Add fake certificates for testing TLS issues (#20390)

Changes to help QA #6085.

tools/test-certs/README.md

@@ -0,0 +1,57 @@
+# test-certs
+
+This directory contains a fake certificate chain to test TLS functionality in `fleet`, `fleetctl` and `fleetd`.
+
+> The certificates were generated using the following guide: [OpenSSL create certificate chain](https://www.golinuxcloud.com/openssl-create-certificate-chain-linux/#Step_6_Generate_and_sign_server_certificate_using_Intermediate_CA)
+
+## Directories
+
+### root-ca directory
+
+Contains a self-signed certificate considered as the "root CA" certificate.
+
+### intermediate-ca directory
+
+Contains a certificate signed by the "root CA" and considered as the "intermediate CA" certificate.
+Additionaly contains a `intermediate-and-root.cert.pem` which contains `intermediate.cert.pem` + `root-ca.cert.pem`.
+
+### server
+
+Contains a server certificate signed by the "intermediate CA" certificate.
+
+Contains certificates that can be used by a Fleet server:
+- `server.key.pem`: TLS server private key.
+- `leaf.cert.pem`: TLS server certificate alone.
+- `leaf-and-intermediate.cert.pem`: Contains `leaf.cert.pem` + `intermediate.cert.pem`.
+- `fullchain.cert.pem`: Contains `leaf.cert.pem` + `intermediate-ca.cert.pem` + `root-ca.crt.pem`.
+
+## Usage
+
+Run the Fleet server with the leaf certificate only:
+```sh
+fleet serve --dev --dev_license \
+    --server_cert ./tools/test-certs/server/leaf.cert.pem \
+    --server_key ./tools/test-certs/server/server.key.pem \
+    --logging_debug
+```
+
+You will see that `fleetctl debug connection` will fail if only pinning the `root-ca.cert.pem` (because TLS client doesn't know about the intermediate certificate):
+```sh
+fleetctl debug connection \
+    --fleet-certificate ./tools/test-certs/root-ca/root-ca.cert.pem \
+    https://localhost:8080
+Debugging connection to localhost; Configuration context: none - using provided address; Root CA: ./tools/test-certs/root-ca/root-ca.cert.pem; TLS: secure.
+Success: can resolve host localhost.
+Success: can dial server at localhost:8080.
+Error: Fail: certificate: dial for validate: verify certificate: x509: certificate signed by unknown authority
+```
+
+And `fleetctl debug connection` will succeed if pinning with `intermediate-and-root.cert.pem`:
+```sh
+fleetctl debug connection --fleet-certificate ./tools/test-certs/intermediate-ca/intermediate-and-root.cert.pem https://localhost:8080
+Debugging connection to localhost; Configuration context: none - using provided address; Root CA: ./tools/test-certs/intermediate-ca/intermediate-and-root.cert.pem; TLS: secure.
+Success: can resolve host localhost.
+Success: can dial server at localhost:8080.
+Success: TLS certificate seems valid.
+Success: agent API endpoints are available.
+```

