From cfb794f47769335d1ad71693b0fa7206d500183f Mon Sep 17 00:00:00 2001
From: Hao Kung <HaoK@users.noreply.github.com>
Date: Tue, 18 May 2021 09:22:14 -0700
Subject: [PATCH 1/6] Update cert to not be valid for 50 years

---
 .../selfSignedNoEkuCertificateNotValidYet.cer   | Bin 932 -> 936 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/src/Security/Authentication/test/TestCertificates/selfSignedNoEkuCertificateNotValidYet.cer b/src/Security/Authentication/test/TestCertificates/selfSignedNoEkuCertificateNotValidYet.cer
index 9c8cf9d71b2218acdd8c6b208677a0e6aea68ade..5e202690db7d0f7071c30c088a2a0910c7f02ae0 100644
GIT binary patch
delta 654
zcmV;90&)GM2dD=hFoFZ5FoFV%paTK{0s;_jwc>4wcvGfCKVlA?ZaxW-A9W)l7!NWq
zH!(0ZF*q?cGBGtWS{M&9FgG$VH8D6bHZn0aGFp)?W|J8KAb;gl{gX`soNc8EO%0pm
zGKKBIBUk^fuq9Rjl}c-*fHHnCthUdELACs7j$v*76lN@bW+51wZ89K!3l*Sd2{IBr
zYyU4k(P_SJgf4#M-Qn0L7zm8R?obq9&nH!7CU=S8M}?)>I?n^60eZ*0)a+#666h~l
zxiC7VxG{c;qJJu6xH_!PcJPEB1nzjwfDVXz-ZQfBnUNR=z}243%tB-3o-l{!UisqG
zj_J{Lq{U~z$QAR_Q`{-kJ=)_W=!nymhj2%mP2+($0EeI9U998YlI@IfR-<*az8BHN
zO`mS)dipe;6rMQ%Uj;4gH4jylYhZAPZj-#c4}w9tY#V2x0s{d60i#ebPB0Dz163Ul
z0RjI61OoyGfRj=JDipnR)KA%DIVQy!+t)5~Uxn7Hlo6AV0u+A*v0G6Mla(Om3Ot?L
zl{X&trXpJPuc4ms3A1$X5h=Gir}MKnS+6uk>-$lBvFu$dygYZsx#^z4c{T&j+c1Sr
z22v=@xhPZt(01H9W&m5!ZS!mVhbHZ?d218wAg_`oGrr2ZP#{MEe!Xj_Zg#fs7(=*^
z#KRRB@Fv%9_p5)=7OE`HS>Ie67Tuy0qysYO)!zyg=8UsKs{uRe#A%(&dh=tlTdb~;
zIXCXP;Mx|5p-dukqtRJkhdf!`5Of*VmF)48q@=F|i<SgM2z>-=p>UU^<iyPq0-O4#
oa!=r%%Ox^Vaga}2+|p?8O9Eewrs5E99wc<Z?V=P7TmAw^ADP)FH2?qr

delta 647
zcmV;20(kwX2c!odFoFZ1FoFVzpaTK{0s;^-XDa2Q16qznBxvyV<HFOCA9Wud7Y#Bo
zFf}nZGBPtcGB#Ql4Kgw?H8D3bGBY_cHd>J`W|JKOAb*$OR9*r<7if~BIpMF?0Xr}o
zBcf=YMHgXJ5%|X4GYxautAB!?Y4mzHM)s7EUHwoiXe6z@HkP(YrS6^!)&oo@G;7VQ
z(}&1zR&w^K?$JME6RJqZG<1}#l5lgy&eM%UE%5yVS6y}TC$TVMe};Qg+umO}1Z#TR
zu%h4?1%JTLB}rnl83x65m0UbwYlRwiR2Udn^-rxY;_((g(X>*}g+xooDBpTv+4M_%
ztfBk&5h>AL5WUy_k<JeVh`zhnbFgJ#ZuF&TTs5?r9MEtYZvTj;a3?+>oltL?fU(mr
zXiY0k4kHH<-#%`zU#F*TdN?)7I#G>5m5ZvpnF8l&lRW|#0s;h+Rst%2?}Ur*gairN
z)MtA)Ihl!lQChN0FbxI?Duzgg_YDC73k3iJf&l>lccaDHcT{N0Bcj^$D7jnui%Qzf
zz%i3zI?)0<t~|PUu+D3dgie>I_mZ!v_D7xn9*MKAQ==5cgxOiAOc0GUCUw>Z{x3W+
z*vzdTW4x<plBXwja@|LN6|OMG!0SKV%n~}l3=ybw$sWk<21jZuBq9Bhn`M0=g;RFo
zAZ=aIz#5^I#~m;n0(a<VmdR`*V<aeZT=%Za;*r_bshzHnFF_sVjN4i&vtz(h*0411
zq{u<+6=H7G4>xBLCI2!WV3#!h=BO;CgrYV`H$`0pmHkiPLJG(#rrnjg-L%a=(;fhI
hUx8GM0Eg8TZO;|ZkzJSqW`=*&3Tp_~X{CMS1o5(7B8mV2


