From cd7ab0f177c1e6020ee7b6ee0f0cf6a628d7b94a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert-Andr=C3=A9=20Mauchin?= <zebob.m@gmail.com>
Date: Tue, 30 Jul 2019 04:06:00 +0200
Subject: [PATCH] Use bigger keys for RSA-PSS, default for TLS 1.3
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Robert-André Mauchin <zebob.m@gmail.com>
---
 collector_test.go | 42 ++++++++++++++++++++++++++----------------
 1 file changed, 26 insertions(+), 16 deletions(-)

diff --git a/collector_test.go b/collector_test.go
index fe5149b..6a94735 100644
--- a/collector_test.go
+++ b/collector_test.go
@@ -321,28 +321,38 @@ func init() {
 // "127.0.0.1" and "[::1]", expiring at the last second of 2049 (the end
 // of ASN.1 time).
 // generated from src/crypto/tls:
-// go run generate_cert.go  --rsa-bits 512 --host 127.0.0.1,::1,example.com --ca --start-date "Jan 1 00:00:00 1970" --duration=1000000h
+// go run generate_cert.go  --rsa-bits 1024 --host 127.0.0.1,::1,example.com --ca --start-date "Jan 1 00:00:00 1970" --duration=1000000h
 var localhostCert = []byte(`-----BEGIN CERTIFICATE-----
-MIIBjzCCATmgAwIBAgIRAKOMbj1tSId/UIw8iy+WOsYwDQYJKoZIhvcNAQELBQAw
+MIICFDCCAX2gAwIBAgIRAM1e/rerac2oQxwFRBs6xqUwDQYJKoZIhvcNAQELBQAw
 EjEQMA4GA1UEChMHQWNtZSBDbzAgFw03MDAxMDEwMDAwMDBaGA8yMDg0MDEyOTE2
-MDAwMFowEjEQMA4GA1UEChMHQWNtZSBDbzBcMA0GCSqGSIb3DQEBAQUAA0sAMEgC
-QQDSCuKkkCiQucKc3JxehtEJ2R2kf2HyN0Nv+WM9b3V/k+XP0bM8YdH5mCL3tv+D
-dRhDZweBGjaCfjftrkSRchpjAgMBAAGjaDBmMA4GA1UdDwEB/wQEAwICpDATBgNV
-HSUEDDAKBggrBgEFBQcDATAPBgNVHRMBAf8EBTADAQH/MC4GA1UdEQQnMCWCC2V4
-YW1wbGUuY29thwR/AAABhxAAAAAAAAAAAAAAAAAAAAABMA0GCSqGSIb3DQEBCwUA
-A0EAdBLKWCH2P8vLBeOMRN49+YdkFZbpuMZ/VeRqba6WSjOhRrMAZMKbhjuJLRi4
-1jP+GHPZBroLQXlPtAsroVE1fg==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 -----END CERTIFICATE-----`)
 
 // localhostKey is the private key for localhostCert.
 var localhostKey = []byte(`-----BEGIN RSA PRIVATE KEY-----
-MIIBOgIBAAJBANIK4qSQKJC5wpzcnF6G0QnZHaR/YfI3Q2/5Yz1vdX+T5c/Rszxh
-0fmYIve2/4N1GENnB4EaNoJ+N+2uRJFyGmMCAwEAAQJALMKhFcyauGy9qkvhDsvQ
-FDcud/WlW8anGl+c5GSyN2NcL1omkOQHmkVqAx1xLbId+1KzH8YOR7TyDDy2DFzW
-0QIhAPL/GA2qbLovJLstNm0cJiEt+q4YwmTB6tQz2hYGXMZnAiEA3UhXlN7cMQH5
-BxIu9deviOSBdR09pI3jdeNHJM7/tqUCIFKhqH5NK/gMPANilpV38wdpaUt2o/Q7
-dS2ADHNc6oOVAiEAuX7dPESd3M9EjHLnvtpxoZW8GArNE9aFqNs/VlHX9qkCIFI8
-nwoPqw0BHjIJFwQDxA7UZAx75riOvYxv1jvgc3XR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 -----END RSA PRIVATE KEY-----`)
 
 func BenchmarkChunkedCollector500(b *testing.B) {
-- 
2.21.0