diff options
| author | Florence Blanc-Renaud <flo@redhat.com> | 2016-10-25 08:49:10 +0200 |
|---|---|---|
| committer | David Kupka <dkupka@redhat.com> | 2016-11-10 14:15:57 +0100 |
| commit | 808b1436b4158cb6f926ac2b5bd0979df6ea7e9f (patch) | |
| tree | 16d163b00306d976c4f4dcec66a69b6316c080bf /ipatests | |
| parent | 7462adec13c5b25b6868d2863dc38062c97d0ff7 (diff) | |
| download | freeipa-808b1436b4158cb6f926ac2b5bd0979df6ea7e9f.tar.gz freeipa-808b1436b4158cb6f926ac2b5bd0979df6ea7e9f.tar.xz freeipa-808b1436b4158cb6f926ac2b5bd0979df6ea7e9f.zip | |
Refactor installer code requesting certificates
- Temporary modify certmonger dogtag-ipa-ca-renew helper to request the IPA RA
agent cert, using the temp cert created during pkispawn. The cert request
is now processed through certmonger, and the helper arguments are restored
once the agent cert is obtained.
- Modify the installer code creating HTTP and LDAP certificates to use
certmonger's IPA helper with temporary parameters (calling dogtag-submit
instead of ipa-submit)
- Clean-up for the integration tests: sometimes ipa renewal.lock is not
released during ipa-server-uninstall. Make sure that the file is removed
to allow future installations.
https://fedorahosted.org/freeipa/ticket/6433
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>
Diffstat (limited to 'ipatests')
| -rw-r--r-- | ipatests/test_integration/tasks.py | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/ipatests/test_integration/tasks.py b/ipatests/test_integration/tasks.py index df5e40891..4412c14f2 100644 --- a/ipatests/test_integration/tasks.py +++ b/ipatests/test_integration/tasks.py @@ -688,6 +688,7 @@ def uninstall_master(host, ignore_topology_disconnect=True, paths.SYSCONFIG_PKI_TOMCAT_PKI_TOMCAT_DIR, paths.VAR_LIB_PKI_TOMCAT_DIR, paths.PKI_TOMCAT, + paths.IPA_RENEWAL_LOCK, paths.REPLICA_INFO_GPG_TEMPLATE % host.hostname], raiseonerr=False) host.run_command("find /var/lib/sss/keytabs -name '*.keytab' | " |