From 9655eef2e15bb486cacad4598c32f86ca81a4eae Mon Sep 17 00:00:00 2001
From: Hao Kung <HaoK@users.noreply.github.com>
Date: Tue, 18 May 2021 09:23:21 -0700
Subject: [PATCH 2/6] Make cert valid in 10 years

---
 .../selfSignedNoEkuCertificateNotValidYet.cer   | Bin 936 -> 932 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)

diff --git a/src/Security/Authentication/test/TestCertificates/selfSignedNoEkuCertificateNotValidYet.cer b/src/Security/Authentication/test/TestCertificates/selfSignedNoEkuCertificateNotValidYet.cer
index 5e202690db7d0f7071c30c088a2a0910c7f02ae0..effca60607e53287b90df77e28331b884591235b 100644
GIT binary patch
delta 640
zcmV-`0)PFe2c!odFoFZ1FoFVzpaTK{0s;_Vpqi4aK4Z8+VL6)tB%}P1A9Wud7Y#Ep
zFf}naF*Y(YFgRKl4Kp$@H8D6bHZn6XI9ib|W|JKOAb-^3ahI_396AzmwOT5Wqi(rL
zGWhbr__L|T&B(Y%Kno;|X?r16($kwfgeb22k&Bg`&inzAu{Omdx)1YsD&}s|Z8AG(
z5m{qi)_syc@O8^H;+zlRvc%S!o2{6uzqI&Asy%*Jy(o27SYbNY!R5bmOl{2yQU3*8
ziGKa{&VTv#MjG!(_g%3Sc_PEhe41T1w-h_A1l&CO6Nay1p48oq_~tuUmJE~y4gF!l
z<)PyD6Bbln1flI-5DHa%fGW9q9G6F=1}Sc_Q!RDw)srcdAs|0{21=TQU7Ay)JcB(a
z_}=C?`Eqt+lzH9{is3U+QYezmOd0{k+5BY&c>?6YlRW}Me{HDA#)L{Qa$Bupqha*=
ziq{}T4=@b|2`Yw2hW8Bt0Sg5H1A+ko081xmrTA3cT$esQSO<e>EhfdM;=JWL@5WfA
zfJJFaVVG68IVF^Ps15{oe{zrPI-bAzSclW-`CaA3Jl>yxphQ3`WSi7BkpJpRlOUx$
z^`K-A5__~3fBygKd)B{-Qt%mIrxTx%rx>qEO<*H{K>I|((6_{xGD4ZZ(~@f-g3Y6p
zFt4ZCR=l(p!6eT{94JSa1{>VI%z67?4@@6)ekl-GSlT9ZPNPa~tTo2|BcjAg5_?vV
zZgjL}Ga%}Urlo?8l(1p+we}b55Ey+Jg=H5pya=ETDsWsr2-#8uv@L(y`(WsAzRmk_
auTrqXs@d;IZB;c_RMFOxD?MrHrH;a6Cnxm)

