IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-01-26 16:16:31 -06:00
Code Issues Packages Projects Releases Wiki Activity

ipatests: remove ipacertbase option from test CSR configuration

Browse Source 
The issue was found during test review. If the cert base contains
spaces, openssl req fails.

https://fedorahosted.org/freeipa/ticket/4559

Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>
This commit is contained in:
Milan Kubík 2016-07-07 15:35:23 +02:00 committed by Petr Vobornik
parent d88a12f1f5
commit 0277a89825
2 changed files with 0 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
ipatests/test_xmlrpc/data/usercert.conf.tmpl
View File

@ -7,7 +7,6 @@ req_extensions = exts
[ dn ]
commonName = "{username}"
{ipacertbase}
[ exts ]
subjectAltName=email:{username}@{ipadomain}

6
ipatests/test_xmlrpc/test_caacl_profile_enforcement.py
View File

@ -30,18 +30,12 @@ CERT_OPENSSL_CONFIG_TEMPLATE = os.path.join(BASE_DIR, 'data/usercert.conf.tmpl')
CERT_RSA_PRIVATE_KEY_PATH = os.path.join(BASE_DIR, 'data/usercert-priv-key.pem')
CERT_SUBJECT_BASE = (
api.Command.config_show()
['result']['ipacertificatesubjectbase'][0]
)
SMIME_USER_INIT_PW = u'Change123'
SMIME_USER_PW = u'Secret123'
def generate_user_csr(username, domain=None):
csr_values = dict(
ipacertbase=CERT_SUBJECT_BASE,
ipadomain=domain if domain else api.env.domain,
username=username)