tools/test-certs/intermediate-ca/intermediate-and-root.cert.pem

@@ -0,0 +1,67 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

tools/test-certs/intermediate-ca/intermediate.cert.pem

@@ -0,0 +1,33 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

tools/test-certs/intermediate-ca/intermediate.key.pem

@@ -0,0 +1,52 @@
+-----BEGIN PRIVATE KEY-----
+MIIJQwIBADANBgkqhkiG9w0BAQEFAASCCS0wggkpAgEAAoICAQCnPy1nOFAoa5+H
+fu7EWcqqaFCndPFTmxp9JyqdgS/2r0Peo5qpBNk6k3lEn+BEASV0ldj795xO1qv6
+r7pFg5y+8cSLho62OIGH/jRYf+IoiuQsHcCW63xqUJuc3lyVD0k7RLfzK3zO8qa/
+uK+k7fHOuzOkVc+QrAfYWEwiyn/HTaNI6k1Xx51SKoMMxSEzKkJA9eUk0A9t7tq+
+e97t21LnN6Q/vVo5f1/sO3safIPlAVf+/Vgorq/8NOfhrHxcBE/f+ewOqUgGCl8W
+Kb0oHQjqQgKfYd2QdsSpPSp4gzgrExZ1mVFL8Fm43+LF+pDpeNtHlDedlKHteeHu
+KegfLbF3KX+O+GgVHqYrbx0eoj2niUnvVbwRIhIBPjsTp9oWhRARMavgwdcvFBb4
+7Ut7WPcMVa7pnWgeQFfmgO5nQMQVuXtQu/giAbetAUoZthH2A5V86uGQlDaneYUl
+AteP78VQ9cptnvGs6jLyAsTAhJQ/xJW98+7XhRu6tVYrC/Kk0ckPGqM7tGEdWzlF
+PSBB/0Ohvl7SddOqTJ00l/e/4RcCj4kUFk1FscOkS2P5x3A+LK/V4vSc4xpj/5bR
+NsxwQ6xr0q0SEw+Qm2ymVBeRhZXzns+kqYxCW9OiuGuctG7jE9L00UVp6bmJ+TgY
+0s2ooxdK4gRuBcCyTbPCehYKnUOayQIDAQABAoICAA/RB+RcQn8NbTOoBkDtHvSj
+qIZVpwxEPaqP/YCSEEJQ4Txua3jIMRpQNRE6L2rZqDxQ1DRBU/fEEdVDhib/IzU5
+nF/3lIqDaIM/FUiN+4o1rGNxrYjNnLavMzA6z+BMPEg4dPmwZ1K+RupttwquyAXy
+1UJELTzeJWBz5UC1ttosgPXV1q+npzyh3EKPvVaJ4g8jp2J7sgyFoLaP9LgOMau/
+1YQuTkM5b7hhswArvgt2Z5HWorOM5a7BJXFwWahtbfeyunzJIeW/AwQPuXL63/Yg
+0lUBW9icKs1jL/TgBVFUMkpieqTnBjfXeypESoJnQBGSYPoW7YNjBJdR65ZQlhjq
+w1hkYVZtLslp8THwaH4OByFHX6AM3RE6wgQQF2HxcTToyVkykG4TftJJgJjSSvD6
+Fic5be1paDg4eOsC4Sxmu9fkutR1Q/AkUCmsu5mGzA/UzPJUyXjbI4Fd7E0WJpf3
+JU3J2SLU4CjNBrLmvZkcdOyC7woACsR9CjkccUax1ZS5d1oTXHf/gF+tzbn8BU+k
+ew4loXP2XIZ3R3HOgxYcXDrDoATzxzVUPyKdk9PG+/IPoxjKcUvswseovUqYP7PG
+U7b/5jt3EHUOJ9osWhPQRrZgZZlIpPnXEHkJ9lQk27mWmFtMFaKLzqBMN9JdVvbR