delta 629
zcmV-*0*d{l2dD=hFoFZ5FoFV%paTK{0s;_jwc>4wcvGfCKVlA?ZaxW-A9W)l7!NWq
zH!(0ZF*q?cGBGtWS{M&9FgG$VH8D6bHZn0aGFp)?W|J8KAb;gl{gX`soNc8EO%0pm
zGKKBIBUk^fuq9Rjl}c-*fHHnCthUdELACs7j$v*76lN@bW+51wZ89K!3l*Sd2{IBr
zYyU4k(P_SJgf4#M-Qn0L7zm8R?obq9&nH!7CU=S8M}?)>I?n^60eZ*0)a+#666h~l
zxiC7VxG{c;qJJu6xH_!PcJPEB1nzjwfDVXz-ZQfBnUNR=z}243%tB-3o-l{!UisqG
zj_J{Lq{U~z$QAR_Q`{-kJ=)_W=!nymhj2%mP2+($0EeI9U998YlI@IfR-<*az8BHN
zO`mS)dipe;6rMQ%Uj;4gH4jylYhZAPZj-#c4}w9tYyxMYlQ{xI6uorRPuXNSCdC=s
z*Di8jh1RN+5tEPt6n_P=TTu;@l_2H{Je}K>Hy-w;B3kvYp`P#wvvltfDYrVO^RqWu
zuQW#M`%!$c>|HCoJa@&p>7K!PHUrPwFojMAQYg&1C{zK^cHBB<09(;*^K1NvChf3!
zYZL4suaYG*zRJ5$AV&dyy=$j#cDC;rL%5H`!xb3tCf9HGtAEiJsw~b~-&`9O-J%qv
z12X8<-wGAxjI%<k0Xyo%X`Rb@^JB7GtgewcH}1LM+7^hROd@lm(OF-IJXzfkbQ#u_
z?D3PNq^|^vmIOrzeFSTvaF?Xy#LW@{oBF15PvD-*B{ETQkWX9O(rE8X0$+`$;t+2h
PBy_>;q7)5V{sKoIJ^~|0


From 136ae529fce32d1f822120161100117e7cc52821 Mon Sep 17 00:00:00 2001
From: Hao Kung <HaoK@users.noreply.github.com>
Date: Tue, 18 May 2021 12:29:15 -0700
Subject: [PATCH 3/6] Delete unused copy of certs, update right one

---
 .../selfSignedNoEkuCertificateExpired.cer       | Bin 920 -> 0 bytes
 .../selfSignedNoEkuCertificateNotValidYet.cer   | Bin 932 -> 0 bytes
 .../validSelfSignedClientEkuCertificate.cer     | Bin 928 -> 0 bytes
 .../validSelfSignedNoEkuCertificate.cer         | Bin 930 -> 0 bytes
 .../validSelfSignedServerEkuCertificate.cer     | Bin 928 -> 0 bytes
 .../selfSignedNoEkuCertificateNotValidYet.cer   | Bin 932 -> 932 bytes
 6 files changed, 0 insertions(+), 0 deletions(-)
 delete mode 100644 src/Security/Authentication/test/TestCertificates/selfSignedNoEkuCertificateExpired.cer
 delete mode 100644 src/Security/Authentication/test/TestCertificates/selfSignedNoEkuCertificateNotValidYet.cer
 delete mode 100644 src/Security/Authentication/test/TestCertificates/validSelfSignedClientEkuCertificate.cer
 delete mode 100644 src/Security/Authentication/test/TestCertificates/validSelfSignedNoEkuCertificate.cer
 delete mode 100644 src/Security/Authentication/test/TestCertificates/validSelfSignedServerEkuCertificate.cer

