Updated certificates

security.go

@@ -14,7 +14,7 @@ func configureHTTPS(app *aero.Application) {
 	fullKeyPath := path.Join(arn.Root, "security", "privkey.pem")
 
 	if _, err := os.Stat(fullCertPath); os.IsNotExist(err) {
-		defaultCertPath := path.Join(arn.Root, "security", "default", "fullchain.pem")
+		defaultCertPath := path.Join(arn.Root, "security", "default", "server.crt")
 		err := os.Link(defaultCertPath, fullCertPath)
 
 		if err != nil {
@@ -26,7 +26,7 @@ func configureHTTPS(app *aero.Application) {
 	}
 
 	if _, err := os.Stat(fullKeyPath); os.IsNotExist(err) {
-		defaultKeyPath := path.Join(arn.Root, "security", "default", "privkey.pem")
+		defaultKeyPath := path.Join(arn.Root, "security", "default", "server.key")
 		err := os.Link(defaultKeyPath, fullKeyPath)
 
 		if err != nil {

security/README.md

@@ -2,6 +2,6 @@
 
 The changes in this folder are ignored by git.
 
-## API keys
+## Default certificates and API keys
 
-The default API keys included do not represent the actual API keys used on the live server. The ones provided in the repository are merely used for testing.
+The default certificates and API keys included do not represent the actual ones used on the live server. The ones provided in the repository are merely used for local testing.

security/default/fullchain.pem

@@ -1,24 +0,0 @@
------BEGIN CERTIFICATE-----
-MIID+jCCAuKgAwIBAgIJAP0VtS6LGBVtMA0GCSqGSIb3DQEBCwUAMF8xCzAJBgNV
-BAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEwHwYDVQQKDBhJbnRlcm5ldCBX
-aWRnaXRzIFB0eSBMdGQxGDAWBgNVBAMMD2JldGEubm90aWZ5Lm1vZTAeFw0xODA0
-MTAwOTU1MzFaFw0xOTA4MjMwOTU1MzFaMIHAMQswCQYDVQQGEwJVUzEUMBIGA1UE
-CAwLUmFuZG9tU3RhdGUxEzARBgNVBAcMClJhbmRvbUNpdHkxGzAZBgNVBAoMElJh
-bmRvbU9yZ2FuaXphdGlvbjEfMB0GA1UECwwWUmFuZG9tT3JnYW5pemF0aW9uVW5p
-dDEuMCwGCSqGSIb3DQEJARYfYW5pbWVub3RpZmllcm9mZmljaWFsQGdtYWlsLmNv
-bTEYMBYGA1UEAwwPYmV0YS5ub3RpZnkubW9lMIIBIjANBgkqhkiG9w0BAQEFAAOC
-AQ8AMIIBCgKCAQEA1bScmgxVKlhiPpNLUQ6fh7YQ1s0IEBkQ3YBhezHUlZFtiICw
-aUX9/Hl6f/L1i6M01MFR6qW9mWbmvqhJ1HoDZUtsJjyzWoSe/TehlSaGcnGj5GUM
-W39ixbAqGfY/n28am3uUNQQY2/HngOQRXwnrWamTHRU+RXExXiTD/rFANaUg0axO
-tbqj3Q/MV4VLbANziLFxiNlzaqlshwFz55N78jRqK15B7JbBV2yh3ka92ydZZwOD
-inTH9tAZU+fZfo838m38ppgNdbSdwNZIm07KSS4ZkDBp8O9oNN06J7camU3WWnXV
-rdjMVchhWx6IwazBs9kpLDbj5O8lMMDhAmRhRQIDAQABo1cwVTAfBgNVHSMEGDAW
-gBQP9HuMIQvY1HLqfow5FjRONnKmfjAJBgNVHRMEAjAAMAsGA1UdDwQEAwIE8DAa
-BgNVHREEEzARgg9iZXRhLm5vdGlmeS5tb2UwDQYJKoZIhvcNAQELBQADggEBADk6
-OKQ5OuBuFaKqwXaWhEljRCSKaAiN5jk+/+kmQIK9wcruTFwcTbMBjIklQxqwG50N
-USP3+E6PO84XgnwJ+hGG1XdkY9ArDR/AenCSslfkqB8hfgVj8Sp553dfkg/726p6
-uAtLTvNOVOTyWRtmgoVieAuKcciQ7yd7elBk6FO/PQRhYJY+Xt3pPMZtHEtyMgbb
-CLpUtU8BG0VjvSUJVEsP39C5n96qwvpDHP6ivz1hrSeBOTP1yBCp9qdRbftzRzIz
-YM1j0l+LeLPhSh1XMQg76dx4ph9fC+GItNwgSjn6ybXbHBNL42U+Ur4fJK/pPYLK
-YtGQJDRvI53eZivvvd4=
------END CERTIFICATE-----

