[Asterisk-code-review] secure calling: Add nominal call tests (testsuite[master])
Jenkins2
asteriskteam at digium.com
Thu Dec 14 05:15:24 CST 2017
Jenkins2 has submitted this change and it was merged. ( https://gerrit.asterisk.org/7474 )
Change subject: secure_calling: Add nominal call tests
......................................................................
secure_calling: Add nominal call tests
Also correct issues with some tests.yaml related to previously
moving the srtp tests to secure_calling.
Also regenerated the keys and certs to make them easier to use
for tests where both CAs are required.
Change-Id: Id25b4811ed075223ed77635a25e04e2d3abb4e55
---
M configs/keys/README.txt
A configs/keys/ca-bundle.crt
A configs/keys/ca1.crt
D configs/keys/ca1/ast1.crt
D configs/keys/ca1/ast1.csr
D configs/keys/ca1/ast1.key
D configs/keys/ca1/ast1.pem
D configs/keys/ca1/ast2.crt
D configs/keys/ca1/ast2.csr
D configs/keys/ca1/ast2.key
D configs/keys/ca1/ast2.pem
D configs/keys/ca1/ast3.crt
D configs/keys/ca1/ast3.csr
D configs/keys/ca1/ast3.key
D configs/keys/ca1/ast3.pem
D configs/keys/ca1/ast4.crt
D configs/keys/ca1/ast4.csr
D configs/keys/ca1/ast4.key
D configs/keys/ca1/ast4.pem
D configs/keys/ca1/ca.crt
D configs/keys/ca1/ca.key
R configs/keys/ca1/ca1-ast1.cfg
A configs/keys/ca1/ca1-ast1.crt
A configs/keys/ca1/ca1-ast1.csr
A configs/keys/ca1/ca1-ast1.key
A configs/keys/ca1/ca1-ast1.pem
C configs/keys/ca1/ca1-ast2.cfg
A configs/keys/ca1/ca1-ast2.crt
A configs/keys/ca1/ca1-ast2.csr
A configs/keys/ca1/ca1-ast2.key
A configs/keys/ca1/ca1-ast2.pem
C configs/keys/ca1/ca1-ast3.cfg
A configs/keys/ca1/ca1-ast3.crt
A configs/keys/ca1/ca1-ast3.csr
A configs/keys/ca1/ca1-ast3.key
A configs/keys/ca1/ca1-ast3.pem
C configs/keys/ca1/ca1-ast4.cfg
A configs/keys/ca1/ca1-ast4.crt
A configs/keys/ca1/ca1-ast4.csr
A configs/keys/ca1/ca1-ast4.key
A configs/keys/ca1/ca1-ast4.pem
C configs/keys/ca1/ca1.cfg
A configs/keys/ca1/ca1.crt
A configs/keys/ca1/ca1.key
D configs/keys/ca1/tmp.cfg
A configs/keys/ca2.crt
D configs/keys/ca2/ast1.crt
D configs/keys/ca2/ast1.csr
D configs/keys/ca2/ast1.key
D configs/keys/ca2/ast1.pem
D configs/keys/ca2/ast2.crt
D configs/keys/ca2/ast2.csr
D configs/keys/ca2/ast2.key
D configs/keys/ca2/ast2.pem
D configs/keys/ca2/ast3.crt
D configs/keys/ca2/ast3.csr
D configs/keys/ca2/ast3.key
D configs/keys/ca2/ast3.pem
D configs/keys/ca2/ast4.crt
D configs/keys/ca2/ast4.csr
D configs/keys/ca2/ast4.key
D configs/keys/ca2/ast4.pem
D configs/keys/ca2/ca.cfg
D configs/keys/ca2/ca.crt
D configs/keys/ca2/ca.key
C configs/keys/ca2/ca2-ast1.cfg
A configs/keys/ca2/ca2-ast1.crt
A configs/keys/ca2/ca2-ast1.csr
A configs/keys/ca2/ca2-ast1.key
A configs/keys/ca2/ca2-ast1.pem
C configs/keys/ca2/ca2-ast2.cfg
A configs/keys/ca2/ca2-ast2.crt
A configs/keys/ca2/ca2-ast2.csr
A configs/keys/ca2/ca2-ast2.key
A configs/keys/ca2/ca2-ast2.pem
C configs/keys/ca2/ca2-ast3.cfg
A configs/keys/ca2/ca2-ast3.crt
A configs/keys/ca2/ca2-ast3.csr
A configs/keys/ca2/ca2-ast3.key
A configs/keys/ca2/ca2-ast3.pem
C configs/keys/ca2/ca2-ast4.cfg
A configs/keys/ca2/ca2-ast4.crt
A configs/keys/ca2/ca2-ast4.csr
A configs/keys/ca2/ca2-ast4.key
A configs/keys/ca2/ca2-ast4.pem
C configs/keys/ca2/ca2.cfg
A configs/keys/ca2/ca2.crt
A configs/keys/ca2/ca2.key
D configs/keys/ca2/tmp.cfg
D configs/keys/chain.pem
A configs/keys/dcacca01.0
A configs/keys/ee95348a.0
A configs/keys/ee95348a.1
A configs/keys/gen_ca_and_certs
A tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast1/ca1-ast1.crt
A tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast1/ca1-ast1.key
A tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast1/ca1.crt
A tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast1/extensions.conf
A tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast1/pjsip.conf
A tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast2/ca1-ast2.crt
A tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast2/ca1-ast2.key
A tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast2/ca1.crt
A tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast2/extensions.conf
A tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast2/pjsip.conf
A tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast3/ca1-ast3.crt
A tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast3/ca1-ast3.key
A tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast3/ca1.crt
A tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast3/extensions.conf
A tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast3/pjsip.conf
A tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/test-config.yaml
A tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast1/ca1-ast1.crt
A tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast1/ca1-ast1.key
A tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast1/ca1.crt
A tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast1/extensions.conf
A tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast1/pjsip.conf
A tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast2/ca1-ast2.crt
A tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast2/ca1-ast2.key
A tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast2/ca1.crt
A tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast2/extensions.conf
A tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast2/pjsip.conf
A tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast3/ca1-ast3.crt
A tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast3/ca1-ast3.key
A tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast3/ca1.crt
A tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast3/extensions.conf
A tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast3/pjsip.conf
A tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/test-config.yaml
A tests/channels/pjsip/secure_calling/calls/nominal/tests.yaml
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast1/ca1-ast1.crt
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast1/ca1-ast1.key
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast1/ca1.crt
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast1/extensions.conf
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast1/pjproject.conf
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast1/pjsip.conf
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast2/ca1-ast2.crt
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast2/ca1-ast2.key
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast2/ca1.crt
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast2/dcacca01.0
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast2/extensions.conf
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast2/pjsip.conf
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast3/ca2-ast3.crt
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast3/ca2-ast3.key
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast3/ca2.crt
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast3/ee95348a.0
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast3/extensions.conf
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast3/pjsip.conf
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/test-config.yaml
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast1/ca1-ast1.crt
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast1/ca1-ast1.key
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast1/ca1.crt
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast1/extensions.conf
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast1/pjproject.conf
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast1/pjsip.conf
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/ca-bundle.crt
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/ca1-ast2.crt
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/ca1-ast2.key
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/ca1.crt
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/dcacca01.0
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/extensions.conf
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/pjsip.conf
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/0331b2fb.0
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/ca1.crt
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/ca2-ast3.crt
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/ca2-ast3.key
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/ca2.crt
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/dcacca01.0
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/ee95348a.0
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/extensions.conf
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/pjsip.conf
A tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/test-config.yaml
A tests/channels/pjsip/secure_calling/calls/tests.yaml
A tests/channels/pjsip/secure_calling/tests.yaml
M tests/channels/pjsip/tests.yaml
172 files changed, 2,282 insertions(+), 922 deletions(-)
Approvals:
Kevin Harwell: Looks good to me, but someone else must approve
Joshua Colp: Looks good to me, approved
Jenkins2: Approved for Submit
diff --git a/configs/keys/README.txt b/configs/keys/README.txt
index 841cdad..a44778c 100644
--- a/configs/keys/README.txt
+++ b/configs/keys/README.txt
@@ -1,10 +1,6 @@
These files can be used by any tests needing them. They were
-created using the ast_tls_cert script located in the asterisk
-source directory under contrib/scripts. The password for the
-ca.key files is 'cakey'.
-
-Example:
-ast_tls_cert -C 127.0.0.1 -O ast1 -o ast1
+created using the gen_ca_and_certs script which recreates all
+keys and certs.
There are 2 subdirectories ca1 and ca2. This allows asterisk to
use keys from different CAs to test verification.
@@ -12,7 +8,7 @@
This directory (configs/keys) is ignored by the configs install
function to prevent the files from being unnecessarily copied to
every test in the testsuite. To use them from individual tests,
-simply create RELATIVE symlinks to them from your test's
+simply create RELATIVE symlinks or copy to your test's
configs/astX directory. They'll then be copied automatically to the
test's etc/asterisk directory. To reference them from other config
files, use the "<<astetcdir>>" replaceable parameter.
@@ -20,9 +16,9 @@
Example:
$ cd tests/channels/pjsip/mytest/configs/ast1
-$ ln -s ln -s ../../../../../../configs/keys/ca1/ca.crt
-$ ln -s ln -s ../../../../../../configs/keys/ca1/ast1.crt
-$ ln -s ln -s ../../../../../../configs/keys/ca1/ast1.key
+$ ln -s ln -s ../../../../../../configs/keys/ca1/ca1.crt
+$ ln -s ln -s ../../../../../../configs/keys/ca1/ca1-ast1.crt
+$ ln -s ln -s ../../../../../../configs/keys/ca1/ca1-ast1.key
Then edit tests/channels/pjsip/mytest/configs/ast1/pjsip.conf
and add a transport...
@@ -34,12 +30,19 @@
cipher = AES128-CCM <snip>
priv_key_file = <<astetcdir>>/ast1.key
cert_file = <<astetcdir>>/ast1.crt
-ca_list_file = <<astetcdir>>/ca.crt
+ca_list_file = <<astetcdir>>/ca1.crt
verify_client = no
verify_server = no
require_client_cert = no
async_operations = 20
bind = 127.0.0.1:5061
-You can also use the chain.pem file if you need the ca.crt files
-from both ca1 and ca2.
+If you need to use more than 1 ca cert file, either copy or link to the
+ca-bundle.crt file or link or copy both ca1.crt and ca2.crt to your directory
+and run:
+$ c_rehash .
+
+This will create the necessary links to use the directory as a "path":
+ca_list_path = <<astetcdir>>/
+
+
diff --git a/configs/keys/ca-bundle.crt b/configs/keys/ca-bundle.crt
new file mode 100644
index 0000000..4b0d89d
--- /dev/null
+++ b/configs/keys/ca-bundle.crt
@@ -0,0 +1,220 @@
+Certificate:
+ Data:
+ Version: 1 (0x0)
+ Serial Number:
+ c6:83:cf:94:7a:51:49:45
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN = Asterisk Private CA ca1, O = Asterisk
+ Validity
+ Not Before: Dec 6 22:22:54 2017 GMT
+ Not After : Dec 4 22:22:54 2027 GMT
+ Subject: CN = Asterisk Private CA ca1, O = Asterisk
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (4096 bit)
+ Modulus:
+ 00:c5:a7:cd:49:08:aa:14:b9:ed:50:00:cf:8d:8d:
+ 78:8f:dd:b6:ba:75:d5:71:41:b9:78:5f:b5:45:fd:
+ 88:ca:82:a4:9a:81:cd:4c:9e:58:b8:3d:f8:ef:4e:
+ 65:22:b5:1c:d3:ab:26:5b:22:c8:6c:b2:ce:fc:9f:
+ d1:52:7c:cd:db:d9:60:92:af:56:b4:70:b8:6c:ca:
+ d9:cb:82:fa:7e:a1:d4:c0:0a:48:42:a4:f7:ae:47:
+ 0d:8d:4c:66:7d:41:d0:8c:1f:93:fa:07:67:be:eb:
+ 99:37:e1:63:57:87:91:cb:0d:d3:e0:0a:6a:26:42:
+ 10:51:92:46:58:a4:13:61:4e:ad:82:d1:3c:24:ce:
+ b0:c7:30:59:a4:a2:72:98:49:c1:73:c8:b8:40:12:
+ d2:e6:b3:e9:4f:56:f6:be:dc:93:5e:a9:77:e7:fa:
+ 90:29:0b:fd:54:8a:94:ac:96:b6:de:09:14:75:35:
+ d7:6e:e2:53:cc:3a:6d:0c:20:f6:b3:b4:22:d8:00:
+ 2c:bb:28:d4:84:09:3a:9c:21:27:3a:81:13:7a:0f:
+ d1:9c:3e:8b:f6:fa:3a:b6:af:82:a1:3f:5c:c0:6b:
+ c3:04:36:7d:fc:6c:41:41:da:b4:97:8b:07:2f:8b:
+ 38:89:d2:3f:e1:a1:4f:26:a3:87:99:ad:bc:f3:1a:
+ 05:7e:5c:a5:05:8f:c7:e4:c0:01:76:91:e5:8c:5b:
+ 5e:c0:d9:64:c1:10:c3:2b:3d:d9:23:28:b2:e8:4a:
+ 43:44:a7:ac:be:89:75:4f:08:5b:97:86:c3:3c:88:
+ 3b:16:67:4f:9f:2f:d0:4b:97:ab:f8:b1:c5:a0:7e:
+ e8:79:e6:6f:77:d6:86:d2:60:00:2c:78:1d:fb:eb:
+ bc:d0:25:07:34:e2:fc:85:ea:58:9e:15:73:65:92:
+ 04:68:8b:1a:d5:0a:a3:90:df:4e:4e:94:fa:c5:74:
+ 28:0e:77:20:6c:09:84:0e:54:3e:00:db:1f:8a:90:
+ d9:12:a1:ad:9f:67:ae:fa:8c:9b:72:51:a9:78:65:
+ 84:ef:99:de:59:d3:24:64:7b:19:8c:de:ca:32:52:
+ 16:82:66:d7:d8:c2:55:f3:78:fd:a5:b7:7c:b3:87:
+ ac:c7:c8:6f:d7:b6:a5:b0:d7:4a:e5:1a:03:ef:47:
+ f1:33:66:b7:be:d7:75:79:27:9f:6c:13:b1:6f:3f:
+ df:b7:be:3b:31:17:12:e4:67:48:11:04:9e:35:4b:
+ 78:8f:e4:dd:a4:93:7c:50:ef:51:08:90:27:56:5f:
+ 8e:d1:bb:6f:65:90:4d:1e:ff:1e:56:0d:e2:05:df:
+ 24:6f:de:7d:48:c4:7a:c6:59:45:a0:dd:91:6b:a2:
+ 3e:fa:ad
+ Exponent: 65537 (0x10001)
+ Signature Algorithm: sha256WithRSAEncryption
+ 22:26:40:2e:16:5d:7c:a9:28:b3:d6:d4:68:f4:fb:72:3f:31:
+ 4e:26:bb:e6:28:66:6c:d8:80:d9:5b:2c:64:d6:b0:e1:c0:24:
+ 46:bf:2c:c9:70:88:fe:9c:95:e3:56:15:09:a7:34:34:07:cd:
+ 2d:e6:81:02:5a:53:7c:83:fd:0d:0d:12:75:12:dc:5a:d0:4a:
+ 56:c3:4f:3e:d7:7e:47:45:e4:64:30:60:6d:41:cd:24:51:3c:
+ 2d:ee:1f:58:4c:6b:5b:5a:83:71:f1:ec:69:91:70:71:fd:35:
+ d4:99:82:e6:d4:0a:54:76:a8:7e:b9:4f:2b:a3:dc:54:27:38:
+ 89:3b:4d:6a:cc:03:b9:1d:46:ae:61:cd:4c:cb:18:19:af:dd:
+ 27:26:f7:2a:b7:35:d0:5c:74:e0:db:27:a8:9a:1b:67:01:e2:
+ 23:c5:26:71:2d:aa:bb:32:47:11:c0:b3:8d:21:6f:76:13:ce:
+ de:18:c2:42:e8:a6:f8:dc:4b:92:80:f4:c0:f6:5d:eb:1e:30:
+ 60:a0:f0:79:99:e6:97:2b:3b:9b:f4:28:e9:4d:da:33:fa:92:
+ 2b:91:8d:4b:25:53:f0:ee:3a:cb:73:54:a5:2b:40:37:b2:24:
+ 01:2d:cd:e6:6e:e4:45:e2:c8:7d:ba:56:84:94:3e:29:da:b1:
+ c8:c2:39:66:00:b2:0e:30:c3:8d:3c:3b:35:9f:93:cd:75:59:
+ 7d:87:74:da:e5:2f:bb:ec:ee:e4:6d:d4:f6:7f:78:10:8b:86:
+ f2:f1:bc:39:de:73:9f:7a:69:a9:4a:bd:66:25:ad:08:83:06:
+ 00:1f:df:74:90:e6:67:49:15:2a:f0:76:77:08:ff:d1:89:9e:
+ f4:dd:91:a2:71:09:3f:27:ca:5c:f6:a8:fb:89:b0:09:3a:f2:
+ bc:14:fb:77:2c:f2:3f:71:47:ce:6b:f6:33:8f:3f:11:cd:13:
+ 6f:62:c7:f0:28:90:e3:80:38:b7:9c:da:88:9c:45:9e:30:23:
+ 55:24:0a:9f:4a:d1:c3:35:74:7b:3f:b3:dc:50:d4:d3:8e:fd:
+ 2b:1b:5b:58:34:c0:5e:fb:65:b3:0b:11:3f:9a:5a:1c:d9:ed:
+ c0:a5:e8:27:cf:25:d7:3a:a3:db:c3:cf:69:26:fd:49:3d:f2:
+ 35:8e:32:9d:c4:36:dc:21:8d:56:8e:b9:7c:9f:bb:f0:f5:d9:
+ e3:6e:8f:04:a9:e2:d7:e8:d1:2f:37:24:92:74:65:d8:38:bb:
+ 25:e6:6d:b7:c4:fe:70:e3:f0:86:44:2a:ff:c0:42:0f:3a:f5:
+ 63:32:ae:2c:b2:b4:58:10:f2:ee:a2:71:9f:77:8f:c1:d7:84:
+ 5f:26:b2:1f:6f:77:9c:8f
+-----BEGIN TRUSTED CERTIFICATE-----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+-----END TRUSTED CERTIFICATE-----
+Certificate:
+ Data:
+ Version: 1 (0x0)
+ Serial Number:
+ b4:f8:dc:e4:55:d0:6c:45
+ Signature Algorithm: sha256WithRSAEncryption
+ Issuer: CN = Asterisk Private CA ca2, O = Asterisk
+ Validity
+ Not Before: Dec 6 22:22:55 2017 GMT
+ Not After : Dec 4 22:22:55 2027 GMT
+ Subject: CN = Asterisk Private CA ca2, O = Asterisk
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ Public-Key: (4096 bit)
+ Modulus:
+ 00:bc:8c:e4:37:a4:9b:8e:6c:b9:b0:1b:ae:1b:82:
+ 68:4d:f7:4b:b9:25:6a:c2:14:45:4c:44:a0:67:ee:
+ 19:49:bd:6b:0d:30:05:26:d7:17:91:50:1c:95:30:
+ 9e:84:ef:7e:39:fc:15:8f:3c:f1:4c:04:aa:51:0c:
+ d5:ec:e7:4a:81:c7:45:dd:e0:4f:50:cb:69:3c:05:
+ d6:0c:2e:d1:6c:fe:17:1b:5a:13:e3:c8:46:1b:70:
+ 65:35:8d:e2:3a:2e:32:51:6f:38:da:ea:cc:4e:eb:
+ 60:24:ab:00:9e:e9:5d:8b:a9:4a:3c:d9:ad:0f:ff:
+ 4e:5e:de:7f:6e:45:c6:4b:bd:18:d1:ff:44:1d:4f:
+ f8:0d:0e:8a:db:96:87:08:5a:c5:45:f5:61:7e:33:
+ 64:68:9a:4a:99:59:cd:f6:60:32:71:54:95:22:c2:
+ 99:5c:2b:4c:08:f8:48:69:65:c5:ed:29:56:fb:b3:
+ fb:16:72:ff:a8:aa:f8:f0:e5:36:3f:b6:81:ae:3c:
+ b6:81:dd:df:b5:ed:82:4f:8c:cb:78:34:93:24:a5:
+ 2e:20:09:94:52:ef:d2:ca:8a:db:87:4b:21:72:ee:
+ 53:ef:81:50:f2:1b:7d:7b:5e:e8:9e:71:dd:db:e8:
+ ac:60:a4:07:a0:05:df:b5:4e:06:c8:96:96:5b:3b:
+ ca:f3:41:ef:4c:1f:a0:d8:f0:ff:8a:91:06:25:c5:
+ 08:c2:5c:a5:d5:d1:b1:7a:d8:ef:b0:41:a5:61:dc:
+ b7:91:2e:04:f6:60:52:c0:a6:ec:b1:14:e3:45:c1:
+ b4:40:06:d3:39:d9:23:3f:88:ad:31:da:5f:0d:c8:
+ 67:d5:ed:04:4c:e4:8f:40:41:66:23:a3:46:61:8b:
+ 2d:0f:89:b5:46:b5:8a:e3:06:5d:89:b9:c9:06:f0:
+ 61:7b:d5:0f:72:18:44:e6:88:4f:e5:0e:34:81:bb:
+ bd:81:3f:ce:f1:b9:18:cf:b6:c6:ea:c7:43:3f:a6:
+ 04:00:56:c0:58:36:28:39:49:1d:2a:d1:3d:e0:be:
+ 99:d6:75:99:4d:5e:5a:25:c5:31:9a:1a:2e:58:45:
+ e3:16:b2:12:1f:23:0c:f3:00:2d:2f:22:ba:ae:4e:
+ b4:69:14:84:d5:31:e4:73:b0:90:45:92:de:b9:97:
+ 49:8d:32:f6:3b:60:d2:bb:1a:f9:6a:dd:0e:ee:4c:
+ 28:fa:89:b0:57:1c:fa:d3:5f:c6:da:91:0f:25:31:
+ ee:88:76:d9:98:44:ab:e0:7f:d3:92:67:dd:bb:10:
+ 1c:a6:44:e4:e7:d7:5f:0c:bb:fb:df:2e:ae:40:12:
+ 54:1b:88:a2:91:3c:20:c8:f8:1e:4c:2f:57:56:c3:
+ e0:78:ab
+ Exponent: 65537 (0x10001)
+ Signature Algorithm: sha256WithRSAEncryption
+ 2f:a9:8f:ed:ac:08:0c:dc:2e:a1:dc:16:53:d0:61:a9:e8:9f:
+ 51:da:0c:49:ac:0d:d3:99:52:14:b5:90:62:1f:f4:20:0f:c8:
+ 91:da:0c:e7:d9:d1:78:02:60:c0:26:2e:b3:cf:ea:90:0d:d2:
+ 5f:24:d4:8b:68:0a:47:61:a5:98:b7:ff:75:51:0c:d5:59:66:
+ c0:81:80:07:1c:fb:d5:af:a2:c5:67:8a:ad:e3:93:6f:62:16:
+ a8:41:85:95:81:c8:4c:f3:14:52:a0:a9:e4:af:59:66:91:66:
+ 3f:6f:29:a5:eb:7a:75:bf:67:0c:a9:9a:d1:0e:fa:3c:0d:78:
+ 09:e4:34:5d:dd:2b:09:ed:6b:a1:4b:77:58:81:f9:7f:88:bf:
+ 48:9e:ca:28:74:c8:6b:e3:bf:a4:71:8d:d3:14:be:cb:11:d4:
+ e2:40:15:3e:c4:64:c3:25:ae:96:0c:cf:3c:91:6b:d9:e8:24:
+ 61:34:bb:c1:50:44:8b:27:25:73:fc:25:1b:26:f9:a0:3b:fb:
+ 25:ac:46:41:ac:d7:31:84:77:bd:82:f8:a5:2f:ec:cc:db:54:
+ 34:b5:f9:c8:9e:29:be:cf:e9:05:8e:c1:9a:03:a6:93:62:f5:
+ 9a:80:6b:71:31:41:53:96:c0:4c:e1:dc:fb:04:ad:52:52:b8:
+ 1a:d5:37:ca:ba:07:91:7d:cf:3b:51:fb:0e:43:26:0a:fa:50:
+ 14:1f:2b:33:d2:e7:ce:c5:d4:1a:c2:80:9d:83:cb:82:2b:cb:
+ 53:09:ea:1e:3a:b9:73:0f:37:af:49:08:79:03:5b:bd:93:1d:
+ 28:26:99:a7:41:7e:81:0d:bc:09:37:a1:95:a3:a1:35:aa:2d:
+ 3b:f4:34:ba:d2:9c:28:12:57:44:53:8b:e3:87:72:41:e4:a5:
+ 5a:57:12:11:77:9a:65:ea:68:0c:3e:cd:d9:70:8d:89:c2:4f:
+ 03:9c:0b:dd:a3:31:b9:ad:fb:0a:5f:0c:d4:09:fe:38:16:d8:
+ 5e:f8:55:fc:48:7a:e9:89:3c:1d:b0:f0:6e:fb:cd:88:31:86:
+ 13:47:1c:eb:d9:d2:be:3c:91:67:ea:79:70:e6:06:11:8e:fe:
+ 01:86:05:a2:b6:34:9e:28:2e:a8:df:1b:65:2c:ce:fa:51:5b:
+ d3:f9:bd:cb:00:50:da:5f:b2:c2:91:6f:30:fd:51:6e:97:5e:
+ 4f:99:6d:08:c0:be:5a:62:9f:4d:9f:96:e1:7f:91:3f:fb:50:
+ 2f:71:1d:db:11:39:dd:c6:8d:7d:b3:a7:78:4a:1f:af:67:06:
+ a2:a8:d7:be:0d:04:a2:1c:bb:27:ab:5f:95:db:0b:60:a0:7f:
+ 8b:e4:f5:56:db:ff:ce:a1
+-----BEGIN TRUSTED CERTIFICATE-----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+-----END TRUSTED CERTIFICATE-----
diff --git a/configs/keys/ca1.crt b/configs/keys/ca1.crt
new file mode 120000
index 0000000..4c67265
--- /dev/null
+++ b/configs/keys/ca1.crt
@@ -0,0 +1 @@
+ca1/ca1.crt
\ No newline at end of file
diff --git a/configs/keys/ca1/ast1.crt b/configs/keys/ca1/ast1.crt
deleted file mode 100644
index 7f583e1..0000000
--- a/configs/keys/ca1/ast1.crt
+++ /dev/null
@@ -1,20 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDQDCCASgCAQEwDQYJKoZIhvcNAQELBQAwLTEcMBoGA1UEAwwTQXN0ZXJpc2sg
-UHJpdmF0ZSBDQTENMAsGA1UECgwEYXN0MTAeFw0xNzEyMDUxNDQxMzFaFw0xODEy
-MDUxNDQxMzFaMCMxEjAQBgNVBAMMCTEyNy4wLjAuMTENMAsGA1UECgwEYXN0MTCB
-nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA2m/m3Uddz1aFahex60j+bqA7Ug/W
-tsaKBPX3rlRMTkNi2OSlVI93dM21JK3/joq6FsrovtVfPO4VVHtEHndTdoXBqt5T
-MWIszsslfuHNEFz3vD3bJdVqxYC7iFMZYsh5NrukfqaXVQSJPmR0Saeby0Bip0Fe
-GD4scUvRNsZcqAECAwEAATANBgkqhkiG9w0BAQsFAAOCAgEAoZCXt4daHW0P5HXu
-rqHV4WVqeiRZxHDgXFCkKpBoF9cl7VvC8agVzTcL/73uHBaJ2FCz/9b8o7ZQR78T
-jCGcTN/z9n9bP+oo9Z8mhbO0YiDavcwdVkSKBTNkC3/G420N+jfVAkQkRriuHTLu
-H7ADMSdHI1g+JQGVIVEJDXT5yFiTR0TUQZrlZ+bnE+BDap11wTbOyqCCg3MLUZJU
-9PQAePXipFpmRRyobk866r2KxKIyJAbVUXZwTwfXXuKDIBuYMQx0Ynnqm/mezQv/
-IGW9A9S1Xlvupl9TCTUh8ppqw4TV3XRDX9hCZU5Fkqis/uZQa1WJl2Pl4+RG5DVn
-nJv+WlRzBwWXAzyJRMUSsviZyxx01JbOQYzaJOIEwc3cR0+1c2qj3H2D/NHymm/+
-nDUMOOAA+iacC1JFbbO3NTfOId9Ci1KXPhrnJUsQBXxve91r8zYGG8XktaSXygQX
-Nq+2OG4CJlIaVwuwvY9SHeSjWMCRUvDeXY+pGYwkjPIn/6rS441u91WjDSztBEHQ
-9kOXik6Wcm1FMuHFQykTKMw9+Xj+sDq0/Vf1qOOFxG+L1i8tu/z+kQSBpHRJobyQ
-wdI+Tq9GjAAmC4ZWy1Da/vC+oeYpjj6LcTs9Nx88wdE+WpxXd0wJ75+RTXd8JJN7
-MawUu3MUF57hMpU3p2NMWToCQ10=
------END CERTIFICATE-----
diff --git a/configs/keys/ca1/ast1.csr b/configs/keys/ca1/ast1.csr
deleted file mode 100644
index fd44967..0000000
--- a/configs/keys/ca1/ast1.csr
+++ /dev/null
@@ -1,10 +0,0 @@
------BEGIN CERTIFICATE REQUEST-----
-MIIBYjCBzAIBADAjMRIwEAYDVQQDDAkxMjcuMC4wLjExDTALBgNVBAoMBGFzdDEw
-gZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANpv5t1HXc9WhWoXsetI/m6gO1IP
-1rbGigT1965UTE5DYtjkpVSPd3TNtSSt/46KuhbK6L7VXzzuFVR7RB53U3aFware
-UzFiLM7LJX7hzRBc97w92yXVasWAu4hTGWLIeTa7pH6ml1UEiT5kdEmnm8tAYqdB
-Xhg+LHFL0TbGXKgBAgMBAAGgADANBgkqhkiG9w0BAQsFAAOBgQCboXwVIN8izXRK
-lZ0fWzv6pg+Jue8k3It203noWtBl9Dk0dJSwq6WSm2UAPFDzl9q7T9hdWlvp28Bl
-+gMcOz1cT2N3QdP3+XBoxa4XQPtAGHreamOt0TKmUJArVXjalnrJZGRgaq0r1i+w
-r+0ruz6qZu9fdLLk3Lx7GF3aLi3LhQ==
------END CERTIFICATE REQUEST-----
diff --git a/configs/keys/ca1/ast1.key b/configs/keys/ca1/ast1.key
deleted file mode 100644
index 97a9e31..0000000
--- a/configs/keys/ca1/ast1.key
+++ /dev/null
@@ -1,15 +0,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIICXgIBAAKBgQDab+bdR13PVoVqF7HrSP5uoDtSD9a2xooE9feuVExOQ2LY5KVU
-j3d0zbUkrf+OiroWyui+1V887hVUe0Qed1N2hcGq3lMxYizOyyV+4c0QXPe8Pdsl
-1WrFgLuIUxliyHk2u6R+ppdVBIk+ZHRJp5vLQGKnQV4YPixxS9E2xlyoAQIDAQAB
-AoGBALKeCnQrJWSj5ViJo6039QXU9Gz4EqVG2BmSYEQnHnZo1+1vmln5Lr9Obq9d
-sLmIav60UXmq1MPoE30PhvY6sP2ZN8tglNIqMI+tKgonOmVQTsIwj/Mpg6zOM8oi
-0OROc3YzFiYhvAbpSgFOaCJzR06gwSwjVvc2U4py3V6KX+KBAkEA8PxiOJOi9/78
-mADARlUteDQT+eTFZbDh+nvB3+sOHAU7fqyxD2/IZUWruxxIJRjTH5JJcA9sN+my
-q2YhNumPGQJBAOgL4CdAiDMnZsQgjbkN8t/G2JB19mE6iqwvb6r4t8CCD5hcLm45
-a/qzfGEqcr8zLKzM51XzN967bWV6/CXbRSkCQQDsMsNmprYGEqOrrJjIlvYBKjIm
-LaeY230ykJhfC7mBl1NP/p1w/uRQ9q+yrq67xZAxEqXuMv+j8egQfQKzGssJAkAn
-WtRCc/xliJoySz8eEpKNh2D1ZzxJEy+vsj/jJFmtyaExevjY8t4wX76JkDRz3w8F
-o57cgeqI2QrdujUHip+5AkEA8FzIX2ymKBsF1OAdPIX4RNSYQdISfN7u7jJwBZCZ
-I8LyHdTF/bYwot9zozQzxIKrMki9exR/yrIZ2OU3raA7yQ==
------END RSA PRIVATE KEY-----
diff --git a/configs/keys/ca1/ast1.pem b/configs/keys/ca1/ast1.pem
deleted file mode 100644
index e0a716c..0000000
--- a/configs/keys/ca1/ast1.pem
+++ /dev/null
@@ -1,35 +0,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIICXgIBAAKBgQDab+bdR13PVoVqF7HrSP5uoDtSD9a2xooE9feuVExOQ2LY5KVU
-j3d0zbUkrf+OiroWyui+1V887hVUe0Qed1N2hcGq3lMxYizOyyV+4c0QXPe8Pdsl
-1WrFgLuIUxliyHk2u6R+ppdVBIk+ZHRJp5vLQGKnQV4YPixxS9E2xlyoAQIDAQAB
-AoGBALKeCnQrJWSj5ViJo6039QXU9Gz4EqVG2BmSYEQnHnZo1+1vmln5Lr9Obq9d
-sLmIav60UXmq1MPoE30PhvY6sP2ZN8tglNIqMI+tKgonOmVQTsIwj/Mpg6zOM8oi
-0OROc3YzFiYhvAbpSgFOaCJzR06gwSwjVvc2U4py3V6KX+KBAkEA8PxiOJOi9/78
-mADARlUteDQT+eTFZbDh+nvB3+sOHAU7fqyxD2/IZUWruxxIJRjTH5JJcA9sN+my
-q2YhNumPGQJBAOgL4CdAiDMnZsQgjbkN8t/G2JB19mE6iqwvb6r4t8CCD5hcLm45
-a/qzfGEqcr8zLKzM51XzN967bWV6/CXbRSkCQQDsMsNmprYGEqOrrJjIlvYBKjIm
-LaeY230ykJhfC7mBl1NP/p1w/uRQ9q+yrq67xZAxEqXuMv+j8egQfQKzGssJAkAn
-WtRCc/xliJoySz8eEpKNh2D1ZzxJEy+vsj/jJFmtyaExevjY8t4wX76JkDRz3w8F
-o57cgeqI2QrdujUHip+5AkEA8FzIX2ymKBsF1OAdPIX4RNSYQdISfN7u7jJwBZCZ
-I8LyHdTF/bYwot9zozQzxIKrMki9exR/yrIZ2OU3raA7yQ==
------END RSA PRIVATE KEY-----
------BEGIN CERTIFICATE-----
-MIIDQDCCASgCAQEwDQYJKoZIhvcNAQELBQAwLTEcMBoGA1UEAwwTQXN0ZXJpc2sg
-UHJpdmF0ZSBDQTENMAsGA1UECgwEYXN0MTAeFw0xNzEyMDUxNDQxMzFaFw0xODEy
-MDUxNDQxMzFaMCMxEjAQBgNVBAMMCTEyNy4wLjAuMTENMAsGA1UECgwEYXN0MTCB
-nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA2m/m3Uddz1aFahex60j+bqA7Ug/W
-tsaKBPX3rlRMTkNi2OSlVI93dM21JK3/joq6FsrovtVfPO4VVHtEHndTdoXBqt5T
-MWIszsslfuHNEFz3vD3bJdVqxYC7iFMZYsh5NrukfqaXVQSJPmR0Saeby0Bip0Fe
-GD4scUvRNsZcqAECAwEAATANBgkqhkiG9w0BAQsFAAOCAgEAoZCXt4daHW0P5HXu
-rqHV4WVqeiRZxHDgXFCkKpBoF9cl7VvC8agVzTcL/73uHBaJ2FCz/9b8o7ZQR78T
-jCGcTN/z9n9bP+oo9Z8mhbO0YiDavcwdVkSKBTNkC3/G420N+jfVAkQkRriuHTLu
-H7ADMSdHI1g+JQGVIVEJDXT5yFiTR0TUQZrlZ+bnE+BDap11wTbOyqCCg3MLUZJU
-9PQAePXipFpmRRyobk866r2KxKIyJAbVUXZwTwfXXuKDIBuYMQx0Ynnqm/mezQv/
-IGW9A9S1Xlvupl9TCTUh8ppqw4TV3XRDX9hCZU5Fkqis/uZQa1WJl2Pl4+RG5DVn
-nJv+WlRzBwWXAzyJRMUSsviZyxx01JbOQYzaJOIEwc3cR0+1c2qj3H2D/NHymm/+
-nDUMOOAA+iacC1JFbbO3NTfOId9Ci1KXPhrnJUsQBXxve91r8zYGG8XktaSXygQX
-Nq+2OG4CJlIaVwuwvY9SHeSjWMCRUvDeXY+pGYwkjPIn/6rS441u91WjDSztBEHQ
-9kOXik6Wcm1FMuHFQykTKMw9+Xj+sDq0/Vf1qOOFxG+L1i8tu/z+kQSBpHRJobyQ
-wdI+Tq9GjAAmC4ZWy1Da/vC+oeYpjj6LcTs9Nx88wdE+WpxXd0wJ75+RTXd8JJN7
-MawUu3MUF57hMpU3p2NMWToCQ10=
------END CERTIFICATE-----
diff --git a/configs/keys/ca1/ast2.crt b/configs/keys/ca1/ast2.crt
deleted file mode 100644
index ce202d6..0000000
--- a/configs/keys/ca1/ast2.crt
+++ /dev/null
@@ -1,20 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDQDCCASgCAQEwDQYJKoZIhvcNAQELBQAwLTEcMBoGA1UEAwwTQXN0ZXJpc2sg
-UHJpdmF0ZSBDQTENMAsGA1UECgwEYXN0MTAeFw0xNzEyMDUxNDQxNDVaFw0xODEy
-MDUxNDQxNDVaMCMxEjAQBgNVBAMMCTEyNy4wLjAuMTENMAsGA1UECgwEYXN0MjCB
-nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAwqnUDhqe5Jzd59oLpl+7XGE+/MXm
-M5krQTRMuK5TRMx3uqUwRmVL6DctpiqsQy+MkbrYrM6LL2KQMDaHexKVagwQ+Je1
-MDhLhnyzVpel1hMF1V8LkSdv4NNx4b/xriIhge21sjMCbXTGTwg0LcQY+SnYdIuU
-K8GkxsWtSH/OHmsCAwEAATANBgkqhkiG9w0BAQsFAAOCAgEAhlTUHpp1E+VuA07u
-w/7ruHPKMIfFE4HhASwiTS61nY6lUIKEyDzD1Quc9v9qqBc+zRM7DYHG1NtBa4Sb
-mfa+iiJnM1pwrRuAHrYvaD4SoIWCEIP5IwdMA70XAnLxV++MJLy9ECDCZoawl2v1
-htfL1V4btlnRVvs/3ozZobySMjBSoJTIpyToex/KsUxZEusdmJkVeezbJJfK/GCL
-+ZeT4Z3l570fBz7b2JJVGboj6VkTGJzam/VCmODSc3UD6xsJR86TpvmTpu79gb2f
-gH2qjFpH4XLJaQ6KWYJb+2kLEMjfVDjFY6OOHeLfiVgVDplzbarVL9h92/YzzA/i
-Ebf8xKI6ftgpmn8MD2oi4dp+hYjE0uzrp8eraP0RdgoI1DGczfjKZNnbdIdXf8Lq
-o9YI7qz7IGCkFZIMQW9+IP1l5hgJLr351zrEZQR/NKCkXT4+6s9wUFND1C7ZgeIl
-oU+cfqxG7at1xLIUIkcLKFGJm3mEpCEkqkAcHxZ0Q3nvXuB+IKJNS9vR8sssttO9
-850A0ps4x54BllDSV4Kg31F1VverSagEjkn1g+zrCd4lMF1kmti3UqgeCeG+FerD
-S5igztRXN5RO2d61hlRW/rMknfnF/wbboAnHiuyCdj/HZgQ+g4/XU15LFNM839Lh
-2pirQfeF8ClFSpp7JvnXawPoEdY=
------END CERTIFICATE-----
diff --git a/configs/keys/ca1/ast2.csr b/configs/keys/ca1/ast2.csr
deleted file mode 100644
index 4b75231..0000000
--- a/configs/keys/ca1/ast2.csr
+++ /dev/null
@@ -1,10 +0,0 @@
------BEGIN CERTIFICATE REQUEST-----
-MIIBYjCBzAIBADAjMRIwEAYDVQQDDAkxMjcuMC4wLjExDTALBgNVBAoMBGFzdDIw
-gZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAMKp1A4anuSc3efaC6Zfu1xhPvzF
-5jOZK0E0TLiuU0TMd7qlMEZlS+g3LaYqrEMvjJG62KzOiy9ikDA2h3sSlWoMEPiX
-tTA4S4Z8s1aXpdYTBdVfC5Enb+DTceG/8a4iIYHttbIzAm10xk8INC3EGPkp2HSL
-lCvBpMbFrUh/zh5rAgMBAAGgADANBgkqhkiG9w0BAQsFAAOBgQC2D9e9UMtkYmtv
-eXXe4d47vxhmzeDyK9Y7Wgtlc2KGQ1MMR/r8EH64LFABZeEY6m7Ln91W7OAIHQ1H
-eI35465CeXNJmTRysDbYBkkNzbsi+ZE5dDPTakhyTAWHC6WvASuIz9rD1C4YTpPf
-TpOZ926X+O0fI6SycaQuap/Ti9kEmQ==
------END CERTIFICATE REQUEST-----
diff --git a/configs/keys/ca1/ast2.key b/configs/keys/ca1/ast2.key
deleted file mode 100644
index 3833ed9..0000000
--- a/configs/keys/ca1/ast2.key
+++ /dev/null
@@ -1,15 +0,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIICXgIBAAKBgQDCqdQOGp7knN3n2gumX7tcYT78xeYzmStBNEy4rlNEzHe6pTBG
-ZUvoNy2mKqxDL4yRutiszosvYpAwNod7EpVqDBD4l7UwOEuGfLNWl6XWEwXVXwuR
-J2/g03Hhv/GuIiGB7bWyMwJtdMZPCDQtxBj5Kdh0i5QrwaTGxa1If84eawIDAQAB
-AoGAAgIGce7MXMdRcqbJH/o00IsgPzM7YKTf0VhcwjrqGPeS9JXnnZJF6itHiUM/
-a6H97TLkMUQgI2j828J0O0zBxcWjlKuqHjOMfJ22JvmwFrAnXEYk89eUlHX8DLAq
-i/ncURdRg2wcL4mnqoeFLVmMhPiqFGC7YjU8uI+qXmuZ+qECQQDxPrCrN40NP4BU
-NHwXj/9DJdFhFVWnlGt9ddLgLZ3lj9xBloglmOnNRb3oL7zMsHX0xsXlZBB4puM+
-Pv+8uh/HAkEAzpHI942X7vO5lgbsvQgQSEhf0xVKchB14Sb5ldSsGyHzEKBmB4Be
-miurL0bDP2kSqhFJm6y4lqbdUtF4fT8UPQJBAJf1FhFzV1zN8AaaXMP2xyJDswSF
-DMQXIDIRwnfFJB1SpbmGmVGdZUAQuxOC5ljEmjhJ8KOSiTGGZcNyqWH2l0cCQQCA
-3hgGv/G545iyzK0iHIaz4VrOf6jK0hQIG113KI8Z+ir+A2LDaUUbXwTTYIzr4SwA
-pvpJwQ4DBiRqxz0ovZJtAkEAm9z7THXCzeMyWj5jcN9//GTxzeexNRxXJ1SYzmlm
-N2Ff+zNy00Vv2ZF/lMesDBP30SArY8oAiRHDk75o9UO8aQ==
------END RSA PRIVATE KEY-----
diff --git a/configs/keys/ca1/ast2.pem b/configs/keys/ca1/ast2.pem
deleted file mode 100644
index 876f1f2..0000000
--- a/configs/keys/ca1/ast2.pem
+++ /dev/null
@@ -1,35 +0,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIICXgIBAAKBgQDCqdQOGp7knN3n2gumX7tcYT78xeYzmStBNEy4rlNEzHe6pTBG
-ZUvoNy2mKqxDL4yRutiszosvYpAwNod7EpVqDBD4l7UwOEuGfLNWl6XWEwXVXwuR
-J2/g03Hhv/GuIiGB7bWyMwJtdMZPCDQtxBj5Kdh0i5QrwaTGxa1If84eawIDAQAB
-AoGAAgIGce7MXMdRcqbJH/o00IsgPzM7YKTf0VhcwjrqGPeS9JXnnZJF6itHiUM/
-a6H97TLkMUQgI2j828J0O0zBxcWjlKuqHjOMfJ22JvmwFrAnXEYk89eUlHX8DLAq
-i/ncURdRg2wcL4mnqoeFLVmMhPiqFGC7YjU8uI+qXmuZ+qECQQDxPrCrN40NP4BU
-NHwXj/9DJdFhFVWnlGt9ddLgLZ3lj9xBloglmOnNRb3oL7zMsHX0xsXlZBB4puM+
-Pv+8uh/HAkEAzpHI942X7vO5lgbsvQgQSEhf0xVKchB14Sb5ldSsGyHzEKBmB4Be
-miurL0bDP2kSqhFJm6y4lqbdUtF4fT8UPQJBAJf1FhFzV1zN8AaaXMP2xyJDswSF
-DMQXIDIRwnfFJB1SpbmGmVGdZUAQuxOC5ljEmjhJ8KOSiTGGZcNyqWH2l0cCQQCA
-3hgGv/G545iyzK0iHIaz4VrOf6jK0hQIG113KI8Z+ir+A2LDaUUbXwTTYIzr4SwA
-pvpJwQ4DBiRqxz0ovZJtAkEAm9z7THXCzeMyWj5jcN9//GTxzeexNRxXJ1SYzmlm
-N2Ff+zNy00Vv2ZF/lMesDBP30SArY8oAiRHDk75o9UO8aQ==
------END RSA PRIVATE KEY-----
------BEGIN CERTIFICATE-----
-MIIDQDCCASgCAQEwDQYJKoZIhvcNAQELBQAwLTEcMBoGA1UEAwwTQXN0ZXJpc2sg
-UHJpdmF0ZSBDQTENMAsGA1UECgwEYXN0MTAeFw0xNzEyMDUxNDQxNDVaFw0xODEy
-MDUxNDQxNDVaMCMxEjAQBgNVBAMMCTEyNy4wLjAuMTENMAsGA1UECgwEYXN0MjCB
-nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAwqnUDhqe5Jzd59oLpl+7XGE+/MXm
-M5krQTRMuK5TRMx3uqUwRmVL6DctpiqsQy+MkbrYrM6LL2KQMDaHexKVagwQ+Je1
-MDhLhnyzVpel1hMF1V8LkSdv4NNx4b/xriIhge21sjMCbXTGTwg0LcQY+SnYdIuU
-K8GkxsWtSH/OHmsCAwEAATANBgkqhkiG9w0BAQsFAAOCAgEAhlTUHpp1E+VuA07u
-w/7ruHPKMIfFE4HhASwiTS61nY6lUIKEyDzD1Quc9v9qqBc+zRM7DYHG1NtBa4Sb
-mfa+iiJnM1pwrRuAHrYvaD4SoIWCEIP5IwdMA70XAnLxV++MJLy9ECDCZoawl2v1
-htfL1V4btlnRVvs/3ozZobySMjBSoJTIpyToex/KsUxZEusdmJkVeezbJJfK/GCL
-+ZeT4Z3l570fBz7b2JJVGboj6VkTGJzam/VCmODSc3UD6xsJR86TpvmTpu79gb2f
-gH2qjFpH4XLJaQ6KWYJb+2kLEMjfVDjFY6OOHeLfiVgVDplzbarVL9h92/YzzA/i
-Ebf8xKI6ftgpmn8MD2oi4dp+hYjE0uzrp8eraP0RdgoI1DGczfjKZNnbdIdXf8Lq
-o9YI7qz7IGCkFZIMQW9+IP1l5hgJLr351zrEZQR/NKCkXT4+6s9wUFND1C7ZgeIl
-oU+cfqxG7at1xLIUIkcLKFGJm3mEpCEkqkAcHxZ0Q3nvXuB+IKJNS9vR8sssttO9
-850A0ps4x54BllDSV4Kg31F1VverSagEjkn1g+zrCd4lMF1kmti3UqgeCeG+FerD
-S5igztRXN5RO2d61hlRW/rMknfnF/wbboAnHiuyCdj/HZgQ+g4/XU15LFNM839Lh
-2pirQfeF8ClFSpp7JvnXawPoEdY=
------END CERTIFICATE-----
diff --git a/configs/keys/ca1/ast3.crt b/configs/keys/ca1/ast3.crt
deleted file mode 100644
index f669de1..0000000
--- a/configs/keys/ca1/ast3.crt
+++ /dev/null
@@ -1,20 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDQDCCASgCAQEwDQYJKoZIhvcNAQELBQAwLTEcMBoGA1UEAwwTQXN0ZXJpc2sg
-UHJpdmF0ZSBDQTENMAsGA1UECgwEYXN0MTAeFw0xNzEyMDUxNDQxNTZaFw0xODEy
-MDUxNDQxNTZaMCMxEjAQBgNVBAMMCTEyNy4wLjAuMTENMAsGA1UECgwEYXN0MzCB
-nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAv7W7UcaUA6I6FjHURRqNkIyDMUuM
-tqzZJk8n/sMhqZ0PSzgr4NA5tjcRj1zhLYYMwCPJUMOfrE2iX9/uck6ceYyG7LbN
-pb0qEx3N5Sj7UYiUa05n5k4AGDMU4d3o5t8pnl3rrl0KYXuKD3VCdMEUD8J3cbfT
-fO29sGKgOOV/NZsCAwEAATANBgkqhkiG9w0BAQsFAAOCAgEAhmUcEYDcBzvHF5Zh
-RVYcmqCJQG44/Ara58cHS+16ecr+t2GkONbBuIFFUhuyGg9Vr5rPndKJbCGp3ek3
-DJw7loIfft42Cm5lYy8D3T9ggWE7LtCpM/ffg7pWP3I5J+Upw9FngPQoCiZpIAKo
-DXgnuu1K2ERqrahAXorbxE/aYMMqEIknlzXu3Lk8A2XRl46YNGTO1PFitp44M7+v
-ZP8Aq0eAj0ForDA41DIAZWE9P4C3f0xpe/TLEDuIUxcP0K3japk3mygjtDkcNFwl
-gYQGwtIksV6+oa0pDvzjdG87xIh7Sz7bSukKFcT5or0VavvqpetwmwAjThJQZ6sc
-CfHxTGms7TitVNJCmsjaTnrOAoo2/GYPMS6OX9DLH6RO8lyr2G+A3fwZjDc/ng9S
-mtNtp9Us/9Wy+t+lCMlO1z9cOaIdEpOx7SPlH0PhijSA3PTGg8VptiUp5140Wof1
-kyDoihhrVk5hsh+DseOeW1T0DcH1AeR/qgusD+fEhQHPESBnwiBR43vjCMxIbkUO
-ZNv0ZQzKQ5G9zOIBGzItJG61rRCE2jmBIWYKUSV6CXEnwtO404YcdF8KmI6+vn3e
-7jM4sJaqVdO1J6XrMX4RdTJoGerzEjZ7ca5lw9BM33buc5EuNmQkc1nj4LFWUPVG
-sahjc9BpfgxeZ4MTZ9vitCUXqAo=
------END CERTIFICATE-----
diff --git a/configs/keys/ca1/ast3.csr b/configs/keys/ca1/ast3.csr
deleted file mode 100644
index 2cb966c..0000000
--- a/configs/keys/ca1/ast3.csr
+++ /dev/null
@@ -1,10 +0,0 @@
------BEGIN CERTIFICATE REQUEST-----
-MIIBYjCBzAIBADAjMRIwEAYDVQQDDAkxMjcuMC4wLjExDTALBgNVBAoMBGFzdDMw
-gZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAL+1u1HGlAOiOhYx1EUajZCMgzFL
-jLas2SZPJ/7DIamdD0s4K+DQObY3EY9c4S2GDMAjyVDDn6xNol/f7nJOnHmMhuy2
-zaW9KhMdzeUo+1GIlGtOZ+ZOABgzFOHd6ObfKZ5d665dCmF7ig91QnTBFA/Cd3G3
-03ztvbBioDjlfzWbAgMBAAGgADANBgkqhkiG9w0BAQsFAAOBgQBz4ybWqKoYkRsf
-oq8GpKBBM4f0qazBp2Pf+zGuKuSO0y76ibRWFd6TY/unSYp4S80pUKRIOdMnoZva
-gU7ae0yz4AWmgwBK85hQqTtYLYKqws2ZUGn/s94dT8Kec810SdY84hKRpWQzMBAn
-DUSkNzY8fhR0dCCECmPE9MB/6R1Bsw==
------END CERTIFICATE REQUEST-----
diff --git a/configs/keys/ca1/ast3.key b/configs/keys/ca1/ast3.key
deleted file mode 100644
index a64416a..0000000
--- a/configs/keys/ca1/ast3.key
+++ /dev/null
@@ -1,15 +0,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIICXgIBAAKBgQC/tbtRxpQDojoWMdRFGo2QjIMxS4y2rNkmTyf+wyGpnQ9LOCvg
-0Dm2NxGPXOEthgzAI8lQw5+sTaJf3+5yTpx5jIbsts2lvSoTHc3lKPtRiJRrTmfm
-TgAYMxTh3ejm3ymeXeuuXQphe4oPdUJ0wRQPwndxt9N87b2wYqA45X81mwIDAQAB
-AoGBALBj+fKID/A399IsDu92OwLhBmT46oO6DiLdeiNCT1rMlCHVkSnM7QznJlUO
-VHGagWjYhIa3N9dFpz0nwTGTewwTKb//ecRcK7RJt2BZMMFEm1pZnuR/QhXfUg84
-TJh7gHhtC8lgsrG4sUQ8QKG5Grsx4y+uuMWmC7rQb2wgKmxhAkEA6ciIXeILdQyC
-SuFz0MbBb3zu5qmKVvLzeCuxABHc7yF50DpweaLdVz7c6L8B/T0eduafE4IU/cq8
-UfUUJ51IbQJBANHto4gA1J9vd3+CuPiglyPA7zKi6GDJKSOwSozJbuB0mwddoVkw
-hNuMVeYA72MB+RqqRZVSODTjnX3NALVLwScCQQCO3NXAkW8w8xj4C3gL4Dm7GJyh
-Zn+8jLEOAZ0jjsb1dv6KqfuryUP7mdXDgV4E1AG25U3WzQpo4Shd6SeM4cetAkEA
-ixH6++ZQ9S5K49Yd49e/SJhP3iO9/iBFeLcZLBtlsJyO91o3wXY7DZbycOS9scFk
-3R1f64QEaEVB2E0u4uvEkQJAXfLWhM0cQkfK8MFadROaSoTZtFlbWq8Rp3r85Jt4
-kMovsfd/XgF2S1oLj48Rz2kEcjqEyJ6qhDqN07xREg0f5Q==
------END RSA PRIVATE KEY-----
diff --git a/configs/keys/ca1/ast3.pem b/configs/keys/ca1/ast3.pem
deleted file mode 100644
index b5bfbdb..0000000
--- a/configs/keys/ca1/ast3.pem
+++ /dev/null
@@ -1,35 +0,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIICXgIBAAKBgQC/tbtRxpQDojoWMdRFGo2QjIMxS4y2rNkmTyf+wyGpnQ9LOCvg
-0Dm2NxGPXOEthgzAI8lQw5+sTaJf3+5yTpx5jIbsts2lvSoTHc3lKPtRiJRrTmfm
-TgAYMxTh3ejm3ymeXeuuXQphe4oPdUJ0wRQPwndxt9N87b2wYqA45X81mwIDAQAB
-AoGBALBj+fKID/A399IsDu92OwLhBmT46oO6DiLdeiNCT1rMlCHVkSnM7QznJlUO
-VHGagWjYhIa3N9dFpz0nwTGTewwTKb//ecRcK7RJt2BZMMFEm1pZnuR/QhXfUg84
-TJh7gHhtC8lgsrG4sUQ8QKG5Grsx4y+uuMWmC7rQb2wgKmxhAkEA6ciIXeILdQyC
-SuFz0MbBb3zu5qmKVvLzeCuxABHc7yF50DpweaLdVz7c6L8B/T0eduafE4IU/cq8
-UfUUJ51IbQJBANHto4gA1J9vd3+CuPiglyPA7zKi6GDJKSOwSozJbuB0mwddoVkw
-hNuMVeYA72MB+RqqRZVSODTjnX3NALVLwScCQQCO3NXAkW8w8xj4C3gL4Dm7GJyh
-Zn+8jLEOAZ0jjsb1dv6KqfuryUP7mdXDgV4E1AG25U3WzQpo4Shd6SeM4cetAkEA
-ixH6++ZQ9S5K49Yd49e/SJhP3iO9/iBFeLcZLBtlsJyO91o3wXY7DZbycOS9scFk
-3R1f64QEaEVB2E0u4uvEkQJAXfLWhM0cQkfK8MFadROaSoTZtFlbWq8Rp3r85Jt4
-kMovsfd/XgF2S1oLj48Rz2kEcjqEyJ6qhDqN07xREg0f5Q==
------END RSA PRIVATE KEY-----
------BEGIN CERTIFICATE-----
-MIIDQDCCASgCAQEwDQYJKoZIhvcNAQELBQAwLTEcMBoGA1UEAwwTQXN0ZXJpc2sg
-UHJpdmF0ZSBDQTENMAsGA1UECgwEYXN0MTAeFw0xNzEyMDUxNDQxNTZaFw0xODEy
-MDUxNDQxNTZaMCMxEjAQBgNVBAMMCTEyNy4wLjAuMTENMAsGA1UECgwEYXN0MzCB
-nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAv7W7UcaUA6I6FjHURRqNkIyDMUuM
-tqzZJk8n/sMhqZ0PSzgr4NA5tjcRj1zhLYYMwCPJUMOfrE2iX9/uck6ceYyG7LbN
-pb0qEx3N5Sj7UYiUa05n5k4AGDMU4d3o5t8pnl3rrl0KYXuKD3VCdMEUD8J3cbfT
-fO29sGKgOOV/NZsCAwEAATANBgkqhkiG9w0BAQsFAAOCAgEAhmUcEYDcBzvHF5Zh
-RVYcmqCJQG44/Ara58cHS+16ecr+t2GkONbBuIFFUhuyGg9Vr5rPndKJbCGp3ek3
-DJw7loIfft42Cm5lYy8D3T9ggWE7LtCpM/ffg7pWP3I5J+Upw9FngPQoCiZpIAKo
-DXgnuu1K2ERqrahAXorbxE/aYMMqEIknlzXu3Lk8A2XRl46YNGTO1PFitp44M7+v
-ZP8Aq0eAj0ForDA41DIAZWE9P4C3f0xpe/TLEDuIUxcP0K3japk3mygjtDkcNFwl
-gYQGwtIksV6+oa0pDvzjdG87xIh7Sz7bSukKFcT5or0VavvqpetwmwAjThJQZ6sc
-CfHxTGms7TitVNJCmsjaTnrOAoo2/GYPMS6OX9DLH6RO8lyr2G+A3fwZjDc/ng9S
-mtNtp9Us/9Wy+t+lCMlO1z9cOaIdEpOx7SPlH0PhijSA3PTGg8VptiUp5140Wof1
-kyDoihhrVk5hsh+DseOeW1T0DcH1AeR/qgusD+fEhQHPESBnwiBR43vjCMxIbkUO
-ZNv0ZQzKQ5G9zOIBGzItJG61rRCE2jmBIWYKUSV6CXEnwtO404YcdF8KmI6+vn3e
-7jM4sJaqVdO1J6XrMX4RdTJoGerzEjZ7ca5lw9BM33buc5EuNmQkc1nj4LFWUPVG
-sahjc9BpfgxeZ4MTZ9vitCUXqAo=
------END CERTIFICATE-----
diff --git a/configs/keys/ca1/ast4.crt b/configs/keys/ca1/ast4.crt
deleted file mode 100644
index 67ed4e3..0000000
--- a/configs/keys/ca1/ast4.crt
+++ /dev/null
