From d2a5d839be2371c91749118ec064f106fc379a5b Mon Sep 17 00:00:00 2001
From: Daniel McCarney <daniel@binaryparadox.net>
Date: Mon, 16 Sep 2024 15:22:39 -0400
Subject: [PATCH] tests: update vendored real world certs

The Agilebits and LE end-entity certs expired, breaking CI runs that
rely on this vendored test data.

The two EE certs (`agilebits_com_valid_1.crt` and
`letsencrypt_org_valid_1.crt`) were refreshed by running
`update_valid_ee_certs.rs`.

Additionally the intermediate used by the Agilebits chain switched from

  Subject: C = US, O = Amazon, CN = Amazon RSA 2048 M01

To:

  Subject: C = US, O = Amazon, CN = Amazon RSA 2048 M03

The `agilebits_com_valid_2.crt` file was updated manually to accommodate
this change.
---
 rustls-platform-verifier/src/tests/mod.rs     |   4 ++--
 .../agilebits_com_valid_1.crt                 | Bin 1503 -> 1501 bytes
 .../agilebits_com_valid_2.crt                 | Bin 1122 -> 1122 bytes
 .../letsencrypt_org_valid_1.crt               | Bin 979 -> 978 bytes
 4 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/rustls-platform-verifier/src/tests/mod.rs b/rustls-platform-verifier/src/tests/mod.rs
index 8f1e9793..aa68e6c2 100644
--- a/rustls-platform-verifier/src/tests/mod.rs
+++ b/rustls-platform-verifier/src/tests/mod.rs
@@ -58,8 +58,8 @@ pub fn assert_cert_error_eq<E: StdError + PartialEq + 'static>(
 /// we know the test certificates are valid. This must be updated if the mock certificates
 /// are regenerated.
 pub(crate) fn verification_time() -> pki_types::UnixTime {
-    // Monday, August 5th, 2024 19:50:24 UTC
-    pki_types::UnixTime::since_unix_epoch(Duration::from_secs(1_722_887_424))
+    // Monday, September 16th, 2024 19:21:42 UTC
+    pki_types::UnixTime::since_unix_epoch(Duration::from_secs(1_726_514_502))
 }
 
 fn ensure_global_state() {
diff --git a/rustls-platform-verifier/src/tests/verification_real_world/agilebits_com_valid_1.crt b/rustls-platform-verifier/src/tests/verification_real_world/agilebits_com_valid_1.crt
index 90bf53a02b11d5ec8d6d71b29589ec690d287b32..c999d58c3091e871e0fc4772cb8a1872d4e9cd9a 100644
GIT binary patch
delta 1118
zcmV-k1fl!i3*8GJFoFfyFoFcZpaTK{0s;^MgK~wW9vO9S2En|B!l8kYA50iCFdi2T
zGBhwaF*q<VFfcGMS{Ds6H844mgG7JA+m}g22&I7HBj5K*dhPq1h3$6qPtEL#$<J68
zn*S5OjduEFi6u_Er%{Dc>NMMDGz@qW0dj(!!%-dRw4Sx5(Xh-RvhE|Y*XTP?9EZ)$
z`j*<|0S`)sK$Iy1{h1$p<noeUL*Od$2^@~l2lA;OZz3O7)u3};M9Z?9Jez-7oZ65L
zN7su@Gf-u8;ls(Y8IcTm%+BFCE7@HQ5+aXIlb~0to@g%8$8H{eg^j!*g+1mcI6;Dy
zk%swa3EP@D{%a%zQ(@6&-f|?b^HbErI4)x>Kig5YNNEc729GvwTuE=743)E@BiSir
z81E@a)APFqB4qa_qQ7+gxL8ldaRLJY00E<d0{Jk40`)K-1_M<cBLo;Q7Jw90*%)8a
z9LxdXShT*Y*;PUT*DeAu9R>qc9S#H*1Qd7icPcj@whC;6$8{Y@di3<Qw=R<u0+RtV
zlOF>W0W*`n0x|(JlkoyA0W*^y0~LQWE@NeKFboC*RUH!n0sjO7FaR)u0e%JwD+U1s
z0oHi}1Ofzt0d53>0crtg0CxZq@lG_oQ*um%1{uSTKYA1R=e1&oh@5RO1%&J6h9)`y
z00EI?hS&1|00aX7NH9hMApqzIjIGOkL`=<QSC}xIPHKJPbeS&Jbhl;DpPYZpdexW$
zApr85>gW-YJTXgOZ2n~Z$ZGAHT3RUl`Raa+9Jrdn#|8j)0Ory$V?cL|!4N?P*KxVd
z!O}qXmV}1;x`#3y{T?@tPyhe{kz|I~>Hq))0{}-bMFJrJ%CrZ895a5w&jBO$C4K4f
z`52_pMwcg06B5;CB1Dnm0w8~7Lw~(Qro&M;Q%VH26vUenTW7T5GQf`a7s4u4e*l~S
zbpXu!4{C*R31$A3n^Vr|vV0=xg<K7njkc+NRKWgB4X^+J0g+^e*V_O91Oos@Fhl|%
zT?)Ok4JKfWMY&78Mv^WBeUVQTXdUh6oE1ccc3KuO0w5UB9)`rlxBY)(2b{Pg)|)rz
z=R^0k*LhvPjCH%nsy$;c4F(A+hDe6@4FLfQ1potr0RaGoy|-B<2r+5269VV~y~X->
zL)^Bz1=Z2*WxGxa`1=j<N>#DU#hb6ir<U>7<}ubs=G1&EHhi`J+N5giPXD~gVe_D)
z>2y+~GdFyo%iS3=Y<_>&6xhL_?HjkEXI>bN$Qg#ii*f*8?#He4(uZ}IXJW4B=}O5V
zyjp6iRSG&IU3{I!Mku=%cylYMF*ui`kY##NVx*Ps5-00C?n;S87F%GP!ETJ~Q7UeU
zX6@kRI2SL3@^Q2qc%9g5p#zThj?jOJn8~en+B--Q6+O)%<LWNsE3ngKK!wyV9)vFo
kT~2QI-%Cwo;UpkN1?~Y5?OyYfca5hDZVpA)jLObUam<9~TmS$7

