlmyfyhnJYKuahf0SN4U9EGmtar6o
-5ja5RVWiEmAbNnpJQPGVrBPLI5zmhT/C5hvieY2sGwZP22e0c7kCAwEAAaN/MH0w
-HQYDVR0OBBYEFIx2Qg1dSxouV+t8f1G7G4qw4OfxMB8GA1UdIwQYMBaAFKtG6epl
-yoCil1KnV/uy+jr7l6hfMDAGA1UdEQQpMCegJQYDVQQDoB4MHG5vZGUyLmNsdXN0
-ZXIzLmVsYXN0aWNzZWFyY2gwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA
-diaaL/4cK+ycmIuyb9pf70PZ12/mNSOovYX0G/ZmhcuISxIOwig2LWz2DPlTs2wc
-QBHsmiIVy0cvMM+cHgOgKz/gr1ZgkS8CoRblLh6gKHVrSkixk6oz8FABVrqmkSMw
-McjMft3+7thITso2jRZJWRl2sbWN+cs0Rwjw7HajjHSLbmLu0/6rwioGTY8TpQJT
-K3t0OkvBFCUQEsN1pkkXgncAoxeMQQg0fl8IJ0mrGyEjKgtqUuDkDLVdOY+y8oL/
-vbzpNHb93LbFl30Dl0Z4ugcUDPbp5tDzmeHMFbPGcKZd9s/TEInZbb/AfpGMq93t
-t4MVFO6u5XaqOV792rc+kQ==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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c3.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c4.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrTCCAZWgAwIBAgIVALfaOUWIcNx5DoNpszbsieO27BDlMA0GCSqGSIb3DQEB
-CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTE4MDQxOTEzMjIxNFoXDTQ1MDkw
-NDEzMjIxNFowEDEOMAwGA1UEAxMFbjIuYzQwgZ8wDQYJKoZIhvcNAQEBBQADgY0A
-MIGJAoGBAKMaYHZ4RiQN/cACOxN9GEyNtxwXC1PD5rD1nPCH0Efyg5SLcDzbBj5Y
-VS+BGl5HIQ3hwX62vnI9pRM8GJOZXX4UGHQ4gdd3B+qbW3n9K29cSqnxulIZiE+A
-x6LOXwwEzSag1nTEpJQo09LZPusyzXnicEJ/RpC0krAa9g6gnvNRAgMBAAGjfzB9
-MB0GA1UdDgQWBBRsXxUJ6YradZoLR5+cQBXgj69aOzAfBgNVHSMEGDAWgBSrRunq
-ZcqAopdSp1f7svo6+5eoXzAwBgNVHREEKTAnoCUGA1UEA6AeDBxub2RlMi5jbHVz
-dGVyNC5lbGFzdGljc2VhcmNoMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEB
-AHe8DhnLXUPvfbKWV2h2NVI1x6MuMBFcDQ7HgukHwMMydnHclVZGffXu8ZcFfy4T
-NxQ4N26irZlwjfpXSpZeE6b1fZ8x8B+3czXSZRGJIi8muBA2/YJjH1ul46z6wdgr
-aR3RYQTYzEicM+qY2SfISEUqx0RGHxVhoFBwNaS/EZWXyi1XZfjD4XQri6KXJIgX
-yf+zr5V0ZVbNSEci3gUR+TfjG5RWE/r8XiagZ+h4TJidAjgt0CPc2vONbgcgcb7k
-mhRA92z/eT1etHaK29Ne13p7Y3NI2MxWHvyygGICBcP5DsthRVCNAbFFq7N8ym8Y
-2ensWXgNScolc5SjzQLUwss=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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c4.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c5.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrTCCAZWgAwIBAgIVAK7v7QnhK4+lR3ne9GSfZiGiriXiMA0GCSqGSIb3DQEB
-CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTE4MDQxOTEzMjIxNFoXDTQ1MDkw
-NDEzMjIxNFowEDEOMAwGA1UEAxMFbjIuYzUwgZ8wDQYJKoZIhvcNAQEBBQADgY0A
-MIGJAoGBANLAWJxq07CPGG6VYspUbzyEMn6pBE0z9Or69wrDOKM7CVM8CzrN7aw8
-zYDLuOZy4cEJxLJKvtw5wQfh/JELcMH2WNLIFNABl5+m+FpNLBGgFMC48NUCfPex
-D7JUPAc7oiaZQ/CFCP+5YK+a5F7M9/SwVfQKKnsMPK3v6zyZkFO7AgMBAAGjfzB9
-MB0GA1UdDgQWBBTKJgGOBVnP8ZNUNlZXD0iNkRRDEDAfBgNVHSMEGDAWgBSrRunq
-ZcqAopdSp1f7svo6+5eoXzAwBgNVHREEKTAnoCUGA1UEA6AeDBxub2RlMi5jbHVz
-dGVyNS5lbGFzdGljc2VhcmNoMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEB
-AI60ZuBWX9IFBBfGSx66cDVV6lCiwtl2h39SHDQoCPdXz0uLdpJqLEhmpQwkf25T
-j4g3bmfRMTZbsztEZFNDUkyX7hlgmTEFmxyx12Z9NtOTzp9xaZdhAr7fAwBRcWjJ
-CHPjrfjR/5CVXtb5XcGdGg18x097khfFOdubyoty4sJ/4wT4zoaZzTLGskzzvvsn
-BSMJdCS2kM7ITGxsUYC2r+LzKR2/nX00o0xefGzgJkPr4fdDwCxsobYWspgt2SkZ
-pjHV1/Qf9qdpi4wxcvZtVh3+YT5WGJRwTsbBicZ8i/gj88qRi5cqe1XiJ/05MGrt
-XEM5DWun3J9yjav9v0jfZyc=
+MIIDUTCCAjmgAwIBAgIVAKBUQjzcNrPi1ZjAItNKdgM+K8OvMA0GCSqGSIb3DQEB
+CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTIyMTEyNjIxMjMxNVoXDTQyMTEy
+MTIxMjMxNVowEDEOMAwGA1UEAxMFbjIuYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
+DwAwggEKAoIBAQDSlxfS27E0yYRF4iEY+t1vDkvWN7sgS0QaoJcBqg/XbDeZlq8L
+6jsIFiMewikjNCx8Yk12SoDDORR46AJ/durbCLDRwXrMZJ4T610SkLINrzrUl2sS
+jcji32xd2sJE/69eOB+pQ4Tnc8Xiqi2Y/3eSsLIH98yob384yBgM6kyb58RCWygN
+EiK5YBMAFXlyeUBBGMSoqNcSxBXjBIdA18gnrMMd5rA29QBCtidVKjQGqpUKruMp
+gW8W9B1XCuctYx0ZHzCIZpvkWzo8GdBusIaGCsiH3JJ5foNw8RpJN0g/Ja0OFYgI
+3ZfJGotHPlAg87Edyja9PvnnmuQ5f7MUYBz7AgMBAAGjgZ4wgZswHQYDVR0OBBYE
+FLJa8AzfXWJwVAZH3w2939hbVbm3MB8GA1UdIwQYMBaAFKtG6eplyoCil1KnV/uy
++jr7l6hfME4GA1UdEQRHMEWgJQYDVQQDoB4MHG5vZGUyLmNsdXN0ZXI1LmVsYXN0
+aWNzZWFyY2iCHG5vZGUyLmNsdXN0ZXI1LmVsYXN0aWNzZWFyY2gwCQYDVR0TBAIw
+ADANBgkqhkiG9w0BAQsFAAOCAQEAdB5GmXYTCXhO6Vr1eRL7IVQqwWJYfNozY//F
+a8LBgDOPPhlU1zC+siroaPirhb2oRyR5c76Ar7N9uC+5EJt9QiBTCiel/DJ2OUfA
+XLa9seTj2z1csAgDC/dlsStI6EnE5JFmE4DmN/jM7SEtyS60F1lp3XjAcP4reCoV
+M1Uwrj1ndJvZkDnYmhXJ8MOdI6cmQXY0xEsH+zo9+gGC6dyn45O4HWO3LTmPGJD5
+RDHZANZWbtHt6fx6oY/fFzRFROdRrc4G4NMlTeLCNIXbJhFLnFg2yKO5LfD7QaZ9
+/7f6k68enrdSUlRSMh46VV6xUxk8PG1zwqD5zdxn2UvDMyuaOQ==
 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c5.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c6.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrTCCAZWgAwIBAgIVAIrh/Q7uY55aIFW6/o/ToRCGAKLAMA0GCSqGSIb3DQEB
-CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTE4MDQxOTEzMjIxNFoXDTQ1MDkw
-NDEzMjIxNFowEDEOMAwGA1UEAxMFbjIuYzYwgZ8wDQYJKoZIhvcNAQEBBQADgY0A
-MIGJAoGBAICwXz/hU7DraQWX8TJWd8hva4KzTKOpq8JjnbCd1n3ovAqbDP6GkgVA
-JxY0eMFwP+u4jN2JZuTISWIUOmLGosyHpXsXQwbsvDLUC0JPb6v0/omkLFsrIXgB
-t2xIy7Bt3eifKUmUGO3ePi+LbgKYq7YNy1uVaFiYLR3PRul+TCXpAgMBAAGjfzB9
-MB0GA1UdDgQWBBR8+r3Wp4Dc7QfmCXkTGgz3gyfP0zAfBgNVHSMEGDAWgBSrRunq
-ZcqAopdSp1f7svo6+5eoXzAwBgNVHREEKTAnoCUGA1UEA6AeDBxub2RlMi5jbHVz
-dGVyNi5lbGFzdGljc2VhcmNoMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEB
-AK3Q82RwW4pqllyno6FO3OGOM3Dr2I6RN9N8A4eJShZXpyIvrgSH0/WSYolkGz2/
-NobQQBHFUYcjWtwUdoCTNrYXrENbG6j+EmW0ey5VBZNHyLc3clufGMc76uJUvARV
-OLeyeSuSjJYxUafwacIzjsJtJbmixmgweKDI8jmBIuvSohnn7icwjGx46nbagBpJ
-2et0zT16kVl6Ti/GjEYw3Q2q4iZfWaQ7WvqVYvk0gidbDwoJGP197MexeU23M8tS
-CcmTLGoj9LbW6mc5maU1pxD7h/cFoMjgHQCDsV7tyoex5ZdxrUVaBKqGT4CVrPXK
-OKyAMVQkOvxq5/QsYT+MHiU=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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c6.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c7.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrDCCAZSgAwIBAgIUe1qpohqiGcra4yw7HWh348nvcGkwDQYJKoZIhvcNAQEL
-BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMTgwNDE5MTMyMjE0WhcNNDUwOTA0
-MTMyMjE0WjAQMQ4wDAYDVQQDEwVuMi5jNzCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
-gYkCgYEAhbZCMJKpb1FJW1h/xfK694X12jOwAp0Oo3qv2f06lSuR2jMH+2C44+/L
-7JJoc3/Xf0is/VBgKpqJpQF69RDNTU3v/JicVel0aI1SuRZfLrBNK5mGYGbevbLZ
-fAmuzMbPn+5WlBzWePNmyw431SDabPEq9m+ziFRedfYY7K6PHQ8CAwEAAaN/MH0w
-HQYDVR0OBBYEFItxCmYpuU0EV0BsB9Gbc4CDQJKSMB8GA1UdIwQYMBaAFKtG6epl
-yoCil1KnV/uy+jr7l6hfMDAGA1UdEQQpMCegJQYDVQQDoB4MHG5vZGUyLmNsdXN0
-ZXI3LmVsYXN0aWNzZWFyY2gwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA
-JorZihqwU6V6qWUU/GaXGHBMCIUtQVO6NsLbV+6YQ0ljSDlp4N6f8M2UFZZ47wWT
-t6nWpFjrm00nng8usq5OF5KM2vyHyQ4gGs2Dl2+R0+BGy8mvj6yLfkxMMytOPBHK
-NYucWh0Adjk1HqSf6Hrb1IskZqLk1/sJOoHoFnUixJ2Hz1L3Fcwl/eG4eeJ85KNS
-vTx+Yqnx3S/51euuRcIJfM+1+9nBkAE8aaS2MLpTuU0kWvtk0PBPuro4t/8iAZ/G
-di7yoPhtcwwM3u897hlRBkx7mBe5nae5HSAt3tqIGkvFQz+BxXfM8cvYOHaFyPRh
-2GrBdAXu9kFDKfrAWxIUzQ==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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c7.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c8.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrTCCAZWgAwIBAgIVAJC+xJO13Zt3e/q5XOGbqT8JJmGsMA0GCSqGSIb3DQEB
-CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTE4MDQxOTEzMjIxNVoXDTQ1MDkw
-NDEzMjIxNVowEDEOMAwGA1UEAxMFbjIuYzgwgZ8wDQYJKoZIhvcNAQEBBQADgY0A
-MIGJAoGBAK9dg+Pl7I8v6JIQCdZA1W/1ieuKHHdhnVkNYkI9y1Kw7cPyhZVsApOz
-mjX5YccUCgu/zsNgo6K/Q/Mo9/2qxx/JCmBvaTL7PAUzFS4VPJFwiyM4rhebP38w
-TUb4YXKk3Y3GZ9Xy1vFFbDMmx4HREFi+2PacMZyrs7pCIGtvpTlNAgMBAAGjfzB9
-MB0GA1UdDgQWBBTCTGp5uFyY09VJmeqTkdEVrElUdTAfBgNVHSMEGDAWgBSrRunq
-ZcqAopdSp1f7svo6+5eoXzAwBgNVHREEKTAnoCUGA1UEA6AeDBxub2RlMi5jbHVz
-dGVyOC5lbGFzdGljc2VhcmNoMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEB
-AKG8Jr8rNglt/TS2LX3/J0Fsgob00H7fmV4DAuOM/Ui3VeZi1xdHm8su9s0R3dDb
-JkU8t/cI+jrg2OI54nDuxaNRX0dLPWIfb5Q2Z3cXiDdvvy/9RIK1SvN1o4XERIfd
-Vu0ZP5akVexuPgZWfEpwgeOrjlkhO5VrHap9+igvSsNU2mJtzK5iFy21nYobC2OT
-/a+qxa658RdvojerNAiYmpC0mvKv3Au94loJ8emoZOnVIS6lQivCz97tKO0L6tnI
-jOsCu7cW7IAxKvYOqtOSZxZzBHSa4QFu6HixpTITbeyJ6a8MaiejHG5fRZ3BpSIG
-BmlsawZmp/Rrd6nLq2Aztqc=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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n2.c8.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c1.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrTCCAZWgAwIBAgIVAKd2+KsSsV/wqMN6BTbenGb0t7J5MA0GCSqGSIb3DQEB
-CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTE4MDQxOTEzMjIxM1oXDTQ1MDkw
-NDEzMjIxM1owEDEOMAwGA1UEAxMFbjMuYzEwgZ8wDQYJKoZIhvcNAQEBBQADgY0A
-MIGJAoGBAIzKcPP+NTeJoVHNK38SvvMpHADXXN4iavSOL8iker0xzCV9EPpBCi6b
-zfiCjUqtS5n0ySTCce75Y4yuhLstAZ3DhUyKvdV3oVZMv2T2Tqy2ybrT20YwhRjs
-MXWKlFjIdWLp4kAVfMt4Mf+qp9Ou+RCUKCtYl1+caHt8K6lE4uPjAgMBAAGjfzB9
-MB0GA1UdDgQWBBRJ7Oy8e2RR2rHLjBcETcdR4DmY1jAfBgNVHSMEGDAWgBSrRunq
-ZcqAopdSp1f7svo6+5eoXzAwBgNVHREEKTAnoCUGA1UEA6AeDBxub2RlMy5jbHVz
-dGVyMS5lbGFzdGljc2VhcmNoMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEB
-ACJxPS9L9+bStPqXjVGavLMH1OTT5Jz521oB3KgOnYb0pEewnnUpYi6Tty8cuoh0
-a8MoAF0O/pqqXYJQ9gaUBBdokg0raDcE1c0jObd7OR7IFZoG4ojVh0M8fK28ykFM
-F+Jy2nGLiW5C2Je9pPELYHmwfuw16iU65WlSYkgPAwwc2oNNnq5mmvLgGOE1kcri
-lFjQuKgQEzt/U4oRX74zHHsajC+ZYAYf5mTrz7qJO4IH8/+//HahimRUphE0o/KZ
-NY6iyRppdhWWLQFQ8+VpTY1crmwP5qyUcrlSY1zl5zkldU9dfNmz2NdjrnWtMbl2
-VdTOSAtHe6OtvsPCAlrGFyU=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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c1.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c2.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrTCCAZWgAwIBAgIVAJfn9TW5KLMUqkzAi+zsAHqbcTZWMA0GCSqGSIb3DQEB
-CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTE4MDQxOTEzMjIxNFoXDTQ1MDkw
-NDEzMjIxNFowEDEOMAwGA1UEAxMFbjMuYzIwgZ8wDQYJKoZIhvcNAQEBBQADgY0A
-MIGJAoGBALEnh4sMjt8W7vwIeW/PirZad6tqKbiCeGyhSWNL07VGDKUsAfF6RY6v
-oyGjBow/fPxQ7OXjlw5BFEgO3DxlTbxLcNk06JV7d4RrfHhCGF3R3x1L/icTg+rB
-+QdAaMdHAiU6Fme5qGUZg7k2C0JO9mTnJO4tIsL+frPGRFmlNZyzAgMBAAGjfzB9
-MB0GA1UdDgQWBBT9XQWzCcEEuYHJXQVr447M/HqFtTAfBgNVHSMEGDAWgBSrRunq
-ZcqAopdSp1f7svo6+5eoXzAwBgNVHREEKTAnoCUGA1UEA6AeDBxub2RlMy5jbHVz
-dGVyMi5lbGFzdGljc2VhcmNoMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEB
-ABd6sS7YCm+KYQKxvhM0I9k4BS3rkd3L9fRajM6gciPQhXpfO4X9lKxXtGfG1LcC
-13U8k7nV8o9VXCcNSUXtLt3jk1+qprqPfAPDWiYkaYgRImotgU5q5IxM2uCQXZP7
-BTlzBODi/e79jgzuxhbOCzO/6D7Eji4vQP3MCnikzjXJ3MMDIV+u4M+e8UuS76vt
-5HwsWQrAMl1hfxuA4a/9OhbfHRrVaYOr3czULqr+66IHetsDsUZs7JSL7qPXFldi
-oMrUQnqECwZKhqxokiY0i/mrC8frajxQbk9Y9GVSBsGess9YXwNXW2VdbyyZFwkw
-rIdSfF/kY4BNf3/c1FqVjNc=
+MIIDUDCCAjigAwIBAgIUXLvr7qOPTXFguQJGr8lY7+4BwNEwDQYJKoZIhvcNAQEL
+BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMjIxMTI2MjEyMzE2WhcNNDIxMTIx
+MjEyMzE2WjAQMQ4wDAYDVQQDEwVuMy5jMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
+ADCCAQoCggEBAKyLoDjJimn98kRd/QVZmQNfGthB4aKi7Cku5engQ3+VHrO10Bdy
+iOivVQXUupIR5knYoAZyrLW8gjSjsNiO9Gu/fcuYOcw57Oh7ODgjnVPyNtudDHv8
+rbkBgy6qUjtnRL87wqxNEjDXWA0uY8/NS0Fp8hH7ZtmovhOXADbkZ8KJ0WY5GFft
+HrugaETe3zuOUQisZTtORFpIBNmA41Jzt9Q4RLkyck3ujJOpzXkJo/JoavFKtukf
+k2DIVnjmL2ntXgI15th8DKe7kvwwhisrlMScU0ksX3dXTdnptiDdHldPJWKPFy9g
+4Qg9tsalpnpULrK9oDCmqqQZmaMupj7MOS8CAwEAAaOBnjCBmzAdBgNVHQ4EFgQU
+WU2KLwZebRk8cUl9ygl909D1eF8wHwYDVR0jBBgwFoAUq0bp6mXKgKKXUqdX+7L6
+OvuXqF8wTgYDVR0RBEcwRaAlBgNVBAOgHgwcbm9kZTMuY2x1c3RlcjIuZWxhc3Rp
+Y3NlYXJjaIIcbm9kZTMuY2x1c3RlcjIuZWxhc3RpY3NlYXJjaDAJBgNVHRMEAjAA
+MA0GCSqGSIb3DQEBCwUAA4IBAQACnbIqetl/9+thIq8QhzAMGI5faSrx5eAiK14B
+2Voc74zEt6UlCypZ2r5A2v7yF/Qy9eW0+JJAfS18azfIYjrqftgf7Wo7nNlbXWyi
+EN2hzVgxYz2bc3YRILVYjk2qh1uI5bQToRmIimdc4DKTIUSBGowyx3aLrBSm4uri
+kbz16klJ2G5JKDvYq4kDR2EIaqSHhyCplrdje9zzaiu/HOawB8vNYkfwzuLi1D3N
+/9e11DEwQJTfBc9rnBk8rgWT3IjW3nc7xL9LK5pdGFE7FBBc7IDn//YEI8fv+dnT
+XqG6+CBRyOaa4ztWcGptGe/9VItqF5V59HTd6UAbaO2EORoW
 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c2.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c3.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrDCCAZSgAwIBAgIUHMEbpWTGffkry4rCbr+g0f66LGwwDQYJKoZIhvcNAQEL
-BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMTgwNDE5MTMyMjE0WhcNNDUwOTA0
-MTMyMjE0WjAQMQ4wDAYDVQQDEwVuMy5jMzCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
-gYkCgYEAlMorfk1gUwZci3ta792qR6j50VUKQ5AqZrvOXk74eYzfPZiE8TJwnphG
-dfMm8Ru4v04+4pf5tTzrl0L+dKebSLvVWYE+VPz/So9jyb2gHT7/I1ypEjum7iUp
-SiVzM09exmSyMrcyRpWSRQcrMomC4EK5OwDctUv1EUqAlgbmuqECAwEAAaN/MH0w
-HQYDVR0OBBYEFOkY81GYZIxcO6x/wKKrfPah0ThRMB8GA1UdIwQYMBaAFKtG6epl
-yoCil1KnV/uy+jr7l6hfMDAGA1UdEQQpMCegJQYDVQQDoB4MHG5vZGUzLmNsdXN0
-ZXIzLmVsYXN0aWNzZWFyY2gwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA
-nKuZp21gDBXwZV+u3/QXpsR2jLp1T8oWh1d1GuJhXkHqT59DTLgaDxNt+8gxA7mA
-Kooisz68hOjBP3KGGvz+WUWM5KhwPJplFyQi605RJOdczYf5+6lRqbeCQnC0kaR7
-iSvfqyLQXc41aTL8MxVBkJJhr3N2Qui6H4H+8nHv+R9ShE2HYC9UDUcifoabc1ME
-B6wKWM9TbGSqozeH65v5yDGcC/17LMe6oKuI/kti8L3Tbcp7E2bRyt0CeYXRwq7e
-/vA83WufkhfXcZZzOvvgJBxKH1MCj7D9tIOMv9Wv1vu2ECBaYPIcClTqcSjGrguw
-XHBKbhh0L6a0jcsolV7v0w==
+MIIDUTCCAjmgAwIBAgIVAM29K8aZdBEwDdTEdx4fbHG1OYmNMA0GCSqGSIb3DQEB
+CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTIyMTEyNjIxMjMxNloXDTQyMTEy
+MTIxMjMxNlowEDEOMAwGA1UEAxMFbjMuYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
+DwAwggEKAoIBAQDqYHMyjLjGNFPYUwDI51w+jLytzTK6gWKQHX6ZziyfTUilDea8
+ZyvHaZ5Q0gZCxKgFHn6QB6QgREAlqVnWRXbD7ypFlsKC/kOEBE6h487GuyCF1B7N
+lbT3yN/6LEVYNtiwr2IRAZrgVMnjMIaZA9BPULsUFmbm4ArBLxwvaS261VMcXXCi
+Pfx+BxtvM12b0kZ69TsV85lh0p6deDGvevDPPLsxGuRevxGj7iklRppbZQFg6JdO
+lddi+QiYgIjAlN2NrN8n2GXsa5OQO6JVe1F5Mab1hKizhzPpq93wi8wMGXLFkhkO
+Q2FoZgIejo9Gt+64Xh2w8rmHhAKPbeGxi0jxAgMBAAGjgZ4wgZswHQYDVR0OBBYE
+FB362r6yAWeg2JFXTAk2CoJrWERvMB8GA1UdIwQYMBaAFKtG6eplyoCil1KnV/uy
++jr7l6hfME4GA1UdEQRHMEWCHG5vZGUzLmNsdXN0ZXIzLmVsYXN0aWNzZWFyY2ig
+JQYDVQQDoB4MHG5vZGUzLmNsdXN0ZXIzLmVsYXN0aWNzZWFyY2gwCQYDVR0TBAIw
+ADANBgkqhkiG9w0BAQsFAAOCAQEAVny3LlCab5oI86tfO6oOOsonw6qhq8P9t99j
+vz7wUEt7v6+SK5JouApSxpBTVs4Wo+1+0RGg5z5KJefdovHKdIc/omxhlG6lWPBr
+2M3YXkNuRTbg9Lon/EqzNeI/VL7Xev/uDMuUG27oSn3XtGVVuJkjit1uZEZVS2Ez
+W0/MhguBauyweFZJbL6i5xTZQiZZTor4WA7MKawy9/lAAPWQ5cG0t0PLdT8MmhdB
+h4o8MzW+kAR/uCnPYLWNh1bPNtAHMXWYkycgdbs0pGx++r+Bsz028fwsVLb7EDBB
+FvQvhWx2zMxhQ271j+EapduogbU/C8fWAICiezR9KuYu5zfWvQ==
 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c3.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c4.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrTCCAZWgAwIBAgIVAOcJa1E/SlLyIMeH6LDKqwCVLxS7MA0GCSqGSIb3DQEB
-CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTE4MDQxOTEzMjIxNFoXDTQ1MDkw
-NDEzMjIxNFowEDEOMAwGA1UEAxMFbjMuYzQwgZ8wDQYJKoZIhvcNAQEBBQADgY0A
-MIGJAoGBAIwFiuTI0adVuF91ltRwyCzA2Eb9fV8JUKmlVXfjElP+XGG2CUerk8H1
-Ps0nPDFBCZB+0VM5BzjrtsEYmuEk7LJDXzoEj6L2MiYKIVia+qxzLvSfbcdJsGNX
-DrKn47sKDrUJbBDVodI43xGCplWyyhf0MS6hMe+7ttwb+LIZzTFLAgMBAAGjfzB9
-MB0GA1UdDgQWBBQJKDvefckZz3in61z5pdM6CpIwYTAfBgNVHSMEGDAWgBSrRunq
-ZcqAopdSp1f7svo6+5eoXzAwBgNVHREEKTAnoCUGA1UEA6AeDBxub2RlMy5jbHVz
-dGVyNC5lbGFzdGljc2VhcmNoMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEB
-AG6ie4xkvfaHLWhq5BtFYVQO2+z6siRz63hBySKwyCgoNvyk1h4xHbmyB8gWG7G7
-TUjCMkRovx0DIhCwtK3Ahj4APh/QyqY3d7KV4i9jQSLXfyaY7ZdvLt18RE9i3MjL
-QR4kGSPaTKlhAOyZ/qr3NdyQH56cvUEto3hgBOb71JcqpT4DBc7w+W/wNeSSPDb9
-/7m5Oq5ntS9DzJBpGcfZ4IHtrgZu9x34uYLkYCblYiUQ4QQyyQae6YyihfzH9QsD
-vt5ja0lueTLuA+LAUv7OxDQm5USXQeRmXYT+Oq+MBKoJkMznftKYnWK3tchwr5qn
-2bQoMq2HNQtemjZAZ3IoQYU=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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c4.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c5.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrDCCAZSgAwIBAgIUVSG6oHWDOX3AILqaPWoYx+i69V0wDQYJKoZIhvcNAQEL
-BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMTgwNDE5MTMyMjE0WhcNNDUwOTA0
-MTMyMjE0WjAQMQ4wDAYDVQQDEwVuMy5jNTCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
-gYkCgYEAm+gpSNeO4opovT+vEOBd34pKfiCaIqoe0D+vR60gB35glziDShITOGMs
-04qUkM44nnv+d/Qib2BdkNlze+l/Sv92r+0DQp+MRzdNE9GkuV4B8yF99hpi71hJ
-MED1lkrYRLUiEFUjmHccUoO6fF8BbdQwvD3rBTpAss1nDuO4BncCAwEAAaN/MH0w
-HQYDVR0OBBYEFFT81Tir0l9q5Cr5n47pDeY9pr4EMB8GA1UdIwQYMBaAFKtG6epl
-yoCil1KnV/uy+jr7l6hfMDAGA1UdEQQpMCegJQYDVQQDoB4MHG5vZGUzLmNsdXN0
-ZXI1LmVsYXN0aWNzZWFyY2gwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA
-BMhWQlbyMG7OYN7Xtt6d9sOduI+peTlDKju1DQHS0P+jvCuT46Tm7u/4A7G6ommW
-Bc7hLaaGi1gFyiR424FSjiQJg6ye5zdix09H6DQipzSB5GwfyQsB3YWsUniPQn1R
-ZSaqQvcuD4vCXANyo9LE/3VOJKqXB9sLdU42nNU4M4vyB9myTLTHodFoKuZwGifP
-/lv63dd1PQXfeQ/u5FtWopSDdk6fMigoKvo7f1SViTUtI+PmK19sOqOK3qyrCagx
-I0+krf0TsAhdGo1gwpu40JLb15pWU99IhKIAkAu1kjmAxrpkbztAH9wjCm1/jS+V
