diff --git a/t/certs/5.cert.pem b/t/certs/5.cert.pem
new file mode 100644
index 0000000000000000000000000000000000000000..877c8ce52f6f2b799eff560bd7acc93fd6c40fe7
--- /dev/null
+++ b/t/certs/5.cert.pem
@@ -0,0 +1,77 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/t/certs/5.key.pem b/t/certs/5.key.pem
new file mode 100644
index 0000000000000000000000000000000000000000..221eb46c81a227bc5ca4a44fa13fdd7ae3035148
--- /dev/null
+++ b/t/certs/5.key.pem
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/t/certs/5.pem b/t/certs/5.pem
new file mode 100644
index 0000000000000000000000000000000000000000..9a11e7f442eb1e74eb74a4177e6240645e8310fd
--- /dev/null
+++ b/t/certs/5.pem
@@ -0,0 +1,104 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/t/certs/star.test.example.untrusted.cert.pem b/t/certs/star.test.example.untrusted.cert.pem
new file mode 100644
index 0000000000000000000000000000000000000000..cfca8b81c43bd9fbc77fff4efae89f8ad538c818
--- /dev/null
+++ b/t/certs/star.test.example.untrusted.cert.pem
@@ -0,0 +1,85 @@
+Certificate:
+ Data:
+ Version: 3 (0x2)
+ Serial Number: 2 (0x2)
+ Signature Algorithm: sha1WithRSAEncryption
+ Issuer: C=IT, O=IGI, CN=Test CA 2
+ Validity
+ Not Before: Mar 14 16:18:34 2018 GMT
+ Not After : Mar 11 16:18:34 2028 GMT
+ Subject: C=IT, O=IGI, CN=voms.example
+ Subject Public Key Info:
+ Public Key Algorithm: rsaEncryption
+ RSA Public Key: (2048 bit)
+ Modulus (2048 bit):
+ 00:ca:0f:d7:c6:91:cc:15:a1:97:32:0b:20:fd:94:
+ 11:57:46:59:3a:79:3e:ef:53:ab:9b:28:30:64:da:
+ bc:c5:0b:90:25:67:e5:46:06:2d:cf:dd:42:15:08:
+ f1:1e:ed:8b:e5:c9:cb:3d:cc:4a:77:92:63:af:ac:
+ 94:a7:e6:89:06:64:0c:bc:28:52:d1:50:48:02:54:
+ 5b:5b:6d:9e:0f:ee:89:f4:01:21:25:ea:ac:af:06:
+ a4:92:ce:32:2f:10:54:f6:37:02:7e:e0:e7:2a:fd:
+ 42:92:c8:ff:5c:f1:f2:83:62:9b:d9:7d:f6:08:cb:
+ 84:3e:03:26:a3:01:a2:ce:9c:de:d9:37:26:7e:6c:
+ 12:50:14:88:47:bc:68:91:6a:f6:d5:05:70:e6:fd:
+ 10:05:65:56:45:6f:95:22:d2:d4:55:77:cc:f5:fa:
+ 08:a4:36:2c:fa:b2:47:90:6c:c4:84:36:ac:24:f8:
+ d9:a8:99:66:e0:5e:96:34:1e:65:48:86:0f:10:7b:
+ e9:3d:1a:3f:ea:53:9f:70:30:0c:30:93:d3:f9:67:
+ d1:66:7c:a0:40:28:fe:6b:17:72:df:d5:5b:a7:0f:
+ 28:bc:92:d1:c8:31:a6:64:e0:d1:c0:1d:f6:dd:b8:
+ 03:b1:31:9d:d8:0d:54:56:df:69:35:f1:55:cc:84:
+ 52:d1
+ Exponent: 65537 (0x10001)
+ X509v3 extensions:
+ X509v3 Basic Constraints: critical
+ CA:FALSE
+ X509v3 Subject Key Identifier:
+ 5F:FE:E5:D5:AC:A3:6C:F4:19:A8:02:7D:F0:B8:9A:67:D0:A9:A1:1F
+ X509v3 Key Usage: critical
+ Digital Signature, Non Repudiation, Key Encipherment
+ X509v3 Extended Key Usage:
+ TLS Web Server Authentication, TLS Web Client Authentication, Microsoft Server Gated Crypto, Netscape Server Gated Crypto, E-mail Protection
+ X509v3 Authority Key Identifier:
+ keyid:37:03:CB:96:42:3A:14:8F:BD:5B:72:2A:EE:F0:6B:A8:6D:4F:8C:44
+
+ X509v3 Subject Alternative Name:
+ DNS:voms.example
+ Signature Algorithm: sha1WithRSAEncryption
+ d2:75:21:54:90:c6:88:15:25:79:48:6d:d1:ba:5a:c7:58:a4:
+ b0:35:5e:30:1a:cf:ba:3f:36:fc:1e:9c:91:ab:54:ca:a8:3e:
+ 2a:3c:75:44:55:2a:27:de:e7:0f:d8:c8:37:91:b1:65:2a:bf:
+ 81:37:5a:0f:b4:31:d6:2c:7d:e0:ff:e1:36:c4:cf:d7:b3:a3:
+ 20:be:7d:bb:26:ae:f6:55:df:68:46:83:4c:90:83:ee:6e:5d:
+ 16:4c:ab:94:02:61:18:bb:48:e0:78:c3:ce:8e:87:30:cd:82:
+ 19:8a:6a:d9:90:a4:db:00:fc:ee:fd:b1:c8:f1:0f:08:c6:47:
+ 78:da:7e:2f:33:f1:8f:16:80:f0:97:a1:72:f9:5a:6e:30:12:
+ 28:2a:c3:ca:cd:b3:c7:f1:ab:e1:db:b8:16:01:54:b7:5f:9e:
+ df:5e:56:25:6e:d4:72:78:a4:5d:c5:ea:92:c0:6b:a6:aa:bd:
+ 06:73:6f:5f:57:29:38:db:13:f1:7d:51:60:af:21:fe:79:fa:
+ a5:8c:cc:12:34:76:32:92:24:9e:9e:6d:51:56:2d:05:28:09:
+ 9b:ca:d7:8e:f3:22:ea:a5:80:82:6b:83:5e:2a:35:53:67:bc:
+ 05:5b:ac:0e:24:48:1a:ef:98:96:e5:8a:7f:28:64:1e:ae:ec:
+ 11:18:66:45
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/t/certs/star.test.example.untrusted.key.pem b/t/certs/star.test.example.untrusted.key.pem
new file mode 100644
index 0000000000000000000000000000000000000000..9496d59d8bcd54cb8bbb5ebc75109080f19490d9
--- /dev/null
+++ b/t/certs/star.test.example.untrusted.key.pem
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
diff --git a/t/untrusted_ac2.t b/t/untrusted_ac2.t
index f0e0ecae2de1952017019af4d866d73c3136c228..5a5b9debfd78d724a618d281c914ce89aaa746c8 100644
--- a/t/untrusted_ac2.t
+++ b/t/untrusted_ac2.t
@@ -27,8 +27,8 @@ __DATA__
--- config
location = / {
proxy_pass https://localhost:8443/;
- proxy_ssl_certificate ../../certs/3.cert.pem;
- proxy_ssl_certificate_key ../../certs/3.key.pem;
+ proxy_ssl_certificate ../../certs/5.cert.pem;
+ proxy_ssl_certificate_key ../../certs/5.key.pem;
}
--- request
GET /