Update README to showcase metrics/profiling options

Also updates test-keys for client to have localhost SAN etc.

README.md

@@ -53,7 +53,7 @@ in client mode the listening socket must live on localhost or be a UNIX socket
 (unless `--unsafe-listen` is specified). Ghostunnel negotiates TLSv1.2
 and uses safe ciphers.
 
-Getting started
+Getting Started
 ===============
 
 To get started and play around with the implementation, you will need to
@@ -100,6 +100,9 @@ For more information on how to contribute, please see the [CONTRIBUTING][contr]
 [gcvm]: https://github.com/wadey/gocovmerge
 [contr]: https://github.com/square/ghostunnel/blob/master/CONTRIBUTING.md
 
+Usage Examples
+==============
+
 ### Server mode 
 
 This is an example for how to launch ghostunnel in server mode, listening for
@@ -197,3 +200,42 @@ Verify that we can connect to `8003`:
 Now we have a full tunnel running. We take insecure client connections, 
 forward them to the server side of the tunnel via TLS, and finally terminate
 and proxy the connection to the insecure backend.
+
+Advanced Features
+=================
+
+### Metrics & profiling
+
+Ghostunnel has a notion of "status port", a TCP port (or UNIX socket) that can
+be used to expose status and metrics information over HTTPS. The status port
+feature can be controlled via the `--status` flag. Profiling endopints on the
+status port can be enabled with `--enable-pprof`.
+
+The X.509 certificate on the status port will be the same as the certificate
+used for proxying (either the client or server certificate). This means you can
+use the status port to inspect/verify the certificate that is being used, which
+can be useful for orchestration systems.
+
+Example invocation with status port enabled:
+
+    ghostunnel client \
+        --listen localhost:8080 \
+        --target localhost:8443 \
+        --keystore test-keys/client.p12 \
+        --cacert test-keys/root.crt \
+        --status localhost:6060
+
+Note that we set the status port to "localhost:6060". Ghostunnel will start an
+internal HTTPS server and listen for connections on the given host/port. You
+can also specify a UNIX socket instead of a TCP port.
+
+How to check status and read connection metrics:
+
+    # Status information (JSON)
+    curl --cacert test-keys/root.crt https://localhost:6060/_status
+
+    # Metrics information (JSON)
+    curl --cacert test-keys/root.crt https://localhost:6060/_metrics
+
+For information on profiling via pprof, see the
+[`net/http/pprof`](https://golang.org/pkg/net/http/pprof/) documentation.

test-keys/Makefile

@@ -14,5 +14,5 @@ server:
 client:
 	openssl genrsa -out client.key 2048
 	openssl req -new -key client.key -out client.csr -subj /C=US/ST=CA/O=ghostunnel/OU=client/CN=client
-	openssl x509 -req -sha256 -in client.csr -CA root.crt -CAkey root.key -CAcreateserial -out client.crt -days 1000 -extfile openssl.ext
+	openssl x509 -req -sha256 -in client.csr -CA root.crt -CAkey root.key -CAcreateserial -out client.crt -days 1000 -extfile openssl.ext -extensions leaf
 	openssl pkcs12 -export -out client.p12 -in client.crt -inkey client.key -password pass:

test-keys/client.crt

@@ -1,19 +1,21 @@
 -----BEGIN CERTIFICATE-----
-MIIDEDCCAfigAwIBAgIJAM5VxnjGDAC2MA0GCSqGSIb3DQEBCwUAMD4xCzAJBgNV
+MIIDYTCCAkmgAwIBAgIJAI/TYNSIZVQ7MA0GCSqGSIb3DQEBCwUAMD4xCzAJBgNV
 BAYTAlVTMQswCQYDVQQIEwJDQTETMBEGA1UEChMKZ2hvc3R1bm5lbDENMAsGA1UE
-CxMEcm9vdDAeFw0xNjA2MTAyMTEyMTlaFw0xOTAzMDcyMTEyMTlaMFExCzAJBgNV
+CxMEcm9vdDAeFw0xNzA4MDMyMjQ2MzJaFw0yMDA0MjkyMjQ2MzJaMFExCzAJBgNV
 BAYTAlVTMQswCQYDVQQIEwJDQTETMBEGA1UEChMKZ2hvc3R1bm5lbDEPMA0GA1UE
 CxMGY2xpZW50MQ8wDQYDVQQDEwZjbGllbnQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
-DwAwggEKAoIBAQC1Kih6FpzL1UksndUk/1nNbLsDiXKYmCcflXlO27QaKNeZgX72
-38j2EyFjIZFRbgIqoXA4gQVZ4TrBWvVV6pb4XPoxooMsVaLqZL/jgdJMCN5xNjsQ
-ybytXYPJiMPgh9P6yhyckdhsvRa7sHLBPq1llPsEemC4xyG1giTQLxt1eG2JWKKj
-VTM0bE06UK/OQfoAUzdQjA32jd78eciYuyeGLXpHtfVdWNTjZYzHXZ6gljlen364
-z81+oDFXPpyETLE5zyQh+6Bs/xTag5bQ+8tiliQBsIFj8Ce2zZWuuo8VSPk4QLx3
-GMfVXzoKvl1CzGP3EMaUaMq+++HhfHy/Vd0bAgMBAAEwDQYJKoZIhvcNAQELBQAD
-ggEBAKhbqI2uawE9rEmFEJgVmSxEsWXMQ3DtJTQrDWzZaylc5vp7VdrqKNtAtz9v
-uGHPdTRXoHrEsvsYtW+5MAXmJb0ISahqkQQxX5enzMI6ukJXIICLgQW1Axfv7dxf
-DiLOTk9IoxP1WGTsjtoYRKNLeRAt2rATeoy0jtC5rIlyLgeX24AMoekYzx7jC+zA
-EpcW978uL6bKSCtImG7YKuds8yc8XVdbqo+YE4ulT5RE228l5iZs/a45cDO8Kw9/
-nf6hhkQSoDsgssI3h8QYV78coL9JuXApz4BC56vX8H5fnxMzap7Rsv60k0fr0cWD
-AisCpdMV+mEtSlxI9cDjUN3wfPs=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 -----END CERTIFICATE-----

test-keys/client.key

@@ -1,27 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEogIBAAKCAQEAtSooehacy9VJLJ3VJP9ZzWy7A4lymJgnH5V5Ttu0GijXmYF+
-9t/I9hMhYyGRUW4CKqFwOIEFWeE6wVr1VeqW+Fz6MaKDLFWi6mS/44HSTAjecTY7
-EMm8rV2DyYjD4IfT+socnJHYbL0Wu7BywT6tZZT7BHpguMchtYIk0C8bdXhtiVii
-o1UzNGxNOlCvzkH6AFM3UIwN9o3e/HnImLsnhi16R7X1XVjU42WMx12eoJY5Xp9+
-uM/NfqAxVz6chEyxOc8kIfugbP8U2oOW0PvLYpYkAbCBY/Ants2VrrqPFUj5OEC8
-dxjH1V86Cr5dQsxj9xDGlGjKvvvh4Xx8v1XdGwIDAQABAoIBAALYL5yDIGEe7zAx
-JjiXfcx46ZLLpK36rZqUWTxAvNowS/pQCzNLHjem4z5QN5zkskoDEOUCOZhIrgh9
-Kh74OPibVR5UY+TdT1qIzG6BClFBTmTOqizATiMWtcwDRrgOyehFJh/bNl+2tFWs
-FpEsL8LJjQtr9HrSPZhA+9z88Fxuyd48x4O1CYnJy8JNMxBJWJwqcJf8TPrIFxZH
-ULmCVlCt0Bjv2zi8/O9eZk+HVGw0wsoKkQGBqpk8SueQgJ3Pq5qG0qKQAgdOnM5k
-qRM66xG0iTlx7tuP9B7j4d9XIfV7VleWNkSz4xr7PgR9Pjph7/4qb9NLJG1w7OhY
-2TZRQFkCgYEA12LQTmVQnvbEYxmidZUtWasdGeULzUMaFCmQUSfryk1HUoS30eu4
-g94/hgelrM7xEQssDPPK4dTG3sFb4eC96GmULPaVYGtZZLhLX40iNtPMnaumQEJF
-1e99gSyL6dIWhEQ3fEEsJVQ/NwyExld3IVkyuWGsIplsys74vzURSJ8CgYEA11Nm
-zgameilr0jhTVHkqS94H5pTTWw0/FR5xTXCLvQAk56Mo49sPG3FJbwH8H7X7/Bdn
-vWHV378F0f/EVQ52zD9UzIgJTluMSKM5GDGwtH72kogBuGzYbG/9C38yDdkkEjRV
-akbNlZmrFTif6RyNJLycICxGzVHBQgtcSw7BTgUCgYAw/q1b5/ga8Q9ja6VlEfYq
-+523Ej9JBgacp4fIrkgY0NN0lfQqsHBcruXMW1j4omp78gqnN53jGT/T1DBOhY0t
-nTazs7PvJvxCyRl8NuKdjjhxdWZwH6M7MytdgwCgw8WTeOEWRs0AANYQc6yQYb0b
-vOqo+OrrQ/NXfxVeiXfRCQKBgHwOYwaEMlnjj2k4ZloezM2VCDxCtlqZESUbuu+A
-ziF/+cMy75YHWXbYGBTKsfWbJaih23Ty7wPPzIymrPjMMomOW07TeXkZqYMX9wcH
-aeUz2N+nWEZm/3HKO6HqEG6GEhAi8qseS8fLFxRM4WSuvGrT96dZmxkj5xIj9XKQ
-97H5AoGABHFEzgSv1Q/iabisAlyuDCuoEWUGrqQnXpOtPb9ywe1YSm7VtvHfEBFP
-eToEb5SUhB7KPySG1D6FL6BnCj4a3IPZuUanrKQqlIxuU1nKtChg5dF3G7Zl4tV5
-1NOytZgzhxeV6P3zKON0bhoJdc7KVBi2iDwOT8TOescNm0mXTkA=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 -----END RSA PRIVATE KEY-----

