mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-25 08:21:05 -06:00
6033d495d1
New Tests include TestRSNPKIConfig TestRSNVault The new tests are just extending existing classes to be run with random serial numbers enabled The tests also include a new method to check params set in CS.cfg for both CA and KRA, and another test to check Random Serial Number version while running `ipa ca-find` Added nightly definitions Related Ticket: https://pagure.io/freeipa/issue/2016 Signed-off-by: Sumedh Sidhaye <ssidhaye@redhat.com> Reviewed-By: Rob Crittenden <rcritten@redhat.com> Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
122 lines
3.7 KiB
Python
122 lines
3.7 KiB
Python
#
|
|
# Copyright (C) 2022 FreeIPA Contributors see COPYING for license
|
|
#
|
|
|
|
import pytest
|
|
|
|
from ipaplatform.paths import paths
|
|
|
|
from ipatests.pytest_ipa.integration import tasks
|
|
from ipatests.test_integration.test_installation import (
|
|
TestInstallWithCA_DNS1,
|
|
TestInstallWithCA_KRA1,
|
|
)
|
|
from ipatests.test_integration.test_caless import TestServerCALessToExternalCA
|
|
from ipatests.test_integration.test_vault import TestInstallKRA
|
|
from ipatests.test_integration.test_commands import TestIPACommand
|
|
|
|
|
|
def pki_supports_RSNv3(host):
|
|
"""
|
|
Return whether the host supports RNSv3 based on the pki version
|
|
"""
|
|
script = ("from ipaserver.install.ca import "
|
|
"random_serial_numbers_version; "
|
|
"print(random_serial_numbers_version(True))")
|
|
result = host.run_command(['python3', '-c', script])
|
|
if 'true' in result.stdout_text.strip().lower():
|
|
return True
|
|
return False
|
|
|
|
|
|
def check_pki_config_params(host):
|
|
# Check CS.cfg
|
|
try:
|
|
cs_cfg = host.get_file_contents(paths.CA_CS_CFG_PATH)
|
|
kra_cfg = host.get_file_contents(paths.KRA_CS_CFG_PATH)
|
|
assert "dbs.cert.id.generator=random".encode() in cs_cfg
|
|
assert "dbs.request.id.generator=random".encode() in cs_cfg
|
|
assert "dbs.key.id.generator=random".encode() in kra_cfg
|
|
except IOError:
|
|
pytest.skip("PKI config not present.Skipping test")
|
|
|
|
|
|
class TestInstallWithCA_DNS1_RSN(TestInstallWithCA_DNS1):
|
|
random_serial = True
|
|
|
|
@classmethod
|
|
def install(cls, mh):
|
|
if not pki_supports_RSNv3(mh.master):
|
|
raise pytest.skip("RNSv3 not supported")
|
|
super(TestInstallWithCA_DNS1_RSN, cls).install(mh)
|
|
|
|
|
|
class TestInstallWithCA_KRA1_RSN(TestInstallWithCA_KRA1):
|
|
random_serial = True
|
|
|
|
@classmethod
|
|
def install(cls, mh):
|
|
if not pki_supports_RSNv3(mh.master):
|
|
raise pytest.skip("RNSv3 not supported")
|
|
super(TestInstallWithCA_KRA1_RSN, cls).install(mh)
|
|
|
|
|
|
class TestIPACommand_RSN(TestIPACommand):
|
|
random_serial = True
|
|
|
|
@classmethod
|
|
def install(cls, mh):
|
|
if not pki_supports_RSNv3(mh.master):
|
|
raise pytest.skip("RNSv3 not supported")
|
|
super(TestIPACommand_RSN, cls).install(mh)
|
|
|
|
|
|
class TestServerCALessToExternalCA_RSN(TestServerCALessToExternalCA):
|
|
random_serial = True
|
|
|
|
@classmethod
|
|
def install(cls, mh):
|
|
if not pki_supports_RSNv3(mh.master):
|
|
raise pytest.skip("RNSv3 not supported")
|
|
super(TestServerCALessToExternalCA_RSN, cls).install(mh)
|
|
|
|
@classmethod
|
|
def uninstall(cls, mh):
|
|
if not pki_supports_RSNv3(mh.master):
|
|
raise pytest.skip("RSNv3 not supported")
|
|
super(TestServerCALessToExternalCA_RSN, cls).uninstall(mh)
|
|
|
|
|
|
class TestRSNPKIConfig(TestInstallWithCA_KRA1):
|
|
random_serial = True
|
|
num_replicas = 3
|
|
|
|
@classmethod
|
|
def install(cls, mh):
|
|
if not pki_supports_RSNv3(mh.master):
|
|
raise pytest.skip("RSNv3 not supported")
|
|
super(TestRSNPKIConfig, cls).install(mh)
|
|
|
|
def test_check_pki_config(self):
|
|
check_pki_config_params(self.master)
|
|
check_pki_config_params(self.replicas[0])
|
|
check_pki_config_params(self.replicas[1])
|
|
|
|
def test_check_rsn_version(self):
|
|
tasks.kinit_admin(self.master)
|
|
res = self.master.run_command(['ipa', 'ca-find'])
|
|
assert 'RSN Version: 3' in res.stdout_text
|
|
tasks.kinit_admin(self.replicas[0])
|
|
res = self.replicas[0].run_command(['ipa', 'ca-find'])
|
|
assert 'RSN Version: 3' in res.stdout_text
|
|
|
|
|
|
class TestRSNVault(TestInstallKRA):
|
|
random_serial = True
|
|
|
|
@classmethod
|
|
def install(cls, mh):
|
|
if not pki_supports_RSNv3(mh.master):
|
|
raise pytest.skip("RSNv3 not supported")
|
|
super(TestRSNVault, cls).install(mh)
|