From f68468718c1e01df4a9180e17d7e24d961850e19 Mon Sep 17 00:00:00 2001 From: Mohammad Rizwan Date: Wed, 14 Jun 2023 17:32:02 +0530 Subject: [PATCH] ipatests: enable firewall rule for http service on acme client when system hardning done i.e in case of STIG, sometimes http challanges can't be validated by CA if port 80 is not open. This fix enable it to facilitate the communication. Signed-off-by: Mohammad Rizwan Reviewed-By: Rob Crittenden Reviewed-By: Florence Blanc-Renaud --- ipatests/test_integration/test_acme.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/ipatests/test_integration/test_acme.py b/ipatests/test_integration/test_acme.py index c69e810da70..414fae8d751 100644 --- a/ipatests/test_integration/test_acme.py +++ b/ipatests/test_integration/test_acme.py @@ -10,6 +10,7 @@ from ipalib.constants import IPA_CA_RECORD from ipatests.test_integration.base import IntegrationTest +from ipatests.pytest_ipa.integration.firewall import Firewall from ipatests.pytest_ipa.integration import tasks from ipatests.test_integration.test_caless import CALessBase, ipa_certs_cleanup from ipaplatform.osinfo import osinfo @@ -82,6 +83,9 @@ def prepare_acme_client(master, client): acme_host = f'{IPA_CA_RECORD}.{master.domain.name}' acme_server = f'https://{acme_host}/acme/directory' + # enable firewall rule on client + Firewall(client).enable_services(["http", "https"]) + # install acme client packages if not skip_certbot_tests: tasks.install_packages(client, ['certbot'])