security/default/privkey.pem

@@ -1,28 +0,0 @@
------BEGIN PRIVATE KEY-----
-MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQDVtJyaDFUqWGI+
-k0tRDp+HthDWzQgQGRDdgGF7MdSVkW2IgLBpRf38eXp/8vWLozTUwVHqpb2ZZua+
-qEnUegNlS2wmPLNahJ79N6GVJoZycaPkZQxbf2LFsCoZ9j+fbxqbe5Q1BBjb8eeA
-5BFfCetZqZMdFT5FcTFeJMP+sUA1pSDRrE61uqPdD8xXhUtsA3OIsXGI2XNqqWyH
-AXPnk3vyNGorXkHslsFXbKHeRr3bJ1lnA4OKdMf20BlT59l+jzfybfymmA11tJ3A
-1kibTspJLhmQMGnw72g03TontxqZTdZaddWt2MxVyGFbHojBrMGz2SksNuPk7yUw
-wOECZGFFAgMBAAECggEAF6GcO5CnjkItwvuotXLngytH22javmT3L3c10FinSE7H
-jPOmDk4WEugf+qwUKPfILMqf01G2kJMHawfS+jLv0zCu6d+Gebj2l8uiC4syDM+y
-LtxZrHh+pJuhXDOVv3yatZzJu78TPKcYUXFm1lqTctvEj8+8jhNBQUbRgYV6MzQ2
-i5XwwfU3JYolqHe1dsmcJtMKYLrve3FfDYLnc5HYy+RQOruk/sxhZ3Xxf+tpL9cA
-JeQtDtmpfDSNpgASPHrOkIsi51rJzlDSlc6PaTdYxSMjMOymOYbpunh/VMf7/Wwl
-BvRWcWpnpotFq9YouYznjUd24ljEOPuZYUCEUH3YAQKBgQD2Q2aFTLYKz7uBVJo+
-vSrQa5PVGUl8DzPNcL75w5WZYV/4O/muMLd9WptAca5dyGrbclw6pO2k2F//SC1l
-m8hFIgjllCdU2bn4BqsHUqIjQOvXM+O1/Aswnk5br5P0WzDUUmHbzN46bJdsUgiW
-5pFRt83//l9Akta4Ie3ZDa9KAQKBgQDeJ6v4QTUqflvYd1YWKvm9IgTgX7C9hFXq
-3PbP9qjGNYLOBpIMxuFXtFqnnqdid2fjn+7IxaOq+79XPpIjd35js0MpkKHIJgrL
-XIRxXnp904WcwUOVdwYVsqs05k4Bs8aoaJu3Q8C0kQXaZYmCGRSLozNj5VUgoI72
-uXud+w9vRQKBgQC/yBGpMep7VPezao2M2ojjM0Q3qq+9u6EeFvXDUPvKLTkt+pch
-frMHHm7VqzKdupztNYx550NjI1bvWehwvvciT7UaBVz0CXN4osjCtSmrxr1kJPbr
-HNQiEsb3RC83F2VZlKa9JDjUywjJxMEHs5vsRfZZrGHFyhUJ5PJ0HOIsAQKBgQCy
-VeKFPcNyQ1Fzqgjfbsxgeei0PdzhplRaX9t6AqZlxxskTL39p8HJ6CxGFuSD9Rre
-7cqAPbgvUDy/yqkB87DwVD18JnDY/UD5E2H2qENost61gafBWnT2AiHSK3c/gpPd
-KWynZ6pQyYKLWatTVtLZbb+ZV8ZIlNtvUGLd5Wb0iQKBgQDlnm3AIKp0Y1z2ul5V
-BcvVk+6XVI+2ygwrERcH3yoUBZJWehLTXSRfAeWedzk7GvkvkOMfPY2wfDGx3PWN
-3oMmLIgKbLrWgFOSA+O/OrEAI/Cdc3RhN13IeODVO5XQ5HplKSgmRJBvNDh+FTb/
-qn3hs29b/Nh/nLiWR/F/rRmztA==
------END PRIVATE KEY-----