diff --git a/src/Security/Authentication/test/TestCertificates/selfSignedNoEkuCertificateExpired.cer b/src/Security/Authentication/test/TestCertificates/selfSignedNoEkuCertificateExpired.cer
deleted file mode 100644
index 81b6326d6f1e2558a910ca33b17b606fbc1b30fe..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 920
zcmXqLVxD5q#8k6@nTe5!NkICu*1snU-f#8TS<SWJ;_XZWUN%mxHjlRNyo`+8tPBRR
zhQbDdY+Rg^)H)}B(n(>I6l2aWN;i};kU$aS%1kNE%gfhINi8$vG2mij4rSryVFvMJ
z45UCjW*%YJih|6d)D(r_)SNVh;LP;A)D#0bab80U15-nDBO_x=BeN(V*AmDzgK}wY
zeG{V+vWFR28JL?G`56qF7`d357#SJvJ@~SgF;l+z&Fksnv#VITO1P(-l2Oxhv-yAU
zgyU^Jr^^Rd+SjfV(<u;aymKz)nrK%v|LvaXDT_Zk?zysO5Br~nV789-m4b`2Ge19y
zp1kgpgM*ad##>eYC#r1Xd$W<b-)<dO-_L#aK~LnpU9;vZ9&G&l_h*6k;fkZi+!bB%
zug=Y$_;knnqk#dMO#7ci8LUsss+AH<te$e?bI=@DAL;2?<@rqwJEuw4bhNVPcpI6%
z7VDJ%w98^P1M{rJ8}o`KG~##eH&(v=b?NS!q)*<*OY9;iGN1hC5`6biA^)K>5i8dm
zVUSViye?2`_3V}*cYpUWN&i(dr__~l*K;Sm(Vy?p$;8aaz_>WTz|VjW7>Tm{jEw(T
zSeTiZSPW!Ad{q`P0}(b3Z8k<$R(574IExV?&Br3fBH~`e)AjbIq_iPRFjGveT#nNM
z%X;K62PQILm@_hLh$#7TT+6DizjpUSzk~O#%Ntyhz8m!a$c$|hO}dRFf^YviJFWV^
z%$arEP7k|MK9m$p5BYogLLa-MMSZ=!jV@o^mOb)H$tS|rF}~gVbdA8*J#xFY-%VSw
z>{f36Y(3RC#~$6gsIXRYR%A^;e)8;^Eo+xWuk`lvo!+3isJ=*E_@U~>47Lwv_a4(J
z)QdQBXY0<d3}?4JT$6sVdGG(iPUEjXu0ED5|6pL5r|FX8H1${I11^`Oylh9_W7c)&
zt4b<dzKOisQop;AY55<%cauxlHzwY3J>SA`zP0)DVT0{SXYMDwWGt)OZMDUEgSn2Y
aL5XX_&cCycZ&yeTVh*lOs#HHvnFIi>%3gZ_

diff --git a/src/Security/Authentication/test/TestCertificates/selfSignedNoEkuCertificateNotValidYet.cer b/src/Security/Authentication/test/TestCertificates/selfSignedNoEkuCertificateNotValidYet.cer
deleted file mode 100644
index effca60607e53287b90df77e28331b884591235b..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 932
zcmXqLVqRd-#MH5XnTe5!Ng!dttVyfwl6N>JTFz!vS^UR<myJ`a&7<u*FC!y2D}zC@
zp|F7<8yDv!wa&?(bW#{4#hCMp(ha2yBv1soGE++P^73_4Qp*f^47k{sLs__am_a-x
z0|gL|nMcwuzeFJ{F()%cAu_c@AviTBO(8flJufxIKu(<3*wDb#(8AEn$k@Ol3dl7=
z;?l<vO^iy&o@ZobU~XdMXE11D<YH=KWMsJVxN!Q0&oWj*MO&k^CM?d|>1p)i)4?B`
zR~|ciVu!l}w@PnjwPNU{%d>4-G}ir|*gbXbxj&4PHkut(*~S04LhD)HrCcNH48h3c
zxNEhO>_3#AHhDCM|KX-1*JjOLJ7e|!EkE2>+17>c)hG>%NVK|f@ag_ypWL%tf&W=!
zI_v&^J@@mQo78)c@39+2E0qqPu9+2UzFow6Ez2F7U&3wcljdEy+xz30b;LBDDXhGI
z6AwLI_~^T^SV$bp!nbh(T%k1$T05&`rn@g;)6Cl#tXul->SWC+iVF7CY+kckVrK;}
zwrRFi|8eh`#m}O$<SCW+_`4n&2L@?OI_o3Fc<kn%RJO_|2bq`|85kD_82B0R0V7nF
zpONuD3kx$7dxL>2h_A{bW+1}Gq0Pp~%F52n1ZOcqr1@CHSVVGHoIKXzrC$`iHfeF<
zmtS4i6<qm|!yK64fML$a;H{pq^he0unCW)55$w$wx@t$4Kic!u>iw~Zr46o`UWqe8
zcUY=Usb0ayQeI!w|Hf+G{+|);mtXvheR|a9-u#9IE)Lo$v#*#<`2WglvcgiEuM1N6
zg{rrR{rmr_`r7`kpbwG>%Z2ApTrRQR(>Fo6!Qr>dp$prO%rJ7Ax&QK{Y=x$?i>DZ@
zUw$)e&la(RD(Br~G~8#fN#EIbrt)_@zmI%Lou)uU#4WWFzr|j;YfO**Q(kn$OQ<?*
zLSD(1G-HKVUCWj>^-bB3_+{%i@z(+pwGyqV;)Z)T7Vs9t*m2wpV%efwf9rR`i~N0O
fe;2L~+HiQ)&G#O;p{C&>7q3m$w#|IGwC@lA`a@&|