test-keys/root.crt

@@ -1,19 +1,19 @@
 -----BEGIN CERTIFICATE-----
-MIIDJTCCAg2gAwIBAgIJAJ5PUxW0W+pgMA0GCSqGSIb3DQEBCwUAMD4xCzAJBgNV
+MIIDJTCCAg2gAwIBAgIJAJZk4pweJ5yhMA0GCSqGSIb3DQEBCwUAMD4xCzAJBgNV
 BAYTAlVTMQswCQYDVQQIEwJDQTETMBEGA1UEChMKZ2hvc3R1bm5lbDENMAsGA1UE
-CxMEcm9vdDAeFw0xNjA2MTAyMTEyMTlaFw0xOTAzMDcyMTEyMTlaMD4xCzAJBgNV
+CxMEcm9vdDAeFw0xNzA4MDMyMjQ2MzJaFw0yMDA0MjkyMjQ2MzJaMD4xCzAJBgNV
 BAYTAlVTMQswCQYDVQQIEwJDQTETMBEGA1UEChMKZ2hvc3R1bm5lbDENMAsGA1UE
-CxMEcm9vdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALNThpKWkD5Y
-ZX6KXGUJvrpm8FonFZYpHrjkcLjXWmMQl5j6w/H/T4zJnZibQMx1dvZPo15yJHNz
-kxRu7UXWLepB7FXQlEAxDgmGMJdqhJ91rwd2iV+JktafytukyOz/Lk+xL5+lpp1l
-zi0ZIWb8V9dkN1t3z83ZPSDJklJ9Uai/xwy33hsj/R1ZVPKt/ikUlJr00yV2wbXO
-weDr65B4V80KFCWAHkw8cbLz5OdnxlgkdFQnNYZMVy0PFd3GPGPI1XGgpCBTjKFX
-BJdv8riLviV3lxnFW8y4G13C2xHQ3sdEG3YGWB/K2sFM9stN3CBWDyQLJ8abb/e0
-0bcnWz5a6VECAwEAAaMmMCQwDgYDVR0PAQH/BAQDAgIEMBIGA1UdEwEB/wQIMAYB
-Af8CAQAwDQYJKoZIhvcNAQELBQADggEBAGE5b3nMmWJEdUsFBNYvals7cC6E4Naa
-g+sf0W7yyx3MHbQuf3BanU2SJ1bAxNBc5WhcWqfCTDPhVzDBbOkHoABdTUpBxzUB
-3pKgB6hLewNwfs78W02wKpGjMWmfgIkx3SXVhFneFh/LXZldQ74U3zNeiXts+uXS
-gGG2hRU7/3NgWrUHbPn5Ao0t9hy+KOunTRDDhlWtvwUh5D5JKbkWn63esafG+FPC
-tPo8h0CnXd+nLC8LRJ3T9PIxNpK6eTpWMOWmIMdNGcGb4kRJL7/wS3ZR37D77iV3
-/+leFf9c6PsQLGnasXXsejYMO7FbfVhY/6/VOGwYMDwfV/2mntvbCMQ=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 -----END CERTIFICATE-----