-nHe7wxiLzStz64Ld9voqPQ==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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c5.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c6.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrTCCAZWgAwIBAgIVAMK8wla5/wXpbdq+VeKNBkL0pv6/MA0GCSqGSIb3DQEB
-CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTE4MDQxOTEzMjIxNFoXDTQ1MDkw
-NDEzMjIxNFowEDEOMAwGA1UEAxMFbjMuYzYwgZ8wDQYJKoZIhvcNAQEBBQADgY0A
-MIGJAoGBAI9iaWrpHwmXPBC3YhfzkVe10A7AKjRzdo5uv4ra8xQmVzsdk3lQ+oQD
-YMDFoP7rfxtRLzB2Z5l5rChFbkLav+3G8DJ09Vdzs28J9Kxz7N/H9tEiTmgvzdPV
-BWRyA7D2WPPiaHBeIIrtgzfZbHenyxuDxfNtvgvSgUZMEjM7Vg83AgMBAAGjfzB9
-MB0GA1UdDgQWBBSADI6qBveWvxd9C8xucsFtogIDRTAfBgNVHSMEGDAWgBSrRunq
-ZcqAopdSp1f7svo6+5eoXzAwBgNVHREEKTAnoCUGA1UEA6AeDBxub2RlMy5jbHVz
-dGVyNi5lbGFzdGljc2VhcmNoMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEB
-AEb1kIeYEWrqqCHC3g7eM0r7sCIvgL4fLNeWNLSMnECM2nBaDTpC7JQhVo+nnMKE
-hgYVZ1/Waj7LRQTR0tGZwRVXWKLB1suCszp+6Y3ZCeGR7ife9Nu+ZFucszw3IfgD
-q4DmNB/mVc4Uab7ud5BdpEVMLlbExlasiJ6pDMf0ql1MpWaRfV6pExxbeNf+FQhO
-pHWIzNk1Py/i2sTOOU6aWajQEY+2xFjlcdKzNFb0Dtq6ALsD6NuHnSIqAaDH9cAY
-LmMPzzBy7s/4HAO2LM0xyec5T4WI5+W2f2V9xpkgwG8gp/ypdABJfw4/WyeI+bpW
-ki8XWEjW63yhAUDTsAD6pXs=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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c6.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEogIBAAKCAQEAtqzK3mODEj5xifhx3soVJSRumV2E5kq1hatKoKrZVxb2XidG
+6A2zdb9NeKv2iK3r26/dWPd8oqXzD2I2qc8FtBKUnXpaBacMEtoB670LqsxM0d2h
+2jmc2TI/y25mk25p+UrXCweKWPqGKYieYYO+Z+T+qVPMHgZRCOewsYJJsQW8qLvq
+ln7Z5NJNqCCA/b5OSq6+0GcARRVBYiGliylNcLnrTyA/Xi1khndIVRc5YGOrRTRa
+gETEE6y+NoXhfsInZBQ7NJUY27gFUF6JtwXXa3/x2N26vNgH5XEX7XJjsXrjYjD5
+8WDSPb9v8qLe2vVnSCxoTu9zfJWgjboFi0VFOwIDAQABAoIBAATYxHsuYxG5WWmC
+j4GMlWS1DkArHzW9rApIt1lYSchJ7Nh7rKHHN0iQ/lJiJvo3ucchkpBj5J6AzlhN
+T/ZPxAQj7WXY6LQ3W0Emyp/sFff+pVfOIcIN/u+I/0X7qboQrGbNCbPvtnJ87HwD
+9XEl6IfjfK7rxmx82L/mkdAWjQj8JVSCkNamfIKqFKxBUv7CxW2qZpDfUG9yXXKS
+HCXAx2ff7gIsaPGW77EUcDNS7yL3KVtIkEwcoWPixBKAr2rbhihzNp+c0MA4KbV9
+HTQEYyDqGX4+Y80jznCX4xpeLXvAEtuzktfRTWQ3IXp4AF76XDd8PlPVGEzjsn0s
+N2jF/80CgYEA4YAWH3FlWZ09RjDysh9axpVaR2+hvTojTsNCPZ0TdHhJOlEGpZDD
+Kk9H4cVHPZ09r/ijPQQ+dWL9sfhRgp3M4nUnzNwzSeXIu0mP9udwK128RDQswQ/V
+cMcPBtbforg7IYLq3Q6jDyW/NaZd+02vqZmm0Rh4Gz0hWLrD1xQZymcCgYEAz2Hi
+bGw8MrG+GrokbCRIEb2/ODPouO6Czu2OWddTSmjMFhi178gufHbqHU2datvDwnQo
+WkM7HKGYQjXlw5+fjrJojjh3vZU+ukm45zNdjs9IZA3HOWU41L9GzRsxrkMZPfFF
+GamrjItS8JKSc3erfnJcl2wkJJlDDTkbDKE3Ug0CgYAok9TnSY90RcAt7kbt2IiM
+LXn2Wtce5uRNmwNDdQ14KuD6dnQcvOTxqxyDOu2r36ynCrXNGANpOivup4F7YIvq
+wCwuR/2OsaOiWAVo55Keqxpip4TaJNBCn/9LOsU5Ua+KQzWiG60p35/9tnc47mzK
+txR2kdGjDSgAAHOXM03ExwKBgDnJluSLjIK70LN15yxTN9npu90XaeQOYljzDVWv
+kMANT8FghWIZsApywG4F8LWUI4qN/6iXT2N9DAZ3Kl1Gn5mN0WDAD22+psoWPPX/
+9DQVQqDOzhMKR7nQyxPgXgmnHOOL1at/AhSZxjTPQwv17s2/ZFm1gqTIKE0I+qac
+TeQJAoGAWvzYUHkXVcqSIp2cudsXMIiQQ4rt18GvYwYLaEI7qtshfISbQTwSPzBR
+iViFqw4Ne53mlKrYusMbZPJ5gsmsrKuKJVaMyil69CXh6NXxVrmaiAFYJabWKZtd
+R2ncCgdPUBuHBoA8msR6h9XRZQe8CPuIlJMgpPXRfQYyxbMsZcM=
+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c7.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrDCCAZSgAwIBAgIUGKYfqn6eHAmevff9PPzxeULwjFIwDQYJKoZIhvcNAQEL
-BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMTgwNDE5MTMyMjE1WhcNNDUwOTA0
-MTMyMjE1WjAQMQ4wDAYDVQQDEwVuMy5jNzCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
-gYkCgYEAxbb/mneg3oKdKk7tMpcpC+KDBsWWvgx9tKPqHFBWIrklLEeHVA87wuWo
-XVoEmoPRmaJkHCuNSUOmNUsw4ZAigdCHLI+Fxgu3RXE5YcOlR/VcfIdmeTOkZTmf
-kAVl6sRIPMARTeQkqaaG93WtXpSFQ+hO3RBIkJ3t3vTL7m7dUH0CAwEAAaN/MH0w
-HQYDVR0OBBYEFL/uRR/fiAlWZMNJZ8ZcDCDLLkCaMB8GA1UdIwQYMBaAFKtG6epl
-yoCil1KnV/uy+jr7l6hfMDAGA1UdEQQpMCegJQYDVQQDoB4MHG5vZGUzLmNsdXN0
-ZXI3LmVsYXN0aWNzZWFyY2gwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA
-r0hXtDPClFrZFUu8WF6h7kLwc2A1Dp3lFtYUrih9e7e2t9ANPMAfYbUN+bS/QCJ7
-1ric6GBn1cyLagWV9EyxoILtkd8lGkXUC9tuS3uk2roq9KBOFgmoIZ3zvWaN8dOT
-juqD2Z1hOQDUTYdiggONDTRXUc+PELS34571oFXq/c5/ZZlwww3J+Vxwr0a3N9LM
-l7hcobhUZIkFz1GFjU6H/64WBDtb81A29ZVGDsRSqsgZJECjigMZhmq9XRPjVSyq
-VK2bCg90lAIlH3408XZVXNahcpaWz6VXq4Rg2QAN9yES9u7t3qkL35AxLmCpmd27
-xp9v2+CIHghzMzboSiZ1Ew==
+MIIDUDCCAjigAwIBAgIUTcFvgBXm16tCqDZXc34HoyfR0AYwDQYJKoZIhvcNAQEL
+BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMjIxMTI2MjEyMzE2WhcNNDIxMTIx
+MjEyMzE2WjAQMQ4wDAYDVQQDEwVuMy5jNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
+ADCCAQoCggEBALT4AM8T4lJiPu2zNijce7y2o7mNH8WV4UwegMfyb/JBuDenTACZ
+V8DoYtug0BL8ugum/I0esLPHSdcuyo7Pn2FXHgTJ/9b3btQ/aKArvtUscHIxMS4f
+PhOU0LyfRXErRq8NNqL36B3RV7rG6vxyhw7VLbouEn7ZyH2P22zHjZMWIesvk+yw
+Yybq4d5byDuMHhL0uTRXG3O05Eej4fz1FYADAh+ZbOnVs2U6Y4ra2yZIHtNnM5SM
+MHG4TnFwA/nEbPOa0Khgc37IoBZ+eDehTHLVLESxN7a1JZEbarzisW6bpUbCKRf/
+ycKT0TUwOHPKIu980FNk89dz840Z7L1sRI0CAwEAAaOBnjCBmzAdBgNVHQ4EFgQU
+bc4DH6455vgp/RtqE115RYRhjl4wHwYDVR0jBBgwFoAUq0bp6mXKgKKXUqdX+7L6
+OvuXqF8wTgYDVR0RBEcwRaAlBgNVBAOgHgwcbm9kZTMuY2x1c3RlcjcuZWxhc3Rp
+Y3NlYXJjaIIcbm9kZTMuY2x1c3RlcjcuZWxhc3RpY3NlYXJjaDAJBgNVHRMEAjAA
+MA0GCSqGSIb3DQEBCwUAA4IBAQCoEhsgNWIwwj+ACbJj+lEPCOpGmPmYWPyMKtnI
+W5lxvdp9DGDFYtzpuUAsyKMxT1fCGGrED3f8sWnIujGQYdBNkrhhsgSnCKqmlGXk
+M+YCbeoEhNcaPkcf1ZWfZvCkOoIWt6Q1E1ymziSaltCEG4A47jfSAbr4cRbIoxpK
+Zb52G9aAPdjbzIfxW9NVAlFelD8peahpnVWN3+ghNU+7SXsiP2OjUY2K6guur4mH
+LxXinkDmtsZT/k3HJRujjA3hlDcvV6RzO4GkgxV0kBodWQ0V9LJFzp3RLSI2PPBY
+edguNIMyNxzEU3DlW38U92iHp/qwxkvGFCIM0g7T+xSu4y/o
 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c7.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c8.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrTCCAZWgAwIBAgIVAO4k/NUJiy5g41bmdZi+G1mdw9DWMA0GCSqGSIb3DQEB
-CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTE4MDQxOTEzMjIxNVoXDTQ1MDkw
-NDEzMjIxNVowEDEOMAwGA1UEAxMFbjMuYzgwgZ8wDQYJKoZIhvcNAQEBBQADgY0A
-MIGJAoGBAIr6JyOARsRn4zJ//TSQ3eMigJDnDTz4qloEcGRhdsEmEkiVxmawSx5X
-YZeqvQIz69axBViHQZEa1emNrgktmzR4swV8wUip8tJhcic7iegSYk40VG8w5YSD
-fVhCa4JEjTF+H/0B61j+Gq81Xzqw6g4m8kJWqWCvICNDo5SKkBSzAgMBAAGjfzB9
-MB0GA1UdDgQWBBRYXtwMkHRZ58jOv4Naa7AkihBRijAfBgNVHSMEGDAWgBSrRunq
-ZcqAopdSp1f7svo6+5eoXzAwBgNVHREEKTAnoCUGA1UEA6AeDBxub2RlMy5jbHVz
-dGVyOC5lbGFzdGljc2VhcmNoMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEB
-ADGVl3fvVGFLIRBK1+qQK1LHGkGrNpSQ3R9q7uDSHBIP7YYp90SF9mwNah+Ma+0e
-ZqkmpD85QyzYas9lbXJebE/Mp47W422xwbVqqCqU+w7XMpLLZUbY8LM0PKyuepJv
-GETzjI58H2Z9kU99xW3aQ2dti8UcfBeoOiFJgWtyuI4uiqa0u/5+by1uBVW0n1Cv
-pyZD+bWfFt6Aoe+8xkQMnVZSTlfTfgpUzWM8vDmNi4l2cSOUHa39zWmWRH+QEl64
-EF1rbGwxaYEZ4/8JAdmWD8yzjjUtmJjxjn6PpLOQCDkhTySlNFApB23bShr/ABD/
-KyiL0JK8z8EBOkUxZiXztSw=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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n3.c8.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c1.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrTCCAZWgAwIBAgIVAO20mZ8U6BS1TKy9C/jR5Fiz5Ey4MA0GCSqGSIb3DQEB
-CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTE4MDQxOTEzMjIxM1oXDTQ1MDkw
-NDEzMjIxM1owEDEOMAwGA1UEAxMFbjQuYzEwgZ8wDQYJKoZIhvcNAQEBBQADgY0A
-MIGJAoGBAJbrB0ic/oGENs1JDhRT4o23j3AwbeUE/CEKZqwHUIavjvIHcD8Vay/0
-TpAJrG6EoriqlqNN+m+Bm66NENnyuLsj4X3q4LyX3WwFimQt4LQkssfv9+q1kvac
-UgKyytoZ3ummHI4bhpYc3Bq4SrOQchLd9EZBCvURMKdDPjxsaAJrAgMBAAGjfzB9
-MB0GA1UdDgQWBBTLdAFCf9QVjWvJ/FUvgZl8vxkmGjAfBgNVHSMEGDAWgBSrRunq
-ZcqAopdSp1f7svo6+5eoXzAwBgNVHREEKTAnoCUGA1UEA6AeDBxub2RlNC5jbHVz
-dGVyMS5lbGFzdGljc2VhcmNoMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEB
-AJtTgYL5eBaKTYNEWgehivxg5a4uV//zasVQHt6DX1WfJO6mYuDQl+OTdwjgKPKz
-m2ICAKjZ2PV066hzazrVULpjgMaUeRNxzNJi/5QqiJorNSsFVwSYkMjDB99KgWPf
-22QTx0mV8141lUZY49iOnLk5u+h2tAhTF9U+S8MvXha+vyKc0SQpJcFurNxEZZvc
-x0LCfLDixW/xs7QcfiNO2/Jn5lQf6hIOkyOUHRfsGs9QXlPyjnhvys45+CQb5Cve
-v3vEDnE2lRe6lQn2k2ZOWrL9cyYfROcJfQLfzoKpNdr2PaFEd1g5Sthznv7KrAQ6
-dHr6b9xgGbf9I349zliuhnY=
+MIIDUDCCAjigAwIBAgIUKdYDDACrr711ztIDYAPYtIQDDgAwDQYJKoZIhvcNAQEL
+BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMjIxMTI2MjEyMzE2WhcNNDIxMTIx
+MjEyMzE2WjAQMQ4wDAYDVQQDEwVuNC5jMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
+ADCCAQoCggEBAPPiQKn+A39l9TS5P8KJfu5hoh5pFsaDkMT5qSrVJkBSa1DLOYzt
+umxQr9Xwg7rg67zvP3IIsDFXm+vgXj2z27JMcVJwMECen5WFeRdedI7Ph+Uk/J14
+q2Ew/Y+LLG4SL2nHZZpMxKvti502M2fpPzjpZ+/0ivXXAQS52LePYZrK+nMJq5oc
+u6aOuJo/pAV91Jr0mUIPFPl8trNaZfol3OKBDHkxYKlO6R6bR2bLIUkyVD26XnYQ
