From e0145f6ad9eacdf6a059fd3154a377be45f584f9 Mon Sep 17 00:00:00 2001 From: Mohammad Rizwan Date: Aug 25 2023 06:54:30 +0000 Subject: ipatests: accommodate DST in ACME cert expiry There is one hour time difference between expiry of ACME cert if the certificate is issued while daylight saving is start and expires after DST ends. For 2023 daylight saving time start at Sunday 12 March and ends at Sunday 5 November. Every certificate which is expiring after November 5th will have 1 hour difference in expiry. Fix is to use 90days+2hours to expire the cert. Fixes: https://pagure.io/freeipa/issue/9428 Signed-off-by: Mohammad Rizwan Reviewed-By: Rob Crittenden --- diff --git a/ipatests/test_integration/test_acme.py b/ipatests/test_integration/test_acme.py index bc989a9..ee13eb4 100644 --- a/ipatests/test_integration/test_acme.py +++ b/ipatests/test_integration/test_acme.py @@ -604,7 +604,7 @@ def issue_and_expire_acme_cert(): # move system date to expire acme cert for host in hosts: tasks.kdestroy_all(host) - tasks.move_date(host, 'stop', '+90days+60minutes') + tasks.move_date(host, 'stop', '+90days+2hours') # restart ipa services as date moved and wait to get things settle time.sleep(10) @@ -630,7 +630,7 @@ def issue_and_expire_acme_cert(): # move back date for host in hosts: - tasks.move_date(host, 'start', '-90days-60minutes') + tasks.move_date(host, 'start', '-90days-2hours') # restart ipa services as date moved and wait to get things settle # if the internal fixture was not called (for instance because the test