security/default/root.crt

@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

security/default/root.key

@@ -0,0 +1,5 @@
+-----BEGIN EC PRIVATE KEY-----
+MHcCAQEEIAJIwLLVtPqmlHO9Z8AYgMUqSR9Iv4KgVYSzLIQDi5ZBoAoGCCqGSM49
+AwEHoUQDQgAEABn0G0Ylteth8VU3JKONbGCCDGWDlRn3Eo2pqBc0mrmb9ZEzBFNP
+KMrIPQp3/0g3RDL/DW2QZH/Bpw4hXuLNBQ==
+-----END EC PRIVATE KEY-----

security/default/rootCA.key

@@ -1,30 +0,0 @@
------BEGIN RSA PRIVATE KEY-----
-Proc-Type: 4,ENCRYPTED
-DEK-Info: DES-EDE3-CBC,4F4A5AD2928C7B4D
-
-9Bp7gFYCBIKrkUXzvz5H0QXP07nP3P6FoiA/6EQaPHhVVRjsAyVTzhvWDliUmWco
-gMhuY+1wNL4M5ZoS0IXks22CfPYXgcZlReaqCHXdIKM44XAv1NB+LXZoOdTz7x7x
-MFnHH8Y+uJOlRqGr2f1akDAypCcbJZcTB0rpjPvdASDkuDlb45JaPK4EsA6K/dJz
-bvSOqSJoKgbuCGtG9jqY9VjlNxLPN0F1p14iepHv9MfjSd5M7Pd8gulw3LQHEubb
-JTxC/wXlieO0NKtS/O8tSQ4PEZS9etOBhExaX9k0AGoo1LTvJsKjjrMCMpCRXkGL
-Xv20nvZ91Mpq5yuTQwOddgS6fa31pSt9VN7keUXhI+jge6BrbD2/6QW78s1jcXXI
-Rp8w/O+qqNtL1+v99vS1X6gUIOe7nA5FCqYEGbAYpFd/phTIlG1Q0HUnNzFhdYCW
-mLifMaOBl3E6pAjVc0jzpu7izzIGH6wWsu1Z8AP/eSgEuOUbIlnInyqNH9JVt+m4
-6Y+LY+M0AEa5zSOkKxKiXfN/uhiRgSUt3/ToQQd/ksbXINfq97JJIMDSnqPoc7Dg
-6e35DSy/Kzr6xr3+S7kDm319VljIwURMQE20B2yiz4rgwfKuLMSxQAtFOMWEQK8s
-0y/4+g5mlgYlCU7NTudyo7tnmKWWYe9ztlGtI3wIydvT8ySegu9238IngayUcK2a
-Wm6agiMb+tnq69RdFDE2IZbPkMMfkdWPSDeFKgxUSc+V/L+oPhOeAvnHrQ4mXngN
-f0KKc2oSUSbbAL6+Y1l9gdyI8YnDvXg7+80ZjaoUQApuuyhpC8tNVynjKC+mWNEV
-wLucylmGISYIewHMkRO2G4bFBoz0vaVN/pG9T9cBcoYsxP0pK7N9iPp/eiJ6XSIJ
-/CR4FdwzyrLkbW6pNOr4MfkL0DWickltQMwGRBmyoWyUMloG507BElnXqFlA7A9O
-NHSzGZ37Euqv3W/i6MJH8zscPRiQXf/rxtIj4VrKILL37QgjL2KRJiaQ7+uoT3WV
-7aUkQhtupsBA0AXl7Ttc6vjBqd7fXlVQu7EpePXPiMmUzHX1te4on4Ru3g8IMm1K
-ZqCLVp0biiMIPDjN7g+x/9nKN1mGK27gHYl1DGs+G0ffO3ru4fMjQerVuvdQC0ta
-Q//Zdeaf2DmrVCfFx0iLX6Mhl6kxowgpgPWHEwmqthEPjAWhV/9wDSmPxmQZILo8
-tfq3GNXHBCKqv4JfIf54+eH4AVOVZXXC0RWpUT2wIZQqZhN53uWYFLUhQ2PoivgU
-1FwsQ+uhreETl5nrTJsLuBUHNYa45Boe8mZu0NbnhL8xYN508sM0DTKzCnZP8F0a
-KxLVYboyTsS8MqpezhdRTA0d4uiBSX3OvS+ZdXQaRaAES6q18g2gxZ2w2pe5EZ1s
-9EWg+e/CSSEYlJI3QTSaCcMXDTORAG4ayMX6bWfGokVD6wDKD5uVAL5P2u6ILp8y
-bsqWlxwJsaM+S2L3wsiETyzjzMT+e3zozQsP57+zpUJxGEZuQgfwHDKMVZVLCbcB
-/3CrzNO/cfegj1OzViMnW8dzLZMeWr9Cji/Y6X4rkoTeRPOgr8ImTMSV8aF0++RO
------END RSA PRIVATE KEY-----

security/default/rootCA.pem

@@ -1,22 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDljCCAn6gAwIBAgIJAIJmwBmaiPemMA0GCSqGSIb3DQEBCwUAMF8xCzAJBgNV
-BAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEwHwYDVQQKDBhJbnRlcm5ldCBX
-aWRnaXRzIFB0eSBMdGQxGDAWBgNVBAMMD2JldGEubm90aWZ5Lm1vZTAgFw0xODA0
-MTAwOTU0MTBaGA8yMDczMDExMTA5NTQxMFowXzELMAkGA1UEBhMCQVUxEzARBgNV
-BAgMClNvbWUtU3RhdGUxITAfBgNVBAoMGEludGVybmV0IFdpZGdpdHMgUHR5IEx0
-ZDEYMBYGA1UEAwwPYmV0YS5ub3RpZnkubW9lMIIBIjANBgkqhkiG9w0BAQEFAAOC
-AQ8AMIIBCgKCAQEAwt2cjkXZ8qhhgrkDLccyqZgqFz0JqoUhWOevfKFytEhfGkv+
-JyoW+OvE0iSMr2BdOQ92zguJ1SdQFB2wtnwCVrXX5Pj+wdqiU2lksvneNAUYdCK6
-+rRBh7tf8PEQK1BgKuf3HjG/AuXGUJxBixCE/KqfA9OcHAX5CxBZQBdBBroU+mpU
-iLUYPxAPNjFp9eptPQUs5FTFhW0wWGZ0q/0n86AByaRQE5BCiwA4OBbNl17Io6ru
-gm65SZGX2341PbroqetmkmVLHSqzS2tEfCpaekcp0ogTJhHL45zCmHv7n1QqRhoj
-0xhgFgQHFhye2FcA9/Wtq6MZ8Eb6PpW2BqDmQQIDAQABo1MwUTAdBgNVHQ4EFgQU
-D/R7jCEL2NRy6n6MORY0TjZypn4wHwYDVR0jBBgwFoAUD/R7jCEL2NRy6n6MORY0
-TjZypn4wDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAM/uRgMib
-ryCbd6HZqXdHEiVNAOs0kyFb/27ABWpWccBnf0b+efyWJF8uPwDwuWs6sj234xZs
-xb1uttqHmOi/kRUvB9KEzUaq0gSBSGpnawFykaKT76CfxDozhjDrFvMe3Gh5ANQA
-wCpBWgiycGSq0voWt3P3tGZvKgpQd/O7GT68LH+7bsjS6Is/022H096/d4Dez05u
-QSqsCYn0ovI9TFYmNd8LdXQPTte83xjHUUhByB357MiXg3KfExgWVejHU3cOPtNZ
-GRPt75q/xmVvyeXXXL0Vb9QBPD4cSLpwu8F8snncSSLIhF4wwvYfB8JChoTwi9cb
-lwmQ3zO+vTQFzg==
------END CERTIFICATE-----

security/default/rootCA.srl

@@ -1 +0,0 @@
-FD15B52E8B18156D

security/default/server.crt

@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

security/default/server.csr

@@ -1,19 +0,0 @@
------BEGIN CERTIFICATE REQUEST-----
-MIIDBjCCAe4CAQAwgcAxCzAJBgNVBAYTAlVTMRQwEgYDVQQIDAtSYW5kb21TdGF0
-ZTETMBEGA1UEBwwKUmFuZG9tQ2l0eTEbMBkGA1UECgwSUmFuZG9tT3JnYW5pemF0
-aW9uMR8wHQYDVQQLDBZSYW5kb21Pcmdhbml6YXRpb25Vbml0MS4wLAYJKoZIhvcN
-AQkBFh9hbmltZW5vdGlmaWVyb2ZmaWNpYWxAZ21haWwuY29tMRgwFgYDVQQDDA9i
-ZXRhLm5vdGlmeS5tb2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV
-tJyaDFUqWGI+k0tRDp+HthDWzQgQGRDdgGF7MdSVkW2IgLBpRf38eXp/8vWLozTU
-wVHqpb2ZZua+qEnUegNlS2wmPLNahJ79N6GVJoZycaPkZQxbf2LFsCoZ9j+fbxqb
-e5Q1BBjb8eeA5BFfCetZqZMdFT5FcTFeJMP+sUA1pSDRrE61uqPdD8xXhUtsA3OI
-sXGI2XNqqWyHAXPnk3vyNGorXkHslsFXbKHeRr3bJ1lnA4OKdMf20BlT59l+jzfy
-bfymmA11tJ3A1kibTspJLhmQMGnw72g03TontxqZTdZaddWt2MxVyGFbHojBrMGz
-2SksNuPk7yUwwOECZGFFAgMBAAGgADANBgkqhkiG9w0BAQsFAAOCAQEAHNEE1dpS
-7eX0ug9XZ46lkv7H3XVthj8K95DcDiZ5COWeUAizAYEPGhVj7b8XPnV096Q6Ca5E
-Knk3S4SJdpAPH5uznXECpZnqYedrApY/89OGKUtlEc2dnbUrtAvEokspvRC54K+v
-FHvMJzNQ2OmnX+eCZgZiipZLKYG30Ini8mqnY18hErSlx44t+xe0jCEDRR45YI0G
-TmMOtQa05YtZR/zS1DgMD7/Vm082+LcFk83CXv0imh89OakcRJjvmu0+hCv0PAli
-gFQ24u5pTIXc9s43OOiWXEqhEr+dZyGea4BFllU3kjs6JEHSYbNX+N1mdPdY3XQM
-G6mWskih0xLR6g==
------END CERTIFICATE REQUEST-----

security/default/server.csr.cnf

@@ -1,14 +0,0 @@
-[req]
-default_bits = 2048
-prompt = no
-default_md = sha256
-distinguished_name = dn
-
-[dn]
-C=US
-ST=RandomState
-L=RandomCity
-O=RandomOrganization
-OU=RandomOrganizationUnit
-emailAddress=animenotifierofficial@gmail.com
-CN = beta.notify.moe

security/default/server.key

@@ -0,0 +1,5 @@
+-----BEGIN EC PRIVATE KEY-----
+MHcCAQEEICc+vokkfQYJ7Doylz2YWyYw/+A2hAtCWJBxT+Dp46ahoAoGCCqGSM49
+AwEHoUQDQgAEKTGI7tRZkk+ND8Qac9BzncMBND74hCb6xpWvGfgZ3KKsXvoxbIR0
+YqowtKCoGKPBGIdqHOR5x6yjY+tbmD2udQ==
+-----END EC PRIVATE KEY-----

security/default/v3.ext

@@ -1,7 +0,0 @@
-authorityKeyIdentifier=keyid,issuer
-basicConstraints=CA:FALSE
-keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
-subjectAltName = @alt_names
-
-[alt_names]
-DNS.1 = beta.notify.moe