delta 1120
zcmV-m1fToe3*QSLFoFf!FoFcbpaTK{0s;^XF$ydL<0m7f{4X+1#aQ)`A50iAFdi2T
zGBYqaF*h(UFfcGMS{Ds6G%+xdgG7J2!=ubfO2dzT=wFN@x@IlNKK7S}#eEQeV!vz#
z%ZfD3nRx`28$;mPqu#gBkP1cD?YxZ{rPi|gY*1q<h7R{PDZb7sT-byFbIttI>Qz6X
zE4_2w-vhLROc?bfYlVTTH4J)c4~NRu_FQXLU0p8M!Zd)aoNC+oq6F|^L^gl0gB=g@
z+0!88kxdkkWxD?~;If?Hlh1!5?!~xnkw(*urJ@*tb!FzELPAJ-Hb|l%#(zZ9MR09?
zJ=r%!v9TDr&hWO57xaC#jsCzB)a&oNfpPsm^^ik_e445=-71r@l&u}ybaLk<Pb#Na
ziyzo<kX!-wJe!~ylfi7J3b;?b;{pQ#00E<d0{bw60{1W<1_M<cBLo;Q7Jw9ixDI2A
zi4qv)`a3&Nm7nJ2kQ0S49R>qc9S#H*1QaG9V2X@b@64X!GOX2&Zh|t0w5^jA0+RtT
zlOF>W0Wp)l0x|(HlkoyA0Wp&w0~LQUE@NeKFboC*RUH!n0sjO7FaR)u0e}VyD+U1s
z0oHi}1Ofzt0dNF@0c-(k0CoU&|A;>dw)>S)!ePwyhq^Shq|Li2+-O1ypXO&wS~_$9
z00D}jW~oO200aX7M=(VKAO*Y`(nmli?>uRWF8qv#nA?&oZ-!FgiB{q>>_>lF(hve6
z0RBhSp6>71GJ=!%l2?6bZ&LoG&lFAFO8X^HAIGiMuK;%dNU-B;+NMV|59MkC`kgTA
z98v+xR^2Rt*}K21IoO1A0004sp=PN)000C707x)K0wDmNecpu&oOn!@xt__I2Xnf}
z9vx|^{kF3)><Pvs*5DQbApn2f+iHdV;DKwsr7u!ukx8<N6ks*Be#Wxeqx9l*U;B6f
zcL3V9ziU6Wwj!UK!n<5+=x~v7Y`al}g*3gSJupbu`>Ox|0g9n!sSE%B1Oos_Fh&9)
z0F3~Npk|95pl8X#^T0!xvqKQ$hH|@Ms~}UfWJ2ov$O0h%yZ8Sh*hha}0e0a&o-K<}
zjDmzOWP<!N`gOxAOAtZ}qc9By2`Yw2hW8Bt0Sg5H1A+ko0G$E%`BK&fKoDM8a1m+C
zXykI#gLA^^or+%bvysuaUH7Jmu)*bS&4$a(4z_tU{fMSCnLqEzvpvxL!+{=v*8BT4
z0zGnKt8%1BFRhu_a%6wC*1g3B^(c}K9lZDrqK@Trf7Kag@54BQxgh!K_v<Lzs&l**
zq4Y`FcLF}|yE&>#=WG#PC>t2iJF3DL+#(|S=++%D!Q-%*e3g%#U;R9{_<*OLOHB*)
zwu}jXqApzgX1zmd{5`HFDYB+(TX{tigp$o=#g}|edL(3WAs#RuBt(IUy^AD>SQ)VV
m6&@#u$?-}*$%8DA)ifj4^+7CP&L$tDXz~KGp>eb{LDv>Mv-6_>

