From a38c9e1ee05603653f6198618e4cd6fa1d3c39ae Mon Sep 17 00:00:00 2001
From: "harshal.patil" <harshal.patil@espressif.com>
Date: Wed, 2 Apr 2025 13:07:02 +0530
Subject: [PATCH] fix(examples): Example CA certs must contain the Key Usage
 parameter

- Example CA certificates that are used for self-signed client certificates
need to include the Key Usage parameter.
- Python3.13 changed the default context of the SSL context that is
generated using ssl.create_default_context() by enabling the VERIFY_X509_STRICT
flag by default
---
 .../mqtt/publish_connect_test/ca.crt          |  34 +++++++++---------
 .../mqtt/publish_connect_test/ca.der          | Bin 783 -> 797 bytes
 2 files changed, 17 insertions(+), 17 deletions(-)

diff --git a/tools/test_apps/protocols/mqtt/publish_connect_test/ca.crt b/tools/test_apps/protocols/mqtt/publish_connect_test/ca.crt
index f53f647..e371e07 100644
--- a/tools/test_apps/protocols/mqtt/publish_connect_test/ca.crt
+++ b/tools/test_apps/protocols/mqtt/publish_connect_test/ca.crt
@@ -1,19 +1,19 @@
 -----BEGIN CERTIFICATE-----
-MIIDCzCCAfOgAwIBAgIUN9fSo2J8makY6P64QfrO+EcLLm0wDQYJKoZIhvcNAQEL
-BQAwFDESMBAGA1UEAwwJRXNwcmVzc2lmMCAXDTI1MDEyODEzMjkxMVoYDzIyOTgx
-MTEyMTMyOTExWjAUMRIwEAYDVQQDDAlFc3ByZXNzaWYwggEiMA0GCSqGSIb3DQEB
-AQUAA4IBDwAwggEKAoIBAQDBJj+nzMM/xbd/fvF8vWPL9ZxZU45LaaxZHLGOldAz
-Z77roxxKSfyZUpNbn9pn3qwVBuYEG6GnfKmikf6QFAfEriSVrqugRw383H3CkLxf
-riVT0So+Y69wgbwcSURjTkvNn1HNzgsgFESr+wzwUTn5gc7bNrys3ZchoyKLSabZ
-qV+jUwUSrWeQcF4kqVeSTp5kPBxD2SotYHP1hBbKATamYMKN0Khj3v91mmACO+Ss
-AY31Riej1mY05h58vU/VmZW10FFb/EMZMNJkIkZgc6u298PxVLpyC446X6uzLehs
-V2EDgCAYUQW191j/7Z8kcWSfo96nqP7uHx/2fz2qlLCzAgMBAAGjUzBRMB0GA1Ud
-DgQWBBQn5CyOO5LXQ60QRxTRaHZeFdNrVjAfBgNVHSMEGDAWgBQn5CyOO5LXQ60Q
-RxTRaHZeFdNrVjAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQAq
-hKN1jrogQLY7AtnUaXb7eKFwI7k9NR6BZeXmE+xGCz02sUHNpzjuwo2oRacDZHZY
-oEuwEM+zzWGV4x6cKriNUJ0G9uJwfFkCBZfWaNhyZ+r+3DqL4pH5kCcbQ3ZM+Mfk
-dBOr9BUs7q4yZHRngmsi5lff0K6GC/uKC8bd9AKNs9I11g7CnJL2arf/GlZJrvTg
-Lk7H7MT65SsAeX2MhifWl0urb20PNjDooQaki3qtApCgrUaIAtTUAP9p3jf8H0RT
-rkfoVBxQtTDZltA+xelilUHcmj7pM9105/U6n0hD4yRQgemqaeSCbEo4ST2zm0pE
-B4mjbFam7oBWdXdEDF1p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 -----END CERTIFICATE-----
diff --git a/tools/test_apps/protocols/mqtt/publish_connect_test/ca.der b/tools/test_apps/protocols/mqtt/publish_connect_test/ca.der
index 309539220877cfc621e7497288868677881ea46b..8f0d12006aceaf0753b903aba07c6822dfbb2fe2 100644
GIT binary patch
delta 380
zcmeBYo6Dwb(8Mfh(8R>JfSHMriAf}RB?I$QyOd9y3GMek-i+>E>~v=JL}fKOIdNVi
zQv(wNBLh<-a|5F&ab9Cn17l-D2zO(q9V2tHLE_|9j6wB$Y|Npu{EUqMSy-5vm|6^Y
z**LY@JlekVGBR?rGB7tWGBOBFThc$F<d_CO&zcQw_YX~br7rf<IL6#&=a~(E9$dW_
zCA8?_dFEQ7LV>3?@fCWfkKX>?vXE_?`v1%r$F_4e2fl3N-<Wqe?n(UOAJZ?a`zmGj
zJ9yKjP(wMrtw(F(>))HElzcH!*?QOGsJ^FnSKWtP86B3|3;U)WTXv-38ONM8uWvH9
z9q0*}bK_&r4+H)%%ifze+j!jOtv(SD`PD-x!1L%)<&{l5%O)PSoN*_kJmO8;m(Du@
z$I7zr=Ou0VdAWRz#)<_`aui#m7fp~jwry$F2V2G79g9@Cg&%GTyO(LIs@ywcepT|u
ku9AJ<*pC#(zqsOUq4($R;VU-MHpTysN_4#Onw9he0B_r-hX4Qo

delta 366
zcmbQs*3YJF(8SDb(8Tz80W%XL6O)Mf^-GJBYG$sKc=2zC<F9i++`08~Cn~EcD2VeK
znHm@xSr{4{SsEHfN$?vPSy~tx8X7?aHm2J#G6x$3PF}$nRL{%CsnzDu_MMlJk(-r)
zxrvdHL91nPY2Pjdhi%qOH?L%t{jOM8puE%8RIV}g=`-OsZrrwJ8y(Lsw|IA`cZKV6
z=9IFC1>PG3&Tl@OIQ6mI9IYL_0dv{DJu0Y)WMZ9uE#pQ}`m29;thygf{5e5g+PTc<
z$MGj6!mGcC>bzTLlu}Zk-juEMEd2h3b#2_gySR_t{le6{`I6~1zC&{+eaqVZUn<OV
z-IoV?e#hS&`Snzrp|ZB8P5s(*@74La{ALC(7P2kru3F19VZmCr4yG$t82)G8Gyfy+
z61>j+MTktmR)d?<F4!G?nKae$&Mdo^#&=7ef3=$L;rv)7pz-CZ%qLAbUKXOBwwq^r
Vxv+OG&Iw!gt|6?n+=VAL69C+3pmqQN