From 3edd09a8d9c86ca36e694f68abc6ed7c08475d93 Mon Sep 17 00:00:00 2001 From: Florence Blanc-Renaud Date: Fri, 15 Apr 2022 10:28:00 +0200 Subject: [PATCH] ipatests: remove test_rekey_keytype_DSA The test is calling getcert rekey -G DSA in order to rekey a certificate with a DSA key, but DSA support has been disabled in the default crypto policy, and certmonger does not support it any more (see the BZ https://bugzilla.redhat.com/show_bug.cgi?id=2066439) Remove the test as it's not relevant anymore. The rekey operation is tested anyway in other tests: - test_certmonger_rekey_keysize - test_rekey_keytype_RSA - test_rekey_request_id Fixes: https://pagure.io/freeipa/issue/9140 Reviewed-By: Mohammad Rizwan Reviewed-By: Rob Crittenden --- ipatests/test_integration/test_cert.py | 31 -------------------------- 1 file changed, 31 deletions(-) diff --git a/ipatests/test_integration/test_cert.py b/ipatests/test_integration/test_cert.py index 66e47f828..4dd1254a2 100644 --- a/ipatests/test_integration/test_cert.py +++ b/ipatests/test_integration/test_cert.py @@ -426,37 +426,6 @@ class TestCertmongerRekey(IntegrationTest): '-I', self.request_id]) assert self.request_id in result.stdout_text - def test_rekey_keytype_DSA(self, request_cert): - """Test certmonger rekey command works fine - - Test is to check if -G (keytype) with DSA fails - - related: https://bugzilla.redhat.com/show_bug.cgi?id=1249165 - """ - # rekey with RSA key type - self.master.run_command(['getcert', 'rekey', - '-i', self.request_id, - '-g', '3072', - '-G', 'DSA']) - status = tasks.wait_for_request(self.master, self.request_id, 100) - assert status == "CA_UNREACHABLE" - - # grep will return file name - req_file = self.master.run_command([ - "grep", - "-rl", - f"id={self.request_id}", - paths.CERTMONGER_REQUESTS_DIR - ]).stdout_text.strip('\n') - # look for keytpe as DSA in request file - self.master.run_command(['grep', 'DSA', req_file]) - - err_msg = 'Unable to create enrollment request: Invalid Request' - result = self.master.run_command( - ['getcert', 'list', '-i', self.request_id] - ) - assert err_msg in result.stdout_text - class TestCertmongerInterruption(IntegrationTest): num_replicas = 1