Skip to content

Commit 3640ff1

Browse files
jkakavasjkakavas
authored
Add SAML AuthN request signing tests (#61582)
- Add a unit test for our signing code - Change SAML IT to use signed authentication requests for Shibboleth to consume Backport of #48444
1 parent 5df74cc commit 3640ff1

File tree

14 files changed

+305
-33
lines changed

14 files changed

+305
-33
lines changed

‎x-pack/plugin/security/src/test/java/org/elasticsearch/xpack/security/authc/saml/SamlAuthnRequestBuilderTests.java

+1-13
Original file line numberDiff line numberDiff line change
@@ -16,8 +16,6 @@
1616
import org.opensaml.saml.saml2.core.AuthnRequest;
1717
import org.opensaml.saml.saml2.core.NameID;
1818
import org.opensaml.saml.saml2.metadata.EntityDescriptor;
19-
import org.opensaml.saml.saml2.metadata.IDPSSODescriptor;
20-
import org.opensaml.saml.saml2.metadata.SingleSignOnService;
2119

2220
import static org.hamcrest.Matchers.equalTo;
2321
import static org.hamcrest.Matchers.greaterThan;
@@ -38,17 +36,7 @@ public class SamlAuthnRequestBuilderTests extends SamlTestCase {
3836
@Before
3937
public void init() throws Exception {
4038
SamlUtils.initialize(logger);
41-
42-
final SingleSignOnService sso = SamlUtils.buildObject(SingleSignOnService.class, SingleSignOnService.DEFAULT_ELEMENT_NAME);
43-
sso.setLocation(IDP_URL);
44-
sso.setBinding(SAMLConstants.SAML2_REDIRECT_BINDING_URI);
45-
46-
final IDPSSODescriptor idpRole = SamlUtils.buildObject(IDPSSODescriptor.class, IDPSSODescriptor.DEFAULT_ELEMENT_NAME);
47-
idpRole.getSingleSignOnServices().add(sso);
48-
49-
idpDescriptor = SamlUtils.buildObject(EntityDescriptor.class, EntityDescriptor.DEFAULT_ELEMENT_NAME);
50-
idpDescriptor.setEntityID(IDP_ENTITY_ID);
51-
idpDescriptor.getRoleDescriptors().add(idpRole);
39+
idpDescriptor = buildIdPDescriptor(IDP_URL, IDP_ENTITY_ID);
5240
}
5341

5442
public void testBuildRequestWithPersistentNameAndNoForceAuth() throws Exception {

‎x-pack/plugin/security/src/test/java/org/elasticsearch/xpack/security/authc/saml/SamlRedirectTests.java

+45-13
Original file line numberDiff line numberDiff line change
@@ -7,9 +7,11 @@
77

88
import org.joda.time.DateTime;
99
import org.joda.time.DateTimeZone;
10+
import org.opensaml.saml.common.xml.SAMLConstants;
1011
import org.opensaml.saml.saml2.core.Issuer;
1112
import org.opensaml.saml.saml2.core.LogoutRequest;
1213
import org.opensaml.saml.saml2.core.NameID;
14+
import org.opensaml.saml.saml2.metadata.EntityDescriptor;
1315
import org.opensaml.security.x509.X509Credential;
1416

1517
import java.io.UnsupportedEncodingException;
@@ -19,7 +21,9 @@
1921
import java.security.NoSuchAlgorithmException;
2022
import java.security.Signature;
2123
import java.security.SignatureException;
24+
import java.time.Clock;
2225
import java.util.Base64;
26+
import java.util.Collections;
2327

2428
import static java.util.Collections.emptySet;
2529
import static java.util.Collections.singleton;
@@ -29,6 +33,9 @@
2933
public class SamlRedirectTests extends SamlTestCase {
3034

3135
private static final String IDP_ENTITY_ID = "https://idp.test/";
36+
private static final String SP_ENTITY_ID = "https://sp.example.com/";
37+
private static final String ACS_URL = "https://sp.example.com/saml/acs";
38+
private static final String IDP_URL = "https://idp.test/saml/sso/redirect";
3239
private static final String LOGOUT_URL = "https://idp.test/saml/logout";
3340

