fleet/server/service/testdata/pkcs1.key
Victor Lyuboslavsky 25d9a2b043
Allow APNS key to be in unencrypted PKCS8 format (#24570)
#23760 

Manual QA done:
1. Get the current APNS key using tools/mdm/assets tool.
2. Convert it to a PKCS8 key like: `openssl pkcs8 -topk8 -inform PEM
-outform PEM -in mdm_assets/apns_key.key -out mdm_assets/apns_pkcs8.key
-nocrypt`
3. Delete all `apns` and `scep` rows from `mdm_config_assets` DB table.
4. Point to the PKCS8 key like:

```
export FLEET_MDM_APPLE_APNS_KEY=/Users/victor/work/fleet/mdm_assets/apns_pkcs8.key

export FLEET_MDM_APPLE_APNS_CERT=/Users/victor/work/fleet/mdm_assets/apns_cert.crt
export FLEET_MDM_APPLE_SCEP_CERT=/Users/victor/work/fleet/mdm_assets/ca_cert.crt
export FLEET_MDM_APPLE_SCEP_KEY=/Users/victor/work/fleet/mdm_assets/ca_key.key
export FLEET_MDM_APPLE_SCEP_CHALLENGE=$(cat /Users/victor/work/fleet/mdm_assets/scep_challenge)
```

This step may be tricky. Might be simpler to spin up a fresh Fleet
server with the SCEP/APNS values.

5. Start fleet server. Make sure APNS works by pushing/deleting a
profile.
6. Renew APNS cert and make sure the new cert still works.

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
2024-12-09 16:23:22 -06:00

27 lines
1.6 KiB
Text

-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----