#9379 Test failure in test_ipa_cert_fix.py::TestCertFixReplica::test_renew_expired_cert_replica
Closed: fixed 10 months ago by frenaud. Opened a year ago by frenaud.

The nightly test test_ipa_cert_fix.py::TestCertFixReplica::test_renew_expired_cert_replica is failing on fedora 38 + updates-testing repo enabled, see for instance PR #2655 with the following logs and report.

Test scenario:

  • install server and replica
  • advance date so that the certificates expire on master and replica
  • on the master:
    • wait until getcert list return a status CA_UNREACHEABLE for all certs
    • renew the expired certs with ipa-cert-fix
    • wait until getcert list returns a status MONITORING for all certs
  • on the replica:
    • wait until Server-Cert cert-pki-ca is in status CA_UNREACHABLE
    • store the initial expiry date (to be able later to compare with the renewed cert)
    • wait for LDAP HTTP and PKINIT certs to get renewed
    • if needed, getcert resubmit to download the shared certs
    • run ipa-cert-fix to renew Server-Cert cert-pki-ca
    • wait for the cert to reach the MONITORING state

The test failure happens when the test is waiting for the replica's Server-Cert cert-pki-ca to become CA_UNREACHABLE. In the logs we can see that the tracking request is already in GENERATING_CSR.


Metadata Update from @frenaud:
- Issue assigned to frenaud

a year ago

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/6830

a year ago

Metadata Update from @frenaud:
- Custom field on_review reset (from https://github.com/freeipa/freeipa/pull/6830)

a year ago

master:

  • 496e3ac ipatests: restart ipa services after moving date

ipa-4-9:

  • 4fc28ed ipatests: restart ipa services after moving date

ipa-4-11:

  • 9c10d7e ipatests: restart ipa services after moving date

ipa-4-10:

  • 2bbfd14 ipatests: restart ipa services after moving date

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

10 months ago

Log in to comment on this ticket.

Metadata