3441
private static final SigningConfiguration NO_SIGNING = new SigningConfiguration(emptySet(), null);
@@ -87,33 +94,58 @@ public void testLogoutRequestSigning() throws Exception {
8794
final SamlRedirect redirect = new SamlRedirect(buildLogoutRequest(LOGOUT_URL + "?"), spConfig);
8895
final String url = redirect.getRedirectUrl();
8996
final String queryParam = url.split("\\?")[1].split("&Signature")[0];
90-
final String params[] = url.split("\\?")[1].split("&");
91-
assert (params.length == 3);
92-
String sigAlg = parseAndUrlDecodeParameter(params[1]);
93-
// We currently only support signing with SHA256withRSA, this test should be updated if we add support for more
94-
assertThat(sigAlg, equalTo("http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"));
95-
sigAlg = "SHA256withRSA";
96-
final String signature = parseAndUrlDecodeParameter(params[2]);
97-
assertThat(validateSignature(queryParam, sigAlg, signature, credential), equalTo(true));
98-
assertThat(validateSignature(queryParam, sigAlg, signature, invalidCredential), equalTo(false));
99-
assertThat(validateSignature(queryParam.substring(0, queryParam.length() - 5), sigAlg, signature, credential), equalTo(false));
97+
final String signature = validateUrlAndGetSignature(redirect.getRedirectUrl());
98+
assertThat(validateSignature(queryParam, signature, credential), equalTo(true));
99+
assertThat(validateSignature(queryParam, signature, invalidCredential), equalTo(false));
100+
assertThat(validateSignature(queryParam.substring(0, queryParam.length() - 5), signature, credential), equalTo(false));
101+
}
102+
103+
public void testAuthnRequestSigning() throws Exception {
104+
final X509Credential credential = (X509Credential) buildOpenSamlCredential(readRandomKeyPair()).get(0);
105+
X509Credential invalidCredential = (X509Credential) buildOpenSamlCredential(readRandomKeyPair()).get(0);
106+
while (invalidCredential.getEntityCertificate().getSerialNumber().equals(credential.getEntityCertificate().getSerialNumber())) {
107+
invalidCredential = (X509Credential) buildOpenSamlCredential(readRandomKeyPair()).get(0);
108+
}
109+
final SigningConfiguration signingConfig = new SigningConfiguration(singleton("*"), credential);
110+
SpConfiguration sp = new SpConfiguration(SP_ENTITY_ID, ACS_URL, LOGOUT_URL, signingConfig, null, Collections.emptyList());
111+
112+
EntityDescriptor idpDescriptor = buildIdPDescriptor(IDP_URL, IDP_ENTITY_ID);
113+
114+
final SamlRedirect redirect = new SamlRedirect(new SamlAuthnRequestBuilder(sp, SAMLConstants.SAML2_POST_BINDING_URI,
115+
idpDescriptor, SAMLConstants.SAML2_REDIRECT_BINDING_URI, Clock.systemUTC()).build(), signingConfig);
116+
final String url = redirect.getRedirectUrl();
117+
final String queryParam = url.split("\\?")[1].split("&Signature")[0];
118+
final String signature = validateUrlAndGetSignature(redirect.getRedirectUrl());
119+
assertThat(validateSignature(queryParam, signature, credential), equalTo(true));
120+
assertThat(validateSignature(queryParam, signature, invalidCredential), equalTo(false));
121+
assertThat(validateSignature(queryParam.substring(0, queryParam.length() - 5), signature, credential),
122+
equalTo(false));
100123
}
101124

102125
private String parseAndUrlDecodeParameter(String parameter) throws UnsupportedEncodingException {
103126
final String value = parameter.split("=", 2)[1];
104127
return URLDecoder.decode(value, "UTF-8");
105128
}
106129

