[7.17] Update certs for PKI tests and re-enable tests (#97766) (#97988)

* Update certs for PKI tests and re-enable tests (#97766)

The certs for the PKI tests expired and the test was muted.
This commit follows the instructions in the read to update the certs and unmutes the test.
The certs will now expire 20 years from now.

fixes: #97756

* precommit

x-pack/docs/en/rest-api/security/delegate-pki-authentication.asciidoc

@@ -77,7 +77,7 @@ The following is an example request:
 ------------------------------------------------------------
 POST /_security/delegate_pki
 {
-  "x509_certificate_chain": ["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"] <1>
+  "x509_certificate_chain": ["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"] <1>
 }
 ------------------------------------------------------------
 <1>  A one element certificate chain.

x-pack/plugin/security/src/internalClusterTest/java/org/elasticsearch/xpack/security/authc/pki/PkiAuthDelegationIntegTests.java

@@ -7,7 +7,6 @@
 
 package org.elasticsearch.xpack.security.authc.pki;
 
-import org.apache.lucene.util.LuceneTestCase;
 import org.elasticsearch.ElasticsearchStatusException;
 import org.elasticsearch.client.RequestOptions;
 import org.elasticsearch.client.RestHighLevelClient;
@@ -49,7 +48,6 @@
 import static org.hamcrest.Matchers.startsWith;
 
 @SuppressWarnings("removal")
-@LuceneTestCase.AwaitsFix(bugUrl = "https://github.com/elastic/elasticsearch/issues/97756")
 public class PkiAuthDelegationIntegTests extends SecurityIntegTestCase {
 
     @Override

x-pack/plugin/security/src/test/resources/org/elasticsearch/xpack/security/action/pki_delegation/README.asciidoc

@@ -11,7 +11,7 @@ have been generated using the following openssl commands.
 [source,shell]
 -----------------------------------------------------------------------------------------------------------
 openssl genrsa -out testRootCA.key 2048
-openssl req -x509 -new -key testRootCA.key -days 1460 -subj "/CN=Elasticsearch Test Root CA/OU=elasticsearch/O=org" -out testRootCA.crt -config ./openssl_config.cnf
+openssl req -x509 -new -key testRootCA.key -days 7300 -subj "/CN=Elasticsearch Test Root CA/OU=elasticsearch/O=org" -out testRootCA.crt -config ./openssl_config.cnf
 -----------------------------------------------------------------------------------------------------------
 
 == Instructions on generating the Intermediate CA
@@ -21,7 +21,7 @@ The `testIntermediateCA.crt` CA certificate is "issued" by the `testRootCA.crt`.
 -----------------------------------------------------------------------------------------------------------
 openssl genrsa -out testIntermediateCA.key 2048
 openssl req -new -key testIntermediateCA.key -subj "/CN=Elasticsearch Test Intermediate CA/OU=Elasticsearch/O=org" -out testIntermediateCA.csr -config ./openssl_config.cnf
-openssl x509 -req -in testIntermediateCA.csr -CA testRootCA.crt -CAkey testRootCA.key -CAcreateserial -out testIntermediateCA.crt -days 1460 -sha256 -extensions v3_ca -extfile ./openssl_config.cnf
+openssl x509 -req -in testIntermediateCA.csr -CA testRootCA.crt -CAkey testRootCA.key -CAcreateserial -out testIntermediateCA.crt -days 7300 -sha256 -extensions v3_ca -extfile ./openssl_config.cnf
 -----------------------------------------------------------------------------------------------------------
 
