Imported Debian patch 4.7.2-3
This commit is contained in:
committed by
Mario Fetka
parent
27edeba051
commit
8bc559c5a1
@@ -1,42 +0,0 @@
|
||||
#
|
||||
# Copyright (C) 2019 FreeIPA Contributors see COPYING for license
|
||||
#
|
||||
"""Test cases for PKI config overrides
|
||||
"""
|
||||
from __future__ import absolute_import
|
||||
|
||||
from cryptography.hazmat.primitives import hashes
|
||||
|
||||
from ipalib.x509 import load_pem_x509_certificate
|
||||
from ipaplatform.paths import paths
|
||||
from ipatests.test_integration.base import IntegrationTest
|
||||
from ipatests.pytest_ipa.integration import tasks
|
||||
|
||||
|
||||
KEY_OVERRIDE = """
|
||||
[DEFAULT]
|
||||
ipa_ca_key_size=4096
|
||||
ipa_ca_key_algorithm=SHA512withRSA
|
||||
ipa_ca_signing_algorithm=SHA512withRSA
|
||||
"""
|
||||
|
||||
|
||||
class TestPKIConfigOverride(IntegrationTest):
|
||||
@classmethod
|
||||
def install(cls, mh):
|
||||
pki_ini = tasks.upload_temp_contents(cls.master, KEY_OVERRIDE)
|
||||
extra_args = [
|
||||
'--pki-config-override', pki_ini,
|
||||
]
|
||||
tasks.install_master(
|
||||
cls.master, setup_dns=False, extra_args=extra_args
|
||||
)
|
||||
cls.master.run_command(['rm', '-f', pki_ini])
|
||||
|
||||
def test_cert_rsa4096(self):
|
||||
ca_pem = self.master.get_file_contents(
|
||||
paths.IPA_CA_CRT, encoding=None
|
||||
)
|
||||
cert = load_pem_x509_certificate(ca_pem)
|
||||
assert cert.public_key().key_size == 4096
|
||||
assert cert.signature_hash_algorithm.name == hashes.SHA512.name
|
||||
Reference in New Issue
Block a user