#4271 CA-less test suite always generate failures
Closed Opened by mkosek.

We need to make the expected failures as passing, maybe just raising a warning instead of failure + pointing to related ticket fixing them - #4270.

I also saw one (benign?) error in caless-create-pki call:

...
+ head -c 20 /dev/urandom
+ '[' '!' -d nssdb ']'
++ mktemp
+ csr=/tmp/tmp.5Wk7lgflI1
++ mktemp
+ crt=/tmp/tmp.U7Mnm1jFGj
+ certutil -R -d nssdb -s 'CN=unused-replica.test,OU=Bad Usage,O=Example Organization' -f /tmp/tmp.7ovXed4Hrp -z /tmp/tmp.u2GOe7obGm -o /tmp/tmp.5Wk7lgflI1 -4
Generating key.  This may take a few moments...
+ certutil -C -d nssdb -f /tmp/tmp.7ovXed4Hrp -m 5497 -i /tmp/tmp.5Wk7lgflI1 -o /tmp/tmp.U7Mnm1jFGj -t ,, -v 12 -c ca1 --keyUsage dataEncipherment,keyAgreement
+ certutil -A -d nssdb -n ca1/replica-badusage -f /tmp/tmp.7ovXed4Hrp -i /tmp/tmp.U7Mnm1jFGj -t ,, -v 12 -c ca1
certutil: could not decode certificate: SEC_ERROR_REUSED_ISSUER_AND_SERIAL: You are attempting to import a cert with the same issuer/serial as an existing cert, but that is not the same cert.

Adam, please check this one. jcholast should be able to help with second issue.

Howto for running the integration tests can be found on FreeIPA.org: http://www.freeipa.org/page/Testing#Integration_tests

master:

  • 2b171d273f3dd7b4b059d15facb0ac86fb07ca9f CA-less tests generate failure

Also pushing to ipa-3-3 as the issue is present here as well:

ipa-3-3:

  • 74355e9a0fb2e7d24599d70e36aea1d530c015d3 CA-less tests generate failure

Metadata Update from @mkosek:
- Issue assigned to amisnyov
- Issue set to the milestone: FreeIPA 3.3.6 (bug fixing)

4270 is closed as "won't fix"

Let's remove those tests

Metadata Update from @sorlov:
- Issue close_status updated to: None (was: Fixed)

master:

  • 13f20854b4fe89d52bad37bd41bab6b84fb7476b Remove obsolete tests from test_caless.py

ipa-4-7:

  • 0439537f26164f9a540083582a4f96a701ffae92 Remove obsolete tests from test_caless.py
Metadata