-----BEGIN X509 CRL-----
MIIBrzCBmAIBATANBgkqhkiG9w0BAQsFADAYMRYwFAYDVQQDDA1jbHVzdGVyLmxv
Y2FsFw0yMzA3MDUxODA2MzBaFw0zMzA3MDIxODA2MzBaMCcwJQIUIf2Vv9QwxTJg
EJObGbJvHMthI2cXDTIzMDcwNTE4MDYzMFqgIzAhMB8GA1UdIwQYMBaAFPJgj82D
0mj8lifyRv1p/Ov4gUqlMA0GCSqGSIb3DQEBCwUAA4IBAQCjJAW4cTwqM7SoLa7F
w9TB2CMdKVx4GGKouGRC1FLFRQMx/8rCOXRtxw8CriLlyTqhkMHwt9Y+FCvBj0F6
ifski2z5XxCjdAxiVAuQM23cYgTm47jeiRvfGNMVkgdJ+neo+vO5lLoIaOh1W7H/

-----BEGIN X509 CRL-----
MIIBrzCBmAIBATANBgkqhkiG9w0BAQsFADAYMRYwFAYDVQQDDA1jbHVzdGVyLmxv
Y2FsFw0yMzA3MDUxODA3MzVaFw0zMzA3MDIxODA3MzVaMCcwJQIURRGeazmADQ30
imTNVdo7eWHGYzcXDTIzMDcwNTE4MDczNVqgIzAhMB8GA1UdIwQYMBaAFPJgj82D
0mj8lifyRv1p/Ov4gUqlMA0GCSqGSIb3DQEBCwUAA4IBAQAkZdoqv7E1kQ1/lqdx
2qSnR6WQFNCrdiH5WCy09cEEVxvmPVByTUaZ8cL7V529iGBYDgBj1ZTw9cogWige
Jgbgmap7uKRABtNpncjNFTwTgym40YR86XWVXt9vQpXghCkvdGRa90DIMMCZpiXN

func extractRoot(scrt *v1.Secret) (certInfo *credentials.CertInfo, err error) {
	ret := &credentials.CertInfo{}
	if hasValue(scrt.Data, GenericScrtCaCert) {
		ret.Cert = scrt.Data[GenericScrtCaCert]
		ret.CRL = scrt.Data[GenericScrtCRL]
		return ret, nil
	}
	if hasValue(scrt.Data, TLSSecretCaCert) {
		ret.Cert = scrt.Data[TLSSecretCaCert]
		ret.CRL = scrt.Data[TLSSecretCrl]
		return ret, nil
	}

			got := map[string]Expected{}
			for _, scrt := range raw {
				got[scrt.Name] = Expected{
					Key:    string(scrt.GetTlsCertificate().GetPrivateKey().GetInlineBytes()),
					Cert:   string(scrt.GetTlsCertificate().GetCertificateChain().GetInlineBytes()),
					CaCert: string(scrt.GetValidationContext().GetTrustedCa().GetInlineBytes()),
					CaCrl:  string(scrt.GetValidationContext().GetCrl().GetInlineBytes()),
				}
			}

			scrt.Data[genericScrtCaCert] = []byte(ic.CaCert)
			scrt.Data[genericScrtCaCrl] = []byte(ic.Crl)
		}
	} else {
		scrt.Data[tlsScrtCert] = []byte(ic.Certificate)
		scrt.Data[tlsScrtKey] = []byte(ic.PrivateKey)
	}
	return scrt
}

func EchoConfig(service string, ns namespace.Instance, buildVM bool) echo.Config {
	return echo.Config{
		Service:   service,
		Namespace: ns,

apiVersion: release-notes/v2
kind: feature
area: security
releaseNotes:
  - |
    **Added** Certificate Revocation List(CRL) support for peer certificate validation based on file paths specified in 

	"PUSHAW",
	"PUSHFL",
	"PUSHFQ",
	"PUSHFW",
	"PUSHL",
	"PUSHQ",
	"PUSHW",
	"PXOR",
	"QUAD",
	"RCLB",
	"RCLL",
	"RCLQ",
	"RCLW",
	"RCPPS",
	"RCPSS",
	"RCRB",
	"RCRL",
	"RCRQ",
	"RCRW",
	"RDFSBASEL",
	"RDFSBASEQ",
	"RDGSBASEL",
	"RDGSBASEQ",
	"RDMSR",
	"RDPID",
	"RDPKRU",
	"RDPMC",
	"RDRANDL",
	"RDRANDQ",
	"RDRANDW",
	"RDSEEDL",

			},
			"requires a private key", "not-a-cipher-suite",
		},
		{
			"crl specified for SIMPLE TLS",
			&networking.ServerTLSSettings{
				Mode:  networking.ServerTLSSettings_SIMPLE,
				CaCrl: "crl",
			},
			"CRL is not supported with SIMPLE TLS", "",
		},
		{
			"crl specified for CredentialName",
			&networking.ServerTLSSettings{

		if !(zeroUpper48Bits(x, 3)) {
			break
		}
		v.copyOf(x)
		return true
	}
	return false
}
func rewriteValueAMD64latelower_OpAMD64SARL(v *Value) bool {
	v_1 := v.Args[1]
	v_0 := v.Args[0]
	// match: (SARL x y)
	// cond: buildcfg.GOAMD64 >= 3
	// result: (SARXL x y)
	for {
		x := v_0
		y := v_1
		if !(buildcfg.GOAMD64 >= 3) {
			break
		}
		v.reset(OpAMD64SARXL)
		v.AddArg2(x, y)
		return true
	}

((SHLL|SHRL|SARL) x (ADDQconst [c] y)) && c & 31 == 0  => ((SHLL|SHRL|SARL) x y)
((SHLL|SHRL|SARL) x (NEGQ <t> (ADDQconst [c] y))) && c & 31 == 0  => ((SHLL|SHRL|SARL) x (NEGQ <t> y))
((SHLL|SHRL|SARL) x (ANDQconst [c] y)) && c & 31 == 31 => ((SHLL|SHRL|SARL) x y)
((SHLL|SHRL|SARL) x (NEGQ <t> (ANDQconst [c] y))) && c & 31 == 31 => ((SHLL|SHRL|SARL) x (NEGQ <t> y))