+0pbcEjGL1b0uJ0JavvYclUIiHdxplIZynO/qOSD1IXd9JEBPYJjlDQErfh7D22l0
+DMQrOILqkDojlosM5891H7JQFOxFTGkEpwECAwEAAaOBnjCBmzAdBgNVHQ4EFgQU
+NgJLwqdmEv4JM43jmYqNHe0yGB0wHwYDVR0jBBgwFoAUq0bp6mXKgKKXUqdX+7L6
+OvuXqF8wTgYDVR0RBEcwRaAlBgNVBAOgHgwcbm9kZTQuY2x1c3RlcjEuZWxhc3Rp
+Y3NlYXJjaIIcbm9kZTQuY2x1c3RlcjEuZWxhc3RpY3NlYXJjaDAJBgNVHRMEAjAA
+MA0GCSqGSIb3DQEBCwUAA4IBAQBbPl4px26ZSsGn/DTwYhf6XYug7XD47S/SlFLP
+ji492jLW2nwecIVAwWnYkwiy0+T96zSrQvyIn6YVGmrw61/VOYI/3YT6qSQvSLid
+TxyISqCl5hvgx2zJ11retwpg3w5Ro6Ex0OKKpTQBg3QDsIk1hdQ8Jr/jwriG9zHr
+E0Gz6hUTpUc046NXCrFMkK/WkvCW7vqJG6skixcGsUmjV2CKmQv7QLqurIMNOXEQ
+uXmjs1NMxPObVxVvi/eWhZQountdpOr//uIWZvGcPJvX9tQurt86+0t5t6fC6lgm
+cSrGJifA40LRM7RDGC1m4EOm2ozinWOzsAun0H1XsB8xQDFC
 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c1.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEowIBAAKCAQEA8+JAqf4Df2X1NLk/wol+7mGiHmkWxoOQxPmpKtUmQFJrUMs5
+jO26bFCv1fCDuuDrvO8/cgiwMVeb6+BePbPbskxxUnAwQJ6flYV5F150js+H5ST8
+nXirYTD9j4ssbhIvacdlmkzEq+2LnTYzZ+k/OOln7/SK9dcBBLnYt49hmsr6cwmr
+mhy7po64mj+kBX3UmvSZQg8U+Xy2s1pl+iXc4oEMeTFgqU7pHptHZsshSTJUPbpe
+dhDSltwSMYvVvS4nQlq+9hyVQiId3GmUhnKc7+o5IPUhd30kQE9gmOUNASt+HsPb
+aXQMxCs4guqQOiOWiwznz3UfslAU7EVMaQSnAQIDAQABAoIBADuTFCqyUxZmyIw1
+iF60CZ6fmOOG1jpt3wpO1kURRkPGHlLhIdDMLZLR7vH6y6L12IARjVUEzE1xUjQ/
+XaYC7nLSe4ggwZi3ZtI2hYrw1tYf2dlevJqW5H5cYkQTQiotJQnY3HfhstUwtL8V
+g18pufjkAzC5csx01dnasBa+3p/Z5VcqpOhQxOsJVi3ccpDi4zEe1LYziIlelEbE
+acnXLX/8rrbVTbzw/spGCDJyKhmT1G5VOsJcwDDPD8DY+ocMZa0cbDDsU8YxwhHa
+rZs2O3ZdTIRFNA6ocTERGuCUYTbLFWJ+p5tqWc23LSPI8IqeO7KKbZ0+Ryy0Dwnd
+lH5lFXUCgYEA/b5DG/A6t5lwIm33Fvbfd3j64L6Hucf1Z0tE0ER9NlfeDe1Te2up
+0lZX4LxT/dNcI+ne6sY8EuudNQucubUzrECpv+q+ubd4DZktLwDpTZId8AzkgUPu
+ZAnU8c37vDgEN6W6hJ83mqAWkOM2fsz31mzN2q5J2FXItJWhKuSt6rsCgYEA9g2K
+vNa+KQaLCL7QoKw3/PZylV1zQn0qBjnoQeWNaZTJvsxHPC4S62T2RNZWw5UVj52I
+gU09BGfCbcnMUrQ4AJZbsga0eD7DMnk92Cmz3gdSjD9baRUmlnvwPUodoB1G/6Ov
+EXOtb085iEg3IAiG8S6ik6rKFCiWF5i42XpVz3MCgYAD2TjnWZNqaXdb7lMLFB97
+jmgvtHQWi0Pblzap+f/0LQz/JRRZEN74g7q9e93CQcxp9wgcg3kxyEUQIubzoh3w
+hOKOOJ8/7dpySlp3Fgpz1L2DgI6Or1sURVnnePpSdn8J4QedL1UGkVsGQ4v2DGHN
+7MSKho40K8jphEN3hRRmNQKBgGK1Dgoxj7m/kTkh62n5jMBjUZZQFfP/aEN1KZJ9
+91v6v3BWXOFsjlR2fUEiR05Q2YRyqxdMGAVTZrFKejhXafv6VbC2deGjNAVklAXK
+vQh+IYR3ykD+pitKbxb3S6k29YuKa6nxoQr9WlQsvEiSgyfwEHJy2nx5x7SRpN5B
+8Hi3AoGBANjS14zMpLAMVJZr++kWrqBPZ5mzjhb9DdPSy/CfQL7Qxq8lPPY7Pvvs
+tG4rsmnIWDoO3ReX/QD0x4FQ2IjXrdDN28okYZewnWy6r9bHpUYraXXyhJSw6mkZ
+MPm4GPHHANNoanWZvg6fmPRH/VRiGW1/0OxEnUG2a9P8InvrgYep
+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c2.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrTCCAZWgAwIBAgIVAIIj3+gGiW2qnF1Y0DJuJBBFfM5MMA0GCSqGSIb3DQEB
-CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTE4MDQxOTEzMjIxNFoXDTQ1MDkw
-NDEzMjIxNFowEDEOMAwGA1UEAxMFbjQuYzIwgZ8wDQYJKoZIhvcNAQEBBQADgY0A
-MIGJAoGBAKj0cnL86BiN2VBhvrH3XDplcwd8lFAGxAzAfP+Sx1Swqd6y4hZoX2Vk
-J43AuYvJY7aoMK4xIQJ4lWbrvCa+5epbOY1GGg82Z+/Od7mfZppfajCKTAmAIXfa
-SW48V/fRZyYl3KDfP4h5AqJV02wAJ4g5r7Olm74dwAMclLF6FqwfAgMBAAGjfzB9
-MB0GA1UdDgQWBBQ9SpGlYooWMcJYNuTND5SQk6EPfjAfBgNVHSMEGDAWgBSrRunq
-ZcqAopdSp1f7svo6+5eoXzAwBgNVHREEKTAnoCUGA1UEA6AeDBxub2RlNC5jbHVz
-dGVyMi5lbGFzdGljc2VhcmNoMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEB
-AGtA9aht6J9uVrrow+ks4IxvSTeDK055rdM1ryCkszKf/QPzsDfj0VONEjJM2GhE
-Wib6KjYz6Lki7mEa6DY1IxPZHzMjjkfeLYmnE2+zgdGH0X5D1bgO7cK7tWmcuVAO
-eN0YxO67av/PZT/00wLYva1ubH+zY+C5AZYOxJpPcJ8JNpwO73UDFZwbnUzvpK6b
-mFN/eBqvB7XWViJcHgoXEHkYH9Fetnpt8T6EYxWDL+FYi6iN4/L0a60l+emeleha
-fcbjwU5Ax630EZAEecRB1D2wYxwOIFk+CGLeXpT2bSgvtmfU/pIHPeSJ2lSAydui
-bVeYBdRoOZeUpX3LXO2YuLg=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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c2.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEpQIBAAKCAQEAwRg/cLEIM69LGMJL9DP72JwGXuasGLbE/lDnXrqlI61qirQZ
++iFC9Olr+z14/lnVI4mGazY+cvmbMry7znfURhGSQCILKjxqQ1x6lVPsVB/wBo14
+RfeIPQ9I/d6DgSm4lboTRhMb9QxZZutigBLXlvhrUybqSia0rjpuc669Ie9ISwCe
+2K+iWUT4I1kE3hdsAx1arlst0j4/LnKbYeVpWh3KCvpVHMttJoviwuZ4cEJxezBx
+K4FUbFl9X2gFKezmlZGsapcpMetHf4T/RQf3cqaxLsxayP+BbJEu5WCp/rt/KMfW
+I/zMjcnTHD5ZLRIflYUJH7y0pCwztZIAudbt8QIDAQABAoIBADohRBv3V5pDp85s
+07PRIHy9v9c7B00rXJOZJIYql0Nt1fiqrnVUJRWY3daVU4Ly5Uzc/nfxLQys4xF7
+quhFv8RWTtp6xTSyWmUsBoVE7g0HTlmSpkYd9kg3fUhb/+fW+QguK9Y5M33qeVGY
+BB+9TGTZJWozeW3YSCV5Vr4BuVNo8PWkb9WROmQTUpVzCCnNJFsqNG2QUf9kh6B8
+BSxb03j2imvhXT7Qb8fvnJkFryaXnBDSoK9CSxMbgYr2qqGsE41+qRyf9YWLEHIh
+G7IsVlq1/CKyvuP+6bk0wgiATXvxafmT3KpQQEwEF3D+LOiQVr8J+y3L5rcN6Coi
+nKcBzRcCgYEA72NpKoiD848Ay6MXwzvJ11OgI+wYgwzrF0yjQiFAAwjFPtAmo4OF
+2s0eDK0DJjO1N2rD7WCueM1ojQGaWixglDq6N/Y2XET5z1exQ69bruHMVDKz7/hT
+r9d0tjWhpvqXbBXzb6OXlNtwY1BhKOHEo7TdpEcNy2VgYu2WgMpeuy8CgYEAzn51
+gsE8/8XQHMpm4Jr8xhyWFjMoLuxmcZAviljMy6O/H4VwVQ/JnZTOaZUq3AAQIm/I
+5nWbfl4GEvWgfhWWyj2yJiMmjt7HhQz65su/d6WTsbZcMY7AcL0C13trCNoaBQIb
+PKjn7L2CfeFRRnJbDwjCGDxJ4JWxAwc6VhnUIN8CgYEAhWH6ovxVqUuwwcYp41pY
+6GVsARf3wG1eQCkvfhVQuWAVpx4LqWgLGRLY/28XJh4BhtMyP/1yuVSaQJb4De5U
+EcN3Jt9FArxcBK9z0abPiu29D90AbWEMIBoIqc3QOF3AKTVB4p5gQ0zRnkSXHlRN
+YHnSVUpR4VanEfgXt8MKbXkCgYEAmekIDX2aycnXZJ44MBFVdxS3ibR3rwHlGaAu
+zx+BBgf23LfJEp3B2QKhF3FnkLM7U2+efqgKThYm0Nrj1RaiXfu+XU613qeOb01N
+ddlHzRZND5is/wM3zNAU3ifPj7mAy1rWklATDhHywYC/45I47OvKP+Yv6oWoemlY
+wfReeGECgYEAhx0cP2atYt3kzz0UGzmh61ShdJ4xlJfNTOeN1xQA/4zc91r8/Ht4
+3CxjN0CZZ5BTiTygQ88FEv4y+bmmpkIq1ztDJF8dH7C/8WhtGmgFvphuKKkzHtUS
+sSSpR19bUsBoRQin95/WoeeDF5zPXLP1ax9i+u3PfZCP29e2ZUaTpvI=
+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c3.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrDCCAZSgAwIBAgIUf9E+9p3WuX54FsOh8veaBlZx8ZAwDQYJKoZIhvcNAQEL
-BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMTgwNDE5MTMyMjE0WhcNNDUwOTA0
-MTMyMjE0WjAQMQ4wDAYDVQQDEwVuNC5jMzCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
-gYkCgYEAlLG3qMUCPi2usnc7jsxRFHVGjbf5+HWY9nWaboIQ1vHfn0Z3m/hOOCvx
-waNY4RF75V1ZSeRsAKzGeDD4NC1KC2Dxa81elMfbXq6nLDIfh0klkK8lSw6snzpe
-8NDMSJ8agNdr6zLUgL9e3qh2pU1Fc9ApR6+HRXA9rcnqp/xm4XMCAwEAAaN/MH0w
-HQYDVR0OBBYEFCz38GxHKudMx4dyBlrAcIB+8XC0MB8GA1UdIwQYMBaAFKtG6epl
-yoCil1KnV/uy+jr7l6hfMDAGA1UdEQQpMCegJQYDVQQDoB4MHG5vZGU0LmNsdXN0
-ZXIzLmVsYXN0aWNzZWFyY2gwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA
-PvCi4fiQ+711I/HQqE1YLGv6Z/Fys39CV2Ch2f7VVgb0o2O9UVpvs3UHxHwNOJpt
-7l3yap/x3Av8lheE+w+qwlf8M+JZMrdDkMxevc/sTT1C+Pq28uet+RfaOdDulL89
-/mFD9LP/kJUhZ/nH+/OONWJ3j3oIkniMNZ+fUktMp9b/efDGD1xb6BDqfOS6JJ1s
-NA2+gncc7uOkPZzOOq/cxZptlU5jN+EFu/o5RHpkjA3S6yQBav8SgahDgRGeorUn
-WVaOiv1OdX+LuJAfZbGgOOxBi43zKT/TDhITcTTHCjmNKX9rfP1lrUR6lmqmFlwK
-L9pdLHQ/cPPNgWa8C2Cffg==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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c3.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c4.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrDCCAZSgAwIBAgIUBKLSOiGqfamUa60JiTDMc33jgg4wDQYJKoZIhvcNAQEL
-BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMTgwNDE5MTMyMjE0WhcNNDUwOTA0
-MTMyMjE0WjAQMQ4wDAYDVQQDEwVuNC5jNDCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
-gYkCgYEAkPA4JMal7nY+H0Rcyr5Kmvu4uL6HG0kWw1XLXq/ORJ+NoQqGJ+X3mJ4F
-HPHWb9l6yfumutK7HTSUx6voZzgFVG1OcZ6dUakffCkbjeoGVe+4G2ojlwfvjQrr
-JhoB6aXJLWRTDY4VrNOgijlBzYwyZHFF4IHLAWD/8u0RCGLdiZsCAwEAAaN/MH0w
-HQYDVR0OBBYEFANGShToR+wz3wlqm3RqJGVNkBXvMB8GA1UdIwQYMBaAFKtG6epl
-yoCil1KnV/uy+jr7l6hfMDAGA1UdEQQpMCegJQYDVQQDoB4MHG5vZGU0LmNsdXN0
-ZXI0LmVsYXN0aWNzZWFyY2gwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA
-Tots0b/0b0tceD8D6XlqY++Qg53berDvwBjEu2ntMqlrXh4r7h6fOr9pmJ/Tf66L
-VJVnYWG19uh9owI5pO30/C603N33/hAljDvdidQZsaKU1KJ4Vun09qWstRF8PbZO
-4OxTzAblcZtHs7DGhKJL+fovS1k2hz6691jfxFXXls3S7asOnFrXoCDkG3aGvvNp
-+HfygNewAQSnimKKzzYHbwqqhnXAPQbI2nF5h8rFtoew3sd+Kdh6GTqCPZWntlCX
-hEG1+MS17pms3DuiJt5TPsZh0piJwkFksbuzkYEwH8Hg9Xvi/0ztY7J9wrCqicUL
-r9j1FaOwi9QlwLVdFAEQAQ==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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c4.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEpAIBAAKCAQEArjtMcpDPaZKfpeiyiEuV5/32BB7urrupmnIE5Ht57boEcwPh
+zlql64Kqpuzb4JMiuyGnS26JPkvq3YxNE+q5BoNeJ5k6nTxgL0EmKb9wuqVPCacg
+z9L1DTC/MMIqz0vedTUS9BngIW0klnQb7KK+R0qZlVTyqU0sKrmnr7qplipcDFxb
+jX5S4/b0vckXZKLeCWHHvpJ8PhOG02M3cOgFJp8Jts163leFcOr5gkZtynpBT4ey
