From 0fb277fd256d11f36e2d88c3203299eeb7ca9c2c Mon Sep 17 00:00:00 2001
From: Jean-Baptiste Doumenjou <925513+jbdoumenjou@users.noreply.github.com>
Date: Wed, 13 Jan 2021 12:02:04 +0100
Subject: [PATCH] Fix tlsclientheaders integration test

---
 .travis/traefiker_rsa.enc                     | Bin 1680 -> 3392 bytes
 .../fixtures/tlsclientheaders/readme.md       |   6 +++
 .../fixtures/tlsclientheaders/root.pem        |  39 +++++++-------
 .../fixtures/tlsclientheaders/server.key      |  50 +++++++++---------
 .../fixtures/tlsclientheaders/server.pem      |  35 ++++++------
 integration/tls_client_headers_test.go        |   2 +-
 6 files changed, 70 insertions(+), 62 deletions(-)
 create mode 100644 integration/fixtures/tlsclientheaders/readme.md

diff --git a/.travis/traefiker_rsa.enc b/.travis/traefiker_rsa.enc
index 23991bcfeb0c9c584cc9d4691cb0d04da7aa2552..3c16cd35dc61503e7c7a462356458f0b09c9c138 100644
GIT binary patch
literal 3392
zcmV-G4ZrdMWq5GxU@IU4zlDFFNTH{;m6r}Y{#@cNNt~vg;SgwXoG@3BOzy8kECf(V
z{dGj@)X@5+juA5eH<VpQcl(&G8#_EZm!eN}7AWc2;NKb%<G(Z;VK92j8w+vJggp%6
z@6HjZ#;)ds?cg3?{K;j==128sSigbxN4>`5ogGSD%g3!9ct8tnrj5tf>YYWK#LnZ8
zeI(U`NWMxat|q^%!I-<F?6Qu)R^Y%V9hX-aQNFhk9?bNRbLVvlK1?u;RCr_>fdcP?
z_W>Ha2^(IKmEEc3Rj<xez-n%P@3>Pr^SD5YYq%}$+yI9Lf?n3Rr)P&^%D~0Y(xM`T
zyb5)azV6*R7+v6>Y@As=$yx~@1D*Dxv*j=SyFyS5Q*j$&8t9rqoCY{s4^mlL&ghI%
zxt>ScQI;<9xn;J#Z0G$;mxqt0tDnWD(nY!ua#?AEFTjf(WcfoG_RmP-5H=R&xYUe;
zs8pKH1q_M*v~OE7%o3w!80~()Li04Jclr=ha9F&~Y||$59k?hSYV=x2p{7QdXQS9k
z#kf<VoQIHlTc+C3&@)<1RUE^4TmTW?7XP)c8r@ag>(~Is24bVM!wG<XB(d+Q4O{nA
zKnJUEBv+=kju`L^A6sg$Acd*pY^7wjvzjTjoAkn}{#QRI|60Gop*p5mm3caY$##CL
z-0H1TWsI+=yTy#p$OM$Z$veDObah3Z;CPp+BSB+Rk<E3XqPHN|Kt1dRqN4*Wjf_09
z<bo_@9ifF@I=WvLTRNJwcM}9>KLSl_E<WYBJ$aS0vXrSHC|`LHv#p7Ae^IuozJdv9
zT8vL)B-0dpw2wSerN@n_xI)3I9`2o(!1@QDNLHQ{uG*0(&TY`XeSjL*iTjo2xv64|
zv2L+#xGGB_UaOr_uWI}_!dnoQ{A=~jg4>VR7e9PR^^kU8)V^iyh_;%`g71{h&R0mY
z(D><iAdV`qYELAuoa&f_(IzZ02ZTm-qB3R>fY16~CjJgi?Pn0%iV7V#d)qQkxfqEm
z-euAp38gwK$d~etPE1HU^7PQ6Kn$7w2hzs(^0eB%ZR9^P1nHpY44D@t<nyX!?B?+7
z4r9YaIHa0StGM?PWKsmw>Bp;>t!}{R<pE2B(kxh%3igSRXPGfuSm!<@(R;CIRgE0`
zMeCmLOd2FQ(WnEj?`A8f@bi?%pFL_|CAyQgCz0pEKi~Xr3k0nPq#-FqqNteB(R4RX
zy~fNO^O0EDPkTjmf_ee^&tt}rH&wSgwN9W(e^ZKsVT-Dw%X^b>wAdE2!5lrf{;P$a
zJ&8VKVCrm0FDdpg{ti^q%pZ%Edb7=TZ?|7l-Ik=rE(%~m-V@lV$2A{KCJet(5b%=n
zn3-YG@I<qDlX>w8Y7@_)H>Le7JdWz2$*_%l0I7A3YqSf(%wSo)*bdfSvyr&~T^s>9
z(+CFBQ6D!`*5FV>YGa&*t4H9+m3_$w6zs-k50K8^>hczhj5TM759?L22|@X6F#>P?
