Issue #3319: Certificates used in unit testing are expired - Pulp

Actions

Send by e-mail Copy link

Issue #3319

closed

Certificates used in unit testing are expired

Added by dalley about 5 years ago. Updated almost 4 years ago.

Status:

CLOSED - CURRENTRELEASE

Priority:

Normal

Assignee:

dalley

Category:

Sprint/Milestone:

Start date:

Due date:

Estimated time:

Severity:

2. Medium

Version:

Platform Release:

2.15.2

OS:

Triaged:

Yes

Groomed:

Sprint Candidate:

Tags:

Pulp 2

Sprint:

Sprint 32

Quarter:

Description

Jenkins test runs now fail due to certificate validation failures. The certificates expired on January 25, 2018.

FAIL: test_validate_certificate_pem_with_ca_chain (test_repo_cert_utils.TestCertVerify)
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/home/jenkins/workspace/unittest-pulp-pr/node-type/f25-np/pulp/repoauth/test/test_repo_cert_utils.py", line 448, in test_validate_certificate_pem_with_ca_chain
    self.assertTrue(self.utils.validate_certificate_pem(test_cert_pem, ca_chain_pems))
AssertionError: False is not true
-------------------- >> begin captured logging << --------------------
pulp.repoauth.repo_cert_utils: INFO: Cert verification failed against 3 ca cert(s)
Current Time: <Thu Jan 25 19:27:03 2018>
Certificate to verify: 
    subject=</CN=Test Common Name>, issuer=</CN=Sub CA Common Name>, subject.as_hash=<717609868>, issuer.as_hash=<2829237384>, fingerprint=<D519BF4D2544AB3058AF1F44D3D074F2>, serial=<4>, version=<0>, check_ca=<0>, notBefore=<Jan 26 18:25:17 2015 GMT>, notAfter=<Jan 25 18:25:17 2018 GMT>
Using a CA Chain with 3 cert(s)
    CA: subject=</CN=Root CA Common Name>, issuer=</CN=Root CA Common Name>, subject.as_hash=<2268185431>, issuer.as_hash=<2268185431>, fingerprint=<31BE5F7B00CC35F65CBA690B9E3218EA>, serial=<16780789415258943976>, version=<2>, check_ca=<1>, notBefore=<Jan 26 18:25:16 2015 GMT>, notAfter=<Jan 25 18:25:16 2018 GMT>
    CA: subject=</CN=Sub CA Common Name>, issuer=</CN=Root CA Common Name>, subject.as_hash=<2829237384>, issuer.as_hash=<2268185431>, fingerprint=<0A13EB878B6EB09C0AC19C1BAAC9FA93>, serial=<4>, version=<2>, check_ca=<1>, notBefore=<Jan 26 18:25:17 2015 GMT>, notAfter=<Jan 25 18:25:17 2018 GMT>
    CA: subject=</CN=Revoked CA Common Name>, issuer=</CN=Root CA Common Name>, subject.as_hash=<1623845751>, issuer.as_hash=<2268185431>, fingerprint=<739709525FDC6895282F4D67A687D686>, serial=<5>, version=<2>, check_ca=<1>, notBefore=<Jan 26 18:25:17 2015 GMT>, notAfter=<Jan 25 18:25:17 2018 GMT>
--------------------- >> end captured logging << ---------------------

======================================================================
FAIL: test_validate_certificate_pem_with_ca_chain_and_valid_cert (test_repo_cert_utils.TestCertVerify)
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/home/jenkins/workspace/unittest-pulp-pr/node-type/f25-np/pulp/repoauth/test/test_repo_cert_utils.py", line 468, in test_validate_certificate_pem_with_ca_chain_and_valid_cert
    self.assertTrue(self.utils.validate_certificate_pem(test_cert_pem, ca_chain_pems))
AssertionError: False is not true
-------------------- >> begin captured logging << --------------------
pulp.repoauth.repo_cert_utils: INFO: Cert verification failed against 3 ca cert(s)
Current Time: <Thu Jan 25 19:27:03 2018>
Certificate to verify: 
    subject=</CN=Test Common Name>, issuer=</CN=Sub CA Common Name>, subject.as_hash=<717609868>, issuer.as_hash=<2829237384>, fingerprint=<D519BF4D2544AB3058AF1F44D3D074F2>, serial=<4>, version=<0>, check_ca=<0>, notBefore=<Jan 26 18:25:17 2015 GMT>, notAfter=<Jan 25 18:25:17 2018 GMT>
Using a CA Chain with 3 cert(s)
    CA: subject=</CN=Root CA Common Name>, issuer=</CN=Root CA Common Name>, subject.as_hash=<2268185431>, issuer.as_hash=<2268185431>, fingerprint=<31BE5F7B00CC35F65CBA690B9E3218EA>, serial=<16780789415258943976>, version=<2>, check_ca=<1>, notBefore=<Jan 26 18:25:16 2015 GMT>, notAfter=<Jan 25 18:25:16 2018 GMT>
    CA: subject=</CN=Sub CA Common Name>, issuer=</CN=Root CA Common Name>, subject.as_hash=<2829237384>, issuer.as_hash=<2268185431>, fingerprint=<0A13EB878B6EB09C0AC19C1BAAC9FA93>, serial=<4>, version=<2>, check_ca=<1>, notBefore=<Jan 26 18:25:17 2015 GMT>, notAfter=<Jan 25 18:25:17 2018 GMT>
    CA: subject=</CN=Revoked CA Common Name>, issuer=</CN=Root CA Common Name>, subject.as_hash=<1623845751>, issuer.as_hash=<2268185431>, fingerprint=<739709525FDC6895282F4D67A687D686>, serial=<5>, version=<2>, check_ca=<1>, notBefore=<Jan 26 18:25:17 2015 GMT>, notAfter=<Jan 25 18:25:17 2018 GMT>
--------------------- >> end captured logging << ---------------------