+FzCU4rEOziWLCz+X4BQVOySgK0ug+ngZof97zf7IYTAEsMYgOnViSF2eirZgZiJD
+Zp7uYaoRo4k7ztmmwAfMUVGKocjqI8VvQ8NMmwIDAQABAoIBAAL6l5GD4U/0Rk9/
+XYIQDMWVJX4nizwokDtIRMYlSE3ktsvCnrs4+IpAxysodI/v5BGf/yy+fJE4mhDk
+o7K5+iTe3R6/M23ZyOk163GeSM6gIexP07NJ74+krDgosbOun+SQHj1XLepUY+JA
+pPOUSr2MTHjtpWJ4o88tMm1CO0EKfCRgt1T/PrDu8HuhqBBiTANO/3WZneiqk8tm
+6jSpbnL62AxsWo8YjAIcsCvpI+iiRpKfxuTPRcwfQj856YxHXopqsQyIg5hfTK61
+SdDFSMZFglnkaUrR4M8YhH5W8/Bei2PWkdk9EdGaXx/QbbmnOOmQkrTz3E8t8s0P
+1IZNjwECgYEAz8QgHCFfp8gvsQKpbtvQkP80U51Rf7DAVLF0hZsKsIsebRRV8blE
+IR4mtnuHCSgnYZhYSWSq+KLWJYkJidoF2qdHHUVraTabsUOmZ1Vodm1pFbD/d4pd
+ymAZJDO+l6VXyBf69/01QM9E2LSh0wvIrgwmb4rsPDVs6UaWPJ0XI5sCgYEA1q4q
+Q9QriK7iA75KVmP0mEvcK+lC7S4Ob3s3UsZMHOGTVwEwmZsrlfqllQY4LjIaZQzl
+RDyX+knlG6ahI8MCCKppP+BY4q0zSzbiBtHDymtfS1QOd58AH7YwA2WC+cyy10aC
+TAbY0Ld6awoxpx2NW623CJQAuE9I7j3MBbn1iwECgYEArKCjoVvlc630WloA15iS
+ifdRzeuXzMXaeERdsakpz5g39p//7PFndzDrL5Ihl+0iE4gWSxz2pdH+pn9fSoe5
+d3ynrN2CKpBx+m5gM9mWC1hLCPfgu71ewojoOtk3kh6SejHal/RuK+RLqtci4g0X
+d+2mfeVq9Xfaf1Tj/Yb0s+MCgYEAsWfwCWl2KFfM8qb4K3gikxBte+QhqHrc9wdt
+6ntwPpWy+r1C+k0esawV1Zb0KkjBQyxq8f7Y4L7cFAOZOkJWle6tV1oAWiIjN069
+bkE+eTJN56Qo6HV+1rXp64ShveiJChl8Z3NpDOHyyi38Zkunm1Fs5ivYhHcQn8B1
+r23DGgECgYBwFa9bJtVx71JAw5ZKExPwjrXBSh6dFAxclANmEinXMkUfrXwLiVup
+N2pTFWcJlGBxXuXaGnOBqE9ZW+8Q19Y8cufKbdeqLaRhmDwG200abBjSaDQn6fkO
+ttvOKRmgotRwxTeFzl6E6VPC/axP96TX4fKGZEwrexZRcCD0JzLnCg==
+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c5.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrTCCAZWgAwIBAgIVANsQ0wa8/+5Cod0nsGdhVVTxFa4WMA0GCSqGSIb3DQEB
-CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTE4MDQxOTEzMjIxNFoXDTQ1MDkw
-NDEzMjIxNFowEDEOMAwGA1UEAxMFbjQuYzUwgZ8wDQYJKoZIhvcNAQEBBQADgY0A
-MIGJAoGBAKCP9rT1CKEdFPbGE2ywJgZiX1qf5H36DwokH8diz/XVk/t2QOU7Hqui
-5HJkQ6Du6ywPXOqAIg/Iv3Rj1Vo+B9jcPs/DY0Sj3mKdZHhySaoTHPWjv7mVa/PL
-fMElbmB4sYkgfotHVxUir3Xw5byGkJ+SjG+xYrMOSktBNph4Zh4jAgMBAAGjfzB9
-MB0GA1UdDgQWBBRrw5xcRVozWKOs6ZHd4Q524MCFyzAfBgNVHSMEGDAWgBSrRunq
-ZcqAopdSp1f7svo6+5eoXzAwBgNVHREEKTAnoCUGA1UEA6AeDBxub2RlNC5jbHVz
-dGVyNS5lbGFzdGljc2VhcmNoMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEB
-ABG0KkEjBMa7QdsiR3Fi51gX5w4r169yXmkh52nYOKw792zI63TDZ00WNIMAZg6y
-PG47XTbF2DHGsAuPbWYTDO75SLJT0f8XKAHpw8TIdv+zly3CKzXN/94R1W1HNUuM
-lTSy3gbGy3u6AkZXivbtMNaR2loBGsMAQCHDM3gmi8PYsIaL+EDekMUF0NbiFyBY
-TVEGYERzvU+ftXryGn2BML6ODKGGDcSlzTQb+tSSC/+bfoaouYUcvU7DTHUpHE3I
-f1RzSC/NRv/gx3HKTdlpNNUNqIANkyWgtKMBbzOhn0SkAlIc5Ap9QBYDIZW96Aj+
-/Vn5JlqUvvdbtbBbEz8+zyA=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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c5.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c6.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrTCCAZWgAwIBAgIVANcbAqZT0PhoeOyE4LXgFN/20v+RMA0GCSqGSIb3DQEB
-CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTE4MDQxOTEzMjIxNFoXDTQ1MDkw
-NDEzMjIxNFowEDEOMAwGA1UEAxMFbjQuYzYwgZ8wDQYJKoZIhvcNAQEBBQADgY0A
-MIGJAoGBAKiyEVPmc9H8quSkeyFE0GpA1yuRJfDd1OJ3I+ogifTkmZcKu3u1wCbx
-v675xRdpRzCbB8+hUr6ZC18qWUDxXp1ml4iRr8n8bVAmENgJzzp3RLBZROFuwVe2
-dttun1SMiBlnlcUnmSCX7OCTJWrr3tI0/F8RIdaB+63gf2Eby2eLAgMBAAGjfzB9
-MB0GA1UdDgQWBBSg537AtIe7R0hQVRHdpCNBBw4I2zAfBgNVHSMEGDAWgBSrRunq
-ZcqAopdSp1f7svo6+5eoXzAwBgNVHREEKTAnoCUGA1UEA6AeDBxub2RlNC5jbHVz
-dGVyNi5lbGFzdGljc2VhcmNoMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEB
-AC94yZdlaV+HvgSBn/uc6cDYBXMqe9tW1ENkEpUTYl0Umyy50qxonlsTvZijKB6y
-S9vcnvUMs8+AOGPgwvEszM3qY1R5co+Rl+CXI0sx2iZKEeyGDxAFDBldpGaOqV7b
-AXKeyR9SB5/Kh8XZVyxamtY0iWcRqdc79xljkZZ1jl3GbhxkXPGtPYYKCwh3u6hB
-X4cWgBD0cGvDi4yRiHI/o2ssKa4DGZIMKx3Y6aJ10l/7cJ4cWzkOaEc1RsUTSPtk
-MTkO7l3wt0VgCZz3ow5huwjfKwQgKGsLVEZQiLJLCn6P+veo0jm6Bf+pA4vVKWE7
-fzmJuag5fMuoc0oQbt7BxWc=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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c6.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c7.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrDCCAZSgAwIBAgIUU67LewM5UhpCYrMabvxZrdBHhCcwDQYJKoZIhvcNAQEL
-BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMTgwNDE5MTMyMjE1WhcNNDUwOTA0
-MTMyMjE1WjAQMQ4wDAYDVQQDEwVuNC5jNzCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
-gYkCgYEAjvRiPU8N+9dppeWCZf3gRL7r2afS6iS7YZn3yqYeikXec14GkDotYxR+
-ZPeG3iTwhE73I+iXIScqZmtqk6sL3Iv5Z700w8CBIhLFZP0L6MPDpT0WwBweRzC1
-BA1uXam3Cwp0hux5xAH49h0EZvFT6bxSVdhrunsWlW1N5vZIOlUCAwEAAaN/MH0w
-HQYDVR0OBBYEFEMbNKUNe9yyOtm8R/QonVKFl7C9MB8GA1UdIwQYMBaAFKtG6epl
-yoCil1KnV/uy+jr7l6hfMDAGA1UdEQQpMCegJQYDVQQDoB4MHG5vZGU0LmNsdXN0
-ZXI3LmVsYXN0aWNzZWFyY2gwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA
-kIqfKAq278AizLJjj0tTC7rQTlHRMpVSdzQUfdYR+IZ6d0AuPe3drBKEMLsXcY+r
-OndzUU4YVEsq+OVZcjdPsVW5FH7kHYzQsbxDTPujQgn5ED3ggDGobWG6di18hpVv
-S3Nt7iWN7jl2ilXA/S7fskRH6w7mVjiRMsV8QiwwOtTkj8e1vQBa6l9S7vHS2vFr
-U+nbTpdVrTKTZ5+n36KtmqUdhzmp2V3krVCihOF016TBzU7tp3+I4FNUaCLj/bsC
-A4KWacL0cbZul47Zd4cKpFDDo3PxSxDeBgLh1CDx4SJaKcrko9YRJ4ZgA33GAMAv
-n6V8wxMzyGROsR663RIySA==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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c7.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEogIBAAKCAQEA1Ze+qsE7ERIt9zD/0Kz1wZKgvk623+mtHtKjjIQywjDJ5SuZ
+eXIqBtSSFqTjLcFYzBShjt9y2DTf3aadDRwKVKaYeWLCJ/mYThDK4gDVy4qX2oPp
+d5LS9XTGXIwh9Zo9rAGQZsQrTbOFrhfy0tjHwdU7J6V5QN2FESiYgQLQBPCJq58P
+m3xOxKhaAulYN5rdkp1J+jAv/iSmdi19pd9s8SUdfdRDIMuU+ZF8gy/4QxTMBgWp
+qeUOjmf0H9NetRjatJM5Ri9J6nt74GGKPftBn8lBzgFWUKTNT6nSRzYOmbN/6Gjn
+9CgcgVApKkbt1RI60kWolbJeQFoduktxYVGi4QIDAQABAoIBAB0r2F03KXtaDEUS
+ashz7CyVJgxXxnTWU/qTB3CNguaFW02dTXIKEYtVROPVfowlN/IcxI6KyK3sABck
+RkF1bu5uF6zxu//8VWd0C6wfiRN/c4s4hjj6fdgK1tHqTEkK2RlrgplGeX48jSlg
+bp2KqzLh4xkLFIBeFhUTLPY8YsS0WrhxzFZT099HbdBg0mELPBM1/2AZHbiB6hcS
+vbkfnogOA4mWxuG+J/6r3cqONq3Blvi1P2uT3605aRyJ7l2scaJapyhD4gm56FLY
+unaVNuHR2Q1aW++NdpP5G1YXxIOovmYbzIOpfDUscVdsa3yzL0pQVfzTv//++oqT
+gkCXhTECgYEA9mmghMTj69bXPxYG1S/rfJIERDMmkayQo7OTNKROlt8UTL+YnrPj
+OizhjZHfJVqQ716NGTCNNtda16xyNqSQybr+duXLiK0hgjBaDc8NJZ7/s3omh6DH
+zzABqsQ2o8FAXVIGiNvgHOWv2HCw5thFqVYmGIT9uN7/cSl0+QFm8pcCgYEA3ec3
+3/1zN9ytExM2GeBvqVnGNvzogN7DpLDsI17rfi3GMmsIVlkphAm1B7zD/okX/tVq
+1QRdgghS6Fc5pFHQgSBHpTIykjYbfWJbOyp8sTb0y46ZcgChl/7LJNO3iN/GGJc8
+lLpfuN4nM/maNxTwOYp5BM0ecmavJY/Johdo3UcCgYB2fVBcx7i5vXN/uH3MoeBg
+5G38xYP0ZMCgl0df9up7jgXa6f7fwaywWsiTJOPiuGwdTqAWzsv45RGfyCKbuAKP
+nsWiMtnufSIx0kJbhYbS4mQez8wbR+sM7A7BKN0FXXYv6bOOt/xKqQAn2fiW6MSG
+qxBilgDTlxfKOJ8w5cW1PQKBgHyrbwT1DEqSPNq+rGKVaaanvWkfZjEg9qIMlF66
+8WuOpA+neqOorF52ZbLXJvZWZ5jQppjPPwnTS2ElwEjFfnNNg3MYZLkolQE4xTDU
+igG2con6r9MQ77jJebBTEoZf0pf2QB7/JtBiX3wf+7h+lwh898juxPBZKIXd5tae
+eFf5AoGAX110qVZXUMjtpGcqotOs81nG1V8IQWFLIrqH7+aq8bmy0Uali4Nk6j+M
+9JaeeGJQPu/Vhu4KUC1u5IxKuUkQlHOMd/meGrNy8A4vhhtV71x6D3An4F5J96di
+ONWacNfep9+s0QWud8UMAYz/xSQaVBFtjpqAISlslyNqc44GBJk=
+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c8.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrDCCAZSgAwIBAgIUZPtamUFGkwEsTdz8nVPsnuVKmagwDQYJKoZIhvcNAQEL
-BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMTgwNDE5MTMyMjE1WhcNNDUwOTA0
-MTMyMjE1WjAQMQ4wDAYDVQQDEwVuNC5jODCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
-gYkCgYEAnUV+seRzu1C0Cunk2tXNWXVKIc3Ia1PjZ1ihx5diN8KsqgXzJPtVl2BJ
-4+DIIW8yUVqera1P9AcbeQo1btzPvAr5jUFIFAxZI/N73x0KBFK2rHp67RPUgZBn
-f8fkNrh6OiW76Dyj8bd1R7PyGrG6hzjW/gkEA5UMY2Uh1hKUak0CAwEAAaN/MH0w
-HQYDVR0OBBYEFJ9cx8fxd/vOjAM6gIQw/vqIC1gGMB8GA1UdIwQYMBaAFKtG6epl
-yoCil1KnV/uy+jr7l6hfMDAGA1UdEQQpMCegJQYDVQQDoB4MHG5vZGU0LmNsdXN0
-ZXI4LmVsYXN0aWNzZWFyY2gwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA
-KDBvftp+20KL77/gc1sPeViQP7SzYbrL+lNggjuBIti3s0oD5Cv30QmXe0EqpWnH
-uK1BtlNu6JZ5izuDneeVVfscCPUqgzjrDPCdFFHcPBPlqcNlUBdZtsAvq/pXCSzJ
-oyy1qkqu82oOhnaYKZVEUdtm7nC0lu2A9TMMQHgGq20GOvLMTxZ07FsYZRrghNRV
-xUI/YLZFaTyEGIdd0hfafFXtmnLjBJvevgcZ36S7BARfw6ZZ+Yum1tlqKBftVTD6
-P28A0nZJbPdVDOBfh2zY7/PokAaIziq3cVuoyOx8ti0kPhZJiFSxjWSo2Guz9jLp
-fUXqHq3QqRdgaYLt1YCn/A==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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n4.c8.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c1.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrDCCAZSgAwIBAgIUKdCyNvk9xgVTDO9On1JBBAJgLEUwDQYJKoZIhvcNAQEL
-BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMTgwNDE5MTMyMjEzWhcNNDUwOTA0
-MTMyMjEzWjAQMQ4wDAYDVQQDEwVuNS5jMTCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
-gYkCgYEAk2afL9SKZO/18apqEJtcnVn6j5KFVgiwLRnqDe0O0waKAuAatUkRu16E
-TUQiz9gUJ3LlFA/7+A+6pBwgVj5rh3iheQ5/nn34OSP4aVjwMMcjFJgUxPVvRxR1
-pjspxKBsMdwTt6EXBg7yJTWI4Lk92I0Wy6vb0JAf58syQYd564ECAwEAAaN/MH0w
-HQYDVR0OBBYEFHs9eLWpbASF22YffoTchou3BPfeMB8GA1UdIwQYMBaAFKtG6epl
-yoCil1KnV/uy+jr7l6hfMDAGA1UdEQQpMCegJQYDVQQDoB4MHG5vZGU1LmNsdXN0
-ZXIxLmVsYXN0aWNzZWFyY2gwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA
-Oz+MEYQX8+5uRpJQWkdqw7fsmRUuTmfXSayz09SPQ+jF69iXTa64PvEiKkeaLSYX
-mQKNNKpeskYKdGQ/r/fBFo6FRLLvtFfLfGC1OoOIZxFy2y9+0MYroEijQB9dASeh
-L02IksNsvPZnOMvMitETDoQPRK3mG4OcFbdvWuZa8oBJ1cbHqJPngLaUn6PRc75A
-j2BvbeRLT2OZf9whBfLpE5gI8oWhTUXnGps2xKa/368aWr72Bi4/sMVMLCQkwxxP
-cwbG3GKF015K1Q2BgfTDSPnbiCXViuSGw2opCoflVlH8qTcukxCyrTiOmaXfdds3
-qB2TSCnpAV5UehB2XEoNyg==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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c1.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c2.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrDCCAZSgAwIBAgIUDQRkdVBMn9YP54iLThtM+V9kTEAwDQYJKoZIhvcNAQEL
-BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMTgwNDE5MTMyMjE0WhcNNDUwOTA0
-MTMyMjE0WjAQMQ4wDAYDVQQDEwVuNS5jMjCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
-gYkCgYEAwIe2m8DEVRgwTgfukT218TRvgaJ88GO5v12NUIg/uzgq2ADAIS4lynhz
-5mzsdhcArzWFCz7MxP/fMxfwzRP7dNm2pjz57+DdUUSpPrBCDL/3+JwHWevd6LgM
-mgLOSohsJOZmWe5PUVMiP8/sluBb1+63v0e3iDNUXreVal0xxF8CAwEAAaN/MH0w
-HQYDVR0OBBYEFOOs6r9usaTHZ735J+HCRsZb8mDmMB8GA1UdIwQYMBaAFKtG6epl
-yoCil1KnV/uy+jr7l6hfMDAGA1UdEQQpMCegJQYDVQQDoB4MHG5vZGU1LmNsdXN0
-ZXIyLmVsYXN0aWNzZWFyY2gwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA
-PsRSE3bUNMgAx8goznM29Uu8WzrsA+8yDd2Ts/Cjj928vkT4xLiOOAGxnNpdhB+P
-9ii99A1bbfacXdyK6Chm95DoiLXfKZusHpu9C5EvV9BDQJDEqHQbf3LUGo7Pl55l
-wdnGBvAmNcAHZ0mZhvm7F0bXBPJ3beBbnjrcJGcL+99x0SwsXYeeLGFNdUft3nA/
-wYk386vX4h1Rq0c+aJkNey9eaf+qUMfClEtAX5okjIvxT4sETd/w2gB9tKldMX88
-0KkwjIk26HqQb/TYZVX5rxrP11Pf3mzbWI28Fnscw6ewNRQr/BWAY4p650MJ1dar
-RLQGA5ZR/1IBQggTer5Rcw==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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c2.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c3.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrDCCAZSgAwIBAgIUJr1hlTc7CXDlsSooLb5/05DMugYwDQYJKoZIhvcNAQEL
-BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMTgwNDE5MTMyMjE0WhcNNDUwOTA0
-MTMyMjE0WjAQMQ4wDAYDVQQDEwVuNS5jMzCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
-gYkCgYEAk4EUO9srNajozMBBRVv23wKGKGQQaiQ3w/8x1SSDTsIQciJNIsyPQW98
-f8lXsThi2IQtRjSCtNxZGWftDRu3t+4a0L3tPEvrbt3H+OK5McIbS2SjhsX8rIqJ
-EUY7UJtdDm1DO8Oibn0U1DOTTsdPloW3zk7GGrDo6bxHpitotyUCAwEAAaN/MH0w
-HQYDVR0OBBYEFOUchU2n+E9rdI9UjdT1y6xrSUopMB8GA1UdIwQYMBaAFKtG6epl
-yoCil1KnV/uy+jr7l6hfMDAGA1UdEQQpMCegJQYDVQQDoB4MHG5vZGU1LmNsdXN0
-ZXIzLmVsYXN0aWNzZWFyY2gwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA
-DLA+tUvoBH8QkdHqpcFWMxAU1pwBN4dFh48iIKeU6tlxBZJ3vuivUwvUMZ+DdgFA
-QRAkmTuBm3t0WnIukYO4huGT67C7nya90wSyghff+9ef9DnqVvd8rYg0S/axjaeG
-tYrDI+qK0GQWF5wddskzpFfxIaZzgeppWB+CBjgFpntDOFql6L4jbaU8rv8GtpW8
-zHCFAF+38sqI2iXD6njZPjDSN7aYcYmDutqyeAB8ulRJ/q3lAK95kawp2wMXX7Yx
-Lz9CrwenfQrVVVpQt6l19zhZQs/Hu1WeDvGGsicxwjq+s7fhBr5rjLYqpUSf+SiK
-YCNk5fKpE2CNh8b4yalySg==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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c3.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEowIBAAKCAQEAueg00BFyT4OKqOLuCJTJQaUHDHEfC/FGT+8afVYXf6EpvtyG
+l/wgNd1lUNGflZAqpXw3rIL1CcdPPMeIrFlivCzzVKvUIC2mCIPVbAUo/k3Ck+ek
+8C+ENTQMdqzRCRyie5buJUpni3eIHqW9x2OocW4umsZXnofDKGJiniQQEe8i+vni
+El8wOOz4kkxM1KMhTmWWKngn2U2rTaIcUwFpc6JdbxgsblWQFIvOu5fnBPUWHOFw
+7PZMM2rjrtPr55dhZS4lvGoRoqjasVRpHUoH9fhU4MD6+8aZAE1mcWI0lOGNW76O
+8bJqeNKgctLQttvAs854td42a2ZDH42LrtZLKQIDAQABAoIBAApGIhkM8HIi1Q26
+piiqPv8WOtqoq8G8s+6PSmRP1tzyT/zLcigXF8PyTXrsbXMrXvf7R+u25wotzhwP
+85EsIBqXKgbCt5E5r0R8M1YUvkG46WkZcvzlG1uCBLL69P3Ea9mvAHqQxJfUDh08
+z/f4yCJ7Ui8H3r1qR6eahv8HWNisyWvNck04JTBEt4pZAW1GYXmNgd5w39AOY2t5
+cSfozD33A4j5x/N1NwZMxYtvOqpjDhqz76+ykE4AYpVm53lz5Gw7PfPYADcZ/DSg
+2VXwoFPdZZrQhv/N8KxCHl4NaEeuG21uxSNKD4AQmcEJAZA0OPGtznE+YDUNFY0Y
+bK9F+EkCgYEA+RGW/HlBkdzn6f2djryJvGeZbdfat81D1Qe8ImgwlR5Qc+jUvinj
+9K/nJrokZ6zSO2bH6riRgl/P2mE3eabF2MnGw80rbSLc0PrjnYQKalx2xCZyCPHQ
+dnCkOGOegOQzPte5F4VZXwvnIxvXprDZFa+0+ObUzqbwRIS13m334U0CgYEAvxSk
+PERA30CE6VOauFNSNIYtBYPpG96BNaUnFtA1AtXllGBd9yOHhRF24Hdjljm0G3w+
+RnCM44PZws//XQLvBFn5wLy4yhhTzBTSRNiADBy8Wgo6pjJfXvgGxC7WEVCMiVUc
+DmuXddc+IVNAfCE9AYPFDHmbNwN0JkrI2VhiI00CgYB6efbYMjxXINz+CFPJE9db
+SUp+ZE3OYma/w+z0sm1pdp2zUcQDuw+4jCNLvO8X+DjtMu6N8rLC/KB2T6X68VKK
+9zYBpMt9AE67iRQSqhKBGPTiIdGjql2LUHrAq+QOl6jHd0cyVMWM4oqHjjJuarpl
+WqDQYJo3AIpX9zaDqWniZQKBgQCsVsyuQo0UDpgR7cLdPuEk2GOg1tGXvj5hiPxR
+eiZl0U/IXIZDkbr4DMFgQK4EXzUPmSZ916NqzI/KQlk6pZu4HALDkDNGq1xg8+KW
+D4Kl6gEDYLh3D3WvLRrFNM0EPtcSQj4Uz3uC4Eh8PB8sFbp1NEi0MLYKj0XiB49R
+YILa/QKBgBRl8LBvTaBWXJLk7YXh17/VAvClzjORH+T86pTW/e9Hrp4cZAItWE3q
+CG4OfqUMpZkTp4VIVHwRaxZ5xfD8G1ZvnjnMbVSn+450JwoK8ZrE0SSp4dx61OZP
+EJtCUGutPN43xSp+ZHjXGl0fKxBMkDineci5B1oB1nBLUvqkCPNz
+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c4.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrDCCAZSgAwIBAgIUaagjAMKpb7/8mdQov867WsLAx3YwDQYJKoZIhvcNAQEL
-BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMTgwNDE5MTMyMjE0WhcNNDUwOTA0
-MTMyMjE0WjAQMQ4wDAYDVQQDEwVuNS5jNDCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
-gYkCgYEAiGKK1GCMeyJzrzzi4pNaCWqd2qiFPISAANTh+laKkKQDLbrLo6BNfv9E
-f2ZnpFO2JXWbDzNd2UDA5wKjlNPacFvoWbQM+pydH5KOmQ0tG5AkrWgnMSVyZ4UY
-7tUGAnkMe7ZwtWWETVTOzW478mqV3TAM9FjIPmUFuIyR40hF7EkCAwEAAaN/MH0w
-HQYDVR0OBBYEFI+J3qFQpd1bJy1q/oww35Dt/lB+MB8GA1UdIwQYMBaAFKtG6epl
-yoCil1KnV/uy+jr7l6hfMDAGA1UdEQQpMCegJQYDVQQDoB4MHG5vZGU1LmNsdXN0
-ZXI0LmVsYXN0aWNzZWFyY2gwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA
-huoeSFpQjEl5VhTgPQe2Kh+O3zjNTIGUXV4XjSf4m1hR1X5InTjEzSVrSwrioAve
-wRRJZfQ33tN9RlII+80LNWozQHMs7MTTPMpOOAL3XcOTUpIaPPEAye5GLfs8hsM1
-gYluFjoKbswkvkgHR78XqHsifsNdABSaSn87JUlP8TV67GkYTzitXwmtA8ZhpqFi
-J3GdoM3t3OwhkJYdYEXjtfWvlzQovlj79zP9NCc32/K37JRLkynzUUpeic5dIHGN
-+Cs9gV23e/kzpHOVgMq8it5h6Yap6HI2XeiRUZfltB8Gm4nQxHFPkuA7M2X5nfXC
-jkQ5EpEs7EsqXazTAWauCA==
+MIIDUDCCAjigAwIBAgIUfpXPSMAftNz+iMtcsu6U9U5hdH4wDQYJKoZIhvcNAQEL
+BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMjIxMTI2MjEyMzE3WhcNNDIxMTIx
+MjEyMzE3WjAQMQ4wDAYDVQQDEwVuNS5jNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
+ADCCAQoCggEBAKVK2WJI7BTYWhcQq0JZPP8+iimUCbmEYfAriKmXgYIySi+0YAyo
+S5clXq8eXTaN5fOB1P+emO5NOmyp71qpHjsnXy+qmB84UiGtWIcNzorABfz4NPaD
+cdz4Gpesv3gcKXyj/UUMQEFSfGXyUfA6HsGpJUHUVBrkFZKP6BtqImOlaRbf44LA
+puhk1p8u6tHBdE2Dq2WvoxBRlcx71IYCyxY7uZWAa1hw2p675pe+hhR+B1+Rbc49
+AjUqPFd5Qr/yDP+GXAeGEQ1w5/VlKWuZtAT+Bbr6nMBqQE2/gFVhCTuxSknJcbzA
+jZhS1m1eazP4OKpxGDpglCq7oyeLphl6JycCAwEAAaOBnjCBmzAdBgNVHQ4EFgQU
+nd8Na7PynFgVH02pQoq5ZEzl2o8wHwYDVR0jBBgwFoAUq0bp6mXKgKKXUqdX+7L6
+OvuXqF8wTgYDVR0RBEcwRYIcbm9kZTUuY2x1c3RlcjQuZWxhc3RpY3NlYXJjaKAl
+BgNVBAOgHgwcbm9kZTUuY2x1c3RlcjQuZWxhc3RpY3NlYXJjaDAJBgNVHRMEAjAA
+MA0GCSqGSIb3DQEBCwUAA4IBAQAgTJNGl6gmpbZuYNtfUdmmUB0FdAGIquIgX5BF
+GaAUBIgaKitLocrixI/eyyAG89HEP1J0OWmoQoHRWUbzLoPw7/Em/D9JL9dDUQsb
+BmE+56NbBsD9Ax4DBwW34rg4k3XmzD9iG3boovG9/8XPEImfQK+cKdDq8EVxxQW6
+IXQFMKkn7b/zX4xEdSF4jgtm7HuXGlvM80EelSjGHpU8+IOEzIzpjCw3Iff3tqEB
+GdyDGo7f0rs9346htO6405F7HMTTiBs8hJQnnkr9lGSTaSsK8/f+OwcM3KMGtIUj
+kXQLuAJp2+JzZUpNCOsWtzLHs5E99viitXxN0EPXazuDIP5J
 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c4.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEowIBAAKCAQEApUrZYkjsFNhaFxCrQlk8/z6KKZQJuYRh8CuIqZeBgjJKL7Rg
+DKhLlyVerx5dNo3l84HU/56Y7k06bKnvWqkeOydfL6qYHzhSIa1Yhw3OisAF/Pg0
+9oNx3Pgal6y/eBwpfKP9RQxAQVJ8ZfJR8DoewaklQdRUGuQVko/oG2oiY6VpFt/j
+gsCm6GTWny7q0cF0TYOrZa+jEFGVzHvUhgLLFju5lYBrWHDanrvml76GFH4HX5Ft
+zj0CNSo8V3lCv/IM/4ZcB4YRDXDn9WUpa5m0BP4FuvqcwGpATb+AVWEJO7FKSclx
+vMCNmFLWbV5rM/g4qnEYOmCUKrujJ4umGXonJwIDAQABAoIBAAznUnVvREApAaNy
+UYRM9iDmRMqT0XcyQ/kH/6kJovpt1Z0dbjAexUPn5Bk0psnhpaAZtG3ozNSG9+F6
+xKzlre6n7LDfwZ9npKsXXrqwU72WLwF9bkOzpY8UA/Nvm2+Tdz5RM647vhpmB5W9