zRe!9Vj}$&+oH%@=urmqf(k)Q&;(&ayF$gzYMX<0e$LKlY>ji|L!S}g(w*Y^+>DLsg
zB}QjgP@VWEk<To-U5Fq2)L>-o@#k=IZ!m2An?Ar38HPCZq((3sS8x|<HHBR7h_}|l
zruFK^v=+=*6X4@Mz}RoD;7Vs*07nmay!WyU?DfVm9_1<OU97CP$QugJ1MwX}>UV9l
z!BR=v9Y{c^>wur%+cRSZ2_S~5(>Jk^MRta?tweD2*KmleqfQnqvO*59#-@dF(_S?s
zoF942OFjY`v&21E*Z?{diwD>GD*`Nw>P(rr$JYLuOj5T=ILV%*Aud043s2V_bhn*U
zUCBNkkuMpq$~QYu^LO>p^mtdpttlTFN7BoQLQpYoYp_NSQ9c)LwFImiVH{wIOGWh$
zna|n!ZI;1`JD*xsGx4QY*tavycH8=)t-Z*@jg{w4k>HQ@6#^F;3|yw}(=*OV_MZpQ
zZ+->tQqc#lR+v*1DeKW3nukb(02?SnR{B)ZLSKe2;~`0qr5Hku?#+$ggMc3^5yBS*
zUk2YILqzzNie*>_>36zp+$%~59i-B`<~Z0dtk2gC^<(}-k$tO&Hshm!W3#+@EwzuR
zV1vpx?bB0++9j}=8es0Gi`7o1D<T}SDpJ$%m2EI%ARU)u36Ki8%!JBP;!6K8K7h8h
zuPY(hn|Px6Y3V<r-b7u<r6P%=VjL94mNon+Ej332ThBi|KbJFKK9uF{pZR3Qha)H@
z>AOJ)%8M1Jhfj5TwvoZmCzLupNgq2MYXjIiT#&<_*~L`c>J~dP_Ax8IN+0##O(RdQ
z6EctLW-;uDLhF?JOB5Lz8~}NhCEK7bp;j`C831f==YdZDk1|xQxVB~yG&h+XAS}JU
zix7T2|4N_@r+H1%EfT+u5~K5Z#oA0V8RJK^nSs+Z@>#r4Vt_mENs?TvdT-v{>D*sd
z=9ErrBX#?OJzYJy%=|$+$7EPEKz#Wax%rs>Mz|vT_JU{0`C>E*+y+c+f31E)0kL8r
zssF@;&F~Nem9<*hPWOfw=f`~M`f-r0zvHdse%{v85oMx<jn-2fA-f;3{<VP^Lcd<Q
z2TSy^Ag9r75y;&A458)XdJQpdmI0!zo6lk9jO$tEp`FXuuL>P|;ciwYX{ka)450X;
z>5>LitVz)*I#6op59}!gS$8wTI>nw}XI{26tB8KTi}(;`h<yTTII<K9+HeR(oJsDy
zSdM=lEa_SRgOw|NpB>Tk{F&WEtNvgnNu(|#A8R6iEOF==$n-K(^lDsGR2|7L&on;&
zZ?KH(HhVH=mw55u2q0<75J%^SpuK-e-3%!k9@ej4WT}+IY*ST*OIb)($X=TC-%~G(
z$aIdU7YU%Ur^04Kp1UF1^?O7-0lZw_`-^2ZJ9uBsMyH7<KPivrWm$^G8Xz9TZ2u;J
zf|&8jj-o)G6G(a>&X#!bYQg{R#+2I37Of#{plG<PI#!!ySr_j7`iA<A<APtkt9}^+
z{GkMx1f7#z2%e}VG?r@Xz~|LT;qReaJ4f8BX1xfd2v>KxLbCW&HiUQ3bCNS9E!j8b
z9RaoiRx31T#P_G>ar^mCk53eJnM@~n#_4i(aYLUWBhD4hiCXpF%n29$Wp81CPLkTw
zk_(A?S~qRhg~IOA8V^G&lJ~B`eX60*Rhnw+tpd94%H=^5r<oYb6e%DLLre@Ni`69v
zM$3+PuQh(2qt*u=OhvvelN<vVKCJkGP2x8D6&EtnUc1asG<AszWR=x5^TF7JU8bFi
zFWU7ekQ=#N$m{xU?Ho-uo`k!TTt+kUJ*8*a2dWiT?Nh5r=>x?EVE$B=1F?qlQNE9W
zuHmH6-?eb#inxgKqi0w`SUBH=$CjOEd+>yVBS@B{qc^3pu5Q8<MhThT8%PS`9Dz_E
z66$x?=BH<yIuB%eGJK<=k0P4L6xGC6!t#C>fKjRxk#!!4yyEb-rh;bcE?7~|(yB1R
zu#uq=V5R}D5vksX+Xw=gyPNs5qfwXXrqg?JmR6AKYahQ5CbyD+>HgFBHbPOH9U&@Z
z!`3p~NUL98#Z1E>+b($1?!lOr7B+7OOmS`k8MH#CYL)Eox^>iRFG&&+;*R|Dy<NYe
zE&Rra&xy9hOcha&MrCggoYY~K+8A%xaJCtRU2QF;r;}aj?w%pP&n&S|=K@|;i<>i7
