ipatests: accommodate DST in ACME cert expiry
There is one hour time difference between expiry of ACME cert if the certificate is issued while daylight saving is start and expires after DST ends. For 2023 daylight saving time start at Sunday 12 March and ends at Sunday 5 November. Every certificate which is expiring after November 5th will have 1 hour difference in expiry. Fix is to use 90days+2hours to expire the cert. Fixes: https://pagure.io/freeipa/issue/9428 Signed-off-by: Mohammad Rizwan <myusuf@redhat.com> Reviewed-By: Rob Crittenden <rcritten@redhat.com>
This commit is contained in:
1 parent
1251c15fae
commit
8d081ce894
1 file changed
+2
-2
@@ -604,7 +604,7 @@ def issue_and_expire_acme_cert():
|
||||
# move system date to expire acme cert
|
||||
for host in hosts:
|
||||
tasks.kdestroy_all(host)
|
||||
tasks.move_date(host, 'stop', '+90days+60minutes')
|
||||
tasks.move_date(host, 'stop', '+90days+2hours')
|
||||
|
||||
# restart ipa services as date moved and wait to get things settle
|
||||
time.sleep(10)
|
||||
@@ -630,7 +630,7 @@ def issue_and_expire_acme_cert():
|
||||
|
||||
# move back date
|
||||
for host in hosts:
|
||||
tasks.move_date(host, 'start', '-90days-60minutes')
|
||||
tasks.move_date(host, 'start', '-90days-2hours')
|
||||
|
||||
# restart ipa services as date moved and wait to get things settle
|
||||
# if the internal fixture was not called (for instance because the test
|
||||
|
||||
Reference in new issue
Block a user