107-
private boolean validateSignature(String queryParam, String sigAlg, String signature, X509Credential credential) {
130+
private String validateUrlAndGetSignature(String url) throws UnsupportedEncodingException {
131+
final String params[] = url.split("\\?")[1].split("&");
132+
assert (params.length == 3);
133+
String sigAlg = parseAndUrlDecodeParameter(params[1]);
134+
// We currently only support signing with SHA256withRSA, this test should be updated if we add support for more
135+
assertThat(sigAlg, equalTo("http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"));
136+
return parseAndUrlDecodeParameter(params[2]);
137+
}
138+
139+
private boolean validateSignature(String queryParam, String signature, X509Credential credential) {
108140
try {
109-
Signature sig = Signature.getInstance(sigAlg);
141+
// We currently only support signing with SHA256withRSA, this test should be updated if we add support for more
142+
Signature sig = Signature.getInstance("SHA256withRSA");
110143
sig.initVerify(credential.getPublicKey());
111144
sig.update(queryParam.getBytes(StandardCharsets.UTF_8));
112145
return sig.verify(Base64.getDecoder().decode(signature));
113146
} catch (NoSuchAlgorithmException | InvalidKeyException | SignatureException e) {
114147
return false;
115148
}
116-
117149
}
118150

119151
private LogoutRequest buildLogoutRequest(String logoutUrl) {

‎x-pack/plugin/security/src/test/java/org/elasticsearch/xpack/security/authc/saml/SamlTestCase.java

+18
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,10 @@
1616
import org.elasticsearch.xpack.core.ssl.PemUtils;
1717
import org.junit.AfterClass;
1818
import org.junit.BeforeClass;
19+
import org.opensaml.saml.common.xml.SAMLConstants;
20+
import org.opensaml.saml.saml2.metadata.EntityDescriptor;
21+
import org.opensaml.saml.saml2.metadata.IDPSSODescriptor;
22+
import org.opensaml.saml.saml2.metadata.SingleSignOnService;
1923
import org.opensaml.security.credential.Credential;
2024
import org.opensaml.security.x509.impl.X509KeyManagerX509CredentialAdapter;
2125

@@ -135,4 +139,18 @@ protected ElasticsearchSecurityException expectSamlException(ThrowingRunnable ru
135139
assertThat("Exception " + exception + " should be a SAML exception", SamlUtils.isSamlException(exception), is(true));
136140
return exception;
137141
}
142+
143+
protected EntityDescriptor buildIdPDescriptor(String idpUrl, String idpEntityId) {
144+
final SingleSignOnService sso = SamlUtils.buildObject(SingleSignOnService.class, SingleSignOnService.DEFAULT_ELEMENT_NAME);
145+
sso.setLocation(idpUrl);
146+
sso.setBinding(SAMLConstants.SAML2_REDIRECT_BINDING_URI);
147+
148+
final IDPSSODescriptor idpRole = SamlUtils.buildObject(IDPSSODescriptor.class, IDPSSODescriptor.DEFAULT_ELEMENT_NAME);
149+
idpRole.getSingleSignOnServices().add(sso);
150+
151+
EntityDescriptor idpDescriptor = SamlUtils.buildObject(EntityDescriptor.class, EntityDescriptor.DEFAULT_ELEMENT_NAME);
152+
idpDescriptor.setEntityID(idpEntityId);
153+
idpDescriptor.getRoleDescriptors().add(idpRole);
154+
return idpDescriptor;
155+
}
138156
}

‎x-pack/qa/saml-idp-tests/build.gradle

+10-1
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,8 @@ testFixtures.useFixture ":x-pack:test:idp-fixture"
1414

