Test report for Trustmanager patch #3313

Setup

This test was done on the CERN certification testbed. Since there are no certified versions of trustmanager on SLC5 before this, this installation was not an upgrade, only an install.

The tests were run on vtb-generic-46. Since some glite components are required for trustmanager, and it's not a node type itself, the CREAMCE repo was used to install dependencies. The packages certified were glite-security-util-java-2.5.4-1.noarch and glite-security-trustmanager-2.5.3-2.noarch. In addition to these, installed the following packages to support the tests: tomcat5 glite-version fetch-crl and glite-yaim-core. The following config yaim functions were run: config_crl config_secure_tomcat.

Bugs

bug #41793, #18374

Tested with a rfc proxy with invalid dn, which describes the situation in the bug. The connection failed as it should have. Added tests for more rfc proxy cases into the certification test (proxy path length). Which tests the second bug.

bug #14808

This bug was tested with trustmanager's own client. It's not optimal but it was the only easily accessible client. The bug is fixed.

bug #55583

Not testing this bug since it's a bug about the build process

bug #60127

Not testing, same as bug #14808

bug #56623

created an empty CA, 1234568.0. Trustmanager correctly started, but had the following error message in the log

tomcat [main]: 2010-01-22T14:56:51.538+0100 WARN util.TrustStorage - Error loading a CA from: /etc/grid-security/certificates/12345678.0, CA not enabled. Error was: No certificates found in: /etc/grid-security/certificates/12345678.0. Added test for this in the certification tests.

Certification test

The certification test were slightly modified to work with the new test certificates from org.glite.security.test-utils. Modified versions checked into cvs. The instructions were followed. All tests passed and the output of them is attached.

Node type tests

glite-CREAM

Tested that the new trustmanager works with the cream ce (only trustmanager node type available on SLC5). Installed and configured the basic cream ce. The batch system integration was not configured properly, this was deemed unnecessary, since it is more work, and the trustmanager integration can be verified without it. glite-UI was installed and configured on another node. basic job submission and job status checking jobs were run (glite-ce-job-*), and the log was checked on the server side. The test succeeded. After that the trustmanager and util-java jar files inside the ce-cream.war were updated, to check that trustmanager is backwards compatible. The same job sumbission test was run succesfully. Log appended to the test report.

-- KalleHapponen - 22-Jan-2010