diff --git a/src/Security/Authentication/test/TestCertificates/validSelfSignedClientEkuCertificate.cer b/src/Security/Authentication/test/TestCertificates/validSelfSignedClientEkuCertificate.cer
deleted file mode 100644
index db4bb5b90a07ee564e3dbf44db557fb2e3be75ed..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 928
zcmXqLVxD8r#MH8YnTe5!NkAnob;}(i<pmx$R;sf%)IT@iW#iOp^Jx3d%gD&h%3zRY
zC~P3e#>F{Ft#k4xofJk%G3NZDbVDfv2^2xD%#_l+ynNl1)G|XJ11>h^P!?_;W)M%+
zKpDhi=8*|Y%*jkq2u{sOQwYvX&r3~FaL&n0%_~uG^$s<V6X!LwG%z(ZH!?D|G%|@2
z=QT1x;?m6>O^iy&LBPn$z}&>h&tTBR$i>ve$jGocyz6dv_dV6PYdl|G+r3iFzmv^8
zpQB3a$374D?>p{@Km6PJd|r31&J@X$)%$8r_Wt$g_Y8j@Jtbssq3q#~qBUzGmUPv=
zKC_oW#mztEWp!lYy_->jt~cl8_OQu3>sZxs&dPtG#D4Q7-r1sRr!QaQ{pa-CVWX;Q
z?3tJzU$b)4rHqr0{IaS&x*?J6&5ZBM`Ikn&@Dn~O`mc1dsp`{TX&3hOACkHED8cI+
z562vHj#I~YyF}-nUGzjuWYO>Q=20iY+TCXg{d#_c&3p2h?Ppd$4?L3>EK|?R$$nwa
zF=akEfB92y7ntz!opx1of0*ZX*<pXky6^MSQm@s{jJ}v~Xh~xGR3>Id2FAs11}+AC
zz-X1_XJq`(!otkN#9|-};;XWNVxL2sjggg=oteo%79_~WBE}-Z8X9?f=7e6Elak3C
z0uOtw{gZeckV6`n*nlC;$l!6{@kZe(F>Fl*7R_m*XL%as*S<e5ee=)Xh`yC;E0gvJ
zPEI@S!?S0T_5OU`i@VwzcJ^pyD{V1;{@-OPN6?gz>jt+uLMt@go}65L{B{g)`laJ@
zZPs0IvRGkvSwk~^<N8<A|G0HL;xNzANsiEJk}uM`xBM{URGHPT{WloJHoJ4#q|G^{
z@j0(5_qq9eKjo*&+^X}c{0_|eb^7PGPixv&U95CGbS-wP;m44^IM%f03YQfTjlbLv
z9}r#oG5G9{4#|Wj>wBL{4(?>kYgrh`v-{!E={8?p-0~<p+V{`Ks5g<{<1){um@wff
g!Ylq>c;<h-z{5n`#=(7u(;AnzSD8Qm{(kN#03L~BrT_o{

