Add a new test certificate for *.example.org as wildcard.pem

net/data/ssl/scripts/generate-test-certs.sh

Index: net/data/ssl/scripts/generate-test-certs.sh
diff --git a/net/data/ssl/scripts/generate-test-certs.sh b/net/data/ssl/scripts/generate-test-certs.sh
index adf97ba9009400880231c06a98fc6c56e5c2b584..13586531b8ced4617ec6c0205329b59b4743d6cc 100755
--- a/net/data/ssl/scripts/generate-test-certs.sh
+++ b/net/data/ssl/scripts/generate-test-certs.sh
@@ -50,6 +50,13 @@ try openssl req \
   -out out/ok_cert.req \
   -config ee.cnf
 
+try openssl req \
+  -new \
+  -keyout out/wildcard.key \
+  -out out/wildcard.req \
+  -reqexts req_wildcard \
+  -config ee.cnf
+
 SUBJECT_NAME=req_localhost_cn \
 try openssl req \
   -new \
@@ -81,6 +88,15 @@ CA_COMMON_NAME="Test Root CA" \
 CA_COMMON_NAME="Test Root CA" \
   try openssl ca \
     -batch \
+    -extensions user_cert \
+    -days 3650 \
+    -in out/wildcard.req \
+    -out out/wildcard.pem \
+    -config ca.cnf
+
+CA_COMMON_NAME="Test Root CA" \
+  try openssl ca \
+    -batch \
     -extensions name_constraint_bad \
     -subj "/CN=Leaf certificate/" \
     -days 3650 \
@@ -120,6 +136,8 @@ CA_COMMON_NAME="Test Root CA" \
 
 try /bin/sh -c "cat out/ok_cert.key out/ok_cert.pem \
     > ../certificates/ok_cert.pem"
+try /bin/sh -c "cat out/wildcard.key out/wildcard.pem \
+    > ../certificates/wildcard.pem"
 try /bin/sh -c "cat out/localhost_cert.key out/localhost_cert.pem \
     > ../certificates/localhost_cert.pem"
 try /bin/sh -c "cat out/expired_cert.key out/expired_cert.pem \