@@ -1,20 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDQDCCASgCAQEwDQYJKoZIhvcNAQELBQAwLTEcMBoGA1UEAwwTQXN0ZXJpc2sg
-UHJpdmF0ZSBDQTENMAsGA1UECgwEYXN0MTAeFw0xNzEyMDUxNDQyMDVaFw0xODEy
-MDUxNDQyMDVaMCMxEjAQBgNVBAMMCTEyNy4wLjAuMTENMAsGA1UECgwEYXN0NDCB
-nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAvBb8j9TjJGVaMe757/11Ptlrb9Ve
-uEHgREcJfb7OeqEz/JFlok+DQ1xKTWDwRX+xUw7p+tQUFmLher/GP9yT2dTmeN59
-T67d3mtVsXkfBV+1abU0PvycJKzgPHeGpYJ3aPmYHOcxd8w7CXnP3z7yi2XddbUk
-Cs5f5UFQeiv2BAsCAwEAATANBgkqhkiG9w0BAQsFAAOCAgEAgQJ9GMIHwy8fP4Y4
-JGdjfJVNkXF+LLAaK9CmwqyZQs39MuGrhBnNUU5KH1RvenOBfwMCwXzWDXQiU0yP
-PK36k3Y4F7gVm6GZVWmVDMq0+iwh2QoOOk/gDZjoEuUxtzGQ3rrTu4vRipVqTe6S
-21I9PFTv/zZt/HtYfYQ8pBf2r0vjmcZknAS7nOpQ1BnU6r5q3aqHr8boOTGuS/Rm
-0UG5HRt0WLo9dMb9guy8hnUAyPd4lgViZ+CmGp5nqdZNBa7LwQIvJ3tBkToRgqg4
-w3gXNOsRR0rEmwKnMxRcDhN0K8VdZ+TuxuBuiKbwhpxKzHB0ehOwZ46jC68OI2T3
-1Dklb0YpLAkZaavlIodq3VN72w+lIH+CI+dLVZRqtme3XrVbyu4TVjvO+cXYhZKl
-vLRvGG+O9i9tw7X9Vc3iLmyftfDNvlqfohot3gLTCypxYTzCnOOhxzA+aTVCmi+h
-rfK0zUwl76aiuaD1bbOIcPLsKGOIfFxv8ssrSk1oaAbX9uchAQxHcgjSIO5trIFj
-tg20memv0YZ4q+uuNByQN//TXv2vLXiHguq9xCZLxeojffxoGJs7z5AEb+kjcivC
-AH2+ra9Ui843V9vRe0gV10k2IrHxg2Osa2uz0t67PJdjYk7udT/jdA5XMRx/+e0+
-yVXZnsdvS6o/6tDaHh/Zfqx0/IA=
------END CERTIFICATE-----
diff --git a/configs/keys/ca1/ast4.csr b/configs/keys/ca1/ast4.csr
deleted file mode 100644
index 5319ec3..0000000
--- a/configs/keys/ca1/ast4.csr
+++ /dev/null
@@ -1,10 +0,0 @@
------BEGIN CERTIFICATE REQUEST-----
-MIIBYjCBzAIBADAjMRIwEAYDVQQDDAkxMjcuMC4wLjExDTALBgNVBAoMBGFzdDQw
-gZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBALwW/I/U4yRlWjHu+e/9dT7Za2/V
-XrhB4ERHCX2+znqhM/yRZaJPg0NcSk1g8EV/sVMO6frUFBZi4Xq/xj/ck9nU5nje
-fU+u3d5rVbF5HwVftWm1ND78nCSs4Dx3hqWCd2j5mBznMXfMOwl5z98+8otl3XW1
-JArOX+VBUHor9gQLAgMBAAGgADANBgkqhkiG9w0BAQsFAAOBgQAuaXx8MfAC2iqz
-v8TT52qmh5y5DTV0X4E3xUSlL1w2KAZrFz8iHq2V27TXu6FCgvSqEki72DeOI4j2
-mcf5n0Sl5SN2+9/RS18EhMLp/G+xgnZoIjIplElbjYG6yzaKI+xbrYYXBnUMlOHD
-pPCgXPna75U0/KJftK2SolTsJOpYow==
------END CERTIFICATE REQUEST-----
diff --git a/configs/keys/ca1/ast4.key b/configs/keys/ca1/ast4.key
deleted file mode 100644
index 3bd8f60..0000000
--- a/configs/keys/ca1/ast4.key
+++ /dev/null
@@ -1,15 +0,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIICXAIBAAKBgQC8FvyP1OMkZVox7vnv/XU+2Wtv1V64QeBERwl9vs56oTP8kWWi
-T4NDXEpNYPBFf7FTDun61BQWYuF6v8Y/3JPZ1OZ43n1Prt3ea1WxeR8FX7VptTQ+
-/JwkrOA8d4algndo+Zgc5zF3zDsJec/fPvKLZd11tSQKzl/lQVB6K/YECwIDAQAB
-AoGBAJpGlHR5XrIMu/V3GeTiVVfux/Pb5KxnxEbcqYlNh1kIfnas39tJMtZ+jad4
-Wrv2qAEDm6GUcMGH64BeaoMZLt81zFK2a05pQrK2ZSyiQDagsvWB36VhVGlYeaqa
-GGYAJqxzXwDH4OKz4gnlKnCBSk7LTyqP1g+Zv2yXJ2lPDJ6ZAkEA6gVitIzLHnEV
-zuNpkOpU/dgVb2KCfqwj9VSlBg/xCN3AH823NAA3PpTo+4FoadZ5dm59pkuNMaIL
-ucTMOWY0bQJBAM3BRFOU1rPSrJgCKSoAzcVp9KBkxcdUvz6oZNW6657QlLN3QWbk
-QuNR7f9LCDf8hOQCP/0M8iNoCQ4RUXrFH1cCQGNk1C5xGhgc2bFcX0rgbCbAbyI2
-ycv5WvBo+gogHTSx0lbvrZ8VdGFNJ8MijHFfWYlWlmFZ92ccNzS4hDDg2uUCQDIv
-bqv4RLoNq71T4Zh2I7qAEoPAsKDi4da1mgqrkeblty9i6hffmxT5GdTIB1Qoin1W
-sybUrobGTFcbEEWiqPcCQAv1rQd3eth272BTyAJIbED4PaCgBAgpQsCnmCD6bfSD
-fDU115KWcwOLDdw0CoM7msxXHKd9oo+aiy/U/dWUF+Q=
------END RSA PRIVATE KEY-----
diff --git a/configs/keys/ca1/ast4.pem b/configs/keys/ca1/ast4.pem
deleted file mode 100644
index 06fa4fc..0000000
--- a/configs/keys/ca1/ast4.pem
+++ /dev/null
@@ -1,35 +0,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIICXAIBAAKBgQC8FvyP1OMkZVox7vnv/XU+2Wtv1V64QeBERwl9vs56oTP8kWWi
-T4NDXEpNYPBFf7FTDun61BQWYuF6v8Y/3JPZ1OZ43n1Prt3ea1WxeR8FX7VptTQ+
-/JwkrOA8d4algndo+Zgc5zF3zDsJec/fPvKLZd11tSQKzl/lQVB6K/YECwIDAQAB
-AoGBAJpGlHR5XrIMu/V3GeTiVVfux/Pb5KxnxEbcqYlNh1kIfnas39tJMtZ+jad4
-Wrv2qAEDm6GUcMGH64BeaoMZLt81zFK2a05pQrK2ZSyiQDagsvWB36VhVGlYeaqa
-GGYAJqxzXwDH4OKz4gnlKnCBSk7LTyqP1g+Zv2yXJ2lPDJ6ZAkEA6gVitIzLHnEV
-zuNpkOpU/dgVb2KCfqwj9VSlBg/xCN3AH823NAA3PpTo+4FoadZ5dm59pkuNMaIL
-ucTMOWY0bQJBAM3BRFOU1rPSrJgCKSoAzcVp9KBkxcdUvz6oZNW6657QlLN3QWbk
-QuNR7f9LCDf8hOQCP/0M8iNoCQ4RUXrFH1cCQGNk1C5xGhgc2bFcX0rgbCbAbyI2
-ycv5WvBo+gogHTSx0lbvrZ8VdGFNJ8MijHFfWYlWlmFZ92ccNzS4hDDg2uUCQDIv
-bqv4RLoNq71T4Zh2I7qAEoPAsKDi4da1mgqrkeblty9i6hffmxT5GdTIB1Qoin1W
-sybUrobGTFcbEEWiqPcCQAv1rQd3eth272BTyAJIbED4PaCgBAgpQsCnmCD6bfSD
-fDU115KWcwOLDdw0CoM7msxXHKd9oo+aiy/U/dWUF+Q=
------END RSA PRIVATE KEY-----
------BEGIN CERTIFICATE-----
-MIIDQDCCASgCAQEwDQYJKoZIhvcNAQELBQAwLTEcMBoGA1UEAwwTQXN0ZXJpc2sg
-UHJpdmF0ZSBDQTENMAsGA1UECgwEYXN0MTAeFw0xNzEyMDUxNDQyMDVaFw0xODEy
-MDUxNDQyMDVaMCMxEjAQBgNVBAMMCTEyNy4wLjAuMTENMAsGA1UECgwEYXN0NDCB
-nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAvBb8j9TjJGVaMe757/11Ptlrb9Ve
-uEHgREcJfb7OeqEz/JFlok+DQ1xKTWDwRX+xUw7p+tQUFmLher/GP9yT2dTmeN59
-T67d3mtVsXkfBV+1abU0PvycJKzgPHeGpYJ3aPmYHOcxd8w7CXnP3z7yi2XddbUk
-Cs5f5UFQeiv2BAsCAwEAATANBgkqhkiG9w0BAQsFAAOCAgEAgQJ9GMIHwy8fP4Y4
-JGdjfJVNkXF+LLAaK9CmwqyZQs39MuGrhBnNUU5KH1RvenOBfwMCwXzWDXQiU0yP
-PK36k3Y4F7gVm6GZVWmVDMq0+iwh2QoOOk/gDZjoEuUxtzGQ3rrTu4vRipVqTe6S
-21I9PFTv/zZt/HtYfYQ8pBf2r0vjmcZknAS7nOpQ1BnU6r5q3aqHr8boOTGuS/Rm
-0UG5HRt0WLo9dMb9guy8hnUAyPd4lgViZ+CmGp5nqdZNBa7LwQIvJ3tBkToRgqg4
-w3gXNOsRR0rEmwKnMxRcDhN0K8VdZ+TuxuBuiKbwhpxKzHB0ehOwZ46jC68OI2T3
-1Dklb0YpLAkZaavlIodq3VN72w+lIH+CI+dLVZRqtme3XrVbyu4TVjvO+cXYhZKl
-vLRvGG+O9i9tw7X9Vc3iLmyftfDNvlqfohot3gLTCypxYTzCnOOhxzA+aTVCmi+h
-rfK0zUwl76aiuaD1bbOIcPLsKGOIfFxv8ssrSk1oaAbX9uchAQxHcgjSIO5trIFj
-tg20memv0YZ4q+uuNByQN//TXv2vLXiHguq9xCZLxeojffxoGJs7z5AEb+kjcivC
-AH2+ra9Ui843V9vRe0gV10k2IrHxg2Osa2uz0t67PJdjYk7udT/jdA5XMRx/+e0+
-yVXZnsdvS6o/6tDaHh/Zfqx0/IA=
------END CERTIFICATE-----
diff --git a/configs/keys/ca1/ca.crt b/configs/keys/ca1/ca.crt
deleted file mode 100644
index d74d35b..0000000
--- a/configs/keys/ca1/ca.crt
+++ /dev/null
@@ -1,28 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIE1jCCAr4CCQC9f3goosp4mjANBgkqhkiG9w0BAQsFADAtMRwwGgYDVQQDDBNB
-c3RlcmlzayBQcml2YXRlIENBMQ0wCwYDVQQKDARhc3QxMB4XDTE3MTIwNTE0NDEy
-OFoXDTE4MTIwNTE0NDEyOFowLTEcMBoGA1UEAwwTQXN0ZXJpc2sgUHJpdmF0ZSBD
-QTENMAsGA1UECgwEYXN0MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
-ALa1rMOqqBTlZhfxvP1hJ5MG87aedqpuGU3UB6InUUWA87JF30dwmtfRUyH6b5dt
-JZLfvgQ7fMuKi3W9zO+JT3zGyVKxUs5mai1qjODzZWp4cBIvQYCxze5qV9VGdIRA
-BBsReiYN84zB9LYwyjjkSMKuzFDzheZJvakV1gs5z8SV6o/bH4X97tiI+D5lPfH1
-hekaDeMY2b5h0snt1Vl90U7dsdb3OAfrK2OzKnxMiqiMNNAtX4jkUWtwvS5WK5NL
-JSk234yqRp1nZOKitUEjcKu2U4LUfL/dKIX/cbe4kxeCdg9eevwSkvKwXDc49hbb
-EnezXWO2M4Ttl7CNOBc59V0FTUDKNSllRtN276lKvddvLoIkPWGoINzXwhpPVXYm
-6iIlEVR1ne2INHGlerRpd6d8DEzqR8F/DvkPbYfjdqZqxmz6VQ4XrIWcc4pdukGd
-amGMcf9ozId87MAQD4OgiWCSG0f4FH21FjJzJ4DmCPdpBHYL1nmTxDGiUhRPf0zL
-TapmsmwOyaT7/XOSxngk3Emn4e0KFyBPu6pa4Z8Wwpk5xvyLErwMhDzc3xst3EeR
-IHK4M50LFjBMJoFjL7sY2cEZwR8xIceKvr6DlTALsYMbLKlRSqQ3fmhb0dc3Om40
-hDlPEApEMAYrQ8hltXf+jAuB4WagO2TnK3wbtHlnwrdrAgMBAAEwDQYJKoZIhvcN
-AQELBQADggIBAAc2Qd1f8FegjCXWVWTEI9EDXL5dABGAd4pV0DpHlX0IWpt5jUrU
-ZDTyokDCj0qqk7yuQh5waDDVvjUi+enPFExl1NSFxv5T9vSeFci1BgcbcnaXVi8b
-I06oBrWsu6UX7lWhtNPBhxV3YLK8fP/A75YqWYE0iqX++Rf2mmFIcRT1Ng089Voy
-4n5BGc3C1myX+FGUsEMlLGUGGV0mUVtQ6JgP6QBWSs8caygfR/XoamtAn5i8/yAT
-bsF2dFM4XFyWUOR3h70rqsy+qq5kKvV22qa7mqJObwtCpYutjmSqLDXWtHczWBWW
-UObOatmuELz/9cLBSAU0Cvv6Djg8G2dQrjmvdRlAgmvcV48n09edMtDw8PJVkKeT
-rRO3f2IbyBmA1F2IBlFaOv9yY5xQsLnsyhXpmX9qff/BFSyPOSwfbzJxkz2lKyiI
-UGPB8zFlk/cNZI+7w1pN69ZrHJuERSn9h3LN/uMoKSudqSiUF0PQLSmx9J/Ynzb6
-N6AAac46rABJdRg3w0YsTcyDSXVcN4WN3cn7ADmdfxXaZHIh2sPCQ06vMQJH63lb
-TATXha5fS/CI72DPhO8hjvBXQFGbAGHCjPQlxwcquPWFL6dLOB7EAAH3UoFC5+DX
-2PdJtN/Aii9YPkuDY/7HnIEvgRYm0rcY20cLOWSKsPmau0tBiWkQMCW7
------END CERTIFICATE-----
diff --git a/configs/keys/ca1/ca.key b/configs/keys/ca1/ca.key
deleted file mode 100644
index 8174214..0000000
--- a/configs/keys/ca1/ca.key
+++ /dev/null
@@ -1,54 +0,0 @@
------BEGIN RSA PRIVATE KEY-----
-Proc-Type: 4,ENCRYPTED
-DEK-Info: DES-EDE3-CBC,CA3112A1D8DABA3D
-
-/sJPKJzU4gH5MsXTM/yND0X3OKoO7XiJus3lwR1NnE3IA+0wUTEPW4568nCbTt8C
-DBgRRQzA+htgztm2tGVUQ60rwI00svS3IN9tQfqi4+hGtJk3k8tNHObajlUt2Ahn
-kmpC3uCtsTrx/zgGdpSlCzysta+7xYAdMsd8Zu1u6HWcJoRYtQnGZ4dcGp48zxE5
-n237jjJmcqbvDa1co3anfp/6j2JKiEht69zl26BU4NWS0u3YWKBjMNHuh7XTgcfx
-G6g6mEhCvyRpw/JcoFHEz5UQZuDVHgEWmKTbsfTkCsYEjGpN3OCnhXiyaHybGMZW
-yZeNcCmaggcPHONaSspdc+3RZlFKMMALlgSndkT6yfp/1sLhMBvQWiPn9e/cufmw
-FHP93z2bncAQFeGEUIgCo3B1lKQyPhCrIkVpdAFjeV1riLl6aqMUv9iM85ROyt7N
-mEEV/TKGyTZsbfSF07HYj8yCtXz5AOqDCqlmExxjryTwBkypXEqZnytYJuheMyns
-xRXWTrInnHhCA2Ksafdm20zxyY665ZvszHltj2mXlnKoG/7gUplzuoq/0G/YFunf
-KWvrrtA4C47SaHKArF9RFdMunrMpVfNE2nvhQZZgCt1igzyp7v7yRqmGeLpaXqoC
-cFqc21bBi9xu5yKYqOSnryyrlzSoa8iva/C6uvdrTBpSHnEWhTZHvrkZHM+vA9rP
-rVyaYNTi74auUrpQBvNBxiG11JGDMeTHcZ8yF23pAFsyAH5tpts+mWsxwtA/ckDD
-Eo7c7SimArepnvtbxhG9BUtkIUaTlPbdbxEXaJpP6uugyHCkGLAI/e1CZswZA3c/
-zJJGSZCQL2ZRLmS6DIaqXkVb/iqmOCCmuwpJSnWwofovcTcsOzWBS8FO0q64gg+a
-d+cYo3/sEERHq5L80pwhlCJ6FZyBCMbnFGm/4QUhhQdLL1gvjNTBYWo2CzizmUC/
-r59ZfjzwR+U3K1mdDN7lk9GiF6VW3NohOYTFq5Bnx4bQuJpgTdKRkURGWnLZbSzH
-R9y9xcnbTqLY4aTdjefA999+gHXlZ6czy2Yu49oAcfkOt2aJH0izd1w1DMJNqjHv
-aPlzssOS18mLTZ1BtIS0yWxrfC8OCDbXJ0G0OLX2QL088etJLjfHC1LWw9t04V9P
-EP2eoNC3mK1PxnxqVGeSSqQAIHeEZlA+uZMvHHmfRsdH4lNR7ZjmjnaA52N1XtjV
-gjFRZaZz+GRdi2SX6HzggvnOwZA7DMTlQgPqh/BwVSta21O+u+HNOC/IdqqylEbd
-80ViH9gVPElDUY7pOEBk3jj7Hquif6LsK/v0ij5WkebdofCOjF1U+NeEAwkdx8he
-HcNbinqgoBpUezf3cRhKeJtPni5rDIlc/WE1QgSCU5+eCflCGvNojujpVEX66Jpb
-LcSX3uq+yOn1k7uM/ORHNoJ+TTV0CpIR6SD1Utvpd3KiyhLzZikQ5/WlagDKqasa
-ugW34mKPk0KhnKcBfB6DcXjzw7dame2YfI2jcrc3w6WYyotDxAaUJ1Hazw+tU0wS
-eo9dvS9isdezEZVq2yfOLozsYsqKRpTk4ruWx8/alsnlqi6Q0+qpL8wME9ev+bPM
-c52t5JbnMOQO3BFbm6N6f1UzZRg1J1WFpGTgA24fU47colCLgMMOtyPVEQDeuczz
-RhZlU+i5rjTexgw9E0nNpZN70UYf4xkR1HNWZJf5j9FIiRTpuIdYim51JKtiRmMm
-cWnLX/MDKGprUKf+rmoNHsArBAHDuwIId/BAKwJD7UnrhzMky4llyJRqbzClPyRS
-AF234zQzLqiO5MDCD8Gr/ANXww2uechhSVg4ZTdYoaWc13duX7a2HBCWk86jQqZW
-UBhSyHQipgv27MuMBq+uWMYVniqbzKAmFuTAM4QAP4UywNeYKwIJWwAZnS7Nbrz5
-hb3n8gv0GMKxxZQ/2U2w3FTJm0wuBQ6Y0fZ6gefNI0CgLPOyAjRYVEhwP1KQ5Qef
-dtNhFfB4ooPBJyg6I+G/BFuJNXJKu1kjYV3xh+kWGw7hvYeOdK8CZXCUJU7cBWCM
-n0aPNWuQ6O2rrVk62P+oXux825OsaNXQWdZe9jmaqAW4AUIwaVNSNyhStPEjmL18
-+jnEhLLtn2fw27uNOHa+iQK5p4J8fGYE+k41yyoNTfyznHaZSORriEWyb70Tyu4Z
-f0QQQ7aljO5KicAwQpc+gOEhpZqT4YU2wo6GR15IquzqHadQz5QhT1+WM++KhYmj
-+wlmlmO8GUJyJyXTap/MWBayjUPtT5Yrv/4n3ypYGuWarw2myxIZv8/XuBoF25jX
-ce+VEJjRMc4YBZm44QFshxMcMdhNPa/5+Mb+0qd2BkBcv4LmJvboqMF/e+vQopb7
-zHd4LEskjtvNVtpv1On3jgjpcqrPjfclG4+RA9L8SUoNjb/7AZcDyvT1D1lbyPVW
-kjZk68wxQwo15o2tao43twi/hU4E9saSgzGcjGkrfyCMhdNR/rmse1O8rTdzXOyy
-47PTuwBeniGsk1/O/hNgzOMH2Ix82SdwRXA5LCHi4yxR0mRcd0E8oD1G3o2c6dye
-AeLY0acTDU3OXJ2zldGHJU0InvQSyaSIIP2BlMAKf9lYbbEAHNC4GanN4ccw92sn
-qCEv3e+TouULEtP2KmluWkxieSOWLMRxIJrRyLAjbzbnv4r+hoFQnTAFrsHP+7Wt
-ETiLQctQ77ieeoyaqTc7xw9Kozm439DsnnXot9Zh9FGNrc4uP87sF6TmaDRzhWOy
-E2oGcSBXFCtYD76BfRV9b5vOPESx7LsYxpbbZepOdeK2C4yarf6pKfGEydm/1/Sx
-/BKQD7aKe+828WF/QVcFFVJgWraGelIy8Rx271k+LoV9BoodUrDYugnwQX8OPUE2
-aIqsFyjfGN0UNRRrl4fWE3lYiwGcQOPOfJdXHGlaC/1rF0Qp9tNC7GpKzU7WsaPX
-QUZjXCs8J0t7FreFF3iZw0+ZkXX8b4+GV4hzpTI1+x0dUvFNdLcb7cK8y8mcz4EO
-h99c7L1KUgMzlSryei0bn/E7pmQnzJEEOb72DEE7b2fCdfFYF1p4IAdVIeZAu9Jv
-yrbeGSg2I99C3xbcIuvFGNii1rFvL4pSLo13K5PelY2TCoq3T1+aNjVP/mTAwW8n
------END RSA PRIVATE KEY-----
diff --git a/configs/keys/ca1/ca.cfg b/configs/keys/ca1/ca1-ast1.cfg
similarity index 79%
rename from configs/keys/ca1/ca.cfg
rename to configs/keys/ca1/ca1-ast1.cfg
index 01d2cf0..7fce99e 100644
--- a/configs/keys/ca1/ca.cfg
+++ b/configs/keys/ca1/ca1-ast1.cfg
@@ -3,8 +3,8 @@
prompt = no
[req_distinguished_name]
-CN=Asterisk Private CA
-O=ast1
+CN=127.0.0.1
+O=Asterisk
[ext]
basicConstraints=CA:TRUE
diff --git a/configs/keys/ca1/ca1-ast1.crt b/configs/keys/ca1/ca1-ast1.crt
new file mode 100644
index 0000000..2180e9e
--- /dev/null
+++ b/configs/keys/ca1/ca1-ast1.crt
@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/configs/keys/ca1/ca1-ast1.csr b/configs/keys/ca1/ca1-ast1.csr
new file mode 100644
index 0000000..be226ad
--- /dev/null
+++ b/configs/keys/ca1/ca1-ast1.csr
@@ -0,0 +1,10 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIIBZjCB0AIBADAnMRIwEAYDVQQDDAkxMjcuMC4wLjExETAPBgNVBAoMCEFzdGVy
+aXNrMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC/5g3+gUyvnhC1PD8bHHTj
+ZnolyOu2qweTFwU1/NZVKvF3xFFbfw+ZbQh3GgyQzUVa6xlboJq4rJKZjisl8j0+
+yKW54CY+JXFE9nqgSQBPmwROhBEh7G8gStcOWOgmFBeNK8Q2Ow3IByc+96R9WcIY
+LwrsebA8kiT4iq4QPMwIxQIDAQABoAAwDQYJKoZIhvcNAQELBQADgYEAk7pIN3Lh
+JHi3TSDcWelm0jKPJy9LUtjcFU1MZr3Hbcy55gVmMA/fODvDXTxm0WHR4sTD6950
+mcIcntTr2leA6ZkeNevXPOT9187KWarcjs44Txvfv3mCqker1RIlqecwwMvsQXKO
+PZTeDBy0RaHlmgh1qCGQ0t6LTmKszS5EzgU=
+-----END CERTIFICATE REQUEST-----
diff --git a/configs/keys/ca1/ca1-ast1.key b/configs/keys/ca1/ca1-ast1.key
new file mode 100644
index 0000000..4a7e28e
--- /dev/null
+++ b/configs/keys/ca1/ca1-ast1.key
@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIICXQIBAAKBgQC/5g3+gUyvnhC1PD8bHHTjZnolyOu2qweTFwU1/NZVKvF3xFFb
+fw+ZbQh3GgyQzUVa6xlboJq4rJKZjisl8j0+yKW54CY+JXFE9nqgSQBPmwROhBEh
+7G8gStcOWOgmFBeNK8Q2Ow3IByc+96R9WcIYLwrsebA8kiT4iq4QPMwIxQIDAQAB
+AoGAUn8GGRlg7EaZjDBAONl87p2JeWDs5HSWJwfId7MgOTDi6cf96cWv4Rdcgkcy
+i7WTUUiseBWNLkMSKu1RY1jGNs5VmHGnfVEa31H5yBUpsUeeiC3N0MKq44PnuAfj
+uSwCLF/yb7BTl9WJx6UoIbJ96cv1jhdbJOkpEJkjkI7rYEECQQDu0HNSvuVNrkhy
+JW8uGfqWyrl8jDy5JpyM/HFOsNa4H1kajvhkxiQXXbq+vwzYDKmI1woxx4018Rf6
+dcgYY64JAkEAzbVNdv9MjXg4Pj+exO0kkvlOjWFA3AVPXEXn+Egg24e/KR2xZA1g
+gV9zCluXVhRT77esJ3DshuiuL8HaPzsz3QJBAKaieqWVH+kZH+HN7wsLA4huQgj+
+zWwf3gKeLu3KhLiK3yCh+/5NJ2fKdgCczHiANVePPMTJSeYGqUWRI6KpAwkCQQCV
+vKiTu0ilHeKK5VKT9C8QUStt3GITBkZ7W2N8pjxMsKZkrnmG4/ngknMyEfO6M/fZ
+YfCNkTSLC2pn1wsfxd99AkAhJLiaUhufrv8irF+WjzAyHyBH/mSMSrIFb19ZVAc5
+ZG9yB/AEJw9OqJo0yr5pYthZ+10o0FLPPeOCnEJmH3Iv
+-----END RSA PRIVATE KEY-----
diff --git a/configs/keys/ca1/ca1-ast1.pem b/configs/keys/ca1/ca1-ast1.pem
new file mode 100644
index 0000000..a0ef4bb
--- /dev/null
+++ b/configs/keys/ca1/ca1-ast1.pem
@@ -0,0 +1,35 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/configs/keys/ca1/ca.cfg b/configs/keys/ca1/ca1-ast2.cfg
similarity index 79%
copy from configs/keys/ca1/ca.cfg
copy to configs/keys/ca1/ca1-ast2.cfg
index 01d2cf0..7fce99e 100644
--- a/configs/keys/ca1/ca.cfg
+++ b/configs/keys/ca1/ca1-ast2.cfg
@@ -3,8 +3,8 @@
prompt = no
[req_distinguished_name]
-CN=Asterisk Private CA
-O=ast1
+CN=127.0.0.1
+O=Asterisk
[ext]
basicConstraints=CA:TRUE
diff --git a/configs/keys/ca1/ca1-ast2.crt b/configs/keys/ca1/ca1-ast2.crt
new file mode 100644
index 0000000..5bd8d56
--- /dev/null
+++ b/configs/keys/ca1/ca1-ast2.crt
@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----
+MIIDTDCCATQCAQEwDQYJKoZIhvcNAQELBQAwNTEgMB4GA1UEAwwXQXN0ZXJpc2sg
+UHJpdmF0ZSBDQSBjYTExETAPBgNVBAoMCEFzdGVyaXNrMB4XDTE3MTIwNjIyMjI1
+NVoXDTE4MTIwNjIyMjI1NVowJzESMBAGA1UEAwwJMTI3LjAuMC4xMREwDwYDVQQK
+DAhBc3RlcmlzazCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAw8f2YY5bIwXP
+e5pcHMZCjTquYr/pectPPrXbpjWyWiqHr+3Xl9Sh/ekVkoHGq1FUYZCQR10AG2vo
+oVz/kupKK/zJa0VqbUreIt7mwRIYZ5g+/SBG8k8sxQvbTN9eL32NbkgXkQD9sEMj
+9RzPuV28FjzcC3vPSKjH4JgAjim/bN0CAwEAATANBgkqhkiG9w0BAQsFAAOCAgEA
+nV4403rpSriQk1nNuzH7xmzwxbjzQn1B+myRoxgKR1P9qIXz7IvOSablyC5WQtG8
+UCLekS41+DzQvnuHyLXElfo9EJcMrqBOSSN3nzVnCebHVtbP1Kp36qD88NJMK0Iq
+sKzhtq0IemFoOa2J1j0THHKAyOhFbIkY5veSKVdb2HnafYtmyk75CRmLHJK41vPx
+3eQ1LsvxoPNyls38DkHOlLm8a77MVr9UdreM4xa8jXySSLgzw2PSKL/DiT9pWwOU
+by769yrORvhJ55AD3E77TYSW5qg1QL0iBpk1d/gE0+ODrjzWFUS2UYJYY51zqS0h
+ne59sSqe/7MNdN1B2GnzBbKlXFQ0xcrN/rKgNWU7pVhewzNO4Of526GcXcm3fIMo
+u/r1k/9Bs+fo300rg/+KGPsF1sWoJLrAzJx9ivzL8GbSxQT98cYF4UMhVcNq0pWU
+r0xI1uarOfxLCxSfy3rdllVpLWKobG8RAGXzbY7vWNpce+esG91wQAwLu2gvKUYq
+L9+jKOhZocSmRVo91LE8oSZkkKsnoePSQOGoP8yBskr0ueEWYv6tK49Kjy7uOt0I
+w96zlXvB0dg0F9/8jYdYHxXklMKLUeBXU3lg4PQT8BaGY2z4v3k9/QdBz1SEDmM1
+OZssTw4DHAAfU3g9QiyCo9xBO0AZH6JNV10s6hzyPcA=
+-----END CERTIFICATE-----
diff --git a/configs/keys/ca1/ca1-ast2.csr b/configs/keys/ca1/ca1-ast2.csr
new file mode 100644
index 0000000..e76ca55
--- /dev/null
+++ b/configs/keys/ca1/ca1-ast2.csr
@@ -0,0 +1,10 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIIBZjCB0AIBADAnMRIwEAYDVQQDDAkxMjcuMC4wLjExETAPBgNVBAoMCEFzdGVy
+aXNrMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDx/ZhjlsjBc97mlwcxkKN
+Oq5iv+l5y08+tdumNbJaKoev7deX1KH96RWSgcarUVRhkJBHXQAba+ihXP+S6kor
+/MlrRWptSt4i3ubBEhhnmD79IEbyTyzFC9tM314vfY1uSBeRAP2wQyP1HM+5XbwW
+PNwLe89IqMfgmACOKb9s3QIDAQABoAAwDQYJKoZIhvcNAQELBQADgYEAMnJOKGLD
+uiD335xIVzEUdxIujHVzKVGsfjWW+3EQwnyR7F/GN5iVnOxMXjnzuhx7Ubd/PJZ4
+8/GOGlD8eKLiD7DTohgbj8/VYnZakaqV0YFAqc/O/eglqY2jY/aqR2dr/XVd/nMx
+0Ez+n3OnELoIeopbO919nEj84eazio/OiOc=
+-----END CERTIFICATE REQUEST-----
diff --git a/configs/keys/ca1/ca1-ast2.key b/configs/keys/ca1/ca1-ast2.key
new file mode 100644
index 0000000..6d8ddc3
--- /dev/null
+++ b/configs/keys/ca1/ca1-ast2.key
@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/configs/keys/ca1/ca1-ast2.pem b/configs/keys/ca1/ca1-ast2.pem
new file mode 100644
index 0000000..60016ec
--- /dev/null
+++ b/configs/keys/ca1/ca1-ast2.pem
@@ -0,0 +1,35 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/configs/keys/ca1/ca.cfg b/configs/keys/ca1/ca1-ast3.cfg
similarity index 79%
copy from configs/keys/ca1/ca.cfg
copy to configs/keys/ca1/ca1-ast3.cfg
index 01d2cf0..7fce99e 100644
--- a/configs/keys/ca1/ca.cfg
+++ b/configs/keys/ca1/ca1-ast3.cfg
@@ -3,8 +3,8 @@
prompt = no
[req_distinguished_name]
-CN=Asterisk Private CA
-O=ast1
+CN=127.0.0.1
+O=Asterisk
[ext]
basicConstraints=CA:TRUE
diff --git a/configs/keys/ca1/ca1-ast3.crt b/configs/keys/ca1/ca1-ast3.crt
new file mode 100644
index 0000000..90bce20
--- /dev/null
+++ b/configs/keys/ca1/ca1-ast3.crt
@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/configs/keys/ca1/ca1-ast3.csr b/configs/keys/ca1/ca1-ast3.csr
new file mode 100644
index 0000000..6217a5c
--- /dev/null
+++ b/configs/keys/ca1/ca1-ast3.csr
@@ -0,0 +1,10 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIIBZjCB0AIBADAnMRIwEAYDVQQDDAkxMjcuMC4wLjExETAPBgNVBAoMCEFzdGVy
+aXNrMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIeckTFXzLWccSyVntD8br
+KxApdlIpelYOYGMGARempqL/vJRccPSIN0q2cG2VpB6UhQhb5S0uLwoAB1NGHbiO
+JAUFZ8h+MVdkR+xJHVVJw5kmO2hisspA/pP2xE2Vih30Jj98vYdKrZuZp4ExkC7B
+MOzeUvN1r8JZays6qY9hEwIDAQABoAAwDQYJKoZIhvcNAQELBQADgYEAGqQn77MQ
+HiewvPF2T0gaKql0rK7fdk1aG1Gfvrb1I8WqqdLhI93H6udiqpdLvkCmUrV+ZYBz
+vL1Gs/sMyY53ilER+jmrmuT+BJ6XBNp81vAUnMCizZBbcLdXfM0GiEVDlnN+uxDu
+NmPRI4Jj0hHUfzeO4GEMGbbRW8Uy3eaI7AE=
+-----END CERTIFICATE REQUEST-----
diff --git a/configs/keys/ca1/ca1-ast3.key b/configs/keys/ca1/ca1-ast3.key
new file mode 100644
index 0000000..74d87f3
--- /dev/null