+73UfOE8LiXmgBG2KexeLAoIBAQDfm1M4wWkpwUOXFblZdsEDGPc2hcnIPu6xKbCC
+tKm9h4LCHe2t4XNd5MuE49idtzEzvcBnF6MWohRS3zmZJ0RuFMf1B9ZaxIbQ2aNA
+RUdSGdBum9siCdJ1Ej2zhnigqQvi9vK6w+sDgBc2EmiRLaxH7yN/SmCSqHsPFZfo
+DymcfX/761S0dxWq+eD0n1VVKgSsDGGbidRf3Njhlkfw4ECOlyw5IZxwv4nNckWc
+0tmL01ZhM5yJeCubvduVvsjrMosUkrpQSCQZjBnr/U6rxVC0bQoSU3Wl4j3zaY2i
+oqsLbEZXzli81IwHyOzzedKQN+EwunHrGYJ92mEvt1kpAJaHAoIBAQC/ebAw8okv
+HkDYnc4QNL7A9deykhoyx57NO0qekhbkt0c4Qea3ul2aFeD7DGMQkTxiLCUlqYwv
+9KIl+LrZggpcYyfjC1CZD9pZphx5pLBNMslGDiJ5WYERWTm8hserJpBM3motYXoy
+FIh8PewV/lJ4kSrgcFrClmsaZHnjpo0U6iOtb9nyCLDcNwbmTG9UJz6ImM/d2asy
+IVCFIOYUSofloOGcvnuLe1wSb6zahvo8L3+EZ5fjhqeimECDiwqHyszBuzRYHRh0
+I78RtCfs6/5z9NuShWKN6Gyb4hPs7ouuVajIJydaAIlugTzleFbeelHbYX+jf6Pp
+hOs8JSV4HkgvAoIBAQCk5B2SlM3ABMya9WIhHvlmF1r10eLiz8Wkz2FigWdKZEuA
+aiGDP+WbL8UE0iBC7XxS83KWk0+ouQzTr9kBn3tO0fRCNO1VMedYy6UfF/doC7Ew
+X65Qg3225ySo5li94OrrC8AjCaachjCXpyuFI3EP+sDqdSaR/7v/e6Txc3zz8XgX
+hYqJKefIlUvWGEkM7FdVqCuyTwlVR76HXBLhBf2VKNVrq+V5H0W3QrUi2Dmkaswg
+Ebc1iHBgALmUy4POLQ9ytGDAIvK8BBx5ceo5sN+6rU3oBbOUCCo2/Xd8nwgS/F1D
+Et9NIE/CzeAuC3/C6fIdxN+Mxtr7g7Z3QXV2TwCxAoIBAEmUGYC1ssHIfmK/QVA4
+9JRx5FFak3av/vYesq38tY9uXo/fwykXFKEBh1Lxj5/uL6YKELxISvaiqyysSCEN
+N64I7GrzDiXDUcThcE/OWXFQ8sdY5yZ6nn5sKyOnJ1M9nnXrgiGuM6bK/SfBI9fP
+wyFRp4hXpIjiBIY/1hcFCXHgB5W+RaIcdNoqyxv0g1NzQTR8hGRcIM1CwA5odgGW
+ImK7T/dLu23+GYN8JpBTDhXSqs3WgSeNtx1kJGZoJ8PGyqgnqBW0GJGIqwPClxUU
+GtO0ZCwJ1bVye0nrtnx1rndvs0w2v4h2bFlqkFwdwkP7/TiwXrwVcIdr7HlQTPW7
+rUECggEBANxz5pevEmXfSjBoC7rFIcqNrZKfCtL8UkM83VHmfGRbkH5/i2prhlc7
+UFXuZjPifStb3YsB60bIhnTPU/ki4jl21XPHROxcdJ77/2NcmGerqhBMDnJCw0/8
+YuW1LtBjcPwmRCOXVbxqe+VRMLzNS7L2Sg99DoGkhCt1Re6j0Xwk7Sr0cEuyQCwS
+KMtb2ug8pIRhVXzTYF/z607Y8Ovy9fxreF2SiPjQXttAWPkYXWwK22Vqd783Sbjr
+epwTiAdubBA6rkv2gj30c6HsBEXzNYk9X9+WYvr9PRCIwBdKQJpCLNZ99VwOpA3K
+X4IQLGEuORWbifkdEc/BLO5dYoBmgo4=
+-----END PRIVATE KEY-----

tools/test-certs/root-ca/root-ca.cert.pem

@@ -0,0 +1,34 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

tools/test-certs/root-ca/root-ca.key.pem

@@ -0,0 +1,52 @@
+-----BEGIN PRIVATE KEY-----
+MIIJQwIBADANBgkqhkiG9w0BAQEFAASCCS0wggkpAgEAAoICAQCtjGyqmC97GL+R
+EiKfwAeVMClGKUQ4Lj7rEJnhWXv9op6rrHNcWXdms0lPDeXoRbRailXjI9cBIjQ0
+bIDO4A9++aGe3t6vaVNyWr/dHPkaZ+kTyKQu02qkxHMvmB2bxmTuqhlQSENKKhAr
+066HbDuwLV1yLfa5dvVa7ooYJ6I4kRyLFE3eMHM23ifEIss1z8wuzUNvhx6Br1rq
+mowMIxh9LKgTRqi0IBL/A17qF6zR1LSookcxOLNF8H8j816ya7Huk7/+747PZ7rY
+Rwmb1/3bEwoEqWlrfqk0M3G23gNXJNgqxjxrH7vm1a4KGbzpBmbOgEYeMAga3lpn
+NTr/JmY07vMfE6TYPlaFrqhas6sf5l4abTWQMAtZy6mnwsaw5ERz+UMKFyTLSZAQ
+EMkoGQgLcEJniKHub/N4i5OL+Eq60555IqU/SXfj8hyH/9KrNCFZ/bgL1pBJTVSF
+DebVLtAanvR2CkAMiDanJmha5rw6v3RW+xBVAJXcSt5oVREhaBZBXVO1dd2n+ti5
+31NkWtnJHqUc0g9gYOOvlBhqcMNDXD0a/FVgsvoDSwi7GXPr3E7Bhc4ps+FMIuRp
+wyHOs/uBQEZGTvKCSP5204BBfZrjkU64PlT8+4rGNMrAKqP2Lemfu0X1cDL7+CUt
+lHMHvT7aZM8nwwjeXNVkq6IzlLX+/QIDAQABAoICAEjm9jbrWvawvLgqEBVfS1Am
+PRBWAWxAMPn5rUp2lplDGLgw5vziMEAaDC+DPRLHRS3LcqzJv2WggqGK+sjsYlYK
+cxQTtyOkcQNWj8ZIh3PKNqSy4hUxhljUlTZnBfkL7BY9qgiJcorTBJwEfgoxMxmc
+1OZD3KKoEAU0sxnWfFSa0Iyz6MnvPFbOF5JSs15VfgYi/7L35Z7AlMZ8SVxH2d+r
+RKdkRTX1S0WImvRnIZe7bHBySsmocdZtYlstvpfgmYwI0Nw8sZb6kgiMPsMShnbi
+lpDCwaAAQv/EpH4W4PxYY94EDBlL6VjcZhGkIjEZGVKhm9LOhnkS8pLsT24jKUdd
+CKTLSM87E2iwLDy9fnHppqhbL+To3GbHiJ8M3SUgb7e8DeggzX3pGiqTwX26PFtE
+PknHpRUmbUZ6gN65xaWaTGYjJ9U3gYqEbZFZh+j6KEv136WgR6NeLWPL5TrDr3a8
+3jbYy3W9pnt4eykgHw4Nvf4ScvR03A0zWrdoy/Rzlpa3SEzLzYS78R95fOaHAviz
+QwCIL5G9vRPwMcinGgBZcEJcy5K65uzLZHqnT8P7SZL+K8KTxgs4U1nuEITc1eRI
+bxAeG8n3iRNpEud3EWmKsFQPWLJfeKog4/3K2BdJrW268tS5fE6Vx7XPUHu+/0QY
+Qzrq2uZf2dlJDxx51lIZAoIBAQDqgaWk2KRBx5GoUAq48p6Cdm26VB/JdOCn5B2z
