Recent regression in CSR creation with generic extensions data for external signing, caused by Dogtag python3 incompatibility, was not picked up.
We require an integration test that perform ipa-server-install --external-ca --external-ca-type=ms-cs and checks that the resulting CSR contains the correct extension data. Similarly for the more complex specification of a specific external profile via --external-ca-profile=yadayada.
ipa-server-install --external-ca --external-ca-type=ms-cs
--external-ca-profile=yadayada
The installation need not be completed (though it would not hurt). It is sufficient to check that Step 1 completes without error and the CSR contains the expected data.
Metadata Update from @cheimes: - Issue assigned to cheimes
Metadata Update from @cheimes: - Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/2825
master:
ipa-4-7:
Bonus PR: https://github.com/freeipa/freeipa/pull/2852
ipa-4-8:
Metadata Update from @abbra: - Issue close_status updated to: fixed - Issue status updated to: Closed (was: Open)
Login to comment on this ticket.