Update https verification

Author: Ludwig Richter

cert.pem

@@ -1,36 +1,27 @@
 -----BEGIN CERTIFICATE-----
-MIIGLTCCBBWgAwIBAgIUG8QcnTm9Cf5pSG7O10IGKsFnZggwDQYJKoZIhvcNAQEL
-BQAwgaUxCzAJBgNVBAYTAkRFMRAwDgYDVQQIDAdHZXJtYW55MRIwEAYDVQQHDAlX
-dWVyemJ1cmcxFTATBgNVBAoMDHNlcnZlci1zdGF0ZTEfMB0GA1UECwwWc2VydmVy
-LXN0YXRlIHNuYWtlLW9pbDESMBAGA1UEAwwJbG9jYWxob3N0MSQwIgYJKoZIhvcN
-AQkBFhVjb2NrcGl0QGZsaWVnd2Vyay5jb20wHhcNMTkxMDE0MjAyNDU5WhcNMjIw
-MTE2MjAyNDU5WjCBpTELMAkGA1UEBhMCREUxEDAOBgNVBAgMB0dlcm1hbnkxEjAQ
-BgNVBAcMCVd1ZXJ6YnVyZzEVMBMGA1UECgwMc2VydmVyLXN0YXRlMR8wHQYDVQQL
-DBZzZXJ2ZXItc3RhdGUgc25ha2Utb2lsMRIwEAYDVQQDDAlsb2NhbGhvc3QxJDAi
-BgkqhkiG9w0BCQEWFWNvY2twaXRAZmxpZWd3ZXJrLmNvbTCCAiIwDQYJKoZIhvcN
-AQEBBQADggIPADCCAgoCggIBALDCuS6Z5iZhBFRP2E4MDAREXdoF/bwMW/DbFw8L
-YsJx/azMtiBDKXrFWSqpwL0Ujr27wUMxNxutxrhF5RG/t10q22oR0uRiUl9k40hR
-s37hD1bgNOy9rh/rOI84xoFQU/KPBN4DwCp5+xkUhmCmZDKWdglzs7fn7hbro33t
-8uvV//2/E0eMhAKJ4YKZr+FI2pcbptpz0G2/C2BYsZpJrWbMp23iYoWn3IFIRAMB
-dbMOHVDYnno6Mm1tC5ZfY8i7+8GEON2WP75Kbj9sa3AZRNDfrlD5bPDkqeg79P6+
-1cMYzeqkEKka7qQkoznHVXftQLn+nnuL+fKmLJOzfEzkH8f6jNXJ4fZS27NqP402
-UA5g6hu+ko2iaXe3cONG53gHdMNxxFNt262ch61SHiyBQ/64gLDQePHbKzTc6Df8
-Aq0htg1kd4T1uTmZdrHxIiQhZBBmxD3/2nWb8GeQnwN5q2q9avR51aL7q1hRwqqK
-DT/PQip9LSem3DDib1DJEUpkM2j6hyMLQs4abzgT+brI7vR7wkNR4TTG8czk1+T8
-SggmbqUB4xjFkv3wiEaA1zyX8JoHj1WxXOKRYwhBXMR7Rc1DzzGP/ek1p7pdqxqv
-xrMbrOTOEmrwWC+NLrx+3FwLx/Ow7mvfkZAxFue2zz75vGNSWcrg0X/27EAiildw
-tw0XAgMBAAGjUzBRMB0GA1UdDgQWBBTjISH5RZJBOldul7cQAUYiKZ4xgjAfBgNV
-HSMEGDAWgBTjISH5RZJBOldul7cQAUYiKZ4xgjAPBgNVHRMBAf8EBTADAQH/MA0G
-CSqGSIb3DQEBCwUAA4ICAQB8oeYc7CPX2ERbR+jqhgmC81Js1Sw74ea+0S3UsONV
-kEIh+N+Po/37zA4tsLh5lNcFcnzQV5fDbLvwjKn0lVeV4TbQOcK6ooe64zcKDpeY
-JD7Atprh5yEZlTAOgFoVt64TV/uq15tgz64qnxw2dqu2+IhsXO9t3JYWCqYqi8Ct
-mGXnqqLTokMSSY9Hdvv3lAqg3j69JE/IReS+TFhY7bRSoGqCQmj5+U3NnfTSS0K6
-WLJynymmeJ+WbYHfcy8SHuKf7ZZ9vJqgulNX/gA7ERhimx+ZRFeC9mHHfG9cT+lQ
-ym1cyn2uU4rYiLgbXREZXFaKJBjpL6nVzZ8uwLWIyD/61+AVDysT4VZSnmE9tg2E
-DOZ6F3t/b0tkhpgK9YskLjRc/mia/sgZ+VPwx2RhTnYx4nrUZmiFSVe6xlOYxuVP
-vobuDpFTn2A7KXEeb1zsYREFuI0vIcjbt+R0x0wDZ6PwVty3p/eqnfr3/KOJc144
-aionfk1Kp71EK5+Mk5lL0R91p9DuYZe/pY7MjLBkk85E4wtFboHUR5XPSxuDtRvr
-F5zt/jrCObw6S3Qs2wrN4B8m2VegjFRqapYUbNnuq00CxU/IBdeVd/q4EK/NLRWG
-cZKE7H/9sIYJCR/HKzUf3Sy5dZjvODiyAdOrgIASOfXQ8LGH0fGBoryc6fbmgfGk
-Ow==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 -----END CERTIFICATE-----