+++ b/configs/keys/ca1/ca1-ast3.key
@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/configs/keys/ca1/ca1-ast3.pem b/configs/keys/ca1/ca1-ast3.pem
new file mode 100644
index 0000000..db093fd
--- /dev/null
+++ b/configs/keys/ca1/ca1-ast3.pem
@@ -0,0 +1,35 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/configs/keys/ca1/ca.cfg b/configs/keys/ca1/ca1-ast4.cfg
similarity index 79%
copy from configs/keys/ca1/ca.cfg
copy to configs/keys/ca1/ca1-ast4.cfg
index 01d2cf0..7fce99e 100644
--- a/configs/keys/ca1/ca.cfg
+++ b/configs/keys/ca1/ca1-ast4.cfg
@@ -3,8 +3,8 @@
prompt = no
[req_distinguished_name]
-CN=Asterisk Private CA
-O=ast1
+CN=127.0.0.1
+O=Asterisk
[ext]
basicConstraints=CA:TRUE
diff --git a/configs/keys/ca1/ca1-ast4.crt b/configs/keys/ca1/ca1-ast4.crt
new file mode 100644
index 0000000..294b6f7
--- /dev/null
+++ b/configs/keys/ca1/ca1-ast4.crt
@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----
+MIIDTDCCATQCAQEwDQYJKoZIhvcNAQELBQAwNTEgMB4GA1UEAwwXQXN0ZXJpc2sg
+UHJpdmF0ZSBDQSBjYTExETAPBgNVBAoMCEFzdGVyaXNrMB4XDTE3MTIwNjIyMjI1
+NVoXDTE4MTIwNjIyMjI1NVowJzESMBAGA1UEAwwJMTI3LjAuMC4xMREwDwYDVQQK
+DAhBc3RlcmlzazCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA87D7pVkCRPNc
+gYEcvGw7W9CHB4DJ4jS4mDwn/24ineM6mj2QfvY8iqAaP2KFqwueVh+UDj+7DvQ/
++9lCLdfWtpPKyDH9qy0q8APq1VYmK6UFNSOEOAOrRJyU69iMrVwT6omyMoLPQbBC
+/RFTNdpYQLkkEJM1Ubg8NDRseIPHs28CAwEAATANBgkqhkiG9w0BAQsFAAOCAgEA
+g3RcEcuXuYywjYR6DPEB8EDFIshSomc6h3vRM8mOY7fVBD2EV149AGD8nNqsyvov
+E9RUFKzWic20M763j1ozBvIY0HQWlTnM8cSBxXubL7EC67glQ381/QOyWSZe5rPq
+1wzexp4Wh4LNvgDut+WxerjOoMDUTU3vil9Wk1cAfbvDUJxVwKi8Ao2FYLtCmHbe
+YYTs58TDNkBJIh1d2gGX5pg0HdX/I2UO3Df2MqE5RigkrkLqU2SHnfBdT8XqWDwt
+5am8gB4PQrEOcLFS4VJMjR6u2eGYirSOUudT20cuGB1Q0z7aQBPentB0rdZEgYm+
+qykoL5IvdSgJsWoyeZRSKEMKALcp8jJF2mkg3pf7DLZgNWuNKqrvu9GGW39+CmVq
+k7ZlxD8grAjWIF+owh3RoD1TLdN8Zk8SpKv8HGRHA23a90rIxP1CW7xdhpt7sVTP
+FyRq/1UjNfGJm8TfWPXRWLQsu7UFOyo9m4iKcz8OAd0t62Dye2jArGQmxvXGwGHi
+HfkxXpoPBlywsNjIhUWfURgwrtgxzMrvf06BhJZwB3roEYA2zz5WE4YVf994/FOO
+lu7bVUMOkrje4JjfYMrdSbt15Og3fGaaKzv69D15LAFgEuU/f05gZfDFKXxTPIpo
+rPqevRAiZFQ9MjozY/P6W0EZBBazsrvwL82e1Wrhn44=
+-----END CERTIFICATE-----
diff --git a/configs/keys/ca1/ca1-ast4.csr b/configs/keys/ca1/ca1-ast4.csr
new file mode 100644
index 0000000..d7f5281
--- /dev/null
+++ b/configs/keys/ca1/ca1-ast4.csr
@@ -0,0 +1,10 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIIBZjCB0AIBADAnMRIwEAYDVQQDDAkxMjcuMC4wLjExETAPBgNVBAoMCEFzdGVy
+aXNrMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDzsPulWQJE81yBgRy8bDtb
+0IcHgMniNLiYPCf/biKd4zqaPZB+9jyKoBo/YoWrC55WH5QOP7sO9D/72UIt19a2
+k8rIMf2rLSrwA+rVViYrpQU1I4Q4A6tEnJTr2IytXBPqibIygs9BsEL9EVM12lhA
+uSQQkzVRuDw0NGx4g8ezbwIDAQABoAAwDQYJKoZIhvcNAQELBQADgYEABY1V08la
+LGq1GhKeP70F362Zlf22DYZzoNto4BkKY0nboDfERJvqhTALD1CHkwmgNMBKdvQ5
+25+Qu9oryP5vCP+9UnVlWVl4/8dEoaTOEdaPaznTErUqA7Fq/zN/IsUkMMmFanTg
+NPGbCXHsmM+fIoZkHXxrzmpp2PcrzaUO9ko=
+-----END CERTIFICATE REQUEST-----
diff --git a/configs/keys/ca1/ca1-ast4.key b/configs/keys/ca1/ca1-ast4.key
new file mode 100644
index 0000000..b600516
--- /dev/null
+++ b/configs/keys/ca1/ca1-ast4.key
@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIICXQIBAAKBgQDzsPulWQJE81yBgRy8bDtb0IcHgMniNLiYPCf/biKd4zqaPZB+
+9jyKoBo/YoWrC55WH5QOP7sO9D/72UIt19a2k8rIMf2rLSrwA+rVViYrpQU1I4Q4
+A6tEnJTr2IytXBPqibIygs9BsEL9EVM12lhAuSQQkzVRuDw0NGx4g8ezbwIDAQAB
+AoGBAMErc+74BZJ+jr+hhxPdf5giTkcmUeHcBM+4L8SMmygo7VVCo/3gVtFUZDoG
+cQrLJPIECirZXgBWoTmUWJ9aTrnTm/1xpYDyOebaYsIIDMMXugZ4ywsSounal+KJ
+BR2MBP2v/7mJaiCvuAVJpSd9bQNsKS0ewWn4YUnM47Nd9+LRAkEA/VRyniG5KV8z
+aJZiEu0Df6H3r7elrMPpuB6mhXwCsG5pzSIkg1pwFINveL2WDARNiWIRoklbUqnQ
+4XzhISOUuwJBAPZChySxXbp0t1AYCwP+2GRR+NVaPzp/95Hfg3WzEyd/4qhAzs7M
+/Jv4sOuWHwyVXhCpC4HitFhoikM/ifkzCt0CQQDMs9luWDfD646h+6rCOk0ybFG1
+5sL0SNbqFbJfeKa/pGjP/r/ceE7K9K41tZSynyN8WQeAyKAHuvrzyjIs0hCTAkAg
+UKqbTgsWpKpJgF4xsAeFYpxcovMZIiHCqqn9j/o7fLSpj5eT26JqdUACKjj41cD6
+PrSb3rv7vfwmxve8E86hAkAg42BJs4OJfdyyv9d4Z9vt+tFq538fZrDT7koaFCgp
+zalJiO6b+L7DSlMBQIvmh09nnhBwMSGgX9HqTWw7rvJ3
+-----END RSA PRIVATE KEY-----
diff --git a/configs/keys/ca1/ca1-ast4.pem b/configs/keys/ca1/ca1-ast4.pem
new file mode 100644
index 0000000..54e7894
--- /dev/null
+++ b/configs/keys/ca1/ca1-ast4.pem
@@ -0,0 +1,35 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
+-----BEGIN CERTIFICATE-----
+MIIDTDCCATQCAQEwDQYJKoZIhvcNAQELBQAwNTEgMB4GA1UEAwwXQXN0ZXJpc2sg
+UHJpdmF0ZSBDQSBjYTExETAPBgNVBAoMCEFzdGVyaXNrMB4XDTE3MTIwNjIyMjI1
+NVoXDTE4MTIwNjIyMjI1NVowJzESMBAGA1UEAwwJMTI3LjAuMC4xMREwDwYDVQQK
+DAhBc3RlcmlzazCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA87D7pVkCRPNc
+gYEcvGw7W9CHB4DJ4jS4mDwn/24ineM6mj2QfvY8iqAaP2KFqwueVh+UDj+7DvQ/
++9lCLdfWtpPKyDH9qy0q8APq1VYmK6UFNSOEOAOrRJyU69iMrVwT6omyMoLPQbBC
+/RFTNdpYQLkkEJM1Ubg8NDRseIPHs28CAwEAATANBgkqhkiG9w0BAQsFAAOCAgEA
+g3RcEcuXuYywjYR6DPEB8EDFIshSomc6h3vRM8mOY7fVBD2EV149AGD8nNqsyvov
+E9RUFKzWic20M763j1ozBvIY0HQWlTnM8cSBxXubL7EC67glQ381/QOyWSZe5rPq
+1wzexp4Wh4LNvgDut+WxerjOoMDUTU3vil9Wk1cAfbvDUJxVwKi8Ao2FYLtCmHbe
+YYTs58TDNkBJIh1d2gGX5pg0HdX/I2UO3Df2MqE5RigkrkLqU2SHnfBdT8XqWDwt
+5am8gB4PQrEOcLFS4VJMjR6u2eGYirSOUudT20cuGB1Q0z7aQBPentB0rdZEgYm+
+qykoL5IvdSgJsWoyeZRSKEMKALcp8jJF2mkg3pf7DLZgNWuNKqrvu9GGW39+CmVq
+k7ZlxD8grAjWIF+owh3RoD1TLdN8Zk8SpKv8HGRHA23a90rIxP1CW7xdhpt7sVTP
+FyRq/1UjNfGJm8TfWPXRWLQsu7UFOyo9m4iKcz8OAd0t62Dye2jArGQmxvXGwGHi
+HfkxXpoPBlywsNjIhUWfURgwrtgxzMrvf06BhJZwB3roEYA2zz5WE4YVf994/FOO
+lu7bVUMOkrje4JjfYMrdSbt15Og3fGaaKzv69D15LAFgEuU/f05gZfDFKXxTPIpo
+rPqevRAiZFQ9MjozY/P6W0EZBBazsrvwL82e1Wrhn44=
+-----END CERTIFICATE-----
diff --git a/configs/keys/ca1/ca.cfg b/configs/keys/ca1/ca1.cfg
similarity index 75%
copy from configs/keys/ca1/ca.cfg
copy to configs/keys/ca1/ca1.cfg
index 01d2cf0..d05d570 100644
--- a/configs/keys/ca1/ca.cfg
+++ b/configs/keys/ca1/ca1.cfg
@@ -3,8 +3,8 @@
prompt = no
[req_distinguished_name]
-CN=Asterisk Private CA
-O=ast1
+CN=Asterisk Private CA ca1
+O=Asterisk
[ext]
basicConstraints=CA:TRUE
diff --git a/configs/keys/ca1/ca1.crt b/configs/keys/ca1/ca1.crt
new file mode 100644
index 0000000..d418df7
--- /dev/null
+++ b/configs/keys/ca1/ca1.crt
@@ -0,0 +1,29 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/configs/keys/ca1/ca1.key b/configs/keys/ca1/ca1.key
new file mode 100644
index 0000000..699322f
--- /dev/null
+++ b/configs/keys/ca1/ca1.key
@@ -0,0 +1,51 @@
+-----BEGIN RSA PRIVATE KEY-----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=
+-----END RSA PRIVATE KEY-----
diff --git a/configs/keys/ca1/tmp.cfg b/configs/keys/ca1/tmp.cfg
deleted file mode 100644
index 42318f5..0000000
--- a/configs/keys/ca1/tmp.cfg
+++ /dev/null
@@ -1,8 +0,0 @@
-[req]
-distinguished_name = req_distinguished_name
-prompt = no
-
-[req_distinguished_name]
-CN=127.0.0.1
-O=ast4
-
diff --git a/configs/keys/ca2.crt b/configs/keys/ca2.crt
new file mode 120000
index 0000000..c0bb763
--- /dev/null
+++ b/configs/keys/ca2.crt
@@ -0,0 +1 @@
+ca2/ca2.crt
\ No newline at end of file
diff --git a/configs/keys/ca2/ast1.crt b/configs/keys/ca2/ast1.crt
deleted file mode 100644
index 4847c91..0000000
--- a/configs/keys/ca2/ast1.crt
+++ /dev/null
@@ -1,20 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDQDCCASgCAQEwDQYJKoZIhvcNAQELBQAwLTEcMBoGA1UEAwwTQXN0ZXJpc2sg
-UHJpdmF0ZSBDQTENMAsGA1UECgwEYXN0MTAeFw0xNzEyMDUxNTA3MjRaFw0xODEy
-MDUxNTA3MjRaMCMxEjAQBgNVBAMMCTEyNy4wLjAuMTENMAsGA1UECgwEYXN0MTCB
-nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA4tltJxwqSuISM4efPdZ7mvlNPGk8
-eeRy/YVeCXAvenk+EmiQD1KKvlY6SwHJcnyqgGQYQxb+hBDQJHSzvIDytR6ls51j
-qyMqwq7CHT4Q2Fp/gQ8kE1Otkhgv4NMrFm4J6ounr6EZ6AODNokQnVLuS2m3//Qx
-jtffmWW37OpElWUCAwEAATANBgkqhkiG9w0BAQsFAAOCAgEAgU9rLVOrZ8jYoZXb
-UPqzN7a8hF18PpkCou9yJEqZSBnd2ZQPfsJ4t6y2HXwCtEa4Yxypx3+/xeWQNdUN
-/lXZqiKMEP7OSgSNXnKjvOwuyePhO/b2bVFYK/d4e+5hP3Tuuqy8KzmbN1HMOW+C
-slPBvzRyEe6oXjfkUoNekPcYpvYQ3ZSqurCwxy5WxqSocMx3tVP3wziriPUQ2GDS
-+H2o5k3r4wlUpG3UW2bA+DfMhxzl+4pGYfjrRh1veXyYRzb9qsVflS9ZzkhtNzYF
-qsEBHTZqmMOGONjtIH64RKxG3XlRn8hA+5r165MYqZWoe/mxsfJLJg/DyfdLswsQ
-vxilOcey2EiFqbfg3puGaFhIr1byEuBIZIRT9ZbY/bRCAT1I8/0u8c7Ax7Us+xV8
-rk5gm/dzKXNaMbPYRj98+vuYCCSQWUlh7ft7qzkaPRrcobw32yQt8LqPywteKLcP
-pZ445QeqsqQxQTeCylCr30EDS8olepu+uWtL1es3B8jMgXFB9S16Ol8oS8cpP7I0
-eyjUu5PV1PJUxx52+wuZTOyC/KufGPNx2/cl4GfV+eMRvGDciwtGqA+wAcFfJmTp
-SfbWS1fVieC821AyF/FXgTJdtjkk2Rvhdwc5mb8QzZXYZzG4eCfejxcbvAB1Hb2w
-zTvNinKSebozS9jBxdfWvPuzKn0=
------END CERTIFICATE-----
diff --git a/configs/keys/ca2/ast1.csr b/configs/keys/ca2/ast1.csr
deleted file mode 100644
index 4fdcc2c..0000000
--- a/configs/keys/ca2/ast1.csr
+++ /dev/null
@@ -1,10 +0,0 @@
------BEGIN CERTIFICATE REQUEST-----
-MIIBYjCBzAIBADAjMRIwEAYDVQQDDAkxMjcuMC4wLjExDTALBgNVBAoMBGFzdDEw
-gZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAOLZbSccKkriEjOHnz3We5r5TTxp
-PHnkcv2FXglwL3p5PhJokA9Sir5WOksByXJ8qoBkGEMW/oQQ0CR0s7yA8rUepbOd
-Y6sjKsKuwh0+ENhaf4EPJBNTrZIYL+DTKxZuCeqLp6+hGegDgzaJEJ1S7ktpt//0
-MY7X35llt+zqRJVlAgMBAAGgADANBgkqhkiG9w0BAQsFAAOBgQAB2f+zJYWLvTeE
-EO4SlOZBSmm55/nN37wWyfSicnWDbKTHuZZuYbRB8YO5W+Kuh7v2+8mTHF63Exex
-8KKz1cv+NlfsSPCCFyPL4DdmoP/P0wb/4k9LXXuFCB1KgwJX3l+dG4nrzX+1jFtA
-PeeTMlSDRIZIH+QY/aGo+kL8HHjdsg==
------END CERTIFICATE REQUEST-----
diff --git a/configs/keys/ca2/ast1.key b/configs/keys/ca2/ast1.key
deleted file mode 100644
index 6080d82..0000000
--- a/configs/keys/ca2/ast1.key
+++ /dev/null
@@ -1,15 +0,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIICXQIBAAKBgQDi2W0nHCpK4hIzh5891nua+U08aTx55HL9hV4JcC96eT4SaJAP
-Uoq+VjpLAclyfKqAZBhDFv6EENAkdLO8gPK1HqWznWOrIyrCrsIdPhDYWn+BDyQT
-U62SGC/g0ysWbgnqi6evoRnoA4M2iRCdUu5Labf/9DGO19+ZZbfs6kSVZQIDAQAB
-AoGBAN9MRUzNRbhGhsIgixi0yyFGq8d+k6AsxyBVKrbBroqxU++M69mZV6d6e5Ef
-5isDGladsOBBfzGC11A7bD1u9PiH3enAwvBUuaIKmqIKQWAD4Q4YSJWr+pxaTDxK
-bU4pmUb49hhaqT7fz4wmJ7Oc62OHKWI6y8wkBC9QOCqZ9LZhAkEA9/Pm+uArOfAh
-wXDskzOjSrtdg9Ui4cqlw+UpXKlWAkwGX2Iw56sRMFt3da9DhBbQj2FDHCH1RanH
-+4y98vWpzQJBAOo2MBYIVa13YWe+tILdpIjW1WwtnhKCw/3gIBfF2X01Yw0KYbmQ
-xSVQR2eGaGmygVzaZJaDHyxTjyqC0w0rIfkCQQDsCPfBrHIZxlkr30al3ks80d30
-qIl7LcDdGaJlPiHNL/gFBuENOFC1muy+T+hSrrE9PFZ5Sm5FMZlZAiK0TV2lAkBR
-o2nHhEg5Gu+89eB97Tw45ommF5CN6z7d8428O56/4igQl5nQ0QGnLAB3uYYTscEd
-2JJPVI09KjMxIkDmyi4hAkAgCWkp//nbaMJGHi3GX9N05icFW0mth86bFjdqNiaQ
-RDepPEeh2fe36fr3bB3XhCU06h8WjGsIkyNhIPQoWNoK
------END RSA PRIVATE KEY-----
diff --git a/configs/keys/ca2/ast1.pem b/configs/keys/ca2/ast1.pem
deleted file mode 100644
index 827bf29..0000000
--- a/configs/keys/ca2/ast1.pem
+++ /dev/null
@@ -1,35 +0,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIICXQIBAAKBgQDi2W0nHCpK4hIzh5891nua+U08aTx55HL9hV4JcC96eT4SaJAP
-Uoq+VjpLAclyfKqAZBhDFv6EENAkdLO8gPK1HqWznWOrIyrCrsIdPhDYWn+BDyQT
-U62SGC/g0ysWbgnqi6evoRnoA4M2iRCdUu5Labf/9DGO19+ZZbfs6kSVZQIDAQAB
-AoGBAN9MRUzNRbhGhsIgixi0yyFGq8d+k6AsxyBVKrbBroqxU++M69mZV6d6e5Ef
-5isDGladsOBBfzGC11A7bD1u9PiH3enAwvBUuaIKmqIKQWAD4Q4YSJWr+pxaTDxK
-bU4pmUb49hhaqT7fz4wmJ7Oc62OHKWI6y8wkBC9QOCqZ9LZhAkEA9/Pm+uArOfAh
-wXDskzOjSrtdg9Ui4cqlw+UpXKlWAkwGX2Iw56sRMFt3da9DhBbQj2FDHCH1RanH
-+4y98vWpzQJBAOo2MBYIVa13YWe+tILdpIjW1WwtnhKCw/3gIBfF2X01Yw0KYbmQ
-xSVQR2eGaGmygVzaZJaDHyxTjyqC0w0rIfkCQQDsCPfBrHIZxlkr30al3ks80d30
-qIl7LcDdGaJlPiHNL/gFBuENOFC1muy+T+hSrrE9PFZ5Sm5FMZlZAiK0TV2lAkBR
-o2nHhEg5Gu+89eB97Tw45ommF5CN6z7d8428O56/4igQl5nQ0QGnLAB3uYYTscEd
-2JJPVI09KjMxIkDmyi4hAkAgCWkp//nbaMJGHi3GX9N05icFW0mth86bFjdqNiaQ
-RDepPEeh2fe36fr3bB3XhCU06h8WjGsIkyNhIPQoWNoK
------END RSA PRIVATE KEY-----
------BEGIN CERTIFICATE-----
-MIIDQDCCASgCAQEwDQYJKoZIhvcNAQELBQAwLTEcMBoGA1UEAwwTQXN0ZXJpc2sg
-UHJpdmF0ZSBDQTENMAsGA1UECgwEYXN0MTAeFw0xNzEyMDUxNTA3MjRaFw0xODEy
-MDUxNTA3MjRaMCMxEjAQBgNVBAMMCTEyNy4wLjAuMTENMAsGA1UECgwEYXN0MTCB
-nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA4tltJxwqSuISM4efPdZ7mvlNPGk8
-eeRy/YVeCXAvenk+EmiQD1KKvlY6SwHJcnyqgGQYQxb+hBDQJHSzvIDytR6ls51j
-qyMqwq7CHT4Q2Fp/gQ8kE1Otkhgv4NMrFm4J6ounr6EZ6AODNokQnVLuS2m3//Qx
-jtffmWW37OpElWUCAwEAATANBgkqhkiG9w0BAQsFAAOCAgEAgU9rLVOrZ8jYoZXb
-UPqzN7a8hF18PpkCou9yJEqZSBnd2ZQPfsJ4t6y2HXwCtEa4Yxypx3+/xeWQNdUN
-/lXZqiKMEP7OSgSNXnKjvOwuyePhO/b2bVFYK/d4e+5hP3Tuuqy8KzmbN1HMOW+C
-slPBvzRyEe6oXjfkUoNekPcYpvYQ3ZSqurCwxy5WxqSocMx3tVP3wziriPUQ2GDS
-+H2o5k3r4wlUpG3UW2bA+DfMhxzl+4pGYfjrRh1veXyYRzb9qsVflS9ZzkhtNzYF
-qsEBHTZqmMOGONjtIH64RKxG3XlRn8hA+5r165MYqZWoe/mxsfJLJg/DyfdLswsQ
-vxilOcey2EiFqbfg3puGaFhIr1byEuBIZIRT9ZbY/bRCAT1I8/0u8c7Ax7Us+xV8
-rk5gm/dzKXNaMbPYRj98+vuYCCSQWUlh7ft7qzkaPRrcobw32yQt8LqPywteKLcP
-pZ445QeqsqQxQTeCylCr30EDS8olepu+uWtL1es3B8jMgXFB9S16Ol8oS8cpP7I0
-eyjUu5PV1PJUxx52+wuZTOyC/KufGPNx2/cl4GfV+eMRvGDciwtGqA+wAcFfJmTp
-SfbWS1fVieC821AyF/FXgTJdtjkk2Rvhdwc5mb8QzZXYZzG4eCfejxcbvAB1Hb2w
-zTvNinKSebozS9jBxdfWvPuzKn0=
------END CERTIFICATE-----
diff --git a/configs/keys/ca2/ast2.crt b/configs/keys/ca2/ast2.crt
deleted file mode 100644
index 00d3123..0000000
--- a/configs/keys/ca2/ast2.crt
+++ /dev/null
@@ -1,20 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDQDCCASgCAQEwDQYJKoZIhvcNAQELBQAwLTEcMBoGA1UEAwwTQXN0ZXJpc2sg
-UHJpdmF0ZSBDQTENMAsGA1UECgwEYXN0MTAeFw0xNzEyMDUxNTA3MzFaFw0xODEy
-MDUxNTA3MzFaMCMxEjAQBgNVBAMMCTEyNy4wLjAuMTENMAsGA1UECgwEYXN0MjCB
-nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAwRqWUkTYUZXWolG/aTagjgZsANSe
-cDHZdyix+XJHKIhBHUnkLYTUGIdH+off2iiph4iJB+xpKeSC0c501eTrNdW1337l
-hSLozqDrn3Wgxdp4IQC+Q614JAqcRl2armoSPgCFcPIyj04hrfx6sQsnitYxO0J7
-yand+M0c7QFiIh8CAwEAATANBgkqhkiG9w0BAQsFAAOCAgEAdhJPbI6VPthmhORN
-P9YfaKFEhPMjUzUxS+7ZPW5dWRDl+X6mvS/jsg0RmNm/bbPSZDvYRHMMhqzlplsk
-5dMhDurCHGtwLhAj7J4bdmZpbXU4vHbfQHqZhk74bBiO+VBCKi51GcZfPkE2AGrA
-lKWMtQcjdP8XDDgTVytMXAGE+j5/5melyqttnPiaV9dpD5gy/BQvtB8uOkgsaJjt
-qLqcSQmCq5RIsO6PP7zimCTQXfCubi8yId820lXc5y+OW+Yd9hVimTmVhFhDEXZV
-hIdm+mJUqDKb6dTVgrIgqoxD7KwPIHIfy8D6yktE2HhbZ10E99YMU4QCCTWgaJVB
-BPNQVC3TGmz0k5v48ETR8ejf+HULS+aRlXm6p8178/hcxdgLurnFjEQbdCMmK4b8
-EwaBwsRiPKRD0wSMcgaTz5+fl1OKkbZo0kETwot8Rbv7jJYHA/5jFZ3g3kpZ4MbW
-DXNWNApj0eLK6CYhaaY7wRJXRXYnVZNiP3XNt5GNKLFA3IFOzOpHJffYUq9EPTAE
-xPr9ua5E7+hZXc3YQXin0Fo2nHz2oOETp3FzGkg59708X3BGNcEfsvJso8ZVQ7MZ
-cBCflwy0HbThuquE1okBbPxXAC/5zrWFyCbTXGE9ozesFPxowcgXk6W9Ca1OMYuS
-Y3wOBXAN7UUh9N/cxuCpYBKoRuY=
------END CERTIFICATE-----
diff --git a/configs/keys/ca2/ast2.csr b/configs/keys/ca2/ast2.csr
deleted file mode 100644
index 4b11bda..0000000
--- a/configs/keys/ca2/ast2.csr
+++ /dev/null
@@ -1,10 +0,0 @@
------BEGIN CERTIFICATE REQUEST-----
-MIIBYjCBzAIBADAjMRIwEAYDVQQDDAkxMjcuMC4wLjExDTALBgNVBAoMBGFzdDIw
-gZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAMEallJE2FGV1qJRv2k2oI4GbADU
-nnAx2XcosflyRyiIQR1J5C2E1BiHR/qH39ooqYeIiQfsaSnkgtHOdNXk6zXVtd9+
-5YUi6M6g6591oMXaeCEAvkOteCQKnEZdmq5qEj4AhXDyMo9OIa38erELJ4rWMTtC
-e8mp3fjNHO0BYiIfAgMBAAGgADANBgkqhkiG9w0BAQsFAAOBgQC4g3exQep/+Ztz
-AD5UHdY/rEnMzeTHAU/rKGJg3qZqXgacUoSa1GuULq7bmU6zfEiqveshK2eGrmMU
-rOxYSCC2ufPkfaq/XsNPhHyCo25ER3LT3ODgn/gHpPO0iXWZMJ6UdGP+hpHFRcb5
-6myWXuud+XefPiJ30og57I+XkqtzSQ==
------END CERTIFICATE REQUEST-----
diff --git a/configs/keys/ca2/ast2.key b/configs/keys/ca2/ast2.key
deleted file mode 100644
index d88e371..0000000
--- a/configs/keys/ca2/ast2.key
+++ /dev/null
@@ -1,15 +0,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIICXQIBAAKBgQDBGpZSRNhRldaiUb9pNqCOBmwA1J5wMdl3KLH5ckcoiEEdSeQt
-hNQYh0f6h9/aKKmHiIkH7Gkp5ILRznTV5Os11bXffuWFIujOoOufdaDF2nghAL5D
-rXgkCpxGXZquahI+AIVw8jKPTiGt/HqxCyeK1jE7QnvJqd34zRztAWIiHwIDAQAB
-AoGAZzKeQzknofJB0l19vezDwSMNdSQryCnb3iKReo3oGXE32z8yAmGKN9GUVf9n
-Ul+IujXthZ6CVTEZ+KYtKmI8kIkCb2uFSTj+EZVckyQFxqsIoDs3EHSYXsqfz0w+
-pkiHb9psEDzVBDsN22pPBB3N4nu/N9Q+eDhSTk6FaEr6rYECQQD9jjw9aMuwZOoo
-MKI8SXyKXSqeaY/VTOiBEkQYgQa16NrWqZW/6YhPgfj5gs62/xOgRfNUjTt4EaOo
-3It4y/DbAkEAwvco02eFptrTI18fXlkyRKZIVjtbOrEdG9oLxYZIGr33rKMO8IWZ
-S+lWVzY6pePui2VZVFUlIA/hW06ZUKnlDQJBALVQzjEXzHjSYUPmK02zOzTylLR9
-RlbAzY7nEfz332WcI0nYMXbwOAKrLfC3Ir1nwJAfFXeEG1+sNX1eYPo71HsCQQCe
-N3UqGhicD3jIe6k5J6ljjI2nbQPb3V+B+rES2qYpDYCw2KKHDeQZdoJaw+dUOGSd
-OuIDThWSr1ByiJZin30BAkBz3VRkZYDQYYoVrx0Y9/KQHNrRM0VPm1u9toIrcNOG
-uCKvvVMBTe+UQSZWtmuPL8dVd9LA3whzKtzrwWYadhls
------END RSA PRIVATE KEY-----
diff --git a/configs/keys/ca2/ast2.pem b/configs/keys/ca2/ast2.pem
deleted file mode 100644
index 57ae6af..0000000
--- a/configs/keys/ca2/ast2.pem
+++ /dev/null
@@ -1,35 +0,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIICXQIBAAKBgQDBGpZSRNhRldaiUb9pNqCOBmwA1J5wMdl3KLH5ckcoiEEdSeQt
-hNQYh0f6h9/aKKmHiIkH7Gkp5ILRznTV5Os11bXffuWFIujOoOufdaDF2nghAL5D
-rXgkCpxGXZquahI+AIVw8jKPTiGt/HqxCyeK1jE7QnvJqd34zRztAWIiHwIDAQAB
-AoGAZzKeQzknofJB0l19vezDwSMNdSQryCnb3iKReo3oGXE32z8yAmGKN9GUVf9n
-Ul+IujXthZ6CVTEZ+KYtKmI8kIkCb2uFSTj+EZVckyQFxqsIoDs3EHSYXsqfz0w+
-pkiHb9psEDzVBDsN22pPBB3N4nu/N9Q+eDhSTk6FaEr6rYECQQD9jjw9aMuwZOoo
-MKI8SXyKXSqeaY/VTOiBEkQYgQa16NrWqZW/6YhPgfj5gs62/xOgRfNUjTt4EaOo
-3It4y/DbAkEAwvco02eFptrTI18fXlkyRKZIVjtbOrEdG9oLxYZIGr33rKMO8IWZ
-S+lWVzY6pePui2VZVFUlIA/hW06ZUKnlDQJBALVQzjEXzHjSYUPmK02zOzTylLR9
-RlbAzY7nEfz332WcI0nYMXbwOAKrLfC3Ir1nwJAfFXeEG1+sNX1eYPo71HsCQQCe
-N3UqGhicD3jIe6k5J6ljjI2nbQPb3V+B+rES2qYpDYCw2KKHDeQZdoJaw+dUOGSd
-OuIDThWSr1ByiJZin30BAkBz3VRkZYDQYYoVrx0Y9/KQHNrRM0VPm1u9toIrcNOG
-uCKvvVMBTe+UQSZWtmuPL8dVd9LA3whzKtzrwWYadhls
------END RSA PRIVATE KEY-----
------BEGIN CERTIFICATE-----
-MIIDQDCCASgCAQEwDQYJKoZIhvcNAQELBQAwLTEcMBoGA1UEAwwTQXN0ZXJpc2sg
-UHJpdmF0ZSBDQTENMAsGA1UECgwEYXN0MTAeFw0xNzEyMDUxNTA3MzFaFw0xODEy
-MDUxNTA3MzFaMCMxEjAQBgNVBAMMCTEyNy4wLjAuMTENMAsGA1UECgwEYXN0MjCB
-nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAwRqWUkTYUZXWolG/aTagjgZsANSe
-cDHZdyix+XJHKIhBHUnkLYTUGIdH+off2iiph4iJB+xpKeSC0c501eTrNdW1337l
-hSLozqDrn3Wgxdp4IQC+Q614JAqcRl2armoSPgCFcPIyj04hrfx6sQsnitYxO0J7
-yand+M0c7QFiIh8CAwEAATANBgkqhkiG9w0BAQsFAAOCAgEAdhJPbI6VPthmhORN
-P9YfaKFEhPMjUzUxS+7ZPW5dWRDl+X6mvS/jsg0RmNm/bbPSZDvYRHMMhqzlplsk
-5dMhDurCHGtwLhAj7J4bdmZpbXU4vHbfQHqZhk74bBiO+VBCKi51GcZfPkE2AGrA
-lKWMtQcjdP8XDDgTVytMXAGE+j5/5melyqttnPiaV9dpD5gy/BQvtB8uOkgsaJjt
-qLqcSQmCq5RIsO6PP7zimCTQXfCubi8yId820lXc5y+OW+Yd9hVimTmVhFhDEXZV
-hIdm+mJUqDKb6dTVgrIgqoxD7KwPIHIfy8D6yktE2HhbZ10E99YMU4QCCTWgaJVB
-BPNQVC3TGmz0k5v48ETR8ejf+HULS+aRlXm6p8178/hcxdgLurnFjEQbdCMmK4b8
-EwaBwsRiPKRD0wSMcgaTz5+fl1OKkbZo0kETwot8Rbv7jJYHA/5jFZ3g3kpZ4MbW
-DXNWNApj0eLK6CYhaaY7wRJXRXYnVZNiP3XNt5GNKLFA3IFOzOpHJffYUq9EPTAE
-xPr9ua5E7+hZXc3YQXin0Fo2nHz2oOETp3FzGkg59708X3BGNcEfsvJso8ZVQ7MZ
-cBCflwy0HbThuquE1okBbPxXAC/5zrWFyCbTXGE9ozesFPxowcgXk6W9Ca1OMYuS
-Y3wOBXAN7UUh9N/cxuCpYBKoRuY=
------END CERTIFICATE-----
diff --git a/configs/keys/ca2/ast3.crt b/configs/keys/ca2/ast3.crt
deleted file mode 100644
index f177f74..0000000
--- a/configs/keys/ca2/ast3.crt
+++ /dev/null