test-keys/root.key

@@ -1,27 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEowIBAAKCAQEAs1OGkpaQPlhlfopcZQm+umbwWicVlikeuORwuNdaYxCXmPrD
-8f9PjMmdmJtAzHV29k+jXnIkc3OTFG7tRdYt6kHsVdCUQDEOCYYwl2qEn3WvB3aJ
-X4mS1p/K26TI7P8uT7Evn6WmnWXOLRkhZvxX12Q3W3fPzdk9IMmSUn1RqL/HDLfe
-GyP9HVlU8q3+KRSUmvTTJXbBtc7B4OvrkHhXzQoUJYAeTDxxsvPk52fGWCR0VCc1
-hkxXLQ8V3cY8Y8jVcaCkIFOMoVcEl2/yuIu+JXeXGcVbzLgbXcLbEdDex0QbdgZY
-H8rawUz2y03cIFYPJAsnxptv97TRtydbPlrpUQIDAQABAoIBAQCYf0tNlWSM4DdP
-aPIxqhvcAHYc9GfTDpzltr51Mg3XeOCyY24GeYt4umuev0hXlvzXcdoIEyEUXRCS
-q9JzNTROpkkIoRuxiwXY65ie6yJlSHrT6eXgrOmGQtUL/BIyGL+VXaSWKxSJfW3b
-xCc3oRhCPyMkUbsR3s+w9jnMlG3BBgdx77D3KW6SL79zJyl2uH36FbZup15VJQ6P
-Xt/7tSc4vrj9sorIJTga5sROvG8JXVgfuJ5UyzcZJiJWu5H8N2YaJxtk8YbGF5Vc
-Je9oZm06BW5qCCw1Y747NVePu2w5vWxf9cyHXMYzmu86g305OC5slCCAcaQ0HMFk
-FWEQvBJRAoGBAOvhrsGvlLhFUJy6eE5yglFPsyA/F8pU+eFBMbq02gAFDq8KuIbF
-d6b4ipgLstaTwffapLVLt36p2ULuANw+0gUo45/Xt9xCTWP2GkCcR0dqGekbYvzJ
-P5hpr3miPfX0WNuhz+kZhLfXtUGutj3J+5PoLBHD45b/n3AP4NVl3EH3AoGBAMKe
-/uHG2OcMVUsfNaWUpQTnUuTpSLrMSI8r7hS7/gT2YolfTBBNbLBqo11VHc4ilasa
-IPbTAIjAOTUC2jnyUer5UmfeWWE4Jezmg8dlDi46OUeLcfp78mwjXxXu//BaDK39
-sLn3HBcdZqxuw90LFqp4EfUn6jmf8NRRyd7pUdz3AoGASCOWOaAEILL6K2SP5JX6
-qvlv89233eZNIYm5trsWrMjfK8Ngmb8Mj+EVKdjyEdPQj4ertdJ5ROCXFHQLiVAh
-FPjjXIAxt8gDOR4L+1SQLBQT5om8pUi7DVbNFqr6vhzDjDAZkNWAFGWBBpxzGcSL
-DzoDOE+rbAOzdCc3AKyNRxMCgYA/kvBvkCUKVF0ITQmZLRU6pNXPMOUxH8oT+qWq
-4D36IQHPHfIa4S+/8RWsR0GVNHbvjXl3JzXldeU6C9R9WUqpFwh0JY3M1CqPWD1z
-xO786sgLNuHkkNh/uo40+/1e5gt+SoCQPshORKxlZ0lTy2t8A/zZuFAqwrRIpu7q
-ggzbwQKBgBsoyrwvDmOegsMNRcRT6yc8dE/AXU9/l41aWBJCWAbg7KMCQF4WEF5t
-AmTRjuKixWJT/f5DCif7clRvwYenuDxXD5Z+ksMBeQQoEes5cbux47ARbxCSfItl
-SF7clbdKyzG3pr/ybGmO6Br5uo4g6AWRUOn/1U7n5a01Njj+TW/v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 -----END RSA PRIVATE KEY-----