key.pem

@@ -1,54 +1,28 @@
------BEGIN ENCRYPTED PRIVATE KEY-----
-MIIJnDBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIC7I6Ou9skJYCAggA
-MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECNAuk6SqiqvWBIIJSCUG+5xRhQ8R
-8GwK07GkHZ7l90FKZ0qk6T/zbIf1yOKkgq7kvq8U2HJBe1Sq3VFINbVSBf50eCZR
-4QrPHzjWoetnu2t1sxmVnhKXNPF57JV07rHPUb+XIdkpHQ6OZAnJte4Jjzlnu6lT
-H307jbYSIn+50OpfZXptKL9ljhdYNy6CYcvxNi3ky6Vdn5ZMmsVgulx6uGU62GdQ
-pbv6vl4/GSwC1RCRTXpvgNNkury1BtECmXmv66b2R35q+TDIGdHIJA/zRk7lKjU4
-/Lx74TjCw5Io6gU+Hlojv/gbqVQhiR06GrtbzAO0K8SoeBwbTd34b7ACfNpggtsR
-SfxaSrxAlOVZAJwhG+/dWau75cXCgmPGSjB0MwiYJRf/3f6D5IfZdpA+Qy0Xwovm
-WV5HX8EsXdDHv/ly4169gjZuEhR+GN2ZHqNDOdeptRTsaSI0WXCRJAruzNabY/7Q
-5BaRlAoPe4/YdHQH87UwBai2BkeY3+yPqM7c0+FG3EY9AgMlx5HS/pFSb2Vp1N9u
-3b2LULISm1j8oZ4ieXwhmeHjw4i+NvouIiQ0j79FRYAugMqcxY5UziNIaVYBt/xI
-jlGRuKBW0L2tkdulXndI4Ok8uF+nWa0y0bw3p8074Hj0BBaALvv9criQUnRjx8Nb
-bL+UDxAzkMZnV8ARJC33ochHRUyuyvRK3ZimYh3PXCI88Aj1iod+SqF/pz1Z2JCp
-ksiVDdRHl45qWBaJ5xlZCspVI4i1ui81GrCtkdqSsr1p+TzE0XnXZESlsNNQKaSC
-WpeDwv9H6hPqy2YmquS/UjCyimTpiofSdBefdZoNrTiA582yyJQ1fOUySRbw1PYN
-YVIuqwVk1EviYmYu/Iz0xqZfoCWOrZszb9ZMKaRwwOsiViWQHkF7WInQngI/eIt2
-E6N4MBQT8vIKu6Ly+Dp3CxztvRjnEXnfY3Oijvc88mrvrUvn+OAC7MLGHstRS5g8
-helnus4m3m2JNM172foYlqI0aTU+SAqnypAE976igZ6Hf6+NWlWTd/z+moy+kMgi
-2diqIwfW4J39tgDAgvaTtTmZ061gdmeFBP1S5Gtmu8rXCIRFJpwZpwQtCEMINThp
-4c/vwKRi3rMy1GMhPCkvKOtAGkjDws5EIApuFZjdUyJrOWQER1v1Q36yjDItX3VT
-57QYkHw6/Z+sIYnbBnNRz/6lJ9eLj7ko0ZrRmXK3Cl8r+adTLkYm2JHnR3hIxvE9
-01JkygFG3CBWE3gPMchojgNhsgjfVz4qkab4W7Hs4rKdYIsSAwga1fG5ak4gJ4q3
-39BVphebVCWKXi78/dSjKnd1yKXKvclWK8RInzwVS5rfZ40433FkkE97C74wPKHp
-s3rnPXQnzjEe2MwuKdiJbw1UMOxKqGfdjjA6wKxhSsLFBb3X6IUY6UMGUBaN96vX
-Qi9TU1eLDNj8CxnTJNBZd4eXe9v2CQnPvDUax6ICuOOR/Sibu42tKlzkwmSFL8KC
-j0hJqXRjqg7UXkj683Ejqed+hHho+Tal5PtYhrFPtfcRVv4DJdpynuy4Kd6taX6m