+3zYN4qUQpSUeKz2+5wDdOk2LTWX8oilDchA6BglQwHPJVtmQb3pB4JR44KQsq3RJ
+oQB2c5z0KitmtlY+H7q/KEx6Tjcz5rlM0hZ1ceoT6IpFv1yVnPV1qEGJt4CTY8Q7
+Zs0uUZva61/PdR0j72OJNO6neVfQxedmHjgwAX8bzdggt5j3Kp0cXIqWuKQutF/e
+hetGdEAFNk803EnWomr09WLyEZ6RJaQJHwI+XYoAHEC9gCg+wcC6SEOn3a0E03yd
+CBkiCuSECR5H/sFteotd/uaN/WVchwoaikPBQpqPyHSmFnV7AoIBAQC9dH0ia3h7
+0V5VkDpQuZbxvu0ym87CaXg6ok84IklVb11QmdaggheNE9Bz7LjbVlo8d/9HokZd
+CO6u5mzCumGNHDUrXVo8fR5s7vyfGjESqMDK4gltZz2tBVjnf3Gd2l+JlSHwuDx5
+gE52LZjqjzHFrDLHz2EALA9I7xgLRsgOvdY8sXX0IEQUXDjMGbxa2vyebBIvqlF8
+FfgINFIRPAGy0wmcEltqaCtn0zsTjdbSxAl5UHyGfXoVXr7L/k7hheSPODX8JGZ5
+x01nOOzZ1fN388TgdKIKbZJbVcWjPUE3fnlgL1wqjm2EhsfdKZRUOAlWGgAuArF+
+ps8Q5Il0UOfnAoIBAQC6RoWnbhb70WTYR8xcoQxcIWqD6bLeOaMCeedGK/YqDXCE
+ykmzrzF65NAA6wERuEdc6ArS8lYFYSohJN5UflKPsp1wms4VPovql77lhahybt+r
+65tSGWBkNJwIoCAvvtWGuq1SYkdIv1XqvnqncJxAk88+yIpWtJbDfSow7TXqpxSg
+TvtqNWMSWmO8Z3lzOqYQxkNLEJIdP/MRyO72/h/ZpdXq42+KzdxM5SaKAeKjsk/w
+U/WSzbExdw5yykDwfCJytW2ZeTI1C+REtiyO2rAdOZa34hMr0qBPBxcjPX2JVxGx
+9/Q/yBMpvX/bCFFnVHMhjnruHgo4B4ny0I4oKArlAoIBAARK+G7oOoGru9R6gSfF
+HMt7hQpph2TWWPgTJ3JhLII4FMg3xCo86GW09js6OPIXYdIO8gTgg3GmOypRZFOB
+P6af5gCGi/3k4+SaAbVlNYlzs3KlbotBFJ+wCFSuiZeHFDUc4PkAY7ZpFt4MqHNg
+LUOKZFgstcj4NpxzdnsC7pOO76TObJrMhF5lvI+7YY45ehHo5vyXgmMqaEVfUiC7
+2FoB+CzGKbYeiCVBHwyRYTXDZWePUFMH0tVbIT2kFIt9qjEol+iPtpa50mItYwiI
+lYy5RFPFsMpFs1RIfEL3p1unjP6F9DOuqIKhPzQethK2dleyHSDtxLHW+8gpNYgi
+MS8CggEBAMCuD3b6CV4xpEneGlLXLoRQFGiSoqRUedTA8W1x6I6OS1lISE5LC8p9
+5Jh7BEeZUfbJTD6foUSXoQz3zHTIiF24wpzTvgVqJnpUHjzwghhpO/ktoVbo5FiQ
+wiwitWu71GZTT8UhaKbYgZLlrZcCtrkHBOP6k92uXk6aq53S3fIePTMGrm6Nq3Dl
+WIIKH9HlA+NEZ/QhORIhARPgW/0Tksgf57SyEUr4u49fWEQi7whtP5QozoQocJ8t
+4isVGNRTovkue5B22ljBOfvCTgcEgThmdnIMLMOkVkaL7QElDmgbr5ZYd8CIP5VH
+07Jg0YjzulVHJA7Dc1gLH3Q68M6aek0=
+-----END PRIVATE KEY-----