1515
String outputDir = "${project.buildDir}/generated-resources/${project.name}"
1616
def copyIdpFiles = tasks.register("copyIdpFiles", Copy) {
17-
from idpFixtureProject.files('idp/shibboleth-idp/credentials/idp-browser.pem', 'idp/shibboleth-idp/metadata/idp-metadata.xml');
17+
from idpFixtureProject.files('idp/shibboleth-idp/credentials/idp-browser.pem', 'idp/shibboleth-idp/metadata/idp-metadata.xml',
18+
'idp/shibboleth-idp/credentials/sp-signing.key', 'idp/shibboleth-idp/credentials/sp-signing.crt');
1819
into outputDir
1920
}
2021
project.sourceSets.test.output.dir(outputDir, builtBy: copyIdpFiles)
@@ -58,6 +59,8 @@ testClusters.integTest {
5859
setting 'xpack.security.authc.realms.saml.shibboleth.sp.acs', 'http://localhost:54321/saml/acs1'
5960
setting 'xpack.security.authc.realms.saml.shibboleth.attributes.principal', 'uid'
6061
setting 'xpack.security.authc.realms.saml.shibboleth.attributes.name', 'urn:oid:2.5.4.3'
62+
setting 'xpack.security.authc.realms.saml.shibboleth.signing.key', 'sp-signing.key'
63+
setting 'xpack.security.authc.realms.saml.shibboleth.signing.certificate', 'sp-signing.crt'
6164
// SAML realm 2 (uses authorization_realms)
6265
setting 'xpack.security.authc.realms.saml.shibboleth_native.order', '2'
6366
setting 'xpack.security.authc.realms.saml.shibboleth_native.idp.entity_id', 'https://test.shibboleth.elastic.local/'
@@ -66,6 +69,8 @@ testClusters.integTest {
6669
setting 'xpack.security.authc.realms.saml.shibboleth_native.sp.acs', 'http://localhost:54321/saml/acs2'
6770
setting 'xpack.security.authc.realms.saml.shibboleth_native.attributes.principal', 'uid'
6871
setting 'xpack.security.authc.realms.saml.shibboleth_native.authorization_realms', 'native'
72+
setting 'xpack.security.authc.realms.saml.shibboleth_native.signing.key', 'sp-signing.key'
73+
setting 'xpack.security.authc.realms.saml.shibboleth_native.signing.certificate', 'sp-signing.crt'
6974
// SAML realm 3 (used for negative tests with multiple realms)
7075
setting 'xpack.security.authc.realms.saml.shibboleth_negative.order', '3'
7176
setting 'xpack.security.authc.realms.saml.shibboleth_negative.idp.entity_id', 'https://test.shibboleth.elastic.local/'
@@ -74,12 +79,16 @@ testClusters.integTest {
7479
setting 'xpack.security.authc.realms.saml.shibboleth_negative.sp.acs', 'http://localhost:54321/saml/acs3'
7580
setting 'xpack.security.authc.realms.saml.shibboleth_negative.attributes.principal', 'uid'
7681
setting 'xpack.security.authc.realms.saml.shibboleth_negative.authorization_realms', 'native'
82+
setting 'xpack.security.authc.realms.saml.shibboleth_negative.signing.key', 'sp-signing.key'
83+
setting 'xpack.security.authc.realms.saml.shibboleth_negative.signing.certificate', 'sp-signing.crt'
7784
setting 'xpack.security.authc.realms.native.native.order', '4'
7885

7986
setting 'xpack.ml.enabled', 'false'
8087
setting 'logger.org.elasticsearch.xpack.security', 'TRACE'
8188

8289
extraConfigFile 'idp-metadata.xml', file(outputDir + "/idp-metadata.xml")
90+
extraConfigFile 'sp-signing.key', file(outputDir + "/sp-signing.key")
91+
extraConfigFile 'sp-signing.crt', file(outputDir + "/sp-signing.crt")
8392

8493
user username: "test_admin", password: 'x-pack-test-password'
8594
}

‎x-pack/qa/saml-idp-tests/src/test/java/org/elasticsearch/xpack/security/authc/saml/SamlAuthenticationIT.java

-1
Original file line numberDiff line numberDiff line change
@@ -156,7 +156,6 @@ public void setupNativeUser() throws IOException {
156156
* <li>Uses that token to verify the user details</li>
157157
* </ol>
158158
*/
159-
160159
public void testLoginUserWithSamlRoleMapping() throws Exception {
161160
// this realm name comes from the config in build.gradle
162161
final Tuple<String, String> authTokens = loginViaSaml("shibboleth");