diff --git a/src/Security/Authentication/test/TestCertificates/validSelfSignedNoEkuCertificate.cer b/src/Security/Authentication/test/TestCertificates/validSelfSignedNoEkuCertificate.cer
deleted file mode 100644
index 2be2a46d79922e649ec96ae614b9aa44f6588523..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 930
zcmXqLVxDKv#MHKcnTe5!Ng(dA?y8~)#Xc8R;RlNy&M!CMW#iOp^Jx3d%gD&h%3zRW
zC~P3e#>F{Ft#k4xofJk%G3NZDbVDfv2^2xD%#_l+ynNl1)G|XJ11>h^P!?_;W)M%&
zKpw<n=8*_X%*jkq2u{sOQwYvX&r3~F@XJ?l^$s<V6X!LwG%z(ZH!?D|G%}46=QT1x
z;?l(pO^iy&UT0)wU~XdMXE11D<YH=KWMp`_gz22vC!0xTF(>L5B&!|2G`BtT!|!*h
zdQ-fTFP)k4e?x>gyOZ*ct1q6+THLnd2WMc~<+6xY>Ew`)j1MPUEnPKdRgcTF+mjk<
zIo6*s=05gliAPw%wX<f7_NVhAlAeB=|8M)!&$AiM$8I<=;jH(SRhxM%-sZ91tXTEw
zKc8~ZhO>Pa0;6{(vNs+0y(jq#hmnYY;XIX_<^O|QN^B(Oy?kKzobB2?8NZqa<L^_2
z65JRY6Xf?9cD?OOT7OSME%8r~`<W1q^FAV1$_mZ3>t;Cbdg^sGG=Jl?fA_iGSe{%c
zIJ<IlXV%#c?ZOMY=1uw0x{+}Uf35nWWqz||*u!%K6uW1#=Q1%fGB7R<Fz_?r14gGT
zKO^IR78YhECKdx(5MPx=%s_;VLz|6}m6e^D3C?1KNb|9Xv4}imzUj`Eb~H)nx$wop
z4eMvvN$&iO9Ol5}1`KmX2GuJ;7t{idB^;Hr<Ls%M{ruLI=IN^zg?qCue8ko?`}#4(
zI%d-vzhu8+#T%-XHg%IFP13CXq@RCp^rL}wruLamVb^~rLW1TgFN`?+?FCz!WW=-S
z8`|`5N1U)}+qwTs?&T#JeLCM8)_l>Ci(A>7>TNZTH$P5g%D?0((lL#d=IUNMr|bA0
znbRc|T3M}bzjKG;#hc34LQ)E*@15cJCEp`X?0N0E9mh&SA8x<P{HgfTB>#0$A*xDz
zn^GO0KaJUC%Ch?9!)BH5JJW4+GA~TLy(EdlBH_tV{R5Zx3bTeSJ#_Wg!%ZufR5yKy
foUuix*2(c=(miwK^_wc!9KD*j=ZS{(-gis@(~V)}

diff --git a/src/Security/Authentication/test/TestCertificates/validSelfSignedServerEkuCertificate.cer b/src/Security/Authentication/test/TestCertificates/validSelfSignedServerEkuCertificate.cer
deleted file mode 100644
index 823000d4a1474df454b8468a7f4052bb64c45460..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 928
zcmXqLVxD8r#MH8YnTe5!NuVt5gR29pc88Pv;k^&zPku1qW#iOp^Jx3d%gD&h%3zRY
zC~P3e#>F{Ft#k4xofJk%G3NZDbVDfv2^2xD%#_l+ynNl1)G|XJ11>h^P!?_;W)M%+
zKpDhi=8*|Y%*jkq2u{sOQwYvX&r1cdi^@`q6kNSS4dldm4J{2!4b6>=j4h2!qr`cQ
zOpv&Ab4L@S5^@kQvNA9?G4eAQG%<29H8C<W?0@vYMCD`B;_`ggXVV-UrdE~*NL($^
zzGNd*`}6T_y$iFKU%k>JzWL|eA}+}jtJ7bc)IM5t>-#M6DXX9B%V&SgX;Zzc_I>G^
zaIpaGH!hEj56yd{CckjyiMQt;Puuz=*88|dWr>}2Ou@>1-S13A5BW^4>T9r4P>k7K
zcrIwg-_y$*HVP~h{`7vP?uGo>+eOVDdLA&gK6&Q8+lBMH&KPv|7M+_R5MInUd$;Xe
zJ8Axx4>J6x6&&l~tvl|x>yhr|xofv=`0;Ar!`0{BY+6vd=gZeAIZ2N%Yx`-YuI~Nj
zB(W;)bmaOS$+D4!x(n_zrXOVf`fO7_x2cbBw`71x!MCOJKfV{c%EZjbz_{4Wz{P+M
z7_GAWjEw(TSeTiZSPX<gd{q`u>~m<dF|x9<Gcy{<f&}?k#8^ah&Rx2j_bhUeMXpEw
zws$NW%^ANxM-FLVVgrUWBLmaIO|utOhndX%`%T1K-PPoK_rk|hCpo=yGuqa@<(|2*
zasHlmi@=AviJ^uU{`}zmb836qx<$1&tJwEB*vza|eQ&2UUBma-xsCCYzSZsfvVLj*
zoFv|TZ(HO49dpZh%GnkWrqBO>cE5Da$LE*hYNf9CyX`ZT=wk1a(23k8Wqc{nCeA5U
zontna$kl-0>K5Pi8GAe43su~jV0^1ltoL=(kL^EOKMKuz#pTDj)MLFvPJ<L@$or+2
z|80M~qk-AS!_3pb@ovh2m)sLr!+-fO<sOw1tJYBUv<SRa#p3pO_haLKpFO;H{Cf24
f++wo`E)$ysM&3O?4sk3!-En_b(>mc?8-*YM3Xf@w