diff --git a/rustls-platform-verifier/src/tests/verification_real_world/agilebits_com_valid_2.crt b/rustls-platform-verifier/src/tests/verification_real_world/agilebits_com_valid_2.crt
index f1e3552db0fb52791734986d9039fc0ea016e5f5..66c211b49d9e31ee8650ff942d6d5d627136c541 100644
GIT binary patch
delta 617
zcmV-v0+#*a2;vALFoFbLFoFX{paTK{0s<2Ua}rF{2GVE1nH=3Inx8l^d4-W8R}wZb
zG+Gx8GcYhXGBYwVGBz+Yk&8Y7Gm*+6f46_7St#=RjN`sje~w32a9avr!StNG^ld^$
zL1S?CH0fYHl`p$>X4C_*tyw~-lFIt_5{$vaEH<2F!?yR0<;8;#bocq@YF7YS*~`pd
zi)b>01CY>~^0T@fXMBh15+Z^@DVJUyJzme9JGUn0rrIxPVKk7E0qER|2QN5Se+4!H
z3`dQyo1%ymdk|Z1BZLpNyYn=sr`5q1t`Y`cE%$NrWAV_kT$6cHPjLbKm)my7PR~5x
z<%t;8*Y2tRGUfFiXRxzbcGHgN@L%-kzGs#w4f<5Dv+tI(TdPAh;OFb1PNV?YXWAxJ
zp?U_RNr<x*m!tRn%?^n}0_mPk0(_^F>j7I7RoNI{(j3eI;aIf3tJzgT0oN`9vswZO
z0e=RK<)+!dzTZ8J%^;_>?mGXnS-w5uL6F$&OU?|}Sr?6G?^5fN*&BS^9;~e$RNU6z
zrJjDi<L#8N1z0)JZd%K(V>Kgt;WW@!T&>}0(rsJK=&4MzSYpWLU7&KTC^dFaV{vWT
z0bnEzYhjod!B8P$?tt2N<)n_J%(`${a(|dqD42@pIRWr1S?^VjD#SF2F;Cz$ob~KK
z0Ic(Oo(b}2Wbk^Dbhr`?&vCi6?W=TE1>!Ck+!p&4Nk<KdxVy%PL~3N&nqOXQTB8};
zAQn-)V$VrSkHUN?P~$8o$l|PyZ?k7_aueI^%ShI_UW-ki+AGJ}{A7$W<+Una*#h{2
DTyQQa

delta 617
zcmV-v0+#*a2;vALFoFbLFoFX{paTK{0s<2Ua}qcUoo0xmJ097;oXw_=4iAwcR}wKY
zI9eACGcYhXGBYwVGBGkZk&8Y7F_Fq4f9r89smmXTD3UTTuZmX>c(*qtl~sqVXIz)l
zBFNgJ6lZIE@MqfM11hst5?#i%NBL(6r;~b>k{A!P`S}nwntv~VwokefPRCtS9^l=U
zGY25kmb?<=bWlQ}1ru|%Pn$#}{w;s)yds6{HX$>Ybq3BS7=qm6*~Nkfjb0`Je<mhp
zAK5<>&oa7et$1Yos{alGJO|&L1$c6d{pxkM11N;r=xzs$&`^c%fmE__ZtQJh?~jzj
zUg^Z7(2>9{B$1fP?z$z8)b??<`&(-`21qwYjfULv>IVCEH+`P}LQYLsf|JkUal&}9
zdaFxYlsAZh<k_zzuK04rW&2CC0#WCa>j7I7fw&H1iir{!<@!52P?ewN<&YDFvswZO
z0e`Ik-U0<9E(S7Uv}>`H7UU5?-Yfc9!8PyTs*fu{xzY27IRG8<J+-Gt3<d_qk@E*v
z0@Urj7r~I4zeshW2Tw5FN@_y24LudW5B`K(#ypwKS5mRqZW7g&l9Nl6<p=1Af(UAQ
zG}NAC;XQ|Hl8~BXp-cFWw(2y~1->A{-hT$-jGuFhpG`T1%FY=!orTGs$@ow|wtk4A
z@5+P*i%_%*T&5gE@%_kQKw$D=C8`JX$HH@U<O~Z!jRfUiL`a!idx?RTr-+?P4Pxj7
z#Ml0`=(26f?7$qnI9naxh0a@g<4H?wxu@Oq1+q!4;l&hd!p!T<f7V!Oy2BuTe*&<$
Dvd|<|

