freeipa

#7548 Need integration test for --external-ca-type=ms-cs
Closed: fixed by abbra. Opened by ftweedal.

Closed: fixed
Reopen Issue

Recent regression in CSR creation with generic extensions data for external signing,
caused by Dogtag python3 incompatibility, was not picked up.

We require an integration test that perform ipa-server-install --external-ca --external-ca-type=ms-cs and checks that the resulting CSR contains the correct extension data. Similarly for the more complex specification of a specific external profile via --external-ca-profile=yadayada.

The installation need not be completed (though it would not hurt). It is sufficient to check that Step 1 completes without error and the CSR contains the expected data.

Metadata Update from @cheimes:
- Issue assigned to cheimes

Metadata Update from @cheimes:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/2825

master:

  • 5c8c00a4b759b084b0c3bbbea2193af56d8c867a Test --external-ca-type=ms-cs

ipa-4-7:

  • 5d9822d0c31d7d3a3844363cd2a0d30e7b7dc1fa Test --external-ca-type=ms-cs

Bonus PR: https://github.com/freeipa/freeipa/pull/2852

master:

  • 130e1dc3433977f7a80aed139d29d21c5d30d558 move MSCSTemplate classes to ipalib
  • 21a9a7107a2028354c0fc15540b8f15d279e5fce install: fix --external-ca-profile option
  • 7171142aaf91d6079798d015af9862d6e5474c8c Fix use of incorrect variable
  • b15bd50e6db919279e25a8bed796df4836b845a8 Add more tests for --external-ca-profile handling
  • 80e76f094c234710ff58917e7ce4661d823c4de7 Collapse --external-ca-profile tests into single class
  • 2c8352fe8536be0e630fdb910dc90831847ad119 ci: add --external-ca-profile tests to nightly
  • 33f39d88bf0bb871e3868c827aeb335eb40f5ae3 ci: add --external-ca-profile tests to gating

ipa-4-8:

  • d0d29ccc324bb9f95bffbe3162ee5c3c61c6086a move MSCSTemplate classes to ipalib
  • e632b220798833bcd65c6b266610c800ed0914d7 install: fix --external-ca-profile option
  • 71af731b3069fa1b2c0b51a3b917b5bc4da54350 Fix use of incorrect variable
  • 83ed05725110de19a7098678274ecaaaf6a2c9c9 Add more tests for --external-ca-profile handling
  • a627df87c31e4d8399bd9fab43c0c4772ddd8955 Collapse --external-ca-profile tests into single class
  • 740964c3c47fd2cd216c233d8d9df1840eaa01ee ci: add --external-ca-profile tests to nightly
  • 011c5283cec28ea4361eff5d2ee98da9cd3db41a ci: add --external-ca-profile tests to gating

Metadata Update from @abbra:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata

tests

None
None
None
https://github.com/freeipa/freeipa/pull/2825
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.