-vERy+PnFPhC88Yu18XLd8ofBBuYph2NJcCIvssYIBXTBl6FX0vkdBYf4Q/BNPiU6
-B8UlzVjxBQmKOAMlTAAWKD6MRKYPs7Y7jXriRiTg5yKH+l6NVW9dc+5KfThyaoYv
-xiqNx3UYlvV5IV9t7zKy6Zwb05N2jHTaXuuyUEwowLMxdyDxZuECaMVz6LAAEQ3l
-QW9kZL80h79d0XmQVjDDOh9soZC6CmxEzEPOfLGJrb3mxnVvRdKunEPSnYyGghiD
-27769OymkhlDOlRWnimljTLcduChbgSd9dqgNBqfNMEDpzB3Tjp+dVyqjL54m+9Q
-BWrOjhMO312hWlnH2zMX9GadNhahQxnrp1fl1n5m/vzn6XBIA9K1oDySJcEDzN2R
-vWS1I1ay167WRaJnPLlF/Zy9SuR2QB997WwNi9/HLM5QFyP67nzIBwIEI+xmyQvg
-8ONNwfsdz9lZO/uFCFUVfbvsb/gQNiMAdRbyAcsX78zv8Hb2XqFWfkhcXYgxgnow
-boSsdH0EskBFuBq7tXaTOPKdKiTLomwlxk6z1yrryhIWympUp9Oel4RTPTDZlO6z
-A70nvzpqGe01YI9joD0n1ozjOlcYdQUxc5hxnGYitUuTvJ52PJQRfUsNw18kWV9f
-gGQ/FPCbcXK044Ju2AGYsEDqyji7uRFMjpajagBThrdtxBECX7mFpUsByVbS2zaC
-sN0IYbRtsXgCuXHHEdkPPM8GpLZSP2uMuJnp5T8mTS72C6od1NlERS+EXsA68Pjd
-NFrvUdUXfzNdUB+mDJpS4lA34xUxF2R7r7UvfkpT1lUssRKs7WHKyLGf9StEw2OL
-k6OOF7xEK+GVo8kMxRtYj6zXH0pZnsy3xv5/cvny0qPimjoR7363c3j3r1Itz8P3
-PiwcoRwM8BjA35jkWhSySUHBwsgMDt6SabIOETG5Y7XF/2FvQFhW96YWYiAGnbNZ
-pAH1lQ6/DvOSyBW/CAAPpAb9uqZMpN+nJ6CTBo5lZi0FrylTGyJXqWtxFAwWT6bP
-sQVVyGdNxvjqNTUleoFmPsa4cDA93Up/wkRSAr2XXyGoIs4O1djV3XuX6akyRRKJ
-80IM72BMvEi8HJCdMsX6DMlYETkYTdJZI2sChN3ajG/SlBy7gAmsUJzipxq17yRS
-yaKWYCltky/QuTj0txUd0SwmmoFqZtqDf7B0MlI4hRaGU9KtOrcR+i0NKnl58l8u
-hUQoS0M239bYMLTUl72imsnC9oDFYmLets5FupCtxVvO5kEzMFCOzoWYfH9GvdAu
-XVXa9NNcfpB0Toodg8kBT+DaeaiuuIF3teHSt0hH8gem5Jkcjoqu04y5o7gEoDRU
-dIEwryf8oovm9rhsoT8StSjGk+dq2a2SR2mluJfqai2HdXvmS0iiTckfmkuzo1AH
-HFjXtDnDr0l10aX4n0g1TtH3+3MVmfRY7FIiqn8QWwbOqdb7Grfftr14hHamvfYG
-XFCPFTcD8wMUvIbXplIQesgPrn+luxzHgyllHdf6MFGlsjuCCxXbJRzZTauaRSrq
-lqSHTril3oPUWKaiHkpR6ua/8GcG8SJVGl6zF1a9avBDvILheq8ZNhGJ6ZxoC/2V
-zJAMi3czKj43LaOVUjHF6Q==
------END ENCRYPTED PRIVATE KEY-----
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