‎x-pack/test/idp-fixture/docker-compose.yml

+1
Original file line numberDiff line numberDiff line change
@@ -37,6 +37,7 @@ services:
3737
volumes:
3838
- ./idp/shibboleth-idp/conf:/opt/shibboleth-idp/conf
3939
- ./idp/shibboleth-idp/credentials:/opt/shibboleth-idp/credentials
40+
- ./idp/shibboleth-idp/metadata:/opt/shibboleth-idp/metadata
4041
- ./idp/shib-jetty-base/start.d/ssl.ini:/opt/shib-jetty-base/start.d/ssl.ini
4142

4243
oidc-provider:

‎x-pack/test/idp-fixture/idp/shibboleth-idp/conf/idp.properties

+3-2
Original file line numberDiff line numberDiff line change
@@ -57,6 +57,7 @@ idp.encryption.cert=%{idp.home}/credentials/idp-encryption.crt
5757
#idp.encryption.key.2 = %{idp.home}/credentials/idp-encryption-old.key
5858
#idp.encryption.cert.2 = %{idp.home}/credentials/idp-encryption-old.crt
5959

60+
6061
# Sets the bean ID to use as a default security configuration set
6162
#idp.security.config = shibboleth.DefaultSecurityConfiguration
6263

@@ -72,13 +73,13 @@ idp.encryption.cert=%{idp.home}/credentials/idp-encryption.crt
7273
#idp.trust.signatures = shibboleth.ChainingSignatureTrustEngine
7374
# To pick only one set to one of:
7475
# shibboleth.ExplicitKeySignatureTrustEngine, shibboleth.PKIXSignatureTrustEngine
75-
#idp.trust.certificates = shibboleth.ChainingX509TrustEngine
76+
#idp.trust.certificates = shibboleth.ExplicitKeyX509TrustEngine
7677
# To pick only one set to one of:
7778
# shibboleth.ExplicitKeyX509TrustEngine, shibboleth.PKIXX509TrustEngine
7879

7980
# If true, encryption will happen whenever a key to use can be located, but
8081
# failure to encrypt won't result in request failure.
81-
#idp.encryption.optional = false
82+
idp.encryption.optional = true
8283

8384
# Configuration of client- and server-side storage plugins
8485
#idp.storage.cleanupInterval = PT10M

‎x-pack/test/idp-fixture/idp/shibboleth-idp/conf/metadata-providers.xml

+5-3
Original file line numberDiff line numberDiff line change
@@ -59,9 +59,11 @@
5959
responsibility to ensure that the contents on disk are trustworthy.
6060
-->
6161

62-
<!--
63-
<MetadataProvider id="LocalMetadata" xsi:type="FilesystemMetadataProvider" metadataFile="PATH_TO_YOUR_METADATA"/>
64-
-->
62+
<!-- One metadada file per realm that we use in our elasticsearch/x-pack/qa/saml-idp-tests/build.gradle -->
63+
<MetadataProvider id="LocalMetadata" xsi:type="FilesystemMetadataProvider" metadataFile="%{idp.home}/metadata/sp-metadata.xml"/>
64+
<MetadataProvider id="LocalMetadata2" xsi:type="FilesystemMetadataProvider" metadataFile="%{idp.home}/metadata/sp-metadata2.xml"/>
65+
<MetadataProvider id="LocalMetadata3" xsi:type="FilesystemMetadataProvider" metadataFile="%{idp.home}/metadata/sp-metadata3.xml"/>
66+
6567

