#7489 Test test_caless_TestCertInstall is failing in nightly
Closed: fixed Opened by rcritten.

Issue

fedora-27/test_caless_TestCertInstall is failing a test in the nightly test runs.

Summary is:

21 passed, 2 skipped, 1 failed, 0 errors, 3 expected failures, 1 unexpected passes

Failed test is:

self = <ipatests.test_integration.test_caless.TestCertInstall object at 0x7f672e48b748>
def test_anon_pkinit_with_external_CA(self):
test_dir = self.master.config.test_dir
self.prepare_cacert('ca2', filename=self.ca2_crt)
self.copy_cert(self.master, self.ca2_crt)
result = self.master.run_command(['ipa-cacert-manage', 'install',
os.path.join(test_dir, self.ca2_crt)]
)
assert result.returncode == 0
result = self.master.run_command(['ipa-certupdate'])
assert result.returncode == 0
result = self.certinstall('k', 'ca2/server-kdc',
filename=self.ca2_kdc_crt)
> assert result.returncode == 0
E       assert 1 == 0
E        +  where 1 = <pytest_multihost.transport.SSHCommand object at 0x7f672e49eb38>.returncode
/usr/lib/python3.6/site-packages/ipatests/test_integration/test_caless.py:1518: AssertionError

XPassed is:

self = <ipatests.test_integration.test_caless.TestCertInstall object at 0x7f672e48b4a8>
@pytest.mark.xfail(reason='freeipa ticket 6959')
def test_ds_intermediate_ca(self):
"Install new DS certificate issued by intermediate CA"
result = self.certinstall('d', 'ca1/subca/server')
> assert result.returncode == 0, result.stderr_text
E       AssertionError: Peer's certificate issuer is not trusted (certutil: certificate is invalid: Peer's Certificate issuer is not recognized.
E         ). Please run ipa-cacert-manage install and ipa-certupdate to install the CA certificate.
E         The ipa-server-certinstall command failed.
E         
E       assert 1 == 0
E        +  where 1 = <pytest_multihost.transport.SSHCommand object at 0x7f672c70af28>.returncode
/usr/lib/python3.6/site-packages/ipatests/test_integration/test_caless.py:1407: AssertionError

Metadata Update from @rcritten:
- Issue assigned to rcritten

Looks to be passing the wrong argument into load_pkcs12

 # ipa-server-certinstall  -p password -k ca2_kdc_crt.pem  --pin password
load_pkcs12() got an unexpected keyword argument 'realm'

In ipaserver/install/installutils.py this option is realm_name.

https://github.com/freeipa/freeipa/pull/1808

master:

  • 41352ef9388dbba408762d64b60a6a1f53048bcd Revert run_pk12util part of 807a5cbe7cc52690336c5095ec6aeeb0a4e8483c
  • 138ae4abe7d4737ae2e1c6526476b8be009178db ipa-server-certinstall failing, unknown option realm
  • 3384147ca1b69f64d197869577e39e7c056bcd51 Some PKCS#12 errors are reported with full path names
  • 4919bd9dae0222509af6ebf4f50ff7602b48c334 Remove xfail from CALes test test_http_intermediate_ca

Metadata Update from @rcritten:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

Metadata