diff --git a/rustls-platform-verifier/src/tests/verification_real_world/letsencrypt_org_valid_1.crt b/rustls-platform-verifier/src/tests/verification_real_world/letsencrypt_org_valid_1.crt
index 9a6fb0d064a50b4b24b0e80034b34e70d15d7646..fdcb95e1b7ca1626773efb41eacb2bb534d5a518 100644
GIT binary patch
delta 490
zcmV<G0Tuq!2hs;2FoFZlFoFYApaTK{0s;~QcWdlTkpewdspdmPES<;iz>y(G7&tIF
zF*Y(YH8ffm4Kg$_F)%kVHZn6cGm(HYNQSf9!b?0HI2c=VR+|}`%h_|5n=9K#<<|<R
zz@8ed(STEW(QkE3{oXuqJ>%h7?5}%FO&^ILMvqH4llURGI-`ODW-x*RVv+ht6vr!V
z@p6W9lnQAB%N9Q*!=+|FXR}rT0Ra~T1_~<%0R#coc>)9i1cCJgf${+G0C$sa0wh(D
zI4Qgv000C707x)K0wDml#Yb>(Icy#j97R8}A7vM7sycx3#{#N-3BoG-lI>suApna*
zm}^X=3J}~8?UbCGI>*2Bb7Ziea#=GEdCEDE&PV`tljZ^>e~~yTy*dB@1Oos@Fhl|%
z4=TUkFc!Zxi4F!&Rr`kASWDda&2G-WF_v<!_i5RO0w7|uvfq<3$H}MB-Ck0SpItk<
zBDZ7pF{vCf1u^Pv-MBCc1_&yKNX|V30|NtS05D|&Fl|4fz9nT|-nuy^<AEG!v(Gi=
z)ML~3n(;d4NKDzUqPh0KB@*cBjsYHs!2{t-G6e!L0Nzupp36MRdTXJ-)Bw(D$j1<>
g3Y!(-5VVJsB(QHct^-Zy2x+J$qX9u7pT`1IoZZC5i2wiq

delta 491
zcmV<H0Tlky2h#^3FoFZmFoFYBpaTK{0s;~PNFfe{ujD#Y-1m2utRrnu!;v9J7&b95
zF*h+XGB#Ql4Kg$^IWRaeH!(6YHIaZaNI}WmIL+>s72ap<A2yFy^@!0JP9}7S<N^f{
z@kb6X6r%%(H4%t@Z$%tp1FE+8Mr^OI(rd1uT@+y6pTJh=;iG~AXE1^SW0Cqu6o*1i
zd}^ALge*L>J)sP-;CJd(4zpGP0Ra~U1_~<%0R#coc>)9i1cCMhf%5?I0CtmZ0wh$B
z16ldr000C707o!I0w8H=`P0<e64TntlQD@HGFyMeywaSa*$fZxVJi;+Bl`j&0L8E~
z$El>weH^n$VYV);E&VBRxr2uh-ISDLx{i`TkpOp-=K>^ukONuzs{jB50{}=cMgk!K
zs{&xuu2uJ-XlsjFf+4=S3g`TXVUa8?Ref+?oqpX20wDmk@NN*0*7LPkyZ8#MqJ+WD
zz*dL}ijDl<vX!7^R0B9L3I+%&hDgpm1Oo#DXaF!}0x(x#jOE6c=tS56L$C*~Hm@*?
zelkqO2a`fdj7;d!0sOtJ;D$o0&(dtDVqCLa;r+P+F#yM88&*~Yl(lqruWa}ABl9C-
hoY(3Mw2e{7U3<A{g|d_wzft{>K0OOqR$=nfTGe<v%v}Hg