From b1451b34601df65914721fb0b1c539dec43d0425 Mon Sep 17 00:00:00 2001 From: Giorgos Drosos <56369797+gdrosos@users.noreply.github.com> Date: Tue, 25 Mar 2025 20:30:28 +0100 Subject: [PATCH] Skip openssh_cert test on Rocky Linux 9+ due to SHA-1 restrictions (#856) * Make openssh_cert second algorithm tests compatible with Rocky * Fix typo * Merge conditions Co-authored-by: Felix Fontein --------- Co-authored-by: Felix Fontein --- .../targets/openssh_cert/tests/key_idempotency.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tests/integration/targets/openssh_cert/tests/key_idempotency.yml b/tests/integration/targets/openssh_cert/tests/key_idempotency.yml index 71bef854..f0ff9955 100644 --- a/tests/integration/targets/openssh_cert/tests/key_idempotency.yml +++ b/tests/integration/targets/openssh_cert/tests/key_idempotency.yml @@ -74,10 +74,10 @@ assert: that: - second_signature_algorithm is changed - # RHEL9 and Fedora 41 disable the SHA-1 algorithms by default, making this test fail with a 'libcrypt' error. + # RHEL9, Fedora 41 and Rocky 9 disable the SHA-1 algorithms by default, making this test fail with a 'libcrypt' error. # Other systems which impose a similar restriction may also need to skip this block in the future. when: - - not (ansible_facts['distribution'] == "RedHat" and (ansible_facts['distribution_major_version'] | int) >= 9) + - not (ansible_facts['distribution'] in ["RedHat", "Rocky"] and (ansible_facts['distribution_major_version'] | int) >= 9) - not (ansible_facts['distribution'] == "Fedora" and (ansible_facts['distribution_major_version'] | int) >= 41) - name: Omit signature algorithm