Commit - freeipa - f9b22283dd2160ec073e93df9b52ef6b47d6c335

freeipa

`f9b2228` add test for external CA key size sanity check

3 files Authored by ftweedal 4 years ago, Committed by abbra 4 years ago,

raw patch tree parent

3 files changed. 20 lines added. 5 lines removed.

ipatests/create_external_ca.py

file modified

+4 -3

ipatests/pytest_ipa/integration/tasks.py

file modified

+3 -2

ipatests/test_integration/test_external_ca.py

file modified

+13 -0

    add test for external CA key size sanity check
    
    We recently added validation of externally-signed CA certificate to
    ensure certificates signed by external CAs with too-small keys
    (according to system crypto policy) are rejected.
    
    Add an integration test that attempts to renew with a 1024-bit
    external CA, and asserts failure.
    
    Part of: https://pagure.io/freeipa/issue/7761
    
    Reviewed-By: Christian Heimes <cheimes@redhat.com>

ipatests/create_external_ca.py

file modified

+4 -3

ipatests/pytest_ipa/integration/tasks.py

file modified

+3 -2

ipatests/test_integration/test_external_ca.py

file modified

+13 -0

freeipa

Source Code

f9b2228 add test for external CA key size sanity check

3 files Authored by ftweedal 4 years ago, Committed by abbra 4 years ago,

`f9b2228` add test for external CA key size sanity check