freeipa.git/ipatests/test_integration/scripts, branch webui_isolate FreeIPA patches tests: Added generation of missing certs 2016-09-22T13:20:42+00:00 Oleg Fayans ofayans@redhat.com 2016-09-07T14:05:18+00:00 0c635686ddc6dbba54285a9c7844e12342083b9b test_ca_server_cert and test_unknown_ca required 2 more certs that were not pre-generated Reviewed-By: David Kupka <dkupka@redhat.com> 
test_ca_server_cert and test_unknown_ca required 2 more certs that were not
pre-generated

Reviewed-By: David Kupka <dkupka@redhat.com>
tests: Added basic constraints extension to the CA certs 2016-09-22T13:20:42+00:00 Oleg Fayans ofayans@redhat.com 2016-09-07T07:52:33+00:00 2f6ffa326adb4d4e9152463ffa733d559f7be2af The IPA installer refuses to accept certs signed with a CA-signature that does not have basic constraints enabled (Described in RFC 5280) Reviewed-By: David Kupka <dkupka@redhat.com> 
The IPA installer refuses to accept certs signed with a CA-signature that does
not have basic constraints enabled (Described in RFC 5280)

Reviewed-By: David Kupka <dkupka@redhat.com>
CA-less tests: Use sequential certificate serial numbers 2014-04-10T10:05:26+00:00 Petr Viktorin pviktori@redhat.com 2014-01-23T12:08:04+00:00 85b8d8d5aeda0bedfab55a4a0e6d15ddc865d59f When serial numbers were generated with $RANDOM, there could be collisions. Use sequential numbers instead. Reviewed-By: Adam Misnyovszki <amisnyov@redhat.com> 
When serial numbers were generated with $RANDOM, there
could be collisions.
Use sequential numbers instead.

Reviewed-By: Adam Misnyovszki <amisnyov@redhat.com>
Add CA-less install tests 2013-08-28T18:14:46+00:00 Petr Viktorin pviktori@redhat.com 2013-06-12T00:25:56+00:00 9b200c7c728604018bc56638a3d5e86c29d69099 Differences from the test plan at http://www.freeipa.org/index.php?title=V3/CA-less_install&oldid=6669 are: - The following tests are included in all applicable positive install tests, rather than being standalone test cases: - Verify CA certificate stored in LDAP - Verify CA PEM file created by IPA server install - Verify that IPA server install does not configure certmonger - Verify CA PEM file created by IPA replica install - Verify that IPA replica install does not configure certmonger - Verify CA PEM file created by IPA client install - PKI setup is done only once for each test class - Master installation is done once for the IPA command tests, and once for the certinstall tests - Certificates are compared after base64 decoding to avoid failures from formatting mismatches - Minor changes necessary for automation (e.g. adding --unattended and --password options, correcting error messages) - Web UI tests are not included here https://fedorahosted.org/freeipa/ticket/3830 
Differences from the test plan at
http://www.freeipa.org/index.php?title=V3/CA-less_install&oldid=6669 are:
- The following tests are included in all applicable positive
  install tests, rather than being standalone test cases:
  - Verify CA certificate stored in LDAP
  - Verify CA PEM file created by IPA server install
  - Verify that IPA server install does not configure certmonger
  - Verify CA PEM file created by IPA replica install
  - Verify that IPA replica install does not configure certmonger
  - Verify CA PEM file created by IPA client install
- PKI setup is done only once for each test class
- Master installation is done once for the IPA command tests, and
  once for the certinstall tests
- Certificates are compared after base64 decoding to avoid failures
  from formatting mismatches
- Minor changes necessary for automation (e.g. adding --unattended
  and --password options, correcting error messages)
- Web UI tests are not included here

https://fedorahosted.org/freeipa/ticket/3830