Actions
Issue #3319
closedCertificates used in unit testing are expired
Start date:
Due date:
Estimated time:
Severity:
2. Medium
Version:
Platform Release:
2.15.2
OS:
Triaged:
Yes
Groomed:
No
Sprint Candidate:
No
Tags:
Pulp 2
Sprint:
Sprint 32
Quarter:
Description
Jenkins test runs now fail due to certificate validation failures. The certificates expired on January 25, 2018.
FAIL: test_validate_certificate_pem_with_ca_chain (test_repo_cert_utils.TestCertVerify)
----------------------------------------------------------------------
Traceback (most recent call last):
File "/home/jenkins/workspace/unittest-pulp-pr/node-type/f25-np/pulp/repoauth/test/test_repo_cert_utils.py", line 448, in test_validate_certificate_pem_with_ca_chain
self.assertTrue(self.utils.validate_certificate_pem(test_cert_pem, ca_chain_pems))
AssertionError: False is not true
-------------------- >> begin captured logging << --------------------
pulp.repoauth.repo_cert_utils: INFO: Cert verification failed against 3 ca cert(s)
Current Time: <Thu Jan 25 19:27:03 2018>
Certificate to verify:
subject=</CN=Test Common Name>, issuer=</CN=Sub CA Common Name>, subject.as_hash=<717609868>, issuer.as_hash=<2829237384>, fingerprint=<D519BF4D2544AB3058AF1F44D3D074F2>, serial=<4>, version=<0>, check_ca=<0>, notBefore=<Jan 26 18:25:17 2015 GMT>, notAfter=<Jan 25 18:25:17 2018 GMT>
Using a CA Chain with 3 cert(s)
CA: subject=</CN=Root CA Common Name>, issuer=</CN=Root CA Common Name>, subject.as_hash=<2268185431>, issuer.as_hash=<2268185431>, fingerprint=<31BE5F7B00CC35F65CBA690B9E3218EA>, serial=<16780789415258943976>, version=<2>, check_ca=<1>, notBefore=<Jan 26 18:25:16 2015 GMT>, notAfter=<Jan 25 18:25:16 2018 GMT>
CA: subject=</CN=Sub CA Common Name>, issuer=</CN=Root CA Common Name>, subject.as_hash=<2829237384>, issuer.as_hash=<2268185431>, fingerprint=<0A13EB878B6EB09C0AC19C1BAAC9FA93>, serial=<4>, version=<2>, check_ca=<1>, notBefore=<Jan 26 18:25:17 2015 GMT>, notAfter=<Jan 25 18:25:17 2018 GMT>
CA: subject=</CN=Revoked CA Common Name>, issuer=</CN=Root CA Common Name>, subject.as_hash=<1623845751>, issuer.as_hash=<2268185431>, fingerprint=<739709525FDC6895282F4D67A687D686>, serial=<5>, version=<2>, check_ca=<1>, notBefore=<Jan 26 18:25:17 2015 GMT>, notAfter=<Jan 25 18:25:17 2018 GMT>
--------------------- >> end captured logging << ---------------------
======================================================================
FAIL: test_validate_certificate_pem_with_ca_chain_and_valid_cert (test_repo_cert_utils.TestCertVerify)
----------------------------------------------------------------------
Traceback (most recent call last):
File "/home/jenkins/workspace/unittest-pulp-pr/node-type/f25-np/pulp/repoauth/test/test_repo_cert_utils.py", line 468, in test_validate_certificate_pem_with_ca_chain_and_valid_cert
self.assertTrue(self.utils.validate_certificate_pem(test_cert_pem, ca_chain_pems))
AssertionError: False is not true
-------------------- >> begin captured logging << --------------------
pulp.repoauth.repo_cert_utils: INFO: Cert verification failed against 3 ca cert(s)
Current Time: <Thu Jan 25 19:27:03 2018>
Certificate to verify:
subject=</CN=Test Common Name>, issuer=</CN=Sub CA Common Name>, subject.as_hash=<717609868>, issuer.as_hash=<2829237384>, fingerprint=<D519BF4D2544AB3058AF1F44D3D074F2>, serial=<4>, version=<0>, check_ca=<0>, notBefore=<Jan 26 18:25:17 2015 GMT>, notAfter=<Jan 25 18:25:17 2018 GMT>
Using a CA Chain with 3 cert(s)
CA: subject=</CN=Root CA Common Name>, issuer=</CN=Root CA Common Name>, subject.as_hash=<2268185431>, issuer.as_hash=<2268185431>, fingerprint=<31BE5F7B00CC35F65CBA690B9E3218EA>, serial=<16780789415258943976>, version=<2>, check_ca=<1>, notBefore=<Jan 26 18:25:16 2015 GMT>, notAfter=<Jan 25 18:25:16 2018 GMT>
CA: subject=</CN=Sub CA Common Name>, issuer=</CN=Root CA Common Name>, subject.as_hash=<2829237384>, issuer.as_hash=<2268185431>, fingerprint=<0A13EB878B6EB09C0AC19C1BAAC9FA93>, serial=<4>, version=<2>, check_ca=<1>, notBefore=<Jan 26 18:25:17 2015 GMT>, notAfter=<Jan 25 18:25:17 2018 GMT>
CA: subject=</CN=Revoked CA Common Name>, issuer=</CN=Root CA Common Name>, subject.as_hash=<1623845751>, issuer.as_hash=<2268185431>, fingerprint=<739709525FDC6895282F4D67A687D686>, serial=<5>, version=<2>, check_ca=<1>, notBefore=<Jan 26 18:25:17 2015 GMT>, notAfter=<Jan 25 18:25:17 2018 GMT>
--------------------- >> end captured logging << ---------------------
Actions
Regenerated expired test certificates
closes #3319 https://pulp.plan.io/issues/3319