 == Instructions on generating the Client Certificate
@@ -31,5 +31,5 @@ The `testClient.crt` end entity certificate is "issued" by the `testIntermediate
 -----------------------------------------------------------------------------------------------------------
 openssl genrsa -out testClient.key 2048
 openssl req -new -key testClient.key -subj "/CN=Elasticsearch Test Client/OU=Elasticsearch/O=org" -out testClient.csr -config ./openssl_config.cnf
-openssl x509 -req -in testClient.csr -CA testIntermediateCA.crt -CAkey testIntermediateCA.key -CAcreateserial -out testClient.crt -days 1460 -sha256 -extensions usr_cert -extfile ./openssl_config.cnf
+openssl x509 -req -in testClient.csr -CA testIntermediateCA.crt -CAkey testIntermediateCA.key -CAcreateserial -out testClient.crt -days 7300 -sha256 -extensions usr_cert -extfile ./openssl_config.cnf
 -----------------------------------------------------------------------------------------------------------

x-pack/plugin/security/src/test/resources/org/elasticsearch/xpack/security/action/pki_delegation/testClient.crt

@@ -1,21 +1,21 @@
 -----BEGIN CERTIFICATE-----
-MIIDbTCCAlWgAwIBAgIJAIxTS7Qdho9jMA0GCSqGSIb3DQEBCwUAMFMxKzApBgNV
-BAMTIkVsYXN0aWNzZWFyY2ggVGVzdCBJbnRlcm1lZGlhdGUgQ0ExFjAUBgNVBAsT
-DUVsYXN0aWNzZWFyY2gxDDAKBgNVBAoTA29yZzAeFw0xOTA3MTkxMzMzNDFaFw0y
-MzA3MTgxMzMzNDFaMEoxIjAgBgNVBAMTGUVsYXN0aWNzZWFyY2ggVGVzdCBDbGll
-bnQxFjAUBgNVBAsTDUVsYXN0aWNzZWFyY2gxDDAKBgNVBAoTA29yZzCCASIwDQYJ
-KoZIhvcNAQEBBQADggEPADCCAQoCggEBANHgMX2aX8t0nj4sGLNuKISmmXIYCj9R
-wRqS7L03l9Nng7kOKnhHu/nXDt7zMRJyHj+q6FAt5khlavYSVCQyrDybRuA5z31g
-OdqXerrjs2OXS5HSHNvoDAnHFsaYX/5geMewVTtc/vqpd7Ph/QtaKfmG2FK0JNQo
-0k24tcgCIcyMtBh6BA70yGBM0OT8GdOgd/d/mA7mRhaxIUMNYQzRYRsp4hMnnWoO
-TkR5Q8KSO3MKw9dPSpPe8EnwtJE10S3s5aXmgytru/xQqrFycPBNj4KbKVmqMP0G
-60CzXik5pr2LNvOFz3Qb6sYJtqeZF+JKgGWdaTC89m63+TEnUHqk0lcCAwEAAaNN
-MEswCQYDVR0TBAIwADAdBgNVHQ4EFgQU/+aAD6Q4mFq1vpHorC25/OY5zjcwHwYD
-VR0jBBgwFoAU8siFCiMiYZZm/95qFC75AG/LRE0wDQYJKoZIhvcNAQELBQADggEB
-AIRpCgDLpvXcgDHUk10uhxev21mlIbU+VP46ANnCuj0UELhTrdTuWvO1PAI4z+Wb
-DUxryQfOOXO9R6D0dE5yR56L/J7d+KayW34zU7yRDZM7+rXpocdQ1Ex8mjP9HJ/B
-f56YZTBQJpXeDrKow4FvtkI3bcIMkqmbG16LHQXeG3RS4ds4S4wCnE2nA6vIn9y+
-4R999q6y1VSBORrYULcDWxS54plHLEdiMr1vVallg82AGobS9GMcTL2U4Nx5IYZG
-7sbTk3LrDxVpVg/S2wLofEdOEwqCeHug/iOihNLJBabEW6z4TDLJAVW5KCY1Dfhk
-YlBfHn7vxKkfKoCUK/yLWWI=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 -----END CERTIFICATE-----

x-pack/plugin/security/src/test/resources/org/elasticsearch/xpack/security/action/pki_delegation/testClient.key