6668

6769
<!--

‎x-pack/test/idp-fixture/idp/shibboleth-idp/credentials/sp-signing.crt

+31
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
-----BEGIN CERTIFICATE-----
2+
MIIFazCCA1OgAwIBAgIULAHFP2QmBv0Nwq85ggfJa3p1EjMwDQYJKoZIhvcNAQEL
3+
BQAwRTELMAkGA1UEBhMCQVUxEzARBgNVBAgMClNvbWUtU3RhdGUxITAfBgNVBAoM
4+
GEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZDAeFw0xOTEwMTUxMzI0MzBaFw0xOTEx
5+
MTQxMzI0MzBaMEUxCzAJBgNVBAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEw
6+
HwYDVQQKDBhJbnRlcm5ldCBXaWRnaXRzIFB0eSBMdGQwggIiMA0GCSqGSIb3DQEB
7+
AQUAA4ICDwAwggIKAoICAQCeNmv5oV+QsORglGd62oSAklrevH8sbiMW6wym42c5
8+
E6Fctq/jLJrY1oLdwOUMynSkaPmh9fAcZHtLUsjx6x4QcMEq/ODqBGvoJNZwomt+
9+
uyVbpKDGjtrXZowGnUXPz7hsM2yofRiDUIjTsujrvFp/HqCRw/9K4Uw2x8EYL5FU
10+
vaxxd36mjwbsZCXIjkOsi+jW/bM9RWQd3KF38Ar0vIP/wYK/5s9U+KSuOP3KsSOU
11+
HSH/pnBFiXciU6bVHcZA3IRYnxzaTT2EQZEXyryfQuk3TWe9YvVusXs6kd9uW4x+
12+
Lx/wovx4zy2iUpXhO/MVB1IG1SNM4w5ZE94mrLDtG+yOkGXqReesodPZYBC4OOaG
13+
rZi4rH05FouU6p7QA+iqBCFNNLTrg0f62M/UcAVsANJqQUfFqe7pr1gewF6jlhBw
14+
HEds19XDPmUHredOjDeGJMeJaH3GS8/M6s+MQpckffdmvF4WHwGAJvRf4AXW+G3a
15+
9CTjq+E5I29+dWSvuMIIY/howKxQ9Q+IQhZYGhTH/Y9vpdfOdwVZYBB18zAI2VqJ
16+
18iOCpmd0n/E6ZPyugCSlVZzSjSP+i/xz3c9rJnLkZ5dsOVwloNlw9jaVc/InCUN
17+
KYyRhoxwkPRa9dzuogdDo41lz95xwikxDunTSUEU9yNjfofmWpuQMz5kYHWPsFbS
18+
PQIDAQABo1MwUTAdBgNVHQ4EFgQUgowa3NlK8Dtl5KW1vL44+m0LnMAwHwYDVR0j
19+
BBgwFoAUgowa3NlK8Dtl5KW1vL44+m0LnMAwDwYDVR0TAQH/BAUwAwEB/zANBgkq
20+
hkiG9w0BAQsFAAOCAgEAZLIRn3HnTkiP6wp0gSbKqWdThM47atKqeU5l0iBcyBte
21+
rNmkxnFD6z+6x6YkKtA1ttFTY4kzQ/lr0m+jRlWpMzNkBXU7bNvcbTA5LfrMq99l
22+
QJpPuJ8eFM/B2PbYm5o0SEiTKVyYyjNXHze/alkflUTtNYQMJtSKYjFPvhx8/mVx
23+
CHBC66K+oYydbuUgzR+WGrEhIkTOREeGmtVZ1M8zru8lbD1+I8T0eqcpBqPcRdmM
24+
zSJjJopr+fM0v9LIpi22c50yZtHCLj9iAv8bQRaYnm6aV3kCb1Qv/Wadqk/7oeie
25+
J16bv6VBSFLKyvez26HlYNNmsauz9cWN/h/LosURqmS6g+28bM+uH/UOp6CTgODp
26+
OYqRpKW6/rmVPVejx7RBp63nNa/NMhbEngsR3QsBT5qcaMv7NZbK8v/tZDik3z7T
27+
M4ld5hyUQw8WawopqhNAmTdu0ShBMQhWItQpZ3n12VNDFXXTbhdWxU/VY1hbesVu
28+
C9pRcZXpVgC+tgxjfiRrruETbQyRM73evfnaBCgIaWXcTcyBuHHKneL4dhyOuBkz
29+
4wgyJjVe88Cld/4VhPj2JqJasunfhgmknB6PmRdOQbFiIcYRIrdlk5ZblJzB+mnK
30+
BOe4cVwR3qN0Hi7WqK8loakPVNnnpu7kGUvBKOeiKrXCBMgslffMbTw2ViTtEJo=
31+
-----END CERTIFICATE-----

