Update expired certificates

[bbondy]

Summary

When I ran the grants container I got these errors:

DBG failed to dial: x509: certificate has expired or is not yet valid: current time 2024-10-29T18:07:57Z is after 2024-04-02T16:18:51Z module=kafka.NewKafkaReader
DBG Unable to establish connection to consumer group coordinator for group grant-bat-skus-local: failed to dial: x509: certificate has expired or is not yet valid: current time 2024-10-29T18:08:02Z is after 2024-04-02T16:18:51Z module=kafka.NewKafkaReader
DBG failed to dial: x509: certificate has expired or is not yet valid: current time 2024-10-29T18:08:02Z is after 2024-04-02T16:18:51Z module=kafka.NewKafkaReader

I verified that the certificates were expired:

$ openssl x509 -in test/secrets/snakeoil-ca-1.crt -noout -text | grep 'Not'
            Not Before: Apr  3 16:18:51 2023 GMT
            Not After : Apr  2 16:18:51 2024 GMT

To regenerate the certificates I used test/secrets/README.md

Type of Change

• Product feature
• Bug fix
• Performance improvement
• Refactor
• Other

Tested Environments

• Development
• Staging
• Production

Before Requesting Review

• Does your code build cleanly without any errors or warnings?
• Have you squashed all intermediate commits?
• Is there a clear title that explains what the PR does?
• Have you performed a self review of this PR?

Not applicable:

• Have you used auto closing keywords?
• Have you added tests for new functionality?
• Have validated query efficiency for new database queries?
• Have documented new functionality in README or in comments?
• Have you used intuitive function, variable and other naming?
• Have you requested security and/or privacy review if needed

Manual Test Plan

[github-actions]

_{reported by reviewdog 🐶}
[semgrep] Private Key detected. This is a sensitive credential and should not be hardcoded here. Instead, store this in a separate, private file.

Source: https://semgrep.dev/r/generic.secrets.security.detected-private-key.detected-private-key


Cc @thypon @kdenhartog

[bbondy]

test keys and already in the repo and using a script to be generated

[github-actions]

_{reported by reviewdog 🐶}
[semgrep] Private Key detected. This is a sensitive credential and should not be hardcoded here. Instead, store this in a separate, private file.

Source: https://semgrep.dev/r/generic.secrets.security.detected-private-key.detected-private-key


Cc @thypon @kdenhartog

[bbondy]

test keys and already in the repo and using a script to be generated

[kdenhartog]

These certs are for testing, not concerned.

[clD11]

LGTM approved.

[github-actions]

[puLL-Merge] - brave-intl/bat-go@2701

Description

This PR updates various certificates and keys used for testing purposes in the bat-go repository. The changes involve regenerating certificates, keys, and related files with new expiration dates and updated content.

Changes

Changes

1. test/secrets/broker1-ca1-signed.crt

   • Updated certificate with new expiration date and content

2. test/secrets/broker1.csr

   • Updated certificate signing request with new content

3. test/secrets/consumer-ca1-signed.crt

   • Updated certificate with new expiration date and content

4. test/secrets/consumer-ca1-signed.pem

   • Updated certificate with new expiration date and content

5. test/secrets/consumer.client.key

   • Updated private key

6. test/secrets/consumer.client.req

   • Updated certificate request

7. test/secrets/consumer.csr

   • Updated certificate signing request

8. test/secrets/kafka.broker1.keystore.jks, kafka.broker1.truststore.jks, kafka.consumer.keystore.jks, kafka.consumer.truststore.jks, kafka.producer.keystore.jks, kafka.producer.truststore.jks

   • Updated Java KeyStore files

9. test/secrets/producer-ca1-signed.crt

   • Updated certificate with new expiration date and content

10. test/secrets/producer.csr

    • Updated certificate signing request

11. test/secrets/snakeoil-ca-1.crt

    • Updated root CA certificate with new expiration date and content

12. test/secrets/snakeoil-ca-1.key

    • Updated encrypted private key for root CA

13. test/secrets/snakeoil-ca-1.srl

    • Updated serial number file

These changes appear to be routine updates to test certificates and keys, likely to ensure they remain valid for ongoing testing purposes.