summaryrefslogtreecommitdiffstats
path: root/ipatests
diff options
context:
space:
mode:
authorFraser Tweedale <ftweedal@redhat.com>2016-06-03 14:01:49 +1000
committerJan Cholasta <jcholast@redhat.com>2016-06-06 08:58:01 +0200
commitfa149cff86a67ebfe2739df6467a6e10e47742cd (patch)
tree9887c23afd822b69b71a901cd81e3834b1ce6532 /ipatests
parent2026677635c6d4b086670cb9d8f3570bd1b95c27 (diff)
downloadfreeipa-fa149cff86a67ebfe2739df6467a6e10e47742cd.tar.gz
freeipa-fa149cff86a67ebfe2739df6467a6e10e47742cd.tar.xz
freeipa-fa149cff86a67ebfe2739df6467a6e10e47742cd.zip
Remove service and host cert issuer validation
When adding certifiates to a host or service entry, we currently check that the issuer matches the issuer DN of the IPA CA. Now that sub-CAs have been implemented, this check is no longer valid and will cause false negatives. Remove it and update call sites. Part of: https://fedorahosted.org/freeipa/ticket/4559 Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Diffstat (limited to 'ipatests')
-rw-r--r--ipatests/test_xmlrpc/xmlrpc_test.py3
1 files changed, 1 insertions, 2 deletions
diff --git a/ipatests/test_xmlrpc/xmlrpc_test.py b/ipatests/test_xmlrpc/xmlrpc_test.py
index 0e326e1fa..c3bba9abf 100644
--- a/ipatests/test_xmlrpc/xmlrpc_test.py
+++ b/ipatests/test_xmlrpc/xmlrpc_test.py
@@ -30,7 +30,6 @@ import six
from ipatests.util import assert_deepequal, Fuzzy
from ipalib import api, request, errors
-from ipalib.x509 import valid_issuer
from ipapython.version import API_VERSION
@@ -91,7 +90,7 @@ fuzzy_hash = Fuzzy('^([a-f0-9][a-f0-9]:)+[a-f0-9][a-f0-9]$', type=six.string_typ
# Matches a date, like Tue Apr 26 17:45:35 2016 UTC
fuzzy_date = Fuzzy('^[a-zA-Z]{3} [a-zA-Z]{3} \d{2} \d{2}:\d{2}:\d{2} \d{4} UTC$')
-fuzzy_issuer = Fuzzy(type=six.string_types, test=lambda issuer: valid_issuer(issuer))
+fuzzy_issuer = Fuzzy(type=six.string_types)
fuzzy_hex = Fuzzy('^0x[0-9a-fA-F]+$', type=six.string_types)