@@ -1,20 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDQDCCASgCAQEwDQYJKoZIhvcNAQELBQAwLTEcMBoGA1UEAwwTQXN0ZXJpc2sg
-UHJpdmF0ZSBDQTENMAsGA1UECgwEYXN0MTAeFw0xNzEyMDUxNTA3MzdaFw0xODEy
-MDUxNTA3MzdaMCMxEjAQBgNVBAMMCTEyNy4wLjAuMTENMAsGA1UECgwEYXN0MzCB
-nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAudA7sSxKb73KNfBvE3tw1Nxzzj+K
-40Pag8357h1vgPsiL1AazuUo3uUG6zl7/tcnFnjPM/C2fIe4OKth6sW37gmf074k
-WINUTw1NrBpfjcqx75rf0K1fXg02+lbAYGkSD99W0spOtVAad4IIaCRdOPAyVkAl
-qdFXU9ZE8Ol3jSkCAwEAATANBgkqhkiG9w0BAQsFAAOCAgEAs+PMptqQ6s3zEFsp
-NXncMAusAL1mgF5bDbct6Dv2HNPRTaU7erz7ebO3w0Br9NQuHueEp2RLoinyMq3g
-ap2n8XEFQkK5jhxCFCanFDVdD6FJtCMttZqIo5XoL6aMpOqKJ3UvQO1+13brnycj
-9pVKamc6S2MtI90+YqYx0zm+C89q56GqAswFGS1T8zx3E67DveS9ZRPEJLHdyC8q
-At3S5d0O0ntlhgRRjlEk0nx3eRKsH77jvW1l4OK6Aln4w8QvutVmX8qnISnlIM8Y
-rdVFijVxmYh7TFqatDe3RccxgA4TRPDz+hP2SZ6ps45hUIVhq9RVx97YboWq7NHA
-OIz2qPlblvSY6VRT+PuVlWlE5Ttphl1qc+4vPXsABMugioWeAYDNkKE0lvxG7bF+
-4jnRcXbtwXvgx95UDh0R/Kw/jRTFum/NPawLvHAe9hsDffTx17ZVM/D49MqFNuVs
-0lugDr2UozjlDzeNsw2DPWofTyR+nWZyBLlUrft41S7YN2jV1VMehctNvZGF7tCs
-n8LC4P3Ac3cgv62kEZ+/VOjlNpesg3rEsFBE5DhgkJmo6Dvvk+MYFTKn7QAeXuka
-3SSLuwdJu2131z4osBmaXJy5HUxCakyVg8LFOzNIizUXU6O+wVyXfoZ/JZbuWu+r
-4yCYR/9GOWzeX2eoVQI4gr7IWmE=
------END CERTIFICATE-----
diff --git a/configs/keys/ca2/ast3.csr b/configs/keys/ca2/ast3.csr
deleted file mode 100644
index b900892..0000000
--- a/configs/keys/ca2/ast3.csr
+++ /dev/null
@@ -1,10 +0,0 @@
------BEGIN CERTIFICATE REQUEST-----
-MIIBYjCBzAIBADAjMRIwEAYDVQQDDAkxMjcuMC4wLjExDTALBgNVBAoMBGFzdDMw
-gZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBALnQO7EsSm+9yjXwbxN7cNTcc84/
-iuND2oPN+e4db4D7Ii9QGs7lKN7lBus5e/7XJxZ4zzPwtnyHuDirYerFt+4Jn9O+
-JFiDVE8NTawaX43Kse+a39CtX14NNvpWwGBpEg/fVtLKTrVQGneCCGgkXTjwMlZA
-JanRV1PWRPDpd40pAgMBAAGgADANBgkqhkiG9w0BAQsFAAOBgQAIf1BRgPlT1cUW
-eAHBdE0Lt3VMtObkA69j4mIkrRL8kM8SedDGWoyjhm9jBk1h0q5Q8AAjYzL5gqv8
-PAlooKoxNb0juEA12JdkYfxCaLnSeNLiq2/lz1QhD5SNn8IHSo/7Ixh0zRfmror0
-0MK/Un3OG4SnpDee/sCC9PJ54M0nAw==
------END CERTIFICATE REQUEST-----
diff --git a/configs/keys/ca2/ast3.key b/configs/keys/ca2/ast3.key
deleted file mode 100644
index d0a2931..0000000
--- a/configs/keys/ca2/ast3.key
+++ /dev/null
@@ -1,15 +0,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIICXQIBAAKBgQC50DuxLEpvvco18G8Te3DU3HPOP4rjQ9qDzfnuHW+A+yIvUBrO
-5Sje5QbrOXv+1ycWeM8z8LZ8h7g4q2HqxbfuCZ/TviRYg1RPDU2sGl+NyrHvmt/Q
-rV9eDTb6VsBgaRIP31bSyk61UBp3gghoJF048DJWQCWp0VdT1kTw6XeNKQIDAQAB
-AoGAZpidfPQxnYUzk5jQG/e6ky2uG6FmNJoQm1ott9Y07Qi9FVarlrVdXcUjjtnM
-pydxA61s6wbsG9JsW431oMXPCgSULIxaW62wradDtPV6S02cNuO/LxhmmiusD88w
-sZhtN/32rUoIT8dd5h1nfhl1/j/aIVpxMlq2F0F6byvv8iECQQDo3NnezrabuYma
-OGq7iYZYmjrf37gk/XNvUOEDmBFO2JyMjOP1bGImeZ8gpNXnKmtHyxnz4iK/06Gu
-gbHhYwZVAkEAzEagKct+j1NhJZfD5t73PuBPA0JoI3y9OXd8GulBRVS9vUjT2Bzn
-TmA3OhXhx1Xsa0pggF7/4213x3OqvwU3hQJAEz5tIuSiYqwqmvwelfD/kULtqqKq
-bSQk7gYZElr20zVDeroJ/LZARj220NPOeZQf2YcHVghSJtgufGVrddzhIQJBAIkL
-DKJdef+voWn2AiBeDyNomrmGEJVWNyBZj7ICMJ7RtiVJuY2v/mHvXL2kNn9jnqNw
-F4OnuCYcp5HwgGl8l30CQQCq5JrqbPSamTgkKF8+xHTBJrNUBGybjkAvhO9Bld5I
-x8xlzqlRRYYzOyOC6Vhcpj9qoz/xWpyyKQ3M7tpx/Hjj
------END RSA PRIVATE KEY-----
diff --git a/configs/keys/ca2/ast3.pem b/configs/keys/ca2/ast3.pem
deleted file mode 100644
index 5d12fb2..0000000
--- a/configs/keys/ca2/ast3.pem
+++ /dev/null
@@ -1,35 +0,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIICXQIBAAKBgQC50DuxLEpvvco18G8Te3DU3HPOP4rjQ9qDzfnuHW+A+yIvUBrO
-5Sje5QbrOXv+1ycWeM8z8LZ8h7g4q2HqxbfuCZ/TviRYg1RPDU2sGl+NyrHvmt/Q
-rV9eDTb6VsBgaRIP31bSyk61UBp3gghoJF048DJWQCWp0VdT1kTw6XeNKQIDAQAB
-AoGAZpidfPQxnYUzk5jQG/e6ky2uG6FmNJoQm1ott9Y07Qi9FVarlrVdXcUjjtnM
-pydxA61s6wbsG9JsW431oMXPCgSULIxaW62wradDtPV6S02cNuO/LxhmmiusD88w
-sZhtN/32rUoIT8dd5h1nfhl1/j/aIVpxMlq2F0F6byvv8iECQQDo3NnezrabuYma
-OGq7iYZYmjrf37gk/XNvUOEDmBFO2JyMjOP1bGImeZ8gpNXnKmtHyxnz4iK/06Gu
-gbHhYwZVAkEAzEagKct+j1NhJZfD5t73PuBPA0JoI3y9OXd8GulBRVS9vUjT2Bzn
-TmA3OhXhx1Xsa0pggF7/4213x3OqvwU3hQJAEz5tIuSiYqwqmvwelfD/kULtqqKq
-bSQk7gYZElr20zVDeroJ/LZARj220NPOeZQf2YcHVghSJtgufGVrddzhIQJBAIkL
-DKJdef+voWn2AiBeDyNomrmGEJVWNyBZj7ICMJ7RtiVJuY2v/mHvXL2kNn9jnqNw
-F4OnuCYcp5HwgGl8l30CQQCq5JrqbPSamTgkKF8+xHTBJrNUBGybjkAvhO9Bld5I
-x8xlzqlRRYYzOyOC6Vhcpj9qoz/xWpyyKQ3M7tpx/Hjj
------END RSA PRIVATE KEY-----
------BEGIN CERTIFICATE-----
-MIIDQDCCASgCAQEwDQYJKoZIhvcNAQELBQAwLTEcMBoGA1UEAwwTQXN0ZXJpc2sg
-UHJpdmF0ZSBDQTENMAsGA1UECgwEYXN0MTAeFw0xNzEyMDUxNTA3MzdaFw0xODEy
-MDUxNTA3MzdaMCMxEjAQBgNVBAMMCTEyNy4wLjAuMTENMAsGA1UECgwEYXN0MzCB
-nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAudA7sSxKb73KNfBvE3tw1Nxzzj+K
-40Pag8357h1vgPsiL1AazuUo3uUG6zl7/tcnFnjPM/C2fIe4OKth6sW37gmf074k
-WINUTw1NrBpfjcqx75rf0K1fXg02+lbAYGkSD99W0spOtVAad4IIaCRdOPAyVkAl
-qdFXU9ZE8Ol3jSkCAwEAATANBgkqhkiG9w0BAQsFAAOCAgEAs+PMptqQ6s3zEFsp
-NXncMAusAL1mgF5bDbct6Dv2HNPRTaU7erz7ebO3w0Br9NQuHueEp2RLoinyMq3g
-ap2n8XEFQkK5jhxCFCanFDVdD6FJtCMttZqIo5XoL6aMpOqKJ3UvQO1+13brnycj
-9pVKamc6S2MtI90+YqYx0zm+C89q56GqAswFGS1T8zx3E67DveS9ZRPEJLHdyC8q
-At3S5d0O0ntlhgRRjlEk0nx3eRKsH77jvW1l4OK6Aln4w8QvutVmX8qnISnlIM8Y
-rdVFijVxmYh7TFqatDe3RccxgA4TRPDz+hP2SZ6ps45hUIVhq9RVx97YboWq7NHA
-OIz2qPlblvSY6VRT+PuVlWlE5Ttphl1qc+4vPXsABMugioWeAYDNkKE0lvxG7bF+
-4jnRcXbtwXvgx95UDh0R/Kw/jRTFum/NPawLvHAe9hsDffTx17ZVM/D49MqFNuVs
-0lugDr2UozjlDzeNsw2DPWofTyR+nWZyBLlUrft41S7YN2jV1VMehctNvZGF7tCs
-n8LC4P3Ac3cgv62kEZ+/VOjlNpesg3rEsFBE5DhgkJmo6Dvvk+MYFTKn7QAeXuka
-3SSLuwdJu2131z4osBmaXJy5HUxCakyVg8LFOzNIizUXU6O+wVyXfoZ/JZbuWu+r
-4yCYR/9GOWzeX2eoVQI4gr7IWmE=
------END CERTIFICATE-----
diff --git a/configs/keys/ca2/ast4.crt b/configs/keys/ca2/ast4.crt
deleted file mode 100644
index abe9ffe..0000000
--- a/configs/keys/ca2/ast4.crt
+++ /dev/null
@@ -1,20 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDQDCCASgCAQEwDQYJKoZIhvcNAQELBQAwLTEcMBoGA1UEAwwTQXN0ZXJpc2sg
-UHJpdmF0ZSBDQTENMAsGA1UECgwEYXN0MTAeFw0xNzEyMDUxNTA3NDNaFw0xODEy
-MDUxNTA3NDNaMCMxEjAQBgNVBAMMCTEyNy4wLjAuMTENMAsGA1UECgwEYXN0NDCB
-nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAvrgr9k3WVqjjuEs6wjvC1fyuX8LL
-Yq+jPpy0ObcFcgDwttMt8twjXgp7y7XoizKehyd9UIk8GrQ0ddwnZMKSoquUJ/fC
-yCoVKeVdvFRsLC3ZH1e02e7JaMFCbkS0KfS6O/p7BjBAU7FiiNvBQgHJ8+xKjPmN
-KI/okvMAR/8BS78CAwEAATANBgkqhkiG9w0BAQsFAAOCAgEAL9OrS1nMZfkIAxao
-felG4pkTxpXMQdbSFuyZ2InQ8wbg/k4ak4V8SJ1Mrb64RUOfzQhLj60GSO78mShx
-8M+9mqW2fw7Py8A8RCahFq2tpKDY1Z6JKav4kxEX+yRBBRLi2Qv27P6SEspG4RAk
-h+rsZx8kTnirK7VtlrU/PFVoDwjQq4zOWzNAxWE5jowVtRC4Yd8bR8HWItfwi8T/
-qbOriiPgooWR42t91NFsI6IN54F3gLOjTe2Ew3pSPbPCQp5mZDDDW/PR7SOK5HaJ
-pj89mEMrajAVInrWTa9h5qpyA0dxMrGGfegUTvMsC5iHQqsBnCzRqF8qCbyLLqF8
-lAxcFMJn7/K49mUIBCq2kWyT/bNhdRuYrrYNN64ofUXKIkQwMg7ndekM0qvtlT18
-FGFzcLj8/ZVLMNf7UgkTUz20go+5qeK+2alC2djtDmgc59zr96uSlSIGbcVmXy3O
-pC+cpbXmdznMyYbz7zhsnQxJ4UxlTolAjP7gZ8hIv+Wsc+AZjVjLmhQVQ57wVQ0j
-q+yfL28jJfXUMMSFYC0X2vSQa43ad3jqQv8WUDGBAWk6skLUaRektOSrcCwBiaNe
-QBY84RspqwvQyBjITTT5RAFyZYMNyZTRWwLTQfFJg+BxEe0w85mLVgSGzBgFyO/Z
-/V9497vXfdV1jBzdD1tabREZchE=
------END CERTIFICATE-----
diff --git a/configs/keys/ca2/ast4.csr b/configs/keys/ca2/ast4.csr
deleted file mode 100644
index 1a8e050..0000000
--- a/configs/keys/ca2/ast4.csr
+++ /dev/null
@@ -1,10 +0,0 @@
------BEGIN CERTIFICATE REQUEST-----
-MIIBYjCBzAIBADAjMRIwEAYDVQQDDAkxMjcuMC4wLjExDTALBgNVBAoMBGFzdDQw
-gZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAL64K/ZN1lao47hLOsI7wtX8rl/C
-y2Kvoz6ctDm3BXIA8LbTLfLcI14Ke8u16IsynocnfVCJPBq0NHXcJ2TCkqKrlCf3
-wsgqFSnlXbxUbCwt2R9XtNnuyWjBQm5EtCn0ujv6ewYwQFOxYojbwUIByfPsSoz5
-jSiP6JLzAEf/AUu/AgMBAAGgADANBgkqhkiG9w0BAQsFAAOBgQCZqSwhxGdgUpM6
-XegExGoyGuU/y2DW8OHOvp3TGe87Lov/LrraFAA1aE846tBf87MHF+PwbJy0BA9i
-J+BwnEp1hiT1cxpoKTu0WtrW2yfHmB/oXIevMoC2TiDXd7Ie7VcWw6MBExBwC8ew
-p3ZcokOOf4Ls1vB5zpAB8SLIGQ3FDA==
------END CERTIFICATE REQUEST-----
diff --git a/configs/keys/ca2/ast4.key b/configs/keys/ca2/ast4.key
deleted file mode 100644
index 393f482..0000000
--- a/configs/keys/ca2/ast4.key
+++ /dev/null
@@ -1,15 +0,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIICWwIBAAKBgQC+uCv2TdZWqOO4SzrCO8LV/K5fwstir6M+nLQ5twVyAPC20y3y
-3CNeCnvLteiLMp6HJ31QiTwatDR13CdkwpKiq5Qn98LIKhUp5V28VGwsLdkfV7TZ
-7slowUJuRLQp9Lo7+nsGMEBTsWKI28FCAcnz7EqM+Y0oj+iS8wBH/wFLvwIDAQAB
-AoGAW/HYJ98wpQi4+AE0q6056gXuXvY/LS11qtrLPEPS2TpA0jMPJNUiK9UsB3KE
-UI8vxAKytF/k3Q7hd6ySRU5UeEfviVOFGdm8K0yMVAxuqknuqE6lJqAMHws8tO7a
-33GM+jAFS+U7pLysSVHUxPG9VtFHGIO3iu+CkC9QbESPPCkCQQDzGLQEHWf5Fer8
-VewwWm+fWvJG+BWqjPzOVwUvarYJLfbV3J96BEzeGvG+RqF3VpMAWmCgDVeGUT1Z
-yFao57UtAkEAyNe/N0If6DhFbVDUEIEC12RVxzozNHyZ6WjBaZ6sST4M2srih9v2
-jYZN18Wmgh51mjmE6XcDC8RGCNWUx/PwGwJAN1TnHIyo7swrWVYhVXwwLgBgZwDu
-xYwjur+Z4YoTdxFsPo9iCT7TVDaj0aB3/hbJjOoFVkjTJDJ3mWj9OKLM3QJAKGmZ
-FUJd7zkbZzKjaSq8aqDKzcq9MOt9gMTOXjVKT3aH2aKHUHUHOFT05tzjcz0zxrOa
-Nev3le+JdA+d31oLTwJAS+me7xgY61Az1CJS6X4R4aAEmcIOpUffiA4gOnqlRJYt
-l18iKgTgSNqc584rE7KcQZONyTh+wwSDMawEt0giGw==
------END RSA PRIVATE KEY-----
diff --git a/configs/keys/ca2/ast4.pem b/configs/keys/ca2/ast4.pem
deleted file mode 100644
index 02430c9..0000000
--- a/configs/keys/ca2/ast4.pem
+++ /dev/null
@@ -1,35 +0,0 @@
------BEGIN RSA PRIVATE KEY-----
-MIICWwIBAAKBgQC+uCv2TdZWqOO4SzrCO8LV/K5fwstir6M+nLQ5twVyAPC20y3y
-3CNeCnvLteiLMp6HJ31QiTwatDR13CdkwpKiq5Qn98LIKhUp5V28VGwsLdkfV7TZ
-7slowUJuRLQp9Lo7+nsGMEBTsWKI28FCAcnz7EqM+Y0oj+iS8wBH/wFLvwIDAQAB
-AoGAW/HYJ98wpQi4+AE0q6056gXuXvY/LS11qtrLPEPS2TpA0jMPJNUiK9UsB3KE
-UI8vxAKytF/k3Q7hd6ySRU5UeEfviVOFGdm8K0yMVAxuqknuqE6lJqAMHws8tO7a
-33GM+jAFS+U7pLysSVHUxPG9VtFHGIO3iu+CkC9QbESPPCkCQQDzGLQEHWf5Fer8
-VewwWm+fWvJG+BWqjPzOVwUvarYJLfbV3J96BEzeGvG+RqF3VpMAWmCgDVeGUT1Z
-yFao57UtAkEAyNe/N0If6DhFbVDUEIEC12RVxzozNHyZ6WjBaZ6sST4M2srih9v2
-jYZN18Wmgh51mjmE6XcDC8RGCNWUx/PwGwJAN1TnHIyo7swrWVYhVXwwLgBgZwDu
-xYwjur+Z4YoTdxFsPo9iCT7TVDaj0aB3/hbJjOoFVkjTJDJ3mWj9OKLM3QJAKGmZ
-FUJd7zkbZzKjaSq8aqDKzcq9MOt9gMTOXjVKT3aH2aKHUHUHOFT05tzjcz0zxrOa
-Nev3le+JdA+d31oLTwJAS+me7xgY61Az1CJS6X4R4aAEmcIOpUffiA4gOnqlRJYt
-l18iKgTgSNqc584rE7KcQZONyTh+wwSDMawEt0giGw==
------END RSA PRIVATE KEY-----
------BEGIN CERTIFICATE-----
-MIIDQDCCASgCAQEwDQYJKoZIhvcNAQELBQAwLTEcMBoGA1UEAwwTQXN0ZXJpc2sg
-UHJpdmF0ZSBDQTENMAsGA1UECgwEYXN0MTAeFw0xNzEyMDUxNTA3NDNaFw0xODEy
-MDUxNTA3NDNaMCMxEjAQBgNVBAMMCTEyNy4wLjAuMTENMAsGA1UECgwEYXN0NDCB
-nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAvrgr9k3WVqjjuEs6wjvC1fyuX8LL
-Yq+jPpy0ObcFcgDwttMt8twjXgp7y7XoizKehyd9UIk8GrQ0ddwnZMKSoquUJ/fC
-yCoVKeVdvFRsLC3ZH1e02e7JaMFCbkS0KfS6O/p7BjBAU7FiiNvBQgHJ8+xKjPmN
-KI/okvMAR/8BS78CAwEAATANBgkqhkiG9w0BAQsFAAOCAgEAL9OrS1nMZfkIAxao
-felG4pkTxpXMQdbSFuyZ2InQ8wbg/k4ak4V8SJ1Mrb64RUOfzQhLj60GSO78mShx
-8M+9mqW2fw7Py8A8RCahFq2tpKDY1Z6JKav4kxEX+yRBBRLi2Qv27P6SEspG4RAk
-h+rsZx8kTnirK7VtlrU/PFVoDwjQq4zOWzNAxWE5jowVtRC4Yd8bR8HWItfwi8T/
-qbOriiPgooWR42t91NFsI6IN54F3gLOjTe2Ew3pSPbPCQp5mZDDDW/PR7SOK5HaJ
-pj89mEMrajAVInrWTa9h5qpyA0dxMrGGfegUTvMsC5iHQqsBnCzRqF8qCbyLLqF8
-lAxcFMJn7/K49mUIBCq2kWyT/bNhdRuYrrYNN64ofUXKIkQwMg7ndekM0qvtlT18
-FGFzcLj8/ZVLMNf7UgkTUz20go+5qeK+2alC2djtDmgc59zr96uSlSIGbcVmXy3O
-pC+cpbXmdznMyYbz7zhsnQxJ4UxlTolAjP7gZ8hIv+Wsc+AZjVjLmhQVQ57wVQ0j
-q+yfL28jJfXUMMSFYC0X2vSQa43ad3jqQv8WUDGBAWk6skLUaRektOSrcCwBiaNe
-QBY84RspqwvQyBjITTT5RAFyZYMNyZTRWwLTQfFJg+BxEe0w85mLVgSGzBgFyO/Z
-/V9497vXfdV1jBzdD1tabREZchE=
------END CERTIFICATE-----
diff --git a/configs/keys/ca2/ca.cfg b/configs/keys/ca2/ca.cfg
deleted file mode 100644
index 01d2cf0..0000000
--- a/configs/keys/ca2/ca.cfg
+++ /dev/null
@@ -1,10 +0,0 @@
-[req]
-distinguished_name = req_distinguished_name
-prompt = no
-
-[req_distinguished_name]
-CN=Asterisk Private CA
-O=ast1
-
-[ext]
-basicConstraints=CA:TRUE
diff --git a/configs/keys/ca2/ca.crt b/configs/keys/ca2/ca.crt
deleted file mode 100644
index c1cf9ca..0000000
--- a/configs/keys/ca2/ca.crt
+++ /dev/null
@@ -1,28 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIE1jCCAr4CCQCJxToM0YBZtjANBgkqhkiG9w0BAQsFADAtMRwwGgYDVQQDDBNB
-c3RlcmlzayBQcml2YXRlIENBMQ0wCwYDVQQKDARhc3QxMB4XDTE3MTIwNTE1MDcy
-MloXDTE4MTIwNTE1MDcyMlowLTEcMBoGA1UEAwwTQXN0ZXJpc2sgUHJpdmF0ZSBD
-QTENMAsGA1UECgwEYXN0MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
-AMU//AeGk0eR4UBPh1PIl8oA8TrAJkl1fbpk4TN21I11ZtuqNOvhX6hCwyHnmdaj
-U5gBSruljA4qbm19JG85OOCVdrNSl9u6+hmHoWH6c0XBAd8RSbbauQm/7T6WA0hl
-RvXgJYWgyqp5WOTmQp5fkCJVcSvyeFYn6LUIZ9k7/1FiFpEyLlNwKaxDDRgD84I4
-2R7ZyaP07aGSI2VGXF0lNbQdmm76nVLYvbsH2DwYuPwm5yA3RzjDm2ZlqaS1cUBZ
-4uZX5anQZaG8ImWomNsEviQc6bOtmlQ2L+C2w/VdhWvCy15Ei1Y2O1lOwCSqm9xu
-PUj7f7RIdaGbMWxyvFauxl3gviEc05UxRYPLlAkL1rEdFRzuMWf/DO0daK+UmZbN
-XKfdTyD02fgnlGwKoNvGwObUIogLsVNIA0i8ZJkysGLOJmrb1Q7rwnNnvqeQhdAm
-Az5J4DCPeHuxtzWOdSUFOIFEnb96ICUfoFs7vsWZUfMipTpY0INnN25mhE3cHRRh
-yBpG67zTD0aK1w7kyBSWivezbk/gnVpa0LdT82Q3EsltdUlK1qKAPuDZP7QwcrNv
-ic88MBb8mzdNO9OlXEtZ6ohKI7KNAWUngR9D9ByRJBv8n7p2t5EJ7v2Eifh5OF+H
-aRoNSjGq8E7eNXbZ2zKANQQBTRh8iIL5AmEGhFmOIEAjAgMBAAEwDQYJKoZIhvcN
-AQELBQADggIBALHEAP7AtHwjmsRaTCv7A9RRHgyNSNMVZWgZ/eW8wO/G/HadfqZM
-VzbsS5esPrt+BP5NOHXdXxaqEQcdGXG6RKeMnawnjhf415jyOwsXXlp4+VRvNwIY
-ouNiRBd8GQ/dVs+KGU2uHbzg/HQeFpaSc/C7/enk+JGItItt6Jc2bqlfWaS3m/aC
-CkzrJNv8tW6pbnljj+Ifxkg75WOLU7dVSo008chuCV3VZppLebfpUCD/tTFc7w/k
-ZIh6737FZQG1RF4DaFBeZZEp6inF5/2AbYZ9bCldcLFbc/4UAuo9dSOoroDrPYuh
-cqvaeYyNHkjgn5Q20gZH6acA1yPCHApBxHorbaCzwoYdrqV9yqM/ohWXO7M4cOhJ
-Z/lKuW+5OJWZVOBnYGEp709MxPoCrKgTOgD+aLIutkfpu5XSeUaqIB+r8l/SC98O
-4wmzqx1hR7NwsY/Ce7sY9pSqjeXYH7ZFyrfQzYorgV2RByTbRh8DPwVGKLTe1a7+
-oMHWeGzYSNuleA2xImpuGLR9o7LVGESWQqENXFvCYxSh3HF1fAlwljR0c054mInI
-98em+kArf6qq2bvliGmIO+sYdL8UNh+371vikznczdtkO47KPPPiLWfigq0qakm5
-N4v38XvOxKyuhTn7jvnWN+5BZLxCO7niAhAzWE3WD89WNwUTBq2H3lvZ
------END CERTIFICATE-----
diff --git a/configs/keys/ca2/ca.key b/configs/keys/ca2/ca.key
deleted file mode 100644
index 9549819..0000000
--- a/configs/keys/ca2/ca.key
+++ /dev/null
@@ -1,54 +0,0 @@
------BEGIN RSA PRIVATE KEY-----
-Proc-Type: 4,ENCRYPTED
-DEK-Info: DES-EDE3-CBC,DBE09010DA961A02
-
-o2zmZOLCpnDvfE6h8H9bvV1fIvbrEOzE+akGqeXO6+vmNu3dmCajbrdYuYcDgDBb
-+4FAqI6AXc0Rk9vZsi7Y6yBC1Hvr1gRevMazS3Ms6oii/ZneH9I4EXK2YRJfoPtj
-Nbnf2toeNFSL9nkbPycX17vF65mOI+MLwA7hFp4v4XKga4eRzLB8G/CahDzHKh76
-wlS0pFo8+XGHNqY6z6Bc/9FWPbepBx/4vGxy0Qky6a6YzQSd7udKKKb1EwuClHRS
-FjOsNCHIHX/UuoRZcM36XNjQiaPcLgUXlZaEf3fZIhnW+8xJDBhSIty6y2YDRKtq
-ieFaI3YKCIlKjuwao9VD15hkoTNsAcbjAa+wO+5z6sO6eP4ftyFg0PvPABX3BQ0j
-y1bjNeYFJykEPJhUPtTJAKG/yVTSjpQxoedt8/azzlwRKjVLaSDnv5d0Vg6f+PIq
-Qg2PQdiqpZTYNmMSoJZHcWHhEmfPMfx77Rl1H1lSJX6SkFCLifQOh7YSQvjjpVd7
-iPJB7KRe0eKU0HQ/jx2kt/sFqeJftrFjrfuejKM9qwTJDISV3l634+xFcY/WBj/+
-Kz1bdIgVI5lDPhg26uRWdmEgwo0XQ6Y4urBOpzBg+Ew0xKmnuwYXRQSArXGvwI2+
-l4O6dYovOiSU+Z+Hu1DI1IEXIvl9/Q6ZX3RM3lt7C+prMQxtajwj/TAgRTZikdts
-GmVoxanU8INGvjUMOG6xtgyGZCMdveAVvuZWQ2x91qWqWfDNI8XLiQV3M141pbSL
-RPJEkOkbNhfg02GbwEgg1HavE8GJN9dL6Mal9ilVJVot+xcNea9Ow6TeIUEcKPjU
-MUm/1divfygU6/FWLO2VUn3PFbnbC2LZvlxqYWmo3KE61/bGpVIIN6gY18JQkyk5
-QsYpsqUpg+1bfaIwr9/Eq2eKnMmQLTIpTK1ukmY5Tt28T1Lxp97XJw4FGbrH/VnN
-t+kJs8EAggGSKJcFSjzh+t30oaHs3Fw2BLY1OIZp0WANa5016TGUzQZwB4YxTPvp
-YvZM4oV3wpsNhanVZfOypSklIdXJKD7hrE+jvE+o+vwEMjod/vp/F2r2rM94LVuU
-rQ1hBpfX6PrgLapUJQ+vYzJ4AZJjWx0ktjjeCqaWTIiQd956Gczbg0oIwAV3GJBH
-EVIGYE3QDXL5GKDXVxbNsGOBycYvRmrknx65a3H773vOX5IGXa8Qq/gdnftYbRLd
-NyJokmNIaBVOTNPac4I+UX6fEe4UXIxX6p3eQswLHLJYpUfLY/iUcU2MAcjZKXJR
-Mqa5AW4kjK63uwU6gCvYrJORC6oNZbWLS4aJbEimcCsIdAl8hZ/KGEhRd0sSg/Wx
-wbi8YxenBJGp8q9PbbYicQiwEm/1dbqy5bcC2Rkdy4mmwBV7I2MD/l0aMPINZJaV
-SF+wcQZV8DdjSNw9WGCc0i4MbKmnawOaYGN2puJ0iKzgoU8eaAWAWpVwneRT1vsL
-HaZNVywa/S9+u6yitdWqpL4Uh+CbXM6/rbPZJhneI0CIIPvz7O3bnVICsWV7TxYb
-emE6IN4+UL/Bru/l0UuUo4BDutuypHXTFnbunvoQuq6xPUxQqFAF9BqAh+M7Jqky
-c2PDmv74NqzPpun758FtXQ+S80iz+nkW0Z8S7IrM4dTeAOgw3RrwzfJJn/F2WaEc
-FYmMSQ6+5s3CWKiFbrRW1TPTxJ5o3O1jx4Ta3Ok9X9U5erGbuUsFdXXeo1jQ/knX
-lnJJCZWyTpCyH0QZlZrJv+ZZssAaCi7jxkeMvkuRbuLwiMPE/Ca7W1gIhrvamjJN
-3mQyKMzN2UqXA/YwhJiCFpbEa3kkCMSr0FW6aBoCP7ilYe+ivMLaqshG3qCBmIdZ
-LoV6w56LhdhVjjSc5g6FZO8f4Xs3RYYFcOPRbbf9DzIpwPEIGOQa7CxnXlGX2ltq
-BjRey85mpx4WQx9GBacXrNA3TSLDm6OKsujJcmViA5XBYftQ5x6FsVXdX6iIbqWL
-Esryl3Q908os5z12oiFIcmvXookX6IKFz987s5+pqtfC2CupBb7YhwvZoLS7z8fs
-0EOisV6sJEpSHmZA0RCGmBAWoXIr468oItOWZBzlXiACSOyHzgLTsz4aZv0kA7xU
-uWlxbHUW2s5u/Z6kOdW9HpVRXO4FU3Ol4/mYatOqw3jFXrgQzg2WZ2xRwPrguz9D
-ihg4vXXws+CegHKWFEMGVNs8RbrV1kSuKwmi8asMWxWVpBNFF+CHWJsxzNlCT11H
-J4fFrBGvxyNv8i3OX2lJRsRSgnABsL+qGRI6jgfNwF63dyLIB1xu5KYpFrnNZaS+
-9UdG0mvROWA4IQEXvML31OmW+nvlRJJ8c3N9Rx28/fU8U9MWsibB4Cwy5jkFKMSQ
-Cy5Fbkh44+U/Hqfc+egfmccrkB/uSuaExWjR96wRJRqiXA9OvyQUj6a1J1ZsnomP
-KGrsRYTxLenKpPOvW0OfeMbvDjEcCsKKzvZaxCNCVhaxoP6SinIsI2L0rNAIdpgZ
-rSwuNUZ12aO+pjWNZPk6IJVQr2bY4CA2c0spEiU12tNpDPzwrN+2lMqlSZe0p858
-qTFG+OAJNV0dGITLgFWVJbf182SUv6eNesku4AFGgc85f8URM8uQDAz1ztw+fAo7
-kwi7a/GtiBEbHUsd0tpgWzmk8ahOeFFGpG5jVDWMBoBe1TehjwNTLQeB9DTWiKhb
-s6CrhdVLKOj5yXHAhfNXZNgrMRuYDsIIDXHQOx8HQO2d0bUF6opUmvInOIJwqSX1
-PN67N1gXmwIrL0X/kxoJjh+JYyNiGnv5JDUkEZdRrVc0c4mmdg1GMym76izmu+Z+
-mD4cU5NRSsx4ZE4+Lf/1IHNVf3jeEyUI92OFZ35jf0HnTUSLB1/G72pai9jM9mdv
-4UkBaS1uGO8HWwW9GIhgnrCaN/e+Okey8pTo/qlL1b0iPrHmoA4mhQP/9piDbS4B
-nV6WkP5ybbMJLnaafchDtF4E8+uqEx4K/AmbEmXDgKbPuruM+dc4hloNPAVAZJFK
-2wt2TKHOmBXaqj23qbZ8teGDebjVRgm5+iWh+EXZReGaq3g71gVo5fByP9U134xy
-L2YhGmtXv9g/ZtGi3DU9IZFZLvS7YwlC5psesZjfouIS0+Ryq8OXwrdgvPjItcPP
------END RSA PRIVATE KEY-----
diff --git a/configs/keys/ca1/ca.cfg b/configs/keys/ca2/ca2-ast1.cfg
similarity index 79%
copy from configs/keys/ca1/ca.cfg
copy to configs/keys/ca2/ca2-ast1.cfg
index 01d2cf0..7fce99e 100644
--- a/configs/keys/ca1/ca.cfg
+++ b/configs/keys/ca2/ca2-ast1.cfg
@@ -3,8 +3,8 @@
prompt = no
[req_distinguished_name]
-CN=Asterisk Private CA
-O=ast1
+CN=127.0.0.1
+O=Asterisk
[ext]
basicConstraints=CA:TRUE
diff --git a/configs/keys/ca2/ca2-ast1.crt b/configs/keys/ca2/ca2-ast1.crt
new file mode 100644
index 0000000..75065b0
--- /dev/null
+++ b/configs/keys/ca2/ca2-ast1.crt
@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/configs/keys/ca2/ca2-ast1.csr b/configs/keys/ca2/ca2-ast1.csr
new file mode 100644
index 0000000..7bcb6d8
--- /dev/null
+++ b/configs/keys/ca2/ca2-ast1.csr
@@ -0,0 +1,10 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIIBZjCB0AIBADAnMRIwEAYDVQQDDAkxMjcuMC4wLjExETAPBgNVBAoMCEFzdGVy
+aXNrMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCnAWbIhwC8KmC0AoVDnbLF
+z4BBLeiLrDfzGTX8W3knLKIqapKZy2siArMRZ8p3vyzUxVxJYtVlZIG+B1niuf0w
+ia4fj698Pipv8XpQfbi0DAk+xxiPty2b38gv97D0YXaAFjXhv2crJGUiKYT1ICer
+kBkccc3vy3mfwVksulVt8wIDAQABoAAwDQYJKoZIhvcNAQELBQADgYEARQvyyahZ
+rfM4WmopnPEePnvYP8W4geMp9fW5HOixrCjNjaAfls6n7kzU/F5May00FhfzTYiC
+s2TmyWQLjTRtnYoxTZ8VZD/odXs3GTOfkZEQjQ9LsuJdS186rK7QCa0Pyy9Xyiqb
+K2RUEO3PJ2jb9cI4/p1wR1G3hbV/bZWAoQU=
+-----END CERTIFICATE REQUEST-----
