freeipa.git/ipatests, branch ccachesess

Store session cookie in a ccache option

2017-03-09T13:43:49+00:00

Instead of using the kernel keyring, store the session cookie within the
ccache. This way kdestroy will really wipe away all credentials.

Ticket: https://pagure.io/freeipa/issue/6661

Signed-off-by: Simo Sorce

tests: use --setup-kra in tests

2017-03-08T14:50:30+00:00

This will allow to test --setup-kra option together with
ipa-server-install in install tests

Separate installation using ipa-kra-install is already covered.

https://pagure.io/freeipa/issue/6731

Reviewed-By: Jan Cholasta 
Reviewed-By: Tomas Krizek

Add SHA256 fingerprints for certs

2017-03-07T18:52:43+00:00

https://fedorahosted.org/freeipa/ticket/6701

Reviewed-By: Pavel Vomacka 
Reviewed-By: Stanislav Laznicka

test_csrgen: adjusted comparison test scripts for CSRGenerator

2017-03-07T12:18:14+00:00

Commit ada91c2 introduced changes in "csrgen/templates/openssl_base.tmpl"
which broke the following 2 tests:

    test_CSRGenerator.test_userCert_OpenSSL
    test_CSRGenerator.test_caIPAserviceCert_OpenSSL

The tests use files caIPAserviceCert_openssl.sh and userCert_openssl.sh
as expected scripts in order to compare scripts generated by CSRGenerator.
E.g. as other parameter was introduced we are now not checking with
"if [[ $# -ne 2 ]]" but rather with if "[[ $# -lt 2 ]]".

https://pagure.io/freeipa/issue/6724

Reviewed-By: Milan Kubik 
Reviewed-By: Christian Heimes

Support for Certificate Identity Mapping

2017-03-02T14:09:42+00:00

See design http://www.freeipa.org/page/V4/Certificate_Identity_Mapping

https://fedorahosted.org/freeipa/ticket/6542

Reviewed-By: Martin Basti 
Reviewed-By: Jan Cholasta 
Reviewed-By: David Kupka

Provide basic integration tests for built-in AD trust installer

2017-03-01T14:55:45+00:00

A couple of tests were added to server/replica install integration
suite to test AD trust install w/ various combinations of other optional
components.

https://fedorahosted.org/freeipa/ticket/6630

Reviewed-By: Martin Basti 
Reviewed-By: Jan Cholasta

Remove import nss from test_ldap

2017-03-01T12:55:22+00:00

test_ldap just imported nss.nss to call nss_init_nodb(). It should be
safe to remove the call. Let's see what CI has to say.

Signed-off-by: Christian Heimes 
Reviewed-By: Martin Babinsky

test_config: fix fips_mode key in Env

2017-03-01T11:59:21+00:00

Setting fips_mode to object would fail if ipaplatform.tasks module
wasn't present.

https://fedorahosted.org/freeipa/ticket/5695

Reviewed-By: Christian Heimes

Finish port to PyCA cryptography

2017-03-01T11:51:50+00:00

* add missing default_backend
* unpad encrypted data
* use cryptography's hashes and HMAC construct
* remove hard dependency on python-nss from setup.py

Signed-off-by: Christian Heimes 
Reviewed-By: Stanislav Laznicka

Migrate OTP import script to python-cryptography

2017-03-01T11:51:50+00:00

https://fedorahosted.org/freeipa/ticket/5192

Reviewed-By: Stanislav Laznicka