freeipa

#6309 cert-request does not raise error when CSR does not match profile pattern
Closed: Fixed Opened by ftweedal.

Closed: Fixed
Reopen Issue

The test case test_caacl_profile_enforcement.py::TestSignWithChangedProfile
is supposed to catch a CertificateOperationError raised in response to
Dogtag rejecting a cert request due to Subject DN in CSR not matching
expectations of profile.

Commit 4c35afccf3cf3a5176e598872c4fcff80b416335, part of #6260, broke
this behaviour - the cert request command runs without error even though
Dogtag does not issue the cert.

master:

  • 1f1c93d2b5023f8d491252c605dbcf05c8ecc7e3 cert-request: raise error when request fails

ipa-4-4:

  • a7de75808c79186f72c4a32bd04434639fa947fd cert-request: raise error when request fails

Metadata Update from @ftweedal:
- Issue assigned to someone
- Issue set to the milestone: FreeIPA 4.4.2
Metadata
None
None
None
Normal
defect
IPA
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.