diff --git a/configs/keys/ca2/ca2-ast1.key b/configs/keys/ca2/ca2-ast1.key
new file mode 100644
index 0000000..c219e1f
--- /dev/null
+++ b/configs/keys/ca2/ca2-ast1.key
@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIICXgIBAAKBgQCnAWbIhwC8KmC0AoVDnbLFz4BBLeiLrDfzGTX8W3knLKIqapKZ
+y2siArMRZ8p3vyzUxVxJYtVlZIG+B1niuf0wia4fj698Pipv8XpQfbi0DAk+xxiP
+ty2b38gv97D0YXaAFjXhv2crJGUiKYT1ICerkBkccc3vy3mfwVksulVt8wIDAQAB
+AoGBAI/uU0kLoQSKeWFqsrO9m6+D0ANcr4iA2o928OIXa+jpPLHVu5c0i5Z6QR4F
+F6fwaZDOr2TH+yYxYugFqeAPbzcbaZ1F4tgx9AeAGG2CgYVygy2oJ6EricMTa+Tp
+d8AwDERino0DHlclPO1edccOW876iUOI7Qn8DXQ9ImJptiVxAkEAztvFqhMp3g08
+9ZvvfNxuhFmHgx+/H9mvi/2Jq7A1cdqM8uc2ff1I6P7CKeIn2LGojA+1QZKrhT8E
+5yw5RctTNQJBAM6t8ZTAdC8ElN/b0Lt25lcM+7LwFFF6ouNBn8FFjKwg5IV5p/UZ
+hdO3S0Uj0JZSNWx7DHCB9Y82Y2+t2I82+YcCQQCZKMf14TKCorKb99UeUefSPqfD
+QmI0puz/bb3dTR6FKhhqUR9bsYmmWdpRQI3YN9JfwdGmt34frkVnFKtjLeRxAkEA
+w/NowuaAgP9wApnO2Z2OH2Rg0rMKIIIMIzhZtY0yJRP+dYn1Ms0i86qpg4DER3Dj
+09kJ3zVn0oL3Xa/OTWIKywJAYx/CzeWm2UluTcttpk/VaDcccgIYQevypNasS9Eo
+kasaciALGm3lanku01eJlNqjux5CZMf2Sw+4n16Ak6ZKhA==
+-----END RSA PRIVATE KEY-----
diff --git a/configs/keys/ca2/ca2-ast1.pem b/configs/keys/ca2/ca2-ast1.pem
new file mode 100644
index 0000000..544a196
--- /dev/null
+++ b/configs/keys/ca2/ca2-ast1.pem
@@ -0,0 +1,35 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/configs/keys/ca1/ca.cfg b/configs/keys/ca2/ca2-ast2.cfg
similarity index 79%
copy from configs/keys/ca1/ca.cfg
copy to configs/keys/ca2/ca2-ast2.cfg
index 01d2cf0..7fce99e 100644
--- a/configs/keys/ca1/ca.cfg
+++ b/configs/keys/ca2/ca2-ast2.cfg
@@ -3,8 +3,8 @@
prompt = no
[req_distinguished_name]
-CN=Asterisk Private CA
-O=ast1
+CN=127.0.0.1
+O=Asterisk
[ext]
basicConstraints=CA:TRUE
diff --git a/configs/keys/ca2/ca2-ast2.crt b/configs/keys/ca2/ca2-ast2.crt
new file mode 100644
index 0000000..02e60cf
--- /dev/null
+++ b/configs/keys/ca2/ca2-ast2.crt
@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/configs/keys/ca2/ca2-ast2.csr b/configs/keys/ca2/ca2-ast2.csr
new file mode 100644
index 0000000..d21e081
--- /dev/null
+++ b/configs/keys/ca2/ca2-ast2.csr
@@ -0,0 +1,10 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIIBZjCB0AIBADAnMRIwEAYDVQQDDAkxMjcuMC4wLjExETAPBgNVBAoMCEFzdGVy
+aXNrMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCjgdQ0rKJgW1yBe//+dbCH
+H4L1rFzizUxgK32ukW6oI1EtsAz0tq8clMe0K0oLfr1RKrc1aZ1vIveFOLOWQkKS
+ig/cDFJzVMJ2DKiVOkLifq7AiTouW8tLCG0wsQg34dUAiU6u7uswe+4mCY/RzWKU
+7+IkIeRCPeK6eUeuq+hucwIDAQABoAAwDQYJKoZIhvcNAQELBQADgYEAJu1HpZGN
+togacJtflZrxVGOFZffiTiiI0wpesR+YMXTVBAKLjZby67T1rCVuNCWmniFjDadF
+IUlF+qZrrF8ECpEyGx9gl0gWzV6UoNkAcwhw1xqIF0/27gHSQli5QPswlQWQZ1tg
+RZpiDoLIwZG+1b+ixBGt9uEs/om5ypaT9T0=
+-----END CERTIFICATE REQUEST-----
diff --git a/configs/keys/ca2/ca2-ast2.key b/configs/keys/ca2/ca2-ast2.key
new file mode 100644
index 0000000..b1c7f27
--- /dev/null
+++ b/configs/keys/ca2/ca2-ast2.key
@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/configs/keys/ca2/ca2-ast2.pem b/configs/keys/ca2/ca2-ast2.pem
new file mode 100644
index 0000000..fb5e990
--- /dev/null
+++ b/configs/keys/ca2/ca2-ast2.pem
@@ -0,0 +1,35 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/configs/keys/ca1/ca.cfg b/configs/keys/ca2/ca2-ast3.cfg
similarity index 79%
copy from configs/keys/ca1/ca.cfg
copy to configs/keys/ca2/ca2-ast3.cfg
index 01d2cf0..7fce99e 100644
--- a/configs/keys/ca1/ca.cfg
+++ b/configs/keys/ca2/ca2-ast3.cfg
@@ -3,8 +3,8 @@
prompt = no
[req_distinguished_name]
-CN=Asterisk Private CA
-O=ast1
+CN=127.0.0.1
+O=Asterisk
[ext]
basicConstraints=CA:TRUE
diff --git a/configs/keys/ca2/ca2-ast3.crt b/configs/keys/ca2/ca2-ast3.crt
new file mode 100644
index 0000000..f230a4a
--- /dev/null
+++ b/configs/keys/ca2/ca2-ast3.crt
@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/configs/keys/ca2/ca2-ast3.csr b/configs/keys/ca2/ca2-ast3.csr
new file mode 100644
index 0000000..7a4679b
--- /dev/null
+++ b/configs/keys/ca2/ca2-ast3.csr
@@ -0,0 +1,10 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIIBZjCB0AIBADAnMRIwEAYDVQQDDAkxMjcuMC4wLjExETAPBgNVBAoMCEFzdGVy
+aXNrMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC2OeCU9qcnSMzJ7G2KH/Vk
+S8yXkKeTlK7n/0cGNZ7Zp1/r39B5LVzagGh4kJ3Dj/RNfSNcm6s6nTo8f6TgCafj
+5w1wM0kyWGoxPnHtL2d5hBlYhBpj7DBupb9RdOvVIwofECRvu/wJexKpQEWGQjcU
+jTz9acwsIljVxRfdn9aGhQIDAQABoAAwDQYJKoZIhvcNAQELBQADgYEAaEa+lNKv
+KsKjZdMdt1QTCJRgQMzFzp95DVF35NGEl8FYKC+PmXcT1JfNgqNaSET4HcW5xX+g
+ICZPkZQkJP5QDaCYrHVtz7UBvn0B8Gaq9P0BdHRPa7tXFP3MLPui7MMlz9Z9VstN
+HtyLcj0Z4/dEh7Rdx1/hdaIhTClud9vmWjY=
+-----END CERTIFICATE REQUEST-----
diff --git a/configs/keys/ca2/ca2-ast3.key b/configs/keys/ca2/ca2-ast3.key
new file mode 100644
index 0000000..c3c917c
--- /dev/null
+++ b/configs/keys/ca2/ca2-ast3.key
@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/configs/keys/ca2/ca2-ast3.pem b/configs/keys/ca2/ca2-ast3.pem
new file mode 100644
index 0000000..5eb33aa
--- /dev/null
+++ b/configs/keys/ca2/ca2-ast3.pem
@@ -0,0 +1,35 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIICXQIBAAKBgQC2OeCU9qcnSMzJ7G2KH/VkS8yXkKeTlK7n/0cGNZ7Zp1/r39B5
+LVzagGh4kJ3Dj/RNfSNcm6s6nTo8f6TgCafj5w1wM0kyWGoxPnHtL2d5hBlYhBpj
+7DBupb9RdOvVIwofECRvu/wJexKpQEWGQjcUjTz9acwsIljVxRfdn9aGhQIDAQAB
+AoGBAKWWaFbU38XZ6IXguxVVvyZ5nptnzm9UH7Afj8m7tfJwnsB3bDiBGSxQnR5Z
+w5Ku4D/948FGj80+jGnnT8pp2827NM69N7qPlK9mWicIZ+wTsAQYZkGku6EhMzAN
+1TdSwWFvogYOUD1uCxhjc+oscCCJbzWW8m1HeDsIzD4Dl9GhAkEA3olU07aFdhHt
+1aqVNYIjbDsQCFsHBV0/D4R2ec58pJvDuvlPD5YMo9uG9Sbb497Y6+Jy56cCCpAX
+Apw6ab22rQJBANGgxm90YQyy4CKYisnhMLanKXU7xWpyBwZtvxutEl+s2sjYI2+g
+YvEmwz87i7RWtP4q9oipc47Y3gy8xJDJgjkCQFPEA+8xbClWdF0SOdoLY4QQ82cB
+xLHLOLqBlQsio55el52gzJbEV3uyXamX9/tdXe/krHXwUn9hX5f28LHu3H0CQB8K
+6PfOSyTfRFO7NSpKH7WcsYX70PM/aYzpKZjGm2bxqQB/CVhZbu15KQavIbQV9v2A
+jTuVpFguA0vtlEpAnPkCQQCtpA9VuCnqYZyGMBoEX4N7TolS4+Tm5aFOl4Ie2CEE
+7Ei0dgU0yC5WBs6ptzbbuczJhrCy0+iE2zEphHmnMRxe
+-----END RSA PRIVATE KEY-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/configs/keys/ca1/ca.cfg b/configs/keys/ca2/ca2-ast4.cfg
similarity index 79%
copy from configs/keys/ca1/ca.cfg
copy to configs/keys/ca2/ca2-ast4.cfg
index 01d2cf0..7fce99e 100644
--- a/configs/keys/ca1/ca.cfg
+++ b/configs/keys/ca2/ca2-ast4.cfg
@@ -3,8 +3,8 @@
prompt = no
[req_distinguished_name]
-CN=Asterisk Private CA
-O=ast1
+CN=127.0.0.1
+O=Asterisk
[ext]
basicConstraints=CA:TRUE
diff --git a/configs/keys/ca2/ca2-ast4.crt b/configs/keys/ca2/ca2-ast4.crt
new file mode 100644
index 0000000..ef5cd64
--- /dev/null
+++ b/configs/keys/ca2/ca2-ast4.crt
@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/configs/keys/ca2/ca2-ast4.csr b/configs/keys/ca2/ca2-ast4.csr
new file mode 100644
index 0000000..b86b850
--- /dev/null
+++ b/configs/keys/ca2/ca2-ast4.csr
@@ -0,0 +1,10 @@
+-----BEGIN CERTIFICATE REQUEST-----
+MIIBZjCB0AIBADAnMRIwEAYDVQQDDAkxMjcuMC4wLjExETAPBgNVBAoMCEFzdGVy
+aXNrMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDVmxFtZlFzIhm2Avo89PN
+tTA0HN4ASVDdeiKWtnSG2ZZ8RiScM69R41tQVqBkQfiQhnTaemIVwLgZAITGqAVk
+N7m4vPtsdUGisji7zUkatRDE9dwkgSXxRVavA11jS8y05vkDXK4zOi0MEzTMGjOo
+xczNZjkBteKz5lUj8zKvpQIDAQABoAAwDQYJKoZIhvcNAQELBQADgYEAHkiM/2f9
+qPQXT0GM7glMPUWRGUa+yeP13jswkA0lzLlXtenaRNqXMRZMVnZvdS/ZSL8a9BS0
+J5eEKy2Osx+scNQuqI1auZuays0k/bsvPXqWJKPi75MLkihuBofZpU7NruSY4mRn
+fSHs6H8zu2pVfbgwbeZtmV49s3NyjwTxpaM=
+-----END CERTIFICATE REQUEST-----
diff --git a/configs/keys/ca2/ca2-ast4.key b/configs/keys/ca2/ca2-ast4.key
new file mode 100644
index 0000000..fe856aa
--- /dev/null
+++ b/configs/keys/ca2/ca2-ast4.key
@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/configs/keys/ca2/ca2-ast4.pem b/configs/keys/ca2/ca2-ast4.pem
new file mode 100644
index 0000000..cd46279
--- /dev/null
+++ b/configs/keys/ca2/ca2-ast4.pem
@@ -0,0 +1,35 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIICXwIBAAKBgQDDVmxFtZlFzIhm2Avo89PNtTA0HN4ASVDdeiKWtnSG2ZZ8RiSc
+M69R41tQVqBkQfiQhnTaemIVwLgZAITGqAVkN7m4vPtsdUGisji7zUkatRDE9dwk
+gSXxRVavA11jS8y05vkDXK4zOi0MEzTMGjOoxczNZjkBteKz5lUj8zKvpQIDAQAB
+AoGBAMGY0NxR/GPCL9oF+9/YcK3rCqhLh/cusrefCdLnaBwSYOQwPK6XRwZY2DKK
+eJKFE85hhETYkIfQpmUZL38YHaYUU4hZdnDEoHK/62kEYP27xqJyN6JWZU1vq9vf
+xuEkXgbN8imJel4A9uGPuMKqrE2pm6ji/QFAug7NubjXLoTNAkEA/Gu2c7bQlGhi
+q3c2/uwsxAhH1oTDjlU5RcH3WbxA0WI4bh3cc0lNaHg/1bkfzt39H3aVfvlUwlWz
+8Dy+p6Lo5wJBAMYbf5ScZpRm8FLgtumvJA1+8KeYmOs/2T9Tl85yObsfrfCJvgfn
+ebUq67iSq0aU4EE5oU2h8oI5m4SRVCKUFZMCQQDlhev5fBpdWC2gTF6tnoN2HTF1
+VnObUNMrIxyPdCZcPjuhpXV3PwgsHmutIxBRQnmPynxVYNI5g0SDBjk2pWOxAkEA
+iNvYYHdH2n/eyLKbSocHFhe6811VTzfVwoziU+nPfjlddc4CrP05tHHJVMJmdqVE
+42qHx9T4bwSTLpsjj5vT5wJBANQMEyrcd69S68bNOaVgSEprV5yoe4X8IomXdmQj
+4EW2RKKyeB+F0VcBV3u8XnPR+Xksj/Jx1va/sbfhaTIus8M=
+-----END RSA PRIVATE KEY-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/configs/keys/ca1/ca.cfg b/configs/keys/ca2/ca2.cfg
similarity index 75%
copy from configs/keys/ca1/ca.cfg
copy to configs/keys/ca2/ca2.cfg
index 01d2cf0..d6bdb71 100644
--- a/configs/keys/ca1/ca.cfg
+++ b/configs/keys/ca2/ca2.cfg
@@ -3,8 +3,8 @@
prompt = no
[req_distinguished_name]
-CN=Asterisk Private CA
-O=ast1
+CN=Asterisk Private CA ca2
+O=Asterisk
[ext]
basicConstraints=CA:TRUE
diff --git a/configs/keys/ca2/ca2.crt b/configs/keys/ca2/ca2.crt
new file mode 100644
index 0000000..2f566b2
--- /dev/null
+++ b/configs/keys/ca2/ca2.crt
@@ -0,0 +1,29 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/configs/keys/ca2/ca2.key b/configs/keys/ca2/ca2.key
new file mode 100644
index 0000000..6ea9a32
--- /dev/null
+++ b/configs/keys/ca2/ca2.key
@@ -0,0 +1,51 @@
+-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
diff --git a/configs/keys/ca2/tmp.cfg b/configs/keys/ca2/tmp.cfg
deleted file mode 100644
index 42318f5..0000000
--- a/configs/keys/ca2/tmp.cfg
+++ /dev/null
@@ -1,8 +0,0 @@
-[req]
-distinguished_name = req_distinguished_name
-prompt = no
-
-[req_distinguished_name]
-CN=127.0.0.1
-O=ast4
-
diff --git a/configs/keys/chain.pem b/configs/keys/chain.pem
deleted file mode 100644
index 66c94f4..0000000
--- a/configs/keys/chain.pem
+++ /dev/null
@@ -1,56 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIE1jCCAr4CCQC9f3goosp4mjANBgkqhkiG9w0BAQsFADAtMRwwGgYDVQQDDBNB
-c3RlcmlzayBQcml2YXRlIENBMQ0wCwYDVQQKDARhc3QxMB4XDTE3MTIwNTE0NDEy
-OFoXDTE4MTIwNTE0NDEyOFowLTEcMBoGA1UEAwwTQXN0ZXJpc2sgUHJpdmF0ZSBD
-QTENMAsGA1UECgwEYXN0MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
-ALa1rMOqqBTlZhfxvP1hJ5MG87aedqpuGU3UB6InUUWA87JF30dwmtfRUyH6b5dt
-JZLfvgQ7fMuKi3W9zO+JT3zGyVKxUs5mai1qjODzZWp4cBIvQYCxze5qV9VGdIRA
-BBsReiYN84zB9LYwyjjkSMKuzFDzheZJvakV1gs5z8SV6o/bH4X97tiI+D5lPfH1
-hekaDeMY2b5h0snt1Vl90U7dsdb3OAfrK2OzKnxMiqiMNNAtX4jkUWtwvS5WK5NL
-JSk234yqRp1nZOKitUEjcKu2U4LUfL/dKIX/cbe4kxeCdg9eevwSkvKwXDc49hbb
-EnezXWO2M4Ttl7CNOBc59V0FTUDKNSllRtN276lKvddvLoIkPWGoINzXwhpPVXYm
-6iIlEVR1ne2INHGlerRpd6d8DEzqR8F/DvkPbYfjdqZqxmz6VQ4XrIWcc4pdukGd
-amGMcf9ozId87MAQD4OgiWCSG0f4FH21FjJzJ4DmCPdpBHYL1nmTxDGiUhRPf0zL
-TapmsmwOyaT7/XOSxngk3Emn4e0KFyBPu6pa4Z8Wwpk5xvyLErwMhDzc3xst3EeR
-IHK4M50LFjBMJoFjL7sY2cEZwR8xIceKvr6DlTALsYMbLKlRSqQ3fmhb0dc3Om40
-hDlPEApEMAYrQ8hltXf+jAuB4WagO2TnK3wbtHlnwrdrAgMBAAEwDQYJKoZIhvcN
-AQELBQADggIBAAc2Qd1f8FegjCXWVWTEI9EDXL5dABGAd4pV0DpHlX0IWpt5jUrU
-ZDTyokDCj0qqk7yuQh5waDDVvjUi+enPFExl1NSFxv5T9vSeFci1BgcbcnaXVi8b
-I06oBrWsu6UX7lWhtNPBhxV3YLK8fP/A75YqWYE0iqX++Rf2mmFIcRT1Ng089Voy
-4n5BGc3C1myX+FGUsEMlLGUGGV0mUVtQ6JgP6QBWSs8caygfR/XoamtAn5i8/yAT
-bsF2dFM4XFyWUOR3h70rqsy+qq5kKvV22qa7mqJObwtCpYutjmSqLDXWtHczWBWW
-UObOatmuELz/9cLBSAU0Cvv6Djg8G2dQrjmvdRlAgmvcV48n09edMtDw8PJVkKeT
-rRO3f2IbyBmA1F2IBlFaOv9yY5xQsLnsyhXpmX9qff/BFSyPOSwfbzJxkz2lKyiI
-UGPB8zFlk/cNZI+7w1pN69ZrHJuERSn9h3LN/uMoKSudqSiUF0PQLSmx9J/Ynzb6
-N6AAac46rABJdRg3w0YsTcyDSXVcN4WN3cn7ADmdfxXaZHIh2sPCQ06vMQJH63lb
-TATXha5fS/CI72DPhO8hjvBXQFGbAGHCjPQlxwcquPWFL6dLOB7EAAH3UoFC5+DX
-2PdJtN/Aii9YPkuDY/7HnIEvgRYm0rcY20cLOWSKsPmau0tBiWkQMCW7
------END CERTIFICATE-----
------BEGIN CERTIFICATE-----
-MIIE1jCCAr4CCQCJxToM0YBZtjANBgkqhkiG9w0BAQsFADAtMRwwGgYDVQQDDBNB
-c3RlcmlzayBQcml2YXRlIENBMQ0wCwYDVQQKDARhc3QxMB4XDTE3MTIwNTE1MDcy
-MloXDTE4MTIwNTE1MDcyMlowLTEcMBoGA1UEAwwTQXN0ZXJpc2sgUHJpdmF0ZSBD
-QTENMAsGA1UECgwEYXN0MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
-AMU//AeGk0eR4UBPh1PIl8oA8TrAJkl1fbpk4TN21I11ZtuqNOvhX6hCwyHnmdaj
-U5gBSruljA4qbm19JG85OOCVdrNSl9u6+hmHoWH6c0XBAd8RSbbauQm/7T6WA0hl
-RvXgJYWgyqp5WOTmQp5fkCJVcSvyeFYn6LUIZ9k7/1FiFpEyLlNwKaxDDRgD84I4
-2R7ZyaP07aGSI2VGXF0lNbQdmm76nVLYvbsH2DwYuPwm5yA3RzjDm2ZlqaS1cUBZ
-4uZX5anQZaG8ImWomNsEviQc6bOtmlQ2L+C2w/VdhWvCy15Ei1Y2O1lOwCSqm9xu
-PUj7f7RIdaGbMWxyvFauxl3gviEc05UxRYPLlAkL1rEdFRzuMWf/DO0daK+UmZbN
-XKfdTyD02fgnlGwKoNvGwObUIogLsVNIA0i8ZJkysGLOJmrb1Q7rwnNnvqeQhdAm
-Az5J4DCPeHuxtzWOdSUFOIFEnb96ICUfoFs7vsWZUfMipTpY0INnN25mhE3cHRRh
-yBpG67zTD0aK1w7kyBSWivezbk/gnVpa0LdT82Q3EsltdUlK1qKAPuDZP7QwcrNv
-ic88MBb8mzdNO9OlXEtZ6ohKI7KNAWUngR9D9ByRJBv8n7p2t5EJ7v2Eifh5OF+H
-aRoNSjGq8E7eNXbZ2zKANQQBTRh8iIL5AmEGhFmOIEAjAgMBAAEwDQYJKoZIhvcN
-AQELBQADggIBALHEAP7AtHwjmsRaTCv7A9RRHgyNSNMVZWgZ/eW8wO/G/HadfqZM
-VzbsS5esPrt+BP5NOHXdXxaqEQcdGXG6RKeMnawnjhf415jyOwsXXlp4+VRvNwIY
-ouNiRBd8GQ/dVs+KGU2uHbzg/HQeFpaSc/C7/enk+JGItItt6Jc2bqlfWaS3m/aC
-CkzrJNv8tW6pbnljj+Ifxkg75WOLU7dVSo008chuCV3VZppLebfpUCD/tTFc7w/k
-ZIh6737FZQG1RF4DaFBeZZEp6inF5/2AbYZ9bCldcLFbc/4UAuo9dSOoroDrPYuh
-cqvaeYyNHkjgn5Q20gZH6acA1yPCHApBxHorbaCzwoYdrqV9yqM/ohWXO7M4cOhJ
-Z/lKuW+5OJWZVOBnYGEp709MxPoCrKgTOgD+aLIutkfpu5XSeUaqIB+r8l/SC98O
-4wmzqx1hR7NwsY/Ce7sY9pSqjeXYH7ZFyrfQzYorgV2RByTbRh8DPwVGKLTe1a7+
-oMHWeGzYSNuleA2xImpuGLR9o7LVGESWQqENXFvCYxSh3HF1fAlwljR0c054mInI
-98em+kArf6qq2bvliGmIO+sYdL8UNh+371vikznczdtkO47KPPPiLWfigq0qakm5
-N4v38XvOxKyuhTn7jvnWN+5BZLxCO7niAhAzWE3WD89WNwUTBq2H3lvZ
------END CERTIFICATE-----
diff --git a/configs/keys/dcacca01.0 b/configs/keys/dcacca01.0
new file mode 120000
index 0000000..b829950
--- /dev/null
+++ b/configs/keys/dcacca01.0
@@ -0,0 +1 @@
+ca2.crt
\ No newline at end of file
diff --git a/configs/keys/ee95348a.0 b/configs/keys/ee95348a.0
new file mode 120000
index 0000000..68a3447
--- /dev/null
+++ b/configs/keys/ee95348a.0
@@ -0,0 +1 @@
+ca-bundle.crt
\ No newline at end of file
diff --git a/configs/keys/ee95348a.1 b/configs/keys/ee95348a.1
new file mode 120000
index 0000000..876270c
--- /dev/null
+++ b/configs/keys/ee95348a.1
@@ -0,0 +1 @@
+ca1.crt
\ No newline at end of file
diff --git a/configs/keys/gen_ca_and_certs b/configs/keys/gen_ca_and_certs
new file mode 100755
index 0000000..4561b98
--- /dev/null
+++ b/configs/keys/gen_ca_and_certs
@@ -0,0 +1,118 @@
+#!/bin/sh -e
+DEFAULT_CA_CN="Asterisk Private CA"
+DEFAULT_CLIENT_CN="127.0.0.1"
+DEFAULT_SERVER_CN="127.0.0.1"
+DEFAULT_CERT_MODE="server"
+
+# arguments
+# $1 "ca" if we are to generate a CA cert
+# $2 alternate config file name (for ca)
+# $3 alternate common name
+# $4 alternate org name
+
+create_config () {
+ if [ "$1" = "ca" ]
+ then
+castring="
+[ext]
+basicConstraints=CA:TRUE"
+ fi
+
+cat > ${2:-"${CONFIG_FILE}"} << EOF
+[req]
+distinguished_name = req_distinguished_name
+prompt = no
+
+[req_distinguished_name]
+CN=${3:-"${COMMON_NAME}"}
+O=${4:-"${ORG_NAME}"}
+${castring}
+EOF
+}
+
+create_ca () {
+ echo "Creating CA key ${CAKEY}"
+ openssl genrsa -out ${CAKEY} 4096 > /dev/null
+ if [ $? -ne 0 ];
+ then
+ echo "Failed"
+ exit 1
+ fi
+ echo "Creating CA certificate ${CACERT}"
+ openssl req -new -config ${CACFG} -x509 -days 3650 -key ${CAKEY} -out ${CACERT} > /dev/null
+ if [ $? -ne 0 ];
+ then
+ echo "Failed"
+ exit 1
+ fi
+}
+
+create_cert () {
+ local base=${OUTPUT_DIR}/${OUTPUT_BASE}
+ echo "Creating certificate ${base}.key"
+ openssl genrsa -out ${base}.key 1024 > /dev/null
+ if [ $? -ne 0 ];
+ then
+ echo "Failed"
+ exit 1
+ fi
+ echo "Creating signing request ${base}.csr"
+ openssl req -batch -new -config ${CONFIG_FILE} -key ${base}.key -out ${base}.csr > /dev/null
+ if [ $? -ne 0 ];
+ then
+ echo "Failed"
+ exit 1
+ fi
+ echo "Creating certificate ${base}.crt"
+ openssl x509 -req -days 365 -in ${base}.csr -CA ${CACERT} -CAkey ${CAKEY} -set_serial 01 -out ${base}.crt > /dev/null
+ if [ $? -ne 0 ];
+ then
+ echo "Failed"
+ exit 1
+ fi
+ echo "Combining key and crt into ${base}.pem"
+ cat ${base}.key > ${base}.pem
+ cat ${base}.crt >> ${base}.pem
+}
+
+if ! type openssl >/dev/null 2>&1
+then
+ echo "This script requires openssl to be in the path"
+ exit 1
+fi
+
+if ! type c_rehash >/dev/null 2>&1
+then
+ echo "This script requires c_rehash (from openssl-perl) to be in the path"
+ exit 1
+fi
+
+rm -rf ca1 ca2 ca1.crt ca2.crt || :
+mkdir -p ca1 ca2
+
+CERT_MODE=server
+ORG_NAME=Asterisk
+
+for ca in ca1 ca2 ; do
+ CAKEY=${ca}/${ca}.key
+ CACERT=${ca}/${ca}.crt
+ CACFG=${ca}/${ca}.cfg
+ create_config ca "${CACFG}" "${DEFAULT_CA_CN} ${ca}" "${DEFAULT_CA_ORG}"
+ create_ca
+
+ ln -s ${ca}/${ca}.crt
+
+ OUTPUT_DIR=${ca}
+ COMMON_NAME="127.0.0.1"
+ for ast in ast1 ast2 ast3 ast4 ; do
+ OUTPUT_BASE="${ca}-${ast}"
+ CONFIG_FILE="${OUTPUT_DIR}/${OUTPUT_BASE}.cfg"
+ create_config
+ create_cert
+ done
+done
+
+c_rehash .
+openssl x509 -in ca1.crt -text > ca-bundle.crt
+openssl x509 -in ca2.crt -text >> ca-bundle.crt
+sed -i -r -e "s/CERTIFICATE--/TRUSTED CERTIFICATE--/g" ca-bundle.crt
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast1/ca1-ast1.crt b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast1/ca1-ast1.crt
new file mode 120000
index 0000000..7373cdc
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast1/ca1-ast1.crt
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1-ast1.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast1/ca1-ast1.key b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast1/ca1-ast1.key
new file mode 120000
index 0000000..e7956fb
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast1/ca1-ast1.key
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1-ast1.key
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast1/ca1.crt b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast1/ca1.crt
new file mode 120000
index 0000000..f28c13f
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast1/ca1.crt
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast1/extensions.conf b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast1/extensions.conf
new file mode 100644
index 0000000..b90594a
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast1/extensions.conf
@@ -0,0 +1,19 @@
+; I'm Alice
+; When the testsuite calls originate, this instance will call bob (ast3) via
+; the pbx (ast2) and the created channel will be connected to start at default.
