freeipa

#9379 Test failure in test_ipa_cert_fix.py::TestCertFixReplica::test_renew_expired_cert_replica
Closed: fixed by frenaud. Opened by frenaud.

Closed: fixed
Reopen Issue

The nightly test test_ipa_cert_fix.py::TestCertFixReplica::test_renew_expired_cert_replica is failing on fedora 38 + updates-testing repo enabled, see for instance PR #2655 with the following logs and report.

Test scenario:

  • install server and replica
  • advance date so that the certificates expire on master and replica
  • on the master:
    • wait until getcert list return a status CA_UNREACHEABLE for all certs
    • renew the expired certs with ipa-cert-fix
    • wait until getcert list returns a status MONITORING for all certs
  • on the replica:
    • wait until Server-Cert cert-pki-ca is in status CA_UNREACHABLE
    • store the initial expiry date (to be able later to compare with the renewed cert)
    • wait for LDAP HTTP and PKINIT certs to get renewed
    • if needed, getcert resubmit to download the shared certs
    • run ipa-cert-fix to renew Server-Cert cert-pki-ca
    • wait for the cert to reach the MONITORING state

The test failure happens when the test is waiting for the replica's Server-Cert cert-pki-ca to become CA_UNREACHABLE. In the logs we can see that the tracking request is already in GENERATING_CSR.

Metadata Update from @frenaud:
- Issue assigned to frenaud

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/6830

Metadata Update from @frenaud:
- Custom field on_review reset (from https://github.com/freeipa/freeipa/pull/6830)

master:

  • 496e3ace8537cc86d4faae30204105e3c1863cfd ipatests: restart ipa services after moving date

ipa-4-9:

  • 4fc28edbe6c9fee1e16d4057f4d83b7910264fdd ipatests: restart ipa services after moving date

ipa-4-11:

  • 9c10d7ee2c7a7f1f2c2643e19e3a3b8cf8a211be ipatests: restart ipa services after moving date

ipa-4-10:

  • 2bbfd1454fc69c5975826d1a3f39b301d135abb5 ipatests: restart ipa services after moving date

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata

test-failure tests

None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.