smerleCB new certificat (#277)

* [infra-admin] Submit certificate request for smerleCB * [infra-admin] Submit certificate request for smerleCB * [infra-admin] Sign certificate request for smerleCB --------- Co-authored-by: stephane merle <smerle@MAC-cloudbees-smerle.local> Co-authored-by: Damien Duportal <damien.duportal@gmail.com>
jenkins-infra · Jun 19, 2023 · 5d410b0 · 5d410b0
1 parent 68f120b
commit 5d410b0
Show file tree

Hide file tree

Showing 6 changed files with 283 additions and 1 deletion.
diff --git a/cert/ccd/default/smerleCB b/cert/ccd/default/smerleCB
@@ -0,0 +1,3 @@
+ifconfig-push 10.8.0.30 255.255.254.0
+push "route 10.0.2.0 255.255.255.0"
+push "route 10.240.0.0 255.252.0.0"
diff --git a/cert/pki/certs_by_serial/D19FB51F7C316A823142F55227B46E67.pem b/cert/pki/certs_by_serial/D19FB51F7C316A823142F55227B46E67.pem
@@ -0,0 +1,126 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            d1:9f:b5:1f:7c:31:6a:82:31:42:f5:52:27:b4:6e:67
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=vpn.jenkins.io
+        Validity
+            Not Before: Jun 19 10:49:42 2023 GMT
+            Not After : Jun  3 10:49:42 2026 GMT
+        Subject: CN=smerleCB
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                RSA Public-Key: (4096 bit)
+                Modulus:
+                    00:c1:3b:c3:6d:dd:56:f1:0f:c7:15:a9:2b:9a:d8:
+                    3e:ea:b0:9b:f2:c1:a8:74:5c:8b:57:6d:55:0d:cf:
+                    42:f1:8a:bf:0b:cd:70:02:83:1d:a4:ee:97:f0:91:
+                    b6:2f:6a:76:c1:4c:08:7c:bd:29:08:9e:86:25:7a:
+                    bf:33:c3:1f:92:5b:44:42:33:83:25:bf:3a:82:34:
+                    7a:b1:70:eb:2f:c4:ff:28:1c:0d:6e:3b:c2:d8:92:
+                    30:24:2f:7e:2d:4c:a4:1c:5f:78:67:0d:9b:e9:8b:
+                    58:9f:94:bb:b9:cc:34:62:e9:8f:86:df:4b:9c:ea:
+                    c2:45:d7:f1:92:b9:2b:49:8c:c7:a0:e8:9a:eb:76:
+                    a9:f7:93:d1:65:44:5f:d4:6d:da:e5:2f:ab:da:f8:
+                    1e:8d:76:48:a1:b7:1b:b7:a1:79:d2:a4:b3:e9:15:
+                    6b:b9:a8:2c:47:7a:7a:69:42:58:76:1d:0c:20:ab:
+                    a0:32:16:a4:be:1f:d7:87:f6:66:10:74:26:67:9a:
+                    ce:11:9e:9c:2e:87:b4:85:9d:4a:b0:be:63:1c:c5:
+                    69:6e:dc:da:a1:90:e5:e8:4f:c6:27:cc:cf:23:de:
+                    47:ee:04:65:b5:de:dc:73:fe:3e:cc:b9:34:50:86:
+                    54:5e:5d:2d:a0:9c:2b:94:1f:03:01:a3:17:ec:98:
+                    54:9a:ee:3f:53:00:77:c6:f7:5b:55:7d:40:f8:5f:
+                    08:64:46:fd:d9:5c:9c:ea:b7:9e:c2:96:1d:d5:33:
+                    0b:b0:19:a1:29:d9:4a:b8:8f:28:55:63:1d:ce:86:
+                    c2:4f:3b:64:fc:21:60:ad:57:10:29:2c:b4:50:45:
+                    18:92:19:3b:8a:88:44:76:ad:b8:24:e5:08:31:69:
+                    da:0a:55:8b:91:00:6a:5d:c5:ae:a3:71:95:e0:e7:
+                    3a:88:b3:af:8f:75:07:6a:ec:e9:6f:57:0a:cd:42:
+                    6b:7f:01:eb:fc:29:24:5e:fb:7c:f0:05:02:60:37:
+                    96:98:c2:b7:25:36:d7:d3:15:5a:60:17:0e:b6:ac:
+                    30:ba:c4:af:01:1a:75:ec:1f:b0:c8:bb:3a:c8:89:
+                    b8:a7:7f:f4:8c:c3:45:85:9c:78:85:c2:be:65:8e:
+                    31:66:71:cf:fe:50:54:f4:3f:16:1e:ba:60:02:33:
+                    49:f3:6c:32:dd:12:1b:72:b9:dc:33:00:7d:d2:48:
+                    3f:d0:1f:7f:d1:5a:de:4b:05:c9:52:c9:59:be:a1:
+                    d4:18:1c:bf:07:23:3c:90:8d:2f:3e:a4:f1:6c:05:
+                    ac:a5:3e:a9:00:e1:81:6c:f0:59:5c:c7:4c:2e:73:
+                    bf:ff:b3:95:8d:1e:6c:b5:de:7b:28:2e:ba:08:76:
+                    46:18:b9
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            X509v3 Subject Key Identifier: 
+                B2:24:DD:72:EA:68:86:FC:FA:D7:0F:6B:B7:F5:59:32:E8:B8:E1:5E
+            X509v3 Authority Key Identifier: 
+                keyid:87:A7:C5:75:37:0B:14:6C:BF:46:04:8C:2A:52:E9:5D:DA:51:DC:E6
+                DirName:/CN=vpn.jenkins.io
+                serial:08:01:AA:6D:1B:31:40:4F:7B:9C:75:54:54:78:B5:36:65:3B:7C:B3
+
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication
+            X509v3 Key Usage: 
+                Digital Signature
+    Signature Algorithm: sha256WithRSAEncryption
+         4a:c7:46:92:c6:14:38:f0:37:6a:21:2f:f5:e6:6d:3e:95:57:
+         d6:8b:d8:b9:05:c1:5d:05:e3:d1:d3:95:1d:ce:c9:79:ed:c6:
+         3f:4e:fd:c8:e0:45:d3:27:13:8e:72:16:a4:a5:dd:f8:ab:54:
+         37:bc:0c:9c:a2:44:b7:59:b2:36:e5:14:d7:33:e7:fa:61:53:
+         5e:12:d2:41:3e:48:65:4d:6f:57:bf:37:78:2c:04:5b:7c:8b:
+         b5:0e:04:d0:0e:ed:86:c2:9c:95:e8:16:19:24:74:c9:79:8b:
+         cc:63:60:3a:19:7b:f4:77:01:45:6d:91:37:56:b1:90:e8:c3:
+         67:0a:db:6b:a3:29:27:e8:6b:aa:62:6e:09:bf:a9:22:e6:6c:
+         f2:37:a5:36:a8:54:a7:50:bc:cd:47:6e:a4:63:ae:ae:a0:c1:
+         df:51:58:62:f2:07:4f:35:9a:13:d9:6f:59:6c:d5:be:8b:4b:
+         58:f5:5e:8c:7f:9b:6a:a4:d9:4f:4e:17:a5:8c:d4:87:e8:00:
+         64:1d:9c:2e:4a:fc:b6:74:9c:df:3d:2a:1c:1f:d4:c5:c6:e8:
+         40:42:1e:0b:c7:e5:62:7d:df:4f:78:7f:66:d1:30:56:22:9d:
+         63:62:49:de:e3:20:6c:4d:2a:ba:59:f2:2c:b9:a6:f2:82:83:
+         db:72:3b:e7:9e:7d:7b:d4:b6:c8:6b:e1:6b:46:c3:81:0b:cd:
+         b3:31:eb:9a:91:6b:66:02:5e:67:31:9f:3f:01:08:e5:a7:74:
+         8d:3d:09:4b:bf:85:9a:c7:ab:34:d8:24:da:f0:50:d0:27:d9:
+         be:0d:63:6b:f5:f3:84:4f:0c:2a:1f:3a:e3:f8:e2:8e:56:76:
+         c9:76:8a:1d:54:67:42:68:f2:c1:75:c2:da:1f:36:5c:cb:60:
+         88:82:49:a9:67:5d:fe:b9:c4:f8:34:d4:71:76:1b:51:e8:dd:
+         92:13:9f:92:1d:a5:6f:13:d0:75:fe:5f:a7:24:ff:6d:ff:ac:
+         98:69:9c:ed:f8:bb:65:02:a9:b6:3b:2c:8f:38:f1:ce:f7:72:
+         4e:a0:c2:ab:c3:3a:00:48:3b:cb:20:82:8d:ef:eb:fc:77:7e:
+         31:21:70:3a:c3:72:44:06:4d:73:ab:44:bc:1a:f0:10:41:7f:
+         ad:18:63:d9:23:b2:64:8a:4a:96:9d:1a:fc:71:6a:05:fd:02:
+         1c:68:4f:2d:cf:07:d6:b9:d1:da:3d:f8:1d:1b:ed:ca:64:f8:
+         8a:ce:4b:0c:66:da:42:3c:73:54:f0:39:60:7b:6e:80:e4:77:
+         e9:b7:87:cf:e1:55:8d:85:3a:26:65:d1:3c:d6:b5:f5:4d:3e:
+         c6:57:60:49:b0:7b:71:e4
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/cert/pki/index.txt b/cert/pki/index.txt
@@ -46,3 +46,4 @@ V	260103225319Z		8663ADECB034FA55654A663AB6FCFE48	unknown	/CN=timja
 V	260104083748Z		F8ABFF824D8B3B7CFC584811C2509436	unknown	/CN=markewaite
 V	260107110546Z		7E6098D7D97E844B2DE01B4F9FA890D7	unknown	/CN=alecharp
 V	260527080329Z		0D55B3AA26D85D8F0E8E26391DC035BC	unknown	/CN=markewaite
+V	260603104942Z		D19FB51F7C316A823142F55227B46E67	unknown	/CN=smerleCB
diff --git a/cert/pki/issued/smerleCB.crt b/cert/pki/issued/smerleCB.crt
@@ -0,0 +1,126 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            d1:9f:b5:1f:7c:31:6a:82:31:42:f5:52:27:b4:6e:67
+        Signature Algorithm: sha256WithRSAEncryption
+        Issuer: CN=vpn.jenkins.io
+        Validity
+            Not Before: Jun 19 10:49:42 2023 GMT
+            Not After : Jun  3 10:49:42 2026 GMT
+        Subject: CN=smerleCB
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                RSA Public-Key: (4096 bit)
+                Modulus:
+                    00:c1:3b:c3:6d:dd:56:f1:0f:c7:15:a9:2b:9a:d8:
+                    3e:ea:b0:9b:f2:c1:a8:74:5c:8b:57:6d:55:0d:cf:
+                    42:f1:8a:bf:0b:cd:70:02:83:1d:a4:ee:97:f0:91:
+                    b6:2f:6a:76:c1:4c:08:7c:bd:29:08:9e:86:25:7a:
+                    bf:33:c3:1f:92:5b:44:42:33:83:25:bf:3a:82:34:
+                    7a:b1:70:eb:2f:c4:ff:28:1c:0d:6e:3b:c2:d8:92:
+                    30:24:2f:7e:2d:4c:a4:1c:5f:78:67:0d:9b:e9:8b:
+                    58:9f:94:bb:b9:cc:34:62:e9:8f:86:df:4b:9c:ea:
+                    c2:45:d7:f1:92:b9:2b:49:8c:c7:a0:e8:9a:eb:76:
+                    a9:f7:93:d1:65:44:5f:d4:6d:da:e5:2f:ab:da:f8:
+                    1e:8d:76:48:a1:b7:1b:b7:a1:79:d2:a4:b3:e9:15:
+                    6b:b9:a8:2c:47:7a:7a:69:42:58:76:1d:0c:20:ab:
+                    a0:32:16:a4:be:1f:d7:87:f6:66:10:74:26:67:9a:
+                    ce:11:9e:9c:2e:87:b4:85:9d:4a:b0:be:63:1c:c5:
+                    69:6e:dc:da:a1:90:e5:e8:4f:c6:27:cc:cf:23:de:
+                    47:ee:04:65:b5:de:dc:73:fe:3e:cc:b9:34:50:86:
+                    54:5e:5d:2d:a0:9c:2b:94:1f:03:01:a3:17:ec:98:
+                    54:9a:ee:3f:53:00:77:c6:f7:5b:55:7d:40:f8:5f:
+                    08:64:46:fd:d9:5c:9c:ea:b7:9e:c2:96:1d:d5:33:
+                    0b:b0:19:a1:29:d9:4a:b8:8f:28:55:63:1d:ce:86:
+                    c2:4f:3b:64:fc:21:60:ad:57:10:29:2c:b4:50:45:
+                    18:92:19:3b:8a:88:44:76:ad:b8:24:e5:08:31:69:
+                    da:0a:55:8b:91:00:6a:5d:c5:ae:a3:71:95:e0:e7:
+                    3a:88:b3:af:8f:75:07:6a:ec:e9:6f:57:0a:cd:42:
+                    6b:7f:01:eb:fc:29:24:5e:fb:7c:f0:05:02:60:37:
+                    96:98:c2:b7:25:36:d7:d3:15:5a:60:17:0e:b6:ac:
+                    30:ba:c4:af:01:1a:75:ec:1f:b0:c8:bb:3a:c8:89:
+                    b8:a7:7f:f4:8c:c3:45:85:9c:78:85:c2:be:65:8e:
+                    31:66:71:cf:fe:50:54:f4:3f:16:1e:ba:60:02:33:
+                    49:f3:6c:32:dd:12:1b:72:b9:dc:33:00:7d:d2:48:
+                    3f:d0:1f:7f:d1:5a:de:4b:05:c9:52:c9:59:be:a1:
+                    d4:18:1c:bf:07:23:3c:90:8d:2f:3e:a4:f1:6c:05:
+                    ac:a5:3e:a9:00:e1:81:6c:f0:59:5c:c7:4c:2e:73:
+                    bf:ff:b3:95:8d:1e:6c:b5:de:7b:28:2e:ba:08:76:
+                    46:18:b9
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            X509v3 Subject Key Identifier: 
+                B2:24:DD:72:EA:68:86:FC:FA:D7:0F:6B:B7:F5:59:32:E8:B8:E1:5E
+            X509v3 Authority Key Identifier: 
+                keyid:87:A7:C5:75:37:0B:14:6C:BF:46:04:8C:2A:52:E9:5D:DA:51:DC:E6
+                DirName:/CN=vpn.jenkins.io
+                serial:08:01:AA:6D:1B:31:40:4F:7B:9C:75:54:54:78:B5:36:65:3B:7C:B3
+
+            X509v3 Extended Key Usage: 
+                TLS Web Client Authentication
+            X509v3 Key Usage: 
+                Digital Signature
+    Signature Algorithm: sha256WithRSAEncryption
+         4a:c7:46:92:c6:14:38:f0:37:6a:21:2f:f5:e6:6d:3e:95:57:
+         d6:8b:d8:b9:05:c1:5d:05:e3:d1:d3:95:1d:ce:c9:79:ed:c6:
+         3f:4e:fd:c8:e0:45:d3:27:13:8e:72:16:a4:a5:dd:f8:ab:54:
+         37:bc:0c:9c:a2:44:b7:59:b2:36:e5:14:d7:33:e7:fa:61:53:
+         5e:12:d2:41:3e:48:65:4d:6f:57:bf:37:78:2c:04:5b:7c:8b:
+         b5:0e:04:d0:0e:ed:86:c2:9c:95:e8:16:19:24:74:c9:79:8b:
+         cc:63:60:3a:19:7b:f4:77:01:45:6d:91:37:56:b1:90:e8:c3:
+         67:0a:db:6b:a3:29:27:e8:6b:aa:62:6e:09:bf:a9:22:e6:6c:
+         f2:37:a5:36:a8:54:a7:50:bc:cd:47:6e:a4:63:ae:ae:a0:c1:
+         df:51:58:62:f2:07:4f:35:9a:13:d9:6f:59:6c:d5:be:8b:4b:
+         58:f5:5e:8c:7f:9b:6a:a4:d9:4f:4e:17:a5:8c:d4:87:e8:00:
+         64:1d:9c:2e:4a:fc:b6:74:9c:df:3d:2a:1c:1f:d4:c5:c6:e8:
+         40:42:1e:0b:c7:e5:62:7d:df:4f:78:7f:66:d1:30:56:22:9d:
+         63:62:49:de:e3:20:6c:4d:2a:ba:59:f2:2c:b9:a6:f2:82:83:
+         db:72:3b:e7:9e:7d:7b:d4:b6:c8:6b:e1:6b:46:c3:81:0b:cd:
+         b3:31:eb:9a:91:6b:66:02:5e:67:31:9f:3f:01:08:e5:a7:74:
+         8d:3d:09:4b:bf:85:9a:c7:ab:34:d8:24:da:f0:50:d0:27:d9:
+         be:0d:63:6b:f5:f3:84:4f:0c:2a:1f:3a:e3:f8:e2:8e:56:76:
+         c9:76:8a:1d:54:67:42:68:f2:c1:75:c2:da:1f:36:5c:cb:60:
+         88:82:49:a9:67:5d:fe:b9:c4:f8:34:d4:71:76:1b:51:e8:dd:
+         92:13:9f:92:1d:a5:6f:13:d0:75:fe:5f:a7:24:ff:6d:ff:ac:
+         98:69:9c:ed:f8:bb:65:02:a9:b6:3b:2c:8f:38:f1:ce:f7:72:
+         4e:a0:c2:ab:c3:3a:00:48:3b:cb:20:82:8d:ef:eb:fc:77:7e:
+         31:21:70:3a:c3:72:44:06:4d:73:ab:44:bc:1a:f0:10:41:7f:
+         ad:18:63:d9:23:b2:64:8a:4a:96:9d:1a:fc:71:6a:05:fd:02:
+         1c:68:4f:2d:cf:07:d6:b9:d1:da:3d:f8:1d:1b:ed:ca:64:f8:
+         8a:ce:4b:0c:66:da:42:3c:73:54:f0:39:60:7b:6e:80:e4:77:
+         e9:b7:87:cf:e1:55:8d:85:3a:26:65:d1:3c:d6:b5:f5:4d:3e:
+         c6:57:60:49:b0:7b:71:e4
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/cert/pki/reqs/smerleCB.req b/cert/pki/reqs/smerleCB.req
@@ -0,0 +1,26 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
diff --git a/cert/pki/serial b/cert/pki/serial
@@ -1 +1 @@
-0D55B3AA26D85D8F0E8E26391DC035BD
+D19FB51F7C316A823142F55227B46E68