#7548 Need integration test for --external-ca-type=ms-cs
Closed: fixed 4 years ago by abbra. Opened 5 years ago by ftweedal.

Recent regression in CSR creation with generic extensions data for external signing,
caused by Dogtag python3 incompatibility, was not picked up.

We require an integration test that perform ipa-server-install --external-ca --external-ca-type=ms-cs and checks that the resulting CSR contains the correct extension data. Similarly for the more complex specification of a specific external profile via --external-ca-profile=yadayada.

The installation need not be completed (though it would not hurt). It is sufficient to check that Step 1 completes without error and the CSR contains the expected data.


Metadata Update from @cheimes:
- Issue assigned to cheimes

5 years ago

Metadata Update from @cheimes:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/2825

5 years ago

master:

  • 5c8c00a Test --external-ca-type=ms-cs

ipa-4-7:

  • 5d9822d Test --external-ca-type=ms-cs

master:

  • 130e1dc move MSCSTemplate classes to ipalib
  • 21a9a71 install: fix --external-ca-profile option
  • 7171142 Fix use of incorrect variable
  • b15bd50 Add more tests for --external-ca-profile handling
  • 80e76f0 Collapse --external-ca-profile tests into single class
  • 2c8352f ci: add --external-ca-profile tests to nightly
  • 33f39d8 ci: add --external-ca-profile tests to gating

ipa-4-8:

  • d0d29cc move MSCSTemplate classes to ipalib
  • e632b22 install: fix --external-ca-profile option
  • 71af731 Fix use of incorrect variable
  • 83ed057 Add more tests for --external-ca-profile handling
  • a627df8 Collapse --external-ca-profile tests into single class
  • 740964c ci: add --external-ca-profile tests to nightly
  • 011c528 ci: add --external-ca-profile tests to gating

Metadata Update from @abbra:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

4 years ago

Login to comment on this ticket.

Metadata