74c854d38c
- ipatests: ignore nsslapd-accesslog-logbuffering WARN in healthcheck - ipatests: Skip ds_encryption tests on RHEL9 SUT. - adtrustinstance: make sure NetBIOS name defaults are set properly - ipatests: wait for replica update in test_dns_locations - ipapython: Clean up krb5_error - ipapython: Correct return type of krb5_free_cred_contents - ipapython: Propagate KRB5Error exceptions on iterating ccache - ipa-kdb: Fix memory leak during PAC verification - sidgen: ignore staged users when generating SIDs - sidgen: fix missing prototypes - kdb: PAC generator: do not fail if canonical principal is missing - ipatests: fix tasks.wait_for_replication method - ipa-kdb: Rework ipadb_reinit_mspac() - ipa-kdb: Fix double free in ipadb_reinit_mspac()
45 lines
1.6 KiB
Diff
45 lines
1.6 KiB
Diff
From 96dd277ad960f57c36c38820a7b0542c97f9e67d Mon Sep 17 00:00:00 2001
|
|
From: Sudhir Menon <sumenon@redhat.com>
|
|
Date: Jan 11 2024 22:26:57 +0000
|
|
Subject: ipatests: Skip ds_encryption tests on RHEL9 SUT.
|
|
|
|
|
|
test_ipahealthcheck_ds_encryption tests are failing
|
|
in RHEL9 SUT because in this test tls protocol version
|
|
is set to TLS1.0 using the below command, but its
|
|
reset to TLS1.2 causing the test to fail.
|
|
|
|
'dsconf', 'slapd-TESTREALM-TEST', 'security', 'set', '--tls-protocol-min=TLS1.0'
|
|
|
|
Hence the test is skipped to be run on RHEL9.0 SUT.
|
|
|
|
Signed-off-by: Sudhir Menon <sumenon@redhat.com>
|
|
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
|
|
|
|
---
|
|
|
|
diff --git a/ipatests/test_integration/test_ipahealthcheck.py b/ipatests/test_integration/test_ipahealthcheck.py
|
|
index 785e9ab..40c8489 100644
|
|
--- a/ipatests/test_integration/test_ipahealthcheck.py
|
|
+++ b/ipatests/test_integration/test_ipahealthcheck.py
|
|
@@ -158,7 +158,6 @@ TOMCAT_CONFIG_FILES = (
|
|
paths.CA_CS_CFG_PATH,
|
|
)
|
|
|
|
-
|
|
def run_healthcheck(host, source=None, check=None, output_type="json",
|
|
failures_only=False, config=None):
|
|
"""
|
|
@@ -1262,6 +1261,10 @@ class TestIpaHealthCheck(IntegrationTest):
|
|
)
|
|
self.master.run_command(cmd)
|
|
|
|
+ @pytest.mark.skipif((osinfo.id == 'rhel'
|
|
+ and osinfo.version_number >= (9,0)),
|
|
+ reason=" TLS versions below 1.2 are not "
|
|
+ "supported anymore in RHEL9.0 and above.")
|
|
def test_ipahealthcheck_ds_encryption(self, modify_tls):
|
|
"""
|
|
This testcase modifies the default TLS version of
|
|
|