b8ece64 ipatests: add a test for ipa-cert-fix

Authored and Committed by frenaud 3 years ago
    ipatests: add a test for ipa-cert-fix
    
    Add a new test for ipa-cert-fix issue 8618. When the CSR for one
    of the certs to be renewed is missing from /etc/pki/pki-tomcat/{ca|kra}/CS.cfg
    ipa-cert-fix fails to renew the certificates.
    
    Test scenario:
    move the date in the future to expire PKI system certificates (+3 years)
    delete the directive ca.sslserver.certreq from CS.cfg
    call ipa-cert-fix and ensure that the CSR was found
    
    Related: https://pagure.io/freeipa/issue/8618
    
    Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
    Reviewed-By: Rob Crittenden <rcritten@redhat.com>