@@ -1,27 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEpAIBAAKCAQEA0eAxfZpfy3SePiwYs24ohKaZchgKP1HBGpLsvTeX02eDuQ4q
-eEe7+dcO3vMxEnIeP6roUC3mSGVq9hJUJDKsPJtG4DnPfWA52pd6uuOzY5dLkdIc
-2+gMCccWxphf/mB4x7BVO1z++ql3s+H9C1op+YbYUrQk1CjSTbi1yAIhzIy0GHoE
-DvTIYEzQ5PwZ06B393+YDuZGFrEhQw1hDNFhGyniEyedag5ORHlDwpI7cwrD109K
-k97wSfC0kTXRLezlpeaDK2u7/FCqsXJw8E2PgpspWaow/QbrQLNeKTmmvYs284XP
-dBvqxgm2p5kX4kqAZZ1pMLz2brf5MSdQeqTSVwIDAQABAoIBAQDAjP767Ioc4LZZ
-9h0HafaUlUDMs4+bPkd7OPcoNnv+AceRHZULW0zz0EIdfGM2OCrWYNfYz/Op0hpK
-/s/hkfgBdriU+ZUKwyDxEu8Pzd6EbYdwlqPRgdihk92qgJv5hsro8jeQSibJFHf1
-Ok3tf2BpRTTs08fCOl2P3vowMPyPa5Ho9bf4lzP8IsR2BZvoaev3za9ZWR6ZDzE6
-EWkBBNgIU4aPn1IJ6dz2+rVtN6+xXET0eYSBEac3xMQaPWLEX0EDBYPW1d+mUva/
-3lJvTrs3g8oyiTyVu0l9Yxdgox1mtgmrqqwxJ6XuouzImuXMMDXaz0K/E/+u2yPF
-V6kRvWuJAoGBAPOnEgBC3ezl+x+47cgbwpy97uZhZmV9HkMrSH9DKDwC+t57TdGX
-ypt2S/IS/vbPupFv0aHaWmJ6SN/HyTN4znwuulV3kE8mEpQzIPbluWfgQzT6ukJe
-+YFI/+IXwIRBLA7khtfo01LGHSmLTENsnd/aoRySY3K6zJz36Ys3vFdjAoGBANyC
-7rF5YjPdgsAgOT7EboNGkc8UuW/Sh3xRp0c4Y+PBenf60yA5XkRJLYR4sZDjWTr0
-aKBY7Y8r+59U+bBrwUuhhoW08JZ/SBWja05+4DhH0ToA3vtbPv9lRyQfkF1DdBkn
-XpyM2vaJE5M454acwnKJ81AyoueYtZ8pD3Q7c219AoGAJ+F1wdMwDgGKvCOB0Boz
-HYK9IrpYj04OcQIZqLLuV/xI4befAiptQEr5nVLcprtTl1CNKIfb+Xh4iyBhX2pr
-qcngN/MNDNd3fQhtYdwyH72GYpqTeB+hiTbQo0ot+bfNJVbkd1ylkkvZJB6nyfVy
-VdysOEgBvRq0OREfCemCi28CgYEAoF1EE6NQDKICTZDhsMkQCb5PmcbbmPwFdh63
-xW64DlGNrCWoVt4BtS12wck4cUM1iE9oq3wgv6df5Z7ZuziSKVt9xk0xTnGgTcQ7
-7KkOjT+FZGZvw2K3bOsNkrK1vW2pyAU+pCE3uGU17DJNBjOIod27Kk649C61ntsw
-lvoJVs0CgYBLr9pzBRPyD5/lM9hm2EI7ITa+fVcu3V3bJfXENHKzpb0lB2fhl0PI
-swpiU8RUEKWyjBuHsdQdxg7AgFi/7s+SX7KLo4cudDRd73iiXYdNGB7R0/MAG8Jl
-/lMXn14noS4trA8fNGGg/2fANTBtLTbOX9i4s7clAo8ETywQ33owug==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 -----END RSA PRIVATE KEY-----

x-pack/plugin/security/src/test/resources/org/elasticsearch/xpack/security/action/pki_delegation/testIntermediateCA.crt

