{"time":171,"facets":{"path":{"buckets":[{"val":"tests/","count":64},{"val":"src/","count":56},{"val":"docs/","count":49},{"val":"webclient/","count":23},{"val":"examples/","count":19},{"val":"test/","count":16},{"val":"scripts/","count":14},{"val":"webserver/","count":13}]},"repo":{"buckets":[{"val":"helidon-io/helidon","count":42,"owner_id":"107568707"},{"val":"ghostunnel/ghostunnel","count":34,"owner_id":"68706618"},{"val":"mongodb-university/docs-in-use-encryption-examples","count":11,"owner_id":"45671784"},{"val":"zeroc-ice/ice","count":10,"owner_id":"10439369"},{"val":"fosrl/helm-charts","count":10,"owner_id":"183037913"},{"val":"zeroc-ice/ice-demos","count":8,"owner_id":"10439369"},{"val":"helidon-io/helidon-examples","count":8,"owner_id":"107568707"},{"val":"alexandrehtrb/Pororoca","count":8,"owner_id":"27026741"}]},"lang":{"buckets":[{"val":"Markdown","count":159},{"val":"Java","count":108},{"val":"Shell","count":83},{"val":"Python","count":61},{"val":"Go","count":28},{"val":"YAML","count":26},{"val":"C#","count":21},{"val":"Makefile","count":18}]}},"hits":{"total":718,"hits":[{"owner_id":"319107","repo":"playframework/play-samples","branch":"3.0.x","path":"play-scala-tls-example/scripts/genclient.sh","content":{"snippet":"
8
  -alias clientca \\
9
  -keystore client.p12 \\
10
  -storetype PKCS12 \\
22
  -alias client \\
23
  -keystore client.p12 \\
24
  -dname "CN=client, OU=Example Org, O=Example Company, L=San Francisco, ST=California, C=US" \\
34
  -storepass:env PW \\
35
  -keystore client.p12 \\
"},"total_matches":"9"},{"owner_id":"33936097","repo":"dkron-io/dkron","branch":"main","path":"Makefile","content":{"snippet":"
97
updatetestcert:
98
\twget https://badssl.com/certs/badssl.com-client.p12 -q -O badssl.com-client.p12
99
\topenssl pkcs12 -in badssl.com-client.p12 -nocerts -nodes -passin pass:badssl.com -legacy -out plugin/http/testdata/badssl.com-client-key-decrypted.pem
100
\topenssl pkcs12 -in badssl.com-client.p12 -nokeys -passin pass:badssl.com -legacy -out plugin/http/testdata/badssl.com-client.pem
101
\trm badssl.com-client.p12
"},"total_matches":"5"},{"owner_id":"9193075","repo":"notroj/neon","branch":"master","path":"test/ssl.c","content":{"snippet":"
292
    /* tests for the encrypted client cert, client.p12 */
293
    def_cli_cert = ne_ssl_clicert_read("client.p12");
294
    if (def_cli_cert == NULL) {
295
        t_context("could not load client.p12");
296
        return FAILHARD;
301
        def_cli_cert = NULL;
302
        t_context("client.p12 is not encrypted!?");
303
        return FAIL;
"},"total_matches":"28"},{"owner_id":"107568707","repo":"helidon-io/helidon","branch":"main","path":"tests/integration/tls-revocation-config/store/automatic-store-generator.sh","content":{"snippet":"
47
  echo 'Replacing server and client certificates with the signed ones...'
48
  keytool -importkeystore -srckeystore client.jks -destkeystore client.p12 -srcstoretype jks -deststoretype pkcs12 -srcstorepass changeit -deststorepass changeit
49
  openssl pkcs12 -in client.p12 -nodes -out client-private.key -nocerts -passin pass:changeit
73
\tif [ "$TYPE" = PKCS12 ] || [ "$TYPE" = P12 ] ; then
74
\t\tkeytool -importkeystore -srckeystore client.jks -destkeystore out/client.p12 -srcstoretype JKS -deststoretype PKCS12 -srcstorepass changeit -deststorepass changeit
118
  rm -fv client.csr
119
  rm -fv client.p12
"},"total_matches":"4"},{"owner_id":"72299034","repo":"kafka-ops/julie","branch":"master","path":"docker/tls/up","content":{"snippet":"
23
openssl pkcs12 -export -in certs/client.crt -inkey certs/client.key -chain -CAfile certs/ca.pem -name "kafka.confluent.local" -out certs/client.p12 -password pass:test1234
28
openssl pkcs12 -export -in certs/schema-registry-client.crt -inkey certs/schema-registry-client.key -chain -CAfile certs/ca.pem -name "schema-registry.confluent.local" -out certs/schema-registry-client.p12 -password pass:test1234
33
openssl pkcs12 -export -in certs/local-client.crt -inkey certs/local-client.key -chain -CAfile certs/ca.pem -name `hostname` -out certs/local-client.p12 -password pass:test1234
"},"total_matches":"7"},{"owner_id":"2430370","repo":"FreeRADIUS/freeradius-server","branch":"master","path":"raddb/certs/Makefile","content":{"snippet":"
264
rsa/client.p12: rsa/client.crt
265
\t${Q}openssl pkcs12 -export -in $< -inkey rsa/client.key -out $@ -passin pass:$(PASSWORD_CLIENT) -passout pass:$(PASSWORD_CLIENT)
266
\t${Q}chmod g+r $@
267