test-keys/server.crt

@@ -1,21 +1,21 @@
 -----BEGIN CERTIFICATE-----
-MIIDYTCCAkmgAwIBAgIJAM5VxnjGDAC3MA0GCSqGSIb3DQEBCwUAMD4xCzAJBgNV
+MIIDYTCCAkmgAwIBAgIJAI/TYNSIZVQ8MA0GCSqGSIb3DQEBCwUAMD4xCzAJBgNV
 BAYTAlVTMQswCQYDVQQIEwJDQTETMBEGA1UEChMKZ2hvc3R1bm5lbDENMAsGA1UE
-CxMEcm9vdDAeFw0xNjA2MTAyMTEyMTlaFw0xOTAzMDcyMTEyMTlaMFExCzAJBgNV
+CxMEcm9vdDAeFw0xNzA4MDMyMjQ2MzJaFw0yMDA0MjkyMjQ2MzJaMFExCzAJBgNV
 BAYTAlVTMQswCQYDVQQIEwJDQTETMBEGA1UEChMKZ2hvc3R1bm5lbDEPMA0GA1UE
 CxMGc2VydmVyMQ8wDQYDVQQDEwZzZXJ2ZXIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
-DwAwggEKAoIBAQDKkEc3xTdD0HwT7Da3q/qMbzzm7rrO0kgN4teV/+gn9a6h64wM
-0Wa9PAARb2154/PiuYVVLdtDQIaN3+dTAPl3QCtAscwaJoDNm2cx4OOXD7q9cd5a
-L7jsU2Qzz0krRM1ZHdEoFtLVzFHdpD/aEaFstR6MZ2i0RNnySygA4edMf7l0iYpZ
-+JoYsrLxtc65KoDtsOI7j/CNBSA5u3ZAa+0qPDgZKZVnrC2aJ21CMR1c/7ZZEvIb
-ofWPJYcTj6souMPsLQvqZ1Q161xTBu3ufgp4nq9JtVEaNrK4Wcr4BwydJWdhMJbo
-nvCKcOSROGwPJnPA2lDHFm6f3Av2QyLWv5M5AgMBAAGjTzBNMB0GA1UdJQQWMBQG
+DwAwggEKAoIBAQDsupjts6/pW+I8MIUGUQfm1qgoMazrZmztXvmBB5KMACsCuGlW
+ZjO4NFBo0MW8Bloqpz+/vcFAdGujwFbYaeawkqLDuUG2Kt8D0c8zJCZyaVl+Me/i
+72p1k9Qm7sBSRIEifBxROOsnziVG+AcxiMkiIWFJq0RM3qJDa/Ghp4ne+NmQUL7W
+7sKFovJZGRYR9ig9K6ZVZN3WDebS6bp1H28wXXwW37Zmtjso8+W8RipSVmPq7HHU
+IMxnPH4CiwF641vHkGIV5MEOavbI4Xl2lol8eyl84APuF2zorHALBo2JBkDRvWBN
+Qaf8j7ZsfH6VfU2m0Zj5awi08UGpjBwlCXSXAgMBAAGjTzBNMB0GA1UdJQQWMBQG
 CCsGAQUFBwMCBggrBgEFBQcDATAsBgNVHREEJTAjhwR/AAABhxAAAAAAAAAAAAAA
-AAAAAAABgglsb2NhbGhvc3QwDQYJKoZIhvcNAQELBQADggEBAIe9CkK0DGaCV243
-hJifqVW55s3S4clZZiMlgvB55b82OoOpk/DFCn4qHfKPKvsLn86AzJz9o69GqKAy
-cLeTIwiAcQ4WmCuyIG/HlCZtL8nwtRI3u99F15pOKy9XfeVK9qj/yuwwVghnXREA
-N4eVt+b9G/aXkE0H1pNRmvVozj86mJdUjecpaiVz+q6sgaQWszpxpclclOueVwN0
-xCSOsIchka3gvtL6CzbycS9xTB+fQtl8r+p+9ZaujZBmFsFhNgHwAwCewoy22htG
-D+ZzodWi9WJkENOZloAy1AAf7IO0IGM0OSB96RlqOivtib9Gu9IrECtxlI2QBD3d
-CS3H3yg=
+AAAAAAABgglsb2NhbGhvc3QwDQYJKoZIhvcNAQELBQADggEBAJFSZK6NLQ+WfzPB
+CJ8HElrMmCz6qLL56y+2k1FtnjsW5lxraqBJ39EksX2txuQIptkTh4fy/AEGTi8g
+yhmiaBZ4T2GOvT+5X7PEeWTXej6WZMdqyOt/qH40VrjwpLAeeG04QtDUDZBAQ9bC
+Ie1jp//idzsWvmkqz3LyUOxPob1RYz54w7W2pHJdv/JBN7UF0w7Pw8Enin7RNs8B
+iquhUXgcL185pSTtA8XLOdKliQtF8Q/mGZzmHMSUzW+wIOnOiduc9Qfb8gqAngDg
+X9ECavEyn9R2zSK/A2RiWTwUu7EzhMF+9jD0++DiiIsfO1zISnZVyaE6hBXCl/Gt
+6b8DwJ8=
 -----END CERTIFICATE-----