‎x-pack/test/idp-fixture/idp/shibboleth-idp/credentials/sp-signing.key

+52
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,52 @@
1+
-----BEGIN PRIVATE KEY-----
2+
MIIJQwIBADANBgkqhkiG9w0BAQEFAASCCS0wggkpAgEAAoICAQCeNmv5oV+QsORg
3+
lGd62oSAklrevH8sbiMW6wym42c5E6Fctq/jLJrY1oLdwOUMynSkaPmh9fAcZHtL
4+
Usjx6x4QcMEq/ODqBGvoJNZwomt+uyVbpKDGjtrXZowGnUXPz7hsM2yofRiDUIjT
5+
sujrvFp/HqCRw/9K4Uw2x8EYL5FUvaxxd36mjwbsZCXIjkOsi+jW/bM9RWQd3KF3
6+
8Ar0vIP/wYK/5s9U+KSuOP3KsSOUHSH/pnBFiXciU6bVHcZA3IRYnxzaTT2EQZEX
7+
yryfQuk3TWe9YvVusXs6kd9uW4x+Lx/wovx4zy2iUpXhO/MVB1IG1SNM4w5ZE94m
8+
rLDtG+yOkGXqReesodPZYBC4OOaGrZi4rH05FouU6p7QA+iqBCFNNLTrg0f62M/U
9+
cAVsANJqQUfFqe7pr1gewF6jlhBwHEds19XDPmUHredOjDeGJMeJaH3GS8/M6s+M
10+
QpckffdmvF4WHwGAJvRf4AXW+G3a9CTjq+E5I29+dWSvuMIIY/howKxQ9Q+IQhZY
11+
GhTH/Y9vpdfOdwVZYBB18zAI2VqJ18iOCpmd0n/E6ZPyugCSlVZzSjSP+i/xz3c9
12+
rJnLkZ5dsOVwloNlw9jaVc/InCUNKYyRhoxwkPRa9dzuogdDo41lz95xwikxDunT
13+
SUEU9yNjfofmWpuQMz5kYHWPsFbSPQIDAQABAoICADdxLsldyZV0x7MojlK4/LHp
14+
l7pyJ8a0GcvQNrDNA8E2pddNlblwShsuoNGA5UNkNxfeSYx+GNR6SdKNgil0kSaF
15+
vMuJrm+TeRTyw8rYv/67Kk5BFK5AJWRSZUN0HaDDVAdmxe8NV2e88xXsnj7t1HCz
16+
lOU/39intwODYKFPGgiuJx3kGBfaCz0Po0XyxLhUlxWv9f3EsV7dkB/tmIlG/qLD
17+
d0Q0Z/eI4nzDL/y1spgW1XE3LCTSFVOMKOyJ8I2OOTqtF3lQk/wi1euWeh79Xaip
18+
kW8GnKdbvqk5sSiFIGifrvuuwfa782vssOUrEvYNiKsoSaSJ9N82XSUEY0PUA0Mt
19+
HzMbJHS1kGHBsDJ2u4s6CUYXkztaiLg1TCsXn13KVdhWF8flAddVWp7KPgWQqWkf
20+
ymivfAMNtDmSUTjMbsAYyRm228JVMemNLsxh98lUnyxK9pjbzylygSTArm0yGA8S
21+
RtPT4bAlmPHiNUeSL7GSXAXS71q9sfza3NRAwgUY2t9Y3dpwHn76ptxijBary/vj
22+
CCjn8YBBCgdZ4TNUkzpHHzSmyXOGCdImsYpvHvOR0rlgnEPCti+JZhOjWJgOVD33
23+
U8r6CMM+YoO5W5ukUr4g3sBasyoPFj3GV0Cp9J9i9QVK3Ruk2kbSa0yhTZzjprBx
24+
GElDj1Qj74TycxwIQEupAoIBAQDRuIOt4Th3Ni0r8QdsT0h4Yj2MTq9cOIwYHiGT
25+
ivFz6zaupxUbQSTPNeF97UtO+Jv0VHgjnfPQ8B52bruGnvHd5uEi5GPNTfEhPSCr
26+