zakG=0-V=)M7Hz?0F|AOx6WP0>zK?nb`sc7aZs&8~HxVU^@ClO|$gLt+?&B~^wpX+s
z(WPvs8NiTc9}AEMz0qK4?Gz&p8@a{`+gWFCV!~XK3SRVK$p0?(yy8(vFb0CgJ|zek
zN$^BFfh5Zg6-ZViz%h5uOt>sIoKPhD!}NJ<0r2M_p`Yw}?7V1Ik_1w4_$&E5@R%FN
zfLIs=h)enP(55M4wkTgpH8B0FIeqknCjpQ=bh#TnD&j+Gq=PEpz`%;~Z*~zfmi+iG
zgIA@oI9|D0&CuoZrB^1u%xSiu{|-RBvPf?c;mTr+6q;N}uQ{RVRcRQBom#3Lno>yI
zzqO{UhovIbwLb=YzbbqqyM2}?H)vXEu1hqwu*9APD$-{tWM32N7s7Wc5dIsQf;mvK
z0qz;<g12?Ue^$bQYv_`V9Y6#mQboFb%fN%QD<^%#KXv*hN^?DXTNOht-fRGLg_^Vp
zrPB#3pB`jPnP8h&9+hzCLOSV#PRUKbbvA04PuDjg-^hF=r7OGe(cV4vUh~dLD1t5V
zxdFw<_1n|h_P?+m+X~FV-d0YE)dunNNA}#GQQ*w18)M#kXCt}T=W%kZjZkyM6VF?x
z9r3W!Cro;q8pQ3@TgZ8jgUn%^Bg><!6N40upR0KsuFMJ5Y&3*jZ;QXbx5Xm#V9FcO
z>-4DsE;8T4Zilj8S9%`(9nRU%Slz&(O4Xa`GVG=@^xiMSN~CrJW=<aqs6OzE4!26b
WBE(E2JsXPs$|k*`dWqE-@ZOB6{GnU`

literal 1680
zcmV;B25<RdsEsU3)(1&_A<DGhV*Jj4xMI@?cdB6ms5cL7G{iHK$ecBnC+I5!GP=w<
zE?@bJM)Y1JkhkaTaX)R)(ks>0>;5`$q-19QJ&&G%Q}cJUVtSbtJ`G`j!R9N=zuQ&j
zODDgX7)DV`U<u?YG=xxyzPNLlmT@9fDFh$vrUqWg9V_jF5c_n!cTV}1Q%%@-+q0HB
zt@X{LJ2w&Y&?6=`Fg4t*cJ^|DI0{mw7H_#5lFHr4T6qxcL-OR25!uW{slcS6)B8rS
z)TM!uFR!*8jnwpwzVz_Cq^xCOSYd}H`K(cif@RXq!)O@+Wj{zx^O@q^O>3N%W=`K=
z@Klmvjz^-9sypN)vET9itQe|!Wg(N#Wa+Rz1wfbzWM`Y4%Of&w2N%*2A3t?wgINCB
z|Ef8T|1`U(W0hJRnj_QUnvV_H=;pru=NqUNlMKF1r7%ejnmV+*>5#SBhZl)C^l$0V
zS<r8n!&PxKeX*_MW$z$fXaO$&ce3a7B5G`H8E}akYtXPdBS7&I?2Nx#aG4>(kqzVQ
zp<g9Oa<cMcVvYCJq>zw-(BX~fr*hM?pma$Hcm>zpHn2%FH^KFA!7?L^=K(6?0CPY*
zguehl2xvwE&07U?vJH&0)T{^fWdwb0l7Mls+`bcn!!K-+wz_*@GP%c)9Gn(J)|^gj
zD;vWQTza1RdsKm(iT(Fq2(nr+?Q&e5SjX37v#N5?b9}mnZT}s5V43S>uuAONog`N@
ze`YY+k-NPe9Ag3>*nfbQJ+LIsJ^P$wbdiR7C-<2^zt-S)_Nua}uJz+p$D<@l8*zs(
zUq;@|MbJNY{)S7+eR}5yI_)X)rwo=&u!$U>i@PZKkgVKh*B8*0zqU<O7^>VnL0wlS
z(!B^!5!#Mj^&Rdg@O=16#g$O<2`Ty@NtFr7G63gj_T|QZQD*M^TmA~G9;S8zTA`^Y
zHjV8wMZORnfdh{`p_Oi1K%v5E<x{dW6Pn^V#d!vYTts8BOQE|0qZRn}z4XxV=U(n&
zs6{eJ+j)G`1HWo`L5-UjJO=+U52ixUe!)yK>pIj0DyI6K0|+?4$L;~Niag=H%y%`T
zJ|6nfTV&<jPqiJai~p+J#3|*1-8^D!q!lqc8REjDT+u-tzHFXg>Xy3ON?F&j2`t{1
zB`{;nLFt%zWQP;E1K!L64*8Z_%zB{J56%}O<kz`7Jb3&DBzG<3dL6icm*_x_75!eA
zZ#Vni!V?vLZtjh!g+)Dj%_iqPn=In^qu|%%X@z1(bE@SOmm4qXDqC?c)M@ike~fa0
zlnU#SSueFk6B#UAIRHo4OX;_*U^b--#ZR~ve__jb;y3XfO9p-tU@odK@f^r;-FOCc
z^=GRCIc1z*(YA`s@rhG(#+{#$9M-m5wzS#}&GTIpA^&ucuSqS4DE1bW!lAO(A>i~_
