From 1dd66fc103920df1dc286641208f9dd0aab2f689 Mon Sep 17 00:00:00 2001
From: Jouni Malinen <j@w1.fi>
Date: Thu, 4 Oct 2018 01:16:55 +0300
Subject: [PATCH] tests: Update server and user certificates (2018)

The previous versions expired, so need to re-sign these to fix number of
the EAP test cases.

Signed-off-by: Jouni Malinen <j@w1.fi>
---
 tests/hwsim/auth_serv/index.txt               |   2 +-
 tests/hwsim/auth_serv/ocsp-req.der            | Bin 76 -> 76 bytes
 tests/hwsim/auth_serv/ocsp-server-cache.der   | Bin 343 -> 343 bytes
 .../auth_serv/server-eku-client-server.pem    |  36 +++++++++---------
 tests/hwsim/auth_serv/server-eku-client.pem   |  36 +++++++++---------
 tests/hwsim/auth_serv/server-extra.pkcs12     | Bin 2426 -> 2426 bytes
 tests/hwsim/auth_serv/server-no-dnsname.pem   |  36 +++++++++---------
 tests/hwsim/auth_serv/server.pem              |  34 ++++++++---------
 tests/hwsim/auth_serv/server.pkcs12           | Bin 1685 -> 1685 bytes
 tests/hwsim/auth_serv/test-ca/index.txt       |   5 +++
 tests/hwsim/auth_serv/test-ca/serial          |   2 +-
 tests/hwsim/auth_serv/user.pem                |  36 +++++++++---------
 tests/hwsim/auth_serv/user.pkcs12             | Bin 1653 -> 1653 bytes
 tests/hwsim/auth_serv/user2.pkcs12            | Bin 2414 -> 2414 bytes
 tests/hwsim/auth_serv/user3.pkcs12            | Bin 2356 -> 2356 bytes
 tests/hwsim/start.sh                          |   2 +-
 tests/hwsim/test_ap_eap.py                    |   2 +-
 17 files changed, 98 insertions(+), 93 deletions(-)

diff --git a/tests/hwsim/auth_serv/index.txt b/tests/hwsim/auth_serv/index.txt
index 6e94570cb..e61cecf17 100644
--- a/tests/hwsim/auth_serv/index.txt
+++ b/tests/hwsim/auth_serv/index.txt
@@ -5,4 +5,4 @@ V	150215083008Z		D8D3E3A6CBE3CCCB	unknown	/C=FI/O=w1.fi/CN=server5.w1.fi
 V	150228224144Z		D8D3E3A6CBE3CCCC	unknown	/C=FI/O=w1.fi/CN=server6.w1.fi
 V	160111185024Z		D8D3E3A6CBE3CCCD	unknown	/C=FI/O=w1.fi/CN=ocsp.w1.fi
 V	150929211300Z		D8D3E3A6CBE3CCD1	unknown	/C=FI/O=w1.fi/CN=Test User
-V	181001154204Z		D8D3E3A6CBE3CD12	unknown	/C=FI/O=w1.fi/CN=server.w1.fi
+V	191003221355Z		D8D3E3A6CBE3CD17	unknown	/C=FI/O=w1.fi/CN=server.w1.fi
diff --git a/tests/hwsim/auth_serv/ocsp-req.der b/tests/hwsim/auth_serv/ocsp-req.der
index 117e65343af2d6700afdbe88b65822e16b4f6258..3a70e3872d4cc6338889979ae4a5935728912301 100644
GIT binary patch
delta 6
NcmebAnc&SR4gdy(0gM0u

delta 6
NcmebAnc&SR1ONtq0fztp

diff --git a/tests/hwsim/auth_serv/ocsp-server-cache.der b/tests/hwsim/auth_serv/ocsp-server-cache.der
index 99c204383368cd38f3cb4622de9c1779e5943a77..3d4587922c763d6303b6caf56e0f97324dc6ea04 100644
GIT binary patch
delta 190
zcmcc4be(BJEVqTBfq}7+k)g4v>BJ0=dhrGZ34S93LnPrS170>xtu~Lg@4SqR+^h`D
zjg1Uinx6tcX(<2i;#{uUJ4IbS<mSG_ldGEU$gfyC$xZNTp@r_Q%S+nMKC;^-X4P{#
z_Q1)o)Xw-<=FO5F8`{-NKIGlqu39|f%g>zlue?&z%u}EEdj~8k^j@o~k^G(Y^8){g
nN9Np2RL+0BWQ)kf$a&qDM7g9kna(-fB#@mGF>S8xiT+doVq{Jg

delta 190
zcmcc4be(BJEVsF#fq|i+sfm$+$;1qgdZ7je34S93LnPrS170>xtu~Lg@4SqR+^h`D
zjg1UjxlA^v&r6D#-@a+4_6s`}-5b1ihnG7n)@JXTQOb2lsXoA*C7FHg{CKml$M#}x
zW^j4__cr^yn``BvC+x@nFM9If<s{Q%i4v_kc9FS}o!g#IbJScD_1&RP<I#HC?f%7Q
oSKPXg=v4kKf5XA2XOjw}=IvYl`1kb40~_YByf?UWuRv%60A?mnb^rhX