test-keys/server.key

@@ -1,27 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEogIBAAKCAQEAypBHN8U3Q9B8E+w2t6v6jG885u66ztJIDeLXlf/oJ/WuoeuM
-DNFmvTwAEW9teePz4rmFVS3bQ0CGjd/nUwD5d0ArQLHMGiaAzZtnMeDjlw+6vXHe
-Wi+47FNkM89JK0TNWR3RKBbS1cxR3aQ/2hGhbLUejGdotETZ8ksoAOHnTH+5dImK
-WfiaGLKy8bXOuSqA7bDiO4/wjQUgObt2QGvtKjw4GSmVZ6wtmidtQjEdXP+2WRLy
-G6H1jyWHE4+rKLjD7C0L6mdUNetcUwbt7n4KeJ6vSbVRGjayuFnK+AcMnSVnYTCW
-6J7winDkkThsDyZzwNpQxxZun9wL9kMi1r+TOQIDAQABAoIBABG7aZCXQgw8ru/r
-iKqxcmBiyHkKwu2h+M7GYcruuPruhdgEz6C7n/vGyda84199NfdN+D8JoZ0Ug/Ld
-e9mHR09KHb8vEUfkwPe+t9zk6+doaBd3ZViNvulpL2ddqPERt8wqUQnqXZB7r1rw
-qupDCteCT2dJEiBdupp8O8c//0hx6gH/lrkYhH3klVvyZmqyZaEh80y7Cb4yTGEN
-8muZRPGZ9K9EdUmPa2IeH1MtcUjU1if2ngYmUiFK074duif5bG9QqCLflT/3Ey+A
-qV7iI7GA54SzUEBWu5qK6NmGpaDRHgbYjqPzMt2smuXm4QYezqEoFVFRMfiIlW36
-fYdJj5UCgYEA5mYxBNl9BkAWORFGduBJ6jJoTaN3XiekvLs3SI0FbyOkgih/7F7j
-OVwu8WNlqK4mXFDOsBSCjoU2V5ULGarDLFRod3F5WFLDdctQShajeHWXt0UPIA7D
-lSv8a/+DB7Hr74uJddFI93y20QkYayCgrrPBc5CKxL4kBe1c9133978CgYEA4RJK
-Y3gJzuh+WDUjsQshdJ3DGEoreIEhRD4cf7zI80FSCsH7KTv67xYlCsh+aqF084sF
-YpzcXeiO+kMPPki+SVYfuU6YZGnm1YDNwpvE26ez4WmA+nydBMU8VS3RTHkL6lZ/
-NwXZ10errql30wPcFL+wj1Qm7/73bxiQseKTcwcCgYBv4tyXME8IxAKGwB7qB82d
-T9FbMrD7JmFXzcrxDpq++B4hny1QSlwqNNwPGWf63GeAmTVmSO+F6qcTLSvw0P5q
-/qqkppR5EegdwhhBgnDsRJ7iv0SzGrhcLroscC7fg8XB1I9yianXldbp+HLFQ1kE
-vgKJ7n2VQYkY38Yv0pBi3QKBgHQyyDsAXzf2ajxJ+wpNb9FQHcgtirHlIPKlinsc
-UTbdU2kAaxYHxG6pJSijCDku8D1IWdhmmZLWHPLxqi4CylL8ZtZ50E2PK0CxBgnh
-98lblI/cs10e9sXeul5TkEoF+HPcgkM6/xOZCfbbwWQtCvOfX50v2gZvwPkXWqSs
-EGoDAoGAb3nH+EfT79dFR94FQkj67LAI49kG/HZjJQyLHretGwC/3Pb/7Gv+awmE
-w4uOP9SrTAN9uTnZ5X8rAO/2FeHNjONccwXlQYLucLobYvw2fFbTTbe+fTm5M/p7
-RCdkJSJmM1RdDvJAvY04bqnK2TJW6ZiN21ewq1d/X176sM6FWEs=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 -----END RSA PRIVATE KEY-----