+JzNjPiUX1h4/pqSGG2mvzUqyluZYvQuEcek/nG5fssdRh90QtwXjGgnC+eG8ljze
+G3xJbQ2uuRIGieP4qNooqPVHb8OpaDCWaAOWaOT29MCB+7yCemEF6SyOOeQUWSQm
+R27hMVUMpzlN1m7pcNw75NTbltOdVQqYxWQqJ+/bhYL1RzG2gpAln6MWyoJ9LyRy
+2PTx6sUCgYEA2mO1uH0vYVlMDr1ulrv6mFgibbd2NIfSa7zj1tfb56i1BLKlSv8U
+d7tkzT22Sa2R6+nfL3ptmSsqpRJjTpJki9+27qC5p6D4QCuTZarwYMYMDMxXBUBt
+eYPYohAcUjunauLyd5Nv/GNgMoxVQOkQDahZc1q3v2Kv8OGDp4llB6MCgYEAwcI1
+tq7tLnnMpCM32br2lQq/eTtjPT51pEvfIGUX4pjHMTVe4ROBjmea9e2feNWDYMDq
+GMyyOQJmcuC1CSTcS0Ai+uR7HKjHja+DE5zeuKJ6kb+tAO7eTogU3bdGP5m+5oCT
+pOAw4UyoyHc9+v/S5YgZmzbR7HXMpqQ8UDNz6q0CgYAZPSjFN4KAR6eolG/xb6wY
+aycfcvJwQ7onxV63d57seOzirBq6PhyJcdjGd3lXrn2MvCyU+hssdnapOSTM8dI4
+8BPeJCkQnGPUVrTkLQs2w+yklgEAlF+SiZBBuobrYgWJLs1C0IFCs+FsNhesNsMq
+MOiVkkhmD+uxdP6YICLS7QKBgQCUWBzHwSXWb2o+QLiB+qLPeWsfZliUiz2GjJBI
+PR4MXuwiwLnjmQuX+7qoj0WJPe9YJFsWoaHSBARr756rYY1ID9K4RDX9uzsNP1Mb
+sP7UXZF6BUZvcHLDrWxMVAV0rEF8OPTRRtQlqouO77yEb1kIYys3qsEOSSJmc1e6
+D6qwAQKBgDUWZzZrb7NjMPf60otdqL8O3f9Q/5+BIpKyRMQIMDiepHuIWDui75/h
+XlZaqrc5Z4hUfDingSgYIoom3/6h/bEIGzDScNRq78Dd/lEZS7WCH9hsjeAkCMIe
+UICm+R9PtXUOb9ywSkIykf+q1pqJ4jJ4rYTMwDALF2nem9jXJWAE
+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c5.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrTCCAZWgAwIBAgIVALC2GLx1iArQPLmEOTSnU9hhJiiFMA0GCSqGSIb3DQEB
-CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTE4MDQxOTEzMjIxNFoXDTQ1MDkw
-NDEzMjIxNFowEDEOMAwGA1UEAxMFbjUuYzUwgZ8wDQYJKoZIhvcNAQEBBQADgY0A
-MIGJAoGBALttwAoG7pVbxG29TtVi8YYvfyrw18qj3pIwvTH3uD0NsqlGqEdl8Sop
-mwobhEc279RoLf5rA54KEcUaoEjPJo0eCPfGIQxWOtSCHi/Dpp28o32wFzj0uY8v
-qgOlhY5akgRQyJXdgHBSVnaxYbHatPgO0P9seGLkpOPEhVK/mhGnAgMBAAGjfzB9
-MB0GA1UdDgQWBBQd5etOJglTebjjwgVm7DnZovWhBzAfBgNVHSMEGDAWgBSrRunq
-ZcqAopdSp1f7svo6+5eoXzAwBgNVHREEKTAnoCUGA1UEA6AeDBxub2RlNS5jbHVz
-dGVyNS5lbGFzdGljc2VhcmNoMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEB
-AK3qV6LeIWj+CMsy4qjHmC+EbXAUUS0Pra6aFrXBxOZ5t7h9aFEN3zJjqTTTl7cw
-AbS1it93Tmr1wyuIiZ+dCtCr6M9wJE5vrKpe5rEp0tdeSs5pm0OkXPJVU/2xihW+
-NYRw+oV7qG86ldnLO067Tgy0DLPYP041gJYr4HbCCOjPLSi3B6Kn0PMrYcvPdqmi
-lHGqvzqaMXq9dWYD80PKkYVOUwwxYzZ8sjOWAE1JXCVXI1ImGh4yFZAArKsY9uEl
-7scQIEt0emutzHaMLwiQx2yTUjttHaogaa8S3PAHNZq4yHHCrD6a15Zpouuz4EdA
-s5Dd5xbtE6zBBjGsauInD+s=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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c5.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c6.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrDCCAZSgAwIBAgIUOLkd6HCk8li8bYemSJ2y1s/7htMwDQYJKoZIhvcNAQEL
-BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMTgwNDE5MTMyMjE0WhcNNDUwOTA0
-MTMyMjE0WjAQMQ4wDAYDVQQDEwVuNS5jNjCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
-gYkCgYEAxUpbKRNQ/WxzJj7oYFBzeP3/JwtVTaTqlJexfKpEXAGlTXrUYRVyZP80
-4p+2Dc5sAFEFXwUcmYgVlLCj+mc2OGg9Uv6EyaT1Bz0r4oEbIB7ePBiefx41i2Rh
-d6zy3Jg164hGnrHzmOdqhz0hjKxUAgBFzEtfx0URtIpscMefimkCAwEAAaN/MH0w
-HQYDVR0OBBYEFEyrP19EhCIvYsJFVyZPZ/2Uis/gMB8GA1UdIwQYMBaAFKtG6epl
-yoCil1KnV/uy+jr7l6hfMDAGA1UdEQQpMCegJQYDVQQDoB4MHG5vZGU1LmNsdXN0
-ZXI2LmVsYXN0aWNzZWFyY2gwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA
-pZRghboAl/dWnrUXB5Wp7Bigbpom1KPFZQ2AYyEs0RF8xH6CoAMEMZsXDm4+sjFi
-uDfFoXVNORrwdy6nsu9/Lm6dC4Fl2got2B1ZRT+jjpGXbJmPeH6gjvylqo6xopJ8
-kqozuLyLaJPenuPe/jU7VZY7WTJ36LIQMq/hCf9RVfD6513fGM1DifQwhKK1o6Ms
-u1GSveA6wXUZCqfkbr3nBikhgLQP372dF611mrLQBL34xDqDtIfGeZ01wc/omKCq
-UfDYh0uwJXG90TlM77bjL6LrRP6rvTff9pnFEENqytn39slXXahGoDos4WnU2y8F
-hUcosMm84zADrczmErWI/A==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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c6.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c7.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrDCCAZSgAwIBAgIUXDFTEo12oo6+EKR1kSq5mxjGqq0wDQYJKoZIhvcNAQEL
-BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMTgwNDE5MTMyMjE1WhcNNDUwOTA0
-MTMyMjE1WjAQMQ4wDAYDVQQDEwVuNS5jNzCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
-gYkCgYEAg6EDuwYFA0XwT9/7mMHsHDejJrfDq8dZsYm094CQDcddBa3DRxHuHvlP
-HI+2yNhrc+LsIXa2xXutpmFfu1Um3BWrnvndOkK0FU5VdyNeFdH8eWjT4QVVr6Xa
-I586qIafTcLAgt2k01pvocYhAYd7fGyTYYsbW4wjxyXP26jspG8CAwEAAaN/MH0w
-HQYDVR0OBBYEFCRFQmSe0o8k8hohFXJ1FtB4A9QIMB8GA1UdIwQYMBaAFKtG6epl
-yoCil1KnV/uy+jr7l6hfMDAGA1UdEQQpMCegJQYDVQQDoB4MHG5vZGU1LmNsdXN0
-ZXI3LmVsYXN0aWNzZWFyY2gwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA
-CQJWjpCXPAEQcDcv2pYKzSbgwO80qZetTcWXSzx+dosP3LZZqkqv1EfPm8As5wm7
-2qeaEmOzrjsAajInZUzLwcfTBo7MqlodlDN72S6/kOkUe/Q/4M9WRl8elXf6D3Ex
-tj3X9dUf5bUj1cqeNInAluOsj3ZoYlFceo3ng3berAjgMxMjqnJi9O7KxLvsTYdR
-fX5a3A7KbSPjlnP0/n6FHXK+cxqysmv4m2TkL5Dsn3jK1gGJJz2qdUjiKu3jR0hR
-hDsyiSlVVgqGVcTWyTa92lAe0KsosXR9eTV6qKwXFKA0FKDlPvVtp4pelDVWdaeh
-QQsTs7Luvaoo7xg7W4GhvQ==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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c7.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c8.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrTCCAZWgAwIBAgIVAKEAVAjsgY4Ft4ATYFfKD8C11yUNMA0GCSqGSIb3DQEB
-CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTE4MDQxOTEzMjIxNVoXDTQ1MDkw
-NDEzMjIxNVowEDEOMAwGA1UEAxMFbjUuYzgwgZ8wDQYJKoZIhvcNAQEBBQADgY0A
-MIGJAoGBAIJQgqB0qJj7Db0GiPnvl4AsKtFa5DV52/DLfqri1FwhOcIVhtnLXFA2
-wsUT/g7aJ/b3tZszfTwG0mKSmNS9voTlpaLAb6Gn+vq6bBpgvgW3kvcP+r5lxMIG
-U0zs8yC3hqXwUOX/FbWZzd87eEiM6fDfhwg4JbP7nSk/JX8MUEqLAgMBAAGjfzB9
-MB0GA1UdDgQWBBR9W6ltaRBtK+Q3dWeXPFp5cwdSFjAfBgNVHSMEGDAWgBSrRunq
-ZcqAopdSp1f7svo6+5eoXzAwBgNVHREEKTAnoCUGA1UEA6AeDBxub2RlNS5jbHVz
-dGVyOC5lbGFzdGljc2VhcmNoMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEB
-AKopACutziODzeAqmRV1qNb816EqKoKdV7KtsiopOH4K68+VALvTJHZBHHk5xsM1
-LvWFvjDtd5zH2KcLz+Hqq9fGBn8OWgUu7CK+S/rbMLpM6eM4O2UpsCRnvXvWJrnE
-Xm2UdW+dVIM1do1/tebMRJA2KQzZExRlWIz+idn+lUFxSW7BZM3tLOQ7RgAuCTcA
-F7zFjCQROi9PnIyCNHr2TGGJ0GiJuJ4Lovj4WB9jA7e/bYPJzbY2zp4cAuIFBZZU
-rbUGeIJCvY4jEyV51KfFXXJVMmCGtrtPA3GNXeqhS9ph/FDftakMPTedx4Ah+hL6
-fhSR5Ce/PvqTW9Hx7LMz7qw=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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n5.c8.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n6.c1.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrDCCAZSgAwIBAgIUFpfeijJ00JLPz16Tv/3R4i0TQFgwDQYJKoZIhvcNAQEL
-BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMTgwNDE5MTMyMjEzWhcNNDUwOTA0
-MTMyMjEzWjAQMQ4wDAYDVQQDEwVuNi5jMTCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
-gYkCgYEAkUdwEbxEusj+J+9qllbp/jYccER/dTYUWoDClkxfwgNUN10Xs5A08ERS
-s1DZ0IVfymRwQlyeciUY/Q0M3gkRXY3vU2M39ZPAEWgcMBezp7VopotG/4fPnGoh
-21vlB+qNu5CwcWgTcdWtsNmfrSkQ03okWfd123WcZhqYxHJxL/sCAwEAAaN/MH0w
-HQYDVR0OBBYEFMsR/lNScpkcl9QxX8JAMVP7mT0WMB8GA1UdIwQYMBaAFKtG6epl
-yoCil1KnV/uy+jr7l6hfMDAGA1UdEQQpMCegJQYDVQQDoB4MHG5vZGU2LmNsdXN0
-ZXIxLmVsYXN0aWNzZWFyY2gwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA
-hFQp+02dHbsLFZs0PeqWDb1Q4iB8+0esIl/GaH9YuEADxjDaOGT4eEvWIC3M8kh6
-6v5OEJO8z43y91EWJdqzu58mF51c/18u6paC1EdkO0V5xR9TT/AXgNFzoswmlpgJ
-G4CI/pKuTJlPlu2zdf74/Npufl3blx6UNdE705xmPmfS61Ws+wm5Q2qGKF0IWlUM
-98OVPftL8MLv29ODtD4RlVe9d9WLlNZKq+0WoIG0UOOHaBaAyC4ZeHbc1LKW8m+S
-hlyZjc1E3p9epCeZQi9rT1xPs3kRxsiNnhM4HVVtmiXmhMDoA7sO9A7OfYrROpLm
-0V84QIeyRw2ArSh3si31cQ==
+MIIDUTCCAjmgAwIBAgIVAMiSK7pGFp+kv+pz3h+rgyPZ4/qCMA0GCSqGSIb3DQEB
+CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTIyMTEyNjIxMjMxOFoXDTQyMTEy
+MTIxMjMxOFowEDEOMAwGA1UEAxMFbjYuYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
+DwAwggEKAoIBAQC1vrEJFi3Nq75o9gsikD2jy2VYs+bGi2ozRa6RbuBHKzVV8g3Z
+Swhp8GZ4l+o1sOu9xwVxqdps1LtNaE71yTuqYKl1iI+bSfqdozRQY8UmIXjzEBwi
+8/3Omu8ei5TtGypfXoM0dQf0D+A21LkY/3OUdMPxJWBq+s9XiwjiMBqr4ZJC7SvL
+0RnYMRYzf/3J9FHQTv0EV58ycuKDazi9KmHWurV4RDHDZTzib16BaJxwoiXX2bP5
+tRl/tDNO5CBBjc1FUi0hBKQD5WC4QxBfARztm0loRbBZLa9ws1JF2BNhb7pzJNq3
+amhrK7bViD2NkQgFEW7mNtOaMOk4+qbzZqaJAgMBAAGjgZ4wgZswHQYDVR0OBBYE
+FDZ3xKPK9V5104JEDAHiVwsT4izeMB8GA1UdIwQYMBaAFKtG6eplyoCil1KnV/uy
++jr7l6hfME4GA1UdEQRHMEWCHG5vZGU2LmNsdXN0ZXIxLmVsYXN0aWNzZWFyY2ig
+JQYDVQQDoB4MHG5vZGU2LmNsdXN0ZXIxLmVsYXN0aWNzZWFyY2gwCQYDVR0TBAIw
+ADANBgkqhkiG9w0BAQsFAAOCAQEApr+mTLOkDbHrhxeb1ZsHWlFLsyb83edr7U4K
+G7ZXUioXEYhPqsk5iLjZmLH2rTyQ/7pN08zQminUbqjOOu38E8HzeAIypje289Cz
+5wNG5qJIktnmBjnVS5hG01aFh5EzzoAg4xUFG8utMY2lr/S2TisxubX/d1N+wtMP
+O3SaECk7ar/F1mr1l+HGYj9tQEJ+qfb3Din2Kie0MPKD8BL+TpMSS8Cti1vkxdmP
