#7489 Test test_caless_TestCertInstall is failing in nightly
Closed: fixed 6 years ago Opened 6 years ago by rcritten.

Issue

fedora-27/test_caless_TestCertInstall is failing a test in the nightly test runs.

Summary is:

21 passed, 2 skipped, 1 failed, 0 errors, 3 expected failures, 1 unexpected passes

Failed test is:

self = <ipatests.test_integration.test_caless.TestCertInstall object at 0x7f672e48b748>

def test_anon_pkinit_with_external_CA(self):

test_dir = self.master.config.test_dir
self.prepare_cacert('ca2', filename=self.ca2_crt)
self.copy_cert(self.master, self.ca2_crt)

result = self.master.run_command(['ipa-cacert-manage', 'install',
os.path.join(test_dir, self.ca2_crt)]
)
assert result.returncode == 0
result = self.master.run_command(['ipa-certupdate'])
assert result.returncode == 0
result = self.certinstall('k', 'ca2/server-kdc',
filename=self.ca2_kdc_crt)
> assert result.returncode == 0
E       assert 1 == 0
E        +  where 1 = <pytest_multihost.transport.SSHCommand object at 0x7f672e49eb38>.returncode

/usr/lib/python3.6/site-packages/ipatests/test_integration/test_caless.py:1518: AssertionError

XPassed is:

self = <ipatests.test_integration.test_caless.TestCertInstall object at 0x7f672e48b4a8>

@pytest.mark.xfail(reason='freeipa ticket 6959')
def test_ds_intermediate_ca(self):
"Install new DS certificate issued by intermediate CA"

result = self.certinstall('d', 'ca1/subca/server')
> assert result.returncode == 0, result.stderr_text
E       AssertionError: Peer's certificate issuer is not trusted (certutil: certificate is invalid: Peer's Certificate issuer is not recognized.
E         ). Please run ipa-cacert-manage install and ipa-certupdate to install the CA certificate.
E         The ipa-server-certinstall command failed.
E         
E       assert 1 == 0
E        +  where 1 = <pytest_multihost.transport.SSHCommand object at 0x7f672c70af28>.returncode

/usr/lib/python3.6/site-packages/ipatests/test_integration/test_caless.py:1407: AssertionError

Metadata Update from @rcritten:
- Issue assigned to rcritten

6 years ago

Looks to be passing the wrong argument into load_pkcs12

 # ipa-server-certinstall  -p password -k ca2_kdc_crt.pem  --pin password
load_pkcs12() got an unexpected keyword argument 'realm'

In ipaserver/install/installutils.py this option is realm_name.

master:

  • 41352ef Revert run_pk12util part of 807a5cb
  • 138ae4a ipa-server-certinstall failing, unknown option realm
  • 3384147 Some PKCS#12 errors are reported with full path names
  • 4919bd9 Remove xfail from CALes test test_http_intermediate_ca

Metadata Update from @rcritten:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

6 years ago

Login to comment on this ticket.

Metadata