#6741 Winsync agreement with a self signed cert with cacert option passes
Closed: worksforme Opened by sumenon.

Steps:
1. Install IPA Server on RHEL7.3
2. Try to setup replication with Windows AD using self signed cert and cacert option.
3. Install IPA Server in RHEL7.4
4. Try to setup replication with Windows AD using self signed cert and cacert option.

Actual Result:
2. Displays the below message in the beaker run
'TLS error -8179:Peer's Certificate issuer is not recognized
Failed to setup winsync replication

  1. Winsync replication is setup in this case.

Expected Result:
4. Winsync replication should fail with the below message
'TLS error -8179:Peer's Certificate issuer is not recognized
Failed to setup winsync replication

Log File Attached.

log.txt


This might be related to #5695 - the error message looks like it's coming from NSS, but we switched from NSS to OpenSSL in #5695.

Metadata Update from @pvoborni:
- Issue private status set to: False (was: True)

The test passed correctly with ipa-server-4.5.0-6.el7.x86_64 on 2017-04-21. Therefore closing as works for me.

Metadata Update from @pvoborni:
- Issue close_status updated to: worksforme
- Issue status updated to: Closed (was: Open)

Metadata