From cbd9aa641bffceb9ff458b4e6043560252ddf29e Mon Sep 17 00:00:00 2001 From: Andrew Kroh Date: Mon, 11 May 2026 18:34:39 -0400 Subject: [PATCH] [aws] Regenerate expired AWS Config system test certificate The self-signed certificate used by the AWS Config data stream's system test docker service expired on 2026-05-06, causing the system test to fail when the stream container's TLS listener presented an expired cert. Regenerated the cert against the existing private key with the same subject (CN=config.xxxx.amazonaws.com) and a 50-year validity period (now valid through 2076-04-28). Also refreshed the inline CA bundle in test-default-config.yml so the agent trusts the new server cert during the system test. Test-only change; not user-facing, so no changelog entry. --- .../_dev/deploy/docker/files/certificate.crt | 39 ++++++++++--------- .../_dev/test/system/test-default-config.yml | 39 ++++++++++--------- 2 files changed, 40 insertions(+), 38 deletions(-) diff --git a/packages/aws/data_stream/config/_dev/deploy/docker/files/certificate.crt b/packages/aws/data_stream/config/_dev/deploy/docker/files/certificate.crt index a84bcdf0cbb..07fdec0fec9 100644 --- a/packages/aws/data_stream/config/_dev/deploy/docker/files/certificate.crt +++ b/packages/aws/data_stream/config/_dev/deploy/docker/files/certificate.crt @@ -1,23 +1,24 @@ -----BEGIN CERTIFICATE----- -MIID4TCCAsmgAwIBAgIUBdbnNWnUUMxH4YR2GEfqbZN60m8wDQYJKoZIhvcNAQEL +MIID7zCCAtegAwIBAgIUaeoqxjqo4X8HybABeEkZ7sOGngowDQYJKoZIhvcNAQEL BQAwgYUxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRYwFAYDVQQH DA1TYW4gRnJhbmNpc2NvMRMwEQYDVQQKDApNeSBDb21wYW55MRAwDgYDVQQLDAdN -eSBVbml0MSIwIAYDVQQDDBljb25maWcueHh4eC5hbWF6b25hd3MuY29tMB4XDTI1 -MDUwNjA2Mjc0M1oXDTI2MDUwNjA2Mjc0M1owgYUxCzAJBgNVBAYTAlVTMRMwEQYD -VQQIDApDYWxpZm9ybmlhMRYwFAYDVQQHDA1TYW4gRnJhbmNpc2NvMRMwEQYDVQQK -DApNeSBDb21wYW55MRAwDgYDVQQLDAdNeSBVbml0MSIwIAYDVQQDDBljb25maWcu -eHh4eC5hbWF6b25hd3MuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC -AQEAwzflKp5qNhAy07KZDXq0cZ0w6HEPWGuPh+1qK+ZxDqbyPBYXtNJv4XXOKmJw -nVH+XriwL9PA6T/R96zIr5GR7mT3lKa4QGdlOLAqFQjDs8HGNpePDLJImPp4Kktw -svRXrvfgsNVGy7qejT2ufK0OgszpVDSH4NaXXdwpGOuXF0e5qLox1DFiUj4N9ntA -Zqw/A9VLDvwuLveO1X4aI3a9xfTuSrLiRvED57rqW+3YJvOEru0SZn7F1pY9+V9j -kPgyTlzK6sv3xbXkt17lK4wzUvPzi0wxDRYuBNmlhZ4oq2ysMNAVbcEMzebOQ1jf -u9LTKeBn4cmltXTH9y9RfMsOkwIDAQABo0cwRTAkBgNVHREEHTAbghljb25maWcu -eHh4eC5hbWF6b25hd3MuY29tMB0GA1UdDgQWBBSc5srLUGJ3wzkdpurLxqRL8dQQ -RDANBgkqhkiG9w0BAQsFAAOCAQEAAz/TkbmDvstJg6Fc0AUWdR4YDN9N4pQXBCJ/ -C4aB+JVHoJfWD3tmXZ1y7or9/q/UXxfutUzSpXzFOq5gG3mlduaDDfgz54tr7Fzf -FjMJMjNwuIxBILi2e6uJAwxuJRn7SmMtNv46PswR8N3XvM4kyTt/11nEB1YE2yr6 -46XFW+1db4ds8lnwmdRYM0j6gCe3jswZ6M3mhF5SNCrp+LCb70LUnsLSnh7LdPp+ -xR+OxIwWBtgT2iL5ArdWJr219Ey40G0bSVPZmtlED4Hi2oue5KIt3MnVzpxIsu8p -UrA2ofnvUjhhk6CKjFBTE7BnkH9u6NAZseQLA42vtHvgm8tu5g== +eSBVbml0MSIwIAYDVQQDDBljb25maWcueHh4eC5hbWF6b25hd3MuY29tMCAXDTI2 +MDUxMTIyMzEyNloYDzIwNzYwNDI4MjIzMTI2WjCBhTELMAkGA1UEBhMCVVMxEzAR +BgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xEzARBgNV +BAoMCk15IENvbXBhbnkxEDAOBgNVBAsMB015IFVuaXQxIjAgBgNVBAMMGWNvbmZp +Zy54eHh4LmFtYXpvbmF3cy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK +AoIBAQDDN+Uqnmo2EDLTspkNerRxnTDocQ9Ya4+H7Wor5nEOpvI8Fhe00m/hdc4q +YnCdUf5euLAv08DpP9H3rMivkZHuZPeUprhAZ2U4sCoVCMOzwcY2l48MskiY+ngq +S3Cy9Feu9+Cw1UbLup6NPa58rQ6CzOlUNIfg1pdd3CkY65cXR7moujHUMWJSPg32 +e0BmrD8D1UsO/C4u947Vfhojdr3F9O5KsuJG8QPnuupb7dgm84Su7RJmfsXWlj35 +X2OQ+DJOXMrqy/fFteS3XuUrjDNS8/OLTDENFi4E2aWFniirbKww0BVtwQzN5s5D +WN+70tMp4GfhyaW1dMf3L1F8yw6TAgMBAAGjUzBRMB0GA1UdDgQWBBSc5srLUGJ3 +wzkdpurLxqRL8dQQRDAfBgNVHSMEGDAWgBSc5srLUGJ3wzkdpurLxqRL8dQQRDAP +BgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQB5W1sUQyNLMlwbTgzv +JdmnyXxcxwyxomkLGtKK0GPA8aJTvlTBKX27jRSR8lubN7PkD/ahw/inbwDIyLcV +XOva18vby8+oO7dSn034EkABElVQJvhejovpWbJ5eNlzOPJjOIZMMJFYSsaoNcSK +o+mFD30ZTslhqHNXjg8b/ahJ1kw/km3HYwb8OLBtfrExhgHXnjtCs6awKHwDiWEH +vPaDmjm4fyUx97tUrZzmiXqdB7/1HQZz4BpDtGFoABXC4LoBXTWdki8I+xI7cCrn +BtrDMLyjht4WzxC2h4CnDPoIZHD0XxJlX0BUIPBHU7fHZA8tsNshXe82vsRb3+sO +R8wZ -----END CERTIFICATE----- diff --git a/packages/aws/data_stream/config/_dev/test/system/test-default-config.yml b/packages/aws/data_stream/config/_dev/test/system/test-default-config.yml index 4fb52f60950..35ad724ef67 100644 --- a/packages/aws/data_stream/config/_dev/test/system/test-default-config.yml +++ b/packages/aws/data_stream/config/_dev/test/system/test-default-config.yml @@ -14,27 +14,28 @@ data_stream: certificate_authorities: - | -----BEGIN CERTIFICATE----- - MIID4TCCAsmgAwIBAgIUBdbnNWnUUMxH4YR2GEfqbZN60m8wDQYJKoZIhvcNAQEL + MIID7zCCAtegAwIBAgIUaeoqxjqo4X8HybABeEkZ7sOGngowDQYJKoZIhvcNAQEL BQAwgYUxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRYwFAYDVQQH DA1TYW4gRnJhbmNpc2NvMRMwEQYDVQQKDApNeSBDb21wYW55MRAwDgYDVQQLDAdN - eSBVbml0MSIwIAYDVQQDDBljb25maWcueHh4eC5hbWF6b25hd3MuY29tMB4XDTI1 - MDUwNjA2Mjc0M1oXDTI2MDUwNjA2Mjc0M1owgYUxCzAJBgNVBAYTAlVTMRMwEQYD - VQQIDApDYWxpZm9ybmlhMRYwFAYDVQQHDA1TYW4gRnJhbmNpc2NvMRMwEQYDVQQK - DApNeSBDb21wYW55MRAwDgYDVQQLDAdNeSBVbml0MSIwIAYDVQQDDBljb25maWcu - eHh4eC5hbWF6b25hd3MuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC - AQEAwzflKp5qNhAy07KZDXq0cZ0w6HEPWGuPh+1qK+ZxDqbyPBYXtNJv4XXOKmJw - nVH+XriwL9PA6T/R96zIr5GR7mT3lKa4QGdlOLAqFQjDs8HGNpePDLJImPp4Kktw - svRXrvfgsNVGy7qejT2ufK0OgszpVDSH4NaXXdwpGOuXF0e5qLox1DFiUj4N9ntA - Zqw/A9VLDvwuLveO1X4aI3a9xfTuSrLiRvED57rqW+3YJvOEru0SZn7F1pY9+V9j - kPgyTlzK6sv3xbXkt17lK4wzUvPzi0wxDRYuBNmlhZ4oq2ysMNAVbcEMzebOQ1jf - u9LTKeBn4cmltXTH9y9RfMsOkwIDAQABo0cwRTAkBgNVHREEHTAbghljb25maWcu - eHh4eC5hbWF6b25hd3MuY29tMB0GA1UdDgQWBBSc5srLUGJ3wzkdpurLxqRL8dQQ - RDANBgkqhkiG9w0BAQsFAAOCAQEAAz/TkbmDvstJg6Fc0AUWdR4YDN9N4pQXBCJ/ - C4aB+JVHoJfWD3tmXZ1y7or9/q/UXxfutUzSpXzFOq5gG3mlduaDDfgz54tr7Fzf - FjMJMjNwuIxBILi2e6uJAwxuJRn7SmMtNv46PswR8N3XvM4kyTt/11nEB1YE2yr6 - 46XFW+1db4ds8lnwmdRYM0j6gCe3jswZ6M3mhF5SNCrp+LCb70LUnsLSnh7LdPp+ - xR+OxIwWBtgT2iL5ArdWJr219Ey40G0bSVPZmtlED4Hi2oue5KIt3MnVzpxIsu8p - UrA2ofnvUjhhk6CKjFBTE7BnkH9u6NAZseQLA42vtHvgm8tu5g== + eSBVbml0MSIwIAYDVQQDDBljb25maWcueHh4eC5hbWF6b25hd3MuY29tMCAXDTI2 + MDUxMTIyMzEyNloYDzIwNzYwNDI4MjIzMTI2WjCBhTELMAkGA1UEBhMCVVMxEzAR + BgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcMDVNhbiBGcmFuY2lzY28xEzARBgNV + BAoMCk15IENvbXBhbnkxEDAOBgNVBAsMB015IFVuaXQxIjAgBgNVBAMMGWNvbmZp + Zy54eHh4LmFtYXpvbmF3cy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK + AoIBAQDDN+Uqnmo2EDLTspkNerRxnTDocQ9Ya4+H7Wor5nEOpvI8Fhe00m/hdc4q + YnCdUf5euLAv08DpP9H3rMivkZHuZPeUprhAZ2U4sCoVCMOzwcY2l48MskiY+ngq + S3Cy9Feu9+Cw1UbLup6NPa58rQ6CzOlUNIfg1pdd3CkY65cXR7moujHUMWJSPg32 + e0BmrD8D1UsO/C4u947Vfhojdr3F9O5KsuJG8QPnuupb7dgm84Su7RJmfsXWlj35 + X2OQ+DJOXMrqy/fFteS3XuUrjDNS8/OLTDENFi4E2aWFniirbKww0BVtwQzN5s5D + WN+70tMp4GfhyaW1dMf3L1F8yw6TAgMBAAGjUzBRMB0GA1UdDgQWBBSc5srLUGJ3 + wzkdpurLxqRL8dQQRDAfBgNVHSMEGDAWgBSc5srLUGJ3wzkdpurLxqRL8dQQRDAP + BgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQB5W1sUQyNLMlwbTgzv + JdmnyXxcxwyxomkLGtKK0GPA8aJTvlTBKX27jRSR8lubN7PkD/ahw/inbwDIyLcV + XOva18vby8+oO7dSn034EkABElVQJvhejovpWbJ5eNlzOPJjOIZMMJFYSsaoNcSK + o+mFD30ZTslhqHNXjg8b/ahJ1kw/km3HYwb8OLBtfrExhgHXnjtCs6awKHwDiWEH + vPaDmjm4fyUx97tUrZzmiXqdB7/1HQZz4BpDtGFoABXC4LoBXTWdki8I+xI7cCrn + BtrDMLyjht4WzxC2h4CnDPoIZHD0XxJlX0BUIPBHU7fHZA8tsNshXe82vsRb3+sO + R8wZ -----END CERTIFICATE----- assert: hit_count: 4