ca1's Certificate path length constraint must be at least 1 to allow issuing subCA (this needs to be fixed in ipatests/test_integration/scripts/caless-create-pki)

• test_integration/test_caless.py::TestCertinstall::test_http_intermediate_ca FAILED

  traceback >>>>>>>>>>>>>>>>>>>>>>>>>>

  self = <ipatests.test_integration.test_caless.TestCertinstall object at 0x7f6330373290>

  def test_http_intermediate_ca(self):
      "Install new HTTP certificate issued by intermediate CA"
  
      result = self.certinstall('w', 'ca1/subca/server')
  

    assert result.returncode == 0, result.stderr_text
  

  E AssertionError: Peer's certificate issuer is not trusted ((SEC_ERROR_UNKNOWN_ISSUER) Peer's Certificate issuer is not recognized.). Please run ipa-cacert-manage install and ipa-certupdate to install the CA certificate.
  E The ipa-server-certinstall command failed.
  E
  E assert 1 == 0
  E + where 1 = <pytest_multihost.transport.SSHCommand object at 0x7f6330351b10>.returncode

  test_integration/test_caless.py:1371: AssertionError

  • test_integration/test_caless.py::TestCertinstall::test_ds_intermediate_ca FAILED

  traceback >>>>>>>>>>>>>>>>>>>>>>>>>>
  self = <ipatests.test_integration.test_caless.TestCertinstall object at 0x7f6330351c50>

  def test_ds_intermediate_ca(self):
      "Install new DS certificate issued by intermediate CA"
  
      result = self.certinstall('d', 'ca1/subca/server')
  

    assert result.returncode == 0, result.stderr_text
  

  E AssertionError: Peer's certificate issuer is not trusted ((SEC_ERROR_UNKNOWN_ISSUER) Peer's Certificate issuer is not recognized.). Please run ipa-cacert-manage install and ipa-certupdate to install the CA certificate.
  E The ipa-server-certinstall command failed.
  E
  E assert 1 == 0
  E + where 1 = <pytest_multihost.transport.SSHCommand object at 0x7f6330351810>.returncode

  test_integration/test_caless.py:1377: AssertionError