@@ -1,24 +1,24 @@
 -----BEGIN CERTIFICATE-----
-MIIEBTCCAu2gAwIBAgIJAIx9twpbtGkCMA0GCSqGSIb3DQEBCwUAMEsxIzAhBgNV
-BAMTGkVsYXN0aWNzZWFyY2ggVGVzdCBSb290IENBMRYwFAYDVQQLEw1lbGFzdGlj
-c2VhcmNoMQwwCgYDVQQKEwNvcmcwHhcNMTkwNzE5MTMzMjM0WhcNMjMwNzE4MTMz
-MjM0WjBTMSswKQYDVQQDEyJFbGFzdGljc2VhcmNoIFRlc3QgSW50ZXJtZWRpYXRl
-IENBMRYwFAYDVQQLEw1FbGFzdGljc2VhcmNoMQwwCgYDVQQKEwNvcmcwggEiMA0G
-CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnJ2KTJZnQzOt0uUf+5oLNcvDLnnWY
-LzXZpOOX666Almwx+PVkDxkiGSe0QB9RWJqHSrsP1ryGIeCIzGMOctLt6QA7Peee
-HdrKqOQgN620nDSd2EZ3s0Iddh1Ns/lfTtBJCP/03suaktm7j8EYKAyOlTIUhiKm
-sTFlxPUSKjbtR4wR1ljnKN8X+j/ghr9mWhQrMR9rsGFObU8DQFho2Ti90C4HoMNU
-dy4j+2G3VVpaq4he4/4CbPrWQQ3dKGpzVAngIuAv4eQ/y88EHAFwutxQZWAew4Va
-5y3O112acSb9oC7g0NHQcBnos/WIChF5ki8V3LFnxN7jYvUUk9YxfA8hAgMBAAGj
-geMwgeAwHQYDVR0OBBYEFPLIhQojImGWZv/eahQu+QBvy0RNMB8GA1UdIwQYMBaA
-FM4SyNzpz82ihQ160zrLUVaWfI+1MAwGA1UdEwQFMAMBAf8wgY8GA1UdEQSBhzCB
-hIIJbG9jYWxob3N0ghVsb2NhbGhvc3QubG9jYWxkb21haW6CCmxvY2FsaG9zdDSC
-F2xvY2FsaG9zdDQubG9jYWxkb21haW40ggpsb2NhbGhvc3Q2ghdsb2NhbGhvc3Q2
-LmxvY2FsZG9tYWluNocEfwAAAYcQAAAAAAAAAAAAAAAAAAAAATANBgkqhkiG9w0B
-AQsFAAOCAQEAMkh4nUi2yt5TX+ryBWaaA4/2ZOsxSeec5E1EjemPMUWGzFipV1YY
-k/mpv51E+BbPgtmGMG8Win/PETKYuX8D+zPauFEmJmyJmm5B4mr1406RWERqNDql
-36sOw89G0mDT/wIB4tkNdh830ml+d75aRVVB4X5pFAE8ZzI3g4OW4YxT3ZfUEhDl
-QeGVatobvIaX8KpNSevjFAFuQzSgj61VXI+2+UIRV4tJP2xEqu5ISuArHcGhvNlS
-bU3vZ80tTCa0tHyJrVqaqtQ23MDBzYPj6wJ/pvBQWAgZKnC3qJgXlJ9des117I1g
-J98AXCDGu5LBW/p2C9VpSktpnfzsX4NHqg==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 -----END CERTIFICATE-----

x-pack/plugin/security/src/test/resources/org/elasticsearch/xpack/security/action/pki_delegation/testIntermediateCA.key

