freeipa

#9888 Nightly test failure in test_integration/test_ipa_cert_fix.py::TestIpaCertFix::test_expired_CA_cert::teardown
Closed: fixed by frenaud. Opened by frenaud.

Closed: fixed
Reopen Issue

Issue

The nightly test test_integration/test_ipa_cert_fix.py::TestIpaCertFix::test_expired_CA_cert::teardown is failing in rawhide with the following error:

RUN ['ipa-server-install', '--uninstall', '-U', '--ignore-topology-disconnect', '--ignore-last-of-role']
Getting PKI server info from /pki/v2/info
Forcing removal of master.ufreeipa.test
Ignoring topology connectivity errors.
Failed to remove server from security domain: HTTPSConnectionPool(host='master.ufreeipa.test', port=443): Max retries exceeded with url: /ca/rest/account/login (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:1077)')))
Failed to cleanup master.ufreeipa.test DNS entries: no such entry
You may need to manually remove them from the tree
-----------------------------------------
Deleted IPA server "master.ufreeipa.test"
-----------------------------------------
Unconfiguring ACME
org.freedesktop.DBus.Error.NoReply: Did not receive a reply. Possible causes include: the remote application did not send a reply, the message bus security policy blocked the reply, the reply timeout expired, or the network connection was broken.
The ipa-server-install command failed. See /var/log/ipaserver-uninstall.log for more information
Exit code: 1

Example of run in https://$ARTIFACT_SERVER/idm-ci/freeipa_upstream_nightly/Nightly-rawhide/master/2025-11-29_19-30/rawhide/test_cert_fix/3/report.html?sort=result

Steps to Reproduce

The test is moving the date in the future to simulate CA certificate expiration, then uninstalls the server. If certmonger is working, the uninstaller may fail with a Dbus Exception.

The test can be fixed with the same strategy as other tests changing the date: stop certmonger and remove the tracking requests before uninstallation.

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/8040

master:

  • 443aff6a0ae4bc35ceb7a4adc06c9b7bb2704743 ipatests: fix teardown of TestIpaCertFix

ipa-4-12:

  • d31decb35e862e4a47142c1c39dd69301c9cfb97 ipatests: fix teardown of TestIpaCertFix

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata

test-failure tests

None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.