71
71
-D pki_ds_url=ldap://ds.example.com:3389 \
72
72
-v
73
73
74
+ - name : Update PKI server configuration
75
+ run : |
76
+ docker exec pki dnf install -y xmlstarlet
77
+
78
+ # disable access log buffer to avoid logging delay
79
+ docker exec pki xmlstarlet edit --inplace \
80
+ -u "//Valve[@className='org.apache.catalina.valves.AccessLogValve']/@buffered" \
81
+ -v "false" \
82
+ -i "//Valve[@className='org.apache.catalina.valves.AccessLogValve' and not(@buffered)]" \
83
+ -t attr \
84
+ -n "buffered" \
85
+ -v "false" \
86
+ /etc/pki/pki-tomcat/server.xml
87
+
88
+ # restart PKI server
89
+ docker exec pki pki-server restart --wait
90
+
74
91
- name : Install TKS
75
92
run : |
76
93
docker exec pki pkispawn \
@@ -103,7 +120,7 @@ jobs:
103
120
104
121
docker exec pki pki -n caadmin tps-user-show tpsadmin
105
122
106
- - name : Set up TPS authentication
123
+ - name : Update TPS configuration
107
124
run : |
108
125
# import sample TPS users
109
126
docker exec pki ldapadd \
@@ -122,6 +139,11 @@ jobs:
122
139
auths.instance.ldap1.ldap.basedn \
123
140
ou=people,dc=example,dc=com
124
141
142
+ # allow token enrollment
143
+ # https://github.com/dogtagpki/pki/commit/847ddbc9e146603d11e917609411fde03e301778
144
+ docker exec pki pki-server tps-config-set \
145
+ channel.scp01.no.le.byte true
146
+
125
147
# restart TPS subsystem
126
148
docker exec pki pki-server tps-redeploy --wait
127
149
@@ -191,6 +213,11 @@ jobs:
191
213
run : |
192
214
docker exec pki journalctl -x --no-pager -u pki-tomcatd@pki-tomcat.service
193
215
216
+ - name : Check PKI server access log
217
+ if : always()
218
+ run : |
219
+ docker exec pki find /var/log/pki/pki-tomcat -name "localhost_access_log.*" -exec cat {} \;
220
+
194
221
- name : Check CA debug log
195
222
if : always()
196
223
run : |
@@ -205,17 +232,3 @@ jobs:
205
232
if : always()
206
233
run : |
207
234
docker exec pki find /var/lib/pki/pki-tomcat/logs/tps -name "debug.*" -exec cat {} \;
208
-
209
- - name : Gather artifacts
210
- if : always()
211
- run : |
212
- tests/bin/ds-artifacts-save.sh ds
213
- tests/bin/pki-artifacts-save.sh pki
214
- continue-on-error : true
215
-
216
- - name : Upload artifacts
217
- if : always()
218
- uses : actions/upload-artifact@v4
219
- with :
220
- name : pki-tps-test
221
- path : /tmp/artifacts
0 commit comments