diff --git a/tests/hwsim/auth_serv/server-eku-client-server.pem b/tests/hwsim/auth_serv/server-eku-client-server.pem
index 6891237ae..cdf2a51ce 100644
--- a/tests/hwsim/auth_serv/server-eku-client-server.pem
+++ b/tests/hwsim/auth_serv/server-eku-client-server.pem
@@ -1,12 +1,12 @@
 Certificate:
     Data:
         Version: 3 (0x2)
-        Serial Number: 15624081837803162901 (0xd8d3e3a6cbe3cd15)
+        Serial Number: 15624081837803162906 (0xd8d3e3a6cbe3cd1a)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: C=FI, O=w1.fi, CN=Root CA
         Validity
-            Not Before: Oct  1 15:42:04 2017 GMT
-            Not After : Oct  1 15:42:04 2018 GMT
+            Not Before: Oct  3 22:13:55 2018 GMT
+            Not After : Oct  3 22:13:55 2019 GMT
         Subject: C=FI, O=w1.fi, CN=server6.w1.fi
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
@@ -36,18 +36,18 @@ Certificate:
             X509v3 Extended Key Usage: 
                 TLS Web Client Authentication, TLS Web Server Authentication
     Signature Algorithm: sha256WithRSAEncryption
-         83:42:07:58:30:ac:24:5a:9f:cf:7e:87:a6:9b:b1:e7:27:e8:
-         17:ff:43:bf:b9:82:0a:8c:97:59:a9:96:4e:fa:5c:dc:05:1f:
-         8d:6c:89:a6:b1:df:e4:ab:09:89:c5:c1:bd:99:22:41:79:0f:
-         88:ef:4c:48:51:a0:bd:0a:28:f3:91:d0:fe:c1:bb:3e:3b:5f:
-         36:bb:3b:5f:1b:06:ce:3c:98:c9:3c:6a:9d:5c:4a:bf:75:45:
-         94:df:45:d6:3b:1c:68:68:e2:ed:ca:0a:e9:f4:fa:15:e3:04:
-         c1:e1:8a:8c:ca:b7:0a:96:74:83:c7:fd:38:22:5f:c7:b1:df:
-         4c:1e
+         6d:25:9d:07:b2:54:61:8a:27:71:bb:94:3f:9d:20:60:41:68:
+         7c:f6:c1:56:c8:22:a4:4c:3c:59:67:3a:db:a3:10:6f:fc:0b:
+         83:81:2b:1a:e3:b9:a4:7b:50:ba:94:fa:43:4d:08:3f:22:f6:
+         a9:ee:92:0b:30:d1:46:e8:d5:05:a5:38:cc:4c:b2:13:8d:a9:
+         9c:7d:7d:26:c8:9c:b4:b2:58:df:87:a7:05:6e:f1:51:93:46:
+         13:77:91:3c:f0:d7:19:02:e9:4a:95:e6:d1:7b:71:22:6d:79:
+         a0:45:94:98:15:bf:be:bd:bb:a7:d2:36:8b:56:4d:7c:2a:cc:
+         07:0a
 -----BEGIN CERTIFICATE-----
-MIIChzCCAfCgAwIBAgIJANjT46bL480VMA0GCSqGSIb3DQEBCwUAMC8xCzAJBgNV
-BAYTAkZJMQ4wDAYDVQQKDAV3MS5maTEQMA4GA1UEAwwHUm9vdCBDQTAeFw0xNzEw
-MDExNTQyMDRaFw0xODEwMDExNTQyMDRaMDUxCzAJBgNVBAYTAkZJMQ4wDAYDVQQK
+MIIChzCCAfCgAwIBAgIJANjT46bL480aMA0GCSqGSIb3DQEBCwUAMC8xCzAJBgNV
+BAYTAkZJMQ4wDAYDVQQKDAV3MS5maTEQMA4GA1UEAwwHUm9vdCBDQTAeFw0xODEw
+MDMyMjEzNTVaFw0xOTEwMDMyMjEzNTVaMDUxCzAJBgNVBAYTAkZJMQ4wDAYDVQQK
 DAV3MS5maTEWMBQGA1UEAwwNc2VydmVyNi53MS5maTCBnzANBgkqhkiG9w0BAQEF
 AAOBjQAwgYkCgYEAyjAe/RNqAihRmg6pHnJ+51rIywx+ipmBjQWzCbCphueuRPrg
 x+7zGLQxZeMFb2ZO4+SFgZtHf1+1FiuwWZGcxVXT08osgc7wJ6hU3g5P2PARvQsQ
@@ -55,8 +55,8 @@ Vjgm36k6lRWTphbt0h60tcCoYY6uEAT95ibKSg2QS7msyZTysWuXa2Ak6r0CAwEA
 AaOBpDCBoTAJBgNVHRMEAjAAMB0GA1UdDgQWBBTHxu/1YdKgCIFqa0Qs9XL32t5b
 uTAfBgNVHSMEGDAWgBS4kt79ihizMMOfVfMzXbTIKYpBFDA1BggrBgEFBQcBAQQp
 MCcwJQYIKwYBBQUHMAGGGWh0dHA6Ly9zZXJ2ZXIudzEuZmk6ODg4OC8wHQYDVR0l
-BBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMA0GCSqGSIb3DQEBCwUAA4GBAINCB1gw
-rCRan89+h6absecn6Bf/Q7+5ggqMl1mplk76XNwFH41siaax3+SrCYnFwb2ZIkF5
-D4jvTEhRoL0KKPOR0P7Buz47Xza7O18bBs48mMk8ap1cSr91RZTfRdY7HGho4u3K
-Cun0+hXjBMHhiozKtwqWdIPH/TgiX8ex30we
+BBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMA0GCSqGSIb3DQEBCwUAA4GBAG0lnQey
+VGGKJ3G7lD+dIGBBaHz2wVbIIqRMPFlnOtujEG/8C4OBKxrjuaR7ULqU+kNNCD8i
+9qnukgsw0Ubo1QWlOMxMshONqZx9fSbInLSyWN+HpwVu8VGTRhN3kTzw1xkC6UqV
+5tF7cSJteaBFlJgVv769u6fSNotWTXwqzAcK
 -----END CERTIFICATE-----
diff --git a/tests/hwsim/auth_serv/server-eku-client.pem b/tests/hwsim/auth_serv/server-eku-client.pem
index 7b9600e46..17fbaa0bb 100644
--- a/tests/hwsim/auth_serv/server-eku-client.pem
+++ b/tests/hwsim/auth_serv/server-eku-client.pem
@@ -1,12 +1,12 @@
 Certificate:
     Data:
         Version: 3 (0x2)
-        Serial Number: 15624081837803162900 (0xd8d3e3a6cbe3cd14)
+        Serial Number: 15624081837803162905 (0xd8d3e3a6cbe3cd19)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: C=FI, O=w1.fi, CN=Root CA
         Validity
-            Not Before: Oct  1 15:42:04 2017 GMT
-            Not After : Oct  1 15:42:04 2018 GMT
+            Not Before: Oct  3 22:13:55 2018 GMT
+            Not After : Oct  3 22:13:55 2019 GMT
         Subject: C=FI, O=w1.fi, CN=server5.w1.fi
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
@@ -36,18 +36,18 @@ Certificate:
             X509v3 Extended Key Usage: 
                 TLS Web Client Authentication
     Signature Algorithm: sha256WithRSAEncryption
-         1d:31:a8:51:d5:36:37:2c:e8:9f:00:62:c4:ad:2d:9d:79:9d:
-         85:3f:3e:3e:18:d3:d2:47:85:dd:b2:e0:e7:ae:bd:33:b6:1f:
-         02:7c:2a:cd:af:d4:24:66:5d:58:35:aa:14:19:a6:d3:bd:6a:
-         51:f8:a9:ba:ef:0d:7e:83:6a:8e:d1:82:4f:ac:ab:e7:b7:dd:
-         23:22:2b:3a:72:c8:2f:cb:11:4c:49:b1:44:cc:e9:3d:52:28:
-         82:12:75:c3:ef:1d:08:a4:bf:01:84:24:78:9f:2a:c3:1a:5c:
-         e5:c9:89:c2:1e:25:04:5a:50:2b:ef:b2:2e:59:2b:19:8a:f7:
-         dc:8d
+         66:75:73:86:b8:50:8d:7a:43:9e:fe:ab:ac:61:39:f8:46:03:
+         86:9d:31:9b:d7:98:e5:1a:a6:4f:f7:5e:bb:1c:dc:a6:6d:c2:
+         f1:1c:a0:00:e3:1c:d0:2f:71:f3:c1:51:83:e5:1c:36:55:de:
+         37:9b:71:26:5f:b3:38:58:34:d7:f8:1a:3f:f5:c6:d3:12:85:
+         cf:73:ac:a4:f0:d0:52:23:e9:95:9e:3e:f8:7e:3a:07:a8:76:
+         68:87:f1:19:79:d7:a3:47:3e:ab:f8:22:34:68:3d:3e:84:6c:
+         d6:4b:be:12:4c:6e:0a:98:20:23:b0:72:f7:f8:33:4f:42:e9:
+         12:9e
 -----BEGIN CERTIFICATE-----
-MIICfTCCAeagAwIBAgIJANjT46bL480UMA0GCSqGSIb3DQEBCwUAMC8xCzAJBgNV
-BAYTAkZJMQ4wDAYDVQQKDAV3MS5maTEQMA4GA1UEAwwHUm9vdCBDQTAeFw0xNzEw
-MDExNTQyMDRaFw0xODEwMDExNTQyMDRaMDUxCzAJBgNVBAYTAkZJMQ4wDAYDVQQK
+MIICfTCCAeagAwIBAgIJANjT46bL480ZMA0GCSqGSIb3DQEBCwUAMC8xCzAJBgNV
+BAYTAkZJMQ4wDAYDVQQKDAV3MS5maTEQMA4GA1UEAwwHUm9vdCBDQTAeFw0xODEw
+MDMyMjEzNTVaFw0xOTEwMDMyMjEzNTVaMDUxCzAJBgNVBAYTAkZJMQ4wDAYDVQQK
 DAV3MS5maTEWMBQGA1UEAwwNc2VydmVyNS53MS5maTCBnzANBgkqhkiG9w0BAQEF
 AAOBjQAwgYkCgYEAo5np4uEXYDtwNBp0XEbjuL27qsnz7vsSMKBpw3Q4gDq6I1LH
 wWrPut1B49JpNaSmYGwxH4W9Vmx7CWPNp1FrhECQd36XaHs4tcQVO3Q3NCi6euLX
@@ -55,8 +55,8 @@ hFN4dk0Wt7jfCXLnhyZ0LATKxc4p9bTO2yjrRUdCj+2IWqMjSZt7vDnhAVMCAwEA
 AaOBmjCBlzAJBgNVHRMEAjAAMB0GA1UdDgQWBBQzFp07FxWCKzRuOOjMIr9Jp14q
 KzAfBgNVHSMEGDAWgBS4kt79ihizMMOfVfMzXbTIKYpBFDA1BggrBgEFBQcBAQQp
 MCcwJQYIKwYBBQUHMAGGGWh0dHA6Ly9zZXJ2ZXIudzEuZmk6ODg4OC8wEwYDVR0l
-BAwwCgYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADgYEAHTGoUdU2NyzonwBixK0t
-nXmdhT8+PhjT0keF3bLg5669M7YfAnwqza/UJGZdWDWqFBmm071qUfipuu8NfoNq
-jtGCT6yr57fdIyIrOnLIL8sRTEmxRMzpPVIoghJ1w+8dCKS/AYQkeJ8qwxpc5cmJ
-wh4lBFpQK++yLlkrGYr33I0=
+BAwwCgYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQADgYEAZnVzhrhQjXpDnv6rrGE5
++EYDhp0xm9eY5RqmT/deuxzcpm3C8RygAOMc0C9x88FRg+UcNlXeN5txJl+zOFg0
+1/gaP/XG0xKFz3OspPDQUiPplZ4++H46B6h2aIfxGXnXo0c+q/giNGg9PoRs1ku+
+EkxuCpggI7By9/gzT0LpEp4=
 -----END CERTIFICATE-----
diff --git a/tests/hwsim/auth_serv/server-extra.pkcs12 b/tests/hwsim/auth_serv/server-extra.pkcs12
index 244c538e3178a443737507a8a480126541e4eed8..822af702ba1d0b87b00b0b91eb37f4ebd6601247 100644
GIT binary patch
delta 2248
zcmV;(2siio68aL5U4I8x3Qckw>&^lK2mpYB1;B{2ys6UF^98*}oGCPsA%yP}8M>SR
zjf&iizZ$a1{Ha4TMATuUN8TgfZ7~4?Tsc$H+q~}`Z0(1u%R3X&NK_6tpQ%FXVBtzq
zt~>?(ap7ldpng?Re##p-K}aqcU$Q-{QHbjvr`5A%{D(?|2!B^${v$Wi)c223ffELZ
zK>gMVL{>Aqm}O|^CY2nt3`cDGf(K^|$&><wjP{B|2Q#5@kV&kG4#Bof#xF(7bzc38
zlE@^7OlF3}A|3!r_yDHyxX)!njoQxGC#nu+4z}w_uAQ;XWaUNNQrz56cLQ@kKJ$Jy
z975w_K|8-{?SDiPKIW<F^3#SR<DhUwn$|=A{-V*xFZS@}ejwDs*4u!W22&-)k1Z}S
zOOk^11g_WyJE<fYD|K4%5v4Yg)jD`n8|lW}Epg^8U;WHn#wI031ulG`PJF#G5`*fE
z{dpFeU@wz`%$8jg7$v@-x}01WUU~MrFDembzn9ckqkje}K#{OF72j=pG$yQdl;3Xs
z(NL4eDrU8tq&$8Tkl0RN)0sz;2FHVj=4*P_M6u?9h5r<TT|rx0SvZ(7t2aLCiIq<U
z!aS)0fU;f#H7X+Hs{_6SFJx}Fj}(%ed(Z-GYBhPbqRk||WMR>J181CaHvD2k!D|u#
zS;nfVf`9kQ;chR#s&+Pc2T}^B#PMAg5R=Dg%-A#=W%Nu-LF=c{!v!b>zoaeSm>WA=
zwg{|K;h;7FrL5Qu=X!<Ufw{sXsA`P8P3EHM9{l062s>x!@(Tm1JCCPg(zYt!NCa(x
z<$S&|1BBar=7k~Ug+J^_(_3AIz=br>AYF+4_kXIg;^Aq@^|%JT%4W!i#hzBPnhysz
zH#s&+(baT-x)Bw}olbUEu}10UVh9!ez?VE>Mh-c?j;;HfsRK$B9IwYTAD(3g107nJ
z7ShydmmQXVI9jg1qdn+naAQ`kAVcS99lsj%hP8Hrp?2dpP@5F{rU^D>MAtJvv8FIr
z%zuVT)uiWh)#(<9oag?tDD06vSL0h(X5ey=hmKZp6#@se8h?a5AP8PYv8T}-qgget
zRP{Ar6}Oi;<9T<qnNEX}RYLh*3JEx+<PHOwFI7YHV%_-pPfXsMu!P>mZAM^>4-r#q
z;V8OGHY9q3DFBGT%QVL;kzTGNQozA{vVWCch439?%+0vCuA5K%Ph+K#b~yXhlvDsU
zanqM;mCM^#B|qx#dA#KK8p&|rLd8D2i<1?CoNGfEJS=>Yqx=2`ajIh~u}ncW-196_
z{0-Fw-_chW-hr4zN$G)LoTVQzh1;H|C|5uN6*%7&RPxgtp@+~k3)0e?)Is@Jt$&%w
z2?+jw0RzGc`xd`d_@8TgXBI)0P~Jx))mj3{*r{>P^SPRHMQ3a6Y+6}b0p%Ld8pr>V
zAs!>BB!c)oX@YX;HW%#0cM31Vv!L-OHWABr4z}6)VIU~iZYG^reGF5}1Li79hpM{L
z(t^wX%UX8Vg%&tEBvk5<Vr~Ej1b-oKTqS6_AfUvIZ;I%E1%T+D`KTU}4yI9vCpYe;
zqIllV+5t7L4IjHFGl>PSAv91bfTBPx4pVXqF627k&G<|NQps3vVfKmGppW!Y@g{?Y
zh0zI!ydms8r9vnI9wfo-1J;Z?KHJ?xNXLFERHi`V(Y&-XGU%=TF_j77_kZ+=j1tqv
zTDLQ&Uv=x$yS!obU_H+-i&`%hPb}s<7Qx?2<|5TWri{*L^B~EYx!!wNWtelEseL$X
zLyw}_oiihQ(Q^?-sL+03rM&*e`)+Pmf1#ZNWaWZkhQ+>7zlUPgp>XH@lo-PqG9e41
z$Q3aG>a~!{i9o1`b#7`8Qd>TmAchSRtlW9nkf4pc6m5=f#$o$}3mu(IbJ3;i|EV3P
zX4eDk=}`fR_E@iEvK(Is_T41rIt3pqH~i%Lx|ecddn}74Aqr-bF%9pJ`0chb4DT~+
z8Zeiki<2z|Mt{afaIaiVzDEKA2ml0v0)U@NI(D8D{E++kAKcMLT{+)blqTjYSu1-A
zZC$DK!@8c<lEEu6O8QmJ3JfMvp3j|~$H3UVUU<XJ;9iRY349Hx!KrjQ%|PmyP6DH%
z*tb+RI83E)U9;`OiNX!weuLRLL(Xt`iI<KLvfH^jbAPv>r)g-7H__#EjLPgW^PYm3
z^tgZjk>x1U=;spz1U>m2+&T}KBZzeA^R08Tlnq-#2gJnk^HjaTd-gb0aBhvIcN?-G
zf^a3O5uR137VRMZj*EM>;Y+5IczaEm{{MCnD>D_@nds(ab5|SpNOSy-FB#)T)3vxZ
zXPiOCmVexM^->PbC4t-}3IPen1iHp1&SduZ!m%(sq|z#!8q<q`QrA{c5Vn;i1Zp`4
z3bP)DGcT280Ojhms9a&9<&(>Y5}8>mR}t?8%tOSk%4gimG!Q$c1l=CxG_6Lh8a_EO
z)uVz0CXnC~RNEM{`nn49gCB-{q|)78QZ6ERM1LFQ!F&7In+~exd@J||*Bgp-wynYH
z2G~#eVmM>%*LK}-M_fqCnn^;5V1c8b+#@#`a$9ZaZ_^H&y0u)n4if1taG=c&s$N7F
zz=|rxz~Dxf2=d04OXhZfY^;y8SddFlS8Dgh`qM*cf&K8|Fsc!oFn<NrJ=nBp%kvS#
z{eN8)?TNMjK*A3!ghzSgBycP2U(LkvvXM8gH@Q}rdHA-9fje#rch-Q<$kEfuBL-mW
z)!jt$mwx427R`=W`<V}q7}7R|2WH`FO4-OR+>8oIN->1C+W8`S-y8#<lsoEH6_X$E
z`mMJVx{XU$Rla^ntB-+5I+cD;{~j5E2o+NDW+Aq^Eu^5sNhiGvZ&0ZI+<yv_0|_uk
z&FCj#3<ykR`Zgdf^Bfrv1hGkWFflM8FbM_)D-Ht!8U+9Z6o(H$(hQe~-%T?ZDY(J}
Wzu{zUas&v)zLKAbvz%`N0tf(ju0b9E

delta 2248
zcmV;(2siio68aL5U4JUnX#6n#%J>2T2mpYB1;B2AmM|MD-p#38f)^~38ts3d0Tdd|
z_xJ_*@hGWyg*qIYf7>i^A12j3sLcbSo#SG)Xx+wi`HZb@LxyZHnu#vb<c%_C(}ILw
z=^igv=fZS(de|_{p-6Mjz)(K?Ya;B7RRZN4^f1HJVfQp@UVr~4hp4c{pnbyN$XSEG
z-q>&4P=2!Pqx;XtfwYz`_mIr^k-W?jB-6oVWis`k{>HyPB%A}`ZEChrx)xF{{~QbA
zFyw2PK947Xx}wnFIeol)szYk*Q%a0M{s!|nUPy+9+e}k%(g?9#D|rJiurU9#XY5q}
zWxjhT`7$sEIe(@m);1-}R5VGBH8}g6q!SCN1zAVWvntVJ^YFD`8BI~uHU%I+`71B?
z#WhENWQZxfA2aR#%^)HGM*xU|N|`#oGyU45SeDrhWRk&^V#91}PE%=10Ll&i<QnMO
z^Y|85lA5zK)4;;F<QxST&iqxK2L5K$Ixl~CqhQNtX@BB~bZNi?TrzYh#8<bc1mWLi
zQ)23toK|+Yf34$I+(T4VftoLDi4qqAkjtBEJU51k7A|-@Ea}~-a%Yh=%%*l8KcBu+
z#e!a5#x5Yy1ZQYGFq2cJ)}+tz48sxYRL*S@7H)W?GJCY&teHz+P+7=+B<=P#dh<_k
z@`~)mC4W(qC87`soraqOAln13YRsFR_&WLxQd8L~+W%?~$<*geBD_%8TDV9HvsJH&
zl$Xq#kobSaIGY=$Rnc0&+nsF;3ZQf<3Ip0M%=~6b>URYt->a(lo&+2*G{+V;u){n&
zB%-<YtDC8iS81#JFzZ6LW)v_}ggc3KD2(JLGk@jq@K1B<LvD*@1F*yXuvaV(w~N96
zzp}w|_61{fow2YjD7vZl4~tdr9-ofWs2+PoA!<`DTRu3z3Si6S6*!}y;j72)yxGS5
zIA-=fa5Vvr<*e1Uqlzui$FnEO<^{V4RJ>s)t-Q4h4EhCsTi@6O+;{ugsQ{MRi>jFc
zhJS6{(}jEysS+C<R^hG6_-)4neim8=4xt3N;+7sVhG7fxW8rwHndlN7IJy*Gxej!7
z%$ZK4hM95(Ur*?23q6jOBcu3zThx#mU*^F-I!{u+-SP3-R*X~O4B_~srm9%loaODe
z4ec9l{q-T+o)119{AG568%c7(`b#fMtbeCsGT_WkLKrG*41zq*Q||HFP=kag<hC%b
zew5I~?2IV@O`;A=#)x{iiZY^|1J7L^<&wcGNpN&_KfgIfZ5wlXwzS<E!#_gkjw9y2
z(YkX2E;bY~%F|#~oWDP-A22KnUyB9?&6siBl7u4Ja{(1C%lw<(vO!Zl$HP_LrGH6d
zq&ormz=r=|-{nO9VJQBxxw)eQp>Vh}HYa|rc`97KPna#saeDU?@Jr@R_kD!s#o0lo
z*xXTv=Z>_W!+G$Es5M9@Z<}bi62dV?n>=+H)7L;o`=$0$V<pTFqhf0vt-Z2L$b+s;
zzPjdj2+m+V@I-`Tgq+}$OYwO+H-99;@{KInZ|xM7QVtdt!Z<CB=_fA-oDYp}$oYV%
z1}LepMz|PBx0_vQsi#rUd&f$EIsv&c0G!P;RrQ|OA|L+L!-jfg!P=lqI{0t6>U?6|
zdu;!0_A*68PFul-p*5#a`5epif9EHDqOe5wK)@hJc`kG-_^;o)^Mm6e{D171)|<9Y
z=a!~yRU}0%RENA3BEQ1dw9Kmc@qim~(_=d#^M=Tc@hCApY@ORO{1E#-0QeBuk2r8T
z?8D+lP|R&Flo}KJ{#cUUti-D+WTZyb6RZi*4QvIVS$GR>-Jq(+geoh)nZSftYFQuz
zC*&G?vS6uqH2(F*pyBc`F<Y(h-bGgVl$XBVaPmUhyH;0EFv$a$ABU?vbc+==OxBke
zmx^EH_X8+|cFF0Uu_`K0M7ylP?t%_d)2mg}eTLkDlqE@{%;JO1wmOKDxmAL?LN^!O
zvwnaCF_SF@Mt{rGk3Ga(nGym52ml0v0)Y24_U`nykHyKHARx0|(U4d*28(epj?CXU
z@VTcI>X(=?Sj&tUH+MB&O@3*eteXnCPG^RV(yCQe<Z6z+hWLyc7de6D>@dOT)fErz
zsvh9&WdqwUD}=a-dayR=RQpWST=}lGI;SQi!Bl4y1b<EVWG?U^>sd4I{`A_Egyb_*
zm=or(mvGgAFUJ^6t`e*wdm>Ne_FW3fT(@c#@x8>$5<AB;J%>!`z-VNSF04z2F0Ma#
z@Q0CGw;)bFyU_V^S#Gd+Dz^iKC+efne5rz+*K;6qe6EY0%N?)-q~%r8m0JO(RL{|=
zpLtNoAAeRlo~5MxIaTAP>R*ai`QMQU=Da+eVa)53XErZ8sKw5>11UwKA(}@e|7m&_
zivA%U28{g<W#CpUSshk9o^dWK^_|hT!*(ry98TdGF!8O@86+%qk=93r68T2)E&Ey)
z-PQ;f6WX@n^ew_E-7)`T3L{((g1%>_tX?eTvVWmJR?Cgt%|H=S)bI!@hDo-Q*PCNs
z{9bG76ZMWvFUj?w<0<Lv#Lw33*d%LNko1$B59T>+X_1&Ve91~YBAsz;lKpK_#1*2!
zc%p1qFaw+_)o4p(PV~bH>hu!kKrAb8|5EXpUp2Vy#G^_VzxM`ST_gs1)QWtCqI=!n
zhJTUS3O>Xfh8f76SNnS4Pa;K1H}%9Sl8}b!oicpTLQ(67s37>O9Z*oEn$*-0%e?Cm
zyB;^amXw|4VepeMxQjeuTuGYh@SwbfSPq8r3>x(DwVH?y+;X%PwwMK%Zz(7DQg&j^
zcf!$n>^&vK@|vtoSCr0hhCuV!-Hm>WoE04o4JmaQKLybhE6wTT>yc3>a{#fE0|_uk
z^Du3Or<O*Lq4(!(uaCIxNhBiMFflM8FbM_)D-Ht!8U+9Z6av`J1e?uGsM4Hcc(zaX
W9O-j3TLcJxMqLnMUeeeC0tf)4AYmT>

diff --git a/tests/hwsim/auth_serv/server-no-dnsname.pem b/tests/hwsim/auth_serv/server-no-dnsname.pem
index 7e0610c05..44f90f767 100644
--- a/tests/hwsim/auth_serv/server-no-dnsname.pem
+++ b/tests/hwsim/auth_serv/server-no-dnsname.pem
@@ -1,12 +1,12 @@
 Certificate:
     Data:
         Version: 3 (0x2)
-        Serial Number: 15624081837803162899 (0xd8d3e3a6cbe3cd13)
+        Serial Number: 15624081837803162904 (0xd8d3e3a6cbe3cd18)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: C=FI, O=w1.fi, CN=Root CA
         Validity
-            Not Before: Oct  1 15:42:04 2017 GMT
-            Not After : Oct  1 15:42:04 2018 GMT
+            Not Before: Oct  3 22:13:55 2018 GMT
+            Not After : Oct  3 22:13:55 2019 GMT
         Subject: C=FI, O=w1.fi, CN=server3.w1.fi
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
@@ -36,18 +36,18 @@ Certificate:
             X509v3 Extended Key Usage: 
                 TLS Web Server Authentication
     Signature Algorithm: sha256WithRSAEncryption
-         1d:c5:10:12:04:f4:7e:56:e0:6d:74:26:bb:95:fc:df:32:af:
-         46:75:65:7c:8d:54:e4:db:ee:c8:8b:2f:1f:65:b4:d3:57:5b:
-         38:b1:70:32:36:bf:2f:79:21:14:9d:c7:c1:bc:ca:c4:29:b5:
-         38:58:32:99:e8:01:c0:fa:f3:d5:ad:31:41:fb:c2:15:b6:93:
-         f9:a9:3c:16:f5:6b:55:40:67:c2:d2:31:02:53:b5:de:6f:bd:
-         30:ca:97:18:16:1c:12:0a:3b:84:a3:29:ef:b7:38:7d:fe:19:
-         d1:15:e4:ec:57:09:c4:27:a5:77:4a:ed:a9:f1:17:83:a6:06:
-         2c:9a
+         06:f7:a9:82:0d:61:44:10:b3:f6:6b:6d:3b:11:49:f5:22:e0:
+         2d:99:a7:df:e1:19:b4:d4:c1:f0:d7:97:8c:c2:db:f5:59:39:
+         cc:bc:3f:c0:bd:f9:7d:97:b5:05:04:8c:1d:7a:10:cf:ac:95:
+         85:7b:ae:b2:da:9b:a6:da:05:c9:a6:68:66:c4:f4:cc:71:4f:
+         85:77:98:2e:a6:96:0f:d0:38:8d:fb:0b:03:9f:3e:89:01:15:
+         9f:0e:73:4b:57:13:5c:f4:05:1c:96:35:be:cc:18:28:e5:d6:
+         eb:93:6a:2f:a9:c5:5e:5a:d0:6d:04:c3:98:e2:b2:d8:f2:c4:
+         8a:64
 -----BEGIN CERTIFICATE-----
-MIICfTCCAeagAwIBAgIJANjT46bL480TMA0GCSqGSIb3DQEBCwUAMC8xCzAJBgNV
-BAYTAkZJMQ4wDAYDVQQKDAV3MS5maTEQMA4GA1UEAwwHUm9vdCBDQTAeFw0xNzEw
-MDExNTQyMDRaFw0xODEwMDExNTQyMDRaMDUxCzAJBgNVBAYTAkZJMQ4wDAYDVQQK
+MIICfTCCAeagAwIBAgIJANjT46bL480YMA0GCSqGSIb3DQEBCwUAMC8xCzAJBgNV
+BAYTAkZJMQ4wDAYDVQQKDAV3MS5maTEQMA4GA1UEAwwHUm9vdCBDQTAeFw0xODEw
+MDMyMjEzNTVaFw0xOTEwMDMyMjEzNTVaMDUxCzAJBgNVBAYTAkZJMQ4wDAYDVQQK
 DAV3MS5maTEWMBQGA1UEAwwNc2VydmVyMy53MS5maTCBnzANBgkqhkiG9w0BAQEF
 AAOBjQAwgYkCgYEA2/wPoUiHaIbEnnr4GCh3baNYD9u+a9RDQ8S6FzebqP+WonMU
 ExyuGQ+BVDUQZJTjZGW+mwsW0p6SmHeH4pqZ/B1XDIoNTCEvrmfXY2HrkVtYL61n
@@ -55,8 +55,8 @@ ZmXkgwfKajal5iD2XJkn22PlhtgrfB2QRIEiIXcKAwXD62Nhs0wywIeHOkcCAwEA
 AaOBmjCBlzAJBgNVHRMEAjAAMB0GA1UdDgQWBBSOmk9NRq1ZrH9MnL5tW9eZY43H
 cDAfBgNVHSMEGDAWgBS4kt79ihizMMOfVfMzXbTIKYpBFDA1BggrBgEFBQcBAQQp
 MCcwJQYIKwYBBQUHMAGGGWh0dHA6Ly9zZXJ2ZXIudzEuZmk6ODg4OC8wEwYDVR0l
-BAwwCgYIKwYBBQUHAwEwDQYJKoZIhvcNAQELBQADgYEAHcUQEgT0flbgbXQmu5X8
-3zKvRnVlfI1U5NvuyIsvH2W001dbOLFwMja/L3khFJ3HwbzKxCm1OFgymegBwPrz
-1a0xQfvCFbaT+ak8FvVrVUBnwtIxAlO13m+9MMqXGBYcEgo7hKMp77c4ff4Z0RXk
-7FcJxCeld0rtqfEXg6YGLJo=
+BAwwCgYIKwYBBQUHAwEwDQYJKoZIhvcNAQELBQADgYEABvepgg1hRBCz9mttOxFJ
+9SLgLZmn3+EZtNTB8NeXjMLb9Vk5zLw/wL35fZe1BQSMHXoQz6yVhXuustqbptoF
+yaZoZsT0zHFPhXeYLqaWD9A4jfsLA58+iQEVnw5zS1cTXPQFHJY1vswYKOXW65Nq
+L6nFXlrQbQTDmOKy2PLEimQ=
 -----END CERTIFICATE-----
diff --git a/tests/hwsim/auth_serv/server.pem b/tests/hwsim/auth_serv/server.pem
index 2802a6f62..93b39b9d5 100644
--- a/tests/hwsim/auth_serv/server.pem
+++ b/tests/hwsim/auth_serv/server.pem
@@ -1,12 +1,12 @@
 Certificate:
     Data:
         Version: 3 (0x2)
-        Serial Number: 15624081837803162898 (0xd8d3e3a6cbe3cd12)
+        Serial Number: 15624081837803162903 (0xd8d3e3a6cbe3cd17)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: C=FI, O=w1.fi, CN=Root CA
         Validity
-            Not Before: Oct  1 15:42:04 2017 GMT
-            Not After : Oct  1 15:42:04 2018 GMT
+            Not Before: Oct  3 22:13:55 2018 GMT
+            Not After : Oct  3 22:13:55 2019 GMT
         Subject: C=FI, O=w1.fi, CN=server.w1.fi
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
@@ -38,18 +38,18 @@ Certificate:
             X509v3 Extended Key Usage: 
                 TLS Web Server Authentication
     Signature Algorithm: sha256WithRSAEncryption
-         49:e5:e2:10:b5:23:63:1e:7f:00:8c:29:21:a4:9e:9b:da:63:
-         d8:f6:54:35:de:c9:fb:b7:94:bd:fa:23:7c:7f:87:cc:d5:72:
-         c0:ad:8f:04:97:cf:da:11:86:6a:a2:1a:a7:6f:bc:a1:8c:e5:
-         27:b8:da:f0:3f:cc:da:8f:d3:12:f3:d2:2d:33:84:e1:be:ee:
-         df:91:4e:9a:d2:f5:a4:6a:f0:ab:85:95:63:ed:a1:c6:9d:eb:
-         ad:09:19:24:2b:f6:4c:b0:c6:e2:9c:66:e6:9f:93:d0:af:ec:
-         da:82:40:ea:c5:80:40:98:a1:87:15:ed:46:6e:ca:49:8c:fb:
-         8b:89
+         b6:98:ae:d9:9b:9a:44:49:b2:06:ee:af:36:83:cb:cd:cb:c9:
+         f3:38:6d:65:cb:e9:81:d2:25:dd:76:12:5c:da:3f:a1:0e:11:
+         a5:04:ed:05:29:2d:66:94:82:a2:80:67:d1:d8:78:71:72:5f:
+         10:c3:51:a2:7b:f5:0b:5f:ec:70:12:99:cb:65:6f:50:7f:2b:
+         05:7c:b4:d7:1b:21:77:66:47:33:f3:a7:d6:fb:ce:97:fe:5f:
+         fd:df:1f:1d:6f:ef:22:5a:c6:78:d2:2b:07:1e:55:ec:80:62:
+         06:7a:be:6a:0d:4d:96:c2:d5:df:76:56:b0:85:6a:f8:a0:27:
+         62:31
 -----BEGIN CERTIFICATE-----
-MIIClTCCAf6gAwIBAgIJANjT46bL480SMA0GCSqGSIb3DQEBCwUAMC8xCzAJBgNV
-BAYTAkZJMQ4wDAYDVQQKDAV3MS5maTEQMA4GA1UEAwwHUm9vdCBDQTAeFw0xNzEw
-MDExNTQyMDRaFw0xODEwMDExNTQyMDRaMDQxCzAJBgNVBAYTAkZJMQ4wDAYDVQQK
+MIIClTCCAf6gAwIBAgIJANjT46bL480XMA0GCSqGSIb3DQEBCwUAMC8xCzAJBgNV
+BAYTAkZJMQ4wDAYDVQQKDAV3MS5maTEQMA4GA1UEAwwHUm9vdCBDQTAeFw0xODEw
+MDMyMjEzNTVaFw0xOTEwMDMyMjEzNTVaMDQxCzAJBgNVBAYTAkZJMQ4wDAYDVQQK
 DAV3MS5maTEVMBMGA1UEAwwMc2VydmVyLncxLmZpMIGfMA0GCSqGSIb3DQEBAQUA
 A4GNADCBiQKBgQC6oHdVIhSFVWWbZCyt7ZvdZTHJ2mBQzjjWNNzovBueMOcS41Ns
 ye1IA3mBaZjOirh3RzZFz8bg8XsecYlU9wHMIq2gQrGoNZ5gqjqYUdD/H+6+jQpj
@@ -58,7 +58,7 @@ o4GzMIGwMAkGA1UdEwQCMAAwHQYDVR0OBBYEFDFPEFxnn75OiNbcxaueEoiGaQJP
 MB8GA1UdIwQYMBaAFLiS3v2KGLMww59V8zNdtMgpikEUMDUGCCsGAQUFBwEBBCkw
 JzAlBggrBgEFBQcwAYYZaHR0cDovL3NlcnZlci53MS5maTo4ODg4LzAXBgNVHREE
 EDAOggxzZXJ2ZXIudzEuZmkwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDQYJKoZIhvcN
-AQELBQADgYEASeXiELUjYx5/AIwpIaSem9pj2PZUNd7J+7eUvfojfH+HzNVywK2P
-BJfP2hGGaqIap2+8oYzlJ7ja8D/M2o/TEvPSLTOE4b7u35FOmtL1pGrwq4WVY+2h
-xp3rrQkZJCv2TLDG4pxm5p+T0K/s2oJA6sWAQJihhxXtRm7KSYz7i4k=
+AQELBQADgYEAtpiu2ZuaREmyBu6vNoPLzcvJ8zhtZcvpgdIl3XYSXNo/oQ4RpQTt
+BSktZpSCooBn0dh4cXJfEMNRonv1C1/scBKZy2VvUH8rBXy01xshd2ZHM/On1vvO
+l/5f/d8fHW/vIlrGeNIrBx5V7IBiBnq+ag1NlsLV33ZWsIVq+KAnYjE=
 -----END CERTIFICATE-----
diff --git a/tests/hwsim/auth_serv/server.pkcs12 b/tests/hwsim/auth_serv/server.pkcs12
index 2b9048c8f348900f6b197ab9ac58fdb8999afc8f..ba2516c78b3d4e4ebc04f3fa6b0a032942ac770c 100644
GIT binary patch
delta 1545
zcmV+k2KM=t4V4X$U4N<6B^~4+8L9#T2mpYB0{Co|@0UWQrZZ<NA^3%OxE>w|+W!8i
z_RLu7{Q>3@G$#Y7IZy2u=;bEs8q-2A@JnY%*_gP&=DgxUv2#NXUQp(0ao?rbok$^T
z#U}X?Z7ft-kG%+jbQkI+D^_E5f~u-NtlT9hWrx?PD&5wv;(z-ywyZ&#khH=g=-t{x
zq=n2|NTTI@!iZY7D^J+f=dk^G)*7snQG=}kL%;s>Z>+??0E1dL%=d9r`C01OTeH+-
zfacPfeT>)8ZKZ1FSqtOw)V`ZHxG6pLWc6LpWg08=_9ITV!yg0sl<qDEYBCme79#S0
zCYD6JZHf`1JAdE|k|fuR_E87w8Duy1d>wPc0}U}nCI>Yw5luHpiU+^mZK%EbInFW`
z+{`9PJXlI`8J(19u%WU6Je?vXsQo~Y%Ab%T%@5uDH&Ythc|#gfdDdZn9qtoD0qGYG
z1BI|aMXRB%2>t-M;si&~joZ}|^jAX%<}XwIoIw1xrhk2~EoL4$1debY-QahD;C%Wf
za$rB-JYaKGI1qO;uO**qMa?r+MMm!i-FbC717UHKgQI32MxCNtATPz&^H?RPpbd!@
zujrD|30%;?z{ZKl=oepSRQr^UK^O7@mRmFUvxI3UyUor52(ttASA`@QiVV(3t8-nT
z`x2<Y|9`oUySnBlRzNh=(phulTQgl4-Z&uT7#OIaWTJ_Tq`6z-Fz>`ZF>g9-CAs2d
zU8*+PVSYsJ_)mwCA-kud6NzJ{c`XCJ5lL9y{Y+~XjW~@UpQmb4pcV8ww=dV()5D;Q
z0d0Z62W&4~XUn%^!azxIy$`6OtG7w+T{Je<9)EOp5u239+(L{Yw660;<BiZo8mCVU
z-i(~sMMaL+QR>*iyk2gkSkjaTuM?9}=7^tSPX#q|b3pSLIJhZ9Qa_Fw*#QtyeA$n%
zGlwzBmNM~cYCSURr=2MA&Iyl+b8?fi2hwV-m0%P~ZZ!EAuw`&`d$4l?zDSi)Z{=G@
z?+$&$<SguDe>>zZ9R3nvlVt-&e_DRjmt{Q!5&{AU00e>pfHwRAJQL+o!-AV&it9N^
zSLZ26k8Z)K%$a+;BO}(TQXU=$*pUqv0S_T-$wlzG_=AXJ+Vk2;vA`p!zu(<1H@)Q4
zuC!JB(!s8#^6H-FeR0^t9xr8x``1*;r@t52Hgv4d4&Bv|&U&>VIt5KIe{WYO>|r)x
zP~8nAb)R7^s3vhK*IWMhjM?!Nk$u#=IaAEOd=K`H6+AJE^C6`s99u413JKR^76W8G
zzp?sZrsM19`Z`7z#R9Im7cp@sz)}8oY7w&^f)%j34ahW&hlc)Fu!Z__!TjxgRuEE(
znBF2|5~hwRJrSb8G`x5JfBq#ty+*E2ddY+Fb*AF-;O(06cG3)OctMB9c?7$KndRDO
zO#>LsxNS(`dkj2eTN)Z8E+#=yLEUARR~2JBk7dfS6KD;!?Mg_Z`W#_Z7z_k9xoQ_)
z?2v64wk`n1nJazCCS8YAa~9@;@@8%7RJ!N=(U#{lPk2X%FN<p@f42wnnEtbvBf-V1
zi?E%w7~*Zov(VGEr)-a5rnrwN-}=1@NC50+nZ8-d-!e$!`iWs{a#>^8>0_3?jXT;>
z^w;k}L0EO@2%upiyfT`oKDR#r=10zreW^iN-{jVSoeA|sqq?kIaB1-@=h>2NzoE6(
z>*AH)P%)M$6B}6!e<f2*IW2KA-pa$r!^9poO`-stTt;WOl-=L<8{oWGs`=_3ia$<#
zU9T2EriX}0c%HAnxZ2o{u*GJp5LD*LUx0h;6rnN*6^b@fhULD4EH9tOj6m4Q`e#QY
z0-pF1^C%_b1a)mE{8Y^S`3^{wX|ul4^XiwdNlo{XKQl7!Z{HRykNlLdC?krY{QEJX
zS>%CIozgKSFe3&DDuzgg_YDCF6)_eB6wT--VGIaNW%@QCE%O{15CpMFb}%t8AutIB
v1uG5%0vZJX1Qacb@p(cN7T7u>By5+AzryB+vX%r0`slzb32NlO0s;sCef{Y3

delta 1545
zcmV+k2KM=t4V4X$U4Lfe>K&v4`7;6n2mpYB0{Co?pfV&E4pvf=S;H?j<Fa`|K|$c^
z;ee{BV{B}eIEA7}@r91~qGF&^m1e9C^ej3N@Yah>hpLpx`q={Fuxz~mU45)7#$<j`
z)%yA!u0Bo341#JLATEcx%ZqDlAfXeCkQWkw#tchq&f_ZV9)EO6*Pk7O(9xN(BBy0m
z)*Kp$-|GMW5ghpYIk(ClmIC{;r14iFF`;}^tp#ct^P+aVA|6B`Y-G=j3g5!f@!%R2
z@5<I9&2%su;o`n3lA~(~B+28at$DN6rgC1aC>lAmNuFPW>q!fKdhyA-s5iu%VhdUx
z>%)6JjHo0@LVrn5*ytSyp9K`bbLrl*)9*hi;SnBpHPbxPIe>tVe_begRPFU}dSQDB
zf8nFr%1GBV3Ox#wiApfj9B->)>t-#rF)#{3Ye?%CUcA{@ElH09QlDycTY!ScM>fYS
zUlWsBEbDarWG#nYtX`ENrm&Xh=bDv;E>x?jm=<HL6@QB-Z4>*Ex^?awK0<EE1_%EY
zM=Urf@1zt_^Sbu;ipwFkbhg_IzA+nz9ui%?qa`}`@z25C(Fr%qJn?UX+DF3j^lurk
z$3b;kKg9#A=)P;;iWFJUC)s9tG3HCJ-08&WO+|^+?PK)h%=8sXV#UU+@QgqFlg7=S
z8ll}4Hh;N8clMySM(@zV6DRUTkkdK99@c?iPbkBmb!>A3YB;n-ph&@X=E|BvosFGM
zG)N(})ed(T)Hb}&>M|1c8(U9iSdz~})X9`@;Frv{=^5}IDD;j(QTrClClU88IM^nS
zVww}KN@GtXVS`w;f-@p9gd_8?*+Ga1W<Pbyd4CQh&P2~`Sx@-_Uh_QED;2bLpc<uM
zWmDTz0M^9)!05{cAN7I3zi+GMU#rZ0^4??vGEK@l*pWWWsi(L#{;m}!#d_qx7Ok!r
z(D~)LCD>t5KGV)Y{-i$R3t#X3VScwU9@>R$_M<?B2@Y{@_LG)St)TDZv@2WAoY-Hl
zz7D&6EURu$g)MMoE46{3lVt-&f2@x=;@&LW#R38d00e>pfW3%Q8MH};|DI)kTrVsy
zU~#AqbIOO!3JfOHzIM0=*9=H?`nm3wzLn?@qjs?r$b%M-8kIi^UoH2{<i`{cBsKbj
zmS<q_H4&c#LBHGng?R}yD{7jv-+C2oz&V&$ybYZDyVJ25^EMlg_0;kHe;G7wG?f~I
zG`F3$N`1N~>>EaJPnG_6dof(tf50{*i3@w_qdNSrCcAsXQ+O+uZx4l$yQI}ZR)83~
zV|4l2&?u@1>{N{CT|HR7x7)&as8xc?LOa9T#I~})5$k$hSfEP%U~tz1oUCwCx^Sgo
z>Zr!sY9@c1OuVlYuMy_!f3oY*w5Jijv4(b45nFD(cC=xnNJJPc+tV3xBdHQu<wkC$
zB?mo%660mbXHOs+Oya(MF5%4iQ~WcN>brdDN4PR1Nro3V1Mp+2oVY>H<&DKE@bgm?
zrB$TFW91mRx6xw+Kv%QC);q#!hMY!#v0rbMxPo8~ie}?|7U<^#f53!jUgT#TfN;l?
zsg(v9P)VxPi&ot>D|bx6UtB^25I93h+T9O?`RSvPYl|+(cdhN>7<5<ZY#K8eu8p5g
z0xZj!OIF+J{_*gJN10166xo`FAqRw7ftjrDfp#FF0*RQn?^S|^5tle6OpX;6Htr0Y
zO>Xh@aH4SUXBK>xf3Ld7k`2l8pt~l+2D2p@*NMD)E~a|*eaz>q-*A+5moW}w&XP%M
zBJ21b?tjueF!?241R*kTq3TZdw9dphssO4MbYg>JE1~EbvzqpuqkN`B?F<V3;-uFb
z^WORXH))f1KH!+k{JBDYE6@a0ucbDPy&D-m{*u}JS;(&$Z)JhxysoasXR>V*HkM*C
zQf9E7ZvZhRFe3&DDuzgg_YDCF6)_eB6!S1`hNqTBkfHbIY_E^F?MWme+b}UOAutIB
v1uG5%0vZJX1QdpeGU3Os@z_yJxj*2QV$(f~Aq4~o|LVpydN80n0s;sC^VRk8

diff --git a/tests/hwsim/auth_serv/test-ca/index.txt b/tests/hwsim/auth_serv/test-ca/index.txt
index c85734cb6..1379c2417 100644
--- a/tests/hwsim/auth_serv/test-ca/index.txt
+++ b/tests/hwsim/auth_serv/test-ca/index.txt
@@ -37,3 +37,8 @@ V	181001154204Z		D8D3E3A6CBE3CD13	unknown	/C=FI/O=w1.fi/CN=server3.w1.fi
 V	181001154204Z		D8D3E3A6CBE3CD14	unknown	/C=FI/O=w1.fi/CN=server5.w1.fi
 V	181001154204Z		D8D3E3A6CBE3CD15	unknown	/C=FI/O=w1.fi/CN=server6.w1.fi
 V	181001154204Z		D8D3E3A6CBE3CD16	unknown	/C=FI/O=w1.fi/CN=Test User
+V	191003221355Z		D8D3E3A6CBE3CD17	unknown	/C=FI/O=w1.fi/CN=server.w1.fi
+V	191003221355Z		D8D3E3A6CBE3CD18	unknown	/C=FI/O=w1.fi/CN=server3.w1.fi
+V	191003221355Z		D8D3E3A6CBE3CD19	unknown	/C=FI/O=w1.fi/CN=server5.w1.fi
+V	191003221355Z		D8D3E3A6CBE3CD1A	unknown	/C=FI/O=w1.fi/CN=server6.w1.fi
+V	191003221355Z		D8D3E3A6CBE3CD1B	unknown	/C=FI/O=w1.fi/CN=Test User
diff --git a/tests/hwsim/auth_serv/test-ca/serial b/tests/hwsim/auth_serv/test-ca/serial
index f4980db40..d4be25931 100644
--- a/tests/hwsim/auth_serv/test-ca/serial
+++ b/tests/hwsim/auth_serv/test-ca/serial
@@ -1 +1 @@
-D8D3E3A6CBE3CD17
+D8D3E3A6CBE3CD1C
diff --git a/tests/hwsim/auth_serv/user.pem b/tests/hwsim/auth_serv/user.pem
index 4f667b339..6912200db 100644
--- a/tests/hwsim/auth_serv/user.pem
+++ b/tests/hwsim/auth_serv/user.pem
@@ -1,12 +1,12 @@
 Certificate:
     Data:
         Version: 3 (0x2)
-        Serial Number: 15624081837803162902 (0xd8d3e3a6cbe3cd16)
+        Serial Number: 15624081837803162907 (0xd8d3e3a6cbe3cd1b)
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: C=FI, O=w1.fi, CN=Root CA
         Validity
-            Not Before: Oct  1 15:42:04 2017 GMT
-            Not After : Oct  1 15:42:04 2018 GMT
+            Not Before: Oct  3 22:13:55 2018 GMT
+            Not After : Oct  3 22:13:55 2019 GMT
         Subject: C=FI, O=w1.fi, CN=Test User
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
@@ -36,18 +36,18 @@ Certificate:
             X509v3 Extended Key Usage: 
                 TLS Web Client Authentication
     Signature Algorithm: sha256WithRSAEncryption
-         bc:cf:10:42:b7:13:7f:1b:59:89:a7:27:2b:de:71:26:cc:2d:
-         59:bb:c8:12:dd:56:7a:88:14:e1:b5:09:6e:f9:64:72:96:56:
-         ed:2f:f9:00:e7:08:9c:8b:5c:fe:cf:a2:9d:bd:48:80:95:41:
-         e4:3e:ce:75:4a:41:a6:49:77:e1:48:0b:29:dd:ee:d1:f3:68:
-         7c:94:7c:95:2a:7f:d5:a9:a5:a6:a4:b2:9b:8e:70:ec:05:3d:
-         46:62:37:dc:ea:71:ae:32:0e:a5:ed:77:26:d4:e0:b5:0f:bd:
-         d5:8f:6a:99:65:75:58:57:31:02:78:d5:e5:b0:ae:68:af:d5:
-         0d:92
+         b3:49:8e:c8:93:0a:80:77:7b:dc:de:29:0d:d6:9b:a3:4c:ae:
+         99:59:8d:37:e0:dd:3f:3a:63:6c:08:b9:74:b7:2c:27:80:b8:
+         ff:6b:c4:0c:60:d7:b9:a2:2c:ab:00:04:43:d8:9d:89:91:43:
+         02:07:c9:96:66:d6:ea:8d:83:ee:d1:62:9b:0d:ab:01:c3:6e:
+         12:2a:a1:b0:9f:2f:f4:dd:45:aa:08:a3:c9:47:9e:5a:05:09:
+         b7:81:3a:b5:d0:e9:56:88:f6:d9:17:6f:62:1e:ab:39:93:df:
+         f2:ad:6a:c2:05:7c:7f:39:2f:19:2a:ab:dd:34:4e:38:37:aa:
+         ee:30
 -----BEGIN CERTIFICATE-----
-MIICeTCCAeKgAwIBAgIJANjT46bL480WMA0GCSqGSIb3DQEBCwUAMC8xCzAJBgNV
-BAYTAkZJMQ4wDAYDVQQKDAV3MS5maTEQMA4GA1UEAwwHUm9vdCBDQTAeFw0xNzEw
-MDExNTQyMDRaFw0xODEwMDExNTQyMDRaMDExCzAJBgNVBAYTAkZJMQ4wDAYDVQQK
+MIICeTCCAeKgAwIBAgIJANjT46bL480bMA0GCSqGSIb3DQEBCwUAMC8xCzAJBgNV
+BAYTAkZJMQ4wDAYDVQQKDAV3MS5maTEQMA4GA1UEAwwHUm9vdCBDQTAeFw0xODEw
+MDMyMjEzNTVaFw0xOTEwMDMyMjEzNTVaMDExCzAJBgNVBAYTAkZJMQ4wDAYDVQQK
 DAV3MS5maTESMBAGA1UEAwwJVGVzdCBVc2VyMIGfMA0GCSqGSIb3DQEBAQUAA4GN
 ADCBiQKBgQCmli6bIozflL6LiUn2eHaiYH4UlfOW/qsZJQM0ZHQBPqiffPFHYWBM
 gpIofCugDsuHv1nr1/NhIjsU86sx9lqVH7h6uCw8qWFTeJvoPlDswtZE50PNvD5O
@@ -55,8 +55,8 @@ gpIofCugDsuHv1nr1/NhIjsU86sx9lqVH7h6uCw8qWFTeJvoPlDswtZE50PNvD5O
 MIGXMAkGA1UdEwQCMAAwHQYDVR0OBBYEFIHe3+laABrKZ9YG3WWyTsWaBEN9MB8G
 A1UdIwQYMBaAFLiS3v2KGLMww59V8zNdtMgpikEUMDUGCCsGAQUFBwEBBCkwJzAl
 BggrBgEFBQcwAYYZaHR0cDovL3NlcnZlci53MS5maTo4ODg4LzATBgNVHSUEDDAK
-BggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOBgQC8zxBCtxN/G1mJpycr3nEmzC1Z
-u8gS3VZ6iBThtQlu+WRyllbtL/kA5wici1z+z6KdvUiAlUHkPs51SkGmSXfhSAsp
-3e7R82h8lHyVKn/VqaWmpLKbjnDsBT1GYjfc6nGuMg6l7Xcm1OC1D73Vj2qZZXVY
-VzECeNXlsK5or9UNkg==
+BggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOBgQCzSY7IkwqAd3vc3ikN1pujTK6Z
+WY034N0/OmNsCLl0tywngLj/a8QMYNe5oiyrAARD2J2JkUMCB8mWZtbqjYPu0WKb
+DasBw24SKqGwny/03UWqCKPJR55aBQm3gTq10OlWiPbZF29iHqs5k9/yrWrCBXx/
+OS8ZKqvdNE44N6ruMA==
 -----END CERTIFICATE-----
diff --git a/tests/hwsim/auth_serv/user.pkcs12 b/tests/hwsim/auth_serv/user.pkcs12
index a8dd8c5d9bdcb55b70eb34f50b99b37c5395cd1a..bd8abd5d4826dd59e9ffdbddf80037a35c81512a 100644
GIT binary patch
delta 1530
zcmV<W1qJ%`4D}3<U4PC?(KD4kM8^UG2mpYB0@y0A;G8-~DbvE6@a~@T#OHI#;499=
z9Kq?$*1Qm89Fz)lnP1klaUBN$ZPSn@6~lP7i2x=-p!^9nDz+??{Wn~ckohTLE$vqK
z5QhN<&1psxi<j{Z>3RK=h25RqkWHWr%C&n38F935fm_`nVt<XS2a0&5BdSvX(&Z(Q
zcQ$QlbNGXb*9GQ}j}(0T5%%)6NW3U3z$_Dk#0{H*$eOgM`P8E~XM+ar%|r*y4PG#%
z3j>)nRr8B0UdgZdR9`wO`%2R8Bc`Xjz4bCmi5h%#O)<9!ADvoVxczQ)1C#xY@P(&f
zf3~ZxKv5y$&VR6p@=Zi_(PmPwQa`luG!{FQlR(Bw>e7coZ147n9oS5+XhAODh0do#
z6P0F^QwF)c?3qvM6GNC5v#n=kjI&kA-wNF<=|P|sBul60Si2_DO-2yO)FAS*sy#s3
z-=8^O7b$jF>9`ra^f0h=q}x~_*Oxov;_ss(Eqx`i%712_ohIbIScyf|MiN|Zl9gqK
zG1qG=VkS8Fr8>x1VF&>Qqa5;i?)5D<DBtmPx=~w45d1Y?2C3#K9|-e`=b06O1@DiR
z?n7&tlY2{!uZkHS4v2?H#Lme$AfP4bTxD25e6~ii?;dt!uqo+a*lWbms<lH2d249$
z{wyJX4u8{5#vOdla04YK;=rNvo`1!sFZJ%@uDmv`YP%uz>IdNXc}H77i-z+>=p-2=
zgvYa1j3&qw!9_UZ#Ab8sYoUL%NLMQR_x+Z}q_2hjA~m4#0H?f|rybbNB%u%Q<{slE
zDr#C4WE~5**~p)h1-?k=+hOz8%#DtNE#D(tW`El^)<bsD@N+=M_N_cnZWZkK&cl5F
z78YJr*4x6UH0zp&hgY@WKZ`*WVDZ^*qXt?<6SDqq+CUk)X4@+B{%w*=w(}^u*4KB5
zs%u-zoICv{g&l0AMpu)$l_MP#t-t1Udwu9&p^SMqvld4%f&%#l2`Yw2hW8Bt2LYgh
z0+Uw*G=EKwhpR1{OjH5_2ml0v0)X70;hcyw-6uG8cB~ls;O<cAro#l**T$o}X=KIL
zL+kOkX5{m?-$GV<k!!;60zo894Zgnztf84%U8~a>u=~`~DI}Rr)PlVn3%#*aF#pVb
zCQuI2anfM2Bm>40*K1d|U*VPFI65eqN&g({rGJ*frOZP@Zd^;LY&!~$BD9bAptved
z$!W-|5oIpaL@2t%%k-?kPcDb@={mRx!ZV6V2%ofw$nG_`F10z}CgY(lV~N#|qdALb
zkVr+QW;&D{7woKBi(lWI4er)^M$szTK(p!Ftm?jTE5d3iN$0*7RFXDjI~2L(C`ses
zw0{gD<K(1Ed@AoiUWIJcpvS!?s307p3vW~$LF%>}XjMJRU<+`G*u5iF{sZKvN7U_a
z+Z^Z2W9C|&J)|JC$Xf1~b1xK|{uDnR>!NDNUFG?_Zph8Hyf{_TaTxq8mMC&Ey>kmz
zZJr>_$=sU20?dbI{vp=Gux99DY79nvz<;8>ZE;}jd$ZKA49){=B03<&2%Ox9Bm2(_
zD*Eq5SDm$TN9?w?K-MNbpfd52lO!Awr_AW7x%1jrw=JHv?O+5W4#tGmL!+(D))}a{
z5lluL0WN&*3he1M!>ed9r!^(~Y1XD?H@r%8EDO`<El$SyK*~i&YI!1(eK&<AV}C7N
zZg{OJX5Y3IJ>bU*-BD1TNjAvfy>4qVuQ_$1gv2#zPt=&?R-&@qEl4WK=6%Mp=7k6t
z6_Y5WL8jjqT}DlCr=ys)X7Des<v9?126{Z`ier<)LKv-Hdh?t1k=phaZe50X!p2H{
zp!LX2!CNG&?F=?}lOZ?dI2ut}{cj)aOe3IzjSGEgxY;t-jIOs|nywr%B`_lf2`Yw2
zhW8Bt2^BFG1QgKM<s_wn#V5-@B04@Vl?DfSo&hj1Fd;Ar1_dh)0|FWa00b1c%RuVe
gH7VwECk#KUg&LPy+5kob2r!a%8Yx0ub^-zj0J2@_{r~^~

delta 1530
zcmV<W1qJ%`4D}3<U4Q57&!Z9uTZ;k$2mpYB0@%xv8+S83f)j!ZrdW6|1k#W=A7-Nk
zK&G}-Kq_V0Kp)S4OcgQ#!J`tu?gQsY!#7yPcWsxI7{gk!c|N`)DL=ttAJ$_K-QGkc
z`oPh1Vg_7nTneH24`(~k*L)uESp*73|Bmw*zkC@f^4ssgB7Yx;7i#yP5d}8XDWp`G
z^j=&Fn*p#rqyP`9X&uSU50!@CpXbl=^?5|;5D=;98m{*l(!ang;eZVi+QRY(tpgF{
zo9%sobNLT{r6C_h9~h+g2&%$KkIl3oW!n=~iVV&^S_BTVjRc6Gf-O1;G0zV}$a*6K
z=On1)--RV|V1LD`<rpF8No_^;g&4rUhA+}J%dMfrXB~hf&rag9(Gh{p6+Ln~Bv82x
zM&E$wFl$oIj#bkyXZcg1r@dRC5+(vIw6}<Z9Lu290>-S_aqBG@Jyt8o=n!);s`N$4
za-$7!>bxgMpn`G4w_F-y=9X8^!>s)F9GH3u^LsIhV}G9|lGsfHsIiO_Q%;n^!K72g
zmq$^)>3~eZ{5&ueJaP4QbUtESQ;Tvi4Az$IF@LqT=bo`20e2J~y`;-t9)QGk>`VxW
z<n4==7KP`c40dC9*)}=%A>tUaoF!sapD$seD3M$_j`mt&ZMl>1FnGedLLUoBiR<Jj
zET?8H<$o`Xx&o<CG}?M&8NxaS)atV)duDlt*q*NSUeobZltoy$<erASfE!<=aQugB
z&(3J~&+rq=dGBLUWgH{vgg0j_;#{c4$Q7`15hDhS!OcdqY0PTYdCB^ZRDYcJwdq6K
zkp6k-7O(otm>*dY^;LtzkDUjwg04Mp%h=+ZKYu7!Eg3oyJa=#l(SaF%tFImJSi%mh
z^Xj<12f^d5@c>Gkz(Lnt+~fl}l`QUcLCftUamk8M<Q}-cHaZcAo{lqo8Bz3~BgdPL
z)Q+1!+zwW}Qnd)Ur;q2h_)HZqzlIN!J18oUx?xWRIJ3?$f&%#l2`Yw2hW8Bt2LYgh
z0+Uw*G=KhU;2Frz%clYY2ml0v0)Twq*_denq0|r-h;$ZsxU_h%@osx3`n(lyBJszf
zRgH42tq35%jHOl)ZAdkQ!_nkO%CvTfNHhRFi1>P5k_AU9Pm7m^S6xSHMxWzWUa_1n
zHKp2$8A{-hH!NNf5*3ZcP(69`wPU*Q8-Rw?*ME25q8+(wKlLy$65faUJWTz;;($f|
zg+MqD<^7?=SsR9baC}=;$5YKlqBWE++?LYdg&y2`-fy+hm&u6VOx5Yz!AWt`Q1g?R
z#qM{MAJiz`#|!2d&WJM>d`R-(6&mV?(%$y{D2;CI+dSZWEn8faO1oC!KJcnzuD$GY
z?te)9egz6498+SzwV)8hQHf_xvLN36C;4Oyx*Q6-vZ{O6zyraSz*5)w!~SC8<Q(|J
z;gPE0TJ$Cai2{2mn}(o)@G3CA70}#yQeWf_<J9B}mip)7+`aRO9FJ*e1Y#=b1_KM`
z%1`gOW@_SUaUVR0o{sP(Y7&__`*z|FM1Rm~z(4+PaJKN{6@A>e>=09qj1t{?>Uh+|
znHV_!ljKkDZ69un^v2oD+of_VN9vcHfd{F9MW(X=&L#}{%p+IZ(n;l^k`?`Ua4tMk
zMmvPR0j$@(1i4@dwk)pZk5w4#rP-OXf{R7WVG<U4WYQDPXCbgWZZmOji08vXSbu((
z)CIG?vPdm0adb>^#V5=fSc^ysYyWRpzv5uqundVWQq9p<$STmXk88<Mg5YiV&;^sz
zQm4pJ!p4QdMc4aO<rVC(l`ddzzfUIG*U0|}JsBN87%5|D`_2Jz%5}*1OYf^gE<&Y+
z>5EN0=P3&+%6}*j3Nm$l@%6GKKX2l?9gCa7MTYm9c0y{Ej*!E3k4k_sB`_lf2`Yw2
zhW8Bt2^BFG1Qh0F<DnGP6Lz_~%Lly+Y-y+E6wNR(Fd;Ar1_dh)0|FWa00b12lfqGL
g7rMP=q2-u9Yg_snuTe+@2&$*}U?{{~cme_l0Ck|}r~m)}

diff --git a/tests/hwsim/auth_serv/user2.pkcs12 b/tests/hwsim/auth_serv/user2.pkcs12
index 4c0246fd4e2a1403fec658802c9649b34e87f84f..de39b79547181c8893e4b912bc1c485e01f6259f 100644
GIT binary patch
delta 2240
zcmV;x2tW7k67CX^U4Q&@*`Qrd{bK?G2mpYB1-SWi$nEtF6ES?j1_4b2WTXw$!!_ub
z1gfs9T^SE(V3dIjhvlb0v;r1h#F>9KhdR;x<5l(f&^MHz5#fqoDMF=;JvMiVb!ue0
zzkTuxVyLFPUI`Zz0jRz6L*>=+vjCvUC+t$=($Pn5byr}gj(_hUF`<{MhQ*mnwo#MI
z8ro}&WfBtYo(dpX3Q_<0p$Qk)_p|F-Xk@J;2;6Mx7xxZ^l|$ZA_*slEHhT=n`c#Xs
z-lReh=vk#k$M+{C*Nx~(q$>>FK)FFer_Ks_gla}X=!Sjp7-T*$__+*C;qM}1g+hkd
zIT};_5&s1yk$)T$Z@c*~Et!K~ltl8%m4>+&vjA)EC7CV^IpaQ{#qupN_igD`A11{U
z#vS4zZPOgmV!*#J{v}hm#sc5h>wns)OfV&Q{$}*<_D4g)_c4o5>P(<rUKDsFy@WHg
zhgwy=dD9w*Qi@n#7o-6=Bajdb^w;y6b?I)2h#)_{{C{V2r%d>_UrSkfp1_9Ow}?Xl
zd(t0qruOe}4E3k}sZ8Xl|9W+NZ*eyma@S3|1(Dbf-{v_`e!2a6aSMdQm5F?Xkk%Dp
zj$h&pK`LOe+Lp@EfvqXQhV~1!Q>6+^ExYlDl*TtrsNnEgCB&^s8F%{HH)aE-x%tyW
zT)2^<o`0c{KGc*D{NlqJOYAm8N(*b_H-bEY&BR;VGd50qqKUN(qz;lMY`W@8esevy
z$f#m3KVatA-0@E6J%gE;|N4X5QT)XRZ?8-~9D4-UB~E+9no8RqphkLtXqVJVqP8^G
zbMhm(XychNn10gE8|0jNoQrF#&qBQBEpmt<H-Cdk-{wirtY>4x1@XidIt5@<^gA<Z
zuk&D33#hX?pk-K_+Z+R~ktZL0aXH@VB!AC?@<;q_gAPa4Xx_mzm^qpr9|z!^6O+je
z!UUi`(70{n<Bucgifn&GLgCqR8`ZbthAPNwIx@rKX)KI!bs~ZpZdJ4|t?q1cE)(3V
zg@4NAE?2z5f|jCqlud)O3y_BgExYiYaEa9Trwt6g+5ZVu{ig@L?ZZ}T?sgH$Siky2
z7hq#2N!z2GMB)mV5iPX<;9(y6z`go>lGC4!{HQU8-MzngDZw*)Aq#P8Ls8|WF?5e+
zJ;-0bn%@s;9AFPtokQho(0^QoX6M|aZGW!M98?z=4<=^bfoGYY?n-x%F|gK%?DWZ4
zYLn37j>Cmg*rE=3C=c!ANzFdjlQW|_{Jz2|(9jq@7sK34&V3(7gE|_B8if@^GgcKe
zkM=GJ)^U^+>G2Z6b~`z|45JUA)Z8IVZI-ZcR4w-`R~WqojdQ0V?L=40or9Myuz$cU
zZ0PWCW$U5VyPMbD{tyAkt%ki%bWj*$D@=WtRr!8}Z=*3j@puGE`-lCxQn$>z_jCgz
z&Br0()y+{`2xG4N{>-Yr{`t~R1eL)Ys6`CfbX8GILMuFKfcCKgOKCzwigd4Dnz*r(
zccx^L7o>#QlxUdzu@3^M*|CJRu79nTAWt{o|E{NikQ_uC+^9V>*(NgWW5^lRuVyjF
z;$1Bi5-gZ4)S|eTTCx|)4u=RHejrd(TpW@V<3S`cA>fL*a=_$CI<e1Z_J=R&xVmIW
z7gMg*+tX0IwP=W^8pu#py?#NwTY96IYlP(SVDLRZhQRWxo7j{Y&!sJWgMZWb!FUvx
zI3?=cVNZqtc|N&$cGKu7xdZ+W21|1acgLI^0A_?aSCJ?&QPxOMRqOC711L4y=bwA;
zP&pp5h~h&NsX8?WC;Mn*7P{T@zr!);9wGnt*=RaacSy6T!TiX(qc_N6-bC>??8x8r
ziqR}PM55AqW<K(i9YvUHnp3a;5R?K6vtuL0F2*HHYKK3Byd+V<_STxac8`ybalXOf
zIA!+?00feK@olP3f_e3y2X0wNnGTW3zn;YWsI71xD&Pj4Y3V<gheaxcCgVDgjFTk>
zMt}8p^DcxFYy|=W2ml0v0)Ttv!$JrN8bykqty+|lB1EA}((bS*04`-yYKLS#iMt*3
zDc^SO3mHH{ws$4oKOB>K*Rs)p(@bd>JxG?zFHt5#CF1)jaYLWUbWIJVXLWdJU6tbB
z`%~jfB47!QTkRzW@Q^V*P%jyT@9WI}aDONE@~{eG?5wn1XWk!i#`rwbWOZ7BnwUHW
zcNC_l?Y)v|QUX}wo;q2|G*0z-n>>XgS}aZvdn)2fhjjpqi`0S?NINV9F0Xr%%tIQl
zGr@OBm-H!LQz5D~o|%1YwJm(gkw31mYY59iHokG0NR2OCeR48uUc>`61XliYf`2XL
zGv~;`GXwL9YZyj`NJ9da{m708Z;GcvrY*Ua=9(Nt2B3D0caz`=EvUtt<BROLd`gVI
z&yy7KI&+ArV*6C?s#4C;`#5Y4No}AK?>T#k!WD%Qc28$DuFtb6I<tQWrJ#>Ye9NEC
z-=BO(;Q%yHcZ|md00MwA-osXZqkp(8wro{_mDr@PRlYZHeaY1-=NVh7(kH^*gj$S)
zR+zGH*NxGTZGVTPXfkLei*)1KYAxk2WRR-#e~}5&|Bgb}#8(I6kOEDq)!H~<)>o_m
z9bucFq*oeN;Y8fGybwe6m@xVPE(db*Pf~DdsZ^9e+-33ojM*`2`5f+L(0_aed7e}f
zTBP(!fw6~Q>1qiA1HIy`Ez5Oc);#kEV>81*2kQ_`VY3{wg4WiZ8oWoM!-S24AkgCO
z0-r6HdxO$y<=|w~73c-yl23F$s2+VmJni1P-|g+;So)8H(b7jbwE8)_`rRG>_5U-s
z<q}ql)In;0`=>3pC4#&X8x=<SIhSS8a^&o@sGV5+7`A_-b<0DO`v@#Y(AVW8rGdpK
z%ReGIJ};F92YH?WFflM8FbM_)D-Ht!8U+9Z6l2{bpd|Re7!|6I)`>4?1p+WhNCXH+
O7<uR`bOrGO0tf))S4!Cc

delta 2240
zcmV;x2tW7k67CX^U4Q8i=RcrdMXLe=2mpYB1-Kc@yCni8U=}jCvu6NPYqj`~ny)&l
zb!?1;Oz`R4{MpCGJRZ(t(7Vn(j5#aSfQ}_ysE<%;1_551^oc$3JEoMAJ3^f`4rNmI
zW;$(p4hSPrG(RXP0Z#Qxaq7(WX(6clbvUpBGL#qUGq6twe1GCo69j?8JOsXMDd6>A
zFeCH0rf=^SsaKn;8!QbF@l7<0iw0TZum_O@+lHt(w#d2kGm_U&SJXH?GV@;NA(<>j
zRE&ucPv2{<psb7|7WXqbju&26kx#{0sUxUzme*S$O#|&!=?5U|kZz>aJZ}arQk1{O
zBf8kg&A{<0et(SN2C#g1OY@t#Mao1avmdKU6W3H*yLPAZhJKJe+-zJ5N)wuraFK=!
zXAT8Gf0_wUJSupl|NGe47%5$BbkMPlJrPhW$D(+ySSIB};w&G#{Xe2Sz5n$}cD`qG
zPd>%8R9z03A+hK+d#U7=%8~BNkSr&K{Qu5ZVlW00@PGNN!ypbN$XGRzu8WS-^aHaR
zjBPxze6!=$sFjENQBa@-{wT-T0PzQvfn{}StVD~Yj@+*bBl<8JV=d)SCu0B>WbK5)
z^C6xyuswM_=c2b8<k}HOm>nRk>=R09QGkOwZ?~HWZ3zsgxp2M})eR$84Tc`xCBmG9
zF;Kz7Z-2;%R9YlCM#1e&N3ih^4!&HOP`rEg)qpwvdCsc?_s>4IqX%0>#RUDEwux#j
z%`b~vV>zM2#iJZ1deR}KAfREnx4E(T4@fi8wrG*A>h845l6&7JHMfO;AZSfMoQ+PD
z)3+M)i|dEc`FskeL`6nJzB>BGjGs#peZ=_A<9`?F1#;iB*jUvL=oA{@<Qg~hC!CAm
z3P90*#|mP!e2saWE(7-}ccI_{s1#uAR4U{|ZfRnz0BdfOi|r&;r0WB%A&598BOme`
z6#v2*pK=<*5Rfe92f^L~k^MzfNsIJ5y7-zl9THKznc+u`?QM&>=Wu(ifvz3yeu8eH
z6@UL^Wo(*w!Wx}5%}N9Vp%Pm?M0)lmL_~wAHA_qS^vPODyGp$Y6#!Fs`VP4~#CBaO
z;HYjCEJYF4Uu}t$?!cBnTlZTbUFT!2PO;E*uc4tPy-GP!VmJ~y?I`%(j;!XUFgVD{
zk}4KAj@Ik&j_;%BrHu{(hK?v_Rp`+Puzz2LEkFJp<eqHI>xr;`&7@|O;P{<35|iV4
zK>mjCohrG25uNG_5Ebpac;rH}Jl`SvFP-CBKTQAJv5Y6r9mAIT=J_5J1UzR$(Rsxx
zhKB}$W6iy>L821o;X_d!86vFpkhHh(>l?P3ZE99_pnfEeJpb*6Du9vkp{uE&=6}9=
z3--Ldz)`LmFB{RQ`mw_q=B?3YMc2Io-p?0@kBdFDmNfRznX^4}mD(_QunElFR&cFp
z=!vkGYk=8dLbP^V*u#*yeE>Y5r?X+(aKiycfj%yQoB%4KA?lacxcOOx6V>v*W3}P5
z!kXxqSptK7k|qPAs=3hYQa5A427gO%5O*Thc+;QBFH9X^Tw_JhaGw0Wq^5r%<en|7
zK+2cngooY}UN$Q%l{_$0a_Grvv9d+ca&htB_{#pBugzSo1K__>?t+#WT&>S72R{oY
z(>5fkIavQ3GMwhAZlaKMVJ@It{Uf4(OBMal;*p@#?8YZncr|zq$#3y5Hh;%iqL!C}
zCh|@3A0NYqb=;!#C@I@TczGMF!B^}$Al$Y!g`{u+=xz*Rsd_ncS~|>*c&)r+U<t7d
z2>E9}j<qa@z+KqPHD_9OX>}=ZOKad4A9T%pMmx*a@MIP_W^{3>js@AAphHI1dm#uz
zx=zHk-WA-RkY53^eV8|P>QhcBPD43-2)dR^%tgFR@nBr5gAU>V7#%+I#7}WAC7f$^
zOeTqf!8MV+VDi^eELjj?`Jk>{l=jc;Ub;EVJa4e9FB6|qSq~90*M5xPh;^oeu9GDO
zMt@h=iL-O0`pW_W2ml0v0)Ul>h_QItftk^+hFMJ0d6V=+Z@%UCP3Sp9^Rrc{)^xV$
z3ZkYhOWyYZe}hAQ*IPb%`sdR&n}XWWy?~JWGh5~`RUQE~`+V6&_5y!_8GXQ9+lD!}
zI`yb;d%SzKs<F~o!f*4-w5<0GIx1Xa+J7^K@*Lq_KD5xEo@mKYXL4boVp}jj=0)}2
zp{~7*M&`-duFg85m`A}@ceh`a`U3JtaB;$*C^91WuG~Pul8TYb)5v-rWOtq?ZLHb`
z?h5?r3e7#tLpdZ5diq5`{9+wP%A?|OS?BK)aFT6mh9-~Ro4iM*G5<A>)iPa*bAMsi
z>8BliJUgBHz*7`Z1(Up1D|=12UcHzOK~4>Of;83igsZhs+5r}ZT}|OC6Ntw^V?3jF
zJp`Io5jy-u@VEDj##Vfi(zj504gYu>aC~T7CEizRDQC+tW9dU^W2-%E%#P*!1#s3%
zJ;{6ehJCxF&<Ed+dgx*sH|?!{uYUw@Y6vtWx$Fngqv|Mu@}=^}T#QzGn&K53d|*0P
zD%)5(^NsbsnEowJ4;JctD5kN_C&%`Dfokq9DKiRocv?1+u|%Q$T?G`N^4muyLxUO1
zcCp@Jm(?OMxfTcl>$u*RY-B1c5CjR$Eta3gt;}`Y!0CMP*igVJZJC>fG=G&iLe6N*
z@v&j}f@3A=w?{KVt}9uJ%3}gK=jfZ;bKcIG&LFG}o1*kxR4r^khqf1PcuTNfF26}v
zFn{+C?%@a|iiAFUybw(S;sg=WNca;LyP?F%S{4`#vO3}-;5bEhqfMCE;Z>7><}8Sq
z^*)91I~FO|W9MlG_)&&jMiul~s(4iuaseFmcdy(v-Xh+B;)b}B`v@#Y=4Iod6x0)T
zxx32;y$ft<r{xsQFflM8FbM_)D-Ht!8U+9Z6lYPX`LhD2WQuntc?OR|Ms<9t-UJB!
O8uo}77pCe00tf)-cuF<^

diff --git a/tests/hwsim/auth_serv/user3.pkcs12 b/tests/hwsim/auth_serv/user3.pkcs12
index c5e9f4667992005e9ce1739326afed1ec6c0f9cc..3100ca9917e08a066eee491777e44396245769bf 100644
GIT binary patch
delta 2162
zcmV-&2#xo&60{PKU4K&K`I8Q!`ho%i2mpYB1!&u4{AOcMaj=Oj&yVqz;f}meyzKyV
zJAG*Ba&^1l%Q=x5mQp8awzxO|Z0wtOi2d{hHo!;c;ZZG%1)MQ?;n2bk;+*Zh0>XB$
znI`UN58BPu4=VP=X+w{{U;T^TP%B`wrA;pn(`m-M6cK1ggMU@EIU`C03>LMM(61Y<
zR?FJi>I%e6-PT7Zm4#l-5j1$8(t`Yoj!%U$94k)In}k*!dSjQ(c@~$Zu^`%Je84Lh
zU(pNWScXfz3J<a9Wc;@gB*#55u^`7Mx71re)NraQM9T|KZ5kaoT@R*VqDup{RUhAP
zE3|6*^|xQP^?!zPA^epRcD|}?#dY-i-Pvk;_%h@(qI6eDFIR0<<eRkSN;<-0A9I=?
zA)*2`PVaXl86j;a5HQ2Tws~J35Cs?BKK^LDK$os+cM^<EQ{82}3+3TrPadEGG58*p
z$!<C}JMnlPTAtPEL?~vS0!8}AA0W4?;}bFbSxrQ<P=B#+N?Y$5xY(a5FbIaM+(^vo
zjw2QQ166m2&lJPcU8AtJC(WieCO*c$m*95*gp{=RzpX{-A;CWsTeFb(C=GG`V!No^
zJ25WA<T^Iqw3~Sc5~Q1stp{yipZ=Pq4Zb@&=3(aU`b`JR`H*(!=JgEpZYML|&&vx~
z2hxitCV!G`dE$lp<v;XYSbF9w285~{EmItyP+^E~?n$|fvOjyWlK3*wsJBO|qUU-f
zU-jxh4S`f*xKlkV#v!oR#9=BK^8#KN=(2Uzi7i8Ir+)<@gr~o{<N(z)xgIn$>>D0W
zE`lTgqv4;&_?+dkBX8xa<i26lIk1sy6q;02LVsKneRKa769>q9F@@3B_@Mp2l5-p?
z2!r^}uc@oEC;I;l6cn`l3eu6TZdVl(Q7z6ABU6Lr?jb0&?KdZZSQ`w=u$I3I0!sN5
zfAVk(jnboYsbiX+k;Twkcw2ANx^Xx6nMNW^!_HE1N-OgV;VK_Yzdk7LpTT7qB5-_H
z7k}u5h=_lL7>k}fhA!B~8S+Q~6cU5k1Yfv<it-ZTTzdG}rZ+%WL0$LZ;>q9n%mu6%
zE-e@0e$_MNhpO{+@sm=%Tz`_*W@HyK)5J7Ic~k0i3h_ip!aSu=NW&(t@}3(Xsk8)t
zAbTym<w+-k5=pKE-J@KV8wA6ne7Ng=uzyz-b&VH7joHix@OsoD-)pM6FF4`Z*kR{|
zh6S<|p9`pYo?V+~NL?!1rw)C^M!N7}<H3PQ+r|^?xy0L~-I_mfuuO2F2y-R8hdgQl
z@laWIsZszei}1eXR?=y`o_J(S^CG{if>3Sx8s#>#^Gw^Bct~tYKx$X)G>6PS#D6Q9
zm`d~c-PeRObDJmheKzmYsmf3$LE)*N{(GXBYneE;MpO_&_93nhM1lS;gJVij3Lb6b
z>k^Ue$oacnGbn_U*~UIP6#}2x2sCK1B?dWW^f6<g7?_t9eyYAVC{^|Y{27?*Jg4Lo
zSIP;Ru!>_oLpc1V${E!SN1nsv1%KxB4t)PPiia#*Z0mh|&7aZ{CvfQ!@hl!Z83&(Q
zz&9B%UX1J4SB5N}=kv(;BFlpk%t8ccZg=CW#Xcmgga0@D+Re%mVpgeq`|V~!gioh^
z2ME<lhkmeaZn0ghTsz=BK4QTGJIwr6nte>}9o3-shg+&&&nyKGn*49<;(wzh<0#(D
zstjrouxG0zXYSh>r8i+UM#%9$Q~rV<*<(U}Sq<2|{1;$D(f#%la6f8N;9M#UEXt_Q
ztC^PMR498wgf_qXt>(M2+p<J`oJ#zTnZDR5$z=OdzRV5#huU%e%Kh$!I}}*HlqL2y
z=BW(M*AVj1>A87ojxGEP&;yG%VUyJbMt{wDQDf5l)QAEC2ml0v0)WDGZyd~WtV43;
zX^k5CQot0Y1Rv<-_NiZGfM5ruSl_c{FjaMOf`;7(nmKD=RfVs#@zm;8OikNDltZwk
zp8sID338p7(Kn$e_^oSDYWza#s!C^s40~z^d;-h?^W*bWvVm!Bgs401@4nGW-+z>f
zq2mf_hg@`^+sbF(+TP><Csh}D>V%$Y&IaOR-+`XuP>Jg*qO-SF-k@6oUEC)}=zMU|
zjHr@a(`15}U#Ey41LV*31Z|;_gxOT&GY4*{8h|e>djf#wAnx}yF8R1~g_Crut+5ua
zEWU9qk|k{LUJX27Rgl~rYC=X@o`3HR)p?^K1GwJ}*Swj^6_eF*fzND5-Cy1Q!S^fz
zNiZ2V7!GWL2Jtq^f~};&j<RA&i-?1~_zFSy8;%idBWin{zPGS!OU~0eAB3ZLi>*{o
zt)LmOj|4$5LL|TyJMyXt<^1$I0X<z~6G$n8so5JzJ#QJ7!>6x}BxcpYKYt!5a*AO?
zkFbkHE;>_y3D4|vZx!J-!J;HamDF=~YT;rX#A_gXXRPTAVavpCCE#eO=k-MBWgwL^
zncp8Xb_<+%l`3?_<U;#I)}Y^5naxHOY&1WkfD^?eAdEnFJ&%*cHqJxRxH<mUI@?Gp
ztufOat}^v+<dx8^+rXP3-+#~J(uhSClG1fv6UBJK{h_prtpS14I7-AiC?Ap6c(A!F
zu0Msvt<4m`y?~O-y+rYHUH}&)8xH#j^I{_r7?<)X!c5=76JX-lsJv=CBsnHSJT_nu
z>6nnwg?63ke-|x2dGH5dv~VPFa~rg1p~&r*rz$wZ$eW+%ebh@XN<8ik*fGTcSMpi7
zu_+)M@L@q=`gA}sR4^k32`Yw2hW8Bt2^BFG1QgKM<s_wn#V5-@B04@Vl?DfSo&l56
o2tXp%u*9YF6L@K|LvaVHIExCyQ#srO2qn8H?<5yJXaWKV0BhwT@c;k-

delta 2162
zcmV-&2#xo&60{PKU4PC&CaGT$`C0-32mpYB1!$|hBgu+$AoiJmTi)LTms#XKAO0Tx
z3is<t-{m2DJK?&8^G1_h&!rpa9F#*F0+s$KPhrBNoJ5hd+`*6TuTl{mxW9@17|LVB
z%9aLma5R_|O8~XLnM-}jdIHZ)WpUgSz|ro~w|wQAXj5UXe}9DDZfG@^Jj#ahh28Y(
z5HIZO>dTh>jx9;LIV2Z)hN@)wdHfC&@J#Cuw%_{e?r2QwSG2_r4@}!xL%LHzwDgd6
zh@|@1Sj~wgL~*C`WhjMVR|D5BO~NfAkpLR(chP1gw#l8A=0O#tmO9~1E%A?xVif|c
zyk|Z&kcJ-@h<^wuX9oAWqns@|+$olz_L+P&x-F-9xL#A;TR2!8=(04_#F1nV-eh0h
zci`MWu7Qg%J0%wWu(1lx1$j{V)6eD~^)NU#$?v#MY4oa)<*qAqYVU@pFv>2(8Yk;w
zXd{#tlJDE17U*fM+PeTE;E+#^!rjzxp?kU9m|c|I<9}M{iSPmWLxD3y3&e)3(O8r@
zJPa;SDaP28wlr4st`PBtO+rzbov8bH<jD7O))v5&L=Q?@y`&LoFxRau;)iz(kF9bW
zN_w9-pT9FDR_Cn-HfSLpmMN=j)<T^%8Ekrnut5`Q_EPVHVx_Yi2Wb_7c|l;y<-q{^
zc>+=oJ%2=U*_3x?`US=SFx8<bRlh1NsmWC<_F5w929J#4I~i07j&?;Mr7Gsvd@=%(
z{5Vhonl5iu{W*AC;)5=06*Zt2o5dy0H%~A1;>;4o3U0Bl2*eg8y0HP`oy$$vr*e_n
zbv~{T+BJgTSq)u_tg%<O;lRArt}=Zr1us$8I)CGlLhRT4Ky}(=gUKFF#KMgj2N}JJ
z*KjURHJe=8NC6wv(vt1j$!HI1LD_K8;+jtpUic^0j=>S*YYWPLwHtZ~#P}fmqLc{X
z<&?-_PgsVY6JTI}A+we?5a?o{>hr*t&^*PC&TPmW{WeB@a(0}8pD?StJ4hfe8v}-Z
z<bVEFb*pA^wsS7i_HAwVvepZBw%J!dT=bE^R(qxw0|h*GIyIFc1vpYuE=E3$s20_W
zPtb4tYucIU{kedcy`c&P6ECSs0C)L7G+Dtx*X+Jh^-mk~LsGqH53y6V&M{c|hbUaB
zf^654*rkjEK<V<Z1CD?Op1D{C7LRkgynnN3Hp?y9SyVN5&EdB0Vgz<AddbH2$R2m^
z@qli9Vun!8g?(r91<ekOq~f|kB<?}-C1X@9)fF7NYNU?C>vfEa9%?-k%=IY$u4eB#
zsFYUG4T`v147hj8za^;ON~VK?0@3HD(g<$WM;dQx?-9xlEMnum>u7USx>gEyLx1vx
zIU(e3uQ{NAZ5T*@Ouy2nG~))^q{FQg@IPjU0qDH%XuI2l*kso%Hq?&!v+>^Yc|P4=
zE!Y4pbte4Gnwe?6eR!4`=iGr4u%)0&EF;9sVBryrMCOEdcB7PL!~8*+B`pp2_!|#l
zmL^+oIBW2HImsuVSkJJN13#9Y)_<?nRSv$_%inQ$inRzO4tm(W72M-3FlVpbc1?um
z=_-_MNE79c*iRfD*QSxjixOd7gn)QmS{@v8b4<MZoU6<D-|zwl_sSgwnoaF<3*4_0
zl>SsLoDtCMx-;69;L#U3Ar=b6my|yo;o0OFj!ZCs1FeujQN8n4?*L}h0Dp!af2R!7
z-m?1O{h3`tBWhLe?EZ3r&IO$WEX)S20peEspt<TSnt(R$`8QONh2tMvAt{(QesNsB
zb}DcCIF}vT&~IcbH+?H?#F9pcyF4+bw=2p4^AvmuRB0ij4K+2rH}FPY*wIj4@Fk!w
zU0k>)xxQsvvoOt=LKZm}`U5=Uag)^rMt?^nF{&a&3jhKF2ml0v0)VxXsB;>^L*4E=
zfMxrx6Cy&@qniqtr0(@y&`;NM68XsG9jVUTYZA6}6*HX7fmyVa?vEyk&X|X(<nqL-
zgGGXT=Jgb-*<EFtpHc}<0vM|OB8RKG7~A?5+R@R<HETh?z?<Q}6aSs1|7XNRjDMIR
zFif?>o>d6y;V5ge0eB6I%c_skTByc4yUs5YFM?Q-GbAe+sTimjtXvbs%uazdAxiH+
zPhn#CFKlDUOu7ZvS6Y`-cJfH7BpErzA6@PB;Iefn-jm^VodGLMc!`#d&4Z?bimw6q
zCaKt8o(Vb*atw$Bi*Zt5DIjM-9Dh_oe2UQLJl|fRY$0kDfk|bLQA4BD7D~Cfjm2Pm
zf@{6<yjbuTz#cTb-~OGpY(EMjAqX*uq?|9TcGm!;o(rgCo)5$Z@u(jq!4tS>j0QoL
z)j5|H>@^WT`+Ko7hko7d#O1Ab@+V%4JyF<-Y5V|c`pL9NsW*BbBj=wqDStLPEULeF
zhB?%8049ydpc=UEV_oB_o|vnKL?2IB@9n9=P6}bJr}L-Mm=m6wOSDJ@bnRlt=j%^t
z&dz0E=T>Gu1!HXQ7M#2z7#`y7yTgQKpp-fr;`D+@uI~Ru!uIcn3o1vB6~}7MCOQe|
zgrUa=^p{dM347%9?;2)HcYmdvscX;n8d=%Io=d{gGn7D6@LAl7IZ_A-AI4g$+(Nz1
zbpYyia;5n!yc#yQB3wPcIm^PB>BA6|Bhtl_w*Cm!X*fk5sD!bPa}1Cz#BPaK^;v?V
zS##qbM=hXat+T3JJ10rP(JQ7v1`)w%u!iE|nRubkOgCdgTZ$PAP&`X?zl27*m{dfk
z{2bm|2OlAdtE<E@R4^k32`Yw2hW8Bt2^BFG1Qh0F<DnGP6Lz_~%Lly+Y-y+E6wQ;;
o2tXoL^unssDo~Ar+xummynoI2Nn#lU2xdpB0*~_pX95BU0JZNUsQ>@~

diff --git a/tests/hwsim/start.sh b/tests/hwsim/start.sh
index 527ee22ed..038426c8e 100755
--- a/tests/hwsim/start.sh
+++ b/tests/hwsim/start.sh
@@ -167,7 +167,7 @@ for i in unknown revoked; do
 done
 
 openssl ocsp -reqout $LOGDIR/ocsp-req.der -issuer $DIR/auth_serv/ca.pem \
-    -sha256 -serial 0xD8D3E3A6CBE3CD12 -no_nonce >> $LOGDIR/ocsp.log 2>&1
+    -sha256 -serial 0xD8D3E3A6CBE3CD17 -no_nonce >> $LOGDIR/ocsp.log 2>&1
 for i in "" "-unknown" "-revoked"; do
     openssl ocsp -index $DIR/auth_serv/index$i.txt \
 	-rsigner $DIR/auth_serv/ca.pem \
diff --git a/tests/hwsim/test_ap_eap.py b/tests/hwsim/test_ap_eap.py
index 6337c54a1..e1ad3f321 100644
--- a/tests/hwsim/test_ap_eap.py
+++ b/tests/hwsim/test_ap_eap.py
@@ -2522,7 +2522,7 @@ def test_ap_wpa2_eap_ttls_server_cert_hash(dev, apdev):
     """WPA2-Enterprise connection using EAP-TTLS and server certificate hash"""
     check_cert_probe_support(dev[0])
     skip_with_fips(dev[0])
-    srv_cert_hash = "53728dde442d4adc27cb10a847234a4315590f0b36786353023c3b0f2e9fdf49"
+    srv_cert_hash = "4704e62784f36cc5fd964c6410402f4938773bb471dce9d42939bf22fdbdb2dd"
     params = hostapd.wpa2_eap_params(ssid="test-wpa2-eap")
     hapd = hostapd.add_ap(apdev[0], params)
     dev[0].connect("test-wpa2-eap", key_mgmt="WPA-EAP", eap="TTLS",