Test report for Trustmanager patch #4125

Setup

This test was done on the CERN certification testbed on vtb-generic-68. It was a SLC4-32bit machine.

Since some glite components are required for trustmanager, and it's not a node type itself, the CREAMCE repo was used to install dependencies. The packages certified were glite-security-trustmanager-2.5.5-2_GL31Special.noarch.rpm and glite-security-util-java-2.8.0-1.noarch.rpm. In addition to these, installed the following packages to support the tests: tomcat5 glite-version fetch-crl and glite-yaim-core. The following config yaim functions were run: config_crl config_secure_tomcat. Because the jpackage repo was broken, the java dependencies were installed by hand.

Bugs

bug #67395: Problem with submission to CREAM with glite-security-trustmanager 2.0.6-1

Confirmed bug with glite-security-trustmanager-2.0.6-1.noarch.rpm Tested with CERN certificates against the new patched version of trustmanager and the connection worked.

Certification test

The certification tests were not run on the original unpatched versions of trustmanager, since it was too old to support a large part of the tests. The certification tests were run according to the trustmanager test plans. The only differences were that the test certificates were done on a SL5 machine, since the SLC4 openssl can not create them. The last test in client-tests+1h.sh was also slightly modified by changing the error condition text grepping. Trustmanager worked as it should, but the error message was different from what was expected.

Node type tests

glite-CREAM

Installed the production version of glite-CREAM (needed the jpackage fix) with the production versions of trustmanager and util-java. Configured it and tested that it worked (Trustmanager part, not whole job execution, no batch backends). Updated the version to the partch version and modified the configuration by removing the following from server.xml

sslCAFiles="/etc/grid-security/certificates/*.0"
crlFiles="/etc/grid-security/certificates/*.r0"

and adding

trustStoreDir="/etc/grid-security/certificates/"
crlUpdateInterval="2h"

Restarted tomcat. Reran the tests. Everything worked as it should. Upgraded CREAM to the version of patch #3898. Restarted the services and tested. Everything worked. Backported trustmanager to 2.0.6 to confirm bug #67395.

-- KalleHapponen - 08-Jun-2010