+
+[default]
+exten => start,1,Answer()
+same => n,BackgroundDetect(tt-weasels,1,20,,5000)
+same => n,NoOp(Talking was NOT detected! Trying again)
+same => n,BackgroundDetect(tt-weasels,1,20,,5000)
+same => n,NoOp(Talking was NOT detected!)
+same => n,UserEvent(TalkDetect, result: fail)
+same => n,Hangup()
+
+; If talking is detected then it jumps here
+exten => talk,1,NoOp(Talking was detected!)
+same => n,UserEvent(TalkDetect, result: pass)
+same => n,Playback(tt-weasels)
+same => n,Wait(2)
+same => n,Hangup()
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast1/pjsip.conf b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast1/pjsip.conf
new file mode 100644
index 0000000..f348e1a
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast1/pjsip.conf
@@ -0,0 +1,37 @@
+; I'm Alice (ast1) with a connection to the pbx (ast2)
+
+[local-transport-tls]
+type = transport
+protocol = tls
+method = tlsv1
+cipher = AES128-CCM,AES128-CCM8,AES128-GCM-SHA256,AES128-SHA256,AES256-CCM,AES256-CCM8,AES256-GCM-SHA384,AES256-SHA256,DHE-DSS-AES128-GCM-SHA256,DHE-DSS-AES128-SHA,DHE-DSS-AES128-SHA256,DHE-DSS-AES256-GCM-SHA384,DHE-DSS-AES256-SHA,DHE-DSS-AES256-SHA256,DHE-DSS-DES-CBC3-SHA,DHE-RSA-AES128-CCM,DHE-RSA-AES128-CCM8,DHE-RSA-AES128-GCM-SHA256,DHE-RSA-AES128-SHA,DHE-RSA-AES128-SHA256,DHE-RSA-AES256-CCM,DHE-RSA-AES256-CCM8,DHE-RSA-AES256-GCM-SHA384,DHE-RSA-AES256-SHA,DHE-RSA-AES256-SHA256,DHE-RSA-DES-CBC3-SHA,ECDHE-ECDSA-AES128-CCM,ECDHE-ECDSA-AES128-CCM8,ECDHE-ECDSA-AES128-GCM-SHA256,ECDHE-ECDSA-AES128-SHA,ECDHE-ECDSA-AES128-SHA256,ECDHE-ECDSA-AES256-CCM,ECDHE-ECDSA-AES256-CCM8,ECDHE-ECDSA-AES256-GCM-SHA384,ECDHE-ECDSA-AES256-SHA,ECDHE-ECDSA-AES256-SHA384,ECDHE-ECDSA-DES-CBC3-SHA,ECDHE-RSA-AES128-GCM-SHA256,ECDHE-RSA-AES128-SHA,ECDHE-RSA-AES128-SHA256,ECDHE-RSA-AES256-GCM-SHA384,ECDHE-RSA-AES256-SHA,ECDHE-RSA-AES256-SHA384,ECDHE-RSA-DES-CBC3-SHA
+priv_key_file = <<astetcdir>>/ca1-ast1.key
+cert_file = <<astetcdir>>/ca1-ast1.crt
+ca_list_file = <<astetcdir>>/ca1.crt
+verify_client = yes
+verify_server = yes
+require_client_cert = yes
+async_operations = 20
+bind = 127.0.0.1:5061
+
+[pbx-ast2]
+type=endpoint
+transport=local-transport-tls
+context=default
+allow=!all,ulaw,alaw
+media_address=127.0.0.1
+direct_media=no
+from_user=alice
+from_domain=127.0.0.1
+aors=pbx-ast2
+trust_id_inbound = yes
+trust_id_outbound = yes
+media_encryption = dtls
+dtls_private_key = <<astetcdir>>/ca1-ast1.key
+dtls_cert_file = <<astetcdir>>/ca1-ast1.crt
+dtls_ca_file = <<astetcdir>>/ca1.crt
+dtls_verify = yes
+
+[pbx-ast2]
+type=aor
+contact=sips:127.0.0.1:5062\;transport=tls
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast2/ca1-ast2.crt b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast2/ca1-ast2.crt
new file mode 120000
index 0000000..48e3817
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast2/ca1-ast2.crt
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1-ast2.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast2/ca1-ast2.key b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast2/ca1-ast2.key
new file mode 120000
index 0000000..2963fc7
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast2/ca1-ast2.key
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1-ast2.key
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast2/ca1.crt b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast2/ca1.crt
new file mode 120000
index 0000000..f28c13f
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast2/ca1.crt
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast2/extensions.conf b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast2/extensions.conf
new file mode 100644
index 0000000..26cecdf
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast2/extensions.conf
@@ -0,0 +1,3 @@
+
+[default]
+exten => bob,1,Dial(PJSIP/bob at bob)
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast2/pjsip.conf b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast2/pjsip.conf
new file mode 100644
index 0000000..20b7847
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast2/pjsip.conf
@@ -0,0 +1,48 @@
+; I'm the pbx (ast2) with a connections to Alice (ast1) and Bob (ast2)
+
+[local-transport-tls]
+type = transport
+protocol = tls
+method = tlsv1
+cipher = AES128-CCM,AES128-CCM8,AES128-GCM-SHA256,AES128-SHA256,AES256-CCM,AES256-CCM8,AES256-GCM-SHA384,AES256-SHA256,DHE-DSS-AES128-GCM-SHA256,DHE-DSS-AES128-SHA,DHE-DSS-AES128-SHA256,DHE-DSS-AES256-GCM-SHA384,DHE-DSS-AES256-SHA,DHE-DSS-AES256-SHA256,DHE-DSS-DES-CBC3-SHA,DHE-RSA-AES128-CCM,DHE-RSA-AES128-CCM8,DHE-RSA-AES128-GCM-SHA256,DHE-RSA-AES128-SHA,DHE-RSA-AES128-SHA256,DHE-RSA-AES256-CCM,DHE-RSA-AES256-CCM8,DHE-RSA-AES256-GCM-SHA384,DHE-RSA-AES256-SHA,DHE-RSA-AES256-SHA256,DHE-RSA-DES-CBC3-SHA,ECDHE-ECDSA-AES128-CCM,ECDHE-ECDSA-AES128-CCM8,ECDHE-ECDSA-AES128-GCM-SHA256,ECDHE-ECDSA-AES128-SHA,ECDHE-ECDSA-AES128-SHA256,ECDHE-ECDSA-AES256-CCM,ECDHE-ECDSA-AES256-CCM8,ECDHE-ECDSA-AES256-GCM-SHA384,ECDHE-ECDSA-AES256-SHA,ECDHE-ECDSA-AES256-SHA384,ECDHE-ECDSA-DES-CBC3-SHA,ECDHE-RSA-AES128-GCM-SHA256,ECDHE-RSA-AES128-SHA,ECDHE-RSA-AES128-SHA256,ECDHE-RSA-AES256-GCM-SHA384,ECDHE-RSA-AES256-SHA,ECDHE-RSA-AES256-SHA384,ECDHE-RSA-DES-CBC3-SHA
+priv_key_file = <<astetcdir>>/ca1-ast2.key
+cert_file = <<astetcdir>>/ca1-ast2.crt
+ca_list_file = <<astetcdir>>/ca1.crt
+verify_client = yes
+verify_server = yes
+require_client_cert = yes
+async_operations = 20
+bind = 127.0.0.1:5062
+
+[endpoint-template-tls](!)
+type=endpoint
+transport=local-transport-tls
+context=default
+allow=!all,ulaw,alaw
+media_address=127.0.0.1
+direct_media=no
+trust_id_inbound = yes
+trust_id_outbound = yes
+
+[alice](endpoint-template-tls)
+aors=alice
+from_user=pbx-ast2
+media_encryption = dtls
+dtls_private_key = <<astetcdir>>/ca1-ast2.key
+dtls_cert_file = <<astetcdir>>/ca1-ast2.crt
+dtls_ca_file = <<astetcdir>>/ca1.crt
+dtls_verify = yes
+
+[alice]
+type = aor
+contact = sips:alice at 127.0.0.1:5061\;transport=tls
+
+[bob](endpoint-template-tls)
+aors=bob
+from_user=pbx-ast2
+media_encryption = sdes
+
+[bob]
+type = aor
+contact = sips:127.0.0.1:5063\;transport=tls
+
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast3/ca1-ast3.crt b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast3/ca1-ast3.crt
new file mode 120000
index 0000000..6983f88
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast3/ca1-ast3.crt
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1-ast3.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast3/ca1-ast3.key b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast3/ca1-ast3.key
new file mode 120000
index 0000000..4e15df8
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast3/ca1-ast3.key
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1-ast3.key
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast3/ca1.crt b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast3/ca1.crt
new file mode 120000
index 0000000..f28c13f
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast3/ca1.crt
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast3/extensions.conf b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast3/extensions.conf
new file mode 100644
index 0000000..bc0b4cd
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast3/extensions.conf
@@ -0,0 +1,18 @@
+; I'm bob.
+
+[default]
+exten => bob,1,Answer()
+same => n,BackgroundDetect(tt-weasels,1,20,,5000)
+same => n,NoOp(Talking was NOT detected! Trying again)
+same => n,BackgroundDetect(tt-weasels,1,20,,5000)
+same => n,NoOp(Talking was NOT detected!)
+same => n,UserEvent(TalkDetect, result: fail)
+same => n,Hangup()
+
+; If talking is detected then it jumps here
+exten => talk,1,NoOp(Talking was detected!)
+same => n,UserEvent(TalkDetect, result: pass)
+same => n,Playback(tt-weasels)
+same => n,Wait(10) ; Wait for Alice to hang up
+same => n,Hangup()
+
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast3/pjsip.conf b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast3/pjsip.conf
new file mode 100644
index 0000000..75ac516
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/configs/ast3/pjsip.conf
@@ -0,0 +1,33 @@
+; I'm Bob (ast3) with a connection to the pbx (ast2)
+
+[local-transport-tls]
+type = transport
+protocol = tls
+method = tlsv1
+cipher = AES128-CCM,AES128-CCM8,AES128-GCM-SHA256,AES128-SHA256,AES256-CCM,AES256-CCM8,AES256-GCM-SHA384,AES256-SHA256,DHE-DSS-AES128-GCM-SHA256,DHE-DSS-AES128-SHA,DHE-DSS-AES128-SHA256,DHE-DSS-AES256-GCM-SHA384,DHE-DSS-AES256-SHA,DHE-DSS-AES256-SHA256,DHE-DSS-DES-CBC3-SHA,DHE-RSA-AES128-CCM,DHE-RSA-AES128-CCM8,DHE-RSA-AES128-GCM-SHA256,DHE-RSA-AES128-SHA,DHE-RSA-AES128-SHA256,DHE-RSA-AES256-CCM,DHE-RSA-AES256-CCM8,DHE-RSA-AES256-GCM-SHA384,DHE-RSA-AES256-SHA,DHE-RSA-AES256-SHA256,DHE-RSA-DES-CBC3-SHA,ECDHE-ECDSA-AES128-CCM,ECDHE-ECDSA-AES128-CCM8,ECDHE-ECDSA-AES128-GCM-SHA256,ECDHE-ECDSA-AES128-SHA,ECDHE-ECDSA-AES128-SHA256,ECDHE-ECDSA-AES256-CCM,ECDHE-ECDSA-AES256-CCM8,ECDHE-ECDSA-AES256-GCM-SHA384,ECDHE-ECDSA-AES256-SHA,ECDHE-ECDSA-AES256-SHA384,ECDHE-ECDSA-DES-CBC3-SHA,ECDHE-RSA-AES128-GCM-SHA256,ECDHE-RSA-AES128-SHA,ECDHE-RSA-AES128-SHA256,ECDHE-RSA-AES256-GCM-SHA384,ECDHE-RSA-AES256-SHA,ECDHE-RSA-AES256-SHA384,ECDHE-RSA-DES-CBC3-SHA
+priv_key_file = <<astetcdir>>/ca1-ast3.key
+cert_file = <<astetcdir>>/ca1-ast3.crt
+ca_list_file = <<astetcdir>>/ca1.crt
+verify_client = yes
+verify_server = yes
+require_client_cert = yes
+async_operations = 20
+bind = 127.0.0.1:5063
+
+[pbx-ast2]
+type=endpoint
+transport=local-transport-tls
+context=default
+allow=!all,ulaw,alaw
+media_address=127.0.0.1
+direct_media=no
+media_encryption = sdes
+from_user=bob
+aors=pbx-ast2
+trust_id_inbound = yes
+trust_id_outbound = yes
+from_domain=127.0.0.1
+
+[pbx-ast2]
+type=aor
+contact=sips:127.0.0.1:5062\;transport=tls
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/test-config.yaml b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/test-config.yaml
new file mode 100644
index 0000000..ccdf1b7
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/all_ciphers_verify_certs/test-config.yaml
@@ -0,0 +1,93 @@
+testinfo:
+ summary: 'Tests sips/tls and dtls/sdes'
+ description: |
+ 'Run three instances of Asterisk, "alice", "pbx", and "bob" to test
+ two party calls. sips/tls is used for signalling between all parties.
+ alice<>pbx uses dtls for media.
+ pbx<>bob uses sdes for media.
+ All 3 instances have the same ciphers in common.
+ All 3 instances verify certificates.
+
+ Both alice and bob send audio to each other while
+ both also listen for audio. Alice then initiates the hang. This
+ ensures that both alice and bob receive audio.
+
+test-modules:
+ test-object:
+ config-section: test-object-config
+ typename: 'test_case.TestCaseModule'
+ modules:
+ -
+ config-section: originator-config-tls
+ typename: 'pluggable_modules.Originator'
+ -
+ config-section: 'ami-config'
+ typename: 'pluggable_modules.EventActionModule'
+
+test-object-config:
+ asterisk-instances: 3
+ connect-ami: True
+
+# Alice calls bob via pbx1 then connects the call to the "start"
+# extension which does the audio detection.
+originator-config-tls:
+ trigger: 'ami_connect'
+ ignore-originate-failure: 'no'
+ id: '0'
+ channel: 'PJSIP/bob at pbx-ast2'
+ context: 'default'
+ exten: 'start'
+ priority: '1'
+ async: 'True'
+
+ami-config:
+ # Alice events
+ -
+ ami-events:
+ type: 'headermatch'
+ id: '0'
+ conditions:
+ match:
+ Event: 'UserEvent'
+ UserEvent: 'TalkDetect'
+ requirements:
+ match:
+ result: 'pass'
+ count: '1'
+ # Bob events
+ -
+ ami-events:
+ type: 'headermatch'
+ id: '2'
+ conditions:
+ match:
+ Event: 'UserEvent'
+ UserEvent: 'TalkDetect'
+ requirements:
+ match:
+ result: 'pass'
+ count: '1'
+ -
+ ami-events:
+ type: 'headermatch'
+ id: '2'
+ conditions:
+ match:
+ Event: 'Hangup'
+ Channel: 'PJSIP/pbx-ast2*'
+ requirements:
+ match:
+ Cause: '16'
+ count: '1'
+ stop_test:
+
+properties:
+ minversion: '12.0.0'
+ dependencies:
+ - asterisk : 'chan_pjsip'
+ - asterisk : 'res_pjsip'
+ - asterisk : 'res_pjsip_session'
+ - asterisk : 'res_pjsip_sips_contact'
+ - asterisk : 'res_srtp'
+ tags:
+ - pjsip
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast1/ca1-ast1.crt b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast1/ca1-ast1.crt
new file mode 120000
index 0000000..7373cdc
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast1/ca1-ast1.crt
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1-ast1.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast1/ca1-ast1.key b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast1/ca1-ast1.key
new file mode 120000
index 0000000..e7956fb
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast1/ca1-ast1.key
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1-ast1.key
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast1/ca1.crt b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast1/ca1.crt
new file mode 120000
index 0000000..f28c13f
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast1/ca1.crt
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast1/extensions.conf b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast1/extensions.conf
new file mode 100644
index 0000000..b90594a
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast1/extensions.conf
@@ -0,0 +1,19 @@
+; I'm Alice
+; When the testsuite calls originate, this instance will call bob (ast3) via
+; the pbx (ast2) and the created channel will be connected to start at default.
+
+[default]
+exten => start,1,Answer()
+same => n,BackgroundDetect(tt-weasels,1,20,,5000)
+same => n,NoOp(Talking was NOT detected! Trying again)
+same => n,BackgroundDetect(tt-weasels,1,20,,5000)
+same => n,NoOp(Talking was NOT detected!)
+same => n,UserEvent(TalkDetect, result: fail)
+same => n,Hangup()
+
+; If talking is detected then it jumps here
+exten => talk,1,NoOp(Talking was detected!)
+same => n,UserEvent(TalkDetect, result: pass)
+same => n,Playback(tt-weasels)
+same => n,Wait(2)
+same => n,Hangup()
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast1/pjsip.conf b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast1/pjsip.conf
new file mode 100644
index 0000000..1bf7f8b
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast1/pjsip.conf
@@ -0,0 +1,37 @@
+; I'm Alice (ast1) with a connection to the pbx (ast2)
+
+[local-transport-tls]
+type = transport
+protocol = tls
+method = tlsv1
+cipher = AES128-CCM
+priv_key_file = <<astetcdir>>/ca1-ast1.key
+cert_file = <<astetcdir>>/ca1-ast1.crt
+ca_list_file = <<astetcdir>>/ca1.crt
+verify_client = yes
+verify_server = yes
+require_client_cert = yes
+async_operations = 20
+bind = 127.0.0.1:5061
+
+[pbx-ast2]
+type=endpoint
+transport=local-transport-tls
+context=default
+allow=!all,ulaw,alaw
+media_address=127.0.0.1
+direct_media=no
+from_user=alice
+from_domain=127.0.0.1
+aors=pbx-ast2
+trust_id_inbound = yes
+trust_id_outbound = yes
+media_encryption = dtls
+dtls_private_key = <<astetcdir>>/ca1-ast1.key
+dtls_cert_file = <<astetcdir>>/ca1-ast1.crt
+dtls_ca_file = <<astetcdir>>/ca1.crt
+dtls_verify = yes
+
+[pbx-ast2]
+type=aor
+contact=sips:127.0.0.1:5062\;transport=tls
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast2/ca1-ast2.crt b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast2/ca1-ast2.crt
new file mode 120000
index 0000000..48e3817
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast2/ca1-ast2.crt
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1-ast2.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast2/ca1-ast2.key b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast2/ca1-ast2.key
new file mode 120000
index 0000000..2963fc7
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast2/ca1-ast2.key
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1-ast2.key
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast2/ca1.crt b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast2/ca1.crt
new file mode 120000
index 0000000..f28c13f
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast2/ca1.crt
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast2/extensions.conf b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast2/extensions.conf
new file mode 100644
index 0000000..26cecdf
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast2/extensions.conf
@@ -0,0 +1,3 @@
+
+[default]
+exten => bob,1,Dial(PJSIP/bob at bob)
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast2/pjsip.conf b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast2/pjsip.conf
new file mode 100644
index 0000000..20b7847
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast2/pjsip.conf
@@ -0,0 +1,48 @@
+; I'm the pbx (ast2) with a connections to Alice (ast1) and Bob (ast2)
+
+[local-transport-tls]
+type = transport
+protocol = tls
+method = tlsv1
+cipher = AES128-CCM,AES128-CCM8,AES128-GCM-SHA256,AES128-SHA256,AES256-CCM,AES256-CCM8,AES256-GCM-SHA384,AES256-SHA256,DHE-DSS-AES128-GCM-SHA256,DHE-DSS-AES128-SHA,DHE-DSS-AES128-SHA256,DHE-DSS-AES256-GCM-SHA384,DHE-DSS-AES256-SHA,DHE-DSS-AES256-SHA256,DHE-DSS-DES-CBC3-SHA,DHE-RSA-AES128-CCM,DHE-RSA-AES128-CCM8,DHE-RSA-AES128-GCM-SHA256,DHE-RSA-AES128-SHA,DHE-RSA-AES128-SHA256,DHE-RSA-AES256-CCM,DHE-RSA-AES256-CCM8,DHE-RSA-AES256-GCM-SHA384,DHE-RSA-AES256-SHA,DHE-RSA-AES256-SHA256,DHE-RSA-DES-CBC3-SHA,ECDHE-ECDSA-AES128-CCM,ECDHE-ECDSA-AES128-CCM8,ECDHE-ECDSA-AES128-GCM-SHA256,ECDHE-ECDSA-AES128-SHA,ECDHE-ECDSA-AES128-SHA256,ECDHE-ECDSA-AES256-CCM,ECDHE-ECDSA-AES256-CCM8,ECDHE-ECDSA-AES256-GCM-SHA384,ECDHE-ECDSA-AES256-SHA,ECDHE-ECDSA-AES256-SHA384,ECDHE-ECDSA-DES-CBC3-SHA,ECDHE-RSA-AES128-GCM-SHA256,ECDHE-RSA-AES128-SHA,ECDHE-RSA-AES128-SHA256,ECDHE-RSA-AES256-GCM-SHA384,ECDHE-RSA-AES256-SHA,ECDHE-RSA-AES256-SHA384,ECDHE-RSA-DES-CBC3-SHA
+priv_key_file = <<astetcdir>>/ca1-ast2.key
+cert_file = <<astetcdir>>/ca1-ast2.crt
+ca_list_file = <<astetcdir>>/ca1.crt
+verify_client = yes
+verify_server = yes
+require_client_cert = yes
+async_operations = 20
+bind = 127.0.0.1:5062
+
+[endpoint-template-tls](!)
+type=endpoint
+transport=local-transport-tls
+context=default
+allow=!all,ulaw,alaw
+media_address=127.0.0.1
+direct_media=no
+trust_id_inbound = yes
+trust_id_outbound = yes
+
+[alice](endpoint-template-tls)
+aors=alice
+from_user=pbx-ast2
+media_encryption = dtls
+dtls_private_key = <<astetcdir>>/ca1-ast2.key
+dtls_cert_file = <<astetcdir>>/ca1-ast2.crt
+dtls_ca_file = <<astetcdir>>/ca1.crt
+dtls_verify = yes
+
+[alice]
+type = aor
+contact = sips:alice at 127.0.0.1:5061\;transport=tls
+
+[bob](endpoint-template-tls)
+aors=bob
+from_user=pbx-ast2
+media_encryption = sdes
+
+[bob]
+type = aor
+contact = sips:127.0.0.1:5063\;transport=tls
+
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast3/ca1-ast3.crt b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast3/ca1-ast3.crt
new file mode 120000
index 0000000..6983f88
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast3/ca1-ast3.crt
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1-ast3.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast3/ca1-ast3.key b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast3/ca1-ast3.key
new file mode 120000
index 0000000..4e15df8
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast3/ca1-ast3.key
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1-ast3.key
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast3/ca1.crt b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast3/ca1.crt
new file mode 120000
index 0000000..f28c13f
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast3/ca1.crt
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast3/extensions.conf b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast3/extensions.conf
new file mode 100644
index 0000000..bc0b4cd
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast3/extensions.conf
@@ -0,0 +1,18 @@
+; I'm bob.
+
+[default]
+exten => bob,1,Answer()
+same => n,BackgroundDetect(tt-weasels,1,20,,5000)
+same => n,NoOp(Talking was NOT detected! Trying again)
+same => n,BackgroundDetect(tt-weasels,1,20,,5000)
+same => n,NoOp(Talking was NOT detected!)
+same => n,UserEvent(TalkDetect, result: fail)
+same => n,Hangup()
+
+; If talking is detected then it jumps here
+exten => talk,1,NoOp(Talking was detected!)
+same => n,UserEvent(TalkDetect, result: pass)
+same => n,Playback(tt-weasels)
+same => n,Wait(10) ; Wait for Alice to hang up
+same => n,Hangup()
+
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast3/pjsip.conf b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast3/pjsip.conf
new file mode 100644
index 0000000..3ffd18c
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/configs/ast3/pjsip.conf
@@ -0,0 +1,33 @@
+; I'm Bob (ast3) with a connection to the pbx (ast2)
+
+[local-transport-tls]
+type = transport
+protocol = tls
+method = tlsv1
+cipher = AES256-SHA256
+priv_key_file = <<astetcdir>>/ca1-ast3.key
+cert_file = <<astetcdir>>/ca1-ast3.crt
+ca_list_file = <<astetcdir>>/ca1.crt
+verify_client = yes
+verify_server = yes
+require_client_cert = yes
+async_operations = 20
+bind = 127.0.0.1:5063
+
+[pbx-ast2]
+type=endpoint
+transport=local-transport-tls
+context=default
+allow=!all,ulaw,alaw
+media_address=127.0.0.1
+direct_media=no
+media_encryption = sdes
+from_user=bob
+aors=pbx-ast2
+trust_id_inbound = yes
+trust_id_outbound = yes
+from_domain=127.0.0.1
+
+[pbx-ast2]
+type=aor
+contact=sips:127.0.0.1:5062\;transport=tls
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/test-config.yaml b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/test-config.yaml
new file mode 100644
index 0000000..9030e88
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/limited_ciphers_verify_certs/test-config.yaml
@@ -0,0 +1,95 @@
+testinfo:
+ summary: 'Tests sips/tls and dtls/sdes'
+ description: |
+ 'Run three instances of Asterisk, "alice", "pbx", and "bob" to test
+ two party calls. sips/tls is used for signalling between all parties.
+ alice<>pbx uses dtls for media.
+ pbx<>bob uses sdes for media.
+ alice has only the AES128-CCM cipher enabled.
+ pbx has all ciphers enabled.
+ bob has only the AES256-SHA256 cipher enabled.
+ All 3 instances verify certificates.
+
+ Both alice and bob send audio to each other while
+ both also listen for audio. Alice then initiates the hang. This
+ ensures that both alice and bob receive audio.
+
+test-modules:
+ test-object:
+ config-section: test-object-config
+ typename: 'test_case.TestCaseModule'
+ modules:
+ -
+ config-section: originator-config-tls
+ typename: 'pluggable_modules.Originator'
+ -
+ config-section: 'ami-config'
+ typename: 'pluggable_modules.EventActionModule'
+
+test-object-config:
+ asterisk-instances: 3
+ connect-ami: True
+
+# Alice calls bob via pbx1 then connects the call to the "start"
+# extension which does the audio detection.
+originator-config-tls:
+ trigger: 'ami_connect'
+ ignore-originate-failure: 'no'
+ id: '0'
+ channel: 'PJSIP/bob at pbx-ast2'
+ context: 'default'
+ exten: 'start'
+ priority: '1'
+ async: 'True'
+
+ami-config:
+ # Alice events
+ -
+ ami-events:
+ type: 'headermatch'
+ id: '0'
+ conditions:
+ match:
+ Event: 'UserEvent'
+ UserEvent: 'TalkDetect'
+ requirements:
+ match:
+ result: 'pass'
+ count: '1'
+ # Bob events
+ -
+ ami-events:
+ type: 'headermatch'
+ id: '2'
+ conditions:
+ match:
+ Event: 'UserEvent'
+ UserEvent: 'TalkDetect'
+ requirements:
+ match:
+ result: 'pass'
+ count: '1'
+ -
+ ami-events:
+ type: 'headermatch'
+ id: '2'
+ conditions:
+ match:
+ Event: 'Hangup'
+ Channel: 'PJSIP/pbx-ast2*'
+ requirements:
+ match:
+ Cause: '16'
+ count: '1'
+ stop_test:
+
+properties:
+ minversion: '12.0.0'
+ dependencies:
+ - asterisk : 'chan_pjsip'
+ - asterisk : 'res_pjsip'
+ - asterisk : 'res_pjsip_session'
+ - asterisk : 'res_pjsip_sips_contact'
+ - asterisk : 'res_srtp'
+ tags:
+ - pjsip
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/tests.yaml b/tests/channels/pjsip/secure_calling/calls/nominal/tests.yaml
new file mode 100644
index 0000000..1243cfb
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/tests.yaml
@@ -0,0 +1,5 @@
+tests:
+ - test: 'all_ciphers_verify_certs'
+ - test: 'limited_ciphers_verify_certs'
+ - test: 'two_CAs_verify_certs'
+ - test: 'two_CAs_no_verify_certs'
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast1/ca1-ast1.crt b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast1/ca1-ast1.crt
new file mode 120000
index 0000000..7373cdc
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast1/ca1-ast1.crt
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1-ast1.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast1/ca1-ast1.key b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast1/ca1-ast1.key
new file mode 120000
index 0000000..e7956fb
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast1/ca1-ast1.key
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1-ast1.key
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast1/ca1.crt b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast1/ca1.crt
new file mode 120000
index 0000000..f28c13f
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast1/ca1.crt
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast1/extensions.conf b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast1/extensions.conf
new file mode 100644
index 0000000..b90594a
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast1/extensions.conf
@@ -0,0 +1,19 @@
+; I'm Alice
+; When the testsuite calls originate, this instance will call bob (ast3) via
+; the pbx (ast2) and the created channel will be connected to start at default.
+
+[default]
+exten => start,1,Answer()
+same => n,BackgroundDetect(tt-weasels,1,20,,5000)
+same => n,NoOp(Talking was NOT detected! Trying again)
+same => n,BackgroundDetect(tt-weasels,1,20,,5000)
+same => n,NoOp(Talking was NOT detected!)
+same => n,UserEvent(TalkDetect, result: fail)
+same => n,Hangup()
+
+; If talking is detected then it jumps here
+exten => talk,1,NoOp(Talking was detected!)
+same => n,UserEvent(TalkDetect, result: pass)
+same => n,Playback(tt-weasels)
+same => n,Wait(2)
+same => n,Hangup()
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast1/pjproject.conf b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast1/pjproject.conf
new file mode 100644
index 0000000..1468ade
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast1/pjproject.conf
@@ -0,0 +1,14 @@
+; Common pjproject options
+;
+;========================LOG_MAPPINGS SECTION OPTIONS===============================
+[log_mappings] ; NOTE: The id of this object MUST be log_mappings.
+type = log_mappings
+asterisk_error = 0,1
+asterisk_warning = 2,3,4,5,6
+;asterisk_notice =
+;asterisk_verbose =
+;asterisk_debug = 3,4,5,6
+
+[startup]
+type = startup
+log_level = 3
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast1/pjsip.conf b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast1/pjsip.conf
new file mode 100644
index 0000000..fe5d9ca
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast1/pjsip.conf
@@ -0,0 +1,37 @@
+; I'm Alice (ast1) with a connection to the pbx (ast2)
+
+[local-transport-tls]
+type = transport
+protocol = tls
+method = tlsv1
+cipher = AES128-CCM,AES128-CCM8,AES128-GCM-SHA256,AES128-SHA256,AES256-CCM,AES256-CCM8,AES256-GCM-SHA384,AES256-SHA256,DHE-DSS-AES128-GCM-SHA256,DHE-DSS-AES128-SHA,DHE-DSS-AES128-SHA256,DHE-DSS-AES256-GCM-SHA384,DHE-DSS-AES256-SHA,DHE-DSS-AES256-SHA256,DHE-DSS-DES-CBC3-SHA,DHE-RSA-AES128-CCM,DHE-RSA-AES128-CCM8,DHE-RSA-AES128-GCM-SHA256,DHE-RSA-AES128-SHA,DHE-RSA-AES128-SHA256,DHE-RSA-AES256-CCM,DHE-RSA-AES256-CCM8,DHE-RSA-AES256-GCM-SHA384,DHE-RSA-AES256-SHA,DHE-RSA-AES256-SHA256,DHE-RSA-DES-CBC3-SHA,ECDHE-ECDSA-AES128-CCM,ECDHE-ECDSA-AES128-CCM8,ECDHE-ECDSA-AES128-GCM-SHA256,ECDHE-ECDSA-AES128-SHA,ECDHE-ECDSA-AES128-SHA256,ECDHE-ECDSA-AES256-CCM,ECDHE-ECDSA-AES256-CCM8,ECDHE-ECDSA-AES256-GCM-SHA384,ECDHE-ECDSA-AES256-SHA,ECDHE-ECDSA-AES256-SHA384,ECDHE-ECDSA-DES-CBC3-SHA,ECDHE-RSA-AES128-GCM-SHA256,ECDHE-RSA-AES128-SHA,ECDHE-RSA-AES128-SHA256,ECDHE-RSA-AES256-GCM-SHA384,ECDHE-RSA-AES256-SHA,ECDHE-RSA-AES256-SHA384,ECDHE-RSA-DES-CBC3-SHA
+priv_key_file = <<astetcdir>>/ca1-ast1.key
+cert_file = <<astetcdir>>/ca1-ast1.crt
+ca_list_file = <<astetcdir>>/ca1.crt
+verify_client = yes
+verify_server = yes
+require_client_cert = no
+async_operations = 20
+bind = 127.0.0.1:5061
+
+[pbx-ast2]
+type=endpoint
+transport=local-transport-tls
+context=default
+allow=!all,ulaw,alaw
+media_address=127.0.0.1
+direct_media=no
+from_user=alice
+from_domain=127.0.0.1
+aors=pbx-ast2
+trust_id_inbound = yes
+trust_id_outbound = yes
+media_encryption = dtls
+dtls_private_key = <<astetcdir>>/ca1-ast1.key
+dtls_cert_file = <<astetcdir>>/ca1-ast1.crt
+dtls_ca_file = <<astetcdir>>/ca1.crt
+dtls_verify = yes
+
+[pbx-ast2]
+type=aor
+contact=sips:127.0.0.1:5062\;transport=tls
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast2/ca1-ast2.crt b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast2/ca1-ast2.crt
new file mode 120000
index 0000000..48e3817
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast2/ca1-ast2.crt
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1-ast2.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast2/ca1-ast2.key b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast2/ca1-ast2.key
new file mode 120000
index 0000000..2963fc7
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast2/ca1-ast2.key
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1-ast2.key
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast2/ca1.crt b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast2/ca1.crt
new file mode 120000
index 0000000..f28c13f
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast2/ca1.crt
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast2/dcacca01.0 b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast2/dcacca01.0
new file mode 120000
index 0000000..b829950
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast2/dcacca01.0
@@ -0,0 +1 @@
+ca2.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast2/extensions.conf b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast2/extensions.conf
new file mode 100644
index 0000000..26cecdf
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast2/extensions.conf
@@ -0,0 +1,3 @@
+
+[default]
+exten => bob,1,Dial(PJSIP/bob at bob)
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast2/pjsip.conf b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast2/pjsip.conf
new file mode 100644
index 0000000..3587ec5
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast2/pjsip.conf
@@ -0,0 +1,48 @@
+; I'm the pbx (ast2) with a connections to Alice (ast1) and Bob (ast2)
+
+[local-transport-tls]
+type = transport
+protocol = tls
+method = tlsv1
+cipher = AES128-CCM,AES128-CCM8,AES128-GCM-SHA256,AES128-SHA256,AES256-CCM,AES256-CCM8,AES256-GCM-SHA384,AES256-SHA256,DHE-DSS-AES128-GCM-SHA256,DHE-DSS-AES128-SHA,DHE-DSS-AES128-SHA256,DHE-DSS-AES256-GCM-SHA384,DHE-DSS-AES256-SHA,DHE-DSS-AES256-SHA256,DHE-DSS-DES-CBC3-SHA,DHE-RSA-AES128-CCM,DHE-RSA-AES128-CCM8,DHE-RSA-AES128-GCM-SHA256,DHE-RSA-AES128-SHA,DHE-RSA-AES128-SHA256,DHE-RSA-AES256-CCM,DHE-RSA-AES256-CCM8,DHE-RSA-AES256-GCM-SHA384,DHE-RSA-AES256-SHA,DHE-RSA-AES256-SHA256,DHE-RSA-DES-CBC3-SHA,ECDHE-ECDSA-AES128-CCM,ECDHE-ECDSA-AES128-CCM8,ECDHE-ECDSA-AES128-GCM-SHA256,ECDHE-ECDSA-AES128-SHA,ECDHE-ECDSA-AES128-SHA256,ECDHE-ECDSA-AES256-CCM,ECDHE-ECDSA-AES256-CCM8,ECDHE-ECDSA-AES256-GCM-SHA384,ECDHE-ECDSA-AES256-SHA,ECDHE-ECDSA-AES256-SHA384,ECDHE-ECDSA-DES-CBC3-SHA,ECDHE-RSA-AES128-GCM-SHA256,ECDHE-RSA-AES128-SHA,ECDHE-RSA-AES128-SHA256,ECDHE-RSA-AES256-GCM-SHA384,ECDHE-RSA-AES256-SHA,ECDHE-RSA-AES256-SHA384,ECDHE-RSA-DES-CBC3-SHA
+priv_key_file = <<astetcdir>>/ca1-ast2.key
+cert_file = <<astetcdir>>/ca1-ast2.crt
+ca_list_file = <<astetcdir>>/ca1.crt
+verify_client = yes
+verify_server = no
+require_client_cert = yes
+async_operations = 20
+bind = 127.0.0.1:5062
+
+[endpoint-template-tls](!)
+type=endpoint
+transport=local-transport-tls
+context=default
+allow=!all,ulaw,alaw
+media_address=127.0.0.1
+direct_media=no
+trust_id_inbound = yes
+trust_id_outbound = yes
+
+[alice](endpoint-template-tls)
+aors=alice
+from_user=pbx-ast2
+media_encryption = dtls
+dtls_private_key = <<astetcdir>>/ca1-ast2.key
+dtls_cert_file = <<astetcdir>>/ca1-ast2.crt
+dtls_ca_file = <<astetcdir>>/ca1.crt
+dtls_verify = yes
+
+[alice]
+type = aor
+contact = sips:alice at 127.0.0.1:5061\;transport=tls
+
+[bob](endpoint-template-tls)
+aors=bob
+from_user=pbx-ast2
+media_encryption = sdes
+
+[bob]
+type = aor
+contact = sips:127.0.0.1:5063\;transport=tls
+
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast3/ca2-ast3.crt b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast3/ca2-ast3.crt
new file mode 120000
index 0000000..8588a6c
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast3/ca2-ast3.crt
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca2/ca2-ast3.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast3/ca2-ast3.key b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast3/ca2-ast3.key
new file mode 120000
index 0000000..bb9be9c
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast3/ca2-ast3.key
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca2/ca2-ast3.key
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast3/ca2.crt b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast3/ca2.crt
new file mode 120000
index 0000000..8a70e54
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast3/ca2.crt
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca2/ca2.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast3/ee95348a.0 b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast3/ee95348a.0
new file mode 120000
index 0000000..876270c
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast3/ee95348a.0
@@ -0,0 +1 @@
+ca1.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast3/extensions.conf b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast3/extensions.conf
new file mode 100644
index 0000000..bc0b4cd
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast3/extensions.conf
@@ -0,0 +1,18 @@
+; I'm bob.
+
+[default]
+exten => bob,1,Answer()
+same => n,BackgroundDetect(tt-weasels,1,20,,5000)
+same => n,NoOp(Talking was NOT detected! Trying again)
+same => n,BackgroundDetect(tt-weasels,1,20,,5000)
+same => n,NoOp(Talking was NOT detected!)
+same => n,UserEvent(TalkDetect, result: fail)
+same => n,Hangup()
+
+; If talking is detected then it jumps here
+exten => talk,1,NoOp(Talking was detected!)
+same => n,UserEvent(TalkDetect, result: pass)
+same => n,Playback(tt-weasels)
+same => n,Wait(10) ; Wait for Alice to hang up
+same => n,Hangup()
+
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast3/pjsip.conf b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast3/pjsip.conf
new file mode 100644
index 0000000..f9d3fb6
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/configs/ast3/pjsip.conf
@@ -0,0 +1,33 @@
+; I'm Bob (ast3) with a connection to the pbx (ast2)
+
+[local-transport-tls]
+type = transport
+protocol = tls
+method = tlsv1
+cipher = AES128-CCM,AES128-CCM8,AES128-GCM-SHA256,AES128-SHA256,AES256-CCM,AES256-CCM8,AES256-GCM-SHA384,AES256-SHA256,DHE-DSS-AES128-GCM-SHA256,DHE-DSS-AES128-SHA,DHE-DSS-AES128-SHA256,DHE-DSS-AES256-GCM-SHA384,DHE-DSS-AES256-SHA,DHE-DSS-AES256-SHA256,DHE-DSS-DES-CBC3-SHA,DHE-RSA-AES128-CCM,DHE-RSA-AES128-CCM8,DHE-RSA-AES128-GCM-SHA256,DHE-RSA-AES128-SHA,DHE-RSA-AES128-SHA256,DHE-RSA-AES256-CCM,DHE-RSA-AES256-CCM8,DHE-RSA-AES256-GCM-SHA384,DHE-RSA-AES256-SHA,DHE-RSA-AES256-SHA256,DHE-RSA-DES-CBC3-SHA,ECDHE-ECDSA-AES128-CCM,ECDHE-ECDSA-AES128-CCM8,ECDHE-ECDSA-AES128-GCM-SHA256,ECDHE-ECDSA-AES128-SHA,ECDHE-ECDSA-AES128-SHA256,ECDHE-ECDSA-AES256-CCM,ECDHE-ECDSA-AES256-CCM8,ECDHE-ECDSA-AES256-GCM-SHA384,ECDHE-ECDSA-AES256-SHA,ECDHE-ECDSA-AES256-SHA384,ECDHE-ECDSA-DES-CBC3-SHA,ECDHE-RSA-AES128-GCM-SHA256,ECDHE-RSA-AES128-SHA,ECDHE-RSA-AES128-SHA256,ECDHE-RSA-AES256-GCM-SHA384,ECDHE-RSA-AES256-SHA,ECDHE-RSA-AES256-SHA384,ECDHE-RSA-DES-CBC3-SHA
+priv_key_file = <<astetcdir>>/ca2-ast3.key
+cert_file = <<astetcdir>>/ca2-ast3.crt
+ca_list_file = <<astetcdir>>/ca2.crt
+verify_client = no
+verify_server = yes
+require_client_cert = yes
+async_operations = 20
+bind = 127.0.0.1:5063
+
+[pbx-ast2]
+type=endpoint
+transport=local-transport-tls
+context=default
+allow=!all,ulaw,alaw
+media_address=127.0.0.1
+direct_media=no
+media_encryption = sdes
+from_user=bob
+aors=pbx-ast2
+trust_id_inbound = yes
+trust_id_outbound = yes
+from_domain=127.0.0.1
+
+[pbx-ast2]
+type=aor
+contact=sips:127.0.0.1:5062\;transport=tls
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/test-config.yaml b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/test-config.yaml
new file mode 100644
index 0000000..4c765d1
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_no_verify_certs/test-config.yaml
@@ -0,0 +1,97 @@
+testinfo:
+ summary: 'Tests sips/tls and dtls/sdes'
+ description: |
+ 'Run three instances of Asterisk, "alice", "pbx", and "bob" to test
+ two party calls. sips/tls is used for signalling between all parties.
+ alice<>pbx uses dtls for media.
+ pbx<>bob uses sdes for media.
+ All 3 instances have the same ciphers enabled.
+ alice has keys and certs from CA1 and verifies pbx's cert.
+ pbx has keys and certs from CA1 and verifies alice's cert.
+ bob has keys and certs from CA2 but not CA1.
+ pbx does not have a cert from CA2 so does NOT verify bob's cert.
+ bob does not verify pbx's cert.
+
+ Both alice and bob send audio to each other while
+ both also listen for audio. Alice then initiates the hang. This
+ ensures that both alice and bob receive audio.
+
+test-modules:
+ test-object:
+ config-section: test-object-config
+ typename: 'test_case.TestCaseModule'
+ modules:
+ -
+ config-section: originator-config-tls
+ typename: 'pluggable_modules.Originator'
+ -
+ config-section: 'ami-config'
+ typename: 'pluggable_modules.EventActionModule'
+
+test-object-config:
+ asterisk-instances: 3
+ connect-ami: True
+
+# Alice calls bob via pbx1 then connects the call to the "start"
+# extension which does the audio detection.
+originator-config-tls:
+ trigger: 'ami_connect'
+ ignore-originate-failure: 'no'
+ id: '0'
+ channel: 'PJSIP/bob at pbx-ast2'
+ context: 'default'
+ exten: 'start'
+ priority: '1'
+ async: 'True'
+
+ami-config:
+ # Alice events
+ -
+ ami-events:
+ type: 'headermatch'
+ id: '0'
+ conditions:
+ match:
+ Event: 'UserEvent'
+ UserEvent: 'TalkDetect'
+ requirements:
+ match:
+ result: 'pass'
+ count: '1'
+ # Bob events
+ -
+ ami-events:
+ type: 'headermatch'
+ id: '2'
+ conditions:
+ match:
+ Event: 'UserEvent'
+ UserEvent: 'TalkDetect'
+ requirements:
+ match:
+ result: 'pass'
+ count: '1'
+ -
+ ami-events:
+ type: 'headermatch'
+ id: '2'
+ conditions:
+ match:
+ Event: 'Hangup'
+ Channel: 'PJSIP/pbx-ast2*'
+ requirements:
+ match:
+ Cause: '16'
+ count: '1'
+ stop_test:
+
+properties:
+ minversion: '12.0.0'
+ dependencies:
+ - asterisk : 'chan_pjsip'
+ - asterisk : 'res_pjsip'
+ - asterisk : 'res_pjsip_session'
+ - asterisk : 'res_pjsip_sips_contact'
+ - asterisk : 'res_srtp'
+ tags:
+ - pjsip
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast1/ca1-ast1.crt b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast1/ca1-ast1.crt
new file mode 120000
index 0000000..7373cdc
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast1/ca1-ast1.crt
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1-ast1.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast1/ca1-ast1.key b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast1/ca1-ast1.key
new file mode 120000
index 0000000..e7956fb
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast1/ca1-ast1.key
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1-ast1.key
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast1/ca1.crt b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast1/ca1.crt
new file mode 120000
index 0000000..f28c13f
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast1/ca1.crt
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast1/extensions.conf b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast1/extensions.conf
new file mode 100644
index 0000000..b90594a
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast1/extensions.conf
@@ -0,0 +1,19 @@
+; I'm Alice
+; When the testsuite calls originate, this instance will call bob (ast3) via
+; the pbx (ast2) and the created channel will be connected to start at default.
+
+[default]
+exten => start,1,Answer()
+same => n,BackgroundDetect(tt-weasels,1,20,,5000)
+same => n,NoOp(Talking was NOT detected! Trying again)
+same => n,BackgroundDetect(tt-weasels,1,20,,5000)
+same => n,NoOp(Talking was NOT detected!)
+same => n,UserEvent(TalkDetect, result: fail)
+same => n,Hangup()
+
+; If talking is detected then it jumps here
+exten => talk,1,NoOp(Talking was detected!)
+same => n,UserEvent(TalkDetect, result: pass)
+same => n,Playback(tt-weasels)
+same => n,Wait(2)
+same => n,Hangup()
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast1/pjproject.conf b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast1/pjproject.conf
new file mode 100644
index 0000000..1468ade
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast1/pjproject.conf
@@ -0,0 +1,14 @@
+; Common pjproject options
+;
+;========================LOG_MAPPINGS SECTION OPTIONS===============================
+[log_mappings] ; NOTE: The id of this object MUST be log_mappings.
+type = log_mappings
+asterisk_error = 0,1
+asterisk_warning = 2,3,4,5,6
+;asterisk_notice =
+;asterisk_verbose =
+;asterisk_debug = 3,4,5,6
+
+[startup]
+type = startup
+log_level = 3
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast1/pjsip.conf b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast1/pjsip.conf
new file mode 100644
index 0000000..fe5d9ca
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast1/pjsip.conf
@@ -0,0 +1,37 @@
+; I'm Alice (ast1) with a connection to the pbx (ast2)
+
+[local-transport-tls]
+type = transport
+protocol = tls
+method = tlsv1
+cipher = AES128-CCM,AES128-CCM8,AES128-GCM-SHA256,AES128-SHA256,AES256-CCM,AES256-CCM8,AES256-GCM-SHA384,AES256-SHA256,DHE-DSS-AES128-GCM-SHA256,DHE-DSS-AES128-SHA,DHE-DSS-AES128-SHA256,DHE-DSS-AES256-GCM-SHA384,DHE-DSS-AES256-SHA,DHE-DSS-AES256-SHA256,DHE-DSS-DES-CBC3-SHA,DHE-RSA-AES128-CCM,DHE-RSA-AES128-CCM8,DHE-RSA-AES128-GCM-SHA256,DHE-RSA-AES128-SHA,DHE-RSA-AES128-SHA256,DHE-RSA-AES256-CCM,DHE-RSA-AES256-CCM8,DHE-RSA-AES256-GCM-SHA384,DHE-RSA-AES256-SHA,DHE-RSA-AES256-SHA256,DHE-RSA-DES-CBC3-SHA,ECDHE-ECDSA-AES128-CCM,ECDHE-ECDSA-AES128-CCM8,ECDHE-ECDSA-AES128-GCM-SHA256,ECDHE-ECDSA-AES128-SHA,ECDHE-ECDSA-AES128-SHA256,ECDHE-ECDSA-AES256-CCM,ECDHE-ECDSA-AES256-CCM8,ECDHE-ECDSA-AES256-GCM-SHA384,ECDHE-ECDSA-AES256-SHA,ECDHE-ECDSA-AES256-SHA384,ECDHE-ECDSA-DES-CBC3-SHA,ECDHE-RSA-AES128-GCM-SHA256,ECDHE-RSA-AES128-SHA,ECDHE-RSA-AES128-SHA256,ECDHE-RSA-AES256-GCM-SHA384,ECDHE-RSA-AES256-SHA,ECDHE-RSA-AES256-SHA384,ECDHE-RSA-DES-CBC3-SHA
+priv_key_file = <<astetcdir>>/ca1-ast1.key
+cert_file = <<astetcdir>>/ca1-ast1.crt
+ca_list_file = <<astetcdir>>/ca1.crt
+verify_client = yes
+verify_server = yes
+require_client_cert = no
+async_operations = 20
+bind = 127.0.0.1:5061
+
+[pbx-ast2]
+type=endpoint
+transport=local-transport-tls
+context=default
+allow=!all,ulaw,alaw
+media_address=127.0.0.1
+direct_media=no
+from_user=alice
+from_domain=127.0.0.1
+aors=pbx-ast2
+trust_id_inbound = yes
+trust_id_outbound = yes
+media_encryption = dtls
+dtls_private_key = <<astetcdir>>/ca1-ast1.key
+dtls_cert_file = <<astetcdir>>/ca1-ast1.crt
+dtls_ca_file = <<astetcdir>>/ca1.crt
+dtls_verify = yes
+
+[pbx-ast2]
+type=aor
+contact=sips:127.0.0.1:5062\;transport=tls
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/ca-bundle.crt b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/ca-bundle.crt
new file mode 120000
index 0000000..427fec7
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/ca-bundle.crt
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca-bundle.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/ca1-ast2.crt b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/ca1-ast2.crt
new file mode 120000
index 0000000..48e3817
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/ca1-ast2.crt
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1-ast2.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/ca1-ast2.key b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/ca1-ast2.key
new file mode 120000
index 0000000..2963fc7
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/ca1-ast2.key
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1-ast2.key
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/ca1.crt b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/ca1.crt
new file mode 120000
index 0000000..f28c13f
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/ca1.crt
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/dcacca01.0 b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/dcacca01.0
new file mode 120000
index 0000000..b829950
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/dcacca01.0
@@ -0,0 +1 @@
+ca2.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/extensions.conf b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/extensions.conf
new file mode 100644
index 0000000..26cecdf
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/extensions.conf
@@ -0,0 +1,3 @@
+
+[default]
+exten => bob,1,Dial(PJSIP/bob at bob)
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/pjsip.conf b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/pjsip.conf
new file mode 100644
index 0000000..ea44c9b
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast2/pjsip.conf
@@ -0,0 +1,48 @@
+; I'm the pbx (ast2) with a connections to Alice (ast1) and Bob (ast2)
+
+[local-transport-tls]
+type = transport
+protocol = tls
+method = tlsv1
+cipher = AES128-CCM,AES128-CCM8,AES128-GCM-SHA256,AES128-SHA256,AES256-CCM,AES256-CCM8,AES256-GCM-SHA384,AES256-SHA256,DHE-DSS-AES128-GCM-SHA256,DHE-DSS-AES128-SHA,DHE-DSS-AES128-SHA256,DHE-DSS-AES256-GCM-SHA384,DHE-DSS-AES256-SHA,DHE-DSS-AES256-SHA256,DHE-DSS-DES-CBC3-SHA,DHE-RSA-AES128-CCM,DHE-RSA-AES128-CCM8,DHE-RSA-AES128-GCM-SHA256,DHE-RSA-AES128-SHA,DHE-RSA-AES128-SHA256,DHE-RSA-AES256-CCM,DHE-RSA-AES256-CCM8,DHE-RSA-AES256-GCM-SHA384,DHE-RSA-AES256-SHA,DHE-RSA-AES256-SHA256,DHE-RSA-DES-CBC3-SHA,ECDHE-ECDSA-AES128-CCM,ECDHE-ECDSA-AES128-CCM8,ECDHE-ECDSA-AES128-GCM-SHA256,ECDHE-ECDSA-AES128-SHA,ECDHE-ECDSA-AES128-SHA256,ECDHE-ECDSA-AES256-CCM,ECDHE-ECDSA-AES256-CCM8,ECDHE-ECDSA-AES256-GCM-SHA384,ECDHE-ECDSA-AES256-SHA,ECDHE-ECDSA-AES256-SHA384,ECDHE-ECDSA-DES-CBC3-SHA,ECDHE-RSA-AES128-GCM-SHA256,ECDHE-RSA-AES128-SHA,ECDHE-RSA-AES128-SHA256,ECDHE-RSA-AES256-GCM-SHA384,ECDHE-RSA-AES256-SHA,ECDHE-RSA-AES256-SHA384,ECDHE-RSA-DES-CBC3-SHA
+priv_key_file = <<astetcdir>>/ca1-ast2.key
+cert_file = <<astetcdir>>/ca1-ast2.crt
+ca_list_file = <<astetcdir>>/ca-bundle.crt
+verify_client = yes
+verify_server = yes
+require_client_cert = yes
+async_operations = 20
+bind = 127.0.0.1:5062
+
+[endpoint-template-tls](!)
+type=endpoint
+transport=local-transport-tls
+context=default
+allow=!all,ulaw,alaw
+media_address=127.0.0.1
+direct_media=no
+trust_id_inbound = yes
+trust_id_outbound = yes
+
+[alice](endpoint-template-tls)
+aors=alice
+from_user=pbx-ast2
+media_encryption = dtls
+dtls_private_key = <<astetcdir>>/ca1-ast2.key
+dtls_cert_file = <<astetcdir>>/ca1-ast2.crt
+dtls_ca_file = <<astetcdir>>/ca1.crt
+dtls_verify = yes
+
+[alice]
+type = aor
+contact = sips:alice at 127.0.0.1:5061\;transport=tls
+
+[bob](endpoint-template-tls)
+aors=bob
+from_user=pbx-ast2
+media_encryption = sdes
+
+[bob]
+type = aor
+contact = sips:127.0.0.1:5063\;transport=tls
+
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/0331b2fb.0 b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/0331b2fb.0
new file mode 120000
index 0000000..a7e7003
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/0331b2fb.0
@@ -0,0 +1 @@
+ca2-ast3.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/ca1.crt b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/ca1.crt
new file mode 120000
index 0000000..f28c13f
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/ca1.crt
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca1/ca1.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/ca2-ast3.crt b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/ca2-ast3.crt
new file mode 120000
index 0000000..8588a6c
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/ca2-ast3.crt
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca2/ca2-ast3.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/ca2-ast3.key b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/ca2-ast3.key
new file mode 120000
index 0000000..bb9be9c
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/ca2-ast3.key
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca2/ca2-ast3.key
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/ca2.crt b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/ca2.crt
new file mode 120000
index 0000000..8a70e54
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/ca2.crt
@@ -0,0 +1 @@
+../../../../../../../../../configs/keys/ca2/ca2.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/dcacca01.0 b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/dcacca01.0
new file mode 120000
index 0000000..b829950
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/dcacca01.0
@@ -0,0 +1 @@
+ca2.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/ee95348a.0 b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/ee95348a.0
new file mode 120000
index 0000000..876270c
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/ee95348a.0
@@ -0,0 +1 @@
+ca1.crt
\ No newline at end of file
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/extensions.conf b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/extensions.conf
new file mode 100644
index 0000000..bc0b4cd
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/extensions.conf
@@ -0,0 +1,18 @@
+; I'm bob.
+
+[default]
+exten => bob,1,Answer()
+same => n,BackgroundDetect(tt-weasels,1,20,,5000)
+same => n,NoOp(Talking was NOT detected! Trying again)
+same => n,BackgroundDetect(tt-weasels,1,20,,5000)
+same => n,NoOp(Talking was NOT detected!)
+same => n,UserEvent(TalkDetect, result: fail)
+same => n,Hangup()
+
+; If talking is detected then it jumps here
+exten => talk,1,NoOp(Talking was detected!)
+same => n,UserEvent(TalkDetect, result: pass)
+same => n,Playback(tt-weasels)
+same => n,Wait(10) ; Wait for Alice to hang up
+same => n,Hangup()
+
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/pjsip.conf b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/pjsip.conf
new file mode 100644
index 0000000..b319edb
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/configs/ast3/pjsip.conf
@@ -0,0 +1,33 @@
+; I'm Bob (ast3) with a connection to the pbx (ast2)
+
+[local-transport-tls]
+type = transport
+protocol = tls
+method = tlsv1
+cipher = AES128-CCM,AES128-CCM8,AES128-GCM-SHA256,AES128-SHA256,AES256-CCM,AES256-CCM8,AES256-GCM-SHA384,AES256-SHA256,DHE-DSS-AES128-GCM-SHA256,DHE-DSS-AES128-SHA,DHE-DSS-AES128-SHA256,DHE-DSS-AES256-GCM-SHA384,DHE-DSS-AES256-SHA,DHE-DSS-AES256-SHA256,DHE-DSS-DES-CBC3-SHA,DHE-RSA-AES128-CCM,DHE-RSA-AES128-CCM8,DHE-RSA-AES128-GCM-SHA256,DHE-RSA-AES128-SHA,DHE-RSA-AES128-SHA256,DHE-RSA-AES256-CCM,DHE-RSA-AES256-CCM8,DHE-RSA-AES256-GCM-SHA384,DHE-RSA-AES256-SHA,DHE-RSA-AES256-SHA256,DHE-RSA-DES-CBC3-SHA,ECDHE-ECDSA-AES128-CCM,ECDHE-ECDSA-AES128-CCM8,ECDHE-ECDSA-AES128-GCM-SHA256,ECDHE-ECDSA-AES128-SHA,ECDHE-ECDSA-AES128-SHA256,ECDHE-ECDSA-AES256-CCM,ECDHE-ECDSA-AES256-CCM8,ECDHE-ECDSA-AES256-GCM-SHA384,ECDHE-ECDSA-AES256-SHA,ECDHE-ECDSA-AES256-SHA384,ECDHE-ECDSA-DES-CBC3-SHA,ECDHE-RSA-AES128-GCM-SHA256,ECDHE-RSA-AES128-SHA,ECDHE-RSA-AES128-SHA256,ECDHE-RSA-AES256-GCM-SHA384,ECDHE-RSA-AES256-SHA,ECDHE-RSA-AES256-SHA384,ECDHE-RSA-DES-CBC3-SHA
+priv_key_file = <<astetcdir>>/ca2-ast3.key
+cert_file = <<astetcdir>>/ca2-ast3.crt
+ca_list_path = <<astetcdir>>/
+verify_client = no
+verify_server = no
+require_client_cert = no
+async_operations = 20
+bind = 127.0.0.1:5063
+
+[pbx-ast2]
+type=endpoint
+transport=local-transport-tls
+context=default
+allow=!all,ulaw,alaw
+media_address=127.0.0.1
+direct_media=no
+media_encryption = sdes
+from_user=bob
+aors=pbx-ast2
+trust_id_inbound = yes
+trust_id_outbound = yes
+from_domain=127.0.0.1
+
+[pbx-ast2]
+type=aor
+contact=sips:127.0.0.1:5062\;transport=tls
diff --git a/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/test-config.yaml b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/test-config.yaml
new file mode 100644
index 0000000..56c269c
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/nominal/two_CAs_verify_certs/test-config.yaml
@@ -0,0 +1,99 @@
+testinfo:
+ summary: 'Tests sips/tls and dtls/sdes'
+ description: |
+ 'Run three instances of Asterisk, "alice", "pbx", and "bob" to test
+ two party calls. sips/tls is used for signalling between all parties.
+ alice<>pbx uses dtls for media.
+ pbx<>bob uses sdes for media.
+ All 3 instances have the same ciphers enabled.
+ alice has keys and certs from CA1.
+ pbx has keys and certs from CA1.
+ pbx has a ca-bundle.crt file that includes CA2's cert.
+ bob has keys and certs from CA2 and has CA1's cert in the etc dir.
+ c_rehash was run on bob's etc dir to make CA1's cert available via
+ ca_list_path
+ All 3 instances verify certs.
+
+ Both alice and bob send audio to each other while
+ both also listen for audio. Alice then initiates the hang. This
+ ensures that both alice and bob receive audio.
+
+test-modules:
+ test-object:
+ config-section: test-object-config
+ typename: 'test_case.TestCaseModule'
+ modules:
+ -
+ config-section: originator-config-tls
+ typename: 'pluggable_modules.Originator'
+ -
+ config-section: 'ami-config'
+ typename: 'pluggable_modules.EventActionModule'
+
+test-object-config:
+ asterisk-instances: 3
+ connect-ami: True
+
+# Alice calls bob via pbx1 then connects the call to the "start"
+# extension which does the audio detection.
+originator-config-tls:
+ trigger: 'ami_connect'
+ ignore-originate-failure: 'no'
+ id: '0'
+ channel: 'PJSIP/bob at pbx-ast2'
+ context: 'default'
+ exten: 'start'
+ priority: '1'
+ async: 'True'
+
+ami-config:
+ # Alice events
+ -
+ ami-events:
+ type: 'headermatch'
+ id: '0'
+ conditions:
+ match:
+ Event: 'UserEvent'
+ UserEvent: 'TalkDetect'
+ requirements:
+ match:
+ result: 'pass'
+ count: '1'
+ # Bob events
+ -
+ ami-events:
+ type: 'headermatch'
+ id: '2'
+ conditions:
+ match:
+ Event: 'UserEvent'
+ UserEvent: 'TalkDetect'
+ requirements:
+ match:
+ result: 'pass'
+ count: '1'
+ -
+ ami-events:
+ type: 'headermatch'
+ id: '2'
+ conditions:
+ match:
+ Event: 'Hangup'
+ Channel: 'PJSIP/pbx-ast2*'
+ requirements:
+ match:
+ Cause: '16'
+ count: '1'
+ stop_test:
+
+properties:
+ minversion: '12.0.0'
+ dependencies:
+ - asterisk : 'chan_pjsip'
+ - asterisk : 'res_pjsip'
+ - asterisk : 'res_pjsip_session'
+ - asterisk : 'res_pjsip_sips_contact'
+ - asterisk : 'res_srtp'
+ tags:
+ - pjsip
diff --git a/tests/channels/pjsip/secure_calling/calls/tests.yaml b/tests/channels/pjsip/secure_calling/calls/tests.yaml
new file mode 100644
index 0000000..cec47df
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/calls/tests.yaml
@@ -0,0 +1,3 @@
+tests:
+ - dir: 'nominal'
+ - dir: 'off-nominal'
diff --git a/tests/channels/pjsip/secure_calling/tests.yaml b/tests/channels/pjsip/secure_calling/tests.yaml
new file mode 100644
index 0000000..5e3fe2f
--- /dev/null
+++ b/tests/channels/pjsip/secure_calling/tests.yaml
@@ -0,0 +1,6 @@
+# Enter tests here in the order they should be considered for execution:
+tests:
+ - dir: 'calls'
+ - dir: 'optimistic_srtp'
+ - test: 'srtp_negotiation'
+ - test: 'srtp_not_loaded'
diff --git a/tests/channels/pjsip/tests.yaml b/tests/channels/pjsip/tests.yaml
index ceadbde..435455e 100644
--- a/tests/channels/pjsip/tests.yaml
+++ b/tests/channels/pjsip/tests.yaml
@@ -11,7 +11,6 @@
- dir: 'message'
- dir: 'nat'
- dir: 'one_touch_recording'
- - dir: 'optimistic_srtp'
- dir: 'publish'
- dir: 'qualify'
- dir: 'refer_send_to_vm'
@@ -20,6 +19,7 @@
- dir: 'rtp'
- dir: 'rtcp'
- dir: 'sdp_offer_answer'
+ - dir: 'secure_calling'
- dir: 'statsd'
- dir: 'subscriptions'
- dir: 'transfers'
@@ -48,8 +48,6 @@
- test: 'reinvite_pending'
- test: 'rpid_immediate'
- test: 'set_var'
- - test: 'srtp_negotiation'
- - test: 'srtp_not_loaded'
- test: 'user_eq_phone'
- test: 'cseq_method'
- test: 'multipart_empty_part'
--
To view, visit https://gerrit.asterisk.org/7474
To unsubscribe, visit https://gerrit.asterisk.org/settings
Gerrit-Project: testsuite
Gerrit-Branch: master
Gerrit-MessageType: merged
Gerrit-Change-Id: Id25b4811ed075223ed77635a25e04e2d3abb4e55
Gerrit-Change-Number: 7474
Gerrit-PatchSet: 3
Gerrit-Owner: George Joseph <gjoseph at digium.com>
Gerrit-Reviewer: George Joseph <gjoseph at digium.com>
Gerrit-Reviewer: Jenkins2
Gerrit-Reviewer: Joshua Colp <jcolp at digium.com>
Gerrit-Reviewer: Kevin Harwell <kharwell at digium.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-code-review/attachments/20171214/2adf8651/attachment-0001.html>
More information about the asterisk-code-review
mailing list