zLWX73w>*!{+iXwYj0KiD{n$BWTn<Ed4bkxa9x521^E~Z^*sdX0oH1AceMQX)?d`Fv
zkg%j+9z7ftcN5TsWz>nn5Tqd%Ogb<A?sV%bO@Qdv)IXzsh*U_LSnVnjyr_s+NileS
zbVq40JL4ZNiTYylYD}sqF_;z`9W3hEF0y?H!WkQ|2wSn9of|b8zY5Kx^JW!-2uxpq
z>G7KCoc8*h0pW%}qZ0eqs5;%LfePUlgMWJ_NXLZ$(vP`)w*RK*R<UzKY1P>A9>1Rh
zcRVbmQB=5mU6l1n#~M^x>@yuAeA}9Sj=-A8MSS}KN?X{=J4u$Q3WxQZ#VhY`q0CxL
zjGAKIs}uXKcAH9#yK7ZLMJDY!KnUJ;W12yFL9!u8M#A{!$9Kb1`k;`<(1AX_wc5~s
z*iZ(bc#4KSB$l*J80X+E;zjeKiqb;raMsVp{RZxuJiZ%_*p0*}*GfqR6R%pI?sssI
zaInsbxuW^#qDnTLD;gk!e<O|#HkR+7)w?-d9l<MLkchQbZkPS{-Gm^&D$dAd1PS|-
zV=AO?=eK{P_G*EG@@>~Oy(6q_{O~DUxrByLc>riV?I&x&*(iBP=@<Wch+&QAuqLeN
z>9)cI4z8lsAB21ZNe36o_4ow=f`b?<VT3ndA6bw(<d+Od<uPPuk=Rsxmr3NUf5g$i
zKGM5WpYxa`^Q9dd0t4wM8j-Ez3`T#T6)`<vB4=PAjKkbbMr%&USH^*Fb7Ap-tw;#H
a@5tFhwU=hqwI+Kkt|-STDlelX^S)WicukA|

diff --git a/integration/fixtures/tlsclientheaders/readme.md b/integration/fixtures/tlsclientheaders/readme.md
new file mode 100644
index 000000000..2f583387f
--- /dev/null
+++ b/integration/fixtures/tlsclientheaders/readme.md
@@ -0,0 +1,6 @@
+```bash
+openssl req -new -newkey rsa:2048 -x509 -days 3650 -nodes -extensions v3_ca -keyout root.key -out root.pem
+openssl genrsa -out server.key 2048
+openssl req -nodes -key server.key -new -out server.csr
+openssl x509 -req -days 3650 -in server.csr -CA root.pem -CAkey root.key -CAcreateserial -out server.pem
+```
diff --git a/integration/fixtures/tlsclientheaders/root.pem b/integration/fixtures/tlsclientheaders/root.pem
index 633325fc9..53108b4dd 100644
--- a/integration/fixtures/tlsclientheaders/root.pem
+++ b/integration/fixtures/tlsclientheaders/root.pem
@@ -1,21 +1,22 @@
 -----BEGIN CERTIFICATE-----
-MIIDhDCCAmygAwIBAgIJAK4Ed0WF/YNQMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNV
-BAYTAkZSMQ8wDQYDVQQIDAZGUkFOQ0UxETAPBgNVBAcMCFRPVUxPVVNFMRMwEQYD
-VQQKDApjb250YWlub3VzMQ8wDQYDVQQDDAZzZXJ2ZXIwHhcNMTgwMzIxMTMzOTM4
-WhcNMjEwMTA4MTMzOTM4WjBXMQswCQYDVQQGEwJGUjEPMA0GA1UECAwGRlJBTkNF
-MREwDwYDVQQHDAhUT1VMT1VTRTETMBEGA1UECgwKY29udGFpbm91czEPMA0GA1UE
-AwwGc2VydmVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DfZMdW1
-QKmdOTPULt6WUMVFU3PUcovq4cVtvNAzAshduC/7nHZx60uFzVKLYnOfZ+5VYfOS
-zfVXPvltmBSWga1Yj6CuzfDZwY1nkcoL+22yBD6x4w2nB7aFaPNgj6M4ALVEZRKX
-lMow+a0c0mOr1kLHm99MT/oabcdI+wbAp8VnLz9DF6SD7iDjIOb4RjvmcyetBzwu
-1rQYti0bFHOnLCxiz0asXly0zspFajWkbGkvBdvEoP2qOHMeTV604PaBwpIMX/ly
-ymGgYUctHeC16ptDRDDj7Spmu7ec2NzjgNW+MOth6EkFlhYgg1OEIXP+IFJ5LbS8
-1t/Y+fDUoc6+IQIDAQABo1MwUTAdBgNVHQ4EFgQUYeZvrzWyLI3TjmTIJYpSTjTb
-/XUwHwYDVR0jBBgwFoAUYeZvrzWyLI3TjmTIJYpSTjTb/XUwDwYDVR0TAQH/BAUw
-AwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAYQL8d/WQxu7rE58GC7le53FNzujMNZ+h
-1kdS35LrTXPv5b6QTi5oUGi5LCesP4HnCpGdMFodyydhY8rhIDZWEFgkJZOLZhdt
-sAyRONdI/Ms/NGQO2oJD+TlV92e4k3ey4WJyXIFHXE2Apb77VlsiHp8pI/iF/R5t
-h4o4OADG7k6Fjf/wx7A18ru2eoH+PcwA8i6sQaQ1qEwxC0b3rh2TwaCpFQVcmMv5
-5jKPRBN0UC0PyHwqFZsSg1folhMAIBAjUsHgA6WleN9zMCyLAIn0LSai1CpFby6o
-d6xu6pp8pwot8YTL0yS5T0X9aNhK2/uDoP50ei6eWI3uuPa8NJxbyA==
+MIIDjTCCAnWgAwIBAgIUFrRUuadNNLpobPP9sEgenQ2MTF0wDQYJKoZIhvcNAQEL
+BQAwVjELMAkGA1UEBhMCRlIxDzANBgNVBAgMBkZyYW5jZTEVMBMGA1UECgwMVHJh
+ZWZpayBMYWJzMRAwDgYDVQQLDAd0cmFlZmlrMQ0wCwYDVQQDDARyb290MB4XDTIx
+MDEwODE3NDMxOVoXDTMxMDEwNjE3NDMxOVowVjELMAkGA1UEBhMCRlIxDzANBgNV
+BAgMBkZyYW5jZTEVMBMGA1UECgwMVHJhZWZpayBMYWJzMRAwDgYDVQQLDAd0cmFl
+ZmlrMQ0wCwYDVQQDDARyb290MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
+AQEA53rEBDuojC9xslsS6MP8lJvubNmSOqFsGS58KtuTP8bQcuuFuBJzk4HzXoqE
+k1KQqqeIHZfP11yuto14RGtiRMOSDEfwkNvbcKIqHFyrbaDjjOvkpWVGiVVRycM4
+59UzKMuv6GgkNQHQDqaKhkxt7GrjUJBNDj/Kg9+1jJz0k181Fz4JsNT0KJ3gdSd1
+nMggcx8MBZm9F7jFqxDt0xW41UNDLzDTctCFyHAdWzQvFZV5j8A/VLZyTLCAuVZt
+ljJ4AoO2C02dAxaPxy4gZ6eZYbuS2iHhhGDKwcXwmrwDcwyaWoqy1GKqyV4VhDg+
+Ue6fwUZvjAaob9oWynXMQoik8wIDAQABo1MwUTAdBgNVHQ4EFgQUxauRsdHLfK/X
+hb/uWhrmYEDd9VQwHwYDVR0jBBgwFoAUxauRsdHLfK/Xhb/uWhrmYEDd9VQwDwYD
+VR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAmrDLgjgfJnrHKDBMGxcC
+2NhYrqoeJcGdIsW/TwjNaXaJZZpgAjmHObDR1+49UQhylUzB1a8jesSu2R+aBZXb
+/0Y9J19q8jbMKEQABqApvwrHLXe9xUVzRTxK3HPlnzSTinS2Il34jc/o3gaYmWuy
+i7KapY6fhkCivr0zTPXF2l8gLFesuQHkq2cYwZDOwgcaSCVoqeA0ldvo/Pmz2A6L
+3X4rfpXo10Dh9sClbO78eCxQp2RdtPBVPMqMG/2+sPu4qE/TYKttR0GseOMSYEju
+kCxmQBS8agUJEdrdFhsTR6Vq2uUO3Qx1r2Oz4xs/jfG/SjMVxcap38hf/QmEq0KA
+8Q==
 -----END CERTIFICATE-----