openssl.cnf

@@ -0,0 +1,93 @@
+[ req ]
+default_bits        = 2048
+default_keyfile     = key.pem
+distinguished_name  = subject
+req_extensions      = req_ext
+x509_extensions     = x509_ext
+string_mask         = utf8only
+
+
+# The Subject DN can be formed using X501 or RFC 4514 (see RFC 4519 for a description).
+#   Its sort of a mashup. For example, RFC 4514 does not provide emailAddress.
+[ subject ]
+countryName                 = Country Name (2 letter code)
+countryName_default         = DE
+
+stateOrProvinceName         = State or Province Name (full name)
+stateOrProvinceName_default = Germany
+
+localityName                = Locality Name (eg, city)
+localityName_default        = Wuerzburg
+
+organizationName            = Organization Name (eg, company)
+organizationName_default    = server-state snake-oil
+
+# Use a friendly name here because it's presented to the user. The server's DNS
+#   names are placed in Subject Alternate Names. Plus, DNS names here is deprecated
+#   by both IETF and CA/Browser Forums. If you place a DNS name here, then you
+#   must include the DNS name in the SAN too (otherwise, Chrome and others that
+#   strictly follow the CA/Browser Baseline Requirements will fail).
+commonName                  = Common Name (e.g. server FQDN or YOUR name)
+commonName_default          = localhost
+
+emailAddress                = Email Address
+emailAddress_default        = webmaster@localhost
+
+
+# Section x509_ext is used when generating a self-signed certificate. I.e., openssl req -x509 ...
+[ x509_ext ]
+
+subjectKeyIdentifier    = hash
+authorityKeyIdentifier  = keyid,issuer
+
+# You only need digitalSignature below. *If* you don't allow
+#   RSA Key transport (i.e., you use ephemeral cipher suites), then
+#   omit keyEncipherment because that's key transport.
+basicConstraints        = CA:FALSE
+keyUsage                = digitalSignature, keyEncipherment
+subjectAltName          = @alternate_names
+nsComment               = "OpenSSL Generated Certificate"
+
+# RFC 5280, Section 4.2.1.12 makes EKU optional
+#   CA/Browser Baseline Requirements, Appendix (B)(3)(G) makes me confused
+#   In either case, you probably only need serverAuth.
+# extendedKeyUsage      = serverAuth, clientAuth
+
+
+# Section req_ext is used when generating a certificate signing request. I.e., openssl req ...
+[ req_ext ]
+
+subjectKeyIdentifier    = hash
+
+basicConstraints        = CA:FALSE
+keyUsage                = digitalSignature, keyEncipherment
+subjectAltName          = @alternate_names
+nsComment               = "OpenSSL Generated Certificate"
+
+# RFC 5280, Section 4.2.1.12 makes EKU optional
+#   CA/Browser Baseline Requirements, Appendix (B)(3)(G) makes me confused
+#   In either case, you probably only need serverAuth.
+# extendedKeyUsage        = serverAuth, clientAuth
+
+
+[ alternate_names ]
+
+# DNS.1       = example.com
+# DNS.2       = www.example.com
+# DNS.3       = mail.example.com
+# DNS.4       = ftp.example.com
+
+# Add these if you need them. But usually you don't want them or
+#   need them in production. You may need them for development.
+DNS.5       = localhost
+DNS.6       = localhost.localdomain
+DNS.7       = 127.0.0.1
+
+# IPv6 localhost
+DNS.8       = ::1
+
+# IPv4 localhost
+IP.1        = 127.0.0.1
+
+# IPv6 localhost
+IP.2        = ::1