cyberark-conjur-cli
cyberark-conjur-cli copied to clipboard
Consistent test failures when run against CA signed cert configured server
Summary
We have two tests that do no pass (and should not pass) when running against a Conjur server machine/LB that has been configured with a CA signed certificate.
test_https_cli_fails_if_cert_is_bad
and test_https_cli_fails_if_cert_is_not_provided
. The reason they should not pass is because these two tests check the cert_file field of the conjurrc and with the CA signed cert flow, we do not use that field to verify certificates. Instead we verify the certificate provided by the server on each request against known CA bundles on the machine. In other words, we don't use the cert_file field contents
FYI @eladkug
Steps to Reproduce
Steps to reproduce the behavior:
-
Pack the cli and the test runner
pyinstaller -F test/util/test_runners/integrations_tests_runner.py
andpyinstaller -D ./pkg_bin/conjur
on macOS -
Run ./dist/integrations_tests_runner
--identifier test_with_process
--urlhttps://sigallb.aim-dev.conjur.net/
--account cucumber
--login admin
--password blah
--files-folder test
--cli-to-test ./dist/conjur/conjur -
See first two tests failing
Expected Results
Either fix the flow or add a filter on the tests that should be run
Reproducible
- [x] Always
- [ ] Sometimes
- [ ] Non-Reproducible