diff --git a/integration/fixtures/tlsclientheaders/server.key b/integration/fixtures/tlsclientheaders/server.key
index f5d218904..07749cfb1 100644
--- a/integration/fixtures/tlsclientheaders/server.key
+++ b/integration/fixtures/tlsclientheaders/server.key
@@ -1,27 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIEpAIBAAKCAQEAo0eupztBxEchz/9BbegBzKX35YUt0S2Xzp/mFM+hXQylWDHB
-z3wED7R89v3sY6ePTk/tAT5l6uKjmQ/zRlQFf7QtVWKUtYq8rjuFn9/EeC+233mx
-kVP7QAcuT6T8PzoUgysW6Tx3zz18VDRMnPhx1fjA1jAq3+IU03BpbFz7CkYCxkG/
-1wWHmsB16LH2bMxJrzapph2nSDnUkoATugSJec+DxTtX1hdjAaJK/JsIwioA/Lyy
-6YgE2oX7uRZBou0bA3y0TDnFoIVAVqISYWfszTGDlwL+SD/P9GYa19GZk4imdp8j
-LD/+J9eLuHG75rkROvE4xbSPbGIGkZOEYTmjHwIDAQABAoIBAGok81kroHlkdIqu
-uW4lYOYVDq5agYp2RTXBpOTqhU/kJKjMz91+FXXQM1ytfbra9sJGGyCv27lyVD/w
-qomRnXGDQ+U6DMpnwnjRoPBpm2M2QX/NsK11FuRsxqJn8sN3klYi8OX2tTw4EFb9
-GMECkZ4z88hJz9VzN26sqRwU5e2qw45Fhk+Jl6RBsiBfMGNGsmI5n1yIgvQd2PoM
-wVxHI+bb3rWL7zE7wy2rb2c+J0P2gy7fZlFN2ZLkC5RjTqdzD2P4erp4gcpgffuO
-0Epu7ZzuJ0UKCBXJOkhjlM79opLK6IBpF1YgxVCoMPbQVYAHP9hSwuz6hgc0ocwa
-+6PqzSECgYEA1kTSFN8tHq2VMFgwPyguppSmeJJdIcnMYdicJNkv9YXeIt4mAk9c
-Qm5eMLoqRJL94fdRDGb7QIqcfSrQODHy5dmqrTZd+TeSc4VRC1gZ7RPg5ja8b0dR
-DoktPizIYzWrNEaEjhWojqYXT5DOOmNgDbOYrlR6Qdrd6VOmQkIgHz0CgYEAwxSf
-NMe6LasWg9PYgLeVBcNc9oOjGvczOmNULngte8LpiJm4yzI0gMer20VdCtXYsyR1
-Zs/rItzSQuvr+3v5qW2NfJ/TaJkZ+bcc/fGJ2LcnM2Kfjfih8DSy5/MBzNM4cqw2
-arHVvQlAvfOSB8WoFzdXOS41Z+BumLsZE3/mMYsCgYBGNTKpCB+ep730o1DbwOzY
-RGjvpPXDNn4zqWgwYsHmL0EEJ8pIg3x1f/h4+ucSpR9vRTxXVf8JvOFd2gN0BlnS
-mqnkK6ZLHLxuAcb2cp28IwFULac8xx92JdifQMlASLuaW2jfrZUXeLC2r3oDg8Bb
-fPeQV7nfjjmcVH5rw4MG+QKBgQCi4RH4oJZLUSEQWo3XEvDjCfYRgWFqv2FPa+W6
-ku7u+ZPBURAg4D9EEvLjtmt0A47WLCe1+v3JcvQ/mfnDVQTkOKs8lbmPCN3OSNx1
-DvnYLzwUxFCR2jljdKy3y4cCPI1R+YXJ2ceq+RHMR5Ty1k59a+BwxqsimxncfcL3
-K//H9wKBgQChT3kvF9Igcdna8g+JneGD6RHXJX1o80QrO+eWma4NozEOmXqA7R7r
-+GwAyqy9GFM7pwUhHmhJAxILMBxR84EY7kCBvi1VlZ3JbT7w0gjjOqPHklvbsPj9
-BruA5xPMq1gzCOgejQIRoODtpH1S6Fi/YMTO6eq75qw6minHWi4dPw==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 -----END RSA PRIVATE KEY-----
diff --git a/integration/fixtures/tlsclientheaders/server.pem b/integration/fixtures/tlsclientheaders/server.pem
index 97c39f730..1d51b6c5d 100644
