Add client cert fixture for TLS tests

Author: gaby

.github/testdata/client.pem

@@ -0,0 +1,17 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

listen_test.go

@@ -256,7 +256,7 @@ func Test_Listen_TLS_PEM(t *testing.T) {
 	t.Parallel()
 
 	creds := readTLSPEM(t, "./.github/testdata/ssl.pem", "./.github/testdata/ssl.key")
-	clientPEM, err := os.ReadFile(filepath.Clean("./.github/testdata/ca-chain.cert.pem"))
+	clientPEM, err := os.ReadFile(filepath.Clean("./.github/testdata/client.pem"))
 	require.NoError(t, err)
 
 	t.Run("ServerCertOnly", func(t *testing.T) {
@@ -298,7 +298,7 @@ func Test_Listen_TLS_PEM_Validation(t *testing.T) {
 	t.Parallel()
 
 	creds := readTLSPEM(t, "./.github/testdata/ssl.pem", "./.github/testdata/ssl.key")
-	clientPEM, err := os.ReadFile(filepath.Clean("./.github/testdata/ca-chain.cert.pem"))
+	clientPEM, err := os.ReadFile(filepath.Clean("./.github/testdata/client.pem"))
 	require.NoError(t, err)
 
 	t.Run("MissingKey", func(t *testing.T) {
@@ -441,7 +441,7 @@ func Test_Listen_TLS_PEM_Validation(t *testing.T) {
 			CertPEM:        creds.cert,
 			CertKeyPEM:     creds.key,
 			CertClientPEM:  badClientPEM,
-			CertClientFile: "./.github/testdata/ca-chain.cert.pem",
+			CertClientFile: "./.github/testdata/client.pem",
 		})
 		require.Error(t, err)
 		require.ErrorContains(t, err, "tls: CertClientPEM does not match certClientFile")
@@ -529,7 +529,7 @@ func Test_Listen_MutualTLS(t *testing.T) {
 	require.Error(t, app.Listen(":99999", ListenConfig{
 		CertFile:       "./.github/testdata/ssl.pem",
 		CertKeyFile:    "./.github/testdata/ssl.key",
-		CertClientFile: "./.github/testdata/ca-chain.cert.pem",
+		CertClientFile: "./.github/testdata/client.pem",
 	}))
 
 	go func() {
@@ -540,7 +540,7 @@ func Test_Listen_MutualTLS(t *testing.T) {
 	require.NoError(t, app.Listen(":0", ListenConfig{
 		CertFile:       "./.github/testdata/ssl.pem",
 		CertKeyFile:    "./.github/testdata/ssl.key",
-		CertClientFile: "./.github/testdata/ca-chain.cert.pem",
+		CertClientFile: "./.github/testdata/client.pem",
 	}))
 }
 
@@ -556,7 +556,7 @@ func Test_Listen_MutualTLS_Prefork(t *testing.T) {
 		EnablePrefork:         true,
 		CertFile:              "./.github/testdata/ssl.pem",
 		CertKeyFile:           "./.github/testdata/template.html",
-		CertClientFile:        "./.github/testdata/ca-chain.cert.pem",
+		CertClientFile:        "./.github/testdata/client.pem",
 	}))
 
 	go func() {
@@ -569,7 +569,7 @@ func Test_Listen_MutualTLS_Prefork(t *testing.T) {
 		EnablePrefork:         true,
 		CertFile:              "./.github/testdata/ssl.pem",
 		CertKeyFile:           "./.github/testdata/ssl.key",
-		CertClientFile:        "./.github/testdata/ca-chain.cert.pem",
+		CertClientFile:        "./.github/testdata/client.pem",
 	}))
 }