Hide Forgot
Description of problem: Regression causing multiple failures with automated tests because of incorrect error message. Certificate is not a user Certificate but a service certificate. :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :: [ LOG ] :: service_add_004: ipa service-add : add service for vpn with cert bytes and --force option :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: ------------------------------- Added host "dummy.testrelm.com" ------------------------------- Host name: dummy.testrelm.com Principal name: host/dummy.testrelm.com Password: False Keytab: False Managed by: dummy.testrelm.com :: [ PASS ] :: Adding dummy host with no DNS records :: [ PASS ] :: Running 'ipa service-add vpn/dummy.testrelm.com --force --certificate=wrong> /tmp/tmp.54jxy44gFx/service_add_004A.out 2>&1' :: [ FAIL ] :: File '/tmp/tmp.54jxy44gFx/service_add_004A.out' should contain 'ipa: ERROR: Certificate format error: improperly formatted DER-encoded certificate' ipa: ERROR: invalid 'usercertificate': must be binary data Version-Release number of selected component (if applicable): ipa-server-2.2.0-101.20120215T0856zgit578669d.el6.x86_64 How reproducible: always Steps to Reproduce: 1. already automated 2. 3. Actual results: ipa: ERROR: invalid 'usercertificate': must be binary data Expected results: ipa: ERROR: Certificate format error: improperly formatted DER-encoded certificate Additional info:
Upstream ticket: https://fedorahosted.org/freeipa/ticket/2403
This is not a bug. The old behavior was not consistent with the rest of the framework, because Bytes parameters (such as certificates) were handled differently than the rest of the parameters and the initial type check (which causes the "must be binary data" error) was skipped.