--- a/integration/fixtures/tlsclientheaders/server.pem
+++ b/integration/fixtures/tlsclientheaders/server.pem
@@ -1,19 +1,20 @@
 -----BEGIN CERTIFICATE-----
-MIIDKjCCAhICCQDKAJTeuq3LHjANBgkqhkiG9w0BAQsFADBXMQswCQYDVQQGEwJG
-UjEPMA0GA1UECAwGRlJBTkNFMREwDwYDVQQHDAhUT1VMT1VTRTETMBEGA1UECgwK
-Y29udGFpbm91czEPMA0GA1UEAwwGc2VydmVyMB4XDTE4MDMyMTEzNDM0MVoXDTIx
-MDEwODEzNDM0MVowVzELMAkGA1UEBhMCRlIxDzANBgNVBAgMBkZSQU5DRTERMA8G
-A1UEBwwIVE9VTE9VU0UxEzARBgNVBAoMCmNvbnRhaW5vdXMxDzANBgNVBAMMBnNl
-cnZlcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKNHrqc7QcRHIc//
-QW3oAcyl9+WFLdEtl86f5hTPoV0MpVgxwc98BA+0fPb97GOnj05P7QE+Zerio5kP
-80ZUBX+0LVVilLWKvK47hZ/fxHgvtt95sZFT+0AHLk+k/D86FIMrFuk8d889fFQ0
-TJz4cdX4wNYwKt/iFNNwaWxc+wpGAsZBv9cFh5rAdeix9mzMSa82qaYdp0g51JKA
-E7oEiXnPg8U7V9YXYwGiSvybCMIqAPy8sumIBNqF+7kWQaLtGwN8tEw5xaCFQFai
-EmFn7M0xg5cC/kg/z/RmGtfRmZOIpnafIyw//ifXi7hxu+a5ETrxOMW0j2xiBpGT
-hGE5ox8CAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAPYDdGyNWp7R9j2oxZEbQS4lb
-+2Ol1r6PFo/zmpB6GK3CSNo65a0DtW/ITeQi97MMgGS1D3wnaFPrwxtp0mEn7HjU
-uDcufHBqqBsjYC3NEtt+yyxNeYddLD/GdFXw4d6wNRdRaFCq5N1CPQzF4VTdoSLD
-xsOq/WAHHc2cyZyOprAqm2UXyWXxn4yWZqzDsZ41/v2f3uMNxeqyIEtNZVzTKQBu
-wWw+jlQKGu0T8Ex1f0jaKI1OPtN5dzaIfO8acHcuNdmnE+hVsoqe17Dckxsj1ORf
-8ZcZ4qvULVouGINQBP4fcl5jv6TOm1U+ZSk01FcHPmiDEMB6Utyy4ZLHPbmKYg==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 -----END CERTIFICATE-----
diff --git a/integration/tls_client_headers_test.go b/integration/tls_client_headers_test.go
index d31bfd6d9..5a525bca5 100644
--- a/integration/tls_client_headers_test.go
+++ b/integration/tls_client_headers_test.go
@@ -66,6 +66,6 @@ func (s *TLSClientHeadersSuite) TestTLSClientHeaders(c *check.C) {
 		},
 	}
 
-	err = try.RequestWithTransport(request, 2*time.Second, tr, try.BodyContains("Forwarded-Tls-Client-Cert: MIIDKjCCAhICCQDKAJTeuq3LHjANBgkqhkiG9w0BAQsFADBXMQswCQYDVQQGEwJGUjEPMA0GA1UECAwGRlJBTkNFMREwDwYDVQQHDAhUT1VMT1VTRTETMBEGA1UECgwKY29udGFpbm91czEPMA0GA1UEAwwGc2VydmVyMB4XDTE4MDMyMTEzNDM0MVoXDTIxMDEwODEzNDM0MVowVzELMAkGA1UEBhMCRlIxDzANBgNVBAgMBkZSQU5DRTERMA8GA1UEBwwIVE9VTE9VU0UxEzARBgNVBAoMCmNvbnRhaW5vdXMxDzANBgNVBAMMBnNlcnZlcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKNHrqc7QcRHIc%2F%2FQW3oAcyl9%2BWFLdEtl86f5hTPoV0MpVgxwc98BA%2B0fPb97GOnj05P7QE%2BZerio5kP80ZUBX%2B0LVVilLWKvK47hZ%2FfxHgvtt95sZFT%2B0AHLk%2Bk%2FD86FIMrFuk8d889fFQ0TJz4cdX4wNYwKt%2FiFNNwaWxc%2BwpGAsZBv9cFh5rAdeix9mzMSa82qaYdp0g51JKAE7oEiXnPg8U7V9YXYwGiSvybCMIqAPy8sumIBNqF%2B7kWQaLtGwN8tEw5xaCFQFaiEmFn7M0xg5cC%2Fkg%2Fz%2FRmGtfRmZOIpnafIyw%2F%2FifXi7hxu%2Ba5ETrxOMW0j2xiBpGThGE5ox8CAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAPYDdGyNWp7R9j2oxZEbQS4lb%2B2Ol1r6PFo%2FzmpB6GK3CSNo65a0DtW%2FITeQi97MMgGS1D3wnaFPrwxtp0mEn7HjUuDcufHBqqBsjYC3NEtt%2ByyxNeYddLD%2FGdFXw4d6wNRdRaFCq5N1CPQzF4VTdoSLDxsOq%2FWAHHc2cyZyOprAqm2UXyWXxn4yWZqzDsZ41%2Fv2f3uMNxeqyIEtNZVzTKQBuwWw%2BjlQKGu0T8Ex1f0jaKI1OPtN5dzaIfO8acHcuNdmnE%2BhVsoqe17Dckxsj1ORf8ZcZ4qvULVouGINQBP4fcl5jv6TOm1U%2BZSk01FcHPmiDEMB6Utyy4ZLHPbmKYg%3D%3D"))
+	err = try.RequestWithTransport(request, 2*time.Second, tr, try.BodyContains("Forwarded-Tls-Client-Cert: MIIDNTCCAh0CFD0QQcHXUJuKwMBYDA%2BbBExVSP26MA0GCSqGSIb3DQEBCwUAMFYxCzAJBgNVBAYTAkZSMQ8wDQYDVQQIDAZGcmFuY2UxFTATBgNVBAoMDFRyYWVmaWsgTGFiczEQMA4GA1UECwwHdHJhZWZpazENMAsGA1UEAwwEcm9vdDAeFw0yMTAxMDgxNzQ0MjRaFw0zMTAxMDYxNzQ0MjRaMFgxCzAJBgNVBAYTAkZSMQ8wDQYDVQQIDAZGcmFuY2UxFTATBgNVBAoMDFRyYWVmaWsgTGFiczEQMA4GA1UECwwHdHJhZWZpazEPMA0GA1UEAwwGc2VydmVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYK2z8gLPOfFLgXNWP2460aeJ9vrH47x%2FlhKLlv4amSDHDx8Cmz%2F6blOUM8XOfMRW1xx%2B%2BAgChWN9dx%2Fkf7G2xlA5grZxRvUQ6xj7AvFG9TQUA3muNh2hvm9c3IjaZBNKH27bRKuDIBvZBvXdX4NL%2FaaFy7w7v7IKxk8j4WkfB23sgyH43g4b7NqKHJugZiedFu5GALmtLbShVOFbjWcre7Wvatdw8dIBmiFJqZQT3UjIuGAgqczIShtLxo4V%2BXyVkIPmzfPrRV%2B4zoMFIFOIaj3syyxb4krPBtxhe7nz2cWvvq0wePB2y4YbAAoVY8NYpd5JsMFwZtG6Uk59ygv4QIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQDaPg69wNeFNFisfBJTrscqVCTW%2BB80gMhpLdxXD%2BKO0%2FWgc5xpB%2FwLSirNtRQyxAa3%2BEEcIwJv%2Fwdh8EyjlDLSpFm%2F8ghntrKhkOfIOPDFE41M5HNfx%2FFuh5btKEenOL%2FXdapqtNUt2ZE4RrsfbL79sPYepa9kDUVi2mCbeH5ollZ0MDU68HpB2YwHbCEuQNk5W3pjYK2NaDkVnxTkfEDM1k%2B3QydO1lqB5JJmcrs59BEveTqaJ3eeh%2F0I4OOab6OkTTZ0JNjJp1573oxO%2Bfce%2FbfGud8xHY5gSN9huU7U6RsgvO7Dhmal%2FsDNl8XC8oU90hVDVXZdA7ewh4jjaoIv"))
 	c.Assert(err, checker.IsNil)
 }