+ByYroCQmhohv0IAoCNlsnHm6SsdE5yseI5HmjRxgauFOHfzeebLYVx7yUkJARdzf
+XHJOeP9ljd6edIhkHuswgl3JrU2WhMhGuDMRC89j2tMIOZ0h2g==
 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n6.c1.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n6.c2.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrTCCAZWgAwIBAgIVAPzUcy0n1Ww7M2AliNfADZ8oKBhpMA0GCSqGSIb3DQEB
-CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTE4MDQxOTEzMjIxNFoXDTQ1MDkw
-NDEzMjIxNFowEDEOMAwGA1UEAxMFbjYuYzIwgZ8wDQYJKoZIhvcNAQEBBQADgY0A
-MIGJAoGBAMJ7+brk5AZGhtD9dMKVhkHCmsAhULpd94aF8nK50Vw/Jgf/SdE6yYeP
-rBxBC+Or+o5+N8Dwe70escEOH6o793gg8yBWyL1AagoJZDV/+A41cxropz0jVW5X
-4SJu+y9tEgVA7m6cdefow1SG1EiMLMtEHyw5wKNmUKrl544O+MQvAgMBAAGjfzB9
-MB0GA1UdDgQWBBQGIpG1JOyVo9JCyp1/h9yMhHE3lTAfBgNVHSMEGDAWgBSrRunq
-ZcqAopdSp1f7svo6+5eoXzAwBgNVHREEKTAnoCUGA1UEA6AeDBxub2RlNi5jbHVz
-dGVyMi5lbGFzdGljc2VhcmNoMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEB
-ADM6lIy99jbMevqPYHqxVhbCnfXP/3+amzXOn6OUGme6pXkfZod52CGjXeLSnEsY
-OTwMAlzpp+ghdNHoig+ZewyBsSimdiHU25TZNAuOIFHcAvrX0DPm3zVqnmwAa38a
-Yft8UdcGJgN4oFoY9vCgxiSmOgF/hBHABmj7/WO4tHiM2EZzBaOJcOeGaYe1e8t2
-z9LY3mbtdUJXZktB0e0MVFsHT1Q09+U+qnJzXWoZ3zVeJkcGt7E9RUyzHa54qFfa
-II1g9+BjWg47iuWm15W0B0IJSZqeTcsvTtxSPbX5Y3ym5pcWZ00IMTFvRlLaLPQB
-e2O1dfbp2RJd8ozmBcI97FE=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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n6.c2.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n6.c3.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrTCCAZWgAwIBAgIVAMdfglCcL1l4qotlEg6YabyONoRUMA0GCSqGSIb3DQEB
-CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTE4MDQxOTEzMjIxNFoXDTQ1MDkw
-NDEzMjIxNFowEDEOMAwGA1UEAxMFbjYuYzMwgZ8wDQYJKoZIhvcNAQEBBQADgY0A
-MIGJAoGBANBW+tmJaaum3CPc+7wj+qrDkbvuDue24I2Yodp3HSsChx94KmFDYhGY
-uRWwsDF3Cu8iPyUi1xk4fCQallLCzkwny9j6dljAHtAYkVfNP07WBdPJ79IWUn4q
-bldqLTam9ZiaQZ0jPtHa6PUmj8doc0QWM1ySfJcHqCP53GkqpH+vAgMBAAGjfzB9
-MB0GA1UdDgQWBBRiy14zafEFR9kFLpd7PeVFrLdKUjAfBgNVHSMEGDAWgBSrRunq
-ZcqAopdSp1f7svo6+5eoXzAwBgNVHREEKTAnoCUGA1UEA6AeDBxub2RlNi5jbHVz
-dGVyMy5lbGFzdGljc2VhcmNoMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEB
-AJOOREHVw/nFyC65uY+iZIzMdpcmKKWdLwaOw0MAn0ru9B9m2qGT4kwCX3m3D3HJ
-53btTyvHa/URXjtoIPL48VOt9qB30MPAyjQjR6C1po5DwBZHVWMZ2QJXq5RBol3M
-wamYq6dgzyUxWYI03/51az1IuU9N4IS2E7/HN4YVWqE+CPNroh5kvrg85QQuiENv
-D8NfxYYshGJa+kTTuLnkyz2EEfVwWeI8+7x93/tXryZE1b1EvNMxkl91ZJbtg0bC
-Hb/v98RCddP50shEgUxdMQZD2ukkzCabnRGmjuLsvH9OtsrSqCoi/0umapW9wea4
-fhJ7Rt3VHnAkpbsvV3jOx0M=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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n6.c3.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n6.c4.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrTCCAZWgAwIBAgIVAIwepFjviZuQeudI1+ErlWyWbb21MA0GCSqGSIb3DQEB
-CwUAMBMxETAPBgNVBAMMCGNlcnRBdXRoMB4XDTE4MDQxOTEzMjIxNFoXDTQ1MDkw
-NDEzMjIxNFowEDEOMAwGA1UEAxMFbjYuYzQwgZ8wDQYJKoZIhvcNAQEBBQADgY0A
-MIGJAoGBAJDY20sl1QeuOSxilJdb2r8PygM/o6EPlIJk/NHc6Lh1VG2bxqsS091j
-Cp1UY5uHdynMKXxVhgbIG+rKHgP67rh+3dTWzvThWDMZ1ljMMpdf4NNH3caM7Wdg
-Pzj6FpJbuEevBnNp9ENRjKFv8DxUDiJPFsXcCZ/sGuK0HUZSzla7AgMBAAGjfzB9
-MB0GA1UdDgQWBBTPFm83nd3zU/X8KaQpSIF8w8njkjAfBgNVHSMEGDAWgBSrRunq
-ZcqAopdSp1f7svo6+5eoXzAwBgNVHREEKTAnoCUGA1UEA6AeDBxub2RlNi5jbHVz
-dGVyNC5lbGFzdGljc2VhcmNoMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEB
-AIsgxyXgff4XN3ZuhybqDrxKHvMOOOa7npzqODO97/oZ78+Xs2XMbDSp+ruYZylt
-AMsos5FzLydhYESKE2nrrMEUAY+V+mryNGX5lY9Z0TvdjyA24uVVBMSE+R96Cm8G
-UUP+ekbou3e2aVYKOSyaHL3mwqbmo/CB7VkzmOxzcCqVMB4Oi+fD5EQ/qqi3Bi5C
-FNsYdelnWQ2WUX7pfC8P+F011WiM+HYo5I9hhbuqf5/ALG3CRERKZiXcMLTgFsys
-ckjB1QHLVK7yFpiSdUqqAZb4ZPMtP/zr9YjRwyMRH7vDyyQSF6pQm65vAmT7+h00
-FZUilhJHYxVDYGCJ/AQXVyY=
+MIIDUDCCAjigAwIBAgIUXVOLQNWQeU65Ho4uzZHeY8+jGXswDQYJKoZIhvcNAQEL
+BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMjIxMTI2MjEyMzE4WhcNNDIxMTIx
+MjEyMzE4WjAQMQ4wDAYDVQQDEwVuNi5jNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
+ADCCAQoCggEBANMHcSUqk5S1+RwGryfgSkX6yHvKfLuImonuwSlCN5vgHHKbo/M3
+ErSOmmyQIiCTnF54i293DaYJ45UdjfnSQtXkoCOIi4nBBLg/hhUqChJ7dT9sBczM
+aB7/zI+XdVridPSzOKoruaN6S8cVBOpXsr7MGRWvDQsrxfOG7kYDveTQ3dXcU4Xd
+C37/+elin3jNvoEfOuTepxyEF9InpWmvdrh0+xwI/yxCkK11daEGPzcBuZkGL6sF
+/uGDkiHKYxaTm4utGLHCdbgHCnUx504ty/ds0DXJQNcg5vyFlruwP/hLrPqPbq9P
+08+LUygUuRWcRtrOZEx5gWX2cRx2wHl5sCcCAwEAAaOBnjCBmzAdBgNVHQ4EFgQU
+T+7pAVYShdWkgXnJEPzcM9Ec+REwHwYDVR0jBBgwFoAUq0bp6mXKgKKXUqdX+7L6
+OvuXqF8wTgYDVR0RBEcwRaAlBgNVBAOgHgwcbm9kZTYuY2x1c3RlcjQuZWxhc3Rp
+Y3NlYXJjaIIcbm9kZTYuY2x1c3RlcjQuZWxhc3RpY3NlYXJjaDAJBgNVHRMEAjAA
+MA0GCSqGSIb3DQEBCwUAA4IBAQAkwdv5IzAS9C0730Q0GQm9bMv4rmH9eQMyB/uR
++e7my1xkCND+IAriB8BYmNATFdykP1ciNZTi73xGJYbcugNiNGDJ2ipOPVj6nXpf
+3UfDtsS5LwSjowB9LyHqvH/kJX50zGKzIdH55MW6SBGs1yvYgJ0LhCsohzHc828A
+no7K4QWLIO81XnVsTRngq6Z7yMvS8BKQHYox+HHTOORIRZL6J9bAhnXG6UGJEWOs
+f8Vr/bSWf7RFk2JI8tkfPJz8ofTYqdEh6oOZKqjzfJ9OQkruGJ2DTn1m+7kETc0z
+7JeG5sTTLTYzMEfIg03nGuh4HNDQQ4VwwnOFoujCoqOhqkyO
 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n6.c4.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

+ 18 - 15
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n6.c5.crt

@@ -1,17 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIICrDCCAZSgAwIBAgIUAOAVgCzC25AbALSA7HijoxKx2BgwDQYJKoZIhvcNAQEL
-BQAwEzERMA8GA1UEAwwIY2VydEF1dGgwHhcNMTgwNDE5MTMyMjE0WhcNNDUwOTA0
-MTMyMjE0WjAQMQ4wDAYDVQQDEwVuNi5jNTCBnzANBgkqhkiG9w0BAQEFAAOBjQAw
-gYkCgYEAgsoBkvyRXFYOH/3/8AB4blT80XSJAFKu7L/zH4IDbLNXqah7xXxaii7s
-AfeSyNOmDw3JZR6O8LZZA/52q+vf63VeEC5R2lh9xFWDfNLiYVyDYoau+dVy1el3
-tev8vTcUgSlpCFSzD7Eqt3353dXFAzEXI1YAeEHj+tEipY2N+HkCAwEAAaN/MH0w
-HQYDVR0OBBYEFH7CQtBFpWcATKjoiCf5b/jy0mlZMB8GA1UdIwQYMBaAFKtG6epl
-yoCil1KnV/uy+jr7l6hfMDAGA1UdEQQpMCegJQYDVQQDoB4MHG5vZGU2LmNsdXN0
-ZXI1LmVsYXN0aWNzZWFyY2gwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA
-DMqOMi8l1GzyZK67fA+Q0H05+dBGByALXCagAbso4BayA1C2QH8/cTShEHYSyEUC
-WSm7icucMdlyuxDZ7J+Hz84p+el4IejcsCUKNPB/pkWsSt6xNhOxeeuaoX9DYkt1
-KQL2nhHRP/FgrtH/nippMOaz80GXnaIXowcW3qbL3RCa28pY58N8NkrX6AtQfi7h
-UofAwoC/S/N5qVuaImZiqXT62HpL/reKbVaZ/l0uiHdHrlnIAcgtgGM69c9hEOaz
-/W37Ql43n4F3NqtYErCFZKtjuDIdptt8YUGhwhG++ZGMhQZBGKsc8g1OEG4u+oYR
-OVGs/kC5nfp0Nhfiuz2q1w==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 -----END CERTIFICATE-----

+ 27 - 0
x-pack/plugin/core/src/test/resources/org/elasticsearch/xpack/security/transport/ssl/certs/simple/nodes/ca-signed/n6.c5.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIIEogIBAAKCAQEAoGi/JYzTP+NGclulaaS/O2nmZA4pocwTTt8U+mQidaIGsMis
+NY/1D6C7ReVNCSJhZ/m5qKJBDp5lzw5lBrFIlYhLzmzYF/i8NNh68n2yXo4QMnB/
+nV2FZvEM0uQAD4FBZ9xJtsYJL59ix8XFghNVtCj/6tfuAvAWiBY8PHfg/tUWJq0s
+bKbV2HvnqOmSeKEvLBLxsO7gatmfKkUHGkbS5sdRojJDdQFPExV35lzvQ2ZhV65f
+h1bW0mFmGEONCixfG41376TufZI03EoGH+u2NWQYCL+MiH5SdWv6km3UXTVxDKhB
+DeLi0/Aj7nPGTZkIDqPUpn6QkZYN0vhKccoz8wIDAQABAoIBAEr8zKbUL4lFSRB6
+0VgSoSc4OXD6wfGWQkxzsw3es9FD/la0aPTdKFW28PUa3alwfhKqRmWT/E/GMpfa
+BdZcGC93OOD2Nwr1x534uXkU08aqKN47gxzgtFVMSI9p8LFO3nGcJIWiDHdLzlTP
+mqZVPZJsPD7f1K9g51eU9XHbJL5bxvpa1I6dunBaGeWKAAPI0NBbiyvHPCeHavd8
+hrKyToG/Kj2qnTqtOWAc6lBAISVAIY8aS3D1fZ05hQM8WrrqgoJ4U0sqwSDIMdZE
+WR7ck7aNh2Bgby46S/wLQ14mQvfI11GL3YmdXqREf2YwaZFHD/uz0oY9SH56Ytwf
+lZJr0nkCgYEA2dJzeSKWvBLB2QPqbfyXgVBPTMQ0LK+sHjINT3Pw0uSmnL0PTgw0
+5TxpkWGHWZvM4wHuatBVOzcfNgK8Oth7dXTDFXEGZsBiUFgZYDrfOY0+4WSq4LWH
+Ff+X8SPPlK9aqGmhHbVOFOibCCilXMZu/0N3j1swPJr4SvHuihGQGBcCgYEAvIY2
+SJSjEoKqhYCB25S9QmRDbT8hw7FjYOilfutsLMdhTmcjlhDmHaNhZ2pvLfrQU5nT
+nwXcj7F+FLy8UqjnH04TxtQIcFzw5o9I/nDHYPbY//Gmdd9v6RLkaTZiz+sfKupx
+vffWWrYFRUMr7NxDjRYcQCEzwAP+vLMkyzJd0IUCgYBDHifasZ/Ev/rfReeckHKW
+tApbWzHAezkL7NxRGSahtTbpoQ/wOq6p3B2jYGv2Xp2ZbWTroNpCbs+9MsaRU1dn
+b90U5EjWrH0eyKa5Eirqbu1rQjutFgJT8vf8o844wHes4S92GgG/S5VJxEx/890L
+5twWXkDUy+OqJDYecR73bQKBgHpzkn7CTMmRJcFhHvfJPMUK6uDiyMObTLl9Y0F1
+GOZc+s86HtsyTsWhgXrynxR2fSpQGCyKWiDbYNGHZasrGjQzOpVC09hoBfE70GW0
+S0yoCXr1MvINF1uEcegE81mplq0Baq/BcvGomPPMFZPb3eSeH+tnpX1rGuLmWVfC
+dz0hAoGAZKpoJ2OC7KvHJRerXhPylPlFH/Gou9bMPkdX1zqhose9VApFP6kfMD8p
+1Ieu+OPz9L0bVxS2TeXYj4VADIwAETrJARw1Hu2a8pjFwXueqS4QS3yg4/DeN0sn
+05zFmmewXv6VwrCNRJUjxahbH61r0QzQqyY9BHKymlSbPfRP/c4=
+-----END RSA PRIVATE KEY-----

Some files were not shown because too many files changed in this diff