268
rsa/client.pem: rsa/client.p12
269
\t${Q}openssl pkcs12 -in $< -out $@ -passin pass:$(PASSWORD_CLIENT) -passout pass:$(PASSWORD_CLIENT)
293
ecc/client.p12: ecc/client.crt
297
ecc/client.pem: ecc/client.p12
"},"total_matches":"4"},{"owner_id":"30044","repo":"chromium/badssl.com","branch":"master","path":"Makefile","content":{"snippet":"
41
\tcp certs/sets/current/gen/crt/ca-untrusted-root.crt common/certs
42
\tcp certs/sets/current/gen/crt/client.p12 common/certs/${TEST_DOMAIN}-client.p12
43
\tcp certs/sets/current/gen/crt/client.pem common/certs/${TEST_DOMAIN}-client.pem
51
\tcp certs/sets/current/gen/crt/ca-untrusted-root.crt common/certs
52
\tcp certs/sets/current/gen/crt/client.p12 common/certs/${PROD_DOMAIN}-client.p12
53
\tcp certs/sets/current/gen/crt/client.pem common/certs/${PROD_DOMAIN}-client.pem
"},"total_matches":"4"},{"owner_id":"10012754","repo":"kohlschutter/junixsocket","branch":"main","path":"junixsocket-demo/src/main/java/org/newsclub/net/unix/demo/ssl/SSLDemoPrerequisites.java","content":{"snippet":"
66
 * <li>Create client public/private key pair, valid for ~10 years, Store it as a PKCS12 file named
67
 * "{@code juxclient.p12}":
68
 * <p>
69
 * {@code keytool -genkeypair -alias juxclient -keyalg RSA -keysize 2048 -storetype PKCS12
70
 *   -validity 3650 -ext san=dns:localhost.junixsocket
71
 *   -dname "CN=First and Last, OU=Organizational Unit, O=Organization, L=City, ST=State, C=XX"
72
 *   -keystore juxclient.p12 -storepass clientpass}
73
 * <p>
77
 * {@code keytool -list -v -keystore juxclient.p12 -storepass clientpass}; omit the
"},"total_matches":"6"},{"owner_id":"296824","repo":"Dabz/kafka-security-playbook","branch":"master","path":"tls/up","content":{"snippet":"
23
openssl pkcs12 -export -in certs/client.crt -inkey certs/client.key -chain -CAfile certs/ca.pem -name "kafka.confluent.local" -out certs/client.p12 -password pass:test1234
28
openssl pkcs12 -export -in certs/schema-registry-client.crt -inkey certs/schema-registry-client.key -chain -CAfile certs/ca.pem -name "schema-registry.confluent.local" -out certs/schema-registry-client.p12 -password pass:test1234
33
openssl pkcs12 -export -in certs/local-client.crt -inkey certs/local-client.key -chain -CAfile certs/ca.pem -name `hostname` -out certs/local-client.p12 -password pass:test1234
"},"total_matches":"7"},{"owner_id":"296824","repo":"Dabz/kafka-security-playbook","branch":"master","path":"kafka-connect-mtls/check-ssl-client-auth.sh","content":{"snippet":"
17
  openssl pkcs12 -export -in connect/certs/client.crt -inkey connect/certs/client.key -chain -CAfile connect/certs/ca.pem -name "connect" -out connect/certs/client.p12 -password pass:confluent
18

19
  cp connect/certs/client.p12 connect/secrets/client.p12
20
  rm -rf connect/certs
21

22
  openssl pkcs12 -in connect/secrets/client.p12 -out connect/secrets/client-ca.pem -cacerts -nokeys -passin pass:confluent -passout pass:confluent
23
  openssl pkcs12 -in connect/secrets/client.p12 -out connect/secrets/client-client.pem -clcerts -nokeys -passin pass:confluent -passout pass:confluent
"},"total_matches":"6"}]}}