From b13b8fbb472ec24dfe35a690147e43aea363f3e4 Mon Sep 17 00:00:00 2001 From: Mohammad Rizwan Date: Mon, 21 Aug 2023 12:51:13 +0530 Subject: [PATCH] ipatests: accommodate DST in ACME cert expiry There is one hour time difference between expiry of ACME cert if the certificate is issued while daylight saving is start and expires after DST ends. For 2023 daylight saving time start at Sunday 12 March and ends at Sunday 5 November. Every certificate which is expiring after November 5th will have 1 hour difference in expiry. Fix is to use 90days+2hours to expire the cert. Fixes: https://pagure.io/freeipa/issue/9428 Signed-off-by: Mohammad Rizwan Reviewed-By: Rob Crittenden --- ipatests/test_integration/test_acme.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ipatests/test_integration/test_acme.py b/ipatests/test_integration/test_acme.py index bc989a9a2..ee13eb4a0 100644 --- a/ipatests/test_integration/test_acme.py +++ b/ipatests/test_integration/test_acme.py @@ -604,7 +604,7 @@ def issue_and_expire_acme_cert(): # move system date to expire acme cert for host in hosts: tasks.kdestroy_all(host) - tasks.move_date(host, 'stop', '+90days+60minutes') + tasks.move_date(host, 'stop', '+90days+2hours') # restart ipa services as date moved and wait to get things settle time.sleep(10) @@ -630,7 +630,7 @@ def issue_and_expire_acme_cert(): # move back date for host in hosts: - tasks.move_date(host, 'start', '-90days-60minutes') + tasks.move_date(host, 'start', '-90days-2hours') # restart ipa services as date moved and wait to get things settle # if the internal fixture was not called (for instance because the test