bbecb6
From 36cba23f3f671886f5e7fa310c25a6e500c76e0b Mon Sep 17 00:00:00 2001
bbecb6
From: Florence Blanc-Renaud <flo@redhat.com>
bbecb6
Date: Mon, 16 Jan 2023 09:31:57 +0100
bbecb6
Subject: [PATCH] Tests: force key type in ACME tests
bbecb6
bbecb6
PKI can issue ACME certs only when the key type is rsa.
bbecb6
bbecb6
With version 2.0.0, certbot defaults to ecdsa key type,
bbecb6
and this causes test failures.
bbecb6
For now, force rsa when requesting an ACME certificate.
bbecb6
This change can be reverted when PKI fixes the issue
bbecb6
on their side (https://github.com/dogtagpki/pki/issues/4273)
bbecb6
bbecb6
Related: https://pagure.io/freeipa/issue/9298
bbecb6
Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
bbecb6
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
bbecb6
---
bbecb6
 ipatests/test_integration/test_acme.py | 2 ++
bbecb6
 1 file changed, 2 insertions(+)
bbecb6
bbecb6
diff --git a/ipatests/test_integration/test_acme.py b/ipatests/test_integration/test_acme.py
bbecb6
index a30f2fc756783c0a5c28ecf32c1e40f422c47a19..15d7543cfb0fa0fcb921166f7cd8f13d0535a41d 100644
bbecb6
--- a/ipatests/test_integration/test_acme.py
bbecb6
+++ b/ipatests/test_integration/test_acme.py
bbecb6
@@ -131,6 +131,7 @@ def certbot_standalone_cert(host, acme_server):
bbecb6
             'certonly',
bbecb6
             '--domain', host.hostname,
bbecb6
             '--standalone',
bbecb6
+            '--key-type', 'rsa',
bbecb6
         ]
bbecb6
     )
bbecb6
 
bbecb6
@@ -305,6 +306,7 @@ class TestACME(CALessBase):
bbecb6
             '--manual-public-ip-logging-ok',
bbecb6
             '--manual-auth-hook', CERTBOT_DNS_IPA_SCRIPT,
bbecb6
             '--manual-cleanup-hook', CERTBOT_DNS_IPA_SCRIPT,
bbecb6
+            '--key-type', 'rsa',
bbecb6
         ])
bbecb6
 
bbecb6
     ##############
bbecb6
-- 
bbecb6
2.39.1
bbecb6