Switch tests to check w/ CA that is present in GHA
@@ -130,7 +130,7 @@ class RabbitMQTLSListenerTestCase(unittest2.TestCase):
# 2. Validate server cert against other CA bundle (failure)
# CA bundle which was not used to sign the server cert
- ca_cert_path = os.path.join("/etc/ssl/certs/thawte_Primary_Root_CA.pem")
+ ca_cert_path = os.path.join("/etc/ssl/certs/SecureTrust_CA.pem")
cfg.CONF.set_override(
name="ssl_cert_reqs", override="required", group="messaging"
@@ -147,7 +147,7 @@ class RabbitMQTLSListenerTestCase(unittest2.TestCase):
self.assertRaisesRegexp(ssl.SSLError, expected_msg, connection.connect)
# 3. Validate server cert against other CA bundle (failure)
- ca_cert_path = os.path.join("/etc/ssl/certs/thawte_Primary_Root_CA.pem")
+ ca_cert_path = os.path.join("/etc/ssl/certs/SecureTrust_CA.pem")
cfg.CONF.set_override(
name="ssl_cert_reqs", override="optional", group="messaging"
@@ -165,7 +165,7 @@ class RabbitMQTLSListenerTestCase(unittest2.TestCase):
# 4. Validate server cert against other CA bundle (failure)
# We use invalid bundle but cert_reqs is none
- ca_cert_path = os.path.join("/etc/ssl/certs/thawte_Primary_Root_CA.pem")
+ ca_cert_path = os.path.join("/etc/ssl/certs/SecureTrust_CA.pem")
cfg.CONF.set_override(name="ssl_cert_reqs", override="none", group="messaging")
cfg.CONF.set_override(
