Hello all,
Following test is failing:
________________________________________________________________________________
test_cert_find.test_0007_find_revocation_reason_0
________________________________________________________________________________
self = <ipatests.test_xmlrpc.test_cert_plugin.test_cert_find object at
0x7f1bf4532f90>
def test_0007_find_revocation_reason_0(self):
"""
Find all certificates with revocation reason 0
"""
res = api.Command['cert_find'](revocation_reason=0)
assert 'count' in res and res['count'] == 0
E assert ('count' in {'count': 4, 'result': ({'cacn': 'ipa',
'issuer': 'CN=Certificate
Authority,O=DOM-058-017.ABC.IDM.LAB.ENG.BRQ.REDHAT.C....BRQ.REDHAT.COM',
'revoked': True, 'serial_number': 85, ...}), 'summary': '4 certificates
matched', 'truncated': False} and 4 == 0)
test_xmlrpc/test_cert_plugin.py:302: AssertionError
======================================================================================
1 failed, 38 passed in 10.77 seconds
=======================================================================================
Steps to reproduce:
1. upgrade to pki-ca-10.3.5-6
2. run all xmlrpc_tests (ipa-run-test test_xmlrpc)
3. ipa-run-tests test_xmlrpc/test_cert_plugin.py will always fail with
error above
The curious thing is that with pki-ca-10.3.5-1, I'm not able to
reproduce this. Probably something was changed on pki-ca side.
[root@vm-058-017 ~]# ipa cert-find --revocation-reason=0
----------------------
4 certificates matched
----------------------
Issuing CA: ipa
Subject: CN=crud subca test,O=crud testing inc
Issuer: CN=Certificate
Authority,O=DOM-058-017.ABC.IDM.LAB.ENG.BRQ.REDHAT.COM
Serial number: 78
Serial number (hex): 0x4E
Status: REVOKED
Revoked: True
Issuing CA: ipa
Subject: CN=crud subca test,O=crud testing inc
Issuer: CN=Certificate
Authority,O=DOM-058-017.ABC.IDM.LAB.ENG.BRQ.REDHAT.COM
Serial number: 79
Serial number (hex): 0x4F
Status: REVOKED
Revoked: True
Issuing CA: ipa
Subject: CN=caacl test subca,O=test industries inc.
Issuer: CN=Certificate
Authority,O=DOM-058-017.ABC.IDM.LAB.ENG.BRQ.REDHAT.COM
Serial number: 80
Serial number (hex): 0x50
Status: REVOKED
Revoked: True
Issuing CA: ipa
Subject: CN=SMIME CA,O=test industries Inc.
Issuer: CN=Certificate
Authority,O=DOM-058-017.ABC.IDM.LAB.ENG.BRQ.REDHAT.COM
Serial number: 85
Serial number (hex): 0x55
Status: REVOKED
Revoked: True
----------------------------
Number of entries returned 4
----------------------------
My question is, should we update tests, or is it a bug on PKI-CA side??
I actually dont know why certificates are present there, it needs more
investigation.
Martin^2