@@ -1,27 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEogIBAAKCAQEApydikyWZ0MzrdLlH/uaCzXLwy551mC812aTjl+uugJZsMfj1
-ZA8ZIhkntEAfUViah0q7D9a8hiHgiMxjDnLS7ekAOz3nnh3ayqjkIDettJw0ndhG
-d7NCHXYdTbP5X07QSQj/9N7LmpLZu4/BGCgMjpUyFIYiprExZcT1Eio27UeMEdZY
-5yjfF/o/4Ia/ZloUKzEfa7BhTm1PA0BYaNk4vdAuB6DDVHcuI/tht1VaWquIXuP+
-Amz61kEN3Shqc1QJ4CLgL+HkP8vPBBwBcLrcUGVgHsOFWuctztddmnEm/aAu4NDR
-0HAZ6LP1iAoReZIvFdyxZ8Te42L1FJPWMXwPIQIDAQABAoIBABp4z1C0dL6vpV5v
-9Wn2AaMd3+qvZro6R9H3HiAyMAmnSO1FGz/EcFuJFlOikBMm8BobCLMCdAreFJw1
-mj5wit0ouGOpcyQEYGEWDELZ7oWa825IESjl18OosA1dQlIIvk3Cwh56pk4NkbP1
-mUQFG6/9CthbQeOaTlNqtNEypE5Bc+JGbQaUhRP6tF+Rxnpys2nIJt/Vp9khw0Du
-K7Z6astunhfPDwLFGwHhflc6re1B+mxpLKTDHCcydJo2Kuh/LuuEtPkE5Ar4LwQk
-D+/61iZHC4B8/4IkBlAsgCJ1B18L6JdTbSYeVlepkSkJML5t6z+cvt5VcObF7F8X
-pPZn+kECgYEA2NaB0eshWNnHTMRv+sE92DCv0M7uV1eKtaopxOElAKJ/J2gpqcTh
-GzdTVRg1M2LgVNk97ViL5bsXaVStRe085m8oA0bI9WbIoQRUFp40dRFRUjl+4TN0
-pdxXL4VmQMWuwlO6p8/JY8sInnHVCT+2z8lek8P3bdtTQZV9OZQTn0kCgYEAxVe8
-obJdnUSXuRDWg588TW35PNqOTJcerIU6eRKwafvCcrhMoX62Xbv6y6kKXndW/JuW
-AbfSNiAOV+HGUbf8Xc54Xzk2mouoJA0S0tJ040jqOkFOaKIxYQudTU8y9bTXNsAk
-oX3wOhlt2q9xffAK1gYffP5XPXnYnsb8qaMIeRkCgYBM9yaxOgJmJTbGmtscaEbp
-W66sMScMPXhwruuQhFG7/fGgLSrMpaM5I9QiWitYB/qUY1/FxS4y5suSiYnPTjvV
-lxLexttBr6/65yxpstHv06vHwby1dqwqyyDvLyxyRTiYpVuVgP18vG5cvw7c746W
-BmXZkS9cAQN2Pfdq3pJwcQKBgEbCZd2owg5hCPIPyosZbpro4uRiDYIC8bm0b7n3
-7I+j+R3/XWLOt382pv+dlh03N1aORyRIkDReHCaAywaELRZJsTmbnyudBeYfVe+I
-DOduPqYywnWcKo58hqOw0Tnu5Pg5vyi0qo16jrxKCiy5BHmnamT8IbXmWbjc6r28
-uo4JAoGAfAPvPJ2fV5vpzr4LPoVyaSiFj414D+5XYxX6CWpdTryelpP2Rs1VfJ1a
-7EusUtWs26pAKwttDY4yoTvog7rrskgtXzisaoNMDbH/PfsoqjMnnIgakvKmHpUM
-l6E1ecWFExEg5v6yvmxFC7JIUzIYOoysWu3X44G8rQ+vDQNRFZQ=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 -----END RSA PRIVATE KEY-----