mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
8b7e17aa16
The test test_http_intermediate_ca was expecting success when it should expect a failure. Scenario: - install IPA ca-less with certs signed by rootCA - call ipa-server-certinstall with a cert signed by a subCA to replace http cert. In this case, the command should refust changing the cert (otherwise the clients won't be able any more to use ipa * commands as the subca is not installed in /etc/ipa/nssdb or in /etc/ipa/ca.crt). The commit fixes the test expectation and marks the test as xfail (see ticket 7759). The test test_ds_intermediate_ca was expecting success when it should expect a failure. Same scenario as above, but for the ldap server cert. The commit fixes the test expectation and removes the xfail (ticket 6959 was closed as invalid). Note: The behavior differs for ldap and http cert because LDAP server is using a NSSDB and http server is using openssl, hence ipa-server-certinstall follows 2 different code paths when changing the server cert. Related to https://pagure.io/freeipa/issue/7759 Related to https://pagure.io/freeipa/issue/6959 Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com> |
||
|---|---|---|
| .. | ||
| man | ||
| prci_definitions | ||
| pytest_ipa | ||
| test_cmdline | ||
| test_install | ||
| test_integration | ||
| test_ipaclient | ||
| test_ipalib | ||
| test_ipaplatform | ||
| test_ipapython | ||
| test_ipaserver | ||
| test_webui | ||
| test_xmlrpc | ||
| __init__.py | ||
| conftest.py | ||
| create_external_ca.py | ||
| data.py | ||
| i18n.py | ||
| ipa-run-tests | ||
| ipa-test-config | ||
| ipa-test-task | ||
| Makefile.am | ||
| setup.cfg | ||
| setup.py | ||
| test_util.py | ||
| util.py | ||