diff --git a/src/Shared/test/Certificates/selfSignedNoEkuCertificateNotValidYet.cer b/src/Shared/test/Certificates/selfSignedNoEkuCertificateNotValidYet.cer
index 9c8cf9d71b2218acdd8c6b208677a0e6aea68ade..19ee0adcef1b8ea5795c502f455c2ff15fe280e7 100644
GIT binary patch
delta 647
zcmV;20(kwT2c!odFoFZ1FoFVzpaTK{0s;^`m{!h?Pr|%OC}X%S&xiSuA9x%yF)%eT
zI59agH#9j~7Y#EqFf}naF*!0fG&x$4E@qP%0U&>*B_emJYPIb%@`RYvS|axbVF*+C
z5`t~3O!Bd=YcRHy5>YJWOhNr#xamYbeA6-KOn`qdbyH^gT;v4JP_T#r2;Yq+lrj{8
z4Rh-^B1U$!a>&dt+zmAN0PB3idPG%zfq#`a=E{0;Vu-)OGa*qD`Zp}LD|utk?=w;g
zqj!G|z9FCdOQe1@>68rHsr<5B)?o?Z<|NrsntzxwKX^v{l{hsL9nk%y`10CcBx(*T
zFwUAbHAO?%8g>nqfkCW|<QJ9Ic5$y&kkbmkk+*D70H-9xy~Y2VO0B#tO{4+p^VTJw
z9G$*nml$AnzHu)V>eAMe5v8t@%1h`2DBv6S;Q|8z00E;=FitQI1_M<c4*>!H1Ox*D
z2Y{1O0xA?>37O80rCH@ZuU^MeZdGqjWw$YtkOCBcRniXTnJvA?Y`cf})p=i;a1vC9
zLHcZPu{|bdNyAc@qsJ%07K~lrEmSnzMHLF?fQM6D5E{kkE;pl4MH=XHy5vbr&Hfy%
z7PlDc$+`(q%}&Lc;|5q>iqVS*WzB(R4Tyt2-o$9xB-vMjH!-Lusu7R>IoI_^{{gA;
z7g}0>S9OwhAK6xqoLwOAW*I|J*C>TO3bSZyt}(2)1P!mMV(gClSZE3Z$~{C&f$tS-
zqn&kVxgQCp^%qFU-}vAyuJd3>U;6L{)E>t<l{ITj(R6bUq_M1TFD`d`uGrYBXNmNN
hU-b^9o)u9g@XEuFVtPP<0DVQShPVS*+?O!|()YurA}{~|

delta 647
zcmV;20(kwT2c!odFoFZ1FoFVzpaTK{0s;^-XDa2Q16qznBxvyV<HFOCA9x%xF)%eT
zH!?CaIWjg{7Y#BpFf}nZGBPtcGB#R~E@qP%0U&>u;8b1$KNo0{qdDQP)&V;(8zZ7<
zo<$d7RT22c-7^hy*{gqoo@w-YI7arAkzM^zD`+IGy*8G%Nu}<d3)TZnCp2r#tkZ|c
zZdP*ksqWD~V-u=K$24@5tdekZ#m>`>LoM+A16N&j@+Yw{Vt<BvQ`_EOIRtBZ+pwbG
z7zKa8&m~D>vl#}(b(LH^VQYmNc2pP`SM^V=FXHhQKhd;O&xJ%w$0*-=VcGOce5|4S
z_Yo=4UJ$+4{*lfP1&F@8*mJODU~crKX<Rk5nH<n?8gBoHrf?@dAe~TenSim=FKA6G
zO%5Xm5#K&;uwSRAZhAO1$vRPuL6wWDyqO#4X#xWQ00E;=FitQI1_M<c4*>!H1Ox*D
z0tAy%0xA^mgp2Ql1PR*IXL~m}nTdT-TCz-&kOCBcccaDHcT{N0Bcj^$D7jnui%Qzf
zz%i3zI?)0<t~|PUu+D3dgie>I_mZ!v_D7xn9*MKAQ==5cgxOiAOc0GUCUw>Z{x3W+
z*vzdTW4x<plBXwja@|K2t}w>H>p$Jh5<0*P5vX*@9?0zmM`|l1A^nn@Wql!qQ+DDY
zZC%lSz#5^I#~m;n0(a<VmdR`*V<aeZT=%Za;*r_bshzHnFF_sVjN4i&vtz(h*0411
zq{u<+6=H7G4>xBLCI2!WV3#!h=BO;CgrYV`H$`0pmHkiPLJG*H-IcoCw9P-$9sqS;
hfmDkCht(Br&lS*-U6=x9hJV!xYY5h9rG4ZA1o4L5B6a`(


From cf546bc7a8755820818038bea59e251deaedb574 Mon Sep 17 00:00:00 2001
From: Hao Kung <HaoK@users.noreply.github.com>
Date: Tue, 18 May 2021 13:39:46 -0700
Subject: [PATCH 4/6] Skip test for now

---
 src/Security/Authentication/test/CertificateTests.cs | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/Security/Authentication/test/CertificateTests.cs b/src/Security/Authentication/test/CertificateTests.cs
index fc4d189a1f3f..31300114d475 100644
--- a/src/Security/Authentication/test/CertificateTests.cs
+++ b/src/Security/Authentication/test/CertificateTests.cs
@@ -179,7 +179,8 @@ public async Task VerifyExpiredSelfSignedPassesIfDateRangeValidationIsDisabled()
             Assert.Equal(HttpStatusCode.OK, response.StatusCode);
         }
 
-        [Fact]
+        [ConditionalFact]
+        [SkipOnHelix("https://github.com/dotnet/aspnetcore/issues/32813")]
         public async Task VerifyNotYetValidSelfSignedFails()
         {
             var server = CreateServer(

From ca429f2d90d8e6b608e664c0f0a496ffbbca9642 Mon Sep 17 00:00:00 2001
From: Hao Kung <HaoK@users.noreply.github.com>
Date: Wed, 26 May 2021 15:10:23 -0700
Subject: [PATCH 5/6] Skip test since it fails on linux

---
 src/Security/Authentication/test/CertificateTests.cs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/Security/Authentication/test/CertificateTests.cs b/src/Security/Authentication/test/CertificateTests.cs
index 31300114d475..3689db139dd8 100644
--- a/src/Security/Authentication/test/CertificateTests.cs
+++ b/src/Security/Authentication/test/CertificateTests.cs
@@ -180,7 +180,7 @@ public async Task VerifyExpiredSelfSignedPassesIfDateRangeValidationIsDisabled()
         }
 
         [ConditionalFact]
-        [SkipOnHelix("https://github.com/dotnet/aspnetcore/issues/32813")]
+        [OSSkipCondition(OperatingSystems.Linux)]
         public async Task VerifyNotYetValidSelfSignedFails()
         {
             var server = CreateServer(

From 39a7dbc90fdcdf3103c6928b03f9b9bf287d40fb Mon Sep 17 00:00:00 2001
From: William Godbe <wigodbe@microsoft.com>
Date: Tue, 1 Jun 2021 10:10:52 -0700
Subject: [PATCH 6/6] Update branding to 3.1.17

---
 eng/Versions.props | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/eng/Versions.props b/eng/Versions.props
index 2ebefb437105..7b1aa91ceadb 100644
--- a/eng/Versions.props
+++ b/eng/Versions.props
@@ -8,8 +8,9 @@
   <PropertyGroup Label="Version settings">
     <AspNetCoreMajorVersion>3</AspNetCoreMajorVersion>
     <AspNetCoreMinorVersion>1</AspNetCoreMinorVersion>
-    <AspNetCorePatchVersion>16</AspNetCorePatchVersion>
-    <ValidateBaseline>true</ValidateBaseline>
+    <AspNetCorePatchVersion>17</AspNetCorePatchVersion>
+    <!-- This property should be 'false' between branding & code-merging, 'true' the rest of the time -->
+    <ValidateBaseline>false</ValidateBaseline>
     <PreReleasePreviewNumber>0</PreReleasePreviewNumber>
     <ComponentsWebAssemblyMajorVersion>3</ComponentsWebAssemblyMajorVersion>
     <ComponentsWebAssemblyMinorVersion>2</ComponentsWebAssemblyMinorVersion>