URL: https://github.com/freeipa/freeipa/pull/1009 Author: Rezney Title: #1009: [4.5] - CAless - CAfull tests Action: opened
PR body: """ This is separate PR for CAless - CAfull test suite as it was not possible to merge from original PR due to certificate generation refactoring. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1009/head:pr1009 git checkout pr1009
From 747acb62328b2235f12ce6fec6be7c13bc4517d8 Mon Sep 17 00:00:00 2001 From: Michal Reznik <mrez...@redhat.com> Date: Mon, 28 Aug 2017 11:37:11 +0200 Subject: [PATCH 1/2] test_caless: add server_replica ca-less to ca-full test Add server_replica ca-less to ca-full test as we are currently missing one. https://pagure.io/freeipa/issue/7086 --- ipatests/test_integration/test_caless.py | 39 ++++++++++++++++++++++++++++++++ 1 file changed, 39 insertions(+) diff --git a/ipatests/test_integration/test_caless.py b/ipatests/test_integration/test_caless.py index 813294f943..12938ce523 100644 --- a/ipatests/test_integration/test_caless.py +++ b/ipatests/test_integration/test_caless.py @@ -1528,3 +1528,42 @@ def test_server_replica_install_pkinit(self): pkinit_pin=_DEFAULT) assert result.returncode == 0 self.verify_installation() + + +class TestServerReplicaCALessToCAFull(CALessBase): + """ + Test server and replica caless to cafull scenario: + Master (caless) / replica (caless) >> master (ca) / replica (ca) + """ + num_replicas = 1 + + def test_install_caless_server_replica(self): + """Install CA-less master and replica""" + + self.export_pkcs12('ca1/server') + with open(self.pem_filename, 'w') as f: + f.write(self.get_pem('ca1')) + + master = self.install_server() + assert master.returncode == 0 + + self.export_pkcs12('ca1/replica', filename='replica.p12') + + replica = self.prepare_replica() + assert replica.returncode == 0 + + def test_server_ipa_ca_install(self): + """Install CA on master""" + + ca_master = tasks.install_ca(self.master) + assert ca_master.returncode == 0 + cert_update_master = self.master.run_command(['ipa-certupdate']) + assert cert_update_master.returncode == 0 + cert_update_replica = self.replicas[0].run_command(['ipa-certupdate']) + assert cert_update_replica.returncode == 0 + + def test_replica_ipa_ca_install(self): + """Install CA on replica""" + + ca_replica = tasks.install_ca(self.replicas[0]) + assert ca_replica.returncode == 0 From b2f7ddd7c2cc9d6e96710ef3ab9888c2dd6123d3 Mon Sep 17 00:00:00 2001 From: Michal Reznik <mrez...@redhat.com> Date: Mon, 28 Aug 2017 11:42:45 +0200 Subject: [PATCH 2/2] test_caless: add replica ca-less to ca-full test (master caless) Add replica ca-less to ca-full test when master stays caless. https://pagure.io/freeipa/issue/7086 --- ipatests/test_integration/test_caless.py | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) diff --git a/ipatests/test_integration/test_caless.py b/ipatests/test_integration/test_caless.py index 12938ce523..82870d7cca 100644 --- a/ipatests/test_integration/test_caless.py +++ b/ipatests/test_integration/test_caless.py @@ -1567,3 +1567,32 @@ def test_replica_ipa_ca_install(self): ca_replica = tasks.install_ca(self.replicas[0]) assert ca_replica.returncode == 0 + + +class TestReplicaCALessToCAFull(CALessBase): + """ + Test replica caless to cafull when master stays caless scenario: + Master (caless) / replica (caless) >> replica (ca) + """ + num_replicas = 1 + + def test_install_caless_server_replica(self): + """Install CA-less master and replica""" + + self.export_pkcs12('ca1/server') + with open(self.pem_filename, 'w') as f: + f.write(self.get_pem('ca1')) + + master = self.install_server() + assert master.returncode == 0 + + self.export_pkcs12('ca1/replica', filename='replica.p12') + + replica = self.prepare_replica() + assert replica.returncode == 0 + + def test_replica_ipa_ca_install(self): + """Install CA on replica (master caless)""" + + ca_replica = tasks.install_ca(self.replicas[0]) + assert ca_replica.returncode == 0
_______________________________________________ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
