bump

grindsa · Dec 20, 2024 · 1a5148f · 1a5148f
1 parent b50013d
commit 1a5148f
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/.github/workflows/ca_handler_tests_est.yml b/.github/workflows/ca_handler_tests_est.yml
@@ -41,6 +41,7 @@ jobs:
         sudo echo "est_password: estpwd" >> examples/Docker/data/acme_srv.cfg
         sudo echo "ca_bundle: False" >> examples/Docker/data/acme_srv.cfg
         sudo echo "request_timeout: 30" >> examples/Docker/data/acme_srv.cfg
+        sudo echo "allowed_domainlist: [\"bar.local\", \"*.acme\"]" >> examples/Docker/data/acme_srv.cfg
         sudo sed -i "s/revocation_reason_check_disable: False/revocation_reason_check_disable: False\nenrollment_timeout: 40/g" examples/Docker/data/acme_srv.cfg
         cd examples/Docker/
         docker-compose restart
@@ -51,6 +52,12 @@ jobs:
         REVOCATION: "false"
         VERIFY_CERT: "false"
         USE_CERTBOT: "false"
+        TEST_ADL: "true"
+
+    - name: "Verify allowed_domainlist error"
+      run: |
+        cd examples/Docker
+        docker-compose logs | grep "allowed_domainlist" | grep -i "either CN or SANs are not allowed by configuration"
 
     - name: "Check container configuration"
       uses: ./.github/actions/container_check
@@ -104,6 +111,7 @@ jobs:
         sudo echo "est_password: estpwd" >> data/acme_srv.cfg
         sudo echo "ca_bundle: False" >> data/acme_srv.cfg
         sudo echo "request_timeout: 30" >> data/acme_srv.cfg
+        sudo echo "allowed_domainlist: [\"bar.local\", \"*.acme\"]" >> data/acme_srv.cfg
         sudo sed -i "s/revocation_reason_check_disable: False/revocation_reason_check_disable: False\nenrollment_timeout: 40/g" data/acme_srv.cfg
 
     - name: "Execute install scipt"
@@ -116,6 +124,11 @@ jobs:
         REVOCATION: "false"
         VERIFY_CERT: "false"
         USE_CERTBOT: "false"
+        TEST_ADL: "true"
+
+    - name: "Verify allowed_domainlist error"
+      run: |
+        docker exec acme-srv grep -i "either CN or SANs are not allowed by configuration" /var/log/messages
 
     - name: "[ * ] collecting test logs"
       if: ${{ failure() }}