We need to backport this in order to fix the SRBAC barbican 17.1. testing [1]: This patch adds enable_certificate_validation config option. This option can be used to skip tests that rely on image signature certificate validation being enabled on the test environment (test_signed_image_invalid_cert_boot_failure). [1] https://review.opendev.org/c/openstack/barbican-tempest-plugin/+/880936
The change is merged in upstream and a patch has been proposed to downstream gerrit. I'm moving this to POST.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Release of components for Red Hat OpenStack Platform 17.1 (Wallaby)), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2023:4577