ssl cert stuff for nono: nm and contributors

diff --git a/modules/roles/manifests/init.pp b/modules/roles/manifests/init.pp
index f287ec0c32c6c0fe059304199d9cd4649f8052f0..a15eecf1c08fbd8e0d736da54bdad590b24930b5 100644 (file)
--- a/modules/roles/manifests/init.pp
+++ b/modules/roles/manifests/init.pp
@@ -103,4 +103,13 @@ class roles {
                        notify => Service['apache2'],
                }
        }
+
+       if $::hostname in [nono] {
+               ssl::service { 'nm.debian.org':
+                       notify => Service['apache2'],
+               }
+               ssl::service { 'contributors.debian.org':
+                       notify => Service['apache2'],
+               }
+       }
 }

diff --git a/modules/ssl/files/chains/contributors.debian.org.crt b/modules/ssl/files/chains/contributors.debian.org.crt
new file mode 120000 (symlink)
index 0000000..394f127
--- /dev/null
+++ b/modules/ssl/files/chains/contributors.debian.org.crt
@@ -0,0 +1 @@
+DEBIAN-CA
\ No newline at end of file

diff --git a/modules/ssl/files/chains/nm.debian.org.crt b/modules/ssl/files/chains/nm.debian.org.crt
new file mode 100644 (file)
index 0000000..bcba145
--- /dev/null
+++ b/modules/ssl/files/chains/nm.debian.org.crt
@@ -0,0 +1,283 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 3 (0x3)
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: C=US, ST=Indiana, L=Indianapolis, O=Software in the Public Interest, OU=hostmaster, CN=Certificate Authority/emailAddress=hostmaster@spi-inc.org
+        Validity
+            Not Before: May 13 09:13:20 2008 GMT
+            Not After : May 10 09:13:20 2018 GMT
+        Subject: O=Debian, CN=ca.debian.org/emailAddress=debian-admin@debian.org
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (4096 bit)
+                Modulus (4096 bit):
+                    00:aa:3b:3e:a5:9f:47:1a:da:5f:b0:18:b0:11:62:
+                    3b:84:d6:01:22:8b:4d:31:fb:d7:5b:11:96:21:d5:
+                    d7:aa:11:88:a2:29:b6:d4:b0:ab:f1:8c:40:86:1a:
+                    82:d3:38:71:c6:32:25:8a:26:3d:24:92:db:fd:95:
+                    8d:92:1f:87:fc:00:87:14:52:4e:69:80:e5:e0:3c:
+                    90:86:fe:64:3d:35:dc:f8:e9:29:25:64:c4:08:50:
+                    3e:be:38:83:65:06:a4:e6:30:9c:06:a5:08:18:73:
+                    1c:1a:62:e3:c6:be:17:20:0b:eb:38:cf:04:53:95:
+                    25:35:44:9e:b2:f1:64:a6:a7:d1:93:6a:b1:c4:bd:
+                    f5:28:ac:93:e0:fc:71:2f:f5:b7:02:c1:ca:40:27:
+                    4c:da:3c:81:2c:23:8e:58:3c:15:dc:e5:9f:5e:13:
+                    82:04:cc:5c:19:53:25:4e:76:bc:74:9e:4a:5d:26:
+                    b7:85:e3:0c:4f:60:fa:11:b7:3b:1c:fd:a8:cb:a7:
+                    cf:dc:26:0d:7d:08:a1:ea:6c:74:db:8e:1b:10:ca:
+                    6a:89:98:22:db:a0:ba:80:01:ad:a6:95:c8:db:bb:
+                    ec:9e:01:cd:23:81:9a:d3:60:28:4d:cd:39:d8:04:
+                    b2:ca:89:70:87:e9:f0:01:8e:2d:c8:73:75:a5:5b:
+                    5b:5c:62:9d:9a:97:df:3a:07:a4:e7:20:b8:9c:ac:
+                    77:39:2b:0a:9b:f7:08:29:80:19:bf:c2:38:dd:67:
+                    c3:f8:90:31:68:76:f6:e1:7b:4b:3b:07:e1:dc:92:
+                    77:fe:07:fd:d0:cc:fb:4c:27:ea:ae:ef:53:c5:94:
+                    6a:aa:e6:50:0f:71:aa:ba:48:dc:83:92:c4:bc:b3:
+                    96:4b:0d:25:e4:9b:1e:c2:a2:e7:92:29:1a:51:95:
+                    60:e3:de:c2:03:01:2f:20:2c:5d:b5:de:1f:25:b8:
+                    e8:96:b6:10:24:96:f8:c3:84:53:79:62:de:05:6d:
+                    21:01:db:08:46:e4:f3:c7:c3:34:4c:2e:78:7f:be:
+                    1d:36:7c:b1:7d:8e:d2:b1:c9:6b:19:30:83:83:ff:
+                    fe:8d:02:29:35:a4:62:75:49:19:b5:36:ce:40:4f:
+                    13:86:21:f9:28:0f:21:3c:78:17:e3:af:10:0d:89:
+                    27:52:6d:ac:93:cb:5f:c3:ec:6d:7d:dd:d1:af:dd:
+                    4f:68:94:ca:82:2d:57:0e:76:54:ec:10:09:aa:98:
+                    f4:14:ad:12:2d:2d:f0:55:a7:70:13:95:87:fe:24:
+                    1c:1d:12:6f:74:c2:5b:61:de:00:15:99:05:03:c8:
+                    6e:66:aa:54:83:74:1b:49:fc:e6:56:15:7a:3a:ed:
+                    32:89:f1
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:TRUE
+            X509v3 Subject Key Identifier: 
+                A7:CF:4B:FA:5F:12:C6:23:74:2E:9E:A3:95:90:75:8C:CC:26:76:96
+            X509v3 Authority Key Identifier: 
+                keyid:34:71:D1:38:D7:15:36:83:47:6B:D7:37:64:42:3B:8E:8D:52:9D:AB
+                DirName:/C=US/ST=Indiana/L=Indianapolis/O=Software in the Public Interest/OU=hostmaster/CN=Certificate Authority/emailAddress=hostmaster@spi-inc.org
+                serial:E8:8E:B6:C9:F8:2A:14:28
+
+            Netscape CA Revocation Url: 
+                http://ca.debian.org/ca-crl.pem
+    Signature Algorithm: sha1WithRSAEncryption
+        2c:ac:39:e7:26:5f:c8:94:d9:42:35:6d:8d:7e:d6:a1:90:90:
+        eb:bf:fb:75:f2:21:56:90:00:35:f2:00:64:e8:1e:7f:32:55:
+        15:03:9a:3e:d1:a3:70:36:8a:76:bb:3c:f0:19:73:a1:84:ce:
+        e4:ac:15:d7:64:eb:eb:6d:83:3d:fa:3a:8f:e2:d7:3b:c2:ec:
+        03:70:0e:66:e0:27:df:88:12:7c:8e:8b:8d:9f:69:6c:fa:3c:
+        86:a8:85:24:ac:ae:5f:68:c6:84:7a:35:4c:67:85:8f:dd:b0:
+        02:73:4e:d6:a4:5c:b3:b2:cf:a1:e4:41:5d:74:03:b3:25:23:
+        b2:46:68:15:ae:ab:70:43:fb:66:08:e5:fd:86:4d:69:02:7d:
+        3a:a6:6e:e2:aa:9b:9d:27:ae:1b:d3:9f:01:c1:44:d5:0e:db:
+        fd:ef:20:01:88:51:06:89:00:c4:e1:16:5a:f2:c8:2d:4e:bb:
+        2d:a8:ff:85:25:4d:a4:bd:a7:47:bd:da:dc:d8:69:0f:d1:87:
+        cd:c7:0b:7a:e0:4b:48:57:8f:20:84:8b:c3:60:ee:c4:05:6f:
+        7b:34:e8:cb:11:4a:23:c6:ba:80:64:8b:49:01:25:f1:6a:04:
+        39:78:e5:bd:8e:7b:69:93:5b:91:02:07:bd:db:0e:8a:ec:22:
+        07:a2:1d:4b:a9:1d:fa:c3:16:fe:81:13:d4:b2:b5:2f:eb:3a:
+        68:d0:5a:02:e1:be:d6:e8:df:dd:3c:ac:e3:9a:f8:70:7f:8c:
+        e3:6d:61:d3:70:a0:a7:5b:e0:a3:f1:8d:cd:08:f9:a0:51:74:
+        81:9e:a7:ec:25:7b:18:2c:02:8c:65:53:fa:75:5f:dd:8d:58:
+        11:4e:ff:6b:08:cf:19:a5:eb:29:cd:39:ef:7a:6a:a2:c6:23:
+        eb:ac:71:d3:c8:ed:f2:b6:a5:de:0e:14:90:fa:74:e1:ec:e6:
+        0d:70:bc:86:11:80:ca:bf:c3:67:2f:c9:9d:38:3c:d0:4c:24:
+        49:51:a5:49:8e:1d:85:38:c2:f6:ca:0f:b9:f7:15:f8:04:bb:
+        90:11:e9:f0:ff:37:bb:0b:0f:b9:e6:f6:a6:31:6e:ed:c2:f1:
+        2c:bb:2b:1e:e6:cb:4a:31:5d:96:cb:4c:b2:d7:d4:0b:2d:be:
+        b2:3d:9f:86:85:4e:58:dd:c9:b4:ab:cc:f5:54:c2:02:38:01:
+        cf:74:a9:71:3f:93:e8:ca:c4:77:d0:6c:e2:18:65:2c:b8:60:
+        ec:a8:6b:e8:8a:e8:2b:6d:40:1e:cd:9f:f4:8a:ad:28:83:d1:
+        35:62:05:39:01:db:ec:90:b0:db:fd:bc:72:c1:a6:11:c3:b0:
+        e2:0d:0e:3f:ca:73:04:42
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number:
+            e8:8e:b6:c9:f8:2a:14:28
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: C=US, ST=Indiana, L=Indianapolis, O=Software in the Public Interest, OU=hostmaster, CN=Certificate Authority/emailAddress=hostmaster@spi-inc.org
+        Validity
+            Not Before: May 13 08:07:56 2008 GMT
+            Not After : May 11 08:07:56 2018 GMT
+        Subject: C=US, ST=Indiana, L=Indianapolis, O=Software in the Public Interest, OU=hostmaster, CN=Certificate Authority/emailAddress=hostmaster@spi-inc.org
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (4096 bit)
+                Modulus (4096 bit):
+                    00:dc:36:e6:47:42:c2:c4:51:75:29:87:40:c3:d8:
+                    8e:21:06:d2:18:4e:eb:ef:20:bd:90:3c:85:10:13:
+                    8c:29:5b:94:63:f6:f4:2d:f1:06:42:91:b9:19:c4:
+                    42:69:08:bf:8b:36:45:ea:28:05:33:49:48:a0:27:
+                    43:93:35:8a:41:d8:78:b3:f0:ef:b3:6e:2d:dd:d1:
+                    cb:7d:ea:f4:75:26:d3:3e:90:3a:ee:d7:e7:2c:04:
+                    b5:7c:e1:f5:7c:c5:4e:ef:77:bd:5c:a2:93:33:92:
+                    ce:7d:81:48:cf:6b:b5:22:2c:08:83:fd:d3:d5:cf:
+                    3b:2d:fd:b5:49:90:5b:f6:ad:4d:13:ca:de:d3:a6:
+                    9d:53:51:71:63:46:f8:4a:16:5c:98:ee:2d:6d:9a:
+                    16:a1:76:90:e2:60:43:99:d6:89:d6:6c:2e:7a:98:
+                    b2:0b:03:2c:e3:7a:4f:c7:dd:e3:cc:e3:4a:6a:8d:
+                    79:52:fa:f4:c1:af:2e:8f:2a:08:cb:1b:29:82:92:
+                    72:43:bc:ce:88:a9:aa:a7:8a:51:43:55:85:9a:37:
+                    03:78:93:c8:f0:bd:b4:41:c8:07:42:9a:cb:35:97:
+                    7a:8a:81:65:de:1d:54:08:01:f1:64:5c:b7:17:1a:
+                    51:bc:1e:c3:59:87:76:18:16:98:ee:bf:f6:67:81:
+                    8b:06:35:c5:4b:6d:59:19:c7:d2:c6:48:be:6e:14:
+                    28:83:4a:10:9c:1b:f5:6f:bc:a9:8e:f5:69:fe:b2:
+                    c1:55:cc:e7:14:c9:f9:5b:14:53:51:07:ea:ce:3d:
+                    e4:4f:28:1f:3c:61:09:d7:33:d2:6e:a7:6e:d4:c7:
+                    13:09:6f:6b:5d:14:ee:9d:89:1b:a5:6a:f2:f6:f8:
+                    d0:72:8e:ea:72:1f:2f:34:6a:29:0a:c5:0a:ec:1c:
+                    40:85:12:f7:a6:a5:d3:4f:ad:c0:85:8c:4c:7c:73:
+                    20:cc:53:18:f1:b2:58:4c:01:f5:bf:ea:64:d5:5c:
+                    39:c5:ce:6c:cc:53:5a:56:ba:41:0f:25:df:6b:50:
+                    b6:c7:8a:a0:bd:02:c2:c5:3b:55:a5:b2:64:22:84:
+                    51:28:56:ae:31:ee:5e:fb:0b:16:4d:46:05:91:80:
+                    44:ed:ac:6d:f0:57:a8:fa:eb:61:48:a0:cb:1b:b3:
+                    1f:8e:cd:c5:21:77:03:84:1e:fc:ac:a3:43:08:63:
+                    8c:ed:f9:27:ef:b4:b0:5d:67:d6:4f:ed:d0:8b:3e:
+                    5d:5b:c9:91:bd:96:02:84:3d:c5:4d:bc:42:3f:74:
+                    fd:3c:5d:ac:5c:48:36:5e:87:31:2f:18:6c:c4:68:
+                    ee:a1:8b:c9:59:d0:18:e3:00:80:b3:54:27:2e:99:
+                    f0:15:53
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Key Identifier: 
+                34:71:D1:38:D7:15:36:83:47:6B:D7:37:64:42:3B:8E:8D:52:9D:AB
+            X509v3 Authority Key Identifier: 
+                keyid:34:71:D1:38:D7:15:36:83:47:6B:D7:37:64:42:3B:8E:8D:52:9D:AB
+                DirName:/C=US/ST=Indiana/L=Indianapolis/O=Software in the Public Interest/OU=hostmaster/CN=Certificate Authority/emailAddress=hostmaster@spi-inc.org
+                serial:E8:8E:B6:C9:F8:2A:14:28
+
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            Netscape Cert Type: 
+                SSL CA, S/MIME CA, Object Signing CA
+            X509v3 Issuer Alternative Name: 
+                <EMPTY>
+
+            Netscape Comment: 
+                Software in the Public Interest
+            Netscape CA Revocation Url: 
+                https://ca.spi-inc.org/ca-crl.pem
+            Netscape Revocation Url: 
+                https://ca.spi-inc.org/cert-crl.pem
+            X509v3 Subject Alternative Name: 
+                email:hostmaster@spi-inc.org
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+    Signature Algorithm: sha1WithRSAEncryption
+        b4:cd:bd:e0:b9:ea:b2:03:2b:7e:32:e9:de:72:3f:c9:4b:82:
+        5e:9d:e2:af:55:09:a2:0c:54:e8:cf:18:3c:28:20:1d:a9:bb:
+        03:02:2f:52:39:22:f9:17:cf:ad:67:90:b3:03:7f:d8:15:e3:
+        6b:7e:bb:9b:56:01:af:35:d4:da:b9:c7:67:17:9b:d4:d5:0e:
+        37:b3:20:41:2e:0c:01:c4:5b:f9:65:3e:c2:61:e8:d2:f0:6a:
+        95:70:c3:c6:6f:d5:35:a4:ac:59:72:e1:89:df:a1:a0:9d:24:
+        bd:29:79:e9:61:2a:d9:d3:1e:c9:46:a4:08:78:41:92:72:0f:
+        ab:14:75:ed:09:f0:a2:f0:5c:ef:c3:0a:62:20:b7:c2:28:66:
+        ae:4c:2f:2e:8f:45:63:26:96:f0:ee:31:e6:8b:55:9b:aa:3a:
+        f9:82:39:1d:88:3c:e2:07:75:1a:e1:0f:b1:30:bc:71:32:d2:
+        3a:fe:fa:a1:89:f3:43:2c:d6:72:c4:79:a7:15:48:05:c0:d8:
+        2d:72:02:e3:cb:3d:16:6a:ba:c9:b8:11:10:e2:49:85:cc:96:
+        47:60:05:25:2e:ef:75:59:33:f5:47:19:16:ef:da:6c:5f:07:
+        c8:a6:50:b6:1d:cb:66:34:25:fc:66:83:eb:c5:b6:30:41:f8:
+        46:44:62:a8:c1:0c:54:e6:ea:4c:5a:28:e6:ae:c6:b7:fe:7f:
+        3b:96:a8:2e:ee:c7:68:3e:dd:00:3d:29:af:2a:63:ab:5f:ee:
+        49:2a:2d:c5:dc:fb:d1:c6:d3:d1:97:56:52:86:b6:94:eb:d4:
+        60:51:b7:fc:1e:9b:cc:02:9b:d4:1f:8f:f9:4a:8f:b6:2e:28:
+        3b:17:cc:c5:a6:05:e3:d2:d3:b5:c6:03:c9:e1:48:42:9b:cb:
+        3f:e4:17:e0:fe:0d:01:95:09:ba:b8:0d:71:e4:09:70:77:42:
+        d8:4d:e1:42:a9:60:83:d7:17:89:43:d2:d4:dd:a7:18:b6:ab:
+        d4:24:25:87:b5:d4:e2:fc:2e:22:69:bd:ad:68:2c:ff:72:b5:
+        98:aa:06:9c:e7:2a:6a:b8:a1:93:76:ce:b0:f3:7f:9c:e1:e0:
+        4f:b8:d8:86:46:a5:33:02:2c:25:61:37:2a:92:c8:ac:81:74:
+        68:63:87:33:76:bd:05:7f:5e:d5:d5:02:6d:bd:af:ff:2a:5a:
+        aa:49:ec:98:79:47:53:91:f6:0e:34:5a:c9:a5:c6:eb:b2:e3:
+        c5:ac:b6:a0:70:35:bb:c8:51:69:d0:f2:b5:a2:32:6e:bc:3f:
+        a0:37:39:7c:71:36:a6:05:df:0c:12:e4:16:a7:c5:d6:cb:63:
+        a3:95:70:3f:e6:04:a3:60
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

diff --git a/modules/ssl/files/servicecerts/contributors.debian.org.crt b/modules/ssl/files/servicecerts/contributors.debian.org.crt
new file mode 100644 (file)
index 0000000..1963fd5
--- /dev/null
+++ b/modules/ssl/files/servicecerts/contributors.debian.org.crt
@@ -0,0 +1,104 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 109 (0x6d)
+    Signature Algorithm: sha1WithRSAEncryption
+        Issuer: O=Debian, CN=ca.debian.org/emailAddress=debian-admin@debian.org
+        Validity
+            Not Before: Sep  3 20:26:49 2013 GMT
+            Not After : Sep  3 20:26:49 2014 GMT
+        Subject: O=Debian, CN=contributors.debian.org/emailAddress=debian-admin@debian.org
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+                Public-Key: (2048 bit)
+                Modulus:
+                    00:bf:ea:58:30:2f:27:69:27:93:b6:8a:59:f2:0e:
+                    e1:57:d6:54:ea:fa:d9:4b:c8:2f:1d:7a:9f:d2:57:
+                    f7:36:29:ae:df:c3:68:eb:b8:52:b5:57:ef:ec:e4:
+                    e9:40:04:8f:be:98:e3:52:d0:69:09:30:b5:54:90:
+                    45:13:c6:22:b3:18:94:53:38:f3:97:be:31:f1:07:
+                    c6:96:11:bd:01:19:f9:44:38:79:dd:bf:ed:aa:f0:
+                    22:89:9e:1f:24:0b:49:52:1a:a4:b6:6d:c8:d1:86:
+                    a4:e3:6c:7b:62:8d:ee:83:bf:01:fb:b9:f2:dd:9d:
+                    0d:15:49:86:8f:cc:84:00:3b:b3:6c:6e:bf:67:79:
+                    dd:df:13:fb:26:c9:54:9f:c7:96:e3:18:85:6b:29:
+                    53:e5:ac:a5:dc:55:4e:b4:a3:a2:51:2d:49:20:95:
+                    1d:52:76:7d:4e:69:fc:78:c7:9e:b0:36:39:fd:6c:
+                    66:24:1f:2d:ab:25:4f:60:84:a4:5d:f5:12:7d:b4:
+                    08:02:cc:d0:9c:a8:c3:23:32:15:63:c9:50:17:d7:
+                    33:84:b4:1a:15:a6:b1:94:19:8d:f1:6c:f3:b1:85:
+                    fa:f6:5d:2e:85:25:93:6c:9f:d5:ae:5b:c8:9c:8a:
+                    6f:a8:3e:aa:8e:0f:98:11:70:80:e9:6c:62:65:df:
+                    ee:a7
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            X509v3 Subject Key Identifier: 
+                98:85:67:58:E0:72:92:74:A0:BD:AB:92:FF:AB:DE:A5:62:01:E6:A7
+            X509v3 Authority Key Identifier: 
+                keyid:A7:CF:4B:FA:5F:12:C6:23:74:2E:9E:A3:95:90:75:8C:CC:26:76:96
+                DirName:/C=US/ST=Indiana/L=Indianapolis/O=Software in the Public Interest/OU=hostmaster/CN=Certificate Authority/emailAddress=hostmaster@spi-inc.org
+                serial:03
+
+    Signature Algorithm: sha1WithRSAEncryption
+         1f:d5:da:0a:a3:4c:16:08:6f:ee:c9:3c:a9:54:cf:0d:71:70:
+         23:8a:3d:dd:8d:82:fb:ba:82:4d:c0:eb:64:e3:f2:54:e3:d6:
+         0a:1f:8c:e1:33:c6:e9:2a:e1:5c:a4:24:d8:b4:76:56:ad:75:
+         2e:1d:75:4b:0d:69:0e:3b:1c:49:31:9a:96:e8:db:cf:88:85:
+         90:05:92:79:ed:13:89:47:86:0d:aa:f4:7d:10:a8:4c:f9:6c:
+         e9:c3:42:7f:9d:4a:f5:54:46:92:f5:f1:c4:e6:ba:ca:16:1c:
+         f6:36:3f:38:a3:04:60:94:d9:c0:af:4d:b5:83:f4:20:f3:56:
+         ed:6a:09:ca:1a:7b:d7:be:c8:8e:73:c8:16:3b:89:34:cf:2f:
+         48:a2:12:71:f7:29:75:55:8d:45:0a:ca:d8:8c:8e:b7:84:01:
+         08:69:f0:aa:f6:cd:a2:d6:9e:26:07:f2:cb:7c:9a:10:e8:97:
+         0d:1f:e3:29:f0:e1:36:8b:62:c8:f5:99:8e:8c:48:08:4a:ff:
+         0e:c0:6c:99:2b:c0:21:8a:69:d1:98:ea:95:6c:ea:fa:b7:9a:
+         5f:35:04:60:f5:94:08:ea:16:70:1e:44:d2:de:ce:dd:7f:3b:
+         31:bd:d8:47:97:ae:ab:cb:f7:cb:a9:82:e7:ca:ce:a4:23:13:
+         d7:88:a7:f3:a8:3b:64:29:1c:8a:b1:7a:45:d6:42:c1:05:10:
+         80:ad:c4:3f:85:37:63:d7:c3:77:97:e5:c9:48:45:5e:04:45:
+         1d:1d:3d:7b:9e:fa:b8:43:51:49:5f:1e:35:90:39:c2:79:47:
+         0c:39:7f:20:c0:07:2b:7d:d5:64:30:52:a7:b3:21:66:fa:b8:
+         af:5d:37:e1:ac:73:91:67:ba:2a:8a:fc:20:00:b0:61:c0:9e:
+         81:4b:b9:ea:f3:f7:88:c5:24:1e:07:15:f1:93:ef:8d:b9:d3:
+         d8:2f:ba:94:ec:5f:1f:33:68:13:71:56:6e:4b:4f:08:f6:fb:
+         2f:95:8d:c1:73:ca:5b:b3:12:a9:25:dc:63:ee:c8:c1:5d:a3:
+         64:0e:56:ee:ab:6b:1e:71:31:1c:81:94:68:03:11:c2:54:d9:
+         b0:57:80:18:8a:23:d4:6e:17:4f:4d:8f:13:d1:84:a4:c2:97:
+         a0:e4:bf:28:92:de:93:d6:f8:f5:df:59:3d:37:c0:b5:a1:c4:
+         0c:23:ef:5f:81:29:80:dd:7e:0c:16:2a:7a:7f:e2:81:06:37:
+         80:77:5f:88:39:ba:63:79:1c:fe:ce:ae:59:66:1e:75:a5:e4:
+         3c:09:96:c6:06:63:55:77:cf:96:8f:17:7e:54:9d:04:6f:b0:
+         f1:45:a7:2b:bb:38:0a:75
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

diff --git a/modules/ssl/files/servicecerts/nm.debian.org.crt b/modules/ssl/files/servicecerts/nm.debian.org.crt
new file mode 100644 (file)
index 0000000..74e9c97
--- /dev/null
+++ b/modules/ssl/files/servicecerts/nm.debian.org.crt
@@ -0,0 +1,103 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 100 (0x64)
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: O=Debian, CN=ca.debian.org/emailAddress=debian-admin@debian.org
+        Validity
+            Not Before: Mar 20 18:56:55 2013 GMT
+            Not After : Mar 20 18:56:55 2014 GMT
+        Subject: O=Debian, CN=nm.debian.org/emailAddress=debian-admin@debian.org
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (2048 bit)
+                Modulus (2048 bit):
+                    00:f2:3d:69:93:be:91:6b:60:1d:d4:96:73:f0:0f:
+                    7a:13:c6:94:25:9d:4c:ac:68:5f:ea:2a:22:24:90:
+                    84:c4:78:9b:5e:7c:4f:c9:20:84:48:80:dc:7f:ba:
+                    9e:9e:b5:38:17:89:2b:53:d2:b4:9d:05:2a:fc:47:
+                    18:62:7b:83:00:e5:57:fe:13:f4:8a:38:a6:07:c7:
+                    4e:5c:e0:76:7d:a3:45:a8:e3:ee:57:9b:52:6b:7f:
+                    80:02:f3:2f:4f:65:96:d4:89:be:5f:4b:0d:4c:8a:
+                    81:dc:33:85:8a:72:39:87:9a:5d:24:c6:cd:61:bf:
+                    95:ab:fd:32:ed:e2:4e:f8:79:88:db:cc:df:8a:5b:
+                    44:28:9d:94:57:f6:a1:45:f1:a8:ee:80:9a:e1:99:
+                    1d:28:45:95:61:69:9f:5f:ac:8d:87:a0:20:9b:5a:
+                    c5:1e:dc:79:17:71:52:eb:24:4c:ac:49:6f:e8:0c:
+                    20:96:1e:3f:a7:46:fe:d0:84:e9:1f:fb:b5:63:cf:
+                    5e:be:4f:08:74:bb:33:f8:6a:d2:1e:af:ad:f2:e2:
+                    46:71:69:34:2a:db:04:f9:c8:53:67:09:16:18:a5:
+                    b1:90:5f:a2:69:0d:fb:83:ee:4f:0a:81:f6:fe:73:
+                    38:e6:da:27:86:92:d3:1c:e0:05:98:31:93:56:39:
+                    cc:61
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: 
+                CA:FALSE
+            X509v3 Subject Key Identifier: 
+                60:17:AC:0E:7A:FC:4A:92:0A:B8:C9:AA:C0:94:DD:6A:2B:40:F8:5B
+            X509v3 Authority Key Identifier: 
+                keyid:A7:CF:4B:FA:5F:12:C6:23:74:2E:9E:A3:95:90:75:8C:CC:26:76:96
+                DirName:/C=US/ST=Indiana/L=Indianapolis/O=Software in the Public Interest/OU=hostmaster/CN=Certificate Authority/emailAddress=hostmaster@spi-inc.org
+                serial:03
+
+    Signature Algorithm: sha1WithRSAEncryption
+        73:0c:2a:a9:75:b9:19:40:f9:07:dc:99:c4:aa:ec:04:0d:a5:
+        bf:23:08:db:1a:82:72:e0:af:fe:15:9c:88:d9:78:56:a8:3d:
+        a5:5a:ce:ff:48:60:d1:0b:78:bc:9a:cf:0c:90:75:4a:d0:e9:
+        5c:1e:6d:f3:6f:45:2b:bd:d3:7c:a9:e3:2c:24:e9:4b:ab:d0:
+        7c:f9:c0:9d:46:71:8f:a7:8b:84:d9:94:25:d1:dd:e4:ee:0a:
+        a3:f0:70:67:c8:32:a1:c9:90:b0:07:0b:e1:95:44:f9:a7:34:
+        bf:cf:e6:10:16:2e:19:de:d3:84:18:70:fb:77:b1:de:b2:b3:
+        e7:50:03:80:54:88:63:42:7d:97:a0:3b:3f:80:c2:92:b7:65:
+        39:7c:82:55:b4:c9:a7:27:0a:46:ac:33:b6:d7:d2:ea:c3:f2:
+        00:a2:cc:39:18:cc:5b:b7:d2:32:82:ea:2f:85:95:42:61:37:
+        b9:84:f0:15:1a:c0:a1:55:46:52:5d:74:3f:82:53:cc:49:fd:
+        f8:50:1b:49:c7:2f:4f:29:a7:db:7a:f6:3e:cd:27:38:58:47:
+        67:93:07:b5:30:b9:18:00:84:99:d6:05:1f:25:e7:d7:a7:84:
+        fc:c6:02:25:03:36:f4:11:af:39:c8:82:9a:a5:a3:85:a1:4a:
+        2c:74:4a:25:e7:e1:98:6a:39:9e:f7:36:5f:f8:c4:71:d2:d2:
+        2b:2a:58:0b:b6:50:6f:1f:aa:ae:33:d1:d2:68:96:f9:8e:d9:
+        7c:47:0e:ba:44:36:13:c7:ec:9f:8b:1b:d7:9d:33:38:7d:f1:
+        be:94:cf:d9:8d:e0:59:ba:7b:30:9a:6b:7b:54:88:6f:27:92:
+        af:67:eb:22:ee:90:fa:84:d3:7e:bc:69:51:b0:15:6f:e9:7b:
+        e2:65:89:16:1d:56:02:f7:9f:4d:e3:2f:79:d6:7d:07:73:2b:
+        ec:4a:39:7c:10:96:74:20:70:3c:b3:f8:aa:41:c7:ea:86:a7:
+        1d:fa:5b:2b:a2:f2:52:a4:e6:b5:a1:8e:08:54:45:5c:73:02:
+        31:f6:1a:cf:a0:b9:21:97:83:0c:ab:4a:8f:46:65:61:cc:53:
+        b9:c6:a7:c7:80:10:59:87:34:2a:55:ed:00:80:e7:2a:f4:2b:
+        78:65:a0:37:aa:95:80:d1:c0:d9:85:8e:c9:0f:02:99:f0:52:
+        8c:91:af:ad:00:c3:77:f6:e0:ea:ee:47:54:bd:2c:40:70:99:
+        67:79:9e:72:5e:c1:91:90:99:52:9b:27:9b:77:43:d6:84:25:
+        09:1a:a8:51:1a:cb:9b:1b:65:1d:c2:40:d4:f6:e2:68:45:e6:
+        5b:1c:17:c1:95:cb:19:b0
+-----BEGIN CERTIFICATE-----
+MIIFOTCCAyGgAwIBAgIBZDANBgkqhkiG9w0BAQUFADBRMQ8wDQYDVQQKEwZEZWJp
+YW4xFjAUBgNVBAMTDWNhLmRlYmlhbi5vcmcxJjAkBgkqhkiG9w0BCQEWF2RlYmlh
+bi1hZG1pbkBkZWJpYW4ub3JnMB4XDTEzMDMyMDE4NTY1NVoXDTE0MDMyMDE4NTY1
+NVowUTEPMA0GA1UEChMGRGViaWFuMRYwFAYDVQQDEw1ubS5kZWJpYW4ub3JnMSYw
+JAYJKoZIhvcNAQkBFhdkZWJpYW4tYWRtaW5AZGViaWFuLm9yZzCCASIwDQYJKoZI
+hvcNAQEBBQADggEPADCCAQoCggEBAPI9aZO+kWtgHdSWc/APehPGlCWdTKxoX+oq
+IiSQhMR4m158T8kghEiA3H+6np61OBeJK1PStJ0FKvxHGGJ7gwDlV/4T9Io4pgfH
+Tlzgdn2jRajj7lebUmt/gALzL09lltSJvl9LDUyKgdwzhYpyOYeaXSTGzWG/lav9
+Mu3iTvh5iNvM34pbRCidlFf2oUXxqO6AmuGZHShFlWFpn1+sjYegIJtaxR7ceRdx
+UuskTKxJb+gMIJYeP6dG/tCE6R/7tWPPXr5PCHS7M/hq0h6vrfLiRnFpNCrbBPnI
+U2cJFhilsZBfomkN+4PuTwqB9v5zOObaJ4aS0xzgBZgxk1Y5zGECAwEAAaOCARow
+ggEWMAkGA1UdEwQCMAAwHQYDVR0OBBYEFGAXrA56/EqSCrjJqsCU3WorQPhbMIHp
+BgNVHSMEgeEwgd6AFKfPS/pfEsYjdC6eo5WQdYzMJnaWoYHCpIG/MIG8MQswCQYD
+VQQGEwJVUzEQMA4GA1UECBMHSW5kaWFuYTEVMBMGA1UEBxMMSW5kaWFuYXBvbGlz
+MSgwJgYDVQQKEx9Tb2Z0d2FyZSBpbiB0aGUgUHVibGljIEludGVyZXN0MRMwEQYD
+VQQLEwpob3N0bWFzdGVyMR4wHAYDVQQDExVDZXJ0aWZpY2F0ZSBBdXRob3JpdHkx
+JTAjBgkqhkiG9w0BCQEWFmhvc3RtYXN0ZXJAc3BpLWluYy5vcmeCAQMwDQYJKoZI
+hvcNAQEFBQADggIBAHMMKql1uRlA+QfcmcSq7AQNpb8jCNsagnLgr/4VnIjZeFao
+PaVazv9IYNELeLyazwyQdUrQ6VwebfNvRSu903yp4ywk6Uur0Hz5wJ1GcY+ni4TZ
+lCXR3eTuCqPwcGfIMqHJkLAHC+GVRPmnNL/P5hAWLhne04QYcPt3sd6ys+dQA4BU
+iGNCfZegOz+AwpK3ZTl8glW0yacnCkasM7bX0urD8gCizDkYzFu30jKC6i+FlUJh
+N7mE8BUawKFVRlJddD+CU8xJ/fhQG0nHL08pp9t69j7NJzhYR2eTB7UwuRgAhJnW
+BR8l59enhPzGAiUDNvQRrznIgpqlo4WhSix0SiXn4ZhqOZ73Nl/4xHHS0isqWAu2
+UG8fqq4z0dJolvmO2XxHDrpENhPH7J+LG9edMzh98b6Uz9mN4Fm6ezCaa3tUiG8n
+kq9n6yLukPqE0368aVGwFW/pe+JliRYdVgL3n03jL3nWfQdzK+xKOXwQlnQgcDyz
++KpBx+qGpx36Wyui8lKk5rWhjghURVxzAjH2Gs+guSGXgwyrSo9GZWHMU7nGp8eA
+EFmHNCpV7QCA5yr0K3hloDeqlYDRwNmFjskPApnwUoyRr60Aw3f24OruR1S9LEBw
+mWd5nnJewZGQmVKbJ5t3Q9aEJQkaqFEay5sbZR3CQNT24mhF5lscF8GVyxmw
+-----END CERTIFICATE-----