summaryrefslogtreecommitdiffstats
path: root/ipatests/test_integration/test_dnssec.py
diff options
context:
space:
mode:
authorAlexander Bokovoy <abokovoy@redhat.com>2019-08-21 16:25:31 +0300
committerArmando Neto <abiagion@redhat.com>2019-08-22 09:43:51 -0300
commit24c6ce27b215ce6584ef3d38bcb8cfd68af20ce6 (patch)
treeef3691a703a75995a1c42a9aac139d889b9e3f98 /ipatests/test_integration/test_dnssec.py
parent481c540000f3c6546e00a8117919e8bbe72db2f1 (diff)
downloadfreeipa-24c6ce27b215ce6584ef3d38bcb8cfd68af20ce6.tar.gz
freeipa-24c6ce27b215ce6584ef3d38bcb8cfd68af20ce6.tar.xz
freeipa-24c6ce27b215ce6584ef3d38bcb8cfd68af20ce6.zip
Mark failing test as xfail for use of python-dns make_ds method
https://github.com/rthalley/dnspython/issues/343 documents broken use of hashes in dns.dnssec.make_ds() and other python-dns methods. This is a regression introduced with python-dns 1.16. Mark the test as expecting to fail until python-dns is fixed in Fedora. Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Diffstat (limited to 'ipatests/test_integration/test_dnssec.py')
-rw-r--r--ipatests/test_integration/test_dnssec.py3
1 files changed, 3 insertions, 0 deletions
diff --git a/ipatests/test_integration/test_dnssec.py b/ipatests/test_integration/test_dnssec.py
index bf0b1746d..874eb06eb 100644
--- a/ipatests/test_integration/test_dnssec.py
+++ b/ipatests/test_integration/test_dnssec.py
@@ -11,6 +11,8 @@ import dns.dnssec
import dns.resolver
import dns.name
+import pytest
+
from ipatests.test_integration.base import IntegrationTest
from ipatests.pytest_ipa.integration import tasks
from ipatests.pytest_ipa.integration.firewall import Firewall
@@ -312,6 +314,7 @@ class TestInstallDNSSECFirst(IntegrationTest):
self.replicas[0].ip, root_zone, timeout=300
), "Zone %s is not signed (replica)" % root_zone
+ @pytest.mark.xfail(reason='dnspython issue 343', strict=False)
def test_chain_of_trust(self):
"""
Validate signed DNS records, using our own signed root zone