WCHM8YzIXoIF/tC6QscLwLcfwJsD6Di1wdaIXAnjt/hP4NxwxQgx7jJte9y9lCEq
27+
eV30kASJgyZ+pk0ehLy1fyzVUiF31rfHVnhpKMeIjlubWv6IXjVOqEjJXaqVH2jr
28+
A4hhyuXmkTgYxVwTd/IjLNwLZdrWZtgDZIWYHwplp1byAtqH+vdMFafEhIQ9puQ+
29+
MWu4ByKc1smvlWILJ5NrG/MUajNWji7oCG13dx3m/uxSvFcTAoIBAQDBIB9LXJOU
30+
B//fHjH7RiN1v3PqU9NBZt4hIPg72+kZrdfKHaTcVidaII65rovagP1ZdmKdpm3Q
31+
DpxoDBiCN4urco22tb7wGGraPk3iQMHFoJrusqzqWDSYxFW5iH1HruyZpsbAsMJD
32+
HH/c4RQO3YWuGAv/1TkVRZ9NAiukh7EofdBGzDVXnOVW6coxuhZmE0NERne66ifl
33+
vFDC3Ubky137pBcUM+udJjPq4AbNerPTkSJ5toMHzpHnipj98+i8l5GYMgNom/O7
34+
Y9Lh4AXDY2FAeCbMDEz0HdUboU6pmcTXWBEg8fV/3NMWMcYXl/GEKF3LRQVpKP+E
35+
eKKXyEuI+8tvAoIBAQCn3hO42LAD7B+YLqQMdCHECo7NgiYnoTOyElw551uBt+Lb
36+
Re5FFI3MNoq563j+S00582r+x23j7m/TyKreBNgBEM9gyIOCUEMUogNGY5MaorZX
37+
pB5bgi29Cbqdk7KA/gCWzgimo/N+zn00A4wFFC4fLfdzUACZVi3IqYsqnl8wZR7c
38+
m1fyxFayePk8JgHS9pzHed089+AF/JhKm/iDkABxU0dEILuyQwFJwAyRIRDHhksj
39+
lVXbrg4Xn0j4Eu5HSU4zk7qQbKPqsd32pE2aBeK6OY49HpBdYt0fJDlJ9vEMKtnv
40+
xJVHsED8QL9lWsflrWROghzVqflFSNlsjtzHFO51AoIBAQCubAqXj9ch3U+0/Zp6
41+
rNAd6noQawDjkrqQBSztMyKGNMIuIzPgZFdKSRlejkx1XgZzJD7Qz51iSa/tMO95
42+
vB0DDYT8PY1jX0oyLg89hur7SKBlcS5GwL9QMhKSbLlpYo0CAOSE55+r6TN6FDZ/
43+
bobrw4Ai4TqbAbRsYsdz47GXNnpDVu/eXy+qnaAl5UGRk1gvc81zHURHcxslw5/h
44+
x+LsATlu362u0vAU85xxPJ7pN62Ba9tP07tm+YBP7FiI7ANtB86YTjGFTxUJN8E8
45+
xKbzCRFRPNLLr53nRHq9JsnnC/z8Wks13gUviGi2ql5Q0/xSN9Y5MfQEeseuehHu
46+
eCs1AoIBAB7xSu5160Nf2Bc7bgPZC9HuJC6kzjmfb9MDLJkAHCyWxyu6s9T2Bgfg
47+
k1CYpUxbDeegGHVuLE3uPgPhrJSQcwNxRGYepzHU+S785ROoSheaaQutvmUifmNB
48+
30uNtw+cBHxCfpX86XC4tdBgRbgzdhfvdyX9wWxkO8drl11jI/aKmsrwg2+Zcf3t
49+
ydwALh51eOyiCGDl957I0oHEMDxc/dmBQk2KhZkbxYCwSb0N2Q42eQi44o5FZRWA
50+
bdl9qzMWmbWx6DwnznFjeOBJp7flh9c1xFn8q6ryzBDilUP0R+l1g7BiXrCfmaGB
51+
RrUiXgUEGJ6fmJUv9GjuMOY0CRq07GA=
52+
-----END PRIVATE KEY-----

0 commit comments

Comments
 (0)