Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add test for ACME container with CA #4959

Merged
merged 1 commit into from
Feb 13, 2025
Merged

Add test for ACME container with CA #4959

merged 1 commit into from
Feb 13, 2025

Conversation

edewata
Copy link
Contributor

@edewata edewata commented Feb 12, 2025

A new test has been added to create a CA container and an ACME container using the CA, then run ACME tests using certbot.

The pki-acme-run script has been modified to create the /conf/acme folder to store imported config files if it doesn't exist already.

The pki-server-run script has been modified to create an NSS database and the /conf/certs folder to store imported certs if they don't exist already.

The pki-server run command has been modified to provide options to skip config upgrade and migration. The
pki-server-run script has also been modified to use these options since in general containers should not alter the config files automatically (including creating backup files). For now containers should assume that the config files are already upgraded/migrated by the admin.

The tests for basic ACME container and PKI server container have been updated to no longer expect a backup folder to be created in the /logs folder.

@edewata edewata requested a review from fmarco76 February 12, 2025 18:29
A new test has been added to create a CA container and an
ACME container using the CA, then run ACME tests using
certbot.

The pki-acme-run script has been modified to create the
/conf/acme folder to store imported config files if it
doesn't exist already.

The pki-server-run script has been modified to create an
NSS database and the /conf/certs folder to store imported
certs if they don't exist already.

The pki-server run command has been modified to provide
options to skip config upgrade and migration. The
pki-server-run script has also been modified to use these
options since in general containers should not alter the
config files automatically (including creating backup files).
For now containers should assume that the config files are
already upgraded/migrated by the admin.

The tests for basic ACME container and PKI server container
have been updated to no longer expect a backup folder to be
created in the /logs folder.
Copy link
Member

@fmarco76 fmarco76 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@edewata
Copy link
Contributor Author

edewata commented Feb 13, 2025

@fmarco76 Thanks!

@edewata edewata merged commit 150f160 into dogtagpki:master Feb 13, 2025
169 of 177 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants