freeipa

#9993 Nightly test failure in test_integration/test_installation.py::TestInstallwithSHA384withRSA::test_install_master_withalgo_sha384withrsa
Opened by frenaud. Modified

Open
Close Issue

Issue

The nightly test test_integration/test_installation.py::TestInstallwithSHA384withRSA::test_install_master_withalgo_sha384withrsa started failing after the commit of PR #8240 Add support for IPA replicas with ML-DSA

Steps to Reproduce

  1. install ipa server with a different signing algorithm: ipa-server-install .. --ca-signing-algorithm=SHA384withRSA
  2. check the signing algorithm of 389ds server cert with certutil -L -d /etc/dirsrv/slapd-IPA-TEST/ -n 'Server-Cert'

Actual behavior

The output displays:

        Signature Algorithm: PKCS #1 SHA-256 With RSA Encryption

Expected behavior

The certutil command should display:

        Signature Algorithm: PKCS #1 SHA-384 With RSA Encryption

Version/Release/Distribution

freeipa-server-4.14.0.dev202605121751+git564db1017-0.fc44.x86_64

Additional info:

Logs available in https://ARTIFACTS_SERVER/idm-ci/freeipa_upstream_nightly/Nightly-latest-testing-repo-selinux/master/2026-05-13_17-58/latest-testing-repo-selinux/test_installation_TestInstallwithSHA384withRSA/1/report.html?sort=result

@rcritten could you have a look? the option --ca-signing-algorithm=SHA384withRSA is ignored by ipa-server-install

Metadata Update from @rcritten:
- Issue assigned to rcritten
Metadata

test-failure

None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.